Analysis Date2014-03-04 06:10:34
MD5750be73bc1b5cbe4fa3d317a718679b3
SHA1fbc64a4ee0f19be3026d899cd53ca7fc1a8c050e

Static Details:

File typePE32 executable for MS Windows (GUI) Intel 80386 32-bit
Section.text md5: ab4ea97bf0d0ad53ed7be658abcdaf7a sha1: b6859eb32739a0f00067309ba3f93f40ea187de4 size: 1024
Section.rdata md5: a2feaf3ba629027ed0b7b0663a4836e0 sha1: 3b0ef5c293336d1f6446110672af463e64f55392 size: 512
Section.data md5: d41d8cd98f00b204e9800998ecf8427e sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 size: 0
Section.rsrc md5: 45f24a404969c4329abc5c51703db18d sha1: ef6c40c7742ddd9a1810366977578425b7726428 size: 37888
Timestamp2005-06-18 16:21:06
VersionLegalCopyright: Copyright (C) 2000
InternalName: MPIRing
FileVersion: 1, 0, 0, 1
CompanyName:
LegalTrademarks:
ProductName: MPIRing Application
ProductVersion: 1, 0, 0, 1
FileDescription: MPIRing MFC Application
OriginalFilename: MPIRing.EXE
PEhashbf471dc64704c73f2e726b42040b59207263ad33
IMPhash8aa48b00dd80d2085cbbd81726a688be
AVavgCrypt3.SP
AVaviraTR/Dropper.Gen
AVmsseTrojanDownloader:Win32/Cutwail.BS

Runtime Details:

Screenshot

Process
↳ C:\malware.exe

RegistryHKEY_CURRENT_USER\software\microsoft\windows\currentversion\run\kynivonsawat ➝
C:\Documents and Settings\Administrator\kynivonsawat.exe
RegistryHKEY_CURRENT_USER\software\microsoft\windows\currentversion\AppManagement ➝
NULL
Creates FileC:\Documents and Settings\Administrator\kynivonsawat.exe
Creates FileC:\Documents and Settings\Administrator\Application Data\Microsoft\Crypto\RSA\S-1-5-21-XXXXXXXXXX-XXXXXXXXXX-XXXXXXXXXX-500\a18ca4003deb042bbee7a40f15e1970b_666939c9-243b-475e-9504-51724db22670
Creates FileC:\Documents and Settings\Administrator\Local Settings\History\History.IE5\index.dat
Creates FileC:\Documents and Settings\Administrator\Cookies\index.dat
Creates FilePIPE\lsarpc
Creates File\Device\Afd\Endpoint
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\index.dat
Creates Mutexc:!documents and settings!administrator!local settings!history!history.ie5!
Creates MutexWininetConnectionMutex
Creates Mutexc:!documents and settings!administrator!cookies!
Creates Mutexc:!documents and settings!administrator!local settings!temporary internet files!content.ie5!
Creates Mutexkynivonsawat

Network Details:

DNSpru-nw.com
Type: A
69.25.128.172
DNSarcor.de
Type: A
151.189.21.100
DNSgrandecom.net
Type: A
66.90.130.6
DNSvmw.com
Type: A
208.91.0.132
DNSgcsu.edu
Type: A
168.16.211.192
DNSoregonstate.edu
Type: A
128.193.4.112
DNSuga.edu
Type: A
128.192.126.140
DNSbol.com.br
Type: A
200.147.3.199
DNSwanadoo.es
Type: A
62.37.237.15
DNSwanadoo.es
Type: A
62.37.237.16
DNScollegeclub.com
Type: A
66.150.124.82
DNScrosspaths.net
Type: A
162.39.145.20
DNStalstar.com
Type: A
199.44.84.4
DNSidea.com
Type: A
64.135.67.38
DNSworldnetatt.net
Type: A
144.160.36.42
DNSworldnetatt.net
Type: A
144.160.155.43
DNSinc.net
Type: A
8.26.65.18
DNSrucls.net
Type: A
50.63.97.1
DNSbailliegifford.com
Type: A
80.75.68.131
DNSmetallica.com
Type: A
141.101.112.6
DNSmetallica.com
Type: A
190.93.242.5
DNSmetallica.com
Type: A
190.93.243.5
DNSmetallica.com
Type: A
190.93.240.5
DNSmetallica.com
Type: A
190.93.241.5
DNSbackaviation.com
Type: A
193.23.116.131
DNSjrihealth.org
Type: A
208.73.210.29
DNSmvts.com
Type: A
70.167.2.67
DNSkettering.edu
Type: A
192.237.224.120
DNSewc.edu
Type: A
74.11.146.7
DNShanmail.net
Type: A
211.244.82.180
DNShanmail.net
Type: A
114.108.157.116
DNShanmail.net
Type: A
211.244.82.179
DNShanmail.net
Type: A
180.70.93.55
DNShanmail.net
Type: A
211.244.82.107
DNShanmail.net
Type: A
180.70.134.19
DNShanmail.net
Type: A
61.111.62.165
DNShanmail.net
Type: A
61.111.62.35
DNShanmail.net
Type: A
211.244.82.108
DNShanmail.net
Type: A
180.70.93.57
DNShanmail.net
Type: A
114.108.157.155
DNShanmail.net
Type: A
180.70.93.56
DNShanmail.net
Type: A
180.70.134.91
DNShanmail.net
Type: A
117.52.2.238
DNShanmail.net
Type: A
114.108.157.117
DNShanmail.net
Type: A
117.52.2.26
DNShanmail.net
Type: A
117.52.2.25
DNShanmail.net
Type: A
180.70.134.9
DNShanmail.net
Type: A
110.45.215.15
DNShanmail.net
Type: A
117.52.2.237
Flows TCP192.168.1.1:1038 ➝ 128.193.4.112:25
Flows TCP192.168.1.1:1039 ➝ 128.192.126.140:25
Flows TCP192.168.1.1:1040 ➝ 168.16.211.192:25
Flows TCP192.168.1.1:1041 ➝ 69.25.128.172:25
Flows TCP192.168.1.1:1042 ➝ 66.90.130.6:25
Flows TCP192.168.1.1:1043 ➝ 151.189.21.100:25
Flows TCP192.168.1.1:1044 ➝ 208.91.0.132:25
Flows TCP192.168.1.1:1045 ➝ 200.147.3.199:25
Flows TCP192.168.1.1:1046 ➝ 62.37.237.15:25
Flows TCP192.168.1.1:1047 ➝ 66.150.124.82:25
Flows TCP192.168.1.1:1048 ➝ 162.39.145.20:25
Flows TCP192.168.1.1:1049 ➝ 199.44.84.4:25
Flows TCP192.168.1.1:1050 ➝ 64.135.67.38:25
Flows TCP192.168.1.1:1051 ➝ 144.160.36.42:25
Flows TCP192.168.1.1:1052 ➝ 8.26.65.18:25
Flows TCP192.168.1.1:1053 ➝ 50.63.97.1:25
Flows TCP192.168.1.1:1054 ➝ 80.75.68.131:25
Flows TCP192.168.1.1:1055 ➝ 193.23.116.131:25
Flows TCP192.168.1.1:1056 ➝ 141.101.112.6:25
Flows TCP192.168.1.1:1057 ➝ 208.73.210.29:25
Flows TCP192.168.1.1:1058 ➝ 70.167.2.67:25
Flows TCP192.168.1.1:1059 ➝ 192.237.224.120:25
Flows TCP192.168.1.1:1060 ➝ 74.11.146.7:25
Flows TCP192.168.1.1:1061 ➝ 211.244.82.180:25

