Analysis Date2018-04-07 16:39:30
MD541e3179c4e97620103f520f6623843b7
SHA1901e7aff4d575f873d513426c397663ba2bc986b

Static Details:

File typeHTML document, UTF-8 Unicode text, with very long lines, with CRLF, LF line terminators
PEhash
AVArcabit (arcavir)Trojan.GenericKD.30409689
AVAuthentiumJS/FakejQuery.A!Eldorado
AVGrisoft (avg)XPL/Def.DM.90_123
AVAvira (antivir)HTML/Infected.WebPage.Gen6
AVAlwil (avast)Agent-EAO [Trj]
AVAd-AwareTrojan.GenericKD.30409689
AVBitDefenderTrojan.GenericKD.30409689
AVBullGuardTrojan.GenericKD.30409689
AVClamAVNo Virus
AVDr. WebJS.Redirector.304
AVEmsisoftTrojan.GenericKD.30409689
AVMicroWorld (escan)JS:Trojan.JS.Agent.QZY[ZP]
AVCA (E-Trust Ino)No Virus
AVFortinetJS/FakejQuery.BD!tr
AVFrisk (f-prot)No Virus
AVF-SecureTrojan.GenericKD.30409689
AVIkarusTrojan-Downloader.JS.Fakejquery
AVK7No Virus
AVKasperskyTrojan.Script.Generic
AVMalwareBytesError Scanning File
AVMcafeeJS/Redirector.db
AVMicrosoft Security EssentialsTrojan:JS/Redirector
AVNANOTrojan.Script.FalseJQuery.eldvfy
AVNANOTrojan.Script.Redirector.efelwn
AVEset (nod32)JS/TrojanDownloader.FakejQuery.A
AVPadvishNo Virus
AVCAT (quickheal)JS.Redirector.CH
AVRisingNo Virus
AV360 Safehtml.script.facelike.c
AVSUPERAntiSpywareNo Virus
AVSymantecTrojan.Gen.NPE
AVTrend MicroNo Virus
AVTwisterNo Virus
AVVirusBlokAda (vba32)No Virus
AVWindows DefenderTrojan:JS/Redirector
AVZillya!No Virus

Runtime Details:

Screenshot

Process
↳ C:\Windows\System32\lsass.exe

Process
↳ C:\Program Files\Internet Explorer\iexplore.exe

Creates FileC:\Windows\Globalization\Sorting\sortdefault.nls
Creates FileC:\Windows\System32\oleaccrc.dll
Creates FileC:\Users\Phil
Creates FileC:\Users\Phil\AppData\Local
Creates FileC:\Users\Phil\AppData\Local\Microsoft\Windows\Temporary Internet Files
Creates FileC:\Users\Phil
Creates FileC:\Users\Phil\AppData\Roaming
Creates FileC:\Users\Phil\AppData\Roaming\Microsoft\Windows\Cookies
Creates FileC:\Users\Phil
Creates FileC:\Users\Phil\AppData\Local
Creates FileC:\Users\Phil\AppData\Local\Microsoft\Windows\History
Creates FileC:\Users\Phil\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
Creates FileC:\Users\Phil\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
Creates FileC:\Users\Phil\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
Creates File\??\Nsi
Creates FileC:\Program Files\Java\jre6\bin\jp2ssv.dll
Creates FileC:\Program Files\Java\jre6\bin\jp2ssv.dll
Creates FileC:\Users\Phil
Creates FileC:\Users\Phil\Favorites
Creates FileC:\Users\Phil
Creates FileC:\Users\Phil\AppData\Local
Creates FileC:\Users\Phil\AppData\Local\Microsoft\Windows\Temporary Internet Files
Creates FileC:\Users\Phil\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\
Creates FileC:\Users\Phil\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\
Creates FileC:\Users\Phil\AppData\Local\Microsoft\Windows\Temporary Internet Files\
Creates FileC:\Users\Phil\AppData\Local\Microsoft\Windows\Temporary Internet Files\
Creates FileC:\Users\Phil\AppData\Local\Microsoft\Windows\
Creates FileC:\Users\Phil\AppData\Local\Microsoft\Windows\
Creates FileC:\Users\Phil\AppData\Local\Microsoft\
Creates FileC:\Users\Phil\AppData\Local\Microsoft\
Creates FileC:\Users\Phil\AppData\Local\
Creates FileC:\Users\Phil\AppData\Local\
Creates FileC:\Users\Phil\AppData\
Creates FileC:\Users\Phil\AppData\
Creates FileC:\Users\Phil\
Creates FileC:\Users\Phil\
Creates FileC:\Users\
Creates FileC:\Users\
Creates File\??\MountPointManager
Creates FileC:\Users\Phil\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low
Creates FileC:\Users\Phil
Creates FileC:\Users\Phil\AppData\Roaming
Creates FileC:\Users\Phil\AppData\Roaming\Microsoft\Windows\Cookies
Creates FileC:\Users\Phil\AppData\Roaming\Microsoft\Windows\Cookies\Low\
Creates FileC:\Users\Phil\AppData\Roaming\Microsoft\Windows\Cookies\Low\
Creates FileC:\Users\Phil\AppData\Roaming\Microsoft\Windows\Cookies\
Creates FileC:\Users\Phil\AppData\Roaming\Microsoft\Windows\Cookies\
Creates FileC:\Users\Phil\AppData\Roaming\Microsoft\Windows\
Creates FileC:\Users\Phil\AppData\Roaming\Microsoft\Windows\
Creates FileC:\Users\Phil\AppData\Roaming\Microsoft\
Creates FileC:\Users\Phil\AppData\Roaming\Microsoft\
Creates FileC:\Users\Phil\AppData\Roaming\
Creates FileC:\Users\Phil\AppData\Roaming\
Creates FileC:\Users\Phil\AppData\
Creates FileC:\Users\Phil\AppData\
Creates FileC:\Users\Phil\
Creates FileC:\Users\Phil\
Creates FileC:\Users\
Creates FileC:\Users\
Creates File\??\MountPointManager
Creates FileC:\Users\Phil\AppData\Roaming\Microsoft\Windows\Cookies\Low
Creates FileC:\Users\Phil
Creates FileC:\Users\Phil\AppData\Local
Creates FileC:\Users\Phil\AppData\Local\Microsoft\Windows\History
Creates FileC:\Users\Phil\AppData\Local\Microsoft\Windows\History\Low\
Creates FileC:\Users\Phil\AppData\Local\Microsoft\Windows\History\Low\
Creates FileC:\Users\Phil\AppData\Local\Microsoft\Windows\History\
Creates FileC:\Users\Phil\AppData\Local\Microsoft\Windows\History\
Creates FileC:\Users\Phil\AppData\Local\Microsoft\Windows\
Creates FileC:\Users\Phil\AppData\Local\Microsoft\Windows\
Creates FileC:\Users\Phil\AppData\Local\Microsoft\
Creates FileC:\Users\Phil\AppData\Local\Microsoft\
Creates FileC:\Users\Phil\AppData\Local\
Creates FileC:\Users\Phil\AppData\Local\
Creates FileC:\Users\Phil\AppData\
Creates FileC:\Users\Phil\AppData\
Creates FileC:\Users\Phil\
Creates FileC:\Users\Phil\
Creates FileC:\Users\
Creates FileC:\Users\
Creates File\??\MountPointManager
Creates FileC:\Users\Phil\AppData\Local\Microsoft\Windows\History\Low
Creates FileC:\Users\Phil
Creates FileC:\Users\Phil\Favorites
Creates FileC:\Users\Phil\Favorites\
Creates FileC:\Users\Phil\Favorites\
Creates FileC:\Users\Phil\
Creates FileC:\Users\Phil\
Creates FileC:\Users\
Creates FileC:\Users\
Creates File\??\MountPointManager
Creates FileC:\Users\Phil\Favorites
Creates FileC:\Users\Phil
Creates FileC:\Users\Phil\AppData\Local
Creates FileC:\Users\Phil\AppData\Local\Microsoft\Windows\Temporary Internet Files
Creates FileC:\Users\Phil\AppData\Local\Microsoft\Windows\Temporary Internet Files\Virtualized\
Creates FileC:\Users\Phil\AppData\Local\Microsoft\Windows\Temporary Internet Files\Virtualized\
Creates FileC:\Users\Phil\AppData\Local\Microsoft\Windows\Temporary Internet Files\
Creates FileC:\Users\Phil\AppData\Local\Microsoft\Windows\Temporary Internet Files\
Creates FileC:\Users\Phil\AppData\Local\Microsoft\Windows\
Creates FileC:\Users\Phil\AppData\Local\Microsoft\Windows\
Creates FileC:\Users\Phil\AppData\Local\Microsoft\
Creates FileC:\Users\Phil\AppData\Local\Microsoft\
Creates FileC:\Users\Phil\AppData\Local\
Creates FileC:\Users\Phil\AppData\Local\
Creates FileC:\Users\Phil\AppData\
Creates FileC:\Users\Phil\AppData\
Creates FileC:\Users\Phil\
Creates FileC:\Users\Phil\
Creates FileC:\Users\
Creates FileC:\Users\
Creates File\??\MountPointManager
Creates FileC:\Users\Phil\AppData\Local\Microsoft\Windows\Temporary Internet Files\Virtualized
Creates FileC:\Users\Phil\AppData\Roaming\Microsoft\Windows\PrivacIE
Creates FileC:\Users\Phil\AppData\Roaming\Microsoft\Windows\PrivacIE\Low\
Creates FileC:\Users\Phil\AppData\Roaming\Microsoft\Windows\PrivacIE\Low\
Creates FileC:\Users\Phil\AppData\Roaming\Microsoft\Windows\PrivacIE\
Creates FileC:\Users\Phil\AppData\Roaming\Microsoft\Windows\PrivacIE\
Creates FileC:\Users\Phil\AppData\Roaming\Microsoft\Windows\
Creates FileC:\Users\Phil\AppData\Roaming\Microsoft\Windows\
Creates FileC:\Users\Phil\AppData\Roaming\Microsoft\
Creates FileC:\Users\Phil\AppData\Roaming\Microsoft\
Creates FileC:\Users\Phil\AppData\Roaming\
Creates FileC:\Users\Phil\AppData\Roaming\
Creates FileC:\Users\Phil\AppData\
Creates FileC:\Users\Phil\AppData\
Creates FileC:\Users\Phil\
Creates FileC:\Users\Phil\
Creates FileC:\Users\
Creates FileC:\Users\
Creates File\??\MountPointManager
Creates FileC:\Users\Phil\AppData\Roaming\Microsoft\Windows\PrivacIE\Low
Creates FileC:\Users\Phil\AppData\Roaming\Microsoft\Windows\IECompatCache
Creates FileC:\Users\Phil\AppData\Roaming\Microsoft\Windows\IECompatCache\Low\
Creates FileC:\Users\Phil\AppData\Roaming\Microsoft\Windows\IECompatCache\Low\
Creates FileC:\Users\Phil\AppData\Roaming\Microsoft\Windows\IECompatCache\
Creates FileC:\Users\Phil\AppData\Roaming\Microsoft\Windows\IECompatCache\
Creates FileC:\Users\Phil\AppData\Roaming\Microsoft\Windows\
Creates FileC:\Users\Phil\AppData\Roaming\Microsoft\Windows\
Creates FileC:\Users\Phil\AppData\Roaming\Microsoft\
Creates FileC:\Users\Phil\AppData\Roaming\Microsoft\
Creates FileC:\Users\Phil\AppData\Roaming\
Creates FileC:\Users\Phil\AppData\Roaming\
Creates FileC:\Users\Phil\AppData\
Creates FileC:\Users\Phil\AppData\
Creates FileC:\Users\Phil\
Creates FileC:\Users\Phil\
Creates FileC:\Users\
Creates FileC:\Users\
Creates File\??\MountPointManager
Creates FileC:\Users\Phil\AppData\Roaming\Microsoft\Windows\IECompatCache\Low
Creates FileC:\Users\Phil\AppData\Roaming\Microsoft\Windows\IETldCache
Creates FileC:\Users\Phil\AppData\Roaming\Microsoft\Windows\IETldCache\Low\
Creates FileC:\Users\Phil\AppData\Roaming\Microsoft\Windows\IETldCache\Low\
Creates FileC:\Users\Phil\AppData\Roaming\Microsoft\Windows\IETldCache\
Creates FileC:\Users\Phil\AppData\Roaming\Microsoft\Windows\IETldCache\
Creates FileC:\Users\Phil\AppData\Roaming\Microsoft\Windows\
Creates FileC:\Users\Phil\AppData\Roaming\Microsoft\Windows\
Creates FileC:\Users\Phil\AppData\Roaming\Microsoft\
Creates FileC:\Users\Phil\AppData\Roaming\Microsoft\
Creates FileC:\Users\Phil\AppData\Roaming\
Creates FileC:\Users\Phil\AppData\Roaming\
Creates FileC:\Users\Phil\AppData\
Creates FileC:\Users\Phil\AppData\
Creates FileC:\Users\Phil\
Creates FileC:\Users\Phil\
Creates FileC:\Users\
Creates FileC:\Users\
Creates File\??\MountPointManager
Creates FileC:\Users\Phil\AppData\Roaming\Microsoft\Windows\IETldCache\Low
Creates FileC:\Users\Phil\AppData\Local\Temp\Low\
Creates FileC:\Users\Phil\AppData\Local\Temp\Low\
Creates FileC:\Users\Phil\AppData\Local\Temp\
Creates FileC:\Users\Phil\AppData\Local\Temp\
Creates FileC:\Users\Phil\AppData\Local\
Creates FileC:\Users\Phil\AppData\Local\
Creates FileC:\Users\Phil\AppData\
Creates FileC:\Users\Phil\AppData\
Creates FileC:\Users\Phil\
Creates FileC:\Users\Phil\
Creates FileC:\Users\
Creates FileC:\Users\
Creates File\??\MountPointManager
Creates FileC:\Users\Phil\AppData\Local\Temp\Low
Creates File\Device\Afd\Endpoint
Creates File\Device\Afd\Endpoint
Creates File\Device\RasAcd
Creates File\Device\Afd\Endpoint
Creates File\Device\Afd\Endpoint
Creates File\Device\Afd\Endpoint
Creates File\Device\RasAcd
Creates File\Device\Afd\Endpoint
Creates FileC:\Users\Phil
Creates File\DEVICE\NETBT_TCPIP_{7035D925-FEB8-4F15-A864-01A2CAB79F18}
Creates FileC:\Users\Phil\Favorites
Creates File\DEVICE\NETBT_TCPIP_{846EE342-7039-11DE-9D20-806E6F6E6963}
Creates File\DEVICE\NETBT_TCPIP_{A0D04DC6-852C-4BAF-AC46-66898A1F54B8}
Creates File\DEVICE\NETBT_TCPIP_{7035D925-FEB8-4F15-A864-01A2CAB79F18}
Creates File\DEVICE\NETBT_TCPIP_{846EE342-7039-11DE-9D20-806E6F6E6963}
Creates File\DEVICE\NETBT_TCPIP_{A0D04DC6-852C-4BAF-AC46-66898A1F54B8}
Creates File\??\MountPointManager
Creates FileC:\
Creates FileC:\Users\Phil\AppData\Local\Microsoft\Windows\Caches
Creates FileC:\Users\Phil\AppData\Local\Microsoft\Windows\Caches\cversions.1.db
Creates FileC:\Users\Phil\AppData\Local\Microsoft\Windows\Caches\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000001.db
Creates FileC:\Users\desktop.ini
Creates FileC:\Users
Creates FileC:\Users\Phil
Creates FileC:\Users\Phil\AppData
Creates FileC:\Users\Phil\AppData\Local
Creates FileC:\Users\Phil\AppData\Local\Temp
Creates FileC:\Windows\System32\url.dll
Creates FileC:\Windows\Fonts\staticcache.dat
Creates FileC:\Windows\System32\en-US\urlmon.dll.mui
Creates File\??\MountPointManager
Creates FileC:\
Creates FileC:\Users
Creates FileC:\Users\Phil
Creates FileC:\Users\Phil\Favorites\desktop.ini
Creates FileC:\Users\Phil\Favorites
Creates FileC:\Users\Phil\Favorites\Links\desktop.ini
Creates FileC:\Users\Phil\Favorites\Links\desktop.ini
Creates FileC:\Users\Phil\Favorites\Links
Creates FileC:\Users\Phil\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{039F90AE-3A56-11E8-98F1-52540015BC53}.dat
Creates FileC:\Users\Phil\AppData\Local\Temp\~DF0FB72610F3232F0C.TMP
Creates File\Device\Afd\Endpoint
Creates File\Device\Afd\Endpoint
Creates File\Device\RasAcd
Creates File\Device\NetBT_Tcpip_{7035D925-FEB8-4F15-A864-01A2CAB79F18}
Creates File\Device\NetBT_Tcpip6_{A0D04DC6-852C-4BAF-AC46-66898A1F54B8}
Creates File\Device\NetBT_Tcpip6_{7035D925-FEB8-4F15-A864-01A2CAB79F18}
Creates File\Device\Afd\Endpoint
Creates File\Device\Afd\Endpoint
Creates File\Device\RasAcd
Creates File\Device\Afd\Endpoint
Creates FileC:\Windows\System32\ieframe.dll
Creates FileC:\Windows\System32\stdole2.tlb
Creates FileC:\Users\Phil\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{039F90AF-3A56-11E8-98F1-52540015BC53}.dat
Creates FileC:\Users\Phil\AppData\Local\Temp\~DF73F377517B8A9755.TMP
Creates File\??\MountPointManager
Creates File\??\MountPointManager
Creates File\??\MountPointManager
Creates File\??\MountPointManager
Creates File\??\MountPointManager
Creates File\??\MountPointManager
Creates File\??\MountPointManager
Creates File\??\MountPointManager
Creates File\??\MountPointManager
Creates File\??\MountPointManager
Creates File\??\MountPointManager
Creates FileC:\
Creates FileC:\Users\desktop.ini
Creates FileC:\Users
Creates FileC:\Users\Phil
Creates FileC:\
Creates FileC:\Users
Creates FileC:\Users\Phil
Creates FileC:\Users\Phil\Favorites\desktop.ini
Creates FileC:\Users\Phil\Favorites\desktop.ini
Creates FileC:\Users\Phil\Desktop\desktop.ini
Creates FileC:\
Creates FileC:\Users\Phil\Desktop\desktop.ini
Creates FileC:\Users
Creates FileC:\Users\Phil
Creates FileC:\Users\Phil\Favorites
Creates FileC:\Users\Phil\AppData\Local\Microsoft\Internet Explorer\frameiconcache.dat
Creates FileC:\Users\Phil\Favorites
Creates FileC:\Users\Phil\Favorites\Links\desktop.ini
Creates FileC:\Users\Phil\Favorites\Links
Creates FileC:\Users\Phil\Favorites\Links
Creates FileC:\Users\Phil\Favorites\Links
Creates FileC:\Users\Phil
Creates FileC:\Users\Phil\Favorites
Creates FileC:\Users\Phil\AppData\Local\Microsoft\Feeds
Creates FileC:\Users\Phil\AppData\Local\Microsoft\Feeds\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\WebSlices~
Creates FileC:\Users\Phil
Creates FileC:\Users\Phil\Favorites
Creates FileC:\Users\Phil
Creates FileC:\Users\Phil\Favorites
Creates FileC:\Users\Phil
Creates FileC:\Users\Phil\Favorites
Creates FileC:\Users\Phil
Creates FileC:\Users\Phil\Favorites
Creates FileC:\Users\Phil\Favorites\Links\Suggested Sites.url
Creates FileC:\Users\Phil\Favorites\Links\Web Slice Gallery.url
Creates FileC:\Users\Phil\Favorites\Links for United States\GobiernoUSA.gov.url
Creates FileC:\Users\Phil\Favorites\Links for United States\USA.gov.url
Creates FileC:\Users\Phil\Favorites\Microsoft Websites\IE Add-on site.url
Creates FileC:\Users\Phil\Favorites\Microsoft Websites\IE site on Microsoft.com.url
Creates FileC:\Users\Phil\Favorites\Microsoft Websites\Microsoft At Home.url
Creates FileC:\Users\Phil\Favorites\Microsoft Websites\Microsoft At Work.url
Creates FileC:\Users\Phil\Favorites\Microsoft Websites\Microsoft Store.url
Creates FileC:\Users\Phil\Favorites\MSN Websites\MSN Autos.url
Creates FileC:\Users\Phil\Favorites\MSN Websites\MSN Entertainment.url
Creates FileC:\Users\Phil\Favorites\MSN Websites\MSN Money.url
Creates FileC:\Users\Phil\Favorites\MSN Websites\MSN Sports.url
Creates FileC:\Users\Phil\Favorites\MSN Websites\MSN.url
Creates FileC:\Users\Phil\Favorites\MSN Websites\MSNBC News.url
Creates FileC:\Users\Phil\Favorites\Windows Live\Get Windows Live.url
Creates FileC:\Users\Phil\Favorites\Windows Live\Windows Live Gallery.url
Creates FileC:\Users\Phil\Favorites\Windows Live\Windows Live Mail.url
Creates FileC:\Users\Phil\Favorites\Windows Live\Windows Live Spaces.url

