MZ @ !L!This program cannot be run in DOS mode.
$ +oȚoȚoȚqnȚf nȚRichoȚ PE L #pf ! $ P @ " ( H) .rdata r @ @.rsrc " " @ @ #pf V RSDSq5Jc uG# C:\vmagent_new\bin\joblist\815456\out\Release\pt\appd.dll.pdb 0
( @ X p 0 H ` x ` 0 @ P ` p 0$ $ B 8% F % H % & d' 0 ' X ' . ) * , > L. 0 L @5 8 x9 < T P= = @ Z A d i c i o n a r t a r e f a p r o g r a m a d a ( B i b l i o t e c a d o l i n k d i n m i c o d e s e q u e s t r o C o n f i a r P e r m i t i r B i f u r c a r p r o c e s s o PA N o l e m b r a r P e r m i t i r PA T r o j a n d e t e c t a d o : % s I n s t a l a r o d r i v e r d a i m p r e s s o r a P e r m i t i d o R e m o v i d o B l o q u e a d o E x e c u t a r n o r m a l m e n t e PA E x e c u t a r n a S a n d b o x E x e c u t a r n a S a n d b o x C a n c e l a d o S u s p e i t o d e f u r t a r c o n t a Q Q N o C r i a o d e s e r v i o PA I g n o r a d o A u t o - p e r m i t i d o A u t o - b l o q u e a d o L e m b r e t e ) D e t a l h e s :
N o m e d o t r o j a n : % s
C a m i n h o : % s , D e t a l h e s :
P r o c e s s o : % s
A o : % s
C a m i n h o : % s * D e s c r i o d e t a l h a d a :
P r o c e s s o : % s
A o : % s PA ( E s q u e m a d e c o m p e n s a o d e c o m p r a s o n l i n e C r i a o d o p r o c e s s o C r i a o d o p r o c e s s o d a S a n d b o x S a i r d o p r o c e s s o O p e r a r r e g i s t r o r e m o t a m e n t e E n c a d e a m e n t o r e m o t o I n j e o d e h o o k s g l o b a i s M o d i f i c a r a r q u i v o s d o s i s t e m a M o d i f i c a r r e g i s t r o M o d i f i c a r a m e m r i a d o p r o g r a m a D e t e c t a d o h a c k e r s u s p e i t o D e t a l h e s :
P r o c e s s o : % s # A d i c i o n a r i t e m d e i n i c i a l i z a o W M I B l o q u e a r I n s t a l a r h o o k g l o b a l ! E l e v a r o s p r i v i l g i o s d o p r o g r a m a R e g i s t r a r a o p e r a o d o t e c l a d o F i n a l i z a r p r o c e s s o M o d i f i c a r p g i n a w e b
A r q u i v o s u s p e i t o : % s R e s o l v e r a u t o m a t i c a m e n t e P r o c e s s a r i n j e o c o n t m v r u s d o w n l o a d m a l i c i o s o a s s o c i a o m a l i c i o s a A n n c i o s p o p - u p a l t e r a r p g i n a i n i c i a l PA C r i a r C o n t a d o U s u r i o ( M o d i f i c a r P e r m i s s e s d a C o n t a d o U s u r i o C o n t a d o U s u r i o C r i a d a : % s C o n t a d o U s u r i o M o d i f i c a d a : % s A n t i s e q u e s t r o e C o r r e e s A l t e r a r a S e n h a d e L o g i n A l t e r a r a I n f o r m a o d a C o n t a L i g a r a o t e l e m v e l " 0 = T r o j a n | 1 = A r q u i v o R e s t a u r a d o | 2 = 7 0 A s s o c i a d o c o m o u t r o p r o g r a m a . 