Analysis Date2015-08-02 01:43:09
MD5e151ddbb41fd35e9925cee55ef456e19
SHA1d4005d8a3354d1a2a7a55713ec94afa594759e44

Static Details:

File typePE32 executable for MS Windows (GUI) Intel 80386 32-bit
Section.text md5: bcf557bf67495995a2649df9fdd02e50 sha1: ba5c91d09c056dc7a81a9bdd1c29dfa3851586f4 size: 1024
Section.rdata md5: a2feaf3ba629027ed0b7b0663a4836e0 sha1: 3b0ef5c293336d1f6446110672af463e64f55392 size: 512
Section.data md5: d41d8cd98f00b204e9800998ecf8427e sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 size: 0
Section.rsrc md5: 204ede9aea6afb0ed33a218a95b26a92 sha1: 9ef01d9536fde022b67abcdefbf04de3c8d26237 size: 37888
Timestamp2006-08-10 11:29:49
VersionLegalCopyright: Copyright (C) 2000
InternalName: MPIRing
FileVersion: 1, 0, 0, 1
CompanyName:
LegalTrademarks:
ProductName: MPIRing Application
ProductVersion: 1, 0, 0, 1
FileDescription: MPIRing MFC Application
OriginalFilename: MPIRing.EXE
PEhashdae8239f0c0c3bfce3fce28cafd280bbab456f9d
IMPhash8aa48b00dd80d2085cbbd81726a688be
AVCA (E-Trust Ino)Win32/Remex.ZAYX!suspicious
AVF-SecureGen:Variant.Kazy.175076
AVDr. WebBackDoor.Bulknet.958
AVClamAVno_virus
AVArcabit (arcavir)Gen:Variant.Kazy.175076
AVBullGuardGen:Variant.Kazy.175076
AVPadvishno_virus
AVVirusBlokAda (vba32)BScope.Trojan.Pushdo
AVCAT (quickheal)TrojanDownloader.CutWail.BS5
AVTrend MicroBKDR_PUSHDO.SMP
AVKasperskyTrojan.Win32.Generic
AVZillya!no_virus
AVEmsisoftGen:Variant.Kazy.175076
AVIkarusTrojan.Crypt_s
AVFrisk (f-prot)no_virus
AVAuthentiumW32/A-ecef5430!Eldorado
AVMalwareBytesTrojan.Inject
AVMicroWorld (escan)Gen:Variant.Kazy.175076
AVMicrosoft Security EssentialsTrojanDownloader:Win32/Cutwail.BS
AVK7Backdoor ( 04c4b4911 )
AVBitDefenderGen:Variant.Kazy.175076
AVFortinetW32/Kryptik.WHP!tr
AVSymantecTrojan.Pandex!gen3
AVGrisoft (avg)Crypt_s.BOF
AVEset (nod32)Win32/Kryptik.BEVU
AVAlwil (avast)Downloader-TTM [Trj]
AVAd-AwareGen:Variant.Kazy.175076
AVTwisterTrojan.D806FF9C4B1D80BD
AVAvira (antivir)TR/Dropper.Gen
AVMcafeeDownloader-FEN!E151DDBB41FD
AVRisingno_virus

Runtime Details:

Screenshot

Process
↳ C:\malware.exe

RegistryHKEY_CURRENT_USER\software\microsoft\windows\currentversion\run\fitumdahuvex ➝
C:\Documents and Settings\Administrator\fitumdahuvex.exe
RegistryHKEY_CURRENT_CONFIG\Software\Microsoft\windows\CurrentVersion\Internet Settings\ProxyEnable ➝
NULL
RegistryHKEY_CURRENT_USER\software\microsoft\windows\currentversion\AppManagement ➝
NULL
RegistryHKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ProxyBypass ➝
1
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\cfl.rr[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\abv[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\163[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\vaxxine[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\verizon[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\windstream[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\williams[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\verizon[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\dangerous-minds[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\licensedtokill[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\rz-online[1].htm
Creates FileC:\Documents and Settings\Administrator\fitumdahuvex.exe
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\madasfish[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\cannylink[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\idealcollectables[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\index.dat
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\ninemsn.com[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\sgi[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\canada[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\potamkinmitsubishi[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\deja[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\willinet[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\apollo[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\duluth[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\jmu[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\History\History.IE5\index.dat
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\jmu[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\accountant[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\zdnetmail[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\brettlarson[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\capecod[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\insightbb[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\floodcity[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\csrlink[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\dir[1].htm
Creates FileC:\Documents and Settings\Administrator\Cookies\index.dat
Creates FilePIPE\lsarpc
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\springsips[1].htm
Creates File\Device\Afd\Endpoint
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\vmw[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\number1[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\worldonline.co[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\wiredsolutions[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\world-net.co[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\caomcast[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\caomcast[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\tele2[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\wildmail[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\uncc[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\dreamwiz[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\suscom[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\tele2[2].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\beeone[1].htm
Creates Mutexc:!documents and settings!administrator!local settings!history!history.ie5!
Creates Mutexfitumdahuvex
Creates MutexWininetConnectionMutex
Creates Mutexc:!documents and settings!administrator!cookies!
Creates Mutexc:!documents and settings!administrator!local settings!temporary internet files!content.ie5!
Winsock DNSsuscom.net
Winsock DNSworld-net.co.nz
Winsock DNSmadasfish.com
Winsock DNScfl.rr.com
Winsock DNSwillinet.net
Winsock DNSfloodcity.net
Winsock DNSdeja.com
Winsock DNScannylink.com
Winsock DNSbrettlarson.com
Winsock DNSbeeone.de
Winsock DNSninemsn.com.au
Winsock DNSvmw.com
Winsock DNSrz-online.de
Winsock DNSzdnetmail.com
Winsock DNSverizon.net
Winsock DNSidealcollectables.com
Winsock DNSvaxxine.com
Winsock DNSabv.bg
Winsock DNSlicensedtokill.com
Winsock DNSwildmail.com
Winsock DNSinsightbb.com
Winsock DNSapollo.lv
Winsock DNSwilliams.edu
Winsock DNSdir.bg
Winsock DNSnumber1.net
Winsock DNSaccountant.com
Winsock DNScaomcast.net
Winsock DNSduluth.com
Winsock DNScanada.com
Winsock DNSsol.dk
Winsock DNSdreamwiz.com
Winsock DNSwindstream.net
Winsock DNSdangerous-minds.com
Winsock DNStinet.org
Winsock DNSspringsips.com
Winsock DNSwiredsolutions.net
Winsock DNSsgi.net
Winsock DNStele2.at
Winsock DNSuncc.edu
Winsock DNS163.com
Winsock DNSpotamkinmitsubishi.com
Winsock DNSjmu.edu
Winsock DNScsrlink.net
Winsock DNSworldonline.co.uk
Winsock DNScapecod.net

Network Details:

DNSpicsnet.com
Type: A
184.168.81.139
DNScapecod.net
Type: A
209.86.93.19
DNScapecod.net
Type: A
209.86.93.20
DNScapecod.net
Type: A
209.86.93.21
DNSfeton.net
Type: A
209.15.13.134
DNScascademarble.com
Type: A
184.168.221.19
DNSsandiegoinsider.com
Type: A
68.1.17.9
DNSworld-net.co.nz
Type: A
202.169.192.35
DNStampabay.rr.com
Type: A
71.44.33.45
DNSsurfglobal.net
Type: A
72.71.201.5
DNSverizon.net
Type: A
206.46.232.39
DNSwindstream.net
Type: A
162.39.145.20
DNScsrlink.net
Type: A
207.69.200.194
DNScsrlink.net
Type: A
207.69.200.195
DNSpotamkinmitsubishi.com
Type: A
67.192.6.123
DNScanada.com
Type: A
199.71.40.135
DNStele2.at
Type: A
212.152.190.190
DNS163.com
Type: A
123.58.180.8
DNS163.com
Type: A
123.58.180.7
DNScaomcast.net
Type: A
103.224.182.243
DNSsuscom.net
Type: A
66.179.151.52
DNSfloodcity.net
Type: A
64.186.80.70
DNSwildmail.com
Type: A
217.70.184.38
DNSspringsips.com
Type: A
216.17.135.208
DNSbeeone.de
Type: A
193.227.203.172
DNSworldonline.co.uk
Type: A
212.74.99.30
DNSvmw.com
Type: A
208.91.0.132
DNSvaxxine.com
Type: A
209.159.189.4
DNSwillinet.net
Type: A
162.39.145.20
DNSrz-online.de
Type: A
213.182.5.180
DNSduluth.com
Type: A
12.28.104.123
DNSjmu.edu
Type: A
134.126.10.50
DNSabv.bg
Type: A
194.153.145.104
DNSsgi.net
Type: A
209.166.171.92
DNSmadasfish.com
Type: A
5.61.39.56
DNSinsightbb.com
Type: A
74.128.18.45
DNSinsightbb.com
Type: A
74.128.18.37
DNSaccountant.com
Type: A
141.8.224.143
DNSbrettlarson.com
Type: A
50.62.243.1
DNSzdnetmail.com
Type: A
216.239.120.238
DNSthe-wild-west.com
Type: A
DNSethansalwen.com
Type: A
DNSneobright.net
Type: A
DNSninemsn.com.au
Type: A
DNStinet.org
Type: A
HTTP POSThttp://windstream.net/?ptrxcz_2Ml8Sl4Ng0IbvEEXsBUo7Qj3MfzIbv
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://verizon.net/?ptrxcz_Tm7Qj3MfzIbvvLeIk5Oh1KdxGZtCVp
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://csrlink.net/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://potamkinmitsubishi.com/?ptrxcz_7Pi1KcvEWp8Qj2KdwEXq9Rj3LdxFYr
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://canada.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://tele2.at/?ptrxcz_Sl4Og0JbvEWq9Rk42Vd4Oh1LeyHauE
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://163.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://caomcast.net/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://suscom.net/?ptrxcz_JdwFXrCUc7Qj3MfyHauDWp8Rk4NgzI
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://floodcity.net/?ptrxcz_uEXUyKSJdxpc5Pi2LeyHd3Oi1KdxGZ
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://wildmail.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://springsips.com/?ptrxcz_FXr9Rj2KcvDVo6OgzHZsASk3LdwEWp
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://beeone.de/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://worldonline.co.uk/?ptrxcz_04Vm4MdvCTk2KbtARi0IZuCTl3KbuB
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://vmw.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://vaxxine.com/?ptrxcz_sCKm7Rlg2LfzJcxGauEXsBVTo8Rk5O
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://willinet.net/?ptrxcz_YsG7b4Sx2wLk9WvEYstb0Ol9WtCIBV
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://rz-online.de/?ptrxcz_yl1ObzIbuCVor3To7QjP6UpyVsRZuD
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://duluth.com/?ptrxcz_vKd2Ng0JcvEXq9SqKf9Tm7QLg0JdxG
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://jmu.edu/?ptrxcz_EXrASl4NgzIauCVp7Qi2KdxFYrASl5
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://abv.bg/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://capecod.net/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://sgi.net/?ptrxcz_ATm5Oh0JcwEXrtCVo7Pi1KFbFKeyHa
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://madasfish.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://insightbb.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://accountant.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://brettlarson.com/?ptrxcz_i2LeyHZtC9Sl4NgzIauDSxHauDWq9S
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
Flows TCP192.168.1.1:1035 ➝ 209.86.93.19:25
Flows TCP192.168.1.1:1037 ➝ 209.15.13.134:25
Flows TCP192.168.1.1:1036 ➝ 184.168.81.139:25
Flows TCP192.168.1.1:1038 ➝ 184.168.221.19:25
Flows TCP192.168.1.1:1039 ➝ 68.1.17.9:25
Flows TCP192.168.1.1:1040 ➝ 202.169.192.35:25
Flows TCP192.168.1.1:1041 ➝ 71.44.33.45:25
Flows TCP192.168.1.1:1042 ➝ 72.71.201.5:25
Flows TCP192.168.1.1:1044 ➝ 162.39.145.20:80
Flows TCP192.168.1.1:1045 ➝ 206.46.232.39:80
Flows TCP192.168.1.1:1046 ➝ 207.69.200.194:80
Flows TCP192.168.1.1:1047 ➝ 67.192.6.123:80
Flows TCP192.168.1.1:1048 ➝ 199.71.40.135:80
Flows TCP192.168.1.1:1049 ➝ 212.152.190.190:80
Flows TCP192.168.1.1:1050 ➝ 123.58.180.8:80
Flows TCP192.168.1.1:1051 ➝ 103.224.182.243:80
Flows TCP192.168.1.1:1052 ➝ 66.179.151.52:80
Flows TCP192.168.1.1:1053 ➝ 64.186.80.70:80
Flows TCP192.168.1.1:1054 ➝ 217.70.184.38:80
Flows TCP192.168.1.1:1055 ➝ 216.17.135.208:80
Flows TCP192.168.1.1:1056 ➝ 193.227.203.172:80
Flows TCP192.168.1.1:1057 ➝ 212.74.99.30:80
Flows TCP192.168.1.1:1058 ➝ 208.91.0.132:80
Flows TCP192.168.1.1:1059 ➝ 209.159.189.4:80
Flows TCP192.168.1.1:1060 ➝ 162.39.145.20:80
Flows TCP192.168.1.1:1061 ➝ 213.182.5.180:80
Flows TCP192.168.1.1:1062 ➝ 12.28.104.123:80
Flows TCP192.168.1.1:1063 ➝ 134.126.10.50:80
Flows TCP192.168.1.1:1064 ➝ 194.153.145.104:80
Flows TCP192.168.1.1:1065 ➝ 209.86.93.19:80
Flows TCP192.168.1.1:1066 ➝ 209.166.171.92:80
Flows TCP192.168.1.1:1067 ➝ 5.61.39.56:80
Flows TCP192.168.1.1:1068 ➝ 74.128.18.45:80
Flows TCP192.168.1.1:1069 ➝ 141.8.224.143:80
Flows TCP192.168.1.1:1070 ➝ 50.62.243.1:80

