Analysis Date2015-11-17 08:38:26
MD56bd788937aad95ca3bdbc3f325953871
SHA100a43c46bd5f28118c1f0b22556eae909a6673a4

Static Details:

File typePE32 executable for MS Windows (GUI) Intel 80386 32-bit
Section.text md5: c7c88965b0572aa5a5d854913ec96e57 sha1: 9232c13d839c5d983c14b97f941cee21fcfd4a27 size: 72704
Section.rdata md5: 8fabcc3a7a7e28aaf720c7c4bff471a9 sha1: d1d07f8d2efbbff8af52c116ac1abc8f31930d67 size: 1536
Section.data md5: 2efcc6be0f251374b16dd224e9399250 sha1: 71bc77de44bd815cfac5d1ee3f6afcea7c52faf6 size: 5632
Section.rsrc md5: be239916b1126a2f6c3366e8c1de90a9 sha1: 9d57450dc06ba83ecf5ee51d5fbd20212915a699 size: 2048
Timestamp2014-08-05 06:46:06
VersionLegalCopyright: © 2006 Ntoskrnl (Daniel Pistelli). All rights reserved.
InternalName: CFF Explorer.exe
FileVersion: 4.0.0.1
CompanyName: Daniel Pistelli
ProductName: CFF Explorer
ProductVersion: 4.0.0.1
FileDescription: Common File Format Explorer
OriginalFilename: CFF Explorer.exe
PEhash52fa1dca25c4f1478197142fd02b6421929d9482
IMPhash4f5469c655c1cd0ca5ec26caa83e08e0
AVF-SecureGen:Variant.Kazy.427865
AVAuthentiumW32/A-f61641df!Eldorado
AVMalwareBytesno_virus
AVDr. WebTrojan.DownLoad.64914
AVGrisoft (avg)Crypt3.AIRJ
AVMalwareBytesno_virus
AVEset (nod32)Win32/Wigon.PH
AVMicroWorld (escan)Gen:Variant.Kazy.427865
AVTrend Microno_virus
AVClamAVWin.Trojan.Agent-761640
AVAd-AwareGen:Variant.Kazy.427865
AVEset (nod32)Win32/Wigon.PH
AVBitDefenderGen:Variant.Kazy.427865
AVMicroWorld (escan)Gen:Variant.Kazy.427865
AVAvira (antivir)TR/Inject.xbbeicf
AVAlwil (avast)Malware-gen:Win32:Malware-gen
AVFortinetW32/Dorifel.ALXX!tr
AVMicrosoft Security EssentialsTrojanDownloader:Win32/Cutwail
AVIkarusTrojan.Win32.Wigon
AVKasperskyTrojan.Win32.Generic
AVVirusBlokAda (vba32)Trojan.Agentb
AVArcabit (arcavir)Gen:Variant.Kazy.427865
AVMcafeeDownloader-FAKV!6BD788937AAD
AVTwisterTrojan.Agentb.azqz.cvis
AVAvira (antivir)TR/Inject.xbbeicf
AVAlwil (avast)Malware-gen:Win32:Malware-gen
AVSymantecno_virus
AVFortinetW32/Dorifel.ALXX!tr
AVK7Trojan ( 0040c0821 )
AVMicrosoft Security EssentialsTrojanDownloader:Win32/Cutwail
AVRisingno_virus
AVMcafeeDownloader-FAKV!6BD788937AAD
AVTwisterTrojan.Agentb.azqz.cvis
AVAd-AwareGen:Variant.Kazy.427865
AVGrisoft (avg)Crypt3.AIRJ
AVSymantecno_virus
AVBitDefenderGen:Variant.Kazy.427865
AVK7Trojan ( 0040c0821 )
AVAuthentiumW32/A-f61641df!Eldorado
AVFrisk (f-prot)no_virus
AVEmsisoftGen:Variant.Kazy.427865
AVZillya!Trojan.Agentb.Win32.4657
AVCAT (quickheal)Worm.Gamarue.013875
AVPadvishno_virus
AVBullGuardGen:Variant.Kazy.427865
AVCA (E-Trust Ino)no_virus
AVRisingno_virus
AVIkarusTrojan.Win32.Wigon
AVFrisk (f-prot)no_virus

Runtime Details:

Screenshot

Process
↳ C:\malware.exe

RegistryHKEY_CURRENT_USER\software\microsoft\windows\currentversion\run\famonulafa ➝
C:\Documents and Settings\Administrator\famonulafa.exe
RegistryHKEY_CURRENT_CONFIG\Software\Microsoft\windows\CurrentVersion\Internet Settings\ProxyEnable ➝
NULL
RegistryHKEY_CURRENT_USER\software\microsoft\windows\currentversion\AppManagement ➝
NULL
RegistryHKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ProxyBypass ➝
1
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\kiwicr[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\plei[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\acmf.com[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\interdisc[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\xlp.org[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\torlys[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\djvjp[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\sonat[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\xlp.org[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\hosse[1].htm
Creates FileC:\Documents and Settings\Administrator\Application Data\Microsoft\Crypto\RSA\S-1-5-21-XXXXXXXXXX-XXXXXXXXXX-XXXXXXXXXX-500\a18ca4003deb042bbee7a40f15e1970b_666939c9-243b-475e-9504-51724db22670
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\4joo[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\ecss.com[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\ncsl[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\acmf.com[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\golfprop[2].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\vimarc[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\chzko[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\jojome[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\oozkranj[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\dicre[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\iihed[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\radieserl[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\index.dat
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\torlys[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\comuval[2].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\mediates[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\sennema[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\deltains[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\History\History.IE5\index.dat
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\hsbj[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\radeton[2].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\mjol.co[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\dendai[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\inforhard[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\famdra.co[1].htm
Creates FilePIPE\lsarpc
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\music[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\hbymail[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\aclumich[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\lmpa.org[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\ksa2[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\ncsl[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\atkom[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\zyrion[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\pmas[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\k-kogaku[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\radeton[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\jojome[2].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\x96[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\k-kogaku[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\dreamhop[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\from30ty[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\soumen.co[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\tamara[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\acrylabs[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\bars-dek[1].htm
Creates FileC:\Documents and Settings\Administrator\famonulafa.exe
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\varinex[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\ladtron[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\elmets[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\zeltea[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\errigal[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\araf[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\hbymail[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\golfprop[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\comuval[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\lmpa.org[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\mbwswim[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\monteux[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\hanakume[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\stnic.co[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\dendai[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\darinne[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\acrylabs[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\101hotel[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\stnic.co[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\milfa[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\uvasindia[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\ksa2[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\joesabia[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\boyar.com[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\radieserl[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\banijya[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\bars-dek[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\araf[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\dreamhop[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\kiwicr[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\mbwswim[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\dzm[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\atkom[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\k-sosin[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\interdisc[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\mediates[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\iihed[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\cocif[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\noriko7[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\aig-co[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\lpmcom[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\djvjp[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\x96[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\ommetals[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\sonat[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\leviatan[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\vipmel[2].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\famdra.co[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\noriko7[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\plei[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\joesabia[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\eretz[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\ppic[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\sennema[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\darinne[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\chzko[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\hosse[2].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\deltains[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\from30ty[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\alten.co[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\ktavtam[2].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\hsbj[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\mygolf1[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\errigal[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\mvf-rlm[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\aclumich[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\nmtdie[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\milfa[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\leviatan[1].htm
Creates FileC:\Documents and Settings\Administrator\Cookies\index.dat
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\101hotel[1].htm
Creates File\Device\Afd\Endpoint
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\viadon[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\pmas[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\viadon[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\ppic[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\nmtdie[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\inforhard[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\cocif[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\hanakume[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\mvf-rlm[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\fatih.com[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\tip-top[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\madkom[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\uvasindia[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\alten.co[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\sonowest[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\rdplf[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\eretz[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\soumen.co[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\mygolf1[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\plcsi[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\zeltea[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\4joo[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\dicre[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\banijya[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\tip-top[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\music[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\zyrion[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\abdg[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\madkom[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\boyar.com[2].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\agaman[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\plcsi[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\ladtron[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\abdg[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\monteux[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\vipmel[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\stermedia[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\onshodo[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\lpmcom[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\varinex[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\ecss.com[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\ommetals[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\sonowest[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\agaman[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\rdplf[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\aig-co[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\vimarc[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\dzm[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\onshodo[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\ktavtam[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\fatih.com[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\aqarea[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\atb-lit[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\stermedia[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\aqarea[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\k-sosin[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\elmets[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\helinc[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\tamara[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\atb-lit[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\oozkranj[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\helinc[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\mjol.co[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\mediates[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\acmf.com[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\interdisc[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\torlys[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\cocif[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\djvjp[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\xlp.org[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\hosse[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\aig-co[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\lpmcom[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\4joo[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\ecss.com[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\ncsl[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\ommetals[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\sonat[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\chzko[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\famdra.co[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\jojome[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\oozkranj[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\dicre[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\iihed[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\noriko7[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\plei[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\darinne[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\deltains[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\from30ty[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\sennema[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\hsbj[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\mjol.co[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\errigal[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\nmtdie[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\dendai[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\aclumich[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\inforhard[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\leviatan[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\pmas[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\viadon[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\ppic[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\ksa2[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\hanakume[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\mvf-rlm[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\fatih.com[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\atkom[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\k-kogaku[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\uvasindia[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\alten.co[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\radeton[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\eretz[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\x96[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\mygolf1[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\plcsi[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\dreamhop[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\soumen.co[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\tip-top[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\music[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\zyrion[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\abdg[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\madkom[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\agaman[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\varinex[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\ladtron[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\zeltea[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\hbymail[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\monteux[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\golfprop[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\vipmel[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\lmpa.org[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\comuval[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\stermedia[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\stnic.co[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\acrylabs[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\sonowest[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\101hotel[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\rdplf[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\milfa[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\vimarc[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\joesabia[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\boyar.com[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\radieserl[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\onshodo[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\ktavtam[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\banijya[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\atb-lit[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\bars-dek[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\araf[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\aqarea[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\elmets[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\tamara[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\kiwicr[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\mbwswim[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\dzm[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\helinc[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\k-sosin[1].htm
Creates Mutexc:!documents and settings!administrator!local settings!history!history.ie5!
Creates MutexWininetConnectionMutex
Creates Mutexc:!documents and settings!administrator!cookies!
Creates Mutexc:!documents and settings!administrator!local settings!temporary internet files!content.ie5!
