Fight crime.
Unravel incidents... one byte at a time.
Copyright SANS Institute
Author Retains Full Rights
This paper is from the SANS Computer Forensics and e-Discovery site. Reposting is not permited without express written permission.
Interested in learning more?
Check out the list of upcoming events offering
"Advanced Digital Forensics, Incident Response, and Threat Hunting (FOR508)"
at http://digital-forensics.sans.orghttp://digital-forensics.sans.org/events/
Analysis of an Unknown Binary, Analysis of a Windows 95 System,
and Legal Issues from Copyrighted Mateials on Publicly Available Systems
fu
ll r
igh
ts.
GCFA Practical version 1.4, parts 1, 2a, and 3
David Cragg
original date 05 August 2004
resubmit date 27 September 2004
04
,A
ut
ho
rr
eta
ins
Abstract: An unknown binary, recovered from a forensic disk image, is identified
as a version of bmap. Analysis of a windows 95 system on a FAT filesystem
yields information about the user's activities, despite the limitations of the FAT file
system. A quick review of statutes and guidance when copyrighted material or
child pornography is found on publicly available servers on the organization's
network.
©
SA
NS
In
sti
tu
te
20
Key fingerprint = AF19 FA27 2F94 998D FDB5 DE3D F8B5 06E4 A169 4E46
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
1.0
Part 1 - Analysis of an Unknown Binary .....................................................4
1.1
Background ............................................................................................4
1.2
Binary Details .........................................................................................4
1.3
Program Description ...............................................................................4
1.4
Forensic Details......................................................................................8
1.5
Program Identification...........................................................................10
1.6
Legal Implications.................................................................................11
1.7
Interview Questions ..............................................................................12
1.7
Case Information ..................................................................................12
1.7.1
Advice............................................................................................16
1.8
Additional Information ...........................................................................17
2.0
Part 2 - Forensic Analysis on an Unknown System..................................18
2.1
Case Synopsis......................................................................................18
2.2
Description of System...........................................................................18
2.3
Hardware details:..................................................................................18
2.4
Image Media.........................................................................................18
2.5
Media Analysis .....................................................................................19
2.5.1
Media Analysis System Description...............................................19
2.5.2
File system ....................................................................................20
2.5.3
Operating System..........................................................................20
2.5.4
Malware.........................................................................................20
2.5.5
Applications ...................................................................................21
2.5.6
Users .............................................................................................22
2.5.7
Email .............................................................................................22
Key fingerprint
= AF19 FA27 2F94 998D FDB5 DE3D F8B5 06E4 A169 4E46
2.5.8
Logs...............................................................................................22
2.5.9
Web Cache and History Files ........................................................23
2.5.10 Recycle Bin ...................................................................................24
2.5.11 Recent Items Folder ......................................................................24
2.5.12 Registry .........................................................................................25
2.5.13 Start-up processes ........................................................................26
2.6
Timeline Analysis..................................................................................27
2.6.1
FAT File System ............................................................................28
2.6.2
Installation Date.............................................................................28
2.6.3
Updates and Patches ....................................................................29
2.7
Deleted File Recovery ..........................................................................30
2.8
String Search........................................................................................31
2.9
Conclusions ..........................................................................................33
3.0
Part 3 - Legal Issues Concerning Materials on Publicly Available Servers
35
3.1
Statutes Relating to Copyright Infringement .........................................35
3.2
Actions for Handling of Copyrighted Material........................................36
3.3
Child Pornography Statutes..................................................................36
3.4
Handling of Child Pornography.............................................................37
4.0 References....................................................................................................38
Appendix A .........................................................................................................40
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Appendix B .........................................................................................................42
Appendix C .........................................................................................................43
Appendix D .........................................................................................................44
Appendix E .........................................................................................................46
Appendix F..........................................................................................................49
Appendix G .........................................................................................................50
Appendix H .........................................................................................................51
Appendix I ...........................................................................................................61
Appendix J ..........................................................................................................63
©
SA
NS
In
sti
tu
te
20
Key fingerprint = AF19 FA27 2F94 998D FDB5 DE3D F8B5 06E4 A169 4E46
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
1.0 Part 1 - Analysis of an Unknown Binary
1.1
Background
fu
ll r
igh
ts.
An employee, John Price is suspected of sharing copyrighted files on public
systems. A floppy disk was recovered from his computer. An image of the disk,
designated fl-160703-jp1.dd, was provided for analysis. The disk image
contained an unknown binary, named prog.
Binary Details
ho
1.2
rr
eta
ins
Prog is analyzed in detail, and identified. The other contents of the disk are
examined for any evidence of inappropriate activity, specifically relating to
copyright infringement.
In
sti
tu
te
20
04
,A
ut
True Name: bmap
MAC times:
Modified Monday, July 14, 2003 10:24:00
Accessed Wednesday, July 16, 2003 02:12:39
Inode changed
Wednesday,
JulyFDB5
16, 2003
Key fingerprint
= AF19 FA27
2F94 998D
DE3D02:05:33
F8B5 06E4 A169 4E46
Owner: UID 502 GID 502
File Size: 487,476 bytes
MD5 hash: 7B80D9AFF486C6AA6AA3EFA63CC56880
Key Words:
NS
Program Description
SA
1.3
©
The prog executable is a utility that can read and write to raw disk devices, to
hide, recover, and delete data in file slack space.
Slack space is the wasted space when a file is smaller than the filesystem block
size. It is normally invisible to users and applications.
The unix file system normally makes this space, and any information in it,
inaccessible to the user. Normally, file slack should be empty, as it is overwritten with nulls when the file is written to.
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
To access the slack space at the end of a file, requires reading and writing to the
disk directly, bypassing the file system. This is exactly what prog does.
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
A demonstration of a simple data hiding exercise with prog is shown below.
tu
te
20
Key fingerprint = AF19 FA27 2F94 998D FDB5 DE3D F8B5 06E4 A169 4E46
NS
In
sti
A fresh text file is created, then prog is executed with the "--mode p" option to
insert a message into the slack space of the file. Data is retrieved with "prog -mode s" to show successful insertion. The legitimate contents of the file remain
unchanged.
©
SA
Analysis of prog began with a comparison of the MD5 checksum for the extracted
file to the checksum file supplied.
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
fu
ll r
igh
ts.
ins
eta
rr
ho
ut
,A
tu
te
20
04
as shown in the screen capture, they match.
Key fingerprint = AF19 FA27 2F94 998D FDB5 DE3D F8B5 06E4 A169 4E46
Examination of the output of the strings command for prog revealed that a help
option was available. Output of "prog --help" is in Appendix A.
NS
In
sti
The program version, 1.0.20, appears to be identified in the in the first line of
output. The references to slack manipulation in the command descriptions
suggested a steganography or other data-hiding tool. A Google search for data
hiding tools found (Chuvakin). The description of bmap made it a good
candidate for prog's identity, so it was downloaded, compiled, and compared.
©
SA
I was unable to build a version of bmap with an identical MD5 checksum to prog,
so I proceeded to compare the behavior of the programs. Output of "bmap -help" is listed in appendix A.
Although both programs appear to perform the same functions, all of the
command options are shortened. These cosmetic changes are enough to
prevent the checksums of the two programs from matching, regardless of other
circumstances.
A repeat of the previous data hiding exercise, using bmap, is shown below
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
fu
ll r
igh
ts.
ins
eta
rr
ho
ut
,A
©
SA
NS
In
sti
tu
te
20
04
bmap uses the command "putslack" to insert data and "slack" to display it. Next,
bmap
is used to
examine
the2F94
data998D
hidden
by DE3D
prog. F8B5 06E4 A169 4E46
Key fingerprint
= AF19
FA27
FDB5
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
fu
ll r
igh
ts.
ins
eta
rr
ho
ut
,A
Forensic Details
sti
tu
1.4
te
20
04
The data displays correctly.
Key fingerprint = AF19 FA27 2F94 998D FDB5 DE3D F8B5 06E4 A169 4E46
NS
In
The access time of the executable, recorded above in Binary Details, is more
recent than the modification and inode change times. This is often an indicator
that the executable has been run on the system since installation.
SA
Below is the output of the file command run against prog
©
images-fl-160703-jp1.dd-a..prog: ELF 32-bit LSB executable, Intel 80386, version
1 (SYSV), for GNU/Linux 2.2.5, statically linked, stripped
This program is an ELF format executable, compiled to run on Intel architecture,
on a Linux 2.2.5 or later kernel. All required libraries have been linked into the
program at compile time (static linking), so it will not require access to the
libraries on the system where it is run. Finally, debugging information has been
stripped from the binary.
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
The prog executable appears to be useable "as is" and requires no special
installation procedure.
An strace command was run to monitor file related system calls made by prog
during a data hiding exercise similar to the one above. The results show all of
the files that prog read from or wrote to during the exercise. The results of all
strace runs are in Appendix B.
fu
ll r
igh
ts.
Strace reports six file-related system calls. First is execve, the system call that
actually loads and executes prog. The zero at the end of the system call is the
return value. A return value of zero means successful termination. Non-zero
return values normally indicate different errors, depending on the system call.
ho
rr
eta
ins
The next system call is lstat64. This system call returns a file's status, which is
the unix term for the file's meta-data. The target file is prog-demo.txt, the test file
for the demonstration. The returned value st_mode=S_IFREG means that this is
a regular file. The next value, 0644, is the file permissions, giving the owner read
and write access, with read-only access to members of the owner's group, and
the world. The value st_size=12 reports that the file is 12 bytes long. The rest of
the output is truncated by strace for brevity.
te
20
04
,A
ut
Next is the open system call. The test file prog-demo.txt is opened in read-only
mode. The return value of "3" for the open system call is not an error. Open,
when successful, returns a file descriptor for the file. The operating system has
created a pointer to the file, that the program can use to access the file in
Key fingerprint
= AF19
FA27The
2F94
998D FDB5
06E4 A169
4E46
program
usesDE3D
the fileF8B5
descriptor,
in this
case 3,
subsequent
system
calls.
when reading from or the file.
SA
NS
In
sti
tu
Next, a second lstat64 call is made for the file prog-demo.txt. Then, lstat64 is
called for the file /dev/hdc3. This file is the device file for the hard disk. The
device file is used when access is needed to the raw disk, bypassing the file
system. This is necessary to access slack space or make changes not permitted
by the file system. The st_mode=S_IFBLK value means that this is a block
device file. The file permissions are 0660, giving the owner (root) and group read
and write permissions. No access is granted to anyone else. The st_rdev
argument returns a code indicating the type of device.
©
Finally, the file /dev/hdc3 is opened for writing. The open system call returns a
file descriptor of "4" for this file (die.net).
The strace output shows that prog opens its target file in read-only mode, but
does not write to it directly. The data is written using the device file for the hard
disk, which was opened in write-only mode.
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
The strace command was repeated for a data reading exercise. Again, prog
reads the target file, and then accesses the device file for the disk. The only
difference is that the device file is opened in read-only mode.
Because of this method of writing to the disk, the target file access time will be
updated, but the modification time will not change. It is not obvious that anything
has been done to the target file.
fu
ll r
igh
ts.
Using the device file to access the raw disk requires root privileges. The prog
executable found on the floppy disk was owned by a non-root user. The user of
this copy of prog would need some method of gaining root privilege when using
the program.
ins
Program Identification
eta
1.5
ho
rr
The prog executable is a version of bmap, a data hiding utility. A brief
description of bmap, with links to source code, appears in (Chuvakin) with a
simple demonstration of its use.
,A
ut
The executable prog appears to be compiled from source code for bmap version
1.0.20. However, the code has been modified to abbreviate its arguments.
20
04
The bmap source was compiled on Redhat Linux 9.0 to produce a statically
Key
fingerprint
AF19 FA27 2F94 998D FDB5 DE3D F8B5 06E4 A169 4E46
linked,
stripped=binary.
tu
te
MD5 hash: df63f87f3ff69f1a18cfb284b301d627 bmap
In
sti
bmap: ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), for GNU/Linux
2.2.5, statically linked, stripped
©
SA
NS
MD5 hashes for prog and for the compiled bmap source do not match.
Mismatched MD5 hashes can result from different compiler options or library
versions also, but since obtaining a matching hash would require modifying the
source code for bmap, with no source for prog, the effort would merely be a
guessing game.
An strace was run on bmap under identical conditions as the one performed on
prog. First a data write was performed, then a data read was performed. The file
related system calls are identical to prog. These strace runs are also in
Appendix B.
Finally, a keyword search for "bmap" in the output of strings for prog and for
bmap is compared.
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
strings -a prog | grep 'bmap'
bmap_get_slack_block
bmap_get_block_count
bmap_get_block_size
bmap_map_block
bmap_raw_open
bmap_raw_close
eta
ins
fu
ll r
igh
ts.
strings -a bmap | grep 'bmap'
bmap
bmap_get_slack_block
bmap_get_block_count
bmap_get_block_size
bmap_map_block
bmap_raw_open
bmap_raw_close
ho
rr
The sub-string "bmap" appears in several longer strings. Examination of the
bmap source code shows that these are function names, appearing in the file
bmap.h.
,A
ut
The bmap executable and the prog executable both have help options. By
comparison of the help displays, it is apparent that the functions are similar.
te
20
04
Functionality of the prog and bmap executables was compared above. The
Key
fingerprint = of
AF19
2F94 998D FDB5
F8B5
06E4
A169 their
4E46 target
demonstrations
the FA27
two executables
show DE3D
that they
each
access
files in the same way, and one can read data hidden by the other.
In
sti
tu
Finally, references to bmap in the prog executable lead to the conclusion that
prog is indeed based on the bmap source code.
NS
Legal Implications
SA
1.6
©
The evidence recovered from the diskette indicates that prog was executed at
least once. No proof was found that it was executed on any of the organization's
computers.
Executing prog with any meaningful results requires root privileges. If root
privileges are obtained without authorization, that would violate our organization's
acceptable use policy. It would also be considered an ethics violation,
misrepresenting oneself to obtain a service.
Executing prog itself would be considered a violation of acceptable use policy,
because it violates access controls.
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
Legally, unauthorized access to computers or networks in the United States is
addressed in Title 18 USC section 1030, the computer fraud and abuse act. If
the user of this program achieved root access by unauthorized means, they may
be guilty of a federal crime under this statute.
Interview Questions
fu
ll r
igh
ts.
1.7
Since John Price has already attempted to erase evidence of his activity and
already lied about ownership of the disk when questioned, I would avoid pointed
questions until the end of the interview.
Which computers do you have access to?
ho
rr
Do you have the authority to install software?
eta
ins
Do you have root access on any of the organization's computers?
ut
Do you buy or sell things on ebay?
,A
Do you know how to build an executable from source code?
20
04
Were you using the organization's computers for any reason on July 16 at
Key
fingerprint = AF19 FA27 2F94 998D FDB5 DE3D F8B5 06E4 A169 4E46
2:00AM?
tu
te
Are you familiar with a program called bmap?
In
sti
Have you ever used bmap?
NS
Case Information
SA
1.7
©
The contents of the recovered floppy disk are shown in the output from ls
(die.net) performed on the disk, using the l (long), a (all), R (recursive) , and t
(sort by time) options. Output is listed in Appendix C. Note that mnt/ is the
mount point for the disk image.
The disk image was examined for data in the slack space of each file. When
"bmap --mode slack" was run, it reported empty slack for all but one file. The file
mnt/Docs/Sound-HOWTO-html.tar.gz contained 170 bytes of non-null characters
out of 805 bytes of slack space. The data appears to be garbage.
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
Next, the file contents were examined. All of the zip files (.gz) were unzipped,
and the tar archives (.tar) were extracted. Each file was opened using the
appropriate application.
fu
ll r
igh
ts.
Sound-HOWTO-html.tar.gz - Gzipped tar archive containing html files.
Information about sound hardware and various sound file formats
MP3-HOWTO-html.tar.gz - Gzipped tar archive containing html files. Information
about creating, listening to, and working with mp3 format sound files.
DVD-Playing-HOWTO-html.tar - Tar archive containing html files. Instructions for
getting DVD movies to play on Linux
Kernel-HOWTO-html.tar.gz - Gzipped tar archive containing html files.
Instructions for modifying the Linux kernel.
rr
eta
ins
ebay300.jpg - jpeg image, appears to be part of a web page. Contains the ebay
logo, and the text of an error message.
sect-num.gif - GIF image, appears to be a diagram showing how sectors are
arranged on a computer disk.
sectors.gif - GIF image, appears to be a diagram demonstrating computer disk
geometry, showing an example of a sector and a track.
,A
ut
ho
nc-1.10-16.i386.rpm..rpm - Redhat Package Manager package. RPM reports
this as nc-1.10
04
Letter.doc - A Microsoft Word template for a business letter.
te
20
Key
fingerprint-=AAF19
FA27Word
2F94 998D
FDB5 appears
DE3D F8B5
06E4
A169regarding
4E46
Mikemsg.doc
Microsoft
document,
to be
a letter
a
business transaction. The text of this document is reproduced here:
tu
Hey Mike,
In
sti
I received the latest batch of files last night and I’m ready to rock-n-roll (ha-ha).
NS
I have some advance orders for the next run. Call me soon.
SA
JP
©
This document implies that John Price has been using company owned
computers for non-company business. It does not prove that he was trafficking in
copyrighted materials, but any activity related to outside businesses is forbidden
by company policy. The document refers to previous communication between
John Price and Mike. A search of mail logs and archives for previous
communications between them may be productive.
.~5456g.tmp - binary file, type unknown, owned by root.
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
Note that the owner of nearly all of the files on the disk is user ID 502. We do not
know the user name that this ID corresponds to, without the password file from
the victim system. The files on the floppy disk do contain other identifying
information, however.
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
The files Mikemsg.doc and Letter.doc were examined using Microsoft Word, and
both were found to contain information identifying the author as John Price.
©
SA
NS
In
sti
tu
te
20
Key fingerprint = AF19 FA27 2F94 998D FDB5 DE3D F8B5 06E4 A169 4E46
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
fu
ll r
igh
ts.
ins
eta
rr
ho
ut
,A
te
20
04
This links John Price to the user ID 502 on the victim machine. This contradicts
Keystatement
fingerprint that
= AF19
DE3DIDF8B5
A169
his
the FA27
floppy2F94
disk 998D
is notFDB5
his. User
502 06E4
is also
the 4E46
owner of the
prog executable.
NS
In
sti
tu
Additionally, the 3.5 inch diskette is formatted in ext2 format, a unix file system
format. The documents were created in Microsoft Word 2000, available on
Microsoft Windows only, (Macintosh uses a different version of word). Therefore,
John Price had access to at least two computers.
©
SA
Also found on the disk, and owned by user ID 502, is the file nc-1.1016.i386.rpm..rpm the installer package for netcat version 1.10. Netcat is a
network utility, which can perform many different tasks involving the copying of
files from one computer to another. Netcat can communicate using any port the
user chooses, and does not require root privileges to install or use.
The only file not owned by user ID 502 is .~5456g.tmp, a binary file of unknown
type. Normally the .tmp suffix designates temporary files, discarded after an
application is run.
Next, recovery of deleted files was attempted. Two entries for deleted files were
found in the disk image. Data fragments for two files were also found.
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
When files are deleted in a unix file system, the directory entry is marked as
deleted, but the data is not overwritten until the space is reused for another file.
The two deleted filenames found were:
mnt/prog
mnt/DVD-DVD-Playing-HOWTO-html.tar.gz
fu
ll r
igh
ts.
Two unallocated inodes were found containing data, but nothing noteworthy was
recovered.
ins
One file was not recoverable. Although the file meta-data reported a file size of
546116 bytes, only 12379 bytes of data were found on the disk. The recovered
fragments contained no recognizable text, and were not identifiable by type of
file.
ut
ho
rr
eta
The second file was recovered. The file meta-data reported a file size of 100,430
bytes. The first part of the recovered file contained a copy of DVD-PlayingHOWTO-html.tar. The rest of the recovered data blocks contained null
characters.
,A
1.7.1 Advice
sti
tu
te
20
04
Because prog is self-contained, it has no installation process to give away its
Key
fingerprint
AF19
FA27 2F94
998D
FDB5
DE3D
F8B5
06E4 A169
presence,
but it= is
unusable
without
root
access
to the
system.
The 4E46
need for root
access may be the best way to detect the use of this utility on a system. Access
to the root password on most systems is tightly controlled, and the use of the root
account can be closely monitored.
NS
In
If the user attempts to gain root access illegally, it will require the presence of a
vulnerability on the system, and an exploit to take advantage of it. This exposes
the user to detection when attempting to use the exploit.
©
SA
A user of prog may try to avoid the need for frequent root access by creating an
suid-root binary. Such binaries can be searched for with the following find
command (die.net):
find / -perm +04000 -uid 0 -print
"/" tells find to start searching from the root directory.
"-perm +04000" tells find to look for the SUID bit set. 04000 is the octal code for
the SUID permission bit.
"-uid 0" tells find to look for files owned by root.
"-print" tells find to print the full file name.
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
Searching the file system for SUID-root files is a good practice in general. They
can indicate the presence of other malware applications on a system.
Additional Information
The primary download site for bmap source code is
ftp://ftp.scyld.com/pub/forensic_computing/bmap/
fu
ll r
igh
ts.
1.8
The complete text for all sections of the United States Code is available online at
http://uscode.house.gov/lawrevisioncounsel.php
04
,A
ut
ho
rr
eta
ins
Man pages for Linux commands, including the tools described in this section, are
online at
http://www.die.net/doc/linux/man/
©
SA
NS
In
sti
tu
te
20
Key fingerprint = AF19 FA27 2F94 998D FDB5 DE3D F8B5 06E4 A169 4E46
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
2.0 Part 2 - Forensic Analysis on an Unknown System
2.1
Case Synopsis
fu
ll r
igh
ts.
A hard disk drive was retrieved from the spare equipment inventory, and found to
contain a partition, still containing operating system files and data. The original
users and purpose of the disk were unknown.
eta
Description of System
rr
2.2
ins
The disk was taken into custody, and imaged for analysis. The goal of this
analysis was to learn the identity of any users, the purpose of the original system
the disk was part of, and the habits of the users.
04
,A
ut
ho
The system is a Microsoft Windows 2000 workstation containing a 20GB hard
drive, and a second 2.5GB hard drive. The second drive contains a FAT-16
partition, 1024MB in size, containing a Microsoft Windows 95 operating system
and data files. The second drive is in an unknown state, and the subject of this
analysis.
2004-03-001
Seagate Medalist Pro hard disk
ST52520A
2564 MB
PC483015
Room 209
©
Tag #
Type
Model:
Size:
Serial #:
Location:
NS
In
Hardware details:
SA
2.3
sti
tu
te
20
The
system contains
10/100MB
Ethernet
a 3.5
inch
Diskette
Key fingerprint
= AF19aFA27
2F94 998D
FDB5NIC,
DE3D
F8B5
06E4
A169 drive,
4E46 and an
Iomega Zip-250 drive. The system also contains a CD-R/W drive, which was
used to make a copy of the image for transport.
2.4
Image Media
When the partition was discovered, the disk was already installed in a live
system, mounted as a data disk. The workstation was booted from its regular
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
operating system partition. The system was left running, and forensic tools were
run from a CD-ROM.
An image of the disk was obtained at the workstation, using a version of dd for
windows released by George M. Garner Jr, as part of a set of freeware utilities
for forensic acquisition (Garner). The disk was then taken into evidence, and a
compressed image was copied onto CD-R media for analysis.
fu
ll r
igh
ts.
Appendix D contains the log output from the disk copy session. The dd
command records the basic information for the drive copied, any error messages,
and a checksum comparison. The full command line, with options selected, is
included.
Media Analysis
04
2.5
,A
ut
ho
rr
eta
ins
The dd command was run with the option conv=noerror. This option tells dd not
to terminate if it experiences an error during copying. The copy operation
generated eight errors, shown in the log. The errors all occur at the same spot
on the disk, which is on a cluster boundary. This indicates that the cluster is
marked as unusable by the file system. This is usually due to a known bad
cluster on a disk. The dd command was run with the default block size of 4K.
The disk was formatted with 32K cluster size, so each cluster requires 8 block
reads. Therefore, there was only one bad cluster encountered.
20
Key fingerprint = AF19 FA27 2F94 998D FDB5 DE3D F8B5 06E4 A169 4E46
tu
te
2.5.1 Media Analysis System Description
NS
In
sti
The system used for media analysis is a Redhat 9.0 Linux OS running on a Dell
Inspiron 5150 Notebook PC containg 512MB RAM and 40 GB hard disk drive.
The system is equipped with a built-in CD/DVD reader and a USB 3.5 inch
diskette drive.
©
SA
The analysis system is attached to a network hub, isolated from the corporate
network. Also attached to the hub is a Dell Inspiron 5000 running Windows
2000. It is equipped with 384MB RAM and a 20GB hard disk drive. It also has a
CD-ROM reader and a 3.5 inch diskette drive.
In addition to native operating system utilities, The Autopsy Forensic Browser
and The Sleuth Kit (TSK) are installed on the analysis system. Both Autopsy and
TSK are available from (sleuthkit.org).
The Sleuth Kit is a freeware set of media analysis utilities for unix. It is based in
part on The Coroner's Toolkit (TCT). TSK can read multiple file system formats,
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
including FAT and NTFS. This permits analysis of images recovered from a MS
Windows system on Unix.
The Autopsy Forensic Browser provides a graphical interface for TSK, using
HTML. The investigator interacts with Autopsy through a web browser, and can
access Autopsy from a remote machine.
fu
ll r
igh
ts.
2.5.2 File system
ins
The file system resides on a FAT-16 partition of 1023.75MB in size. The cluster
size is 16KB. The file system contains 2671 allocated files and 2229 unallocated
files.
eta
2.5.3 Operating System
,A
ut
ho
rr
The Operating system is a Windows 95 installation, Service Release 2.1. The
version of windows can be identified from the modification dates of the operating
system files. (Microsoft KBA 158238) provides a list of the modification dates for
each version. For Windows 95 SR2.1, the article lists a date range of 8/24/968/27/97. For the next release, SR2.5, the dates are 8/24/96-11/18/97.
tu
te
20
04
The bulk of Operating system files on the suspect image report a modification
date of 8/24/96. Apart from files modified during the install process, the latest
Key fingerprint
= AF19
2F94
FDB5 DE3D F8B5 06E4 A169 4E467/19/97.
modification
date
for aFA27
system
file998D
is c:\windows\system\MSVBM50.DLL
No files were found with modification dates between 8/27/97 and 11/18/97.
In
sti
2.5.4 Malware
NS
The suspect image was examined for the presence of viruses, backdoors or
other malicious code, using a commercial anti-virus scanner.
©
SA
The suspect image was shared, read-only, on the analysis network using
SAMBA. A SAMBA server allows MS Windows computers to see a shared
partition as if it were an ordinary windows network share.
The image was mounted, which allows it to be accessed as if it were a physical
disk, with the following mount command (die.net):
mount -t vfat -o loop,ro,umask=022,uid=forensic,gid=users,show_sys_files=true \
/images/part2.img /mnt/windows_forensic_server
The command and its options
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
-t vfat
tells mount to use type vfat, which
recognizes any FAT filesystem
-o introduces options, loop is short for
loopback, and tells mount this is an
image, not a physical disk
ro means read only. No changes are
allowed to any part of the image
umask sets file permissions to give
access to all files, regardless of their
owner
remote users connect with privileges of
user forensic, an existing user on the
server
remote users will be assighed to the
group users
this shows normally hidden, windows
files
This tells mount the location of the
image
This tells mount where to make the
image available on the system
-o loop
ro
fu
ll r
igh
ts.
umask=022
uid=forensic
ins
gid=users
eta
show_sys_files
rr
/images/part2.img
ut
ho
/mnt/windows_forensic_server
In
sti
2.5.5 Applications
tu
te
20
04
,A
The shared partition was mounted by the windows 2000 analysis system, and
scanned with Mcaffee Anti-virus version 7.0. Mcaffee Anti-virus is a commercial
scanner sold by Network Associates, Inc. It scans for all currently known
Key
fingerprint
= AF19
FA27 2F94
998D
FDB5
DE3D F8B5
The06E4
scanA169
found4E46
no infected
Windows
and DOS
viruses,
trojans,
and
backdoors.
items. Output is listed in Appendix E.
SA
NS
Windows 95 includes several applications as part of the operating system base
install. These include Internet Explorer, and the Microsoft Windows Accessories.
Apart from the operating system, the following applications were found on the
suspect disk:
©
c:\Program Files\Microsoft Games\Age of Empires II\empires2.exe
c:\Program Files\Maxis\SimCity 2000\SIMCITY.EXE
c:\MAXIS\EARTHWIN\WGAIA.EXE
The file c:\MAXIS\EARTHWIN\README.WRI identifies this application as
SimEarth
c:\Windows\System\3NICDIAG.EXE
3COM Network Interface Card Diagnostics
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
Unexpectedly, no business related applications were found on the disk.
2.5.6 Users
fu
ll r
igh
ts.
One password file, c:\windows\FBUCK.PWL, was identified on the system.
Windows 95 keeps a separate password file for each username in the
c:\windows\ directory.
2.5.7 Email
rr
eta
ins
A search was performed for email on the system. The two mail clients used at
our site are Microsoft Outlook and Eudora. Microsoft mailbox files carry a .PST
extension, and Eudora mailbox files carry .MBX or .TOC. A search of the
suspect image found no files with any of these extensions. The user did not
appear to be storing mail locally on the system.
,A
ut
ho
The image was searched for installed email applications. None was found. An
examination of the web browser cache showed no links to web based email
services.
tu
te
20
04
Based on these results, if the system was used for email at all, the user would
have to connect directly to our mail server and read mail. Our mail server
Key
fingerprint
FA27 line
2F94mail
998D
FDB5and
DE3D
F8B5 via
06E4
A169
supports
Pine, =a AF19
command
reader,
access
telnet
or4E46
SSH, for this
purpose.
In
sti
2.5.8 Logs
NS
Several log files were found on the system. They are summarized here
©
SA
C:\/BOOTLOG.TXT - last modified 03/26/00 18:35:34
This file is a log of the boot process. Logging of the boot practice is normally
activated only after an unsuccessful boot attempt. The file contains no error
messages, appearing to log a successful system boot.
C:\/BOOTLOG.PRV - last modified 03/26/00 18:18:24
This file retains the previous contents of bootlog.txt. It also appears to log a
successful boot.
C:\/DETLOG.TXT - last modified 04/23/00 11:21:24
This file is generated during the windows hardware detection process.
c:\/DETLOG.OLD - last modified 03/26/00 17:14:16
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
This file contains the previous copy of detlog.txt.
C:\/NETLOG.TXT - last modified 03/26/00 17:21:12
This files is generated during the network portion of the Windows hardware
detection process.
fu
ll r
igh
ts.
c:\/SCANDISK.LOG - last modified 04/23/00 11:35:38
This file contains the results of the most recent scandisk operation. Scandisk
reported finding no problems on the drive C:\ at 11:35AM, 04/23/00
C:\/SETUPLOG.TXT - last modified 03/26/00 17:42:16
This file is generated during Windows installation process.
eta
ins
C:\/SUDHLOG.DAT - last modified 03/26/00 17:29:52
This file contains backups of boot records from previous versions of DOS or
Windows.
ho
rr
C:\/WINDOWS/SYSTEM/VBRUNTME.LOG - last modified 04/23/00 11:45:24
This file is generated during installation of MS Visual Basic Runtime. The
following was found in the file:
04
,A
ut
*** Installation Started 04/23/00 11:12 ***
Title: VB Runtime Installation
20
2.5.9
Web Cache
History
Files
Key fingerprint
= AF19and
FA27
2F94 998D
FDB5 DE3D F8B5 06E4 A169 4E46
NS
In
sti
tu
te
The suspect image was examined for web browser software. A copy of Internet
Explorer was found installed on the system. The history and cache folders were
examined using IE History Viewer, available from the Phillips Ponder Company
(Ponder). The IE History Viewer allows the user to examine history files from
Internet Explorer, Netscape, and the Microsoft Windows recycle bin.
©
SA
The following Internet Explorer history files were found:
C:\/WINDOWS/COOKIES/MM256.DAT
C:\/WINDOWS/COOKIES/MM2048.DAT
C:\/WINDOWS/HISTORY/MM256.DAT
C:\/WINDOWS/HISTORY/MM2048.DAT
C:\/WINDOWS/TEMPORARY INTERNET FILES/CACHE1/MM256.DAT
C:\/WINDOWS/TEMPORARY INTERNET FILES/CACHE1/MM2048.DAT
C:\/WINDOWS/TEMPORARY INTERNET FILES/CACHE2/MM256.DAT
C:\/WINDOWS/TEMPORARY INTERNET FILES/CACHE2/MM2048.DAT
C:\/WINDOWS/TEMPORARY INTERNET FILES/CACHE3/MM256.DAT
C:\/WINDOWS/TEMPORARY INTERNET FILES/CACHE3/MM2048.DAT
C:\/WINDOWS/TEMPORARY INTERNET FILES/CACHE4/MM256.DAT
C:\/WINDOWS/TEMPORARY INTERNET FILES/CACHE4/MM2048.DAT
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
2.5.10
fu
ll r
igh
ts.
For versions of Internet Explorer before 4.0, the file MM256.DAT indexes URL's
up to 256 characters in length. URL's longer than 256 characters are indexed in
MM2048.DAT. A detailed description of these files can be found in (Microsoft
KBA 178702).
IE History viewer reported all of the files to be empty. The files all possessed the
same modification date and time, 11:49:32, 4/23/2000. Since the timeline
analysis, detailed below, revealed an installation date of 3/26/2000, the files must
have been modified since their creation, therefore, the user must have cleared
the Internet Explorer history.
Recycle Bin
eta
rr
ho
Three files were found in the recycle bin:
_NFO
_CO.LNK
desktop.ini
ins
The Recycle Bin of the suspect image was examined for activity.
,A
ut
Filenames beginning with "_" indicate deleted files.
te
20
04
_NFO is probably the remnants of the INFO file. The original locations of files
that are moved to the recycle bin are stored here. File recovery was attempted,
Key
fingerprint
= AF19
FA27
2F94
998D FDB5toDE3D
F8B5
A169 4E46
data blocks
have
been
re-allocated
another
file.06E4
A search
of the image
but the
for data fragments from INFO found nothing.
NS
In
sti
tu
desktop.ini is a file used by Windows to determine how to display the contents of
a folder. It is normally a hidden system file. This copy of desktop.ini contains a
registry key. Looking up the key in the registry (recovered below) reveals a set of
sub-keys related to the recycle bin, including pointers to the recycle bin icons.
2.5.11
©
SA
_CO.LNK was recovered and examined. Results are below under the Deleted
Files section.
Recent Items Folder
Links to the following files were found in the Recent Items Folder:
C:\Program Files\Maxis\SimCity 2000\Cities\MXBURG.SC2
C:\Program Files\Maxis\SimCity 2000\Cities\TORONTO.SC2
E:\funstuff\videos\highperf\goodtime.avi
E:\funstuff\videos\mpeg\goodtime.mpg
E:\funstuff\videos\mpeg\weezer.mpg
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
E:\funstuff\videos\highperf\welcome1.avi
E:\README.TXT
2.5.12
fu
ll r
igh
ts.
The first two files are part of the SimCity 2000 application. They appear to be
saved games. The remaining files are unrecoverable, because the E: partition
was not found on the suspect disk. Either the partition was deleted, or it resided
on another drive.
Registry
ins
The simplest method for registry examination for a Windows 2000 or XP system
is to use regedt32, and import the registry branches, called hives, for viewing.
Otherwise, one of several commercially available registry viewers can be used.
ho
rr
eta
The registry for Windows 95/98/ME operating systems is structured differently
from the registry in Windows 2000/XP. The 95/95/ME registry exists in two files,
in the windows directory, SYSTEM.DAT and USER.DAT. The hives cannot be
imported, because the regedt32 registry editor cannot read them correctly, and
the older regedit editor does not support importation of hives.
20
04
,A
ut
If a commercial viewer is unavailable, then the registry files must be converted to
a readable form. This can be done with regedit, but it requires a live windows
95/98/ME system. Regedit supports exporting and importing registry keys in
registry entry files. Registry entry files have a default extension of .reg, but they
Key
fingerprint
= AF19
2F94 998D in
FDB5
DE3D
F8B5 06E4
A169
4E46
only text.
TheyFA27
are described
detail
in (Microsoft
KBA
310516).
contain
NS
In
sti
tu
te
To convert an entire registry to a .reg format file, the suspect registry must be
substituted for the existing registry on a Windows 95/98/ME system, and then
exported. This can be done using the GUI in SAFE mode, but it is quicker from
the Real Mode command prompt. Appendix F contains a procedure for exporting
a windows 95 registry, based on (Microsoft KBA 310516).
SA
The exported registry file was examined using a text editor.
©
Several keys contain entries for programs to be run on startup. Their contents
are summarized here.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
]
"SystemTray"="SysTray.Exe"
"ActiveMovie File Extensions"="ActMovie.exe /Check"
"COMSMDEXE"="comsmd.exe -on"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Once]
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
ServicesOnce]
SysTray.exe is the Windows 95 System Tray, which displays icons on the
taskbar for access to running processes.
fu
ll r
igh
ts.
ActiveMovie is an extension of Internet Explorer for streaming media.
Comsmd.exe is a modem driver from 3COM corporation.
Both the RunOnce and RunServicesOnce keys were empty.
ins
The Windows registry keeps track of URL's that are typed directly into internet
explorer. Examination of the registry key revealed little.
rr
eta
[HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\TypedURLs]
"url1"="http://home.microsoft.com/"
ut
ho
A registry key was found for the most recent application to use DirectDraw.
DirectDraw is part of the Windows DirectX 3D graphic library.
te
20
04
,A
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\DirectDraw\MostRecentApplic
ation]
"Name"="EMPIRES2.ICD"
Key fingerprint = AF19 FA27 2F94 998D FDB5 DE3D F8B5 06E4 A169 4E46
The following TCP/IP information was found in a network related registry key:
©
SA
NS
In
sti
tu
[HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Class\NetTrans\
0002]
"DriverDesc"="TCP/IP"
"InfPath"="NETTRANS.INF"
"DevLoader"="*ndis"
"MaxMTU"="1496"
"DriverDate"=" 8-24-1996"
"IPAddress"="0.0.0.0"
"IPMask"="0.0.0.0"
"DeviceVxDs"="vtdi.386,vip.386,vtcp.386,vdhcp.386,vnbt.386"
"InstallVnbt"="0"
The IP address and mask of 0.0.0.0 indicate that the original machine was
configured to use DHCP, a protocol for assigning IP addresses dynamically.
2.5.13
© SANS Institute 2004,
Start-up processes
As part of GIAC practical repository.
Author retains full rights.
The folder C:\windows\Start Menu\programs\startup can contain programs that
will be launched during user login, independently of the registry. The folder was
empty.
2.6
Timeline Analysis
fu
ll r
igh
ts.
The file activity (MAC) timeline was generated from Autopsy. The ability within
autopsy to generate the timeline is completely automatic, selected from the main
menu.
ho
rr
eta
ins
I found the timeline generated by autopsy to be somewhat inconvenient for
automatic parsing, because autopsy omits duplicate date and time fields for
multiple files with an identical timestamp. I used a perl filter to re-construct the file
so that each file has date and time fields, even duplicates. This version of the
timeline is less human readable than the original, as I was unable to process the
file without destroying the formatting. The file size also increased substantially.
For this reason, the original timeline is included in this report, rather than my
expanded version. The perl script is attached in Appendix G.
,A
ut
Attached as appendix J is the MAC timeline obtained from the image.
Confidential information has been sanitized.
sti
tu
te
20
04
A sample entry is shown to illustrate the format of the MAC timeline
Key fingerprint = AF19 FA27 2F94 998D FDB5 DE3D F8B5 06E4 A169 4E46
Sat Aug 24 1996 11:11:10 15252 m.. -/-rwxrwxrwx 0 0 343563
C:\/WINDOWS/AUTOEXEC.BAT
16384 mac d/-rwxrwxrwx 0 0 999999 c:\/MYFILES/
NS
In
Each file access is represented by a single entry in the timeline. The first part of
the entry is the date and time of the file activity. If multiple entries have identical
date and time, it is shown only for the first entry.
SA
Next is the file size in bytes.
©
Next are the activity types. An "m" indicates file modification. File modification
date and time is used for the file timestamp shown in the Windows directory
listing. An "a" indicated read access to the file. A "c" indicated creation date of
the file. A "." indicates no activity. More than one type of activity can be shown in
a single entry.
Next are the file permissions. A "d" in the first position indicated a directory,
while a "d" in the second position indicated the file is deleted. An "r" indicates
read permission. If it is not present, the file is hidden. A "w" indicates write
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
permission. If it is absent, the file is read-only. An "x" indicated execute
permission. This is not used in the FAT file system, so it is always present.
The Next are user and group ID's. These will always be zero, as they are not
used in the FAT file system.
fu
ll r
igh
ts.
Next is the directory entry number, a pointer to the file's data. This will be a
unique number for each file.
Finally is the file name, prefixed by the full path.
2.6.1 FAT File System
ho
rr
eta
ins
One curious detail of the FAT file system caused much difficulty in the timeline
analysis. According to the Microsoft Developer Network library (Microsoft
MSDN), a Windows system installed on a FAT file system will record file access
time as midnight of the access date, regardless of the actual access time. This
feature makes recorded access times nearly useless. In particular, determining
in what order applications are executed, becomes impossible.
sti
tu
2.6.2 Installation Date
te
20
04
,A
ut
Inspection of the timeline shows this to be the case for file access dates
occurring during the part of the year when daylight savings time is in effect.
During standard time, the access times are listed as 23:00:00. If this is due to an
error in the handling of daylight savings time, it implies that the file access date
Key
AF19 FA27
2F94 998D
FDB5
DE3D F8B5 06E4 A169 4E46
is the day= before
the actual
access
date.
listedfingerprint
NS
In
The install date, as determined from examining the timeline, is 3/26/2000.
(Microsoft KBA 138306) lists several operating system files whose modification
dates are changed during the install process, indicating the install date.
SA
setver.exe, smartdrv.exe
©
windows\command
extract.exe, scandisk.exe
windows\system
commctrl.dll, commdlg.dll, lzexpand.dll, mini.cab, msprint.dll, mstcp.dll, netapi.dll,
netdi.dll, netos.dll, rnasetup.dll, setupx.dll, shell.dll, sysdetmg.dll, ver.dll
All .dll files and setver.exe were set to 3/26/00. The other three files were set to
8/24/96, the original date for the other system files. Although this is at variance
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
with the documentation, it suggests the documentation may be in error, rather
than any confusion over the install date.
In light of the file activity that predates the install, it is obvious that this is a reinstall.
fu
ll r
igh
ts.
2.6.3 Updates and Patches
Service releases for Microsoft Windows 95 were not typically made available as
upgrades.
ins
Microsoft DirectX was upgraded on two dates, 03/29/00, and 04/09/00. The
upgrades correspond to the install dates of game software onto the machine.
eta
Software installations
ho
rr
Installation dates of software are indicated by the file creation dates of
executable and other files. Modification dates are not reliable, because they are
not changed when files are unpacked from archives.
,A
ut
On 03/29/00, Microsoft Age Of Empires 2 was installed on the system. This is
game software.
sti
tu
Other Significant events
te
20
04
On 04/09/00 13:36, Maxis SimEarth, was installed. This is also game software.
Key fingerprint = AF19 FA27 2F94 998D FDB5 DE3D F8B5 06E4 A169 4E46
On 04/09/00 17:17:00 Maxis Sim City 2000 was also installed.
NS
In
On 04/23/00, the Internet Explorer cache was purged. There are no files
remaining in the cache, implying that Internet Explorer was not used after the
purge.
©
SA
On 04/23/00 at 11:35AM, scandisk was run, according to the modification date of
SCANDISK.LOG. This agrees with the internal date of the logfile. Scandisk
found no errors in the file system.
On 04/23/00, the system booted for the final time at 12:58PM. On bootup,
Windows 95 always creates a backup of the registry. The registry is kept in the
files system.dat and user.dat. The backups are kept in system.da0 and
user.da0.
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
2.7
Deleted File Recovery
fu
ll r
igh
ts.
The Autopsy forensic browser has the ability to generate a list of deleted files.
The list does not contain files whose directory listings have been overwritten,
however. It also does not contain files from the Internet Explorer cache. Internet
Explorer maintains its cache using special cache files. These files were
examined earlier.
The deleted file list is based on deleted entries found within directories. This is
different from the Directory Entry Number, Microsoft's term for the metadata
structure of each file. In the FAT filesystem, the Directory Entry Number serves
the function of the NTFS MFT entry of unix inode.
eta
ins
There was an entry for one deleted file, _CO.LNK, found in the Recycle Bin. This
file recovered first, as it was the most recently deleted file on the system, and
likely to be intact. _CO.LNK is a Windows shortcut file. The following strings
were recovered from the file:
,A
ut
ho
rr
Sound\scenario\w1wc.mp3 Sound\scenario\w1wc.mp3 1 -1
Sound\scenario\w2a.mp3 Sound\scenario\w2a.mp3 1 -1
Sound\scenario\w2aa.mp3 Sound\scenario\w2aa.mp3 1 -1
Sound\scenario\w2b.mp3 Sound\scenario\w2b.mp3 1 -1
20
04
These files were found in c:\Program Files\Microsoft Games\Age of Empires
II\Sound\Scenarios\. They appear to be verbal hints for players of this game.
Key fingerprint = AF19 FA27 2F94 998D FDB5 DE3D F8B5 06E4 A169 4E46
sti
tu
te
The list of deleted files found by Autopsy is in Appendix H. There were 153 files
found. Most of the files were Windows files, or were found inside c:\Program
Files\Microsoft Games\Age of Empires II\. A few files were not obvious, and
were examined.
©
SA
NS
In
C:\WINDOWS\TEMP\_EM9103.TMP and c:\WINDOWS\TEMP_LGD021.TMP
were recovered, and contained binary data.
C:\WINDOWS\SYSTEM\_EMP.000 appears to be a DLL file, but was not
recovered intact.
C:\WINDOWS\SYSTEM\~GLH000B.TMP appears to be an executable, but was
not intact.
C:\WINDOWS\DESKTOP\_$!$.ME was unrecoverable.
C:\WINDOWS\DESKTOP\ONLINE~1\_NFORM~1.TXT is a readme file for
configuring online service providers.
C:\WINDOWS\DESKTOP\ONLINE~1\_$!$-23.ME is identical to the previous file.
The unallocated portion of the suspect image contains directory entry numbers,
for 2226 files. Most of these files are from the Internet Explorer cache. This can
be seen from a tally of files by extension, using extensions common among web
cache files. These numbers are compiled from the timeline.
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
Total files
.GIF
.HTM
.JPE
.JPG
other
2226
1254
408
265
6
293
fu
ll r
igh
ts.
Since the user had purged the web cache, the unallocated files were examined
for evidence of web activity. The string search, detailed below, produced
evidence of possible inappropriate web use, but nothing definite. Files with
suggestive names were identified, by searching the filenames identified in the
timeline. They were then recovered by looking up the Directory Entry Number.
04
,A
ut
ho
rr
eta
ins
Name
Contents
_DULT.GIF
Fragment, no recoverable image
_ONDAG~4.HTM Fragment, appears to be part of a page from an adult web
site.
_ONDAG~5.HTM Fragment, binary data. Probably overwritten
_N_BON~1.JPE empty
_N_BON~2.JPE empty
_N_BON~3.JPE empty
_N_BON~4.JPE Fragment, no recoverable image
20
None
of these =
files
was
recovered
intact.
None
of the
files
hadA169
more4E46
than
Key fingerprint
AF19
FA27
2F94 998D
FDB5
DE3D
F8B5
06E4
32Kbytes of data, which is equal to the cluster size of the suspect image.
String Search
©
2.8
SA
NS
In
sti
tu
te
A final observation regarding the unallocated files should be noted. No files of
type .HTM, .GIF, .JPE, or .JPG were observed in the timeline with dates after
03/26/00. This was the date of the re-install, and suggests that the user was not
using the system for web access after this date. Despite the clearing of the web
cache on 04/23/00, the cache may have been already empty.
The Autopsy forensic browser includes an automatic string search capability. A
file containing text strings is first generated from the image under analysis.
Searches are then conducted on this file, returning the location within the image
where the string was found. The investigator can then examine the data block
containing the string, and attempt to retrieve the file, if necessary.
The suspect image was searched for keywords likely to be related to the
observed activity on the suspect system. Since the only applications found on
the system were games, the topic of gaming provided most of the keywords and
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
phrases used. In addition, the system was used for internet access, so keywords
that would reveal access to other systems were also selected.
The keywords are summarized here, with the number of hits each:
0
0
0
30
134
884
fu
ll r
igh
ts.
game server
zone.msn.com
games.msn.com
multiplayer
user account
username
eta
ins
The search did not yield information pointing to any gaming activity on the
network. No account names, passwords, or server names were found in any of
the data blocks containing the search strings. All referenced to the above search
terms were found within help files from Windows or the various applications.
,A
ut
ho
rr
Other searches were attempted that yielded so many hits, that the results were
impractical to sort through. The username found earlier, FBUCK, was tried, as
were two canned searches supplied with autopsy. One of the search strings is
for IP addresses, the other for date strings.
20
04
IP
2065
date
79119
Key
fingerprint
FBUCK
2039= AF19 FA27 2F94 998D FDB5 DE3D F8B5 06E4 A169 4E46
37
1979
832
13
260
©
SA
Veeblefetzer
FBUCK
adult
casino
shopping
NS
In
sti
tu
te
Autopsy can also perform string searches that are restricted to unallocated
space. Since all of the web cache data was purged, a string search of the
unallocated space was performed, to try to profile web browser activity. First, the
company name, Veeblefetzer, was searched, then the username, FBUCK.
Finally, terms were searched that were likely to identify common inappropriate
activities.
The results for Veeblefetzer were found entirely within bits of old emails. The
email files were unrecoverable, but the fragments show that FBUCK received
email on the system at one time.
The search for "adult" generated hits that fell into three categories. The first,
accounting for more than half of the hits, appeared to be advertisements for adult
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
products, services, and web sites. These included links to images claiming to be
sexually explicit, but no such images were found on the suspect system. The
second category were found in the phrase "young adult fiction", within fragments
of HTML from a bookstore website. The third category appeared to be HTML
fragments with "adult" as part of a longer word.
fu
ll r
igh
ts.
The search for "casino" revealed advertisements for online casinos. No evidence
was found of actual gambling activity.
The search for shopping turned up HTML from online shopping web sites of
major retailers. It appears that the suspect system was used to shop for clothing
and personal items.
ins
Conclusions
eta
2.9
ho
rr
The system to which the suspect image belonged, had one identifiable user,
FBUCK. Windows 95 is primarily a single user operating system, so it is unlikely
that there were others.
04
,A
ut
Prior to March 26, 2000, the history of the system is mostly unknown. Fragments
of email messages indicate an installed email application, and web activity is
indicated by fragments of HTML files.
te
20
Key fingerprint
= AF19 FA27
2F94
998D
FDB5No
DE3D
F8B5 06E4
A169could
4E46be made
Email
activity appeared
to be
work
related.
systematic
search
of email, so this result is not conclusive.
NS
In
sti
tu
Web activity appeared to be, in part, non-work related. Evidence of internet
shopping was found. Links to adult related material were found, but these are
inconclusive, as these sometimes appear in unsolicited email. No images of an
adult nature were found on the disk image.
©
SA
After the operating system was re-installed on March 26, 2000, game programs
were installed on the system. No work related applications were found to be
installed, suggesting that the machine was used only for gaming. It may have
been used for internet access as well, but there is no direct evidence to support
this.
The system continued to be used for approximately four weeks, until April 23,
2000. This is the date of the last system boot.
The timeline shows that the machine was used both during and outside of
business hours. It is possible that the system was being used at the user's
residence on loan, as this is permitted in our organization.
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Limitations in both the Windows 95 operating system and the FAT file system
prevented certain kinds of information from being collected. This made
constructing an event history difficult. These limitations did not interfere with
documenting and the types of activities the system was used for, even after an
operating system re-install.
©
SA
NS
In
sti
tu
te
20
Key fingerprint = AF19 FA27 2F94 998D FDB5 DE3D F8B5 06E4 A169 4E46
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
3.0 Part 3 - Legal Issues Concerning Materials on
Publicly Available Servers
Statutes Relating to Copyright Infringement
ins
3.1
fu
ll r
igh
ts.
Organizations that provide online services to the public, have certain
responsibilities when their networks or servers are used for illegal activities. This
is a brief overview of provider responsibilities regarding two kinds of illegal
material that may be found on public servers. Copyrighted materials and Child
pornography each have statutes addressing them. Requirements for handling
the two kinds of material differ.
ho
rr
eta
Title 17, United States Code defines US copyright law. It includes all of the
provisions of the Digital Millenium Copyright Act, (DMCA). The material in this
section is summarized from these statutes. The complete text of US copyright
law is available online through the US Copyright Office.
04
,A
ut
Section 106 states that the owner of copyright has the exclusive right to make
and distribute copies of a copyrighted work. Copying or distributing copies of a
work without the permission of the copyright holder is considered infringement.
In
sti
tu
te
20
Key
= AF19has
FA27
2F94 998D
FDB5available
DE3D F8B5
06E4an
A169
4E46
The fingerprint
copyright holder
several
remedies
against
infringer.
Section 502 provides for injunctions against copyright infringers. Section 503
provides for impounding and disposition of infringing articles. Section 504
provides for recovery of damages, actual or statutary, and any profits yielded by
the infringing activity. Section 505 provides for recovery of costs and attorneys
fees.
SA
NS
Section 506 defines copyright infringement as criminal, if the infringer willfully
distributes copyrighted works for financial gain, or distributes more than $1,000
worth of copyrighted works in any 180-day period.
©
If an infringement is determined to be criminal, section 509 provides for seizure
and forfeiture of infringing articles, and any materials or equipment used to
manufacture the infringing articles. Title 18, section 2319 outlines penalties for
criminal copyright infringement in addition to the penalties in Title 17. A schedule
of maximum fines and prison terms is listed.
Section 507 specifies limitations on actions resulting from infringement. Criminal
proceedings are limited to within five years, and civil actions are limited to within
three years.
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
3.2
fu
ll r
igh
ts.
Section 512 defines the extent of liabilities for a service provider resulting from
online distribution. Subsection (c) states that a service provider shall not be liable
for infringement, provided they meet three requirements. First, they must have
no direct or indirect knowledge of infringing materials on their systems or
networks. Second, upon obtaining such knowledge, they must remove the
material expeditiously. Third, they must derive no financial benefit from the
presence of the infringing material.
Actions for Handling of Copyrighted Material
eta
ins
If copyrighted material were discovered being distributed on an organization's
computers, the organization must quickly make certain that all copyrighted
material is found and removed, in accordance with 512(c). Evidence of the
infringement must be preserved, because of the potential for criminal
prosecution.
Child Pornography Statutes
04
3.3
,A
ut
ho
rr
If legal department chooses not to submit for prosecution, all confiscated
materials need to be preserved for a period of five years. The statute of
limitations for criminal copyright infringement is five years, three years for civil
liability.
te
20
Key fingerprint = AF19 FA27 2F94 998D FDB5 DE3D F8B5 06E4 A169 4E46
Criminal penalties for the possession and distribution of child pornography are
defined in Title 18, US Code 2252A.
NS
In
sti
tu
Subsection (a)(1-4) states that anyone who knowingly mails, transports, sells,
distributes or receives child pornography in interstate or foreign commerce by
any means, including computer, is punishable by this statute. Anyone who
reproduces such material for distribution is also punishable.
©
SA
Subsection (a)(5) states that anyone who knowingly possesses such material
that has been mailed, sold, or distributed in interstate or foreign commerce is
punishable by this statute.
Subsection (b) establishes punishment guidelines for violators of subsection (a).
Subsection (d) provides for an affirmative defense against a charge of violating
subsection (a)(5) if the defendant possessed less than three images, and
promptly either destroyed them or reported the matter to a law enforcement
agency. The law enforcement agency must be granted access to the images, if
contacted, and in neither case may any other person be allowed to access any
image or copy.
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
3.4
Handling of Child Pornography
Guidance for the handling of incidents where child pornography is discovered, or
knowledge of the existence of child pornography is obtained, is available from the
Department of Justice. The DOJ Child Exploitation and Obscenity Section
(CEOS) maintains resources including points of contact, and applicable statutes.
fu
ll r
igh
ts.
According to the DOJ CEOS website (DOJ):
ho
rr
eta
ins
"The reporting section, 42 U.S.C. § 13032, which is similar to 42 U.S.C. § 13031,
Child Abuse Reporting, requires anyone who is engaged in providing an
electronic communication service to the public, and obtains knowledge of a
violation of the child exploitation statutes, to report such violation to a law
enforcement agency or agencies. The Attorney General is in the process of
designating a federal law enforcement agency that will be responsible for
receiving such reports by electronic service providers. A failure to report is
subject to a civil fine of up to $50,000 in the first instance and $100,000 for any
subsequent failure. No service provider may be held civilly liable for any action
taken in good faith to comply with the reporting requirement."
,A
ut
Based on the above statutes and guidance, a service provider who finds material
containing images containing child pornography on their servers must take the
following steps:
©
SA
NS
In
sti
tu
te
20
04
1) The discovery of the material must be reported
KeyAllfingerprint
= AF19
2F94from
998Dpublicly
FDB5 DE3D
F8B5servers,
06E4 A169
4E46 must
2)
material must
beFA27
removed
available
or access
be disabled.
3) Nothing may be destroyed. All material must be made available to law
enforcement.
4) No copies may knowingly be made of the material.
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
4.0 References
Chuvakin, Anton, "Linux Data Hiding and Recovery"
http://www.linuxsecurity.org/feature_stories/data-hiding-forensics.html
fu
ll r
igh
ts.
Carrier, Brian, "The Sleuth Kit and Autopsy: Forensic Tools for Linux and Other
Unices", 2004
http://www.sleuthkit.org/
Garner, George M., "Forensic Acquisition Tools"
http://users.erols.com/gmgarner/forensics/
ins
Die.net, "Linux man pages online"
http://www.die.net/doc/linux/man/
ho
rr
eta
Microsoft Corporation, Knowledgebase article 131352 "Using Registry Editor in
Real Mode", 5/29/2002
http://support.microsoft.com/default.aspx?scid=kb;en-us;131352&Product=w95
,A
ut
Microsoft Corporation, Knowledgebase article 138306 "Setup Changes Date and
Time Stamp of Installed Files", 12/17/2000,
http://support.microsoft.com/default.aspx?scid=kb;en-us;138306&Product=w95
te
20
04
Microsoft Corporation, Knowledgebase article 141377 "Differences Between
Key
fingerprint
= AF19
FA27 2F94 998D
FDB5 DE3D F8B5 06E4 A169 4E46
Regedit.exe
and
Regedt32.exe",
10/29/2003
http://support.microsoft.com/default.aspx?scid=kb;en-us;141377&Product=w95
In
sti
tu
Microsoft Corporation, Knowledgebase article 158238 "How to Determine the
Version of Windows 95/98/Me in Use", 5/5/2003
http://support.microsoft.com/default.aspx?scid=kb;en-us;158238&Product=w95
SA
NS
Microsoft Corporation, Knowledgebase article 161678 "Regedit.exe Cannot
Search for DWORD or Binary Data", 8/9/2001
http://support.microsoft.com/default.aspx?scid=kb;en-us;161678&Product=w95
©
Microsoft Corporation, Knowledgebase article 178702 "Description of the
mm256.dat and mm2048.dat Files", 12/16/2003
http://support.microsoft.com/default.aspx?scid=kb;en-us;178702&Product=w95
Microsoft Corporation, Knowledgebase article 310516 "How to Add, Modify, or
Delete Registry Subkeys and Values by Using a Registration Entries (.reg) File",
7/15/2004,
http://support.microsoft.com/default.aspx?scid=kb;en-us;310516&Product=w95
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
Microsoft Corporation, Knowledgebase article 322754 "How to Backup, Edit, and
Restore the Registry in Windows 95, Windows 98, and Windows Me", 7/14/2004,
http://support.microsoft.com/default.aspx?scid=kb;en-us;322754&Product=w95
Ponder, Scott, IE History Viewer
http://www.phillipsponder.com
ins
Ridge, Daniel, bmap
ftp://ftp.scyld.com/pub/forensic_computing/bmap/
fu
ll r
igh
ts.
Microsoft Corporation, MSDN Library, "WIN32_FILE_ATTRIBUTE_DATA",
http://msdn.microsoft.com/library/default.asp?url=/library/enus/fileio/base/win32_file_attribute_data_str.asp
eta
United States Copyright Office, http://www.copyright.gov
ho
rr
United States Department of Justice, Child Exploitation and Obscenity Section,
"Federal Child Pornography Statutes",
http://www.usdoj.gov/criminal/ceos/childporn_stats.html
04
,A
ut
United States House of Representatives, Office of the Law Revision Council,
United States Code,
January 6, 2003, http://uscode.house.gov/lawrevisioncounsel.php
©
SA
NS
In
sti
tu
te
20
Key fingerprint = AF19 FA27 2F94 998D FDB5 DE3D F8B5 06E4 A169 4E46
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
Appendix A
Output from help functions of prog and bmap
fu
ll r
igh
ts.
prog:1.0.20 (07/15/03) newt
Usage: prog [OPTION]... [<target-filename>]
use block-list knowledge to perform special operations on files
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
--doc VALUE
where VALUE is one of:
version display version and exit
help display options and exit
man generate man page and exit
sgml generate SGML invocation info
--mode VALUE
where VALUE is one of:
m list sector numbers
c extract a copy from the raw device
s display data
p place data
w wipe
chk test (returns 0 if exist)
sb print number of bytes available
wipe wipe the file from the raw device
frag display fragmentation information for the file
Key
fingerprint
= AF19
FA27 2F94 998D
FDB5
06E4 A169 4E46
checkfrag
test
for fragmentation
(returns
0 ifDE3D
file isF8B5
fragmented)
--outfile <filename> write output to ...
--label useless bogus option
--name
useless bogus option
be verbose
--verbose
--log-thresh <none | fatal | error | info | branch | progress | entryexit> logging
threshold ...
--target <filename> operate on ...
©
SA
bmap:1.0.20 (06/14/04) [email protected]
Usage: bmap [OPTION]... [<target-filename>]
use block-list knowledge to perform special operations on files
--doc VALUE
where VALUE is one of:
version display version and exit
help display options and exit
man generate man page and exit
sgml generate SGML invocation info
--mode VALUE
where VALUE is one of:
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
map list sector numbers
carve extract a copy from the raw device
slack display data in slack space
putslack place data into slack
wipeslack wipe slack
checkslack test for slack (returns 0 if file has slack)
slackbytes print number of slack bytes available
wipe wipe the file from the raw device
frag display fragmentation information for the file
checkfrag test for fragmentation (returns 0 if file is fragmented)
--outfile <filename> write output to ...
--label useless bogus option
--name
useless bogus option
--verbose
be verbose
--log-thresh <none | fatal | error | info | branch | progress | entryexit> logging
threshold ...
--target <filename> operate on ...
©
SA
NS
In
sti
tu
te
20
Key fingerprint = AF19 FA27 2F94 998D FDB5 DE3D F8B5 06E4 A169 4E46
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
Appendix B
Strace output
fu
ll r
igh
ts.
execve("./prog", ["./prog", "--mode", "p", "test-files/prog-demo.txt"], [/* 34 vars */])
=0
lstat64("test-files/prog-demo.txt", {st_mode=S_IFREG|0644, st_size=12, ...}) = 0
open("test-files/prog-demo.txt", O_RDONLY|O_LARGEFILE) = 3
lstat64("test-files/prog-demo.txt", {st_mode=S_IFREG|0644, st_size=12, ...}) = 0
lstat64("/dev/hdc3", {st_mode=S_IFBLK|0660, st_rdev=makedev(22, 3), ...}) = 0
open("/dev/hdc3", O_WRONLY|O_LARGEFILE) = 4
ut
ho
rr
eta
ins
execve("./prog", ["./prog", "--mode", "s", "test-files/prog-demo.txt"], [/* 34 vars */])
=0
lstat64("test-files/prog-demo.txt", {st_mode=S_IFREG|0644, st_size=12, ...}) = 0
open("test-files/prog-demo.txt", O_RDONLY|O_LARGEFILE) = 3
lstat64("test-files/prog-demo.txt", {st_mode=S_IFREG|0644, st_size=12, ...}) = 0
lstat64("/dev/hdc3", {st_mode=S_IFBLK|0660, st_rdev=makedev(22, 3), ...}) = 0
open("/dev/hdc3", O_RDONLY|O_LARGEFILE) = 4
sti
tu
te
20
04
,A
execve("./bmap", ["./bmap", "--mode", "putslack", "test-files/bmap-demo.txt"], [/*
34 vars */]) = 0
lstat64("test-files/bmap-demo.txt", {st_mode=S_IFREG|0644, st_size=12, ...}) = 0
Key
fingerprint = AF19 FA27 2F94 O_RDONLY|O_LARG
998D FDB5 DE3D F8B5
06E4 A169
EFILE)
= 3 4E46
open("test-files/bmap-demo.txt",
lstat64("test-files/bmap-demo.txt", {st_mode=S_IFREG|0644, st_size=12, ...}) = 0
lstat64("/dev/hdc3", {st_mode=S_IFBLK|0660, st_rdev=makedev(22, 3), ...}) = 0
open("/dev/hdc3", O_WRONLY|O_LARGEFILE) = 4
©
SA
NS
In
execve("./bmap", ["./bmap", "--mode", "slack", "test-files/bmap-demo.txt"], [/* 34
vars */]) = 0
lstat64("test-files/bmap-demo.txt", {st_mode=S_IFREG|0644, st_size=12, ...}) = 0
open("test-files/bmap-demo.txt", O_RDONLY|O_LARGEFILE) = 3
lstat64("test-files/bmap-demo.txt", {st_mode=S_IFREG|0644, st_size=12, ...}) = 0
lstat64("/dev/hdc3", {st_mode=S_IFBLK|0660, st_rdev=makedev(22, 3), ...}) = 0
open("/dev/hdc3", O_RDONLY|O_LARGEFILE) = 4
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
Appendix C
File listing for recovered 3.5 inch diskette
4096 Jul 12 16:48 ..
1024 Jul 16 2003 .
487476 Jul 14 2003 prog
1024 Jul 14 2003 Docs
2592 Jul 14 2003 .~5456g.tmp
56950 Jul 14 2003 nc-1.10-16.i386.rpm..rpm
12288 Jul 14 2003 lost+found
1024 May 3 2003 May03
1024 Feb 3 2003 John
fu
ll r
igh
ts.
10 root root
6 root root
1 502
502
2 502
502
1 root root
1 502
502
2 root root
2 502
502
2 502
502
ins
mnt:
total 560
drwxr-xr-x
drwxr-xr-x
-rwxr-xr-x
drwxr-xr-x
-rw-r--r--rwxr-xr-x
drwx-----drwxr-xr-x
drwxr-xr-x
tu
sti
In
root
root
1024 Jul 16 2003 ..
12288 Jul 14 2003 .
NS
mnt/lost+found:
total 13
drwxr-xr-x 6 root
drwx------ 2 root
te
20
04
,A
ut
ho
rr
eta
mnt/Docs:
total 171
drwxr-xr-x 6 root root
1024 Jul 16 2003 ..
-rw------- 1 502
502
19456 Jul 14 2003 Mikemsg.doc
drwxr-xr-x 2 502
502
1024 Jul 14 2003 .
-rwxr-xr-x 1 502
502
26843 Jul 14 2003 Sound-HOWTO-html.tar.gz
502
29696 Jun 11 2003 Letter.doc
-rw------- 1 502
32661 May 21 2003 MP3-HOWTO-html.tar.gz
-rwxr-xr-x 1 502
502
-rwxr-xr-x 1 502
502
29184 May 21 2003 DVD-Playing-HOWTOKey
fingerprint = AF19 FA27 2F94 998D FDB5 DE3D F8B5 06E4 A169 4E46
html.tar
27430 May 21 2003 Kernel-HOWTO-html.tar.gz
-rwxr-xr-x 1 502
502
root
502
502
1024 Jul 16 2003 ..
13487 Jul 14 2003 ebay300.jpg
1024 May 3 2003 .
mnt/John:
total 44
drwxr-xr-x 6 root
drwxr-xr-x 2 502
-rwxr-xr-x 1 502
-rwxr-xr-x 1 502
root
502
502
502
1024 Jul 16 2003 ..
1024 Feb 3 2003 .
19088 Jan 28 2003 sect-num.gif
20680 Jan 28 2003 sectors.gif
©
SA
mnt/May03:
total 17
drwxr-xr-x 6 root
-rwxr-xr-x 1 502
drwxr-xr-x 2 502
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
Appendix D
Log output from dd.exe
fu
ll r
igh
ts.
Forensic Acquisition Utilities, 3, 16, 2, 1029
dd, 3, 16, 2, 1029
Copyright (C) 2002 George M. Garner Jr.
ins
Command Line: dd.exe if=\\.\E: of=c:\download\images\part2.img
conv=noerror,comp --md5sum --verifymd5 -md5out=c:\download\images\part2.img.md5 --log=c:\download\images\part2.log
Based on original version developed by Paul Rubin, David MacKenzie, and
Stuart Kemp
Microsoft Windows: Version 5.0 (Build 2195.Professional Service Pack 4)
eta
21/07/2004 19:47:23 (UTC)
21/07/2004 15:47:23 (local time)
ho
rr
Current User: ASCL\dcragg
04
,A
ut
Statistics for logical volume \\.\E:
731283456 bytes available
731283456 bytes free
1073184768 bytes total
In
sti
tu
te
20
Key
fingerprint
2F94 998D FDB5 DE3D F8B5 06E4 A169 4E46
Volume
Name:= AF19 FA27\\.\E:
WINDOWS95
Volume Label:
Drive Type:
fixed
Volume Serial Number:
3219-1903
255
Maximum Component Length:
Volume Characteristics:
NS
©
SA
File System:
Clustered:
File system preserves case
File system supports Unicode file names
FAT
No
Volume Extents:
Disk Number:
1
0x000000001f410000
Starting Offset:
Extent Length:
0000001073479680
Copying \\.\E: to c:\download\images\part2.img...
C:\download\tools\response kit\dd.exe:
\\.\E:: Permission denied
File data in the range 0x25f41000-0x25f41000 could not be read.
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
C:\download\tools\response kit\dd.exe:
\\.\E:: Permission denied
File data in the range 0x25f41000-0x25f41000 could not be read.
C:\download\tools\response kit\dd.exe:
\\.\E:: Permission denied
File data in the range 0x25f41000-0x25f41000 could not be read.
C:\download\tools\response kit\dd.exe:
\\.\E:: Permission denied
File data in the range 0x25f41000-0x25f41000 could not be read.
C:\download\tools\response kit\dd.exe:
\\.\E:: Permission denied
File data in the range 0x25f41000-0x25f41000 could not be read.
C:\download\tools\response kit\dd.exe:
\\.\E:: Permission denied
File data in the range 0x25f41000-0x25f41000 could not be read.
C:\download\tools\response kit\dd.exe:
\\.\E:: Permission denied
File data in the range 0x25f41000-0x25f41000 could not be read.
C:\download\tools\response kit\dd.exe:
\\.\E:: Permission denied
File data in the range 0x25f41000-0x25f41000 could not be read.
\3499d366ba60b2d00e97f4341af649e4 [\\\\.\\E:]
*c:\\download\\images\\part2.img
tu
te
20
04
Verifying output file...
Key
fingerprint = AF19 FA27 2F94 998D FDB5
DE3D F8B5 06E4 A169 4E46
\3499d366ba60b2d00e97f4341af649e4
[\\\\.\\E:]
*c:\\download\\images\\part2.img
The checksums do match.
©
SA
NS
In
sti
Output c:\download\images\part2.img 540407351/540407351 bytes
(compressed/uncompressed)
262088+0 records in
262088+0 records out
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
Appendix E
log output from Mcaffee Anti-Virus
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
9/3/2004
11:44 AM
Scan Started S047528SECURITY\Administrator
On Demand Scan
9/3/2004
11:44 AM
Scan Settings
S047528SECURITY\Administrator
Current scan settings:
9/3/2004
11:44 AM
Scan Settings
S047528SECURITY\Administrator
Log file size is limited to
100 kilobytes.
9/3/2004
11:44 AM
Scan Settings
S047528SECURITY\Administrator
Action options
9/3/2004
11:44 AM
Scan Settings
S047528SECURITY\Administrator
Automatically clean :
DISABLED
9/3/2004
11:44 AM
Scan Settings
S047528SECURITY\Administrator
Automatically delete :
DISABLED
9/3/2004
11:44 AM
Scan Settings
S047528SECURITY\Administrator
Log options
9/3/2004
11:44 AM
Scan Settings
S047528SECURITY\Administrator
Virus detections
:
ENABLED
9/3/2004
11:44 AM
Scan Settings
Key fingerprint
= AF19 FA27 2F94 998D FDB5 DE3D F8B5
06E4 A169
S047528SECURITY\Administrator
Cleaned
files 4E46 :
ENABLED
9/3/2004
11:44 AM
Scan Settings
S047528SECURITY\Administrator
Deleted files
:
ENABLED
9/3/2004
11:44 AM
Scan Settings
S047528SECURITY\Administrator
Moved files
:
ENABLED
9/3/2004
11:44 AM
Scan Settings
S047528SECURITY\Administrator
Scan Options
9/3/2004
11:44 AM
Scan Settings
S047528SECURITY\Administrator
Subdirectories
:
ENABLED
9/3/2004
11:44 AM
Scan Settings
S047528SECURITY\Administrator
All files
:
ENABLED
9/3/2004
11:44 AM
Scan Settings
S047528SECURITY\Administrator
Default files
:
DISABLED
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
9/3/2004
11:44 AM
Scan Settings
Compressed files
:
S047528SECURITY\Administrator
ENABLED
11:44 AM
Scan Settings
9/3/2004
S047528SECURITY\Administrator
Skip memory scan
:
ENABLED
11:44 AM
Scan Settings
9/3/2004
S047528SECURITY\Administrator
Scan boot sector
:
ENABLED
11:44 AM
Scan Settings
9/3/2004
S047528SECURITY\Administrator
Priority [1-5]
:0
9/3/2004
11:44 AM
Scan Settings
Heuristics scan : DISABLED
S047528SECURITY\Administrator
Scan Settings
9/3/2004
11:44 AM
Macro heuristics scan :
S047528SECURITY\Administrator
DISABLED
Scan Settings
9/3/2004
11:44 AM
Program file heuristics scan :
S047528SECURITY\Administrator
DISABLED
9/3/2004
11:44 AM
Scan Settings
S047528SECURITY\Administrator
Remove all Macros : DISABLED
11:44 AM
Scan Settings
9/3/2004
Program extensions :
S047528SECURITY\Administrator
(NoExtension) ??_ ASP BAT CDR COM CSC DL? DOC DOT EXE GMS GZ?
HLP HT? IM? INI JS? MD? MPP MPT MSG MSO OCX OLE OV? POT PP? RTF
Key
= AF19
FA27VS?
2F94V998D
FDB5
DE3D
F8B5
06E4 A169 4E46
XD WBK
WPD
XL?
XML
SCRfingerprint
SHS SMM
SYS VBS
Scan Settings
9/3/2004
11:44 AM
Scan targets
S047528SECURITY\Administrator
Scan Settings
9/3/2004
11:44 AM
E:\
S047528SECURITY\Administrator
9/3/2004
11:47 AM
Scan Summary
Scan Summary
S047528SECURITY\Administrator
11:47 AM
Scan Summary
9/3/2004
S047528SECURITY\Administrator
Memory scan
: No
Viruses Found
9/3/2004
11:47 AM
Scan Summary
S047528SECURITY\Administrator
Boot sectors scanned : 0
9/3/2004
11:47 AM
Scan Summary
S047528SECURITY\Administrator
Boot sectors infected : 0
9/3/2004
11:47 AM
Scan Summary
S047528SECURITY\Administrator
Boot sectors cleaned : 0
9/3/2004
11:47 AM
Scan Summary
S047528SECURITY\Administrator
Files scanned
: 2924
9/3/2004
11:47 AM
Scan Summary
S047528SECURITY\Administrator
Files infected
:0
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
9/3/2004
11:47 AM
Scan Summary
S047528SECURITY\Administrator
Scan Summary
9/3/2004
11:47 AM
S047528SECURITY\Administrator
Scan Summary
9/3/2004
11:47 AM
S047528SECURITY\Administrator
9/3/2004
11:47 AM
Scan Complete
S047528SECURITY\Administrator
Files cleaned
:0
Files deleted
:0
Files moved
:0
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
On Demand Scan
©
SA
NS
In
sti
tu
te
20
Key fingerprint = AF19 FA27 2F94 998D FDB5 DE3D F8B5 06E4 A169 4E46
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
Appendix F
Procedure for win95 registry recovery
Transfer the recovered registry files, system.sus and user.sus, to the Windows
95/98/ME host.
fu
ll r
igh
ts.
Boot to the command prompt. This can be done by pressing the F8 key during
startup, or by selecting "boot to command prompt" from the shutdown menu.
ins
attrib -s -h -r system.dat
rename system.dat system.sav
attrib -s -h -r user.dat
rename user.dat user.sav
eta
rename system.sus system.dat
rename user.sus user.dat
,A
04
rename system.dat system.sus
rename user.dat user.sus
ut
ho
rr
regedit /e registry.txt
The /e option exports the entire registry. The output file can have any extension.
It will still have a .reg format.
sti
tu
te
20
Key
fingerprint
= AF19
FA27 2F94 998D FDB5 DE3D F8B5 06E4 A169 4E46
rename
system.sav
system.dat
attrib +s +h +r system.dat
rename user.sav user.dat
attrib +s +h +r user.dat
©
SA
NS
In
Transfer registry.dat to the analysis system.
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
Appendix G
copy-dates.pl
#!/usr/bin/perl
fu
ll r
igh
ts.
# Make the output of Autopsy's timelin function easier to
# search by giving each line its own date string.
ins
# First, build a hash containing days of the week
@weekdays = ("Sun", "Mon", "Tue", "Wed", "Thu", "Fri", "Sat");
foreach $day (@weekdays) {
$date_test{$day} = 0;
}
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
while (<STDIN>) {
@line = split;
if (exists $date_test{$line[0]}) { # This line has a date string
@date = @line[0..4];
# Copy it
}
else { # Use the stored date string
print "@date ";
}
print "@line\n";
}
Key fingerprint = AF19 FA27 2F94 998D FDB5 DE3D F8B5 06E4 A169 4E46
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
Appendix H
Deleted files found on suspect image
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Type dir / in File Name Written Time Access Time Create Time Size
UID GID Meta
r / r c:\WINDOWS/INF/_RVDATA.BIN 2000.04.01 21:50:38 (EST) 2000.03.31
00:00:00 (EST) 2000.04.01 21:50:28 (EST) 201094 0 0 328455
r / r c:\WINDOWS/SYSTEM/VMM32/_IOSXLAT.VXD 1996.08.24 11:11:10
(EDT) 2000.03.25 00:00:00 (EST) 1969.12.31 19:00:00 (EST) 18077 0
0 545798
r / r c:\WINDOWS/SYSTEM/VMM32/_OSMGR.VXD 1996.08.24 11:11:10
(EDT) 2000.03.25 00:00:00 (EST) 1969.12.31 19:00:00 (EST) 106867 0
0 545799
r / r c:\WINDOWS/SYSTEM/VMM32/_OSNET.VXD 1996.08.24 11:11:10 (EDT)
2000.03.25 00:00:00 (EST) 1969.12.31 19:00:00 (EST) 13912 0 0
545800
r / r c:\WINDOWS/SYSTEM/VMM32/_YNAPAGE.VXD 1996.08.24 11:11:10
(EDT) 2000.03.25 00:00:00 (EST) 1969.12.31 19:00:00 (EST) 26982 0
0 545801
r / r c:\WINDOWS/SYSTEM/VMM32/_BIOS.VXD 1996.08.24 11:11:10 (EDT)
2000.03.25 00:00:00 (EST) 1969.12.31 19:00:00 (EST) 17993 0 0
545802
r / r c:\WINDOWS/SYSTEM/VMM32/_NT13.VXD 1996.08.24 11:11:10 (EDT)
2000.03.25 00:00:00 (EST) 1969.12.31 19:00:00 (EST) 9931 0 0
Key
fingerprint = AF19 FA27 2F94 998D FDB5 DE3D F8B5 06E4 A169 4E46
545804
r / r c:\WINDOWS/SYSTEM/VMM32/_AGESWAP.VXD 1996.08.24 11:11:10
(EDT) 2000.03.25 00:00:00 (EST) 1969.12.31 19:00:00 (EST) 13905 0
0 545806
r / r c:\WINDOWS/SYSTEM/VMM32/_ARITY.VXD 1996.08.24 11:11:10 (EDT)
2000.03.25 00:00:00 (EST) 1969.12.31 19:00:00 (EST) 9801 0 0
545807
r / r c:\WINDOWS/SYSTEM/VMM32/_EBOOT.VXD 1996.08.24 11:11:10 (EDT)
2000.03.25 00:00:00 (EST) 1969.12.31 19:00:00 (EST) 22127 0 0
545809
r / r c:\WINDOWS/SYSTEM/VMM32/_86MMGR.VXD 1996.08.24 11:11:10
(EDT) 2000.03.25 00:00:00 (EST) 1969.12.31 19:00:00 (EST) 95387 0
0 545810
r / r c:\WINDOWS/SYSTEM/VMM32/_CACHE.VXD 1996.08.24 11:11:10 (EDT)
2000.03.25 00:00:00 (EST) 1969.12.31 19:00:00 (EST) 19566 0 0
545811
r / r c:\WINDOWS/SYSTEM/VMM32/_CDFSD.VXD 1996.08.24 11:11:10 (EDT)
2000.03.25 00:00:00 (EST) 1969.12.31 19:00:00 (EST) 22408 0 0
545812
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
r / r c:\WINDOWS/SYSTEM/VMM32/_DEF.VXD 1996.08.24 11:11:10 (EDT)
2000.03.25 00:00:00 (EST) 1969.12.31 19:00:00 (EST) 9765 0 0
545813
r / r c:\WINDOWS/SYSTEM/VMM32/_DMAD.VXD 1996.08.24 11:11:10 (EDT)
2000.03.25 00:00:00 (EST) 1969.12.31 19:00:00 (EST) 41844 0 0
545814
r / r c:\WINDOWS/SYSTEM/VMM32/_FAT.VXD 1996.08.24 11:11:10 (EDT)
2000.03.25 00:00:00 (EST) 1969.12.31 19:00:00 (EST) 71215 0 0
545815
r / r c:\WINDOWS/SYSTEM/VMM32/_FBACKUP.VXD 1996.08.24 11:11:10
(EDT) 2000.03.25 00:00:00 (EST) 1969.12.31 19:00:00 (EST) 16855 0
0 545816
r / r c:\WINDOWS/SYSTEM/VMM32/_KD.VXD 1996.08.24 11:11:10 (EDT)
2000.03.25 00:00:00 (EST) 1969.12.31 19:00:00 (EST) 45371 0 0
545817
r / r c:\WINDOWS/SYSTEM/VMM32/_MCPD.VXD 1996.08.24 11:11:10 (EDT)
2000.03.25 00:00:00 (EST) 1969.12.31 19:00:00 (EST) 18578 0 0
545818
r / r c:\WINDOWS/SYSTEM/VMM32/_MPOLL.VXD 1996.08.24 11:11:10 (EDT)
2000.03.25 00:00:00 (EST) 1969.12.31 19:00:00 (EST) 30931 0 0
545819
r / r c:\WINDOWS/SYSTEM/VMM32/_PICD.VXD 1996.08.24 11:11:10 (EDT)
2000.03.25 00:00:00 (EST) 1969.12.31 19:00:00 (EST) 46740 0 0
545820
r / r c:\WINDOWS/SYSTEM/VMM32/_SD.VXD 1996.08.24 11:11:10 (EDT)
Key
fingerprint
= AF19(EST)
FA27 2F94
998D FDB5
DE3D (EST)
F8B5 06E4
A16904E46
2000.03.25
00:00:00
1969.12.31
19:00:00
5721
0
545821
r / r c:\WINDOWS/SYSTEM/VMM32/_TD.VXD 1996.08.24 11:11:10 (EDT)
2000.03.25 00:00:00 (EST) 1969.12.31 19:00:00 (EST) 31684 0 0
545822
r / r c:\WINDOWS/SYSTEM/VMM32/_TDAPI.VXD 1996.08.24 11:11:10 (EDT)
2000.03.25 00:00:00 (EST) 1969.12.31 19:00:00 (EST) 18546 0 0
545823
r / r c:\WINDOWS/SYSTEM/VMM32/_XDLDR.VXD 1996.08.24 11:11:10 (EDT)
2000.03.25 00:00:00 (EST) 1969.12.31 19:00:00 (EST) 35112 0 0
545824
r / r c:\WINDOWS/SYSTEM/VMM32/_OMBUFF.VXD 1996.08.24 11:11:10
(EDT) 2000.03.25 00:00:00 (EST) 1969.12.31 19:00:00 (EST) 10401 0
0 545825
r / r c:\WINDOWS/SYSTEM/VMM32/_CD.VXD 1996.08.24 11:11:10 (EDT)
2000.03.25 00:00:00 (EST) 1969.12.31 19:00:00 (EST) 23956 0 0
545826
r / r c:\WINDOWS/SYSTEM/VMM32/_COMM.VXD 1996.08.24 11:11:10 (EDT)
2000.03.25 00:00:00 (EST) 1969.12.31 19:00:00 (EST) 32967 0 0
545827
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
r / r c:\WINDOWS/SYSTEM/VMM32/_PD.VXD 1996.08.24 11:11:10 (EDT)
2000.03.25 00:00:00 (EST) 1969.12.31 19:00:00 (EST) 22618 0 0
545828
r / r c:\WINDOWS/SYSTEM/VMM32/_COND.VXD 1996.08.24 11:11:10 (EDT)
2000.03.25 00:00:00 (EST) 1969.12.31 19:00:00 (EST) 53438 0 0
545829
r / r c:\WINDOWS/SYSTEM/VMM32/_WIN32.VXD 1996.08.24 11:11:10 (EDT)
2000.03.25 00:00:00 (EST) 1969.12.31 19:00:00 (EST) 54497 0 0
545830
r / r c:\WINDOWS/SYSTEM/VMM32/_DD.VXD 1996.08.24 11:11:10 (EDT)
2000.03.25 00:00:00 (EST) 1969.12.31 19:00:00 (EST) 107131 0 0
545831
r / r c:\WINDOWS/SYSTEM/VMM32/_FLATD.VXD 1996.08.24 11:11:10 (EDT)
2000.03.25 00:00:00 (EST) 1969.12.31 19:00:00 (EST) 7723 0 0
545832
r / r c:\WINDOWS/SYSTEM/VMM32/_SHARE.VXD 1996.08.24 11:11:10 (EDT)
2000.03.25 00:00:00 (EST) 1969.12.31 19:00:00 (EST) 14926 0 0
545833
r / r c:\WINDOWS/SYSTEM/VMM32/_MD.VXD 1996.08.24 11:11:10 (EDT)
2000.03.25 00:00:00 (EST) 1969.12.31 19:00:00 (EST) 9815 0 0
545834
r / r c:\WINDOWS/SYSTEM/VMM32/_MOUSE.VXD 1996.08.24 11:11:10
(EDT) 2000.03.25 00:00:00 (EST) 1969.12.31 19:00:00 (EST) 32815 0
0 545835
r / r c:\WINDOWS/SYSTEM/VMM32/_IOS.VXD 1996.08.24 11:11:10 (EDT)
Key
fingerprint
= AF19(EST)
FA27 2F94
998D FDB5
DE3D (EST)
F8B5 06E4
A169 4E46
2000.03.25
00:00:00
1969.12.31
19:00:00
21429
0 0
545836
r / r c:\WINDOWS/SYSTEM/VMM32/_ONFIGMG.VXD 1996.08.24 11:11:10
(EDT) 2000.03.25 00:00:00 (EST) 1969.12.31 19:00:00 (EST) 90521 0
0 545837
r / r c:\WINDOWS/SYSTEM/VMM32/_POOLER.VXD 1996.08.24 11:11:10
(EDT) 2000.03.25 00:00:00 (EST) 1969.12.31 19:00:00 (EST) 27196 0
0 545838
r / r c:\WINDOWS/SYSTEM/VMM32/_HELL.VXD 1996.08.24 11:11:10 (EDT)
2000.03.25 00:00:00 (EST) 1969.12.31 19:00:00 (EST) 78965 0 0
545839
r / r c:\WINDOWS/SYSTEM/VMM32/_ERF.VXD 1996.08.24 11:11:10 (EDT)
2000.03.25 00:00:00 (EST) 1969.12.31 19:00:00 (EST) 22583 0 0
545840
r / r c:\WINDOWS/SYSTEM/BACKUP/_SVBVM50.DLL 1997.07.19 15:55:40
(EDT) 2000.04.23 00:00:00 (EDT) 2000.04.23 11:45:04 (EDT) 1347344 0
0 10430477
r / r c:\WINDOWS/SYSTEM/_EMP.000 1996.10.31 11:47:16 (EST)
2000.04.23 00:00:00 (EDT) 2000.04.23 11:45:16 (EDT) 22288 0 0
3345957
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
r / r c:\WINDOWS/SYSTEM/regtlib.exe (_EGTLIB.EXE) 1997.12.04 09:36:50
(EST) 2000.04.23 00:00:00 (EDT) 2000.04.23 11:45:08 (EDT) 30720 0
0 3345959
r / r c:\WINDOWS/SYSTEM/~GLH000b.TMP (_GLH000B.TMP) 1996.10.31
11:47:16 (EST) 2000.04.23 00:00:00 (EDT) 2000.04.23 11:45:16 (EDT)
22288 0 0 3345968
r / r c:\WINDOWS/SYSTEM/dx6E243.TMP (_INPUT.DLL) 1997.07.14 18:00:00
(EDT) 2000.03.28 00:00:00 (EST) 2000.03.29 20:14:36 (EST) 175616 0
0 3345970
r / r c:\WINDOWS/SYSTEM/dx6E250.TMP (_INPUT.VXD) 1997.07.14
18:00:00 (EDT) 2000.03.28 00:00:00 (EST) 2000.03.29 20:14:36 (EST)
16986 0 0 3345972
r / r c:\WINDOWS/SYSTEM/dx6E253.TMP (_JOYD.VXD) 1997.07.14 18:00:00
(EDT) 2000.04.09 00:00:00 (EDT) 2000.03.29 20:14:36 (EST) 30320 0
0 3345974
r / r c:\WINDOWS/SYSTEM/dx6E260.TMP (_SANALOG.VXD) 1997.07.14
18:00:00 (EDT) 2000.03.28 00:00:00 (EST) 2000.03.29 20:14:38 (EST)
12101 0 0 3345976
r / r c:\WINDOWS/SYSTEM/dx6E264.TMP (_OY.CPL) 1997.07.14 18:00:00
(EDT) 2000.04.01 00:00:00 (EST) 2000.03.29 20:14:38 (EST) 229888 0
0 3345978
r / r c:\WINDOWS/SYSTEM/dx6E275.TMP (_CDEF.DLL) 1997.07.14 18:00:00
(EDT) 2000.03.28 00:00:00 (EST) 2000.03.29 20:14:38 (EST) 564224 0
0 3345980
r / r c:\WINDOWS/SYSTEM/dx6E290.TMP (_CHAND.DLL) 1997.07.14
Key fingerprint
FA27 2F94
998D FDB5
F8B5 06E4
A169 4E46
18:00:00
(EDT)= AF19
2000.03.28
00:00:00
(EST)DE3D
2000.03.29
20:14:40
(EST)
80384 0 0 3345982
r / r c:\WINDOWS/SYSTEM/dx6E295.TMP (_MBAND.DLL) 1999.01.08
18:10:00 (EST) 2000.03.28 00:00:00 (EST) 2000.03.29 20:14:40 (EST)
27920 0 0 3345984
r / r c:\WINDOWS/SYSTEM/dx6E2A1.TMP (_MCOMPOS.DLL) 1999.01.08
18:10:00 (EST) 2000.03.28 00:00:00 (EST) 2000.03.29 20:14:42 (EST)
48912 0 0 3345986
r / r c:\WINDOWS/SYSTEM/dx6E2A3.TMP (_MIME.DLL) 1999.01.08 18:10:00
(EST) 2000.03.28 00:00:00 (EST) 2000.03.29 20:14:42 (EST) 79120 0
0 3345988
r / r c:\WINDOWS/SYSTEM/dx6E2A6.TMP (_MLOADER.DLL) 1999.01.08
18:10:00 (EST) 2000.03.28 00:00:00 (EST) 2000.03.29 20:14:42 (EST)
22800 0 0 3345990
r / r c:\WINDOWS/SYSTEM/dx6E2B1.TMP (_MUSIC.DLL) 1999.01.08
18:10:00 (EST) 2000.04.09 00:00:00 (EDT) 2000.03.29 20:14:42 (EST)
46352 0 0 3345992
r / r c:\WINDOWS/SYSTEM/dx6E2B3.TMP (_MUSIC16.DLL) 1999.01.08
18:10:00 (EST) 2000.04.09 00:00:00 (EDT) 2000.03.29 20:14:42 (EST)
11328 0 0 3345994
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
r / r c:\WINDOWS/SYSTEM/dx6E2B5.TMP (_MUSIC32.DLL) 1999.01.08
18:10:00 (EST) 2000.03.31 00:00:00 (EST) 2000.03.29 20:14:42 (EST)
16144 0 0 3345996
r / r c:\WINDOWS/SYSTEM/dx6E2C1.TMP (_MSTYLE.DLL) 1999.01.08
18:10:00 (EST) 2000.03.28 00:00:00 (EST) 2000.03.29 20:14:44 (EST)
82192 0 0 3345998
r / r c:\WINDOWS/SYSTEM/dx6E2C4.TMP (_MSYNTH.DLL) 1999.01.08
18:10:00 (EST) 2000.04.09 00:00:00 (EDT) 2000.03.29 20:14:44 (EST)
51472 0 0 3346000
r / r c:\WINDOWS/SYSTEM/dx6E2D0.TMP (_M.DLS) 1999.01.08 18:10:00
(EST) 2000.04.09 00:00:00 (EDT) 2000.03.29 20:14:44 (EST) 3440660 0
0 3346002
r / r c:\WINDOWS/SYSTEM/dx6E333.TMP (_MREADME.TXT) 1999.01.08
18:10:00 (EST) 2000.03.28 00:00:00 (EST) 2000.03.29 20:14:50 (EST) 576
0 0 3346004
r / r c:\WINDOWS/SYSTEM/dx6E336.TMP (_EGSVR32.EXE) 1998.09.02
08:07:08 (EDT) 2000.03.28 00:00:00 (EST) 2000.03.29 20:14:52 (EST)
30720 0 0 3346006
r / r c:\WINDOWS/HELP/_5.TMP 2000.04.23 11:46:06 (EDT) 2000.04.23
00:00:00 (EDT) 2000.04.23 11:46:04 (EDT) 8628 0 0 368234
r / r c:\WINDOWS/HELP/_IJOY.HLP 1997.07.14 18:00:00 (EDT) 2000.04.09
00:00:00 (EDT) 2000.03.29 20:14:54 (EST) 16339 0 0 368238
r / r c:\WINDOWS/FONTS/_LBSINST.%$E 2000.04.23 11:45:04 (EDT)
2000.04.23 00:00:00 (EDT) 2000.04.23 11:45:02 (EDT) 0 0 0 766016
d / d c:\WINDOWS/DESKTOP/_NLINE~1 2000.03.26 17:23:48 (EST)
Key
fingerprint
= AF19(EST)
FA27 2F94
998D FDB5
DE3D (EST)
F8B5 06E4
A169 4E46
2000.03.25
00:00:00
1969.12.31
19:00:00
16384
0 0
1193989
d / d c:\WINDOWS/DESKTOP/_$!$.ME 2000.03.26 17:23:48 (EST)
2000.03.25 00:00:00 (EST) 1969.12.31 19:00:00 (EST) 16384 0 0
1193994
r / r c:\WINDOWS/DESKTOP/ONLINE~1/_NFORM~1.TXT 1996.08.24
11:11:10 (EDT) 2000.03.25 00:00:00 (EST) 1969.12.31 19:00:00 (EST)
3570 0 0 1194501
r / r c:\WINDOWS/DESKTOP/ONLINE~1/_$!$-23.ME 1996.08.24 11:11:10
(EDT) 2000.03.25 00:00:00 (EST) 1969.12.31 19:00:00 (EST) 3570 0 0
1194516
r / r c:\WINDOWS/DESKTOP/Age of Empires II.lnk (_GEOFE~1.LNK)
2000.03.29 20:24:32 (EST) 2000.03.28 00:00:00 (EST) 2000.03.29 20:24:30
(EST) 586 0 0 1194000
r / r c:\WINDOWS/MEDIA/_SSOUND.WAV 1996.08.24 11:11:10 (EDT)
2000.03.25 00:00:00 (EST) 1969.12.31 19:00:00 (EST) 135876 0 0
1687557
r / r c:\WINDOWS/TEMP/IXP000.TMP/_PLAY.INF 1999.03.26 12:09:46 (EST)
2000.03.28 00:00:00 (EST) 1999.03.26 12:09:46 (EST) 2772 0 0
200197
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
0
0
0
0
0
0
0
0
0
0
0
0
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
r / r c:\WINDOWS/TEMP/IXP000.TMP/_PLAYBRZ.INF 1999.05.11 17:05:16
(EDT) 1999.05.11 00:00:00 (EDT) 1999.05.11 17:05:16 (EDT) 2554 0
200198
r / r c:\WINDOWS/TEMP/IXP000.TMP/_PLAYCHS.INF 1999.05.11 17:05:18
(EDT) 1999.05.11 00:00:00 (EDT) 1999.05.11 17:05:18 (EDT) 2520 0
200199
r / r c:\WINDOWS/TEMP/IXP000.TMP/_PLAYCHT.INF 1999.05.11 17:05:18
(EDT) 1999.05.11 00:00:00 (EDT) 1999.05.11 17:05:18 (EDT) 2508 0
200200
r / r c:\WINDOWS/TEMP/IXP000.TMP/_PLAYCZE.INF 1999.05.11 17:05:18
(EDT) 1999.05.11 00:00:00 (EDT) 1999.05.11 17:05:18 (EDT) 2526 0
200201
r / r c:\WINDOWS/TEMP/IXP000.TMP/_PLAYDUT.INF 1999.05.11 17:05:18
(EDT) 1999.05.11 00:00:00 (EDT) 1999.05.11 17:05:18 (EDT) 2552 0
200202
r / r c:\WINDOWS/TEMP/IXP000.TMP/_PLAYFRN.INF 1999.05.11 17:05:18
(EDT) 1999.05.11 00:00:00 (EDT) 1999.05.11 17:05:18 (EDT) 2542 0
200203
r / r c:\WINDOWS/TEMP/IXP000.TMP/_PLAYGER.INF 1999.05.11 17:05:18
(EDT) 1999.05.11 00:00:00 (EDT) 1999.05.11 17:05:18 (EDT) 2562 0
200204
r / r c:\WINDOWS/TEMP/IXP000.TMP/_PLAYITN.INF 1999.05.11 17:05:18
(EDT) 1999.05.11 00:00:00 (EDT) 1999.05.11 17:05:18 (EDT) 2556 0
200205
r / r c:\WINDOWS/TEMP/IXP000.TMP/_PLAYJPN.INF 1999.05.11 17:05:20
Key
fingerprint
= AF1900:00:00
FA27 2F94
998D 1999.05.11
FDB5 DE3D17:05:20
F8B5 06E4
A169 4E46
(EDT)
1999.05.11
(EDT)
(EDT)
2539 0
200206
r / r c:\WINDOWS/TEMP/IXP000.TMP/_PLAYKOR.INF 1999.05.11 17:05:20
(EDT) 1999.05.11 00:00:00 (EDT) 1999.05.11 17:05:20 (EDT) 2514 0
200207
r / r c:\WINDOWS/TEMP/IXP000.TMP/_PLAYNEC.INF 1999.05.11 17:05:20
(EDT) 1999.05.11 00:00:00 (EDT) 1999.05.11 17:05:20 (EDT) 2539 0
200208
r / r c:\WINDOWS/TEMP/IXP000.TMP/_PLAYPOL.INF 1999.05.11 17:05:20
(EDT) 1999.05.11 00:00:00 (EDT) 1999.05.11 17:05:20 (EDT) 2550 0
200209
r / r c:\WINDOWS/TEMP/IXP000.TMP/_PLAYRUS.INF 1999.05.11 17:05:20
(EDT) 1999.05.11 00:00:00 (EDT) 1999.05.11 17:05:20 (EDT) 2577 0
200210
r / r c:\WINDOWS/TEMP/IXP000.TMP/_PLAYSPA.INF 1999.05.11 17:05:20
(EDT) 1999.05.11 00:00:00 (EDT) 1999.05.11 17:05:20 (EDT) 2546 0
200211
r / r c:\WINDOWS/TEMP/IXP000.TMP/_PLAYSVR.EXE 1999.05.11 16:58:42
(EDT) 2000.03.28 00:00:00 (EST) 1999.05.11 16:58:42 (EDT) 29968 0
0 200212
© SANS Institute 2004,
As part of GIAC practical repository.
0
0
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
r / r c:\WINDOWS/TEMP/IXP000.TMP/_PLAYX.DLL 1999.05.11 16:57:38
(EDT) 2000.03.28 00:00:00 (EST) 1999.05.11 16:57:38 (EDT) 217872 0
0 200213
r / r c:\WINDOWS/TEMP/IXP000.TMP/_PMODEMX.DLL 1999.05.11 17:05:28
(EDT) 2000.03.28 00:00:00 (EST) 1999.05.11 17:05:28 (EDT) 76560 0
0 200214
r / r c:\WINDOWS/TEMP/IXP000.TMP/_PWSOCKX.DLL 1999.05.11 17:05:32
(EDT) 2000.03.28 00:00:00 (EST) 1999.05.11 17:05:32 (EDT) 66832 0
0 200215
r / r c:\WINDOWS/TEMP/IXP000.TMP/_ILLSVR.EXE 1999.02.25 11:11:30
(EST) 2000.03.28 00:00:00 (EST) 1999.02.25 11:11:30 (EST) 25360 0
0 200216
r / r c:\WINDOWS/TEMP/IXP000.TMP/_ICENSE.TXT 1999.02.24 17:44:54
(EST) 1999.02.23 00:00:00 (EST) 1999.02.24 17:44:54 (EST) 1315 0 0
200217
r / r c:\WINDOWS/TEMP/IXP000.TMP/_SDPLAY.INF 1999.04.12 11:19:24
(EDT) 2000.03.28 00:00:00 (EST) 1999.04.12 11:19:24 (EDT) 2588 0 0
200218
r / r c:\WINDOWS/TEMP/IXP000.TMP/_EGSP.EXE 1999.05.11 16:58:44
(EDT) 2000.03.28 00:00:00 (EST) 1999.05.11 16:58:44 (EDT) 46864 0
0 200219
r / r c:\WINDOWS/TEMP/IXP000.TMP/dxmigr.dll (_XMIGR.DLL) 1999.05.11
17:13:24 (EDT) 2000.03.28 00:00:00 (EST) 1999.05.11 17:13:24 (EDT)
6784 0 0 200221
r / r c:\WINDOWS/TEMP/IXP000.TMP/DXDiag.exe (_XDIAG.EXE) 1999.05.13
Key
fingerprint
FA27 2F94
998D FDB5
F8B5 06E4
A169 4E46
11:51:16
(EDT)= AF19
2000.03.28
00:00:00
(EST)DE3D
1999.05.13
11:51:16
(EDT)
1252112 0 0 200223
r / r c:\WINDOWS/TEMP/IXP000.TMP/regsp.inf (_EGSP.INF) 1999.04.08
16:52:54 (EDT) 2000.03.28 00:00:00 (EST) 1999.04.08 16:52:54 (EDT)
281 0 0 200225
r / r c:\WINDOWS/TEMP/IXP000.TMP/dplay61a.txt (_PLAY61A.TXT)
1999.04.12 11:19:22 (EDT) 2000.03.28 00:00:00 (EST) 1999.04.12 11:19:22
(EDT) 299 0 0 200227
r / r c:\WINDOWS/TEMP/_ 2000.04.23 12:58:12 (EDT) 2000.04.23 00:00:00
(EDT) 2000.04.23 12:58:10 (EDT) 0 0 0 1047
r / r c:\WINDOWS/TEMP/_EM9103.TMP 2000.04.23 12:41:18 (EDT)
2000.04.23 00:00:00 (EDT) 2000.04.23 12:41:16 (EDT) 36990 0 0 1048
r / r c:\WINDOWS/TEMP/_LGD021.TMP 2000.04.23 11:45:24 (EDT)
2000.04.23 00:00:00 (EDT) 2000.04.23 11:45:02 (EDT) 1173 0 0 1049
r / r c:\WINDOWS/TEMP/DelUS.bat (_ELUS.BAT) 2000.04.23 12:38:20 (EDT)
2000.04.23 00:00:00 (EDT) 2000.04.23 12:38:18 (EDT) 250 0 0 1051
r / r c:\WINDOWS/SYSBCKUP/_EMP.000 1996.08.24 11:11:10 (EDT)
2000.03.31 00:00:00 (EST) 2000.04.01 18:57:06 (EST) 42368 0 0 1541
r / r c:\WINDOWS/_YSTEM.DA1 2000.04.23 11:49:16 (EDT) 2000.04.23
00:00:00 (EDT) 2000.04.23 11:49:14 (EDT) 854996 0 0 327925
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
r / r c:\WINDOWS/_DDASD.DAT 2000.04.23 12:57:48 (EDT) 2000.04.23
00:00:00 (EDT) 1969.12.31 19:00:00 (EST) 204 0 0 327926
r / r c:\WINDOWS/_GLH0003.TMP 2000.04.23 11:45:02 (EDT) 2000.04.23
00:00:00 (EDT) 2000.04.23 11:45:00 (EDT) 5607 0 0 327927
r / r c:\PROGRA~1/DIRECTX/SETUP/dx6E342.TMP (_XSETUP.EXE)
1999.01.08 18:10:00 (EST) 2000.03.28 00:00:00 (EST) 2000.03.29 20:14:52
(EST) 96768 0 0 3396102
r / r c:\PROGRA~1/DIRECTX/SETUP/dx6E350.TMP (_SETUP.DLL)
1999.01.08 18:10:00 (EST) 2000.04.09 00:00:00 (EDT) 2000.03.29 20:14:52
(EST) 135680 0 0 3396104
r / r c:\PROGRA~1/DIRECTX/SETUP/dx6E354.TMP (_SETUP32.DLL)
1999.01.08 18:10:00 (EST) 2000.03.28 00:00:00 (EST) 2000.03.29 20:14:52
(EST) 57344 0 0 3396106
r / r c:\PROGRA~1/DIRECTX/SETUP/dx6E360.TMP (_SETUP16.DLL)
1999.01.08 18:10:00 (EST) 2000.03.28 00:00:00 (EST) 2000.03.29 20:14:54
(EST) 64512 0 0 3396108
d / d c:\PROGRA~1/ONLINE~1/_OMPUS~1 2000.03.26 17:28:18 (EST)
2000.03.25 00:00:00 (EST) 1969.12.31 19:00:00 (EST) 16384 0 0
2461702
d / d c:\PROGRA~1/ONLINE~1/_$!$!!$.ME 2000.03.26 17:28:18 (EST)
2000.03.25 00:00:00 (EST) 1969.12.31 19:00:00 (EST) 16384 0 0
2461704
r / r c:\PROGRA~1/ACCESS~1/_ACKUP.CFG 1996.08.24 11:11:10 (EDT)
2000.04.08 00:00:00 (EDT) 2000.04.08 13:25:50 (EDT) 23834 0 0
551432
Key
= AF19 FA27 2F94 998D FDB5 DE3D F8B5
06E4 A169
4E46 (EDT)
r / r fingerprint
c:\PROGRA~1/ACCESS~1/_SWD6_32.WPC
1996.08.24
11:11:10
2000.03.25 00:00:00 (EST) 1969.12.31 19:00:00 (EST) 164352 0 0
551435
r / r c:\PROGRA~1/ACCESS~1/HYPERT~1/_CI.HT 1996.08.24 11:11:10 (EDT)
2000.03.25 00:00:00 (EST) 1969.12.31 19:00:00 (EST) 829 0 0 551946
r / r c:\PROGRA~1/MICROS~1/AGEOFE~1/DATA/LOAD/_ajl.per (_AJL.PER)
2000.04.23 12:40:36 (EDT) 2000.04.23 00:00:00 (EDT) 2000.04.23 12:40:34
(EDT) 65 0 0 3899912
r / r c:\PROGRA~1/MICROS~1/AGEOFE~1/DATA/LOAD/Greg's Peaceful.per
(_REG'S~1.PER) 2000.04.23 12:40:36 (EDT) 2000.04.23 00:00:00 (EDT)
2000.04.23 12:40:34 (EDT) 2807 0 0 3899915
r / r c:\PROGRA~1/MICROS~1/AGEOFE~1/DATA/LOAD/ai petersen rules.per
(_IPETE~1.PER) 2000.04.23 12:40:38 (EDT) 2000.04.23 00:00:00 (EDT)
2000.04.23 12:40:36 (EDT) 29159 0 0 3899918
r / r c:\PROGRA~1/MICROS~1/AGEOFE~1/DATA/LOAD/petersen
deathmatch.per (_ETERS~1.PER) 2000.04.23 12:40:38 (EDT) 2000.04.23
00:00:00 (EDT) 2000.04.23 12:40:36 (EDT) 45707 0 0 3899921
r / r c:\PROGRA~1/MICROS~1/AGEOFE~1/DATA/LOAD/petersen
upgrades.per (_ETERS~2.PER) 2000.04.23 12:40:38 (EDT) 2000.04.23
00:00:00 (EDT) 2000.04.23 12:40:36 (EDT) 41578 0 0 3899924
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
r / r c:\PROGRA~1/MICROS~1/AGEOFE~1/DATA/LOAD/petersen fishboat.per
(_ETERS~3.PER) 2000.04.23 12:40:38 (EDT) 2000.04.23 00:00:00 (EDT)
2000.04.23 12:40:36 (EDT) 3276 0 0 3899927
r / r c:\PROGRA~1/MICROS~1/AGEOFE~1/DATA/LOAD/petersen dip liar.per
(_ETERS~4.PER) 2000.04.23 12:40:38 (EDT) 2000.04.23 00:00:00 (EDT)
2000.04.23 12:40:36 (EDT) 3544 0 0 3899930
r / r c:\PROGRA~1/MICROS~1/AGEOFE~1/DATA/LOAD/petersen warboat.per
(_ETERS~5.PER) 2000.04.23 12:40:38 (EDT) 2000.04.23 00:00:00 (EDT)
2000.04.23 12:40:36 (EDT) 4083 0 0 3899933
r / r c:\PROGRA~1/MICROS~1/AGEOFE~1/DATA/LOAD/petersen
supplement.per (_ETERS~6.PER) 2000.04.23 12:40:38 (EDT) 2000.04.23
00:00:00 (EDT) 2000.04.23 12:40:36 (EDT) 17850 0 0 3899936
r / r c:\PROGRA~1/MICROS~1/AGEOFE~1/DATA/LOAD/petersen difficulty
loads.per (_ETERS~7.PER) 2000.04.23 12:40:38 (EDT) 2000.04.23 00:00:00
(EDT) 2000.04.23 12:40:36 (EDT) 17098 0 0 3899940
r / r c:\PROGRA~1/MICROS~1/AGEOFE~1/DATA/LOAD/petersen full tech.per
(_ETERS~8.PER) 2000.04.23 12:40:38 (EDT) 2000.04.23 00:00:00 (EDT)
2000.04.23 12:40:36 (EDT) 19315 0 0 3899943
r / r c:\PROGRA~1/MICROS~1/AGEOFE~1/DATA/LOAD/petersen map
loads.per (_ETERS~9.PER) 2000.04.23 12:40:38 (EDT) 2000.04.23 00:00:00
(EDT) 2000.04.23 12:40:36 (EDT) 14166 0 0 3899946
r / r c:\PROGRA~1/MICROS~1/AGEOFE~1/DATA/LOAD/petersen civ
loads.per (_ETER~10.PER) 2000.04.23 12:40:38 (EDT) 2000.04.23 00:00:00
(EDT) 2000.04.23 12:40:36 (EDT) 15124 0 0 3899949
r / r c:\PROGRA~1/MICROS~1/AGEOFE~1/DATA/LOAD/petersen tower.per
Key
fingerprint = AF19
FA27 2F94
998D FDB5
F8B5 06E4
A169 4E46
(_ETER~11.PER)
2000.04.23
12:40:38
(EDT)DE3D
2000.04.23
00:00:00
(EDT)
2000.04.23 12:40:36 (EDT) 4583 0 0 3899952
r / r c:\PROGRA~1/MICROS~1/AGEOFE~1/DATA/LOAD/petersen
diplomacy.per (_ETER~12.PER) 2000.04.23 12:40:38 (EDT) 2000.04.23
00:00:00 (EDT) 2000.04.23 12:40:36 (EDT) 1350 0 0 3899955
r / r c:\PROGRA~1/MICROS~1/AGEOFE~1/DATA/LOAD/petersen castle.per
(_ETER~13.PER) 2000.04.23 12:40:38 (EDT) 2000.04.23 00:00:00 (EDT)
2000.04.23 12:40:36 (EDT) 1013 0 0 3899958
r / r c:\PROGRA~1/MICROS~1/AGEOFE~1/DATA/LOAD/petersen resign.per
(_ETER~14.PER) 2000.04.23 12:40:38 (EDT) 2000.04.23 00:00:00 (EDT)
2000.04.23 12:40:36 (EDT) 2398 0 0 3899961
r / r c:\PROGRA~1/MICROS~1/AGEOFE~1/DATA/LOAD/petersen wonder.per
(_ETER~15.PER) 2000.04.23 12:40:38 (EDT) 2000.04.23 00:00:00 (EDT)
2000.04.23 12:40:36 (EDT) 3050 0 0 3899964
r / r c:\PROGRA~1/MICROS~1/AGEOFE~1/DATA/LOAD/petersen market.per
(_ETER~16.PER) 2000.04.23 12:40:38 (EDT) 2000.04.23 00:00:00 (EDT)
2000.04.23 12:40:36 (EDT) 12154 0 0 3899967
r / r c:\PROGRA~1/MICROS~1/AGEOFE~1/DATA/LOAD/petersen dip
boomer.per (_ETER~17.PER) 2000.04.23 12:40:38 (EDT) 2000.04.23 00:00:00
(EDT) 2000.04.23 12:40:36 (EDT) 338 0 0 3899970
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
r / r c:\PROGRA~1/MICROS~1/AGEOFE~1/DATA/LOAD/petersen gather.per
(_ETER~18.PER) 2000.04.23 12:40:38 (EDT) 2000.04.23 00:00:00 (EDT)
2000.04.23 12:40:36 (EDT) 15138 0 0 3899973
r / r c:\PROGRA~1/MICROS~1/AGEOFE~1/DATA/LOAD/petersen dip
feeder.per (_ETER~19.PER) 2000.04.23 12:40:38 (EDT) 2000.04.23 00:00:00
(EDT) 2000.04.23 12:40:36 (EDT) 5177 0 0 3899976
r / r c:\PROGRA~1/MICROS~1/AGEOFE~1/DATA/LOAD/petersen groups.per
(_ETER~20.PER) 2000.04.23 12:40:38 (EDT) 2000.04.23 00:00:00 (EDT)
2000.04.23 12:40:36 (EDT) 12002 0 0 3899979
r / r c:\PROGRA~1/MICROS~1/AGEOFE~1/DATA/LOAD/petersen dip
insult.per (_ETER~21.PER) 2000.04.23 12:40:38 (EDT) 2000.04.23 00:00:00
(EDT) 2000.04.23 12:40:36 (EDT) 4272 0 0 3899982
r / r c:\PROGRA~1/MICROS~1/AGEOFE~1/DATA/LOAD/petersen dip bully.per
(_ETER~22.PER) 2000.04.23 12:40:38 (EDT) 2000.04.23 00:00:00 (EDT)
2000.04.23 12:40:36 (EDT) 19478 0 0 3899985
r / r c:\PROGRA~1/MICROS~1/AGEOFE~1/DATA/LOAD/petersen warboat
island.per (_ETER~23.PER) 2000.04.23 12:40:38 (EDT) 2000.04.23 00:00:00
(EDT) 2000.04.23 12:40:36 (EDT) 8218 0 0 3899989
r / r c:\PROGRA~1/MICROS~1/AGEOFE~1/DATA/LOAD/petersen rush.per
(_ETER~24.PER) 2000.04.23 12:40:38 (EDT) 2000.04.23 00:00:00 (EDT)
2000.04.23 12:40:36 (EDT) 3719 0 0 3899992
r / r c:\PROGRA~1/MICROS~1/AGEOFE~1/DATA/LOAD/randomgame.per
(_ANDOM~1.PER) 2000.04.23 12:40:38 (EDT) 2000.04.23 00:00:00 (EDT)
2000.04.23 12:40:36 (EDT) 255 0 0 3899995
r / r c:\PROGRA~1/MICROS~1/AGEOFE~1/DATA/LOAD/petersen
Key fingerprint (_ETER~25.PER)
= AF19 FA27 2F94 2000.04.23
998D FDB5 12:40:38
DE3D F8B5
06E4 A169
4E46
constants.per
(EDT)
2000.04.23
00:00:00 (EDT) 2000.04.23 12:40:36 (EDT) 9781 0 0 3899998
