Technical Information
- %WINDIR%\syswow64\cmd.exe
- <Current directory>\zj.bin
- '38.##.32.184':80
- '38.##.32.184':6721
- http://38.##.32.184/zj.bin
- '38.##.32.184':6721
- '%WINDIR%\syswow64\cmd.exe' -Puppet' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' -Puppet