Analysis Date2015-10-30 08:22:50
MD55781ac81f9aa2c263c276abeee7e8520
SHA1219274726f4f667db867140c2a8b5c5af6c892c3

Static Details:

File typePE32 executable for MS Windows (GUI) Intel 80386 32-bit
Section.text md5: 4752acba7fbe16adf6963a2166a420a7 sha1: 315bd92180f6cf59e0032e3964c6748c105b278c size: 646656
Section.rdata md5: d777e0c72fc523a3df69e7380f41f3dc sha1: 6df101cb7b04b6d6959e4af494be5153b65c1256 size: 51712
Section.data md5: b705ee8494af863e86beb5aafcb35507 sha1: 3215ad4dfa5d815311c5df600d78e5b452c385e0 size: 123904
Timestamp2014-02-12 17:27:44
PackerMicrosoft Visual C++ ?.?
PEhashbbd51028b7a72571eae407d9e4e51bfa7e92b2d6
IMPhash01b73d7f418e96beada44bbd4efde716
AVRisingno_virus
AVMcafeeno_virus
AVAvira (antivir)TR/Crypt.ZPACK.Gen2
AVTwisterTrojan.Girtk.BCFJ.cpsn.mg
AVAd-AwareGen:Variant.Symmi.22722
AVAlwil (avast)Kryptik-PLS [Trj]
AVEset (nod32)Win32/Kryptik.BCFJ
AVGrisoft (avg)Win32/Cryptor
AVSymantecDownloader.Upatre!g15
AVFortinetRiskware/Agent
AVBitDefenderGen:Variant.Symmi.22722
AVK7Trojan ( 004cd0081 )
AVMicrosoft Security EssentialsTrojanSpy:Win32/Nivdort.Y
AVMicroWorld (escan)Gen:Variant.Symmi.22722
AVMalwareBytesno_virus
AVAuthentiumW32/Symmi.AH.gen!Eldorado
AVFrisk (f-prot)no_virus
AVIkarusTrojan.Crypt2
AVEmsisoftGen:Variant.Symmi.22722
AVZillya!no_virus
AVKasperskyTrojan.Win32.Generic
AVTrend MicroTSPY_NIVDORT.SMA
AVCAT (quickheal)no_virus
AVVirusBlokAda (vba32)no_virus
AVPadvishno_virus
AVBullGuardGen:Variant.Symmi.22722
AVArcabit (arcavir)Gen:Variant.Symmi.22722
AVClamAVno_virus
AVDr. Webno_virus
AVF-SecureGen:Variant.Symmi.22722
AVCA (E-Trust Ino)no_virus

Runtime Details:

Screenshot

Process
↳ C:\malware.exe

Creates FileC:\Documents and Settings\Administrator\Local Settings\Temp\p16zoswz1l8rjxvzbabkq.exe
Creates FileC:\WINDOWS\system32\srlbkkdd\tst
Creates ProcessC:\Documents and Settings\Administrator\Local Settings\Temp\p16zoswz1l8rjxvzbabkq.exe

Process
↳ C:\Documents and Settings\Administrator\Local Settings\Temp\p16zoswz1l8rjxvzbabkq.exe

RegistryHKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\Superfetch Spooler PNRP Engine Copy Acquisition ➝
C:\WINDOWS\system32\gnejplgjfd.exe
Creates FileC:\WINDOWS\system32\gnejplgjfd.exe
Creates FileC:\WINDOWS\system32\drivers\etc\hosts
Creates FileC:\WINDOWS\system32\srlbkkdd\tst
Creates FileC:\WINDOWS\system32\srlbkkdd\etc
Creates FileC:\WINDOWS\system32\srlbkkdd\lck
Deletes FileC:\WINDOWS\system32\\drivers\etc\hosts
Creates ProcessC:\WINDOWS\system32\gnejplgjfd.exe
Creates ServiceMapper Tunneling Enumerator Resolution - C:\WINDOWS\system32\gnejplgjfd.exe

Process
↳ C:\WINDOWS\system32\svchost.exe

Process
↳ Pid 812

Process
↳ Pid 856

Process
↳ C:\WINDOWS\System32\svchost.exe

Creates FileC:\WINDOWS\system32\WBEM\Logs\wbemess.log

Process
↳ Pid 1212

Process
↳ C:\WINDOWS\system32\spoolsv.exe

RegistryHKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Print\BeepEnabled ➝
NULL
RegistryHKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\System\Print\TypesSupported ➝
7
RegistryHKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Print\Printers\SymbolicLinkValue ➝
NULL
RegistryHKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Print\Printers\DefaultSpoolDirectory ➝
C:\WINDOWS\System32\spool\PRINTERS\\x00

Process
↳ Pid 1144

Process
↳ C:\WINDOWS\system32\gnejplgjfd.exe

RegistryHKEY_LOCAL_MACHINE\Software\Microsoft\Security Center\FirewallDisableNotify ➝
1
Creates FileC:\WINDOWS\system32\srlbkkdd\tst
Creates FileC:\WINDOWS\system32\srlbkkdd\rng
Creates FileC:\WINDOWS\system32\xubwmkf.exe
Creates FileC:\WINDOWS\system32\srlbkkdd\lck
Creates FileC:\WINDOWS\system32\srlbkkdd\run
Creates Filepipe\net\NtControlPipe10
Creates FileC:\WINDOWS\system32\srlbkkdd\cfg
Creates File\Device\Afd\Endpoint
Creates FileC:\WINDOWS\TEMP\p16zoswz1rezjxv.exe
Creates ProcessWATCHDOGPROC "c:\windows\system32\gnejplgjfd.exe"
Creates ProcessC:\WINDOWS\TEMP\p16zoswz1rezjxv.exe -r 40257 tcp

Process
↳ C:\WINDOWS\system32\gnejplgjfd.exe

Creates FileC:\WINDOWS\system32\srlbkkdd\tst

Process
↳ WATCHDOGPROC "c:\windows\system32\gnejplgjfd.exe"

Creates FileC:\WINDOWS\system32\srlbkkdd\tst

Process
↳ C:\WINDOWS\TEMP\p16zoswz1rezjxv.exe -r 40257 tcp

Creates File\Device\Afd\Endpoint
Winsock DNS239.255.255.250

Network Details:

