Technical Information
- %WINDIR%\syswow64\reagentc.exe
- %WINDIR%\syswow64\cmd.exe
- <Current directory>\config.ini
- <Current directory>\post
- <Current directory>\post
- <Current directory>\post
- 'o4##2f.cn':1219
- 'o4##2f.cn':9112
- http://o4###f.cn:1219/Data/A3758j1gXE1vYHQEAirMt18xvUnFVJitidJiEQR0lBhKCj1W0nM9SNCa2X6t1d0DFHKrj8Sy2gdsRx7cwzEDbgtjquGueySNhLm0Bgu0r8zNWZl32303231C4EA34D4C232C8D534CAB13136B7D63138C3EB.txt?11##...
- http://11#.##2.248.5:1219/CFBED/Tips.txt?11#####
- DNS ASK o4##2f.cn
- ClassName: 'CrossFire' WindowName: ''
- '%WINDIR%\syswow64\cmd.exe' ' (with hidden window)
- '%WINDIR%\syswow64\reagentc.exe' ' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe'
- '%WINDIR%\syswow64\reagentc.exe'