1.2
低危
DACN
0.12
FACILE
1.00
IMCLNet
0.80
MFGraph
0.00
反病毒引擎
| 查杀引擎 | 查杀结果 | 查杀时间 | 查杀版本 |
|---|---|---|---|
| Alibaba | None | 20190527 | 0.3.0.5 |
| Avast | Win32:Malware-gen | 20200501 | 18.4.3895.0 |
| Baidu | None | 20190318 | 1.0.0.2 |
| CrowdStrike | win/malicious_confidence_100% (D) | 20190702 | 1.0 |
| Kingsoft | None | 20200501 | 2013.8.14.323 |
| McAfee | Upatre-FACH!56A53DDE4E9A | 20200501 | 6.0.6.653 |
| Tencent | Malware.Win32.Gencirc.10b65aff | 20200501 | 1.0.0.1 |
静态指标
可执行文件包含未知的 PE 段名称，可能指示打包器（可能是误报）
(2 个事件)
| section | |
| section | petite |
动态指标
该二进制文件可能包含加密或压缩数据，表明使用了打包工具
(2 个事件)
| section | {'name': '', 'virtual_address': '0x00001000', 'virtual_size': '0x00019000', 'size_of_data': '0x0000b200', 'entropy': 7.963276327557049} | entropy | 7.963276327557049 | description | 发现高熵的节 | |||||||||
| entropy | 0.6806781686459034 | description | 此PE文件的整体熵值较高 | |||||||||||
网络通信
与未执行 DNS 查询的主机进行通信
(1 个事件)
| host | 114.114.114.114 | |||
文件已被 VirusTotal 上 56 个反病毒引擎识别为恶意
(50 out of 56 个事件)
| ALYac | Gen:Trojan.Ipatre.1 |
| APEX | Malicious |
| AVG | Win32:Malware-gen |
| Acronis | suspicious |
| Ad-Aware | Gen:Trojan.Ipatre.1 |
| AhnLab-V3 | Trojan/Win32.Upatre.C3412065 |
| Antiy-AVL | Trojan/Win32.Dorv |
| Arcabit | Trojan.Ipatre.1 |
| Avast | Win32:Malware-gen |
| Avira | TR/Crypt.XPACK.Gen |
| BitDefender | Gen:Trojan.Ipatre.1 |
| BitDefenderTheta | Gen:NN.ZexaF.34108.fm2@auzJ9ZaG |
| Bkav | HW32.Packed. |
| Comodo | TrojWare.Win32.TrojanDownloader.Waski.FSA@5su3z8 |
| CrowdStrike | win/malicious_confidence_100% (D) |
| Cybereason | malicious.8dfb36 |
| Cylance | Unsafe |
| Cyren | W32/Upatre.IU.gen!Eldorado |
| DrWeb | Trojan.DownLoader14.13578 |
| ESET-NOD32 | a variant of Win32/Kryptik.DNJD |
| Emsisoft | Gen:Trojan.Ipatre.1 (B) |
| Endgame | malicious (high confidence) |
| F-Prot | W32/Upatre.IU.gen!Eldorado |
| F-Secure | Trojan.TR/Crypt.XPACK.Gen |
| FireEye | Generic.mg.af081f18dfb36255 |
| Fortinet | W32/Waski.A!tr |
| GData | Gen:Trojan.Ipatre.1 |
| Ikarus | Trojan.Crypt |
| Invincea | heuristic |
| Jiangmin | Trojan.Generic.dbdep |
| K7AntiVirus | Trojan ( 004c6c6a1 ) |
| K7GW | Trojan ( 004c6c6a1 ) |
| Kaspersky | HEUR:Trojan.Win32.Generic |
| MAX | malware (ai score=83) |
| Malwarebytes | Trojan.Upatre.Generic |
| MaxSecure | Trojan.Upatre.Gen |
| McAfee | Upatre-FACH!56A53DDE4E9A |
| McAfee-GW-Edition | BehavesLike.Win32.Upatre.nh |
| MicroWorld-eScan | Gen:Trojan.Ipatre.1 |
| Microsoft | TrojanDownloader:Win32/Upatre!rfn |
| NANO-Antivirus | Trojan.Win32.Agent.eluqba |
| Panda | Trj/Genetic.gen |
| Qihoo-360 | HEUR/QVM19.1.ED7C.Malware.Gen |
| Rising | Downloader.Upatre!8.B5 (TFE:dGZlOgUM7yRJK/3FEw) |
| Sangfor | Malware |
| SentinelOne | DFI - Malicious PE |
| Sophos | Troj/Agent-BDQT |
| Tencent | Malware.Win32.Gencirc.10b65aff |
| Trapmine | malicious.high.ml.score |
| TrendMicro | TROJ_UPATRE.TOMB00000005 |
二进制图像
288x288
224x224
192x192
160x160
128x128
96x96
64x64
32x32
运行截图
暂无运行截图
该样本运行过程中未生成截图
PE Compile Time
2013-03-20 13:37:04
PE Imphash
bbe0e58a50af019da15d0f4f3e85b8f2
Sections
| Name | Virtual Address | Virtual Size | Size of Raw Data | Entropy |
|---|---|---|---|---|
| 0x00001000 | 0x00019000 | 0x0000b200 | 7.963276327557049 | |
| .rsrc | 0x0001a000 | 0x00006000 | 0x00005200 | 5.470735892513655 |
| petite | 0x00020000 | 0x00000181 | 0x00000181 | 3.9400586481295217 |
Resources
| Name | Offset | Size | Language | Sub-language | File type |
|---|---|---|---|---|---|
| RT_CURSOR | 0x0001f318 | 0x00000134 | LANG_NORWEGIAN | SUBLANG_NORWEGIAN_BOKMAL | None |
| RT_CURSOR | 0x0001f318 | 0x00000134 | LANG_NORWEGIAN | SUBLANG_NORWEGIAN_BOKMAL | None |
| RT_BITMAP | 0x0001f088 | 0x000000e0 | LANG_NORWEGIAN | SUBLANG_NORWEGIAN_BOKMAL | None |
| RT_BITMAP | 0x0001f088 | 0x000000e0 | LANG_NORWEGIAN | SUBLANG_NORWEGIAN_BOKMAL | None |
| RT_BITMAP | 0x0001f088 | 0x000000e0 | LANG_NORWEGIAN | SUBLANG_NORWEGIAN_BOKMAL | None |
| RT_BITMAP | 0x0001f088 | 0x000000e0 | LANG_NORWEGIAN | SUBLANG_NORWEGIAN_BOKMAL | None |
| RT_BITMAP | 0x0001f088 | 0x000000e0 | LANG_NORWEGIAN | SUBLANG_NORWEGIAN_BOKMAL | None |
| RT_BITMAP | 0x0001f088 | 0x000000e0 | LANG_NORWEGIAN | SUBLANG_NORWEGIAN_BOKMAL | None |
| RT_BITMAP | 0x0001f088 | 0x000000e0 | LANG_NORWEGIAN | SUBLANG_NORWEGIAN_BOKMAL | None |
| RT_ICON | 0x0001a9a8 | 0x00004228 | LANG_NORWEGIAN | SUBLANG_NORWEGIAN_BOKMAL | None |
| RT_DIALOG | 0x0001f168 | 0x0000005a | LANG_NEUTRAL | SUBLANG_NEUTRAL | None |
| RT_STRING | 0x0001f4a0 | 0x000001a8 | LANG_NEUTRAL | SUBLANG_NEUTRAL | None |
| RT_STRING | 0x0001f4a0 | 0x000001a8 | LANG_NEUTRAL | SUBLANG_NEUTRAL | None |
| RT_STRING | 0x0001f4a0 | 0x000001a8 | LANG_NEUTRAL | SUBLANG_NEUTRAL | None |
| RT_STRING | 0x0001f4a0 | 0x000001a8 | LANG_NEUTRAL | SUBLANG_NEUTRAL | None |
| RT_STRING | 0x0001f4a0 | 0x000001a8 | LANG_NEUTRAL | SUBLANG_NEUTRAL | None |
| RT_GROUP_CURSOR | 0x0001f450 | 0x00000014 | LANG_NORWEGIAN | SUBLANG_NORWEGIAN_BOKMAL | None |
| RT_GROUP_CURSOR | 0x0001f450 | 0x00000014 | LANG_NORWEGIAN | SUBLANG_NORWEGIAN_BOKMAL | None |
| RT_GROUP_ICON | 0x0001a990 | 0x00000014 | LANG_NORWEGIAN | SUBLANG_NORWEGIAN_BOKMAL | None |
| RT_VERSION | 0x0001a520 | 0x00000264 | LANG_NORWEGIAN | SUBLANG_NORWEGIAN_BOKMAL | None |
| RT_MANIFEST | 0x0001a788 | 0x00000204 | LANG_NORWEGIAN | SUBLANG_NORWEGIAN_BOKMAL | None |
Imports
Library kernel32.dll:
• 0x420122 ExitProcess
• 0x420126 GetModuleHandleA
• 0x42012a GetProcAddress
• 0x42012e VirtualProtect
• 0x420132 VirtualAlloc
• 0x420136 VirtualFree
• 0x42013a LoadLibraryA
Library GDI32.dll:
• 0x420142 TextOutA
Library WTSAPI32.dll:
• 0x42014a WTSLogoffSession
L!This program cannot be run in DOS mode.