Creates Mutexfamonulafa
Winsock DNSacmf.com.au
Winsock DNSmultip.hu
Winsock DNSdendai.com
Winsock DNSatkom.ru
Winsock DNSdreamhop.com
Winsock DNSmonteux.fr
Winsock DNScocif.com
Winsock DNSidecom.it
Winsock DNStamara.net
Winsock DNSbanijya.com
Winsock DNSx96.com
Winsock DNSstnic.co.uk
Winsock DNShosse.ch
Winsock DNSatb-lit.com
Winsock DNSdjvjp.com
Winsock DNSk-kogaku.com
Winsock DNStip-top.cz
Winsock DNSdzm.cz
Winsock DNSalten.co.uk
Winsock DNS4joo.com
Winsock DNSchzko.ru
Winsock DNSbars-dek.com
Winsock DNSmygolf1.com
Winsock DNSsennema.com
Winsock DNSjojome.net
Winsock DNSdeltains.org
Winsock DNSpmas.org
Winsock DNSsonat.de
Winsock DNShbymail.com
Winsock DNShelinc.com
Winsock DNSkiwicr.com
Winsock DNSheffeter.com
Winsock DNSmjol.co.uk
Winsock DNSviadon.com
Winsock DNSleviatan.pl
Winsock DNSladtron.com
Winsock DNSdicre.com
Winsock DNSmusic.us
Winsock DNSrdplf.org
Winsock DNSmediates.com
Winsock DNShanakume.com
Winsock DNSmilfa.pt
Winsock DNSk-sosin.com
Winsock DNSelmets.com
Winsock DNScomuval.es
Winsock DNSaig-co.com
Winsock DNS101hotel.is
Winsock DNSmbwswim.com
Winsock DNSvipmel.net
Winsock DNSncsl.cc
Winsock DNSinterdisc.de
Winsock DNSksa2.com
Winsock DNSagaman.net
Winsock DNSnoriko7.com
Winsock DNSiihed.org
Winsock DNSeretz.org
Winsock DNSvarinex.hu
Winsock DNSsoumen.co.jp
Winsock DNSuvasindia.in
Winsock DNSnmtdie.com
Winsock DNSfamdra.co.za
Winsock DNSacrylabs.com
Winsock DNSzeltea.ru
Winsock DNSdarinne.ro
Winsock DNSfrom30ty.com
Winsock DNShsbj.org
Winsock DNSplei.net
Winsock DNSxlp.org.uk
Winsock DNSzyrion.com
Winsock DNSppic.com
Winsock DNSsonowest.com
Winsock DNSfatih.com.tr
Winsock DNSlpmcom.pt
Winsock DNSboyar.com.tr
Winsock DNSvimarc.com
Winsock DNSommetals.com
Winsock DNSmvf-rlm.com
Winsock DNSstermedia.pl
Winsock DNSlmpa.org.au
Winsock DNSktavtam.com
Winsock DNSplcsi.net
Winsock DNSonshodo.net
Winsock DNSerrigal.com
Winsock DNSradeton.cz
Winsock DNSaqarea.com
Winsock DNSetipage.com
Winsock DNSrodesfer.com
Winsock DNSecss.com.au
Winsock DNSgolfprop.com
Winsock DNSjoesabia.com
Winsock DNSmadkom.pl
Winsock DNSinforhard.pt
Winsock DNSoozkranj.com
Winsock DNSaclumich.org
Winsock DNStorlys.com
Winsock DNSabdg.com
Winsock DNSradieserl.de
Winsock DNSaraf.de

Network Details:

DNSdarinne.ro
Type: A
193.189.99.8
DNSpmas.org
Type: A
208.117.6.198
DNSoozkranj.com
Type: A
104.28.17.50
DNSoozkranj.com
Type: A
104.28.16.50
DNSaig-co.com
Type: A
141.8.224.169
DNShelinc.com
Type: A
64.13.192.61
DNSrdplf.org
Type: A
80.93.82.147
DNSrodesfer.com
Type: A
127.0.0.1
DNS101hotel.is
Type: A
69.167.159.224
DNSlpmcom.pt
Type: A
109.71.42.38
DNSmbwswim.com
Type: A
198.185.159.145
DNSmbwswim.com
Type: A
198.49.23.144
DNSmbwswim.com
Type: A
198.49.23.145
DNSmbwswim.com
Type: A
198.185.159.144
DNSx96.com
Type: A
184.106.101.77
DNSaclumich.org
Type: A
199.195.117.156
DNSmjol.co.uk
Type: A
91.146.108.52
DNSatkom.ru
Type: A
109.206.190.54
DNSiihed.org
Type: A
208.73.211.199
DNSiihed.org
Type: A
208.73.210.212
DNSiihed.org
Type: A
208.73.211.191
DNSiihed.org
Type: A
208.73.211.194
DNSksa2.com
Type: A
198.57.169.201
DNSstermedia.pl
Type: A
5.9.136.245
DNSgolfprop.com
Type: A
198.178.250.32
DNSmadkom.pl
Type: A
46.248.165.164
DNShbymail.com
Type: A
213.171.198.190
DNSmygolf1.com
Type: A
192.232.236.146
DNSkiwicr.com
Type: A
190.0.226.9
DNSecss.com.au
Type: A
103.29.85.19
DNSjoesabia.com
Type: A
64.6.239.211
DNSmediates.com
Type: A
149.115.16.7
DNSviadon.com
Type: A
104.25.151.21
DNSviadon.com
Type: A
104.25.150.21
DNSk-kogaku.com
Type: A
210.143.102.110
DNSfatih.com.tr
Type: A
212.58.2.53
DNSbars-dek.com
Type: A
104.28.15.16
DNSbars-dek.com
Type: A
104.28.14.16
DNStip-top.cz
Type: A
195.39.107.70
DNSlmpa.org.au
Type: A
54.252.148.134
DNSsonat.de
Type: A
217.160.253.62
DNSaqarea.com
Type: A
212.76.85.58
DNSzyrion.com
Type: A
192.217.105.168
DNSdeltains.org
Type: A
184.168.27.34
DNScocif.com
Type: A
37.59.205.134
DNSmusic.us
Type: A
167.114.59.30
DNSk-sosin.com
Type: A
119.18.217.98
DNSnoriko7.com
Type: A
122.152.128.157
DNSsoumen.co.jp
Type: A
211.13.204.89
DNShosse.ch
Type: A
80.74.159.211
DNSdendai.com
Type: A
221.246.77.130
DNSradeton.cz
Type: A
81.91.86.12
DNSmilfa.pt
Type: A
94.76.204.80
DNSppic.com
Type: A
67.210.213.122
DNSabdg.com
Type: A
192.252.155.173
DNSommetals.com
Type: A
162.251.80.23
DNSuvasindia.in
Type: A
54.169.24.55
DNSdicre.com
Type: A
203.189.104.227
DNSonshodo.net
Type: A
59.106.19.169
DNScomuval.es
Type: A
91.148.168.94
DNStorlys.com
Type: A
104.25.2.26
DNStorlys.com
Type: A
104.25.3.26
DNSjojome.net
Type: A
211.75.71.76
DNSladtron.com
Type: A
103.224.182.253
DNSdjvjp.com
Type: A
202.189.178.130
DNSnmtdie.com
Type: A
69.174.241.52
DNSfamdra.co.za
Type: A
72.32.190.96
DNSsennema.com
Type: A
212.204.216.21
DNSagaman.net
Type: A
155.94.64.210
DNStamara.net
Type: A
199.96.156.231
DNShsbj.org
Type: A
184.168.221.19
DNSinforhard.pt
Type: A
151.236.45.90
DNSktavtam.com
Type: A
199.203.55.209
DNSeretz.org
Type: A
184.168.221.28
DNSvarinex.hu
Type: A
79.172.192.42
DNSmvf-rlm.com
Type: A
204.152.118.133
DNSerrigal.com
Type: A
69.163.208.154
DNShanakume.com
Type: A
124.146.198.105
DNSchzko.ru
Type: A
188.165.141.56
DNSacmf.com.au
Type: A
103.227.177.102
DNSncsl.cc
Type: A
96.31.43.16
DNSstnic.co.uk
Type: A
193.34.148.140
DNSsonowest.com
Type: A
37.187.146.37
DNSalten.co.uk
Type: A
195.68.112.195
DNS4joo.com
Type: A
211.220.193.242
DNSboyar.com.tr
Type: A
212.58.6.79
DNSvimarc.com
Type: A
198.185.159.135
DNSdzm.cz
Type: A
178.238.40.4
DNSradieserl.de
Type: A
78.46.96.68
DNSvipmel.net
Type: A
37.187.164.127
DNSzeltea.ru
Type: A
92.53.96.144
DNSmonteux.fr
Type: A
213.186.33.97
DNSatb-lit.com
Type: A
93.125.30.150
DNSdreamhop.com
Type: A
158.199.232.23
DNSplei.net
Type: A
75.126.15.195
DNSplcsi.net
Type: A
216.119.129.2
DNSbanijya.com
Type: A
75.102.9.70
DNSfrom30ty.com
Type: A
210.172.144.247
DNSxlp.org.uk
Type: A
193.189.74.35
DNSinterdisc.de
Type: A
212.83.36.161
DNSleviatan.pl
Type: A
91.217.242.34
DNSaraf.de
Type: A
92.51.137.31
DNSidecom.it
Type: A
DNSmultip.hu
Type: A
HTTP POSThttp://darinne.ro/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://helinc.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://oozkranj.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://aig-co.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://pmas.org/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://rdplf.org/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://101hotel.is/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://darinne.ro/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://lpmcom.pt/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://oozkranj.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://aig-co.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://helinc.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://pmas.org/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://rdplf.org/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://101hotel.is/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://lpmcom.pt/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://mbwswim.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://mbwswim.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://x96.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://aclumich.org/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://mjol.co.uk/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://atkom.ru/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://ksa2.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://iihed.org/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://stermedia.pl/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://x96.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://golfprop.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://aclumich.org/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://madkom.pl/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://atkom.ru/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://iihed.org/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://mjol.co.uk/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://stermedia.pl/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://ksa2.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://golfprop.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://hbymail.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://madkom.pl/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://hbymail.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://mygolf1.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://kiwicr.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://mygolf1.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://ecss.com.au/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://joesabia.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://mediates.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://viadon.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://kiwicr.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://k-kogaku.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://fatih.com.tr/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://ecss.com.au/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://bars-dek.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://tip-top.cz/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://joesabia.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://mediates.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://viadon.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://k-kogaku.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://fatih.com.tr/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://bars-dek.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://tip-top.cz/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://lmpa.org.au/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://lmpa.org.au/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://sonat.de/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://sonat.de/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://aqarea.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://zyrion.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://deltains.org/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://cocif.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://music.us/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://k-sosin.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://aqarea.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://noriko7.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://zyrion.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://deltains.org/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://cocif.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://noriko7.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://k-sosin.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://music.us/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://soumen.co.jp/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://hosse.ch/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://soumen.co.jp/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://hosse.ch/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://dendai.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://dendai.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://radeton.cz/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://radeton.cz/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://milfa.pt/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://ppic.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://abdg.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://ommetals.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://uvasindia.in/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://milfa.pt/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://ppic.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://abdg.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://ommetals.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://uvasindia.in/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://dicre.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://onshodo.net/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://onshodo.net/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://dicre.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://comuval.es/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://torlys.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://comuval.es/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://jojome.net/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://torlys.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://jojome.net/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://ladtron.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://djvjp.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://nmtdie.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://ladtron.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://djvjp.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://famdra.co.za/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://sennema.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://nmtdie.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://famdra.co.za/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://agaman.net/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://sennema.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://tamara.net/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://tamara.net/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://agaman.net/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://hsbj.org/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://inforhard.pt/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://hsbj.org/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://inforhard.pt/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://ktavtam.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://ktavtam.