Analysis Date2015-11-05 19:31:01
MD5e495a53116df2890d0c39ff7a5c7d9ac
SHA1d80b216ffd0827c017f63d8aef30f624459ed017

Static Details:

File typePE32 executable for MS Windows (GUI) Intel 80386 32-bit
Section.text md5: 83b28e25b3b3dd1bf94f142ad15aeb3a sha1: 87874bcb08f29a565ccb33bf4bd10a51cf2d6369 size: 56320
Section.rdata md5: 087ceedea81cb75e5bba2b2a944da435 sha1: 560bb526928d79b872620445ce1e9bdd064d7ae7 size: 5120
Section.data md5: bda77959bec33cc46882dfa63fbd51f7 sha1: 978ef53932045b9d4dccf030f0f6f8b1ece64102 size: 14336
Section.rsrc md5: c26f873a57367ff6415546a152ba5ef3 sha1: 1f05bbab2f751328d89a845edbab518f6393d734 size: 8192
Timestamp2014-07-23 13:28:49
VersionCompanyName: Sec Corp.
FileVersion: 1.0.2.2
ProductVersion: 1.0.2.2
PackerMicrosoft Visual C++ 5.0
PEhash4abe65a228bd08c5c59bcedad6b76fdc9e8d8995
IMPhash34ecc0fc4e3cba9a288b12cdf0bb689d
AVCA (E-Trust Ino)No Virus
AVF-SecureGen:Variant.Dyreza.4
AVDr. WebTrojan.DownLoad.64914
AVClamAVNo Virus
AVArcabit (arcavir)Gen:Variant.Dyreza.4
AVBullGuardGen:Variant.Dyreza.4
AVPadvishNo Virus
AVVirusBlokAda (vba32)Trojan.Cutwail
AVCAT (quickheal)No Virus
AVTrend MicroNo Virus
AVKasperskyTrojan.Win32.Generic
AVZillya!No Virus
AVEmsisoftGen:Variant.Dyreza.4
AVIkarusTrojan.Win32.Cutwail
AVFrisk (f-prot)No Virus
AVAuthentiumNo Virus
AVMalwareBytesTrojan.Agent.DZ
AVMicroWorld (escan)Gen:Variant.Dyreza.4
AVMicrosoft Security EssentialsTrojan:Win32/Bagsu!rfn
AVK7Trojan ( 0049eb141 )
AVBitDefenderGen:Variant.Dyreza.4
AVFortinetW32/Kryptik.GKA!tr
AVSymantecTrojan.Gen.2
AVGrisoft (avg)SHeur4.BYVO
AVEset (nod32)Win32/Kryptik.CHIU
AVAlwil (avast)Crypt-REV [Trj]
AVAd-AwareGen:Variant.Dyreza.4
AVTwisterTrojan.Cap147295.ngnm
AVAvira (antivir)TR/Symmi.44373
AVMcafeeGenericR-ECO!E495A53116DF
AVRising0x570c1c27
AVCA (E-Trust Ino)No Virus
AVF-SecureGen:Variant.Dyreza.4
AVDr. WebTrojan.DownLoad.64914
AVClamAVNo Virus
AVArcabit (arcavir)Gen:Variant.Dyreza.4
AVBullGuardGen:Variant.Dyreza.4
AVPadvishNo Virus
AVVirusBlokAda (vba32)Trojan.Cutwail
AVCAT (quickheal)No Virus
AVTrend MicroNo Virus
AVKasperskyTrojan.Win32.Generic
AVZillya!No Virus
AVEmsisoftGen:Variant.Dyreza.4
AVIkarusTrojan.Win32.Cutwail
AVFrisk (f-prot)No Virus
AVAuthentiumNo Virus
AVMalwareBytesTrojan.Agent.DZ

Runtime Details:

Screenshot

Process
↳ C:\malware.exe

RegistryHKEY_CURRENT_USER\software\microsoft\windows\currentversion\run\fibmegibmoff ➝
C:\Documents and Settings\Administrator\fibmegibmoff.exe
RegistryHKEY_CURRENT_CONFIG\Software\Microsoft\windows\CurrentVersion\Internet Settings\ProxyEnable ➝
NULL
RegistryHKEY_CURRENT_USER\software\microsoft\windows\currentversion\AppManagement ➝
NULL
RegistryHKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ProxyBypass ➝
1
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\betapak[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\kikonet[2].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\tenmanya[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\copigj[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\jewster[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\abril35[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\gemur[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\noori.com[1].htm
Creates FileC:\Documents and Settings\Administrator\Application Data\Microsoft\Crypto\RSA\S-1-5-21-XXXXXXXXXX-XXXXXXXXXX-XXXXXXXXXX-500\a18ca4003deb042bbee7a40f15e1970b_666939c9-243b-475e-9504-51724db22670
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\abril35[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\absoft[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\srand[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\apbuck[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\car-all[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\rapas[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\scbcn[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\rapas[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\index.dat
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\wixtech[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\nelipak[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\2crsi[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\ludomemo[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\jewster[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\nwhn[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\gpp-co[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\sirakabe[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\History\History.IE5\index.dat
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\rupaul[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\etnobook[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\ssmkielce[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\t-cmfg[1].htm
Creates FilePIPE\lsarpc
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\upaep.com[1].htm
Creates FileC:\Documents and Settings\Administrator\fibmegibmoff.exe
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\harwig[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\kurozu.co[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\lgwpc[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\cccfcpa[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\suidou[2].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\ireg[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\gemur[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\donaci[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\tusende[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\srand[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\car-all[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\rupaul[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\absoft[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\inascol[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\bamalba[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\hostment[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\safespan[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\nelipak[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\pelicin[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\awlq[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\kodapost[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\curlisto[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\oxilog[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\donaci[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\ealdoen[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\e-kameya[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\idc.com[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\proro[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\nobatel[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\inascol[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\adefcu[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\xpal.com[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\lab80[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\hojstrup[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\plyny[