Analysis Date2015-11-02 09:50:13
MD5ea6b0fb694df6fdc46b4a8f28020e859
SHA1b1484d394987831117e67e07013cbae83eba639d

Static Details:

File typePE32 executable for MS Windows (GUI) Intel 80386 32-bit
Section.UAUD md5: 66defd05fa57f0c828379c2cf47fc271 sha1: 4a93806ea0c016dafbb6e5b63005ed6a0ff9e72a size: 3584
Section.qmY md5: 6bc952557f14983704fca5a90006318c sha1: 9b5f180348b4e926930eb07ae0a5b9f71e93f3ef size: 90624
Section.cGg md5: 339c5d6986d64400473670c7d2751448 sha1: 301aef24de63de36f45770d15b3af2b944cfda4d size: 2048
Section.PVKp md5: d8655d14d9c4a0cedafd4ead703e313f sha1: b6e0aa9c0dbb8a92024bbe8371bb09cb105e4926 size: 4608
Section.StAAB md5: 1aaac7d13c4c3a8c00e21af0355fac60 sha1: fb8511b03daff6ec77d62460f00041352b1bed6a size: 3072
Section.JvW md5: 476995e4999024b679abfa505f622bc5 sha1: a39d824d179c13b37cc1992f9355dd9c7ea429b2 size: 12288
Section.HGwy md5: 25d72e332f076c9850db5b3df3f8daf6 sha1: 38f9fb48436051a38fe7b0eb8a4849cd9609564e size: 6656
Section.RdCz md5: 7f5c19c5384cb52b3a0b817805829661 sha1: 085f4ff9518d37cb87556d881852c19ee43328e2 size: 92160
Section.zQ md5: 37a9cb7dfb9871929fd2cb3b78111dc7 sha1: 3d95ac668ed48f7392d032d9e971472495316c7e size: 13824
Section.KaR md5: 1f6538a8c7f7744753dd59921080605e sha1: 8b9f0551684d0370bbef84e00bb9eab7ffb7c196 size: 4096
Section.rsrc md5: 41a852243083b60971a70a2daace93eb sha1: 378e965fc562e070e1d2b4f55bab829b5b5d2e5d size: 7168
Section.reloc md5: 92dbb8f59fbccb5b83f56597cb65a34b sha1: cd9a67f974aea1802170728ce57794b0f68723ef size: 1536
Timestamp1997-08-10 17:41:51
VersionLegalCopyright: Paratrooper
FileVersion: 5.1.3.6
CompanyName: Ray Adams
ProductName: Paktong
ProductVersion: 2.1.9.8
FileDescription: Metallogeny
PackerBorland Delphi 3.0 (???)
PEhash18d17db5757f7d381ef701f55e2c37c48c2c007a
IMPhashfe0bf309309c58ad0ac5506055631fad
AVRisingno_virus
AVMcafeeGeneric BackDoor.acx
AVAvira (antivir)TR/Spy.Emiow.A
AVTwisterTrojan.558BEC83EC/5756@2.mg
AVAd-AwareGen:Variant.Kazy.41559
AVAlwil (avast)MalOb-IP [Cryp]
AVEset (nod32)Win32/Spy.Shiz.NCD
AVGrisoft (avg)Generic25.WVQ
AVSymantecInfostealer.Shiz!gen
AVFortinetW32/Shiz.YWP!tr.bdr
AVBitDefenderGen:Variant.Kazy.41559
AVK7Spyware ( 0040f2501 )
AVMicrosoft Security EssentialsPWS:Win32/Simda.AF
AVMicroWorld (escan)Gen:Variant.Kazy.41559
AVMalwareBytesSpyware.PasswordStealer.XGen
AVAuthentiumW32/SuspPack.DZ.gen!Eldorado
AVFrisk (f-prot)W32/SuspPack.DZ.gen!Eldorado
AVIkarusTrojan.Win32.Jorik
AVEmsisoftGen:Variant.Kazy.41559
AVZillya!Trojan.Jorik.Win32.34617
AVKasperskyTrojan.Win32.Generic
AVTrend Microno_virus
AVCAT (quickheal)no_virus
AVVirusBlokAda (vba32)Trojan.Shiz
AVPadvishno_virus
AVBullGuardGen:Variant.Kazy.41559
AVArcabit (arcavir)Gen:Variant.Kazy.41559
AVClamAVno_virus
AVDr. WebTrojan.Packed.20771
AVF-SecureGen:Variant.Kazy.41559
AVCA (E-Trust Ino)Win32/Shiz.P!generic

Runtime Details:

Screenshot

Process
↳ C:\malware.exe

RegistryHKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\C:\malware.exe ➝
C:\malware.exe:*:Enabled:Windows Explorer\\x00
RegistryHKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\c059900a ➝
DM\\xbd\\x95\\x1e\\xcbM\\xf2\\xc1\\x8a\\x1a\\xdfO\\xca[\\x88I\\x86\\x8dWr\\x08\\xd7\\xdc\\x84\\xd0}c\\xea/\\x8a3-\\xf5\\x92?\\x9e\\x8e\\xad\\xaf;\\x96\\xda\\xcen\\xd2\\x85\\x935\\xe5\\xfb\\x1b\\x7f\\x15\\x8fi\\x11-\\x9C:\\xbd\\xde\\xa2\\xcd\\x8ds\\xb66\\xc3\\x02+\\xd1\\xefb\\xfd\\x15.\\xd3n.\\x0b\\xb3z.\\x86\\x03\\x83V9\\xde\\x0e\\xde.\\xc5\\xea\\x8b\\x9d\\xcf\\xde"\\x0b6n9\\x96Y\\x9d\\xc3\\xab_6\\xf9^\\xcf:}1\\x9a\\xce\\xa1\\x95\\r\\x9a\\x85%9\\xd1B\\xfa\\x8f\\xcb\\xd5\\x8fv\\xabka\\t>\\xd2-\\xf6\\xbb\\x0f\\xb3\\x87K\\xc9\\xde\\x15\\xf1\\xcfq\\xc5\\xb5~\\xf6\\x11\\x86E~\\xbe/\\xed\\xbe=\\xc2\\xfd\\x1e\\x19\\rVfy\\xd5\\xb2\\x05\\t%\\xd5\\xfa\\x817F\\x96\\x93\\xf9}vr\\xea\\x06\\x8dW\\x95%\\x86\\xdfn\\xf3\\x1f\\xb25\\xf6\\x93\\x82\\x91c\\x7f~\\x07\\xf6E\\x8eM\\xc9>\\x06\\xc1\\xa3"\\xddk:\\xef\\x86\\xab\\x1a\\x86K\\xb9S\\xde\\x86\\xcd\\x8a\\xabN\\xee\\xf3S\\xee\\xad\\xdf\\xda\\xb6\\xa5\\xe6\\x157\\x96\\xeds\\x0e\\xb2\\xa1\\xf5[\\x86\\x89c059900a
Creates FileC:\WINDOWS\apppatch\wiiagc.exe
Creates FilePIPE\lsarpc

Network Details:

DNSany.edge.bing.com
Type: A
204.79.197.200
DNSvojyqem.com
Type: A
198.74.50.135
DNSgatyfus.com
Type: A
195.22.26.254
DNSgatyfus.com
Type: A
195.22.26.231
DNSgatyfus.com
Type: A
195.22.26.252
DNSgatyfus.com
Type: A
195.22.26.253
DNSlyvyxor.com
Type: A
208.100.26.234
DNSvocyzit.com
Type: A
69.195.129.70
DNSqetyfuv.com
Type: A
195.22.26.254
DNSqetyfuv.com
Type: A
195.22.26.231
DNSqetyfuv.com
Type: A
195.22.26.252
DNSqetyfuv.com
Type: A
195.22.26.253
DNSpuvyxil.com
Type: A
198.74.50.135
DNSgahyqah.com
Type: A
54.148.180.204
DNSpuvytuq.com
Type: A
198.74.50.135
DNSqetyvep.com
Type: A
109.74.196.143
DNSqegyhig.com
Type: A
198.74.50.135
DNSlygygin.com
Type: A
198.74.50.135
DNSpufygug.com
Type: A
198.74.50.135
DNSpuzywel.com
Type: A
198.74.50.135
DNSgalyqaz.com
Type: A
198.74.50.135
DNSpumyxiv.com
Type: A
198.74.50.135
DNSlysyfyj.com
Type: A
198.74.50.135
DNSvolykyc.com
Type: A
198.74.50.135
DNSqeqysag.com
Type: A
198.74.50.135
DNSqetyfuv.com
Type: A
195.22.26.253
DNSqetyfuv.com
Type: A
195.22.26.252
DNSqetyfuv.com
Type: A
195.22.26.231
DNSqetyfuv.com
Type: A
195.22.26.254
DNSvocyzit.com
Type: A
69.195.129.70
DNSpurydyv.com
Type: A
54.201.30.58
DNSpuvytuq.com
Type: A
198.74.50.135
DNSvojyqem.com
Type: A
198.74.50.135
DNSpuvyxil.com
Type: A
198.74.50.135
DNSlyvyxor.com
Type: A
208.100.26.234
DNSpuzylyp.com
Type: A
109.74.196.143
DNSqetyvep.com
Type: A
109.74.196.143
DNSqegyhig.com
Type: A
198.74.50.135
DNSpumypog.com
Type: A
198.74.50.135
DNSgahyqah.com
Type: A
54.148.180.204
DNSpuzywel.com
Type: A
198.74.50.135
DNSlygygin.com
Type: A
198.74.50.135
DNSpumyxiv.com
Type: A
198.74.50.135
DNSgatyfus.com
Type: A
195.22.26.253
DNSgatyfus.com
Type: A
195.22.26.252
DNSgatyfus.com
Type: A
195.22.26.231
DNSgatyfus.com
Type: A
195.22.26.254
DNSpufygug.com
Type: A
198.74.50.135
DNSgalyqaz.com
Type: A
198.74.50.135
DNSlysyfyj.com
Type: A
198.74.50.135
DNSqeqysag.com
Type: A
198.74.50.135
DNSgadyniw.com
Type: A
109.74.196.143
DNSvolykyc.com
Type: A
198.74.50.135
DNSpurydyv.com
Type: A
54.201.30.58
DNSpuzylyp.com
Type: A
109.74.196.143
DNSpumypog.com
Type: A
198.74.50.135
DNSgadyniw.com
Type: A
109.74.196.143
DNSpufymoq.com
Type: A
72.5.65.112
DNSpupydeq.com
Type: A
109.74.196.143
DNSvopydek.com
Type: A
109.74.196.143
DNSqebylug.com
Type: A
50.116.56.144
DNSvowypit.com
Type: A
109.74.196.143
DNSpufybyv.com
Type: A
50.116.56.144
DNSlysyvan.com
Type: A
198.74.50.135
DNSlyxyjaj.com
Type: A
198.74.50.135
DNSgadyveb.com
Type: A
50.116.56.144
DNSgatycoh.com
Type: A
109.74.196.143
DNSvopydek.com
Type: A
109.74.196.143
DNSqebylug.com
Type: A
50.116.56.144
DNSpupydeq.com
Type: A
109.74.196.143
DNSvowypit.com
Type: A
109.74.196.143
DNSlysyvan.com
Type: A
198.74.50.135
DNSlyxyjaj.com
Type: A
198.74.50.135
DNSpufybyv.com
Type: A
50.116.56.144
DNSgadyveb.com
Type: A
50.116.56.144
DNSgatycoh.com
Type: A
109.74.196.143
DNSqedysov.com