r / r c:\PROGRA~1/MICROS~1/AGEOFE~1/machine.txt (_ACHINE.TXT)
2000.04.09 16:54:08 (EDT) 2000.04.09 00:00:00 (EDT) 2000.04.09 16:54:06
(EDT) 0 0 0 3892279
d / d c:\PROGRA~1/_$!$!$!$.$!$ 2000.03.26 17:21:36 (EST) 2000.03.25
00:00:00 (EST) 1969.12.31 19:00:00 (EST) 16384 0 0 537119
r / r c:\PROGRA~1/MAXIS/SIMCIT~1/_C2USA.TMP 2000.04.23 17:39:42
(EDT) 2000.04.23 00:00:00 (EDT) 2000.04.23 17:39:40 (EDT) 8628 0 0
3427347
r / r c:\RECYCLED/_C0.LNK 2000.03.29 20:24:32 (EST) 2000.03.28
00:00:00 (EST) 2000.03.29 20:24:30 (EST) 586 0 0 11341319
r / r c:\RECYCLED/_NFO 2000.03.29 20:37:42 (EST) 2000.03.28 00:00:00
(EST) 2000.03.29 20:37:40 (EST) 300 0 0 11341320
r / r c:\_ONFIG.!~! 2000.04.23 11:21:28 (EDT) 2000.04.23 00:00:00 (EDT)
2000.04.23 11:21:26 (EDT) 0 0 0 29
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
Appendix I
Timeline from 3.5 inch diskette
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Tue Jan 28 2003 10:56:00 20680 ma. -/-rwxr-xr-x 502
502
25
a:/John/sectors.gif
19088 ma. -/-rwxr-xr-x 502
502
24
a:/John/sectnum.gif
Mon Feb 03 2003 06:08:00 1024 m.. d/drwxr-xr-x 502
502
12
a:/John
Sat May 03 2003 06:10:00 1024 m.. d/drwxr-xr-x 502
502
14
a:/May03
19
Wed May 21 2003 06:09:00 27430 ma. -/-rwxr-xr-x 502
502
a:/Docs/Kernel-HOWTO-html.tar.gz
29184 ma. -/-rwxr-xr-x 502
502
13
a:/Docs/DVDPlaying-HOWTO-html.tar
20
Wed May 21 2003 06:12:00 32661 ma. -/-rwxr-xr-x 502
502
a:/Docs/MP3-HOWTO-html.tar.gz
16
Wed Jun 11 2003 09:09:00 29696 ma. -/-rw------- 502
502
a:/Docs/Letter.doc
<fl-160703Mon Jul 14 2003 10:08:09
0 mac ---------- 0
0
1
jp1.dd-alive-1>
12288 m.c d/drwx------ 0
0
11
a:/lost+found
502
21
Mon Jul 14 2003 10:11:50 26843 ma. -/-rwxr-xr-x 502
a:/Docs/Sound-HOWTO-html.tar.gz
Key fingerprint
= AF19
FA27 2F94
998D
DE3D F8B5
4E46 a:/nc-/-rwxr-xr-x
502 06E4
502A16922
Mon
Jul 14 2003
10:12:02
56950
ma.FDB5
1.10-16.i386.rpm..rpm
0
23
<flMon Jul 14 2003 10:12:15 100430 ma. -rwxr-xr-x 0
160703-jp1.dd-dead-23>
502
26
Mon Jul 14 2003 10:12:48 13487 ma. -/-rwxr-xr-x 502
a:/May03/ebay300.jpg
502
27
<flMon Jul 14 2003 10:13:13 546116 m.. -rwxr-xr-x 502
160703-jp1.dd-dead-27>
0
28
Mon Jul 14 2003 10:13:52 2592 m.c -/-rw-r--r-- 0
a:/.~5456g.tmp
0
23
<fl-160703Mon Jul 14 2003 10:19:13 100430 ..c -rwxr-xr-x 0
jp1.dd-dead-23>
502
15
a:/Docs
Mon Jul 14 2003 10:22:36 1024 m.. d/drwxr-xr-x 502
18
a:/prog
Mon Jul 14 2003 10:24:00 487476 m.. -/-rwxr-xr-x 502
502
502
21
Mon Jul 14 2003 10:43:44 26843 ..c -/-rwxr-xr-x 502
a:/Docs/Sound-HOWTO-html.tar.gz
a:/Docs
1024 ..c d/drwxr-xr-x 502
502
15
Mon Jul 14 2003 10:43:53 13487 ..c -/-rwxr-xr-x 502
502
26
a:/May03/ebay300.jpg
22
a:/ncMon Jul 14 2003 10:43:57 56950 ..c -/-rwxr-xr-x 502
502
1.10-16.i386.rpm..rpm
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Mon Jul 14 2003 10:45:48 29184 ..c -/-rwxr-xr-x 502
502
13
a:/Docs/DVD-Playing-HOWTO-html.tar
Mon Jul 14 2003 10:46:00 27430 ..c -/-rwxr-xr-x 502
502
19
a:/Docs/Kernel-HOWTO-html.tar.gz
Mon Jul 14 2003 10:46:07 32661 ..c -/-rwxr-xr-x 502
502
20
a:/Docs/MP3-HOWTO-html.tar.gz
27
<flMon Jul 14 2003 10:47:10 546116 .a. -rwxr-xr-x 502
502
160703-jp1.dd-dead-27>
Mon Jul 14 2003 10:47:57 29696 ..c -/-rw------- 502
502
16
a:/Docs/Letter.doc
Mon Jul 14 2003 10:48:15 19456 mac -/-rw------- 502
502
17
a:/Docs/Mikemsg.doc
24
Mon Jul 14 2003 10:48:53 19088 ..c -/-rwxr-xr-x 502
502
a:/John/sect-num.gif
a:/John/sectors.gif
20680 ..c -/-rwxr-xr-x 502
502
25
502
12
a:/John
Mon Jul 14 2003 10:49:25 1024 ..c d/drwxr-xr-x 502
14
Mon Jul 14 2003 10:50:15 1024 ..c d/drwxr-xr-x 502
502
a:/May03
27
<flWed Jul 16 2003 02:03:00 546116 ..c -rwxr-xr-x 502
502
160703-jp1.dd-dead-27>
2
a:/John/
Wed Jul 16 2003 02:03:13 1024 m.c -/drwxr-xr-x 0
0
(deleted-realloc)
Wed Jul 16 2003 02:05:33 487476 ..c -/-rwxr-xr-x 502
502
18
a:/prog
Wed Jul 16 2003 02:06:15 12288 .a. d/drwx------ 0
0
11
a:/lost+found
Key fingerprint
= AF19
FA27 2F94
998D
FDB5 DE3D 502
F8B5 06E4
124E46 a:/John
Wed
Jul 16 2003
02:09:35
1024
.a. d/drwxr-xr-x
502A169
502
14
Wed Jul 16 2003 02:09:49 1024 .a. d/drwxr-xr-x 502
a:/May03
502
15
a:/Docs
Wed Jul 16 2003 02:10:01 1024 .a. d/drwxr-xr-x 502
Wed Jul 16 2003 02:11:36 2592 .a. -/-rw-r--r-- 0
0
28
a:/.~5456g.tmp
a:/John/
Wed Jul 16 2003 02:12:39 1024 .a. -/drwxr-xr-x 0
0
2
(deleted-realloc)
18
a:/prog
Wed Jul 16 2003 02:12:45 487476 .a. -/-rwxr-xr-x 502
502
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
Appendix J
Timeline from suspect image for Part 2
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Wed Dec 31 1969 19:00:00 126464 ..c -/-rwxrwxrwx 0
0
537617
c:\/PROGRA~1/NETMEE~1/SOEDPER.DLL
70144 ..c -/-rwxrwxrwx 0
0
342786
c:\/WINDOWS/SYSTEM/NAC.DLL
54497 ..c -rwxrwxrwx 0
0
545830 <part2.img_WIN32.VXD-dead-545830>
23906 ..c -/-rwxrwxrwx 0
0
328352
c:\/WINDOWS/INF/MDMGAL.INF
5856 ..c -/-rwxrwxrwx 0
0
342577
c:\/WINDOWS/SYSTEM/COMM.DRV
3552 ..c -/-rwxrwxrwx 0
0
342834
c:\/WINDOWS/SYSTEM/WINSPL16.DRV
1676 ..c -/-rwxrwxrwx 0
0
2885650
c:\/PROGRA~1/ONLINE~1/AT&T/SIGNUP_B.GIF
22953 ..c -/-rwxrwxrwx 0
0
328382
c:\/WINDOWS/INF/MDMMTS.INF
7524 ..c -/-rwxrwxrwx 0
0
328288
c:\/WINDOWS/INF/NETSILC.INF
284784 ..c -/-rwxrwxrwx 0
0
342541
c:\/WINDOWS/SYSTEM/NETDI.DLL
462 ..c -/-rwxrwxrwx 0
0
328315
Key
fingerprint = AF19 FA27 2F94 998D FDB5 DE3D F8B5 06E4 A169 4E46
c:\/WINDOWS/INF/UNKNOWN.INF
82816 ..c -/-rwxrwxrwx 0
0
342562
c:\/WINDOWS/SYSTEM/PIFMGR.DLL
8502 ..c -/-rwxrwxrwx 0
0
368156
c:\/WINDOWS/HELP/WANGSHL.HLP
43008 ..c -/-rwxrwxrwx 0
0
342887
c:\/WINDOWS/SYSTEM/ADVAPI32.DLL
57952 ..c -/-r-xr-xr-x 0
0
765979
c:\/WINDOWS/FONTS/SERIFE.FON
2096 ..c -/-rwxrwxrwx 0
0
342575
c:\/WINDOWS/SYSTEM/UMDM16.DLL
392 ..c -/-rwxrwxrwx 0
0
368193
c:\/WINDOWS/HELP/SNDVOL32.CNT
12663 ..c -/-rwxrwxrwx 0
0
327761
c:\/WINDOWS/RAMDRIVE.SYS
59964 ..c -/-rwxrwxrwx 0
0
1201162
c:\/WINDOWS/SYSTEM/COLOR/MNEBUG18.ICM
16384 ..c d/drwxrwxrwx 0
0
327715
c:\/WINDOWS/FONTS
328 ..c -/-rwxrwxrwx 0
0
1225222
c:\/PROGRA~1/ICW-IN~1/ICWIP.DUN
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
260480 ..c -/-rwxrwxrwx 0
0
342587
c:\/WINDOWS/SYSTEM/SYSDM.CPL
6624 ..c -/-rwxrwxrwx 0
0
342828
c:\/WINDOWS/SYSTEM/PCIMP.PCI
12288 ..c -/-rwxrwxrwx 0
0
342813
c:\/WINDOWS/SYSTEM/OLECLI32.DLL
28448 ..c -/-rwxrwxrwx 0
0
328371
c:\/WINDOWS/INF/MDMLCE.INF
7168 ..c -/-rwxrwxrwx 0
0
328270
c:\/WINDOWS/INF/NETFLEX.INF
204 ..c -r-xr-xr-x 0
0
327926 <part2.img_DDASD.DAT-dead-327926>
65271 ..c -/-rwxrwxrwx 0
0
343557
c:\/WINDOWS/COMMAND/DRVSPACE.BIN
10992 ..c -/-r-xr-xr-x 0
0
765972
c:\/WINDOWS/FONTS/8514FIX.FON
153040 ..c -/-rwxrwxrwx 0
0
342805
c:\/WINDOWS/SYSTEM/OLE2NLS.DLL
55296 ..c -/-rwxrwxrwx 0
0
342646
c:\/WINDOWS/SYSTEM/SYNCENG.DLL
3177 ..c -/-rwxrwxrwx 0
0
2885645
c:\/PROGRA~1/ONLINE~1/AT&T/ONLINEBT.GIF
7834 ..c -/---x--x--x 0
0
6
c:\/SUHDLOG.DAT
59564 ..c -/-rwxrwxrwx 0
0
1201160
c:\/WINDOWS/SYSTEM/COLOR/MNB22G21.ICM
Key fingerprint = AF19
2F94 998D FDB5
DE3D
F8B5
06E4 A169 4E46
545FA27
..c -/-rwxrwxrwx
0
0
327716
c:\/WINDOWS/DOSPRMPT.PIF
20480 ..c -/-rwxrwxrwx 0
0
342863
c:\/WINDOWS/SYSTEM/PANMAP.DLL
0
545820
46740 ..c -/-rwxrwxrwx 0
c:\/WINDOWS/SYSTEM/VMM32/_PICD.VXD (deleted)
32012 ..c -/-rwxrwxrwx 0
0
328248
c:\/WINDOWS/INF/MSWEBSVR.INF
317952 ..c -/-rwxrwxrwx 0
0
537608
c:\/PROGRA~1/NETMEE~1/GCCNC.DLL
812406 ..c -/-rwxrwxrwx 0
0
1308677
c:\/WINDOWS/JAVA/CLASSES/CLASSES.ZIP
41844 ..c -/-rwxrwxrwx 0
0
545814
c:\/WINDOWS/SYSTEM/VMM32/_DMAD.VXD (deleted)
0
342547
57344 ..c -/-rwxrwxrwx 0
c:\/WINDOWS/SYSTEM/ACCESS.CPL
0
342833
91136 ..c -/-rwxrwxrwx 0
c:\/WINDOWS/SYSTEM/SPOOLSS.DLL
0
328424
31088 ..c -/-rwxrwxrwx 0
c:\/WINDOWS/INF/MDMUCOM.INF
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
9324 ..c -/-rwxrwxrwx 0
0
343580
c:\/WINDOWS/COMMAND/LABEL.EXE
9719 ..c -/-rwxrwxrwx 0
0
343588
c:\/WINDOWS/COMMAND/ANSI.SYS
30208 ..c -/-rwxrwxrwx 0
0
342741
c:\/WINDOWS/SYSTEM/MSVIDC32.DLL
67 ..c -/-rwxrwxrwx 0
0
765957
c:\/WINDOWS/FONTS/DESKTOP.INI
19827 ..c -/-rwxrwxrwx 0
0
328254
c:\/WINDOWS/INF/NETAMD.INF
29500 ..c -/-rwxrwxrwx 0
0
328334
c:\/WINDOWS/INF/MDMCOM1.INF
1289 ..c -/-rwxrwxrwx 0
0
368209
c:\/WINDOWS/HELP/INT-MAIL.CNT
9216 ..c -/-rwxrwxrwx 0
0
343584
c:\/WINDOWS/COMMAND/START.EXE
75776 ..c -/-rwxrwxrwx 0
0
342695
c:\/WINDOWS/SYSTEM/PRODINV.DLL
11458 ..c -/-rwxrwxrwx 0
0
328409
c:\/WINDOWS/INF/MDMSPEC.INF
42200 ..c -/-rwxrwxrwx 0
0
1065478
c:\/WINDOWS/WANGSAMP/IMGSAMP.FRM
5632 ..c -/-rwxrwxrwx 0
0
342570
c:\/WINDOWS/SYSTEM/NTDLL.DLL
91648 ..c -/-rwxrwxrwx 0
0
342736
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/WINDOWS/SYSTEM/MSACM32.DLL
146784 ..c -/-rwxrwxrwx 0
0
342589
c:\/WINDOWS/SYSTEM/DESKCP16.DLL
6010 ..c -/-rwxrwxrwx 0
0
2885657
c:\/PROGRA~1/ONLINE~1/AT&T/WNTEXT.HTM
7168 ..c -/-rwxrwxrwx 0
0
342811
c:\/WINDOWS/SYSTEM/STDOLE32.TLB
25486 ..c -/-rwxrwxrwx 0
0
328370
c:\/WINDOWS/INF/MDMLASNO.INF
66952 ..c -/-rwxrwxrwx 0
0
765959
c:\/WINDOWS/FONTS/ARIALBD.TTF
101888 ..c -/-rwxrwxrwx 0
0
537620
c:\/PROGRA~1/NETMEE~1/MSCONFFT.EXE
23424 ..c -/-r-xr-xr-x 0
0
765975
c:\/WINDOWS/FONTS/COURE.FON
17773 ..c -/-rwxrwxrwx 0
0
327719
c:\/WINDOWS/CONFIG.TXT
82432 ..c -/-rwxrwxrwx 0
0
342664
c:\/WINDOWS/SYSTEM/JIT.DLL
31737 ..c -/-rwxrwxrwx 0
0
328210
c:\/WINDOWS/INF/FONTS.INF
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
12800 ..c -/-rwxrwxrwx 0
0
342746
c:\/WINDOWS/SYSTEM/MCICDA.DRV
7723 ..c -/-rwxrwxrwx 0
0
545832
c:\/WINDOWS/SYSTEM/VMM32/_FLATD.VXD (deleted)
30630 ..c -/-rwxrwxrwx 0
0
328398
c:\/WINDOWS/INF/MDMPRODM.INF
22103 ..c -/-rwxrwxrwx 0
0
328268
c:\/WINDOWS/INF/NETEE16.INF
7723 ..c -rwxrwxrwx 0
0
545832 <part2.img_FLATD.VXD-dead-545832>
121344 ..c -/-r-xr-xr-x 0
0
1243660
c:\/PROGRA~1/THEMIC~1/GUIDE.EXE
30720 ..c -/-rwxrwxrwx 0
0
342593
c:\/WINDOWS/SYSTEM/MF3216.DLL
10560 ..c -/-rwxrwxrwx 0
0
342561
c:\/WINDOWS/SYSTEM/IOSCLASS.DLL
13101 ..c -/-rwxrwxrwx 0
0
368172
c:\/WINDOWS/HELP/MFCUIX.HLP
31744 ..c -/-r-xr-xr-x 0
0
765976
c:\/WINDOWS/FONTS/COURF.FON
16384 ..c d/d-wx-wx-wx 0
0
551441
c:\/PROGRA~1/ACCESS~1/HyperTerminal (HYPERT~1)
20208 ..c -/-rwxrwxrwx 0
0
328264
c:\/WINDOWS/INF/NETDEC.INF
5541 ..c -/-rwxrwxrwx 0
0
2885651
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/PROGRA~1/ONLINE~1/AT&T/TITLE2.GIF
75792 ..c -/-rwxrwxrwx 0
0
342703
c:\/WINDOWS/SYSTEM/MSNSSPC.DLL
48128 ..c -/-rwxrwxrwx 0
0
342538
c:\/WINDOWS/SYSTEM/MSPRINT2.DLL
24626 ..c -/-rwxrwxrwx 0
0
327717
c:\/WINDOWS/CMD640X.SYS
490 ..c -/-rwxrwxrwx 0
0
1225223
c:\/PROGRA~1/ICW-IN~1/ICWX25A.DUN
27076 ..c -/-rwxrwxrwx 0
0
2885644
c:\/PROGRA~1/ONLINE~1/AT&T/MGRMAP.GIF
4017 ..c -/-rwxrwxrwx 0
0
2257930
c:\/WINDOWS/SHELLNEW/QUATTRO.WB2
48640 ..c -/-rwxrwxrwx 0
0
342588
c:\/WINDOWS/SYSTEM/TIMEDATE.CPL
38462 ..c -/-rwxrwxrwx 0
0
327844
c:\/WINDOWS/Setup.bmp (SETUP.BMP)
5448 ..c -/-rwxrwxrwx 0
0
342795
c:\/WINDOWS/SYSTEM/CP_28594.NLS
5721 ..c -rwxrwxrwx 0
0
545821 <part2.img_SD.VXD-dead-545821>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
16384 ..c d/drwxrwxrwx 0
0
2461701
c:\/PROGRA~1/ONLINE~1/AOL
18944 ..c -/-rwxrwxrwx 0
0
342706
c:\/WINDOWS/SYSTEM/IMAADP32.ACM
51043 ..c -/-rwxrwxrwx 0
0
328232
c:\/WINDOWS/INF/MOS.INF
26905 ..c -/-rwxrwxrwx 0
0
368147
c:\/WINDOWS/HELP/LICENSE.HLP
578 ..c -/-rwxrwxrwx 0
0
327709
c:\/WINDOWS/Pinstripe.bmp (PINSTR~1.BMP)
4096 ..c -/-rwxrwxrwx 0
0
342900
c:\/WINDOWS/SYSTEM/NETAPI32.DLL
18967 ..c -/-rwxrwxrwx 0
0
343561
c:\/WINDOWS/COMMAND/SYS.COM
15437 ..c -/-rwxrwxrwx 0
0
328373
c:\/WINDOWS/INF/MDMLNGSH.INF
5408 ..c -/-rwxrwxrwx 0
0
342544
c:\/WINDOWS/SYSTEM/RNASETUP.DLL
13760 ..c -/-rwxrwxrwx 0
0
537627
c:\/PROGRA~1/NETMEE~1/MNMCLP_.DLL
61680 ..c -/-rwxrwxrwx 0
0
342567
c:\/WINDOWS/SYSTEM/WINOA386.MOD
28 ..c -/-rwxrwxrwx 0
0
327801
c:\/WINDOWS/QTW.INI
13322 ..c -/-rwxrwxrwx 0
0
328243
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/WINDOWS/INF/MSMOUSE.INF
13824 ..c -/-r-xr-xr-x 0
0
1243656
c:\/PROGRA~1/THEMIC~1/CCPSH.DLL
7212 ..c -/-rwxrwxrwx 0
0
1306629
c:\/PROGRA~1/INTERN~1/RAREADME.TXT
5684 ..c -/-rwxrwxrwx 0
0
342677
c:\/WINDOWS/SYSTEM/JAVASUP.VXD
63488 ..c -/-rwxrwxrwx 0
0
342852
c:\/WINDOWS/SYSTEM/APPWIZ.CPL
61200 ..c -/-rwxrwxrwx 0
0
342915
c:\/WINDOWS/SYSTEM/HLINK.DLL
1056 ..c -/-rwxrwxrwx 0
0
327746
c:\/WINDOWS/WINNEWS.TXT
40707 ..c -/-rwxrwxrwx 0
0
328220
c:\/WINDOWS/INF/LOCALE.INF
48128 ..c -/-rwxrwxrwx 0
0
327791
c:\/WINDOWS/FILEXFER.EXE
2501 ..c -/-rwxrwxrwx 0
0
2885643
c:\/PROGRA~1/ONLINE~1/AT&T/JUMPER.GIF
8274 ..c -/-rwxrwxrwx 0
0
2172933
c:\/WINDOWS/CURSORS/APPSTART.ANI
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
15660 ..c -/-rwxrwxrwx 0
0
328201
c:\/WINDOWS/INF/AWFAX.INF
28160 ..c -/-rwxrwxrwx 0
0
342655
c:\/WINDOWS/SYSTEM/ICHRCNV.DLL
204288 ..c -/-rwxrwxrwx 0
0
327770
c:\/WINDOWS/EXPLORER.EXE
12688 ..c -/-rwxrwxrwx 0
0
342684
c:\/WINDOWS/SYSTEM/KEYBOARD.DRV
81744 ..c -/-r-xr-xr-x 0
0
765980
c:\/WINDOWS/FONTS/SERIFF.FON
0 .ac -/-rwxrwxrwx 0
0
327809
c:\/WINDOWS/WIN386.SWP
25088 ..c -/-rwxrwxrwx 0
0
342635
c:\/WINDOWS/SYSTEM/OITWA400.DLL
28812 ..c -/-rwxrwxrwx 0
0
328438
c:\/WINDOWS/INF/MDMZYXLD.INF
82944 ..c -/-rwxrwxrwx 0
0
342657
c:\/WINDOWS/SYSTEM/ICWPHBK.DLL
23617 ..c -/-rwxrwxrwx 0
0
328353
c:\/WINDOWS/INF/MDMGATEW.INF
31886 ..c -/-rwxrwxrwx 0
0
368170
c:\/WINDOWS/HELP/CALC.HLP
24503 ..c -/-rwxrwxrwx 0
0
327701
c:\/WINDOWS/WIN.COM
1701 ..c -/-rwxrwxrwx 0
0
328444
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/WINDOWS/INF/TAMWRAP.INF
22016 ..c -/-rwxrwxrwx 0
0
342662
c:\/WINDOWS/SYSTEM/JAVAPRXY.DLL
10640 ..c -/-rwxrwxrwx 0
0
342825
c:\/WINDOWS/SYSTEM/MSGSRV32.EXE
519340 ..c -/-rwxrwxrwx 0
0
368177
c:\/WINDOWS/HELP/WINDOWS.HLP
23134 ..c -/-rwxrwxrwx 0
0
685590
c:\/WINDOWS/SYSTEM/IOSUBSYS/SCSIPORT.PDR
46305 ..c -/-rwxrwxrwx 0
0
328343
c:\/WINDOWS/INF/MDMDSI.INF
26982 ..c -/-rwxrwxrwx 0
0
545801
c:\/WINDOWS/SYSTEM/VMM32/_YNAPAGE.VXD (deleted)
4543 ..c -/-rwxrwxrwx 0
0
328291
c:\/WINDOWS/INF/NETSMCTR.INF
59980 ..c -/-rwxrwxrwx 0
0
1201165
c:\/WINDOWS/SYSTEM/COLOR/MNP22G18.ICM
38400 ..c -/-rwxrwxrwx 0
0
327751
c:\/WINDOWS/SCRIPT.DOC
35436 ..c -/-rwxrwxrwx 0
0
328327
c:\/WINDOWS/INF/MDMAUS.INF
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
33941 ..c -/-rwxrwxrwx 0
0
328336
c:\/WINDOWS/INF/MDMCPI.INF
59980 ..c -/-rwxrwxrwx 0
0
1201164
c:\/WINDOWS/SYSTEM/COLOR/MNP22G15.ICM
67696 ..c -/-rwxrwxrwx 0
0
342745
c:\/WINDOWS/SYSTEM/MCIAVI.DRV
1 ..c -/-rwxrwxrwx 0
0
342715
c:\/WINDOWS/SYSTEM/MIDIMAP.CFG
5152 ..c -/-rwxrwxrwx 0
0
537650
c:\/PROGRA~1/NETMEE~1/MNMALP.EXE
601 ..c -/-rwxrwxrwx 0
0
342952
c:\/WINDOWS/SYSTEM/SWEDISH.TRN
52196 ..c -/-rwxrwxrwx 0
0
368160
c:\/WINDOWS/HELP/RNAAPP.HLP
16384 ..c d/drwxrwxrwx 0
0
2461706
c:\/PROGRA~1/ONLINE~1/CompuServe (COMPUS~1)
5632 ..c -/-rwxrwxrwx 0
0
342728
c:\/WINDOWS/SYSTEM/DCIMAN32.DLL
485920 ..c -/-rwxrwxrwx 0
0
342978
c:\/WINDOWS/SYSTEM/3D Maze.scr (3DMAZE~1.SCR)
56688 ..c -/-rwxrwxrwx 0
0
537632
c:\/PROGRA~1/NETMEE~1/MNMFT_.DLL
36864 ..c -/-rwxrwxrwx 0
0
342934
c:\/WINDOWS/SYSTEM/SHLWAPI.DLL
44304 ..c -/-r-xr-xr-x 0
0
765977
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5 06E4 A169 4E46
c:\/WINDOWS/FONTS/DOSAPP.FON
829 ..c -/-rwxrwxrwx 0
0
551952
c:\/PROGRA~1/ACCESS~1/HYPERT~1/CompuServe.ht (COMPUS~1.HT)
8347 ..c -/-rwxrwxrwx 0
0
328292
c:\/WINDOWS/INF/NETSNIP.INF
1980 ..c -/-rwxrwxrwx 0
0
328297
c:\/WINDOWS/INF/NETTULIP.INF
6658 ..c -/-rwxrwxrwx 0
0
343579
c:\/WINDOWS/COMMAND/FIND.EXE
4788 ..c -/-rwxrwxrwx 0
0
328197
c:\/WINDOWS/INF/ADAPTER.INF
2125 ..c -/-rwxrwxrwx 0
0
328216
c:\/WINDOWS/INF/IRDALAN.INF
22016 ..c -/-r-xr-xr-x 0
0
1243659
c:\/PROGRA~1/THEMIC~1/CCDIALER.EXE
16384 ..c drwxrwxrwx 0
0
2461704 <part2.img_$!$!!$.ME-dead-2461704>
23956 ..c -rwxrwxrwx 0
0
545826 <part2.img_CD.VXD-dead-545826>
958 ..c -/-rwxrwxrwx 0
0
327800
c:\/WINDOWS/CONTROL.INI
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
18688 ..c -/-rwxrwxrwx 0
0
537629
c:\/PROGRA~1/NETMEE~1/MNMCMG_.DLL
509 ..c -/-rwxrwxrwx 0
0
368165
c:\/WINDOWS/HELP/MOUSE.CNT
9008 ..c -/-rwxrwxrwx 0
0
328330
c:\/WINDOWS/INF/MDMBSB.INF
82684 ..c -/-rwxrwxrwx 0
0
368221
c:\/WINDOWS/HELP/RAPLAYER.HLP
28422 ..c -/-rwxrwxrwx 0
0
368145
c:\/WINDOWS/HELP/WORDPAD.HLP
75264 ..c -/-rwxrwxrwx 0
0
342943
c:\/WINDOWS/SYSTEM/RAPLAYER.EXE
6992 ..c -/-rwxrwxrwx 0
0
342729
c:\/WINDOWS/SYSTEM/DISPDIB.DLL
547 ..c -/-rwxrwxrwx 0
0
1225224
c:\/PROGRA~1/ICW-IN~1/ICWX25B.DUN
2546 ..c -/-rwxrwxrwx 0
0
327722
c:\/WINDOWS/EXTRA.TXT
54600 ..c -/-rwxrwxrwx 0
0
328219
c:\/WINDOWS/INF/LAYOUT.INF
71215 ..c -/-rwxrwxrwx 0
0
545815
c:\/WINDOWS/SYSTEM/VMM32/_FAT.VXD (deleted)
1118 ..c -/-rwxrwxrwx 0
0
1065479
c:\/WINDOWS/WANGSAMP/IMGSAMPL.VBP
84360 ..c -/-rwxrwxrwx 0
0
765964
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/WINDOWS/FONTS/COURBD.TTF
14556 ..c -/-rwxrwxrwx 0
0
328240
c:\/WINDOWS/INF/MSHDC.INF
306688 ..c -/-rwxrwxrwx 0
0
327745
c:\/WINDOWS/WINHLP32.EXE
6816 ..c -/-rwxrwxrwx 0
0
328262
c:\/WINDOWS/INF/NETCPQ.INF
17982 ..c -/-rwxrwxrwx 0
0
685593
c:\/WINDOWS/SYSTEM/IOSUBSYS/SMARTVSD.VXD
16960 ..c -/-rwxrwxrwx 0
0
685586
c:\/WINDOWS/SYSTEM/IOSUBSYS/SPARROW.MPD
6514 ..c -/-rwxrwxrwx 0
0
1201157
c:\/WINDOWS/SYSTEM/COLOR/HPSJTW.ICM
291735 ..c -/-rwxrwxrwx 0
0
368155
c:\/WINDOWS/HELP/WANGOCXD.HLP
33792 ..c -/-rwxrwxrwx 0
0
342603
c:\/WINDOWS/SYSTEM/MKCOMPAT.EXE
2621 ..c -/-rwxrwxrwx 0
0
368208
c:\/WINDOWS/HELP/IEXPLORE.CNT
7296 ..c -/-r-xr-xr-x 0
0
765989
c:\/WINDOWS/FONTS/VGASYS.FON
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
571 ..c -/-rwxrwxrwx 0
0
368166
c:\/WINDOWS/HELP/NOTEPAD.CNT
11708 ..c -/-rwxrwxrwx 0
0
368175
c:\/WINDOWS/HELP/NOTEPAD.HLP
28232 ..c -/-rwxrwxrwx 0
0
328362
c:\/WINDOWS/INF/MDMINFOT.INF
21759 ..c -/-rwxrwxrwx 0
0
328252
c:\/WINDOWS/INF/NET.INF
16384 ..c d/dr-xr-xr-x 0
0
327848
c:\/WINDOWS/ShellNew (SHELLNEW)
4096 ..c -/-rwxrwxrwx 0
0
342892
c:\/WINDOWS/SYSTEM/WOW32.DLL
60096 ..c -/-rwxrwxrwx 0
0
765991
c:\/WINDOWS/FONTS/SYMBOL.TTF
6551 ..c -/-rwxrwxrwx 0
0
328241
c:\/WINDOWS/INF/MSINFO.INF
4096 ..c -/-rwxrwxrwx 0
0
342596
c:\/WINDOWS/SYSTEM/VDMDBG.DLL
33191 ..c -/-rwxrwxrwx 0
0
327692
c:\/WINDOWS/HIMEM.SYS
41616 ..c -/-rwxrwxrwx 0
0
1360902
c:\/PROGRA~1/WINDOW~1/MLSET32.EXE
24400 ..c -/-rwxrwxrwx 0
0
342542
c:\/WINDOWS/SYSTEM/NETOS.DLL
4082 ..c -/-rwxrwxrwx 0
0
2885639
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/PROGRA~1/ONLINE~1/AT&T/BLGLOBE.GIF
17412 ..c -/-r-xr-xr-x 0
0
765990
c:\/WINDOWS/FONTS/MARLETT.TTF
11776 ..c -/-rwxrwxrwx 0
0
342621
c:\/WINDOWS/SYSTEM/AWDENC32.DLL
105984 ..c -/-rwxrwxrwx 0
0
342859
c:\/WINDOWS/SYSTEM/FONTEXT.DLL
35602 ..c -/-rwxrwxrwx 0
0
328225
c:\/WINDOWS/INF/MMOPT.INF
95776 ..c -/-rwxrwxrwx 0
0
342956
c:\/WINDOWS/SYSTEM/MCIVISCA.DRV
19518 ..c -/-rwxrwxrwx 0
0
368154
c:\/WINDOWS/HELP/WANGOCX.HLP
56320 ..c -/-rwxrwxrwx 0
0
342637
c:\/WINDOWS/SYSTEM/WANGCMN.DLL
185898 ..c -/-rwxrwxrwx 0
0
545803
c:\/WINDOWS/SYSTEM/VMM32/IFSMGR.VXD
55438 ..c -/-rwxrwxrwx 0
0
342582
c:\/WINDOWS/SYSTEM/UNIMODEM.VXD
26940 ..c -/-rwxrwxrwx 0
0
368196
c:\/WINDOWS/HELP/MPLAYER.HLP
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
10768 ..c -/-rwxrwxrwx 0
0
327782
c:\/WINDOWS/NDDENB.DLL
29008 ..c -/-rwxrwxrwx 0
0
342911
c:\/WINDOWS/SYSTEM/CACHEVU.DLL
12132 ..c -/-rwxrwxrwx 0
0
328340
c:\/WINDOWS/INF/MDMDGITN.INF
23529 ..c -/-rwxrwxrwx 0
0
368141
c:\/WINDOWS/HELP/PACKAGER.HLP
10190 ..c -/-rwxrwxrwx 0
0
685579
c:\/WINDOWS/SYSTEM/IOSUBSYS/DISKVSD.VXD
3570 ..c -/-rwxrwxrwx 0
0
1194516
c:\/WINDOWS/DESKTOP/ONLINE~1/_$!$-23.ME (deleted)
7332 ..c -/-rwxrwxrwx 0
0
343565
c:\/WINDOWS/COMMAND/SCANDISK.INI
27471 ..c -/-rwxrwxrwx 0
0
328244
c:\/WINDOWS/INF/MSNETMTG.INF
105984 ..c -/-rwxrwxrwx 0
0
327693
c:\/WINDOWS/REGEDIT.EXE
174080 ..c -/-rwxrwxrwx 0
0
342844
c:\/WINDOWS/SYSTEM/RASAPI32.DLL
2830 ..c -/-rwxrwxrwx 0
0
328217
c:\/WINDOWS/INF/JOYSTICK.INF
33251 ..c -/-rwxrwxrwx 0
0
328396
c:\/WINDOWS/INF/MDMPNB.INF
294736 ..c -/-rwxrwxrwx 0
0
537639
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/PROGRA~1/NETMEE~1/MNMSHCO_.DLL
96784 ..c -/-rwxrwxrwx 0
0
342983
c:\/WINDOWS/SYSTEM/3D Flower Box.scr (3DFLOW~1.SCR)
69632 ..c -/-rwxrwxrwx 0
0
327741
c:\/WINDOWS/TWUNK_32.EXE
2288 ..c -/-rwxrwxrwx 0
0
342599
c:\/WINDOWS/SYSTEM/SYSTEM.DRV
48644 ..c -/-rwxrwxrwx 0
0
328221
c:\/WINDOWS/INF/MACHINE.INF
28561 ..c -/-rwxrwxrwx 0
0
327734
c:\/WINDOWS/TIPS.TXT
42144 ..c -/-rwxrwxrwx 0
0
342578
c:\/WINDOWS/SYSTEM/UNIMDM.TSP
11776 ..c -/-rwxrwxrwx 0
0
342573
c:\/WINDOWS/SYSTEM/PKPD32.DLL
82092 ..c -/-rwxrwxrwx 0
0
765966
c:\/WINDOWS/FONTS/COURI.TTF
55808 ..c -/-rwxrwxrwx 0
0
342554
c:\/WINDOWS/SYSTEM/MFCD30.DLL
26928 ..c -/-rwxrwxrwx 0
0
537635
c:\/PROGRA~1/NETMEE~1/MNMMG_.DLL
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
5416 ..c -/-rwxrwxrwx 0
0
342793
c:\/WINDOWS/SYSTEM/CP_28592.NLS
25558 ..c -/-rwxrwxrwx 0
0
368148
c:\/WINDOWS/HELP/WAB.HLP
182 ..c -/-rwxrwxrwx 0
0
327866
c:\/WINDOWS/Black Thatch.bmp (BLACKT~1.BMP)
26496 ..c -/-rwxrwxrwx 0
0
1360901
c:\/PROGRA~1/WINDOW~1/MLSHEXT.DLL
11904 ..c -/-rwxrwxrwx 0
0
342884
c:\/WINDOWS/SYSTEM/SERWVDRV.DRV
202240 ..c -/-rwxrwxrwx 0
0
342903
c:\/WINDOWS/SYSTEM/RPCRT4.DLL
41488 ..c -/-rwxrwxrwx 0
0
342838
c:\/WINDOWS/SYSTEM/MCIQTZ32.DLL
22583 ..c -/-rwxrwxrwx 0
0
545840
c:\/WINDOWS/SYSTEM/VMM32/_ERF.VXD (deleted)
6940 ..c -/-rwxrwxrwx 0
0
343583
c:\/WINDOWS/COMMAND/NLSFUNC.EXE
98872 ..c -/-rwxrwxrwx 0
0
765963
c:\/WINDOWS/FONTS/COUR.TTF
18572 ..c -/-rwxrwxrwx 0
0
342581
c:\/WINDOWS/SYSTEM/SERIAL.VXD
2593 ..c -/-rwxrwxrwx 0
0
328290
c:\/WINDOWS/INF/NETSMC32.INF
51200 ..c -/-rwxrwxrwx 0
0
342761
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/WINDOWS/SYSTEM/CONFLNK.DLL
6729752 ..c -/-rwxrwxrwx 0
0
2462215
c:\/PROGRA~1/ONLINE~1/AOL/SETUP32.EXE
18944 ..c -/-rwxrwxrwx 0
0
327786
c:\/WINDOWS/WABMIG.EXE
4608 ..c -/-rwxrwxrwx 0
0
2257925
c:\/WINDOWS/SHELLNEW/WINWORD.DOC
1173 ..c -/-rwxrwxrwx 0
0
2885656
c:\/PROGRA~1/ONLINE~1/AT&T/WNMENU.HTM
12751 ..c -/-rwxrwxrwx 0
0
328266
c:\/WINDOWS/INF/NETDLC.INF
16384 ..c -/-rwxrwxrwx 0
0
342697
c:\/WINDOWS/SYSTEM/TREENVCL.DLL
23696 ..c -/-rwxrwxrwx 0
0
342536
c:\/WINDOWS/SYSTEM/LZEXPAND.DLL
5291 ..c -/-rwxrwxrwx 0
0
537624
c:\/PROGRA~1/NETMEE~1/MNMVDD.386
27530 ..c -/-rwxrwxrwx 0
0
328395
c:\/WINDOWS/INF/MDMPHILS.INF
135876 ..c -rwxrwxrwx 0
0
1687557 <part2.img_SSOUND.WAV-dead-1687557>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
462112 ..c -/-rwxrwxrwx 0
0
342605
c:\/WINDOWS/SYSTEM/USER.EXE
24795 ..c -/-rwxrwxrwx 0
0
328231
c:\/WINDOWS/INF/MONITOR6.INF
36480 ..c -/-rwxrwxrwx 0
0
342824
c:\/WINDOWS/SYSTEM/MSPCIC.DLL
27094 ..c -/-rwxrwxrwx 0
0
343589
c:\/WINDOWS/COMMAND/COUNTRY.SYS
69120 ..c -/-rwxrwxrwx 0
0
342704
c:\/WINDOWS/SYSTEM/SAGE.DLL
22743 ..c -/-rwxrwxrwx 0
0
328363
c:\/WINDOWS/INF/MDMINSYS.INF
18546 ..c -rwxrwxrwx 0
0
545823 <part2.img_TDAPI.VXD-dead-545823>
12144 ..c -/-rwxrwxrwx 0
0
342851
c:\/WINDOWS/SYSTEM/VER.DLL
12394 ..c -/-rwxrwxrwx 0
0
328287
c:\/WINDOWS/INF/NETSERVR.INF
9079 ..c -/-rwxrwxrwx 0
0
368225
c:\/WINDOWS/HELP/EXPO.HLP
5721 ..c -/-rwxrwxrwx 0
0
545821
c:\/WINDOWS/SYSTEM/VMM32/_SD.VXD (deleted)
103992 ..c -/-rwxrwxrwx 0
0
765992
c:\/WINDOWS/FONTS/ARIBLK.TTF
12342 ..c -/-rwxrwxrwx 0
0
328387
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/WINDOWS/INF/MDMNOVA.INF
17408 ..c -/-rwxrwxrwx 0
0
342743
c:\/WINDOWS/SYSTEM/TSD32.DLL
765 ..c -/-rwxrwxrwx 0
0
328208
c:\/WINDOWS/INF/DISKDRV.INF
202 ..c -/-rwxrwxrwx 0
0
368207
c:\/WINDOWS/HELP/AMOVIE.CNT
10352 ..c -/-rwxrwxrwx 0
0
685584
c:\/WINDOWS/SYSTEM/IOSUBSYS/NCRC710.MPD
1894 ..c -/-rwxrwxrwx 0
0
368199
c:\/WINDOWS/HELP/CONF.CNT
16384 ..c -/-rwxrwxrwx 0
0
327777
c:\/WINDOWS/WELCOME.EXE
4608 ..c -/-rwxrwxrwx 0
0
327698
c:\/WINDOWS/PBRUSH.EXE
43620 ..c -/-rwxrwxrwx 0
0
368140
c:\/WINDOWS/HELP/MSPAINT.HLP
30 ..c -/-rwxrwxrwx 0
0
2257932
c:\/WINDOWS/SHELLNEW/WORDPFCT.WPD
14596 ..c -/-rwxrwxrwx 0
0
342600
c:\/WINDOWS/SYSTEM/CONAGENT.EXE
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
12276 ..c -/-rwxrwxrwx 0
0
328267
c:\/WINDOWS/INF/NETDLC32.INF
8704 ..c -/-rwxrwxrwx 0
0
342583
c:\/WINDOWS/SYSTEM/DESK.CPL
31895 ..c -/-rwxrwxrwx 0
0
328253
c:\/WINDOWS/INF/NET3COM.INF
11333 ..c -/-rwxrwxrwx 0
0
342826
c:\/WINDOWS/SYSTEM/ISAPNP.VXD
16483 ..c -/-rwxrwxrwx 0
0
327720
c:\/WINDOWS/DISPLAY.TXT
16855 ..c -rwxrwxrwx 0
0
545816 <part2.img_FBACKUP.VXD-dead-545816>
24805 ..c -/-rwxrwxrwx 0
0
328299
c:\/WINDOWS/INF/NETXIR.INF
6824 ..c -/-rwxrwxrwx 0
0
342792
c:\/WINDOWS/SYSTEM/CP_20866.NLS
16384 ..c d/d-wx-wx-wx 0
0
537100
c:\/PROGRA~1/Windows Messaging (WINDOW~1)
9765 ..c -rwxrwxrwx 0
0
545813 <part2.img_DEF.VXD-dead-545813>
39744 ..c -/-rwxrwxrwx 0
0
342802
c:\/WINDOWS/SYSTEM/OLE2.DLL
52080 ..c -/-rwxrwxrwx 0
0
342701
c:\/WINDOWS/SYSTEM/MODEM.CPL
41472 ..c -/-rwxrwxrwx 0
0
343587
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/WINDOWS/COMMAND/XCOPY32.EXE
5532 ..c -/-rwxrwxrwx 0
0
342810
c:\/WINDOWS/SYSTEM/STDOLE.TLB
36024 ..c -/-rwxrwxrwx 0
0
328289
c:\/WINDOWS/INF/NETSMC.INF
5184 ..c -/-rwxrwxrwx 0
0
342712
c:\/WINDOWS/SYSTEM/WFM0201.ACV
7968 ..c -/-r-xr-xr-x 0
0
765978
c:\/WINDOWS/FONTS/MODERN.FON
10444 ..c -/-rwxrwxrwx 0
0
327702
c:\/WINDOWS/IOS.INI
19456 ..c -/-rwxrwxrwx 0
0
1243667
c:\/PROGRA~1/THEMIC~1/SUUTIL.DLL
16690 ..c -/-rwxrwxrwx 0
0
327731
c:\/WINDOWS/PRINTERS.TXT
64544 ..c -/-r-xr-xr-x 0
0
765983
c:\/WINDOWS/FONTS/SSERIFE.FON
26351 ..c -/-rwxrwxrwx 0
0
328393
c:\/WINDOWS/INF/MDMPACE.INF
4513 ..c -/-rwxrwxrwx 0
0
327788
c:\/WINDOWS/PWS.TXT
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
35511 ..c -/-rwxrwxrwx 0
0
342579
c:\/WINDOWS/SYSTEM/LPT.VXD
18578 ..c -rwxrwxrwx 0
0
545818 <part2.img_MCPD.VXD-dead-545818>
3888 ..c -/-rwxrwxrwx 0
0
342650
c:\/WINDOWS/SYSTEM/WHLP16T.DLL
5360 ..c -/-r-xr-xr-x 0
0
765987
c:\/WINDOWS/FONTS/VGAFIX.FON
125495 ..c -/-rwxrwxrwx 0
0
327757
c:\/WINDOWS/EMM386.EXE
601 ..c -/-rwxrwxrwx 0
0
342953
c:\/WINDOWS/SYSTEM/USASCII.TRN
9929 ..c -/-rwxrwxrwx 0
0
685581
c:\/WINDOWS/SYSTEM/IOSUBSYS/NECATAPI.VXD
36864 ..c -/-rwxrwxrwx 0
0
342692
c:\/WINDOWS/SYSTEM/MOSCL.DLL
8055 ..c -/-rwxrwxrwx 0
0
328286
c:\/WINDOWS/INF/NETRACAL.INF
69632 ..c -/-r-xr-xr-x 0
0
1243661
c:\/PROGRA~1/THEMIC~1/MOSCP.EXE
26297 ..c -/-rwxrwxrwx 0
0
328410
c:\/WINDOWS/INF/MDMSRT.INF
10848 ..c -/-rwxrwxrwx 0
0
685585
c:\/WINDOWS/SYSTEM/IOSUBSYS/NCRC810.MPD
39147 ..c -/-rwxrwxrwx 0
0
368218
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/WINDOWS/HELP/INT-MAIL.HLP
32768 ..c d/drwxrwxrwx 0
0
327686
c:\/WINDOWS/SYSTEM
23693 ..c -/-rwxrwxrwx 0
0
328372
c:\/WINDOWS/INF/MDMLIGHT.INF
78965 ..c -/-rwxrwxrwx 0
0
545839
c:\/WINDOWS/SYSTEM/VMM32/_HELL.VXD (deleted)
16384 ..c d/drwxrwxrwx 0
0
327743
c:\/WINDOWS/WANGSAMP
19927 ..c -/-rwxrwxrwx 0
0
343572
c:\/WINDOWS/COMMAND/KEYB.COM
11013 ..c -/-rwxrwxrwx 0
0
328237
c:\/WINDOWS/INF/MSDOS.INF
37888 ..c -/-rwxrwxrwx 0
0
342700
c:\/WINDOWS/SYSTEM/SYSTRAY.EXE
89088 ..c -/-rwxrwxrwx 0
0
342656
c:\/WINDOWS/SYSTEM/ICWDIAL.DLL
16976 ..c -/-rwxrwxrwx 0
0
342749
c:\/WINDOWS/SYSTEM/MIDIMAP.DRV
129536 ..c -/-rwxrwxrwx 0
0
342740
c:\/WINDOWS/SYSTEM/MSVFW32.DLL
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
22617 ..c -/-rwxrwxrwx 0
0
537655
c:\/PROGRA~1/NETMEE~1/NETMEET.TXT
1078 ..c -/-rwxrwxrwx 0
0
2885658
c:\/PROGRA~1/ONLINE~1/AT&T/ATTWNS.ICO
7744 ..c -/-rwxrwxrwx 0
0
342751
c:\/WINDOWS/SYSTEM/MSJSTICK.DRV
4416 ..c -/-rwxrwxrwx 0
0
537630
c:\/PROGRA~1/NETMEE~1/MNMCPI_.DLL
26555 ..c -/-rwxrwxrwx 0
0
328348
c:\/WINDOWS/INF/MDMERIC.INF
92244 ..c -/-rwxrwxrwx 0
0
342960
c:\/WINDOWS/SYSTEM/WSVV.VXD
77312 ..c -/-rwxrwxrwx 0
0
327739
c:\/WINDOWS/TWAIN_32.DLL
37376 ..c -/-rwxrwxrwx 0
0
342895
c:\/WINDOWS/SYSTEM/PASSWORD.CPL
79424 ..c -/-rwxrwxrwx 0
0
342820
c:\/WINDOWS/SYSTEM/OLETHK32.DLL
0
1194501 <part2.img3570 ..c -rwxrwxrwx 0
_NFORM~1.TXT-dead-1194501>
0
342682
116160 ..c -/-rwxrwxrwx 0
c:\/WINDOWS/SYSTEM/INTRINSC.OCX
0
2462213
1950007 ..c -/-rwxrwxrwx 0
c:\/PROGRA~1/ONLINE~1/AOL/SETUP25I.EXE
0
328357
26295 ..c -/-rwxrwxrwx 0
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/WINDOWS/INF/MDMHAEU.INF
0
368137
1978 ..c -/-rwxrwxrwx 0
c:\/WINDOWS/HELP/MSPAINT.CNT
0
537645
26544 ..c -/-rwxrwxrwx 0
c:\/PROGRA~1/NETMEE~1/MNMTHK16.DLL
0
342654
16384 ..c d/drwxrwxrwx 0
c:\/WINDOWS/SYSTEM/COLOR
0
327688
16384 ..c d/drwxrwxrwx 0
c:\/WINDOWS/HELP
0
327795
18939 ..c -/-rwxrwxrwx 0
c:\/WINDOWS/SETVER.EXE
0
328312
49033 ..c -/-rwxrwxrwx 0
c:\/WINDOWS/INF/SHELL.INF
0
328205
1657 ..c -/-rwxrwxrwx 0
c:\/WINDOWS/INF/CHEYENNE.INF
0
545828
22618 ..c -/-rwxrwxrwx 0
c:\/WINDOWS/SYSTEM/VMM32/_PD.VXD (deleted)
0
342840
801680 ..c -/-rwxrwxrwx 0
c:\/WINDOWS/SYSTEM/QUARTZ.DLL
42247 ..c -/-rwxrwxrwx 0
0
342831
c:\/WINDOWS/SYSTEM/PCI.VXD
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
226304 ..c -/-rwxrwxrwx 0
0
342930
c:\/WINDOWS/SYSTEM/RAGUI32.DLL
1168 ..c -/-rwxrwxrwx 0
0
342754
c:\/WINDOWS/SYSTEM/MMTASK.TSK
13824 ..c -/-rwxrwxrwx 0
0
342861
c:\/WINDOWS/SYSTEM/LINKINFO.DLL
19182 ..c -/-rwxrwxrwx 0
0
685592
c:\/WINDOWS/SYSTEM/IOSUBSYS/SCSI1HLP.VXD
4608 ..c -/-rwxrwxrwx 0
0
537607
c:\/PROGRA~1/NETMEE~1/GCC32.DLL
59964 ..c -/-rwxrwxrwx 0
0
1201161
c:\/WINDOWS/SYSTEM/COLOR/MNEBUG15.ICM
19869 ..c -/-rwxrwxrwx 0
0
328374
c:\/WINDOWS/INF/MDMMART.INF
10098 ..c -/-r-xr-xr-x 0
0
1243654
c:\/PROGRA~1/THEMIC~1/800950.DAT
93 ..c -/-rwxrwxrwx 0
0
342946
c:\/WINDOWS/SYSTEM/BLANK.HTM
20408 ..c -/-rwxrwxrwx 0
0
328381
c:\/WINDOWS/INF/MDMMTD.INF
22204 ..c -/-rwxrwxrwx 0
0
328419
c:\/WINDOWS/INF/MDMTKR.INF
318512 ..c -/-rwxrwxrwx 0
0
342546
c:\/WINDOWS/SYSTEM/SYSDETMG.DLL
2474 ..c -/-rwxrwxrwx 0
0
342533
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/WINDOWS/SYSTEM/DLCNDI.DLL
62464 ..c -/-r-xr-xr-x 0
0
551443
c:\/PROGRA~1/ACCESS~1/write32.wpc (WRITE32.WPC)
18448 ..c -/-rwxrwxrwx 0
0
537642
c:\/PROGRA~1/NETMEE~1/MNMTDDM_.DLL
13905 ..c -/-rwxrwxrwx 0
0
545806
c:\/WINDOWS/SYSTEM/VMM32/_AGESWAP.VXD (deleted)
2629 ..c -/-rwxrwxrwx 0
0
2885649
c:\/PROGRA~1/ONLINE~1/AT&T/SIGNBTN.GIF
5320 ..c -/-rwxrwxrwx 0
0
342796
c:\/WINDOWS/SYSTEM/CP_28597.NLS
6656 ..c -/-rwxrwxrwx 0
0
342849
c:\/WINDOWS/SYSTEM/VERSION.DLL
16384 ..c -/-rwxrwxrwx 0
0
342564
c:\/WINDOWS/SYSTEM/WNASPI32.DLL
5861 ..c -/-rwxrwxrwx 0
0
328418
c:\/WINDOWS/INF/MDMTI.INF
102 ..c -/-rwxrwxrwx 0
0
368152
c:\/WINDOWS/HELP/WANGSHL.CNT
9089 ..c -/-rwxrwxrwx 0
0
328215
c:\/WINDOWS/INF/INFRARED.INF
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
6730 ..c -/-rwxrwxrwx 0
0
328417
c:\/WINDOWS/INF/MDMTGER.INF
8042 ..c -/-rwxrwxrwx 0
0
368201
c:\/WINDOWS/HELP/QFECHECK.HLP
8188 ..c -/-rwxrwxrwx 0
0
328333
c:\/WINDOWS/INF/MDMCODEX.INF
3186 ..c -/-rwxrwxrwx 0
0
342948
c:\/WINDOWS/SYSTEM/RSACI.RAT
27632 ..c -/-rwxrwxrwx 0
0
342762
c:\/WINDOWS/SYSTEM/CTL3DV2.DLL
129243 ..c -/-rwxrwxrwx 0
0
368219
c:\/WINDOWS/HELP/MAILNEWS.HLP
62629 ..c -/-rwxrwxrwx 0
0
328317
c:\/WINDOWS/INF/WAVE.INF
16384 .ac -/-rwxrwxrwx 0
0
24
c:\/FILE0001.CHK
0
545812
22408 ..c -/-rwxrwxrwx 0
c:\/WINDOWS/SYSTEM/VMM32/_CDFSD.VXD (deleted)
0
537621
641536 ..c -/-rwxrwxrwx 0
c:\/PROGRA~1/NETMEE~1/WB32.EXE
0
328277
25842 ..c -/-rwxrwxrwx 0
c:\/WINDOWS/INF/NETMADGE.INF
0
368228
14007 ..c -/-rwxrwxrwx 0
c:\/WINDOWS/HELP/FILEXFER.HLP
0
328341
23553 ..c -/-rwxrwxrwx 0
c:\/WINDOWS/INF/MDMDICOM.INF
Key fingerprint = AF19
2F94 998D FDB5
DE3D
F8B5
06E4 A169 4E46
0
327707
190FA27
..c -/-rwxrwxrwx
0
c:\/WINDOWS/Waves.bmp (WAVES.BMP)
0
328397
25055 ..c -/-rwxrwxrwx 0
c:\/WINDOWS/INF/MDMPP.INF
0
342592
202896 ..c -/-rwxrwxrwx 0
c:\/WINDOWS/SYSTEM/DIBENG.DLL
20851 ..c -/-rwxrwxrwx 0
0
328306
c:\/WINDOWS/INF/PRTUPD.INF
0
343581
32146 ..c -/-rwxrwxrwx 0
c:\/WINDOWS/COMMAND/MEM.EXE
0
342710
8704 ..c -/-rwxrwxrwx 0
c:\/WINDOWS/SYSTEM/TSSOFT32.ACM
86 ..c -/-rwxrwxrwx 0
0
327805
c:\/WINDOWS/SYSTEM.CB
342910
110304 ..c -/-rwxrwxrwx 0
0
c:\/WINDOWS/SYSTEM/INETCPL.CPL
0
342624
10240 ..c -/-rwxrwxrwx 0
c:\/WINDOWS/SYSTEM/AWVIEW32.DLL
0
551439
26624 ..c -/-r-xr-xr-x 0
c:\/PROGRA~1/ACCESS~1/pcximp32.flt (PCXIMP32.FLT)
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
16525 ..c -/-rwxrwxrwx 0
0
328278
c:\/WINDOWS/INF/NETNCR.INF
5783436 ..c -/-rwxrwxrwx 0
0
2623494
c:\/PROGRA~1/ONLINE~1/COMPUS~1/CS3KIT.EXE
96256 ..c -/-rwxrwxrwx 0
0
342921
c:\/WINDOWS/SYSTEM/INETCFG.DLL
63697 ..c -/-rwxrwxrwx 0
0
328207
c:\/WINDOWS/INF/DESKMGMT.INF
334848 ..c -/-rwxrwxrwx 0
0
342629
c:\/WINDOWS/SYSTEM/OIDIS400.DLL
22127 ..c -rwxrwxrwx 0
0
545809 <part2.img_EBOOT.VXD-dead-545809>
69856 ..c -/-rwxrwxrwx 0
0
537638
c:\/PROGRA~1/NETMEE~1/MNMOM_.DLL
30208 ..c -/-rwxrwxrwx 0
0
342687
c:\/WINDOWS/SYSTEM/CCAPI.DLL
16384 ..c d/drwxrwxrwx 0
0
1308165
c:\/WINDOWS/JAVA/CLASSES
9194 ..c -/-rwxrwxrwx 0
0
342791
c:\/WINDOWS/SYSTEM/CP_1252.NLS
57 ..c -/-rwxrwxrwx 0
0
2257933
c:\/WINDOWS/SHELLNEW/WORDPFCT.WPG
17817 ..c -/-rwxrwxrwx 0
0
328274
c:\/WINDOWS/INF/NETIBM.INF
11794 ..c -/-rwxrwxrwx 0
0
327726
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/WINDOWS/INTERNET.TXT
71215 ..c -rwxrwxrwx 0
0
545815 <part2.img_FAT.VXD-dead-545815>
304128 ..c -/-rwxrwxrwx 0
0
537618
c:\/PROGRA~1/NETMEE~1/CB32.EXE
118272 ..c -/-rwxrwxrwx 0
0
342644
c:\/WINDOWS/SYSTEM/IMGSCAN.OCX
25154 ..c -/-rwxrwxrwx 0
0
342550
c:\/WINDOWS/SYSTEM/ENABLE2.VXD
24149 ..c -/-rwxrwxrwx 0
0
328426
c:\/WINDOWS/INF/MDMUSRF.INF
4550 ..c -/-rwxrwxrwx 0
0
328311
c:\/WINDOWS/INF/SETUP.INF
10240 ..c -/-rwxrwxrwx 0
0
342708
c:\/WINDOWS/SYSTEM/MSG711.ACM
16384 ..c d/drwxrwxrwx 0
0
327766
c:\/WINDOWS/CURSORS
80928 ..c -/-r-xr-xr-x 0
0
765986
c:\/WINDOWS/FONTS/SYMBOLF.FON
25600 ..c -/-rwxrwxrwx 0
0
537640
c:\/PROGRA~1/NETMEE~1/MNMTAPM_.DLL
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
31942 ..c -/-rwxrwxrwx 0
0
343592
c:\/WINDOWS/COMMAND/KEYBRD2.SYS
142353 ..c -/-rwxrwxrwx 0
0
343559
c:\/WINDOWS/COMMAND/SCANDISK.EXE
29696 ..c -/-rwxrwxrwx 0
0
537631
c:\/PROGRA~1/NETMEE~1/MNMCPI32.DLL
12112 ..c -/-rwxrwxrwx 0
0
342595
c:\/WINDOWS/SYSTEM/TOOLHELP.DLL
508 ..c -/-rwxrwxrwx 0
0
368164
c:\/WINDOWS/HELP/CALC.CNT
16479 ..c -/-rwxrwxrwx 0
0
328260
c:\/WINDOWS/INF/NETCLI.INF
592720 ..c -/-rwxrwxrwx 0
0
342545
c:\/WINDOWS/SYSTEM/SETUPX.DLL
43833 ..c -/-rwxrwxrwx 0
0
368205
c:\/WINDOWS/HELP/WINFILE.HLP
4766 ..c -/-rwxrwxrwx 0
0
1306635
c:\/PROGRA~1/INTERN~1/RALICENS.TXT
1891 ..c -/-rwxrwxrwx 0
0
328249
c:\/WINDOWS/INF/MTD.INF
10790 ..c -/-rwxrwxrwx 0
0
343570
c:\/WINDOWS/COMMAND/EDIT.HLP
25088 ..c -/-rwxrwxrwx 0
0
342709
c:\/WINDOWS/SYSTEM/MSGSM32.ACM
154880 ..c -/-rwxrwxrwx 0
0
342535
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/WINDOWS/SYSTEM/COMMCTRL.DLL
47472 ..c -/-rwxrwxrwx 0
0
328355
c:\/WINDOWS/INF/MDMGVC.INF
13905 ..c -rwxrwxrwx 0
0
545806 <part2.img_AGESWAP.VXD-dead-545806>
17993 ..c -/-rwxrwxrwx 0
0
545802
c:\/WINDOWS/SYSTEM/VMM32/_BIOS.VXD (deleted)
21852 ..c -/-rwxrwxrwx 0
0
328235
c:\/WINDOWS/INF/MSDET.INF
164352 ..c -rwxrwxrwx 0
0
551435 <part2.img_SWD6_32.WPC-dead-551435>
473 ..c -/-rwxrwxrwx 0
0
2885655
c:\/PROGRA~1/ONLINE~1/AT&T/HEADLINE.HTM
425 ..c -/-rwxrwxrwx 0
0
2885654
c:\/PROGRA~1/ONLINE~1/AT&T/ATTWNS1.HTM
30624 ..c -/-rwxrwxrwx 0
0
328380
c:\/WINDOWS/INF/MDMMOTON.INF
15872 ..c -/-rwxrwxrwx 0
0
342555
c:\/WINDOWS/SYSTEM/MFCN30.DLL
164352 ..c -/-rwxrwxrwx 0
0
551435
c:\/PROGRA~1/ACCESS~1/_SWD6_32.WPC (deleted)
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
204 ..c -/-r-xr-xr-x 0
0
327926
c:\/WINDOWS/_DDASD.DAT (deleted)
19193 ..c -/-rwxrwxrwx 0
0
368143
c:\/WINDOWS/HELP/DIALER.HLP
24390 ..c -/-rwxrwxrwx 0
0
685587
c:\/WINDOWS/SYSTEM/IOSUBSYS/ESDI_506.PDR
24576 ..c -/-rwxrwxrwx 0
0
342619
c:\/WINDOWS/SYSTEM/AWCODC32.DLL
7309 ..c -/-rwxrwxrwx 0
0
327733
c:\/WINDOWS/SUPPORT.TXT
130560 ..c -/-rwxrwxrwx 0
0
342668
c:\/WINDOWS/SYSTEM/RA3214_4.DLL
24895 ..c -/-rwxrwxrwx 0
0
368198
c:\/WINDOWS/HELP/SOUNDREC.HLP
3996 ..c -/-rwxrwxrwx 0
0
2885637
c:\/PROGRA~1/ONLINE~1/AT&T/ACCESBTN.GIF
16384 ..c d/drwxrwxrwx 0
0
342565
c:\/WINDOWS/SYSTEM/IOSUBSYS
28416 ..c -/-rwxrwxrwx 0
0
342922
c:\/WINDOWS/SYSTEM/INFRARED.DLL
17920 ..c -/-rwxrwxrwx 0
0
342627
c:\/WINDOWS/SYSTEM/OIADM400.DLL
5676 ..c -/-rwxrwxrwx 0
0
342843
c:\/WINDOWS/SYSTEM/QUARTZ.VXD
2352 ..c -/-rwxrwxrwx 0
0
1306630
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/PROGRA~1/INTERN~1/INST16.DLL
25343 ..c -/-rwxrwxrwx 0
0
328383
c:\/WINDOWS/INF/MDMMULOG.INF
10268 ..c -/-rwxrwxrwx 0
0
368161
c:\/WINDOWS/HELP/UNIMDM.HLP
16384 ..c d/d-wx-wx-wx 0
0
537106
c:\/PROGRA~1/The Microsoft Network (THEMIC~1)
3279 ..c -/-rwxrwxrwx 0
0
342909
c:\/WINDOWS/SYSTEM/UNICODE.BIN
16384 ..c d/drwxrwxrwx 0
0
327755
c:\/WINDOWS/CONFIG
578 ..c -/-rwxrwxrwx 0
0
327711
c:\/WINDOWS/Tiles.bmp (TILES.BMP)
384512 ..c -/-rwxrwxrwx 0
0
342557
c:\/WINDOWS/SYSTEM/MFCO40.DLL
41420 ..c -/-rwxrwxrwx 0
0
368153
c:\/WINDOWS/HELP/WANGIMG.HLP
12144 ..c -/-rwxrwxrwx 0
0
2172934
c:\/WINDOWS/CURSORS/HOURGLAS.ANI
27967 ..c -/-rwxrwxrwx 0
0
368188
c:\/WINDOWS/HELP/WHATSNEW.HLP
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
30807 ..c -/-rwxrwxrwx 0
0
368134
c:\/WINDOWS/HELP/NDSNP.HLP
590 ..c -/-rwxrwxrwx 0
0
327850
c:\/WINDOWS/Straw Mat.bmp (STRAWM~1.BMP)
18944 ..c -/-rwxrwxrwx 0
0
342670
c:\/WINDOWS/SYSTEM/VMHELPER.DLL
5632 ..c -/-rwxrwxrwx 0
0
2257934
c:\/WINDOWS/SHELLNEW/EXCEL.XLS
289552 ..c -/-rwxrwxrwx 0
0
342937
c:\/WINDOWS/SYSTEM/WININET.DLL
32815 ..c -/-rwxrwxrwx 0
0
545835
c:\/WINDOWS/SYSTEM/VMM32/_MOUSE.VXD (deleted)
7887 ..c -/-rwxrwxrwx 0
0
328222
c:\/WINDOWS/INF/MF.INF
103 ..c -/-rwxrwxrwx 0
0
368158
c:\/WINDOWS/HELP/APMCP.CNT
107131 ..c -rwxrwxrwx 0
0
545831 <part2.img_DD.VXD-dead-545831>
69120 ..c -/-rwxrwxrwx 0
0
1306633
c:\/PROGRA~1/INTERN~1/INFINST.EXE
14926 ..c -/-rwxrwxrwx 0
0
545833
c:\/WINDOWS/SYSTEM/VMM32/_SHARE.VXD (deleted)
193024 ..c -/-rwxrwxrwx 0
0
342731
c:\/WINDOWS/SYSTEM/IR32_32.DLL
851 ..c -/-r-xr-xr-x 0
0
1243664
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5 06E4 A169 4E46
c:\/PROGRA~1/THEMIC~1/STATE.PBK
31684 ..c -/-rwxrwxrwx 0
0
545822
c:\/WINDOWS/SYSTEM/VMM32/_TD.VXD (deleted)
21429 ..c -rwxrwxrwx 0
0
545836 <part2.img_IOS.VXD-dead-545836>
103248 ..c -/-rwxrwxrwx 0
0
342734
c:\/WINDOWS/SYSTEM/MMSYSTEM.DLL
5857 ..c -/-rwxrwxrwx 0
0
342568
c:\/WINDOWS/SYSTEM/VFD.VXD
3570 ..c -rwxrwxrwx 0
0
1194516 <part2.img-_$!$23.ME-dead-1194516>
217600 ..c -/-rwxrwxrwx 0
0
1243662
c:\/PROGRA~1/THEMIC~1/SIGNUP.EXE
0
685578
18785 ..c -/-rwxrwxrwx 0
c:\/WINDOWS/SYSTEM/IOSUBSYS/DISKTSD.VXD
25704 ..c -/-rwxrwxrwx 0
0
328422
c:\/WINDOWS/INF/MDMTRON.INF
0
328301
2392 ..c -/-rwxrwxrwx 0
c:\/WINDOWS/INF/NODRIVER.INF
0
368224
20579 ..c -/-rwxrwxrwx 0
c:\/WINDOWS/HELP/CDPLAYER.HLP
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
19566 ..c -/-rwxrwxrwx 0
0
545811
c:\/WINDOWS/SYSTEM/VMM32/_CACHE.VXD (deleted)
24616 ..c -/-rwxrwxrwx 0
0
328423
c:\/WINDOWS/INF/MDMTRUST.INF
13912 ..c -/-rwxrwxrwx 0
0
545800
c:\/WINDOWS/SYSTEM/VMM32/_OSNET.VXD (deleted)
46347 ..c -/-rwxrwxrwx 0
0
328246
c:\/WINDOWS/INF/MSPRINT.INF
19019 ..c -/-rwxrwxrwx 0
0
343577
c:\/WINDOWS/COMMAND/DELTREE.EXE
66048 ..c -/-rwxrwxrwx 0
0
342689
c:\/WINDOWS/SYSTEM/FTMAPI.DLL
17780 ..c -/-rwxrwxrwx 0
0
368190
c:\/WINDOWS/HELP/MSN.HLP
30396 ..c -/-rwxrwxrwx 0
0
328427
c:\/WINDOWS/INF/MDMUSRG.INF
5297 ..c -/-rwxrwxrwx 0
0
328212
c:\/WINDOWS/INF/HPNETPRN.INF
24576 ..c -/-rwxrwxrwx 0
0
327694
c:\/WINDOWS/ACCSTAT.EXE
53280 ..c -/---x--x--x 0
0
327794
c:\/WINDOWS/USER.DAT
39795 ..c -/-rwxrwxrwx 0
0
327787
c:\/WINDOWS/INFRARED.TXT
18338 ..c -/-rwxrwxrwx 0
0
368181
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/WINDOWS/HELP/REGEDIT.HLP
48045 ..c -/-rwxrwxrwx 0
0
328233
c:\/WINDOWS/INF/MOTOWN.INF
36352 ..c -/-rwxrwxrwx 0
0
327762
c:\/WINDOWS/QFECHECK.EXE
16384 ..c d/drwxrwxrwx 0
0
327804
c:\/WINDOWS/TEMP
211488 ..c -/-rwxrwxrwx 0
0
342976
c:\/WINDOWS/SYSTEM/3D Flying Objects.scr (3DFLYI~1.SCR)
206848 ..c -/-rwxrwxrwx 0
0
342936
c:\/WINDOWS/SYSTEM/VBSCRIPT.DLL
50051 ..c -/-rwxrwxrwx 0
0
328429
c:\/WINDOWS/INF/MDMUSRWP.INF
22618 ..c -rwxrwxrwx 0
0
545828 <part2.img_PD.VXD-dead-545828>
1518 ..c -/-rwxrwxrwx 0
0
2257935
c:\/WINDOWS/SHELLNEW/EXCEL4.XLS
36144 ..c -/-rwxrwxrwx 0
0
342702
c:\/WINDOWS/SYSTEM/MODEMUI.DLL
493 ..c -/-rwxrwxrwx 0
0
13
c:\/NETLOG.TXT
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
26987 ..c -/-rwxrwxrwx 0
0
328351
c:\/WINDOWS/INF/MDMEYP.INF
88064 ..c -/-r-xr-xr-x 0
0
1243658
c:\/PROGRA~1/THEMIC~1/MPCCL.DLL
4 ..c -/-rwxrwxrwx 0
0
1243665
c:\/PROGRA~1/THEMIC~1/MSNVER.TXT
42485 ..c -/-rwxrwxrwx 0
0
327723
c:\/WINDOWS/FAQ.TXT
34923 ..c -/-rwxrwxrwx 0
0
368135
c:\/WINDOWS/HELP/ACCESS.HLP
76288 ..c -/-rwxrwxrwx 0
0
342642
c:\/WINDOWS/SYSTEM/IMGADMIN.OCX
95387 ..c -rwxrwxrwx 0
0
545810 <part2.img_86MMGR.VXD-dead-545810>
29184 ..c -/-rwxrwxrwx 0
0
342590
c:\/WINDOWS/SYSTEM/POWERCFG.DLL
13535 ..c -/-rwxrwxrwx 0
0
328421
c:\/WINDOWS/INF/MDMTRIPL.INF
133904 ..c -/-rwxrwxrwx 0
0
342560
c:\/WINDOWS/SYSTEM/MFCANS32.DLL
21629 ..c -/-rwxrwxrwx 0
0
342551
c:\/WINDOWS/SYSTEM/ENABLE4.VXD
164352 ..c -/-r-xr-xr-x 0
0
551430
c:\/PROGRA~1/ACCESS~1/mswd6_32.wpc (MSWD6_32.WPC)
31377 ..c -/-rwxrwxrwx 0
0
328413
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/WINDOWS/INF/MDMTELBT.INF
12800 ..c -/-rwxrwxrwx 0
0
342628
c:\/WINDOWS/SYSTEM/OICOM400.DLL
24865 ..c -/-r-xr-xr-x 0
0
4
c:\/BOOTLOG.TXT
7397 ..c -/-rwxrwxrwx 0
0
328218
c:\/WINDOWS/INF/KEYBOARD.INF
0
328203
2893 ..c -/-rwxrwxrwx 0
c:\/WINDOWS/INF/BKUPAGNT.INF
0
328293
3155 ..c -/-rwxrwxrwx 0
c:\/WINDOWS/INF/NETSOCK.INF
0
342920
20992 ..c -/-rwxrwxrwx 0
c:\/WINDOWS/SYSTEM/INETAB32.DLL
0
342890
5632 ..c -/-rwxrwxrwx 0
c:\/WINDOWS/SYSTEM/LZ32.DLL
1194501
3570 ..c -/-rwxrwxrwx 0
0
c:\/WINDOWS/DESKTOP/ONLINE~1/_NFORM~1.TXT (deleted)
0
342860
139712 ..c -/-rwxrwxrwx 0
c:\/WINDOWS/SYSTEM/GLU32.DLL
0
328245
9520 ..c -/-rwxrwxrwx 0
c:\/WINDOWS/INF/MSPORTS.INF
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
47104 ..c -/-rwxrwxrwx 0
0
342783
c:\/WINDOWS/SYSTEM/MSCONF.DLL
4128 ..c -/-rwxrwxrwx 0
0
342753
c:\/WINDOWS/SYSTEM/SBFM.DRV
29401 ..c -/-rwxrwxrwx 0
0
685574
c:\/WINDOWS/SYSTEM/IOSUBSYS/APIX.VXD
38517 ..c -/-rwxrwxrwx 0
0
327732
c:\/WINDOWS/PROGRAMS.TXT
4608 ..c -/-rwxrwxrwx 0
0
1306631
c:\/PROGRA~1/INTERN~1/INST32.DLL
21695 ..c -/-rwxrwxrwx 0
0
328361
c:\/WINDOWS/INF/MDMICO.INF
372224 ..c -/-rwxrwxrwx 0
0
342667
c:\/WINDOWS/SYSTEM/MSJAVA.DLL
24655 ..c -/-rwxrwxrwx 0
0
328406
c:\/WINDOWS/INF/MDMSMART.INF
23455 ..c -/-rwxrwxrwx 0
0
328329
c:\/WINDOWS/INF/MDMBOCA.INF
14160 ..c -/-rwxrwxrwx 0
0
342886
c:\/WINDOWS/SYSTEM/SERWAVE.VXD
3657 ..c -/-rwxrwxrwx 0
0
328239
c:\/WINDOWS/INF/MSFDC.INF
0
328386
11798 ..c -/-rwxrwxrwx 0
c:\/WINDOWS/INF/MDMNOKNO.INF
0
545831
107131 ..c -/-rwxrwxrwx 0
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/WINDOWS/SYSTEM/VMM32/_DD.VXD (deleted)
0
368222
16530 ..c -/-rwxrwxrwx 0
c:\/WINDOWS/HELP/RATINGS.HLP
0
342616
43152 ..c -/-rwxrwxrwx 0
c:\/WINDOWS/SYSTEM/IMNIMP.DLL
32815 ..c -rwxrwxrwx 0
0
545835 <part2.img_MOUSE.VXD-dead-545835>
12890 ..c -/-rwxrwxrwx 0
0
328285
c:\/WINDOWS/INF/NETPROT.INF
69120 ..c -/-rwxrwxrwx 0
0
537605
c:\/PROGRA~1/NETMEE~1/MSGCCMCS.DLL
4096 ..c -/-rwxrwxrwx 0
0
342883
c:\/WINDOWS/SYSTEM/VMODCTL.DLL
253952 ..c -/-rwxrwxrwx 0
0
342558
c:\/WINDOWS/SYSTEM/MSVCRT20.DLL
3 ..c -/-rwxrwxrwx 0
0
327871
c:\/WINDOWS/Internet Mail.{89292102-4755-11cf-9DC2-00AA006C2B84}
(INTERN~1.{89)
0
327727
5422 ..c -/-rwxrwxrwx 0
c:\/WINDOWS/MOUSE.TXT
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
202240 ..c -/-rwxrwxrwx 0
0
537612
c:\/PROGRA~1/NETMEE~1/MCSNC.DLL
55920 ..c -/-rwxrwxrwx 0
0
342537
c:\/WINDOWS/SYSTEM/MSPRINT.DLL
14926 ..c -rwxrwxrwx 0
0
545833 <part2.img_SHARE.VXD-dead-545833>
198 ..c -/-rwxrwxrwx 0
0
327860
c:\/WINDOWS/Triangles.bmp (TRIANG~1.BMP)
35112 ..c -/-rwxrwxrwx 0
0
545824
c:\/WINDOWS/SYSTEM/VMM32/_XDLDR.VXD (deleted)
10566 ..c -/-rwxrwxrwx 0
0
328318
c:\/WINDOWS/INF/WORDPAD.INF
17920 ..c -/-rwxrwxrwx 0
0
537613
c:\/PROGRA~1/NETMEE~1/MSMCSTCP.DLL
5168 ..c -/-r-xr-xr-x 0
0
765988
c:\/WINDOWS/FONTS/VGAOEM.FON
205072 ..c -/-rwxrwxrwx 0
0
342618
c:\/WINDOWS/SYSTEM/WAB32.DLL
3504 ..c -/-rwxrwxrwx 0
0
342858
c:\/WINDOWS/SYSTEM/ENUMFILE.DLL
8704 ..c -/-rwxrwxrwx 0
0
368146
c:\/WINDOWS/HELP/DISPLAY.HLP
18578 ..c -/-rwxrwxrwx 0
0
545818
c:\/WINDOWS/SYSTEM/VMM32/_MCPD.VXD (deleted)
12288 ..c -/-rwxrwxrwx 0
0
2257927
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/WINDOWS/SHELLNEW/POWERPNT.PPT
87822 ..c -/-rwxrwxrwx 0
0
368216
c:\/WINDOWS/HELP/IEXPLORE.HLP
68880 ..c -/-rwxrwxrwx 0
0
537626
c:\/PROGRA~1/NETMEE~1/MNMCCL_.DLL
3831 ..c -/-rwxrwxrwx 0
0
328300
c:\/WINDOWS/INF/NETZNOTE.INF
3708 ..c -/-rwxrwxrwx 0
0
327784
c:\/WINDOWS/IFSHLP.SYS
92463 ..c -/-r-xr-xr-x 0
0
1243663
c:\/PROGRA~1/THEMIC~1/PHONE.PBK
15104 ..c -/-rwxrwxrwx 0
0
342945
c:\/WINDOWS/SYSTEM/SIGRES.EXE
13360 ..c -/-rwxrwxrwx 0
0
537644
c:\/PROGRA~1/NETMEE~1/MNMTDDS_.DLL
552 ..c -/-rwxrwxrwx 0
0
368142
c:\/WINDOWS/HELP/DIALER.CNT
11796 ..c -/-rwxrwxrwx 0
0
328200
c:\/WINDOWS/INF/ATHENA.INF
3862 ..c -/-rwxrwxrwx 0
0
328442
c:\/WINDOWS/INF/SERWAVE.INF
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
67072 ..c -/-rwxrwxrwx 0
0
342585
c:\/WINDOWS/SYSTEM/MAIN.CPL
82944 ..c -/-rwxrwxrwx 0
0
1243666
c:\/PROGRA~1/THEMIC~1/BILLADD.DLL
5448 ..c -/-rwxrwxrwx 0
0
342794
c:\/WINDOWS/SYSTEM/CP_28593.NLS
25600 ..c -/-rwxrwxrwx 0
0
342941
c:\/WINDOWS/SYSTEM/DIALMON.EXE
21429 ..c -/-rwxrwxrwx 0
0
545836
c:\/WINDOWS/SYSTEM/VMM32/_IOS.VXD (deleted)
28643 ..c -/-rwxrwxrwx 0
0
328391
c:\/WINDOWS/INF/MDMOPTN.INF
15252 ..c -/-rwxrwxrwx 0
0
343563
c:\/WINDOWS/COMMAND/ATTRIB.EXE
30553 ..c -/-rwxrwxrwx 0
0
328323
c:\/WINDOWS/INF/MDMARCHT.INF
445 ..c -/-rwxrwxrwx 0
0
23
c:\/SCANDISK.LOG
0
328366
26673 ..c -/-rwxrwxrwx 0
c:\/WINDOWS/INF/MDMITEX.INF
0
327855
582 ..c -/-rwxrwxrwx 0
c:\/WINDOWS/Carved Stone.bmp (CARVED~1.BMP)
342830
17192 ..c -/-rwxrwxrwx 0
0
c:\/WINDOWS/SYSTEM/LPTENUM.VXD
0
342947
77888 ..c -/-rwxrwxrwx 0
c:\/WINDOWS/SYSTEM/MARQUEE.OCX
Key fingerprint = AF19
FA27
2F94 998D FDB5
06E4 A169 4E46
0 F8B5
328375
23272
..c -/-rwxrwxrwx
0 DE3D
c:\/WINDOWS/INF/MDMMCOM.INF
0
343560
49543 ..c -/-rwxrwxrwx 0
c:\/WINDOWS/COMMAND/FORMAT.COM
0
5
c:\/COMMAND.COM
93812 ..c -/-rwxrwxrwx 0
10401 ..c -/-rwxrwxrwx 0
0
545825
c:\/WINDOWS/SYSTEM/VMM32/_OMBUFF.VXD (deleted)
2436 ..c -/-rwxrwxrwx 0
0
328206
c:\/WINDOWS/INF/DECPSMW4.INF
21473 ..c -/-rwxrwxrwx 0
0
368139
c:\/WINDOWS/HELP/HYPERTRM.HLP
28672 ..c -/-rwxrwxrwx 0
0
327776
c:\/WINDOWS/TASKMAN.EXE
31684 ..c -rwxrwxrwx 0
0
545822 <part2.img_TD.VXD-dead-545822>
191296 ..c -/-rwxrwxrwx 0
0
342842
c:\/WINDOWS/SYSTEM/AMOVIE.OCX
8743 ..c -/-rwxrwxrwx 0
0
328369
c:\/WINDOWS/INF/MDMLASAT.INF
16577 ..c -/-rwxrwxrwx 0
0
368173
c:\/WINDOWS/HELP/MOUSE.HLP
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
6010 ..c -/-rwxrwxrwx 0
0
328211
c:\/WINDOWS/INF/GPS.INF
32967 ..c -/-rwxrwxrwx 0
0
545827
c:\/WINDOWS/SYSTEM/VMM32/_COMM.VXD (deleted)
24838 ..c -/-rwxrwxrwx 0
0
328349
c:\/WINDOWS/INF/MDMETECH.INF
16384 ..c d/drwxrwxrwx 0
0
327756
c:\/WINDOWS/MEDIA
9787 ..c -/-rwxrwxrwx 0
0
545808
c:\/WINDOWS/SYSTEM/VMM32/QEMMFIX.VXD
140288 ..c -/-rwxrwxrwx 0
0
342652
c:\/WINDOWS/SYSTEM/ICM32.DLL
6368 ..c -/-rwxrwxrwx 0
0
537634
c:\/PROGRA~1/NETMEE~1/MNMHLP_.DLL
4313 ..c -/-rwxrwxrwx 0
0
342606
c:\/WINDOWS/SYSTEM/REDIRECT.MOD
11904 ..c -/-rwxrwxrwx 0
0
342598
c:\/WINDOWS/SYSTEM/WIN87EM.DLL
59904 ..c -/-rwxrwxrwx 0
0
342723
c:\/WINDOWS/SYSTEM/AVICAP32.DLL
25473 ..c -/-rwxrwxrwx 0
0
343569
c:\/WINDOWS/COMMAND/MSCDEX.EXE
0
545807
9801 ..c -/-rwxrwxrwx 0
c:\/WINDOWS/SYSTEM/VMM32/_ARITY.VXD (deleted)
0
342586
22096 ..c -/-rwxrwxrwx 0
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/WINDOWS/SYSTEM/MAINCP16.DLL
23435 ..c -/-rwxrwxrwx 0
0
328416
c:\/WINDOWS/INF/MDMTEXAS.INF
22948 ..c -/-rwxrwxrwx 0
0
368176
c:\/WINDOWS/HELP/SERVER.HLP
2971 ..c -/-rwxrwxrwx 0
0
328209
c:\/WINDOWS/INF/ENABLE.INF
28539 ..c -/-rwxrwxrwx 0
0
328404
c:\/WINDOWS/INF/MDMROCK4.INF
19632 ..c -/-r-xr-xr-x 0
0
765982
c:\/WINDOWS/FONTS/SMALLF.FON
42229 ..c -/-rwxrwxrwx 0
0
328360
c:\/WINDOWS/INF/MDMHAYES.INF
114688 ..c -/-rwxrwxrwx 0
0
537616
c:\/PROGRA~1/NETMEE~1/SOEDBER.DLL
0
343585
17904 ..c -/-rwxrwxrwx 0
c:\/WINDOWS/COMMAND/SUBST.EXE
c:\/SYSTEM.1ST
415236 ..c -/---x--x--x 0
0
20
5120 ..c -/-rwxrwxrwx 0
0
327699
c:\/WINDOWS/WRITE.EXE
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
12032 ..c -/-rwxrwxrwx 0
0
342574
c:\/WINDOWS/SYSTEM/SERIALUI.DLL
23377 ..c -/-rwxrwxrwx 0
0
327725
c:\/WINDOWS/HARDWARE.TXT
55964 ..c -/-rwxrwxrwx 0
0
328228
c:\/WINDOWS/INF/MONITOR2.INF
72272 ..c -/-rwxrwxrwx 0
0
342722
c:\/WINDOWS/SYSTEM/AVICAP.DLL
16384 ..c d/drwxrwxrwx 0
0
537103
c:\/PROGRA~1/Online Services (ONLINE~1)
7712 ..c -/-rwxrwxrwx 0
0
342758
c:\/WINDOWS/SYSTEM/MOUSE.DRV
22127 ..c -/-rwxrwxrwx 0
0
545809
c:\/WINDOWS/SYSTEM/VMM32/_EBOOT.VXD (deleted)
12800 ..c -/-rwxrwxrwx 0
0
342638
c:\/WINDOWS/SYSTEM/WANGSHL.DLL
51227 ..c -/-rwxrwxrwx 0
0
328307
c:\/WINDOWS/INF/QUARTZ.INF
189 ..c -/-rwxrwxrwx 0
0
1225231
c:\/PROGRA~1/ICW-IN~1/MSICW.ISP
55364 ..c -/-rwxrwxrwx 0
0
1334789
c:\/WINDOWS/JAVA/TRUSTLIB/TCLASSES.ZIP
851 ..c -/-rwxrwxrwx 0
0
1225230
c:\/PROGRA~1/ICW-IN~1/STATE.ICW
113664 ..c -/-rwxrwxrwx 0
0
342742
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/WINDOWS/SYSTEM/MSVIDEO.DLL
20480 ..c -/-rwxrwxrwx 0
0
342632
c:\/WINDOWS/SYSTEM/OIPRT400.DLL
25882 ..c -/-rwxrwxrwx 0
0
343568
c:\/WINDOWS/COMMAND/SORT.EXE
44867 ..c -/-rwxrwxrwx 0
0
327691
c:\/WINDOWS/SMARTDRV.EXE
52224 ..c -/-rwxrwxrwx 0
0
342636
c:\/WINDOWS/SYSTEM/OIUI400.DLL
12800 ..c -/-rwxrwxrwx 0
0
342685
c:\/WINDOWS/SYSTEM/INTERNAT.EXE
1023 ..c -/-rwxrwxrwx 0
0
368194
c:\/WINDOWS/HELP/SOUNDREC.CNT
144 ..c -/-rwxrwxrwx 0
0
368226
c:\/WINDOWS/HELP/W_TOUR.CNT
34500 ..c -/-rwxrwxrwx 0
0
328342
c:\/WINDOWS/INF/MDMDISCO.INF
37759 ..c -/-rwxrwxrwx 0
0
328440
c:\/WINDOWS/INF/MDMZYXLN.INF
113456 ..c -/-rwxrwxrwx 0
0
327773
c:\/WINDOWS/PROGMAN.EXE
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
20574 ..c -/-rwxrwxrwx 0
0
343578
c:\/WINDOWS/COMMAND/FC.EXE
32967 ..c -rwxrwxrwx 0
0
545827 <part2.img_COMM.VXD-dead-545827>
27507 ..c -/-rwxrwxrwx 0
0
368178
c:\/WINDOWS/HELP/WINHLP32.HLP
16384 ..c d/drwxrwxrwx 0
0
327687
c:\/WINDOWS/COMMAND
46656 ..c -/-rwxrwxrwx 0
0
343558
c:\/WINDOWS/COMMAND/EXTRACT.EXE
16384 ..c d/drwxrwxrwx 0
0
14
c:\/WINDOWS
0
368185
462 ..c -/-rwxrwxrwx 0
c:\/WINDOWS/HELP/PSSPOS.CNT
0
328258
30838 ..c -/-rwxrwxrwx 0
c:\/WINDOWS/INF/NETCD.INF
545829
53438 ..c -/-rwxrwxrwx 0
0
c:\/WINDOWS/SYSTEM/VMM32/_COND.VXD (deleted)
0
342630
104960 ..c -/-rwxrwxrwx 0
c:\/WINDOWS/SYSTEM/OIFIL400.DLL
0
765973
12288 ..c -/-r-xr-xr-x 0
c:\/WINDOWS/FONTS/8514OEM.FON
0
342931
71440 ..c -/-rwxrwxrwx 0
c:\/WINDOWS/SYSTEM/RSABASE.DLL
0
328230
42300 ..c -/-rwxrwxrwx 0
c:\/WINDOWS/INF/MONITOR4.INF
Key fingerprint = AF19
FA27
2F94 998D0FDB5 0DE3D 15
F8B5 06E4
A169 4E46
c:\/BOOTLOG.PRV
22596
..c -/-r-xr-xr-x
66267 ..c -/-rwxrwxrwx 0
0
368200
c:\/WINDOWS/HELP/CONF.HLP
24310 ..c -/-rwxrwxrwx 0
0
328346
c:\/WINDOWS/INF/MDMELPRO.INF
26624 ..c -/-rwxrwxrwx 0
0
342623
c:\/WINDOWS/SYSTEM/AWRESX32.DLL
59564 ..c -/-rwxrwxrwx 0
0
1201159
c:\/WINDOWS/SYSTEM/COLOR/MNB22G18.ICM
398 ..c -/-rwxrwxrwx 0
0
342686
c:\/WINDOWS/SYSTEM/KBDUS.KBD
3 ..c -/-rwxrwxrwx 0
0
327876
c:\/WINDOWS/Internet News.{89292103-4755-11cf-9DC2-00AA006C2B84}
(INTERN~2.{89)
0
328213
24919 ..c -/-rwxrwxrwx 0
c:\/WINDOWS/INF/IMAGEVUE.INF
0
685594
11063 ..c -/-rwxrwxrwx 0
c:\/WINDOWS/SYSTEM/IOSUBSYS/TORISAN3.VXD
0
545839 <part2.img78965 ..c -rwxrwxrwx 0
_HELL.VXD-dead-545839>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
6288 ..c -/-rwxrwxrwx 0
0
2885641
c:\/PROGRA~1/ONLINE~1/AT&T/EARTH.GIF
44991 ..c -/-rwxrwxrwx 0
0
328428
c:\/WINDOWS/INF/MDMUSRSP.INF
2158 ..c -/-rwxrwxrwx 0
0
328316
c:\/WINDOWS/INF/VIDCAP.INF
309 ..c -/-rwxrwxrwx 0
0
368214
c:\/WINDOWS/HELP/WAB.CNT
182752 ..c -/-rwxrwxrwx 0
0
342935
c:\/WINDOWS/SYSTEM/URLMON.DLL
16384 ..c d/drwxrwxrwx 0
0
1193994
c:\/WINDOWS/DESKTOP/_$!$.ME (deleted)
3358 ..c -/-rwxrwxrwx 0
0
328226
c:\/WINDOWS/INF/MODEMS.INF
38912 ..c -/-rwxrwxrwx 0
0
342760
c:\/WINDOWS/SYSTEM/LHACM.ACM
951 ..c -/-rwxrwxrwx 0
0
328234
c:\/WINDOWS/INF/MSCDROM.INF
2554 ..c -/-rwxrwxrwx 0
0
368149
c:\/WINDOWS/HELP/WANGIMG.CNT
40576 ..c -/-rwxrwxrwx 0
0
342818
c:\/WINDOWS/SYSTEM/OLECNV32.DLL
5864 ..c -/-rwxrwxrwx 0
0
328412
c:\/WINDOWS/INF/MDMTDK.INF
9004 ..c -/-rwxrwxrwx 0
0
342721
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/WINDOWS/SYSTEM/WFM0203A.CSP
16384 ..c d/drwxrwxrwx 0
0
1193989
c:\/WINDOWS/DESKTOP/_NLINE~1 (deleted)
46740 ..c -rwxrwxrwx 0
0
545820 <part2.img_PICD.VXD-dead-545820>
13712 ..c -/-rwxrwxrwx 0
0
342955
c:\/WINDOWS/SYSTEM/MCIPIONR.DRV
25348 ..c -/-rwxrwxrwx 0
0
328407
c:\/WINDOWS/INF/MDMSNITN.INF
14896 ..c -/-rwxrwxrwx 0
0
342681
c:\/WINDOWS/SYSTEM/SENDMAIL.DLL
601 ..c -/-rwxrwxrwx 0
0
342950
c:\/WINDOWS/SYSTEM/ISO88591.TRN
28096 ..c -/-rwxrwxrwx 0
0
343567
c:\/WINDOWS/COMMAND/CHKDSK.EXE
14336 ..c -/-rwxrwxrwx 0
0
1225228
c:\/PROGRA~1/ICW-IN~1/ISIGNUP.EXE
47616 ..c -/-rwxrwxrwx 0
0
342675
c:\/WINDOWS/SYSTEM/JDBGMGR.EXE
66560 ..c -/-rwxrwxrwx 0
0
342905
c:\/WINDOWS/SYSTEM/WSOCK32.DLL
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
1769 ..c -/-rwxrwxrwx 0
0
2257926
c:\/WINDOWS/SHELLNEW/WINWORD2.DOC
13900 ..c -/-rwxrwxrwx 0
0
328415
c:\/WINDOWS/INF/MDMTELNK.INF
13794 ..c -/-rwxrwxrwx 0
0
328308
c:\/WINDOWS/INF/RNA.INF
847632 ..c -/-rwxrwxrwx 0
0
342925
c:\/WINDOWS/SYSTEM/MSHTML.DLL
41472 ..c -/-rwxrwxrwx 0
0
342659
c:\/WINDOWS/SYSTEM/ISIGN32.DLL
15495 ..c -/-rwxrwxrwx 0
0
343571
c:\/WINDOWS/COMMAND/DOSKEY.COM
64432 ..c -/-rwxrwxrwx 0
0
342957
c:\/WINDOWS/SYSTEM/THREED.VBX
16384 ..c d/drwxrwxrwx 0
0
2461704
c:\/PROGRA~1/ONLINE~1/_$!$!!$.ME (deleted)
247808 ..c -/-rwxrwxrwx 0
0
342924
c:\/WINDOWS/SYSTEM/JSCRIPT.DLL
129536 ..c -/-rwxrwxrwx 0
0
342690
c:\/WINDOWS/SYSTEM/MCM.DLL
4415 ..c -/-rwxrwxrwx 0
0
368151
c:\/WINDOWS/HELP/WANGOCXD.CNT
36352 ..c -/-rwxrwxrwx 0
0
327771
c:\/WINDOWS/FONTVIEW.EXE
11264 ..c -/-rwxrwxrwx 0
0
342696
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/WINDOWS/SYSTEM/SVCPROP.DLL
41581 ..c -/-rwxrwxrwx 0
0
328242
c:\/WINDOWS/INF/MSMAIL.INF
5632 ..c -/-rwxrwxrwx 0
0
342816
c:\/WINDOWS/SYSTEM/MFCUIA32.DLL
829 ..c -/-rwxrwxrwx 0
0
551942
c:\/PROGRA~1/ACCESS~1/HYPERT~1/AT&T Mail.ht (AT&TMA~1.HT)
643 ..c -/-rwxrwxrwx 0
0
368223
c:\/WINDOWS/HELP/CDPLAYER.CNT
9004 ..c -/-rwxrwxrwx 0
0
342720
c:\/WINDOWS/SYSTEM/WFM0202A.CSP
18487 ..c -/-rwxrwxrwx 0
0
685580
c:\/WINDOWS/SYSTEM/IOSUBSYS/VOLTRACK.VXD
126056 ..c -/-rwxrwxrwx 0
0
765994
c:\/WINDOWS/FONTS/IMPACT.TTF
53816 ..c -/-rwxrwxrwx 0
0
765996
c:\/WINDOWS/FONTS/VERDANAB.TTF
10111 ..c -/-rwxrwxrwx 0
0
328273
c:\/WINDOWS/INF/NETHP.INF
29213 ..c -/-rwxrwxrwx 0
0
328338
c:\/WINDOWS/INF/MDMCPV.INF
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
40448 ..c -/-rwxrwxrwx 0
0
342896
c:\/WINDOWS/SYSTEM/MPR.DLL
1295 ..c -/-rwxrwxrwx 0
0
2885638
c:\/PROGRA~1/ONLINE~1/AT&T/ATTLOGO.GIF
23370 ..c -/-rwxrwxrwx 0
0
328408
c:\/WINDOWS/INF/MDMSONIX.INF
4608 ..c -/-rwxrwxrwx 0
0
342855
c:\/WINDOWS/SYSTEM/DEVMGR32.DLL
28015 ..c -/-rwxrwxrwx 0
0
328261
c:\/WINDOWS/INF/NETCLI3.INF
0
545810
95387 ..c -/-rwxrwxrwx 0
c:\/WINDOWS/SYSTEM/VMM32/_86MMGR.VXD (deleted)
0
328403
55100 ..c -/-rwxrwxrwx 0
c:\/WINDOWS/INF/MDMROCK3.INF
0
327740
48560 ..c -/-rwxrwxrwx 0
c:\/WINDOWS/TWUNK_16.EXE
342633
25600 ..c -/-rwxrwxrwx 0
0
c:\/WINDOWS/SYSTEM/OISLB400.DLL
57856 ..c -/-rwxrwxrwx 0
0
342658
c:\/WINDOWS/SYSTEM/IEDKCS32.DLL
0
343593
58870 ..c -/-rwxrwxrwx 0
c:\/WINDOWS/COMMAND/EGA.CPI
0
328304
12063 ..c -/-rwxrwxrwx 0
c:\/WINDOWS/INF/PCMCIA.INF
0
327863 c:\/WINDOWS/Blue
194 ..c -/-rwxrwxrwx 0
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
Rivets.bmp (BLUERI~1.BMP)
0
328441
2213 ..c -/-rwxrwxrwx 0
c:\/WINDOWS/INF/CLIP.INF
0
328425
50070 ..c -/-rwxrwxrwx 0
c:\/WINDOWS/INF/MDMUSRCR.INF
0
342705
33792 ..c -/-rwxrwxrwx 0
c:\/WINDOWS/SYSTEM/SEC_SSPI.DLL
0
342738
1264 ..c -/-rwxrwxrwx 0
c:\/WINDOWS/SYSTEM/MSMIXMGR.DLL
0
327781
14032 ..c -/-rwxrwxrwx 0
c:\/WINDOWS/NDDEAPI.DLL
0
342868
88544 ..c -/-rwxrwxrwx 0
c:\/WINDOWS/SYSTEM/COMMDLG.DLL
0
342755
11844 ..c -/-rwxrwxrwx 0
c:\/WINDOWS/SYSTEM/MMDEVLDR.VXD
41621 ..c -/-rwxrwxrwx 0
0
328414
c:\/WINDOWS/INF/MDMTELIN.INF
0
342750
21872 ..c -/-rwxrwxrwx 0
c:\/WINDOWS/SYSTEM/MSACM.DRV
545814 <part2.img41844 ..c -rwxrwxrwx 0
0
_DMAD.VXD-dead-545814>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
13312 ..c -/-r-xr-xr-x 0
0
1243655
c:\/PROGRA~1/THEMIC~1/CCEI.DLL
15281 ..c -/-rwxrwxrwx 0
0
328339
c:\/WINDOWS/INF/MDMCRTIX.INF
38400 ..c -/-rwxrwxrwx 0
0
342927
c:\/WINDOWS/SYSTEM/NPRA32.DLL
24735 ..c -/-rwxrwxrwx 0
0
328432
c:\/WINDOWS/INF/MDMVICT.INF
3104 ..c -/-rwxrwxrwx 0
0
342566
c:\/WINDOWS/SYSTEM/MMSOUND.DRV
2238 ..c -/-rwxrwxrwx 0
0
342718
c:\/WINDOWS/SYSTEM/WFM0200A.CSP
20800 ..c -/-rwxrwxrwx 0
0
342827
c:\/WINDOWS/SYSTEM/SYSCLASS.DLL
702346 ..c -/-rwxrwxrwx 0
0
342962
c:\/WINDOWS/SYSTEM/VMM32.VXD
4828 ..c -/-rwxrwxrwx 0
0
328295
c:\/WINDOWS/INF/NETTDKP.INF
99376 ..c -/-rwxrwxrwx 0
0
342918
c:\/WINDOWS/SYSTEM/IMAGEHLP.DLL
204288 ..c -/-rwxrwxrwx 0
0
342913
c:\/WINDOWS/SYSTEM/DIGSIG.DLL
4208 ..c -/-rwxrwxrwx 0
0
342808
c:\/WINDOWS/SYSTEM/STORAGE.DLL
22368 ..c -/-rwxrwxrwx 0
0
328358
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/WINDOWS/INF/MDMHAEUS.INF
131072 ..c -/-rwxrwxrwx 0
0
342888
c:\/WINDOWS/SYSTEM/GDI32.DLL
4209 ..c -/-rwxrwxrwx 0
0
328238
c:\/WINDOWS/INF/MSDX.INF
34746 ..c -/-rwxrwxrwx 0
0
328378
c:\/WINDOWS/INF/MDMMIX.INF
190 ..c -/-rwxrwxrwx 0
0
327705
c:\/WINDOWS/Circles.bmp (CIRCLES.BMP)
2972 ..c -/-rwxrwxrwx 0
0
328385
c:\/WINDOWS/INF/MDMNOKIA.INF
1920 ..c -/-rwxrwxrwx 0
0
368144
c:\/WINDOWS/HELP/WORDPAD.CNT
11776 ..c -/-rwxrwxrwx 0
0
342878
c:\/WINDOWS/SYSTEM/TAPI32.DLL
87328 ..c -/-rwxrwxrwx 0
0
327738
c:\/WINDOWS/TWAIN.DLL
4464 ..c -/-rwxrwxrwx 0
0
537651
c:\/PROGRA~1/NETMEE~1/MNMNET.EXE
5739 ..c -/-rwxrwxrwx 0
0
328319
c:\/WINDOWS/INF/LAYOUT1.INF
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
143 ..c -/-rwxrwxrwx 0
0
368162
c:\/WINDOWS/HELP/PINGNAME.BAT
22192 ..c -/-rwxrwxrwx 0
0
342611
c:\/WINDOWS/SYSTEM/FRAMEBUF.DRV
44 ..c -/-rwxrwxrwx 0
0
327799
c:\/WINDOWS/EXCHNG32.INI
5312 ..c -/-rwxrwxrwx 0
0
342894
c:\/WINDOWS/SYSTEM/NETCPL.CPL
53840 ..c -/-r-xr-xr-x 0
0
9
c:\/SETUPLOG.TXT
326656 ..c -/-rwxrwxrwx 0
0
342785
c:\/WINDOWS/SYSTEM/MSVCRT40.DLL
64493 ..c -/-rwxrwxrwx 0
0
328302
c:\/WINDOWS/INF/OHARE.INF
16384 ..c drwxrwxrwx 0
0
1193994 <part2.img_$!$.ME-dead-1193994>
0
1687557
135876 ..c -/-rwxrwxrwx 0
c:\/WINDOWS/MEDIA/_SSOUND.WAV (deleted)
0
545838
27196 ..c -/-rwxrwxrwx 0
c:\/WINDOWS/SYSTEM/VMM32/_POOLER.VXD (deleted)
0
328271
4125 ..c -/-rwxrwxrwx 0
c:\/WINDOWS/INF/NETFTP.INF
1681925
654 ..c -/-rwxrwxrwx 0
0
c:\/WINDOWS/CONFIG/GENERAL.IDF
0
342680
153088 ..c -/-rwxrwxrwx 0
c:\/WINDOWS/SYSTEM/JGDWMIE.DLL
Key fingerprint = AF19
2F94 998D
F8B5
06E4 A169 4E46
wxFDB5
0 DE3D
0
343575
5175FA27
..c -/-rwxrwxr
c:\/WINDOWS/COMMAND/CHOICE.COM
27049 ..c -/-rwxrwxrwx 0
0
328434
c:\/WINDOWS/INF/MDMYORIK.INF
156160 ..c -/-rwxrwxrwx 0
0
537609
c:\/PROGRA~1/NETMEE~1/MCATIPX.DLL
4912 ..c -/-rwxrwxrwx 0
0
327774
c:\/WINDOWS/RUNDLL.EXE
34978 ..c -/-rwxrwxrwx 0
0
328328
c:\/WINDOWS/INF/MDMBLATZ.INF
44544 ..c -/-rwxrwxrwx 0
0
342891
c:\/WINDOWS/SYSTEM/USER32.DLL
19568 ..c -/-rwxrwxrwx 0
0
342673
c:\/WINDOWS/SYSTEM/WINSSPI.DLL
7824 ..c -/-rwxrwxrwx 0
0
537636
c:\/PROGRA~1/NETMEE~1/MNMMSG_.DLL
16384 ..c d/drwxrwxrwx 0
0
342549
c:\/WINDOWS/SYSTEM/VMM32
2118 ..c -/-rwxrwxrwx 0
0
327852
c:\/WINDOWS/Bubbles.bmp (BUBBLES.BMP)
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
16384 ..c d/d-wx-wx-wx 0
0
537096
c:\/PROGRA~1/NetMeeting (NETMEE~1)
45577 ..c -/-rwxrwxrwx 0
0
328420
c:\/WINDOWS/INF/MDMTOSH.INF
100 ..c -/-rwxrwxrwx 0
0
368150
c:\/WINDOWS/HELP/WANGOCX.CNT
29271 ..c -/-rwxrwxrwx 0
0
343573
c:\/WINDOWS/COMMAND/MODE.COM
16614 ..c -/-rwxrwxrwx 0
0
368187
c:\/WINDOWS/HELP/PSSPOS.HLP
2544 ..c -/-rwxrwxrwx 0
0
537646
c:\/PROGRA~1/NETMEE~1/MNMTPH16.DLL
81644 ..c -/-rwxrwxrwx 0
0
342907
c:\/WINDOWS/SYSTEM/RPCSS.EXE
27196 ..c -rwxrwxrwx 0
0
545838 <part2.img_POOLER.VXD-dead-545838>
14336 ..c -/-rwxrwxrwx 0
0
342832
c:\/WINDOWS/SYSTEM/ADDREG.EXE
38389 ..c -/-rwxrwxrwx 0
0
368191
c:\/WINDOWS/HELP/MSNPSS.HLP
9765 ..c -/-rwxrwxrwx 0
0
545813
c:\/WINDOWS/SYSTEM/VMM32/_DEF.VXD (deleted)
21028 ..c -/-rwxrwxrwx 0
0
368159
c:\/WINDOWS/HELP/APMCP.HLP
85240 ..c -/-rwxrwxrwx 0
0
765967
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/WINDOWS/FONTS/TIMES.TTF
35608 ..c -/-rwxrwxrwx 0
0
328204
c:\/WINDOWS/INF/CEMMF.INF
11587 ..c -/-rwxrwxrwx 0
0
328251
c:\/WINDOWS/INF/NDSCLI.INF
4416 ..c -/-rwxrwxrwx 0
0
537653
c:\/PROGRA~1/NETMEE~1/MNMSHCO.EXE
930 ..c -/-rwxrwxrwx 0
0
368168
c:\/WINDOWS/HELP/WINHLP32.CNT
18077 ..c -/-rwxrwxrwx 0
0
545798
c:\/WINDOWS/SYSTEM/VMM32/_IOSXLAT.VXD (deleted)
9931 ..c -/-rwxrwxrwx 0
0
545804
c:\/WINDOWS/SYSTEM/VMM32/_NT13.VXD (deleted)
3811 ..c -/-rwxrwxrwx 0
0
328282
c:\/WINDOWS/INF/NETOSI.INF
59928 ..c -/-rwxrwxrwx 0
0
328276
c:\/WINDOWS/INF/NETINFO.INF
34566 ..c -/-rwxrwxrwx 0
0
343591
c:\/WINDOWS/COMMAND/KEYBOARD.SYS
32240 ..c -/-rwxrwxrwx 0
0
342591
c:\/WINDOWS/SYSTEM/DDEML.DLL
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
7229 ..c -/-rwxrwxrwx 0
0
328303
c:\/WINDOWS/INF/OVERRIDE.INF
379152 ..c -/-rwxrwxrwx 0
0
342853
c:\/WINDOWS/SYSTEM/COMCTL32.DLL
2497 ..c -/-rwxrwxrwx 0
0
342867
c:\/WINDOWS/SYSTEM/CONTROL.INF
2169 ..c -/-rwxrwxrwx 0
0
368203
c:\/WINDOWS/HELP/WINFILE.CNT
5632 ..c -/-rwxrwxrwx 0
0
537652
c:\/PROGRA~1/NETMEE~1/MNMOM.EXE
25234 ..c -/-rwxrwxrwx 0
0
328257
c:\/WINDOWS/INF/NETCABLE.INF
197 ..c -/-rwxrwxrwx 0
0
1225232
c:\/PROGRA~1/ICW-IN~1/MSN.ISP
14840 ..c -/-rwxrwxrwx 0
0
368167
c:\/WINDOWS/HELP/WINDOWS.CNT
92160 ..c -/-rwxrwxrwx 0
0
342730
c:\/WINDOWS/SYSTEM/ICCVID.DLL
12351 ..c -/-rwxrwxrwx 0
0
368215
c:\/WINDOWS/HELP/AMOVIE.HLP
13883 ..c -/-rwxrwxrwx 0
0
685576
c:\/WINDOWS/SYSTEM/IOSUBSYS/CDTSD.VXD
9801 ..c -rwxrwxrwx 0
0
545807 <part2.img_ARITY.VXD-dead-545807>
26967 ..c -/-rwxrwxrwx 0
0
328365
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/WINDOWS/INF/MDMINTPC.INF
22 ..c -/-r-xr-xr-x 0
0
8
c:\/MSDOS.--5120 ..c -/-rwxrwxrwx 0
0
342683
c:\/WINDOWS/SYSTEM/INDICDLL.DLL
84412 ..c -/-rwxrwxrwx 0
0
327767
c:\/WINDOWS/MORICONS.DLL
819200 ..c -/-rwxrwxrwx 0
0
342864
c:\/WINDOWS/SYSTEM/SHELL32.DLL
18546 ..c -/-rwxrwxrwx 0
0
545823
c:\/WINDOWS/SYSTEM/VMM32/_TDAPI.VXD (deleted)
545817 <part2.img45371 ..c -rwxrwxrwx 0
0
_KD.VXD-dead-545817>
0
342879
20616 ..c -/-rwxrwxrwx 0
c:\/WINDOWS/SYSTEM/TAPIADDR.DLL
0
328269
2634 ..c -/-rwxrwxrwx 0
c:\/WINDOWS/INF/NETEVX.INF
21504 ..c -/-rwxrwxrwx 0
0
342898
c:\/WINDOWS/SYSTEM/MSPWL32.DLL
0
537628
63200 ..c -/-rwxrwxrwx 0
c:\/PROGRA~1/NETMEE~1/MNMCLPM_.DLL
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
87552 ..c -/-rwxrwxrwx 0
0
342660
c:\/WINDOWS/SYSTEM/URL.DLL
161280 ..c -/-rwxrwxrwx 0
0
342571
c:\/WINDOWS/SYSTEM/CRTDLL.DLL
558704 ..c -/-rwxrwxrwx 0
0
342806
c:\/WINDOWS/SYSTEM/OLE32.DLL
90521 ..c -/-rwxrwxrwx 0
0
545837
c:\/WINDOWS/SYSTEM/VMM32/_ONFIGMG.VXD (deleted)
169440 ..c -/-rwxrwxrwx 0
0
342804
c:\/WINDOWS/SYSTEM/OLE2DISP.DLL
16384 ..c d/d-wx-wx-wx 0
0
537111
c:\/PROGRA~1/Internet Explorer (INTERN~1)
55408 ..c -/-rwxrwxrwx 0
0
537648
c:\/PROGRA~1/NETMEE~1/MNMUT_.DLL
49756 ..c -/-rwxrwxrwx 0
0
328439
c:\/WINDOWS/INF/MDMZYXLG.INF
71196 ..c -/-rwxrwxrwx 0
0
765971
c:\/WINDOWS/FONTS/WINGDING.TTF
65412 ..c -/-rwxrwxrwx 0
0
765958
c:\/WINDOWS/FONTS/ARIAL.TTF
186368 ..c -/-rwxrwxrwx 0
0
342928
c:\/WINDOWS/SYSTEM/RA32.DLL
12800 ..c -/-rwxrwxrwx 0
0
342906
c:\/WINDOWS/SYSTEM/MPREXE.EXE
30549 ..c -/-rwxrwxrwx 0
0
328377
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/WINDOWS/INF/MDMMHRTZ.INF
30931 ..c -rwxrwxrwx 0
0
545819 <part2.img_MPOLL.VXD-dead-545819>
121 ..c -/-rwxrwxrwx 0
0
368182
c:\/WINDOWS/HELP/CONNECT.CNT
16156 ..c -/-rwxrwxrwx 0
0
328435
c:\/WINDOWS/INF/MDMZOOM.INF
55125 ..c -/-rwxrwxrwx 0
0
328236
c:\/WINDOWS/INF/MSDISP.INF
13312 ..c -/-rwxrwxrwx 0
0
342604
c:\/WINDOWS/SYSTEM/REDIR32.EXE
8192 ..c -/-rwxrwxrwx 0
0
342609
c:\/WINDOWS/SYSTEM/FRAMEBUF.DLL
18432 ..c -/-rwxrwxrwx 0
0
1225233
c:\/PROGRA~1/ICW-IN~1/INETWIZ.EXE
22233 ..c -/-rwxrwxrwx 0
0
368171
c:\/WINDOWS/HELP/COMMON.HLP
733296 ..c -/-rwxrwxrwx 0
0
342862
c:\/WINDOWS/SYSTEM/OPENGL32.DLL
9872 ..c -/-rwxrwxrwx 0
0
537641
c:\/PROGRA~1/NETMEE~1/MNMTDD_.DLL
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
129078 ..c -/-rwxrwxrwx 0
0
327780
c:\/WINDOWS/LOGOW.SYS
77312 ..c -/-rwxrwxrwx 0
0
342641
c:\/WINDOWS/SYSTEM/AWFXEX32.EXE
59964 ..c -/-rwxrwxrwx 0
0
1201163
c:\/WINDOWS/SYSTEM/COLOR/MNEBUG21.ICM
59564 ..c -/-rwxrwxrwx 0
0
1201158
c:\/WINDOWS/SYSTEM/COLOR/MNB22G15.ICM
6144 ..c -/-rwxrwxrwx 0
0
342678
c:\/WINDOWS/SYSTEM/IMM32.DLL
10556 ..c -/-rwxrwxrwx 0
0
368220
c:\/WINDOWS/HELP/MSNAUTH.HLP
9931 ..c -rwxrwxrwx 0
0
545804 <part2.img_NT13.VXD-dead-545804>
16384 ..c d/drwxrwxrwx 0
0
327749
c:\/WINDOWS/JAVA
16384 ..c d/drwxrwxrwx 0
0
1193997
c:\/WINDOWS/DESKTOP/Online Services (ONLINE~1)
3111 ..c -/-rwxrwxrwx 0
0
2885653
c:\/PROGRA~1/ONLINE~1/AT&T/WORLDBTN.GIF
22326 ..c -/-rwxrwxrwx 0
0
328198
c:\/WINDOWS/INF/APPLETPP.INF
270 ..c -/-rwxrwxrwx 0
0
327807
c:\/WINDOWS/PROTOCOL.INI
9294 ..c -/-rwxrwxrwx 0
0
328332
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/WINDOWS/INF/MDMCMCM.INF
39936 ..c -/-rwxrwxrwx 0
0
342823
c:\/WINDOWS/SYSTEM/ULSVC.EXE
38351 ..c -/-rwxrwxrwx 0
0
342942
c:\/WINDOWS/SYSTEM/DRWATSON.EXE
919 ..c -/-rwxrwxrwx 0
0
368202
c:\/WINDOWS/HELP/PROGMAN.CNT
19419 ..c -/-rwxrwxrwx 0
0
328275
c:\/WINDOWS/INF/NETIBMCC.INF
3158 ..c -/-rwxrwxrwx 0
0
1065477
c:\/WINDOWS/WANGSAMP/GOTODLG.FRM
14624 ..c -/-rwxrwxrwx 0
0
342608
c:\/WINDOWS/SYSTEM/VGAFULL.3GR
25827 ..c -/-rwxrwxrwx 0
0
368217
c:\/WINDOWS/HELP/INTERWIZ.HLP
829 ..c -rwxrwxrwx 0
0
551946 <part2.img-_CI.HTdead-551946>
7746 ..c -/-rwxrwxrwx 0
0
1225229
c:\/PROGRA~1/ICW-IN~1/PHONE.ICW
10127 ..c -/-rwxrwxrwx 0
0
368133
c:\/WINDOWS/HELP/LICENSE.TXT
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
3200 ..c -/-rwxrwxrwx 0
0
342597
c:\/WINDOWS/SYSTEM/WIN32S16.DLL
27235 ..c -/-rwxrwxrwx 0
0
343582
c:\/WINDOWS/COMMAND/MOVE.EXE
287744 ..c -/-rwxrwxrwx 0
0
342643
c:\/WINDOWS/SYSTEM/IMGEDIT.OCX
326144 ..c -/-r-xr-xr-x 0
0
551948
c:\/PROGRA~1/ACCESS~1/HYPERT~1/hypertrm.dll (HYPERTRM.DLL)
0
551946
829 ..c -/-rwxrwxrwx 0
c:\/PROGRA~1/ACCESS~1/HYPERT~1/_CI.HT (deleted)
36485 ..c -/-rwxrwxrwx 0
0
328354
c:\/WINDOWS/INF/MDMGEN.INF
3808 ..c -/-rwxrwxrwx 0
0
328279
c:\/WINDOWS/INF/NETNICE.INF
9056 ..c -/-rwxrwxrwx 0
0
342713
c:\/WINDOWS/SYSTEM/WFM0202.ACV
161712 ..c -/-rwxrwxrwx 0
0
342877
c:\/WINDOWS/SYSTEM/TAPI.DLL
119296 ..c -/-rwxrwxrwx 0
0
342897
c:\/WINDOWS/SYSTEM/MPRSERV.DLL
4570 ..c -/-rwxrwxrwx 0
0
2257928
c:\/WINDOWS/SHELLNEW/AMIPRO.SAM
2898 ..c -/-rwxrwxrwx 0
0
328284
c:\/WINDOWS/INF/NETPPP.INF
57344 ..c -/-rwxrwxrwx 0
0
342958
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/WINDOWS/SYSTEM/FTE.DLL
12192 ..c -/-rwxrwxrwx 0
0
342882
c:\/WINDOWS/SYSTEM/UMDMXFRM.DLL
7168 ..c -/-rwxrwxrwx 0
0
342649
c:\/WINDOWS/SYSTEM/STEM0409.DLL
9964 ..c -/-rwxrwxrwx 0
0
328392
c:\/WINDOWS/INF/MDMOSI.INF
2000 ..c -/-rwxrwxrwx 0
0
342904
c:\/WINDOWS/SYSTEM/WINNET16.DLL
59636 ..c -/-rwxrwxrwx 0
0
765998
c:\/WINDOWS/FONTS/VERDANAZ.TTF
23985 ..c -/-rwxrwxrwx 0
0
328356
c:\/WINDOWS/INF/MDMGVCD.INF
149504 ..c -/-r-xr-xr-x 0
0
1243657
c:\/PROGRA~1/THEMIC~1/MOSCOMP.DLL
7680 ..c -/-rwxrwxrwx 0
0
537647
c:\/PROGRA~1/NETMEE~1/MNMTPH32.DLL
1067520 ..c -/-rwxrwxrwx 0
0
327785
c:\/WINDOWS/SETUPSLT.EXE
10441 ..c -/-rwxrwxrwx 0
0
328345
c:\/WINDOWS/INF/MDMELINK.INF
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
17408 ..c -/-rwxrwxrwx 0
0
342857
c:\/WINDOWS/SYSTEM/DOCPROP.DLL
27475 ..c -/-rwxrwxrwx 0
0
328367
c:\/WINDOWS/INF/MDMKE.INF
19566 ..c -rwxrwxrwx 0
0
545811 <part2.img_CACHE.VXD-dead-545811>
37435 ..c -/-rwxrwxrwx 0
0
328296
c:\/WINDOWS/INF/NETTRANS.INF
9687 ..c -/-rwxrwxrwx 0
0
328390
c:\/WINDOWS/INF/MDMOPT1.INF
24027 ..c -/-rwxrwxrwx 0
0
328389
c:\/WINDOWS/INF/MDMOLIVE.INF
177856 ..c -/-rwxrwxrwx 0
0
342809
c:\/WINDOWS/SYSTEM/TYPELIB.DLL
18736 ..c -/-rwxrwxrwx 0
0
342747
c:\/WINDOWS/SYSTEM/MCISEQ.DRV
1517 ..c -/-rwxrwxrwx 0
0
368213
c:\/WINDOWS/HELP/W_IR.CNT
35112 ..c -rwxrwxrwx 0
0
545824 <part2.img_XDLDR.VXD-dead-545824>
1042 ..c -/-rwxrwxrwx 0
0
368192
c:\/WINDOWS/HELP/MPLAYER.CNT
10401 ..c -rwxrwxrwx 0
0
545825 <part2.img_OMBUFF.VXD-dead-545825>
910 ..c -/-rwxrwxrwx 0
0
368136
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/WINDOWS/HELP/HYPERTRM.CNT
9815 ..c -/-rwxrwxrwx 0
0
545834
c:\/WINDOWS/SYSTEM/VMM32/_MD.VXD (deleted)
59129 ..c -/-rwxrwxrwx 0
0
685575
c:\/WINDOWS/SYSTEM/IOSUBSYS/CDFS.VXD
12288 ..c -/-rwxrwxrwx 0
0
327748
c:\/WINDOWS/JVIEW.EXE
9522 ..c -/-rwxrwxrwx 0
0
342797
c:\/WINDOWS/SYSTEM/CP_437.NLS
9200 ..c -/-rwxrwxrwx 0
0
537654
c:\/PROGRA~1/NETMEE~1/TYPE.WAV
9962 ..c -/-rwxrwxrwx 0
0
685573
c:\/WINDOWS/SYSTEM/IOSUBSYS/BIGMEM.DRV
20345 ..c -/-rwxrwxrwx 0
0
328445
c:\/WINDOWS/INF/MULLANG.INF
48880 ..c -/-rwxrwxrwx 0
0
342572
c:\/WINDOWS/SYSTEM/PKPD.DLL
43113 ..c -/-rwxrwxrwx 0
0
328337
c:\/WINDOWS/INF/MDMCPQ.INF
6144 ..c -/-rwxrwxrwx 0
0
342815
c:\/WINDOWS/SYSTEM/OLESVR32.DLL
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
24352 ..c -/-r-xr-xr-x 0
0
765981
c:\/WINDOWS/FONTS/SMALLE.FON
27277 ..c -/-rwxrwxrwx 0
0
368183
c:\/WINDOWS/HELP/CONNECT.HLP
3570 ..c -/-rwxrwxrwx 0
0
1194520
c:\/WINDOWS/DESKTOP/ONLINE~1/About The Online Services.txt
(ABOUTT~1.TXT)
37350 ..c -/-rwxrwxrwx 0
0
328247
c:\/WINDOWS/INF/MSPRINT2.INF
214836 ..c -/---x--x--x 0
0
21
c:\/IO.SYS
11747 ..c -/-rwxrwxrwx 0
0
2885661
c:\/PROGRA~1/ONLINE~1/AT&T/BALLOON.JPG
20992 ..c -/-rwxrwxrwx 0
0
1306634
c:\/PROGRA~1/INTERN~1/REGEXP.EXE
32768 ..c -/-rwxrwxrwx 0
0
342845
c:\/WINDOWS/SYSTEM/LIGHTS.EXE
104960 ..c -/-rwxrwxrwx 0
0
1225227
c:\/PROGRA~1/ICW-IN~1/ICWCONN2.EXE
17175 ..c -/-rwxrwxrwx 0
0
343590
c:\/WINDOWS/COMMAND/DISPLAY.SYS
7424 ..c -/-rwxrwxrwx 0
0
342543
c:\/WINDOWS/SYSTEM/NWNDS.DLL
16384 ..c d/drwxrwxrwx 0
0
537115
c:\/PROGRA~1/ICW-Internet Connection Wizard (ICW-IN~1)
109200 ..c -/-rwxrwxrwx 0
0
342932
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/WINDOWS/SYSTEM/SCHANNEL.DLL
116736 ..c -/-rwxrwxrwx 0
0
537610
c:\/PROGRA~1/NETMEE~1/MCATPSTN.DLL
45371 ..c -/-rwxrwxrwx 0
0
545817
c:\/WINDOWS/SYSTEM/VMM32/_KD.VXD (deleted)
30931 ..c -/-rwxrwxrwx 0
0
545819
c:\/WINDOWS/SYSTEM/VMM32/_MPOLL.VXD (deleted)
924432 ..c -/-rwxrwxrwx 0
0
342553
c:\/WINDOWS/SYSTEM/MFC40.DLL
56336 ..c -/-r-xr-xr-x 0
0
765985
c:\/WINDOWS/FONTS/SYMBOLE.FON
73984 ..c -/-rwxrwxrwx 0
0
765960
c:\/WINDOWS/FONTS/ARIALBI.TTF
16855 ..c -/-rwxrwxrwx 0
0
545816
c:\/WINDOWS/SYSTEM/VMM32/_FBACKUP.VXD (deleted)
10240 ..c -/-rwxrwxrwx 0
0
342651
c:\/WINDOWS/SYSTEM/WHLP32T.DLL
17920 ..c -/-rwxrwxrwx 0
0
342707
c:\/WINDOWS/SYSTEM/MSADP32.ACM
2448 ..c -/-rwxrwxrwx 0
0
2257931
c:\/WINDOWS/SHELLNEW/LOTUS.WK4
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
20480 ..c -/-rwxrwxrwx 0
0
342634
c:\/WINDOWS/SYSTEM/OISSQ400.DLL
6240 ..c -/-rwxrwxrwx 0
0
342848
c:\/WINDOWS/SYSTEM/SETUP4.DLL
3115 ..c -/-rwxrwxrwx 0
0
2885640
c:\/PROGRA~1/ONLINE~1/AT&T/CUSTCARE.GIF
11264 ..c -/-rwxrwxrwx 0
0
342739
c:\/WINDOWS/SYSTEM/MSRLE32.DLL
61550 ..c -/-rwxrwxrwx 0
0
328401
c:\/WINDOWS/INF/MDMROCK.INF
30768 ..c -/-rwxrwxrwx 0
0
685582
c:\/WINDOWS/SYSTEM/IOSUBSYS/AIC78XX.MPD
11637 ..c -/-rwxrwxrwx 0
0
342846
c:\/WINDOWS/SYSTEM/LOGGER.VXD
32530 ..c -/-rwxrwxrwx 0
0
327724
c:\/WINDOWS/GENERAL.TXT
342 ..c -/-rwxrwxrwx 0
0
368227
c:\/WINDOWS/HELP/FILEXFER.CNT
134022 ..c -/-rwxrwxrwx 0
0
342799
c:\/WINDOWS/SYSTEM/LOCALE.NLS
16384 ..c d/d-wx-wx-wx 0
0
17
c:\/Program Files
(PROGRA~1)
62138 ..c -/-rwxrwxrwx 0
0
368189
c:\/WINDOWS/HELP/MSNINT.HLP
14160 ..c -/-rwxrwxrwx 0
0
342916
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/WINDOWS/SYSTEM/HLINKPRX.DLL
33280 ..c -/-rwxrwxrwx 0
0
327790
c:\/WINDOWS/EXPOSTRT.EXE
47616 ..c -/-rwxrwxrwx 0
0
342691
c:\/WINDOWS/SYSTEM/MOSCC.DLL
17067 ..c -/-rwxrwxrwx 0
0
328364
c:\/WINDOWS/INF/MDMINTEL.INF
121 ..c -/-rwxrwxrwx 0
0
368184
c:\/WINDOWS/HELP/ACCESSIB.CNT
11307 ..c -/-rwxrwxrwx 0
0
685591
c:\/WINDOWS/SYSTEM/IOSUBSYS/ATAPCHNG.VXD
24069 ..c -/-rwxrwxrwx 0
0
328430
c:\/WINDOWS/INF/MDMVAYRS.INF
62339 ..c -/-rwxrwxrwx 0
0
328320
c:\/WINDOWS/INF/APPS.INF
42191 ..c -/-rwxrwxrwx 0
0
327728
c:\/WINDOWS/MSDOSDRV.TXT
3878 ..c -/-rwxrwxrwx 0
0
343586
c:\/WINDOWS/COMMAND/XCOPY.EXE
20901 ..c -/-rwxrwxrwx 0
0
327718
c:\/WINDOWS/CMD640X2.SYS
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
83552 ..c -/-rwxrwxrwx 0
0
342914
c:\/WINDOWS/SYSTEM/GAPIA32.DLL
6928 ..c -/-rwxrwxrwx 0
0
342727
c:\/WINDOWS/SYSTEM/DCIMAN.DLL
13456 ..c -/-rwxrwxrwx 0
0
342711
c:\/WINDOWS/SYSTEM/WFM0200.ACV
23105 ..c -/-rwxrwxrwx 0
0
342847
c:\/WINDOWS/SYSTEM/PARALINK.VXD
97 ..c -/-rwxrwxrwx 0
0
368212
c:\/WINDOWS/HELP/UPDATE.CNT
9600 ..c -/-r-xr-xr-x 0
0
765974
c:\/WINDOWS/FONTS/8514SYS.FON
18999 ..c -/-rwxrwxrwx 0
0
685588
c:\/WINDOWS/SYSTEM/IOSUBSYS/HSFLOP.PDR
193024 ..c -/-rwxrwxrwx 0
0
342717
c:\/WINDOWS/SYSTEM/MMSYS.CPL
130048 ..c -/-rwxrwxrwx 0
0
342938
c:\/WINDOWS/SYSTEM/WINTRUST.DLL
6144 ..c -/-rwxrwxrwx 0
0
551943
c:\/PROGRA~1/ACCESS~1/HYPERT~1/HYPERTRM.EXE
69886 ..c -/-rwxrwxrwx 0
0
343564
c:\/WINDOWS/COMMAND/EDIT.COM
11120 ..c -/-rwxrwxrwx 0
0
368197
c:\/WINDOWS/HELP/SNDVOL32.HLP
2644 ..c -/-rwxrwxrwx 0
0
2885648
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/PROGRA~1/ONLINE~1/AT&T/SHOPBTN.GIF
33304 ..c -/-rwxrwxrwx 0
0
328446
c:\/WINDOWS/INF/MDMVV.INF
83228 ..c -/-rwxrwxrwx 0
0
765968
c:\/WINDOWS/FONTS/TIMESBD.TTF
62968 ..c -/-rwxrwxrwx 0
0
765961
c:\/WINDOWS/FONTS/ARIALI.TTF
22408 ..c -rwxrwxrwx 0
0
545812 <part2.img_CDFSD.VXD-dead-545812>
19216 ..c -/-rwxrwxrwx 0
0
2885652
c:\/PROGRA~1/ONLINE~1/AT&T/UNIVCARD.GIF
21797 ..c -/-rwxrwxrwx 0
0
328400
c:\/WINDOWS/INF/MDMRFI.INF
173536 ..c -/-rwxrwxrwx 0
0
342607
c:\/WINDOWS/SYSTEM/RICHED32.DLL
17172 ..c -/-rwxrwxrwx 0
0
368186
c:\/WINDOWS/HELP/ACCESSIB.HLP
13669 ..c -/-rwxrwxrwx 0
0
342829
c:\/WINDOWS/SYSTEM/EISA.VXD
470 ..c -/-rwxrwxrwx 0
0
327858
c:\/WINDOWS/Houndstooth.bmp (HOUNDS~1.BMP)
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
151040 ..c -/-rwxrwxrwx 0
0
342647
c:\/WINDOWS/SYSTEM/SYNCUI.DLL
92672 ..c -/-rwxrwxrwx 0
0
342854
c:\/WINDOWS/SYSTEM/COMDLG32.DLL
16782 ..c -/-rwxrwxrwx 0
0
328263
c:\/WINDOWS/INF/NETDCA.INF
36561 ..c -/-rwxrwxrwx 0
0
328309
c:\/WINDOWS/INF/SCSI.INF
29475 ..c -/-rwxrwxrwx 0
0
328322
c:\/WINDOWS/INF/MDMACEEX.INF
90521 ..c -rwxrwxrwx 0
0
545837 <part2.img_ONFIGMG.VXD-dead-545837>
101888 ..c -/-rwxrwxrwx 0
0
342645
c:\/WINDOWS/SYSTEM/IMGTHUMB.OCX
129078 ..c -/-rwxrwxrwx 0
0
327779
c:\/WINDOWS/LOGOS.SYS
21733 ..c -/-rwxrwxrwx 0
0
328281
c:\/WINDOWS/INF/NETOLI.INF
64702 ..c -/-rwxrwxrwx 0
0
368169
c:\/WINDOWS/HELP/APPS.HLP
68938 ..c -/-rwxrwxrwx 0
0
545805
c:\/WINDOWS/SYSTEM/VMM32/IOS.VXD
18077 ..c -rwxrwxrwx 0
0
545798 <part2.img_IOSXLAT.VXD-dead-545798>
9208 ..c -/-rwxrwxrwx 0
0
328405
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/WINDOWS/INF/MDMSIER.INF
28940 ..c -/-rwxrwxrwx 0
0
328321
c:\/WINDOWS/INF/MDM3X.INF
30832 ..c -/-rwxrwxrwx 0
0
342902
c:\/WINDOWS/SYSTEM/RPCNS4.DLL
18480 ..c -/-rwxrwxrwx 0
0
342885
c:\/WINDOWS/SYSTEM/WAVEWRAP.DRV
19101 ..c -/-rwxrwxrwx 0
0
685577
c:\/WINDOWS/SYSTEM/IOSUBSYS/CDVSD.VXD
9728 ..c -/-rwxrwxrwx 0
0
342640
c:\/WINDOWS/SYSTEM/AWADPR32.EXE
29686 ..c -/-rwxrwxrwx 0
0
328326
c:\/WINDOWS/INF/MDMATT.INF
6776 ..c -/-rwxrwxrwx 0
0
342719
c:\/WINDOWS/SYSTEM/WFM0201A.CSP
2832 ..c -/-rwxrwxrwx 0
0
342540
c:\/WINDOWS/SYSTEM/MSWEBNDI.DLL
95744 ..c -/-rwxrwxrwx 0
0
327750
c:\/WINDOWS/EXTRAC32.EXE
16149 ..c -/-rwxrwxrwx 0
0
328294
c:\/WINDOWS/INF/NETTCC.INF
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
24064 ..c -/-rwxrwxrwx 0
0
342814
c:\/WINDOWS/SYSTEM/OLESVR.DLL
7161 ..c -/-rwxrwxrwx 0
0
327721
c:\/WINDOWS/EXCHANGE.TXT
27648 ..c -/-rwxrwxrwx 0
0
342674
c:\/WINDOWS/SYSTEM/WSOCK32N.DLL
9584 ..c -/-rwxrwxrwx 0
0
368195
c:\/WINDOWS/HELP/MMDRV.HLP
31744 ..c -/-rwxrwxrwx 0
0
342822
c:\/WINDOWS/SYSTEM/RRCM.DLL
32640 ..c -/-rwxrwxrwx 0
0
537649
c:\/PROGRA~1/NETMEE~1/MNMWB_.DLL
13264 ..c -/-rwxrwxrwx 0
0
685583
c:\/WINDOWS/SYSTEM/IOSUBSYS/AMSINT.MPD
6656 ..c -/-rwxrwxrwx 0
0
342866
c:\/WINDOWS/SYSTEM/FONTREG.EXE
48640 ..c -/-rwxrwxrwx 0
0
342584
c:\/WINDOWS/SYSTEM/INTL.CPL
0 ..c -/-rwxrwxrwx 0
0
327899
c:\/WINDOWS/NDISLOG.TXT
32256 ..c -/-rwxrwxrwx 0
0
342625
c:\/WINDOWS/SYSTEM/JPEG1X32.DLL
227840 ..c -/-rwxrwxrwx 0
0
342787
c:\/WINDOWS/SYSTEM/ODBCJT32.DLL
5856 ..c -/-rwxrwxrwx 0
0
342919
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/WINDOWS/SYSTEM/INET16.DLL
27136 ..c -/-rwxrwxrwx 0
0
342622
c:\/WINDOWS/SYSTEM/AWKRNL32.DLL
11799 ..c -/-rwxrwxrwx 0
0
342954
c:\/WINDOWS/SYSTEM/MAILNEWS.TXT
468 ..c -/-rwxrwxrwx 0
0
1225225
c:\/PROGRA~1/ICW-IN~1/ICWX25C.DUN
37888 ..c -/-rwxrwxrwx 0
0
342693
c:\/WINDOWS/SYSTEM/MOSCUDLL.DLL
0
551950
20480 ..c -/-r-xr-xr-x 0
c:\/PROGRA~1/ACCESS~1/HYPERT~1/hticons.dll (HTICONS.DLL)
0
342980
129824 ..c -/-rwxrwxrwx 0
c:\/WINDOWS/SYSTEM/3D Text.scr (3DTEXT~1.SCR)
0
328379
36008 ..c -/-rwxrwxrwx 0
c:\/WINDOWS/INF/MDMMOTO.INF
0
327760
2100 ..c -/-rwxrwxrwx 0
c:\/WINDOWS/DBLBUFF.SYS
0
327747
16384 ..c d/drwxrwxrwx 0
c:\/WINDOWS/DESKTOP
0
342534
214048 ..c -/-rwxrwxrwx 0
c:\/WINDOWS/SYSTEM/DSKMAINT.DLL
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
2471 ..c -/-rwxrwxrwx 0
0
2885642
c:\/PROGRA~1/ONLINE~1/AT&T/EASYBTN.GIF
1784 ..c -/-rwxrwxrwx 0
0
342880
c:\/WINDOWS/SYSTEM/TAPIEXE.EXE
2715 ..c -/-rwxrwxrwx 0
0
2885646
c:\/PROGRA~1/ONLINE~1/AT&T/RELIABTN.GIF
74331 ..c -/-rwxrwxrwx 0
0
342756
c:\/WINDOWS/SYSTEM/SB16.VXD
78848 ..c -/-rwxrwxrwx 0
0
342923
c:\/WINDOWS/SYSTEM/INLOADER.DLL
13101 ..c -/-rwxrwxrwx 0
0
328298
c:\/WINDOWS/INF/NETUB.INF
601 ..c -/-rwxrwxrwx 0
0
342951
c:\/WINDOWS/SYSTEM/NORWEG.TRN
109424 ..c -/-rwxrwxrwx 0
0
342725
c:\/WINDOWS/SYSTEM/AVIFILE.DLL
56832 ..c -/-rwxrwxrwx 0
0
342663
c:\/WINDOWS/SYSTEM/JAVART.DLL
7288 ..c -/-rwxrwxrwx 0
0
328223
c:\/WINDOWS/INF/MFOSI.INF
13912 ..c -rwxrwxrwx 0
0
545800 <part2.img_OSNET.VXD-dead-545800>
89680 ..c -/-r-xr-xr-x 0
0
765984
c:\/WINDOWS/FONTS/SSERIFF.FON
49152 ..c -/-rwxrwxrwx 0
0
342744
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/WINDOWS/SYSTEM/WINMM.DLL
16384 ..c drwxrwxrwx 0
0
1193989 <part2.img_NLINE~1-dead-1193989>
9815 ..c -rwxrwxrwx 0
0
545834 <part2.img_MD.VXD-dead-545834>
40801 ..c -/-rwxrwxrwx 0
0
327764
c:\/WINDOWS/WININIT.EXE
221696 ..c -/-rwxrwxrwx 0
0
342666
c:\/WINDOWS/SYSTEM/MSAWT.DLL
27437 ..c -/-rwxrwxrwx 0
0
328250
c:\/WINDOWS/INF/MULTILNG.INF
3104 ..c -/-rwxrwxrwx 0
0
327802
c:\/WINDOWS/TELEPHON.INI
37696 ..c -/-rwxrwxrwx 0
0
328227
c:\/WINDOWS/INF/MONITOR.INF
19488 ..c -/-rwxrwxrwx 0
0
342559
c:\/WINDOWS/SYSTEM/SYSEDIT.EXE
7632 ..c -/-rwxrwxrwx 0
0
342881
c:\/WINDOWS/SYSTEM/TAPIINI.EXE
86016 ..c -/-rwxrwxrwx 0
0
537614
c:\/PROGRA~1/NETMEE~1/OSSAPI.DLL
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
54752 ..c -/-rwxrwxrwx 0
0
342752
c:\/WINDOWS/SYSTEM/SB16SND.DRV
150528 ..c -/-rwxrwxrwx 0
0
342639
c:\/WINDOWS/SYSTEM/XFILEXR.DLL
16384 ..c d/drwxrwxrwx 0
0
1308166
c:\/WINDOWS/JAVA/TRUSTLIB
112640 ..c -/-rwxrwxrwx 0
0
342819
c:\/WINDOWS/SYSTEM/OLEDLG.DLL
13229 ..c -/-rwxrwxrwx 0
0
685589
c:\/WINDOWS/SYSTEM/IOSUBSYS/RMM.PDR
6144 ..c -/-rwxrwxrwx 0
0
342620
c:\/WINDOWS/SYSTEM/AWDCXC32.DLL
25804 ..c -/-rwxrwxrwx 0
0
328399
c:\/WINDOWS/INF/MDMRACAL.INF
65024 ..c -/-rwxrwxrwx 0
0
327697
c:\/WINDOWS/PACKAGER.EXE
14336 ..c -/-rwxrwxrwx 0
0
342973
c:\/WINDOWS/SYSTEM/Flying Windows.scr (FLYING~1.SCR)
11776 ..c -/-rwxrwxrwx 0
0
342841
c:\/WINDOWS/SYSTEM/MCIQTZ.DRV
1105 ..c -/-rwxrwxrwx 0
0
327703
c:\/WINDOWS/ASPI2HLP.SYS
88385 ..c -/-rwxrwxrwx 0
0
368174
c:\/WINDOWS/HELP/NETWORK.HLP
461 ..c -/-rwxrwxrwx 0
0
2257929
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/WINDOWS/SHELLNEW/PRESENTA.SHW
63499 ..c -/-r-xr-xr-x 0
0
28
c:\/DETLOG.OLD
0
545799
106867 ..c -/-rwxrwxrwx 0
c:\/WINDOWS/SYSTEM/VMM32/_OSMGR.VXD (deleted)
0
342926
82112 ..c -/-rwxrwxrwx 0
c:\/WINDOWS/SYSTEM/MSRATING.DLL
0
342798
9826 ..c -/-rwxrwxrwx 0
c:\/WINDOWS/SYSTEM/CP_850.NLS
0
342803
57328 ..c -/-rwxrwxrwx 0
c:\/WINDOWS/SYSTEM/OLE2CONV.DLL
0
342869
125408 ..c -/-rwxrwxrwx 0
c:\/WINDOWS/SYSTEM/SHELL.DLL
0
328265
10267 ..c -/-rwxrwxrwx 0
c:\/WINDOWS/INF/NETDEF.INF
0
342800
34676 ..c -/-rwxrwxrwx 0
c:\/WINDOWS/SYSTEM/UNICODE.NLS
0
328437
9166 ..c -/-rwxrwxrwx 0
c:\/WINDOWS/INF/MDMZYXEL.INF
0
342784
10752 ..c -/-rwxrwxrwx 0
c:\/WINDOWS/SYSTEM/MSIPRT.DLL
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
77080 ..c -/-rwxrwxrwx 0
0
765969
c:\/WINDOWS/FONTS/TIMESBI.TTF
32256 ..c -/-rwxrwxrwx 0
0
1225221
c:\/PROGRA~1/ICW-IN~1/ICWDL.DLL
19968 ..c -/-rwxrwxrwx 0
0
342580
c:\/WINDOWS/SYSTEM/SERENUM.VXD
79672 ..c -/-rwxrwxrwx 0
0
765970
c:\/WINDOWS/FONTS/TIMESI.TTF
54992 ..c -/-rwxrwxrwx 0
0
327783
c:\/WINDOWS/NETDDE.EXE
449296 ..c -/-rwxrwxrwx 0
0
342933
c:\/WINDOWS/SYSTEM/SHDOCVW.DLL
16432 ..c -/-rwxrwxrwx 0
0
342594
c:\/WINDOWS/SYSTEM/SYSTHUNK.DLL
26 ..c -/-rwxrwxrwx 0
0
327803
c:\/WINDOWS/MSOFFICE.INI
31232 ..c -/-rwxrwxrwx 0
0
327772
c:\/WINDOWS/GRPCONV.EXE
15275 ..c -/-rwxrwxrwx 0
0
328411
c:\/WINDOWS/INF/MDMSUPRA.INF
24466 ..c -/-rwxrwxrwx 0
0
368204
c:\/WINDOWS/HELP/PROGMAN.HLP
312208 ..c -/-rwxrwxrwx 0
0
342601
c:\/WINDOWS/SYSTEM/GDI.EXE
8651 ..c -/-rwxrwxrwx 0
0
368157
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/WINDOWS/HELP/AUDIOCDC.HLP
4039 ..c -/-rwxrwxrwx 0
0
328272
c:\/WINDOWS/INF/NETGEN.INF
32206 ..c -/-rwxrwxrwx 0
0
328344
c:\/WINDOWS/INF/MDMDYNA.INF
29298 ..c -/-rwxrwxrwx 0
0
328324
c:\/WINDOWS/INF/MDMARN.INF
21975 ..c -/-rwxrwxrwx 0
0
343576
c:\/WINDOWS/COMMAND/DISKCOPY.COM
6675 ..c -/-rwxrwxrwx 0
0
368210
c:\/WINDOWS/HELP/MAILNEWS.CNT
86464 ..c -/-rwxrwxrwx 0
0
342676
c:\/WINDOWS/SYSTEM/PLUGIN.OCX
25304 ..c -/-rwxrwxrwx 0
0
328335
c:\/WINDOWS/INF/MDMCOMMU.INF
23916 ..c -/-rwxrwxrwx 0
0
328436
c:\/WINDOWS/INF/MDMZYP.INF
10891 ..c -/-rwxrwxrwx 0
0
328384
c:\/WINDOWS/INF/MDMNEUHS.INF
82944 ..c -/-rwxrwxrwx 0
0
342812
c:\/WINDOWS/SYSTEM/OLECLI.DLL
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
173 ..c -/-rwxrwxrwx 0
0
368211
c:\/WINDOWS/HELP/MSNAUTH.CNT
135876 ..c -/-rwxrwxrwx 0
0
1687560
c:\/WINDOWS/MEDIA/The Microsoft Sound.wav (THEMIC~1.WAV)
33272 ..c -/-rwxrwxrwx 0
0
342876
c:\/WINDOWS/SYSTEM/TELEPHON.CP$
1148176 ..c -/-rwxrwxrwx 0
0
342617
c:\/WINDOWS/SYSTEM/MAILNEWS.DLL
133392 ..c -/-rwxrwxrwx 0
0
342556
c:\/WINDOWS/SYSTEM/MFCO30.DLL
71168 ..c -/-rwxrwxrwx 0
0
342929
c:\/WINDOWS/SYSTEM/RA3228_8.DLL
16384 ..c d/drwxrwxrwx 0
0
2461702
c:\/PROGRA~1/ONLINE~1/_OMPUS~1 (deleted)
15804 ..c -/-rwxrwxrwx 0
0
342759
c:\/WINDOWS/SYSTEM/MSMOUSE.VXD
6656 ..c -/-rwxrwxrwx 0
0
342901
c:\/WINDOWS/SYSTEM/NETBIOS.DLL
3158 ..c -/-rwxrwxrwx 0
0
537606
c:\/PROGRA~1/NETMEE~1/OBSCURE.BMP
23 ..c -/-rwxrwxrwx 0
0
2885659
c:\/PROGRA~1/ONLINE~1/AT&T/CANCEL.INS
940 ..c -/-rwxrwxrwx 0
0
368138
c:\/WINDOWS/HELP/PACKAGER.CNT
23110 ..c -/-rwxrwxrwx 0
0
328433
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/WINDOWS/INF/MDMWOER.INF
88064 ..c -/-rwxrwxrwx 0
0
342724
c:\/WINDOWS/SYSTEM/AVIFIL32.DLL
12336 ..c -/-rwxrwxrwx 0
0
342939
c:\/WINDOWS/SYSTEM/TAMAUDIO.DRV
57012 ..c -/-rwxrwxrwx 0
0
765997
c:\/WINDOWS/FONTS/VERDANAI.TTF
53438 ..c -rwxrwxrwx 0
0
545829 <part2.img_COND.VXD-dead-545829>
1860 ..c -/-rwxrwxrwx 0
0
328214
c:\/WINDOWS/INF/INETMAIL.INF
10026 ..c -/-rwxrwxrwx 0
0
537623
c:\/PROGRA~1/NETMEE~1/RINGIN.WAV
544 ..c -/-rwxrwxrwx 0
0
368179
c:\/WINDOWS/HELP/REGEDIT.CNT
44544 ..c -/-rwxrwxrwx 0
0
342626
c:\/WINDOWS/SYSTEM/JPEG2X32.DLL
52720 ..c -/-rwxrwxrwx 0
0
765995
c:\/WINDOWS/FONTS/VERDANA.TTF
16714 ..c -/-rwxrwxrwx 0
0
328368
c:\/WINDOWS/INF/MDMKORTX.INF
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
30016 ..c -/-rwxrwxrwx 0
0
342539
c:\/WINDOWS/SYSTEM/MSTCP.DLL
5584 ..c -/-rwxrwxrwx 0
0
342732
c:\/WINDOWS/SYSTEM/MCIOLE.DLL
57629 ..c -/-rwxrwxrwx 0
0
328310
c:\/WINDOWS/INF/SETUPC.INF
135 ..c -/-rwxrwxrwx 0
0
368163
c:\/WINDOWS/HELP/PINGNUM.BAT
16384 ..c d/drwxrwxrwx 0
0
2461703
c:\/PROGRA~1/ONLINE~1/AT&T
11040 ..c -/-rwxrwxrwx 0
0
537633
c:\/PROGRA~1/NETMEE~1/MNMGDC_.DLL
12865 ..c -/-rwxrwxrwx 0
0
328325
c:\/WINDOWS/INF/MDMATI.INF
24576 ..c -/-rwxrwxrwx 0
0
342865
c:\/WINDOWS/SYSTEM/SHSCRAP.DLL
23664 ..c -/-rwxrwxrwx 0
0
328347
c:\/WINDOWS/INF/MDMELSA.INF
6144 ..c -/-rwxrwxrwx 0
0
342576
c:\/WINDOWS/SYSTEM/UMDM32.DLL
168304 ..c -/-rwxrwxrwx 0
0
342873
c:\/WINDOWS/SYSTEM/3D Pipes.scr (3DPIPE~1.SCR)
11264 ..c -/-rwxrwxrwx 0
0
342850
c:\/WINDOWS/SYSTEM/RUNONCE.EXE
51699 ..c -/-rwxrwxrwx 0
0
328199
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/WINDOWS/INF/APPLETS.INF
17920 ..c -/-rwxrwxrwx 0
0
537615
c:\/PROGRA~1/NETMEE~1/OSSMEM.DLL
56981 ..c -/-rwxrwxrwx 0
0
328402
c:\/WINDOWS/INF/MDMROCK2.INF
137728 ..c -/-rwxrwxrwx 0
0
342631
c:\/WINDOWS/SYSTEM/OIGFS400.DLL
21260 ..c -/-rwxrwxrwx 0
0
537622
c:\/PROGRA~1/NETMEE~1/BLIP.WAV
25092 ..c -/-rwxrwxrwx 0
0
328394
c:\/WINDOWS/INF/MDMPBIT.INF
53552 ..c -/-rwxrwxrwx 0
0
342735
c:\/WINDOWS/SYSTEM/MSACM.DLL
53248 ..c -/-rwxrwxrwx 0
0
537637
c:\/PROGRA~1/NETMEE~1/MNMNET_.DLL
328305
867 ..c -/-rwxrwxrwx 0
0
c:\/WINDOWS/INF/PCMCIAMF.INF
0
342821
113664 ..c -/-rwxrwxrwx 0
c:\/WINDOWS/SYSTEM/CONFCP.DLL
0
328255
153 ..c -/-rwxrwxrwx 0
c:\/WINDOWS/INF/NETAUXT.INF
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
94720 ..c -/-rwxrwxrwx 0
0
342688
c:\/WINDOWS/SYSTEM/DUNZIPNT.DLL
829 ..c -/-rwxrwxrwx 0
0
551945
c:\/PROGRA~1/ACCESS~1/HYPERT~1/MCI Mail.ht (MCIMAI~1.HT)
1932 ..c -/-rwxrwxrwx 0
0
328443
c:\/WINDOWS/INF/WINPOPUP.INF
63116 ..c -/-rwxrwxrwx 0
0
343562
c:\/WINDOWS/COMMAND/FDISK.EXE
4096 ..c -/-rwxrwxrwx 0
0
342817
c:\/WINDOWS/SYSTEM/MFCUIW32.DLL
5315 ..c -/-rwxrwxrwx 0
0
328224
c:\/WINDOWS/INF/MIDI.INF
4111 ..c -/-rwxrwxrwx 0
0
327729
c:\/WINDOWS/MSN.TXT
258048 ..c -/-rwxrwxrwx 0
0
1243653
c:\/PROGRA~1/THEMIC~1/MSNSIG13.EXE
15376 ..c -/-rwxrwxrwx 0
0
537625
c:\/PROGRA~1/NETMEE~1/MNMAL_.DLL
9216 ..c -/-rwxrwxrwx 0
0
342694
c:\/WINDOWS/SYSTEM/MOSMISC.DLL
22016 ..c -/-rwxrwxrwx 0
0
342653
c:\/WINDOWS/SYSTEM/ICMUI.DLL
59980 ..c -/-rwxrwxrwx 0
0
1201166
c:\/WINDOWS/SYSTEM/COLOR/MNP22G21.ICM
16384 ..c d-wx-wx-wx 0
0
537119 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
_$!$!$!$.$!$-dead-537119>
322832 ..c -/-rwxrwxrwx 0
0
342552
c:\/WINDOWS/SYSTEM/MFC30.DLL
231936 ..c -/-rwxrwxrwx 0
0
342648
c:\/WINDOWS/SYSTEM/FTSRCH.DLL
129078 ..c -/-r-xr-xr-x 0
0
11
c:\/logo.sys
(LOGO.SYS)
24030 ..c -/-rwxrwxrwx 0
0
327730
c:\/WINDOWS/NETWORK.TXT
54497 ..c -/-rwxrwxrwx 0
0
545830
c:\/WINDOWS/SYSTEM/VMM32/_WIN32.VXD (deleted)
2810 ..c -/-rwxrwxrwx 0
0
328259
c:\/WINDOWS/INF/NETCEM.INF
13536 ..c -/-rwxrwxrwx 0
0
342733
c:\/WINDOWS/SYSTEM/MMCI.DLL
18944 ..c -/-rwxrwxrwx 0
0
342835
c:\/WINDOWS/SYSTEM/WINSPOOL.DRV
228624 ..c -/-rwxrwxrwx 0
0
342917
c:\/WINDOWS/SYSTEM/HTMLEDIT.DLL
4608 ..c -/-rwxrwxrwx 0
0
537611
c:\/PROGRA~1/NETMEE~1/MCS32.DLL
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
414208 ..c -/-rwxrwxrwx 0
0
342889
c:\/WINDOWS/SYSTEM/KERNEL32.DLL
23314 ..c -/-rwxrwxrwx 0
0
328280
c:\/WINDOWS/INF/NETNOVEL.INF
47506 ..c -/-rwxrwxrwx 0
0
368180
c:\/WINDOWS/HELP/31USERS.HLP
7272 ..c -/-rwxrwxrwx 0
0
328313
c:\/WINDOWS/INF/SHELL3.INF
56039 ..c -/-rwxrwxrwx 0
0
328229
c:\/WINDOWS/INF/MONITOR3.INF
20992 ..c -/-rwxrwxrwx 0
0
342836
c:\/WINDOWS/SYSTEM/SPOOL32.EXE
37676 ..c -/-rwxrwxrwx 0
0
328350
c:\/WINDOWS/INF/MDMEXP.INF
4576 ..c -/-rwxrwxrwx 0
0
328376
c:\/WINDOWS/INF/MDMMETRI.INF
25446 ..c -/-rwxrwxrwx 0
0
328388
c:\/WINDOWS/INF/MDMNOVFX.INF
11080 ..c -/-rwxrwxrwx 0
0
328283
c:\/WINDOWS/INF/NETPCI.INF
16384 ..c d/d-wx-wx-wx 0
0
537119
c:\/PROGRA~1/_$!$!$!$.$!$ (deleted)
16384 ..c d/dr-xr-xr-x 0
0
327685 c:\/WINDOWS/INF
7885 ..c -/-rwxrwxrwx 0
0
327689
c:\/WINDOWS/NETDET.INI
Key fingerprint = AF19
2F94 998D
F8B5
06E4 A169 4E46
6160FA27
..c -/-rwxr
wxrwxFDB5
0 DE3D
0
342548
c:\/WINDOWS/SYSTEM/ENABLE3.DLL
84954 ..c -/-rwxrwxrwx 0
0
2885647
c:\/PROGRA~1/ONLINE~1/AT&T/ROADPAGE.GIF
85152 ..c -/-rwxrwxrwx 0
0
765965
c:\/WINDOWS/FONTS/COURBI.TTF
41632 ..c -/-rwxrwxrwx 0
0
342665
c:\/WINDOWS/SYSTEM/LICMGR10.DLL
965904 ..c -/-rwxrwxrwx 0
0
342737
c:\/WINDOWS/SYSTEM/MSJT3032.DLL
26584 ..c -/-rwxrwxrwx 0
0
328331
c:\/WINDOWS/INF/MDMBSCH.INF
1046 ..c -/-rwxrwxrwx 0
0
328314
c:\/WINDOWS/INF/TAPI.INF
15280 ..c -/-rwxrwxrwx 0
0
537643
c:\/PROGRA~1/NETMEE~1/MNMTDDN_.DLL
16384 ..c d/d-wx-wx-wx 0
0
537108
c:\/PROGRA~1/Accessories (ACCESS~1)
16384 ..c drwxrwxrwx 0
0
2461702 <part2.img_OMPUS~1-dead-2461702>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
68608 ..c -/-rwxrwxrwx 0
0
342788
c:\/WINDOWS/SYSTEM/ULCLIENT.DLL
26982 ..c -rwxrwxrwx 0
0
545801 <part2.img_YNAPAGE.VXD-dead-545801>
106867 ..c -rwxrwxrwx 0
0
545799 <part2.img_OSMGR.VXD-dead-545799>
22583 ..c -rwxrwxrwx 0
0
545840 <part2.img_ERF.VXD-dead-545840>
3632 ..c -/-rwxrwxrwx 0
0
327765
c:\/WINDOWS/WINVER.EXE
22016 ..c -/-rwxrwxrwx 0
0
342748
c:\/WINDOWS/SYSTEM/MCIWAVE.DRV
16384 ..c -/-rwxrwxrwx 0
0
342856
c:\/WINDOWS/SYSTEM/DISKCOPY.DLL
23956 ..c -/-rwxrwxrwx 0
0
545826
c:\/WINDOWS/SYSTEM/VMM32/_CD.VXD (deleted)
68096 ..c -/-r-xr-xr-x 0
0
1243668
c:\/PROGRA~1/THEMIC~1/ENGCT.EXE
24220 ..c -/-rwxrwxrwx 0
0
328359
c:\/WINDOWS/INF/MDMHANDY.INF
31120 ..c -/-rwxrwxrwx 0
0
342801
c:\/WINDOWS/SYSTEM/COMPOBJ.DLL
126944 ..c -/-rwxrwxrwx 0
0
342602
c:\/WINDOWS/SYSTEM/KRNL386.EXE
9056 ..c -/-rwxrwxrwx 0
0
342714
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/WINDOWS/SYSTEM/WFM0203.ACV
32256 ..c -/-r-xr-xr-x 0
0
551437
c:\/PROGRA~1/ACCESS~1/mspcx32.dll (MSPCX32.DLL)
7315 ..c -/-rwxrwxrwx 0
0
368206
c:\/WINDOWS/HELP/TELEPHON.HLP
10240 ..c -/-rwxrwxrwx 0
0
342959
c:\/WINDOWS/SYSTEM/VVEXE32.EXE
1009600 ..c -/-rwxrwxrwx 0
0
1306636
c:\/PROGRA~1/INTERN~1/SWINST4.EXE
10471 ..c -/-rwxrwxrwx 0
0
343574
c:\/WINDOWS/COMMAND/MORE.COM
18576 ..c -/-rwxrwxrwx 0
0
342726
c:\/WINDOWS/SYSTEM/CSPMAN.DLL
2191 ..c -/-rwxrwxrwx 0
0
328202
c:\/WINDOWS/INF/AWUPD.INF
20554 ..c -/-rwxrwxrwx 0
0
343566
c:\/WINDOWS/COMMAND/DEBUG.EXE
4152 ..c -/-rwxrwxrwx 0
0
328256
c:\/WINDOWS/INF/NETBW.INF
37440 ..c -/-rwxrwxrwx 0
0
342679
c:\/WINDOWS/SYSTEM/ACTXPRXY.DLL
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
3536 ..c -/-rwxrwxrwx 0
0
342563
c:\/WINDOWS/SYSTEM/WINASPI.DLL
17993 ..c -rwxrwxrwx 0
0
545802 <part2.img_BIOS.VXD-dead-545802>
23174 ..c -/-rwxrwxrwx 0
0
328431
c:\/WINDOWS/INF/MDMVDOT.INF
116192 ..c -/-rwxrwxrwx 0
0
342669
c:\/WINDOWS/SYSTEM/RAOCX32.DLL
3345947
Sun Mar 21 1993 23:00:00 24576 m.. -/-rwxrwxrwx 0
0
c:\/WINDOWS/SYSTEM/MVTITLE2.DLL
19968 m.. -/-rwxrwxrwx 0
0
3345937
c:\/WINDOWS/SYSTEM/MVBRKR2.DLL
12288 m.. -/-rwxrwxrwx 0
0
3345935
c:\/WINDOWS/SYSTEM/MVAPI2.DLL
138864 m.. -/-rwxrwxrwx 0
0
3345936
c:\/WINDOWS/SYSTEM/MVBMP2.DLL
93184 m.. -/-rwxrwxrwx 0
0
3345943
c:\/WINDOWS/SYSTEM/MVMCI2.DLL
52224 m.. -/-rwxrwxrwx 0
0
3345939
c:\/WINDOWS/SYSTEM/MVFS2.DLL
53760 m.. -/-rwxrwxrwx 0
0
3345945
c:\/WINDOWS/SYSTEM/MVSRCH2.DLL
3345941
Wed Sep 22 1993 00:00:00 160768 m.. -/-rwxrwxrwx 0
0
c:\/WINDOWS/SYSTEM/MVFTSUI2.DLL
286768 m.. -/-rwxrwxrwx 0
0
327915
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/WINDOWS/MVIEWER2.EXE
3633178
Wed Jun 08 1994 00:00:00 11582 m.. -/-rwxrwxrwx 0
0
c:\/PROGRA~1/MAXIS/SIMCIT~1/BITMAPS/PAL_STTC.BMP
1910 m.. -/-rwxrwxrwx 0
0
3633176
c:\/PROGRA~1/MAXIS/SIMCIT~1/BITMAPS/PAL_MAC.BMP
11582 m.. -/-rwxrwxrwx 0
0
3633177
c:\/PROGRA~1/MAXIS/SIMCIT~1/BITMAPS/PAL_MSTR.BMP
11582 m.. -/-rwxrwxrwx 0
0
3633175
c:\/PROGRA~1/MAXIS/SIMCIT~1/BITMAPS/PAL_LOAD.BMP
3633174
Mon Jun 20 1994 00:00:00 58422 m.. -/-rwxrwxrwx 0
0
c:\/PROGRA~1/MAXIS/SIMCIT~1/BITMAPS/NEIGHBOR.BMP
Thu Jul 14 1994 00:00:00 1398 m.. -/-rwxrwxrwx 0
0
3633172
c:\/PROGRA~1/MAXIS/SIMCIT~1/BITMAPS/ADVISBTN.BMP
2358 m.. -/-rwxrwxrwx 0
0
3633173
c:\/PROGRA~1/MAXIS/SIMCIT~1/BITMAPS/BOOKBTN.BMP
Wed Jul 20 1994 00:00:00 681180 m.. -/-rwxrwxrwx 0
0
3734535
c:\/PROGRA~1/MAXIS/SIMCIT~1/DATA/LARGE.DAT
246572 m.. -/-rwxrwxrwx 0
0
3734536
c:\/PROGRA~1/MAXIS/SIMCIT~1/DATA/SMALLMED.DAT
50376 m.. -/-rwxrwxrwx 0
0
3734537
c:\/PROGRA~1/MAXIS/SIMCIT~1/DATA/SPECIAL.DAT
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Fri Jul 22 1994 00:00:00 7614 m.. -/-rwxrwxrwx 0
0
3633180
c:\/PROGRA~1/MAXIS/SIMCIT~1/BITMAPS/TERRAIN.BMP
Tue Aug 09 1994 11:56:00 44464 m.. -/-rwxrwxrwx 0
0
3427335
c:\/PROGRA~1/MAXIS/SIMCIT~1/D2HTOOLS.DLL
3680796
Thu Aug 11 1994 00:00:00 12738 m.. -/-rwxrwxrwx 0
0
c:\/PROGRA~1/MAXIS/SIMCIT~1/SOUNDS/504.WAV
26944 m.. -/-rwxrwxrwx 0
0
3680810
c:\/PROGRA~1/MAXIS/SIMCIT~1/SOUNDS/518.WAV
27202 m.. -/-rwxrwxrwx 0
0
3680812
c:\/PROGRA~1/MAXIS/SIMCIT~1/SOUNDS/520.WAV
25776 m.. -/-rwxrwxrwx 0
0
3680816
c:\/PROGRA~1/MAXIS/SIMCIT~1/SOUNDS/524.WAV
16366 m.. -/-rwxrwxrwx 0
0
3680794
c:\/PROGRA~1/MAXIS/SIMCIT~1/SOUNDS/502.WAV
13480 m.. -/-rwxrwxrwx 0
0
3680809
c:\/PROGRA~1/MAXIS/SIMCIT~1/SOUNDS/517.WAV
12836 m.. -/-rwxrwxrwx 0
0
3680817
c:\/PROGRA~1/MAXIS/SIMCIT~1/SOUNDS/525.WAV
10696 m.. -/-rwxrwxrwx 0
0
3680813
c:\/PROGRA~1/MAXIS/SIMCIT~1/SOUNDS/521.WAV
16656 m.. -/-rwxrwxrwx 0
0
3680801
c:\/PROGRA~1/MAXIS/SIMCIT~1/SOUNDS/509.WAV
16640 m.. -/-rwxrwxrwx 0
0
3680800
c:\/PROGRA~1/MAXIS/SIMCIT~1/SOUNDS/508.WAV
11720 m.. -/-rwxrwxrwx 0
0
3680798
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
c:\/PROGRA~1/MAXIS/SIMCIT~1/SOUNDS/506.WAV 06E4 A169 4E46
9780 m.. -/-rwxrwxrwx 0
0
3680803
c:\/PROGRA~1/MAXIS/SIMCIT~1/SOUNDS/511.WAV
15586 m.. -/-rwxrwxrwx 0
0
3680815
c:\/PROGRA~1/MAXIS/SIMCIT~1/SOUNDS/523.WAV
16640 m.. -/-rwxrwxrwx 0
0
3680820
c:\/PROGRA~1/MAXIS/SIMCIT~1/SOUNDS/528.WAV
21352 m.. -/-rwxrwxrwx 0
0
3680818
c:\/PROGRA~1/MAXIS/SIMCIT~1/SOUNDS/526.WAV
24956 m.. -/-rwxrwxrwx 0
0
3680802
c:\/PROGRA~1/MAXIS/SIMCIT~1/SOUNDS/510.WAV
1416 m.. -/-rwxrwxrwx 0
0
3680795
c:\/PROGRA~1/MAXIS/SIMCIT~1/SOUNDS/503.WAV
14418 m.. -/-rwxrwxrwx 0
0
3680811
c:\/PROGRA~1/MAXIS/SIMCIT~1/SOUNDS/519.WAV
1678 m.. -/-rwxrwxrwx 0
0
3680793
c:\/PROGRA~1/MAXIS/SIMCIT~1/SOUNDS/501.WAV
8614 m.. -/-rwxrwxrwx 0
0
3680808
c:\/PROGRA~1/MAXIS/SIMCIT~1/SOUNDS/516.WAV
24282 m.. -/-rwxrwxrwx 0
0
3680805
c:\/PROGRA~1/MAXIS/SIMCIT~1/SOUNDS/513.WAV
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
18268 m.. -/-rwxrwxrwx 0
0
3680799
c:\/PROGRA~1/MAXIS/SIMCIT~1/SOUNDS/507.WAV
5210 m.. -/-rwxrwxrwx 0
0
3680806
c:\/PROGRA~1/MAXIS/SIMCIT~1/SOUNDS/514.WAV
30490 m.. -/-rwxrwxrwx 0
0
3680804
c:\/PROGRA~1/MAXIS/SIMCIT~1/SOUNDS/512.WAV
2426 m.. -/-rwxrwxrwx 0
0
3680797
c:\/PROGRA~1/MAXIS/SIMCIT~1/SOUNDS/505.WAV
26006 m.. -/-rwxrwxrwx 0
0
3680819
c:\/PROGRA~1/MAXIS/SIMCIT~1/SOUNDS/527.WAV
5424 m.. -/-rwxrwxrwx 0
0
3680792
c:\/PROGRA~1/MAXIS/SIMCIT~1/SOUNDS/500.WAV
24188 m.. -/-rwxrwxrwx 0
0
3680814
c:\/PROGRA~1/MAXIS/SIMCIT~1/SOUNDS/522.WAV
6882 m.. -/-rwxrwxrwx 0
0
3680807
c:\/PROGRA~1/MAXIS/SIMCIT~1/SOUNDS/515.WAV
Mon Aug 29 1994 00:00:00 48598 m.. -/-rwxrwxrwx 0
0
3633179
c:\/PROGRA~1/MAXIS/SIMCIT~1/BITMAPS/PRESNTS.BMP
Wed Aug 31 1994 00:00:00 16678 m.. -/-rwxrwxrwx 0
0
3633165
c:\/PROGRA~1/MAXIS/SIMCIT~1/BITMAPS/406.BMP
16678 m.. -/-rwxrwxrwx 0
0
3633167
c:\/PROGRA~1/MAXIS/SIMCIT~1/BITMAPS/408.BMP
16678 m.. -/-rwxrwxrwx 0
0
3633160
c:\/PROGRA~1/MAXIS/SIMCIT~1/BITMAPS/401.BMP
16678 m.. -/-rwxrwxrwx 0
0
3633162
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
c:\/PROGRA~1/MAXIS/SIMCIT~1/BITMAPS/403.BMP 06E4 A169 4E46
16678 m.. -/-rwxrwxrwx 0
0
3633169
c:\/PROGRA~1/MAXIS/SIMCIT~1/BITMAPS/410.BMP
16678 m.. -/-rwxrwxrwx 0
0
3633168
c:\/PROGRA~1/MAXIS/SIMCIT~1/BITMAPS/409.BMP
16678 m.. -/-rwxrwxrwx 0
0
3633163
c:\/PROGRA~1/MAXIS/SIMCIT~1/BITMAPS/404.BMP
16678 m.. -/-rwxrwxrwx 0
0
3633166
c:\/PROGRA~1/MAXIS/SIMCIT~1/BITMAPS/407.BMP
16678 m.. -/-rwxrwxrwx 0
0
3633164
c:\/PROGRA~1/MAXIS/SIMCIT~1/BITMAPS/405.BMP
16678 m.. -/-rwxrwxrwx 0
0
3633159
c:\/PROGRA~1/MAXIS/SIMCIT~1/BITMAPS/400.BMP
16678 m.. -/-rwxrwxrwx 0
0
3633161
c:\/PROGRA~1/MAXIS/SIMCIT~1/BITMAPS/402.BMP
Tue Sep 06 1994 00:00:00
37 m.. -/-rwxrwxrwx 0
0
327917
c:\/WINDOWS/SIMEARTH.USR
Mon Sep 12 1994 00:00:00 35312 m.. -/-rwxrwxrwx 0
0
3345934
c:\/WINDOWS/SYSTEM/DUNZIP.DLL
Fri Sep 16 1994 00:00:00 20976 m.. -/-rwxrwxrwx 0
0
3345933
c:\/WINDOWS/SYSTEM/CTL3D.DLL
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Fri Oct 21 1994 00:00:00 6802 m.. -/-rwxrwxrwx 0
0
3633157
c:\/PROGRA~1/MAXIS/SIMCIT~1/BITMAPS/128.BMP
Thu Oct 27 1994 00:00:00 312774 m.. -/-rwxrwxrwx 0
0
3633181
c:\/PROGRA~1/MAXIS/SIMCIT~1/BITMAPS/TITLESCR.BMP
17774 m.. -/-rwxrwxrwx 0
0
3680821
c:\/PROGRA~1/MAXIS/SIMCIT~1/SOUNDS/529.WAV
Fri Oct 28 1994 00:00:00 144598 m.. -/-rwxrwxrwx 0
0
3633171
c:\/PROGRA~1/MAXIS/SIMCIT~1/BITMAPS/ABOUT.BMP
Sat Oct 29 1994 00:00:00 18638 m.. -/-rwxrwxrwx 0
0
3680791
c:\/PROGRA~1/MAXIS/SIMCIT~1/SOUNDS/10018.MID
2910 m.. -/-rwxrwxrwx 0
0
3680783
c:\/PROGRA~1/MAXIS/SIMCIT~1/SOUNDS/10010.MID
3956 m.. -/-rwxrwxrwx 0
0
3680790
c:\/PROGRA~1/MAXIS/SIMCIT~1/SOUNDS/10017.MID
2196 m.. -/-rwxrwxrwx 0
0
3680782
c:\/PROGRA~1/MAXIS/SIMCIT~1/SOUNDS/10009.MID
3192 m.. -/-rwxrwxrwx 0
0
3680787
c:\/PROGRA~1/MAXIS/SIMCIT~1/SOUNDS/10014.MID
9991 m.. -/-rwxrwxrwx 0
0
3680777
c:\/PROGRA~1/MAXIS/SIMCIT~1/SOUNDS/10004.MID
1632 m.. -/-rwxrwxrwx 0
0
3680778
c:\/PROGRA~1/MAXIS/SIMCIT~1/SOUNDS/10005.MID
1171 m.. -/-rwxrwxrwx 0
0
3680775
c:\/PROGRA~1/MAXIS/SIMCIT~1/SOUNDS/10002.MID
12114 m.. -/-rwxrwxrwx 0
0
3680781
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
c:\/PROGRA~1/MAXIS/SIMCIT~1/SOUNDS/10008.MID 06E4 A169 4E46
2870 m.. -/-rwxrwxrwx 0
0
3680779
c:\/PROGRA~1/MAXIS/SIMCIT~1/SOUNDS/10006.MID
12349 m.. -/-rwxrwxrwx 0
0
3680780
c:\/PROGRA~1/MAXIS/SIMCIT~1/SOUNDS/10007.MID
10372 m.. -/-rwxrwxrwx 0
0
3680784
c:\/PROGRA~1/MAXIS/SIMCIT~1/SOUNDS/10011.MID
4569 m.. -/-rwxrwxrwx 0
0
3680786
c:\/PROGRA~1/MAXIS/SIMCIT~1/SOUNDS/10013.MID
4963 m.. -/-rwxrwxrwx 0
0
3680773
c:\/PROGRA~1/MAXIS/SIMCIT~1/SOUNDS/10000.MID
1641 m.. -/-rwxrwxrwx 0
0
3680789
c:\/PROGRA~1/MAXIS/SIMCIT~1/SOUNDS/10016.MID
2800 m.. -/-rwxrwxrwx 0
0
3680822
c:\/PROGRA~1/MAXIS/SIMCIT~1/SOUNDS/530.WAV
1162 m.. -/-rwxrwxrwx 0
0
3680788
c:\/PROGRA~1/MAXIS/SIMCIT~1/SOUNDS/10015.MID
9393 m.. -/-rwxrwxrwx 0
0
3680774
c:\/PROGRA~1/MAXIS/SIMCIT~1/SOUNDS/10001.MID
3847 m.. -/-rwxrwxrwx 0
0
3680776
c:\/PROGRA~1/MAXIS/SIMCIT~1/SOUNDS/10003.MID
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
7857 m.. -/-rwxrwxrwx 0
0
3680785
c:\/PROGRA~1/MAXIS/SIMCIT~1/SOUNDS/10012.MID
Sun Nov 13 1994 23:00:00 16678 m.. -/-rwxrwxrwx 0
0
3633170
c:\/PROGRA~1/MAXIS/SIMCIT~1/BITMAPS/411.BMP
Fri Dec 16 1994 05:00:00 81825 m.. -/-rwxrwxrwx 0
0
6729743
c:\/PROGRA~1/MAXIS/SIMCIT~1/SCENARIO/MALIBU.SCN
38087 m.. -/-rwxrwxrwx 0
0
8877602
c:\/PROGRA~1/MAXIS/SIMCIT~1/SCURKART/SAMPLE2.PCX
27663 m.. -/-rwxrwxrwx 0
0
8877601
c:\/PROGRA~1/MAXIS/SIMCIT~1/SCURKART/SAMPLE1.PCX
119270 m.. -/-rwxrwxrwx 0
0
6729740
c:\/PROGRA~1/MAXIS/SIMCIT~1/SCENARIO/HOLLYWOO.SCN
127176 m.. -/-rwxrwxrwx 0
0
6729742
c:\/PROGRA~1/MAXIS/SIMCIT~1/SCENARIO/LASVEGAS.SCN
122758 m.. -/-rwxrwxrwx 0
0
6729739
c:\/PROGRA~1/MAXIS/SIMCIT~1/SCENARIO/FLINT.SCN
66520 m.. -/-rwxrwxrwx 0
0
6729738
c:\/PROGRA~1/MAXIS/SIMCIT~1/SCENARIO/DULLSVIL.SCN
132529 m.. -/-rwxrwxrwx 0
0
6729733
c:\/PROGRA~1/MAXIS/SIMCIT~1/SCENARIO/ATLANTA.SCN
123991 m.. -/-rwxrwxrwx 0
0
6729749
c:\/PROGRA~1/MAXIS/SIMCIT~1/SCENARIO/SILICONV.SCN
113404 m.. -/-rwxrwxrwx 0
0
6729737
c:\/PROGRA~1/MAXIS/SIMCIT~1/SCENARIO/DAVENPOR.SCN
104585 m.. -/-rwxrwxrwx 0
0
6729741
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/PROGRA~1/MAXIS/SIMCIT~1/SCENARIO/HOMESTEA.SCN
124781 m.. -/-rwxrwxrwx 0
0
6729747
c:\/PROGRA~1/MAXIS/SIMCIT~1/SCENARIO/PORTLAND.SCN
112508 m.. -/-rwxrwxrwx 0
0
6729745
c:\/PROGRA~1/MAXIS/SIMCIT~1/SCENARIO/OAKLAND.SCN
110994 m.. -/-rwxrwxrwx 0
0
6729744
c:\/PROGRA~1/MAXIS/SIMCIT~1/SCENARIO/MANHATTA.SCN
118084 m.. -/-rwxrwxrwx 0
0
6729750
c:\/PROGRA~1/MAXIS/SIMCIT~1/SCENARIO/WASHINGT.SCN
122210 m.. -/-rwxrwxrwx 0
0
3794470
c:\/PROGRA~1/MAXIS/SIMCIT~1/CITIES/LASVEGAS.SC2
91003 m.. -/-rwxrwxrwx 0
0
6729735
c:\/PROGRA~1/MAXIS/SIMCIT~1/SCENARIO/CHARLEST.SCN
97989 m.. -/-rwxrwxrwx 0
0
6729748
c:\/PROGRA~1/MAXIS/SIMCIT~1/SCENARIO/SANFRANC.SCN
117015 m.. -/-rwxrwxrwx 0
0
6729736
c:\/PROGRA~1/MAXIS/SIMCIT~1/SCENARIO/CHICAGO.SCN
3734533
Mon Jan 30 1995 23:00:00 160547 m.. -/-rwxrwxrwx 0
0
c:\/PROGRA~1/MAXIS/SIMCIT~1/DATA/DATA_USA.DAT
48 m.. -/-rwxrwxrwx 0
0
3734534
c:\/PROGRA~1/MAXIS/SIMCIT~1/DATA/DATA_USA.IDX
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Mon Feb 20 1995 23:00:00 27136 m.. -/-rwxrwxrwx 0
0
3345949
c:\/WINDOWS/SYSTEM/VERMONT1.DLL
Thu Mar 02 1995 14:21:08 45129 m.. -/-rwxrwxrwx 0
0
3427336
c:\/PROGRA~1/MAXIS/SIMCIT~1/DEFAULT.SC2
Tue Mar 07 1995 23:00:00 681044 m.. -/-rwxrwxrwx 0
0
8877587
c:\/PROGRA~1/MAXIS/SIMCIT~1/SCURKART/FUTURE.MIF
649708 m.. -/-rwxrwxrwx 0
0
8877595
c:\/PROGRA~1/MAXIS/SIMCIT~1/SCURKART/ORIGINAL.MIF
Sat Mar 11 1995 19:47:04 951400 m.. -/-rwxrwxrwx 0
0
3427345
c:\/PROGRA~1/MAXIS/SIMCIT~1/TILES.DB
Wed Mar 15 1995 15:48:50 120088 m.. -/-rwxrwxrwx 0
0
6729746
c:\/PROGRA~1/MAXIS/SIMCIT~1/SCENARIO/PARIS.SCN
Wed Mar 15 1995 15:49:02 119177 m.. -/-rwxrwxrwx 0
0
6729734
c:\/PROGRA~1/MAXIS/SIMCIT~1/SCENARIO/BARCELON.SCN
Wed Mar 15 1995 16:32:38 35860 m.. -/-rwxrwxrwx 0
0
8877599
c:\/PROGRA~1/MAXIS/SIMCIT~1/SCURKART/RIO.MIF
Wed Mar 15 1995 16:37:00 25750 m.. -/-rwxrwxrwx 0
0
8877607
c:\/PROGRA~1/MAXIS/SIMCIT~1/SCURKART/TOKYO.MIF
Wed Mar 15 1995 16:39:54 24860 m.. -/-rwxrwxrwx 0
0
8877610
c:\/PROGRA~1/MAXIS/SIMCIT~1/SCURKART/VEGAS.MIF
Thu Mar 16 1995 15:36:32 81338 m.. -/-rwxrwxrwx 0
0
3794503
c:\/PROGRA~1/MAXIS/SIMCIT~1/CITIES/TOMG_C2.SC2
87771 m.. -/-rwxrwxrwx 0
0
3794493
c:\/PROGRA~1/MAXIS/SIMCIT~1/CITIES/STCHRISC.SC2
85838 m.. -/-rwxrwxrwx 0
0
3794496
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/PROGRA~1/MAXIS/SIMCIT~1/CITIES/THEBAHAM.SC2
53190 m.. -/-rwxrwxrwx 0
0
3794499
c:\/PROGRA~1/MAXIS/SIMCIT~1/CITIES/TOMG_B2.SC2
84663 m.. -/-rwxrwxrwx 0
0
3794485
c:\/PROGRA~1/MAXIS/SIMCIT~1/CITIES/RETREAT.SC2
76009 m.. -/-rwxrwxrwx 0
0
3794468
c:\/PROGRA~1/MAXIS/SIMCIT~1/CITIES/LAKELAND.SC2
86436 m.. -/-rwxrwxrwx 0
0
3794449
c:\/PROGRA~1/MAXIS/SIMCIT~1/CITIES/EGYPTFAL.SC2
67425 m.. -/-rwxrwxrwx 0
0
3794510
c:\/PROGRA~1/MAXIS/SIMCIT~1/CITIES/VOLCANO.SC2
115279 m.. -/-rwxrwxrwx 0
0
3794455
c:\/PROGRA~1/MAXIS/SIMCIT~1/CITIES/HALENAPT.SC2
59027 m.. -/-rwxrwxrwx 0
0
3794458
c:\/PROGRA~1/MAXIS/SIMCIT~1/CITIES/HAWAII.SC2
83993 m.. -/-rwxrwxrwx 0
0
3794441
c:\/PROGRA~1/MAXIS/SIMCIT~1/CITIES/BAYVIEW.SC2
113047 m.. -/-rwxrwxrwx 0
0
3794491
c:\/PROGRA~1/MAXIS/SIMCIT~1/CITIES/SPIRALOP.SC2
92768 m.. -/-rwxrwxrwx 0
0
3794508
c:\/PROGRA~1/MAXIS/SIMCIT~1/CITIES/VENICE.SC2
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
70308 m.. -/-rwxrwxrwx 0
0
3794457
c:\/PROGRA~1/MAXIS/SIMCIT~1/CITIES/HAPPYLND.SC2
19037 m.. -/-rwxrwxrwx 0
0
3794448
c:\/PROGRA~1/MAXIS/SIMCIT~1/CITIES/CITIES.WRI
89152 m.. -/-rwxrwxrwx 0
0
3794504
c:\/PROGRA~1/MAXIS/SIMCIT~1/CITIES/TOMG_C3.SC2
104973 m.. -/-rwxrwxrwx 0
0
3794487
c:\/PROGRA~1/MAXIS/SIMCIT~1/CITIES/RIVER5.SC2
53844 m.. -/-rwxrwxrwx 0
0
3794475
c:\/PROGRA~1/MAXIS/SIMCIT~1/CITIES/MAXISLND.SC2
109548 m.. -/-rwxrwxrwx 0
0
3794446
c:\/PROGRA~1/MAXIS/SIMCIT~1/CITIES/CENTERVL.SC2
62339 m.. -/-rwxrwxrwx 0
0
3794501
c:\/PROGRA~1/MAXIS/SIMCIT~1/CITIES/TOMG_B4.SC2
75869 m.. -/-rwxrwxrwx 0
0
3794476
c:\/PROGRA~1/MAXIS/SIMCIT~1/CITIES/MUNS_ISL.SC2
106838 m.. -/-rwxrwxrwx 0
0
3794450
c:\/PROGRA~1/MAXIS/SIMCIT~1/CITIES/EM.SC2
56922 m.. -/-rwxrwxrwx 0
0
3794498
c:\/PROGRA~1/MAXIS/SIMCIT~1/CITIES/TOMG_B1.SC2
109346 m.. -/-rwxrwxrwx 0
0
3794478
c:\/PROGRA~1/MAXIS/SIMCIT~1/CITIES/NEWMONRO.SC2
72797 m.. -/-rwxrwxrwx 0
0
3794481
c:\/PROGRA~1/MAXIS/SIMCIT~1/CITIES/PARADE.SC2
92738 m.. -/-rwxrwxrwx 0
0
3794444
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
c:\/PROGRA~1/MAXIS/SIMCIT~1/CITIES/CAPE.SC2 06E4 A169 4E46
92852 m.. -/-rwxrwxrwx 0
0
3794480
c:\/PROGRA~1/MAXIS/SIMCIT~1/CITIES/NYC.SC2
108707 m.. -/-rwxrwxrwx 0
0
3794447
c:\/PROGRA~1/MAXIS/SIMCIT~1/CITIES/CERES.SC2
124705 m.. -/-rwxrwxrwx 0
0
3794473
c:\/PROGRA~1/MAXIS/SIMCIT~1/CITIES/LONDON.SC2
120231 m.. -/-rwxrwxrwx 0
0
3794497
c:\/PROGRA~1/MAXIS/SIMCIT~1/CITIES/TOKYO.SC2
98563 m.. -/-rwxrwxrwx 0
0
3794505
c:\/PROGRA~1/MAXIS/SIMCIT~1/CITIES/TOMG_C4.SC2
55787 m.. -/-rwxrwxrwx 0
0
3794459
c:\/PROGRA~1/MAXIS/SIMCIT~1/CITIES/HERMAN.SC2
124494 m.. -/-rwxrwxrwx 0
0
3794495
c:\/PROGRA~1/MAXIS/SIMCIT~1/CITIES/SYMCITY.SC2
73004 m.. -/-rwxrwxrwx 0
0
3794502
c:\/PROGRA~1/MAXIS/SIMCIT~1/CITIES/TOMG_C1.SC2
57224 m.. -/-rwxrwxrwx 0
0
3794500
c:\/PROGRA~1/MAXIS/SIMCIT~1/CITIES/TOMG_B3.SC2
111880 m.. -/-rwxrwxrwx 0
0
3794462
c:\/PROGRA~1/MAXIS/SIMCIT~1/CITIES/HI_LOH2O.SC2
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
114671 m.. -/-rwxrwxrwx 0
0
3794453
c:\/PROGRA~1/MAXIS/SIMCIT~1/CITIES/FOURCITI.SC2
113537 m.. -/-rwxrwxrwx 0
0
3794509
c:\/PROGRA~1/MAXIS/SIMCIT~1/CITIES/VIRTUALV.SC2
Thu Mar 16 1995 19:56:02 47290 m.. -/-rwxrwxrwx 0
0
8877576
c:\/PROGRA~1/MAXIS/SIMCIT~1/SCURKART/BARCELON.MIF
Fri Mar 17 1995 00:00:14 115258 m.. -/-rwxrwxrwx 0
0
3794482
c:\/PROGRA~1/MAXIS/SIMCIT~1/CITIES/PARIS.SC2
Fri Mar 17 1995 00:01:18 116747 m.. -/-rwxrwxrwx 0
0
3794488
c:\/PROGRA~1/MAXIS/SIMCIT~1/CITIES/ROME.SC2
Fri Mar 17 1995 00:02:20 91094 m.. -/-rwxrwxrwx 0
0
3794486
c:\/PROGRA~1/MAXIS/SIMCIT~1/CITIES/RIO.SC2
Fri Mar 17 1995 16:21:54 185820 m.. -/-rwxrwxrwx 0
0
3427340
c:\/PROGRA~1/MAXIS/SIMCIT~1/SCURK.HLP
Fri Apr 14 1995 00:00:00 188361 m.. -/-rwxrwxrwx 0
0
3345951
c:\/WINDOWS/SYSTEM/VERMONT1.HLP
Tue Jul 18 1995 14:58:06
3 m.. -rwxrwxrwx 0
0
16492550
<part2.img-_FLECOMP.TMP-dead-16492550>
3 m.. -rwxrwxrwx 0
0
16492562 <part2.img_ODEM.ID-dead-16492562>
3 m.. -rwxrwxrwx 0
0
16420907 <part2.img_HOTOSLE.GID-dead-16420907>
Thu Jul 27 1995 14:28:28 1012932 m.. -/-rwxrwxrwx 0
0
3427339
c:\/PROGRA~1/MAXIS/SIMCIT~1/SC2USA.HLP
Fri Jul 28 1995 11:33:28 165237 m.. -/-rwxrwxrwx 0
0
3427341
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
c:\/PROGRA~1/MAXIS/SIMCIT~1/SCURKUSA.DLL
Wed Aug 02 1995 04:04:10 258560 m.. -/-rwxrwxrwx 0
0
327921
c:\/WINDOWS/uninst.exe (UNINST.EXE)
Tue Aug 08 1995 14:06:56 63742 m.. -/-rwxrwxrwx 0
0
3794440
c:\/PROGRA~1/MAXIS/SIMCIT~1/CITIES/BABAR.SC2
Sun Aug 13 1995 13:02:14 36450 m.. -/-rwxrwxrwx 0
0
8877592
c:\/PROGRA~1/MAXIS/SIMCIT~1/SCURKART/LONDON.MIF
Sun Aug 13 1995 13:05:10 36174 m.. -/-rwxrwxrwx 0
0
8877596
c:\/PROGRA~1/MAXIS/SIMCIT~1/SCURKART/PARIS.MIF
Sun Aug 13 1995 13:08:06 33182 m.. -/-rwxrwxrwx 0
0
8877600
c:\/PROGRA~1/MAXIS/SIMCIT~1/SCURKART/ROME.MIF
Sun Aug 13 1995 13:11:50 35008 m.. -/-rwxrwxrwx 0
0
8877604
c:\/PROGRA~1/MAXIS/SIMCIT~1/SCURKART/SYDNEY.MIF
Sun Aug 13 1995 13:12:38 105846 m.. -/-rwxrwxrwx 0
0
3794494
c:\/PROGRA~1/MAXIS/SIMCIT~1/CITIES/SYDNEY.SC2
Sun Aug 13 1995 13:14:54 31816 m.. -/-rwxrwxrwx 0
0
8877608
c:\/PROGRA~1/MAXIS/SIMCIT~1/SCURKART/TORONTO.MIF
Sun Aug 13 1995 13:16:28 118720 m.. -/-rwxrwxrwx 0
0
3794506
c:\/PROGRA~1/MAXIS/SIMCIT~1/CITIES/TORONTO.SC2
Mon Aug 14 1995 17:22:58 1352 m.. -/-rwxrwxrwx 0
0
3734539
c:\/PROGRA~1/MAXIS/SIMCIT~1/DATA/TEXT_USA.IDX
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
47952 m.. -/-rwxrwxrwx 0
0
3734538
c:\/PROGRA~1/MAXIS/SIMCIT~1/DATA/TEXT_USA.DAT
Mon Aug 14 1995 17:32:26
78 m.. -/-rwxrwxrwx 0
0
3427346
c:\/PROGRA~1/MAXIS/SIMCIT~1/VERSION.INF
Mon Aug 14 1995 20:06:28 2557 m.. -/-rwxrwxrwx 0
0
3427344
c:\/PROGRA~1/MAXIS/SIMCIT~1/SVERSION.INF
Mon Aug 14 1995 23:36:04 2014870 m.. -/-rwxrwxrwx 0
0
3427348
c:\/PROGRA~1/MAXIS/SIMCIT~1/WINSCURK.EXE
Sat Sep 02 1995 15:57:06 269312 m.. -rwxrwxrwx 0
0
16313865
<part2.img-_NINST.728-dead-16313865>
Sun Sep 03 1995 11:10:44 3490 m.. -/-rwxrwxrwx 0
0
8877603
c:\/PROGRA~1/MAXIS/SIMCIT~1/SCURKART/SMHOUSE.PCX
Sat Sep 09 1995 05:48:12 2944 m.. -/-rwxrwxrwx 0
0
8877590
c:\/PROGRA~1/MAXIS/SIMCIT~1/SCURKART/HYDRO1.PCX
Sat Sep 09 1995 05:52:00 2977 m.. -/-rwxrwxrwx 0
0
8877591
c:\/PROGRA~1/MAXIS/SIMCIT~1/SCURKART/HYDRO2.PCX
Fri Oct 13 1995 16:49:46 111751 m.. -/-rwxrwxrwx 0
0
3794474
c:\/PROGRA~1/MAXIS/SIMCIT~1/CITIES/MALTRON.SC2
Thu Oct 19 1995 20:27:12 117250 m.. -/-rwxrwxrwx 0
0
3794466
c:\/PROGRA~1/MAXIS/SIMCIT~1/CITIES/KEENLAND.SC2
Wed Nov 01 1995 20:39:08 62010 m.. -/-rwxrwxrwx 0
0
3794437
c:\/PROGRA~1/MAXIS/SIMCIT~1/CITIES/349ARCO.SC2