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\pelicin[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\ploom[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\kohyoj.co[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\suidou[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\etnobook[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\adefcu[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\ptfe[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\depol[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\safespan[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\car-mc[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\markwane[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\kurozu.co[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\da-y.org[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\markwane[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\ireg[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\faxim[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\scbcn[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\proro[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\bcmetals[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\kikonet[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\c-plus[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\oxilog[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\bcmetals[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\ysado[2].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\lgwpc[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\noori.com[2].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\nobatel[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\curlisto[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\jroy[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\b-und-p[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\apbuck[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\ploom[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\ysado[1].htm
Creates FileC:\Documents and Settings\Administrator\Cookies\index.dat
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\plyny[1].htm
Creates File\Device\Afd\Endpoint
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\aengus[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\aweja[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\2crsi[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\cosas.com[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\ssmkielce[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\kodapost[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\mmd-i[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\findbc[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\joy2call[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\kombfm[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\lab80[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\upaep.com[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\hosieree[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\b-und-p[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\cccfcpa[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\minkasha[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\xpal.com[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\hosieree[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\aweja[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\da-y.org[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\sirakabe[2].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\gocore[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\vsell.com[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\ludomemo[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\findbc[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\wixtech[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\faxim[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\hostment[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\depol[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\tusende[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\ptfe[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\g-m[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\bamalba[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\mmd-i[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\hojstrup[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\c-plus[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\betapak[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\kumaden[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\e-kameya[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\car-mc[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\oozkranj[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\minkasha[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\ealdoen[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\vsell.com[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\harwig[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\gocore[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\cosas.com[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\g-m[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\proro[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\abril35[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\gemur[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\noori.com[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\kikonet[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\oxilog[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\c-plus[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\bcmetals[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\srand[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\car-all[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\rapas[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\scbcn[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\lgwpc[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\nobatel[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\curlisto[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\jewster[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\apbuck[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\b-und-p[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\sirakabe[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\rupaul[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\ssmkielce[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\ysado[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\upaep.com[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\harwig[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\aweja[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\cccfcpa[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\2crsi[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\mmd-i[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\ireg[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\findbc[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\tusende[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\absoft[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\hostment[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\hosieree[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\safespan[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\nelipak[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\kodapost[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\gocore[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\vsell.com[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\ludomemo[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\wixtech[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\donaci[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\depol[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\e-kameya[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\inascol[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\ptfe[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\adefcu[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\xpal.com[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\lab80[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\hojstrup[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\plyny[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\pelicin[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\bamalba[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\ploom[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\suidou[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\betapak[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\etnobook[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\car-mc[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\minkasha[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\ealdoen[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\cosas.com[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\markwane[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\da-y.org[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\kurozu.co[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\faxim[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\g-m[1].htm
Creates Mutexc:!documents and settings!administrator!local settings!history!history.ie5!
Creates MutexWininetConnectionMutex
Creates Mutexc:!documents and settings!administrator!cookies!
Creates Mutexc:!documents and settings!administrator!local settings!temporary internet files!content.ie5!
Creates Mutexfibmegibmoff
Winsock DNSysado.com
Winsock DNSadefcu.org
Winsock DNSproro.net
Winsock DNScosas.com.ec
Winsock DNSharwig.nl
Winsock DNSminkasha.com
Winsock DNSc-plus.nl
Winsock DNStusende.de
Winsock DNSptfe.ch
Winsock DNSbamalba.com
Winsock DNSplyny.com
Winsock DNSsafespan.com
Winsock DNSatb-lit.com
Winsock DNSaengus.at
Winsock DNSbcmetals.com
Winsock DNS3anet.com.tw
Winsock DNSawlq.net
Winsock DNSkikonet.org
Winsock DNSsuidou.org
Winsock DNScurlisto.com
Winsock DNSmavlet.com
Winsock DNSrupaul.com
Winsock DNSwijeya.lk
Winsock DNSetnobook.com
Winsock DNSdonaci.nl
Winsock DNSclogwild.com
Winsock DNSludomemo.com
Winsock DNSealdoen.com
Winsock DNShostment.com
Winsock DNSjroy.net
Winsock DNSjoy2call.com
Winsock DNSmarkwane.com
Winsock DNSrapas.net
Winsock DNSb-und-p.com
Winsock DNScar-mc.net
Winsock DNSjewster.com
Winsock DNSapbuck.com
Winsock DNSrichter.bg
Winsock DNSbetapak.com
Winsock DNSwixtech.com
Winsock DNSkodapost.ru
Winsock DNSlab80.it
Winsock DNSireg.fr
Winsock DNSkohyoj.co.jp
Winsock DNSsrand.jp
Winsock DNSploom.com
Winsock DNSg-m.ro
Winsock DNSfaxim.pl
Winsock DNSt-cmfg.com
Winsock DNSkurozu.co.jp
Winsock DNSnelipak.nl
Winsock DNShsmc-ul.com
Winsock DNSgemur.pl
Winsock DNSda-y.org.uk
Winsock DNScccfcpa.com
Winsock DNSupaep.com.uy
Winsock DNS2crsi.com
Winsock DNShorizoe.com
Winsock DNSxpal.com.mx
Winsock DNSnwhn.org
Winsock DNSsirakabe.net
Winsock DNSscbcn.com
Winsock DNSnobatel.com
Winsock DNSdepol.pl
Winsock DNSaweja.nl
Winsock DNSssmkielce.pl
Winsock DNSsompirt.com
Winsock DNSbtsmm.com.au
Winsock DNSncktc.edu
Winsock DNSsisgate.com
Winsock DNSaicp.co.jp
Winsock DNSmmd-i.com
Winsock DNShojstrup.dk
Winsock DNSbizzly.ru
Winsock DNSdixi-car.pl
Winsock DNSkombfm.com
Winsock DNSinascol.com
Winsock DNSvsell.com.tw
Winsock DNSnyplaw.com
Winsock DNSasta.pl
Winsock DNSlgwpc.com
Winsock DNSpelicin.com
Winsock DNSfindbc.com
Winsock DNSnoori.com.sa
Winsock DNSbiuropl.pl
Winsock DNSkwerk.ca
Winsock DNSgocore.com
Winsock DNShosieree.com
Winsock DNSidc.com.ve
Winsock DNSabril35.com
Winsock DNSe-kameya.com
Winsock DNScar-all.com
Winsock DNSoxilog.com
Winsock DNSoozkranj.com
Winsock DNScopigj.com
Winsock DNStenmanya.net
Winsock DNSabsoft.com
Winsock DNSdeszr.com
Winsock DNSkumaden.com
Winsock DNSgpp-co.com

Network Details:

DNSpelicin.com
Type: A
141.8.224.169
DNSgocore.com
Type: A
209.151.241.76
DNSploom.com
Type: A
54.191.7.97
DNSdeszr.com
Type: A
162.210.98.151
DNShsmc-ul.com
Type: A
174.136.15.175
DNSclogwild.com
Type: A
66.84.0.137
DNSc-plus.nl
Type: A
89.188.20.232
DNSrapas.net
Type: A
217.174.156.7
DNShojstrup.dk
Type: A
176.9.33.165
DNSkumaden.com
Type: A
49.212.180.178
DNSharwig.nl
Type: A
213.171.65.103
DNSoozkranj.com
Type: A
104.28.17.50
DNSoozkranj.com
Type: A
104.28.16.50
DNSmarkwane.com
Type: A
109.169.46.54
DNSkohyoj.co.jp
Type: A
119.245.176.79
DNSfaxim.pl
Type: A
89.161.136.157
DNSplyny.com
Type: A
62.109.134.56
DNShorizoe.com
Type: A
124.146.218.231
DNSasta.pl
Type: A
79.96.91.146
DNSaweja.nl
Type: A
141.138.203.88
DNSbtsmm.com.au
Type: A
101.0.96.242
DNSetnobook.com
Type: A
202.52.146.37
DNSsrand.jp
Type: A
219.109.38.59
DNSoxilog.com
Type: A
212.83.182.50
DNSptfe.ch
Type: A
213.180.183.82
DNSsirakabe.net
Type: A
59.106.165.171
DNSsuidou.org
Type: A
157.112.144.16
DNSabsoft.com
Type: A
204.197.245.74
DNSbetapak.com
Type: A
213.142.136.98
DNSkodapost.ru
Type: A
94.79.54.163
DNSnyplaw.com
Type: A
50.28.49.43
DNSt-cmfg.com
Type: A
174.136.65.131
DNSawlq.net
Type: A
216.35.197.23
DNSbamalba.com
Type: A
121.254.171.174
DNScar-all.com
Type: A
202.181.99.38
DNSnoori.com.sa
Type: A
199.83.133.198
DNSnoori.com.sa
Type: A
199.83.131.217
DNScurlisto.com
Type: A
184.154.55.66
DNShostment.com
Type: A
114.108.129.200
DNStenmanya.net
Type: A
182.48.14.145
DNScopigj.com
Type: A
50.63.202.42
DNSdonaci.nl
Type: A
178.18.131.210
DNSealdoen.com
Type: A
178.255.225.231
DNSgemur.pl
Type: A
195.244.26.8
DNScosas.com.ec
Type: A
216.227.214.177
DNScccfcpa.com
Type: A
192.254.210.123
DNStusende.de
Type: A
85.13.139.105
DNSjoy2call.com
Type: A
210.196.112.157
DNSaengus.at
Type: A
80.237.133.19
DNSmavlet.com
Type: A
84.95.248.125
DNSbiuropl.pl
Type: A
62.233.202.211
DNSludomemo.com
Type: A
81.88.48.71
DNSbcmetals.com
Type: A
185.35.248.241
DNSkikonet.org
Type: A
157.112.152.50
DNSscbcn.com
Type: A
5.57.226.41
DNScar-mc.net
Type: A
210.152.171.16
DNShosieree.com
Type: A
216.73.117.26
DNSda-y.org.uk
Type: A
79.170.40.247
DNSkombfm.com
Type: A
173.254.120.56
DNSwijeya.lk
Type: A
203.143.20.8
DNSdixi-car.pl
Type: A
87.98.234.101
DNSncktc.edu
Type: A
199.0.206.85
DNSireg.fr
Type: A
95.142.170.145
DNSxpal.com.mx
Type: A
23.236.62.147
DNSabril35.com
Type: A
82.98.160.142
DNSjroy.net
Type: A
69.163.152.182
DNSminkasha.com
Type: A
202.181.99.38