f4/"Z|"Z|"Z|/| Z|/|!Z|/|7Z|
|-Z|"[|EZ|/|3Z|/|#Z|/|#Z|Rich"Z|
`.rsrc
@petite
@UZUtK{\_`[
$\"s+L]&D
8 `!'7
hACxR(y
]3k(ll
qlDYR9
4@go6c!XD
AXZ9[MR
k\f7iE(>zM/v!!@
:S,.<7vy@HK
D%+s`3`xj%hmyvgp9eZrSg2u[
T2h<CdC
U#GDi*Q
b7_*P=Nu
kckUOcw
M _:II
!K%My *&
2( N*f*
Dh_km s
hoy|:}Mp
3.B'=HMAu
xw;9sqH
:}VkhI
xUZVo&be
zh=#Vc
l8dY7f>
ECZclRk
T|Hr0DL
[$|"Z+f[5'`
:*Z3CRs
pTUE|?5
TTk#2r`[weRb3
OF2uYj
@d GIQ_9</pl9T$
NO[.D`(a/V0UA?Z
gdMR`]"_bN
|l} F,wkrca{
VaLO5(
HILGC>
yYTtGuv@ch
T@Hx4R)x}2<G#JO,
".^b%'
`*q+UV
EAhBKquI'y
@7+0:2?s@E\X$J
EAt)0Ig4|p'30
$yine !+
!2DjWa^Z
hRalWv
ujr;$&._4> @]*_hX
b5q*z.F
Db$.\MT,o+o76jt*BU1`KMX
e\uQq1s q8
>(m=w"31^
eWQTiD
>aT<AX5t
JSTy(o[b
v/~so4B:AC
1E$8#O+
\ n]M:25d`+)L6r
[.wf{]
u/5p5Zs}1
qm5~DH
@oABZ/OQ{s
p]w+r^
\L2=ySgpu/
w@Ukx?`
AdP td=
V:@ t?>
g%);%jZ
sL<;nA
A_w?c|U&1
S/"*?C
19UT.,W
R;6;fUHU"
Jm.mp5s>
I7*2<6}KZ~y"
$YOu8AV@U
z$/#)aS
I:t!dT
+U`Y9I?s~VBU
u3jz)8Xu,5}
Bgnt`|
RL98PT
(+7%6"
v\/ezXIZbA
"PB BZ81
"0tep[
AIHbHb
E"B]]vl
R_E)OICP
H7qs]G& KP
qJmzG(nc
kIWjgO+
@D \\M1~0^
\"OHHQ]ZY2p^8
/0ZWq
8Z_zBx
q9T@HI"E
e{Xc?/
L_=1;D>u 29
\^'^U$R
iQgO/{Yz
{|T9`:sFB
hFT~E%MV80
/x'}QTj^K_Fl
l&%U3| =;fO$
y"S|_ ]
${gUM]=cuG+6KSS
<,awYS
z)tURX
=[w])IJQ(~-{
wviI04
f;mm`W)Fw
19NYb(<
+$6"\w
TiX}&JK&
BeZiEDve7
]jEN$K*
p`gLdB? J/v}I
r<l'}#u)d
-ofB,\
cCSWruN
900;$!)Xok^
"T0)IP
A.4>A9O~CTA
vwM^8h
-v7"k"YI*uu,]u;
lJ8.HU
.op?(P*1f~
#6*4oJw#,&I
_~VE38-
QFM."k
8JuW6agh_\
{<G#u5n*4]11V
b2e^ u
UN]%$~ <_W[Dt_
3Q]qwwYFSnO_AWA"
9;1=lU4
"O$c6f8oy9w
t@sX>!8
.]..Qu/H
%/}^CR]
$PSua"#(^
e`_BK[E_wnq_$2
*qA#.-dQ
~R;tPSEGFB(
%fQnTB9hs
>6e?-yU
~AgIuMLupj
x:Wm|}3UHi_0
Mkr?/[W%%O!y{
E+zwbv
?77;bk
.ak7S-
4I6cS*
5KAv}-Y
@@:%L{;@
q4)e]}ukIP 1
*KHi<&y
]]f5NDsP
TbL`_Qwll
*"q8lhc_Ggiuw
uGzVCYko
y #&XH]
{H*nGJLib3U
6t2@85#S!
.H .LK
b]nFIV
Pd%'38
t37_M*#H2/E'
:kS`L5<jD*I
y}dE/2e
X]=paQ~>:=g
SQcwGNw~
%[Ohvu
em%kYe
u4eUU%
8 5@;]
:)]&l9{Rwa
NWWSd{.
UxUuu4j
A""hW8
/7mNT?H)y
@~;fzMd
]z-|#^Q
U-JRWSW *
FtiEOj
OU_q'|ry_o {
} .DzT9<B
Q#o`Cg
@ 0="H
I+ 3cb
h2$>b?\
6LBpwgjU
2uU&@Bn
X@u{]g
>"sy.$U<
p{}+4h
X,r@&Q8
QI]~hVSaFX\]
j_l{];
,Eu]$fi,Q
rw7 UHs
BF9 q.\
lwj;`j
] L?e`uzKd@I
;wiD$\oQ]0
;G#BLIa
w3R'1s {
Ue1Yqaf3U
OW-T5);
4[ n\d
xv+O]^cYsd`
VEU @\ZV{
CXNF()
d{0H>s3
>{%>_f:Y%*cPG
5Ep} q
!37MZ=S6+[r%
W5G:4S!
N_s5Zu
d7>$$e
z^ d7.N',_1
WPD\zW AL
wdq_gB
MK]^l@
Bx@)uu"}/
zde`:P
Nmi'ZvO
n4-5n+
;m/,f~PU
?@o%mE]=D
Xysoj;9
1D"1uW5nw2u]oPZ7bMH|uW
L3H)Q3A<+
7. uQ5mffmcKkj
N#&W*i e
2[F*o!q
F/CMA13
vu{5wuW
)D>aPD\&}9I\
>LQ:TX;0
EEk'e&,?.]%
uns vO9A
.'L%tbEs
TPR ^UU
bw/WUH^
(4jJQm</
TMmY4.
82&]@QLOu
UB%Ws8lE`
5$DwmE!QAG1
Cyu@%S!
wEC6@@W
$}W %U]Ze
I0Rqfv
S_5CwJk_3@$
QwRowd
JW TuQ
+&{zdBH
+@.(uLf
2gh}M^
f+@'o['i
\V;dHlN
]QDa[1
X3]\wW
U_njei
Ai#JYK8
{SpHQ1V
W_+pAvb
N]XOI;DX}
)|q}rQ_
~,e;THUAz$k'xpU^<VGn~0
u+[9Sq
T<C\En_
0.-aO}
E{gY(m_Uv
"CUW)k+p
fU3m/_5G
E0|8Ge~
x_]Q}n*b
eyw>Te
u o+gr
D0m955CC79CXTY
i8] 0-*IZW-
G]]4|,C\
OuYUEe
}qHHHawuCHHHHy
}{HHHHq
sHHHHiomK
teT*0(PVYnL3B
&/k-(&G3
bZZci8
#]wFj/G
U1J'ymy
Ey[w(mohZ,u `zz
Th,S_9of[If
-]eX}0=
Wae;;SJkM]V
kw%=dZ}p
LTf"/*kCZ\ ht}E
}`U^zuwqDW3_
vu0Q`GCar^$
c_Ol9C
D9w^5j4
QwyYjA
tqKwKWd
k97zyaaC%
UWmn/v[
q~mr;;
."K!Rp
t9f9hR
NtVUf]P!}ZWp]_}`J
a *h{&
XP`}'Z
")C=6+] vHc
1M(gTJ,v{G
p#)%{ViBCYvv"NNn3c
|{WQI{)xt
^ct(yj
z;Yi*eO
@U4'|p[2!=uE`2\6
KdqEj_
U}meYThn
WLvDE..2
on3*>uUUqZ#R{Y
-Y%7uRUm
pjj3jO'"
ZA1y7R
,BoaW{
iL '$C
k7]HQg]'G*|&`v
ooiiHUx
)F8~@ah
\^AW!UH_ /
@_ }?G}
MPx*Nh
$hH!gDI$
ha~Kh!8Hm3K/
byKZ`*$b w
.?jvwe
MZA)w-KO0DLV\mC
0ehb_)$u9
u7_0]LW7H,\
vcb@wR/iIN!i^Ia
W7Bz+~EWpT8T
|>{*B+
aE5u!W_
pjAW`h
MQHk]sU)dx)
uW.-D:HD
w&fL,
1AgZCtXj7
6uB)cFzbX
rV}Wc<x
ll9d/i
9d>%C<
Xh}Wi,MA:
Ekssw%Q
qut?u}(1
m\\DsJP
`PZ,yi#D}
,:ZkY>-RY6
`'KW]#m"1m
U VwBO
c"^o'B.FIb:e
$11TMV *,
dv;~W'h#dZ|5@6
}M X)U0
.o]wRr
,M]*l()>|wP
&=^3`3
"GA("oEL
]+\-%Ghe/>
$cu6j<U
BdH~9q_ @E
-]/QA/
D)CY>qZC
+o#YWkS;#:+k3I
lS4)l*;
dywv-7
uB;;|C
|5(@@YeW{
g}z((k+4A;
\]HAWFb_P:
}"|IJ
ubG6!xS
vWQDA|yd_
55vC^ Q
~~u0_5da
O8TN841@
E&hq| 2mS.
'E]t''IQ
pTqRZf
&>ol,GU
BXnCH$Eq}[W
|]S4;
. Sl?Y
""X<}LW1k
rW`]WWI*0Fr
XRF"M]b
\Lg;Fk
N\*%2l\,RP
J}'RU@
/WyF^za
yITB3)HxU))
"Rw n
2[a/Wm~seScIw
rOEmeh?L}t
I_R#dY!
T{Ot,}Oibcdlejqi
e"s-wP.e/E|N
_@Mg%L\
h^l[k5
@+ kbf@
uP2C>[
6SUMF8
cYNYX)
-S#I+U{EL]3
wq=g2I
^>F,J5f%th\T
fl@Y<S
_XB` +
H?e@9k?y
d^p2-D
a:YA}D\mH][v
_iyr&_e|i;MhNOI9Mzz
=98;(&
F.KK4aKg
HEh;H8
d!;E&}
yjJ&/D
/No,eP
u]M'lV
MNSXG!
DR$MmKwS]`53UWBc6|
?pCRv]BpUX&Hf
"vD7nU
fu5>]5_u
M*/(nK
\?!i?_H;W
U_S*E7
Qu'_i'>eAUcb~J
6MHmw}
tg A}g9
*poke:(
PPz%$}xnTUi]SL
WT`WNDF
YS1&LWS
_7BypP'_ShQB{
mY)U.TaK \
xTX0\NN
(a1+ bN
*=LA%x8
~T/a:Fj
jPvjrr
rLJRT:
1XqQ){_U@k
+=]iQE,p
gC&p{>|
nW>)uE
_T$7?a+
srMtGfd
\U^N?$F
:qXb8<_
,0B=){/WcvU
qg65,@
d}Ua<m|n-8_B
8Pi+026\
s*]iiuqMYE<
M&H0ZRi^^BZViiVjbnn
(CUu{6
_a.3F]}
auyi}qeiFylr:>
YUITaRgUiu=6
AbV^w6]bXMWXL&C_pdmij12
J|uqMsN=U\
P%J>O:
8EDl>0
GRAza3
3BY]a.}Y
ui&y}qEIfx~YL
>(SttV
XuqQIy}X
i0a_XNUK
p}}!E`+
@.pUPB
:5QM9W\*
cu}'u hs9
.y=tC?->I
AlD6;Sm"NXbCl:
!QNtK@RM
+<Zr+C"RTe
W]J} ~RZ.z&)iZJo
iZbIG Oe
;oL4M ;f
i'D1/V
irn+L4If
C+di/3cC
Jc;^pM
4z3Y<SDX
)k`>/ZD,7(
7691>;<7;#1>(=(
9#,'#)(-3
}z{FIP
ona:5!ecqj=
J]Wz^gYC
EHDjV62e
Qj&.''