Thu Nov 30 1995 17:42:52 117597 m.. -/-rwxrwxrwx 0
0
3794467
c:\/PROGRA~1/MAXIS/SIMCIT~1/CITIES/KEITH.SC2
Wed Dec 13 1995 12:22:14 25600 m.. -/-rwxrwxrwx 0
0
3345932
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
c:\/WINDOWS/SYSTEM/DVIDEO.DLL
Sat Dec 16 1995 23:36:02 60343 m.. -/-rwxrwxrwx 0
0
3794442
c:\/PROGRA~1/MAXIS/SIMCIT~1/CITIES/BIGGESTC.SC2
Fri Dec 29 1995 21:05:56 5367 m.. -/-rwxrwxrwx 0
0
8877609
c:\/PROGRA~1/MAXIS/SIMCIT~1/SCURKART/UNVIR.PCX
Mon Jan 01 1996 07:16:30 67554 m.. -/-rwxrwxrwx 0
0
3794461
c:\/PROGRA~1/MAXIS/SIMCIT~1/CITIES/HIPPIVIL.SC2
Mon Jan 01 1996 07:23:28 69497 m.. -/-rwxrwxrwx 0
0
3794479
c:\/PROGRA~1/MAXIS/SIMCIT~1/CITIES/NEWORLEA.SC2
Wed Jan 03 1996 19:43:42 74924 m.. -/-rwxrwxrwx 0
0
3794465
c:\/PROGRA~1/MAXIS/SIMCIT~1/CITIES/KATVILLE.SC2
Sat Jan 06 1996 20:35:04 70605 m.. -/-rwxrwxrwx 0
0
3794464
c:\/PROGRA~1/MAXIS/SIMCIT~1/CITIES/JUNETOWN.SC2
Sat Jan 13 1996 09:15:26 70474 m.. -/-rwxrwxrwx 0
0
3794472
c:\/PROGRA~1/MAXIS/SIMCIT~1/CITIES/LOKEVILL.SC2
Mon Jan 15 1996 16:19:04 100893 m.. -/-rwxrwxrwx 0
0
3794439
c:\/PROGRA~1/MAXIS/SIMCIT~1/CITIES/ARCOONE.SC2
Tue Jan 23 1996 19:05:24 113841 m.. -/-rwxrwxrwx 0
0
3794438
c:\/PROGRA~1/MAXIS/SIMCIT~1/CITIES/AMAZINGC.SC2
Wed Jan 24 1996 23:00:00 19040 m.. -/-rwxrwxrwx 0
0
3651093
c:\/MAXIS/EARTHWIN/VRX1.DLL
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Thu Jan 25 1996 14:20:00 27954 m.. -/-rwxrwxrwx 0
0
8877611
c:\/PROGRA~1/MAXIS/SIMCIT~1/SCURKART/VENICE.MIF
3794511
Thu Feb 01 1996 22:24:08 77507 m.. -/-rwxrwxrwx 0
0
c:\/PROGRA~1/MAXIS/SIMCIT~1/CITIES/ZUTHERLA.SC2
3794454
Fri Feb 02 1996 19:55:18 94675 m.. -/-rwxrwxrwx 0
0
c:\/PROGRA~1/MAXIS/SIMCIT~1/CITIES/GREENLAN.SC2
8877578
Mon Feb 05 1996 17:16:06 11955 m.. -/-rwxrwxrwx 0
0
c:\/PROGRA~1/MAXIS/SIMCIT~1/SCURKART/BIGBEN.PCX
8877582
Mon Feb 05 1996 19:55:14 7351 m.. -/-rwxrwxrwx 0
0
c:\/PROGRA~1/MAXIS/SIMCIT~1/SCURKART/CTYHALL.PCX
3794483
Tue Feb 06 1996 16:19:52 118373 m.. -/-rwxrwxrwx 0
0
c:\/PROGRA~1/MAXIS/SIMCIT~1/CITIES/PETER2.SC2
3794484
Tue Feb 06 1996 16:37:26 118271 m.. -/-rwxrwxrwx 0
0
c:\/PROGRA~1/MAXIS/SIMCIT~1/CITIES/PETER3.SC2
3794445
Tue Feb 06 1996 19:47:06 96757 m.. -/-rwxrwxrwx 0
0
c:\/PROGRA~1/MAXIS/SIMCIT~1/CITIES/CAPEQUES.SC2
Tue Feb 06 1996 20:03:30 123702 m.. -/-rwxrwxrwx 0
0
3794460
c:\/PROGRA~1/MAXIS/SIMCIT~1/CITIES/HILTON.SC2
Tue Feb 06 1996 20:08:26 101515 m.. -/-rwxrwxrwx 0
0
3794443
c:\/PROGRA~1/MAXIS/SIMCIT~1/CITIES/BRIDGEPO.SC2
Tue Feb 06 1996 21:28:38 116625 m.. -/-rwxrwxrwx 0
0
3794477
c:\/PROGRA~1/MAXIS/SIMCIT~1/CITIES/MXBURG.SC2
Thu Feb 08 1996 13:46:42 116886 m.. -/-rwxrwxrwx 0
0
3794507
c:\/PROGRA~1/MAXIS/SIMCIT~1/CITIES/UTOPIA.SC2
Thu Feb 08 1996 22:16:12 99650 m.. -/-rwxrwxrwx 0
0
3794452
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
c:\/PROGRA~1/MAXIS/SIMCIT~1/CITIES/FLOATING.SC2
3794469
Fri Feb 09 1996 02:35:14 100644 m.. -/-rwxrwxrwx 0
0
c:\/PROGRA~1/MAXIS/SIMCIT~1/CITIES/LAKEVIEW.SC2
Fri Feb 09 1996 21:44:14 70278 m.. -/-rwxrwxrwx 0
0
3794492
c:\/PROGRA~1/MAXIS/SIMCIT~1/CITIES/STARTER.SC2
3794463
Sun Feb 11 1996 14:30:28 78357 m.. -/-rwxrwxrwx 0
0
c:\/PROGRA~1/MAXIS/SIMCIT~1/CITIES/ISLAND.SC2
8877573
Mon Feb 12 1996 09:32:22 278372 m.. -/-rwxrwxrwx 0
0
c:\/PROGRA~1/MAXIS/SIMCIT~1/SCURKART/1900.MIF
8877574
Mon Feb 12 1996 09:32:48 510286 m.. -/-rwxrwxrwx 0
0
c:\/PROGRA~1/MAXIS/SIMCIT~1/SCURKART/2050.MIF
3633158
Wed Feb 14 1996 09:53:36 124210 m.. -/-rwxrwxrwx 0
0
c:\/PROGRA~1/MAXIS/SIMCIT~1/BITMAPS/2000WIN.BMP
Fri Feb 16 1996 09:23:24 59999 m.. -/-rwxrwxrwx 0
0
3794489
c:\/PROGRA~1/MAXIS/SIMCIT~1/CITIES/SAM_STOW.SC2
3794471
Fri Feb 16 1996 15:30:42 96717 m.. -/-rwxrwxrwx 0
0
c:\/PROGRA~1/MAXIS/SIMCIT~1/CITIES/LINCOLN.SC2
3794490
Tue Feb 20 1996 08:20:54 113661 m.. -/-rwxrwxrwx 0
0
c:\/PROGRA~1/MAXIS/SIMCIT~1/CITIES/SIMCITY.SC2
Wed Feb 21 1996 23:00:00 28801 m.. -/-rwxrwxrwx 0
0
3651080
c:\/MAXIS/EARTHWIN/INFO.EXE
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Fri Feb 23 1996 10:21:42 21928 m.. -/-rwxrwxrwx 0
0
8877575
c:\/PROGRA~1/MAXIS/SIMCIT~1/SCURKART/ARCOLB1.MIF
8877581
Fri Feb 23 1996 10:22:12 19864 m.. -/-rwxrwxrwx 0
0
c:\/PROGRA~1/MAXIS/SIMCIT~1/SCURKART/CONTEST.MIF
Fri Feb 23 1996 10:22:36 20378 m.. -/-rwxrwxrwx 0
0
8877583
c:\/PROGRA~1/MAXIS/SIMCIT~1/SCURKART/DINOPARK.MIF
Fri Feb 23 1996 10:22:58 24994 m.. -/-rwxrwxrwx 0
0
8877584
c:\/PROGRA~1/MAXIS/SIMCIT~1/SCURKART/EIFFLE.MIF
Fri Feb 23 1996 10:23:16 13766 m.. -/-rwxrwxrwx 0
0
8877585
c:\/PROGRA~1/MAXIS/SIMCIT~1/SCURKART/ELECLINE.MIF
Fri Feb 23 1996 10:23:34 20514 m.. -/-rwxrwxrwx 0
0
8877586
c:\/PROGRA~1/MAXIS/SIMCIT~1/SCURKART/FLAGCHOP.MIF
Fri Feb 23 1996 10:23:56 20888 m.. -/-rwxrwxrwx 0
0
8877588
c:\/PROGRA~1/MAXIS/SIMCIT~1/SCURKART/GOLFGOOD.MIF
Fri Feb 23 1996 10:24:14 31672 m.. -/-rwxrwxrwx 0
0
8877593
c:\/PROGRA~1/MAXIS/SIMCIT~1/SCURKART/MCONDO1.MIF
Fri Feb 23 1996 10:24:32 18616 m.. -/-rwxrwxrwx 0
0
8877594
c:\/PROGRA~1/MAXIS/SIMCIT~1/SCURKART/MCONDO2.MIF
Fri Feb 23 1996 10:24:52 18952 m.. -/-rwxrwxrwx 0
0
8877597
c:\/PROGRA~1/MAXIS/SIMCIT~1/SCURKART/POLICE2.MIF
Fri Feb 23 1996 10:25:10 14118 m.. -/-rwxrwxrwx 0
0
8877598
c:\/PROGRA~1/MAXIS/SIMCIT~1/SCURKART/PWRTREE.MIF
Fri Feb 23 1996 10:25:28 23212 m.. -/-rwxrwxrwx 0
0
8877605
c:\/PROGRA~1/MAXIS/SIMCIT~1/SCURKART/THINGIG.MIF
Fri Feb 23 1996 11:07:12 27646 m.. -/-rwxrwxrwx 0
0
8877577
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
c:\/PROGRA~1/MAXIS/SIMCIT~1/SCURKART/BIGBEN.MIF
Fri Feb 23 1996 11:07:36 20224 m.. -/-rwxrwxrwx 0
0
8877579
c:\/PROGRA~1/MAXIS/SIMCIT~1/SCURKART/CITYHAL.MIF
Fri Feb 23 1996 11:08:02 20690 m.. -/-rwxrwxrwx 0
0
8877580
c:\/PROGRA~1/MAXIS/SIMCIT~1/SCURKART/COLLEGE.MIF
8877589
Fri Feb 23 1996 11:08:24 15410 m.. -/-rwxrwxrwx 0
0
c:\/PROGRA~1/MAXIS/SIMCIT~1/SCURKART/HYDRO.MIF
3794451
Fri Feb 23 1996 14:41:04 105614 m.. -/-rwxrwxrwx 0
0
c:\/PROGRA~1/MAXIS/SIMCIT~1/CITIES/FLARANGE.SC2
Mon Feb 26 1996 15:43:20 91292 m.. -/-rwxrwxrwx 0
0
3794456
c:\/PROGRA~1/MAXIS/SIMCIT~1/CITIES/HAPPYGUY.SC2
8877606
Mon Feb 26 1996 16:41:18 713012 m.. -/-rwxrwxrwx 0
0
c:\/PROGRA~1/MAXIS/SIMCIT~1/SCURKART/TILESET1.MIF
3651089
Mon Feb 26 1996 23:00:00 107520 m.. -/-rwxrwxrwx 0
0
c:\/MAXIS/EARTHWIN/SIMEARTH.DLL
3427342
Tue Feb 27 1996 20:17:18 60928 m.. -/-rwxrwxrwx 0
0
c:\/PROGRA~1/MAXIS/SIMCIT~1/SMACKW32.DLL
3633190
Wed Mar 06 1996 08:22:06 6118 m.. -/-rwxrwxrwx 0
0
c:\/PROGRA~1/MAXIS/SIMCIT~1/BITMAPS/WILL4D.BMP
6118 m.. -/-rwxrwxrwx 0
0
3633185
c:\/PROGRA~1/MAXIS/SIMCIT~1/BITMAPS/WILL1U.BMP
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
6118 m.. -/-rwxrwxrwx 0
0
3633184
c:\/PROGRA~1/MAXIS/SIMCIT~1/BITMAPS/WILL1D.BMP
10878 m.. -/-rwxrwxrwx 0
0
3633183
c:\/PROGRA~1/MAXIS/SIMCIT~1/BITMAPS/WILL0U.BMP
6118 m.. -/-rwxrwxrwx 0
0
3633189
c:\/PROGRA~1/MAXIS/SIMCIT~1/BITMAPS/WILL3U.BMP
10878 m.. -/-rwxrwxrwx 0
0
3633182
c:\/PROGRA~1/MAXIS/SIMCIT~1/BITMAPS/WILL0D.BMP
6118 m.. -/-rwxrwxrwx 0
0
3633187
c:\/PROGRA~1/MAXIS/SIMCIT~1/BITMAPS/WILL2U.BMP
6118 m.. -/-rwxrwxrwx 0
0
3633186
c:\/PROGRA~1/MAXIS/SIMCIT~1/BITMAPS/WILL2D.BMP
6118 m.. -/-rwxrwxrwx 0
0
3633191
c:\/PROGRA~1/MAXIS/SIMCIT~1/BITMAPS/WILL4U.BMP
6118 m.. -/-rwxrwxrwx 0
0
3633188
c:\/PROGRA~1/MAXIS/SIMCIT~1/BITMAPS/WILL3D.BMP
766007
Wed Mar 06 1996 11:37:12 58480 m.c -/-rwxrwxrwx 0
0
c:\/WINDOWS/FONTS/LBLACK.TTF
3427337
Wed Mar 06 1996 19:15:30 38400 m.. -/-rwxrwxrwx 0
0
c:\/PROGRA~1/MAXIS/SIMCIT~1/README.WRI
3427343
Wed Mar 06 1996 20:13:20 1392128 m.. -/-rwxrwxrwx 0
0
c:\/PROGRA~1/MAXIS/SIMCIT~1/SIMCITY.EXE
Sat Mar 09 1996 23:00:00 664820 m.. -/-rwxrwxrwx 0
0
3651092
c:\/MAXIS/EARTHWIN/SIMEARTH.VTI
3651085
Mon Mar 11 1996 23:00:00
28 m.. -/-rwxrwxrwx 0
0
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
c:\/MAXIS/EARTHWIN/SHARED.NDX
3956 m.. -/-rwxrwxrwx 0
0
3651079
c:\/MAXIS/EARTHWIN/HCEGAIA.NDX
105717 m.. -/-rwxrwxrwx 0
0
3651087
c:\/MAXIS/EARTHWIN/SIMEARTH.HLP
3884 m.. -/-rwxrwxrwx 0
0
3651082
c:\/MAXIS/EARTHWIN/MONOIA.NDX
11264 m.. -/-rwxrwxrwx 0
0
3651077
c:\/MAXIS/EARTHWIN/FONTRES.FON
401993 m.. -/-rwxrwxrwx 0
0
3651078
c:\/MAXIS/EARTHWIN/HCEGAIA.DAT
34 m.. -/-rwxrwxrwx 0
0
3651086
c:\/MAXIS/EARTHWIN/SIMEARTH.CFG
269824 m.. -/-rwxrwxrwx 0
0
3651088
c:\/MAXIS/EARTHWIN/WGAIA.EXE
1738 m.. -/-rwxrwxrwx 0
0
3651084
c:\/MAXIS/EARTHWIN/SHARED.DAT
318859 m.. -/-rwxrwxrwx 0
0
3651081
c:\/MAXIS/EARTHWIN/MONOIA.DAT
3651091
Thu Mar 14 1996 23:00:00 1281079 m.. -/-rwxrwxrwx 0
0
c:\/MAXIS/EARTHWIN/SIMEARTH.MVB
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Sun Mar 17 1996 23:00:00 5632 m.. -/-rwxrwxrwx 0
0
3651083
c:\/MAXIS/EARTHWIN/README.WRI
766 m.. -/-rwxrwxrwx 0
0
3651090
c:\/MAXIS/EARTHWIN/SIMEARTH.ICO
Mon Apr 15 1996 15:33:22 64976 m.c -/-rwxrwxrwx 0
0
766008
c:\/WINDOWS/FONTS/LBRITE.TTF
766009
Mon Apr 15 1996 15:34:04 61040 m.c -/-rwxrwxrwx 0
0
c:\/WINDOWS/FONTS/LBRITED.TTF
766010
Mon Apr 15 1996 15:34:38 65728 m.c -/-rwxrwxrwx 0
0
c:\/WINDOWS/FONTS/LBRITEDI.TTF
766011
Mon Apr 15 1996 15:35:14 65208 m.c -/-rwxrwxrwx 0
0
c:\/WINDOWS/FONTS/LBRITEI.TTF
342967
Mon Jun 24 1996 17:32:04 79872 m.. -/-rwxrwxrwx 0
0
c:\/WINDOWS/SYSTEM/MSNAUDIO.ACM
342970
Mon Jun 24 1996 17:33:08 385536 m.. -/-rwxrwxrwx 0
0
c:\/WINDOWS/SYSTEM/RICHED20.DLL
342961
Wed Jul 31 1996 20:17:52 1087248 m.. -/-rwxrwxrwx 0
0
c:\/WINDOWS/SYSTEM/FM20.DLL
342965
Wed Jul 31 1996 20:17:56 26624 m.. -/-rwxrwxrwx 0
0
c:\/WINDOWS/SYSTEM/FM20ENU.DLL
Thu Aug 01 1996 17:51:50 161552 m.. -/-rwxrwxrwx 0
0
342569
c:\/WINDOWS/SYSTEM/ASYCPICT.DLL
342968
Fri Aug 02 1996 12:38:50 126976 m.. -/-rwxrwxrwx 0
0
c:\/WINDOWS/SYSTEM/P2D.DLL
342966
Fri Aug 02 1996 12:43:00 127488 m.. -/-rwxrwxrwx 0
0
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
c:\/WINDOWS/SYSTEM/ISCTRLS.OCX
342969
Fri Aug 02 1996 13:11:34 1117 m.. -/-rwxrwxrwx 0
0
c:\/WINDOWS/SYSTEM/PEDCAB1.INF
343563
Sat Aug 24 1996 11:11:10 15252 m.. -/-rwxrwxrwx 0
0
c:\/WINDOWS/COMMAND/ATTRIB.EXE
26673 m.. -/-rwxrwxrwx 0
0
328366
c:\/WINDOWS/INF/MDMITEX.INF
89088 m.. -/-rwxrwxrwx 0
0
342656
c:\/WINDOWS/SYSTEM/ICWDIAL.DLL
17993 m.. -rwxrwxrwx 0
0
545802 <part2.img_BIOS.VXD-dead-545802>
5632 m.. -/-rwxrwxrwx 0
0
342816
c:\/WINDOWS/SYSTEM/MFCUIA32.DLL
9194 m.. -/-rwxrwxrwx 0
0
342791
c:\/WINDOWS/SYSTEM/CP_1252.NLS
17920 m.. -/-rwxrwxrwx 0
0
342707
c:\/WINDOWS/SYSTEM/MSADP32.ACM
105984 m.. -/-rwxrwxrwx 0
0
327693
c:\/WINDOWS/REGEDIT.EXE
42191 m.. -/-rwxrwxrwx 0
0
327728
c:\/WINDOWS/MSDOSDRV.TXT
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
17904 m.. -/-rwxrwxrwx 0
0
343585
c:\/WINDOWS/COMMAND/SUBST.EXE
1386 m.. -/-rwxrwxrwx 0
0
932869
c:\/PROGRA~1/PLUS!/SYSTEM/DRVSPACE.DAT
951 m.. -/-rwxrwxrwx 0
0
328234
c:\/WINDOWS/INF/MSCDROM.INF
309 m.. -/-rwxrwxrwx 0
0
368214
c:\/WINDOWS/HELP/WAB.CNT
22192 m.. -/-rwxrwxrwx 0
0
342611
c:\/WINDOWS/SYSTEM/FRAMEBUF.DRV
29686 m.. -/-rwxrwxrwx 0
0
328326
c:\/WINDOWS/INF/MDMATT.INF
143 m.. -/-rwxrwxrwx 0
0
368162
c:\/WINDOWS/HELP/PINGNAME.BAT
34676 m.. -/-rwxrwxrwx 0
0
342800
c:\/WINDOWS/SYSTEM/UNICODE.NLS
16384 m.. -/-rwxrwxrwx 0
0
342697
c:\/WINDOWS/SYSTEM/TREENVCL.DLL
13536 m.. -/-rwxrwxrwx 0
0
342733
c:\/WINDOWS/SYSTEM/MMCI.DLL
193024 m.. -/-rwxrwxrwx 0
0
342731
c:\/WINDOWS/SYSTEM/IR32_32.DLL
90521 m.. -rwxrwxrwx 0
0
545837 <part2.img_ONFIGMG.VXD-dead-545837>
20901 m.. -/-rwxrwxrwx 0
0
327718
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/WINDOWS/CMD640X2.SYS
20408 m.. -/-rwxrwxrwx 0
0
328381
c:\/WINDOWS/INF/MDMMTD.INF
102 m.. -/-rwxrwxrwx 0
0
368152
c:\/WINDOWS/HELP/WANGSHL.CNT
391 m.. -/-rwxrwxrwx 0
0
368248
c:\/WINDOWS/HELP/NETWATCH.CNT
135876 m.. -/-rwxrwxrwx 0
0
1687560
c:\/WINDOWS/MEDIA/The Microsoft Sound.wav (THEMIC~1.WAV)
13712 m.. -/-rwxrwxrwx 0
0
342955
c:\/WINDOWS/SYSTEM/MCIPIONR.DRV
79672 m.. -/-rwxrwxrwx 0
0
765970
c:\/WINDOWS/FONTS/TIMESI.TTF
12800 m.. -/-rwxrwxrwx 0
0
342685
c:\/WINDOWS/SYSTEM/INTERNAT.EXE
15281 m.. -/-rwxrwxrwx 0
0
328339
c:\/WINDOWS/INF/MDMCRTIX.INF
15280 m.. -/-rwxrwxrwx 0
0
537643
c:\/PROGRA~1/NETMEE~1/MNMTDDN_.DLL
32256 m.. -/-rwxrwxrwx 0
0
1225221
c:\/PROGRA~1/ICW-IN~1/ICWDL.DLL
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
30 m.. -/-rwxrwxrwx 0
0
2257932
c:\/WINDOWS/SHELLNEW/WORDPFCT.WPD
1009600 m.. -/-rwxrwxrwx 0
0
1306636
c:\/PROGRA~1/INTERN~1/SWINST4.EXE
15275 m.. -/-rwxrwxrwx 0
0
328411
c:\/WINDOWS/INF/MDMSUPRA.INF
59392 m.c -/-rwxrwxrwx 0
0
327695
c:\/WINDOWS/CALC.EXE
13229 m.. -/-rwxrwxrwx 0
0
685589
c:\/WINDOWS/SYSTEM/IOSUBSYS/RMM.PDR
17920 m.. -/-rwxrwxrwx 0
0
537615
c:\/PROGRA~1/NETMEE~1/OSSMEM.DLL
56688 m.. -/-rwxrwxrwx 0
0
537632
c:\/PROGRA~1/NETMEE~1/MNMFT_.DLL
169440 m.. -/-rwxrwxrwx 0
0
1553
c:\/WINDOWS/SYSBCKUP/OLE2DISP.DLL
11333 m.. -/-rwxrwxrwx 0
0
342826
c:\/WINDOWS/SYSTEM/ISAPNP.VXD
4416 m.. -/-rwxrwxrwx 0
0
537653
c:\/PROGRA~1/NETMEE~1/MNMSHCO.EXE
54752 m.. -/-rwxrwxrwx 0
0
1545
c:\/WINDOWS/SYSBCKUP/SB16SND.DRV
1067520 m.. -/-rwxrwxrwx 0
0
327785
c:\/WINDOWS/SETUPSLT.EXE
82816 m.. -/-rwxrwxrwx 0
0
342562
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/WINDOWS/SYSTEM/PIFMGR.DLL
7272 m.. -/-rwxrwxrwx 0
0
328313
c:\/WINDOWS/INF/SHELL3.INF
95776 m.. -/-rwxrwxrwx 0
0
342956
c:\/WINDOWS/SYSTEM/MCIVISCA.DRV
4 m.. -/-rwxrwxrwx 0
0
1243665
c:\/PROGRA~1/THEMIC~1/MSNVER.TXT
18546 m.. -/-rwxrwxrwx 0
0
545823
c:\/WINDOWS/SYSTEM/VMM32/_TDAPI.VXD (deleted)
22948 m.. -/-rwxrwxrwx 0
0
368176
c:\/WINDOWS/HELP/SERVER.HLP
287744 m.. -/-rwxrwxrwx 0
0
342643
c:\/WINDOWS/SYSTEM/IMGEDIT.OCX
820224 m.. -/-rwxrwxrwx 0
0
551433
c:\/PROGRA~1/ACCESS~1/BACKUP.EXE
21429 m.. -/-rwxrwxrwx 0
0
545836
c:\/WINDOWS/SYSTEM/VMM32/_IOS.VXD (deleted)
3811 m.. -/-rwxrwxrwx 0
0
328282
c:\/WINDOWS/INF/NETOSI.INF
68880 m.. -/-rwxrwxrwx 0
0
537626
c:\/PROGRA~1/NETMEE~1/MNMCCL_.DLL
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
3808 m.. -/-rwxrwxrwx 0
0
328279
c:\/WINDOWS/INF/NETNICE.INF
48045 m.. -/-rwxrwxrwx 0
0
328233
c:\/WINDOWS/INF/MOTOWN.INF
20800 m.. -/-rwxrwxrwx 0
0
342827
c:\/WINDOWS/SYSTEM/SYSCLASS.DLL
79424 m.. -/-rwxrwxrwx 0
0
342820
c:\/WINDOWS/SYSTEM/OLETHK32.DLL
94720 m.. -/-rwxrwxrwx 0
0
342688
c:\/WINDOWS/SYSTEM/DUNZIPNT.DLL
56981 m.. -/-rwxrwxrwx 0
0
328402
c:\/WINDOWS/INF/MDMROCK2.INF
8192 m.. -/-rwxrwxrwx 0
0
3274758
c:\/WINDOWS/SYSTEM/VIEWERS/DEHEX.DLL
18944 m.. -/-rwxrwxrwx 0
0
342670
c:\/WINDOWS/SYSTEM/VMHELPER.DLL
4912 m.. -/-rwxrwxrwx 0
0
327774
c:\/WINDOWS/RUNDLL.EXE
32256 m.. -/-rwxrwxrwx 0
0
3274763
c:\/WINDOWS/SYSTEM/VIEWERS/SCCVIEW.DLL
1932 m.. -/-rwxrwxrwx 0
0
328443
c:\/WINDOWS/INF/WINPOPUP.INF
88064 m.. -/-r-xr-xr-x 0
0
1243658
c:\/PROGRA~1/THEMIC~1/MPCCL.DLL
13264 m.. -/-rwxrwxrwx 0
0
685583
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/WINDOWS/SYSTEM/IOSUBSYS/AMSINT.MPD
9931 m.. -/-rwxrwxrwx 0
0
545804
c:\/WINDOWS/SYSTEM/VMM32/_NT13.VXD (deleted)
72272 m.. -/-rwxrwxrwx 0
0
342722
c:\/WINDOWS/SYSTEM/AVICAP.DLL
64493 m.. -/-rwxrwxrwx 0
0
328302
c:\/WINDOWS/INF/OHARE.INF
10190 m.. -/-rwxrwxrwx 0
0
685579
c:\/WINDOWS/SYSTEM/IOSUBSYS/DISKVSD.VXD
2191 m.. -/-rwxrwxrwx 0
0
328202
c:\/WINDOWS/INF/AWUPD.INF
965904 m.. -/-rwxrwxrwx 0
0
342737
c:\/WINDOWS/SYSTEM/MSJT3032.DLL
71680 m.. -/-rwxrwxrwx 0
0
343025
c:\/WINDOWS/SYSTEM/NWLSPROC.EXE
239136 m.c -/-rwxrwxrwx 0
0
327735
c:\/WINDOWS/DEFRAG.EXE
18576 m.. -/-rwxrwxrwx 0
0
1544
c:\/WINDOWS/SYSBCKUP/CSPMAN.DLL
129078 m.. -/-r-xr-xr-x 0
0
11
c:\/logo.sys
(LOGO.SYS)
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
46740 m.. -/-rwxrwxrwx 0
0
545820
c:\/WINDOWS/SYSTEM/VMM32/_PICD.VXD (deleted)
1264 m.. -/-rwxrwxrwx 0
0
342738
c:\/WINDOWS/SYSTEM/MSMIXMGR.DLL
174080 m.. -/-rwxrwxrwx 0
0
342844
c:\/WINDOWS/SYSTEM/RASAPI32.DLL
51043 m.. -/-rwxrwxrwx 0
0
328232
c:\/WINDOWS/INF/MOS.INF
39280 m.c -/-rwxrwxrwx 0
0
342940
c:\/WINDOWS/SYSTEM/ACTMOVIE.EXE
109200 m.. -/-rwxrwxrwx 0
0
342932
c:\/WINDOWS/SYSTEM/SCHANNEL.DLL
105472 m.c -/-rwxrwxrwx 0
0
327753
c:\/WINDOWS/SNDREC32.EXE
9089 m.. -/-rwxrwxrwx 0
0
328215
c:\/WINDOWS/INF/INFRARED.INF
10566 m.. -/-rwxrwxrwx 0
0
328318
c:\/WINDOWS/INF/WORDPAD.INF
4464 m.. -/-rwxrwxrwx 0
0
537651
c:\/PROGRA~1/NETMEE~1/MNMNET.EXE
71215 m.. -/-rwxrwxrwx 0
0
545815
c:\/WINDOWS/SYSTEM/VMM32/_FAT.VXD (deleted)
30208 m.. -/-rwxrwxrwx 0
0
342741
c:\/WINDOWS/SYSTEM/MSVIDC32.DLL
57328 m.. -/-rwxrwxrwx 0
0
1551
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/WINDOWS/SYSBCKUP/OLE2CONV.DLL
519340 m.. -/-rwxrwxrwx 0
0
368177
c:\/WINDOWS/HELP/WINDOWS.HLP
16384 m.. -/-rwxrwxrwx 0
0
342564
c:\/WINDOWS/SYSTEM/WNASPI32.DLL
509 m.. -/-rwxrwxrwx 0
0
368165
c:\/WINDOWS/HELP/MOUSE.CNT
22743 m.. -/-rwxrwxrwx 0
0
328363
c:\/WINDOWS/INF/MDMINSYS.INF
5856 m.. -/-rwxrwxrwx 0
0
342919
c:\/WINDOWS/SYSTEM/INET16.DLL
3570 m.. -/-rwxrwxrwx 0
0
1194501
c:\/WINDOWS/DESKTOP/ONLINE~1/_NFORM~1.TXT (deleted)
68608 m.. -/-rwxrwxrwx 0
0
342788
c:\/WINDOWS/SYSTEM/ULCLIENT.DLL
6144 m.. -/-rwxrwxrwx 0
0
342815
c:\/WINDOWS/SYSTEM/OLESVR32.DLL
116736 m.. -/-rwxrwxrwx 0
0
537610
c:\/PROGRA~1/NETMEE~1/MCATPSTN.DLL
11264 m.. -/-rwxrwxrwx 0
0
342739
c:\/WINDOWS/SYSTEM/MSRLE32.DLL
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
32530 m.. -/-rwxrwxrwx 0
0
327724
c:\/WINDOWS/GENERAL.TXT
2392 m.. -/-rwxrwxrwx 0
0
328301
c:\/WINDOWS/INF/NODRIVER.INF
10441 m.. -/-rwxrwxrwx 0
0
328345
c:\/WINDOWS/INF/MDMELINK.INF
9056 m.. -/-rwxrwxrwx 0
0
342714
c:\/WINDOWS/SYSTEM/WFM0203.ACV
11796 m.. -/-rwxrwxrwx 0
0
328200
c:\/WINDOWS/INF/ATHENA.INF
22204 m.. -/-rwxrwxrwx 0
0
328419
c:\/WINDOWS/INF/MDMTKR.INF
5532 m.. -/-rwxrwxrwx 0
0
1550
c:\/WINDOWS/SYSBCKUP/STDOLE.TLB
26351 m.. -/-rwxrwxrwx 0
0
328393
c:\/WINDOWS/INF/MDMPACE.INF
21264 m.. -/-rwxrwxrwx 0
0
10430476
c:\/WINDOWS/SYSTEM/BACKUP/comcat.dll (COMCAT.DLL)
24027 m.. -/-rwxrwxrwx 0
0
328389
c:\/WINDOWS/INF/MDMOLIVE.INF
3279 m.. -/-rwxrwxrwx 0
0
342909
c:\/WINDOWS/SYSTEM/UNICODE.BIN
3104 m.. -/-rwxrwxrwx 0
0
342566
c:\/WINDOWS/SYSTEM/MMSOUND.DRV
14336 m.. -/-rwxrwxrwx 0
0
3874317
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
A169 4E46
c:\/WINDOWS/SYSTEM/DXBACKUP/DISPLAY/s3mm.dll06E4
(S3MM.DLL)
4313 m.. -/-rwxrwxrwx 0
0
342606
c:\/WINDOWS/SYSTEM/REDIRECT.MOD
24466 m.. -/-rwxrwxrwx 0
0
368204
c:\/WINDOWS/HELP/PROGMAN.HLP
12890 m.. -/-rwxrwxrwx 0
0
328285
c:\/WINDOWS/INF/NETPROT.INF
5864 m.. -/-rwxrwxrwx 0
0
328412
c:\/WINDOWS/INF/MDMTDK.INF
39744 m.. -/-rwxrwxrwx 0
0
342802
c:\/WINDOWS/SYSTEM/OLE2.DLL
4208 m.. -/-rwxrwxrwx 0
0
342808
c:\/WINDOWS/SYSTEM/STORAGE.DLL
55438 m.. -/-rwxrwxrwx 0
0
342582
c:\/WINDOWS/SYSTEM/UNIMODEM.VXD
3570 m.. -rwxrwxrwx 0
0
1194501 <part2.img_NFORM~1.TXT-dead-1194501>
112640 m.. -/-rwxrwxrwx 0
0
342819
c:\/WINDOWS/SYSTEM/OLEDLG.DLL
601 m.. -/-rwxrwxrwx 0
0
342952
c:\/WINDOWS/SYSTEM/SWEDISH.TRN
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
31684 m.. -rwxrwxrwx 0
0
545822 <part2.img_TD.VXD-dead-545822>
34923 m.. -/-rwxrwxrwx 0
0
368135
c:\/WINDOWS/HELP/ACCESS.HLP
113456 m.. -/-rwxrwxrwx 0
0
327773
c:\/WINDOWS/PROGMAN.EXE
19536 m.. -/-rwxrwxrwx 0
0
327798
c:\/WINDOWS/ARP.EXE
829 m.. -/-rwxrwxrwx 0
0
551945
c:\/PROGRA~1/ACCESS~1/HYPERT~1/MCI Mail.ht (MCIMAI~1.HT)
289552 m.. -/-rwxrwxrwx 0
0
342937
c:\/WINDOWS/SYSTEM/WININET.DLL
228624 m.. -/-rwxrwxrwx 0
0
342917
c:\/WINDOWS/SYSTEM/HTMLEDIT.DLL
23424 m.. -/-r-xr-xr-x 0
0
765975
c:\/WINDOWS/FONTS/COURE.FON
82432 m.. -/-rwxrwxrwx 0
0
342664
c:\/WINDOWS/SYSTEM/JIT.DLL
930 m.. -/-rwxrwxrwx 0
0
368168
c:\/WINDOWS/HELP/WINHLP32.CNT
13101 m.. -/-rwxrwxrwx 0
0
328298
c:\/WINDOWS/INF/NETUB.INF
14336 m.. -/-rwxrwxrwx 0
0
342973
c:\/WINDOWS/SYSTEM/Flying Windows.scr (FLYING~1.SCR)
24576 m.. -/-rwxrwxrwx 0
0
342619
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/WINDOWS/SYSTEM/AWCODC32.DLL
23272 m.. -/-rwxrwxrwx 0
0
328375
c:\/WINDOWS/INF/MDMMCOM.INF
42200 m.. -/-rwxrwxrwx 0
0
1065478
c:\/WINDOWS/WANGSAMP/IMGSAMP.FRM
28560 m.. -/-rwxrwxrwx 0
0
327906
c:\/WINDOWS/FREECELL.EXE
139712 m.. -/-rwxrwxrwx 0
0
342860
c:\/WINDOWS/SYSTEM/GLU32.DLL
829 m.. -/-rwxrwxrwx 0
0
551952
c:\/PROGRA~1/ACCESS~1/HYPERT~1/CompuServe.ht (COMPUS~1.HT)
42368 m.. -rwxrwxrwx 0
0
1541 <part2.img_EMP.000-dead-1541>
91136 m.. -/-rwxrwxrwx 0
0
342833
c:\/WINDOWS/SYSTEM/SPOOLSS.DLL
2448 m.. -/-rwxrwxrwx 0
0
2257931
c:\/WINDOWS/SHELLNEW/LOTUS.WK4
10267 m.. -/-rwxrwxrwx 0
0
328265
c:\/WINDOWS/INF/NETDEF.INF
32146 m.. -/-rwxrwxrwx 0
0
343581
c:\/WINDOWS/COMMAND/MEM.EXE
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
10240 m.. -/-rwxrwxrwx 0
0
342624
c:\/WINDOWS/SYSTEM/AWVIEW32.DLL
20480 m.. -/-r-xr-xr-x 0
0
551950
c:\/PROGRA~1/ACCESS~1/HYPERT~1/hticons.dll (HTICONS.DLL)
6496 m.. -/-rwxrwxrwx 0
0
343002
c:\/WINDOWS/SYSTEM/ICMP.DLL
470 m.. -/-rwxrwxrwx 0
0
327858
c:\/WINDOWS/Houndstooth.bmp (HOUNDS~1.BMP)
23105 m.. -/-rwxrwxrwx 0
0
342847
c:\/WINDOWS/SYSTEM/PARALINK.VXD
4766 m.. -/-rwxrwxrwx 0
0
1306635
c:\/PROGRA~1/INTERN~1/RALICENS.TXT
46305 m.. -/-rwxrwxrwx 0
0
328343
c:\/WINDOWS/INF/MDMDSI.INF
6675 m.. -/-rwxrwxrwx 0
0
368210
c:\/WINDOWS/HELP/MAILNEWS.CNT
239600 m.. -/-rwxrwxrwx 0
0
932358
c:\/PROGRA~1/PLUS!/CMPAGENT.EXE
10790 m.. -/-rwxrwxrwx 0
0
343570
c:\/WINDOWS/COMMAND/EDIT.HLP
28416 m.. -/-rwxrwxrwx 0
0
342922
c:\/WINDOWS/SYSTEM/INFRARED.DLL
29184 m.. -/-rwxrwxrwx 0
0
342590
c:\/WINDOWS/SYSTEM/POWERCFG.DLL
38401 m.. -/-rwxrwxrwx 0
0
327901
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/WINDOWS/K2V_HWC.INI
326144 m.. -/-r-xr-xr-x 0
0
551948
c:\/PROGRA~1/ACCESS~1/HYPERT~1/hypertrm.dll (HYPERTRM.DLL)
55296 m.. -/-rwxrwxrwx 0
0
342646
c:\/WINDOWS/SYSTEM/SYNCENG.DLL
654 m.. -/-rwxrwxrwx 0
0
1681925
c:\/WINDOWS/CONFIG/GENERAL.IDF
3708 m.. -/-rwxrwxrwx 0
0
327784
c:\/WINDOWS/IFSHLP.SYS
30838 m.. -/-rwxrwxrwx 0
0
328258
c:\/WINDOWS/INF/NETCD.INF
59964 m.. -/-rwxrwxrwx 0
0
1201162
c:\/WINDOWS/SYSTEM/COLOR/MNEBUG18.ICM
23847 m.. -/-rwxrwxrwx 0
0
3874319
c:\/WINDOWS/SYSTEM/DXBACKUP/DISPLAY/s3mm.vxd (S3MM.VXD)
601 m.. -/-rwxrwxrwx 0
0
342953
c:\/WINDOWS/SYSTEM/USASCII.TRN
95387 m.. -rwxrwxrwx 0
0
545810 <part2.img_86MMGR.VXD-dead-545810>
41581 m.. -/-rwxrwxrwx 0
0
328242
c:\/WINDOWS/INF/MSMAIL.INF
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
4111 m.. -/-rwxrwxrwx 0
0
327729
c:\/WINDOWS/MSN.TXT
43833 m.. -/-rwxrwxrwx 0
0
368205
c:\/WINDOWS/HELP/WINFILE.HLP
105984 m.. -/-rwxrwxrwx 0
0
342859
c:\/WINDOWS/SYSTEM/FONTEXT.DLL
54752 m.. -/-rwxrwxrwx 0
0
342752
c:\/WINDOWS/SYSTEM/SB16SND.DRV
135 m.. -/-rwxrwxrwx 0
0
368163
c:\/WINDOWS/HELP/PINGNUM.BAT
9004 m.. -/-rwxrwxrwx 0
0
342720
c:\/WINDOWS/SYSTEM/WFM0202A.CSP
54784 m.c -/-rwxrwxrwx 0
0
327754
c:\/WINDOWS/SNDVOL32.EXE
6776 m.. -/-rwxrwxrwx 0
0
342719
c:\/WINDOWS/SYSTEM/WFM0201A.CSP
41420 m.. -/-rwxrwxrwx 0
0
368153
c:\/WINDOWS/HELP/WANGIMG.HLP
9765 m.. -rwxrwxrwx 0
0
545813 <part2.img_DEF.VXD-dead-545813>
436736 m.c -/-rwxrwxrwx 0
0
327742
c:\/WINDOWS/WANGIMG.EXE
23834 m.. -rwxrwxrwx 0
0
551432 <part2.img_ACKUP.CFG-dead-551432>
27221 m.. -/-rwxrwxrwx 0
0
343038
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/WINDOWS/SYSTEM/VNETBIOS.VXD
20851 m.. -/-rwxrwxrwx 0
0
328306
c:\/WINDOWS/INF/PRTUPD.INF
3888 m.. -/-rwxrwxrwx 0
0
342650
c:\/WINDOWS/SYSTEM/WHLP16T.DLL
25088 m.. -/-rwxrwxrwx 0
0
343021
c:\/WINDOWS/SYSTEM/SECUR32.DLL
63200 m.. -/-rwxrwxrwx 0
0
537628
c:\/PROGRA~1/NETMEE~1/MNMCLPM_.DLL
36352 m.. -/-rwxrwxrwx 0
0
327762
c:\/WINDOWS/QFECHECK.EXE
173 m.. -/-rwxrwxrwx 0
0
368211
c:\/WINDOWS/HELP/MSNAUTH.CNT
161280 m.. -/-rwxrwxrwx 0
0
342571
c:\/WINDOWS/SYSTEM/CRTDLL.DLL
6010 m.. -/-rwxrwxrwx 0
0
2885657
c:\/PROGRA~1/ONLINE~1/AT&T/WNTEXT.HTM
42229 m.. -/-rwxrwxrwx 0
0
328360
c:\/WINDOWS/INF/MDMHAYES.INF
1148176 m.. -/-rwxrwxrwx 0
0
342617
c:\/WINDOWS/SYSTEM/MAILNEWS.DLL
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
4209 m.. -/-rwxrwxrwx 0
0
328238
c:\/WINDOWS/INF/MSDX.INF
204288 m.. -/-rwxrwxrwx 0
0
327770
c:\/WINDOWS/EXPLORER.EXE
5857 m.. -/-rwxrwxrwx 0
0
342568
c:\/WINDOWS/SYSTEM/VFD.VXD
45577 m.. -/-rwxrwxrwx 0
0
328420
c:\/WINDOWS/INF/MDMTOSH.INF
9133 m.. -/-rwxrwxrwx 0
0
368245
c:\/WINDOWS/HELP/WINMINE.HLP
11080 m.. -/-rwxrwxrwx 0
0
328283
c:\/WINDOWS/INF/NETPCI.INF
12276 m.. -/-rwxrwxrwx 0
0
328267
c:\/WINDOWS/INF/NETDLC32.INF
5739 m.. -/-rwxrwxrwx 0
0
328319
c:\/WINDOWS/INF/LAYOUT1.INF
12192 m.. -/-rwxrwxrwx 0
0
342882
c:\/WINDOWS/SYSTEM/UMDMXFRM.DLL
11264 m.. -/-rwxrwxrwx 0
0
342696
c:\/WINDOWS/SYSTEM/SVCPROP.DLL
28643 m.. -/-rwxrwxrwx 0
0
328391
c:\/WINDOWS/INF/MDMOPTN.INF
53552 m.. -/-rwxrwxrwx 0
0
1575
c:\/WINDOWS/SYSBCKUP/MSACM.DLL
2593 m.. -/-rwxrwxrwx 0
0
328290
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/WINDOWS/INF/NETSMC32.INF
9962 m.. -/-rwxrwxrwx 0
0
685573
c:\/WINDOWS/SYSTEM/IOSUBSYS/BIGMEM.DRV
191296 m.. -/-rwxrwxrwx 0
0
342842
c:\/WINDOWS/SYSTEM/AMOVIE.OCX
14952 m.. -/-rwxrwxrwx 0
0
327891
c:\/WINDOWS/PROTMAN.EXE
23606 m.. -/-rwxrwxrwx 0
0
343035
c:\/WINDOWS/SYSTEM/NSCL.VXD
16855 m.. -/-rwxrwxrwx 0
0
545816
c:\/WINDOWS/SYSTEM/VMM32/_FBACKUP.VXD (deleted)
59964 m.. -/-rwxrwxrwx 0
0
1201161
c:\/WINDOWS/SYSTEM/COLOR/MNEBUG15.ICM
41616 m.. -/-rwxrwxrwx 0
0
1360902
c:\/PROGRA~1/WINDOW~1/MLSET32.EXE
2621 m.. -/-rwxrwxrwx 0
0
368208
c:\/WINDOWS/HELP/IEXPLORE.CNT
1105 m.. -/-rwxrwxrwx 0
0
327703
c:\/WINDOWS/ASPI2HLP.SYS
19456 m.. -/-rwxrwxrwx 0
0
1243667
c:\/PROGRA~1/THEMIC~1/SUUTIL.DLL
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
733296 m.. -/-rwxrwxrwx 0
0
342862
c:\/WINDOWS/SYSTEM/OPENGL32.DLL
64702 m.. -/-rwxrwxrwx 0
0
368169
c:\/WINDOWS/HELP/APPS.HLP
58870 m.. -/-rwxrwxrwx 0
0
343593
c:\/WINDOWS/COMMAND/EGA.CPI
12394 m.. -/-rwxrwxrwx 0
0
328287
c:\/WINDOWS/INF/NETSERVR.INF
16525 m.. -/-rwxrwxrwx 0
0
328278
c:\/WINDOWS/INF/NETNCR.INF
643 m.. -/-rwxrwxrwx 0
0
368223
c:\/WINDOWS/HELP/CDPLAYER.CNT
38912 m.. -/-rwxrwxrwx 0
0
342760
c:\/WINDOWS/SYSTEM/LHACM.ACM
43008 m.. -/-rwxrwxrwx 0
0
342887
c:\/WINDOWS/SYSTEM/ADVAPI32.DLL
66672 m.. -/-rwxrwxrwx 0
0
327879
c:\/WINDOWS/TELNET.EXE
1289 m.. -/-rwxrwxrwx 0
0
368209
c:\/WINDOWS/HELP/INT-MAIL.CNT
71196 m.. -/-rwxrwxrwx 0
0
765971
c:\/WINDOWS/FONTS/WINGDING.TTF
22618 m.. -rwxrwxrwx 0
0
545828 <part2.img_PD.VXD-dead-545828>
16577 m.. -/-rwxrwxrwx 0
0
368173
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/WINDOWS/HELP/MOUSE.HLP
9168 m.. -/-rwxrwxrwx 0
0
343017
c:\/WINDOWS/SYSTEM/RPCLTS3.DLL
10444 m.. -/-rwxrwxrwx 0
0
327702
c:\/WINDOWS/IOS.INI
1173 m.. -/-rwxrwxrwx 0
0
2885656
c:\/PROGRA~1/ONLINE~1/AT&T/WNMENU.HTM
71168 m.. -/-rwxrwxrwx 0
0
342929
c:\/WINDOWS/SYSTEM/RA3228_8.DLL
43008 m.. -/-rwxrwxrwx 0
0
343011
c:\/WINDOWS/SYSTEM/NWPP32.DLL
74331 m.. -/-rwxrwxrwx 0
0
342756
c:\/WINDOWS/SYSTEM/SB16.VXD
13312 m.. -/-rwxrwxrwx 0
0
342604
c:\/WINDOWS/SYSTEM/REDIR32.EXE
40576 m.. -/-rwxrwxrwx 0
0
342818
c:\/WINDOWS/SYSTEM/OLECNV32.DLL
461 m.. -/-rwxrwxrwx 0
0
2257929
c:\/WINDOWS/SHELLNEW/PRESENTA.SHW
18999 m.. -/-rwxrwxrwx 0
0
685588
c:\/WINDOWS/SYSTEM/IOSUBSYS/HSFLOP.PDR
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
6144 m.. -/-rwxrwxrwx 0
0
342678
c:\/WINDOWS/SYSTEM/IMM32.DLL
198 m.. -/-rwxrwxrwx 0
0
327860
c:\/WINDOWS/Triangles.bmp (TRIANG~1.BMP)
334848 m.. -/-rwxrwxrwx 0
0
342629
c:\/WINDOWS/SYSTEM/OIDIS400.DLL
75776 m.. -/-rwxrwxrwx 0
0
342695
c:\/WINDOWS/SYSTEM/PRODINV.DLL
9200 m.. -/-rwxrwxrwx 0
0
537654
c:\/PROGRA~1/NETMEE~1/TYPE.WAV
21028 m.. -/-rwxrwxrwx 0
0
368159
c:\/WINDOWS/HELP/APMCP.HLP
25600 m.. -/-rwxrwxrwx 0
0
342941
c:\/WINDOWS/SYSTEM/DIALMON.EXE
490 m.. -/-rwxrwxrwx 0
0
1225223
c:\/PROGRA~1/ICW-IN~1/ICWX25A.DUN
3570 m.. -/-rwxrwxrwx 0
0
1194516
c:\/WINDOWS/DESKTOP/ONLINE~1/_$!$-23.ME (deleted)
25446 m.. -/-rwxrwxrwx 0
0
328388
c:\/WINDOWS/INF/MDMNOVFX.INF
177856 m.. -/-rwxrwxrwx 0
0
1549
c:\/WINDOWS/SYSBCKUP/TYPELIB.DLL
5541 m.. -/-rwxrwxrwx 0
0
2885651
c:\/PROGRA~1/ONLINE~1/AT&T/TITLE2.GIF
30396 m.. -/-rwxrwxrwx 0
0
328427
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/WINDOWS/INF/MDMUSRG.INF
119296 m.. -/-rwxrwxrwx 0
0
342897
c:\/WINDOWS/SYSTEM/MPRSERV.DLL
7885 m.. -/-rwxrwxrwx 0
0
327689
c:\/WINDOWS/NETDET.INI
6288 m.. -/-rwxrwxrwx 0
0
2885641
c:\/PROGRA~1/ONLINE~1/AT&T/EARTH.GIF
25154 m.. -/-rwxrwxrwx 0
0
342550
c:\/WINDOWS/SYSTEM/ENABLE2.VXD
30832 m.. -/-rwxrwxrwx 0
0
342902
c:\/WINDOWS/SYSTEM/RPCNS4.DLL
7680 m.. -/-rwxrwxrwx 0
0
537647
c:\/PROGRA~1/NETMEE~1/MNMTPH32.DLL
27600 m.. -/-rwxrwxrwx 0
0
327882
c:\/WINDOWS/WINPOPUP.EXE
22583 m.. -rwxrwxrwx 0
0
545840 <part2.img_ERF.VXD-dead-545840>
23693 m.. -/-rwxrwxrwx 0
0
328372
c:\/WINDOWS/INF/MDMLIGHT.INF
25704 m.. -/-rwxrwxrwx 0
0
328422
c:\/WINDOWS/INF/MDMTRON.INF
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
129078 m.. -/-rwxrwxrwx 0
0
327779
c:\/WINDOWS/LOGOS.SYS
24176 m.. -/-rwxrwxrwx 0
0
327910
c:\/WINDOWS/WINMINE.EXE
2436 m.. -/-rwxrwxrwx 0
0
328206
c:\/WINDOWS/INF/DECPSMW4.INF
16976 m.. -/-rwxrwxrwx 0
0
1570
c:\/WINDOWS/SYSBCKUP/MIDIMAP.DRV
7824 m.. -/-rwxrwxrwx 0
0
537636
c:\/PROGRA~1/NETMEE~1/MNMMSG_.DLL
185898 m.. -/-rwxrwxrwx 0
0
545803
c:\/WINDOWS/SYSTEM/VMM32/IFSMGR.VXD
129243 m.. -/-rwxrwxrwx 0
0
368219
c:\/WINDOWS/HELP/MAILNEWS.HLP
42496 m.. -/-rwxrwxrwx 0
0
342995
c:\/WINDOWS/SYSTEM/VLB32.DLL
3358 m.. -/-rwxrwxrwx 0
0
328226
c:\/WINDOWS/INF/MODEMS.INF
0
342901
6656 m.. -/-rwxrwxrwx 0
c:\/WINDOWS/SYSTEM/NETBIOS.DLL
0
342740
129536 m.. -/-rwxrwxrwx 0
c:\/WINDOWS/SYSTEM/MSVFW32.DLL
0
343009
21504 m.. -/-rwxrwxrwx 0
c:\/WINDOWS/SYSTEM/NWNET32.DLL
0
328264
20208 m.. -/-rwxrwxrwx 0
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/WINDOWS/INF/NETDEC.INF
328212
5297 m.. -/-rwxrwxrwx 0
0
c:\/WINDOWS/INF/HPNETPRN.INF
0
328316
2158 m.. -/-rwxrwxrwx 0
c:\/WINDOWS/INF/VIDCAP.INF
0
545812 <part2.img22408 m.. -rwxrwxrwx 0
_CDFSD.VXD-dead-545812>
0
328222
7887 m.. -/-rwxrwxrwx 0
c:\/WINDOWS/INF/MF.INF
342878
11776 m.. -/-rwxrwxrwx 0
0
c:\/WINDOWS/SYSTEM/TAPI32.DLL
0
342908
15523 m.. -/-rwxrwxrwx 0
c:\/WINDOWS/SYSTEM/WSOCK.VXD
0
342655
28160 m.. -/-rwxrwxrwx 0
c:\/WINDOWS/SYSTEM/ICHRCNV.DLL
0
537646
2544 m.. -/-rwxrwxrwx 0
c:\/PROGRA~1/NETMEE~1/MNMTPH16.DLL
0
342804
169440 m.. -/-rwxrwxrwx 0
c:\/WINDOWS/SYSTEM/OLE2DISP.DLL
51227 m.. -/-rwxrwxrwx 0
0
328307
c:\/WINDOWS/INF/QUARTZ.INF
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
23776 m.. -/-rwxrwxrwx 0
0
327811
c:\/WINDOWS/NETSTAT.EXE
31886 m.. -/-rwxrwxrwx 0
0
368170
c:\/WINDOWS/HELP/CALC.HLP
17773 m.. -/-rwxrwxrwx 0
0
327719
c:\/WINDOWS/CONFIG.TXT
1860 m.. -/-rwxrwxrwx 0
0
328214
c:\/WINDOWS/INF/INETMAIL.INF
113664 m.. -/-rwxrwxrwx 0
0
342821
c:\/WINDOWS/SYSTEM/CONFCP.DLL
67 m.. -/-rwxrwxrwx 0
0
765957
c:\/WINDOWS/FONTS/DESKTOP.INI
9208 m.. -/-rwxrwxrwx 0
0
328405
c:\/WINDOWS/INF/MDMSIER.INF
847632 m.. -/-rwxrwxrwx 0
0
342925
c:\/WINDOWS/SYSTEM/MSHTML.DLL
7229 m.. -/-rwxrwxrwx 0
0
328303
c:\/WINDOWS/INF/OVERRIDE.INF
379152 m.. -/-rwxrwxrwx 0
0
342853
c:\/WINDOWS/SYSTEM/COMCTL32.DLL
204288 m.. -/-rwxrwxrwx 0
0
342913
c:\/WINDOWS/SYSTEM/DIGSIG.DLL
29696 m.. -/-rwxrwxrwx 0
0
537631
c:\/PROGRA~1/NETMEE~1/MNMCPI32.DLL
18967 m.. -/-rwxrwxrwx 0
0
343561
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/WINDOWS/COMMAND/SYS.COM
6528 m.. -/-rwxrwxrwx 0
0
343007
c:\/WINDOWS/SYSTEM/NW16.DLL
9815 m.. -rwxrwxrwx 0
0
545834 <part2.img_MD.VXD-dead-545834>
2213 m.. -/-rwxrwxrwx 0
0
328441
c:\/WINDOWS/INF/CLIP.INF
31377 m.. -/-rwxrwxrwx 0
0
328413
c:\/WINDOWS/INF/MDMTELBT.INF
91648 m.. -/-rwxrwxrwx 0
0
342736
c:\/WINDOWS/SYSTEM/MSACM32.DLL
36352 m.. -/-rwxrwxrwx 0
0
3274760
c:\/WINDOWS/SYSTEM/VIEWERS/DESS.DLL
59129 m.. -/-rwxrwxrwx 0
0
685575
c:\/WINDOWS/SYSTEM/IOSUBSYS/CDFS.VXD
623 m.c -/-rwxrwxrwx 0
0
2885660
c:\/PROGRA~1/ONLINE~1/AT&T/ATTWNSVC.ISP
11587 m.. -/-rwxrwxrwx 0
0
328251
c:\/WINDOWS/INF/NDSCLI.INF
449296 m.. -/-rwxrwxrwx 0
0
342933
c:\/WINDOWS/SYSTEM/SHDOCVW.DLL
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
45371 m.. -/-rwxrwxrwx 0
0
545817
c:\/WINDOWS/SYSTEM/VMM32/_KD.VXD (deleted)
33371 m.. -/-rwxrwxrwx 0
0
327810
c:\/WINDOWS/NBTSTAT.EXE
57466 m.. -/-rwxrwxrwx 0
0
685595
c:\/WINDOWS/SYSTEM/IOSUBSYS/DRVSPACX.VXD
4785 m.. -/-rwxrwxrwx 0
0
343023
c:\/WINDOWS/SYSTEM/LMSCRIPT.EXE
37696 m.. -/-rwxrwxrwx 0
0
328227
c:\/WINDOWS/INF/MONITOR.INF
11904 m.. -/-rwxrwxrwx 0
0
342884
c:\/WINDOWS/SYSTEM/SERWVDRV.DRV
4615 m.. -/-rwxrwxrwx 0
0
932872
c:\/PROGRA~1/PLUS!/SYSTEM/NOCOMP.INF
3 m.. -/-rwxrwxrwx 0
0
327876
c:\/WINDOWS/Internet News.{89292103-4755-11cf-9DC2-00AA006C2B84}
(INTERN~2.{89)
73984 m.. -/-rwxrwxrwx 0
0
765960
c:\/WINDOWS/FONTS/ARIALBI.TTF
14521 m.. -/-rwxrwxrwx 0
0
343042
c:\/WINDOWS/SYSTEM/WSIPX.VXD
18944 m.. -/-rwxrwxrwx 0
0
342706
c:\/WINDOWS/SYSTEM/IMAADP32.ACM
5120 m.. -/-rwxrwxrwx 0
0
342683
c:\/WINDOWS/SYSTEM/INDICDLL.DLL
Key fingerprint = 1950007
AF19 FA27
998D FDB5
06E4 A169 4E46
0 F8B52462213
m..2F94
-/-rwxrwxrwx
0 DE3D
c:\/PROGRA~1/ONLINE~1/AOL/SETUP25I.EXE
0
537634
6368 m.. -/-rwxrwxrwx 0
c:\/PROGRA~1/NETMEE~1/MNMHLP_.DLL
10556 m.. -/-rwxrwxrwx 0
0
368220
c:\/WINDOWS/HELP/MSNAUTH.HLP
0
368149
2554 m.. -/-rwxrwxrwx 0
c:\/WINDOWS/HELP/WANGIMG.CNT
0
545828
22618 m.. -/-rwxrwxrwx 0
c:\/WINDOWS/SYSTEM/VMM32/_PD.VXD (deleted)
0
343040
156749 m.. -/-rwxrwxrwx 0
c:\/WINDOWS/SYSTEM/VREDIR.VXD
0
327776
28672 m.. -/-rwxrwxrwx 0
c:\/WINDOWS/TASKMAN.EXE
328223
7288 m.. -/-rwxrwxrwx 0
0
c:\/WINDOWS/INF/MFOSI.INF
0
545831 <part2.img107131 m.. -rwxrwxrwx 0
_DD.VXD-dead-545831>
0
3898378
55125 m.. -/-rwxrwxrwx 0
c:\/WINDOWS/INF/OTHER/MicrosoftMSDISP.INF (MICROS~2.INF)
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
18944 m.. -/-rwxrwxrwx 0
0
342835
c:\/WINDOWS/SYSTEM/WINSPOOL.DRV
88064 m.c -/-rwxrwxrwx 0
0
327789
c:\/WINDOWS/CDPLAYER.EXE
33304 m.. -/-rwxrwxrwx 0
0
328446
c:\/WINDOWS/INF/MDMVV.INF
11013 m.. -/-rwxrwxrwx 0
0
328237
c:\/WINDOWS/INF/MSDOS.INF
19827 m.. -/-rwxrwxrwx 0
0
328254
c:\/WINDOWS/INF/NETAMD.INF
21797 m.. -/-rwxrwxrwx 0
0
328400
c:\/WINDOWS/INF/MDMRFI.INF
118272 m.. -/-rwxrwxrwx 0
0
342644
c:\/WINDOWS/SYSTEM/IMGSCAN.OCX
7746 m.. -/-rwxrwxrwx 0
0
1225229
c:\/PROGRA~1/ICW-IN~1/PHONE.ICW
18572 m.. -/-rwxrwxrwx 0
0
342581
c:\/WINDOWS/SYSTEM/SERIAL.VXD
83552 m.. -/-rwxrwxrwx 0
0
342914
c:\/WINDOWS/SYSTEM/GAPIA32.DLL
19566 m.. -/-rwxrwxrwx 0
0
545811
c:\/WINDOWS/SYSTEM/VMM32/_CACHE.VXD (deleted)
77312 m.. -/-rwxrwxrwx 0
0
327739
c:\/WINDOWS/TWAIN_32.DLL
59564 m.. -/-rwxrwxrwx 0
0
1201159
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/WINDOWS/SYSTEM/COLOR/MNB22G18.ICM
48640 m.. -/-rwxrwxrwx 0
0
3274764
c:\/WINDOWS/SYSTEM/VIEWERS/VSAMI.DLL
28448 m.. -/-rwxrwxrwx 0
0
328371
c:\/WINDOWS/INF/MDMLCE.INF
258048 m.. -/-rwxrwxrwx 0
0
1243653
c:\/PROGRA~1/THEMIC~1/MSNSIG13.EXE
16782 m.. -/-rwxrwxrwx 0
0
328263
c:\/WINDOWS/INF/NETDCA.INF
4550 m.. -/-rwxrwxrwx 0
0
328311
c:\/WINDOWS/INF/SETUP.INF
11708 m.. -/-rwxrwxrwx 0
0
368175
c:\/WINDOWS/HELP/NOTEPAD.HLP
829 m.. -/-rwxrwxrwx 0
0
551942
c:\/PROGRA~1/ACCESS~1/HYPERT~1/AT&T Mail.ht (AT&TMA~1.HT)
10560 m.. -/-rwxrwxrwx 0
0
342561
c:\/WINDOWS/SYSTEM/IOSCLASS.DLL
9216 m.. -/-rwxrwxrwx 0
0
343584
c:\/WINDOWS/COMMAND/START.EXE
5816 m.. -/-rwxrwxrwx 0
0
343041
c:\/WINDOWS/SYSTEM/WSHTCP.VXD
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
2000 m.. -/-rwxrwxrwx 0
0
342904
c:\/WINDOWS/SYSTEM/WINNET16.DLL
4416 m.. -/-rwxrwxrwx 0
0
537630
c:\/PROGRA~1/NETMEE~1/MNMCPI_.DLL
35511 m.. -/-rwxrwxrwx 0
0
342579
c:\/WINDOWS/SYSTEM/LPT.VXD
9056 m.. -/-rwxrwxrwx 0
0
342713
c:\/WINDOWS/SYSTEM/WFM0202.ACV
16149 m.. -/-rwxrwxrwx 0
0
328294
c:\/WINDOWS/INF/NETTCC.INF
8274 m.. -/-rwxrwxrwx 0
0
2172933
c:\/WINDOWS/CURSORS/APPSTART.ANI
24220 m.. -/-rwxrwxrwx 0
0
328359
c:\/WINDOWS/INF/MDMHANDY.INF
26496 m.. -/-rwxrwxrwx 0
0
1360901
c:\/PROGRA~1/WINDOW~1/MLSHEXT.DLL
1518 m.. -/-rwxrwxrwx 0
0
2257935
c:\/WINDOWS/SHELLNEW/EXCEL4.XLS
2471 m.. -/-rwxrwxrwx 0
0
2885642
c:\/PROGRA~1/ONLINE~1/AT&T/EASYBTN.GIF
0
1574
21872 m.. -/-rwxrwxrwx 0
c:\/WINDOWS/SYSBCKUP/MSACM.DRV
0
342771
1312 m.. -/-rwxrwxrwx 0
c:\/WINDOWS/SYSTEM/RSRC16.DLL
0
1552
153040 m.. -/-rwxrwxrwx 0
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/WINDOWS/SYSBCKUP/OLE2NLS.DLL
0
2257928
4570 m.. -/-rwxrwxrwx 0
c:\/WINDOWS/SHELLNEW/AMIPRO.SAM
0
545818
18578 m.. -/-rwxrwxrwx 0
c:\/WINDOWS/SYSTEM/VMM32/_MCPD.VXD (deleted)
0
368174
88385 m.. -/-rwxrwxrwx 0
c:\/WINDOWS/HELP/NETWORK.HLP
0
342924
247808 m.. -/-rwxrwxrwx 0
c:\/WINDOWS/SYSTEM/JSCRIPT.DLL
0
342890
5632 m.. -/-rwxrwxrwx 0
c:\/WINDOWS/SYSTEM/LZ32.DLL
1569
1264 m.. -/-rwxrwxrwx 0
0
c:\/WINDOWS/SYSBCKUP/MSMIXMGR.DLL
812406 m.. -/-rwxrwxrwx 0
0
1308677
c:\/WINDOWS/JAVA/CLASSES/CLASSES.ZIP
36864 m.. -/-rwxrwxrwx 0
0
342692
c:\/WINDOWS/SYSTEM/MOSCL.DLL
0
6740494
289552 m.. -/--wx-wx-wx 0
c:\/TEMP/Wininet.dll (WININET.DLL)
0
2885643
2501 m.. -/-rwxrwxrwx 0
c:\/PROGRA~1/ONLINE~1/AT&T/JUMPER.GIF
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
924432 m.. -/-rwxrwxrwx 0
0
342553
c:\/WINDOWS/SYSTEM/MFC40.DLL
95481 m.. -/-rwxrwxrwx 0
0
342999
c:\/WINDOWS/SYSTEM/VNBT.386
12751 m.. -/-rwxrwxrwx 0
0
328266
c:\/WINDOWS/INF/NETDLC.INF
47104 m.. -/-rwxrwxrwx 0
0
342783
c:\/WINDOWS/SYSTEM/MSCONF.DLL
34978 m.. -/-rwxrwxrwx 0
0
328328
c:\/WINDOWS/INF/MDMBLATZ.INF
31737 m.. -/-rwxrwxrwx 0
0
328210
c:\/WINDOWS/INF/FONTS.INF
18480 m.. -/-rwxrwxrwx 0
0
342885
c:\/WINDOWS/SYSTEM/WAVEWRAP.DRV
45752 m.. -/-rwxrwxrwx 0
0
343034
c:\/WINDOWS/SYSTEM/NETBEUI.VXD
82944 m.. -/-rwxrwxrwx 0
0
342657
c:\/WINDOWS/SYSTEM/ICWPHBK.DLL
3158 m.. -/-rwxrwxrwx 0
0
537606
c:\/PROGRA~1/NETMEE~1/OBSCURE.BMP
86016 m.. -/-rwxrwxrwx 0
0
537614
c:\/PROGRA~1/NETMEE~1/OSSAPI.DLL
3996 m.. -/-rwxrwxrwx 0
0
2885637
c:\/PROGRA~1/ONLINE~1/AT&T/ACCESBTN.GIF
24795 m.. -/-rwxrwxrwx 0
0
328231
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/WINDOWS/INF/MONITOR6.INF
42300 m.. -/-rwxrwxrwx 0
0
328230
c:\/WINDOWS/INF/MONITOR4.INF
155408 m.c -/-rwxrwxrwx 0
0
327778
c:\/WINDOWS/WINFILE.EXE
3155 m.. -/-rwxrwxrwx 0
0
328293
c:\/WINDOWS/INF/NETSOCK.INF
5721 m.. -/-rwxrwxrwx 0
0
545821
c:\/WINDOWS/SYSTEM/VMM32/_SD.VXD (deleted)
27136 m.. -/-rwxrwxrwx 0
0
342622
c:\/WINDOWS/SYSTEM/AWKRNL32.DLL
17817 m.. -/-rwxrwxrwx 0
0
328274
c:\/WINDOWS/INF/NETIBM.INF
12800 m.. -/-rwxrwxrwx 0
0
342746
c:\/WINDOWS/SYSTEM/MCICDA.DRV
71904 m.. -/-rwxrwxrwx 0
0
932871
c:\/PROGRA~1/PLUS!/SYSTEM/NOCOMP.EXE
10992 m.. -/-r-xr-xr-x 0
0
765972
c:\/WINDOWS/FONTS/8514FIX.FON
16479 m.. -/-rwxrwxrwx 0
0
328260
c:\/WINDOWS/INF/NETCLI.INF
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
263 m.. -/-rwxrwxrwx 0
0
368249
c:\/WINDOWS/HELP/SYSMON.CNT
52080 m.. -/-rwxrwxrwx 0
0
342701
c:\/WINDOWS/SYSTEM/MODEM.CPL
13312 m.. -/-rwxrwxrwx 0
0
343022
c:\/WINDOWS/SYSTEM/SVRAPI.DLL
37734 m.. -/-rwxrwxrwx 0
0
3874313
c:\/WINDOWS/SYSTEM/DXBACKUP/DISPLAY/k2v_swc.ini (K2V_SWC.INI)
9872 m.. -/-rwxrwxrwx 0
0
537641
c:\/PROGRA~1/NETMEE~1/MNMTDD_.DLL
49543 m.. -/-rwxrwxrwx 0
0
343560
c:\/WINDOWS/COMMAND/FORMAT.COM
829 m.. -rwxrwxrwx 0
0
551946 <part2.img-_CI.HTdead-551946>
3570 m.. -/-rwxrwxrwx 0
0
1194520
c:\/WINDOWS/DESKTOP/ONLINE~1/About The Online Services.txt
(ABOUTT~1.TXT)
13905 m.. -/-rwxrwxrwx 0
0
545806
c:\/WINDOWS/SYSTEM/VMM32/_AGESWAP.VXD (deleted)
0
343000
47377 m.. -/-rwxrwxrwx 0
c:\/WINDOWS/SYSTEM/VTCP.386
0
368138
940 m.. -/-rwxrwxrwx 0
c:\/WINDOWS/HELP/PACKAGER.CNT
0
368239
206 m.. -/-rwxrwxrwx 0
c:\/WINDOWS/HELP/MSHEARTS.CNT
Key fingerprint = AF19
FA27
998Drwx
FDB5
06E4 A169 4E46
0 DE3D
0 F8B5
342762
27632
m.. 2F94
-/-rwxrwx
c:\/WINDOWS/SYSTEM/CTL3DV2.DLL
0
537649
32640 m.. -/-rwxrwxrwx 0
c:\/PROGRA~1/NETMEE~1/MNMWB_.DLL
0
342926
82112 m.. -/-rwxrwxrwx 0
c:\/WINDOWS/SYSTEM/MSRATING.DLL
0
342852
63488 m.. -/-rwxrwxrwx 0
c:\/WINDOWS/SYSTEM/APPWIZ.CPL
0
328336
33941 m.. -/-rwxrwxrwx 0
c:\/WINDOWS/INF/MDMCPI.INF
0
2885658
1078 m.. -/-rwxrwxrwx 0
c:\/PROGRA~1/ONLINE~1/AT&T/ATTWNS.ICO
0
10430472
74000 m.. -/-rwxrwxrwx 0
c:\/WINDOWS/SYSTEM/BACKUP/olepro32.dll (OLEPRO32.DLL)
0
545814
41844 m.. -/-rwxrwxrwx 0
c:\/WINDOWS/SYSTEM/VMM32/_DMAD.VXD (deleted)
0
342698
17408 m.c -/-rwxrwxrwx 0
c:\/WINDOWS/SYSTEM/MSNEXCH.EXE
0
328219
54600 m.. -/-rwxrwxrwx 0
c:\/WINDOWS/INF/LAYOUT.INF
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
5856 m.. -/-rwxrwxrwx 0
0
342577
c:\/WINDOWS/SYSTEM/COMM.DRV
153040 m.. -/-rwxrwxrwx 0
0
342805
c:\/WINDOWS/SYSTEM/OLE2NLS.DLL
9929 m.. -/-rwxrwxrwx 0
0
685581
c:\/WINDOWS/SYSTEM/IOSUBSYS/NECATAPI.VXD
90521 m.. -/-rwxrwxrwx 0
0
545837
c:\/WINDOWS/SYSTEM/VMM32/_ONFIGMG.VXD (deleted)
16614 m.. -/-rwxrwxrwx 0
0
368187
c:\/WINDOWS/HELP/PSSPOS.HLP
12688 m.. -/-rwxrwxrwx 0
0
342684
c:\/WINDOWS/SYSTEM/KEYBOARD.DRV
21260 m.. -/-rwxrwxrwx 0
0
537622
c:\/PROGRA~1/NETMEE~1/BLIP.WAV
82684 m.. -/-rwxrwxrwx 0
0
368221
c:\/WINDOWS/HELP/RAPLAYER.HLP
41472 m.. -/-rwxrwxrwx 0
0
342659
c:\/WINDOWS/SYSTEM/ISIGN32.DLL
10752 m.. -/-rwxrwxrwx 0
0
342784
c:\/WINDOWS/SYSTEM/MSIPRT.DLL
84954 m.. -/-rwxrwxrwx 0
0
2885647
c:\/PROGRA~1/ONLINE~1/AT&T/ROADPAGE.GIF
23553 m.. -/-rwxrwxrwx 0
0
328341
c:\/WINDOWS/INF/MDMDICOM.INF
18448 m.. -/-rwxrwxrwx 0
0
537642
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/PROGRA~1/NETMEE~1/MNMTDDM_.DLL
24919 m.. -/-rwxrwxrwx 0
0
328213
c:\/WINDOWS/INF/IMAGEVUE.INF
7744 m.. -/-rwxrwxrwx 0
0
342751
c:\/WINDOWS/SYSTEM/MSJSTICK.DRV
19193 m.. -/-rwxrwxrwx 0
0
368143
c:\/WINDOWS/HELP/DIALER.HLP
48640 m.. -/-rwxrwxrwx 0
0
342584
c:\/WINDOWS/SYSTEM/INTL.CPL
35602 m.. -/-rwxrwxrwx 0
0
328225
c:\/WINDOWS/INF/MMOPT.INF
291735 m.. -/-rwxrwxrwx 0
0
368155
c:\/WINDOWS/HELP/WANGOCXD.HLP
14032 m.. -/-rwxrwxrwx 0
0
327781
c:\/WINDOWS/NDDEAPI.DLL
30630 m.. -/-rwxrwxrwx 0
0
328398
c:\/WINDOWS/INF/MDMPRODM.INF
38400 m.. -/-rwxrwxrwx 0
0
342927
c:\/WINDOWS/SYSTEM/NPRA32.DLL
221696 m.. -/-rwxrwxrwx 0
0
342666
c:\/WINDOWS/SYSTEM/MSAWT.DLL
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
38400 m.c -/-rwxrwxrwx 0
0
1306632
c:\/PROGRA~1/INTERN~1/IEXPLORE.EXE
3552 m.. -/-rwxrwxrwx 0
0
342834
c:\/WINDOWS/SYSTEM/WINSPL16.DRV
28561 m.. -/-rwxrwxrwx 0
0
327734
c:\/WINDOWS/TIPS.TXT
342 m.. -/-rwxrwxrwx 0
0
368227
c:\/WINDOWS/HELP/FILEXFER.CNT
1894 m.. -/-rwxrwxrwx 0
0
368199
c:\/WINDOWS/HELP/CONF.CNT
18487 m.. -/-rwxrwxrwx 0
0
685580
c:\/WINDOWS/SYSTEM/IOSUBSYS/VOLTRACK.VXD
2257926
1769 m.. -/-rwxrwxrwx 0
0
c:\/WINDOWS/SHELLNEW/WINWORD2.DOC
0
3274779
28672 m.. -/-rwxrwxrwx 0
c:\/WINDOWS/SYSTEM/VIEWERS/VSWORK.DLL
0
545825
10401 m.. -/-rwxrwxrwx 0
c:\/WINDOWS/SYSTEM/VMM32/_OMBUFF.VXD (deleted)
0
343015
9200 m.. -/-rwxrwxrwx 0
c:\/WINDOWS/SYSTEM/RPCLTC5.DLL
0
342892
4096 m.. -/-rwxrwxrwx 0
c:\/WINDOWS/SYSTEM/WOW32.DLL
0
328435
16156 m.. -/-rwxrwxrwx 0
c:\/WINDOWS/INF/MDMZOOM.INF
0
328414
41621 m.. -/-rwxrwxrwx 0
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/WINDOWS/INF/MDMTELIN.INF
342734
103248 m.. -/-rwxrwxrwx 0
0
c:\/WINDOWS/SYSTEM/MMSYSTEM.DLL
0
343575
5175 m.. -/-rwxrwxrwx 0
c:\/WINDOWS/COMMAND/CHOICE.COM
368139
21473 m.. -/-rwxrwxrwx 0
0
c:\/WINDOWS/HELP/HYPERTRM.HLP
0
342944
194876 m.. -/-rwxrwxrwx 0
c:\/WINDOWS/SYSTEM/DSKAPI16.DLL
0
342660
87552 m.. -/-rwxrwxrwx 0
c:\/WINDOWS/SYSTEM/URL.DLL
0
328428
44991 m.. -/-rwxrwxrwx 0
c:\/WINDOWS/INF/MDMUSRSP.INF
0
328432
24735 m.. -/-rwxrwxrwx 0
c:\/WINDOWS/INF/MDMVICT.INF
16855 m.. -rwxrwxrwx 0
0
545816 <part2.img_FBACKUP.VXD-dead-545816>
0
342799
134022 m.. -/-rwxrwxrwx 0
c:\/WINDOWS/SYSTEM/LOCALE.NLS
0
342832
14336 m.. -/-rwxrwxrwx 0
c:\/WINDOWS/SYSTEM/ADDREG.EXE
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
17172 m.. -/-rwxrwxrwx 0
0
368186
c:\/WINDOWS/HELP/ACCESSIB.HLP
123904 m.c -/-rwxrwxrwx 0
0
1225226
c:\/PROGRA~1/ICW-IN~1/ICWCONN1.EXE
62138 m.. -/-rwxrwxrwx 0
0
368189
c:\/WINDOWS/HELP/MSNINT.HLP
50051 m.. -/-rwxrwxrwx 0
0
328429
c:\/WINDOWS/INF/MDMUSRWP.INF
37734 m.. -/-rwxrwxrwx 0
0
327902
c:\/WINDOWS/K2V_SWC.INI
24099 m.. -/-rwxrwxrwx 0
0
327883
c:\/WINDOWS/TELNET.HLP
13824 m.. -/-rwxrwxrwx 0
0
342861
c:\/WINDOWS/SYSTEM/LINKINFO.DLL
23847 m.. -/-rwxrwxrwx 0
0
3345925
c:\/WINDOWS/SYSTEM/S3MM.VXD
22617 m.. -/-rwxrwxrwx 0
0
537655
c:\/PROGRA~1/NETMEE~1/NETMEET.TXT
32240 m.. -/-rwxrwxrwx 0
0
1557
c:\/WINDOWS/SYSBCKUP/DDEML.DLL
5632 m.. -/-rwxrwxrwx 0
0
2257934
c:\/WINDOWS/SHELLNEW/EXCEL.XLS
36144 m.. -/-rwxrwxrwx 0
0
342702
c:\/WINDOWS/SYSTEM/MODEMUI.DLL
11747 m.. -/-rwxrwxrwx 0
0
2885661
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/PROGRA~1/ONLINE~1/AT&T/BALLOON.JPG
31120 m.. -/-rwxrwxrwx 0
0
342801
c:\/WINDOWS/SYSTEM/COMPOBJ.DLL
6514 m.. -/-rwxrwxrwx 0
0
1201157
c:\/WINDOWS/SYSTEM/COLOR/HPSJTW.ICM
17920 m.. -/-rwxrwxrwx 0
0
537613
c:\/PROGRA~1/NETMEE~1/MSMCSTCP.DLL
24069 m.. -/-rwxrwxrwx 0
0
328430
c:\/WINDOWS/INF/MDMVAYRS.INF
22016 m.. -/-rwxrwxrwx 0
0
342748
c:\/WINDOWS/SYSTEM/MCIWAVE.DRV
11661 m.. -/-rwxrwxrwx 0
0
368243
c:\/WINDOWS/HELP/MSHEARTS.HLP
578 m.. -/-rwxrwxrwx 0
0
327711
c:\/WINDOWS/Tiles.bmp (TILES.BMP)
61680 m.. -/-rwxrwxrwx 0
0
342567
c:\/WINDOWS/SYSTEM/WINOA386.MOD
30720 m.. -/-rwxrwxrwx 0
0
342593
c:\/WINDOWS/SYSTEM/MF3216.DLL
32967 m.. -/-rwxrwxrwx 0
0
545827
c:\/WINDOWS/SYSTEM/VMM32/_COMM.VXD (deleted)
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
64544 m.. -/-r-xr-xr-x 0
0
765983
c:\/WINDOWS/FONTS/SSERIFE.FON
11776 m.. -/-rwxrwxrwx 0
0
342573
c:\/WINDOWS/SYSTEM/PKPD32.DLL
51712 m.. -/-rwxrwxrwx 0
0
3274781
c:\/WINDOWS/SYSTEM/VIEWERS/VSWP6.DLL
81744 m.. -/-r-xr-xr-x 0
0
765980
c:\/WINDOWS/FONTS/SERIFF.FON
53438 m.. -/-rwxrwxrwx 0
0
545829
c:\/WINDOWS/SYSTEM/VMM32/_COND.VXD (deleted)
214836 m.. -/---x--x--x 0
0
21
c:\/IO.SYS
0
3274759
40448 m.. -/-rwxrwxrwx 0
c:\/WINDOWS/SYSTEM/VIEWERS/DEMET.DLL
0
328342
34500 m.. -/-rwxrwxrwx 0
c:\/WINDOWS/INF/MDMDISCO.INF
0
342595
12112 m.. -/-rwxrwxrwx 0
c:\/WINDOWS/SYSTEM/TOOLHELP.DLL
0
328445
20345 m.. -/-rwxrwxrwx 0
c:\/WINDOWS/INF/MULLANG.INF
0
328365
26967 m.. -/-rwxrwxrwx 0
c:\/WINDOWS/INF/MDMINTPC.INF
0
545799 <part2.img106867 m.. -rwxrwxrwx 0
_OSMGR.VXD-dead-545799>
0
342648
231936 m.. -/-rwxrwxrwx 0
c:\/WINDOWS/SYSTEM/FTSRCH.DLL
Key fingerprint = AF19
FA27
998D FDB5
06E4 A169 4E46
0 F8B5
2885652
19216
m.. 2F94
-/-rwxrwxrwx
0 DE3D
c:\/PROGRA~1/ONLINE~1/AT&T/UNIVCARD.GIF
0
328354
36485 m.. -/-rwxrwxrwx 0
c:\/WINDOWS/INF/MDMGEN.INF
0
2462214
49664 m.c -/-rwxrwxrwx 0
c:\/PROGRA~1/ONLINE~1/AOL/AOLSETUP.EXE
0
368201
8042 m.. -/-rwxrwxrwx 0
c:\/WINDOWS/HELP/QFECHECK.HLP
0
328355
47472 m.. -/-rwxrwxrwx 0
c:\/WINDOWS/INF/MDMGVC.INF
0
327788
4513 m.. -/-rwxrwxrwx 0
c:\/WINDOWS/PWS.TXT
342638
12800 m.. -/-rwxrwxrwx 0
0
c:\/WINDOWS/SYSTEM/WANGSHL.DLL
0
2885638
1295 m.. -/-rwxrwxrwx 0
c:\/PROGRA~1/ONLINE~1/AT&T/ATTLOGO.GIF
0
765965
85152 m.. -/-rwxrwxrwx 0
c:\/WINDOWS/FONTS/COURBI.TTF
0
328394
25092 m.. -/-rwxrwxrwx 0
c:\/WINDOWS/INF/MDMPBIT.INF
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
57 m.. -/-rwxrwxrwx 0
0
2257933
c:\/WINDOWS/SHELLNEW/WORDPFCT.WPG
104960 m.. -/-rwxrwxrwx 0
0
342630
c:\/WINDOWS/SYSTEM/OIFIL400.DLL
202240 m.. -/-rwxrwxrwx 0
0
342903
c:\/WINDOWS/SYSTEM/RPCRT4.DLL
11904 m.. -/-rwxrwxrwx 0
0
342598
c:\/WINDOWS/SYSTEM/WIN87EM.DLL
5315 m.. -/-rwxrwxrwx 0
0
328224
c:\/WINDOWS/INF/MIDI.INF
15660 m.. -/-rwxrwxrwx 0
0
328201
c:\/WINDOWS/INF/AWFAX.INF
26624 m.. -/-rwxrwxrwx 0
0
342623
c:\/WINDOWS/SYSTEM/AWRESX32.DLL
113664 m.. -/-rwxrwxrwx 0
0
342742
c:\/WINDOWS/SYSTEM/MSVIDEO.DLL
17982 m.. -/-rwxrwxrwx 0
0
685593
c:\/WINDOWS/SYSTEM/IOSUBSYS/SMARTVSD.VXD
1784 m.. -/-rwxrwxrwx 0
0
342880
c:\/WINDOWS/SYSTEM/TAPIEXE.EXE
462112 m.. -/-rwxrwxrwx 0
0
342605
c:\/WINDOWS/SYSTEM/USER.EXE
67696 m.. -/-rwxrwxrwx 0
0
1578
c:\/WINDOWS/SYSBCKUP/MCIAVI.DRV
10268 m.. -/-rwxrwxrwx 0
0
368161
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/WINDOWS/HELP/UNIMDM.HLP
6824 m.. -/-rwxrwxrwx 0
0
342792
c:\/WINDOWS/SYSTEM/CP_20866.NLS
202 m.. -/-rwxrwxrwx 0
0
368207
c:\/WINDOWS/HELP/AMOVIE.CNT
20574 m.. -/-rwxrwxrwx 0
0
343578
c:\/WINDOWS/COMMAND/FC.EXE
6240 m.. -/-rwxrwxrwx 0
0
342848
c:\/WINDOWS/SYSTEM/SETUP4.DLL
9520 m.. -/-rwxrwxrwx 0
0
328245
c:\/WINDOWS/INF/MSPORTS.INF
34566 m.. -/-rwxrwxrwx 0
0
343591
c:\/WINDOWS/COMMAND/KEYBOARD.SYS
46656 m.. -/-rwxrwxrwx 0
0
343558
c:\/WINDOWS/COMMAND/EXTRACT.EXE
14926 m.. -/-rwxrwxrwx 0
0
545833
c:\/WINDOWS/SYSTEM/VMM32/_SHARE.VXD (deleted)
28160 m.. -/-rwxrwxrwx 0
0
3274777
c:\/WINDOWS/SYSTEM/VIEWERS/VSWMF.DLL
25088 m.. -/-rwxrwxrwx 0
0
3274770
c:\/WINDOWS/SYSTEM/VIEWERS/VSMP.DLL
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
202240 m.. -/-rwxrwxrwx 0
0
537612
c:\/PROGRA~1/NETMEE~1/MCSNC.DLL
25234 m.. -/-rwxrwxrwx 0
0
328257
c:\/WINDOWS/INF/NETCABLE.INF
8188 m.. -/-rwxrwxrwx 0
0
328333
c:\/WINDOWS/INF/MDMCODEX.INF
8651 m.. -/-rwxrwxrwx 0
0
368157
c:\/WINDOWS/HELP/AUDIOCDC.HLP
22127 m.. -/-rwxrwxrwx 0
0
545809
c:\/WINDOWS/SYSTEM/VMM32/_EBOOT.VXD (deleted)
11844 m.. -/-rwxrwxrwx 0
0
342755
c:\/WINDOWS/SYSTEM/MMDEVLDR.VXD
12339 m.. -/-rwxrwxrwx 0
0
368250
c:\/WINDOWS/HELP/NETWATCH.HLP
27507 m.. -/-rwxrwxrwx 0
0
368178
c:\/WINDOWS/HELP/WINHLP32.HLP
2830 m.. -/-rwxrwxrwx 0
0
328217
c:\/WINDOWS/INF/JOYSTICK.INF
5120 m.. -/-rwxrwxrwx 0
0
327699
c:\/WINDOWS/WRITE.EXE
60416 m.. -/-rwxrwxrwx 0
0
343004
c:\/WINDOWS/SYSTEM/MSNET32.DLL
28422 m.. -/-rwxrwxrwx 0
0
368145
c:\/WINDOWS/HELP/WORDPAD.HLP
1118 m.. -/-rwxrwxrwx 0
0
1065479
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/WINDOWS/WANGSAMP/IMGSAMPL.VBP
5320 m.. -/-rwxrwxrwx 0
0
342796
c:\/WINDOWS/SYSTEM/CP_28597.NLS
32768 m.. -/-rwxrwxrwx 0
0
342845
c:\/WINDOWS/SYSTEM/LIGHTS.EXE
37440 m.. -/-rwxrwxrwx 0
0
342679
c:\/WINDOWS/SYSTEM/ACTXPRXY.DLL
20554 m.. -/-rwxrwxrwx 0
0
343566
c:\/WINDOWS/COMMAND/DEBUG.EXE
6624 m.. -/-rwxrwxrwx 0
0
342828
c:\/WINDOWS/SYSTEM/PCIMP.PCI
3111 m.. -/-rwxrwxrwx 0
0
2885653
c:\/PROGRA~1/ONLINE~1/AT&T/WORLDBTN.GIF
9801 m.. -rwxrwxrwx 0
0
545807 <part2.img_ARITY.VXD-dead-545807>
37520 m.. -/-rwxrwxrwx 0
0
327806
c:\/WINDOWS/FTP.EXE
14336 m.. -/-rwxrwxrwx 0
0
1225228
c:\/PROGRA~1/ICW-IN~1/ISIGNUP.EXE
164352 m.. -/-r-xr-xr-x 0
0
551430
c:\/PROGRA~1/ACCESS~1/mswd6_32.wpc (MSWD6_32.WPC)
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
47506 m.. -/-rwxrwxrwx 0
0
368180
c:\/WINDOWS/HELP/31USERS.HLP
867 m.. -/-rwxrwxrwx 0
0
328305
c:\/WINDOWS/INF/PCMCIAMF.INF
27530 m.. -/-rwxrwxrwx 0
0
328395
c:\/WINDOWS/INF/MDMPHILS.INF
135876 m.. -/-rwxrwxrwx 0
0
1687557
c:\/WINDOWS/MEDIA/_SSOUND.WAV (deleted)
578 m.. -/-rwxrwxrwx 0
0
327709
c:\/WINDOWS/Pinstripe.bmp (PINSTR~1.BMP)
17993 m.. -/-rwxrwxrwx 0
0
545802
c:\/WINDOWS/SYSTEM/VMM32/_BIOS.VXD (deleted)
312208 m.. -/-rwxrwxrwx 0
0
342601
c:\/WINDOWS/SYSTEM/GDI.EXE
183296 m.c -/-rwxrwxrwx 0
0
551434
c:\/PROGRA~1/ACCESS~1/WORDPAD.EXE
4828 m.. -/-rwxrwxrwx 0
0
328295
c:\/WINDOWS/INF/NETTDKP.INF
2416 m.. -/-rwxrwxrwx 0
0
1563
c:\/WINDOWS/SYSBCKUP/WINHELP.EXE
133392 m.. -/-rwxrwxrwx 0
0
342556
c:\/WINDOWS/SYSTEM/MFCO30.DLL
23025 m.. -/-rwxrwxrwx 0
0
343030
c:\/WINDOWS/SYSTEM/FILESEC.VXD
26608 m.. -/-rwxrwxrwx 0
0
343012
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/WINDOWS/SYSTEM/PMSPL.DLL
64512 m.. -/-rwxrwxrwx 0
0
3274769
c:\/WINDOWS/SYSTEM/VIEWERS/VSFLW.DLL
53438 m.. -rwxrwxrwx 0
0
545829 <part2.img_COND.VXD-dead-545829>
10848 m.. -/-rwxrwxrwx 0
0
685585
c:\/WINDOWS/SYSTEM/IOSUBSYS/NCRC810.MPD
5632 m.. -/-rwxrwxrwx 0
0
537652
c:\/PROGRA~1/NETMEE~1/MNMOM.EXE
31232 m.. -/-rwxrwxrwx 0
0
327772
c:\/WINDOWS/GRPCONV.EXE
35608 m.. -/-rwxrwxrwx 0
0
328204
c:\/WINDOWS/INF/CEMMF.INF
26982 m.. -rwxrwxrwx 0
0
545801 <part2.img_YNAPAGE.VXD-dead-545801>
4128 m.. -/-rwxrwxrwx 0
0
342753
c:\/WINDOWS/SYSTEM/SBFM.DRV
42485 m.. -/-rwxrwxrwx 0
0
327723
c:\/WINDOWS/FAQ.TXT
28232 m.. -/-rwxrwxrwx 0
0
328362
c:\/WINDOWS/INF/MDMINFOT.INF
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
23834 m.. -/-r-xr-xr-x 0
0
551445
c:\/PROGRA~1/ACCESS~1/backup.cfg (BACKUP.CFG)
462336 m.c -/-rwxrwxrwx 0
0
537619
c:\/PROGRA~1/NETMEE~1/CONF.EXE
18546 m.. -rwxrwxrwx 0
0
545823 <part2.img_TDAPI.VXD-dead-545823>
69120 m.. -/-rwxrwxrwx 0
0
1306633
c:\/PROGRA~1/INTERN~1/INFINST.EXE
4125 m.. -/-rwxrwxrwx 0
0
328271
c:\/WINDOWS/INF/NETFTP.INF
13905 m.. -rwxrwxrwx 0
0
545806 <part2.img_AGESWAP.VXD-dead-545806>
17920 m.. -/-rwxrwxrwx 0
0
3274765
c:\/WINDOWS/SYSTEM/VIEWERS/VSASC8.DLL
5632 m.. -/-rwxrwxrwx 0
0
342570
c:\/WINDOWS/SYSTEM/NTDLL.DLL
919 m.. -/-rwxrwxrwx 0
0
368202
c:\/WINDOWS/HELP/PROGMAN.CNT
135876 m.. -rwxrwxrwx 0
0
1687557 <part2.img_SSOUND.WAV-dead-1687557>
42368 m.. -/-rwxrwxrwx 0
0
1579
c:\/WINDOWS/SYSBCKUP/WINSOCK.DLL
6928 m.. -/-rwxrwxrwx 0
0
342727
c:\/WINDOWS/SYSTEM/DCIMAN.DLL
3186 m.. -/-rwxrwxrwx 0
0
342948
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/WINDOWS/SYSTEM/RSACI.RAT
3878 m.. -/-rwxrwxrwx 0
0
343586
c:\/WINDOWS/COMMAND/XCOPY.EXE
59904 m.. -/-rwxrwxrwx 0
0
342723
c:\/WINDOWS/SYSTEM/AVICAP32.DLL
4788 m.. -/-rwxrwxrwx 0
0
328197
c:\/WINDOWS/INF/ADAPTER.INF
7968 m.. -/-r-xr-xr-x 0
0
765978
c:\/WINDOWS/FONTS/MODERN.FON
12288 m.. -/-rwxrwxrwx 0
0
342813
c:\/WINDOWS/SYSTEM/OLECLI32.DLL
106867 m.. -/-rwxrwxrwx 0
0
545799
c:\/WINDOWS/SYSTEM/VMM32/_OSMGR.VXD (deleted)
93812 m.c -/-rwxrwxrwx 0
0
327792
c:\/WINDOWS/COMMAND.COM
11794 m.. -/-rwxrwxrwx 0
0
327726
c:\/WINDOWS/INTERNET.TXT
24352 m.. -/-r-xr-xr-x 0
0
765981
c:\/WINDOWS/FONTS/SMALLE.FON
441905 m.. -/-rwxrwxrwx 0
0
342612
c:\/WINDOWS/SYSTEM/MINI.CAB
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
6658 m.. -/-rwxrwxrwx 0
0
343579
c:\/WINDOWS/COMMAND/FIND.EXE
5184 m.. -/-rwxrwxrwx 0
0
342712
c:\/WINDOWS/SYSTEM/WFM0201.ACV
153 m.. -/-rwxrwxrwx 0
0
328255
c:\/WINDOWS/INF/NETAUXT.INF
2634 m.. -/-rwxrwxrwx 0
0
328269
c:\/WINDOWS/INF/NETEVX.INF
61952 m.. -/-rwxrwxrwx 0
0
343003
c:\/WINDOWS/SYSTEM/MSAB32.DLL
9687 m.. -/-rwxrwxrwx 0
0
328390
c:\/WINDOWS/INF/MDMOPT1.INF
177856 m.. -/-rwxrwxrwx 0
0
342809
c:\/WINDOWS/SYSTEM/TYPELIB.DLL
81644 m.. -/-rwxrwxrwx 0
0
342907
c:\/WINDOWS/SYSTEM/RPCSS.EXE
20480 m.. -/-rwxrwxrwx 0
0
342863
c:\/WINDOWS/SYSTEM/PANMAP.DLL
103992 m.. -/-rwxrwxrwx 0
0
765992
c:\/WINDOWS/FONTS/ARIBLK.TTF
150528 m.. -/-rwxrwxrwx 0
0
342639
c:\/WINDOWS/SYSTEM/XFILEXR.DLL
52224 m.. -/-rwxrwxrwx 0
0
342636
c:\/WINDOWS/SYSTEM/OIUI400.DLL
14160 m.. -/-rwxrwxrwx 0
0
342916
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/WINDOWS/SYSTEM/HLINKPRX.DLL
100 m.. -/-rwxrwxrwx 0
0
368150
c:\/WINDOWS/HELP/WANGOCX.CNT
43008 m.. -/-rwxrwxrwx 0
0
3274780
c:\/WINDOWS/SYSTEM/VIEWERS/VSWP5.DLL
26555 m.. -/-rwxrwxrwx 0
0
328348
c:\/WINDOWS/INF/MDMERIC.INF
157 m.. -/-rwxrwxrwx 0
0
368240
c:\/WINDOWS/HELP/SOL.CNT
19019 m.. -/-rwxrwxrwx 0
0
343577
c:\/WINDOWS/COMMAND/DELTREE.EXE
57344 m.. -/-rwxrwxrwx 0
0
342958
c:\/WINDOWS/SYSTEM/FTE.DLL
7712 m.. -/-rwxrwxrwx 0
0
342758
c:\/WINDOWS/SYSTEM/MOUSE.DRV
5448 m.. -/-rwxrwxrwx 0
0
342795
c:\/WINDOWS/SYSTEM/CP_28594.NLS
28539 m.. -/-rwxrwxrwx 0
0
328404
c:\/WINDOWS/INF/MDMROCK4.INF
11264 m.. -/-rwxrwxrwx 0
0
342850
c:\/WINDOWS/SYSTEM/RUNONCE.EXE
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
27973 m.. -/-rwxrwxrwx 0
0
342997
c:\/WINDOWS/SYSTEM/VDHCP.386
48644 m.. -/-rwxrwxrwx 0
0
328221
c:\/WINDOWS/INF/MACHINE.INF
69632 m.. -/-rwxrwxrwx 0
0
327741
c:\/WINDOWS/TWUNK_32.EXE
4608 m.. -/-rwxrwxrwx 0
0
1306631
c:\/PROGRA~1/INTERN~1/INST32.DLL
103 m.. -/-rwxrwxrwx 0
0
368158
c:\/WINDOWS/HELP/APMCP.CNT
1 m.. -/-rwxrwxrwx 0
0
342715
c:\/WINDOWS/SYSTEM/MIDIMAP.CFG
148528 m.. -/-rwxrwxrwx 0
0
3345929
c:\/WINDOWS/SYSTEM/CARDS.DLL
50070 m.. -/-rwxrwxrwx 0
0
328425
c:\/WINDOWS/INF/MDMUSRCR.INF
7723 m.. -rwxrwxrwx 0
0
545832 <part2.img_FLATD.VXD-dead-545832>
67072 m.. -/-rwxrwxrwx 0
0
342585
c:\/WINDOWS/SYSTEM/MAIN.CPL
67696 m.. -/-rwxrwxrwx 0
0
342745
c:\/WINDOWS/SYSTEM/MCIAVI.DRV
18736 m.. -/-rwxrwxrwx 0
0
342747
c:\/WINDOWS/SYSTEM/MCISEQ.DRV
15104 m.. -/-rwxrwxrwx 0
0
342945
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/WINDOWS/SYSTEM/SIGRES.EXE
227840 m.. -/-rwxrwxrwx 0
0
342787
c:\/WINDOWS/SYSTEM/ODBCJT32.DLL
53248 m.. -/-rwxrwxrwx 0
0
537637
c:\/PROGRA~1/NETMEE~1/MNMNET_.DLL
14160 m.. -/-rwxrwxrwx 0
0
342886
c:\/WINDOWS/SYSTEM/SERWAVE.VXD
95387 m.. -/-rwxrwxrwx 0
0
545810
c:\/WINDOWS/SYSTEM/VMM32/_86MMGR.VXD (deleted)
25600 m.. -/-rwxrwxrwx 0
0
537640
c:\/PROGRA~1/NETMEE~1/MNMTAPM_.DLL
189 m.. -/-rwxrwxrwx 0
0
1225231
c:\/PROGRA~1/ICW-IN~1/MSICW.ISP
21733 m.. -/-rwxrwxrwx 0
0
328281
c:\/WINDOWS/INF/NETOLI.INF
65024 m.. -/-rwxrwxrwx 0
0
327914
c:\/WINDOWS/SYSMON.EXE
2169 m.. -/-rwxrwxrwx 0
0
368203
c:\/WINDOWS/HELP/WINFILE.CNT
59980 m.. -/-rwxrwxrwx 0
0
1201166
c:\/WINDOWS/SYSTEM/COLOR/MNP22G21.ICM
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
26987 m.. -/-rwxrwxrwx 0
0
328351
c:\/WINDOWS/INF/MDMEYP.INF
24805 m.. -/-rwxrwxrwx 0
0
328299
c:\/WINDOWS/INF/NETXIR.INF
21657 m.. -/-rwxrwxrwx 0
0
343031
c:\/WINDOWS/SYSTEM/MSSP.VXD
2135 m.. -/-rwxrwxrwx 0
0
343594
c:\/WINDOWS/COMMAND/DRVSPACE.SYS
99376 m.. -/-rwxrwxrwx 0
0
342918
c:\/WINDOWS/SYSTEM/IMAGEHLP.DLL
23985 m.. -/-rwxrwxrwx 0
0
328356
c:\/WINDOWS/INF/MDMGVCD.INF
11776 m.. -/-rwxrwxrwx 0
0
342621
c:\/WINDOWS/SYSTEM/AWDENC32.DLL
11637 m.. -/-rwxrwxrwx 0
0
342846
c:\/WINDOWS/SYSTEM/LOGGER.VXD
13101 m.. -/-rwxrwxrwx 0
0
368172
c:\/WINDOWS/HELP/MFCUIX.HLP
1632 m.. -/-rwxrwxrwx 0
0
343027
c:\/WINDOWS/SYSTEM/NETWARE.DRV
6816 m.. -/-rwxrwxrwx 0
0
328262
c:\/WINDOWS/INF/NETCPQ.INF
601 m.. -/-rwxrwxrwx 0
0
342950
c:\/WINDOWS/SYSTEM/ISO88591.TRN
20480 m.. -/-rwxrwxrwx 0
0
342634
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/WINDOWS/SYSTEM/OISSQ400.DLL
13912 m.. -/-rwxrwxrwx 0
0
545800
c:\/WINDOWS/SYSTEM/VMM32/_OSNET.VXD (deleted)
43152 m.. -/-rwxrwxrwx 0
0
342616
c:\/WINDOWS/SYSTEM/IMNIMP.DLL
66048 m.. -/-rwxrwxrwx 0
0
342689
c:\/WINDOWS/SYSTEM/FTMAPI.DLL
7397 m.. -/-rwxrwxrwx 0
0
328218
c:\/WINDOWS/INF/KEYBOARD.INF
89680 m.. -/-r-xr-xr-x 0
0
765984
c:\/WINDOWS/FONTS/SSERIFF.FON
12288 m.. -/-rwxrwxrwx 0
0
2257927
c:\/WINDOWS/SHELLNEW/POWERPNT.PPT
109229 m.. -/-rwxrwxrwx 0
0
327892
c:\/WINDOWS/NET.MSG
30807 m.. -/-rwxrwxrwx 0
0
368134
c:\/WINDOWS/HELP/NDSNP.HLP
57437 m.. -/-rwxrwxrwx 0
0
342790
c:\/WINDOWS/SYSTEM/QIC117.VXD
10026 m.. -/-rwxrwxrwx 0
0
537623
c:\/PROGRA~1/NETMEE~1/RINGIN.WAV
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
55964 m.. -/-rwxrwxrwx 0
0
328228
c:\/WINDOWS/INF/MONITOR2.INF
59980 m.. -/-rwxrwxrwx 0
0
1201165
c:\/WINDOWS/SYSTEM/COLOR/MNP22G18.ICM
1891 m.. -/-rwxrwxrwx 0
0
328249
c:\/WINDOWS/INF/MTD.INF
98872 m.. -/-rwxrwxrwx 0
0
765963
c:\/WINDOWS/FONTS/COUR.TTF
35436 m.. -/-rwxrwxrwx 0
0
328327
c:\/WINDOWS/INF/MDMAUS.INF
19566 m.. -rwxrwxrwx 0
0
545811 <part2.img_CACHE.VXD-dead-545811>
62629 m.. -/-rwxrwxrwx 0
0
328317
c:\/WINDOWS/INF/WAVE.INF
6010 m.. -/-rwxrwxrwx 0
0
328211
c:\/WINDOWS/INF/GPS.INF
34746 m.. -/-rwxrwxrwx 0
0
328378
c:\/WINDOWS/INF/MDMMIX.INF
473 m.. -/-rwxrwxrwx 0
0
2885655
c:\/PROGRA~1/ONLINE~1/AT&T/HEADLINE.HTM
38400 m.. -/-rwxrwxrwx 0
0
327751
c:\/WINDOWS/SCRIPT.DOC
76288 m.. -/-rwxrwxrwx 0
0
342642
c:\/WINDOWS/SYSTEM/IMGADMIN.OCX
6960 m.. -/-rwxrwxrwx 0
0
343026
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/WINDOWS/SYSTEM/WSASRV.EXE
582 m.. -/-rwxrwxrwx 0
0
327855
c:\/WINDOWS/Carved Stone.bmp (CARVED~1.BMP)
31088 m.. -/-rwxrwxrwx 0
0
328424
c:\/WINDOWS/INF/MDMUCOM.INF
32815 m.. -rwxrwxrwx 0
0
545835 <part2.img_MOUSE.VXD-dead-545835>
25304 m.. -/-rwxrwxrwx 0
0
328335
c:\/WINDOWS/INF/MDMCOMMU.INF
21429 m.. -rwxrwxrwx 0
0
545836 <part2.img_IOS.VXD-dead-545836>
12132 m.. -/-rwxrwxrwx 0
0
328340
c:\/WINDOWS/INF/MDMDGITN.INF
1121 m.. -/-rwxrwxrwx 0
0
327912
c:\/WINDOWS/DRVSPACE.INF
27235 m.. -/-rwxrwxrwx 0
0
343582
c:\/WINDOWS/COMMAND/MOVE.EXE
5168 m.. -/-r-xr-xr-x 0
0
765988
c:\/WINDOWS/FONTS/VGAOEM.FON
36352 m.. -/-rwxrwxrwx 0
0
327771
c:\/WINDOWS/FONTVIEW.EXE
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
2629 m.. -/-rwxrwxrwx 0
0
2885649
c:\/PROGRA~1/ONLINE~1/AT&T/SIGNBTN.GIF
84412 m.. -/-rwxrwxrwx 0
0
327767
c:\/WINDOWS/MORICONS.DLL
4543 m.. -/-rwxrwxrwx 0
0
328291
c:\/WINDOWS/INF/NETSMCTR.INF
6007 m.. -/-rwxrwxrwx 0
0
327888
c:\/WINDOWS/SERVICES
13900 m.. -/-rwxrwxrwx 0
0
328415
c:\/WINDOWS/INF/MDMTELNK.INF
65024 m.. -/-rwxrwxrwx 0
0
327697
c:\/WINDOWS/PACKAGER.EXE
164352 m.. -/-rwxrwxrwx 0
0
551435
c:\/PROGRA~1/ACCESS~1/_SWD6_32.WPC (deleted)
19568 m.. -/-rwxrwxrwx 0
0
342673
c:\/WINDOWS/SYSTEM/WINSSPI.DLL
27471 m.. -/-rwxrwxrwx 0
0
328244
c:\/WINDOWS/INF/MSNETMTG.INF
6656 m.. -/-rwxrwxrwx 0
0
342849
c:\/WINDOWS/SYSTEM/VERSION.DLL
9216 m.. -/-rwxrwxrwx 0
0
342694
c:\/WINDOWS/SYSTEM/MOSMISC.DLL
10240 m.. -/-rwxrwxrwx 0
0
342651
c:\/WINDOWS/SYSTEM/WHLP32T.DLL
48640 m.. -/-rwxrwxrwx 0
0
342588
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/WINDOWS/SYSTEM/TIMEDATE.CPL
485920 m.. -/-rwxrwxrwx 0
0
342978
c:\/WINDOWS/SYSTEM/3D Maze.scr (3DMAZE~1.SCR)
176640 m.c -/-rwxrwxrwx 0
0
342699
c:\/WINDOWS/SYSTEM/REGWIZ.EXE
67584 m.. -/-rwxrwxrwx 0
0
343005
c:\/WINDOWS/SYSTEM/MSNP32.DLL
27475 m.. -/-rwxrwxrwx 0
0
328367
c:\/WINDOWS/INF/MDMKE.INF
3504 m.. -/-rwxrwxrwx 0
0
342858
c:\/WINDOWS/SYSTEM/ENUMFILE.DLL
33272 m.. -/-rwxrwxrwx 0
0
342876
c:\/WINDOWS/SYSTEM/TELEPHON.CP$
118784 m.. -/-rwxrwxrwx 0
0
932870
c:\/PROGRA~1/PLUS!/SYSTEM/COMPEXT.DLL
81408 m.. -/-rwxrwxrwx 0
0
3274783
c:\/WINDOWS/SYSTEM/VIEWERS/VSXL5.DLL
83228 m.. -/-rwxrwxrwx 0
0
765968
c:\/WINDOWS/FONTS/TIMESBD.TTF
65412 m.. -/-rwxrwxrwx 0
0
765958
c:\/WINDOWS/FONTS/ARIAL.TTF
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
5291 m.. -/-rwxrwxrwx 0
0
537624
c:\/PROGRA~1/NETMEE~1/MNMVDD.386
765 m.. -/-rwxrwxrwx 0
0
328208
c:\/WINDOWS/INF/DISKDRV.INF
190 m.. -/-rwxrwxrwx 0
0
327707
c:\/WINDOWS/Waves.bmp (WAVES.BMP)
5584 m.. -/-rwxrwxrwx 0
0
342732
c:\/WINDOWS/SYSTEM/MCIOLE.DLL
468 m.. -/-rwxrwxrwx 0
0
1225225
c:\/PROGRA~1/ICW-IN~1/ICWX25C.DUN
30931 m.. -rwxrwxrwx 0
0
545819 <part2.img_MPOLL.VXD-dead-545819>
7632 m.. -/-rwxrwxrwx 0
0
342881
c:\/WINDOWS/SYSTEM/TAPIINI.EXE
60096 m.. -/-rwxrwxrwx 0
0
765991
c:\/WINDOWS/FONTS/SYMBOL.TTF
44544 m.. -/-rwxrwxrwx 0
0
342891
c:\/WINDOWS/SYSTEM/USER32.DLL
87822 m.. -/-rwxrwxrwx 0
0
368216
c:\/WINDOWS/HELP/IEXPLORE.HLP
7168 m.. -/-rwxrwxrwx 0
0
342649
c:\/WINDOWS/SYSTEM/STEM0409.DLL
126056 m.. -/-rwxrwxrwx 0
0
765994
c:\/WINDOWS/FONTS/IMPACT.TTF
44867 m.. -/-rwxrwxrwx 0
0
327691
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/WINDOWS/SMARTDRV.EXE
31744 m.. -/-rwxrwxrwx 0
0
342822
c:\/WINDOWS/SYSTEM/RRCM.DLL
10768 m.. -/-rwxrwxrwx 0
0
327782
c:\/WINDOWS/NDDENB.DLL
38401 m.. -/-rwxrwxrwx 0
0
3874315
c:\/WINDOWS/SYSTEM/DXBACKUP/DISPLAY/k2v_hwc.ini (K2V_HWC.INI)
63488 m.. -/-rwxrwxrwx 0
0
327913
c:\/WINDOWS/NETWATCH.EXE
16714 m.. -/-rwxrwxrwx 0
0
328368
c:\/WINDOWS/INF/MDMKORTX.INF
56320 m.. -/-rwxrwxrwx 0
0
342637
c:\/WINDOWS/SYSTEM/WANGCMN.DLL
69120 m.. -/-rwxrwxrwx 0
0
537605
c:\/PROGRA~1/NETMEE~1/MSGCCMCS.DLL
9079 m.. -/-rwxrwxrwx 0
0
368225
c:\/WINDOWS/HELP/EXPO.HLP
11307 m.. -/-rwxrwxrwx 0
0
685591
c:\/WINDOWS/SYSTEM/IOSUBSYS/ATAPCHNG.VXD
16530 m.. -/-rwxrwxrwx 0
0
368222
c:\/WINDOWS/HELP/RATINGS.HLP
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
17920 m.. -/-rwxrwxrwx 0
0
343006
c:\/WINDOWS/SYSTEM/MSPP32.DLL
202896 m.. -/-rwxrwxrwx 0
0
342592
c:\/WINDOWS/SYSTEM/DIBENG.DLL
77080 m.. -/-rwxrwxrwx 0
0
765969
c:\/WINDOWS/FONTS/TIMESBI.TTF
32967 m.. -rwxrwxrwx 0
0
545827 <part2.img_COMM.VXD-dead-545827>
86016 m.. -/-rwxrwxrwx 0
0
3274785
c:\/WINDOWS/SYSTEM/VIEWERS/VSQPW2.DLL
725184 m.. -/-rwxrwxrwx 0
0
342994
c:\/WINDOWS/SYSTEM/MAPI32.DLL
20992 m.. -/-rwxrwxrwx 0
0
3274784
c:\/WINDOWS/SYSTEM/VIEWERS/QUIKVIEW.EXE
144 m.. -/-rwxrwxrwx 0
0
368226
c:\/WINDOWS/HELP/W_TOUR.CNT
88753 m.. -/-rwxrwxrwx 0
0
368247
c:\/WINDOWS/HELP/DRVSPACE.HLP
13883 m.. -/-rwxrwxrwx 0
0
685576
c:\/WINDOWS/SYSTEM/IOSUBSYS/CDTSD.VXD
77312 m.. -/-rwxrwxrwx 0
0
342641
c:\/WINDOWS/SYSTEM/AWFXEX32.EXE
41632 m.. -/-rwxrwxrwx 0
0
342665
c:\/WINDOWS/SYSTEM/LICMGR10.DLL
28812 m.. -/-rwxrwxrwx 0
0
328438
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/WINDOWS/INF/MDMZYXLD.INF
304128 m.. -/-rwxrwxrwx 0
0
537618
c:\/PROGRA~1/NETMEE~1/CB32.EXE
69632 m.. -/-r-xr-xr-x 0
0
1243661
c:\/PROGRA~1/THEMIC~1/MOSCP.EXE
33251 m.. -/-rwxrwxrwx 0
0
328396
c:\/WINDOWS/INF/MDMPNB.INF
5721 m.. -rwxrwxrwx 0
0
545821 <part2.img_SD.VXD-dead-545821>
14896 m.. -/-rwxrwxrwx 0
0
342681
c:\/WINDOWS/SYSTEM/SENDMAIL.DLL
13669 m.. -/-rwxrwxrwx 0
0
342829
c:\/WINDOWS/SYSTEM/EISA.VXD
73275 m.. -/-rwxrwxrwx 0
0
327893
c:\/WINDOWS/NETH.MSG
28940 m.. -/-rwxrwxrwx 0
0
328321
c:\/WINDOWS/INF/MDM3X.INF
25088 m.. -/-rwxrwxrwx 0
0
342635
c:\/WINDOWS/SYSTEM/OITWA400.DLL
25473 m.. -/-rwxrwxrwx 0
0
343569
c:\/WINDOWS/COMMAND/MSCDEX.EXE
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
13794 m.. -/-rwxrwxrwx 0
0
328308
c:\/WINDOWS/INF/RNA.INF
23314 m.. -/-rwxrwxrwx 0
0
328280
c:\/WINDOWS/INF/NETNOVEL.INF
1701 m.. -/-rwxrwxrwx 0
0
328444
c:\/WINDOWS/INF/TAMWRAP.INF
11618 m.. -/-rwxrwxrwx 0
0
368242
c:\/WINDOWS/HELP/FREECELL.HLP
2100 m.. -/-rwxrwxrwx 0
0
327760
c:\/WINDOWS/DBLBUFF.SYS
9324 m.. -/-rwxrwxrwx 0
0
343580
c:\/WINDOWS/COMMAND/LABEL.EXE
130560 m.. -/-rwxrwxrwx 0
0
342668
c:\/WINDOWS/SYSTEM/RA3214_4.DLL
34304 m.c -/-rwxrwxrwx 0
0
327696
c:\/WINDOWS/NOTEPAD.EXE
22016 m.. -/-r-xr-xr-x 0
0
1243659
c:\/PROGRA~1/THEMIC~1/CCDIALER.EXE
25827 m.. -/-rwxrwxrwx 0
0
368217
c:\/WINDOWS/HELP/INTERWIZ.HLP
27277 m.. -/-rwxrwxrwx 0
0
368183
c:\/WINDOWS/HELP/CONNECT.HLP
25486 m.. -/-rwxrwxrwx 0
0
328370
c:\/WINDOWS/INF/MDMLASNO.INF
23455 m.. -/-rwxrwxrwx 0
0
328329
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/WINDOWS/INF/MDMBOCA.INF
75264 m.. -/-rwxrwxrwx 0
0
342943
c:\/WINDOWS/SYSTEM/RAPLAYER.EXE
8128 m.. -/-rwxrwxrwx 0
0
343016
c:\/WINDOWS/SYSTEM/RPCLTC6.DLL
29298 m.. -/-rwxrwxrwx 0
0
328324
c:\/WINDOWS/INF/MDMARN.INF
19869 m.. -/-rwxrwxrwx 0
0
328374
c:\/WINDOWS/INF/MDMMART.INF
2352 m.. -/-rwxrwxrwx 0
0
1306630
c:\/PROGRA~1/INTERN~1/INST16.DLL
9787 m.. -/-rwxrwxrwx 0
0
545808
c:\/WINDOWS/SYSTEM/VMM32/QEMMFIX.VXD
24030 m.. -/-rwxrwxrwx 0
0
327730
c:\/WINDOWS/NETWORK.TXT
1023 m.. -/-rwxrwxrwx 0
0
368194
c:\/WINDOWS/HELP/SOUNDREC.CNT
10891 m.. -/-rwxrwxrwx 0
0
328384
c:\/WINDOWS/INF/MDMNEUHS.INF
2972 m.. -/-rwxrwxrwx 0
0
328385
c:\/WINDOWS/INF/MDMNOKIA.INF
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
20480 m.. -/-rwxrwxrwx 0
0
342632
c:\/WINDOWS/SYSTEM/OIPRT400.DLL
182752 m.. -/-rwxrwxrwx 0
0
342935
c:\/WINDOWS/SYSTEM/URLMON.DLL
130048 m.. -/-rwxrwxrwx 0
0
342938
c:\/WINDOWS/SYSTEM/WINTRUST.DLL
44544 m.. -/-rwxrwxrwx 0
0
342626
c:\/WINDOWS/SYSTEM/JPEG2X32.DLL
13456 m.. -/-rwxrwxrwx 0
0
342711
c:\/WINDOWS/SYSTEM/WFM0200.ACV
13360 m.. -/-rwxrwxrwx 0
0
537644
c:\/PROGRA~1/NETMEE~1/MNMTDDS_.DLL
32815 m.. -/-rwxrwxrwx 0
0
545835
c:\/WINDOWS/SYSTEM/VMM32/_MOUSE.VXD (deleted)
69856 m.. -/-rwxrwxrwx 0
0
537638
c:\/PROGRA~1/NETMEE~1/MNMOM_.DLL
851 m.. -/-rwxrwxrwx 0
0
1225230
c:\/PROGRA~1/ICW-IN~1/STATE.ICW
12032 m.. -/-rwxrwxrwx 0
0
342574
c:\/WINDOWS/SYSTEM/SERIALUI.DLL
104960 m.. -/-rwxrwxrwx 0
0
1225227
c:\/PROGRA~1/ICW-IN~1/ICWCONN2.EXE
5783436 m.. -/-rwxrwxrwx 0
0
2623494
c:\/PROGRA~1/ONLINE~1/COMPUS~1/CS3KIT.EXE
819200 m.. -/-rwxrwxrwx 0
0
342864
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/WINDOWS/SYSTEM/SHELL32.DLL
4039 m.. -/-rwxrwxrwx 0
0
328272
c:\/WINDOWS/INF/NETGEN.INF
63697 m.. -/-rwxrwxrwx 0
0
328207
c:\/WINDOWS/INF/DESKMGMT.INF
6140 m.. -/-rwxrwxrwx 0
0
327894
c:\/WINDOWS/NDISHLP.SYS
21975 m.. -/-rwxrwxrwx 0
0
343576
c:\/WINDOWS/COMMAND/DISKCOPY.COM
59964 m.. -/-rwxrwxrwx 0
0
1201163
c:\/WINDOWS/SYSTEM/COLOR/MNEBUG21.ICM
372224 m.. -/-rwxrwxrwx 0
0
342667
c:\/WINDOWS/SYSTEM/MSJAVA.DLL
326656 m.. -/-rwxrwxrwx 0
0
342785
c:\/WINDOWS/SYSTEM/MSVCRT40.DLL
68096 m.. -/-r-xr-xr-x 0
0
1243668
c:\/PROGRA~1/THEMIC~1/ENGCT.EXE
25055 m.. -/-rwxrwxrwx 0
0
328397
c:\/WINDOWS/INF/MDMPP.INF
3657 m.. -/-rwxrwxrwx 0
0
328239
c:\/WINDOWS/INF/MSFDC.INF
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
462 m.. -/-rwxrwxrwx 0
0
368185
c:\/WINDOWS/HELP/PSSPOS.CNT
19182 m.. -/-rwxrwxrwx 0
0
685592
c:\/WINDOWS/SYSTEM/IOSUBSYS/SCSI1HLP.VXD
19968 m.. -/-rwxrwxrwx 0
0
342580
c:\/WINDOWS/SYSTEM/SERENUM.VXD
22583 m.. -/-rwxrwxrwx 0
0
545840
c:\/WINDOWS/SYSTEM/VMM32/_ERF.VXD (deleted)
407 m.. -/-rwxrwxrwx 0
0
327886
c:\/WINDOWS/NETWORKS
82944 m.. -/-rwxrwxrwx 0
0
1243666
c:\/PROGRA~1/THEMIC~1/BILLADD.DLL
12063 m.. -/-rwxrwxrwx 0
0
328304
c:\/WINDOWS/INF/PCMCIA.INF
1920 m.. -/-rwxrwxrwx 0
0
368144
c:\/WINDOWS/HELP/WORDPAD.CNT
142353 m.. -/-rwxrwxrwx 0
0
343559
c:\/WINDOWS/COMMAND/SCANDISK.EXE
8704 m.. -/-rwxrwxrwx 0
0
368146
c:\/WINDOWS/HELP/DISPLAY.HLP
1042 m.. -/-rwxrwxrwx 0
0
368192
c:\/WINDOWS/HELP/MPLAYER.CNT
18077 m.. -/-rwxrwxrwx 0
0
545798
c:\/WINDOWS/SYSTEM/VMM32/_IOSXLAT.VXD (deleted)
24576 m.. -/-rwxrwxrwx 0
0
327694
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/WINDOWS/ACCSTAT.EXE
78965 m.. -rwxrwxrwx 0
0
545839 <part2.img_HELL.VXD-dead-545839>
38080 m.. -/-rwxrwxrwx 0
0
3874311
c:\/WINDOWS/SYSTEM/DXBACKUP/DISPLAY/k2v_dig.ini (K2V_DIG.INI)
31895 m.. -/-rwxrwxrwx 0
0
328253
c:\/WINDOWS/INF/NET3COM.INF
1517 m.. -/-rwxrwxrwx 0
0
368213
c:\/WINDOWS/HELP/W_IR.CNT
5584 m.. -/-rwxrwxrwx 0
0
1576
c:\/WINDOWS/SYSBCKUP/MCIOLE.DLL
80928 m.. -/-r-xr-xr-x 0
0
765986
c:\/WINDOWS/FONTS/SYMBOLF.FON
196 m.. -/-rwxrwxrwx 0
0
368237
c:\/WINDOWS/HELP/FREECELL.CNT
101888 m.. -/-rwxrwxrwx 0
0
537620
c:\/PROGRA~1/NETMEE~1/MSCONFFT.EXE
3728 m.c -/-rwxrwxrwx 0
0
327846
c:\/WINDOWS/Readme.txt (README.TXT)
473872 m.. -/-rwxrwxrwx 0
0
10430470
c:\/WINDOWS/SYSTEM/BACKUP/oleaut32.dll (OLEAUT32.DLL)
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
9801 m.. -/-rwxrwxrwx 0
0
545807
c:\/WINDOWS/SYSTEM/VMM32/_ARITY.VXD (deleted)
2715 m.. -/-rwxrwxrwx 0
0
2885646
c:\/PROGRA~1/ONLINE~1/AT&T/RELIABTN.GIF
59928 m.. -/-rwxrwxrwx 0
0
328276
c:\/WINDOWS/INF/NETINFO.INF
12336 m.. -/-rwxrwxrwx 0
0
342939
c:\/WINDOWS/SYSTEM/TAMAUDIO.DRV
20992 m.. -/-rwxrwxrwx 0
0
342920
c:\/WINDOWS/SYSTEM/INETAB32.DLL
13456 m.. -/-rwxrwxrwx 0
0
1543
c:\/WINDOWS/SYSBCKUP/WFM0200.ACV
122240 m.. -/-rwxrwxrwx 0
0
327907
c:\/WINDOWS/MSHEARTS.EXE
19101 m.. -/-rwxrwxrwx 0
0
685577
c:\/WINDOWS/SYSTEM/IOSUBSYS/CDVSD.VXD
11798 m.. -/-rwxrwxrwx 0
0
328386
c:\/WINDOWS/INF/MDMNOKNO.INF
4415 m.. -/-rwxrwxrwx 0
0
368151
c:\/WINDOWS/HELP/WANGOCXD.CNT
2416 m.c -/-rwxrwxrwx 0
0
327744
c:\/WINDOWS/WINHELP.EXE
59636 m.. -/-rwxrwxrwx 0
0
765998
c:\/WINDOWS/FONTS/VERDANAZ.TTF
78965 m.. -/-rwxrwxrwx 0
0
545839
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
c:\/WINDOWS/SYSTEM/VMM32/_HELL.VXD (deleted) 06E4 A169 4E46
211488 m.. -/-rwxrwxrwx 0
0
342976
c:\/WINDOWS/SYSTEM/3D Flying Objects.scr (3DFLYI~1.SCR)
8704 m.. -/-rwxrwxrwx 0
0
342583
c:\/WINDOWS/SYSTEM/DESK.CPL
2644 m.. -/-rwxrwxrwx 0
0
2885648
c:\/PROGRA~1/ONLINE~1/AT&T/SHOPBTN.GIF
86464 m.. -/-rwxrwxrwx 0
0
342676
c:\/WINDOWS/SYSTEM/PLUGIN.OCX
19488 m.. -/-rwxrwxrwx 0
0
342559
c:\/WINDOWS/SYSTEM/SYSEDIT.EXE
18576 m.. -/-rwxrwxrwx 0
0
342726
c:\/WINDOWS/SYSTEM/CSPMAN.DLL
78848 m.. -/-rwxrwxrwx 0
0
3274775
c:\/WINDOWS/SYSTEM/VIEWERS/VSWK4.DLL
51699 m.. -/-rwxrwxrwx 0
0
328199
c:\/WINDOWS/INF/APPLETS.INF
66267 m.. -/-rwxrwxrwx 0
0
368200
c:\/WINDOWS/HELP/CONF.HLP
28096 m.. -/-rwxrwxrwx 0
0
343567
c:\/WINDOWS/COMMAND/CHKDSK.EXE
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
48128 m.. -/-rwxrwxrwx 0
0
3274761
c:\/WINDOWS/SYSTEM/VIEWERS/DEWP.DLL
12288 m.. -/-rwxrwxrwx 0
0
327748
c:\/WINDOWS/JVIEW.EXE
57344 m.. -/-rwxrwxrwx 0
0
342547
c:\/WINDOWS/SYSTEM/ACCESS.CPL
6144 m.. -/-rwxrwxrwx 0
0
342620
c:\/WINDOWS/SYSTEM/AWDCXC32.DLL
2118 m.. -/-rwxrwxrwx 0
0
327852
c:\/WINDOWS/Bubbles.bmp (BUBBLES.BMP)
13312 m.. -/-r-xr-xr-x 0
0
1243655
c:\/PROGRA~1/THEMIC~1/CCEI.DLL
31942 m.. -/-rwxrwxrwx 0
0
343592
c:\/WINDOWS/COMMAND/KEYBRD2.SYS
38400 m.. -/-rwxrwxrwx 0
0
3274768
c:\/WINDOWS/SYSTEM/VIEWERS/VSEXE2.DLL
590 m.. -/-rwxrwxrwx 0
0
327850
c:\/WINDOWS/Straw Mat.bmp (STRAWM~1.BMP)
33792 m.. -/-rwxrwxrwx 0
0
3274771
c:\/WINDOWS/SYSTEM/VIEWERS/VSMSW.DLL
5422 m.. -/-rwxrwxrwx 0
0
327727
c:\/WINDOWS/MOUSE.TXT
23 m.. -/-rwxrwxrwx 0
0
2885659
c:\/PROGRA~1/ONLINE~1/AT&T/CANCEL.INS
5632 m.. -/-rwxrwxrwx 0
0
342728
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/WINDOWS/SYSTEM/DCIMAN32.DLL
29008 m.. -/-rwxrwxrwx 0
0
342911
c:\/WINDOWS/SYSTEM/CACHEVU.DLL
22408 m.. -/-rwxrwxrwx 0
0
545812
c:\/WINDOWS/SYSTEM/VMM32/_CDFSD.VXD (deleted)
7168 m.. -/-rwxrwxrwx 0
0
328270
c:\/WINDOWS/INF/NETFLEX.INF
37759 m.. -/-rwxrwxrwx 0
0
328440
c:\/WINDOWS/INF/MDMZYXLN.INF
53552 m.. -/-rwxrwxrwx 0
0
342735
c:\/WINDOWS/SYSTEM/MSACM.DLL
15872 m.. -/-rwxrwxrwx 0
0
342555
c:\/WINDOWS/SYSTEM/MFCN30.DLL
11458 m.. -/-rwxrwxrwx 0
0
328409
c:\/WINDOWS/INF/MDMSPEC.INF
33792 m.. -/-rwxrwxrwx 0
0
342705
c:\/WINDOWS/SYSTEM/SEC_SSPI.DLL
322832 m.. -/-rwxrwxrwx 0
0
342552
c:\/WINDOWS/SYSTEM/MFC30.DLL
17408 m.. -/-rwxrwxrwx 0
0
342743
c:\/WINDOWS/SYSTEM/TSD32.DLL
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
2497 m.. -/-rwxrwxrwx 0
0
342867
c:\/WINDOWS/SYSTEM/CONTROL.INF
4576 m.. -/-rwxrwxrwx 0
0
328376
c:\/WINDOWS/INF/MDMMETRI.INF
168 m.. -/-rwxrwxrwx 0
0
368241
c:\/WINDOWS/HELP/WINMINE.CNT
6551 m.. -/-rwxrwxrwx 0
0
328241
c:\/WINDOWS/INF/MSINFO.INF
40448 m.. -/-rwxrwxrwx 0
0
342896
c:\/WINDOWS/SYSTEM/MPR.DLL
9600 m.. -/-r-xr-xr-x 0
0
765974
c:\/WINDOWS/FONTS/8514SYS.FON
1056 m.. -/-rwxrwxrwx 0
0
327746
c:\/WINDOWS/WINNEWS.TXT
43620 m.. -/-rwxrwxrwx 0
0
368140
c:\/WINDOWS/HELP/MSPAINT.HLP
38912 m.. -/-rwxrwxrwx 0
0
327881
c:\/WINDOWS/WINIPCFG.EXE
19419 m.. -/-rwxrwxrwx 0
0
328275
c:\/WINDOWS/INF/NETIBMCC.INF
22368 m.. -/-rwxrwxrwx 0
0
328358
c:\/WINDOWS/INF/MDMHAEUS.INF
25348 m.. -/-rwxrwxrwx 0
0
328407
c:\/WINDOWS/INF/MDMSNITN.INF
57952 m.. -/-r-xr-xr-x 0
0
765979
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/WINDOWS/FONTS/SERIFE.FON
82944 m.. -/-rwxrwxrwx 0
0
342812
c:\/WINDOWS/SYSTEM/OLECLI.DLL
156160 m.. -/-rwxrwxrwx 0
0
537609
c:\/PROGRA~1/NETMEE~1/MCATIPX.DLL
601 m.. -/-rwxrwxrwx 0
0
342951
c:\/WINDOWS/SYSTEM/NORWEG.TRN
49152 m.. -/-rwxrwxrwx 0
0
342744
c:\/WINDOWS/SYSTEM/WINMM.DLL
4096 m.. -/-rwxrwxrwx 0
0
342883
c:\/WINDOWS/SYSTEM/VMODCTL.DLL
25343 m.. -/-rwxrwxrwx 0
0
328383
c:\/WINDOWS/INF/MDMMULOG.INF
49033 m.. -/-rwxrwxrwx 0
0
328312
c:\/WINDOWS/INF/SHELL.INF
53816 m.. -/-rwxrwxrwx 0
0
765996
c:\/WINDOWS/FONTS/VERDANAB.TTF
51200 m.. -/-rwxrwxrwx 0
0
342761
c:\/WINDOWS/SYSTEM/CONFLNK.DLL
47616 m.. -/-rwxrwxrwx 0
0
342675
c:\/WINDOWS/SYSTEM/JDBGMGR.EXE
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
33191 m.. -/-rwxrwxrwx 0
0
327692
c:\/WINDOWS/HIMEM.SYS
23377 m.. -/-rwxrwxrwx 0
0
327725
c:\/WINDOWS/HARDWARE.TXT
57629 m.. -/-rwxrwxrwx 0
0
328310
c:\/WINDOWS/INF/SETUPC.INF
23696 m.. -/-rwxrwxrwx 0
0
327813
c:\/WINDOWS/ROUTE.EXE
22016 m.. -/-rwxrwxrwx 0
0
342653
c:\/WINDOWS/SYSTEM/ICMUI.DLL
41844 m.. -rwxrwxrwx 0
0
545814 <part2.img_DMAD.VXD-dead-545814>
43520 m.. -/-rwxrwxrwx 0
0
3274774
c:\/WINDOWS/SYSTEM/VIEWERS/VSW6.DLL
7168 m.. -/-rwxrwxrwx 0
0
342811
c:\/WINDOWS/SYSTEM/STDOLE32.TLB
114688 m.. -/-rwxrwxrwx 0
0
537616
c:\/PROGRA~1/NETMEE~1/SOEDBER.DLL
37676 m.. -/-rwxrwxrwx 0
0
328350
c:\/WINDOWS/INF/MDMEXP.INF
52064 m.. -/-rwxrwxrwx 0
0
342779
c:\/WINDOWS/SYSTEM/VGA.DRV
71440 m.. -/-rwxrwxrwx 0
0
342931
c:\/WINDOWS/SYSTEM/RSABASE.DLL
40707 m.. -/-rwxrwxrwx 0
0
328220
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/WINDOWS/INF/LOCALE.INF
14556 m.. -/-rwxrwxrwx 0
0
328240
c:\/WINDOWS/INF/MSHDC.INF
168304 m.. -/-rwxrwxrwx 0
0
342873
c:\/WINDOWS/SYSTEM/3D Pipes.scr (3DPIPE~1.SCR)
5687 m.. -/-rwxrwxrwx 0
0
342893
c:\/WINDOWS/SYSTEM/VTDI.386
24576 m.. -/-rwxrwxrwx 0
0
342865
c:\/WINDOWS/SYSTEM/SHSCRAP.DLL
21852 m.. -/-rwxrwxrwx 0
0
328235
c:\/WINDOWS/INF/MSDET.INF
45371 m.. -rwxrwxrwx 0
0
545817 <part2.img_KD.VXD-dead-545817>
147968 m.. -/-rwxrwxrwx 0
0
1542
c:\/WINDOWS/SYSBCKUP/MPLAYER.EXE
22326 m.. -/-rwxrwxrwx 0
0
328198
c:\/WINDOWS/INF/APPLETPP.INF
14926 m.. -rwxrwxrwx 0
0
545833 <part2.img_SHARE.VXD-dead-545833>
30208 m.. -/-rwxrwxrwx 0
0
342687
c:\/WINDOWS/SYSTEM/CCAPI.DLL
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
140288 m.. -/-rwxrwxrwx 0
0
342652
c:\/WINDOWS/SYSTEM/ICM32.DLL
2125 m.. -/-rwxrwxrwx 0
0
328216
c:\/WINDOWS/INF/IRDALAN.INF
113664 m.. -/-rwxrwxrwx 0
0
1572
c:\/WINDOWS/SYSBCKUP/MSVIDEO.DLL
1168 m.. -/-rwxrwxrwx 0
0
342754
c:\/WINDOWS/SYSTEM/MMTASK.TSK
4608 m.. -/-rwxrwxrwx 0
0
537607
c:\/PROGRA~1/NETMEE~1/GCC32.DLL
33280 m.. -/-rwxrwxrwx 0
0
327790
c:\/WINDOWS/EXPOSTRT.EXE
37376 m.. -/-rwxrwxrwx 0
0
342895
c:\/WINDOWS/SYSTEM/PASSWORD.CPL
12663 m.. -/-rwxrwxrwx 0
0
327761
c:\/WINDOWS/RAMDRIVE.SYS
52196 m.. -/-rwxrwxrwx 0
0
368160
c:\/WINDOWS/HELP/RNAAPP.HLP
7723 m.. -/-rwxrwxrwx 0
0
545832
c:\/WINDOWS/SYSTEM/VMM32/_FLATD.VXD (deleted)
22096 m.. -/-rwxrwxrwx 0
0
342586
c:\/WINDOWS/SYSTEM/MAINCP16.DLL
171392 m.. -/-rwxrwxrwx 0
0
327909
c:\/WINDOWS/SOL.EXE
260480 m.. -/-rwxrwxrwx 0
0
342587
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/WINDOWS/SYSTEM/SYSDM.CPL
9815 m.. -/-rwxrwxrwx 0
0
545834
c:\/WINDOWS/SYSTEM/VMM32/_MD.VXD (deleted)
30549 m.. -/-rwxrwxrwx 0
0
328377
c:\/WINDOWS/INF/MDMMHRTZ.INF
24626 m.. -/-rwxrwxrwx 0
0
327717
c:\/WINDOWS/CMD640X.SYS
16483 m.. -/-rwxrwxrwx 0
0
327720
c:\/WINDOWS/DISPLAY.TXT
16384 m.. -/-rwxrwxrwx 0
0
342782
c:\/WINDOWS/SYSTEM/CHIADI.DLL
425 m.. -/-rwxrwxrwx 0
0
2885654
c:\/PROGRA~1/ONLINE~1/AT&T/ATTWNS1.HTM
14840 m.. -/-rwxrwxrwx 0
0
368167
c:\/WINDOWS/HELP/WINDOWS.CNT
1198 m.. -/-rwxrwxrwx 0
0
368246
c:\/WINDOWS/HELP/DRVSPACE.CNT
37350 m.. -/-rwxrwxrwx 0
0
328247
c:\/WINDOWS/INF/MSPRINT2.INF
2238 m.. -/-rwxrwxrwx 0
0
342718
c:\/WINDOWS/SYSTEM/WFM0200A.CSP
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
6940 m.. -/-rwxrwxrwx 0
0
343583
c:\/WINDOWS/COMMAND/NLSFUNC.EXE
2898 m.. -/-rwxrwxrwx 0
0
328284
c:\/WINDOWS/INF/NETPPP.INF
30624 m.. -/-rwxrwxrwx 0
0
328380
c:\/WINDOWS/INF/MDMMOTON.INF
82092 m.. -/-rwxrwxrwx 0
0
765966
c:\/WINDOWS/FONTS/COURI.TTF
403 m.. -/-rwxrwxrwx 0
0
368229
c:\/WINDOWS/HELP/WINPOPUP.CNT
190 m.. -/-rwxrwxrwx 0
0
327705
c:\/WINDOWS/Circles.bmp (CIRCLES.BMP)
24064 m.. -/-rwxrwxrwx 0
0
342814
c:\/WINDOWS/SYSTEM/OLESVR.DLL
52032 m.. -/-rwxrwxrwx 0
0
327793
c:\/WINDOWS/INETMIB1.DLL
26982 m.. -/-rwxrwxrwx 0
0
545801
c:\/WINDOWS/SYSTEM/VMM32/_YNAPAGE.VXD (deleted)
125495 m.. -/-rwxrwxrwx 0
0
327757
c:\/WINDOWS/EMM386.EXE
8055 m.. -/-rwxrwxrwx 0
0
328286
c:\/WINDOWS/INF/NETRACAL.INF
10736 m.. -/-rwxrwxrwx 0
0
343018
c:\/WINDOWS/SYSTEM/RPCLTS5.DLL
24064 m.. -/-rwxrwxrwx 0
0
3274766
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/WINDOWS/SYSTEM/VIEWERS/VSBMP.DLL
8192 m.. -/-rwxrwxrwx 0
0
342609
c:\/WINDOWS/SYSTEM/FRAMEBUF.DLL
16690 m.. -/-rwxrwxrwx 0
0
327731
c:\/WINDOWS/PRINTERS.TXT
92244 m.. -/-rwxrwxrwx 0
0
342960
c:\/WINDOWS/SYSTEM/WSVV.VXD
37888 m.. -/-rwxrwxrwx 0
0
342693
c:\/WINDOWS/SYSTEM/MOSCUDLL.DLL
93812 m.. -/-rwxrwxrwx 0
0
5
c:\/COMMAND.COM
10145 m.. -/-rwxrwxrwx 0
0
368244
c:\/WINDOWS/HELP/SOL.HLP
38351 m.. -/-rwxrwxrwx 0
0
342942
c:\/WINDOWS/SYSTEM/DRWATSON.EXE
2288 m.. -/-rwxrwxrwx 0
0
342599
c:\/WINDOWS/SYSTEM/SYSTEM.DRV
133904 m.. -/-rwxrwxrwx 0
0
342560
c:\/WINDOWS/SYSTEM/MFCANS32.DLL
33018 m.. -/-rwxrwxrwx 0
0
368235
c:\/WINDOWS/HELP/BACKUP.HLP
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
24503 m.. -/-rwxrwxrwx 0
0
327701
c:\/WINDOWS/WIN.COM
395280 m.. -/-rwxrwxrwx 0
0
327911
c:\/WINDOWS/DRVSPACE.EXE
29401 m.. -/-rwxrwxrwx 0
0
685574
c:\/WINDOWS/SYSTEM/IOSUBSYS/APIX.VXD
7584 m.. -/-rwxrwxrwx 0
0
343014
c:\/WINDOWS/SYSTEM/RPCLTC3.DLL
37376 m.. -/-rwxrwxrwx 0
0
3274772
c:\/WINDOWS/SYSTEM/VIEWERS/VSPP.DLL
384512 m.. -/-rwxrwxrwx 0
0
342557
c:\/WINDOWS/SYSTEM/MFCO40.DLL
61200 m.. -/-rwxrwxrwx 0
0
342915
c:\/WINDOWS/SYSTEM/HLINK.DLL
23744 m.. -/-rwxrwxrwx 0
0
343033
c:\/WINDOWS/SYSTEM/NDIS2SUP.VXD
13824 m.. -/-rwxrwxrwx 0
0
343024
c:\/WINDOWS/SYSTEM/NWLSCON.EXE
3200 m.. -/-rwxrwxrwx 0
0
1548
c:\/WINDOWS/SYSBCKUP/WIN32S16.DLL
84360 m.. -/-rwxrwxrwx 0
0
765964
c:\/WINDOWS/FONTS/COURBD.TTF
9008 m.. -/-rwxrwxrwx 0
0
328330
c:\/WINDOWS/INF/MDMBSB.INF
4208 m.. -/-rwxrwxrwx 0
0
1555
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/WINDOWS/SYSBCKUP/STORAGE.DLL
9826 m.. -/-rwxrwxrwx 0
0
342798
c:\/WINDOWS/SYSTEM/CP_850.NLS
13322 m.. -/-rwxrwxrwx 0
0
328243
c:\/WINDOWS/INF/MSMOUSE.INF
12112 m.. -/-rwxrwxrwx 0
0
1564
c:\/WINDOWS/SYSBCKUP/TOOLHELP.DLL
26624 m.. -/-r-xr-xr-x 0
0
551439
c:\/PROGRA~1/ACCESS~1/pcximp32.flt (PCXIMP32.FLT)
149504 m.. -/-r-xr-xr-x 0
0
1243657
c:\/PROGRA~1/THEMIC~1/MOSCOMP.DLL
129078 m.. -/-rwxrwxrwx 0
0
327780
c:\/WINDOWS/LOGOW.SYS
5861 m.. -/-rwxrwxrwx 0
0
328418
c:\/WINDOWS/INF/MDMTI.INF
17175 m.. -/-rwxrwxrwx 0
0
343590
c:\/WINDOWS/COMMAND/DISPLAY.SYS
0
328357
26295 m.. -/-rwxrwxrwx 0
c:\/WINDOWS/INF/MDMHAEU.INF
0
537645
26544 m.. -/-rwxrwxrwx 0
c:\/PROGRA~1/NETMEE~1/MNMTHK16.DLL
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
20579 m.. -/-rwxrwxrwx 0
0
368224
c:\/WINDOWS/HELP/CDPLAYER.HLP
17412 m.. -/-r-xr-xr-x 0
0
765990
c:\/WINDOWS/FONTS/MARLETT.TTF
69886 m.. -/-rwxrwxrwx 0
0
343564
c:\/WINDOWS/COMMAND/EDIT.COM
66952 m.. -/-rwxrwxrwx 0
0
765959
c:\/WINDOWS/FONTS/ARIALBD.TTF
294736 m.. -/-rwxrwxrwx 0
0
537639
c:\/PROGRA~1/NETMEE~1/MNMSHCO_.DLL
14336 m.. -/-rwxrwxrwx 0
0
3345923
c:\/WINDOWS/SYSTEM/S3MM.DLL
18688 m.. -/-rwxrwxrwx 0
0
537629
c:\/PROGRA~1/NETMEE~1/MNMCMG_.DLL
107131 m.. -/-rwxrwxrwx 0
0
545831
c:\/WINDOWS/SYSTEM/VMM32/_DD.VXD (deleted)
23906 m.. -/-rwxrwxrwx 0
0
328352
c:\/WINDOWS/INF/MDMGAL.INF
9696 m.. -/-rwxrwxrwx 0
0
343019
c:\/WINDOWS/SYSTEM/RPCLTS6.DLL
11799 m.. -/-rwxrwxrwx 0
0
342954
c:\/WINDOWS/SYSTEM/MAILNEWS.TXT
56336 m.. -/-r-xr-xr-x 0
0
765985
c:\/WINDOWS/FONTS/SYMBOLE.FON
123987 m.. -/-rwxrwxrwx 0
0
342996
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/WINDOWS/SYSTEM/NWREDIR.VXD
4608 m.. -/-rwxrwxrwx 0
0
342855
c:\/WINDOWS/SYSTEM/DEVMGR32.DLL
4096 m.. -/-rwxrwxrwx 0
0
342900
c:\/WINDOWS/SYSTEM/NETAPI32.DLL
19927 m.. -/-rwxrwxrwx 0
0
343572
c:\/WINDOWS/COMMAND/KEYB.COM
25558 m.. -/-rwxrwxrwx 0
0
368148
c:\/WINDOWS/HELP/WAB.HLP
6730 m.. -/-rwxrwxrwx 0
0
328417
c:\/WINDOWS/INF/MDMTGER.INF
24310 m.. -/-rwxrwxrwx 0
0
328346
c:\/WINDOWS/INF/MDMELPRO.INF
7524 m.. -/-rwxrwxrwx 0
0
328288
c:\/WINDOWS/INF/NETSILC.INF
3570 m.. -rwxrwxrwx 0
0
1194516 <part2.img-_$!$23.ME-dead-1194516>
68938 m.. -/-rwxrwxrwx 0
0
545805
c:\/WINDOWS/SYSTEM/VMM32/IOS.VXD
30553 m.. -/-rwxrwxrwx 0
0
328323
c:\/WINDOWS/INF/MDMARCHT.INF
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
54497 m.. -/-rwxrwxrwx 0
0
545830
c:\/WINDOWS/SYSTEM/VMM32/_WIN32.VXD (deleted)
24616 m.. -/-rwxrwxrwx 0
0
328423
c:\/WINDOWS/INF/MDMTRUST.INF
1189 m.. -/-rwxrwxrwx 0
0
368233
c:\/WINDOWS/HELP/BACKUP.CNT
39744 m.. -/-rwxrwxrwx 0
0
1554
c:\/WINDOWS/SYSBCKUP/OLE2.DLL
40801 m.. -/-rwxrwxrwx 0
0
327764
c:\/WINDOWS/WININIT.EXE
6160 m.. -/-rwxrwxrwx 0
0
342548
c:\/WINDOWS/SYSTEM/ENABLE3.DLL
186368 m.. -/-rwxrwxrwx 0
0
342928
c:\/WINDOWS/SYSTEM/RA32.DLL
3200 m.. -/-rwxrwxrwx 0
0
342597
c:\/WINDOWS/SYSTEM/WIN32S16.DLL
26297 m.. -/-rwxrwxrwx 0
0
328410
c:\/WINDOWS/INF/MDMSRT.INF
10352 m.. -/-rwxrwxrwx 0
0
685584
c:\/WINDOWS/SYSTEM/IOSUBSYS/NCRC710.MPD
3177 m.. -/-rwxrwxrwx 0
0
2885645
c:\/PROGRA~1/ONLINE~1/AT&T/ONLINEBT.GIF
55125 m.. -/-rwxrwxrwx 0
0
328236
c:\/WINDOWS/INF/MSDISP.INF
23664 m.. -/-rwxrwxrwx 0
0
328347
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/WINDOWS/INF/MDMELSA.INF
22016 m.. -/-rwxrwxrwx 0
0
343001
c:\/WINDOWS/SYSTEM/CHOOSUSR.DLL
30931 m.. -/-rwxrwxrwx 0
0
545819
c:\/WINDOWS/SYSTEM/VMM32/_MPOLL.VXD (deleted)
5632 m.. -/-rwxrwxrwx 0
0
1567
c:\/WINDOWS/SYSBCKUP/DCIMAN32.DLL
9964 m.. -/-rwxrwxrwx 0
0
328392
c:\/WINDOWS/INF/MDMOSI.INF
75792 m.. -/-rwxrwxrwx 0
0
342703
c:\/WINDOWS/SYSTEM/MSNSSPC.DLL
23956 m.. -/-rwxrwxrwx 0
0
545826
c:\/WINDOWS/SYSTEM/VMM32/_CD.VXD (deleted)
3 m.. -/-rwxrwxrwx 0
0
327871
c:\/WINDOWS/Internet Mail.{89292102-4755-11cf-9DC2-00AA006C2B84}
(INTERN~1.{89)
545826 <part2.img23956 m.. -rwxrwxrwx 0
0
_CD.VXD-dead-545826>
0
368136
910 m.. -/-rwxrwxrwx 0
c:\/WINDOWS/HELP/HYPERTRM.CNT
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
18785 m.. -/-rwxrwxrwx 0
0
685578
c:\/WINDOWS/SYSTEM/IOSUBSYS/DISKTSD.VXD
39147 m.. -/-rwxrwxrwx 0
0
368218
c:\/WINDOWS/HELP/INT-MAIL.HLP
8192 m.. -/-rwxrwxrwx 0
0
343013
c:\/WINDOWS/SYSTEM/RPCLTC1.DLL
23916 m.. -/-rwxrwxrwx 0
0
328436
c:\/WINDOWS/INF/MDMZYP.INF
12800 m.. -/-rwxrwxrwx 0
0
342906
c:\/WINDOWS/SYSTEM/MPREXE.EXE
21504 m.. -/-rwxrwxrwx 0
0
342898
c:\/WINDOWS/SYSTEM/MSPWL32.DLL
78848 m.. -/-rwxrwxrwx 0
0
342923
c:\/WINDOWS/SYSTEM/INLOADER.DLL
25600 m.. -/-rwxrwxrwx 0
0
342633
c:\/WINDOWS/SYSTEM/OISLB400.DLL
12128 m.. -/-rwxrwxrwx 0
0
327812
c:\/WINDOWS/PING.EXE
8704 m.. -/-rwxrwxrwx 0
0
342710
c:\/WINDOWS/SYSTEM/TSSOFT32.ACM
1657 m.. -/-rwxrwxrwx 0
0
328205
c:\/WINDOWS/INF/CHEYENNE.INF
113664 m.c -/-rwxrwxrwx 0
0
2623493
c:\/PROGRA~1/ONLINE~1/COMPUS~1/CSSETUP.EXE
16960 m.. -/-rwxrwxrwx 0
0
685586
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
c:\/WINDOWS/SYSTEM/IOSUBSYS/SPARROW.MPD 06E4 A169 4E46
8743 m.. -/-rwxrwxrwx 0
0
328369
c:\/WINDOWS/INF/MDMLASAT.INF
9765 m.. -/-rwxrwxrwx 0
0
545813
c:\/WINDOWS/SYSTEM/VMM32/_DEF.VXD (deleted)
8347 m.. -/-rwxrwxrwx 0
0
328292
c:\/WINDOWS/INF/NETSNIP.INF
52720 m.. -/-rwxrwxrwx 0
0
765995
c:\/WINDOWS/FONTS/VERDANA.TTF
3831 m.. -/-rwxrwxrwx 0
0
328300
c:\/WINDOWS/INF/NETZNOTE.INF
9216 m.. -/-rwxrwxrwx 0
0
343020
c:\/WINDOWS/SYSTEM/SAPNSP.DLL
63116 m.. -/-rwxrwxrwx 0
0
343562
c:\/WINDOWS/COMMAND/FDISK.EXE
9931 m.. -rwxrwxrwx 0
0
545804 <part2.img_NT13.VXD-dead-545804>
5312 m.. -/-rwxrwxrwx 0
0
342894
c:\/WINDOWS/SYSTEM/NETCPL.CPL
25088 m.. -/-rwxrwxrwx 0
0
342709
c:\/WINDOWS/SYSTEM/MSGSM32.ACM
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
97 m.. -/-rwxrwxrwx 0
0
368212
c:\/WINDOWS/HELP/UPDATE.CNT
24149 m.. -/-rwxrwxrwx 0
0
328426
c:\/WINDOWS/INF/MDMUSRF.INF
35328 m.. -/-rwxrwxrwx 0
0
3274776
c:\/WINDOWS/SYSTEM/VIEWERS/VSWKS.DLL
56832 m.. -/-rwxrwxrwx 0
0
342663
c:\/WINDOWS/SYSTEM/JAVART.DLL
109424 m.. -/-rwxrwxrwx 0
0
1571
c:\/WINDOWS/SYSBCKUP/AVIFILE.DLL
147968 m.. -/-rwxrwxrwx 0
0
3274762
c:\/WINDOWS/SYSTEM/VIEWERS/MSVIEWUT.DLL
87552 m.. -/-rwxrwxrwx 0
0
1546
c:\/WINDOWS/SYSBCKUP/URL.DLL
206848 m.. -/-rwxrwxrwx 0
0
342936
c:\/WINDOWS/SYSTEM/VBSCRIPT.DLL
62614 m.. -/-rwxrwxrwx 0
0
342998
c:\/WINDOWS/SYSTEM/VIP.386
121344 m.. -/-r-xr-xr-x 0
0
1243660
c:\/PROGRA~1/THEMIC~1/GUIDE.EXE
30768 m.. -/-rwxrwxrwx 0
0
685582
c:\/WINDOWS/SYSTEM/IOSUBSYS/AIC78XX.MPD
26584 m.. -/-rwxrwxrwx 0
0
328331
c:\/WINDOWS/INF/MDMBSCH.INF
153088 m.. -/-rwxrwxrwx 0
0
342680
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/WINDOWS/SYSTEM/JGDWMIE.DLL
22953 m.. -/-rwxrwxrwx 0
0
328382
c:\/WINDOWS/INF/MDMMTS.INF
23529 m.. -/-rwxrwxrwx 0
0
368141
c:\/WINDOWS/HELP/PACKAGER.HLP
10240 m.. -/-rwxrwxrwx 0
0
342959
c:\/WINDOWS/SYSTEM/VVEXE32.EXE
13824 m.. -/-r-xr-xr-x 0
0
1243656
c:\/PROGRA~1/THEMIC~1/CCPSH.DLL
22810 m.. -/-rwxrwxrwx 0
0
327889
c:\/WINDOWS/PROTMAN.DOS
552 m.. -/-rwxrwxrwx 0
0
368142
c:\/WINDOWS/HELP/DIALER.CNT
10098 m.. -/-r-xr-xr-x 0
0
1243654
c:\/PROGRA~1/THEMIC~1/800950.DAT
3158 m.. -/-rwxrwxrwx 0
0
1065477
c:\/WINDOWS/WANGSAMP/GOTODLG.FRM
173536 m.. -/-rwxrwxrwx 0
0
342607
c:\/WINDOWS/SYSTEM/RICHED32.DLL
3632 m.. -/-rwxrwxrwx 0
0
327765
c:\/WINDOWS/WINVER.EXE
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
5676 m.. -/-rwxrwxrwx 0
0
342843
c:\/WINDOWS/SYSTEM/QUARTZ.VXD
23617 m.. -/-rwxrwxrwx 0
0
328353
c:\/WINDOWS/INF/MDMGATEW.INF
7315 m.. -/-rwxrwxrwx 0
0
368206
c:\/WINDOWS/HELP/TELEPHON.HLP
36864 m.. -/-rwxrwxrwx 0
0
342934
c:\/WINDOWS/SYSTEM/SHLWAPI.DLL
5360 m.. -/-r-xr-xr-x 0
0
765987
c:\/WINDOWS/FONTS/VGAFIX.FON
9584 m.. -/-rwxrwxrwx 0
0
368195
c:\/WINDOWS/HELP/MMDRV.HLP
182 m.. -/-rwxrwxrwx 0
0
327866
c:\/WINDOWS/Black Thatch.bmp (BLACKT~1.BMP)
25882 m.. -/-rwxrwxrwx 0
0
343568
c:\/WINDOWS/COMMAND/SORT.EXE
109424 m.. -/-rwxrwxrwx 0
0
342725
c:\/WINDOWS/SYSTEM/AVIFILE.DLL
96784 m.. -/-rwxrwxrwx 0
0
342983
c:\/WINDOWS/SYSTEM/3D Flower Box.scr (3DFLOW~1.SCR)
55100 m.. -/-rwxrwxrwx 0
0
328403
c:\/WINDOWS/INF/MDMROCK3.INF
16432 m.. -/-rwxrwxrwx 0
0
342594
c:\/WINDOWS/SYSTEM/SYSTHUNK.DLL
29184 m.. -/-rwxrwxrwx 0
0
3274767
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/WINDOWS/SYSTEM/VIEWERS/VSDRW.DLL
126464 m.. -/-rwxrwxrwx 0
0
537617
c:\/PROGRA~1/NETMEE~1/SOEDPER.DLL
547 m.. -/-rwxrwxrwx 0
0
1225224
c:\/PROGRA~1/ICW-IN~1/ICWX25B.DUN
7309 m.. -/-rwxrwxrwx 0
0
327733
c:\/WINDOWS/SUPPORT.TXT
2112 m.c -/-rwxrwxrwx 0
0
327769
c:\/WINDOWS/CONTROL.EXE
14624 m.. -/-rwxrwxrwx 0
0
342608
c:\/WINDOWS/SYSTEM/VGAFULL.3GR
42144 m.. -/-rwxrwxrwx 0
0
342578
c:\/WINDOWS/SYSTEM/UNIMDM.TSP
22233 m.. -/-rwxrwxrwx 0
0
368171
c:\/WINDOWS/HELP/COMMON.HLP
306688 m.. -/-rwxrwxrwx 0
0
327745
c:\/WINDOWS/WINHLP32.EXE
8192 m.c -/-rwxrwxrwx 0
0
327775
c:\/WINDOWS/RUNDLL32.EXE
161712 m.. -/-rwxrwxrwx 0
0
342877
c:\/WINDOWS/SYSTEM/TAPI.DLL
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
197 m.. -/-rwxrwxrwx 0
0
1225232
c:\/PROGRA~1/ICW-IN~1/MSN.ISP
164352 m.. -rwxrwxrwx 0
0
551435 <part2.img_SWD6_32.WPC-dead-551435>
62339 m.. -/-rwxrwxrwx 0
0
328320
c:\/WINDOWS/INF/APPS.INF
129824 m.. -/-rwxrwxrwx 0
0
342980
c:\/WINDOWS/SYSTEM/3D Text.scr (3DTEXT~1.SCR)
88064 m.. -/-rwxrwxrwx 0
0
342724
c:\/WINDOWS/SYSTEM/AVIFIL32.DLL
4608 m.. -/-rwxrwxrwx 0
0
342778
c:\/WINDOWS/SYSTEM/RSRC32.DLL
146784 m.. -/-rwxrwxrwx 0
0
342589
c:\/WINDOWS/SYSTEM/DESKCP16.DLL
10558 m.. -/-rwxrwxrwx 0
0
368251
c:\/WINDOWS/HELP/SYSMON.HLP
21629 m.. -/-rwxrwxrwx 0
0
342551
c:\/WINDOWS/SYSTEM/ENABLE4.VXD
24390 m.. -/-rwxrwxrwx 0
0
685587
c:\/WINDOWS/SYSTEM/IOSUBSYS/ESDI_506.PDR
116160 m.. -/-rwxrwxrwx 0
0
342682
c:\/WINDOWS/SYSTEM/INTRINSC.OCX
4152 m.. -/-rwxrwxrwx 0
0
328256
c:\/WINDOWS/INF/NETBW.INF
10471 m.. -/-rwxrwxrwx 0
0
343574
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/WINDOWS/COMMAND/MORE.COM
23370 m.. -/-rwxrwxrwx 0
0
328408
c:\/WINDOWS/INF/MDMSONIX.INF
55364 m.. -/-rwxrwxrwx 0
0
1334789
c:\/WINDOWS/JAVA/TRUSTLIB/TCLASSES.ZIP
801680 m.. -/-rwxrwxrwx 0
0
342840
c:\/WINDOWS/SYSTEM/QUARTZ.DLL
27648 m.. -/-rwxrwxrwx 0
0
342674
c:\/WINDOWS/SYSTEM/WSOCK32N.DLL
7161 m.. -/-rwxrwxrwx 0
0
327721
c:\/WINDOWS/EXCHANGE.TXT
7296 m.. -/-r-xr-xr-x 0
0
765989
c:\/WINDOWS/FONTS/VGASYS.FON
38517 m.. -/-rwxrwxrwx 0
0
327732
c:\/WINDOWS/PROGRAMS.TXT
56039 m.. -/-rwxrwxrwx 0
0
328229
c:\/WINDOWS/INF/MONITOR3.INF
28015 m.. -/-rwxrwxrwx 0
0
328261
c:\/WINDOWS/INF/NETCLI3.INF
21759 m.. -/-rwxrwxrwx 0
0
328252
c:\/WINDOWS/INF/NET.INF
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
76288 m.. -/-rwxrwxrwx 0
0
342899
c:\/WINDOWS/SYSTEM/MSSHRUI.DLL
6144 m.. -/-rwxrwxrwx 0
0
342576
c:\/WINDOWS/SYSTEM/UMDM32.DLL
48880 m.. -/-rwxrwxrwx 0
0
342572
c:\/WINDOWS/SYSTEM/PKPD.DLL
55125 m.. -/-rwxrwxrwx 0
0
3874309
c:\/WINDOWS/SYSTEM/DXBACKUP/DISPLAY/MSDISP.INF
13912 m.. -rwxrwxrwx 0
0
545800 <part2.img_OSNET.VXD-dead-545800>
27967 m.. -/-rwxrwxrwx 0
0
368188
c:\/WINDOWS/HELP/WHATSNEW.HLP
800 m.. -/-rwxrwxrwx 0
0
327887
c:\/WINDOWS/PROTOCOL
15495 m.. -/-rwxrwxrwx 0
0
343571
c:\/WINDOWS/COMMAND/DOSKEY.COM
1046 m.. -/-rwxrwxrwx 0
0
328314
c:\/WINDOWS/INF/TAPI.INF
17067 m.. -/-rwxrwxrwx 0
0
328364
c:\/WINDOWS/INF/MDMINTEL.INF
311808 m.c -/-rwxrwxrwx 0
0
551431
c:\/PROGRA~1/ACCESS~1/MSPAINT.EXE
10240 m.. -/-rwxrwxrwx 0
0
342708
c:\/WINDOWS/SYSTEM/MSG711.ACM
829 m.. -/-rwxrwxrwx 0
0
551946
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
c:\/PROGRA~1/ACCESS~1/HYPERT~1/_CI.HT (deleted)06E4 A169 4E46
728 m.. -/-rwxrwxrwx 0
0
327884
c:\/WINDOWS/HOSTS.SAM
41488 m.. -/-rwxrwxrwx 0
0
342838
c:\/WINDOWS/SYSTEM/MCIQTZ32.DLL
23110 m.. -/-rwxrwxrwx 0
0
328433
c:\/WINDOWS/INF/MDMWOER.INF
31120 m.. -/-rwxrwxrwx 0
0
1556
c:\/WINDOWS/SYSBCKUP/COMPOBJ.DLL
24064 m.. -/-rwxrwxrwx 0
0
1558
c:\/WINDOWS/SYSBCKUP/OLESVR.DLL
116301 m.. -/-rwxrwxrwx 0
0
343032
c:\/WINDOWS/SYSTEM/NDIS.VXD
35112 m.. -/-rwxrwxrwx 0
0
545824
c:\/WINDOWS/SYSTEM/VMM32/_XDLDR.VXD (deleted)
3691 m.. -/-rwxrwxrwx 0
0
327885
c:\/WINDOWS/LMHOSTS.SAM
414208 m.. -/-rwxrwxrwx 0
0
342889
c:\/WINDOWS/SYSTEM/KERNEL32.DLL
10640 m.. -/-rwxrwxrwx 0
0
342825
c:\/WINDOWS/SYSTEM/MSGSRV32.EXE
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
50998 m.. -/-rwxrwxrwx 0
0
343036
c:\/WINDOWS/SYSTEM/NWLINK.VXD
35112 m.. -rwxrwxrwx 0
0
545824 <part2.img_XDLDR.VXD-dead-545824>
25842 m.. -/-rwxrwxrwx 0
0
328277
c:\/WINDOWS/INF/NETMADGE.INF
38080 m.. -/-rwxrwxrwx 0
0
327900
c:\/WINDOWS/K2V_DIG.INI
18432 m.. -/-rwxrwxrwx 0
0
1225233
c:\/PROGRA~1/ICW-IN~1/INETWIZ.EXE
851 m.. -/-r-xr-xr-x 0
0
1243664
c:\/PROGRA~1/THEMIC~1/STATE.PBK
4017 m.. -/-rwxrwxrwx 0
0
2257930
c:\/WINDOWS/SHELLNEW/QUATTRO.WB2
21872 m.. -/-rwxrwxrwx 0
0
342750
c:\/WINDOWS/SYSTEM/MSACM.DRV
21504 m.. -/-rwxrwxrwx 0
0
3274757
c:\/WINDOWS/SYSTEM/VIEWERS/DEBMP.DLL
13535 m.. -/-rwxrwxrwx 0
0
328421
c:\/WINDOWS/INF/MDMTRIPL.INF
21695 m.. -/-rwxrwxrwx 0
0
328361
c:\/WINDOWS/INF/MDMICO.INF
38462 m.. -/-rwxrwxrwx 0
0
327844
c:\/WINDOWS/Setup.bmp (SETUP.BMP)
508 m.. -/-rwxrwxrwx 0
0
368164
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/WINDOWS/HELP/CALC.CNT
18944 m.. -/-rwxrwxrwx 0
0
327786
c:\/WINDOWS/WABMIG.EXE
15360 m.. -/-rwxrwxrwx 0
0
327905
c:\/WINDOWS/RSRCMTR.EXE
22103 m.. -/-rwxrwxrwx 0
0
328268
c:\/WINDOWS/INF/NETEE16.INF
121 m.. -/-rwxrwxrwx 0
0
368182
c:\/WINDOWS/HELP/CONNECT.CNT
11776 m.. -/-rwxrwxrwx 0
0
342841
c:\/WINDOWS/SYSTEM/MCIQTZ.DRV
38389 m.. -/-rwxrwxrwx 0
0
368191
c:\/WINDOWS/HELP/MSNPSS.HLP
46740 m.. -rwxrwxrwx 0
0
545820 <part2.img_PICD.VXD-dead-545820>
151040 m.. -/-rwxrwxrwx 0
0
342647
c:\/WINDOWS/SYSTEM/SYNCUI.DLL
31684 m.. -/-rwxrwxrwx 0
0
545822
c:\/WINDOWS/SYSTEM/VMM32/_TD.VXD (deleted)
182752 m.. -/--wx-wx-wx 0
0
6740492
c:\/TEMP/Urlmon.dll (URLMON.DLL)
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
12144 m.. -/-rwxrwxrwx 0
0
2172934
c:\/WINDOWS/CURSORS/HOURGLAS.ANI
27196 m.. -/-rwxrwxrwx 0
0
545838
c:\/WINDOWS/SYSTEM/VMM32/_POOLER.VXD (deleted)
6992 m.. -/-rwxrwxrwx 0
0
1573
c:\/WINDOWS/SYSBCKUP/DISPDIB.DLL
55408 m.. -/-rwxrwxrwx 0
0
537648
c:\/PROGRA~1/NETMEE~1/MNMUT_.DLL
253952 m.. -/-rwxrwxrwx 0
0
1547
c:\/WINDOWS/SYSBCKUP/MSVCRT20.DLL
9522 m.. -/-rwxrwxrwx 0
0
342797
c:\/WINDOWS/SYSTEM/CP_437.NLS
57012 m.. -/-rwxrwxrwx 0
0
765997
c:\/WINDOWS/FONTS/VERDANAI.TTF
328 m.. -/-rwxrwxrwx 0
0
1225222
c:\/PROGRA~1/ICW-IN~1/ICWIP.DUN
112880 m.. -/-rwxrwxrwx 0
0
3345926
c:\/WINDOWS/SYSTEM/VSERVER.VXD
9004 m.. -/-rwxrwxrwx 0
0
342721
c:\/WINDOWS/SYSTEM/WFM0203A.CSP
3115 m.. -/-rwxrwxrwx 0
0
2885640
c:\/PROGRA~1/ONLINE~1/AT&T/CUSTCARE.GIF
62968 m.. -/-rwxrwxrwx 0
0
765961
c:\/WINDOWS/FONTS/ARIALI.TTF
29475 m.. -/-rwxrwxrwx 0
0
328322
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/WINDOWS/INF/MDMACEEX.INF
253952 m.. -/-rwxrwxrwx 0
0
342558
c:\/WINDOWS/SYSTEM/MSVCRT20.DLL
34816 m.. -/-rwxrwxrwx 0
0
3274773
c:\/WINDOWS/SYSTEM/VIEWERS/VSRTF.DLL
1980 m.. -/-rwxrwxrwx 0
0
328297
c:\/WINDOWS/INF/NETTULIP.INF
25600 m.. -/-rwxrwxrwx 0
0
343008
c:\/WINDOWS/SYSTEM/NWAB32.DLL
41472 m.. -/-rwxrwxrwx 0
0
343587
c:\/WINDOWS/COMMAND/XCOPY32.EXE
25804 m.. -/-rwxrwxrwx 0
0
328399
c:\/WINDOWS/INF/MDMRACAL.INF
10401 m.. -rwxrwxrwx 0
0
545825 <part2.img_OMBUFF.VXD-dead-545825>
5448 m.. -/-rwxrwxrwx 0
0
342794
c:\/WINDOWS/SYSTEM/CP_28593.NLS
59564 m.. -/-rwxrwxrwx 0
0
1201160
c:\/WINDOWS/SYSTEM/COLOR/MNB22G21.ICM
27437 m.. -/-rwxrwxrwx 0
0
328250
c:\/WINDOWS/INF/MULTILNG.INF
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
5684 m.. -/-rwxrwxrwx 0
0
342677
c:\/WINDOWS/SYSTEM/JAVASUP.VXD
44304 m.. -/-r-xr-xr-x 0
0
765977
c:\/WINDOWS/FONTS/DOSAPP.FON
32012 m.. -/-rwxrwxrwx 0
0
328248
c:\/WINDOWS/INF/MSWEBSVR.INF
32256 m.. -/-r-xr-xr-x 0
0
551437
c:\/PROGRA~1/ACCESS~1/mspcx32.dll (MSPCX32.DLL)
205072 m.. -/-rwxrwxrwx 0
0
342618
c:\/WINDOWS/SYSTEM/WAB32.DLL
42247 m.. -/-rwxrwxrwx 0
0
342831
c:\/WINDOWS/SYSTEM/PCI.VXD
27094 m.. -/-rwxrwxrwx 0
0
343589
c:\/WINDOWS/COMMAND/COUNTRY.SYS
106960 m.. -/-rwxrwxrwx 0
0
342993
c:\/WINDOWS/SYSTEM/NETAPI.DLL
2971 m.. -/-rwxrwxrwx 0
0
328209
c:\/WINDOWS/INF/ENABLE.INF
55808 m.. -/-rwxrwxrwx 0
0
342554
c:\/WINDOWS/SYSTEM/MFCD30.DLL
6144 m.. -/-rwxrwxrwx 0
0
551943
c:\/PROGRA~1/ACCESS~1/HYPERT~1/HYPERTRM.EXE
16896 m.. -/-rwxrwxrwx 0
0
10430474
c:\/WINDOWS/SYSTEM/BACKUP/stdole2.tlb (STDOLE2.TLB)
4608 m.. -/-rwxrwxrwx 0
0
2257925
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/WINDOWS/SHELLNEW/WINWORD.DOC
12800 m.. -/-rwxrwxrwx 0
0
342628
c:\/WINDOWS/SYSTEM/OICOM400.DLL
4608 m.. -/-rwxrwxrwx 0
0
537611
c:\/PROGRA~1/NETMEE~1/MCS32.DLL
4896 m.c -/-rwxrwxrwx 0
0
327758
c:\/WINDOWS/SCANDSKW.EXE
36024 m.. -/-rwxrwxrwx 0
0
328289
c:\/WINDOWS/INF/NETSMC.INF
8502 m.. -/-rwxrwxrwx 0
0
368156
c:\/WINDOWS/HELP/WANGSHL.HLP
36561 m.. -/-rwxrwxrwx 0
0
328309
c:\/WINDOWS/INF/SCSI.INF
15804 m.. -/-rwxrwxrwx 0
0
342759
c:\/WINDOWS/SYSTEM/MSMOUSE.VXD
47616 m.. -/-rwxrwxrwx 0
0
342691
c:\/WINDOWS/SYSTEM/MOSCC.DLL
22016 m.. -/-rwxrwxrwx 0
0
342662
c:\/WINDOWS/SYSTEM/JAVAPRXY.DLL
3536 m.. -/-rwxrwxrwx 0
0
342563
c:\/WINDOWS/SYSTEM/WINASPI.DLL
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
4082 m.. -/-rwxrwxrwx 0
0
2885639
c:\/PROGRA~1/ONLINE~1/AT&T/BLGLOBE.GIF
398 m.. -/-rwxrwxrwx 0
0
342686
c:\/WINDOWS/SYSTEM/KBDUS.KBD
15376 m.. -/-rwxrwxrwx 0
0
537625
c:\/PROGRA~1/NETMEE~1/MNMAL_.DLL
57328 m.. -/-rwxrwxrwx 0
0
342803
c:\/WINDOWS/SYSTEM/OLE2CONV.DLL
17920 m.. -/-rwxrwxrwx 0
0
342627
c:\/WINDOWS/SYSTEM/OIADM400.DLL
7332 m.. -/-rwxrwxrwx 0
0
343565
c:\/WINDOWS/COMMAND/SCANDISK.INI
66560 m.. -/-rwxrwxrwx 0
0
342905
c:\/WINDOWS/SYSTEM/WSOCK32.DLL
22127 m.. -rwxrwxrwx 0
0
545809 <part2.img_EBOOT.VXD-dead-545809>
15437 m.. -/-rwxrwxrwx 0
0
328373
c:\/WINDOWS/INF/MDMLNGSH.INF
4608 m.. -/-rwxrwxrwx 0
0
327698
c:\/WINDOWS/PBRUSH.EXE
23435 m.. -/-rwxrwxrwx 0
0
328416
c:\/WINDOWS/INF/MDMTEXAS.INF
11063 m.. -/-rwxrwxrwx 0
0
685594
c:\/WINDOWS/SYSTEM/IOSUBSYS/TORISAN3.VXD
33792 m.. -/-rwxrwxrwx 0
0
342603
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/WINDOWS/SYSTEM/MKCOMPAT.EXE
23834 m.. -/-rwxrwxrwx 0
0
551432
c:\/PROGRA~1/ACCESS~1/_ACKUP.CFG (deleted)
5416 m.. -/-rwxrwxrwx 0
0
342793
c:\/WINDOWS/SYSTEM/CP_28592.NLS
48560 m.. -/-rwxrwxrwx 0
0
327740
c:\/WINDOWS/TWUNK_16.EXE
93 m.. -/-rwxrwxrwx 0
0
342946
c:\/WINDOWS/SYSTEM/BLANK.HTM
217600 m.. -/-rwxrwxrwx 0
0
1243662
c:\/PROGRA~1/THEMIC~1/SIGNUP.EXE
76704 m.. -/-rwxrwxrwx 0
0
3345924
c:\/WINDOWS/SYSTEM/S3MM.DRV
392 m.. -/-rwxrwxrwx 0
0
368193
c:\/WINDOWS/HELP/SNDVOL32.CNT
24895 m.. -/-rwxrwxrwx 0
0
368198
c:\/WINDOWS/HELP/SOUNDREC.HLP
11120 m.. -/-rwxrwxrwx 0
0
368197
c:\/WINDOWS/HELP/SNDVOL32.HLP
92672 m.. -/-rwxrwxrwx 0
0
342854
c:\/WINDOWS/SYSTEM/COMDLG32.DLL
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
39936 m.. -/-rwxrwxrwx 0
0
342823
c:\/WINDOWS/SYSTEM/ULSVC.EXE
69120 m.. -/-rwxrwxrwx 0
0
342704
c:\/WINDOWS/SYSTEM/SAGE.DLL
72272 m.. -/-rwxrwxrwx 0
0
1577
c:\/WINDOWS/SYSBCKUP/AVICAP.DLL
48128 m.. -/-rwxrwxrwx 0
0
327791
c:\/WINDOWS/FILEXFER.EXE
10111 m.. -/-rwxrwxrwx 0
0
328273
c:\/WINDOWS/INF/NETHP.INF
317952 m.. -/-rwxrwxrwx 0
0
537608
c:\/PROGRA~1/NETMEE~1/GCCNC.DLL
65271 m.. -/-rwxrwxrwx 0
0
343557
c:\/WINDOWS/COMMAND/DRVSPACE.BIN
6928 m.. -/-rwxrwxrwx 0
0
1568
c:\/WINDOWS/SYSBCKUP/DCIMAN.DLL
18578 m.. -rwxrwxrwx 0
0
545818 <part2.img_MCPD.VXD-dead-545818>
194 m.. -/-rwxrwxrwx 0
0
327863
c:\/WINDOWS/Blue Rivets.bmp (BLUERI~1.BMP)
95744 m.. -/-rwxrwxrwx 0
0
327750
c:\/WINDOWS/EXTRAC32.EXE
116192 m.. -/-rwxrwxrwx 0
0
342669
c:\/WINDOWS/SYSTEM/RAOCX32.DLL
36480 m.. -/-rwxrwxrwx 0
0
342824
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/WINDOWS/SYSTEM/MSPCIC.DLL
53399 m.. -/-rwxrwxrwx 0
0
545797
c:\/WINDOWS/SYSTEM/VMM32/MRCI2.VXD
19129 m.. -/-rwxrwxrwx 0
0
343039
c:\/WINDOWS/SYSTEM/VNETSUP.VXD
13760 m.. -/-rwxrwxrwx 0
0
537627
c:\/PROGRA~1/NETMEE~1/MNMCLP_.DLL
15360 m.. -/-rwxrwxrwx 0
0
342789
c:\/WINDOWS/SYSTEM/CHIKDI.DLL
71215 m.. -rwxrwxrwx 0
0
545815 <part2.img_FAT.VXD-dead-545815>
17408 m.. -/-rwxrwxrwx 0
0
342857
c:\/WINDOWS/SYSTEM/DOCPROP.DLL
2893 m.. -/-rwxrwxrwx 0
0
328203
c:\/WINDOWS/INF/BKUPAGNT.INF
92160 m.. -/-rwxrwxrwx 0
0
342730
c:\/WINDOWS/SYSTEM/ICCVID.DLL
31744 m.. -/-r-xr-xr-x 0
0
765976
c:\/WINDOWS/FONTS/COURF.FON
2810 m.. -/-rwxrwxrwx 0
0
328259
c:\/WINDOWS/INF/NETCEM.INF
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
27049 m.. -/-rwxrwxrwx 0
0
328434
c:\/WINDOWS/INF/MDMYORIK.INF
462 m.. -/-rwxrwxrwx 0
0
328315
c:\/WINDOWS/INF/UNKNOWN.INF
9719 m.. -/-rwxrwxrwx 0
0
343588
c:\/WINDOWS/COMMAND/ANSI.SYS
4096 m.. -/-rwxrwxrwx 0
0
342596
c:\/WINDOWS/SYSTEM/VDMDBG.DLL
6992 m.. -/-rwxrwxrwx 0
0
342729
c:\/WINDOWS/SYSTEM/DISPDIB.DLL
9728 m.. -/-rwxrwxrwx 0
0
342640
c:\/WINDOWS/SYSTEM/AWADPR32.EXE
48128 m.. -/-rwxrwxrwx 0
0
342538
c:\/WINDOWS/SYSTEM/MSPRINT2.DLL
26940 m.. -/-rwxrwxrwx 0
0
368196
c:\/WINDOWS/HELP/MPLAYER.HLP
59564 m.. -/-rwxrwxrwx 0
0
1201158
c:\/WINDOWS/SYSTEM/COLOR/MNB22G15.ICM
12288 m.. -/-r-xr-xr-x 0
0
765973
c:\/WINDOWS/FONTS/8514OEM.FON
18077 m.. -rwxrwxrwx 0
0
545798 <part2.img_IOSXLAT.VXD-dead-545798>
70144 m.. -/-rwxrwxrwx 0
0
342786
c:\/WINDOWS/SYSTEM/NAC.DLL
544 m.. -/-rwxrwxrwx 0
0
368179
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/WINDOWS/HELP/REGEDIT.CNT
20992 m.. -/-rwxrwxrwx 0
0
1306634
c:\/PROGRA~1/INTERN~1/REGEXP.EXE
82944 m.. -/-rwxrwxrwx 0
0
1559
c:\/WINDOWS/SYSBCKUP/OLECLI.DLL
23174 m.. -/-rwxrwxrwx 0
0
328431
c:\/WINDOWS/INF/MDMVDOT.INF
14007 m.. -/-rwxrwxrwx 0
0
368228
c:\/WINDOWS/HELP/FILEXFER.HLP
24655 m.. -/-rwxrwxrwx 0
0
328406
c:\/WINDOWS/INF/MDMSMART.INF
87328 m.. -/-rwxrwxrwx 0
0
327738
c:\/WINDOWS/TWAIN.DLL
27076 m.. -/-rwxrwxrwx 0
0
2885644
c:\/PROGRA~1/ONLINE~1/AT&T/MGRMAP.GIF
11591 m.. -/-rwxrwxrwx 0
0
368230
c:\/WINDOWS/HELP/WINPOPUP.HLP
9166 m.. -/-rwxrwxrwx 0
0
328437
c:\/WINDOWS/INF/MDMZYXEL.INF
19632 m.. -/-r-xr-xr-x 0
0
765982
c:\/WINDOWS/FONTS/SMALLF.FON
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
5532 m.. -/-rwxrwxrwx 0
0
342810
c:\/WINDOWS/SYSTEM/STDOLE.TLB
77312 m.. -/-rwxrwxrwx 0
0
343010
c:\/WINDOWS/SYSTEM/NWNP32.DLL
2546 m.. -/-rwxrwxrwx 0
0
327722
c:\/WINDOWS/EXTRA.TXT
62464 m.. -/-r-xr-xr-x 0
0
551443
c:\/PROGRA~1/ACCESS~1/write32.wpc (WRITE32.WPC)
29271 m.. -/-rwxrwxrwx 0
0
343573
c:\/WINDOWS/COMMAND/MODE.COM
29500 m.. -/-rwxrwxrwx 0
0
328334
c:\/WINDOWS/INF/MDMCOM1.INF
12351 m.. -/-rwxrwxrwx 0
0
368215
c:\/WINDOWS/HELP/AMOVIE.HLP
226304 m.. -/-rwxrwxrwx 0
0
342930
c:\/WINDOWS/SYSTEM/RAGUI32.DLL
21504 m.. -/-rwxrwxrwx 0
0
3345927
c:\/WINDOWS/SYSTEM/DSKAPI32.DLL
26905 m.. -/-rwxrwxrwx 0
0
368147
c:\/WINDOWS/HELP/LICENSE.HLP
121 m.. -/-rwxrwxrwx 0
0
368184
c:\/WINDOWS/HELP/ACCESSIB.CNT
57856 m.. -/-rwxrwxrwx 0
0
342658
c:\/WINDOWS/SYSTEM/IEDKCS32.DLL
92463 m.. -/-r-xr-xr-x 0
0
1243663
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/PROGRA~1/THEMIC~1/PHONE.PBK
54992 m.. -/-rwxrwxrwx 0
0
327783
c:\/WINDOWS/NETDDE.EXE
32240 m.. -/-rwxrwxrwx 0
0
342591
c:\/WINDOWS/SYSTEM/DDEML.DLL
16384 m.. -/-rwxrwxrwx 0
0
327777
c:\/WINDOWS/WELCOME.EXE
42368 m.. -/-rwxrwxrwx 0
0
327797
c:\/WINDOWS/WINSOCK.DLL
12865 m.. -/-rwxrwxrwx 0
0
328325
c:\/WINDOWS/INF/MDMATI.INF
25402 m.. -/-rwxrwxrwx 0
0
343029
c:\/WINDOWS/SYSTEM/AFVXD.VXD
42368 m.. -/-rwxrwxrwx 0
0
1541
c:\/WINDOWS/SYSBCKUP/_EMP.000 (deleted)
39795 m.. -/-rwxrwxrwx 0
0
327787
c:\/WINDOWS/INFRARED.TXT
9056 m.. -/-rwxrwxrwx 0
0
327880
c:\/WINDOWS/TRACERT.EXE
29213 m.. -/-rwxrwxrwx 0
0
328338
c:\/WINDOWS/INF/MDMCPV.INF
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
5152 m.. -/-rwxrwxrwx 0
0
537650
c:\/PROGRA~1/NETMEE~1/MNMALP.EXE
77888 m.. -/-rwxrwxrwx 0
0
342947
c:\/WINDOWS/SYSTEM/MARQUEE.OCX
24838 m.. -/-rwxrwxrwx 0
0
328349
c:\/WINDOWS/INF/MDMETECH.INF
545 m.. -/-rwxrwxrwx 0
0
327716
c:\/WINDOWS/DOSPRMPT.PIF
20616 m.. -/-rwxrwxrwx 0
0
342879
c:\/WINDOWS/SYSTEM/TAPIADDR.DLL
54497 m.. -rwxrwxrwx 0
0
545830 <part2.img_WIN32.VXD-dead-545830>
995 m.. -/-rwxrwxrwx 0
0
343028
c:\/WINDOWS/SYSTEM/LMSCRIPT.PIF
12342 m.. -/-rwxrwxrwx 0
0
328387
c:\/WINDOWS/INF/MDMNOVA.INF
14596 m.. -/-rwxrwxrwx 0
0
342600
c:\/WINDOWS/SYSTEM/CONAGENT.EXE
137728 m.. -/-rwxrwxrwx 0
0
342631
c:\/WINDOWS/SYSTEM/OIGFS400.DLL
571 m.. -/-rwxrwxrwx 0
0
368166
c:\/WINDOWS/HELP/NOTEPAD.CNT
131072 m.. -/-rwxrwxrwx 0
0
342888
c:\/WINDOWS/SYSTEM/GDI32.DLL
17780 m.. -/-rwxrwxrwx 0
0
368190
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/WINDOWS/HELP/MSN.HLP
10127 m.. -/-rwxrwxrwx 0
0
368133
c:\/WINDOWS/HELP/LICENSE.TXT
27196 m.. -rwxrwxrwx 0
0
545838 <part2.img_POOLER.VXD-dead-545838>
32206 m.. -/-rwxrwxrwx 0
0
328344
c:\/WINDOWS/INF/MDMDYNA.INF
18338 m.. -/-rwxrwxrwx 0
0
368181
c:\/WINDOWS/HELP/REGEDIT.HLP
59980 m.. -/-rwxrwxrwx 0
0
1201164
c:\/WINDOWS/SYSTEM/COLOR/MNP22G15.ICM
641536 m.. -/-rwxrwxrwx 0
0
537621
c:\/PROGRA~1/NETMEE~1/WB32.EXE
43113 m.. -/-rwxrwxrwx 0
0
328337
c:\/WINDOWS/INF/MDMCPQ.INF
193024 m.. -/-rwxrwxrwx 0
0
342717
c:\/WINDOWS/SYSTEM/MMSYS.CPL
126944 m.. -/-rwxrwxrwx 0
0
342602
c:\/WINDOWS/SYSTEM/KRNL386.EXE
32256 m.. -/-rwxrwxrwx 0
0
342625
c:\/WINDOWS/SYSTEM/JPEG1X32.DLL
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
36008 m.. -/-rwxrwxrwx 0
0
328379
c:\/WINDOWS/INF/MDMMOTO.INF
3862 m.. -/-rwxrwxrwx 0
0
328442
c:\/WINDOWS/INF/SERWAVE.INF
147968 m.c -/-rwxrwxrwx 0
0
327752
c:\/WINDOWS/MPLAYER.EXE
16384 m.. -/-rwxrwxrwx 0
0
342856
c:\/WINDOWS/SYSTEM/DISKCOPY.DLL
558704 m.. -/-rwxrwxrwx 0
0
342806
c:\/WINDOWS/SYSTEM/OLE32.DLL
61550 m.. -/-rwxrwxrwx 0
0
328401
c:\/WINDOWS/INF/MDMROCK.INF
76704 m.. -/-rwxrwxrwx 0
0
3874321
c:\/WINDOWS/SYSTEM/DXBACKUP/DISPLAY/s3mm.drv (S3MM.DRV)
23134 m.. -/-rwxrwxrwx 0
0
685590
c:\/WINDOWS/SYSTEM/IOSUBSYS/SCSIPORT.PDR
37435 m.. -/-rwxrwxrwx 0
0
328296
c:\/WINDOWS/INF/NETTRANS.INF
96256 m.. -/-rwxrwxrwx 0
0
342921
c:\/WINDOWS/SYSTEM/INETCFG.DLL
16976 m.. -/-rwxrwxrwx 0
0
342749
c:\/WINDOWS/SYSTEM/MIDIMAP.DRV
375930 m.. -/-rwxrwxrwx 0
0
327890
c:\/WINDOWS/NET.EXE
85240 m.. -/-rwxrwxrwx 0
0
765967
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/WINDOWS/FONTS/TIMES.TTF
64432 m.. -/-rwxrwxrwx 0
0
342957
c:\/WINDOWS/SYSTEM/THREED.VBX
49756 m.. -/-rwxrwxrwx 0
0
328439
c:\/WINDOWS/INF/MDMZYXLG.INF
129536 m.. -/-rwxrwxrwx 0
0
342690
c:\/WINDOWS/SYSTEM/MCM.DLL
17192 m.. -/-rwxrwxrwx 0
0
342830
c:\/WINDOWS/SYSTEM/LPTENUM.VXD
63240 m.c -/-rwxrwxrwx 0
0
327700
c:\/WINDOWS/DIALER.EXE
101888 m.. -/-rwxrwxrwx 0
0
342645
c:\/WINDOWS/SYSTEM/IMGTHUMB.OCX
26928 m.. -/-rwxrwxrwx 0
0
537635
c:\/PROGRA~1/NETMEE~1/MNMMG_.DLL
6656 m.. -/-rwxrwxrwx 0
0
342866
c:\/WINDOWS/SYSTEM/FONTREG.EXE
110304 m.. -/-rwxrwxrwx 0
0
342910
c:\/WINDOWS/SYSTEM/INETCPL.CPL
19518 m.. -/-rwxrwxrwx 0
0
368154
c:\/WINDOWS/HELP/WANGOCX.HLP
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
27136 m.. -/-rwxrwxrwx 0
0
3274782
c:\/WINDOWS/SYSTEM/VIEWERS/VSWPF.DLL
64512 m.. -/-rwxrwxrwx 0
0
3274778
c:\/WINDOWS/SYSTEM/VIEWERS/VSWORD.DLL
46347 m.. -/-rwxrwxrwx 0
0
328246
c:\/WINDOWS/INF/MSPRINT.INF
7212 m.. -/-rwxrwxrwx 0
0
1306629
c:\/PROGRA~1/INTERN~1/RAREADME.TXT
9294 m.. -/-rwxrwxrwx 0
0
328332
c:\/WINDOWS/INF/MDMCMCM.INF
37888 m.. -/-rwxrwxrwx 0
0
342700
c:\/WINDOWS/SYSTEM/SYSTRAY.EXE
4096 m.. -/-rwxrwxrwx 0
0
342817
c:\/WINDOWS/SYSTEM/MFCUIW32.DLL
2096 m.. -/-rwxrwxrwx 0
0
342575
c:\/WINDOWS/SYSTEM/UMDM16.DLL
1978 m.. -/-rwxrwxrwx 0
0
368137
c:\/WINDOWS/HELP/MSPAINT.CNT
1676 m.. -/-rwxrwxrwx 0
0
2885650
c:\/PROGRA~1/ONLINE~1/AT&T/SIGNUP_B.GIF
11040 m.. -/-rwxrwxrwx 0
0
537633
c:\/PROGRA~1/NETMEE~1/MNMGDC_.DLL
14438 m.. -/-rwxrwxrwx 0
0
343037
c:\/WINDOWS/SYSTEM/NWSP.VXD
6729752 m.. -/-rwxrwxrwx 0
0
2462215
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/PROGRA~1/ONLINE~1/AOL/SETUP32.EXE
20992 m.. -/-rwxrwxrwx 0
0
342836
c:\/WINDOWS/SYSTEM/SPOOL32.EXE
Thu Oct 31 1996 11:47:16 22288 m.. -/-rwxrwxrwx 0
0
3345968
c:\/WINDOWS/SYSTEM/~GLH000b.TMP (_GLH000B.TMP) (deleted)
22288 m.. -/-rwxrwxrwx 0
0
3345957
c:\/WINDOWS/SYSTEM/_EMP.000 (deleted)
22288 m.. -/-rwxrwxrwx 0
0
342912
c:\/WINDOWS/SYSTEM/COMCAT.DLL
22288 m.. -rwxrwxrwx 0
0
3345968 <part2.img_GLH000B.TMP-dead-3345968>
22288 m.. -rwxrwxrwx 0
0
3345957 <part2.img_EMP.000-dead-3345957>
Mon Feb 10 1997 00:00:00 1838 m.. -rwxrwxrwx 0
0
18775570
<part2.img-_MPLIB32.OPT-dead-18775570>
Tue Apr 15 1997 16:59:54 73948 m.. -rwxrwxrwx 0
0
12402693
<part2.img-_GLH0009.TMP-dead-12402693>
12402711
Wed Apr 16 1997 12:18:00 41788 m.. -rwxrwxrwx 0
0
<part2.img-_GLH000B.TMP-dead-12402711>
Mon May 05 1997 10:01:42
766 m.. -rwxrwxrwx 0
0
12403252
<part2.img-_GLH005F.TMP-dead-12403252>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Mon May 05 1997 10:03:28
766 m.. -rwxrwxrwx 0
0
12403247
<part2.img-_GLH0063.TMP-dead-12403247>
Mon May 05 1997 15:22:30
326 m.. -rwxrwxrwx 0
0
12404277
<part2.img-_GLH0036.TMP-dead-12404277>
Mon May 05 1997 15:28:40