DNStablefruit.net
Type: A
52.0.217.44
DNSstickmarch.net
Type: A
52.0.217.44
DNSwatchguide.net
Type: A
207.148.248.143
DNSfairguide.net
Type: A
82.165.105.244
DNSdreamhalf.net
Type: A
195.22.26.248
DNSdreamname.net
Type: A
195.22.26.254
DNSdreamname.net
Type: A
195.22.26.231
DNSdreamname.net
Type: A
195.22.26.252
DNSdreamname.net
Type: A
195.22.26.253
DNSthisname.net
Type: A
194.68.6.3
DNSdreamguide.net
Type: A
50.63.202.104
DNSsouthwing.net
Type: A
183.90.232.5
DNSwhichfish.net
Type: A
184.168.221.62
DNSsaltfish.net
Type: A
206.130.110.212
DNSgladfish.net
Type: A
50.63.202.30
DNSgroupfish.net
Type: A
184.168.221.47
DNSfairlady.net
Type: A
69.172.201.208
DNSfairfish.net
Type: A
5.226.149.110
DNSdreamwing.net
Type: A
49.212.198.17
DNSdreamlady.net
Type: A
205.186.175.166
DNSdreamfish.net
Type: A
207.148.248.143
DNShumanpaid.net
Type: A
208.100.26.234
DNShairborn.net
Type: A
46.28.105.4
DNSdonaven4guia.com
Type: A
DNSfredesecas.com
Type: A
DNSlaloponea.com
Type: A
DNSdavedekilai.com
Type: A
DNSwatchlate.net
Type: A
DNSfairlate.net
Type: A
DNSthishalf.net
Type: A
DNSthisguide.net
Type: A
DNSdreamlate.net
Type: A
DNSthislate.net
Type: A
DNSarivewing.net
Type: A
DNSarivepast.net
Type: A
DNSsouthpast.net
Type: A
DNSarivelady.net
Type: A
DNSsouthlady.net
Type: A
DNSarivefish.net
Type: A
DNSsouthfish.net
Type: A
DNSuponwing.net
Type: A
DNSwhichwing.net
Type: A
DNSuponpast.net
Type: A
DNSwhichpast.net
Type: A
DNSuponlady.net
Type: A
DNSwhichlady.net
Type: A
DNSuponfish.net
Type: A
DNSspotwing.net
Type: A
DNSsaltwing.net
Type: A
DNSspotpast.net
Type: A
DNSsaltpast.net
Type: A
DNSspotlady.net
Type: A
DNSsaltlady.net
Type: A
DNSspotfish.net
Type: A
DNSgladwing.net
Type: A
DNStakenwing.net
Type: A
DNSgladpast.net
Type: A
DNStakenpast.net
Type: A
DNSgladlady.net
Type: A
DNStakenlady.net
Type: A
DNStakenfish.net
Type: A
DNSequalwing.net
Type: A
DNSgroupwing.net
Type: A
DNSequalpast.net
Type: A
DNSgrouppast.net
Type: A
DNSequallady.net
Type: A
DNSgrouplady.net
Type: A
DNSequalfish.net
Type: A
DNSspokewing.net
Type: A
DNSvisitwing.net
Type: A
DNSspokepast.net
Type: A
DNSvisitpast.net
Type: A
DNSspokelady.net
Type: A
DNSvisitlady.net
Type: A
DNSspokefish.net
Type: A
DNSvisitfish.net
Type: A
DNSwatchwing.net
Type: A
DNSfairwing.net
Type: A
DNSwatchpast.net
Type: A
DNSfairpast.net
Type: A
DNSwatchlady.net
Type: A
DNSwatchfish.net
Type: A
DNSthiswing.net
Type: A
DNSdreampast.net
Type: A
DNSthispast.net
Type: A
DNSthislady.net
Type: A
DNSthisfish.net
Type: A
DNShumancloth.net
Type: A
DNShaircloth.net
Type: A
DNShairpaid.net
Type: A
DNShumanaugust.net
Type: A
DNShairaugust.net
Type: A
DNShumanborn.net
Type: A
DNSyardcloth.net
Type: A
HTTP GEThttp://tablefruit.net/forum/search.php?method=validate&mode=sox&v=023&sox=3ca37801
User-Agent:
HTTP GEThttp://stickmarch.net/forum/search.php?method=validate&mode=sox&v=023&sox=3ca37801
User-Agent:
HTTP GEThttp://watchguide.net/forum/search.php?method=validate&mode=sox&v=023&sox=3ca37801
User-Agent:
HTTP GEThttp://fairguide.net/forum/search.php?method=validate&mode=sox&v=023&sox=3ca37801
User-Agent:
HTTP GEThttp://dreamhalf.net/forum/search.php?method=validate&mode=sox&v=023&sox=3ca37801
User-Agent:
HTTP GEThttp://dreamname.net/forum/search.php?method=validate&mode=sox&v=023&sox=3ca37801
User-Agent:
HTTP GEThttp://thisname.net/forum/search.php?method=validate&mode=sox&v=023&sox=3ca37801
User-Agent:
HTTP GEThttp://dreamguide.net/forum/search.php?method=validate&mode=sox&v=023&sox=3ca37801
User-Agent:
HTTP GEThttp://southwing.net/forum/search.php?method=validate&mode=sox&v=023&sox=3ca37801
User-Agent:
HTTP GEThttp://whichfish.net/forum/search.php?method=validate&mode=sox&v=023&sox=3ca37801
User-Agent:
HTTP GEThttp://saltfish.net/forum/search.php?method=validate&mode=sox&v=023&sox=3ca37801
User-Agent:
HTTP GEThttp://gladfish.net/forum/search.php?method=validate&mode=sox&v=023&sox=3ca37801
User-Agent:
HTTP GEThttp://groupfish.net/forum/search.php?method=validate&mode=sox&v=023&sox=3ca37801
User-Agent:
HTTP GEThttp://fairlady.net/forum/search.php?method=validate&mode=sox&v=023&sox=3ca37801
User-Agent:
HTTP GEThttp://fairfish.net/forum/search.php?method=validate&mode=sox&v=023&sox=3ca37801
User-Agent:
HTTP GEThttp://dreamwing.net/forum/search.php?method=validate&mode=sox&v=023&sox=3ca37801
User-Agent:
HTTP GEThttp://dreamlady.net/forum/search.php?method=validate&mode=sox&v=023&sox=3ca37801
User-Agent:
HTTP GEThttp://dreamfish.net/forum/search.php?method=validate&mode=sox&v=023&sox=3ca37801
User-Agent:
HTTP GEThttp://humanpaid.net/forum/search.php?method=validate&mode=sox&v=023&sox=3ca37801
User-Agent:
HTTP GEThttp://hairborn.net/forum/search.php?method=validate&mode=sox&v=023&sox=3ca37801
User-Agent:
HTTP GEThttp://tablefruit.net/forum/search.php?method=validate&mode=sox&v=023&sox=3ca37801
User-Agent:
HTTP GEThttp://stickmarch.net/forum/search.php?method=validate&mode=sox&v=023&sox=3ca37801
User-Agent:
HTTP GEThttp://watchguide.net/forum/search.php?method=validate&mode=sox&v=023&sox=3ca37801
User-Agent:
HTTP GEThttp://fairguide.net/forum/search.php?method=validate&mode=sox&v=023&sox=3ca37801
User-Agent:
HTTP GEThttp://dreamhalf.net/forum/search.php?method=validate&mode=sox&v=023&sox=3ca37801
User-Agent:
HTTP GEThttp://dreamname.net/forum/search.php?method=validate&mode=sox&v=023&sox=3ca37801
User-Agent:
HTTP GEThttp://thisname.net/forum/search.php?method=validate&mode=sox&v=023&sox=3ca37801
User-Agent:
HTTP GEThttp://dreamguide.net/forum/search.php?method=validate&mode=sox&v=023&sox=3ca37801
User-Agent:
HTTP GEThttp://southwing.net/forum/search.php?method=validate&mode=sox&v=023&sox=3ca37801
User-Agent:
HTTP GEThttp://whichfish.net/forum/search.php?method=validate&mode=sox&v=023&sox=3ca37801
User-Agent:
HTTP GEThttp://saltfish.net/forum/search.php?method=validate&mode=sox&v=023&sox=3ca37801
User-Agent:
HTTP GEThttp://gladfish.net/forum/search.php?method=validate&mode=sox&v=023&sox=3ca37801
User-Agent:
HTTP GEThttp://groupfish.net/forum/search.php?method=validate&mode=sox&v=023&sox=3ca37801
User-Agent:
HTTP GEThttp://fairlady.net/forum/search.php?method=validate&mode=sox&v=023&sox=3ca37801
User-Agent:
HTTP GEThttp://fairfish.net/forum/search.php?method=validate&mode=sox&v=023&sox=3ca37801
User-Agent:
HTTP GEThttp://dreamwing.net/forum/search.php?method=validate&mode=sox&v=023&sox=3ca37801
User-Agent:
HTTP GEThttp://dreamlady.net/forum/search.php?method=validate&mode=sox&v=023&sox=3ca37801
User-Agent:
HTTP GEThttp://dreamfish.net/forum/search.php?method=validate&mode=sox&v=023&sox=3ca37801
User-Agent:
HTTP GEThttp://humanpaid.net/forum/search.php?method=validate&mode=sox&v=023&sox=3ca37801
User-Agent:
HTTP GEThttp://hairborn.net/forum/search.php?method=validate&mode=sox&v=023&sox=3ca37801
User-Agent:
Flows TCP192.168.1.1:1036 ➝ 52.0.217.44:80
Flows TCP192.168.1.1:1037 ➝ 52.0.217.44:80
Flows TCP192.168.1.1:1038 ➝ 207.148.248.143:80
Flows TCP192.168.1.1:1039 ➝ 82.165.105.244:80
Flows TCP192.168.1.1:1040 ➝ 195.22.26.248:80
Flows TCP192.168.1.1:1041 ➝ 195.22.26.254:80
Flows TCP192.168.1.1:1043 ➝ 194.68.6.3:80
Flows TCP192.168.1.1:1044 ➝ 50.63.202.104:80
Flows TCP192.168.1.1:1045 ➝ 183.90.232.5:80
Flows TCP192.168.1.1:1046 ➝ 184.168.221.62:80
Flows TCP192.168.1.1:1047 ➝ 206.130.110.212:80
Flows TCP192.168.1.1:1048 ➝ 50.63.202.30:80
Flows TCP192.168.1.1:1049 ➝ 184.168.221.47:80
Flows TCP192.168.1.1:1050 ➝ 69.172.201.208:80
Flows TCP192.168.1.1:1051 ➝ 5.226.149.110:80
Flows TCP192.168.1.1:1052 ➝ 49.212.198.17:80
Flows TCP192.168.1.1:1053 ➝ 205.186.175.166:80
Flows TCP192.168.1.1:1054 ➝ 207.148.248.143:80
Flows TCP192.168.1.1:1055 ➝ 208.100.26.234:80
Flows TCP192.168.1.1:1056 ➝ 46.28.105.4:80
Flows TCP192.168.1.1:1057 ➝ 52.0.217.44:80
Flows TCP192.168.1.1:1058 ➝ 52.0.217.44:80
Flows TCP192.168.1.1:1059 ➝ 207.148.248.143:80
Flows TCP192.168.1.1:1060 ➝ 82.165.105.244:80
Flows TCP192.168.1.1:1061 ➝ 195.22.26.248:80
Flows TCP192.168.1.1:1062 ➝ 195.22.26.254:80
Flows TCP192.168.1.1:1063 ➝ 194.68.6.3:80
Flows TCP192.168.1.1:1064 ➝ 50.63.202.104:80
Flows TCP192.168.1.1:1065 ➝ 183.90.232.5:80
Flows TCP192.168.1.1:1066 ➝ 184.168.221.62:80
Flows TCP192.168.1.1:1067 ➝ 206.130.110.212:80
Flows TCP192.168.1.1:1068 ➝ 50.63.202.30:80
Flows TCP192.168.1.1:1069 ➝ 184.168.221.47:80
Flows TCP192.168.1.1:1070 ➝ 69.172.201.208:80
Flows TCP192.168.1.1:1071 ➝ 5.226.149.110:80
Flows TCP192.168.1.1:1072 ➝ 49.212.198.17:80
Flows TCP192.168.1.1:1073 ➝ 205.186.175.166:80
Flows TCP192.168.1.1:1074 ➝ 207.148.248.143:80
Flows TCP192.168.1.1:1075 ➝ 208.100.26.234:80
Flows TCP192.168.1.1:1076 ➝ 46.28.105.4:80

