Technical Information
- '%WINDIR%\syswow64\netsh.exe' firewall add allowedprogram "%APPDATA%\Lovex.exe" "Lovex.exe" ENABLE
- %APPDATA%\lovex.exe
- '<LOCALNET>.1.21':1177
- 'pa###bin.com':443
- DNS ASK pa###bin.com
- '%APPDATA%\lovex.exe'
- '%WINDIR%\syswow64\netsh.exe' firewall add allowedprogram "%APPDATA%\Lovex.exe" "Lovex.exe" ENABLE' (with hidden window)