search

fedmich / Malware-Research

MIT License
0 stars 0 forks source link

Blocking outbound connections of program using Firewall #5

Open fedmich opened 1 year ago

fedmich commented 1 year ago

Run this as administrator via Power shell to auto create Firewall Rules.

Note that you might need to find and change the path of exe to the actual exe in your machine.

image

fedmich commented 1 year ago

Block Cortana SearchApp.exe

netsh advfirewall firewall add rule name="Block Cortana Outbound Traffic" dir=out action=block program="%windir%\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" enable=yes profile=any

... if using Power shell

New-NetFirewallRule -DisplayName "Block Cortana Outbound Traffic" -Direction Outbound -Program "C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -Action Block