Raw Pcap
0x00000000 (00000)   47455420 2f666f72 756d2f73 65617263   GET /forum/searc
0x00000010 (00016)   682e7068 703f6d65 74686f64 3d76616c   h.php?method=val
0x00000020 (00032)   69646174 65266d6f 64653d73 6f782676   idate&mode=sox&v
0x00000030 (00048)   3d303233 26736f78 3d336361 33373830   =023&sox=3ca3780
0x00000040 (00064)   31204854 54502f31 2e300d0a 41636365   1 HTTP/1.0..Acce
0x00000050 (00080)   70743a20 2a2f2a0d 0a436f6e 6e656374   pt: */*..Connect
0x00000060 (00096)   696f6e3a 20636c6f 73650d0a 486f7374   ion: close..Host
0x00000070 (00112)   3a207461 626c6566 72756974 2e6e6574   : tablefruit.net
0x00000080 (00128)   0d0a0d0a                              ....

0x00000000 (00000)   47455420 2f666f72 756d2f73 65617263   GET /forum/searc
0x00000010 (00016)   682e7068 703f6d65 74686f64 3d76616c   h.php?method=val
0x00000020 (00032)   69646174 65266d6f 64653d73 6f782676   idate&mode=sox&v
0x00000030 (00048)   3d303233 26736f78 3d336361 33373830   =023&sox=3ca3780
0x00000040 (00064)   31204854 54502f31 2e300d0a 41636365   1 HTTP/1.0..Acce
0x00000050 (00080)   70743a20 2a2f2a0d 0a436f6e 6e656374   pt: */*..Connect
0x00000060 (00096)   696f6e3a 20636c6f 73650d0a 486f7374   ion: close..Host
0x00000070 (00112)   3a207374 69636b6d 61726368 2e6e6574   : stickmarch.net
0x00000080 (00128)   0d0a0d0a                              ....