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://eretz.org/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://varinex.hu/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://eretz.org/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://mvf-rlm.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://varinex.hu/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://mvf-rlm.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://errigal.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://hanakume.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://errigal.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://hanakume.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://chzko.ru/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://acmf.com.au/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://chzko.ru/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://acmf.com.au/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://ncsl.cc/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://stnic.co.uk/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://ncsl.cc/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://sonowest.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://stnic.co.uk/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://sonowest.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://alten.co.uk/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://4joo.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://alten.co.uk/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://4joo.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://boyar.com.tr/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://vimarc.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://dzm.cz/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://boyar.com.tr/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://vimarc.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://dzm.cz/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://radieserl.de/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://vipmel.net/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://radieserl.de/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://vipmel.net/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://zeltea.ru/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://monteux.fr/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://zeltea.ru/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://atb-lit.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://monteux.fr/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://atb-lit.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://dreamhop.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://plei.net/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://dreamhop.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://plei.net/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://plcsi.net/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://banijya.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://plcsi.net/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://banijya.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://from30ty.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://from30ty.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://xlp.org.uk/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://xlp.org.uk/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://interdisc.de/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://leviatan.pl/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://interdisc.de/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://araf.de/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://leviatan.pl/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://araf.de/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
Flows TCP192.168.1.1:1040 ➝ 193.189.99.8:80
Flows TCP192.168.1.1:1041 ➝ 64.13.192.61:80
Flows TCP192.168.1.1:1038 ➝ 141.8.224.169:80
Flows TCP192.168.1.1:1042 ➝ 104.28.17.50:80
Flows TCP192.168.1.1:1039 ➝ 208.117.6.198:80
Flows TCP192.168.1.1:1043 ➝ 80.93.82.147:80
Flows TCP192.168.1.1:1045 ➝ 69.167.159.224:80
Flows TCP192.168.1.1:1046 ➝ 193.189.99.8:80
Flows TCP192.168.1.1:1047 ➝ 109.71.42.38:80
Flows TCP192.168.1.1:1048 ➝ 104.28.17.50:80
Flows TCP192.168.1.1:1049 ➝ 141.8.224.169:80
Flows TCP192.168.1.1:1050 ➝ 64.13.192.61:80
Flows TCP192.168.1.1:1051 ➝ 208.117.6.198:80
Flows TCP192.168.1.1:1052 ➝ 80.93.82.147:80
Flows TCP192.168.1.1:1053 ➝ 69.167.159.224:80
Flows TCP192.168.1.1:1054 ➝ 109.71.42.38:80
Flows TCP192.168.1.1:1055 ➝ 198.185.159.145:80
Flows TCP192.168.1.1:1056 ➝ 198.185.159.145:80
Flows TCP192.168.1.1:1057 ➝ 184.106.101.77:80
Flows TCP192.168.1.1:1058 ➝ 199.195.117.156:80
Flows TCP192.168.1.1:1060 ➝ 91.146.108.52:80
Flows TCP192.168.1.1:1059 ➝ 109.206.190.54:80
Flows TCP192.168.1.1:1061 ➝ 208.73.211.199:80
Flows TCP192.168.1.1:1062 ➝ 198.57.169.201:80
Flows TCP192.168.1.1:1063 ➝ 5.9.136.245:80
Flows TCP192.168.1.1:1064 ➝ 184.106.101.77:80
Flows TCP192.168.1.1:1065 ➝ 198.178.250.32:80
Flows TCP192.168.1.1:1066 ➝ 199.195.117.156:80
Flows TCP192.168.1.1:1067 ➝ 46.248.165.164:80
Flows TCP192.168.1.1:1068 ➝ 109.206.190.54:80
Flows TCP192.168.1.1:1069 ➝ 208.73.211.199:80
Flows TCP192.168.1.1:1070 ➝ 91.146.108.52:80
Flows TCP192.168.1.1:1071 ➝ 5.9.136.245:80
Flows TCP192.168.1.1:1072 ➝ 198.57.169.201:80
Flows TCP192.168.1.1:1073 ➝ 198.178.250.32:80
Flows TCP192.168.1.1:1074 ➝ 213.171.198.190:80
Flows TCP192.168.1.1:1075 ➝ 46.248.165.164:80
Flows TCP192.168.1.1:1076 ➝ 213.171.198.190:80
Flows TCP192.168.1.1:1077 ➝ 192.232.236.146:80
Flows TCP192.168.1.1:1078 ➝ 190.0.226.9:80
Flows TCP192.168.1.1:1079 ➝ 192.232.236.146:80
Flows TCP192.168.1.1:1080 ➝ 103.29.85.19:80
Flows TCP192.168.1.1:1081 ➝ 64.6.239.211:80
Flows TCP192.168.1.1:1082 ➝ 149.115.16.7:80
Flows TCP192.168.1.1:1083 ➝ 104.25.151.21:80
Flows TCP192.168.1.1:1084 ➝ 190.0.226.9:80
Flows TCP192.168.1.1:1085 ➝ 210.143.102.110:80
Flows TCP192.168.1.1:1086 ➝ 212.58.2.53:80
Flows TCP192.168.1.1:1087 ➝ 103.29.85.19:80
Flows TCP192.168.1.1:1088 ➝ 104.28.15.16:80
Flows TCP192.168.1.1:1089 ➝ 195.39.107.70:80
Flows TCP192.168.1.1:1090 ➝ 64.6.239.211:80
Flows TCP192.168.1.1:1091 ➝ 149.115.16.7:80
Flows TCP192.168.1.1:1092 ➝ 104.25.151.21:80
Flows TCP192.168.1.1:1093 ➝ 210.143.102.110:80
Flows TCP192.168.1.1:1094 ➝ 212.58.2.53:80
Flows TCP192.168.1.1:1095 ➝ 104.28.15.16:80
Flows TCP192.168.1.1:1096 ➝ 195.39.107.70:80
Flows TCP192.168.1.1:1097 ➝ 54.252.148.134:80
Flows TCP192.168.1.1:1098 ➝ 54.252.148.134:80
Flows TCP192.168.1.1:1099 ➝ 217.160.253.62:80
Flows TCP192.168.1.1:1100 ➝ 217.160.253.62:80
Flows TCP192.168.1.1:1101 ➝ 212.76.85.58:80
Flows TCP192.168.1.1:1102 ➝ 192.217.105.168:80
Flows TCP192.168.1.1:1103 ➝ 184.168.27.34:80
Flows TCP192.168.1.1:1104 ➝ 37.59.205.134:80
Flows TCP192.168.1.1:1105 ➝ 167.114.59.30:80
Flows TCP192.168.1.1:1106 ➝ 119.18.217.98:80
Flows TCP192.168.1.1:1107 ➝ 212.76.85.58:80
Flows TCP192.168.1.1:1108 ➝ 122.152.128.157:80
Flows TCP192.168.1.1:1109 ➝ 192.217.105.168:80
Flows TCP192.168.1.1:1110 ➝ 184.168.27.34:80
Flows TCP192.168.1.1:1111 ➝ 37.59.205.134:80
Flows TCP192.168.1.1:1112 ➝ 122.152.128.157:80
Flows TCP192.168.1.1:1113 ➝ 119.18.217.98:80
Flows TCP192.168.1.1:1114 ➝ 167.114.59.30:80
Flows TCP192.168.1.1:1115 ➝ 211.13.204.89:80
Flows TCP192.168.1.1:1116 ➝ 80.74.159.211:80
Flows TCP192.168.1.1:1117 ➝ 211.13.204.89:80
Flows TCP192.168.1.1:1118 ➝ 80.74.159.211:80
Flows TCP192.168.1.1:1119 ➝ 221.246.77.130:80
Flows TCP192.168.1.1:1120 ➝ 221.246.77.130:80
Flows TCP192.168.1.1:1121 ➝ 81.91.86.12:80
Flows TCP192.168.1.1:1122 ➝ 81.91.86.12:80
Flows TCP192.168.1.1:1123 ➝ 94.76.204.80:80
Flows TCP192.168.1.1:1124 ➝ 67.210.213.122:80
Flows TCP192.168.1.1:1125 ➝ 192.252.155.173:80
Flows TCP192.168.1.1:1126 ➝ 162.251.80.23:80
Flows TCP192.168.1.1:1127 ➝ 54.169.24.55:80
Flows TCP192.168.1.1:1128 ➝ 94.76.204.80:80
Flows TCP192.168.1.1:1129 ➝ 67.210.213.122:80
Flows TCP192.168.1.1:1130 ➝ 192.252.155.173:80
Flows TCP192.168.1.1:1131 ➝ 162.251.80.23:80
Flows TCP192.168.1.1:1132 ➝ 54.169.24.55:80
Flows TCP192.168.1.1:1133 ➝ 203.189.104.227:80
Flows TCP192.168.1.1:1134 ➝ 59.106.19.169:80
Flows TCP192.168.1.1:1135 ➝ 59.106.19.169:80
Flows TCP192.168.1.1:1136 ➝ 203.189.104.227:80
Flows TCP192.168.1.1:1137 ➝ 91.148.168.94:80
Flows TCP192.168.1.1:1138 ➝ 104.25.2.26:80
Flows TCP192.168.1.1:1139 ➝ 91.148.168.94:80
Flows TCP192.168.1.1:1140 ➝ 211.75.71.76:80
Flows TCP192.168.1.1:1141 ➝ 104.25.2.26:80
Flows TCP192.168.1.1:1142 ➝ 211.75.71.76:80
Flows TCP192.168.1.1:1143 ➝ 103.224.182.253:80
Flows TCP192.168.1.1:1144 ➝ 202.189.178.130:80
Flows TCP192.168.1.1:1145 ➝ 69.174.241.52:80
Flows TCP192.168.1.1:1146 ➝ 103.224.182.253:80
Flows TCP192.168.1.1:1147 ➝ 202.189.178.130:80
Flows TCP192.168.1.1:1148 ➝ 72.32.190.96:80
Flows TCP192.168.1.1:1149 ➝ 212.204.216.21:80
Flows TCP192.168.1.1:1150 ➝ 69.174.241.52:80
Flows TCP192.168.1.1:1151 ➝ 72.32.190.96:80
Flows TCP192.168.1.1:1152 ➝ 155.94.64.210:80
Flows TCP192.168.1.1:1153 ➝ 212.204.216.21:80
Flows TCP192.168.1.1:1154 ➝ 199.96.156.231:80
Flows TCP192.168.1.1:1155 ➝ 199.96.156.231:80
Flows TCP192.168.1.1:1156 ➝ 155.94.64.210:80
Flows TCP192.168.1.1:1157 ➝ 184.168.221.19:80
Flows TCP192.168.1.1:1158 ➝ 151.236.45.90:80
Flows TCP192.168.1.1:1159 ➝ 184.168.221.19:80
Flows TCP192.168.1.1:1160 ➝ 151.236.45.90:80
Flows TCP192.168.1.1:1161 ➝ 199.203.55.209:80
Flows TCP192.168.1.1:1162 ➝ 199.203.55.209:80
Flows TCP192.168.1.1:1163 ➝ 184.168.221.28:80
Flows TCP192.168.1.1:1164 ➝ 79.172.192.42:80
Flows TCP192.168.1.1:1165 ➝ 184.168.221.28:80
Flows TCP192.168.1.1:1166 ➝ 204.152.118.133:80
Flows TCP192.168.1.1:1167 ➝ 79.172.192.42:80
Flows TCP192.168.1.1:1168 ➝ 204.152.118.133:80
Flows TCP192.168.1.1:1169 ➝ 69.163.208.154:80
Flows TCP192.168.1.1:1170 ➝ 124.146.198.105:80
Flows TCP192.168.1.1:1171 ➝ 69.163.208.154:80
Flows TCP192.168.1.1:1172 ➝ 124.146.198.105:80
Flows TCP192.168.1.1:1173 ➝ 188.165.141.56:80
Flows TCP192.168.1.1:1174 ➝ 103.227.177.102:80
Flows TCP192.168.1.1:1175 ➝ 188.165.141.56:80
Flows TCP192.168.1.1:1176 ➝ 103.227.177.102:80
Flows TCP192.168.1.1:1177 ➝ 96.31.43.16:80
Flows TCP192.168.1.1:1178 ➝ 193.34.148.140:80
Flows TCP192.168.1.1:1179 ➝ 96.31.43.16:80
Flows TCP192.168.1.1:1180 ➝ 37.187.146.37:80
Flows TCP192.168.1.1:1181 ➝ 193.34.148.140:80
Flows TCP192.168.1.1:1182 ➝ 37.187.146.37:80
Flows TCP192.168.1.1:1183 ➝ 195.68.112.195:80
Flows TCP192.168.1.1:1184 ➝ 211.220.193.242:80
Flows TCP192.168.1.1:1185 ➝ 195.68.112.195:80
Flows TCP192.168.1.1:1186 ➝ 211.220.193.242:80
Flows TCP192.168.1.1:1187 ➝ 212.58.6.79:80
Flows TCP192.168.1.1:1188 ➝ 198.185.159.135:80
Flows TCP192.168.1.1:1189 ➝ 178.238.40.4:80
Flows TCP192.168.1.1:1190 ➝ 212.58.6.79:80
Flows TCP192.168.1.1:1191 ➝ 198.185.159.135:80
Flows TCP192.168.1.1:1192 ➝ 178.238.40.4:80
Flows TCP192.168.1.1:1193 ➝ 78.46.96.68:80
Flows TCP192.168.1.1:1194 ➝ 37.187.164.127:80
Flows TCP192.168.1.1:1195 ➝ 78.46.96.68:80
Flows TCP192.168.1.1:1196 ➝ 37.187.164.127:80
Flows TCP192.168.1.1:1197 ➝ 92.53.96.144:80
Flows TCP192.168.1.1:1198 ➝ 213.186.33.97:80
Flows TCP192.168.1.1:1199 ➝ 92.53.96.144:80
Flows TCP192.168.1.1:1200 ➝ 93.125.30.150:80
Flows TCP192.168.1.1:1201 ➝ 213.186.33.97:80
Flows TCP192.168.1.1:1202 ➝ 93.125.30.150:80
Flows TCP192.168.1.1:1203 ➝ 158.199.232.23:80
Flows TCP192.168.1.1:1204 ➝ 75.126.15.195:80
Flows TCP192.168.1.1:1205 ➝ 158.199.232.23:80
Flows TCP192.168.1.1:1206 ➝ 75.126.15.195:80
Flows TCP192.168.1.1:1207 ➝ 216.119.129.2:80
Flows TCP192.168.1.1:1208 ➝ 75.102.9.70:80
Flows TCP192.168.1.1:1209 ➝ 216.119.129.2:80
Flows TCP192.168.1.1:1210 ➝ 75.102.9.70:80
Flows TCP192.168.1.1:1211 ➝ 210.172.144.247:80
Flows TCP192.168.1.1:1212 ➝ 210.172.144.247:80
Flows TCP192.168.1.1:1213 ➝ 193.189.74.35:80
Flows TCP192.168.1.1:1214 ➝ 193.189.74.35:80
Flows TCP192.168.1.1:1215 ➝ 212.83.36.161:80
Flows TCP192.168.1.1:1216 ➝ 91.217.242.34:80
Flows TCP192.168.1.1:1217 ➝ 212.83.36.161:80
Flows TCP192.168.1.1:1218 ➝ 92.51.137.31:80
Flows TCP192.168.1.1:1219 ➝ 91.217.242.34:80
Flows TCP192.168.1.1:1220 ➝ 92.51.137.31:80

Raw Pcap

Strings

040904e4
 2006 Ntoskrnl (Daniel Pistelli).  All rights reserved.
4.0.0.1
CFF Explorer
CFF Explorer.exe
Common File Format Explorer
CompanyName
Daniel Pistelli
FileDescription
FileVersion
InternalName
@jjj
LegalCopyright
OriginalFilename
ProductName
ProductVersion
StringFileInfo
Translation
VarFileInfo
VS_VERSION_INFO
``````
```````
````````
``````?````````
```'````````
`!````````
<````````
        /> 
	_%_}_&_
0|1$lY@."
01>RbL
0?3i}'
;0bbX,,,Y
0|)BSTfSwVD1nX].
?0|FQm
0Gu^nt]r8i
0-<Jwg
0OuY&v
0q4SbyD
0qBWSSSb>aBY,{OVSEs
0QCSSSS
}!0qDSSS
0qDSSSSb>aDY
0qhSSSS0>qtSSSS0q|lSSSS
0qllSSSS
0q<LS0qTSSSS
0qlSCSSS
0qLSSGSS
0qL:SSS0>q|B
0qLSSSOS
0qlSSSS
0qL!SSSS
}_0qn[SS
0q|SSSS
0q\SSSSb>y\
0qT+SSS0>qt+SSS0q\D+SSS0qd
'0qv,S
,,0r@,,,
,,,0r0o,,,SSSS
,,,0rA$,
,0rA,,,B
,,,0rB$,
,,,0rE$,
,\,,,0reA$,,$,,,0
,0rEL,,S
0rg\,,SS3SS
,,,0rI$,
,|,,,0riA$,,
,,,0rJ$,
0rJL,,SS#SS0rjL,,
0rjL,,SS#SS0rtL,,
0rk\,,SS3SS0rW\,,
0r\l,d,
,0r~L,,s
0r\l,,[S3SS0r|l,,
,,,0rM$,
,,,0rO$,
\,,0roa\,,
0rrL,,SS2SSESSSS
0rRL,,SS3SS
0r_\,,SS3SS
0rTL,,SS#SS
,0rT<,,q
0ru|,,S
0rVl,,SS#SS
,0rXL,,s
[0sjSSsS
0skSSsSS7SS
0sKSSsSS7SS0skSSs
0z`,,,
0zDl,,
1_!_}_
10qtlSSSS
!1AaqS
1EeuQSfs
1EeuSS	S
]1Eeu!Ue
1q!9'ueeS
>1q=GA
1SBzdl,,
1SBzml,,
1u}qME}
1u}yue
1?y?gO
24G*gd
2BkbHT:Eo!Rc|k)Y,
2bU,,,Y
,2{bVSsE}v~SsbrD,,,
2}*Mb$QPv~Ztq$Yl
2mhS#r[SSiS
,2{NVSs
2qfY,{Y_Sgs
2q`YbbE,,f,YDM ,,
2q\Y,{VVSes
2rql,,bbsb^,,,Y
,2{\VSs0rYyl,,SSSS0
3<0qlSSSS
30qTSSSS
3bq8\Y#>a
3?bzHl,,
3cqF.4D
&3=(eBR75kfWE@
}3gSSSS
3IwY)0
3 Nl,,,
}3N/SGSS
3SE[sSS,{
,3SSS0rny$,,3SSS0
3SSSbbWlS,,Y
#3Tie5Pb|O
3#'xKl
44}[r6^]
4:b&}W
`4~_CP[
=4&;-J
4p)([\F0B<
		4~.Qu
4rd?C\	d
4/rZ\"
4Z:%~@Qn
51u}9u
@5BbJ<,&,bz~<,,
5BrM,,,E
5BzQRSSS
@5,DqSSS0q,dSSSS
%5EeujqE
5!gKrd?N~Ke
5}i=E%u%
5KS0rh,,
<5mam@
<5.p$5Rv$>$
%}5QSSQS
5R/Yq}y
`5}S*!>d
5sSSS_SS
%5}s=U
5t(`pL
5'ueeSS3
%5}Wq%
;5X)PC
%601wY
6}BCr@}s0q,
6CKX/r_a
,6{cVSs
,6{CVSsES:^AS,{vVSs
&6};r@}
6&SSZ&SS
/6/SWSS
)7Jvg6W\
7SSSSUSS
7ud	PN~i>\ 
8/$4pe"JyV
8d!^Me
8DZSSS
-=8	iOgZ
8 =n:$
8xHTTX
8]z`SJ
9-90qlSSSS
(,,9Da
9_GS_'_S
9_GS)Y!