Raw Pcap
0x00000000 (00000)   c4feb063 64c0dd66 62b7ed69 70abd16c   ...cd..fb..ip..l
0x00000010 (00016)   3663e36f dcd34d73 4ff86076 95e7d278   6c.o..MsO.`v...x
0x00000020 (00032)   93dee27b a1d2c67e 27c8c081 adbdba84   ...{...~'.......
0x00000030 (00048)   33b3b487 f9ae588b 3f9ea88d d2f9bb90   3.....X.?.......
0x00000040 (00064)   58efb593 dee4af96 64daa999 eacfa39c   X.......d.......
0x00000050 (00080)   e8c647a0 afbc97a2 7cb091a5 5ae313a9   ..G.....|...Z...
0x00000060 (00096)   889b85ab 0e917fae a1ec92b1 27e28cb4   ............'...
0x00000070 (00112)   25d99cb7 33cd80ba d14625be 47b874c0   %...3....F%.G.t.
0x00000080 (00128)   c5ad6ec3 4ba368c6 d19862c9 578e5ccc   ..n.K.h...b.W.\.
0x00000090 (00144)   eae96fcf 6b3b68d2 fed463d5 83ca5dd8   ..o.k;h...c...].
0x000000a0 (00160)   02c057db 88b551de 86acf5e1 44a5cde4   ..W...Q.....D...
0x000000b0 (00176)   0a9297e8 a0a14b61 26434bed 147843f0   ......Ka&CK..xC.
0x000000c0 (00192)   326c27f3 b86121f6 4b7f4cf9 09b32efc   2l'..a!.K.L.....
0x000000d0 (00208)   5f6a40ff dd9d3479 db943205 2eef2f08   _j@...4y..2.../.
0x000000e0 (00224)   d07c8f0b cbc282e0 695074fa 20b32ffc   .|......iPt. ./.
0x000000f0 (00240)   3aa581                                :..

0x00000000 (00000)   177a9dfd b73bca                       .z...;.

0x00000000 (00000)   a2327eee 4f5ac4f1 5ab7edf4 5f3eb4f9   .2~.OZ..Z..._>..
0x00000010 (00016)   ee240802 abac0106 98dacf09 d163280c   .$...........c(.
0x00000020 (00032)   dcc0510f eab43512 74a32b17 6abbe81e   ..Q...5.t.+.j...
0x00000030 (00048)   6547c722 8a709526 a5ca2029 52f2662c   eG.".p.&.. )R.f,
0x00000040 (00064)   ff19ad2f b9a70c33 73356c36 205db239   .../...3s5l6 ].9
0x00000050 (00080)   52ecbb3d 8a7a7140 41a0b743 d36f9f47   R..=.zq@A..C.o.G
0x00000060 (00096)   b5bb764a 7cafef4d 29d73551 e3649554   ..vJ|..M).5Q.d.T
0x00000070 (00112)   088ef157 4a1a3b5b 9c30455f b9cfe061   ...WJ.;[.0E_...a
0x00000080 (00128)   442bf464 d7860768 abedff84 0ca12b8d   D+.d...h......+.
0x00000090 (00144)   4fb58ea3 d24150a8 602f12bb 3389a4be   O....AP.`/..3...
0x000000a0 (00160)   639fe0c6 37f972ca e61037d3 426941d6   c...7.r...7.BiA.
0x000000b0 (00176)   4c5becde 4def2159 8f594aea c04af4ed   L[..M.!Y.YJ..J..
0x000000c0 (00192)   82f9                                  ..