326 m.. -rwxrwxrwx 0
0
12404285
<part2.img-_GLH002F.TMP-dead-12404285>
Wed May 07 1997 15:21:30 308278 m.. -rwxrwxrwx 0
0
12406278
<part2.img-_GLH006F.TMP-dead-12406278>
Wed May 07 1997 15:28:56 308278 m.. -rwxrwxrwx 0
0
12406277
<part2.img-_GLH0070.TMP-dead-12406277>
Wed May 14 1997 20:16:36 36352 m.. -rwxrwxrwx 0
0
12404741
<part2.img-_GLH0077.TMP-dead-12404741>
Mon May 19 1997 08:08:10 118544 m.. -/-rwxrwxrwx 0
0
3345953
c:\/WINDOWS/SYSTEM/asycfilt.dll (ASYCFILT.DLL)
Mon May 19 1997 08:08:12 114960 m.. -/-rwxrwxrwx 0
0
342839
c:\/WINDOWS/SYSTEM/OLEPRO32.DLL
492304 m.. -/-rwxrwxrwx 0
0
342807
c:\/WINDOWS/SYSTEM/OLEAUT32.DLL
16896 m.. -/-rwxrwxrwx 0
0
342949
c:\/WINDOWS/SYSTEM/STDOLE2.TLB
Mon May 19 1997 22:53:42 90048 m.. -rwxrwxrwx 0
0
12402192
<part2.img-_GLH0081.TMP-dead-12402192>
Wed Jun 04 1997 12:56:52 100104 m.c -/-rwxrwxrwx 0
0
766015
c:\/WINDOWS/FONTS/VINERITC.TTF
0
342773
Sat Jun 14 1997 00:56:08 56832 m.c -/-rwxrwxrwx 0
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
c:\/WINDOWS/SYSTEM/iyvu9_32.dll (IYVU9_32.DLL)
0
766013
Mon Jun 30 1997 18:02:50 156000 m.c -/-rwxrwxrwx 0
c:\/WINDOWS/FONTS/PAPYRUS.TTF
0
13408271
Wed Jul 02 1997 08:05:00 91136 m.. -rwxrwxrwx 0
<part2.img-_ISRES.DLL-dead-13408271>
0
342780
Mon Jul 07 1997 11:33:40 109056 m.. -/-rwxrwxrwx 0
c:\/WINDOWS/SYSTEM/UNINSTAL.EXE
0
766014
Wed Jul 09 1997 12:30:34 71280 m.c -/-rwxrwxrwx 0
c:\/WINDOWS/FONTS/POORICH.TTF
0
3346035
Mon Jul 14 1997 18:00:00 41472 m.. -/-rwxrwxrwx 0
c:\/WINDOWS/SYSTEM/dx6E230.TMP (DPSERIAL.DLL)
0
368238 <part2.img16339 m.. -rwxrwxrwx 0
_IJOY.HLP-dead-368238>
0
3345972
16986 m.. -/-rwxrwxrwx 0
c:\/WINDOWS/SYSTEM/dx6E250.TMP (_INPUT.VXD) (deleted)
0
3346049
229888 m.. -/-rwxrwxrwx 0
c:\/WINDOWS/SYSTEM/dx6E274.TMP (JOY.CPL)
0
3346043
16986 m.. -/-rwxrwxrwx 0
c:\/WINDOWS/SYSTEM/dx6E262.TMP (DINPUT.VXD)
0
3345982
80384 m.. -/-rwxrwxrwx 0
c:\/WINDOWS/SYSTEM/dx6E290.TMP (_CHAND.DLL) (deleted)
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
80384 m.. -/-rwxrwxrwx 0
0
3346053
c:\/WINDOWS/SYSTEM/dx6E294.TMP (GCHAND.DLL)
16339 m.. -/-rwxrwxrwx 0
0
368259
c:\/WINDOWS/HELP/dx6E354.TMP (DIJOY.HLP)
12009 m.. -/-rwxrwxrwx 0
0
3345964
c:\/WINDOWS/SYSTEM/dx6E1B5.TMP (MTRR.VXD)
229888 m.. -/-rwxrwxrwx 0
0
3345978
c:\/WINDOWS/SYSTEM/dx6E264.TMP (_OY.CPL) (deleted)
16986 m.. -rwxrwxrwx 0
0
3345972 <part2.img_INPUT.VXD-dead-3345972>
80384 m.. -rwxrwxrwx 0
0
3345982 <part2.img_CHAND.DLL-dead-3345982>
16339 m.. -/-rwxrwxrwx 0
0
368238
c:\/WINDOWS/HELP/_IJOY.HLP (deleted)
30320 m.. -/-rwxrwxrwx 0
0
3346045
c:\/WINDOWS/SYSTEM/dx6E264.TMP (VJOYD.VXD)
175616 m.. -/-rwxrwxrwx 0
0
3345970
c:\/WINDOWS/SYSTEM/dx6E243.TMP (_INPUT.DLL) (deleted)
30320 m.. -rwxrwxrwx 0
0
3345974 <part2.img_JOYD.VXD-dead-3345974>
24064 m.. -/-rwxrwxrwx 0
0
3346033
c:\/WINDOWS/SYSTEM/dx6E225.TMP (DPWSOCK.DLL)
12101 m.. -rwxrwxrwx 0
0
3345976 <part2.img_SANALOG.VXD-dead-3345976>
564224 m.. -/-rwxrwxrwx 0
0
3345980
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/WINDOWS/SYSTEM/dx6E275.TMP (_CDEF.DLL) (deleted)
564224 m.. -rwxrwxrwx 0
0
3345980 <part2.img_CDEF.DLL-dead-3345980>
12101 m.. -/-rwxrwxrwx 0
0
3346047
c:\/WINDOWS/SYSTEM/dx6E270.TMP (MSANALOG.VXD)
229888 m.. -rwxrwxrwx 0
0
3345978 <part2.img_OY.CPL-dead-3345978>
564224 m.. -/-rwxrwxrwx 0
0
3346051
c:\/WINDOWS/SYSTEM/dx6E283.TMP (GCDEF.DLL)
175616 m.. -/-rwxrwxrwx 0
0
3346041
c:\/WINDOWS/SYSTEM/dx6E256.TMP (DINPUT.DLL)
175616 m.. -rwxrwxrwx 0
0
3345970 <part2.img_INPUT.DLL-dead-3345970>
39936 m.. -/-rwxrwxrwx 0
0
3346037
c:\/WINDOWS/SYSTEM/dx6E232.TMP (DPLAY.DLL)
12101 m.. -/-rwxrwxrwx 0
0
3345976
c:\/WINDOWS/SYSTEM/dx6E260.TMP (_SANALOG.VXD) (deleted)
30320 m.. -/-rwxrwxrwx 0
0
3345974
c:\/WINDOWS/SYSTEM/dx6E253.TMP (_JOYD.VXD) (deleted)
Sat Jul 19 1997 15:55:40 1347344 m.. -/-rwxrwxrwx 0
0
10430477
c:\/WINDOWS/SYSTEM/BACKUP/_SVBVM50.DLL (deleted)
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
1347344 m.. -/-rwxrwxrwx 0
0
342781
c:\/WINDOWS/SYSTEM/MSVBVM50.DLL
1347344 m.. -rwxrwxrwx 0
0
10430477 <part2.img_SVBVM50.DLL-dead-10430477>
Mon Aug 18 1997 00:00:00
0 .a. -r-xr-xr-x 0
0
16001541 <part2.img_SCREATE.DIR-dead-16001541>
Mon Aug 18 1997 20:10:58
0 ..c -r-xr-xr-x 0
0
16001541 <part2.img_SCREATE.DIR-dead-16001541>
Mon Aug 18 1997 20:11:00
0 m.. -r-xr-xr-x 0
0
16001541
<part2.img-_SCREATE.DIR-dead-16001541>
Sat Sep 06 1997 09:04:16 6900 ..c -rwxrwxrwx 0
0
17620492
<part2.img-_AB1_3.FRM-dead-17620492>
Sat Sep 06 1997 09:04:18 6900 m.. -rwxrwxrwx 0
0
17620492
<part2.img-_AB1_3.FRM-dead-17620492>
Sat Sep 06 1997 09:04:20
549 ..c -rwxrwxrwx 0
0
17620494
<part2.img-_AB1_3.VBP-dead-17620494>
Sat Sep 06 1997 09:04:22
549 m.. -rwxrwxrwx 0
0
17620494
<part2.img-_AB1_3.VBP-dead-17620494>
Sat Sep 06 1997 09:11:44
49 ..c -rwxrwxrwx 0
0
17620490
<part2.img-_AB1_3.VBW-dead-17620490>
Tue Sep 09 1997 14:44:40 29184 m.c -/-rwxrwxrwx 0
0
3899407
c:\/PROGRA~1/MICROS~1/AGEOFE~1/DATA/closedpw.exe
(CLOSEDPW.EXE)
Wed Sep 10 1997 00:00:00 1229960 .a. -rwxrwxrwx 0
0
17620487
<part2.img-_H2.FRX-dead-17620487>
Key fingerprint = AF19
2F94 998D 0FDB5 0DE3D 17620498
F8B5 06E4<part2.imgA169 4E46
546FA27
.a. -rwxrwxrwx
_H2.VBP-dead-17620498>
49 .a. -rwxrwxrwx 0
0
17620500 <part2.img_H2.VBW-dead-17620500>
8038 .a. -rwxrwxrwx 0
0
17620496 <part2.img_H2.FRM-dead-17620496>
0
17620487
Wed Sep 10 1997 21:21:42 1229960 ..c -rwxrwxrwx 0
<part2.img-_H2.FRX-dead-17620487>
0
17620487
Wed Sep 10 1997 21:56:04 1229960 m.. -rwxrwxrwx 0
<part2.img-_H2.FRX-dead-17620487>
0
17620496 <part2.img8038 ..c -rwxrwxrwx 0
_H2.FRM-dead-17620496>
0
17620496
Wed Sep 10 1997 21:56:06 8038 m.. -rwxrwxrwx 0
<part2.img-_H2.FRM-dead-17620496>
0
17620498
Wed Sep 10 1997 21:56:12
546 ..c -rwxrwxrwx 0
<part2.img-_H2.VBP-dead-17620498>
0
17620498
Wed Sep 10 1997 21:56:14
546 m.. -rwxrwxrwx 0
<part2.img-_H2.VBP-dead-17620498>
17620500 <part2.img49 ..c -rwxrwxrwx 0
0
_H2.VBW-dead-17620500>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Wed Sep 10 1997 21:56:16
49 m.. -rwxrwxrwx 0
0
17620500
<part2.img-_H2.VBW-dead-17620500>
Sun Sep 14 1997 00:00:00 11436 .a. -rwxrwxrwx 0
0
17620504
<part2.img-_AB2_3.FRM-dead-17620504>
53 .a. -rwxrwxrwx 0
0
17620508 <part2.img_AB2_3.VBW-dead-17620508>
554 .a. -rwxrwxrwx 0
0
17620506 <part2.img_AB2_3.VBP-dead-17620506>
4360 .a. -rwxrwxrwx 0
0
17620502 <part2.img_AB2_3.FRX-dead-17620502>
Sun Sep 14 1997 11:06:18 11436 ..c -rwxrwxrwx 0
0
17620504
<part2.img-_AB2_3.FRM-dead-17620504>
4360 ..c -rwxrwxrwx 0
0
17620502 <part2.img_AB2_3.FRX-dead-17620502>
Sun Sep 14 1997 11:06:20 4360 m.. -rwxrwxrwx 0
0
17620502
<part2.img-_AB2_3.FRX-dead-17620502>
11436 m.. -rwxrwxrwx 0
0
17620504 <part2.img_AB2_3.FRM-dead-17620504>
Sun Sep 14 1997 11:06:40
554 ..c -rwxrwxrwx 0
0
17620506
<part2.img-_AB2_3.VBP-dead-17620506>
Sun Sep 14 1997 11:06:42
554 m.. -rwxrwxrwx 0
0
17620506
<part2.img-_AB2_3.VBP-dead-17620506>
Sun Sep 14 1997 11:06:52
53 ..c -rwxrwxrwx 0
0
17620508
<part2.img-_AB2_3.VBW-dead-17620508>
Sun Sep 14 1997 11:18:40
53 m.. -rwxrwxrwx 0
0
17620508
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
<part2.img-_AB2_3.VBW-dead-17620508>
Sat Sep 20 1997 22:09:24 1090 ..c -rwxrwxrwx 0
0
17620514
<part2.img-_AB3_7.FRX-dead-17620514>
Sun Sep 21 1997 00:31:16
54 ..c -rwxrwxrwx 0
0
17620516
<part2.img-_AB3_7.VBW-dead-17620516>
Mon Sep 22 1997 00:00:00
582 .a. -rwxrwxrwx 0
0
17620512
<part2.img-_AB3_7.VBP-dead-17620512>
1090 .a. -rwxrwxrwx 0
0
17620514 <part2.img_AB3_7.FRX-dead-17620514>
16803 .a. -rwxrwxrwx 0
0
17620510 <part2.img_AB3_7.FRM-dead-17620510>
54 .a. -rwxrwxrwx 0
0
17620516 <part2.img_AB3_7.VBW-dead-17620516>
Mon Sep 22 1997 18:48:32 1090 m.. -rwxrwxrwx 0
0
17620514
<part2.img-_AB3_7.FRX-dead-17620514>
16803 ..c -rwxrwxrwx 0
0
17620510 <part2.img_AB3_7.FRM-dead-17620510>
Mon Sep 22 1997 18:48:34 16803 m.. -rwxrwxrwx 0
0
17620510
<part2.img-_AB3_7.FRM-dead-17620510>
Mon Sep 22 1997 18:52:48
582 ..c -rwxrwxrwx 0
0
17620512
<part2.img-_AB3_7.VBP-dead-17620512>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Mon Sep 22 1997 18:52:50
582 m.. -rwxrwxrwx 0
0
17620512
<part2.img-_AB3_7.VBP-dead-17620512>
Mon Sep 22 1997 18:56:54
54 m.. -rwxrwxrwx 0
0
17620516
<part2.img-_AB3_7.VBW-dead-17620516>
Wed Sep 24 1997 00:00:00
0 .a. -rwxrwxrwx 0
0
11895304
<part2.img-_A56981-dead-11895304>
Wed Sep 24 1997 17:18:08
0 ..c -rwxrwxrwx 0
0
11895304
<part2.img-_A56981-dead-11895304>
Wed Sep 24 1997 17:18:10
0 m.. -rwxrwxrwx 0
0
11895304
<part2.img-_A56981-dead-11895304>
Wed Sep 24 1997 18:23:58
105 ..c -rwxrwxrwx 0
0
17620522
<part2.img-_ICTAX.VBW-dead-17620522>
Sat Oct 04 1997 00:00:00 30329 .a. -rwxrwxrwx 0
0
17620528
<part2.img-_ICTAX.FRX-dead-17620528>
105 .a. -rwxrwxrwx 0
0
17620522 <part2.img_ICTAX.VBW-dead-17620522>
Sat Oct 04 1997 07:49:20 30329 ..c -rwxrwxrwx 0
0
17620526
<part2.img-_BOUT.FRX-dead-17620526>
Sat Oct 04 1997 07:55:12 30329 m.. -rwxrwxrwx 0
0
17620526
<part2.img-_BOUT.FRX-dead-17620526>
4539 ..c -rwxrwxrwx 0
0
17620524 <part2.img_BOUT.FRM-dead-17620524>
Sat Oct 04 1997 07:55:14 4539 m.. -rwxrwxrwx 0
0
17620524
<part2.img-_BOUT.FRM-dead-17620524>
Sat Oct 04 1997 08:20:22 30329 ..c -rwxrwxrwx 0
0
17620528
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
<part2.img-_ICTAX.FRX-dead-17620528>
Sat Oct 04 1997 09:29:52
598 ..c -rwxrwxrwx 0
0
17620520
<part2.img-_ICTAX.VBP-dead-17620520>
Sat Oct 04 1997 09:29:54 30329 m.. -rwxrwxrwx 0
0
17620528
<part2.img-_ICTAX.FRX-dead-17620528>
598 m.. -rwxrwxrwx 0
0
17620520 <part2.img_ICTAX.VBP-dead-17620520>
21131 ..c -rwxrwxrwx 0
0
17620518 <part2.img_ICTAX.FRM-dead-17620518>
Sat Oct 04 1997 09:29:56 21131 m.. -rwxrwxrwx 0
0
17620518
<part2.img-_ICTAX.FRM-dead-17620518>
Sat Oct 04 1997 09:34:38 95744 m.c -rwxrwxrwx 0
0
17620534
<part2.img-_ICTAX.EXE-dead-17620534>
Sat Oct 04 1997 09:36:58
105 m.. -rwxrwxrwx 0
0
17620522
<part2.img-_ICTAX.VBW-dead-17620522>
Mon Oct 06 1997 00:00:00 30329 .a. -rwxrwxrwx 0
0
17620526
<part2.img-_BOUT.FRX-dead-17620526>
Mon Oct 06 1997 09:55:32 7685 ..c -rwxrwxrwx 0
0
17620530
<part2.img-_RMSTART.FRX-dead-17620530>
Mon Oct 06 1997 13:59:22 1090 ..c -rwxrwxrwx 0
0
17620541
<part2.img-_RMNEW~1.FRX-dead-17620541>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Mon Oct 06 1997 13:59:30
253 ..c -rwxrwxrwx 0
0
17620546
<part2.img-_AB6_3.VBW-dead-17620546>
Mon Oct 06 1997 14:04:56 2951 m.c -rwxrwxrwx 0
0
17620548
<part2.img-_IPPY.GIF-dead-17620548>
Mon Oct 06 1997 14:05:38 6583 m.c -rwxrwxrwx 0
0
17620550
<part2.img-_IPPY.JPG-dead-17620550>
Tue Oct 07 1997 00:00:00 664368 .a. -rwxrwxrwx 0
0
22125593
<part2.img-_CB.TMP-dead-22125593>
10833 .a. -rwxrwxrwx 0
0
19481116 <part2.img_EADME.TMP-dead-19481116>
Tue Oct 07 1997 20:58:12 1838 ..c -rwxrwxrwx 0
0
18775570
<part2.img-_MPLIB32.OPT-dead-18775570>
Tue Oct 07 1997 21:09:02 10833 ..c -rwxrwxrwx 0
0
19481116
<part2.img-_EADME.TMP-dead-19481116>
Tue Oct 07 1997 21:09:04 10833 m.. -rwxrwxrwx 0
0
19481116
<part2.img-_EADME.TMP-dead-19481116>
Tue Oct 07 1997 21:23:30 664368 ..c -rwxrwxrwx 0
0
22125593
<part2.img-_CB.TMP-dead-22125593>
Tue Oct 07 1997 21:23:36 664368 m.. -rwxrwxrwx 0
0
22125593
<part2.img-_CB.TMP-dead-22125593>
Thu Oct 09 1997 00:00:00 21131 .a. -rwxrwxrwx 0
0
17620518
<part2.img-_ICTAX.FRM-dead-17620518>
314867 .a. -rwxrwxrwx 0
0
13259819 <part2.img_ETUPWIZ.TMP-dead-13259819>
4539 .a. -rwxrwxrwx 0
0
17620524 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
_BOUT.FRM-dead-17620524>
95744 .a. -rwxrwxrwx 0
0
17620534 <part2.img_ICTAX.EXE-dead-17620534>
598 .a. -rwxrwxrwx 0
0
17620520 <part2.img_ICTAX.VBP-dead-17620520>
Thu Oct 09 1997 18:19:20 314867 ..c -rwxrwxrwx 0
0
13259819
<part2.img-_ETUPWIZ.TMP-dead-13259819>
Thu Oct 09 1997 18:19:22 314867 m.. -rwxrwxrwx 0
0
13259819
<part2.img-_ETUPWIZ.TMP-dead-13259819>
Thu Oct 09 1997 18:35:46
417 ..c -rwxrwxrwx 0
0
17620552
<part2.img-_AB6_3.BAS-dead-17620552>
Thu Oct 09 1997 18:35:48
417 m.. -rwxrwxrwx 0
0
17620552
<part2.img-_AB6_3.BAS-dead-17620552>
Tue Oct 14 1997 00:00:00 1838 .a. -rwxrwxrwx 0
0
18775570
<part2.img-_MPLIB32.OPT-dead-18775570>
Sun Oct 19 1997 00:00:00 6900 .a. -rwxrwxrwx 0
0
17620492
<part2.img-_AB1_3.FRM-dead-17620492>
549 .a. -rwxrwxrwx 0
0
17620494 <part2.img_AB1_3.VBP-dead-17620494>
Sun Oct 19 1997 17:46:46
49 m.. -rwxrwxrwx 0
0
17620490
<part2.img-_AB1_3.VBW-dead-17620490>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Sun Oct 19 1997 17:55:12 7685 m.. -rwxrwxrwx 0
0
17620530
<part2.img-_RMSTART.FRX-dead-17620530>
6851 ..c -rwxrwxrwx 0
0
17620532 <part2.img_RMSTART.FRM-dead-17620532>
Sun Oct 19 1997 17:55:14 6851 m.. -rwxrwxrwx 0
0
17620532
<part2.img-_RMSTART.FRM-dead-17620532>
Sun Oct 19 1997 17:56:20 3530 ..c -rwxrwxrwx 0
0
17620538
<part2.img-_BOUT63.FRM-dead-17620538>
Sun Oct 19 1997 17:56:22 3530 m.. -rwxrwxrwx 0
0
17620538
<part2.img-_BOUT63.FRM-dead-17620538>
Mon Oct 20 1997 00:00:00
730 .a. -rwxrwxrwx 0
0
17620536
<part2.img-_AB6_3.VBP-dead-17620536>
8374 .a. -rwxrwxrwx 0
0
17620544 <part2.img_RMNEW~1.FRM-dead-17620544>
49 .a. -rwxrwxrwx 0
0
17620490 <part2.img_AB1_3.VBW-dead-17620490>
417 .a. -rwxrwxrwx 0
0
17620552 <part2.img_AB6_3.BAS-dead-17620552>
2400 .a. -rwxrwxrwx 0
0
17620555 <part2.img_RMBAL~1.FRM-dead-17620555>
1090 .a. -rwxrwxrwx 0
0
17620541 <part2.img_RMNEW~1.FRX-dead-17620541>
253 .a. -rwxrwxrwx 0
0
17620546 <part2.img_AB6_3.VBW-dead-17620546>
Mon Oct 20 1997 20:25:48 2400 ..c -rwxrwxrwx 0
0
17620555
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
<part2.img-_RMBAL~1.FRM-dead-17620555>
Mon Oct 20 1997 20:25:50 2400 m.. -rwxrwxrwx 0
0
17620555
<part2.img-_RMBAL~1.FRM-dead-17620555>
Mon Oct 20 1997 20:26:34 1090 m.. -rwxrwxrwx 0
0
17620541
<part2.img-_RMNEW~1.FRX-dead-17620541>
8374 ..c -rwxrwxrwx 0
0
17620544 <part2.img_RMNEW~1.FRM-dead-17620544>
Mon Oct 20 1997 20:26:36 8374 m.. -rwxrwxrwx 0
0
17620544
<part2.img-_RMNEW~1.FRM-dead-17620544>
730 ..c -rwxrwxrwx 0
0
17620536 <part2.img_AB6_3.VBP-dead-17620536>
Mon Oct 20 1997 20:26:38
730 m.. -rwxrwxrwx 0
0
17620536
<part2.img-_AB6_3.VBP-dead-17620536>
Mon Oct 20 1997 20:26:40
253 m.. -rwxrwxrwx 0
0
17620546
<part2.img-_AB6_3.VBW-dead-17620546>
Wed Oct 29 1997 23:00:00 6851 .a. -rwxrwxrwx 0
0
17620532
<part2.img-_RMSTART.FRM-dead-17620532>
63389696 .a. drwxrwxrwx 0
0
17620559 <part2.img_ROJECT2-dead-17620559>
3530 .a. -rwxrwxrwx 0
0
17620538 <part2.img_BOUT63.FRM-dead-17620538>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
7685 .a. -rwxrwxrwx 0
0
17620530 <part2.img_RMSTART.FRX-dead-17620530>
Thu Oct 30 1997 14:47:42 63389696 ..c drwxrwxrwx 0
0
17620559
<part2.img-_ROJECT2-dead-17620559>
Thu Oct 30 1997 14:47:44 63389696 m.. drwxrwxrwx 0
0
17620559
<part2.img-_ROJECT2-dead-17620559>
Fri Oct 31 1997 23:00:00
31 .a. -rwxrwxrwx 0
0
11895866
<part2.img-_ODULE1.BAS-dead-11895866>
Sat Nov 01 1997 09:09:56
31 ..c -rwxrwxrwx 0
0
11895866
<part2.img-_ODULE1.BAS-dead-11895866>
Sat Nov 01 1997 09:09:58
31 m.. -rwxrwxrwx 0
0
11895866
<part2.img-_ODULE1.BAS-dead-11895866>
Mon Nov 03 1997 23:00:00
222 .a. -rwxrwxrwx 0
0
12139548
<part2.img-_ISTNODE.~CP-dead-12139548>
717 .a. -rwxrwxrwx 0
0
12139550 <part2.img_IST.~H-dead-12139550>
1803 .a. -rwxrwxrwx 0
0
12139536 <part2.img_INKLIST.~MA-dead-12139536>
1917 .a. -rwxrwxrwx 0
0
12139532 <part2.img_INKLIST.$$$-dead-12139532>
204 .a. -rwxrwxrwx 0
0
12139546 <part2.img_ISTNODE.~H-dead-12139546>
876 .a. -rwxrwxrwx 0
0
12139526 <part2.img_INKLIST.RES-dead-12139526>
3528 .a. -rwxrwxrwx 0
0
12139552 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
_IST.~CP-dead-12139552>
499 .a. -rwxrwxrwx 0
0
12139534 <part2.img_INKLIST.~CP-dead-12139534>
Tue Nov 04 1997 19:42:20
876 m.. -rwxrwxrwx 0
0
12139526
<part2.img-_INKLIST.RES-dead-12139526>
Tue Nov 04 1997 19:43:00
876 ..c -rwxrwxrwx 0
0
12139526
<part2.img-_INKLIST.RES-dead-12139526>
1803 m.c -rwxrwxrwx 0
0
12139536 <part2.img_INKLIST.~MA-dead-12139536>
499 m.c -rwxrwxrwx 0
0
12139534 <part2.img_INKLIST.~CP-dead-12139534>
Tue Nov 04 1997 19:44:56
204 m.c -rwxrwxrwx 0
0
12139546
<part2.img-_ISTNODE.~H-dead-12139546>
222 m.c -rwxrwxrwx 0
0
12139548 <part2.img_ISTNODE.~CP-dead-12139548>
Tue Nov 04 1997 19:45:26 1917 m.. -rwxrwxrwx 0
0
12139532
<part2.img-_INKLIST.$$$-dead-12139532>
Tue Nov 04 1997 20:08:24
717 m.. -rwxrwxrwx 0
0
12139550
<part2.img-_IST.~H-dead-12139550>
Tue Nov 04 1997 20:08:32
717 ..c -rwxrwxrwx 0
0
12139550
<part2.img-_IST.~H-dead-12139550>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Tue Nov 04 1997 22:41:22 3528 m.. -rwxrwxrwx 0
0
12139552
<part2.img-_IST.~CP-dead-12139552>
Tue Nov 04 1997 22:44:24 3528 ..c -rwxrwxrwx 0
0
12139552
<part2.img-_IST.~CP-dead-12139552>
Tue Nov 04 1997 22:58:10 1917 ..c -rwxrwxrwx 0
0
12139532
<part2.img-_INKLIST.$$$-dead-12139532>
Sun Nov 09 1997 09:22:50
52 ..c -rwxrwxrwx 0
0
17620564
<part2.img-_AB10_4.VBW-dead-17620564>
Sun Nov 09 1997 23:00:00 2951 .a. -rwxrwxrwx 0
0
17620548
<part2.img-_IPPY.GIF-dead-17620548>
6583 .a. -rwxrwxrwx 0
0
17620550 <part2.img_IPPY.JPG-dead-17620550>
Mon Nov 10 1997 20:41:14 7685 ..c -rwxrwxrwx 0
0
17620567
<part2.img-_RMPUB~1.FRX-dead-17620567>
Mon Nov 10 1997 20:44:08 7685 m.. -rwxrwxrwx 0
0
17620567
<part2.img-_RMPUB~1.FRX-dead-17620567>
9811 ..c -rwxrwxrwx 0
0
17620562 <part2.img_RMPUB~1.FRM-dead-17620562>
Mon Nov 10 1997 20:44:10 9811 m.. -rwxrwxrwx 0
0
17620562
<part2.img-_RMPUB~1.FRM-dead-17620562>
Mon Nov 10 1997 23:00:00
0 .a. -rwxrwxrwx 0
0
25006107
<part2.img-_MPC352.TMP-dead-25006107>
16384 .a. drwxrwxrwx 0
0
25006108 <part2.img_EWFOL~1-dead-25006108>
Tue Nov 11 1997 20:26:48
876 m.. -rwxrwxrwx 0
0
16723462
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
<part2.img-_ALIN.RES-dead-16723462>
Tue Nov 11 1997 22:12:22 16384 ..c drwxrwxrwx 0
0
25006108
<part2.img-_EWFOL~1-dead-25006108>
Tue Nov 11 1997 22:12:24 16384 m.. drwxrwxrwx 0
0
25006108
<part2.img-_EWFOL~1-dead-25006108>
Tue Nov 11 1997 22:12:52
0 ..c -rwxrwxrwx 0
0
25006107
<part2.img-_MPC352.TMP-dead-25006107>
Tue Nov 11 1997 22:12:54
0 m.. -rwxrwxrwx 0
0
25006107
<part2.img-_MPC352.TMP-dead-25006107>
Tue Nov 11 1997 22:13:20 1794 m.. -rwxrwxrwx 0
0
16723472
<part2.img-_ALIN.~MA-dead-16723472>
876 ..c -rwxrwxrwx 0
0
16723462 <part2.img_ALIN.RES-dead-16723462>
Tue Nov 11 1997 23:00:00 9811 .a. -rwxrwxrwx 0
0
17620562
<part2.img-_RMPUB~1.FRM-dead-17620562>
52 .a. -rwxrwxrwx 0
0
17620564 <part2.img_AB10_4.VBW-dead-17620564>
727 .a. -rwxrwxrwx 0
0
17620557 <part2.img_AB10_4.VBP-dead-17620557>
7685 .a. -rwxrwxrwx 0
0
17620567 <part2.img_RMPUB~1.FRX-dead-17620567>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Wed Nov 12 1997 21:21:08
727 ..c -rwxrwxrwx 0
0
17620557
<part2.img-_AB10_4.VBP-dead-17620557>
Wed Nov 12 1997 21:21:10
727 m.. -rwxrwxrwx 0
0
17620557
<part2.img-_AB10_4.VBP-dead-17620557>
Wed Nov 12 1997 21:21:56
52 m.. -rwxrwxrwx 0
0
17620564
<part2.img-_AB10_4.VBW-dead-17620564>
Fri Nov 14 1997 19:13:16 1090 ..c -rwxrwxrwx 0
0
17620570
<part2.img-_RMBIC~1.FRX-dead-17620570>
Fri Nov 14 1997 22:17:52
0 ..c -rwxrwxrwx 0
0
17620577
<part2.img-_AB13_5.VBW-dead-17620577>
Sun Nov 16 1997 16:00:42 3709 ..c -rwxrwxrwx 0
0
16723468
<part2.img-_ALIN.OBJ-dead-16723468>
Sun Nov 16 1997 18:20:04 2293760 ..c -rwxrwxrwx 0
0
16723474
<part2.img-_ALIN.ILS-dead-16723474>
Sun Nov 16 1997 18:20:06 917504 ..c -rwxrwxrwx 0
0
16723476
<part2.img-_ALIN.ILF-dead-16723476>
393216 ..c -rwxrwxrwx 0
0
16723478 <part2.img_ALIN.ILC-dead-16723478>
Sun Nov 16 1997 18:20:08 65536 ..c -rwxrwxrwx 0
0
16723480
<part2.img-_ALIN.ILD-dead-16723480>
1179648 ..c -rwxrwxrwx 0
0
16723482 <part2.img_ALIN.TDS-dead-16723482>
Sun Nov 16 1997 19:02:00 1481 m.. -rwxrwxrwx 0
0
16723470
<part2.img-_ALIN.~CP-dead-16723470>
Sun Nov 16 1997 22:14:24 1481 ..c -rwxrwxrwx 0
0
16723470
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
<part2.img-_ALIN.~CP-dead-16723470>
1794 ..c -rwxrwxrwx 0
0
16723472 <part2.img_ALIN.~MA-dead-16723472>
Sun Nov 16 1997 23:00:00 16384 .a. drwxrwxrwx 0
0
17620579
<part2.img-_INALP~1-dead-17620579>
1481 .a. -rwxrwxrwx 0
0
16723470 <part2.img_ALIN.~CP-dead-16723470>
1179648 .a. -rwxrwxrwx 0
0
16723482 <part2.img_ALIN.TDS-dead-16723482>
393216 .a. -rwxrwxrwx 0
0
16723478 <part2.img_ALIN.ILC-dead-16723478>
3709 .a. -rwxrwxrwx 0
0
16723468 <part2.img_ALIN.OBJ-dead-16723468>
1794 .a. -rwxrwxrwx 0
0
16723472 <part2.img_ALIN.~MA-dead-16723472>
917504 .a. -rwxrwxrwx 0
0
16723476 <part2.img_ALIN.ILF-dead-16723476>
876 .a. -rwxrwxrwx 0
0
16723462 <part2.img_ALIN.RES-dead-16723462>
65536 .a. -rwxrwxrwx 0
0
16723480 <part2.img_ALIN.ILD-dead-16723480>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
2293760 .a. -rwxrwxrwx 0
0
16723474 <part2.img_ALIN.ILS-dead-16723474>
Mon Nov 17 1997 19:57:22
584 ..c -rwxrwxrwx 0
0
17620575
<part2.img-_AB13_5.VBP-dead-17620575>
Mon Nov 17 1997 19:57:24
584 m.. -rwxrwxrwx 0
0
17620575
<part2.img-_AB13_5.VBP-dead-17620575>
Mon Nov 17 1997 21:33:44 16384 ..c drwxrwxrwx 0
0
17620579
<part2.img-_INALP~1-dead-17620579>
0
17620579
Mon Nov 17 1997 21:33:46 16384 m.. drwxrwxrwx 0
<part2.img-_INALP~1-dead-17620579>
0
16723468
Mon Nov 17 1997 22:19:26 3709 m.. -rwxrwxrwx 0
<part2.img-_ALIN.OBJ-dead-16723468>
0
16723476
Mon Nov 17 1997 22:20:00 917504 m.. -rwxrwxrwx 0
<part2.img-_ALIN.ILF-dead-16723476>
0
16723480 <part2.img65536 m.. -rwxrwxrwx 0
_ALIN.ILD-dead-16723480>
0
16723478 <part2.img393216 m.. -rwxrwxrwx 0
_ALIN.ILC-dead-16723478>
0
16723482 <part2.img1179648 m.. -rwxrwxrwx 0
_ALIN.TDS-dead-16723482>
0
16723474 <part2.img2293760 m.. -rwxrwxrwx 0
_ALIN.ILS-dead-16723474>
0
17620573
Tue Nov 18 1997 23:00:00 2405 .a. -rwxrwxrwx 0
<part2.img-_RMBIC~1.FRM-dead-17620573>
17620577 <part2.img0 .a. -rwxrwxrwx 0
0
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5 06E4 A169 4E46
_AB13_5.VBW-dead-17620577>
57133 .a. -r-xr-xr-x 0
0
12685837 <part2.img_AO35.GID-dead-12685837>
0
17620488 <part2.img2323 .a. -rwxrwxrwx 0
_B62A4.TMP-dead-17620488>
0
17620570 <part2.img1090 .a. -rwxrwxrwx 0
_RMBIC~1.FRX-dead-17620570>
0
17620581 <part2.img16384 .a. drwxrwxrwx 0
_AB11_4-dead-17620581>
17620575 <part2.img584 .a. -rwxrwxrwx 0
0
_AB13_5.VBP-dead-17620575>
0
17620485 <part2.img2405 .a. -rwxrwxrwx 0
_B62A3.TMP-dead-17620485>
0
17620570
Wed Nov 19 1997 17:54:42 1090 m.. -rwxrwxrwx 0
<part2.img-_RMBIC~1.FRX-dead-17620570>
17620485 <part2.img2405 ..c -rwxrwxrwx 0
0
_B62A3.TMP-dead-17620485>
0
17620488 <part2.img2323 ..c -rwxrwxrwx 0
_B62A4.TMP-dead-17620488>
17620573 <part2.img2405 ..c -rwxrwxrwx 0
0
_RMBIC~1.FRM-dead-17620573>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Wed Nov 19 1997 17:54:44 2405 m.. -rwxrwxrwx 0
0
17620573
<part2.img-_RMBIC~1.FRM-dead-17620573>
2323 m.. -rwxrwxrwx 0
0
17620488 <part2.img_B62A4.TMP-dead-17620488>
2405 m.. -rwxrwxrwx 0
0
17620485 <part2.img_B62A3.TMP-dead-17620485>
Wed Nov 19 1997 19:05:12 16384 ..c drwxrwxrwx 0
0
17620581
<part2.img-_AB11_4-dead-17620581>
Wed Nov 19 1997 19:05:14 16384 m.. drwxrwxrwx 0
0
17620581
<part2.img-_AB11_4-dead-17620581>
Wed Nov 19 1997 19:05:48
0 m.. -rwxrwxrwx 0
0
17620577
<part2.img-_AB13_5.VBW-dead-17620577>
Wed Nov 19 1997 21:19:34 57133 ..c -r-xr-xr-x 0
0
12685837
<part2.img-_AO35.GID-dead-12685837>
Wed Nov 19 1997 21:19:36 57133 m.. -r-xr-xr-x 0
0
12685837
<part2.img-_AO35.GID-dead-12685837>
Wed Dec 03 1997 23:00:00 41616 .a. -rwxrwxrwx 0
0
22125636
<part2.img-_CBRTL.TMP-dead-22125636>
Thu Dec 04 1997 09:36:50 30720 m.. -/-rwxrwxrwx 0
0
3345959
c:\/WINDOWS/SYSTEM/regtlib.exe (_EGTLIB.EXE) (deleted)
30720 m.. -/-rwxrwxrwx 0
0
10430481
c:\/WINDOWS/SYSTEM/BACKUP/regtlib.001 (REGTLIB.001)
30720 m.. -rwxrwxrwx 0
0
3345959 <part2.img_EGTLIB.EXE-dead-3345959>
30720 m.. -/-rwxrwxrwx 0
0
10430483
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/WINDOWS/SYSTEM/BACKUP/regtlib.002 (REGTLIB.002)
30720 m.. -/-rwxrwxrwx 0
0
10430479
c:\/WINDOWS/SYSTEM/BACKUP/regtlib.exe (REGTLIB.EXE)
Thu Dec 04 1997 22:39:18 41616 ..c -rwxrwxrwx 0
0
22125636
<part2.img-_CBRTL.TMP-dead-22125636>
Thu Dec 04 1997 22:39:20 41616 m.. -rwxrwxrwx 0
0
22125636
<part2.img-_CBRTL.TMP-dead-22125636>
Sun Dec 07 1997 23:00:00
362 .a. -rwxrwxrwx 0
0
19481121
<part2.img-_HORTC~1.LNK-dead-19481121>
Mon Dec 08 1997 20:28:30
362 ..c -rwxrwxrwx 0
0
19481121
<part2.img-_HORTC~1.LNK-dead-19481121>
Mon Dec 08 1997 20:28:32
362 m.. -rwxrwxrwx 0
0
19481121
<part2.img-_HORTC~1.LNK-dead-19481121>
Mon Dec 08 1997 21:47:34 17857 ..c -rwxrwxrwx 0
0
10737681
<part2.img-_ESE.JPG-dead-10737681>
0
10737681
Mon Dec 08 1997 21:47:42 17857 m.. -rwxrwxrwx 0
<part2.img-_ESE.JPG-dead-10737681>
0
10737819
Mon Dec 08 1997 22:32:08 6403 ..c -rwxrwxrwx 0
<part2.img-_ONDAG~5.HTM-dead-10737819>
0
10737819
Mon Dec 08 1997 22:32:10 6403 m.. -rwxrwxrwx 0
<part2.img-_ONDAG~5.HTM-dead-10737819>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Wed Dec 10 1997 10:00:48 225402 m.c -/-rwxrwxrwx 0
0
3905048
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/TERRAIN/Wave2.wav
(WAVE2.WAV)
Wed Dec 10 1997 22:29:14 4158 ..c -rwxrwxrwx 0
0
10738044
<part2.img-_HOPPERS.GIF-dead-10738044>
Wed Dec 10 1997 22:29:20 4158 m.. -rwxrwxrwx 0
0
10738044
<part2.img-_HOPPERS.GIF-dead-10738044>
Sat Dec 13 1997 23:00:00
0 .a. -rwxrwxrwx 0
0
25006091
<part2.img-_MP8394.TMP-dead-25006091>
10338304 .a. drwxrwxrwx 0
0
25006092 <part2.img_EWFOL~1-dead-25006092>
0
25006092
Sun Dec 14 1997 10:40:46 10338304 ..c drwxrwxrwx 0
<part2.img-_EWFOL~1-dead-25006092>
0
25006092
Sun Dec 14 1997 10:40:48 10338304 m.. drwxrwxrwx 0
<part2.img-_EWFOL~1-dead-25006092>
0
25006091
Sun Dec 14 1997 10:40:56
0 ..c -rwxrwxrwx 0
<part2.img-_MP8394.TMP-dead-25006091>
0 m.. -rwxrwxrwx 0
0
25006091
Sun Dec 14 1997 10:40:58
<part2.img-_MP8394.TMP-dead-25006091>
0
18775640
Mon Dec 15 1997 23:00:00 1843 .a. -rwxrwxrwx 0
<part2.img-_MPLIB32.$$$-dead-18775640>
0
18775640
Tue Dec 16 1997 21:44:34 1843 m.c -rwxrwxrwx 0
<part2.img-_MPLIB32.$$$-dead-18775640>
0
10738135
Sun Dec 28 1997 09:20:52 1174 ..c -rwxrwxrwx 0
<part2.img-_NMT_ON.GIF-dead-10738135>
Key
= AF19
FA27 2F94
998D
DE3D F8B5
06E4
4E46
-rwxrwxrwx
0
0 A169
10738135
Sun fingerprint
Dec 28 1997
09:20:56
1174
m..FDB5
<part2.img-_NMT_ON.GIF-dead-10738135>
0
10738141
Sun Dec 28 1997 09:21:36 4003 ..c -rwxrwxrwx 0
<part2.img-_DULT.GIF-dead-10738141>
0
10738141
Sun Dec 28 1997 09:21:40 4003 m.. -rwxrwxrwx 0
<part2.img-_DULT.GIF-dead-10738141>
0
16329744
Mon Jan 05 1998 17:19:06 10630 ..c -rwxrwxrwx 0
<part2.img-_HAR_L~1.GIF-dead-16329744>
0
16329744
Mon Jan 05 1998 17:19:12 10630 m.. -rwxrwxrwx 0
<part2.img-_HAR_L~1.GIF-dead-16329744>
0
16569348
Mon Jan 05 1998 17:21:08 2980 ..c -rwxrwxrwx 0
<part2.img-_5_ZACK.GIF-dead-16569348>
0
16569348
Mon Jan 05 1998 17:21:12 2980 m.. -rwxrwxrwx 0
<part2.img-_5_ZACK.GIF-dead-16569348>
0
16569363
Mon Jan 05 1998 17:24:02 3621 ..c -rwxrwxrwx 0
<part2.img-_ACKLINK.GIF-dead-16569363>
0
16569367 <part2.img3133 ..c -rwxrwxrwx 0
_PERCMDT.GIF-dead-16569367>
0
16569363
Mon Jan 05 1998 17:24:04 3621 m.. -rwxrwxrwx 0
<part2.img-_ACKLINK.GIF-dead-16569363>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Mon Jan 05 1998 17:24:06 3133 m.. -rwxrwxrwx 0
0
16569367
<part2.img-_PERCMDT.GIF-dead-16569367>
Mon Jan 05 1998 17:24:12 2955 ..c -rwxrwxrwx 0
0
16569371
<part2.img-_L-VIEW.GIF-dead-16569371>
Mon Jan 05 1998 17:24:16 2955 m.. -rwxrwxrwx 0
0
16569371
<part2.img-_L-VIEW.GIF-dead-16569371>
Mon Jan 05 1998 17:24:20 4698 ..c -rwxrwxrwx 0
0
16569374
<part2.img-_OBSHE~1.JPG-dead-16569374>
Mon Jan 05 1998 17:24:22 4339 ..c -rwxrwxrwx 0
0
16569377
<part2.img-_ABFIG~1.JPG-dead-16569377>
4698 m.. -rwxrwxrwx 0
0
16569374 <part2.img_OBSHE~1.JPG-dead-16569374>
Mon Jan 05 1998 17:24:32 4339 m.. -rwxrwxrwx 0
0
16569377
<part2.img-_ABFIG~1.JPG-dead-16569377>
Mon Jan 05 1998 17:24:46 1828 ..c -rwxrwxrwx 0
0
16569381
<part2.img-_JACKF-3.JPG-dead-16569381>
Mon Jan 05 1998 17:24:48 1828 m.. -rwxrwxrwx 0
0
16569381
<part2.img-_JACKF-3.JPG-dead-16569381>
Mon Jan 05 1998 17:25:38 10325 ..c -rwxrwxrwx 0
0
16416300
<part2.img-_NDEX(2).HTM-dead-16416300>
Mon Jan 05 1998 17:25:48 6050 ..c -rwxrwxrwx 0
0
16569383
<part2.img-_OUR111A.JPG-dead-16569383>
10325 m.. -rwxrwxrwx 0
0
16416300 <part2.img_NDEX(2).HTM-dead-16416300>
Mon Jan 05 1998 17:25:52 6050 m.. -rwxrwxrwx 0
0
16569383
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
<part2.img-_OUR111A.JPG-dead-16569383>
Tue Jan 06 1998 05:00:04 189560 m.c -/-rwxrwxrwx 0
0
3905050
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/TERRAIN/Wave3.wav
(WAVE3.WAV)
0
3905052
Tue Jan 06 1998 05:02:28 211064 m.c -/-rwxrwxrwx 0
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/TERRAIN/Wave4.wav
(WAVE4.WAV)
Tue Jan 06 1998 05:04:00 182904 m.c -/-rwxrwxrwx 0
0
3905054
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/TERRAIN/Wave5.wav
(WAVE5.WAV)
0
3346017
Thu Jan 08 1998 07:09:12 271632 m.. -/-rwxrwxrwx 0
c:\/WINDOWS/SYSTEM/dx6E1E0.TMP (MSVCRT.DLL)
0
10737819
Sat Jan 10 1998 23:00:00 6403 .a. -rwxrwxrwx 0
<part2.img-_ONDAG~5.HTM-dead-10737819>
0
16569396
Sun Jan 11 1998 11:07:58 1150 ..c -rwxrwxrwx 0
<part2.img-_AVA-M~1.GIF-dead-16569396>
0
16569396
Sun Jan 11 1998 11:08:00 1150 m.. -rwxrwxrwx 0
<part2.img-_AVA-M~1.GIF-dead-16569396>
0
10737681
Sun Jan 11 1998 23:00:00 17857 .a. -rwxrwxrwx 0
<part2.img-_ESE.JPG-dead-10737681>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Mon Jan 12 1998 23:00:00
73 .a. -rwxrwxrwx 0
0
17620584
<part2.img-_80112~1.RAM-dead-17620584>
Tue Jan 13 1998 16:37:52
73 ..c -rwxrwxrwx 0
0
17620584
<part2.img-_80112~1.RAM-dead-17620584>
Tue Jan 13 1998 16:37:54
73 m.. -rwxrwxrwx 0
0
17620584
<part2.img-_80112~1.RAM-dead-17620584>
Tue Jan 13 1998 17:08:34 2709 ..c -rwxrwxrwx 0
0
10737698
<part2.img-_SSEN2.GIF-dead-10737698>
Tue Jan 13 1998 17:08:36 2709 m.. -rwxrwxrwx 0
0
10737698
<part2.img-_SSEN2.GIF-dead-10737698>
Tue Jan 13 1998 17:32:34 13688 ..c -rwxrwxrwx 0
0
10737747
<part2.img-_UERY.HTM-dead-10737747>
Tue Jan 13 1998 17:32:36 13688 m.. -rwxrwxrwx 0
0
10737747
<part2.img-_UERY.HTM-dead-10737747>
Sat Jan 24 1998 23:00:00
25 .a. -rwxrwxrwx 0
0
16001554
<part2.img-_XCELF~1.DSN-dead-16001554>
0 .a. -rwxrwxrwx 0
0
12685835 <part2.img_A54007-dead-12685835>
0 .a. -rwxrwxrwx 0
0
12565531 <part2.img_MSEXIST.TMP-dead-12565531>
25 .a. -rwxrwxrwx 0
0
16001550 <part2.img_BASEF~1.DSN-dead-16001550>
0 .a. -rwxrwxrwx 0
0
13505545 <part2.img_MSEXIST.TMP-dead-13505545>
35 .a. -rwxrwxrwx 0
0
16001546 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5 06E4 A169 4E46
_SACCE~1.DSN-dead-16001546>
24 .a. -rwxrwxrwx 0
0
16001562 <part2.img_EXTFI~1.DSN-dead-16001562>
0 .a. -rwxrwxrwx 0
0
12566028 <part2.img_A54007-dead-12566028>
26 .a. -rwxrwxrwx 0
0
16001558 <part2.img_OXPRO~1.DSN-dead-16001558>
Sun Jan 25 1998 08:38:10 5432 ..c -rwxrwxrwx 0
0
10737841
<part2.img-_ODAKP~1.GIF-dead-10737841>
Sun Jan 25 1998 08:38:14 5432 m.. -rwxrwxrwx 0
0
10737841
<part2.img-_ODAKP~1.GIF-dead-10737841>
Sun Jan 25 1998 13:32:24
0 ..c -rwxrwxrwx 0
0
12566028
<part2.img-_A54007-dead-12566028>
0 ..c -rwxrwxrwx 0
0
12685835 <part2.img_A54007-dead-12685835>
Sun Jan 25 1998 13:32:26
0 m.. -rwxrwxrwx 0
0
12566028
<part2.img-_A54007-dead-12566028>
0 m.. -rwxrwxrwx 0
0
12685835 <part2.img_A54007-dead-12685835>
Sun Jan 25 1998 13:40:44
24 ..c -rwxrwxrwx 0
0
16001562
<part2.img-_EXTFI~1.DSN-dead-16001562>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
25 ..c -rwxrwxrwx 0
0
16001550 <part2.img_BASEF~1.DSN-dead-16001550>
35 ..c -rwxrwxrwx 0
0
16001546 <part2.img_SACCE~1.DSN-dead-16001546>
25 ..c -rwxrwxrwx 0
0
16001554 <part2.img_XCELF~1.DSN-dead-16001554>
26 ..c -rwxrwxrwx 0
0
16001558 <part2.img_OXPRO~1.DSN-dead-16001558>
Sun Jan 25 1998 13:40:46
26 m.. -rwxrwxrwx 0
0
16001558
<part2.img-_OXPRO~1.DSN-dead-16001558>
35 m.. -rwxrwxrwx 0
0
16001546 <part2.img_SACCE~1.DSN-dead-16001546>
25 m.. -rwxrwxrwx 0
0
16001554 <part2.img_XCELF~1.DSN-dead-16001554>
24 m.. -rwxrwxrwx 0
0
16001562 <part2.img_EXTFI~1.DSN-dead-16001562>
25 m.. -rwxrwxrwx 0
0
16001550 <part2.img_BASEF~1.DSN-dead-16001550>
Sun Jan 25 1998 13:41:30
0 ..c -rwxrwxrwx 0
0
12565531
<part2.img-_MSEXIST.TMP-dead-12565531>
0 ..c -rwxrwxrwx 0
0
13505545 <part2.img_MSEXIST.TMP-dead-13505545>
Sun Jan 25 1998 13:41:32
0 m.. -rwxrwxrwx 0
0
12565531
<part2.img-_MSEXIST.TMP-dead-12565531>
0 m.. -rwxrwxrwx 0
0
13505545 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5 06E4 A169 4E46
_MSEXIST.TMP-dead-13505545>
Mon Feb 02 1998 17:11:10 6802 ..c -rwxrwxrwx 0
0
10737916
<part2.img-_OBECOM.GIF-dead-10737916>
Mon Feb 02 1998 17:11:16 6802 m.. -rwxrwxrwx 0
0
10737916
<part2.img-_OBECOM.GIF-dead-10737916>
Mon Feb 02 1998 17:19:30 9526 ..c -rwxrwxrwx 0
0
10737936
<part2.img-_~1.HTM-dead-10737936>
Mon Feb 02 1998 17:19:32 9526 m.. -rwxrwxrwx 0
0
10737936
<part2.img-_~1.HTM-dead-10737936>
Mon Feb 02 1998 17:19:40 9403 ..c -rwxrwxrwx 0
0
10737938
<part2.img-_(1)~2.HTM-dead-10737938>
Mon Feb 02 1998 17:19:48 9403 m.. -rwxrwxrwx 0
0
10737938
<part2.img-_(1)~2.HTM-dead-10737938>
Mon Feb 02 1998 17:21:14 1853 ..c -rwxrwxrwx 0
0
10737948
<part2.img-_EST_NAV.GIF-dead-10737948>
Mon Feb 02 1998 17:21:16 1853 m.. -rwxrwxrwx 0
0
10737948
<part2.img-_EST_NAV.GIF-dead-10737948>
Mon Feb 02 1998 17:27:52 2989 ..c -rwxrwxrwx 0
0
16569411
<part2.img-_G_HG_~1.GIF-dead-16569411>
Mon Feb 02 1998 17:27:56 2989 m.. -rwxrwxrwx 0
0
16569411
<part2.img-_G_HG_~1.GIF-dead-16569411>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Mon Feb 02 1998 17:28:22 2557 ..c -rwxrwxrwx 0
0
16569422
<part2.img-__HG3.GIF-dead-16569422>
Mon Feb 02 1998 17:28:24 2557 m.. -rwxrwxrwx 0
0
16569422
<part2.img-__HG3.GIF-dead-16569422>
Mon Feb 02 1998 17:29:58 6324 ..c -rwxrwxrwx 0
0
16569428
<part2.img-_10074~1.HTM-dead-16569428>
Mon Feb 02 1998 17:30:00 6324 m.. -rwxrwxrwx 0
0
16569428
<part2.img-_10074~1.HTM-dead-16569428>
Mon Feb 02 1998 17:33:28 2734 ..c -rwxrwxrwx 0
0
16569436
<part2.img-_R_MGMIA.GIF-dead-16569436>
Mon Feb 02 1998 17:33:30 2734 m.. -rwxrwxrwx 0
0
16569436
<part2.img-_R_MGMIA.GIF-dead-16569436>
Mon Feb 02 1998 17:33:52 1257 ..c -rwxrwxrwx 0
0
16569444
<part2.img-_1_EG.GIF-dead-16569444>
Mon Feb 02 1998 17:33:54 1257 m.. -rwxrwxrwx 0
0
16569444
<part2.img-_1_EG.GIF-dead-16569444>
Mon Feb 02 1998 17:34:48 1284 ..c -rwxrwxrwx 0
0
16569457
<part2.img-_0_RG.GIF-dead-16569457>
Mon Feb 02 1998 17:34:50 1284 m.. -rwxrwxrwx 0
0
16569457
<part2.img-_0_RG.GIF-dead-16569457>
Mon Feb 02 1998 17:36:50 11558 ..c -rwxrwxrwx 0
0
16416429
<part2.img-_T~1.HTM-dead-16416429>
Mon Feb 02 1998 17:36:54 11558 m.. -rwxrwxrwx 0
0
16416429
<part2.img-_T~1.HTM-dead-16416429>
Mon Feb 02 1998 17:40:00 4929 ..c -rwxrwxrwx 0
0
16569479
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
<part2.img-_OME_B~1.GIF-dead-16569479>
Mon Feb 02 1998 17:40:02 4929 m.. -rwxrwxrwx 0
0
16569479
<part2.img-_OME_B~1.GIF-dead-16569479>
Mon Feb 02 1998 17:40:12 3187 ..c -rwxrwxrwx 0
0
16569484
<part2.img-_753_H~1.GIF-dead-16569484>
Mon Feb 02 1998 17:40:14 3187 m.. -rwxrwxrwx 0
0
16569484
<part2.img-_753_H~1.GIF-dead-16569484>
Mon Feb 02 1998 17:41:26 6555 ..c -rwxrwxrwx 0
0
16569490
<part2.img-_LUE_S~1.JPE-dead-16569490>
Mon Feb 02 1998 17:41:30 6555 m.. -rwxrwxrwx 0
0
16569490
<part2.img-_LUE_S~1.JPE-dead-16569490>
Mon Feb 02 1998 17:41:32 8100 ..c -rwxrwxrwx 0
0
16416443
<part2.img-_RS_LO~1.JPE-dead-16416443>
Mon Feb 02 1998 17:41:36 8100 m.. -rwxrwxrwx 0
0
16416443
<part2.img-_RS_LO~1.JPE-dead-16416443>
Mon Feb 02 1998 17:42:08 4434 ..c -rwxrwxrwx 0
0
16329870
<part2.img-_RS_LO~1.JPE-dead-16329870>
Mon Feb 02 1998 17:42:12 4434 m.. -rwxrwxrwx 0
0
16329870
<part2.img-_RS_LO~1.JPE-dead-16329870>
Mon Feb 09 1998 12:28:02
11 m.c -/-rwxrwxrwx 0
0
3900934
c:\/PROGRA~1/MICROS~1/AGEOFE~1/LEARN/Learn.txt (LEARN.TXT)
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Sat Feb 14 1998 08:26:50 3407 ..c -rwxrwxrwx 0
0
16569529
<part2.img-_AV~1.HTM-dead-16569529>
3424 ..c -rwxrwxrwx 0
0
16569527 <part2.img_OCATI~2.HTM-dead-16569527>
Sat Feb 14 1998 08:26:52 3424 m.. -rwxrwxrwx 0
0
16569527
<part2.img-_OCATI~2.HTM-dead-16569527>
Sat Feb 14 1998 08:26:54 3407 m.. -rwxrwxrwx 0
0
16569529
<part2.img-_AV~1.HTM-dead-16569529>
Sat Feb 14 1998 08:27:30
511 ..c -rwxrwxrwx 0
0
16569554
<part2.img-_OJAVA~1.GIF-dead-16569554>
Sat Feb 14 1998 08:27:32
511 m.. -rwxrwxrwx 0
0
16569554
<part2.img-_OJAVA~1.GIF-dead-16569554>
Sat Feb 14 1998 08:27:36
65 ..c -rwxrwxrwx 0
0
16569567
<part2.img-_UMBER~3.GIF-dead-16569567>
Sat Feb 14 1998 08:27:38
65 m.. -rwxrwxrwx 0
0
16569567
<part2.img-_UMBER~3.GIF-dead-16569567>
Sat Feb 14 1998 08:29:02 3958 ..c -rwxrwxrwx 0
0
16569584
<part2.img-_RENA_~1.GIF-dead-16569584>
Sat Feb 14 1998 08:29:06 3958 m.. -rwxrwxrwx 0
0
16569584
<part2.img-_RENA_~1.GIF-dead-16569584>
Sat Feb 14 1998 08:31:08 5155 ..c -rwxrwxrwx 0
0
16569611
<part2.img-_PW5BS~1.GIF-dead-16569611>
Sat Feb 14 1998 08:31:10 5155 m.. -rwxrwxrwx 0
0
16569611
<part2.img-_PW5BS~1.GIF-dead-16569611>
Sat Feb 14 1998 12:45:20 2025 ..c -rwxrwxrwx 0
0
16416463
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
<part2.img-_NBSKT.GIF-dead-16416463>
Sat Feb 14 1998 12:45:22 2025 m.. -rwxrwxrwx 0
0
16416463
<part2.img-_NBSKT.GIF-dead-16416463>
Sat Feb 14 1998 12:47:42 12741 ..c -rwxrwxrwx 0
0
16416536
<part2.img-_EV001~1.GIF-dead-16416536>
Sat Feb 14 1998 12:47:48 12741 m.. -rwxrwxrwx 0
0
16416536
<part2.img-_EV001~1.GIF-dead-16416536>
Sun Feb 15 1998 23:00:00
0 .a. -rwxrwxrwx 0
0
17620586
<part2.img-_ECY-TON.PDF-dead-17620586>
Mon Feb 16 1998 07:41:24 1862 ..c -rwxrwxrwx 0
0
16569639
<part2.img-_EDBUT~1.GIF-dead-16569639>
Mon Feb 16 1998 07:41:26 1862 m.. -rwxrwxrwx 0
0
16569639
<part2.img-_EDBUT~1.GIF-dead-16569639>
Mon Feb 16 1998 07:43:00 12611 ..c -rwxrwxrwx 0
0
16416542
<part2.img-_ACKGR~1.GIF-dead-16416542>
Mon Feb 16 1998 07:43:04 12611 m.. -rwxrwxrwx 0
0
16416542
<part2.img-_ACKGR~1.GIF-dead-16416542>
Mon Feb 16 1998 07:43:52 5373 ..c -rwxrwxrwx 0
0
16569644
<part2.img-_REECA~1.GIF-dead-16569644>
Mon Feb 16 1998 07:43:54 5373 m.. -rwxrwxrwx 0
0
16569644
<part2.img-_REECA~1.GIF-dead-16569644>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Mon Feb 16 1998 07:56:44 10225 ..c -rwxrwxrwx 0
0
16416570
<part2.img-_ECYCL~2.HTM-dead-16416570>
Mon Feb 16 1998 07:56:46 10225 m.. -rwxrwxrwx 0
0
16416570
<part2.img-_ECYCL~2.HTM-dead-16416570>
Mon Feb 16 1998 07:57:06 10570 ..c -rwxrwxrwx 0
0
16416576
<part2.img-_NDEX(~3.HTM-dead-16416576>
Mon Feb 16 1998 07:57:08 10570 m.. -rwxrwxrwx 0
0
16416576
<part2.img-_NDEX(~3.HTM-dead-16416576>
Mon Feb 16 1998 07:57:14
528 ..c -rwxrwxrwx 0
0
16330003
<part2.img-_RIANGLE.GIF-dead-16330003>
Mon Feb 16 1998 07:57:16
528 m.. -rwxrwxrwx 0
0
16330003
<part2.img-_RIANGLE.GIF-dead-16330003>
Mon Feb 16 1998 07:58:40 10675 ..c -rwxrwxrwx 0
0
16416584
<part2.img-_EWGRN.GIF-dead-16416584>
Mon Feb 16 1998 07:58:52 10675 m.. -rwxrwxrwx 0
0
16416584
<part2.img-_EWGRN.GIF-dead-16416584>
Mon Feb 16 1998 07:59:16 12681 ..c -rwxrwxrwx 0
0
16416588
<part2.img-_LUEBAR.GIF-dead-16416588>
Mon Feb 16 1998 07:59:20 12681 m.. -rwxrwxrwx 0
0
16416588
<part2.img-_LUEBAR.GIF-dead-16416588>
Mon Feb 16 1998 07:59:36 5551 ..c -rwxrwxrwx 0
0
16330022
<part2.img-_UOTE8.GIF-dead-16330022>
Mon Feb 16 1998 07:59:38 5551 m.. -rwxrwxrwx 0
0
16330022
<part2.img-_UOTE8.GIF-dead-16330022>
Mon Feb 16 1998 08:00:52 10133 ..c -rwxrwxrwx 0
0
16416604
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
<part2.img-_OOLS~1.HTM-dead-16416604>
Mon Feb 16 1998 08:00:54 10133 m.. -rwxrwxrwx 0
0
16416604
<part2.img-_OOLS~1.HTM-dead-16416604>
Mon Feb 16 1998 08:01:00 4827 ..c -rwxrwxrwx 0
0
16569682
<part2.img-_K.GIF-dead-16569682>
Mon Feb 16 1998 08:01:04 4827 m.. -rwxrwxrwx 0
0
16569682
<part2.img-_K.GIF-dead-16569682>
Mon Feb 16 1998 08:01:08 8268 ..c -rwxrwxrwx 0
0
16416610
<part2.img-_ACTSHTS.GIF-dead-16416610>
Mon Feb 16 1998 08:01:16 8268 m.. -rwxrwxrwx 0
0
16416610
<part2.img-_ACTSHTS.GIF-dead-16416610>
Mon Feb 16 1998 08:01:18 4230 ..c -rwxrwxrwx 0
0
16569686
<part2.img-_IGPLAN.GIF-dead-16569686>
Mon Feb 16 1998 08:01:22 4230 m.. -rwxrwxrwx 0
0
16569686
<part2.img-_IGPLAN.GIF-dead-16569686>
Mon Feb 16 1998 08:04:28
0 ..c -rwxrwxrwx 0
0
17620586
<part2.img-_ECY-TON.PDF-dead-17620586>
Mon Feb 16 1998 08:04:30
0 m.. -rwxrwxrwx 0
0
17620586
<part2.img-_ECY-TON.PDF-dead-17620586>
Mon Feb 16 1998 08:05:16 10349 ..c -rwxrwxrwx 0
0
16416631
<part2.img-_TIS~1.HTM-dead-16416631>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Mon Feb 16 1998 08:05:18 10349 m.. -rwxrwxrwx 0
0
16416631
<part2.img-_TIS~1.HTM-dead-16416631>
Mon Feb 16 1998 08:05:34 5903 ..c -rwxrwxrwx 0
0
16330049
<part2.img-_OMEHEAD.GIF-dead-16330049>
Mon Feb 16 1998 08:05:40 5903 m.. -rwxrwxrwx 0
0
16330049
<part2.img-_OMEHEAD.GIF-dead-16330049>
Mon Feb 16 1998 08:08:26
361 ..c -rwxrwxrwx 0
0
16569701
<part2.img-_COMPL~1.GIF-dead-16569701>
Mon Feb 16 1998 08:08:28
361 m.. -rwxrwxrwx 0
0
16569701
<part2.img-_COMPL~1.GIF-dead-16569701>
Mon Feb 16 1998 08:09:14 2091 ..c -rwxrwxrwx 0
0
16569706
<part2.img-_V_IMS.GIF-dead-16569706>
Mon Feb 16 1998 08:09:16 2091 m.. -rwxrwxrwx 0
0
16569706
<part2.img-_V_IMS.GIF-dead-16569706>
Mon Feb 16 1998 08:09:58 6383 ..c -rwxrwxrwx 0
0
16569710
<part2.img-_APPER~1.HTM-dead-16569710>
Mon Feb 16 1998 08:10:00 6383 m.. -rwxrwxrwx 0
0
16569710
<part2.img-_APPER~1.HTM-dead-16569710>
Mon Feb 16 1998 08:10:16 7911 ..c -rwxrwxrwx 0
0
16416660
<part2.img-_HELLF~1.HTM-dead-16416660>
Mon Feb 16 1998 08:10:18 7911 m.. -rwxrwxrwx 0
0
16416660
<part2.img-_HELLF~1.HTM-dead-16416660>
Tue Feb 17 1998 13:13:02
97 m.. -/-rwxrwxrwx 0
0
3345948
c:\/WINDOWS/SYSTEM/TRIDENT.DAT
Wed Feb 18 1998 11:52:22 13547 ..c -rwxrwxrwx 0
0
16416693
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
<part2.img-_KGD_D~1.JPE-dead-16416693>
Wed Feb 18 1998 11:52:30 13547 m.. -rwxrwxrwx 0
0
16416693
<part2.img-_KGD_D~1.JPE-dead-16416693>
Wed Feb 18 1998 11:52:42 13715 ..c -rwxrwxrwx 0
0
16416698
<part2.img-_AVIBTNS.GIF-dead-16416698>
Wed Feb 18 1998 11:53:06 13715 m.. -rwxrwxrwx 0
0
16416698
<part2.img-_AVIBTNS.GIF-dead-16416698>
Wed Feb 18 1998 11:53:44 3738 ..c -rwxrwxrwx 0
0
16416706
<part2.img-_HOW_G~1.HTM-dead-16416706>
Wed Feb 18 1998 11:53:46 3738 m.. -rwxrwxrwx 0
0
16416706
<part2.img-_HOW_G~1.HTM-dead-16416706>
Wed Feb 18 1998 11:54:26 12601 ..c -rwxrwxrwx 0
0
16416708
<part2.img-_WARD~1.HTM-dead-16416708>
Wed Feb 18 1998 11:54:28 12601 m.. -rwxrwxrwx 0
0
16416708
<part2.img-_WARD~1.HTM-dead-16416708>
Wed Feb 18 1998 11:55:34 2852 ..c -rwxrwxrwx 0
0
16569737
<part2.img-_OTM.GIF-dead-16569737>
Wed Feb 18 1998 11:55:36 2852 m.. -rwxrwxrwx 0
0
16569737
<part2.img-_OTM.GIF-dead-16569737>
Wed Feb 18 1998 11:55:40 3085 ..c -rwxrwxrwx 0
0
16569741
<part2.img-_EDSWEEP.GIF-dead-16569741>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Wed Feb 18 1998 11:55:42 3085 m.. -rwxrwxrwx 0
0
16569741
<part2.img-_EDSWEEP.GIF-dead-16569741>
Wed Feb 18 1998 11:56:36 3807 m.c -rwxrwxrwx 0
0
16569744
<part2.img-_BRAWN~1.GIF-dead-16569744>
Wed Feb 18 1998 11:56:50 2922 ..c -rwxrwxrwx 0
0
16569747
<part2.img-_BRAWN~2.GIF-dead-16569747>
Wed Feb 18 1998 11:56:52 2922 m.. -rwxrwxrwx 0
0
16569747
<part2.img-_BRAWN~2.GIF-dead-16569747>
Wed Feb 18 1998 11:57:58 3007 ..c -rwxrwxrwx 0
0
16569754
<part2.img-_BRAWN~5.GIF-dead-16569754>
Wed Feb 18 1998 11:58:00 3007 m.. -rwxrwxrwx 0
0
16569754
<part2.img-_BRAWN~5.GIF-dead-16569754>
Wed Feb 18 1998 12:00:02 3004 ..c -rwxrwxrwx 0
0
16330131
<part2.img-_NFODO~1.HTM-dead-16330131>
Wed Feb 18 1998 12:00:04 3004 m.. -rwxrwxrwx 0
0
16330131
<part2.img-_NFODO~1.HTM-dead-16330131>
Wed Feb 18 1998 12:00:14 10513 ..c -rwxrwxrwx 0
0
16569761
<part2.img-_ESGRP~1.HTM-dead-16569761>
Wed Feb 18 1998 12:00:16 10513 m.. -rwxrwxrwx 0
0
16569761
<part2.img-_ESGRP~1.HTM-dead-16569761>
Wed Feb 18 1998 12:00:54 11151 ..c -rwxrwxrwx 0
0
16416743
<part2.img-_ESTNAV.GIF-dead-16416743>
Wed Feb 18 1998 12:01:00 11151 m.. -rwxrwxrwx 0
0
16416743
<part2.img-_ESTNAV.GIF-dead-16416743>
Wed Feb 18 1998 12:01:02 3907 ..c -rwxrwxrwx 0
0
16569769
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
<part2.img-_00.GIF-dead-16569769>
Wed Feb 18 1998 12:01:04 3907 m.. -rwxrwxrwx 0
0
16569769
<part2.img-_00.GIF-dead-16569769>
Wed Feb 18 1998 12:02:38
771 ..c -rwxrwxrwx 0
0
16330140
<part2.img-_06O~1.HTM-dead-16330140>
Wed Feb 18 1998 12:02:40
771 m.. -rwxrwxrwx 0
0
16330140
<part2.img-_06O~1.HTM-dead-16330140>
Wed Feb 18 1998 12:03:24 1168 ..c -rwxrwxrwx 0
0
16569778
<part2.img-_0FJK95P.GIF-dead-16569778>
Wed Feb 18 1998 12:03:26 1168 m.. -rwxrwxrwx 0
0
16569778
<part2.img-_0FJK95P.GIF-dead-16569778>
Wed Feb 18 1998 12:04:22 10521 ..c -rwxrwxrwx 0
0
16330145
<part2.img-_EARCH~6.HTM-dead-16330145>
Wed Feb 18 1998 12:04:24 10521 m.. -rwxrwxrwx 0
0
16330145
<part2.img-_EARCH~6.HTM-dead-16330145>
Wed Feb 18 1998 12:05:54 13661 ..c -rwxrwxrwx 0
0
16416766
<part2.img-_CFACA~1.HTM-dead-16416766>
Wed Feb 18 1998 12:05:56 13661 m.. -rwxrwxrwx 0
0
16416766
<part2.img-_CFACA~1.HTM-dead-16416766>
Wed Feb 18 1998 12:06:02 3584 ..c -rwxrwxrwx 0
0
16569775
<part2.img-_EADER~3.GIF-dead-16569775>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Wed Feb 18 1998 12:06:04 3584 m.. -rwxrwxrwx 0
0
16569775
<part2.img-_EADER~3.GIF-dead-16569775>
Wed Feb 18 1998 12:07:50 5132 ..c -rwxrwxrwx 0
0
16569789
<part2.img-_A97C04.GIF-dead-16569789>
Wed Feb 18 1998 12:07:56 5132 m.. -rwxrwxrwx 0
0
16569789
<part2.img-_A97C04.GIF-dead-16569789>
Wed Feb 18 1998 12:08:16 3033 ..c -rwxrwxrwx 0
0
16569791
<part2.img-_A97C08.GIF-dead-16569791>
Wed Feb 18 1998 12:08:18 4030 m.c -rwxrwxrwx 0
0
16569793
<part2.img-_A97C13.GIF-dead-16569793>
3033 m.. -rwxrwxrwx 0
0
16569791 <part2.img_A97C08.GIF-dead-16569791>
Wed Feb 18 1998 12:08:22 4750 ..c -rwxrwxrwx 0
0
16569795
<part2.img-_A97C17.GIF-dead-16569795>
Wed Feb 18 1998 12:08:24 4750 m.. -rwxrwxrwx 0
0
16569795
<part2.img-_A97C17.GIF-dead-16569795>
Wed Feb 18 1998 12:08:42 3750 ..c -rwxrwxrwx 0
0
16569797
<part2.img-_A97K04.GIF-dead-16569797>
Wed Feb 18 1998 12:08:44 3750 m.. -rwxrwxrwx 0
0
16569797
<part2.img-_A97K04.GIF-dead-16569797>
Wed Feb 18 1998 12:09:26 5647 ..c -rwxrwxrwx 0
0
16569799
<part2.img-_A97A02.GIF-dead-16569799>
Wed Feb 18 1998 12:09:28 4063 ..c -rwxrwxrwx 0
0
16569801
<part2.img-_A97A06.GIF-dead-16569801>
Wed Feb 18 1998 12:09:34 2264 ..c -rwxrwxrwx 0
0
16330172
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
<part2.img-_A97A07.GIF-dead-16330172>
4063 m.. -rwxrwxrwx 0
0
16569801 <part2.img_A97A06.GIF-dead-16569801>
5647 m.. -rwxrwxrwx 0
0
16569799 <part2.img_A97A02.GIF-dead-16569799>
Wed Feb 18 1998 12:09:38 2264 m.. -rwxrwxrwx 0
0
16330172
<part2.img-_A97A07.GIF-dead-16330172>
Wed Feb 18 1998 12:09:40 3526 ..c -rwxrwxrwx 0
0
16569803
<part2.img-_A97A11.GIF-dead-16569803>
Wed Feb 18 1998 12:09:42 3526 m.. -rwxrwxrwx 0
0
16569803
<part2.img-_A97A11.GIF-dead-16569803>
Wed Feb 18 1998 12:09:48 3770 ..c -rwxrwxrwx 0
0
16569805
<part2.img-_A97A15.GIF-dead-16569805>
Wed Feb 18 1998 12:09:50 3770 m.. -rwxrwxrwx 0
0
16569805
<part2.img-_A97A15.GIF-dead-16569805>
Wed Feb 18 1998 12:09:58 4063 ..c -rwxrwxrwx 0
0
16569807
<part2.img-_A97A20.GIF-dead-16569807>
Wed Feb 18 1998 12:10:02 4063 m.. -rwxrwxrwx 0
0
16569807
<part2.img-_A97A20.GIF-dead-16569807>
Wed Feb 18 1998 12:10:10 5008 ..c -rwxrwxrwx 0
0
19037187
<part2.img-_A97H02.GIF-dead-19037187>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Wed Feb 18 1998 12:10:12 4350 ..c -rwxrwxrwx 0
0
19037189
<part2.img-_A97H06.GIF-dead-19037189>
Wed Feb 18 1998 12:10:16 4350 m.. -rwxrwxrwx 0
0
19037189
<part2.img-_A97H06.GIF-dead-19037189>
Wed Feb 18 1998 12:10:24 5008 m.. -rwxrwxrwx 0
0
19037187
<part2.img-_A97H02.GIF-dead-19037187>
Wed Feb 18 1998 12:10:28 4210 ..c -rwxrwxrwx 0
0
19037191
<part2.img-_A97H11.GIF-dead-19037191>
Wed Feb 18 1998 12:10:30 4210 m.. -rwxrwxrwx 0
0
19037191
<part2.img-_A97H11.GIF-dead-19037191>
Wed Feb 18 1998 12:10:36 5015 ..c -rwxrwxrwx 0
0
19037193
<part2.img-_A97H15.GIF-dead-19037193>
Wed Feb 18 1998 12:10:40 4286 ..c -rwxrwxrwx 0
0
16569813
<part2.img-_A97H16.GIF-dead-16569813>
Wed Feb 18 1998 12:10:44 4286 m.. -rwxrwxrwx 0
0
16569813
<part2.img-_A97H16.GIF-dead-16569813>
5015 m.. -rwxrwxrwx 0
0
19037193 <part2.img_A97H15.GIF-dead-19037193>
Thu Feb 19 1998 08:24:58 6147 ..c -rwxrwxrwx 0
0
16569821
<part2.img-_DCSSEAL.GIF-dead-16569821>
Thu Feb 19 1998 08:25:00 6147 m.. -rwxrwxrwx 0
0
16569821
<part2.img-_DCSSEAL.GIF-dead-16569821>
Thu Feb 19 1998 08:25:30 6147 ..c -rwxrwxrwx 0
0
16569827
<part2.img-_DCSSE~1.GIF-dead-16569827>
Thu Feb 19 1998 08:25:32 6147 m.. -rwxrwxrwx 0
0
16569827
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
<part2.img-_DCSSE~1.GIF-dead-16569827>
Thu Feb 19 1998 08:25:34 3389 ..c -rwxrwxrwx 0
0
16569830
<part2.img-_5-MUG~1.JPE-dead-16569830>
Thu Feb 19 1998 08:25:36 3389 m.. -rwxrwxrwx 0
0
16569830
<part2.img-_5-MUG~1.JPE-dead-16569830>
Thu Feb 19 1998 08:25:48 3615 ..c -rwxrwxrwx 0
0
16569835
<part2.img-_TATIO~1.JPE-dead-16569835>
2730 ..c -rwxrwxrwx 0
0
16569832 <part2.img-_KAR3~1.JPE-dead-16569832>
Thu Feb 19 1998 08:25:50 2730 m.. -rwxrwxrwx 0
0
16569832
<part2.img-_KAR-3~1.JPE-dead-16569832>
3615 m.. -rwxrwxrwx 0
0
16569835 <part2.img_TATIO~1.JPE-dead-16569835>
Thu Feb 19 1998 08:25:54 2878 ..c -rwxrwxrwx 0
0
16569837
<part2.img-_5-T5-~1.JPE-dead-16569837>
Thu Feb 19 1998 08:25:56 2878 m.. -rwxrwxrwx 0
0
16569837
<part2.img-_5-T5-~1.JPE-dead-16569837>
3908 ..c -rwxrwxrwx 0
0
19037212 <part2.img-_133~1.JPE-dead-19037212>
Thu Feb 19 1998 08:25:58 3908 m.. -rwxrwxrwx 0
0
19037212
<part2.img-_1-33~1.JPE-dead-19037212>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Thu Feb 19 1998 08:26:04 4860 ..c -rwxrwxrwx 0
0
19037217
<part2.img-_NCLRA~1.JPE-dead-19037217>
Thu Feb 19 1998 08:26:06 4860 m.. -rwxrwxrwx 0
0
19037217
<part2.img-_NCLRA~1.JPE-dead-19037217>
4329 ..c -rwxrwxrwx 0
0
19037222 <part2.img_PCSTN~1.JPE-dead-19037222>
4070 ..c -rwxrwxrwx 0
0
19037220 <part2.img-_5PAT~1.JPE-dead-19037220>
Thu Feb 19 1998 08:26:08 4329 m.. -rwxrwxrwx 0
0
19037222
<part2.img-_PCSTN~1.JPE-dead-19037222>
4070 m.. -rwxrwxrwx 0
0
19037220 <part2.img-_5PAT~1.JPE-dead-19037220>
Thu Feb 19 1998 08:26:32 4722 ..c -rwxrwxrwx 0
0
19037229
<part2.img-_OUR111B.GIF-dead-19037229>
Thu Feb 19 1998 08:26:34 4722 m.. -rwxrwxrwx 0
0
19037229
<part2.img-_OUR111B.GIF-dead-19037229>
Thu Feb 19 1998 08:27:24 2810 ..c -rwxrwxrwx 0
0
16569846
<part2.img-_OME(1~2.HTM-dead-16569846>
Thu Feb 19 1998 08:27:26 2810 m.. -rwxrwxrwx 0
0
16569846
<part2.img-_OME(1~2.HTM-dead-16569846>
Thu Feb 19 1998 08:27:30 1398 ..c -rwxrwxrwx 0
0
16569852
<part2.img-_BUTTON1.GIF-dead-16569852>
Thu Feb 19 1998 08:27:32 1398 m.. -rwxrwxrwx 0
0
16569852
<part2.img-_BUTTON1.GIF-dead-16569852>
Thu Feb 19 1998 08:27:38 3513 ..c -rwxrwxrwx 0
0
16569854
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
<part2.img-_OM_AR~1.GIF-dead-16569854>
Thu Feb 19 1998 08:27:40 3513 m.. -rwxrwxrwx 0
0
16569854
<part2.img-_OM_AR~1.GIF-dead-16569854>
Thu Feb 19 1998 08:28:00 2417 ..c -rwxrwxrwx 0
0
16120410
<part2.img-_07_1.GIF-dead-16120410>
Thu Feb 19 1998 08:28:02 2417 m.. -rwxrwxrwx 0
0
16120410
<part2.img-_07_1.GIF-dead-16120410>
Thu Feb 19 1998 08:28:16
790 ..c -rwxrwxrwx 0
0
16120419
<part2.img-_06_TI~1.GIF-dead-16120419>
Thu Feb 19 1998 08:28:18
790 m.. -rwxrwxrwx 0
0
16120419
<part2.img-_06_TI~1.GIF-dead-16120419>
134 ..c -rwxrwxrwx 0
0
18497543 <part2.img_EN_BO~1.GIF-dead-18497543>
Thu Feb 19 1998 08:28:20 3086 ..c -rwxrwxrwx 0
0
16120421
<part2.img-_06_2.GIF-dead-16120421>
134 m.. -rwxrwxrwx 0
0
18497543 <part2.img_EN_BO~1.GIF-dead-18497543>
134 ..c -rwxrwxrwx 0
0
16120424 <part2.img_EN_BO~1.GIF-dead-16120424>
Thu Feb 19 1998 08:28:22 3086 m.. -rwxrwxrwx 0
0
16120421
<part2.img-_06_2.GIF-dead-16120421>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
134 m.. -rwxrwxrwx 0
0
16120424 <part2.img_EN_BO~1.GIF-dead-16120424>
Thu Feb 19 1998 08:28:34 3392 ..c -rwxrwxrwx 0
0
16120426
<part2.img-_11_1.GIF-dead-16120426>
Thu Feb 19 1998 08:28:36 3392 m.. -rwxrwxrwx 0
0
16120426
<part2.img-_11_1.GIF-dead-16120426>
Thu Feb 19 1998 08:28:46 4235 ..c -rwxrwxrwx 0
0
19037245
<part2.img-_WWBOA~1.HTM-dead-19037245>
Thu Feb 19 1998 08:28:48 4235 m.. -rwxrwxrwx 0
0
19037245
<part2.img-_WWBOA~1.HTM-dead-19037245>
4995 ..c -rwxrwxrwx 0
0
16120429 <part2.img_ABCOM~2.GIF-dead-16120429>
Thu Feb 19 1998 08:28:50 4995 m.. -rwxrwxrwx 0
0
16120429
<part2.img-_ABCOM~2.GIF-dead-16120429>
Thu Feb 19 1998 08:29:44 8730 ..c -rwxrwxrwx 0
0
16120432
<part2.img-_GATE_~1.GIF-dead-16120432>
8874 ..c -rwxrwxrwx 0
0
19037248 <part2.img_GATE_~1.GIF-dead-19037248>
Thu Feb 19 1998 08:29:46 9263 ..c -rwxrwxrwx 0
0
16120435
<part2.img-_GATE_~2.GIF-dead-16120435>
Thu Feb 19 1998 08:29:54 8874 m.. -rwxrwxrwx 0
0
19037248
<part2.img-_GATE_~1.GIF-dead-19037248>
8730 m.. -rwxrwxrwx 0
0
16120432 <part2.img_GATE_~1.GIF-dead-16120432>
Thu Feb 19 1998 08:29:58 9263 m.. -rwxrwxrwx 0
0
16120435
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
<part2.img-_GATE_~2.GIF-dead-16120435>
Thu Feb 19 1998 08:30:06 4995 ..c -rwxrwxrwx 0
0
19037250
<part2.img-_93~1.HTM-dead-19037250>
Thu Feb 19 1998 08:30:08 4995 m.. -rwxrwxrwx 0
0
19037250
<part2.img-_93~1.HTM-dead-19037250>
Thu Feb 19 1998 08:31:02 3187 ..c -rwxrwxrwx 0
0
18497548
<part2.img-_94~1.HTM-dead-18497548>
Thu Feb 19 1998 08:31:04 3187 m.. -rwxrwxrwx 0
0
18497548
<part2.img-_94~1.HTM-dead-18497548>
Thu Feb 19 1998 08:31:26
639 ..c -rwxrwxrwx 0
0
18497551
<part2.img-_N-MAI~1.GIF-dead-18497551>
Thu Feb 19 1998 08:31:28
639 m.. -rwxrwxrwx 0
0
18497551
<part2.img-_N-MAI~1.GIF-dead-18497551>
Thu Feb 19 1998 08:31:38 5228 ..c -rwxrwxrwx 0
0
18497554
<part2.img-_ORLON~1.GIF-dead-18497554>
Thu Feb 19 1998 08:31:42 5149 ..c -rwxrwxrwx 0
0
18497556
<part2.img-_5PORT.GIF-dead-18497556>
Thu Feb 19 1998 08:31:44 5228 m.. -rwxrwxrwx 0
0
18497554
<part2.img-_ORLON~1.GIF-dead-18497554>
5149 m.. -rwxrwxrwx 0
0
18497556 <part2.img_5PORT.GIF-dead-18497556>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Thu Feb 19 1998 08:31:46 4117 ..c -rwxrwxrwx 0
0
18497560
<part2.img-_ONDO.GIF-dead-18497560>
Thu Feb 19 1998 08:31:48 3919 ..c -rwxrwxrwx 0
0
20025890
<part2.img-_KAR.GIF-dead-20025890>
4117 m.. -rwxrwxrwx 0
0
18497560 <part2.img_ONDO.GIF-dead-18497560>
Thu Feb 19 1998 08:31:50 3919 m.. -rwxrwxrwx 0
0
20025890
<part2.img-_KAR.GIF-dead-20025890>
Thu Feb 19 1998 23:00:00 4255 .a. -rwxrwxrwx 0
0
18497646
<part2.img-_NTERT~1.HTM-dead-18497646>
Fri Feb 20 1998 12:22:40
720 ..c -rwxrwxrwx 0
0
20025926
<part2.img-_NSTRU~1.GIF-dead-20025926>
Fri Feb 20 1998 12:22:42
720 m.. -rwxrwxrwx 0
0
20025926
<part2.img-_NSTRU~1.GIF-dead-20025926>
175 ..c -rwxrwxrwx 0
0
20025930 <part2.img__FOUR.GIF-dead-20025930>
239 ..c -rwxrwxrwx 0
0
20025928 <part2.img__THREE.GIF-dead-20025928>
Fri Feb 20 1998 12:22:44
239 m.. -rwxrwxrwx 0
0
20025928
<part2.img-__THREE.GIF-dead-20025928>
175 m.. -rwxrwxrwx 0
0
20025930 <part2.img__FOUR.GIF-dead-20025930>
Fri Feb 20 1998 12:22:48
625 ..c -rwxrwxrwx 0
0
20025933
<part2.img-_UPPOR~1.GIF-dead-20025933>
Fri Feb 20 1998 12:22:50
625 m.. -rwxrwxrwx 0
0
20025933
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169 4E46
<part2.img-_UPPOR~1.GIF-dead-20025933>
Fri Feb 20 1998 12:30:34 2117 ..c -rwxrwxrwx 0
0
20025935
<part2.img-_YSPAGE1.GIF-dead-20025935>
Fri Feb 20 1998 12:30:36
329 ..c -rwxrwxrwx 0
0
20025938
<part2.img-_YSGEN~1.GIF-dead-20025938>
5895 ..c -rwxrwxrwx 0
0
18497594 <part2.img_XXT.GIF-dead-18497594>
2117 m.. -rwxrwxrwx 0
0
20025935 <part2.img_YSPAGE1.GIF-dead-20025935>
Fri Feb 20 1998 12:30:38 5895 m.. -rwxrwxrwx 0
0
18497594
<part2.img-_XXT.GIF-dead-18497594>
329 m.. -rwxrwxrwx 0
0
20025938 <part2.img_YSGEN~1.GIF-dead-20025938>
Fri Feb 20 1998 12:31:08
175 ..c -rwxrwxrwx 0
0
16120494
<part2.img-__FOUR.GIF-dead-16120494>
Fri Feb 20 1998 12:31:10
175 m.. -rwxrwxrwx 0
0
16120494
<part2.img-__FOUR.GIF-dead-16120494>
Fri Feb 20 1998 12:31:42 10038 ..c -rwxrwxrwx 0
0
16120496
<part2.img-_00000~1.HTM-dead-16120496>
Fri Feb 20 1998 12:31:44 10038 m.. -rwxrwxrwx 0
0
16120496
<part2.img-_00000~1.HTM-dead-16120496>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
898 ..c -rwxrwxrwx 0
0
20025940 <part2.img_0000000.GIF-dead-20025940>
Fri Feb 20 1998 12:31:46
898 m.. -rwxrwxrwx 0
0
20025940
<part2.img-_0000000.GIF-dead-20025940>
Fri Feb 20 1998 12:31:56
881 ..c -rwxrwxrwx 0
0
20025942
<part2.img-_0000008.GIF-dead-20025942>
Fri Feb 20 1998 12:31:58
881 m.. -rwxrwxrwx 0
0
20025942
<part2.img-_0000008.GIF-dead-20025942>
Fri Feb 20 1998 12:32:02
881 ..c -rwxrwxrwx 0
0
20025944
<part2.img-_0000017.GIF-dead-20025944>
Fri Feb 20 1998 12:32:04
881 m.. -rwxrwxrwx 0
0
20025944
<part2.img-_0000017.GIF-dead-20025944>
Fri Feb 20 1998 12:32:06
872 ..c -rwxrwxrwx 0
0
20025946
<part2.img-_0000022.GIF-dead-20025946>
Fri Feb 20 1998 12:32:08
872 m.. -rwxrwxrwx 0
0
20025946
<part2.img-_0000022.GIF-dead-20025946>
Fri Feb 20 1998 12:32:12
859 ..c -rwxrwxrwx 0
0
20025948
<part2.img-_0000013.GIF-dead-20025948>
Fri Feb 20 1998 12:32:14
859 m.. -rwxrwxrwx 0
0
20025948
<part2.img-_0000013.GIF-dead-20025948>
Fri Feb 20 1998 12:32:16
881 ..c -rwxrwxrwx 0
0
20025950
<part2.img-_0000004.GIF-dead-20025950>
Fri Feb 20 1998 12:32:18
881 m.. -rwxrwxrwx 0
0
20025950
<part2.img-_0000004.GIF-dead-20025950>
Fri Feb 20 1998 12:44:36 2799 ..c -rwxrwxrwx 0
0
16120518
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169 4E46
<part2.img-_ETIMAGE.GIF-dead-16120518>
Fri Feb 20 1998 12:44:38 2799 m.. -rwxrwxrwx 0
0
16120518
<part2.img-_ETIMAGE.GIF-dead-16120518>
Fri Feb 20 1998 12:44:40 5174 ..c -rwxrwxrwx 0
0
19037320
<part2.img-_-MAIL~1.GIF-dead-19037320>
Fri Feb 20 1998 12:44:44 11105 ..c -rwxrwxrwx 0
0
20025954
<part2.img-_ETIMAGE.GIF-dead-20025954>
Fri Feb 20 1998 12:44:48 3076 ..c -rwxrwxrwx 0
0
18497618
<part2.img-_WEAKD~1.GIF-dead-18497618>
11105 m.. -rwxrwxrwx 0
0
20025954 <part2.img_ETIMAGE.GIF-dead-20025954>
Fri Feb 20 1998 12:44:50 3076 m.. -rwxrwxrwx 0
0
18497618
<part2.img-_WEAKD~1.GIF-dead-18497618>
446 ..c -rwxrwxrwx 0
0
20025957 <part2.img_AHOO!~1.GIF-dead-20025957>
Fri Feb 20 1998 12:44:52
446 m.. -rwxrwxrwx 0
0
20025957
<part2.img-_AHOO!~1.GIF-dead-20025957>
1291 ..c -rwxrwxrwx 0
0
18497621 <part2.img_OCKER~1.GIF-dead-18497621>
Fri Feb 20 1998 12:44:54 1291 m.. -rwxrwxrwx 0
0
18497621
<part2.img-_OCKER~1.GIF-dead-18497621>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
5174 m.. -rwxrwxrwx 0
0
19037320 <part2.img-_MAIL~1.GIF-dead-19037320>
Fri Feb 20 1998 12:45:02 8016 ..c -rwxrwxrwx 0
0
18497631
<part2.img-_AIS~1.HTM-dead-18497631>
Fri Feb 20 1998 12:45:04 8016 m.. -rwxrwxrwx 0
0
18497631
<part2.img-_AIS~1.HTM-dead-18497631>
Fri Feb 20 1998 12:45:06 10049 ..c -rwxrwxrwx 0
0
19037324
<part2.img-_ETIMAGE.GIF-dead-19037324>
Fri Feb 20 1998 12:45:12 10049 m.. -rwxrwxrwx 0
0
19037324
<part2.img-_ETIMAGE.GIF-dead-19037324>
Fri Feb 20 1998 12:46:58 4175 ..c -rwxrwxrwx 0
0
19037333
<part2.img-_ADIOA~1.GIF-dead-19037333>
Fri Feb 20 1998 12:47:00 4175 m.. -rwxrwxrwx 0
0
19037333
<part2.img-_ADIOA~1.GIF-dead-19037333>
7866 ..c -rwxrwxrwx 0
0
16120527 <part2.img_ANNER~1.GIF-dead-16120527>
Fri Feb 20 1998 12:47:02 7866 m.. -rwxrwxrwx 0
0
16120527
<part2.img-_ANNER~1.GIF-dead-16120527>
Fri Feb 20 1998 12:48:32 10161 ..c -rwxrwxrwx 0
0
16120533
<part2.img-_ETIMA~1.GIF-dead-16120533>
Fri Feb 20 1998 12:48:34 10161 m.. -rwxrwxrwx 0
0
16120533
<part2.img-_ETIMA~1.GIF-dead-16120533>
Fri Feb 20 1998 12:48:36 3215 ..c -rwxrwxrwx 0
0
18497636
<part2.img-_OMEWO~1.GIF-dead-18497636>
Fri Feb 20 1998 12:48:38 3215 m.. -rwxrwxrwx 0
0
18497636
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
<part2.img-_OMEWO~1.GIF-dead-18497636>
Fri Feb 20 1998 12:59:18
224 ..c -rwxrwxrwx 0
0
16120539
<part2.img-_7.GIF-dead-16120539>
Fri Feb 20 1998 12:59:20
224 m.. -rwxrwxrwx 0
0
16120539
<part2.img-_7.GIF-dead-16120539>
Fri Feb 20 1998 12:59:52 4255 ..c -rwxrwxrwx 0
0
18497646
<part2.img-_NTERT~1.HTM-dead-18497646>
Fri Feb 20 1998 12:59:54 4255 m.. -rwxrwxrwx 0
0
18497646
<part2.img-_NTERT~1.HTM-dead-18497646>
Fri Feb 20 1998 13:02:54 3932 ..c -rwxrwxrwx 0
0
20025962
<part2.img-_LASSI~1.GIF-dead-20025962>
Fri Feb 20 1998 13:02:56 3932 m.. -rwxrwxrwx 0
0
20025962
<part2.img-_LASSI~1.GIF-dead-20025962>
Fri Feb 20 1998 13:03:52 7059 ..c -rwxrwxrwx 0
0
16120545
<part2.img-_ALTIM~1.GIF-dead-16120545>
Fri Feb 20 1998 13:03:56 7059 m.. -rwxrwxrwx 0
0
16120545
<part2.img-_ALTIM~1.GIF-dead-16120545>
Fri Feb 20 1998 13:09:20 4376 ..c -rwxrwxrwx 0
0
18497638
<part2.img-_QUA~1.HTM-dead-18497638>
Fri Feb 20 1998 13:09:22 4376 m.. -rwxrwxrwx 0
0
18497638
<part2.img-_QUA~1.HTM-dead-18497638>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Fri Feb 20 1998 13:09:34 4560 ..c -rwxrwxrwx 0
0
20025973
<part2.img-_OUBLE~1.CLA-dead-20025973>
Fri Feb 20 1998 13:09:36 4560 m.. -rwxrwxrwx 0
0
20025973
<part2.img-_OUBLE~1.CLA-dead-20025973>
Fri Feb 20 1998 13:09:38 2906 ..c -rwxrwxrwx 0
0
16120541
<part2.img-_RIVIA11.GIF-dead-16120541>
2114 ..c -rwxrwxrwx 0
0
19037359 <part2.img_AVITE~1.CLA-dead-19037359>
5509 ..c -rwxrwxrwx 0
0
18497658 <part2.img_ENOMT~1.GIF-dead-18497658>
1255 ..c -rwxrwxrwx 0
0
20025975 <part2.img_ELLLOGO.GIF-dead-20025975>
3168 ..c -rwxrwxrwx 0
0
16120551 <part2.img_OGO(1).GIF-dead-16120551>
Fri Feb 20 1998 13:09:40 2114 m.. -rwxrwxrwx 0
0
19037359
<part2.img-_AVITE~1.CLA-dead-19037359>
2906 m.. -rwxrwxrwx 0
0
16120541 <part2.img_RIVIA11.GIF-dead-16120541>
Fri Feb 20 1998 13:09:42 1255 m.. -rwxrwxrwx 0
0
20025975
<part2.img-_ELLLOGO.GIF-dead-20025975>
3168 m.. -rwxrwxrwx 0
0
16120551 <part2.img_OGO(1).GIF-dead-16120551>
Fri Feb 20 1998 13:09:44 5509 m.. -rwxrwxrwx 0
0
18497658
<part2.img-_ENOMT~1.GIF-dead-18497658>
2827 ..c -rwxrwxrwx 0
0
16120553 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
_UBMEN~1.CLA-dead-16120553>
Fri Feb 20 1998 13:09:46 2827 m.. -rwxrwxrwx 0
0
16120553
<part2.img-_UBMEN~1.CLA-dead-16120553>
2486 ..c -rwxrwxrwx 0
0
20025978 <part2.img_UBMEN~1.CLA-dead-20025978>
Fri Feb 20 1998 13:09:48 2486 m.. -rwxrwxrwx 0
0
20025978
<part2.img-_UBMEN~1.CLA-dead-20025978>
2001 ..c -rwxrwxrwx 0
0
18497661 <part2.img_ILEDI~1.CLA-dead-18497661>
Fri Feb 20 1998 13:09:50 1026 ..c -rwxrwxrwx 0
0
20025981
<part2.img-_ACKGR~2.JPE-dead-20025981>
2001 m.. -rwxrwxrwx 0
0
18497661 <part2.img_ILEDI~1.CLA-dead-18497661>
Fri Feb 20 1998 13:09:52 1450 ..c -rwxrwxrwx 0
0
16120555
<part2.img-_QUA~1.MEN-dead-16120555>
1026 m.. -rwxrwxrwx 0
0
20025981 <part2.img_ACKGR~2.JPE-dead-20025981>
Fri Feb 20 1998 13:09:54 1450 m.. -rwxrwxrwx 0
0
16120555
<part2.img-_QUA~1.MEN-dead-16120555>
Fri Feb 20 1998 13:10:28 3981 ..c -rwxrwxrwx 0
0
20025984
<part2.img-_EARCH~7.HTM-dead-20025984>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Fri Feb 20 1998 13:10:30 3981 m.. -rwxrwxrwx 0
0
20025984
<part2.img-_EARCH~7.HTM-dead-20025984>
Fri Feb 20 1998 13:10:32 1987 ..c -rwxrwxrwx 0
0
18497664
<part2.img-_EARCH~2.GIF-dead-18497664>
927 ..c -rwxrwxrwx 0
0
20025986 <part2.img_ASICSW.GIF-dead-20025986>
Fri Feb 20 1998 13:10:34
927 m.. -rwxrwxrwx 0
0
20025986
<part2.img-_ASICSW.GIF-dead-20025986>
1987 m.. -rwxrwxrwx 0
0
18497664 <part2.img_EARCH~2.GIF-dead-18497664>
872 ..c -rwxrwxrwx 0
0
20025988 <part2.img_NIMALSW.GIF-dead-20025988>
Fri Feb 20 1998 13:10:36
934 ..c -rwxrwxrwx 0
0
20025990
<part2.img-_OMEW.GIF-dead-20025990>
872 m.. -rwxrwxrwx 0
0
20025988 <part2.img_NIMALSW.GIF-dead-20025988>
Fri Feb 20 1998 13:10:38
934 m.. -rwxrwxrwx 0
0
20025990
<part2.img-_OMEW.GIF-dead-20025990>
Fri Feb 20 1998 13:11:36 10206 ..c -rwxrwxrwx 0
0
19037372
<part2.img-__S__S~1.L4Q-dead-19037372>
Fri Feb 20 1998 13:11:38 10206 m.. -rwxrwxrwx 0
0
19037372
<part2.img-__S__S~1.L4Q-dead-19037372>
Fri Feb 20 1998 13:16:10 61604 ..c -rwxrwxrwx 0
0
20025959
<part2.img-_HIPSE~1.HTM-dead-20025959>
Fri Feb 20 1998 13:16:24 61604 m.. -rwxrwxrwx 0
0
20025959
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
<part2.img-_HIPSE~1.HTM-dead-20025959>
Fri Feb 20 1998 13:16:42 6639 ..c -rwxrwxrwx 0
0
20025995
<part2.img-_LSI~1.HTM-dead-20025995>
Fri Feb 20 1998 13:16:44 1816 ..c -rwxrwxrwx 0
0
20025999
<part2.img-_BTN2L.GIF-dead-20025999>
6639 m.. -rwxrwxrwx 0
0
20025995 <part2.img_LSI~1.HTM-dead-20025995>
Fri Feb 20 1998 13:16:46 1816 m.. -rwxrwxrwx 0
0
20025999
<part2.img-_BTN2L.GIF-dead-20025999>
Fri Feb 20 1998 13:17:06 2061 ..c -rwxrwxrwx 0
0
18497684
<part2.img-_BTN3R.GIF-dead-18497684>
Fri Feb 20 1998 13:17:08 2061 m.. -rwxrwxrwx 0
0
18497684
<part2.img-_BTN3R.GIF-dead-18497684>
Fri Feb 20 1998 13:17:10 11784 ..c -rwxrwxrwx 0
0
16120567
<part2.img-_FOOTERL.GIF-dead-16120567>
Fri Feb 20 1998 13:17:16 11784 m.. -rwxrwxrwx 0
0
16120567
<part2.img-_FOOTERL.GIF-dead-16120567>
Fri Feb 20 1998 13:17:22 3553 ..c -rwxrwxrwx 0
0
18497688
<part2.img-_FOOTERR.GIF-dead-18497688>
Fri Feb 20 1998 13:17:28 3553 m.. -rwxrwxrwx 0
0
18497688
<part2.img-_FOOTERR.GIF-dead-18497688>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Fri Feb 20 1998 13:17:50
339 ..c -rwxrwxrwx 0
0
20026002
<part2.img-_BACKG~1.GIF-dead-20026002>
Fri Feb 20 1998 13:17:52
339 m.. -rwxrwxrwx 0
0
20026002
<part2.img-_BACKG~1.GIF-dead-20026002>
Fri Feb 20 1998 13:18:02 2396 ..c -rwxrwxrwx 0
0
20026004
<part2.img-_BTN4L.GIF-dead-20026004>
Fri Feb 20 1998 13:18:04 1478 ..c -rwxrwxrwx 0
0
20026006
<part2.img-_SBTN1L.GIF-dead-20026006>
2396 m.. -rwxrwxrwx 0
0
20026004 <part2.img_BTN4L.GIF-dead-20026004>
Fri Feb 20 1998 13:18:06 1478 m.. -rwxrwxrwx 0
0
20026006
<part2.img-_SBTN1L.GIF-dead-20026006>
1355 ..c -rwxrwxrwx 0
0
20026008 <part2.img_SBTN5L.GIF-dead-20026008>
Fri Feb 20 1998 13:18:08 1355 m.. -rwxrwxrwx 0
0
20026008
<part2.img-_SBTN5L.GIF-dead-20026008>
Fri Feb 20 1998 13:18:22 2137 ..c -rwxrwxrwx 0
0
20026011
<part2.img-_ULLQU~1.GIF-dead-20026011>
Fri Feb 20 1998 13:18:24 2137 m.. -rwxrwxrwx 0
0
20026011
<part2.img-_ULLQU~1.GIF-dead-20026011>
Fri Feb 20 1998 13:18:26 2171 ..c -rwxrwxrwx 0
0
20026013
<part2.img-_BTN2R.GIF-dead-20026013>
Fri Feb 20 1998 13:18:28 2103 ..c -rwxrwxrwx 0
0
18497703
<part2.img-_BTN1R.GIF-dead-18497703>
Fri Feb 20 1998 13:18:30 2103 m.. -rwxrwxrwx 0
0
18497703
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
<part2.img-_BTN1R.GIF-dead-18497703>
2171 m.. -rwxrwxrwx 0
0
20026013 <part2.img_BTN2R.GIF-dead-20026013>
Fri Feb 20 1998 16:31:26 1019 ..c -rwxrwxrwx 0
0
16569819
<part2.img-_34.GIF-dead-16569819>
Fri Feb 20 1998 16:31:28 1019 m.. -rwxrwxrwx 0
0
16569819
<part2.img-_34.GIF-dead-16569819>
Fri Feb 20 1998 16:32:02 5805 ..c -rwxrwxrwx 0
0
18497712
<part2.img-_XPULS~1.JPE-dead-18497712>
Fri Feb 20 1998 16:32:04 1183 ..c -rwxrwxrwx 0
0
19037395
<part2.img-_33.GIF-dead-19037395>
Fri Feb 20 1998 16:32:06 5805 m.. -rwxrwxrwx 0
0
18497712
<part2.img-_XPULS~1.JPE-dead-18497712>
3831 ..c -rwxrwxrwx 0
0
19037397 <part2.img_OVE~1.JPE-dead-19037397>
1183 m.. -rwxrwxrwx 0
0
19037395 <part2.img_33.GIF-dead-19037395>
Fri Feb 20 1998 16:32:08 3831 m.. -rwxrwxrwx 0
0
19037397
<part2.img-_OVE~1.JPE-dead-19037397>
Fri Feb 20 1998 23:00:00 6525 .a. -rwxrwxrwx 0
0
20026080
<part2.img-_ONDAG~4.HTM-dead-20026080>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
2608 .a. -rwxrwxrwx 0
0
20026134 <part2.img_YBERA~2.HTM-dead-20026134>
10206 .a. -rwxrwxrwx 0
0
19037372 <part2.img__S__S~1.L4Q-dead-19037372>
10206 .a. -rwxrwxrwx 0
0
19037607 <part2.img__S__S~1.94Y-dead-19037607>
Fri Feb 20 1998 23:25:04 1796 ..c -rwxrwxrwx 0
0
20026020
<part2.img-_CHECK~1.HTM-dead-20026020>
Fri Feb 20 1998 23:25:06 1796 m.. -rwxrwxrwx 0
0
20026020
<part2.img-_CHECK~1.HTM-dead-20026020>
1838 ..c -rwxrwxrwx 0
0
20026022 <part2.img_ITLE.GIF-dead-20026022>
Fri Feb 20 1998 23:25:08 1838 m.. -rwxrwxrwx 0
0
20026022
<part2.img-_ITLE.GIF-dead-20026022>
Fri Feb 20 1998 23:25:38 1695 ..c -rwxrwxrwx 0
0
20026025
<part2.img-_N_VLG~1.JPE-dead-20026025>
Fri Feb 20 1998 23:25:40 1695 m.. -rwxrwxrwx 0
0
20026025
<part2.img-_N_VLG~1.JPE-dead-20026025>
Fri Feb 20 1998 23:26:24 5407 ..c -rwxrwxrwx 0
0
20026027
<part2.img-_~1.HTM-dead-20026027>
Fri Feb 20 1998 23:26:26 5407 m.. -rwxrwxrwx 0
0
20026027
<part2.img-_~1.HTM-dead-20026027>
Fri Feb 20 1998 23:26:28
273 ..c -rwxrwxrwx 0
0
20026029
<part2.img-_G1.GIF-dead-20026029>
Fri Feb 20 1998 23:26:30
360 ..c -rwxrwxrwx 0
0
20026031
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169 4E46
<part2.img-_IVBAR2.GIF-dead-20026031>
273 m.. -rwxrwxrwx 0
0
20026029 <part2.img_G1.GIF-dead-20026029>
Fri Feb 20 1998 23:26:32
360 m.. -rwxrwxrwx 0
0
20026031
<part2.img-_IVBAR2.GIF-dead-20026031>
Fri Feb 20 1998 23:26:42
153 ..c -rwxrwxrwx 0
0
20026035
<part2.img-_P.GIF-dead-20026035>
Fri Feb 20 1998 23:26:44
153 m.. -rwxrwxrwx 0
0
20026035
<part2.img-_P.GIF-dead-20026035>
151 ..c -rwxrwxrwx 0
0
19037411 <part2.img-_R.GIFdead-19037411>
Fri Feb 20 1998 23:26:46
151 m.. -rwxrwxrwx 0
0
19037411
<part2.img-_R.GIF-dead-19037411>
Fri Feb 20 1998 23:26:48 6516 ..c -rwxrwxrwx 0
0
20026037
<part2.img-_1~1.JPE-dead-20026037>
Fri Feb 20 1998 23:26:54 6516 m.. -rwxrwxrwx 0
0
20026037
<part2.img-_1~1.JPE-dead-20026037>
Fri Feb 20 1998 23:27:32 4558 ..c -rwxrwxrwx 0
0
19037413
<part2.img-_CSMZ~1.HTM-dead-19037413>
Fri Feb 20 1998 23:27:36 4558 m.. -rwxrwxrwx 0
0
19037413
<part2.img-_CSMZ~1.HTM-dead-19037413>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Fri Feb 20 1998 23:27:40 2173 ..c -rwxrwxrwx 0
0
20026039
<part2.img-_OPSUN~1.JPE-dead-20026039>
Fri Feb 20 1998 23:27:42 2173 m.. -rwxrwxrwx 0
0
20026039
<part2.img-_OPSUN~1.JPE-dead-20026039>
Fri Feb 20 1998 23:28:10 5109 ..c -rwxrwxrwx 0
0
20026041
<part2.img-_M1~1.HTM-dead-20026041>
Fri Feb 20 1998 23:28:14 2356 ..c -rwxrwxrwx 0
0
20026043
<part2.img-_INLAB.GIF-dead-20026043>
5109 m.. -rwxrwxrwx 0
0
20026041 <part2.img_M1~1.HTM-dead-20026041>
Fri Feb 20 1998 23:28:16 2356 m.. -rwxrwxrwx 0
0
20026043
<part2.img-_INLAB.GIF-dead-20026043>
Fri Feb 20 1998 23:28:24 1135 ..c -rwxrwxrwx 0
0
20026045
<part2.img-_N_SM0~1.JPE-dead-20026045>
Fri Feb 20 1998 23:28:26 1135 m.. -rwxrwxrwx 0
0
20026045
<part2.img-_N_SM0~1.JPE-dead-20026045>
Fri Feb 20 1998 23:28:30 2584 ..c -rwxrwxrwx 0
0
20026047
<part2.img-_N_SM0~2.JPE-dead-20026047>
Fri Feb 20 1998 23:28:34 2584 m.. -rwxrwxrwx 0
0
20026047
<part2.img-_N_SM0~2.JPE-dead-20026047>
Fri Feb 20 1998 23:34:40
579 ..c -rwxrwxrwx 0
0
16120620
<part2.img-_UNSTU~1.HTM-dead-16120620>
Fri Feb 20 1998 23:34:42
579 m.. -rwxrwxrwx 0
0
16120620
<part2.img-_UNSTU~1.HTM-dead-16120620>
Fri Feb 20 1998 23:34:50 2876 ..c -rwxrwxrwx 0
0
18497735
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169 4E46
<part2.img-_ICTUR~1.HTM-dead-18497735>
Fri Feb 20 1998 23:34:52 2876 m.. -rwxrwxrwx 0
0
18497735
<part2.img-_ICTUR~1.HTM-dead-18497735>
Fri Feb 20 1998 23:36:34 1489 ..c -rwxrwxrwx 0
0
20026053
<part2.img-_N_BON~1.JPE-dead-20026053>
Fri Feb 20 1998 23:36:36 1936 ..c -rwxrwxrwx 0
0
20026056
<part2.img-_N_BON~2.JPE-dead-20026056>
1489 m.. -rwxrwxrwx 0
0
20026053 <part2.img_N_BON~1.JPE-dead-20026053>
Fri Feb 20 1998 23:36:38 1936 m.. -rwxrwxrwx 0
0
20026056
<part2.img-_N_BON~2.JPE-dead-20026056>
Fri Feb 20 1998 23:36:40 1738 ..c -rwxrwxrwx 0
0
20026059
<part2.img-_N_BON~3.JPE-dead-20026059>
Fri Feb 20 1998 23:36:42 1738 m.. -rwxrwxrwx 0
0
20026059
<part2.img-_N_BON~3.JPE-dead-20026059>
Fri Feb 20 1998 23:36:50 1826 ..c -rwxrwxrwx 0
0
19037433
<part2.img-_N_BON~4.JPE-dead-19037433>
Fri Feb 20 1998 23:36:52 1826 m.. -rwxrwxrwx 0
0
19037433
<part2.img-_N_BON~4.JPE-dead-19037433>
Fri Feb 20 1998 23:37:30 7517 ..c -rwxrwxrwx 0
0
20026065
<part2.img-_ONU18~1.JPE-dead-20026065>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Fri Feb 20 1998 23:37:32 7517 m.. -rwxrwxrwx 0
0
20026065
<part2.img-_ONU18~1.JPE-dead-20026065>
Fri Feb 20 1998 23:38:08 2224 ..c -rwxrwxrwx 0
0
16120645
<part2.img-_IDEO~1.HTM-dead-16120645>
Fri Feb 20 1998 23:38:10 2224 m.. -rwxrwxrwx 0
0
16120645
<part2.img-_IDEO~1.HTM-dead-16120645>
Fri Feb 20 1998 23:38:20 5409 ..c -rwxrwxrwx 0
0
18497781
<part2.img-_NTERS~2.CLA-dead-18497781>
Fri Feb 20 1998 23:38:22 5409 m.. -rwxrwxrwx 0
0
18497781
<part2.img-_NTERS~2.CLA-dead-18497781>
Fri Feb 20 1998 23:39:26 4686 ..c -rwxrwxrwx 0
0
19037441
<part2.img-_XTREM~1.HTM-dead-19037441>
Fri Feb 20 1998 23:39:28 4686 m.. -rwxrwxrwx 0
0
19037441
<part2.img-_XTREM~1.HTM-dead-19037441>
4310 ..c -rwxrwxrwx 0
0
20026067 <part2.img_AVE3.GIF-dead-20026067>
Fri Feb 20 1998 23:39:30 4310 m.. -rwxrwxrwx 0
0
20026067
<part2.img-_AVE3.GIF-dead-20026067>
Fri Feb 20 1998 23:39:38
537 ..c -rwxrwxrwx 0
0
20026069
<part2.img-_EW(1).GIF-dead-20026069>
Fri Feb 20 1998 23:39:40
537 m.. -rwxrwxrwx 0
0
20026069
<part2.img-_EW(1).GIF-dead-20026069>
1674 ..c -rwxrwxrwx 0
0
20026071 <part2.img_OP500~1.JPE-dead-20026071>
Fri Feb 20 1998 23:39:42 1674 m.. -rwxrwxrwx 0
0
20026071
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
<part2.img-_OP500~1.JPE-dead-20026071>
Fri Feb 20 1998 23:40:10 5253 ..c -rwxrwxrwx 0
0
18497783
<part2.img-_OW~1.HTM-dead-18497783>
Fri Feb 20 1998 23:40:12 5253 m.. -rwxrwxrwx 0
0
18497783
<part2.img-_OW~1.HTM-dead-18497783>
Fri Feb 20 1998 23:47:58 6525 ..c -rwxrwxrwx 0
0
20026080
<part2.img-_ONDAG~4.HTM-dead-20026080>
Fri Feb 20 1998 23:48:02 6525 m.. -rwxrwxrwx 0
0
20026080
<part2.img-_ONDAG~4.HTM-dead-20026080>
Fri Feb 20 1998 23:50:06 4819 ..c -rwxrwxrwx 0
0
20026082
<part2.img-_C1.GIF-dead-20026082>
Fri Feb 20 1998 23:50:08 4819 m.. -rwxrwxrwx 0
0
20026082
<part2.img-_C1.GIF-dead-20026082>
Fri Feb 20 1998 23:50:30 2867 ..c -rwxrwxrwx 0
0
20026085
<part2.img-_ANDAS~1.HTM-dead-20026085>
Fri Feb 20 1998 23:50:32 2867 m.. -rwxrwxrwx 0
0
20026085
<part2.img-_ANDAS~1.HTM-dead-20026085>
Fri Feb 20 1998 23:50:36 7440 ..c -rwxrwxrwx 0
0
20026087
<part2.img-_TARLUCK.GIF-dead-20026087>
Fri Feb 20 1998 23:50:40 7440 m.. -rwxrwxrwx 0
0
20026087
<part2.img-_TARLUCK.GIF-dead-20026087>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Fri Feb 20 1998 23:54:34 10790 ..c -rwxrwxrwx 0
0
20026089
<part2.img-_C6~1.HTM-dead-20026089>
Fri Feb 20 1998 23:54:36 10790 m.. -rwxrwxrwx 0
0
20026089
<part2.img-_C6~1.HTM-dead-20026089>
Fri Feb 20 1998 23:54:38
384 ..c -rwxrwxrwx 0
0
20026091
<part2.img-_OT2.GIF-dead-20026091>
Fri Feb 20 1998 23:54:40
384 m.. -rwxrwxrwx 0
0
20026091
<part2.img-_OT2.GIF-dead-20026091>
Fri Feb 20 1998 23:58:56 4854 ..c -rwxrwxrwx 0
0
18497803
<part2.img-_NTER~1.HTM-dead-18497803>
Fri Feb 20 1998 23:58:58 4854 m.. -rwxrwxrwx 0
0
18497803
<part2.img-_NTER~1.HTM-dead-18497803>
Fri Feb 20 1998 23:59:02 32659 ..c -rwxrwxrwx 0
0
20026094
<part2.img-_ONAGE~1.JPE-dead-20026094>
Fri Feb 20 1998 23:59:38 32659 m.. -rwxrwxrwx 0
0
20026094
<part2.img-_ONAGE~1.JPE-dead-20026094>
Fri Feb 20 1998 23:59:44 12687 ..c -rwxrwxrwx 0
0
16120664
<part2.img-_AXIN~1.JPE-dead-16120664>
Fri Feb 20 1998 23:59:56 12687 m.. -rwxrwxrwx 0
0
16120664
<part2.img-_AXIN~1.JPE-dead-16120664>
Sat Feb 21 1998 00:00:54 1500 ..c -rwxrwxrwx 0
0
20026098
<part2.img-_ASSWO~1.HTM-dead-20026098>
Sat Feb 21 1998 00:00:56 1500 m.. -rwxrwxrwx 0
0
20026098
<part2.img-_ASSWO~1.HTM-dead-20026098>
Sat Feb 21 1998 00:01:12 4263 ..c -rwxrwxrwx 0
0
18497810
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
<part2.img-_ICS~1.HTM-dead-18497810>
Sat Feb 21 1998 00:01:14 4263 m.. -rwxrwxrwx 0
0
18497810
<part2.img-_ICS~1.HTM-dead-18497810>
Sat Feb 21 1998 00:01:22 2858 ..c -rwxrwxrwx 0
0
20026100
<part2.img-_C_CHECK.GIF-dead-20026100>
Sat Feb 21 1998 00:01:24 2858 m.. -rwxrwxrwx 0
0
20026100
<part2.img-_C_CHECK.GIF-dead-20026100>
Sat Feb 21 1998 00:01:38 4487 ..c -rwxrwxrwx 0
0
18497812
<part2.img-_OVIES~1.HTM-dead-18497812>
Sat Feb 21 1998 00:01:40 4487 m.. -rwxrwxrwx 0
0
18497812
<part2.img-_OVIES~1.HTM-dead-18497812>
Sat Feb 21 1998 00:30:48 1246 ..c -rwxrwxrwx 0
0
20026107
<part2.img-_N_3WA~1.JPE-dead-20026107>
Sat Feb 21 1998 00:30:50 1246 m.. -rwxrwxrwx 0
0
20026107
<part2.img-_N_3WA~1.JPE-dead-20026107>
1127 ..c -rwxrwxrwx 0
0
20026110 <part2.img_N_BIG~1.JPE-dead-20026110>
Sat Feb 21 1998 00:30:52 1312 ..c -rwxrwxrwx 0
0
20026113
<part2.img-_N_C_X~1.JPE-dead-20026113>
1127 m.. -rwxrwxrwx 0
0
20026110 <part2.img_N_BIG~1.JPE-dead-20026110>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Sat Feb 21 1998 00:30:54 1312 m.. -rwxrwxrwx 0
0
20026113
<part2.img-_N_C_X~1.JPE-dead-20026113>
1364 ..c -rwxrwxrwx 0
0
20026116 <part2.img_N_DOT~1.JPE-dead-20026116>
Sat Feb 21 1998 00:30:56 1406 ..c -rwxrwxrwx 0
0
20026122
<part2.img-_N_GGX~1.JPE-dead-20026122>
1364 m.. -rwxrwxrwx 0
0
20026116 <part2.img_N_DOT~1.JPE-dead-20026116>
1179 ..c -rwxrwxrwx 0
0
20026119 <part2.img_N_GES~1.JPE-dead-20026119>
Sat Feb 21 1998 00:30:58 1179 m.. -rwxrwxrwx 0
0
20026119
<part2.img-_N_GES~1.JPE-dead-20026119>
1135 ..c -rwxrwxrwx 0
0
20026124 <part2.img_N_ORA~1.JPE-dead-20026124>
1120 ..c -rwxrwxrwx 0
0
20026127 <part2.img_N_RED~1.JPE-dead-20026127>
1406 m.. -rwxrwxrwx 0
0
20026122 <part2.img_N_GGX~1.JPE-dead-20026122>
Sat Feb 21 1998 00:31:00 1135 m.. -rwxrwxrwx 0
0
20026124
<part2.img-_N_ORA~1.JPE-dead-20026124>
1120 m.. -rwxrwxrwx 0
0
20026127 <part2.img_N_RED~1.JPE-dead-20026127>
8390 ..c -rwxrwxrwx 0
0
20026129 <part2.img_YBER3.GIF-dead-20026129>
Sat Feb 21 1998 00:31:02 8390 m.. -rwxrwxrwx 0
0
20026129
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
<part2.img-_YBER3.GIF-dead-20026129>
Sat Feb 21 1998 00:31:32 6517 ..c -rwxrwxrwx 0
0
20026131
<part2.img-_ESCH1~1.JPE-dead-20026131>
Sat Feb 21 1998 00:31:34 6517 m.. -rwxrwxrwx 0
0
20026131
<part2.img-_ESCH1~1.JPE-dead-20026131>
Sat Feb 21 1998 00:31:40 2608 ..c -rwxrwxrwx 0
0
20026134
<part2.img-_YBERA~2.HTM-dead-20026134>
Sat Feb 21 1998 00:31:42 2608 m.. -rwxrwxrwx 0
0
20026134
<part2.img-_YBERA~2.HTM-dead-20026134>
Sat Feb 21 1998 00:33:06 4286 ..c -rwxrwxrwx 0
0
20026104
<part2.img-_RIPEN~1.HTM-dead-20026104>
Sat Feb 21 1998 00:33:08 4286 m.. -rwxrwxrwx 0
0
20026104
<part2.img-_RIPEN~1.HTM-dead-20026104>
Sat Feb 21 1998 00:33:14 4535 ..c -rwxrwxrwx 0
0
18497831
<part2.img-_OLORBAR.GIF-dead-18497831>
Sat Feb 21 1998 00:33:18 4535 m.. -rwxrwxrwx 0
0
18497831
<part2.img-_OLORBAR.GIF-dead-18497831>
Sat Feb 21 1998 00:33:32 2401 ..c -rwxrwxrwx 0
0
20026133
<part2.img-_ABASH~1.HTM-dead-20026133>
Sat Feb 21 1998 00:33:36 2401 m.. -rwxrwxrwx 0
0
20026133
<part2.img-_ABASH~1.HTM-dead-20026133>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Sat Feb 21 1998 00:38:16 2547 ..c -rwxrwxrwx 0
0
19037497
<part2.img-_NDEX(~7.HTM-dead-19037497>
Sat Feb 21 1998 00:38:18 2547 m.. -rwxrwxrwx 0
0
19037497
<part2.img-_NDEX(~7.HTM-dead-19037497>
Sat Feb 21 1998 00:38:22 2133 ..c -rwxrwxrwx 0
0
20026139
<part2.img-_XXGREEN.GIF-dead-20026139>
Sat Feb 21 1998 00:38:24 2133 m.. -rwxrwxrwx 0
0
20026139
<part2.img-_XXGREEN.GIF-dead-20026139>
Sat Feb 21 1998 00:38:58 1801 ..c -rwxrwxrwx 0
0
20026141
<part2.img-_EMP5~1.HTM-dead-20026141>
Sat Feb 21 1998 00:39:00 1801 m.. -rwxrwxrwx 0
0
20026141
<part2.img-_EMP5~1.HTM-dead-20026141>
Sat Feb 21 1998 00:39:08 1576 ..c -rwxrwxrwx 0
0
20026144
<part2.img-_N_BDC~1.JPE-dead-20026144>
Sat Feb 21 1998 00:39:10 1576 m.. -rwxrwxrwx 0
0
20026144
<part2.img-_N_BDC~1.JPE-dead-20026144>
Sat Feb 21 1998 00:39:36 2608 ..c -rwxrwxrwx 0
0
16120690
<part2.img-_YBERA~1.HTM-dead-16120690>
Sat Feb 21 1998 00:39:38 2608 m.. -rwxrwxrwx 0
0
16120690
<part2.img-_YBERA~1.HTM-dead-16120690>
Sat Feb 21 1998 00:40:42 8720 ..c -rwxrwxrwx 0
0
20026146
<part2.img-_TXV.GIF-dead-20026146>
Sat Feb 21 1998 00:40:46 8720 m.. -rwxrwxrwx 0
0
20026146
<part2.img-_TXV.GIF-dead-20026146>
Sat Feb 21 1998 00:43:12 2964 ..c -rwxrwxrwx 0
0
20026151
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
<part2.img-_ACK2~1.JPE-dead-20026151>
Sat Feb 21 1998 00:43:14 2964 m.. -rwxrwxrwx 0
0
20026151
<part2.img-_ACK2~1.JPE-dead-20026151>
Sat Feb 21 1998 00:43:26 2562 ..c -rwxrwxrwx 0
0
18497847
<part2.img-_.GIF-dead-18497847>
Sat Feb 21 1998 00:43:28 2562 m.. -rwxrwxrwx 0
0
18497847
<part2.img-_.GIF-dead-18497847>
Sat Feb 21 1998 00:43:36 2426 ..c -rwxrwxrwx 0
0
18497849
<part2.img-_HOWAD2.GIF-dead-18497849>
Sat Feb 21 1998 00:43:38 2426 m.. -rwxrwxrwx 0
0
18497849
<part2.img-_HOWAD2.GIF-dead-18497849>
Sat Feb 21 1998 00:43:50 2964 ..c -rwxrwxrwx 0
0
16120699
<part2.img-_ACK2~1.JPE-dead-16120699>
Sat Feb 21 1998 00:43:52 2964 m.. -rwxrwxrwx 0
0
16120699
<part2.img-_ACK2~1.JPE-dead-16120699>
Sat Feb 21 1998 00:45:24 1934 ..c -rwxrwxrwx 0
0
18497853
<part2.img-_AIN22~1.HTM-dead-18497853>
Sat Feb 21 1998 00:45:26 3441 ..c -rwxrwxrwx 0
0
20026155
<part2.img-_ACK1~1.JPE-dead-20026155>
1934 m.. -rwxrwxrwx 0
0
18497853 <part2.img_AIN22~1.HTM-dead-18497853>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Sat Feb 21 1998 00:45:28 3441 m.. -rwxrwxrwx 0
0
20026155
<part2.img-_ACK1~1.JPE-dead-20026155>
Sat Feb 21 1998 00:45:54 6287 ..c -rwxrwxrwx 0
0
20026159
<part2.img-_MBAN.GIF-dead-20026159>
Sat Feb 21 1998 00:45:58 6287 m.. -rwxrwxrwx 0
0
20026159
<part2.img-_MBAN.GIF-dead-20026159>
Sat Feb 21 1998 00:46:32 1827 ..c -rwxrwxrwx 0
0
16120701
<part2.img-_ER~1.HTM-dead-16120701>
Sat Feb 21 1998 00:46:34 1827 m.. -rwxrwxrwx 0
0
16120701
<part2.img-_ER~1.HTM-dead-16120701>
Sat Feb 21 1998 00:46:38 4857 ..c -rwxrwxrwx 0
0
19037517
<part2.img-_AMPL3D2.GIF-dead-19037517>
Sat Feb 21 1998 00:46:48 4695 ..c -rwxrwxrwx 0
0
18497861
<part2.img-_AMPL3D3.GIF-dead-18497861>
4857 m.. -rwxrwxrwx 0
0
19037517 <part2.img_AMPL3D2.GIF-dead-19037517>
Sat Feb 21 1998 00:46:50 5569 ..c -rwxrwxrwx 0
0
20026163
<part2.img-_AMPL3D4.GIF-dead-20026163>
4695 m.. -rwxrwxrwx 0
0
18497861 <part2.img_AMPL3D3.GIF-dead-18497861>
Sat Feb 21 1998 00:46:56 5569 m.. -rwxrwxrwx 0
0
20026163
<part2.img-_AMPL3D4.GIF-dead-20026163>
Sat Feb 21 1998 00:47:08 2750 ..c -rwxrwxrwx 0
0
18497859
<part2.img-_CTION~1.HTM-dead-18497859>
Sat Feb 21 1998 00:47:10 2750 m.. -rwxrwxrwx 0
0
18497859
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
<part2.img-_CTION~1.HTM-dead-18497859>
Sat Feb 21 1998 00:47:12 3441 ..c -rwxrwxrwx 0
0
18497863
<part2.img-_ACK1~1.JPE-dead-18497863>
Sat Feb 21 1998 00:47:14 3441 m.. -rwxrwxrwx 0
0
18497863
<part2.img-_ACK1~1.JPE-dead-18497863>
3632 ..c -rwxrwxrwx 0
0
18497868 <part2.img_N_AC1~1.JPE-dead-18497868>
Sat Feb 21 1998 00:47:16 3487 ..c -rwxrwxrwx 0
0
18497871
<part2.img-_N_AC1~2.JPE-dead-18497871>
Sat Feb 21 1998 00:47:18 3487 m.. -rwxrwxrwx 0
0
18497871
<part2.img-_N_AC1~2.JPE-dead-18497871>
3632 m.. -rwxrwxrwx 0
0
18497868 <part2.img_N_AC1~1.JPE-dead-18497868>
Sat Feb 21 1998 00:47:24 3667 ..c -rwxrwxrwx 0
0
20026166
<part2.img-_N_AC1~1.JPE-dead-20026166>
Sat Feb 21 1998 00:47:28 3667 m.. -rwxrwxrwx 0
0
20026166
<part2.img-_N_AC1~1.JPE-dead-20026166>
Sat Feb 21 1998 00:47:32 3691 ..c -rwxrwxrwx 0
0
19037522
<part2.img-_N_AC1~1.JPE-dead-19037522>
3921 ..c -rwxrwxrwx 0
0
18497874 <part2.img_N_AC1~3.JPE-dead-18497874>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Sat Feb 21 1998 00:47:34 3691 m.. -rwxrwxrwx 0
0
19037522
<part2.img-_N_AC1~1.JPE-dead-19037522>
Sat Feb 21 1998 00:47:36 3921 m.. -rwxrwxrwx 0
0
18497874
<part2.img-_N_AC1~3.JPE-dead-18497874>
Sat Feb 21 1998 00:47:38 3971 ..c -rwxrwxrwx 0
0
20026172
<part2.img-_N_AC2~1.JPE-dead-20026172>
3339 ..c -rwxrwxrwx 0
0
20026169 <part2.img_N_AC1~2.JPE-dead-20026169>
Sat Feb 21 1998 00:47:40 3971 m.. -rwxrwxrwx 0
0
20026172
<part2.img-_N_AC2~1.JPE-dead-20026172>
3339 m.. -rwxrwxrwx 0
0
20026169 <part2.img_N_AC1~2.JPE-dead-20026169>
Sat Feb 21 1998 00:47:42 3641 ..c -rwxrwxrwx 0
0
20026175
<part2.img-_N_AC6~1.JPE-dead-20026175>
3633 ..c -rwxrwxrwx 0
0
18497877 <part2.img_N_AC5~1.JPE-dead-18497877>
3710 ..c -rwxrwxrwx 0
0
19037525 <part2.img_N_AC4~1.JPE-dead-19037525>
Sat Feb 21 1998 00:47:44 3641 m.. -rwxrwxrwx 0
0
20026175
<part2.img-_N_AC6~1.JPE-dead-20026175>
3710 m.. -rwxrwxrwx 0
0
19037525 <part2.img_N_AC4~1.JPE-dead-19037525>
3633 m.. -rwxrwxrwx 0
0
18497877 <part2.img_N_AC5~1.JPE-dead-18497877>
Sat Feb 21 1998 00:47:48 4216 ..c -rwxrwxrwx 0
0
18497880
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
<part2.img-_N_AC9~1.JPE-dead-18497880>
3658 ..c -rwxrwxrwx 0
0
19037528 <part2.img_N_AC8~1.JPE-dead-19037528>
Sat Feb 21 1998 00:47:52 4216 m.. -rwxrwxrwx 0
0
18497880
<part2.img-_N_AC9~1.JPE-dead-18497880>
3658 m.. -rwxrwxrwx 0
0
19037528 <part2.img_N_AC8~1.JPE-dead-19037528>
Sat Feb 21 1998 00:54:54 7552 ..c -rwxrwxrwx 0
0
20026161
<part2.img-_ALOGO.GIF-dead-20026161>
Sat Feb 21 1998 00:54:56 3143 ..c -rwxrwxrwx 0
0
20026178
<part2.img-_N_FA1~1.JPE-dead-20026178>
4491 ..c -rwxrwxrwx 0
0
20026181 <part2.img_N_FA1~2.JPE-dead-20026181>
Sat Feb 21 1998 00:54:58 3143 m.. -rwxrwxrwx 0
0
20026178
<part2.img-_N_FA1~1.JPE-dead-20026178>
Sat Feb 21 1998 00:55:00 4491 m.. -rwxrwxrwx 0
0
20026181
<part2.img-_N_FA1~2.JPE-dead-20026181>
Sat Feb 21 1998 00:55:12 2743 ..c -rwxrwxrwx 0
0
20026184
<part2.img-_N_FA1~3.JPE-dead-20026184>
5398 ..c -rwxrwxrwx 0
0
18497885 <part2.img_N_FA1~1.JPE-dead-18497885>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Sat Feb 21 1998 00:55:16 5398 m.. -rwxrwxrwx 0
0
18497885
<part2.img-_N_FA1~1.JPE-dead-18497885>
2743 m.. -rwxrwxrwx 0
0
20026184 <part2.img_N_FA1~3.JPE-dead-20026184>
Sat Feb 21 1998 00:55:20 3852 ..c -rwxrwxrwx 0
0
19037541
<part2.img-_N_FA3~1.JPE-dead-19037541>
Sat Feb 21 1998 00:55:22 4148 ..c -rwxrwxrwx 0
0
18497888
<part2.img-_N_FA4~1.JPE-dead-18497888>
3852 m.. -rwxrwxrwx 0
0
19037541 <part2.img_N_FA3~1.JPE-dead-19037541>
3060 ..c -rwxrwxrwx 0
0
20026187 <part2.img_N_FA5~1.JPE-dead-20026187>
Sat Feb 21 1998 00:55:24 4148 m.. -rwxrwxrwx 0
0
18497888
<part2.img-_N_FA4~1.JPE-dead-18497888>
3060 m.. -rwxrwxrwx 0
0
20026187 <part2.img_N_FA5~1.JPE-dead-20026187>
Sat Feb 21 1998 00:55:28 4744 ..c -rwxrwxrwx 0
0
18497891
<part2.img-_N_FA8~1.JPE-dead-18497891>
3848 ..c -rwxrwxrwx 0
0
20026190 <part2.img_N_FA9~1.JPE-dead-20026190>
Sat Feb 21 1998 00:55:30 2985 ..c -rwxrwxrwx 0
0
18497893
<part2.img-_ACK2(1).GIF-dead-18497893>
7552 m.. -rwxrwxrwx 0
0
20026161 <part2.img_ALOGO.GIF-dead-20026161>
Sat Feb 21 1998 00:55:32 4744 m.. -rwxrwxrwx 0
0
18497891
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
<part2.img-_N_FA8~1.JPE-dead-18497891>
3848 m.. -rwxrwxrwx 0
0
20026190 <part2.img_N_FA9~1.JPE-dead-20026190>
Sat Feb 21 1998 00:55:40 2985 m.. -rwxrwxrwx 0
0
18497893
<part2.img-_ACK2(1).GIF-dead-18497893>
Sat Feb 21 1998 00:56:04 3668 ..c -rwxrwxrwx 0
0
19037551
<part2.img-_N_BW1~1.JPE-dead-19037551>
Sat Feb 21 1998 00:56:06 3668 m.. -rwxrwxrwx 0
0
19037551
<part2.img-_N_BW1~1.JPE-dead-19037551>
Sat Feb 21 1998 00:56:10 3292 ..c -rwxrwxrwx 0
0
20026193
<part2.img-_N_BW1~1.JPE-dead-20026193>
3679 ..c -rwxrwxrwx 0
0
18497898 <part2.img_N_BW1~1.JPE-dead-18497898>
Sat Feb 21 1998 00:56:12 3679 m.. -rwxrwxrwx 0
0
18497898
<part2.img-_N_BW1~1.JPE-dead-18497898>
Sat Feb 21 1998 00:56:14 3292 m.. -rwxrwxrwx 0
0
20026193
<part2.img-_N_BW1~1.JPE-dead-20026193>
Sat Feb 21 1998 00:56:20 3139 ..c -rwxrwxrwx 0
0
18497901
<part2.img-_N_BW1~2.JPE-dead-18497901>
Sat Feb 21 1998 00:56:22 3139 m.. -rwxrwxrwx 0
0
18497901
<part2.img-_N_BW1~2.JPE-dead-18497901>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Sat Feb 21 1998 00:56:28 3710 ..c -rwxrwxrwx 0
0
20026196
<part2.img-_N_BW1~2.JPE-dead-20026196>
Sat Feb 21 1998 00:56:30 3710 m.. -rwxrwxrwx 0
0
20026196
<part2.img-_N_BW1~2.JPE-dead-20026196>
Sat Feb 21 1998 00:56:34 3335 ..c -rwxrwxrwx 0
0
18497904
<part2.img-_N_BW1~3.JPE-dead-18497904>
Sat Feb 21 1998 00:56:36 3335 m.. -rwxrwxrwx 0
0
18497904
<part2.img-_N_BW1~3.JPE-dead-18497904>
Sat Feb 21 1998 00:56:38 3678 ..c -rwxrwxrwx 0
0
20026199
<part2.img-_N_BW3~1.JPE-dead-20026199>
Sat Feb 21 1998 00:56:40 3678 m.. -rwxrwxrwx 0
0
20026199
<part2.img-_N_BW3~1.JPE-dead-20026199>
Sat Feb 21 1998 00:56:42 3130 ..c -rwxrwxrwx 0
0
18497910
<part2.img-_N_BW2~2.JPE-dead-18497910>
Sat Feb 21 1998 00:56:44 3130 m.. -rwxrwxrwx 0
0
18497910
<part2.img-_N_BW2~2.JPE-dead-18497910>
3554 ..c -rwxrwxrwx 0
0
19037565 <part2.img_N_BW5~1.JPE-dead-19037565>
Sat Feb 21 1998 00:56:46 3554 m.. -rwxrwxrwx 0
0
19037565
<part2.img-_N_BW5~1.JPE-dead-19037565>
2902 ..c -rwxrwxrwx 0
0
20026202 <part2.img_N_BW7~1.JPE-dead-20026202>
3054 ..c -rwxrwxrwx 0
0
18497913 <part2.img_N_BW6~1.JPE-dead-18497913>
Sat Feb 21 1998 00:56:48 3054 m.. -rwxrwxrwx 0
0
18497913
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
<part2.img-_N_BW6~1.JPE-dead-18497913>
3531 ..c -rwxrwxrwx 0
0
16120749 <part2.img_N_BW8~1.JPE-dead-16120749>
2902 m.. -rwxrwxrwx 0
0
20026202 <part2.img_N_BW7~1.JPE-dead-20026202>
Sat Feb 21 1998 00:56:50 3531 m.. -rwxrwxrwx 0
0
16120749
<part2.img-_N_BW8~1.JPE-dead-16120749>
2985 ..c -rwxrwxrwx 0
0
18497915 <part2.img_ACK2(2).GIF-dead-18497915>
Sat Feb 21 1998 00:56:56 2985 m.. -rwxrwxrwx 0
0
18497915
<part2.img-_ACK2(2).GIF-dead-18497915>
Sat Feb 21 1998 00:57:04 2803 ..c -rwxrwxrwx 0
0
20026204
<part2.img-_TRIP~1.HTM-dead-20026204>
Sat Feb 21 1998 00:57:06 2803 m.. -rwxrwxrwx 0
0
20026204
<part2.img-_TRIP~1.HTM-dead-20026204>
3441 ..c -rwxrwxrwx 0
0
20026206 <part2.img_ACK1(~2.JPE-dead-20026206>
Sat Feb 21 1998 00:57:08 3441 m.. -rwxrwxrwx 0
0
20026206
<part2.img-_ACK1(~2.JPE-dead-20026206>
Sat Feb 21 1998 00:57:10 3282 ..c -rwxrwxrwx 0
0
18497920
<part2.img-_N_ST1~1.JPE-dead-18497920>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Sat Feb 21 1998 00:57:12 3526 ..c -rwxrwxrwx 0
0
18497923
<part2.img-_N_ST1~2.JPE-dead-18497923>
3282 m.. -rwxrwxrwx 0
0
18497920 <part2.img_N_ST1~1.JPE-dead-18497920>
Sat Feb 21 1998 00:57:20 3341 ..c -rwxrwxrwx 0
0
20026209
<part2.img-_N_ST1~1.JPE-dead-20026209>
Sat Feb 21 1998 00:57:22 3341 m.. -rwxrwxrwx 0
0
20026209
<part2.img-_N_ST1~1.JPE-dead-20026209>
Sat Feb 21 1998 00:57:26 3526 m.. -rwxrwxrwx 0
0
18497923
<part2.img-_N_ST1~2.JPE-dead-18497923>
Sat Feb 21 1998 00:57:28 3426 ..c -rwxrwxrwx 0
0
18497926
<part2.img-_N_ST1~3.JPE-dead-18497926>
Sat Feb 21 1998 00:57:30 3426 m.. -rwxrwxrwx 0
0
18497926
<part2.img-_N_ST1~3.JPE-dead-18497926>
Sat Feb 21 1998 00:57:34 3392 ..c -rwxrwxrwx 0
0
20026212
<part2.img-_N_ST2~1.JPE-dead-20026212>
3504 ..c -rwxrwxrwx 0
0
20026215 <part2.img_N_ST1~2.JPE-dead-20026215>
Sat Feb 21 1998 00:57:36 3504 m.. -rwxrwxrwx 0
0
20026215
<part2.img-_N_ST1~2.JPE-dead-20026215>
3392 m.. -rwxrwxrwx 0
0
20026212 <part2.img_N_ST2~1.JPE-dead-20026212>
Sat Feb 21 1998 00:57:38 5077 ..c -rwxrwxrwx 0
0
20026218
<part2.img-_N_ST6~1.JPE-dead-20026218>
2841 ..c -rwxrwxrwx 0
0
18497929 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
_N_ST5~1.JPE-dead-18497929>
Sat Feb 21 1998 00:57:40 2841 m.. -rwxrwxrwx 0
0
18497929
<part2.img-_N_ST5~1.JPE-dead-18497929>
Sat Feb 21 1998 00:57:42 3186 ..c -rwxrwxrwx 0
0
19037579
<part2.img-_N_ST8~1.JPE-dead-19037579>
5077 m.. -rwxrwxrwx 0
0
20026218 <part2.img_N_ST6~1.JPE-dead-20026218>
Sat Feb 21 1998 00:57:44 2985 ..c -rwxrwxrwx 0
0
19037581
<part2.img-_ACK2(1).GIF-dead-19037581>
3186 m.. -rwxrwxrwx 0
0
19037579 <part2.img_N_ST8~1.JPE-dead-19037579>
3270 ..c -rwxrwxrwx 0
0
18497932 <part2.img_N_ST9~1.JPE-dead-18497932>
Sat Feb 21 1998 00:57:46 3270 m.. -rwxrwxrwx 0
0
18497932
<part2.img-_N_ST9~1.JPE-dead-18497932>
2985 m.. -rwxrwxrwx 0
0
19037581 <part2.img_ACK2(1).GIF-dead-19037581>
Sat Feb 21 1998 00:57:54 2842 ..c -rwxrwxrwx 0
0
18497934
<part2.img-_OYS~1.HTM-dead-18497934>
Sat Feb 21 1998 00:57:56 3441 ..c -rwxrwxrwx 0
0
19037583
<part2.img-_ACK1~1.JPE-dead-19037583>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
2842 m.. -rwxrwxrwx 0
0
18497934 <part2.img_OYS~1.HTM-dead-18497934>
Sat Feb 21 1998 00:57:58 3441 m.. -rwxrwxrwx 0
0
19037583
<part2.img-_ACK1~1.JPE-dead-19037583>
Sat Feb 21 1998 00:58:08 3506 ..c -rwxrwxrwx 0
0
19037590
<part2.img-_N_TO1~1.JPE-dead-19037590>
3201 ..c -rwxrwxrwx 0
0
20026221 <part2.img_N_TO1~1.JPE-dead-20026221>
3685 ..c -rwxrwxrwx 0
0
18497937 <part2.img_N_TO1~1.JPE-dead-18497937>
Sat Feb 21 1998 00:58:10 3506 m.. -rwxrwxrwx 0
0
19037590
<part2.img-_N_TO1~1.JPE-dead-19037590>
3201 m.. -rwxrwxrwx 0
0
20026221 <part2.img_N_TO1~1.JPE-dead-20026221>
3685 m.. -rwxrwxrwx 0
0
18497937 <part2.img_N_TO1~1.JPE-dead-18497937>
Sat Feb 21 1998 00:58:14 3238 ..c -rwxrwxrwx 0
0
18497940
<part2.img-_N_TO1~2.JPE-dead-18497940>
3133 ..c -rwxrwxrwx 0
0
19037593 <part2.img_N_TO1~2.JPE-dead-19037593>
Sat Feb 21 1998 00:58:16 3238 m.. -rwxrwxrwx 0
0
18497940
<part2.img-_N_TO1~2.JPE-dead-18497940>
3133 m.. -rwxrwxrwx 0
0
19037593 <part2.img_N_TO1~2.JPE-dead-19037593>
Sat Feb 21 1998 00:58:20 4213 ..c -rwxrwxrwx 0
0
19037596
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
<part2.img-_N_TO2~1.JPE-dead-19037596>
Sat Feb 21 1998 00:58:22 2977 ..c -rwxrwxrwx 0
0
18497943
<part2.img-_N_TO3~1.JPE-dead-18497943>
4074 ..c -rwxrwxrwx 0
0
20026224 <part2.img_N_TO4~1.JPE-dead-20026224>
Sat Feb 21 1998 00:58:24 4074 m.. -rwxrwxrwx 0
0
20026224
<part2.img-_N_TO4~1.JPE-dead-20026224>
2977 m.. -rwxrwxrwx 0
0
18497943 <part2.img_N_TO3~1.JPE-dead-18497943>
Sat Feb 21 1998 00:58:26 4213 m.. -rwxrwxrwx 0
0
19037596
<part2.img-_N_TO2~1.JPE-dead-19037596>
Sat Feb 21 1998 00:58:28 3600 ..c -rwxrwxrwx 0
0
20026227
<part2.img-_N_TO8~1.JPE-dead-20026227>
3939 ..c -rwxrwxrwx 0
0
18497946 <part2.img_N_TO7~1.JPE-dead-18497946>
3359 ..c -rwxrwxrwx 0
0
19037599 <part2.img_N_TO6~1.JPE-dead-19037599>
Sat Feb 21 1998 00:58:30 3359 m.. -rwxrwxrwx 0
0
19037599
<part2.img-_N_TO6~1.JPE-dead-19037599>
3600 m.. -rwxrwxrwx 0
0
20026227 <part2.img_N_TO8~1.JPE-dead-20026227>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Sat Feb 21 1998 00:58:32 3939 m.. -rwxrwxrwx 0
0
18497946
<part2.img-_N_TO7~1.JPE-dead-18497946>
Sat Feb 21 1998 00:58:34 2985 ..c -rwxrwxrwx 0
0
20026229
<part2.img-_ACK2.GIF-dead-20026229>
Sat Feb 21 1998 00:58:36 2985 m.. -rwxrwxrwx 0
0
20026229
<part2.img-_ACK2.GIF-dead-20026229>
Sat Feb 21 1998 08:23:04 2962 ..c -rwxrwxrwx 0
0
19037604
<part2.img-_P_PRE~1.GIF-dead-19037604>
Sat Feb 21 1998 08:23:06 2962 m.. -rwxrwxrwx 0
0
19037604
<part2.img-_P_PRE~1.GIF-dead-19037604>
Sat Feb 21 1998 08:23:10 10206 ..c -rwxrwxrwx 0
0
19037607
<part2.img-__S__S~1.94Y-dead-19037607>
Sat Feb 21 1998 08:23:12 10206 m.. -rwxrwxrwx 0
0
19037607
<part2.img-__S__S~1.94Y-dead-19037607>
Sat Feb 21 1998 08:23:40
196 ..c -rwxrwxrwx 0
0
20026233
<part2.img-_6.GIF-dead-20026233>
Sat Feb 21 1998 08:23:42
196 m.. -rwxrwxrwx 0
0
20026233
<part2.img-_6.GIF-dead-20026233>
Sat Feb 21 1998 08:24:40
43 ..c -rwxrwxrwx 0
0
20026237
<part2.img-_PACE.GIF-dead-20026237>
3170 ..c -rwxrwxrwx 0
0
18497961 <part2.img_ALTGRAF.GIF-dead-18497961>
Sat Feb 21 1998 08:24:42 3170 m.. -rwxrwxrwx 0
0
18497961
<part2.img-_ALTGRAF.GIF-dead-18497961>
43 m.. -rwxrwxrwx 0
0
20026237 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5 06E4 A169 4E46
_PACE.GIF-dead-20026237>
Sat Feb 21 1998 08:24:50 5035 ..c -rwxrwxrwx 0
0
20026240
<part2.img-_EEP_D~1.GIF-dead-20026240>
Sat Feb 21 1998 08:24:54 5035 m.. -rwxrwxrwx 0
0
20026240
<part2.img-_EEP_D~1.GIF-dead-20026240>
Sat Feb 21 1998 08:25:14 7670 ..c -rwxrwxrwx 0
0
20026242
<part2.img-_ATEGO~1.HTM-dead-20026242>
Sat Feb 21 1998 08:25:16 7670 m.. -rwxrwxrwx 0
0
20026242
<part2.img-_ATEGO~1.HTM-dead-20026242>
153 ..c -rwxrwxrwx 0
0
20026244 <part2.img_ETFIND.GIF-dead-20026244>
Sat Feb 21 1998 08:25:18
153 m.. -rwxrwxrwx 0
0
20026244
<part2.img-_ETFIND.GIF-dead-20026244>
Sat Feb 21 1998 08:25:42 5038 ..c -rwxrwxrwx 0
0
19037606
<part2.img-_0PERC~1.GIF-dead-19037606>
6958 ..c -rwxrwxrwx 0
0
19037601 <part2.img_BA5KK.GIF-dead-19037601>
Sat Feb 21 1998 08:25:46 6958 m.. -rwxrwxrwx 0
0
19037601
<part2.img-_BA5KK.GIF-dead-19037601>
Sat Feb 21 1998 08:25:48 5038 m.. -rwxrwxrwx 0
0
19037606
<part2.img-_0PERC~1.GIF-dead-19037606>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Sat Feb 21 1998 08:26:48 12891 ..c -rwxrwxrwx 0
0
19037611
<part2.img-_PT1.GIF-dead-19037611>
Sat Feb 21 1998 08:26:52 12891 m.. -rwxrwxrwx 0
0
19037611
<part2.img-_PT1.GIF-dead-19037611>
Sat Feb 21 1998 08:27:48 12188 ..c -rwxrwxrwx 0
0
19037613
<part2.img-_EBMAP~1.HTM-dead-19037613>
Sat Feb 21 1998 08:27:50 12188 m.. -rwxrwxrwx 0
0
19037613
<part2.img-_EBMAP~1.HTM-dead-19037613>
Sat Feb 21 1998 08:28:40 7615 ..c -rwxrwxrwx 0
0
20026246
<part2.img-_T(2)~2.HTM-dead-20026246>
Sat Feb 21 1998 08:28:42 7615 m.. -rwxrwxrwx 0
0
20026246
<part2.img-_T(2)~2.HTM-dead-20026246>
Sat Feb 21 1998 08:28:54 15255 ..c -rwxrwxrwx 0
0
16120795
<part2.img-_T(1)~2.HTM-dead-16120795>
Sat Feb 21 1998 08:28:58 10820 ..c -rwxrwxrwx 0
0
16120797
<part2.img-_IF.GIF-dead-16120797>
Sat Feb 21 1998 08:29:00 15255 m.. -rwxrwxrwx 0
0
16120795
<part2.img-_T(1)~2.HTM-dead-16120795>
Sat Feb 21 1998 08:29:02 10820 m.. -rwxrwxrwx 0
0
16120797
<part2.img-_IF.GIF-dead-16120797>
Sat Feb 21 1998 08:33:42 11173 ..c -rwxrwxrwx 0
0
20026248
<part2.img-_1162~1.HTM-dead-20026248>
Sat Feb 21 1998 08:33:44 11173 m.. -rwxrwxrwx 0
0
20026248
<part2.img-_1162~1.HTM-dead-20026248>
Wed Feb 25 1998 09:53:56 25106 m.. -/-rwxrwxrwx 0
0
3345956
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
c:\/WINDOWS/SYSTEM/VGARTD.VXD
Thu Feb 26 1998 02:24:22 848384 m.c -/-rwxrwxrwx 0
0
342837
c:\/WINDOWS/SYSTEM/IR41_32.AX
Mon Mar 02 1998 20:50:48
734 ..c -rwxrwxrwx 0
0
20026253
<part2.img-_RAMES~1.HTM-dead-20026253>
Mon Mar 02 1998 20:50:50 1716 ..c -rwxrwxrwx 0
0
19037623
<part2.img-_AV_NJ~1.HTM-dead-19037623>
734 m.. -rwxrwxrwx 0
0
20026253 <part2.img_RAMES~1.HTM-dead-20026253>
Mon Mar 02 1998 20:50:52 1716 m.. -rwxrwxrwx 0
0
19037623
<part2.img-_AV_NJ~1.HTM-dead-19037623>
Mon Mar 02 1998 20:51:06 5837 ..c -rwxrwxrwx 0
0
20026256
<part2.img-_IRCLE~1.JPE-dead-20026256>
Mon Mar 02 1998 20:51:08 5837 m.. -rwxrwxrwx 0
0
20026256
<part2.img-_IRCLE~1.JPE-dead-20026256>
Mon Mar 02 1998 20:51:16
358 ..c -rwxrwxrwx 0
0
20026258
<part2.img-_M2.GIF-dead-20026258>
Mon Mar 02 1998 20:51:24
695 ..c -rwxrwxrwx 0
0
20026263
<part2.img-_MRIGHT.GIF-dead-20026263>
Mon Mar 02 1998 20:51:26
695 m.. -rwxrwxrwx 0
0
20026263
<part2.img-_MRIGHT.GIF-dead-20026263>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
358 m.. -rwxrwxrwx 0
0
20026258 <part2.img_M2.GIF-dead-20026258>
Mon Mar 02 1998 20:51:28
333 ..c -rwxrwxrwx 0
0
19037633
<part2.img-_M4.GIF-dead-19037633>
Mon Mar 02 1998 20:51:32
333 m.. -rwxrwxrwx 0
0
19037633
<part2.img-_M4.GIF-dead-19037633>
Mon Mar 02 1998 20:51:36 3995 ..c -rwxrwxrwx 0
0
19037636
<part2.img-_IRCLE~2.JPE-dead-19037636>
Mon Mar 02 1998 20:51:38 3995 m.. -rwxrwxrwx 0
0
19037636
<part2.img-_IRCLE~2.JPE-dead-19037636>
389 ..c -rwxrwxrwx 0
0
20026265 <part2.img_M6.GIF-dead-20026265>
Mon Mar 02 1998 20:51:40
389 m.. -rwxrwxrwx 0
0
20026265
<part2.img-_M6.GIF-dead-20026265>
693 ..c -rwxrwxrwx 0
0
19037639 <part2.img_RACLE~1.GIF-dead-19037639>
Mon Mar 02 1998 20:51:42
693 m.. -rwxrwxrwx 0
0
19037639
<part2.img-_RACLE~1.GIF-dead-19037639>
Mon Mar 02 1998 20:51:48
700 ..c -rwxrwxrwx 0
0
20026268
<part2.img-_RACLE~1.GIF-dead-20026268>
Mon Mar 02 1998 20:51:50
360 ..c -rwxrwxrwx 0
0
16120822
<part2.img-_URVED~1.GIF-dead-16120822>
700 m.. -rwxrwxrwx 0
0
20026268 <part2.img_RACLE~1.GIF-dead-20026268>
Mon Mar 02 1998 20:51:52
360 m.. -rwxrwxrwx 0
0
16120822
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
<part2.img-_URVED~1.GIF-dead-16120822>
Mon Mar 02 1998 20:51:54 2857 ..c -rwxrwxrwx 0
0
20026270
<part2.img-_NN.GIF-dead-20026270>
Mon Mar 02 1998 20:51:56 2857 m.. -rwxrwxrwx 0
0
20026270
<part2.img-_NN.GIF-dead-20026270>
Mon Mar 02 1998 20:52:02 9916 ..c -rwxrwxrwx 0
0
20026273
<part2.img-_NDEX_~2.HTM-dead-20026273>
Mon Mar 02 1998 20:52:08
60 ..c -rwxrwxrwx 0
0
20026275
<part2.img-_RACER.GIF-dead-20026275>
3244 ..c -rwxrwxrwx 0
0
19037642 <part2.img_RODUC~2.GIF-dead-19037642>
Mon Mar 02 1998 20:52:10 3244 m.. -rwxrwxrwx 0
0
19037642
<part2.img-_RODUC~2.GIF-dead-19037642>
4089 ..c -rwxrwxrwx 0
0
19037645 <part2.img_PPLIC~1.GIF-dead-19037645>
60 m.. -rwxrwxrwx 0
0
20026275 <part2.img_RACER.GIF-dead-20026275>
Mon Mar 02 1998 20:52:12 4089 m.. -rwxrwxrwx 0
0
19037645
<part2.img-_PPLIC~1.GIF-dead-19037645>
Mon Mar 02 1998 20:52:28 9916 m.. -rwxrwxrwx 0
0
20026273
<part2.img-_NDEX_~2.HTM-dead-20026273>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Mon Mar 02 1998 20:52:34 1783 ..c -rwxrwxrwx 0
0
20026277
<part2.img-_ERVER.GIF-dead-20026277>
Mon Mar 02 1998 20:52:38 1783 m.. -rwxrwxrwx 0
0
20026277
<part2.img-_ERVER.GIF-dead-20026277>
Mon Mar 02 1998 20:54:06 2467 ..c -rwxrwxrwx 0
0
19037650
<part2.img-_M2SUB.GIF-dead-19037650>
Mon Mar 02 1998 20:54:08
84 ..c -rwxrwxrwx 0
0
20026282
<part2.img-_OLUTI~1.HTM-dead-20026282>
Mon Mar 02 1998 20:54:10
84 m.. -rwxrwxrwx 0
0
20026282
<part2.img-_OLUTI~1.HTM-dead-20026282>
Mon Mar 02 1998 20:54:18 2467 m.. -rwxrwxrwx 0
0
19037650
<part2.img-_M2SUB.GIF-dead-19037650>
Sat Mar 07 1998 23:00:00 10906 .a. -rwxrwxrwx 0
0
20026306
<part2.img-_EFT_I~2.HTM-dead-20026306>
6704 .a. -rwxrwxrwx 0
0
30191120 <part2.img_08_22~1.GIF-dead-30191120>
Sun Mar 08 1998 16:24:54 6057 ..c -rwxrwxrwx 0
0
19037628
<part2.img-_CAA~1.HTM-dead-19037628>
Sun Mar 08 1998 16:24:56 6057 m.. -rwxrwxrwx 0
0
19037628
<part2.img-_CAA~1.HTM-dead-19037628>
Sun Mar 08 1998 16:25:32 9065 ..c -rwxrwxrwx 0
0
20026284
<part2.img-_ILE.GIF-dead-20026284>
Sun Mar 08 1998 16:25:40 9065 m.. -rwxrwxrwx 0
0
20026284
<part2.img-_ILE.GIF-dead-20026284>
Sun Mar 08 1998 16:26:14 18546 ..c -rwxrwxrwx 0
0
19037653
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
<part2.img-_ATESS~1.GIF-dead-19037653>
Sun Mar 08 1998 16:26:42 18546 m.. -rwxrwxrwx 0
0
19037653
<part2.img-_ATESS~1.GIF-dead-19037653>
Sun Mar 08 1998 16:29:48 3290 ..c -rwxrwxrwx 0
0
19037663
<part2.img-_ASHIN~1.HTM-dead-19037663>
Sun Mar 08 1998 16:29:50 3290 m.. -rwxrwxrwx 0
0
19037663
<part2.img-_ASHIN~1.HTM-dead-19037663>
Sun Mar 08 1998 16:30:46 3918 ..c -rwxrwxrwx 0
0
19037667
<part2.img-_NTERT~1.HTM-dead-19037667>
Sun Mar 08 1998 16:30:48 3918 m.. -rwxrwxrwx 0
0
19037667
<part2.img-_NTERT~1.HTM-dead-19037667>
Sun Mar 08 1998 16:31:36 3609 ..c -rwxrwxrwx 0
0
18497642
<part2.img-_C~1.HTM-dead-18497642>
Sun Mar 08 1998 16:31:38 3609 m.. -rwxrwxrwx 0
0
18497642
<part2.img-_C~1.HTM-dead-18497642>
Sun Mar 08 1998 16:31:42
442 ..c -rwxrwxrwx 0
0
19037672
<part2.img-_EARCH~2.GIF-dead-19037672>
Sun Mar 08 1998 16:31:44
442 m.. -rwxrwxrwx 0
0
19037672
<part2.img-_EARCH~2.GIF-dead-19037672>
Sun Mar 08 1998 16:31:46
244 ..c -rwxrwxrwx 0
0
20026289
<part2.img-_CICEN~1.HTM-dead-20026289>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Sun Mar 08 1998 16:31:48
244 m.. -rwxrwxrwx 0
0
20026289
<part2.img-_CICEN~1.HTM-dead-20026289>
Sun Mar 08 1998 16:32:08
619 ..c -rwxrwxrwx 0
0
20026291
<part2.img-_OME(2~2.HTM-dead-20026291>
Sun Mar 08 1998 16:32:10
619 m.. -rwxrwxrwx 0
0
20026291
<part2.img-_OME(2~2.HTM-dead-20026291>
Sun Mar 08 1998 16:33:06 2639 ..c -rwxrwxrwx 0
0
19037674
<part2.img-_PCOMI~1.HTM-dead-19037674>
Sun Mar 08 1998 16:33:08 2639 m.. -rwxrwxrwx 0
0
19037674
<part2.img-_PCOMI~1.HTM-dead-19037674>
Sun Mar 08 1998 16:33:10 1368 ..c -rwxrwxrwx 0
0
20026293
<part2.img-_.GIF-dead-20026293>
Sun Mar 08 1998 16:33:12 1368 m.. -rwxrwxrwx 0
0
20026293
<part2.img-_.GIF-dead-20026293>
3562 ..c -rwxrwxrwx 0
0
19037676 <part2.img_P.GIF-dead-19037676>
4967 ..c -rwxrwxrwx 0
0
19037678 <part2.img_LDG.GIF-dead-19037678>
Sun Mar 08 1998 16:33:14 1105 ..c -rwxrwxrwx 0
0
19037680
<part2.img-_.GIF-dead-19037680>
4967 m.. -rwxrwxrwx 0
0
19037678 <part2.img_LDG.GIF-dead-19037678>
3562 m.. -rwxrwxrwx 0
0
19037676 <part2.img_P.GIF-dead-19037676>
865 ..c -rwxrwxrwx 0
0
20026295 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5 06E4 A169 4E46
_OGO_C~1.GIF-dead-20026295>
Sun Mar 08 1998 16:33:16 1597 ..c -rwxrwxrwx 0
0
19037682
<part2.img-_ULLDOG.GIF-dead-19037682>
865 m.. -rwxrwxrwx 0
0
20026295 <part2.img_OGO_C~1.GIF-dead-20026295>
1105 m.. -rwxrwxrwx 0
0
19037680 <part2.img-_.GIFdead-19037680>
Sun Mar 08 1998 16:33:18 1597 m.. -rwxrwxrwx 0
0
19037682
<part2.img-_ULLDOG.GIF-dead-19037682>
Sun Mar 08 1998 16:33:24
35 ..c -rwxrwxrwx 0
0
19037684
<part2.img-_HITE.GIF-dead-19037684>
Sun Mar 08 1998 16:33:26
35 m.. -rwxrwxrwx 0
0
19037684
<part2.img-_HITE.GIF-dead-19037684>
Sun Mar 08 1998 19:25:22 15738 ..c -rwxrwxrwx 0
0
19037687
<part2.img-_SPN_S~1.HTM-dead-19037687>
Sun Mar 08 1998 19:25:26 15738 m.. -rwxrwxrwx 0
0
19037687
<part2.img-_SPN_S~1.HTM-dead-19037687>
Sun Mar 08 1998 19:25:42
43 ..c -rwxrwxrwx 0
0
19037693
<part2.img-_8_FOO~2.GIF-dead-19037693>
Sun Mar 08 1998 19:25:44
43 m.. -rwxrwxrwx 0
0
19037693
<part2.img-_8_FOO~2.GIF-dead-19037693>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Sun Mar 08 1998 19:26:40 4869 ..c -rwxrwxrwx 0
0
20026303
<part2.img-_HAMPW~1.GIF-dead-20026303>
Sun Mar 08 1998 19:26:46 4869 m.. -rwxrwxrwx 0
0
20026303
<part2.img-_HAMPW~1.GIF-dead-20026303>
Sun Mar 08 1998 19:29:24 2867 ..c -rwxrwxrwx 0
0
19037696
<part2.img-_EARCH~5.HTM-dead-19037696>
Sun Mar 08 1998 19:29:26 2867 m.. -rwxrwxrwx 0
0
19037696
<part2.img-_EARCH~5.HTM-dead-19037696>
Sun Mar 08 1998 19:29:50 10906 ..c -rwxrwxrwx 0
0
20026306
<part2.img-_EFT_I~2.HTM-dead-20026306>
Sun Mar 08 1998 19:29:54 10906 m.. -rwxrwxrwx 0
0
20026306
<part2.img-_EFT_I~2.HTM-dead-20026306>
Sun Mar 08 1998 19:30:14 26542 ..c -rwxrwxrwx 0
0
29723139
<part2.img-_EARCH~6.HTM-dead-29723139>
Sun Mar 08 1998 19:30:16 2058 ..c -rwxrwxrwx 0
0
29723142
<part2.img-_EARCH~3.GIF-dead-29723142>
Sun Mar 08 1998 19:30:18 2058 m.. -rwxrwxrwx 0
0
29723142
<part2.img-_EARCH~3.GIF-dead-29723142>
26542 m.. -rwxrwxrwx 0
0
29723139 <part2.img_EARCH~6.HTM-dead-29723139>
Sun Mar 08 1998 19:30:28 3083 ..c -rwxrwxrwx 0
0
18498016
<part2.img-_UMPER01.GIF-dead-18498016>
Sun Mar 08 1998 19:30:30 2148 ..c -rwxrwxrwx 0
0
29723144
<part2.img-_OPULAR.GIF-dead-29723144>
Sun Mar 08 1998 19:30:32 2148 m.. -rwxrwxrwx 0
0
29723144
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
<part2.img-_OPULAR.GIF-dead-29723144>
Sun Mar 08 1998 19:30:34 3083 m.. -rwxrwxrwx 0
0
18498016
<part2.img-_UMPER01.GIF-dead-18498016>
1655 ..c -rwxrwxrwx 0
0
29723146 <part2.img_EOPLE.GIF-dead-29723146>
Sun Mar 08 1998 19:30:40 1655 m.. -rwxrwxrwx 0
0
29723146
<part2.img-_EOPLE.GIF-dead-29723146>
Sun Mar 08 1998 19:31:06
49 ..c -rwxrwxrwx 0
0
29723153
<part2.img-_AGE1-~1.GIF-dead-29723153>
Sun Mar 08 1998 19:31:08
49 m.. -rwxrwxrwx 0
0
29723153
<part2.img-_AGE1-~1.GIF-dead-29723153>
Sun Mar 08 1998 19:31:18 1655 ..c -rwxrwxrwx 0
0
29723155
<part2.img-_EOPLE~1.GIF-dead-29723155>
Sun Mar 08 1998 19:31:26 1655 m.. -rwxrwxrwx 0
0
29723155
<part2.img-_EOPLE~1.GIF-dead-29723155>
Sun Mar 08 1998 19:31:50
49 ..c -rwxrwxrwx 0
0
29723159
<part2.img-_AGE5-~1.GIF-dead-29723159>
Sun Mar 08 1998 19:31:52
49 m.. -rwxrwxrwx 0
0
29723159
<part2.img-_AGE5-~1.GIF-dead-29723159>
Sun Mar 08 1998 19:32:00
43 ..c -rwxrwxrwx 0
0
20026311
<part2.img-_LEAR.GIF-dead-20026311>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Sun Mar 08 1998 19:32:02
43 m.. -rwxrwxrwx 0
0
20026311
<part2.img-_LEAR.GIF-dead-20026311>
Sun Mar 08 1998 19:32:08
513 ..c -rwxrwxrwx 0
0
20026313
<part2.img-_TRIPE1.GIF-dead-20026313>
Sun Mar 08 1998 19:32:10
513 m.. -rwxrwxrwx 0
0
20026313
<part2.img-_TRIPE1.GIF-dead-20026313>
2599 ..c -rwxrwxrwx 0
0
20026315 <part2.img_OP_WT~1.JPE-dead-20026315>
Sun Mar 08 1998 19:32:12 2599 m.. -rwxrwxrwx 0
0
20026315
<part2.img-_OP_WT~1.JPE-dead-20026315>
Sun Mar 08 1998 19:32:22 5077 ..c -rwxrwxrwx 0
0
20026317
<part2.img-_ERFNA~1.HTM-dead-20026317>
Sun Mar 08 1998 19:32:32
153 ..c -rwxrwxrwx 0
0
20026321
<part2.img-_UTTON.GIF-dead-20026321>
Sun Mar 08 1998 19:32:34
153 m.. -rwxrwxrwx 0
0
20026321
<part2.img-_UTTON.GIF-dead-20026321>
Sun Mar 08 1998 19:32:36 5077 m.. -rwxrwxrwx 0
0
20026317
<part2.img-_ERFNA~1.HTM-dead-20026317>
Sun Mar 08 1998 19:33:04 1782 ..c -rwxrwxrwx 0
0
29723163
<part2.img-_CLOGON.GIF-dead-29723163>
Sun Mar 08 1998 19:33:06 1782 m.. -rwxrwxrwx 0
0
29723163
<part2.img-_CLOGON.GIF-dead-29723163>
Sun Mar 08 1998 19:51:04 6046 ..c -rwxrwxrwx 0
0
20026323
<part2.img-_OURNB~1.HTM-dead-20026323>
Sun Mar 08 1998 19:51:06 6046 m.. -rwxrwxrwx 0
0
20026323
