MZ @ !L!This program cannot be run in DOS mode.
$ +oȚoȚoȚqnȚf nȚRichoȚ PE L #pf ! " @ @ t & H) .rdata r @ @.rsrc t @ @ #pf V RSDSy~6LFg "kZ C:\vmagent_new\bin\joblist\815456\out\Release\en\appd.dll.pdb 0
( @ X p 0 H ` x ` 0 @ P ` p 0$ $ 8 $ H @% F % & & . ' P \' |( * * , X D/ 2 |6 x9 L 9 D: = Z A d d s c h e d u l e d t a s k H i j a c k d y n a m i c l i n k l i b r a r y T r u s t A l l o w PA F o r k p r o c e s s D o n o t r e m e m b e r A l l o w D e t e c t e d T r o j a n : % s PA I n s t a l l p r i n t e r d r i v e r A l l o w e d R e m o v e d B l o c k e d R u n n o r m a l l y PA R u n i n S a n d b o x A u t o - S a n d b o x C a n c e l l e d S u s p i c i o u s Q Q a c c o u n t p i l f e r N o S e r v i c e c r e a t i o n PA I g n o r e d PA A u t o - a l l o w e d A u t o - b l o c k e d R e m e m b e r " D e t a i l s :
T r o j a n n a m e : % s
P a t h : % s ) D e t a i l s :
P r o c e s s : % s
A c t i o n : % s
P a t h : % s , D e t a i l e d d e s c r i p t i o n :
P r o c e s s : % s
A c t i o n : % s PA # O n l i n e s h o p p i n g c o m p e n s a t i o n s c h e m e P r o c e s s c r e a t i o n S a n d b o x p r o c e s s c r e a t i o n E x i t p r o c e s s O p e r a t e r e g i s t r y r e m o t e l y R e m o t e t h r e a d i n j e c t i o n G l o b a l h o o k s i n j e c t i o n M o d i f y s y s t e m f i l e s M o d i f y r e g i s t r y PA M o d i f y p r o g r a m m e m o r y S u s p i c i o u s h a c k e r d e t e c t e d D e t a i l s :
P r o c e s s : % s A d d W M I s t a r t u p i t e m B l o c k PA I n s t a l l g l o b a l h o o k E l e v a t e p r o g r a m p r i v i l e g e s R e c o r d k e y b o a r d o p e r a t i o n T e r m i n a t e p r o c e s s M o d i f y w e b p a g e
S u s p i c i o u s f i l e : % s R e s o l v e a u t o m a t i c a l l y P r o c e s s i n j e c t i o n c o n t a i n v i r u s e s m a l i c i o u s d o w n l o a d m a l i c i o u s b u n d l e P o p u p a d s c h a n g e h o m e p a g e PA C r e a t e U s e r A c c o u n t M o d i f y U s e r A c c o u n t P e r m i s s i o n s U s e r A c c o u n t C r e a t e d : % s U s e r A c c o u n t M o d i f i e d : % s A n t i H a c k i n g a n d P a t c h i n g C h a n g e L o g i n P a s s w o r d C h a n g e A c c o u n t I n f o r m a t i o n C o n n e c t t o m o b i l e p h o n e 0 = T r o j a n | 1 = R e s t o r e F i l e | 2 = 7 0 B u n d l e d b y o t h e r s o f t w a r e & 0 = B u n d l e d S o