0x00000000 (00000)   73024ff6 54c2faf9 6c853dfd 944554     s.O.T...l.=..ET

0x00000000 (00000)   2329140c c3ea400f c1e15012 dc3b4e15   #)....@...P..;N.
0x00000010 (00016)   8d814618 e826421b ae22c41e e7ab1c21   ..F..&B..".....!
0x00000020 (00032)   e5a22c24 f3961027 798c0a2a ff81042d   ..,$...'y..*...-
0x00000030 (00048)   7811e52f 76086733 84fcd835 0af2d238   x../v.g3...5...8
0x00000040 (00064)   90e7cc3b 0977ad3e 8f6ca741 1562a144   ...;.w.>.l.A.b.D
0x00000050 (00080)   13594548 4eea7b4a 9adc754d 380df850   .YEHN.{J..uM8..P
0x00000060 (00096)   99615053 1f574a56 a54c4459 2b423e5c   .aPS.WJV.LDY+B>\
0x00000070 (00112)   1cd3345f 2ac71862 783dbd65 3eb20c68   ..4_*..bx=.e>..h
0x00000080 (00128)   af41ed6a 3537e76d bb2ce170 b9236374   .A.j57.m.,.p.#ct
0x00000090 (00144)   bab1bb76 405dcd79 ce9caf7c 5392a97f   ...v@].y...|S...
0x000000a0 (00160)   d287a382 587d9d85 490e0689 5702788b   ....X}..I...W.x.
0x000000b0 (00176)   fd32fa8e 63037e08 d4326494 ca735c97   .2..c.~..2d..s\.
0x000000c0 (00192)   e867409a 6e5d3a9d ec084ca0 a5e214a3   .g@.n]:...L.....
0x000000d0 (00208)   f38d26a6 79cd1a20 77c418ac b052e3ae   ..&.y.. w....R..
0x000000e0 (00224)   fe47ddb1 843dedb4 e62bd9b8 83c2b1ba   .G...=...+......
0x000000f0 (00240)   9db4b3be 8f96363d c83e1740 bae897c6   ......6=.>.@....
0x00000100 (00256)   502382ca ba187ccd 92c6724d a6a24ed2   P#....|...rM..N.
0x00000110 (00272)   1f4e60d5 a58d42d8 5a182bdc d62b3b5c   .N`...B.Z.+..+;\
0x00000120 (00288)   d1c117e1 e4f818e5 dca50f65 b082ebe9   ...........e....
0x00000130 (00304)   2912ccec af07c6ef 24f9c7f3 02a5be73   ).......$......s
0x00000140 (00320)   3338b2f8 ac117bfb 320775fe ab965501   38....{.2.u...U.
0x00000150 (00336)   40f26804 df342da2 e76e179e 986016a3   @.h..4-..n...`..
0x00000160 (00352)   b65488a5 3c4a82a8 3d14ebab cbcf5cae   .T..<J..=.....\.
0x00000170 (00368)   51ffdeb1 7f3afbb4 384bb9b7 d63f2bba   Q....:..8K...?+.
0x00000180 (00384)   bfce0bbd 45c48dc0 3a4deec3 84c98ac6   ....E...:M......
0x00000190 (00400)   963ae2c9 43b74b48 89c5454b 4eb9aed1   .:..C.KH..EKN...
0x000001a0 (00416)   834a2051 6158a755 d4330bdb 62297ddd   .J QaX.U.3..b)}.
0x000001b0 (00432)   f7d27b5e 59ae57e3 d43d38e6 58335067   ..{^Y.W..=8.X3Pg
0x000001c0 (00448)   66292cec 57b80cef 8da90ef3 9fa3       f),.W.........

0x00000000 (00000)   b0bd6658 35383b61 9b5f1665 0c10a46c   ..fX58;a._.e...l
0x00000010 (00016)   35daf575 d9b8f879 150d567e 1ef74482   5..u...y..V~..D.
0x00000020 (00032)   1cee5485 2ae23888 901cb994 71dc6498   ..T.*.8.....q.d.
0x00000030 (00048)   d4980e9d 8824f4a1 cab0cba4 5d0cdfa7   .....$......]...
0x00000040 (00064)   83c305ae 8bb5fdb1 2b772ab5 bed23db8   ........+w*...=.
0x00000050 (00080)   e3fb2dbc 2b25cabe c54910c2 b713f8c5   ..-.+%...I......
0x00000060 (00096)   3965cfc8 e68c15cc 93b45bcf 4d42bbd2   9e........[.MB..
0x00000070 (00112)   726b17d6 b4f760d9 de076bdd 23ad06e0   rk....`...k.#...
0x00000080 (00128)   c8d44ce3 75fc92e6 2224d9e9 54b3c0ed   ..L.u..."$..T...
0x00000090 (00144)   963f98f0 7b1ef6f3 05f53df7 b11c84fa   .?..{.....=.....
0x000000a0 (00160)   64aae3fd 11d22901 43613305 7887cf07   d.....).Ca3.x...
0x000000b0 (00176)   15ab450c d2ec6d85 2060082a 1238662d   ..E...m. `.*.8f-
0x000000c0 (00192)   575e9630 11ecf533 eeca5337 8ced2542   W^.0...3..S7..%B
0x000000d0 (00208)   305f6647 e15904c6 e349fe53 9960a55b   0_fG.Y...I.S.`.[
0x000000e0 (00224)   ed4e9b60 70c98569 2d824b6e 84a65b73   .N.`p..i-.Kn..[s
0x000000f0 (00240)   132f6a78 2c4311f7 a6e970fa f7c63d81   ./jx,C....p...=.
0x00000100 (00256)   7c329c85 1ac0fb88 336c4909 6e7a718e   |2......3lI.nzq.
0x00000110 (00272)   4659cf91 c82f1795 b1528d99 61feda19   FY.../...R..a...
0x00000120 (00288)   83c6039f bd2f79a3 f6dac623 fe4f08a9   ...../y....#.O..
0x00000130 (00304)   9e1135ac 589f94af f4c20ab4 136d5834   ..5.X........mX4
0x00000140 (00320)   a33398b9 250ae0bc d23126c0 8cbf85c3   .3..%....1&.....
0x00000150 (00336)   3be7cbc6 618d4948 a09c71cd b5c53fd1   ;...a.IH..q...?.
0x00000160 (00352)   075217d4 b4795dd7 164345db ab2f03de   .R...y]..CE../..
0x00000170 (00368)   85f8eae1 626653e5 b47390e8 799a4eeb   ....bfS..s..y.N.
0x00000180 (00384)   a327aeee 43e962f2 86d683f6 9f8644f9   .'..C.b.......D.
0x00000190 (00400)   302810fd 1ea3d07b 8be3167f 7709cc05   0(.....{....w...
0x000001a0 (00416)   ed98bc85 f2d88f8a 994c5910 4e741713   .........LY.Nt..
0x000001b0 (00432)   241c9594 ad29bd19 69b71c1d 81f40792   $....)..i.......
0x000001c0 (00448)   c106a923 7d940827 35220d9c 11e4942d   ...#}..'5".....-
0x000001d0 (00464)   236e2432 d3665ab2 f6269a37 5f4a103c   #n$2.fZ..&.7_J.<
0x000001e0 (00480)   4dd86f3f 4a35ac41 b4038db6 ee34eab9   M.o?J5.A.....4..
0x000001f0 (00496)   1de1714b 458476c0 9aabbcc3 3f241cc7   ..qKE.v.....?$..
0x00000200 (00512)   ee4bbd58 a6d91c5c 5301635f 318bf263   .K.X...\S.c_1..c
0x00000210 (00528)   ba6606e6 a440986a ab7d3ee9 dbf9b2e1   .f...@.j.}>.....
0x00000220 (00544)   89215473 42afb376 ef86f7f9 9020b290   .!TsB..v..... ..
0x00000230 (00560)   81721a96 185b649d 967c5c20 f4a6eea4   .r...[d..|\ ....
0x00000240 (00576)   aee8af23 18c2adab 089f552a 1e750731   ...#......U*.u.1
0x00000250 (00592)   d8526734 85caafb7 53580fbb a6928fc7   .Rg4....SX......
0x00000260 (00608)   44d996d0 fe66f6d3 ae2823d7 58b682da   D....f...(#.X...
0x00000270 (00624)   05dec8dd bf6b28e1 79f987e4 2621cee7   .....k(.y...&!..
0x00000280 (00640)   d34814eb 8d86716e 14797863 98aa3ff5   .H....qn.yxc..?.
0x00000290 (00656)   f615a9f9 5b41bffb 21cc4e              ....[A..!.N

