Analysis Date2015-11-05 20:01:03
MD513b9a791d6ff72273b8993d260517d1b
SHA1f53c0c0e02a13bfbcd42326fa0558e0509fade13

Static Details:

File typePE32 executable for MS Windows (GUI) Intel 80386 32-bit
Section.text md5: 66119945c6a2b488dfe26c2ed317a866 sha1: 2bb1da9b05835d9ca5bc320cb7db7c31a7370dda size: 79360
Section.rdata md5: 8e046a3a2ed3a3ae386e9ad312aa4274 sha1: 5ce035d0a3cc1314c3a5be55ccf66297a128506d size: 14336
Section.data md5: 68ebcd5a034af696ef115c366f987087 sha1: 573554318ff9b993fb8ed1ca2b8598fadc9781a8 size: 13312
Section.rsrc md5: 35db23faedcce96496076a9e18787f95 sha1: 708d2acbe08f03031f6d244178e3a3bc306be21b size: 1536
Timestamp2014-07-03 19:27:25
VersionCompanyName: One Corp.
FileVersion: 1.0.2.2
ProductVersion: 1.0.2.2
PackerMicrosoft Visual C++ 8
PEhash2c2d9e148d1bcda26a93917a44ef684620c9c959
IMPhash80b7eca8ee2fa7dba6838bde455a2646
AVRisingNo Virus
AVMcafeeDownloader-FAFP!13B9A791D6FF
AVAvira (antivir)No Virus
AVTwisterTrojan.Cap147173.oahq
AVAd-AwareGen:Variant.Zusy.98444
AVAlwil (avast)Agent-AUID [Trj]
AVEset (nod32)Win32/Wigon.PI
AVGrisoft (avg)SHeur4.BXSU
AVSymantecDownloader.Upatre!gen5
AVFortinetW32/Kryptik.TINY!tr
AVBitDefenderGen:Variant.Zusy.98444
AVK7No Virus
AVMicrosoft Security EssentialsTrojan:Win32/Bagsu!rfn
AVMicroWorld (escan)Gen:Variant.Zusy.98444
AVMalwareBytesTrojan.Agent
AVAuthentiumNo Virus
AVFrisk (f-prot)No Virus
AVIkarusTrojan.Win32.Wigon
AVEmsisoftGen:Variant.Zusy.98444
AVZillya!No Virus
AVKasperskyTrojan.Win32.Generic
AVTrend MicroTROJ_UPATRE.SMN5
AVCAT (quickheal)TrojanPWS.Kegotip.WR4
AVVirusBlokAda (vba32)Trojan.Cutwail
AVPadvishNo Virus
AVBullGuardGen:Variant.Zusy.98444
AVArcabit (arcavir)Gen:Variant.Zusy.98444
AVClamAVNo Virus
AVDr. WebTrojan.DownLoad.64914
AVF-SecureGen:Variant.Zusy.98444
AVCA (E-Trust Ino)No Virus
AVRisingNo Virus
AVMcafeeDownloader-FAFP!13B9A791D6FF
AVAvira (antivir)No Virus
AVTwisterTrojan.Cap147173.oahq
AVAd-AwareGen:Variant.Zusy.98444
AVAlwil (avast)Agent-AUID [Trj]
AVEset (nod32)Win32/Wigon.PI
AVGrisoft (avg)SHeur4.BXSU
AVSymantecDownloader.Upatre!gen5
AVFortinetW32/Kryptik.TINY!tr
AVBitDefenderGen:Variant.Zusy.98444
AVK7No Virus
AVMicrosoft Security EssentialsTrojan:Win32/Bagsu!rfn
AVMicroWorld (escan)Gen:Variant.Zusy.98444
AVMalwareBytesTrojan.Agent
AVAuthentiumNo Virus
AVFrisk (f-prot)No Virus
AVIkarusTrojan.Win32.Wigon

Runtime Details:

Screenshot

Process
↳ C:\malware.exe

RegistryHKEY_CURRENT_USER\software\microsoft\windows\currentversion\run\zegcannaccix ➝
C:\Documents and Settings\Administrator\zegcannaccix.exe
RegistryHKEY_CURRENT_CONFIG\Software\Microsoft\windows\CurrentVersion\Internet Settings\ProxyEnable ➝
NULL
RegistryHKEY_CURRENT_USER\software\microsoft\windows\currentversion\AppManagement ➝
NULL
RegistryHKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ProxyBypass ➝
1
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\vinings[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\arma.com[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\cocoima[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\nwpolice[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\anaht.org[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\is2[1].htm
Creates FileC:\Documents and Settings\Administrator\Application Data\Microsoft\Crypto\RSA\S-1-5-21-XXXXXXXXXX-XXXXXXXXXX-XXXXXXXXXX-500\a18ca4003deb042bbee7a40f15e1970b_666939c9-243b-475e-9504-51724db22670
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\rlking[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\webolog[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\cilink.co[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\index.dat
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\kajigaya[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\bjfhs[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\elaana[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\ediorder[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\History\History.IE5\index.dat
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\himex[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\himex[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\cdnvideo[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\ac2r[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\restpro[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\vinings[1].htm
Creates FileC:\Documents and Settings\Administrator\Cookies\index.dat
Creates FilePIPE\lsarpc
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\ncfbla[1].htm
Creates File\Device\Afd\Endpoint
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\ark.co[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\wtt[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\nwpolice[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\ac2r[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\ejsus[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\e-maple[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\laoficina[2].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\autolux[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\ncfbla[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\1ban-grp[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\bshooter[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\restpro[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\myshn[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\ftmobile[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\elaana[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\rlking[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\ascmag[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\genusis[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\wd1[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\cilink.co[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\vdoherty[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\ocati[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\vmccny[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\anaht.org[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\clmp[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\jabb[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\alexlely[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\ftmobile[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\thilman[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\bshooter[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\asta[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\ark.co[1].htm
Creates FileC:\Documents and Settings\Administrator\zegcannaccix.exe
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\webolog[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\jabb[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\zetafax[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\zetafax[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\emaspub[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\ediorder[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\lsiaa[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\laoficina[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\wd1[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\clmp[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\kajigaya[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\vdoherty[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\arma.com[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\cocoima[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\myshn[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\ascmag[1].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\e-maple[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\vinings[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\ftmobile[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\arma.com[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\bshooter[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\himex[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\ac2r[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\restpro[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\nwpolice[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\zetafax[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\cilink.co[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\ncfbla[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\rlking[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\vdoherty[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\ark.co[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\ediorder[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\webolog[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\wd1[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\laoficina[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\anaht.org[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\e-maple[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\kajigaya[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\clmp[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\cocoima[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\BSDHA97U\jabb[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\ascmag[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IIQ3LGTM\myshn[1].htm
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\D4Z32ED8\elaana[1].htm
Creates Mutexc:!documents and settings!administrator!local settings!history!history.ie5!
