Analysis Date2015-09-30 05:33:01
MD58f5228754d1bde49430f3fb78b297527
SHA1f4f40067716246ec017b7ee1f6a835f7dc5e7f3d

Static Details:

File typePE32 executable for MS Windows (GUI) Intel 80386 32-bit
Section.text md5: 10c914080817874cab9fd93f840bc949 sha1: c8d5902ced4a8b901ce1f70d47fcc23cae77cc50 size: 74240
Section.rdata md5: cd86cfa0cf7b87eaaa79efdb2862e8d5 sha1: f12a3313bb7c621763bc7840356e7afc5a6cc14e size: 2048
Section.data md5: 6093d42bddc952119c555d91caf176e1 sha1: 19aed60e857ee510b23c4f39a03f38d641f2ace4 size: 9728
Section.rsrc md5: 524d1af201236f436a09395a64384efa sha1: 11b8ad69af6264dec350f8b24b028f747db8b75b size: 2048
Timestamp2014-08-05 18:44:49
VersionLegalCopyright: © 2012 Daniel Pistelli. All rights reserved.
InternalName: CFF Explorer.exe
FileVersion: 8.0.0.0
CompanyName: Daniel Pistelli
ProductName: CFF Explorer
ProductVersion: 8.0.0.0
FileDescription: Common File Format Explorer
OriginalFilename: CFF Explorer.exe
PEhash215eb0a68df7efc4892ec163a0799cb8b9224e53
IMPhash0e661519bbae53eb035094b391d0c3ec
AVRisingno_virus
AVMcafeeDownloader-FAKP!8F5228754D1B
AVAvira (antivir)TR/Kryptik.opos
AVTwisterTrojanDrop.Dorifel.alyg.cezt
AVAd-AwareGen:Variant.Kazy.427865
AVAlwil (avast)Malware-gen:Win32:Malware-gen
AVEset (nod32)Win32/Kryptik.CIPN
AVGrisoft (avg)Crypt3.AITL
AVSymantecno_virus
AVFortinetW32/Dorifel.ALXX!tr
AVBitDefenderGen:Variant.Kazy.427865
AVK7Trojan ( 0049fcc41 )
AVMicrosoft Security EssentialsTrojanDropper:Win32/Cutwail
AVMicroWorld (escan)Gen:Variant.Kazy.427865
AVMalwareBytesTrojan.Agent
AVAuthentiumW32/A-f61641df!Eldorado
AVFrisk (f-prot)no_virus
AVIkarusTrojan-Dropper.Win32.Dorifel
AVEmsisoftGen:Variant.Kazy.427865
AVZillya!Dropper.Dorifel.Win32.15053
AVKasperskyTrojan.Win32.Generic
AVTrend MicroTROJ_CUTWAIL.SM7
AVCAT (quickheal)no_virus
AVVirusBlokAda (vba32)no_virus
AVPadvishno_virus
AVBullGuardGen:Variant.Kazy.427865
AVArcabit (arcavir)Gen:Variant.Kazy.427865
AVClamAVno_virus
AVDr. WebTrojan.DownLoad.64914
AVF-SecureGen:Variant.Kazy.427865
AVCA (E-Trust Ino)no_virus

Runtime Details:

Screenshot

Process
↳ C:\malware.exe

RegistryHKEY_CURRENT_USER\software\microsoft\windows\currentversion\run\bofofzorcebo ➝
C:\Documents and Settings\Administrator\bofofzorcebo.exe
RegistryHKEY_CURRENT_CONFIG\Software\Microsoft\windows\CurrentVersion\Internet Settings\ProxyEnable ➝
NULL
RegistryHKEY_CURRENT_USER\software\microsoft\windows\currentversion\AppManagement ➝
NULL
RegistryHKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ProxyBypass ➝
1
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\kiwicr[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\acmf.com[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\interdisc[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\xlp.org[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\bars-dek[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\vipmel[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\zeltea[1].htm
Creates FileC:\Documents and Settings\Administrator\Application Data\Microsoft\Crypto\RSA\S-1-5-21-XXXXXXXXXX-XXXXXXXXXX-XXXXXXXXXX-500\a18ca4003deb042bbee7a40f15e1970b_666939c9-243b-475e-9504-51724db22670
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\k-sosin[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\ksa2[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\dicre[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\monteux[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\chzko[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\jojome[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\oozkranj[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\dicre[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\iihed[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\uvasindia[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\radieserl[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\index.dat
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\abdg[2].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\torlys[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\famdra.co[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\ommetals[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\bars-dek[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\vimarc[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\mediates[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\plcsi[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\History\History.IE5\index.dat
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\deltains[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\mjol.co[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\rdplf[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\heffeter[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\buydebt[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\inforhard[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\tamara[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\nmtdie[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\famdra.co[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\ktavtam[1].htm
Creates FilePIPE\lsarpc
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\helinc[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\aclumich[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\music[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\hbymail[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\lmpa.org[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\stnic.co[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\cocif[2].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\comiteaz[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\ncsl[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\k-kogaku[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\agaman[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\zyrion[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\boyar.com[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\abdg[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\pmas[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\radeton[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\onshodo[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\dendai[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\x96[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\sennema[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\x96[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\fatih.com[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\nmtdie[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\dreamhop[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\from30ty[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\tamara[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\darinne[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\leviatan[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\interdisc[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\alten.co[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\fatih.com[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\ladtron[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\hanakume[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\varinex[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\ksa2[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\elmets[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\aqarea[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\errigal[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\araf[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\comuval[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\djvjp[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\dzm[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\dzm[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\dendai[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\pmas[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\darinne[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\etipage[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\aqarea[2].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\101hotel[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\milfa[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\lpmcom[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\stnic.co[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\hsbj[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\golfprop[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\deltains[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\joesabia[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\101hotel[2].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\buydebt[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\iihed[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\banijya[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\dreamhop[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\atkom[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\ncsl[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\mbwswim[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\atkom[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\eretz[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\mediates[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\radeton[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\stermedia[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\cocif[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\joesabia[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\aig-co[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\boyar.com[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\madkom[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\djvjp[1].htm
Creates FileC:\Documents and Settings\Administrator\bofofzorcebo.exe
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\sonat[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\milfa[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\torlys[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\noriko7[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\noriko7[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\plei[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\eretz[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\sennema[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\4joo[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\from30ty[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\aclumich[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\araf[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\hsbj[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\mygolf1[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\errigal[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\hosse[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\leviatan[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\chzko[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\oozkranj[1].htm
Creates FileC:\Documents and Settings\Administrator\Cookies\index.dat
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\soumen.co[1].htm
Creates File\Device\Afd\Endpoint
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\viadon[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\lmpa.org[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\comiteaz[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\heffeter[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\ppic[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\banijya[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\atb-lit[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\ecss.com[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\xlp.org[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\nwpolice[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\hanakume[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\sonowest[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\mvf-rlm[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\tip-top[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\hbymail[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\mvf-rlm[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\madkom[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\radieserl[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\elmets[2].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\uvasindia[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\sonowest[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\rdplf[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\soumen.co[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\mygolf1[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\alten.co[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\zeltea[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\inforhard[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\4joo[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\tip-top[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\sonat[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\zyrion[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\agaman[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\plcsi[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\comuval[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\nwpolice[2].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\plei[2].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\etipage[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\jojome[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\monteux[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\vipmel[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\onshodo[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\lpmcom[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\ladtron[2].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\varinex[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\music[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\k-kogaku[2].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\ommetals[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\ecss.com[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\golfprop[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\stermedia[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\aig-co[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\vimarc[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\viadon[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\ppic[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\hosse[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\kiwicr[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\ktavtam[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\mbwswim[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\acmf.com[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\atb-lit[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\k-sosin[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\helinc[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\mjol.co[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\kiwicr[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\radeton[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\acmf.com[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\interdisc[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\xlp.org[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\stermedia[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\vipmel[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\cocif[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\joesabia[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\aig-co[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\boyar.com[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\madkom[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\k-sosin[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\djvjp[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\monteux[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\milfa[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\chzko[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\dicre[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\noriko7[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\iihed[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\uvasindia[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\plei[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\eretz[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\torlys[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\famdra.co[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\bars-dek[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\mediates[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\aclumich[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\araf[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\hsbj[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\mjol.co[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\rdplf[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\mygolf1[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\buydebt[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\leviatan[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\oozkranj[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\soumen.co[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\lmpa.org[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\comiteaz[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\heffeter[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\music[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\hbymail[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\ecss.com[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\atb-lit[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\nwpolice[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\mvf-rlm[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\ncsl[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\k-kogaku[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\radieserl[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\zyrion[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\abdg[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\sonowest[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\sennema[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\x96[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\fatih.com[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\nmtdie[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\zeltea[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\inforhard[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\from30ty[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\4joo[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\tamara[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\sonat[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\tip-top[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\agaman[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\alten.co[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\plcsi[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\hanakume[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\ladtron[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\ksa2[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\etipage[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\jojome[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\elmets[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\aqarea[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\errigal[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\comuval[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\onshodo[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\dzm[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\lpmcom[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\varinex[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\ommetals[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\dendai[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\darinne[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\pmas[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\golfprop[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\101hotel[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\stnic.co[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\vimarc[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\deltains[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\viadon[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\ppic[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\hosse[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\ktavtam[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\banijya[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\dreamhop[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\mbwswim[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\atkom[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\helinc[1].htm
Creates Mutexc:!documents and settings!administrator!local settings!history!history.ie5!
Creates Mutexbofofzorcebo
Creates MutexWininetConnectionMutex
Creates Mutexc:!documents and settings!administrator!cookies!
Creates Mutexc:!documents and settings!administrator!local settings!temporary internet files!content.ie5!