97!&#)+ 6
aiu{vzTX"&
Yh%jT
=f-J9+
wd$ynj
pqX^U\
kD=(_NB}
WZoYe*eVES B>
W|Avk^t-
\]Y`UvVN
{u:uj5=w*Q%?
%-$USm
9o&nyj^K*N@7
]1dT[-^QQyj<vjX
Uz6hm[mkx
^,R5M%T}m
ZkAjj=
BU7AfWH7k=
:q6=d!
&3ZD%fE
;sRNXP]NR[<6c>
}g}O7c6d
-W$w5eUEGKGOy
&v|U1{O
c7m)Fix[|uFm7fm
7myf?+
UF7FM^%
[uoQq`
X`e}zP\7n
_--'&TZFkOQ2o)oC.XY;5JQ*#O
Q+o_f=
5>/pWo57Hf@
cV=Mg-
yZz[Uy[-
}$?ac<
>T=|?)~X
UR$ |5JiqU
][5U+m
]bw9k7F{
/-+)'%#
2R2;(Mnl}A]v/+
S77&{s
^BZ]G[]
p;<1aZ_`
Ee*ae1!p:
j~,&&S='wqZ}+{d
^aJVeg
I29{wdiwwggwOiOOoooiio
iooooOOiOOoooiioiooooOGi_#
?'4Md1
Ha3dee
QNHELiU.2djls
bje,gaYqp
?1*i]Z<
sP?BA02LMOrSq{`
an{<nXG
Qu[,Rj
cb'49<> .
~d9mb~-b= D
;M<b$#'=+O
rn|@(V4WA^.;
t0FGSPKNzA0lswS]l@EDF
x)afy)
|4ksm6
Rs-fX<}`j@|p
iWAm!o
clB4YA_KY
LWIzaQ
2X)zOGK
fs,QMk63YfY
d955/c
!g.?={
>>fudC<p#en>/U]
p/VKb>
fQt&FZkX\ENIN\yBwH xw
GR's*j qFyps=
zR,`zN%
`{@W]B
'e*sT~
@DRPRZXZ\B@B\ZXZ\RP
R\ZXZ\" "
" "\ZXZ\RPR\ZXZ\B@B\ZXZ\RPM
R\ZXZ\"
@"H$g-NDk
+ uNOI<
BVeX^KAZ
1dFUNtn"
:cigDV<
j> iEO
<4(to9pMGwtzy~
dD.5Dj
TtLcZg
6}y<g_fR`GqJ^
=5>(UW;{Iq
bx6w+5i=cU*gn&
/LLGzErb0Ec|
}+M;e'
r' o(!w
#a""y[_v[KvFki~e/=sESB"}Q PU
SsveI=z
j1Mg"lq8gBzQ'
<TU+]?4T
2/(Nto\n.
[2$z/Y
m&KL43
WTV\"Q}F .|G
P.6ge[+.k#ZB-
\XtQ:{
woz,C9^p
=<$zQ`
e=mfPG
_w?S2Q
IYHdx6=
EkO&wX
ke64 klrq
q$2y&_
M=<5h";T;
GqzVX>j
D,dd3"dd-
h2h2agrSi2h2BYv+X
;9Sn4RX[
M/(U@4~u*
C^w{]z
s'J4MAXM4MW.%4M43:
Z/e/il
ixwmiidRiY@M/i/
//:zMd
fM4M mTC4Z&yQ(@^'>M4M5
i$iiii
i+7iiV\YiWnSuM4Me_|[{
G$sM4MS
J{@w4M4WC4M_
44MSM4M
bj&_&yTB4MI74M#874M
iicC4I
wi&orkyGigSy `4Mi
O/4MDK29M4M'9 &4
4M?;>zRLabN$
_~YMd[JzgJ
k"$iw)C
{6Mcso
syiSu2O4M4U64MO3M4M';?4M4#74Mt4ML
}mU4M$`29l2H<6(|6
OM4y2M4
;f?iK33'"KiXO
4ISvG4Mko
gs3 1Cg*_c$
K[r4M4_aSg5M
oP>SUL6/N4M4[)
'KV4M^
2iI&$/[W
I2_;<62ri
Z,k+4yli
d_xsP_Rsgbk@
;'@n'q4M`6
4M9vepu#l&M2
]7M0#I2L
W5&3gd_
;GciVO
gS?o$"
M:o3{&aka?C&M>W
-+Wdi/
?+&[[H\
5HH^><+&
9KvY|z
v\Kf3T,K|3
74eb{,N/
xAR}M|0I
/k^BAW'
/O9+5_iP)
iEj?;1WW
U]q '
dvwcR7MXHc*
XB]JjVb
cYm}#R
p5dbm{(\V':Rf0ffK\d,
Yj5sZW3H
;*^9)18S!CuuhW^/
YcPeR,
V['BSL?l3&f9dL!
E/sAQcd
9*HYQC
cjYB|I
q]\Pd,Bwd,_e>YPn
4@|}Wce
,8u=tbs_b_2
1L.|~|
&], /W
;bY~8|aWHeT/
~>_-;9TYf/e
D<K=l-Y
n\kqrM1xT
,3~nle
bw>qI;H
iRD0N:@V+$
Fhk4T[
<B%"KG
`VY{V,
{s"s@"D;#q3
8u4mPHF*'
zZ*zv0
&/`t^ZF
!;}U8F
r_RfHV
{5_c}vQ+7X^B
I@KedeKI>
HB*#/QxEpG(@*@@
$-,YSEf]W
87!4lo!4
4 1q{G6
J.Z<_3Q>
o&m`kjg>
/;2E&2u]
a0334gLK*X(AK
zyqrcje=
zJLNPR
f%24/1GL
(g4[~L1
WD,_WdCV_Wg|ZG[}(
,#ME!~ga
Cmpupa
S,sIT!6
DCy?x-6vh7
g6y<7,7;\]
9m<uwa
H)}3Qb
TSFc|2Ln)JVdv<0%
j4&}r+6[
<;[M/=_w
Vm8PRVgP7Y}xCKNDJTM*dK
w0v9_T2`^]SV*
XbcaAX+kR}z,JL\u
mu9^GA3sQ
Q\}uT+:
7d byFEBUOG4lZ+J
=c7sHg:Le|
$+QNJL]/:
VG8l%aqKb
a}ilL]P_K!9N^EHN_/TV3f
jx4# 0OK<k
YR+Uc{
-/YY]
mA#n+9W
WU (Hk
@R3I}~
VZ2;/{
f@$n%\
j6&Ha}
oxR$Qt4IF
?c7lWl
pdGq_llYn
^D xD%
FP$5I&I!7=
sUQ1@$Vb`JcR
xB <%^
!b[mMi
D9DMyjy]{
x,Mj%tO?8
/F@3|i&
U*N|aQ-%
Y.7QI,}
4U"zl"
"v[M1?
v/|44g]SLJ
hyy3!3Q
Z[gyQ>hV
it8tadL|h
)j"q+"b
3pE4vRu
~5286p[Tzhw'
\\f@:R6?
q+*x4uN
{%G`.H
@/2V#LW
c=blw0TPneK
;R;/XjP6
%/p|CU$":K:*w@q?
99+=k]
cneT @?7r#
BC>{)Q6
.@]Q:jmS
ED:J>Ieq(S
RT)R4{ZW>~]6A!~
3mpEd5
5W1=dff
]/%.&5
e,8h36tCFH
%31THe
A4Mfk-
&bNIA_nr2 ~t
uLi"E@V
1_VA7MD8;&1
h-j f+`W
GGGGGGGwwwwww
wwggggggggwww/
GGGGGGr
r3x4Mi''
+;;M4MG4M44M
OCS&Q_
wIewgoq
[irWCO+'ii3
i49';?
N4M7+WGo
k{M4M{o_K#
c;>wY`
loM{w6y`SdC4M
NSig4MRWX
!aic%o4ylK+G
4M4wg4MwGM4Mwc
O4{{5rA
:*6.);Tl\_%
MRuGMPyIAMEUH
symXokbl
:}~yF/
UX1!&Y
;WpXom-n*nc-
Rvr+}%
%n&i a
qG `=>xXrc
UNH KB6jN[D0:<(e
+F;/`vqms:
$FmiU6bt
!/%ehyaF
X&h*Zl~
:y)+2,cgV"F
V48^XXXX]
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIdentity version="1.0.0.0"
processorArchitecture="X86"
name="Safelife"
type="win32"/>
<description>Safel</description>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
<security>
<requestedPrivileges>
<requestedExecutionLevel
level="asInvoker"
uiAccess="false"/>
</requestedPrivileges>
</security>
</trustInfo>
</assembly>
;Hr~--
:JRX49 &
qvqtnooqprrxox|oz{pzoupsooqtrxqvqvswrxrwsxrwryrxsxrqqq
||||{}zzz|{z
}~|tttooopqonnnnnn}}}
uuujikiii{|{
# * *!* * (
( ) * * + * * , * &
& * ( ) ( *
ZY!& * ( ( * ( ( ( ( ' )
!) *!+ ) * )!, +
"+ ) )!* ) * * ) +".
"(!'#.",".",". *
)"64;*3
u~"/%.$2$3".",",".",#,",",!*#.
! #) (#/$/$/#/$.!*
$#-#0$0#/#/#0#/$/#/#/!*$.
! #(",$1#1#/#/$/#.
$%2%/#/$/#/#/$0#/#/"-$/
$&%,%3$0%/$/$/ (&5
!!,$-%,
$1$/%/$/$/%0$/%0%3"/
%%'/'4$/&/$/$/$,'4
(amepcga]-.