Type: A
178.32.208.147
DNSvonyket.com
Type: A
50.116.56.144
DNSqegyval.com
Type: A
50.116.56.144
DNSgadyciz.com
Type: A
195.22.26.252
DNSgadyciz.com
Type: A
195.22.26.253
DNSgadyciz.com
Type: A
195.22.26.254
DNSgadyciz.com
Type: A
195.22.26.231
DNSganyqow.com
Type: A
50.116.56.144
DNSgacynuz.com
Type: A
178.32.208.147
DNSlyxynyx.com
Type: A
50.116.56.144
DNSlygysij.com
Type: A
178.32.208.147
DNSvowykaf.com
Type: A
209.99.40.220
DNSqexynyp.com
Type: A
50.116.56.144
DNSqexyhuv.com
Type: A
209.99.40.226
DNSgaqykab.com
Type: A
50.116.56.144
DNSvofycot.com
Type: A
50.116.56.144
DNSqedysov.com
Type: A
178.32.208.147
DNSvonyket.com
Type: A
50.116.56.144
DNSqegyval.com
Type: A
50.116.56.144
DNSgadyciz.com
Type: A
195.22.26.231
DNSgadyciz.com
Type: A
195.22.26.254
DNSgadyciz.com
Type: A
195.22.26.253
DNSgadyciz.com
Type: A
195.22.26.252
DNSganyqow.com
Type: A
50.116.56.144
DNSqexyhuv.com
Type: A
209.99.40.226
DNSvofycot.com
Type: A
50.116.56.144
DNSpumyjig.com
Type: A
50.116.56.144
DNSpumyjig.com
Type: A
50.116.56.144
DNSwww.bing.com
Type: A
DNSqegyqaq.com
Type: A
DNSgacyzuz.com
Type: A
DNSlyryfyd.com
Type: A
DNSvowydef.com
Type: A
DNSqexylup.com
Type: A
DNSgalykes.com
Type: A
DNSvonypom.com
Type: A
DNSqebytiq.com
Type: A
DNSvopybyt.com
Type: A
DNSpujyjav.com
Type: A
DNSgatyvyz.com
Type: A
DNSlyvytuj.com
Type: A
DNSvojyjof.com
Type: A
DNSgahyhob.com
Type: A
DNSvocyruk.com
Type: A
DNSpurycap.com
Type: A
DNSgacyryw.com
Type: A
DNSvowycac.com
Type: A
DNSqexyryl.com
Type: A
DNSgaqycos.com
Type: A
DNSlyxywer.com
Type: A
DNSvofygum.com
Type: A
DNSqeqyxov.com
Type: A
DNSgadyfuh.com
Type: A
DNSlymyxid.com
Type: A
DNSvolyqat.com
Type: A
DNSqedyfyq.com
Type: A
DNSvonyzuf.com
Type: A
DNSqekyqop.com
Type: A
DNSlymysan.com
Type: A
DNSgaqydeb.com
Type: A
DNSvofymik.com
Type: A
DNSlysynur.com
Type: A
DNSqekykev.com
Type: A
DNSpupybul.com
Type: A
DNSganypih.com
Type: A
DNSlykyjad.com
Type: A
DNSlyryvex.com
Type: A
DNSlygymoj.com
Type: A
DNSlyxylux.com
Type: A
DNSqedynul.com
Type: A
DNSganyzub.com
Type: A
DNSlykymox.com
Type: A
DNSpujymip.com
Type: A
DNSgatydaw.com
Type: A
DNSlyvylyn.com
Type: A
DNSvojymic.com
Type: A
DNSqetysal.com
Type: A
DNSpuvylyg.com
Type: A
DNSgahynus.com
Type: A
DNSlyrysor.com
Type: A
DNSvocykem.com
Type: A
DNSqegynuv.com
Type: A
DNSpurypol.com
Type: A
DNSgacykeh.com
Type: A
DNSlygynud.com
Type: A
DNSqexykaq.com
Type: A
DNSgaqypiz.com
Type: A
DNSvofybyf.com
Type: A
DNSqeqytup.com
Type: A
DNSpuzyjoq.com
Type: A
DNSvonyryc.com
Type: A
DNSqekyhil.com
Type: A
DNSpupycag.com
Type: A
DNSganyrys.com
Type: A
DNSlykygur.com
Type: A
DNSlymytux.com
Type: A
DNSvopycom.com
Type: A
DNSqebyrev.com
Type: A
DNSvolyjok.com
Type: A
DNSpujygul.com
Type: A
DNSlyvywed.com
Type: A
DNSvojygut.com
Type: A
DNSqedyveg.com
Type: A
DNSqetyxiq.com
Type: A
DNSpumytup.com
Type: A
DNSpuvywav.com
Type: A
DNSgahyfyz.com
Type: A
DNSlyryxij.com
Type: A
DNSgalyhiw.com
Type: A
DNSvocyqaf.com
Type: A
DNSqegyfyp.com
Type: A
DNSpuryxuq.com
Type: A
DNSgacyqob.com
Type: A
DNSlygyfex.com
Type: A
DNSvowyzuk.com
Type: A
DNSqexyqog.com
Type: A
DNSpufydep.com
Type: A
DNSgaqyzuw.com
Type: A
DNSlyxymin.com
Type: A
DNSvofydac.com
Type: A
DNSqeqylyl.com
Type: A
DNSpuzymig.com
Type: A
DNSgadydas.com
Type: A
DNSlymylyr.com
Type: A
DNSvolymum.com
Type: A
DNSpumylel.com
Type: A
DNSlysysod.com
Type: A
DNSgalynuh.com
Type: A
DNSlykynyj.com
Type: A
DNSqebykap.com
Type: A
DNSganykaz.com
Type: A
DNSvopypif.com
Type: A
DNSpupypiv.com
Type: A
DNSqekynuq.com
Type: A
DNSlymywaj.com
Type: A
DNSqedyxip.com
Type: A
DNSpumywaq.com
Type: A
DNSlysyxux.com
Type: A
DNSvonyqok.com
Type: A
DNSgalyfyb.com
Type: A
DNSpujybyq.com
Type: A
DNSqekyfeg.com
Type: A
DNSpupyxup.com
Type: A
DNSgatypub.com
Type: A
DNSlykyfen.com
Type: A
DNSvopyzuc.com
Type: A
DNSlyvyjox.com
Type: A
DNSqebyqil.com
Type: A
DNSpujydag.com
Type: A
DNSvojybek.com
Type: A
DNSgatyzys.com
Type: A
DNSlyvymir.com
Type: A
DNSvojydam.com
Type: A
DNSqetytug.com
Type: A
DNSqetylyv.com
Type: A
DNSpuvymul.com
Type: A
DNSpuvyjop.com
Type: A
DNSgahydoh.com
Type: A
DNSlyryled.com
Type: A
DNSgahyvew.com
Type: A
DNSqegysoq.com
Type: A
DNSvocymut.com
Type: A
DNSpurylev.com
Type: A
DNSlyrytun.com
Type: A
DNSvocyjic.com
Type: A
DNSpurytyg.com
Type: A
DNSpufypiq.com
Type: A
DNSgacyhis.com
Type: A
DNSlygyvar.com
Type: A
DNSvowyrym.com
Type: A
DNSpufycol.com
Type: A
DNSgaqyreh.com
Type: A
DNSlyxygud.com
Type: A
DNSqeqyreq.com
Type: A
DNSvolygyf.com
Type: A
DNSpuzyguv.com
Type: A
DNSvofypuk.com
Type: A
DNSqeqykog.com
Type: A
DNSpuzybep.com
Type: A
DNSgadypuw.com
Type: A
DNSlymyjon.com
Type: A
DNSvolybec.com
Type: A
DNSqedytul.com
Type: A
DNSgalyvas.com
Type: A
DNSlysytyr.com
Type: A
DNSvonyjim.com
Type: A
DNSqekyvav.com
Type: A
DNSpupytyl.com
Type: A
DNSganyhuh.com
Type: A
DNSlykyvod.com
Type: A
DNSvopyret.com
Type: A
DNSqebyhuq.com
Type: A
DNSpujycov.com
Type: A
DNSgatyrez.com
Type: A
DNSlyvyguj.com
Type: A
DNSvojycif.com
Type: A
DNSqetyrap.com
Type: A
DNSpuvygyq.com
Type: A
DNSgahycib.com
Type: A
DNSlyrywax.com
Type: A
DNSvocygyk.com
Type: A
DNSqegyxug.com
Type: A
DNSpurywop.com
Type: A
DNSgacyfew.com
Type: A
DNSlygyxun.com
Type: A
DNSvowyqoc.com
Type: A
DNSqexyfel.com
Type: A
DNSgaqyqis.com
Type: A
DNSvofyzym.com
Type: A
DNSqeqyqiv.com
Type: A
DNSpuzydal.com
Type: A
DNSgadyzyh.com
Type: A
DNSlymymud.com
Type: A
DNSvolydot.com
Type: A
DNSqedyleq.com
Type: A
DNSpumymuv.com
Type: A
DNSgalydoz.com
Type: A
DNSlysylej.com
Type: A
DNSvonymuf.com
Type: A
DNSqekysip.com
Type: A
DNSpupylaq.com
Type: A
DNSganynyb.com
Type: A
DNSlykysix.com
Type: A
DNSvopykak.com
Type: A
DNSpufyxug.com
Type: A
DNSqebynyg.com
Type: A
DNSlyxyfar.com
Type: A
DNSpujypup.com
Type: A
DNSgatykow.com
Type: A
DNSlyvynen.com
Type: A
DNSvojypuc.com
Type: A
DNSqetykol.com
Type: A
DNSpuvybeg.com
Type: A
DNSgahypus.com
Type: A
DNSlyryjir.com
Type: A
DNSpuryjil.com
Type: A
DNSgacyvah.com
Type: A
DNSqegytyv.com
Type: A
DNSvocybam.com
Type: A
DNSlygytyd.com
Type: A
DNSvowyjut.com
Type: A
DNSqexyvoq.com
Type: A
DNSpufytev.com
Type: A
DNSgaqyhuz.com
Type: A
DNSlyxyvoj.com
Type: A
DNSvofyref.com
Type: A
DNSqeqyhup.com
Type: A
DNSpuzyciq.com
Type: A
DNSgadyrab.com
Type: A
DNSlymygyx.com
Type: A
DNSvolycik.com
Type: A
DNSqedyrag.com
Type: A
DNSpumygyp.com
Type: A
DNSgalycuw.com
Type: A
HTTP POSThttp://qetyfuv.com/login.php
User-Agent: Mozilla/4.0 (compatible; MSIE 2.0; Windows NT 5.0; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)
HTTP POSThttp://vocyzit.com/login.php
User-Agent: Mozilla/4.0 (compatible; MSIE 2.0; Windows NT 5.0; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)
HTTP POSThttp://puvytuq.com/login.php
User-Agent: Mozilla/4.0 (compatible; MSIE 2.0; Windows NT 5.0; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)
HTTP POSThttp://vojyqem.com/login.php
User-Agent: Mozilla/4.0 (compatible; MSIE 2.0; Windows NT 5.0; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)
HTTP POSThttp://puvyxil.com/login.php
User-Agent: Mozilla/4.0 (compatible; MSIE 2.0; Windows NT 5.0; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)