DNSsisgate.com
Type: A
112.78.112.60
DNSnelipak.nl
Type: A
82.201.61.230
DNSg-m.ro
Type: A
188.212.255.182
DNSlab80.it
Type: A
95.110.208.215
DNSlgwpc.com
Type: A
208.94.239.126
DNSkurozu.co.jp
Type: A
202.208.172.129
DNSgpp-co.com
Type: A
98.129.90.58
DNSjewster.com
Type: A
69.163.226.151
DNSkwerk.ca
Type: A
69.163.152.70
DNSb-und-p.com
Type: A
80.190.243.150
DNSapbuck.com
Type: A
104.183.199.129
DNSapbuck.com
Type: A
24.73.155.34
DNSdepol.pl
Type: A
176.9.64.79
DNSvsell.com.tw
Type: A
220.130.220.65
DNSrupaul.com
Type: A
209.161.20.68
DNSproro.net
Type: A
219.94.162.157
DNSadefcu.org
Type: A
208.88.75.72
DNSmmd-i.com
Type: A
188.121.41.53
DNSwixtech.com
Type: A
69.94.62.10
DNSysado.com
Type: A
67.222.143.75
DNS2crsi.com
Type: A
198.100.152.1
DNSe-kameya.com
Type: A
119.245.178.242
DNSupaep.com.uy
Type: A
190.64.74.37
DNSfindbc.com
Type: A
199.167.17.149
DNSinascol.com
Type: A
209.172.62.232
DNSssmkielce.pl
Type: A
89.161.135.164
DNSnwhn.org
Type: A
64.207.183.100
DNSidc.com.ve
Type: A
205.251.135.234
DNSsafespan.com
Type: A
173.205.127.22
DNSaicp.co.jp
Type: A
124.40.7.147
DNSnobatel.com
Type: A
200.93.248.104
DNS3anet.com.tw
Type: A
DNSbizzly.ru
Type: A
DNSatb-lit.com
Type: A
DNSsompirt.com
Type: A
DNSrichter.bg
Type: A
HTTP POSThttp://gocore.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://ploom.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://pelicin.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://deszr.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://hsmc-ul.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://clogwild.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://c-plus.nl/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://rapas.net/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://hojstrup.dk/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://kumaden.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://pelicin.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://gocore.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://ploom.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://c-plus.nl/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://hojstrup.dk/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://rapas.net/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://kumaden.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://harwig.nl/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://oozkranj.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://harwig.nl/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://oozkranj.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://markwane.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://kohyoj.co.jp/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://faxim.pl/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://markwane.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://plyny.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://horizoe.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://asta.pl/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://kohyoj.co.jp/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://faxim.pl/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://aweja.nl/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://plyny.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://aweja.nl/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://btsmm.com.au/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://etnobook.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://srand.jp/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://etnobook.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://srand.jp/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://oxilog.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://ptfe.ch/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://sirakabe.net/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://suidou.org/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://oxilog.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://ptfe.ch/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://absoft.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://sirakabe.net/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://betapak.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://kodapost.ru/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://suidou.org/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://nyplaw.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://absoft.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://betapak.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://kodapost.ru/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://t-cmfg.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://awlq.net/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://t-cmfg.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://awlq.net/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://bamalba.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://bamalba.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://car-all.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://noori.com.sa/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://curlisto.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://car-all.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://noori.com.sa/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://hostment.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://tenmanya.net/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://curlisto.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://copigj.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://donaci.nl/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://hostment.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://tenmanya.net/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://copigj.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://donaci.nl/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://ealdoen.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://ealdoen.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://gemur.pl/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://cosas.com.ec/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://gemur.pl/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://cccfcpa.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://cosas.com.ec/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://tusende.de/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://cccfcpa.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://joy2call.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://aengus.at/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://tusende.de/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://mavlet.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://joy2call.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://aengus.at/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://biuropl.pl/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://ludomemo.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://ludomemo.