0x00000000 (00000)   47455420 2f666f72 756d2f73 65617263   GET /forum/searc
0x00000010 (00016)   682e7068 703f6d65 74686f64 3d76616c   h.php?method=val
0x00000020 (00032)   69646174 65266d6f 64653d73 6f782676   idate&mode=sox&v
0x00000030 (00048)   3d303233 26736f78 3d336361 33373830   =023&sox=3ca3780
0x00000040 (00064)   31204854 54502f31 2e300d0a 41636365   1 HTTP/1.0..Acce
0x00000050 (00080)   70743a20 2a2f2a0d 0a436f6e 6e656374   pt: */*..Connect
0x00000060 (00096)   696f6e3a 20636c6f 73650d0a 486f7374   ion: close..Host
0x00000070 (00112)   3a207761 74636867 75696465 2e6e6574   : watchguide.net
0x00000080 (00128)   0d0a0d0a                              ....

0x00000000 (00000)   47455420 2f666f72 756d2f73 65617263   GET /forum/searc
0x00000010 (00016)   682e7068 703f6d65 74686f64 3d76616c   h.php?method=val
0x00000020 (00032)   69646174 65266d6f 64653d73 6f782676   idate&mode=sox&v
0x00000030 (00048)   3d303233 26736f78 3d336361 33373830   =023&sox=3ca3780
0x00000040 (00064)   31204854 54502f31 2e300d0a 41636365   1 HTTP/1.0..Acce
0x00000050 (00080)   70743a20 2a2f2a0d 0a436f6e 6e656374   pt: */*..Connect
0x00000060 (00096)   696f6e3a 20636c6f 73650d0a 486f7374   ion: close..Host
0x00000070 (00112)   3a206661 69726775 6964652e 6e65740d   : fairguide.net.
0x00000080 (00128)   0a0d0a0a                              ....

0x00000000 (00000)   47455420 2f666f72 756d2f73 65617263   GET /forum/searc
0x00000010 (00016)   682e7068 703f6d65 74686f64 3d76616c   h.php?method=val
0x00000020 (00032)   69646174 65266d6f 64653d73 6f782676   idate&mode=sox&v
0x00000030 (00048)   3d303233 26736f78 3d336361 33373830   =023&sox=3ca3780
0x00000040 (00064)   31204854 54502f31 2e300d0a 41636365   1 HTTP/1.0..Acce
0x00000050 (00080)   70743a20 2a2f2a0d 0a436f6e 6e656374   pt: */*..Connect
0x00000060 (00096)   696f6e3a 20636c6f 73650d0a 486f7374   ion: close..Host
0x00000070 (00112)   3a206472 65616d68 616c662e 6e65740d   : dreamhalf.net.
0x00000080 (00128)   0a0d0a0a                              ....

0x00000000 (00000)   47455420 2f666f72 756d2f73 65617263   GET /forum/searc
0x00000010 (00016)   682e7068 703f6d65 74686f64 3d76616c   h.php?method=val
0x00000020 (00032)   69646174 65266d6f 64653d73 6f782676   idate&mode=sox&v
0x00000030 (00048)   3d303233 26736f78 3d336361 33373830   =023&sox=3ca3780
0x00000040 (00064)   31204854 54502f31 2e300d0a 41636365   1 HTTP/1.0..Acce
0x00000050 (00080)   70743a20 2a2f2a0d 0a436f6e 6e656374   pt: */*..Connect
0x00000060 (00096)   696f6e3a 20636c6f 73650d0a 486f7374   ion: close..Host
0x00000070 (00112)   3a206472 65616d6e 616d652e 6e65740d   : dreamname.net.
0x00000080 (00128)   0a0d0a0a                              ....

0x00000000 (00000)   47455420 2f666f72 756d2f73 65617263   GET /forum/searc
0x00000010 (00016)   682e7068 703f6d65 74686f64 3d76616c   h.php?method=val
0x00000020 (00032)   69646174 65266d6f 64653d73 6f782676   idate&mode=sox&v
0x00000030 (00048)   3d303233 26736f78 3d336361 33373830   =023&sox=3ca3780
0x00000040 (00064)   31204854 54502f31 2e300d0a 41636365   1 HTTP/1.0..Acce
0x00000050 (00080)   70743a20 2a2f2a0d 0a436f6e 6e656374   pt: */*..Connect
0x00000060 (00096)   696f6e3a 20636c6f 73650d0a 486f7374   ion: close..Host
0x00000070 (00112)   3a207468 69736e61 6d652e6e 65740d0a   : thisname.net..
0x00000080 (00128)   0d0a0a0a                              ....

0x00000000 (00000)   47455420 2f666f72 756d2f73 65617263   GET /forum/searc
0x00000010 (00016)   682e7068 703f6d65 74686f64 3d76616c   h.php?method=val
0x00000020 (00032)   69646174 65266d6f 64653d73 6f782676   idate&mode=sox&v
0x00000030 (00048)   3d303233 26736f78 3d336361 33373830   =023&sox=3ca3780
0x00000040 (00064)   31204854 54502f31 2e300d0a 41636365   1 HTTP/1.0..Acce
0x00000050 (00080)   70743a20 2a2f2a0d 0a436f6e 6e656374   pt: */*..Connect
0x00000060 (00096)   696f6e3a 20636c6f 73650d0a 486f7374   ion: close..Host
0x00000070 (00112)   3a206472 65616d67 75696465 2e6e6574   : dreamguide.net
0x00000080 (00128)   0d0a0d0a                              ....

0x00000000 (00000)   47455420 2f666f72 756d2f73 65617263   GET /forum/searc
0x00000010 (00016)   682e7068 703f6d65 74686f64 3d76616c   h.php?method=val
0x00000020 (00032)   69646174 65266d6f 64653d73 6f782676   idate&mode=sox&v
0x00000030 (00048)   3d303233 26736f78 3d336361 33373830   =023&sox=3ca3780
0x00000040 (00064)   31204854 54502f31 2e300d0a 41636365   1 HTTP/1.0..Acce
0x00000050 (00080)   70743a20 2a2f2a0d 0a436f6e 6e656374   pt: */*..Connect
0x00000060 (00096)   696f6e3a 20636c6f 73650d0a 486f7374   ion: close..Host
0x00000070 (00112)   3a20736f 75746877 696e672e 6e65740d   : southwing.net.
0x00000080 (00128)   0a0d0a0a                              ....

0x00000000 (00000)   47455420 2f666f72 756d2f73 65617263   GET /forum/searc
0x00000010 (00016)   682e7068 703f6d65 74686f64 3d76616c   h.php?method=val
0x00000020 (00032)   69646174 65266d6f 64653d73 6f782676   idate&mode=sox&v
0x00000030 (00048)   3d303233 26736f78 3d336361 33373830   =023&sox=3ca3780
0x00000040 (00064)   31204854 54502f31 2e300d0a 41636365   1 HTTP/1.0..Acce
0x00000050 (00080)   70743a20 2a2f2a0d 0a436f6e 6e656374   pt: */*..Connect
0x00000060 (00096)   696f6e3a 20636c6f 73650d0a 486f7374   ion: close..Host
0x00000070 (00112)   3a207768 69636866 6973682e 6e65740d   : whichfish.net.
0x00000080 (00128)   0a0d0a0a                              ....

