Technical Information
- %WINDIR%\syswow64\dplaysvr.exe
- %WINDIR%\syswow64\cmd.exe
- <Current directory>\config.ini
- <Current directory>\post
- <Current directory>\post
- <Current directory>\post
- 'o4##2f.cn':1219
- 'o4##2f.cn':9112
- http://o4###f.cn:1219/Data/8eEsz2xNPq9ObUuGjHsOG1beTXqXlyJTSb1uh2EgxMdGMoFmTrQ2Cang2dSi4MdC1UfiHyXsPVlVc7sRuUP0Lw4am3gkpBSBoqv0PmGyuX20ThOeY6LMV132303231C4EA34D4C232C8D533CAB13434B7D63239C3EB.t...
- http://11#.##2.248.5:1219/CFBED/Tips.txt?49####
- DNS ASK o4##2f.cn
- ClassName: 'CrossFire' WindowName: ''
- '%WINDIR%\syswow64\cmd.exe' ' (with hidden window)
- '%WINDIR%\syswow64\dplaysvr.exe' ' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe'
- '%WINDIR%\syswow64\dplaysvr.exe'