Process
↳ C:\Program Files\Internet Explorer\iexplore.exe

Creates FileC:\Windows\Globalization\Sorting\sortdefault.nls
Creates FileC:\Windows\System32\oleaccrc.dll
Creates File\??\MountPointManager
Creates FileC:\
Creates FileC:\Windows\System32\rsaenh.dll
Creates FileC:\Users\Phil\AppData\Local\Microsoft\Windows\Caches
Creates File\??\MountPointManager
Creates File\??\MountPointManager
Creates File\??\MountPointManager
Creates File\??\MountPointManager
Creates File\??\MountPointManager
Creates File\??\MountPointManager
Creates File\??\MountPointManager
Creates File\??\MountPointManager
Creates File\??\MountPointManager
Creates File\??\MountPointManager
Creates File\??\MountPointManager
Creates FileC:\Users\Phil\AppData\Local\Microsoft\Windows\Caches\cversions.1.db
Creates FileC:\Users\Phil
Creates FileC:\Users\Phil\AppData\Local
Creates FileC:\Users\Phil\AppData\Local\Microsoft\Windows\Caches\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000001.db
Creates FileC:\Users\desktop.ini
Creates FileC:\Users
Creates FileC:\Users\Phil
Creates FileC:\Users\Phil\AppData\Local\Microsoft\Windows\Temporary Internet Files
Creates FileC:\Users\Phil
Creates FileC:\Users\Phil\AppData\Roaming
Creates FileC:\Users\Phil\AppData\Roaming\Microsoft\Windows\Cookies
Creates FileC:\Users\Phil
Creates FileC:\Users\Phil\AppData\Local
Creates FileC:\Users\Phil\AppData\Local\Microsoft\Windows\History
Creates FileC:\Users\Phil\Favorites\desktop.ini
Creates FileC:\Users\Phil\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
Creates FileC:\Users\Phil\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
Creates FileC:\Users\Phil\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
Creates FileC:\Users\Phil\Desktop\desktop.ini
Creates FileC:\Windows\Fonts\staticcache.dat
Creates FileC:\Windows\AppPatch\AppPatch64\sysmain.sdb
Creates FileC:\Program Files\Java\jre6\bin\jp2ssv.dll
Creates FileC:\Users\Phil\AppData\Local\Microsoft\Feeds Cache\index.dat
Creates FileC:\Windows\System32\en-US\urlmon.dll.mui
Creates FileC:\Users\Phil\AppData\Local\Temp\901e7aff4d575f873d513426c397663ba2bc986b.html
Creates FileC:\Users\Phil\AppData\Local\Temp\901e7aff4d575f873d513426c397663ba2bc986b.html
Creates FileC:\Users\Phil\AppData\Local\Temp\901e7aff4d575f873d513426c397663ba2bc986b.html
Creates FileC:\Windows\Media\Windows Information Bar.wav
Creates File\Device\Afd\Endpoint
Creates FileC:\Users\Phil\Desktop\wdmaud.drv
Creates FileC:\Windows\System32\wdmaud.drv
Creates FileC:\Users\Phil\Desktop\wdmaud.drv
Creates FileC:\Windows\System32\wdmaud.drv
Creates FileC:\Users\Phil\Desktop\wdmaud.drv
Creates FileC:\Windows\System32\wdmaud.drv
Creates FileC:\Windows\System32\en-US\wdmaud.drv.mui
Creates FileC:\Windows\System32\en-US\MMDevAPI.DLL.mui
Creates File\??\Nsi
Creates FileC:\Users\Phil\Desktop\wdmaud.drv
Creates FileC:\Windows\System32\wdmaud.drv
Creates File\Device\Afd\Endpoint
Creates File\Device\Afd\Endpoint
Creates FileC:\Users\Phil\Desktop\wdmaud.drv
Creates FileC:\Windows\System32\wdmaud.drv
Creates FileC:\Users\Phil\Desktop\wdmaud.drv
Creates FileC:\Windows\System32\wdmaud.drv
Creates File\Device\RasAcd
Creates File\Device\Afd\Endpoint
Creates File\Device\Afd\Endpoint
Creates File\Device\Afd\Endpoint
Creates File\Device\RasAcd
Creates File\Device\Afd\Endpoint
Creates File\Device\Afd\Endpoint
Creates File\Device\Afd\Endpoint
Creates File\Device\RasAcd
Creates FileC:\
Creates FileC:\Users
Creates FileC:\Users\Phil
Creates FileC:\Users\Phil\AppData
Creates FileC:\Users\Phil\AppData\Local
Creates FileC:\Users\Phil\AppData\Local\Temp
Creates File\Device\Afd\Endpoint
Creates File\Device\Afd\Endpoint
Creates File\Device\Afd\Endpoint
Creates File\Device\Afd\AsyncConnectHlp
Creates FileC:\Users\Phil\AppData\Local\Temp\901e7aff4d575f873d513426c397663ba2bc986b.html
Creates File\Device\Afd\Endpoint
Creates File\Device\Afd\Endpoint
Creates File\Device\Afd\Endpoint
Creates File\Device\Afd\Endpoint
Creates FileC:\Users\Phil\AppData\Local\Temp\901e7aff4d575f873d513426c397663ba2bc986b.html
Creates FileC:\Users\Phil\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZV6J2I17\ie[1].htm
Creates FileC:\Users\Phil\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZV6J2I17\ie[1].htm
Creates FileC:\Users\Phil\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZV6J2I17\html5[1].htm
Creates FileC:\Users\Phil\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZV6J2I17\html5[1].htm
Creates FileC:\Users\Phil\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZV6J2I17\style[1].htm
Creates FileC:\Users\Phil\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZV6J2I17\style[1].htm
Creates FileC:\Users\Phil\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZV6J2I17\jquery-migrate.min[1].htm
Creates FileC:\Users\Phil\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZV6J2I17\jquery-migrate.min[1].htm
Creates FileC:\Users\Phil\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZV6J2I17\jquery[1].htm
Creates FileC:\Users\Phil\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZV6J2I17\jquery[1].htm
Creates FileC:\Users\Phil\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZV6J2I17\html5[1].htm
Creates FileC:\Users\Phil\AppData\Local\Temp\901e7aff4d575f873d513426c397663ba2bc986b.html
Creates File\Device\Afd\Endpoint
Creates FileC:\Users\Phil\AppData\Local\Temp\901e7aff4d575f873d513426c397663ba2bc986b.html
Creates FileC:\Windows\System32\en-US\jscript.dll.mui
Creates FileC:\Users\Phil\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\STN7NUQY\genericons[1].htm
Creates FileC:\Users\Phil\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\STN7NUQY\genericons[1].htm
Creates File\Device\Afd\Endpoint
Creates FileC:\Users\Phil\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\STN7NUQY\genericons[1].htm
Creates FileC:\Users\Phil\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZV6J2I17\style[1].htm
Creates FileC:\Users\Phil\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZV6J2I17\ie[1].htm
Creates FileC:\Users\Phil\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZV6J2I17\jquery[1].htm
Creates FileC:\Users\Phil\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZV6J2I17\jquery-migrate.min[1].htm
Creates File\Device\Afd\Endpoint
Creates File\Device\Afd\Endpoint
Creates File\Device\Afd\Endpoint
Creates File\Device\Afd\Endpoint
Creates File\Device\Afd\Endpoint
Creates FileC:\Users\Phil\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DRPAQY7Q\wp-emoji-release.min[1].htm
Creates FileC:\Users\Phil\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DRPAQY7Q\wp-emoji-release.min[1].htm
Creates File\Device\Afd\Endpoint
Creates FileC:\Windows\System32\en-US\MLANG.dll.mui
Creates FileC:\Users\Phil\AppData\Local\Microsoft\Internet Explorer\MSIMGSIZ.DAT
Creates FileC:\Users\Phil\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\G6Z7NI6K\Picture3[1].png
Creates FileC:\Users\Phil\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\G6Z7NI6K\Picture1[1].png
Creates FileC:\Users\Phil\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\G6Z7NI6K\Picture2[1].png
Creates FileC:\Users\Phil\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\G6Z7NI6K\Picture6[1].png
Creates File\Device\Afd\Endpoint
Creates File\Device\Afd\Endpoint
Creates FileC:\Users\Phil\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\G6Z7NI6K\Picture7[1].png
Creates FileC:\Users\Phil\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\STN7NUQY\cary[1].jpg
Creates FileC:\Users\Phil\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DRPAQY7Q\wp-emoji-release.min[1].htm
Creates FileC:\Windows\SysWOW64\Macromed\Flash\ss.sgn
Creates FileC:\Windows\SysWOW64\Macromed\Flash\ss.cfg
Creates FileC:\Windows\SysWOW64\Macromed\Flash\ss.sgn
Creates FileC:\Windows\SysWOW64\Macromed\Flash\mms.cfg
Creates FileC:\Windows\SysWOW64\Macromed\Flash\oem.cfg
Creates FileC:\Windows\SysWOW64\Macromed\Flash\oem.cfg
Creates FileC:\Windows\SysWOW64\oem.cfg
Creates FileC:\Windows\SysWOW64\oem.cfg
Creates FileC:\Users\Phil\telemetry.cfg
Creates FileC:\Users\Phil\telemetry.cfg
Creates FileC:\Users\Phil\AppData\Roaming\Adobe\Flash Player\AFCache
Creates FileC:\Users\Phil\AppData\Roaming\Adobe\Flash Player
Creates FileC:\Users\Phil\AppData\Roaming\Adobe\Flash Player\AFCache
Creates FileC:\Users\Phil\AppData\Roaming\Adobe\Flash Player\AFCache
Creates FileC:\Users\Phil\AppData\Roaming\Adobe\Flash Player\AssetCache
Creates FileC:\Users\Phil\AppData\Roaming\Adobe\Flash Player\AssetCache\WM8EYLRE
Creates FileC:\Users\Phil\AppData\Roaming\Adobe\Flash Player\AssetCache
Creates FileC:\Users\Phil\AppData\Roaming\Adobe\Flash Player\AssetCache\WM8EYLRE
Creates FileC:\Users\Phil\AppData\Roaming\Adobe\Flash Player\AssetCache\WM8EYLRE
Creates FileC:\Windows\System32\Macromed\Flash\Flash64_11_3_300_268.ocx
Creates FileC:\Windows\System32\stdole2.tlb
Creates FileC:\Program Files\Internet Explorer\iexplore.exe
Creates FileC:\Program Files\Internet Explorer\iexplore.exe
Creates FileC:\Program Files\Internet Explorer\iexplore.exe
Creates FileC:\Windows\SysWOW64\Macromed\Flash\FlashAuthor.cfg
Creates FileC:\Windows\SysWOW64\Macromed\Flash\FlashAuthor.cfg
Creates FileC:\Users\Phil\AppData\Roaming\Macromedia\Flash Player\#Security\FlashAuthor.cfg
Creates FileC:\Users\Phil\AppData\Roaming\Macromedia\Flash Player\#Security\FlashAuthor.cfg
Creates FileC:\Users\Phil\AppData\Roaming\Macromedia\Flash Player\#SharedObjects
Creates FileC:\Users\Phil\AppData\Roaming\Macromedia\Flash Player
Creates FileC:\Users\Phil\AppData\Roaming\Macromedia
Creates FileC:\Users\Phil\AppData\Roaming
Creates FileC:\Users\Phil\AppData\Roaming\Macromedia
Creates FileC:\Users\Phil\AppData\Roaming\Macromedia
Creates FileC:\Users\Phil\AppData\Roaming\Macromedia\Flash Player
Creates FileC:\Users\Phil\AppData\Roaming\Macromedia\Flash Player
Creates FileC:\Users\Phil\AppData\Roaming\Macromedia\Flash Player\#SharedObjects
Creates FileC:\Users\Phil\AppData\Roaming\Macromedia\Flash Player\#SharedObjects
Creates FileC:\Users\Phil\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\9N3UPC8F
Creates FileC:\Users\Phil\AppData\Roaming\Macromedia\Flash Player\#SharedObjects
Creates FileC:\Users\Phil\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\9N3UPC8F
Creates FileC:\Users\Phil\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\9N3UPC8F
Creates FileC:\Users\Phil\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\9N3UPC8F\macromedia.com\support\flashplayer\sys\settings.sol
Creates FileC:\Users\Phil\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sol
Creates FileC:\Users\Phil\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sol
Creates FileC:\Users\Phil\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys
Creates FileC:\Users\Phil\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer
Creates FileC:\Users\Phil\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support
Creates FileC:\Users\Phil\AppData\Roaming\Macromedia\Flash Player\macromedia.com
Creates FileC:\Users\Phil\AppData\Roaming\Macromedia\Flash Player
Creates FileC:\Users\Phil\AppData\Roaming\Macromedia\Flash Player\macromedia.com
Creates FileC:\Users\Phil\AppData\Roaming\Macromedia\Flash Player\macromedia.com
Creates FileC:\Users\Phil\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support
Creates FileC:\Users\Phil\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support
Creates FileC:\Users\Phil\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer
Creates FileC:\Users\Phil\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer
Creates FileC:\Users\Phil\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys
Creates FileC:\Users\Phil\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys
Creates FileC:\Users\Phil\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sxx
Creates FileC:\Users\Phil\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys
Creates FileC:\Users\Phil\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sxx
Creates FileC:\Users\Phil\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys
Creates FileC:\Users\Phil\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sxx
Creates FileC:\Users\Phil\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys
Creates FileC:\Users\Phil\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sxx
Creates FileC:\Users\Phil\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys
Creates FileC:\Users\Phil\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sxx
Creates FileC:\Users\Phil\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys
Creates FileC:\Users\Phil\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sxx
Creates FileC:\Users\Phil\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys
Creates FileC:\Users\Phil\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sxx
Creates FileC:\Users\Phil\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys
Creates FileC:\Users\Phil\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sxx
Creates FileC:\Users\Phil\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys
Creates FileC:\Users\Phil\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sxx
Creates FileC:\Users\Phil\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys
Creates FileC:\Users\Phil\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sxx
Creates FileC:\Users\Phil\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys
Creates FileC:\Users\Phil\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sxx
Creates FileC:\Users\Phil\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys
Creates FileC:\Users\Phil\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sxx
Creates FileC:\Users\Phil\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys
Creates FileC:\Users\Phil\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sxx
Creates FileC:\Users\Phil\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys
Creates FileC:\Users\Phil\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sxx
Creates FileC:\Users\Phil\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys
Creates FileC:\Users\Phil\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sxx
Creates FileC:\Users\Phil\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys
Creates FileC:\Users\Phil\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sxx
Creates FileC:\Users\Phil\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys
Creates FileC:\Users\Phil\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sxx
Creates FileC:\Users\Phil\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys
Creates FileC:\Users\Phil\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sxx
Creates FileC:\Users\Phil\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys
Creates FileC:\Users\Phil\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sxx
Creates FileC:\Users\Phil\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys
Creates FileC:\Users\Phil\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sxx
Creates FileC:\Users\Phil\AppData\Roaming\Adobe\Flash Player\AFCache
Creates FileC:\Users\Phil\AppData\Roaming\Adobe\Flash Player\AssetCache
Creates File\Device\Afd\Endpoint
Creates File\Device\Afd\Endpoint
Creates FileC:\Users\Phil\AppData\Roaming\Macromedia\Flash Player\#SharedObjects
Creates File\Device\RasAcd
Creates FileC:\Users\Phil\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\9N3UPC8F\macromedia.com\support\flashplayer\sys\settings.sol
Creates FileC:\Users\Phil\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sol
Creates FileC:\Users\Phil\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sol
Creates FileC:\Users\Phil\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sol
Creates File\Device\Afd\Endpoint
Creates File\Device\Afd\Endpoint
Creates File\Device\Afd\Endpoint
Creates File\Device\Afd\Endpoint