9_GSY!
9&SSw&SS
?@?9?U?rE?
9w?	cOF
a\#.%[
,,#>A{
a|)}3Nl,,,
,#>A3ObX
A$63`QD[5J@
Aa9QYA'eueeS4S1u
AaqSiSSS_'uMuSSSS
aa!!YUY
a$\BaD
a\BadD
a|BaDI
a\by%S
a\bySs
aC0QC3S%SS
aC5BFsY
aC5ByMQW
aCBadI0q\SSSS
AcBalY
acBbM,,&,0r2,,,SH#>z2,,,rH
aCBrb`
aCIBs[
acIm;E,SSSD/b,,,
`AcJMVxfYpr"[+
a$cm7by\
#>acr@}aQ
aCRPcsS'SYbyd
aCRPSBYaC#>qC
aCY,{|
aCY2,{tVSsrP=}{ESRSS
aCYby{
a[cYD,
a[cYD+
AcYD-b
a[cYDh
aCYD;S
aCYD#S
a(CYDZl,,
a|CY,{fVSs
acY,{HoVSs0q,S
aCY,${lVSsBrqYl,,
aCY,{S_#SsBqD0qd
"aCY,{|VSGs
aCY,{|V#Ss
aCY,{VV#SsBqD0qd
AcY,{XyVSsrP}M
adb2ySKBy\
adBa$t
adb{%R
adB{RJ
adbyS[
adD#>{aS
ad#.[J
aDPT3IBaD
aDRT,S
advapi32.dll
adY2,{[_Ss
aD#>Y3
adY,{Hg_SsBqT
adY,{HmVSsBqT
ad\Y,{sVSs
A%E}EUeER
a}ei}E]eu!
aE'KY;J
aF0qvsSSOSbyv
af1Y,{I_Ssr
afY,{aVSEs
afYb,{@VSsrP-#rNSSSbzlV,,,
a<fY,{jVSs
$>(}Ag
aHBAsK
ahCBQcD^SS
aH#.{IQR
aH#.{Q
ah#<%T
ahYbzI
a|hYDSp,,
a_I_)_
a|I<XRT,,SS
AKYbyXt
AKYD-P,j,
al#.%[
a L0rc^,,,
al#>[5BqUyH
alB2Qc
a$LBa[
a|lBa|0qLW
alb{ABylY
AlBahY
aLBa[I
AlBbrl,d,
aL#b{S
alcBaH
aLcY,{VVSs
ali#.[
aLIOa|=w
a,lPTs
aLQYD"[SS0q~,S
alRPKSS%S
aLXTBa
aLY,{\
aLY,d{gVSsrP}{w
aLYD{JL,,
aLY,d{jVSs
aLY,{k
aLY,{qV#SsrP#rOS
aLY,{W
({A-"'	M
a[MBBc
aN#>eZ_<Ss
aN#r>Z_<Ss
aNy#>Z_<Ss
aN#>Z_<+Ss
aN#>Z_<SWs
a[Oalm{$
a}O m`%2ya61=Y
apYDI#SS[
AQlSSQS
AqS%eu
a<\#>[r
>arYbyp
AsKBaT
aSlBbzl,
</assembly>
<assemblyIdentity 
        <assemblyIdentity 
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"> 
a^SSI^SS
,{a_SsrP=#r
aSSS<L
atA#>YSR
atBa$|
atIBad
atY,{\V#Ss
Au6U]Qee%
=A'u8x!M
aUa!!YY
a%u}eu
AuU]	SSys9E
}AuUuu
,{aVSes
,{aVSs
,&{aVSs
,{aVSs#>,a$Y#>y
,{AVSsEO/6SsbrLl,
,{aVSsO
awc}C\
AWu%g}
aXFR@S_RSB
aXYD#SS)S
a|Y,{_
a\Y#>[
a\Y,{AVSGsBql
a\Y,${aVSs
a|YD>3
a\YDM@,,\
a[YD-yS)S
a\YEeSESS
A[Y,{gVS
a|Y,{GVSGsBql
a|Y,{HyVSs
a{#>YJ,By|
a{#>YJl
a|Y,{kV#SsrP#r
a{#>Yl
a\Y,{pVSEsrP}
a|Y,{V
a\y#>YSByT
a[yY,{VVSsB
a|#.zc
.AZe'2
?]? -?b?
b2rFl,,Y,{DAVSs
b4I,,,Bbql
?B?6?}d?C?/?	?
ba{0SS
,,ba1[KBbH
badYby@
baDYbzNl#,,
bAl,f,YDQWSS
^baL!Yby|
Bap0qNSS'SS
[baPYD
bapYD7#S+S
baTYD83S+S
batYD*sS+S
ba,,&,YDHSSS
ba|YEMv
Bb$,,,
bB,3,,Y
,,Bb a
b\,,,BaLa0r$,,,S
bba,,,Y, {VVSsrP}{WEpFSs
BbB,,,
bb,,,Bb0B,,,
,bbE,,
bbF,,,YD1t#SS
BbH,,,
,,Bb_l,,
bbL,$,Ba{
bbL$,,YD!g
"bbl,,YDzB[SS
,,BbmAl,,
,,BbML,,
bbO,,,Y, {UVSsrP#ZrU
[bbP,,
bbQ\,,Bb0G\,,bz]
B,,Bql
bbrL,,Yb0zBL,,
bB,S,,
,BbX,,,
bb@<,,Y
bb\,,,Y,0{|VSs
BbY]SSS
,,Bbzl,
,BcKSSs
.BcQSs
B|dcrbEc*B|LcRbEc
bDL,,Bb^AL,,0r~L,
bDl,,Y
bdl,&,YbzLl,,
bdzl,,
beL,,LY
bE,,,YE
bH,S,,
b$H,,,Y
,*b|I$	{l
bil,,B
BindImageEx
bIs;-LH(]
bIT;UoFJ<r
bI,,,YDhb+SS
_b_J_._
bjl,,}
bjl,,ESRGSS
"bJL,,Y,{@~VSsBrjL
=?B? ?JO
B-jrK!GP
bJyL,,Y,{y_
/bk/g/S_SS
,,B{kSSs
b?l,2,Bbs^,,,l
b}L,,B
B#LCR6M~lH PWZrY
B|lcRbEc
b{lc,,Y,{HVS
bLl,,Y
bLl,,Y,{@GVSsBrDl
b[l,,Y
b\l,,Y
b[l,,Y,0{dVSsBrNy
b{l,,Y,0{NVSsESR
b`,,,LYD
Bl,,YD,@
"b[l,,Y,{`tVSsrP}Q
bml,,BS 
bml,,H
bMl,,Y
>bm,,,Y
Bn4`5A.r
b[nXzOB4
bn,,,Y,{`NVSsBrvl
bol,,Bb
bpd$,,#.ZC
"bpl,,
bPML,,
BPSBad
Bq<#>a<
Bq\#>a
Bq<<#>a<#&alABalU
Bq\by\
bqdYbaDY2
bqdYD.$,:,
Bq`En_Ss;
Bq`EqvSs?
b|ql,,
,,,Bql
BqL0qtSS'SS
BqlN+SSS/
BqLRmLSS&SSm
bqLY,{IV2Ss
bqLY,{K_3Ss
bqpYD9
bqpYD;c
bqpYD,cS9S
bqpYD=cS;S
bqpYD'tcSS
BqTPTC
bqtYDqN|,,
B QuIP+uyr9i
bq\YE}
,,Br{\,,6,
BrAl,,
,Bral,,0
brAl,,YD3jSSS
bra,,,Y
brA,,,Y
brA,,,YD3gd,,
BrBl,,
brBL,,Y
Brcl,,
brCl,$,Y
,,Br D<,,bbd<
brD,,,Y,2{bVSsEVS
brE,,,
Brel,,
brE<,,Y
bre,,,Yb2a\YbzIl,D,
Brf,,,0q0LSSSS
brFl,,Y,"{AVSs
brh,,,
Brhl,,
Bril,,E
brI,,,YD#q
,Br{\,,,l
Br]L,,
brLl,,YD#
bRl,,Y
br@<,,LY,{VVSsY
BrMl,,
Brol,,
brP,,&,Y
brRl,,YD#~#SS
BrtL,,
brTl,,Y
brU<,&,YDHSSS
brV,,&,Y
brv,,,Yb2bF,,,Y
Brw\,,
brX,,,Y
br@<,,YD3
br\,,,YD3}
br\,,,YE3Q
brYl,,Y
BrZl,,
.bs\,,,
bs\,,,
bs\,,,Bb
bs\,;,,Bb{\,,6,
bsf\,,,Bb$,
{BSn{<P
,,#b^SS
b^SS6^SS
#b,SSS0r
B_Ss,wr_
//b/SWSS/_SSS:_D_
bt<2,,Y,{{VS
bt<,,HY
bTl,,Y,0{AVSsBrhyl,,
b`tL,,Y,{j
"bt<,,Y
bt<,,Y
,{bVSs
{BVSsBq^Y
,{BVSsBr<Zl,,
,{bVSsEc>
,^{bVSsEC
,Bx-FK
#"bxSSS
b|,,,Y
Byd0qTSS'SS0q|SSS
b`,,,YD1!RSSrP#r
b`,,&,YDO
[$ByL0qlSS%SS
ByL0qlSS'SS
bYl,,LY
b[yl,,Y,{NV
By\#>q
By\#>qJ
b\,,,Y,{`|VSs
bz^,,,
bz],,,
,,Bz{\,,
,bzb,,,
bZ,,,BbMa,,,0rm,,
bzBL,,
,,BzcL$,4,
bzD,,,
BzD,,,
bzE<,,
bzi<,,
bzl,,B
bzl,,Y
bzMl,,
,BzmL,,
[bzO,,
bzp<,,
bzQ\,,
bzRl,,
<,,Bzt<,
bzUl,,
{bZvSsB^yl
bZ,,,Y
bZy,,,BbB,,
,,BzZ,,,
``C````````
/|/,/C/
c0kSSsYD+W
C0SSEpCSS
C5B[0qLS
c5KSR*
C6G?R1	
c#"6SSS
C#>b],,,
C#>b},,,
cbbQ\,,B
cBGX BG
cBqd0q\S
CBq\VG<S
cbrLl,,B
<}CBylI
CDJsSS
cd^_SsBaD
CESSSS
cgSSsY
c<g<SsY
CharNextW
c:I2lx};11
c~JiSJ
ckSSsY
cKSSsY,{h\VSs0sKS
ckY<Ss#r0sS
ckY<Ss#rPSS
ClosePrinter
#>cl,SsrV@}
#>cl,SsrV@}30q|
comctl32.dll
co_oaoIo
CO+O/OyO
COqd}3Nl
CoRegisterMessageFilter
COrml,,m
cq6SsB
C#>qDYD"s
C#>qRYba
CQ_/!Y
CreateFileW
CreateThread
cRI~rW
C,{rVSs
CSbrvl,,Y
CSDASSS
,{c_SsBq<L0qdSSSS
CSSBra
,{c_SsBr<u,,,
c&SSL&SS
cSSR0q|SS
#"<CSSRm|LSsSS#
,"{C_SsrP}z
CSSR;SSRwSSSSP~SS
cSSS~_
cSSS<,<
CSSsbbE,
#>cSSSsrJ@}#
cSSSS_SS
C/V#rz,
,{cVSs
,{CVSs
C,{\VSs
{cVSsrP#zr\SSSbz\
'C,{^VSsY
C,{\^VSsY,{f
C}w#>qC
cYDG1SS
cYDP6,,
C#>YSB
c[YSsY
c,{[yVSs
CY,{|VSs
d````````
<,,D ,
D`````
d_0q,lSSSS
d[0q,lSSSS
d{0q,lSSSS
d[0q.,S0qLSSSKR#>sl,Ss
d[0q.,S0q\SSSOS0q|SSSS
d[0q,\SSSS0qL
,D,,,0rbA$,,4,,,0
,d,,,0rmA$,,
,,D,0rq$,,L
,,D,0rr$,,D
,,D,0ru$,,\
,,D,0rv$,,S
D}2FGIB
D2SS9S
#D=3SSBqL
D3{YSS
D3zOSS
D5#S9S
d+6y;L-%X	}8:
D7t_SS
D@(,,8
D8CSSBro
,,D9u&SS,{\VSs
D9UxsR]
dA0q,lSSSS0q`
,,DA3SSb.zP,,,
@.data
daVf-_SsBqt
DByl0q\
dC0q,L
dc0q,lSSSS
dC0q,lSSSS
dC0q,lSSSS0qL
dC0q,lSSSSExF
dc0q.,S
dc0q,|SSSS0ql
D?cS9S
D/D,:,
Ddd\}f
,{ddVSsBrN
</dependency> 
<dependency> 
    </dependentAssembly> 
    <dependentAssembly> 
<description>Your app description here</description> 
D]eSSrP#
dEVSSs=ER
D`Fd,,
dG0q,lSSSS
DGcSSS
DGi,,,
DgoqSS
D)GS9S
DGwSSS
)#'dI&
DK,,,|
dk0q,lSSSS
dK0q,lSSSS
DKBVqX
D	kSS#>mX#>q
dNk[SS?D
,{dNVSs0r|l
dNz{SS;D
dO0q,lSSSS
dO0q.,S0qLSSSKR#>sl,Ss
Dof0,,
,{DPVSs0rZL
,d,qSSS
DqV,,,
,{DqVSs
Dr@}30qXk"SSS
dRdasS/S
dRdASS-S0q,S
dRddsS/S
dRdFSS/S0qlSSSS
dRdJCS-SEc
dRdKSS-SESSSS
dRdNSS-S
dRdosS-S90q,S
dRdqSS-S0q
dRd@sS/S0qlSSSS
dRd[sS/S0qLSSSS
dRd_SS-S0qlSSSS
dRd@SS/S0qlSSSS
dRd[SS-S0q,S0r\
dRdvCS-S
dRdWCS/S0q
Drw\,,Y,{dxVSsD[,,
DSBa crP}G
DSBa T
DSBq\Q
DSBrW\#,,
DsKBqH
D`#SSB
,d,SSSS0rYy
DSSSSIwS
D&SSx&SS
DT/SS?