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
<part2.img-_OURNB~1.HTM-dead-20026323>
Sun Mar 08 1998 19:51:38 4642 ..c -rwxrwxrwx 0
0
18498029
<part2.img-_OWERR~1.HTM-dead-18498029>
Sun Mar 08 1998 19:51:40 4642 m.. -rwxrwxrwx 0
0
18498029
<part2.img-_OWERR~1.HTM-dead-18498029>
Sun Mar 08 1998 19:52:06 2675 ..c -rwxrwxrwx 0
0
29723185
<part2.img-_HTJ_I~1.GIF-dead-29723185>
Sun Mar 08 1998 19:52:08 2768 ..c -rwxrwxrwx 0
0
18498049
<part2.img-_PTA7J~1.GIF-dead-18498049>
1295 ..c -rwxrwxrwx 0
0
29723188 <part2.img_RENA_~1.GIF-dead-29723188>
2675 m.. -rwxrwxrwx 0
0
29723185 <part2.img_HTJ_I~1.GIF-dead-29723185>
Sun Mar 08 1998 19:52:10 1295 m.. -rwxrwxrwx 0
0
29723188
<part2.img-_RENA_~1.GIF-dead-29723188>
2768 m.. -rwxrwxrwx 0
0
18498049 <part2.img_PTA7J~1.GIF-dead-18498049>
Sun Mar 08 1998 19:52:18
186 ..c -rwxrwxrwx 0
0
20026325
<part2.img-_ONTHLY.GIF-dead-20026325>
Sun Mar 08 1998 19:52:20
186 m.. -rwxrwxrwx 0
0
20026325
<part2.img-_ONTHLY.GIF-dead-20026325>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Sun Mar 08 1998 19:52:28 6922 ..c -rwxrwxrwx 0
0
29723197
<part2.img-_COREP~1.CAB-dead-29723197>
Sun Mar 08 1998 19:52:30 6922 m.. -rwxrwxrwx 0
0
29723197
<part2.img-_COREP~1.CAB-dead-29723197>
Sun Mar 08 1998 19:52:36
526 ..c -rwxrwxrwx 0
0
30191116
<part2.img-_EST~1.HTM-dead-30191116>
Sun Mar 08 1998 19:52:38
526 m.. -rwxrwxrwx 0
0
30191116
<part2.img-_EST~1.HTM-dead-30191116>
2121 ..c -rwxrwxrwx 0
0
29723165 <part2.img_URRENT.DAT-dead-29723165>
Sun Mar 08 1998 19:52:40 2121 m.. -rwxrwxrwx 0
0
29723165
<part2.img-_URRENT.DAT-dead-29723165>
Sun Mar 08 1998 19:52:42 6704 ..c -rwxrwxrwx 0
0
30191120
<part2.img-_08_22~1.GIF-dead-30191120>
Sun Mar 08 1998 19:52:44 6704 m.. -rwxrwxrwx 0
0
30191120
<part2.img-_08_22~1.GIF-dead-30191120>
Tue Mar 10 1998 07:52:36 183928 m.c -/-rwxrwxrwx 0
0
3905046
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/TERRAIN/Wave1.wav
(WAVE1.WAV)
Fri Mar 13 1998 16:21:04 51848 m.c -/-rwxrwxrwx 0
0
766012
c:\/WINDOWS/FONTS/LCALLIG.TTF
Fri Mar 13 1998 23:00:00
43 .a. -rwxrwxrwx 0
0
19037693
<part2.img-_8_FOO~2.GIF-dead-19037693>
15738 .a. -rwxrwxrwx 0
0
19037687 <part2.img_SPN_S~1.HTM-dead-19037687>
Key Mar
fingerprint
= AF19
FA27 2F94
998D
FDB5 DE3D0 F8B5006E4 A169
4E46
Sat
14 1998
09:07:48
3685
..c -rwxrwxrwx
29723199
<part2.img-_URKER~2.HTM-dead-29723199>
Sat Mar 14 1998 09:07:52 3685 m.. -rwxrwxrwx 0
0
29723199
<part2.img-_URKER~2.HTM-dead-29723199>
Sat Mar 14 1998 09:08:10
965 ..c -rwxrwxrwx 0
0
16569578
<part2.img-_96.GIF-dead-16569578>
Sat Mar 14 1998 09:08:12
965 m.. -rwxrwxrwx 0
0
16569578
<part2.img-_96.GIF-dead-16569578>
Sat Mar 14 1998 09:09:20
969 ..c -rwxrwxrwx 0
0
20026327
<part2.img-_71.GIF-dead-20026327>
Sat Mar 14 1998 09:09:22
969 m.. -rwxrwxrwx 0
0
20026327
<part2.img-_71.GIF-dead-20026327>
Sat Mar 14 1998 09:13:30 1345 ..c -rwxrwxrwx 0
0
19037692
<part2.img-_LL(1).TXT-dead-19037692>
Sat Mar 14 1998 09:13:32 1345 m.. -rwxrwxrwx 0
0
19037692
<part2.img-_LL(1).TXT-dead-19037692>
Thu Mar 19 1998 20:48:42
357 ..c -rwxrwxrwx 0
0
30191133
<part2.img-_M.GIF-dead-30191133>
2032 ..c -rwxrwxrwx 0
0
20026341 <part2.img_ROMO1.GIF-dead-20026341>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Thu Mar 19 1998 20:48:44 10483 ..c -rwxrwxrwx 0
0
29723217
<part2.img-_EARCH~7.HTM-dead-29723217>
357 m.. -rwxrwxrwx 0
0
30191133 <part2.img_M.GIF-dead-30191133>
2032 m.. -rwxrwxrwx 0
0
20026341 <part2.img_ROMO1.GIF-dead-20026341>
Thu Mar 19 1998 20:48:46 10483 m.. -rwxrwxrwx 0
0
29723217
<part2.img-_EARCH~7.HTM-dead-29723217>
Thu Mar 19 1998 20:49:18 6791 ..c -rwxrwxrwx 0
0
29723219
<part2.img-_AXES(~2.HTM-dead-29723219>
Thu Mar 19 1998 20:49:22 6791 m.. -rwxrwxrwx 0
0
29723219
<part2.img-_AXES(~2.HTM-dead-29723219>
Thu Mar 19 1998 20:50:04 7243 ..c -rwxrwxrwx 0
0
20026352
<part2.img-_ORMS_~1.HTM-dead-20026352>
Thu Mar 19 1998 20:50:06 7243 m.. -rwxrwxrwx 0
0
20026352
<part2.img-_ORMS_~1.HTM-dead-20026352>
Thu Mar 19 1998 20:50:10
104 ..c -rwxrwxrwx 0
0
29723223
<part2.img-_RULE.GIF-dead-29723223>
Thu Mar 19 1998 20:50:12
114 ..c -rwxrwxrwx 0
0
20026354
<part2.img-_RULEB~1.GIF-dead-20026354>
Thu Mar 19 1998 20:50:14
104 m.. -rwxrwxrwx 0
0
29723223
<part2.img-_RULE.GIF-dead-29723223>
Thu Mar 19 1998 20:50:16
114 m.. -rwxrwxrwx 0
0
20026354
<part2.img-_RULEB~1.GIF-dead-20026354>
Thu Mar 19 1998 20:50:56 3545 ..c -rwxrwxrwx 0
0
29723227
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
<part2.img-_P.GIF-dead-29723227>
Thu Mar 19 1998 20:51:00 3545 m.. -rwxrwxrwx 0
0
29723227
<part2.img-_P.GIF-dead-29723227>
2521 ..c -rwxrwxrwx 0
0
29723229 <part2.img_HP.GIF-dead-29723229>
Thu Mar 19 1998 20:51:02 4103 ..c -rwxrwxrwx 0
0
20026356
<part2.img-_N-OFF.GIF-dead-20026356>
2521 m.. -rwxrwxrwx 0
0
29723229 <part2.img_HP.GIF-dead-29723229>
Thu Mar 19 1998 20:51:04 4103 m.. -rwxrwxrwx 0
0
20026356
<part2.img-_N-OFF.GIF-dead-20026356>
Thu Mar 19 1998 20:51:06 3082 ..c -rwxrwxrwx 0
0
29723231
<part2.img-_H.GIF-dead-29723231>
Thu Mar 19 1998 20:51:08 3082 m.. -rwxrwxrwx 0
0
29723231
<part2.img-_H.GIF-dead-29723231>
Thu Mar 19 1998 20:53:16 2061 ..c -rwxrwxrwx 0
0
29723234
<part2.img-_EBSYS~1.HTM-dead-29723234>
Thu Mar 19 1998 20:53:18 3545 ..c -rwxrwxrwx 0
0
29723236
<part2.img-_P(1).GIF-dead-29723236>
3009 ..c -rwxrwxrwx 0
0
20026358 <part2.img_N.GIF-dead-20026358>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
2061 m.. -rwxrwxrwx 0
0
29723234 <part2.img_EBSYS~1.HTM-dead-29723234>
Thu Mar 19 1998 20:53:22 1952 ..c -rwxrwxrwx 0
0
29723238
<part2.img-_T.GIF-dead-29723238>
Thu Mar 19 1998 20:53:24 2521 ..c -rwxrwxrwx 0
0
29723240
<part2.img-_HP(1).GIF-dead-29723240>
1952 m.. -rwxrwxrwx 0
0
29723238 <part2.img_T.GIF-dead-29723238>
3009 m.. -rwxrwxrwx 0
0
20026358 <part2.img_N.GIF-dead-20026358>
Thu Mar 19 1998 20:53:26 3545 m.. -rwxrwxrwx 0
0
29723236
<part2.img-_P(1).GIF-dead-29723236>
2521 m.. -rwxrwxrwx 0
0
29723240 <part2.img_HP(1).GIF-dead-29723240>
Thu Mar 19 1998 20:55:36 3009 ..c -rwxrwxrwx 0
0
20026364
<part2.img-_N(1).GIF-dead-20026364>
Thu Mar 19 1998 20:55:40 3009 m.. -rwxrwxrwx 0
0
20026364
<part2.img-_N(1).GIF-dead-20026364>
Thu Mar 19 1998 20:56:20 1098 ..c -rwxrwxrwx 0
0
30191150
<part2.img-_OMEBAR.GIF-dead-30191150>
57 ..c -rwxrwxrwx 0
0
20026367 <part2.img_REYBU~1.GIF-dead-20026367>
Thu Mar 19 1998 20:56:22 1098 m.. -rwxrwxrwx 0
0
30191150
<part2.img-_OMEBAR.GIF-dead-30191150>
57 m.. -rwxrwxrwx 0
0
20026367 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5 06E4 A169 4E46
_REYBU~1.GIF-dead-20026367>
Thu Mar 19 1998 20:56:26
712 ..c -rwxrwxrwx 0
0
29723242
<part2.img-_ETACRO.GIF-dead-29723242>
2469 ..c -rwxrwxrwx 0
0
20026370 <part2.img_80316~1.GIF-dead-20026370>
Thu Mar 19 1998 20:56:28
712 m.. -rwxrwxrwx 0
0
29723242
<part2.img-_ETACRO.GIF-dead-29723242>
2852 ..c -rwxrwxrwx 0
0
29723244 <part2.img_80316~1.GIF-dead-29723244>
Thu Mar 19 1998 20:56:30 2852 m.. -rwxrwxrwx 0
0
29723244
<part2.img-_80316~1.GIF-dead-29723244>
Thu Mar 19 1998 20:56:34 2469 m.. -rwxrwxrwx 0
0
20026370
<part2.img-_80316~1.GIF-dead-20026370>
Thu Mar 19 1998 20:56:54 3788 ..c -rwxrwxrwx 0
0
30191160
<part2.img-_OVER.GIF-dead-30191160>
163 ..c -rwxrwxrwx 0
0
29723248 <part2.img_UM2.GIF-dead-29723248>
Thu Mar 19 1998 20:56:56
163 m.. -rwxrwxrwx 0
0
29723248
<part2.img-_UM2.GIF-dead-29723248>
Thu Mar 19 1998 20:57:04 3788 m.. -rwxrwxrwx 0
0
30191160
<part2.img-_OVER.GIF-dead-30191160>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Thu Mar 19 1998 20:57:30 11271 ..c -rwxrwxrwx 0
0
29723251
<part2.img-_OWNLO~1.HTM-dead-29723251>
Thu Mar 19 1998 20:57:36
35 ..c -rwxrwxrwx 0
0
29431929
<part2.img-_HIM.GIF-dead-29431929>
11271 m.. -rwxrwxrwx 0
0
29723251 <part2.img_OWNLO~1.HTM-dead-29723251>
Thu Mar 19 1998 20:57:38
35 m.. -rwxrwxrwx 0
0
29431929
<part2.img-_HIM.GIF-dead-29431929>
4960 ..c -rwxrwxrwx 0
0
30191167 <part2.img_OREAD~2.HTM-dead-30191167>
Thu Mar 19 1998 20:57:40 4960 m.. -rwxrwxrwx 0
0
30191167
<part2.img-_OREAD~2.HTM-dead-30191167>
Thu Mar 19 1998 20:57:46 5635 ..c -rwxrwxrwx 0
0
26037765
<part2.img-_CXREA~1.HTM-dead-26037765>
Thu Mar 19 1998 20:57:48
766 ..c -rwxrwxrwx 0
0
26037769
<part2.img-_CTIVEX.GIF-dead-26037769>
5635 m.. -rwxrwxrwx 0
0
26037765 <part2.img_CXREA~1.HTM-dead-26037765>
Thu Mar 19 1998 20:57:50
766 m.. -rwxrwxrwx 0
0
26037769
<part2.img-_CTIVEX.GIF-dead-26037769>
Thu Mar 19 1998 20:58:16 1672 ..c -rwxrwxrwx 0
0
29723255
<part2.img-_EADLINE.GIF-dead-29723255>
Thu Mar 19 1998 20:58:18 1672 m.. -rwxrwxrwx 0
0
29723255
<part2.img-_EADLINE.GIF-dead-29723255>
Sat Mar 21 1998 23:00:00
360 .a. -rwxrwxrwx 0
0
16120822
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169 4E46
<part2.img-_URVED~1.GIF-dead-16120822>
7059 .a. -rwxrwxrwx 0
0
16120545 <part2.img_ALTIM~1.GIF-dead-16120545>
134 .a. -rwxrwxrwx 0
0
16120424 <part2.img_EN_BO~1.GIF-dead-16120424>
790 .a. -rwxrwxrwx 0
0
16120419 <part2.img_06_TI~1.GIF-dead-16120419>
579 .a. -rwxrwxrwx 0
0
16120620 <part2.img_UNSTU~1.HTM-dead-16120620>
3531 .a. -rwxrwxrwx 0
0
16120749 <part2.img_N_BW8~1.JPE-dead-16120749>
15255 .a. -rwxrwxrwx 0
0
16120795 <part2.img_T(1)~2.HTM-dead-16120795>
175 .a. -rwxrwxrwx 0
0
16120494 <part2.img__FOUR.GIF-dead-16120494>
4995 .a. -rwxrwxrwx 0
0
16120429 <part2.img_ABCOM~2.GIF-dead-16120429>
224 .a. -rwxrwxrwx 0
0
16120539 <part2.img-_7.GIFdead-16120539>
2224 .a. -rwxrwxrwx 0
0
16120645 <part2.img_IDEO~1.HTM-dead-16120645>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
2964 .a. -rwxrwxrwx 0
0
16120699 <part2.img_ACK2~1.JPE-dead-16120699>
2608 .a. -rwxrwxrwx 0
0
16120690 <part2.img_YBERA~1.HTM-dead-16120690>
35 .a. -rwxrwxrwx 0
0
29431929 <part2.img_HIM.GIF-dead-29431929>
3738 .a. -rwxrwxrwx 0
0
16416706 <part2.img_HOW_G~1.HTM-dead-16416706>
2025 .a. -rwxrwxrwx 0
0
16416463 <part2.img_NBSKT.GIF-dead-16416463>
Sat Apr 04 1998 23:00:00
64 .a. -rwxrwxrwx 0
0
10866716
<part2.img-_OLUTI~1.LDB-dead-10866716>
64 .a. -rwxrwxrwx 0
0
11895864 <part2.img_WIND.LDB-dead-11895864>
64 .a. -rwxrwxrwx 0
0
14018575 <part2.img_BONLINE.LDB-dead-14018575>
64 .a. -rwxrwxrwx 0
0
13506056 <part2.img_EPOSTRY.LDB-dead-13506056>
Sun Apr 05 1998 06:02:54
64 ..c -rwxrwxrwx 0
0
11895864
<part2.img-_WIND.LDB-dead-11895864>
Sun Apr 05 1998 06:02:56
64 m.. -rwxrwxrwx 0
0
11895864
<part2.img-_WIND.LDB-dead-11895864>
Sun Apr 05 1998 06:03:20
64 ..c -rwxrwxrwx 0
0
14018575
<part2.img-_BONLINE.LDB-dead-14018575>
Sun Apr 05 1998 06:03:22
64 m.. -rwxrwxrwx 0
0
14018575
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
<part2.img-_BONLINE.LDB-dead-14018575>
Sun Apr 05 1998 06:06:18
64 ..c -rwxrwxrwx 0
0
10866716
<part2.img-_OLUTI~1.LDB-dead-10866716>
Sun Apr 05 1998 06:06:20
64 m.. -rwxrwxrwx 0
0
10866716
<part2.img-_OLUTI~1.LDB-dead-10866716>
Sun Apr 05 1998 06:12:12
64 ..c -rwxrwxrwx 0
0
13506056
<part2.img-_EPOSTRY.LDB-dead-13506056>
Sun Apr 05 1998 06:12:14
64 m.. -rwxrwxrwx 0
0
13506056
<part2.img-_EPOSTRY.LDB-dead-13506056>
Wed Apr 08 1998 08:00:50 17315 m.. -/-rwxrwxrwx 0
0
3898375
c:\/WINDOWS/INF/OTHER/MicrosoftDXS3.INF (MICROS~1.INF)
Wed Apr 08 1998 08:01:00
313 m.. -/--wx-wx-wx 0
0
328452
c:\/WINDOWS/INF/msdsound.inf (MSDSOUND.INF)
Wed Apr 08 1998 08:01:06 33792 m.. -/-rwxrwxrwx 0
0
3346008
c:\/WINDOWS/SYSTEM/S3.DLL
136352 m.. -/-rwxrwxrwx 0
0
3346009
c:\/WINDOWS/SYSTEM/S3.DRV
Wed Apr 08 1998 08:01:08 33854 m.. -/-rwxrwxrwx 0
0
3346010
c:\/WINDOWS/SYSTEM/S3.VXD
Wed Apr 08 1998 08:01:12 52320 m.. -/-rwxrwxrwx 0
0
3346011
c:\/WINDOWS/SYSTEM/SUPERVGA.DRV
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Sat Apr 11 1998 20:29:58 79824 m.c -/-rwxrwxrwx 0
0
200228
c:\/WINDOWS/TEMP/IXP000.TMP/ADVPACK.DLL
79824 m.. -/--wx-wx-wx 0
0
342764
c:\/WINDOWS/SYSTEM/advpack.dll (ADVPACK.DLL)
Sat Apr 11 1998 20:30:06 4608 m.. -/--wx-wx-wx 0
0
342672
c:\/WINDOWS/SYSTEM/w95inf32.dll (W95INF32.DLL)
4608 m.c -/-rwxrwxrwx 0
0
200229
c:\/WINDOWS/TEMP/IXP000.TMP/W95INF32.DLL
2272 m.c -/-rwxrwxrwx 0
0
200230
c:\/WINDOWS/TEMP/IXP000.TMP/W95INF16.DLL
2272 m.. -/--wx-wx-wx 0
0
342777
c:\/WINDOWS/SYSTEM/w95inf16.dll (W95INF16.DLL)
Sun Apr 12 1998 17:42:50 6089 ..c -rwxrwxrwx 0
0
26037774
<part2.img-_OGOAR~1.GIF-dead-26037774>
4256 ..c -rwxrwxrwx 0
0
30191164 <part2.img_YPNONEW.GIF-dead-30191164>
Sun Apr 12 1998 17:42:56 6089 m.. -rwxrwxrwx 0
0
26037774
<part2.img-_OGOAR~1.GIF-dead-26037774>
Sun Apr 12 1998 17:43:00 4256 m.. -rwxrwxrwx 0
0
30191164
<part2.img-_YPNONEW.GIF-dead-30191164>
Sun Apr 12 1998 17:43:12
461 ..c -rwxrwxrwx 0
0
26037778
<part2.img-_OP(1).GIF-dead-26037778>
Sun Apr 12 1998 17:43:14
461 m.. -rwxrwxrwx 0
0
26037778
<part2.img-_OP(1).GIF-dead-26037778>
Sun Apr 12 1998 17:43:20
132 ..c -rwxrwxrwx 0
0
29723257
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169 4E46
<part2.img-_TARROW.GIF-dead-29723257>
4422 ..c -rwxrwxrwx 0
0
26037782 <part2.img_AV.GIF-dead-26037782>
Sun Apr 12 1998 17:43:22
155 ..c -rwxrwxrwx 0
0
26037785
<part2.img-_TDBLA~1.GIF-dead-26037785>
132 m.. -rwxrwxrwx 0
0
29723257 <part2.img_TARROW.GIF-dead-29723257>
Sun Apr 12 1998 17:43:24
479 ..c -rwxrwxrwx 0
0
29723259
<part2.img-_OTFAQ.GIF-dead-29723259>
155 m.. -rwxrwxrwx 0
0
26037785 <part2.img_TDBLA~1.GIF-dead-26037785>
Sun Apr 12 1998 17:43:26
479 m.. -rwxrwxrwx 0
0
29723259
<part2.img-_OTFAQ.GIF-dead-29723259>
Sun Apr 12 1998 17:43:32 4422 m.. -rwxrwxrwx 0
0
26037782
<part2.img-_AV.GIF-dead-26037782>
Thu Apr 30 1998 00:00:00 73948 .a. -rwxrwxrwx 0
0
12402693
<part2.img-_GLH0009.TMP-dead-12402693>
766 .a. -rwxrwxrwx 0
0
12403252 <part2.img_GLH005F.TMP-dead-12403252>
90048 .a. -rwxrwxrwx 0
0
12402192 <part2.img_GLH0081.TMP-dead-12402192>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
308278 .a. -rwxrwxrwx 0
0
12406277 <part2.img_GLH0070.TMP-dead-12406277>
41788 .a. -rwxrwxrwx 0
0
12402711 <part2.img_GLH000B.TMP-dead-12402711>
326 .a. -rwxrwxrwx 0
0
12404285 <part2.img_GLH002F.TMP-dead-12404285>
308278 .a. -rwxrwxrwx 0
0
12406278 <part2.img_GLH006F.TMP-dead-12406278>
36352 .a. -rwxrwxrwx 0
0
12404741 <part2.img_GLH0077.TMP-dead-12404741>
326 .a. -rwxrwxrwx 0
0
12404277 <part2.img_GLH0036.TMP-dead-12404277>
766 .a. -rwxrwxrwx 0
0
12403247 <part2.img_GLH0063.TMP-dead-12403247>
Thu Apr 30 1998 20:52:04 73948 ..c -rwxrwxrwx 0
0
12402693
<part2.img-_GLH0009.TMP-dead-12402693>
Thu Apr 30 1998 20:52:06 41788 ..c -rwxrwxrwx 0
0
12402711
<part2.img-_GLH000B.TMP-dead-12402711>
Thu Apr 30 1998 20:52:08
326 ..c -rwxrwxrwx 0
0
12404277
<part2.img-_GLH0036.TMP-dead-12404277>
326 ..c -rwxrwxrwx 0
0
12404285 <part2.img_GLH002F.TMP-dead-12404285>
Thu Apr 30 1998 20:52:10
766 ..c -rwxrwxrwx 0
0
12403247
<part2.img-_GLH0063.TMP-dead-12403247>
766 ..c -rwxrwxrwx 0
0
12403252 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5 06E4 A169 4E46
_GLH005F.TMP-dead-12403252>
Thu Apr 30 1998 20:53:22 308278 ..c -rwxrwxrwx 0
0
12406278
<part2.img-_GLH006F.TMP-dead-12406278>
Thu Apr 30 1998 20:53:24 308278 ..c -rwxrwxrwx 0
0
12406277
<part2.img-_GLH0070.TMP-dead-12406277>
Thu Apr 30 1998 20:53:26 36352 ..c -rwxrwxrwx 0
0
12404741
<part2.img-_GLH0077.TMP-dead-12404741>
Thu Apr 30 1998 20:53:34 90048 ..c -rwxrwxrwx 0
0
12402192
<part2.img-_GLH0081.TMP-dead-12402192>
Fri May 01 1998 00:00:00
303 .a. -rwxrwxrwx 0
0
26037856
<part2.img-_ESULT~3.HTM-dead-26037856>
1209 .a. -rwxrwxrwx 0
0
29723301 <part2.img_EARCH~8.HTM-dead-29723301>
303 .a. -rwxrwxrwx 0
0
30191248 <part2.img_ESULT~3.HTM-dead-30191248>
267 .a. -rwxrwxrwx 0
0
30191255 <part2.img_ESULT~2.HTM-dead-30191255>
Fri May 01 1998 07:36:04 3202 ..c -rwxrwxrwx 0
0
29723261
<part2.img-_URK(1~2.HTM-dead-29723261>
Fri May 01 1998 07:36:06 3202 m.. -rwxrwxrwx 0
0
29723261
<part2.img-_URK(1~2.HTM-dead-29723261>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Fri May 01 1998 07:36:20
536 ..c -rwxrwxrwx 0
0
26037790
<part2.img-_PISOD~2.GIF-dead-26037790>
3176 ..c -rwxrwxrwx 0
0
29723265 <part2.img_14_1.GIF-dead-29723265>
Fri May 01 1998 07:36:22
536 m.. -rwxrwxrwx 0
0
26037790
<part2.img-_PISOD~2.GIF-dead-26037790>
3176 m.. -rwxrwxrwx 0
0
29723265 <part2.img_14_1.GIF-dead-29723265>
Fri May 01 1998 07:36:26
999 ..c -rwxrwxrwx 0
0
26037796
<part2.img-_AV_BU~2.GIF-dead-26037796>
900 ..c -rwxrwxrwx 0
0
26037793 <part2.img_AV_BU~1.GIF-dead-26037793>
Fri May 01 1998 07:36:28
999 m.. -rwxrwxrwx 0
0
26037796
<part2.img-_AV_BU~2.GIF-dead-26037796>
900 m.. -rwxrwxrwx 0
0
26037793 <part2.img_AV_BU~1.GIF-dead-26037793>
Fri May 01 1998 07:36:42 4264 ..c -rwxrwxrwx 0
0
30191182
<part2.img-_14_2.GIF-dead-30191182>
Fri May 01 1998 07:36:44 4264 m.. -rwxrwxrwx 0
0
30191182
<part2.img-_14_2.GIF-dead-30191182>
Fri May 01 1998 07:38:16
384 ..c -rwxrwxrwx 0
0
26037802
<part2.img-_URRET~2.GIF-dead-26037802>
369 ..c -rwxrwxrwx 0
0
26037799 <part2.img_URRET~1.GIF-dead-26037799>
Fri May 01 1998 07:38:18 1776 ..c -rwxrwxrwx 0
0
26037805
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169 4E46
<part2.img-_HIP_S~1.GIF-dead-26037805>
384 m.. -rwxrwxrwx 0
0
26037802 <part2.img_URRET~2.GIF-dead-26037802>
369 m.. -rwxrwxrwx 0
0
26037799 <part2.img_URRET~1.GIF-dead-26037799>
1015 ..c -rwxrwxrwx 0
0
30191188 <part2.img_HIP_S~1.GIF-dead-30191188>
Fri May 01 1998 07:38:20 1776 m.. -rwxrwxrwx 0
0
26037805
<part2.img-_HIP_S~1.GIF-dead-26037805>
579 ..c -rwxrwxrwx 0
0
26037808 <part2.img_URRET~3.GIF-dead-26037808>
1015 m.. -rwxrwxrwx 0
0
30191188 <part2.img_HIP_S~1.GIF-dead-30191188>
Fri May 01 1998 07:38:22
579 m.. -rwxrwxrwx 0
0
26037808
<part2.img-_URRET~3.GIF-dead-26037808>
Fri May 01 1998 07:38:32
252 ..c -rwxrwxrwx 0
0
29723268
<part2.img-_URRET~1.HTM-dead-29723268>
Fri May 01 1998 07:38:34
252 m.. -rwxrwxrwx 0
0
29723268
<part2.img-_URRET~1.HTM-dead-29723268>
Fri May 01 1998 07:38:42
301 ..c -rwxrwxrwx 0
0
29723271
<part2.img-_IGHSC~1.CLA-dead-29723271>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Fri May 01 1998 07:38:44
301 m.. -rwxrwxrwx 0
0
29723271
<part2.img-_IGHSC~1.CLA-dead-29723271>
2941 ..c -rwxrwxrwx 0
0
30191193 <part2.img_HIP~1.CLA-dead-30191193>
Fri May 01 1998 07:38:46 2941 m.. -rwxrwxrwx 0
0
30191193
<part2.img-_HIP~1.CLA-dead-30191193>
Fri May 01 1998 11:19:08 18511 ..c -rwxrwxrwx 0
0
26037811
<part2.img-_ICROS~1.HTM-dead-26037811>
Fri May 01 1998 11:19:10
246 ..c -rwxrwxrwx 0
0
26037787
<part2.img-_OME_ON.GIF-dead-26037787>
165 ..c -rwxrwxrwx 0
0
26037815 <part2.img_ROD.GIF-dead-26037815>
156 ..c -rwxrwxrwx 0
0
26037813 <part2.img_UPPORT.GIF-dead-26037813>
18511 m.. -rwxrwxrwx 0
0
26037811 <part2.img_ICROS~1.HTM-dead-26037811>
Fri May 01 1998 11:19:12
157 ..c -rwxrwxrwx 0
0
29723275
<part2.img-_RITE.GIF-dead-29723275>
246 m.. -rwxrwxrwx 0
0
26037787 <part2.img_OME_ON.GIF-dead-26037787>
165 m.. -rwxrwxrwx 0
0
26037815 <part2.img_ROD.GIF-dead-26037815>
156 m.. -rwxrwxrwx 0
0
26037813 <part2.img_UPPORT.GIF-dead-26037813>
Fri May 01 1998 11:19:14
157 m.. -rwxrwxrwx 0
0
29723275
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
<part2.img-_RITE.GIF-dead-29723275>
Fri May 01 1998 11:19:16 1209 ..c -rwxrwxrwx 0
0
26037818
<part2.img-_ONTEN~1.GIF-dead-26037818>
68 ..c -rwxrwxrwx 0
0
29723277 <part2.img_SM.GIF-dead-29723277>
Fri May 01 1998 11:19:18 1209 m.. -rwxrwxrwx 0
0
26037818
<part2.img-_ONTEN~1.GIF-dead-26037818>
68 m.. -rwxrwxrwx 0
0
29723277 <part2.img_SM.GIF-dead-29723277>
Fri May 01 1998 11:19:24
201 ..c -rwxrwxrwx 0
0
26037822
<part2.img-_ROD_ON.GIF-dead-26037822>
211 ..c -rwxrwxrwx 0
0
26037820 <part2.img_OME(1).GIF-dead-26037820>
Fri May 01 1998 11:19:26 2273 ..c -rwxrwxrwx 0
0
29723280
<part2.img-_XXTOP~1.GIF-dead-29723280>
5863 ..c -rwxrwxrwx 0
0
30191204 <part2.img_01.GIF-dead-30191204>
201 m.. -rwxrwxrwx 0
0
26037822 <part2.img_ROD_ON.GIF-dead-26037822>
211 m.. -rwxrwxrwx 0
0
26037820 <part2.img_OME(1).GIF-dead-26037820>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Fri May 01 1998 11:19:28 2273 m.. -rwxrwxrwx 0
0
29723280
<part2.img-_XXTOP~1.GIF-dead-29723280>
5863 m.. -rwxrwxrwx 0
0
30191204 <part2.img_01.GIF-dead-30191204>
Fri May 01 1998 11:19:40
82 ..c -rwxrwxrwx 0
0
26037826
<part2.img-_LUEDOT.GIF-dead-26037826>
Fri May 01 1998 11:19:42
82 m.. -rwxrwxrwx 0
0
26037826
<part2.img-_LUEDOT.GIF-dead-26037826>
Fri May 01 1998 11:19:58
247 ..c -rwxrwxrwx 0
0
26037830
<part2.img-_OME(2).GIF-dead-26037830>
200 ..c -rwxrwxrwx 0
0
26037832 <part2.img_ROD(1).GIF-dead-26037832>
998 ..c -rwxrwxrwx 0
0
26037835 <part2.img_UPPOR~2.GIF-dead-26037835>
Fri May 01 1998 11:20:00
200 m.. -rwxrwxrwx 0
0
26037832
<part2.img-_ROD(1).GIF-dead-26037832>
247 m.. -rwxrwxrwx 0
0
26037830 <part2.img_OME(2).GIF-dead-26037830>
998 m.. -rwxrwxrwx 0
0
26037835 <part2.img_UPPOR~2.GIF-dead-26037835>
Fri May 01 1998 11:20:02
193 ..c -rwxrwxrwx 0
0
29723282
<part2.img-_RITE(1).GIF-dead-29723282>
Fri May 01 1998 11:20:04
193 m.. -rwxrwxrwx 0
0
29723282
<part2.img-_RITE(1).GIF-dead-29723282>
1777 ..c -rwxrwxrwx 0
0
29723284 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
_UPPORT.GIF-dead-29723284>
Fri May 01 1998 11:20:06 1777 m.. -rwxrwxrwx 0
0
29723284
<part2.img-_UPPORT.GIF-dead-29723284>
Fri May 01 1998 11:20:08
649 ..c -rwxrwxrwx 0
0
29723287
<part2.img-_EARCH~4.GIF-dead-29723287>
36 ..c -rwxrwxrwx 0
0
26037837 <part2.img_LKSPA~1.GIF-dead-26037837>
Fri May 01 1998 11:20:10
649 m.. -rwxrwxrwx 0
0
29723287
<part2.img-_EARCH~4.GIF-dead-29723287>
36 m.. -rwxrwxrwx 0
0
26037837 <part2.img_LKSPA~1.GIF-dead-26037837>
Fri May 01 1998 11:20:12 1322 ..c -rwxrwxrwx 0
0
29723290
<part2.img-_UPNEW~1.GIF-dead-29723290>
1470 ..c -rwxrwxrwx 0
0
26037840 <part2.img_OWNLO~1.GIF-dead-26037840>
Fri May 01 1998 11:20:14 1064 ..c -rwxrwxrwx 0
0
26037842
<part2.img-_NDCAP.GIF-dead-26037842>
1470 m.. -rwxrwxrwx 0
0
26037840 <part2.img_OWNLO~1.GIF-dead-26037840>
1322 m.. -rwxrwxrwx 0
0
29723290 <part2.img_UPNEW~1.GIF-dead-29723290>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Fri May 01 1998 11:20:16 1064 m.. -rwxrwxrwx 0
0
26037842
<part2.img-_NDCAP.GIF-dead-26037842>
Fri May 01 1998 11:20:18
573 ..c -rwxrwxrwx 0
0
29723292
<part2.img-_IND.GIF-dead-29723292>
Fri May 01 1998 11:20:20
573 m.. -rwxrwxrwx 0
0
29723292
<part2.img-_IND.GIF-dead-29723292>
Fri May 01 1998 11:20:58 1479 ..c -rwxrwxrwx 0
0
26037844
<part2.img-_TYLE.CSS-dead-26037844>
Fri May 01 1998 11:21:02 1479 m.. -rwxrwxrwx 0
0
26037844
<part2.img-_TYLE.CSS-dead-26037844>
Fri May 01 1998 11:25:06
955 ..c -rwxrwxrwx 0
0
30191237
<part2.img-__YES.GIF-dead-30191237>
1182 ..c -rwxrwxrwx 0
0
26037828 <part2.img__APPLY.GIF-dead-26037828>
Fri May 01 1998 11:25:08
955 m.. -rwxrwxrwx 0
0
30191237
<part2.img-__YES.GIF-dead-30191237>
1086 ..c -rwxrwxrwx 0
0
29723298 <part2.img__SUBMIT.GIF-dead-29723298>
1182 m.. -rwxrwxrwx 0
0
26037828 <part2.img__APPLY.GIF-dead-26037828>
Fri May 01 1998 11:25:10 1086 m.. -rwxrwxrwx 0
0
29723298
<part2.img-__SUBMIT.GIF-dead-29723298>
Fri May 01 1998 20:50:40 1209 ..c -rwxrwxrwx 0
0
29723301
<part2.img-_EARCH~8.HTM-dead-29723301>
Fri May 01 1998 20:50:42 1209 m.. -rwxrwxrwx 0
0
29723301
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
<part2.img-_EARCH~8.HTM-dead-29723301>
Fri May 01 1998 20:51:20 1322 ..c -rwxrwxrwx 0
0
29723305
<part2.img-_M.GIF-dead-29723305>
Fri May 01 1998 20:51:22 1322 m.. -rwxrwxrwx 0
0
29723305
<part2.img-_M.GIF-dead-29723305>
Fri May 01 1998 20:51:24 1862 ..c -rwxrwxrwx 0
0
29723307
<part2.img-_EDBUT~1.GIF-dead-29723307>
Fri May 01 1998 20:51:26 1862 m.. -rwxrwxrwx 0
0
29723307
<part2.img-_EDBUT~1.GIF-dead-29723307>
Fri May 01 1998 20:52:08
303 ..c -rwxrwxrwx 0
0
26037856
<part2.img-_ESULT~3.HTM-dead-26037856>
Fri May 01 1998 20:52:10
303 m.. -rwxrwxrwx 0
0
26037856
<part2.img-_ESULT~3.HTM-dead-26037856>
Fri May 01 1998 20:52:24 7309 ..c -rwxrwxrwx 0
0
29723315
<part2.img-_ILVER~1.HTM-dead-29723315>
Fri May 01 1998 20:52:26 7309 m.. -rwxrwxrwx 0
0
29723315
<part2.img-_ILVER~1.HTM-dead-29723315>
Fri May 01 1998 20:52:28 1355 ..c -rwxrwxrwx 0
0
29723317
<part2.img-_ORK.GIF-dead-29723317>
Fri May 01 1998 20:52:30 1355 m.. -rwxrwxrwx 0
0
29723317
<part2.img-_ORK.GIF-dead-29723317>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Fri May 01 1998 20:53:26 13985 ..c -rwxrwxrwx 0
0
26037851
<part2.img-_UERY~1.HTM-dead-26037851>
Fri May 01 1998 20:53:34 13985 m.. -rwxrwxrwx 0
0
26037851
<part2.img-_UERY~1.HTM-dead-26037851>
303 ..c -rwxrwxrwx 0
0
30191248 <part2.img_ESULT~3.HTM-dead-30191248>
Fri May 01 1998 20:53:36
303 m.. -rwxrwxrwx 0
0
30191248
<part2.img-_ESULT~3.HTM-dead-30191248>
Fri May 01 1998 20:53:48 1115 ..c -rwxrwxrwx 0
0
26037853
<part2.img-_OUSE1~1.HTM-dead-26037853>
Fri May 01 1998 20:53:50 1115 m.. -rwxrwxrwx 0
0
26037853
<part2.img-_OUSE1~1.HTM-dead-26037853>
Fri May 01 1998 20:53:54 1433 ..c -rwxrwxrwx 0
0
29723327
<part2.img-_HUMB1.GIF-dead-29723327>
199 ..c -rwxrwxrwx 0
0
29723319 <part2.img_ACK(1).GIF-dead-29723319>
Fri May 01 1998 20:53:56 1433 m.. -rwxrwxrwx 0
0
29723327
<part2.img-_HUMB1.GIF-dead-29723327>
199 m.. -rwxrwxrwx 0
0
29723319 <part2.img_ACK(1).GIF-dead-29723319>
Fri May 01 1998 20:53:58 1266 ..c -rwxrwxrwx 0
0
29723329
<part2.img-_LUEPR~1.GIF-dead-29723329>
Fri May 01 1998 20:54:00 1266 m.. -rwxrwxrwx 0
0
29723329
<part2.img-_LUEPR~1.GIF-dead-29723329>
Fri May 01 1998 20:54:18 5720 ..c -rwxrwxrwx 0
0
26037858
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169 4E46
<part2.img-_ITLEM~1.GIF-dead-26037858>
1837 ..c -rwxrwxrwx 0
0
29723332 <part2.img_IDDLE~1.GIF-dead-29723332>
Fri May 01 1998 20:54:20 1837 m.. -rwxrwxrwx 0
0
29723332
<part2.img-_IDDLE~1.GIF-dead-29723332>
Fri May 01 1998 20:54:24 4050 ..c -rwxrwxrwx 0
0
26037860
<part2.img-_OUSE0~1.JPE-dead-26037860>
5720 m.. -rwxrwxrwx 0
0
26037858 <part2.img_ITLEM~1.GIF-dead-26037858>
Fri May 01 1998 20:54:26 4050 m.. -rwxrwxrwx 0
0
26037860
<part2.img-_OUSE0~1.JPE-dead-26037860>
3984 ..c -rwxrwxrwx 0
0
29723336 <part2.img_OUSE0~2.JPE-dead-29723336>
Fri May 01 1998 20:54:28 3984 m.. -rwxrwxrwx 0
0
29723336
<part2.img-_OUSE0~2.JPE-dead-29723336>
Fri May 01 1998 20:55:00 14104 ..c -rwxrwxrwx 0
0
26037862
<part2.img-_UERY(~2.HTM-dead-26037862>
Fri May 01 1998 20:55:02 14104 m.. -rwxrwxrwx 0
0
26037862
<part2.img-_UERY(~2.HTM-dead-26037862>
Fri May 01 1998 20:55:32 14050 ..c -rwxrwxrwx 0
0
29723334
<part2.img-_UERY(~3.HTM-dead-29723334>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Fri May 01 1998 20:55:34 14050 m.. -rwxrwxrwx 0
0
29723334
<part2.img-_UERY(~3.HTM-dead-29723334>
Fri May 01 1998 20:56:06 14112 ..c -rwxrwxrwx 0
0
26037876
<part2.img-_UERY(~3.HTM-dead-26037876>
Fri May 01 1998 20:56:08 14112 m.. -rwxrwxrwx 0
0
26037876
<part2.img-_UERY(~3.HTM-dead-26037876>
Fri May 01 1998 20:57:54
267 ..c -rwxrwxrwx 0
0
30191255
<part2.img-_ESULT~2.HTM-dead-30191255>
Fri May 01 1998 20:57:56
267 m.. -rwxrwxrwx 0
0
30191255
<part2.img-_ESULT~2.HTM-dead-30191255>
Fri May 01 1998 21:00:54 9350 ..c -rwxrwxrwx 0
0
29723344
<part2.img-_BREGI~1.HTM-dead-29723344>
Fri May 01 1998 21:00:56 3050 ..c -rwxrwxrwx 0
0
30191257
<part2.img-_AIN.GIF-dead-30191257>
3458 ..c -rwxrwxrwx 0
0
26037888 <part2.img_ANNER~3.GIF-dead-26037888>
380 ..c -rwxrwxrwx 0
0
29723346 <part2.img_ORCUPLE.GIF-dead-29723346>
1074 ..c -rwxrwxrwx 0
0
26037890 <part2.img_EW(2).GIF-dead-26037890>
9350 m.. -rwxrwxrwx 0
0
29723344 <part2.img_BREGI~1.HTM-dead-29723344>
Fri May 01 1998 21:00:58 3458 m.. -rwxrwxrwx 0
0
26037888
<part2.img-_ANNER~3.GIF-dead-26037888>
3050 m.. -rwxrwxrwx 0
0
30191257 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
_AIN.GIF-dead-30191257>
380 m.. -rwxrwxrwx 0
0
29723346 <part2.img_ORCUPLE.GIF-dead-29723346>
1074 m.. -rwxrwxrwx 0
0
26037890 <part2.img_EW(2).GIF-dead-26037890>
Fri May 01 1998 21:01:00
157 ..c -rwxrwxrwx 0
0
26037892
<part2.img-_OUNT.GIF-dead-26037892>
Fri May 01 1998 21:01:02
157 m.. -rwxrwxrwx 0
0
26037892
<part2.img-_OUNT.GIF-dead-26037892>
Fri May 01 1998 21:01:06 6262 ..c -rwxrwxrwx 0
0
26037894
<part2.img-_ENDOR~1.HTM-dead-26037894>
Fri May 01 1998 21:01:08 6262 m.. -rwxrwxrwx 0
0
26037894
<part2.img-_ENDOR~1.HTM-dead-26037894>
4245 ..c -rwxrwxrwx 0
0
30191261 <part2.img_OR_AD.GIF-dead-30191261>
Fri May 01 1998 21:01:10 4245 m.. -rwxrwxrwx 0
0
30191261
<part2.img-_OR_AD.GIF-dead-30191261>
Fri May 01 1998 21:01:14 2466 ..c -rwxrwxrwx 0
0
29723348
<part2.img-_00~1.HTM-dead-29723348>
Fri May 01 1998 21:01:16
940 ..c -rwxrwxrwx 0
0
26037896
<part2.img-_HKITOUT.GIF-dead-26037896>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
2466 m.. -rwxrwxrwx 0
0
29723348 <part2.img_00~1.HTM-dead-29723348>
Fri May 01 1998 21:01:18
940 m.. -rwxrwxrwx 0
0
26037896
<part2.img-_HKITOUT.GIF-dead-26037896>
Fri May 01 1998 21:01:40 5527 ..c -rwxrwxrwx 0
0
26037898
<part2.img-_FTSQ.GIF-dead-26037898>
Fri May 01 1998 21:01:46 5527 m.. -rwxrwxrwx 0
0
26037898
<part2.img-_FTSQ.GIF-dead-26037898>
Fri May 01 1998 21:02:06 3948 ..c -rwxrwxrwx 0
0
26037903
<part2.img-_ATEGO~2.HTM-dead-26037903>
Fri May 01 1998 21:02:08
50 ..c -rwxrwxrwx 0
0
30191271
<part2.img-_LINE.GIF-dead-30191271>
3948 m.. -rwxrwxrwx 0
0
26037903 <part2.img_ATEGO~2.HTM-dead-26037903>
Fri May 01 1998 21:02:10
50 m.. -rwxrwxrwx 0
0
30191271
<part2.img-_LINE.GIF-dead-30191271>
Fri May 01 1998 21:03:56 8772 ..c -rwxrwxrwx 0
0
29723352
<part2.img-_GIQA~1.HTM-dead-29723352>
Fri May 01 1998 21:03:58 8772 m.. -rwxrwxrwx 0
0
29723352
<part2.img-_GIQA~1.HTM-dead-29723352>
286 ..c -rwxrwxrwx 0
0
29723354 <part2.img_OTCLEAR.GIF-dead-29723354>
3435 ..c -rwxrwxrwx 0
0
30191275 <part2.img_V_PEO~1.GIF-dead-30191275>
Fri May 01 1998 21:04:00 1758 ..c -rwxrwxrwx 0
0
29723357
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169 4E46
<part2.img-_DSTUD~1.GIF-dead-29723357>
286 m.. -rwxrwxrwx 0
0
29723354 <part2.img_OTCLEAR.GIF-dead-29723354>
3435 m.. -rwxrwxrwx 0
0
30191275 <part2.img_V_PEO~1.GIF-dead-30191275>
438 ..c -rwxrwxrwx 0
0
26037909 <part2.img_WITCH~1.GIF-dead-26037909>
Fri May 01 1998 21:04:02 1758 m.. -rwxrwxrwx 0
0
29723357
<part2.img-_DSTUD~1.GIF-dead-29723357>
808 ..c -rwxrwxrwx 0
0
26037911 <part2.img__TB_FAP.GIF-dead-26037911>
438 m.. -rwxrwxrwx 0
0
26037909 <part2.img_WITCH~1.GIF-dead-26037909>
Fri May 01 1998 21:04:04
808 m.. -rwxrwxrwx 0
0
26037911
<part2.img-__TB_FAP.GIF-dead-26037911>
Fri May 01 1998 21:04:12
878 ..c -rwxrwxrwx 0
0
26037915
<part2.img-_AB.GIF-dead-26037915>
2330 ..c -rwxrwxrwx 0
0
26037913 <part2.img_V_LOGO.GIF-dead-26037913>
Fri May 01 1998 21:04:14
471 ..c -rwxrwxrwx 0
0
29723359
<part2.img-_EFINE.GIF-dead-29723359>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
2330 m.. -rwxrwxrwx 0
0
26037913 <part2.img_V_LOGO.GIF-dead-26037913>
878 m.. -rwxrwxrwx 0
0
26037915 <part2.img_AB.GIF-dead-26037915>
Fri May 01 1998 21:04:16
471 m.. -rwxrwxrwx 0
0
29723359
<part2.img-_EFINE.GIF-dead-29723359>
8090 ..c -rwxrwxrwx 0
0
26037917 <part2.img_FFLINE.GIF-dead-26037917>
43 ..c -rwxrwxrwx 0
0
29723361 <part2.img_OT.GIF-dead-29723361>
Fri May 01 1998 21:04:18
43 m.. -rwxrwxrwx 0
0
29723361
<part2.img-_OT.GIF-dead-29723361>
1490 ..c -rwxrwxrwx 0
0
29723364 <part2.img_OP_AD~1.GIF-dead-29723364>
8090 m.. -rwxrwxrwx 0
0
26037917 <part2.img_FFLINE.GIF-dead-26037917>
Fri May 01 1998 21:04:20 1490 m.. -rwxrwxrwx 0
0
29723364
<part2.img-_OP_AD~1.GIF-dead-29723364>
973 ..c -rwxrwxrwx 0
0
29723367 <part2.img_OTTOM~1.GIF-dead-29723367>
Fri May 01 1998 21:04:22
973 m.. -rwxrwxrwx 0
0
29723367
<part2.img-_OTTOM~1.GIF-dead-29723367>
Fri May 01 1998 21:04:38
154 ..c -rwxrwxrwx 0
0
29723369
<part2.img-_AV_ON.GIF-dead-29723369>
Fri May 01 1998 21:04:40
154 m.. -rwxrwxrwx 0
0
29723369
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
<part2.img-_AV_ON.GIF-dead-29723369>
127 ..c -rwxrwxrwx 0
0
29723371 <part2.img_AV(2).GIF-dead-29723371>
Fri May 01 1998 21:04:42
127 m.. -rwxrwxrwx 0
0
29723371
<part2.img-_AV(2).GIF-dead-29723371>
Fri May 01 1998 21:06:02 2237 ..c -rwxrwxrwx 0
0
29723373
<part2.img-_NEIDA~1.HTM-dead-29723373>
Fri May 01 1998 21:06:04 2237 m.. -rwxrwxrwx 0
0
29723373
<part2.img-_NEIDA~1.HTM-dead-29723373>
Fri May 01 1998 21:06:20 1403 ..c -rwxrwxrwx 0
0
29723375
<part2.img-_UT.GIF-dead-29723375>
2654 ..c -rwxrwxrwx 0
0
30191301 <part2.img_NEIDA.GIF-dead-30191301>
Fri May 01 1998 21:06:22 1403 m.. -rwxrwxrwx 0
0
29723375
<part2.img-_UT.GIF-dead-29723375>
2654 m.. -rwxrwxrwx 0
0
30191301 <part2.img_NEIDA.GIF-dead-30191301>
Fri May 01 1998 21:06:28 1895 ..c -rwxrwxrwx 0
0
29723377
<part2.img-_RINTA~1.HTM-dead-29723377>
2615 ..c -rwxrwxrwx 0
0
26037927 <part2.img_EAL_P~1.GIF-dead-26037927>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Fri May 01 1998 21:06:30 1895 m.. -rwxrwxrwx 0
0
29723377
<part2.img-_RINTA~1.HTM-dead-29723377>
2615 m.. -rwxrwxrwx 0
0
26037927 <part2.img_EAL_P~1.GIF-dead-26037927>
Fri May 01 1998 21:06:32 7548 ..c -rwxrwxrwx 0
0
26037929
<part2.img-_NEIDA~1.JPE-dead-26037929>
Fri May 01 1998 21:06:34 7548 m.. -rwxrwxrwx 0
0
26037929
<part2.img-_NEIDA~1.JPE-dead-26037929>
Fri May 01 1998 21:06:48 1884 ..c -rwxrwxrwx 0
0
30191303
<part2.img-_NOWYO~1.HTM-dead-30191303>
Fri May 01 1998 21:06:50 1884 m.. -rwxrwxrwx 0
0
30191303
<part2.img-_NOWYO~1.HTM-dead-30191303>
Fri May 01 1998 21:06:58 2281 ..c -rwxrwxrwx 0
0
30191308
<part2.img-_LATWA~1.HTM-dead-30191308>
Fri May 01 1998 21:07:00 2281 m.. -rwxrwxrwx 0
0
30191308
<part2.img-_LATWA~1.HTM-dead-30191308>
Fri May 01 1998 21:07:10 2523 ..c -rwxrwxrwx 0
0
29723379
<part2.img-_OWTOS~1.HTM-dead-29723379>
Fri May 01 1998 21:07:12 2523 m.. -rwxrwxrwx 0
0
29723379
<part2.img-_OWTOS~1.HTM-dead-29723379>
Fri May 01 1998 21:07:22 3906 ..c -rwxrwxrwx 0
0
30191312
<part2.img-_IGNSO~1.HTM-dead-30191312>
Fri May 01 1998 21:07:24 3906 m.. -rwxrwxrwx 0
0
30191312
<part2.img-_IGNSO~1.HTM-dead-30191312>
Fri May 01 1998 21:07:32 2348 ..c -rwxrwxrwx 0
0
26037931
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169 4E46
<part2.img-_NEIDA~1.HTM-dead-26037931>
Fri May 01 1998 21:07:34 2348 m.. -rwxrwxrwx 0
0
26037931
<part2.img-_NEIDA~1.HTM-dead-26037931>
Fri May 01 1998 21:07:42 9192 ..c -rwxrwxrwx 0
0
29723381
<part2.img-__DESI~1.HTM-dead-29723381>
Fri May 01 1998 21:07:44 9192 m.. -rwxrwxrwx 0
0
29723381
<part2.img-__DESI~1.HTM-dead-29723381>
Fri May 01 1998 21:07:54 3191 ..c -rwxrwxrwx 0
0
30191314
<part2.img-__HOLL~1.HTM-dead-30191314>
Fri May 01 1998 21:07:56 3191 m.. -rwxrwxrwx 0
0
30191314
<part2.img-__HOLL~1.HTM-dead-30191314>
Fri May 01 1998 21:08:20 3991 ..c -rwxrwxrwx 0
0
29723383
<part2.img-_HATSN~1.HTM-dead-29723383>
Fri May 01 1998 21:08:22 3991 m.. -rwxrwxrwx 0
0
29723383
<part2.img-_HATSN~1.HTM-dead-29723383>
Fri May 01 1998 21:08:48 1305 ..c -rwxrwxrwx 0
0
30191319
<part2.img-__FREQ~1.GIF-dead-30191319>
Fri May 01 1998 21:08:50 1305 m.. -rwxrwxrwx 0
0
30191319
<part2.img-__FREQ~1.GIF-dead-30191319>
Fri May 01 1998 21:08:52 5880 ..c -rwxrwxrwx 0
0
26037938
<part2.img-_FLATW~1.HTM-dead-26037938>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Fri May 01 1998 21:08:54 5880 m.. -rwxrwxrwx 0
0
26037938
<part2.img-_FLATW~1.HTM-dead-26037938>
Fri May 01 1998 21:09:20 4012 ..c -rwxrwxrwx 0
0
29723387
<part2.img-_OWTOR~1.HTM-dead-29723387>
Fri May 01 1998 21:09:22 4012 m.. -rwxrwxrwx 0
0
29723387
<part2.img-_OWTOR~1.HTM-dead-29723387>
Fri May 01 1998 21:09:38 6775 ..c -rwxrwxrwx 0
0
26037942
<part2.img-_60887~1.HTM-dead-26037942>
Fri May 01 1998 21:09:40
751 ..c -rwxrwxrwx 0
0
26037945
<part2.img-_ONTEN~2.GIF-dead-26037945>
6775 m.. -rwxrwxrwx 0
0
26037942 <part2.img_60887~1.HTM-dead-26037942>
Fri May 01 1998 21:09:42
751 m.. -rwxrwxrwx 0
0
26037945
<part2.img-_ONTEN~2.GIF-dead-26037945>
Fri May 01 1998 21:09:52 1387 ..c -rwxrwxrwx 0
0
26037952
<part2.img-_PLINK.GIF-dead-26037952>
1014 ..c -rwxrwxrwx 0
0
29723389 <part2.img_PBLANK.GIF-dead-29723389>
684 ..c -rwxrwxrwx 0
0
26037954 <part2.img_RNHOME2.GIF-dead-26037954>
Fri May 01 1998 21:09:54
684 m.. -rwxrwxrwx 0
0
26037954
<part2.img-_RNHOME2.GIF-dead-26037954>
1014 m.. -rwxrwxrwx 0
0
29723389 <part2.img_PBLANK.GIF-dead-29723389>
1387 m.. -rwxrwxrwx 0
0
26037952 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
_PLINK.GIF-dead-26037952>
Fri May 01 1998 21:10:10 2762 ..c -rwxrwxrwx 0
0
29723391
<part2.img-_HEREO~1.HTM-dead-29723391>
Fri May 01 1998 21:10:12 2762 m.. -rwxrwxrwx 0
0
29723391
<part2.img-_HEREO~1.HTM-dead-29723391>
Fri May 01 1998 21:10:34 1942 ..c -rwxrwxrwx 0
0
29723393
<part2.img-_BOUTO~1.HTM-dead-29723393>
Fri May 01 1998 21:10:36 1942 m.. -rwxrwxrwx 0
0
29723393
<part2.img-_BOUTO~1.HTM-dead-29723393>
Tue May 05 1998 00:00:00
54 .a. -r-xr-xr-x 0
0
17244180
<part2.img-_$OFES~1.DOT-dead-17244180>
Tue May 05 1998 15:52:32
54 ..c -r-xr-xr-x 0
0
17244180
<part2.img-_$OFES~1.DOT-dead-17244180>
Tue May 05 1998 15:52:34
54 m.. -r-xr-xr-x 0
0
17244180
<part2.img-_$OFES~1.DOT-dead-17244180>
Wed May 06 1998 00:00:00 95667 .a. -rwxrwxrwx 0
0
29723454
<part2.img-_NIMAT~1.GIF-dead-29723454>
Wed May 06 1998 18:01:56 5929 ..c -rwxrwxrwx 0
0
30191328
<part2.img-_ETNA~1.HTM-dead-30191328>
Wed May 06 1998 18:01:58 5929 m.. -rwxrwxrwx 0
0
30191328
<part2.img-_ETNA~1.HTM-dead-30191328>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Wed May 06 1998 18:02:00
468 ..c -rwxrwxrwx 0
0
26037956
<part2.img-_OMELI~1.GIF-dead-26037956>
537 ..c -rwxrwxrwx 0
0
29723398 <part2.img_OMELI~1.GIF-dead-29723398>
1134 ..c -rwxrwxrwx 0
0
26037958 <part2.img_OMELI~2.GIF-dead-26037958>
Wed May 06 1998 18:02:02
537 m.. -rwxrwxrwx 0
0
29723398
<part2.img-_OMELI~1.GIF-dead-29723398>
577 ..c -rwxrwxrwx 0
0
29723400 <part2.img_OMELI~2.GIF-dead-29723400>
473 ..c -rwxrwxrwx 0
0
26037963 <part2.img_OMELI~4.GIF-dead-26037963>
468 m.. -rwxrwxrwx 0
0
26037956 <part2.img_OMELI~1.GIF-dead-26037956>
601 ..c -rwxrwxrwx 0
0
26037960 <part2.img_OMELI~3.GIF-dead-26037960>
1134 m.. -rwxrwxrwx 0
0
26037958 <part2.img_OMELI~2.GIF-dead-26037958>
Wed May 06 1998 18:02:04
662 ..c -rwxrwxrwx 0
0
29723403
<part2.img-_OMELI~3.GIF-dead-29723403>
601 m.. -rwxrwxrwx 0
0
26037960 <part2.img_OMELI~3.GIF-dead-26037960>
577 m.. -rwxrwxrwx 0
0
29723400 <part2.img_OMELI~2.GIF-dead-29723400>
473 m.. -rwxrwxrwx 0
0
26037963 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
_OMELI~4.GIF-dead-26037963>
Wed May 06 1998 18:02:06 1320 ..c -rwxrwxrwx 0
0
26037966
<part2.img-_OMELI~5.GIF-dead-26037966>
662 m.. -rwxrwxrwx 0
0
29723403 <part2.img_OMELI~3.GIF-dead-29723403>
538 ..c -rwxrwxrwx 0
0
29723406 <part2.img_OMELI~4.GIF-dead-29723406>
1427 ..c -rwxrwxrwx 0
0
26037969 <part2.img_OMELI~6.GIF-dead-26037969>
Wed May 06 1998 18:02:08 1320 m.. -rwxrwxrwx 0
0
26037966
<part2.img-_OMELI~5.GIF-dead-26037966>
538 m.. -rwxrwxrwx 0
0
29723406 <part2.img_OMELI~4.GIF-dead-29723406>
1427 m.. -rwxrwxrwx 0
0
26037969 <part2.img_OMELI~6.GIF-dead-26037969>
Wed May 06 1998 18:02:38 4253 ..c -rwxrwxrwx 0
0
29723412
<part2.img-_BOUTA~1.HTM-dead-29723412>
Wed May 06 1998 18:02:40 4253 m.. -rwxrwxrwx 0
0
29723412
<part2.img-_BOUTA~1.HTM-dead-29723412>
Wed May 06 1998 18:02:46 2362 ..c -rwxrwxrwx 0
0
29723415
<part2.img-_RODUC~3.GIF-dead-29723415>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Wed May 06 1998 18:02:48
167 ..c -rwxrwxrwx 0
0
26037975
<part2.img-_REENA~1.GIF-dead-26037975>
2362 m.. -rwxrwxrwx 0
0
29723415 <part2.img_RODUC~3.GIF-dead-29723415>
Wed May 06 1998 18:02:50
167 m.. -rwxrwxrwx 0
0
26037975
<part2.img-_REENA~1.GIF-dead-26037975>
Wed May 06 1998 18:03:16
439 ..c -rwxrwxrwx 0
0
29723417
<part2.img-_EW_SM~1.GIF-dead-29723417>
Wed May 06 1998 18:03:18
439 m.. -rwxrwxrwx 0
0
29723417
<part2.img-_EW_SM~1.GIF-dead-29723417>
Wed May 06 1998 18:05:24
773 ..c -rwxrwxrwx 0
0
26037980
<part2.img-_D00JD~1.HTM-dead-26037980>
Wed May 06 1998 18:05:26
773 m.. -rwxrwxrwx 0
0
26037980
<part2.img-_D00JD~1.HTM-dead-26037980>
Wed May 06 1998 18:06:14 2223 ..c -rwxrwxrwx 0
0
26037983
<part2.img-_D00JD~2.HTM-dead-26037983>
Wed May 06 1998 18:06:16 2223 m.. -rwxrwxrwx 0
0
26037983
<part2.img-_D00JD~2.HTM-dead-26037983>
Wed May 06 1998 18:09:32 1435 ..c -rwxrwxrwx 0
0
29723419
<part2.img-_FER.GIF-dead-29723419>
Wed May 06 1998 18:09:34 1435 m.. -rwxrwxrwx 0
0
29723419
<part2.img-_FER.GIF-dead-29723419>
Wed May 06 1998 18:11:38 1776 ..c -rwxrwxrwx 0
0
26037987
<part2.img-_FERCONF.GIF-dead-26037987>
Wed May 06 1998 18:11:40 1776 m.. -rwxrwxrwx 0
0
26037987
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
<part2.img-_FERCONF.GIF-dead-26037987>
Wed May 06 1998 18:19:28
173 ..c -rwxrwxrwx 0
0
29723421
<part2.img-_XIT~1.HTM-dead-29723421>
Wed May 06 1998 18:19:30
173 m.. -rwxrwxrwx 0
0
29723421
<part2.img-_XIT~1.HTM-dead-29723421>
Wed May 06 1998 18:19:42 6723 ..c -rwxrwxrwx 0
0
26037990
<part2.img-_ACCES~2.HTM-dead-26037990>
Wed May 06 1998 18:19:44 6723 m.. -rwxrwxrwx 0
0
26037990
<part2.img-_ACCES~2.HTM-dead-26037990>
Wed May 06 1998 18:19:56 4963 ..c -rwxrwxrwx 0
0
30191348
<part2.img-_OME(2~2.HTM-dead-30191348>
Wed May 06 1998 18:19:58 2829 ..c -rwxrwxrwx 0
0
26037993
<part2.img-_RS_AC~1.GIF-dead-26037993>
4963 m.. -rwxrwxrwx 0
0
30191348 <part2.img_OME(2~2.HTM-dead-30191348>
Wed May 06 1998 18:20:00 5026 ..c -rwxrwxrwx 0
0
30191356
<part2.img-_RS_NE~1.GIF-dead-30191356>
Wed May 06 1998 18:20:02 4547 ..c -rwxrwxrwx 0
0
26037996
<part2.img-_RS_GU~1.GIF-dead-26037996>
2161 ..c -rwxrwxrwx 0
0
29723427 <part2.img_RS_PR~1.GIF-dead-29723427>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
1699 ..c -rwxrwxrwx 0
0
29723429 <part2.img_NDXARS1.GIF-dead-29723429>
2829 m.. -rwxrwxrwx 0
0
26037993 <part2.img_RS_AC~1.GIF-dead-26037993>
5026 m.. -rwxrwxrwx 0
0
30191356 <part2.img_RS_NE~1.GIF-dead-30191356>
Wed May 06 1998 18:20:04 2161 m.. -rwxrwxrwx 0
0
29723427
<part2.img-_RS_PR~1.GIF-dead-29723427>
Wed May 06 1998 18:20:06 4547 m.. -rwxrwxrwx 0
0
26037996
<part2.img-_RS_GU~1.GIF-dead-26037996>
1699 m.. -rwxrwxrwx 0
0
29723429 <part2.img_NDXARS1.GIF-dead-29723429>
5477 ..c -rwxrwxrwx 0
0
26037999 <part2.img_OTH_L~1.GIF-dead-26037999>
Wed May 06 1998 18:20:08 5477 m.. -rwxrwxrwx 0
0
26037999
<part2.img-_OTH_L~1.GIF-dead-26037999>
Wed May 06 1998 18:20:28 6506 ..c -rwxrwxrwx 0
0
29723432
<part2.img-_ETNAU~1.HTM-dead-29723432>
Wed May 06 1998 18:20:30 6506 m.. -rwxrwxrwx 0
0
29723432
<part2.img-_ETNAU~1.HTM-dead-29723432>
1316 ..c -rwxrwxrwx 0
0
26037977 <part2.img_OGO(2).GIF-dead-26037977>
Wed May 06 1998 18:20:32 1316 m.. -rwxrwxrwx 0
0
26037977
<part2.img-_OGO(2).GIF-dead-26037977>
4079 ..c -rwxrwxrwx 0
0
29723435 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
_IDE_M~1.GIF-dead-29723435>
5023 ..c -rwxrwxrwx 0
0
29723438 <part2.img_UTTON~1.JPE-dead-29723438>
Wed May 06 1998 18:20:34 1747 ..c -rwxrwxrwx 0
0
29723440
<part2.img-_INE~1.JPE-dead-29723440>
5023 m.. -rwxrwxrwx 0
0
29723438 <part2.img_UTTON~1.JPE-dead-29723438>
Wed May 06 1998 18:20:36 1747 m.. -rwxrwxrwx 0
0
29723440
<part2.img-_INE~1.JPE-dead-29723440>
468 ..c -rwxrwxrwx 0
0
26038005 <part2.img_ITLE_~1.GIF-dead-26038005>
4079 m.. -rwxrwxrwx 0
0
29723435 <part2.img_IDE_M~1.GIF-dead-29723435>
Wed May 06 1998 18:20:38
468 m.. -rwxrwxrwx 0
0
26038005
<part2.img-_ITLE_~1.GIF-dead-26038005>
Wed May 06 1998 18:20:42
640 ..c -rwxrwxrwx 0
0
26038008
<part2.img-_ITLE_~2.GIF-dead-26038008>
Wed May 06 1998 18:20:44
640 m.. -rwxrwxrwx 0
0
26038008
<part2.img-_ITLE_~2.GIF-dead-26038008>
Wed May 06 1998 18:21:34 4152 ..c -rwxrwxrwx 0
0
26037985
<part2.img-_NDEX(~8.HTM-dead-26037985>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Wed May 06 1998 18:21:36 4152 m.. -rwxrwxrwx 0
0
26037985
<part2.img-_NDEX(~8.HTM-dead-26037985>
Wed May 06 1998 18:21:40 3850 ..c -rwxrwxrwx 0
0
29723448
<part2.img-_ITLE_~1.GIF-dead-29723448>
Wed May 06 1998 18:21:42 3850 m.. -rwxrwxrwx 0
0
29723448
<part2.img-_ITLE_~1.GIF-dead-29723448>
Wed May 06 1998 18:22:00 2394 ..c -rwxrwxrwx 0
0
29723451
<part2.img-_ITLE_~2.GIF-dead-29723451>
Wed May 06 1998 18:22:02 2394 m.. -rwxrwxrwx 0
0
29723451
<part2.img-_ITLE_~2.GIF-dead-29723451>
95667 ..c -rwxrwxrwx 0
0
29723454 <part2.img_NIMAT~1.GIF-dead-29723454>
Wed May 06 1998 18:22:34 95667 m.. -rwxrwxrwx 0
0
29723454
<part2.img-_NIMAT~1.GIF-dead-29723454>
Wed May 06 1998 18:22:36 20993 ..c -rwxrwxrwx 0
0
29723453
<part2.img-_MO2~1.HTM-dead-29723453>
Wed May 06 1998 18:22:46 20993 m.. -rwxrwxrwx 0
0
29723453
<part2.img-_MO2~1.HTM-dead-29723453>
Wed May 06 1998 18:27:06 5202 ..c -rwxrwxrwx 0
0
26038013
<part2.img-_EALTH~1.HTM-dead-26038013>
Wed May 06 1998 18:27:08 5202 m.. -rwxrwxrwx 0
0
26038013
<part2.img-_EALTH~1.HTM-dead-26038013>
Fri May 08 1998 02:56:06 199680 m.c -/-rwxrwxrwx 0
0
342768
c:\/WINDOWS/SYSTEM/iac25_32.ax (IAC25_32.AX)
Fri May 08 1998 02:57:22 143872 m.c -/-rwxrwxrwx 0
0
342770
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
c:\/WINDOWS/SYSTEM/iacenc.dll (IACENC.DLL)
Thu May 14 1998 00:00:00
335 .a. -rwxrwxrwx 0
0
29723485
<part2.img-_XPLOR~2.HTM-dead-29723485>
1911 .a. -rwxrwxrwx 0
0
26038029 <part2.img_ESULT~3.HTM-dead-26038029>
Thu May 14 1998 18:21:02 1321 ..c -rwxrwxrwx 0
0
26038015
<part2.img-_WLOGO.GIF-dead-26038015>
Thu May 14 1998 18:21:04 1321 m.. -rwxrwxrwx 0
0
26038015
<part2.img-_WLOGO.GIF-dead-26038015>
Thu May 14 1998 18:21:26 1692 ..c -rwxrwxrwx 0
0
26038017
<part2.img-_STORE.GIF-dead-26038017>
1785 ..c -rwxrwxrwx 0
0
29723456 <part2.img_ROLS.GIF-dead-29723456>
Thu May 14 1998 18:21:28 1692 m.. -rwxrwxrwx 0
0
26038017
<part2.img-_STORE.GIF-dead-26038017>
1785 m.. -rwxrwxrwx 0
0
29723456 <part2.img_ROLS.GIF-dead-29723456>
Thu May 14 1998 18:21:30 1739 ..c -rwxrwxrwx 0
0
26038019
<part2.img-_NEWS.GIF-dead-26038019>
Thu May 14 1998 18:21:32 1739 m.. -rwxrwxrwx 0
0
26038019
<part2.img-_NEWS.GIF-dead-26038019>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Thu May 14 1998 18:21:52 3291 ..c -rwxrwxrwx 0
0
29723459
<part2.img-_OLLUT~1.GIF-dead-29723459>
1911 ..c -rwxrwxrwx 0
0
26038029 <part2.img_ESULT~3.HTM-dead-26038029>
Thu May 14 1998 18:21:54 1911 m.. -rwxrwxrwx 0
0
26038029
<part2.img-_ESULT~3.HTM-dead-26038029>
3291 m.. -rwxrwxrwx 0
0
29723459 <part2.img_OLLUT~1.GIF-dead-29723459>
Thu May 14 1998 18:22:16 1512 ..c -rwxrwxrwx 0
0
30191392
<part2.img-_OTTOM~1.GIF-dead-30191392>
Thu May 14 1998 18:22:18 1512 m.. -rwxrwxrwx 0
0
30191392
<part2.img-_OTTOM~1.GIF-dead-30191392>
Thu May 14 1998 18:22:20 6737 ..c -rwxrwxrwx 0
0
26038021
<part2.img-_RED2.GIF-dead-26038021>
Thu May 14 1998 18:22:22 6737 m.. -rwxrwxrwx 0
0
26038021
<part2.img-_RED2.GIF-dead-26038021>
Thu May 14 1998 18:22:46 4036 ..c -rwxrwxrwx 0
0
29723465
<part2.img-_ZF_FA~1.GIF-dead-29723465>
Thu May 14 1998 18:22:48 4036 m.. -rwxrwxrwx 0
0
29723465
<part2.img-_ZF_FA~1.GIF-dead-29723465>
82 ..c -rwxrwxrwx 0
0
29723468 <part2.img_LUEAR~1.GIF-dead-29723468>
Thu May 14 1998 18:22:50
82 m.. -rwxrwxrwx 0
0
29723468
<part2.img-_LUEAR~1.GIF-dead-29723468>
Thu May 14 1998 18:22:52
43 ..c -rwxrwxrwx 0
0
26038023
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169 4E46
<part2.img-_(1).GIF-dead-26038023>
Thu May 14 1998 18:22:54 3844 ..c -rwxrwxrwx 0
0
29723471
<part2.img-_972-F~1.GIF-dead-29723471>
43 m.. -rwxrwxrwx 0
0
26038023 <part2.img_(1).GIF-dead-26038023>
Thu May 14 1998 18:22:56 3844 m.. -rwxrwxrwx 0
0
29723471
<part2.img-_972-F~1.GIF-dead-29723471>
Thu May 14 1998 18:23:04
90 ..c -rwxrwxrwx 0
0
29723474
<part2.img-_LAG_U~2.GIF-dead-29723474>
Thu May 14 1998 18:23:06
90 m.. -rwxrwxrwx 0
0
29723474
<part2.img-_LAG_U~2.GIF-dead-29723474>
Thu May 14 1998 18:23:12 8675 ..c -rwxrwxrwx 0
0
26038028
<part2.img-_972-H~1.GIF-dead-26038028>
335 ..c -rwxrwxrwx 0
0
29723485 <part2.img_XPLOR~2.HTM-dead-29723485>
Thu May 14 1998 18:23:14
335 m.. -rwxrwxrwx 0
0
29723485
<part2.img-_XPLOR~2.HTM-dead-29723485>
Thu May 14 1998 18:23:16 8675 m.. -rwxrwxrwx 0
0
26038028
<part2.img-_972-H~1.GIF-dead-26038028>
Thu May 14 1998 18:23:28 6931 ..c -rwxrwxrwx 0
0
29723476
<part2.img-_LIFO~1.HTM-dead-29723476>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Thu May 14 1998 18:23:30 6931 m.. -rwxrwxrwx 0
0
29723476
<part2.img-_LIFO~1.HTM-dead-29723476>
Thu May 14 1998 18:23:32 1444 ..c -rwxrwxrwx 0
0
29723479
<part2.img-_LIFO-~1.GIF-dead-29723479>
58 ..c -rwxrwxrwx 0
0
30191397 <part2.img-_LIFO~1.GIF-dead-30191397>
Thu May 14 1998 18:23:34
84 ..c -rwxrwxrwx 0
0
30191400
<part2.img-_OTS-D~1.GIF-dead-30191400>
1444 m.. -rwxrwxrwx 0
0
29723479 <part2.img-_LIFO~1.GIF-dead-29723479>
609 ..c -rwxrwxrwx 0
0
29723482 <part2.img-_UFLA~1.GIF-dead-29723482>
458 ..c -rwxrwxrwx 0
0
26038032 <part2.img-_KFLA~1.GIF-dead-26038032>
431 ..c -rwxrwxrwx 0
0
26038035 <part2.img-_AFLA~1.GIF-dead-26038035>
58 m.. -rwxrwxrwx 0
0
30191397 <part2.img-_LIFO~1.GIF-dead-30191397>
Thu May 14 1998 18:23:36
316 ..c -rwxrwxrwx 0
0
26038038
<part2.img-_S-FLA~1.GIF-dead-26038038>
458 m.. -rwxrwxrwx 0
0
26038032 <part2.img-_KFLA~1.GIF-dead-26038032>
431 m.. -rwxrwxrwx 0
0
26038035 <part2.img-_AFLA~1.GIF-dead-26038035>
84 m.. -rwxrwxrwx 0
0
30191400 <part2.img-_OTSKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5 06E4 A169 4E46
D~1.GIF-dead-30191400>
609 m.. -rwxrwxrwx 0
0
29723482 <part2.img-_UFLA~1.GIF-dead-29723482>
Thu May 14 1998 18:23:38 7727 ..c -rwxrwxrwx 0
0
30191405
<part2.img-_CREAT~1.GIF-dead-30191405>
316 m.. -rwxrwxrwx 0
0
26038038 <part2.img-_SFLA~1.GIF-dead-26038038>
Thu May 14 1998 18:23:40 7727 m.. -rwxrwxrwx 0
0
30191405
<part2.img-_CREAT~1.GIF-dead-30191405>
Thu May 14 1998 18:23:46 2585 ..c -rwxrwxrwx 0
0
30191408
<part2.img-_LIFO-~2.GIF-dead-30191408>
Thu May 14 1998 18:23:48 2585 m.. -rwxrwxrwx 0
0
30191408
<part2.img-_LIFO-~2.GIF-dead-30191408>
1586 ..c -rwxrwxrwx 0
0
26038042 <part2.img-_ST.GIF-dead-26038042>
112 ..c -rwxrwxrwx 0
0
30191411 <part2.img-_ISKB~1.GIF-dead-30191411>
Thu May 14 1998 18:23:50 1586 m.. -rwxrwxrwx 0
0
26038042
<part2.img-_S-T.GIF-dead-26038042>
112 m.. -rwxrwxrwx 0
0
30191411 <part2.img-_ISKB~1.GIF-dead-30191411>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Thu May 14 1998 18:23:58
728 ..c -rwxrwxrwx 0
0
30191413
<part2.img-_T-ON.GIF-dead-30191413>
598 ..c -rwxrwxrwx 0
0
26038040 <part2.img-_DOFF.GIF-dead-26038040>
Thu May 14 1998 18:24:00
728 m.. -rwxrwxrwx 0
0
30191413
<part2.img-_T-ON.GIF-dead-30191413>
598 m.. -rwxrwxrwx 0
0
26038040 <part2.img-_DOFF.GIF-dead-26038040>
Thu May 14 1998 18:26:38 3525 ..c -rwxrwxrwx 0
0
29723492
<part2.img-_V~1.HTM-dead-29723492>
Thu May 14 1998 18:26:42 3525 m.. -rwxrwxrwx 0
0
29723492
<part2.img-_V~1.HTM-dead-29723492>
Thu May 14 1998 18:26:58 3012 ..c -rwxrwxrwx 0
0
30191415
<part2.img-_RIPLI~1.HTM-dead-30191415>
Thu May 14 1998 18:27:00 3012 m.. -rwxrwxrwx 0
0
30191415
<part2.img-_RIPLI~1.HTM-dead-30191415>
Thu May 14 1998 18:27:02 13574 ..c -rwxrwxrwx 0
0
29723494
<part2.img-__STRI~1.JPE-dead-29723494>
Thu May 14 1998 18:27:04 5261 ..c -rwxrwxrwx 0
0
30191417
<part2.img-__SQUA~1.JPE-dead-30191417>
Thu May 14 1998 18:27:06
484 ..c -rwxrwxrwx 0
0
30191419
<part2.img-_LTSRCH1.GIF-dead-30191419>
5261 m.. -rwxrwxrwx 0
0
30191417 <part2.img__SQUA~1.JPE-dead-30191417>
Thu May 14 1998 18:27:08
484 m.. -rwxrwxrwx 0
0
30191419
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
<part2.img-_LTSRCH1.GIF-dead-30191419>
2665 ..c -rwxrwxrwx 0
0
26038049 <part2.img__FLIG~1.JPE-dead-26038049>
Thu May 14 1998 18:27:10 13574 m.. -rwxrwxrwx 0
0
29723494
<part2.img-__STRI~1.JPE-dead-29723494>
2665 m.. -rwxrwxrwx 0
0
26038049 <part2.img__FLIG~1.JPE-dead-26038049>
Thu May 14 1998 18:29:32 4654 ..c -rwxrwxrwx 0
0
30191421
<part2.img-_AREHI~1.HTM-dead-30191421>
Thu May 14 1998 18:29:34 4654 m.. -rwxrwxrwx 0
0
30191421
<part2.img-_AREHI~1.HTM-dead-30191421>
Thu May 14 1998 18:34:00 5375 ..c -rwxrwxrwx 0
0
29723498
<part2.img-_IRFAR~1.HTM-dead-29723498>
Thu May 14 1998 18:34:08 5375 m.. -rwxrwxrwx 0
0
29723498
<part2.img-_IRFAR~1.HTM-dead-29723498>
Fri May 15 1998 00:00:00 6509 .a. -rwxrwxrwx 0
0
26038054
<part2.img-_ELLOW~3.GIF-dead-26038054>
10534 .a. -rwxrwxrwx 0
0
29723506 <part2.img__S__S~1.7UB-dead-29723506>
68231 .a. -rwxrwxrwx 0
0
30191432 <part2.img_ITIES~2.HTM-dead-30191432>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
0 .a. -rwxrwxrwx 0
0
26038085 <part2.img__TPRO~1.GIF-dead-26038085>
Fri May 15 1998 20:39:38 4672 ..c -rwxrwxrwx 0
0
29723500
<part2.img-_AIN33.GIF-dead-29723500>
Fri May 15 1998 20:39:40 4672 m.. -rwxrwxrwx 0
0
29723500
<part2.img-_AIN33.GIF-dead-29723500>
Fri May 15 1998 20:39:44 10534 ..c -rwxrwxrwx 0
0
29723506
<part2.img-__S__S~1.7UB-dead-29723506>
Fri May 15 1998 20:39:46 10534 m.. -rwxrwxrwx 0
0
29723506
<part2.img-__S__S~1.7UB-dead-29723506>
Fri May 15 1998 20:39:56 3943 ..c -rwxrwxrwx 0
0
30191427
<part2.img-_HINESE2.GIF-dead-30191427>
Fri May 15 1998 20:39:58 3943 m.. -rwxrwxrwx 0
0
30191427
<part2.img-_HINESE2.GIF-dead-30191427>
Fri May 15 1998 20:40:30 68231 ..c -rwxrwxrwx 0
0
30191432
<part2.img-_ITIES~2.HTM-dead-30191432>
Fri May 15 1998 20:40:44 68231 m.. -rwxrwxrwx 0
0
30191432
<part2.img-_ITIES~2.HTM-dead-30191432>
Fri May 15 1998 20:43:40 10205 ..c -rwxrwxrwx 0
0
26038051
<part2.img-_C059802.GIF-dead-26038051>
Fri May 15 1998 20:43:42 10205 m.. -rwxrwxrwx 0
0
26038051
<part2.img-_C059802.GIF-dead-26038051>
Fri May 15 1998 20:44:30 6509 ..c -rwxrwxrwx 0
0
26038054
<part2.img-_ELLOW~3.GIF-dead-26038054>
Fri May 15 1998 20:44:32 6509 m.. -rwxrwxrwx 0
0
26038054
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
<part2.img-_ELLOW~3.GIF-dead-26038054>
Fri May 15 1998 20:44:50 9352 ..c -rwxrwxrwx 0
0
29723509
<part2.img-_EEDQU~1.GIF-dead-29723509>
Fri May 15 1998 20:44:56 9352 m.. -rwxrwxrwx 0
0
29723509
<part2.img-_EEDQU~1.GIF-dead-29723509>
Fri May 15 1998 20:46:04 3904 ..c -rwxrwxrwx 0
0
26038056
<part2.img-_AWH2B~1.HTM-dead-26038056>
Fri May 15 1998 20:46:06 3904 m.. -rwxrwxrwx 0
0
26038056
<part2.img-_AWH2B~1.HTM-dead-26038056>
Fri May 15 1998 20:46:20
79 ..c -rwxrwxrwx 0
0
30191440
<part2.img-_EFTAR~2.GIF-dead-30191440>
4293 ..c -rwxrwxrwx 0
0
30191442 <part2.img_IF(1).GIF-dead-30191442>
Fri May 15 1998 20:46:22
79 m.. -rwxrwxrwx 0
0
30191440
<part2.img-_EFTAR~2.GIF-dead-30191440>
4293 m.. -rwxrwxrwx 0
0
30191442 <part2.img_IF(1).GIF-dead-30191442>
Fri May 15 1998 20:46:24
79 ..c -rwxrwxrwx 0
0
29723512
<part2.img-_IGHTA~2.GIF-dead-29723512>
Fri May 15 1998 20:46:26
79 m.. -rwxrwxrwx 0
0
29723512
<part2.img-_IGHTA~2.GIF-dead-29723512>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Fri May 15 1998 20:46:32 4374 ..c -rwxrwxrwx 0
0
29723514
<part2.img-_IF(3).GIF-dead-29723514>
Fri May 15 1998 20:46:34 4374 m.. -rwxrwxrwx 0
0
29723514
<part2.img-_IF(3).GIF-dead-29723514>
Fri May 15 1998 20:48:50 4235 ..c -rwxrwxrwx 0
0
30191446
<part2.img-_ASSAU.GIF-dead-30191446>
Fri May 15 1998 20:48:52 4235 m.. -rwxrwxrwx 0
0
30191446
<part2.img-_ASSAU.GIF-dead-30191446>
Fri May 15 1998 20:48:56 2160 ..c -rwxrwxrwx 0
0
26038062
<part2.img-_I_BUTN.GIF-dead-26038062>
Fri May 15 1998 20:48:58 2160 m.. -rwxrwxrwx 0
0
26038062
<part2.img-_I_BUTN.GIF-dead-26038062>
Fri May 15 1998 20:49:50 23686 ..c -rwxrwxrwx 0
0
30191448
<part2.img-_T(6)~2.HTM-dead-30191448>
Fri May 15 1998 20:49:52 23686 m.. -rwxrwxrwx 0
0
30191448
<part2.img-_T(6)~2.HTM-dead-30191448>
Fri May 15 1998 20:49:54 6148 ..c -rwxrwxrwx 0
0
26038064
<part2.img-_1A999.GIF-dead-26038064>
Fri May 15 1998 20:49:56 6148 m.. -rwxrwxrwx 0
0
26038064
<part2.img-_1A999.GIF-dead-26038064>
Fri May 15 1998 20:50:48 6639 ..c -rwxrwxrwx 0
0
26038066
<part2.img-_T(3)~2.HTM-dead-26038066>
Fri May 15 1998 20:50:50 6639 m.. -rwxrwxrwx 0
0
26038066
<part2.img-_T(3)~2.HTM-dead-26038066>
Fri May 15 1998 21:31:16 16664 ..c -rwxrwxrwx 0
0
30191450
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
<part2.img-_UERY(~4.HTM-dead-30191450>
Fri May 15 1998 21:31:18 16664 m.. -rwxrwxrwx 0
0
30191450
<part2.img-_UERY(~4.HTM-dead-30191450>
Fri May 15 1998 21:31:20 1009 ..c -rwxrwxrwx 0
0
30191454
<part2.img-_ABS.GIF-dead-30191454>
Fri May 15 1998 21:31:22 1009 m.. -rwxrwxrwx 0
0
30191454
<part2.img-_ABS.GIF-dead-30191454>
Fri May 15 1998 21:31:58 1136 ..c -rwxrwxrwx 0
0
26038072
<part2.img-_ACK(2).GIF-dead-26038072>
Fri May 15 1998 21:32:00 1136 m.. -rwxrwxrwx 0
0
26038072
<part2.img-_ACK(2).GIF-dead-26038072>
1221 ..c -rwxrwxrwx 0
0
26038075 <part2.img_UTTON~2.GIF-dead-26038075>
1197 ..c -rwxrwxrwx 0
0
29723521 <part2.img_UTTON3.GIF-dead-29723521>
Fri May 15 1998 21:32:02 1197 m.. -rwxrwxrwx 0
0
29723521
<part2.img-_UTTON3.GIF-dead-29723521>
1221 m.. -rwxrwxrwx 0
0
26038075 <part2.img_UTTON~2.GIF-dead-26038075>
Fri May 15 1998 21:32:10 7384 ..c -rwxrwxrwx 0
0
30191462
<part2.img-_EARCH~6.HTM-dead-30191462>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Fri May 15 1998 21:32:12 7384 m.. -rwxrwxrwx 0
0
30191462
<part2.img-_EARCH~6.HTM-dead-30191462>
Fri May 15 1998 21:32:14
855 ..c -rwxrwxrwx 0
0
29723525
<part2.img-_OWERED1.GIF-dead-29723525>
1180 ..c -rwxrwxrwx 0
0
29723523 <part2.img-_VBLUE3.GIF-dead-29723523>
Fri May 15 1998 21:32:16
855 m.. -rwxrwxrwx 0
0
29723525
<part2.img-_OWERED1.GIF-dead-29723525>
1180 m.. -rwxrwxrwx 0
0
29723523 <part2.img-_VBLUE3.GIF-dead-29723523>
1944 ..c -rwxrwxrwx 0
0
30191467 <part2.img_D2.GIF-dead-30191467>
683 ..c -rwxrwxrwx 0
0
30191469 <part2.img_D1A.GIF-dead-30191469>
Fri May 15 1998 21:32:18 1944 m.. -rwxrwxrwx 0
0
30191467
<part2.img-_D2.GIF-dead-30191467>
683 m.. -rwxrwxrwx 0
0
30191469 <part2.img_D1A.GIF-dead-30191469>
Fri May 15 1998 21:32:20 3833 ..c -rwxrwxrwx 0
0
26038077
<part2.img-_D3.GIF-dead-26038077>
Fri May 15 1998 21:32:22
814 ..c -rwxrwxrwx 0
0
30191471
<part2.img-_IER.GIF-dead-30191471>
507 ..c -rwxrwxrwx 0
0
30191474 <part2.img_IGITA~1.GIF-dead-30191474>
3833 m.. -rwxrwxrwx 0
0
26038077 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
_D3.GIF-dead-26038077>
41 ..c -rwxrwxrwx 0
0
29723527 <part2.img_OTBLUE.GIF-dead-29723527>
697 ..c -rwxrwxrwx 0
0
26038080 <part2.img_RIP_L~1.GIF-dead-26038080>
Fri May 15 1998 21:32:24
814 m.. -rwxrwxrwx 0
0
30191471
<part2.img-_IER.GIF-dead-30191471>
507 m.. -rwxrwxrwx 0
0
30191474 <part2.img_IGITA~1.GIF-dead-30191474>
41 m.. -rwxrwxrwx 0
0
29723527 <part2.img_OTBLUE.GIF-dead-29723527>
697 m.. -rwxrwxrwx 0
0
26038080 <part2.img_RIP_L~1.GIF-dead-26038080>
Fri May 15 1998 21:32:28 2817 ..c -rwxrwxrwx 0
0
29723532
<part2.img-_V_1T_~1.GIF-dead-29723532>
Fri May 15 1998 21:32:30 2817 m.. -rwxrwxrwx 0
0
29723532
<part2.img-_V_1T_~1.GIF-dead-29723532>
252 ..c -rwxrwxrwx 0
0
26038082 <part2.img_LIGHT~1.HTM-dead-26038082>
Fri May 15 1998 21:32:32
252 m.. -rwxrwxrwx 0
0
26038082
<part2.img-_LIGHT~1.HTM-dead-26038082>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
43 ..c -rwxrwxrwx 0
0
30191476 <part2.img_QUARE.GIF-dead-30191476>
1382 ..c -rwxrwxrwx 0
0
29723529 <part2.img__BLANK.GIF-dead-29723529>
Fri May 15 1998 21:32:34
43 m.. -rwxrwxrwx 0
0
30191476
<part2.img-_QUARE.GIF-dead-30191476>
1382 m.. -rwxrwxrwx 0
0
29723529 <part2.img__BLANK.GIF-dead-29723529>
Fri May 15 1998 21:32:38 8384 ..c -rwxrwxrwx 0
0
30191478
<part2.img-_IRHIN~1.HTM-dead-30191478>
Fri May 15 1998 21:32:40 8384 m.. -rwxrwxrwx 0
0
30191478
<part2.img-_IRHIN~1.HTM-dead-30191478>
Fri May 15 1998 21:32:44 1415 ..c -rwxrwxrwx 0
0
30191480
<part2.img-__HELP~1.GIF-dead-30191480>
Fri May 15 1998 21:32:46 1415 m.. -rwxrwxrwx 0
0
30191480
<part2.img-__HELP~1.GIF-dead-30191480>
Fri May 15 1998 21:33:34 4094 ..c -rwxrwxrwx 0
0
30191483
<part2.img-_OGIN_~1.HTM-dead-30191483>
Fri May 15 1998 21:33:36 3255 ..c -rwxrwxrwx 0
0
29723538
<part2.img-__TPRO~1.GIF-dead-29723538>
0 ..c -rwxrwxrwx 0
0
26038085 <part2.img__TPRO~1.GIF-dead-26038085>
4094 m.. -rwxrwxrwx 0
0
30191483 <part2.img_OGIN_~1.HTM-dead-30191483>
Fri May 15 1998 21:33:38 3255 m.. -rwxrwxrwx 0
0
29723538
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
<part2.img-__TPRO~1.GIF-dead-29723538>
Fri May 15 1998 21:33:42
0 m.. -rwxrwxrwx 0
0
26038085
<part2.img-__TPRO~1.GIF-dead-26038085>
Fri May 15 1998 21:34:00 3204 ..c -rwxrwxrwx 0
0
30191486
<part2.img-__THEF~1.GIF-dead-30191486>
Fri May 15 1998 21:34:06 3204 m.. -rwxrwxrwx 0
0
30191486
<part2.img-__THEF~1.GIF-dead-30191486>
Fri May 15 1998 21:34:54 6751 ..c -rwxrwxrwx 0
0
30191465
<part2.img-_RAVEL~2.HTM-dead-30191465>
Fri May 15 1998 21:34:56 6751 m.. -rwxrwxrwx 0
0
30191465
<part2.img-_RAVEL~2.HTM-dead-30191465>
Fri May 15 1998 21:35:04 10332 ..c -rwxrwxrwx 0
0
30191498
<part2.img-_FINAL~1.HTM-dead-30191498>
Fri May 15 1998 21:35:06 10332 m.. -rwxrwxrwx 0
0
30191498
<part2.img-_FINAL~1.HTM-dead-30191498>
3961 ..c -rwxrwxrwx 0
0
29723542 <part2.img_TRV.GIF-dead-29723542>
Fri May 15 1998 21:35:10 3961 m.. -rwxrwxrwx 0
0
29723542
<part2.img-_TRV.GIF-dead-29723542>
Fri May 15 1998 21:37:04 2129 ..c -rwxrwxrwx 0
0
29723544
<part2.img-_ECTLI~1.HTM-dead-29723544>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Fri May 15 1998 21:37:06 2129 m.. -rwxrwxrwx 0
0
29723544
<part2.img-_ECTLI~1.HTM-dead-29723544>
Fri May 15 1998 21:39:50 2041 ..c -rwxrwxrwx 0
0
26038089
<part2.img-_A3WBC~1.HTM-dead-26038089>
Fri May 15 1998 21:39:52 2041 m.. -rwxrwxrwx 0
0
26038089
<part2.img-_A3WBC~1.HTM-dead-26038089>
Sun May 17 1998 00:00:00 1204 .a. -rwxrwxrwx 0
0
29723639
<part2.img-_ARKWA~1.GIF-dead-29723639>
8426 .a. -rwxrwxrwx 0
0
30191595 <part2.img_ELCOME5.GIF-dead-30191595>
2780 .a. -rwxrwxrwx 0
0
29723558 <part2.img_EARCH~8.HTM-dead-29723558>
6509 .a. -rwxrwxrwx 0
0
26038098 <part2.img_ELLOW~3.GIF-dead-26038098>
10510 .a. -rwxrwxrwx 0
0
29723552 <part2.img__S__S~1.HTM-dead-29723552>
Sun May 17 1998 15:50:58 10510 ..c -rwxrwxrwx 0
0
29723552
<part2.img-__S__S~1.HTM-dead-29723552>
Sun May 17 1998 15:51:00 10510 m.. -rwxrwxrwx 0
0
29723552
<part2.img-__S__S~1.HTM-dead-29723552>
Sun May 17 1998 15:53:28 9634 ..c -rwxrwxrwx 0
0
19037658
<part2.img-_ET_LO~1.HTM-dead-19037658>
Sun May 17 1998 15:53:34 9634 m.. -rwxrwxrwx 0
0
19037658
<part2.img-_ET_LO~1.HTM-dead-19037658>
Sun May 17 1998 15:53:56 6509 ..c -rwxrwxrwx 0
0
26038098
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
<part2.img-_ELLOW~3.GIF-dead-26038098>
Sun May 17 1998 15:53:58 6509 m.. -rwxrwxrwx 0
0
26038098
<part2.img-_ELLOW~3.GIF-dead-26038098>
Sun May 17 1998 15:55:10 3929 ..c -rwxrwxrwx 0
0
26038097
<part2.img-_ACP4N~1.HTM-dead-26038097>
Sun May 17 1998 15:55:12 3929 m.. -rwxrwxrwx 0
0
26038097
<part2.img-_ACP4N~1.HTM-dead-26038097>
Sun May 17 1998 15:55:16 15628 ..c -rwxrwxrwx 0
0
30191425
<part2.img-_AGD6N~1.HTM-dead-30191425>
Sun May 17 1998 15:55:18 15628 m.. -rwxrwxrwx 0
0
30191425
<part2.img-_AGD6N~1.HTM-dead-30191425>
Sun May 17 1998 15:57:02 2780 ..c -rwxrwxrwx 0
0
29723558
<part2.img-_EARCH~8.HTM-dead-29723558>
Sun May 17 1998 15:57:04 2780 m.. -rwxrwxrwx 0
0
29723558
<part2.img-_EARCH~8.HTM-dead-29723558>
Sun May 17 1998 15:57:12
423 ..c -rwxrwxrwx 0
0
26038053
<part2.img-_1.GIF-dead-26038053>
Sun May 17 1998 15:57:14
423 m.. -rwxrwxrwx 0
0
26038053
<part2.img-_1.GIF-dead-26038053>
Sun May 17 1998 15:58:30 20814 ..c -rwxrwxrwx 0
0
26038102
<part2.img-_RAVEL~1.HTM-dead-26038102>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Sun May 17 1998 15:58:34
673 ..c -rwxrwxrwx 0
0
26038105
<part2.img-_ETMAI~1.GIF-dead-26038105>
649 ..c -rwxrwxrwx 0
0
30191510 <part2.img_ETFIN~1.GIF-dead-30191510>
995 ..c -rwxrwxrwx 0
0
30191507 <part2.img_OLLOGO.GIF-dead-30191507>
20814 m.. -rwxrwxrwx 0
0
26038102 <part2.img_RAVEL~1.HTM-dead-26038102>
Sun May 17 1998 15:58:36
673 m.. -rwxrwxrwx 0
0
26038105
<part2.img-_ETMAI~1.GIF-dead-26038105>
995 m.. -rwxrwxrwx 0
0
30191507 <part2.img_OLLOGO.GIF-dead-30191507>
649 m.. -rwxrwxrwx 0
0
30191510 <part2.img_ETFIN~1.GIF-dead-30191510>
Sun May 17 1998 15:58:38 7090 ..c -rwxrwxrwx 0
0
26038108
<part2.img-_SIEBU~1.GIF-dead-26038108>
49 ..c -rwxrwxrwx 0
0
30191512 <part2.img_RANSPIX.GIF-dead-30191512>
Sun May 17 1998 15:58:40
49 m.. -rwxrwxrwx 0
0
30191512
<part2.img-_RANSPIX.GIF-dead-30191512>
7090 m.. -rwxrwxrwx 0
0
26038108 <part2.img_SIEBU~1.GIF-dead-26038108>
Sun May 17 1998 15:58:50 1095 ..c -rwxrwxrwx 0
0
29723560
<part2.img-_ETFIND.GIF-dead-29723560>
Sun May 17 1998 15:58:52 1095 m.. -rwxrwxrwx 0
0
29723560
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
<part2.img-_ETFIND.GIF-dead-29723560>
Sun May 17 1998 15:59:12 5419 ..c -rwxrwxrwx 0
0
30191515
<part2.img-_ONFBA~1.GIF-dead-30191515>
Sun May 17 1998 15:59:14
953 ..c -rwxrwxrwx 0
0
26038110
<part2.img-_ARCOLR3.GIF-dead-26038110>
1561 ..c -rwxrwxrwx 0
0
29723565 <part2.img_XCOLOR3.GIF-dead-29723565>
Sun May 17 1998 15:59:16 5419 m.. -rwxrwxrwx 0
0
30191515
<part2.img-_ONFBA~1.GIF-dead-30191515>
1561 m.. -rwxrwxrwx 0
0
29723565 <part2.img_XCOLOR3.GIF-dead-29723565>
953 m.. -rwxrwxrwx 0
0
26038110 <part2.img_ARCOLR3.GIF-dead-26038110>
Sun May 17 1998 15:59:18
911 ..c -rwxrwxrwx 0
0
30191519
<part2.img-_RIICON.GIF-dead-30191519>
910 ..c -rwxrwxrwx 0
0
30191517 <part2.img_ELECTSM.GIF-dead-30191517>
Sun May 17 1998 15:59:20 1022 ..c -rwxrwxrwx 0
0
29723569
<part2.img-_UNSPRSM.GIF-dead-29723569>
911 m.. -rwxrwxrwx 0
0
30191519 <part2.img_RIICON.GIF-dead-30191519>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
910 m.. -rwxrwxrwx 0
0
30191517 <part2.img_ELECTSM.GIF-dead-30191517>
Sun May 17 1998 15:59:22 1022 m.. -rwxrwxrwx 0
0
29723569
<part2.img-_UNSPRSM.GIF-dead-29723569>
Sun May 17 1998 15:59:42 2905 ..c -rwxrwxrwx 0
0
30191521
<part2.img-_SSTAT~1.HTM-dead-30191521>
Sun May 17 1998 15:59:44 2905 m.. -rwxrwxrwx 0
0
30191521
<part2.img-_SSTAT~1.HTM-dead-30191521>
Sun May 17 1998 16:00:06 3367 ..c -rwxrwxrwx 0
0
26038113
<part2.img-_EARCH~8.HTM-dead-26038113>
Sun May 17 1998 16:00:08 1104 ..c -rwxrwxrwx 0
0
26038115
<part2.img-_ITY.GIF-dead-26038115>
874 ..c -rwxrwxrwx 0
0
29723571 <part2.img_SPACE.GIF-dead-29723571>
3367 m.. -rwxrwxrwx 0
0
26038113 <part2.img_EARCH~8.HTM-dead-26038113>
Sun May 17 1998 16:00:10 1104 m.. -rwxrwxrwx 0
0
26038115
<part2.img-_ITY.GIF-dead-26038115>
874 m.. -rwxrwxrwx 0
0
29723571 <part2.img_SPACE.GIF-dead-29723571>
Sun May 17 1998 16:01:06 1962 ..c -rwxrwxrwx 0
0
26038118
<part2.img-_ROWNE~1.HTM-dead-26038118>
Sun May 17 1998 16:01:08 1962 m.. -rwxrwxrwx 0
0
26038118
<part2.img-_ROWNE~1.HTM-dead-26038118>
Sun May 17 1998 16:01:18 1949 ..c -rwxrwxrwx 0
0
26038122
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
<part2.img-_ROMOS.GIF-dead-26038122>
Sun May 17 1998 16:01:22 1949 m.. -rwxrwxrwx 0
0
26038122
<part2.img-_ROMOS.GIF-dead-26038122>
Sun May 17 1998 16:02:08
234 ..c -rwxrwxrwx 0
0
26038124
<part2.img-_OP~1.HTM-dead-26038124>
Sun May 17 1998 16:02:10 2363 ..c -rwxrwxrwx 0
0
30191525
<part2.img-_IGHT~2.HTM-dead-30191525>
234 m.. -rwxrwxrwx 0
0
26038124 <part2.img_OP~1.HTM-dead-26038124>
1685 ..c -rwxrwxrwx 0
0
26038126 <part2.img_EFT~1.HTM-dead-26038126>
Sun May 17 1998 16:02:12 1238 ..c -rwxrwxrwx 0
0
30191527
<part2.img-_LOBE.GIF-dead-30191527>
1048 ..c -rwxrwxrwx 0
0
29723575 <part2.img_ROMOS.GIF-dead-29723575>
1685 m.. -rwxrwxrwx 0
0
26038126 <part2.img_EFT~1.HTM-dead-26038126>
58 ..c -rwxrwxrwx 0
0
29723573 <part2.img_LUE.GIF-dead-29723573>
2363 m.. -rwxrwxrwx 0
0
30191525 <part2.img_IGHT~2.HTM-dead-30191525>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Sun May 17 1998 16:02:14 1238 m.. -rwxrwxrwx 0
0
30191527
<part2.img-_LOBE.GIF-dead-30191527>
58 m.. -rwxrwxrwx 0
0
29723573 <part2.img_LUE.GIF-dead-29723573>
1379 ..c -rwxrwxrwx 0
0
30191529 <part2.img_EETING.GIF-dead-30191529>
1048 m.. -rwxrwxrwx 0
0
29723575 <part2.img_ROMOS.GIF-dead-29723575>
Sun May 17 1998 16:02:16 3116 ..c -rwxrwxrwx 0
0
29723577
<part2.img-_UMP.GIF-dead-29723577>
1379 m.. -rwxrwxrwx 0
0
30191529 <part2.img_EETING.GIF-dead-30191529>
1183 ..c -rwxrwxrwx 0
0
29723579 <part2.img_FFICE.GIF-dead-29723579>
821 ..c -rwxrwxrwx 0
0
26038128 <part2.img_ILES.GIF-dead-26038128>
1119 ..c -rwxrwxrwx 0
0
30191531 <part2.img_FFERS.GIF-dead-30191531>
Sun May 17 1998 16:02:18 1183 m.. -rwxrwxrwx 0
0
29723579
<part2.img-_FFICE.GIF-dead-29723579>
3116 m.. -rwxrwxrwx 0
0
29723577 <part2.img_UMP.GIF-dead-29723577>
821 m.. -rwxrwxrwx 0
0
26038128 <part2.img_ILES.GIF-dead-26038128>
1139 ..c -rwxrwxrwx 0
0
30191533 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
_EWS(1).GIF-dead-30191533>
1119 m.. -rwxrwxrwx 0
0
30191531 <part2.img_FFERS.GIF-dead-30191531>
Sun May 17 1998 16:02:20 1139 m.. -rwxrwxrwx 0
0
30191533
<part2.img-_EWS(1).GIF-dead-30191533>
6168 ..c -rwxrwxrwx 0
0
30191535 <part2.img_OWARD.GIF-dead-30191535>
Sun May 17 1998 16:02:22 6168 m.. -rwxrwxrwx 0
0
30191535
<part2.img-_OWARD.GIF-dead-30191535>
Sun May 17 1998 16:02:26 8304 ..c -rwxrwxrwx 0
0
30191537
<part2.img-_ES~2.HTM-dead-30191537>
Sun May 17 1998 16:02:28 8304 m.. -rwxrwxrwx 0
0
30191537
<part2.img-_ES~2.HTM-dead-30191537>
1872 ..c -rwxrwxrwx 0
0
29723581 <part2.img_ESBAK.GIF-dead-29723581>
Sun May 17 1998 16:02:30 2956 ..c -rwxrwxrwx 0
0
29723585
<part2.img-_OOKIT.GIF-dead-29723585>
321 ..c -rwxrwxrwx 0
0
29723583 <part2.img_ULLET.GIF-dead-29723583>
1872 m.. -rwxrwxrwx 0
0
29723581 <part2.img_ESBAK.GIF-dead-29723581>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Sun May 17 1998 16:02:32
321 m.. -rwxrwxrwx 0
0
29723583
<part2.img-_ULLET.GIF-dead-29723583>
2956 m.. -rwxrwxrwx 0
0
29723585 <part2.img_OOKIT.GIF-dead-29723585>
Sun May 17 1998 16:02:40 1100 ..c -rwxrwxrwx 0
0
29723587
<part2.img-_OJOLO~1.HTM-dead-29723587>
Sun May 17 1998 16:02:42 2002 ..c -rwxrwxrwx 0
0
30191539
<part2.img-_OOK-FOR.GIF-dead-30191539>
1100 m.. -rwxrwxrwx 0
0
29723587 <part2.img_OJOLO~1.HTM-dead-29723587>
Sun May 17 1998 16:02:44 2002 m.. -rwxrwxrwx 0
0
30191539
<part2.img-_OOK-FOR.GIF-dead-30191539>
Sun May 17 1998 16:03:04 2848 ..c -rwxrwxrwx 0
0
30191543
<part2.img-_OJO_U~1.HTM-dead-30191543>
Sun May 17 1998 16:03:06 2848 m.. -rwxrwxrwx 0
0
30191543
<part2.img-_OJO_U~1.HTM-dead-30191543>
Sun May 17 1998 16:03:18 3474 ..c -rwxrwxrwx 0
0
29723589
<part2.img-_OJO_N~1.HTM-dead-29723589>
Sun May 17 1998 16:03:20 5178 ..c -rwxrwxrwx 0
0
30191545
<part2.img-_YMAP.GIF-dead-30191545>
3474 m.. -rwxrwxrwx 0
0
29723589 <part2.img_OJO_N~1.HTM-dead-29723589>
Sun May 17 1998 16:03:22 5178 m.. -rwxrwxrwx 0
0
30191545
<part2.img-_YMAP.GIF-dead-30191545>
Sun May 17 1998 16:03:38 3101 ..c -rwxrwxrwx 0
0
29723591
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
<part2.img-_SCAPE.GIF-dead-29723591>
Sun May 17 1998 16:03:40 4087 ..c -rwxrwxrwx 0
0
26038131
<part2.img-_SCAPE~1.GIF-dead-26038131>
2018 ..c -rwxrwxrwx 0
0
30191549 <part2.img_M_HOW~1.GIF-dead-30191549>
Sun May 17 1998 16:03:42 2018 m.. -rwxrwxrwx 0
0
30191549
<part2.img-_M_HOW~1.GIF-dead-30191549>
Sun May 17 1998 16:03:44 3101 m.. -rwxrwxrwx 0
0
29723591
<part2.img-_SCAPE.GIF-dead-29723591>
99 ..c -rwxrwxrwx 0
0
26038134 <part2.img_RANSP~1.GIF-dead-26038134>
4087 m.. -rwxrwxrwx 0
0
26038131 <part2.img_SCAPE~1.GIF-dead-26038131>
Sun May 17 1998 16:03:46 1758 ..c -rwxrwxrwx 0
0
30191551
<part2.img-_M_PHOTO.GIF-dead-30191551>
99 m.. -rwxrwxrwx 0
0
26038134 <part2.img_RANSP~1.GIF-dead-26038134>
Sun May 17 1998 16:03:48 1758 m.. -rwxrwxrwx 0
0
30191551
<part2.img-_M_PHOTO.GIF-dead-30191551>
Sun May 17 1998 16:04:34 1428 ..c -rwxrwxrwx 0
0
30191553
<part2.img-_INKS1.GIF-dead-30191553>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Sun May 17 1998 16:04:36 1428 m.. -rwxrwxrwx 0
0
30191553
<part2.img-_INKS1.GIF-dead-30191553>
1408 ..c -rwxrwxrwx 0
0
26038136 <part2.img_INKS2.GIF-dead-26038136>
Sun May 17 1998 16:04:38 1408 m.. -rwxrwxrwx 0
0
26038136
<part2.img-_INKS2.GIF-dead-26038136>
Sun May 17 1998 16:04:48
450 ..c -rwxrwxrwx 0
0
29723595
<part2.img-_FRAME~1.HTM-dead-29723595>
497 ..c -rwxrwxrwx 0
0
26038139 <part2.img_XPEDI~1.GIF-dead-26038139>
Sun May 17 1998 16:04:50 1589 ..c -rwxrwxrwx 0
0
29723602
<part2.img-_HOPPI~1.GIF-dead-29723602>
450 m.. -rwxrwxrwx 0
0
29723595 <part2.img_FRAME~1.HTM-dead-29723595>
497 m.. -rwxrwxrwx 0
0
26038139 <part2.img_XPEDI~1.GIF-dead-26038139>
Sun May 17 1998 16:04:52 1589 m.. -rwxrwxrwx 0
0
29723602
<part2.img-_HOPPI~1.GIF-dead-29723602>
Sun May 17 1998 16:04:54 1372 ..c -rwxrwxrwx 0
0
30191556
<part2.img-_IZARD~1.GIF-dead-30191556>
Sun May 17 1998 16:04:56 1372 m.. -rwxrwxrwx 0
0
30191556
<part2.img-_IZARD~1.GIF-dead-30191556>
Sun May 17 1998 16:05:12 1247 ..c -rwxrwxrwx 0
0
29723597
<part2.img-_6.GIF-dead-29723597>
Sun May 17 1998 16:05:14 1247 m.. -rwxrwxrwx 0
0
29723597
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
<part2.img-_6.GIF-dead-29723597>
413 ..c -rwxrwxrwx 0
0
26038143 <part2.img_OTICON.GIF-dead-26038143>
Sun May 17 1998 16:05:16
96 ..c -rwxrwxrwx 0
0
30191560
<part2.img-_IDS.GIF-dead-30191560>
124 ..c -rwxrwxrwx 0
0
30191558 <part2.img_ESTRANT.GIF-dead-30191558>
413 m.. -rwxrwxrwx 0
0
26038143 <part2.img_OTICON.GIF-dead-26038143>
86 ..c -rwxrwxrwx 0
0
26038147 <part2.img_ANDICAP.GIF-dead-26038147>
133 ..c -rwxrwxrwx 0
0
26038151 <part2.img_WIM.GIF-dead-26038151>
100 ..c -rwxrwxrwx 0
0
26038149 <part2.img_ITNESS.GIF-dead-26038149>
90 ..c -rwxrwxrwx 0
0
26038145 <part2.img_OSMOKE.GIF-dead-26038145>
Sun May 17 1998 16:05:18 1082 ..c -rwxrwxrwx 0
0
30191562
<part2.img-_TTALIAS.GIF-dead-30191562>
133 m.. -rwxrwxrwx 0
0
26038151 <part2.img_WIM.GIF-dead-26038151>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
100 m.. -rwxrwxrwx 0
0
26038149 <part2.img_ITNESS.GIF-dead-26038149>
96 m.. -rwxrwxrwx 0
0
30191560 <part2.img_IDS.GIF-dead-30191560>
86 m.. -rwxrwxrwx 0
0
26038147 <part2.img_ANDICAP.GIF-dead-26038147>
124 m.. -rwxrwxrwx 0
0
30191558 <part2.img_ESTRANT.GIF-dead-30191558>
712 ..c -rwxrwxrwx 0
0
29723604 <part2.img_XPLOGOP.GIF-dead-29723604>
260 ..c -rwxrwxrwx 0
0
29723599 <part2.img_ANCEL.GIF-dead-29723599>
90 m.. -rwxrwxrwx 0
0
26038145 <part2.img_OSMOKE.GIF-dead-26038145>
Sun May 17 1998 16:05:20
260 m.. -rwxrwxrwx 0
0
29723599
<part2.img-_ANCEL.GIF-dead-29723599>
712 m.. -rwxrwxrwx 0
0
29723604 <part2.img_XPLOGOP.GIF-dead-29723604>
1082 m.. -rwxrwxrwx 0
0
30191562 <part2.img_TTALIAS.GIF-dead-30191562>
Sun May 17 1998 16:06:08
426 ..c -rwxrwxrwx 0
0
29723606
<part2.img-_RRICON.GIF-dead-29723606>
Sun May 17 1998 16:06:10
426 m.. -rwxrwxrwx 0
0
29723606
<part2.img-_RRICON.GIF-dead-29723606>
Sun May 17 1998 16:07:22 1094 ..c -rwxrwxrwx 0
0
26038141
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
<part2.img-_TA~1.HTM-dead-26038141>
Sun May 17 1998 16:07:24 1663 ..c -rwxrwxrwx 0
0
26038153
<part2.img-_TA(1)~2.HTM-dead-26038153>
1094 m.. -rwxrwxrwx 0
0
26038141 <part2.img_TA~1.HTM-dead-26038141>
855 ..c -rwxrwxrwx 0
0
30191564 <part2.img_TA~1.HTM-dead-30191564>
Sun May 17 1998 16:07:26 1663 m.. -rwxrwxrwx 0
0
26038153
<part2.img-_TA(1)~2.HTM-dead-26038153>
855 m.. -rwxrwxrwx 0
0
30191564 <part2.img_TA~1.HTM-dead-30191564>
Sun May 17 1998 16:07:28 2400 ..c -rwxrwxrwx 0
0
29723608
<part2.img-_6.GIF-dead-29723608>
298 ..c -rwxrwxrwx 0
0
26038155 <part2.img_OTLICON.GIF-dead-26038155>
Sun May 17 1998 16:07:30
298 m.. -rwxrwxrwx 0
0
26038155
<part2.img-_OTLICON.GIF-dead-26038155>
1548 ..c -rwxrwxrwx 0
0
30191566 <part2.img_15.GIF-dead-30191566>
2400 m.. -rwxrwxrwx 0
0
29723608 <part2.img_6.GIF-dead-29723608>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Sun May 17 1998 16:07:32 1548 m.. -rwxrwxrwx 0
0
30191566
<part2.img-_15.GIF-dead-30191566>
Sun May 17 1998 16:07:48 5679 ..c -rwxrwxrwx 0
0
29723610
<part2.img-_TA~1.HTM-dead-29723610>
Sun May 17 1998 16:07:50 5679 m.. -rwxrwxrwx 0
0
29723610
<part2.img-_TA~1.HTM-dead-29723610>
Sun May 17 1998 16:07:56
165 ..c -rwxrwxrwx 0
0
29723616
<part2.img-_UMMARY.GIF-dead-29723616>
145 ..c -rwxrwxrwx 0
0
29723614 <part2.img_OTLMARK.GIF-dead-29723614>
Sun May 17 1998 16:07:58
145 m.. -rwxrwxrwx 0
0
29723614
<part2.img-_OTLMARK.GIF-dead-29723614>
332 ..c -rwxrwxrwx 0
0
29723618 <part2.img_AP.GIF-dead-29723618>
165 m.. -rwxrwxrwx 0
0
29723616 <part2.img_UMMARY.GIF-dead-29723616>
Sun May 17 1998 16:08:00
332 m.. -rwxrwxrwx 0
0
29723618
<part2.img-_AP.GIF-dead-29723618>
Sun May 17 1998 16:08:20 15674 ..c -rwxrwxrwx 0
0
26038158
<part2.img-_ED_AN~1.HTM-dead-26038158>
Sun May 17 1998 16:08:24
144 ..c -rwxrwxrwx 0
0
26038161
<part2.img-_ELECT~1.GIF-dead-26038161>
15674 m.. -rwxrwxrwx 0
0
26038158 <part2.img_ED_AN~1.HTM-dead-26038158>
110 ..c -rwxrwxrwx 0
0
30191568 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5 06E4 A169 4E46
_ELECT.GIF-dead-30191568>
Sun May 17 1998 16:08:26
110 m.. -rwxrwxrwx 0
0
30191568
<part2.img-_ELECT.GIF-dead-30191568>
144 m.. -rwxrwxrwx 0
0
26038161 <part2.img_ELECT~1.GIF-dead-26038161>
Sun May 17 1998 16:08:36
263 ..c -rwxrwxrwx 0
0
30191570
<part2.img-_EMOTE~2.HTM-dead-30191570>
Sun May 17 1998 16:08:38
263 m.. -rwxrwxrwx 0
0
30191570
<part2.img-_EMOTE~2.HTM-dead-30191570>
4162 ..c -rwxrwxrwx 0
0
29723625 <part2.img_RONTP~1.HTM-dead-29723625>
Sun May 17 1998 16:08:40 4162 m.. -rwxrwxrwx 0
0
29723625
<part2.img-_RONTP~1.HTM-dead-29723625>
Sun May 17 1998 16:08:50 8202 ..c -rwxrwxrwx 0
0
26038163
<part2.img-_REATE.GIF-dead-26038163>
Sun May 17 1998 16:08:56 8202 m.. -rwxrwxrwx 0
0
26038163
<part2.img-_REATE.GIF-dead-26038163>
Sun May 17 1998 16:09:14
987 ..c -rwxrwxrwx 0
0
26038166
<part2.img-_EARCH~9.HTM-dead-26038166>
Sun May 17 1998 16:09:16
987 m.. -rwxrwxrwx 0
0
26038166
<part2.img-_EARCH~9.HTM-dead-26038166>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Sun May 17 1998 16:09:32 8808 ..c -rwxrwxrwx 0
0
29723593
<part2.img-_ONSAD~1.HTM-dead-29723593>
Sun May 17 1998 16:09:34 8808 m.. -rwxrwxrwx 0
0
29723593
<part2.img-_ONSAD~1.HTM-dead-29723593>
Sun May 17 1998 16:09:36 4580 ..c -rwxrwxrwx 0
0
26038168
<part2.img-_TCLOGO.GIF-dead-26038168>
Sun May 17 1998 16:09:38 4580 m.. -rwxrwxrwx 0
0
26038168
<part2.img-_TCLOGO.GIF-dead-26038168>
1705 ..c -rwxrwxrwx 0
0
30191572 <part2.img_AGELLAN.GIF-dead-30191572>
Sun May 17 1998 16:09:40
219 ..c -rwxrwxrwx 0
0
26038172
<part2.img-_SIDE.GIF-dead-26038172>
5767 ..c -rwxrwxrwx 0
0
26038170 <part2.img_SIDEBAR.GIF-dead-26038170>
1705 m.. -rwxrwxrwx 0
0
30191572 <part2.img_AGELLAN.GIF-dead-30191572>
Sun May 17 1998 16:09:42 2743 ..c -rwxrwxrwx 0
0
26038174
<part2.img-_MAPIC~1.JPE-dead-26038174>
219 m.. -rwxrwxrwx 0
0
26038172 <part2.img_SIDE.GIF-dead-26038172>
5767 m.. -rwxrwxrwx 0
0
26038170 <part2.img_SIDEBAR.GIF-dead-26038170>
Sun May 17 1998 16:09:44 2743 m.. -rwxrwxrwx 0
0
26038174
<part2.img-_MAPIC~1.JPE-dead-26038174>
Sun May 17 1998 16:09:52
51 ..c -rwxrwxrwx 0
0
30191574
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
<part2.img-_03V192.GIF-dead-30191574>
981 ..c -rwxrwxrwx 0
0
26038176 <part2.img_YMAPUS.GIF-dead-26038176>
600 ..c -rwxrwxrwx 0
0
30191576 <part2.img_YMAPC.GIF-dead-30191576>
1288 ..c -rwxrwxrwx 0
0
29723627 <part2.img_NSLOGOS.GIF-dead-29723627>
Sun May 17 1998 16:09:54
51 m.. -rwxrwxrwx 0
0
30191574
<part2.img-_03V192.GIF-dead-30191574>
1288 m.. -rwxrwxrwx 0
0
29723627 <part2.img_NSLOGOS.GIF-dead-29723627>
600 m.. -rwxrwxrwx 0
0
30191576 <part2.img_YMAPC.GIF-dead-30191576>
585 ..c -rwxrwxrwx 0
0
29723629 <part2.img_YMAPF.GIF-dead-29723629>
578 ..c -rwxrwxrwx 0
0
30191578 <part2.img_YMAPG.GIF-dead-30191578>
583 ..c -rwxrwxrwx 0
0
26038178 <part2.img_YMAPH.GIF-dead-26038178>
981 m.. -rwxrwxrwx 0
0
26038176 <part2.img_YMAPUS.GIF-dead-26038176>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Sun May 17 1998 16:09:56
546 ..c -rwxrwxrwx 0
0
30191580
<part2.img-_YMAPK.GIF-dead-30191580>
583 m.. -rwxrwxrwx 0
0
26038178 <part2.img_YMAPH.GIF-dead-26038178>
578 m.. -rwxrwxrwx 0
0
30191578 <part2.img_YMAPG.GIF-dead-30191578>
558 ..c -rwxrwxrwx 0
0
29723631 <part2.img_YMAPJ.GIF-dead-29723631>
585 m.. -rwxrwxrwx 0
0
29723629 <part2.img_YMAPF.GIF-dead-29723629>
Sun May 17 1998 16:09:58
546 m.. -rwxrwxrwx 0
0
30191580
<part2.img-_YMAPK.GIF-dead-30191580>
558 m.. -rwxrwxrwx 0
0
29723631 <part2.img_YMAPJ.GIF-dead-29723631>
Sun May 17 1998 16:12:00 4831 ..c -rwxrwxrwx 0
0
30191584
<part2.img-_YA350~1.HTM-dead-30191584>
Sun May 17 1998 16:12:02 4831 m.. -rwxrwxrwx 0
0
30191584
<part2.img-_YA350~1.HTM-dead-30191584>
Sun May 17 1998 16:12:18 2941 ..c -rwxrwxrwx 0
0
26038182
<part2.img-_YL650~1.HTM-dead-26038182>
Sun May 17 1998 16:12:20 2941 m.. -rwxrwxrwx 0
0
26038182
<part2.img-_YL650~1.HTM-dead-26038182>
Sun May 17 1998 16:13:14 6861 ..c -rwxrwxrwx 0
0
30191586
<part2.img-_BSOLU~1.HTM-dead-30191586>
Sun May 17 1998 16:13:20 6861 m.. -rwxrwxrwx 0
0
30191586
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
<part2.img-_BSOLU~1.HTM-dead-30191586>
Sun May 17 1998 16:13:28 1404 ..c -rwxrwxrwx 0
0
26038185
<part2.img-_BSOLU~1.GIF-dead-26038185>
Sun May 17 1998 16:13:30 1404 m.. -rwxrwxrwx 0
0
26038185
<part2.img-_BSOLU~1.GIF-dead-26038185>
Sun May 17 1998 16:13:50 1392 ..c -rwxrwxrwx 0
0
26038188
<part2.img-_ROWSE~1.GIF-dead-26038188>
Sun May 17 1998 16:13:52 1392 m.. -rwxrwxrwx 0
0
26038188
<part2.img-_ROWSE~1.GIF-dead-26038188>
Sun May 17 1998 16:13:56 1359 ..c -rwxrwxrwx 0
0
26038191
<part2.img-_BSOLU~2.GIF-dead-26038191>
Sun May 17 1998 16:14:14 1359 m.. -rwxrwxrwx 0
0
26038191
<part2.img-_BSOLU~2.GIF-dead-26038191>
Sun May 17 1998 16:16:42 1710 ..c -rwxrwxrwx 0
0
30191590
<part2.img-_OPSITE.GIF-dead-30191590>
Sun May 17 1998 16:16:44 1710 m.. -rwxrwxrwx 0
0
30191590
<part2.img-_OPSITE.GIF-dead-30191590>
Sun May 17 1998 16:16:48 1204 ..c -rwxrwxrwx 0
0
29723639
<part2.img-_ARKWA~1.GIF-dead-29723639>
Sun May 17 1998 16:16:50 1204 m.. -rwxrwxrwx 0
0
29723639
<part2.img-_ARKWA~1.GIF-dead-29723639>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Sun May 17 1998 16:17:30 4739 ..c -rwxrwxrwx 0
0
30191592
<part2.img-_ALL5_~1.JPE-dead-30191592>
Sun May 17 1998 16:17:32 8426 ..c -rwxrwxrwx 0
0
30191595
<part2.img-_ELCOME5.GIF-dead-30191595>
4739 m.. -rwxrwxrwx 0
0
30191592 <part2.img_ALL5_~1.JPE-dead-30191592>
Sun May 17 1998 16:17:38 2731 ..c -rwxrwxrwx 0
0
29723641
<part2.img-_NNDIR~1.JPE-dead-29723641>
Sun May 17 1998 16:17:40 2731 m.. -rwxrwxrwx 0
0
29723641
<part2.img-_NNDIR~1.JPE-dead-29723641>
2919 ..c -rwxrwxrwx 0
0
26038195 <part2.img_ORBES~1.JPE-dead-26038195>
Sun May 17 1998 16:17:42 2919 m.. -rwxrwxrwx 0
0
26038195
<part2.img-_ORBES~1.JPE-dead-26038195>
8426 m.. -rwxrwxrwx 0
0
30191595 <part2.img_ELCOME5.GIF-dead-30191595>
Sun May 17 1998 16:17:48
536 ..c -rwxrwxrwx 0
0
30191597
<part2.img-_OLDBALL.GIF-dead-30191597>
Sun May 17 1998 16:17:50
536 m.. -rwxrwxrwx 0
0
30191597
<part2.img-_OLDBALL.GIF-dead-30191597>
Thu Jun 18 1998 00:00:00 11124 .a. -rwxrwxrwx 0
0
26038248
<part2.img-_EFT_I~2.HTM-dead-26038248>
261 .a. -rwxrwxrwx 0
0
10837571 <part2.img_NIM01~2.HTM-dead-10837571>
Thu Jun 18 1998 21:29:04 2910 ..c -rwxrwxrwx 0
0
26038193
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
<part2.img-_G.GIF-dead-26038193>
Thu Jun 18 1998 21:29:06 2910 m.. -rwxrwxrwx 0
0
26038193
<part2.img-_G.GIF-dead-26038193>
1392 ..c -rwxrwxrwx 0
0
26038197 <part2.img_REETING.GIF-dead-26038197>
Thu Jun 18 1998 21:29:08 1392 m.. -rwxrwxrwx 0
0
26038197
<part2.img-_REETING.GIF-dead-26038197>
Thu Jun 18 1998 21:29:10 4061 ..c -rwxrwxrwx 0
0
30191599
<part2.img-_ELCOME4.GIF-dead-30191599>
Thu Jun 18 1998 21:29:12 4184 ..c -rwxrwxrwx 0
0
26038200
<part2.img-_IN_PR~1.GIF-dead-26038200>
Thu Jun 18 1998 21:29:14 4061 m.. -rwxrwxrwx 0
0
30191599
<part2.img-_ELCOME4.GIF-dead-30191599>
Thu Jun 18 1998 21:29:18 4184 m.. -rwxrwxrwx 0
0
26038200
<part2.img-_IN_PR~1.GIF-dead-26038200>
Thu Jun 18 1998 21:29:22 3708 ..c -rwxrwxrwx 0
0
30191602
<part2.img-_IN_CA~1.GIF-dead-30191602>
Thu Jun 18 1998 21:29:24 3708 m.. -rwxrwxrwx 0
0
30191602
<part2.img-_IN_CA~1.GIF-dead-30191602>
3964 ..c -rwxrwxrwx 0
0
30191605 <part2.img_IN_HI~1.GIF-dead-30191605>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Thu Jun 18 1998 21:29:26 3964 m.. -rwxrwxrwx 0
0
30191605
<part2.img-_IN_HI~1.GIF-dead-30191605>
3883 ..c -rwxrwxrwx 0
0
30191607 <part2.img_IN_WWW1.GIF-dead-30191607>
Thu Jun 18 1998 21:29:28 3738 ..c -rwxrwxrwx 0
0
29723644
<part2.img-_IN_LI~1.GIF-dead-29723644>
3883 m.. -rwxrwxrwx 0
0
30191607 <part2.img_IN_WWW1.GIF-dead-30191607>
Thu Jun 18 1998 21:29:30 3304 ..c -rwxrwxrwx 0
0
30191610
<part2.img-_IN_BR~1.GIF-dead-30191610>
Thu Jun 18 1998 21:29:32 3738 m.. -rwxrwxrwx 0
0
29723644
<part2.img-_IN_LI~1.GIF-dead-29723644>
Thu Jun 18 1998 21:29:34 3304 m.. -rwxrwxrwx 0
0
30191610
<part2.img-_IN_BR~1.GIF-dead-30191610>
3695 ..c -rwxrwxrwx 0
0
30191612 <part2.img_IN_IN~1.GIF-dead-30191612>
Thu Jun 18 1998 21:29:36 3654 ..c -rwxrwxrwx 0
0
29723646
<part2.img-_IN_KI~1.GIF-dead-29723646>
Thu Jun 18 1998 21:29:40 3415 ..c -rwxrwxrwx 0
0
29723648
<part2.img-_OOTER.GIF-dead-29723648>
Thu Jun 18 1998 21:29:44 3415 m.. -rwxrwxrwx 0
0
29723648
<part2.img-_OOTER.GIF-dead-29723648>
3695 m.. -rwxrwxrwx 0
0
30191612 <part2.img_IN_IN~1.GIF-dead-30191612>
Thu Jun 18 1998 21:29:48 3654 m.. -rwxrwxrwx 0
0
29723646
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
<part2.img-_IN_KI~1.GIF-dead-29723646>
Thu Jun 18 1998 21:32:42 3018 ..c -rwxrwxrwx 0
0
29723650
<part2.img-_IBRAR~1.HTM-dead-29723650>
Thu Jun 18 1998 21:32:44 3018 m.. -rwxrwxrwx 0
0
29723650
<part2.img-_IBRAR~1.HTM-dead-29723650>
Thu Jun 18 1998 21:33:06
305 ..c -rwxrwxrwx 0
0
26038205
<part2.img-_LUEBA~1.GIF-dead-26038205>
Thu Jun 18 1998 21:33:08
305 m.. -rwxrwxrwx 0
0
26038205
<part2.img-_LUEBA~1.GIF-dead-26038205>
Thu Jun 18 1998 21:33:10 5200 ..c -rwxrwxrwx 0
0
26038208
<part2.img-_ITE3_~1.GIF-dead-26038208>
Thu Jun 18 1998 21:33:12 5200 m.. -rwxrwxrwx 0
0
26038208
<part2.img-_ITE3_~1.GIF-dead-26038208>
43 ..c -rwxrwxrwx 0
0
30191618 <part2.img_ITE3_~1.GIF-dead-30191618>
Thu Jun 18 1998 21:33:14
43 m.. -rwxrwxrwx 0
0
30191618
<part2.img-_ITE3_~1.GIF-dead-30191618>
5951 ..c -rwxrwxrwx 0
0
26038211 <part2.img_ITE3_~1.JPE-dead-26038211>
Thu Jun 18 1998 21:33:16 5951 m.. -rwxrwxrwx 0
0
26038211
<part2.img-_ITE3_~1.JPE-dead-26038211>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Thu Jun 18 1998 21:33:18 7473 ..c -rwxrwxrwx 0
0
26038214
<part2.img-_ITE3_~2.JPE-dead-26038214>
Thu Jun 18 1998 21:33:22
627 ..c -rwxrwxrwx 0
0
26038217
<part2.img-_ITE3_~2.GIF-dead-26038217>
Thu Jun 18 1998 21:33:24
627 m.. -rwxrwxrwx 0
0
26038217
<part2.img-_ITE3_~2.GIF-dead-26038217>
Thu Jun 18 1998 21:33:26 7473 m.. -rwxrwxrwx 0
0
26038214
<part2.img-_ITE3_~2.JPE-dead-26038214>
Thu Jun 18 1998 21:33:42
529 ..c -rwxrwxrwx 0
0
26038220
<part2.img-_OUR_G~1.GIF-dead-26038220>
91 ..c -rwxrwxrwx 0
0
26038223 <part2.img_OUR_S~1.GIF-dead-26038223>
Thu Jun 18 1998 21:33:44
529 m.. -rwxrwxrwx 0
0
26038220
<part2.img-_OUR_G~1.GIF-dead-26038220>
91 m.. -rwxrwxrwx 0
0
26038223 <part2.img_OUR_S~1.GIF-dead-26038223>
Thu Jun 18 1998 21:35:22 8293 ..c -rwxrwxrwx 0
0
26038231
<part2.img-_ESBO~1.JPE-dead-26038231>
Thu Jun 18 1998 21:35:24 8293 m.. -rwxrwxrwx 0
0
26038231
<part2.img-_ESBO~1.JPE-dead-26038231>
Thu Jun 18 1998 21:36:06
541 ..c -rwxrwxrwx 0
0
26038237
<part2.img-_OURBU~1.GIF-dead-26038237>
Thu Jun 18 1998 21:36:08
541 m.. -rwxrwxrwx 0
0
26038237
<part2.img-_OURBU~1.GIF-dead-26038237>
Thu Jun 18 1998 21:36:40
376 ..c -rwxrwxrwx 0
0
26038240
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169 4E46
<part2.img-_HITEH~1.HTM-dead-26038240>
Thu Jun 18 1998 21:36:42
376 m.. -rwxrwxrwx 0
0
26038240
<part2.img-_HITEH~1.HTM-dead-26038240>
Thu Jun 18 1998 21:36:52 1989 ..c -rwxrwxrwx 0
0
26038243
<part2.img-_ACKGR~3.JPE-dead-26038243>
Thu Jun 18 1998 21:36:54 1989 m.. -rwxrwxrwx 0
0
26038243
<part2.img-_ACKGR~3.JPE-dead-26038243>
Thu Jun 18 1998 21:37:00 2234 ..c -rwxrwxrwx 0
0
26038245
<part2.img-_UESTS.GIF-dead-26038245>
Thu Jun 18 1998 21:37:02 2234 m.. -rwxrwxrwx 0
0
26038245
<part2.img-_UESTS.GIF-dead-26038245>
Thu Jun 18 1998 21:37:20 11124 ..c -rwxrwxrwx 0
0
26038248
<part2.img-_EFT_I~2.HTM-dead-26038248>
Thu Jun 18 1998 21:37:24 11124 m.. -rwxrwxrwx 0
0
26038248
<part2.img-_EFT_I~2.HTM-dead-26038248>
Thu Jun 18 1998 21:37:32 8029 ..c -rwxrwxrwx 0
0
26037881
<part2.img-_MLINK.GIF-dead-26037881>
Thu Jun 18 1998 21:37:34 8029 m.. -rwxrwxrwx 0
0
26037881
<part2.img-_MLINK.GIF-dead-26037881>
Thu Jun 18 1998 21:37:52 2787 ..c -rwxrwxrwx 0
0
26038247
<part2.img-_HOPPING.GIF-dead-26038247>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Thu Jun 18 1998 21:37:54 1907 ..c -rwxrwxrwx 0
0
26038250
<part2.img-_OXY-5.GIF-dead-26038250>
Thu Jun 18 1998 21:37:56 2787 m.. -rwxrwxrwx 0
0
26038247
<part2.img-_HOPPING.GIF-dead-26038247>
Thu Jun 18 1998 21:37:58 1907 m.. -rwxrwxrwx 0
0
26038250
<part2.img-_OXY-5.GIF-dead-26038250>
Thu Jun 18 1998 21:38:06 14169 ..c -rwxrwxrwx 0
0
26038253
<part2.img-_EPT_S~1.HTM-dead-26038253>
Thu Jun 18 1998 21:38:08 1715 ..c -rwxrwxrwx 0
0
26038255
<part2.img-_HOE.GIF-dead-26038255>
14169 m.. -rwxrwxrwx 0
0
26038253 <part2.img_EPT_S~1.HTM-dead-26038253>
Thu Jun 18 1998 21:38:10
947 ..c -rwxrwxrwx 0
0
26038257
<part2.img-_ERT.GIF-dead-26038257>
1715 m.. -rwxrwxrwx 0
0
26038255 <part2.img_HOE.GIF-dead-26038255>
Thu Jun 18 1998 21:38:12
947 m.. -rwxrwxrwx 0
0
26038257
<part2.img-_ERT.GIF-dead-26038257>
Thu Jun 18 1998 21:38:36 4963 ..c -rwxrwxrwx 0
0
26038261
<part2.img-_BBOLSCW.GIF-dead-26038261>
2006 ..c -rwxrwxrwx 0
0
26038259 <part2.img_HAT.GIF-dead-26038259>
Thu Jun 18 1998 21:38:38 3899 ..c -rwxrwxrwx 0
0
26038263
<part2.img-_OMEBUTT.GIF-dead-26038263>
2006 m.. -rwxrwxrwx 0
0
26038259 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
_HAT.GIF-dead-26038259>
Thu Jun 18 1998 21:38:40 3899 m.. -rwxrwxrwx 0
0
26038263
<part2.img-_OMEBUTT.GIF-dead-26038263>
Thu Jun 18 1998 21:38:44 2736 ..c -rwxrwxrwx 0
0
26038265
<part2.img-_UBSHOP.GIF-dead-26038265>
Thu Jun 18 1998 21:38:46 2736 m.. -rwxrwxrwx 0
0
26038265
<part2.img-_UBSHOP.GIF-dead-26038265>
4963 m.. -rwxrwxrwx 0
0
26038261 <part2.img_BBOLSCW.GIF-dead-26038261>
Thu Jun 18 1998 21:38:50 2651 ..c -rwxrwxrwx 0
0
26038267
<part2.img-_UBPOIN.GIF-dead-26038267>
Thu Jun 18 1998 21:38:52 2651 m.. -rwxrwxrwx 0
0
26038267
<part2.img-_UBPOIN.GIF-dead-26038267>
Thu Jun 18 1998 21:38:54 1634 ..c -rwxrwxrwx 0
0
26038269
<part2.img-_USH.GIF-dead-26038269>
Thu Jun 18 1998 21:38:56 1634 m.. -rwxrwxrwx 0
0
26038269
<part2.img-_USH.GIF-dead-26038269>
Thu Jun 18 1998 21:39:24 1716 ..c -rwxrwxrwx 0
0
26038272
<part2.img-_HOP_O~1.GIF-dead-26038272>
Thu Jun 18 1998 21:39:26 1716 m.. -rwxrwxrwx 0
0
26038272
<part2.img-_HOP_O~1.GIF-dead-26038272>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
1497 ..c -rwxrwxrwx 0
0
26038274 <part2.img_EARCH~3.GIF-dead-26038274>
Thu Jun 18 1998 21:39:28 1497 m.. -rwxrwxrwx 0
0
26038274
<part2.img-_EARCH~3.GIF-dead-26038274>
1775 ..c -rwxrwxrwx 0
0
10837508 <part2.img_UST_S~1.GIF-dead-10837508>
1810 ..c -rwxrwxrwx 0
0
10837511 <part2.img_RDER_~1.GIF-dead-10837511>
Thu Jun 18 1998 21:39:30 1775 m.. -rwxrwxrwx 0
0
10837508
<part2.img-_UST_S~1.GIF-dead-10837508>
Thu Jun 18 1998 21:39:32 4430 ..c -rwxrwxrwx 0
0
10837514
<part2.img-_BBACK~1.GIF-dead-10837514>
Thu Jun 18 1998 21:39:34 1810 m.. -rwxrwxrwx 0
0
10837511
<part2.img-_RDER_~1.GIF-dead-10837511>
Thu Jun 18 1998 21:39:40 4430 m.. -rwxrwxrwx 0
0
10837514
<part2.img-_BBACK~1.GIF-dead-10837514>
Thu Jun 18 1998 21:42:32
35 ..c -rwxrwxrwx 0
0
10837518
<part2.img-_URPLE.GIF-dead-10837518>
3221 ..c -rwxrwxrwx 0
0
10837520 <part2.img_Y_04.GIF-dead-10837520>
1150 ..c -rwxrwxrwx 0
0
10837516 <part2.img_Y_LOGO.GIF-dead-10837516>
Thu Jun 18 1998 21:42:34 1607 ..c -rwxrwxrwx 0
0
10837522
<part2.img-__STO_HI.GIF-dead-10837522>
3221 m.. -rwxrwxrwx 0
0
10837520 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
_Y_04.GIF-dead-10837520>
1150 m.. -rwxrwxrwx 0
0
10837516 <part2.img_Y_LOGO.GIF-dead-10837516>
35 m.. -rwxrwxrwx 0
0
10837518 <part2.img_URPLE.GIF-dead-10837518>
Thu Jun 18 1998 21:42:36 1607 m.. -rwxrwxrwx 0
0
10837522
<part2.img-__STO_HI.GIF-dead-10837522>
Thu Jun 18 1998 21:42:38
696 ..c -rwxrwxrwx 0
0
10837524
<part2.img-_1_GI.GIF-dead-10837524>
632 ..c -rwxrwxrwx 0
0
10837526 <part2.img_2_SH.GIF-dead-10837526>
Thu Jun 18 1998 21:42:40
632 m.. -rwxrwxrwx 0
0
10837526
<part2.img-_2_SH.GIF-dead-10837526>
696 m.. -rwxrwxrwx 0
0
10837524 <part2.img_1_GI.GIF-dead-10837524>
Thu Jun 18 1998 21:42:58
35 ..c -rwxrwxrwx 0
0
10837530
<part2.img-_CCCFF.GIF-dead-10837530>
Thu Jun 18 1998 21:43:00
35 m.. -rwxrwxrwx 0
0
10837530
<part2.img-_CCCFF.GIF-dead-10837530>
1893 ..c -rwxrwxrwx 0
0
10837532 <part2.img_Y.GIF-dead-10837532>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Thu Jun 18 1998 21:43:02 1893 m.. -rwxrwxrwx 0
0
10837532
<part2.img-_Y.GIF-dead-10837532>
Thu Jun 18 1998 21:43:24
680 ..c -rwxrwxrwx 0
0
10837534
<part2.img-__STO.GIF-dead-10837534>
Thu Jun 18 1998 21:43:26
680 m.. -rwxrwxrwx 0
0
10837534
<part2.img-__STO.GIF-dead-10837534>
Thu Jun 18 1998 21:43:46 11124 ..c -rwxrwxrwx 0
0
10837536
<part2.img-_EFT_I~2.HTM-dead-10837536>
Thu Jun 18 1998 21:43:48 11124 m.. -rwxrwxrwx 0
0
10837536
<part2.img-_EFT_I~2.HTM-dead-10837536>
Thu Jun 18 1998 21:45:16
834 ..c -rwxrwxrwx 0
0
10837548
<part2.img-_HITE8~1.GIF-dead-10837548>
Thu Jun 18 1998 21:45:18
834 m.. -rwxrwxrwx 0
0
10837548
<part2.img-_HITE8~1.GIF-dead-10837548>
Thu Jun 18 1998 21:47:22
492 ..c -rwxrwxrwx 0
0
10837553
<part2.img-_OPCEL~1.GIF-dead-10837553>
Thu Jun 18 1998 21:47:24
492 m.. -rwxrwxrwx 0
0
10837553
<part2.img-_OPCEL~1.GIF-dead-10837553>
Thu Jun 18 1998 21:47:26 5093 ..c -rwxrwxrwx 0
0
10837557
<part2.img-_OPCEL~2.GIF-dead-10837557>
Thu Jun 18 1998 21:47:28 5093 m.. -rwxrwxrwx 0
0
10837557
<part2.img-_OPCEL~2.GIF-dead-10837557>
Thu Jun 18 1998 21:47:40
119 ..c -rwxrwxrwx 0
0
10837561
<part2.img-_IDCEL~1.GIF-dead-10837561>
Thu Jun 18 1998 21:47:42
119 m.. -rwxrwxrwx 0
0
10837561
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
<part2.img-_IDCEL~1.GIF-dead-10837561>
Thu Jun 18 1998 21:48:56
265 ..c -rwxrwxrwx 0
0
10837568
<part2.img-_NIM02~2.HTM-dead-10837568>
Thu Jun 18 1998 21:48:58
265 m.. -rwxrwxrwx 0
0
10837568
<part2.img-_NIM02~2.HTM-dead-10837568>
Thu Jun 18 1998 21:49:12
261 ..c -rwxrwxrwx 0
0
10837571
<part2.img-_NIM01~2.HTM-dead-10837571>
Thu Jun 18 1998 21:49:14
261 m.. -rwxrwxrwx 0
0
10837571
<part2.img-_NIM01~2.HTM-dead-10837571>
Thu Jun 18 1998 21:49:30
803 ..c -rwxrwxrwx 0
0
10837555
<part2.img-_HAD.GIF-dead-10837555>
Thu Jun 18 1998 21:49:32 1828 ..c -rwxrwxrwx 0
0
10837559
<part2.img-_OP_HEAD.GIF-dead-10837559>
803 m.. -rwxrwxrwx 0
0
10837555 <part2.img_HAD.GIF-dead-10837555>
Thu Jun 18 1998 21:49:34 1828 m.. -rwxrwxrwx 0
0
10837559
<part2.img-_OP_HEAD.GIF-dead-10837559>
Thu Jun 18 1998 21:49:36 1819 ..c -rwxrwxrwx 0
0
10837570
<part2.img-_AV_FAQ.GIF-dead-10837570>
Thu Jun 18 1998 21:49:38 1819 m.. -rwxrwxrwx 0
0
10837570
<part2.img-_AV_FAQ.GIF-dead-10837570>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Thu Jun 18 1998 21:49:42 1620 m.c -rwxrwxrwx 0
0
10837573
<part2.img-_AV_LTD.GIF-dead-10837573>
Thu Jun 18 1998 21:49:52 3050 ..c -rwxrwxrwx 0
0
10837575
<part2.img-_ELL4.GIF-dead-10837575>
Thu Jun 18 1998 21:49:58 1871 ..c -rwxrwxrwx 0
0
10837577
<part2.img-_SCAT30.GIF-dead-10837577>
Thu Jun 18 1998 21:50:00 1553 ..c -rwxrwxrwx 0
0
10837580
<part2.img-_PDATE~1.CLA-dead-10837580>
1871 m.. -rwxrwxrwx 0
0
10837577 <part2.img_SCAT30.GIF-dead-10837577>
Thu Jun 18 1998 21:50:02 1553 m.. -rwxrwxrwx 0
0
10837580
<part2.img-_PDATE~1.CLA-dead-10837580>
Thu Jun 18 1998 21:50:20 3050 m.. -rwxrwxrwx 0
0
10837575
<part2.img-_ELL4.GIF-dead-10837575>
Thu Jun 18 1998 21:50:42
573 ..c -rwxrwxrwx 0
0
10837582
<part2.img-_OP_NA~1.GIF-dead-10837582>
Thu Jun 18 1998 21:50:44
573 m.. -rwxrwxrwx 0
0
10837582
<part2.img-_OP_NA~1.GIF-dead-10837582>
Thu Jun 18 1998 21:50:46
799 ..c -rwxrwxrwx 0
0
10837584
<part2.img-_AV_WHO.GIF-dead-10837584>
Thu Jun 18 1998 21:50:48
799 m.. -rwxrwxrwx 0
0
10837584
<part2.img-_AV_WHO.GIF-dead-10837584>
Thu Jun 18 1998 21:51:00 1962 ..c -rwxrwxrwx 0
0
10837586
<part2.img-_AV_NEW.GIF-dead-10837586>
Thu Jun 18 1998 21:51:02 1962 m.. -rwxrwxrwx 0
0
10837586
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
<part2.img-_AV_NEW.GIF-dead-10837586>
Thu Jun 18 1998 21:51:10
79 ..c -rwxrwxrwx 0
0
10837588
<part2.img-_TTD_LNG.GIF-dead-10837588>
Thu Jun 18 1998 21:51:12
79 m.. -rwxrwxrwx 0
0
10837588
<part2.img-_TTD_LNG.GIF-dead-10837588>
Thu Jun 18 1998 21:51:48
224 ..c -rwxrwxrwx 0
0
10837590
<part2.img-_FRAME~1.HTM-dead-10837590>
Thu Jun 18 1998 21:51:50
224 m.. -rwxrwxrwx 0
0
10837590
<part2.img-_FRAME~1.HTM-dead-10837590>
Thu Jun 18 1998 21:51:52 1011 ..c -rwxrwxrwx 0
0
10837592
<part2.img-_DR_VS.GIF-dead-10837592>
564 ..c -rwxrwxrwx 0
0
10837594 <part2.img_ASIC.GIF-dead-10837594>
Thu Jun 18 1998 21:51:54
564 m.. -rwxrwxrwx 0
0
10837594
<part2.img-_ASIC.GIF-dead-10837594>
1011 m.. -rwxrwxrwx 0
0
10837592 <part2.img_DR_VS.GIF-dead-10837592>
Sat Jun 20 1998 00:00:00 1210 .a. -rwxrwxrwx 0
0
10837602
<part2.img-_RANSP~1.JPE-dead-10837602>
250 .a. -rwxrwxrwx 0
0
10837623 <part2.img_ESULT~3.HTM-dead-10837623>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Sat Jun 20 1998 10:21:08 12549 ..c -rwxrwxrwx 0
0
10837597
<part2.img-_EARC~11.HTM-dead-10837597>
Sat Jun 20 1998 10:21:10 12549 m.. -rwxrwxrwx 0
0
10837597
<part2.img-_EARC~11.HTM-dead-10837597>
Sat Jun 20 1998 10:22:10 6180 ..c -rwxrwxrwx 0
0
10837599
<part2.img-_LACKP~1.JPE-dead-10837599>
Sat Jun 20 1998 10:22:14 6180 m.. -rwxrwxrwx 0
0
10837599
<part2.img-_LACKP~1.JPE-dead-10837599>
Sat Jun 20 1998 10:23:00 1210 ..c -rwxrwxrwx 0
0
10837602
<part2.img-_RANSP~1.JPE-dead-10837602>
Sat Jun 20 1998 10:23:06 1210 m.. -rwxrwxrwx 0
0
10837602
<part2.img-_RANSP~1.JPE-dead-10837602>
Sat Jun 20 1998 10:23:10 3750 ..c -rwxrwxrwx 0
0
10837601
<part2.img-_HELP~1.HTM-dead-10837601>
Sat Jun 20 1998 10:23:12 3750 m.. -rwxrwxrwx 0
0
10837601
<part2.img-_HELP~1.HTM-dead-10837601>
Sat Jun 20 1998 10:23:48 4803 ..c -rwxrwxrwx 0
0
10837604
<part2.img-_ROOM~1.HTM-dead-10837604>
Sat Jun 20 1998 10:23:50 4803 m.. -rwxrwxrwx 0
0
10837604
<part2.img-_ROOM~1.HTM-dead-10837604>
Sat Jun 20 1998 10:27:02
250 ..c -rwxrwxrwx 0
0
10837623
<part2.img-_ESULT~3.HTM-dead-10837623>
Sat Jun 20 1998 10:27:04
250 m.. -rwxrwxrwx 0
0
10837623
<part2.img-_ESULT~3.HTM-dead-10837623>
Sat Jun 20 1998 10:27:38 7407 ..c -rwxrwxrwx 0
0
10837616
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
<part2.img-_2500-~1.GIF-dead-10837616>
Sat Jun 20 1998 10:27:40 7407 m.. -rwxrwxrwx 0
0
10837616
<part2.img-_2500-~1.GIF-dead-10837616>
Sat Jun 20 1998 10:31:54 4454 ..c -rwxrwxrwx 0
0
10837620
<part2.img-_AGES-~1.HTM-dead-10837620>
Sat Jun 20 1998 10:31:56 4454 m.. -rwxrwxrwx 0
0
10837620
<part2.img-_AGES-~1.HTM-dead-10837620>
1573 ..c -rwxrwxrwx 0
0
10837622 <part2.img_HTITLE.GIF-dead-10837622>
Sat Jun 20 1998 10:31:58 1573 m.. -rwxrwxrwx 0
0
10837622
<part2.img-_HTITLE.GIF-dead-10837622>
Sat Jun 20 1998 10:32:18 5909 ..c -rwxrwxrwx 0
0
10837625
<part2.img-_EC1SU~1.HTM-dead-10837625>
Sat Jun 20 1998 10:32:20 5909 m.. -rwxrwxrwx 0
0
10837625
<part2.img-_EC1SU~1.HTM-dead-10837625>
2411 ..c -rwxrwxrwx 0
0
10837627 <part2.img_OGOSMLT.THM-dead-10837627>
Sat Jun 20 1998 10:32:22 3082 ..c -rwxrwxrwx 0
0
10837629
<part2.img-_C-22-~1.THM-dead-10837629>
2411 m.. -rwxrwxrwx 0
0
10837627 <part2.img_OGOSMLT.THM-dead-10837627>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Sat Jun 20 1998 10:32:24 3082 m.. -rwxrwxrwx 0
0
10837629
<part2.img-_C-22-~1.THM-dead-10837629>
Sat Jun 20 1998 10:33:14 4471 ..c -rwxrwxrwx 0
0
10837631
<part2.img-_EC5SU~1.HTM-dead-10837631>
Sat Jun 20 1998 10:33:16 4471 m.. -rwxrwxrwx 0
0
10837631
<part2.img-_EC5SU~1.HTM-dead-10837631>
Sat Jun 20 1998 10:33:20 1418 ..c -rwxrwxrwx 0
0
10837633
<part2.img-_TW-200.THM-dead-10837633>
Sat Jun 20 1998 10:33:22 1418 m.. -rwxrwxrwx 0
0
10837633
<part2.img-_TW-200.THM-dead-10837633>
Sat Jun 20 1998 10:34:32 5714 ..c -rwxrwxrwx 0
0
10837636
<part2.img-_EARC~12.HTM-dead-10837636>
Sat Jun 20 1998 10:34:34 5714 m.. -rwxrwxrwx 0
0
10837636
<part2.img-_EARC~12.HTM-dead-10837636>
Sat Jun 20 1998 10:34:54 5887 ..c -rwxrwxrwx 0
0
10837639
<part2.img-_EARC~13.HTM-dead-10837639>
Sat Jun 20 1998 10:34:56 5887 m.. -rwxrwxrwx 0
0
10837639
<part2.img-_EARC~13.HTM-dead-10837639>
Sat Jun 20 1998 10:35:02 2910 ..c -rwxrwxrwx 0
0
10837641
<part2.img-_BLOGO.GIF-dead-10837641>
Sat Jun 20 1998 10:35:04 2910 m.. -rwxrwxrwx 0
0
10837641
<part2.img-_BLOGO.GIF-dead-10837641>
Sat Jun 20 1998 10:36:12 5674 ..c -rwxrwxrwx 0
0
10837644
<part2.img-_OG23S~1.GIF-dead-10837644>
Sat Jun 20 1998 10:36:14 5674 m.. -rwxrwxrwx 0
0
10837644
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
<part2.img-_OG23S~1.GIF-dead-10837644>
Wed Jul 01 1998 00:00:00 1798 .a. -rwxrwxrwx 0
0
10837663
<part2.img-_MDB.CSS-dead-10837663>
Wed Jul 01 1998 21:12:02 3606 ..c -rwxrwxrwx 0
0
10837646
<part2.img-_IDWIN~1.GIF-dead-10837646>
Wed Jul 01 1998 21:12:04 7215 ..c -rwxrwxrwx 0
0
10837648
<part2.img-_CON.GIF-dead-10837648>
3606 m.. -rwxrwxrwx 0
0
10837646 <part2.img_IDWIN~1.GIF-dead-10837646>
Wed Jul 01 1998 21:12:06 7215 m.. -rwxrwxrwx 0
0
10837648
<part2.img-_CON.GIF-dead-10837648>
Wed Jul 01 1998 21:12:26 18549 ..c -rwxrwxrwx 0
0
10837650
<part2.img-_05~2.HTM-dead-10837650>
Wed Jul 01 1998 21:12:34 18549 m.. -rwxrwxrwx 0
0
10837650
<part2.img-_05~2.HTM-dead-10837650>
Wed Jul 01 1998 21:17:06 1290 ..c -rwxrwxrwx 0
0
10837654
<part2.img-_48.GIF-dead-10837654>
Wed Jul 01 1998 21:17:08 1290 m.. -rwxrwxrwx 0
0
10837654
<part2.img-_48.GIF-dead-10837654>
Wed Jul 01 1998 21:20:56 7206 ..c -rwxrwxrwx 0
0
16416309
<part2.img-_ETTIN~1.HTM-dead-16416309>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Wed Jul 01 1998 21:20:58 7206 m.. -rwxrwxrwx 0
0
16416309
<part2.img-_ETTIN~1.HTM-dead-16416309>
Wed Jul 01 1998 21:21:02 3526 ..c -rwxrwxrwx 0
0
10837656
<part2.img-_INCLAIR.GIF-dead-10837656>
Wed Jul 01 1998 21:21:04 3526 m.. -rwxrwxrwx 0
0
10837656
<part2.img-_INCLAIR.GIF-dead-10837656>
Wed Jul 01 1998 21:21:14 3149 ..c -rwxrwxrwx 0
0
10837658
<part2.img-_RANKLIN.GIF-dead-10837658>
Wed Jul 01 1998 21:21:16 3149 m.. -rwxrwxrwx 0
0
10837658
<part2.img-_RANKLIN.GIF-dead-10837658>
4052 ..c -rwxrwxrwx 0
0
10837660 <part2.img_OSH.GIF-dead-10837660>
Wed Jul 01 1998 21:21:18 4052 m.. -rwxrwxrwx 0
0
10837660
<part2.img-_OSH.GIF-dead-10837660>
Wed Jul 01 1998 21:21:36 9832 ..c -rwxrwxrwx 0
0
16416298
<part2.img-_ATCH_05.GIF-dead-16416298>
Wed Jul 01 1998 21:21:44 9832 m.. -rwxrwxrwx 0
0
16416298
<part2.img-_ATCH_05.GIF-dead-16416298>
Wed Jul 01 1998 21:21:50 1798 ..c -rwxrwxrwx 0
0
10837663
<part2.img-_MDB.CSS-dead-10837663>
Wed Jul 01 1998 21:21:52 1798 m.. -rwxrwxrwx 0
0
10837663
<part2.img-_MDB.CSS-dead-10837663>
Wed Jul 01 1998 21:22:08 6808 ..c -rwxrwxrwx 0
0
10837662
<part2.img-_ADIO_04.GIF-dead-10837662>
Wed Jul 01 1998 21:22:10 6808 m.. -rwxrwxrwx 0
0
10837662
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
<part2.img-_ADIO_04.GIF-dead-10837662>
Wed Jul 01 1998 21:28:00 1070 ..c -rwxrwxrwx 0
0
16416336
<part2.img-_67.GIF-dead-16416336>
Wed Jul 01 1998 21:28:02 1070 m.. -rwxrwxrwx 0
0
16416336
<part2.img-_67.GIF-dead-16416336>
Thu Jul 02 1998 10:55:02 84471 m.c -/-rwxrwxrwx 0
0
3899405
c:\/PROGRA~1/MICROS~1/AGEOFE~1/DATA/BlkEdge.Dat (BLKEDGE.DAT)
Thu Jul 02 1998 11:26:02 209287 m.c -/-rwxrwxrwx 0
0
3899435
c:\/PROGRA~1/MICROS~1/AGEOFE~1/DATA/TileEdge.Dat (TILEEDGE.DAT)
Wed Jul 29 1998 19:00:06 10301 m.. -/-rwxrwxrwx 0
0
328457
c:\/WINDOWS/INF/dx6E352.TMP (DX6MIGR.INF)
64443 m.. -/-rwxrwxrwx 0
0
3345962
c:\/WINDOWS/SYSTEM/dx6E1B3.TMP (DSOUND.VXD)
134928 m.. -/-rwxrwxrwx 0
0
3345966
c:\/WINDOWS/SYSTEM/dx6E1C2.TMP (DSOUND.DLL)
Sat Aug 08 1998 06:39:32 739328 m.c -/-rwxrwxrwx 0
0
342766
c:\/WINDOWS/SYSTEM/ir50_32.dll (IR50_32.DLL)
Sat Aug 15 1998 00:00:00
365 .a. -rwxrwxrwx 0
0
10837690
<part2.img-_DFORC~2.HTM-dead-10837690>
365 .a. -rwxrwxrwx 0
0
10837701 <part2.img_DFORC~2.HTM-dead-10837701>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Sat Aug 15 1998 11:28:22 3217 ..c -rwxrwxrwx 0
0
10837671
<part2.img-_ROMO1~1.GIF-dead-10837671>
Sat Aug 15 1998 11:28:24 3217 m.. -rwxrwxrwx 0
0
10837671
<part2.img-_ROMO1~1.GIF-dead-10837671>
Sat Aug 15 1998 11:30:26 10014 ..c -rwxrwxrwx 0
0
10837674
<part2.img-_AHOO_~1.GIF-dead-10837674>
Sat Aug 15 1998 11:30:32 10014 m.. -rwxrwxrwx 0
0
10837674
<part2.img-_AHOO_~1.GIF-dead-10837674>
Sat Aug 15 1998 11:31:26 23512 ..c -rwxrwxrwx 0
0
10837676
<part2.img-_L1LB~1.HTM-dead-10837676>
Sat Aug 15 1998 11:31:40 23512 m.. -rwxrwxrwx 0
0
10837676
<part2.img-_L1LB~1.HTM-dead-10837676>
Sat Aug 15 1998 11:31:42
461 ..c -rwxrwxrwx 0
0
10837678
<part2.img-__HG_G~1.GIF-dead-10837678>
Sat Aug 15 1998 11:31:44
461 m.. -rwxrwxrwx 0
0
10837678
<part2.img-__HG_G~1.GIF-dead-10837678>
Sat Aug 15 1998 11:32:24 1527 ..c -rwxrwxrwx 0
0
10837680
<part2.img-__MN_HG.GIF-dead-10837680>
Sat Aug 15 1998 11:32:26 1527 m.. -rwxrwxrwx 0
0
10837680
<part2.img-__MN_HG.GIF-dead-10837680>
Sat Aug 15 1998 11:33:00 35835 ..c -rwxrwxrwx 0
0
10837682
<part2.img-_L1KS~1.HTM-dead-10837682>
Sat Aug 15 1998 11:33:04 35835 m.. -rwxrwxrwx 0
0
10837682
<part2.img-_L1KS~1.HTM-dead-10837682>
Sat Aug 15 1998 11:33:24 1370 ..c -rwxrwxrwx 0
0
10837687
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
<part2.img-_C_VS.GIF-dead-10837687>
Sat Aug 15 1998 11:33:26 1370 m.. -rwxrwxrwx 0
0
10837687
<part2.img-_C_VS.GIF-dead-10837687>
Sat Aug 15 1998 11:33:38 6602 ..c -rwxrwxrwx 0
0
16416394
<part2.img-_HHOTE~1.HTM-dead-16416394>
Sat Aug 15 1998 11:33:42 6602 m.. -rwxrwxrwx 0
0
16416394
<part2.img-_HHOTE~1.HTM-dead-16416394>
Sat Aug 15 1998 11:33:46 1234 ..c -rwxrwxrwx 0
0
10837685
<part2.img-_SM-BU~1.GIF-dead-10837685>
Sat Aug 15 1998 11:33:48 1234 m.. -rwxrwxrwx 0
0
10837685
<part2.img-_SM-BU~1.GIF-dead-10837685>
14155 ..c -rwxrwxrwx 0
0
16416401 <part2.img_344.GIF-dead-16416401>
Sat Aug 15 1998 11:34:00 2968 ..c -rwxrwxrwx 0
0
10837692
<part2.img-_G_BTTN4.GIF-dead-10837692>
Sat Aug 15 1998 11:34:02 2968 m.. -rwxrwxrwx 0
0
10837692
<part2.img-_G_BTTN4.GIF-dead-10837692>
Sat Aug 15 1998 11:34:04 14155 m.. -rwxrwxrwx 0
0
16416401
<part2.img-_344.GIF-dead-16416401>
Sat Aug 15 1998 11:34:14 11417 ..c -rwxrwxrwx 0
0
16416403
<part2.img-_~1.HTM-dead-16416403>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Sat Aug 15 1998 11:34:16 11417 m.. -rwxrwxrwx 0
0
16416403
<part2.img-_~1.HTM-dead-16416403>
Sat Aug 15 1998 11:34:20 3499 ..c -rwxrwxrwx 0
0
10837695
<part2.img-_OOD_N~2.GIF-dead-10837695>
Sat Aug 15 1998 11:34:22 3499 m.. -rwxrwxrwx 0
0
10837695
<part2.img-_OOD_N~2.GIF-dead-10837695>
Sat Aug 15 1998 11:34:46
365 ..c -rwxrwxrwx 0
0
10837690
<part2.img-_DFORC~2.HTM-dead-10837690>
Sat Aug 15 1998 11:34:48
365 m.. -rwxrwxrwx 0
0
10837690
<part2.img-_DFORC~2.HTM-dead-10837690>
Sat Aug 15 1998 11:35:16 10665 ..c -rwxrwxrwx 0
0
16416419
<part2.img-_D1600~2.GIF-dead-16416419>
Sat Aug 15 1998 11:35:20 10665 m.. -rwxrwxrwx 0
0
16416419
<part2.img-_D1600~2.GIF-dead-16416419>
Sat Aug 15 1998 11:35:34 5581 ..c -rwxrwxrwx 0
0
10837689
<part2.img-_10121~1.HTM-dead-10837689>
Sat Aug 15 1998 11:35:36
365 ..c -rwxrwxrwx 0
0
10837701
<part2.img-_DFORC~2.HTM-dead-10837701>
5581 m.. -rwxrwxrwx 0
0
10837689 <part2.img_10121~1.HTM-dead-10837689>
Sat Aug 15 1998 11:35:38
365 m.. -rwxrwxrwx 0
0
10837701
<part2.img-_DFORC~2.HTM-dead-10837701>
Sat Aug 15 1998 11:36:28 5825 ..c -rwxrwxrwx 0
0
10837697
<part2.img-_10122~1.HTM-dead-10837697>
Sat Aug 15 1998 11:36:30
365 ..c -rwxrwxrwx 0
0
10837700
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169 4E46
<part2.img-_DFORC~1.HTM-dead-10837700>
5825 m.. -rwxrwxrwx 0
0
10837697 <part2.img_10122~1.HTM-dead-10837697>
Sat Aug 15 1998 11:36:32
365 m.. -rwxrwxrwx 0
0
10837700
<part2.img-_DFORC~1.HTM-dead-10837700>
Sat Aug 15 1998 11:36:46
917 ..c -rwxrwxrwx 0
0
16416422
<part2.img-_OTELO~1.HTM-dead-16416422>
Sat Aug 15 1998 11:36:48
917 m.. -rwxrwxrwx 0
0
16416422
<part2.img-_OTELO~1.HTM-dead-16416422>
Sat Aug 15 1998 11:36:52 1024 ..c -rwxrwxrwx 0
0
10837704
<part2.img-_UTTON~3.GIF-dead-10837704>
1043 ..c -rwxrwxrwx 0
0
10837706 <part2.img_ESERV.GIF-dead-10837706>
Sat Aug 15 1998 11:36:54 1043 m.. -rwxrwxrwx 0
0
10837706
<part2.img-_ESERV.GIF-dead-10837706>
1024 m.. -rwxrwxrwx 0
0
10837704 <part2.img_UTTON~3.GIF-dead-10837704>
Sat Aug 15 1998 11:36:58 8465 ..c -rwxrwxrwx 0
0
10837708
<part2.img-_HHOTELS.GIF-dead-10837708>
Sat Aug 15 1998 11:37:00 8465 m.. -rwxrwxrwx 0
0
10837708
<part2.img-_HHOTELS.GIF-dead-10837708>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Sat Aug 15 1998 11:37:04 3306 ..c -rwxrwxrwx 0