Network Details:


Raw Pcap
0x00000000 (00000)   47455420 2f6e6373 692e7478 74204854   GET /ncsi.txt HT
0x00000010 (00016)   54502f31 2e310d0a 436f6e6e 65637469   TP/1.1..Connecti
0x00000020 (00032)   6f6e3a20 436c6f73 650d0a55 7365722d   on: Close..User-
0x00000030 (00048)   4167656e 743a204d 6963726f 736f6674   Agent: Microsoft
0x00000040 (00064)   204e4353 490d0a48 6f73743a 20777777    NCSI..Host: www
0x00000050 (00080)   2e6d7366 746e6373 692e636f 6d0d0a0d   .msftncsi.com...
0x00000060 (00096)   0a                                    .

0x00000000 (00000)   47455420 2f77702d 636f6e74 656e742f   GET /wp-content/
0x00000010 (00016)   7468656d 65732f74 77656e74 79666966   themes/twentyfif
0x00000020 (00032)   7465656e 2f6a732f 68746d6c 352e6a73   teen/js/html5.js
0x00000030 (00048)   20485454 502f312e 310d0a41 63636570    HTTP/1.1..Accep
0x00000040 (00064)   743a202a 2f2a0d0a 41636365 70742d4c   t: */*..Accept-L
0x00000050 (00080)   616e6775 6167653a 20656e2d 55530d0a   anguage: en-US..
0x00000060 (00096)   55736572 2d416765 6e743a20 4d6f7a69   User-Agent: Mozi
0x00000070 (00112)   6c6c612f 342e3020 28636f6d 70617469   lla/4.0 (compati
0x00000080 (00128)   626c653b 204d5349 4520382e 303b2057   ble; MSIE 8.0; W
0x00000090 (00144)   696e646f 7773204e 5420362e 313b2057   indows NT 6.1; W
0x000000a0 (00160)   696e3634 3b207836 343b2054 72696465   in64; x64; Tride
0x000000b0 (00176)   6e742f34 2e303b20 2e4e4554 20434c52   nt/4.0; .NET CLR
0x000000c0 (00192)   20322e30 2e353037 32373b20 534c4343    2.0.50727; SLCC
0x000000d0 (00208)   323b202e 4e455420 434c5220 332e352e   2; .NET CLR 3.5.
0x000000e0 (00224)   33303732 393b202e 4e455420 434c5220   30729; .NET CLR 
0x000000f0 (00240)   332e302e 33303732 393b204d 65646961   3.0.30729; Media
0x00000100 (00256)   2043656e 74657220 50432036 2e30290d    Center PC 6.0).
0x00000110 (00272)   0a55412d 4350553a 20414d44 36340d0a   .UA-CPU: AMD64..
0x00000120 (00288)   41636365 70742d45 6e636f64 696e673a   Accept-Encoding:
0x00000130 (00304)   20677a69 702c2064 65666c61 74650d0a    gzip, deflate..
0x00000140 (00320)   486f7374 3a207777 772e6c61 70746f70   Host: www.laptop
0x00000150 (00336)   69612e6f 72670d0a 436f6e6e 65637469   ia.org..Connecti
0x00000160 (00352)   6f6e3a20 4b656570 2d416c69 76650d0a   on: Keep-Alive..
0x00000170 (00368)   0d0a                                  ..

0x00000000 (00000)   47455420 2f77702d 636f6e74 656e742f   GET /wp-content/
0x00000010 (00016)   7468656d 65732f74 77656e74 79666966   themes/twentyfif
0x00000020 (00032)   7465656e 2f737479 6c652e63 73733f76   teen/style.css?v
0x00000030 (00048)   65723d34 2e322e31 39204854 54502f31   er=4.2.19 HTTP/1
0x00000040 (00064)   2e310d0a 41636365 70743a20 2a2f2a0d   .1..Accept: */*.
0x00000050 (00080)   0a416363 6570742d 4c616e67 75616765   .Accept-Language
0x00000060 (00096)   3a20656e 2d55530d 0a557365 722d4167   : en-US..User-Ag
0x00000070 (00112)   656e743a 204d6f7a 696c6c61 2f342e30   ent: Mozilla/4.0
0x00000080 (00128)   2028636f 6d706174 69626c65 3b204d53    (compatible; MS
0x00000090 (00144)   49452038 2e303b20 57696e64 6f777320   IE 8.0; Windows 
0x000000a0 (00160)   4e542036 2e313b20 57696e36 343b2078   NT 6.1; Win64; x
0x000000b0 (00176)   36343b20 54726964 656e742f 342e303b   64; Trident/4.0;
0x000000c0 (00192)   202e4e45 5420434c 5220322e 302e3530    .NET CLR 2.0.50
0x000000d0 (00208)   3732373b 20534c43 43323b20 2e4e4554   727; SLCC2; .NET
0x000000e0 (00224)   20434c52 20332e35 2e333037 32393b20    CLR 3.5.30729; 
0x000000f0 (00240)   2e4e4554 20434c52 20332e30 2e333037   .NET CLR 3.0.307
0x00000100 (00256)   32393b20 4d656469 61204365 6e746572   29; Media Center
0x00000110 (00272)   20504320 362e3029 0d0a5541 2d435055    PC 6.0)..UA-CPU
0x00000120 (00288)   3a20414d 4436340d 0a416363 6570742d   : AMD64..Accept-
0x00000130 (00304)   456e636f 64696e67 3a20677a 69702c20   Encoding: gzip, 
0x00000140 (00320)   6465666c 6174650d 0a486f73 743a2077   deflate..Host: w
0x00000150 (00336)   77772e6c 6170746f 7069612e 6f72670d   ww.laptopia.org.
0x00000160 (00352)   0a436f6e 6e656374 696f6e3a 204b6565   .Connection: Kee
0x00000170 (00368)   702d416c 6976650d 0a0d0a              p-Alive....

0x00000000 (00000)   47455420 2f77702d 636f6e74 656e742f   GET /wp-content/
0x00000010 (00016)   7468656d 65732f74 77656e74 79666966   themes/twentyfif
0x00000020 (00032)   7465656e 2f637373 2f69652e 6373733f   teen/css/ie.css?
0x00000030 (00048)   7665723d 32303134 31303130 20485454   ver=20141010 HTT
0x00000040 (00064)   502f312e 310d0a41 63636570 743a202a   P/1.1..Accept: *
0x00000050 (00080)   2f2a0d0a 41636365 70742d4c 616e6775   /*..Accept-Langu
0x00000060 (00096)   6167653a 20656e2d 55530d0a 55736572   age: en-US..User
0x00000070 (00112)   2d416765 6e743a20 4d6f7a69 6c6c612f   -Agent: Mozilla/
0x00000080 (00128)   342e3020 28636f6d 70617469 626c653b   4.0 (compatible;
0x00000090 (00144)   204d5349 4520382e 303b2057 696e646f    MSIE 8.0; Windo
0x000000a0 (00160)   7773204e 5420362e 313b2057 696e3634   ws NT 6.1; Win64
0x000000b0 (00176)   3b207836 343b2054 72696465 6e742f34   ; x64; Trident/4
0x000000c0 (00192)   2e303b20 2e4e4554 20434c52 20322e30   .0; .NET CLR 2.0
0x000000d0 (00208)   2e353037 32373b20 534c4343 323b202e   .50727; SLCC2; .
0x000000e0 (00224)   4e455420 434c5220 332e352e 33303732   NET CLR 3.5.3072
0x000000f0 (00240)   393b202e 4e455420 434c5220 332e302e   9; .NET CLR 3.0.
0x00000100 (00256)   33303732 393b204d 65646961 2043656e   30729; Media Cen
0x00000110 (00272)   74657220 50432036 2e30290d 0a55412d   ter PC 6.0)..UA-
0x00000120 (00288)   4350553a 20414d44 36340d0a 41636365   CPU: AMD64..Acce
0x00000130 (00304)   70742d45 6e636f64 696e673a 20677a69   pt-Encoding: gzi
0x00000140 (00320)   702c2064 65666c61 74650d0a 486f7374   p, deflate..Host
0x00000150 (00336)   3a207777 772e6c61 70746f70 69612e6f   : www.laptopia.o
0x00000160 (00352)   72670d0a 436f6e6e 65637469 6f6e3a20   rg..Connection: 
0x00000170 (00368)   4b656570 2d416c69 76650d0a 0d0a       Keep-Alive....

0x00000000 (00000)   47455420 2f77702d 696e636c 75646573   GET /wp-includes
0x00000010 (00016)   2f6a732f 6a717565 72792f6a 71756572   /js/jquery/jquer
0x00000020 (00032)   792d6d69 67726174 652e6d69 6e2e6a73   y-migrate.min.js
0x00000030 (00048)   3f766572 3d312e32 2e312048 5454502f   ?ver=1.2.1 HTTP/
0x00000040 (00064)   312e310d 0a416363 6570743a 202a2f2a   1.1..Accept: */*
0x00000050 (00080)   0d0a4163 63657074 2d4c616e 67756167   ..Accept-Languag
0x00000060 (00096)   653a2065 6e2d5553 0d0a5573 65722d41   e: en-US..User-A
0x00000070 (00112)   67656e74 3a204d6f 7a696c6c 612f342e   gent: Mozilla/4.
0x00000080 (00128)   30202863 6f6d7061 7469626c 653b204d   0 (compatible; M
0x00000090 (00144)   53494520 382e303b 2057696e 646f7773   SIE 8.0; Windows
0x000000a0 (00160)   204e5420 362e313b 2057696e 36343b20    NT 6.1; Win64; 
0x000000b0 (00176)   7836343b 20547269 64656e74 2f342e30   x64; Trident/4.0
0x000000c0 (00192)   3b202e4e 45542043 4c522032 2e302e35   ; .NET CLR 2.0.5
0x000000d0 (00208)   30373237 3b20534c 4343323b 202e4e45   0727; SLCC2; .NE
0x000000e0 (00224)   5420434c 5220332e 352e3330 3732393b   T CLR 3.5.30729;
0x000000f0 (00240)   202e4e45 5420434c 5220332e 302e3330    .NET CLR 3.0.30
0x00000100 (00256)   3732393b 204d6564 69612043 656e7465   729; Media Cente
0x00000110 (00272)   72205043 20362e30 290d0a55 412d4350   r PC 6.0)..UA-CP
0x00000120 (00288)   553a2041 4d443634 0d0a4163 63657074   U: AMD64..Accept
0x00000130 (00304)   2d456e63 6f64696e 673a2067 7a69702c   -Encoding: gzip,
0x00000140 (00320)   20646566 6c617465 0d0a486f 73743a20    deflate..Host: 
0x00000150 (00336)   7777772e 6c617074 6f706961 2e6f7267   www.laptopia.org
0x00000160 (00352)   0d0a436f 6e6e6563 74696f6e 3a204b65   ..Connection: Ke
0x00000170 (00368)   65702d41 6c697665 0d0a0d0a 0d0a       ep-Alive......