0x00000000 (00000)   6d972ee1 27258ee4 ad1a88e7 26aa68ea   m...'%......&.h.
0x00000010 (00016)   ac9f62ed b2d3e4f0 f890def3 3e8050f6   ..b.........>.P.
0x00000020 (00032)   b70f31f9 3d052bfc c3fa24ff 3c8a0502   ..1.=.+...$.<...
0x00000030 (00048)   78146306 3e10070a 9165700c 0af5500f   x.c.>....ep...P.
0x00000040 (00064)   90ea4a12 16e04415 9cd53e18 15651f1b   ..J...D...>..e..
0x00000050 (00080)   135cc31e 27501321 9adff323 98137627   .\..'P.!...#..v'
0x00000060 (00096)   a6cae729 2cc0e12c e1d91f34 74353337   ...),..,...4t537
0x00000070 (00112)   edc4133a 73ba0d3d 3135b240 87a50143   ...:s..=15.@...C
0x00000080 (00128)   f834e245 7e2adc48 0420d64b 7dafb64e   .4.E~*.H. .K}..N
0x00000090 (00144)   03a5b051 899aaa54 1790a457 9c859e5a   ...Q...T...W...Z
0x000000a0 (00160)   0e157f5d 9c0a7960 92011d64 2393db66   ...]..y`...d#..f
0x000000b0 (00176)   0981cd6a 9f9059e3 257053e6 ad653b72   ...j..Y.%pS..e;r
0x000000c0 (00192)   315b3575 aaed9d78 38e00f7b b6d5097e   1[5u...x8..{...~
0x000000d0 (00208)   048e1b81 c2c00ffb 49b6f786 f945d889   ........I....E..
0x000000e0 (00224)   493bd28c cd30e28f 2f1f4694 f73a3e24   I;...0../.F..:>$
0x000000f0 (00240)   2ac63a80 367478fe 7c827201 3639f387   *.:.6tx.|.r.69..
0x00000100 (00256)   5086c3da 4071b7e0 32eb6860 46c744e5   P...@q..2.h`F.D.
0x00000110 (00272)   c87dd5e8 c7ae36ec 899fb0f0 f84c2f70   .}....6......L/p
0x00000120 (00288)   f3e20bf5 f9b36bf9 fec60379 d2a3dffd   ......k....y....
0x00000130 (00304)   5899d9                                X..

0x00000000 (00000)   f4eaf66e cc3d8574 e4                  ...n.=.t.

0x00000000 (00000)   981d84ed b96089f7 7e4b12fe 39673c04   .....`..~K..9g<.
0x00000010 (00016)   0c8d2210 af85ac18 2f0f8e1f 15c02c25   .."...../.....,%
0x00000020 (00032)   daaab52b f4898d34 4ed9193b 1662846b   ...+...4N..;.b.k
0x00000030 (00048)   e74b66c2 cc65b162 c87fe868 ee360f6f   .Kf..e.b...h.6.o
0x00000040 (00064)   14ee3575 470b767b 4a894c83 cd5b3a30   ..5uG.v{J.L..[:0
0x00000050 (00080)   c96fa447 de62ca5a 010e6c63 39cb4d6a   .o.G.b.Z..lc9.Mj
0x00000060 (00096)   74ae0570 cefd9176 0e81eb7c 34381283   t..p...v...|48..
0x00000070 (00112)   a3d9709e 7cbac9a6 7e89                ..p.|...~.