Raw Pcap
0x00000000 (00000)   504f5354 202f3f70 74727863 7a5f324d   POST /?ptrxcz_2M
0x00000010 (00016)   6c38536c 344e6730 49627645 45587342   l8Sl4Ng0IbvEEXsB
0x00000020 (00032)   556f3751 6a334d66 7a496276 20485454   Uo7Qj3MfzIbv HTT
0x00000030 (00048)   502f312e 310d0a41 63636570 743a202a   P/1.1..Accept: *
0x00000040 (00064)   2f2a0d0a 41636365 70742d4c 616e6775   /*..Accept-Langu
0x00000050 (00080)   6167653a 20656e2d 75730d0a 436f6e74   age: en-us..Cont
0x00000060 (00096)   656e742d 54797065 3a206170 706c6963   ent-Type: applic
0x00000070 (00112)   6174696f 6e2f6f63 7465742d 73747265   ation/octet-stre
0x00000080 (00128)   616d0d0a 436f6e74 656e742d 4c656e67   am..Content-Leng
0x00000090 (00144)   74683a20 3133300d 0a557365 722d4167   th: 130..User-Ag
0x000000a0 (00160)   656e743a 204d6f7a 696c6c61 2f342e30   ent: Mozilla/4.0
0x000000b0 (00176)   2028636f 6d706174 69626c65 3b204d53    (compatible; MS
0x000000c0 (00192)   49452036 2e303b20 57696e64 6f777320   IE 6.0; Windows 
0x000000d0 (00208)   4e542035 2e313b20 53563129 0d0a486f   NT 5.1; SV1)..Ho
0x000000e0 (00224)   73743a20 77696e64 73747265 616d2e6e   st: windstream.n
0x000000f0 (00240)   65740d0a 436f6e6e 65637469 6f6e3a20   et..Connection: 
0x00000100 (00256)   4b656570 2d416c69 76650d0a 43616368   Keep-Alive..Cach
0x00000110 (00272)   652d436f 6e74726f 6c3a206e 6f2d6361   e-Control: no-ca
0x00000120 (00288)   6368650d 0a0d0a76 ff06222a bb4e9f43   che....v.."*.N.C
0x00000130 (00304)   4d242505 c9e12758 7f65aa40 d70ba7f7   M$%...'X.e.@....
0x00000140 (00320)   a4c8b6fa 9d75aea3 3258b0f6 2954b2ed   .....u..2X..)T..
0x00000150 (00336)   bc36b4f1 e55b37e8 4815b8e0 dbf7b9e3   .6...[7.H.......
0x00000160 (00352)   d4f3bbb9 82463ede 6dad7a24 f4b4c1d9   .....F>.m.z$....
0x00000170 (00368)   ecb0c308 8093c5f7 788fc7ee 0b72c96e   ........x....r.n
0x00000180 (00384)   a354cb35 f5be32c1 2a33cf0d 939d36b8   .T.5..2.*3....6.
0x00000190 (00400)   b611d39c c497d583 43f0d6a0 426d55c9   ........C...BmU.
0x000001a0 (00416)   cecedaa5 63b1dca5 5a                  ....c...Z

0x00000000 (00000)   504f5354 202f3f70 74727863 7a5f546d   POST /?ptrxcz_Tm
0x00000010 (00016)   37516a33 4d667a49 6276764c 65496b35   7Qj3MfzIbvvLeIk5
0x00000020 (00032)   4f68314b 6478475a 74435670 20485454   Oh1KdxGZtCVp HTT
0x00000030 (00048)   502f312e 310d0a41 63636570 743a202a   P/1.1..Accept: *
0x00000040 (00064)   2f2a0d0a 41636365 70742d4c 616e6775   /*..Accept-Langu
0x00000050 (00080)   6167653a 20656e2d 75730d0a 436f6e74   age: en-us..Cont
0x00000060 (00096)   656e742d 54797065 3a206170 706c6963   ent-Type: applic
0x00000070 (00112)   6174696f 6e2f6f63 7465742d 73747265   ation/octet-stre
0x00000080 (00128)   616d0d0a 436f6e74 656e742d 4c656e67   am..Content-Leng
0x00000090 (00144)   74683a20 35340d0a 55736572 2d416765   th: 54..User-Age
0x000000a0 (00160)   6e743a20 4d6f7a69 6c6c612f 342e3020   nt: Mozilla/4.0 
0x000000b0 (00176)   28636f6d 70617469 626c653b 204d5349   (compatible; MSI
0x000000c0 (00192)   4520362e 303b2057 696e646f 7773204e   E 6.0; Windows N
0x000000d0 (00208)   5420352e 313b2053 5631290d 0a486f73   T 5.1; SV1)..Hos
0x000000e0 (00224)   743a2076 6572697a 6f6e2e6e 65740d0a   t: verizon.net..
0x000000f0 (00240)   436f6e6e 65637469 6f6e3a20 4b656570   Connection: Keep
0x00000100 (00256)   2d416c69 76650d0a 43616368 652d436f   -Alive..Cache-Co
0x00000110 (00272)   6e74726f 6c3a206e 6f2d6361 6368650d   ntrol: no-cache.
0x00000120 (00288)   0a0d0a36 4597dfca 3f6a60c1 d24c62c5   ...6E...?j`..Lb.
0x00000130 (00304)   cb4864bc 5e2b66b3 f10d68b7 ea096aae   .Hd.^+f...h...j.
0x00000140 (00320)   7dec6bb2 76e86da9 09cb6fa0 9cad712c   }.k.v.m...o...q,
0x00000150 (00336)   44                                    D

0x00000000 (00000)   504f5354 202f2048 5454502f 312e310d   POST / HTTP/1.1.
0x00000010 (00016)   0a416363 6570743a 202a2f2a 0d0a4163   .Accept: */*..Ac
0x00000020 (00032)   63657074 2d4c616e 67756167 653a2065   cept-Language: e
0x00000030 (00048)   6e2d7573 0d0a436f 6e74656e 742d5479   n-us..Content-Ty
0x00000040 (00064)   70653a20 6170706c 69636174 696f6e2f   pe: application/
0x00000050 (00080)   6f637465 742d7374 7265616d 0d0a436f   octet-stream..Co
0x00000060 (00096)   6e74656e 742d4c65 6e677468 3a203235   ntent-Length: 25
0x00000070 (00112)   340d0a55 7365722d 4167656e 743a204d   4..User-Agent: M
0x00000080 (00128)   6f7a696c 6c612f34 2e302028 636f6d70   ozilla/4.0 (comp
0x00000090 (00144)   61746962 6c653b20 4d534945 20362e30   atible; MSIE 6.0
0x000000a0 (00160)   3b205769 6e646f77 73204e54 20352e31   ; Windows NT 5.1
0x000000b0 (00176)   3b205356 31290d0a 486f7374 3a206373   ; SV1)..Host: cs
0x000000c0 (00192)   726c696e 6b2e6e65 740d0a43 6f6e6e65   rlink.net..Conne
0x000000d0 (00208)   6374696f 6e3a204b 6565702d 416c6976   ction: Keep-Aliv
0x000000e0 (00224)   650d0a43 61636865 2d436f6e 74726f6c   e..Cache-Control
0x000000f0 (00240)   3a206e6f 2d636163 68650d0a 0d0aa93f   : no-cache.....?
0x00000100 (00256)   807830d4 39f92767 1cfb1efa fefc158d   .x0.9.'g........
0x00000110 (00272)   e1fe1986 dd                           .....