0x00000000 (00000)   47455420 2f77702d 696e636c 75646573   GET /wp-includes
0x00000010 (00016)   2f6a732f 6a717565 72792f6a 71756572   /js/jquery/jquer
0x00000020 (00032)   792e6a73 3f766572 3d312e31 312e3220   y.js?ver=1.11.2 
0x00000030 (00048)   48545450 2f312e31 0d0a4163 63657074   HTTP/1.1..Accept
0x00000040 (00064)   3a202a2f 2a0d0a41 63636570 742d4c61   : */*..Accept-La
0x00000050 (00080)   6e677561 67653a20 656e2d55 530d0a55   nguage: en-US..U
0x00000060 (00096)   7365722d 4167656e 743a204d 6f7a696c   ser-Agent: Mozil
0x00000070 (00112)   6c612f34 2e302028 636f6d70 61746962   la/4.0 (compatib
0x00000080 (00128)   6c653b20 4d534945 20382e30 3b205769   le; MSIE 8.0; Wi
0x00000090 (00144)   6e646f77 73204e54 20362e31 3b205769   ndows NT 6.1; Wi
0x000000a0 (00160)   6e36343b 20783634 3b205472 6964656e   n64; x64; Triden
0x000000b0 (00176)   742f342e 303b202e 4e455420 434c5220   t/4.0; .NET CLR 
0x000000c0 (00192)   322e302e 35303732 373b2053 4c434332   2.0.50727; SLCC2
0x000000d0 (00208)   3b202e4e 45542043 4c522033 2e352e33   ; .NET CLR 3.5.3
0x000000e0 (00224)   30373239 3b202e4e 45542043 4c522033   0729; .NET CLR 3
0x000000f0 (00240)   2e302e33 30373239 3b204d65 64696120   .0.30729; Media 
0x00000100 (00256)   43656e74 65722050 4320362e 30290d0a   Center PC 6.0)..
0x00000110 (00272)   55412d43 50553a20 414d4436 340d0a41   UA-CPU: AMD64..A
0x00000120 (00288)   63636570 742d456e 636f6469 6e673a20   ccept-Encoding: 
0x00000130 (00304)   677a6970 2c206465 666c6174 650d0a48   gzip, deflate..H
0x00000140 (00320)   6f73743a 20777777 2e6c6170 746f7069   ost: www.laptopi
0x00000150 (00336)   612e6f72 670d0a43 6f6e6e65 6374696f   a.org..Connectio
0x00000160 (00352)   6e3a204b 6565702d 416c6976 650d0a0d   n: Keep-Alive...
0x00000170 (00368)   0a702d41 6c697665 0d0a0d0a 0d0a       .p-Alive......

0x00000000 (00000)   47455420 2f77702d 636f6e74 656e742f   GET /wp-content/
0x00000010 (00016)   7468656d 65732f74 77656e74 79666966   themes/twentyfif
0x00000020 (00032)   7465656e 2f67656e 65726963 6f6e732f   teen/genericons/
0x00000030 (00048)   67656e65 7269636f 6e732e63 73733f76   genericons.css?v
0x00000040 (00064)   65723d33 2e322048 5454502f 312e310d   er=3.2 HTTP/1.1.
0x00000050 (00080)   0a416363 6570743a 202a2f2a 0d0a4163   .Accept: */*..Ac
0x00000060 (00096)   63657074 2d4c616e 67756167 653a2065   cept-Language: e
0x00000070 (00112)   6e2d5553 0d0a5573 65722d41 67656e74   n-US..User-Agent
0x00000080 (00128)   3a204d6f 7a696c6c 612f342e 30202863   : Mozilla/4.0 (c
0x00000090 (00144)   6f6d7061 7469626c 653b204d 53494520   ompatible; MSIE 
0x000000a0 (00160)   382e303b 2057696e 646f7773 204e5420   8.0; Windows NT 
0x000000b0 (00176)   362e313b 2057696e 36343b20 7836343b   6.1; Win64; x64;
0x000000c0 (00192)   20547269 64656e74 2f342e30 3b202e4e    Trident/4.0; .N
0x000000d0 (00208)   45542043 4c522032 2e302e35 30373237   ET CLR 2.0.50727
0x000000e0 (00224)   3b20534c 4343323b 202e4e45 5420434c   ; SLCC2; .NET CL
0x000000f0 (00240)   5220332e 352e3330 3732393b 202e4e45   R 3.5.30729; .NE
0x00000100 (00256)   5420434c 5220332e 302e3330 3732393b   T CLR 3.0.30729;
0x00000110 (00272)   204d6564 69612043 656e7465 72205043    Media Center PC
0x00000120 (00288)   20362e30 290d0a55 412d4350 553a2041    6.0)..UA-CPU: A
0x00000130 (00304)   4d443634 0d0a4163 63657074 2d456e63   MD64..Accept-Enc
0x00000140 (00320)   6f64696e 673a2067 7a69702c 20646566   oding: gzip, def
0x00000150 (00336)   6c617465 0d0a486f 73743a20 7777772e   late..Host: www.
0x00000160 (00352)   6c617074 6f706961 2e6f7267 0d0a436f   laptopia.org..Co
0x00000170 (00368)   6e6e6563 74696f6e 3a204b65 65702d41   nnection: Keep-A
0x00000180 (00384)   6c697665 0d0a0d0a                     live....

0x00000000 (00000)   47455420 2f77702d 696e636c 75646573   GET /wp-includes
0x00000010 (00016)   2f6a732f 77702d65 6d6f6a69 2d72656c   /js/wp-emoji-rel
0x00000020 (00032)   65617365 2e6d696e 2e6a733f 7665723d   ease.min.js?ver=
0x00000030 (00048)   342e322e 31392048 5454502f 312e310d   4.2.19 HTTP/1.1.
0x00000040 (00064)   0a416363 6570743a 202a2f2a 0d0a4163   .Accept: */*..Ac
0x00000050 (00080)   63657074 2d4c616e 67756167 653a2065   cept-Language: e
0x00000060 (00096)   6e2d5553 0d0a5573 65722d41 67656e74   n-US..User-Agent
0x00000070 (00112)   3a204d6f 7a696c6c 612f342e 30202863   : Mozilla/4.0 (c
0x00000080 (00128)   6f6d7061 7469626c 653b204d 53494520   ompatible; MSIE 
0x00000090 (00144)   382e303b 2057696e 646f7773 204e5420   8.0; Windows NT 
0x000000a0 (00160)   362e313b 2057696e 36343b20 7836343b   6.1; Win64; x64;
0x000000b0 (00176)   20547269 64656e74 2f342e30 3b202e4e    Trident/4.0; .N
0x000000c0 (00192)   45542043 4c522032 2e302e35 30373237   ET CLR 2.0.50727
0x000000d0 (00208)   3b20534c 4343323b 202e4e45 5420434c   ; SLCC2; .NET CL
0x000000e0 (00224)   5220332e 352e3330 3732393b 202e4e45   R 3.5.30729; .NE
0x000000f0 (00240)   5420434c 5220332e 302e3330 3732393b   T CLR 3.0.30729;
0x00000100 (00256)   204d6564 69612043 656e7465 72205043    Media Center PC
0x00000110 (00272)   20362e30 290d0a55 412d4350 553a2041    6.0)..UA-CPU: A
0x00000120 (00288)   4d443634 0d0a4163 63657074 2d456e63   MD64..Accept-Enc
0x00000130 (00304)   6f64696e 673a2067 7a69702c 20646566   oding: gzip, def
0x00000140 (00320)   6c617465 0d0a486f 73743a20 7777772e   late..Host: www.
0x00000150 (00336)   6c617074 6f706961 2e6f7267 0d0a436f   laptopia.org..Co
0x00000160 (00352)   6e6e6563 74696f6e 3a204b65 65702d41   nnection: Keep-A
0x00000170 (00368)   6c697665 0d0a0d0a 3a204b65 65702d41   live....: Keep-A
0x00000180 (00384)   6c697665 0d0a0d0a                     live....

0x00000000 (00000)   47455420 2f77702d 636f6e74 656e742f   GET /wp-content/
0x00000010 (00016)   75706c6f 6164732f 32303037 2f30352f   uploads/2007/05/
0x00000020 (00032)   70726576 6965772e 706e6720 48545450   preview.png HTTP
0x00000030 (00048)   2f312e31 0d0a4163 63657074 3a202a2f   /1.1..Accept: */
0x00000040 (00064)   2a0d0a41 63636570 742d4c61 6e677561   *..Accept-Langua
0x00000050 (00080)   67653a20 656e2d55 530d0a55 7365722d   ge: en-US..User-
0x00000060 (00096)   4167656e 743a204d 6f7a696c 6c612f34   Agent: Mozilla/4
0x00000070 (00112)   2e302028 636f6d70 61746962 6c653b20   .0 (compatible; 
0x00000080 (00128)   4d534945 20382e30 3b205769 6e646f77   MSIE 8.0; Window
0x00000090 (00144)   73204e54 20362e31 3b205769 6e36343b   s NT 6.1; Win64;
0x000000a0 (00160)   20783634 3b205472 6964656e 742f342e    x64; Trident/4.
0x000000b0 (00176)   303b202e 4e455420 434c5220 322e302e   0; .NET CLR 2.0.
0x000000c0 (00192)   35303732 373b2053 4c434332 3b202e4e   50727; SLCC2; .N
0x000000d0 (00208)   45542043 4c522033 2e352e33 30373239   ET CLR 3.5.30729
0x000000e0 (00224)   3b202e4e 45542043 4c522033 2e302e33   ; .NET CLR 3.0.3
0x000000f0 (00240)   30373239 3b204d65 64696120 43656e74   0729; Media Cent
0x00000100 (00256)   65722050 4320362e 30290d0a 55412d43   er PC 6.0)..UA-C
0x00000110 (00272)   50553a20 414d4436 340d0a41 63636570   PU: AMD64..Accep
0x00000120 (00288)   742d456e 636f6469 6e673a20 677a6970   t-Encoding: gzip
0x00000130 (00304)   2c206465 666c6174 650d0a48 6f73743a   , deflate..Host:
0x00000140 (00320)   20777777 2e6c6170 746f7069 612e6f72    www.laptopia.or
0x00000150 (00336)   670d0a43 6f6e6e65 6374696f 6e3a204b   g..Connection: K
0x00000160 (00352)   6565702d 416c6976 650d0a0d 0a         eep-Alive....

0x00000000 (00000)   47455420 2f77702d 636f6e74 656e742f   GET /wp-content/
0x00000010 (00016)   7468656d 65732f74 77656e74 79666966   themes/twentyfif
0x00000020 (00032)   7465656e 2f6a732f 736b6970 2d6c696e   teen/js/skip-lin
0x00000030 (00048)   6b2d666f 6375732d 6669782e 6a733f76   k-focus-fix.js?v
0x00000040 (00064)   65723d32 30313431 30313020 48545450   er=20141010 HTTP
0x00000050 (00080)   2f312e31 0d0a4163 63657074 3a202a2f   /1.1..Accept: */
0x00000060 (00096)   2a0d0a41 63636570 742d4c61 6e677561   *..Accept-Langua
0x00000070 (00112)   67653a20 656e2d55 530d0a55 7365722d   ge: en-US..User-
0x00000080 (00128)   4167656e 743a204d 6f7a696c 6c612f34   Agent: Mozilla/4
0x00000090 (00144)   2e302028 636f6d70 61746962 6c653b20   .0 (compatible; 
0x000000a0 (00160)   4d534945 20382e30 3b205769 6e646f77   MSIE 8.0; Window
0x000000b0 (00176)   73204e54 20362e31 3b205769 6e36343b   s NT 6.1; Win64;
0x000000c0 (00192)   20783634 3b205472 6964656e 742f342e    x64; Trident/4.
0x000000d0 (00208)   303b202e 4e455420 434c5220 322e302e   0; .NET CLR 2.0.
0x000000e0 (00224)   35303732 373b2053 4c434332 3b202e4e   50727; SLCC2; .N
0x000000f0 (00240)   45542043 4c522033 2e352e33 30373239   ET CLR 3.5.30729
0x00000100 (00256)   3b202e4e 45542043 4c522033 2e302e33   ; .NET CLR 3.0.3
0x00000110 (00272)   30373239 3b204d65 64696120 43656e74   0729; Media Cent
0x00000120 (00288)   65722050 4320362e 30290d0a 55412d43   er PC 6.0)..UA-C
0x00000130 (00304)   50553a20 414d4436 340d0a41 63636570   PU: AMD64..Accep
0x00000140 (00320)   742d456e 636f6469 6e673a20 677a6970   t-Encoding: gzip
0x00000150 (00336)   2c206465 666c6174 650d0a48 6f73743a   , deflate..Host:
0x00000160 (00352)   20777777 2e6c6170 746f7069 612e6f72    www.laptopia.or
0x00000170 (00368)   670d0a43 6f6e6e65 6374696f 6e3a204b   g..Connection: K
0x00000180 (00384)   6565702d 416c6976 650d0a0d 0a         eep-Alive....

0x00000000 (00000)   47455420 2f762f4c 55384444 597a3638   GET /v/LU8DDYz68
0x00000010 (00016)   6b4d2048 5454502f 312e310d 0a416363   kM HTTP/1.1..Acc
0x00000020 (00032)   6570743a 202a2f2a 0d0a4163 63657074   ept: */*..Accept
0x00000030 (00048)   2d4c616e 67756167 653a2065 6e2d5553   -Language: en-US
0x00000040 (00064)   0d0a782d 666c6173 682d7665 7273696f   ..x-flash-versio
0x00000050 (00080)   6e3a2031 312c332c 3330302c 3236380d   n: 11,3,300,268.
0x00000060 (00096)   0a55412d 4350553a 20414d44 36340d0a   .UA-CPU: AMD64..
0x00000070 (00112)   41636365 70742d45 6e636f64 696e673a   Accept-Encoding:
0x00000080 (00128)   20677a69 702c2064 65666c61 74650d0a    gzip, deflate..
0x00000090 (00144)   55736572 2d416765 6e743a20 4d6f7a69   User-Agent: Mozi
0x000000a0 (00160)   6c6c612f 342e3020 28636f6d 70617469   lla/4.0 (compati
0x000000b0 (00176)   626c653b 204d5349 4520382e 303b2057   ble; MSIE 8.0; W
0x000000c0 (00192)   696e646f 7773204e 5420362e 313b2057   indows NT 6.1; W
0x000000d0 (00208)   696e3634 3b207836 343b2054 72696465   in64; x64; Tride
0x000000e0 (00224)   6e742f34 2e303b20 2e4e4554 20434c52   nt/4.0; .NET CLR
0x000000f0 (00240)   20322e30 2e353037 32373b20 534c4343    2.0.50727; SLCC
0x00000100 (00256)   323b202e 4e455420 434c5220 332e352e   2; .NET CLR 3.5.
0x00000110 (00272)   33303732 393b202e 4e455420 434c5220   30729; .NET CLR 
0x00000120 (00288)   332e302e 33303732 393b204d 65646961   3.0.30729; Media
0x00000130 (00304)   2043656e 74657220 50432036 2e30290d    Center PC 6.0).
0x00000140 (00320)   0a486f73 743a2077 77772e79 6f757475   .Host: www.youtu
0x00000150 (00336)   62652e63 6f6d0d0a 436f6e6e 65637469   be.com..Connecti
0x00000160 (00352)   6f6e3a20 4b656570 2d416c69 76650d0a   on: Keep-Alive..
0x00000170 (00368)   0d0a0a43 6f6e6e65 6374696f 6e3a204b   ...Connection: K
0x00000180 (00384)   6565702d 416c6976 650d0a0d 0a         eep-Alive....

