Technical Information
- '<SYSTEM32>\netsh.exe' firewall add allowedprogram "%APPDATA%\csrss.exe" "csrss.exe" ENABLE
- %APPDATA%\csrss.exe
- DNS ASK 13#####linn.hopto.org
- '%APPDATA%\csrss.exe'
- '<SYSTEM32>\netsh.exe' firewall add allowedprogram "%APPDATA%\csrss.exe" "csrss.exe" ENABLE' (with hidden window)