Analysis Date2018-02-22 13:12:07
MD5cc6ff9ca345b47a1a35aa4e62c02ae17
SHA1191e35523095e04a7fedaf4c7c1faa59e6b04b23

Static Details:

File typeHTML document, ASCII text, with very long lines
PEhash

Runtime Details:

Screenshot

Process
↳ C:\Windows\System32\lsass.exe

Process
↳ C:\Program Files\Internet Explorer\iexplore.exe

Creates FileC:\Windows\Globalization\Sorting\sortdefault.nls
Creates FileC:\Windows\System32\oleaccrc.dll
Creates FileC:\Users\THX1138
Creates FileC:\Users\THX1138\AppData\Local
Creates FileC:\Users\THX1138\AppData\Local\Microsoft\Windows\Temporary Internet Files
Creates FileC:\Users\THX1138
Creates FileC:\Users\THX1138\AppData\Roaming
Creates FileC:\Users\THX1138\AppData\Roaming\Microsoft\Windows\Cookies
Creates FileC:\Users\THX1138
Creates FileC:\Users\THX1138\AppData\Local
Creates FileC:\Users\THX1138\AppData\Local\Microsoft\Windows\History
Creates FileC:\Users\THX1138\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
Creates FileC:\Users\THX1138\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
Creates FileC:\Users\THX1138\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
Creates File\??\Nsi
Creates FileC:\Users\THX1138
Creates FileC:\Users\THX1138\Favorites
Creates FileC:\Users\THX1138
Creates FileC:\Users\THX1138\AppData\Local
Creates FileC:\Users\THX1138\AppData\Local\Microsoft\Windows\Temporary Internet Files
Creates FileC:\Users\THX1138\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\
Creates FileC:\Users\THX1138\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\
Creates FileC:\Users\THX1138\AppData\Local\Microsoft\Windows\Temporary Internet Files\
Creates FileC:\Users\THX1138\AppData\Local\Microsoft\Windows\Temporary Internet Files\
Creates FileC:\Users\THX1138\AppData\Local\Microsoft\Windows\
Creates FileC:\Users\THX1138\AppData\Local\Microsoft\Windows\
Creates FileC:\Users\THX1138\AppData\Local\Microsoft\
Creates FileC:\Users\THX1138\AppData\Local\Microsoft\
Creates FileC:\Users\THX1138\AppData\Local\
Creates FileC:\Users\THX1138\AppData\Local\
Creates FileC:\Users\THX1138\AppData\
Creates FileC:\Users\THX1138\AppData\
Creates FileC:\Users\THX1138\
Creates FileC:\Users\THX1138\
Creates FileC:\Users\
Creates FileC:\Users\
Creates File\??\MountPointManager
Creates FileC:\Users\THX1138\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low
Creates FileC:\Users\THX1138
Creates FileC:\Users\THX1138\AppData\Roaming
Creates FileC:\Users\THX1138\AppData\Roaming\Microsoft\Windows\Cookies
Creates FileC:\Users\THX1138\AppData\Roaming\Microsoft\Windows\Cookies\Low\
Creates FileC:\Users\THX1138\AppData\Roaming\Microsoft\Windows\Cookies\Low\
Creates FileC:\Users\THX1138\AppData\Roaming\Microsoft\Windows\Cookies\
Creates FileC:\Users\THX1138\AppData\Roaming\Microsoft\Windows\Cookies\
Creates FileC:\Users\THX1138\AppData\Roaming\Microsoft\Windows\
Creates FileC:\Users\THX1138\AppData\Roaming\Microsoft\Windows\
Creates FileC:\Users\THX1138\AppData\Roaming\Microsoft\