0x00000000 (00000)   47455420 2f4d6a6b 784e5459 30204854   GET /MjkxNTY0 HT
0x00000010 (00016)   54502f31 2e310d0a 41636365 70743a20   TP/1.1..Accept: 
0x00000020 (00032)   2a2f2a0d 0a416363 6570742d 4c616e67   */*..Accept-Lang
0x00000030 (00048)   75616765 3a20656e 2d55530d 0a782d66   uage: en-US..x-f
0x00000040 (00064)   6c617368 2d766572 73696f6e 3a203131   lash-version: 11
0x00000050 (00080)   2c332c33 30302c32 36380d0a 55412d43   ,3,300,268..UA-C
0x00000060 (00096)   50553a20 414d4436 340d0a41 63636570   PU: AMD64..Accep
0x00000070 (00112)   742d456e 636f6469 6e673a20 677a6970   t-Encoding: gzip
0x00000080 (00128)   2c206465 666c6174 650d0a55 7365722d   , deflate..User-
0x00000090 (00144)   4167656e 743a204d 6f7a696c 6c612f34   Agent: Mozilla/4
0x000000a0 (00160)   2e302028 636f6d70 61746962 6c653b20   .0 (compatible; 
0x000000b0 (00176)   4d534945 20382e30 3b205769 6e646f77   MSIE 8.0; Window
0x000000c0 (00192)   73204e54 20362e31 3b205769 6e36343b   s NT 6.1; Win64;
0x000000d0 (00208)   20783634 3b205472 6964656e 742f342e    x64; Trident/4.
0x000000e0 (00224)   303b202e 4e455420 434c5220 322e302e   0; .NET CLR 2.0.
0x000000f0 (00240)   35303732 373b2053 4c434332 3b202e4e   50727; SLCC2; .N
0x00000100 (00256)   45542043 4c522033 2e352e33 30373239   ET CLR 3.5.30729
0x00000110 (00272)   3b202e4e 45542043 4c522033 2e302e33   ; .NET CLR 3.0.3
0x00000120 (00288)   30373239 3b204d65 64696120 43656e74   0729; Media Cent
0x00000130 (00304)   65722050 4320362e 30290d0a 486f7374   er PC 6.0)..Host
0x00000140 (00320)   3a20656d 6265642e 62726561 6b2e636f   : embed.break.co
0x00000150 (00336)   6d0d0a43 6f6e6e65 6374696f 6e3a204b   m..Connection: K
0x00000160 (00352)   6565702d 416c6976 650d0a0d 0a650d0a   eep-Alive....e..
0x00000170 (00368)   0d0a0a43 6f6e6e65 6374696f 6e3a204b   ...Connection: K
0x00000180 (00384)   6565702d 416c6976 650d0a0d 0a         eep-Alive....

0x00000000 (00000)   47455420 2f762f65 6e776f31 6a577378   GET /v/enwo1jWsx
0x00000010 (00016)   46452048 5454502f 312e310d 0a416363   FE HTTP/1.1..Acc
0x00000020 (00032)   6570743a 202a2f2a 0d0a4163 63657074   ept: */*..Accept
0x00000030 (00048)   2d4c616e 67756167 653a2065 6e2d5553   -Language: en-US
0x00000040 (00064)   0d0a782d 666c6173 682d7665 7273696f   ..x-flash-versio
0x00000050 (00080)   6e3a2031 312c332c 3330302c 3236380d   n: 11,3,300,268.
0x00000060 (00096)   0a55412d 4350553a 20414d44 36340d0a   .UA-CPU: AMD64..
0x00000070 (00112)   41636365 70742d45 6e636f64 696e673a   Accept-Encoding:
0x00000080 (00128)   20677a69 702c2064 65666c61 74650d0a    gzip, deflate..
0x00000090 (00144)   55736572 2d416765 6e743a20 4d6f7a69   User-Agent: Mozi
0x000000a0 (00160)   6c6c612f 342e3020 28636f6d 70617469   lla/4.0 (compati
0x000000b0 (00176)   626c653b 204d5349 4520382e 303b2057   ble; MSIE 8.0; W
0x000000c0 (00192)   696e646f 7773204e 5420362e 313b2057   indows NT 6.1; W
0x000000d0 (00208)   696e3634 3b207836 343b2054 72696465   in64; x64; Tride
0x000000e0 (00224)   6e742f34 2e303b20 2e4e4554 20434c52   nt/4.0; .NET CLR
0x000000f0 (00240)   20322e30 2e353037 32373b20 534c4343    2.0.50727; SLCC
0x00000100 (00256)   323b202e 4e455420 434c5220 332e352e   2; .NET CLR 3.5.
0x00000110 (00272)   33303732 393b202e 4e455420 434c5220   30729; .NET CLR 
0x00000120 (00288)   332e302e 33303732 393b204d 65646961   3.0.30729; Media
0x00000130 (00304)   2043656e 74657220 50432036 2e30290d    Center PC 6.0).
0x00000140 (00320)   0a486f73 743a2077 77772e79 6f757475   .Host: www.youtu
0x00000150 (00336)   62652e63 6f6d0d0a 436f6e6e 65637469   be.com..Connecti
0x00000160 (00352)   6f6e3a20 4b656570 2d416c69 76650d0a   on: Keep-Alive..
0x00000170 (00368)   0d0a0a43 6f6e6e65 6374696f 6e3a204b   ...Connection: K
0x00000180 (00384)   6565702d 416c6976 650d0a0d 0a         eep-Alive....

0x00000000 (00000)   47455420 2f77702d 636f6e74 656e742f   GET /wp-content/
0x00000010 (00016)   7468656d 65732f74 77656e74 79666966   themes/twentyfif
0x00000020 (00032)   7465656e 2f6a732f 66756e63 74696f6e   teen/js/function
0x00000030 (00048)   732e6a73 3f766572 3d323031 35303333   s.js?ver=2015033
0x00000040 (00064)   30204854 54502f31 2e310d0a 41636365   0 HTTP/1.1..Acce
0x00000050 (00080)   70743a20 2a2f2a0d 0a416363 6570742d   pt: */*..Accept-
0x00000060 (00096)   4c616e67 75616765 3a20656e 2d55530d   Language: en-US.
0x00000070 (00112)   0a557365 722d4167 656e743a 204d6f7a   .User-Agent: Moz
0x00000080 (00128)   696c6c61 2f342e30 2028636f 6d706174   illa/4.0 (compat
0x00000090 (00144)   69626c65 3b204d53 49452038 2e303b20   ible; MSIE 8.0; 
0x000000a0 (00160)   57696e64 6f777320 4e542036 2e313b20   Windows NT 6.1; 
0x000000b0 (00176)   57696e36 343b2078 36343b20 54726964   Win64; x64; Trid
0x000000c0 (00192)   656e742f 342e303b 202e4e45 5420434c   ent/4.0; .NET CL
0x000000d0 (00208)   5220322e 302e3530 3732373b 20534c43   R 2.0.50727; SLC
0x000000e0 (00224)   43323b20 2e4e4554 20434c52 20332e35   C2; .NET CLR 3.5
0x000000f0 (00240)   2e333037 32393b20 2e4e4554 20434c52   .30729; .NET CLR
0x00000100 (00256)   20332e30 2e333037 32393b20 4d656469    3.0.30729; Medi
0x00000110 (00272)   61204365 6e746572 20504320 362e3029   a Center PC 6.0)
0x00000120 (00288)   0d0a5541 2d435055 3a20414d 4436340d   ..UA-CPU: AMD64.
0x00000130 (00304)   0a416363 6570742d 456e636f 64696e67   .Accept-Encoding
0x00000140 (00320)   3a20677a 69702c20 6465666c 6174650d   : gzip, deflate.
0x00000150 (00336)   0a486f73 743a2077 77772e6c 6170746f   .Host: www.lapto
0x00000160 (00352)   7069612e 6f72670d 0a436f6e 6e656374   pia.org..Connect
0x00000170 (00368)   696f6e3a 204b6565 702d416c 6976650d   ion: Keep-Alive.
0x00000180 (00384)   0a0d0a2d 416c6976 650d0a0d 0a         ...-Alive....

0x00000000 (00000)   47455420 2f6e6373 692e7478 74204854   GET /ncsi.txt HT
0x00000010 (00016)   54502f31 2e310d0a 436f6e6e 65637469   TP/1.1..Connecti
0x00000020 (00032)   6f6e3a20 436c6f73 650d0a55 7365722d   on: Close..User-
0x00000030 (00048)   4167656e 743a204d 6963726f 736f6674   Agent: Microsoft
0x00000040 (00064)   204e4353 490d0a48 6f73743a 20777777    NCSI..Host: www
0x00000050 (00080)   2e6d7366 746e6373 692e636f 6d0d0a0d   .msftncsi.com...
0x00000060 (00096)   0a616e67 75616765 3a20656e 2d55530d   .anguage: en-US.
0x00000070 (00112)   0a557365 722d4167 656e743a 204d6f7a   .User-Agent: Moz
0x00000080 (00128)   696c6c61 2f342e30 2028636f 6d706174   illa/4.0 (compat
0x00000090 (00144)   69626c65 3b204d53 49452038 2e303b20   ible; MSIE 8.0; 
0x000000a0 (00160)   57696e64 6f777320 4e542036 2e313b20   Windows NT 6.1; 
0x000000b0 (00176)   57696e36 343b2078 36343b20 54726964   Win64; x64; Trid
0x000000c0 (00192)   656e742f 342e303b 202e4e45 5420434c   ent/4.0; .NET CL
0x000000d0 (00208)   5220322e 302e3530 3732373b 20534c43   R 2.0.50727; SLC
0x000000e0 (00224)   43323b20 2e4e4554 20434c52 20332e35   C2; .NET CLR 3.5
0x000000f0 (00240)   2e333037 32393b20 2e4e4554 20434c52   .30729; .NET CLR
0x00000100 (00256)   20332e30 2e333037 32393b20 4d656469    3.0.30729; Medi
0x00000110 (00272)   61204365 6e746572 20504320 362e3029   a Center PC 6.0)
0x00000120 (00288)   0d0a5541 2d435055 3a20414d 4436340d   ..UA-CPU: AMD64.
0x00000130 (00304)   0a416363 6570742d 456e636f 64696e67   .Accept-Encoding
0x00000140 (00320)   3a20677a 69702c20 6465666c 6174650d   : gzip, deflate.
0x00000150 (00336)   0a486f73 743a2077 77772e6c 6170746f   .Host: www.lapto
0x00000160 (00352)   7069612e 6f72670d 0a436f6e 6e656374   pia.org..Connect
0x00000170 (00368)   696f6e3a 204b6565 702d416c 6976650d   ion: Keep-Alive.
0x00000180 (00384)   0a0d0a2d 416c6976 650d0a0d 0a         ...-Alive....

0x00000000 (00000)   504f5354 202f3365 31363236 34372d63   POST /3e162647-c
0x00000010 (00016)   3364382d 34346333 2d393937 622d3061   3d8-44c3-997b-0a
0x00000020 (00032)   63396135 66363838 33322f20 48545450   c9a5f68832/ HTTP
0x00000030 (00048)   2f312e31 0d0a4361 6368652d 436f6e74   /1.1..Cache-Cont
0x00000040 (00064)   726f6c3a 206e6f2d 63616368 650d0a43   rol: no-cache..C
0x00000050 (00080)   6f6e6e65 6374696f 6e3a2043 6c6f7365   onnection: Close
0x00000060 (00096)   0d0a5072 61676d61 3a206e6f 2d636163   ..Pragma: no-cac
0x00000070 (00112)   68650d0a 436f6e74 656e742d 54797065   he..Content-Type
0x00000080 (00128)   3a206170 706c6963 6174696f 6e2f736f   : application/so
0x00000090 (00144)   61702b78 6d6c0d0a 55736572 2d416765   ap+xml..User-Age
0x000000a0 (00160)   6e743a20 57534441 50490d0a 436f6e74   nt: WSDAPI..Cont
0x000000b0 (00176)   656e742d 4c656e67 74683a20 3733330d   ent-Length: 733.
0x000000c0 (00192)   0a486f73 743a2031 39322e31 36382e31   .Host: 192.168.1
0x000000d0 (00208)   30302e31 36343a35 3335370d 0a0d0a3c   00.164:5357....<
0x000000e0 (00224)   3f786d6c 20766572 73696f6e 3d22312e   ?xml version="1.
0x000000f0 (00240)   30222065 6e636f64 696e673d 22757466   0" encoding="utf
0x00000100 (00256)   2d38223f 3e3c736f 61703a45 6e76656c   -8"?><soap:Envel
0x00000110 (00272)   6f706520 786d6c6e 733a736f 61703d22   ope xmlns:soap="
0x00000120 (00288)   68747470 3a2f2f77 77772e77 332e6f72   http://www.w3.or
0x00000130 (00304)   672f3230 30332f30 352f736f 61702d65   g/2003/05/soap-e
0x00000140 (00320)   6e76656c 6f706522 20786d6c 6e733a77   nvelope" xmlns:w
0x00000150 (00336)   73613d22 68747470 3a2f2f73 6368656d   sa="http://schem
0x00000160 (00352)   61732e78 6d6c736f 61702e6f 72672f77   as.xmlsoap.org/w
0x00000170 (00368)   732f3230 30342f30 382f6164 64726573   s/2004/08/addres
0x00000180 (00384)   73696e67 2220786d 6c6e733a 6c6d733d   sing" xmlns:lms=
0x00000190 (00400)   22687474 703a2f2f 73636865 6d61732e   "http://schemas.
0x000001a0 (00416)   6d696372 6f736f66 742e636f 6d2f7769   microsoft.com/wi
0x000001b0 (00432)   6e646f77 732f6c6d 732f3230 30372f30   ndows/lms/2007/0
0x000001c0 (00448)   38223e3c 736f6170 3a486561 6465723e   8"><soap:Header>
0x000001d0 (00464)   3c777361 3a546f3e 75726e3a 75756964   <wsa:To>urn:uuid
0x000001e0 (00480)   3a336531 36323634 372d6333 64382d34   :3e162647-c3d8-4
0x000001f0 (00496)   3463332d 39393762 2d306163 39613566   4c3-997b-0ac9a5f
0x00000200 (00512)   36383833 323c2f77 73613a54 6f3e3c77   68832</wsa:To><w
0x00000210 (00528)   73613a41 6374696f 6e3e6874 74703a2f   sa:Action>http:/
0x00000220 (00544)   2f736368 656d6173 2e786d6c 736f6170   /schemas.xmlsoap
0x00000230 (00560)   2e6f7267 2f77732f 32303034 2f30392f   .org/ws/2004/09/
0x00000240 (00576)   7472616e 73666572 2f476574 3c2f7773   transfer/Get</ws
0x00000250 (00592)   613a4163 74696f6e 3e3c7773 613a4d65   a:Action><wsa:Me
0x00000260 (00608)   73736167 6549443e 75726e3a 75756964   ssageID>urn:uuid
0x00000270 (00624)   3a363032 36636332 302d6634 62642d34   :6026cc20-f4bd-4
0x00000280 (00640)   3839612d 61633431 2d396439 65396665   89a-ac41-9d9e9fe
0x00000290 (00656)   36383765 303c2f77 73613a4d 65737361   687e0</wsa:Messa
0x000002a0 (00672)   67654944 3e3c7773 613a5265 706c7954   geID><wsa:ReplyT
0x000002b0 (00688)   6f3e3c77 73613a41 64647265 73733e68   o><wsa:Address>h
0x000002c0 (00704)   7474703a 2f2f7363 68656d61 732e786d   ttp://schemas.xm
0x000002d0 (00720)   6c736f61 702e6f72 672f7773 2f323030   lsoap.org/ws/200
0x000002e0 (00736)   342f3038 2f616464 72657373 696e672f   4/08/addressing/
0x000002f0 (00752)   726f6c65 2f616e6f 6e796d6f 75733c2f   role/anonymous</
0x00000300 (00768)   7773613a 41646472 6573733e 3c2f7773   wsa:Address></ws
0x00000310 (00784)   613a5265 706c7954 6f3e3c77 73613a46   a:ReplyTo><wsa:F
0x00000320 (00800)   726f6d3e 3c777361 3a416464 72657373   rom><wsa:Address
0x00000330 (00816)   3e75726e 3a757569 643a6364 65383063   >urn:uuid:cde80c
0x00000340 (00832)   66362d62 6162362d 34666631 2d613235   f6-bab6-4ff1-a25
0x00000350 (00848)   372d3761 65626432 66353763 63313c2f   7-7aebd2f57cc1</
0x00000360 (00864)   7773613a 41646472 6573733e 3c2f7773   wsa:Address></ws
0x00000370 (00880)   613a4672 6f6d3e3c 6c6d733a 4c617267   a:From><lms:Larg
0x00000380 (00896)   654d6574 61646174 61537570 706f7274   eMetadataSupport
0x00000390 (00912)   2f3e3c2f 736f6170 3a486561 6465723e   /></soap:Header>
0x000003a0 (00928)   3c736f61 703a426f 64792f3e 3c2f736f   <soap:Body/></so
0x000003b0 (00944)   61703a45 6e76656c 6f70653e            ap:Envelope>