0
10837712
<part2.img-_N-ASS~1.GIF-dead-10837712>
Sat Aug 15 1998 11:37:08 3306 m.. -rwxrwxrwx 0
0
10837712
<part2.img-_N-ASS~1.GIF-dead-10837712>
Sat Aug 15 1998 11:37:20
890 ..c -rwxrwxrwx 0
0
16416436
<part2.img-_RAMEB~1.HTM-dead-16416436>
Sat Aug 15 1998 11:37:22
890 m.. -rwxrwxrwx 0
0
16416436
<part2.img-_RAMEB~1.HTM-dead-16416436>
Sat Aug 15 1998 11:37:26 1079 ..c -rwxrwxrwx 0
0
10837710
<part2.img-_OBACK.GIF-dead-10837710>
Sat Aug 15 1998 11:37:28 1079 m.. -rwxrwxrwx 0
0
10837710
<part2.img-_OBACK.GIF-dead-10837710>
Sat Aug 15 1998 11:38:24 8214 ..c -rwxrwxrwx 0
0
10837714
<part2.img-_EBRES~1.HTM-dead-10837714>
Sat Aug 15 1998 11:38:26 8214 m.. -rwxrwxrwx 0
0
10837714
<part2.img-_EBRES~1.HTM-dead-10837714>
Sat Aug 15 1998 11:38:34 10295 ..c -rwxrwxrwx 0
0
16416439
<part2.img-_EADER~2.GIF-dead-16416439>
Sat Aug 15 1998 11:38:40 10295 m.. -rwxrwxrwx 0
0
16416439
<part2.img-_EADER~2.GIF-dead-16416439>
Sat Aug 15 1998 11:39:50
564 ..c -rwxrwxrwx 0
0
10837716
<part2.img-_ELLOW.GIF-dead-10837716>
Sat Aug 15 1998 11:39:52
564 m.. -rwxrwxrwx 0
0
10837716
<part2.img-_ELLOW.GIF-dead-10837716>
Sat Aug 15 1998 11:39:54
111 ..c -rwxrwxrwx 0
0
10837718
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169 4E46
<part2.img-_LUE.GIF-dead-10837718>
Sat Aug 15 1998 11:39:56
111 m.. -rwxrwxrwx 0
0
10837718
<part2.img-_LUE.GIF-dead-10837718>
Sat Aug 15 1998 11:42:00 6239 ..c -rwxrwxrwx 0
0
10837724
<part2.img-_EADER~2.GIF-dead-10837724>
6630 ..c -rwxrwxrwx 0
0
10837721 <part2.img_UTTON~4.GIF-dead-10837721>
Sat Aug 15 1998 11:42:04 6630 m.. -rwxrwxrwx 0
0
10837721
<part2.img-_UTTON~4.GIF-dead-10837721>
Sat Aug 15 1998 11:42:08 6239 m.. -rwxrwxrwx 0
0
10837724
<part2.img-_EADER~2.GIF-dead-10837724>
1340 ..c -rwxrwxrwx 0
0
10837727 <part2.img_OGO_S~1.GIF-dead-10837727>
Sat Aug 15 1998 11:42:10 1340 m.. -rwxrwxrwx 0
0
10837727
<part2.img-_OGO_S~1.GIF-dead-10837727>
Sat Aug 15 1998 11:42:12 1224 ..c -rwxrwxrwx 0
0
10837730
<part2.img-_OGO_Q~1.GIF-dead-10837730>
Sat Aug 15 1998 11:42:14 1224 m.. -rwxrwxrwx 0
0
10837730
<part2.img-_OGO_Q~1.GIF-dead-10837730>
Sat Aug 15 1998 11:42:22 5125 ..c -rwxrwxrwx 0
0
16416485
<part2.img-_EBRES~1.HTM-dead-16416485>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Sat Aug 15 1998 11:42:24 5125 m.. -rwxrwxrwx 0
0
16416485
<part2.img-_EBRES~1.HTM-dead-16416485>
Sat Aug 15 1998 11:43:06 3345 ..c -rwxrwxrwx 0
0
10837733
<part2.img-_UTTON~5.GIF-dead-10837733>
Sat Aug 15 1998 11:43:12 3345 m.. -rwxrwxrwx 0
0
10837733
<part2.img-_UTTON~5.GIF-dead-10837733>
Sat Aug 15 1998 11:43:36 3322 ..c -rwxrwxrwx 0
0
10837735
<part2.img-_YBERI~1.HTM-dead-10837735>
Sat Aug 15 1998 11:43:38 3322 m.. -rwxrwxrwx 0
0
10837735
<part2.img-_YBERI~1.HTM-dead-10837735>
Sat Aug 15 1998 11:46:16 7580 ..c -rwxrwxrwx 0
0
16416490
<part2.img-_EXUAL~1.HTM-dead-16416490>
Sat Aug 15 1998 11:46:18 7580 m.. -rwxrwxrwx 0
0
16416490
<part2.img-_EXUAL~1.HTM-dead-16416490>
Sat Aug 15 1998 11:47:20 1888 ..c -rwxrwxrwx 0
0
10837737
<part2.img-_PH-CO~1.GIF-dead-10837737>
Sat Aug 15 1998 11:47:22 1888 m.. -rwxrwxrwx 0
0
10837737
<part2.img-_PH-CO~1.GIF-dead-10837737>
Sat Aug 15 1998 11:47:24 15324 ..c -rwxrwxrwx 0
0
10837739
<part2.img-_P4.GIF-dead-10837739>
Sat Aug 15 1998 11:47:38 15324 m.. -rwxrwxrwx 0
0
10837739
<part2.img-_P4.GIF-dead-10837739>
Sat Aug 15 1998 11:47:52 44655 ..c -rwxrwxrwx 0
0
10837741
<part2.img-_P8.GIF-dead-10837741>
Sat Aug 15 1998 11:48:40 44655 m.. -rwxrwxrwx 0
0
10837741
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
<part2.img-_P8.GIF-dead-10837741>
Sun Aug 16 1998 14:09:56 1052 ..c -rwxrwxrwx 0
0
16416496
<part2.img-_PORTS4.GIF-dead-16416496>
Sun Aug 16 1998 14:09:58
794 ..c -rwxrwxrwx 0
0
16416501
<part2.img-_C.GIF-dead-16416501>
1052 m.. -rwxrwxrwx 0
0
16416496 <part2.img_PORTS4.GIF-dead-16416496>
Sun Aug 16 1998 14:10:00
794 m.. -rwxrwxrwx 0
0
16416501
<part2.img-_C.GIF-dead-16416501>
Sun Aug 16 1998 14:10:58 15013 ..c -rwxrwxrwx 0
0
10837744
<part2.img-_EARC~14.HTM-dead-10837744>
Sun Aug 16 1998 14:11:00 15013 m.. -rwxrwxrwx 0
0
10837744
<part2.img-_EARC~14.HTM-dead-10837744>
Sun Aug 16 1998 14:11:28
990 ..c -rwxrwxrwx 0
0
10837746
<part2.img-_SF~1.HTM-dead-10837746>
Sun Aug 16 1998 14:11:30 1293 ..c -rwxrwxrwx 0
0
10837748
<part2.img-_NDEX~10.HTM-dead-10837748>
990 m.. -rwxrwxrwx 0
0
10837746 <part2.img_SF~1.HTM-dead-10837746>
Sun Aug 16 1998 14:11:32 1293 m.. -rwxrwxrwx 0
0
10837748
<part2.img-_NDEX~10.HTM-dead-10837748>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Sun Aug 16 1998 14:11:52 11587 ..c -rwxrwxrwx 0
0
10837750
<part2.img-_OME(3~2.HTM-dead-10837750>
Sun Aug 16 1998 14:11:54 11587 m.. -rwxrwxrwx 0
0
10837750
<part2.img-_OME(3~2.HTM-dead-10837750>
671 ..c -rwxrwxrwx 0
0
10837752 <part2.img_URPBACK.GIF-dead-10837752>
Sun Aug 16 1998 14:11:56
671 m.. -rwxrwxrwx 0
0
10837752
<part2.img-_URPBACK.GIF-dead-10837752>
1689 ..c -rwxrwxrwx 0
0
10837754 <part2.img_OC3OFF.GIF-dead-10837754>
Sun Aug 16 1998 14:11:58 1184 ..c -rwxrwxrwx 0
0
10837756
<part2.img-_OC7OFF.GIF-dead-10837756>
1689 m.. -rwxrwxrwx 0
0
10837754 <part2.img_OC3OFF.GIF-dead-10837754>
Sun Aug 16 1998 14:12:00 1184 m.. -rwxrwxrwx 0
0
10837756
<part2.img-_OC7OFF.GIF-dead-10837756>
Sun Aug 16 1998 14:12:06
317 ..c -rwxrwxrwx 0
0
10837758
<part2.img-_OTLINE.GIF-dead-10837758>
Sun Aug 16 1998 14:12:08
317 m.. -rwxrwxrwx 0
0
10837758
<part2.img-_OTLINE.GIF-dead-10837758>
Sun Aug 16 1998 14:12:12 3695 ..c -rwxrwxrwx 0
0
10837760
<part2.img-_ELCOME.GIF-dead-10837760>
Sun Aug 16 1998 14:12:14 3695 m.. -rwxrwxrwx 0
0
10837760
<part2.img-_ELCOME.GIF-dead-10837760>
Sun Aug 16 1998 14:12:32 1181 ..c -rwxrwxrwx 0
0
10837762
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
<part2.img-_HOOT~1.HTM-dead-10837762>
Sun Aug 16 1998 14:12:34 1181 m.. -rwxrwxrwx 0
0
10837762
<part2.img-_HOOT~1.HTM-dead-10837762>
584 ..c -rwxrwxrwx 0
0
10837764 <part2.img_AIN~1.HTM-dead-10837764>
Sun Aug 16 1998 14:12:36
584 m.. -rwxrwxrwx 0
0
10837764
<part2.img-_AIN~1.HTM-dead-10837764>
Sun Aug 16 1998 14:12:40 1350 ..c -rwxrwxrwx 0
0
10837766
<part2.img-_OC6OFF.GIF-dead-10837766>
Sun Aug 16 1998 14:12:42 1350 m.. -rwxrwxrwx 0
0
10837766
<part2.img-_OC6OFF.GIF-dead-10837766>
2770 ..c -rwxrwxrwx 0
0
10837768 <part2.img_IPAD.GIF-dead-10837768>
Sun Aug 16 1998 14:12:44 2770 m.. -rwxrwxrwx 0
0
10837768
<part2.img-_IPAD.GIF-dead-10837768>
Sun Aug 16 1998 14:12:52
465 ..c -rwxrwxrwx 0
0
10837770
<part2.img-_SNICK.GIF-dead-10837770>
Sun Aug 16 1998 14:12:54
465 m.. -rwxrwxrwx 0
0
10837770
<part2.img-_SNICK.GIF-dead-10837770>
Sun Aug 16 1998 14:13:04 1881 ..c -rwxrwxrwx 0
0
10837774
<part2.img-_UBNAV~1.HTM-dead-10837774>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
1709 ..c -rwxrwxrwx 0
0
10837772 <part2.img_OC2OFF.GIF-dead-10837772>
Sun Aug 16 1998 14:13:06 1709 m.. -rwxrwxrwx 0
0
10837772
<part2.img-_OC2OFF.GIF-dead-10837772>
1881 m.. -rwxrwxrwx 0
0
10837774 <part2.img_UBNAV~1.HTM-dead-10837774>
Sun Aug 16 1998 14:13:08
240 ..c -rwxrwxrwx 0
0
10837776
<part2.img-_TVIP.GIF-dead-10837776>
469 ..c -rwxrwxrwx 0
0
10837779 <part2.img_TCELE~1.GIF-dead-10837779>
Sun Aug 16 1998 14:13:10
240 m.. -rwxrwxrwx 0
0
10837776
<part2.img-_TVIP.GIF-dead-10837776>
429 ..c -rwxrwxrwx 0
0
10837781 <part2.img_TORLA~1.GIF-dead-10837781>
469 m.. -rwxrwxrwx 0
0
10837779 <part2.img_TCELE~1.GIF-dead-10837779>
Sun Aug 16 1998 14:13:12
429 m.. -rwxrwxrwx 0
0
10837781
<part2.img-_TORLA~1.GIF-dead-10837781>
Sun Aug 16 1998 14:13:20 1047 ..c -rwxrwxrwx 0
0
10837783
<part2.img-_ELP~1.HTM-dead-10837783>
Sun Aug 16 1998 14:13:22
583 ..c -rwxrwxrwx 0
0
10837785
<part2.img-_AIN(1~2.HTM-dead-10837785>
1047 m.. -rwxrwxrwx 0
0
10837783 <part2.img_ELP~1.HTM-dead-10837783>
Sun Aug 16 1998 14:13:24
583 m.. -rwxrwxrwx 0
0
10837785
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
<part2.img-_AIN(1~2.HTM-dead-10837785>
1561 ..c -rwxrwxrwx 0
0
10837787 <part2.img_OC8ON.GIF-dead-10837787>
Sun Aug 16 1998 14:13:26 1561 m.. -rwxrwxrwx 0
0
10837787
<part2.img-_OC8ON.GIF-dead-10837787>
551 ..c -rwxrwxrwx 0
0
10837790 <part2.img_EARCH~4.GIF-dead-10837790>
Sun Aug 16 1998 14:13:28
551 m.. -rwxrwxrwx 0
0
10837790
<part2.img-_EARCH~4.GIF-dead-10837790>
Sun Aug 16 1998 14:13:36 2414 ..c -rwxrwxrwx 0
0
10837792
<part2.img-_AV~1.HTM-dead-10837792>
Sun Aug 16 1998 14:13:38 2414 m.. -rwxrwxrwx 0
0
10837792
<part2.img-_AV~1.HTM-dead-10837792>
Sun Aug 16 1998 14:13:48
456 ..c -rwxrwxrwx 0
0
10837794
<part2.img-_HTOC2.GIF-dead-10837794>
Sun Aug 16 1998 14:13:50
456 m.. -rwxrwxrwx 0
0
10837794
<part2.img-_HTOC2.GIF-dead-10837794>
Sun Aug 16 1998 14:14:16
585 ..c -rwxrwxrwx 0
0
10837799
<part2.img-_AIN_F~2.HTM-dead-10837799>
3968 ..c -rwxrwxrwx 0
0
10837796 <part2.img_OPNAV~2.HTM-dead-10837796>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Sun Aug 16 1998 14:14:18 3968 m.. -rwxrwxrwx 0
0
10837796
<part2.img-_OPNAV~2.HTM-dead-10837796>
585 m.. -rwxrwxrwx 0
0
10837799 <part2.img_AIN_F~2.HTM-dead-10837799>
14957 ..c -rwxrwxrwx 0
0
10837803 <part2.img_OOD~1.HTM-dead-10837803>
1414 ..c -rwxrwxrwx 0
0
10837801 <part2.img_OC4ON.GIF-dead-10837801>
Sun Aug 16 1998 14:14:20
541 ..c -rwxrwxrwx 0
0
10837806
<part2.img-_TUDIO~1.GIF-dead-10837806>
1414 m.. -rwxrwxrwx 0
0
10837801 <part2.img_OC4ON.GIF-dead-10837801>
Sun Aug 16 1998 14:14:22 14957 m.. -rwxrwxrwx 0
0
10837803
<part2.img-_OOD~1.HTM-dead-10837803>
541 m.. -rwxrwxrwx 0
0
10837806 <part2.img_TUDIO~1.GIF-dead-10837806>
342 ..c -rwxrwxrwx 0
0
10837808 <part2.img_GSTUDIO.GIF-dead-10837808>
Sun Aug 16 1998 14:14:24
342 m.. -rwxrwxrwx 0
0
10837808
<part2.img-_GSTUDIO.GIF-dead-10837808>
Sun Aug 16 1998 14:14:26
352 ..c -rwxrwxrwx 0
0
10837810
<part2.img-_OP(2).GIF-dead-10837810>
Sun Aug 16 1998 14:14:28
352 m.. -rwxrwxrwx 0
0
10837810
<part2.img-_OP(2).GIF-dead-10837810>
Sun Aug 16 1998 14:14:36
257 ..c -rwxrwxrwx 0
0
10837813
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
<part2.img-_GDIRE~1.GIF-dead-10837813>
Sun Aug 16 1998 14:14:38
229 ..c -rwxrwxrwx 0
0
10837815
<part2.img-_GFAQ.GIF-dead-10837815>
257 m.. -rwxrwxrwx 0
0
10837813 <part2.img_GDIRE~1.GIF-dead-10837813>
Sun Aug 16 1998 14:14:42
229 m.. -rwxrwxrwx 0
0
10837815
<part2.img-_GFAQ.GIF-dead-10837815>
Sun Aug 16 1998 14:14:44
278 ..c -rwxrwxrwx 0
0
10837817
<part2.img-_GSET.GIF-dead-10837817>
Sun Aug 16 1998 14:14:46
278 m.. -rwxrwxrwx 0
0
10837817
<part2.img-_GSET.GIF-dead-10837817>
Mon Aug 17 1998 00:00:00 7584 .a. -rwxrwxrwx 0
0
16416553
<part2.img-_EXUAL~2.HTM-dead-16416553>
18511 .a. -rwxrwxrwx 0
0
26037811 <part2.img_ICROS~1.HTM-dead-26037811>
7580 .a. -rwxrwxrwx 0
0
16416490 <part2.img_EXUAL~1.HTM-dead-16416490>
4074 .a. -rwxrwxrwx 0
0
10837919 <part2.img_ORENE~2.HTM-dead-10837919>
Mon Aug 17 1998 15:04:30 7584 ..c -rwxrwxrwx 0
0
16416553
<part2.img-_EXUAL~2.HTM-dead-16416553>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Mon Aug 17 1998 15:04:32 7584 m.. -rwxrwxrwx 0
0
16416553
<part2.img-_EXUAL~2.HTM-dead-16416553>
Mon Aug 17 1998 15:06:20 10267 ..c -rwxrwxrwx 0
0
10837820
<part2.img-_LACKO~1.GIF-dead-10837820>
Mon Aug 17 1998 15:06:24 10267 m.. -rwxrwxrwx 0
0
10837820
<part2.img-_LACKO~1.GIF-dead-10837820>
Mon Aug 17 1998 15:06:26 13028 ..c -rwxrwxrwx 0
0
16416568
<part2.img-_KMOSA~1.GIF-dead-16416568>
Mon Aug 17 1998 15:06:30 2112 ..c -rwxrwxrwx 0
0
10837823
<part2.img-_OONS-~1.GIF-dead-10837823>
Mon Aug 17 1998 15:06:32 2112 m.. -rwxrwxrwx 0
0
10837823
<part2.img-_OONS-~1.GIF-dead-10837823>
13028 m.. -rwxrwxrwx 0
0
16416568 <part2.img_KMOSA~1.GIF-dead-16416568>
Mon Aug 17 1998 15:06:34 2042 ..c -rwxrwxrwx 0
0
10837826
<part2.img-_POOF-~1.GIF-dead-10837826>
Mon Aug 17 1998 15:06:36 2042 m.. -rwxrwxrwx 0
0
10837826
<part2.img-_POOF-~1.GIF-dead-10837826>
Mon Aug 17 1998 15:07:04 1223 ..c -rwxrwxrwx 0
0
10837828
<part2.img-_SACI.GIF-dead-10837828>
5583 ..c -rwxrwxrwx 0
0
16416574 <part2.img_ETSCAPE.GIF-dead-16416574>
Mon Aug 17 1998 15:07:06 1223 m.. -rwxrwxrwx 0
0
10837828
<part2.img-_SACI.GIF-dead-10837828>
Mon Aug 17 1998 15:07:16 5583 m.. -rwxrwxrwx 0
0
16416574
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
<part2.img-_ETSCAPE.GIF-dead-16416574>
Mon Aug 17 1998 15:07:20 3814 ..c -rwxrwxrwx 0
0
10837830
<part2.img-_NDLIN~1.HTM-dead-10837830>
Mon Aug 17 1998 15:07:22 3814 m.. -rwxrwxrwx 0
0
10837830
<part2.img-_NDLIN~1.HTM-dead-10837830>
Mon Aug 17 1998 15:07:24 14924 ..c -rwxrwxrwx 0
0
10837834
<part2.img-_5383216.GIF-dead-10837834>
Mon Aug 17 1998 15:07:28 14924 m.. -rwxrwxrwx 0
0
10837834
<part2.img-_5383216.GIF-dead-10837834>
Mon Aug 17 1998 15:07:54 1499 ..c -rwxrwxrwx 0
0
10837836
<part2.img-_OTSTORE.GIF-dead-10837836>
Mon Aug 17 1998 15:07:56 1499 m.. -rwxrwxrwx 0
0
10837836
<part2.img-_OTSTORE.GIF-dead-10837836>
Mon Aug 17 1998 15:08:04 10056 ..c -rwxrwxrwx 0
0
10837838
<part2.img-_AV~1.HTM-dead-10837838>
Mon Aug 17 1998 15:08:06 10056 m.. -rwxrwxrwx 0
0
10837838
<part2.img-_AV~1.HTM-dead-10837838>
Mon Aug 17 1998 15:08:10 1945 ..c -rwxrwxrwx 0
0
10837840
<part2.img-_EY89.GIF-dead-10837840>
Mon Aug 17 1998 15:08:12 1945 m.. -rwxrwxrwx 0
0
10837840
<part2.img-_EY89.GIF-dead-10837840>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Mon Aug 17 1998 15:10:02
179 ..c -rwxrwxrwx 0
0
10837843
<part2.img-_23456~3.HTM-dead-10837843>
Mon Aug 17 1998 15:10:04
179 m.. -rwxrwxrwx 0
0
10837843
<part2.img-_23456~3.HTM-dead-10837843>
Mon Aug 17 1998 15:11:46 7320 ..c -rwxrwxrwx 0
0
10837847
<part2.img-_CTIVI~1.HTM-dead-10837847>
Mon Aug 17 1998 15:11:48 7320 m.. -rwxrwxrwx 0
0
10837847
<part2.img-_CTIVI~1.HTM-dead-10837847>
Mon Aug 17 1998 15:12:22 5151 ..c -rwxrwxrwx 0
0
10837832
<part2.img-_NEMAS~1.HTM-dead-10837832>
Mon Aug 17 1998 15:12:24 5151 m.. -rwxrwxrwx 0
0
10837832
<part2.img-_NEMAS~1.HTM-dead-10837832>
Mon Aug 17 1998 15:12:38 54637 ..c -rwxrwxrwx 0
0
10837849
<part2.img-_NEMAFAQ.TXT-dead-10837849>
Mon Aug 17 1998 15:12:46 54637 m.. -rwxrwxrwx 0
0
10837849
<part2.img-_NEMAFAQ.TXT-dead-10837849>
Mon Aug 17 1998 15:33:30 6171 ..c -rwxrwxrwx 0
0
10837852
<part2.img-_CTH_F~1.GIF-dead-10837852>
Mon Aug 17 1998 15:33:34 6171 m.. -rwxrwxrwx 0
0
10837852
<part2.img-_CTH_F~1.GIF-dead-10837852>
Mon Aug 17 1998 19:57:52 5844 ..c -rwxrwxrwx 0
0
26037810
<part2.img-_EATUR~1.JPE-dead-26037810>
Mon Aug 17 1998 19:57:54 5844 m.. -rwxrwxrwx 0
0
26037810
<part2.img-_EATUR~1.JPE-dead-26037810>
7090 ..c -rwxrwxrwx 0
0
10837855 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
_EGET_~2.GIF-dead-10837855>
Mon Aug 17 1998 19:58:00 7090 m.. -rwxrwxrwx 0
0
10837855
<part2.img-_EGET_~2.GIF-dead-10837855>
Mon Aug 17 1998 19:58:08 8688 ..c -rwxrwxrwx 0
0
10837857
<part2.img-_NEDAY~1.HTM-dead-10837857>
Mon Aug 17 1998 19:58:10 8688 m.. -rwxrwxrwx 0
0
10837857
<part2.img-_NEDAY~1.HTM-dead-10837857>
Mon Aug 17 1998 19:58:12
157 ..c -rwxrwxrwx 0
0
10837859
<part2.img-_RITE.GIF-dead-10837859>
Mon Aug 17 1998 19:58:14 1674 ..c -rwxrwxrwx 0
0
10837864
<part2.img-_OOK_OFF.GIF-dead-10837864>
1848 ..c -rwxrwxrwx 0
0
10837862 <part2.img_EGIST~1.GIF-dead-10837862>
157 m.. -rwxrwxrwx 0
0
10837859 <part2.img_RITE.GIF-dead-10837859>
Mon Aug 17 1998 19:58:16 1848 m.. -rwxrwxrwx 0
0
10837862
<part2.img-_EGIST~1.GIF-dead-10837862>
1674 m.. -rwxrwxrwx 0
0
10837864 <part2.img_OOK_OFF.GIF-dead-10837864>
Mon Aug 17 1998 19:58:18
950 ..c -rwxrwxrwx 0
0
16416618
<part2.img-_TRIPE1.GIF-dead-16416618>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Mon Aug 17 1998 19:58:20
950 m.. -rwxrwxrwx 0
0
16416618
<part2.img-_TRIPE1.GIF-dead-16416618>
Mon Aug 17 1998 19:58:22 2347 ..c -rwxrwxrwx 0
0
10837867
<part2.img-_EADER~3.GIF-dead-10837867>
Mon Aug 17 1998 19:58:24 2347 m.. -rwxrwxrwx 0
0
10837867
<part2.img-_EADER~3.GIF-dead-10837867>
Mon Aug 17 1998 19:58:32 14428 ..c -rwxrwxrwx 0
0
10837872
<part2.img-_ICROS~1.HTM-dead-10837872>
Mon Aug 17 1998 19:58:34 14428 m.. -rwxrwxrwx 0
0
10837872
<part2.img-_ICROS~1.HTM-dead-10837872>
Mon Aug 17 1998 19:58:52 1608 ..c -rwxrwxrwx 0
0
10837869
<part2.img-_IMPLE.GIF-dead-10837869>
Mon Aug 17 1998 19:58:54 1608 m.. -rwxrwxrwx 0
0
10837869
<part2.img-_IMPLE.GIF-dead-10837869>
Mon Aug 17 1998 19:59:00 1324 ..c -rwxrwxrwx 0
0
10837876
<part2.img-_EVELO~1.GIF-dead-10837876>
551 ..c -rwxrwxrwx 0
0
10837874 <part2.img_SN.GIF-dead-10837874>
Mon Aug 17 1998 19:59:02
551 m.. -rwxrwxrwx 0
0
10837874
<part2.img-_SN.GIF-dead-10837874>
1324 m.. -rwxrwxrwx 0
0
10837876 <part2.img_EVELO~1.GIF-dead-10837876>
Mon Aug 17 1998 19:59:10
189 ..c -rwxrwxrwx 0
0
10837882
<part2.img-_UPPOR~3.GIF-dead-10837882>
Mon Aug 17 1998 19:59:12
561 ..c -rwxrwxrwx 0
0
30191202
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
<part2.img-_THER.GIF-dead-30191202>
189 m.. -rwxrwxrwx 0
0
10837882 <part2.img_UPPOR~3.GIF-dead-10837882>
Mon Aug 17 1998 19:59:14
561 m.. -rwxrwxrwx 0
0
30191202
<part2.img-_THER.GIF-dead-30191202>
1865 ..c -rwxrwxrwx 0
0
26037824 <part2.img_ROM_MTS.GIF-dead-26037824>
Mon Aug 17 1998 19:59:16 1865 m.. -rwxrwxrwx 0
0
26037824
<part2.img-_ROM_MTS.GIF-dead-26037824>
1858 ..c -rwxrwxrwx 0
0
10837879 <part2.img_RY_SU~1.GIF-dead-10837879>
Mon Aug 17 1998 19:59:18 1858 m.. -rwxrwxrwx 0
0
10837879
<part2.img-_RY_SU~1.GIF-dead-10837879>
Mon Aug 17 1998 20:00:20
327 ..c -rwxrwxrwx 0
0
10837886
<part2.img-_UZSMALL.GIF-dead-10837886>
45 ..c -rwxrwxrwx 0
0
10837884 <part2.img_RANS(1).GIF-dead-10837884>
Mon Aug 17 1998 20:00:22
327 m.. -rwxrwxrwx 0
0
10837886
<part2.img-_UZSMALL.GIF-dead-10837886>
45 m.. -rwxrwxrwx 0
0
10837884 <part2.img_RANS(1).GIF-dead-10837884>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Mon Aug 17 1998 20:00:28 1001 ..c -rwxrwxrwx 0
0
10837889
<part2.img-_EGIST~2.GIF-dead-10837889>
Mon Aug 17 1998 20:00:30
366 ..c -rwxrwxrwx 0
0
10837891
<part2.img-_RITEUSN.GIF-dead-10837891>
1001 m.. -rwxrwxrwx 0
0
10837889 <part2.img_EGIST~2.GIF-dead-10837889>
Mon Aug 17 1998 20:00:32
920 ..c -rwxrwxrwx 0
0
10837894
<part2.img-_IGHLI~1.GIF-dead-10837894>
366 m.. -rwxrwxrwx 0
0
10837891 <part2.img_RITEUSN.GIF-dead-10837891>
93 ..c -rwxrwxrwx 0
0
16416650 <part2.img_ROMOTOP.GIF-dead-16416650>
565 ..c -rwxrwxrwx 0
0
10837896 <part2.img_LAGS.GIF-dead-10837896>
Mon Aug 17 1998 20:00:34
93 m.. -rwxrwxrwx 0
0
16416650
<part2.img-_ROMOTOP.GIF-dead-16416650>
920 m.. -rwxrwxrwx 0
0
10837894 <part2.img_IGHLI~1.GIF-dead-10837894>
565 m.. -rwxrwxrwx 0
0
10837896 <part2.img_LAGS.GIF-dead-10837896>
Mon Aug 17 1998 20:00:36 1810 ..c -rwxrwxrwx 0
0
10837898
<part2.img-_ROMNEWS.GIF-dead-10837898>
Mon Aug 17 1998 20:00:38 1810 m.. -rwxrwxrwx 0
0
10837898
<part2.img-_ROMNEWS.GIF-dead-10837898>
Mon Aug 17 1998 20:00:50 10582 ..c -rwxrwxrwx 0
0
16416655
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
<part2.img-_UINFO~1.HTM-dead-16416655>
Mon Aug 17 1998 20:00:54
118 ..c -rwxrwxrwx 0
0
10837900
<part2.img-_API.GIF-dead-10837900>
10582 m.. -rwxrwxrwx 0
0
16416655 <part2.img_UINFO~1.HTM-dead-16416655>
Mon Aug 17 1998 20:00:56
118 m.. -rwxrwxrwx 0
0
10837900
<part2.img-_API.GIF-dead-10837900>
Mon Aug 17 1998 20:01:10 2364 ..c -rwxrwxrwx 0
0
10837908
<part2.img-_ENOF.GIF-dead-10837908>
Mon Aug 17 1998 20:01:12 2364 m.. -rwxrwxrwx 0
0
10837908
<part2.img-_ENOF.GIF-dead-10837908>
Mon Aug 17 1998 20:01:28 1137 ..c -rwxrwxrwx 0
0
10837910
<part2.img-_REMIUM2.GIF-dead-10837910>
Mon Aug 17 1998 20:01:30 1137 m.. -rwxrwxrwx 0
0
10837910
<part2.img-_REMIUM2.GIF-dead-10837910>
2734 ..c -rwxrwxrwx 0
0
10837913 <part2.img_STDOL~1.JPE-dead-10837913>
Mon Aug 17 1998 20:01:32 2734 m.. -rwxrwxrwx 0
0
10837913
<part2.img-_STDOL~1.JPE-dead-10837913>
Mon Aug 17 1998 20:01:48 3757 ..c -rwxrwxrwx 0
0
10837916
<part2.img-_STSCR~1.JPE-dead-10837916>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Mon Aug 17 1998 20:01:50 3757 m.. -rwxrwxrwx 0
0
10837916
<part2.img-_STSCR~1.JPE-dead-10837916>
Mon Aug 17 1998 20:02:48 12517 ..c -rwxrwxrwx 0
0
10837902
<part2.img-_ORENE~1.HTM-dead-10837902>
Mon Aug 17 1998 20:02:50 12517 m.. -rwxrwxrwx 0
0
10837902
<part2.img-_ORENE~1.HTM-dead-10837902>
Mon Aug 17 1998 20:03:24
506 ..c -rwxrwxrwx 0
0
10837904
<part2.img-_ATE498.GIF-dead-10837904>
Mon Aug 17 1998 20:03:26
506 m.. -rwxrwxrwx 0
0
10837904
<part2.img-_ATE498.GIF-dead-10837904>
Mon Aug 17 1998 20:03:38 1787 ..c -rwxrwxrwx 0
0
10837906
<part2.img-_ELP(1).GIF-dead-10837906>
Mon Aug 17 1998 20:03:40 1787 m.. -rwxrwxrwx 0
0
10837906
<part2.img-_ELP(1).GIF-dead-10837906>
Mon Aug 17 1998 20:03:52 4074 ..c -rwxrwxrwx 0
0
10837919
<part2.img-_ORENE~2.HTM-dead-10837919>
Mon Aug 17 1998 20:03:54 4074 m.. -rwxrwxrwx 0
0
10837919
<part2.img-_ORENE~2.HTM-dead-10837919>
Mon Aug 17 1998 20:04:54 7553 ..c -rwxrwxrwx 0
0
10837918
<part2.img-_06.GIF-dead-10837918>
Mon Aug 17 1998 20:04:58 7553 m.. -rwxrwxrwx 0
0
10837918
<part2.img-_06.GIF-dead-10837918>
Mon Aug 17 1998 20:05:46 35247 ..c -rwxrwxrwx 0
0
10837921
<part2.img-__BOOK~1.HTM-dead-10837921>
Mon Aug 17 1998 20:05:52 35247 m.. -rwxrwxrwx 0
0
10837921
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
<part2.img-__BOOK~1.HTM-dead-10837921>
Mon Aug 17 1998 20:06:02 2163 ..c -rwxrwxrwx 0
0
10837923
<part2.img-_OPBOOK.GIF-dead-10837923>
Mon Aug 17 1998 20:06:04 2163 m.. -rwxrwxrwx 0
0
10837923
<part2.img-_OPBOOK.GIF-dead-10837923>
Mon Aug 17 1998 20:06:06 7759 ..c -rwxrwxrwx 0
0
10837925
<part2.img-_38.GIF-dead-10837925>
Mon Aug 17 1998 20:06:08 7759 m.. -rwxrwxrwx 0
0
10837925
<part2.img-_38.GIF-dead-10837925>
Mon Aug 17 1998 20:06:26 11851 ..c -rwxrwxrwx 0
0
10837927
<part2.img-_EFAUL~1.HTM-dead-10837927>
Mon Aug 17 1998 20:06:28 11851 m.. -rwxrwxrwx 0
0
10837927
<part2.img-_EFAUL~1.HTM-dead-10837927>
Mon Aug 17 1998 20:06:30 4051 ..c -rwxrwxrwx 0
0
10837929
<part2.img-_ILEACC.GIF-dead-10837929>
Mon Aug 17 1998 20:06:32 2409 ..c -rwxrwxrwx 0
0
10837931
<part2.img-_AC.GIF-dead-10837931>
4051 m.. -rwxrwxrwx 0
0
10837929 <part2.img_ILEACC.GIF-dead-10837929>
Mon Aug 17 1998 20:06:34 2409 m.. -rwxrwxrwx 0
0
10837931
<part2.img-_AC.GIF-dead-10837931>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Mon Aug 17 1998 20:06:36
565 ..c -rwxrwxrwx 0
0
10837933
<part2.img-_AVMDEMO.GIF-dead-10837933>
Mon Aug 17 1998 20:06:38
663 ..c -rwxrwxrwx 0
0
10837935
<part2.img-_AVSOL.GIF-dead-10837935>
565 m.. -rwxrwxrwx 0
0
10837933 <part2.img_AVMDEMO.GIF-dead-10837933>
Mon Aug 17 1998 20:06:40
663 m.. -rwxrwxrwx 0
0
10837935
<part2.img-_AVSOL.GIF-dead-10837935>
Mon Aug 17 1998 20:09:48 13238 ..c -rwxrwxrwx 0
0
10837938
<part2.img-_HARED~1.HTM-dead-10837938>
Mon Aug 17 1998 20:09:50 13238 m.. -rwxrwxrwx 0
0
10837938
<part2.img-_HARED~1.HTM-dead-10837938>
Mon Aug 17 1998 20:09:52 2221 ..c -rwxrwxrwx 0
0
10837940
<part2.img-_ASAC.GIF-dead-10837940>
Mon Aug 17 1998 20:09:54 2221 m.. -rwxrwxrwx 0
0
10837940
<part2.img-_ASAC.GIF-dead-10837940>
Mon Aug 17 1998 20:10:12
211 ..c -rwxrwxrwx 0
0
10837942
<part2.img-_OME(3).GIF-dead-10837942>
Mon Aug 17 1998 20:10:14
211 m.. -rwxrwxrwx 0
0
10837942
<part2.img-_OME(3).GIF-dead-10837942>
Mon Aug 17 1998 20:10:20 1963 ..c -rwxrwxrwx 0
0
10837944
<part2.img-_IIFM.GIF-dead-10837944>
Mon Aug 17 1998 20:10:22 1963 m.. -rwxrwxrwx 0
0
10837944
<part2.img-_IIFM.GIF-dead-10837944>
Mon Aug 17 1998 20:10:48 10621 ..c -rwxrwxrwx 0
0
10837946
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
<part2.img-_UINFO~1.HTM-dead-10837946>
Mon Aug 17 1998 20:10:50 10621 m.. -rwxrwxrwx 0
0
10837946
<part2.img-_UINFO~1.HTM-dead-10837946>
Mon Aug 17 1998 20:11:06 16293 ..c -rwxrwxrwx 0
0
10837949
<part2.img-_STOFF~1.HTM-dead-10837949>
Mon Aug 17 1998 20:11:12
483 ..c -rwxrwxrwx 0
0
10837952
<part2.img-_OWERP~1.GIF-dead-10837952>
Mon Aug 17 1998 20:11:14 16293 m.. -rwxrwxrwx 0
0
10837949
<part2.img-_STOFF~1.HTM-dead-10837949>
483 m.. -rwxrwxrwx 0
0
10837952 <part2.img_OWERP~1.GIF-dead-10837952>
Mon Aug 17 1998 20:11:16
381 ..c -rwxrwxrwx 0
0
10837954
<part2.img-_IBTIP.GIF-dead-10837954>
Mon Aug 17 1998 20:11:18 2942 ..c -rwxrwxrwx 0
0
10837957
<part2.img-_ROMPR~1.GIF-dead-10837957>
381 m.. -rwxrwxrwx 0
0
10837954 <part2.img_IBTIP.GIF-dead-10837954>
Mon Aug 17 1998 20:11:20 2942 m.. -rwxrwxrwx 0
0
10837957
<part2.img-_ROMPR~1.GIF-dead-10837957>
Mon Aug 17 1998 20:13:30 5496 ..c -rwxrwxrwx 0
0
10837959
<part2.img-_483F_~1.JPE-dead-10837959>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Mon Aug 17 1998 20:13:32 5496 m.. -rwxrwxrwx 0
0
10837959
<part2.img-_483F_~1.JPE-dead-10837959>
Mon Aug 17 1998 20:13:34 20659 ..c -rwxrwxrwx 0
0
10837962
<part2.img-_CCESS~1.HTM-dead-10837962>
Mon Aug 17 1998 20:13:40
464 ..c -rwxrwxrwx 0
0
10837969
<part2.img-_FUPA.GIF-dead-10837969>
842 ..c -rwxrwxrwx 0
0
10837964 <part2.img_FF_DEV.GIF-dead-10837964>
1015 ..c -rwxrwxrwx 0
0
10837967 <part2.img_SDN48~1.GIF-dead-10837967>
20659 m.. -rwxrwxrwx 0
0
10837962 <part2.img_CCESS~1.HTM-dead-10837962>
Mon Aug 17 1998 20:13:42
464 m.. -rwxrwxrwx 0
0
10837969
<part2.img-_FUPA.GIF-dead-10837969>
1015 m.. -rwxrwxrwx 0
0
10837967 <part2.img_SDN48~1.GIF-dead-10837967>
842 m.. -rwxrwxrwx 0
0
10837964 <part2.img_FF_DEV.GIF-dead-10837964>
Mon Aug 17 1998 20:13:58 49454 ..c -rwxrwxrwx 0
0
10837971
<part2.img-_-A&SA~1.HTM-dead-10837971>
Mon Aug 17 1998 20:14:04 49454 m.. -rwxrwxrwx 0
0
10837971
<part2.img-_-A&SA~1.HTM-dead-10837971>
Mon Aug 17 1998 20:23:08 78573 ..c -rwxrwxrwx 0
0
10837973
<part2.img-_35PER~1.HTM-dead-10837973>
Mon Aug 17 1998 20:23:22 6105 ..c -rwxrwxrwx 0
0
10837975
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
<part2.img-_357.GIF-dead-10837975>
Mon Aug 17 1998 20:23:24 6105 m.. -rwxrwxrwx 0
0
10837975
<part2.img-_357.GIF-dead-10837975>
Mon Aug 17 1998 20:23:44 78573 m.. -rwxrwxrwx 0
0
10837973
<part2.img-_35PER~1.HTM-dead-10837973>
Mon Aug 17 1998 20:27:00
464 ..c -rwxrwxrwx 0
0
10837980
<part2.img-_FUPO.GIF-dead-10837980>
1049 ..c -rwxrwxrwx 0
0
10837978 <part2.img_SDN48~2.GIF-dead-10837978>
Mon Aug 17 1998 20:27:02 1049 m.. -rwxrwxrwx 0
0
10837978
<part2.img-_SDN48~2.GIF-dead-10837978>
464 m.. -rwxrwxrwx 0
0
10837980 <part2.img_FUPO.GIF-dead-10837980>
Fri Aug 28 1998 00:00:00 1246 .a. -rwxrwxrwx 0
0
20026107
<part2.img-_N_3WA~1.JPE-dead-20026107>
8688 .a. -rwxrwxrwx 0
0
10837857 <part2.img_NEDAY~1.HTM-dead-10837857>
2414 .a. -rwxrwxrwx 0
0
10837792 <part2.img_AV~1.HTM-dead-10837792>
186 .a. -rwxrwxrwx 0
0
20026325 <part2.img_ONTHLY.GIF-dead-20026325>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
821 .a. -rwxrwxrwx 0
0
26038128 <part2.img_ILES.GIF-dead-26038128>
339 .a. -rwxrwxrwx 0
0
20026002 <part2.img_BACKG~1.GIF-dead-20026002>
78573 .a. -rwxrwxrwx 0
0
10837973 <part2.img_35PER~1.HTM-dead-10837973>
79 .a. -rwxrwxrwx 0
0
10837588 <part2.img_TTD_LNG.GIF-dead-10837588>
492 .a. -rwxrwxrwx 0
0
10837553 <part2.img_OPCEL~1.GIF-dead-10837553>
431 .a. -rwxrwxrwx 0
0
26038035 <part2.img-_AFLA~1.GIF-dead-26038035>
1314 .a. -rwxrwxrwx 0
0
10837990 <part2.img_INFO.GIF-dead-10837990>
144 .a. -rwxrwxrwx 0
0
26038161 <part2.img_ELECT~1.GIF-dead-26038161>
1221 .a. -rwxrwxrwx 0
0
26038075 <part2.img_UTTON~2.GIF-dead-26038075>
13238 .a. -rwxrwxrwx 0
0
10837938 <part2.img_HARED~1.HTM-dead-10837938>
695 .a. -rwxrwxrwx 0
0
20026263 <part2.img_MRIGHT.GIF-dead-20026263>
18549 .a. -rwxrwxrwx 0
0
10837650 <part2.img_05~2.HTM-dead-10837650>
2942 .a. -rwxrwxrwx 0
0
10837957 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
_ROMPR~1.GIF-dead-10837957>
483 .a. -rwxrwxrwx 0
0
10837952 <part2.img_OWERP~1.GIF-dead-10837952>
133 .a. -rwxrwxrwx 0
0
26038151 <part2.img_WIM.GIF-dead-26038151>
2968 .a. -rwxrwxrwx 0
0
10837692 <part2.img_G_BTTN4.GIF-dead-10837692>
865 .a. -rwxrwxrwx 0
0
20026295 <part2.img_OGO_C~1.GIF-dead-20026295>
10056 .a. -rwxrwxrwx 0
0
10837838 <part2.img_AV~1.HTM-dead-10837838>
1209 .a. -rwxrwxrwx 0
0
26037818 <part2.img_ONTEN~1.GIF-dead-26037818>
564 .a. -rwxrwxrwx 0
0
10837716 <part2.img_ELLOW.GIF-dead-10837716>
1320 .a. -rwxrwxrwx 0
0
26037966 <part2.img_OMELI~5.GIF-dead-26037966>
10267 .a. -rwxrwxrwx 0
0
10837820 <part2.img_LACKO~1.GIF-dead-10837820>
1775 .a. -rwxrwxrwx 0
0
10837508 <part2.img_UST_S~1.GIF-dead-10837508>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
464 .a. -rwxrwxrwx 0
0
10837980 <part2.img_FUPO.GIF-dead-10837980>
5581 .a. -rwxrwxrwx 0
0
10837689 <part2.img_10121~1.HTM-dead-10837689>
5093 .a. -rwxrwxrwx 0
0
10837557 <part2.img_OPCEL~2.GIF-dead-10837557>
981 .a. -rwxrwxrwx 0
0
26038176 <part2.img_YMAPUS.GIF-dead-26038176>
1079 .a. -rwxrwxrwx 0
0
10837710 <part2.img_OBACK.GIF-dead-10837710>
3981 .a. -rwxrwxrwx 0
0
20025984 <part2.img_EARCH~7.HTM-dead-20025984>
1316 .a. -rwxrwxrwx 0
0
26037977 <part2.img_OGO(2).GIF-dead-26037977>
369 .a. -rwxrwxrwx 0
0
26037799 <part2.img_URRET~1.GIF-dead-26037799>
625 .a. -rwxrwxrwx 0
0
20025933 <part2.img_UPPOR~1.GIF-dead-20025933>
598 .a. -rwxrwxrwx 0
0
26038040 <part2.img-_DOFF.GIF-dead-26038040>
84 .a. -rwxrwxrwx 0
0
20026282 <part2.img_OLUTI~1.HTM-dead-20026282>
211 .a. -rwxrwxrwx 0
0
26037820 <part2.img_OME(1).GIF-dead-26037820>
565 .a. -rwxrwxrwx 0
0
10837896 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5 06E4 A169 4E46
_LAGS.GIF-dead-10837896>
803 .a. -rwxrwxrwx 0
0
10837555 <part2.img_HAD.GIF-dead-10837555>
2117 .a. -rwxrwxrwx 0
0
20025935 <part2.img_YSPAGE1.GIF-dead-20025935>
969 .a. -rwxrwxrwx 0
0
20026327 <part2.img_71.GIF-dead-20026327>
632 .a. -rwxrwxrwx 0
0
10837526 <part2.img_2_SH.GIF-dead-10837526>
1674 .a. -rwxrwxrwx 0
0
10837864 <part2.img_OOK_OFF.GIF-dead-10837864>
573 .a. -rwxrwxrwx 0
0
10837582 <part2.img_OP_NA~1.GIF-dead-10837582>
565 .a. -rwxrwxrwx 0
0
10837933 <part2.img_AVMDEMO.GIF-dead-10837933>
156 .a. -rwxrwxrwx 0
0
26037813 <part2.img_UPPORT.GIF-dead-26037813>
246 .a. -rwxrwxrwx 0
0
26037787 <part2.img_OME_ON.GIF-dead-26037787>
2041 .a. -rwxrwxrwx 0
0
26038089 <part2.img_A3WBC~1.HTM-dead-26038089>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
1049 .a. -rwxrwxrwx 0
0
10837978 <part2.img_SDN48~2.GIF-dead-10837978>
384 .a. -rwxrwxrwx 0
0
26037802 <part2.img_URRET~2.GIF-dead-26037802>
1893 .a. -rwxrwxrwx 0
0
10837532 <part2.img_Y.GIF-dead-10837532>
1963 .a. -rwxrwxrwx 0
0
10837944 <part2.img_IIFM.GIF-dead-10837944>
1135 .a. -rwxrwxrwx 0
0
20026045 <part2.img_N_SM0~1.JPE-dead-20026045>
1787 .a. -rwxrwxrwx 0
0
10837906 <part2.img_ELP(1).GIF-dead-10837906>
189 .a. -rwxrwxrwx 0
0
10837882 <part2.img_UPPOR~3.GIF-dead-10837882>
429 .a. -rwxrwxrwx 0
0
10837781 <part2.img_TORLA~1.GIF-dead-10837781>
1364 .a. -rwxrwxrwx 0
0
20026116 <part2.img_N_DOT~1.JPE-dead-20026116>
157 .a. -rwxrwxrwx 0
0
26037892 <part2.img_OUNT.GIF-dead-26037892>
697 .a. -rwxrwxrwx 0
0
26038080 <part2.img_RIP_L~1.GIF-dead-26038080>
947 .a. -rwxrwxrwx 0
0
26038257 <part2.img_ERT.GIF-dead-26038257>
900 .a. -rwxrwxrwx 0
0
26037793 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5 06E4 A169 4E46
_AV_BU~1.GIF-dead-26037793>
1871 .a. -rwxrwxrwx 0
0
10837577 <part2.img_SCAT30.GIF-dead-10837577>
438 .a. -rwxrwxrwx 0
0
26037909 <part2.img_WITCH~1.GIF-dead-26037909>
175 .a. -rwxrwxrwx 0
0
20025930 <part2.img__FOUR.GIF-dead-20025930>
252 .a. -rwxrwxrwx 0
0
26038082 <part2.img_LIGHT~1.HTM-dead-26038082>
11851 .a. -rwxrwxrwx 0
0
10837927 <part2.img_EFAUL~1.HTM-dead-10837927>
7090 .a. -rwxrwxrwx 0
0
10837855 <part2.img_EGET_~2.GIF-dead-10837855>
6630 .a. -rwxrwxrwx 0
0
10837721 <part2.img_UTTON~4.GIF-dead-10837721>
584 .a. -rwxrwxrwx 0
0
10837764 <part2.img_AIN~1.HTM-dead-10837764>
4454 .a. -rwxrwxrwx 0
0
10837620 <part2.img_AGES-~1.HTM-dead-10837620>
423 .a. -rwxrwxrwx 0
0
26038053 <part2.img-_1.GIFdead-26038053>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
1184 .a. -rwxrwxrwx 0
0
10837756 <part2.img_OC7OFF.GIF-dead-10837756>
536 .a. -rwxrwxrwx 0
0
26037790 <part2.img_PISOD~2.GIF-dead-26037790>
2364 .a. -rwxrwxrwx 0
0
10837908 <part2.img_ENOF.GIF-dead-10837908>
1182 .a. -rwxrwxrwx 0
0
26037828 <part2.img__APPLY.GIF-dead-26037828>
44655 .a. -rwxrwxrwx 0
0
10837741 <part2.img_P8.GIF-dead-10837741>
1392 .a. -rwxrwxrwx 0
0
26038188 <part2.img_ROWSE~1.GIF-dead-26038188>
5714 .a. -rwxrwxrwx 0
0
10837636 <part2.img_EARC~12.HTM-dead-10837636>
1094 .a. -rwxrwxrwx 0
0
26038141 <part2.img_TA~1.HTM-dead-26038141>
881 .a. -rwxrwxrwx 0
0
20025944 <part2.img_0000017.GIF-dead-20025944>
456 .a. -rwxrwxrwx 0
0
10837794 <part2.img_HTOC2.GIF-dead-10837794>
1293 .a. -rwxrwxrwx 0
0
10837748 <part2.img_NDEX~10.HTM-dead-10837748>
1576 .a. -rwxrwxrwx 0
0
20026144 <part2.img_N_BDC~1.JPE-dead-20026144>
1810 .a. -rwxrwxrwx 0
0
10837511 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
_RDER_~1.GIF-dead-10837511>
469 .a. -rwxrwxrwx 0
0
10837779 <part2.img_TCELE~1.GIF-dead-10837779>
468 .a. -rwxrwxrwx 0
0
26038005 <part2.img_ITLE_~1.GIF-dead-26038005>
1011 .a. -rwxrwxrwx 0
0
10837592 <part2.img_DR_VS.GIF-dead-10837592>
2171 .a. -rwxrwxrwx 0
0
20026013 <part2.img_BTN2R.GIF-dead-20026013>
1404 .a. -rwxrwxrwx 0
0
26038185 <part2.img_BSOLU~1.GIF-dead-26038185>
366 .a. -rwxrwxrwx 0
0
10837891 <part2.img_RITEUSN.GIF-dead-10837891>
1692 .a. -rwxrwxrwx 0
0
26038017 <part2.img_STORE.GIF-dead-26038017>
114 .a. -rwxrwxrwx 0
0
20026354 <part2.img_RULEB~1.GIF-dead-20026354>
15674 .a. -rwxrwxrwx 0
0
26038158 <part2.img_ED_AN~1.HTM-dead-26038158>
1427 .a. -rwxrwxrwx 0
0
26037969 <part2.img_OMELI~6.GIF-dead-26037969>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
3814 .a. -rwxrwxrwx 0
0
10837830 <part2.img_NDLIN~1.HTM-dead-10837830>
247 .a. -rwxrwxrwx 0
0
26037830 <part2.img_OME(2).GIF-dead-26037830>
953 .a. -rwxrwxrwx 0
0
26038110 <part2.img_ARCOLR3.GIF-dead-26038110>
627 .a. -rwxrwxrwx 0
0
26038217 <part2.img_ITE3_~2.GIF-dead-26038217>
940 .a. -rwxrwxrwx 0
0
26037896 <part2.img_HKITOUT.GIF-dead-26037896>
118 .a. -rwxrwxrwx 0
0
10837900 <part2.img_API.GIF-dead-10837900>
990 .a. -rwxrwxrwx 0
0
10837746 <part2.img_SF~1.HTM-dead-10837746>
1949 .a. -rwxrwxrwx 0
0
26038122 <part2.img_ROMOS.GIF-dead-26038122>
15013 .a. -rwxrwxrwx 0
0
10837744 <part2.img_EARC~14.HTM-dead-10837744>
2223 .a. -rwxrwxrwx 0
0
26037983 <part2.img_D00JD~2.HTM-dead-26037983>
3499 .a. -rwxrwxrwx 0
0
10837695 <part2.img_OOD_N~2.GIF-dead-10837695>
5151 .a. -rwxrwxrwx 0
0
10837832 <part2.img_NEMAS~1.HTM-dead-10837832>
537 .a. -rwxrwxrwx 0
0
20026069 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5 06E4 A169 4E46
_EW(1).GIF-dead-20026069>
1865 .a. -rwxrwxrwx 0
0
26037824 <part2.img_ROM_MTS.GIF-dead-26037824>
234 .a. -rwxrwxrwx 0
0
26038124 <part2.img_OP~1.HTM-dead-26038124>
680 .a. -rwxrwxrwx 0
0
10837534 <part2.img__STO.GIF-dead-10837534>
6105 .a. -rwxrwxrwx 0
0
10837975 <part2.img_357.GIF-dead-10837975>
461 .a. -rwxrwxrwx 0
0
10837678 <part2.img__HG_G~1.GIF-dead-10837678>
700 .a. -rwxrwxrwx 0
0
20026268 <part2.img_RACLE~1.GIF-dead-20026268>
1136 .a. -rwxrwxrwx 0
0
26038072 <part2.img_ACK(2).GIF-dead-26038072>
1064 .a. -rwxrwxrwx 0
0
26037842 <part2.img_NDCAP.GIF-dead-26037842>
43 .a. -rwxrwxrwx 0
0
20026237 <part2.img_PACE.GIF-dead-20026237>
1810 .a. -rwxrwxrwx 0
0
10837898 <part2.img_ROMNEWS.GIF-dead-10837898>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
201 .a. -rwxrwxrwx 0
0
26037822 <part2.img_ROD_ON.GIF-dead-26037822>
1290 .a. -rwxrwxrwx 0
0
10837654 <part2.img_48.GIF-dead-10837654>
305 .a. -rwxrwxrwx 0
0
26038205 <part2.img_LUEBA~1.GIF-dead-26038205>
766 .a. -rwxrwxrwx 0
0
26037769 <part2.img_CTIVEX.GIF-dead-26037769>
1060 .a. -rwxrwxrwx 0
0
10837988 <part2.img_P.GIF-dead-10837988>
1137 .a. -rwxrwxrwx 0
0
10837910 <part2.img_REMIUM2.GIF-dead-10837910>
5825 .a. -rwxrwxrwx 0
0
10837697 <part2.img_10122~1.HTM-dead-10837697>
45 .a. -rwxrwxrwx 0
0
10837884 <part2.img_RANS(1).GIF-dead-10837884>
465 .a. -rwxrwxrwx 0
0
10837770 <part2.img_SNICK.GIF-dead-10837770>
14428 .a. -rwxrwxrwx 0
0
10837872 <part2.img_ICROS~1.HTM-dead-10837872>
1838 .a. -rwxrwxrwx 0
0
20026022 <part2.img_ITLE.GIF-dead-20026022>
1047 .a. -rwxrwxrwx 0
0
10837783 <part2.img_ELP~1.HTM-dead-10837783>
1026 .a. -rwxrwxrwx 0
0
20025981 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
_ACKGR~2.JPE-dead-20025981>
1663 .a. -rwxrwxrwx 0
0
26038153 <part2.img_TA(1)~2.HTM-dead-26038153>
211 .a. -rwxrwxrwx 0
0
10837942 <part2.img_OME(3).GIF-dead-10837942>
773 .a. -rwxrwxrwx 0
0
26037980 <part2.img_D00JD~1.HTM-dead-26037980>
7553 .a. -rwxrwxrwx 0
0
10837918 <part2.img_06.GIF-dead-10837918>
619 .a. -rwxrwxrwx 0
0
20026291 <part2.img_OME(2~2.HTM-dead-20026291>
7320 .a. -rwxrwxrwx 0
0
10837847 <part2.img_CTIVI~1.HTM-dead-10837847>
16293 .a. -rwxrwxrwx 0
0
10837949 <part2.img_STOFF~1.HTM-dead-10837949>
12549 .a. -rwxrwxrwx 0
0
10837597 <part2.img_EARC~11.HTM-dead-10837597>
720 .a. -rwxrwxrwx 0
0
20025926 <part2.img_NSTRU~1.GIF-dead-20025926>
165 .a. -rwxrwxrwx 0
0
26037815 <part2.img_ROD.GIF-dead-26037815>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
1224 .a. -rwxrwxrwx 0
0
10837730 <part2.img_OGO_Q~1.GIF-dead-10837730>
909 .a. -rwxrwxrwx 0
0
10838004 <part2.img_NFORM~1.GIF-dead-10838004>
529 .a. -rwxrwxrwx 0
0
26038220 <part2.img_OUR_G~1.GIF-dead-26038220>
2006 .a. -rwxrwxrwx 0
0
26038259 <part2.img_HAT.GIF-dead-26038259>
3968 .a. -rwxrwxrwx 0
0
10837796 <part2.img_OPNAV~2.HTM-dead-10837796>
3217 .a. -rwxrwxrwx 0
0
10837671 <part2.img_ROMO1~1.GIF-dead-10837671>
8465 .a. -rwxrwxrwx 0
0
10837708 <part2.img_HHOTELS.GIF-dead-10837708>
413 .a. -rwxrwxrwx 0
0
26038143 <part2.img_OTICON.GIF-dead-26038143>
1848 .a. -rwxrwxrwx 0
0
10837862 <part2.img_EGIST~1.GIF-dead-10837862>
458 .a. -rwxrwxrwx 0
0
26038032 <part2.img-_KFLA~1.GIF-dead-26038032>
342 .a. -rwxrwxrwx 0
0
10837808 <part2.img_GSTUDIO.GIF-dead-10837808>
265 .a. -rwxrwxrwx 0
0
10837568 <part2.img_NIM02~2.HTM-dead-10837568>
3322 .a. -rwxrwxrwx 0
0
10837735 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
_YBERI~1.HTM-dead-10837735>
1945 .a. -rwxrwxrwx 0
0
10837840 <part2.img_EY89.GIF-dead-10837840>
1181 .a. -rwxrwxrwx 0
0
10837762 <part2.img_HOOT~1.HTM-dead-10837762>
4430 .a. -rwxrwxrwx 0
0
10837514 <part2.img_BBACK~1.GIF-dead-10837514>
1408 .a. -rwxrwxrwx 0
0
26038136 <part2.img_INKS2.GIF-dead-26038136>
541 .a. -rwxrwxrwx 0
0
10837806 <part2.img_TUDIO~1.GIF-dead-10837806>
1858 .a. -rwxrwxrwx 0
0
10837879 <part2.img_RY_SU~1.GIF-dead-10837879>
1738 .a. -rwxrwxrwx 0
0
20026059 <part2.img_N_BON~3.JPE-dead-20026059>
329 .a. -rwxrwxrwx 0
0
20025938 <part2.img_YSGEN~1.GIF-dead-20025938>
684 .a. -rwxrwxrwx 0
0
26037954 <part2.img_RNHOME2.GIF-dead-26037954>
35 .a. -rwxrwxrwx 0
0
10837518 <part2.img_URPLE.GIF-dead-10837518>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
583 .a. -rwxrwxrwx 0
0
10837785 <part2.img_AIN(1~2.HTM-dead-10837785>
14957 .a. -rwxrwxrwx 0
0
10837803 <part2.img_OOD~1.HTM-dead-10837803>
1104 .a. -rwxrwxrwx 0
0
26038115 <part2.img_ITY.GIF-dead-26038115>
381 .a. -rwxrwxrwx 0
0
10837954 <part2.img_IBTIP.GIF-dead-10837954>
1478 .a. -rwxrwxrwx 0
0
20026006 <part2.img_SBTN1L.GIF-dead-20026006>
1470 .a. -rwxrwxrwx 0
0
26037840 <part2.img_OWNLO~1.GIF-dead-26037840>
1479 .a. -rwxrwxrwx 0
0
26037844 <part2.img_TYLE.CSS-dead-26037844>
1223 .a. -rwxrwxrwx 0
0
10837828 <part2.img_SACI.GIF-dead-10837828>
157 .a. -rwxrwxrwx 0
0
10837859 <part2.img_RITE.GIF-dead-10837859>
2137 .a. -rwxrwxrwx 0
0
20026011 <part2.img_ULLQU~1.GIF-dead-20026011>
8214 .a. -rwxrwxrwx 0
0
10837714 <part2.img_EBRES~1.HTM-dead-10837714>
2173 .a. -rwxrwxrwx 0
0
20026039 <part2.img_OPSUN~1.JPE-dead-20026039>
1024 .a. -rwxrwxrwx 0
0
10837704 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
_UTTON~3.GIF-dead-10837704>
9065 .a. -rwxrwxrwx 0
0
20026284 <part2.img_ILE.GIF-dead-20026284>
358 .a. -rwxrwxrwx 0
0
20026258 <part2.img_M2.GIF-dead-20026258>
671 .a. -rwxrwxrwx 0
0
10837752 <part2.img_URPBACK.GIF-dead-10837752>
2347 .a. -rwxrwxrwx 0
0
10837867 <part2.img_EADER~3.GIF-dead-10837867>
91 .a. -rwxrwxrwx 0
0
26038223 <part2.img_OUR_S~1.GIF-dead-26038223>
513 .a. -rwxrwxrwx 0
0
20026313 <part2.img_TRIPE1.GIF-dead-20026313>
1715 .a. -rwxrwxrwx 0
0
26038255 <part2.img_HOE.GIF-dead-26038255>
5496 .a. -rwxrwxrwx 0
0
10837959 <part2.img_483F_~1.JPE-dead-10837959>
1242 .a. -rwxrwxrwx 0
0
10838010 <part2.img_WWNAT~1.GIF-dead-10838010>
86 .a. -rwxrwxrwx 0
0
26038147 <part2.img_ANDICAP.GIF-dead-26038147>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
640 .a. -rwxrwxrwx 0
0
26038008 <part2.img_ITLE_~2.GIF-dead-26038008>
49454 .a. -rwxrwxrwx 0
0
10837971 <part2.img-_A&SA~1.HTM-dead-10837971>
2356 .a. -rwxrwxrwx 0
0
20026043 <part2.img_INLAB.GIF-dead-20026043>
881 .a. -rwxrwxrwx 0
0
20025950 <part2.img_0000004.GIF-dead-20025950>
1387 .a. -rwxrwxrwx 0
0
26037952 <part2.img_PLINK.GIF-dead-26037952>
196 .a. -rwxrwxrwx 0
0
20026233 <part2.img-_6.GIFdead-20026233>
1359 .a. -rwxrwxrwx 0
0
26038191 <part2.img_BSOLU~2.GIF-dead-26038191>
579 .a. -rwxrwxrwx 0
0
26037808 <part2.img_URRET~3.GIF-dead-26037808>
5880 .a. -rwxrwxrwx 0
0
26037938 <part2.img_FLATW~1.HTM-dead-26037938>
541 .a. -rwxrwxrwx 0
0
26038237 <part2.img_OURBU~1.GIF-dead-26038237>
1936 .a. -rwxrwxrwx 0
0
20026056 <part2.img_N_BON~2.JPE-dead-20026056>
35835 .a. -rwxrwxrwx 0
0
10837682 <part2.img_L1KS~1.HTM-dead-10837682>
2330 .a. -rwxrwxrwx 0
0
26037913 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
_V_LOGO.GIF-dead-26037913>
2112 .a. -rwxrwxrwx 0
0
10837823 <part2.img_OONS-~1.GIF-dead-10837823>
200 .a. -rwxrwxrwx 0
0
26037832 <part2.img_ROD(1).GIF-dead-26037832>
1661 .a. -rwxrwxrwx 0
0
10837986 <part2.img_ACKGR~2.GIF-dead-10837986>
4471 .a. -rwxrwxrwx 0
0
10837631 <part2.img_EC5SU~1.HTM-dead-10837631>
834 .a. -rwxrwxrwx 0
0
10837548 <part2.img_HITE8~1.GIF-dead-10837548>
7206 .a. -rwxrwxrwx 0
0
10837982 <part2.img_OOLS~1.HTM-dead-10837982>
352 .a. -rwxrwxrwx 0
0
10837810 <part2.img_OP(2).GIF-dead-10837810>
1350 .a. -rwxrwxrwx 0
0
10837766 <part2.img_OC6OFF.GIF-dead-10837766>
90 .a. -rwxrwxrwx 0
0
26038145 <part2.img_OSMOKE.GIF-dead-26038145>
6171 .a. -rwxrwxrwx 0
0
10837852 <part2.img_CTH_F~1.GIF-dead-10837852>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
1074 .a. -rwxrwxrwx 0
0
26037890 <part2.img_EW(2).GIF-dead-26037890>
316 .a. -rwxrwxrwx 0
0
26038038 <part2.img-_SFLA~1.GIF-dead-26038038>
1499 .a. -rwxrwxrwx 0
0
10837836 <part2.img_OTSTORE.GIF-dead-10837836>
1179 .a. -rwxrwxrwx 0
0
20026119 <part2.img_N_GES~1.JPE-dead-20026119>
6239 .a. -rwxrwxrwx 0
0
10837724 <part2.img_EADER~2.GIF-dead-10837724>
119 .a. -rwxrwxrwx 0
0
10837561 <part2.img_IDCEL~1.GIF-dead-10837561>
1314 .a. -rwxrwxrwx 0
0
10837991 <part2.img_INFO.GIF-dead-10837991>
1120 .a. -rwxrwxrwx 0
0
20026127 <part2.img_N_RED~1.JPE-dead-20026127>
23512 .a. -rwxrwxrwx 0
0
10837676 <part2.img_L1LB~1.HTM-dead-10837676>
7615 .a. -rwxrwxrwx 0
0
20026246 <part2.img_T(2)~2.HTM-dead-20026246>
60 .a. -rwxrwxrwx 0
0
20026275 <part2.img_RACER.GIF-dead-20026275>
881 .a. -rwxrwxrwx 0
0
20025942 <part2.img_0000008.GIF-dead-20025942>
20814 .a. -rwxrwxrwx 0
0
26038102 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
_RAVEL~1.HTM-dead-26038102>
601 .a. -rwxrwxrwx 0
0
26037960 <part2.img_OMELI~3.GIF-dead-26037960>
468 .a. -rwxrwxrwx 0
0
26037956 <part2.img_OMELI~1.GIF-dead-26037956>
35247 .a. -rwxrwxrwx 0
0
10837921 <part2.img__BOOK~1.HTM-dead-10837921>
551 .a. -rwxrwxrwx 0
0
10837874 <part2.img_SN.GIF-dead-10837874>
11124 .a. -rwxrwxrwx 0
0
10837536 <part2.img_EFT_I~2.HTM-dead-10837536>
1527 .a. -rwxrwxrwx 0
0
10837680 <part2.img__MN_HG.GIF-dead-10837680>
663 .a. -rwxrwxrwx 0
0
10837935 <part2.img_AVSOL.GIF-dead-10837935>
878 .a. -rwxrwxrwx 0
0
26037915 <part2.img_AB.GIF-dead-26037915>
389 .a. -rwxrwxrwx 0
0
20026265 <part2.img_M6.GIF-dead-20026265>
464 .a. -rwxrwxrwx 0
0
10837969 <part2.img_FUPA.GIF-dead-10837969>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
1312 .a. -rwxrwxrwx 0
0
20026113 <part2.img_N_C_X~1.JPE-dead-20026113>
473 .a. -rwxrwxrwx 0
0
26037963 <part2.img_OMELI~4.GIF-dead-26037963>
99 .a. -rwxrwxrwx 0
0
26038134 <part2.img_RANSP~1.GIF-dead-26038134>
1695 .a. -rwxrwxrwx 0
0
20026025 <part2.img_N_VLG~1.JPE-dead-20026025>
82 .a. -rwxrwxrwx 0
0
26037826 <part2.img_LUEDOT.GIF-dead-26037826>
1368 .a. -rwxrwxrwx 0
0
20026293 <part2.img-_.GIFdead-20026293>
2734 .a. -rwxrwxrwx 0
0
10837913 <part2.img_STDOL~1.JPE-dead-10837913>
3932 .a. -rwxrwxrwx 0
0
20025962 <part2.img_LASSI~1.GIF-dead-20025962>
365 .a. -rwxrwxrwx 0
0
10837700 <part2.img_DFORC~1.HTM-dead-10837700>
360 .a. -rwxrwxrwx 0
0
20026031 <part2.img_IVBAR2.GIF-dead-20026031>
1150 .a. -rwxrwxrwx 0
0
10837516 <part2.img_Y_LOGO.GIF-dead-10837516>
239 .a. -rwxrwxrwx 0
0
20025928 <part2.img__THREE.GIF-dead-20025928>
15556 .a. -rwxrwxrwx 0
0
10837999 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
_ERVE(~3.HTM-dead-10837999>
3757 .a. -rwxrwxrwx 0
0
10837916 <part2.img_STSCR~1.JPE-dead-10837916>
446 .a. -rwxrwxrwx 0
0
20025957 <part2.img_AHOO!~1.GIF-dead-20025957>
11587 .a. -rwxrwxrwx 0
0
10837750 <part2.img_OME(3~2.HTM-dead-10837750>
153 .a. -rwxrwxrwx 0
0
20026035 <part2.img-_P.GIFdead-20026035>
273 .a. -rwxrwxrwx 0
0
20026029 <part2.img_G1.GIF-dead-20026029>
2163 .a. -rwxrwxrwx 0
0
10837923 <part2.img_OPBOOK.GIF-dead-10837923>
1881 .a. -rwxrwxrwx 0
0
10837774 <part2.img_UBNAV~1.HTM-dead-10837774>
1489 .a. -rwxrwxrwx 0
0
20026053 <part2.img_N_BON~1.JPE-dead-20026053>
35 .a. -rwxrwxrwx 0
0
10837530 <part2.img_CCCFF.GIF-dead-10837530>
36 .a. -rwxrwxrwx 0
0
26037837 <part2.img_LKSPA~1.GIF-dead-26037837>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
999 .a. -rwxrwxrwx 0
0
26037796 <part2.img_AV_BU~2.GIF-dead-26037796>
1497 .a. -rwxrwxrwx 0
0
26038274 <part2.img_EARCH~3.GIF-dead-26038274>
2234 .a. -rwxrwxrwx 0
0
26038245 <part2.img_UESTS.GIF-dead-26038245>
7384 .a. -rwxrwxrwx 0
0
10837983 <part2.img_HESAP~2.HTM-dead-10837983>
998 .a. -rwxrwxrwx 0
0
26037835 <part2.img_UPPOR~2.GIF-dead-26037835>
872 .a. -rwxrwxrwx 0
0
20025946 <part2.img_0000022.GIF-dead-20025946>
1685 .a. -rwxrwxrwx 0
0
26038126 <part2.img_EFT~1.HTM-dead-26038126>
1340 .a. -rwxrwxrwx 0
0
10837727 <part2.img_OGO_S~1.GIF-dead-10837727>
3919 .a. -rwxrwxrwx 0
0
20025890 <part2.img_KAR.GIF-dead-20025890>
13462 .a. -rwxrwxrwx 0
0
10837997 <part2.img_ERVE(~2.HTM-dead-10837997>
1001 .a. -rwxrwxrwx 0
0
10837889 <part2.img_EGIST~2.GIF-dead-10837889>
257 .a. -rwxrwxrwx 0
0
10837813 <part2.img_GDIRE~1.GIF-dead-10837813>
1819 .a. -rwxrwxrwx 0
0
10837570 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
_AV_FAQ.GIF-dead-10837570>
1370 .a. -rwxrwxrwx 0
0
10837687 <part2.img_C_VS.GIF-dead-10837687>
1043 .a. -rwxrwxrwx 0
0
10837706 <part2.img_ESERV.GIF-dead-10837706>
1607 .a. -rwxrwxrwx 0
0
10837522 <part2.img__STO_HI.GIF-dead-10837522>
506 .a. -rwxrwxrwx 0
0
10837904 <part2.img_ATE498.GIF-dead-10837904>
1135 .a. -rwxrwxrwx 0
0
20026124 <part2.img_N_ORA~1.JPE-dead-20026124>
696 .a. -rwxrwxrwx 0
0
10837524 <part2.img_1_GI.GIF-dead-10837524>
1716 .a. -rwxrwxrwx 0
0
26038272 <part2.img_HOP_O~1.GIF-dead-26038272>
3306 .a. -rwxrwxrwx 0
0
10837712 <part2.img-_NASS~1.GIF-dead-10837712>
5844 .a. -rwxrwxrwx 0
0
26037810 <part2.img_EATUR~1.JPE-dead-26037810>
153 .a. -rwxrwxrwx 0
0
20026244 <part2.img_ETFIND.GIF-dead-20026244>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
20659 .a. -rwxrwxrwx 0
0
10837962 <part2.img_CCESS~1.HTM-dead-10837962>
1414 .a. -rwxrwxrwx 0
0
10837801 <part2.img_OC4ON.GIF-dead-10837801>
61604 .a. -rwxrwxrwx 0
0
20025959 <part2.img_HIPSE~1.HTM-dead-20025959>
219 .a. -rwxrwxrwx 0
0
26038172 <part2.img_SIDE.GIF-dead-26038172>
3695 .a. -rwxrwxrwx 0
0
10837760 <part2.img_ELCOME.GIF-dead-10837760>
1355 .a. -rwxrwxrwx 0
0
20026008 <part2.img_SBTN5L.GIF-dead-20026008>
1620 .a. -rwxrwxrwx 0
0
10837573 <part2.img_AV_LTD.GIF-dead-10837573>
1174 .a. -rwxrwxrwx 0
0
10738135 <part2.img_NMT_ON.GIF-dead-10738135>
461 .a. -rwxrwxrwx 0
0
26037778 <part2.img_OP(1).GIF-dead-26037778>
2396 .a. -rwxrwxrwx 0
0
20026004 <part2.img_BTN4L.GIF-dead-20026004>
43 .a. -rwxrwxrwx 0
0
26038023 <part2.img_(1).GIF-dead-26038023>
1406 .a. -rwxrwxrwx 0
0
20026122 <part2.img_N_GGX~1.JPE-dead-20026122>
278 .a. -rwxrwxrwx 0
0
10837817 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5 06E4 A169 4E46
_GSET.GIF-dead-10837817>
167 .a. -rwxrwxrwx 0
0
26037975 <part2.img_REENA~1.GIF-dead-26037975>
57 .a. -rwxrwxrwx 0
0
20026367 <part2.img_REYBU~1.GIF-dead-20026367>
6262 .a. -rwxrwxrwx 0
0
26037894 <part2.img_ENDOR~1.HTM-dead-26037894>
376 .a. -rwxrwxrwx 0
0
26038240 <part2.img_HITEH~1.HTM-dead-26038240>
54637 .a. -rwxrwxrwx 0
0
10837849 <part2.img_NEMAFAQ.TXT-dead-10837849>
2221 .a. -rwxrwxrwx 0
0
10837940 <part2.img_ASAC.GIF-dead-10837940>
2804 .a. -rwxrwxrwx 0
0
10837995 <part2.img_ERVE~1.HTM-dead-10837995>
1324 .a. -rwxrwxrwx 0
0
10837876 <part2.img_EVELO~1.GIF-dead-10837876>
2032 .a. -rwxrwxrwx 0
0
20026341 <part2.img_ROMO1.GIF-dead-20026341>
799 .a. -rwxrwxrwx 0
0
10837584 <part2.img_AV_WHO.GIF-dead-10837584>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
1608 .a. -rwxrwxrwx 0
0
10837869 <part2.img_IMPLE.GIF-dead-10837869>
2042 .a. -rwxrwxrwx 0
0
10837826 <part2.img_POOF-~1.GIF-dead-10837826>
2770 .a. -rwxrwxrwx 0
0
10837768 <part2.img_IPAD.GIF-dead-10837768>
1853 .a. -rwxrwxrwx 0
0
10737948 <part2.img_EST_NAV.GIF-dead-10737948>
111 .a. -rwxrwxrwx 0
0
10837718 <part2.img_LUE.GIF-dead-10837718>
686 .a. -rwxrwxrwx 0
0
10837993 <part2.img_ATEWAY.GIF-dead-10837993>
153 .a. -rwxrwxrwx 0
0
20026321 <part2.img_UTTON.GIF-dead-20026321>
2133 .a. -rwxrwxrwx 0
0
20026139 <part2.img_XXGREEN.GIF-dead-20026139>
1739 .a. -rwxrwxrwx 0
0
26038019 <part2.img_NEWS.GIF-dead-26038019>
14924 .a. -rwxrwxrwx 0
0
10837834 <part2.img_5383216.GIF-dead-10837834>
7759 .a. -rwxrwxrwx 0
0
10837925 <part2.img_38.GIF-dead-10837925>
5407 .a. -rwxrwxrwx 0
0
20026027 <part2.img_~1.HTM-dead-20026027>
1634 .a. -rwxrwxrwx 0
0
26038269 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
_USH.GIF-dead-26038269>
244 .a. -rwxrwxrwx 0
0
20026289 <part2.img_CICEN~1.HTM-dead-20026289>
1816 .a. -rwxrwxrwx 0
0
20025999 <part2.img_BTN2L.GIF-dead-20025999>
1888 .a. -rwxrwxrwx 0
0
10837737 <part2.img-_PHCO~1.GIF-dead-10837737>
2409 .a. -rwxrwxrwx 0
0
10837931 <part2.img_AC.GIF-dead-10837931>
155 .a. -rwxrwxrwx 0
0
26037785 <part2.img_TDBLA~1.GIF-dead-26037785>
734 .a. -rwxrwxrwx 0
0
20026253 <part2.img_RAMES~1.HTM-dead-20026253>
898 .a. -rwxrwxrwx 0
0
20025940 <part2.img_0000000.GIF-dead-20025940>
528 .a. -rwxrwxrwx 0
0
16330003 <part2.img_RIANGLE.GIF-dead-16330003>
2264 .a. -rwxrwxrwx 0
0
16330172 <part2.img_A97A07.GIF-dead-16330172>
327 .a. -rwxrwxrwx 0
0
10837886 <part2.img_UZSMALL.GIF-dead-10837886>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
229 .a. -rwxrwxrwx 0
0
10837815 <part2.img_GFAQ.GIF-dead-10837815>
2160 .a. -rwxrwxrwx 0
0
26038062 <part2.img_I_BUTN.GIF-dead-26038062>
3004 .a. -rwxrwxrwx 0
0
16330131 <part2.img_NFODO~1.HTM-dead-16330131>
32659 .a. -rwxrwxrwx 0
0
20026094 <part2.img_ONAGE~1.JPE-dead-20026094>
15324 .a. -rwxrwxrwx 0
0
10837739 <part2.img_P4.GIF-dead-10837739>
551 .a. -rwxrwxrwx 0
0
10837790 <part2.img_EARCH~4.GIF-dead-10837790>
298 .a. -rwxrwxrwx 0
0
26038155 <part2.img_OTLICON.GIF-dead-26038155>
2401 .a. -rwxrwxrwx 0
0
20026133 <part2.img_ABASH~1.HTM-dead-20026133>
859 .a. -rwxrwxrwx 0
0
20025948 <part2.img_0000013.GIF-dead-20025948>
1500 .a. -rwxrwxrwx 0
0
20026098 <part2.img_ASSWO~1.HTM-dead-20026098>
497 .a. -rwxrwxrwx 0
0
26038139 <part2.img_XPEDI~1.GIF-dead-26038139>
842 .a. -rwxrwxrwx 0
0
10837964 <part2.img_FF_DEV.GIF-dead-10837964>
43 .a. -rwxrwxrwx 0
0
20026311 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5 06E4 A169 4E46
_LEAR.GIF-dead-20026311>
1234 .a. -rwxrwxrwx 0
0
10837685 <part2.img-_SMBU~1.GIF-dead-10837685>
583 .a. -rwxrwxrwx 0
0
26038178 <part2.img_YMAPH.GIF-dead-26038178>
1553 .a. -rwxrwxrwx 0
0
10837580 <part2.img_PDATE~1.CLA-dead-10837580>
585 .a. -rwxrwxrwx 0
0
10837799 <part2.img_AIN_F~2.HTM-dead-10837799>
751 .a. -rwxrwxrwx 0
0
26037945 <part2.img_ONTEN~2.GIF-dead-26037945>
564 .a. -rwxrwxrwx 0
0
10837594 <part2.img_ASIC.GIF-dead-10837594>
10621 .a. -rwxrwxrwx 0
0
10837946 <part2.img_UINFO~1.HTM-dead-10837946>
1561 .a. -rwxrwxrwx 0
0
10837787 <part2.img_OC8ON.GIF-dead-10837787>
224 .a. -rwxrwxrwx 0
0
10837590 <part2.img_FRAME~1.HTM-dead-10837590>
100 .a. -rwxrwxrwx 0
0
26038149 <part2.img_ITNESS.GIF-dead-26038149>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
1783 .a. -rwxrwxrwx 0
0
20026277 <part2.img_ERVER.GIF-dead-20026277>
1689 .a. -rwxrwxrwx 0
0
10837754 <part2.img_OC3OFF.GIF-dead-10837754>
4051 .a. -rwxrwxrwx 0
0
10837929 <part2.img_ILEACC.GIF-dead-10837929>
1015 .a. -rwxrwxrwx 0
0
10837967 <part2.img_SDN48~1.GIF-dead-10837967>
14104 .a. -rwxrwxrwx 0
0
26037862 <part2.img_UERY(~2.HTM-dead-26037862>
13985 .a. -rwxrwxrwx 0
0
26037851 <part2.img_UERY~1.HTM-dead-26037851>
10014 .a. -rwxrwxrwx 0
0
10837674 <part2.img_AHOO_~1.GIF-dead-10837674>
1586 .a. -rwxrwxrwx 0
0
26038042 <part2.img-_ST.GIF-dead-26038042>
1962 .a. -rwxrwxrwx 0
0
26038118 <part2.img_ROWNE~1.HTM-dead-26038118>
12517 .a. -rwxrwxrwx 0
0
10837902 <part2.img_ORENE~1.HTM-dead-10837902>
1989 .a. -rwxrwxrwx 0
0
26038243 <part2.img_ACKGR~3.JPE-dead-26038243>
317 .a. -rwxrwxrwx 0
0
10837758 <part2.img_OTLINE.GIF-dead-10837758>
1115 .a. -rwxrwxrwx 0
0
26037853 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
_OUSE1~1.HTM-dead-26037853>
1776 .a. -rwxrwxrwx 0
0
26037805 <part2.img_HIP_S~1.GIF-dead-26037805>
1776 .a. -rwxrwxrwx 0
0
26037987 <part2.img_FERCONF.GIF-dead-26037987>
673 .a. -rwxrwxrwx 0
0
26038105 <part2.img_ETMAI~1.GIF-dead-26038105>
1321 .a. -rwxrwxrwx 0
0
26038015 <part2.img_WLOGO.GIF-dead-26038015>
920 .a. -rwxrwxrwx 0
0
10837894 <part2.img_IGHLI~1.GIF-dead-10837894>
1962 .a. -rwxrwxrwx 0
0
10837586 <part2.img_AV_NEW.GIF-dead-10837586>
1134 .a. -rwxrwxrwx 0
0
26037958 <part2.img_OMELI~2.GIF-dead-26037958>
1796 .a. -rwxrwxrwx 0
0
20026020 <part2.img_CHECK~1.HTM-dead-20026020>
0 .a. -rwxrwxrwx 0
0
10838001 <part2.img_MAGE1.GIF-dead-10838001>
771 .a. -rwxrwxrwx 0
0
16330140 <part2.img_06O~1.HTM-dead-16330140>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
1709 .a. -rwxrwxrwx 0
0
10837772 <part2.img_OC2OFF.GIF-dead-10837772>
240 .a. -rwxrwxrwx 0
0
10837776 <part2.img_TVIP.GIF-dead-10837776>
808 .a. -rwxrwxrwx 0
0
26037911 <part2.img__TB_FAP.GIF-dead-26037911>
14941 .a. -rwxrwxrwx 0
0
10838007 <part2.img_ECOND~1.HTM-dead-10838007>
1127 .a. -rwxrwxrwx 0
0
20026110 <part2.img_N_BIG~1.JPE-dead-20026110>
179 .a. -rwxrwxrwx 0
0
10837843 <part2.img_23456~3.HTM-dead-10837843>
1801 .a. -rwxrwxrwx 0
0
20026141 <part2.img_EMP5~1.HTM-dead-20026141>
1828 .a. -rwxrwxrwx 0
0
10837559 <part2.img_OP_HEAD.GIF-dead-10837559>
6775 .a. -rwxrwxrwx 0
0
26037942 <part2.img_60887~1.HTM-dead-26037942>
3345 .a. -rwxrwxrwx 0
0
10837733 <part2.img_UTTON~5.GIF-dead-10837733>
1674 .a. -rwxrwxrwx 0
0
20026071 <part2.img_OP500~1.JPE-dead-20026071>
Fri Aug 28 1998 11:43:36 7384 ..c -rwxrwxrwx 0
0
10837983
<part2.img-_HESAP~2.HTM-dead-10837983>
Fri Aug 28 1998 11:43:40 1661 ..c -rwxrwxrwx 0
0
10837986
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169 4E46
<part2.img-_ACKGR~2.GIF-dead-10837986>
7384 m.. -rwxrwxrwx 0
0
10837983 <part2.img_HESAP~2.HTM-dead-10837983>
Fri Aug 28 1998 11:43:42 1661 m.. -rwxrwxrwx 0
0
10837986
<part2.img-_ACKGR~2.GIF-dead-10837986>
Fri Aug 28 1998 11:44:00 7206 ..c -rwxrwxrwx 0
0
10837982
<part2.img-_OOLS~1.HTM-dead-10837982>
Fri Aug 28 1998 11:44:02 7206 m.. -rwxrwxrwx 0
0
10837982
<part2.img-_OOLS~1.HTM-dead-10837982>
Fri Aug 28 1998 14:58:50 1060 ..c -rwxrwxrwx 0
0
10837988
<part2.img-_P.GIF-dead-10837988>
Fri Aug 28 1998 14:58:52 1314 ..c -rwxrwxrwx 0
0
10837991
<part2.img-_INFO.GIF-dead-10837991>
1060 m.. -rwxrwxrwx 0
0
10837988 <part2.img_P.GIF-dead-10837988>
Fri Aug 28 1998 14:58:56
686 ..c -rwxrwxrwx 0
0
10837993
<part2.img-_ATEWAY.GIF-dead-10837993>
Fri Aug 28 1998 14:58:58 1314 m.. -rwxrwxrwx 0
0
10837991
<part2.img-_INFO.GIF-dead-10837991>
686 m.. -rwxrwxrwx 0
0
10837993 <part2.img_ATEWAY.GIF-dead-10837993>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Fri Aug 28 1998 14:59:00 1314 ..c -rwxrwxrwx 0
0
10837990
<part2.img-_INFO.GIF-dead-10837990>
Fri Aug 28 1998 14:59:02 1314 m.. -rwxrwxrwx 0
0
10837990
<part2.img-_INFO.GIF-dead-10837990>
Fri Aug 28 1998 14:59:14 2804 ..c -rwxrwxrwx 0
0
10837995
<part2.img-_ERVE~1.HTM-dead-10837995>
Fri Aug 28 1998 14:59:16 2804 m.. -rwxrwxrwx 0
0
10837995
<part2.img-_ERVE~1.HTM-dead-10837995>
Fri Aug 28 1998 14:59:28 13462 ..c -rwxrwxrwx 0
0
10837997
<part2.img-_ERVE(~2.HTM-dead-10837997>
Fri Aug 28 1998 14:59:30 13462 m.. -rwxrwxrwx 0
0
10837997
<part2.img-_ERVE(~2.HTM-dead-10837997>
Fri Aug 28 1998 15:06:26 2478 ..c -rwxrwxrwx 0
0
16120371
<part2.img-_ERVE(~3.HTM-dead-16120371>
Fri Aug 28 1998 15:06:28 2478 m.. -rwxrwxrwx 0
0
16120371
<part2.img-_ERVE(~3.HTM-dead-16120371>
Fri Aug 28 1998 15:06:36 15556 ..c -rwxrwxrwx 0
0
10837999
<part2.img-_ERVE(~3.HTM-dead-10837999>
Fri Aug 28 1998 15:06:38 15556 m.. -rwxrwxrwx 0
0
10837999
<part2.img-_ERVE(~3.HTM-dead-10837999>
Fri Aug 28 1998 15:08:02
0 ..c -rwxrwxrwx 0
0
10838001
<part2.img-_MAGE1.GIF-dead-10838001>
Fri Aug 28 1998 15:08:04
0 m.. -rwxrwxrwx 0
0
10838001
<part2.img-_MAGE1.GIF-dead-10838001>
Fri Aug 28 1998 15:09:20
909 ..c -rwxrwxrwx 0
0
10838004
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169 4E46
<part2.img-_NFORM~1.GIF-dead-10838004>
Fri Aug 28 1998 15:09:22
909 m.. -rwxrwxrwx 0
0
10838004
<part2.img-_NFORM~1.GIF-dead-10838004>
Fri Aug 28 1998 15:09:36 14941 ..c -rwxrwxrwx 0
0
10838007
<part2.img-_ECOND~1.HTM-dead-10838007>
Fri Aug 28 1998 15:09:38 14941 m.. -rwxrwxrwx 0
0
10838007
<part2.img-_ECOND~1.HTM-dead-10838007>
Fri Aug 28 1998 15:09:40 1242 ..c -rwxrwxrwx 0
0
10838010
<part2.img-_WWNAT~1.GIF-dead-10838010>
Fri Aug 28 1998 15:09:42 1242 m.. -rwxrwxrwx 0
0
10838010
<part2.img-_WWNAT~1.GIF-dead-10838010>
Fri Aug 28 1998 15:10:10
343 ..c -rwxrwxrwx 0
0
16120413
<part2.img-_ATURE~1.GIF-dead-16120413>
Fri Aug 28 1998 15:10:12
343 m.. -rwxrwxrwx 0
0
16120413
<part2.img-_ATURE~1.GIF-dead-16120413>
Sat Aug 29 1998 00:00:00 17814 .a. -rwxrwxrwx 0
0
16120345
<part2.img-_ATURE~2.HTM-dead-16120345>
54 .a. -r-xr-xr-x 0
0
17319960 <part2.img_$SUME~1.WIZ-dead-17319960>
54 .a. -r-xr-xr-x 0
0
17319964 <part2.img_$RETE~1.DOT-dead-17319964>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
54 .a. -r-xr-xr-x 0
0
24979479 <part2.img_$RECO~1.DOT-dead-24979479>
54 .a. -r-xr-xr-x 0
0
17264657 <part2.img_$NTEM~1.DOT-dead-17264657>
Sat Aug 29 1998 08:56:32 17814 ..c -rwxrwxrwx 0
0
16120345
<part2.img-_ATURE~2.HTM-dead-16120345>
Sat Aug 29 1998 08:56:34 17814 m.. -rwxrwxrwx 0
0
16120345
<part2.img-_ATURE~2.HTM-dead-16120345>
Sat Aug 29 1998 08:57:22 4152 ..c -rwxrwxrwx 0
0
16120408
<part2.img-_MAGE1~2.GIF-dead-16120408>
Sat Aug 29 1998 08:57:24 4152 m.. -rwxrwxrwx 0
0
16120408
<part2.img-_MAGE1~2.GIF-dead-16120408>
Sat Aug 29 1998 08:57:44 7886 ..c -rwxrwxrwx 0
0
16120415
<part2.img-_MAGE3.GIF-dead-16120415>
Sat Aug 29 1998 08:57:48 7886 m.. -rwxrwxrwx 0
0
16120415
<part2.img-_MAGE3.GIF-dead-16120415>
Sat Aug 29 1998 08:59:50 17814 ..c -rwxrwxrwx 0
0
16120423
<part2.img-_ATURE~1.HTM-dead-16120423>
Sat Aug 29 1998 08:59:56 17814 m.. -rwxrwxrwx 0
0
16120423
<part2.img-_ATURE~1.HTM-dead-16120423>
Sat Aug 29 1998 09:00:14
166 ..c -rwxrwxrwx 0
0
16120428
<part2.img-_TOMR.GIF-dead-16120428>
Sat Aug 29 1998 09:00:16
166 m.. -rwxrwxrwx 0
0
16120428
<part2.img-_TOMR.GIF-dead-16120428>
Sat Aug 29 1998 09:00:56 4063 ..c -rwxrwxrwx 0
0
16120437
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
<part2.img-_ERVE(~7.HTM-dead-16120437>
Sat Aug 29 1998 09:00:58 4063 m.. -rwxrwxrwx 0
0
16120437
<part2.img-_ERVE(~7.HTM-dead-16120437>
Sat Aug 29 1998 09:01:10 3553 ..c -rwxrwxrwx 0
0
16120439
<part2.img-_NEWS.GIF-dead-16120439>
Sat Aug 29 1998 09:01:12 3553 m.. -rwxrwxrwx 0
0
16120439
<part2.img-_NEWS.GIF-dead-16120439>
Sat Aug 29 1998 09:01:54
844 ..c -rwxrwxrwx 0
0
16120442
<part2.img-_UTHOR~1.GIF-dead-16120442>
Sat Aug 29 1998 09:01:56
844 m.. -rwxrwxrwx 0
0
16120442
<part2.img-_UTHOR~1.GIF-dead-16120442>
Sat Aug 29 1998 09:02:14
800 ..c -rwxrwxrwx 0
0
16120445
<part2.img-_BOUT_~2.GIF-dead-16120445>
6412 ..c -rwxrwxrwx 0
0
16120448 <part2.img_EDICI~1.GIF-dead-16120448>
Sat Aug 29 1998 09:02:16
800 m.. -rwxrwxrwx 0
0
16120445
<part2.img-_BOUT_~2.GIF-dead-16120445>
6412 m.. -rwxrwxrwx 0
0
16120448 <part2.img_EDICI~1.GIF-dead-16120448>
Sat Aug 29 1998 09:02:18
890 ..c -rwxrwxrwx 0
0
16120451
<part2.img-_ATURE~2.GIF-dead-16120451>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
1881 ..c -rwxrwxrwx 0
0
16120454 <part2.img_TRUCT~1.GIF-dead-16120454>
Sat Aug 29 1998 09:02:20 1881 m.. -rwxrwxrwx 0
0
16120454
<part2.img-_TRUCT~1.GIF-dead-16120454>
890 m.. -rwxrwxrwx 0
0
16120451 <part2.img_ATURE~2.GIF-dead-16120451>
Sat Aug 29 1998 15:52:58
54 ..c -r-xr-xr-x 0
0
17264657 <part2.img_$NTEM~1.DOT-dead-17264657>
Sat Aug 29 1998 15:53:00
54 m.. -r-xr-xr-x 0
0
17264657
<part2.img-_$NTEM~1.DOT-dead-17264657>
Sat Aug 29 1998 15:54:10
54 ..c -r-xr-xr-x 0
0
17319964 <part2.img_$RETE~1.DOT-dead-17319964>
Sat Aug 29 1998 15:54:12
54 m.. -r-xr-xr-x 0
0
17319964
<part2.img-_$RETE~1.DOT-dead-17319964>
Sat Aug 29 1998 15:55:12
54 ..c -r-xr-xr-x 0
0
24979479 <part2.img_$RECO~1.DOT-dead-24979479>
Sat Aug 29 1998 15:55:14
54 m.. -r-xr-xr-x 0
0
24979479
<part2.img-_$RECO~1.DOT-dead-24979479>
Sat Aug 29 1998 15:56:24
54 ..c -r-xr-xr-x 0
0
17319960 <part2.img_$SUME~1.WIZ-dead-17319960>
Sat Aug 29 1998 15:56:26
54 m.. -r-xr-xr-x 0
0
17319960
<part2.img-_$SUME~1.WIZ-dead-17319960>
Wed Sep 02 1998 08:07:08 30720 m.. -/-rwxrwxrwx 0
0
3346006
c:\/WINDOWS/SYSTEM/dx6E336.TMP (_EGSVR32.EXE) (deleted)
30720 m.. -/-rwxrwxrwx 0
0
3346077
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/WINDOWS/SYSTEM/dx6E330.TMP (REGSVR32.EXE)
30720 m.. -rwxrwxrwx 0
0
3346006 <part2.img_EGSVR32.EXE-dead-3346006>
Thu Sep 03 1998 00:00:00 20935 .a. -rwxrwxrwx 0
0
16120468
<part2.img-_RODUC~3.HTM-dead-16120468>
Thu Sep 03 1998 19:23:54 1534 ..c -rwxrwxrwx 0
0
16120458
<part2.img-_00SPOT.GIF-dead-16120458>
Thu Sep 03 1998 19:23:56 1534 m.. -rwxrwxrwx 0
0
16120458
<part2.img-_00SPOT.GIF-dead-16120458>
Thu Sep 03 1998 19:24:12
826 ..c -rwxrwxrwx 0
0
16120463
<part2.img-_PACE(1).GIF-dead-16120463>
Thu Sep 03 1998 19:24:14
826 m.. -rwxrwxrwx 0
0
16120463
<part2.img-_PACE(1).GIF-dead-16120463>
Thu Sep 03 1998 19:24:18 10918 ..c -rwxrwxrwx 0
0
16120465
<part2.img-_090T~2.JPE-dead-16120465>
Thu Sep 03 1998 19:24:24 10918 m.. -rwxrwxrwx 0
0
16120465
<part2.img-_090T~2.JPE-dead-16120465>
Thu Sep 03 1998 19:24:46 20935 ..c -rwxrwxrwx 0
0
16120468
<part2.img-_RODUC~3.HTM-dead-16120468>
Thu Sep 03 1998 19:24:48 20935 m.. -rwxrwxrwx 0
0
16120468
<part2.img-_RODUC~3.HTM-dead-16120468>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Thu Sep 03 1998 19:24:56
738 ..c -rwxrwxrwx 0
0
16120470
<part2.img-_EFTMORE.GIF-dead-16120470>
Thu Sep 03 1998 19:24:58
738 m.. -rwxrwxrwx 0
0
16120470
<part2.img-_EFTMORE.GIF-dead-16120470>
Thu Sep 03 1998 19:25:22 4577 ..c -rwxrwxrwx 0
0
16120467
<part2.img-_401T~1.JPE-dead-16120467>
Thu Sep 03 1998 19:25:24 5525 ..c -rwxrwxrwx 0
0
16120472
<part2.img-_751T~1.JPE-dead-16120472>
4577 m.. -rwxrwxrwx 0
0
16120467 <part2.img_401T~1.JPE-dead-16120467>
Thu Sep 03 1998 19:25:28 5525 m.. -rwxrwxrwx 0
0
16120472
<part2.img-_751T~1.JPE-dead-16120472>
Thu Sep 03 1998 19:25:48
978 ..c -rwxrwxrwx 0
0
16120474
<part2.img-_OTFOU~1.HTM-dead-16120474>
Thu Sep 03 1998 19:25:50
978 m.. -rwxrwxrwx 0
0
16120474
<part2.img-_OTFOU~1.HTM-dead-16120474>
Thu Sep 03 1998 19:27:12 7476 ..c -rwxrwxrwx 0
0
16120480
<part2.img-_HOPGU~1.HTM-dead-16120480>
Thu Sep 03 1998 19:27:14 7476 m.. -rwxrwxrwx 0
0
16120480
<part2.img-_HOPGU~1.HTM-dead-16120480>
Thu Sep 03 1998 19:27:48
216 ..c -rwxrwxrwx 0
0
16120499
<part2.img-_RIEND~2.GIF-dead-16120499>
1127 ..c -rwxrwxrwx 0
0
16120493 <part2.img_RIEND~1.GIF-dead-16120493>
Thu Sep 03 1998 19:27:50
238 ..c -rwxrwxrwx 0
0
16120505
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
<part2.img-_RIEND~4.GIF-dead-16120505>
216 m.. -rwxrwxrwx 0
0
16120499 <part2.img_RIEND~2.GIF-dead-16120499>
538 ..c -rwxrwxrwx 0
0
16120513 <part2.img_RIEND~7.GIF-dead-16120513>
262 ..c -rwxrwxrwx 0
0
16120522 <part2.img_RIEND~5.GIF-dead-16120522>
1127 m.. -rwxrwxrwx 0
0
16120493 <part2.img_RIEND~1.GIF-dead-16120493>
202 ..c -rwxrwxrwx 0
0
16120508 <part2.img_RIEND~6.GIF-dead-16120508>
369 ..c -rwxrwxrwx 0
0
16120502 <part2.img_RIEND~3.GIF-dead-16120502>
Thu Sep 03 1998 19:27:52
202 m.. -rwxrwxrwx 0
0
16120508
<part2.img-_RIEND~6.GIF-dead-16120508>
538 m.. -rwxrwxrwx 0
0
16120513 <part2.img_RIEND~7.GIF-dead-16120513>
10649 ..c -rwxrwxrwx 0
0
16120538 <part2.img_UG24_~1.GIF-dead-16120538>
238 m.. -rwxrwxrwx 0
0
16120505 <part2.img_RIEND~4.GIF-dead-16120505>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
262 m.. -rwxrwxrwx 0
0
16120522 <part2.img_RIEND~5.GIF-dead-16120522>
Thu Sep 03 1998 19:27:54
369 m.. -rwxrwxrwx 0
0
16120502
<part2.img-_RIEND~3.GIF-dead-16120502>
Thu Sep 03 1998 19:27:56 10649 m.. -rwxrwxrwx 0
0
16120538
<part2.img-_UG24_~1.GIF-dead-16120538>
7389 ..c -rwxrwxrwx 0
0
16120544 <part2.img_UG24_~2.GIF-dead-16120544>
1019 ..c -rwxrwxrwx 0
0
16120565 <part2.img_UG24_~3.GIF-dead-16120565>
35 ..c -rwxrwxrwx 0
0
16120562 <part2.img_RIEND~8.GIF-dead-16120562>
Thu Sep 03 1998 19:27:58 7389 m.. -rwxrwxrwx 0
0
16120544
<part2.img-_UG24_~2.GIF-dead-16120544>
35 m.. -rwxrwxrwx 0
0
16120562 <part2.img_RIEND~8.GIF-dead-16120562>
1019 m.. -rwxrwxrwx 0
0
16120565 <part2.img_UG24_~3.GIF-dead-16120565>
Thu Sep 03 1998 19:28:00
960 ..c -rwxrwxrwx 0
0
16120581
<part2.img-_OSTFR~1.GIF-dead-16120581>
Thu Sep 03 1998 19:28:02
103 ..c -rwxrwxrwx 0
0
16120584
<part2.img-_RIEND~9.GIF-dead-16120584>
994 ..c -rwxrwxrwx 0
0
16120587 <part2.img_RIEN~10.GIF-dead-16120587>
960 m.. -rwxrwxrwx 0
0
16120581 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
_OSTFR~1.GIF-dead-16120581>
Thu Sep 03 1998 19:28:04
103 m.. -rwxrwxrwx 0
0
16120584
<part2.img-_RIEND~9.GIF-dead-16120584>
994 m.. -rwxrwxrwx 0
0
16120587 <part2.img_RIEN~10.GIF-dead-16120587>
324 ..c -rwxrwxrwx 0
0
16120591 <part2.img_RIEN~11.GIF-dead-16120591>
Thu Sep 03 1998 19:28:06
324 m.. -rwxrwxrwx 0
0
16120591
<part2.img-_RIEN~11.GIF-dead-16120591>
Thu Sep 03 1998 19:28:08 8936 ..c -rwxrwxrwx 0
0
16120594
<part2.img-_A-CAT~1.HTM-dead-16120594>
Thu Sep 03 1998 19:28:10 8936 m.. -rwxrwxrwx 0
0
16120594
<part2.img-_A-CAT~1.HTM-dead-16120594>
89 ..c -rwxrwxrwx 0
0
16120557 <part2.img_ACK2.GIF-dead-16120557>
Thu Sep 03 1998 19:28:12
348 ..c -rwxrwxrwx 0
0
16120600
<part2.img-_UTTON~3.GIF-dead-16120600>
89 m.. -rwxrwxrwx 0
0
16120557 <part2.img_ACK2.GIF-dead-16120557>
414 ..c -rwxrwxrwx 0
0
16120597 <part2.img_UTTON~2.GIF-dead-16120597>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Thu Sep 03 1998 19:28:14
414 m.. -rwxrwxrwx 0
0
16120597
<part2.img-_UTTON~2.GIF-dead-16120597>
348 m.. -rwxrwxrwx 0
0
16120600 <part2.img_UTTON~3.GIF-dead-16120600>
Thu Sep 03 1998 19:28:16 3775 ..c -rwxrwxrwx 0
0
16120569
<part2.img-_A-FLO~1.GIF-dead-16120569>
Thu Sep 03 1998 19:28:20 1062 ..c -rwxrwxrwx 0
0
16120603
<part2.img-_AP-OC~1.GIF-dead-16120603>
3775 m.. -rwxrwxrwx 0
0
16120569 <part2.img-_AFLO~1.GIF-dead-16120569>
309 ..c -rwxrwxrwx 0
0
16120575 <part2.img_UTTON~4.GIF-dead-16120575>
Thu Sep 03 1998 19:28:22
309 m.. -rwxrwxrwx 0
0
16120575
<part2.img-_UTTON~4.GIF-dead-16120575>
44 ..c -rwxrwxrwx 0
0
16120605 <part2.img-_OXWH~1.GIF-dead-16120605>
1062 m.. -rwxrwxrwx 0
0
16120603 <part2.img-_APOC~1.GIF-dead-16120603>
Thu Sep 03 1998 19:28:24
44 m.. -rwxrwxrwx 0
0
16120605
<part2.img-_OX-WH~1.GIF-dead-16120605>
Thu Sep 03 1998 19:28:40 4799 ..c -rwxrwxrwx 0
0
16120608
<part2.img-_TD58-~1.GIF-dead-16120608>
4636 ..c -rwxrwxrwx 0
0
16120611 <part2.img-_TD49~1.GIF-dead-16120611>
Thu Sep 03 1998 19:28:42 4636 m.. -rwxrwxrwx 0
0
16120611
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
<part2.img-_TD49-~1.GIF-dead-16120611>
4799 m.. -rwxrwxrwx 0
0
16120608 <part2.img_TD58-~1.GIF-dead-16120608>
Thu Sep 03 1998 19:28:44 5419 ..c -rwxrwxrwx 0
0
16120614
<part2.img-_TD81-~1.GIF-dead-16120614>
Thu Sep 03 1998 19:28:46 5419 m.. -rwxrwxrwx 0
0
16120614
<part2.img-_TD81-~1.GIF-dead-16120614>
Thu Sep 03 1998 19:29:06 2203 ..c -rwxrwxrwx 0
0
16120619
<part2.img-_RDER_~1.GIF-dead-16120619>
Thu Sep 03 1998 19:29:08 2203 m.. -rwxrwxrwx 0
0
16120619
<part2.img-_RDER_~1.GIF-dead-16120619>
Thu Sep 03 1998 19:29:14 6916 ..c -rwxrwxrwx 0
0
16120617
<part2.img-_RICEP~1.HTM-dead-16120617>
Thu Sep 03 1998 19:29:16 6916 m.. -rwxrwxrwx 0
0
16120617
<part2.img-_RICEP~1.HTM-dead-16120617>
Thu Sep 03 1998 19:29:56 4193 ..c -rwxrwxrwx 0
0
16120625
<part2.img-_TD902~1.GIF-dead-16120625>
Thu Sep 03 1998 19:29:58 4193 m.. -rwxrwxrwx 0
0
16120625
<part2.img-_TD902~1.GIF-dead-16120625>
Thu Sep 03 1998 19:30:34
380 ..c -rwxrwxrwx 0
0
16120628
<part2.img-_SUNLO~1.GIF-dead-16120628>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Thu Sep 03 1998 19:30:36
380 m.. -rwxrwxrwx 0
0
16120628
<part2.img-_SUNLO~1.GIF-dead-16120628>
Thu Sep 03 1998 19:30:46
994 ..c -rwxrwxrwx 0
0
16120631
<part2.img-_APTIO~1.GIF-dead-16120631>
Thu Sep 03 1998 19:30:48
994 m.. -rwxrwxrwx 0
0
16120631
<part2.img-_APTIO~1.GIF-dead-16120631>
Thu Sep 03 1998 19:31:08
35 ..c -rwxrwxrwx 0
0
16120634
<part2.img-__BOTT~1.GIF-dead-16120634>
Thu Sep 03 1998 19:31:10
35 m.. -rwxrwxrwx 0
0
16120634
<part2.img-__BOTT~1.GIF-dead-16120634>
Thu Sep 03 1998 19:31:32 10449 ..c -rwxrwxrwx 0
0
16120636
<part2.img-_5-106~1.GIF-dead-16120636>
Thu Sep 03 1998 19:31:34
492 ..c -rwxrwxrwx 0
0
16120638
<part2.img-_ULLETA.GIF-dead-16120638>
Thu Sep 03 1998 19:31:36 10449 m.. -rwxrwxrwx 0
0
16120636
<part2.img-_5-106~1.GIF-dead-16120636>
492 m.. -rwxrwxrwx 0
0
16120638 <part2.img_ULLETA.GIF-dead-16120638>
Thu Sep 03 1998 19:32:44 7008 ..c -rwxrwxrwx 0
0
16120641
<part2.img-_NLINE~1.HTM-dead-16120641>
Thu Sep 03 1998 19:32:46 7008 m.. -rwxrwxrwx 0
0
16120641
<part2.img-_NLINE~1.HTM-dead-16120641>
Thu Sep 03 1998 19:32:54 5335 ..c -rwxrwxrwx 0
0
16120644
<part2.img-_FO_DO~1.GIF-dead-16120644>
Thu Sep 03 1998 19:32:56 5335 m.. -rwxrwxrwx 0
0
16120644
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
<part2.img-_FO_DO~1.GIF-dead-16120644>
Thu Sep 03 1998 19:33:12 4438 ..c -rwxrwxrwx 0
0
16120651
<part2.img-_TD46-~1.GIF-dead-16120651>
Thu Sep 03 1998 19:33:14 3047 ..c -rwxrwxrwx 0
0
16120654
<part2.img-_TD54-~1.GIF-dead-16120654>
Thu Sep 03 1998 19:33:16 4438 m.. -rwxrwxrwx 0
0
16120651
<part2.img-_TD46-~1.GIF-dead-16120651>
Thu Sep 03 1998 19:33:18 3047 m.. -rwxrwxrwx 0
0
16120654
<part2.img-_TD54-~1.GIF-dead-16120654>
4990 ..c -rwxrwxrwx 0
0
16120660 <part2.img-_TD56~1.GIF-dead-16120660>
Thu Sep 03 1998 19:33:22 4990 m.. -rwxrwxrwx 0
0
16120660
<part2.img-_TD56-~1.GIF-dead-16120660>
Thu Sep 03 1998 19:34:10 3285 ..c -rwxrwxrwx 0
0
16120669
<part2.img-_ET-IN~1.HTM-dead-16120669>
Thu Sep 03 1998 19:34:12 4320 ..c -rwxrwxrwx 0
0
16120672
<part2.img-_TD104~1.GIF-dead-16120672>
3285 m.. -rwxrwxrwx 0
0
16120669 <part2.img-_ETIN~1.HTM-dead-16120669>
Thu Sep 03 1998 19:34:14 4320 m.. -rwxrwxrwx 0
0
16120672
<part2.img-_TD104~1.GIF-dead-16120672>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Thu Sep 03 1998 19:34:30 3309 ..c -rwxrwxrwx 0
0
16120675
<part2.img-_TD57-~1.GIF-dead-16120675>
7056 ..c -rwxrwxrwx 0
0
16120678 <part2.img-_TD59~1.GIF-dead-16120678>
Thu Sep 03 1998 19:34:32 3309 m.. -rwxrwxrwx 0
0
16120675
<part2.img-_TD57-~1.GIF-dead-16120675>
Thu Sep 03 1998 19:34:34 7056 m.. -rwxrwxrwx 0
0
16120678
<part2.img-_TD59-~1.GIF-dead-16120678>
Thu Sep 03 1998 19:34:36 4402 ..c -rwxrwxrwx 0
0
16120684
<part2.img-_TD60-~1.GIF-dead-16120684>
3464 ..c -rwxrwxrwx 0
0
16120681 <part2.img-_TD62~1.GIF-dead-16120681>
Thu Sep 03 1998 19:34:38 3464 m.. -rwxrwxrwx 0
0
16120681
<part2.img-_TD62-~1.GIF-dead-16120681>
4402 m.. -rwxrwxrwx 0
0
16120684 <part2.img_TD60-~1.GIF-dead-16120684>
Thu Sep 03 1998 19:34:50 2474 ..c -rwxrwxrwx 0
0
16120687
<part2.img-_ET-PR~2.HTM-dead-16120687>
Thu Sep 03 1998 19:34:52 2474 m.. -rwxrwxrwx 0
0
16120687
<part2.img-_ET-PR~2.HTM-dead-16120687>
Thu Sep 03 1998 19:36:24 2415 ..c -rwxrwxrwx 0
0
16120662
<part2.img-_ET-PR~1.HTM-dead-16120662>
Thu Sep 03 1998 19:36:26 2415 m.. -rwxrwxrwx 0
0
16120662
<part2.img-_ET-PR~1.HTM-dead-16120662>
Thu Sep 03 1998 19:37:02 2459 ..c -rwxrwxrwx 0
0
16120695
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
<part2.img-_ET-PR~3.HTM-dead-16120695>
Thu Sep 03 1998 19:37:04 2459 m.. -rwxrwxrwx 0
0
16120695
<part2.img-_ET-PR~3.HTM-dead-16120695>
Thu Sep 03 1998 19:37:48 2320 ..c -rwxrwxrwx 0
0
16120698
<part2.img-__CATA~1.GIF-dead-16120698>
Thu Sep 03 1998 19:37:50 2320 m.. -rwxrwxrwx 0
0
16120698
<part2.img-__CATA~1.GIF-dead-16120698>
Thu Sep 03 1998 19:37:56 8936 ..c -rwxrwxrwx 0
0
16120704
<part2.img-_A-CAT~2.HTM-dead-16120704>
Thu Sep 03 1998 19:37:58 8936 m.. -rwxrwxrwx 0
0
16120704
<part2.img-_A-CAT~2.HTM-dead-16120704>
Thu Sep 03 1998 19:38:00
89 ..c -rwxrwxrwx 0
0
16120706
<part2.img-_ACK2(1).GIF-dead-16120706>
Thu Sep 03 1998 19:38:02
89 m.. -rwxrwxrwx 0
0
16120706
<part2.img-_ACK2(1).GIF-dead-16120706>
348 ..c -rwxrwxrwx 0
0
16120712 <part2.img_UTTON~6.GIF-dead-16120712>
414 ..c -rwxrwxrwx 0
0
16120709 <part2.img_UTTON~5.GIF-dead-16120709>
Thu Sep 03 1998 19:38:04
414 m.. -rwxrwxrwx 0
0
16120709
<part2.img-_UTTON~5.GIF-dead-16120709>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
348 m.. -rwxrwxrwx 0
0
16120712 <part2.img_UTTON~6.GIF-dead-16120712>
Thu Sep 03 1998 19:38:12 3775 ..c -rwxrwxrwx 0
0
16120715
<part2.img-_A-FLO~2.GIF-dead-16120715>
Thu Sep 03 1998 19:38:14 4799 ..c -rwxrwxrwx 0
0
16120718
<part2.img-_TD58-~2.GIF-dead-16120718>
3775 m.. -rwxrwxrwx 0
0
16120715 <part2.img-_AFLO~2.GIF-dead-16120715>
Thu Sep 03 1998 19:38:16 4799 m.. -rwxrwxrwx 0
0
16120718
<part2.img-_TD58-~2.GIF-dead-16120718>
Thu Sep 03 1998 19:38:18 4636 ..c -rwxrwxrwx 0
0
16120721
<part2.img-_TD49-~2.GIF-dead-16120721>
Thu Sep 03 1998 19:38:20 5419 ..c -rwxrwxrwx 0
0
16120724
<part2.img-_TD81-~2.GIF-dead-16120724>
Thu Sep 03 1998 19:38:22 4636 m.. -rwxrwxrwx 0
0
16120721
<part2.img-_TD49-~2.GIF-dead-16120721>
Thu Sep 03 1998 19:38:24 5419 m.. -rwxrwxrwx 0
0
16120724
<part2.img-_TD81-~2.GIF-dead-16120724>
Thu Sep 03 1998 19:38:32 7119 ..c -rwxrwxrwx 0
0
16120727
<part2.img-_NNIVE~1.HTM-dead-16120727>
Thu Sep 03 1998 19:38:34 4438 ..c -rwxrwxrwx 0
0
16120730
<part2.img-_TD46-~2.GIF-dead-16120730>
7119 m.. -rwxrwxrwx 0
0
16120727 <part2.img_NNIVE~1.HTM-dead-16120727>
Thu Sep 03 1998 19:38:38 4438 m.. -rwxrwxrwx 0
0
16120730
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
<part2.img-_TD46-~2.GIF-dead-16120730>
Thu Sep 03 1998 19:38:56
309 ..c -rwxrwxrwx 0
0
16120733
<part2.img-_UTTON~7.GIF-dead-16120733>
Thu Sep 03 1998 19:38:58
309 m.. -rwxrwxrwx 0
0
16120733
<part2.img-_UTTON~7.GIF-dead-16120733>
1062 ..c -rwxrwxrwx 0
0
16120736 <part2.img-_APOC~2.GIF-dead-16120736>
Thu Sep 03 1998 19:39:00
44 ..c -rwxrwxrwx 0
0
16120739
<part2.img-_OX-WH~2.GIF-dead-16120739>
1062 m.. -rwxrwxrwx 0
0
16120736 <part2.img-_APOC~2.GIF-dead-16120736>
Thu Sep 03 1998 19:39:02
44 m.. -rwxrwxrwx 0
0
16120739
<part2.img-_OX-WH~2.GIF-dead-16120739>
Thu Sep 03 1998 19:39:26 4193 ..c -rwxrwxrwx 0
0
16120742
<part2.img-_TD902~2.GIF-dead-16120742>
Thu Sep 03 1998 19:39:28 4193 m.. -rwxrwxrwx 0
0
16120742
<part2.img-_TD902~2.GIF-dead-16120742>
Thu Sep 03 1998 19:39:40 2203 ..c -rwxrwxrwx 0
0
16120745
<part2.img-_RDER_~2.GIF-dead-16120745>
Thu Sep 03 1998 19:39:42 2203 m.. -rwxrwxrwx 0
0
16120745
<part2.img-_RDER_~2.GIF-dead-16120745>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Thu Sep 03 1998 19:42:08 20545 ..c -rwxrwxrwx 0
0
16120477
<part2.img-_RODUC~3.HTM-dead-16120477>
Thu Sep 03 1998 19:42:12 20545 m.. -rwxrwxrwx 0
0
16120477
<part2.img-_RODUC~3.HTM-dead-16120477>
Fri Sep 04 1998 05:30:44 7208 m.c -/-rwxrwxrwx 0
0
3899431
c:\/PROGRA~1/MICROS~1/AGEOFE~1/DATA/STemplet.dat (STEMPLET.DAT)
Thu Sep 10 1998 00:00:00 1014 .a. -rwxrwxrwx 0
0
29723389
<part2.img-_PBLANK.GIF-dead-29723389>
2161 .a. -rwxrwxrwx 0
0
29723427 <part2.img_RS_PR~1.GIF-dead-29723427>
1355 .a. -rwxrwxrwx 0
0
29723317 <part2.img_ORK.GIF-dead-29723317>
3359 .a. -rwxrwxrwx 0
0
19037599 <part2.img_N_TO6~1.JPE-dead-19037599>
1699 .a. -rwxrwxrwx 0
0
29723429 <part2.img_NDXARS1.GIF-dead-29723429>
1777 .a. -rwxrwxrwx 0
0
29723284 <part2.img_UPPORT.GIF-dead-29723284>
1266 .a. -rwxrwxrwx 0
0
29723329 <part2.img_LUEPR~1.GIF-dead-29723329>
2148 .a. -rwxrwxrwx 0
0
29723144 <part2.img_OPULAR.GIF-dead-29723144>
151 .a. -rwxrwxrwx 0
0
19037411 <part2.img-_R.GIFdead-19037411>
1180 .a. -rwxrwxrwx 0
0
29723523 <part2.img-_VKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
BLUE3.GIF-dead-29723523>
1826 .a. -rwxrwxrwx 0
0
19037433 <part2.img_N_BON~4.JPE-dead-19037433>
2394 .a. -rwxrwxrwx 0
0
29723451 <part2.img_ITLE_~2.GIF-dead-29723451>
2521 .a. -rwxrwxrwx 0
0
29723229 <part2.img_HP.GIF-dead-29723229>
79 .a. -rwxrwxrwx 0
0
29723512 <part2.img_IGHTA~2.GIF-dead-29723512>
3116 .a. -rwxrwxrwx 0
0
29723577 <part2.img_UMP.GIF-dead-29723577>
145 .a. -rwxrwxrwx 0
0
29723614 <part2.img_OTLMARK.GIF-dead-29723614>
3133 .a. -rwxrwxrwx 0
0
19037593 <part2.img_N_TO1~2.JPE-dead-19037593>
2762 .a. -rwxrwxrwx 0
0
29723391 <part2.img_HEREO~1.HTM-dead-29723391>
163 .a. -rwxrwxrwx 0
0
29723248 <part2.img_UM2.GIF-dead-29723248>
3244 .a. -rwxrwxrwx 0
0
19037642 <part2.img_RODUC~2.GIF-dead-19037642>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
2523 .a. -rwxrwxrwx 0
0
29723379 <part2.img_OWTOS~1.HTM-dead-29723379>
2058 .a. -rwxrwxrwx 0
0
29723142 <part2.img_EARCH~3.GIF-dead-29723142>
1785 .a. -rwxrwxrwx 0
0
29723456 <part2.img_ROLS.GIF-dead-29723456>
2639 .a. -rwxrwxrwx 0
0
19037674 <part2.img_PCOMI~1.HTM-dead-19037674>
2675 .a. -rwxrwxrwx 0
0
29723185 <part2.img_HTJ_I~1.GIF-dead-29723185>
4235 .a. -rwxrwxrwx 0
0
19037245 <part2.img_WWBOA~1.HTM-dead-19037245>
1952 .a. -rwxrwxrwx 0
0
29723238 <part2.img_T.GIF-dead-29723238>
321 .a. -rwxrwxrwx 0
0
29723583 <part2.img_ULLET.GIF-dead-29723583>
1247 .a. -rwxrwxrwx 0
0
29723597 <part2.img-_6.GIFdead-29723597>
2121 .a. -rwxrwxrwx 0
0
29723165 <part2.img_URRENT.DAT-dead-29723165>
4672 .a. -rwxrwxrwx 0
0
29723500 <part2.img_AIN33.GIF-dead-29723500>
1655 .a. -rwxrwxrwx 0
0
29723146 <part2.img_EOPLE.GIF-dead-29723146>
3176 .a. -rwxrwxrwx 0
0
29723265 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
_14_1.GIF-dead-29723265>
3441 .a. -rwxrwxrwx 0
0
19037583 <part2.img_ACK1~1.JPE-dead-19037583>
260 .a. -rwxrwxrwx 0
0
29723599 <part2.img_ANCEL.GIF-dead-29723599>
3506 .a. -rwxrwxrwx 0
0
19037590 <part2.img_N_TO1~1.JPE-dead-19037590>
332 .a. -rwxrwxrwx 0
0
29723618 <part2.img_AP.GIF-dead-29723618>
154 .a. -rwxrwxrwx 0
0
29723369 <part2.img_AV_ON.GIF-dead-29723369>
2817 .a. -rwxrwxrwx 0
0
29723532 <part2.img_V_1T_~1.GIF-dead-29723532>
1561 .a. -rwxrwxrwx 0
0
29723565 <part2.img_XCOLOR3.GIF-dead-29723565>
450 .a. -rwxrwxrwx 0
0
29723595 <part2.img_FRAME~1.HTM-dead-29723595>
333 .a. -rwxrwxrwx 0
0
19037633 <part2.img_M4.GIF-dead-19037633>
1183 .a. -rwxrwxrwx 0
0
29723579 <part2.img_FFICE.GIF-dead-29723579>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
538 .a. -rwxrwxrwx 0
0
29723406 <part2.img_OMELI~4.GIF-dead-29723406>
577 .a. -rwxrwxrwx 0
0
29723400 <part2.img_OMELI~2.GIF-dead-29723400>
1345 .a. -rwxrwxrwx 0
0
19037692 <part2.img_LL(1).TXT-dead-19037692>
165 .a. -rwxrwxrwx 0
0
29723616 <part2.img_UMMARY.GIF-dead-29723616>
1048 .a. -rwxrwxrwx 0
0
29723575 <part2.img_ROMOS.GIF-dead-29723575>
193 .a. -rwxrwxrwx 0
0
29723282 <part2.img_RITE(1).GIF-dead-29723282>
2962 .a. -rwxrwxrwx 0
0
19037604 <part2.img_P_PRE~1.GIF-dead-19037604>
1862 .a. -rwxrwxrwx 0
0
29723307 <part2.img_EDBUT~1.GIF-dead-29723307>
1837 .a. -rwxrwxrwx 0
0
29723332 <part2.img_IDDLE~1.GIF-dead-29723332>
132 .a. -rwxrwxrwx 0
0
29723257 <part2.img_TARROW.GIF-dead-29723257>
693 .a. -rwxrwxrwx 0
0
19037639 <part2.img_RACLE~1.GIF-dead-19037639>
2362 .a. -rwxrwxrwx 0
0
29723415 <part2.img_RODUC~3.GIF-dead-29723415>
1105 .a. -rwxrwxrwx 0
0
19037680 <part2.img-_.GIFKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
dead-19037680>
3202 .a. -rwxrwxrwx 0
0
29723261 <part2.img_URK(1~2.HTM-dead-29723261>
20993 .a. -rwxrwxrwx 0
0
29723453 <part2.img_MO2~1.HTM-dead-29723453>
609 .a. -rwxrwxrwx 0
0
29723482 <part2.img-_UFLA~1.GIF-dead-29723482>
6958 .a. -rwxrwxrwx 0
0
19037601 <part2.img_BA5KK.GIF-dead-19037601>
13574 .a. -rwxrwxrwx 0
0
29723494 <part2.img__STRI~1.JPE-dead-29723494>
26542 .a. -rwxrwxrwx 0
0
29723139 <part2.img_EARCH~6.HTM-dead-29723139>
4253 .a. -rwxrwxrwx 0
0
29723412 <part2.img_BOUTA~1.HTM-dead-29723412>
1942 .a. -rwxrwxrwx 0
0
29723393 <part2.img_BOUTO~1.HTM-dead-29723393>
1433 .a. -rwxrwxrwx 0
0
29723327 <part2.img_HUMB1.GIF-dead-29723327>
12891 .a. -rwxrwxrwx 0
0
19037611 <part2.img_PT1.GIF-dead-19037611>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
2237 .a. -rwxrwxrwx 0
0
29723373 <part2.img_NEIDA~1.HTM-dead-29723373>
1100 .a. -rwxrwxrwx 0
0
29723587 <part2.img_OJOLO~1.HTM-dead-29723587>
712 .a. -rwxrwxrwx 0
0
29723604 <part2.img_XPLOGOP.GIF-dead-29723604>
558 .a. -rwxrwxrwx 0
0
29723631 <part2.img_YMAPJ.GIF-dead-29723631>
49 .a. -rwxrwxrwx 0
0
29723153 <part2.img-_AGE1~1.GIF-dead-29723153>
442 .a. -rwxrwxrwx 0
0
19037672 <part2.img_EARCH~2.GIF-dead-19037672>
2273 .a. -rwxrwxrwx 0
0
29723280 <part2.img_XXTOP~1.GIF-dead-29723280>
2985 .a. -rwxrwxrwx 0
0
19037581 <part2.img_ACK2(1).GIF-dead-19037581>
35 .a. -rwxrwxrwx 0
0
19037684 <part2.img_HITE.GIF-dead-19037684>
3290 .a. -rwxrwxrwx 0
0
19037663 <part2.img_ASHIN~1.HTM-dead-19037663>
1197 .a. -rwxrwxrwx 0
0
29723521 <part2.img_UTTON3.GIF-dead-29723521>
127 .a. -rwxrwxrwx 0
0
29723371 <part2.img_AV(2).GIF-dead-29723371>
3844 .a. -rwxrwxrwx 0
0
29723471 <part2.img-_972Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
F~1.GIF-dead-29723471>
286 .a. -rwxrwxrwx 0
0
29723354 <part2.img_OTCLEAR.GIF-dead-29723354>
1403 .a. -rwxrwxrwx 0
0
29723375 <part2.img_UT.GIF-dead-29723375>
6922 .a. -rwxrwxrwx 0
0
29723197 <part2.img_COREP~1.CAB-dead-29723197>
173 .a. -rwxrwxrwx 0
0
29723421 <part2.img_XIT~1.HTM-dead-29723421>
49 .a. -rwxrwxrwx 0
0
29723159 <part2.img-_AGE5~1.GIF-dead-29723159>
2547 .a. -rwxrwxrwx 0
0
19037497 <part2.img_NDEX(~7.HTM-dead-19037497>
43 .a. -rwxrwxrwx 0
0
29723361 <part2.img_OT.GIF-dead-29723361>
68 .a. -rwxrwxrwx 0
0
29723277 <part2.img_SM.GIF-dead-29723277>
3474 .a. -rwxrwxrwx 0
0
29723589 <part2.img_OJO_N~1.HTM-dead-29723589>
252 .a. -rwxrwxrwx 0
0
29723268 <part2.img_URRET~1.HTM-dead-29723268>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
1444 .a. -rwxrwxrwx 0
0
29723479 <part2.img-_LIFO~1.GIF-dead-29723479>
1382 .a. -rwxrwxrwx 0
0
29723529 <part2.img__BLANK.GIF-dead-29723529>
14050 .a. -rwxrwxrwx 0
0
29723334 <part2.img_UERY(~3.HTM-dead-29723334>
2521 .a. -rwxrwxrwx 0
0
29723240 <part2.img_HP(1).GIF-dead-29723240>
199 .a. -rwxrwxrwx 0
0
29723319 <part2.img_ACK(1).GIF-dead-29723319>
1597 .a. -rwxrwxrwx 0
0
19037682 <part2.img_ULLDOG.GIF-dead-19037682>
649 .a. -rwxrwxrwx 0
0
29723287 <part2.img_EARCH~4.GIF-dead-29723287>
1022 .a. -rwxrwxrwx 0
0
29723569 <part2.img_UNSPRSM.GIF-dead-29723569>
2467 .a. -rwxrwxrwx 0
0
19037650 <part2.img_M2SUB.GIF-dead-19037650>
426 .a. -rwxrwxrwx 0
0
29723606 <part2.img_RRICON.GIF-dead-29723606>
82 .a. -rwxrwxrwx 0
0
29723468 <part2.img_LUEAR~1.GIF-dead-29723468>
1895 .a. -rwxrwxrwx 0
0
29723377 <part2.img_RINTA~1.HTM-dead-29723377>
3082 .a. -rwxrwxrwx 0
0
29723231 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
_H.GIF-dead-29723231>
1095 .a. -rwxrwxrwx 0
0
29723560 <part2.img_ETFIND.GIF-dead-29723560>
712 .a. -rwxrwxrwx 0
0
29723242 <part2.img_ETACRO.GIF-dead-29723242>
1322 .a. -rwxrwxrwx 0
0
29723305 <part2.img_M.GIF-dead-29723305>
573 .a. -rwxrwxrwx 0
0
29723292 <part2.img_IND.GIF-dead-29723292>
18546 .a. -rwxrwxrwx 0
0
19037653 <part2.img_ATESS~1.GIF-dead-19037653>
537 .a. -rwxrwxrwx 0
0
29723398 <part2.img_OMELI~1.GIF-dead-29723398>
1396354 .a. -rwxrwxrwx 0
0
18349062 <part2.img_ETUP.EXE-dead-18349062>
1872 .a. -rwxrwxrwx 0
0
29723581 <part2.img_ESBAK.GIF-dead-29723581>
2466 .a. -rwxrwxrwx 0
0
29723348 <part2.img_00~1.HTM-dead-29723348>
1490 .a. -rwxrwxrwx 0
0
29723364 <part2.img_OP_AD~1.GIF-dead-29723364>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
1758 .a. -rwxrwxrwx 0
0
29723357 <part2.img_DSTUD~1.GIF-dead-29723357>
8215 .a. -rwxrwxrwx 0
0
16120812 <part2.img-_PHDO~1.HTM-dead-16120812>
380 .a. -rwxrwxrwx 0
0
29723346 <part2.img_ORCUPLE.GIF-dead-29723346>
90 .a. -rwxrwxrwx 0
0
29723474 <part2.img_LAG_U~2.GIF-dead-29723474>
479 .a. -rwxrwxrwx 0
0
29723259 <part2.img_OTFAQ.GIF-dead-29723259>
5023 .a. -rwxrwxrwx 0
0
29723438 <part2.img_UTTON~1.JPE-dead-29723438>
3101 .a. -rwxrwxrwx 0
0
29723591 <part2.img_SCAPE.GIF-dead-29723591>
1589 .a. -rwxrwxrwx 0
0
29723602 <part2.img_HOPPI~1.GIF-dead-29723602>
104 .a. -rwxrwxrwx 0
0
29723223 <part2.img_RULE.GIF-dead-29723223>
9350 .a. -rwxrwxrwx 0
0
29723344 <part2.img_BREGI~1.HTM-dead-29723344>
2061 .a. -rwxrwxrwx 0
0
29723234 <part2.img_EBSYS~1.HTM-dead-29723234>
973 .a. -rwxrwxrwx 0
0
29723367 <part2.img_OTTOM~1.GIF-dead-29723367>
11271 .a. -rwxrwxrwx 0
0
29723251 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
_OWNLO~1.HTM-dead-29723251>
1672 .a. -rwxrwxrwx 0
0
29723255 <part2.img_EADLINE.GIF-dead-29723255>
855 .a. -rwxrwxrwx 0
0
29723525 <part2.img_OWERED1.GIF-dead-29723525>
1716 .a. -rwxrwxrwx 0
0
19037623 <part2.img_AV_NJ~1.HTM-dead-19037623>
12188 .a. -rwxrwxrwx 0
0
19037613 <part2.img_EBMAP~1.HTM-dead-19037613>
1295 .a. -rwxrwxrwx 0
0
29723188 <part2.img_RENA_~1.GIF-dead-29723188>
2114 .a. -rwxrwxrwx 0
0
19037359 <part2.img_AVITE~1.CLA-dead-19037359>
1322 .a. -rwxrwxrwx 0
0
29723290 <part2.img_UPNEW~1.GIF-dead-29723290>
3186 .a. -rwxrwxrwx 0
0
19037579 <part2.img_N_ST8~1.JPE-dead-19037579>
41 .a. -rwxrwxrwx 0
0
29723527 <part2.img_OTBLUE.GIF-dead-29723527>
2400 .a. -rwxrwxrwx 0
0
29723608 <part2.img-_6.GIFdead-29723608>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
874 .a. -rwxrwxrwx 0
0
29723571 <part2.img_SPACE.GIF-dead-29723571>
2731 .a. -rwxrwxrwx 0
0
29723641 <part2.img_NNDIR~1.JPE-dead-29723641>
9352 .a. -rwxrwxrwx 0
0
29723509 <part2.img_EEDQU~1.GIF-dead-29723509>
1288 .a. -rwxrwxrwx 0
0
29723627 <part2.img_NSLOGOS.GIF-dead-29723627>
662 .a. -rwxrwxrwx 0
0
29723403 <part2.img_OMELI~3.GIF-dead-29723403>
3545 .a. -rwxrwxrwx 0
0
29723227 <part2.img_P.GIF-dead-29723227>
58 .a. -rwxrwxrwx 0
0
29723573 <part2.img_LUE.GIF-dead-29723573>
3255 .a. -rwxrwxrwx 0
0
29723538 <part2.img__TPRO~1.GIF-dead-29723538>
1655 .a. -rwxrwxrwx 0
0
29723155 <part2.img_EOPLE~1.GIF-dead-29723155>
585 .a. -rwxrwxrwx 0
0
29723629 <part2.img_YMAPF.GIF-dead-29723629>
3545 .a. -rwxrwxrwx 0
0
29723236 <part2.img_P(1).GIF-dead-29723236>
2129 .a. -rwxrwxrwx 0
0
29723544 <part2.img_ECTLI~1.HTM-dead-29723544>
1435 .a. -rwxrwxrwx 0
0
29723419 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
_FER.GIF-dead-29723419>
8808 .a. -rwxrwxrwx 0
0
29723593 <part2.img_ONSAD~1.HTM-dead-29723593>
439 .a. -rwxrwxrwx 0
0
29723417 <part2.img_EW_SM~1.GIF-dead-29723417>
3525 .a. -rwxrwxrwx 0
0
29723492 <part2.img_V~1.HTM-dead-29723492>
1747 .a. -rwxrwxrwx 0
0
29723440 <part2.img_INE~1.JPE-dead-29723440>
1782 .a. -rwxrwxrwx 0
0
29723163 <part2.img_CLOGON.GIF-dead-29723163>
2858 .a. -rwxrwxrwx 0
0
18349061 <part2.img_ETUP.PIF-dead-18349061>
1183 .a. -rwxrwxrwx 0
0
19037395 <part2.img_33.GIF-dead-19037395>
301 .a. -rwxrwxrwx 0
0
29723271 <part2.img_IGHSC~1.CLA-dead-29723271>
471 .a. -rwxrwxrwx 0
0
29723359 <part2.img_EFINE.GIF-dead-29723359>
2956 .a. -rwxrwxrwx 0
0
29723585 <part2.img_OOKIT.GIF-dead-29723585>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
1086 .a. -rwxrwxrwx 0
0
29723298 <part2.img__SUBMIT.GIF-dead-29723298>
157 .a. -rwxrwxrwx 0
0
29723275 <part2.img_RITE.GIF-dead-29723275>
Thu Sep 10 1998 22:47:58
571 ..c -rwxrwxrwx 0
0
16120748
<part2.img-_AVTOP~1.GIF-dead-16120748>
Thu Sep 10 1998 22:48:00
435 ..c -rwxrwxrwx 0
0
16120754
<part2.img-_AVTOP~2.GIF-dead-16120754>
571 m.. -rwxrwxrwx 0
0
16120748 <part2.img_AVTOP~1.GIF-dead-16120748>
Thu Sep 10 1998 22:48:02
435 m.. -rwxrwxrwx 0
0
16120754
<part2.img-_AVTOP~2.GIF-dead-16120754>
1187 ..c -rwxrwxrwx 0
0
16120757 <part2.img_REEPL~1.GIF-dead-16120757>
Thu Sep 10 1998 22:48:04 1187 m.. -rwxrwxrwx 0
0
16120757
<part2.img-_REEPL~1.GIF-dead-16120757>
Thu Sep 10 1998 22:48:08 1235 ..c -rwxrwxrwx 0
0
16120760
<part2.img-_LOOMB~1.GIF-dead-16120760>
6095 ..c -rwxrwxrwx 0
0
16120763 <part2.img_LAYER~1.JPE-dead-16120763>
Thu Sep 10 1998 22:48:10 1235 m.. -rwxrwxrwx 0
0
16120760
<part2.img-_LOOMB~1.GIF-dead-16120760>
Thu Sep 10 1998 22:48:12
74 ..c -rwxrwxrwx 0
0
16120766
<part2.img-_UCKET~1.GIF-dead-16120766>
6095 m.. -rwxrwxrwx 0
0
16120763 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
_LAYER~1.JPE-dead-16120763>
Thu Sep 10 1998 22:48:16
74 m.. -rwxrwxrwx 0
0
16120766
<part2.img-_UCKET~1.GIF-dead-16120766>
Thu Sep 10 1998 22:48:18
458 ..c -rwxrwxrwx 0
0
16120769
<part2.img-_ERVER~1.GIF-dead-16120769>
104 ..c -rwxrwxrwx 0
0
16120771 <part2.img_HT_END.GIF-dead-16120771>
Thu Sep 10 1998 22:48:20
458 m.. -rwxrwxrwx 0
0
16120769
<part2.img-_ERVER~1.GIF-dead-16120769>
1570 ..c -rwxrwxrwx 0
0
16120776 <part2.img_ITE_P~1.GIF-dead-16120776>
700 ..c -rwxrwxrwx 0
0
16120773 <part2.img_HT_TOP.GIF-dead-16120773>
Thu Sep 10 1998 22:48:22 1570 m.. -rwxrwxrwx 0
0
16120776
<part2.img-_ITE_P~1.GIF-dead-16120776>
700 m.. -rwxrwxrwx 0
0
16120773 <part2.img_HT_TOP.GIF-dead-16120773>
Thu Sep 10 1998 22:48:34
104 m.. -rwxrwxrwx 0
0
16120771
<part2.img-_HT_END.GIF-dead-16120771>
Thu Sep 10 1998 22:48:46 1531 ..c -rwxrwxrwx 0
0
16120779
<part2.img-_0DOWN~1.GIF-dead-16120779>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Thu Sep 10 1998 22:48:48
551 ..c -rwxrwxrwx 0
0
16120782
<part2.img-_AVRIG~1.GIF-dead-16120782>
1531 m.. -rwxrwxrwx 0
0
16120779 <part2.img_0DOWN~1.GIF-dead-16120779>
Thu Sep 10 1998 22:48:50
551 m.. -rwxrwxrwx 0
0
16120782
<part2.img-_AVRIG~1.GIF-dead-16120782>
518 ..c -rwxrwxrwx 0
0
16120788 <part2.img_AVRIG~3.GIF-dead-16120788>
531 ..c -rwxrwxrwx 0
0
16120785 <part2.img_AVRIG~2.GIF-dead-16120785>
Thu Sep 10 1998 22:48:52
390 ..c -rwxrwxrwx 0
0
16120791
<part2.img-_AVRIG~4.GIF-dead-16120791>
531 m.. -rwxrwxrwx 0
0
16120785 <part2.img_AVRIG~2.GIF-dead-16120785>
518 m.. -rwxrwxrwx 0
0
16120788 <part2.img_AVRIG~3.GIF-dead-16120788>
Thu Sep 10 1998 22:48:54 1193 ..c -rwxrwxrwx 0
0
16120794
<part2.img-_AVRIG~5.GIF-dead-16120794>
390 m.. -rwxrwxrwx 0
0
16120791 <part2.img_AVRIG~4.GIF-dead-16120791>
Thu Sep 10 1998 22:48:56 1193 m.. -rwxrwxrwx 0
0
16120794
<part2.img-_AVRIG~5.GIF-dead-16120794>
Thu Sep 10 1998 22:48:58 1747 ..c -rwxrwxrwx 0
0
16120799
<part2.img-_RESETS.GIF-dead-16120799>
Thu Sep 10 1998 22:49:00 1747 m.. -rwxrwxrwx 0
0
16120799
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
<part2.img-_RESETS.GIF-dead-16120799>
Thu Sep 10 1998 22:49:06
711 ..c -rwxrwxrwx 0
0
16120804
<part2.img-_PECTR~1.GIF-dead-16120804>
Thu Sep 10 1998 22:49:08
711 m.. -rwxrwxrwx 0
0
16120804
<part2.img-_PECTR~1.GIF-dead-16120804>
Thu Sep 10 1998 22:49:22 4727 ..c -rwxrwxrwx 0
0
16120806
<part2.img-_2SYSR~1.HTM-dead-16120806>
Thu Sep 10 1998 22:49:24 4727 m.. -rwxrwxrwx 0
0
16120806
<part2.img-_2SYSR~1.HTM-dead-16120806>
Thu Sep 10 1998 22:52:44 8426 ..c -rwxrwxrwx 0
0
16120809
<part2.img-_OWNLO~1.HTM-dead-16120809>
Thu Sep 10 1998 22:52:48 8426 m.. -rwxrwxrwx 0
0
16120809
<part2.img-_OWNLO~1.HTM-dead-16120809>
Thu Sep 10 1998 22:54:38 8215 ..c -rwxrwxrwx 0
0
16120812
<part2.img-_PH-DO~1.HTM-dead-16120812>
Thu Sep 10 1998 22:54:40
43 ..c -rwxrwxrwx 0
0
16120814
<part2.img-_LEAR.GIF-dead-16120814>
Thu Sep 10 1998 22:54:42
43 m.. -rwxrwxrwx 0
0
16120814
<part2.img-_LEAR.GIF-dead-16120814>
Thu Sep 10 1998 22:54:44 8215 ..c -rwxrwxrwx 0
0
16120817
<part2.img-_PH-DO~2.HTM-dead-16120817>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Thu Sep 10 1998 22:54:48 8215 m.. -rwxrwxrwx 0
0
16120812
<part2.img-_PH-DO~1.HTM-dead-16120812>
Thu Sep 10 1998 22:54:50 8215 m.. -rwxrwxrwx 0
0
16120817
<part2.img-_PH-DO~2.HTM-dead-16120817>
722 ..c -rwxrwxrwx 0
0
16120819 <part2.img_OXINFO.GIF-dead-16120819>
Thu Sep 10 1998 22:54:52 2490 ..c -rwxrwxrwx 0
0
16120811
<part2.img-_UTEC.GIF-dead-16120811>
722 m.. -rwxrwxrwx 0
0
16120819 <part2.img_OXINFO.GIF-dead-16120819>
Thu Sep 10 1998 22:54:54 2490 m.. -rwxrwxrwx 0
0
16120811
<part2.img-_UTEC.GIF-dead-16120811>
Thu Sep 10 1998 23:04:58 1396354 ..c -rwxrwxrwx 0
0
18349062
<part2.img-_ETUP.EXE-dead-18349062>
2858 ..c -rwxrwxrwx 0
0
18349061 <part2.img_ETUP.PIF-dead-18349061>
Thu Sep 10 1998 23:05:00 1396354 m.. -rwxrwxrwx 0
0
18349062
<part2.img-_ETUP.EXE-dead-18349062>
Thu Sep 10 1998 23:05:04 2858 m.. -rwxrwxrwx 0
0
18349061
<part2.img-_ETUP.PIF-dead-18349061>
Thu Sep 10 1998 23:11:34
221 ..c -rwxrwxrwx 0
0
16120827
<part2.img-_ULLTO~1.GIF-dead-16120827>
Thu Sep 10 1998 23:11:36
221 m.. -rwxrwxrwx 0
0
16120827
<part2.img-_ULLTO~1.GIF-dead-16120827>
Thu Sep 10 1998 23:11:38
122 ..c -rwxrwxrwx 0
0
16120830
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
<part2.img-_ALFTO~1.GIF-dead-16120830>
Thu Sep 10 1998 23:11:40
122 m.. -rwxrwxrwx 0
0
16120830
<part2.img-_ALFTO~1.GIF-dead-16120830>
92 ..c -rwxrwxrwx 0
0
29431811 <part2.img_RROW.GIF-dead-29431811>
222 ..c -rwxrwxrwx 0
0
16120833 <part2.img_ULLEN~1.GIF-dead-16120833>
Thu Sep 10 1998 23:11:42
222 m.. -rwxrwxrwx 0
0
16120833
<part2.img-_ULLEN~1.GIF-dead-16120833>
92 m.. -rwxrwxrwx 0
0
29431811 <part2.img_RROW.GIF-dead-29431811>
Thu Sep 10 1998 23:11:44
116 ..c -rwxrwxrwx 0
0
29431814
<part2.img-_ALFEN~1.GIF-dead-29431814>
Thu Sep 10 1998 23:11:46
116 m.. -rwxrwxrwx 0
0
29431814
<part2.img-_ALFEN~1.GIF-dead-29431814>
Fri Sep 11 1998 00:00:00 1015 .a. -rwxrwxrwx 0
0
30191188
<part2.img-_HIP_S~1.GIF-dead-30191188>
15628 .a. -rwxrwxrwx 0
0
30191425 <part2.img_AGD6N~1.HTM-dead-30191425>
1238 .a. -rwxrwxrwx 0
0
30191527 <part2.img_LOBE.GIF-dead-30191527>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
1710 .a. -rwxrwxrwx 0
0
30191590 <part2.img_OPSITE.GIF-dead-30191590>
3943 .a. -rwxrwxrwx 0
0
30191427 <part2.img_HINESE2.GIF-dead-30191427>
263 .a. -rwxrwxrwx 0
0
30191570 <part2.img_EMOTE~2.HTM-dead-30191570>
600 .a. -rwxrwxrwx 0
0
30191576 <part2.img_YMAPC.GIF-dead-30191576>
1284 .a. -rwxrwxrwx 0
0
16569457 <part2.img_0_RG.GIF-dead-16569457>
546 .a. -rwxrwxrwx 0
0
30191580 <part2.img_YMAPK.GIF-dead-30191580>
16664 .a. -rwxrwxrwx 0
0
30191450 <part2.img_UERY(~4.HTM-dead-30191450>
49 .a. -rwxrwxrwx 0
0
30191512 <part2.img_RANSPIX.GIF-dead-30191512>
1305 .a. -rwxrwxrwx 0
0
30191319 <part2.img__FREQ~1.GIF-dead-30191319>
2363 .a. -rwxrwxrwx 0
0
30191525 <part2.img_IGHT~2.HTM-dead-30191525>
1082 .a. -rwxrwxrwx 0
0
30191562 <part2.img_TTALIAS.GIF-dead-30191562>
855 .a. -rwxrwxrwx 0
0
30191564 <part2.img_TA~1.HTM-dead-30191564>
1944 .a. -rwxrwxrwx 0
0
30191467 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
_D2.GIF-dead-30191467>
1119 .a. -rwxrwxrwx 0
0
30191531 <part2.img_FFERS.GIF-dead-30191531>
10513 .a. -rwxrwxrwx 0
0
16569761 <part2.img_ESGRP~1.HTM-dead-16569761>
8304 .a. -rwxrwxrwx 0
0
30191537 <part2.img_ES~2.HTM-dead-30191537>
2585 .a. -rwxrwxrwx 0
0
30191408 <part2.img-_LIFO~2.GIF-dead-30191408>
4117 .a. -rwxrwxrwx 0
0
18497560 <part2.img_ONDO.GIF-dead-18497560>
79 .a. -rwxrwxrwx 0
0
30191440 <part2.img_EFTAR~2.GIF-dead-30191440>
96 .a. -rwxrwxrwx 0
0
30191560 <part2.img_IDS.GIF-dead-30191560>
911 .a. -rwxrwxrwx 0
0
30191519 <part2.img_RIICON.GIF-dead-30191519>
955 .a. -rwxrwxrwx 0
0
30191237 <part2.img__YES.GIF-dead-30191237>
1291 .a. -rwxrwxrwx 0
0
18497621 <part2.img_OCKER~1.GIF-dead-18497621>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
2061 .a. -rwxrwxrwx 0
0
18497684 <part2.img_BTN3R.GIF-dead-18497684>
23686 .a. -rwxrwxrwx 0
0
30191448 <part2.img_T(6)~2.HTM-dead-30191448>
7384 .a. -rwxrwxrwx 0
0
30191462 <part2.img_EARCH~6.HTM-dead-30191462>
683 .a. -rwxrwxrwx 0
0
30191469 <part2.img_D1A.GIF-dead-30191469>
1548 .a. -rwxrwxrwx 0
0
30191566 <part2.img_15.GIF-dead-30191566>
578 .a. -rwxrwxrwx 0
0
30191578 <part2.img_YMAPG.GIF-dead-30191578>
1862 .a. -rwxrwxrwx 0
0
16569639 <part2.img_EDBUT~1.GIF-dead-16569639>
361 .a. -rwxrwxrwx 0
0
16569701 <part2.img_COMPL~1.GIF-dead-16569701>
110 .a. -rwxrwxrwx 0
0
30191568 <part2.img_ELECT.GIF-dead-30191568>
1372 .a. -rwxrwxrwx 0
0
30191556 <part2.img_IZARD~1.GIF-dead-30191556>
357 .a. -rwxrwxrwx 0
0
30191133 <part2.img-_M.GIFdead-30191133>
995 .a. -rwxrwxrwx 0
0
30191507 <part2.img_OLLOGO.GIF-dead-30191507>
561 .a. -rwxrwxrwx 0
0
30191202 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5 06E4 A169 4E46
_THER.GIF-dead-30191202>
649 .a. -rwxrwxrwx 0
0
30191510 <part2.img_ETFIN~1.GIF-dead-30191510>
1705 .a. -rwxrwxrwx 0
0
30191572 <part2.img_AGELLAN.GIF-dead-30191572>
65 .a. -rwxrwxrwx 0
0
16569567 <part2.img_UMBER~3.GIF-dead-16569567>
51 .a. -rwxrwxrwx 0
0
30191574 <part2.img_03V192.GIF-dead-30191574>
1168 .a. -rwxrwxrwx 0
0
16569778 <part2.img_0FJK95P.GIF-dead-16569778>
2103 .a. -rwxrwxrwx 0
0
18497703 <part2.img_BTN1R.GIF-dead-18497703>
728 .a. -rwxrwxrwx 0
0
30191413 <part2.img-_TON.GIF-dead-30191413>
1415 .a. -rwxrwxrwx 0
0
30191480 <part2.img__HELP~1.GIF-dead-30191480>
1019 .a. -rwxrwxrwx 0
0
16569819 <part2.img_34.GIF-dead-16569819>
84 .a. -rwxrwxrwx 0
0
30191400 <part2.img-_OTSD~1.GIF-dead-30191400>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
7727 .a. -rwxrwxrwx 0
0
30191405 <part2.img_CREAT~1.GIF-dead-30191405>
1139 .a. -rwxrwxrwx 0
0
30191533 <part2.img_EWS(1).GIF-dead-30191533>
484 .a. -rwxrwxrwx 0
0
30191419 <part2.img_LTSRCH1.GIF-dead-30191419>
1379 .a. -rwxrwxrwx 0
0
30191529 <part2.img_EETING.GIF-dead-30191529>
910 .a. -rwxrwxrwx 0
0
30191517 <part2.img_ELECTSM.GIF-dead-30191517>
1098 .a. -rwxrwxrwx 0
0
30191150 <part2.img_OMEBAR.GIF-dead-30191150>
965 .a. -rwxrwxrwx 0
0
16569578 <part2.img_96.GIF-dead-16569578>
58 .a. -rwxrwxrwx 0
0
30191397 <part2.img-_LIFO~1.GIF-dead-30191397>
2002 .a. -rwxrwxrwx 0
0
30191539 <part2.img-_OOKFOR.GIF-dead-30191539>
511 .a. -rwxrwxrwx 0
0
16569554 <part2.img_OJAVA~1.GIF-dead-16569554>
1828 .a. -rwxrwxrwx 0
0
16569381 <part2.img_JACKF-3.JPG-dead-16569381>
639 .a. -rwxrwxrwx 0
0
18497551 <part2.img-_NMAI~1.GIF-dead-18497551>
1512 .a. -rwxrwxrwx 0
0
30191392 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
_OTTOM~1.GIF-dead-30191392>
1758 .a. -rwxrwxrwx 0
0
30191551 <part2.img_M_PHOTO.GIF-dead-30191551>
536 .a. -rwxrwxrwx 0
0
30191597 <part2.img_OLDBALL.GIF-dead-30191597>
1428 .a. -rwxrwxrwx 0
0
30191553 <part2.img_INKS1.GIF-dead-30191553>
1257 .a. -rwxrwxrwx 0
0
16569444 <part2.img_1_EG.GIF-dead-16569444>
134 .a. -rwxrwxrwx 0
0
18497543 <part2.img_EN_BO~1.GIF-dead-18497543>
1398 .a. -rwxrwxrwx 0
0
16569852 <part2.img_BUTTON1.GIF-dead-16569852>
124 .a. -rwxrwxrwx 0
0
30191558 <part2.img_ESTRANT.GIF-dead-30191558>
50 .a. -rwxrwxrwx 0
0
30191271 <part2.img_LINE.GIF-dead-30191271>
112 .a. -rwxrwxrwx 0
0
30191411 <part2.img-_ISKB~1.GIF-dead-30191411>
3187 .a. -rwxrwxrwx 0
0
16569484 <part2.img_753_H~1.GIF-dead-16569484>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
43 .a. -rwxrwxrwx 0
0
30191618 <part2.img_ITE3_~1.GIF-dead-30191618>
2018 .a. -rwxrwxrwx 0
0
30191549 <part2.img_M_HOW~1.GIF-dead-30191549>
1150 .a. -rwxrwxrwx 0
0
16569396 <part2.img-_AVAM~1.GIF-dead-16569396>
814 .a. -rwxrwxrwx 0
0
30191471 <part2.img_IER.GIF-dead-30191471>
1009 .a. -rwxrwxrwx 0
0
30191454 <part2.img_ABS.GIF-dead-30191454>
526 .a. -rwxrwxrwx 0
0
30191116 <part2.img_EST~1.HTM-dead-30191116>
43 .a. -rwxrwxrwx 0
0
30191476 <part2.img_QUARE.GIF-dead-30191476>
507 .a. -rwxrwxrwx 0
0
30191474 <part2.img_IGITA~1.GIF-dead-30191474>
Fri Sep 18 1998 19:44:20 9640 ..c -rwxrwxrwx 0
0
29431817
<part2.img-_AINHE~2.GIF-dead-29431817>
Fri Sep 18 1998 19:44:24 9640 m.. -rwxrwxrwx 0
0
29431817
<part2.img-_AINHE~2.GIF-dead-29431817>
Fri Sep 18 1998 19:44:50 2084 ..c -rwxrwxrwx 0
0
29431819
<part2.img-_RANTS~1.JPE-dead-29431819>
Fri Sep 18 1998 19:44:52 2084 m.. -rwxrwxrwx 0
0
29431819
<part2.img-_RANTS~1.JPE-dead-29431819>
Fri Sep 18 1998 19:44:56 4141 ..c -rwxrwxrwx 0
0
29431822
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169 4E46
<part2.img-_ELCOM~2.HTM-dead-29431822>
Fri Sep 18 1998 19:44:58 4141 m.. -rwxrwxrwx 0
0
29431822
<part2.img-_ELCOM~2.HTM-dead-29431822>
Fri Sep 18 1998 19:45:14 1107 ..c -rwxrwxrwx 0
0
29431824
<part2.img-_HWWW~1.HTM-dead-29431824>
Fri Sep 18 1998 19:45:16 1107 m.. -rwxrwxrwx 0
0
29431824
<part2.img-_HWWW~1.HTM-dead-29431824>
Sat Sep 19 1998 09:04:26
750 ..c -rwxrwxrwx 0
0
29431829
<part2.img-_C089801.GIF-dead-29431829>
Sat Sep 19 1998 09:04:28
750 m.. -rwxrwxrwx 0
0
29431829
<part2.img-_C089801.GIF-dead-29431829>
Sat Sep 19 1998 09:04:58
174 ..c -rwxrwxrwx 0
0
29431832
<part2.img-_OUNTE~1.GIF-dead-29431832>
Sat Sep 19 1998 09:05:00
174 m.. -rwxrwxrwx 0
0
29431832
<part2.img-_OUNTE~1.GIF-dead-29431832>
Sat Sep 19 1998 09:05:54 3931 ..c -rwxrwxrwx 0
0
29431834
<part2.img-_1.GIF-dead-29431834>
Sat Sep 19 1998 09:05:58 3931 m.. -rwxrwxrwx 0
0
29431834
<part2.img-_1.GIF-dead-29431834>
Sat Sep 19 1998 09:06:38 2608 ..c -rwxrwxrwx 0
0
29431836
<part2.img-_BACKGRD.GIF-dead-29431836>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Sat Sep 19 1998 09:06:40 2452 ..c -rwxrwxrwx 0
0
29431838
<part2.img-_MAGE63.GIF-dead-29431838>
2608 m.. -rwxrwxrwx 0
0
29431836 <part2.img_BACKGRD.GIF-dead-29431836>
Sat Sep 19 1998 09:06:42 2452 m.. -rwxrwxrwx 0
0
29431838
<part2.img-_MAGE63.GIF-dead-29431838>
Sat Sep 19 1998 09:06:44 2414 ..c -rwxrwxrwx 0
0
29431840
<part2.img-_MAGE67.GIF-dead-29431840>
Sat Sep 19 1998 09:06:46 2401 ..c -rwxrwxrwx 0
0
29431842
<part2.img-_MAGE32.GIF-dead-29431842>
Sat Sep 19 1998 09:06:48 3038 ..c -rwxrwxrwx 0
0
29431844
<part2.img-_MAGE36.GIF-dead-29431844>
2401 m.. -rwxrwxrwx 0
0
29431842 <part2.img_MAGE32.GIF-dead-29431842>
2414 m.. -rwxrwxrwx 0
0
29431840 <part2.img_MAGE67.GIF-dead-29431840>
Sat Sep 19 1998 09:06:50 3038 m.. -rwxrwxrwx 0
0
29431844
<part2.img-_MAGE36.GIF-dead-29431844>
2719 ..c -rwxrwxrwx 0
0
29431846 <part2.img_MAGE72.GIF-dead-29431846>
Sat Sep 19 1998 09:06:52 2719 m.. -rwxrwxrwx 0
0
29431846
<part2.img-_MAGE72.GIF-dead-29431846>
Sat Sep 19 1998 09:06:54 2369 ..c -rwxrwxrwx 0
0
29431848
<part2.img-_MAGE41.GIF-dead-29431848>
2757 ..c -rwxrwxrwx 0
0
29431850 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
_MAGE76.GIF-dead-29431850>
Sat Sep 19 1998 09:06:56 2757 m.. -rwxrwxrwx 0
0
29431850
<part2.img-_MAGE76.GIF-dead-29431850>
2629 ..c -rwxrwxrwx 0
0
29431852 <part2.img_MAGE100.GIF-dead-29431852>
2369 m.. -rwxrwxrwx 0
0
29431848 <part2.img_MAGE41.GIF-dead-29431848>
Sat Sep 19 1998 09:06:58 2629 m.. -rwxrwxrwx 0
0
29431852
<part2.img-_MAGE100.GIF-dead-29431852>
Sat Sep 19 1998 09:07:00 2000 ..c -rwxrwxrwx 0
0
29431854
<part2.img-_MAGE49.GIF-dead-29431854>
Sat Sep 19 1998 09:07:02 2000 m.. -rwxrwxrwx 0
0
29431854
<part2.img-_MAGE49.GIF-dead-29431854>
2224 ..c -rwxrwxrwx 0
0
29431856 <part2.img_MAGE81.GIF-dead-29431856>
Sat Sep 19 1998 09:07:04 2224 m.. -rwxrwxrwx 0
0
29431856
<part2.img-_MAGE81.GIF-dead-29431856>
Sat Sep 19 1998 09:07:06 2310 ..c -rwxrwxrwx 0
0
29431858
<part2.img-_MAGE58.GIF-dead-29431858>
Sat Sep 19 1998 09:07:08 2166 ..c -rwxrwxrwx 0
0
29431860
<part2.img-_MAGE85.GIF-dead-29431860>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
2310 m.. -rwxrwxrwx 0
0
29431858 <part2.img_MAGE58.GIF-dead-29431858>
Sat Sep 19 1998 09:07:10 2166 m.. -rwxrwxrwx 0
0
29431860
<part2.img-_MAGE85.GIF-dead-29431860>
Sat Sep 19 1998 09:07:12 2252 ..c -rwxrwxrwx 0
0
29431862
<part2.img-_MAGE89.GIF-dead-29431862>
Sat Sep 19 1998 09:07:14 1975 ..c -rwxrwxrwx 0
0
29431864
<part2.img-_MAGE90.GIF-dead-29431864>
2252 m.. -rwxrwxrwx 0
0
29431862 <part2.img_MAGE89.GIF-dead-29431862>
2579 ..c -rwxrwxrwx 0
0
29431866 <part2.img_MAGE98.GIF-dead-29431866>
Sat Sep 19 1998 09:07:16 2579 m.. -rwxrwxrwx 0
0
29431866
<part2.img-_MAGE98.GIF-dead-29431866>
1975 m.. -rwxrwxrwx 0
0
29431864 <part2.img_MAGE90.GIF-dead-29431864>
Sat Sep 19 1998 09:07:22 3034 ..c -rwxrwxrwx 0
0
29431868
<part2.img-_MAGE104.GIF-dead-29431868>
Sat Sep 19 1998 09:07:24 3034 m.. -rwxrwxrwx 0
0
29431868
<part2.img-_MAGE104.GIF-dead-29431868>
Sat Sep 19 1998 09:07:26 2706 ..c -rwxrwxrwx 0
0
29431870
<part2.img-_MAGE108.GIF-dead-29431870>
Sat Sep 19 1998 09:07:28 2706 m.. -rwxrwxrwx 0
0
29431870
<part2.img-_MAGE108.GIF-dead-29431870>
Mon Sep 21 1998 18:56:44 1646 ..c -rwxrwxrwx 0
0
29431872
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
<part2.img-_MAIN.GIF-dead-29431872>
Mon Sep 21 1998 18:56:46 1762 ..c -rwxrwxrwx 0
0
29431878
<part2.img-_NEWS.GIF-dead-29431878>
1646 m.. -rwxrwxrwx 0
0
29431872 <part2.img_MAIN.GIF-dead-29431872>
Mon Sep 21 1998 18:56:48 1762 m.. -rwxrwxrwx 0
0
29431878
<part2.img-_NEWS.GIF-dead-29431878>
Mon Sep 21 1998 18:59:18 2133 ..c -rwxrwxrwx 0
0
29431880
<part2.img-_ENEWA~2.HTM-dead-29431880>
Mon Sep 21 1998 18:59:20 2133 m.. -rwxrwxrwx 0
0
29431880
<part2.img-_ENEWA~2.HTM-dead-29431880>
Mon Sep 21 1998 18:59:26 1646 ..c -rwxrwxrwx 0
0
29431882
<part2.img-_MAIN(1).GIF-dead-29431882>
Mon Sep 21 1998 18:59:28 1762 ..c -rwxrwxrwx 0
0
29431884
<part2.img-_NEWS(1).GIF-dead-29431884>
1646 m.. -rwxrwxrwx 0
0
29431882 <part2.img_MAIN(1).GIF-dead-29431882>
Mon Sep 21 1998 18:59:30 1762 m.. -rwxrwxrwx 0
0
29431884
<part2.img-_NEWS(1).GIF-dead-29431884>
Sun Sep 27 1998 22:01:00 365568 m.c -/-rwxrwxrwx 0
0
3892271
c:\/PROGRA~1/MICROS~1/AGEOFE~1/HA312W32.DLL
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Tue Sep 29 1998 21:57:10 1694 ..c -rwxrwxrwx 0
0
29431886
<part2.img-_ANNER~2.GIF-dead-29431886>
Tue Sep 29 1998 21:57:12 1694 m.. -rwxrwxrwx 0
0
29431886
<part2.img-_ANNER~2.GIF-dead-29431886>
Tue Sep 29 1998 21:57:34 2055 ..c -rwxrwxrwx 0
0
29431888
<part2.img-_PPLY.GIF-dead-29431888>
Tue Sep 29 1998 21:57:44 2055 m.. -rwxrwxrwx 0
0
29431888
<part2.img-_PPLY.GIF-dead-29431888>
Tue Sep 29 1998 21:57:48 2007 ..c -rwxrwxrwx 0
0
29431890
<part2.img-_MAILGIF.GIF-dead-29431890>
Tue Sep 29 1998 21:58:32 2007 m.. -rwxrwxrwx 0
0
29431890
<part2.img-_MAILGIF.GIF-dead-29431890>
Tue Sep 29 1998 21:58:52 1417 ..c -rwxrwxrwx 0
0
29431892
<part2.img-_OMEN.GIF-dead-29431892>
Tue Sep 29 1998 21:58:54 1417 m.. -rwxrwxrwx 0
0
29431892
<part2.img-_OMEN.GIF-dead-29431892>
Tue Sep 29 1998 21:59:10 1525 ..c -rwxrwxrwx 0
0
29431894
<part2.img-_4M.GIF-dead-29431894>
Tue Sep 29 1998 21:59:12 1525 m.. -rwxrwxrwx 0
0
29431894
<part2.img-_4M.GIF-dead-29431894>
Tue Sep 29 1998 21:59:16 1511 ..c -rwxrwxrwx 0
0
29431896
<part2.img-_4G.GIF-dead-29431896>
Tue Sep 29 1998 21:59:18 1511 m.. -rwxrwxrwx 0
0
29431896
<part2.img-_4G.GIF-dead-29431896>
Tue Sep 29 1998 21:59:22 1539 ..c -rwxrwxrwx 0
0
29431899
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
<part2.img-_ON-SE~1.GIF-dead-29431899>
Tue Sep 29 1998 21:59:24 1539 m.. -rwxrwxrwx 0
0
29431899
<part2.img-_ON-SE~1.GIF-dead-29431899>
Tue Sep 29 1998 21:59:34 1564 ..c -rwxrwxrwx 0
0
29431901
<part2.img-_EW.GIF-dead-29431901>
Tue Sep 29 1998 21:59:36 1564 m.. -rwxrwxrwx 0
0
29431901
<part2.img-_EW.GIF-dead-29431901>
Tue Sep 29 1998 21:59:38 13556 ..c -rwxrwxrwx 0
0
29431903
<part2.img-_INKSA~1.GIF-dead-29431903>
Tue Sep 29 1998 21:59:46 13556 m.. -rwxrwxrwx 0
0
29431903
<part2.img-_INKSA~1.GIF-dead-29431903>
Tue Sep 29 1998 22:00:36 4299 ..c -rwxrwxrwx 0
0
29431905
<part2.img-_ETISH~1.HTM-dead-29431905>
Tue Sep 29 1998 22:00:40 4299 m.. -rwxrwxrwx 0
0
29431905
<part2.img-_ETISH~1.HTM-dead-29431905>
Tue Sep 29 1998 22:01:06
821 ..c -rwxrwxrwx 0
0
29431907
<part2.img-_HECK.GIF-dead-29431907>
Tue Sep 29 1998 22:01:08
821 m.. -rwxrwxrwx 0
0
29431907
<part2.img-_HECK.GIF-dead-29431907>
Tue Sep 29 1998 22:02:28 5078 ..c -rwxrwxrwx 0
0
29431909
<part2.img-_LOODBAR.GIF-dead-29431909>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Tue Sep 29 1998 22:02:32 5078 m.. -rwxrwxrwx 0