",$/OWepfkfi57"+#2#.
epepjriolpKR )$/$/%0$/$/&/$/%1%1$1
())1(4&0%/%/%/'1*7%0","+)7&0)6%3*7*3)6&1%/$1#-$1'7,9%/+9&0%1&5(4)6)4%/%/&1%/%0&0%/%0&1$/
'&)1)6&0&/%.&/(4(4(.#+/?1@(6-9(1$,$/*71A0@-<.<'2"'%.'2*61C+6,9*6'2*3'0'0(0'0(0'0'0(1(2'2 %
U&I|pspk
vbZI&,*
zGYJA$
""E!Gq
g,nE>Si
F;#`D#
d|+v\?
)Q?'WOp
Oi{>Ft
4+]9,$.|r
4M'a|h
O:q4~;
J:&M4 4
\)t<;u
,1`#D]D?m7c% `
T5f7q<
|3ed#RujkR
M7uj{yj|c)
.FNYd1
E%Z\a4,{
KZ]]{Y
=+]xT']
9>DI6<+
cyO4tB
|)/o58,>k,y
MessageBoxA
wsprintfA
ExitProcess
GetModuleHandleA
GetProcAddress
VirtualProtect
VirtualAlloc
VirtualFree
LoadLibraryA
TextOutA
WTSLogoffSession
user32.dll
kernel32.dll
GDI32.dll
WTSAPI32.dll
C O L O R P I C K
C O L O R R E P L A C E
M A I N I C O N
V S _ V E R S I O N _ I N F O
S t r i n g F i l e I n f o
0 5 2 9 0 5 E 0
C o m p a n y N a m e
S a f e - s o f t
F i l e D e s c r i p t i o n
F i l e V e r s i o n
2 . 3 . 0 . 9 1
I n t e r n a l N a m e
L e g a l C o p y r i g h t
L e g a l T r a d e m a r k s
O r i g i n a l F i l e n a m e
P r o d u c t N a m e
S a f e S c a n
P r o d u c t V e r s i o n
V a r F i l e I n f o
T r a n s l a t i o n
l C : \ b 6 c 9 9 8 e a 1 a 2 2 1 0 9 5 f c 7 c 7 0 f d 8 a d e a d b 0 9 3 2 0 a 6 9 5 3 c d 7 f 9 e 1 4 5 4 d 5 3 1 1 d e 0 b e e 9 6
C : \ D o c u m e n t s a n d S e t t i n g s \ A d m i n i s t r a t o r \ D e s k t o p \ v 0 m 9 j e a 0 . e x e
C : \ 9 6 d 3 a 4 2 7 b d d a a 9 d 0 f e 0 d 1 7 d 7 4 1 c c 0 6 f 0 e c 4 0 4 f b 5 9 a e d 3 e c c f 1 c 7 8 a 9 e 7 3 4 c a 0 7 3
C : \ U s e r s \ V i r t u a l \ A p p D a t a \ L o c a l \ T e m p \ e 2 3 6 b 0 b a 0 3 a 4 d a e 2 2 8 f d 3 4 f 8 2 0 1 4 f 5 e f 0 f 5 1 3 5 5 c d 4 5 b 5 2 d 2 3 5 8 c 4 d b b 8 8 a b 1 8 b 6 . e x e
C : \ c 7 b 0 6 e 3 a 9 6 1 6 9 6 d a 2 f f e 1 0 3 2 0 6 a f 0 5 3 a 7 2 7 3 d 8 2 6 4 f 8 0 4 b 6 5 1 6 f f b 7 4 f e 8 9 4 a d 4 1
C : \ D o c u m e n t s a n d S e t t i n g s \ A d m i n i s t r a t o r \ D e s k t o p \ 2 u U M m 6 A W . e x e
C : \ O q Y 6 9 k n b . e x e
C : \ b f f 5 d 8 3 5 f 9 4 1 b 2 9 9 9 a 9 8 8 8 d 1 5 b e 6 8 7 7 2 d c f 9 5 6 6 3 8 e 5 3 f 4 2 c 2 d 2 6 a 1 9 4 b c f c c 5 d 1
C : \ 9 c 8 9 9 0 4 c 1 6 5 2 4 8 3 c 2 4 1 e 2 a 2 b 0 a 6 c 6 9 9 f 7 9 9 a 1 4 b f 5 8 5 7 8 8 0 2 6 d c b 8 9 a 3 b d f 9 f c 6 a
C : \ d 0 3 f 8 a 4 3 8 2 0 4 9 a e d e c e 0 c 2 0 c f b 9 b a 4 c 3 e 1 a d f 1 8 5 7 1 b 4 c d 6 0 f 9 3 c f f f 0 0 2 3 a d 9 e 0
C : \ D o c u m e n t s a n d S e t t i n g s \ A d m i n i s t r a t o r \ D e s k t o p \ X i g b r I k z . e x e
C : \ 2 a t D P b E g . e x e
C : \ 4 9 b c 9 3 e 6 1 4 7 d 6 a e 9 3 1 e 6 8 0 6 1 5 2 1 8 1 0 2 6 6 9 3 7 f 1 4 5 b f 7 f e 8 4 8 9 4 a 5 d 6 1 d 1 9 3 5 5 a 4 f
C : \ D o c u m e n t s a n d S e t t i n g s \ A d m i n i s t r a t o r \ D e s k t o p \ p P c 3 e H X 6 . e x e
C : \ l 9 Z u Z j T P . e x e
C : \ U s e r s \ J o e C a g e \ D e s k t o p \ A 1 2 A W t d P X n . e x e
C : \ Y n T P Q p s O . e x e
C : \ c 6 8 f b 8 2 2 7 3 f 9 a 3 d a 8 b 0 f c 6 7 6 1 4 4 4 a 4 e e f a 8 d c 5 5 f 9 c b 2 c 0 3 2 6 7 8 1 a 5 1 f 7 e c f e 9 8 9
C : \ p p m b G j l L . e x e
C : \ 7 1 5 9 4 6 e 9 c d 1 1 f a 3 1 5 f 6 8 0 d 7 0 e 1 e 1 2 7 1 7 c 4 a c f b 4 0 9 4 8 c 7 0 5 0 e 4 5 0 f f 5 2 b 2 0 f 7 9 8 f
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ i n v o i c e . e x e
C : \ 7 c d a d 4 5 8 a 2 3 0 3 6 a c 0 d 6 c f c b a 8 a 6 7 c b 9 c d 5 7 c b 0 e e e f 0 f c 6 3 6 6 f 6 2 5 c a 8 0 9 6 1 f d b 2
C : \ 4 3 f 0 9 0 b f 8 8 0 7 5 0 d 7 3 6 2 5 9 d 1 7 3 a 3 c 5 4 4 d 6 c 8 2 3 3 7 3 9 c e 7 e 1 6 1 0 9 2 8 a 1 2 9 6 1 5 a 7 e b 4
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ i m p o r t a n t _ d o c u m e n t . e x e
C : \ 4 0 f e d f 9 5 f e 0 3 6 1 8 4 5 5 c 2 0 6 2 a 6 4 a 2 f c 7 7 0 a 9 7 0 9 2 5 a a d 0 0 8 1 8 e c 7 6 e 8 c 6 6 0 0 2 3 3 7 2
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ i n v o i c e . e x e
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ i m p o r t a n t _ d o c u m e n t . e x e
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ i n v o i c e . e x e
C : \ e 6 c 8 3 1 3 7 b 5 f c 6 3 b b e c 6 d e 3 9 1 c a e 9 d 9 7 e 8 0 f 8 6 9 3 0 6 1 7 d b 1 e 4 b 5 a 3 f 4 6 1 2 9 a 6 c 9 1 9
C : \ 9 a a 0 d 2 3 1 8 9 0 5 4 9 4 3 7 7 b b e 7 c e 7 c 3 b 2 d f b 0 3 0 0 b 5 7 4 6 3 7 b 3 1 8 0 7 8 7 b 8 8 b 4 6 6 1 9 a 5 5 9
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ i n v o i c e . e x e
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ i n v o i c e . e x e
C : \ a f b f e 8 b 8 d 1 4 6 d c 8 b c 8 3 d 5 2 8 4 6 7 b a e 2 8 0 f 1 4 d d 5 8 b d 2 8 d 8 7 9 a f 9 8 e 8 d 1 0 a 9 3 c b b c 1
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ s a m p l e . e x e
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ s a m p l e . e x e
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ s a m p l e . e x e
C : \ j 7 q W C k b c . e x e
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ s a m p l e . e x e
C : \ 6 a 6 7 a 1 a 9 7 a a a 5 5 d 8 4 d f d b 2 6 e 9 e f 7 e 7 c 7 7 4 4 d 9 a 3 6 3 8 b 5 2 7 4 9 5 2 4 0 0 2 a 3 6 d d 1 2 0 f a
C : \ e 4 9 3 e c 4 a b 3 c f 7 5 9 0 b 6 2 b d 8 a 3 4 9 a 5 b 5 e e e f d 5 2 b 7 5 a 8 3 5 0 0 a 4 a c 0 f 5 0 4 e c c 3 9 a 3 5 a
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ i m p o r t a n t _ d o c u m e n t . e x e
C : \ q y t H S g 2 e . e x e
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ i n v o i c e . e x e
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ s a m p l e . e x e
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ i m p o r t a n t _ d o c u m e n t . e x e
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ i m p o r t a n t _ d o c u m e n t . e x e
C : \ 9 0 e 6 2 c c 1 f 5 5 e 5 e 5 f 0 6 2 a 7 6 2 4 f 6 e 6 0 7 5 7 0 9 6 0 7 5 d 5 4 d f e 4 1 2 f 4 7 1 1 6 2 c a 8 b 6 3 4 d f 0
C : \ a b 2 7 f d a 5 4 3 6 4 4 3 8 8 d 7 2 f a 6 5 9 4 2 b a 7 e 7 b 5 1 9 3 d 2 7 6 f c 7 6 9 c 4 8 f a 1 c 4 5 6 e 1 4 3 2 6 e f 8
C : \ U s e r s \ J o e C a g e \ D e s k t o p \ d Z T L J 7 b p x h . e x e