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://bcmetals.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://bcmetals.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://kikonet.org/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://kikonet.org/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://scbcn.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://car-mc.net/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://scbcn.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://hosieree.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://car-mc.net/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://da-y.org.uk/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://kombfm.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://wijeya.lk/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://dixi-car.pl/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://hosieree.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://da-y.org.uk/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://kombfm.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://ncktc.edu/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://ireg.fr/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://ireg.fr/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://xpal.com.mx/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://abril35.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://xpal.com.mx/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://jroy.net/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://abril35.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://minkasha.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://jroy.net/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://sisgate.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://nelipak.nl/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://g-m.ro/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://minkasha.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://lab80.it/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://nelipak.nl/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://g-m.ro/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://lab80.it/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://lgwpc.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://lgwpc.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://kurozu.co.jp/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://kurozu.co.jp/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://gpp-co.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://jewster.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://kwerk.ca/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://gpp-co.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://jewster.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://b-und-p.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://apbuck.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://b-und-p.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://depol.pl/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://apbuck.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://depol.pl/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://vsell.com.tw/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://vsell.com.tw/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://rupaul.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://rupaul.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://proro.net/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://adefcu.org/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://mmd-i.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://proro.net/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://adefcu.org/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://mmd-i.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://wixtech.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://ysado.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://wixtech.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://2crsi.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://ysado.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://e-kameya.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://2crsi.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://e-kameya.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://upaep.com.uy/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://upaep.com.uy/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://findbc.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://findbc.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://inascol.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://ssmkielce.pl/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://inascol.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://nwhn.org/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://idc.com.ve/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://safespan.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://ssmkielce.pl/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://nwhn.org/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://aicp.co.jp/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://idc.com.ve/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://safespan.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://nobatel.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://nobatel.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
Flows TCP192.168.1.1:1038 ➝ 54.191.7.97:80
Flows TCP192.168.1.1:1039 ➝ 209.151.241.76:80
Flows TCP192.168.1.1:1037 ➝ 141.8.224.169:80
Flows TCP192.168.1.1:1040 ➝ 162.210.98.151:80
Flows TCP192.168.1.1:1041 ➝ 174.136.15.175:80
Flows TCP192.168.1.1:1042 ➝ 66.84.0.137:80
Flows TCP192.168.1.1:1043 ➝ 89.188.20.232:80
Flows TCP192.168.1.1:1044 ➝ 217.174.156.7:80
Flows TCP192.168.1.1:1045 ➝ 176.9.33.165:80
Flows TCP192.168.1.1:1046 ➝ 49.212.180.178:80
Flows TCP192.168.1.1:1047 ➝ 141.8.224.169:80
Flows TCP192.168.1.1:1048 ➝ 209.151.241.76:80
Flows TCP192.168.1.1:1049 ➝ 54.191.7.97:80
Flows TCP192.168.1.1:1050 ➝ 89.188.20.232:80
Flows TCP192.168.1.1:1051 ➝ 176.9.33.165:80
Flows TCP192.168.1.1:1052 ➝ 217.174.156.7:80
Flows TCP192.168.1.1:1053 ➝ 49.212.180.178:80
Flows TCP192.168.1.1:1054 ➝ 213.171.65.103:80
Flows TCP192.168.1.1:1055 ➝ 104.28.17.50:80
Flows TCP192.168.1.1:1056 ➝ 213.171.65.103:80
Flows TCP192.168.1.1:1057 ➝ 104.28.17.50:80
Flows TCP192.168.1.1:1058 ➝ 109.169.46.54:80
Flows TCP192.168.1.1:1059 ➝ 119.245.176.79:80
Flows TCP192.168.1.1:1060 ➝ 89.161.136.157:80
Flows TCP192.168.1.1:1061 ➝ 109.169.46.54:80
Flows TCP192.168.1.1:1062 ➝ 62.109.134.56:80
Flows TCP192.168.1.1:1063 ➝ 124.146.218.231:80
Flows TCP192.168.1.1:1064 ➝ 79.96.91.146:80
Flows TCP192.168.1.1:1065 ➝ 119.245.176.79:80
Flows TCP192.168.1.1:1066 ➝ 89.161.136.157:80
Flows TCP192.168.1.1:1067 ➝ 141.138.203.88:80
Flows TCP192.168.1.1:1068 ➝ 62.109.134.56:80
Flows TCP192.168.1.1:1069 ➝ 141.138.203.88:80
Flows TCP192.168.1.1:1070 ➝ 101.0.96.242:80
Flows TCP192.168.1.1:1071 ➝ 202.52.146.37:80
Flows TCP192.168.1.1:1072 ➝ 219.109.38.59:80
