Overview
overview
3Static
static
1xmes/about/about.htm
windows7-x64
1xmes/about/about.htm
windows10-2004-x64
1xmes/about...k.html
windows7-x64
1xmes/about...k.html
windows10-2004-x64
1xmes/about...hk.vbs
windows7-x64
1xmes/about...hk.vbs
windows10-2004-x64
1xmes/about/ads.htm
windows7-x64
1xmes/about/ads.htm
windows10-2004-x64
1xmes/about/conn.asp
windows7-x64
3xmes/about/conn.asp
windows10-2004-x64
3xmes/about/guany.asp
windows7-x64
3xmes/about/guany.asp
windows10-2004-x64
3xmes/about/help.asp
windows7-x64
3xmes/about/help.asp
windows10-2004-x64
3xmes/about/lianus.htm
windows7-x64
1xmes/about/lianus.htm
windows10-2004-x64
1xmes/about/link.vbs
windows7-x64
1xmes/about/link.vbs
windows10-2004-x64
1xmes/about/link.htm
windows7-x64
1xmes/about/link.htm
windows10-2004-x64
1xmes/about/mian.htm
windows7-x64
1xmes/about/mian.htm
windows10-2004-x64
1xmes/addfree.js
windows7-x64
3xmes/addfree.js
windows10-2004-x64
3xmes/addfreechk.vbs
windows7-x64
1xmes/addfreechk.vbs
windows10-2004-x64
1xmes/addxinxi.vbs
windows7-x64
1xmes/addxinxi.vbs
windows10-2004-x64
1xmes/addxinxichk.vbs
windows7-x64
1xmes/addxinxichk.vbs
windows10-2004-x64
1xmes/admin...UK.vbs
windows7-x64
1xmes/admin...UK.vbs
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
xmes/about/about.htm
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
xmes/about/about.htm
Resource
win10v2004-20240709-en
Behavioral task
behavioral3
Sample
xmes/about/addlink.html
Resource
win7-20240705-en
Behavioral task
behavioral4
Sample
xmes/about/addlink.html
Resource
win10v2004-20240709-en
Behavioral task
behavioral5
Sample
xmes/about/addlinkchk.vbs
Resource
win7-20240705-en
Behavioral task
behavioral6
Sample
xmes/about/addlinkchk.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral7
Sample
xmes/about/ads.htm
Resource
win7-20240704-en
Behavioral task
behavioral8
Sample
xmes/about/ads.htm
Resource
win10v2004-20240709-en
Behavioral task
behavioral9
Sample
xmes/about/conn.asp
Resource
win7-20240704-en
Behavioral task
behavioral10
Sample
xmes/about/conn.asp
Resource
win10v2004-20240709-en
Behavioral task
behavioral11
Sample
xmes/about/guany.asp
Resource
win7-20240704-en
Behavioral task
behavioral12
Sample
xmes/about/guany.asp
Resource
win10v2004-20240709-en
Behavioral task
behavioral13
Sample
xmes/about/help.asp
Resource
win7-20240708-en
Behavioral task
behavioral14
Sample
xmes/about/help.asp
Resource
win10v2004-20240709-en
Behavioral task
behavioral15
Sample
xmes/about/lianus.htm
Resource
win7-20240708-en
Behavioral task
behavioral16
Sample
xmes/about/lianus.htm
Resource
win10v2004-20240709-en
Behavioral task
behavioral17
Sample
xmes/about/link.vbs
Resource
win7-20240705-en
Behavioral task
behavioral18
Sample
xmes/about/link.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral19