Creates FileC:\Users\THX1138\AppData\Roaming\Microsoft\
Creates FileC:\Users\THX1138\AppData\Roaming\
Creates FileC:\Users\THX1138\AppData\Roaming\
Creates FileC:\Users\THX1138\AppData\
Creates FileC:\Users\THX1138\AppData\
Creates FileC:\Users\THX1138\
Creates FileC:\Users\THX1138\
Creates FileC:\Users\
Creates FileC:\Users\
Creates File\??\MountPointManager
Creates FileC:\Users\THX1138\AppData\Roaming\Microsoft\Windows\Cookies\Low
Creates FileC:\Users\THX1138
Creates FileC:\Users\THX1138\AppData\Local
Creates FileC:\Users\THX1138\AppData\Local\Microsoft\Windows\History
Creates FileC:\Users\THX1138\AppData\Local\Microsoft\Windows\History\Low\
Creates FileC:\Users\THX1138\AppData\Local\Microsoft\Windows\History\Low\
Creates FileC:\Users\THX1138\AppData\Local\Microsoft\Windows\History\
Creates FileC:\Users\THX1138\AppData\Local\Microsoft\Windows\History\
Creates FileC:\Users\THX1138\AppData\Local\Microsoft\Windows\
Creates FileC:\Users\THX1138\AppData\Local\Microsoft\Windows\
Creates FileC:\Users\THX1138\AppData\Local\Microsoft\
Creates FileC:\Users\THX1138\AppData\Local\Microsoft\
Creates FileC:\Users\THX1138\AppData\Local\
Creates FileC:\Users\THX1138\AppData\Local\
Creates FileC:\Users\THX1138\AppData\
Creates FileC:\Users\THX1138\AppData\
Creates FileC:\Users\THX1138\
Creates FileC:\Users\THX1138\
Creates FileC:\Users\
Creates FileC:\Users\
Creates File\??\MountPointManager
Creates FileC:\Users\THX1138\AppData\Local\Microsoft\Windows\History\Low
Creates FileC:\Users\THX1138
Creates FileC:\Users\THX1138\Favorites
Creates FileC:\Users\THX1138\Favorites\
Creates FileC:\Users\THX1138\Favorites\
Creates FileC:\Users\THX1138\
Creates FileC:\Users\THX1138\
Creates FileC:\Users\
Creates FileC:\Users\
Creates File\??\MountPointManager
Creates FileC:\Users\THX1138\Favorites
Creates FileC:\Users\THX1138
Creates FileC:\Users\THX1138\AppData\Local
Creates FileC:\Users\THX1138\AppData\Local\Microsoft\Windows\Temporary Internet Files
Creates FileC:\Users\THX1138\AppData\Local\Microsoft\Windows\Temporary Internet Files\Virtualized\
Creates FileC:\Users\THX1138\AppData\Local\Microsoft\Windows\Temporary Internet Files\Virtualized\
Creates FileC:\Users\THX1138\AppData\Local\Microsoft\Windows\Temporary Internet Files\
Creates FileC:\Users\THX1138\AppData\Local\Microsoft\Windows\Temporary Internet Files\
Creates FileC:\Users\THX1138\AppData\Local\Microsoft\Windows\
Creates FileC:\Users\THX1138\AppData\Local\Microsoft\Windows\
Creates FileC:\Users\THX1138\AppData\Local\Microsoft\
Creates FileC:\Users\THX1138\AppData\Local\Microsoft\
Creates FileC:\Users\THX1138\AppData\Local\
Creates FileC:\Users\THX1138\AppData\Local\
Creates FileC:\Users\THX1138\AppData\
Creates FileC:\Users\THX1138\AppData\
Creates FileC:\Users\THX1138\
Creates FileC:\Users\THX1138\
Creates FileC:\Users\
Creates FileC:\Users\
Creates File\??\MountPointManager
Creates FileC:\Users\THX1138\AppData\Local\Microsoft\Windows\Temporary Internet Files\Virtualized