f t w a r e | 1 = R e s t o r e F i l e | 2 = 7 0 7 D o n o t i n s t a l l o t h e r s o f t w a r e b u n d l e d w i t h t h i s p r o g r a m C r e a t e f i l e l i n k * T h e f o l l o w i n g b u n d l e d s o f t w a r e w a s b l o c k e d D i s a b l e v i o l a t i o n f i l e & C h a n g e h a r d d r i v e ' s M a s t e r B o o t R e c o r d R e m o v e t h r e a t a n d h a r d e n s y s t e m S e t B I T S n o t i f i c a t i o n C r e a t e B I T S t a s k M o d i f y V o l u m e B o o t R e c o r d ( V B R ) 3 6 0 O p e n S o f t w a r e P l a t f o r m $ h t t p s : / / t o o l s . s o f t . 3 6 0 . c n / j u m p ? i d = 4 4
A l l o w a l l
B l o c k a l l
D o n ' t r e m i n d m e ( 0 x % 0 8 x ) ' T h e r e g i s t r y w r i t e s t h e u n i n s t a l l e n t r y L o a d i n f o p e r a t i o n PA D C O M C a l l R e p a i r 1 T r o j a n h o r s e f o u n d , s u g g e s t t o r e p a i r i m m e d i a t e l y I m m e d i a t e r e p a i r a n d f u l l s c a n A d v a n c e d T h r e a t P r o t e c t i o n Q D e t a i l e d d e s c r i p t i o n :
L a t e r a l p e n e t r a t i o n p r o t e c t i o n : % s % s
A t t a c k s o u r c e I P : % s R e m o t e s h a r e a t t a c k L a t e r a l p e n e t r a t i o n
u n k n o w n I P C D e t a i l e d d e s c r i p t i o n :
L a t e r a l p e n e t r a t i o n p r o t e c t i o n : % s % s
P a t h : % s R e m o t e s e r v i c e a t t a c k R e m o t e s c h e d u l e d t a s k a t t a c k R e m o t e r e g i s t r y a t t a c k R e m o t e W M I a t t a c k R e m o t e C O M m e t h o d a t t a c k R e m o t e s y s t e m t o o l a t t a c k PA R e m o t e W I N R M a t t a c k L o c a l C O M m e t h o d a t t a c k l o c a l s y s t e m t o o l a t t a c k L o c a l W M I a t t a c k 3 6 0 s y s t e m s e c u r i t y p r o t e c t i o n U n m o u n t a v o l u m e R e a d a c c o u n t p a s s w o r d % S e n d r p c m e s s a g e t o l s a s s i n S S P m o d e S e t P r o p s e t s c l i p b o a r d a t t a c k N e t w o r k d i s c o n n e c t i o n p r o t e c t i o n ' S a v e D i r e c t o r y A s C a b v u l n e r a b i l i t y a t t a c k 2 S i m u l a t i n g a c l i c k - t h r o u g h W i n d o w s E x p l o r e r a t t a c k I n t e r c e p t s c r e e n s h o t o p e r a t i o n P r o t e c t i o n i n f o r m a t i o n + SN.64o *Uhwp_V ( Nђe0L c 5I: . QLR
;{:bVAfHj7
sꢝI