Sample
xmes/about/link.htm
Resource
win7-20240705-en
Behavioral task
behavioral20
Sample
xmes/about/link.htm
Resource
win10v2004-20240709-en
Behavioral task
behavioral21
Sample
xmes/about/mian.htm
Resource
win7-20240704-en
Behavioral task
behavioral22
Sample
xmes/about/mian.htm
Resource
win10v2004-20240709-en
Behavioral task
behavioral23
Sample
xmes/addfree.js
Resource
win7-20240708-en
Behavioral task
behavioral24
Sample
xmes/addfree.js
Resource
win10v2004-20240709-en
Behavioral task
behavioral25
Sample
xmes/addfreechk.vbs
Resource
win7-20240704-en
Behavioral task
behavioral26
Sample
xmes/addfreechk.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral27
Sample
xmes/addxinxi.vbs
Resource
win7-20240705-en
Behavioral task
behavioral28
Sample
xmes/addxinxi.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral29
Sample
xmes/addxinxichk.vbs
Resource
win7-20240705-en
Behavioral task
behavioral30
Sample
xmes/addxinxichk.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral31
Sample
xmes/admin/DEL_BUK.vbs
Resource
win7-20240704-en
Behavioral task
behavioral32
Sample
xmes/admin/DEL_BUK.vbs
Resource
win10v2004-20240709-en
General
-
Target
4b9acd649b244473aeb8a84b0d358a5d_JaffaCakes118
-
Size
1.0MB
-
MD5
4b9acd649b244473aeb8a84b0d358a5d
-
SHA1
9756b3ceb18a47fc68ce83de0918b2899a730027
-
SHA256
2c3e570d47493e81846fc43949d923d35a28313fe1ac6f0c1873f92063eb3269
-
SHA512
dde003d17958428ce15e7c198f6f999c48d36f5912d0eb961f796a1b662dcc8bea68c1963e5d9edade59990b7c013496f4cbe40d469394014e314bbe9bf1f2ed
-
SSDEEP
24576:YcaDEpXIlsjKgKuDYqnHxpFdN43CtZTCiU2u4K6lB2+nTJ:Ycp+OvUqnRl4i4F+nTJ
Malware Config
Signatures
Files
-
4b9acd649b244473aeb8a84b0d358a5d_JaffaCakes118.rar
-
xmes/QQ在线使用方法.txt
-
xmes/about/about.htm
-
xmes/about/addlink.asp.html
-
xmes/about/addlinkchk.asp.vbs
-
xmes/about/ads.htm
-
xmes/about/conn.asp.asp .vbs polyglot
-
xmes/about/css.css
-
xmes/about/guany.asp
-
xmes/about/help.asp
-
xmes/about/img/j.gif.gif
-
xmes/about/img/msg.gif.gif
-
xmes/about/img/nologo.gif.gif
-
xmes/about/img/qq.gif.gif
-
xmes/about/img/top.gif.gif
-
xmes/about/img/toplogo.gif.gif
-
xmes/about/img/url.gif
-
xmes/about/imges/msg.gif.gif
-
xmes/about/imges/qq.gif.gif
-
xmes/about/imges/url.gif
-
xmes/about/lianus.htm
-
xmes/about/link.asp.vbs
-
xmes/about/link.htm
-
xmes/about/mian.htm
-
xmes/ad/002.gif.gif
-
xmes/ad/ad.gif.gif
-
xmes/ad/ad11.gif.gif
-
xmes/ad/ad21.gif.gif
-
xmes/ad/ad5.gif.gif
-
xmes/ad/banner.gif.gif
-
xmes/ad/ershou.gif.gif
-
xmes/ad/help.gif.gif
-
xmes/ad/help.psd
-
xmes/ad/new.gif.gif
-
xmes/ad/top.gif.gif
-
xmes/addfree.asp.js
-
xmes/addfreechk.asp.vbs
-
xmes/addxinxi.asp.vbs
-
xmes/addxinxichk.asp.vbs
-
xmes/admin/DEL_BUK.ASP.vbs
-
xmes/admin/add_user.asp
