Technical Information
- %WINDIR%\syswow64\diskpart.exe
- %WINDIR%\syswow64\cmd.exe
- <Current directory>\config.ini
- <Current directory>\post
- <Current directory>\post
- <Current directory>\post
- 'o4##2f.cn':1219
- 'o4##2f.cn':9112
- http://o4###f.cn:1219/Data/fRTQocLl03lNlbzVlaGlEcRnQl1HpNnY1ytgRvmfyhUoWmeYgB50r5BsJ0fSd0ObzCa9gk5t91WTe7xDo2Ck0yXQonlZFVDv3CiPaGerKO359o2mxPH91bb32303231C4EA34D4C233C8D534CAB13434B7D63434C3EB....
- http://11#.##2.248.5:1219/CFMMB/Tips.txt?12#####
- DNS ASK o4##2f.cn
- ClassName: 'CrossFire' WindowName: ''
- '%WINDIR%\syswow64\cmd.exe' ' (with hidden window)
- '%WINDIR%\syswow64\diskpart.exe' ' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe'
- '%WINDIR%\syswow64\diskpart.exe'