Creates MutexWininetConnectionMutex
Creates Mutexc:!documents and settings!administrator!cookies!
Creates Mutexc:!documents and settings!administrator!local settings!temporary internet files!content.ie5!
Creates Mutexzegcannaccix
Winsock DNSlaoficina.us
Winsock DNSammi.fr
Winsock DNSplatex.com
Winsock DNSwtt.at
Winsock DNSkohnrath.com
Winsock DNSincom79.com
Winsock DNScottage.ie
Winsock DNSbroeder.com
Winsock DNSzetafax.com
Winsock DNSrlking.com
Winsock DNSemps.be
Winsock DNSelaana.com
Winsock DNSabgllaw.com
Winsock DNSfortubiz.com
Winsock DNSbjfhs.com
Winsock DNSpips-ks.org
Winsock DNScdnvideo.ru
Winsock DNSbshooter.com
Winsock DNSmyshn.com
Winsock DNSascmag.com
Winsock DNS1ban-grp.com
Winsock DNSemaspub.at
Winsock DNScnr.edu
Winsock DNSlsiaa.org
Winsock DNSmelmasti.com
Winsock DNStfp.com.pl
Winsock DNSnwpolice.org
Winsock DNShroi.net
Winsock DNSjabb.it
Winsock DNSe-imt.co.jp
Winsock DNSediorder.com
Winsock DNShotsalsa.org
Winsock DNSfiftyone.com
Winsock DNSburyhill.com
Winsock DNSbitop.de
Winsock DNSsymbian.org
Winsock DNSmaxicom.lv
Winsock DNSgreenade.com
Winsock DNSkoreaii.com
Winsock DNSmsnw.co.jp
Winsock DNSaddon.de
Winsock DNSwd1.net
Winsock DNScocoima.com
Winsock DNSbd-style.com
Winsock DNSvmccny.com
Winsock DNS603888.com
Winsock DNSent.com.hk
Winsock DNSmekoos.com
Winsock DNSgotee.com
Winsock DNSkajigaya.com
Winsock DNSgoosgoos.com
Winsock DNSwebolog.com
Winsock DNSanaht.org.br
Winsock DNSsencope.com
Winsock DNSrkengg.com
Winsock DNSumeyama.net
Winsock DNSl2german.net
Winsock DNSalzhima.net
Winsock DNSrestpro.com
Winsock DNSvdoherty.com
Winsock DNSdaisho.info
Winsock DNSnettlinx.org
Winsock DNSl-h-s.co.uk
Winsock DNSis2.de
Winsock DNSrmfew.org
Winsock DNSarma.com.eg
Winsock DNSwhgrp.com
Winsock DNSejsus.com
Winsock DNSshades.org
Winsock DNSagm-tec.com
Winsock DNSplancom.de
Winsock DNSsozolife.com
Winsock DNSvinings.com
Winsock DNSintecpro.com
Winsock DNSthilman.net
Winsock DNSalexlely.com
Winsock DNSocati.com
Winsock DNSesvwp.com
Winsock DNSyuuhou.com
Winsock DNShimex.hu
Winsock DNSasta.pl
Winsock DNSautolux.hu
Winsock DNS3dporno.com
Winsock DNSclmp.fr
Winsock DNSe-maple.net
Winsock DNSncfbla.org
Winsock DNSetheuma.com
Winsock DNSftmobile.com
Winsock DNSgenusis.com
Winsock DNSnarec.co.jp
Winsock DNSark.co.za
Winsock DNSlogicool.com
Winsock DNSe-thera.com
Winsock DNShelpedv.com
Winsock DNSimoveis.net
Winsock DNSac2r.net
Winsock DNSiffk.ch
Winsock DNScilink.co.jp
Winsock DNSmvgh.org
Winsock DNSnbli.org

Network Details:

DNShdredirect-lb-399551664.us-east-1.elb.amazonaws.com
Type: A
54.174.31.254
DNShdredirect-lb-399551664.us-east-1.elb.amazonaws.com
Type: A
54.208.74.215
DNS3dporno.com
Type: A
204.15.255.35
DNSmsnw.co.jp
Type: A
210.229.185.7
DNSe-imt.co.jp
Type: A
112.78.125.92
DNSaddon.de
Type: A
217.5.190.219
DNSthilman.net
Type: A
184.168.221.22
DNSejsus.com
Type: A
50.116.1.81
DNSent.com.hk
Type: A
180.188.192.50
DNScottage.ie
Type: A
104.28.5.39
DNScottage.ie
Type: A
104.28.4.39
DNSbjfhs.com
Type: A
123.57.9.177
DNScilink.co.jp
Type: A
203.183.64.160
DNSmelmasti.com
Type: A
182.50.130.72
DNSkohnrath.com
Type: A
50.97.132.146
DNSesvwp.com
Type: A
162.144.36.8
DNSl2german.net
Type: A
5.45.111.114
DNSkoreaii.com
Type: A
59.106.19.135
DNSsozolife.com
Type: A
162.249.1.4
DNSfiftyone.com
Type: A
199.102.227.192
DNSplatex.com
Type: A
5.39.12.158
DNSmaxicom.lv
Type: A
91.90.225.6
DNSocati.com
Type: A
190.8.176.194
DNSemaspub.at
Type: A
213.208.135.121
DNSrmfew.org
Type: A
208.112.93.22
DNSnbli.org
Type: A
72.32.107.51
DNSfortubiz.com
Type: A
198.15.76.187
DNSburyhill.com
Type: A
91.146.108.148
DNSumeyama.net
Type: A
59.106.165.171
DNSl-h-s.co.uk
Type: A
89.248.61.110
DNSark.co.za
Type: A
196.22.142.174
DNSascmag.com
Type: A
72.32.84.216
DNSis2.de
Type: A
37.61.201.174
DNSasta.pl
Type: A
79.96.91.146
DNSvmccny.com
Type: A
65.36.225.86
DNSiffk.ch
Type: A
213.239.216.155
DNSnarec.co.jp
Type: A
203.142.210.204
DNSnettlinx.org
Type: A
202.53.64.209
DNSyuuhou.com
Type: A
210.172.144.179
DNSmekoos.com
Type: A
198.50.97.114
DNSrestpro.com
Type: A
70.34.33.191
DNShimex.hu
Type: A
95.140.33.19
DNSgotee.com
Type: A
198.49.23.145
DNSgotee.com
Type: A
198.185.159.144
DNSgotee.com
Type: A
198.49.23.144
DNSsymbian.org
Type: A
217.19.248.132
DNSplancom.de
Type: A
37.187.147.152
DNSbroeder.com
Type: A
108.179.225.84
DNSbd-style.com
Type: A
64.74.223.42
DNShdredirect-lb-399551664.us-east-1.elb.amazonaws.com
Type: A
54.208.74.215
DNShdredirect-lb-399551664.us-east-1.elb.amazonaws.com
Type: A
54.174.31.254
DNSvdoherty.com
Type: A
91.216.241.52
DNSelaana.com
Type: A
173.192.60.199
DNSbitop.de
Type: A
212.223.44.66
DNSshades.org
Type: A
66.228.56.17
DNShotsalsa.org
Type: A
205.186.149.236
DNSgenusis.com
Type: A
202.157.177.137
DNScnr.edu
Type: A
148.100.100.48
DNScdnvideo.ru
Type: A
195.42.184.153
DNSbshooter.com
Type: A
75.126.185.189
DNSabgllaw.com
Type: A
65.254.238.132
DNShroi.net
Type: A
207.97.239.213
DNSe-thera.com
Type: A
211.1.229.2
DNSagm-tec.com
Type: A
91.121.93.5
DNSclmp.fr
Type: A
212.83.134.218
DNS1ban-grp.com
Type: A
119.245.215.129
DNSautolux.hu
Type: A
193.23.139.61
DNS603888.com
Type: A
122.152.128.138
DNSac2r.net
Type: A
195.14.0.113
DNSgoosgoos.com
Type: A
112.175.59.201
DNSincom79.com
Type: A
211.233.89.227
DNSdaisho.info
Type: A
210.157.25.188
DNSintecpro.com
Type: A
104.28.22.49
DNSintecpro.com
Type: A
104.28.23.49
DNSpips-ks.org
Type: A
192.185.90.127
DNSetheuma.com
Type: A
166.63.126.61
DNSimoveis.net
Type: A
74.208.64.110
DNSwhgrp.com
Type: A
69.7.0.34
DNSmvgh.org
Type: A
104.130.102.54
DNSgreenade.com
Type: A
150.60.68.127
DNSrlking.com
Type: A
205.251.171.84
DNScocoima.com
Type: A
157.112.191.41
DNSjabb.it
Type: A
193.166.255.171
DNSftmobile.com
Type: A
184.168.221.18
DNSlaoficina.us