Creates FileC:\Users\THX1138\AppData\Roaming\Microsoft\Windows\PrivacIE
Creates FileC:\Users\THX1138\AppData\Roaming\Microsoft\Windows\PrivacIE\Low\
Creates FileC:\Users\THX1138\AppData\Roaming\Microsoft\Windows\PrivacIE\Low\
Creates FileC:\Users\THX1138\AppData\Roaming\Microsoft\Windows\PrivacIE\
Creates FileC:\Users\THX1138\AppData\Roaming\Microsoft\Windows\PrivacIE\
Creates FileC:\Users\THX1138\AppData\Roaming\Microsoft\Windows\
Creates FileC:\Users\THX1138\AppData\Roaming\Microsoft\Windows\
Creates FileC:\Users\THX1138\AppData\Roaming\Microsoft\
Creates FileC:\Users\THX1138\AppData\Roaming\Microsoft\
Creates FileC:\Users\THX1138\AppData\Roaming\
Creates FileC:\Users\THX1138\AppData\Roaming\
Creates FileC:\Users\THX1138\AppData\
Creates FileC:\Users\THX1138\AppData\
Creates FileC:\Users\THX1138\
Creates FileC:\Users\THX1138\
Creates FileC:\Users\
Creates FileC:\Users\
Creates File\??\MountPointManager
Creates FileC:\Users\THX1138\AppData\Roaming\Microsoft\Windows\PrivacIE\Low
Creates FileC:\Users\THX1138\AppData\Roaming\Microsoft\Windows\IECompatCache
Creates FileC:\Users\THX1138\AppData\Roaming\Microsoft\Windows\IECompatCache\Low\
Creates FileC:\Users\THX1138\AppData\Roaming\Microsoft\Windows\IECompatCache\Low\
Creates FileC:\Users\THX1138\AppData\Roaming\Microsoft\Windows\IECompatCache\
Creates FileC:\Users\THX1138\AppData\Roaming\Microsoft\Windows\IECompatCache\
Creates FileC:\Users\THX1138\AppData\Roaming\Microsoft\Windows\
Creates FileC:\Users\THX1138\AppData\Roaming\Microsoft\Windows\
Creates FileC:\Users\THX1138\AppData\Roaming\Microsoft\
Creates FileC:\Users\THX1138\AppData\Roaming\Microsoft\
Creates FileC:\Users\THX1138\AppData\Roaming\
Creates FileC:\Users\THX1138\AppData\Roaming\
Creates FileC:\Users\THX1138\AppData\
Creates FileC:\Users\THX1138\AppData\
Creates FileC:\Users\THX1138\
Creates FileC:\Users\THX1138\
Creates FileC:\Users\
Creates FileC:\Users\
Creates File\??\MountPointManager
Creates FileC:\Users\THX1138\AppData\Roaming\Microsoft\Windows\IECompatCache\Low
Creates FileC:\Users\THX1138\AppData\Roaming\Microsoft\Windows\IETldCache
Creates FileC:\Users\THX1138\AppData\Roaming\Microsoft\Windows\IETldCache\Low\
Creates FileC:\Users\THX1138\AppData\Roaming\Microsoft\Windows\IETldCache\Low\
Creates FileC:\Users\THX1138\AppData\Roaming\Microsoft\Windows\IETldCache\
Creates FileC:\Users\THX1138\AppData\Roaming\Microsoft\Windows\IETldCache\
Creates FileC:\Users\THX1138\AppData\Roaming\Microsoft\Windows\
Creates FileC:\Users\THX1138\AppData\Roaming\Microsoft\Windows\
Creates FileC:\Users\THX1138\AppData\Roaming\Microsoft\
Creates FileC:\Users\THX1138\AppData\Roaming\Microsoft\
Creates FileC:\Users\THX1138\AppData\Roaming\
Creates FileC:\Users\THX1138\AppData\Roaming\
Creates FileC:\Users\THX1138\AppData\
Creates FileC:\Users\THX1138\AppData\
Creates FileC:\Users\THX1138\
Creates FileC:\Users\THX1138\
Creates FileC:\Users\
Creates FileC:\Users\
Creates File\??\MountPointManager