Winsock DNSacmf.com.au
Winsock DNSmultip.hu
Winsock DNSdendai.com
Winsock DNSatkom.ru
Winsock DNSdreamhop.com
Winsock DNSmonteux.fr
Winsock DNScocif.com
Winsock DNSidecom.it
Winsock DNStamara.net
Winsock DNSbanijya.com
Winsock DNSx96.com
Winsock DNShosse.ch
Winsock DNSstnic.co.uk
Winsock DNSatb-lit.com
Winsock DNSdjvjp.com
Winsock DNSk-kogaku.com
Winsock DNStip-top.cz
Winsock DNSdzm.cz
Winsock DNSalten.co.uk
Winsock DNSchzko.ru
Winsock DNS4joo.com
Winsock DNSmygolf1.com
Winsock DNSbars-dek.com
Winsock DNSnwpolice.org
Winsock DNSjojome.net
Winsock DNSdeltains.org
Winsock DNSpmas.org
Winsock DNSsennema.com
Winsock DNSsonat.de
Winsock DNShbymail.com
Winsock DNShelinc.com
Winsock DNSkiwicr.com
Winsock DNSheffeter.com
Winsock DNSmjol.co.uk
Winsock DNSviadon.com
Winsock DNSleviatan.pl
Winsock DNSrdplf.org
Winsock DNSdicre.com
Winsock DNSmusic.us
Winsock DNSladtron.com
Winsock DNSmediates.com
Winsock DNSmilfa.pt
Winsock DNShanakume.com
Winsock DNSk-sosin.com
Winsock DNSelmets.com
Winsock DNScomuval.es
Winsock DNSaig-co.com
Winsock DNS101hotel.is
Winsock DNSmbwswim.com
Winsock DNSncsl.cc
Winsock DNSvipmel.net
Winsock DNSinterdisc.de
Winsock DNSagaman.net
Winsock DNSksa2.com
Winsock DNSnoriko7.com
Winsock DNSiihed.org
Winsock DNSeretz.org
Winsock DNSvarinex.hu
Winsock DNSsoumen.co.jp
Winsock DNSnmtdie.com
Winsock DNSuvasindia.in
Winsock DNSfamdra.co.za
Winsock DNSdarinne.ro
Winsock DNSzeltea.ru
Winsock DNSbuydebt.net
Winsock DNShsbj.org
Winsock DNSfrom30ty.com
Winsock DNSplei.net
Winsock DNSxlp.org.uk
Winsock DNSzyrion.com
Winsock DNSppic.com
Winsock DNSsonowest.com
Winsock DNSlpmcom.pt
Winsock DNSfatih.com.tr
Winsock DNSboyar.com.tr
Winsock DNSvimarc.com
Winsock DNSommetals.com
Winsock DNSmvf-rlm.com
Winsock DNSstermedia.pl
Winsock DNSktavtam.com
Winsock DNSlmpa.org.au
Winsock DNSplcsi.net
Winsock DNSonshodo.net
Winsock DNSerrigal.com
Winsock DNSradeton.cz
Winsock DNSaqarea.com
Winsock DNSetipage.com
Winsock DNSrodesfer.com
Winsock DNScomiteaz.com
Winsock DNSgolfprop.com
Winsock DNSecss.com.au
Winsock DNSjoesabia.com
Winsock DNSmadkom.pl
Winsock DNSinforhard.pt
Winsock DNStorlys.com
Winsock DNSaclumich.org
Winsock DNSoozkranj.com
Winsock DNSabdg.com
Winsock DNSradieserl.de
Winsock DNSaraf.de

Network Details:

DNScomuval.es
Type: A
91.148.168.94
DNSmbwswim.com
Type: A
198.49.23.145
DNSmbwswim.com
Type: A
198.185.159.144
DNSmbwswim.com
Type: A
198.185.159.145
DNSmbwswim.com
Type: A
198.49.23.144
DNSk-sosin.com
Type: A
119.18.217.98
DNSacmf.com.au
Type: A
103.227.177.102
DNSsonat.de
Type: A
217.160.253.62
DNSmediates.com
Type: A
149.115.16.7
DNSladtron.com
Type: A
103.224.182.253
DNSboyar.com.tr
Type: A
212.58.6.79
DNSk-kogaku.com
Type: A
210.143.102.110
DNSdeltains.org
Type: A
184.168.27.34
DNSppic.com
Type: A
67.210.213.122
DNScomiteaz.com
Type: A
173.193.4.18
DNSlpmcom.pt
Type: A
109.71.42.38
DNShanakume.com
Type: A
124.146.198.105
DNSiihed.org
Type: A
208.73.210.212
DNSiihed.org
Type: A
208.73.211.191
DNSiihed.org
Type: A
208.73.211.194
DNSiihed.org
Type: A
208.73.211.199
DNSpmas.org
Type: A
208.117.6.198
DNStip-top.cz
Type: A
195.39.107.70
DNSmonteux.fr
Type: A
213.186.33.97
DNSsennema.com
Type: A
212.204.216.21
DNSmadkom.pl
Type: A
213.192.69.13
DNSplei.net
Type: A
75.126.15.195
DNSdarinne.ro
Type: A
193.189.99.8
DNSkiwicr.com
Type: A
190.0.226.9
DNSfamdra.co.za
Type: A
72.32.190.96
DNSfrom30ty.com
Type: A
210.172.144.247
DNSdjvjp.com
Type: A
202.189.178.130
DNSradieserl.de
Type: A
78.46.96.68
DNSzeltea.ru
Type: A
92.53.96.144
DNSstnic.co.uk
Type: A
193.34.148.140
DNSdendai.com
Type: A
221.246.77.130
DNScocif.com
Type: A
37.59.205.134
DNSetipage.com
Type: A
188.165.203.107
DNSdreamhop.com
Type: A
158.199.232.23
DNShbymail.com
Type: A
213.171.198.190
DNSinforhard.pt
Type: A
151.236.45.90
DNSviadon.com
Type: A
141.101.126.86
DNSviadon.com
Type: A
141.101.125.86
DNSgolfprop.com
Type: A
198.178.250.32
DNSatb-lit.com
Type: A
159.253.22.47
DNSonshodo.net
Type: A
59.106.19.169
DNSstermedia.pl
Type: A
85.128.205.112
DNSabdg.com
Type: A
192.252.155.173
DNSfatih.com.tr
Type: A
212.58.2.53
DNSbuydebt.net
Type: A
198.58.92.228
DNSatkom.ru
Type: A
78.140.173.73
DNShelinc.com
Type: A
64.13.192.61
DNSnmtdie.com
Type: A
69.174.241.52
DNSlmpa.org.au
Type: A
54.252.148.134
DNSktavtam.com
Type: A
199.203.55.209
DNS101hotel.is
Type: A
69.167.159.224
DNSdzm.cz
Type: A
178.238.40.4
DNSsonowest.com
Type: A
37.187.146.37
DNSleviatan.pl
Type: A
91.217.242.34
DNSuvasindia.in
Type: A
54.169.24.55
DNS4joo.com
Type: A
211.220.193.242
DNSelmets.com
Type: A
168.150.193.194
DNSx96.com
Type: A
184.106.101.77
DNSmvf-rlm.com
Type: A
204.152.118.133
DNSecss.com.au
Type: A
103.29.85.19
DNSrodesfer.com
Type: A
127.0.0.1
DNSoozkranj.com
Type: A
104.28.16.50
DNSoozkranj.com
Type: A
104.28.17.50
DNSvipmel.net
Type: A
37.187.164.127
DNSaig-co.com
Type: A
141.8.224.169
DNSksa2.com
Type: A
198.57.169.201
DNSradeton.cz
Type: A
81.91.86.12
DNSalten.co.uk
Type: A
195.68.112.195
DNShosse.ch
Type: A
80.74.159.211
DNSjoesabia.com
Type: A
64.6.239.211
DNSnoriko7.com
Type: A
122.152.128.157
DNSncsl.cc
Type: A
96.31.43.16
DNSerrigal.com
Type: A
69.163.208.154
DNShsbj.org
Type: A
184.168.221.19
DNSvimarc.com
Type: A
198.185.159.135
DNSplcsi.net
Type: A
216.119.129.2
DNSmusic.us
Type: A
167.114.59.30
DNSbars-dek.com
Type: A
104.28.15.16
DNSbars-dek.com
Type: A
104.28.14.16
DNSsoumen.co.jp
Type: A
211.13.204.89
DNSaclumich.org
Type: A
199.195.117.156
DNStamara.net
Type: A
199.96.156.231
DNSaraf.de
Type: A
92.51.137.31
DNSaqarea.com
Type: A
212.76.85.58
DNSzyrion.com
Type: A
192.217.105.168
DNSchzko.ru
Type: A
188.165.141.56
DNSvarinex.hu
Type: A
79.172.192.42
DNSheffeter.com
Type: A
195.3.124.154
DNSbanijya.com
Type: A
75.102.9.70
DNSommetals.com
Type: A
162.251.80.23
DNSnwpolice.org
Type: A
204.244.185.157
DNSagaman.net
Type: A
155.94.64.210
DNSeretz.org
Type: A
184.168.221.28
DNSmygolf1.com
Type: A
192.232.236.146
DNSjojome.net
Type: A
211.75.71.76
DNSdicre.com
Type: A
203.189.104.227
DNSmilfa.pt
Type: A
94.76.204.80
DNSxlp.org.uk
Type: A
193.189.74.35
DNStorlys.com
Type: A
108.162.207.214
DNStorlys.com
Type: A
141.101.124.214
DNSrdplf.org
Type: A
80.93.82.147
DNSinterdisc.de
Type: A
212.83.36.161
DNSmjol.co.uk
Type: A
91.146.108.52
DNSidecom.it
Type: A
DNSmultip.hu
Type: A
HTTP POSThttp://mbwswim.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://acmf.com.au/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://k-sosin.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://comuval.es/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://sonat.de/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://mediates.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://ladtron.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://k-sosin.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://acmf.com.au/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://mbwswim.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://sonat.de/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://comuval.es/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://mediates.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://ladtron.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://boyar.com.tr/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://boyar.com.tr/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://k-kogaku.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://k-kogaku.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://deltains.org/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://deltains.org/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://ppic.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://comiteaz.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://ppic.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://comiteaz.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://lpmcom.pt/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://hanakume.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://iihed.org/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://pmas.org/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://lpmcom.pt/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://tip-top.cz/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://hanakume.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://iihed.org/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://monteux.fr/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://pmas.org/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://sennema.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://tip-top.cz/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://monteux.fr/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://sennema.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://madkom.pl/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://madkom.pl/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://plei.net/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://darinne.ro/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://plei.net/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://kiwicr.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://darinne.ro/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://kiwicr.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://famdra.co.za/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://from30ty.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://djvjp.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://radieserl.de/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://famdra.co.za/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://zeltea.ru/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://from30ty.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://stnic.co.uk/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://djvjp.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://radieserl.de/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://zeltea.ru/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://stnic.co.uk/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://dendai.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://dendai.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://cocif.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://cocif.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://etipage.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://dreamhop.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://etipage.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://dreamhop.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://hbymail.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://inforhard.pt/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://hbymail.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://viadon.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://golfprop.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://inforhard.pt/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://atb-lit.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://viadon.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://onshodo.net/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://golfprop.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://atb-lit.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://onshodo.net/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://stermedia.pl/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://stermedia.pl/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://abdg.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://fatih.com.tr/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://buydebt.net/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://abdg.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://fatih.com.tr/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://buydebt.net/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://atkom.ru/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://atkom.ru/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://helinc.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://nmtdie.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://lmpa.org.au/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://helinc.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://ktavtam.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://nmtdie.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://lmpa.org.au/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://ktavtam.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://101hotel.is/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://101hotel.is/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://dzm.cz/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://sonowest.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://leviatan.pl/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://sonowest.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://dzm.cz/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://uvasindia.in/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://leviatan.pl/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://4joo.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://uvasindia.in/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://4joo.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://elmets.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://x96.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://elmets.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://mvf-rlm.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://ecss.com.au/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://x96.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://mvf-rlm.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://ecss.com.au/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://oozkranj.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://vipmel.net/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://aig-co.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://oozkranj.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://vipmel.net/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://aig-co.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://ksa2.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://radeton.cz/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://ksa2.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://radeton.cz/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://alten.co.uk/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://hosse.ch/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://joesabia.