0 = P r o g r a m a A s s o c i a d o | 1 = A r q u i v o R e s t a u r a d o | 2 = 7 0 3 N o i n s t a l e o u t r o s o f t w a r e a g r e g a d o a e s t e p r o g r a m a C r i a r l i g a o a o f i c h e i r o * O s e g u i n t e s o f t w a r e a g r e g a d o f o i b l o q u e a d o D e s a t i v a r f i c h e i r o e m v i o l a o 7 A l t e r a r o r e g i s t o d e a r r a n q u e p r i n c i p a l d o d i s c o r g i d o # R e m o v e r a m e a a e f o r t a l e c e r s i s t e m a C r i a r t a r e f a B I T S D e f i n i r n o t i f i c a o B I T S > M o d i f i c a r o R e g i s t o d e R a i z d o V o l u m e ( V B R / V o l u m e B o o t R e c o r d ) ! P l a t a f o r m a 3 6 0 d e S o f t w a r e A b e r t o $ h t t p s : / / t o o l s . s o f t . 3 6 0 . c n / j u m p ? i d = 4 4
P e r m i t i r t o d o s
B l o q u e a r t o d o s
N o m e l e m b r a r ( 0 x % 0 8 x ) . O r e g i s t o e s c r e v e a e n t r a d a p a r a d e s i n s t a l a o C a r r e g a r i n f a t i v i d a d e C h a m a d a D C O M
S o l u c i o n a r 8 E n c o n t r a d o c a v a l o d e t r o i a , s u g e r e - s e r e p a r a o i m e d i a t a % R e p a r a o i m e d i a t a e a n l i s e c o m p l e t a P r o t e o a v a n a d a c o n t r a a m e a a s X D e s c r i o d e t a l h a d a :
P r o t e o c o n t r a p e n e t r a o l a t e r a l : % s % s
I P d a o r i g e m d o a t a q u e : % s A t a q u e r e m o t o d e p a r t i l h a P e n e t r a o l a t e r a l I P d e s c o n h e c i d o I D e s c r i o d e t a l h a d a :
P r o t e o c o n t r a p e n e t r a o l a t e r a l : % s % s
C a m i n h o : % s A t a q u e r e m o t o d e s e r v i o A t a q u e r e m o t o d e t a r e f a a g e n d a d a A t a q u e r e m o t o d e r e g i s t o A t a q u e r e m o t o W M I A t a q u e r e m o t o m t o d o C O M % A t a q u e r e m o t o a f e r r a m e n t a d e s i s t e m a A t a q u e r e m o t o W I N R M A t a q u e l o c a l m t o d o C O M $ a t a q u e l o c a l a f e r r a m e n t a d e s i s t e m a A t a q u e l o c a l W M I p r o t e o d e s e g u r a n a 3 6 0 s y s t e m D e s m o n t a r u m v o l u m e L e r p a l a v r a - p a s s e d a c o n t a ( E n v i a r m e n s a g e m r p c a o l s a s s e m m o d o S S P 7 A t a q u e a o s c o n j u n t o s S e t P r o p p e l a r e a d e t r a n s f e r n c i a $ P r o t e o c o n t r a d e s l i g a m e n t o d e r e d e , A t a q u e d e v u l n e r a b i l i d a d e S a v e D i r e c t o r y A s C a b 2 S i m u l a r u m a t a q u e c l i c k t h r o u g h a o W i n d o w s E x p l o r e r & I n t e r c e t a r o p e r a o d e c a p t u r a d e e c r I n f o r m a e s s o b r e p r o t e o i$%W;(t饿m iܙF-nH,I#
2
i' u#K!BGxDs> ^% ~%wi ?.%oeDI)533̭ 4 V S _ V E R S I O N _ I N F O ? 4 S t r i n g F i l e I n f o 0 8 0 4 0 4 b 0 . C o m p a n y N a m e 3 6 0 . c n F F i l e D e s c r i p t i o n 3 6 0 [hQ[X(g2kpFr!jD} < F i l e V e r s i o n 8 , 0 , 0 , 2 0 4 1 2 I n t e r n a l N a m e a p p d . d l l b L e g a l C o p y r i g h t ( C ) 3 6 0 . c n A l l R i g h t s R e s e r v e d : O r i g i n a l F i l e n a m e a p p d . d l l 0 P r o d u c t N a m e 3 6 0 [hQ[X @ P r o d u c t V e r s i o n 8 , 0 , 0 , 2 0 4 1 D V a r F i l e I n f o $ T r a n s l a t i o n
PAolWca p p d . d l l . l o c a l e @$pf ÝARni=ߺ
+rdBHr(_GRc*O1N>F
xKl~ 3vE(\ƧGmgQ,k릶*rn4&+?ziWE
%bW3I ݷk_WjtTS8`OE3Ag ѯ .