0x00000000 (00000)   2476ed0b 8b2b9312 1c7eb618 d799e01e   $v...+...~......
0x00000010 (00016)   30ad0525 9d11e92b bd5d4232 a30ee137   0..%...+.]B2...7
0x00000020 (00032)   41c71d3e 09496144 229a6e4a 55b7ae50   A..>.IaD".nJU..P
0x00000030 (00048)   7b6ed556 ee91bf5d d4423c63 07607c69   {n.V...].B<c.`|i
0x00000040 (00064)   20b1896f 53cec975 b09b2c84 859716ce    ..oS..u..,.....
0x00000050 (00080)   9a10af2f 01c82b35 7be36b3b 063e3442   .../..+5{.k;.>4B
0x00000060 (00096)   d4b7d247 6f05de4e 60a9795a 93c6b960   ...Go..N`.yZ...`
0x00000070 (00112)   8df865c7 62e0c2cd 93b57ad4 b64e10da   ..e.b.....z..N..
0x00000080 (00128)   3c3602e1 62ed28e7 950a69ed bbc18ff3   <6..b.(...i.....
0x00000090 (00144)   eedecff9 0ff2f4ff 424d1d06 6704440c   ........BM..g.D.
0x000000a0 (00160)   abf76b1e 638f802d de0e0136 492f1f3c   ..k.c..-...6I/.<
0x000000b0 (00176)   c9a94843 ff7a29bf 32446f4e b3d47a54   ..HC.z).2DoN..zT
0x000000c0 (00192)   7d757f60 24ae7e6d b2578874 e0ad2d7c   }u.`$.~m.W.t..-|
0x000000d0 (00208)   f0f29e82 6c304808 72193e98 42fc17a0   ....l0H.r.>.B...
0x000000e0 (00224)   ab7df0a6 6051437f b86c949c 1cf795a1   .}..`QC..l......
0x000000f0 (00240)   f07647a9 8f80c02a a7f2013d b6         .vG....*...=.

0x00000000 (00000)   b67b0ab0 1d31b0b6 a11dbabc 28a17ec2   .{...1......(.~.
0x00000010 (00016)   dc568ac8 407766ce 99cefbd4 721981da   .V..@wf.....r...
0x00000020 (00032)   dc3958e0 702336e6 6fa810ec 6e2debf1   .9X.p#6.o...n-..
0x00000030 (00048)   6db2c5f7 fe045bfe 54d64ed6 8a7165e4   m.....[.T.N..qe.
0x00000040 (00064)   a3c272ea afad66f0 1e5504fb 6b3e7701   ..r...f..U..k>w.
0x00000050 (00080)   23c37a08 e3cd434d 718888a9 fca77db3   #.z...CMq.....}.
0x00000060 (00096)   b882b4b9 056c27c0 2b234ec6 6ba6a7cc   .....l'.+#N.k...
0x00000070 (00112)   16c5fdd2 de4641d9 89eb2be0 59e7dae5   .....FA...+.Y...
0x00000080 (00128)   84041bec b7215bf2 f7a4b4f8 36a71b16   .....![.....6...
0x00000090 (00144)   2d4d3120 0352c92c ab6ba134 81430a40   -M1 .R.,.k.4.C.@
0x000000a0 (00160)   d4929646 217c094d e6660454 bb4eef59   ...F!|.M.f.T.N.Y
0x000000b0 (00176)   bb12d160 3b6bb4dd c9d6e06c 16f75173   ...`;k.....l..Qs
0x000000c0 (00192)   e1127c79 2196d57f bc7d2d86 49bf4b91   ..|y!....}-.I.K.
0x000000d0 (00208)   ce72d697 ab914315 494a6ea4 49ccb1aa   .r....C.IJn.I...
0x000000e0 (00224)   44e9f1b0 846c61b7 a0e874bf 0473fec3   D....la...t..s..
0x000000f0 (00240)   cb8c0ecc 8462424d 77988253 93e462dd   .....bBMw..S..b.
0x00000100 (00256)   739874e5 8ab5b4eb 29575c6e 452530f7   s.t.....)W\nE%0.
0x00000110 (00272)   0fa5edfd df5d2f04 4e763f0c 8417e78e   .....]/.Nv?.....
0x00000120 (00288)   393b2317 f999321f abd4c0a1 46a5152a   9;#...2.....F..*
0x00000130 (00304)   79c25530 c6abc836 db5ebf3e 8d6480c1   y.U0...6.^.>.d..
0x00000140 (00320)   318a4a4e 69735755 cbb4db5f 0b383566   1.JNisWU..._.85f
0x00000150 (00336)   2689426c c5bea0f0 8ac3c278 25e28a7f   &.Bl.......x%...
0x00000160 (00352)   f0fd4285 30819c8b a5aa9792 4dee6898   ..B.0.......M.h.
0x00000170 (00368)   13e5179f 0baf93a5 dbaccaab 332f9cb1   ............3/..
0x00000180 (00384)   d64bdcb7 16cfbdbe d24b5fc6 79f679cb   .K.......K_.y.y.
0x00000190 (00400)   e35291d3 57c3ab54 64c51e5b f0ac       .R..W..Td..[..

0x00000000 (00000)   d73a2ad7 65221cde 64a7f6e3 7df803ea   .:*.e"..d...}...
0x00000010 (00016)   7c7ddeef 08a75af6 037e92              |}....Z..~.

0x00000000 (00000)   e8720d8d 9d8c4b94 3b45889a 03c7cba0   .r....K.;E......
0x00000010 (00016)   61340aa7 5c9b32ad cfbefab3 a80980b9   a4..\.2.........
0x00000020 (00032)   46c2bcbf 01dee6c5 34fb26cc 3779fdd3   F.......4.&.7y..
0x00000030 (00048)   eb1716e1 669774e9 62b1abef 596bc03d   ....f.t.b...Yk.=
0x00000040 (00064)   16b8f4c7 7d6d9ace b08adad4 e3a71adb   ....}m..........
0x00000050 (00080)   8ec604e2 2c14e5e8 252e25ef 6320d4f5   ....,...%.%.c ..
0x00000060 (00096)   a1e40a44 0c93ac4c ce1f6a6d 8339a874   ...D...L..jm.9.t
0x00000070 (00112)   3bbe177b 03405b81 f1772c88 717adb8d   ;..{.@[..w,.qz..
0x00000080 (00128)   9c971b94 d3ad579c 06cb97a2 a48346a9   ......W.......F.
0x00000090 (00144)   45d3cbae 78a623b5 b30d4cbb d8c472c1   E...x.#...L...r.
0x000000a0 (00160)   f77b99c7 c5f34aee 7d782cf5 116298fa   .{....J.}x,..b..
0x000000b0 (00176)   3d881401 294e927d 2073720c 9ca96412   =...)N.} sr...d.
0x000000c0 (00192)   a8c30d19 c1141b1f c5b52625 f71ed02a   ..........&%...*
0x000000d0 (00208)   d825f530 32bf7bae ddddbf3d 23ec6f73   .%.02.{....=#.os
0x000000e0 (00224)   d49d137b bd4fcd82 1556768e ad782d94   ...{.O...Vv..x-.
0x000000f0 (00240)   7492759b df03d91c 0950552b f685b4b5   t.u......PU+....
0x00000100 (00256)   c84afcbd b84256dd 3d189360 d7e968e8   .J...BV.=..`..h.
0x00000110 (00272)   d68a74ee e2bf50f4 2aa64cfb 759fcd82   ..t...P.*.L.u...
0x00000120 (00288)   0391bd0a d0551e12 752a5b95 c296171d   .....U..u*[.....
0x00000130 (00304)   c11bf222 da6cff28 d553fb2f 39f5ebb2   ...".l.(.S./9...
0x00000140 (00320)   f07dd93a fcb2b540 089ea946 14899d4c   .}.:...@...F...L
0x00000150 (00336)   2fdaaa52 88aacef3 16dab2f2 4dc1abfa   /..R........M...
0x00000160 (00352)   fe1031                                ..1