Creates FileC:\Users\THX1138\AppData\Roaming\Microsoft\Windows\IETldCache\Low
Creates FileC:\Users\THX1138\AppData\Local\Temp\Low\
Creates FileC:\Users\THX1138\AppData\Local\Temp\Low\
Creates FileC:\Users\THX1138\AppData\Local\Temp\
Creates FileC:\Users\THX1138\AppData\Local\Temp\
Creates FileC:\Users\THX1138\AppData\Local\
Creates FileC:\Users\THX1138\AppData\Local\
Creates FileC:\Users\THX1138\AppData\
Creates FileC:\Users\THX1138\AppData\
Creates FileC:\Users\THX1138\
Creates FileC:\Users\THX1138\
Creates FileC:\Users\
Creates FileC:\Users\
Creates File\??\MountPointManager
Creates FileC:\Users\THX1138\AppData\Local\Temp\Low
Creates File\Device\Afd\Endpoint
Creates File\Device\Afd\Endpoint
Creates File\Device\RasAcd
Creates File\Device\Afd\Endpoint
Creates FileC:\Users\THX1138
Creates FileC:\Users\THX1138\Favorites
Creates FileC:\Windows\Fonts\staticcache.dat
Creates File\??\MountPointManager
Creates FileC:\
Creates FileC:\Users\THX1138\AppData\Local\Microsoft\Windows\Caches
Creates FileC:\Users\THX1138\AppData\Local\Microsoft\Windows\Caches\cversions.1.db
Creates FileC:\Users\THX1138\AppData\Local\Microsoft\Windows\Caches\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000004.db
Creates FileC:\Users\desktop.ini
Creates FileC:\Users
Creates FileC:\Users\THX1138
Creates FileC:\Users\THX1138\AppData
Creates FileC:\Users\THX1138\AppData\Local
Creates FileC:\Users\THX1138\AppData\Local\Temp
Creates FileC:\Windows\System32\url.dll
Creates FileC:\Windows\System32\en-US\urlmon.dll.mui
Creates FileC:\Users\THX1138\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{3925858C-1740-11E8-87C6-5254002F1B97}.dat
Creates FileC:\Users\THX1138\AppData\Local\Temp\~DF73441A2303CACDAE.TMP
Creates FileC:\Windows\System32\ieframe.dll
Creates FileC:\Windows\System32\stdole2.tlb
Creates File\??\MountPointManager
Creates FileC:\
Creates FileC:\Users
Creates FileC:\Users\THX1138
Creates FileC:\Users\THX1138\Favorites\desktop.ini
Creates FileC:\Users\THX1138\Desktop\desktop.ini
Creates FileC:\Users\THX1138\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{3925858D-1740-11E8-87C6-5254002F1B97}.dat
Creates FileC:\Users\THX1138\AppData\Local\Temp\~DF4FEABEA284CC272B.TMP
Creates File\??\MountPointManager
Creates FileC:\
Creates FileC:\Users
Creates FileC:\Users\THX1138
Creates FileC:\Users\THX1138\Favorites
Creates FileC:\Users\THX1138\Favorites\Links
Creates FileC:\Users\THX1138\Favorites\Links
Creates FileC:\Users\THX1138\Favorites
Creates FileC:\Users\THX1138\AppData\Local\Microsoft\Internet Explorer\frameiconcache.dat
Creates FileC:\Users\THX1138\Favorites\Links
Creates FileC:\Users\THX1138
Creates FileC:\Users\THX1138\Favorites
Creates FileC:\Users\THX1138\AppData\Local\Microsoft\Feeds
Creates FileC:\Users\THX1138\AppData\Local\Microsoft\Feeds\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\WebSlices~
Creates File\??\MountPointManager
Creates File\Device\Afd\Endpoint
Creates File\??\MountPointManager
Creates File\??\MountPointManager