pwi Ɂ1犾&)4 V S _ V E R S I O N _ I N F O ? 4 S t r i n g F i l e I n f o 0 8 0 4 0 4 b 0 . C o m p a n y N a m e 3 6 0 . c n F F i l e D e s c r i p t i o n 3 6 0 [hQ[X(g2kpFr!jD} < F i l e V e r s i o n 8 , 0 , 0 , 2 0 4 1 2 I n t e r n a l N a m e a p p d . d l l b L e g a l C o p y r i g h t ( C ) 3 6 0 . c n A l l R i g h t s R e s e r v e d : O r i g i n a l F i l e n a m e a p p d . d l l 0 P r o d u c t N a m e 3 6 0 [hQ[X @ P r o d u c t V e r s i o n 8 , 0 , 0 , 2 0 4 1 D V a r F i l e I n f o $ T r a n s l a t i o n
PAPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADolWca p p d . d l l . l o c a l e $pf >st1`Ϡ: "pnյgG8z` r.`j$>j_idP^ev q ef!6f.ƣъ@[O4a9vud.I\ʛ?JˎC\<4{H{g`bx7pӘ.zA+>|;ClWZ8ыo QDgHR؈ |_!Z˕TS [M4*Z*j i4[U| 'Hɸ3D68FYRV`4<+{b-Dqtp9n YzCӮzKp5_]Kl|y&Y^t/ zMz`_d $2j %QZN q];J5Gڶ(#۹^OݨkʹG<kMD]I_Դ#M1D D Tѧݾ4X mS =82bH) 0)6 *H
)'0)#10
`He 0\
+7N0L0
+70 010
`He li5%g ƪʟd߱`렂00РwY GaS ?u0
*H
0S1 0 UBE10U
GlobalSign nv-sa1)0'U GlobalSign Code Signing Root R450
200728000000Z
300728000000Z0\1 0 UBE10U
GlobalSign nv-sa1200U)GlobalSign GCC R45 EV CodeSigning CA 20200"0
*H
0
2C[# ^8,AUSz9\ﯓLJDPxj֖|/W3X{m&*Or{dU_ 嚵,%}Q+ I_5ڤ/J/p3@ͳSRxLQtҤqѾA3 u̱ &wmIÐƸ{^$co~aϘU$6.& V ܘ.4 &xm졈<حap6y
s,X96H;Z"t,ѴImݛkc ]~;Cb:ʹ7$rs ܅"@* .minl
&D_bgL7U6nm6&=q2220|!n}~N,ߡe$*S 00U 0U % 0
+0U 0 0 U %Y c;W 60 U #0 F
x9CVPΖ;0+009+0-http://ocsp.globalsign.com/codesigningrootr450F+0:http://secure.globalsign.com/cacert/codesigningrootr45.crt0AU :0806420http://crl.globalsign.com/codesigningrootr45.crl0UU N0L0A +20402+&https://www.globalsign.com/repository/0g 0
*H
%u 99/ K|
h qjkO?EeLX"facԢ^% wq@3)mM>Ks3-=L谺ut-X:lI
jh4%BV$}+rk橘>ZtwF*=#}(s+lSPI, 'Zݝf\rufrΚ|Sm8Vil|Aw=7'ϸi f{ v1 GG1f5(_h\ DfUS$v*֔>60j
M{, KF52al)'^\ԥs! )^0q ] %#L0+6[Vo AOo3K /chj XoNdиsȜrBk$AX̰ކ {*u5#|la.znYx ]n=K 00U 0+00L+0@http://secure.globalsign.com/cacert/gsgccr45evcodesignca2020.crt0?+03http://ocsp.globalsign.com/gsgccr45evcodesignca20200UU N0L0A +20402+&https://www.globalsign.com/repository/0g 0 U 0 0GU @0>0<:86http://crl.globalsign.com/gsgccr45evcodesignca2020.crl0U % 0
+0 U #0%Y c;W 60 U W^6Dc#(4ئ0
*H
mr]"O0mdLG /"j~ydk쳚P_DgD ,퓼dYTب
Ԥʯ3Ej'#%/g[U$ Qu!Q7&~S&X$͓*&5='yJspN5,sBd&IkʄQqB7[Ӿ3뒺9s+ F 0aw=- Nn,W+FLTхrMC%Yl}^@E- ^WKIPŬ]f ^Y \x*_aLBzP!?=9}~tt=eU?B1^B~jƿtd1-E&/2ĝmq9
Bz wNQqSbx @6 ]Q>!M }pd
aͷ|100l0\1 0 UBE10U
GlobalSign nv-sa1200U)GlobalSign GCC R45 EV CodeSigning CA 2020 )[n&S@3{0
`He |0
+7 10 0 *H
1
+70
+7 10
+70/ *H
1" ;\PJ N;dw v=ZնR A\Mf0
*H
bFf'3 (G+8J6]^sC:7^% w((d}Sy\ Yd8y!
(-W*A,ꭊNRjlv*X()`Zg(@%7Oㅶ9- [Ĭ(EC)} ,VZԑ%EvԒNJ+çwҒ)?