D/+twpT
dU0q,lSSSS
DU,,,x
,{d|VSs
,{DVSs
,{dVSsBq<t
,{DVSsO
dw0q,lSSSS
dW0q,lSSSS
dw0q,lSSSSbqh
dW0q,T
dwN<K0x
Dx3S;SBqL
,D]x9SS
dY0qlS#SSS
dy0q.,S
dY0q,S)
dYbzD,,,
>DY,*,,E[YSsE7x_SsbrL$
dy(M9x-
DzN#SS
DZSSS?Br}l,,
E/%/}/
e}]3'eE=u'
E3|Mhz
E3SSCS
E4%%qMQSFST1u}
E%}57QSy
E%}[5QSSQS
E%}5QS%St1u}
E5WuME
@eBalM.
ebqpBqnb
eBR7ukO;r@#GQUa
[eBy@0qxSG'SS
E,C0rf
[ECPSs
{ECPSs
]eCR6EkPv6<Z-
ECr@}w
EeeU',
E%E}EUeER
eE%iU}uY
%EepA)
e]EQSys'9E
eeSS[S
ee%U%]]
E}EUeE
Eeu!UeuqPMQSSsSq%
eE%U}uy
EFvS=sbqhY,{b
EfvSsbqT
Eg6Ss,~{jVSsbrLyl,,Y,{_V
E]gkWuu5eU}u
E_gSSbyp
Eg\_SsESsS
EhfSSbyp
%eHSSSS
EhvSs?brJ|,,YD3p;SS
E%i5eu!
EisLgYj
EIvSs;EsSSS
EJvSs,v{jVSs
ElSsbbLl
E%M5QSS
#EnFSs
@ENu!Ija
Eo{=#JTyc
EoMo./d/
eO=O2O
EPeSSS
{EPxSSD{d
eQSjSA%
eQSS[9A!A!qy'+ueeS9
eQSS9Al!A!qy'ue
EqU}US5&S
e}]s'eUEe'MU
ESoFSs
,,ESRS
}+ESRSS
E_<Ssbap
eSS#>cl,S
ESS'PS
;EsSSSb6zD,,,
ES]SSSSS
E/S#Su
E~SSy~SS
{}?EThSSb&qpYDO[SS
E}u1EeuSUI
eU4}E%%QSq
%e]U}E
E'ueeSS[S
eUEe'%u}
e}uqMQSS
eu%QSS
euQS~se
EuSS-S
E]uSSSS}SuS
euSS'syu>
euSSxS1u
EuSSyS1ux}y%
E%}USSzS
eu;TBX@~8A
e%uu'cc
euu]SSV
euyEeuSS
EvF_Ss
EVSSCfSS
eVSSlfSS
EVvSs;,{jVSs
{Ewds/|IU
/E/W</S/C/
EW"S=s
ExitProcess
e\yu/^r
EZvSs,v{jVSs
=f:50^
\f*8*R
FA1LjR|lA+
faLY,{~VSEsBq|
fa|YDT
f{CQoI#
fi*^9pN/;{J0
}F+MK$RJ
foA[]f
F`p4b6
fpsBr}L,,
fqLYD^;SS{
fqLYD[;SS{
fqt,XU0qlQSSSS
F#QwiUY$ev<n-
,,f_Ss0r<TL,,SSSS
{FSs{BAS
@FSshFSs
|fSSSSSS
f~SSSSSS
[FUmLT@oZ\,
,{fVSsi
```g````````
G0&a^T
_garRWZ
@GBa$\
GcO2aKwHzt|E
g?dD?76\
GdipDisposeImage
gdiplus.dll
)\gDyHo
GetCursorPos
GetModuleFileNameW
GetModuleHandleA
GetProcAddress
GetTickCount
@>;GFIP
gg/SaE
g/H2]p
}g=ixtK_xOybN
gk d@lC)Upz2RC|
gPsPI66
,{g_Ss
,{G_Ss
GSSbzU,,
gS[SSr
g^SS/^SS
guuSSj
_g_v?_}_
,{GVSsBq,L
,{gVSsEB/
#,{gVSsrP=}
#,{gVSsrP=}90q\SSS
,{GVSsrP=}e
H0qlSSSOS
<[]H9sL
HBqh0qXS
H:EOVwHf(9)S
H:FP{FT
hfSSSSSS
hjfRBf
?h?(KOJOoO
$hN1v0-J
HnK5K,
HOUh:C=r+^YF\~
HSBqw[kBywK
h<@S<IE
H^SSd^SS
,,HSSSS
$]h'`'Uf
HUkQ2wx
H v<V)
hWX'EbHBn
:I0q|SSSS
,{I_3SsrP#rNS
I,{BVSEsrP}
I,{BVSsr
_~:icOF"
\IGlO]zt,_
i))	i$
>IKpK5Mi<
IL3"^Sh
imagehlp.dll
ImageList_Create
I<MR*U^|*8*R
inqapJZ
iOJO OtO
I]OtwD)s	bf9Qc[=H$X~
Ipfw{[
_i_r_:_
ISA}}]Y}
IsIJhh
i<,,SSSS
I^SS%^SS
it)j*Ddu
,{iVSgsrP#rh
,{iVSs
IvSsrvSs
IWc}4TfTn
`ixKJNpu#Id
j3SSS[SS
$j+A7|
j}DRzE,
j_f_._
JFSs~FSs
Jl,,YD1
J}}==MM
jOsOKOx+OIOBO:O"
JSSbapYDef#SS
|jSSS0qdS
J/SSSPSS
j"SSS[SS
jS[ ua
,{jVSes
,{jVSsK
{jVSsrP}[s0q,S
{K$,##
k+0*zMy
/(/K/1/r"/j/>/
k1SSsD,SSS
}!K@8 
kBrI,,,R
kBr,jl,,
]K?ch|nJ']_+
KDQ{cQ
kernel32.dll
kGpEA]
K,{lVSsOBr]l,,
kO"O*O6OuCOWO'O
Ko/o}ozo**oPo
?k?/O?Y?	?
KPJw9icJU8enYqwduz#Jt}E
}/KrrA7
k/!/R/z/w
KS0qD)
K}sDQ,,,
K^SSg^SS
kSSSbr{\s,,YD_3SS;
K[SSSQSS
KSSsY,{\
K,{[VSs
kVSsEV!S
,{kVSsrP=}+ER
,{kVSsrP=}y0qdWSSOS0q\
K,{W_SsB
KxS,Qkv
KYD1|,z,
k?ziL1]tt57+
,L,,,0raA$,,<,,,0
l,,0rG$,
,l,,,0roA$,,
L'}3N/S
(L5tdt.bH?kg
L-6~%QQ
            language="*" 
laSSSES
L,,BzeL,
l,,Bzyl,
LC}oEc$
L	-C#.q"C
l#>Cr@}
LDmf#b@+
LdWf8\_p
l,,ESRS
lfL/B4!T
,{LgVSs
l\~_j<64]
{lkSSs
lNWSSS
LoadLibraryA
L,,oSSSb
LPDU3SS
@lQBaL
_]L_S_
Ls#b&S
LscsSSY,
Ls}?E`
~LS}?E
lS}#E@FS
LS}KEWmFSs
l,SsD,+
lSsDR(,,|
L&SSD&SS
l~SSk~SS
lSs,{mVSes<H
l,Ssr@}3
l,,SSSS0
L&SSs^SS
LS}TKEjFSs
LsvSSSSo3
}lU0w&|_6ct=
`LV<Em
,"{LVSs
,,lvSs0r,\l,,SSSR
{lVSsBrXy,,,
,{lVSso
,{lVSSso;SCR}
,)l=WMJ9e
l[wp&Xv
<}l#.X
lXDR\W
LXM}g#>yC
l,,YbzNl
l,,YbzP
l,,YD#0,
LYDk#SS
lYD\l,,
l,,YD,+S
l,,YEavS
l,,YE^ES
L,,Y,{NV
L,,Y,{o_
LY,{oVSs
LY,{OVSs
l,,Y,{qV
l,,Y,{QV
LY,{\VSs
|l,,Y,{w
M0q4S#>qC
M0rp<,
M1s">`
=M]}1u%
MA%5%QLSS:SA%}u
?m?b?*
MbbT<,,
mC1S}3
mCS#}?
mcS#2>
m,cS}3
m,CS}3
m(CS}3
mCS}'3
mCS}&30qC]
mCS}&30qCF_Ss
mcS3#rQSSS
m,CS}C#>qc
mcs#"DSSKS
mcS#r~
mcS#r 
mcS#r'
m,CS#r
mCS#r/
mcS#rDSSkS
mCS#rH
mcS#rISSmS
mcS#rk
McS#rMhSSS
mcS#rNSSoS
mcS#rPS5SS
mCS#rr
mCS#rRS4SS
mCS#r,S7SS
mcS#r^SSkS
mcS#r,SSkS
mcS#r$SSoS
m,CS#r|SSS
mCS#rT
mcS#rwSSmS0qLSSSS
mCS#rX
mcS#rzSSiS
mcS#rZSSiS
m,CS}s
mC!S}s
mC)S}w
md|,};
mDl3m#
mDlWm[
Md[S}{
mdSm''
mDS}{M0q,SVg<S
md\S#r+SSS
M!]}E%L%QSS:SA%
MessageBoxW
mfS#r;
mfSSSSSS
mhS}'1
mHS#r-CSiS
m|iS}s0q,S
MiYk8vrz/
m)Iyuv-
M]}k%5
mkS}u0
m<KS}y
mkYS}[
mL,,BC0q
mL,}CI
mlCmKL
mLiS}C
ml]m&K
mL,#r2
mlS}'#
mLS}'+
mlS}'3Nl,,,
"mLS}a0qtqSSSS
mLS}#bqlyY,{rVSsY
mLS}[E
mlS}[ESRgSS
mLS}gN
mLS}i0q|ySSSSby|
mlS};O
m<LS#r
m$LS#r
mLS#r*
mLS#r	
mlS#r1,,l,
mlS#r2sSoS
m$LS#rcSSS
mLS#rPSSoS0qdSSSS
mLS#r*SSkSby|
mL[S#r?SSS
mLS='wRmLsSSS
]mMQSS8
mnS#&"I
m{qS}O
MQSS1u}Y
M%QS~se
}M]}qu
mr\SmV_
M?-?r?z?
M[S}'{
m[S3#r>SSS
m[S}5b
m|S=5N
m`S#fr
m{S#frRSSS
m[S#"jSSkS
m{S}'O
m[S#r|
m[S#r!
m[S#r(
m[S#r[
m[S#r\
m[S#r&
M[S#.r
m[S#r6
m[S#rD
m|S#rFSSiS
m\{S#rksSS
m[S#rPSSoS
m[S#rt
m[S#rw
m|S}&s0q,S
m~SSE~SS
m[Ss#r`
m[Ss#r7sSS
M]}SS^S
MS}SSSSS
mtS}KE
M]u}q%
,{mVSs
{mVSsY,{|RVSsBqL
MWJtS_^d
/MW%n8?5\
mWYS-C
mXS#r}
_	_M_z_
$MZuq%YmU
n_0_$_
n0Al,,S#rp
n0el,,,#r2
n0]L,,S-KR
N0qDSSSS0>qdSSSS
n0zL,,
N3SSS<\
    name="Microsoft.Windows.CFFExplorer"
            name="Microsoft.Windows.Common-Controls" 
nb)L,,S}
n Bl,,S#rO
N#>B_<Ss
nbY,,,S}
nfSSVfSS
|nGEbft5.
ngY\,,smsD4
nhl,,S#2r$SSSbrx
nI,,,S#2"
nI,,,SSSeS-cRnyl,
nJAl,,S}
nJiUY$
nJl,,S
nJL,,S
nJL,,S#rE,SSS
njL,,S#"rNSSS
#NJoSSS
nJ,,,S#2reSSS0rB
nj,,,@SSgS#r
n_l,,[
n_l,,[}3
Nl,,,D
Nl,,,Dx
n|l,,,#ra
n|l,,S}3c
n }l,,S=K
n]L,,SSSgQmc
N?l?uC?