0x00000000 (00000)   47455420 2f666f72 756d2f73 65617263   GET /forum/searc
0x00000010 (00016)   682e7068 703f6d65 74686f64 3d76616c   h.php?method=val
0x00000020 (00032)   69646174 65266d6f 64653d73 6f782676   idate&mode=sox&v
0x00000030 (00048)   3d303233 26736f78 3d336361 33373830   =023&sox=3ca3780
0x00000040 (00064)   31204854 54502f31 2e300d0a 41636365   1 HTTP/1.0..Acce
0x00000050 (00080)   70743a20 2a2f2a0d 0a436f6e 6e656374   pt: */*..Connect
0x00000060 (00096)   696f6e3a 20636c6f 73650d0a 486f7374   ion: close..Host
0x00000070 (00112)   3a207361 6c746669 73682e6e 65740d0a   : saltfish.net..
0x00000080 (00128)   0d0a0a0a                              ....

0x00000000 (00000)   47455420 2f666f72 756d2f73 65617263   GET /forum/searc
0x00000010 (00016)   682e7068 703f6d65 74686f64 3d76616c   h.php?method=val
0x00000020 (00032)   69646174 65266d6f 64653d73 6f782676   idate&mode=sox&v
0x00000030 (00048)   3d303233 26736f78 3d336361 33373830   =023&sox=3ca3780
0x00000040 (00064)   31204854 54502f31 2e300d0a 41636365   1 HTTP/1.0..Acce
0x00000050 (00080)   70743a20 2a2f2a0d 0a436f6e 6e656374   pt: */*..Connect
0x00000060 (00096)   696f6e3a 20636c6f 73650d0a 486f7374   ion: close..Host
0x00000070 (00112)   3a20676c 61646669 73682e6e 65740d0a   : gladfish.net..
0x00000080 (00128)   0d0a0a0a                              ....

0x00000000 (00000)   47455420 2f666f72 756d2f73 65617263   GET /forum/searc
0x00000010 (00016)   682e7068 703f6d65 74686f64 3d76616c   h.php?method=val
0x00000020 (00032)   69646174 65266d6f 64653d73 6f782676   idate&mode=sox&v
0x00000030 (00048)   3d303233 26736f78 3d336361 33373830   =023&sox=3ca3780
0x00000040 (00064)   31204854 54502f31 2e300d0a 41636365   1 HTTP/1.0..Acce
0x00000050 (00080)   70743a20 2a2f2a0d 0a436f6e 6e656374   pt: */*..Connect
0x00000060 (00096)   696f6e3a 20636c6f 73650d0a 486f7374   ion: close..Host
0x00000070 (00112)   3a206772 6f757066 6973682e 6e65740d   : groupfish.net.
0x00000080 (00128)   0a0d0a0a                              ....

0x00000000 (00000)   47455420 2f666f72 756d2f73 65617263   GET /forum/searc
0x00000010 (00016)   682e7068 703f6d65 74686f64 3d76616c   h.php?method=val
0x00000020 (00032)   69646174 65266d6f 64653d73 6f782676   idate&mode=sox&v
0x00000030 (00048)   3d303233 26736f78 3d336361 33373830   =023&sox=3ca3780
0x00000040 (00064)   31204854 54502f31 2e300d0a 41636365   1 HTTP/1.0..Acce
0x00000050 (00080)   70743a20 2a2f2a0d 0a436f6e 6e656374   pt: */*..Connect
0x00000060 (00096)   696f6e3a 20636c6f 73650d0a 486f7374   ion: close..Host
0x00000070 (00112)   3a206661 69726c61 64792e6e 65740d0a   : fairlady.net..
0x00000080 (00128)   0d0a0a0a                              ....

0x00000000 (00000)   47455420 2f666f72 756d2f73 65617263   GET /forum/searc
0x00000010 (00016)   682e7068 703f6d65 74686f64 3d76616c   h.php?method=val
0x00000020 (00032)   69646174 65266d6f 64653d73 6f782676   idate&mode=sox&v
0x00000030 (00048)   3d303233 26736f78 3d336361 33373830   =023&sox=3ca3780
0x00000040 (00064)   31204854 54502f31 2e300d0a 41636365   1 HTTP/1.0..Acce
0x00000050 (00080)   70743a20 2a2f2a0d 0a436f6e 6e656374   pt: */*..Connect
0x00000060 (00096)   696f6e3a 20636c6f 73650d0a 486f7374   ion: close..Host
0x00000070 (00112)   3a206661 69726669 73682e6e 65740d0a   : fairfish.net..
0x00000080 (00128)   0d0a0a0a                              ....

0x00000000 (00000)   47455420 2f666f72 756d2f73 65617263   GET /forum/searc
0x00000010 (00016)   682e7068 703f6d65 74686f64 3d76616c   h.php?method=val
0x00000020 (00032)   69646174 65266d6f 64653d73 6f782676   idate&mode=sox&v
0x00000030 (00048)   3d303233 26736f78 3d336361 33373830   =023&sox=3ca3780
0x00000040 (00064)   31204854 54502f31 2e300d0a 41636365   1 HTTP/1.0..Acce
0x00000050 (00080)   70743a20 2a2f2a0d 0a436f6e 6e656374   pt: */*..Connect
0x00000060 (00096)   696f6e3a 20636c6f 73650d0a 486f7374   ion: close..Host
0x00000070 (00112)   3a206472 65616d77 696e672e 6e65740d   : dreamwing.net.
0x00000080 (00128)   0a0d0a0a                              ....

0x00000000 (00000)   47455420 2f666f72 756d2f73 65617263   GET /forum/searc
0x00000010 (00016)   682e7068 703f6d65 74686f64 3d76616c   h.php?method=val
0x00000020 (00032)   69646174 65266d6f 64653d73 6f782676   idate&mode=sox&v
0x00000030 (00048)   3d303233 26736f78 3d336361 33373830   =023&sox=3ca3780
0x00000040 (00064)   31204854 54502f31 2e300d0a 41636365   1 HTTP/1.0..Acce
0x00000050 (00080)   70743a20 2a2f2a0d 0a436f6e 6e656374   pt: */*..Connect
0x00000060 (00096)   696f6e3a 20636c6f 73650d0a 486f7374   ion: close..Host
0x00000070 (00112)   3a206472 65616d6c 6164792e 6e65740d   : dreamlady.net.
0x00000080 (00128)   0a0d0a0a                              ....