Type: A
160.153.35.201
DNSwtt.at
Type: A
149.154.153.142
DNSncfbla.org
Type: A
209.62.69.74
DNSe-maple.net
Type: A
153.122.50.240
DNSwd1.net
Type: A
62.75.229.50
DNSwebolog.com
Type: A
69.172.201.208
DNSediorder.com
Type: A
69.85.244.98
DNSarma.com.eg
Type: A
196.219.199.148
DNSammi.fr
Type: A
213.186.33.4
DNSvinings.com
Type: A
173.236.228.19
DNSanaht.org.br
Type: A
198.57.204.187
DNSnwpolice.org
Type: A
204.244.185.157
DNShelpedv.com
Type: A
62.75.177.37
DNSalzhima.net
Type: A
175.45.139.35
DNSzetafax.com
Type: A
212.78.88.163
DNSlsiaa.org
Type: A
54.209.55.18
DNSalexlely.com
Type: A
194.247.31.31
DNSmyshn.com
Type: A
84.200.4.147
DNStfp.com.pl
Type: A
77.55.134.107
DNSrkengg.com
Type: A
DNSlogicool.com
Type: A
DNSkajigaya.com
Type: A
DNSsencope.com
Type: A
DNSemps.be
Type: A
HTTP POSThttp://rkengg.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://thilman.net/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://3dporno.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://ent.com.hk/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://ejsus.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://addon.de/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://e-imt.co.jp/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://msnw.co.jp/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://cottage.ie/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://bjfhs.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://cilink.co.jp/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://melmasti.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://kohnrath.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://esvwp.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://l2german.net/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://koreaii.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://sozolife.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://fiftyone.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://platex.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://maxicom.lv/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://cilink.co.jp/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://ocati.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://emaspub.at/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://ocati.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://rmfew.org/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://nbli.org/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://fortubiz.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://buryhill.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://umeyama.net/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://l-h-s.co.uk/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://emaspub.at/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://ark.co.za/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://ark.co.za/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://ascmag.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://is2.de/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://asta.pl/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://ascmag.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://vmccny.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://iffk.ch/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://narec.co.jp/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://is2.de/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://nettlinx.org/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://asta.pl/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://yuuhou.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://vmccny.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://mekoos.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://restpro.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://restpro.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://himex.hu/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://gotee.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://symbian.org/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://plancom.de/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://broeder.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://bd-style.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://kajigaya.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://vdoherty.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://himex.hu/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://elaana.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://kajigaya.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://vdoherty.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://elaana.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://bitop.de/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://shades.org/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://hotsalsa.org/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://genusis.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://cnr.edu/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://cdnvideo.ru/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://bshooter.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://genusis.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://cdnvideo.ru/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://abgllaw.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://hroi.net/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://e-thera.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://agm-tec.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://bshooter.