Technical Information
- '%TEMP%\1e5f6\repair.exe' (downloaded from the Internet)
- '%TEMP%\1e5f6\repair.exe' /rpext
- %TEMP%\1e5f6\repair.exe
- %ProgramFiles%\fanqianbao\app\fanqianbao\setting\fqb1.ini
- %ProgramFiles%\fanqianbao\app\fanqianbao\setting\fqb3.ini
- 'dl.###qianbb.net':80
- http://dl.###qianbb.net/repire/xiufu.exe
- DNS ASK dl.###qianbb.net