HTTP POSThttp://lyvyxor.com/login.php
User-Agent: Mozilla/4.0 (compatible; MSIE 2.0; Windows NT 5.0; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)
HTTP POSThttp://qegyhig.com/login.php
User-Agent: Mozilla/4.0 (compatible; MSIE 2.0; Windows NT 5.0; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)
HTTP POSThttp://qetyvep.com/login.php
User-Agent: Mozilla/4.0 (compatible; MSIE 2.0; Windows NT 5.0; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)
HTTP POSThttp://gahyqah.com/login.php
User-Agent: Mozilla/4.0 (compatible; MSIE 2.0; Windows NT 5.0; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)
HTTP POSThttp://pumyxiv.com/login.php
User-Agent: Mozilla/4.0 (compatible; MSIE 2.0; Windows NT 5.0; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)
HTTP POSThttp://gatyfus.com/login.php
User-Agent: Mozilla/4.0 (compatible; MSIE 2.0; Windows NT 5.0; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)
HTTP POSThttp://lygygin.com/login.php
User-Agent: Mozilla/4.0 (compatible; MSIE 2.0; Windows NT 5.0; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)
HTTP POSThttp://pufygug.com/login.php
User-Agent: Mozilla/4.0 (compatible; MSIE 2.0; Windows NT 5.0; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)
HTTP POSThttp://puzywel.com/login.php
User-Agent: Mozilla/4.0 (compatible; MSIE 2.0; Windows NT 5.0; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)
HTTP POSThttp://galyqaz.com/login.php
User-Agent: Mozilla/4.0 (compatible; MSIE 2.0; Windows NT 5.0; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)
HTTP POSThttp://lysyfyj.com/login.php
User-Agent: Mozilla/4.0 (compatible; MSIE 2.0; Windows NT 5.0; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)
HTTP POSThttp://qeqysag.com/login.php
User-Agent: Mozilla/4.0 (compatible; MSIE 2.0; Windows NT 5.0; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)
HTTP POSThttp://volykyc.com/login.php
User-Agent: Mozilla/4.0 (compatible; MSIE 2.0; Windows NT 5.0; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)
HTTP POSThttp://qetyfuv.com/login.php
User-Agent: Mozilla/4.0 (compatible; MSIE 2.0; Windows NT 5.0; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)
HTTP POSThttp://vocyzit.com/login.php
User-Agent: Mozilla/4.0 (compatible; MSIE 2.0; Windows NT 5.0; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)
HTTP POSThttp://puvyxil.com/login.php
User-Agent: Mozilla/4.0 (compatible; MSIE 2.0; Windows NT 5.0; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)
HTTP POSThttp://purydyv.com/login.php
User-Agent: Mozilla/4.0 (compatible; MSIE 2.0; Windows NT 5.0; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)
HTTP POSThttp://vojyqem.com/login.php
User-Agent: Mozilla/4.0 (compatible; MSIE 2.0; Windows NT 5.0; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)
HTTP POSThttp://puvytuq.com/login.php
User-Agent: Mozilla/4.0 (compatible; MSIE 2.0; Windows NT 5.0; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)
HTTP POSThttp://lyvyxor.com/login.php
User-Agent: Mozilla/4.0 (compatible; MSIE 2.0; Windows NT 5.0; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)
HTTP POSThttp://lygygin.com/login.php
User-Agent: Mozilla/4.0 (compatible; MSIE 2.0; Windows NT 5.0; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)
HTTP POSThttp://qetyvep.com/login.php
User-Agent: Mozilla/4.0 (compatible; MSIE 2.0; Windows NT 5.0; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)
HTTP POSThttp://pufygug.com/login.php
User-Agent: Mozilla/4.0 (compatible; MSIE 2.0; Windows NT 5.0; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)
HTTP POSThttp://puzywel.com/login.php
User-Agent: Mozilla/4.0 (compatible; MSIE 2.0; Windows NT 5.0; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)
HTTP POSThttp://qegyhig.com/login.php
User-Agent: Mozilla/4.0 (compatible; MSIE 2.0; Windows NT 5.0; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)
HTTP POSThttp://galyqaz.com/login.php
User-Agent: Mozilla/4.0 (compatible; MSIE 2.0; Windows NT 5.0; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)
HTTP POSThttp://lysyfyj.com/login.php
User-Agent: Mozilla/4.0 (compatible; MSIE 2.0; Windows NT 5.0; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)
HTTP POSThttp://pumyxiv.com/login.php
User-Agent: Mozilla/4.0 (compatible; MSIE 2.0; Windows NT 5.0; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)
HTTP POSThttp://gahyqah.com/login.php
User-Agent: Mozilla/4.0 (compatible; MSIE 2.0; Windows NT 5.0; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)
HTTP POSThttp://gatyfus.com/login.php
User-Agent: Mozilla/4.0 (compatible; MSIE 2.0; Windows NT 5.0; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)
HTTP POSThttp://qeqysag.com/login.php
User-Agent: Mozilla/4.0 (compatible; MSIE 2.0; Windows NT 5.0; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)
HTTP POSThttp://volykyc.com/login.php
User-Agent: Mozilla/4.0 (compatible; MSIE 2.0; Windows NT 5.0; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)
HTTP POSThttp://puzylyp.com/login.php
User-Agent: Mozilla/4.0 (compatible; MSIE 2.0; Windows NT 5.0; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)
HTTP POSThttp://pumypog.com/login.php
User-Agent: Mozilla/4.0 (compatible; MSIE 2.0; Windows NT 5.0; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)
HTTP POSThttp://purydyv.com/login.php
User-Agent: Mozilla/4.0 (compatible; MSIE 2.0; Windows NT 5.0; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)
HTTP POSThttp://gadyniw.com/login.php
User-Agent: Mozilla/4.0 (compatible; MSIE 2.0; Windows NT 5.0; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)
HTTP POSThttp://puzylyp.com/login.php
User-Agent: Mozilla/4.0 (compatible; MSIE 2.0; Windows NT 5.0; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)
HTTP POSThttp://pumypog.com/login.php
User-Agent: Mozilla/4.0 (compatible; MSIE 2.0; Windows NT 5.0; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)
HTTP POSThttp://gadyniw.com/login.php
User-Agent: Mozilla/4.0 (compatible; MSIE 2.0; Windows NT 5.0; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)
HTTP POSThttp://pufymoq.com/login.php
User-Agent: Mozilla/4.0 (compatible; MSIE 2.0; Windows NT 5.0; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)
HTTP POSThttp://pufymoq.com/login.php
User-Agent: Mozilla/4.0 (compatible; MSIE 2.0; Windows NT 5.0; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)
HTTP POSThttp://vopydek.com/login.php
User-Agent: Mozilla/4.0 (compatible; MSIE 2.0; Windows NT 5.0; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)
HTTP POSThttp://qebylug.com/login.php
User-Agent: Mozilla/4.0 (compatible; MSIE 2.0; Windows NT 5.0; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)
HTTP POSThttp://pupydeq.com/login.php
User-Agent: Mozilla/4.0 (compatible; MSIE 2.0; Windows NT 5.0; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)
HTTP POSThttp://vowypit.com/login.php
User-Agent: Mozilla/4.0 (compatible; MSIE 2.0; Windows NT 5.0; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)