ޢ%(-{=3vMtq/-T/9HXxYɝ!iLf4X| -ُ9%,LkhK>R_]
,P*^2N %8Bxd5VzoiĠMZ!+%em3~hzL nƪG$No;L QJ}܈[BD>FcFE%adE1qLL=w3چqH Wvlh.dDgvKvwL g, =82bH) 0)6 *H
)'0)#10
`He 0\
+7N0L0
+70 010
`He DI%r!dv0̓A9D
P>}00РwY GaS ?u0
*H
0S1 0 UBE10U
GlobalSign nv-sa1)0'U GlobalSign Code Signing Root R450
200728000000Z
300728000000Z0\1 0 UBE10U
GlobalSign nv-sa1200U)GlobalSign GCC R45 EV CodeSigning CA 20200"0
*H
0
2C[# ^8,AUSz9\ﯓLJDPxj֖|/W3X{m&*Or{dU_ 嚵,%}Q+ I_5ڤ/J/p3@ͳSRxLQtҤqѾA3 u̱ &wmIÐƸ{^$co~aϘU$6.& V ܘ.4 &xm졈<حap6y
s,X96H;Z"t,ѴImݛkc ]~;Cb:ʹ7$rs ܅"@* .minl
&D_bgL7U6nm6&=q2220|!n}~N,ߡe$*S 00U 0U % 0
+0U 0 0 U %Y c;W 60 U #0 F
x9CVPΖ;0+009+0-http://ocsp.globalsign.com/codesigningrootr450F+0:http://secure.globalsign.com/cacert/codesigningrootr45.crt0AU :0806420http://crl.globalsign.com/codesigningrootr45.crl0UU N0L0A +20402+&https://www.globalsign.com/repository/0g 0
*H
%u 99/ K|
h qjkO?EeLX"facԢ^% wq@3)mM>Ks3-=L谺ut-X:lI
jh4%BV$}+rk橘>ZtwF*=#}(s+lSPI, 'Zݝf\rufrΚ|Sm8Vil|Aw=7'ϸi f{ v1 GG1f5(_h\ DfUS$v*֔>60j
M{, KF52al)'^\ԥs! )^0q ] %#L0+6[Vo AOo3K /chj XoNdиsȜrBk$AX̰ކ {*u5#|la.znYx ]n=K 00U 0+00L+0@http://secure.globalsign.com/cacert/gsgccr45evcodesignca2020.crt0?+03http://ocsp.globalsign.com/gsgccr45evcodesignca20200UU N0L0A +20402+&https://www.globalsign.com/repository/0g 0 U 0 0GU @0>0<:86http://crl.globalsign.com/gsgccr45evcodesignca2020.crl0U % 0
+0 U #0%Y c;W 60 U W^6Dc#(4ئ0
*H
mr]"O0mdLG /"j~ydk쳚P_DgD ,퓼dYTب
Ԥʯ3Ej'#%/g[U$ Qu!Q7&~S&X$͓*&5='yJspN5,sBd&IkʄQqB7[Ӿ3뒺9s+ F 0aw=- Nn,W+FLTхrMC%Yl}^@E- ^WKIPŬ]f ^Y \x*_aLBzP!?=9}~tt=eU?B1^B~jƿtd1-E&/2ĝmq9
Bz wNQqSbx @6 ]Q>!M }pd
aͷ|100l0\1 0 UBE10U
GlobalSign nv-sa1200U)GlobalSign GCC R45 EV CodeSigning CA 2020 )[n&S@3{0
`He |0
+7 10 0 *H
1
+70
+7 10
+70/ *H