0x00000000 (00000)   e1441e94 62c6f69a f3181aa1 a1ce2aa7   .D..b.........*.
0x00000010 (00016)   457d36ad 664ab4b3 392ef4b9 127979bf   E}6.fJ..9....yy.
0x00000020 (00032)   a3cb9cc5 441b94cb 6ad2bad1 8323c8d7   ....D...j....#..
0x00000030 (00048)   8f0ebcdd f5cb8ce4 ce16f0e9 f4cd16f0   ................
0x00000040 (00064)   27eb56f6 5a0897fc 41d15529 1d1de030   '.V.Z...A.U)...0
0x00000050 (00080)   a1097e37 c3f4c73c 933b5045 6bfe314c   ..~7...<.;PEk.1L
0x00000060 (00096)   c9d66653 fcf3a659 49dd1960 d05a9f76   ..fS...YI..`.Z.v
0x00000070 (00112)   7b79f57c 6045428b c734b799 de63b29f   {y.|`EB..4...c..
0x00000080 (00128)   3d1958a6 8a02cbac 8987a5b2 3534c6bb   =.X.........54..
0x00000090 (00144)   da767ad4 a1ef37db 551714e1 7ace3ae7   .vz...7.U...z.:.
0x000000a0 (00160)   8c1f48ed 980a3cf3 295df3f9 4715f8ff   ..H...<.)]..G...
0x000000b0 (00176)   e8511d0b 2b89c786 a9edf315 ec48321c   .Q..+........H2.
0x000000c0 (00192)   b7645c22 dd1b8328 68fcda2e 171f3436   .d\"...(h.....46
0x000000d0 (00208)   5833593c 11c160b9 a2137248 e393344f   X3Y<..`...rH..4O
0x000000e0 (00224)   f14a5b55 ea9b7e5b ec4b3763 360ab667   .J[U..~[.K7c6..g
0x000000f0 (00240)   fd239e6f 826194f0 7597d4f6 ed057c83   .#.o.a..u.....|.
0x00000100 (00256)   9355c98c 1a95cc97 c8c69874 1dc82546   .U.........t..%F
0x00000110 (00272)   d740e34c b7                           .@.L.

0x00000000 (00000)   c8769517 22c6211e cde47724 722d6b2c   .v..".!...w$r-k,
0x00000010 (00016)   a1d5eb37 f1b8f83e 7ea8f345 57f3784b   ...7...>~..EW.xK
0x00000020 (00032)   f5abb551 a361c657 c0abcf5f 63ebd26a   ...Q.a.W..._c..j
0x00000030 (00048)   f1d2c471 b6bdbf78 64735e7e 217f9489   ...q...xds^~!...
0x00000040 (00064)   af668690 49396c9d 5b2d73cc 5eab49d4   .f..I9l.[-s.^.I.
0x00000050 (00080)   239666db fbe548e1 52cdbbe7 05e0a8f5   #.f...H.R.......
0x00000060 (00096)   cf62fe05 847c3c0d 6cb3ba1a 6eb66b28   .b...|<.l...n.k(
0x00000070 (00112)   749f732f fcaac348 2f817950 3a46da56   t.s/...H/.yP:F.V
0x00000080 (00128)   a661995d cc18c063 4041e583 41b63d8f   .a.]...c@A..A.=.
0x00000090 (00144)   248ccda8 3a74a2b0 5bbd77c6 ced836cd   $...:t..[.w...6.
0x000000a0 (00160)   914a86d8 056645df 543f36eb 43f353f1   .J...fE.T?6.C.S.
0x000000b0 (00176)   eda62bfd dc60267b cbf2940f 9ca56b16   ..+..`&{......k.
0x000000c0 (00192)   81a7944f 0f8f8656 40b0ab5c 7931a162   ...O...V@..\y1.b
0x000000d0 (00208)   53207a68 3f3b68e5 d4867576 e16ed27c   S zh?;h...uv.n.|
0x000000e0 (00224)   c2bfdf82 b2f5d1ad 0258d74e 3fb0ec52   .........X.N?..R
0x000000f0 (00240)   ecfdf15a c3982cde 8bb08afb 528e4989   ...Z..,.....R.I.
0x00000100 (00256)   823c8391 6c52fcd3 9a9791d6 4e359a5e   .<..lR......N5.^
0x00000110 (00272)   7a56bf64 73d7b46a c823ba72 ca2cd4f4   zV.ds..j.#.r.,..
0x00000120 (00288)   4bb8aa7c e4e49584 bd514807 7ae0c793   K..|.....QH.z...
0x00000130 (00304)   70f8849b 4c440fa3 c34518cf 04aec852   p...LD...E.....R
0x00000140 (00320)   0fe91bdb 2f9c5de1 3b8751e7 d0e515f8   ..../.].;.Q.....
0x00000150 (00336)   e2c905                                ...