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://clmp.fr/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://1ban-grp.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://autolux.hu/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://clmp.fr/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://603888.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://ac2r.net/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://autolux.hu/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://1ban-grp.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://goosgoos.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://incom79.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://daisho.info/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://intecpro.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://pips-ks.org/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://ac2r.net/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://etheuma.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://imoveis.net/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://whgrp.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://mvgh.org/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://greenade.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://rlking.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://cocoima.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://jabb.it/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://rlking.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://cocoima.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://jabb.it/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://ftmobile.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://ftmobile.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://laoficina.us/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://laoficina.us/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://wtt.at/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://ncfbla.org/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://e-maple.net/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://wd1.net/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://webolog.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://wtt.at/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://ediorder.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://ncfbla.org/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://e-maple.net/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://webolog.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://wd1.net/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://ediorder.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://arma.com.eg/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://ammi.fr/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://vinings.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://arma.com.eg/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://vinings.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://anaht.org.br/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://anaht.org.br/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://nwpolice.org/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://helpedv.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://alzhima.net/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://zetafax.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://lsiaa.org/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://alexlely.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://nwpolice.org/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://myshn.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://zetafax.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://lsiaa.org/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://alexlely.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://tfp.com.pl/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
HTTP POSThttp://myshn.com/
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
Flows TCP192.168.1.1:1042 ➝ 184.168.221.22:80
Flows TCP192.168.1.1:1043 ➝ 54.174.31.254:80
Flows TCP192.168.1.1:1044 ➝ 204.15.255.35:80
Flows TCP192.168.1.1:1037 ➝ 50.116.1.81:80
Flows TCP192.168.1.1:1038 ➝ 217.5.190.219:80
Flows TCP192.168.1.1:1039 ➝ 112.78.125.92:80
Flows TCP192.168.1.1:1040 ➝ 210.229.185.7:80
Flows TCP192.168.1.1:1045 ➝ 180.188.192.50:80
Flows TCP192.168.1.1:1041 ➝ 104.28.5.39:80
Flows TCP192.168.1.1:1046 ➝ 123.57.9.177:80
Flows TCP192.168.1.1:1047 ➝ 203.183.64.160:80
Flows TCP192.168.1.1:1048 ➝ 182.50.130.72:80
Flows TCP192.168.1.1:1049 ➝ 50.97.132.146:80
Flows TCP192.168.1.1:1050 ➝ 162.144.36.8:80
Flows TCP192.168.1.1:1051 ➝ 5.45.111.114:80
Flows TCP192.168.1.1:1052 ➝ 59.106.19.135:80
Flows TCP192.168.1.1:1053 ➝ 162.249.1.4:80
Flows TCP192.168.1.1:1054 ➝ 199.102.227.192:80
Flows TCP192.168.1.1:1055 ➝ 5.39.12.158:80
Flows TCP192.168.1.1:1056 ➝ 91.90.225.6:80
Flows TCP192.168.1.1:1057 ➝ 203.183.64.160:80
Flows TCP192.168.1.1:1058 ➝ 190.8.176.194:80
Flows TCP192.168.1.1:1059 ➝ 213.208.135.121:80
Flows TCP192.168.1.1:1060 ➝ 190.8.176.194:80
Flows TCP192.168.1.1:1061 ➝ 208.112.93.22:80
Flows TCP192.168.1.1:1062 ➝ 72.32.107.51:80
Flows TCP192.168.1.1:1063 ➝ 198.15.76.187:80
Flows TCP192.168.1.1:1064 ➝ 91.146.108.148:80
Flows TCP192.168.1.1:1065 ➝ 59.106.165.171:80
Flows TCP192.168.1.1:1066 ➝ 89.248.61.110:80
Flows TCP192.168.1.1:1067 ➝ 213.208.135.121:80
Flows TCP192.168.1.1:1068 ➝ 196.22.142.174:80
Flows TCP192.168.1.1:1069 ➝ 196.22.142.174:80
Flows TCP192.168.1.1:1070 ➝ 72.32.84.216:80
Flows TCP192.168.1.1:1071 ➝ 37.61.201.174:80
Flows TCP192.168.1.1:1072 ➝ 79.96.91.146:80
Flows TCP192.168.1.1:1073 ➝ 72.32.84.216:80
Flows TCP192.168.1.1:1074 ➝ 65.36.225.86:80