Nl,,x,DSSSS
nn,,,,
nn,,,,#rabSSS0rvl2,,SSSS0r<Vl,,SSSS
no9,,,3#r$S
no,,,s#r@LSSS
NoSSS<N\
nQ,r,,S}kEgF'Ss
nRAl,,S#rZS
n<r|,,S=8
n@,,,S#reSSSSbrX,
-N,,SS<\
N,,SS<\
N/SSS<^\
NSSSSSSS
ntL,,S#"r 
n tL,,S#re
nt,,,S}3
nu*$@1
nu|,f,S=8
,{NV2SsBq\
nvl,,S
,{NVSs
,{NVS's
nVSsBrP,
nx,,,S
nYl,,S}3{ESRSS
@%N:Y^R
nzL,,S
n Zl,,S}
nz,,,S
````O````````
O?*?6?f?
o78|Xn-[~e\/Yun
_O9Tcl
oA/	/=/
,,Oa|#
Oal}3Nl,4,,
%oBFq[
?O?bq?a?
%oBzal2,,
o!Co{oGo]o
O-C#.qC
ocYSsS
ocYSsS}/{VcYSsY,
O_DO?OoOyO@	OeO
-oFoDoko
OhODO|O
OHO|O 
o/Jo?oQoaoH
O,,,jSSS
`oJ-*+T7
oJT9oH3
o,kSSsS#"
oKSSsS}Am
oKSSsS}GoESRSS
ole32.dll
oledlg.dll
OleUIBusyW
OnOxO(DO$OK
o%ojofo_>o
/o=oro
o(o s/7/
__oOSSS9E%
OpO(OK
Oq,\m_
~(oQWY
)orovo o
OS#rxSSSW0q\SSSSR>m\:SSS#
O&SSjVSS
@o>SSS#
OSY,yhBqP
Othz40
o"t#y@R
??OUO)SS
??OUOSSSXm
,{oVSgsrP#r:SS
,{OVSs
OvSsBaD
{ovSsBydy5VQvSs5B
{OVSsrP}z
o`WEl]_*
oWggSSSS
oxoho//
Ox:O*OvO
o{YSsS-/
OzeUB^
O*z@\~K
ozozFo
P````````
+p6\8\RVoZTd~
+p6\sk"Te,N.{
P}7bzBL,
*p7vrt
paC#>XByl
PADPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPAD
PathStripToRootW
P{	BapD#,,,(
p{brlHl,,Y
pc0qD3
pc[0qDp
pC0qlS2SSS
pc0qLSSS
pc0ql|SSSR#>c
pc0q,S
pc0q@SSS
pc0qVqSgSSbyd
pc0r2,,r,SbrJ,,,LYbbm,,,Y
pc0rAl,d,SSSSbrAyl,,YEPSS
pc0rJ,,f,SSSSbbJy,,,Ybzj,
pc0rm,3,,SSSSba
p-c0rU,,,S
pc0rVL,d,oSSSbbDyL,,Bb^L,
pC#>be
pC#>bM
pCBqH0
PCBqH0
pCBqlESgRSS
pcBrQl,,
pcBrql3,,
p}Cbz]l,,
.pCbzP,,,
pcDDsS
pcD'msSS
pcESRSS
p}cEsSSS
pc#>PrPm}kES
pc#>@r
pCw,,SSO
PcYDfJsSS
pC#>yR
pC#>zm,b,,
pd3)RbEc
PDjeCSS
PD$SSS
PDzPSSS
,peD{vSBL-;/Q
PeekMessageW
p[E|FS
PesBqT
P{IBal
P}IEb_Ss
p$jnleEa\n
 pkBrI,,,
pKrP#r5jSSS
PKSSS[SS
]PLCBqD
?Pm?b?
pmCbzP,,,
pP'~xrwZ,
PQBrHl,d,
.PqN4Q@5:
pqsBql
pqsBqL
P#rFSSS0
P?`?rO
            processorArchitecture="X86" 
    processorArchitecture="X86" 
#>PrP}C0mq,SD_SSS
>PrP}w
P#r`SSS
P#rUSSS0
ps5Bre
P$SBa|
PSBa |DN,,,
PSBa h
PSBa H
PSBa L
PSBalA
PSBaLA
ps#>@Bat
PSBbMl
P SBbt$,,
PSBbt$,,
PSBbzL,,
p}sBq\
PSBq(\
PsBq|0
PSBqDQ
PsBq@Dy,
PSBq(h
PSBq(l
PSBq(L
psBql02qLSSSS
psBqlh
PSBqlQ
PSBqLQ
PSBq|Q
PSBq\Q
psBrBl2,,
PSBrd$",,Rnd$,,
&psBrk
PsBrlD$,,0rt$
psBrlY,,,N
psBrxl,d,
PSHBaLR
PSJBql
P&SS6&SS
#"PSSKS#>qC
pssRSSSoBr_,,,EX33SS
P~SS^~SS
PSWRVQ
PsYDiJl,,
.p`#t_$
,PT'aQYo2Cmz^
PuBby,
            publicKeyToken="6595b64144ccf1df" 
PuV_SS
P,weVSs,w,EVSs,w]V
pWJNoSSgS<LBqP
p}WrP}30ql
pYDAcSS
P[YDb^sSS
PYD^LgL9
pYDW#SS
,}P,yHBq$~
Q0qlSS
q\0q<S
q|0rs^,;,,S
,;.Q	%1U2MZ?I'YJXI6Zh2
q,"5f[mz?]F8
q5q11AA
q9.^Mu~D
q${#>A
]qA9'FLfX
qaaS#S1u
q{#>%AL
Q\B^=Af~
q|Bqd|
q[BqL0q<LS0q\SSSS
q[Bq$lESRSS
q,[Bqt
q c0SSSSSb
qC)2)i
qC5BcY
qC5B&cY
~qC5BY
qc#.a@
qc#.AS
q,CBq|
q,CBq|0ql,
q,CBql
q,CBqL
q,CBql0qLS
qCBqlb
q<c#bVSSSb
QcDH,,,)I
q$cEPB
qcJN3S
qcOq|=3
qCQBYs
qc#>$qYW
q\#.%Cr@}3
qCs?sSSYOESSSS
qCY,{|
qCY3,{dVSsBq<t
qCY3,{VVSsrP=#ruSSS
qCY,{A_3Ss
qcYbbD
qCYD!,
qCYD1,,:,
qCYD6l,:,
qCYDaN,,,
qCYDg{,,,
qcYDiNcSS
&qCYDRSSS
>qCYD_SSS
q|CYE_+Ss
qcY,f{S_SsBqty
qcY,f{VVSsBqty
qCY,{^V2Ss
qCY,{|VSgs
q|CY,{|VSs
qCY,{VVSgs
qD#>A{
qd#>A3O&aT
qD#>A3O&aT
qd{#>AL
qd\ba[[BaD
qDBrql
qdI0qr\SSSS_
qdiBql
q$DPT3BqD
qdYD-,,:,
qdYD]aSS{
q<dY,{_VSs
q[EPc5
QES_[S
Q'ES_SS
QES_SS
qfSSSSSS
qfY,{@
qh};EU
qhSSSS
qHSSSS
qhSSSSbq|tY
Qhx9Ji
qHX[F|SU
q\IBqD
?Q?jO&OO
q{#.{K[
QkA4C	{
qKY,{MVSgs
q$l))	
qL#.{[
qL5BqyH
qlB[Dq,,p,
qLBq|I
ql#.bs
qlCBql
ql#.CK
qL#>CK
qLCQSs0rl|$,,SSSS
qlCsSSSSYD
ql#>CYD-fSSS
qLD"SSS'N
QL\H}[jy
qLIBql
qlJ<m[
qLOZZSSS[
qlPTCK
ql)r)	
qLsrzSSSY
qlSSSS
qLsSSS
qlw,dSSS
qLYbbD,,f,Y,{zVSs
qLYDgf1SS
qLYD=sS;S
qLYDyN
qLY,{g
qLY,{k
qLY,{NVSgs
qLY,{OVSgsrP}
qLY,{\V3Ss0rWl,,
qLY,&{VVSs5Br|],,,E,ZS
qLY,{W
~qLY,{WVSgs
qLYY,{k_Ss
qLYY,{oVSs
qMSS9s
qN#>B_
QND`gDP1uh
Q'n!%Ehmg
qPCYD[l,,
qpCYDX,,,
qpL#>c[
q$|PTC
qpYD@cSS{
qq11AUA
q<rP}#
q|#.rs\,[,,
QSS9SA}?}]!]u%
Q&SS9&SS
QSs#.r
,{q_SsrP=#rw
QSSS9SA}}]!]
`}QSS]SA%
%QSS	SA}?}]
QSSsEPxS
q|SSSR#>]cl,Ssr@}Y30q|
q|SSSS
Q_SsSS
Q^SS!^SS
q|SSSS0q|lSSSS
QSSSSSSS
QSSus9U<E}1%
q/t@V+)9(S
qtYbaxY2D
q$tYDK<,,
q=u%}QSS[JS
}q=u%}SS
q)vfzj |k#
,,,QvSs
,{qVSsB
,{qVSsKrP}y
qVSsrP}w
qw[=S!
q,^w,,SS
qx[SSS0q|H[SSSbyH
q|XYE^ESs
q|Y,{_
q|Y3baHY
QYA'ueeS_
.q|Y,{aVSgs
q<|Y,{aVSs
q\y#>Cr@}
q[YD'/
q|YDgf
q|YD+SS9S
q`YESNSSQ
q\Y,f{kVSsrP}z?
q[Y,f{|VSs
q|Y,{j
q|Y,{\VSgs
q@Y,{VVSgs
q[)Y,{VVSs
q<|Y,{YVSs
qz@BqTP
r|$,,#
_}_R_}
R <[~#
r0b,,,BrR,
r0rD,,&,SSSS0qlySSSS
R/2/b/
r2SSS0q|
>@r@}30q
r@}30qL
rAl,,PD
ra,,,LYD<3SSrP
ra,,,YD3fSSS
R`AY~sOG
rb4I@m&!W<h\!L3A
RbEcRbEc
rbl,,SSSGS0rrl,,S
rbL,,SSSGSbrbL,,Y
r{&,,,Br
,,,#rBSS
#>@r@}C
rcl3,,
R#>cl,Ss
rD,,,#
r_$,,,,,D,0r
r]$,,$,,D,0r}$,,d
`.rdata
rD<,,HY
rD,,,LBr@,,,
rDlc,,YESESS7
rD^L,,Y
rDn,,,Y,{q
rd$,,SSSGS
rd<,,SSSGSbbd<,,Y
rdYl,,Y
ReadFile
RegCloseKey
RegQueryValueExW
RegSetValueExW
rel,f,Y,{qVSsKBrY
rE<,,qSSgS
#>re,,,Y
/r/"/F/
r-Feh;ky;K
>@r@}g0r
r hl,,
#rHSSS
rHSSS0qd
rIa,,,-
RichJwS
#riSSS
ri,,,SSSgS0ral,,S
#r`j3SSD@ySS{
R/j/6/H/
rJL,,Y,"{jVSs
rjL,,Y,"{y_Ss
rjSSS0qL
rJ,,,YD3zSSSBrml
r[l3,,Y,{DVS's
r}l,,BqlA
r|l,,Y
r`L,,Y
r^L,,Y
r{l,,Y,2{NVSs
r|l,,Y,2{WVSsrP#ZrrSSS
r\[l,,Y,{D
r[l,,Y,{dNVSs
>r`L,,YEDG_Ss
r{l,&,Y,{hVSsOrP}{
rmL,,SSKgSbrRL,,Y
rMl,,SSSgS
RmLSSSS}6W
RmLS}W
rM[S#r
Rmz?Q9
rnA,,,Y,{NV
Rnd<,,Ss#SS#
r)Nq?}[p
rn,,,[SSgS
[Rnyl,,|
,,,Rnz,,
#>@r@}o
&rO\,,Br0k\,,
rOl,6,Br{^,,,l
#rOSSSEs
,,,rP};
rP}10rmlc,,SSSS
rP}30qL
rP}90q\SsSSS0qdsS
rP}A0q\ScSSSba\Y
rP$,,CSSGS0rp$,,C
rPR,,,Bql
rP#r~SSSS0r
rP#r@SSSW
rqCYDZ#SS{Bql
rQ\,,YDvf;SS
rRA|,,BrR|,
rRl,,Y
rr,,,SSSeSESSSS
r{^,,,S
#r|S1SS
r",,,Sbb$V,,,Ybzr
>@r@}sDl
RSS0qn,S
[#r^[SSS
#r:SSS
#r{SSS
r(SSS0qL
RSSS0q|S
r.SSS0qt9SSSS
,#r`SSS0>r^<,,SSSgS
RSSSbbI,
r^$,,sSSGS0r~$,,s
\R,SSSS[#
#r&SS'SVQ6SsBq
R&SSZ&SS
rt$,,#
rtl,,0rDal,,SSSSb
rtL,,Y,"{@VSsrP}[?bbBL,,Y
rtL,,Y,"{VVSs
rtL,,Y,"{Y_Ss
RTTSSS}
rt<,$,Y
rt$,,Y
rt	<,,Y,{{V
rVlb,,
+,{RVSsBq,T
rvSSS0qL
#rVSSS0r\vl,,SSSS
rv,,,SSSeSESSSS
rV,,,SSSgSbzV,,,
rw$,,'SSGS0rW$,,S
rx9l,,Y,{YV
rX$,,cSSGS0rx$,,c
rXL,,sSSESbrVL,,Y
rxl,,Y,2{YVSsrP}{u0r@l,,[
r@,,,Y
r\,,,Y
Ryc5Bs
rY$,,<,,D,0ry$,,|
rYl,,Y
rYl,,Y,2{\VSsESR
rZ$,,4,,D,0rz$,,t
rz,,&,Bq[M
RzdArVGQ9a
rzl,,}?