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://alten.co.uk/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://noriko7.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://hosse.ch/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://joesabia.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://noriko7.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://ncsl.cc/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://ncsl.cc/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://errigal.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://hsbj.org/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://hsbj.org/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://vimarc.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://errigal.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://plcsi.net/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://vimarc.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://music.us/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://plcsi.net/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://music.us/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://bars-dek.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://soumen.co.jp/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://aclumich.org/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://tamara.net/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://bars-dek.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://soumen.co.jp/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://aclumich.org/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://tamara.net/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://araf.de/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://araf.de/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://aqarea.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://zyrion.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://aqarea.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://zyrion.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://chzko.ru/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://chzko.ru/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://varinex.hu/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://heffeter.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://varinex.hu/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://banijya.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://heffeter.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://ommetals.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://nwpolice.org/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://agaman.net/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://banijya.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://ommetals.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://nwpolice.org/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://agaman.net/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://eretz.org/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://eretz.org/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://mygolf1.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://mygolf1.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://jojome.net/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://jojome.net/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://dicre.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://milfa.pt/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://dicre.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://xlp.org.uk/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://milfa.pt/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://xlp.org.uk/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://torlys.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://rdplf.org/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://interdisc.de/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://mjol.co.uk/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://torlys.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://rdplf.org/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://interdisc.de/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://mjol.co.uk/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
Flows TCP192.168.1.1:1040 ➝ 198.49.23.145:80
Flows TCP192.168.1.1:1041 ➝ 103.227.177.102:80
Flows TCP192.168.1.1:1042 ➝ 119.18.217.98:80
Flows TCP192.168.1.1:1043 ➝ 91.148.168.94:80
Flows TCP192.168.1.1:1044 ➝ 217.160.253.62:80
Flows TCP192.168.1.1:1045 ➝ 149.115.16.7:80
Flows TCP192.168.1.1:1046 ➝ 103.224.182.253:80
Flows TCP192.168.1.1:1047 ➝ 119.18.217.98:80
Flows TCP192.168.1.1:1048 ➝ 103.227.177.102:80
Flows TCP192.168.1.1:1049 ➝ 198.49.23.145:80
Flows TCP192.168.1.1:1050 ➝ 217.160.253.62:80
Flows TCP192.168.1.1:1051 ➝ 91.148.168.94:80
Flows TCP192.168.1.1:1052 ➝ 149.115.16.7:80
Flows TCP192.168.1.1:1053 ➝ 103.224.182.253:80
Flows TCP192.168.1.1:1054 ➝ 212.58.6.79:80
Flows TCP192.168.1.1:1055 ➝ 212.58.6.79:80
Flows TCP192.168.1.1:1056 ➝ 210.143.102.110:80
Flows TCP192.168.1.1:1057 ➝ 210.143.102.110:80
Flows TCP192.168.1.1:1058 ➝ 184.168.27.34:80
Flows TCP192.168.1.1:1059 ➝ 184.168.27.34:80
Flows TCP192.168.1.1:1060 ➝ 67.210.213.122:80
Flows TCP192.168.1.1:1061 ➝ 173.193.4.18:80
Flows TCP192.168.1.1:1062 ➝ 67.210.213.122:80
Flows TCP192.168.1.1:1063 ➝ 173.193.4.18:80
Flows TCP192.168.1.1:1064 ➝ 109.71.42.38:80
Flows TCP192.168.1.1:1065 ➝ 124.146.198.105:80
Flows TCP192.168.1.1:1066 ➝ 208.73.210.212:80
Flows TCP192.168.1.1:1067 ➝ 208.117.6.198:80
Flows TCP192.168.1.1:1068 ➝ 109.71.42.38:80
Flows TCP192.168.1.1:1069 ➝ 195.39.107.70:80
Flows TCP192.168.1.1:1070 ➝ 124.146.198.105:80
Flows TCP192.168.1.1:1071 ➝ 208.73.210.212:80
Flows TCP192.168.1.1:1072 ➝ 213.186.33.97:80
Flows TCP192.168.1.1:1073 ➝ 208.117.6.198:80
Flows TCP192.168.1.1:1074 ➝ 212.204.216.21:80
Flows TCP192.168.1.1:1075 ➝ 195.39.107.70:80
Flows TCP192.168.1.1:1076 ➝ 213.186.33.97:80
Flows TCP192.168.1.1:1077 ➝ 212.204.216.21:80
Flows TCP192.168.1.1:1078 ➝ 213.192.69.13:80
Flows TCP192.168.1.1:1079 ➝ 213.192.69.13:80
Flows TCP192.168.1.1:1080 ➝ 75.126.15.195:80
Flows TCP192.168.1.1:1081 ➝ 193.189.99.8:80
Flows TCP192.168.1.1:1082 ➝ 75.126.15.195:80
Flows TCP192.168.1.1:1083 ➝ 190.0.226.9:80
Flows TCP192.168.1.1:1084 ➝ 193.189.99.8:80
Flows TCP192.168.1.1:1085 ➝ 190.0.226.9:80
Flows TCP192.168.1.1:1086 ➝ 72.32.190.96:80
Flows TCP192.168.1.1:1087 ➝ 210.172.144.247:80
Flows TCP192.168.1.1:1088 ➝ 202.189.178.130:80
Flows TCP192.168.1.1:1089 ➝ 78.46.96.68:80
Flows TCP192.168.1.1:1090 ➝ 72.32.190.96:80
Flows TCP192.168.1.1:1091 ➝ 92.53.96.144:80
Flows TCP192.168.1.1:1092 ➝ 210.172.144.247:80
Flows TCP192.168.1.1:1093 ➝ 193.34.148.140:80
Flows TCP192.168.1.1:1094 ➝ 202.189.178.130:80
Flows TCP192.168.1.1:1095 ➝ 78.46.96.68:80
Flows TCP192.168.1.1:1096 ➝ 92.53.96.144:80
Flows TCP192.168.1.1:1097 ➝ 193.34.148.140:80
Flows TCP192.168.1.1:1098 ➝ 221.246.77.130:80
Flows TCP192.168.1.1:1099 ➝ 221.246.77.130:80
Flows TCP192.168.1.1:1100 ➝ 37.59.205.134:80
Flows TCP192.168.1.1:1101 ➝ 37.59.205.134:80
Flows TCP192.168.1.1:1102 ➝ 188.165.203.107:80
Flows TCP192.168.1.1:1103 ➝ 158.199.232.23:80
Flows TCP192.168.1.1:1104 ➝ 188.165.203.107:80
Flows TCP192.168.1.1:1105 ➝ 158.199.232.23:80
Flows TCP192.168.1.1:1106 ➝ 213.171.198.190:80
Flows TCP192.168.1.1:1107 ➝ 151.236.45.90:80
Flows TCP192.168.1.1:1108 ➝ 213.171.198.190:80
Flows TCP192.168.1.1:1109 ➝ 141.101.126.86:80
Flows TCP192.168.1.1:1110 ➝ 198.178.250.32:80
Flows TCP192.168.1.1:1111 ➝ 151.236.45.90:80
Flows TCP192.168.1.1:1112 ➝ 159.253.22.47:80
Flows TCP192.168.1.1:1113 ➝ 141.101.126.86:80
Flows TCP192.168.1.1:1114 ➝ 59.106.19.169:80
Flows TCP192.168.1.1:1115 ➝ 198.178.250.32:80
Flows TCP192.168.1.1:1116 ➝ 159.253.22.47:80
Flows TCP192.168.1.1:1117 ➝ 59.106.19.169:80
Flows TCP192.168.1.1:1118 ➝ 85.128.205.112:80
Flows TCP192.168.1.1:1119 ➝ 85.128.205.112:80
Flows TCP192.168.1.1:1120 ➝ 192.252.155.173:80
Flows TCP192.168.1.1:1121 ➝ 212.58.2.53:80
Flows TCP192.168.1.1:1122 ➝ 198.58.92.228:80
Flows TCP192.168.1.1:1123 ➝ 192.252.155.173:80
Flows TCP192.168.1.1:1124 ➝ 212.58.2.53:80
Flows TCP192.168.1.1:1125 ➝ 198.58.92.228:80
Flows TCP192.168.1.1:1126 ➝ 78.140.173.73:80
Flows TCP192.168.1.1:1127 ➝ 78.140.173.73:80
Flows TCP192.168.1.1:1128 ➝ 64.13.192.61:80
Flows TCP192.168.1.1:1129 ➝ 69.174.241.52:80
Flows TCP192.168.1.1:1130 ➝ 54.252.148.134:80
Flows TCP192.168.1.1:1131 ➝ 64.13.192.61:80
Flows TCP192.168.1.1:1132 ➝ 199.203.55.209:80
Flows TCP192.168.1.1:1133 ➝ 69.174.241.52:80
Flows TCP192.168.1.1:1134 ➝ 54.252.148.134:80
Flows TCP192.168.1.1:1135 ➝ 199.203.55.209:80
Flows TCP192.168.1.1:1136 ➝ 69.167.159.224:80
Flows TCP192.168.1.1:1137 ➝ 69.167.159.224:80
Flows TCP192.168.1.1:1138 ➝ 178.238.40.4:80
Flows TCP192.168.1.1:1139 ➝ 37.187.146.37:80
Flows TCP192.168.1.1:1140 ➝ 91.217.242.34:80
Flows TCP192.168.1.1:1141 ➝ 37.187.146.37:80
Flows TCP192.168.1.1:1142 ➝ 178.238.40.4:80
Flows TCP192.168.1.1:1143 ➝ 54.169.24.55:80
Flows TCP192.168.1.1:1144 ➝ 91.217.242.34:80
Flows TCP192.168.1.1:1145 ➝ 211.220.193.242:80
Flows TCP192.168.1.1:1146 ➝ 54.169.24.55:80
Flows TCP192.168.1.1:1147 ➝ 211.220.193.242:80
Flows TCP192.168.1.1:1148 ➝ 168.150.193.194:80
Flows TCP192.168.1.1:1149 ➝ 184.106.101.77:80
Flows TCP192.168.1.1:1150 ➝ 168.150.193.194:80
Flows TCP192.168.1.1:1151 ➝ 204.152.118.133:80
Flows TCP192.168.1.1:1152 ➝ 103.29.85.19:80
Flows TCP192.168.1.1:1153 ➝ 184.106.101.77:80
Flows TCP192.168.1.1:1154 ➝ 204.152.118.133:80
Flows TCP192.168.1.1:1155 ➝ 103.29.85.19:80
Flows TCP192.168.1.1:1157 ➝ 104.28.16.50:80
Flows TCP192.168.1.1:1158 ➝ 37.187.164.127:80
Flows TCP192.168.1.1:1159 ➝ 141.8.224.169:80
Flows TCP192.168.1.1:1160 ➝ 104.28.16.50:80
Flows TCP192.168.1.1:1161 ➝ 37.187.164.127:80
Flows TCP192.168.1.1:1162 ➝ 141.8.224.169:80
Flows TCP192.168.1.1:1163 ➝ 198.57.169.201:80
Flows TCP192.168.1.1:1164 ➝ 81.91.86.12:80
Flows TCP192.168.1.1:1165 ➝ 198.57.169.201:80
Flows TCP192.168.1.1:1166 ➝ 81.91.86.12:80
Flows TCP192.168.1.1:1167 ➝ 195.68.112.195:80
Flows TCP192.168.1.1:1168 ➝ 80.74.159.211:80
Flows TCP192.168.1.1:1169 ➝ 64.6.239.211:80
Flows TCP192.168.1.1:1170 ➝ 195.68.112.195:80
Flows TCP192.168.1.1:1171 ➝ 122.152.128.157:80
Flows TCP192.168.1.1:1172 ➝ 80.74.159.211:80
Flows TCP192.168.1.1:1173 ➝ 64.6.239.211:80
Flows TCP192.168.1.1:1174 ➝ 122.152.128.157:80
Flows TCP192.168.1.1:1175 ➝ 96.31.43.16:80
Flows TCP192.168.1.1:1176 ➝ 96.31.43.16:80
Flows TCP192.168.1.1:1177 ➝ 69.163.208.154:80
Flows TCP192.168.1.1:1178 ➝ 184.168.221.19:80
Flows TCP192.168.1.1:1179 ➝ 184.168.221.19:80
Flows TCP192.168.1.1:1180 ➝ 198.185.159.135:80
Flows TCP192.168.1.1:1181 ➝ 69.163.208.154:80
Flows TCP192.168.1.1:1182 ➝ 216.119.129.2:80
Flows TCP192.168.1.1:1183 ➝ 198.185.159.135:80
Flows TCP192.168.1.1:1184 ➝ 167.114.59.30:80
Flows TCP192.168.1.1:1185 ➝ 216.119.129.2:80
Flows TCP192.168.1.1:1186 ➝ 167.114.59.30:80
Flows TCP192.168.1.1:1187 ➝ 104.28.15.16:80
Flows TCP192.168.1.1:1188 ➝ 211.13.204.89:80
Flows TCP192.168.1.1:1189 ➝ 199.195.117.156:80
Flows TCP192.168.1.1:1190 ➝ 199.96.156.231:80
Flows TCP192.168.1.1:1191 ➝ 104.28.15.16:80
Flows TCP192.168.1.1:1192 ➝ 211.13.204.89:80
Flows TCP192.168.1.1:1193 ➝ 199.195.117.156:80
Flows TCP192.168.1.1:1194 ➝ 199.96.156.231:80
Flows TCP192.168.1.1:1195 ➝ 92.51.137.31:80
Flows TCP192.168.1.1:1196 ➝ 92.51.137.31:80
Flows TCP192.168.1.1:1197 ➝ 212.76.85.58:80
Flows TCP192.168.1.1:1198 ➝ 192.217.105.168:80
Flows TCP192.168.1.1:1199 ➝ 212.76.85.58:80
Flows TCP192.168.1.1:1200 ➝ 192.217.105.168:80
Flows TCP192.168.1.1:1201 ➝ 188.165.141.56:80
Flows TCP192.168.1.1:1202 ➝ 188.165.141.56:80
Flows TCP192.168.1.1:1203 ➝ 79.172.192.42:80
Flows TCP192.168.1.1:1204 ➝ 195.3.124.154:80
Flows TCP192.168.1.1:1205 ➝ 79.172.192.42:80
Flows TCP192.168.1.1:1206 ➝ 75.102.9.70:80
Flows TCP192.168.1.1:1207 ➝ 195.3.124.154:80
Flows TCP192.168.1.1:1208 ➝ 162.251.80.23:80
Flows TCP192.168.1.1:1209 ➝ 204.244.185.157:80
Flows TCP192.168.1.1:1210 ➝ 155.94.64.210:80
Flows TCP192.168.1.1:1211 ➝ 75.102.9.70:80
Flows TCP192.168.1.1:1212 ➝ 162.251.80.23:80
Flows TCP192.168.1.1:1213 ➝ 204.244.185.157:80
Flows TCP192.168.1.1:1214 ➝ 155.94.64.210:80
Flows TCP192.168.1.1:1215 ➝ 184.168.221.28:80
Flows TCP192.168.1.1:1216 ➝ 184.168.221.28:80
Flows TCP192.168.1.1:1217 ➝ 192.232.236.146:80
Flows TCP192.168.1.1:1218 ➝ 192.232.236.146:80
Flows TCP192.168.1.1:1219 ➝ 211.75.71.76:80
Flows TCP192.168.1.1:1220 ➝ 211.75.71.76:80
Flows TCP192.168.1.1:1221 ➝ 203.189.104.227:80
Flows TCP192.168.1.1:1222 ➝ 94.76.204.80:80
Flows TCP192.168.1.1:1223 ➝ 203.189.104.227:80
Flows TCP192.168.1.1:1224 ➝ 193.189.74.35:80
Flows TCP192.168.1.1:1225 ➝ 94.76.204.80:80
Flows TCP192.168.1.1:1226 ➝ 193.189.74.35:80
Flows TCP192.168.1.1:1227 ➝ 108.162.207.214:80
Flows TCP192.168.1.1:1228 ➝ 80.93.82.147:80
Flows TCP192.168.1.1:1229 ➝ 212.83.36.161:80
Flows TCP192.168.1.1:1230 ➝ 91.146.108.52:80
Flows TCP192.168.1.1:1231 ➝ 108.162.207.214:80
Flows TCP192.168.1.1:1232 ➝ 80.93.82.147:80
Flows TCP192.168.1.1:1233 ➝ 212.83.36.161:80
Flows TCP192.168.1.1:1234 ➝ 91.146.108.52:80

Raw Pcap

Strings

040904e4
 2012 Daniel Pistelli.  All rights reserved.
8.0.0.0
CFF Explorer
CFF Explorer.exe
Common File Format Explorer
CompanyName
Daniel Pistelli
FileDescription
FileVersion
InternalName
@jjj
LegalCopyright
OriginalFilename
ProductName
ProductVersion
StringFileInfo
Translation
VarFileInfo
VS_VERSION_INFO
^$^|^'^
"'{}%--
{0[---
0^ ^|^
01ptmRRRR
0{a---
:0ccY---X
0DdtPRgr
0DdtRR
\0Ddt Td
{0DM--C{dM
0{Em--
?0p<F@
 0@`pR
0t|pLD|
0t|xtd
$0U3L[>H&XKXH7[i3
0>x>fN
{0xm--
1}0%mX@/#
10?ScM
{1$1T`VEw[
1 |2=	=BI
1>2h|&
1}(CRUgSvWE0oY\/
1Ft_ou]s9h
>1}GPl
1,=Kvf
1NtX'v
1p5RcxE
1p 8&tddR
1PBRRRR
1pCVRRRc>`CX-zNWREr
| 1pERRR
1pERRRRc>`EX
1piRRRR1>puRRRR1p|mRRRR
1plmRRRR
1p=LR1pURRRR
	1pmRCRRR
1pMRRGRR
1pM;RRR1>p}C
1pMRRROR
1pmRRRR
1pM!RRRR
|^1poZRR
1p}RRRR
1p]RRRRc>x]
1pU*RRR1>pu*RRR1p\E*RRR1pe
&1pv-R
1RC{em--
1RC{lm--
1rjRRrRR7RR
1rJRRrRR7RR1rjRRr
---1s@%-
---1s0n---RRRR
--1sA---
---1sC%-
-1s@---C
---1sD%-
-]---1sdA%--%---1
-1sDM--R
1sf]--RR3RR
---1sH%-
-}---1shA%--
1sj]--RR3RR1sV]--
---1sK%-
1sKM--RR#RR1skM--
1skM--RR#RR1suM--
---1sL%-
1s]m-d-
1s]m--ZR3RR1s}m--
---1sN%-
1s^]--RR3RR
1ssM--RR2RRDRRRR
1sSM--RR3RR
1st}--R
1sUM--RR#RR
-1sU=--p
1sWm--RR#RR
1sy---LRRRRcsy-
-1sYM--r
={$2@#
2<1pmRRRR
21pURRRR
^2a[	8i|
2?c{Im--
2cp8]X"?`
2cT---X
'2<)dCS65jgVDA
|2fRRRR
2liR"sZRRiR
-"?@2NcY
`})|2Om---
2 Om---
|2O.RGRR
2paXccD--f-XEL!--
2pgX-zX^Rgr
2p]X-zWWRer
-2RRR1soy%--2RRR1
2RRRccVmS--X
2spm--ccrb_---X
"2Thd4Qc}N
2"&yJm
-2zcWRrD|w~RrcsE---
-2zOWRr
2)zP1	4[;$
-2z]WRr1sXym--RRRR1
35F+fe
{3BNVB}f$?