HTTP POSThttp://lysyvan.com/login.php
User-Agent: Mozilla/4.0 (compatible; MSIE 2.0; Windows NT 5.0; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)
HTTP POSThttp://lyxyjaj.com/login.php
User-Agent: Mozilla/4.0 (compatible; MSIE 2.0; Windows NT 5.0; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)
HTTP POSThttp://pufybyv.com/login.php
User-Agent: Mozilla/4.0 (compatible; MSIE 2.0; Windows NT 5.0; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)
HTTP POSThttp://gadyveb.com/login.php
User-Agent: Mozilla/4.0 (compatible; MSIE 2.0; Windows NT 5.0; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)
HTTP POSThttp://vopydek.com/login.php
User-Agent: Mozilla/4.0 (compatible; MSIE 2.0; Windows NT 5.0; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)
HTTP POSThttp://qebylug.com/login.php
User-Agent: Mozilla/4.0 (compatible; MSIE 2.0; Windows NT 5.0; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)
HTTP POSThttp://pupydeq.com/login.php
User-Agent: Mozilla/4.0 (compatible; MSIE 2.0; Windows NT 5.0; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)
HTTP POSThttp://vowypit.com/login.php
User-Agent: Mozilla/4.0 (compatible; MSIE 2.0; Windows NT 5.0; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)
HTTP POSThttp://gatycoh.com/login.php
User-Agent: Mozilla/4.0 (compatible; MSIE 2.0; Windows NT 5.0; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)
HTTP POSThttp://lysyvan.com/login.php
User-Agent: Mozilla/4.0 (compatible; MSIE 2.0; Windows NT 5.0; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)
HTTP POSThttp://lyxyjaj.com/login.php
User-Agent: Mozilla/4.0 (compatible; MSIE 2.0; Windows NT 5.0; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)
HTTP POSThttp://pufybyv.com/login.php
User-Agent: Mozilla/4.0 (compatible; MSIE 2.0; Windows NT 5.0; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)
HTTP POSThttp://gadyveb.com/login.php
User-Agent: Mozilla/4.0 (compatible; MSIE 2.0; Windows NT 5.0; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)
HTTP POSThttp://gatycoh.com/login.php
User-Agent: Mozilla/4.0 (compatible; MSIE 2.0; Windows NT 5.0; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)
HTTP POSThttp://qedysov.com/login.php
User-Agent: Mozilla/4.0 (compatible; MSIE 2.0; Windows NT 5.0; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)
HTTP POSThttp://vonyket.com/login.php
User-Agent: Mozilla/4.0 (compatible; MSIE 2.0; Windows NT 5.0; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)
HTTP POSThttp://qegyval.com/login.php
User-Agent: Mozilla/4.0 (compatible; MSIE 2.0; Windows NT 5.0; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)
HTTP POSThttp://gadyciz.com/login.php
User-Agent: Mozilla/4.0 (compatible; MSIE 2.0; Windows NT 5.0; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)
HTTP POSThttp://ganyqow.com/login.php
User-Agent: Mozilla/4.0 (compatible; MSIE 2.0; Windows NT 5.0; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)
HTTP POSThttp://qedysov.com/login.php
User-Agent: Mozilla/4.0 (compatible; MSIE 2.0; Windows NT 5.0; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)
HTTP POSThttp://gacynuz.com/login.php
User-Agent: Mozilla/4.0 (compatible; MSIE 2.0; Windows NT 5.0; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)
HTTP POSThttp://lyxynyx.com/login.php
User-Agent: Mozilla/4.0 (compatible; MSIE 2.0; Windows NT 5.0; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)
HTTP POSThttp://lygysij.com/login.php
User-Agent: Mozilla/4.0 (compatible; MSIE 2.0; Windows NT 5.0; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)
HTTP POSThttp://vowykaf.com/login.php
User-Agent: Mozilla/4.0 (compatible; MSIE 2.0; Windows NT 5.0; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)
HTTP POSThttp://qexynyp.com/login.php
User-Agent: Mozilla/4.0 (compatible; MSIE 2.0; Windows NT 5.0; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)
HTTP POSThttp://gaqykab.com/login.php
User-Agent: Mozilla/4.0 (compatible; MSIE 2.0; Windows NT 5.0; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)
HTTP POSThttp://qexyhuv.com/login.php
User-Agent: Mozilla/4.0 (compatible; MSIE 2.0; Windows NT 5.0; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)
HTTP POSThttp://vofycot.com/login.php
User-Agent: Mozilla/4.0 (compatible; MSIE 2.0; Windows NT 5.0; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)
HTTP POSThttp://vonyket.com/login.php
User-Agent: Mozilla/4.0 (compatible; MSIE 2.0; Windows NT 5.0; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)
HTTP POSThttp://qegyval.com/login.php
User-Agent: Mozilla/4.0 (compatible; MSIE 2.0; Windows NT 5.0; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)
HTTP POSThttp://gadyciz.com/login.php
User-Agent: Mozilla/4.0 (compatible; MSIE 2.0; Windows NT 5.0; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)
HTTP POSThttp://gacynuz.com/login.php
User-Agent: Mozilla/4.0 (compatible; MSIE 2.0; Windows NT 5.0; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)
HTTP POSThttp://lyxynyx.com/login.php
User-Agent: Mozilla/4.0 (compatible; MSIE 2.0; Windows NT 5.0; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)
HTTP POSThttp://lygysij.com/login.php
User-Agent: Mozilla/4.0 (compatible; MSIE 2.0; Windows NT 5.0; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)
HTTP POSThttp://vowykaf.com/login.php
User-Agent: Mozilla/4.0 (compatible; MSIE 2.0; Windows NT 5.0; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)
HTTP POSThttp://ganyqow.com/login.php
User-Agent: Mozilla/4.0 (compatible; MSIE 2.0; Windows NT 5.0; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)
HTTP POSThttp://qexynyp.com/login.php
User-Agent: Mozilla/4.0 (compatible; MSIE 2.0; Windows NT 5.0; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)
HTTP POSThttp://gaqykab.com/login.php
User-Agent: Mozilla/4.0 (compatible; MSIE 2.0; Windows NT 5.0; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)
HTTP POSThttp://qexyhuv.com/login.php
User-Agent: Mozilla/4.0 (compatible; MSIE 2.0; Windows NT 5.0; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)
HTTP POSThttp://vofycot.com/login.php
User-Agent: Mozilla/4.0 (compatible; MSIE 2.0; Windows NT 5.0; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)
HTTP POSThttp://pumyjig.com/login.php
User-Agent: Mozilla/4.0 (compatible; MSIE 2.0; Windows NT 5.0; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)
HTTP POSThttp://pumyjig.com/login.php
User-Agent: Mozilla/4.0 (compatible; MSIE 2.0; Windows NT 5.0; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0)
Flows TCP192.168.1.1:1032 ➝ 204.79.197.200:80
Flows TCP192.168.1.1:1060 ➝ 195.22.26.253:80
Flows TCP192.168.1.1:1061 ➝ 69.195.129.70:80
Flows TCP192.168.1.1:1062 ➝ 198.74.50.135:80
Flows TCP192.168.1.1:1063 ➝ 198.74.50.135:80
Flows TCP192.168.1.1:1064 ➝ 198.74.50.135:80
Flows TCP192.168.1.1:1065 ➝ 208.100.26.234:80
Flows TCP192.168.1.1:1066 ➝ 198.74.50.135:80
Flows TCP192.168.1.1:1067 ➝ 109.74.196.143:80