rzLB,,
rzl,,YE#V)Ss
#rzSSSD
#rzSSSEi?sSSDTSSS{
rz,,,SSSgS
rZ,,,Y
[S````
[S``````
S0qDWSSS
S0qh+SSS
S0qHSSSS
S0qlSSS
S0qlSSSS
}s0q,S
S0q\SSSR
S0rIl,,S
S0rTl,,S
S0rX,,,G
S0rYl,,S
S0rZL,,
-s0%Wj\T}?Wc}4Tw
,,S}1#>q
S1u}qb%=E
S1u}QuU
,,,S}3
,,S}3+ESRSS
,,S}3FNl,,,
S3SSSkSS
S5BrO,,,
S,,5ROa	
S5SSSSSS
s_7___A_
S}7ESRSS
S7SS0qDSSS
S9E%As%eu
sAOLe3
S}A#>q
:SA%}u
]SA%}u
SA%]}u
%SAYAaYQ^YA'qaaSS
Sb6rD,,,Y
s'bahYbyx
SbaLY,{O
SbaLyY,{OVSs
SbapYD>
SbapYD-[
SbapYD+c
sbapYDq
sbapyYD
Sb~aVYDUaSS[
SBa\#>y
sbb^,,
sbb^,,,
Sbb{\,,
sbbAy,,,YEs[S
SBbD,,,
SbbdQ$,,Y
Sbb|D,,,Y
SbbJ|,,Y
SbbLl,
S?bb`l,,Yb0zXl,,
SbbRl,,Y
sbbUl,,
SbbUy<,,YD)sS
SbqDYs
SbqLY,
sbqpYD
SbqpYD5#
sbqTYba
SBqw{Byw
S}{bq|Y,
sbq@Ybax
sbq\Ybax
Sbq\YE
Sbq\YE}
Sbr^,,,
Sbr{\,,
SbrBL,,Y
sbrh,,,Y
sBrJL,,
sBrj,,,R
SbrLl,,Y
sBrn,,,
SbrUl,,Y
Sbr^,,,Y
Sbr|,,,Y
Sbr{\,,Y
Sbr\,,,Y
@SBrz<,,
S,{BV2SsBq~
S,{BVS
S,{BVSs
sBy|0q\S
SByC0ql
SBylQRmlSSSS
SBylRmDlZSSSm[
SByNRmN
Sbz^<,
SBz|$,D,Rn|$,,S
SBzg\,F,
SBzh,,,
sbzHL,,
Sbzi,,,
SBzi,,F,
Sbz[l,,
sbzLl,,
;SCR}{
S,{<c_SsBqL
SCSSKSS
SCSSSDSS
SCSSZSS
,,}sD;,,
sD?,,,
,,S}#D5#7SS
sD8,,,
sD9,,,
SDp:4,,
sD|SSS
s<DT,,,EPxgSS,{vVSsODx
sDTl,,
S}e0rN,,
%s}{ECPSs
sEc<Ss
sEgS_SS
SEh;6Ss
SEj;6Ss
SEl;6Ss
SEm6Ss
SEo6Ss
SEOR:JSY
SESCSS
SESGSS
sESo_SS
sESRSS
SESRSS
SE@<Ss
SE,,SS
SESSCS
s#ES_SS
sES_SS
sES_?SS
sES_S?S
sES[SS
,,,SEsSS
sES_SSE
SESSSQb
SESSSQbb|P,,,Y,{G
SES]SwSSSSa%Uu
SetPropW
SE[vvSs
sEwS_SS
SEX/Ss
sEXvSsEE
SEzSSSE_
sgES_SS
SGSR0q\SSS
Sg,{~VSs
Sg,{XVSsrP=}KESRSS
shlwapi.dll
ShowCursor
SJBylDo,,,(
/sjPbIT;uo
S,{<J_Ss0q|
s,{jVSsE
?(SkpmXL
SKSSSsSS
SKSSSzSS
S,{kVrSs
S,{kVS
s,{KVSs
S,{kVSs
,,sm9bby)l,,YEU
[S(n]M"PX[F SU
'SN?tVJ
SOESSRR
?sO[OUO
SoSSSfSS
SoYpr"[
S}QNSSSS
SQSSlSSS
,,S#r5
S#rcSSS
S#rCSSS
,,S#reSS)S0rR,,,S
,S#rFSSSW
S#rhSSS
S#rlSSS
S#rLSSS
SRMCAR@S
SRmLSSSS
srP}3^SD
srP#rZSS
SR#>}q{rP}
s#>@r@#r
{S#r,SSS
S#r'SSS
S#r*SSS
S#rsSSS
SRSSVSSS
S#rTSSS0
S#rvSSS
S#rwSSS
sS````
sS`````
sS```?````````
S,{{_S
Ss06qdsSSSby|d
SS0qd3SS
SS0qH+SS
SS0qL+SS
SS0qlSSS
S-S0qlSSSS
S/S0qlSSSS
SS0qLSsSSS
SS0qLWS
SS0qN,,,
S-S0q,S
S/S0q,S
SS0q|SSS
SS0qtSSS
SS0qTWSS
SS0rbL,
SS0re,,,
SS0rHl,,
S+S0rI,,,
SS0rj,,
SS0r|JL,,SSSS
SS0rXl,,
Ss0sSSSs
S|S1u}a
SS#2m:
}^SS2^SS
,,SS3SS
+SS<\59
,#SS5BNy@#.q`
#SS5Bq4
S/S990qlSS
'_SS9E%
SS9s9Ev
+S+S#>aC
'_SSaE
_Ss,{A_S
/^SSa^SS
SS.A_Ssb
SSb6apYDLcSS_
SSbapY
SS?bapYD<#S+S
<Ssba\Y
SSba|Y
SSba|YE/
SSbbB|,,
Ss{bbT,,,Y,0{bVSs
Ssb~b\,,,YD~bkSS
SS#.bc\,
SsBqlEsS
SsbqpY
[<SsbqpY
}SSbqpY
SsbqpYDf
SSbqpYDg~cSS
SSbrF,,,
SSbri,,,
SsBrJ,,,
SsBrjL,,
Ssbr]l,,
SsBrt,,,
SsBrtL,,
Ssbru,,,
-^SSb^SS
SSbSSS
~SSBVSS
{~_SsBydY5VN_Ss5B
SSbzHl
SsbzTl
SS#>c:l,Ssr@};
,,S}sD
SsDEL,,D
,{[_SsD?=,,,ESRSS
SSDNCSS
+SSEoY
SsErvSs
S-SESSSS
SsEtFSs,
SsEUSS
}SSfS_
~SSf~SS
sSG````````
sS}GESRS
SSG_SS
@^SSH^SS
SSISA}}]
Ss,{j_S
Ss,{jV
Ss,{jVS
_SskBa
SSkS0qLSSSS
^SSK^SS
SSKSSSSSSSS
\&SSL&SS
Ss,{lVSs
SS,{lvVSs
"~SSm~SS
}&SSMVSS
SSO0rU,,,SS3CS
SSONrdl,,#
SSoS0qdSSSS
SSoSby|
SSoSESRSS
SSo_SS
~SSP~SS
SSQbb]l,
^SSQ^SS
SSR0qd
#SSR0q|SS
SSR0>q\SSSSby|\
SSR0rdyl,,SSSSb
SSRCSSR
SSRMsA
SSRMsA8
SSRnDY$,,
SsrP}[
SSrP}`
[SS{rP}}0qdSSSSS
.SSrP}30q
SSrP}30q
SsrP}O
SSrP}#r9SSS,{lpVSsBrp,
SsrP#rjS
SSr.P#rtSSS
SsrP}s^S
SSR&SS
SSR;SSR
SSRsSSR
{SSRsSSR
;SSRSSSS
SSRwsSSR
SSRwSSSS
S,{{_Ss
,,+SSS
,SSS-'
+SSS0q\+
SSS0q|c5
SSS0qdS[gSS0q\S[S
SSS0qhSSgSS0qTSSS
SSS0qL
SSS0qlSS
SSS0qLSS
SSS0q\lSSSS
SSS0q|+S
SSS0q\SC
SSS0q\SS
SSS0qt
+SSS0qXksSSS0qx+S
SSS0qxSS
SSS0r@$,
SSS0rb,,
[SSS0rdl
SSS0rF$,
SSS0rfy$,,
SSS0rH$,
,#SSS0rhy$,,#SSS0
SSS0ri,,
SSS0rN$,
SSS0ry
SSS0r`y$,,
SSS0ryl,d,,,,,EPS
SSS0rzL,
'SSS1qySsE}}]
SS<S1u8}a%u}euA
SSS5Ba|t#>yc
SSs#>5s
SSS9E%
SSS9E%IsYSSS9E%I
SSS9E%O
SSS#>a:
SSSba\|YEkvSsE
SSSba\|YEz_SsE
"SSSbbUl,d,Y,{eVSs
SSSbfrT,,,YbbdUl,,Y,{]
|SSSbqDY
sSSbr\
SSSbrEL,
SSSbrT<,
SSSbru|,
SSSbrVL,d,Y
SSSbrX,,f,Y
SSSbyd
SSSbzAl,f,
SSSbz\,,f,Bz`L,,0
SSSbzFl,d,
SSSbzHL,d,
SSSbzI
SSSbzTl,
&SSSbzT<r,,
SSS}&cEB
SSs#>cS
s_SsD>
sS}sD2SS
SSSDFSSS
SSsDOSSS
sSSEsSSS
sSSGER
,,SSSgS
,,SSSGS
S]SSHSSS
S\SSKSSS
</s/!/SSkSZSSqSSS
SSs#>{l
SSsM#>{
,|SSSm
,SS+Sm
SSsm0ru,,,
SSS<N\
SSSO0rT,,,WS3SS0rt,,,
S\SSP>
SSSQbbP,
SSsr@}#
,@SSS#r
SSSRbrD
SSSR}c
SSSrP}
SSsrP}k#
S[SSrSSS
,,sSSS
SS#>s,,S
SSsS}#
^~SS*~SS
^SS~^SS
^SS@^SS
^SS$^SS
~SS'~SS
~SS[~SS
~SS}~SS
,,SSSS
,,,SSSS
,S#"]SSS[
!^SS)^SS
'~SS/~SS
)^SS}^SS
[~SS#~SS
}~SS)~SS
*~SS"~SS
&SS.&SS
%^SS-^SS
,,,SSSS0
SSSS0q
SSSS0q|c
SSSS0qdSsSSS
SSSS0qlS
SSSS0qLS
SSSS0qLsSSS#6>y[r
SSSS0q|S
SSSS0q|SrSSS0qlSS
,,SSSS0r
,SSSS0rgy$,,,,,,0
SSSS0rhL
,,SSSS0r<hL,,V
SSSS0r`l
SSSS0rtL
,SSSS0ryy,,,SSSS
SSSS5S
SSSS9E%
SSSSa%
SSSSbadY
,SSSSbbNy,,,Y
SSSS#bbs
SsSSbq|Y
,,SSSSbr<r|,,YESs
SSSSby|
SSS-SByV
sSSSbzFl
,sSSSbz\Y,,,Bz`L,
,,SSSSbz<yl,,
sSSS_D
SSSSD"
sSSsE[SS
,SSSSESS^SS
,SSSSESS~SSbrIl,,
SSSSE%U}
SSSS|fSS
SSSSHSSS
SSSSl~SS
,,,SSSSm
SSSS)M?
SSSSmfSS
SSSS%}MU
SSSSnfSS
SSSSoooo
%}SSSSQ
SSSS^!+.Q
SSSS_Q
SSSSq&SS
SSSSQSS
SSSSQ&SS
SSSSQSSP
SSSSQSSQ
s^SS[^SS
Ss#>{sSS
;SSS[SS
SS\SSS
SSSS:SA%
SSSSSD S;SS
s#>ssSSs
SsSSSS
SSs[SSS
SSSSSS
>?SSSSSS
&SSSSSS
SS[SS[SS
SSSS*~SS
SSSSSS?