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ b 3 3 2 e 5 e 4 c 6 e b b e 3 2 0 8 f 8 1 6 f 4 d 3 9 c 6 1 0 a . v i r u s . e x e
C : \ D o c u m e n t s a n d S e t t i n g s \ A d m i n i s t r a t o r \ D e s k t o p \ Z L G F m o u C . e x e
C : \ U s e r s \ P e t r a \ A p p D a t a \ L o c a l \ T e m p \ . p e 3 2 . e x e
C : \ d 3 c 8 2 5 e e d 9 6 5 4 0 5 b 7 f 6 1 7 1 8 e a 5 b c 6 e 1 e 0 c 9 7 3 4 4 a 6 3 c 5 c 8 c 3 9 4 3 9 c 8 0 8 1 1 6 3 6 e 9 3
C : \ 4 5 5 d 4 c a 1 3 5 f 5 0 e c 1 b 0 a d b 0 d e 9 9 f d 9 7 5 6 a 4 1 b d 5 4 c c 4 5 f 6 2 9 7 5 f a c b 1 5 e 9 2 1 6 a d e e
C : \ 0 1 2 d 8 5 1 0 7 b 4 b f c f a b 6 f 5 4 2 5 c f 9 2 8 1 e 6 f d 2 3 4 8 c d e e d a 8 9 7 e 6 f 7 f d e 3 6 2 3 d 7 9 c 1 7 b
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ y a x k o d i l a . e x e
C : \ 2 8 0 e 3 f b 1 c c 7 3 d a 1 3 b 2 7 a f f 7 f d e 4 7 b c a e c 1 c d 7 6 b 0 8 5 e 5 6 5 0 5 c e d 0 b c 6 1 0 6 3 f 0 5 2 9
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ y a x k o d i l a . e x e
C : \ U s e r s \ J a s o n \ A p p D a t a \ L o c a l \ T e m p \ 7 5 c 4 8 6 2 9 9 2 3 6 9 1 e 6 1 b e 5 2 5 9 4 b 7 a 6 7 4 c 1 0 7 8 2 f 2 f 2 . d l l
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ d t t c o d e x g i g a s . 1 d b d 5 b 7 c a a 2 6 b 5 a 2 d 3 0 e e 0 1 4 9 0 3 9 e a 2 b b c c 8 6 3 5 3 . e x e
C : \ 6 d b f 8 9 6 c 4 6 0 9 c 6 9 e d 4 f d 4 b f b e e 2 2 5 7 b f e a a 5 8 1 8 6 c a 1 7 1 8 b 1 7 0 0 2 8 3 4 d 5 d 4 5 d 2 f 9
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ y a x k o d i l a . e x e
C : \ D o c u m e n t s a n d S e t t i n g s \ A d m i n i s t r a t o r \ D e s k t o p \ P 8 i x A L t L . e x e
C : \ U s e r s \ P e t r a \ A p p D a t a \ L o c a l \ T e m p \ . p e 3 2 . e x e
C : \ 2 8 d 8 6 0 7 e 5 5 6 8 4 8 1 1 1 5 d c e d 5 f 1 8 f 8 d 4 8 e 4 e f e a 1 4 e d 6 3 9 e 3 f 7 2 5 f 6 5 6 2 a 0 4 a e d 2 e 6
C : \ f 4 4 0 8 0 1 7 6 8 f 6 0 6 d 1 5 7 5 8 c 0 d f 6 5 6 b e a f 3 f f 7 9 5 c 2 6 d 7 7 b c f a c e 6 c 3 a a 0 7 9 2 8 c 1 3 3 8
C : \ U s e r s \ P e t r a \ A p p D a t a \ L o c a l \ T e m p \ y a x k o d i l a . p e 3 2
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ b 2 1 5 6 a c b a a d 0 c 4 9 7 _ y a x k o d i l a . e x e
C : \ b 9 8 8 4 5 8 4 6 6 a d e 8 2 e 5 2 4 c 3 b c 1 1 e 7 0 e 5 6 7 f a 2 8 8 e d e 6 8 f 2 9 a 5 e 9 c f 0 4 c c d 0 0 c 0 d 5 5 0
C : \ U s e r s \ P e t r a \ A p p D a t a \ L o c a l \ T e m p \ y a x k o d i l a . p e 3 2
C : \ 2 c 8 e f f 3 2 2 4 0 3 f c c 0 a e d c e c d 5 2 5 1 c 0 1 d 1 8 f 3 7 9 5 9 3 c a 5 5 2 d 6 6 e 3 b e 7 b 9 4 0 a 2 d 7 2 9 f
C : \ U s e r s \ P e t r a \ A p p D a t a \ L o c a l \ T e m p \ y a x k o d i l a . p e 3 2
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ b 1 6 8 b 3 5 b 4 5 c 5 8 7 3 d _ y a x k o d i l a . e x e
C : \ U s e r s \ P e t r a \ A p p D a t a \ L o c a l \ T e m p \ y a x k o d i l a . p e 3 2
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ a f 9 9 a b 4 6 5 d 8 e 0 3 8 5 _ y a x k o d i l a . e x e
C : \ 1 b 8 4 6 2 c 8 e c 2 4 7 0 6 f 9 5 7 e 1 a 2 2 0 d 7 9 1 b 0 5 d 1 8 d c 8 0 a 9 1 e d 2 5 5 9 e 5 b c 5 7 3 f a 8 3 9 b f e d
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ y a x k o d i l a . e x e
C : \ U s e r s \ P e t r a \ A p p D a t a \ L o c a l \ T e m p \ y a x k o d i l a . p e 3 2
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ c a 7 f d 0 a f f e c 7 9 3 c 2 _ y a x k o d i l a . e x e
C : \ b 1 8 c 7 5 3 b 9 5 7 2 f d a 1 7 d 1 a 8 f 3 4 6 2 b 3 2 f b 5 2 b f 0 c b 4 6 1 9 b 0 f 7 f 0 8 0 7 b b f 7 0 3 4 2 4 3 d c 4
C : \ 7 6 e 3 3 1 a c 5 5 2 0 f 5 4 f 8 f a 1 7 9 e e f 1 0 8 6 c c c 1 9 2 0 a b a 6 0 6 b e 4 e c 2 7 1 5 8 4 a b 2 6 5 6 6 3 7 0 5
C : \ 2 6 d 0 a d 6 1 4 b 2 0 2 5 d c a 8 3 1 6 0 2 0 3 b 5 e 7 7 d 0 e 6 c 0 0 e f c 0 6 f 6 3 d 3 b 0 4 d a f 0 1 a f 5 b 6 0 d b f
C : \ 1 1 d 5 1 1 6 4 8 6 b 7 b 0 a 7 9 8 3 a d 8 8 0 8 b 7 2 7 b 7 6 7 e d f 6 2 9 5 1 4 9 b 0 2 7 2 9 0 c 5 a e 2 2 0 a 9 d f 3 c e
C : \ D o c u m e n t s a n d S e t t i n g s \ A d m i n i s t r a t o r \ D e s k t o p \ q u S p Q M g l . e x e
C : \ 9 6 0 e c c b 5 6 e 8 0 d 5 d 7 5 a a 9 0 6 f 9 4 4 5 0 8 e f 2 7 f 0 e 8 c 5 6 4 e 0 0 4 7 1 f e d 6 9 d b 4 3 5 4 8 3 0 d f 9
C : \ 6 b 2 b 7 5 8 0 0 3 4 1 e c 5 2 1 f 7 9 c 1 4 e 4 a 2 0 3 3 d f e 9 0 c e a 7 f 1 b 2 8 1 0 2 f b f 4 8 d 7 8 9 8 a d d 6 f f 3
C : \ e 1 8 c 7 8 d b 3 9 e e 0 a f 3 8 9 6 c f 7 2 5 c b 1 2 b d d c d f e 2 2 c 8 8 e 2 8 f e a c a 8 3 7 9 4 6 b e b 9 5 2 e 7 e c
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ y a x k o d i l a . e x e
C : \ f 4 6 3 b 8 2 9 6 3 9 f e b 0 e 2 3 b e 2 2 3 8 7 d 2 8 6 a 6 d 0 8 f f 4 3 3 6 5 3 c 3 0 e 7 0 a 3 e 7 e 7 2 0 2 6 7 5 b 7 9 f
C : \ D o c u m e n t s a n d S e t t i n g s \ A d m i n i s t r a t o r \ D e s k t o p \ 1 P j n E 9 h 1 . e x e
C : \ c 6 9 2 2 e 0 6 a a a f 6 d b 0 3 9 e 5 d c 8 a 1 6 e c 8 c 2 4 2 4 4 b b 0 c a 0 6 b e 1 1 d 2 6 8 9 6 b 5 9 2 2 9 6 f f a e c
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ y a x k o d i l a . e x e
C : \ U s e r s \ V i r t u a l \ A p p D a t a \ L o c a l \ T e m p \ d 7 b f e 1 a e 4 b 4 0 6 d b 1 5 3 3 7 1 1 9 5 7 d f 5 f 1 0 7 7 8 a c a c 5 5 c 4 8 a a 2 9 5 0 7 4 2 7 a 0 d 9 5 9 0 4 5 d 2 . e x e
C : \ D o c u m e n t s a n d S e t t i n g s \ A d m i n i s t r a t o r \ D e s k t o p \ Q m E F w t 9 s . e x e
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ 3 a 6 c 8 d 0 0 c c f a 7 e f 6 1 d 1 f 9 9 5 5 4 2 3 1 7 3 8 5 e c 5 a d 0 a d 3 7 6 f 3 f 1 e 2 6 4 c 4 4 e a 8 a e d f 4 2 d . e x e
C : \ 7 4 4 4 7 7 f 5 0 3 a 7 6 8 6 e d 3 f 6 a 4 d f e 7 7 d 0 5 3 7 9 7 9 4 7 0 b b f 4 8 6 b 6 c 4 9 f 8 f a 8 e c 7 6 a d c 4 a 2
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ y a x k o d i l a . e x e
C : \ 3 7 6 e d 7 c d 1 7 2 7 b 6 b e c c 2 7 4 2 4 6 4 d c 5 0 1 e 9 0 4 0 b d 0 d e c 9 b d 0 0 5 0 2 1 d 9 3 e b 1 d 5 6 4 c 4 f 5
