MZ @ !L!This program cannot be run in DOS mode.
$ +oȚoȚoȚqnȚf nȚRichoȚ PE L #pf ! & P ] @ " * H) .rdata r @ @.rsrc " $ @ @ #pf V RSDSR HGFR8(&,_ C:\vmagent_new\bin\joblist\815456\out\Release\es\appd.dll.pdb 0
( @ X p 0 H ` x `
0
@
P
`
p
0$ $ > 0% F x% H % |& `' 0 ' X ' . ) + , N l. @1 V 5 h : ~ = R = T> (A Z A a d i r t a r e a p r o g r a m a d a ) B i b l i o t e c a d e l l i n k d i n m i c o d e s e c u e s t r o C o n f i a r P e r m i t i r PA P r o c e s o d e f o r k PA N o r e c o r d a r P e r m i t i r PA T r o j a n d e t e c t a d o : % s I n s t a l a r e l d r i v e r d e i m p r e s o r a P e r m i t i d o R e m o v i d o B l o q u e a d o E j e c u t a r n o r m a l m e n t e PA E j e c u t a r e n S a n d b o x E j e c u t a r e n S a n d b o x C a n c e l a d o S o s p e c h o s o d e r o b a r c u e n t a Q Q N o C r e a c i n d e s e r v i c i o I g n o r a d o A u t o - p e r m i t i d o A u t o - b l o q u e a d o A v i s o ) D e t a l l e s :
N o m e d o t r o j a n : % s
C a m i n h o : % s , D e t a l l e s :
P r o c e s s o : % s
A o : % s
C a m i n h o : % s - D e s c r i p c i n d e t a l l a d a :
P r o c e s o : % s
A c c i n : % s PA ) E s q u e m a d e c o m p e n s a c i n d e c o m p r a s o n l i n e C r e a c i n d e l p r o c e s o C r e a c i n d e l p r o c e s o d e S a n d b o x S a l i r d e l p r o c e s o O p e r a r r e g i s t r o r e m o t a m e n t e E n c a d e n a m i e n t o r e m o t o I n j e c c i n d e h o o k s g l o b a l e s C a m b i a r a r c h i v o s d e l s i s t e m a C a m b i a r r e g i s t r o C a m b i a r l a m e m o r i a d e l p r o g r a m a D e t e c t a d o h a c k e r s o s p e c h o s o D e t a l l e s :
P r o c e s o : % s % A a d i r e l e m e n t o d e i n i c i a l i z a c i n W M I B l o q u e a r PA I n s t a l a r h o o k g l o b a l # E l e v a r l o s p r i v i l e g i o s d e l p r o g r a m a " R e g i s t r a r l a o p e r a c i n d e l t e c l a d o T e r m i n a r p r o c e s o C a m b i a r p g i n a w e b
A r c h i v o s o s p e c h o s o : % s R e s o l v e r a u t o m t i c a m e n t e P r o c e s a r i n j e c c i n c o n t i e n e v i r u s d e s c a r g a m a l i c i o s a a s o c i a c i n m a l i c i o s a A n u n c i o s p o p - u p C a m b i a r p g i n a d e i n i c i o PA C r e a r C u e n t a d e U s u a r i o ( C a m b i a r P e r m i s i o n e s d e C u e n t a d e U s u a r i o C u e n t a d e U s u a r i o C r e a d a : % s C u e n t a d e U s u a r i o C a m b i a d a : % s A n t i s e c u e s t r o y C o r r e c c i o n e s C a m b i a r c o n t r a s e a d e L o g i n # C a m b i a r l a I n f o r m a c i n d e l a C u e n t a C o n e c t a r s e a u n t e l f o n o m v i l " 0 = T r o j a n | 1 = A r c h i v o R e s t a u r a d o | 2 = 7 0 A s o c i a d o c o n o t r o p r o g r a m a - 0 = P r o g r a m a A s o c i a d o | 1 = A r c h i v o R e s t a u r a d o | 2 = 7 0 3 N o i n s t a l e o t r o s o f t w a r e i n t e g r a d o e n e s t e p r o g r a m a C r e a r v n c u l o d e a r c h i v o / S e h a b l o q u e a d o e