-
xmes/admin/add_userchk.asp.vbs
-
xmes/admin/addfree.asp.js
-
xmes/admin/addfreechk.asp.vbs
-
xmes/admin/addgonggao.asp
-
xmes/admin/addgonggaochk.asp.vbs
-
xmes/admin/addxinxi.asp.vbs
-
xmes/admin/addxinxichk.asp.vbs
-
xmes/admin/addzs.asp
-
xmes/admin/addzschk.asp.vbs
-
xmes/admin/admin_add.asp.vbs
-
xmes/admin/admin_addchk.asp.vbs
-
xmes/admin/admin_chk.asp.vbs
-
xmes/admin/admin_chklogin.asp.asp .vbs polyglot
-
xmes/admin/admin_dd.asp.vbs
-
xmes/admin/admin_login.asp.asp
-
xmes/admin/admin_logout.asp.asp
-
xmes/admin/adminmail.asp
-
xmes/admin/adminmailchk.asp.vbs
-
xmes/admin/admintitle.asp.vbs
-
xmes/admin/admintitlechk.asp.vbs
-
xmes/admin/bar.asp.js
-
xmes/admin/bar.inc.vbs
-
xmes/admin/bar1.inc.vbs
-
xmes/admin/beifendata.asp.vbs
-
xmes/admin/checkcode.asp.vbs
-
xmes/admin/chksql.Asp.vbs
-
xmes/admin/classlist.asp.vbs
-
xmes/admin/cnmai.inc.html .vbs polyglot
-
xmes/admin/cnmaiqq.asp.js
-
xmes/admin/config.asp
-
xmes/admin/conn.asp.vbs
-
xmes/admin/cookies.asp.vbs
-
xmes/admin/dd_del.asp.vbs
-
xmes/admin/dd_yz.asp.vbs
-
xmes/admin/del_all.asp.vbs
-
xmes/admin/delgonggao.asp.vbs
-
xmes/admin/delhf.asp.vbs
-
xmes/admin/deluser.asp.vbs
-
xmes/admin/delxinxi.asp.vbs
-
xmes/admin/delzs.asp.vbs
-
xmes/admin/editgonggao.asp.vbs
-
xmes/admin/editxinxi.asp.vbs
-
xmes/admin/editzs.asp.vbs
-
xmes/admin/fenlei.asp.vbs
-
xmes/admin/fenlei_2.asp.vbs
-
xmes/admin/fenlei_2chk.asp.vbs
-
xmes/admin/fenlei_2edit.asp.vbs
-
xmes/admin/fenlei_2editchk.asp.vbs
-
xmes/admin/fenlei_2editdel.asp.vbs
-
xmes/admin/fenlei_html.asp.vbs
-
xmes/admin/fenleiedit.asp.vbs
-
xmes/admin/gbook.asp.js
-
xmes/admin/gbookdel.asp.vbs
-
xmes/admin/gbookedit.asp.vbs
-
xmes/admin/gbookhf.asp.vbs
-
xmes/admin/img/bg.gif.gif
-
xmes/admin/img/ershou_1.gif.gif
-
xmes/admin/img/ershou_2.gif.gif
-
xmes/admin/img/ershou_3.gif.gif
-
xmes/admin/img/left_form_r1_c1.gif.gif
-
xmes/admin/img/left_form_r2_c1.gif.gif
-
xmes/admin/img/left_form_r4_c1.gif.gif
-
xmes/admin/img/r3.gif.gif
-
xmes/admin/img/xx.gif.gif
-
xmes/admin/inc_style.css
-
xmes/admin/index.asp
-
xmes/admin/left.asp.html
-
xmes/admin/link.asp.vbs
-
xmes/admin/link_del.asp.vbs
-
xmes/admin/link_e.asp.vbs
-
xmes/admin/link_e_chk.asp.vbs
-
xmes/admin/link_yz.asp.vbs
-
xmes/admin/list_buk.asp.vbs
-
xmes/admin/listgonggao.asp.vbs
-
xmes/admin/listzs.asp.vbs
-
xmes/admin/main.asp.vbs
-
xmes/admin/out.asp
-
xmes/admin/right.asp.vbs
-
xmes/admin/user_del.asp.vbs
-
xmes/admin/user_editdj.asp.vbs
-
xmes/admin/user_editdjchk.asp.vbs
-
xmes/admin/user_edithb.asp.vbs
-
xmes/admin/user_edithbchk.asp.vbs
-
xmes/admin/user_editmail.asp.vbs
-
xmes/admin/user_editmailchk.asp.vbs
-
xmes/admin/user_editpass.asp.vbs
-
xmes/admin/user_editpasschk.asp.vbs
-
xmes/admin/user_editzj.asp.vbs