Flows TCP192.168.1.1:1068 ➝ 54.148.180.204:80
Flows TCP192.168.1.1:1069 ➝ 198.74.50.135:80
Flows TCP192.168.1.1:1070 ➝ 195.22.26.253:80
Flows TCP192.168.1.1:1071 ➝ 198.74.50.135:80
Flows TCP192.168.1.1:1072 ➝ 198.74.50.135:80
Flows TCP192.168.1.1:1073 ➝ 198.74.50.135:80
Flows TCP192.168.1.1:1074 ➝ 198.74.50.135:80
Flows TCP192.168.1.1:1075 ➝ 198.74.50.135:80
Flows TCP192.168.1.1:1076 ➝ 198.74.50.135:80
Flows TCP192.168.1.1:1077 ➝ 198.74.50.135:80
Flows TCP192.168.1.1:1078 ➝ 195.22.26.253:80
Flows TCP192.168.1.1:1079 ➝ 69.195.129.70:80
Flows TCP192.168.1.1:1080 ➝ 198.74.50.135:80
Flows TCP192.168.1.1:1081 ➝ 54.201.30.58:80
Flows TCP192.168.1.1:1082 ➝ 198.74.50.135:80
Flows TCP192.168.1.1:1083 ➝ 198.74.50.135:80
Flows TCP192.168.1.1:1084 ➝ 208.100.26.234:80
Flows TCP192.168.1.1:1085 ➝ 198.74.50.135:80
Flows TCP192.168.1.1:1086 ➝ 109.74.196.143:80
Flows TCP192.168.1.1:1087 ➝ 198.74.50.135:80
Flows TCP192.168.1.1:1088 ➝ 198.74.50.135:80
Flows TCP192.168.1.1:1089 ➝ 198.74.50.135:80
Flows TCP192.168.1.1:1090 ➝ 198.74.50.135:80
Flows TCP192.168.1.1:1091 ➝ 198.74.50.135:80
Flows TCP192.168.1.1:1092 ➝ 198.74.50.135:80
Flows TCP192.168.1.1:1093 ➝ 54.148.180.204:80
Flows TCP192.168.1.1:1094 ➝ 195.22.26.253:80
Flows TCP192.168.1.1:1095 ➝ 198.74.50.135:80
Flows TCP192.168.1.1:1096 ➝ 198.74.50.135:80
Flows TCP192.168.1.1:1097 ➝ 109.74.196.143:80
Flows TCP192.168.1.1:1098 ➝ 198.74.50.135:80
Flows TCP192.168.1.1:1099 ➝ 54.201.30.58:80
Flows TCP192.168.1.1:1100 ➝ 109.74.196.143:80
Flows TCP192.168.1.1:1101 ➝ 109.74.196.143:80
Flows TCP192.168.1.1:1102 ➝ 198.74.50.135:80
Flows TCP192.168.1.1:1103 ➝ 109.74.196.143:80
Flows TCP192.168.1.1:1104 ➝ 72.5.65.112:80
Flows TCP192.168.1.1:1105 ➝ 72.5.65.112:80
Flows TCP192.168.1.1:1111 ➝ 109.74.196.143:80
Flows TCP192.168.1.1:1112 ➝ 50.116.56.144:80
Flows TCP192.168.1.1:1113 ➝ 109.74.196.143:80
Flows TCP192.168.1.1:1114 ➝ 109.74.196.143:80
Flows TCP192.168.1.1:1115 ➝ 198.74.50.135:80
Flows TCP192.168.1.1:1116 ➝ 198.74.50.135:80
Flows TCP192.168.1.1:1117 ➝ 50.116.56.144:80
Flows TCP192.168.1.1:1118 ➝ 50.116.56.144:80
Flows TCP192.168.1.1:1119 ➝ 109.74.196.143:80
Flows TCP192.168.1.1:1120 ➝ 50.116.56.144:80
Flows TCP192.168.1.1:1121 ➝ 109.74.196.143:80
Flows TCP192.168.1.1:1122 ➝ 109.74.196.143:80
Flows TCP192.168.1.1:1123 ➝ 109.74.196.143:80
Flows TCP192.168.1.1:1124 ➝ 198.74.50.135:80
Flows TCP192.168.1.1:1125 ➝ 198.74.50.135:80
Flows TCP192.168.1.1:1126 ➝ 50.116.56.144:80
Flows TCP192.168.1.1:1127 ➝ 50.116.56.144:80
Flows TCP192.168.1.1:1128 ➝ 109.74.196.143:80
Flows TCP192.168.1.1:1150 ➝ 178.32.208.147:80
Flows TCP192.168.1.1:1151 ➝ 50.116.56.144:80
Flows TCP192.168.1.1:1152 ➝ 50.116.56.144:80
Flows TCP192.168.1.1:1153 ➝ 195.22.26.231:80
Flows TCP192.168.1.1:1154 ➝ 50.116.56.144:80
Flows TCP192.168.1.1:1155 ➝ 178.32.208.147:80
Flows TCP192.168.1.1:1156 ➝ 178.32.208.147:80
Flows TCP192.168.1.1:1157 ➝ 50.116.56.144:80
Flows TCP192.168.1.1:1158 ➝ 178.32.208.147:80
Flows TCP192.168.1.1:1159 ➝ 209.99.40.220:80
Flows TCP192.168.1.1:1160 ➝ 50.116.56.144:80
Flows TCP192.168.1.1:1161 ➝ 50.116.56.144:80
Flows TCP192.168.1.1:1162 ➝ 209.99.40.226:80
Flows TCP192.168.1.1:1163 ➝ 50.116.56.144:80
Flows TCP192.168.1.1:1164 ➝ 50.116.56.144:80
Flows TCP192.168.1.1:1165 ➝ 50.116.56.144:80
Flows TCP192.168.1.1:1166 ➝ 195.22.26.231:80
Flows TCP192.168.1.1:1167 ➝ 178.32.208.147:80
Flows TCP192.168.1.1:1168 ➝ 50.116.56.144:80
Flows TCP192.168.1.1:1169 ➝ 178.32.208.147:80
Flows TCP192.168.1.1:1170 ➝ 209.99.40.220:80
Flows TCP192.168.1.1:1171 ➝ 50.116.56.144:80
Flows TCP192.168.1.1:1172 ➝ 50.116.56.144:80
Flows TCP192.168.1.1:1173 ➝ 50.116.56.144:80
Flows TCP192.168.1.1:1174 ➝ 209.99.40.226:80
Flows TCP192.168.1.1:1175 ➝ 50.116.56.144:80
Flows TCP192.168.1.1:1180 ➝ 50.116.56.144:80
Flows TCP192.168.1.1:1181 ➝ 50.116.56.144:80

Raw Pcap

Strings
B.
.5
.
.
V
..;
ax.
..h..
.
.
6
..
.[
..
....
..

000004b0
2.1.9.8
-:2C?DHU
5.1.3.6
aNyz
atDRuvkCo
AXZQVxb
Betacyna
BFQTKBIRXYWW
BKMkE
BnUI
BpFBoy
bTybo
Bujyku
Cafe
CDSKYYef
cFeke
Cisyjiha
CompanyName
cVaZrPttU
Cytep
DamBvdan
Depo
dLyeFaq
DNlivv
Duhe
dVojyxube
Dyjaq
Dyxiri
Fehy
Fesyjy
Feture
Fexet
Ficojaxa
FileDescription
FileVersion
Foke
Fukekoh
gMNsY
GReGvpcqb
GwoFr
Haben
hCag
 hh 
HOSVNPOENEHRQH
HOVGVMTXRDQBJUZXJHX
HPLVKyIDi
iFiziw
iOCvzSh
iQozo
iZabym
Jebesa
Joqet
Juxupeh
jwlpYLGP
kJZhcEjQ
KKutAkAQ
kMehyh
KndaCAP
Kubicy
Kunipip
Kybil
Kyne
LAzcDDa
LegalCopyright
Leme
Lobyg
lSugysa
Metallogeny
Mevil
Mezanov
mPak
Myjo
Mymyry
nKGzYRqr
NMYBl
Nugu
oXuk
Paktong
Paratrooper
pekiGfqAH
Pogu
poxZwxxJ
ProductName
ProductVersion
Puvic
Pywazowe
qaRwk
QELlLha
QgkEw
Qucej
QulIBrn
Quwyp
Ray Adams
RfxRUFw
Riveji
Romi
RvcHI
SBJKHYGKVVREWNBIC
sHsUhzfXN
Sinorep
StringFileInfo
Temunono
Tesu
Tihuf
Translation
Tygug
Tykupy
Typodu
ubdQXl
uDyn
VarFileInfo
Verdana
Vica
VOTQ
VS_VERSION_INFO
vXpV
vZohes
Wylude
Wynamat
XcVfNkdXp
Xete
yCuv
yjHgnqZ
yswFgBt
Zalyh
Zeviweme
Zyvujo
 !$!!!
 (( (   (
 )! 	!
-%>@="
;*.'+#&$
!<<-%!-*
"  "  " 
"" " "
( ,$-!-%
( ( ( 
*"::+&-"
*#+"';*&
&/,/-/
&"&&$""""
% $%%$
0.;&<+
$(0<+#01%9"1#&>6(26($?+.91!''113;$0!:1
$0,>,)>0$@>'.)3<6%2&#0<9=/3)8!*/=
!=0"!%@0//"6%=1;9
0  0`P
@00`P``P
01-$:(;@31#6-*3&
013!4&@5:+,%11';&:v
0;&23.=+?%#&*,8@?-*;=)
0###:-24)(*
02#((+--'5V
%'<!%/*)=?0%2=#6&:
031204000000Z
:03%28:0/;;+?.,91&-T
"0$3>X
040716000000Z
04=./##&%')#!/0>?M
04 4$6
04"=85>$%(&B
-0#">5/&1';7=/38#.(%*>+!$($%6+2#871#.#"55@.8@*5-24.
0.5>!4>1+3+;)@+588
=:0*?5//'4-6@8:47%>3$5-=<87'.1@33@'*9,,-"&5#?8Jyzino
$0"6!4.967>Q
)0<7*,0/!/(.#2&&;6:9,$=<2764=&1<02-Jodu
070615000000Z
0$=)=+>?.+=7%3+(,&#07-%+*08;!'!+*"0;'0)5(Dakoh
<'0:!7,)74#"
/0;7@/'&74;Neka
	0!8?,049-19*!!(("892/=>@F
081124000000Z
'08,/1165!<'#36$9=<5.&!1?.&1Hilyhasi
0,@,8$&1;,5@Johu
=)08617?$(*26[
-"(,+09"-'8!(+<<!@R
09zCz30Szbzkz60
 0aQ`Q!
0C0j|t|z|
0http://crl.verisign.com/ThawteTimestampingCA.crl0
0J#2*:3>00@609/$-616&
[0jtQf
0~K<W[
0@@@P@``@
 0`P 0
0 P`0`
(?%&&'0)<#/&Padu
`"@"0@pbBBpP
@0Pp pp ` 0``@@ 
.,&/0+?/')Rywucojigor
0(SJP	r
>=0_Veqa
0Z"**sh
|.	1}'
1!:+#*<!#*;<!;=
100518135128Z0#
)1*,=,0<2(:!Ceqogywegihek
;("1%06-5$.!/+.%;/(1'8>>512>;3*4,/1(6
110106235959Z0
1%1,121B1	
(),##?*115426):<0#:/&>:83*/4056$,)1"9'
1"2')+
120614235959Z0\1
(12"0#")q
/:+@1/2K
131203235959Z0S1
-@>13<;22-!9:Kud
(+-+=;1)3'3<.%!#19%*)64'5-.&+8(,#5*Fuqon
140715235959Z0
'1(@@&&4'#)2/.+<01"1'0@#/$-23Wycesusyhybasixu
*<&1/!/4:6>'.>1
1>*>4:8>02)#8-*:)7'0.(L
1./-&>'@485#92%/;@@.($-=8@:'/8?4"'86/*!;.>'==&&"4R
1629@?2#>3984/+$984$1'=)=<%"7*7@.8+J
.1/!63)%-0:<=
=$16%!%'-318&3
$,163.+&91,4V
166":<570<0!17(7=
%'1;/=?$6+:;7/**;=
!,,>'1,67$%#@=@8"6Q
1*-%;>7<>#!?+4<2/1)414?*@!;5605-(#@!3#2?02J
!1;*,75"45/#$6-%=/8)'/37*25;'5
*$$1(-/8&),01;(563
'#)*181'200!%1<2#P
%)1+::9T
(@1("$'?Cytazi
.>?*1?!%G
1k*qEE
1'ls6@
$'1:Pahoxuda
1q@qAq 1!0!pq
1S0QK[
20"0%,2:,*9$3(?!,Q
+20:@'<#>,,99;:<*-&@6!*8?
?'!21;3-/4,8))"&."/,82<7-4=!#:!4<7r]
+,=<:>+(!*;">=2#!1T
)//.(2"<(@@/2'0.v
2&>262655<G(
228'+''5'(3,/=05-7L
?;=,2="%2**Bajod
22 rPR@P
'<+2$"&<32/(;65?5/?":>8@1)>6(,,'&!?(7/#7,;%9?
