Technical Information
- <Current directory>\fb.dll
- <Current directory>\update.exe
- <Current directory>\tem.vbs
- <Current directory>\´«ææë½·þ⩶´öúêö.exe
- <Current directory>\tem.vbs
- <Current directory>\tem.vbs
- <Current directory>\update.exe
- http://ho#######9583.s343.pppf.com.cn/UpDate/%E4%BC%A0%E5%A5%87%E7%A7%81%E6%9C%8D%E6%BC%8F%E6%B4%9E%E5%8A%A9%E6%89%8B.exe
- DNS ASK ho#######9583.s343.pppf.com.cn
- '<Current directory>\update.exe'
- '%WINDIR%\syswow64\wscript.exe' "<Current directory>\tem.vbs"
- '<Current directory>\´«ææë½·þ⩶´öúêö.exe'