1" ^UW5~]B>w9}!g_N ƷN2T}S UwD]R'IA"ր!xĉ2sؗD]=-!kco} ͥx}m*@%6#~(,ښzoH6E@5
ű; hA1ߩ > .`[&tTN@ߵ^
o@@i(ȡOw1j隃wD3iN,x֪@,6DCR`sW|5#`B"Z?ss͢f `
T0Y0A
@.@]|Gt0
*H
0L1 0 U GlobalSign Root CA - R610U
GlobalSign10U
GlobalSign0
180620000000Z
341210000000Z0[1 0 UBE10U
GlobalSign nv-sa110/U(GlobalSign Timestamping CA - SHA384 - G40"0
*H
0
0#tu_GRa:c|9#ymt1t'b['W54Ǭ fm(J,prZ]vD|A$O6A-xNC1ϼ;njĈK &ɠL?][eE T=TSnT1;z}X߁jl e*!ǔB; F=zeV.X=SM[trK
7 ЫZՙ?O57R%4gIz)
]ևC tp({*o
mV >$g&
{gXAUnŻLKBo6df!#4DIgZf3ޙ%qn]L`<rBM&wW a&ȲMdE?Tvlj"\ )K 7t f4s }|^=PmW~7 k )0%0U 0U 0 0 U iWE93@ýe0 U #0l gS0>+2000.+0"http://ocsp2.globalsign.com/rootr606U /0-0+)'%http://crl.globalsign.com/root-r6.crl0GU @0>0<U 0402+&https://www.globalsign.com/repository/0
*H
Wg+B_ Ļ(VLp :`3 9k@I% ֤
AOἫ#ƅK$D ¤вVe ނȷaӵFHgzJbг4HEUJ^rqvp7W܍8X©~n&*Hdi/Қr$KtZ}r5W LSLIUOuoJ.jʈ0Ns^֙}K,kY7 ,Eֲnuڍ [/.=}0{|ŬQ 0QV`|="
$S'H',y< 㪄>J!b 0H'|uBkk X4
P{H+Uٍ% QclraJCWŝ< 1@l - ƍmqR!>9/z -j < SMGY|CA%,~
} `r@P CD YxƤj"00kE3ÅeHEQ0
*H
0L1 0 U GlobalSign Root CA - R610U
GlobalSign10U
GlobalSign0
141210000000Z
341210000000Z0L1 0 U GlobalSign Root CA - R610U
GlobalSign10U
GlobalSign0"0
*H
0
sf{<
E ,H[!C7y2,LC)0Ӭ! 3vT "*M .phS\ӝD DfF m%]1QTF Mۙ \xy]>LUop0BF}c{?q| 蘮x4%
k;AHzswiǶ\ X(+l^m{%7hB]Pu6i{ni
HY{`zdiCLlS-^r>TȽgLEӹ0#LٙZW ̻S,Ğ4L $x_|Jt%>K,V8\yt-a ~~OY_-CRF fGywT[ $7EZNDHذ IIeqnE>l
gZɤ1I0E0o0[1 0 UBE10U
GlobalSign nv-sa110/U(GlobalSign Timestamping CA - SHA384 - G4utqɒDߥp0 `He-0 *H
1
*H
0+ *H
41 0 0 `He
*H
0/ *H
1" ыdo5!G&
&#'y0 *H
/1000 y9BVT͎YKq40s0_]0[1 0 UBE10U
GlobalSign nv-sa110/U(GlobalSign Timestamping CA - SHA384 - G4utqɒDߥp0
*H
>bߓ
`RR-}eu1-dWO/ZנS0$@T|t.
\5 0TX@D>> ̯mtwepQ$; 7QQDLm!M?Vq8SHh-xWSFy9谥̐O'lɫ[X ͆j ,wSdF soN'FjD92t5[cWNU" NV.lB48 & c~
։,"= mE}wêC # qY_϶|IMa/iKo} ҫr
=^VԈ0ɢ8TIXѬrh