0x00000000 (00000)   47455420 2f666f72 756d2f73 65617263   GET /forum/searc
0x00000010 (00016)   682e7068 703f6d65 74686f64 3d76616c   h.php?method=val
0x00000020 (00032)   69646174 65266d6f 64653d73 6f782676   idate&mode=sox&v
0x00000030 (00048)   3d303233 26736f78 3d336361 33373830   =023&sox=3ca3780
0x00000040 (00064)   31204854 54502f31 2e300d0a 41636365   1 HTTP/1.0..Acce
0x00000050 (00080)   70743a20 2a2f2a0d 0a436f6e 6e656374   pt: */*..Connect
0x00000060 (00096)   696f6e3a 20636c6f 73650d0a 486f7374   ion: close..Host
0x00000070 (00112)   3a206472 65616d66 6973682e 6e65740d   : dreamfish.net.
0x00000080 (00128)   0a0d0a0a                              ....

0x00000000 (00000)   47455420 2f666f72 756d2f73 65617263   GET /forum/searc
0x00000010 (00016)   682e7068 703f6d65 74686f64 3d76616c   h.php?method=val
0x00000020 (00032)   69646174 65266d6f 64653d73 6f782676   idate&mode=sox&v
0x00000030 (00048)   3d303233 26736f78 3d336361 33373830   =023&sox=3ca3780
0x00000040 (00064)   31204854 54502f31 2e300d0a 41636365   1 HTTP/1.0..Acce
0x00000050 (00080)   70743a20 2a2f2a0d 0a436f6e 6e656374   pt: */*..Connect
0x00000060 (00096)   696f6e3a 20636c6f 73650d0a 486f7374   ion: close..Host
0x00000070 (00112)   3a206875 6d616e70 6169642e 6e65740d   : humanpaid.net.
0x00000080 (00128)   0a0d0a0a                              ....

0x00000000 (00000)   47455420 2f666f72 756d2f73 65617263   GET /forum/searc
0x00000010 (00016)   682e7068 703f6d65 74686f64 3d76616c   h.php?method=val
0x00000020 (00032)   69646174 65266d6f 64653d73 6f782676   idate&mode=sox&v
0x00000030 (00048)   3d303233 26736f78 3d336361 33373830   =023&sox=3ca3780
0x00000040 (00064)   31204854 54502f31 2e300d0a 41636365   1 HTTP/1.0..Acce
0x00000050 (00080)   70743a20 2a2f2a0d 0a436f6e 6e656374   pt: */*..Connect
0x00000060 (00096)   696f6e3a 20636c6f 73650d0a 486f7374   ion: close..Host
0x00000070 (00112)   3a206861 6972626f 726e2e6e 65740d0a   : hairborn.net..
0x00000080 (00128)   0d0a0a0a                              ....

0x00000000 (00000)   47455420 2f666f72 756d2f73 65617263   GET /forum/searc
0x00000010 (00016)   682e7068 703f6d65 74686f64 3d76616c   h.php?method=val
0x00000020 (00032)   69646174 65266d6f 64653d73 6f782676   idate&mode=sox&v
0x00000030 (00048)   3d303233 26736f78 3d336361 33373830   =023&sox=3ca3780
0x00000040 (00064)   31204854 54502f31 2e300d0a 41636365   1 HTTP/1.0..Acce
0x00000050 (00080)   70743a20 2a2f2a0d 0a436f6e 6e656374   pt: */*..Connect
0x00000060 (00096)   696f6e3a 20636c6f 73650d0a 486f7374   ion: close..Host
0x00000070 (00112)   3a207461 626c6566 72756974 2e6e6574   : tablefruit.net
0x00000080 (00128)   0d0a0d0a                              ....

0x00000000 (00000)   47455420 2f666f72 756d2f73 65617263   GET /forum/searc
0x00000010 (00016)   682e7068 703f6d65 74686f64 3d76616c   h.php?method=val
0x00000020 (00032)   69646174 65266d6f 64653d73 6f782676   idate&mode=sox&v
0x00000030 (00048)   3d303233 26736f78 3d336361 33373830   =023&sox=3ca3780
0x00000040 (00064)   31204854 54502f31 2e300d0a 41636365   1 HTTP/1.0..Acce
0x00000050 (00080)   70743a20 2a2f2a0d 0a436f6e 6e656374   pt: */*..Connect
0x00000060 (00096)   696f6e3a 20636c6f 73650d0a 486f7374   ion: close..Host
0x00000070 (00112)   3a207374 69636b6d 61726368 2e6e6574   : stickmarch.net
0x00000080 (00128)   0d0a0d0a                              ....

0x00000000 (00000)   47455420 2f666f72 756d2f73 65617263   GET /forum/searc
0x00000010 (00016)   682e7068 703f6d65 74686f64 3d76616c   h.php?method=val
0x00000020 (00032)   69646174 65266d6f 64653d73 6f782676   idate&mode=sox&v
0x00000030 (00048)   3d303233 26736f78 3d336361 33373830   =023&sox=3ca3780
0x00000040 (00064)   31204854 54502f31 2e300d0a 41636365   1 HTTP/1.0..Acce
0x00000050 (00080)   70743a20 2a2f2a0d 0a436f6e 6e656374   pt: */*..Connect
0x00000060 (00096)   696f6e3a 20636c6f 73650d0a 486f7374   ion: close..Host
0x00000070 (00112)   3a207761 74636867 75696465 2e6e6574   : watchguide.net
0x00000080 (00128)   0d0a0d0a                              ....

0x00000000 (00000)   47455420 2f666f72 756d2f73 65617263   GET /forum/searc
0x00000010 (00016)   682e7068 703f6d65 74686f64 3d76616c   h.php?method=val
0x00000020 (00032)   69646174 65266d6f 64653d73 6f782676   idate&mode=sox&v
0x00000030 (00048)   3d303233 26736f78 3d336361 33373830   =023&sox=3ca3780
0x00000040 (00064)   31204854 54502f31 2e300d0a 41636365   1 HTTP/1.0..Acce
0x00000050 (00080)   70743a20 2a2f2a0d 0a436f6e 6e656374   pt: */*..Connect
0x00000060 (00096)   696f6e3a 20636c6f 73650d0a 486f7374   ion: close..Host
0x00000070 (00112)   3a206661 69726775 6964652e 6e65740d   : fairguide.net.
0x00000080 (00128)   0a0d0a0a                              ....

0x00000000 (00000)   47455420 2f666f72 756d2f73 65617263   GET /forum/searc
0x00000010 (00016)   682e7068 703f6d65 74686f64 3d76616c   h.php?method=val
0x00000020 (00032)   69646174 65266d6f 64653d73 6f782676   idate&mode=sox&v
0x00000030 (00048)   3d303233 26736f78 3d336361 33373830   =023&sox=3ca3780
0x00000040 (00064)   31204854 54502f31 2e300d0a 41636365   1 HTTP/1.0..Acce
0x00000050 (00080)   70743a20 2a2f2a0d 0a436f6e 6e656374   pt: */*..Connect
0x00000060 (00096)   696f6e3a 20636c6f 73650d0a 486f7374   ion: close..Host
0x00000070 (00112)   3a206472 65616d68 616c662e 6e65740d   : dreamhalf.net.
0x00000080 (00128)   0a0d0a0a                              ....