0x00000000 (00000)   504f5354 202f3365 31363236 34372d63   POST /3e162647-c
0x00000010 (00016)   3364382d 34346333 2d393937 622d3061   3d8-44c3-997b-0a
0x00000020 (00032)   63396135 66363838 33322f20 48545450   c9a5f68832/ HTTP
0x00000030 (00048)   2f312e31 0d0a4361 6368652d 436f6e74   /1.1..Cache-Cont
0x00000040 (00064)   726f6c3a 206e6f2d 63616368 650d0a43   rol: no-cache..C
0x00000050 (00080)   6f6e6e65 6374696f 6e3a2043 6c6f7365   onnection: Close
0x00000060 (00096)   0d0a5072 61676d61 3a206e6f 2d636163   ..Pragma: no-cac
0x00000070 (00112)   68650d0a 436f6e74 656e742d 54797065   he..Content-Type
0x00000080 (00128)   3a206170 706c6963 6174696f 6e2f736f   : application/so
0x00000090 (00144)   61702b78 6d6c0d0a 55736572 2d416765   ap+xml..User-Age
0x000000a0 (00160)   6e743a20 57534441 50490d0a 436f6e74   nt: WSDAPI..Cont
0x000000b0 (00176)   656e742d 4c656e67 74683a20 3733330d   ent-Length: 733.
0x000000c0 (00192)   0a486f73 743a2031 39322e31 36382e31   .Host: 192.168.1
0x000000d0 (00208)   30302e31 36333a35 3335370d 0a0d0a3c   00.163:5357....<
0x000000e0 (00224)   3f786d6c 20766572 73696f6e 3d22312e   ?xml version="1.
0x000000f0 (00240)   30222065 6e636f64 696e673d 22757466   0" encoding="utf
0x00000100 (00256)   2d38223f 3e3c736f 61703a45 6e76656c   -8"?><soap:Envel
0x00000110 (00272)   6f706520 786d6c6e 733a736f 61703d22   ope xmlns:soap="
0x00000120 (00288)   68747470 3a2f2f77 77772e77 332e6f72   http://www.w3.or
0x00000130 (00304)   672f3230 30332f30 352f736f 61702d65   g/2003/05/soap-e
0x00000140 (00320)   6e76656c 6f706522 20786d6c 6e733a77   nvelope" xmlns:w
0x00000150 (00336)   73613d22 68747470 3a2f2f73 6368656d   sa="http://schem
0x00000160 (00352)   61732e78 6d6c736f 61702e6f 72672f77   as.xmlsoap.org/w
0x00000170 (00368)   732f3230 30342f30 382f6164 64726573   s/2004/08/addres
0x00000180 (00384)   73696e67 2220786d 6c6e733a 6c6d733d   sing" xmlns:lms=
0x00000190 (00400)   22687474 703a2f2f 73636865 6d61732e   "http://schemas.
0x000001a0 (00416)   6d696372 6f736f66 742e636f 6d2f7769   microsoft.com/wi
0x000001b0 (00432)   6e646f77 732f6c6d 732f3230 30372f30   ndows/lms/2007/0
0x000001c0 (00448)   38223e3c 736f6170 3a486561 6465723e   8"><soap:Header>
0x000001d0 (00464)   3c777361 3a546f3e 75726e3a 75756964   <wsa:To>urn:uuid
0x000001e0 (00480)   3a336531 36323634 372d6333 64382d34   :3e162647-c3d8-4
0x000001f0 (00496)   3463332d 39393762 2d306163 39613566   4c3-997b-0ac9a5f
0x00000200 (00512)   36383833 323c2f77 73613a54 6f3e3c77   68832</wsa:To><w
0x00000210 (00528)   73613a41 6374696f 6e3e6874 74703a2f   sa:Action>http:/
0x00000220 (00544)   2f736368 656d6173 2e786d6c 736f6170   /schemas.xmlsoap
0x00000230 (00560)   2e6f7267 2f77732f 32303034 2f30392f   .org/ws/2004/09/
0x00000240 (00576)   7472616e 73666572 2f476574 3c2f7773   transfer/Get</ws
0x00000250 (00592)   613a4163 74696f6e 3e3c7773 613a4d65   a:Action><wsa:Me
0x00000260 (00608)   73736167 6549443e 75726e3a 75756964   ssageID>urn:uuid
0x00000270 (00624)   3a366661 33623636 632d3936 31332d34   :6fa3b66c-9613-4
0x00000280 (00640)   3837622d 62663732 2d663832 34396437   87b-bf72-f8249d7
0x00000290 (00656)   33313836 323c2f77 73613a4d 65737361   31862</wsa:Messa
0x000002a0 (00672)   67654944 3e3c7773 613a5265 706c7954   geID><wsa:ReplyT
0x000002b0 (00688)   6f3e3c77 73613a41 64647265 73733e68   o><wsa:Address>h
0x000002c0 (00704)   7474703a 2f2f7363 68656d61 732e786d   ttp://schemas.xm
0x000002d0 (00720)   6c736f61 702e6f72 672f7773 2f323030   lsoap.org/ws/200
0x000002e0 (00736)   342f3038 2f616464 72657373 696e672f   4/08/addressing/
0x000002f0 (00752)   726f6c65 2f616e6f 6e796d6f 75733c2f   role/anonymous</
0x00000300 (00768)   7773613a 41646472 6573733e 3c2f7773   wsa:Address></ws
0x00000310 (00784)   613a5265 706c7954 6f3e3c77 73613a46   a:ReplyTo><wsa:F
0x00000320 (00800)   726f6d3e 3c777361 3a416464 72657373   rom><wsa:Address
0x00000330 (00816)   3e75726e 3a757569 643a6364 65383063   >urn:uuid:cde80c
0x00000340 (00832)   66362d62 6162362d 34666631 2d613235   f6-bab6-4ff1-a25
0x00000350 (00848)   372d3761 65626432 66353763 63313c2f   7-7aebd2f57cc1</
0x00000360 (00864)   7773613a 41646472 6573733e 3c2f7773   wsa:Address></ws
0x00000370 (00880)   613a4672 6f6d3e3c 6c6d733a 4c617267   a:From><lms:Larg
0x00000380 (00896)   654d6574 61646174 61537570 706f7274   eMetadataSupport
0x00000390 (00912)   2f3e3c2f 736f6170 3a486561 6465723e   /></soap:Header>
0x000003a0 (00928)   3c736f61 703a426f 64792f3e 3c2f736f   <soap:Body/></so
0x000003b0 (00944)   61703a45 6e76656c 6f70653e            ap:Envelope>

0x00000000 (00000)   504f5354 202f3365 31363236 34372d63   POST /3e162647-c
0x00000010 (00016)   3364382d 34346333 2d393937 622d3061   3d8-44c3-997b-0a
0x00000020 (00032)   63396135 66363838 33322f20 48545450   c9a5f68832/ HTTP
0x00000030 (00048)   2f312e31 0d0a4361 6368652d 436f6e74   /1.1..Cache-Cont
0x00000040 (00064)   726f6c3a 206e6f2d 63616368 650d0a43   rol: no-cache..C
0x00000050 (00080)   6f6e6e65 6374696f 6e3a2043 6c6f7365   onnection: Close
0x00000060 (00096)   0d0a5072 61676d61 3a206e6f 2d636163   ..Pragma: no-cac
0x00000070 (00112)   68650d0a 436f6e74 656e742d 54797065   he..Content-Type
0x00000080 (00128)   3a206170 706c6963 6174696f 6e2f736f   : application/so
0x00000090 (00144)   61702b78 6d6c0d0a 55736572 2d416765   ap+xml..User-Age
0x000000a0 (00160)   6e743a20 57534441 50490d0a 436f6e74   nt: WSDAPI..Cont
0x000000b0 (00176)   656e742d 4c656e67 74683a20 3733330d   ent-Length: 733.
0x000000c0 (00192)   0a486f73 743a2031 39322e31 36382e31   .Host: 192.168.1
0x000000d0 (00208)   30302e32 30343a35 3335370d 0a0d0a3c   00.204:5357....<
0x000000e0 (00224)   3f786d6c 20766572 73696f6e 3d22312e   ?xml version="1.
0x000000f0 (00240)   30222065 6e636f64 696e673d 22757466   0" encoding="utf
0x00000100 (00256)   2d38223f 3e3c736f 61703a45 6e76656c   -8"?><soap:Envel
0x00000110 (00272)   6f706520 786d6c6e 733a736f 61703d22   ope xmlns:soap="
0x00000120 (00288)   68747470 3a2f2f77 77772e77 332e6f72   http://www.w3.or
0x00000130 (00304)   672f3230 30332f30 352f736f 61702d65   g/2003/05/soap-e
0x00000140 (00320)   6e76656c 6f706522 20786d6c 6e733a77   nvelope" xmlns:w
0x00000150 (00336)   73613d22 68747470 3a2f2f73 6368656d   sa="http://schem
0x00000160 (00352)   61732e78 6d6c736f 61702e6f 72672f77   as.xmlsoap.org/w
0x00000170 (00368)   732f3230 30342f30 382f6164 64726573   s/2004/08/addres
0x00000180 (00384)   73696e67 2220786d 6c6e733a 6c6d733d   sing" xmlns:lms=
0x00000190 (00400)   22687474 703a2f2f 73636865 6d61732e   "http://schemas.
0x000001a0 (00416)   6d696372 6f736f66 742e636f 6d2f7769   microsoft.com/wi
0x000001b0 (00432)   6e646f77 732f6c6d 732f3230 30372f30   ndows/lms/2007/0
0x000001c0 (00448)   38223e3c 736f6170 3a486561 6465723e   8"><soap:Header>
0x000001d0 (00464)   3c777361 3a546f3e 75726e3a 75756964   <wsa:To>urn:uuid
0x000001e0 (00480)   3a336531 36323634 372d6333 64382d34   :3e162647-c3d8-4
0x000001f0 (00496)   3463332d 39393762 2d306163 39613566   4c3-997b-0ac9a5f
0x00000200 (00512)   36383833 323c2f77 73613a54 6f3e3c77   68832</wsa:To><w
0x00000210 (00528)   73613a41 6374696f 6e3e6874 74703a2f   sa:Action>http:/
0x00000220 (00544)   2f736368 656d6173 2e786d6c 736f6170   /schemas.xmlsoap
0x00000230 (00560)   2e6f7267 2f77732f 32303034 2f30392f   .org/ws/2004/09/
0x00000240 (00576)   7472616e 73666572 2f476574 3c2f7773   transfer/Get</ws
0x00000250 (00592)   613a4163 74696f6e 3e3c7773 613a4d65   a:Action><wsa:Me
0x00000260 (00608)   73736167 6549443e 75726e3a 75756964   ssageID>urn:uuid
0x00000270 (00624)   3a326634 64323430 652d3132 33662d34   :2f4d240e-123f-4
0x00000280 (00640)   6366392d 39626161 2d646662 34323334   cf9-9baa-dfb4234
0x00000290 (00656)   36633062 643c2f77 73613a4d 65737361   6c0bd</wsa:Messa
0x000002a0 (00672)   67654944 3e3c7773 613a5265 706c7954   geID><wsa:ReplyT
0x000002b0 (00688)   6f3e3c77 73613a41 64647265 73733e68   o><wsa:Address>h
0x000002c0 (00704)   7474703a 2f2f7363 68656d61 732e786d   ttp://schemas.xm
0x000002d0 (00720)   6c736f61 702e6f72 672f7773 2f323030   lsoap.org/ws/200
0x000002e0 (00736)   342f3038 2f616464 72657373 696e672f   4/08/addressing/
0x000002f0 (00752)   726f6c65 2f616e6f 6e796d6f 75733c2f   role/anonymous</
0x00000300 (00768)   7773613a 41646472 6573733e 3c2f7773   wsa:Address></ws
0x00000310 (00784)   613a5265 706c7954 6f3e3c77 73613a46   a:ReplyTo><wsa:F
0x00000320 (00800)   726f6d3e 3c777361 3a416464 72657373   rom><wsa:Address
0x00000330 (00816)   3e75726e 3a757569 643a6635 63613832   >urn:uuid:f5ca82
0x00000340 (00832)   62622d33 3966342d 34366261 2d383136   bb-39f4-46ba-816
0x00000350 (00848)   352d6130 30653239 65303132 62613c2f   5-a00e29e012ba</
0x00000360 (00864)   7773613a 41646472 6573733e 3c2f7773   wsa:Address></ws
0x00000370 (00880)   613a4672 6f6d3e3c 6c6d733a 4c617267   a:From><lms:Larg
0x00000380 (00896)   654d6574 61646174 61537570 706f7274   eMetadataSupport
0x00000390 (00912)   2f3e3c2f 736f6170 3a486561 6465723e   /></soap:Header>
0x000003a0 (00928)   3c736f61 703a426f 64792f3e 3c2f736f   <soap:Body/></so
0x000003b0 (00944)   61703a45 6e76656c 6f70653e            ap:Envelope>