3bpG/5E
3CjcIU;En Sb}j(X,
3HvX(1
3|+Lc%PPw
3RDZrRR-z
45|Zs7_\
4~7~}~
4C{PSRRR
4CsL---D
$4DdtjpD
4|h<D$t$
4JR1si--
=4l`lA
$|4PRRPR
=4/q%4Sv%?%
4rRRR^RR
4$^S14$^S
$4|s<T
4S.Xp|x
<$_+_4V
$4|Vp$
4$^XHu
;4Y(QB
50t|8t
5;c'|V
5~e~r>J>
5 fJse>O
<5':,K
5q()Z\G1C=
5.s[]#
5se>B]	e
5&tddRR2
(6Kwf7W]
6RRRRTRR
-~6zaS@
-6zbWRr
-6zBWRrDR;^@R-zwWRr
$710vX
@%72aPDZ4KA
73O~XGN
7|BBsA|r1p-
7BJY.s^`
7C	p=.q3
7'RR['RR
.7.RVRR
&7|:sA|
8-81pmRRRR
)--8E`
8^FR^&^R
8^FR)X 
8^FRX 
"{\8P	NU2K
@`8PX@&etddR5R0t
8~RRt~RR
8'RRv'RR
9.%4qd#KxW
9\{aRK
9e _Ld
9E[RRR
9!<o;%
9yIUUX
A4CcK=-&-c{
a4|R+ >e
A5-EpRRR1p,eRRRR
>A>8>T>rD>
aaaaaa
aaaaaaa
aaaaaaaa
<aaaaaaaa
a!aaaaaaaa
aaa'aaaaaaaa
aaaaaa?aaaaaaaa
aaaaaa?x
aaaaOaaaaaaaa
aaagaaaaaaaa
aaawaaaaaaaa
aaCaaaaaaaa
{Aa---"sORR
{^a]--C{z]-
ADNt Hk`
advapi32.dll
AeC`mL/
AFC`$]
A?:FGHQ
AGRriGRr
//A}g~y:
ahyJKOpt"He
ai"=$U
AmPC`M
aMW=El
anJ,+*U6
An?RRR"
A$O;X_S
ARCs{=--
A_RRI_RR
aRRR=M
-ARRR"s
?AsA|21p
"?AsA|B
?AsA|f1s
"?AsA|n
?AsA|rEm
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"><assemblyIdentity version="1.0.0.0" processorArchitecture="*" name="Microsoft.Windows.CFFExplorer" type="win32"></assemblyIdentity><description>Common File Format Explorer</description><dependency><dependentAssembly><assemblyIdentity type="win32" name="Microsoft.Windows.Common-Controls" version="6.0.0.0" processorArchitecture="*" publicKeyToken="6595b64144ccf1df" language="*"></assemblyIdentity></dependentAssembly></dependency><trustInfo xmlns="urn:schemas-microsoft-com:asm.v3"><security><requestedPrivileges><requestedExecutionLevel level="asInvoker" uiAccess="false"></requestedExecutionLevel></requestedPrivileges></security></trustInfo></assembly>PADPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGX
AVCb~RRrM"?z
AVt$f|
aX-z]WRr
`}"/{b
.}.-.B.
b0jRRrXE*V
B0RRDqBRR
`B1PB2R%RR
`B4CFrX
`B4CxMPV
B4CZ1pMR
b4JRS*
B7F>S0
b"#7RRR
B"?c|---
B"?c\---
`bCcL--&-1s3---RH"?{3---sH
bccP]--C
`BC`eI1p]RRRR
bCFY!CF
@bC`mY
bCpe1p]R
BCp]WF=R
`BCrca
bcsMm--C
=|BCxmI
bd_^RrC`E
BDRRRR
BEKrRR
b~*~f~N~
bfRRrX
b<f=RrX
b;H3mx|:00
bHr:,MI)\
`BICrZ
`bIl:D-RRRE/c---
BindImageEx
.bj.f.R^RR
bjRRrX
bJRRrX-zh]WRr1rJR
bjY=Rr"s1rR
bjY=Rr"sQRR
`$bl6cx]
"?bm-RrsVA|
"?bm-RrsVA|21p}
bn^n`nHn
BN*N.NxN
BNpe|2Om
bp7RrC
,B"/p"B
B"?pSXc`
BpUQUB
BQRC`e
BQ^. X
BRE@RRR
BRRCs`
b'RRM'RR
BRRrccD-
bRRRR^RR
"?bRRRrsJA|"
"#=BRRSl|MRrRR"
BRRS:RRSwRRRRQ
"?`bsA|`Q
bSH~sV
`BSQbrR'RXcxe
`BSQRCY`B"?pB
B|v"?pB
|bWl~RRr
|bW~RRr
B.W"s{-
`BX2-zuWRrsQ=|zDRSRR
`BXcxz
@bXE-c
bXEF0RR
`bXE~J8RR
`(BXE[m--
bXEQ7--
`BXE:R
`BXE"R
B"?XRC
`BX-z}
`|BX-zgWRr
`bX-zHnWRr1p-R
`BX-$zmWRrCspYm--
`BX-zR^#RrCpE1pe
"`BX-z}WRGr
`BX-z}W#Rr
BX-z}WRr
`BX-zWW#RrCpE1pe
@bX-zXxWRrsQ|L
b`z1RR
bZoY{NC5
B-zsWRr
B-z]WRr
'B-z_WRrX
B-z\_WRrX-zg
bZXRrX
b-zZyWRr
>\> ,>c>
c{_---
c{\---
--C{[---
--c`1ZJCcI
c2sGm--X-zD@WRr
c4H---Ccpm
>C>7>}e>B>.>
|~c~;~9~
ca---LXE
ca---XE1 SRRsQ"s
ca--&-XEN
-CbJRRr
--C{bM%-4-
/CbPRr
-c{c---
--Cc `
Cc%---
cC-3--X
ccA=--X
CcC---
cc---Cc0C---
c[---CcLa---1sl--
-ccD--
ccG---XE1u"RR
CcI---
--CclAm--
--CcLM--
c{CM--
--Cc^m--
--Cc{m-
c]---C`Ma1s%---R
ccM-$-C`z
"ccm--XE{BZRR
ccM%--XE!f
ccN---X- zTWRrsQ"ZsT
ccP]--Cc0F]--c{\
C--Cpm
cC-S--
ccsM--Xc0{CM--
cc]---X-0z}WRr
CcX\RRR
{c---CxZaL
cc`---X- zWWRrsQ|{VDqGRr
-CcY---
c{D=--
cd{m--
cdM--LX
cD---XD
c{E---
`$]C`E
C{E---
C}ebscDb*C}MbScDb
`]C`eE
`}C`EI
cEM--Cc_AM--1s
cEm--X
cem-&-Xc{Mm--
c`EXc{Om#--
c`eXcxA
cg9PbZ<I%Y
c{h=--
-+c}H%
chm--C
~cHU:UnGK=s
cH---XEib*RR
cI-S--
c$I---X
^c^K^/^
ckm--|
ckm--DRSGRR
"cKM--X-z@
<>C>!>KN
C,ksJ FQ
cKyM--X-zx^
c{Lm--
-C{lM--
clm--CR 
clm--H
cLm--X
?cl---X
c>m-2-Ccr_---l
C"MBS7M
C}mbScDb
c{m--C
c|M--C
{Cm--CX b
{cM--CxJA
c@m-f-XEPVRR
cMm--X
cMm--X-z@FWRrCsEm
c]m--X
c{m--X
_c`M!Xcx}
Cm--XE-A
cnm--Cc
CNslm--l
Co4a4@/s
comctl32.dll
|~c~O>m>uB>
co---X-z`OWRrCswm
c{P]--
Cp="?`=
Cp]"?`
CpaDo^Rr;
CpaDpwRr?
Cp]cx]
cpe%--"/[B
cpeXc`EX2
cpeXE/%-:-
C"?pEXE#r
cPLM--
c|pm--
---Cpm
CpM1puRR'RR
Cp=<"?`="'`mAC`mT
CpmO*RRR/
CpMSlMRR&RRl
cpMX-zHW2Rr
cpMX-zJ^3Rr
cpqXE8
cpqXE:b
cpqXE-bR9R
cpqXE<bR;R
cpqXE'ubRR
C!PtHQ*tys8h
cpuXEpN}--
cp]XD|
c{q=--
C`q1pORR'RR
"cqm--
{CQNP$'1
c`qXE6"R+R
/cr]---
cr]---
cr]---Cc
cr]-;--Ccz]--6-
CRcswm--X
CreateFileW
CreateThread
crf]---Cc%-
--"c_RR
c_RR7_RR
cRRR=-=	
"c-RRR1s
cRRS1p}RR
C^Rr-vs^
..c.RVRR/^RRR;^E^
csA=--LX-zWWRrX
{[---cs{a---X
csA=--XE3~2RR
Csbm--
csBm-$-X
CsCm--
csCM--X
csD---
Csdm--
csD=--X
csd---Xc2`]Xc{Hm-D-
--Cs E=--cce=
csE---X-2zcWRrDWR
Csg---1p0MRRRR
csGm--X-"z@WRr
Cshm--D
csH---XE#p
csi---
Csim--
CsLm--
c{Sm--
Cs[m--
Cs@m--
Cs\M--
-Cs`m--1
csMm--XE#~jRR
cSm--X
cs@m--XE3kRRR
Csnm--
csQ--&-X
csSm--XE#
csT=-&-XEIRRR
CsuM--
csUm--X
Csv]--
csW--&-X
csw---Xc2cG---X
cs`---X
cs@---X
cs]---XD3P
cs]---XE3|	--
cs@---XE3fe--
csXm--X
csY---X
--Csz]--6-
-Csz]---l
c{Tm--
=--C{u=-
cu=2--X-zzWR
cu=--HX
cUm--X-0z@WRrCsiym--
c`uM--X-zk
"cu=--X
cu=--X
c`UXE92R+R
c`uXE+rR+R
c[---X
c}---X
Cxe1pURR'RR1p}RRR
c`--&-XEIRRR
CxM1pmRR'RR
cXm--LX
Cx]"?p
Cx]"?pJ
`]cx%R
`]cxRr
c]---X-z`}WRr
c[y---CcC--
-Cy,GJ
""cyRRR
--C{z]--
--CzjRRr
czmc--X-zIWR
cZm--X
cZm--X-0zeWRrCsOy
czm--X-0zOWRrDRS
"cZm--X-z`uWRrsQ|P
cZym--X-zOW
D.$.|.
--D-1sp%--M
--D-1ss%--E
--D-1st%--]
--D-1sw%--R
d|\3&dD<t&
D3RRBR
D$|47PRx
D4$$pLPRGRT0t|
D$|[4PRRPR
D$|4PR$Rt0t|
D4VtLD
daaaaaaaa
@.data
D-B1sg
\dBS7EjQw7=[,
dcpqCpoc
dCS6ujN:sA"FPU`
D$D|DTdDR
DddT&,~&^VF
dD$iT|tX
d\DPRxr'8D
ddRRZR
D|DTdD
@$D|DTdDR
Ddt TdtpPLPRRrRp$
dD$T|tx
ddT&~&^V
dd$U$\\
Dee]|g
`dE"?z`R
Df7Rr-~zkWRrcsMym--X-z^W
D\fkVtt4dT|t
D^fRRcxq
Dg]^RrDRrR
DGwR=rcpiX-zc
DgwRrcpU
DhrMfXk
$dHRRRR
DHwRr;DrRRR
D$i4dt 
`|di|D\dt 
DigRRcxq
DiwRr?csK}--XE3q:RR
DKwRr-vzkWRr
{d	m--
D$M4PRR
DmRrccMm
DnLn/.e.
dN<N3N
Dnz<"KTxb
"DoGRr
dPRkR@$
dPRR8@l @ px&td
dPRR[8@ @ px&+tddR8
-d-pRRR
DpT|TR5'R
DQdRRR
D^=Rrc`q
DRR'QR
-d-RRRR1sXy
:DrRRRc6{E---
DR\RRRRR
D.R"Ru
--DRSR
|*DRSRR
DsA|21pYj"RRR
d|\s&dTDd&LT
DSnGRr
Dsv]--X-zdyWRrEZ--
D|t0DdtRUH
dT4|D$$PRp
$d\T|D
dTDd&$t|
d|tpLPRR
dt$PRR
DtRR,R
dtRR&rxt>
DtRRxR0tx|x$
dtRRyR0t
d$tt&bb
dtt\RSW
dt:UCY@
dtxDdtRR
{|>DUiRRc&pqXENZRR
D$|URR{R
D\uRRRR|RtR
DV#R=r
DwG_Rr
.D.W=.R.B.