C : \ U s e r s \ P e t r a \ A p p D a t a \ L o c a l \ T e m p \ y a x k o d i l a . p e 3 2
C : \ D o c u m e n t s a n d S e t t i n g s \ A d m i n i s t r a t o r \ D e s k t o p \ X f 7 u t i k 8 . e x e
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ 0 a a d 8 6 7 5 8 6 3 6 4 a 4 a 0 4 a e 6 a 1 2 3 3 3 7 b b 3 b e 7 9 d e 1 c 6 0 7 c a 0 3 2 6 3 f 2 b c 2 a 0 2 c 4 6 a f 6 3 . e x e
C : \ D o c u m e n t s a n d S e t t i n g s \ A d m i n i s t r a t o r \ D e s k t o p \ n g J o p X M B . e x e
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ 5 b 9 b 0 a 4 1 3 1 c c a 3 4 2 9 8 9 0 c 0 e 3 6 1 3 8 8 8 7 9 d 0 2 2 d 4 9 6 c f b a 2 4 5 8 e 0 6 c 1 4 e 4 8 f 1 2 4 b 9 9 . e x e
C : \ U s e r s \ P e t r a \ A p p D a t a \ L o c a l \ T e m p \ y a x k o d i l a . p e 3 2
C : \ f b 2 8 7 6 e 6 5 3 9 b c b 8 f 3 6 0 6 a 3 8 5 d 0 c b d f 6 7 0 3 b 2 3 b 2 e a 9 a 8 d c 3 3 c 4 0 f 9 6 2 d 2 f 5 d 7 3 6 d
C : \ U s e r s \ P e t r a \ A p p D a t a \ L o c a l \ T e m p \ y a x k o d i l a . p e 3 2
C : \ d d 4 3 4 c 3 d 3 7 9 6 2 a 9 a 7 9 5 4 7 2 a b 2 c 7 b 9 f a 6 1 2 3 c 8 2 2 e 5 f 7 d 0 1 a 7 f 1 1 0 9 5 1 2 0 f b e 0 6 0 e
C : \ 2 8 5 c 3 2 1 a b c 8 5 f 2 4 7 8 3 9 f 3 d 3 3 d 0 8 b 1 4 c e 2 e 8 c a 9 e 5 d c 8 e 8 4 1 a 8 3 c 5 e a 0 7 1 6 f d 6 b d c
C : \ 8 f b 7 f 1 8 8 2 0 a 2 8 a 6 7 8 6 e 8 3 4 0 4 7 9 0 f 5 a a f 6 e 0 2 b e d 5 f f d 4 7 3 5 4 e a e f 7 5 4 b 4 0 9 6 3 b 2 d
C : \ 4 1 6 1 8 2 0 c 0 1 1 2 b 4 e 3 9 0 d a 0 0 0 1 d e b 4 5 5 7 2 0 6 b 0 4 8 3 b f 7 0 a 9 8 c b 8 7 f c 1 7 e 9 a 4 1 a 5 9 6 8
C : \ 7 8 3 f f 9 4 d d 8 7 6 4 2 0 e f e 9 a 7 8 f 5 a c e 7 3 d 2 a 6 6 d 9 a 5 1 9 7 d 3 3 e 9 f 8 c d c a 1 7 9 7 7 f 8 2 0 0 b 7
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ y a x k o d i l a . e x e
C : \ D o c u m e n t s a n d S e t t i n g s \ A d m i n i s t r a t o r \ D e s k t o p \ i 1 C b M 4 g k . e x e
C : \ 7 8 2 d 3 6 2 b 5 2 9 3 5 3 9 2 f 5 6 d d f d 1 b 9 1 d a 9 3 f 7 d 6 4 3 f 4 5 0 e 6 d 6 1 b 8 c 4 8 c e d 4 1 8 a 7 2 1 1 f 0
C : \ U s e r s \ P e t r a \ A p p D a t a \ L o c a l \ T e m p \ y a x k o d i l a . p e 3 2
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ 9 8 4 8 b 4 e b a a 0 8 8 7 8 0 _ y a x k o d i l a . e x e
C : \ 8 5 f 6 8 4 c 9 9 c e a d d 0 f 2 e a 1 2 9 e 3 6 6 a 2 f 5 0 3 1 e c 7 9 d b a 3 5 7 1 3 4 a 6 a e c e 0 b f 2 3 7 b c 9 a 6 f
C : \ D o c u m e n t s a n d S e t t i n g s \ A d m i n i s t r a t o r \ D e s k t o p \ S z b b K 5 i D . e x e
C : \ a 6 5 e c 5 2 a 0 a 8 4 3 7 5 5 d a f b 8 2 d 6 c a 8 b 7 5 f 2 f a f 3 c 9 9 3 a 6 7 6 4 2 8 b 7 3 3 4 8 8 1 8 b 4 3 e a f d 3
C : \ D o c u m e n t s a n d S e t t i n g s \ A d m i n i s t r a t o r \ D e s k t o p \ 6 E 8 q h U X w . e x e
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ e a 4 2 5 c 3 c 4 6 7 6 5 1 7 5 9 8 1 0 5 1 b 6 e c 0 c 0 0 0 4 e c 0 5 5 4 a f 5 d 2 6 7 d b 6 e e 9 6 3 0 d d 3 d 6 4 4 7 1 2 . e x e
C : \ c f 2 8 4 2 6 2 7 a 5 3 2 d 6 5 1 4 2 2 6 b d 9 3 4 5 3 d 7 1 7 f 2 0 5 d b 3 6 f a 4 7 5 7 4 8 d 7 5 a c 5 2 7 e 1 2 3 2 2 f 1
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ y a x k o d i l a . e x e
C : \ c 2 3 0 d 4 0 e 3 9 2 1 5 8 8 d 4 2 4 3 8 e 8 b b 6 4 2 4 d 1 5 c e 5 a c b 5 2 a 2 4 1 7 c f 6 4 9 6 5 4 d f a 4 1 f 9 4 a 1 b
C : \ 8 5 0 d 4 9 4 8 c 1 2 4 0 a 2 1 6 d f 2 a 8 9 6 a a c d e 3 8 c f 8 2 4 e 5 c 2 9 b 4 1 c 0 a 9 e 8 0 e 5 8 7 1 7 5 3 9 8 8 3 0
C : \ b e c 1 8 6 c 4 5 c 4 a 1 a c a a 2 4 0 8 f 4 1 a e 6 8 b 5 a 3 7 2 c 7 b 1 1 7 a 5 f c f 7 9 0 1 5 5 4 b d 1 4 9 4 d f 3 c d a
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ y a x k o d i l a . e x e
C : \ 2 f 9 8 9 1 4 3 1 d 3 a f 4 f d e d b a 2 a c 7 5 4 b 1 7 4 4 1 c 4 2 c a d c 7 1 d 1 1 0 4 4 b d c 2 1 a a 9 2 3 b c 8 4 e b 9
C : \ U s e r s \ P e t r a \ A p p D a t a \ L o c a l \ T e m p \ y a x k o d i l a . p e 3 2
C : \ U s e r s \ P e t r a \ A p p D a t a \ L o c a l \ T e m p \ y a x k o d i l a . p e 3 2
C : \ D o c u m e n t s a n d S e t t i n g s \ A d m i n i s t r a t o r \ D e s k t o p \ 7 f C S Q X G q . e x e
C : \ c b 1 3 0 3 0 a f d c 3 1 e b 7 5 4 4 e 0 7 4 0 c 2 e d 2 3 e b 9 3 0 6 7 4 f f 4 6 2 3 4 6 2 0 6 9 4 f d d 6 4 7 c f c a 2 f 4
C : \ 7 a 4 6 1 1 c 2 e 3 9 2 d 2 9 1 7 5 9 b 8 3 0 3 3 0 2 c 6 e 2 d 3 a 5 5 9 f 3 9 d 8 e f a b 5 f a 4 9 e c e f d 4 9 4 7 7 0 4 d
C : \ U s e r s \ P e t r a \ A p p D a t a \ L o c a l \ T e m p \ y a x k o d i l a . p e 3 2
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ 9 7 c 9 c 4 d 1 a 4 7 d 8 8 0 f _ y a x k o d i l a . e x e
C : \ 4 a c b c 3 e f 7 c 6 b 1 9 f c 4 4 7 d 0 5 5 f 9 f a 2 6 2 f 4 0 5 f d 1 5 0 5 b 7 0 2 c 2 2 d e 3 a 5 6 2 4 f 1 9 b 0 0 8 5 a
C : \ 9 c 0 d 1 4 f 4 4 4 c 0 a 8 5 a 9 9 c 1 6 4 c 9 7 c 7 9 8 1 6 9 c e 4 c 1 d 4 1 a a 5 2 0 5 1 2 1 1 f b 6 c 5 f 9 1 0 b a 3 8 f
C : \ a 9 3 e c 0 b 5 9 3 1 e e a 8 3 7 b c 4 b e 9 2 9 7 f d d f 9 9 3 9 8 2 f 7 2 f a 1 6 1 f b 0 f f 4 9 d a 5 6 d d d 4 d d 2 1 1
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ y a x k o d i l a . e x e
C : \ 6 4 d 1 6 a 9 9 9 2 b 3 3 9 6 d a 1 d a 9 3 4 f b a 7 e 9 3 8 8 6 a 0 5 2 c 9 b 4 8 9 9 c b f 7 0 f a e 1 d a b a 7 7 c c 0 5 3
C : \ U s e r s \ V i r t u a l \ A p p D a t a \ L o c a l \ T e m p \ 8 8 b 8 d a 5 f b a 8 7 f 6 8 6 1 1 b 3 a e b 2 1 6 6 e 8 7 4 1 3 3 c 6 6 2 a 8 d 8 6 a c 9 5 7 a 5 4 7 9 f 2 7 b 7 0 4 f 4 1 5 . e x e
C : \ U s e r s \ P e t r a \ A p p D a t a \ L o c a l \ T e m p \ y a x k o d i l a . p e 3 2
C : \ 5 8 6 3 f 8 e a 2 a d 0 e f a 5 7 5 f 3 b e 3 f e f 4 2 1 1 8 2 f c 3 6 d 2 4 7 8 7 a b 9 c 1 9 a 8 f 7 4 9 e 6 d 5 f 8 0 8 9 9
C : \ 2 5 9 4 a b 6 0 7 e c 9 a e 7 7 4 3 b 6 a 7 1 f 4 7 5 f d 4 f e 2 8 a 2 9 9 7 e 3 8 6 2 f 1 8 d c 2 9 3 3 a 6 d f a 6 b b 3 e 6
C : \ 0 9 d 6 a a 4 b e d 3 d 5 1 8 2 c f 2 f 1 d 1 c 2 b 4 d b 7 e 6 b 5 0 4 7 3 e e 1 8 9 b a d 4 b 7 3 7 1 8 2 6 0 a 8 b 9 a 7 0 e
C : \ 1 a f 6 1 f d 7 2 f 8 3 a 3 4 7 3 6 d 3 9 5 0 6 7 3 6 5 2 b 1 7 3 0 6 f 0 1 7 1 4 f 0 a d 4 c b d 0 b 0 3 b 4 8 1 8 5 d f 2 3 8