-
xmes/admin/user_editzjchk.asp.vbs
-
xmes/admin/user_gl.asp.vbs
-
xmes/admin/user_passchk.asp.vbs
-
xmes/admin/user_vip.asp.vbs
-
xmes/admin/user_vipdel.asp.vbs
-
xmes/admin/userlist.asp.vbs
-
xmes/admin/xinxi.asp.vbs
-
xmes/admin/xinxi_del.asp.vbs
-
xmes/admin/xinxi_edit.asp.vbs
-
xmes/admin/xinxi_editchk.asp.vbs
-
xmes/admin/xinxi_hf.asp.vbs
-
xmes/admin/xinxi_hfdel.asp.vbs
-
xmes/admin/xinxi_mail.asp.vbs
-
xmes/admin/xinxi_mailchk.asp.vbs
-
xmes/admin/xinxi_tj.asp.vbs
-
xmes/admin/xinxi_tjdel.asp.vbs
-
xmes/admin/xinxi_yz.asp.vbs
-
xmes/admin/xinximail.asp.vbs
-
xmes/admin/xinximailchk.asp.vbs
-
xmes/bar.asp.js
-
xmes/bar.inc.vbs
-
xmes/bar1.inc.vbs
-
xmes/chksql.Asp.vbs
-
xmes/classlist.asp.vbs
-
xmes/cnmai.inc.html .vbs polyglot
-
xmes/cnmaiqq.asp.js
-
xmes/config.asp
-
xmes/conn.asp.asp .vbs polyglot
-
xmes/conn1.asp.vbs
-
xmes/data/%%cnmaisqlin.mdb
-
xmes/data/%%dsjka#[email protected]
-
xmes/data/buk/#.mdb
-
xmes/default1.asp.vbs
-
xmes/edit_xinxi.asp.vbs
-
xmes/edit_xinxi_a.asp.vbs
-
xmes/edit_xinxi_b.asp.vbs
-
xmes/edit_xinxi_c.asp.vbs
-
xmes/edit_xinxi_d.asp.vbs
-
xmes/edit_xinxichk.asp.vbs
-
xmes/end.htm
-
xmes/err.asp.vbs
-
xmes/fenlei.html
-
xmes/fenlei_1.html
-
xmes/forget1.asp.js
-
xmes/forget2.asp.vbs
-
xmes/gbook.asp.vbs
-
xmes/gbookchk.asp.vbs
-
xmes/gbookchkweb.asp.vbs
-
xmes/getpwd.asp
-
xmes/gg.asp.vbs
-
xmes/ggzn.asp.vbs
-
xmes/gonggao.asp.vbs
-
xmes/images/File_29.gif.gif
-
xmes/images/Login_but.gif.gif
-
xmes/images/Nav_Icon.gif.gif
-
xmes/images/Search.gif.gif
-
xmes/images/_back.gif.gif
-
xmes/images/_doc_4.gif.gif
-
xmes/images/_form_r01_c6.gif.gif
-
xmes/images/_form_r02_c1.gif.gif
-
xmes/images/_form_r02_c7.gif.gif
-
xmes/images/_form_r07_c1.gif.gif
-
xmes/images/_form_r07_c3.gif.gif
-
xmes/images/_form_r07_c7.gif.gif
-
xmes/images/_form_r09_c1.gif.gif
-
xmes/images/_login_ERR_r5_c3.gif.gif
-
xmes/images/_more.gif.gif
-
xmes/images/a.psd
-
xmes/images/a0.gif.gif
-
xmes/images/a1.gif.gif
-
xmes/images/a2.gif.gif
-
xmes/images/a3.gif.gif
-
xmes/images/a4.gif.gif
-
xmes/images/a5.gif.gif
-
xmes/images/a6.gif.gif
-
xmes/images/a7.gif.gif
-
xmes/images/a8.gif.gif
-
xmes/images/ba_home.gif.gif
-
xmes/images/bar1.gif.gif
-
xmes/images/bar_bg3.gif.gif
-
xmes/images/bg.gif.gif
-
xmes/images/bg1.gif.gif
-
xmes/images/bg_top_01.gif.gif
-
xmes/images/bj1.gif.gif
-
xmes/images/bookmark.gif.gif
-
xmes/images/buydj.gif.gif
-
xmes/images/cnmai_down.gif.gif
-
xmes/images/cnmai_middle.gif.gif
-
xmes/images/cnmai_up.gif.gif
-
xmes/images/djzh.gif.gif
-
xmes/images/dl003.gif.gif
-
xmes/images/dl004.gif.gif
-
xmes/images/dotline.gif.gif
-
xmes/images/editzl.gif.gif
-
xmes/images/end.gif.gif
-
xmes/images/fa.gif.gif
-
xmes/images/find.gif.gif
-
xmes/images/folder.gif.gif