DWRRBgRR
dWRRmgRR
D[wRr-vzkWRr
DWwRr;-zkWRr
d]xt._s
`d]X-zrWRr
=--E!-
e^1p,mRRRR
e@1p,mRRRR1pa
-E---1scA%--5---1
-e---1slA%--
E2}Li{
#E<2RRCpM
--E@2RRc.{Q---
/@[e&3~a@bKLVygXqs#Z*
E|3GFHB
E3{NRR
E3RR9R
E3zXRR
E4"R9R
E7u^RR
e*7x:M,$X
--E8t&RR-z]WRr
E8TyrS\
E9BRRCsn
{Ea---
EA)--8
Eaaaaa
EaFe--
{EA%--l>
Ea"RRC
eB1p,M
eb1p,mRRRR
eB1p,mRRRR
eB1p,mRRRR1pM
eB1p,mRRRRDyG
eb1p.-R
eb1p,}RRRR1pm
E>bR9R
EBsA|v
`ec2xRJCx]
`eC`$u
ECxm1p]
`ecxRZ
`ecz%S
`eCzSJ
$Edq@(
E\dRRsQ"
eDWRRr=DS
E.E-:-
eF1p,mRRRR
E(FR9R
.;\{E`fU2O5%q~/
EGbRRR
EGh---
EgnpRR
EGvRRR
("&eH'
EJ---|
ej1p,mRRRR
eJ1p,mRRRR
EJCVpY
`E&JX:K
>{em--
eN1p,mRRRR
eN1p.-R1pMRRRKS"?rm-Rr
Enf1--
E{N"RR
eOjZRR?E
eO{zRR;E
EpV---
E~/QpO5QA4;
`EQU2IC`E
ERC` bsQ|F
ERCp]Q
ERCsV]#--
ERC` U
ErKCpI
eRR"?bm-R
E[RRR?Cs|m--
ERRRRHvR
E'RRy'RR
eSeArR/R1pmRRRR
eSeARR/R1pmRRRR
eSeerR/R
eSeGRR/R1pmRRRR
eSeJRR-RDRRRR
eSeKBR-RDb
eSenrR-R81p-R
eSeORR-R
eSepRR-R1p
eSe`rR/R
eSe^RR-R1pmRRRR
eSe@RR-R1p-R
eSeVBR/R1p
eSewBR-R
eSeZrR/R1pMRRRR
eSeZRR-R1p-R1s]
`ESU-R
eT1p,mRRRR
E&tddRRZR
ET---x
EU.RR?
E.*uvqU
ev1p,mRRRR
eV1p,mRRRR
ev1p,mRRRRcpi
eV1p,U
evN=J1y
e`Wg-^RrCpu
e`W~-wRrCpu
eX1pmR#RRR
ex1p.-R
eX1p-R)
`E"?X2
`eX2-zZ^Rr
eXc{E---
?EX-*--DZXRrD7y^RrcsM%
`eXE5	-(-
ExitProcess
ex)L8y,
e].Xto
`eX-zHf^RrCpU
`eX-zHlWRrCpU
Ey2R;RCpM
-E]y8RR
ez1p,mRRRR
eZ1p,mRRRR
eZ1p.-R1pMRRRKS"?rm-Rr
eZ1p.-R1p]RRROR1p}RRRR
eZ1p,]RRRR1pM
`e"/ZJ
EZRC~(
%?)|@f
F1'`_U
FbN3`JvIzu}D
f>dE>67]
(]fExIn
ff.R`D
}f<hyuJ^yOxcO
f.I3\q
^[~f/J9
f`MX-z
fpMXE_:RR{
fpMXEZ:RR{
fPrQH77
fpu-YT1pmQRRRR
fqrCs|M--
FRRc{T--
f_RR._RR
fRZRRs
^f`sSVZ
^f^v>^|^
f`}XEU
`G1pwrRRORcxw
`g1X-zH^Rrs
=g;41_
}G#8QgtO.
\g+9+S
GA0MkS}m@*
:?{GA#I
Gaq5c7
GdipCreateFromHDC
GdipDrawImageI
GdipFree
gdiplus.dll
GdiplusShutdown
GetCursorPos
GetModuleFileNameW
GetModuleHandleA
GetProcAddress
GetTickCount
G;eV	$T6%
gh+_8pO.:zK1	#[c
gj!eAmB(Tp{3SB}
}G*LJ%SK	w	7~-Qix
gn@Z]g
G"PvhTX%ew=o,
--g^Rr1s<UM--RRRR
~GRrCB
{gRRhWRR
}gRRRRRR
gttRRk
`gXb-zAWRrsQ-"sORRRc{lW---
`<gX-zkWRr
`gX-z`WREr
gzBPnH"
`^H^(^
:H1p}RRRR
`hBCPbE_RR
;hbNG#
]HGmN\{u-^
?HJqK4Lh=
hkgSCg
H=LS+T^}+9+S
HM2#_Ri
hNKN!NuN
hop`qK[
H\OuvE(r
HqgvzZ
HrHKii
h=--RRRR
--HRRRR
H_RR$_RR
HR@||\X|
^h^s^;^
hu(k+Eet
	HVb|5UgTo
HwRrswRr
H-zCWRErsQ|
H-zCWRrs
{I---1
I1pmRRROR
i=AR=HD
%\i&a&Tg
ICpi1pYR
`IC@rK
I;DNWvHg)8(R
I;GQzGU
igRRRRRR
I~j?{hM0\uu47*
>i>(JNKNnN
imagehlp.dll
ImageList_Create
INUi;B<s*_XF]
%iO0w1,K
IoJ4J-
iQY)$	,
IRCpv[jCxvJ
I_RRe_RR
[[IRRR
IUjP3vy
iVY&EcICo
iwP~o69}Yo,Z
I!w=W)
`iXc{H
`|iXERq--
{iY---S
`}I=YSU--RR
`I"/zIPS
`I"/zP
.).J.0.r#.k.?.	."U.%.}.RR
j*1+{Lx
j1RRrE-RRR
| JA9!
]J>bi}oK&]^*
jCsH---S
jCs,km--
JEPzbP
jFqD@\
JH-d)~4f.
j L~GtW
J||<<LL
jN#N+N7NuBNVN&N
Jn.n|n{n*+nQn
>j>/N>X>
JPKv8hbKT9eoXpvet{"Ju|D
JR1pE(
J_RRf_RR
jRR"?mY"?p
jRRRcsz]s--XE^2RR;
JRRrX-z]
j. .S.{.w
jWRrDW R
@JXcxXu
JXE0}-z-
@JXE,Q-j-
JyR-Pjw
J-zmWRrOCs\m--
JZRRRPRR
J-zV^RrC
J-zZWRr
k2RRRZRR
%k*@6}
_k=75\
{K---C
{K--&-C{S---1
kCz~RRr"?5r
kernel32.dll
k|ES{D-
{K--F-
k^g^/^
k~G~6>^>
 {Km--
{kM-d-
Km--XE0
~kNrNJNx*NHNCN;N"
K|rEP---
KRRc`qXEeg"RR
|kRRR1peR
K.RRRQRR
k#RRRZRR
kRZ!u`
|.Kss@6
"?{L---
L0r#?a
=L\|0t$
L1sq=-
L@$4$PLRR;R@$|t
laR"fs
lB1R|2
`lbC`I
lBR#|>
l,bR|2
l,BR|2
l(BR|2
lBR|'2
lBR|&21pB\
lBR|&21pBG^Rr
lbR"3?
lbR3"sPRRR
l,BR|B"?pb
lbr"#ERRKR
l,BR|r
lB!R|r
lbR"s!
lbR"s&
l,BR"s
lBR"s.
lbR"sERRkR
lbR"sHRRmR
lBR"sI
lbR"sj
LbR"sMiRRR
lbR"sORRoR
lbR"sQR5RR
lBR"s-R7RR
lbR"s[RRiR
lbR"s{RRiR
lbR"s_RRkR
lbR"s-RRkR
lbR"s%RRoR
l,BR"s}RRR
lBR"ss
lBR"sSR4RR
lBR"sU
lbR"svRRmR1pMRRRR
lBR"sY
lB)R|v
`LbX-zWWRr
>l>c>*
LccU=--
ld}-|:
L \|D$L$PRR;R@$
lDm2l"
lDmVlZ
ld]R"s*RRR
LdZR|z
leRl'&
lER|zM1p-RWf=R
lgRRRRRR
lgR"s:
l}g.X	i	7~-QU&`QXn3Bl{_
LhXj9ws{/
l(Hxtw,
liR|'0
l}iR|r1p-R
lIR"s,BRiR
ljR|t1
l<JR|x
ljYR|Z
L\|k$4
lLZR"s>RRR
lM-|BI
lmBlJL
lM--CB1p
{LM-&-CZ
{lm-D-
lMiR|B
lm\l&J
lmR|'"
lMR|'*
"lMR|`1puqRRRR
lmR|'2Om---
lMR|"cpmyX-zsWRrX
lMR|fN
lMR|h1p}yRRRRcx}
lMRl'~c`}XDLw
lmR|:O
l<MR"s
l$MR"s
lMR"s+
lmR"s0--l-
lmR"s3rRoR
l$MR"sbRRR
lMR"sQRRoR1peRRRR
lMR"s+RRkRcx}
lMR<'vSlMrRRR
lMR|ZD
lmR|ZDRSgRR
lM-"s3
LoadCursorW
LoadLibraryA
loR"&#H
lOVRRR
LPRR0t|X
}L\|pt
LQET2RR
l}R<4N
l}R|&r1p-R
L\|RR_R
l~RRRRRR
LR|RRRRR
l}R"sGRRiR
L>,>s>{>
ls]RlV^
%L[tp$XlU
L\u|p$
luR|JD
LVKuR^_e
.LV%o9>4]
lVYR,B
[}Lwq&DT
lY^	Ogf)
lYR"s|
{LZm--
lzqR|N
lZR3"s?RRR
lZR|4c
lzR"fsSRRR
lZR"#kRRkR
lzR|'N
lZR"s 
lZR"s'
lZR"s)
lZR"s]
lZR"s}
LZR".s
lZR"s7
lZR"sE
l\zR"sjrRR
lZR"sQRRoR
lZRs"s6rRR
lZRs"sa
lZR"su
lZR"sv
lZR"sZ
LZR|'z
M1p5R"?pB
-M---1s`A%--=---1
` M1sb_---
m--1sF%-
-m---1snA%--
M&|2O.R
)M4ueu/bI>jf
maRRRDR
MB|nDb%
m"?BsA|
M~B~Z~:~JV~
`|mC`}1pMV
`mC2Pb
@mCcsm-d-
M--C{dM-
@mC`iY
{ \m--C{\m
m--C{xm-
`$MC`Z
`mcz@CxmY
`MC`ZI
`M"czR
{{m-d-
m--DRSR
~MElf"cA*
MeWg9]^q
mgM.C5 U
`MIN`}<v
mI!QV[sY
`mi"/Z
\mLPRR9
M--nRRRc
`,mQUr
`MQXE#ZRR1p~-R
^]M^R^
MrbrRRX-
Mr"c'R
~MR|>D
Mr|>Da
mR|"DAGR
MR|JDWlGRr
m-RrE-*
M'RRE'RR
mRrES)--|
{M--RRRR
m--RRRR1
M'RRr_RR
m-RrsA|2
mRr-zlWRer=I
MR|TJDkGRr
MrwRRRRo2
`mSQJRR%R
|mT1v'}^6bu<
-(m=VLK8d
--mwRr1s,]m--RRRS
m--Xc{Om
m--Xc{Q
m--XD_DR
m--XD`wR
`MX-dzfWRrsQ|{v
`MX-dzkWRr
m--XE"1-
MXEj"RR
mXE]m--
m--XE-*R
`MXEzJM--
MXL|f"?xB
`MX-z]
`MX-zj
M--X-zn^
MX-znWRr
MX-zNWRr
M--X-zOW
m--X-zpW
m--X-zPW
`MX-zpW#RrsQ"sNR
}m--X-zv
`MX-zV
MX-z]WRr
=|m"/Y
mYES]V
`MYUC`
`m"/%Z
`m"?Z4CpUxI
mZvq'Yw
--N`}"
N1pERRRR1>peRRRR
N>+>7>g>
_N8Ubm
naVDm\^+
n!BnznFn\n
>N>bp>`>
N,B"/pB
nbXRrR
nbXRrR|/zWbXRrX-
$nCFpZ
$nC{`m2--
N{dTC_
N_EN>NnNxN@
,nGnEnjn
NiNEN}N
NIN}N 
n,jRRrR"#
nJRRrR|FoDRSRR
nJRRrR|@m
n/Kn>nPn`nH
N---kRRR
nKT8nI2
`|N!la$3y`70<X
N`m|2Om-4--
n$nkngn_?n
n)n r.6.