0x00000000 (00000)   504f5354 202f3f70 74727863 7a5f3750   POST /?ptrxcz_7P
0x00000010 (00016)   69314b63 76455770 38516a32 4b647745   i1KcvEWp8Qj2KdwE
0x00000020 (00032)   58713952 6a334c64 78465972 20485454   Xq9Rj3LdxFYr HTT
0x00000030 (00048)   502f312e 310d0a41 63636570 743a202a   P/1.1..Accept: *
0x00000040 (00064)   2f2a0d0a 41636365 70742d4c 616e6775   /*..Accept-Langu
0x00000050 (00080)   6167653a 20656e2d 75730d0a 436f6e74   age: en-us..Cont
0x00000060 (00096)   656e742d 54797065 3a206170 706c6963   ent-Type: applic
0x00000070 (00112)   6174696f 6e2f6f63 7465742d 73747265   ation/octet-stre
0x00000080 (00128)   616d0d0a 436f6e74 656e742d 4c656e67   am..Content-Leng
0x00000090 (00144)   74683a20 3133380d 0a557365 722d4167   th: 138..User-Ag
0x000000a0 (00160)   656e743a 204d6f7a 696c6c61 2f342e30   ent: Mozilla/4.0
0x000000b0 (00176)   2028636f 6d706174 69626c65 3b204d53    (compatible; MS
0x000000c0 (00192)   49452036 2e303b20 57696e64 6f777320   IE 6.0; Windows 
0x000000d0 (00208)   4e542035 2e313b20 53563129 0d0a486f   NT 5.1; SV1)..Ho
0x000000e0 (00224)   73743a20 706f7461 6d6b696e 6d697473   st: potamkinmits
0x000000f0 (00240)   75626973 68692e63 6f6d0d0a 436f6e6e   ubishi.com..Conn
0x00000100 (00256)   65637469 6f6e3a20 4b656570 2d416c69   ection: Keep-Ali
0x00000110 (00272)   76650d0a 43616368 652d436f 6e74726f   ve..Cache-Contro
0x00000120 (00288)   6c3a206e 6f2d6361 6368650d 0a0d0a     l: no-cache....

0x00000000 (00000)   504f5354 202f2048 5454502f 312e310d   POST / HTTP/1.1.
0x00000010 (00016)   0a416363 6570743a 202a2f2a 0d0a4163   .Accept: */*..Ac
0x00000020 (00032)   63657074 2d4c616e 67756167 653a2065   cept-Language: e
0x00000030 (00048)   6e2d7573 0d0a436f 6e74656e 742d5479   n-us..Content-Ty
0x00000040 (00064)   70653a20 6170706c 69636174 696f6e2f   pe: application/
0x00000050 (00080)   6f637465 742d7374 7265616d 0d0a436f   octet-stream..Co
0x00000060 (00096)   6e74656e 742d4c65 6e677468 3a203135   ntent-Length: 15
0x00000070 (00112)   330d0a55 7365722d 4167656e 743a204d   3..User-Agent: M
0x00000080 (00128)   6f7a696c 6c612f34 2e302028 636f6d70   ozilla/4.0 (comp
0x00000090 (00144)   61746962 6c653b20 4d534945 20362e30   atible; MSIE 6.0
0x000000a0 (00160)   3b205769 6e646f77 73204e54 20352e31   ; Windows NT 5.1
0x000000b0 (00176)   3b205356 31290d0a 486f7374 3a206361   ; SV1)..Host: ca
0x000000c0 (00192)   6e616461 2e636f6d 0d0a436f 6e6e6563   nada.com..Connec
0x000000d0 (00208)   74696f6e 3a204b65 65702d41 6c697665   tion: Keep-Alive
0x000000e0 (00224)   0d0a4361 6368652d 436f6e74 726f6c3a   ..Cache-Control:
0x000000f0 (00240)   206e6f2d 63616368 650d0a0d 0abfbfde    no-cache.......
0x00000100 (00256)   bc465498 3d464f94 ff41948b c2a88811   .FT.=FO..A......
0x00000110 (00272)   437c31ca 4130c985 c729921a 49308d16   C|1.A0...)..I0..
0x00000120 (00288)   4b251ef9 4c2917f5 4ea85c2e d1173dba   K%..L)..N.\...=.
0x00000130 (00304)   521c36b6 5412c998 56f5dc04 d90d6252   R.6.T...V.....bR
0x00000140 (00320)   1553e859 5c08e155 5e377438 60c62e61   .S.Y\..U^7t8`..a
0x00000150 (00336)   65ca275d 674abf3f 6904ab90 d08ce004   e.']gJ.?i.......
0x00000160 (00352)   6dcfe255 d47a06ca 7051ae36 73382d8f   m..U.z..pQ.6s8-.
0x00000170 (00368)   7448c6f2 f2715254 784de736 7a4dde     tH...qRTxM.6zM.

0x00000000 (00000)   504f5354 202f3f70 74727863 7a5f536c   POST /?ptrxcz_Sl
0x00000010 (00016)   344f6730 4a627645 57713952 6b343256   4Og0JbvEWq9Rk42V
0x00000020 (00032)   64344f68 314c6579 48617545 20485454   d4Oh1LeyHauE HTT
0x00000030 (00048)   502f312e 310d0a41 63636570 743a202a   P/1.1..Accept: *
0x00000040 (00064)   2f2a0d0a 41636365 70742d4c 616e6775   /*..Accept-Langu
0x00000050 (00080)   6167653a 20656e2d 75730d0a 436f6e74   age: en-us..Cont
0x00000060 (00096)   656e742d 54797065 3a206170 706c6963   ent-Type: applic
0x00000070 (00112)   6174696f 6e2f6f63 7465742d 73747265   ation/octet-stre
0x00000080 (00128)   616d0d0a 436f6e74 656e742d 4c656e67   am..Content-Leng
0x00000090 (00144)   74683a20 35310d0a 55736572 2d416765   th: 51..User-Age
0x000000a0 (00160)   6e743a20 4d6f7a69 6c6c612f 342e3020   nt: Mozilla/4.0 
0x000000b0 (00176)   28636f6d 70617469 626c653b 204d5349   (compatible; MSI
0x000000c0 (00192)   4520362e 303b2057 696e646f 7773204e   E 6.0; Windows N
0x000000d0 (00208)   5420352e 313b2053 5631290d 0a486f73   T 5.1; SV1)..Hos
0x000000e0 (00224)   743a2074 656c6532 2e61740d 0a436f6e   t: tele2.at..Con
0x000000f0 (00240)   6e656374 696f6e3a 204b6565 702d416c   nection: Keep-Al
0x00000100 (00256)   6976650d 0a436163 68652d43 6f6e7472   ive..Cache-Contr
0x00000110 (00272)   6f6c3a20 6e6f2d63 61636865 0d0a0d0a   ol: no-cache....
0x00000120 (00288)   3ccb32e5 c35fec65 c758e867 beebca69   <.2.._.e.X.g...i
0x00000130 (00304)   c2e4c66b b977a96d b00a8c6f b4038871   ...k.w.m...o...q
0x00000140 (00320)   ab966a73 af8f6675 a6224977 056382f9   ..js..fu."Iw.c..
0x00000150 (00336)   a1ae2737 37333230 20202049 4520362e   ..'77320   IE 6.
0x00000160 (00352)   303b2057 696e646f 7773200a            0; Windows .

0x00000000 (00000)   504f5354 202f2048 5454502f 312e310d   POST / HTTP/1.1.
0x00000010 (00016)   0a416363 6570743a 202a2f2a 0d0a4163   .Accept: */*..Ac
0x00000020 (00032)   63657074 2d4c616e 67756167 653a2065   cept-Language: e
0x00000030 (00048)   6e2d7573 0d0a436f 6e74656e 742d5479   n-us..Content-Ty
0x00000040 (00064)   70653a20 6170706c 69636174 696f6e2f   pe: application/
0x00000050 (00080)   6f637465 742d7374 7265616d 0d0a436f   octet-stream..Co
0x00000060 (00096)   6e74656e 742d4c65 6e677468 3a203139   ntent-Length: 19
0x00000070 (00112)   330d0a55 7365722d 4167656e 743a204d   3..User-Agent: M
0x00000080 (00128)   6f7a696c 6c612f34 2e302028 636f6d70   ozilla/4.0 (comp
0x00000090 (00144)   61746962 6c653b20 4d534945 20362e30   atible; MSIE 6.0
0x000000a0 (00160)   3b205769 6e646f77 73204e54 20352e31   ; Windows NT 5.1
0x000000b0 (00176)   3b205356 31290d0a 486f7374 3a203136   ; SV1)..Host: 16
0x000000c0 (00192)   332e636f 6d0d0a43 6f6e6e65 6374696f   3.com..Connectio
0x000000d0 (00208)   6e3a204b 6565702d 416c6976 650d0a43   n: Keep-Alive..C
0x000000e0 (00224)   61636865 2d436f6e 74726f6c 3a206e6f   ache-Control: no
0x000000f0 (00240)   2d636163 68650d0a 0d0aa91f 9ea6a0b2   -cache..........
0x00000100 (00256)   80a89745 63aa8ed8 45ac92d1 41ae8964   ...Ec...E...A..d
0x00000110 (00272)   24b080f7 06b2778a e9b36e1d ccb57216   $.....w...n...r.
0x00000120 (00288)   c8b769a9 aab9603c 8dbb57cf 6fbd4e62   ..i...`<..W.o.Nb
0x00000130 (00304)   52bf525b 4ec149ee 30c34081 13c53714   R.R[N.I.0.@...7.
0x00000140 (00320)   f6c62ea7 d8c85d3a bbca4c33 b7cc43c6   ......]:..L3..C.
0x00000150 (00336)   99cec35d 7cd08aaf e63718e5 5ad455e7   ...]|....7..Z.U.
0x00000160 (00352)   ab3b                                  .;

0x00000000 (00000)   504f5354 202f2048 5454502f 312e310d   POST / HTTP/1.1.
0x00000010 (00016)   0a416363 6570743a 202a2f2a 0d0a4163   .Accept: */*..Ac
0x00000020 (00032)   63657074 2d4c616e 67756167 653a2065   cept-Language: e
0x00000030 (00048)   6e2d7573 0d0a436f 6e74656e 742d5479   n-us..Content-Ty
0x00000040 (00064)   70653a20 6170706c 69636174 696f6e2f   pe: application/
0x00000050 (00080)   6f637465 742d7374 7265616d 0d0a436f   octet-stream..Co
0x00000060 (00096)   6e74656e 742d4c65 6e677468 3a203130   ntent-Length: 10
0x00000070 (00112)   320d0a55 7365722d 4167656e 743a204d   2..User-Agent: M
0x00000080 (00128)   6f7a696c 6c612f34 2e302028 636f6d70   ozilla/4.0 (comp
0x00000090 (00144)   61746962 6c653b20 4d534945 20362e30   atible; MSIE 6.0
0x000000a0 (00160)   3b205769 6e646f77 73204e54 20352e31   ; Windows NT 5.1
0x000000b0 (00176)   3b205356 31290d0a 486f7374 3a206361   ; SV1)..Host: ca
0x000000c0 (00192)   6f6d6361 73742e6e 65740d0a 436f6e6e   omcast.net..Conn
0x000000d0 (00208)   65637469 6f6e3a20 4b656570 2d416c69   ection: Keep-Ali
0x000000e0 (00224)   76650d0a 43616368 652d436f 6e74726f   ve..Cache-Contro
0x000000f0 (00240)   6c3a206e 6f2d6361 6368650d 0a0d0a03   l: no-cache.....
0x00000100 (00256)   283a                                  (:

0x00000000 (00000)   504f5354 202f3f70 74727863 7a5f4a64   POST /?ptrxcz_Jd
0x00000010 (00016)   77465872 43556337 516a334d 66794861   wFXrCUc7Qj3MfyHa
0x00000020 (00032)   75445770 38526b34 4e677a49 20485454   uDWp8Rk4NgzI HTT
0x00000030 (00048)   502f312e 310d0a41 63636570 743a202a   P/1.1..Accept: *
0x00000040 (00064)   2f2a0d0a 41636365 70742d4c 616e6775   /*..Accept-Langu
0x00000050 (00080)   6167653a 20656e2d 75730d0a 436f6e74   age: en-us..Cont
0x00000060 (00096)   656e742d 54797065 3a206170 706c6963   ent-Type: applic
0x00000070 (00112)   6174696f 6e2f6f63 7465742d 73747265   ation/octet-stre
0x00000080 (00128)   616d0d0a 436f6e74 656e742d 4c656e67   am..Content-Leng
0x00000090 (00144)   74683a20 32370d0a 55736572 2d416765   th: 27..User-Age
0x000000a0 (00160)   6e743a20 4d6f7a69 6c6c612f 342e3020   nt: Mozilla/4.0 
0x000000b0 (00176)   28636f6d 70617469 626c653b 204d5349   (compatible; MSI
0x000000c0 (00192)   4520362e 303b2057 696e646f 7773204e   E 6.0; Windows N
0x000000d0 (00208)   5420352e 313b2053 5631290d 0a486f73   T 5.1; SV1)..Hos
0x000000e0 (00224)   743a2073 7573636f 6d2e6e65 740d0a43   t: suscom.net..C
0x000000f0 (00240)   6f6e6e65 6374696f 6e3a204b 6565702d   onnection: Keep-
0x00000100 (00256)   416c6976 650d0a43 61636865 2d436f6e   Alive..Cache-Con
0x00000110 (00272)   74726f6c 3a206e6f 2d636163 68650d0a   trol: no-cache..
0x00000120 (00288)   0d0a5792 74b9ef85 433cddab 0840d837   ..W.t...C<...@.7
0x00000130 (00304)   e743c65d ac47c1e9 8a4bbc75 690d6252   .C.].G...K.ui.bR
0x00000140 (00320)   1553e859 5c08e155 5e377438 60c62e61   .S.Y\..U^7t8`..a
0x00000150 (00336)   65ca275d 674abf3f 6904ab90 d08ce004   e.']gJ.?i.......
0x00000160 (00352)   6dcfe255 d47a06ca 7051ae36 73382d8f   m..U.z..pQ.6s8-.
0x00000170 (00368)   7448c6f2 f2715254 784de736 7a4dde     tH...qRTxM.6zM.

0x00000000 (00000)   504f5354 202f3f70 74727863 7a5f7545   POST /?ptrxcz_uE
0x00000010 (00016)   5855794b 534a6478 70633550 69324c65   XUyKSJdxpc5Pi2Le
0x00000020 (00032)   79486433 4f69314b 6478475a 20485454   yHd3Oi1KdxGZ HTT
0x00000030 (00048)   502f312e 310d0a41 63636570 743a202a   P/1.1..Accept: *
0x00000040 (00064)   2f2a0d0a 41636365 70742d4c 616e6775   /*..Accept-Langu
0x00000050 (00080)   6167653a 20656e2d 75730d0a 436f6e74   age: en-us..Cont
0x00000060 (00096)   656e742d 54797065 3a206170 706c6963   ent-Type: applic
0x00000070 (00112)   6174696f 6e2f6f63 7465742d 73747265   ation/octet-stre
0x00000080 (00128)   616d0d0a 436f6e74 656e742d 4c656e67   am..Content-Leng
0x00000090 (00144)   74683a20 3139330d 0a557365 722d4167   th: 193..User-Ag
0x000000a0 (00160)   656e743a 204d6f7a 696c6c61 2f342e30   ent: Mozilla/4.0
0x000000b0 (00176)   2028636f 6d706174 69626c65 3b204d53    (compatible; MS
0x000000c0 (00192)   49452036 2e303b20 57696e64 6f777320   IE 6.0; Windows 
0x000000d0 (00208)   4e542035 2e313b20 53563129 0d0a486f   NT 5.1; SV1)..Ho
0x000000e0 (00224)   73743a20 666c6f6f 64636974 792e6e65   st: floodcity.ne
0x000000f0 (00240)   740d0a43 6f6e6e65 6374696f 6e3a204b   t..Connection: K
0x00000100 (00256)   6565702d 416c6976 650d0a43 61636865   eep-Alive..Cache
0x00000110 (00272)   2d436f6e 74726f6c 3a206e6f 2d636163   -Control: no-cac
0x00000120 (00288)   68650d0a 0d0a4a4e 4016c875 dc9849f7   he....JN@..u..I.
0x00000130 (00304)   b49f73a7 d7a7b723 2db05271 38b794fd   ..s....#-.Rq8...
0x00000140 (00320)   95bb1f25 c23f0ec8 a94365d3 fec653f9   ...%.?...Ce...S.
0x00000150 (00336)   c3cac9cd df4e2f45 4ed21e6b 13d60b91   .....N/EN..k....
0x00000160 (00352)   d8d9dab7 9dddff57 bedc2403 28e5d08e   .......W..$.(...
0x00000170 (00368)   06e9f6b4 cbeccfda 90f0bd              ...........

0x00000000 (00000)   504f5354 202f2048 5454502f 312e310d   POST / HTTP/1.1.
0x00000010 (00016)   0a416363 6570743a 202a2f2a 0d0a4163   .Accept: */*..Ac
0x00000020 (00032)   63657074 2d4c616e 67756167 653a2065   cept-Language: e
0x00000030 (00048)   6e2d7573 0d0a436f 6e74656e 742d5479   n-us..Content-Ty
0x00000040 (00064)   70653a20 6170706c 69636174 696f6e2f   pe: application/
0x00000050 (00080)   6f637465 742d7374 7265616d 0d0a436f   octet-stream..Co
0x00000060 (00096)   6e74656e 742d4c65 6e677468 3a203137   ntent-Length: 17
0x00000070 (00112)   340d0a55 7365722d 4167656e 743a204d   4..User-Agent: M
0x00000080 (00128)   6f7a696c 6c612f34 2e302028 636f6d70   ozilla/4.0 (comp
0x00000090 (00144)   61746962 6c653b20 4d534945 20362e30   atible; MSIE 6.0
0x000000a0 (00160)   3b205769 6e646f77 73204e54 20352e31   ; Windows NT 5.1
0x000000b0 (00176)   3b205356 31290d0a 486f7374 3a207769   ; SV1)..Host: wi
0x000000c0 (00192)   6c646d61 696c2e63 6f6d0d0a 436f6e6e   ldmail.com..Conn
0x000000d0 (00208)   65637469 6f6e3a20 4b656570 2d416c69   ection: Keep-Ali
0x000000e0 (00224)   76650d0a 43616368 652d436f 6e74726f   ve..Cache-Contro
0x000000f0 (00240)   6c3a206e 6f2d6361 6368650d 0a0d0a0c   l: no-cache.....
0x00000100 (00256)   a36cd524 8fb65a19 73295b88 d5bd63b9   .l.$..Z.s)[...c.
0x00000110 (00272)   a095e89f 21486be2 5139f06d 07b972c9   ....!Hk.Q9.m..r.
0x00000120 (00288)   2ca2fb31 106e7e12 d0198285 0f4f06fb   ,..1.n~......O..
0x00000130 (00304)   81bd89dd 41698dca 672e9178 b83d90b7   ....Ai..g..x.=..
0x00000140 (00320)   efee18d6 73649c75 9929a08e 59d5a367   ....sd.u.)..Y..g
0x00000150 (00336)   7f9aa7ab fbefaf48 dddbb90e b42027de   .......H..... '.
0x00000160 (00352)   e00fc615 76432fb7 2c9acd92 cd02d263   ....vC/.,......c
0x00000170 (00368)   7924d56a a56a558a c4aedc50 865ae03a   y$.j.jU....P.Z.:
0x00000180 (00384)   aa5de54f d0e4e7d5 89b96cf3 e09fea13   .].O......l.....
0x00000190 (00400)   ef7d7377 4a097870 0ab57b6e e1797fe8   .}swJ.xp..{n.y..
0x000001a0 (00416)   3960fd71 18eb8628 a2c98a5e 78         9`.q...(...^x

0x00000000 (00000)   504f5354 202f3f70 74727863 7a5f4658   POST /?ptrxcz_FX
0x00000010 (00016)   7239526a 324b6376 44566f36 4f677a48   r9Rj2KcvDVo6OgzH
0x00000020 (00032)   5a734153 6b334c64 77455770 20485454   ZsASk3LdwEWp HTT
0x00000030 (00048)   502f312e 310d0a41 63636570 743a202a   P/1.1..Accept: *
0x00000040 (00064)   2f2a0d0a 41636365 70742d4c 616e6775   /*..Accept-Langu
0x00000050 (00080)   6167653a 20656e2d 75730d0a 436f6e74   age: en-us..Cont
0x00000060 (00096)   656e742d 54797065 3a206170 706c6963   ent-Type: applic
0x00000070 (00112)   6174696f 6e2f6f63 7465742d 73747265   ation/octet-stre
0x00000080 (00128)   616d0d0a 436f6e74 656e742d 4c656e67   am..Content-Leng
0x00000090 (00144)   74683a20 360d0a55 7365722d 4167656e   th: 6..User-Agen
0x000000a0 (00160)   743a204d 6f7a696c 6c612f34 2e302028   t: Mozilla/4.0 (
0x000000b0 (00176)   636f6d70 61746962 6c653b20 4d534945   compatible; MSIE
0x000000c0 (00192)   20362e30 3b205769 6e646f77 73204e54    6.0; Windows NT
0x000000d0 (00208)   20352e31 3b205356 31290d0a 486f7374    5.1; SV1)..Host
0x000000e0 (00224)   3a207370 72696e67 73697073 2e636f6d   : springsips.com
0x000000f0 (00240)   0d0a436f 6e6e6563 74696f6e 3a204b65   ..Connection: Ke
0x00000100 (00256)   65702d41 6c697665 0d0a4361 6368652d   ep-Alive..Cache-
0x00000110 (00272)   436f6e74 726f6c3a 206e6f2d 63616368   Control: no-cach
0x00000120 (00288)   650d0a0d 0af2af62 5378c985 0f4f06fb   e......bSx...O..
0x00000130 (00304)   81bd89dd 41698dca 672e9178 b83d90b7   ....Ai..g..x.=..
0x00000140 (00320)   efee18d6 73649c75 9929a08e 59d5a367   ....sd.u.)..Y..g
0x00000150 (00336)   7f9aa7ab fbefaf48 dddbb90e b42027de   .......H..... '.
0x00000160 (00352)   e00fc615 76432fb7 2c9acd92 cd02d263   ....vC/.,......c
0x00000170 (00368)   7924d56a a56a558a c4aedc50 865ae03a   y$.j.jU....P.Z.:
0x00000180 (00384)   aa5de54f d0e4e7d5 89b96cf3 e09fea13   .].O......l.....
0x00000190 (00400)   ef7d7377 4a097870 0ab57b6e e1797fe8   .}swJ.xp..{n.y..
0x000001a0 (00416)   3960fd71 18eb8628 a2c98a5e 78         9`.q...(...^x

