Technical Information
- '<SYSTEM32>\netsh.exe' firewall add allowedprogram "%PROGRAMDATA%\svchost.exe" "svchost.exe" ENABLE
- %TEMP%\nsb293c.tmp
- %TEMP%\nsg295c.tmp\system.dll
- %APPDATA%\1337\dxwebsetup.exe
- %APPDATA%\1337\collector.nsi
- %APPDATA%\1337\makensis.exe
- %APPDATA%\1337\makensisw.exe
- %PROGRAMDATA%\svchost.exe
- %TEMP%\nsg295c.tmp\system.dll
- '%APPDATA%\1337\dxwebsetup.exe'
- '%PROGRAMDATA%\svchost.exe'
- '<SYSTEM32>\netsh.exe' firewall add allowedprogram "%PROGRAMDATA%\svchost.exe" "svchost.exe" ENABLE' (with hidden window)