SsSSSS0s|kSSsSSSS
SSSS}SSR
S]SSSsSS
S_SSSSSs
SSSSSSS
SSSS)SSS
SSSS[SSS
SSsSSSSE
sSSSSSSS
SsSSSSSS
SSSSSSSS
SSSSSS?SSSS
SSSSSSSSw}FSsrFSs
SSSSSSSw
SSSSTS
SSSSTSSS
SSSSu[>k
Ss#>s,,SUsrP}#
SSSSV[0PQe	
SSSSW&SS
SSSSWSSU
SSSSY&SS
SSS,{_VS
s>SS\VSS
SSSvSS
#;SSSVSS
S_SSvSSS
S[SSvSSS
SsS}?{VU
SSSWaE
SSSwsSSS,,SS
%SSSyqaY
/SSSYSS?FSSSC_'_
SSS#>yz<r
S[SSZ3SS
&SSt&SS
%S\S!]u%
SSUSbzhL
Ss,{^VSesBqL
S,{SVSs
SS,{vV
SS,{vVSgsDA,,,,{
Ss,whVSs
Ss,wPVSs
Ss,wR_Ss
Ss,w]_Ss
Ss,wuVSs
#S#SXm
sS```?y
SsYD0SS
+SsYDOSSS
SSY,{\MVSs
SsY,{PVS
SSys9E6
SSYSA}}]
SSY,{V
SsY,{xVSgso
{&SSzVSS
}'SuMuS
suS/!K}v
}SuSMS}S
SUSSxSSS
_S_v[_B_
SVDFI	
SVG<SsB^ql0qduvSMs0q|SSSR
SVKSSsY
S,{~VS
S,{[VSes
,{sVSgs
,{sVSs
S,{^VSs
S,{~VSs
S,{|VSs
S,{[VSs
S/,{|VSs
,{SVSsB
#S,{~VSsB
S,{<~VSsBqH
S,{<~VSsBqL
S,{|VSsE
sVSsED
,{SVSsr
#,{SVSsrP=}W
SVSSSSSs
SVSSufSS
S,{,^VSsY,{F
S,{vVSsD
_SVWSSsY,6{CVSs0rtY$,,SSSS
SVWySSsY,{CV
s^wCRM
sw<Ss#r~ysSS
sw<Ss#r&ySSS
Sw,SSSBq
SWSSSsSS
s,{wVSsrP=#r
S,{XV3SsrP}c
S_Y_)_B_
sY,{FVSs
s[YSsYEH__SsbbT,,f,Y,{
sY,{\VSs
S,{{YVSs
S,{~yVSsBq\
S,{~yVSsBqT
S,{~YVSsBqT
S,{~yVSsBrJl,
S,{}yVSsBr}l,
SY,{VVSs
S{@]zDZR
SZSSSsSS
t0qLSS
t0qlSSSS
t0q|SSSS
,t,,,0rjA$,,
%T20S"
&t4$J(
T5YPT}[5I
T/#.aC
TB>2{m&
TBq|)0qLSSSS
t@c.9aMWP)k(
T-C#r4SSS
Td~S,xNc
!This program cannot be run in DOS mode.
TlBaTD7,J,,
tL,,Y,{p
t|o]T.MHoc>#
T+>oYq6MA}n	O
TqSSSPSS
T-[#r6SSS
Ts}{ECP?Ss
Ts}{oECPSs
/"T/$/|/SS
t_SsBC
t&SS\&SS
T_SSS[SS
 tU$	:
,{TVSsOrP}_
,{tVSsrP=}g
            type="win32" 
    type="win32" 
u0}1EeuQ}}
U0qtlSSSS
u1Eeu!UeTuQSS#S1u4}a%u}eu1
U1u}9%e}e4uA%5%
u4}y%EU%ue
u=55eue]M
u5!]u%
U%5}U5u
u}9Ue}
!u>a#)
UAno5l.
uAQU%ueuS*SwA%}u
uAU%ue
uAU%ueuS]
UbzP,,,
u]}Cgq%
udMS>S
]UDzh+N/|Z\"y~K
	?U?e?
%uE%%5
}u"eA%5%S}
}u"eau}
Ueaue%
'ueeSS
'uee_SS3
'ueeSSS
'uee_SSSS'
Ue'MVUE%%'
}u"eqE
}}UeQee
}UeQee%
%u}eu1EeUu!UeuQSSCE
ueU]E%
ueu}u9UeU}uQS5
ue%}uyE
){UfiX+~
%%}u%}g6au%5}E
%%}u%}g6yM]u
u]}gaU%5j}U5u
U|}J?c@Z
uJSS5S
uJSSoS
u}!]}KE%%QSSYS-A}}]Quu
%%}uM}
UM^=-(
}}=U=MM
}'uMMuSSSWSSS
%%}uM}Q6SSQ
uMqMQS0S
uMSSCpS
}uM}SSi
uMSSnS
'}uM}SSS
'uM%uSSSQ]]avU%U5ueu%A}SSS
'uMuSSSW
UN#SSS<\
UNsSSS<\
UO9:@fFQ2UioJ
.}UoM drGOG
/U/>/P(/SSSUSS?fSSSm_
!uPZ<x
uqMQSS	
uQSS4S1u0}a%
uQSS{s
u]}SE%%1Ee}u6
user32.dll
USS#>{
uS*SA%}uv
uSS%eu
u%SSQq
,{U_S'srP#r
USSS9E%
U}SSSS
%%'%u}SSweUEe'UE
%u}!]u%
u&%}=u
uu55EE
uu5U5EE
U%ueuQSSs
u%}=un
u}!]u%QSU
uuS6se
uUt}u1EeuQS
uUu1Eeu
uUu9SS3s
uU}u9uHee
uU}uA%I
uU}uAU
u]uU}c
uU}uRyE
uUuSpS
uU}USS
uUuSS4S
'uU}USSS
uUuSSy
u]uUt}c
UuU}ua}}u"MQSSbs9
uU}uyEK
uU}uy%J%eEue]
uVSS[fSS
U%%%&}W
\<"uwk
uyM*SKP
uy_(YquB	|F"9QfuN/
/Uz/P/`/|/w,/s/
v1f"\q0Cs)
,{|V3Ss
,{_V3Ss
,{\V3Ss
V3Ss#>q4rP
v5vv0JqFS
Va|6U6U'h{qYAFR1`
    version="1.0.0.0" 
            version="6.0.0.0" 
VfSSxfSS
VG<SsBqLy
vH0qlSSSS
VirtualAlloc
VirtualFree
VirtualProtect
VKSSsmY
V/L]oyJ
VL,,YD?
V-MB~1Qq	+
VmZmVnJJ
vQQf=5
,{\VSgs
<,,,{\!VSs
,{|VSs
,{_VSs
,{[VSs
,{\VSs
,{\VS's
;,{|[VSs
VSs0q|SS
,{\VSs0r<T
VSs0ryl
,{\VSs0s<KSSsSSSS
VSs5Brm,
~VSsBq`
,{~VSsBq<|
VSsBq|
VSsBqD
,{~VSsBq<H
VSsBql
~VSsBqL
,{~VSsBq<L
{~VSsBqLy
-vSsBqt
{~VSsBqxy
{~VSsBqXy
{~VSsBq|y
~VSsBrA
VSsBrbl,
VSsBrJL,d,
VSsBrMl,
{~VSsBrMyL,,
VSsBrn,,f,
VSsBrt
~VSsBrT
VSsBrVl,d,
,{~VSsBr<Z,,,
VSsbyd
,{|VSsE
,{\VSsE
VSsERSSS
VSsES:ASx,{vVSs
,{\VSsES?RSS
,{\VSsO
vSsoBa
,{{VSsOrP}s^S
VSso;SCR
VSsrP}7
VSsrP}gb
VSsrP}IEm{vSsbbMl
VSsrP}o
VSsrP#r
VSsrP#rXjSSSbbRL,f,YbzrL,,
,{{VSsrP=}s^S
V[SSsY,{lYVSs0r|l
{^VSsY,{|FVSsi
vTC-pc!
,{VV3Ss5BqrE
,{VV3SsY
,{vVSs
,{VVSs
VVSs5BqR
{VVSs5Br|},,,EY$S
,{VVSsB
,{VVSsBq<d
,{vVSsBq,f
,VWSSsMY,{xVSs
,V,WSSsY,{x
vX_O8TM{	UPN$jf'
v}\%y7&h5$RYqr#[
```w````````
_}w*\|
'\W3Rj
+$+]W9eA9W?y
W9E%u%
W9zE%u%=
/w/'/A/(
WaitForSingleObject
w,bR[<
{WBrSlx5loZ\,EdwjlDMJ
,wb_Ss,w<e_Ss,wE_
wC<uw{
WE%Wq!
::W/fMx
winspool.drv
w	KI-e(
,wm_Ss,w<M_Ss,w}_
WNSa`WyESE
$w:?^P
WPQVRSj
}Wq%EU%
W=_'_SS
W_SsBrMl
w&SSc&SS
{W<Ss#r<
WSSSbzt,
W&SSSSSS
)wSSSSSSS
WSSsY,{C
WSSsY,{x
w}SSw}SS3y
,wTVSs,w,tVSs,wDV
,{WVSs
,{wVSsB
,w@VSs,w<`VSsSSSS
W[Wf*8*R
,wXVSs,w,xVSs,wHV
?w-?Z?v?>?_.?@?X?
&<XABal
[,XBqL
xbrT<,,Y
>XBylESR
XByXEy
.xd({|].RNE
xfSSSSSS
x*HC>WZ*V&m
Xl,,bzWl
xl,,Y,{y
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
#>X#>q<
X=qL5L
x&SSP&SS
XSSSX_8_
XST+~B)q
XSW	~:
]xUBZ+.
,{xVSs
,{xVSsBr<D$,,
XVSSdfSS
XwSRSS}K
xYDHP,,
xYD\SSS
XZ*lsg
``````?y
,,#>Y{
,,Y,{|
Y0qLSSSS
,,Y,0{\VSs0rTy
;y 1p >P
Y1zOEa[nT	Kt>0
y8\B{OSSs
/~Y/9/i/
y%a}e}cE
y[am	0rx,,,LSSSSbrx,
\Y,{AVSs
YbaCY,{M
YbaxYD6S
YbbE,,,Y
YbbJ|,,Y
,,YbbT
YbbYl,,Y
yb!NVYXYqr#F\
y{BryD
,,Y,{bVS
Y,{bVSs
y$`By|
Y$[By|
,,,Ybyp
YbzU<,,
ycABz_
yc#b&SS#SERSSS
YCBy$d
Y$CByH
yCByLIEA6Ss
Y#>cl,Ss
yC#>qC
yC#>sI
Y,{CVSsr
<,,YD.
,,,YD1|,
,,YD+3
,,YD3iSSS
,,YD40,
,,Y,{DAVSs
YDB3SS
,,,YD[CS
,,YDGWSS?
yDLByl
,,YDL]SS
,,YDnBSSS
,YDOSSS
,,YD[QSS?
,,YDrb_SS
,,YD!RSS
YD&#S9S
|YD^#SS
YD	;SS
,YDTOSS
,,YDY3SS?
,,Y,{DzVSs
,,,YE{
,,YE3[SS?E,,SS
?YeASSSS
_Y_E_bN_
%y%E%EE}EUeE
yEeuy%1E
YE^QSs
,YESsSSb~bE|,,Y
,,YE@vSs
,YE^vSs,6{jVSsEnv~SsbzT
,YEXkSs
yFESKSSbvqpYDJ#SS
:y!FjV
#+]yfS9s
Y,{FVSs
yGU/c-!I_o.>_
,,Y,{GVS
,Y,{GVSs
,,Y,{GVS%sBr|l,,
yHByPE
yH#r.SS'S
Y[IBy@
YI;Ec3O#^!ybN
~y[)jo*`;
,,Y,{JVS
Y,{JVSsr
yKK5E;]q6eOn=
|Y,{kVSs
|Y,{KVSs
Y,{kVSsr
yl5BfyQW
yLbr\,,,L
y$lByD
y$lByL
ylBzbJL
yLl5ByQY
Y,{LVSsB
,Y,{MVSsK
y(NByn
^YNh%4.
,,Y,{NVS
|Y,{NVSs
,,Y,{NVS's
,Y,{NVSs
Y,{NVSs
,Y,{NVSsO
yNYBYcDF
Y$oByD
YoByDI
YoBy$l
YoBz$n
Y,{OVSs
Y,{oVSsr
ypIByn0qPSS'SS0qNSSS
yQ&7Qo)Vq?
yqaYSSSS
y}qHX[F|SU
,Y,{Q_Ss
YqSSaSsS
,,Y,{QVS
|Y,{QVSs
,,,Y,{s_
yS[Bzp
,{Y_Ss
{[YSs#
,{y_SsO
{y_SsrP}{s0q,S
,Y,{s_Ss
Y&SS)&SS
y~SSSSSS
YSsY,{i_sSsBqf
Y,{sVSs<
Y,{sVSs0
y%uu5E%uju!
yUy99II	U
yuz4}cR\
,{yVSs
`Y,{\VSs
|Y,{\VSs
,{YVSs
Y,{|VSs
Y,{_VSs
Y,{|VSs0
,,Y,{_VS's#>cl,Ss
,,Y,{|VS'sEPvSsbb
,Y,{|VSsO
Y,{@VSsr
,Y,{VVSs
YwtP(p<\
:y!W(W
yXBYs	
Y,{xVSs
Y,{xVSsr
y,,,Y,{[
yy99IUI	U
yYB5_J.aQ({Uf
,Y,{yVSs
Y,{\YVSs
Y^Z_[X
Yzz3!R^VQVpb
#&z|$,,
z0%0TaWDvZ
z0EL,,BzeL
z0yl,,
z0Z,,,
z2COVC|g%>
<z%3A"
z_a\,,Bz{\,
z@a,,,#rNSS
zb,,,By[aM
zBl,,BY c
zbL,,ByKA
zBPOP%&0
zDa,,,
/:]zDagU3N4$p
zDA$,,m?
>zdl,,
ze	l,,
;>zF@"H
>{&z=fNU\:OH
zfSSiVSS
_Z~g.K8
zH,,,0
zhY,,,R
zJ,,,B
zJ,,&,BzR,,,0
zJ,,F,
 zJl,,
zjL,d,
z<{l,,
z ]l,,Bz]l
z[l,f,
zL[l,,
zL,,SSSS
#>zM,,,
zML,&,B[
zml,D,
Z|Mvp'EU
zn,,F,
#>zNL,,
zO*O~OPO
ZQh=|Y
zR,,,0r"d,,,S#>r"
,,{z_Ss
Z&SSj&SS
Z&SSm&SS
ZSSS[Bqd
z_SSSSSS
zt$,,Br!zd$,,
zt<,D,
Z?T?G?
z`tL,,
zt,,,LB[0qlSSS
zty$,,0rzd$
zTzl,,
$.Zuq%YmU
_z_v_&_
,{zVSs
,"{ZVSsbrHyl,,Y
,"{ZVSsbrTy
zWa\,,
z?WCQ!
zxl,,B
[Z^YX_
zZ,,,brza,,,Y
ZZISSS
zzl,d,