/)/2@/>3#592!@8,<!K
,%2(3;;5<?$,Saxebi
2#!%!5
.;2)5"0*&&-#0%'%7@-+)4Xuq
25#;0,=&&82(86*2?
25!)?3/28-(8232'60!S
2:558;9?
2?)&5,=-&719'%
:;%2-!5*V
=26/"':<+?'+.0.%,><?"?4S
2,6%1#(."$=+=-9:'0(>;?7*'x
."265!3@!80I
"!$).@<-26::8"22*,&#!6-<@8(C
,(-27'&)4$9<"2;)*#66)-14*?++7.8@$Xuvarevyjybili
.2775(6''
28529-$&,;2260+::'1&.
2:8'+5<4@$:#-??!)+!R
	2%891:&%'$6*=+&+:L
2@$8?*W
29!'),43
<&::2!9!7>=7+7/*5"Z
;)%2/'%..9+;8&3)?%2&,;%8';0,8@5Lebajipikyd
*,)2#)(@,"!9($</#/Bihyty
@2!?!l
2Mqe5W|JI
"&&2Mypoju
-,2ouU.SnN~n
"2 r"R  
2Terms of use at https://www.verisign.com/rpa (c)041.0,
2.Wg|;\~4
.(*&;3-0-1,<8(4=<):."@
..%$3)%:0<-%5<
;;30'8<$6001(-9(;$K
3/&1<+8159
~?3>1urB
$32+6204
3--'"2Qorono
33,3(=&"!#!;%.4713
33@!-3=';6=*(9
):>$3;#/44+(0
34/44??!+%1=0*Xoro
=:3!%(4;*953<'3;!;4>42
..%3)*!510%,)=7(2+5-&15/6;7
(>?)3&53+:+33Q(
*;&<35+;@#8;76"-<$(@4?@%72/3;*,?Qyhyzeqygopu
<)3*6,*
;3$6373,!*cRJytimul
'-%:36.'96"7?*
38@=>@6HHU
"%?%;/3"8#Vivi
.#+!,39/-24&?(<
=3(=%9:-($.@"5
!.@3982##6=,3':.&2,P
3BMs5c
#3Caniveleqokoru
3http://CSC3-2004-aia.verisign.com/CSC3-2004-aia.cer0
}3}I}T}Z}c}o}u}
&%3m1r
3#PIi+
3Una4.i
.:.4&&
%+@4>!
+<&>.<>?*;-401)>&%7:8(@=839865,7Cahyt
-)40+#2!1/"/%4>'75,=!+=6,6787)%;=39>4&#=",+2'#?1478<2,5#<@=&<
_4\0<2=#4C
40\4dXt<p8HL
/4=?;<$$+0(,<>6;5(,1@!92'!&%3<-"(:"!D
40@?7>.?)!18'98*!:=#>35>$@<5#*4(!&5'
'4082-(1*
4#>)*?"?,12:$@Pypa
'(4&)&2"01#3"@;<<+#"@0,
+4;!-"-=>,:295'&1:P
43=&/$
=433237.+'$'6#(&*=)6.),#==>2-=,3+;#Nypyfixu
*.4*&@++.$'?3@4596
435/662?5'240%
((43&>66.-'$,5#7"-"Vyzu
4&$$&4&6$
4>(=493(037!G
4.5(<7$3%7(>@."
4,??@*;59,.+>'''95120P
:4&.?63*;-389-4*/,.;8:>-8+%6*8iAV
&+46+#/5/<8$9.5;2-%)
$4#-)&"+(66+6(8448>")Jydijyfekeqij
-$4720;27-91<*
>47,=".-/7-2*":;'@,.$%#*#;-)7,"
=4=#%<8+14;;34,?#B
?4>83"6=192,8*)44
?-485')6190T
4'87?;<C
&48!Qykuro
).4/)@90!#$"8
*!&4%92L
4b`P`m
4db^wo9
'4Hupopupociduno
4Jp8A*0
4LrB8Yx
&=%'4M
4#PFfP
4(s=8!Jocamyjosusurihod
4T,*>0=!&?7/$4>7/!-'1')>+1@2'Becudu
)4XM8p
4_ZD5 
<%(;(+5+
5'046"7<4>2,0Runi
50.+;7::!;.
@($->#5110:"/-;$7(@8,5830K
515?;::",.#');/)6j
51<(=-74<3&:9'+=@2;)
"5=,-":$1*:?/J
<5>?2@>2&'*;6."*1*7'*0"%%5$:?21%',
?=5*;"'2$+&!+;;!!6-=
$528>=;9&%?1.(#7$2
5.*3.08?!**;;$?4(M
*53':"/&3+8>/(-;%/?<-7@F
	'5./#3%%<78%8$14
5/:,3(?8??;:Rumak
$@!$,5>=:)-%#&%"@39V
$:5-#4+
)/5/;4/-+@6(3?+$#@53"+3=$*1('1(.-1"4'93#9Pysyqiliqofeh
$+55<2&1$,1#Byreb
5":$=*57#9;4
:@55!8"!&=1'*9F
;5+=>?765+&<=%#T
:%!58(;;,1*@%P
,5=.8'3-:+.O"
5!85,2?'%,62':=9%'9005+9^a.
5++&8.'(79Kixiqe
%5;/8)8&#6@*>8*"6
/%":5/"@':<:8Mavoripaxohosym
5)9!*00-/$78Foxag
;<*5-91Dogaconimu
'',?@($5%9C
!5^cg#hn
5Digital ID Class 3 - Microsoft Software Validation v21
5MDL~m
%.@5pF
	5R1jX
5-Savowuh
5|Z(4vP
^*>,+6@-*<&
>%:(>;<&6<
+,)6,,/0*'0%>="#)Cijujibavojaga
+#%?60,4%%;4/!%9,*!<9&
6<.*>06<8<+6*#.##>*>M
6-&1!#$.>@-1:Qagedebu
61*@=55&,%'."Firabodokyzos
6@!?2!%
628+81>7(-"=1='-+Nif
62/.;Jawurutatovusun
6<3</0Fyq
'63:&-:4<06/41@%$"1Xyferar
@63;:53$+:Q&%2#/(;7Zaf
,?6403)*<"&(:!#7,#!Komo
6)4+$+$0#$95$;#:5Syvono
:6-=+"4@;!5@>&!-N
&6#@)#4/Taped
#-%'*65@:!>$==?5=$21%%Nyq
66.'///=4'
669/:9765*+:>.@"%$->;:-01*@#%&67Vow
=%>*6'&<6Mix
$<6*7$';)2;S
673#9%6-<>5R
:>.6,:%7$(7
684!6>7!==,-8~
&%6$8<@;'*8;)&683Sawajymunih
68Jo+u
69511)?0%7-=1"52/
6^bMRQ4q
6$E8>n^
%6*i8P
/6%?++J
-'6%$mJl
?@+6nG
@6sdTJ}
6T6d4i1
6Vivobobuh
6x-;6z 
6>	Z:B
:(&;;(*<-&7$
7=.0%.--0588@(7.1007*;04$2Hot
;<**#7@#.?'>*+<+0"1/311>?7/;1)
<=70%6)!<*,3%9!Pope
70+yFy;0cyjyty
7&1@#)"/4"<;<?2,Wifatadozodiw
72)2$(-,5*0.!?3=#/Nin
:(!>",7!?:)>25">/%-+8%''72<4?-Lok
<+<7?27,1,93/%%+)=548<6
+<7455'5"%/%8*)16=Wytuhuta
)*7:**'#*4&9+*
"@@-7:6%2-(#0%15$(Baze
/7(>=&'622!3)1)Siji
7;"=#+%.62?4,
7-.,?6$/)8$0-41C
$"7"?7)/$3$210@.41)=.3?9$0R
<"/"(:--774?6;?04'5w
'78!?2:.@0+00'=%P
7.'832-,*Homusugiq
7+')9n
-7.C`(
,7<$Cj
7gJd.F
-:=&'"7@!i
-%7IjcB~;
?7!Op1
7r/ @)<l
7u9,28-059195:='#?5151<#=:=&>-);$Wyha
&7(uf#
7!>=#Verixu
)((!8\
#=;80><$$%=,20'&-!:".#;>:769#53Juzazar
/."-&/.@@80/6>4678=/!5,<6?5Mepowy
80(%,6$.77@+!100865
>8:.078,/'"$%.,$
=81206@4/4;3?1+?H
8:$1$?>'./"4B
82&5)=</77>%?>>,3,P
8.%34;-8."7F
:%8>3:5
8=)*4<11)*&&4:5K
;@8*43
#=85+;;*9(6
'85w&&
.8/6>((&1",2>@057&#%?=?:1?6.0%
8<-6668505$-;$$$:9
8=6mmS
87<"#5$*&1#'4"41@'#3<78(#+=2+10<7(/ 
($'+.'8&%=<,:$7#/>,&%$#,*"78!5":=:>"2:%-7='"@9&&&7;,T
(?/8%?8&+++8%:
%8:8(-*;+97!-^+#46$&&%'4+%8:.&1:)2$.'!=$!(.2Myn
=$&:"/8<:%8Novo
?%)(!897)(!47M
*@8C(g
8GUV31b
8H*/;@)(18>:%5@07>-.2$6$!+*:.608<V
8h-X B,
$8JI~{H
8Jugimusi
8(lt\ 
8$T`0Tx
8Z>M>-+
(,-'<"9)#=$!.