.n<nsn
n{nzGn
NoNyN(EN%NJ
Np,]l^
NqN)NJ
N'RRkWRR
NR"syRRRW1p]RRRRS>l];RRR"
(nsnwn!n
~~>>NUN(RR
~~>>NUNRRRYl
n#u"xAS
nVffRRRR
NwRrC`E
Nx;N+NwN
nynin..
nzXRrR,/
o0dm---"s3
o0{M--
o0\M--R,JS
o0@m--R"sq
o^1^%^
O2RRR=]
oA---R"seRRRRcsY-
o~a~u~]~
oc)M--R|
o Cm--R"sN
O"?C^=Rr
ocY---R|
`O"?e[^=Rr
{o--F-
}oFDbgu4/
ofY]--rlrE5
ogRRWgRR
oH---R"2#
oH---RRReR,bSoxm-
oim--R"2s%RRRcsy
oKAm--R|
ok---ARRgR"s
oKhTX%
oKm--R
oKM--R
oKM--R"sE-RRR
okM--R""sORRR
"OKoRRR
oK---R"2sdRRR1sC
"?{OM--
Om---E
Om---Ey
o [m--R|
o{M--R
o}m--R|3b
o |m--R<J
o\M--RRRgPlb
o}m---"sa
Om--x-ERRRR
o^m--Z
o^m--Z|3
on9---2"s%R
^^oNRRR8D$
OnRRR=N]
on---r"s@MRRR
oo----
oo----"sacRRR1swm2--RRRR1s<Wm--RRRR
OpenPrinterW
oP-r--R|jDfG'Rr
o{---R
o~---R|3
`O"?[^=+Rr
-O--RR=]
O--RR=]
`O"r?[^=Rr
O.RRR=^]
ORRRRRRR
`O"?[^=RWr
ORX-xiCpQ
oSAm--R"s[R
o<s}--R<9
ot+%A0
ot}-f-R<9
Oui{51
ouM--R""s!
o uM--R"sd
ou---R|3
owm--R
oWRrCsQ-
oXm--R|3zDRSRR
oy---R
`Oy"?[^=Rr
o~z>F>
P1pmRR
p]1p=R
p}1sr_-;--R
p-#4g[l{>\G9
p5p00@@
]p@8&GMgY
p8/_Mt
Paaaaaaaa
p{ACpTQ
PathIsUNCW
PathStripToRootW
paXDRNRRP
pAX-zWWRgr
p b1RRRRRc
pB(2(h
pB4CbX
pB4C&bX
~pB4CX
pb"/`A
p,BCp}
p,BCp}1pm-
p,BCpm
p,BCpM
p,BCpm1pMR
pBCpmc
p<b"cWRRRc
p$bDQC
PbEI---(I
P]B_<@g
pbKO2R
pbNp}<2
pb"?$pXV
pBQCXr
pb"/@R
pBr>rRRXODRRRR
p]"/%BsA|2
pBX3-zeWRrCp<u
pBX3-zWWRrsQ="stRRR
pbXccE
p|BXD^*Rr
pBXE -
pBXE0--:-
pBXE7m-:-
pBXEgz---
pbXEhNbRR
pBXE`N---
>pBXE^RRR
&pBXESRRR
pbX-fzR^RrCpuy
pbX-fzWWRrCpuy
pBX-z}
pBX-z@^3Rr
pBX-z_W2Rr
pBX-z}WRgr
p|BX-z}WRr
pBX-zWWRgr
p}Cpd}
pd]c`ZZC`E
P'DR^RR
PDR^RR
PDR^ZR
pdz"?@M
pe"?@2N&`U
pE"?@2N&`U
pECrpm
peI1ps]RRRR_
peiCpm
p$EQU2CpE
peXE,--:-
peXE\`RR{
p<eX-z^WRr
pE"?@z
pgRRRRRR
pgX-zA
p]ICpE
pi|:DT
piRRRR
pIRRRR
piRRRRcp|uX
[Pi<}X
Piy8Kh
pIYZG}RT
pJX-zLWRgr
>P>kN'NO
plBCpm
plBrRRRRXE
>Pl>c>
pLRR8r
@PlRRPR
pM4CpxI
pm"/BK
pM"?BK
pMBPRr1sl}%--RRRR
pm"?BXE-gRRR
pMCp}I
pm"/cr
pmCZEp--p-
pME#RRR'O
pMICpm
PM\I|Zkx
pmK=lZ
pMN[[RRR[
pmQUBK
pmRRRR
pMrRRR
pMrr{RRRX
pmv-dRRR
pMXccE--f-X-z{WRr
pMXEgg0RR
pMXE<rR;R
pMXExN
pMX-zf
pMX-zj
pMX-zNWRgrsQ|
pMX-zOWRgr
pMX-zV
~pMX-zVWRgr
pMX-z]W3Rr1sVm--
pMX-&zWWRr4Cs|\---D-[R
pMYX-zj^Rr
pMYX-znWRr
pM"/zZ
pO"?C^
POEafEQ0ui
P&o $Eilf
pp00@U@
ppBXEY---
pPBXEZm--
ppM"?bZ
p$}QUB
pqXEAbRR{
@pR$dt
@`pRhRRR_&tLtRRRR
p``R"R0t
P'RR8'RR
PRR8R@|?|\ \t$
`|PRR\R@$
PRRrDQyR
p}RRRR
P^RrRR
P_RR _RR
p}RRRR1p|mRRRR
PRRRRRRR
p}RRRS"?]bm-RrsA|Y21p}
PRr"/s
PRRS8R@||\ \
PRRtr8T<D|0$
p=sQ|"
p}"/sr]-[--
PSWRVQ
p<t$|PRR[KR
|p<t$|RR
p.uAV*(8)R
puXc`yX2E
p$uXEJ=--
P-vdWRr-v,DWRr-v\W
p(vg{k!}j"
p,_v--RR
pvZ<R 
,:.P	W
---PwRr
pWRrsQ|v
p}X3c`IX
p}XEgg
p}XE*RR9R
p]X-fzjWRrsQ|z>
PX@&tddR_
p}X-z^
p}X-zk
.p}X-z`WRgr
p}X-z]WRgr
p<}X-z`WRr
p<}X-zXWRr
p]y"?BsA|
p|YXD_DRr
pyZRRR1p|IZRRRcxI
p$z"?@
pZCpM1p=LR1p]RRRR
pZCp$mDRSRR
p,ZCpu
pZDQb4
pz"?%@M
pZXE&.
pZX-fz}WRr
pZ)X-zWWRr
pz"/zKZ
Q|6c{CM-
+q6wsu
*q7]9]SVn[Ue
*q7]rj#Td-O/z
qaB"?YCxm
Q>a>sN
/qa"u^%
~Q~]A~Z~j~6~
qb1pARRR
qb1pE2
qb[1pEq
qb1pl}RRRS"?b
qB1pmR2RRR
qb1pMRRR
qb1p-R
qb1pWpRgRRcxe
qb1s3--r-RcsK---LXccl---X
qb1sK--f-RRRRccKy---Xc{k-
qb1sl-3--RRRRc`
qb1s@m-d-RRRRcs@ym--XDQRR
q-b1sT---R
qb1sWM-d-nRRRccEyM--Cc_M-
qb"?As
qB"?cd
qB"?cL
q}Bc{\m--
qBCpI1
QBCpI1
qBCpmDRgSRR
.qBc{Q---
qbCsPm--
qbCspm3--
q}bDrRRR
qbDRSRR
qbEErR
qbE&mrRR
qB"?{l-b--
qb"?QsQm|jDR
qBv--RRN
QbXEgJrRR
qB"?xS
-qdEzwRBM,:.P	ZGUlMUAn[]-
qe2(ScDb
QEkeBRR
QerCpU
QE%RRR
QEzQRRR
Q|HDc^Rr
 qjCsH---
q%jomdD`]o
QJRRRZRR
qJsQ"s4jRRR
]QMBCpE
qmBc{Q---
QO~h?]!
QPCsIm-d-
qqrCpm
qqrCpM
qr1rl~RRrZRRR
qr4Csd
qr"?AC`u
Q$RC`}
QRCcLm
QRCc{M--
Q RCcu%--
QRCcu%--
QRC` }EO---
QRC` i
QRC` I
QRC` M
QRC`mA
QRC`MA
q}rCp]
QRCp(]
QrCp}1
QrCpAEx-
QRCpEQ
QRCp(i
qrCpli
QRCp(m
QRCp(M
qrCpm12pMRRRR
QRCpmQ
QRCpMQ
QRCp]Q
QRCp}Q
qrCsCm2--
QRCse%"--Soe%--
&qrCsj
QrCslE%--1su%
qrCslX---O
qrCsym-d-
QRHC`MS
QRJCpm
Q'RR7'RR
"#QRRKR"?pB
qrrSRRRoCs^---DY32RR
QRVWP1
QrXEhJm--
Q"saRRR
Q"sGRRR1
"?QsQ|B1mp-RE^RRR
?QsQ|v
Q"sTRRR1
QtCcx-
QtW^RR
<$_QV1
qVKOnRRgR=MCpQ
q}VsQ|21pm
qXE@bRR
`qXEH"RR[
QXE^MfM8
qXEV"RR
-|Q-xICp$
Qz	C`qE"---(
qzcslIm--X
qZD}GR
QzIC`m
QZXEc^rRR
R@|?|\
--R|0"?p
R0t|pb$<D
R0t|PtT
R1pEVRRR
R1pi*RRR
R1pIRRRR
R1pmRRR
R1pmRRRR
|r1p-R
R1p]RRRS
R1sHm--R
R1s[M--
R1sUm--R
R1sXm--R
R1sY---F
,r1$Vk]T|>Vb|5Uv
--R|2FOm---
R2RRRjRR
--R|3*DRSRR
R4CsN---
R4RRRRRR
R--4SN`
r^6^^^@^
R|6DRSRR
R7RR1pERRR
R8D$@s$dt
r"?AsA"s
r~#b~N~.~d~
RBRRJRR
RBRRRERR
RBRR[RR
:RBS|z
Rc{_=-
Rc6sE---X
rcc_--
rcc_---
R?ccam--Xc0{Ym--
RCcE---
RcceQ%--X
Rcc|E---X
RccK}--X
RccMm-
RccSm--X
rccTm--
RccTy=--XE(rR
rcc@y---XDrZR
Rccz]--
RC{}%-D-So}%--R
RC{f]-F-
Rc{h---
RC{h--F-
RC{i---
rc{IM--
r'c`iXcxy
rc{Mm--
Rc`MX-zN
Rc`MyX-zNWRr
rcpAXc`y
RcpEXs
RcpMX-
rcpqXE
RcpqXE4"
rcpUXc`
RCpvzCxv
rcp]Xc`y
Rcp]XD~
Rcp]XD|
Rc`qXE?
Rc`qXE*b
rc`qXEp
Rc`qXE,Z
rc`qyXE
Rcs_---
RcsCM--X
rcsi---X
rCsKM--
rCsk---S
RcsMm--X
rCso---
RcsTm--X
Rcs_---X
Rcs]---X
Rcs}---X
Rcsz]--
Rcsz]--X
Rc~`WXET`RR[
RC`]"?x
rCx}1p]R
RCxB1pm
RCxmQSlmRRRR
RCxmSlDm[RRRlZ
RCxOSlO
Rc{Zm--
R|d1sO--
RDA=Rr
`.rdata
rDb=Rr
rDgR^RR
RDi;7Rr
RDk;7Rr
RDl7Rr
RDm;7Rr
RDn7Rr
RDOS;KRX
RDRBRR
RDRFRR
rDRo^RR
RD--RR
RDRRBR
r#DR^RR
rDR^RR
rDR^?RR
rDR^R?R
---RDrRR
rDR^RRD
RD{RRRD^
RDRRRPc
RDRRRPcc|Q---X-zF
RDR\RwRRRR`$Tt
rDRSRR
RDRSRR
rDRZRR
rDwR^RR
RDY.Rr
rDYwRrDD
RDZwvRr
--|rE:--
rE>---
--R|"E4"7RR
rE8---
rE9---
ReadFile
RegEnumKeyW
RegOpenKeyExW
RegQueryValueW
REq:5--
rE}RRR
r<EU---DQygRR-zwWRrOEy
rEUm--
rgDR^RR
RGRS1p]RRR
Rg-zYWRrsQ=|JDRSRR
RichJwS
RJCxmEn---(
R|jD~GRr
RJRRR{RR
RJRRRrRR
@rKC`U
.rkQcHU:un
--rl8ccx)m--XDT
RlMR|V
rLZR"s
`RmCc{m-
r@NMd3
RnRRRgRR
RnXqs#Z
>rNZNTN
RODRRSS
&RO>uVK
R|@"?p
rpBXE["RR{Cpm
R|PORRRR
RPRRmRRR
R}R0t|`
Rr16perRRRcx|e
RR1pe2RR
RR1pI*RR
RR1pM*RR
RR1pmRRR
R-R1pmRRRR
R/R1pmRRRR
RR1pMRsRRR
RR1pMVR
RR1pO---
R-R1p-R
R/R1p-R
RR1p}RRR
RR1puRRR
RR1pUVRR
Rr1rRRRr
RR1scM-
RR1sd---
R+R1sH---
RR1sIm--
RR1sk--
RR1s|KM--RRRR
RR1sYm--
RR"3m;
|_RR3_RR
--RR3RR
*RR=]49
-"RR4CNxA"/pa
"RR4Cp5
`~RR6~RR
~RR7~RR
R/R881pmRR
&^RR8D$
RR8r8Dv
rRaaaa
rRaaaaa
rRaaa?aaaaaaaa
rRaaa?x
_RRA_RR
*R+R"?`B
RR"?b:m-RrsA|:
RRc6`qXEMbRR_
RR"/cb]-
RRccC}--
Rr{ccU---X-0zcWRr
Rrc~c]---XE
RRc{Im
RrCpmDrR
RrcpqX
|RRcpqX
RrcpqXEg
RRcpqXEg
RRc`qX
RR?c`qXE="R+R
,_RRc_RR
}~RRc~RR
RRcRRR
RRCs~---
RRcsG---
RRcsh---
RrCsK---
RrCskM--
Rrcs\m--
Rrcst---
RrCsu---
RrCsuM--
Rrc{Um
RRCWRR
=Rrc`]X
RRc`}X
RRc`}XD.