0x00000000 (00000)   504f5354 202f3365 31363236 34372d63   POST /3e162647-c
0x00000010 (00016)   3364382d 34346333 2d393937 622d3061   3d8-44c3-997b-0a
0x00000020 (00032)   63396135 66363838 33322f20 48545450   c9a5f68832/ HTTP
0x00000030 (00048)   2f312e31 0d0a4361 6368652d 436f6e74   /1.1..Cache-Cont
0x00000040 (00064)   726f6c3a 206e6f2d 63616368 650d0a43   rol: no-cache..C
0x00000050 (00080)   6f6e6e65 6374696f 6e3a2043 6c6f7365   onnection: Close
0x00000060 (00096)   0d0a5072 61676d61 3a206e6f 2d636163   ..Pragma: no-cac
0x00000070 (00112)   68650d0a 436f6e74 656e742d 54797065   he..Content-Type
0x00000080 (00128)   3a206170 706c6963 6174696f 6e2f736f   : application/so
0x00000090 (00144)   61702b78 6d6c0d0a 55736572 2d416765   ap+xml..User-Age
0x000000a0 (00160)   6e743a20 57534441 50490d0a 436f6e74   nt: WSDAPI..Cont
0x000000b0 (00176)   656e742d 4c656e67 74683a20 3733330d   ent-Length: 733.
0x000000c0 (00192)   0a486f73 743a2031 39322e31 36382e31   .Host: 192.168.1
0x000000d0 (00208)   30302e32 30343a35 3335370d 0a0d0a3c   00.204:5357....<
0x000000e0 (00224)   3f786d6c 20766572 73696f6e 3d22312e   ?xml version="1.
0x000000f0 (00240)   30222065 6e636f64 696e673d 22757466   0" encoding="utf
0x00000100 (00256)   2d38223f 3e3c736f 61703a45 6e76656c   -8"?><soap:Envel
0x00000110 (00272)   6f706520 786d6c6e 733a736f 61703d22   ope xmlns:soap="
0x00000120 (00288)   68747470 3a2f2f77 77772e77 332e6f72   http://www.w3.or
0x00000130 (00304)   672f3230 30332f30 352f736f 61702d65   g/2003/05/soap-e
0x00000140 (00320)   6e76656c 6f706522 20786d6c 6e733a77   nvelope" xmlns:w
0x00000150 (00336)   73613d22 68747470 3a2f2f73 6368656d   sa="http://schem
0x00000160 (00352)   61732e78 6d6c736f 61702e6f 72672f77   as.xmlsoap.org/w
0x00000170 (00368)   732f3230 30342f30 382f6164 64726573   s/2004/08/addres
0x00000180 (00384)   73696e67 2220786d 6c6e733a 6c6d733d   sing" xmlns:lms=
0x00000190 (00400)   22687474 703a2f2f 73636865 6d61732e   "http://schemas.
0x000001a0 (00416)   6d696372 6f736f66 742e636f 6d2f7769   microsoft.com/wi
0x000001b0 (00432)   6e646f77 732f6c6d 732f3230 30372f30   ndows/lms/2007/0
0x000001c0 (00448)   38223e3c 736f6170 3a486561 6465723e   8"><soap:Header>
0x000001d0 (00464)   3c777361 3a546f3e 75726e3a 75756964   <wsa:To>urn:uuid
0x000001e0 (00480)   3a336531 36323634 372d6333 64382d34   :3e162647-c3d8-4
0x000001f0 (00496)   3463332d 39393762 2d306163 39613566   4c3-997b-0ac9a5f
0x00000200 (00512)   36383833 323c2f77 73613a54 6f3e3c77   68832</wsa:To><w
0x00000210 (00528)   73613a41 6374696f 6e3e6874 74703a2f   sa:Action>http:/
0x00000220 (00544)   2f736368 656d6173 2e786d6c 736f6170   /schemas.xmlsoap
0x00000230 (00560)   2e6f7267 2f77732f 32303034 2f30392f   .org/ws/2004/09/
0x00000240 (00576)   7472616e 73666572 2f476574 3c2f7773   transfer/Get</ws
0x00000250 (00592)   613a4163 74696f6e 3e3c7773 613a4d65   a:Action><wsa:Me
0x00000260 (00608)   73736167 6549443e 75726e3a 75756964   ssageID>urn:uuid
0x00000270 (00624)   3a646134 64363634 312d6164 63312d34   :da4d6641-adc1-4
0x00000280 (00640)   3133612d 39626436 2d393066 33303232   13a-9bd6-90f3022
0x00000290 (00656)   62303061 643c2f77 73613a4d 65737361   b00ad</wsa:Messa
0x000002a0 (00672)   67654944 3e3c7773 613a5265 706c7954   geID><wsa:ReplyT
0x000002b0 (00688)   6f3e3c77 73613a41 64647265 73733e68   o><wsa:Address>h
0x000002c0 (00704)   7474703a 2f2f7363 68656d61 732e786d   ttp://schemas.xm
0x000002d0 (00720)   6c736f61 702e6f72 672f7773 2f323030   lsoap.org/ws/200
0x000002e0 (00736)   342f3038 2f616464 72657373 696e672f   4/08/addressing/
0x000002f0 (00752)   726f6c65 2f616e6f 6e796d6f 75733c2f   role/anonymous</
0x00000300 (00768)   7773613a 41646472 6573733e 3c2f7773   wsa:Address></ws
0x00000310 (00784)   613a5265 706c7954 6f3e3c77 73613a46   a:ReplyTo><wsa:F
0x00000320 (00800)   726f6d3e 3c777361 3a416464 72657373   rom><wsa:Address
0x00000330 (00816)   3e75726e 3a757569 643a3239 39336536   >urn:uuid:2993e6
0x00000340 (00832)   63372d38 3137332d 34623462 2d613233   c7-8173-4b4b-a23
0x00000350 (00848)   382d6139 31343564 62626131 32613c2f   8-a9145dbba12a</
0x00000360 (00864)   7773613a 41646472 6573733e 3c2f7773   wsa:Address></ws
0x00000370 (00880)   613a4672 6f6d3e3c 6c6d733a 4c617267   a:From><lms:Larg
0x00000380 (00896)   654d6574 61646174 61537570 706f7274   eMetadataSupport
0x00000390 (00912)   2f3e3c2f 736f6170 3a486561 6465723e   /></soap:Header>
0x000003a0 (00928)   3c736f61 703a426f 64792f3e 3c2f736f   <soap:Body/></so
0x000003b0 (00944)   61703a45 6e76656c 6f70653e            ap:Envelope>

0x00000000 (00000)   47455420 2f696d61 6765732f 50696374   GET /images/Pict
0x00000010 (00016)   75726537 2e706e67 20485454 502f312e   ure7.png HTTP/1.
0x00000020 (00032)   310d0a41 63636570 743a202a 2f2a0d0a   1..Accept: */*..
0x00000030 (00048)   41636365 70742d4c 616e6775 6167653a   Accept-Language:
0x00000040 (00064)   20656e2d 55530d0a 55736572 2d416765    en-US..User-Age
0x00000050 (00080)   6e743a20 4d6f7a69 6c6c612f 342e3020   nt: Mozilla/4.0 
0x00000060 (00096)   28636f6d 70617469 626c653b 204d5349   (compatible; MSI
0x00000070 (00112)   4520382e 303b2057 696e646f 7773204e   E 8.0; Windows N
0x00000080 (00128)   5420362e 313b2057 696e3634 3b207836   T 6.1; Win64; x6
0x00000090 (00144)   343b2054 72696465 6e742f34 2e303b20   4; Trident/4.0; 
0x000000a0 (00160)   2e4e4554 20434c52 20322e30 2e353037   .NET CLR 2.0.507
0x000000b0 (00176)   32373b20 534c4343 323b202e 4e455420   27; SLCC2; .NET 
0x000000c0 (00192)   434c5220 332e352e 33303732 393b202e   CLR 3.5.30729; .
0x000000d0 (00208)   4e455420 434c5220 332e302e 33303732   NET CLR 3.0.3072
0x000000e0 (00224)   393b204d 65646961 2043656e 74657220   9; Media Center 
0x000000f0 (00240)   50432036 2e30290d 0a55412d 4350553a   PC 6.0)..UA-CPU:
0x00000100 (00256)   20414d44 36340d0a 41636365 70742d45    AMD64..Accept-E
0x00000110 (00272)   6e636f64 696e673a 20677a69 702c2064   ncoding: gzip, d
0x00000120 (00288)   65666c61 74650d0a 486f7374 3a207777   eflate..Host: ww
0x00000130 (00304)   772e6c61 70746f70 69612e6f 72670d0a   w.laptopia.org..
0x00000140 (00320)   436f6e6e 65637469 6f6e3a20 4b656570   Connection: Keep
0x00000150 (00336)   2d416c69 76650d0a 0d0a                -Alive....

0x00000000 (00000)   504f5354 202f3365 31363236 34372d63   POST /3e162647-c
0x00000010 (00016)   3364382d 34346333 2d393937 622d3061   3d8-44c3-997b-0a
0x00000020 (00032)   63396135 66363838 33322f20 48545450   c9a5f68832/ HTTP
0x00000030 (00048)   2f312e31 0d0a4361 6368652d 436f6e74   /1.1..Cache-Cont
0x00000040 (00064)   726f6c3a 206e6f2d 63616368 650d0a43   rol: no-cache..C
0x00000050 (00080)   6f6e6e65 6374696f 6e3a2043 6c6f7365   onnection: Close
0x00000060 (00096)   0d0a5072 61676d61 3a206e6f 2d636163   ..Pragma: no-cac
0x00000070 (00112)   68650d0a 436f6e74 656e742d 54797065   he..Content-Type
0x00000080 (00128)   3a206170 706c6963 6174696f 6e2f736f   : application/so
0x00000090 (00144)   61702b78 6d6c0d0a 55736572 2d416765   ap+xml..User-Age
0x000000a0 (00160)   6e743a20 57534441 50490d0a 436f6e74   nt: WSDAPI..Cont
0x000000b0 (00176)   656e742d 4c656e67 74683a20 3733330d   ent-Length: 733.
0x000000c0 (00192)   0a486f73 743a2031 39322e31 36382e31   .Host: 192.168.1
0x000000d0 (00208)   30302e32 30343a35 3335370d 0a0d0a3c   00.204:5357....<
0x000000e0 (00224)   3f786d6c 20766572 73696f6e 3d22312e   ?xml version="1.
0x000000f0 (00240)   30222065 6e636f64 696e673d 22757466   0" encoding="utf
0x00000100 (00256)   2d38223f 3e3c736f 61703a45 6e76656c   -8"?><soap:Envel
0x00000110 (00272)   6f706520 786d6c6e 733a736f 61703d22   ope xmlns:soap="
0x00000120 (00288)   68747470 3a2f2f77 77772e77 332e6f72   http://www.w3.or
0x00000130 (00304)   672f3230 30332f30 352f736f 61702d65   g/2003/05/soap-e
0x00000140 (00320)   6e76656c 6f706522 20786d6c 6e733a77   nvelope" xmlns:w
0x00000150 (00336)   73613d22 68747470 3a2f2f73 6368656d   sa="http://schem
0x00000160 (00352)   61732e78 6d6c736f 61702e6f 72672f77   as.xmlsoap.org/w
0x00000170 (00368)   732f3230 30342f30 382f6164 64726573   s/2004/08/addres
0x00000180 (00384)   73696e67 2220786d 6c6e733a 6c6d733d   sing" xmlns:lms=
0x00000190 (00400)   22687474 703a2f2f 73636865 6d61732e   "http://schemas.
0x000001a0 (00416)   6d696372 6f736f66 742e636f 6d2f7769   microsoft.com/wi
0x000001b0 (00432)   6e646f77 732f6c6d 732f3230 30372f30   ndows/lms/2007/0
0x000001c0 (00448)   38223e3c 736f6170 3a486561 6465723e   8"><soap:Header>
0x000001d0 (00464)   3c777361 3a546f3e 75726e3a 75756964   <wsa:To>urn:uuid
0x000001e0 (00480)   3a336531 36323634 372d6333 64382d34   :3e162647-c3d8-4
0x000001f0 (00496)   3463332d 39393762 2d306163 39613566   4c3-997b-0ac9a5f
0x00000200 (00512)   36383833 323c2f77 73613a54 6f3e3c77   68832</wsa:To><w
0x00000210 (00528)   73613a41 6374696f 6e3e6874 74703a2f   sa:Action>http:/
0x00000220 (00544)   2f736368 656d6173 2e786d6c 736f6170   /schemas.xmlsoap
0x00000230 (00560)   2e6f7267 2f77732f 32303034 2f30392f   .org/ws/2004/09/
0x00000240 (00576)   7472616e 73666572 2f476574 3c2f7773   transfer/Get</ws
0x00000250 (00592)   613a4163 74696f6e 3e3c7773 613a4d65   a:Action><wsa:Me
0x00000260 (00608)   73736167 6549443e 75726e3a 75756964   ssageID>urn:uuid
0x00000270 (00624)   3a326435 32323632 312d6161 38332d34   :2d522621-aa83-4
0x00000280 (00640)   6535312d 62633764 2d366434 63306536   e51-bc7d-6d4c0e6
0x00000290 (00656)   39393264 663c2f77 73613a4d 65737361   992df</wsa:Messa
0x000002a0 (00672)   67654944 3e3c7773 613a5265 706c7954   geID><wsa:ReplyT
0x000002b0 (00688)   6f3e3c77 73613a41 64647265 73733e68   o><wsa:Address>h
0x000002c0 (00704)   7474703a 2f2f7363 68656d61 732e786d   ttp://schemas.xm
0x000002d0 (00720)   6c736f61 702e6f72 672f7773 2f323030   lsoap.org/ws/200
0x000002e0 (00736)   342f3038 2f616464 72657373 696e672f   4/08/addressing/
0x000002f0 (00752)   726f6c65 2f616e6f 6e796d6f 75733c2f   role/anonymous</
0x00000300 (00768)   7773613a 41646472 6573733e 3c2f7773   wsa:Address></ws
0x00000310 (00784)   613a5265 706c7954 6f3e3c77 73613a46   a:ReplyTo><wsa:F
0x00000320 (00800)   726f6d3e 3c777361 3a416464 72657373   rom><wsa:Address
0x00000330 (00816)   3e75726e 3a757569 643a6161 34376532   >urn:uuid:aa47e2
0x00000340 (00832)   36312d66 3930382d 34336538 2d616661   61-f908-43e8-afa
0x00000350 (00848)   302d6137 65366637 64616438 37633c2f   0-a7e6f7dad87c</
0x00000360 (00864)   7773613a 41646472 6573733e 3c2f7773   wsa:Address></ws
0x00000370 (00880)   613a4672 6f6d3e3c 6c6d733a 4c617267   a:From><lms:Larg
0x00000380 (00896)   654d6574 61646174 61537570 706f7274   eMetadataSupport
0x00000390 (00912)   2f3e3c2f 736f6170 3a486561 6465723e   /></soap:Header>
0x000003a0 (00928)   3c736f61 703a426f 64792f3e 3c2f736f   <soap:Body/></so
0x000003b0 (00944)   61703a45 6e76656c 6f70653e            ap:Envelope>

0x00000000 (00000)   47455420 2f77702d 636f6e74 656e742f   GET /wp-content/
0x00000010 (00016)   75706c6f 6164732f 32303037 2f30352f   uploads/2007/05/
0x00000020 (00032)   63617279 2e6a7067 20485454 502f312e   cary.jpg HTTP/1.
0x00000030 (00048)   310d0a41 63636570 743a202a 2f2a0d0a   1..Accept: */*..
0x00000040 (00064)   41636365 70742d4c 616e6775 6167653a   Accept-Language:
0x00000050 (00080)   20656e2d 55530d0a 55736572 2d416765    en-US..User-Age
0x00000060 (00096)   6e743a20 4d6f7a69 6c6c612f 342e3020   nt: Mozilla/4.0 
0x00000070 (00112)   28636f6d 70617469 626c653b 204d5349   (compatible; MSI
0x00000080 (00128)   4520382e 303b2057 696e646f 7773204e   E 8.0; Windows N
0x00000090 (00144)   5420362e 313b2057 696e3634 3b207836   T 6.1; Win64; x6
0x000000a0 (00160)   343b2054 72696465 6e742f34 2e303b20   4; Trident/4.0; 
0x000000b0 (00176)   2e4e4554 20434c52 20322e30 2e353037   .NET CLR 2.0.507
0x000000c0 (00192)   32373b20 534c4343 323b202e 4e455420   27; SLCC2; .NET 
0x000000d0 (00208)   434c5220 332e352e 33303732 393b202e   CLR 3.5.30729; .
0x000000e0 (00224)   4e455420 434c5220 332e302e 33303732   NET CLR 3.0.3072
0x000000f0 (00240)   393b204d 65646961 2043656e 74657220   9; Media Center 
0x00000100 (00256)   50432036 2e30290d 0a55412d 4350553a   PC 6.0)..UA-CPU:
0x00000110 (00272)   20414d44 36340d0a 41636365 70742d45    AMD64..Accept-E
0x00000120 (00288)   6e636f64 696e673a 20677a69 702c2064   ncoding: gzip, d
0x00000130 (00304)   65666c61 74650d0a 486f7374 3a207777   eflate..Host: ww
0x00000140 (00320)   772e6c61 70746f70 69612e6f 72670d0a   w.laptopia.org..
0x00000150 (00336)   436f6e6e 65637469 6f6e3a20 4b656570   Connection: Keep
0x00000160 (00352)   2d416c69 76650d0a 0d0a                -Alive....