0x00000000 (00000)   504f5354 202f2048 5454502f 312e310d   POST / HTTP/1.1.
0x00000010 (00016)   0a416363 6570743a 202a2f2a 0d0a4163   .Accept: */*..Ac
0x00000020 (00032)   63657074 2d4c616e 67756167 653a2065   cept-Language: e
0x00000030 (00048)   6e2d7573 0d0a436f 6e74656e 742d5479   n-us..Content-Ty
0x00000040 (00064)   70653a20 6170706c 69636174 696f6e2f   pe: application/
0x00000050 (00080)   6f637465 742d7374 7265616d 0d0a436f   octet-stream..Co
0x00000060 (00096)   6e74656e 742d4c65 6e677468 3a203133   ntent-Length: 13
0x00000070 (00112)   380d0a55 7365722d 4167656e 743a204d   8..User-Agent: M
0x00000080 (00128)   6f7a696c 6c612f34 2e302028 636f6d70   ozilla/4.0 (comp
0x00000090 (00144)   61746962 6c653b20 4d534945 20362e30   atible; MSIE 6.0
0x000000a0 (00160)   3b205769 6e646f77 73204e54 20352e31   ; Windows NT 5.1
0x000000b0 (00176)   3b205356 31290d0a 486f7374 3a206265   ; SV1)..Host: be
0x000000c0 (00192)   656f6e65 2e64650d 0a436f6e 6e656374   eone.de..Connect
0x000000d0 (00208)   696f6e3a 204b6565 702d416c 6976650d   ion: Keep-Alive.
0x000000e0 (00224)   0a436163 68652d43 6f6e7472 6f6c3a20   .Cache-Control: 
0x000000f0 (00240)   6e6f2d63 61636865 0d0a0d0a 83a3d155   no-cache.......U
0x00000100 (00256)   c9aea2ba 0ea1197f b592314b 6ee44bce   ..........1Kn.K.
0x00000110 (00272)   605233cf 18e3ea56 083f62da f96627de   `R3....V.?b..f'.
0x00000120 (00288)   e58aece1 e016cbe5 56efe669 bc6255ed   ........V..i.bU.
0x00000130 (00304)   b8ee33f1 a514f9f4 7fbb4779 8ed377b7   ..3.......Gy..w.
0x00000140 (00320)   be8648                                ..H

0x00000000 (00000)   504f5354 202f3f70 74727863 7a5f3034   POST /?ptrxcz_04
0x00000010 (00016)   566d344d 64764354 6b324b62 74415269   Vm4MdvCTk2KbtARi
0x00000020 (00032)   30495a75 43546c33 4b627542 20485454   0IZuCTl3KbuB HTT
0x00000030 (00048)   502f312e 310d0a41 63636570 743a202a   P/1.1..Accept: *
0x00000040 (00064)   2f2a0d0a 41636365 70742d4c 616e6775   /*..Accept-Langu
0x00000050 (00080)   6167653a 20656e2d 75730d0a 436f6e74   age: en-us..Cont
0x00000060 (00096)   656e742d 54797065 3a206170 706c6963   ent-Type: applic
0x00000070 (00112)   6174696f 6e2f6f63 7465742d 73747265   ation/octet-stre
0x00000080 (00128)   616d0d0a 436f6e74 656e742d 4c656e67   am..Content-Leng
0x00000090 (00144)   74683a20 33370d0a 55736572 2d416765   th: 37..User-Age
0x000000a0 (00160)   6e743a20 4d6f7a69 6c6c612f 342e3020   nt: Mozilla/4.0 
0x000000b0 (00176)   28636f6d 70617469 626c653b 204d5349   (compatible; MSI
0x000000c0 (00192)   4520362e 303b2057 696e646f 7773204e   E 6.0; Windows N
0x000000d0 (00208)   5420352e 313b2053 5631290d 0a486f73   T 5.1; SV1)..Hos
0x000000e0 (00224)   743a2077 6f726c64 6f6e6c69 6e652e63   t: worldonline.c
0x000000f0 (00240)   6f2e756b 0d0a436f 6e6e6563 74696f6e   o.uk..Connection
0x00000100 (00256)   3a204b65 65702d41 6c697665 0d0a4361   : Keep-Alive..Ca
0x00000110 (00272)   6368652d 436f6e74 726f6c3a 206e6f2d   che-Control: no-
0x00000120 (00288)   63616368 650d0a0d 0ad4b926 02b579d2   cache......&..y.
0x00000130 (00304)   0589d364 095d2df7 0c124735 144ed192   ...d.]-...G5.N..
0x00000140 (00320)   183cf757 1c1051ea 1ff11096 23d2f70e   .<.W..Q.....#...
0x00000150 (00336)   1112d612 883c9b16 39bbce7f b883251e   .....<..9.....%.
0x00000160 (00352)   f2185987 94cfaf25 55a4e529 33b6202d   ..Y....%U..)3. -
0x00000170 (00368)   3ae266ad 5a01ab34 2d297038 24b31c3d   :.f.Z..4-)p8$..=
0x00000180 (00384)   39d91340 ccf8e7d5 89b96cf3 e09fea13   9..@......l.....
0x00000190 (00400)   ef7d7377 4a097870 0ab57b6e e1797fe8   .}swJ.xp..{n.y..
0x000001a0 (00416)   3960fd71 18eb8628 a2c98a5e 78         9`.q...(...^x

0x00000000 (00000)   504f5354 202f2048 5454502f 312e310d   POST / HTTP/1.1.
0x00000010 (00016)   0a416363 6570743a 202a2f2a 0d0a4163   .Accept: */*..Ac
0x00000020 (00032)   63657074 2d4c616e 67756167 653a2065   cept-Language: e
0x00000030 (00048)   6e2d7573 0d0a436f 6e74656e 742d5479   n-us..Content-Ty
0x00000040 (00064)   70653a20 6170706c 69636174 696f6e2f   pe: application/
0x00000050 (00080)   6f637465 742d7374 7265616d 0d0a436f   octet-stream..Co
0x00000060 (00096)   6e74656e 742d4c65 6e677468 3a203432   ntent-Length: 42
0x00000070 (00112)   0d0a5573 65722d41 67656e74 3a204d6f   ..User-Agent: Mo
0x00000080 (00128)   7a696c6c 612f342e 30202863 6f6d7061   zilla/4.0 (compa
0x00000090 (00144)   7469626c 653b204d 53494520 362e303b   tible; MSIE 6.0;
0x000000a0 (00160)   2057696e 646f7773 204e5420 352e313b    Windows NT 5.1;
0x000000b0 (00176)   20535631 290d0a48 6f73743a 20766d77    SV1)..Host: vmw
0x000000c0 (00192)   2e636f6d 0d0a436f 6e6e6563 74696f6e   .com..Connection
0x000000d0 (00208)   3a204b65 65702d41 6c697665 0d0a4361   : Keep-Alive..Ca
0x000000e0 (00224)   6368652d 436f6e74 726f6c3a 206e6f2d   che-Control: no-
0x000000f0 (00240)   63616368 650d0a0d 0a39cac8 ccd5b693   cache....9......
0x00000100 (00256)   51ba6f3b 57ac8efc 5c9147a4 62836665   Q.o;W...\.G.b.fe
0x00000110 (00272)   6882eb3f 6e67a4e7 7359c3a8 794be269   h..?ng..sY..yK.i
0x00000120 (00288)   7f309b68 650d0a0d 0ad4b926 02b579d2   .0.he......&..y.
0x00000130 (00304)   0589d364 095d2df7 0c124735 144ed192   ...d.]-...G5.N..
0x00000140 (00320)   183cf757 1c1051ea 1ff11096 23d2f70e   .<.W..Q.....#...
0x00000150 (00336)   1112d612 883c9b16 39bbce7f b883251e   .....<..9.....%.
0x00000160 (00352)   f2185987 94cfaf25 55a4e529 33b6202d   ..Y....%U..)3. -
0x00000170 (00368)   3ae266ad 5a01ab34 2d297038 24b31c3d   :.f.Z..4-)p8$..=
0x00000180 (00384)   39d91340 ccf8e7d5 89b96cf3 e09fea13   9..@......l.....
0x00000190 (00400)   ef7d7377 4a097870 0ab57b6e e1797fe8   .}swJ.xp..{n.y..
0x000001a0 (00416)   3960fd71 18eb8628 a2c98a5e 78         9`.q...(...^x

0x00000000 (00000)   504f5354 202f3f70 74727863 7a5f5973   POST /?ptrxcz_Ys
0x00000010 (00016)   47376234 53783277 4c6b3957 76455973   G7b4Sx2wLk9WvEYs
0x00000020 (00032)   7462304f 6c395774 43494256 20485454   tb0Ol9WtCIBV HTT
0x00000030 (00048)   502f312e 310d0a41 63636570 743a202a   P/1.1..Accept: *
0x00000040 (00064)   2f2a0d0a 41636365 70742d4c 616e6775   /*..Accept-Langu
0x00000050 (00080)   6167653a 20656e2d 75730d0a 436f6e74   age: en-us..Cont
0x00000060 (00096)   656e742d 54797065 3a206170 706c6963   ent-Type: applic
0x00000070 (00112)   6174696f 6e2f6f63 7465742d 73747265   ation/octet-stre
0x00000080 (00128)   616d0d0a 436f6e74 656e742d 4c656e67   am..Content-Leng
0x00000090 (00144)   74683a20 3233370d 0a557365 722d4167   th: 237..User-Ag
0x000000a0 (00160)   656e743a 204d6f7a 696c6c61 2f342e30   ent: Mozilla/4.0
0x000000b0 (00176)   2028636f 6d706174 69626c65 3b204d53    (compatible; MS
0x000000c0 (00192)   49452036 2e303b20 57696e64 6f777320   IE 6.0; Windows 
0x000000d0 (00208)   4e542035 2e313b20 53563129 0d0a486f   NT 5.1; SV1)..Ho
0x000000e0 (00224)   73743a20 77696c6c 696e6574 2e6e6574   st: willinet.net
0x000000f0 (00240)   0d0a436f 6e6e6563 74696f6e 3a204b65   ..Connection: Ke
0x00000100 (00256)   65702d41 6c697665 0d0a4361 6368652d   ep-Alive..Cache-
0x00000110 (00272)   436f6e74 726f6c3a 206e6f2d 63616368   Control: no-cach
0x00000120 (00288)   650d0a0d 0abae5c1 1dd6ca07 a5c2415d   e.............A]
0x00000130 (00304)   a72837d4 b150958e 383a0f3d bd74d210   .(7..P..8:.=.t..
0x00000140 (00320)   44f61a73 c849d33e 53a849ed d78d0295   D..s.I.>S.I.....
0x00000150 (00336)   ddf7d4ac 6364dafd e83d2d8c ee21e633   ....cd...=-..!.3
0x00000160 (00352)   f4d32f3f f509fad2 7f1f112b 05b5c9d2   ../?.......+....
0x00000170 (00368)   0ac51c61 10a23b22 16dd4a5a 2071bf28   ...a..;"..JZ q.(
0x00000180 (00384)   2c3b8f69 9b36e7a0 3c7175d0 a72ffb0a   ,;.i.6..<qu../..
0x00000190 (00400)   548b1d4c 5f09f1b3 65551475 e8a05e01   T..L_...eU.u..^.
0x000001a0 (00416)   72914bf5 777f68f4 7e8b215e 833c067b   r.K.w.h.~.!^.<.{
0x000001b0 (00432)   0a92eec2 8ab6f59c 1511e40a 1c013799   ..............7.
0x000001c0 (00448)   21f6a040 27678c09 a71e14b3 3aea916b   !..@'g......:..k
0x000001d0 (00464)   7399f710 7ac3e21d fbd303b8 846f5b2b   s...z........o[+
0x000001e0 (00480)   0a8cd921 903518a4 96e33465 9cd89e0c   ...!.5....4e....
0x000001f0 (00496)   a20a19fc a6f4e265 2cfc4d64 b2cbd33e   .......e,.Md...>
0x00000200 (00512)   b8fab091 3da29237 4394b1f8 487a6aa0   ....=..7C...Hzj.
0x00000210 (00528)   4e5d                                  N]