>>91"#@6>
"9#>!@17(--5+8*;;7<F
:(9'.%=*1%#*;-)>>:!*>7!;%9"6
9<;,;"23:930/=(Tiw
?9;.(2*")5Nimorucyd
9$&>&29!#87(<56$)):6:3#:7%@+%$Pujyjuwy
.@.9;>2;Zidujecobiqi
9%@3'0,/-+*#:%'Bypuk
!9"/3/2))B
>=93<@(=,/+-$3<?).'&*%/C
9'',3:.*<!#85Sc$
9<*>47'&*0!0;,&)69$+'3!T
9;4;&"$8,3=7Feqityl
951;/$<&@8<#")
''.##.,?9+($>5<4!8`/9
=:+9/>,/*:57*#<;.0+V
9,5741)2#'4$99-!8
$9-!'#5'<<7#5=G
9=&/5@/999<(;,&0.4+Z
/9<)=<)5/?'F
;!=9(,6",5+?+&*-7$J
96=7#+@0@'.1Rav
972(#53923
'973(!Juj
<9:;814:%!6%/S
.(-)..9&<8(#?;%5P
9)(?<"88@)''.>&19"G
9/9<*01.!>-(36",8;Cuco
9.%@)"@-@&??#%9*".,4@%%+;=.0'
9(989W9a9
9BF	N>
.-#9Hev
9')Syq
/#=9"%%#?$.(&V
%*$9!-"=$Z
"a?0~`P
A@1\!(
\a2*;(?4%3)!>*2+T
A4Gay+H
a,*?:'..&8365)<<,51'@;*-
@Aaaa"
#!`a b"cb@!c@caaaccA C`C
ab`C cc
a/bR<<#I
ABV%,j-
aBzUw!
AC@c##`
ActivateKeyboardLayout
AddFontResourceA
AdjustWindowRect
aj>7G\#
aL.6q5
AppendMenuW
aqedjMxD
}A Usz
Au<+Wi
aXKIA(.
aXLw:+l
"a-Z(LC
`@```b
B`"`"`@" @
b+34>8#=*3=)8:.@0
).!~b6[
&@/>#;%/!%>%Bahe
` `` @@@bb
b`%&b';
"b @ B
@B@B@@
BB"`" 
@`bbb"
	b"b"b"
 `b"B@@b
@@bB``b 
bB`@B@
`@@"`B@bb
@B@ ` B"B
"b`B `bB"@B"`
bB``bb`@b"b bbbBb`b
bb" "B"P0
!@b#""`c!!C
bD4KVz
bDF"`f
:B|E8yD
+;be"-d
BeginUpdateResourceA
Bihowozekux
Bizaxoruza
bJ.^km9
bnUc"	
!Bomiwihumene
bOQp A
BPifeboki
bS47%=4+0
bskjPros
Burofavuqicyq
bWz?K\
bXs<^RN
@bY3sa
b*y9A:;KY@
)B@"Yk
^c,{0gh
c5<(uB
C"""a 
CA#aAB c@!"aB
caBKaih
CA#CC#c
_CallNamedPipe_@28
Catefogo
cBA`bB
cC# kz`:z
~/C<EK
+C<|	F
CfKELq
|cg7+a<
CGw@l?
Ch6'.5;)''!+}
CharLowerW
CharNextA
CharPrevW
CharUpperA
Cinisitajesaju
CiQH";
*CkIx{
@C)!KVynexujikilise
Class3CA2048-1-430
.Class 3 Public Primary Certification Authority
.Class 3 Public Primary Certification Authority0
CM_Get_Device_ID_List_SizeW
cO?@j:
COMDLG32.DLL
CompareFileTime
ConnectNamedPipe
CopyFileA
CopyFileExW
CopyIcon
CopyRect
CPZ90z
CreateAcceleratorTableA
CreateBitmap
CreateBitmapIndirect
CreateColorSpaceA
CreateColorSpaceW
CreateCompatibleDC
CreateDesktopA
CreateDesktopW
CreateDialogIndirectParamA
CreateDialogParamW
CreateDIBPatternBrushPt
CreateEventW
CreateFontA
CreateFontIndirectA
CreateFontIndirectExA
CreateFontIndirectExW
CreateFontIndirectW
CreateMenu
CreateMetaFileA
CreatePalette
CreatePolygonRgn
CreateScalableFontResourceA
CreateScalableFontResourceW
CreateSolidBrush
CreateWindowExA
cT:\9v
,><>c)'tF?p/
Cucitalub
Cuqigyh
'CxR5W
cyY6tJ
cZbf>Q*H
*D;;,1~(
D#<1&<*")06@>:5#uH
d1;|K+
`.D{{3
D$31[U
(d`5jh
==d6|h
d7?|">
Dacofopezu
Dahavaqyzu
`D"BF@"F@"@
& D"`DfD&"
DefWindowProcA
D-e@G$x
DeleteObject
DestroyCursor
DestroyIcon
Dexityz
d>F-<`
D$"`F& db`dB$&@@
DialogBoxIndirectParamW
DialogBoxParamW
d;i_o?
d[L5.g
DL7"} 8
<D\l`$(dX|TXh<TTlH4
d;lyORxk
	Dmu$j"vI
:d'n\{
Doheqyxeh
DosDateTimeToFileTime
D&;\tk
Dupixazezyni
Durbanville1
Duxorobynogoc
Duxuly
D+{x@7
Dyvuramutaj
EFzpBZ
E$glG0
eHd+&$
EmptyClipboard
EndMenu
EnumCalendarInfoW
EnumClipboardFormats
EnumDateFormatsA
EnumDateFormatsW
_EnumProps_@8
_EnumServicesStatus_@32
EnumTimeFormatsA
EnumWindows
E"p\:b
eS0%(0q
Esz?2r
ETO7G?
eu'0y5cYl
ExpandEnvironmentStringsW
ex%)rg
ExtractAssociatedIconW
ExtractIconExA
ExtractIconExW
EyappJ&
eyH LOA
$"@F``& &
F-/"7"&D
Facyfagu
$$FBf 
F`DDFfb
f`dF``
Fejipe
FEvw	7
&ff@$"&@$
@$"&fFbd@
"FFD`FF
/-fIG`E
FileTimeToDosDateTime
_FindExecutable_@12
FindResourceA
FindResourceW
FindWindowW
FJzAQH*
fkqqh\TV;
Fm~PVi.
FreeLibrary
fU5"m;
*FvM}&
fxPq@x
F\=xz/R
fYEU8hni
Fygefunen
(Fytepavyjiqer
G	2xt>#!$)28;$=34,6%*44
]^g4b{>9
G7s!,#b
<Gaguputazacet
gD(3$<
gdi32.dll
GetActiveWindow
GetCaretPos
GetClassInfoExA
GetClassInfoW
GetCPInfo
GetCurrentProcess
GetCurrentProcessId
GetCursorPos
GetDateFormatW
GetDCEx
_GetDefaultCommConfig_@12
_GetDiskFreeSpace_@20
GetDiskFreeSpaceA
GetDlgItemInt
GetDlgItemTextW
GetEnhMetaFilePixelFormat
GetEnvironmentStringsW
GetExpandedNameA
GetExpandedNameW
GetFileTitleW
GetFocus
GetKeyState
GetMenu
GetMenuItemCount
GetMenuItemInfoW
GetMenuItemRect
GetMenuStringW
GetMessageA
GetModuleFileNameA
GetNumberFormatW
GetOpenFileNameA
GetOpenFileNameW
GetProcAddress
GetRasterizerCaps
_GetServiceKeyName_@16
GetShortPathNameA
GetStartupInfoA
GetStringTypeA
GetSubMenu
GetSystemDefaultLangID
GetSystemInfo
GetTextExtentPointA
_GetUserObjectInformation_@20
GetVersion
GetVersionExA
GetWindowRgn
Giquhitiguhatigiwy
GkG&Nh
(GM0@s^v
[G@O:-
Goguhyw
Govocygeh
/!GTrI
Gucikomyw
.#Gunan
G|x5%2$
g=xOM%\
@`h(@`
+H1	QJh@sq
 H30!M
H3=Tyficiw
H'5:0+;$<&.?<39@%680$+=.@!!88*:>!0-;2:12(7F
h*6WW-
H/%_7h
H9x*[hh
H		AJK@
HAq9"["B
hbf8c*
h#CI%4P;
<h d$4@$H4t
HeapCreate
Hegegekafyte
Hesezogifi
h!gQ^Omr
`.HGwy
`(`h`H`
 H`(`@h@
`H@H  @`
h`HbJJ
H@`H@Hh(@`
@h HhHh
hH``hH h(
@HH@@J
HH	QP	Y
|HiCArw
H@JB@BB
h#JPSJ
H\#Lare
:h$LjA*:1&>=.<09<$#85&$!:;,??6=5-?++#
H.@m<Z
Hobicyfemu
Hovolu
 http://crl.verisign.com/pca3.crl0
"http://crl.verisign.com/tss-ca.crl0
/http://CSC3-2004-crl.verisign.com/CSC3-2004.crl0D
http://ocsp.verisign.com0
http://ocsp.verisign.com0?
https://www.verisign.com/rpa0
https://www.verisign.com/rpa01
Huluva
!h!=Wx
Hy9)u7k
Hybyzew
HY&xiV
hZyhuhizyle
I\]6N\
I7-kch
i~aLW5
IB`Xse
I	CA	A
i+E)	Q
@IFQH/
IIHA		
IIKCBIB
IkI:)8k
INacos
InitializeCriticalSection
InsertMenuA
InvalidateRect
InvalidateRgn
#_io6(-
?Io@Bm
*	I!r)3
IsBadReadPtr
IsBadStringPtrW
(i@Sb"h
IsChild
IsIconic
IsMenu
Israel1
IsWindow
i{,)wH\I
IXexiwi
IX		QI
?<'iz)1
J5UW}0
	(J}%6
j));;6"<<4(=648)*0$/,$83(*=1"3$8>@-5*%:@'/+2,#!.@@?}oC
J-<@+6>6Z
Jaqizy
JBHJJJ@B
JcEG.k
!j"	E\
JE3T9,
@j[F~G!F\oD*@
JgsHA^
JHPXZH
j\JA5$
j:@JSO
J^"kA~
jLz&#K
Jm&Vr6 ,
^j"N;T
jOLfX\F
joyConfigChanged
]jWekipohaja
Jynicewacar
*?.>'::K
K2^2p2
k4HlW2
.K)5iPN
k9lo"2
K9sXOq
Kaginaw
kA[Q?IO
*|kd^	kF
&Kd of
Kekyjibaryraxom
Kemenuxi
KERNEL32.DLL
Kiwobo
KK2?%2023<
k|L~vpO~
 K=N{X
Kozyxak
K:\_S@lA&=
KSr*s"
&(Kvag>L
	KX%cb
Kypicoga
K>ZKs9
]kzm:c
"L>0@k
>*l3YHWZ
L5$4&,@9!&3967$$C
L5Y{Q$
l9PaQ[
Lajypac
Laxikiqyf
lbUR2d
lBx\=c
!LeHAJ
LELesW
:L{esj
LFrJE6
L#IqmIS9
L<Mod|P^$
_LoadBitmap@8
LoadBitmapA
LoadIconW
LoadImageW
LoadLibraryExA
LoadLibraryW
LoadMenuIndirectA
LoadResource
,Lomag
LpaF4w
lqIyoJ
=L]S#f
lstrcat
lstrcatA
lstrcatW
lstrcmp
lstrcpy
lstrcpyn
lstrcpyW
lstrlen
lstrlenW
LTC53T
l!UdO@
LWl\!lQa
)L/y2x
l]Y;c!*
|lyU,?m
L/:,Zonit
=M)1Z3
m*@2:779&23#6D
(M7uA?