0x00000000 (00000)   128b2754 51935b60 4a164a67 3456b871   ..'TQ.[`J.Jg4V.q
0x00000010 (00016)   e315047e 0dea                         ...~..

0x00000000 (00000)   5f8e27f6 80d12c                       _.'...,

0x00000000 (00000)   6ff540bd c4d0abc7 db18c9d0 299006da   o.@.........)...
0x00000010 (00016)                                         

0x00000000 (00000)   bdf3886a 0569da74 8ae3ae7d 1cc49c86   ...j.i.t...}....
0x00000010 (00016)   94d8578f 9991b498 1a5ee6a5 799e65ae   ..W......^..y.e.
0x00000020 (00032)   f1b220b7 762df5bf fba7c9c8 80229ed1   .. .v-......."..
0x00000030 (00048)   c897efdb 80b254e5 d28c98ed 3d3b3af6   ......T.....=;:.
0x00000040 (00064)   c2b50eff 3acac907 d910d110 89b6ed1b   ....:...........
0x00000050 (00080)   ad64b825 0dc75534 daa5c23d 185d9e47   .d.%..U4...=.].G
0x00000060 (00096)   11e33092 29d3e4d0 04a449de a3ea50e7   ..0.).....I...P.
0x00000070 (00112)   0e99f2ef 86adadf8 43ad2c02 98a2560a   ........C.,...V.
0x00000080 (00128)   08b71113 8d31e61b 12acba24 8ac0752d   .....1.....$..u-
0x00000090 (00144)   02d53036 88d79052 5650e45b e730d264   ..06...RVP.[.0.d
0x000000a0 (00160)   4bdf736d cbf32e76 c06fad7f 50864688   K.sm...v.o..P.F.
0x000000b0 (00176)   641d5796 47165615 d0732620 b14adbd1   d.W.G.V..s& .J..
0x000000c0 (00192)   f7bf2cdc 627156e5 efe8a2ed 5ffd5df6   ..,.bqV....._.].
0x000000d0 (00208)   c6067dff bf48a983 15240217 c3bd9725   ..}..H...$.....%
0x000000e0 (00224)   2b897934 bb697d3d 8392614e 677d3dec   +.y4.i}=..aNg}=.
0x000000f0 (00240)   e7f1ac4e 26bd2ad3 ac4e7edc 658ad968   ...N&.*..N~.e..h
0x00000100 (00256)   71f66ac1 606639cd 44ffab52 576062dd   q.j.`f9.D..RW`b.
0x00000110 (00272)   d89bcde6 e3b722f0 97c75dfa f8939d7f   ......"...].....
0x00000120 (00288)   f2ae540a f7048f14 ee36e899 cefeb724   ..T......6.....$
0x00000130 (00304)   4613732d be272e36 329e8240 0fcfdbc5   F.s-.'.62..@....
0x00000140 (00320)   145ac350 c4ab6659 7dbea062 f5d25b6b   .Z.P..fY}..b..[k
0x00000150 (00336)   b0e59574 87ac55fb ab742586 274c9592   ...t..U..t%.'L..
0x00000160 (00352)   552bfb9a f47102a4 54c445ad 810192b5   U+...q..T.E.....
0x00000170 (00368)   8deb3abf 98177dd5 013f6528 08b3af31   ..:...}..?e(...1
0x00000180 (00384)   0a939d3a 55ee7d18 96fef435 d1         ...:U.}....5.

0x00000000 (00000)   8b1724b7 d38c75c1 f73aacca 521803d4   ..$...u..:..R...
0x00000010 (00016)   892222dd 5717e6e6 cabc52f0 43c904f9   ."".W.....R.C...
0x00000020 (00032)   74dd5402 b5ee780b 7b67cc14 347a061e   t.T...x.{g..4z..
0x00000030 (00048)   e0262727 e6a52431 524c9b39 18c5ee42   .&''..$1RL.9...B
0x00000040 (00064)   05708e4c f21a2e56 93714c86 97917ad4   .p.L...V.qL...z.
0x00000050 (00080)   20196c23 302a7b2c 93cc1638 0b512542    .l#0*{,...8.Q%B
0x00000060 (00096)   1651a04c e92f0d56 31a55e60 ae3aa17e   .Q.L./.V1.^`.:.~
0x00000070 (00112)   f91a2488 71428499 78f325ab 3c4a67b4   ..$.qB..x.%.<Jg.
0x00000080 (00128)   3bc139be 286cd9c7 d418fad0 208747dd   ;.9.(l...... .G.
0x00000090 (00144)   58250ff9 1a2aab03 6e13b40c 338c0716   X%...*..n...3...
0x000000a0 (00160)   e59e411f 914b6228 035ec532 ce3d103c   ..A..Kb(.^.2.=.<
0x000000b0 (00176)   366eae4a 3ab7f0ec 0e72ad80 d7c2e589   6n.J:....r......
0x000000c0 (00192)   353a2393 ee4c5d9c 33bb14a6 8f05b4b0   5:#..L].3.......
0x000000d0 (00208)   7d411fba e3f66c3a 07a591cc db8067d6   }A....l:......g.
0x000000e0 (00224)   478016e5 47480cf5 4484a3              G...GH..D..

0x00000000 (00000)   886b80dc 810114ec                     .k......