-
xmes/images/form1_r2_c1.gif.gif
-
xmes/images/form1_r2_c3.gif.gif
-
xmes/images/form1_r5_c1.gif.gif
-
xmes/images/form2_r1_c1.gif.gif
-
xmes/images/fx.gif.gif
-
xmes/images/gb.gif.gif
-
xmes/images/gbook.gif.gif
-
xmes/images/gbooktj.gif.gif
-
xmes/images/hf.jpg.jpg
-
xmes/images/hkzf.gif.gif
-
xmes/images/inded_left-bg.gif.gif
-
xmes/images/jfzh.gif.gif
-
xmes/images/left_form_r1_c1.gif.gif
-
xmes/images/left_form_r2_c1.gif.gif
-
xmes/images/left_form_r4_c1.gif.gif
-
xmes/images/line_01.gif.gif
-
xmes/images/line_top_01.gif.gif
-
xmes/images/list3.gif.gif
-
xmes/images/logo.gif.jpg
-
xmes/images/logo.psd
-
xmes/images/lsjl.gif.gif
-
xmes/images/mail_login_r1_c1.gif.gif
-
xmes/images/mail_login_r3_c1.gif.gif
-
xmes/images/mail_login_r5_c2.gif.gif
-
xmes/images/mail_login_r7_c1.gif.gif
-
xmes/images/msg.gif.gif
-
xmes/images/mysc.gif.gif
-
xmes/images/new.gif.gif
-
xmes/images/num/0.gif.gif
-
xmes/images/num/1.gif.gif
-
xmes/images/num/2.gif.gif
-
xmes/images/num/3.gif.gif
-
xmes/images/num/4.gif.gif
-
xmes/images/num/5.gif.gif
-
xmes/images/num/6.gif.gif
-
xmes/images/num/7.gif.gif
-
xmes/images/num/8.gif.gif
-
xmes/images/num/9.gif.gif
-
xmes/images/num/jian.gif.gif
-
xmes/images/num/jsq.gif.gif
-
xmes/images/num/pic.gif.gif
-
xmes/images/obj_ta3_01.gif.gif
-
xmes/images/obj_ta3_03.gif.gif
-
xmes/images/obj_ta3_04.gif.gif
-
xmes/images/obj_ta3_05.gif.gif
-
xmes/images/obj_ta3_06.gif.gif
-
xmes/images/obj_ta3_07.gif.gif
-
xmes/images/obj_ta3_08.gif.gif
-
xmes/images/obj_ta3_09.gif.gif
-
xmes/images/obj_ta3_10.gif.gif
-
xmes/images/obj_ta3_11.gif.gif
-
xmes/images/obj_ta3_12.gif.gif
-
xmes/images/obj_ta_1.gif.gif
-
xmes/images/obj_ta_2.gif.gif
-
xmes/images/obj_ta_3.gif.gif
-
xmes/images/obj_ta_4.gif.gif
-
xmes/images/obj_ta_5.gif.gif
-
xmes/images/obj_ta_6.gif.gif
-
xmes/images/obj_ta_7.gif.gif
-
xmes/images/obj_ta_8.gif.gif
-
xmes/images/obj_waku3_01.gif.gif
-
xmes/images/obj_waku3_02.gif.gif
-
xmes/images/obj_waku3_03.gif.gif
-
xmes/images/obj_waku3_04.gif.gif
-
xmes/images/obj_waku3_05.gif.gif
-
xmes/images/obj_waku3_06.gif.gif
-
xmes/images/obj_waku3_07.gif.gif
-
xmes/images/pic.gif.jpg
-
xmes/images/point05.gif.gif
-
xmes/images/post.gif.gif
-
xmes/images/pro_r03_c5.gif.gif
-
xmes/images/pub.gif.gif
-
xmes/images/qq.css
-
xmes/images/qq.gif.gif
-
xmes/images/qqoffline.gif.gif
-
xmes/images/qqonline.gif.gif
-
xmes/images/sd.gif.gif
-
xmes/images/search.jpg.jpg
-
xmes/images/sjzf.gif.gif
-
xmes/images/url.gif
-
xmes/images/user_pass.gif.gif
-
xmes/images/userbj.gif.gif
-
xmes/images/usersm.gif.gif
-
xmes/images/usertj.gif.gif
-
xmes/images/userzf.gif.gif
-
xmes/images/xm.gif.gif
-
xmes/images/xx.gif.gif
-
xmes/images/xxgl.gif.gif
-
xmes/images/yhzf.gif.gif
-
xmes/images/zf_1.gif.gif