Creates File\??\MountPointManager
Creates File\??\MountPointManager
Creates File\??\MountPointManager
Creates File\??\MountPointManager
Creates File\??\MountPointManager
Creates File\??\MountPointManager
Creates File\??\MountPointManager
Creates File\??\MountPointManager
Creates File\Device\Afd\Endpoint
Creates File\Device\Afd\Endpoint
Creates File\Device\RasAcd
Creates File\Device\Afd\Endpoint
Creates File\Device\Afd\Endpoint
Creates File\Device\Afd\AsyncConnectHlp
Creates FileC:\Users\THX1138\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RVX995HY\favicon[1].ico
Creates FileC:\Users\THX1138\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RVX995HY\favicon[1].ico
Creates FileC:\Users\THX1138\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RVX995HY\favicon[1].ico
Creates FileC:\Users\THX1138\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico
Creates FileC:\Users\THX1138\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico
Creates FileC:\Users\THX1138\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico
Creates FileC:\Users\THX1138\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico
Creates FileC:\Users\THX1138\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico
Creates FileC:\Users\THX1138\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico
Creates FileC:\Users\THX1138\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico
Creates FileC:\Users\THX1138\Favorites
Creates FileC:\Users\THX1138\Favorites\Links
Creates FileC:\Users\THX1138\Favorites\Links\Suggested Sites.url
Creates FileC:\Users\THX1138\Favorites\Links\Web Slice Gallery.url
Creates FileC:\Users\THX1138\Favorites\Links
Creates FileC:\Users\THX1138\AppData\Local\Microsoft\Feeds Cache\index.dat
Creates FileC:\Users\THX1138\AppData\Local\Microsoft\Feeds\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\WebSlices~\Suggested Sites~.feed-ms
Creates FileC:\Users\THX1138\AppData\Local\Microsoft\Feeds\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\WebSlices~\Suggested Sites~.feed-ms
Creates FileC:\Users\THX1138\AppData\Local\Temp\~DF31889EACAAFEF36F.TMP
Creates FileC:\Users\THX1138\AppData\Local\Temp\~DF090DF5317ECA6289.TMP
Creates FileC:\Users\THX1138\AppData\Local\Microsoft\Feeds\FeedsStore.feedsdb-ms
Creates FileC:\Users\THX1138\AppData\Local\Temp\~DFCAB8AEDE37277388.TMP
Creates FileC:\Users\THX1138\AppData\Local\Temp\~DF3888B6F5485CF7F7.TMP
Creates FileC:\Users\THX1138\AppData\Local\Microsoft\Feeds\FeedsStore.feedsdb-ms
Creates FileC:\Users\THX1138\Favorites\Links
Creates FileC:\Users\THX1138\AppData\Local\Microsoft\Feeds\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\WebSlices~\Web Slice Gallery~.feed-ms
Creates FileC:\Users\THX1138\AppData\Local\Microsoft\Feeds\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\WebSlices~\Web Slice Gallery~.feed-ms
Creates FileC:\Users\THX1138\AppData\Local\Temp\~DF42A3AFBDB856F919.TMP
Creates FileC:\Users\THX1138\AppData\Local\Temp\~DFBACC8623D3A24C3A.TMP