0x00000000 (00000)   c261d1f2 e3a4d6fc 211f4006 59c34611   .a......!.@.Y.F.
0x00000010 (00016)   282df41f 0b6c142a 2bb72234 a4c3d43c   (-...l.*+."4...<
0x00000020 (00032)   d5d72446 16e9484f d3f47e5a 09909568   ..$F..HO..~Z...h
0x00000030 (00048)   2ad39a72 8f7fc27c d0907485 20f8bd93   *..r...|..t. ...
0x00000040 (00064)   413bc39d 6e69bcad 201ff0df b6f8d9ea   A;..ni.. .......
0x00000050 (00080)   1ba523f5 865019fe 70939f07 b601a018   ..#..P..p.......
0x00000060 (00096)   2046222c 68bb7336 e34d0547 78acc957    F",h.s6.M.Gx..W
0x00000070 (00112)   1e57fe61 39be617e 0c564489 aa76b892   .W.a9.a~.VD..v..
0x00000080 (00128)   a9ed8a9c 62                           ....b

0x00000000 (00000)   8e9cc862 aa6bac70 0f18627a 6af5b883   ...b.k.p..bzj...
0x00000010 (00016)   ea42e592 2dfd9b9e 4d48aaa8 d3ba75b1   .B..-...MH....u.
0x00000020 (00032)   52335ebb 4dd2e1c7 26ba61fa c2c3907a   R3^.M...&.a....z
0x00000030 (00048)   746d1ed5 06afaf78 a28a1382 7569808b   tm.....x....ui..
0x00000040 (00064)   f0fb119c ea0ccba5 8d4cceb0 b0e0e860   .........L.....`
0x00000050 (00080)   4cb67f7b 016bd291 d13dba9d a9bcc8a7   L..{.k...=......
0x00000060 (00096)   8461adb0 e6a231bb c6e7b7c4 99c624ce   .a....1.......$.
0x00000070 (00112)   a829b0ec 2e324ff8 ea8ee502 4420f40b   .)...2O.....D ..
0x00000080 (00128)   81313b41 1ffd1c50 dc08535b 45ae7667   .1;A...P..S[E.vg
0x00000090 (00144)   2310e584 fb3a4e8f 232b539a 7a8494ac   #....:N.#+S.z...
0x000000a0 (00160)   a12db3b6 662be1c5 8782e513 0a6806c9   .-..f+.......h..
0x000000b0 (00176)   49b728ef 99fafb73 b184a411 64af0f1b   I.(....s....d...
0x000000c0 (00192)   b5c03324 a26bd32d 17cc8a37 a75bf940   ..3$.k.-...7.[.@
0x000000d0 (00208)   7d3b458c 63cbe163 aeab52f6 27bd76ff   };E.c..c..R.'.v.
0x000000e0 (00224)   149ae109 24dd7d13 ed80e71d c12d2428   ....$.}......-$(
0x000000f0 (00240)   766d0933 83bd3ef8 8955450e 99e6b79b   vm.3..>..UE.....
0x00000100 (00256)   d23ebaa5 968340af a14e9f35 c50e6bc2   .>....@..N.5..k.
0x00000110 (00272)   1ba3efcb 44                           ....D

0x00000000 (00000)   d2b678af 5b2a49ba 8c3e99c3 b3838acc   ..x.[*I..>......
0x00000010 (00016)   07fbc2d5 25a9fede 2b28dae8 be         ....%...+(...


Strings
..
.
(
V.
.
040904B0
1, 0, 0, 1
About4Quit the application; prompts to save documents
&About MPIRing...
About MPIRing
Account:
Account & Password
&Arrange Icons
Cancel
&Cascade
Close
&Close
Close the active document
CompanyName
&Copy	Ctrl+C
Copyright (C) 2000
Create a new document
Cu&t	Ctrl+X
?Display program information, version number and copyright
&Edit
Enter
Exit
E&xit
&File
FileDescription
FileVersion
Find
&Help
InternalName
LegalCopyright
LegalTrademarks
Make Ring
MPD Ring
MPIRin
MPIRin Document
MPIRing
MPIRing1
MPIRing Application
MPIRing.Document
MPIRing.EXE
MPIRing MFC Application
MPIRing Version 1.0
MS Sans Serif
&New	Ctrl+N
&New Window
Open
Open an existing document
&Open...	Ctrl+O
OriginalFilename
Password:
&Paste	Ctrl+V
Please enter an account to run the mpd's under.  All spawned processes will launch in this context:
ProductName
ProductVersion
Quit
Ready
Refresh
Save0Save the active document with a new name
Save As
Save &As...
&Save	Ctrl+S
Save the active document
SCRL
StringFileInfo
TEXTINCLUDE
&Tile
Translation
&Undo	Ctrl+Z
VarFileInfo
VS_VERSION_INFO
&Window
|.~#!`
2M\2!WU
-2XKVp
3UZRWd
{}4ot5
6p)9n:5P
6se7_H
\|6W"A
%=7>A<E
8=J%aTu7
9I0N/3
{A#)cZ
B~c-m/S
c_b	pd
#define _AFX_NO_OLE_RESOURCES
#define _AFX_NO_PROPERTY_RESOURCES
#define _AFX_NO_SPLITTER_RESOURCES
#define _AFX_NO_TRACKER_RESOURCES
d%qU`g
dxu e)^c
#endif
#endif //_WIN32
F7@f\g
f~	'h!
Fy	ZY:
gdi32.dll
GetModuleHandleA
GetObjectW
GetProcAddress
gJqC/Pn
G?NhtN
GO3_&LX
;GoG7H
h5e-bb
#if !defined(AFX_RESOURCE_DLL) || defined(AFX_TARG_ENU)
#ifdef _WIN32
#include "afxres.h"
#include "afxres.rc"         // Standard components
#include "res\MPIRing.rc2"  // non-Microsoft Visual C++ edited resources
J2XI|fV
kernel32.dll
LANGUAGE 9, 1
LoadImageA
</_m3-#4
@mAn!U
MessageBoxW
'}Mf}}
Mp7o&{
_mrPt)
NbQ?!Yn
or(qwK
+pc<Zl
#pragma code_page(1252)
.rdata
resource.h
R.wk8)
[sI5b	P
s'vTO_
!This program cannot be run in DOS mode.
tP.,Id
user32.dll
"v+JX$(-
#v#L|4
}V	l6w
 vWN'Mkr
wpQ|uG*
xcwdPjj
Y5,yvA^
!`!Y6rl}H.
ZD^r*g
zTRNwr