0
29431909
<part2.img-_LOODBAR.GIF-dead-29431909>
Tue Sep 29 1998 22:04:30 28147 ..c -rwxrwxrwx 0
0
29431911
<part2.img-_ASTY.GIF-dead-29431911>
Tue Sep 29 1998 22:05:16 28147 m.. -rwxrwxrwx 0
0
29431911
<part2.img-_ASTY.GIF-dead-29431911>
Tue Sep 29 1998 22:08:58 18983 ..c -rwxrwxrwx 0
0
29431913
<part2.img-_M0443~1.JPE-dead-29431913>
Tue Sep 29 1998 22:09:26 18983 m.. -rwxrwxrwx 0
0
29431913
<part2.img-_M0443~1.JPE-dead-29431913>
Tue Sep 29 1998 22:12:14 10562 ..c -rwxrwxrwx 0
0
29431915
<part2.img-_30~2.HTM-dead-29431915>
Tue Sep 29 1998 22:12:22 10562 m.. -rwxrwxrwx 0
0
29431915
<part2.img-_30~2.HTM-dead-29431915>
Tue Sep 29 1998 22:12:30 3413 ..c -rwxrwxrwx 0
0
29431918
<part2.img-_DULTC~1.JPE-dead-29431918>
Tue Sep 29 1998 22:12:32 4071 ..c -rwxrwxrwx 0
0
29431920
<part2.img-_GECHECK.GIF-dead-29431920>
3413 m.. -rwxrwxrwx 0
0
29431918 <part2.img_DULTC~1.JPE-dead-29431918>
Tue Sep 29 1998 22:12:36 4071 m.. -rwxrwxrwx 0
0
29431920
<part2.img-_GECHECK.GIF-dead-29431920>
Tue Sep 29 1998 22:13:40 2071 ..c -rwxrwxrwx 0
0
29431922
<part2.img-_GECOU~1.GIF-dead-29431922>
Tue Sep 29 1998 22:13:42 2071 m.. -rwxrwxrwx 0
0
29431922
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
<part2.img-_GECOU~1.GIF-dead-29431922>
Tue Sep 29 1998 22:14:02 6136 ..c -rwxrwxrwx 0
0
29431924
<part2.img-_30P~3.HTM-dead-29431924>
Tue Sep 29 1998 22:14:04 6136 m.. -rwxrwxrwx 0
0
29431924
<part2.img-_30P~3.HTM-dead-29431924>
Tue Sep 29 1998 22:14:10 11360 ..c -rwxrwxrwx 0
0
29431926
<part2.img-_EXDRA~1.JPE-dead-29431926>
Tue Sep 29 1998 22:14:14 14362 ..c -rwxrwxrwx 0
0
29431928
<part2.img-_ODBUT.GIF-dead-29431928>
Tue Sep 29 1998 22:14:34 14362 m.. -rwxrwxrwx 0
0
29431928
<part2.img-_ODBUT.GIF-dead-29431928>
Tue Sep 29 1998 22:16:36 11360 m.. -rwxrwxrwx 0
0
29431926
<part2.img-_EXDRA~1.JPE-dead-29431926>
Tue Sep 29 1998 22:19:50 10793 ..c -rwxrwxrwx 0
0
10737852
<part2.img-_2~1.JPE-dead-10737852>
Tue Sep 29 1998 22:20:00 10793 m.. -rwxrwxrwx 0
0
10737852
<part2.img-_2~1.JPE-dead-10737852>
Tue Sep 29 1998 22:26:50 14299 ..c -rwxrwxrwx 0
0
29431931
<part2.img-_M41.GIF-dead-29431931>
Tue Sep 29 1998 22:27:02 14299 m.. -rwxrwxrwx 0
0
29431931
<part2.img-_M41.GIF-dead-29431931>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Tue Sep 29 1998 22:29:40 30232 ..c -rwxrwxrwx 0
0
29431933
<part2.img-_M1132~1.JPE-dead-29431933>
Tue Sep 29 1998 22:30:20 30232 m.. -rwxrwxrwx 0
0
29431933
<part2.img-_M1132~1.JPE-dead-29431933>
Tue Sep 29 1998 22:34:12 18006 ..c -rwxrwxrwx 0
0
29431935
<part2.img-_M1136~1.JPE-dead-29431935>
Tue Sep 29 1998 22:34:28 18006 m.. -rwxrwxrwx 0
0
29431935
<part2.img-_M1136~1.JPE-dead-29431935>
Tue Sep 29 1998 22:39:54 2054 ..c -rwxrwxrwx 0
0
29431938
<part2.img-_0S_BO~1.HTM-dead-29431938>
Tue Sep 29 1998 22:39:56 2054 m.. -rwxrwxrwx 0
0
29431938
<part2.img-_0S_BO~1.HTM-dead-29431938>
Tue Sep 29 1998 22:43:34 1252 ..c -rwxrwxrwx 0
0
29431940
<part2.img-_ONTEN~2.HTM-dead-29431940>
Tue Sep 29 1998 22:43:36 11806 ..c -rwxrwxrwx 0
0
29431942
<part2.img-_WP6.GIF-dead-29431942>
1252 m.. -rwxrwxrwx 0
0
29431940 <part2.img_ONTEN~2.HTM-dead-29431940>
Tue Sep 29 1998 22:43:46 6126 ..c -rwxrwxrwx 0
0
29431944
<part2.img-_TORE.GIF-dead-29431944>
Tue Sep 29 1998 22:43:48 6126 m.. -rwxrwxrwx 0
0
29431944
<part2.img-_TORE.GIF-dead-29431944>
Tue Sep 29 1998 22:43:54 11806 m.. -rwxrwxrwx 0
0
29431942
<part2.img-_WP6.GIF-dead-29431942>
Tue Sep 29 1998 22:44:14 28132 ..c -rwxrwxrwx 0
0
10737887
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
<part2.img-_001~1.JPE-dead-10737887>
Tue Sep 29 1998 22:44:28 28132 m.. -rwxrwxrwx 0
0
10737887
<part2.img-_001~1.JPE-dead-10737887>
Tue Sep 29 1998 22:44:44 35425 ..c -rwxrwxrwx 0
0
29431946
<part2.img-_002~1.JPE-dead-29431946>
Tue Sep 29 1998 22:45:26 35425 m.. -rwxrwxrwx 0
0
29431946
<part2.img-_002~1.JPE-dead-29431946>
Sun Oct 04 1998 00:00:00 10332 .a. -rwxrwxrwx 0
0
30191498
<part2.img-_FINAL~1.HTM-dead-30191498>
6751 .a. -rwxrwxrwx 0
0
30191465 <part2.img_RAVEL~2.HTM-dead-30191465>
15153 .a. -rwxrwxrwx 0
0
29431949 <part2.img_AINHE~3.GIF-dead-29431949>
Sun Oct 04 1998 21:41:54 15153 ..c -rwxrwxrwx 0
0
29431949
<part2.img-_AINHE~3.GIF-dead-29431949>
Sun Oct 04 1998 21:41:58 15153 m.. -rwxrwxrwx 0
0
29431949
<part2.img-_AINHE~3.GIF-dead-29431949>
Sun Oct 04 1998 21:42:16
781 ..c -rwxrwxrwx 0
0
10737894
<part2.img-_IRGIN~1.GIF-dead-10737894>
Sun Oct 04 1998 21:42:18
781 m.. -rwxrwxrwx 0
0
10737894
<part2.img-_IRGIN~1.GIF-dead-10737894>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Sun Oct 04 1998 21:42:32 1754 ..c -rwxrwxrwx 0
0
29431948
<part2.img-_RVOLC~1.GIF-dead-29431948>
Sun Oct 04 1998 21:42:34 1754 m.. -rwxrwxrwx 0
0
29431948
<part2.img-_RVOLC~1.GIF-dead-29431948>
Sun Oct 04 1998 21:43:54 1756 ..c -rwxrwxrwx 0
0
29431953
<part2.img-_HO_TCY3.GIF-dead-29431953>
1792 ..c -rwxrwxrwx 0
0
29431951 <part2.img_HO_BANN.GIF-dead-29431951>
Sun Oct 04 1998 21:43:56 1792 m.. -rwxrwxrwx 0
0
29431951
<part2.img-_HO_BANN.GIF-dead-29431951>
1756 m.. -rwxrwxrwx 0
0
29431953 <part2.img_HO_TCY3.GIF-dead-29431953>
Mon Oct 05 1998 15:14:58 10048 m.. -/-rwxrwxrwx 0
0
3345946
c:\/WINDOWS/SYSTEM/TRID_VMX.DLL
Mon Oct 05 1998 15:16:06 18688 m.. -/-rwxrwxrwx 0
0
3345930
c:\/WINDOWS/SYSTEM/COMMBIOS.DLL
Mon Oct 05 1998 15:18:34 22944 m.. -/-rwxrwxrwx 0
0
3345940
c:\/WINDOWS/SYSTEM/TGUI9X5.DLL
Mon Oct 05 1998 15:57:50 479744 m.. -/-rwxrwxrwx 0
0
3345938
c:\/WINDOWS/SYSTEM/TDISPLUS.DLL
Fri Oct 09 1998 09:50:58 1249 m.. -/-rwxrwxrwx 0
0
342614
c:\/WINDOWS/SYSTEM/CHIPMAP7.CFG
Sat Oct 10 1998 00:00:00 3848 .a. -rwxrwxrwx 0
0
20026190
<part2.img-_N_FA9~1.JPE-dead-20026190>
6723 .a. -rwxrwxrwx 0
0
26037990 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
_ACCES~2.HTM-dead-26037990>
5903 .a. -rwxrwxrwx 0
0
16330049 <part2.img_OMEHEAD.GIF-dead-16330049>
5909 .a. -rwxrwxrwx 0
0
10837625 <part2.img_EC1SU~1.HTM-dead-10837625>
872 .a. -rwxrwxrwx 0
0
20025988 <part2.img_NIMALSW.GIF-dead-20025988>
2803 .a. -rwxrwxrwx 0
0
20026204 <part2.img_TRIP~1.HTM-dead-20026204>
5477 .a. -rwxrwxrwx 0
0
26037999 <part2.img_OTH_L~1.GIF-dead-26037999>
6639 .a. -rwxrwxrwx 0
0
26038066 <part2.img_T(3)~2.HTM-dead-26038066>
4547 .a. -rwxrwxrwx 0
0
26037996 <part2.img_RS_GU~1.GIF-dead-26037996>
2787 .a. -rwxrwxrwx 0
0
26038247 <part2.img_HOPPING.GIF-dead-26038247>
5720 .a. -rwxrwxrwx 0
0
26037858 <part2.img_ITLEM~1.GIF-dead-26037858>
2919 .a. -rwxrwxrwx 0
0
26038195 <part2.img_ORBES~1.JPE-dead-26038195>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
28132 .a. -rwxrwxrwx 0
0
10737887 <part2.img_001~1.JPE-dead-10737887>
7243 .a. -rwxrwxrwx 0
0
20026352 <part2.img_ORMS_~1.HTM-dead-20026352>
6089 .a. -rwxrwxrwx 0
0
26037774 <part2.img_OGOAR~1.GIF-dead-26037774>
6808 .a. -rwxrwxrwx 0
0
10837662 <part2.img_ADIO_04.GIF-dead-10837662>
2964 .a. -rwxrwxrwx 0
0
20026151 <part2.img_ACK2~1.JPE-dead-20026151>
2867 .a. -rwxrwxrwx 0
0
20026085 <part2.img_ANDAS~1.HTM-dead-20026085>
5527 .a. -rwxrwxrwx 0
0
26037898 <part2.img_FTSQ.GIF-dead-26037898>
2985 .a. -rwxrwxrwx 0
0
20026229 <part2.img_ACK2.GIF-dead-20026229>
1573 .a. -rwxrwxrwx 0
0
10837622 <part2.img_HTITLE.GIF-dead-10837622>
3009 .a. -rwxrwxrwx 0
0
20026364 <part2.img_N(1).GIF-dead-20026364>
2348 .a. -rwxrwxrwx 0
0
26037931 <part2.img_NEIDA~1.HTM-dead-26037931>
4158 .a. -rwxrwxrwx 0
0
10738044 <part2.img_HOPPERS.GIF-dead-10738044>
3367 .a. -rwxrwxrwx 0
0
26038113 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
_EARCH~8.HTM-dead-26038113>
5035 .a. -rwxrwxrwx 0
0
20026240 <part2.img_EEP_D~1.GIF-dead-20026240>
7215 .a. -rwxrwxrwx 0
0
10837648 <part2.img_CON.GIF-dead-10837648>
2736 .a. -rwxrwxrwx 0
0
26038265 <part2.img_UBSHOP.GIF-dead-26038265>
3392 .a. -rwxrwxrwx 0
0
20026212 <part2.img_N_ST2~1.JPE-dead-20026212>
987 .a. -rwxrwxrwx 0
0
26038166 <part2.img_EARCH~9.HTM-dead-26038166>
2941 .a. -rwxrwxrwx 0
0
26038182 <part2.img_YL650~1.HTM-dead-26038182>
4050 .a. -rwxrwxrwx 0
0
26037860 <part2.img_OUSE0~1.JPE-dead-26037860>
3458 .a. -rwxrwxrwx 0
0
26037888 <part2.img_ANNER~3.GIF-dead-26037888>
6802 .a. -rwxrwxrwx 0
0
10737916 <part2.img_OBECOM.GIF-dead-10737916>
4580 .a. -rwxrwxrwx 0
0
26038168 <part2.img_TCLOGO.GIF-dead-26038168>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
1907 .a. -rwxrwxrwx 0
0
26038250 <part2.img-_OXY5.GIF-dead-26038250>
2857 .a. -rwxrwxrwx 0
0
20026270 <part2.img_NN.GIF-dead-20026270>
4869 .a. -rwxrwxrwx 0
0
20026303 <part2.img_HAMPW~1.GIF-dead-20026303>
2599 .a. -rwxrwxrwx 0
0
20026315 <part2.img_OP_WT~1.JPE-dead-20026315>
3600 .a. -rwxrwxrwx 0
0
20026227 <part2.img_N_TO8~1.JPE-dead-20026227>
3441 .a. -rwxrwxrwx 0
0
20026206 <part2.img_ACK1(~2.JPE-dead-20026206>
8675 .a. -rwxrwxrwx 0
0
26038028 <part2.img-_972H~1.GIF-dead-26038028>
4560 .a. -rwxrwxrwx 0
0
20025973 <part2.img_OUBLE~1.CLA-dead-20025973>
3971 .a. -rwxrwxrwx 0
0
20026172 <part2.img_N_AC2~1.JPE-dead-20026172>
3929 .a. -rwxrwxrwx 0
0
26038097 <part2.img_ACP4N~1.HTM-dead-26038097>
6639 .a. -rwxrwxrwx 0
0
20025995 <part2.img_LSI~1.HTM-dead-20025995>
2910 .a. -rwxrwxrwx 0
0
26038193 <part2.img_G.GIF-dead-26038193>
384 .a. -rwxrwxrwx 0
0
20026091 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5 06E4 A169 4E46
_OT2.GIF-dead-20026091>
8202 .a. -rwxrwxrwx 0
0
26038163 <part2.img_REATE.GIF-dead-26038163>
5109 .a. -rwxrwxrwx 0
0
20026041 <part2.img_M1~1.HTM-dead-20026041>
2743 .a. -rwxrwxrwx 0
0
20026184 <part2.img_N_FA1~3.JPE-dead-20026184>
3750 .a. -rwxrwxrwx 0
0
10837601 <part2.img_HELP~1.HTM-dead-10837601>
6287 .a. -rwxrwxrwx 0
0
20026159 <part2.img_MBAN.GIF-dead-20026159>
10205 .a. -rwxrwxrwx 0
0
26038051 <part2.img_C059802.GIF-dead-26038051>
7440 .a. -rwxrwxrwx 0
0
20026087 <part2.img_TARLUCK.GIF-dead-20026087>
3526 .a. -rwxrwxrwx 0
0
10837656 <part2.img_INCLAIR.GIF-dead-10837656>
5767 .a. -rwxrwxrwx 0
0
26038170 <part2.img_SIDEBAR.GIF-dead-26038170>
7407 .a. -rwxrwxrwx 0
0
10837616 <part2.img-_2500~1.GIF-dead-10837616>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
3948 .a. -rwxrwxrwx 0
0
26037903 <part2.img_ATEGO~2.HTM-dead-26037903>
5202 .a. -rwxrwxrwx 0
0
26038013 <part2.img_EALTH~1.HTM-dead-26038013>
5569 .a. -rwxrwxrwx 0
0
20026163 <part2.img_AMPL3D4.GIF-dead-20026163>
3050 .a. -rwxrwxrwx 0
0
10837575 <part2.img_ELL4.GIF-dead-10837575>
3149 .a. -rwxrwxrwx 0
0
10837658 <part2.img_RANKLIN.GIF-dead-10837658>
5951 .a. -rwxrwxrwx 0
0
26038211 <part2.img_ITE3_~1.JPE-dead-26038211>
1255 .a. -rwxrwxrwx 0
0
20025975 <part2.img_ELLLOGO.GIF-dead-20025975>
6737 .a. -rwxrwxrwx 0
0
26038021 <part2.img_RED2.GIF-dead-26038021>
4310 .a. -rwxrwxrwx 0
0
20026067 <part2.img_AVE3.GIF-dead-20026067>
3082 .a. -rwxrwxrwx 0
0
10837629 <part2.img-_C-22~1.THM-dead-10837629>
4152 .a. -rwxrwxrwx 0
0
26037985 <part2.img_NDEX(~8.HTM-dead-26037985>
2858 .a. -rwxrwxrwx 0
0
20026100 <part2.img_C_CHECK.GIF-dead-20026100>
7670 .a. -rwxrwxrwx 0
0
20026242 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
_ATEGO~1.HTM-dead-20026242>
3904 .a. -rwxrwxrwx 0
0
26038056 <part2.img_AWH2B~1.HTM-dead-26038056>
5674 .a. -rwxrwxrwx 0
0
10837644 <part2.img_OG23S~1.GIF-dead-10837644>
5551 .a. -rwxrwxrwx 0
0
16330022 <part2.img_UOTE8.GIF-dead-16330022>
4491 .a. -rwxrwxrwx 0
0
20026181 <part2.img_N_FA1~2.JPE-dead-20026181>
2615 .a. -rwxrwxrwx 0
0
26037927 <part2.img_EAL_P~1.GIF-dead-26037927>
4803 .a. -rwxrwxrwx 0
0
10837604 <part2.img_ROOM~1.HTM-dead-10837604>
3441 .a. -rwxrwxrwx 0
0
20026155 <part2.img_ACK1~1.JPE-dead-20026155>
6517 .a. -rwxrwxrwx 0
0
20026131 <part2.img_ESCH1~1.JPE-dead-20026131>
7548 .a. -rwxrwxrwx 0
0
26037929 <part2.img_NEIDA~1.JPE-dead-26037929>
1418 .a. -rwxrwxrwx 0
0
10837633 <part2.img-_TW200.THM-dead-10837633>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
8720 .a. -rwxrwxrwx 0
0
20026146 <part2.img_TXV.GIF-dead-20026146>
5200 .a. -rwxrwxrwx 0
0
26038208 <part2.img_ITE3_~1.GIF-dead-26038208>
2829 .a. -rwxrwxrwx 0
0
26037993 <part2.img_RS_AC~1.GIF-dead-26037993>
4434 .a. -rwxrwxrwx 0
0
16329870 <part2.img_RS_LO~1.JPE-dead-16329870>
2910 .a. -rwxrwxrwx 0
0
10837641 <part2.img_BLOGO.GIF-dead-10837641>
2651 .a. -rwxrwxrwx 0
0
26038267 <part2.img_UBPOIN.GIF-dead-26038267>
3201 .a. -rwxrwxrwx 0
0
20026221 <part2.img_N_TO1~1.JPE-dead-20026221>
6046 .a. -rwxrwxrwx 0
0
20026323 <part2.img_OURNB~1.HTM-dead-20026323>
8390 .a. -rwxrwxrwx 0
0
20026129 <part2.img_YBER3.GIF-dead-20026129>
3833 .a. -rwxrwxrwx 0
0
26038077 <part2.img_D3.GIF-dead-26038077>
2665 .a. -rwxrwxrwx 0
0
26038049 <part2.img__FLIG~1.JPE-dead-26038049>
5887 .a. -rwxrwxrwx 0
0
10837639 <part2.img_EARC~13.HTM-dead-10837639>
4052 .a. -rwxrwxrwx 0
0
10837660 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
_OSH.GIF-dead-10837660>
6148 .a. -rwxrwxrwx 0
0
26038064 <part2.img_1A999.GIF-dead-26038064>
4087 .a. -rwxrwxrwx 0
0
26038131 <part2.img_SCAPE~1.GIF-dead-26038131>
5837 .a. -rwxrwxrwx 0
0
20026256 <part2.img_IRCLE~1.JPE-dead-20026256>
5432 .a. -rwxrwxrwx 0
0
10737841 <part2.img_ODAKP~1.GIF-dead-10737841>
4074 .a. -rwxrwxrwx 0
0
20026224 <part2.img_N_TO4~1.JPE-dead-20026224>
3341 .a. -rwxrwxrwx 0
0
20026209 <part2.img_N_ST1~1.JPE-dead-20026209>
8090 .a. -rwxrwxrwx 0
0
26037917 <part2.img_FFLINE.GIF-dead-26037917>
4003 .a. -rwxrwxrwx 0
0
10738141 <part2.img_DULT.GIF-dead-10738141>
4103 .a. -rwxrwxrwx 0
0
20026356 <part2.img-_NOFF.GIF-dead-20026356>
3143 .a. -rwxrwxrwx 0
0
20026178 <part2.img_N_FA1~1.JPE-dead-20026178>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
8293 .a. -rwxrwxrwx 0
0
26038231 <part2.img_ESBO~1.JPE-dead-26038231>
4184 .a. -rwxrwxrwx 0
0
26038200 <part2.img_IN_PR~1.GIF-dead-26038200>
7090 .a. -rwxrwxrwx 0
0
26038108 <part2.img_SIEBU~1.GIF-dead-26038108>
6180 .a. -rwxrwxrwx 0
0
10837599 <part2.img_LACKP~1.JPE-dead-10837599>
3641 .a. -rwxrwxrwx 0
0
20026175 <part2.img_N_AC6~1.JPE-dead-20026175>
934 .a. -rwxrwxrwx 0
0
20025990 <part2.img_OMEW.GIF-dead-20025990>
4286 .a. -rwxrwxrwx 0
0
20026104 <part2.img_RIPEN~1.HTM-dead-20026104>
3899 .a. -rwxrwxrwx 0
0
26038263 <part2.img_OMEBUTT.GIF-dead-26038263>
10793 .a. -rwxrwxrwx 0
0
10737852 <part2.img_2~1.JPE-dead-10737852>
3667 .a. -rwxrwxrwx 0
0
20026166 <part2.img_N_AC1~1.JPE-dead-20026166>
2469 .a. -rwxrwxrwx 0
0
20026370 <part2.img_80316~1.GIF-dead-20026370>
7517 .a. -rwxrwxrwx 0
0
20026065 <part2.img_ONU18~1.JPE-dead-20026065>
2486 .a. -rwxrwxrwx 0
0
20025978 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
_UBMEN~1.CLA-dead-20025978>
1392 .a. -rwxrwxrwx 0
0
26038197 <part2.img_REETING.GIF-dead-26038197>
3339 .a. -rwxrwxrwx 0
0
20026169 <part2.img_N_AC1~2.JPE-dead-20026169>
5077 .a. -rwxrwxrwx 0
0
20026317 <part2.img_ERFNA~1.HTM-dead-20026317>
3292 .a. -rwxrwxrwx 0
0
20026193 <part2.img_N_BW1~1.JPE-dead-20026193>
5635 .a. -rwxrwxrwx 0
0
26037765 <part2.img_CXREA~1.HTM-dead-26037765>
3710 .a. -rwxrwxrwx 0
0
20026196 <part2.img_N_BW1~2.JPE-dead-20026196>
2411 .a. -rwxrwxrwx 0
0
10837627 <part2.img_OGOSMLT.THM-dead-10837627>
927 .a. -rwxrwxrwx 0
0
20025986 <part2.img_ASICSW.GIF-dead-20025986>
3678 .a. -rwxrwxrwx 0
0
20026199 <part2.img_N_BW3~1.JPE-dead-20026199>
2743 .a. -rwxrwxrwx 0
0
26038174 <part2.img_MAPIC~1.JPE-dead-26038174>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
2902 .a. -rwxrwxrwx 0
0
20026202 <part2.img_N_BW7~1.JPE-dead-20026202>
4819 .a. -rwxrwxrwx 0
0
20026082 <part2.img_C1.GIF-dead-20026082>
7473 .a. -rwxrwxrwx 0
0
26038214 <part2.img_ITE3_~2.JPE-dead-26038214>
8029 .a. -rwxrwxrwx 0
0
26037881 <part2.img_MLINK.GIF-dead-26037881>
6516 .a. -rwxrwxrwx 0
0
20026037 <part2.img_1~1.JPE-dead-20026037>
3060 .a. -rwxrwxrwx 0
0
20026187 <part2.img_N_FA5~1.JPE-dead-20026187>
7552 .a. -rwxrwxrwx 0
0
20026161 <part2.img_ALOGO.GIF-dead-20026161>
2584 .a. -rwxrwxrwx 0
0
20026047 <part2.img_N_SM0~2.JPE-dead-20026047>
3504 .a. -rwxrwxrwx 0
0
20026215 <part2.img_N_ST1~2.JPE-dead-20026215>
4422 .a. -rwxrwxrwx 0
0
26037782 <part2.img_AV.GIF-dead-26037782>
3221 .a. -rwxrwxrwx 0
0
10837520 <part2.img_Y_04.GIF-dead-10837520>
5077 .a. -rwxrwxrwx 0
0
20026218 <part2.img_N_ST6~1.JPE-dead-20026218>
2709 .a. -rwxrwxrwx 0
0
10737698 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
_SSEN2.GIF-dead-10737698>
3009 .a. -rwxrwxrwx 0
0
20026358 <part2.img_N.GIF-dead-20026358>
781 .a. -rwxrwxrwx 0
0
10737894 <part2.img_IRGIN~1.GIF-dead-10737894>
4963 .a. -rwxrwxrwx 0
0
26038261 <part2.img_BBOLSCW.GIF-dead-26038261>
3606 .a. -rwxrwxrwx 0
0
10837646 <part2.img_IDWIN~1.GIF-dead-10837646>
Sun Oct 11 1998 00:00:00 7389 .a. -rwxrwxrwx 0
0
16120544
<part2.img-_UG24_~2.GIF-dead-16120544>
7206 .a. -rwxrwxrwx 0
0
16416309 <part2.img_ETTIN~1.HTM-dead-16416309>
1570 .a. -rwxrwxrwx 0
0
16120776 <part2.img_ITE_P~1.GIF-dead-16120776>
2579 .a. -rwxrwxrwx 0
0
29431866 <part2.img_MAGE98.GIF-dead-29431866>
10562 .a. -rwxrwxrwx 0
0
29431915 <part2.img_30~2.HTM-dead-29431915>
2203 .a. -rwxrwxrwx 0
0
16120745 <part2.img_RDER_~2.GIF-dead-16120745>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
2474 .a. -rwxrwxrwx 0
0
16120687 <part2.img-_ETPR~2.HTM-dead-16120687>
738 .a. -rwxrwxrwx 0
0
16120470 <part2.img_EFTMORE.GIF-dead-16120470>
844 .a. -rwxrwxrwx 0
0
16120442 <part2.img_UTHOR~1.GIF-dead-16120442>
4438 .a. -rwxrwxrwx 0
0
16120651 <part2.img-_TD46~1.GIF-dead-16120651>
5078 .a. -rwxrwxrwx 0
0
29431909 <part2.img_LOODBAR.GIF-dead-29431909>
538 .a. -rwxrwxrwx 0
0
16120513 <part2.img_RIEND~7.GIF-dead-16120513>
950 .a. -rwxrwxrwx 0
0
16416618 <part2.img_TRIPE1.GIF-dead-16416618>
103 .a. -rwxrwxrwx 0
0
16120584 <part2.img_RIEND~9.GIF-dead-16120584>
4990 .a. -rwxrwxrwx 0
0
16120660 <part2.img-_TD56~1.GIF-dead-16120660>
1646 .a. -rwxrwxrwx 0
0
29431882 <part2.img_MAIN(1).GIF-dead-29431882>
1062 .a. -rwxrwxrwx 0
0
16120736 <part2.img-_APOC~2.GIF-dead-16120736>
1881 .a. -rwxrwxrwx 0
0
16120454 <part2.img_TRUCT~1.GIF-dead-16120454>
2414 .a. -rwxrwxrwx 0
0
29431840 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
_MAGE67.GIF-dead-29431840>
10038 .a. -rwxrwxrwx 0
0
16120496 <part2.img_00000~1.HTM-dead-16120496>
35 .a. -rwxrwxrwx 0
0
16120562 <part2.img_RIEND~8.GIF-dead-16120562>
5125 .a. -rwxrwxrwx 0
0
16416485 <part2.img_EBRES~1.HTM-dead-16416485>
2799 .a. -rwxrwxrwx 0
0
16120518 <part2.img_ETIMAGE.GIF-dead-16120518>
369 .a. -rwxrwxrwx 0
0
16120502 <part2.img_RIEND~3.GIF-dead-16120502>
6095 .a. -rwxrwxrwx 0
0
16120763 <part2.img_LAYER~1.JPE-dead-16120763>
8215 .a. -rwxrwxrwx 0
0
16120817 <part2.img-_PHDO~2.HTM-dead-16120817>
6916 .a. -rwxrwxrwx 0
0
16120617 <part2.img_RICEP~1.HTM-dead-16120617>
3775 .a. -rwxrwxrwx 0
0
16120569 <part2.img-_AFLO~1.GIF-dead-16120569>
3038 .a. -rwxrwxrwx 0
0
29431844 <part2.img_MAGE36.GIF-dead-29431844>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
3392 .a. -rwxrwxrwx 0
0
16120426 <part2.img_11_1.GIF-dead-16120426>
30232 .a. -rwxrwxrwx 0
0
29431933 <part2.img_M1132~1.JPE-dead-29431933>
11360 .a. -rwxrwxrwx 0
0
29431926 <part2.img_EXDRA~1.JPE-dead-29431926>
1127 .a. -rwxrwxrwx 0
0
16120493 <part2.img_RIEND~1.GIF-dead-16120493>
2452 .a. -rwxrwxrwx 0
0
29431838 <part2.img_MAGE63.GIF-dead-29431838>
3931 .a. -rwxrwxrwx 0
0
29431834 <part2.img-_1.GIFdead-29431834>
890 .a. -rwxrwxrwx 0
0
16120451 <part2.img_ATURE~2.GIF-dead-16120451>
414 .a. -rwxrwxrwx 0
0
16120597 <part2.img_UTTON~2.GIF-dead-16120597>
2706 .a. -rwxrwxrwx 0
0
29431870 <part2.img_MAGE108.GIF-dead-29431870>
1235 .a. -rwxrwxrwx 0
0
16120760 <part2.img_LOOMB~1.GIF-dead-16120760>
8268 .a. -rwxrwxrwx 0
0
16416610 <part2.img_ACTSHTS.GIF-dead-16416610>
917 .a. -rwxrwxrwx 0
0
16416422 <part2.img_OTELO~1.HTM-dead-16416422>
17814 .a. -rwxrwxrwx 0
0
16120423 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
_ATURE~1.HTM-dead-16120423>
174 .a. -rwxrwxrwx 0
0
29431832 <part2.img_OUNTE~1.GIF-dead-29431832>
2827 .a. -rwxrwxrwx 0
0
16120553 <part2.img_UBMEN~1.CLA-dead-16120553>
2417 .a. -rwxrwxrwx 0
0
16120410 <part2.img_07_1.GIF-dead-16120410>
4193 .a. -rwxrwxrwx 0
0
16120625 <part2.img_TD902~1.GIF-dead-16120625>
2166 .a. -rwxrwxrwx 0
0
29431860 <part2.img_MAGE85.GIF-dead-29431860>
309 .a. -rwxrwxrwx 0
0
16120733 <part2.img_UTTON~7.GIF-dead-16120733>
4577 .a. -rwxrwxrwx 0
0
16120467 <part2.img_401T~1.JPE-dead-16120467>
531 .a. -rwxrwxrwx 0
0
16120785 <part2.img_AVRIG~2.GIF-dead-16120785>
1252 .a. -rwxrwxrwx 0
0
29431940 <part2.img_ONTEN~2.HTM-dead-29431940>
1646 .a. -rwxrwxrwx 0
0
29431872 <part2.img_MAIN.GIF-dead-29431872>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
2055 .a. -rwxrwxrwx 0
0
29431888 <part2.img_PPLY.GIF-dead-29431888>
44 .a. -rwxrwxrwx 0
0
16120605 <part2.img-_OXWH~1.GIF-dead-16120605>
35 .a. -rwxrwxrwx 0
0
16120634 <part2.img__BOTT~1.GIF-dead-16120634>
1019 .a. -rwxrwxrwx 0
0
16120565 <part2.img_UG24_~3.GIF-dead-16120565>
8936 .a. -rwxrwxrwx 0
0
16120704 <part2.img-_ACAT~2.HTM-dead-16120704>
343 .a. -rwxrwxrwx 0
0
16120413 <part2.img_ATURE~1.GIF-dead-16120413>
1062 .a. -rwxrwxrwx 0
0
16120603 <part2.img-_APOC~1.GIF-dead-16120603>
1762 .a. -rwxrwxrwx 0
0
29431878 <part2.img_NEWS.GIF-dead-29431878>
4320 .a. -rwxrwxrwx 0
0
16120672 <part2.img_TD104~1.GIF-dead-16120672>
978 .a. -rwxrwxrwx 0
0
16120474 <part2.img_OTFOU~1.HTM-dead-16120474>
1792 .a. -rwxrwxrwx 0
0
29431951 <part2.img_HO_BANN.GIF-dead-29431951>
89 .a. -rwxrwxrwx 0
0
16120557 <part2.img_ACK2.GIF-dead-16120557>
4299 .a. -rwxrwxrwx 0
0
29431905 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
_ETISH~1.HTM-dead-29431905>
43 .a. -rwxrwxrwx 0
0
16120814 <part2.img_LEAR.GIF-dead-16120814>
2757 .a. -rwxrwxrwx 0
0
29431850 <part2.img_MAGE76.GIF-dead-29431850>
14362 .a. -rwxrwxrwx 0
0
29431928 <part2.img_ODBUT.GIF-dead-29431928>
1193 .a. -rwxrwxrwx 0
0
16120794 <part2.img_AVRIG~5.GIF-dead-16120794>
492 .a. -rwxrwxrwx 0
0
16120638 <part2.img_ULLETA.GIF-dead-16120638>
5525 .a. -rwxrwxrwx 0
0
16120472 <part2.img_751T~1.JPE-dead-16120472>
2203 .a. -rwxrwxrwx 0
0
16120619 <part2.img_RDER_~1.GIF-dead-16120619>
2310 .a. -rwxrwxrwx 0
0
29431858 <part2.img_MAGE58.GIF-dead-29431858>
1531 .a. -rwxrwxrwx 0
0
16120779 <part2.img_0DOWN~1.GIF-dead-16120779>
166 .a. -rwxrwxrwx 0
0
16120428 <part2.img_TOMR.GIF-dead-16120428>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
1756 .a. -rwxrwxrwx 0
0
29431953 <part2.img_HO_TCY3.GIF-dead-29431953>
711 .a. -rwxrwxrwx 0
0
16120804 <part2.img_PECTR~1.GIF-dead-16120804>
89 .a. -rwxrwxrwx 0
0
16120706 <part2.img_ACK2(1).GIF-dead-16120706>
1564 .a. -rwxrwxrwx 0
0
29431901 <part2.img_EW.GIF-dead-29431901>
3309 .a. -rwxrwxrwx 0
0
16120675 <part2.img-_TD57~1.GIF-dead-16120675>
116 .a. -rwxrwxrwx 0
0
29431814 <part2.img_ALFEN~1.GIF-dead-29431814>
2000 .a. -rwxrwxrwx 0
0
29431854 <part2.img_MAGE49.GIF-dead-29431854>
8936 .a. -rwxrwxrwx 0
0
16120594 <part2.img-_ACAT~1.HTM-dead-16120594>
309 .a. -rwxrwxrwx 0
0
16120575 <part2.img_UTTON~4.GIF-dead-16120575>
1417 .a. -rwxrwxrwx 0
0
29431892 <part2.img_OMEN.GIF-dead-29431892>
9832 .a. -rwxrwxrwx 0
0
16416298 <part2.img_ATCH_05.GIF-dead-16416298>
5583 .a. -rwxrwxrwx 0
0
16416574 <part2.img_ETSCAPE.GIF-dead-16416574>
518 .a. -rwxrwxrwx 0
0
16120788 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5 06E4 A169 4E46
_AVRIG~3.GIF-dead-16120788>
2719 .a. -rwxrwxrwx 0
0
29431846 <part2.img_MAGE72.GIF-dead-29431846>
1539 .a. -rwxrwxrwx 0
0
29431899 <part2.img-_ONSE~1.GIF-dead-29431899>
93 .a. -rwxrwxrwx 0
0
16416650 <part2.img_ROMOTOP.GIF-dead-16416650>
2459 .a. -rwxrwxrwx 0
0
16120695 <part2.img-_ETPR~3.HTM-dead-16120695>
8426 .a. -rwxrwxrwx 0
0
16120809 <part2.img_OWNLO~1.HTM-dead-16120809>
4063 .a. -rwxrwxrwx 0
0
16120437 <part2.img_ERVE(~7.HTM-dead-16120437>
994 .a. -rwxrwxrwx 0
0
16120631 <part2.img_APTIO~1.GIF-dead-16120631>
4402 .a. -rwxrwxrwx 0
0
16120684 <part2.img-_TD60~1.GIF-dead-16120684>
7056 .a. -rwxrwxrwx 0
0
16120678 <part2.img-_TD59~1.GIF-dead-16120678>
44 .a. -rwxrwxrwx 0
0
16120739 <part2.img-_OXWH~2.GIF-dead-16120739>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
9640 .a. -rwxrwxrwx 0
0
29431817 <part2.img_AINHE~2.GIF-dead-29431817>
5419 .a. -rwxrwxrwx 0
0
16120724 <part2.img-_TD81~2.GIF-dead-16120724>
1525 .a. -rwxrwxrwx 0
0
29431894 <part2.img_4M.GIF-dead-29431894>
1070 .a. -rwxrwxrwx 0
0
16416336 <part2.img_67.GIF-dead-16416336>
28147 .a. -rwxrwxrwx 0
0
29431911 <part2.img_ASTY.GIF-dead-29431911>
14299 .a. -rwxrwxrwx 0
0
29431931 <part2.img_M41.GIF-dead-29431931>
5419 .a. -rwxrwxrwx 0
0
16120614 <part2.img-_TD81~1.GIF-dead-16120614>
750 .a. -rwxrwxrwx 0
0
29431829 <part2.img_C089801.GIF-dead-29431829>
7886 .a. -rwxrwxrwx 0
0
16120415 <part2.img_MAGE3.GIF-dead-16120415>
4799 .a. -rwxrwxrwx 0
0
16120608 <part2.img-_TD58~1.GIF-dead-16120608>
7119 .a. -rwxrwxrwx 0
0
16120727 <part2.img_NNIVE~1.HTM-dead-16120727>
3775 .a. -rwxrwxrwx 0
0
16120715 <part2.img-_AFLO~2.GIF-dead-16120715>
216 .a. -rwxrwxrwx 0
0
16120499 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5 06E4 A169 4E46
_RIEND~2.GIF-dead-16120499>
2415 .a. -rwxrwxrwx 0
0
16120662 <part2.img-_ETPR~1.HTM-dead-16120662>
571 .a. -rwxrwxrwx 0
0
16120748 <part2.img_AVTOP~1.GIF-dead-16120748>
2133 .a. -rwxrwxrwx 0
0
29431880 <part2.img_ENEWA~2.HTM-dead-29431880>
3034 .a. -rwxrwxrwx 0
0
29431868 <part2.img_MAGE104.GIF-dead-29431868>
2054 .a. -rwxrwxrwx 0
0
29431938 <part2.img_0S_BO~1.HTM-dead-29431938>
18983 .a. -rwxrwxrwx 0
0
29431913 <part2.img_M0443~1.JPE-dead-29431913>
414 .a. -rwxrwxrwx 0
0
16120709 <part2.img_UTTON~5.GIF-dead-16120709>
11806 .a. -rwxrwxrwx 0
0
29431942 <part2.img_WP6.GIF-dead-29431942>
1450 .a. -rwxrwxrwx 0
0
16120555 <part2.img_QUA~1.MEN-dead-16120555>
7476 .a. -rwxrwxrwx 0
0
16120480 <part2.img_HOPGU~1.HTM-dead-16120480>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
1747 .a. -rwxrwxrwx 0
0
16120799 <part2.img_RESETS.GIF-dead-16120799>
700 .a. -rwxrwxrwx 0
0
16120773 <part2.img_HT_TOP.GIF-dead-16120773>
104 .a. -rwxrwxrwx 0
0
16120771 <part2.img_HT_END.GIF-dead-16120771>
324 .a. -rwxrwxrwx 0
0
16120591 <part2.img_RIEN~11.GIF-dead-16120591>
994 .a. -rwxrwxrwx 0
0
16120587 <part2.img_RIEN~10.GIF-dead-16120587>
4727 .a. -rwxrwxrwx 0
0
16120806 <part2.img_2SYSR~1.HTM-dead-16120806>
202 .a. -rwxrwxrwx 0
0
16120508 <part2.img_RIEND~6.GIF-dead-16120508>
2478 .a. -rwxrwxrwx 0
0
16120371 <part2.img_ERVE(~3.HTM-dead-16120371>
3464 .a. -rwxrwxrwx 0
0
16120681 <part2.img-_TD62~1.GIF-dead-16120681>
348 .a. -rwxrwxrwx 0
0
16120712 <part2.img_UTTON~6.GIF-dead-16120712>
222 .a. -rwxrwxrwx 0
0
16120833 <part2.img_ULLEN~1.GIF-dead-16120833>
960 .a. -rwxrwxrwx 0
0
16120581 <part2.img_OSTFR~1.GIF-dead-16120581>
1534 .a. -rwxrwxrwx 0
0
16120458 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
_00SPOT.GIF-dead-16120458>
3553 .a. -rwxrwxrwx 0
0
16120439 <part2.img_NEWS.GIF-dead-16120439>
6136 .a. -rwxrwxrwx 0
0
29431924 <part2.img_30P~3.HTM-dead-29431924>
18006 .a. -rwxrwxrwx 0
0
29431935 <part2.img_M1136~1.JPE-dead-29431935>
2369 .a. -rwxrwxrwx 0
0
29431848 <part2.img_MAGE41.GIF-dead-29431848>
2224 .a. -rwxrwxrwx 0
0
29431856 <part2.img_MAGE81.GIF-dead-29431856>
74 .a. -rwxrwxrwx 0
0
16120766 <part2.img_UCKET~1.GIF-dead-16120766>
3413 .a. -rwxrwxrwx 0
0
29431918 <part2.img_DULTC~1.JPE-dead-29431918>
458 .a. -rwxrwxrwx 0
0
16120769 <part2.img_ERVER~1.GIF-dead-16120769>
1975 .a. -rwxrwxrwx 0
0
29431864 <part2.img_MAGE90.GIF-dead-29431864>
3047 .a. -rwxrwxrwx 0
0
16120654 <part2.img-_TD54~1.GIF-dead-16120654>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
1187 .a. -rwxrwxrwx 0
0
16120757 <part2.img_REEPL~1.GIF-dead-16120757>
3285 .a. -rwxrwxrwx 0
0
16120669 <part2.img-_ETIN~1.HTM-dead-16120669>
262 .a. -rwxrwxrwx 0
0
16120522 <part2.img_RIEND~5.GIF-dead-16120522>
800 .a. -rwxrwxrwx 0
0
16120445 <part2.img_BOUT_~2.GIF-dead-16120445>
5335 .a. -rwxrwxrwx 0
0
16120644 <part2.img_FO_DO~1.GIF-dead-16120644>
6126 .a. -rwxrwxrwx 0
0
29431944 <part2.img_TORE.GIF-dead-29431944>
2608 .a. -rwxrwxrwx 0
0
29431836 <part2.img_BACKGRD.GIF-dead-29431836>
722 .a. -rwxrwxrwx 0
0
16120819 <part2.img_OXINFO.GIF-dead-16120819>
7008 .a. -rwxrwxrwx 0
0
16120641 <part2.img_NLINE~1.HTM-dead-16120641>
551 .a. -rwxrwxrwx 0
0
16120782 <part2.img_AVRIG~1.GIF-dead-16120782>
4193 .a. -rwxrwxrwx 0
0
16120742 <part2.img_TD902~2.GIF-dead-16120742>
2252 .a. -rwxrwxrwx 0
0
29431862 <part2.img_MAGE89.GIF-dead-29431862>
4141 .a. -rwxrwxrwx 0
0
29431822 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
_ELCOM~2.HTM-dead-29431822>
92 .a. -rwxrwxrwx 0
0
29431811 <part2.img_RROW.GIF-dead-29431811>
238 .a. -rwxrwxrwx 0
0
16120505 <part2.img_RIEND~4.GIF-dead-16120505>
1511 .a. -rwxrwxrwx 0
0
29431896 <part2.img_4G.GIF-dead-29431896>
3086 .a. -rwxrwxrwx 0
0
16120421 <part2.img_06_2.GIF-dead-16120421>
4799 .a. -rwxrwxrwx 0
0
16120718 <part2.img-_TD58~2.GIF-dead-16120718>
2906 .a. -rwxrwxrwx 0
0
16120541 <part2.img_RIVIA11.GIF-dead-16120541>
6412 .a. -rwxrwxrwx 0
0
16120448 <part2.img_EDICI~1.GIF-dead-16120448>
380 .a. -rwxrwxrwx 0
0
16120628 <part2.img_SUNLO~1.GIF-dead-16120628>
35425 .a. -rwxrwxrwx 0
0
29431946 <part2.img_002~1.JPE-dead-29431946>
7866 .a. -rwxrwxrwx 0
0
16120527 <part2.img_ANNER~1.GIF-dead-16120527>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
348 .a. -rwxrwxrwx 0
0
16120600 <part2.img_UTTON~3.GIF-dead-16120600>
221 .a. -rwxrwxrwx 0
0
16120827 <part2.img_ULLTO~1.GIF-dead-16120827>
2629 .a. -rwxrwxrwx 0
0
29431852 <part2.img_MAGE100.GIF-dead-29431852>
4636 .a. -rwxrwxrwx 0
0
16120611 <part2.img-_TD49~1.GIF-dead-16120611>
2084 .a. -rwxrwxrwx 0
0
29431819 <part2.img_RANTS~1.JPE-dead-29431819>
1827 .a. -rwxrwxrwx 0
0
16120701 <part2.img_ER~1.HTM-dead-16120701>
2007 .a. -rwxrwxrwx 0
0
29431890 <part2.img_MAILGIF.GIF-dead-29431890>
20545 .a. -rwxrwxrwx 0
0
16120477 <part2.img_RODUC~3.HTM-dead-16120477>
2320 .a. -rwxrwxrwx 0
0
16120698 <part2.img__CATA~1.GIF-dead-16120698>
4438 .a. -rwxrwxrwx 0
0
16120730 <part2.img-_TD46~2.GIF-dead-16120730>
1107 .a. -rwxrwxrwx 0
0
29431824 <part2.img_HWWW~1.HTM-dead-29431824>
826 .a. -rwxrwxrwx 0
0
16120463 <part2.img_PACE(1).GIF-dead-16120463>
2490 .a. -rwxrwxrwx 0
0
16120811 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
_UTEC.GIF-dead-16120811>
1694 .a. -rwxrwxrwx 0
0
29431886 <part2.img_ANNER~2.GIF-dead-29431886>
2401 .a. -rwxrwxrwx 0
0
29431842 <part2.img_MAGE32.GIF-dead-29431842>
4152 .a. -rwxrwxrwx 0
0
16120408 <part2.img_MAGE1~2.GIF-dead-16120408>
1762 .a. -rwxrwxrwx 0
0
29431884 <part2.img_NEWS(1).GIF-dead-29431884>
2071 .a. -rwxrwxrwx 0
0
29431922 <part2.img_GECOU~1.GIF-dead-29431922>
390 .a. -rwxrwxrwx 0
0
16120791 <part2.img_AVRIG~4.GIF-dead-16120791>
435 .a. -rwxrwxrwx 0
0
16120754 <part2.img_AVTOP~2.GIF-dead-16120754>
1754 .a. -rwxrwxrwx 0
0
29431948 <part2.img_RVOLC~1.GIF-dead-29431948>
122 .a. -rwxrwxrwx 0
0
16120830 <part2.img_ALFTO~1.GIF-dead-16120830>
13556 .a. -rwxrwxrwx 0
0
29431903 <part2.img_INKSA~1.GIF-dead-29431903>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
4071 .a. -rwxrwxrwx 0
0
29431920 <part2.img_GECHECK.GIF-dead-29431920>
890 .a. -rwxrwxrwx 0
0
16416436 <part2.img_RAMEB~1.HTM-dead-16416436>
3168 .a. -rwxrwxrwx 0
0
16120551 <part2.img_OGO(1).GIF-dead-16120551>
4636 .a. -rwxrwxrwx 0
0
16120721 <part2.img-_TD49~2.GIF-dead-16120721>
821 .a. -rwxrwxrwx 0
0
29431907 <part2.img_HECK.GIF-dead-29431907>
Tue Nov 03 1998 03:10:04 112688 m.c -/-rwxrwxrwx 0
0
3892275
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SHW32.DLL
Thu Nov 05 1998 10:23:34 38136 m.. -/-rwxrwxrwx 0
0
3345950
c:\/WINDOWS/SYSTEM/TRIDENT.VXD
Tue Nov 10 1998 13:52:34 126364 m.c -/-rwxrwxrwx 0
0
765962
c:\/WINDOWS/FONTS/COMIC.TTF
Tue Nov 10 1998 13:52:38 111476 m.c -/-rwxrwxrwx 0
0
765993
c:\/WINDOWS/FONTS/COMICBD.TTF
Tue Nov 10 1998 13:59:58 142964 m.c -/-rwxrwxrwx 0
0
766003
c:\/WINDOWS/FONTS/GEORGIA.TTF
Tue Nov 10 1998 14:00:02 156668 m.c -/-rwxrwxrwx 0
0
766005
c:\/WINDOWS/FONTS/GEORGIAI.TTF
139584 m.c -/-rwxrwxrwx 0
0
766004
c:\/WINDOWS/FONTS/GEORGIAB.TTF
158796 m.c -/-rwxrwxrwx 0
0
766006
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/WINDOWS/FONTS/GEORGIAZ.TTF
Thu Nov 12 1998 15:39:08 139128 m.c -/-rwxrwxrwx 0
0
766000
c:\/WINDOWS/FONTS/ARIALNB.TTF
Thu Nov 12 1998 15:39:12 138568 m.c -/-rwxrwxrwx 0
0
766001
c:\/WINDOWS/FONTS/ARIALNBI.TTF
Thu Nov 12 1998 15:39:22 141408 m.c -/-rwxrwxrwx 0
0
766002
c:\/WINDOWS/FONTS/ARIALNI.TTF
Thu Nov 12 1998 15:39:30 134200 m.c -/-rwxrwxrwx 0
0
765999
c:\/WINDOWS/FONTS/ARIALN.TTF
Fri Dec 04 1998 23:00:00 2852 .a. -rwxrwxrwx 0
0
29723244
<part2.img-_80316~1.GIF-dead-29723244>
3991 .a. -rwxrwxrwx 0
0
29723383 <part2.img_HATSN~1.HTM-dead-29723383>
3415 .a. -rwxrwxrwx 0
0
29723648 <part2.img_OOTER.GIF-dead-29723648>
3961 .a. -rwxrwxrwx 0
0
29723542 <part2.img_TRV.GIF-dead-29723542>
4162 .a. -rwxrwxrwx 0
0
29723625 <part2.img_RONTP~1.HTM-dead-29723625>
3738 .a. -rwxrwxrwx 0
0
29723644 <part2.img_IN_LI~1.GIF-dead-29723644>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
6791 .a. -rwxrwxrwx 0
0
29723219 <part2.img_AXES(~2.HTM-dead-29723219>
3654 .a. -rwxrwxrwx 0
0
29723646 <part2.img_IN_KI~1.GIF-dead-29723646>
5375 .a. -rwxrwxrwx 0
0
29723498 <part2.img_IRFAR~1.HTM-dead-29723498>
3018 .a. -rwxrwxrwx 0
0
29723650 <part2.img_IBRAR~1.HTM-dead-29723650>
6057 .a. -rwxrwxrwx 0
0
19037628 <part2.img_CAA~1.HTM-dead-19037628>
3291 .a. -rwxrwxrwx 0
0
29723459 <part2.img_OLLUT~1.GIF-dead-29723459>
4012 .a. -rwxrwxrwx 0
0
29723387 <part2.img_OWTOR~1.HTM-dead-29723387>
5679 .a. -rwxrwxrwx 0
0
29723610 <part2.img_TA~1.HTM-dead-29723610>
6931 .a. -rwxrwxrwx 0
0
29723476 <part2.img_LIFO~1.HTM-dead-29723476>
Sun Dec 06 1998 23:00:00 3685 .a. -rwxrwxrwx 0
0
29723199
<part2.img-_URKER~2.HTM-dead-29723199>
Mon Dec 14 1998 08:35:42 70144 m.. -/-rwxrwxrwx 0
0
342991
c:\/WINDOWS/SYSTEM/EL76XND3.SYS
70144 m.. -/-rwxrwxrwx 0
0
342992
c:\/WINDOWS/SYSTEM/EL76XND4.SYS
15712 m.. -/-rwxrwxrwx 0
0
342988
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/WINDOWS/SYSTEM/EL76XNDI.DLL
131 m.. -/-rwxrwxrwx 0
0
342874
c:\/WINDOWS/SYSTEM/3VARADDR.TXT
196608 m.. -/-rwxrwxrwx 0
0
342985
c:\/WINDOWS/SYSTEM/3C76XCFG.DLL
165376 m.. -/-rwxrwxrwx 0
0
342984
c:\/WINDOWS/SYSTEM/UN3C76X.EXE
350208 m.. -/-rwxrwxrwx 0
0
342870
c:\/WINDOWS/SYSTEM/3NICDIAG.EXE
15360 m.. -/-rwxrwxrwx 0
0
342987
c:\/WINDOWS/SYSTEM/3CTHNK32.DLL
100063 m.. -/-rwxrwxrwx 0
0
342871
c:\/WINDOWS/SYSTEM/3NICDIAG.HLP
23040 m.. -/-rwxrwxrwx 0
0
342875
c:\/WINDOWS/SYSTEM/COMSMD.EXE
91136 m.. -/-rwxrwxrwx 0
0
342989
c:\/WINDOWS/SYSTEM/HWACCESS.DLL
4295 m.. -/-rwxrwxrwx 0
0
328449
c:\/WINDOWS/INF/W95EL76X.INF
26500 m.. -/-rwxrwxrwx 0
0
342986
c:\/WINDOWS/SYSTEM/3CTHNK16.DLL
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
6682 m.. -/-rwxrwxrwx 0
0
342990
c:\/WINDOWS/SYSTEM/PCOMDRV.VXD
Fri Jan 08 1999 08:14:30
386 m.. -/--wx-wx-wx 0
0
328454
c:\/WINDOWS/INF/msddraw.inf (MSDDRAW.INF)
Fri Jan 08 1999 18:10:00 46352 m.. -rwxrwxrwx 0
0
3345992
<part2.img-_MUSIC.DLL-dead-3345992>
51472 m.. -/-rwxrwxrwx 0
0
3346071
c:\/WINDOWS/SYSTEM/dx6E2C2.TMP (DMSYNTH.DLL)
22800 m.. -/-rwxrwxrwx 0
0
3345990
c:\/WINDOWS/SYSTEM/dx6E2A6.TMP (_MLOADER.DLL) (deleted)
3440660 m.. -/-rwxrwxrwx 0
0
3346002
c:\/WINDOWS/SYSTEM/dx6E2D0.TMP (_M.DLS) (deleted)
46352 m.. -/-rwxrwxrwx 0
0
3345992
c:\/WINDOWS/SYSTEM/dx6E2B1.TMP (_MUSIC.DLL) (deleted)
87312 m.. -/-rwxrwxrwx 0
0
3346027
c:\/WINDOWS/SYSTEM/dx6E203.TMP (D3DPMESH.DLL)
27920 m.. -/-rwxrwxrwx 0
0
3346055
c:\/WINDOWS/SYSTEM/dx6E2A1.TMP (DMBAND.DLL)
51472 m.. -rwxrwxrwx 0
0
3346000 <part2.img_MSYNTH.DLL-dead-3346000>
135680 m.. -/-rwxrwxrwx 0
0
3396104
c:\/PROGRA~1/DIRECTX/SETUP/dx6E350.TMP (_SETUP.DLL) (deleted)
27920 m.. -rwxrwxrwx 0
0
3345984 <part2.img_MBAND.DLL-dead-3345984>
48912 m.. -rwxrwxrwx 0
0
3345986 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
_MCOMPOS.DLL-dead-3345986>
64512 m.. -/-rwxrwxrwx 0
0
3396118
c:\/PROGRA~1/DIRECTX/SETUP/dx6E346.TMP (DSETUP16.DLL)
3440660 m.. -rwxrwxrwx 0
0
3346002 <part2.img_M.DLS-dead-3346002>
11328 m.. -rwxrwxrwx 0
0
3345994 <part2.img_MUSIC16.DLL-dead-3345994>
96768 m.. -/-rwxrwxrwx 0
0
3396102
c:\/PROGRA~1/DIRECTX/SETUP/dx6E342.TMP (_XSETUP.EXE) (deleted)
27920 m.. -/-rwxrwxrwx 0
0
3345984
c:\/WINDOWS/SYSTEM/dx6E295.TMP (_MBAND.DLL) (deleted)
511 m.. -/-rwxrwxrwx 0
0
368257
c:\/WINDOWS/HELP/dx6E351.TMP (DXDIAG.CNT)
38672 m.. -/-rwxrwxrwx 0
0
3345960
c:\/WINDOWS/SYSTEM/DDHELP.EXE
96768 m.. -/-rwxrwxrwx 0
0
3396112
c:\/PROGRA~1/DIRECTX/SETUP/dx6E333.TMP (DXSETUP.EXE)
30389 m.. -/-rwxrwxrwx 0
0
3346019
c:\/WINDOWS/SYSTEM/dx6E1E4.TMP (DDRAW.VXD)
48912 m.. -/-rwxrwxrwx 0
0
3346057
c:\/WINDOWS/SYSTEM/dx6E2A2.TMP (DMCOMPOS.DLL)
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
22800 m.. -/-rwxrwxrwx 0
0
3346061
c:\/WINDOWS/SYSTEM/dx6E2B0.TMP (DMLOADER.DLL)
16144 m.. -/-rwxrwxrwx 0
0
3346067
c:\/WINDOWS/SYSTEM/dx6E2B5.TMP (DMUSIC32.DLL)
135680 m.. -rwxrwxrwx 0
0
3396104 <part2.img_SETUP.DLL-dead-3396104>
57344 m.. -/-rwxrwxrwx 0
0
3396116
c:\/PROGRA~1/DIRECTX/SETUP/dx6E344.TMP (DSETUP32.DLL)
28000 m.. -/-rwxrwxrwx 0
0
3346015
c:\/WINDOWS/SYSTEM/dx6E1D4.TMP (DDRAW16.DLL)
135680 m.. -/-rwxrwxrwx 0
0
3396114
c:\/PROGRA~1/DIRECTX/SETUP/dx6E340.TMP (DSETUP.DLL)
11328 m.. -/-rwxrwxrwx 0
0
3345994
c:\/WINDOWS/SYSTEM/dx6E2B3.TMP (_MUSIC16.DLL) (deleted)
79120 m.. -rwxrwxrwx 0
0
3345988 <part2.img_MIME.DLL-dead-3345988>
82192 m.. -/-rwxrwxrwx 0
0
3345998
c:\/WINDOWS/SYSTEM/dx6E2C1.TMP (_MSTYLE.DLL) (deleted)
16144 m.. -/-rwxrwxrwx 0
0
3345996
c:\/WINDOWS/SYSTEM/dx6E2B5.TMP (_MUSIC32.DLL) (deleted)
57344 m.. -rwxrwxrwx 0
0
3396106 <part2.img_SETUP32.DLL-dead-3396106>
2384 m.. -/-rwxrwxrwx 0
0
3346021
c:\/WINDOWS/SYSTEM/dx6E1F0.TMP (DXAPI.SYS)
64512 m.. -rwxrwxrwx 0
0
3396108 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
_SETUP16.DLL-dead-3396108>
82192 m.. -rwxrwxrwx 0
0
3345998 <part2.img_MSTYLE.DLL-dead-3345998>
46352 m.. -/-rwxrwxrwx 0
0
3346063
c:\/WINDOWS/SYSTEM/dx6E2B1.TMP (DMUSIC.DLL)
24848 m.. -/-rwxrwxrwx 0
0
3346023
c:\/WINDOWS/SYSTEM/dx6E1F1.TMP (DDRAWEX.DLL)
576 m.. -/-rwxrwxrwx 0
0
3346004
c:\/WINDOWS/SYSTEM/dx6E333.TMP (_MREADME.TXT) (deleted)
310544 m.. -/-rwxrwxrwx 0
0
3346013
c:\/WINDOWS/SYSTEM/dx6E1C5.TMP (DDRAW.DLL)
610064 m.. -/-rwxrwxrwx 0
0
3346031
c:\/WINDOWS/SYSTEM/dx6E213.TMP (D3DIM.DLL)
82192 m.. -/-rwxrwxrwx 0
0
3346069
c:\/WINDOWS/SYSTEM/dx6E2C0.TMP (DMSTYLE.DLL)
64512 m.. -/-rwxrwxrwx 0
0
3396108
c:\/PROGRA~1/DIRECTX/SETUP/dx6E360.TMP (_SETUP16.DLL) (deleted)
57344 m.. -/-rwxrwxrwx 0
0
3396106
c:\/PROGRA~1/DIRECTX/SETUP/dx6E354.TMP (_SETUP32.DLL) (deleted)
16032 m.. -/-rwxrwxrwx 0
0
368253
c:\/WINDOWS/HELP/dx6E350.TMP (DXDIAG.HLP)
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
22800 m.. -rwxrwxrwx 0
0
3345990 <part2.img_MLOADER.DLL-dead-3345990>
437008 m.. -/-rwxrwxrwx 0
0
3346025
c:\/WINDOWS/SYSTEM/dx6E1F3.TMP (D3DRM.DLL)
576 m.. -rwxrwxrwx 0
0
3346004 <part2.img_MREADME.TXT-dead-3346004>
48912 m.. -/-rwxrwxrwx 0
0
3345986
c:\/WINDOWS/SYSTEM/dx6E2A1.TMP (_MCOMPOS.DLL) (deleted)
576 m.. -/-rwxrwxrwx 0
0
3346075
c:\/WINDOWS/SYSTEM/dx6E324.TMP (GMREADME.TXT)
107792 m.. -/-rwxrwxrwx 0
0
3346029
c:\/WINDOWS/SYSTEM/dx6E210.TMP (D3DXOF.DLL)
79120 m.. -/-rwxrwxrwx 0
0
3346059
c:\/WINDOWS/SYSTEM/dx6E2A4.TMP (DMIME.DLL)
51472 m.. -/-rwxrwxrwx 0
0
3346000
c:\/WINDOWS/SYSTEM/dx6E2C4.TMP (_MSYNTH.DLL) (deleted)
590096 m.. -/-rwxrwxrwx 0
0
3346039
c:\/WINDOWS/SYSTEM/dx6E243.TMP (D3DRAMP.DLL)
96768 m.. -rwxrwxrwx 0
0
3396102 <part2.img_XSETUP.EXE-dead-3396102>
11328 m.. -/-rwxrwxrwx 0
0
3346065
c:\/WINDOWS/SYSTEM/dx6E2B3.TMP (DMUSIC16.DLL)
3440660 m.. -/-rwxrwxrwx 0
0
3346073
c:\/WINDOWS/SYSTEM/dx6E2C4.TMP (GM.DLS)
16144 m.. -rwxrwxrwx 0
0
3345996 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
_MUSIC32.DLL-dead-3345996>
79120 m.. -/-rwxrwxrwx 0
0
3345988
c:\/WINDOWS/SYSTEM/dx6E2A3.TMP (_MIME.DLL) (deleted)
Thu Jan 14 1999 16:59:58 10839 ..c -rwxrwxrwx 0
0
10737671
<part2.img-_FT~1.HTM-dead-10737671>
Thu Jan 14 1999 17:00:00 10839 m.. -rwxrwxrwx 0
0
10737671
<part2.img-_FT~1.HTM-dead-10737671>
Fri Jan 15 1999 23:00:00 8290 .a. -rwxrwxrwx 0
0
16569575
<part2.img-_EFERE~2.HTM-dead-16569575>
23696 .a. -rwxrwxrwx 0
0
10737690 <part2.img_PECIF~2.HTM-dead-10737690>
2867 .a. -rwxrwxrwx 0
0
19037696 <part2.img_EARCH~5.HTM-dead-19037696>
Sat Jan 16 1999 08:24:08 23696 ..c -rwxrwxrwx 0
0
10737690
<part2.img-_PECIF~2.HTM-dead-10737690>
Sat Jan 16 1999 08:24:10 23696 m.. -rwxrwxrwx 0
0
10737690
<part2.img-_PECIF~2.HTM-dead-10737690>
Sat Jan 16 1999 08:26:02 4052 ..c -rwxrwxrwx 0
0
10737677
<part2.img-_TDW.GIF-dead-10737677>
Sat Jan 16 1999 08:26:04 4052 m.. -rwxrwxrwx 0
0
10737677
<part2.img-_TDW.GIF-dead-10737677>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Sat Jan 16 1999 08:32:36 1317 ..c -rwxrwxrwx 0
0
10737721
<part2.img-_URPLE1.GIF-dead-10737721>
Sat Jan 16 1999 08:32:38 1317 m.. -rwxrwxrwx 0
0
10737721
<part2.img-_URPLE1.GIF-dead-10737721>
Sat Jan 16 1999 08:32:40 6012 ..c -rwxrwxrwx 0
0
16569350
<part2.img-_EBGUIDE.GIF-dead-16569350>
Sat Jan 16 1999 08:32:42 6012 m.. -rwxrwxrwx 0
0
16569350
<part2.img-_EBGUIDE.GIF-dead-16569350>
Sat Jan 16 1999 08:32:44 1485 ..c -rwxrwxrwx 0
0
16569352
<part2.img-_OP_TOP.GIF-dead-16569352>
Sat Jan 16 1999 08:32:46 1485 m.. -rwxrwxrwx 0
0
16569352
<part2.img-_OP_TOP.GIF-dead-16569352>
Sat Jan 16 1999 08:34:04
455 ..c -rwxrwxrwx 0
0
16569355
<part2.img-_OGETI~1.GIF-dead-16569355>
Sat Jan 16 1999 08:34:06
455 m.. -rwxrwxrwx 0
0
16569355
<part2.img-_OGETI~1.GIF-dead-16569355>
Sat Jan 16 1999 08:34:08
488 ..c -rwxrwxrwx 0
0
10737761
<part2.img-_NTERT~1.GIF-dead-10737761>
Sat Jan 16 1999 08:34:10
488 m.. -rwxrwxrwx 0
0
10737761
<part2.img-_NTERT~1.GIF-dead-10737761>
Sat Jan 16 1999 08:34:22 4345 ..c -rwxrwxrwx 0
0
16569358
<part2.img-_ONY-H~1.GIF-dead-16569358>
Sat Jan 16 1999 08:34:24 1284 ..c -rwxrwxrwx 0
0
16569361
<part2.img-_OLIDA~2.GIF-dead-16569361>
4345 m.. -rwxrwxrwx 0
0
16569358 <part2.img-_ONYKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
H~1.GIF-dead-16569358>
Sat Jan 16 1999 08:34:26 1284 m.. -rwxrwxrwx 0
0
16569361
<part2.img-_OLIDA~2.GIF-dead-16569361>
Sat Jan 16 1999 08:34:36
54 ..c -rwxrwxrwx 0
0
16569380
<part2.img-_OT_CL~2.GIF-dead-16569380>
673 ..c -rwxrwxrwx 0
0
16569386 <part2.img_OWERE~2.GIF-dead-16569386>
Sat Jan 16 1999 08:34:38
673 m.. -rwxrwxrwx 0
0
16569386
<part2.img-_OWERE~2.GIF-dead-16569386>
3488 ..c -rwxrwxrwx 0
0
16569369 <part2.img_PPLE.GIF-dead-16569369>
54 m.. -rwxrwxrwx 0
0
16569380 <part2.img_OT_CL~2.GIF-dead-16569380>
Sat Jan 16 1999 08:34:40 3488 m.. -rwxrwxrwx 0
0
16569369
<part2.img-_PPLE.GIF-dead-16569369>
Sat Jan 16 1999 08:35:22 2031 ..c -rwxrwxrwx 0
0
10737768
<part2.img-_CIENC~1.JPE-dead-10737768>
2022 ..c -rwxrwxrwx 0
0
10737766 <part2.img_EALTH~1.JPE-dead-10737766>
Sat Jan 16 1999 08:35:24 2022 m.. -rwxrwxrwx 0
0
10737766
<part2.img-_EALTH~1.JPE-dead-10737766>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
2031 m.. -rwxrwxrwx 0
0
10737768 <part2.img_CIENC~1.JPE-dead-10737768>
Sat Jan 16 1999 08:37:04 5456 ..c -rwxrwxrwx 0
0
16569395
<part2.img-_LMLOGO.GIF-dead-16569395>
Sat Jan 16 1999 08:37:08 5456 m.. -rwxrwxrwx 0
0
16569395
<part2.img-_LMLOGO.GIF-dead-16569395>
1224 ..c -rwxrwxrwx 0
0
16569405 <part2.img_EALTH~1.GIF-dead-16569405>
Sat Jan 16 1999 08:37:10 1231 ..c -rwxrwxrwx 0
0
16569408
<part2.img-_RGANI~1.GIF-dead-16569408>
1224 m.. -rwxrwxrwx 0
0
16569405 <part2.img_EALTH~1.GIF-dead-16569405>
Sat Jan 16 1999 08:37:12 1231 m.. -rwxrwxrwx 0
0
16569408
<part2.img-_RGANI~1.GIF-dead-16569408>
1164 ..c -rwxrwxrwx 0
0
10737771 <part2.img_IRECT~1.GIF-dead-10737771>
1263 ..c -rwxrwxrwx 0
0
16569417 <part2.img_LEARI~1.GIF-dead-16569417>
Sat Jan 16 1999 08:37:14
481 ..c -rwxrwxrwx 0
0
10737777
<part2.img-_ISCLA~1.GIF-dead-10737777>
1102 ..c -rwxrwxrwx 0
0
10737774 <part2.img_IBRAR~1.GIF-dead-10737774>
1164 m.. -rwxrwxrwx 0
0
10737771 <part2.img_IRECT~1.GIF-dead-10737771>
524 ..c -rwxrwxrwx 0
0
16569420 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5 06E4 A169 4E46
_ONTAC~1.GIF-dead-16569420>
1263 m.. -rwxrwxrwx 0
0
16569417 <part2.img_LEARI~1.GIF-dead-16569417>
Sat Jan 16 1999 08:37:16
855 ..c -rwxrwxrwx 0
0
16569424
<part2.img-_INE.GIF-dead-16569424>
1102 m.. -rwxrwxrwx 0
0
10737774 <part2.img_IBRAR~1.GIF-dead-10737774>
524 m.. -rwxrwxrwx 0
0
16569420 <part2.img_ONTAC~1.GIF-dead-16569420>
481 m.. -rwxrwxrwx 0
0
10737777 <part2.img_ISCLA~1.GIF-dead-10737777>
Sat Jan 16 1999 08:37:18
855 m.. -rwxrwxrwx 0
0
16569424
<part2.img-_INE.GIF-dead-16569424>
Sat Jan 16 1999 08:38:34
771 ..c -rwxrwxrwx 0
0
16569426
<part2.img-_THERL~1.GIF-dead-16569426>
Sat Jan 16 1999 08:38:36
771 m.. -rwxrwxrwx 0
0
16569426
<part2.img-_THERL~1.GIF-dead-16569426>
Sat Jan 16 1999 08:39:30 1346 ..c -rwxrwxrwx 0
0
10737780
<part2.img-_THERF~1.GIF-dead-10737780>
779 ..c -rwxrwxrwx 0
0
10737786 <part2.img_THERR~1.GIF-dead-10737786>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
947 ..c -rwxrwxrwx 0
0
10737783 <part2.img_LMNIH~1.GIF-dead-10737783>
Sat Jan 16 1999 08:39:32
947 m.. -rwxrwxrwx 0
0
10737783
<part2.img-_LMNIH~1.GIF-dead-10737783>
779 m.. -rwxrwxrwx 0
0
10737786 <part2.img_THERR~1.GIF-dead-10737786>
1346 m.. -rwxrwxrwx 0
0
10737780 <part2.img_THERF~1.GIF-dead-10737780>
Sat Jan 16 1999 08:41:08
965 ..c -rwxrwxrwx 0
0
10737790
<part2.img-_EWNIH.GIF-dead-10737790>
Sat Jan 16 1999 08:41:10
965 m.. -rwxrwxrwx 0
0
10737790
<part2.img-_EWNIH.GIF-dead-10737790>
Sat Jan 16 1999 08:41:22
733 ..c -rwxrwxrwx 0
0
16569430
<part2.img-_ORKIDS.GIF-dead-16569430>
Sat Jan 16 1999 08:41:26
733 m.. -rwxrwxrwx 0
0
16569430
<part2.img-_ORKIDS.GIF-dead-16569430>
Sat Jan 16 1999 08:41:30 1797 ..c -rwxrwxrwx 0
0
16569432
<part2.img-_SIAN(1).GIF-dead-16569432>
Sat Jan 16 1999 08:41:32 1797 m.. -rwxrwxrwx 0
0
16569432
<part2.img-_SIAN(1).GIF-dead-16569432>
Sat Jan 16 1999 08:41:46 1952 ..c -rwxrwxrwx 0
0
16569438
<part2.img-_F4C.GIF-dead-16569438>
189 ..c -rwxrwxrwx 0
0
16569434 <part2.img_F3.GIF-dead-16569434>
Sat Jan 16 1999 08:41:48
421 ..c -rwxrwxrwx 0
0
16569440
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169 4E46
<part2.img-_F6A.GIF-dead-16569440>
189 m.. -rwxrwxrwx 0
0
16569434 <part2.img_F3.GIF-dead-16569434>
1952 m.. -rwxrwxrwx 0
0
16569438 <part2.img_F4C.GIF-dead-16569438>
Sat Jan 16 1999 08:41:50
596 ..c -rwxrwxrwx 0
0
10737794
<part2.img-_F8.GIF-dead-10737794>
421 m.. -rwxrwxrwx 0
0
16569440 <part2.img_F6A.GIF-dead-16569440>
Sat Jan 16 1999 08:41:52
596 m.. -rwxrwxrwx 0
0
10737794
<part2.img-_F8.GIF-dead-10737794>
1603 ..c -rwxrwxrwx 0
0
10737799 <part2.img_OTTOP~1.GIF-dead-10737799>
Sat Jan 16 1999 08:41:54 1603 m.. -rwxrwxrwx 0
0
10737799
<part2.img-_OTTOP~1.GIF-dead-10737799>
1515 ..c -rwxrwxrwx 0
0
16569443 <part2.img_ORETO~1.GIF-dead-16569443>
1798 ..c -rwxrwxrwx 0
0
10737804 <part2.img_MARTC~1.GIF-dead-10737804>
1218 ..c -rwxrwxrwx 0
0
10737801 <part2.img_EWS1.GIF-dead-10737801>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Sat Jan 16 1999 08:41:56 1086 ..c -rwxrwxrwx 0
0
16569448
<part2.img-_AVHOT1.GIF-dead-16569448>
1344 ..c -rwxrwxrwx 0
0
16569450 <part2.img_AVSMA~1.GIF-dead-16569450>
1798 m.. -rwxrwxrwx 0
0
10737804 <part2.img_MARTC~1.GIF-dead-10737804>
1515 m.. -rwxrwxrwx 0
0
16569443 <part2.img_ORETO~1.GIF-dead-16569443>
1218 m.. -rwxrwxrwx 0
0
10737801 <part2.img_EWS1.GIF-dead-10737801>
Sat Jan 16 1999 08:41:58 1344 m.. -rwxrwxrwx 0
0
16569450
<part2.img-_AVSMA~1.GIF-dead-16569450>
989 ..c -rwxrwxrwx 0
0
16569452 <part2.img_AVABO~2.GIF-dead-16569452>
1126 ..c -rwxrwxrwx 0
0
10737806 <part2.img_AVEMA~1.GIF-dead-10737806>
1086 m.. -rwxrwxrwx 0
0
16569448 <part2.img_AVHOT1.GIF-dead-16569448>
Sat Jan 16 1999 08:42:00 1126 m.. -rwxrwxrwx 0
0
10737806
<part2.img-_AVEMA~1.GIF-dead-10737806>
989 m.. -rwxrwxrwx 0
0
16569452 <part2.img_AVABO~2.GIF-dead-16569452>
Sat Jan 16 1999 08:42:26
539 ..c -rwxrwxrwx 0
0
16569454
<part2.img-_HSMINI.GIF-dead-16569454>
Sat Jan 16 1999 08:42:28
539 m.. -rwxrwxrwx 0
0
16569454
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
<part2.img-_HSMINI.GIF-dead-16569454>
Sat Jan 16 1999 08:43:04 4605 ..c -rwxrwxrwx 0
0
16569462
<part2.img-_DER~1.HTM-dead-16569462>
Sat Jan 16 1999 08:43:06 4740 ..c -rwxrwxrwx 0
0
16569464
<part2.img-_NNOVATE.GIF-dead-16569464>
4605 m.. -rwxrwxrwx 0
0
16569462 <part2.img_DER~1.HTM-dead-16569462>
Sat Jan 16 1999 08:43:08 4740 m.. -rwxrwxrwx 0
0
16569464
<part2.img-_NNOVATE.GIF-dead-16569464>
5459 ..c -rwxrwxrwx 0
0
16569470 <part2.img_DABAR.GIF-dead-16569470>
Sat Jan 16 1999 08:43:10 5459 m.. -rwxrwxrwx 0
0
16569470
<part2.img-_DABAR.GIF-dead-16569470>
Sat Jan 16 1999 08:43:40
776 ..c -rwxrwxrwx 0
0
10737812
<part2.img-_ETACRO.GIF-dead-10737812>
Sat Jan 16 1999 08:43:42
776 m.. -rwxrwxrwx 0
0
10737812
<part2.img-_ETACRO.GIF-dead-10737812>
Sat Jan 16 1999 08:44:04 4843 ..c -rwxrwxrwx 0
0
16569483
<part2.img-_DERLO~1.GIF-dead-16569483>
1832 ..c -rwxrwxrwx 0
0
16569474 <part2.img_ONTEN~1.HTM-dead-16569474>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Sat Jan 16 1999 08:44:06 4843 m.. -rwxrwxrwx 0
0
16569483
<part2.img-_DERLO~1.GIF-dead-16569483>
1832 m.. -rwxrwxrwx 0
0
16569474 <part2.img_ONTEN~1.HTM-dead-16569474>
Sat Jan 16 1999 08:48:14 3149 ..c -rwxrwxrwx 0
0
16569534
<part2.img-_09C08.GIF-dead-16569534>
Sat Jan 16 1999 08:48:16 3149 m.. -rwxrwxrwx 0
0
16569534
<part2.img-_09C08.GIF-dead-16569534>
653 ..c -rwxrwxrwx 0
0
16569544 <part2.img_MDI_H~1.XBM-dead-16569544>
Sat Jan 16 1999 08:48:18
653 m.. -rwxrwxrwx 0
0
16569544
<part2.img-_MDI_H~1.XBM-dead-16569544>
Sat Jan 16 1999 08:49:12 3389 ..c -rwxrwxrwx 0
0
10737834
<part2.img-_IRTUA~1.HTM-dead-10737834>
Sat Jan 16 1999 08:49:14 2519 ..c -rwxrwxrwx 0
0
10737825
<part2.img-_PLASH.GIF-dead-10737825>
3389 m.. -rwxrwxrwx 0
0
10737834 <part2.img_IRTUA~1.HTM-dead-10737834>
Sat Jan 16 1999 08:49:16 2906 ..c -rwxrwxrwx 0
0
10737829
<part2.img-_RCH~1.JPE-dead-10737829>
2752 ..c -rwxrwxrwx 0
0
10737836 <part2.img_NFO~1.JPE-dead-10737836>
2519 m.. -rwxrwxrwx 0
0
10737825 <part2.img_PLASH.GIF-dead-10737825>
Sat Jan 16 1999 08:49:18 2752 m.. -rwxrwxrwx 0
0
10737836
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
<part2.img-_NFO~1.JPE-dead-10737836>
2906 m.. -rwxrwxrwx 0
0
10737829 <part2.img_RCH~1.JPE-dead-10737829>
Sat Jan 16 1999 08:49:22 4307 ..c -rwxrwxrwx 0
0
16569549
<part2.img-_EDINE~1.GIF-dead-16569549>
Sat Jan 16 1999 08:49:24 4307 m.. -rwxrwxrwx 0
0
16569549
<part2.img-_EDINE~1.GIF-dead-16569549>
Sat Jan 16 1999 08:49:58 3370 ..c -rwxrwxrwx 0
0
16569551
<part2.img-_NFO~1.HTM-dead-16569551>
Sat Jan 16 1999 08:50:00 3370 m.. -rwxrwxrwx 0
0
16569551
<part2.img-_NFO~1.HTM-dead-16569551>
Sat Jan 16 1999 08:50:18 2118 ..c -rwxrwxrwx 0
0
16569553
<part2.img-_NLY.GIF-dead-16569553>
Sat Jan 16 1999 08:50:20
823 ..c -rwxrwxrwx 0
0
10737838
<part2.img-_OOLSI~1.GIF-dead-10737838>
824 ..c -rwxrwxrwx 0
0
16569558 <part2.img_OOKST~1.GIF-dead-16569558>
781 ..c -rwxrwxrwx 0
0
16569560 <part2.img_HATRO~1.GIF-dead-16569560>
2118 m.. -rwxrwxrwx 0
0
16569553 <part2.img_NLY.GIF-dead-16569553>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Sat Jan 16 1999 08:50:22
587 ..c -rwxrwxrwx 0
0
10737840
<part2.img-_ELP.GIF-dead-10737840>
754 ..c -rwxrwxrwx 0
0
10737847 <part2.img_EWSLE~1.GIF-dead-10737847>
824 m.. -rwxrwxrwx 0
0
16569558 <part2.img_OOKST~1.GIF-dead-16569558>
823 m.. -rwxrwxrwx 0
0
10737838 <part2.img_OOLSI~1.GIF-dead-10737838>
781 m.. -rwxrwxrwx 0
0
16569560 <part2.img_HATRO~1.GIF-dead-16569560>
Sat Jan 16 1999 08:50:24
721 ..c -rwxrwxrwx 0
0
10737851
<part2.img-_OME(1).GIF-dead-10737851>
587 m.. -rwxrwxrwx 0
0
10737840 <part2.img_ELP.GIF-dead-10737840>
742 ..c -rwxrwxrwx 0
0
16569562 <part2.img_ONTACT.GIF-dead-16569562>
754 m.. -rwxrwxrwx 0
0
10737847 <part2.img_EWSLE~1.GIF-dead-10737847>
802 ..c -rwxrwxrwx 0
0
10737849 <part2.img_HATSNEW.GIF-dead-10737849>
640 ..c -rwxrwxrwx 0
0
16569564 <part2.img_ORUMS.GIF-dead-16569564>
Sat Jan 16 1999 08:50:26
742 m.. -rwxrwxrwx 0
0
16569562
<part2.img-_ONTACT.GIF-dead-16569562>
721 m.. -rwxrwxrwx 0
0
10737851 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
_OME(1).GIF-dead-10737851>
802 m.. -rwxrwxrwx 0
0
10737849 <part2.img_HATSNEW.GIF-dead-10737849>
640 m.. -rwxrwxrwx 0
0
16569564 <part2.img_ORUMS.GIF-dead-16569564>
Sat Jan 16 1999 08:52:46 8290 ..c -rwxrwxrwx 0
0
16569575
<part2.img-_EFERE~2.HTM-dead-16569575>
Sat Jan 16 1999 08:52:48 8290 m.. -rwxrwxrwx 0
0
16569575
<part2.img-_EFERE~2.HTM-dead-16569575>
Sat Jan 16 1999 08:53:16
161 ..c -rwxrwxrwx 0
0
16569592
<part2.img-_NDEX_~2.GIF-dead-16569592>
160 ..c -rwxrwxrwx 0
0
10737857 <part2.img_OME_C~1.GIF-dead-10737857>
165 ..c -rwxrwxrwx 0
0
16569588 <part2.img_NDEX_~1.GIF-dead-16569588>
Sat Jan 16 1999 08:53:18
160 m.. -rwxrwxrwx 0
0
10737857
<part2.img-_OME_C~1.GIF-dead-10737857>
220 ..c -rwxrwxrwx 0
0
16569636 <part2.img_NDEX_~3.GIF-dead-16569636>
165 m.. -rwxrwxrwx 0
0
16569588 <part2.img_NDEX_~1.GIF-dead-16569588>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
161 m.. -rwxrwxrwx 0
0
16569592 <part2.img_NDEX_~2.GIF-dead-16569592>
Sat Jan 16 1999 08:53:20
205 ..c -rwxrwxrwx 0
0
16569651
<part2.img-_NDEX_~4.GIF-dead-16569651>
220 m.. -rwxrwxrwx 0
0
16569636 <part2.img_NDEX_~3.GIF-dead-16569636>
Sat Jan 16 1999 08:53:22
182 ..c -rwxrwxrwx 0
0
10737861
<part2.img-_NDEX_~1.GIF-dead-10737861>
173 ..c -rwxrwxrwx 0
0
16569655 <part2.img_NDEX_~5.GIF-dead-16569655>
205 m.. -rwxrwxrwx 0
0
16569651 <part2.img_NDEX_~4.GIF-dead-16569651>
188 ..c -rwxrwxrwx 0
0
10737876 <part2.img_NDEX_~4.GIF-dead-10737876>
195 ..c -rwxrwxrwx 0
0
10737872 <part2.img_NDEX_~3.GIF-dead-10737872>
165 ..c -rwxrwxrwx 0
0
10737865 <part2.img_NDEX_~2.GIF-dead-10737865>
Sat Jan 16 1999 08:53:24
188 m.. -rwxrwxrwx 0
0
10737876
<part2.img-_NDEX_~4.GIF-dead-10737876>
165 m.. -rwxrwxrwx 0
0
10737865 <part2.img_NDEX_~2.GIF-dead-10737865>
170 ..c -rwxrwxrwx 0
0
16569668 <part2.img_NDEX_~6.GIF-dead-16569668>
179 ..c -rwxrwxrwx 0
0
16569674 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5 06E4 A169 4E46
_NDEX_~7.GIF-dead-16569674>
173 m.. -rwxrwxrwx 0
0
16569655 <part2.img_NDEX_~5.GIF-dead-16569655>
182 m.. -rwxrwxrwx 0
0
10737861 <part2.img_NDEX_~1.GIF-dead-10737861>
195 m.. -rwxrwxrwx 0
0
10737872 <part2.img_NDEX_~3.GIF-dead-10737872>
Sat Jan 16 1999 08:53:26
170 m.. -rwxrwxrwx 0
0
16569668
<part2.img-_NDEX_~6.GIF-dead-16569668>
179 m.. -rwxrwxrwx 0
0
16569674 <part2.img_NDEX_~7.GIF-dead-16569674>
215 ..c -rwxrwxrwx 0
0
16569678 <part2.img_NDEX_~8.GIF-dead-16569678>
Sat Jan 16 1999 08:53:28
191 ..c -rwxrwxrwx 0
0
10737880
<part2.img-_NDEX_~5.GIF-dead-10737880>
215 m.. -rwxrwxrwx 0
0
16569678 <part2.img_NDEX_~8.GIF-dead-16569678>
Sat Jan 16 1999 08:53:30
188 ..c -rwxrwxrwx 0
0
16569725
<part2.img-_NDEX~10.GIF-dead-16569725>
191 m.. -rwxrwxrwx 0
0
10737880 <part2.img_NDEX_~5.GIF-dead-10737880>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
184 ..c -rwxrwxrwx 0
0
16569698 <part2.img_NDEX_~9.GIF-dead-16569698>
178 ..c -rwxrwxrwx 0
0
10737884 <part2.img_NDEX_~6.GIF-dead-10737884>
Sat Jan 16 1999 08:53:32
178 m.. -rwxrwxrwx 0
0
10737884
<part2.img-_NDEX_~6.GIF-dead-10737884>
218 ..c -rwxrwxrwx 0
0
10737893 <part2.img_NDEX_~7.GIF-dead-10737893>
187 ..c -rwxrwxrwx 0
0
10737901 <part2.img_NDEX_~8.GIF-dead-10737901>
216 ..c -rwxrwxrwx 0
0
10737913 <part2.img_NDEX_~9.GIF-dead-10737913>
188 m.. -rwxrwxrwx 0
0
16569725 <part2.img_NDEX~10.GIF-dead-16569725>
184 m.. -rwxrwxrwx 0
0
16569698 <part2.img_NDEX_~9.GIF-dead-16569698>
196 ..c -rwxrwxrwx 0
0
10737922 <part2.img_NDEX~10.GIF-dead-10737922>
Sat Jan 16 1999 08:53:34
187 m.. -rwxrwxrwx 0
0
10737901
<part2.img-_NDEX_~8.GIF-dead-10737901>
216 m.. -rwxrwxrwx 0
0
10737913 <part2.img_NDEX_~9.GIF-dead-10737913>
4286 ..c -rwxrwxrwx 0
0
16569577 <part2.img_EDAILLE.GIF-dead-16569577>
218 m.. -rwxrwxrwx 0
0
10737893 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
_NDEX_~7.GIF-dead-10737893>
196 m.. -rwxrwxrwx 0
0
10737922 <part2.img_NDEX~10.GIF-dead-10737922>
Sat Jan 16 1999 08:53:36 2622 ..c -rwxrwxrwx 0
0
16569638
<part2.img-_EDRIN~1.JPE-dead-16569638>
Sat Jan 16 1999 08:53:38 4286 m.. -rwxrwxrwx 0
0
16569577
<part2.img-_EDAILLE.GIF-dead-16569577>
2622 m.. -rwxrwxrwx 0
0
16569638 <part2.img_EDRIN~1.JPE-dead-16569638>
Sat Jan 16 1999 08:53:54
79 ..c -rwxrwxrwx 0
0
16569662
<part2.img-_ARBUL2E.GIF-dead-16569662>
76 ..c -rwxrwxrwx 0
0
10737903 <part2.img_ARBUL3E.GIF-dead-10737903>
Sat Jan 16 1999 08:53:56
76 m.. -rwxrwxrwx 0
0
10737903
<part2.img-_ARBUL3E.GIF-dead-10737903>
79 m.. -rwxrwxrwx 0
0
16569662 <part2.img_ARBUL2E.GIF-dead-16569662>
Sat Jan 16 1999 08:54:18 2623 ..c -rwxrwxrwx 0
0
16569680
<part2.img-_OP2.GIF-dead-16569680>
Sat Jan 16 1999 08:54:20 2623 m.. -rwxrwxrwx 0
0
16569680
<part2.img-_OP2.GIF-dead-16569680>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Sat Jan 16 1999 08:54:30
755 ..c -rwxrwxrwx 0
0
10737907
<part2.img-_SK~1.HTM-dead-10737907>
Sat Jan 16 1999 08:54:32
755 m.. -rwxrwxrwx 0
0
10737907
<part2.img-_SK~1.HTM-dead-10737907>
Sat Jan 16 1999 08:54:54 4798 ..c -rwxrwxrwx 0
0
16569684
<part2.img-_OPLINE.GIF-dead-16569684>
Sat Jan 16 1999 08:55:02 4798 m.. -rwxrwxrwx 0
0
16569684
<part2.img-_OPLINE.GIF-dead-16569684>
Sat Jan 16 1999 08:56:46 1116 ..c -rwxrwxrwx 0
0
10737926
<part2.img-_EVOTHYR.GIF-dead-10737926>
Sat Jan 16 1999 08:56:48 1116 m.. -rwxrwxrwx 0
0
10737926
<part2.img-_EVOTHYR.GIF-dead-10737926>
Sat Jan 16 1999 08:59:26 2178 ..c -rwxrwxrwx 0
0
10737928
<part2.img-__DRI~1.HTM-dead-10737928>
Sat Jan 16 1999 08:59:28 2090 ..c -rwxrwxrwx 0
0
10737930
<part2.img-_MHTLOGO.GIF-dead-10737930>
2178 m.. -rwxrwxrwx 0
0
10737928 <part2.img__DRI~1.HTM-dead-10737928>
Sat Jan 16 1999 08:59:30 2090 m.. -rwxrwxrwx 0
0
10737930
<part2.img-_MHTLOGO.GIF-dead-10737930>
3581 ..c -rwxrwxrwx 0
0
10737932 <part2.img_ODES4.GIF-dead-10737932>
Sat Jan 16 1999 08:59:32 3581 m.. -rwxrwxrwx 0
0
10737932
<part2.img-_ODES4.GIF-dead-10737932>
Sat Jan 16 1999 08:59:50 1394 ..c -rwxrwxrwx 0
0
16569700
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
<part2.img-_EDLIS~1.HTM-dead-16569700>
Sat Jan 16 1999 08:59:52 1394 m.. -rwxrwxrwx 0
0
16569700
<part2.img-_EDLIS~1.HTM-dead-16569700>
Sat Jan 16 1999 08:59:58 2386 ..c -rwxrwxrwx 0
0
10737934
<part2.img-_DE.GIF-dead-10737934>
Sat Jan 16 1999 09:00:00 2386 m.. -rwxrwxrwx 0
0
10737934
<part2.img-_DE.GIF-dead-10737934>
Sat Jan 16 1999 09:01:42
41 ..c -rwxrwxrwx 0
0
10737947
<part2.img-_OT-21~1.GIF-dead-10737947>
1591 ..c -rwxrwxrwx 0
0
16569708 <part2.img_AP3.GIF-dead-16569708>
Sat Jan 16 1999 09:01:44
41 m.. -rwxrwxrwx 0
0
10737947
<part2.img-_OT-21~1.GIF-dead-10737947>
1591 m.. -rwxrwxrwx 0
0
16569708 <part2.img_AP3.GIF-dead-16569708>
Sat Jan 16 1999 09:02:04 5820 ..c -rwxrwxrwx 0
0
10737952
<part2.img-_DR~1.HTM-dead-10737952>
Sat Jan 16 1999 09:02:06 5820 m.. -rwxrwxrwx 0
0
10737952
<part2.img-_DR~1.HTM-dead-10737952>
378 ..c -rwxrwxrwx 0
0
16569712 <part2.img_ASTER.CSS-dead-16569712>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Sat Jan 16 1999 09:02:08 3142 ..c -rwxrwxrwx 0
0
10737954
<part2.img-__PHYS.GIF-dead-10737954>
378 m.. -rwxrwxrwx 0
0
16569712 <part2.img_ASTER.CSS-dead-16569712>
3696 ..c -rwxrwxrwx 0
0
10737956 <part2.img__PHARM.GIF-dead-10737956>
Sat Jan 16 1999 09:02:10 3142 m.. -rwxrwxrwx 0
0
10737954
<part2.img-__PHYS.GIF-dead-10737954>
3834 ..c -rwxrwxrwx 0
0
10737958 <part2.img__PAS.GIF-dead-10737958>
3696 m.. -rwxrwxrwx 0
0
10737956 <part2.img__PHARM.GIF-dead-10737956>
Sat Jan 16 1999 09:02:12 3046 ..c -rwxrwxrwx 0
0
10737960
<part2.img-__NURSES.GIF-dead-10737960>
2901 ..c -rwxrwxrwx 0
0
16569719 <part2.img__CONS.GIF-dead-16569719>
Sat Jan 16 1999 09:02:14 1640 ..c -rwxrwxrwx 0
0
10737963
<part2.img-_6061-~1.GIF-dead-10737963>
3046 m.. -rwxrwxrwx 0
0
10737960 <part2.img__NURSES.GIF-dead-10737960>
2901 m.. -rwxrwxrwx 0
0
16569719 <part2.img__CONS.GIF-dead-16569719>
Sat Jan 16 1999 09:02:16 1640 m.. -rwxrwxrwx 0
0
10737963
<part2.img-_6061-~1.GIF-dead-10737963>
3834 m.. -rwxrwxrwx 0
0
10737958 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
__PAS.GIF-dead-10737958>
Sat Jan 16 1999 09:02:18 1475 ..c -rwxrwxrwx 0
0
16569728
<part2.img-_6084-~1.GIF-dead-16569728>
Sat Jan 16 1999 09:02:20 1475 m.. -rwxrwxrwx 0
0
16569728
<part2.img-_6084-~1.GIF-dead-16569728>
Sat Jan 16 1999 09:02:26
43 ..c -rwxrwxrwx 0
0
10737974
<part2.img-_LANK.GIF-dead-10737974>
Sat Jan 16 1999 09:02:30
43 m.. -rwxrwxrwx 0
0
10737974
<part2.img-_LANK.GIF-dead-10737974>
Sat Jan 16 1999 09:02:40 2310 ..c -rwxrwxrwx 0
0
16569735
<part2.img-_W_HEAD.GIF-dead-16569735>
Sat Jan 16 1999 09:02:42
57 ..c -rwxrwxrwx 0
0
16569739
<part2.img-_URGAR~1.GIF-dead-16569739>
2310 m.. -rwxrwxrwx 0
0
16569735 <part2.img_W_HEAD.GIF-dead-16569735>
Sat Jan 16 1999 09:02:46
57 m.. -rwxrwxrwx 0
0
16569739
<part2.img-_URGAR~1.GIF-dead-16569739>
Sat Jan 16 1999 09:04:08 1129 ..c -rwxrwxrwx 0
0
16569749
<part2.img-_EXT.GIF-dead-16569749>
Sat Jan 16 1999 09:04:10 1129 m.. -rwxrwxrwx 0
0
16569749
<part2.img-_EXT.GIF-dead-16569749>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Sat Jan 16 1999 09:07:24 1051 ..c -rwxrwxrwx 0
0
16569574
<part2.img-_EADER~7.GIF-dead-16569574>
Sat Jan 16 1999 09:07:26
78 ..c -rwxrwxrwx 0
0
10737886
<part2.img-_HIN_RED.GIF-dead-10737886>
1051 m.. -rwxrwxrwx 0
0
16569574 <part2.img_EADER~7.GIF-dead-16569574>
Sat Jan 16 1999 09:07:28
78 m.. -rwxrwxrwx 0
0
10737886
<part2.img-_HIN_RED.GIF-dead-10737886>
Sat Jan 16 1999 09:07:30 1813 ..c -rwxrwxrwx 0
0
10737979
<part2.img-_CONHOME.GIF-dead-10737979>
Sat Jan 16 1999 09:07:32 112329 ..c -rwxrwxrwx 0
0
10737981
<part2.img-_NDEX~10.HTM-dead-10737981>
1813 m.. -rwxrwxrwx 0
0
10737979 <part2.img_CONHOME.GIF-dead-10737979>
Sat Jan 16 1999 09:07:42 112329 m.. -rwxrwxrwx 0
0
10737981
<part2.img-_NDEX~10.HTM-dead-10737981>
Sat Jan 16 1999 09:08:26
710 ..c -rwxrwxrwx 0
0
10737985
<part2.img-_HARMWEB.GIF-dead-10737985>
Sat Jan 16 1999 09:08:28
710 m.. -rwxrwxrwx 0
0
10737985
<part2.img-_HARMWEB.GIF-dead-10737985>
Sat Jan 16 1999 09:08:30 1687 ..c -rwxrwxrwx 0
0
10737987
<part2.img-_SEARCH.GIF-dead-10737987>
Sat Jan 16 1999 09:08:34 1687 m.. -rwxrwxrwx 0
0
10737987
<part2.img-_SEARCH.GIF-dead-10737987>
Sat Jan 16 1999 09:08:54 4076 ..c -rwxrwxrwx 0
0
10737990
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
<part2.img-_LOPHA~1.GIF-dead-10737990>
Sat Jan 16 1999 09:09:02 4076 m.. -rwxrwxrwx 0
0
10737990
<part2.img-_LOPHA~1.GIF-dead-10737990>
Sat Jan 16 1999 09:09:06 3528 ..c -rwxrwxrwx 0
0
10737992
<part2.img-_PHOME.GIF-dead-10737992>
Sat Jan 16 1999 09:09:12 3528 m.. -rwxrwxrwx 0
0
10737992
<part2.img-_PHOME.GIF-dead-10737992>
Sat Jan 16 1999 09:09:14 3122 ..c -rwxrwxrwx 0
0
16569760
<part2.img-_FPMA.GIF-dead-16569760>
Sat Jan 16 1999 09:09:16 3122 m.. -rwxrwxrwx 0
0
16569760
<part2.img-_FPMA.GIF-dead-16569760>
3648 ..c -rwxrwxrwx 0
0
16569767 <part2.img_HUGAI.GIF-dead-16569767>
Sat Jan 16 1999 09:09:18 2500 ..c -rwxrwxrwx 0
0
16569771
<part2.img-_PEC.GIF-dead-16569771>
Sat Jan 16 1999 09:09:22 2500 m.. -rwxrwxrwx 0
0
16569771
<part2.img-_PEC.GIF-dead-16569771>
3648 m.. -rwxrwxrwx 0
0
16569767 <part2.img_HUGAI.GIF-dead-16569767>
Sat Jan 16 1999 09:09:24
305 ..c -rwxrwxrwx 0
0
10737994
<part2.img-_ONTENTS.GIF-dead-10737994>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Sat Jan 16 1999 09:09:26
45 ..c -rwxrwxrwx 0
0
16569777
<part2.img-_NV.GIF-dead-16569777>
314 ..c -rwxrwxrwx 0
0
10737997 <part2.img_HARMS~1.GIF-dead-10737997>
305 m.. -rwxrwxrwx 0
0
10737994 <part2.img_ONTENTS.GIF-dead-10737994>
Sat Jan 16 1999 09:09:28
314 m.. -rwxrwxrwx 0
0
10737997
<part2.img-_HARMS~1.GIF-dead-10737997>
45 m.. -rwxrwxrwx 0
0
16569777 <part2.img_NV.GIF-dead-16569777>
Sat Jan 16 1999 09:09:34 1537 ..c -rwxrwxrwx 0
0
10738000
<part2.img-_HARMW~2.HTM-dead-10738000>
Sat Jan 16 1999 09:09:36 1537 m.. -rwxrwxrwx 0
0
10738000
<part2.img-_HARMW~2.HTM-dead-10738000>
2066 ..c -rwxrwxrwx 0
0
10738002 <part2.img_AINBACK.GIF-dead-10738002>
Sat Jan 16 1999 09:09:38 2066 m.. -rwxrwxrwx 0
0
10738002
<part2.img-_AINBACK.GIF-dead-10738002>
Sat Jan 16 1999 09:10:00 1876 ..c -rwxrwxrwx 0
0
10738005
<part2.img-_HARMW~3.HTM-dead-10738005>
Sat Jan 16 1999 09:10:02 1876 m.. -rwxrwxrwx 0
0
10738005
<part2.img-_HARMW~3.HTM-dead-10738005>
Sun Jan 17 1999 23:00:00 2021 .a. -rwxrwxrwx 0
0
18497681
<part2.img-_HARKY~1.HTM-dead-18497681>
1199 .a. -rwxrwxrwx 0
0
10738012 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
_HOPON~1.GIF-dead-10738012>
Mon Jan 18 1999 09:42:34
963 ..c -rwxrwxrwx 0
0
16569785
<part2.img-_CCOMP~1.HTM-dead-16569785>
Mon Jan 18 1999 09:42:36
963 m.. -rwxrwxrwx 0
0
16569785
<part2.img-_CCOMP~1.HTM-dead-16569785>
Mon Jan 18 1999 09:42:38 4930 ..c -rwxrwxrwx 0
0
16569787
<part2.img-_ESTBUY.GIF-dead-16569787>
Mon Jan 18 1999 09:42:40 1883 ..c -rwxrwxrwx 0
0
10738009
<part2.img-_PECIAL.GIF-dead-10738009>
Mon Jan 18 1999 09:42:42 4930 m.. -rwxrwxrwx 0
0
16569787
<part2.img-_ESTBUY.GIF-dead-16569787>
1883 m.. -rwxrwxrwx 0
0
10738009 <part2.img_PECIAL.GIF-dead-10738009>
Mon Jan 18 1999 09:42:48 1199 ..c -rwxrwxrwx 0
0
10738012
<part2.img-_HOPON~1.GIF-dead-10738012>
Mon Jan 18 1999 09:43:02
799 ..c -rwxrwxrwx 0
0
10738014
<part2.img-_OTLINE.GIF-dead-10738014>
Mon Jan 18 1999 09:43:04
799 m.. -rwxrwxrwx 0
0
10738014
<part2.img-_OTLINE.GIF-dead-10738014>
3516 ..c -rwxrwxrwx 0
0
16569818 <part2.img_DAC31~1.GIF-dead-16569818>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Mon Jan 18 1999 09:43:06 3516 m.. -rwxrwxrwx 0
0
16569818
<part2.img-_DAC31~1.GIF-dead-16569818>
2370 ..c -rwxrwxrwx 0
0
10738017 <part2.img_W2000~1.GIF-dead-10738017>
5274 ..c -rwxrwxrwx 0
0
10738020 <part2.img_5ABWO~1.GIF-dead-10738020>
Mon Jan 18 1999 09:43:08 5274 m.. -rwxrwxrwx 0
0
10738020
<part2.img-_5ABWO~1.GIF-dead-10738020>
2370 m.. -rwxrwxrwx 0
0
10738017 <part2.img_W2000~1.GIF-dead-10738017>
Mon Jan 18 1999 09:43:12
100 ..c -rwxrwxrwx 0
0
16569841
<part2.img-_IGHT.GIF-dead-16569841>
100 ..c -rwxrwxrwx 0
0
10738024 <part2.img_EFT(1).GIF-dead-10738024>
Mon Jan 18 1999 09:43:14
100 m.. -rwxrwxrwx 0
0
16569841
<part2.img-_IGHT.GIF-dead-16569841>
100 m.. -rwxrwxrwx 0
0
10738024 <part2.img_EFT(1).GIF-dead-10738024>
887 ..c -rwxrwxrwx 0
0
10738031 <part2.img_EFT_C~1.GIF-dead-10738031>
887 ..c -rwxrwxrwx 0
0
16569849 <part2.img_IGHT_~1.GIF-dead-16569849>
Mon Jan 18 1999 09:43:16
887 m.. -rwxrwxrwx 0
0
16569849
<part2.img-_IGHT_~1.GIF-dead-16569849>
887 m.. -rwxrwxrwx 0
0
10738031 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
_EFT_C~1.GIF-dead-10738031>
Mon Jan 18 1999 09:43:30 1199 m.. -rwxrwxrwx 0
0
10738012
<part2.img-_HOPON~1.GIF-dead-10738012>
Mon Jan 18 1999 09:43:38 1366 ..c -rwxrwxrwx 0
0
16416260
<part2.img-_X.GIF-dead-16416260>
13264 ..c -rwxrwxrwx 0
0
16416263 <part2.img_OTHER~1.GIF-dead-16416263>
Mon Jan 18 1999 09:43:40 1366 m.. -rwxrwxrwx 0
0
16416260
<part2.img-_X.GIF-dead-16416260>
Mon Jan 18 1999 09:43:42 13264 m.. -rwxrwxrwx 0
0
16416263
<part2.img-_OTHER~1.GIF-dead-16416263>
Mon Jan 18 1999 09:43:44
299 ..c -rwxrwxrwx 0
0
10738026
<part2.img-_ULL_OFF.GIF-dead-10738026>
Mon Jan 18 1999 09:43:46
299 m.. -rwxrwxrwx 0
0
10738026
<part2.img-_ULL_OFF.GIF-dead-10738026>
Mon Jan 18 1999 09:45:24 1597 ..c -rwxrwxrwx 0
0
16569851
<part2.img-_.GIF-dead-16569851>
3443 ..c -rwxrwxrwx 0
0
10738036 <part2.img_ATEPR~1.GIF-dead-10738036>
Mon Jan 18 1999 09:45:26 1597 m.. -rwxrwxrwx 0
0
16569851
<part2.img-_.GIF-dead-16569851>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
3443 m.. -rwxrwxrwx 0
0
10738036 <part2.img_ATEPR~1.GIF-dead-10738036>
Mon Jan 18 1999 09:45:28 3489 ..c -rwxrwxrwx 0
0
16569857
<part2.img-_IEWPR~1.GIF-dead-16569857>
Mon Jan 18 1999 09:45:32 3489 m.. -rwxrwxrwx 0
0
16569857
<part2.img-_IEWPR~1.GIF-dead-16569857>
Mon Jan 18 1999 09:45:34 3964 ..c -rwxrwxrwx 0
0
18497539
<part2.img-_ECHINFO.GIF-dead-18497539>
Mon Jan 18 1999 09:45:36 3964 m.. -rwxrwxrwx 0
0
18497539
<part2.img-_ECHINFO.GIF-dead-18497539>
Mon Jan 18 1999 09:48:10 1200 ..c -rwxrwxrwx 0
0
10738041
<part2.img-_HOPON~1.GIF-dead-10738041>
Mon Jan 18 1999 09:48:12 1200 m.. -rwxrwxrwx 0
0
10738041
<part2.img-_HOPON~1.GIF-dead-10738041>
Mon Jan 18 1999 09:50:56
954 ..c -rwxrwxrwx 0
0
18497542
<part2.img-_OTHER~1.HTM-dead-18497542>
Mon Jan 18 1999 09:50:58
954 m.. -rwxrwxrwx 0
0
18497542
<part2.img-_OTHER~1.HTM-dead-18497542>
Mon Jan 18 1999 09:51:04 5804 ..c -rwxrwxrwx 0
0
16416266
<part2.img-_B_DEA~1.GIF-dead-16416266>
1279 ..c -rwxrwxrwx 0
0
10738055 <part2.img_HYBUY~1.JPE-dead-10738055>
Mon Jan 18 1999 09:51:06 5804 m.. -rwxrwxrwx 0
0
16416266
<part2.img-_B_DEA~1.GIF-dead-16416266>
1279 m.. -rwxrwxrwx 0
0
10738055 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
_HYBUY~1.JPE-dead-10738055>
Mon Jan 18 1999 09:51:08 1489 ..c -rwxrwxrwx 0
0
18497550
<part2.img-_X.GIF-dead-18497550>
Mon Jan 18 1999 09:51:10 1489 m.. -rwxrwxrwx 0
0
18497550
<part2.img-_X.GIF-dead-18497550>
2723 ..c -rwxrwxrwx 0
0
16416269 <part2.img_OPEN_~1.GIF-dead-16416269>
3003 ..c -rwxrwxrwx 0
0
18497559 <part2.img_ARGAI~1.GIF-dead-18497559>
Mon Jan 18 1999 09:51:12 2723 m.. -rwxrwxrwx 0
0
16416269
<part2.img-_OPEN_~1.GIF-dead-16416269>
3994 ..c -rwxrwxrwx 0
0
18497567 <part2.img_SUS1.GIF-dead-18497567>
3003 m.. -rwxrwxrwx 0
0
18497559 <part2.img_ARGAI~1.GIF-dead-18497559>
Mon Jan 18 1999 09:51:14 3994 m.. -rwxrwxrwx 0
0
18497567
<part2.img-_SUS1.GIF-dead-18497567>
Mon Jan 18 1999 09:51:20 1295 ..c -rwxrwxrwx 0
0
10738059
<part2.img-_X.GIF-dead-10738059>
4184 ..c -rwxrwxrwx 0
0
16416271 <part2.img_FI.GIF-dead-16416271>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Mon Jan 18 1999 09:51:22 5093 ..c -rwxrwxrwx 0
0
10738061
<part2.img-_ICHP.GIF-dead-10738061>
4184 m.. -rwxrwxrwx 0
0
16416271 <part2.img_FI.GIF-dead-16416271>
1295 m.. -rwxrwxrwx 0
0
10738059 <part2.img_X.GIF-dead-10738059>
Mon Jan 18 1999 09:51:24 5093 m.. -rwxrwxrwx 0
0
10738061
<part2.img-_ICHP.GIF-dead-10738061>
Mon Jan 18 1999 09:51:28 2049 ..c -rwxrwxrwx 0
0
16416273
<part2.img-_YAN~1.JPE-dead-16416273>
Mon Jan 18 1999 09:51:30 2049 m.. -rwxrwxrwx 0
0
16416273
<part2.img-_YAN~1.JPE-dead-16416273>
Mon Jan 18 1999 09:51:46 8102 ..c -rwxrwxrwx 0
0
16416276
<part2.img-_NDEX~11.HTM-dead-16416276>
Mon Jan 18 1999 09:51:48 8102 m.. -rwxrwxrwx 0
0
16416276
<part2.img-_NDEX~11.HTM-dead-16416276>
Mon Jan 18 1999 09:51:54
544 ..c -rwxrwxrwx 0
0
10738067
<part2.img-_OSHORSA.GIF-dead-10738067>
Mon Jan 18 1999 09:51:56
544 m.. -rwxrwxrwx 0
0
10738067
<part2.img-_OSHORSA.GIF-dead-10738067>
Mon Jan 18 1999 09:52:02 1670 ..c -rwxrwxrwx 0
0
10738070
<part2.img-_IOS%2~1.JPE-dead-10738070>
1575 ..c -rwxrwxrwx 0
0
18497570 <part2.img-_IDBI~1.JPE-dead-18497570>
Mon Jan 18 1999 09:52:04 1670 m.. -rwxrwxrwx 0
0
10738070
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
<part2.img-_IOS%2~1.JPE-dead-10738070>
1575 m.. -rwxrwxrwx 0
0
18497570 <part2.img-_IDBI~1.JPE-dead-18497570>
Mon Jan 18 1999 09:52:06 1614 ..c -rwxrwxrwx 0
0
10738073
<part2.img-_ANUAL~1.JPE-dead-10738073>
Mon Jan 18 1999 09:52:08 1614 m.. -rwxrwxrwx 0
0
10738073
<part2.img-_ANUAL~1.JPE-dead-10738073>
Mon Jan 18 1999 09:52:14 1572 ..c -rwxrwxrwx 0
0
10738076
<part2.img-_IDEO_~1.JPE-dead-10738076>
Mon Jan 18 1999 09:52:16 1572 m.. -rwxrwxrwx 0
0
10738076
<part2.img-_IDEO_~1.JPE-dead-10738076>
Mon Jan 18 1999 09:52:18 1616 ..c -rwxrwxrwx 0
0
10738095
<part2.img-_OFTWA~1.JPE-dead-10738095>
Mon Jan 18 1999 09:52:20 1616 m.. -rwxrwxrwx 0
0
10738095
<part2.img-_OFTWA~1.JPE-dead-10738095>
Mon Jan 18 1999 09:52:22 9674 ..c -rwxrwxrwx 0
0
16416279
<part2.img-_PCREA~1.GIF-dead-16416279>
Mon Jan 18 1999 09:52:38 9674 m.. -rwxrwxrwx 0
0
16416279
<part2.img-_PCREA~1.GIF-dead-16416279>
Mon Jan 18 1999 09:52:52 6569 ..c -rwxrwxrwx 0
0
16416281
<part2.img-_B00760_.GIF-dead-16416281>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Mon Jan 18 1999 09:52:54 6569 m.. -rwxrwxrwx 0
0
16416281
<part2.img-_B00760_.GIF-dead-16416281>
1546 ..c -rwxrwxrwx 0
0
18497576 <part2.img_OPEN.GIF-dead-18497576>
Mon Jan 18 1999 09:52:56 1546 m.. -rwxrwxrwx 0
0
18497576
<part2.img-_OPEN.GIF-dead-18497576>
Mon Jan 18 1999 09:52:58 1516 ..c -rwxrwxrwx 0
0
10738083
<part2.img-_IOSTAR.GIF-dead-10738083>
Mon Jan 18 1999 09:53:00 1231 ..c -rwxrwxrwx 0
0
18497578
<part2.img-_FI.GIF-dead-18497578>
1516 m.. -rwxrwxrwx 0
0
10738083 <part2.img_IOSTAR.GIF-dead-10738083>
Mon Jan 18 1999 09:53:02 1231 m.. -rwxrwxrwx 0
0
18497578
<part2.img-_FI.GIF-dead-18497578>
Mon Jan 18 1999 09:53:04 1311 ..c -rwxrwxrwx 0
0
10738089
<part2.img-_YAN.GIF-dead-10738089>
953 ..c -rwxrwxrwx 0
0
16416285 <part2.img_B01569_.GIF-dead-16416285>
184 ..c -rwxrwxrwx 0
0
16416283 <part2.img_B01570_.GIF-dead-16416283>
Mon Jan 18 1999 09:53:06 1311 m.. -rwxrwxrwx 0
0
10738089
<part2.img-_YAN.GIF-dead-10738089>
990 ..c -rwxrwxrwx 0
0
18497580 <part2.img_OP4.GIF-dead-18497580>
953 m.. -rwxrwxrwx 0
0
16416285 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
_B01569_.GIF-dead-16416285>
184 m.. -rwxrwxrwx 0
0
16416283 <part2.img_B01570_.GIF-dead-16416283>
Mon Jan 18 1999 09:53:08
990 m.. -rwxrwxrwx 0
0
18497580
<part2.img-_OP4.GIF-dead-18497580>
Mon Jan 18 1999 09:57:30 5634 ..c -rwxrwxrwx 0
0
10738097
<part2.img-_BBUND~1.HTM-dead-10738097>
Mon Jan 18 1999 09:57:34 5634 m.. -rwxrwxrwx 0
0
10738097
<part2.img-_BBUND~1.HTM-dead-10738097>
Mon Jan 18 1999 09:58:28 5362 ..c -rwxrwxrwx 0
0
16416292
<part2.img-_ONPAR.GIF-dead-16416292>
Mon Jan 18 1999 09:58:34 4352 ..c -rwxrwxrwx 0
0
16416294
<part2.img-_6MB.GIF-dead-16416294>
Mon Jan 18 1999 09:58:36 4352 m.. -rwxrwxrwx 0
0
16416294
<part2.img-_6MB.GIF-dead-16416294>
4301 ..c -rwxrwxrwx 0
0
18497592 <part2.img_2MB.GIF-dead-18497592>
Mon Jan 18 1999 09:58:38 4301 m.. -rwxrwxrwx 0
0
18497592
<part2.img-_2MB.GIF-dead-18497592>
4371 ..c -rwxrwxrwx 0
0
10738101 <part2.img_4MB.GIF-dead-10738101>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
5362 m.. -rwxrwxrwx 0
0
16416292 <part2.img_ONPAR.GIF-dead-16416292>
Mon Jan 18 1999 09:58:40 4831 ..c -rwxrwxrwx 0
0
18497596
<part2.img-_DO.GIF-dead-18497596>
5013 ..c -rwxrwxrwx 0
0
10738103 <part2.img_ARITY.GIF-dead-10738103>
Mon Jan 18 1999 09:58:42 4371 m.. -rwxrwxrwx 0
0
10738101
<part2.img-_4MB.GIF-dead-10738101>
5340 ..c -rwxrwxrwx 0
0
16416297 <part2.img_DRAME~1.GIF-dead-16416297>
Mon Jan 18 1999 09:58:44 5013 m.. -rwxrwxrwx 0
0
10738103
<part2.img-_ARITY.GIF-dead-10738103>
4831 m.. -rwxrwxrwx 0
0
18497596 <part2.img_DO.GIF-dead-18497596>
Mon Jan 18 1999 09:58:46 4271 ..c -rwxrwxrwx 0
0
16416302
<part2.img-_28MB.GIF-dead-16416302>
5340 m.. -rwxrwxrwx 0
0
16416297 <part2.img_DRAME~1.GIF-dead-16416297>
Mon Jan 18 1999 09:58:48 4493 ..c -rwxrwxrwx 0
0
10738113
<part2.img-_ORSAI~1.GIF-dead-10738113>
5087 ..c -rwxrwxrwx 0
0
18497598 <part2.img_C100.GIF-dead-18497598>
4271 m.. -rwxrwxrwx 0
0
16416302 <part2.img_28MB.GIF-dead-16416302>
5678 ..c -rwxrwxrwx 0
0
10738106 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
_ORSAI~1.JPE-dead-10738106>
Mon Jan 18 1999 09:58:50 5678 m.. -rwxrwxrwx 0
0
10738106
<part2.img-_ORSAI~1.JPE-dead-10738106>
Mon Jan 18 1999 09:58:52 5087 m.. -rwxrwxrwx 0
0
18497598
<part2.img-_C100.GIF-dead-18497598>
4493 m.. -rwxrwxrwx 0
0
10738113 <part2.img_ORSAI~1.GIF-dead-10738113>
Mon Jan 18 1999 09:58:54 2528 ..c -rwxrwxrwx 0
0
16416305
<part2.img-_ORSAI~1.GIF-dead-16416305>
4283 ..c -rwxrwxrwx 0
0
18497600 <part2.img_56MB.GIF-dead-18497600>
Mon Jan 18 1999 09:58:56 2528 m.. -rwxrwxrwx 0
0
16416305
<part2.img-_ORSAI~1.GIF-dead-16416305>
4283 m.. -rwxrwxrwx 0
0
18497600 <part2.img_56MB.GIF-dead-18497600>
Mon Jan 18 1999 09:59:28 5458 ..c -rwxrwxrwx 0
0
18497603
<part2.img-_ITEGR~1.GIF-dead-18497603>
Mon Jan 18 1999 10:01:28 5458 m.. -rwxrwxrwx 0
0
18497603
<part2.img-_ITEGR~1.GIF-dead-18497603>
Mon Jan 18 1999 10:01:30
326 ..c -rwxrwxrwx 0
0
18497606
<part2.img-_ALL-Y~1.GIF-dead-18497606>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Mon Jan 18 1999 10:01:32
326 m.. -rwxrwxrwx 0
0
18497606
<part2.img-_ALL-Y~1.GIF-dead-18497606>
Mon Jan 18 1999 10:10:46 13112 ..c -rwxrwxrwx 0
0
16416331
<part2.img-_ENU~1.HTM-dead-16416331>
Mon Jan 18 1999 10:10:50 13112 m.. -rwxrwxrwx 0
0
16416331
<part2.img-_ENU~1.HTM-dead-16416331>
Mon Jan 18 1999 10:10:52 13071 ..c -rwxrwxrwx 0
0
16416333
<part2.img-_ENDOR.GIF-dead-16416333>
Mon Jan 18 1999 10:10:54 2718 ..c -rwxrwxrwx 0
0
18497612
<part2.img-_.GIF-dead-18497612>
2738 ..c -rwxrwxrwx 0
0
10738115 <part2.img-_.GIFdead-10738115>
Mon Jan 18 1999 10:10:58 13071 m.. -rwxrwxrwx 0
0
16416333
<part2.img-_ENDOR.GIF-dead-16416333>
Mon Jan 18 1999 10:11:00 2718 m.. -rwxrwxrwx 0
0
18497612
<part2.img-_.GIF-dead-18497612>
2734 ..c -rwxrwxrwx 0
0
16416335 <part2.img-_.GIFdead-16416335>
Mon Jan 18 1999 10:11:02 2781 ..c -rwxrwxrwx 0
0
18497614
<part2.img-_.GIF-dead-18497614>
2734 m.. -rwxrwxrwx 0
0
16416335 <part2.img-_.GIFdead-16416335>
Mon Jan 18 1999 10:11:04 2781 m.. -rwxrwxrwx 0
0
18497614
<part2.img-_.GIF-dead-18497614>
2771 ..c -rwxrwxrwx 0
0
10738117 <part2.img-_.GIFKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
dead-10738117>
Mon Jan 18 1999 10:11:06 2740 ..c -rwxrwxrwx 0
0
16416353
<part2.img-_.GIF-dead-16416353>
2738 m.. -rwxrwxrwx 0
0
10738115 <part2.img-_.GIFdead-10738115>
2771 m.. -rwxrwxrwx 0
0
10738117 <part2.img-_.GIFdead-10738117>
Mon Jan 18 1999 10:11:08 2740 m.. -rwxrwxrwx 0
0
16416353
<part2.img-_.GIF-dead-16416353>
2797 ..c -rwxrwxrwx 0
0
18497616 <part2.img-_.GIFdead-18497616>
Mon Jan 18 1999 10:11:10 2797 m.. -rwxrwxrwx 0
0
18497616
<part2.img-_.GIF-dead-18497616>
2791 ..c -rwxrwxrwx 0
0
16416355 <part2.img-_.GIFdead-16416355>
2730 ..c -rwxrwxrwx 0
0
10738119 <part2.img-_.GIFdead-10738119>
Mon Jan 18 1999 10:11:12 2773 ..c -rwxrwxrwx 0
0
10738121
<part2.img-_.GIF-dead-10738121>
2730 m.. -rwxrwxrwx 0
0
10738119 <part2.img-_.GIFdead-10738119>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
2738 ..c -rwxrwxrwx 0
0
18497620 <part2.img-_.GIF-
dead-18497620>
2791 m.. -rwxrwxrwx 0
0
16416355 <part2.img-_.GIF-
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
dead-16416355>
Mon Jan 18 1999 10:11:14 2738 m.. -rwxrwxrwx 0
0
18497620
<part2.img-_.GIF-dead-18497620>
2763 ..c -rwxrwxrwx 0
0
16416357 <part2.img-_.GIFdead-16416357>
2773 m.. -rwxrwxrwx 0
0
10738121 <part2.img-_.GIFdead-10738121>
Mon Jan 18 1999 10:11:16 2763 m.. -rwxrwxrwx 0
0
16416357
<part2.img-_.GIF-dead-16416357>
2780 ..c -rwxrwxrwx 0
0
10738123 <part2.img-_.GIFdead-10738123>
Mon Jan 18 1999 10:11:18 2769 ..c -rwxrwxrwx 0
0
18497629
<part2.img-_.GIF-dead-18497629>
2780 m.. -rwxrwxrwx 0
0
10738123 <part2.img-_.GIFdead-10738123>
2784 ..c -rwxrwxrwx 0
0
16416359 <part2.img-_.GIFdead-16416359>
Mon Jan 18 1999 10:11:20 2784 m.. -rwxrwxrwx 0
0
16416359
<part2.img-_.GIF-dead-16416359>
2807 ..c -rwxrwxrwx 0
0
18497633 <part2.img-_.GIFdead-18497633>
2769 m.. -rwxrwxrwx 0
0
18497629 <part2.img-_.GIFKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
dead-18497629>
Mon Jan 18 1999 10:11:22 2785 ..c -rwxrwxrwx 0
0
16416361
<part2.img-_.GIF-dead-16416361>
2807 m.. -rwxrwxrwx 0
0
18497633 <part2.img-_.GIFdead-18497633>
Mon Jan 18 1999 10:11:24 2785 m.. -rwxrwxrwx 0
0
16416361
<part2.img-_.GIF-dead-16416361>
Mon Jan 18 1999 10:11:28 2730 ..c -rwxrwxrwx 0
0
18497640
<part2.img-_.GIF-dead-18497640>
Mon Jan 18 1999 10:11:36 2730 m.. -rwxrwxrwx 0
0
18497640
<part2.img-_.GIF-dead-18497640>
Mon Jan 18 1999 10:11:54 1887 ..c -rwxrwxrwx 0
0
18497645
<part2.img-_ORSAI~1.HTM-dead-18497645>
Mon Jan 18 1999 10:11:56 1558 ..c -rwxrwxrwx 0
0
18497651
<part2.img-_GBAR.GIF-dead-18497651>
1887 m.. -rwxrwxrwx 0
0
18497645 <part2.img_ORSAI~1.HTM-dead-18497645>
Mon Jan 18 1999 10:11:58 1558 m.. -rwxrwxrwx 0
0
18497651
<part2.img-_GBAR.GIF-dead-18497651>
Mon Jan 18 1999 10:13:48 2762 ..c -rwxrwxrwx 0
0
16416367
<part2.img-_ENUBAR.GIF-dead-16416367>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Mon Jan 18 1999 10:13:50 2762 m.. -rwxrwxrwx 0
0
16416367
<part2.img-_ENUBAR.GIF-dead-16416367>
Mon Jan 18 1999 10:13:54
591 ..c -rwxrwxrwx 0
0
18497668
<part2.img-_IAMOND.GIF-dead-18497668>
Mon Jan 18 1999 10:13:56
591 m.. -rwxrwxrwx 0
0
18497668
<part2.img-_IAMOND.GIF-dead-18497668>
Mon Jan 18 1999 10:30:20
950 ..c -rwxrwxrwx 0
0
10738132
<part2.img-_ARRAN~1.HTM-dead-10738132>
Mon Jan 18 1999 10:30:22
950 m.. -rwxrwxrwx 0
0
10738132
<part2.img-_ARRAN~1.HTM-dead-10738132>
Mon Jan 18 1999 10:30:56
947 ..c -rwxrwxrwx 0
0
16416320
<part2.img-_OTPRO~1.HTM-dead-16416320>
Mon Jan 18 1999 10:30:58
947 m.. -rwxrwxrwx 0
0
16416320
<part2.img-_OTPRO~1.HTM-dead-16416320>
Mon Jan 18 1999 10:33:12 2021 ..c -rwxrwxrwx 0
0
18497681
<part2.img-_HARKY~1.HTM-dead-18497681>
Mon Jan 18 1999 10:34:14
43 ..c -rwxrwxrwx 0
0
16416375
<part2.img-_.GIF-dead-16416375>
Mon Jan 18 1999 10:34:16
43 m.. -rwxrwxrwx 0
0
16416375
<part2.img-_.GIF-dead-16416375>
Mon Jan 18 1999 10:39:02 2021 m.. -rwxrwxrwx 0
0
18497681
<part2.img-_HARKY~1.HTM-dead-18497681>
Mon Jan 18 1999 10:41:14
705 ..c -rwxrwxrwx 0
0
10738151
<part2.img-_THER_~1.GIF-dead-10738151>
Mon Jan 18 1999 10:41:16
461 ..c -rwxrwxrwx 0
0
10738157
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
<part2.img-_OREAN.GIF-dead-10738157>
559 ..c -rwxrwxrwx 0
0
18497702 <part2.img_ELECT~2.GIF-dead-18497702>
705 m.. -rwxrwxrwx 0
0
10738151 <part2.img_THER_~1.GIF-dead-10738151>
Mon Jan 18 1999 10:41:18
559 m.. -rwxrwxrwx 0
0
18497702
<part2.img-_ELECT~2.GIF-dead-18497702>
616 ..c -rwxrwxrwx 0
0
18497725 <part2.img_ELECT~5.GIF-dead-18497725>
551 ..c -rwxrwxrwx 0
0
18497715 <part2.img_ELECT~3.GIF-dead-18497715>
341 ..c -rwxrwxrwx 0
0
10738160 <part2.img_ELECT~1.GIF-dead-10738160>
496 ..c -rwxrwxrwx 0
0
16416385 <part2.img_EARCH~4.GIF-dead-16416385>
461 m.. -rwxrwxrwx 0
0
10738157 <part2.img_OREAN.GIF-dead-10738157>
406 ..c -rwxrwxrwx 0
0
18497718 <part2.img_ELECT~4.GIF-dead-18497718>
546 ..c -rwxrwxrwx 0
0
16416382 <part2.img_ELECT~1.GIF-dead-16416382>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Mon Jan 18 1999 10:41:20
546 m.. -rwxrwxrwx 0
0
16416382
<part2.img-_ELECT~1.GIF-dead-16416382>
616 m.. -rwxrwxrwx 0
0
18497725 <part2.img_ELECT~5.GIF-dead-18497725>
496 m.. -rwxrwxrwx 0
0
16416385 <part2.img_EARCH~4.GIF-dead-16416385>
224 ..c -rwxrwxrwx 0
0
16416387 <part2.img_OTTOM.GIF-dead-16416387>
406 m.. -rwxrwxrwx 0
0
18497718 <part2.img_ELECT~4.GIF-dead-18497718>
341 m.. -rwxrwxrwx 0
0
10738160 <part2.img_ELECT~1.GIF-dead-10738160>
551 m.. -rwxrwxrwx 0
0
18497715 <part2.img_ELECT~3.GIF-dead-18497715>
Mon Jan 18 1999 10:41:22
224 m.. -rwxrwxrwx 0
0
16416387
<part2.img-_OTTOM.GIF-dead-16416387>
Mon Jan 18 1999 10:48:56 20248 ..c -rwxrwxrwx 0
0
16329754
<part2.img-_NANDT~1.HTM-dead-16329754>
Mon Jan 18 1999 10:48:58
203 ..c -rwxrwxrwx 0
0
16416451
<part2.img-_ACKGR~2.GIF-dead-16416451>
Mon Jan 18 1999 10:49:00
203 m.. -rwxrwxrwx 0
0
16416451
<part2.img-_ACKGR~2.GIF-dead-16416451>
20248 m.. -rwxrwxrwx 0
0
16329754 <part2.img_NANDT~1.HTM-dead-16329754>
Mon Jan 18 1999 10:49:10
38 ..c -rwxrwxrwx 0
0
16329764
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169 4E46
<part2.img-_AVBAR~1.GIF-dead-16329764>
Mon Jan 18 1999 10:49:12
38 m.. -rwxrwxrwx 0
0
16329764
<part2.img-_AVBAR~1.GIF-dead-16329764>
Mon Jan 18 1999 10:50:16 8921 ..c -rwxrwxrwx 0
0
16416453
<part2.img-_EVIEW~1.HTM-dead-16416453>
Mon Jan 18 1999 10:50:18 8921 m.. -rwxrwxrwx 0
0
16416453
<part2.img-_EVIEW~1.HTM-dead-16416453>
1229 ..c -rwxrwxrwx 0
0
16416456 <part2.img-_ABLE~1.GIF-dead-16416456>
Mon Jan 18 1999 10:50:22 1229 m.. -rwxrwxrwx 0
0
16416456
<part2.img-_ABLE-~1.GIF-dead-16416456>
Mon Jan 18 1999 10:50:30
597 ..c -rwxrwxrwx 0
0
16329766
<part2.img-_RROW.GIF-dead-16329766>
Mon Jan 18 1999 10:50:32
597 m.. -rwxrwxrwx 0
0
16329766
<part2.img-_RROW.GIF-dead-16329766>
Mon Jan 18 1999 11:02:56 5634 ..c -rwxrwxrwx 0
0
16416462
<part2.img-_BBUND~2.HTM-dead-16416462>
947 ..c -rwxrwxrwx 0
0
18497768 <part2.img_OTPRO~1.HTM-dead-18497768>
Mon Jan 18 1999 11:02:58 5634 m.. -rwxrwxrwx 0
0
16416462
<part2.img-_BBUND~2.HTM-dead-16416462>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
947 m.. -rwxrwxrwx 0
0
18497768 <part2.img_OTPRO~1.HTM-dead-18497768>
Sun Jan 24 1999 18:07:20 6369 ..c -rwxrwxrwx 0
0
16329778
<part2.img-__S__S~1.HTM-dead-16329778>
Sun Jan 24 1999 18:07:22 6369 m.. -rwxrwxrwx 0
0
16329778
<part2.img-__S__S~1.HTM-dead-16329778>
Sun Jan 24 1999 18:09:00 9989 ..c -rwxrwxrwx 0
0
16329787
<part2.img-_CICEN~1.HTM-dead-16329787>
Sun Jan 24 1999 18:09:02 9989 m.. -rwxrwxrwx 0
0
16329787
<part2.img-_CICEN~1.HTM-dead-16329787>
43 ..c -rwxrwxrwx 0
0
18497772 <part2.img_OT.GIF-dead-18497772>
Sun Jan 24 1999 18:09:04 5028 ..c -rwxrwxrwx 0
0
16329789
<part2.img-_EADER~1.JPE-dead-16329789>
4550 ..c -rwxrwxrwx 0
0
16416505 <part2.img_EADER~3.JPE-dead-16416505>
43 m.. -rwxrwxrwx 0
0
18497772 <part2.img_OT.GIF-dead-18497772>
Sun Jan 24 1999 18:09:06 5028 m.. -rwxrwxrwx 0
0
16329789
<part2.img-_EADER~1.JPE-dead-16329789>
4043 ..c -rwxrwxrwx 0
0
18497801 <part2.img_EADER~1.JPE-dead-18497801>
Sun Jan 24 1999 18:09:08 4550 m.. -rwxrwxrwx 0
0
16416505
<part2.img-_EADER~3.JPE-dead-16416505>
4043 m.. -rwxrwxrwx 0
0
18497801 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
_EADER~1.JPE-dead-18497801>
3705 ..c -rwxrwxrwx 0
0
16329791 <part2.img_EADER~2.JPE-dead-16329791>
Sun Jan 24 1999 18:09:10 3705 m.. -rwxrwxrwx 0
0
16329791
<part2.img-_EADER~2.JPE-dead-16329791>
Sun Jan 24 1999 18:09:12 4473 ..c -rwxrwxrwx 0
0
16416507
<part2.img-_EADER~4.JPE-dead-16416507>
Sun Jan 24 1999 18:09:14 2748 ..c -rwxrwxrwx 0
0
16416511
<part2.img-_TN_FACT.GIF-dead-16416511>
2744 m.c -rwxrwxrwx 0
0
16329793 <part2.img_TN_NEWS.GIF-dead-16329793>
4473 m.. -rwxrwxrwx 0
0
16416507 <part2.img_EADER~4.JPE-dead-16416507>
2983 ..c -rwxrwxrwx 0
0
16416509 <part2.img_TN_AREN.GIF-dead-16416509>
Sun Jan 24 1999 18:09:16 3428 ..c -rwxrwxrwx 0
0
16329795
<part2.img-_ENTER~1.JPE-dead-16329795>
2748 m.. -rwxrwxrwx 0
0
16416511 <part2.img_TN_FACT.GIF-dead-16416511>
2983 m.. -rwxrwxrwx 0
0
16416509 <part2.img_TN_AREN.GIF-dead-16416509>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Sun Jan 24 1999 18:09:18 3562 ..c -rwxrwxrwx 0
0
16416513
<part2.img-_ENTER~1.JPE-dead-16416513>
3428 m.. -rwxrwxrwx 0
0
16329795 <part2.img_ENTER~1.JPE-dead-16329795>
Sun Jan 24 1999 18:09:20 2221 ..c -rwxrwxrwx 0
0
18497805
<part2.img-_TN_TALK.GIF-dead-18497805>
3562 m.. -rwxrwxrwx 0
0
16416513 <part2.img_ENTER~1.JPE-dead-16416513>
2361 ..c -rwxrwxrwx 0
0
16416515 <part2.img_TN_PLAY.GIF-dead-16416515>
Sun Jan 24 1999 18:09:22 2221 m.. -rwxrwxrwx 0
0
18497805
<part2.img-_TN_TALK.GIF-dead-18497805>
2800 ..c -rwxrwxrwx 0
0
16416517 <part2.img_OTTOM_1.GIF-dead-16416517>
2361 m.. -rwxrwxrwx 0
0
16416515 <part2.img_TN_PLAY.GIF-dead-16416515>
Sun Jan 24 1999 18:09:24 1480 ..c -rwxrwxrwx 0
0
16329797
<part2.img-_OTTOM_4.GIF-dead-16329797>
2800 m.. -rwxrwxrwx 0
0
16416517 <part2.img_OTTOM_1.GIF-dead-16416517>
Sun Jan 24 1999 18:09:26 3531 ..c -rwxrwxrwx 0
0
18497817
<part2.img-_ENTER~1.JPE-dead-18497817>
1480 m.. -rwxrwxrwx 0
0
16329797 <part2.img_OTTOM_4.GIF-dead-16329797>
Sun Jan 24 1999 18:09:28 3531 m.. -rwxrwxrwx 0
0
18497817
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
<part2.img-_ENTER~1.JPE-dead-18497817>
1497 ..c -rwxrwxrwx 0
0
18497819 <part2.img_OTTOM_3.GIF-dead-18497819>
1781 ..c -rwxrwxrwx 0
0
16416519 <part2.img_OTTOM_5.GIF-dead-16416519>
4054 ..c -rwxrwxrwx 0
0
16329803 <part2.img_ENTER~2.JPE-dead-16329803>
Sun Jan 24 1999 18:09:30 1497 m.. -rwxrwxrwx 0
0
18497819
<part2.img-_OTTOM_3.GIF-dead-18497819>
4054 m.. -rwxrwxrwx 0
0
16329803 <part2.img_ENTER~2.JPE-dead-16329803>
2396 ..c -rwxrwxrwx 0
0
18497822 <part2.img_TN_CO~1.GIF-dead-18497822>
1781 m.. -rwxrwxrwx 0
0
16416519 <part2.img_OTTOM_5.GIF-dead-16416519>
Sun Jan 24 1999 18:09:32 2396 m.. -rwxrwxrwx 0
0
18497822
<part2.img-_TN_CO~1.GIF-dead-18497822>
4720 ..c -rwxrwxrwx 0
0
18497826 <part2.img_TN_COMI.GIF-dead-18497826>
Sun Jan 24 1999 18:09:40 4720 m.. -rwxrwxrwx 0
0
18497826
<part2.img-_TN_COMI.GIF-dead-18497826>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Sun Jan 24 1999 18:09:48
43 ..c -rwxrwxrwx 0
0
16329805
<part2.img-_OT.GIF-dead-16329805>
535 ..c -rwxrwxrwx 0
0
18497839 <part2.img_EADER~9.GIF-dead-18497839>
100 ..c -rwxrwxrwx 0
0
16329807 <part2.img_EADER~4.GIF-dead-16329807>
Sun Jan 24 1999 18:09:50
103 ..c -rwxrwxrwx 0
0
16416521
<part2.img-_EADER~3.GIF-dead-16416521>
313 ..c -rwxrwxrwx 0
0
18497841 <part2.img_EADE~10.GIF-dead-18497841>
535 m.. -rwxrwxrwx 0
0
18497839 <part2.img_EADER~9.GIF-dead-18497839>
3026 ..c -rwxrwxrwx 0
0
16329810 <part2.img_EADER~5.GIF-dead-16329810>
43 m.. -rwxrwxrwx 0
0
16329805 <part2.img_OT.GIF-dead-16329805>
100 m.. -rwxrwxrwx 0
0
16329807 <part2.img_EADER~4.GIF-dead-16329807>
Sun Jan 24 1999 18:09:52
581 ..c -rwxrwxrwx 0
0
16329827
<part2.img-_EADER~9.GIF-dead-16329827>
680 ..c -rwxrwxrwx 0
0
16329816 <part2.img_EADER~7.GIF-dead-16329816>
469 ..c -rwxrwxrwx 0
0
16416524 <part2.img_EADER~4.GIF-dead-16416524>
103 m.. -rwxrwxrwx 0
0
16416521 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
_EADER~3.GIF-dead-16416521>
3026 m.. -rwxrwxrwx 0
0
16329810 <part2.img_EADER~5.GIF-dead-16329810>
313 m.. -rwxrwxrwx 0
0
18497841 <part2.img_EADE~10.GIF-dead-18497841>
705 ..c -rwxrwxrwx 0
0
16329813 <part2.img_EADER~6.GIF-dead-16329813>
660 ..c -rwxrwxrwx 0
0
16329824 <part2.img_EADER~8.GIF-dead-16329824>
Sun Jan 24 1999 18:09:54
680 m.. -rwxrwxrwx 0
0
16329816
<part2.img-_EADER~7.GIF-dead-16329816>
581 m.. -rwxrwxrwx 0
0
16329827 <part2.img_EADER~9.GIF-dead-16329827>
737 ..c -rwxrwxrwx 0
0
16416545 <part2.img_EADER~6.GIF-dead-16416545>
660 m.. -rwxrwxrwx 0
0
16329824 <part2.img_EADER~8.GIF-dead-16329824>
6030 ..c -rwxrwxrwx 0
0
16416526 <part2.img_EADER~5.GIF-dead-16416526>
705 m.. -rwxrwxrwx 0
0
16329813 <part2.img_EADER~6.GIF-dead-16329813>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
469 m.. -rwxrwxrwx 0
0
16416524 <part2.img_EADER~4.GIF-dead-16416524>
Sun Jan 24 1999 18:09:56
737 m.. -rwxrwxrwx 0
0
16416545
<part2.img-_EADER~6.GIF-dead-16416545>
252 ..c -rwxrwxrwx 0
0
18497907 <part2.img_EADE~11.GIF-dead-18497907>
6030 m.. -rwxrwxrwx 0
0
16416526 <part2.img_EADER~5.GIF-dead-16416526>
1049 ..c -rwxrwxrwx 0
0
16329830 <part2.img_EADE~10.GIF-dead-16329830>
1064 ..c -rwxrwxrwx 0
0
18497951 <part2.img_EADE~12.GIF-dead-18497951>
Sun Jan 24 1999 18:09:58 1064 m.. -rwxrwxrwx 0
0
18497951
<part2.img-_EADE~12.GIF-dead-18497951>
1049 m.. -rwxrwxrwx 0
0
16329830 <part2.img_EADE~10.GIF-dead-16329830>
252 m.. -rwxrwxrwx 0
0
18497907 <part2.img_EADE~11.GIF-dead-18497907>
4993 ..c -rwxrwxrwx 0
0
16416548 <part2.img_IDE_1~1.GIF-dead-16416548>
2010 ..c -rwxrwxrwx 0
0
16416573 <part2.img_IDE_2~1.GIF-dead-16416573>
Sun Jan 24 1999 18:10:00 2010 m.. -rwxrwxrwx 0
0
16416573
<part2.img-_IDE_2~1.GIF-dead-16416573>
4993 m.. -rwxrwxrwx 0
0
16416548 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
_IDE_1~1.GIF-dead-16416548>
Sun Jan 24 1999 18:10:02
734 ..c -rwxrwxrwx 0
0
18497843
<part2.img-_IDE_6.GIF-dead-18497843>
3719 ..c -rwxrwxrwx 0
0
16329833 <part2.img_IDE_4~1.GIF-dead-16329833>
Sun Jan 24 1999 18:10:04 3719 m.. -rwxrwxrwx 0
0
16329833
<part2.img-_IDE_4~1.GIF-dead-16329833>
734 m.. -rwxrwxrwx 0
0
18497843 <part2.img_IDE_6.GIF-dead-18497843>
Sun Jan 24 1999 18:10:10 11922 ..c -rwxrwxrwx 0
0
16329836
<part2.img-_CI_CO~1.HTM-dead-16329836>
Sun Jan 24 1999 18:10:12 11922 m.. -rwxrwxrwx 0
0
16329836
<part2.img-_CI_CO~1.HTM-dead-16329836>
Sun Jan 24 1999 18:12:04 13667 ..c -rwxrwxrwx 0
0
16329839
<part2.img-_CI_TI~1.HTM-dead-16329839>
Sun Jan 24 1999 18:12:06 2016 ..c -rwxrwxrwx 0
0
18497985
<part2.img-_EADE~13.GIF-dead-18497985>
13667 m.. -rwxrwxrwx 0
0
16329839 <part2.img_CI_TI~1.HTM-dead-16329839>
Sun Jan 24 1999 18:12:08 1091 ..c -rwxrwxrwx 0
0
16329842
<part2.img-_EADE~11.GIF-dead-16329842>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
2016 m.. -rwxrwxrwx 0
0
18497985 <part2.img_EADE~13.GIF-dead-18497985>
1846 ..c -rwxrwxrwx 0
0
16329850 <part2.img_IDE_3~1.GIF-dead-16329850>
1067 ..c -rwxrwxrwx 0
0
16416579 <part2.img_EADER~7.GIF-dead-16416579>
2025 ..c -rwxrwxrwx 0
0
18497988 <part2.img_IDE_2~1.GIF-dead-18497988>
Sun Jan 24 1999 18:12:10 1846 m.. -rwxrwxrwx 0
0
16329850
<part2.img-_IDE_3~1.GIF-dead-16329850>
1067 m.. -rwxrwxrwx 0
0
16416579 <part2.img_EADER~7.GIF-dead-16416579>
2025 m.. -rwxrwxrwx 0
0
18497988 <part2.img_IDE_2~1.GIF-dead-18497988>
1091 m.. -rwxrwxrwx 0
0
16329842 <part2.img_EADE~11.GIF-dead-16329842>
Sun Jan 24 1999 18:13:44 1132 ..c -rwxrwxrwx 0
0
18497851
<part2.img-_EDBTN~1.GIF-dead-18497851>
Sun Jan 24 1999 18:13:46 1082 ..c -rwxrwxrwx 0
0
18497953
<part2.img-_EDBTN_H.GIF-dead-18497953>
1527 ..c -rwxrwxrwx 0
0
16329853 <part2.img_EDBTN~1.GIF-dead-16329853>
1132 m.. -rwxrwxrwx 0
0
18497851 <part2.img_EDBTN~1.GIF-dead-18497851>
Sun Jan 24 1999 18:13:48 1527 m.. -rwxrwxrwx 0
0
16329853
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
<part2.img-_EDBTN~1.GIF-dead-16329853>
1082 m.. -rwxrwxrwx 0
0
18497953 <part2.img_EDBTN_H.GIF-dead-18497953>
1538 ..c -rwxrwxrwx 0
0
18497991 <part2.img_EDBTN~2.GIF-dead-18497991>
Sun Jan 24 1999 18:13:50 1538 m.. -rwxrwxrwx 0
0
18497991
<part2.img-_EDBTN~2.GIF-dead-18497991>
Sun Jan 24 1999 18:14:40 2085 ..c -rwxrwxrwx 0
0
16416591
<part2.img-_EADER~8.GIF-dead-16416591>
Sun Jan 24 1999 18:14:42 1087 ..c -rwxrwxrwx 0
0
18497994
<part2.img-_EADE~14.GIF-dead-18497994>
2085 m.. -rwxrwxrwx 0
0
16416591 <part2.img_EADER~8.GIF-dead-16416591>
1770 ..c -rwxrwxrwx 0
0
16329856 <part2.img_EADE~12.GIF-dead-16329856>
Sun Jan 24 1999 18:14:44 4993 ..c -rwxrwxrwx 0
0
18497997
<part2.img-_IDE_1~1.GIF-dead-18497997>
2515 ..c -rwxrwxrwx 0
0
16329858 <part2.img_OGO_C~1.GIF-dead-16329858>
1770 m.. -rwxrwxrwx 0
0
16329856 <part2.img_EADE~12.GIF-dead-16329856>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
2630 ..c -rwxrwxrwx 0
0
18497963 <part2.img_OGO_WIZ.GIF-dead-18497963>
1087 m.. -rwxrwxrwx 0
0
18497994 <part2.img_EADE~14.GIF-dead-18497994>
Sun Jan 24 1999 18:14:46 1016 ..c -rwxrwxrwx 0
0
16416528
<part2.img-_OYA.GIF-dead-16416528>
4993 m.. -rwxrwxrwx 0
0
18497997 <part2.img_IDE_1~1.GIF-dead-18497997>
2515 m.. -rwxrwxrwx 0
0
16329858 <part2.img_OGO_C~1.GIF-dead-16329858>
2774 ..c -rwxrwxrwx 0
0
16416594 <part2.img_OGO_M~1.GIF-dead-16416594>
2630 m.. -rwxrwxrwx 0
0
18497963 <part2.img_OGO_WIZ.GIF-dead-18497963>
Sun Jan 24 1999 18:14:48 2774 m.. -rwxrwxrwx 0
0
16416594
<part2.img-_OGO_M~1.GIF-dead-16416594>
1016 m.. -rwxrwxrwx 0
0
16416528 <part2.img_OYA.GIF-dead-16416528>
Sun Jan 24 1999 18:15:16 1703 ..c -rwxrwxrwx 0
0
18497967
<part2.img-_PCOMING.GIF-dead-18497967>
Sun Jan 24 1999 18:15:18 1703 m.. -rwxrwxrwx 0
0
18497967
<part2.img-_PCOMING.GIF-dead-18497967>
Sun Jan 24 1999 18:15:28 2080 ..c -rwxrwxrwx 0
0
18498007
<part2.img-_OYASL~1.GIF-dead-18498007>
Sun Jan 24 1999 18:15:30 2080 m.. -rwxrwxrwx 0
0
18498007
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
<part2.img-_OYASL~1.GIF-dead-18498007>
Sat Feb 06 1999 15:04:54 2576 ..c -rwxrwxrwx 0
0
16416582
<part2.img-_P_GRE~1.GIF-dead-16416582>
Sat Feb 06 1999 15:04:56 2576 m.. -rwxrwxrwx 0
0
16416582
<part2.img-_P_GRE~1.GIF-dead-16416582>
Sat Feb 06 1999 15:05:08 8446 ..c -rwxrwxrwx 0
0
18498010
<part2.img-_EARCH~1.HTM-dead-18498010>
Sat Feb 06 1999 15:05:10 8446 m.. -rwxrwxrwx 0
0
18498010
<part2.img-_EARCH~1.HTM-dead-18498010>
Sat Feb 06 1999 15:05:14 8867 ..c -rwxrwxrwx 0
0
16329861
<part2.img-_C_PEN~1.HTM-dead-16329861>
Sat Feb 06 1999 15:05:16 8918 ..c -rwxrwxrwx 0
0
30191109
<part2.img-_1GETT~1.GIF-dead-30191109>
8867 m.. -rwxrwxrwx 0
0
16329861 <part2.img_C_PEN~1.HTM-dead-16329861>
Sat Feb 06 1999 15:05:18 1222 ..c -rwxrwxrwx 0
0
16329863
<part2.img-_.GIF-dead-16329863>
Sat Feb 06 1999 15:05:20
720 ..c -rwxrwxrwx 0
0
16416597
<part2.img-_F_88X~1.GIF-dead-16416597>
1222 m.. -rwxrwxrwx 0
0
16329863 <part2.img-_.GIFdead-16329863>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
8918 m.. -rwxrwxrwx 0
0
30191109 <part2.img_1GETT~1.GIF-dead-30191109>
Sat Feb 06 1999 15:05:22
720 m.. -rwxrwxrwx 0
0
16416597
<part2.img-_F_88X~1.GIF-dead-16416597>
Sat Feb 06 1999 15:05:26 7937 ..c -rwxrwxrwx 0
0
16329866
<part2.img-_RODUC~1.HTM-dead-16329866>
Sat Feb 06 1999 15:05:28 6939 ..c -rwxrwxrwx 0
0
16416533
<part2.img-_ANDR.GIF-dead-16416533>
7937 m.. -rwxrwxrwx 0
0
16329866 <part2.img_RODUC~1.HTM-dead-16329866>
Sat Feb 06 1999 15:05:30 6939 m.. -rwxrwxrwx 0
0
16416533
<part2.img-_ANDR.GIF-dead-16416533>
Sat Feb 06 1999 19:09:14 2442 ..c -rwxrwxrwx 0
0
18497979
<part2.img-_P_FTD32.GIF-dead-18497979>
Sat Feb 06 1999 19:09:16 2442 m.. -rwxrwxrwx 0
0
18497979
<part2.img-_P_FTD32.GIF-dead-18497979>
Sat Feb 06 1999 19:09:26 13340 ..c -rwxrwxrwx 0
0
16329869
<part2.img-_EARCH~4.HTM-dead-16329869>
Sat Feb 06 1999 19:09:28 9128 ..c -rwxrwxrwx 0
0
18498032
<part2.img-_HENEV~1.GIF-dead-18498032>
1253 ..c -rwxrwxrwx 0
0
16416600 <part2.img-_8X31~1.GIF-dead-16416600>
Sat Feb 06 1999 19:09:30 1253 m.. -rwxrwxrwx 0
0
16416600
<part2.img-_8X31-~1.GIF-dead-16416600>
Sat Feb 06 1999 19:09:32 9128 m.. -rwxrwxrwx 0
0
18498032
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
<part2.img-_HENEV~1.GIF-dead-18498032>
13340 m.. -rwxrwxrwx 0
0
16329869 <part2.img_EARCH~4.HTM-dead-16329869>
Sat Feb 06 1999 19:11:32 7406 ..c -rwxrwxrwx 0
0
30191112
<part2.img-_IFT_R~1.HTM-dead-30191112>
Sat Feb 06 1999 19:11:34 7404 ..c -rwxrwxrwx 0
0
16329896
<part2.img-_UY_46~1.GIF-dead-16329896>
7406 m.. -rwxrwxrwx 0
0
30191112 <part2.img_IFT_R~1.HTM-dead-30191112>
Sat Feb 06 1999 19:11:36 7404 m.. -rwxrwxrwx 0
0
16329896
<part2.img-_UY_46~1.GIF-dead-16329896>
Sat Feb 06 1999 19:12:00 8340 ..c -rwxrwxrwx 0
0
16416607
<part2.img-_IFT_R~2.HTM-dead-16416607>
Sat Feb 06 1999 19:12:02 8340 m.. -rwxrwxrwx 0
0
16416607
<part2.img-_IFT_R~2.HTM-dead-16416607>
Sat Feb 13 1999 23:00:00 3788 .a. -rwxrwxrwx 0
0
30191160
<part2.img-_OVER.GIF-dead-30191160>
8828 .a. -rwxrwxrwx 0
0
30191326 <part2.img_UDWK1~1.HTM-dead-30191326>
953 .a. -rwxrwxrwx 0
0
16416285 <part2.img_B01569_.GIF-dead-16416285>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
3516 .a. -rwxrwxrwx 0
0
16569818 <part2.img_DAC31~1.GIF-dead-16569818>
43 .a. -rwxrwxrwx 0
0
18497772 <part2.img_OT.GIF-dead-18497772>
4301 .a. -rwxrwxrwx 0
0
18497592 <part2.img_2MB.GIF-dead-18497592>
4235 .a. -rwxrwxrwx 0
0
30191446 <part2.img_ASSAU.GIF-dead-30191446>
3441 .a. -rwxrwxrwx 0
0
18497863 <part2.img_ACK1~1.JPE-dead-18497863>
23607 .a. -rwxrwxrwx 0
0
30191332 <part2.img_OBNCE~1.JPE-dead-30191332>
3994 .a. -rwxrwxrwx 0
0
18497567 <part2.img_SUS1.GIF-dead-18497567>
2396 .a. -rwxrwxrwx 0
0
18497822 <part2.img_TN_CO~1.GIF-dead-18497822>
5943 .a. -rwxrwxrwx 0
0
30191226 <part2.img_UBORN~1.JPE-dead-30191226>
14155 .a. -rwxrwxrwx 0
0
16416401 <part2.img_344.GIF-dead-16416401>
8263 .a. -rwxrwxrwx 0
0
30191338 <part2.img_ISH.GIF-dead-30191338>
2118 .a. -rwxrwxrwx 0
0
16569553 <part2.img_NLY.GIF-dead-16569553>
5895 .a. -rwxrwxrwx 0
0
18497594 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
_XXT.GIF-dead-18497594>
4352 .a. -rwxrwxrwx 0
0
16416294 <part2.img_6MB.GIF-dead-16416294>
9105 .a. -rwxrwxrwx 0
0
16416729 <part2.img_HYLLE~1.JPE-dead-16416729>
3438 .a. -rwxrwxrwx 0
0
16416672 <part2.img_ERGTE~1.JPE-dead-16416672>
1832 .a. -rwxrwxrwx 0
0
16569474 <part2.img_ONTEN~1.HTM-dead-16569474>
2944 .a. -rwxrwxrwx 0
0
16330187 <part2.img_OC_FI~1.HTM-dead-16330187>
4293 .a. -rwxrwxrwx 0
0
30191442 <part2.img_IF(1).GIF-dead-30191442>
6452 .a. -rwxrwxrwx 0
0
30191350 <part2.img-_3.GIFdead-30191350>
3149 .a. -rwxrwxrwx 0
0
16569534 <part2.img_09C08.GIF-dead-16569534>
7406 .a. -rwxrwxrwx 0
0
30191112 <part2.img_IFT_R~1.HTM-dead-30191112>
2841 .a. -rwxrwxrwx 0
0
18497929 <part2.img_N_ST5~1.JPE-dead-18497929>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
1373 .a. -rwxrwxrwx 0
0
16120390 <part2.img_UTTON6.GIF-dead-16120390>
10918 .a. -rwxrwxrwx 0
0
16120465 <part2.img_090T~2.JPE-dead-16120465>
7647 .a. -rwxrwxrwx 0
0
30191343 <part2.img-_1.GIFdead-30191343>
1538 .a. -rwxrwxrwx 0
0
18497991 <part2.img_EDBTN~2.GIF-dead-18497991>
734 .a. -rwxrwxrwx 0
0
18497843 <part2.img_IDE_6.GIF-dead-18497843>
591 .a. -rwxrwxrwx 0
0
18497668 <part2.img_IAMOND.GIF-dead-18497668>
6681 .a. -rwxrwxrwx 0
0
30191178 <part2.img_ALLUC~1.JPE-dead-30191178>
4744 .a. -rwxrwxrwx 0
0
18497891 <part2.img_N_FA8~1.JPE-dead-18497891>
6778 .a. -rwxrwxrwx 0
0
30191156 <part2.img_OLYCH~1.JPE-dead-30191156>
1394 .a. -rwxrwxrwx 0
0
16569700 <part2.img_EDLIS~1.HTM-dead-16569700>
4258 .a. -rwxrwxrwx 0
0
30191149 <part2.img_AMINE~1.JPE-dead-30191149>
10161 .a. -rwxrwxrwx 0
0
16120533 <part2.img_ETIMA~1.GIF-dead-16120533>
2259 .a. -rwxrwxrwx 0
0
16416732 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
_EPHAL~1.HTM-dead-16416732>
6030 .a. -rwxrwxrwx 0
0
16416526 <part2.img_EADER~5.GIF-dead-16416526>
3381 .a. -rwxrwxrwx 0
0
30191360 <part2.img_ARINE~1.HTM-dead-30191360>
9967 .a. -rwxrwxrwx 0
0
16416550 <part2.img_IGHSP~1.GIF-dead-16416550>
3939 .a. -rwxrwxrwx 0
0
18497946 <part2.img_N_TO7~1.JPE-dead-18497946>
3085 .a. -rwxrwxrwx 0
0
16569741 <part2.img_EDSWEEP.GIF-dead-16569741>
2922 .a. -rwxrwxrwx 0
0
16569747 <part2.img_BRAWN~2.GIF-dead-16569747>
67 .a. -rwxrwxrwx 0
0
30191259 <part2.img_RIANGLE.GIF-dead-30191259>
11648 .a. -rwxrwxrwx 0
0
18498022 <part2.img_CATEG~1.GIF-dead-18498022>
3531 .a. -rwxrwxrwx 0
0
18497817 <part2.img_ENTER~1.JPE-dead-18497817>
2099 .a. -rwxrwxrwx 0
0
16120361 <part2.img_ISH~1.HTM-dead-16120361>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
8446 .a. -rwxrwxrwx 0
0
18498010 <part2.img_EARCH~1.HTM-dead-18498010>
1064 .a. -rwxrwxrwx 0
0
18497951 <part2.img_EADE~12.GIF-dead-18497951>
4107 .a. -rwxrwxrwx 0
0
30191170 <part2.img_PHELO~1.JPE-dead-30191170>
3215 .a. -rwxrwxrwx 0
0
18497636 <part2.img_OMEWO~1.GIF-dead-18497636>
12681 .a. -rwxrwxrwx 0
0
16416588 <part2.img_LUEBAR.GIF-dead-16416588>
2784 .a. -rwxrwxrwx 0
0
16416359 <part2.img-_.GIFdead-16416359>
2941 .a. -rwxrwxrwx 0
0
30191193 <part2.img_HIP~1.CLA-dead-30191193>
317 .a. -rwxrwxrwx 0
0
18498018 <part2.img_RT.GIF-dead-18498018>
4820 .a. -rwxrwxrwx 0
0
16416629 <part2.img_ELIBE~1.JPE-dead-16416629>
8340 .a. -rwxrwxrwx 0
0
16416607 <part2.img_IFT_R~2.HTM-dead-16416607>
6324 .a. -rwxrwxrwx 0
0
16569428 <part2.img_10074~1.HTM-dead-16569428>
781 .a. -rwxrwxrwx 0
0
16569560 <part2.img_HATRO~1.GIF-dead-16569560>
2028 .a. -rwxrwxrwx 0
0
16416686 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
_SCOEC~1.HTM-dead-16416686>
8384 .a. -rwxrwxrwx 0
0
30191478 <part2.img_IRHIN~1.HTM-dead-30191478>
378 .a. -rwxrwxrwx 0
0
16569712 <part2.img_ASTER.CSS-dead-16569712>
11784 .a. -rwxrwxrwx 0
0
16120567 <part2.img_FOOTERL.GIF-dead-16120567>
2412 .a. -rwxrwxrwx 0
0
16416678 <part2.img_ENDRO~1.HTM-dead-16416678>
13715 .a. -rwxrwxrwx 0
0
16416698 <part2.img_AVIBTNS.GIF-dead-16416698>
4061 .a. -rwxrwxrwx 0
0
30191599 <part2.img_ELCOME4.GIF-dead-30191599>
3873 .a. -rwxrwxrwx 0
0
16416640 <part2.img_ENDRO~1.JPE-dead-16416640>
3559 .a. -rwxrwxrwx 0
0
30191147 <part2.img_ONDOC~1.JPE-dead-30191147>
2528 .a. -rwxrwxrwx 0
0
16416305 <part2.img_ORSAI~1.GIF-dead-16416305>
22641 .a. -rwxrwxrwx 0
0
16120381 <part2.img_OOKS.GIF-dead-16120381>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
8100 .a. -rwxrwxrwx 0
0
16416443 <part2.img_RS_LO~1.JPE-dead-16416443>
855 .a. -rwxrwxrwx 0
0
16569424 <part2.img_INE.GIF-dead-16569424>
2734 .a. -rwxrwxrwx 0
0
16416335 <part2.img-_.GIFdead-16416335>
5805 .a. -rwxrwxrwx 0
0
18497712 <part2.img_XPULS~1.JPE-dead-18497712>
8337 .a. -rwxrwxrwx 0
0
16416643 <part2.img_RMINT~1.JPE-dead-16416643>
4642 .a. -rwxrwxrwx 0
0
18498029 <part2.img_OWERR~1.HTM-dead-18498029>
145 .a. -rwxrwxrwx 0
0
16416609 <part2.img_EWH.GIF-dead-16416609>
5253 .a. -rwxrwxrwx 0
0
18497783 <part2.img_OW~1.HTM-dead-18497783>
13112 .a. -rwxrwxrwx 0
0
16416331 <part2.img_ENU~1.HTM-dead-16416331>
3492 .a. -rwxrwxrwx 0
0
16416681 <part2.img_ENDRO~3.JPE-dead-16416681>
3282 .a. -rwxrwxrwx 0
0
18497920 <part2.img_N_ST1~1.JPE-dead-18497920>
2778 .a. -rwxrwxrwx 0
0
30191334 <part2.img_UDIWK~1.HTM-dead-30191334>
3544 .a. -rwxrwxrwx 0
0
30191287 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
_ICTON~1.HTM-dead-30191287>
3012 .a. -rwxrwxrwx 0
0
30191415 <part2.img_RIPLI~1.HTM-dead-30191415>
9440 .a. -rwxrwxrwx 0
0
16416760 <part2.img_NV117~1.JPE-dead-16416760>
3292 .a. -rwxrwxrwx 0
0
16416646 <part2.img_ORIDN~1.HTM-dead-16416646>
10649 .a. -rwxrwxrwx 0
0
16120538 <part2.img_UG24_~1.GIF-dead-16120538>
2905 .a. -rwxrwxrwx 0
0
30191521 <part2.img_SSTAT~1.HTM-dead-30191521>
6147 .a. -rwxrwxrwx 0
0
16569827 <part2.img_DCSSE~1.GIF-dead-16569827>
484 .a. -rwxrwxrwx 0
0
16120359 <part2.img_OGO.GIF-dead-16120359>
2085 .a. -rwxrwxrwx 0
0
16416591 <part2.img_EADER~8.GIF-dead-16416591>
3791 .a. -rwxrwxrwx 0
0
16416714 <part2.img_LYSCH~1.JPE-dead-16416714>
1263 .a. -rwxrwxrwx 0
0
16569417 <part2.img_LEARI~1.GIF-dead-16569417>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
2955 .a. -rwxrwxrwx 0
0
16569371 <part2.img-_LVIEW.GIF-dead-16569371>
14198 .a. -rwxrwxrwx 0
0
30191291 <part2.img_OTSAR~1.JPE-dead-30191291>
336 .a. -rwxrwxrwx 0
0
30191277 <part2.img_KEYS~1.HTM-dead-30191277>
944 .a. -rwxrwxrwx 0
0
30191380 <part2.img_AWR.GIF-dead-30191380>
3204 .a. -rwxrwxrwx 0
0
30191486 <part2.img__THEF~1.GIF-dead-30191486>
4698 .a. -rwxrwxrwx 0
0
16569374 <part2.img_OBSHE~1.JPG-dead-16569374>
5087 .a. -rwxrwxrwx 0
0
18497598 <part2.img_C100.GIF-dead-18497598>
3921 .a. -rwxrwxrwx 0
0
18497874 <part2.img_N_AC1~3.JPE-dead-18497874>
3632 .a. -rwxrwxrwx 0
0
18497868 <part2.img_N_AC1~1.JPE-dead-18497868>
1558 .a. -rwxrwxrwx 0
0
18497651 <part2.img_GBAR.GIF-dead-18497651>
3964 .a. -rwxrwxrwx 0
0
18497539 <part2.img_ECHINFO.GIF-dead-18497539>
1898 .a. -rwxrwxrwx 0
0
30191282 <part2.img_EFERE~2.HTM-dead-30191282>
2576 .a. -rwxrwxrwx 0
0
16416582 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
_P_GRE~1.GIF-dead-16416582>
2763 .a. -rwxrwxrwx 0
0
16416357 <part2.img-_.GIFdead-16416357>
771 .a. -rwxrwxrwx 0
0
16569426 <part2.img_THERL~1.GIF-dead-16569426>
4831 .a. -rwxrwxrwx 0
0
18497596 <part2.img_DO.GIF-dead-18497596>
3553 .a. -rwxrwxrwx 0
0
18497688 <part2.img_FOOTERR.GIF-dead-18497688>
3426 .a. -rwxrwxrwx 0
0
18497926 <part2.img_N_ST1~3.JPE-dead-18497926>
1253 .a. -rwxrwxrwx 0
0
16416600 <part2.img-_8X31~1.GIF-dead-16416600>
2762 .a. -rwxrwxrwx 0
0
16416367 <part2.img_ENUBAR.GIF-dead-16416367>
673 .a. -rwxrwxrwx 0
0
16569386 <part2.img_OWERE~2.GIF-dead-16569386>
10349 .a. -rwxrwxrwx 0
0
16416631 <part2.img_TIS~1.HTM-dead-16416631>
2985 .a. -rwxrwxrwx 0
0
18497893 <part2.img_ACK2(1).GIF-dead-18497893>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
7911 .a. -rwxrwxrwx 0
0
16416660 <part2.img_HELLF~1.HTM-dead-16416660>
8645 .a. -rwxrwxrwx 0
0
16416602 <part2.img_DM_2~1.HTM-dead-16416602>
4245 .a. -rwxrwxrwx 0
0
30191261 <part2.img_OR_AD.GIF-dead-30191261>
13028 .a. -rwxrwxrwx 0
0
16416568 <part2.img_KMOSA~1.GIF-dead-16416568>
11417 .a. -rwxrwxrwx 0
0
16416403 <part2.img_~1.HTM-dead-16416403>
1366 .a. -rwxrwxrwx 0
0
16416260 <part2.img_X.GIF-dead-16416260>
3992 .a. -rwxrwxrwx 0
0
30191376 <part2.img_ORLD1~1.GIF-dead-30191376>
1500 .a. -rwxrwxrwx 0
0
16416637 <part2.img_UDIBR~1.HTM-dead-16416637>
13071 .a. -rwxrwxrwx 0
0
16416333 <part2.img_ENDOR.GIF-dead-16416333>
13264 .a. -rwxrwxrwx 0
0
16416263 <part2.img_OTHER~1.GIF-dead-16416263>
2630 .a. -rwxrwxrwx 0
0
18497963 <part2.img_OGO_WIZ.GIF-dead-18497963>
1232 .a. -rwxrwxrwx 0
0
16416615 <part2.img_EW(3).GIF-dead-16416615>
1774 .a. -rwxrwxrwx 0
0
30191362 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
_ADELINE.GIF-dead-30191362>
3562 .a. -rwxrwxrwx 0
0
16416513 <part2.img_ENTER~1.JPE-dead-16416513>
6602 .a. -rwxrwxrwx 0
0
16416394 <part2.img_HHOTE~1.HTM-dead-16416394>
2876 .a. -rwxrwxrwx 0
0
18497735 <part2.img_ICTUR~1.HTM-dead-18497735>
4473 .a. -rwxrwxrwx 0
0
16416507 <part2.img_EADER~4.JPE-dead-16416507>
5647 .a. -rwxrwxrwx 0
0
16569799 <part2.img_A97A02.GIF-dead-16569799>
768 .a. -rwxrwxrwx 0
0
30191115 <part2.img_OBIA_~1.HTM-dead-30191115>
3807 .a. -rwxrwxrwx 0
0