.Ō U6|&A!8߶R|٣-M
U),ǜ[kbo6%xq$V( 3iR衂0
+710 *H
01
0 `He0 *H
0 +2010
`He ˑy Kc˲vcs ߙ''bhfZsBPdߩ20240617115528Z0`^0\1 0 UBE10U
GlobalSign nv-sa1200U )Globalsign TSA for Advanced - G4 - 202311S0k0SutqɒDߥp0
*H
0[1 0 UBE10U
GlobalSign nv-sa110/U(GlobalSign Timestamping CA - SHA384 - G40
231102103002Z
341204103002Z0\1 0 UBE10U
GlobalSign nv-sa1200U )Globalsign TSA for Advanced - G4 - 20231100
*H
0 5FtՖA"ր!xĉ2sؗD]=-!kco} ͥx}m*@%6#~(,ښzoH6E@5
ű; hA1ߩ > .`[&tTN@ߵ^
o@@i(ȡOw1j隃wD3iN,x֪@,6DCR`sW|5#`B"Z?ss͢f `
T0Y0A
@.@]|Gt0
*H
0L1 0 U GlobalSign Root CA - R610U
GlobalSign10U
GlobalSign0
180620000000Z
341210000000Z0[1 0 UBE10U
GlobalSign nv-sa110/U(GlobalSign Timestamping CA - SHA384 - G40"0
*H
0
0#tu_GRa:c|9#ymt1t'b['W54Ǭ fm(J,prZ]vD|A$O6A-xNC1ϼ;njĈK &ɠL?][eE T=TSnT1;z}X߁jl e*!ǔB; F=zeV.X=SM[trK
7 ЫZՙ?O57R%4gIz)
]ևC tp({*o
mV >$g&
{gXAUnŻLKBo6df!#4DIgZf3ޙ%qn]L`<rBM&wW a&ȲMdE?Tvlj"\ )K 7t f4s }|^=PmW~7 k )0%0U 0U 0 0 U iWE93@ýe0 U #0l gS0>+2000.+0"http://ocsp2.globalsign.com/rootr606U /0-0+)'%http://crl.globalsign.com/root-r6.crl0GU @0>0<U 0402+&https://www.globalsign.com/repository/0
*H
Wg+B_ Ļ(VLp :`3 9k@I% ֤
AOἫ#ƅK$D ¤вVe ނȷaӵFHgzJbг4HEUJ^rqvp7W܍8X©~n&*Hdi/Қr$KtZ}r5W LSLIUOuoJ.jʈ0Ns^֙}K,kY7 ,Eֲnuڍ [/.=}0{|ŬQ 0QV`|="
$S'H',y< 㪄>J!b 0H'|uBkk X4
P{H+Uٍ% QclraJCWŝ< 1@l - ƍmqR!>9/z -j < SMGY|CA%,~
} `r@P CD YxƤj"00kE3ÅeHEQ0
*H
0L1 0 U GlobalSign Root CA - R610U
GlobalSign10U
GlobalSign0
141210000000Z
341210000000Z0L1 0 U GlobalSign Root CA - R610U
GlobalSign10U
GlobalSign0"0
*H
0
sf{<
E ,H[!C7y2,LC)0Ӭ! 3vT "*M .phS\ӝD DfF m%]1QTF Mۙ \xy]>LUop0BF}c{?q| 蘮x4%
k;AHzswiǶ\ X(+l^m{%7hB]Pu6i{ni
HY{`zdiCLlS-^r>TȽgLEӹ0#LٙZW ̻S,Ğ4L $x_|Jt%>K,V8\yt-a ~~OY_-CRF fGywT[ $7EZNDHذ IIeqnE>l
gZɤ1I0E0o0[1 0 UBE10U
GlobalSign nv-sa110/U(GlobalSign Timestamping CA - SHA384 - G4utqɒDߥp0 `He-0 *H
1
*H
0+ *H
41 0 0 `He
*H
0/ *H
1" >^LLu|!5 w ҧ<B0 *H
/1000 y9BVT͎YKq40s0_]0[1 0 UBE10U
GlobalSign nv-sa110/U(GlobalSign Timestamping CA - SHA384 - G4utqɒDߥp0
*H
/ǧ"R2>.h?r'Axz_t,SJ ϋ c![.淳xHq w!X.%ح @oy)ّ,䢷i&Gq<5){e%_1Ub4}r~?bcZ+e26_ZV
X\?h7luڤ,!cQ7pw)E_G
_\x6 AuDSPV)g' "qgf1}Ƈˑ7IACK9[V-8u_18 J@#ǛetFoD<[,o/ñ^Gд0 OLL0.tҷ@"T