0x00000000 (00000)   47455420 2f696d61 6765732f 50696374   GET /images/Pict
0x00000010 (00016)   75726533 2e706e67 20485454 502f312e   ure3.png HTTP/1.
0x00000020 (00032)   310d0a41 63636570 743a202a 2f2a0d0a   1..Accept: */*..
0x00000030 (00048)   41636365 70742d4c 616e6775 6167653a   Accept-Language:
0x00000040 (00064)   20656e2d 55530d0a 55736572 2d416765    en-US..User-Age
0x00000050 (00080)   6e743a20 4d6f7a69 6c6c612f 342e3020   nt: Mozilla/4.0 
0x00000060 (00096)   28636f6d 70617469 626c653b 204d5349   (compatible; MSI
0x00000070 (00112)   4520382e 303b2057 696e646f 7773204e   E 8.0; Windows N
0x00000080 (00128)   5420362e 313b2057 696e3634 3b207836   T 6.1; Win64; x6
0x00000090 (00144)   343b2054 72696465 6e742f34 2e303b20   4; Trident/4.0; 
0x000000a0 (00160)   2e4e4554 20434c52 20322e30 2e353037   .NET CLR 2.0.507
0x000000b0 (00176)   32373b20 534c4343 323b202e 4e455420   27; SLCC2; .NET 
0x000000c0 (00192)   434c5220 332e352e 33303732 393b202e   CLR 3.5.30729; .
0x000000d0 (00208)   4e455420 434c5220 332e302e 33303732   NET CLR 3.0.3072
0x000000e0 (00224)   393b204d 65646961 2043656e 74657220   9; Media Center 
0x000000f0 (00240)   50432036 2e30290d 0a55412d 4350553a   PC 6.0)..UA-CPU:
0x00000100 (00256)   20414d44 36340d0a 41636365 70742d45    AMD64..Accept-E
0x00000110 (00272)   6e636f64 696e673a 20677a69 702c2064   ncoding: gzip, d
0x00000120 (00288)   65666c61 74650d0a 486f7374 3a207777   eflate..Host: ww
0x00000130 (00304)   772e6c61 70746f70 69612e6f 72670d0a   w.laptopia.org..
0x00000140 (00320)   436f6e6e 65637469 6f6e3a20 4b656570   Connection: Keep
0x00000150 (00336)   2d416c69 76650d0a 0d0a                -Alive....

0x00000000 (00000)   47455420 2f696d61 6765732f 50696374   GET /images/Pict
0x00000010 (00016)   75726536 2e706e67 20485454 502f312e   ure6.png HTTP/1.
0x00000020 (00032)   310d0a41 63636570 743a202a 2f2a0d0a   1..Accept: */*..
0x00000030 (00048)   41636365 70742d4c 616e6775 6167653a   Accept-Language:
0x00000040 (00064)   20656e2d 55530d0a 55736572 2d416765    en-US..User-Age
0x00000050 (00080)   6e743a20 4d6f7a69 6c6c612f 342e3020   nt: Mozilla/4.0 
0x00000060 (00096)   28636f6d 70617469 626c653b 204d5349   (compatible; MSI
0x00000070 (00112)   4520382e 303b2057 696e646f 7773204e   E 8.0; Windows N
0x00000080 (00128)   5420362e 313b2057 696e3634 3b207836   T 6.1; Win64; x6
0x00000090 (00144)   343b2054 72696465 6e742f34 2e303b20   4; Trident/4.0; 
0x000000a0 (00160)   2e4e4554 20434c52 20322e30 2e353037   .NET CLR 2.0.507
0x000000b0 (00176)   32373b20 534c4343 323b202e 4e455420   27; SLCC2; .NET 
0x000000c0 (00192)   434c5220 332e352e 33303732 393b202e   CLR 3.5.30729; .
0x000000d0 (00208)   4e455420 434c5220 332e302e 33303732   NET CLR 3.0.3072
0x000000e0 (00224)   393b204d 65646961 2043656e 74657220   9; Media Center 
0x000000f0 (00240)   50432036 2e30290d 0a55412d 4350553a   PC 6.0)..UA-CPU:
0x00000100 (00256)   20414d44 36340d0a 41636365 70742d45    AMD64..Accept-E
0x00000110 (00272)   6e636f64 696e673a 20677a69 702c2064   ncoding: gzip, d
0x00000120 (00288)   65666c61 74650d0a 486f7374 3a207777   eflate..Host: ww
0x00000130 (00304)   772e6c61 70746f70 69612e6f 72670d0a   w.laptopia.org..
0x00000140 (00320)   436f6e6e 65637469 6f6e3a20 4b656570   Connection: Keep
0x00000150 (00336)   2d416c69 76650d0a 0d0a                -Alive....

0x00000000 (00000)   504f5354 202f3365 31363236 34372d63   POST /3e162647-c
0x00000010 (00016)   3364382d 34346333 2d393937 622d3061   3d8-44c3-997b-0a
0x00000020 (00032)   63396135 66363838 33322f20 48545450   c9a5f68832/ HTTP
0x00000030 (00048)   2f312e31 0d0a4361 6368652d 436f6e74   /1.1..Cache-Cont
0x00000040 (00064)   726f6c3a 206e6f2d 63616368 650d0a43   rol: no-cache..C
0x00000050 (00080)   6f6e6e65 6374696f 6e3a2043 6c6f7365   onnection: Close
0x00000060 (00096)   0d0a5072 61676d61 3a206e6f 2d636163   ..Pragma: no-cac
0x00000070 (00112)   68650d0a 436f6e74 656e742d 54797065   he..Content-Type
0x00000080 (00128)   3a206170 706c6963 6174696f 6e2f736f   : application/so
0x00000090 (00144)   61702b78 6d6c0d0a 55736572 2d416765   ap+xml..User-Age
0x000000a0 (00160)   6e743a20 57534441 50490d0a 436f6e74   nt: WSDAPI..Cont
0x000000b0 (00176)   656e742d 4c656e67 74683a20 3733330d   ent-Length: 733.
0x000000c0 (00192)   0a486f73 743a2031 39322e31 36382e31   .Host: 192.168.1
0x000000d0 (00208)   30302e32 30343a35 3335370d 0a0d0a3c   00.204:5357....<
0x000000e0 (00224)   3f786d6c 20766572 73696f6e 3d22312e   ?xml version="1.
0x000000f0 (00240)   30222065 6e636f64 696e673d 22757466   0" encoding="utf
0x00000100 (00256)   2d38223f 3e3c736f 61703a45 6e76656c   -8"?><soap:Envel
0x00000110 (00272)   6f706520 786d6c6e 733a736f 61703d22   ope xmlns:soap="
0x00000120 (00288)   68747470 3a2f2f77 77772e77 332e6f72   http://www.w3.or
0x00000130 (00304)   672f3230 30332f30 352f736f 61702d65   g/2003/05/soap-e
0x00000140 (00320)   6e76656c 6f706522 20786d6c 6e733a77   nvelope" xmlns:w
0x00000150 (00336)   73613d22 68747470 3a2f2f73 6368656d   sa="http://schem
0x00000160 (00352)   61732e78 6d6c736f 61702e6f 72672f77   as.xmlsoap.org/w
0x00000170 (00368)   732f3230 30342f30 382f6164 64726573   s/2004/08/addres
0x00000180 (00384)   73696e67 2220786d 6c6e733a 6c6d733d   sing" xmlns:lms=
0x00000190 (00400)   22687474 703a2f2f 73636865 6d61732e   "http://schemas.
0x000001a0 (00416)   6d696372 6f736f66 742e636f 6d2f7769   microsoft.com/wi
0x000001b0 (00432)   6e646f77 732f6c6d 732f3230 30372f30   ndows/lms/2007/0
0x000001c0 (00448)   38223e3c 736f6170 3a486561 6465723e   8"><soap:Header>
0x000001d0 (00464)   3c777361 3a546f3e 75726e3a 75756964   <wsa:To>urn:uuid
0x000001e0 (00480)   3a336531 36323634 372d6333 64382d34   :3e162647-c3d8-4
0x000001f0 (00496)   3463332d 39393762 2d306163 39613566   4c3-997b-0ac9a5f
0x00000200 (00512)   36383833 323c2f77 73613a54 6f3e3c77   68832</wsa:To><w
0x00000210 (00528)   73613a41 6374696f 6e3e6874 74703a2f   sa:Action>http:/
0x00000220 (00544)   2f736368 656d6173 2e786d6c 736f6170   /schemas.xmlsoap
0x00000230 (00560)   2e6f7267 2f77732f 32303034 2f30392f   .org/ws/2004/09/
0x00000240 (00576)   7472616e 73666572 2f476574 3c2f7773   transfer/Get</ws
0x00000250 (00592)   613a4163 74696f6e 3e3c7773 613a4d65   a:Action><wsa:Me
0x00000260 (00608)   73736167 6549443e 75726e3a 75756964   ssageID>urn:uuid
0x00000270 (00624)   3a333165 63653831 332d3339 65322d34   :31ece813-39e2-4
0x00000280 (00640)   6164352d 62626566 2d376538 35656362   ad5-bbef-7e85ecb
0x00000290 (00656)   32376166 313c2f77 73613a4d 65737361   27af1</wsa:Messa
0x000002a0 (00672)   67654944 3e3c7773 613a5265 706c7954   geID><wsa:ReplyT
0x000002b0 (00688)   6f3e3c77 73613a41 64647265 73733e68   o><wsa:Address>h
0x000002c0 (00704)   7474703a 2f2f7363 68656d61 732e786d   ttp://schemas.xm
0x000002d0 (00720)   6c736f61 702e6f72 672f7773 2f323030   lsoap.org/ws/200
0x000002e0 (00736)   342f3038 2f616464 72657373 696e672f   4/08/addressing/
0x000002f0 (00752)   726f6c65 2f616e6f 6e796d6f 75733c2f   role/anonymous</
0x00000300 (00768)   7773613a 41646472 6573733e 3c2f7773   wsa:Address></ws
0x00000310 (00784)   613a5265 706c7954 6f3e3c77 73613a46   a:ReplyTo><wsa:F
0x00000320 (00800)   726f6d3e 3c777361 3a416464 72657373   rom><wsa:Address
0x00000330 (00816)   3e75726e 3a757569 643a3065 61363038   >urn:uuid:0ea608
0x00000340 (00832)   36302d66 3639312d 34353830 2d623934   60-f691-4580-b94
0x00000350 (00848)   632d6263 61633165 36623435 30363c2f   c-bcac1e6b4506</
0x00000360 (00864)   7773613a 41646472 6573733e 3c2f7773   wsa:Address></ws
0x00000370 (00880)   613a4672 6f6d3e3c 6c6d733a 4c617267   a:From><lms:Larg
0x00000380 (00896)   654d6574 61646174 61537570 706f7274   eMetadataSupport
0x00000390 (00912)   2f3e3c2f 736f6170 3a486561 6465723e   /></soap:Header>
0x000003a0 (00928)   3c736f61 703a426f 64792f3e 3c2f736f   <soap:Body/></so
0x000003b0 (00944)   61703a45 6e76656c 6f70653e            ap:Envelope>

0x00000000 (00000)   47455420 2f696d61 6765732f 50696374   GET /images/Pict
0x00000010 (00016)   75726531 2e706e67 20485454 502f312e   ure1.png HTTP/1.
0x00000020 (00032)   310d0a41 63636570 743a202a 2f2a0d0a   1..Accept: */*..
0x00000030 (00048)   41636365 70742d4c 616e6775 6167653a   Accept-Language:
0x00000040 (00064)   20656e2d 55530d0a 55736572 2d416765    en-US..User-Age
0x00000050 (00080)   6e743a20 4d6f7a69 6c6c612f 342e3020   nt: Mozilla/4.0 
0x00000060 (00096)   28636f6d 70617469 626c653b 204d5349   (compatible; MSI
0x00000070 (00112)   4520382e 303b2057 696e646f 7773204e   E 8.0; Windows N
0x00000080 (00128)   5420362e 313b2057 696e3634 3b207836   T 6.1; Win64; x6
0x00000090 (00144)   343b2054 72696465 6e742f34 2e303b20   4; Trident/4.0; 
0x000000a0 (00160)   2e4e4554 20434c52 20322e30 2e353037   .NET CLR 2.0.507
0x000000b0 (00176)   32373b20 534c4343 323b202e 4e455420   27; SLCC2; .NET 
0x000000c0 (00192)   434c5220 332e352e 33303732 393b202e   CLR 3.5.30729; .
0x000000d0 (00208)   4e455420 434c5220 332e302e 33303732   NET CLR 3.0.3072
0x000000e0 (00224)   393b204d 65646961 2043656e 74657220   9; Media Center 
0x000000f0 (00240)   50432036 2e30290d 0a55412d 4350553a   PC 6.0)..UA-CPU:
0x00000100 (00256)   20414d44 36340d0a 41636365 70742d45    AMD64..Accept-E
0x00000110 (00272)   6e636f64 696e673a 20677a69 702c2064   ncoding: gzip, d
0x00000120 (00288)   65666c61 74650d0a 486f7374 3a207777   eflate..Host: ww
0x00000130 (00304)   772e6c61 70746f70 69612e6f 72670d0a   w.laptopia.org..
0x00000140 (00320)   436f6e6e 65637469 6f6e3a20 4b656570   Connection: Keep
0x00000150 (00336)   2d416c69 76650d0a 0d0a7267 0d0a436f   -Alive....rg..Co
0x00000160 (00352)   6e6e6563 74696f6e 3a204b65 65702d41   nnection: Keep-A
0x00000170 (00368)   6c697665 0d0a0d0a 3a204b65 65702d41   live....: Keep-A
0x00000180 (00384)   6c697665 0d0a0d0a                     live....

0x00000000 (00000)   47455420 2f696d61 6765732f 50696374   GET /images/Pict
0x00000010 (00016)   75726532 2e706e67 20485454 502f312e   ure2.png HTTP/1.
0x00000020 (00032)   310d0a41 63636570 743a202a 2f2a0d0a   1..Accept: */*..
0x00000030 (00048)   41636365 70742d4c 616e6775 6167653a   Accept-Language:
0x00000040 (00064)   20656e2d 55530d0a 55736572 2d416765    en-US..User-Age
0x00000050 (00080)   6e743a20 4d6f7a69 6c6c612f 342e3020   nt: Mozilla/4.0 
0x00000060 (00096)   28636f6d 70617469 626c653b 204d5349   (compatible; MSI
0x00000070 (00112)   4520382e 303b2057 696e646f 7773204e   E 8.0; Windows N
0x00000080 (00128)   5420362e 313b2057 696e3634 3b207836   T 6.1; Win64; x6
0x00000090 (00144)   343b2054 72696465 6e742f34 2e303b20   4; Trident/4.0; 
0x000000a0 (00160)   2e4e4554 20434c52 20322e30 2e353037   .NET CLR 2.0.507
0x000000b0 (00176)   32373b20 534c4343 323b202e 4e455420   27; SLCC2; .NET 
0x000000c0 (00192)   434c5220 332e352e 33303732 393b202e   CLR 3.5.30729; .
0x000000d0 (00208)   4e455420 434c5220 332e302e 33303732   NET CLR 3.0.3072
0x000000e0 (00224)   393b204d 65646961 2043656e 74657220   9; Media Center 
0x000000f0 (00240)   50432036 2e30290d 0a55412d 4350553a   PC 6.0)..UA-CPU:
0x00000100 (00256)   20414d44 36340d0a 41636365 70742d45    AMD64..Accept-E
0x00000110 (00272)   6e636f64 696e673a 20677a69 702c2064   ncoding: gzip, d
0x00000120 (00288)   65666c61 74650d0a 486f7374 3a207777   eflate..Host: ww
0x00000130 (00304)   772e6c61 70746f70 69612e6f 72670d0a   w.laptopia.org..
0x00000140 (00320)   436f6e6e 65637469 6f6e3a20 4b656570   Connection: Keep
0x00000150 (00336)   2d416c69 76650d0a 0d0a                -Alive....


Strings