^RrCxeY4WO^Rr4C
&^RR`D
*RRDnX
R-RDRRRR
RrDswRr
RrDTRR
RrDuGRr-
--R|rE~- --
RrEDM--E
RREOBRR
!~RRE~RR
rR|FDRSR
\~RRF^RR
rRGaaaaaaaa
|RRgR_
RRHR@||\
`_RRH_RR
_RRJ_RR
^RrkC`
RRkR1pMRRRR
['RRk'RR
RRKRRRRRRRR
['RRl'RR
|'RRLWRR
]'RRM'RR
RRNNsem--"
.~RRn^RR
RRO1sT---RR3BR
RRoR1peRRRR
RRoRcx}
RRoRDRSRR
RRPcc\m-
_RRP_RR
--*RRR
-RRR,&
RRR"?`:
&RRR0pxRsD||\
RR=R0t8|`$t|dt@
*RRR1p]*
RRR1p}b4
RRR1peRZgRR1p]RZR
RRR1piRRgRR1pURRR
RRR1pM
RRR1pmRR
RRR1pMRR
RRR1p\mRRRR
RRR1p}*R
RRR1p]RB
RRR1p]RR
RRR1pu
*RRR1pYjsRRR1py*R
RRR1pyRR
RRR1sA%-
RRR1say%--
RRR1sc--
RRR1sG%-
RRR1sgy%--
RRR1sh--
RRR1sI%-
-"RRR1siy%--"RRR1
RRR1s{M-
RRR1sO%-
RRR1sx
RRR1sxm-d-----DQR
RRR4C`|u"?xb
RRR8D$
RRR8D$HsXRRR8D$H
RRR8D$N
RRR|&bDC
~RRr"?bR
"RRRccTm-d-X-zdWRr
RRRc{]--f-C{aM--1
RRRcfsU---XccdTm--X-z\
RRRc{Gm-d-
RRRc{H
RRRc{IM-d-
RRRc{@m-f-
[RRR[Cpe
}RRRcpEX
rRRcs]
RRRcsDM-
RRRcst}-
RRRcsU=-
RRRcsWM-d-X
RRRcsY--f-X
RRRc{Um-
'RRRc{U=r--
RRRc`\}XDjwRrD
RRRc`\}XD{^RrD
RRRcxe
rRRDrRRR
r^RrE?
rR|rE3RR
RRREGRRR
RRrENRRR
rRRGDS
--RRRgR
--RRRGR
R\RRIRRR
R]RRJRRR
=.r. .RRkR[RRpRRR
-}RRRl
-RR+Rl
~RRrm1st---
RRR=N]
RRRO1sU---VR3RR1su---
RRRPccQ-
R]RRQ>
--rRRR
RR"?r--R
RRrR|"
~RR~^RR
 _RR(_RR
_RR	_RR
--RRRR
---RRRR
-R"#\RRR[
?~RR/~RR
._RR`_RR
'RR/'RR
(_RR|_RR
$_RR,_RR
	_RR%_RR
RRRR`$
---RRRR1
RRRR1p}b
RRRR1peRsRRR
RRRR1pmR
RRRR1pMR
RRRR1p}R
RRRR1p}RrRRR1pmRR
--RRRR1s
RRRR1sam
-RRRR1sfy%------1
RRRR1siM
--RRRR1s<iM--W
RRRR1suM
-RRRR1sxy---RRRR
RRRR4R
RRRR8D$
RR/@^Rrc
-RRRRccOy---X
RRRR"ccr
RRRRc`eX
rRRRc{Gm
RrRRcp}X
--RRRRcs<s}--XDRr
RRRRcx}
--RRRRc{<xm--
RRR-RCxW
-rRRRc{]Y---C{aM-
-RRRRDRR^RR
-RRRRDRR~RRcsHm--
RRRRD$T|
rRRrDZRR
rRRR_E
RRRRE#
RRRR}gRR
RRRRh~RR
RRRRIRRR
---RRRRl
RRRR(L>~
RRRRlgRR
RRRR$|LT
RRRRnnnn
RRRRogRR
$}RRRRP
RRRR_P
RRRRp'RR
RRRRPRR
RRRRP'RR
RRRRPRRP
RRRRPRRQ
RRRR_ */Q
RRr~RR
RR]RRR
RRR~RR
RRRR;R@$
RRRRRE!R;RR
r"?rrRRr
RrRRRR
RRRRRR
?>RRRRRR
'RRRRRR
{^RRRRRR
RRRR"~RR
RRRRRR?
RrRRRR1r|jRRrRRRR
R[RRRrRR
R\RRRrRR
R^RRRRRr
RRRRRRR
RRRR(RRR
RRRRR~RR
RRrRRRRD
rRRRRRRR
RrRRRRRR
RRRRRRRR
RRRRRR?RRRR
RRRRRRRRw|GRrsGRr
RRRRRRRw
RRRR|RRS
RRRRtZ?j
RRRRUR
RRRRURRR
Rr"?r--RUrsQ|"
RRRRV'RR
RRRRVRRT
RRRRWZ1QQd
RRRRX'RR
RRRRZRRR
RRRS1pMrRRR"6?xZs
RRRS1s
RRrsA|"
RRRS|b
RRRScsE
RRRsQ|
RRrsQ|k"
RRRW`D
r?RR]WRR
RRRwRR
":RRRWRR
R^RRwRRR
RRRwrRRR--RR
$RRRxp`X
.RRRXRR?GRRRB^&^
RRR"?xz=s
~RRr"?zm
r_RRZ_RR
:RRRZRR
RRR-z^WR
RrR|?zWT
RRS1pe
#RRS1p}RR
RRS1>p]RRRRcx|]
RRS1seym--RRRRc
~RRSBRRS
RRSLr@
RRSLr@8
RRSoEY%--
.RRsQ|21p
RRsQ|21p
RRsQ|a
RrsQ|N
RrsQ|r_R
RRsQ}"s8RRR-zlqWRrCsq-
RrsQ"skR
RRs.Q"suRRR
RrsQ|Z
RRS'RR
:RRSRRRR
RRSrRRS
RRSwRRRR
RRSwrRRS~RRS
RRSw~RRS:RRS
$R]R \t$
RRTRc{iM
'RRu'RR
Rr-viWRr
Rr-vQWRr
Rr-v\^Rr
Rr-vS^Rr
Rr-vtWRr
RrXE1RR
+RrXENRRR
RRXE~~Y--
RRXR@||\
RRxr8D6
RRX-z\LWRr
RrX-zQWR
RRX-zW
RrX-zyWRgrn
"R"RYl
Rr-zk^R
Rr-zkW
Rr-zkWR
RR-zlwWRr
Rr-zmWRr
^Rr-z@^R
Rr"?zrRR
RRZRRZRR
Rr-z_WRerCpM
RR-zwW
RR-zwWRgrE@----z
--R"s4
R"sbRRR
R"sBRRR
--R"sdRR)R1sS---R
-R"sGRRRW
R"siRRR
RSLB@SAR
RSlMRRRR
R"smRRR
R"sMRRR
RS"?}pzsQ|
rsQ|2_RE
rsQ"s[RR
R"s&RRR
R"s+RRR
R"srRRR
RSRRWRRR
R"sURRR1
R"svRRR
R"swRRR
;R@$|t
\R@$|t
R@$]|t
|RtRLR|R
RTRRyRRR
rtS. J|w
~r~TV~
r_vBRL
Rv-RRRCp
RVRRRrRR
rv=Rr"s
rv=Rr"s'yRRR
^R^vZ^C^
RWF=RrC^pm1petwRMr1p}RRRS
RWJRRrX
rWRrDE
RWRRRRRr
RWRRtgRR
_RWVRRrX-6zBWRr1suY%--RRRR
RWVyRRrX-zBW
Rxb4Cr
R^X^(^C^
$R@X@`XP^X@&p``RR
rX-zGWRr
rX-z]WRr
RX-zWWRr
RzA\{E[S
R-z<b^RrCpM
R|zcp}X-
R-zCW2RrCp
R-zCWR
R-zCWRr
%r|zDBQRr
R-zjWR
r-zJWRr
R-zjWRr
R-zjWrRr
R-z<K^Rr1p}
r-zkWRrD
RZRR[2RR
RZRRsRRR
RZRRwRRR
R-zRWRr
R-z_WRr
R-z}WRr
R/-z}WRr
R-z(~WRr1sxm
R-z}WRrD
R-z,_WRrX-zG
R-zwWRrE
rZXRrXDI_^RrccU--f-X-z~^Rr
R-zYW3RrsQ|b
R-z|yWRrCs|m-
R-zz^R
R-zz^Rr
R-zZWRer
R-zZWRr
R-zzYWRr
s}%--"
^|^S^}
] S+] )
s0c---CsS-
{S---1s#d---R"?s#
s1sE--&-RRRR1pmyRRRR
s~]--1sna]--
S.3.c.
s3RRR1p}
s[%--5--D-1s{%--u
sA|21pM
"saj2RREAxRR{
saM--X
>saM--XDEG^Rr
-"saRRR1>s_=--RRRgR
sA---X
sbm3--
S"?bm-Rr
sc5HAl& V=i] M2A
ScDbScDb
scm--RRRGR1ssm--R
scM--RRRGRcscM--X
s{--&-CpZL
---"sCRR
s\%--%--D-1s|%--e
s^%-----D-1s~%--m
sdm-f-X-zpWRrKCsX
sD_M--X
sDo---X-zp
sD=--pRRgR
"?sd---X
sdXm--X
sE---"
sE=--HX
sE---LCsA---
sEmc--XDRDRR7
se%--RRRGR
se=--RRRGRcce=--X
S{e@sWFP9`
SetClipboardData
s~]-F-
s,Fdi:jx:J~5u)aqM
.s.#.G.
sHa---,
shlwapi.dll
ShowCursor
"shRRR
sh---RRRgR1s`m--R
s im--
"sIRRR
sIRRR1pe
s~]--K/
S.k.7.I.
sKM--X-"zkWRr
skM--X-"zx^Rr
s~]--KO
skRRR1pM
sK---XE3{RRRCslm
slM--RRJgRcsSM--X
sLm--RRRgR
SlMRRRR|6V
Sl{>P8
s`---LXE=2RRsQ
s{m--|>
s{MB--
s|m--CpmA
s@m--QE
s}m--X
s_M--X
s}m--X-2zVWRrsQ"ZssRRR
s{m--XD#W(Rr
'sN]--Cs0j]--
sNm-6-Csz_---l
"sNRRRDr
---So{--
soA---X-zOW
Soe=--Rr#RR"
s(Op>|Zq
so---ZRRgR
sPS---Cpm
sP]--XEwf:RR
---sQ|:
sQ|01slmc--RRRR
sQ|@1p]RcRRRc`]X
sQ|21pM
sQ|81p]RsRRR1perR
sQ%--BRRGR1sq%--B
sQ"sARRRW
"s}R1RR
s#---Rcc$W---Xc{s
SRR1pn-R
"s;RRR
SRRR1p
s)RRR1pM
s	RRR1pM
SRRR1p}R
s/RRR1pu9RRRR
SRRRccH-
"s{RRRDh?rRREURRR{
"s{RRRE
s{---RRRgR
s_%--rRRGR1s
]S-RRRR["
S'RR['RR
"s'RR'RWP7RrCp
sSA}--CsS}-
sSm--X
ss---RRReRDRRRR
|&StLtR
su%--"
sum--1sEam--RRRRc
suM--X-"zAWRrsQ|[>ccCM--X
suM--X-"zWWRr
suM--X-"zX^Rr
SUURRR|
su=-$-X
su%--X
su	=--X-zzW
sv%--&RRGR1sV%--R
SVWRU1
sWmb--
swRRR1pM
"sWRRR1s\wm--RRRR
sw---RRReRDRRRR
sW---RRRgRc{W---
s[---X
s]---X
&s	X{{2 S_VPWqc
?`sXcxq
sX%--=--D-1sx%--}
s`---XE3gRRR
sXm--X
sXm--X-2z]WRrDRS
sy9m--X-zXW
sY%--bRRGR1sy%--b
sYM--rRRERcsWM--X
sym--X-2zXWRrsQ|{t1sAm--Z
sz'---Cs
sZm3--X-zEWR'r
szm--X-2zOWRr
sZm--X-zdOWRr
s\Zm--X-zE
szm-&-X-ziWRrOsQ|z
sz_---R
"szRRR
s-zvWRrsQ="s
 t?`"(
t0|0DdtP||
t0Ddt TdTtPRR"R0t4|`$t|dt0
t1p}RRRR
T1ptmRRRR
t<44dud\L
t4 \t$
T$4|T4t
t4|x$DT$td
't5%K)
@t6T\Pdd$
t|8Td|
=@&t9y L
T."/`B
t\|Cfp$
Tc{Q---
$tD$%4
|t"d@$4$R|
&tddRR
&tdd_RR2
&tddRRR
&tdd_RRRR&
tdLR?R
Td&LVTD$$&
|t"dpD
||TdPdd
|TdPdd$
`$t|dt
|t"d`t|
$t|dt0DdUt TdtPRRCD
tdT\D$
Td`td$
tdt|t8TdU|tPR4
td$|txD
\TEzi*O.}[]#y
$$|t$|f6`t$4|D
$$|t$|f6xL\t
t\|f`T$4j|T4t
Tg~1VE
!This program cannot be run in DOS mode.