Flows TCP192.168.1.1:1073 ➝ 202.52.146.37:80
Flows TCP192.168.1.1:1074 ➝ 219.109.38.59:80
Flows TCP192.168.1.1:1075 ➝ 212.83.182.50:80
Flows TCP192.168.1.1:1076 ➝ 213.180.183.82:80
Flows TCP192.168.1.1:1077 ➝ 59.106.165.171:80
Flows TCP192.168.1.1:1078 ➝ 157.112.144.16:80
Flows TCP192.168.1.1:1079 ➝ 212.83.182.50:80
Flows TCP192.168.1.1:1080 ➝ 213.180.183.82:80
Flows TCP192.168.1.1:1081 ➝ 204.197.245.74:80
Flows TCP192.168.1.1:1082 ➝ 59.106.165.171:80
Flows TCP192.168.1.1:1083 ➝ 213.142.136.98:80
Flows TCP192.168.1.1:1084 ➝ 94.79.54.163:80
Flows TCP192.168.1.1:1085 ➝ 157.112.144.16:80
Flows TCP192.168.1.1:1086 ➝ 50.28.49.43:80
Flows TCP192.168.1.1:1087 ➝ 204.197.245.74:80
Flows TCP192.168.1.1:1088 ➝ 213.142.136.98:80
Flows TCP192.168.1.1:1089 ➝ 94.79.54.163:80
Flows TCP192.168.1.1:1090 ➝ 174.136.65.131:80
Flows TCP192.168.1.1:1091 ➝ 216.35.197.23:80
Flows TCP192.168.1.1:1092 ➝ 174.136.65.131:80
Flows TCP192.168.1.1:1093 ➝ 216.35.197.23:80
Flows TCP192.168.1.1:1094 ➝ 121.254.171.174:80
Flows TCP192.168.1.1:1095 ➝ 121.254.171.174:80
Flows TCP192.168.1.1:1096 ➝ 202.181.99.38:80
Flows TCP192.168.1.1:1097 ➝ 199.83.133.198:80
Flows TCP192.168.1.1:1098 ➝ 184.154.55.66:80
Flows TCP192.168.1.1:1099 ➝ 202.181.99.38:80
Flows TCP192.168.1.1:1100 ➝ 199.83.133.198:80
Flows TCP192.168.1.1:1101 ➝ 114.108.129.200:80
Flows TCP192.168.1.1:1102 ➝ 182.48.14.145:80
Flows TCP192.168.1.1:1103 ➝ 184.154.55.66:80
Flows TCP192.168.1.1:1104 ➝ 50.63.202.42:80
Flows TCP192.168.1.1:1105 ➝ 178.18.131.210:80
Flows TCP192.168.1.1:1106 ➝ 114.108.129.200:80
Flows TCP192.168.1.1:1107 ➝ 182.48.14.145:80
Flows TCP192.168.1.1:1108 ➝ 50.63.202.42:80
Flows TCP192.168.1.1:1109 ➝ 178.18.131.210:80
Flows TCP192.168.1.1:1110 ➝ 178.255.225.231:80
Flows TCP192.168.1.1:1111 ➝ 178.255.225.231:80
Flows TCP192.168.1.1:1112 ➝ 195.244.26.8:80
Flows TCP192.168.1.1:1113 ➝ 216.227.214.177:80
Flows TCP192.168.1.1:1114 ➝ 195.244.26.8:80
Flows TCP192.168.1.1:1115 ➝ 192.254.210.123:80
Flows TCP192.168.1.1:1116 ➝ 216.227.214.177:80
Flows TCP192.168.1.1:1117 ➝ 85.13.139.105:80
Flows TCP192.168.1.1:1118 ➝ 192.254.210.123:80
Flows TCP192.168.1.1:1119 ➝ 210.196.112.157:80
Flows TCP192.168.1.1:1120 ➝ 80.237.133.19:80
Flows TCP192.168.1.1:1121 ➝ 85.13.139.105:80
Flows TCP192.168.1.1:1122 ➝ 84.95.248.125:80
Flows TCP192.168.1.1:1123 ➝ 210.196.112.157:80
Flows TCP192.168.1.1:1124 ➝ 80.237.133.19:80
Flows TCP192.168.1.1:1125 ➝ 62.233.202.211:80
Flows TCP192.168.1.1:1126 ➝ 81.88.48.71:80
Flows TCP192.168.1.1:1127 ➝ 81.88.48.71:80
Flows TCP192.168.1.1:1128 ➝ 185.35.248.241:80
Flows TCP192.168.1.1:1129 ➝ 185.35.248.241:80
Flows TCP192.168.1.1:1130 ➝ 157.112.152.50:80
Flows TCP192.168.1.1:1131 ➝ 157.112.152.50:80
Flows TCP192.168.1.1:1132 ➝ 5.57.226.41:80
Flows TCP192.168.1.1:1133 ➝ 210.152.171.16:80
Flows TCP192.168.1.1:1134 ➝ 5.57.226.41:80
Flows TCP192.168.1.1:1135 ➝ 216.73.117.26:80
Flows TCP192.168.1.1:1136 ➝ 210.152.171.16:80
Flows TCP192.168.1.1:1137 ➝ 79.170.40.247:80
Flows TCP192.168.1.1:1138 ➝ 173.254.120.56:80
Flows TCP192.168.1.1:1139 ➝ 203.143.20.8:80
Flows TCP192.168.1.1:1140 ➝ 87.98.234.101:80
Flows TCP192.168.1.1:1141 ➝ 216.73.117.26:80
Flows TCP192.168.1.1:1142 ➝ 79.170.40.247:80
Flows TCP192.168.1.1:1143 ➝ 173.254.120.56:80
Flows TCP192.168.1.1:1144 ➝ 199.0.206.85:80
Flows TCP192.168.1.1:1145 ➝ 95.142.170.145:80
Flows TCP192.168.1.1:1146 ➝ 95.142.170.145:80
Flows TCP192.168.1.1:1147 ➝ 23.236.62.147:80
Flows TCP192.168.1.1:1148 ➝ 82.98.160.142:80
Flows TCP192.168.1.1:1149 ➝ 23.236.62.147:80
Flows TCP192.168.1.1:1150 ➝ 69.163.152.182:80
Flows TCP192.168.1.1:1151 ➝ 82.98.160.142:80
Flows TCP192.168.1.1:1152 ➝ 202.181.99.38:80
Flows TCP192.168.1.1:1153 ➝ 69.163.152.182:80
Flows TCP192.168.1.1:1154 ➝ 112.78.112.60:80
Flows TCP192.168.1.1:1155 ➝ 82.201.61.230:80
Flows TCP192.168.1.1:1156 ➝ 188.212.255.182:80
Flows TCP192.168.1.1:1157 ➝ 202.181.99.38:80
Flows TCP192.168.1.1:1158 ➝ 95.110.208.215:80
Flows TCP192.168.1.1:1159 ➝ 82.201.61.230:80
Flows TCP192.168.1.1:1160 ➝ 188.212.255.182:80
Flows TCP192.168.1.1:1161 ➝ 95.110.208.215:80
Flows TCP192.168.1.1:1162 ➝ 208.94.239.126:80
Flows TCP192.168.1.1:1163 ➝ 208.94.239.126:80
Flows TCP192.168.1.1:1164 ➝ 202.208.172.129:80
Flows TCP192.168.1.1:1165 ➝ 202.208.172.129:80
Flows TCP192.168.1.1:1166 ➝ 98.129.90.58:80
Flows TCP192.168.1.1:1167 ➝ 69.163.226.151:80
Flows TCP192.168.1.1:1168 ➝ 69.163.152.70:80
Flows TCP192.168.1.1:1169 ➝ 98.129.90.58:80
Flows TCP192.168.1.1:1170 ➝ 69.163.226.151:80
Flows TCP192.168.1.1:1171 ➝ 80.190.243.150:80
Flows TCP192.168.1.1:1172 ➝ 104.183.199.129:80
Flows TCP192.168.1.1:1173 ➝ 80.190.243.150:80
Flows TCP192.168.1.1:1174 ➝ 176.9.64.79:80
Flows TCP192.168.1.1:1175 ➝ 104.183.199.129:80
Flows TCP192.168.1.1:1176 ➝ 176.9.64.79:80
Flows TCP192.168.1.1:1177 ➝ 220.130.220.65:80
Flows TCP192.168.1.1:1178 ➝ 220.130.220.65:80
Flows TCP192.168.1.1:1179 ➝ 209.161.20.68:80
Flows TCP192.168.1.1:1180 ➝ 209.161.20.68:80
Flows TCP192.168.1.1:1181 ➝ 219.94.162.157:80
Flows TCP192.168.1.1:1182 ➝ 208.88.75.72:80
Flows TCP192.168.1.1:1183 ➝ 188.121.41.53:80
Flows TCP192.168.1.1:1184 ➝ 219.94.162.157:80
Flows TCP192.168.1.1:1185 ➝ 208.88.75.72:80
Flows TCP192.168.1.1:1186 ➝ 188.121.41.53:80
Flows TCP192.168.1.1:1187 ➝ 69.94.62.10:80
Flows TCP192.168.1.1:1188 ➝ 67.222.143.75:80
Flows TCP192.168.1.1:1189 ➝ 69.94.62.10:80
Flows TCP192.168.1.1:1190 ➝ 198.100.152.1:80
Flows TCP192.168.1.1:1191 ➝ 67.222.143.75:80
Flows TCP192.168.1.1:1192 ➝ 119.245.178.242:80
Flows TCP192.168.1.1:1193 ➝ 198.100.152.1:80
Flows TCP192.168.1.1:1194 ➝ 119.245.178.242:80
Flows TCP192.168.1.1:1195 ➝ 190.64.74.37:80
Flows TCP192.168.1.1:1196 ➝ 190.64.74.37:80
Flows TCP192.168.1.1:1197 ➝ 199.167.17.149:80
Flows TCP192.168.1.1:1198 ➝ 199.167.17.149:80
Flows TCP192.168.1.1:1199 ➝ 209.172.62.232:80
Flows TCP192.168.1.1:1200 ➝ 89.161.135.164:80
Flows TCP192.168.1.1:1201 ➝ 209.172.62.232:80
Flows TCP192.168.1.1:1202 ➝ 64.207.183.100:80
Flows TCP192.168.1.1:1203 ➝ 205.251.135.234:80
Flows TCP192.168.1.1:1204 ➝ 173.205.127.22:80
Flows TCP192.168.1.1:1205 ➝ 89.161.135.164:80
Flows TCP192.168.1.1:1206 ➝ 64.207.183.100:80
Flows TCP192.168.1.1:1207 ➝ 124.40.7.147:80
Flows TCP192.168.1.1:1208 ➝ 205.251.135.234:80
Flows TCP192.168.1.1:1209 ➝ 173.205.127.22:80
Flows TCP192.168.1.1:1210 ➝ 200.93.248.104:80
Flows TCP192.168.1.1:1211 ➝ 200.93.248.104:80

Raw Pcap



Strings

.C
.R.C.g
\
.
042504B3
1.0.2.2
CompanyName
FileVersion
         (((((                  H
ProductVersion
Sec Corp.
StringFileInfo
Translation
VarFileInfo
VS_VERSION_INFO
~@@@@@@@@
<@@@@@@@@
(@@@@@@@@
@@@@@@
@@@@@@@
@@@@@@@`
@@@@@@@^
@@@@@@@|@
@@@@@@@!
@@@@@@@@
@@@@@@@@ 
@@@@@@@@@
@@@@@@@@@@
@@@@@@@@@@~
@@@@@@@@@@<
@@@@@@@@@@@
@@@@@@@@@@@@@@@
@@@@@@@@@@@%@@
@@@@@@@@@%@@@@@@@@@@@@@
@@@@@@@+
*(@@@@@@@@
@@@@@@@@@@@"0
^00b00
0 A5AA@!,
0A$BIy
0eAwcD@A
@0H9?B
@$]-0l
(0O^,d8@@/
*%0RHP
]0ZABL
@<1(M\@]*}dV
1yd`8A
22TjWG
2.COgp@q$)
(2eA@cMBu`
2@@@@@@@@@@@@h@@@@@@@@
\3B0Mx
3+@ce5
3@,e)>}A
@@@@@@@@@@3Xs
@@@@@@@@@@4
@@@@@@@@@@@%4
/4@!AHPDq%@
4bibOI
@@4C@x@
4Kd'P%
(4(`LD
,4*Lt@NA0RN<
4n}b8I
4|P@00@D
4q+@@@
.4RbeTk0.G@@@
4uD?KA4
4@ UehEA+(b
4wo2@"y<
`5D9]J
@@5kuKE@A|IJ!
5PCr(Up[!