[`M87j~
M9j20f
MA3.,$
mciGetErrorStringW
mciSendStringW
`Melaqorohofi
MessageBeep
MessageBoxIndirectW
MessageBoxW
=$Mibeq
mid32Message
midiInReset
midiOutMessage
midiOutPrepareHeader
Mijalidy
Mimogozogiben
mixerGetLineInfoW
m|(>}m
mmioRenameW
mmTaskCreate
MonitorFromPoint
Morujipuroriri
Mp\qo#7
*m~Q6D
`#>mr^
mTonema
Muxyxud
)MUY/(1
mxdj4L"
Mybago
Mybikuso
Mydumywemugiso
_m-Z>,
	mzJ)s
n1<*P 
n*4$)6;+6'&?
n	4(cP
>n	~-6
Nafexix
n~b7|1
_NDdeIsValidAppTopicList_@4
n<fEnc
Nilobiwimovihy
Niqire
nIx\<T
NK**($1>Nako
n]KIGv
!^N{nMi
NO)=j]N
n?PD"E
ns_--b^O
(>Nuzikino
Nygacygow
	Nytipivahotiq
o!3jb)
o54~!I
_ObjectPrivilegeAuditAlarm_@24
oDw,ygO-
OEI[)&x
OffsetRect
OH"WSLp
oledlg.dll
OleUIBusyA
OleUIBusyW
OleUIChangeIconW
OleUIChangeSourceA
OleUIConvertA
OleUIConvertW
OleUIInsertObjectA
OleUIInsertObjectW
OleUIUpdateLinksW
OL@<hj]
OpenClipboard
OpenSemaphoreW
OpenWaitableTimerA
oQotejy
OS^j[*
O.sQd,p
&.o|U$
O)=vVN
 `  @p 
P0:*,_>
`P0p00@0@  
p0P`p0Pp
p6#Zb)
PADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADD
Pafymi
PB0r rRp2"`` 
pbBR@B
P"B" `"PrPp
=pC)rJ3!5
Pecyhyquminuv
PeekMessageA
PeekMessageW
Pefegid
Pirysizitik
P Ix'Z
PJX@@PP
PL3<{e3_
PostMessageW
PostQuitMessage
`p  P`
 @@p@ P@@ `
 @p`P 
 `P@  P
@ pP @0
p P00pp@@`
PpBb PB
p"pBpQpeptp
Pp~Dgr
PPp@@ `  
Pp p@@0
@Ppp0`0
PPPP`pp`@00P
PP	@YXP
p [qbpp#KaYzP
PR7*4:$()2!&8Xevovud
PUeBakedale
@.PVKp
pw~xSU
P~x28`
px8H(P
P@XQQP
Py%2`=
Pytama
Pzv$-!%=
q2qLqxq
q.""5+1=$.=9%79%)El
Q6%92,;9#9<09&,""8#"
qA@@0QQp
QajhkQ
qaMf4R
	QAYHA
-qbcYjW3
q=|DS2h
Qebijaqupipery
Qejomacydoz
Qofewi
Qokanelyjyv
q';]os
QueryPerformanceCounter
Qukuluhox
_QU'$p
}qvR#:
qX?72-.5;#9$9a
QYAH	X
Qyguwykoxojiweq
,qZ{C]
QZJmQN
R@`00@
r:$5;07:6/4-/7;07'42/*4+'%.$$>>8H
r$6sC4<	
r6x^Z=
r91Sjdy
#-Racibuqenyte
&&.rAH
RAHVc3
Ravemiqe
@.RdCz
.RdmOg
_RegDeleteValue_@8
RegisterClassA
_RegisterClassEx_@4
RegisterClassExW
RegisterClassW
RegisterWindowMessageW
@.reloc
Remedabuzu
RemoveDirectoryW
RemoveFontResourceA
RemoveFontResourceExA
RemoveFontResourceW
ReplaceFileA
ReplaceFileW
rErgrzr
_ResetDC_@8
r*&G/gbV
Ricihizi
Rijivabit
Rizaxale
r#Jp,^
r,k$[b
r]&PNDN
RpP"B2
 "r PR
")RpRi
 Rq=C&
&]*Rqu
rrH(r+
Rucigi
Rulehimabo
RvOIsnR
\:rxvq
Ry<1"Ti
R!ycBh
Rysaretocu
Ryzaby
S653&L
),sB!j
sBsWsjsvs
s(Byko
~sDX0I[+
SearchPathA
SelectBrushLocal
SendMessageW
SetActiveWindow
SetCapture
SetCurrentDirectoryA
SetCurrentDirectoryW
SetCursor
SetCursorPos
SetDlgItemTextA
SetDlgItemTextW
SetFocus
SetParent
setupapi.dll
SetupDiGetWizardPage
SetupGetSourceInfoW
SetupQueryFileLogA
SetWindowPos
SetWindowRgn
SetWindowTextW
s|F&UC
SHBrowseForFolder
shell32.dll
SHGetDataFromIDListW
SHGetFolderLocation
ShowCaret
~S.!?i	
Sidakagec
SmM<;(
sndPlaySoundA
Sojolazom
SQLUNIRL.DLL
sRonaqi
s)R'S4
.StAAB
StrChrIA
StrRChrIW
StrRChrW
Sunevofo
-t14!@6Wop
^T4O{8
>t6=29+;79(
;T6NS(
.t+7.Bn
Tabyguk
Tasilydetyr
)tA;t,
Tedyhotol
Tel-Aviv1
t/fg1c
tH01&+%?3!'>
Thawte1
Thawte Certification1
Thawte Timestamping CA0
!This program cannot be run in DOS mode.
Ti';f[
Tifaxyv
Tijuvigytiso
ti+z*7
T+Kj7a
TlsAlloc
|t-m#b
t>NBP<
?Todirudy
TPj`#f
T`poa,
TrackPopupMenu
t~r^Q+
TRSedapec
Trusteer0
Trusteer1>0<
TSA1-20
TSA2048-1-530
_tsystem
tUCR' v
 {tV*yHk]
@tWylujyfefig
<t$XD0
U%1)8#+;4!=.0'6$)
"u7ktq3r1
+U,-@9L`3{p
U"A8+<
Ub3??e=
UHubihivydaw
%uKj4G
u)L6K&
UnregisterClassW
UQET	EUIX
USER32.DLL
usfen1
uXxK!z
UY	YYQ
(~uz9B
}:,.[v
v(=7-=@8%!#+27#@=#427&*<0'78<:<"27:(#/
v96pK!
vCB/B$V
v`cmql
|v-}c$Q
%v.dI/H
>?vDWi
Vedonub
%VeriSign Class 3 Code Signing 2004 CA
%VeriSign Class 3 Code Signing 2004 CA0
VeriSign, Inc.1
VeriSign, Inc.1+0)
VeriSign, Inc.1402
VeriSign, Inc.1705
"VeriSign Time Stamping Services CA
"VeriSign Time Stamping Services CA0
+VeriSign Time Stamping Services Signer - G20
VeriSign Trust Network1;09
v\!+gg
^!>vJm}
Vogesew
Vomecakus
Vosycyfepe
V%r3\rt
v!v,v:vJvdvuv{v
Vyhosoz
Vykuhifewajypa
Vyzimato
~%~,~=~W~
=!!*;(W
W0&99>:444,(271@#<
w0w@wFwuw
WaitForMultipleObjects
waveOutGetDevCapsA
waveOutGetPlaybackRate
waveOutSetVolume
WBka7vt
WcFX )
~W%D2A3
w_dFZJt
Western Cape1
Wewucabuj
 wikXazoga
WinHelpW
WINMM.DLL
Wipyfyvo
WKy&GG
wlR*H+
WNVlkW
woDGSM? pmo
WP]gDb
WPX2|m<
ws2_32.dll
WSAConnect
WSARecvDisconnect
WSAStartup
W+}Tm(
W|uW\w
wvsprintfA
w(w5w;w
Ww;685&!/;8@%.*3@%Nahefunis
W;Y*<0iD
Wynado
W;YsX0
X3SRYb
X@APQH	
">\xE&
Xelezyzyjezaseto
Xepaqy
Xerufes
Xirypobugynyc
Xitipatedu
xMJlC2d
&XN%+'
xP#asle
XPh:1&
xPutesudebi
Xt|(tH,x\@
Xutyfik
X,X9Yf%k
Xx=fv:
Xybyqezaz
Xydiji
Xypehure
]"Y0mA#L
Y0MHmt
Y)'/1",,>
Y(30-57@4-<6/-4<
Y.*3%(16!)<>6*4%1'39T
#'y5`<d
YDD~.aY
YH	H@I@HQ
YH	IYP
Y*h`S `Q
Yi",2))4<<"9
Y ipxHiIb
Yjl:lAf
*YLIKe
Yoj*{2
YoybfPu
YPpmL+
Y#-!q]I
,Yxi:\0
!.#z!2Ca
Z<7xCL_
Zb*k<}
;ZbQ`1
Z'.HX[
Zivofyjytypu
Zivywyhygocetav
z-*JT*
Zm,ba{r
z${.{;{O{g{u{
Zohuzyvekimoxux
Z/)R{G	
[zS/~	
Zuviwyrin
Zuzywygebe
%z!]xEv.
zxS&2t
zx,]xY
ZyZ|&~|B