Technical Information
- <Current directory>\de.bat
- 'he##zy.com':80
- http://he##zy.com/lock/jm_list.txt
- DNS ASK he##zy.com
- '%WINDIR%\syswow64\cmd.exe' /c ""<Current directory>\de.bat" "' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c ""<Current directory>\de.bat" "
- '%WINDIR%\syswow64\ping.exe' -n 0.5 127.0.0.1
- '%WINDIR%\syswow64\net.exe' user administrator /active:yes
- '%WINDIR%\syswow64\net1.exe' user administrator /active:yes