C : \ e d 7 1 5 1 6 d 9 7 0 2 1 0 d 4 7 1 f 2 c a 7 8 f 6 3 7 1 1 1 0 9 c 7 c b 5 b a 8 c 7 1 f 4 7 4 1 d a 8 b 7 d f 9 3 b 1 0 0 6 d
C : \ U s e r s \ P e t r a \ A p p D a t a \ L o c a l \ T e m p \ y a x k o d i l a . p e 3 2
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ d 4 8 7 0 a 4 0 4 4 6 4 7 6 8 f _ y a x k o d i l a . e x e
C : \ 4 0 d 4 7 1 9 0 1 6 6 6 1 a 1 1 5 b f 7 2 4 8 0 5 6 f 3 4 e 2 b a a 9 8 6 3 7 9 4 0 9 2 3 8 b 0 5 4 6 c 5 5 0 1 c 5 3 4 1 6 8 9
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ y a x k o d i l a . e x e
C : \ d 5 0 1 e 9 a b 8 9 e 3 8 c 9 d f 7 5 6 9 4 e b f 2 2 6 e a 6 c 7 7 7 3 b a e 1 8 3 0 7 f 8 c 5 f f 3 7 b f 0 e a 7 2 6 1 5 6 d
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ y a x k o d i l a . e x e
C : \ 6 a 1 f 1 b 8 c 5 4 4 5 f 6 5 2 1 b c 5 5 3 7 f e 1 9 6 3 b 8 e 4 d 9 1 d a d 7 2 9 d 5 d f a 0 1 2 7 8 6 e 6 f 9 2 2 8 c 9 6 0
C : \ b c 1 3 5 9 0 6 d 7 6 a 1 c 8 2 f f f 7 0 8 9 1 c 9 5 9 7 1 e 8 c 6 6 8 8 2 0 8 7 a 2 2 f d 2 a 8 7 6 a 2 1 2 2 2 1 b 9 7 f a e
C : \ U s e r s \ P e t r a \ A p p D a t a \ L o c a l \ T e m p \ y a x k o d i l a . p e 3 2
C : \ U s e r s \ P e t r a \ A p p D a t a \ L o c a l \ T e m p \ y a x k o d i l a . p e 3 2
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ a 4 3 f c 6 0 a 0 b c 7 6 a 7 2 _ y a x k o d i l a . e x e
C : \ U s e r s \ P e t r a \ A p p D a t a \ L o c a l \ T e m p \ y a x k o d i l a . p e 3 2
C : \ a c 2 7 3 1 b 6 7 1 a 3 0 2 9 a 9 d e 2 c 8 f b 3 a 3 0 a 7 a 8 8 0 a 1 d 2 6 8 e b 0 0 4 f c e 1 9 3 d 3 d 3 3 d 1 c b 3 5 6 d
C : \ 7 d 9 b 1 6 4 4 7 b 8 1 7 4 2 c 1 3 f 3 e a 9 f 4 5 c e 0 c 3 4 4 b e e 9 a d 9 5 2 c 5 8 e 3 5 c 1 2 4 6 9 b c 0 4 1 1 4 d e 7
C : \ U s e r s \ P e t r a \ A p p D a t a \ L o c a l \ T e m p \ y a x k o d i l a . p e 3 2
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ a e 2 6 4 0 9 3 3 f 0 e 4 9 9 1 _ y a x k o d i l a . e x e
C : \ c 4 2 9 4 d 0 1 5 6 e 5 2 3 3 1 9 9 0 c 0 7 e 8 9 b 6 0 a d 8 6 8 4 b 2 9 b 5 8 6 c 6 4 b 6 2 8 9 f b 1 6 5 9 3 3 f a e 5 a 6 4
C : \ U s e r s \ P e t r a \ A p p D a t a \ L o c a l \ T e m p \ y a x k o d i l a . p e 3 2
C : \ D o c u m e n t s a n d S e t t i n g s \ A d m i n i s t r a t o r \ D e s k t o p \ X R F w 0 W k h . e x e
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ b 3 e a e 8 2 5 d e c 0 2 3 e 9 1 6 1 6 e 6 4 f 5 d 3 e a 4 4 1 1 e 3 a 8 1 3 7 0 8 2 4 1 9 e 8 3 7 7 8 8 f 4 7 9 d 8 4 8 3 6 6 . e x e
C : \ c 8 4 3 4 9 3 1 9 c 7 e 7 1 7 c 4 d 0 1 3 3 f a 2 2 c 7 7 e d 5 b 2 0 1 a 5 5 f 7 2 5 4 f f 9 0 0 2 1 5 6 9 b 6 e f 4 2 6 9 0 7
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ y a x k o d i l a . e x e
C : \ e e 4 d e c d 4 e 0 4 4 4 7 4 0 2 2 0 b 0 5 1 5 d 9 7 0 3 f 7 1 6 7 8 9 4 9 e 7 9 3 6 d f 2 b 4 9 8 b 3 f d 7 0 e 3 c 1 6 7 6 e
C : \ D o c u m e n t s a n d S e t t i n g s \ A d m i n i s t r a t o r \ D e s k t o p \ Y v Q g 5 U V C . e x e
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ 4 9 9 b e 4 b 8 4 0 b 5 4 9 c a 4 b e e e 0 5 a 5 1 6 3 a 4 e b 4 9 2 f 4 7 7 8 7 8 b 8 1 1 1 7 9 8 8 b 1 6 e e 5 1 2 3 1 e 3 1 . e x e
C : \ U s e r s \ P e t r a \ A p p D a t a \ L o c a l \ T e m p \ y a x k o d i l a . p e 3 2
C : \ U s e r s \ P e t r a \ A p p D a t a \ L o c a l \ T e m p \ y a x k o d i l a . p e 3 2
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ 3 1 1 c c 4 0 5 b a 8 a f 1 a 4 _ y a x k o d i l a . e x e
C : \ a 5 9 a 2 3 d 2 4 e d 0 9 8 3 6 2 9 5 1 d 3 5 5 2 e f 6 f 5 7 0 1 f b d 4 e 2 3 7 f f 1 4 2 0 8 9 f d d f d 6 9 6 5 2 c 6 c 3 5
C : \ D o c u m e n t s a n d S e t t i n g s \ A d m i n i s t r a t o r \ D e s k t o p \ A N T N F i X l . e x e
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ 9 b 4 d 5 e e 4 a 7 e f 2 d b 4 e 7 0 8 7 3 3 2 b c 7 0 e 6 8 d 9 d a d a 8 f 9 2 5 0 8 4 6 a 4 d 3 4 4 8 a 0 b b e a c 6 1 8 4 . e x e
C : \ a 7 a f 2 0 1 6 3 4 3 5 c b 9 5 b c 7 9 5 f f b e e 6 2 1 d c 6 a d 0 b 1 5 1 d a a 0 4 5 c 0 8 0 c 3 2 f a a 0 2 b 8 d 9 8 6 d
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ y a x k o d i l a . e x e
C : \ c 5 f e 3 0 e 0 b a 5 6 3 e c 5 0 1 8 a 7 e c a d 5 1 9 4 a c 7 a a 7 7 f 3 0 e 2 8 1 a 7 e 0 4 5 7 c 2 e f 4 4 6 d b a 0 5 6 4
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ y a x k o d i l a . e x e
C : \ f 2 a 2 f b 1 1 2 7 3 8 f d b 6 5 9 5 7 1 3 6 c 2 b 7 1 0 0 6 6 7 5 7 d a 3 f 2 9 0 4 7 f 7 f f 3 8 c 0 5 a a 9 4 2 0 6 5 4 3 7
C : \ 3 e 1 4 d 7 2 1 4 3 2 1 6 b 0 8 5 8 9 2 4 1 5 0 5 4 d d 6 2 d 3 8 0 4 8 f f 5 0 6 3 d 8 9 c f 6 b d 5 3 8 2 a 5 5 2 4 5 5 0 c e
C : \ U s e r s \ P e t r a \ A p p D a t a \ L o c a l \ T e m p \ y a x k o d i l a . p e 3 2
C : \ D o c u m e n t s a n d S e t t i n g s \ A d m i n i s t r a t o r \ D e s k t o p \ x Y O Q k d G T . e x e
C : \ 6 e 7 b e 4 5 b 6 4 b b 6 0 4 9 f 3 b b d e e 8 a 7 e 5 0 6 5 5 e f 1 5 b 3 b b 9 9 b 7 1 d 3 b e b 6 3 5 8 5 3 9 c 3 0 6 3 b b
C : \ 2 b 5 2 1 0 7 6 3 5 4 2 5 1 e 1 c 2 6 a 2 6 6 c 7 9 2 2 4 d d c 0 f a 4 f b 6 2 5 2 3 3 d e 2 3 1 8 4 a 9 a f 5 3 e 8 e 7 5 2 c
C : \ c 9 b d 0 0 5 5 b 1 d 7 1 6 1 8 3 6 8 3 8 b 8 d f 5 7 a 2 a e a f 1 7 4 6 3 4 0 9 b 1 d c d f c c 4 8 d b 2 4 8 1 d 4 8 a 1 4 d
C : \ 5 a f f 3 0 1 9 2 b e b 0 4 e b 1 a 0 f 2 d 3 d 4 9 3 f a 2 2 a 5 b 3 3 a 0 4 e 4 a 5 c f b b 5 0 2 6 f a 0 7 0 6 f 5 3 4 c b 0
C : \ U s e r s \ P e t r a \ A p p D a t a \ L o c a l \ T e m p \ y a x k o d i l a . p e 3 2
C : \ U s e r s \ P e t r a \ A p p D a t a \ L o c a l \ T e m p \ y a x k o d i l a . p e 3 2
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ 5 0 6 9 a 3 1 9 f 5 2 e d f 1 7 _ y a x k o d i l a . e x e
C : \ U s e r s \ P e t r a \ A p p D a t a \ L o c a l \ T e m p \ y a x k o d i l a . p e 3 2
C : \ e e 6 a b f d 9 4 d 2 8 8 b b 3 c 6 4 a 4 c 1 d d a 3 3 9 b f 1 5 3 0 2 2 7 d 7 b 6 f c 6 2 3 c 0 6 0 7 2 1 f 6 7 e 0 9 6 0 6 9
C : \ D o c u m e n t s a n d S e t t i n g s \ A d m i n i s t r a t o r \ D e s k t o p \ p G I T I K q K . e x e