Flows TCP192.168.1.1:1075 ➝ 213.239.216.155:80
Flows TCP192.168.1.1:1076 ➝ 203.142.210.204:80
Flows TCP192.168.1.1:1077 ➝ 37.61.201.174:80
Flows TCP192.168.1.1:1078 ➝ 202.53.64.209:80
Flows TCP192.168.1.1:1079 ➝ 79.96.91.146:80
Flows TCP192.168.1.1:1080 ➝ 210.172.144.179:80
Flows TCP192.168.1.1:1081 ➝ 65.36.225.86:80
Flows TCP192.168.1.1:1082 ➝ 198.50.97.114:80
Flows TCP192.168.1.1:1083 ➝ 70.34.33.191:80
Flows TCP192.168.1.1:1084 ➝ 70.34.33.191:80
Flows TCP192.168.1.1:1085 ➝ 95.140.33.19:80
Flows TCP192.168.1.1:1086 ➝ 198.49.23.145:80
Flows TCP192.168.1.1:1087 ➝ 217.19.248.132:80
Flows TCP192.168.1.1:1088 ➝ 37.187.147.152:80
Flows TCP192.168.1.1:1089 ➝ 108.179.225.84:80
Flows TCP192.168.1.1:1090 ➝ 64.74.223.42:80
Flows TCP192.168.1.1:1091 ➝ 54.208.74.215:80
Flows TCP192.168.1.1:1092 ➝ 91.216.241.52:80
Flows TCP192.168.1.1:1093 ➝ 95.140.33.19:80
Flows TCP192.168.1.1:1094 ➝ 173.192.60.199:80
Flows TCP192.168.1.1:1095 ➝ 54.208.74.215:80
Flows TCP192.168.1.1:1096 ➝ 91.216.241.52:80
Flows TCP192.168.1.1:1097 ➝ 173.192.60.199:80
Flows TCP192.168.1.1:1098 ➝ 212.223.44.66:80
Flows TCP192.168.1.1:1099 ➝ 66.228.56.17:80
Flows TCP192.168.1.1:1100 ➝ 205.186.149.236:80
Flows TCP192.168.1.1:1101 ➝ 202.157.177.137:80
Flows TCP192.168.1.1:1102 ➝ 148.100.100.48:80
Flows TCP192.168.1.1:1103 ➝ 195.42.184.153:80
Flows TCP192.168.1.1:1104 ➝ 75.126.185.189:80
Flows TCP192.168.1.1:1105 ➝ 202.157.177.137:80
Flows TCP192.168.1.1:1106 ➝ 195.42.184.153:80
Flows TCP192.168.1.1:1107 ➝ 65.254.238.132:80
Flows TCP192.168.1.1:1108 ➝ 207.97.239.213:80
Flows TCP192.168.1.1:1109 ➝ 211.1.229.2:80
Flows TCP192.168.1.1:1110 ➝ 91.121.93.5:80
Flows TCP192.168.1.1:1111 ➝ 75.126.185.189:80
Flows TCP192.168.1.1:1112 ➝ 212.83.134.218:80
Flows TCP192.168.1.1:1113 ➝ 119.245.215.129:80
Flows TCP192.168.1.1:1114 ➝ 193.23.139.61:80
Flows TCP192.168.1.1:1115 ➝ 212.83.134.218:80
Flows TCP192.168.1.1:1116 ➝ 122.152.128.138:80
Flows TCP192.168.1.1:1117 ➝ 195.14.0.113:80
Flows TCP192.168.1.1:1118 ➝ 193.23.139.61:80
Flows TCP192.168.1.1:1119 ➝ 119.245.215.129:80
Flows TCP192.168.1.1:1120 ➝ 112.175.59.201:80
Flows TCP192.168.1.1:1121 ➝ 211.233.89.227:80
Flows TCP192.168.1.1:1122 ➝ 210.157.25.188:80
Flows TCP192.168.1.1:1123 ➝ 104.28.22.49:80
Flows TCP192.168.1.1:1124 ➝ 192.185.90.127:80
Flows TCP192.168.1.1:1125 ➝ 195.14.0.113:80
Flows TCP192.168.1.1:1126 ➝ 166.63.126.61:80
Flows TCP192.168.1.1:1127 ➝ 74.208.64.110:80
Flows TCP192.168.1.1:1128 ➝ 69.7.0.34:80
Flows TCP192.168.1.1:1129 ➝ 104.130.102.54:80
Flows TCP192.168.1.1:1130 ➝ 150.60.68.127:80
Flows TCP192.168.1.1:1131 ➝ 205.251.171.84:80
Flows TCP192.168.1.1:1132 ➝ 157.112.191.41:80
Flows TCP192.168.1.1:1133 ➝ 193.166.255.171:80
Flows TCP192.168.1.1:1134 ➝ 205.251.171.84:80
Flows TCP192.168.1.1:1135 ➝ 157.112.191.41:80
Flows TCP192.168.1.1:1136 ➝ 193.166.255.171:80
Flows TCP192.168.1.1:1137 ➝ 184.168.221.18:80
Flows TCP192.168.1.1:1138 ➝ 184.168.221.18:80
Flows TCP192.168.1.1:1139 ➝ 160.153.35.201:80
Flows TCP192.168.1.1:1140 ➝ 160.153.35.201:80
Flows TCP192.168.1.1:1141 ➝ 149.154.153.142:80
Flows TCP192.168.1.1:1142 ➝ 209.62.69.74:80
Flows TCP192.168.1.1:1143 ➝ 153.122.50.240:80
Flows TCP192.168.1.1:1144 ➝ 62.75.229.50:80
Flows TCP192.168.1.1:1145 ➝ 69.172.201.208:80
Flows TCP192.168.1.1:1146 ➝ 149.154.153.142:80
Flows TCP192.168.1.1:1147 ➝ 69.85.244.98:80
Flows TCP192.168.1.1:1148 ➝ 209.62.69.74:80
Flows TCP192.168.1.1:1149 ➝ 153.122.50.240:80
Flows TCP192.168.1.1:1150 ➝ 69.172.201.208:80
Flows TCP192.168.1.1:1151 ➝ 62.75.229.50:80
Flows TCP192.168.1.1:1152 ➝ 69.85.244.98:80
Flows TCP192.168.1.1:1153 ➝ 196.219.199.148:80
Flows TCP192.168.1.1:1154 ➝ 213.186.33.4:80
Flows TCP192.168.1.1:1155 ➝ 173.236.228.19:80
Flows TCP192.168.1.1:1156 ➝ 196.219.199.148:80
Flows TCP192.168.1.1:1157 ➝ 173.236.228.19:80
Flows TCP192.168.1.1:1158 ➝ 198.57.204.187:80
Flows TCP192.168.1.1:1159 ➝ 198.57.204.187:80
Flows TCP192.168.1.1:1160 ➝ 204.244.185.157:80
Flows TCP192.168.1.1:1161 ➝ 62.75.177.37:80
Flows TCP192.168.1.1:1162 ➝ 175.45.139.35:80
Flows TCP192.168.1.1:1163 ➝ 212.78.88.163:80
Flows TCP192.168.1.1:1164 ➝ 54.209.55.18:80
Flows TCP192.168.1.1:1165 ➝ 194.247.31.31:80
Flows TCP192.168.1.1:1166 ➝ 204.244.185.157:80
Flows TCP192.168.1.1:1167 ➝ 84.200.4.147:80
Flows TCP192.168.1.1:1168 ➝ 212.78.88.163:80
Flows TCP192.168.1.1:1169 ➝ 54.209.55.18:80
Flows TCP192.168.1.1:1170 ➝ 194.247.31.31:80
Flows TCP192.168.1.1:1171 ➝ 77.55.134.107:80
Flows TCP192.168.1.1:1172 ➝ 84.200.4.147:80

Raw Pcap

Strings
.
CC
.
.
\
 
t

042504B3
1.0.2.2
CompanyName
dclass
Edit
FileVersion
                                 H
         (((((                  H
Hekig
         h((((                  H
KERNEL32.DLL
mscoree.dll
One Corp.
ProductVersion
StringFileInfo
SysListView32
Translation
Value
VarFileInfo
VS_VERSION_INFO
~	?)@@@
<@@@@@
|?@@@@
|@@@@%@
                          
 @@@@@@@
[@@@@@
@>@@@@
@@"<%=
@@@|_*
@@@.$<
@@@@@@
@@@@@@)
@@@@@@}
@@@@@@@
@@@@@@@,
@@@@@@@{
@@@@@@@}<
@@@@@@@@
@@@@@@@@@@
@@@@@@@@@@@@
@@@@@@@@@@@@|
@@@@@@@@@@@@;
@@@@@@@@@@@@@@
@@@@@@@@@@@@@@@@
@@@@@@@@@@@%@
@@@@@@@$
@@@@@@$
@@@@@@%@@@@
@@@@%@
@@@%@`
@@@%@"
@@@%@@
@@@%@*
@@%@@@@@@@@@@
%@@@@@@@@@@@@
0`@@@@@@@@
0@@@@%@
@005dH
@00j@%
@00p@oSb@
 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
0=3ck{c
0A@@Ju
0C`dB;
@@@@@@0E
0gOg,@7i<@
0gP@C@
0HuH+F1
0@I`@2A
0I=)C;
@@@@@@@@@@@@0J
0SSSSS
0tAs@.
@0@@@x@@@
0@@@@@@@@@@@@@@@@@@@@@@@@@X
0Zk@Op@@@@@@@@
1/@@@@%@
1ABv+D@B
@1@H48
2bb8`Bt
2*b|Bc
2DP%G{4=0,
@2{hNA
@@!2PVA
2Qe`4c*%4D
@@@%@3
3@@@@%@
34mHDv<
  3$5Cb
3798@@@x@@@
@@@@@@@@@@@@3C
3dkJk@@@@@
3HH@4@blA
3qAb,q
3!@WH D
@@@3ZgO/
_@4@@@@@@@
(4{@@@
@4@@@@
4@@@@@
4{0/B9i$
45P@@@@%@
4[,7=GBb
%4,@@8
@@@%@4A@#
4AT@$8
,4BIj'c
@4DbHLU@@@@@@@
@|4/Dn
.@4!E8?