_:5.S(C
5s:h'b
@<7wbl
8@@@@@@@@@
8A#@@@
\@8*bb
8y<XGS
9-Dccb ~#
@9Lbb(@
@@@@@@@@@@A
@@@A@@
@@A@@$
@@A@@#
A@@@@@@@@@%@@@@@@@@@@@@@
@@A@@0OnP
@@@@@@@@@@A%2bC
#"A4Ac
A4Ae!LA
@A@@4dIPA@
@@@@@@@A5
A7@$8@@@@@@@@@@@@h@@@@@@@@
A7"P@@
A8bB'|FEI
@@A@@A
@@A@@-A
A@@A@@
AA0~4XLd
&)AA3@
@@A@A4,
A@A%9$B
A@@A=Anpq@
A@@AB3d
A@@ACA@
@@A@ADEMF?D
AAE9&J
@@A@AEg
AA g DA@@
@@A@A#LF
@@A@Ap
@@A@A@P,c=beH
/aB@@@@@@@@@%@@@@@@@@@@@@@
@@A@@B15
=AbG@/)
A@bge(
abnormal program termination
AbqQO@
@AB'@U@@h@@
ACb@@@@@@@@
@A@$@dG
A@D@o@CU 
=AE@!4P
Ag$@@@@@@@@
@@AG*c
A`@hKi(
@AHPbm
Ahtung
A)j*POpHE3=Ci
A	) jPz<M
@AL<jn
A@@LTU(U
An.9L*OBa
A@@oEKCm@4*z0R
AOXj@00@D
@Ap0FvA
@A%	P4ie
A@pROUeC
AQ`KD'
A@}+^R
ArAE2{
A=rbd6
ARIXkn
</assembly>
<assemblyIdentity
		<assemblyIdentity
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
.Av'LD
AVWAf9
"A=|,@@X@@@@
[@AX9@
A]XA,3v
AxLP@IP@b
Aze@@X@@@@
Azq@aDLM2
@/AZRz
@@@@@@@b
@%@@/B
\B@@@@@@@@
B@@@@@@@@@%@@@@@@@@@@@@@
+{B0A(a
b0dIK@%
b@'4@@p
@b8Z+{
,\	b@A
@@b@A0
B&-A$@A@
bb[`3%
bbA;D/
B{bo@L
bB@v-/H
bCJ`BL
BD/8tIX
bd_xp<
@@@@@@@bE6`
bezM[@
BF0D/5
(BFHU/!c
BgABmH
b@@@@@@@@@@@@h@@@@@@@@
@@bi O:
@bjcCF
!)B,#K
@%@@bM9
@bmAUx
bnBXKt
BN*p|Ii
\bo@ %
BO,	5r
@bOA@P
@@Boar8\c2@
!BOda,v
BO)M=GO
bO<@@X@@@@
/bP8SC
bphsV)
@BrL"9
B@T@cc2m
B(Ub||k $
b%Ujc4u4
Button
bUWU?z
=b^vgs
@B@@X@@@@
byb'@qz
<c;@@@
@@@@@@@@@@c
c@@@@@@@@
[@C@@@
@@@@@@@@@@C
@%@@C~
@%@@C]
@C@@@@@@@@
C@@@@@@@@@%@@@@@@@@@@@@@
C0|bbA
c3@@@@@@@@
@C !_b
]C$bA2
C+B	c 
c`/be(
c-ctj?GD,
@@CdC@
c@dGA)q
CEDj{h
c\Kb@b0
cktgLy
CL0d8L~
c[l'F8
CloseHandle
cnFDA@@
co56(@
COMCTL32.dll
cPblyg
@/!CPc
CreateFileA
CreateWindowExA
cr~LH^bF
c@@X@@@@
d@@@@@@@@@
@@@@@@@D
D$ _^]
@D@00A
=d2@FD_@
{D+)45B
^d4EP{H
D4vFE{
d5T^i@@@@@@@@
@dA&e{
dA|@hsD[dgdVc
@.data
@D.)AZ
D@bU{@
@D!cAu
Dcf$\@@Z
Declare
DefWindowProcA
@d=EHQ*D@4JBLz
$DELDO
DEMLAPss@l=
</dependency>
<dependency>
	</dependentAssembly>
	<dependentAssembly>
<description></description>
DestroyWindow
D@FDkm
D{@%GkcD0
DispatchMessageA
d"l2P}i]W<
 #(DlOes
@@DLW8<b2s
DN@^cR
DOMAIN error
DrqkD#Lc
!Ds@@@@@@@@@@@@h@@@@@@@@
D(sT	B
Dtd^F=6
}<DvS@
D@@X@@@@
DyB4Cnx|
@[!$<E
@@@@@@@E
,E4CEh
@@E`!A<
E;A@*`H[
,eb@oiO
@EB.PD
eC$@@@@@@@@@
@Ec8n\k,
eCc`|l0Of3|t
e,$Ee`
e@F0+@
E{G:00
EgUA|R
eKDA@@
EPs@q'bI
@,e@@X@@@@
ExitProcess
f@00@D
F@0$:C
Fbb*CGt@
fgqS@@@@@@@@@@@@h@@@@@@@@
F!/l`b
- floating point not loaded
FPD].,
F@q2[@
FreeEnvironmentStringsA
FreeEnvironmentStringsW
f}T1@!
!fTLD7b
=fz,b.
G0=@!T
`@gA,B
G?!DAD`K
=GDgc9
g@EFW	b^h4*3
GetACP
GetActiveWindow
GetCommandLineA
GetCPInfo
GetCurrentProcess
GetEnvironmentStrings
GetEnvironmentStringsW
GetFileSize
GetFileType
GetLastActivePopup
GetMessageA
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetProcAddress
GetStartupInfoA
GetStdHandle
GetVersion
G@@@@@@@@@@@@h@@@@@@@@
`,%gibtb9
 *gj#BxbU@
@)'Gk<
GKb`=$B%
!G@%O@
G|P&@,eh@'
g+@@vj
@@@@@@@@@@h
@@@@@@@@@@@@h@@@@@@@@
@@@@%@@@@h@@@@@@@@@@
@@@@%@@@@h@@@@@@@@@@)
@@@@%@@@@h@@@@@@@@@@@
@@@h@@
@@@h@@!
@@@h@@.
@@@h@@@@@@@@@@
&@@@@@@@@@@@@h@@@@@@@@
#@@h@@
H25rHJ
H2AH5bp
H4QPdNC0D3
@@@h@@8<
@@@h@@A
@@@h@@@AvAQ
@@@h@@b
@@@h@@B(
@@@@@@@Hb
H,B& %
@@@HbAqK
@h @b@G
hB Hvp4H
@@@@%@@@@h@@@@@@@@@@cBdO
HcgAuhu
@)HCQ,C
@%Hd$bk
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HebA@@
@@@h@@$EE
@@@h@@EW
@@@@%@@@@h@@@@@@@@@@H
@@@h@@iAZ
`@H%OC
@@@h@@	Ou
`\%!HPA|B
hsfc0a
@@@h@@s@L
HSUVWh
@@@@%@@@@h@@@@@@@@@@v@
h-:yc[
i@@@@@@@@
@<&I@@
Ibb8{o
iBBkrn
I*DA@@
Idpq((
IF)1s 
ikH@z!
InitCommonControlsEx
"iOgC7d
IP|{@@
IPAO}tAO=Bm@@@@@@@@@
I@RD@hq(s@
ISzE@ 
iT*[2U\
@IVqDz5
=J@`'!