0x00000000 (00000)   504f5354 202f3f70 74727863 7a5f7343   POST /?ptrxcz_sC
0x00000010 (00016)   4b6d3752 6c67324c 667a4a63 78476175   Km7Rlg2LfzJcxGau
0x00000020 (00032)   45587342 56546f38 526b354f 20485454   EXsBVTo8Rk5O HTT
0x00000030 (00048)   502f312e 310d0a41 63636570 743a202a   P/1.1..Accept: *
0x00000040 (00064)   2f2a0d0a 41636365 70742d4c 616e6775   /*..Accept-Langu
0x00000050 (00080)   6167653a 20656e2d 75730d0a 436f6e74   age: en-us..Cont
0x00000060 (00096)   656e742d 54797065 3a206170 706c6963   ent-Type: applic
0x00000070 (00112)   6174696f 6e2f6f63 7465742d 73747265   ation/octet-stre
0x00000080 (00128)   616d0d0a 436f6e74 656e742d 4c656e67   am..Content-Leng
0x00000090 (00144)   74683a20 3232380d 0a557365 722d4167   th: 228..User-Ag
0x000000a0 (00160)   656e743a 204d6f7a 696c6c61 2f342e30   ent: Mozilla/4.0
0x000000b0 (00176)   2028636f 6d706174 69626c65 3b204d53    (compatible; MS
0x000000c0 (00192)   49452036 2e303b20 57696e64 6f777320   IE 6.0; Windows 
0x000000d0 (00208)   4e542035 2e313b20 53563129 0d0a486f   NT 5.1; SV1)..Ho
0x000000e0 (00224)   73743a20 76617878 696e652e 636f6d0d   st: vaxxine.com.
0x000000f0 (00240)   0a436f6e 6e656374 696f6e3a 204b6565   .Connection: Kee
0x00000100 (00256)   702d416c 6976650d 0a436163 68652d43   p-Alive..Cache-C
0x00000110 (00272)   6f6e7472 6f6c3a20 6e6f2d63 61636865   ontrol: no-cache
0x00000120 (00288)   0d0a0d0a 67216709 f133f791 fd1eeb97   ....g!g..3......
0x00000130 (00304)   d571799d c7903aa3 b9affba8 91028aae   .qy...:.........
0x00000140 (00320)   538f47cf 6ce054d5 5199fcda 3652a4e0   S.G.l.T.Q...6R..
0x00000150 (00336)   83b8a266 0d2a0dec e67c9bf1 d79b5cf7   ...f.*...|....\.
0x00000160 (00352)   afeeeafc 94a79202 c8603a08 5e19e20d   .........`:.^...
0x00000170 (00368)   8838a313 58f14a19 3daaf21e ab679a24   .8..X.J.=....g.$
0x00000180 (00384)   4613978f d83a0330 fafcff9a 9346393b   F....:.0.....F9;
0x00000190 (00400)   58146b41 20536f46 2b78b1c8 35c4be51   X.kA SoF+x..5..Q
0x000001a0 (00416)   194b9957 ed9b3d5e f954cf62 8307a0e9   .K.W..=^.T.b....
0x000001b0 (00432)   98f16469 bcf842f4 df5594fa 10a7a1     ..di..B..U.....

0x00000000 (00000)   504f5354 202f3f70 74727863 7a5f796c   POST /?ptrxcz_yl
0x00000010 (00016)   314f627a 49627543 566f7233 546f3751   1ObzIbuCVor3To7Q
0x00000020 (00032)   6a503655 70795673 525a7544 20485454   jP6UpyVsRZuD HTT
0x00000030 (00048)   502f312e 310d0a41 63636570 743a202a   P/1.1..Accept: *
0x00000040 (00064)   2f2a0d0a 41636365 70742d4c 616e6775   /*..Accept-Langu
0x00000050 (00080)   6167653a 20656e2d 75730d0a 436f6e74   age: en-us..Cont
0x00000060 (00096)   656e742d 54797065 3a206170 706c6963   ent-Type: applic
0x00000070 (00112)   6174696f 6e2f6f63 7465742d 73747265   ation/octet-stre
0x00000080 (00128)   616d0d0a 436f6e74 656e742d 4c656e67   am..Content-Leng
0x00000090 (00144)   74683a20 3135390d 0a557365 722d4167   th: 159..User-Ag
0x000000a0 (00160)   656e743a 204d6f7a 696c6c61 2f342e30   ent: Mozilla/4.0
0x000000b0 (00176)   2028636f 6d706174 69626c65 3b204d53    (compatible; MS
0x000000c0 (00192)   49452036 2e303b20 57696e64 6f777320   IE 6.0; Windows 
0x000000d0 (00208)   4e542035 2e313b20 53563129 0d0a486f   NT 5.1; SV1)..Ho
0x000000e0 (00224)   73743a20 727a2d6f 6e6c696e 652e6465   st: rz-online.de
0x000000f0 (00240)   0d0a436f 6e6e6563 74696f6e 3a204b65   ..Connection: Ke
0x00000100 (00256)   65702d41 6c697665 0d0a4361 6368652d   ep-Alive..Cache-
0x00000110 (00272)   436f6e74 726f6c3a 206e6f2d 63616368   Control: no-cach
0x00000120 (00288)   650d0a0d 0a276314 9ed6aa3a 1fb5b563   e....'c....:...c
0x00000130 (00304)   ae7f2319 b5c0ff61 3ba3e3e6 3b553d82   ..#....a;...;U=.
0x00000140 (00320)   4f465cf4 4a0842e4 52a42957 59964818   OF\.J.B.R.)WY.H.
0x00000150 (00336)   5fbc2f68 e6b217fc 6c08f366 77751fdf   _./h....l..fwu..
0x00000160 (00352)   871eac9e 1399ed95 54e76595 9f8a8456   ........T.e....V
0x00000170 (00368)   a5b4a317 ab91c2d8 b0767b80 b6f19e41   .........v{....A
0x00000180 (00384)   bca61671 272072aa c75a                ...q' r..Z

0x00000000 (00000)   504f5354 202f3f70 74727863 7a5f764b   POST /?ptrxcz_vK
0x00000010 (00016)   64324e67 304a6376 45587139 53714b66   d2Ng0JcvEXq9SqKf
0x00000020 (00032)   39546d37 514c6730 4a647847 20485454   9Tm7QLg0JdxG HTT
0x00000030 (00048)   502f312e 310d0a41 63636570 743a202a   P/1.1..Accept: *
0x00000040 (00064)   2f2a0d0a 41636365 70742d4c 616e6775   /*..Accept-Langu
0x00000050 (00080)   6167653a 20656e2d 75730d0a 436f6e74   age: en-us..Cont
0x00000060 (00096)   656e742d 54797065 3a206170 706c6963   ent-Type: applic
0x00000070 (00112)   6174696f 6e2f6f63 7465742d 73747265   ation/octet-stre
0x00000080 (00128)   616d0d0a 436f6e74 656e742d 4c656e67   am..Content-Leng
0x00000090 (00144)   74683a20 3139350d 0a557365 722d4167   th: 195..User-Ag
0x000000a0 (00160)   656e743a 204d6f7a 696c6c61 2f342e30   ent: Mozilla/4.0
0x000000b0 (00176)   2028636f 6d706174 69626c65 3b204d53    (compatible; MS
0x000000c0 (00192)   49452036 2e303b20 57696e64 6f777320   IE 6.0; Windows 
0x000000d0 (00208)   4e542035 2e313b20 53563129 0d0a486f   NT 5.1; SV1)..Ho
0x000000e0 (00224)   73743a20 64756c75 74682e63 6f6d0d0a   st: duluth.com..
0x000000f0 (00240)   436f6e6e 65637469 6f6e3a20 4b656570   Connection: Keep
0x00000100 (00256)   2d416c69 76650d0a 43616368 652d436f   -Alive..Cache-Co
0x00000110 (00272)   6e74726f 6c3a206e 6f2d6361 6368650d   ntrol: no-cache.
0x00000120 (00288)   0a0d0aff 12995986 a752da16 4b97d781   ......Y..R..K...
0x00000130 (00304)   3331de84 c643a09c 6a58ddfd 644164f2   31...C..jX..dAd.
0x00000140 (00320)   8f1de16e ded0e765 71b3e95c 0496ebc8   ...n...eq..\....
0x00000150 (00336)   aae86d57 9074ef4f 2357f152 1c53f305   ..mW.t.O#W.R.S..
0x00000160 (00352)   e835b5e4 ec60f293 3b14f93b cef6fa6a   .5...`..;..;...j
0x00000170 (00368)   61d9fc4c f4bbfe50 edb7                a..L...P..