Process
↳ C:\Program Files\Internet Explorer\iexplore.exe

Creates FileC:\Windows\Globalization\Sorting\sortdefault.nls
Creates FileC:\Windows\System32\oleaccrc.dll
Creates File\??\MountPointManager
Creates FileC:\
Creates FileC:\Users\THX1138\AppData\Local\Microsoft\Windows\Caches
Creates FileC:\Users\THX1138\AppData\Local\Microsoft\Windows\Caches\cversions.1.db
Creates FileC:\Users\THX1138\AppData\Local\Microsoft\Windows\Caches\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000004.db
Creates FileC:\Users\desktop.ini
Creates FileC:\Users
Creates FileC:\Users\THX1138
Creates FileC:\Windows\System32\rsaenh.dll
Creates FileC:\Users\THX1138\Favorites\desktop.ini
Creates File\??\MountPointManager
Creates File\??\MountPointManager
Creates File\??\MountPointManager
Creates File\??\MountPointManager
Creates File\??\MountPointManager
Creates File\??\MountPointManager
Creates File\??\MountPointManager
Creates File\??\MountPointManager
Creates File\??\MountPointManager
Creates File\??\MountPointManager
Creates File\??\MountPointManager
Creates FileC:\Users\THX1138\Desktop\desktop.ini
Creates FileC:\Users\THX1138
Creates FileC:\Users\THX1138\AppData\Local
Creates FileC:\Users\THX1138\AppData\Local\Microsoft\Windows\Temporary Internet Files
Creates FileC:\Users\THX1138
Creates FileC:\Users\THX1138\AppData\Roaming
Creates FileC:\Users\THX1138\AppData\Roaming\Microsoft\Windows\Cookies
Creates FileC:\Users\THX1138
Creates FileC:\Users\THX1138\AppData\Local
Creates FileC:\Users\THX1138\AppData\Local\Microsoft\Windows\History
Creates FileC:\Users\THX1138\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
Creates FileC:\Users\THX1138\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
Creates FileC:\Users\THX1138\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
Creates FileC:\Windows\Fonts\staticcache.dat
Creates FileC:\Users\THX1138\AppData\Local\Microsoft\Feeds Cache\index.dat
Creates FileC:\Windows\System32\en-US\urlmon.dll.mui
Creates FileC:\Users\THX1138\AppData\Local\Temp\191e35523095e04a7fedaf4c7c1faa59e6b04b23.html
Creates FileC:\Users\THX1138\AppData\Local\Temp\191e35523095e04a7fedaf4c7c1faa59e6b04b23.html
Creates FileC:\Users\THX1138\AppData\Local\Temp\191e35523095e04a7fedaf4c7c1faa59e6b04b23.html
Creates FileC:\
Creates FileC:\Users
Creates FileC:\Users\THX1138
Creates FileC:\Users\THX1138\AppData
Creates FileC:\Users\THX1138\AppData\Local
Creates FileC:\Users\THX1138\AppData\Local\Temp
Creates FileC:\Users\THX1138\AppData\Local\Temp\191e35523095e04a7fedaf4c7c1faa59e6b04b23.html
Creates FileC:\Users\THX1138\AppData\Local\Temp\191e35523095e04a7fedaf4c7c1faa59e6b04b23.html

Network Details:


Raw Pcap
0x00000000 (00000)   47455420 2f6e6373 692e7478 74204854   GET /ncsi.txt HT
0x00000010 (00016)   54502f31 2e310d0a 436f6e6e 65637469   TP/1.1..Connecti
0x00000020 (00032)   6f6e3a20 436c6f73 650d0a55 7365722d   on: Close..User-
0x00000030 (00048)   4167656e 743a204d 6963726f 736f6674   Agent: Microsoft
0x00000040 (00064)   204e4353 490d0a48 6f73743a 20777777    NCSI..Host: www
0x00000050 (00080)   2e6d7366 746e6373 692e636f 6d0d0a0d   .msftncsi.com...
0x00000060 (00096)   0a                                    .

0x00000000 (00000)   47455420 2f6e6373 692e7478 74204854   GET /ncsi.txt HT
0x00000010 (00016)   54502f31 2e310d0a 436f6e6e 65637469   TP/1.1..Connecti
0x00000020 (00032)   6f6e3a20 436c6f73 650d0a55 7365722d   on: Close..User-
0x00000030 (00048)   4167656e 743a204d 6963726f 736f6674   Agent: Microsoft
0x00000040 (00064)   204e4353 490d0a48 6f73743a 20777777    NCSI..Host: www
0x00000050 (00080)   2e6d7366 746e6373 692e636f 6d0d0a0d   .msftncsi.com...
0x00000060 (00096)   0a                                    .