@@4FBX
4$gkpAApD@
4Grkq8
4%HAVb
4@HKIh
4[)I(x
4JEAG*4cU2R=
-4@JsC/
@4@*P@G(A
4@SZtHEc@@@@@@@@
4UK@PA
4,@@@x@@@@
4XtL`w
5@@@@@
!51 @@4
(5b0A@
5,B4A@
@@@5BD4}
5bOnz	
@5Fbi@x@@@@@@@@@@
5H}&r%
>5j-b&XHK
@@@@@@@@@@@@5KY
5@@@x@@@
(@6@@@
6b@@@@@
6cR@<b{
6H@@@@@@@@
6sD@@:cC\U$@
7~u4UI
@@ }8&@
|&83AX
8D H9/
8H8@@@
~8$LO2
@{8nbhu
8r~YY@
8Sbt/ P
8:@@@@@@@@@@@@@@@@@@@@@@@@@X
@@@@9b	
9!bR@@@
9]dIcdbr
9g@@@@
9O*t2AD
@@@%@a
@A@@/`
A2DQ'@$
A3(3!XKZ
a3@@@x@@@
A42@2t
A,4N2.@
@A@@86Q"
@@AA]}!
}AAp )
@AA@tZ
@@@@@@@Ab
 @`AB@
AB@@@@
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
@Ab@s@@
@A@@&C\
Ac00@@@
A@&c|A
A^@cLXmtCb
AE~RDK4{
AFcr@@@
AG*bB*p
AHy	v@
@Ai6qCI
A@J%@;
@A@@Jeb
A/k8CJu
@{+AKB<Io
"-AL+c
AljkD,$
ALR@C@
An application has made an attempt to load the C runtime library incorrectly.
@@@ANh
	:@A($O>@)\
AODs%j
}Ap@@@@@@@@
Ap@@@@@
APC54@b
ApEOA@
@@@AQS5W
=%ARB|@
ArtLBU5@
</assembly>
<assemblyIdentity
		<assemblyIdentity
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
- Attempt to initialize the CRT more than once.
- Attempt to use MSIL code from this assembly during native code initialization
@A@@UA`
{AUEC&
August
@A@@V:b<@
Av@BN@`
;.@A#VRO<@@
AVWAf9
AxC@@@@@@@
<{ ,b@@@@
@@@'b+
@@@@}b
@@@@@@b
@@@@@@@@@@@@b
@@@@@@/B
@@@@@@@@@@@@B
@@@@@@@@@@@@B`
B@@@@@@@
b0tbAhb@
b1)&tC
.b2cF~
b4%ARiPC
@@@@b@4{@=n
B`@4@O
,B=@4(zCU\
)bA@@@@@
bA=@@@@@
bA@@$2k
bA$(Br
@@b@aH
BAH8=/GKA=&
bA^xAk
@@bb *&
bb@@@@@
@@@@@@@@@bB
/Bb5@x@@@@@@@@@@
@bbb	E
BBbF|s2
$.BbdU?
b@BMb}
BBW$sz
BCGErA
bc^@x@@@@@@@@@@
bD@@@@%@
@#bd0q
@BDAYPq
@;B@dj@
B@+dmB
bec@@@
:bfb0A@
@BFB@Sp
(Bfyp7@
BG@@$ 
+BG@@@x@@@@
@@@@@@@@@@@@BH
@@@BH@	D
biO@g=
b<iqL%
bJoCo!
bK<Mw&
bK@&@O
$B{#l@@
@(BL@@@@%@
Bl`b;@@@x@@@@
b/o)2A
bO<@%49c
b@OL5<HJ
B, =P<
BpA@E@O
@BP@DV@MG
bPj BA4
BR 4#A}
(bR 6hzE
bRA8d%@byB|
b_	s#b
%BTU8@
@@@BUAs2gO
BUEgu@
buS@}A
BUwwb@<
@@@@@@@@@@@@bw
b@x@@@@@@@@@@
@b@@@@@@@@@@@@@@@@@@@@@@@@@X
b@@@@@@@@@@@@@@@@@@@@@@@@@X
B@@@x@@@@
,BXDAF
byKmDh
b-zcbI
bzSB'P
@bZt*B
@@@@@@c@
c@}@)%
c@@@@@@@
/=^C>@@@@@@@
(C@@@@%@
@@@@@C
@@@@@@!C`$
@@@@@@@@@@@@C
@@@@@@@@@@@@@C
@@@%@C
@%C@@@
C@@@@@@@
C@@@@@@@@
C3A-<|HZC
@C5It}
cA1C`u
c"A Ah-Av@6jF%w
CaPJ@g@d14@@@@@@@
=;C@,!b
cb~5@'
cB?7B,
@cbhO}
@@@CBP-
,@cd0~
cD4=FBU
CDQC@@@@
@ceD8a
cFb1pZ4`],
cFQ%gP~
@@@@@cH
c`IT,v
c@j,s{q
@@@@C@L
clH@"bXAb
cLJprIpA
Cm!@@@x@@@@
`CNs&@
COMCTL32.dll
CorExitProcess
CpbHDvn0eR
C$PHF4
CreateWindowExW
- CRT not initialized
cs@@@@@@@@@@@@@@@@@@@@@@@@@X
Ct@@@@@@@@
@@@CTBA
@ctYSh
cU@@@@%@
CU@@@@@
CvbG@@@@@
@@c@Vp.O((#@
@c@@@x@@@
c@@@x@@@@
@C@x@@@@@@@@@@
cxPcpA
@@@@@@d
d@@@@@@@@
d@@@@%@
@D@@@@
D@@@@@
D3|Al/
dA@@`E
@.data
D!A@@@x@@@@
db0FlE
@<DBA9Uc@
@@@@D@(c
DCHkBG
`/dCLn
,Dd~&@-
dD@}{$3)
dddd, MMMM dd, yyyy
December
DecodePointer
DefWindowProcW
DeleteCriticalSection
</dependency>
<dependency>
	</dependentAssembly>
	<dependentAssembly>
<description></description>
DestroyWindow
"DhA5C
d@ib0A@
@@DIPRIH-
DispatchMessageW
DJ@@@@%@
DJI24P
Dk@@@@
Dl@@@@@@@
Dm@!E;
?dNDLJ
DOMAIN error
Dpb@@@@
@@@@@@DqU0
d_@\@@R
DrawTextW
Ds@@@@@
&DUA@y\
+Dv%.$
D|@@@x@@@@
D@@@x@@@
@@@@@@e
@e@@@@@
@@@%@@E
E4 CY@
E6_24B
@@eA,D
eb@@@@@@@
e@@bjj S[@@u
EB&KA0
=eb/XZ2x
EcLdHI
eDjH$9E
ED,@,sf
e@DVB(
EhAAGH|X@@@
eHJT@@@
EJUc2D
E~J@@@x@@@
e,mA?@@
EncodePointer
EndPaint
EnterCriticalSection
EO8DD$(
er@@@@%@
@@@@@@eU
EUj/bO0@4
(-e(:X
E(@@@x@@@@
E@x@@@@@@@@@@
ExitProcess
EZA/g`
@;EzB(
+E@@@z@B8
f@@@@%@
&;F@@@@
F@ AA@@A
$fBbaYE@g
February
FillRect
FindClose
FindFirstFileW
FindNextFileW
fj`@40
fjHF0@
- floating point support not loaded
,fLOcp@
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
FMw48AC
Fob,<c
FreeEnvironmentStringsA
FreeEnvironmentStringsW
Friday
@f'T&E
$FTREA
FXH@@@@@
@FZP4KM
@@@@@@@@@@@@g
@@@@@@@@@@@@g@.