0x00000000 (00000)   504f5354 202f3f70 74727863 7a5f4558   POST /?ptrxcz_EX
0x00000010 (00016)   7241536c 344e677a 49617543 56703751   rASl4NgzIauCVp7Q
0x00000020 (00032)   69324b64 78465972 41536c35 20485454   i2KdxFYrASl5 HTT
0x00000030 (00048)   502f312e 310d0a41 63636570 743a202a   P/1.1..Accept: *
0x00000040 (00064)   2f2a0d0a 41636365 70742d4c 616e6775   /*..Accept-Langu
0x00000050 (00080)   6167653a 20656e2d 75730d0a 436f6e74   age: en-us..Cont
0x00000060 (00096)   656e742d 54797065 3a206170 706c6963   ent-Type: applic
0x00000070 (00112)   6174696f 6e2f6f63 7465742d 73747265   ation/octet-stre
0x00000080 (00128)   616d0d0a 436f6e74 656e742d 4c656e67   am..Content-Leng
0x00000090 (00144)   74683a20 3234300d 0a557365 722d4167   th: 240..User-Ag
0x000000a0 (00160)   656e743a 204d6f7a 696c6c61 2f342e30   ent: Mozilla/4.0
0x000000b0 (00176)   2028636f 6d706174 69626c65 3b204d53    (compatible; MS
0x000000c0 (00192)   49452036 2e303b20 57696e64 6f777320   IE 6.0; Windows 
0x000000d0 (00208)   4e542035 2e313b20 53563129 0d0a486f   NT 5.1; SV1)..Ho
0x000000e0 (00224)   73743a20 6a6d752e 6564750d 0a436f6e   st: jmu.edu..Con
0x000000f0 (00240)   6e656374 696f6e3a 204b6565 702d416c   nection: Keep-Al
0x00000100 (00256)   6976650d 0a436163 68652d43 6f6e7472   ive..Cache-Contr
0x00000110 (00272)   6f6c3a20 6e6f2d63 61636865 0d0a0d0a   ol: no-cache....
0x00000120 (00288)   76cd25e1 b36bd947 16237f0e a2cd3ee0   v.%..k.G.#....>.
0x00000130 (00304)   5f185565 48191f68 f73cb9f1 d1c5f976   _.UeH..h.<.....v
0x00000140 (00320)   b980a17c 9c374982 8e560a88 ee5bef0d   ...|.7I..V...[..
0x00000150 (00336)   4b624093 3e810199 223aa99e f373da24   Kb@.>...":...s.$
0x00000160 (00352)   ecb8d364 13ff86af b61d48b5 d3d6efba   ...d......H.....
0x00000170 (00368)   50b7ddc3 357085c9 a32d2dcf 4b3f433a   P...5p...--.K?C:
0x00000180 (00384)   c19a7cda e55c7945 7ea6b2e5 360ecbeb   ..|..\yE~...6...
0x00000190 (00400)   0bb3e8f0 fc0bf872 13be1efc dd78c601   .......r.....x..
0x000001a0 (00416)   cb955508 cae8150d 549be693 6955c313   ..U.....T...iU..
0x000001b0 (00432)   8026709e aeff4623 abb8ee28 b36bfaaf   .&p...F#...(.k..
0x000001c0 (00448)   2427d72f 917fcc39 25d05a3f 658266c6   $'./...9%.Z?e.f.
0x000001d0 (00464)   82075a47 85c2dad0 074e1b56 1766f8db   ..ZG.....N.V.f..
0x000001e0 (00480)   a0f5fc60 41aca466 56c5c9ed 7bd99ff2   ...`A..fV...{...
0x000001f0 (00496)   4c5f628b e32c7812 a54c3918 891803a2   L_b..,x..L9.....
0x00000200 (00512)   d261c2a7 b71a6aad aa392bb3 809cd8b8   .a....j..9+.....
0x00000210 (00528)   108add                                ...

0x00000000 (00000)   504f5354 202f2048 5454502f 312e310d   POST / HTTP/1.1.
0x00000010 (00016)   0a416363 6570743a 202a2f2a 0d0a4163   .Accept: */*..Ac
0x00000020 (00032)   63657074 2d4c616e 67756167 653a2065   cept-Language: e
0x00000030 (00048)   6e2d7573 0d0a436f 6e74656e 742d5479   n-us..Content-Ty
0x00000040 (00064)   70653a20 6170706c 69636174 696f6e2f   pe: application/
0x00000050 (00080)   6f637465 742d7374 7265616d 0d0a436f   octet-stream..Co
0x00000060 (00096)   6e74656e 742d4c65 6e677468 3a203134   ntent-Length: 14
0x00000070 (00112)   300d0a55 7365722d 4167656e 743a204d   0..User-Agent: M
0x00000080 (00128)   6f7a696c 6c612f34 2e302028 636f6d70   ozilla/4.0 (comp
0x00000090 (00144)   61746962 6c653b20 4d534945 20362e30   atible; MSIE 6.0
0x000000a0 (00160)   3b205769 6e646f77 73204e54 20352e31   ; Windows NT 5.1
0x000000b0 (00176)   3b205356 31290d0a 486f7374 3a206162   ; SV1)..Host: ab
0x000000c0 (00192)   762e6267 0d0a436f 6e6e6563 74696f6e   v.bg..Connection
0x000000d0 (00208)   3a204b65 65702d41 6c697665 0d0a4361   : Keep-Alive..Ca
0x000000e0 (00224)   6368652d 436f6e74 726f6c3a 206e6f2d   che-Control: no-
0x000000f0 (00240)   63616368 650d0a0d 0a6c4c09 2ce10688   cache....lL.,...
0x00000100 (00256)   b01b9b9a c0219747 d0f86eb0 dbb181ea   .....!.G..n.....
0x00000110 (00272)   e48a6257 ee0e2017 82bb495a 8b574c2a   ..bW.. ...IZ.WL*
0x00000120 (00288)   11496beb 16c33803 9d204354 2206fcfb   .Ik...8.. CT"...
0x00000130 (00304)   27eab4a3 2db06e4b 33cca14e 34e8df9a   '...-.nK3..N4...
0x00000140 (00320)   3e8bfe5b 44a8b703 4a7870ab 4f5d2953   >..[D...Jxp.O])S
0x00000150 (00336)   55486fd7 5f317f6c cbaedaa5 6b1312f4   UHo._1.l....k...
0x00000160 (00352)   e02e582b 82                           ..X+.

0x00000000 (00000)   504f5354 202f2048 5454502f 312e310d   POST / HTTP/1.1.
0x00000010 (00016)   0a416363 6570743a 202a2f2a 0d0a4163   .Accept: */*..Ac
0x00000020 (00032)   63657074 2d4c616e 67756167 653a2065   cept-Language: e
0x00000030 (00048)   6e2d7573 0d0a436f 6e74656e 742d5479   n-us..Content-Ty
0x00000040 (00064)   70653a20 6170706c 69636174 696f6e2f   pe: application/
0x00000050 (00080)   6f637465 742d7374 7265616d 0d0a436f   octet-stream..Co
0x00000060 (00096)   6e74656e 742d4c65 6e677468 3a203138   ntent-Length: 18
0x00000070 (00112)   330d0a55 7365722d 4167656e 743a204d   3..User-Agent: M
0x00000080 (00128)   6f7a696c 6c612f34 2e302028 636f6d70   ozilla/4.0 (comp
0x00000090 (00144)   61746962 6c653b20 4d534945 20362e30   atible; MSIE 6.0
0x000000a0 (00160)   3b205769 6e646f77 73204e54 20352e31   ; Windows NT 5.1
0x000000b0 (00176)   3b205356 31290d0a 486f7374 3a206361   ; SV1)..Host: ca
0x000000c0 (00192)   7065636f 642e6e65 740d0a43 6f6e6e65   pecod.net..Conne
0x000000d0 (00208)   6374696f 6e3a204b 6565702d 416c6976   ction: Keep-Aliv
0x000000e0 (00224)   650d0a43 61636865 2d436f6e 74726f6c   e..Cache-Control
0x000000f0 (00240)   3a206e6f 2d636163 68650d0a 0d0a57fe   : no-cache....W.
0x00000100 (00256)   e670e28b 9cf369c2 c3f2cb3d 40fbbb7b   .p....i....=@..{
0x00000110 (00272)   f2c6f1e4 35064972 018f3530 c00db577   ....5.Ir..50...w
0x00000120 (00288)   6f16a39d 341a91c3 f91df4fc 2ea27a75   o...4.........zu
0x00000130 (00304)   9d25699b 62296327 412d0d86 06f1f083   .%i.b)c'A-......
0x00000140 (00320)   2d309665 c338358b 883c5bb1 4d4034d7   -0.e.85..<[.M@4.
0x00000150 (00336)   12442f63 f147b3f3 cf4b6472 03b5f1a0   .D/c.G...Kdr....
0x00000160 (00352)   73532a36 a7bcccec fd5aa78d 665f859f   sS*6.....Z..f_..
0x00000170 (00368)   a1628ccb e7e2b950 456a99de 236e8302   .b.....PEj..#n..
0x00000180 (00384)   d772a58e c77538ae b5fa5685 9a788379   .r...u8...V..x.y
0x00000190 (00400)   9301bca9 1b06c2cf e009f837 c20d7210   ...........7..r.
0x000001a0 (00416)   a78bdda9 491587cd 0e19f534 f01c288d   ....I......4..(.
0x000001b0 (00432)   1a9c411b d2                           ..A..

0x00000000 (00000)   504f5354 202f3f70 74727863 7a5f4154   POST /?ptrxcz_AT
0x00000010 (00016)   6d354f68 304a6377 45587274 43566f37   m5Oh0JcwEXrtCVo7
0x00000020 (00032)   5069314b 4662464b 65794861 20485454   Pi1KFbFKeyHa HTT
0x00000030 (00048)   502f312e 310d0a41 63636570 743a202a   P/1.1..Accept: *
0x00000040 (00064)   2f2a0d0a 41636365 70742d4c 616e6775   /*..Accept-Langu
0x00000050 (00080)   6167653a 20656e2d 75730d0a 436f6e74   age: en-us..Cont
0x00000060 (00096)   656e742d 54797065 3a206170 706c6963   ent-Type: applic
0x00000070 (00112)   6174696f 6e2f6f63 7465742d 73747265   ation/octet-stre
0x00000080 (00128)   616d0d0a 436f6e74 656e742d 4c656e67   am..Content-Leng
0x00000090 (00144)   74683a20 3130310d 0a557365 722d4167   th: 101..User-Ag
0x000000a0 (00160)   656e743a 204d6f7a 696c6c61 2f342e30   ent: Mozilla/4.0
0x000000b0 (00176)   2028636f 6d706174 69626c65 3b204d53    (compatible; MS
0x000000c0 (00192)   49452036 2e303b20 57696e64 6f777320   IE 6.0; Windows 
0x000000d0 (00208)   4e542035 2e313b20 53563129 0d0a486f   NT 5.1; SV1)..Ho
0x000000e0 (00224)   73743a20 7367692e 6e65740d 0a436f6e   st: sgi.net..Con
0x000000f0 (00240)   6e656374 696f6e3a 204b6565 702d416c   nection: Keep-Al
0x00000100 (00256)   6976650d 0a436163 68652d43 6f6e7472   ive..Cache-Contr
0x00000110 (00272)   6f6c3a20 6e6f2d63 61636865 0d0a0d0a   ol: no-cache....
0x00000120 (00288)   a26332d6 4249f95c cbbcc967 c1d4866f   .c2.BI.\...g...o
0x00000130 (00304)   aa862a77 9338ce7e 89508b86 72022f8e   ..*w.8.~.P..r./.
0x00000140 (00320)   5bb4d295 4466769d 20b2                [...Dfv. .