tJRR4R
tJRRnR
T}|K>bA[
t| \|KD$$PRRXR-@||\Ptt
$$|tL|
TL_<,)
|&tLMtRRRVRRR
$$|tL|P6RRP
tLpLPR1R
tLRRCqR
|tL|RRh
tLRRoR
&|tL|RRR
&tL%tRRRP\\`vT$T4tdt$A|RRR
&tLtRRRW
{T{m--
T@nn4m/
T*?nXp7L@}o
tpLPRR
tPRR5R0t0|`$
.T.?.P).RRRTRR?gRRRl^	^
tPRRzr
%/[tp$XlU
TQN%kg&
t@QT$tdtR+Rw@$|t
 tQ[=x	
tRR$dt
t$RRPp
TRRR8D$
T|RRRR
tR+R@$|tv
$$&$t|RRwdTDd&TD
TRR"?z
t\|SD$$0Dd|t6
$t| \t$
t&$|<t
tt44DD
tt4U4DD
T$tdtPRRs
t$|<tn
t| \t$PRU
ttR7rd
@tT\	RRxr8D
tTt0Ddt
tT|t8tHdd
tTt9RR2r
t\tT|b
t@T$td
t@T$tdtR]
tT|t@$I
tTtRqR
tT|TRR
tTtRR5R
&tT|TRRR
tTtRRx
tT|tRxD
|@tTtt
tT|t@T
tTt|t0DdtPR
t\tTt|b
tT|txDK
tT|tx$J$dDtd\
T$$$&|V
]="tvj
tWRRZgRR
txL+SJQ
tx^)YptC
U0t|8$d|d4t@$4$
u1pMRR
u1pmRRRR
-u---1skA%--
$U31R#
U4XQU}Z4H
uAb.8`LVQ(j)
`uA"?XRS
U-B"s5RRR
`uC`$}
UC?3zl'
UCp})1pMRRRR
{u%--Cs!{e%--
{u=-D-
[>U>F>
`uIC`e
{u---LCZ1pmRRR
UleM=~
||<U<LL
{`uM--
UmC`UE6-J--
!~U~m~&~T
uM--X-zq
UN8;AgGP3UhnK
/|UnL!esFNF
u}n\T/LInb?"
UO"RRR=]
UOrRRR=]
UpRRRQRR
[up%Xm
.U{.Q.a.}.w-.r.
u^RrCB
u'RR]'RR
U^RRRZRR
Ur|zDBQ?Rr
Ur|zoDBQRr
user32.dll
UtT|t`||t"LPRRcr8
`uX2E	=--
`U`  XX
`uX-z]W#Rr
{uy%--1s{e%
U-Z"s7RRR
^|v+]}
.v.&.@.(
']V2Sk
V8D$t$
V8zD$t$<
{Va]--
-vAWRr-v<aWRrRRRR
`vb|B\
{>VBP 
vB=tvz
-vc^Rr-v<d^Rr-vD^
v-cSZ=
V cxV~&^
VD$Vp 
;;V.gLy
vI1pmRRRR
VirtualAlloc
VirtualFree
VirtualProtect
-vl^Rr-v<L^Rr-v|^
V~n~3~
VOR`aVxDSD
|Vp$DT$
%v;>_Q
V<^&^RR
v'RRb'RR
V^RrCsLm
VRRRc{u-
V'RRRRRR
)vRRRRRRR
VRRrX-zB
VRRrX-zy
v|RRv|RR3x
-vUWRr-v,uWRr-vEW
V xV~&=^
-vYWRr-v,yWRr-vIW
vZ=I=	
VZWg+9+S
^{^w^'^
>W+>)<$
w0g#]p1Cr(
w4ww1JpGR
W~7~e~7
W`}7T7U&izpX@GS1a
*%*\W8d@8V>x
WaitForSingleObject
w~a~U~e~
WF=RrCpMy
WgRRygRR
winspool.drv
WJRRrmX
Wl[lWoKK
W.M\nxK
WM--XE>
WPQVRSj
wQPg<4
WRErCp}
WRr1p}RR
WRr4Csl-
WRrCp<}
WRrCp}
WRrCpa
WRrCpE
WRrCpI
WRrCp<I
WRrCpm
WRrCpM
WRrCp<M
WRrCpMy
WRrCp}y
WRrCpyy
WRrCpYy
WRrCs<[---
WRrCs@
WRrCscm-
WRrCskM
WRrCsKM-d-
WRrCsLm-
WRrCsLyM--
WRrCso--f-
WRrCsu
WRrCsU
WRrCsWm-d-
WRrcxe
WRrDR;@Rx-zwWRr
WRrDSRRR
WRrn:RBS
wRroC`
WRrsQ|6
WRrsQ|fc
WRrsQ|HDmzwRrccLm
WRrsQ|n
WRrsQ"s
WRrsQ"sYjRRRccSM-f-Xc{sM--
wUB,qb 	?)RjqlYM
WVQ@V1
-WVRRrMX-zyWRr
-W,VRRrX-zy
>w,>[>w>?>_/>A>Y>	>_
WWRr4CpS
w|]$x6'i5%SXps"Z
wY_N9ULz
WZRRrX-zlXWRr1s}m
:x!0q!?P
--X-0z]WRr1sUy
X1pMRRRR
x8]CzNRRr
.~X.8.h.
x$aCx}
xbAC{^
xb"c'RR#RDSRRR
XBCx$e
X$BCxI
xBCxMID@7Rr
X"?bm-Rr
xB"?pB
xB"?rI
Xc`BX-zL
XccD---X
XccK}--X
--XccU
XccXm--X
xc OVXYXps"G]
xcsU=--X
Xc{T=--
---Xcxq
X~Cxu1
Xc`yXE7R
--XD2ZRR?D--RR
--XDAwRr
^X^D^bO^
x$`|d|cD
xDdtx$0D
$x$D$ED|DTdD
`]XDeRDRR
xDMCxm
XD_PRr
>Xd@RRRR
-XDRrRRc~cD}--X
-XD_wRr-6zkWRrDow~Rrc{U
-XDYjRr
---XDz
=--XE/
---XE0}-
`}XE?2
--XE*2
--XE3hRRR
--XE51-
XEC2RR
--XEFVRR?
`]XELA--\
--XEM\RR
-XENRRR
--XEoBRRR
XE'"R9R
}XE_"RR
--XEsb^RR
--XE SRR
-XEUNRR
--XEX2RR?
---XEZBR
--XEZPRR?
xFT.c, H^n/?^
xGDRJRRcvpqXEK"RR
;x GkW
"*]xgR8r
`XGSAR^SRC
xICxQD
xI"s/RR'R
xJJ4D:\p6dNo<
x[(kn+a:
xLm4CxPX
xm4CfxPV
xmC{cJM
xMcs]---L
x$mCxE
x$mCxM
XnC{$o
X$nCxE
XnCxEI
XnCx$m
_XNi$5/
x(OCxo
xOYCXbEG
xP'6Qn(Wp>
x}pIYZG}RT
XpRR`RrR
xp`XRRRR
xqICxo1pQRR'RR1pORRR
X>~R8D$
X'RR('RR
XRrX-zh^sRrCpg
xRZC{q
xsv[-~n
xt{5|bS]
x$tt4D$tjt 
``  XUX
xUx88HH
XvuQ)q=]
;x V)V
xx88HUH
xXC4^K/`Q)zTg~
x---X-zZ
xYCXr	
`}X-z^
--"?Xz
--X-z}
X-zAWRrs
X-zBWRrs
xzCrxE
--X-zcWR
X-zcWRr
X$ZCx}
--X-zD{WRr
--X-zD@WRr
--X-zFWR
`}X-zFWRGrCpm
-X-zFWRr
--X-zFWR%rCs}m--
X-zGWRr
`}X-zHxWRr
XZICxA
}X-zjWRr
}X-zJWRr
X-zjWRrs
`}X-zjW#RrsQ"s
--X-zKWR
X-zKWRrs
-X-zLWRrK
X-zMWRrC
X-zNWRr
X-znWRrs
--X-zOWR
--X-zOWR'r
-X-zOWRr
}X-zOWRr
X-zOWRr
-X-zOWRrO
-X-zP^Rr
--X-zPWR
}X-zPWRr
`]X-zqWRErsQ|
---X-zr^
-X-zr^Rr
X-zrWRr=
X-zrWRr1
`}X-zW
`]X-z@WRGrCpm
`]X-$z`WRr
]X-z@WRr
}X-z]WRr
X-z^WRr
X-z}WRr
X-z}WRr1
--X-z^WR'r"?bm-Rr
--X-z}WR'rDQwRrcc
-X-z}WRrO
-X-zWWRr
-X-zxWRr
X-zyWRr
X-z]YWRr
X-zyWRrs
Y0{ND`ZoU	Ju?1
'=Y@C`m
?YCxmDRS
YCxYDx
/yd)z}\/SOD
y	$gFP2
ygRRRRRR
YH:Db2N"_!xcO
y+IB>V[+W'l
{ym--C
Ym--c{Vm
Y[+mrf
ym--X-zx
"?Y"?p=
Y<qM4M
y'RRQ'RR
YRRRY^9^
\yUC[*/
YvRSRR|J
yWRrCp]
yWRrCpU
YWRrCpU
yWRrCsKm-
YWRRegRR
yXEIQ--
yXE]RRR
`YXE"RR)R
`]y"?XRCxU
`]Y"?Z
_Y^Z_[X
Y^Z_[X
--"?@z
)z@,#&
`]"/%Z
Z1rkRRrR
-zb^RrCp<M1peRRRR
-zb^RrCs<t---
-"zB^RrsQ|z
-zbWRr
-zBWRr
zbWRrsQ"zs]RRRc{]
`ZbXE-
`ZbXE*
`ZbXEi
ZccQ--
Zc{N--
Zc`QXE
zCRoz=Q
-zcWRr
zCWRrCp_Y
-zCWRrCs<[m--
zc[wRrC^xm
-zcWRrDb>
-^zcWRrDB
Z$CxM1pmRR%RR
zDBQRr
ZDBQRr
-zdeWRrCsO
-zdOWRr1s}m
-zDpWRr
-zDQWRr1s[M
zDQyRRE{e
-zd}WRr
-zD~WRr
ZeCxA1pyRF'RR
zEver.}HT
-zEWRr
-zeWRrCp<u
-zEWRrO
-zf^Rr
-zF^Rr
-zFWRrCp,M
-zfWRrDC/
#-zfWRrsQ=|
#-zfWRrsQ=|81p]RRR
-zFWRrsQ=|d
?z'{<gOU];NI
zGRr{C@R
-zgWRrh
-zH^3RrsQ"sOR
-zhWRgrsQ"si
-zhWRr
=Z\I8rM
zJ%-""
-zjWRrsQ=|*DS
-zjWRrsQ=|x1peVRROR1p]
-zkWRer
-zkWRrK
zkWRrsQ|[r1p-R
-zLfWRr
zljRRr
-zlWRr
zlWRrX-z|SWRrCpM
{<zm--
`ZMCCb
{Zm-f-
-"zMWRr
zmWRrCsYy---
-zmWRrn
-zmWSRrn:RBS|
`ZN`mlz$
Z~~>>NN
-znWRgrsQ"s;RR
-zNWRr
znwRrCxey4WPwRr4C
zNWRrsQ|z
-zOW2RrCp]
-zOWRr
-zOWR'r
-zp^RrsQ="sv
-zpWRrC
-zpWRrKsQ|x
ZRaaaa
ZRaaaaaa
ZR)o\M#QYZG!RT
--z{^Rr
Z=RrcpqX
z~RRFr
ZRRR1sem
ZRR{sQ||1peRSRRR
-z`^RrsQ="s
zRRSrRRS
z'RR{WRR
zR"s-RRR
-zrWRgr
-zrWRr
-zRWRrC
-zRWRrs
#-zRWRrsQ=|V
`<]"?Zs
ZSoxm--}
Z"s_[RRR
+-zSWRrCp,U
-zT^R'rsQ"s
(zUghY*
-zUWRrOsQ|^
-zuWRrsQ=|f
zVCsSmy4mn[]-EevkmELK
zV=Rr"s<
-zVWRr
-zvWRrC
-z^W3Rr
-z]W3Rr
-z}W3Rr
-z~W3Rr"?p5sQ
-z`WRer
-z]WRgr
=---z]!WRr
-&z`WRr
-z`WRr
-z^WRr
-z]WRr
-z]WR'r
-z{WRr
-z}WRr
-z]WRr1r<JRRrRRRR
-z]WRr1s<U
-"z[WRrcsIym--X
-"z[WRrcsUy
-z]WRrD
-z}WRrD
-z@WRrDN/7RrcsMm-
-z]WRrDR?SRR
-z`WRrO
-z]WRrO
-z`WRr"?,`%X"?x
z_WRrX-z|GWRrh
-zWW3Rr4CpsD
-zWW3RrX
-zwWRr
-zWWRr
zWWRr4Cs||---DX%R
-zWWRrC
-zWWRrCp<e
-zwWRrCp,g
`ZXE,xR)R
`z"?XJ-Cx}
`z"?XJm
`z"?Xm
-zX^Rr
-zx^RrO
zx^RrsQ|{r1p-R
-zxWRr
-zXWRr
@ZX-zfWR
Z-YCpM
-zyWRr
-zyWRrCs<E%--
[Z^YX_
`ZyX-zWWRrC
-zZ^RrE>=---DRSRR
-zZWRr
:-z|ZWRr
-zzWRrOsQ|r_R
-zzWRrsQ=|r_R
zZXRr"