@@@@@@@@@@J
J@@@@@@@@
J8@@@@@@@@@%@@@@@@@@@@@@@
jAG A@w
|j.b0e
jbG@@@@@@@@@
@@@@@@@j C
.J$D@@@@@@@@@@@@h@@@@@@@@
}JDM@D
JH@bg0b
%J@*{kA
jRJ,mi
J)@Sd6
@Ju=Xu
keLsm!O
KERNEL32.dll
K,h6\9
KH@.D.
kkBe@@h@@
k$pP@@%C\
l@@@@@@@@
@@@@@@@L
L@00@D
L[7iS@@@
			language="*"
@@lA@s0O-
+@lCD&
\LcZ*x9,R
LD*txk
l$eP-Oox
@@@@@@@LE@W
/LH40b
L_%h@LB
L@I5b$
@@+LiB@
LLg@A@
LoadCursorA
LoadIconA
LoadLibraryA
L@p~m@
lstrcatA
lstrcpyA
@/m0}j
@%@@m7@
mAbA*u
@MAIcH@@@
m@C@KE@5
@MD,0G
MessageBoxA
Microsoft Visual C++ Runtime Library
m{j^X@D
-Mk(gD
`M*ri 
m@U@00@D
@muLCzg
n515dS
NAF/eO!(A*4
	name="Company.Product.Name"
			name="Microsoft.Windows.Common-Controls"
nbKc@@h
Nb@{yR
nC@&AB
NGAAC4yo
Nhb|bD
n]@lby
- not enough space for arguments
- not enough space for environment
- not enough space for lowio initialization
- not enough space for _onexit/atexit table
- not enough space for stdio initialization
- not enough space for thread data
nUjBE^Hb`
o@@@@@@@@
@O4a<C)
@%o~5<u
$O)A@@
@@@@@@@@@@@OC
*OC(Ic%A
@%*ODAEA@$"T
O]DT@~O
OG*`g2%D
O@@g@R
@Oh@@8
OIA@@@@@@@@
*ok@u@@
oLMA@zH@
oOpX@@
@@@@@@@@@@Ou
p@2@@h
&P4BH%IBL
P4{byi
P4@,#T
$-p>a@
pAOd$Cs
P@@AP@
P${C@>"<@/A
+P[cbAHHA
 pCbF}
pC\gWWe
p!DA@@
p'EAAPly
@@%P=H
 PhE{"@@@@@@@@@
pi.rar
=PL	AMG
@pnHHy
`@PODk
pOj1@@6
p\@ORCq
PostQuitMessage
			processorArchitecture="*"
	processorArchitecture="*"
Program: 
<program name unknown>
			publicKeyToken="6595b64144ccf1df"
- pure virtual function call
~p?WAA
q@@@@@@@@
@@@@@@@Q
^q2;43
q*D\c0y
q@er>b
qF)OApZ
QgfJ>A
Q@@h@@
qIAXbiCJ9
ql`@IH|
 (R(@@@@@@@@@%@@@@@@@@@@@@@
R@@@@@@@@@
R3(<@H
`*R76Uy
r8c)%@Fq
RABbg@z
R`@bNB\
RBTA4F@
}RD4~bAeL'*&a
`.rdata
@rD@O/
ReadFile
RegisterClassExA
r.E@tD
R@sbAa
@RTc|23
RtlUnwind
runtime error 
Runtime Error!
.RVqbU
s@@@@@@@@
@@@@@@@@@@S
@@@@@@@@@@@S
s4@S(Fb
S5_CbB
S8@hFA9
sAOABAL}L
sBVt@*
SD@@4@C
sD4t	%
SendMessageA
SetHandleCount
S$gb@5\A
sgh4@A
sH)H>5
ShowWindow
SING error
s\O@A@
sOJ|9b
S%OQbF
!S(@r@@@
s{XAb@
SysListView32
SZ#MGD@@
@@@@@@@@@@@T(
tAkun[
TbJL$-
tB(l=L!
(TCG@U
<td(@O
TerminateProcess
t@@h@@
!This program cannot be run in DOS mode.
@@@@@@@@@@TI<L
TLOSS error
@To9@FBR
T@o(AXD@=@j@@@@@@@@
TranslateAcceleratorA
TranslateMessage
 trEc@LcI
t.;t$$t(
tU[kCx
			type="win32"
	type="win32"
	*U+AAd
UA@l5bAO
@Ucz@Y
*<uD0@A
UgMDbA$
UKF,.b
- unable to initialize heap
- unable to open console device
- unexpected heap error
- unexpected multithread lock error
UnhandledExceptionFilter
UpdateWindow
@@uPdMd@{@tA
user32.dll
USER32.dll
u,xA5L@3
@%@@@@v
`vAeP@
v-A@fz
vBKpM4Fk
VC20XC00U
Vcbe8C
%!VcfD
]vd@@@
	version="1.0.0.0"
			version="6.0.0.0"
vfS@f4FO
V\I@'F!b
VirtualAlloc
VirtualFree
VPu%5A
vS@@@@@@@@
vZCTO<
@@@@@@@@@@@w
w0"E*PA
w}4k@h
WideCharToMultiByte
@@@Wj%
'wk{ZPOeK
WriteFile
w+ub|B
@=wvZb
	WybIS
@@@@@@@@@x@@
@@@@@@@@@x@@".$
@@@x@@
x@@@@@@@
@@@@@@@@X
@@@@@@@@X@
@@@@@X@@
@@X@@@@
@@X@@@@@@@@@@@@@@@
@X@@@@@
X@:@%@
x5bHeb\
@@@@@@@@@x@@A,
@@@@@@@@@x@@B
@@@@@@@@XB`
@@@@@@@@@x@@C
@X@@c2
@@@@@@@@XcbB
X)FA@@
@@@@@@@@Xg
@X@@h 
@XH@,L
@@@@@@@@@x@@?@I
@@@@@@@@XL@p
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
@@@@@@@@@x@@O"
#@x@}O
@X@@-OUC4
=X]pmZ
@XP.SH
@@@@@@@@X@q
X	tccOBqOV@
@@@@@@@x@x@@@@@@@
@@@@@@@@@x@@@@@@@@@@X@
@@@@@@@@@x@@@@@@@@@@X@,
@@@@@X@@@@x
@@@@@@@@XX.
@@@@@@@@@x@@@@@@@@@@X@@A
xxC@Az1Nj
@@@@@@@@@x@@@@@@@@@@X@dBO
@@@@@@@@@x@@@@@@@@@@X@@Exy
@@@@@@@@@x@@@@@@@@@@X@G
@@@@@@@@@x@@@@@@@@@@X@Q
@@@@@@@@@x@@@@@@@@@@X@StT
XXZO(@
y@@@@@@@@
@y+ bDGc,
!Ykh$T
yl}1id
z8)Okg
z8}q*C@05l
@Zb0CC@.FWR
zjU~sV@
<@zL!;
zL>@O@@@
z&OX5D
`zwq,<