-
xmes/images/zf_2.gif.gif
-
xmes/images/zfqr.gif.gif
-
xmes/images/zh2.gif.gif
-
xmes/inc_style.css
-
xmes/index.asp.vbs
-
xmes/info.asp.vbs
-
xmes/info.txt
-
xmes/ip.asp.vbs
-
xmes/ipt.asp.vbs
-
xmes/ist-pay.htm.html
-
xmes/js.asp.vbs
-
xmes/link.asp.vbs
-
xmes/login.asp
-
xmes/loginchk.asp.vbs
-
xmes/logo.gif.gif
-
xmes/logo1.gif.gif
-
xmes/logo1234/logo2.gif.jpg
-
xmes/logo2.jpg.jpg
-
xmes/mail.asp
-
xmes/mail.html.js
-
xmes/md5.asp.vbs
-
xmes/new.asp.vbs
-
xmes/pic/ershou3.gif.gif
-
xmes/pic/logo4.gif.gif
-
xmes/pic/style/email.gif.gif
-
xmes/pic/style/fav.gif.gif
-
xmes/pic/style/home.gif.gif
-
xmes/reg.asp
-
xmes/reg1.asp
-
xmes/regchk.asp.vbs
-
xmes/regchk_2.asp.vbs
-
xmes/search.asp.vbs
-
xmes/tj.asp.vbs
-
xmes/tj0.asp.js
-
xmes/tj1.asp.vbs
-
xmes/top.asp
-
xmes/top1.asp
-
xmes/upfile.asp.vbs
-
xmes/uptupian/20051011132421.jpg.jpg
-
xmes/uptupian/20051011193336.jpg.jpg
-
xmes/uptupian/200510115354.jpg.jpg
-
xmes/uptupian/2005101184125.jpg.jpg
-
xmes/uptupian/2005101184326.jpg.jpg
-
xmes/uptupian/200510316348.jpg.jpg
-
xmes/uptupian/20051051152.jpg.jpg
-
xmes/uptupian/2005711224110.jpg.jpg
-
xmes/uptupian/200571162953.gif.gif
-
xmes/uptupian/200572223826.jpg.jpg
-
xmes/uptupian/200572225216.jpg.jpg
-
xmes/uptupian/20057222562.jpg.jpg
-
xmes/uptupian/200572231218.jpg.jpg
-
xmes/uptupian/200582013243355.jpg.jpg
-
xmes/uptupian/2005820143316147.jpg.jpg
-
xmes/uptupian/200582014364.jpg.jpg
-
xmes/uptupian/200582014395.jpg.jpg
-
xmes/uptupian/20058311240.gif.gif
-
xmes/uptupian/200591113461.jpg.jpg
-
xmes/uptupian/200591791047.jpg.jpg
-
xmes/uptupian/2006517205024.gif.gif
-
xmes/uptupian/2006517205154.gif.gif
-
xmes/uptupian/2006517205221.gif.gif
-
xmes/uptupian/200651720523.gif.gif
-
xmes/uptupian/2006518173329.jpg.jpg
-
xmes/uptupian/200651817338.jpg.jpg .ps1 polyglot
-
xmes/user.asp.vbs
-
xmes/user_gbook.asp.vbs
-
xmes/user_gbookchk.asp.vbs
-
xmes/user_gbookchkweb.asp.vbs
-
xmes/user_pass.asp
-
xmes/user_passchk.asp.vbs
-
xmes/user_qr.asp.vbs
-
xmes/user_qrchk.asp.vbs
-
xmes/user_sc.asp.vbs
-
xmes/user_scchk.asp.vbs
-
xmes/user_xxgl.asp.vbs
-
xmes/user_zl.asp.vbs
-
xmes/usercookies.asp.vbs
-
xmes/userdjzh.asp.vbs
-
xmes/userdjzhchk.asp.vbs
-
xmes/userdjzhchk1.asp.vbs
-
xmes/usereditzl.asp.vbs
-
xmes/usereditzlchk.asp.vbs
-
xmes/usergmdj.asp.vbs
-
xmes/usergmdjchk.asp.vbs
-
xmes/usergmhb.asp.vbs
-
xmes/userleft.asp.html
-
xmes/userout.asp
-
xmes/vip.asp.vbs
-
xmes/window.html
-
xmes/xinxi_del.asp.vbs
-
xmes/xinxi_editzj.asp.vbs
-
xmes/xinxi_hf.asp.vbs
-
xmes/xinxi_mail.asp.vbs
-
xmes/xinxi_mailchk.asp.vbs
-
xmes/xinxi_sc.asp.vbs
-
xmes/xinximemo.asp.vbs
-
xmes/xmthb.htm
-
xmes/zn.ASP.vbs
-
xmes/zs.ASP.vbs
-
xmes/下载说明.htm.html .js polyglot
-
xmes/说明.txt
-
xmes/非常世纪资源网.url.url