0x00000000 (00000)   504f5354 202f2048 5454502f 312e310d   POST / HTTP/1.1.
0x00000010 (00016)   0a416363 6570743a 202a2f2a 0d0a4163   .Accept: */*..Ac
0x00000020 (00032)   63657074 2d4c616e 67756167 653a2065   cept-Language: e
0x00000030 (00048)   6e2d7573 0d0a436f 6e74656e 742d5479   n-us..Content-Ty
0x00000040 (00064)   70653a20 6170706c 69636174 696f6e2f   pe: application/
0x00000050 (00080)   6f637465 742d7374 7265616d 0d0a436f   octet-stream..Co
0x00000060 (00096)   6e74656e 742d4c65 6e677468 3a203832   ntent-Length: 82
0x00000070 (00112)   0d0a5573 65722d41 67656e74 3a204d6f   ..User-Agent: Mo
0x00000080 (00128)   7a696c6c 612f342e 30202863 6f6d7061   zilla/4.0 (compa
0x00000090 (00144)   7469626c 653b204d 53494520 362e303b   tible; MSIE 6.0;
0x000000a0 (00160)   2057696e 646f7773 204e5420 352e313b    Windows NT 5.1;
0x000000b0 (00176)   20535631 290d0a48 6f73743a 206d6164    SV1)..Host: mad
0x000000c0 (00192)   61736669 73682e63 6f6d0d0a 436f6e6e   asfish.com..Conn
0x000000d0 (00208)   65637469 6f6e3a20 4b656570 2d416c69   ection: Keep-Ali
0x000000e0 (00224)   76650d0a 43616368 652d436f 6e74726f   ve..Cache-Contro
0x000000f0 (00240)   6c3a206e 6f2d6361 6368650d 0a0d0aca   l: no-cache.....
0x00000100 (00256)   e42383af 9dcb887a 8a408e66 baba9da2   .#.....z.@.f....
0x00000110 (00272)   517ebbd5 6ebec1c7 8d7fc792 7af4cc6a   Q~..n.......z..j
0x00000120 (00288)   cd82d235 baf7d7a4 6195e2d7 7ed5e8a2   ...5....a...~...
0x00000130 (00304)   6b4aee7a bed8f352 1167f91d fedbfee8   kJ.z...R.g......
0x00000140 (00320)   ea5004c0 3ddf098b 2a540f8e 17c9145e   .P..=...*T.....^
0x00000150 (00336)   d0                                    .

0x00000000 (00000)   504f5354 202f2048 5454502f 312e310d   POST / HTTP/1.1.
0x00000010 (00016)   0a416363 6570743a 202a2f2a 0d0a4163   .Accept: */*..Ac
0x00000020 (00032)   63657074 2d4c616e 67756167 653a2065   cept-Language: e
0x00000030 (00048)   6e2d7573 0d0a436f 6e74656e 742d5479   n-us..Content-Ty
0x00000040 (00064)   70653a20 6170706c 69636174 696f6e2f   pe: application/
0x00000050 (00080)   6f637465 742d7374 7265616d 0d0a436f   octet-stream..Co
0x00000060 (00096)   6e74656e 742d4c65 6e677468 3a203235   ntent-Length: 25
0x00000070 (00112)   330d0a55 7365722d 4167656e 743a204d   3..User-Agent: M
0x00000080 (00128)   6f7a696c 6c612f34 2e302028 636f6d70   ozilla/4.0 (comp
0x00000090 (00144)   61746962 6c653b20 4d534945 20362e30   atible; MSIE 6.0
0x000000a0 (00160)   3b205769 6e646f77 73204e54 20352e31   ; Windows NT 5.1
0x000000b0 (00176)   3b205356 31290d0a 486f7374 3a20696e   ; SV1)..Host: in
0x000000c0 (00192)   73696768 7462622e 636f6d0d 0a436f6e   sightbb.com..Con
0x000000d0 (00208)   6e656374 696f6e3a 204b6565 702d416c   nection: Keep-Al
0x000000e0 (00224)   6976650d 0a436163 68652d43 6f6e7472   ive..Cache-Contr
0x000000f0 (00240)   6f6c3a20 6e6f2d63 61636865 0d0a0d0a   ol: no-cache....
0x00000100 (00256)   6da64bd0 13815453 dcb846e4 9053c5ec   m.K...TS..F..S..
0x00000110 (00272)   bb5cd774 886d2577 315aa38c 78cfa58c   .\.t.m%w1Z..x...
0x00000120 (00288)   7fac1097 05c14c9f ee72f0a6 fe860930   ......L..r.....0
0x00000130 (00304)   de9b66b8 1ea49ac4 75fddbd6 08b76464   ..f.....u.....dd
0x00000140 (00320)   6d2525a7 a5caedf3 3f7c91fb 53c81b03   m%%.....?|..S...
0x00000150 (00336)   1a14a60a f65f3012 6816d419 2187ff86   ....._0.h...!...
0x00000160 (00352)   92751b29 b6301496 39a71638 1c3a7740   .u.).0..9..8.:w@
0x00000170 (00368)   0fa4c347 04f6cecb 396d2457 1487e15e   ...G....9m$W...^
0x00000180 (00384)   4b947f6a c3768871 6bee87fa f00a277f   K..j.v.qk.....'.
0x00000190 (00400)   4c934f0c 06fc9f14 fa472a1c 38eb1327   L.O......G*.8..'
0x000001a0 (00416)   a079d2a8 8cbb2836 2405b33d e0193d45   .y....(6$..=..=E
0x000001b0 (00432)   01982cc8 ee7f7653 816accda 88158c62   ..,...vS.j.....b
0x000001c0 (00448)   16c4ea6d e2a5da75 66bb647d 82621d84   ...m...uf.d}.b..
0x000001d0 (00464)   63bf690b 50e30f97 16fccc9e 9706e925   c.i.P..........%
0x000001e0 (00480)   ce7a712d b72c1535 a1deb83c 95069544   .zq-.,.5...<...D
0x000001f0 (00496)   71461f4c 40389053 1d74fb5a 2d3a202a   qF.L@8.S.t.Z-: *
0x00000200 (00512)   2f2a0d0a 41636365 70742d4c 616e6775   /*..Accept-Langu
0x00000210 (00528)   6167653a 20656e2d 75730d0a 436f6e74   age: en-us..Cont
0x00000220 (00544)   656e742d 54797065 3a206170 706c6963   ent-Type: applic
0x00000230 (00560)   6174696f 6e2f6f63 7465742d 73747265   ation/octet-stre
0x00000240 (00576)   616d0d0a 436f6e74 656e742d 4c656e67   am..Content-Leng
0x00000250 (00592)   6002                                  `.

0x00000000 (00000)   504f5354 202f3f70 74727863 7a5f6932   POST /?ptrxcz_i2
0x00000010 (00016)   4c657948 5a744339 536c344e 677a4961   LeyHZtC9Sl4NgzIa
0x00000020 (00032)   75445378 48617544 57713953 20485454   uDSxHauDWq9S HTT
0x00000030 (00048)   502f312e 310d0a41 63636570 743a202a   P/1.1..Accept: *
0x00000040 (00064)   2f2a0d0a 41636365 70742d4c 616e6775   /*..Accept-Langu
0x00000050 (00080)   6167653a 20656e2d 75730d0a 436f6e74   age: en-us..Cont
0x00000060 (00096)   656e742d 54797065 3a206170 706c6963   ent-Type: applic
0x00000070 (00112)   6174696f 6e2f6f63 7465742d 73747265   ation/octet-stre
0x00000080 (00128)   616d0d0a 436f6e74 656e742d 4c656e67   am..Content-Leng
0x00000090 (00144)   74683a20 3235350d 0a557365 722d4167   th: 255..User-Ag
0x000000a0 (00160)   656e743a 204d6f7a 696c6c61 2f342e30   ent: Mozilla/4.0
0x000000b0 (00176)   2028636f 6d706174 69626c65 3b204d53    (compatible; MS
0x000000c0 (00192)   49452036 2e303b20 57696e64 6f777320   IE 6.0; Windows 
0x000000d0 (00208)   4e542035 2e313b20 53563129 0d0a486f   NT 5.1; SV1)..Ho
0x000000e0 (00224)   73743a20 62726574 746c6172 736f6e2e   st: brettlarson.
0x000000f0 (00240)   636f6d0d 0a436f6e 6e656374 696f6e3a   com..Connection:
0x00000100 (00256)   204b6565 702d416c 6976650d 0a436163    Keep-Alive..Cac
0x00000110 (00272)   68652d43 6f6e7472 6f6c3a20 6e6f2d63   he-Control: no-c
0x00000120 (00288)   61636865 0d0a0d0a cb5701c6 440b7c4c   ache.....W..D.|L
0x00000130 (00304)   7532715e 7f271a70 4d92657d 0a9e9b88   u2q^.'.pM.e}....
0x00000140 (00320)   da11eb93 f523ba2c dade5e38 7ada2ac0   .....#.,..^8z.*.
0x00000150 (00336)   638ccec7 d4ecc84f 35f015d7 123ca0de   c......O5....<..
0x00000160 (00352)   faed43e6 b73aceed ca                  ..C..:...

0x00000000 (00000)   504f5354 202f2048 5454502f 312e310d   POST / HTTP/1.1.
0x00000010 (00016)   0a416363 6570743a 202a2f2a 0d0a4163   .Accept: */*..Ac
0x00000020 (00032)   63657074 2d4c616e 67756167 653a2065   cept-Language: e
0x00000030 (00048)   6e2d7573 0d0a436f 6e74656e 742d5479   n-us..Content-Ty
0x00000040 (00064)   70653a20 6170706c 69636174 696f6e2f   pe: application/
0x00000050 (00080)   6f637465 742d7374 7265616d 0d0a436f   octet-stream..Co
0x00000060 (00096)   6e74656e 742d4c65 6e677468 3a203234   ntent-Length: 24
0x00000070 (00112)   0d0a5573 65722d41 67656e74 3a204d6f   ..User-Agent: Mo
0x00000080 (00128)   7a696c6c 612f342e 30202863 6f6d7061   zilla/4.0 (compa
0x00000090 (00144)   7469626c 653b204d 53494520 362e303b   tible; MSIE 6.0;
0x000000a0 (00160)   2057696e 646f7773 204e5420 352e313b    Windows NT 5.1;
0x000000b0 (00176)   20535631 290d0a48 6f73743a 20616363    SV1)..Host: acc
0x000000c0 (00192)   6f756e74 616e742e 636f6d0d 0a436f6e   ountant.com..Con
0x000000d0 (00208)   6e656374 696f6e3a 204b6565 702d416c   nection: Keep-Al
0x000000e0 (00224)   6976650d 0a436163 68652d43 6f6e7472   ive..Cache-Contr
0x000000f0 (00240)   6f6c3a20 6e6f2d63 61636865 0d0a0d0a   ol: no-cache....
0x00000100 (00256)   b5c181e6 d59fc36f c50f1574 22986e80   .......o...t".n.
0x00000110 (00272)   4eef2409 3c62cf8f 8d7fc792 7af4cc6a   N.$.<b......z..j
0x00000120 (00288)   cd82d235 baf7d7a4 6195e2d7 7ed5e8a2   ...5....a...~...
0x00000130 (00304)   6b4aee7a bed8f352 1167f91d fedbfee8   kJ.z...R.g......
0x00000140 (00320)   ea5004c0 3ddf098b 2a540f8e 17c9145e   .P..=...*T.....^
0x00000150 (00336)   d0                                    .


Strings