l s i g u i e n t e s o f t w a r e i n t e g r a d o ! D e s h a b i l i t a r a r c h i v o d e v i o l a c i n 4 C a m b i a r e l r e g i s t r o d e i n i c i o m a e s t r o d e l d i s c o d u r o ) E l i m i n a r a m e n a z a s y s i s t e m a d e p r o t e c c i n C r e a r t a r e a B I T S E s t a b l e c e r n o t i f i c a c i n B I T S / M o d i f i c a r r e g i s t r o d e a r r a n q u e d e v o l u m e n ( V B R ) " P l a t a f o r m a d e s o f t w a r e a b i e r t o 3 6 0 $ h t t p s : / / t o o l s . s o f t . 3 6 0 . c n / j u m p ? i d = 4 4
P e r m i t i r t o d o
B l o q u e a r t o d o
N o v o l v e r a r e c o r d a r m e ( 0 x % 0 8 x ) 0 E l r e g i s t r o e s c r i b e l a e n t r a d a d e d e s i n s t a l a c i n C a r g a r o p e r a c i n i n f PA L l a m a d a D C O M
S o l u c i o n a r = C a b a l l o d e T r o y a e n c o n t r a d o , s u g e r i m o s r e p a r a r i n m e d i a t a m e n t e ' R e p a r a r d e i n m e d i a t o y e s c n e r c o m p l e t o P r o t e c c i n d e a m e n a z a s a v a n z a d a ^ D e s c r i p c i n d e t a l l a d a :
P r o t e c c i n c o n t r a p e n e t r a c i n l a t e r a l : % s % s
I P d e o r i g e n d e l a t a q u e : % s A t a q u e c o m p a r t i d o r e m o t o P e n e t r a c i n l a t e r a l I P d e s c o n o c i d a K D e s c r i p c i n d e t a l l a d a :
P r o t e c c i n c o n t r a p e n e t r a c i n l a t e r a l : % s % s
R u t a : % s A t a q u e d e s e r v i c i o r e m o t o $ A t a q u e d e t a r e a s r e m o t a s p r o g r a m a d a s A t a q u e d e r e g i s t r o r e m o t o A t a q u e W M I r e m o t o A t a q u e d e m t o d o C O M r e m o t o ' A t a q u e d e h e r r a m i e n t a d e s i s t e m a r e m o t o A t a q u e W I N R M r e m o t o A t a q u e d e m t o d o C O M l o c a l ' a t a q u e d e h e r r a m i e n t a d e l s i s t e m a l o c a l A t a q u e W M I l o c a l ' P r o t e c c i n d e s e g u r i d a d d e l s i s t e m a 3 6 0 D e s m o n t a r v o l u m e n L e e r c o n t r a s e a d e l a c u e n t a & E n v i a r m e n s a j e r p c a l s a s s e n m o d o S S P ( S e t P r o p d e f i n e e l a t a q u e d e p o r t a p a p e l e s P r o t e c c i n d e d e s c o n e x i n d e r e d + A t a q u e d e v u l n e r a b i l i d a d S a v e D i r e c t o r y A s C a b 2 S i m u l a n d o a t a q u e d e e x p l o r a d o r d e W i n d o w s p o r c l i c , I n t e r c e p t a r o p e r a c i n d e c a p t u r a d e p a n t a l l a PA I n f o r m a c i n d e p r o t e c c i n PA Pa,kϞ@We }xWCJ:fC.8hVzNa7KupPʪ{EdT5ƣ
n{==1hْ:$z&pwEϦP_ ڋz=Saxy4 V S _ V E R S I O N _ I N F O ? 4 S t r i n g F i l e I n f o 0 8 0 4 0 4 b 0 . C o m p a n y N a m e 3 6 0 . c n F F i l e D e s c r i p t i o n 3 6 0 [hQ[X(g2kpFr!jD} < F i l e V e r s i o n 8 , 0 , 0 , 2 0 4 1 2 I n t e r n a l N a m e a p p d . d l l b L e g a l C o p y r i g h t ( C ) 3 6 0 . c n A l l R i g h t s R e s e r v e d : O r i g i n a l F i l e n a m e a p p d . d l l 0 P r o d u c t N a m e 3 6 0 [hQ[X @ P r o d u c t V e r s i o n 8 , 0 , 0 , 2 0 4 1 D V a r F i l e I n f o $ T r a n s l a t i o n
PAPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADolWca p p d . d l l . l o c a l e %pf W^˝!OW fC*!u
x M fȸBi8Fd(adt]sˢU07${t-s5 L[XT 7fZp 6K/0 {@,RP8;ZzI@^}&H-n}~N,ߡe$*S 00U 0U % 0
+0U 0 0 U %Y c;W 60 U #0 F
x9CVPΖ;0+009+0-http://ocsp.globalsign.com/codesigningrootr450F+0:http://secure.globalsign.com/cacert/codesigningrootr45.crt0AU :0806420http://crl.globalsign.com/codesigningrootr45.crl0UU N0L0A +20402+&https://www.globalsign.com/repository/0g 0
*H
%u 99/ K|
h qjkO?EeLX"facԢ^% wq@3)mM>Ks3-=L谺ut-X:lI
jh4%BV$}+rk橘>ZtwF*=#}(s+lSPI, 'Zݝf\rufrΚ|Sm8Vil|Aw=7'ϸi f{ v1 GG1f5(_h\ DfUS$v*֔>60j
M{, KF52al)'^\ԥs! )^0q ] %#L0+6[Vo AOo3K /chj XoNdиsȜrBk$AX̰ކ {*u5#|la.znYx ]n=K 00U 0+00L+0@http://secure.globalsign.com/cacert/gsgccr45evcodesignca2020.crt0?+03http://ocsp.globalsign.com/gsgccr45evcodesignca20200UU N0L0A +20402+&https://www.globalsign.com/repository/0g 0 U 0 0GU @0>0<:86http://crl.globalsign.com/gsgccr45evcodesignca2020.crl0U % 0
+0 U #0%Y c;W 60 U W^6Dc#(4ئ0
*H
mr]"O0mdLG /"j~ydk쳚P_DgD ,퓼dYTب
Ԥʯ3Ej'#%/g[U$ Qu!Q7&~S&X$͓*&5='yJspN5,sBd&IkʄQqB7[Ӿ3뒺9s+ F 0aw=- Nn,W+FLTхrMC%Yl}^@E- ^WKIPŬ]f ^Y \x*_aLBzP!?=9}~tt=eU?B1^B~jƿtd1-E&/2ĝmq9
Bz wNQqSbx @6 ]Q>!M }pd
aͷ|100l0\1 0 UBE10U
GlobalSign nv-sa1200U)GlobalSign GCC R45 EV CodeSigning CA 2020 )[n&S@3{0
`He |0
+7 10 0 *H
1
+70
+7 10
+70/ *H
1" Ux-, [A"ր!xĉ2sؗD]=-!kco} ͥx}m*@%6#~(,ښzoH6E@5
ű; hA1ߩ > .`[&tTN@ߵ^
o@@i(ȡOw1j隃wD3iN,x֪@,6DCR`sW|5#`B"Z?ss͢f `
T0Y0A
@.@]|Gt0
*H
0L1 0 U GlobalSign Root CA - R610U
GlobalSign10U
GlobalSign0
180620000000Z
341210000000Z0[1 0 UBE10U
GlobalSign nv-sa110/U(GlobalSign Timestamping CA - SHA384 - G40"0
*H
0
0#tu_GRa:c|9#ymt1t'b['W54Ǭ fm(J,prZ]vD|A$O6A-xNC1ϼ;njĈK &ɠL?][eE T=TSnT1;z}X߁jl e*!ǔB; F=zeV.X=SM[trK
7 ЫZՙ?O57R%4gIz)
]ևC tp({*o
mV >$g&
{gXAUnŻLKBo6df!#4DIgZf3ޙ%qn]L`<rBM&wW a&ȲMdE?Tvlj"\ )K 7t f4s }|^=PmW~7 k )0%0U 0U 0 0 U iWE93@ýe0 U #0l gS0>+2000.+0"http://ocsp2.globalsign.com/rootr606U /0-0+)'%http://crl.globalsign.com/root-r6.crl0GU @0>0<U 0402+&https://www.globalsign.com/repository/0
*H
Wg+B_ Ļ(VLp :`3 9k@I% ֤
AOἫ#ƅK$D ¤вVe ނȷaӵFHgzJbг4HEUJ^rqvp7W܍8X©~n&*Hdi/Қr$KtZ}r5W LSLIUOuoJ.jʈ0Ns^֙}K,kY7 ,Eֲnuڍ [/.=}0{|ŬQ 0QV`|="
$S'H',y< 㪄>J!b 0H'|uBkk X4
P{H+Uٍ% QclraJCWŝ< 1@l - ƍmqR!>9/z -j < SMGY|CA%,~
} `r@P CD YxƤj"00kE3ÅeHEQ0
*H
0L1 0 U GlobalSign Root CA - R610U
GlobalSign10U
GlobalSign0
141210000000Z
341210000000Z0L1 0 U GlobalSign Root CA - R610U
GlobalSign10U
GlobalSign0"0
*H
0
sf{<
E ,H[!C7y2,LC)0Ӭ! 3vT "*M .phS\ӝD DfF m%]1QTF Mۙ \xy]>LUop0BF}c{?q| 蘮x4%
k;AHzswiǶ\ X(+l^m{%7hB]Pu6i{ni
HY{`zdiCLlS-^r>TȽgLEӹ0#LٙZW ̻S,Ğ4L $x_|Jt%>K,V8\yt-a ~~OY_-CRF fGywT[ $7EZNDHذ IIeqnE>l
gZɤ1I0E0o0[1 0 UBE10U
GlobalSign nv-sa110/U(GlobalSign Timestamping CA - SHA384 - G4utqɒDߥp0 `He-0 *H
1
*H
0+ *H
41 0 0 `He
*H
0/ *H
1" !("
S <[iI`0 *H
/1000 y9BVT͎YKq40s0_]0[1 0 UBE10U
GlobalSign nv-sa110/U(GlobalSign Timestamping CA - SHA384 - G4utqɒDߥp0
*H
ZW@ip [ V';Ŗ!&vL"o7Dx e<i0NrZ9qe[dm+ib8aC7zrl mW!K}2u䄷?.9g6u$MO'n =s*prX2Ѻim4u*oÈsxEVdCT 5Me3-]Y1n>JS2a6DdLJ=
.M \@fp13 v$zt"8?m<с.hO뵏Ȥ]/ ,
uu?>ֽic0i͵ė=L"@iu] \iTm/HF'X!V㰩Zˏ