0x00000000 (00000)   47455420 2f666f72 756d2f73 65617263   GET /forum/searc
0x00000010 (00016)   682e7068 703f6d65 74686f64 3d76616c   h.php?method=val
0x00000020 (00032)   69646174 65266d6f 64653d73 6f782676   idate&mode=sox&v
0x00000030 (00048)   3d303233 26736f78 3d336361 33373830   =023&sox=3ca3780
0x00000040 (00064)   31204854 54502f31 2e300d0a 41636365   1 HTTP/1.0..Acce
0x00000050 (00080)   70743a20 2a2f2a0d 0a436f6e 6e656374   pt: */*..Connect
0x00000060 (00096)   696f6e3a 20636c6f 73650d0a 486f7374   ion: close..Host
0x00000070 (00112)   3a206472 65616d6e 616d652e 6e65740d   : dreamname.net.
0x00000080 (00128)   0a0d0a0a                              ....

0x00000000 (00000)   47455420 2f666f72 756d2f73 65617263   GET /forum/searc
0x00000010 (00016)   682e7068 703f6d65 74686f64 3d76616c   h.php?method=val
0x00000020 (00032)   69646174 65266d6f 64653d73 6f782676   idate&mode=sox&v
0x00000030 (00048)   3d303233 26736f78 3d336361 33373830   =023&sox=3ca3780
0x00000040 (00064)   31204854 54502f31 2e300d0a 41636365   1 HTTP/1.0..Acce
0x00000050 (00080)   70743a20 2a2f2a0d 0a436f6e 6e656374   pt: */*..Connect
0x00000060 (00096)   696f6e3a 20636c6f 73650d0a 486f7374   ion: close..Host
0x00000070 (00112)   3a207468 69736e61 6d652e6e 65740d0a   : thisname.net..
0x00000080 (00128)   0d0a0a0a                              ....

0x00000000 (00000)   47455420 2f666f72 756d2f73 65617263   GET /forum/searc
0x00000010 (00016)   682e7068 703f6d65 74686f64 3d76616c   h.php?method=val
0x00000020 (00032)   69646174 65266d6f 64653d73 6f782676   idate&mode=sox&v
0x00000030 (00048)   3d303233 26736f78 3d336361 33373830   =023&sox=3ca3780
0x00000040 (00064)   31204854 54502f31 2e300d0a 41636365   1 HTTP/1.0..Acce
0x00000050 (00080)   70743a20 2a2f2a0d 0a436f6e 6e656374   pt: */*..Connect
0x00000060 (00096)   696f6e3a 20636c6f 73650d0a 486f7374   ion: close..Host
0x00000070 (00112)   3a206472 65616d67 75696465 2e6e6574   : dreamguide.net
0x00000080 (00128)   0d0a0d0a                              ....

0x00000000 (00000)   47455420 2f666f72 756d2f73 65617263   GET /forum/searc
0x00000010 (00016)   682e7068 703f6d65 74686f64 3d76616c   h.php?method=val
0x00000020 (00032)   69646174 65266d6f 64653d73 6f782676   idate&mode=sox&v
0x00000030 (00048)   3d303233 26736f78 3d336361 33373830   =023&sox=3ca3780
0x00000040 (00064)   31204854 54502f31 2e300d0a 41636365   1 HTTP/1.0..Acce
0x00000050 (00080)   70743a20 2a2f2a0d 0a436f6e 6e656374   pt: */*..Connect
0x00000060 (00096)   696f6e3a 20636c6f 73650d0a 486f7374   ion: close..Host
0x00000070 (00112)   3a20736f 75746877 696e672e 6e65740d   : southwing.net.
0x00000080 (00128)   0a0d0a0a                              ....

0x00000000 (00000)   47455420 2f666f72 756d2f73 65617263   GET /forum/searc
0x00000010 (00016)   682e7068 703f6d65 74686f64 3d76616c   h.php?method=val
0x00000020 (00032)   69646174 65266d6f 64653d73 6f782676   idate&mode=sox&v
0x00000030 (00048)   3d303233 26736f78 3d336361 33373830   =023&sox=3ca3780
0x00000040 (00064)   31204854 54502f31 2e300d0a 41636365   1 HTTP/1.0..Acce
0x00000050 (00080)   70743a20 2a2f2a0d 0a436f6e 6e656374   pt: */*..Connect
0x00000060 (00096)   696f6e3a 20636c6f 73650d0a 486f7374   ion: close..Host
0x00000070 (00112)   3a207768 69636866 6973682e 6e65740d   : whichfish.net.
0x00000080 (00128)   0a0d0a0a                              ....

0x00000000 (00000)   47455420 2f666f72 756d2f73 65617263   GET /forum/searc
0x00000010 (00016)   682e7068 703f6d65 74686f64 3d76616c   h.php?method=val
0x00000020 (00032)   69646174 65266d6f 64653d73 6f782676   idate&mode=sox&v
0x00000030 (00048)   3d303233 26736f78 3d336361 33373830   =023&sox=3ca3780
0x00000040 (00064)   31204854 54502f31 2e300d0a 41636365   1 HTTP/1.0..Acce
0x00000050 (00080)   70743a20 2a2f2a0d 0a436f6e 6e656374   pt: */*..Connect
0x00000060 (00096)   696f6e3a 20636c6f 73650d0a 486f7374   ion: close..Host
0x00000070 (00112)   3a207361 6c746669 73682e6e 65740d0a   : saltfish.net..
0x00000080 (00128)   0d0a0a0a                              ....

0x00000000 (00000)   47455420 2f666f72 756d2f73 65617263   GET /forum/searc
0x00000010 (00016)   682e7068 703f6d65 74686f64 3d76616c   h.php?method=val
0x00000020 (00032)   69646174 65266d6f 64653d73 6f782676   idate&mode=sox&v
0x00000030 (00048)   3d303233 26736f78 3d336361 33373830   =023&sox=3ca3780
0x00000040 (00064)   31204854 54502f31 2e300d0a 41636365   1 HTTP/1.0..Acce
0x00000050 (00080)   70743a20 2a2f2a0d 0a436f6e 6e656374   pt: */*..Connect
0x00000060 (00096)   696f6e3a 20636c6f 73650d0a 486f7374   ion: close..Host
0x00000070 (00112)   3a20676c 61646669 73682e6e 65740d0a   : gladfish.net..
0x00000080 (00128)   0d0a0a0a                              ....