C : \ 7 4 0 5 1 e e 0 8 9 7 0 4 a 4 5 0 5 9 8 9 0 b 2 5 9 e 4 2 6 c d 7 3 9 9 4 8 1 d f c 9 7 8 0 a 3 5 a c 8 5 b 4 c 0 8 f a 4 2 f 8
C : \ U s e r s \ P e t r a \ A p p D a t a \ L o c a l \ T e m p \ y a x k o d i l a . p e 3 2
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ f 3 2 d a 8 a e 2 5 0 c e 2 2 4 _ y a x k o d i l a . e x e
C : \ U s e r s \ P e t r a \ A p p D a t a \ L o c a l \ T e m p \ y a x k o d i l a . p e 3 2
C : \ 1 a c 1 8 8 b 1 4 5 5 a f 6 1 c 1 9 4 d 8 3 5 f f 3 e c 5 3 1 e 9 1 4 2 d 6 2 6 7 c 0 2 7 e e e 4 d f e f 4 3 7 1 c 1 2 1 8 c 7
C : \ a e 9 9 6 d 9 0 7 8 4 7 e 4 f d 2 e f 1 e 7 5 f d 1 4 a 5 0 e 5 a 1 b 0 3 0 6 8 2 6 7 f 6 a e c 2 a 9 0 e 9 a 7 9 4 a 9 9 e 5 f
C : \ 7 3 7 c e 9 b 0 6 3 e f 5 b 6 d 1 d c e f b 7 6 2 d d e c 3 5 7 a f e 2 4 5 e 7 0 7 e 1 e f 5 b 8 4 0 d d 3 1 b b 8 e 2 f f 0 8
C : \ 1 a 6 5 8 a 3 b f 9 8 4 1 4 7 b 6 5 b 3 2 9 3 7 1 7 a 8 a e d e d f d 6 a 8 1 b 5 7 5 9 7 c f c f 4 8 b 2 8 9 9 3 1 5 b 5 c 3 2
C : \ f c 2 0 3 6 3 4 4 f 6 3 e c 3 6 3 f c 7 8 1 8 8 f 7 4 5 0 2 7 5 2 7 0 e b 6 5 e c c 6 8 3 a 2 3 0 3 9 c d 9 9 9 c 0 a 7 4 e 4 5
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ y a x k o d i l a . e x e
C : \ U s e r s \ R A 4 9 1 ~ 1 . V U L \ A p p D a t a \ L o c a l \ T e m p \ 3 3 1 0 2 e 4 6 4 6 f a 8 2 5 9 4 0 1 b 0 9 3 8 6 9 c 6 6 1 b 2 . e x e
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ y a x k o d i l a . e x e
C : \ U s e r s \ P e t r a \ A p p D a t a \ L o c a l \ T e m p \ y a x k o d i l a . p e 3 2
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ 7 8 9 c 4 1 7 f 4 7 4 0 7 8 c 7 _ y a x k o d i l a . e x e
C : \ f 1 9 4 2 5 3 c a c 0 2 d 6 c f 2 2 9 f 2 d 3 e 5 6 4 e 8 4 3 0 e 6 e 4 5 a b 6 7 8 b 6 f 5 c d c d c 4 f 0 a 4 a e b 2 2 2 8 8
C : \ D o c u m e n
C : \ D o c u m e n t s a n d S e t t i n g s \ A d m i n i s t r a t o r \ D e s k t o p \ i H G W O r Z Z . e x e
C : \ 0 6 8 f 7 6 a f 1 a d c a 5 d c 8 c 3 1 b 8 f 3 5 8 a 2 4 2 1 4 e c 7 f b 7 f a 0 4 5 8 a 3 4 d 0 a e 4 b 3 d b f 8 0 0 e 6 a a
C : \ U s e r s \ P e t r a \ A p p D a t a \ L o c a l \ T e m p \ y a x k o d i l a . p e 3 2
C : \ 2 0 2 9 0 2 1 4 d 3 7 7 d 9 2 4 d 0 6 5 e 3 7 4 0 3 c f a f 9 f 3 0 3 c 6 3 d 5 4 d 4 f 6 9 f d 9 d 1 7 0 3 6 0 6 d 9 d 1 7 c b
C : \ f 6 4 1 3 1 6 9 6 3 b b 5 1 d b c 1 9 b a e 2 1 d d e 8 2 0 1 e 9 5 f 0 9 c 3 8 9 0 1 d a b d a a 8 b f e 0 5 9 9 7 4 2 6 d 2 0
C : \ U s e r s \ P e t r a \ A p p D a t a \ L o c a l \ T e m p \ y a x k o d i l a . p e 3 2
C : \ U s e r s \ P e t r a \ A p p D a t a \ L o c a l \ T e m p \ a 6 6 1 7 0 4 0 5 9 8 9 5 f 9 5 - y a x . p e 3 2
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ 8 4 6 e a f 2 d a 4 3 4 2 3 2 d _ y a x k o d i l a . e x e
C : \ d d f 0 a 2 4 8 0 9 8 e 5 b 6 e 5 8 2 7 1 a 9 c f 7 7 2 9 9 8 9 9 5 d b 7 4 1 c 9 1 1 7 0 d 1 1 9 6 c 7 0 0 e b d f 5 5 8 d 3 5
C : \ D o c u m e n t s a n d S e t t i n g s \ A d m i n i s t r a t o r \ D e s k t o p \ T B j 2 c b 5 4 . e x e
C : \ U s e r s \ P e t r a \ A p p D a t a \ L o c a l \ T e m p \ f i l e . p e 3 2
C : \ U s e r s \ r . v u l t \ A p p D a t a \ L o c a l \ T e m p \ 3 f 2 0 8 1 a a f 9 d 3 6 3 d c 6 e 1 1 4 6 8 b 1 b b 4 1 6 5 9 . e x e
C : \ 6 9 9 a 3 0 9 7 5 4 e 0 b 7 2 4 0 6 9 8 7 a 1 9 9 1 c 8 1 1 d f 8 0 d 0 b 9 8 6 6 a f d 3 3 6 d 3 0 4 2 7 6 0 1 2 5 1 c 9 a e 4
C : \ U s e r s \ r . v u l t \ A p p D a t a \ L o c a l \ T e m p \ 3 3 1 0 2 e 4 6 4 6 f a 8 2 5 9 4 0 1 b 0 9 3 8 6 9 c 6 6 1 b 2 . e x e
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ y a x k o d i l a . e x e
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ 3 1 5 d 0 e e 7 5 8 7 e b 2 0 5 0 4 7 9 3 b 0 5 4 8 5 3 9 b 6 1 1 0 7 a c 0 2 3 3 8 0 6 e e e 6 0 c c c 7 5 e d b a 2 6 f 7 9 4 . e x e
C : \ c 4 3 0 3 1 8 2 5 6 4 9 e 0 5 e 8 d a 7 c 1 6 6 c 6 5 3 f 1 5 3 7 9 3 d e 3 c 9 4 1 8 a b b e 4 9 b 2 9 8 e d d b 1 a 4 a 1 9 4
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ y a x k o d i l a . e x e
C : \ U s e r s \ a d m i n \ D o w n l o a d s \ 9 4 5 a 0 4 4 c e 7 9 c 9 6 d 8 7 f 3 e 3 d 0 d 1 6 4 a 5 9 c 0 6 e 5 2 e 9 0 a 6 8 6 f 6 c e b f 2 f 5 8 f 7 0 7 b d 9 9 4 1 a . e x e
C : \ D o c u m e n t s a n d S e t t i n g s \ A d m i n i s t r a t o r \ D e s k t o p \ k w G r I O L f . e x e
C : \ c 2 a 3 3 d d c d a a 7 9 3 c 9 9 3 2 f 3 e 9 4 2 5 b 1 2 c c 7 d 4 6 4 b 5 d d 0 c 9 0 7 f 8 0 1 1 2 1 d f 0 e 3 e 0 7 6 b 7 c
C : \ D o c u m e n t s a n d S e t t i n g s \ A d m i n i s t r a t o r \ D e s k t o p \ A O B I 3 i A k . e x e
C : \ U s e r s \ P e t r a \ A p p D a t a \ L o c a l \ T e m p \ f i l e . p e 3 2
C : \ U s e r s \ P e t r a \ A p p D a t a \ L o c a l \ T e m p \ y a x k o d i l a . p e 3 2
C : \ D o c u m e n t s a n d S e t t i n g s \ l u s e r \ D e s k t o p \ p i e h G Z t o . e x e
C : \ e 5 3 2 9 e b 4 4 d 0 d 0 7 b 9 3 e 0 4 0 c 8 9 d 5 4 e 1 1 e 9 1 c c b 3 2 8 e 6 d 3 0 7 9 6 7 1 b e 9 3 b b c 4 3 8 b b b c 1
C : \ 4 3 0 c a f e 4 2 f 7 a f 2 2 6 7 a e a f d 4 1 b e 1 2 d d 5 a d 7 6 3 c a 2 5 3 6 f 4 9 e a f f d 5 2 7 a 4 a 7 c 5 2 2 a a a
Hosts
| IP |
|---|
| 114.114.114.114 |
DNS
| Name | Response | Post-Analysis Lookup |
|---|---|---|
| dns.msftncsi.com | A 131.107.255.255 | 131.107.255.255 |
| dns.msftncsi.com | AAAA fd3e:4f5a:5b81::1 | 131.107.255.255 |
TCP
No TCP connections recorded.
UDP
| Source | Source Port | Destination | Destination Port |
|---|---|---|---|
| 192.168.56.101 | 53179 | 224.0.0.252 | 5355 |
| 192.168.56.101 | 49642 | 224.0.0.252 | 5355 |
| 192.168.56.101 | 137 | 192.168.56.255 | 137 |
| 192.168.56.101 | 61714 | 114.114.114.114 | 53 |
| 192.168.56.101 | 56933 | 114.114.114.114 | 53 |
| 192.168.56.101 | 138 | 192.168.56.255 | 138 |
HTTP & HTTPS Requests
No HTTP requests performed.
ICMP traffic
No ICMP traffic performed.
IRC traffic
No IRC requests performed.
Suricata Alerts
No Suricata Alerts
Suricata TLS
No Suricata TLS
Snort Alerts
No Snort Alerts
Sorry! No dropped files.
Sorry! No dropped buffers.