g@@@@@@@@
G@@@@@
@g4JF;
%G4@@@x@@@@
` gA$@@
Gb}%B@bAG
GetACP
GetActiveWindow
GetClientRect
GetCommandLineA
GetCPInfo
GetCurrentDirectoryW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentStrings
GetEnvironmentStringsW
GetFileSize
GetFileType
GetLastActivePopup
GetLastError
GetLocaleInfoA
GetMessageW
GetModuleFileNameA
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessWindowStation
GetScrollInfo
GetStartupInfoA
GetStdHandle
GetStringTypeA
GetStringTypeW
GetSystemMetrics
GetSystemTimeAsFileTime
GetTickCount
GetUserObjectInformationA
\gK@@@@@
g@mXylH,Aibc
GQp%*$DH$9
@=)\G@x@@@@@@@@@@
G@@@@@@@@@@@@@@@@@@@@@@@@@X
@@@@@@@@h
@@@@@@@@h@@@@@
@@@@@h@
@@@@h@@@@@
@@@%@@@@h@@@@@
@h@@@@@%@@@@@@
@@@%@H
H@@@@@@@
H2@@7bO
@?H4c*P@%%Gv
@h4@ E
H4OAbE
@@@@H6
HB0Opr
HBsMcB
%Hc^AO
@hd=6.@
HeapAlloc
HeapCreate
HeapFree
HeapReAlloc
HeapSize
@)HeB@
@.HfeCO
h,FFj@
HH:mm:ss
@@@h,j
HJD@)!
h|Kc@c
Hkce[c
<\h<L@@@@%@
hL{%!A
*@=#h(r
HSC<r*Dt
hUv&!C
@@hX@h@@@@@
@@hX@h@@@@@?
@@hX@h@@@@@1
@@hX@h@@@@@A
@@hX@h@@@@@\|A
@@hX@h@@@@@-H
@@hX@h@@@@@NOs
@@hX@h@@@@@O
@@hX@h@@@@@PCg
@@hX@h@@@@@St+bDCQ8
@@hX@h@@@@@t2PB
@@hX@h@@@@@VObfS
@@hX@h@@@@@y
=,$H}yAgAHx
(!H{Z6
i@@@@@
@@@@@@@I/
I@A@@@@@@@@
@@iB@A
Ib@cj1
Ib@gU@@@@@@@@
i@cDt@
iHb@@@@%@
@@@@@@@iJ
@@i%L~I
InitCommonControlsEx
InitializeCriticalSectionAndSpinCount
InterlockedDecrement
InterlockedIncrement
Ios (b
IsDebuggerPresent
IsValidCodePage
i@@@x@@@@
j_$0@@@x@@@@
J@@2RA
J4OrL@
JanFebMarAprMayJunJulAugSepOctNovDec
January
Jb@DI:
@@@@j$:CA
@@@@@@@@@@@@JCbg
@jhQDoD
@JJAA0z
j@j ^V
@JKk@cU	@
Jl;7@{
@jLC4x
JPd'@@
`JQ@@4@
j@tB@@@@%@
jTbe4w
J@x&hPZ
@@@%@k)
KB@AIg
@@KcG@
KCO0@p
KERNEL32.dll
kEZ C Ax
K@iSkcN
k,q]'d
ktgO$5
kvi(D	D&
k-|@Y8
@@@@@@l
l@@@@@
@@@@@@@L
L4,jcf
l5@@@@%@
,L<A4Aub
			language="*"
L@BGi4
LbTm`t~
@@@@@@LC
LCMapStringA
LCMapStringW
LeaveCriticalSection
\Lg@x@@@@@@@@@@
L@H@@@@@@@@
.l@hPIHy
L@IcbP
LoadCursorA
LoadIconA
LoadLibraryA
LOmrZH{dCA
@%LP@A
l@q%#T
lr0q<c
lstrcatW
lstrcpynW
lstrlenW
LtcF@*@@@
L@UCKO=
@@@@@@M
@M@@@@@
M?@@@@@@@@
$@@M2o
``@M4R
M@6D#,Pb
MessageBoxA
@@@@@@@@@@@@mF@BDO
Microsoft Visual C++ Runtime Library
MLcdy\Y
MM/dd/yy
Monday
MultiByteToWideChar
@@@%@&n)
`n0XlH
NAb3/b
	name="Company.Product.Name"
			name="Microsoft.Windows.Common-Controls"
:NC@@@
Nd@%RL
@nGc@A
@=(N<M
(NO(%c
- not enough space for arguments
- not enough space for environment
- not enough space for locale information
- not enough space for lowio initialization
- not enough space for _onexit/atexit table
- not enough space for stdio initialization
- not enough space for thread data
November
NR@@@@
O`@@@@%@
>O242(
@ObpJ[5R@
October
`OHoUD
OH@x@@@@@@@@@@
@@OLx#
OOH\@@@x@@@@
OS@@@@@
O@x@@@@@@@@@@
OY4BOk
P(@@@@
P@@@@@@@@
P@{5CS
PaCEU)v
pBOOA@$
P@,"CA
pD>bf*
@p@DdS=A@
pLe)3cA
Please contact the application's support team for more information.