0x00000000 (00000)   47455420 2f6e6373 692e7478 74204854   GET /ncsi.txt HT
0x00000010 (00016)   54502f31 2e310d0a 436f6e6e 65637469   TP/1.1..Connecti
0x00000020 (00032)   6f6e3a20 436c6f73 650d0a55 7365722d   on: Close..User-
0x00000030 (00048)   4167656e 743a204d 6963726f 736f6674   Agent: Microsoft
0x00000040 (00064)   204e4353 490d0a48 6f73743a 20777777    NCSI..Host: www
0x00000050 (00080)   2e6d7366 746e6373 692e636f 6d0d0a0d   .msftncsi.com...
0x00000060 (00096)   0a                                    .

0x00000000 (00000)   47455420 2f6e6373 692e7478 74204854   GET /ncsi.txt HT
0x00000010 (00016)   54502f31 2e310d0a 436f6e6e 65637469   TP/1.1..Connecti
0x00000020 (00032)   6f6e3a20 436c6f73 650d0a55 7365722d   on: Close..User-
0x00000030 (00048)   4167656e 743a204d 6963726f 736f6674   Agent: Microsoft
0x00000040 (00064)   204e4353 490d0a48 6f73743a 20777777    NCSI..Host: www
0x00000050 (00080)   2e6d7366 746e6373 692e636f 6d0d0a0d   .msftncsi.com...
0x00000060 (00096)   0a                                    .

0x00000000 (00000)   47455420 2f666176 69636f6e 2e69636f   GET /favicon.ico
0x00000010 (00016)   20485454 502f312e 310d0a41 63636570    HTTP/1.1..Accep
0x00000020 (00032)   743a202a 2f2a0d0a 55412d43 50553a20   t: */*..UA-CPU: 
0x00000030 (00048)   414d4436 340d0a41 63636570 742d456e   AMD64..Accept-En
0x00000040 (00064)   636f6469 6e673a20 677a6970 2c206465   coding: gzip, de
0x00000050 (00080)   666c6174 650d0a55 7365722d 4167656e   flate..User-Agen
0x00000060 (00096)   743a204d 6f7a696c 6c612f34 2e302028   t: Mozilla/4.0 (
0x00000070 (00112)   636f6d70 61746962 6c653b20 4d534945   compatible; MSIE
0x00000080 (00128)   20382e30 3b205769 6e646f77 73204e54    8.0; Windows NT
0x00000090 (00144)   20362e31 3b205769 6e36343b 20783634    6.1; Win64; x64
0x000000a0 (00160)   3b205472 6964656e 742f342e 303b202e   ; Trident/4.0; .
0x000000b0 (00176)   4e455420 434c5220 322e302e 35303732   NET CLR 2.0.5072
0x000000c0 (00192)   373b2053 4c434332 3b202e4e 45542043   7; SLCC2; .NET C
0x000000d0 (00208)   4c522033 2e352e33 30373239 3b202e4e   LR 3.5.30729; .N
0x000000e0 (00224)   45542043 4c522033 2e302e33 30373239   ET CLR 3.0.30729
0x000000f0 (00240)   3b204d65 64696120 43656e74 65722050   ; Media Center P
0x00000100 (00256)   4320362e 303b202e 4e455434 2e30433b   C 6.0; .NET4.0C;
0x00000110 (00272)   202e4e45 54342e30 45290d0a 486f7374    .NET4.0E)..Host
0x00000120 (00288)   3a207777 772e6269 6e672e63 6f6d0d0a   : www.bing.com..
0x00000130 (00304)   436f6e6e 65637469 6f6e3a20 4b656570   Connection: Keep
0x00000140 (00320)   2d416c69 76650d0a 0d0a                -Alive....


Strings