0x00000000 (00000)   47455420 2f666f72 756d2f73 65617263   GET /forum/searc
0x00000010 (00016)   682e7068 703f6d65 74686f64 3d76616c   h.php?method=val
0x00000020 (00032)   69646174 65266d6f 64653d73 6f782676   idate&mode=sox&v
0x00000030 (00048)   3d303233 26736f78 3d336361 33373830   =023&sox=3ca3780
0x00000040 (00064)   31204854 54502f31 2e300d0a 41636365   1 HTTP/1.0..Acce
0x00000050 (00080)   70743a20 2a2f2a0d 0a436f6e 6e656374   pt: */*..Connect
0x00000060 (00096)   696f6e3a 20636c6f 73650d0a 486f7374   ion: close..Host
0x00000070 (00112)   3a206772 6f757066 6973682e 6e65740d   : groupfish.net.
0x00000080 (00128)   0a0d0a0a                              ....

0x00000000 (00000)   47455420 2f666f72 756d2f73 65617263   GET /forum/searc
0x00000010 (00016)   682e7068 703f6d65 74686f64 3d76616c   h.php?method=val
0x00000020 (00032)   69646174 65266d6f 64653d73 6f782676   idate&mode=sox&v
0x00000030 (00048)   3d303233 26736f78 3d336361 33373830   =023&sox=3ca3780
0x00000040 (00064)   31204854 54502f31 2e300d0a 41636365   1 HTTP/1.0..Acce
0x00000050 (00080)   70743a20 2a2f2a0d 0a436f6e 6e656374   pt: */*..Connect
0x00000060 (00096)   696f6e3a 20636c6f 73650d0a 486f7374   ion: close..Host
0x00000070 (00112)   3a206661 69726c61 64792e6e 65740d0a   : fairlady.net..
0x00000080 (00128)   0d0a0a0a                              ....

0x00000000 (00000)   47455420 2f666f72 756d2f73 65617263   GET /forum/searc
0x00000010 (00016)   682e7068 703f6d65 74686f64 3d76616c   h.php?method=val
0x00000020 (00032)   69646174 65266d6f 64653d73 6f782676   idate&mode=sox&v
0x00000030 (00048)   3d303233 26736f78 3d336361 33373830   =023&sox=3ca3780
0x00000040 (00064)   31204854 54502f31 2e300d0a 41636365   1 HTTP/1.0..Acce
0x00000050 (00080)   70743a20 2a2f2a0d 0a436f6e 6e656374   pt: */*..Connect
0x00000060 (00096)   696f6e3a 20636c6f 73650d0a 486f7374   ion: close..Host
0x00000070 (00112)   3a206661 69726669 73682e6e 65740d0a   : fairfish.net..
0x00000080 (00128)   0d0a0a0a                              ....

0x00000000 (00000)   47455420 2f666f72 756d2f73 65617263   GET /forum/searc
0x00000010 (00016)   682e7068 703f6d65 74686f64 3d76616c   h.php?method=val
0x00000020 (00032)   69646174 65266d6f 64653d73 6f782676   idate&mode=sox&v
0x00000030 (00048)   3d303233 26736f78 3d336361 33373830   =023&sox=3ca3780
0x00000040 (00064)   31204854 54502f31 2e300d0a 41636365   1 HTTP/1.0..Acce
0x00000050 (00080)   70743a20 2a2f2a0d 0a436f6e 6e656374   pt: */*..Connect
0x00000060 (00096)   696f6e3a 20636c6f 73650d0a 486f7374   ion: close..Host
0x00000070 (00112)   3a206472 65616d77 696e672e 6e65740d   : dreamwing.net.
0x00000080 (00128)   0a0d0a0a                              ....

0x00000000 (00000)   47455420 2f666f72 756d2f73 65617263   GET /forum/searc
0x00000010 (00016)   682e7068 703f6d65 74686f64 3d76616c   h.php?method=val
0x00000020 (00032)   69646174 65266d6f 64653d73 6f782676   idate&mode=sox&v
0x00000030 (00048)   3d303233 26736f78 3d336361 33373830   =023&sox=3ca3780
0x00000040 (00064)   31204854 54502f31 2e300d0a 41636365   1 HTTP/1.0..Acce
0x00000050 (00080)   70743a20 2a2f2a0d 0a436f6e 6e656374   pt: */*..Connect
0x00000060 (00096)   696f6e3a 20636c6f 73650d0a 486f7374   ion: close..Host
0x00000070 (00112)   3a206472 65616d6c 6164792e 6e65740d   : dreamlady.net.
0x00000080 (00128)   0a0d0a0a                              ....

0x00000000 (00000)   47455420 2f666f72 756d2f73 65617263   GET /forum/searc
0x00000010 (00016)   682e7068 703f6d65 74686f64 3d76616c   h.php?method=val
0x00000020 (00032)   69646174 65266d6f 64653d73 6f782676   idate&mode=sox&v
0x00000030 (00048)   3d303233 26736f78 3d336361 33373830   =023&sox=3ca3780
0x00000040 (00064)   31204854 54502f31 2e300d0a 41636365   1 HTTP/1.0..Acce
0x00000050 (00080)   70743a20 2a2f2a0d 0a436f6e 6e656374   pt: */*..Connect
0x00000060 (00096)   696f6e3a 20636c6f 73650d0a 486f7374   ion: close..Host
0x00000070 (00112)   3a206472 65616d66 6973682e 6e65740d   : dreamfish.net.
0x00000080 (00128)   0a0d0a0a                              ....

0x00000000 (00000)   47455420 2f666f72 756d2f73 65617263   GET /forum/searc
0x00000010 (00016)   682e7068 703f6d65 74686f64 3d76616c   h.php?method=val
0x00000020 (00032)   69646174 65266d6f 64653d73 6f782676   idate&mode=sox&v
0x00000030 (00048)   3d303233 26736f78 3d336361 33373830   =023&sox=3ca3780
0x00000040 (00064)   31204854 54502f31 2e300d0a 41636365   1 HTTP/1.0..Acce
0x00000050 (00080)   70743a20 2a2f2a0d 0a436f6e 6e656374   pt: */*..Connect
0x00000060 (00096)   696f6e3a 20636c6f 73650d0a 486f7374   ion: close..Host
0x00000070 (00112)   3a206875 6d616e70 6169642e 6e65740d   : humanpaid.net.
0x00000080 (00128)   0a0d0a0a                              ....

0x00000000 (00000)   47455420 2f666f72 756d2f73 65617263   GET /forum/searc
0x00000010 (00016)   682e7068 703f6d65 74686f64 3d76616c   h.php?method=val
0x00000020 (00032)   69646174 65266d6f 64653d73 6f782676   idate&mode=sox&v
0x00000030 (00048)   3d303233 26736f78 3d336361 33373830   =023&sox=3ca3780
0x00000040 (00064)   31204854 54502f31 2e300d0a 41636365   1 HTTP/1.0..Acce
0x00000050 (00080)   70743a20 2a2f2a0d 0a436f6e 6e656374   pt: */*..Connect
0x00000060 (00096)   696f6e3a 20636c6f 73650d0a 486f7374   ion: close..Host
0x00000070 (00112)   3a206861 6972626f 726e2e6e 65740d0a   : hairborn.net..
0x00000080 (00128)   0d0a0a0a                              ....


Strings