@@@Plr*
,|PMAp
PostQuitMessage
PO(Xb5,U
PPPPPPPP
pqD?@@C
			processorArchitecture="*"
	processorArchitecture="*"
Program: 
<program name unknown>
P@s9=-rc(@
Pu^@@@@
			publicKeyToken="6595b64144ccf1df"
- pure virtual function call
q(26dc
q@4dCKX
q(/61kA
Q6@.XEAX
@/\qbAE0@
q'.;b*E
@qg9AIJv@
Q@HE@@@
Q%IBTB
q%o@4L
Q=p(B"7MAr
@*qPs@(GC
Q@R0c@@@@@
Q@rcH5Y
QueryPerformanceCounter
@@@:*r
r&[@@@@
R@@@@@@@
R@@@@@@@@
%r9BT:
rA@@@@@@@
@(RADbG
@rA#@M
R-A-Y{
RbAjPEA
Rbb:@@@@@
R,b@g@
`.rdata
RegisterClassExW
!rE=M@
!=~RJdL
`@ROn-
RP@@@@@@@@@@@@@@@@@@@@@@@@@X
@@@@@@@@@@@@RRUED1s,
r&SY,J
RtlUnwind
runtime error 
Runtime Error!
r/@@@x@@@
r@x@@@@@@@@@@
@@@@@@!S
S@@@@%@
@S3dBPzNC
@s4XH@
s)5_HQ44Z
sA@q6,g}/
sA$RPB
Saturday
sAZt%E6`DC
/s=bXf@@@@@
Sc@v$dUKB(Bd
@@@@@@SDT
SendMessageW
September
SetHandleCount
SetLastError
SetUnhandledExceptionFilter
S{Fbd!
ShowWindow
@sICH+>b
SiCOD+
SING error
%+SLOE 
sq):1H}{
sS@@@@@@@
`sS]<B
sS/@b0(H
Sunday
SunMonTueWedThuFriSat
S{[[W ABbt
s@@@x@@@
@SyNHt
@@@@@@t
@@@@@@@T
@@@%@T
t0rcgQ\
@@@@t4
@@@%@TA<tz
[tAU~N<#
_@Tb@&
TbG@@@@@@@@@@@@@@@@@@@@@@@@@X
TELTcL!bF
TerminateProcess
TEZbagb[~
This application has requested the Runtime to terminate it in an unusual way.
This indicates a bug in your application.
This indicates a bug in your application. It is most likely the result of calling an MSIL-compiled (/clr) function from a native constructor or from DllMain.
!This program cannot be run in DOS mode.
t$hTqA
Thursday
tJL@@@@
TJ>p@F
< tK<	tG
@@@t@L
tL@AHF
TLOSS error
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
t%mI<@@@@@@@@@@@@@@@@@@@@@@@@@X
t@Ob{CB=
T_ODga
)TOdyXC
TranslateMessage
TrbJ$c
t"SS9]
t$<"u	3
Tuesday
;t$,v-
t+WWVPV
			type="win32"
	type="win32"
@@@@@@U
u@4G@@@x@@@
u5BcKt
@@@@@@@*uB
#Ub0A@
UC}4@@@@
U&Dl4%
{U@EB9
@#Ug^P*@qZ
u%H$bA
^ulK^.2
- unable to initialize heap
- unable to open console device
- unexpected heap error
- unexpected multithread lock error
UnhandledExceptionFilter
UpdateWindow
UQPXY]Y[
URJDC@
@@UR@O
URPQQhh-A
USER32.dll
USER32.DLL
uS@@@x@@@
U@x@@@@@@@@@@
UxKE@D.(
@@@@=v-
v+?@@@@@@@
V!;2tK
v4@@@@@@@@
 V55gO
@VA<S\
	version="1.0.0.0"
			version="6.0.0.0"
V-fvUb
vhv@@@@@
VirtualAlloc
VirtualFree
v	N+D$
vo2mDB4
v(ss	A
v@@@@@@@@@@@@@@@@@@@@@@@@@X
@@@@@@w
@@@@@@W
wbb@x@@@@@@@@@@
WDAaA@@
Wednesday
$W%FG@@@@@@@@
WideCharToMultiByte
WINTRUST.dll
WinVerifyTrust
wK4,Ae
\Wk4.b
WriteFile
`!@@@x@@@
~"@@@x@@@@
.@x@@@@@@@@@@
{@x@@@@@@@@@@
@@@@@@@x@@@
@@@@@@@x@@@|
@@@@@@@x@@@]=
@@@@@@@x@@@}
@@@@@@@x@@@$
@@@%@x@
@@@x@@
@@@x@@;;
@@@x@@/
@@@x@@{<
@@@x@@@
@@@x@@@@
@@%@@x@@
@x@@@@@@@@@@
@@@@@@@@@@@@@@@@@@@@@@@@@X
@@@@@@@X@@@
@@@@X@@@
@@@%@;X
*@@@@@@@@@@@@@@@@@@@@@@@@@X
X8d@@@@
@@@x@@A
@@@@@@@x@@@AD
@@@@@@@x@@@AOCl>8C
@@@@@@@x@@@B
@@@@@@@x@@@bH\0E
@@@x@@,bR
@@@x@@&D
@@@x@@e
xec@@04O
@@@@@@@x@@@EJ
(XHC(D/
@@@x@@Hh
@@@@@@@x@@@iD
x> k{.@
@@@@@@@x@@@l@c
@@@x@@M
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
@@@@@@@x@@@O
XOHJn5@
@@@x@@Q&
@@@x@@r(@
X$@R@@@@@@@
@@@x@@SD
XSt/\4
Xs@@@x@@@@
xt@.`~
@@@x@@U
@@@x@@UV
@@@@@@@x@@@=v
xvLlRe:s
@@@@@@@x@@@x
@@@@@@@x@@@z
@@@x@@z
@@@@@@@x@@@ZH[
@@@@@@@@@@@@y
@@@@@@@@@@@@<y
Y4@LbNq{
|yb@CJLAb
YbxKO@r
ycLZ@@
y!@/E_@
(y=E\]Hg
>=Yt1j
@@@@y&X
@@@@@@z
z@@@@@@@
{|Z`-,
@@@@Z\45
 Z,"b4K
@Z@:b@A
.Z|BOj
zc5ws4b
@zCZ(~@
@~Z^HD
Z|QC3eB^
z @@@@@@@@@@@@@@@@@@@@@@@@@X
ZXHc@4
zYD@bkl