16569744 <part2.img_BRAWN~1.GIF-dead-16569744>
2748 .a. -rwxrwxrwx 0
0
16416511 <part2.img_TN_FACT.GIF-dead-16416511>
5636 .a. -rwxrwxrwx 0
0
30191336 <part2.img_ROP2S.GIF-dead-30191336>
2013 .a. -rwxrwxrwx 0
0
16120394 <part2.img_INILOGO.GIF-dead-16120394>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
3389 .a. -rwxrwxrwx 0
0
16569830 <part2.img-_5MUG~1.JPE-dead-16569830>
6718 .a. -rwxrwxrwx 0
0
16416684 <part2.img_ORNCA~1.JPE-dead-16416684>
2738 .a. -rwxrwxrwx 0
0
18497620 <part2.img-_.GIFdead-18497620>
5509 .a. -rwxrwxrwx 0
0
18497658 <part2.img_ENOMT~1.GIF-dead-18497658>
3679 .a. -rwxrwxrwx 0
0
18497898 <part2.img_N_BW1~1.JPE-dead-18497898>
103 .a. -rwxrwxrwx 0
0
16416521 <part2.img_EADER~3.GIF-dead-16416521>
1370 .a. -rwxrwxrwx 0
0
30191354 <part2.img_UTTON4.GIF-dead-30191354>
2426 .a. -rwxrwxrwx 0
0
18497849 <part2.img_HOWAD2.GIF-dead-18497849>
1884 .a. -rwxrwxrwx 0
0
30191303 <part2.img_NOWYO~1.HTM-dead-30191303>
10594 .a. -rwxrwxrwx 0
0
30191142 <part2.img_NDEX_~3.HTM-dead-30191142>
13547 .a. -rwxrwxrwx 0
0
16416693 <part2.img_KGD_D~1.JPE-dead-16416693>
3513 .a. -rwxrwxrwx 0
0
16569854 <part2.img_OM_AR~1.GIF-dead-16569854>
4521 .a. -rwxrwxrwx 0
0
30191233 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
_RCOLF~1.JPE-dead-30191233>
13400 .a. -rwxrwxrwx 0
0
16120344 <part2.img_QUARI~1.HTM-dead-16120344>
674 .a. -rwxrwxrwx 0
0
16416701 <part2.img_RMINA~1.HTM-dead-16416701>
3609 .a. -rwxrwxrwx 0
0
18497642 <part2.img_C~1.HTM-dead-18497642>
220 .a. -rwxrwxrwx 0
0
16569636 <part2.img_NDEX_~3.GIF-dead-16569636>
1884 .a. -rwxrwxrwx 0
0
16416617 <part2.img_OLORLIN.GIF-dead-16416617>
4263 .a. -rwxrwxrwx 0
0
18497810 <part2.img_ICS~1.HTM-dead-18497810>
4221 .a. -rwxrwxrwx 0
0
30191187 <part2.img_ACELB~1.JPE-dead-30191187>
54511 .a. -rwxrwxrwx 0
0
16120366 <part2.img_EARTL~1.JPE-dead-16120366>
10325 .a. -rwxrwxrwx 0
0
16416300 <part2.img_NDEX(2).HTM-dead-16416300>
10133 .a. -rwxrwxrwx 0
0
16416604 <part2.img_OOLS~1.HTM-dead-16416604>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
6939 .a. -rwxrwxrwx 0
0
16416533 <part2.img_ANDR.GIF-dead-16416533>
5409 .a. -rwxrwxrwx 0
0
18497781 <part2.img_NTERS~2.CLA-dead-18497781>
3370 .a. -rwxrwxrwx 0
0
16569551 <part2.img_NFO~1.HTM-dead-16569551>
1987 .a. -rwxrwxrwx 0
0
18497664 <part2.img_EARCH~2.GIF-dead-18497664>
3489 .a. -rwxrwxrwx 0
0
16569857 <part2.img_IEWPR~1.GIF-dead-16569857>
5586 .a. -rwxrwxrwx 0
0
16416663 <part2.img_HECPE~1.JPE-dead-16416663>
3487 .a. -rwxrwxrwx 0
0
18497871 <part2.img_N_AC1~2.JPE-dead-18497871>
5373 .a. -rwxrwxrwx 0
0
16569644 <part2.img_REECA~1.GIF-dead-16569644>
1229 .a. -rwxrwxrwx 0
0
16416456 <part2.img_ABLE-~1.GIF-dead-16416456>
9263 .a. -rwxrwxrwx 0
0
16120435 <part2.img_GATE_~2.GIF-dead-16120435>
179 .a. -rwxrwxrwx 0
0
16569674 <part2.img_NDEX_~7.GIF-dead-16569674>
3204 .a. -rwxrwxrwx 0
0
30191213 <part2.img_OMSTA~1.JPE-dead-30191213>
4326 .a. -rwxrwxrwx 0
0
16120324 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
_UDI02.GIF-dead-16120324>
720 .a. -rwxrwxrwx 0
0
16416597 <part2.img_F_88X~1.GIF-dead-16416597>
14670 .a. -rwxrwxrwx 0
0
16416745 <part2.img_ITLE4.GIF-dead-16416745>
1952 .a. -rwxrwxrwx 0
0
16569438 <part2.img_F4C.GIF-dead-16569438>
3191 .a. -rwxrwxrwx 0
0
30191314 <part2.img__HOLL~1.HTM-dead-30191314>
3648 .a. -rwxrwxrwx 0
0
16569767 <part2.img_HUGAI.GIF-dead-16569767>
6555 .a. -rwxrwxrwx 0
0
16569490 <part2.img_LUE_S~1.JPE-dead-16569490>
3424 .a. -rwxrwxrwx 0
0
16569527 <part2.img_OCATI~2.HTM-dead-16569527>
6861 .a. -rwxrwxrwx 0
0
30191586 <part2.img_BSOLU~1.HTM-dead-30191586>
4988 .a. -rwxrwxrwx 0
0
16416666 <part2.img_ENDRO~2.JPE-dead-16416666>
100 .a. -rwxrwxrwx 0
0
16569841 <part2.img_IGHT.GIF-dead-16569841>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
954 .a. -rwxrwxrwx 0
0
18497542 <part2.img_OTHER~1.HTM-dead-18497542>
161 .a. -rwxrwxrwx 0
0
16569592 <part2.img_NDEX_~2.GIF-dead-16569592>
57 .a. -rwxrwxrwx 0
0
16569739 <part2.img_URGAR~1.GIF-dead-16569739>
2281 .a. -rwxrwxrwx 0
0
30191308 <part2.img_LATWA~1.HTM-dead-30191308>
2842 .a. -rwxrwxrwx 0
0
18497934 <part2.img_OYS~1.HTM-dead-18497934>
3906 .a. -rwxrwxrwx 0
0
30191312 <part2.img_IGNSO~1.HTM-dead-30191312>
2810 .a. -rwxrwxrwx 0
0
16569846 <part2.img_OME(1~2.HTM-dead-16569846>
1082 .a. -rwxrwxrwx 0
0
18497953 <part2.img_EDBTN_H.GIF-dead-18497953>
2025 .a. -rwxrwxrwx 0
0
18497988 <part2.img_IDE_2~1.GIF-dead-18497988>
6465 .a. -rwxrwxrwx 0
0
16416726 <part2.img_OBIGS~1.JPE-dead-16416726>
9674 .a. -rwxrwxrwx 0
0
16416279 <part2.img_PCREA~1.GIF-dead-16416279>
179 .a. -rwxrwxrwx 0
0
16416634 <part2.img_OUNTE~2.GIF-dead-16416634>
1887 .a. -rwxrwxrwx 0
0
18497645 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
_ORSAI~1.HTM-dead-18497645>
1231 .a. -rwxrwxrwx 0
0
16569408 <part2.img_RGANI~1.GIF-dead-16569408>
6569 .a. -rwxrwxrwx 0
0
16416281 <part2.img_B00760_.GIF-dead-16416281>
3139 .a. -rwxrwxrwx 0
0
18497901 <part2.img_N_BW1~2.JPE-dead-18497901>
887 .a. -rwxrwxrwx 0
0
16569849 <part2.img_IGHT_~1.GIF-dead-16569849>
11336 .a. -rwxrwxrwx 0
0
16120341 <part2.img_AYTONA.GIF-dead-16120341>
1126 .a. -rwxrwxrwx 0
0
30191341 <part2.img_QUARI~2.HTM-dead-30191341>
3007 .a. -rwxrwxrwx 0
0
16569754 <part2.img_BRAWN~5.GIF-dead-16569754>
1171 .a. -rwxrwxrwx 0
0
30191358 <part2.img_UTTON8.GIF-dead-30191358>
5132 .a. -rwxrwxrwx 0
0
16569789 <part2.img_A97C04.GIF-dead-16569789>
189 .a. -rwxrwxrwx 0
0
16569434 <part2.img_F3.GIF-dead-16569434>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
5149 .a. -rwxrwxrwx 0
0
18497556 <part2.img_5PORT.GIF-dead-18497556>
2730 .a. -rwxrwxrwx 0
0
16569832 <part2.img-_KAR3~1.JPE-dead-16569832>
1260 .a. -rwxrwxrwx 0
0
30191241 <part2.img_TART~1.HTM-dead-30191241>
5340 .a. -rwxrwxrwx 0
0
16416297 <part2.img_DRAME~1.GIF-dead-16416297>
2734 .a. -rwxrwxrwx 0
0
16569436 <part2.img_R_MGMIA.GIF-dead-16569436>
653 .a. -rwxrwxrwx 0
0
16569544 <part2.img_MDI_H~1.XBM-dead-16569544>
4620 .a. -rwxrwxrwx 0
0
30191210 <part2.img_AVORI~1.JPE-dead-30191210>
6055 .a. -rwxrwxrwx 0
0
16416711 <part2.img_SCOST~2.HTM-dead-16416711>
3083 .a. -rwxrwxrwx 0
0
18498016 <part2.img_UMPER01.GIF-dead-18498016>
5729 .a. -rwxrwxrwx 0
0
30191201 <part2.img_ATRAU~1.JPE-dead-30191201>
215 .a. -rwxrwxrwx 0
0
16569678 <part2.img_NDEX_~8.GIF-dead-16569678>
9128 .a. -rwxrwxrwx 0
0
18498032 <part2.img_HENEV~1.GIF-dead-18498032>
539 .a. -rwxrwxrwx 0
0
16569454 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5 06E4 A169 4E46
_HSMINI.GIF-dead-16569454>
4827 .a. -rwxrwxrwx 0
0
16569682 <part2.img_K.GIF-dead-16569682>
1591 .a. -rwxrwxrwx 0
0
16569708 <part2.img_AP3.GIF-dead-16569708>
6012 .a. -rwxrwxrwx 0
0
16569350 <part2.img_EBGUIDE.GIF-dead-16569350>
2049 .a. -rwxrwxrwx 0
0
16416273 <part2.img_YAN~1.JPE-dead-16416273>
5178 .a. -rwxrwxrwx 0
0
30191545 <part2.img_YMAP.GIF-dead-30191545>
4929 .a. -rwxrwxrwx 0
0
16569479 <part2.img_OME_B~1.GIF-dead-16569479>
1781 .a. -rwxrwxrwx 0
0
16416519 <part2.img_OTTOM_5.GIF-dead-16416519>
471 .a. -rwxrwxrwx 0
0
16120368 <part2.img_LINE.GIF-dead-16120368>
3238 .a. -rwxrwxrwx 0
0
18497940 <part2.img_N_TO1~2.JPE-dead-18497940>
2500 .a. -rwxrwxrwx 0
0
16569771 <part2.img_PEC.GIF-dead-16569771>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
2654 .a. -rwxrwxrwx 0
0
30191301 <part2.img_NEIDA.GIF-dead-30191301>
4798 .a. -rwxrwxrwx 0
0
16569684 <part2.img_OPLINE.GIF-dead-16569684>
1087 .a. -rwxrwxrwx 0
0
18497994 <part2.img_EADE~14.GIF-dead-18497994>
3122 .a. -rwxrwxrwx 0
0
16569760 <part2.img_FPMA.GIF-dead-16569760>
4739 .a. -rwxrwxrwx 0
0
30191592 <part2.img_ALL5_~1.JPE-dead-30191592>
6147 .a. -rwxrwxrwx 0
0
16569821 <part2.img_DCSSEAL.GIF-dead-16569821>
2623 .a. -rwxrwxrwx 0
0
16569680 <part2.img_OP2.GIF-dead-16569680>
5634 .a. -rwxrwxrwx 0
0
16416462 <part2.img_BBUND~2.HTM-dead-16416462>
10820 .a. -rwxrwxrwx 0
0
16120797 <part2.img_IF.GIF-dead-16120797>
12741 .a. -rwxrwxrwx 0
0
16416536 <part2.img_EV001~1.GIF-dead-16416536>
4535 .a. -rwxrwxrwx 0
0
18497831 <part2.img_OLORBAR.GIF-dead-18497831>
6050 .a. -rwxrwxrwx 0
0
16569383 <part2.img_OUR111A.JPG-dead-16569383>
1515 .a. -rwxrwxrwx 0
0
16569443 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
_ORETO~1.GIF-dead-16569443>
5459 .a. -rwxrwxrwx 0
0
16569470 <part2.img_DABAR.GIF-dead-16569470>
3054 .a. -rwxrwxrwx 0
0
18497913 <part2.img_N_BW6~1.JPE-dead-18497913>
45 .a. -rwxrwxrwx 0
0
16569777 <part2.img_NV.GIF-dead-16569777>
10225 .a. -rwxrwxrwx 0
0
16416570 <part2.img_ECYCL~2.HTM-dead-16416570>
4094 .a. -rwxrwxrwx 0
0
30191483 <part2.img_OGIN_~1.HTM-dead-30191483>
455 .a. -rwxrwxrwx 0
0
16569355 <part2.img_OGETI~1.GIF-dead-16569355>
79 .a. -rwxrwxrwx 0
0
16569662 <part2.img_ARBUL2E.GIF-dead-16569662>
8016 .a. -rwxrwxrwx 0
0
18497631 <part2.img_AIS~1.HTM-dead-18497631>
794 .a. -rwxrwxrwx 0
0
16416501 <part2.img-_C.GIFdead-16416501>
2878 .a. -rwxrwxrwx 0
0
16569837 <part2.img-_5-T5~1.JPE-dead-16569837>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
10295 .a. -rwxrwxrwx 0
0
16416439 <part2.img_EADER~2.GIF-dead-16416439>
4750 .a. -rwxrwxrwx 0
0
16569795 <part2.img_A97C17.GIF-dead-16569795>
824 .a. -rwxrwxrwx 0
0
16569558 <part2.img_OOKST~1.GIF-dead-16569558>
3907 .a. -rwxrwxrwx 0
0
16569769 <part2.img_00.GIF-dead-16569769>
3270 .a. -rwxrwxrwx 0
0
18497932 <part2.img_N_ST9~1.JPE-dead-18497932>
2004 .a. -rwxrwxrwx 0
0
30191228 <part2.img_NASPI~1.HTM-dead-30191228>
5458 .a. -rwxrwxrwx 0
0
18497603 <part2.img_ITEGR~1.GIF-dead-18497603>
524 .a. -rwxrwxrwx 0
0
16569420 <part2.img_ONTAC~1.GIF-dead-16569420>
6383 .a. -rwxrwxrwx 0
0
16569710 <part2.img_APPER~1.HTM-dead-16569710>
2622 .a. -rwxrwxrwx 0
0
16569638 <part2.img_EDRIN~1.JPE-dead-16569638>
4837 .a. -rwxrwxrwx 0
0
16416739 <part2.img_KEYS~1.HTM-dead-16416739>
3883 .a. -rwxrwxrwx 0
0
30191607 <part2.img_IN_WWW1.GIF-dead-30191607>
3526 .a. -rwxrwxrwx 0
0
18497923 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
_N_ST1~2.JPE-dead-18497923>
469 .a. -rwxrwxrwx 0
0
16416524 <part2.img_EADER~4.GIF-dead-16416524>
4831 .a. -rwxrwxrwx 0
0
30191584 <part2.img_YA350~1.HTM-dead-30191584>
742 .a. -rwxrwxrwx 0
0
16569562 <part2.img_ONTACT.GIF-dead-16569562>
313 .a. -rwxrwxrwx 0
0
18497841 <part2.img_EADE~10.GIF-dead-18497841>
4216 .a. -rwxrwxrwx 0
0
18497880 <part2.img_N_AC9~1.JPE-dead-18497880>
2977 .a. -rwxrwxrwx 0
0
18497943 <part2.img_N_TO3~1.JPE-dead-18497943>
1308 .a. -rwxrwxrwx 0
0
16120392 <part2.img_UTTON11.GIF-dead-16120392>
1051 .a. -rwxrwxrwx 0
0
16569574 <part2.img_EADER~7.GIF-dead-16569574>
2781 .a. -rwxrwxrwx 0
0
18497614 <part2.img-_.GIFdead-18497614>
2774 .a. -rwxrwxrwx 0
0
16416594 <part2.img_OGO_M~1.GIF-dead-16416594>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
12228 .a. -rwxrwxrwx 0
0
16120339 <part2.img_EARCH~1.HTM-dead-16120339>
165 .a. -rwxrwxrwx 0
0
16569588 <part2.img_NDEX_~1.GIF-dead-16569588>
10449 .a. -rwxrwxrwx 0
0
16120636 <part2.img-_5106~1.GIF-dead-16120636>
3526 .a. -rwxrwxrwx 0
0
16569803 <part2.img_A97A11.GIF-dead-16569803>
4063 .a. -rwxrwxrwx 0
0
16569807 <part2.img_A97A20.GIF-dead-16569807>
3584 .a. -rwxrwxrwx 0
0
16569775 <part2.img_EADER~3.GIF-dead-16569775>
1822 .a. -rwxrwxrwx 0
0
30191382 <part2.img_TDIG.GIF-dead-30191382>
1497 .a. -rwxrwxrwx 0
0
18497819 <part2.img_OTTOM_3.GIF-dead-18497819>
2629 .a. -rwxrwxrwx 0
0
16416768 <part2.img_TN_BG~1.JPE-dead-16416768>
3715 .a. -rwxrwxrwx 0
0
30191284 <part2.img_KKIE~1.HTM-dead-30191284>
2629 .a. -rwxrwxrwx 0
0
16120335 <part2.img_TN_BG~2.JPE-dead-16120335>
2768 .a. -rwxrwxrwx 0
0
18498049 <part2.img_PTA7J~1.GIF-dead-18498049>
2983 .a. -rwxrwxrwx 0
0
16416509 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
_TN_AREN.GIF-dead-16416509>
1797 .a. -rwxrwxrwx 0
0
16569432 <part2.img_SIAN(1).GIF-dead-16569432>
4307 .a. -rwxrwxrwx 0
0
16569549 <part2.img_EDINE~1.GIF-dead-16569549>
733 .a. -rwxrwxrwx 0
0
16569430 <part2.img_ORKIDS.GIF-dead-16569430>
4720 .a. -rwxrwxrwx 0
0
18497826 <part2.img_TN_COMI.GIF-dead-18497826>
1132 .a. -rwxrwxrwx 0
0
18497851 <part2.img_EDBTN~1.GIF-dead-18497851>
3076 .a. -rwxrwxrwx 0
0
18497618 <part2.img_WEAKD~1.GIF-dead-18497618>
5419 .a. -rwxrwxrwx 0
0
30191515 <part2.img_ONFBA~1.GIF-dead-30191515>
5804 .a. -rwxrwxrwx 0
0
16416266 <part2.img_B_DEA~1.GIF-dead-16416266>
153 .a. -rwxrwxrwx 0
0
16120357 <part2.img_UBBLE.GIF-dead-16120357>
3170 .a. -rwxrwxrwx 0
0
18497961 <part2.img_ALTGRAF.GIF-dead-18497961>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
10570 .a. -rwxrwxrwx 0
0
16416576 <part2.img_NDEX(~3.HTM-dead-16416576>
12601 .a. -rwxrwxrwx 0
0
16416708 <part2.img_WARD~1.HTM-dead-16416708>
2985 .a. -rwxrwxrwx 0
0
18497915 <part2.img_ACK2(2).GIF-dead-18497915>
5962 .a. -rwxrwxrwx 0
0
30191236 <part2.img_LACDE~1.JPE-dead-30191236>
3073 .a. -rwxrwxrwx 0
0
16416649 <part2.img_OLYCE~1.JPE-dead-16416649>
2750 .a. -rwxrwxrwx 0
0
18497859 <part2.img_CTION~1.HTM-dead-18497859>
1934 .a. -rwxrwxrwx 0
0
18497853 <part2.img_AIN22~1.HTM-dead-18497853>
10582 .a. -rwxrwxrwx 0
0
16416655 <part2.img_UINFO~1.HTM-dead-16416655>
8851 .a. -rwxrwxrwx 0
0
30191316 <part2.img_NV119~1.JPE-dead-30191316>
4256 .a. -rwxrwxrwx 0
0
30191164 <part2.img_YPNONEW.GIF-dead-30191164>
16001 .a. -rwxrwxrwx 0
0
30191389 <part2.img_ROPIC~1.GIF-dead-30191389>
170 .a. -rwxrwxrwx 0
0
16569668 <part2.img_NDEX_~6.GIF-dead-16569668>
2310 .a. -rwxrwxrwx 0
0
16569735 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
_W_HEAD.GIF-dead-16569735>
1129 .a. -rwxrwxrwx 0
0
16569749 <part2.img_EXT.GIF-dead-16569749>
2740 .a. -rwxrwxrwx 0
0
16416353 <part2.img-_.GIFdead-16416353>
1489 .a. -rwxrwxrwx 0
0
18497550 <part2.img_X.GIF-dead-18497550>
4230 .a. -rwxrwxrwx 0
0
16569686 <part2.img_IGPLAN.GIF-dead-16569686>
1586 .a. -rwxrwxrwx 0
0
16120396 <part2.img_OTNAV.GIF-dead-16120396>
3133 .a. -rwxrwxrwx 0
0
16569367 <part2.img_PERCMDT.GIF-dead-16569367>
5257 .a. -rwxrwxrwx 0
0
30191264 <part2.img_OSTOC~1.JPE-dead-30191264>
8102 .a. -rwxrwxrwx 0
0
16416276 <part2.img_NDEX~11.HTM-dead-16416276>
12687 .a. -rwxrwxrwx 0
0
16120664 <part2.img_AXIN~1.JPE-dead-16120664>
3836 .a. -rwxrwxrwx 0
0
16416741 <part2.img_NTRO~1.HTM-dead-16416741>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
4339 .a. -rwxrwxrwx 0
0
16569377 <part2.img_ABFIG~1.JPG-dead-16569377>
4605 .a. -rwxrwxrwx 0
0
16569462 <part2.img_DER~1.HTM-dead-16569462>
4030 .a. -rwxrwxrwx 0
0
16569793 <part2.img_A97C13.GIF-dead-16569793>
5261 .a. -rwxrwxrwx 0
0
30191417 <part2.img__SQUA~1.JPE-dead-30191417>
2797 .a. -rwxrwxrwx 0
0
18497616 <part2.img-_.GIFdead-18497616>
11151 .a. -rwxrwxrwx 0
0
16416743 <part2.img_ESTNAV.GIF-dead-16416743>
1597 .a. -rwxrwxrwx 0
0
16569851 <part2.img-_.GIFdead-16569851>
4993 .a. -rwxrwxrwx 0
0
16416548 <part2.img_IDE_1~1.GIF-dead-16416548>
737 .a. -rwxrwxrwx 0
0
16416545 <part2.img_EADER~6.GIF-dead-16416545>
4695 .a. -rwxrwxrwx 0
0
18497861 <part2.img_AMPL3D3.GIF-dead-18497861>
3335 .a. -rwxrwxrwx 0
0
18497904 <part2.img_N_BW1~3.JPE-dead-18497904>
3573 .a. -rwxrwxrwx 0
0
30191289 <part2.img_RSTONE1.GIF-dead-30191289>
4148 .a. -rwxrwxrwx 0
0
18497888 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
_N_FA4~1.JPE-dead-18497888>
8184 .a. -rwxrwxrwx 0
0
16416690 <part2.img_TUCAE~1.JPE-dead-16416690>
3187 .a. -rwxrwxrwx 0
0
18497548 <part2.img_94~1.HTM-dead-18497548>
4467 .a. -rwxrwxrwx 0
0
30191162 <part2.img_ETAZO~1.HTM-dead-30191162>
4960 .a. -rwxrwxrwx 0
0
30191167 <part2.img_OREAD~2.HTM-dead-30191167>
5362 .a. -rwxrwxrwx 0
0
16416292 <part2.img_ONPAR.GIF-dead-16416292>
3435 .a. -rwxrwxrwx 0
0
30191275 <part2.img_V_PEO~1.GIF-dead-30191275>
2791 .a. -rwxrwxrwx 0
0
16416355 <part2.img-_.GIFdead-16416355>
1017 .a. -rwxrwxrwx 0
0
30191279 <part2.img_KEYS~1.HTM-dead-30191279>
4843 .a. -rwxrwxrwx 0
0
16569483 <part2.img_DERLO~1.GIF-dead-16569483>
5155 .a. -rwxrwxrwx 0
0
16569611 <part2.img_PW5BS~1.GIF-dead-16569611>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
10665 .a. -rwxrwxrwx 0
0
16416419 <part2.img_D1600~2.GIF-dead-16416419>
3695 .a. -rwxrwxrwx 0
0
30191612 <part2.img_IN_IN~1.GIF-dead-30191612>
3695 .a. -rwxrwxrwx 0
0
16416735 <part2.img_AMINS~1.JPE-dead-16416735>
969 .a. -rwxrwxrwx 0
0
30191223 <part2.img_SCORE~1.HTM-dead-30191223>
2807 .a. -rwxrwxrwx 0
0
18497633 <part2.img-_.GIFdead-18497633>
1016 .a. -rwxrwxrwx 0
0
16416528 <part2.img_OYA.GIF-dead-16416528>
2912 .a. -rwxrwxrwx 0
0
30191180 <part2.img_EELOG~1.JPE-dead-30191180>
2718 .a. -rwxrwxrwx 0
0
18497612 <part2.img-_.GIFdead-18497612>
4963 .a. -rwxrwxrwx 0
0
30191348 <part2.img_OME(2~2.HTM-dead-30191348>
7398 .a. -rwxrwxrwx 0
0
30191221 <part2.img_LYSSE~1.JPE-dead-30191221>
7141 .a. -rwxrwxrwx 0
0
30191310 <part2.img_NV124~1.JPE-dead-30191310>
1575 .a. -rwxrwxrwx 0
0
18497570 <part2.img-_IDBI~1.JPE-dead-18497570>
3964 .a. -rwxrwxrwx 0
0
30191605 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
_IN_HI~1.GIF-dead-30191605>
1546 .a. -rwxrwxrwx 0
0
18497576 <part2.img_OPEN.GIF-dead-18497576>
1475 .a. -rwxrwxrwx 0
0
16569728 <part2.img-_6084~1.GIF-dead-16569728>
252 .a. -rwxrwxrwx 0
0
18497907 <part2.img_EADE~11.GIF-dead-18497907>
404 .a. -rwxrwxrwx 0
0
30191324 <part2.img_OME(1).GIF-dead-30191324>
2010 .a. -rwxrwxrwx 0
0
16416573 <part2.img_IDE_2~1.GIF-dead-16416573>
3958 .a. -rwxrwxrwx 0
0
16569584 <part2.img_RENA_~1.GIF-dead-16569584>
2001 .a. -rwxrwxrwx 0
0
18497661 <part2.img_ILEDI~1.CLA-dead-18497661>
531 .a. -rwxrwxrwx 0
0
30191132 <part2.img_LUGSI~1.HTM-dead-30191132>
2980 .a. -rwxrwxrwx 0
0
16569348 <part2.img_5_ZACK.GIF-dead-16569348>
963 .a. -rwxrwxrwx 0
0
16569785 <part2.img_CCOMP~1.HTM-dead-16569785>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
2091 .a. -rwxrwxrwx 0
0
16569706 <part2.img_V_IMS.GIF-dead-16569706>
78 .a. -rwxrwxrwx 0
0
30191352 <part2.img_ACKG.GIF-dead-30191352>
3633 .a. -rwxrwxrwx 0
0
18497877 <part2.img_N_AC5~1.JPE-dead-18497877>
8918 .a. -rwxrwxrwx 0
0
30191109 <part2.img_1GETT~1.GIF-dead-30191109>
1344 .a. -rwxrwxrwx 0
0
16569450 <part2.img_AVSMA~1.GIF-dead-16569450>
3029 .a. -rwxrwxrwx 0
0
16120383 <part2.img_OOKS(1).GIF-dead-16120383>
188 .a. -rwxrwxrwx 0
0
16569725 <part2.img_NDEX~10.GIF-dead-16569725>
1284 .a. -rwxrwxrwx 0
0
16569361 <part2.img_OLIDA~2.GIF-dead-16569361>
5439 .a. -rwxrwxrwx 0
0
16416720 <part2.img_RCOLC~1.JPE-dead-16416720>
1086 .a. -rwxrwxrwx 0
0
16569448 <part2.img_AVHOT1.GIF-dead-16569448>
1485 .a. -rwxrwxrwx 0
0
16569352 <part2.img_OP_TOP.GIF-dead-16569352>
12611 .a. -rwxrwxrwx 0
0
16416542 <part2.img_ACKGR~1.GIF-dead-16416542>
3708 .a. -rwxrwxrwx 0
0
30191602 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
_IN_CA~1.GIF-dead-30191602>
20462 .a. -rwxrwxrwx 0
0
16416753 <part2.img-_MAP.GIF-dead-16416753>
3750 .a. -rwxrwxrwx 0
0
16569797 <part2.img_A97K04.GIF-dead-16569797>
2989 .a. -rwxrwxrwx 0
0
16569411 <part2.img_G_HG_~1.GIF-dead-16569411>
4264 .a. -rwxrwxrwx 0
0
30191182 <part2.img_14_2.GIF-dead-30191182>
14376 .a. -rwxrwxrwx 0
0
16120379 <part2.img-_.GIFdead-16120379>
5150 .a. -rwxrwxrwx 0
0
16416723 <part2.img_OSTNO~1.JPE-dead-16416723>
5456 .a. -rwxrwxrwx 0
0
16569395 <part2.img_LMLOGO.GIF-dead-16569395>
3304 .a. -rwxrwxrwx 0
0
30191610 <part2.img_IN_BR~1.GIF-dead-30191610>
3333 .a. -rwxrwxrwx 0
0
30191144 <part2.img_RDTIL~1.JPE-dead-30191144>
6168 .a. -rwxrwxrwx 0
0
30191535 <part2.img_OWARD.GIF-dead-30191535>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
326 .a. -rwxrwxrwx 0
0
18497606 <part2.img-_ALLY~1.GIF-dead-18497606>
3130 .a. -rwxrwxrwx 0
0
18497910 <part2.img_N_BW2~2.JPE-dead-18497910>
1388 .a. -rwxrwxrwx 0
0
16120363 <part2.img_ISH(1~2.HTM-dead-16120363>
947 .a. -rwxrwxrwx 0
0
18497768 <part2.img_OTPRO~1.HTM-dead-18497768>
21639 .a. -rwxrwxrwx 0
0
30191365 <part2.img_QUAWE~2.HTM-dead-30191365>
1224 .a. -rwxrwxrwx 0
0
16569405 <part2.img_EALTH~1.GIF-dead-16569405>
8921 .a. -rwxrwxrwx 0
0
16416453 <part2.img_EVIEW~1.HTM-dead-16416453>
5863 .a. -rwxrwxrwx 0
0
30191204 <part2.img_01.GIF-dead-30191204>
2557 .a. -rwxrwxrwx 0
0
16569422 <part2.img__HG3.GIF-dead-16569422>
1067 .a. -rwxrwxrwx 0
0
16416579 <part2.img_EADER~7.GIF-dead-16416579>
4683 .a. -rwxrwxrwx 0
0
16416717 <part2.img_OSMIM~1.JPE-dead-16416717>
3621 .a. -rwxrwxrwx 0
0
16569363 <part2.img_ACKLINK.GIF-dead-16569363>
2080 .a. -rwxrwxrwx 0
0
18498007 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
_OYASL~1.GIF-dead-18498007>
3615 .a. -rwxrwxrwx 0
0
16569835 <part2.img_TATIO~1.JPE-dead-16569835>
4286 .a. -rwxrwxrwx 0
0
16569813 <part2.img_A97H16.GIF-dead-16569813>
184 .a. -rwxrwxrwx 0
0
16416283 <part2.img_B01570_.GIF-dead-16416283>
3488 .a. -rwxrwxrwx 0
0
16569369 <part2.img_PPLE.GIF-dead-16569369>
4993 .a. -rwxrwxrwx 0
0
18497997 <part2.img_IDE_1~1.GIF-dead-18497997>
2785 .a. -rwxrwxrwx 0
0
16416361 <part2.img-_.GIFdead-16416361>
7053 .a. -rwxrwxrwx 0
0
30191176 <part2.img_NCHID~1.JPE-dead-30191176>
947 .a. -rwxrwxrwx 0
0
16416320 <part2.img_OTPRO~1.HTM-dead-16416320>
5126 .a. -rwxrwxrwx 0
0
30191330 <part2.img_UDI04.GIF-dead-30191330>
229 .a. -rwxrwxrwx 0
0
16416758 <part2.img_ASTCO~1.GIF-dead-16416758>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
4854 .a. -rwxrwxrwx 0
0
18497803 <part2.img_NTER~1.HTM-dead-18497803>
921 .a. -rwxrwxrwx 0
0
30191378 <part2.img_AWR.GIF-dead-30191378>
4063 .a. -rwxrwxrwx 0
0
16569801 <part2.img_A97A06.GIF-dead-16569801>
730 .a. -rwxrwxrwx 0
0
16416747 <part2.img_EATUR~1.HTM-dead-16416747>
2361 .a. -rwxrwxrwx 0
0
16416515 <part2.img_TN_PLAY.GIF-dead-16416515>
173 .a. -rwxrwxrwx 0
0
16569655 <part2.img_NDEX_~5.GIF-dead-16569655>
4286 .a. -rwxrwxrwx 0
0
16569577 <part2.img_EDAILLE.GIF-dead-16569577>
8730 .a. -rwxrwxrwx 0
0
16120432 <part2.img_GATE_~1.GIF-dead-16120432>
4550 .a. -rwxrwxrwx 0
0
16416505 <part2.img_EADER~3.JPE-dead-16416505>
2800 .a. -rwxrwxrwx 0
0
16416517 <part2.img_OTTOM_1.GIF-dead-16416517>
12174 .a. -rwxrwxrwx 0
0
30191391 <part2.img_EBRIN~1.JPE-dead-30191391>
2116 .a. -rwxrwxrwx 0
0
30191368 <part2.img_QUAWE~1.GIF-dead-30191368>
989 .a. -rwxrwxrwx 0
0
16569452 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5 06E4 A169 4E46
_AVABO~2.GIF-dead-16569452>
2562 .a. -rwxrwxrwx 0
0
18497847 <part2.img-_.GIFdead-18497847>
932 .a. -rwxrwxrwx 0
0
16120337 <part2.img_UDI03~1.HTM-dead-16120337>
54 .a. -rwxrwxrwx 0
0
16569380 <part2.img_OT_CL~2.GIF-dead-16569380>
11558 .a. -rwxrwxrwx 0
0
16416429 <part2.img_T~1.HTM-dead-16416429>
5929 .a. -rwxrwxrwx 0
0
30191328 <part2.img_ETNA~1.HTM-dead-30191328>
540 .a. -rwxrwxrwx 0
0
16416625 <part2.img_OUNTE~1.GIF-dead-16416625>
17844 .a. -rwxrwxrwx 0
0
16120330 <part2.img_AVE_9~1.JPE-dead-16120330>
4376 .a. -rwxrwxrwx 0
0
18497638 <part2.img_QUA~1.HTM-dead-18497638>
3793 .a. -rwxrwxrwx 0
0
30191267 <part2.img_XYNAZ~1.JPE-dead-30191267>
4487 .a. -rwxrwxrwx 0
0
18497812 <part2.img_OVIES~1.HTM-dead-18497812>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
4283 .a. -rwxrwxrwx 0
0
18497600 <part2.img_56MB.GIF-dead-18497600>
4930 .a. -rwxrwxrwx 0
0
16569787 <part2.img_ESTBUY.GIF-dead-16569787>
107 .a. -rwxrwxrwx 0
0
16416737 <part2.img_EY~1.HTM-dead-16416737>
5398 .a. -rwxrwxrwx 0
0
18497885 <part2.img_N_FA1~1.JPE-dead-18497885>
3770 .a. -rwxrwxrwx 0
0
16569805 <part2.img_A97A15.GIF-dead-16569805>
5026 .a. -rwxrwxrwx 0
0
30191356 <part2.img_RS_NE~1.GIF-dead-30191356>
10675 .a. -rwxrwxrwx 0
0
16416584 <part2.img_EWGRN.GIF-dead-16416584>
421 .a. -rwxrwxrwx 0
0
16569440 <part2.img_F6A.GIF-dead-16569440>
3407 .a. -rwxrwxrwx 0
0
16569529 <part2.img_AV~1.HTM-dead-16569529>
6391 .a. -rwxrwxrwx 0
0
16416622 <part2.img_IRCLE8.GIF-dead-16416622>
535 .a. -rwxrwxrwx 0
0
18497839 <part2.img_EADER~9.GIF-dead-18497839>
4714 .a. -rwxrwxrwx 0
0
30191218 <part2.img_ERTHC~1.JPE-dead-30191218>
4043 .a. -rwxrwxrwx 0
0
18497801 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
_EADER~1.JPE-dead-18497801>
2901 .a. -rwxrwxrwx 0
0
16569719 <part2.img__CONS.GIF-dead-16569719>
990 .a. -rwxrwxrwx 0
0
18497580 <part2.img_OP4.GIF-dead-18497580>
918 .a. -rwxrwxrwx 0
0
16120404 <part2.img_AWR.GIF-dead-16120404>
3033 .a. -rwxrwxrwx 0
0
16569791 <part2.img_A97C08.GIF-dead-16569791>
1052 .a. -rwxrwxrwx 0
0
16416496 <part2.img_PORTS4.GIF-dead-16416496>
5060 .a. -rwxrwxrwx 0
0
30191207 <part2.img_PURIL~1.JPE-dead-30191207>
2848 .a. -rwxrwxrwx 0
0
30191543 <part2.img_OJO_U~1.HTM-dead-30191543>
5388 .a. -rwxrwxrwx 0
0
16416675 <part2.img_RATPI~1.JPE-dead-16416675>
4654 .a. -rwxrwxrwx 0
0
30191421 <part2.img_AREHI~1.HTM-dead-30191421>
2723 .a. -rwxrwxrwx 0
0
16416269 <part2.img_OPEN_~1.GIF-dead-16416269>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
640 .a. -rwxrwxrwx 0
0
16569564 <part2.img_ORUMS.GIF-dead-16569564>
5030 .a. -rwxrwxrwx 0
0
30191216 <part2.img_ANOLU~1.JPE-dead-30191216>
2442 .a. -rwxrwxrwx 0
0
18497979 <part2.img_P_FTD32.GIF-dead-18497979>
4564 .a. -rwxrwxrwx 0
0
16416669 <part2.img_LATYD~1.JPE-dead-16416669>
5228 .a. -rwxrwxrwx 0
0
18497554 <part2.img_ORLON~1.GIF-dead-18497554>
4184 .a. -rwxrwxrwx 0
0
16416271 <part2.img_FI.GIF-dead-16416271>
2852 .a. -rwxrwxrwx 0
0
16569737 <part2.img_OTM.GIF-dead-16569737>
1231 .a. -rwxrwxrwx 0
0
18497578 <part2.img_FI.GIF-dead-18497578>
4271 .a. -rwxrwxrwx 0
0
16416302 <part2.img_28MB.GIF-dead-16416302>
3930 .a. -rwxrwxrwx 0
0
30191270 <part2.img_ULLST~1.JPE-dead-30191270>
2016 .a. -rwxrwxrwx 0
0
18497985 <part2.img_EADE~13.GIF-dead-18497985>
4494 .a. -rwxrwxrwx 0
0
30191173 <part2.img_ELTGR~1.JPE-dead-30191173>
184 .a. -rwxrwxrwx 0
0
16569698 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5 06E4 A169 4E46
_NDEX_~9.GIF-dead-16569698>
2163 .a. -rwxrwxrwx 0
0
16120385 <part2.img_OGO1.GIF-dead-16120385>
6243 .a. -rwxrwxrwx 0
0
30191384 <part2.img_NDEX(~4.HTM-dead-30191384>
4450 .a. -rwxrwxrwx 0
0
16416696 <part2.img_OTOCO~1.JPE-dead-16416696>
16576 .a. -rwxrwxrwx 0
0
16120399 <part2.img_NNERO~1.GIF-dead-16120399>
3050 .a. -rwxrwxrwx 0
0
30191257 <part2.img_AIN.GIF-dead-30191257>
203 .a. -rwxrwxrwx 0
0
16416451 <part2.img_ACKGR~2.GIF-dead-16416451>
1933 .a. -rwxrwxrwx 0
0
16120370 <part2.img_EWPAGES.GIF-dead-16120370>
404 .a. -rwxrwxrwx 0
0
30191318 <part2.img_OME(2).GIF-dead-30191318>
4345 .a. -rwxrwxrwx 0
0
16569358 <part2.img-_ONYH~1.GIF-dead-16569358>
3003 .a. -rwxrwxrwx 0
0
18497559 <part2.img_ARGAI~1.GIF-dead-18497559>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
13661 .a. -rwxrwxrwx 0
0
16416766 <part2.img_CFACA~1.HTM-dead-16416766>
1703 .a. -rwxrwxrwx 0
0
18497967 <part2.img_PCOMING.GIF-dead-18497967>
2769 .a. -rwxrwxrwx 0
0
18497629 <part2.img-_.GIFdead-18497629>
4740 .a. -rwxrwxrwx 0
0
16569464 <part2.img_NNOVATE.GIF-dead-16569464>
2221 .a. -rwxrwxrwx 0
0
18497805 <part2.img_TN_TALK.GIF-dead-18497805>
3685 .a. -rwxrwxrwx 0
0
18497937 <part2.img_N_TO1~1.JPE-dead-18497937>
1261 .a. -rwxrwxrwx 0
0
16120388 <part2.img_UTTON~3.GIF-dead-16120388>
2730 .a. -rwxrwxrwx 0
0
18497640 <part2.img-_.GIFdead-18497640>
205 .a. -rwxrwxrwx 0
0
16569651 <part2.img_NDEX_~4.GIF-dead-16569651>
6894 .a. -rwxrwxrwx 0
0
16416703 <part2.img_LYSBZ~1.JPE-dead-16416703>
176 .a. -rwxrwxrwx 0
0
30191184 <part2.img_OUNTER.GIF-dead-30191184>
2642 .a. -rwxrwxrwx 0
0
16416657 <part2.img_SCOS~1.HTM-dead-16416657>
Sun Feb 14 1999 08:05:24
768 ..c -rwxrwxrwx 0
0
30191115
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
<part2.img-_OBIA_~1.HTM-dead-30191115>
Sun Feb 14 1999 08:05:26
768 m.. -rwxrwxrwx 0
0
30191115
<part2.img-_OBIA_~1.HTM-dead-30191115>
Sun Feb 14 1999 14:13:50 9967 ..c -rwxrwxrwx 0
0
16416550
<part2.img-_IGHSP~1.GIF-dead-16416550>
Sun Feb 14 1999 14:13:56 9967 m.. -rwxrwxrwx 0
0
16416550
<part2.img-_IGHSP~1.GIF-dead-16416550>
Sun Feb 14 1999 14:14:04
317 ..c -rwxrwxrwx 0
0
18498018
<part2.img-_RT.GIF-dead-18498018>
Sun Feb 14 1999 14:14:06
317 m.. -rwxrwxrwx 0
0
18498018
<part2.img-_RT.GIF-dead-18498018>
Sun Feb 14 1999 14:14:28 11648 ..c -rwxrwxrwx 0
0
18498022
<part2.img-_CATEG~1.GIF-dead-18498022>
Sun Feb 14 1999 14:14:32 11648 m.. -rwxrwxrwx 0
0
18498022
<part2.img-_CATEG~1.GIF-dead-18498022>
Sun Feb 14 1999 14:14:44
531 ..c -rwxrwxrwx 0
0
30191132
<part2.img-_LUGSI~1.HTM-dead-30191132>
Sun Feb 14 1999 14:14:46
531 m.. -rwxrwxrwx 0
0
30191132
<part2.img-_LUGSI~1.HTM-dead-30191132>
Sun Feb 14 1999 14:14:48 8645 ..c -rwxrwxrwx 0
0
16416602
<part2.img-_DM_2~1.HTM-dead-16416602>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Sun Feb 14 1999 14:14:50 10594 ..c -rwxrwxrwx 0
0
30191142
<part2.img-_NDEX_~3.HTM-dead-30191142>
Sun Feb 14 1999 14:14:52 8645 m.. -rwxrwxrwx 0
0
16416602
<part2.img-_DM_2~1.HTM-dead-16416602>
Sun Feb 14 1999 14:14:54
145 ..c -rwxrwxrwx 0
0
16416609
<part2.img-_EWH.GIF-dead-16416609>
3333 ..c -rwxrwxrwx 0
0
30191144 <part2.img_RDTIL~1.JPE-dead-30191144>
10594 m.. -rwxrwxrwx 0
0
30191142 <part2.img_NDEX_~3.HTM-dead-30191142>
25951 ..c -rwxrwxrwx 0
0
16329898 <part2.img_RD3~1.JPE-dead-16329898>
Sun Feb 14 1999 14:14:56
145 m.. -rwxrwxrwx 0
0
16416609
<part2.img-_EWH.GIF-dead-16416609>
3333 m.. -rwxrwxrwx 0
0
30191144 <part2.img_RDTIL~1.JPE-dead-30191144>
Sun Feb 14 1999 14:15:00 38677 ..c -rwxrwxrwx 0
0
16329900
<part2.img-_ARISL~1.JPE-dead-16329900>
Sun Feb 14 1999 14:15:02 1232 ..c -rwxrwxrwx 0
0
16416615
<part2.img-_EW(3).GIF-dead-16416615>
Sun Feb 14 1999 14:15:04 1232 m.. -rwxrwxrwx 0
0
16416615
<part2.img-_EW(3).GIF-dead-16416615>
Sun Feb 14 1999 14:15:06 5649 ..c -rwxrwxrwx 0
0
16329904
<part2.img-_ABAY_~1.JPE-dead-16329904>
8064 ..c -rwxrwxrwx 0
0
16329902 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
_OGER_~1.JPE-dead-16329902>
Sun Feb 14 1999 14:15:10 5649 m.. -rwxrwxrwx 0
0
16329904
<part2.img-_ABAY_~1.JPE-dead-16329904>
Sun Feb 14 1999 14:15:12 1884 ..c -rwxrwxrwx 0
0
16416617
<part2.img-_OLORLIN.GIF-dead-16416617>
Sun Feb 14 1999 14:15:14 1884 m.. -rwxrwxrwx 0
0
16416617
<part2.img-_OLORLIN.GIF-dead-16416617>
Sun Feb 14 1999 14:15:16 6391 ..c -rwxrwxrwx 0
0
16416622
<part2.img-_IRCLE8.GIF-dead-16416622>
Sun Feb 14 1999 14:15:20 6391 m.. -rwxrwxrwx 0
0
16416622
<part2.img-_IRCLE8.GIF-dead-16416622>
8064 m.. -rwxrwxrwx 0
0
16329902 <part2.img_OGER_~1.JPE-dead-16329902>
Sun Feb 14 1999 14:15:26
540 ..c -rwxrwxrwx 0
0
16416625
<part2.img-_OUNTE~1.GIF-dead-16416625>
Sun Feb 14 1999 14:15:28 38677 m.. -rwxrwxrwx 0
0
16329900
<part2.img-_ARISL~1.JPE-dead-16329900>
540 m.. -rwxrwxrwx 0
0
16416625 <part2.img_OUNTE~1.GIF-dead-16416625>
Sun Feb 14 1999 14:15:30 25951 m.. -rwxrwxrwx 0
0
16329898
<part2.img-_RD3~1.JPE-dead-16329898>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Sun Feb 14 1999 14:16:16 2304 ..c -rwxrwxrwx 0
0
16329907
<part2.img-_NDEX~11.HTM-dead-16329907>
Sun Feb 14 1999 14:16:18 5352 ..c -rwxrwxrwx 0
0
16329910
<part2.img-_PLYSD~1.JPE-dead-16329910>
2304 m.. -rwxrwxrwx 0
0
16329907 <part2.img_NDEX~11.HTM-dead-16329907>
Sun Feb 14 1999 14:16:20 3559 ..c -rwxrwxrwx 0
0
30191147
<part2.img-_ONDOC~1.JPE-dead-30191147>
Sun Feb 14 1999 14:16:22 3559 m.. -rwxrwxrwx 0
0
30191147
<part2.img-_ONDOC~1.JPE-dead-30191147>
Sun Feb 14 1999 14:16:24 3719 ..c -rwxrwxrwx 0
0
16329913
<part2.img-_ERTHA~1.JPE-dead-16329913>
5352 m.. -rwxrwxrwx 0
0
16329910 <part2.img_PLYSD~1.JPE-dead-16329910>
4258 ..c -rwxrwxrwx 0
0
30191149 <part2.img_AMINE~1.JPE-dead-30191149>
5013 ..c -rwxrwxrwx 0
0
16329916 <part2.img_LYSIA~1.JPE-dead-16329916>
Sun Feb 14 1999 14:16:26
179 ..c -rwxrwxrwx 0
0
16416634
<part2.img-_OUNTE~2.GIF-dead-16416634>
3719 m.. -rwxrwxrwx 0
0
16329913 <part2.img_ERTHA~1.JPE-dead-16329913>
Sun Feb 14 1999 14:16:28
179 m.. -rwxrwxrwx 0
0
16416634
<part2.img-_OUNTE~2.GIF-dead-16416634>
4258 m.. -rwxrwxrwx 0
0
30191149 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
_AMINE~1.JPE-dead-30191149>
5013 m.. -rwxrwxrwx 0
0
16329916 <part2.img_LYSIA~1.JPE-dead-16329916>
Sun Feb 14 1999 14:19:12
776 ..c -rwxrwxrwx 0
0
16329919
<part2.img-_LEURO~1.HTM-dead-16329919>
Sun Feb 14 1999 14:19:14
776 m.. -rwxrwxrwx 0
0
16329919
<part2.img-_LEURO~1.HTM-dead-16329919>
Sun Feb 14 1999 14:19:26 7234 ..c -rwxrwxrwx 0
0
16329922
<part2.img-_LEURA~1.JPE-dead-16329922>
Sun Feb 14 1999 14:19:30 7234 m.. -rwxrwxrwx 0
0
16329922
<part2.img-_LEURA~1.JPE-dead-16329922>
Sun Feb 14 1999 14:20:00 1500 ..c -rwxrwxrwx 0
0
16416637
<part2.img-_UDIBR~1.HTM-dead-16416637>
Sun Feb 14 1999 14:20:02 1500 m.. -rwxrwxrwx 0
0
16416637
<part2.img-_UDIBR~1.HTM-dead-16416637>
4275 ..c -rwxrwxrwx 0
0
16329925 <part2.img_OLYCD~1.JPE-dead-16329925>
6385 ..c -rwxrwxrwx 0
0
16329928 <part2.img_ERGHI~1.JPE-dead-16329928>
3873 ..c -rwxrwxrwx 0
0
16416640 <part2.img_ENDRO~1.JPE-dead-16416640>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Sun Feb 14 1999 14:20:06 6385 m.. -rwxrwxrwx 0
0
16329928
<part2.img-_ERGHI~1.JPE-dead-16329928>
4275 m.. -rwxrwxrwx 0
0
16329925 <part2.img_OLYCD~1.JPE-dead-16329925>
Sun Feb 14 1999 14:20:08 3873 m.. -rwxrwxrwx 0
0
16416640
<part2.img-_ENDRO~1.JPE-dead-16416640>
8337 ..c -rwxrwxrwx 0
0
16416643 <part2.img_RMINT~1.JPE-dead-16416643>
Sun Feb 14 1999 14:20:10 8337 m.. -rwxrwxrwx 0
0
16416643
<part2.img-_RMINT~1.JPE-dead-16416643>
Sun Feb 14 1999 14:20:48 3292 ..c -rwxrwxrwx 0
0
16416646
<part2.img-_ORIDN~1.HTM-dead-16416646>
Sun Feb 14 1999 14:20:52 4529 ..c -rwxrwxrwx 0
0
16329931
<part2.img-_OLYCO~1.JPE-dead-16329931>
3073 ..c -rwxrwxrwx 0
0
16416649 <part2.img_OLYCE~1.JPE-dead-16416649>
3292 m.. -rwxrwxrwx 0
0
16416646 <part2.img_ORIDN~1.HTM-dead-16416646>
6778 ..c -rwxrwxrwx 0
0
30191156 <part2.img_OLYCH~1.JPE-dead-30191156>
Sun Feb 14 1999 14:20:56 4529 m.. -rwxrwxrwx 0
0
16329931
<part2.img-_OLYCO~1.JPE-dead-16329931>
3073 m.. -rwxrwxrwx 0
0
16416649 <part2.img_OLYCE~1.JPE-dead-16416649>
5586 ..c -rwxrwxrwx 0
0
16416663 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
_HECPE~1.JPE-dead-16416663>
Sun Feb 14 1999 14:20:58 6778 m.. -rwxrwxrwx 0
0
30191156
<part2.img-_OLYCH~1.JPE-dead-30191156>
5586 m.. -rwxrwxrwx 0
0
16416663 <part2.img_HECPE~1.JPE-dead-16416663>
Sun Feb 14 1999 14:21:02 4107 ..c -rwxrwxrwx 0
0
30191170
<part2.img-_PHELO~1.JPE-dead-30191170>
Sun Feb 14 1999 14:21:06 4715 ..c -rwxrwxrwx 0
0
16329934
<part2.img-_HROMO~1.JPE-dead-16329934>
4107 m.. -rwxrwxrwx 0
0
30191170 <part2.img_PHELO~1.JPE-dead-30191170>
Sun Feb 14 1999 14:21:08 4715 m.. -rwxrwxrwx 0
0
16329934
<part2.img-_HROMO~1.JPE-dead-16329934>
Sun Feb 14 1999 14:21:10 4494 ..c -rwxrwxrwx 0
0
30191173
<part2.img-_ELTGR~1.JPE-dead-30191173>
Sun Feb 14 1999 14:21:12 4988 ..c -rwxrwxrwx 0
0
16416666
<part2.img-_ENDRO~2.JPE-dead-16416666>
4494 m.. -rwxrwxrwx 0
0
30191173 <part2.img_ELTGR~1.JPE-dead-30191173>
Sun Feb 14 1999 14:21:14 4988 m.. -rwxrwxrwx 0
0
16416666
<part2.img-_ENDRO~2.JPE-dead-16416666>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Sun Feb 14 1999 14:21:18 4564 ..c -rwxrwxrwx 0
0
16416669
<part2.img-_LATYD~1.JPE-dead-16416669>
Sun Feb 14 1999 14:21:20 4564 m.. -rwxrwxrwx 0
0
16416669
<part2.img-_LATYD~1.JPE-dead-16416669>
Sun Feb 14 1999 14:21:24 4207 ..c -rwxrwxrwx 0
0
16329937
<part2.img-_YPSEL~1.JPE-dead-16329937>
Sun Feb 14 1999 14:21:26 7053 ..c -rwxrwxrwx 0
0
30191176
<part2.img-_NCHID~1.JPE-dead-30191176>
Sun Feb 14 1999 14:21:28 4207 m.. -rwxrwxrwx 0
0
16329937
<part2.img-_YPSEL~1.JPE-dead-16329937>
7053 m.. -rwxrwxrwx 0
0
30191176 <part2.img_NCHID~1.JPE-dead-30191176>
Sun Feb 14 1999 14:21:40 4467 ..c -rwxrwxrwx 0
0
30191162
<part2.img-_ETAZO~1.HTM-dead-30191162>
Sun Feb 14 1999 14:21:42 6681 ..c -rwxrwxrwx 0
0
30191178
<part2.img-_ALLUC~1.JPE-dead-30191178>
176 ..c -rwxrwxrwx 0
0
30191184 <part2.img_OUNTER.GIF-dead-30191184>
4467 m.. -rwxrwxrwx 0
0
30191162 <part2.img_ETAZO~1.HTM-dead-30191162>
2912 ..c -rwxrwxrwx 0
0
30191180 <part2.img_EELOG~1.JPE-dead-30191180>
Sun Feb 14 1999 14:21:44 2912 m.. -rwxrwxrwx 0
0
30191180
<part2.img-_EELOG~1.JPE-dead-30191180>
176 m.. -rwxrwxrwx 0
0
30191184 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
_OUNTER.GIF-dead-30191184>
Sun Feb 14 1999 14:21:46 6681 m.. -rwxrwxrwx 0
0
30191178
<part2.img-_ALLUC~1.JPE-dead-30191178>
Sun Feb 14 1999 14:22:06 4221 ..c -rwxrwxrwx 0
0
30191187
<part2.img-_ACELB~1.JPE-dead-30191187>
3419 ..c -rwxrwxrwx 0
0
16329964 <part2.img_EOLNU~1.HTM-dead-16329964>
Sun Feb 14 1999 14:22:08 5729 ..c -rwxrwxrwx 0
0
30191201
<part2.img-_ATRAU~1.JPE-dead-30191201>
3419 m.. -rwxrwxrwx 0
0
16329964 <part2.img_EOLNU~1.HTM-dead-16329964>
3438 ..c -rwxrwxrwx 0
0
16416672 <part2.img_ERGTE~1.JPE-dead-16416672>
Sun Feb 14 1999 14:22:10 5729 m.. -rwxrwxrwx 0
0
30191201
<part2.img-_ATRAU~1.JPE-dead-30191201>
3438 m.. -rwxrwxrwx 0
0
16416672 <part2.img_ERGTE~1.JPE-dead-16416672>
4221 m.. -rwxrwxrwx 0
0
30191187 <part2.img_ACELB~1.JPE-dead-30191187>
Sun Feb 14 1999 14:22:14 5060 ..c -rwxrwxrwx 0
0
30191207
<part2.img-_PURIL~1.JPE-dead-30191207>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Sun Feb 14 1999 14:22:16 5468 ..c -rwxrwxrwx 0
0
16329974
<part2.img-_LAUCA~1.JPE-dead-16329974>
Sun Feb 14 1999 14:22:18 5468 m.. -rwxrwxrwx 0
0
16329974
<part2.img-_LAUCA~1.JPE-dead-16329974>
5388 ..c -rwxrwxrwx 0
0
16416675 <part2.img_RATPI~1.JPE-dead-16416675>
5060 m.. -rwxrwxrwx 0
0
30191207 <part2.img_PURIL~1.JPE-dead-30191207>
Sun Feb 14 1999 14:22:20 4620 ..c -rwxrwxrwx 0
0
30191210
<part2.img-_AVORI~1.JPE-dead-30191210>
Sun Feb 14 1999 14:22:22 4620 m.. -rwxrwxrwx 0
0
30191210
<part2.img-_AVORI~1.JPE-dead-30191210>
5556 ..c -rwxrwxrwx 0
0
16329977 <part2.img_RINCH~1.JPE-dead-16329977>
6198 ..c -rwxrwxrwx 0
0
16329980 <part2.img_ANSEB~1.JPE-dead-16329980>
5388 m.. -rwxrwxrwx 0
0
16416675 <part2.img_RATPI~1.JPE-dead-16416675>
Sun Feb 14 1999 14:22:24 5556 m.. -rwxrwxrwx 0
0
16329977
<part2.img-_RINCH~1.JPE-dead-16329977>
Sun Feb 14 1999 14:22:26 6198 m.. -rwxrwxrwx 0
0
16329980
<part2.img-_ANSEB~1.JPE-dead-16329980>
Sun Feb 14 1999 14:23:00 2412 ..c -rwxrwxrwx 0
0
16416678
<part2.img-_ENDRO~1.HTM-dead-16416678>
3492 ..c -rwxrwxrwx 0
0
16416681 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
_ENDRO~3.JPE-dead-16416681>
4820 ..c -rwxrwxrwx 0
0
16416629 <part2.img_ELIBE~1.JPE-dead-16416629>
Sun Feb 14 1999 14:23:02 2412 m.. -rwxrwxrwx 0
0
16416678
<part2.img-_ENDRO~1.HTM-dead-16416678>
3492 m.. -rwxrwxrwx 0
0
16416681 <part2.img_ENDRO~3.JPE-dead-16416681>
Sun Feb 14 1999 14:23:04 6718 ..c -rwxrwxrwx 0
0
16416684
<part2.img-_ORNCA~1.JPE-dead-16416684>
4820 m.. -rwxrwxrwx 0
0
16416629 <part2.img_ELIBE~1.JPE-dead-16416629>
3204 ..c -rwxrwxrwx 0
0
30191213 <part2.img_OMSTA~1.JPE-dead-30191213>
Sun Feb 14 1999 14:23:06 3380 ..c -rwxrwxrwx 0
0
16329983
<part2.img-_RITON~1.JPE-dead-16329983>
3204 m.. -rwxrwxrwx 0
0
30191213 <part2.img_OMSTA~1.JPE-dead-30191213>
Sun Feb 14 1999 14:23:08 6718 m.. -rwxrwxrwx 0
0
16416684
<part2.img-_ORNCA~1.JPE-dead-16416684>
4450 ..c -rwxrwxrwx 0
0
16416696 <part2.img_OTOCO~1.JPE-dead-16416696>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
3380 m.. -rwxrwxrwx 0
0
16329983 <part2.img_RITON~1.JPE-dead-16329983>
Sun Feb 14 1999 14:23:10 4450 m.. -rwxrwxrwx 0
0
16416696
<part2.img-_OTOCO~1.JPE-dead-16416696>
Sun Feb 14 1999 14:23:20
674 ..c -rwxrwxrwx 0
0
16416701
<part2.img-_RMINA~1.HTM-dead-16416701>
Sun Feb 14 1999 14:23:22
674 m.. -rwxrwxrwx 0
0
16416701
<part2.img-_RMINA~1.HTM-dead-16416701>
Sun Feb 14 1999 14:23:24 5030 ..c -rwxrwxrwx 0
0
30191216
<part2.img-_ANOLU~1.JPE-dead-30191216>
Sun Feb 14 1999 14:23:26 5030 m.. -rwxrwxrwx 0
0
30191216
<part2.img-_ANOLU~1.JPE-dead-30191216>
Sun Feb 14 1999 14:23:40 2642 ..c -rwxrwxrwx 0
0
16416657
<part2.img-_SCOS~1.HTM-dead-16416657>
Sun Feb 14 1999 14:23:42 2642 m.. -rwxrwxrwx 0
0
16416657
<part2.img-_SCOS~1.HTM-dead-16416657>
4714 ..c -rwxrwxrwx 0
0
30191218 <part2.img_ERTHC~1.JPE-dead-30191218>
Sun Feb 14 1999 14:23:44 4714 m.. -rwxrwxrwx 0
0
30191218
<part2.img-_ERTHC~1.JPE-dead-30191218>
Sun Feb 14 1999 14:23:52 2028 ..c -rwxrwxrwx 0
0
16416686
<part2.img-_SCOEC~1.HTM-dead-16416686>
Sun Feb 14 1999 14:23:54 4478 ..c -rwxrwxrwx 0
0
16329939
<part2.img-_RCOFU~1.JPE-dead-16329939>
2028 m.. -rwxrwxrwx 0
0
16416686 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
_SCOEC~1.HTM-dead-16416686>
Sun Feb 14 1999 14:23:56 4478 m.. -rwxrwxrwx 0
0
16329939
<part2.img-_RCOFU~1.JPE-dead-16329939>
Sun Feb 14 1999 14:24:42 6055 ..c -rwxrwxrwx 0
0
16416711
<part2.img-_SCOST~2.HTM-dead-16416711>
Sun Feb 14 1999 14:24:44 6055 m.. -rwxrwxrwx 0
0
16416711
<part2.img-_SCOST~2.HTM-dead-16416711>
3791 ..c -rwxrwxrwx 0
0
16416714 <part2.img_LYSCH~1.JPE-dead-16416714>
Sun Feb 14 1999 14:24:48 3791 m.. -rwxrwxrwx 0
0
16416714
<part2.img-_LYSCH~1.JPE-dead-16416714>
Sun Feb 14 1999 14:24:50 7398 ..c -rwxrwxrwx 0
0
30191221
<part2.img-_LYSSE~1.JPE-dead-30191221>
Sun Feb 14 1999 14:24:54 7398 m.. -rwxrwxrwx 0
0
30191221
<part2.img-_LYSSE~1.JPE-dead-30191221>
Sun Feb 14 1999 14:25:22
969 ..c -rwxrwxrwx 0
0
30191223
<part2.img-_SCORE~1.HTM-dead-30191223>
Sun Feb 14 1999 14:25:24 8184 ..c -rwxrwxrwx 0
0
16416690
<part2.img-_TUCAE~1.JPE-dead-16416690>
969 m.. -rwxrwxrwx 0
0
30191223 <part2.img_SCORE~1.HTM-dead-30191223>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Sun Feb 14 1999 14:25:26 8184 m.. -rwxrwxrwx 0
0
16416690
<part2.img-_TUCAE~1.JPE-dead-16416690>
Sun Feb 14 1999 14:26:34 6712 ..c -rwxrwxrwx 0
0
16329986
<part2.img-_LASTF~1.JPE-dead-16329986>
Sun Feb 14 1999 14:26:38 6712 m.. -rwxrwxrwx 0
0
16329986
<part2.img-_LASTF~1.JPE-dead-16329986>
Sun Feb 14 1999 14:27:06 5943 ..c -rwxrwxrwx 0
0
30191226
<part2.img-_UBORN~1.JPE-dead-30191226>
Sun Feb 14 1999 14:27:08 5943 m.. -rwxrwxrwx 0
0
30191226
<part2.img-_UBORN~1.JPE-dead-30191226>
Sun Feb 14 1999 14:27:10 11463 ..c -rwxrwxrwx 0
0
16329989
<part2.img-_OSTAS~1.JPE-dead-16329989>
Sun Feb 14 1999 14:27:16 11463 m.. -rwxrwxrwx 0
0
16329989
<part2.img-_OSTAS~1.JPE-dead-16329989>
Sun Feb 14 1999 14:27:46 6894 ..c -rwxrwxrwx 0
0
16416703
<part2.img-_LYSBZ~1.JPE-dead-16416703>
Sun Feb 14 1999 14:27:48 4683 ..c -rwxrwxrwx 0
0
16416717
<part2.img-_OSMIM~1.JPE-dead-16416717>
Sun Feb 14 1999 14:27:52 4683 m.. -rwxrwxrwx 0
0
16416717
<part2.img-_OSMIM~1.JPE-dead-16416717>
6273 ..c -rwxrwxrwx 0
0
16329996 <part2.img_HURDP~1.JPE-dead-16329996>
Sun Feb 14 1999 14:27:54 5439 ..c -rwxrwxrwx 0
0
16416720
<part2.img-_RCOLC~1.JPE-dead-16416720>
6894 m.. -rwxrwxrwx 0
0
16416703 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
_LYSBZ~1.JPE-dead-16416703>
4521 ..c -rwxrwxrwx 0
0
30191233 <part2.img_RCOLF~1.JPE-dead-30191233>
Sun Feb 14 1999 14:27:56 6273 m.. -rwxrwxrwx 0
0
16329996
<part2.img-_HURDP~1.JPE-dead-16329996>
4856 ..c -rwxrwxrwx 0
0
16329999 <part2.img_RCOLF~1.JPE-dead-16329999>
Sun Feb 14 1999 14:28:00 4856 m.. -rwxrwxrwx 0
0
16329999
<part2.img-_RCOLF~1.JPE-dead-16329999>
4521 m.. -rwxrwxrwx 0
0
30191233 <part2.img_RCOLF~1.JPE-dead-30191233>
5439 m.. -rwxrwxrwx 0
0
16416720 <part2.img_RCOLC~1.JPE-dead-16416720>
Sun Feb 14 1999 14:28:02 7103 ..c -rwxrwxrwx 0
0
16330002
<part2.img-_ERMCR~1.JPE-dead-16330002>
Sun Feb 14 1999 14:28:04 7103 m.. -rwxrwxrwx 0
0
16330002
<part2.img-_ERMCR~1.JPE-dead-16330002>
5962 ..c -rwxrwxrwx 0
0
30191236 <part2.img_LACDE~1.JPE-dead-30191236>
Sun Feb 14 1999 14:28:06 5962 m.. -rwxrwxrwx 0
0
30191236
<part2.img-_LACDE~1.JPE-dead-30191236>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Sun Feb 14 1999 14:28:10 5576 ..c -rwxrwxrwx 0
0
16330012
<part2.img-_TILVE~1.JPE-dead-16330012>
6348 ..c -rwxrwxrwx 0
0
16330009 <part2.img_OURGG~1.JPE-dead-16330009>
Sun Feb 14 1999 14:28:12 5576 m.. -rwxrwxrwx 0
0
16330012
<part2.img-_TILVE~1.JPE-dead-16330012>
6348 m.. -rwxrwxrwx 0
0
16330009 <part2.img_OURGG~1.JPE-dead-16330009>
Sun Feb 14 1999 14:28:14 4537 ..c -rwxrwxrwx 0
0
16330015
<part2.img-_YERCA~1.JPE-dead-16330015>
Sun Feb 14 1999 14:28:16 4537 m.. -rwxrwxrwx 0
0
16330015
<part2.img-_YERCA~1.JPE-dead-16330015>
Sun Feb 14 1999 14:28:26 4816 ..c -rwxrwxrwx 0
0
16330018
<part2.img-_OLYBV~1.JPE-dead-16330018>
Sun Feb 14 1999 14:28:28 5903 ..c -rwxrwxrwx 0
0
16330021
<part2.img-_PLYSI~1.JPE-dead-16330021>
Sun Feb 14 1999 14:28:30 4816 m.. -rwxrwxrwx 0
0
16330018
<part2.img-_OLYBV~1.JPE-dead-16330018>
Sun Feb 14 1999 14:28:32 5257 ..c -rwxrwxrwx 0
0
30191264
<part2.img-_OSTOC~1.JPE-dead-30191264>
5903 m.. -rwxrwxrwx 0
0
16330021 <part2.img_PLYSI~1.JPE-dead-16330021>
Sun Feb 14 1999 14:28:34 5257 m.. -rwxrwxrwx 0
0
30191264
<part2.img-_OSTOC~1.JPE-dead-30191264>
4191 ..c -rwxrwxrwx 0
0
16330027 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
_OLVBE~1.JPE-dead-16330027>
Sun Feb 14 1999 14:28:36 5150 ..c -rwxrwxrwx 0
0
16416723
<part2.img-_OSTNO~1.JPE-dead-16416723>
4191 m.. -rwxrwxrwx 0
0
16330027 <part2.img_OLVBE~1.JPE-dead-16330027>
Sun Feb 14 1999 14:28:40 3793 ..c -rwxrwxrwx 0
0
30191267
<part2.img-_XYNAZ~1.JPE-dead-30191267>
Sun Feb 14 1999 14:28:42 3793 m.. -rwxrwxrwx 0
0
30191267
<part2.img-_XYNAZ~1.JPE-dead-30191267>
5150 m.. -rwxrwxrwx 0
0
16416723 <part2.img_OSTNO~1.JPE-dead-16416723>
Sun Feb 14 1999 14:28:44 4218 ..c -rwxrwxrwx 0
0
16330030
<part2.img-_SCOBU~1.JPE-dead-16330030>
8285 ..c -rwxrwxrwx 0
0
16330033 <part2.img_YLIND~1.JPE-dead-16330033>
Sun Feb 14 1999 14:28:48 4218 m.. -rwxrwxrwx 0
0
16330030
<part2.img-_SCOBU~1.JPE-dead-16330030>
6465 ..c -rwxrwxrwx 0
0
16416726 <part2.img_OBIGS~1.JPE-dead-16416726>
8285 m.. -rwxrwxrwx 0
0
16330033 <part2.img_YLIND~1.JPE-dead-16330033>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Sun Feb 14 1999 14:28:50 6465 m.. -rwxrwxrwx 0
0
16416726
<part2.img-_OBIGS~1.JPE-dead-16416726>
Sun Feb 14 1999 14:30:24 2004 ..c -rwxrwxrwx 0
0
30191228
<part2.img-_NASPI~1.HTM-dead-30191228>
Sun Feb 14 1999 14:30:26 2004 m.. -rwxrwxrwx 0
0
30191228
<part2.img-_NASPI~1.HTM-dead-30191228>
Sun Feb 14 1999 14:30:28 9105 ..c -rwxrwxrwx 0
0
16416729
<part2.img-_HYLLE~1.JPE-dead-16416729>
Sun Feb 14 1999 14:30:30 4080 ..c -rwxrwxrwx 0
0
16330036
<part2.img-_TYLOC~1.JPE-dead-16330036>
Sun Feb 14 1999 14:30:32 7171 ..c -rwxrwxrwx 0
0
16330039
<part2.img-_PLYSP~1.JPE-dead-16330039>
4080 m.. -rwxrwxrwx 0
0
16330036 <part2.img_TYLOC~1.JPE-dead-16330036>
Sun Feb 14 1999 14:30:34 9105 m.. -rwxrwxrwx 0
0
16416729
<part2.img-_HYLLE~1.JPE-dead-16416729>
Sun Feb 14 1999 14:30:36 7171 m.. -rwxrwxrwx 0
0
16330039
<part2.img-_PLYSP~1.JPE-dead-16330039>
Sun Feb 14 1999 14:30:48 2259 ..c -rwxrwxrwx 0
0
16416732
<part2.img-_EPHAL~1.HTM-dead-16416732>
Sun Feb 14 1999 14:30:50 2259 m.. -rwxrwxrwx 0
0
16416732
<part2.img-_EPHAL~1.HTM-dead-16416732>
Sun Feb 14 1999 14:30:52 3695 ..c -rwxrwxrwx 0
0
16416735
<part2.img-_AMINS~1.JPE-dead-16416735>
4773 ..c -rwxrwxrwx 0
0
16330045 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
_ICROM~1.JPE-dead-16330045>
3459 ..c -rwxrwxrwx 0
0
16330042 <part2.img_UNCIN~1.JPE-dead-16330042>
Sun Feb 14 1999 14:30:54 3695 m.. -rwxrwxrwx 0
0
16416735
<part2.img-_AMINS~1.JPE-dead-16416735>
Sun Feb 14 1999 14:30:56 3459 m.. -rwxrwxrwx 0
0
16330042
<part2.img-_UNCIN~1.JPE-dead-16330042>
Sun Feb 14 1999 14:30:58 3930 ..c -rwxrwxrwx 0
0
30191270
<part2.img-_ULLST~1.JPE-dead-30191270>
4773 m.. -rwxrwxrwx 0
0
16330045 <part2.img_ICROM~1.JPE-dead-16330045>
Sun Feb 14 1999 14:31:00 3930 m.. -rwxrwxrwx 0
0
30191270
<part2.img-_ULLST~1.JPE-dead-30191270>
Sun Feb 14 1999 14:31:50 1260 ..c -rwxrwxrwx 0
0
30191241
<part2.img-_TART~1.HTM-dead-30191241>
Sun Feb 14 1999 14:31:52 1260 m.. -rwxrwxrwx 0
0
30191241
<part2.img-_TART~1.HTM-dead-30191241>
Sun Feb 14 1999 14:31:56
67 ..c -rwxrwxrwx 0
0
30191259
<part2.img-_RIANGLE.GIF-dead-30191259>
Sun Feb 14 1999 14:31:58
67 m.. -rwxrwxrwx 0
0
30191259
<part2.img-_RIANGLE.GIF-dead-30191259>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Sun Feb 14 1999 14:32:10
336 ..c -rwxrwxrwx 0
0
30191277
<part2.img-_KEYS~1.HTM-dead-30191277>
Sun Feb 14 1999 14:32:12 1015 ..c -rwxrwxrwx 0
0
16329957
<part2.img-_EY~1.HTM-dead-16329957>
336 m.. -rwxrwxrwx 0
0
30191277 <part2.img_KEYS~1.HTM-dead-30191277>
107 ..c -rwxrwxrwx 0
0
16416737 <part2.img_EY~1.HTM-dead-16416737>
Sun Feb 14 1999 14:32:14
107 m.. -rwxrwxrwx 0
0
16416737
<part2.img-_EY~1.HTM-dead-16416737>
1015 m.. -rwxrwxrwx 0
0
16329957 <part2.img_EY~1.HTM-dead-16329957>
80 ..c -rwxrwxrwx 0
0
16330048 <part2.img_RIANG~1.GIF-dead-16330048>
Sun Feb 14 1999 14:32:16
80 m.. -rwxrwxrwx 0
0
16330048
<part2.img-_RIANG~1.GIF-dead-16330048>
Sun Feb 14 1999 14:32:28 1017 ..c -rwxrwxrwx 0
0
30191279
<part2.img-_KEYS~1.HTM-dead-30191279>
Sun Feb 14 1999 14:32:30 1017 m.. -rwxrwxrwx 0
0
30191279
<part2.img-_KEYS~1.HTM-dead-30191279>
Sun Feb 14 1999 14:32:34 4837 ..c -rwxrwxrwx 0
0
16416739
<part2.img-_KEYS~1.HTM-dead-16416739>
Sun Feb 14 1999 14:32:36 4837 m.. -rwxrwxrwx 0
0
16416739
<part2.img-_KEYS~1.HTM-dead-16416739>
Sun Feb 14 1999 14:32:50 2113 ..c -rwxrwxrwx 0
0
16330053
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
<part2.img-_KEYS~1.HTM-dead-16330053>
Sun Feb 14 1999 14:32:52 2113 m.. -rwxrwxrwx 0
0
16330053
<part2.img-_KEYS~1.HTM-dead-16330053>
Sun Feb 14 1999 14:33:04 1898 ..c -rwxrwxrwx 0
0
30191282
<part2.img-_EFERE~2.HTM-dead-30191282>
Sun Feb 14 1999 14:33:06 1898 m.. -rwxrwxrwx 0
0
30191282
<part2.img-_EFERE~2.HTM-dead-30191282>
Sun Feb 14 1999 14:33:18 3836 ..c -rwxrwxrwx 0
0
16416741
<part2.img-_NTRO~1.HTM-dead-16416741>
Sun Feb 14 1999 14:33:20 3836 m.. -rwxrwxrwx 0
0
16416741
<part2.img-_NTRO~1.HTM-dead-16416741>
Sun Feb 14 1999 14:35:32 3715 ..c -rwxrwxrwx 0
0
30191284
<part2.img-_KKIE~1.HTM-dead-30191284>
Sun Feb 14 1999 14:35:34 3715 m.. -rwxrwxrwx 0
0
30191284
<part2.img-_KKIE~1.HTM-dead-30191284>
Sun Feb 14 1999 14:35:36
497 ..c -rwxrwxrwx 0
0
16330060
<part2.img-_KKIE_~1.GIF-dead-16330060>
Sun Feb 14 1999 14:35:38
497 m.. -rwxrwxrwx 0
0
16330060
<part2.img-_KKIE_~1.GIF-dead-16330060>
Sun Feb 14 1999 14:35:48 11206 ..c -rwxrwxrwx 0
0
16330062
<part2.img-_NFINI~1.JPE-dead-16330062>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Sun Feb 14 1999 14:35:52 11206 m.. -rwxrwxrwx 0
0
16330062
<part2.img-_NFINI~1.JPE-dead-16330062>
Sun Feb 14 1999 14:36:50 14670 ..c -rwxrwxrwx 0
0
16416745
<part2.img-_ITLE4.GIF-dead-16416745>
Sun Feb 14 1999 14:36:54 14670 m.. -rwxrwxrwx 0
0
16416745
<part2.img-_ITLE4.GIF-dead-16416745>
683 ..c -rwxrwxrwx 0
0
16330065 <part2.img-_2TRA~1.GIF-dead-16330065>
Sun Feb 14 1999 14:36:56
683 m.. -rwxrwxrwx 0
0
16330065
<part2.img-_2-TRA~1.GIF-dead-16330065>
Sun Feb 14 1999 14:37:38 3544 ..c -rwxrwxrwx 0
0
30191287
<part2.img-_ICTON~1.HTM-dead-30191287>
Sun Feb 14 1999 14:37:40 3544 m.. -rwxrwxrwx 0
0
30191287
<part2.img-_ICTON~1.HTM-dead-30191287>
Sun Feb 14 1999 14:37:42 3573 ..c -rwxrwxrwx 0
0
30191289
<part2.img-_RSTONE1.GIF-dead-30191289>
Sun Feb 14 1999 14:37:44 14198 ..c -rwxrwxrwx 0
0
30191291
<part2.img-_OTSAR~1.JPE-dead-30191291>
3573 m.. -rwxrwxrwx 0
0
30191289 <part2.img_RSTONE1.GIF-dead-30191289>
229 ..c -rwxrwxrwx 0
0
16416758 <part2.img_ASTCO~1.GIF-dead-16416758>
Sun Feb 14 1999 14:37:46
229 m.. -rwxrwxrwx 0
0
16416758
<part2.img-_ASTCO~1.GIF-dead-16416758>
3104 ..c -rwxrwxrwx 0
0
16330067 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
_LTA150.GIF-dead-16330067>
Sun Feb 14 1999 14:37:48 14198 m.. -rwxrwxrwx 0
0
30191291
<part2.img-_OTSAR~1.JPE-dead-30191291>
Sun Feb 14 1999 14:37:50 3104 m.. -rwxrwxrwx 0
0
16330067
<part2.img-_LTA150.GIF-dead-16330067>
Sun Feb 14 1999 14:38:50
730 ..c -rwxrwxrwx 0
0
16416747
<part2.img-_EATUR~1.HTM-dead-16416747>
Sun Feb 14 1999 14:38:52
730 m.. -rwxrwxrwx 0
0
16416747
<part2.img-_EATUR~1.HTM-dead-16416747>
Sun Feb 14 1999 14:39:06 8567 ..c -rwxrwxrwx 0
0
16330069
<part2.img-_MIRAN~1.HTM-dead-16330069>
Sun Feb 14 1999 14:39:08 8567 m.. -rwxrwxrwx 0
0
16330069
<part2.img-_MIRAN~1.HTM-dead-16330069>
Sun Feb 14 1999 14:40:26 3681 ..c -rwxrwxrwx 0
0
16330071
<part2.img-_RANCH~1.HTM-dead-16330071>
Sun Feb 14 1999 14:40:28 3681 m.. -rwxrwxrwx 0
0
16330071
<part2.img-_RANCH~1.HTM-dead-16330071>
Sun Feb 14 1999 14:40:30 7567 ..c -rwxrwxrwx 0
0
16330073
<part2.img-_NV125~1.JPE-dead-16330073>
20462 ..c -rwxrwxrwx 0
0
16416753 <part2.img-_MAP.GIF-dead-16416753>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Sun Feb 14 1999 14:40:32 9440 ..c -rwxrwxrwx 0
0
16416760
<part2.img-_NV117~1.JPE-dead-16416760>
7141 ..c -rwxrwxrwx 0
0
30191310 <part2.img_NV124~1.JPE-dead-30191310>
Sun Feb 14 1999 14:40:42 7567 m.. -rwxrwxrwx 0
0
16330073
<part2.img-_NV125~1.JPE-dead-16330073>
9440 m.. -rwxrwxrwx 0
0
16416760 <part2.img_NV117~1.JPE-dead-16416760>
Sun Feb 14 1999 14:40:50 7141 m.. -rwxrwxrwx 0
0
30191310
<part2.img-_NV124~1.JPE-dead-30191310>
Sun Feb 14 1999 14:40:58 8851 ..c -rwxrwxrwx 0
0
30191316
<part2.img-_NV119~1.JPE-dead-30191316>
3247 ..c -rwxrwxrwx 0
0
16330075 <part2.img_NV121~1.JPE-dead-16330075>
Sun Feb 14 1999 14:41:00 20462 m.. -rwxrwxrwx 0
0
16416753
<part2.img-_-MAP.GIF-dead-16416753>
3247 m.. -rwxrwxrwx 0
0
16330075 <part2.img_NV121~1.JPE-dead-16330075>
Sun Feb 14 1999 14:41:02 8851 m.. -rwxrwxrwx 0
0
30191316
<part2.img-_NV119~1.JPE-dead-30191316>
Sun Feb 14 1999 14:41:32 2629 ..c -rwxrwxrwx 0
0
16416768
<part2.img-_TN_BG~1.JPE-dead-16416768>
404 ..c -rwxrwxrwx 0
0
16330077 <part2.img_OME(2).GIF-dead-16330077>
Sun Feb 14 1999 14:41:34 2629 m.. -rwxrwxrwx 0
0
16416768
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
<part2.img-_TN_BG~1.JPE-dead-16416768>
404 m.. -rwxrwxrwx 0
0
16330077 <part2.img_OME(2).GIF-dead-16330077>
Sun Feb 14 1999 14:42:32 2629 ..c -rwxrwxrwx 0
0
16330079
<part2.img-_TN_BG~1.JPE-dead-16330079>
Sun Feb 14 1999 14:42:34 2629 m.. -rwxrwxrwx 0
0
16330079
<part2.img-_TN_BG~1.JPE-dead-16330079>
Sun Feb 14 1999 14:42:36
404 ..c -rwxrwxrwx 0
0
30191324
<part2.img-_OME(1).GIF-dead-30191324>
Sun Feb 14 1999 14:42:38
404 m.. -rwxrwxrwx 0
0
30191324
<part2.img-_OME(1).GIF-dead-30191324>
Sun Feb 14 1999 14:43:14 2629 ..c -rwxrwxrwx 0
0
16330082
<part2.img-_TN_BG~2.JPE-dead-16330082>
Sun Feb 14 1999 14:43:16 2629 m.. -rwxrwxrwx 0
0
16330082
<part2.img-_TN_BG~2.JPE-dead-16330082>
Sun Feb 14 1999 14:43:18
404 ..c -rwxrwxrwx 0
0
30191318
<part2.img-_OME(2).GIF-dead-30191318>
Sun Feb 14 1999 14:43:20
404 m.. -rwxrwxrwx 0
0
30191318
<part2.img-_OME(2).GIF-dead-30191318>
Sun Feb 14 1999 14:43:30 8828 ..c -rwxrwxrwx 0
0
30191326
<part2.img-_UDWK1~1.HTM-dead-30191326>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Sun Feb 14 1999 14:43:32 2629 ..c -rwxrwxrwx 0
0
16120335
<part2.img-_TN_BG~2.JPE-dead-16120335>
Sun Feb 14 1999 14:43:34 2629 m.. -rwxrwxrwx 0
0
16120335
<part2.img-_TN_BG~2.JPE-dead-16120335>
178920 ..c -rwxrwxrwx 0
0
16330084 <part2.img_RACE5~1.JPE-dead-16330084>
Sun Feb 14 1999 14:43:36 8828 m.. -rwxrwxrwx 0
0
30191326
<part2.img-_UDWK1~1.HTM-dead-30191326>
Sun Feb 14 1999 14:43:40 5602 ..c -rwxrwxrwx 0
0
16330086
<part2.img-_UDI01.GIF-dead-16330086>
Sun Feb 14 1999 14:43:46 4326 ..c -rwxrwxrwx 0
0
16120324
<part2.img-_UDI02.GIF-dead-16120324>
Sun Feb 14 1999 14:43:48 5126 ..c -rwxrwxrwx 0
0
30191330
<part2.img-_UDI04.GIF-dead-30191330>
Sun Feb 14 1999 14:43:50 5126 m.. -rwxrwxrwx 0
0
30191330
<part2.img-_UDI04.GIF-dead-30191330>
4326 m.. -rwxrwxrwx 0
0
16120324 <part2.img_UDI02.GIF-dead-16120324>
Sun Feb 14 1999 14:43:52 17844 ..c -rwxrwxrwx 0
0
16120330
<part2.img-_AVE_9~1.JPE-dead-16120330>
23607 ..c -rwxrwxrwx 0
0
30191332 <part2.img_OBNCE~1.JPE-dead-30191332>
Sun Feb 14 1999 14:44:00 5602 m.. -rwxrwxrwx 0
0
16330086
<part2.img-_UDI01.GIF-dead-16330086>
Sun Feb 14 1999 14:44:02 23607 m.. -rwxrwxrwx 0
0
30191332
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
<part2.img-_OBNCE~1.JPE-dead-30191332>
Sun Feb 14 1999 14:44:04
404 ..c -rwxrwxrwx 0
0
16330088
<part2.img-_OME(3).GIF-dead-16330088>
Sun Feb 14 1999 14:44:06
404 m.. -rwxrwxrwx 0
0
16330088
<part2.img-_OME(3).GIF-dead-16330088>
Sun Feb 14 1999 14:44:12 17844 m.. -rwxrwxrwx 0
0
16120330
<part2.img-_AVE_9~1.JPE-dead-16120330>
Sun Feb 14 1999 14:45:02 178920 m.. -rwxrwxrwx 0
0
16330084
<part2.img-_RACE5~1.JPE-dead-16330084>
Sun Feb 14 1999 14:47:30
932 ..c -rwxrwxrwx 0
0
16120337
<part2.img-_UDI03~1.HTM-dead-16120337>
Sun Feb 14 1999 14:47:32
932 m.. -rwxrwxrwx 0
0
16120337
<part2.img-_UDI03~1.HTM-dead-16120337>
Sun Feb 14 1999 14:48:24 2778 ..c -rwxrwxrwx 0
0
30191334
<part2.img-_UDIWK~1.HTM-dead-30191334>
Sun Feb 14 1999 14:48:26 2778 m.. -rwxrwxrwx 0
0
30191334
<part2.img-_UDIWK~1.HTM-dead-30191334>
17844 ..c -rwxrwxrwx 0
0
16330090 <part2.img_AVE_9~1.JPE-dead-16330090>
Sun Feb 14 1999 14:48:48 17844 m.. -rwxrwxrwx 0
0
16330090
<part2.img-_AVE_9~1.JPE-dead-16330090>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Sun Feb 14 1999 14:51:24 12228 ..c -rwxrwxrwx 0
0
16120339
<part2.img-_EARCH~1.HTM-dead-16120339>
Sun Feb 14 1999 14:51:26 11336 ..c -rwxrwxrwx 0
0
16120341
<part2.img-_AYTONA.GIF-dead-16120341>
12228 m.. -rwxrwxrwx 0
0
16120339 <part2.img_EARCH~1.HTM-dead-16120339>
Sun Feb 14 1999 14:51:30 11336 m.. -rwxrwxrwx 0
0
16120341
<part2.img-_AYTONA.GIF-dead-16120341>
Sun Feb 14 1999 14:51:34 13400 ..c -rwxrwxrwx 0
0
16120344
<part2.img-_QUARI~1.HTM-dead-16120344>
Sun Feb 14 1999 14:51:36 13400 m.. -rwxrwxrwx 0
0
16120344
<part2.img-_QUARI~1.HTM-dead-16120344>
Sun Feb 14 1999 14:51:38 5636 ..c -rwxrwxrwx 0
0
30191336
<part2.img-_ROP2S.GIF-dead-30191336>
Sun Feb 14 1999 14:51:40 5636 m.. -rwxrwxrwx 0
0
30191336
<part2.img-_ROP2S.GIF-dead-30191336>
Sun Feb 14 1999 14:52:02 2499 ..c -rwxrwxrwx 0
0
16330092
<part2.img-_ATER.GIF-dead-16330092>
Sun Feb 14 1999 14:52:04
376 ..c -rwxrwxrwx 0
0
16330094
<part2.img-_IVIDER.GIF-dead-16330094>
17609 ..c -rwxrwxrwx 0
0
16330096 <part2.img_ANNERA.GIF-dead-16330096>
2499 m.. -rwxrwxrwx 0
0
16330092 <part2.img_ATER.GIF-dead-16330092>
Sun Feb 14 1999 14:52:06
376 m.. -rwxrwxrwx 0
0
16330094
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
<part2.img-_IVIDER.GIF-dead-16330094>
153 ..c -rwxrwxrwx 0
0
16120357 <part2.img_UBBLE.GIF-dead-16120357>
Sun Feb 14 1999 14:52:08 17609 m.. -rwxrwxrwx 0
0
16330096
<part2.img-_ANNERA.GIF-dead-16330096>
153 m.. -rwxrwxrwx 0
0
16120357 <part2.img_UBBLE.GIF-dead-16120357>
Sun Feb 14 1999 14:52:10 8483 ..c -rwxrwxrwx 0
0
16330098
<part2.img-_ANNER.GIF-dead-16330098>
484 ..c -rwxrwxrwx 0
0
16120359 <part2.img_OGO.GIF-dead-16120359>
Sun Feb 14 1999 14:52:12 8483 m.. -rwxrwxrwx 0
0
16330098
<part2.img-_ANNER.GIF-dead-16330098>
484 m.. -rwxrwxrwx 0
0
16120359 <part2.img_OGO.GIF-dead-16120359>
Sun Feb 14 1999 14:52:46 2099 ..c -rwxrwxrwx 0
0
16120361
<part2.img-_ISH~1.HTM-dead-16120361>
Sun Feb 14 1999 14:52:48 2099 m.. -rwxrwxrwx 0
0
16120361
<part2.img-_ISH~1.HTM-dead-16120361>
8263 ..c -rwxrwxrwx 0
0
30191338 <part2.img_ISH.GIF-dead-30191338>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
20147 ..c -rwxrwxrwx 0
0
16330100 <part2.img_EEFSC.GIF-dead-16330100>
Sun Feb 14 1999 14:52:50 8263 m.. -rwxrwxrwx 0
0
30191338
<part2.img-_ISH.GIF-dead-30191338>
Sun Feb 14 1999 14:52:56 20147 m.. -rwxrwxrwx 0
0
16330100
<part2.img-_EEFSC.GIF-dead-16330100>
Sun Feb 14 1999 14:53:30 1388 ..c -rwxrwxrwx 0
0
16120363
<part2.img-_ISH(1~2.HTM-dead-16120363>
Sun Feb 14 1999 14:53:32 1388 m.. -rwxrwxrwx 0
0
16120363
<part2.img-_ISH(1~2.HTM-dead-16120363>
Sun Feb 14 1999 14:53:54
54 ..c -rwxrwxrwx 0
0
16330102
<part2.img-_CKGRN~1.HTM-dead-16330102>
1126 ..c -rwxrwxrwx 0
0
30191341 <part2.img_QUARI~2.HTM-dead-30191341>
Sun Feb 14 1999 14:53:56
89 ..c -rwxrwxrwx 0
0
16330106
<part2.img-_EDBOR~1.GIF-dead-16330106>
1126 m.. -rwxrwxrwx 0
0
30191341 <part2.img_QUARI~2.HTM-dead-30191341>
54 m.. -rwxrwxrwx 0
0
16330102 <part2.img_CKGRN~1.HTM-dead-16330102>
Sun Feb 14 1999 14:53:58
89 m.. -rwxrwxrwx 0
0
16330106
<part2.img-_EDBOR~1.GIF-dead-16330106>
Sun Feb 14 1999 14:54:00 54511 ..c -rwxrwxrwx 0
0
16120366
<part2.img-_EARTL~1.JPE-dead-16120366>
Sun Feb 14 1999 14:54:04 1933 ..c -rwxrwxrwx 0
0
16120370
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
<part2.img-_EWPAGES.GIF-dead-16120370>
471 ..c -rwxrwxrwx 0
0
16120368 <part2.img_LINE.GIF-dead-16120368>
Sun Feb 14 1999 14:54:06 1933 m.. -rwxrwxrwx 0
0
16120370
<part2.img-_EWPAGES.GIF-dead-16120370>
471 m.. -rwxrwxrwx 0
0
16120368 <part2.img_LINE.GIF-dead-16120368>
Sun Feb 14 1999 14:54:12 14376 ..c -rwxrwxrwx 0
0
16120379
<part2.img-_.GIF-dead-16120379>
7647 ..c -rwxrwxrwx 0
0
30191343 <part2.img-_1.GIFdead-30191343>
6452 ..c -rwxrwxrwx 0
0
30191350 <part2.img-_3.GIFdead-30191350>
Sun Feb 14 1999 14:54:18 7647 m.. -rwxrwxrwx 0
0
30191343
<part2.img-_1.GIF-dead-30191343>
Sun Feb 14 1999 14:54:20 6452 m.. -rwxrwxrwx 0
0
30191350
<part2.img-_3.GIF-dead-30191350>
Sun Feb 14 1999 14:54:26 22641 ..c -rwxrwxrwx 0
0
16120381
<part2.img-_OOKS.GIF-dead-16120381>
14376 m.. -rwxrwxrwx 0
0
16120379 <part2.img-_.GIFdead-16120379>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Sun Feb 14 1999 14:54:30 3029 ..c -rwxrwxrwx 0
0
16120383
<part2.img-_OOKS(1).GIF-dead-16120383>
Sun Feb 14 1999 14:54:32 3029 m.. -rwxrwxrwx 0
0
16120383
<part2.img-_OOKS(1).GIF-dead-16120383>
Sun Feb 14 1999 14:54:38 22641 m.. -rwxrwxrwx 0
0
16120381
<part2.img-_OOKS.GIF-dead-16120381>
Sun Feb 14 1999 14:54:48 54511 m.. -rwxrwxrwx 0
0
16120366
<part2.img-_EARTL~1.JPE-dead-16120366>
Sun Feb 14 1999 14:54:50 3460 ..c -rwxrwxrwx 0
0
16330108
<part2.img-_ISHIN~1.HTM-dead-16330108>
Sun Feb 14 1999 14:54:52 3460 m.. -rwxrwxrwx 0
0
16330108
<part2.img-_ISHIN~1.HTM-dead-16330108>
78 ..c -rwxrwxrwx 0
0
30191352 <part2.img_ACKG.GIF-dead-30191352>
Sun Feb 14 1999 14:54:54
78 m.. -rwxrwxrwx 0
0
30191352
<part2.img-_ACKG.GIF-dead-30191352>
1261 ..c -rwxrwxrwx 0
0
16120388 <part2.img_UTTON~3.GIF-dead-16120388>
2163 ..c -rwxrwxrwx 0
0
16120385 <part2.img_OGO1.GIF-dead-16120385>
1435 ..c -rwxrwxrwx 0
0
16330111 <part2.img_UTTON~2.GIF-dead-16330111>
1308 ..c -rwxrwxrwx 0
0
16330113 <part2.img_UTTON5.GIF-dead-16330113>
Sun Feb 14 1999 14:54:56 1308 m.. -rwxrwxrwx 0
0
16330113
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
<part2.img-_UTTON5.GIF-dead-16330113>
1261 m.. -rwxrwxrwx 0
0
16120388 <part2.img_UTTON~3.GIF-dead-16120388>
1142 ..c -rwxrwxrwx 0
0
16330115 <part2.img_UTTON10.GIF-dead-16330115>
2163 m.. -rwxrwxrwx 0
0
16120385 <part2.img_OGO1.GIF-dead-16120385>
1435 m.. -rwxrwxrwx 0
0
16330111 <part2.img_UTTON~2.GIF-dead-16330111>
1373 ..c -rwxrwxrwx 0
0
16120390 <part2.img_UTTON6.GIF-dead-16120390>
1308 ..c -rwxrwxrwx 0
0
16120392 <part2.img_UTTON11.GIF-dead-16120392>
1171 ..c -rwxrwxrwx 0
0
30191358 <part2.img_UTTON8.GIF-dead-30191358>
1370 ..c -rwxrwxrwx 0
0
30191354 <part2.img_UTTON4.GIF-dead-30191354>
Sun Feb 14 1999 14:54:58 2013 ..c -rwxrwxrwx 0
0
16120394
<part2.img-_INILOGO.GIF-dead-16120394>
1149 ..c -rwxrwxrwx 0
0
16330117 <part2.img_UTTON9.GIF-dead-16330117>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
1142 m.. -rwxrwxrwx 0
0
16330115 <part2.img_UTTON10.GIF-dead-16330115>
1373 m.. -rwxrwxrwx 0
0
16120390 <part2.img_UTTON6.GIF-dead-16120390>
1308 m.. -rwxrwxrwx 0
0
16120392 <part2.img_UTTON11.GIF-dead-16120392>
1171 m.. -rwxrwxrwx 0
0
30191358 <part2.img_UTTON8.GIF-dead-30191358>
1370 m.. -rwxrwxrwx 0
0
30191354 <part2.img_UTTON4.GIF-dead-30191354>
Sun Feb 14 1999 14:55:00 3381 ..c -rwxrwxrwx 0
0
30191360
<part2.img-_ARINE~1.HTM-dead-30191360>
1149 m.. -rwxrwxrwx 0
0
16330117 <part2.img_UTTON9.GIF-dead-16330117>
2013 m.. -rwxrwxrwx 0
0
16120394 <part2.img_INILOGO.GIF-dead-16120394>
Sun Feb 14 1999 14:55:02 3381 m.. -rwxrwxrwx 0
0
30191360
<part2.img-_ARINE~1.HTM-dead-30191360>
Sun Feb 14 1999 14:55:04 1774 ..c -rwxrwxrwx 0
0
30191362
<part2.img-_ADELINE.GIF-dead-30191362>
Sun Feb 14 1999 14:55:06 9344 ..c -rwxrwxrwx 0
0
16330119
<part2.img-_YPE~1.HTM-dead-16330119>
1774 m.. -rwxrwxrwx 0
0
30191362 <part2.img_ADELINE.GIF-dead-30191362>
Sun Feb 14 1999 14:55:08 1586 ..c -rwxrwxrwx 0
0
16120396
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
<part2.img-_OTNAV.GIF-dead-16120396>
9344 m.. -rwxrwxrwx 0
0
16330119 <part2.img_YPE~1.HTM-dead-16330119>
Sun Feb 14 1999 14:55:10 1586 m.. -rwxrwxrwx 0
0
16120396
<part2.img-_OTNAV.GIF-dead-16120396>
Sun Feb 14 1999 14:55:44 21639 ..c -rwxrwxrwx 0
0
30191365
<part2.img-_QUAWE~2.HTM-dead-30191365>
Sun Feb 14 1999 14:55:48 21639 m.. -rwxrwxrwx 0
0
30191365
<part2.img-_QUAWE~2.HTM-dead-30191365>
Sun Feb 14 1999 14:55:50 16576 ..c -rwxrwxrwx 0
0
16120399
<part2.img-_NNERO~1.GIF-dead-16120399>
Sun Feb 14 1999 14:55:54 2116 ..c -rwxrwxrwx 0
0
30191368
<part2.img-_QUAWE~1.GIF-dead-30191368>
Sun Feb 14 1999 14:55:56 2116 m.. -rwxrwxrwx 0
0
30191368
<part2.img-_QUAWE~1.GIF-dead-30191368>
Sun Feb 14 1999 14:55:58 3992 ..c -rwxrwxrwx 0
0
30191376
<part2.img-_ORLD1~1.GIF-dead-30191376>
16576 m.. -rwxrwxrwx 0
0
16120399 <part2.img_NNERO~1.GIF-dead-16120399>
Sun Feb 14 1999 14:56:00 3992 m.. -rwxrwxrwx 0
0
30191376
<part2.img-_ORLD1~1.GIF-dead-30191376>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Sun Feb 14 1999 14:56:04
907 ..c -rwxrwxrwx 0
0
16330121
<part2.img-_AWR.GIF-dead-16330121>
Sun Feb 14 1999 14:56:06
918 ..c -rwxrwxrwx 0
0
16120404
<part2.img-_AWR.GIF-dead-16120404>
907 m.. -rwxrwxrwx 0
0
16330121 <part2.img_AWR.GIF-dead-16330121>
Sun Feb 14 1999 14:56:08
918 m.. -rwxrwxrwx 0
0
16120404
<part2.img-_AWR.GIF-dead-16120404>
921 ..c -rwxrwxrwx 0
0
30191378 <part2.img_AWR.GIF-dead-30191378>
Sun Feb 14 1999 14:56:10
921 m.. -rwxrwxrwx 0
0
30191378
<part2.img-_AWR.GIF-dead-30191378>
944 ..c -rwxrwxrwx 0
0
30191380 <part2.img_AWR.GIF-dead-30191380>
923 ..c -rwxrwxrwx 0
0
16330123 <part2.img_AWR.GIF-dead-16330123>
Sun Feb 14 1999 14:56:12
944 m.. -rwxrwxrwx 0
0
30191380
<part2.img-_AWR.GIF-dead-30191380>
923 m.. -rwxrwxrwx 0
0
16330123 <part2.img_AWR.GIF-dead-16330123>
Sun Feb 14 1999 14:56:22 1822 ..c -rwxrwxrwx 0
0
30191382
<part2.img-_TDIG.GIF-dead-30191382>
Sun Feb 14 1999 14:56:24 16001 ..c -rwxrwxrwx 0
0
30191389
<part2.img-_ROPIC~1.GIF-dead-30191389>
1822 m.. -rwxrwxrwx 0
0
30191382 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
_TDIG.GIF-dead-30191382>
Sun Feb 14 1999 14:56:28 16001 m.. -rwxrwxrwx 0
0
30191389
<part2.img-_ROPIC~1.GIF-dead-30191389>
Sun Feb 14 1999 14:56:38 2673 ..c -rwxrwxrwx 0
0
19037197
<part2.img-_TSEAR~1.HTM-dead-19037197>
Sun Feb 14 1999 14:56:40 2673 m.. -rwxrwxrwx 0
0
19037197
<part2.img-_TSEAR~1.HTM-dead-19037197>
Sun Feb 14 1999 14:57:10 6243 ..c -rwxrwxrwx 0
0
30191384
<part2.img-_NDEX(~4.HTM-dead-30191384>
Sun Feb 14 1999 14:57:12 6243 m.. -rwxrwxrwx 0
0
30191384
<part2.img-_NDEX(~4.HTM-dead-30191384>
3713 ..c -rwxrwxrwx 0
0
19037200 <part2.img_NDEX-~2.HTM-dead-19037200>
Sun Feb 14 1999 14:57:14 3713 m.. -rwxrwxrwx 0
0
19037200
<part2.img-_NDEX-~2.HTM-dead-19037200>
5349 ..c -rwxrwxrwx 0
0
16330125 <part2.img_AWS~1.HTM-dead-16330125>
Sun Feb 14 1999 14:57:16 23204 ..c -rwxrwxrwx 0
0
16330128
<part2.img-_AWS-L~1.GIF-dead-16330128>
5349 m.. -rwxrwxrwx 0
0
16330125 <part2.img_AWS~1.HTM-dead-16330125>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Sun Feb 14 1999 14:57:18 11584 ..c -rwxrwxrwx 0
0
19037203
<part2.img-_AWS-S~1.GIF-dead-19037203>
Sun Feb 14 1999 14:57:24 12174 ..c -rwxrwxrwx 0
0
30191391
<part2.img-_EBRIN~1.JPE-dead-30191391>
Sun Feb 14 1999 14:57:26 6850 ..c -rwxrwxrwx 0
0
16330130
<part2.img-_EBRIN~1.JPE-dead-16330130>
Sun Feb 14 1999 14:57:28 11584 m.. -rwxrwxrwx 0
0
19037203
<part2.img-_AWS-S~1.GIF-dead-19037203>
Sun Feb 14 1999 14:57:34 6850 m.. -rwxrwxrwx 0
0
16330130
<part2.img-_EBRIN~1.JPE-dead-16330130>
Sun Feb 14 1999 14:57:36 12174 m.. -rwxrwxrwx 0
0
30191391
<part2.img-_EBRIN~1.JPE-dead-30191391>
23204 m.. -rwxrwxrwx 0
0
16330128 <part2.img_AWS-L~1.GIF-dead-16330128>
Sun Feb 14 1999 14:58:36 7574 ..c -rwxrwxrwx 0
0
16330137
<part2.img-_QUARI~1.HTM-dead-16330137>
Sun Feb 14 1999 14:58:38 7574 m.. -rwxrwxrwx 0
0
16330137
<part2.img-_QUARI~1.HTM-dead-16330137>
Sun Feb 14 1999 14:58:46 4212 ..c -rwxrwxrwx 0
0
16330139
<part2.img-_STAR.GIF-dead-16330139>
1952 ..c -rwxrwxrwx 0
0
19037205 <part2.img__CLR.GIF-dead-19037205>
Sun Feb 14 1999 14:58:48 4212 m.. -rwxrwxrwx 0
0
16330139
<part2.img-_STAR.GIF-dead-16330139>
Sun Feb 14 1999 14:58:50 1952 m.. -rwxrwxrwx 0
0
19037205
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
<part2.img-__CLR.GIF-dead-19037205>
Sun Feb 14 1999 14:59:12 20807 ..c -rwxrwxrwx 0
0
19037207
<part2.img-_NHAB~1.HTM-dead-19037207>
Sun Feb 14 1999 14:59:16 20807 m.. -rwxrwxrwx 0
0
19037207
<part2.img-_NHAB~1.HTM-dead-19037207>
Sun Feb 14 1999 14:59:52 5931 ..c -rwxrwxrwx 0
0
19037210
<part2.img-_EB_DI~2.HTM-dead-19037210>
Sun Feb 14 1999 14:59:54 5931 m.. -rwxrwxrwx 0
0
19037210
<part2.img-_EB_DI~2.HTM-dead-19037210>
Sun Feb 14 1999 15:00:16
43 ..c -rwxrwxrwx 0
0
19037231
<part2.img-_.GIF-dead-19037231>
Sun Feb 14 1999 15:00:18
43 m.. -rwxrwxrwx 0
0
19037231
<part2.img-_.GIF-dead-19037231>
Sun Feb 14 1999 15:00:24 12957 ..c -rwxrwxrwx 0
0
16330147
<part2.img-_QUARI~1.GIF-dead-16330147>
Sun Feb 14 1999 15:00:28 12957 m.. -rwxrwxrwx 0
0
16330147
<part2.img-_QUARI~1.GIF-dead-16330147>
Sun Feb 14 1999 15:01:26 6258 ..c -rwxrwxrwx 0
0
19037235
<part2.img-_IC2~1.JPE-dead-19037235>
Sun Feb 14 1999 15:01:28 6258 m.. -rwxrwxrwx 0
0
19037235
<part2.img-_IC2~1.JPE-dead-19037235>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Sun Feb 14 1999 15:03:22 3599 ..c -rwxrwxrwx 0
0
19037237
<part2.img-_NDEX(~7.HTM-dead-19037237>
Sun Feb 14 1999 15:03:24 3599 m.. -rwxrwxrwx 0
0
19037237
<part2.img-_NDEX(~7.HTM-dead-19037237>
Sun Feb 14 1999 15:03:50 6250 ..c -rwxrwxrwx 0
0
16330154
<part2.img-_88369~1.GIF-dead-16330154>
Sun Feb 14 1999 15:03:58 6250 m.. -rwxrwxrwx 0
0
16330154
<part2.img-_88369~1.GIF-dead-16330154>
Sun Feb 14 1999 15:04:08 12102 ..c -rwxrwxrwx 0
0
19037239
<part2.img-_OE2~1.JPE-dead-19037239>
Sun Feb 14 1999 15:04:24 12102 m.. -rwxrwxrwx 0
0
19037239
<part2.img-_OE2~1.JPE-dead-19037239>
Sun Feb 14 1999 15:04:54 4858 ..c -rwxrwxrwx 0
0
19037233
<part2.img-_ITE~1.HTM-dead-19037233>
Sun Feb 14 1999 15:04:56 4858 m.. -rwxrwxrwx 0
0
19037233
<part2.img-_ITE~1.HTM-dead-19037233>
Sun Feb 14 1999 15:05:24 11081 ..c -rwxrwxrwx 0
0
19037244
<part2.img-_OGBAN~1.GIF-dead-19037244>
Sun Feb 14 1999 15:05:30 11081 m.. -rwxrwxrwx 0
0
19037244
<part2.img-_OGBAN~1.GIF-dead-19037244>
Sun Feb 14 1999 15:05:34 1759 ..c -rwxrwxrwx 0
0
19037253
<part2.img-_CTIVE~1.CLA-dead-19037253>
Sun Feb 14 1999 15:05:36 1759 m.. -rwxrwxrwx 0
0
19037253
<part2.img-_CTIVE~1.CLA-dead-19037253>
Sun Feb 14 1999 15:05:48 4674 ..c -rwxrwxrwx 0
0
19037255
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
<part2.img-_ACK(2).GIF-dead-19037255>
Sun Feb 14 1999 15:05:50 4674 m.. -rwxrwxrwx 0
0
19037255
<part2.img-_ACK(2).GIF-dead-19037255>
Sun Feb 14 1999 15:05:52
177 ..c -rwxrwxrwx 0
0
16330157
<part2.img-_UESTB~1.GIF-dead-16330157>
223 ..c -rwxrwxrwx 0
0
19037257 <part2.img_OGO_B.GIF-dead-19037257>
Sun Feb 14 1999 15:05:54
177 m.. -rwxrwxrwx 0
0
16330157
<part2.img-_UESTB~1.GIF-dead-16330157>
223 m.. -rwxrwxrwx 0
0
19037257 <part2.img_OGO_B.GIF-dead-19037257>
Sun Feb 14 1999 15:06:42 2197 ..c -rwxrwxrwx 0
0
16330149
<part2.img-_ISHNA~1.HTM-dead-16330149>
Sun Feb 14 1999 15:06:44 3559 ..c -rwxrwxrwx 0
0
19037259
<part2.img-_ISHTO~2.HTM-dead-19037259>
2197 m.. -rwxrwxrwx 0
0
16330149 <part2.img_ISHNA~1.HTM-dead-16330149>
Sun Feb 14 1999 15:06:46 3559 m.. -rwxrwxrwx 0
0
19037259
<part2.img-_ISHTO~2.HTM-dead-19037259>
3897 ..c -rwxrwxrwx 0
0
16330159 <part2.img_UROPA~1.JPE-dead-16330159>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Sun Feb 14 1999 15:06:48 3897 m.. -rwxrwxrwx 0
0
16330159
<part2.img-_UROPA~1.JPE-dead-16330159>
14871 ..c -rwxrwxrwx 0
0
16330161 <part2.img_E_ANIM.GIF-dead-16330161>
Sun Feb 14 1999 15:06:52 6036 ..c -rwxrwxrwx 0
0
19037261
<part2.img-_UNEUP.GIF-dead-19037261>
14871 m.. -rwxrwxrwx 0
0
16330161 <part2.img_E_ANIM.GIF-dead-16330161>
1757 ..c -rwxrwxrwx 0
0
19037265 <part2.img_OUNT(1).GIF-dead-19037265>
Sun Feb 14 1999 15:06:54 1757 m.. -rwxrwxrwx 0
0
19037265
<part2.img-_OUNT(1).GIF-dead-19037265>
Sun Feb 14 1999 15:06:56 6036 m.. -rwxrwxrwx 0
0
19037261
<part2.img-_UNEUP.GIF-dead-19037261>
Sun Feb 14 1999 17:26:46 16284 ..c -rwxrwxrwx 0
0
19037276
<part2.img-_EARCH~9.HTM-dead-19037276>
Sun Feb 14 1999 17:26:48 16284 m.. -rwxrwxrwx 0
0
19037276
<part2.img-_EARCH~9.HTM-dead-19037276>
Sun Feb 14 1999 17:26:50
927 ..c -rwxrwxrwx 0
0
19037267
<part2.img-_O.GIF-dead-19037267>
Sun Feb 14 1999 17:26:52
927 m.. -rwxrwxrwx 0
0
19037267
<part2.img-_O.GIF-dead-19037267>
Sun Feb 14 1999 17:27:02 8809 ..c -rwxrwxrwx 0
0
16330166
<part2.img-_CCUQU~1.GIF-dead-16330166>
Sun Feb 14 1999 17:27:04 8809 m.. -rwxrwxrwx 0
0
16330166
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
<part2.img-_CCUQU~1.GIF-dead-16330166>
Sun Feb 14 1999 17:27:08 1316 ..c -rwxrwxrwx 0
0
16330168
<part2.img-_NK_LOGO.GIF-dead-16330168>
5048 ..c -rwxrwxrwx 0
0
19037282 <part2.img_NK_NA~1.GIF-dead-19037282>
Sun Feb 14 1999 17:27:10 1316 m.. -rwxrwxrwx 0
0
16330168
<part2.img-_NK_LOGO.GIF-dead-16330168>
Sun Feb 14 1999 17:27:12 5048 m.. -rwxrwxrwx 0
0
19037282
<part2.img-_NK_NA~1.GIF-dead-19037282>
Sun Feb 14 1999 17:27:18 3215 ..c -rwxrwxrwx 0
0
19037279
<part2.img-_NK_NA~2.GIF-dead-19037279>
Sun Feb 14 1999 17:27:20 2673 ..c -rwxrwxrwx 0
0
19037289
<part2.img-_NK_NA~4.GIF-dead-19037289>
2950 ..c -rwxrwxrwx 0
0
19037286 <part2.img_NK_NA~3.GIF-dead-19037286>
Sun Feb 14 1999 17:27:22 2673 m.. -rwxrwxrwx 0
0
19037289
<part2.img-_NK_NA~4.GIF-dead-19037289>
2950 m.. -rwxrwxrwx 0
0
19037286 <part2.img_NK_NA~3.GIF-dead-19037286>
3199 ..c -rwxrwxrwx 0
0
16330171 <part2.img_NK_NA~1.GIF-dead-16330171>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
3215 m.. -rwxrwxrwx 0
0
19037279 <part2.img_NK_NA~2.GIF-dead-19037279>
Sun Feb 14 1999 17:27:24 3199 m.. -rwxrwxrwx 0
0
16330171
<part2.img-_NK_NA~1.GIF-dead-16330171>
Sun Feb 14 1999 17:27:32 15260 ..c -rwxrwxrwx 0
0
16330177
<part2.img-_NR_TV~1.GIF-dead-16330177>
Sun Feb 14 1999 17:27:42 15260 m.. -rwxrwxrwx 0
0
16330177
<part2.img-_NR_TV~1.GIF-dead-16330177>
Sun Feb 14 1999 17:28:04 3013 ..c -rwxrwxrwx 0
0
19037293
<part2.img-_NK_NA~5.GIF-dead-19037293>
848 ..c -rwxrwxrwx 0
0
16330180 <part2.img_MG_LI~1.JPE-dead-16330180>
925 ..c -rwxrwxrwx 0
0
19037296 <part2.img_MG_BU~1.JPE-dead-19037296>
Sun Feb 14 1999 17:28:06
925 m.. -rwxrwxrwx 0
0
19037296
<part2.img-_MG_BU~1.JPE-dead-19037296>
3013 m.. -rwxrwxrwx 0
0
19037293 <part2.img_NK_NA~5.GIF-dead-19037293>
848 m.. -rwxrwxrwx 0
0
16330180 <part2.img_MG_LI~1.JPE-dead-16330180>
Sun Feb 14 1999 17:31:30 2944 ..c -rwxrwxrwx 0
0
16330187
<part2.img-_OC_FI~1.HTM-dead-16330187>
Sun Feb 14 1999 17:31:32 2944 m.. -rwxrwxrwx 0
0
16330187
<part2.img-_OC_FI~1.HTM-dead-16330187>
Sun Feb 14 1999 17:31:58 11288 ..c -rwxrwxrwx 0
0
16330190
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
<part2.img-_OC_FI~2.HTM-dead-16330190>
Sun Feb 14 1999 17:32:00 11288 m.. -rwxrwxrwx 0
0
16330190
<part2.img-_OC_FI~2.HTM-dead-16330190>
Sun Feb 14 1999 23:00:00 91136 .a. -rwxrwxrwx 0
0
13408271
<part2.img-_ISRES.DLL-dead-13408271>
3 .a. -rwxrwxrwx 0
0
16492550 <part2.img_FLECOMP.TMP-dead-16492550>
435850 .a. -rwxrwxrwx 0
0
12066821 <part2.img_IS_CMPX.~~~-dead-12066821>
269312 .a. -rwxrwxrwx 0
0
16313865 <part2.img_NINST.728-dead-16313865>
287 .a. -rwxrwxrwx 0
0
16480264 <part2.img_EMPCCSD-dead-16480264>
29132 .a. -rwxrwxrwx 0
0
16420904 <part2.img_HOTOSLE.TMP-dead-16420904>
3 .a. -rwxrwxrwx 0
0
16420907 <part2.img_HOTOSLE.GID-dead-16420907>
3 .a. -rwxrwxrwx 0
0
16492562 <part2.img_ODEM.ID-dead-16492562>
Mon Feb 15 1999 11:07:50 4152 ..c -rwxrwxrwx 0
0
19037298
<part2.img-_ANDTI~1.JPE-dead-19037298>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Mon Feb 15 1999 11:07:52 4152 m.. -rwxrwxrwx 0
0
19037298
<part2.img-_ANDTI~1.JPE-dead-19037298>
Mon Feb 15 1999 11:08:20 9101 ..c -rwxrwxrwx 0
0
16330182
<part2.img-_AYTIT~1.JPE-dead-16330182>
Mon Feb 15 1999 11:08:24 9101 m.. -rwxrwxrwx 0
0
16330182
<part2.img-_AYTIT~1.JPE-dead-16330182>
Mon Feb 15 1999 11:11:38 4643 ..c -rwxrwxrwx 0
0
19037300
<part2.img-_NFOBA~1.HTM-dead-19037300>
Mon Feb 15 1999 11:11:40 4643 m.. -rwxrwxrwx 0
0
19037300
<part2.img-_NFOBA~1.HTM-dead-19037300>
Mon Feb 15 1999 11:12:56 2247 ..c -rwxrwxrwx 0
0
16330186
<part2.img-_EADE~13.GIF-dead-16330186>
Mon Feb 15 1999 11:12:58 2247 m.. -rwxrwxrwx 0
0
16330186
<part2.img-_EADE~13.GIF-dead-16330186>
29965 ..c -rwxrwxrwx 0
0
16330192 <part2.img_7HEAD1.GIF-dead-16330192>
Mon Feb 15 1999 11:13:04
227 ..c -rwxrwxrwx 0
0
16330194
<part2.img-_64.GIF-dead-16330194>
Mon Feb 15 1999 11:13:06 29974 ..c -rwxrwxrwx 0
0
19037302
<part2.img-_7HEAD3.GIF-dead-19037302>
227 m.. -rwxrwxrwx 0
0
16330194 <part2.img_64.GIF-dead-16330194>
Mon Feb 15 1999 11:13:22 29974 m.. -rwxrwxrwx 0
0
19037302
<part2.img-_7HEAD3.GIF-dead-19037302>
Mon Feb 15 1999 11:13:34 29965 m.. -rwxrwxrwx 0
0
16330192
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
<part2.img-_7HEAD1.GIF-dead-16330192>
Mon Feb 15 1999 11:29:54 435850 ..c -rwxrwxrwx 0
0
12066821
<part2.img-_IS_CMPX.~~~-dead-12066821>
Mon Feb 15 1999 11:29:56 435850 m.. -rwxrwxrwx 0
0
12066821
<part2.img-_IS_CMPX.~~~-dead-12066821>
Mon Feb 15 1999 11:30:16 91136 ..c -rwxrwxrwx 0
0
13408271
<part2.img-_ISRES.DLL-dead-13408271>
Mon Feb 15 1999 11:31:56 269312 ..c -rwxrwxrwx 0
0
16313865
<part2.img-_NINST.728-dead-16313865>
Mon Feb 15 1999 11:33:52
3 ..c -rwxrwxrwx 0
0
16492550
<part2.img-_FLECOMP.TMP-dead-16492550>
3 ..c -rwxrwxrwx 0
0
16492562 <part2.img_ODEM.ID-dead-16492562>
Mon Feb 15 1999 11:34:32
3 ..c -rwxrwxrwx 0
0
16420907
<part2.img-_HOTOSLE.GID-dead-16420907>
Mon Feb 15 1999 12:45:50
287 m.c -rwxrwxrwx 0
0
16480264
<part2.img-_EMPCCSD-dead-16480264>
Mon Feb 15 1999 12:45:58 29132 ..c -rwxrwxrwx 0
0
16420904
<part2.img-_HOTOSLE.TMP-dead-16420904>
Mon Feb 15 1999 12:46:00 29132 m.. -rwxrwxrwx 0
0
16420904
<part2.img-_HOTOSLE.TMP-dead-16420904>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Tue Feb 16 1999 23:00:00 9403 .a. -rwxrwxrwx 0
0
10737938
<part2.img-_(1)~2.HTM-dead-10737938>
11105 .a. -rwxrwxrwx 0
0
20025954 <part2.img_ETIMAGE.GIF-dead-20025954>
165 .a. -rwxrwxrwx 0
0
10737865 <part2.img_NDEX_~2.GIF-dead-10737865>
532 .a. -rwxrwxrwx 0
0
20025869 <part2.img_3A.GIF-dead-20025869>
2032 .a. -rwxrwxrwx 0
0
20025859 <part2.img_ROMO1~1.GIF-dead-20025859>
1005 .a. -rwxrwxrwx 0
0
19037405 <part2.img_RUGQR~3.HTM-dead-19037405>
468 .a. -rwxrwxrwx 0
0
19037326 <part2.img_OP02_ON.GIF-dead-19037326>
16284 .a. -rwxrwxrwx 0
0
19037276 <part2.img_EARCH~9.HTM-dead-19037276>
187 .a. -rwxrwxrwx 0
0
10737901 <part2.img_NDEX_~8.GIF-dead-10737901>
3562 .a. -rwxrwxrwx 0
0
19037676 <part2.img_P.GIF-dead-19037676>
4213 .a. -rwxrwxrwx 0
0
19037596 <part2.img_N_TO2~1.JPE-dead-19037596>
9417 .a. -rwxrwxrwx 0
0
19037377 <part2.img_AHOO~1.HTM-dead-19037377>
2738 .a. -rwxrwxrwx 0
0
10738115 <part2.img-_.GIFKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
dead-10738115>
7022 .a. -rwxrwxrwx 0
0
20025918 <part2.img-_134M~1.GIF-dead-20025918>
965 .a. -rwxrwxrwx 0
0
10737790 <part2.img_EWNIH.GIF-dead-10737790>
1049 .a. -rwxrwxrwx 0
0
16329830 <part2.img_EADE~10.GIF-dead-16329830>
1015 .a. -rwxrwxrwx 0
0
16329957 <part2.img_EY~1.HTM-dead-16329957>
1262 .a. -rwxrwxrwx 0
0
19037478 <part2.img-_.GIFdead-19037478>
3852 .a. -rwxrwxrwx 0
0
19037541 <part2.img_N_FA3~1.JPE-dead-19037541>
11288 .a. -rwxrwxrwx 0
0
16330190 <part2.img_OC_FI~2.HTM-dead-16330190>
2752 .a. -rwxrwxrwx 0
0
10737836 <part2.img_NFO~1.JPE-dead-10737836>
8557 .a. -rwxrwxrwx 0
0
16330225 <part2.img_XCENT~2.HTM-dead-16330225>
2072 .a. -rwxrwxrwx 0
0
19037394 <part2.img_EARC~10.HTM-dead-19037394>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
5349 .a. -rwxrwxrwx 0
0
16330125 <part2.img_AWS~1.HTM-dead-16330125>
8809 .a. -rwxrwxrwx 0
0
16330166 <part2.img_CCUQU~1.GIF-dead-16330166>
450 .a. -rwxrwxrwx 0
0
20025902 <part2.img_H(6).GIF-dead-20025902>
947 .a. -rwxrwxrwx 0
0
10737783 <part2.img_LMNIH~1.GIF-dead-10737783>
6036 .a. -rwxrwxrwx 0
0
19037261 <part2.img_UNEUP.GIF-dead-19037261>
5093 .a. -rwxrwxrwx 0
0
10738061 <part2.img_ICHP.GIF-dead-10738061>
3104 .a. -rwxrwxrwx 0
0
16330067 <part2.img_LTA150.GIF-dead-16330067>
3851 .a. -rwxrwxrwx 0
0
19037317 <part2.img_OON.GIF-dead-19037317>
1316 .a. -rwxrwxrwx 0
0
16330168 <part2.img_NK_LOGO.GIF-dead-16330168>
710 .a. -rwxrwxrwx 0
0
10737985 <part2.img_HARMWEB.GIF-dead-10737985>
17609 .a. -rwxrwxrwx 0
0
16330096 <part2.img_ANNERA.GIF-dead-16330096>
218 .a. -rwxrwxrwx 0
0
10737893 <part2.img_NDEX_~7.GIF-dead-10737893>
2082 .a. -rwxrwxrwx 0
0
19037311 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
_NVEST~1.GIF-dead-19037311>
10483 .a. -rwxrwxrwx 0
0
29723217 <part2.img_EARCH~7.HTM-dead-29723217>
753 .a. -rwxrwxrwx 0
0
20025920 <part2.img_H(5).GIF-dead-20025920>
4275 .a. -rwxrwxrwx 0
0
16329925 <part2.img_OLYCD~1.JPE-dead-16329925>
4478 .a. -rwxrwxrwx 0
0
16329939 <part2.img_RCOFU~1.JPE-dead-16329939>
3975 .a. -rwxrwxrwx 0
0
19037371 <part2.img_RL_TI~1.GIF-dead-19037371>
20147 .a. -rwxrwxrwx 0
0
16330100 <part2.img_EEFSC.GIF-dead-16330100>
5013 .a. -rwxrwxrwx 0
0
16329916 <part2.img_LYSIA~1.JPE-dead-16329916>
2673 .a. -rwxrwxrwx 0
0
19037289 <part2.img_NK_NA~4.GIF-dead-19037289>
3908 .a. -rwxrwxrwx 0
0
19037212 <part2.img-_133~1.JPE-dead-19037212>
7574 .a. -rwxrwxrwx 0
0
16330137 <part2.img_QUARI~1.HTM-dead-16330137>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
2821 .a. -rwxrwxrwx 0
0
19037535 <part2.img_NK_NA~6.GIF-dead-19037535>
705 .a. -rwxrwxrwx 0
0
16329813 <part2.img_EADER~6.GIF-dead-16329813>
12102 .a. -rwxrwxrwx 0
0
19037239 <part2.img_OE2~1.JPE-dead-19037239>
683 .a. -rwxrwxrwx 0
0
16330065 <part2.img-_2TRA~1.GIF-dead-16330065>
2404 .a. -rwxrwxrwx 0
0
20025861 <part2.img_IGHTF~1.JPE-dead-20025861>
11324 .a. -rwxrwxrwx 0
0
20025889 <part2.img-_1557~1.GIF-dead-20025889>
3681 .a. -rwxrwxrwx 0
0
16330071 <part2.img_RANCH~1.HTM-dead-16330071>
1670 .a. -rwxrwxrwx 0
0
10738070 <part2.img_IOS%2~1.JPE-dead-10738070>
3204 .a. -rwxrwxrwx 0
0
20025885 <part2.img_H(4).GIF-dead-20025885>
8601 .a. -rwxrwxrwx 0
0
20025878 <part2.img_H(2).GIF-dead-20025878>
316 .a. -rwxrwxrwx 0
0
19037577 <part2.img_AIN_C~5.HTM-dead-19037577>
5820 .a. -rwxrwxrwx 0
0
10737952 <part2.img_DR~1.HTM-dead-10737952>
4858 .a. -rwxrwxrwx 0
0
19037233 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
_ITE~1.HTM-dead-19037233>
1058 .a. -rwxrwxrwx 0
0
19037568 <part2.img_EAUTY~1.GIF-dead-19037568>
6250 .a. -rwxrwxrwx 0
0
16330154 <part2.img_88369~1.GIF-dead-16330154>
481 .a. -rwxrwxrwx 0
0
10737777 <part2.img_ISCLA~1.GIF-dead-10737777>
1558 .a. -rwxrwxrwx 0
0
19037358 <part2.img_EALTH.GIF-dead-19037358>
4715 .a. -rwxrwxrwx 0
0
16329934 <part2.img_HROMO~1.JPE-dead-16329934>
2629 .a. -rwxrwxrwx 0
0
16330082 <part2.img_TN_BG~2.JPE-dead-16330082>
3337 .a. -rwxrwxrwx 0
0
16330223 <part2.img_REG.GIF-dead-16330223>
1116 .a. -rwxrwxrwx 0
0
10737926 <part2.img_EVOTHYR.GIF-dead-10737926>
1297 .a. -rwxrwxrwx 0
0
19037315 <part2.img_AN2.GIF-dead-19037315>
2553 .a. -rwxrwxrwx 0
0
16330203 <part2.img_ANNER~3.GIF-dead-16330203>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
25951 .a. -rwxrwxrwx 0
0
16329898 <part2.img_RD3~1.JPE-dead-16329898>
6273 .a. -rwxrwxrwx 0
0
16329996 <part2.img_HURDP~1.JPE-dead-16329996>
10630 .a. -rwxrwxrwx 0
0
16329744 <part2.img_HAR_L~1.GIF-dead-16329744>
11463 .a. -rwxrwxrwx 0
0
16329989 <part2.img_OSTAS~1.JPE-dead-16329989>
596 .a. -rwxrwxrwx 0
0
10737794 <part2.img_F8.GIF-dead-10737794>
4860 .a. -rwxrwxrwx 0
0
19037217 <part2.img_NCLRA~1.JPE-dead-19037217>
950 .a. -rwxrwxrwx 0
0
10738132 <part2.img_ARRAN~1.HTM-dead-10738132>
14871 .a. -rwxrwxrwx 0
0
16330161 <part2.img_E_ANIM.GIF-dead-16330161>
2906 .a. -rwxrwxrwx 0
0
10737829 <part2.img_RCH~1.JPE-dead-10737829>
907 .a. -rwxrwxrwx 0
0
16330121 <part2.img_AWR.GIF-dead-16330121>
2157 .a. -rwxrwxrwx 0
0
19037432 <part2.img_H(2).GIF-dead-19037432>
660 .a. -rwxrwxrwx 0
0
16329824 <part2.img_EADER~8.GIF-dead-16329824>
473 .a. -rwxrwxrwx 0
0
19037306 <part2.img-_3.GIFKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5 06E4 A169 4E46
dead-19037306>
925 .a. -rwxrwxrwx 0
0
19037296 <part2.img_MG_BU~1.JPE-dead-19037296>
14112 .a. -rwxrwxrwx 0
0
26037876 <part2.img_UERY(~3.HTM-dead-26037876>
3428 .a. -rwxrwxrwx 0
0
16329795 <part2.img_ENTER~1.JPE-dead-16329795>
8841 .a. -rwxrwxrwx 0
0
20025872 <part2.img_NDEX~13.HTM-dead-20025872>
9101 .a. -rwxrwxrwx 0
0
16330182 <part2.img_AYTIT~1.JPE-dead-16330182>
2456 .a. -rwxrwxrwx 0
0
19037504 <part2.img_H(12).GIF-dead-19037504>
5556 .a. -rwxrwxrwx 0
0
16329977 <part2.img_RINCH~1.JPE-dead-16329977>
4900 .a. -rwxrwxrwx 0
0
19037367 <part2.img_HC_SHRT.GIF-dead-19037367>
3831 .a. -rwxrwxrwx 0
0
19037397 <part2.img_OVE~1.JPE-dead-19037397>
23204 .a. -rwxrwxrwx 0
0
16330128 <part2.img_AWS-L~1.GIF-dead-16330128>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
22565 .a. -rwxrwxrwx 0
0
16330208 <part2.img_NDEX~12.HTM-dead-16330208>
5174 .a. -rwxrwxrwx 0
0
19037320 <part2.img-_MAIL~1.GIF-dead-19037320>
3657 .a. -rwxrwxrwx 0
0
16330196 <part2.img-_1.GIFdead-16330196>
54 .a. -rwxrwxrwx 0
0
16330102 <part2.img_CKGRN~1.HTM-dead-16330102>
11922 .a. -rwxrwxrwx 0
0
16329836 <part2.img_CI_CO~1.HTM-dead-16329836>
2519 .a. -rwxrwxrwx 0
0
10737825 <part2.img_PLASH.GIF-dead-10737825>
9344 .a. -rwxrwxrwx 0
0
16330119 <part2.img_YPE~1.HTM-dead-16330119>
43 .a. -rwxrwxrwx 0
0
16329805 <part2.img_OT.GIF-dead-16329805>
4856 .a. -rwxrwxrwx 0
0
16329999 <part2.img_RCOLF~1.JPE-dead-16329999>
597 .a. -rwxrwxrwx 0
0
16329766 <part2.img_RROW.GIF-dead-16329766>
4689 .a. -rwxrwxrwx 0
0
16330241 <part2.img_INKS.GIF-dead-16330241>
3419 .a. -rwxrwxrwx 0
0
16329964 <part2.img_EOLNU~1.HTM-dead-16329964>
45 .a. -rwxrwxrwx 0
0
19037428 <part2.img-_H.GIFKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5 06E4 A169 4E46
dead-19037428>
754 .a. -rwxrwxrwx 0
0
10737847 <part2.img_EWSLE~1.GIF-dead-10737847>
1102 .a. -rwxrwxrwx 0
0
10737774 <part2.img_IBRAR~1.GIF-dead-10737774>
848 .a. -rwxrwxrwx 0
0
16330180 <part2.img_MG_LI~1.JPE-dead-16330180>
1614 .a. -rwxrwxrwx 0
0
10738073 <part2.img_ANUAL~1.JPE-dead-10738073>
8867 .a. -rwxrwxrwx 0
0
16329861 <part2.img_C_PEN~1.HTM-dead-16329861>
4210 .a. -rwxrwxrwx 0
0
19037191 <part2.img_A97H11.GIF-dead-19037191>
7665 .a. -rwxrwxrwx 0
0
19037383 <part2.img_EARCH~1.JPE-dead-19037383>
17075 .a. -rwxrwxrwx 0
0
19037422 <part2.img_HTSTO~1.HTM-dead-19037422>
366 .a. -rwxrwxrwx 0
0
19037328 <part2.img_OP04_~1.GIF-dead-19037328>
9618 .a. -rwxrwxrwx 0
0
19037330 <part2.img_PI~1.HTM-dead-19037330>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
755 .a. -rwxrwxrwx 0
0
10737907 <part2.img_SK~1.HTM-dead-10737907>
2066 .a. -rwxrwxrwx 0
0
10738002 <part2.img_AINBACK.GIF-dead-10738002>
1558 .a. -rwxrwxrwx 0
0
16330213 <part2.img_IDETI~1.GIF-dead-16330213>
5352 .a. -rwxrwxrwx 0
0
16329910 <part2.img_PLYSD~1.JPE-dead-16329910>
2950 .a. -rwxrwxrwx 0
0
19037286 <part2.img_NK_NA~3.GIF-dead-19037286>
1616 .a. -rwxrwxrwx 0
0
10738095 <part2.img_OFTWA~1.JPE-dead-10738095>
5015 .a. -rwxrwxrwx 0
0
19037193 <part2.img_A97H15.GIF-dead-19037193>
5274 .a. -rwxrwxrwx 0
0
10738020 <part2.img_5ABWO~1.GIF-dead-10738020>
9192 .a. -rwxrwxrwx 0
0
29723381 <part2.img__DESI~1.HTM-dead-29723381>
3199 .a. -rwxrwxrwx 0
0
16330171 <part2.img_NK_NA~1.GIF-dead-16330171>
94 .a. -rwxrwxrwx 0
0
19037513 <part2.img_G_TILE.GIF-dead-19037513>
227 .a. -rwxrwxrwx 0
0
16330194 <part2.img_64.GIF-dead-16330194>
4089 .a. -rwxrwxrwx 0
0
19037645 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
_PPLIC~1.GIF-dead-19037645>
182 .a. -rwxrwxrwx 0
0
10737861 <part2.img_NDEX_~1.GIF-dead-10737861>
1317 .a. -rwxrwxrwx 0
0
10737721 <part2.img_URPLE1.GIF-dead-10737721>
7917 .a. -rwxrwxrwx 0
0
20025915 <part2.img_AY8WW~1.HTM-dead-20025915>
168 .a. -rwxrwxrwx 0
0
19037410 <part2.img_NDEXL~1.GIF-dead-19037410>
1649 .a. -rwxrwxrwx 0
0
16330237 <part2.img_ELCOME.GIF-dead-16330237>
5649 .a. -rwxrwxrwx 0
0
16329904 <part2.img_ABAY_~1.JPE-dead-16329904>
15260 .a. -rwxrwxrwx 0
0
16330177 <part2.img_NR_TV~1.GIF-dead-16330177>
6432 .a. -rwxrwxrwx 0
0
20025911 <part2.img_H(8).GIF-dead-20025911>
6712 .a. -rwxrwxrwx 0
0
16329986 <part2.img_LASTF~1.JPE-dead-16329986>
4207 .a. -rwxrwxrwx 0
0
16329937 <part2.img_YPSEL~1.JPE-dead-16329937>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
195 .a. -rwxrwxrwx 0
0
10737872 <part2.img_NDEX_~3.GIF-dead-10737872>
468 .a. -rwxrwxrwx 0
0
19037426 <part2.img_H(6).GIF-dead-19037426>
6348 .a. -rwxrwxrwx 0
0
16330009 <part2.img_OURGG~1.JPE-dead-16330009>
23091 .a. -rwxrwxrwx 0
0
16330198 <part2.img_ANNER~2.GIF-dead-16330198>
581 .a. -rwxrwxrwx 0
0
16329827 <part2.img_EADER~9.GIF-dead-16329827>
76 .a. -rwxrwxrwx 0
0
10737903 <part2.img_ARBUL3E.GIF-dead-10737903>
1770 .a. -rwxrwxrwx 0
0
16329856 <part2.img_EADE~12.GIF-dead-16329856>
1603 .a. -rwxrwxrwx 0
0
10737799 <part2.img_OTTOP~1.GIF-dead-10737799>
12957 .a. -rwxrwxrwx 0
0
16330147 <part2.img_QUARI~1.GIF-dead-16330147>
4643 .a. -rwxrwxrwx 0
0
19037300 <part2.img_NFOBA~1.HTM-dead-19037300>
4967 .a. -rwxrwxrwx 0
0
19037678 <part2.img_LDG.GIF-dead-19037678>
20807 .a. -rwxrwxrwx 0
0
19037207 <part2.img_NHAB~1.HTM-dead-19037207>
7420 .a. -rwxrwxrwx 0
0
19037381 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
_RUGS_~2.HTM-dead-19037381>
3013 .a. -rwxrwxrwx 0
0
19037293 <part2.img_NK_NA~5.GIF-dead-19037293>
2168 .a. -rwxrwxrwx 0
0
19037308 <part2.img_TORE_~1.GIF-dead-19037308>
2730 .a. -rwxrwxrwx 0
0
10738119 <part2.img-_.GIFdead-10738119>
178920 .a. -rwxrwxrwx 0
0
16330084 <part2.img_RACE5~1.JPE-dead-16330084>
1516 .a. -rwxrwxrwx 0
0
10738083 <part2.img_IOSTAR.GIF-dead-10738083>
921 .a. -rwxrwxrwx 0
0
19037388 <part2.img_IVETH~1.GIF-dead-19037388>
3236 .a. -rwxrwxrwx 0
0
16330221 <part2.img_LOG.GIF-dead-16330221>
2031 .a. -rwxrwxrwx 0
0
10737768 <part2.img_CIENC~1.JPE-dead-10737768>
3026 .a. -rwxrwxrwx 0
0
16329810 <part2.img_EADER~5.GIF-dead-16329810>
10049 .a. -rwxrwxrwx 0
0
19037324 <part2.img_ETIMAGE.GIF-dead-19037324>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
38 .a. -rwxrwxrwx 0
0
16329764 <part2.img_AVBAR~1.GIF-dead-16329764>
103 .a. -rwxrwxrwx 0
0
19037509 <part2.img_H(13).GIF-dead-19037509>
3713 .a. -rwxrwxrwx 0
0
19037200 <part2.img_NDEX-~2.HTM-dead-19037200>
721 .a. -rwxrwxrwx 0
0
10737851 <part2.img_OME(1).GIF-dead-10737851>
122 .a. -rwxrwxrwx 0
0
20025876 <part2.img_H(1).GIF-dead-20025876>
191 .a. -rwxrwxrwx 0
0
10737880 <part2.img_NDEX_~5.GIF-dead-10737880>
779 .a. -rwxrwxrwx 0
0
10737786 <part2.img_THERR~1.GIF-dead-10737786>
4857 .a. -rwxrwxrwx 0
0
19037517 <part2.img_AMPL3D2.GIF-dead-19037517>
1480 .a. -rwxrwxrwx 0
0
16329797 <part2.img_OTTOM_4.GIF-dead-16329797>
4054 .a. -rwxrwxrwx 0
0
16329803 <part2.img_ENTER~2.JPE-dead-16329803>
29965 .a. -rwxrwxrwx 0
0
16330192 <part2.img_7HEAD1.GIF-dead-16330192>
5697 .a. -rwxrwxrwx 0
0
20025907 <part2.img_H(7).GIF-dead-20025907>
4537 .a. -rwxrwxrwx 0
0
16330015 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
_YERCA~1.JPE-dead-16330015>
802 .a. -rwxrwxrwx 0
0
10737849 <part2.img_HATSNEW.GIF-dead-10737849>
6342 .a. -rwxrwxrwx 0
0
19037486 <part2.img_H(9).GIF-dead-19037486>
2113 .a. -rwxrwxrwx 0
0
16330053 <part2.img_KEYS~1.HTM-dead-16330053>
314 .a. -rwxrwxrwx 0
0
10737997 <part2.img_HARMS~1.GIF-dead-10737997>
43 .a. -rwxrwxrwx 0
0
10737974 <part2.img_LANK.GIF-dead-10737974>
2197 .a. -rwxrwxrwx 0
0
16330149 <part2.img_ISHNA~1.HTM-dead-16330149>
11584 .a. -rwxrwxrwx 0
0
19037203 <part2.img_AWS-S~1.GIF-dead-19037203>
3142 .a. -rwxrwxrwx 0
0
10737954 <part2.img__PHYS.GIF-dead-10737954>
518 .a. -rwxrwxrwx 0
0
19037559 <part2.img_OME_F~2.HTM-dead-19037559>
887 .a. -rwxrwxrwx 0
0
10738031 <part2.img_EFT_C~1.GIF-dead-10738031>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
4191 .a. -rwxrwxrwx 0
0
16330027 <part2.img_OLVBE~1.JPE-dead-16330027>
8483 .a. -rwxrwxrwx 0
0
16330098 <part2.img_ANNER.GIF-dead-16330098>
10790 .a. -rwxrwxrwx 0
0
20026089 <part2.img_C6~1.HTM-dead-20026089>
1572 .a. -rwxrwxrwx 0
0
10738076 <part2.img_IDEO_~1.JPE-dead-10738076>
4152 .a. -rwxrwxrwx 0
0
19037298 <part2.img_ANDTI~1.JPE-dead-19037298>
9634 .a. -rwxrwxrwx 0
0
19037658 <part2.img_ET_LO~1.HTM-dead-19037658>
243 .a. -rwxrwxrwx 0
0
19037492 <part2.img_AIN_C~2.HTM-dead-19037492>
3918 .a. -rwxrwxrwx 0
0
19037667 <part2.img_NTERT~1.HTM-dead-19037667>
100 .a. -rwxrwxrwx 0
0
16329807 <part2.img_EADER~4.GIF-dead-16329807>
534 .a. -rwxrwxrwx 0
0
19037562 <part2.img_ITAMI~1.GIF-dead-19037562>
690 .a. -rwxrwxrwx 0
0
19037407 <part2.img_ETNAL~1.GIF-dead-19037407>
3850 .a. -rwxrwxrwx 0
0
29723448 <part2.img_ITLE_~1.GIF-dead-29723448>
3691 .a. -rwxrwxrwx 0
0
19037522 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
_N_AC1~1.JPE-dead-19037522>
776 .a. -rwxrwxrwx 0
0
10737812 <part2.img_ETACRO.GIF-dead-10737812>
2744 .a. -rwxrwxrwx 0
0
16329793 <part2.img_TN_NEWS.GIF-dead-16329793>
514 .a. -rwxrwxrwx 0
0
20025874 <part2.img-_H.GIFdead-20025874>
5013 .a. -rwxrwxrwx 0
0
10738103 <part2.img_ARITY.GIF-dead-10738103>
7937 .a. -rwxrwxrwx 0
0
16329866 <part2.img_RODUC~1.HTM-dead-16329866>
5038 .a. -rwxrwxrwx 0
0
19037606 <part2.img_0PERC~1.GIF-dead-19037606>
2499 .a. -rwxrwxrwx 0
0
16330092 <part2.img_ATER.GIF-dead-16330092>
495 .a. -rwxrwxrwx 0
0
19037322 <part2.img_OPBAR.GIF-dead-19037322>
1813 .a. -rwxrwxrwx 0
0
10737979 <part2.img_CONHOME.GIF-dead-10737979>
3672 .a. -rwxrwxrwx 0
0
19037538 <part2.img-_134W~1.GIF-dead-19037538>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
1200 .a. -rwxrwxrwx 0
0
10738041 <part2.img_HOPON~1.GIF-dead-10738041>
2090 .a. -rwxrwxrwx 0
0
10737930 <part2.img_MHTLOGO.GIF-dead-10737930>
100 .a. -rwxrwxrwx 0
0
10738024 <part2.img_EFT(1).GIF-dead-10738024>
177 .a. -rwxrwxrwx 0
0
16330157 <part2.img_UESTB~1.GIF-dead-16330157>
4076 .a. -rwxrwxrwx 0
0
10737990 <part2.img_LOPHA~1.GIF-dead-10737990>
80 .a. -rwxrwxrwx 0
0
16330048 <part2.img_RIANG~1.GIF-dead-16330048>
4558 .a. -rwxrwxrwx 0
0
19037413 <part2.img_CSMZ~1.HTM-dead-19037413>
160 .a. -rwxrwxrwx 0
0
10737857 <part2.img_OME_C~1.GIF-dead-10737857>
1218 .a. -rwxrwxrwx 0
0
10737801 <part2.img_EWS1.GIF-dead-10737801>
7309 .a. -rwxrwxrwx 0
0
29723315 <part2.img_ILVER~1.HTM-dead-29723315>
3897 .a. -rwxrwxrwx 0
0
16330159 <part2.img_UROPA~1.JPE-dead-16330159>
745 .a. -rwxrwxrwx 0
0
19037347 <part2.img_IDE03~1.GIF-dead-19037347>
1632 .a. -rwxrwxrwx 0
0
20025913 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
_H(9).GIF-dead-20025913>
4686 .a. -rwxrwxrwx 0
0
19037441 <part2.img_XTREM~1.HTM-dead-19037441>
7103 .a. -rwxrwxrwx 0
0
16330002 <part2.img_ERMCR~1.JPE-dead-16330002>
1759 .a. -rwxrwxrwx 0
0
19037253 <part2.img_CTIVE~1.CLA-dead-19037253>
1091 .a. -rwxrwxrwx 0
0
16329842 <part2.img_EADE~11.GIF-dead-16329842>
10521 .a. -rwxrwxrwx 0
0
16330145 <part2.img_EARCH~6.HTM-dead-16330145>
41 .a. -rwxrwxrwx 0
0
10737947 <part2.img-_OT21~1.GIF-dead-10737947>
3990 .a. -rwxrwxrwx 0
0
16330201 <part2.img_NTRO_~1.GIF-dead-16330201>
680 .a. -rwxrwxrwx 0
0
16329816 <part2.img_EADER~7.GIF-dead-16329816>
122 .a. -rwxrwxrwx 0
0
19037443 <part2.img_H(3).GIF-dead-19037443>
7171 .a. -rwxrwxrwx 0
0
16330039 <part2.img_PLYSP~1.JPE-dead-16330039>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
261293 .a. -rwxrwxrwx 0
0
20025887 <part2.img_HTIH~1.HTM-dead-20025887>
1876 .a. -rwxrwxrwx 0
0
10738005 <part2.img_HARMW~3.HTM-dead-10738005>
299 .a. -rwxrwxrwx 0
0
10738026 <part2.img_ULL_OFF.GIF-dead-10738026>
3528 .a. -rwxrwxrwx 0
0
10737992 <part2.img_PHOME.GIF-dead-10737992>
24790 .a. -rwxrwxrwx 0
0
19037420 <part2.img_HTIH~1.HTM-dead-19037420>
13688 .a. -rwxrwxrwx 0
0
10737747 <part2.img_UERY.HTM-dead-10737747>
2226 .a. -rwxrwxrwx 0
0
16330205 <part2.img_AN4.GIF-dead-16330205>
1295 .a. -rwxrwxrwx 0
0
10738059 <part2.img_X.GIF-dead-10738059>
776 .a. -rwxrwxrwx 0
0
16329919 <part2.img_LEURO~1.HTM-dead-16329919>
1687 .a. -rwxrwxrwx 0
0
10737987 <part2.img_SEARCH.GIF-dead-10737987>
10839 .a. -rwxrwxrwx 0
0
10737671 <part2.img_FT~1.HTM-dead-10737671>
11081 .a. -rwxrwxrwx 0
0
19037244 <part2.img_OGBAN~1.GIF-dead-19037244>
4773 .a. -rwxrwxrwx 0
0
16330045 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
_ICROM~1.JPE-dead-16330045>
4529 .a. -rwxrwxrwx 0
0
16329931 <part2.img_OLYCO~1.JPE-dead-16329931>
544 .a. -rwxrwxrwx 0
0
10738067 <part2.img_OSHORSA.GIF-dead-10738067>
10826 .a. -rwxrwxrwx 0
0
19037391 <part2.img_2_07_~1.GIF-dead-19037391>
1346 .a. -rwxrwxrwx 0
0
10737780 <part2.img_THERF~1.GIF-dead-10737780>
11173 .a. -rwxrwxrwx 0
0
20026248 <part2.img_1162~1.HTM-dead-20026248>
4456 .a. -rwxrwxrwx 0
0
20025898 <part2.img-_134C~1.GIF-dead-20025898>
569 .a. -rwxrwxrwx 0
0
19037418 <part2.img_NDEXL~2.GIF-dead-19037418>
6850 .a. -rwxrwxrwx 0
0
16330130 <part2.img_EBRIN~1.JPE-dead-16330130>
5008 .a. -rwxrwxrwx 0
0
19037187 <part2.img_A97H02.GIF-dead-19037187>
4212 .a. -rwxrwxrwx 0
0
16330139 <part2.img_STAR.GIF-dead-16330139>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
78 .a. -rwxrwxrwx 0
0
10737886 <part2.img_HIN_RED.GIF-dead-10737886>
11206 .a. -rwxrwxrwx 0
0
16330062 <part2.img_NFINI~1.JPE-dead-16330062>
3215 .a. -rwxrwxrwx 0
0
19037279 <part2.img_NK_NA~2.GIF-dead-19037279>
4080 .a. -rwxrwxrwx 0
0
16330036 <part2.img_TYLOC~1.JPE-dead-16330036>
3380 .a. -rwxrwxrwx 0
0
16329983 <part2.img_RITON~1.JPE-dead-16329983>
1279 .a. -rwxrwxrwx 0
0
10738055 <part2.img_HYBUY~1.JPE-dead-10738055>
4522 .a. -rwxrwxrwx 0
0
19037354 <part2.img_RESCE~1.GIF-dead-19037354>
6198 .a. -rwxrwxrwx 0
0
16329980 <part2.img_ANSEB~1.JPE-dead-16329980>
38677 .a. -rwxrwxrwx 0
0
16329900 <part2.img_ARISL~1.JPE-dead-16329900>
6258 .a. -rwxrwxrwx 0
0
19037235 <part2.img_IC2~1.JPE-dead-19037235>
3834 .a. -rwxrwxrwx 0
0
10737958 <part2.img__PAS.GIF-dead-10737958>
5634 .a. -rwxrwxrwx 0
0
10738097 <part2.img_BBUND~1.HTM-dead-10738097>
824 .a. -rwxrwxrwx 0
0
16330239 <part2.img-_S.GIFKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5 06E4 A169 4E46
dead-16330239>
1537 .a. -rwxrwxrwx 0
0
10738000 <part2.img_HARMW~2.HTM-dead-10738000>
2780 .a. -rwxrwxrwx 0
0
10738123 <part2.img-_.GIFdead-10738123>
2247 .a. -rwxrwxrwx 0
0
16330186 <part2.img_EADE~13.GIF-dead-16330186>
4879 .a. -rwxrwxrwx 0
0
16330235 <part2.img_ESSAGE.GIF-dead-16330235>
283 .a. -rwxrwxrwx 0
0
19037356 <part2.img_OP.GIF-dead-19037356>
3719 .a. -rwxrwxrwx 0
0
16329913 <part2.img_ERTHA~1.JPE-dead-16329913>
216 .a. -rwxrwxrwx 0
0
10737913 <part2.img_NDEX_~9.GIF-dead-10737913>
823 .a. -rwxrwxrwx 0
0
10737838 <part2.img_OOLSI~1.GIF-dead-10737838>
3668 .a. -rwxrwxrwx 0
0
19037551 <part2.img_N_BW1~1.JPE-dead-19037551>
3247 .a. -rwxrwxrwx 0
0
16330075 <part2.img_NV121~1.JPE-dead-16330075>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
8064 .a. -rwxrwxrwx 0
0
16329902 <part2.img_OGER_~1.JPE-dead-16329902>
178 .a. -rwxrwxrwx 0
0
10737884 <part2.img_NDEX_~6.GIF-dead-10737884>
927 .a. -rwxrwxrwx 0
0
19037267 <part2.img-_O.GIFdead-19037267>
404 .a. -rwxrwxrwx 0
0
16330088 <part2.img_OME(3).GIF-dead-16330088>
3719 .a. -rwxrwxrwx 0
0
16329833 <part2.img_IDE_4~1.GIF-dead-16329833>
2022 .a. -rwxrwxrwx 0
0
10737766 <part2.img_EALTH~1.JPE-dead-10737766>
3995 .a. -rwxrwxrwx 0
0
19037636 <part2.img_IRCLE~2.JPE-dead-19037636>
2673 .a. -rwxrwxrwx 0
0
19037197 <part2.img_TSEAR~1.HTM-dead-19037197>
2629 .a. -rwxrwxrwx 0
0
16330079 <part2.img_TN_BG~1.JPE-dead-16330079>
7234 .a. -rwxrwxrwx 0
0
16329922 <part2.img_LEURA~1.JPE-dead-16329922>
17844 .a. -rwxrwxrwx 0
0
16330090 <part2.img_AVE_9~1.JPE-dead-16330090>
1142 .a. -rwxrwxrwx 0
0
16330115 <part2.img_UTTON10.GIF-dead-16330115>
2178 .a. -rwxrwxrwx 0
0
10737928 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
__DRI~1.HTM-dead-10737928>
1149 .a. -rwxrwxrwx 0
0
16330117 <part2.img_UTTON9.GIF-dead-16330117>
5678 .a. -rwxrwxrwx 0
0
10738106 <part2.img_ORSAI~1.JPE-dead-10738106>
2515 .a. -rwxrwxrwx 0
0
16329858 <part2.img_OGO_C~1.GIF-dead-16329858>
3705 .a. -rwxrwxrwx 0
0
16329791 <part2.img_EADER~2.JPE-dead-16329791>
112329 .a. -rwxrwxrwx 0
0
10737981 <part2.img_NDEX~10.HTM-dead-10737981>
376 .a. -rwxrwxrwx 0
0
16330094 <part2.img_IVIDER.GIF-dead-16330094>
369 .a. -rwxrwxrwx 0
0
19037399 <part2.img_1A.GIF-dead-19037399>
497 .a. -rwxrwxrwx 0
0
16330060 <part2.img_KKIE_~1.GIF-dead-16330060>
5931 .a. -rwxrwxrwx 0
0
19037210 <part2.img_EB_DI~2.HTM-dead-19037210>
223 .a. -rwxrwxrwx 0
0
19037257 <part2.img_OGO_B.GIF-dead-19037257>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
8772 .a. -rwxrwxrwx 0
0
29723352 <part2.img_GIQA~1.HTM-dead-29723352>
2730 .a. -rwxrwxrwx 0
0
19037496 <part2.img_H(11).GIF-dead-19037496>
1757 .a. -rwxrwxrwx 0
0
19037265 <part2.img_OUNT(1).GIF-dead-19037265>
1798 .a. -rwxrwxrwx 0
0
10737804 <part2.img_MARTC~1.GIF-dead-10737804>
4722 .a. -rwxrwxrwx 0
0
19037229 <part2.img_OUR111B.GIF-dead-19037229>
799 .a. -rwxrwxrwx 0
0
10738014 <part2.img_OTLINE.GIF-dead-10738014>
1820 .a. -rwxrwxrwx 0
0
19037425 <part2.img-_284B~1.GIF-dead-19037425>
2370 .a. -rwxrwxrwx 0
0
10738017 <part2.img_W2000~1.GIF-dead-10738017>
13340 .a. -rwxrwxrwx 0
0
16329869 <part2.img_EARCH~4.HTM-dead-16329869>
4816 .a. -rwxrwxrwx 0
0
16330018 <part2.img_OLYBV~1.JPE-dead-16330018>
3460 .a. -rwxrwxrwx 0
0
16330108 <part2.img_ISHIN~1.HTM-dead-16330108>
8285 .a. -rwxrwxrwx 0
0
16330033 <part2.img_YLIND~1.JPE-dead-16330033>
8567 .a. -rwxrwxrwx 0
0
16330069 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
_MIRAN~1.HTM-dead-16330069>
3581 .a. -rwxrwxrwx 0
0
10737932 <part2.img_ODES4.GIF-dead-10737932>
1311 .a. -rwxrwxrwx 0
0
10738089 <part2.img_YAN.GIF-dead-10738089>
4079 .a. -rwxrwxrwx 0
0
29723435 <part2.img_IDE_M~1.GIF-dead-29723435>
10074 .a. -rwxrwxrwx 0
0
16330233 <part2.img_IME~1.HTM-dead-16330233>
3599 .a. -rwxrwxrwx 0
0
19037237 <part2.img_NDEX(~7.HTM-dead-19037237>
4488 .a. -rwxrwxrwx 0
0
16330211 <part2.img_PECIA~1.GIF-dead-16330211>
1222 .a. -rwxrwxrwx 0
0
16329863 <part2.img-_.GIFdead-16329863>
8855 .a. -rwxrwxrwx 0
0
16330231 <part2.img_OLOFT~1.HTM-dead-16330231>
587 .a. -rwxrwxrwx 0
0
10737840 <part2.img_ELP.GIF-dead-10737840>
3459 .a. -rwxrwxrwx 0
0
16330042 <part2.img_UNCIN~1.JPE-dead-16330042>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
3566 .a. -rwxrwxrwx 0
0
19037369 <part2.img_ISTING.GIF-dead-19037369>
5602 .a. -rwxrwxrwx 0
0
16330086 <part2.img_UDI01.GIF-dead-16330086>
923 .a. -rwxrwxrwx 0
0
16330123 <part2.img_AWR.GIF-dead-16330123>
4493 .a. -rwxrwxrwx 0
0
10738113 <part2.img_ORSAI~1.GIF-dead-10738113>
4995 .a. -rwxrwxrwx 0
0
19037250 <part2.img_93~1.HTM-dead-19037250>
1952 .a. -rwxrwxrwx 0
0
19037205 <part2.img__CLR.GIF-dead-19037205>
4861 .a. -rwxrwxrwx 0
0
16330229 <part2.img_ATIENT.GIF-dead-16330229>
6812 .a. -rwxrwxrwx 0
0
19037482 <part2.img_H~1.JPE-dead-19037482>
4329 .a. -rwxrwxrwx 0
0
19037222 <part2.img_PCSTN~1.JPE-dead-19037222>
1770 .a. -rwxrwxrwx 0
0
19037430 <part2.img_H(1).GIF-dead-19037430>
1846 .a. -rwxrwxrwx 0
0
16329850 <part2.img_IDE_3~1.GIF-dead-16329850>
43 .a. -rwxrwxrwx 0
0
19037231 <part2.img-_.GIFdead-19037231>
5576 .a. -rwxrwxrwx 0
0
16330012 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
_TILVE~1.JPE-dead-16330012>
3046 .a. -rwxrwxrwx 0
0
10737960 <part2.img__NURSES.GIF-dead-10737960>
4371 .a. -rwxrwxrwx 0
0
10738101 <part2.img_4MB.GIF-dead-10738101>
6506 .a. -rwxrwxrwx 0
0
29723432 <part2.img_ETNAU~1.HTM-dead-29723432>
7567 .a. -rwxrwxrwx 0
0
16330073 <part2.img_NV125~1.JPE-dead-16330073>
9526 .a. -rwxrwxrwx 0
0
10737936 <part2.img_~1.HTM-dead-10737936>
23259 .a. -rwxrwxrwx 0
0
19037380 <part2.img_HARMA~2.HTM-dead-19037380>
1308 .a. -rwxrwxrwx 0
0
16330113 <part2.img_UTTON5.GIF-dead-16330113>
22482 .a. -rwxrwxrwx 0
0
20025865 <part2.img_PECIF~1.HTM-dead-20025865>
3696 .a. -rwxrwxrwx 0
0
10737956 <part2.img__PHARM.GIF-dead-10737956>
2773 .a. -rwxrwxrwx 0
0
10738121 <part2.img-_.GIFdead-10738121>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
25468 .a. -rwxrwxrwx 0
0
19037349 <part2.img_NDEX(~9.HTM-dead-19037349>
1019 .a. -rwxrwxrwx 0
0
16330216 <part2.img_IDE01~1.GIF-dead-16330216>
196 .a. -rwxrwxrwx 0
0
10737922 <part2.img_NDEX~10.GIF-dead-10737922>
850 .a. -rwxrwxrwx 0
0
16330219 <part2.img_IDE05~1.GIF-dead-16330219>
3559 .a. -rwxrwxrwx 0
0
19037259 <part2.img_ISHTO~2.HTM-dead-19037259>
404 .a. -rwxrwxrwx 0
0
16330077 <part2.img_OME(2).GIF-dead-16330077>
2304 .a. -rwxrwxrwx 0
0
16329907 <part2.img_NDEX~11.HTM-dead-16329907>
6461 .a. -rwxrwxrwx 0
0
19037544 <part2.img_RUGS_~1.HTM-dead-19037544>
29974 .a. -rwxrwxrwx 0
0
19037302 <part2.img_7HEAD3.GIF-dead-19037302>
4070 .a. -rwxrwxrwx 0
0
19037220 <part2.img-_5PAT~1.JPE-dead-19037220>
16310 .a. -rwxrwxrwx 0
0
19037304 <part2.img_VS~1.HTM-dead-19037304>
13667 .a. -rwxrwxrwx 0
0
16329839 <part2.img_CI_TI~1.HTM-dead-16329839>
1640 .a. -rwxrwxrwx 0
0
10737963 <part2.img-_6061Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
~1.GIF-dead-10737963>
880 .a. -rwxrwxrwx 0
0
16330227 <part2.img_IDE03~1.GIF-dead-16330227>
8874 .a. -rwxrwxrwx 0
0
19037248 <part2.img_GATE_~1.GIF-dead-19037248>
6080 .a. -rwxrwxrwx 0
0
19037554 <part2.img_NIMAT~1.GIF-dead-19037554>
188 .a. -rwxrwxrwx 0
0
10737876 <part2.img_NDEX_~4.GIF-dead-10737876>
5468 .a. -rwxrwxrwx 0
0
16329974 <part2.img_LAUCA~1.JPE-dead-16329974>
7780 .a. -rwxrwxrwx 0
0
20025895 <part2.img_INDLA~1.GIF-dead-20025895>
702 .a. -rwxrwxrwx 0
0
19037476 <part2.img_AIN_C~3.HTM-dead-19037476>
1527 .a. -rwxrwxrwx 0
0
16329853 <part2.img_EDBTN~1.GIF-dead-16329853>
4373 .a. -rwxrwxrwx 0
0
19037468 <part2.img_H(4).GIF-dead-19037468>
1164 .a. -rwxrwxrwx 0
0
10737771 <part2.img_IRECT~1.GIF-dead-10737771>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
3389 .a. -rwxrwxrwx 0
0
10737834 <part2.img_IRTUA~1.HTM-dead-10737834>
3554 .a. -rwxrwxrwx 0
0
19037565 <part2.img_N_BW5~1.JPE-dead-19037565>
4350 .a. -rwxrwxrwx 0
0
19037189 <part2.img_A97H06.GIF-dead-19037189>
4036 .a. -rwxrwxrwx 0
0
29723465 <part2.img_ZF_FA~1.GIF-dead-29723465>
3710 .a. -rwxrwxrwx 0
0
19037525 <part2.img_N_AC4~1.JPE-dead-19037525>
2729 .a. -rwxrwxrwx 0
0
20025901 <part2.img_EW_HE~1.GIF-dead-20025901>
6889 .a. -rwxrwxrwx 0
0
19037494 <part2.img_H(10).GIF-dead-19037494>
1226 .a. -rwxrwxrwx 0
0
19037313 <part2.img_T.GIF-dead-19037313>
15603 .a. -rwxrwxrwx 0
0
19037365 <part2.img_NDEX~10.HTM-dead-19037365>
4052 .a. -rwxrwxrwx 0
0
10737677 <part2.img_TDW.GIF-dead-10737677>
7404 .a. -rwxrwxrwx 0
0
16329896 <part2.img_UY_46~1.GIF-dead-16329896>
14656 .a. -rwxrwxrwx 0
0
20025867 <part2.img_EINDE~1.HTM-dead-20025867>
4175 .a. -rwxrwxrwx 0
0
19037333 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
_ADIOA~1.GIF-dead-19037333>
1036 .a. -rwxrwxrwx 0
0
19037363 <part2.img_IDE01~1.GIF-dead-19037363>
4218 .a. -rwxrwxrwx 0
0
16330030 <part2.img_SCOBU~1.JPE-dead-16330030>
5048 .a. -rwxrwxrwx 0
0
19037282 <part2.img_NK_NA~1.GIF-dead-19037282>
305 .a. -rwxrwxrwx 0
0
10737994 <part2.img_ONTENTS.GIF-dead-10737994>
9989 .a. -rwxrwxrwx 0
0
16329787 <part2.img_CICEN~1.HTM-dead-16329787>
5903 .a. -rwxrwxrwx 0
0
16330021 <part2.img_PLYSI~1.JPE-dead-16330021>
4374 .a. -rwxrwxrwx 0
0
29723514 <part2.img_IF(3).GIF-dead-29723514>
3658 .a. -rwxrwxrwx 0
0
19037528 <part2.img_N_AC8~1.JPE-dead-19037528>
2386 .a. -rwxrwxrwx 0
0
10737934 <part2.img_DE.GIF-dead-10737934>
3984 .a. -rwxrwxrwx 0
0
29723336 <part2.img_OUSE0~2.JPE-dead-29723336>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
6369 .a. -rwxrwxrwx 0
0
16329778 <part2.img__S__S~1.HTM-dead-16329778>
6182 .a. -rwxrwxrwx 0
0
19037484 <part2.img_H(8).GIF-dead-19037484>
2771 .a. -rwxrwxrwx 0
0
10738117 <part2.img-_.GIFdead-10738117>
488 .a. -rwxrwxrwx 0
0
10737761 <part2.img_NTERT~1.GIF-dead-10737761>
1883 .a. -rwxrwxrwx 0
0
10738009 <part2.img_PECIAL.GIF-dead-10738009>
5028 .a. -rwxrwxrwx 0
0
16329789 <part2.img_EADER~1.JPE-dead-16329789>
9916 .a. -rwxrwxrwx 0
0
20026273 <part2.img_NDEX_~2.HTM-dead-20026273>
7754 .a. -rwxrwxrwx 0
0
20025883 <part2.img_H(3).GIF-dead-20025883>
1435 .a. -rwxrwxrwx 0
0
16330111 <part2.img_UTTON~2.GIF-dead-16330111>
89 .a. -rwxrwxrwx 0
0
16330106 <part2.img_EDBOR~1.GIF-dead-16330106>
3443 .a. -rwxrwxrwx 0
0
10738036 <part2.img_ATEPR~1.GIF-dead-10738036>
1126 .a. -rwxrwxrwx 0
0
10737806 <part2.img_AVEMA~1.GIF-dead-10737806>
14169 .a. -rwxrwxrwx 0
0
26038253 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
_EPT_S~1.HTM-dead-26038253>
4674 .a. -rwxrwxrwx 0
0
19037255 <part2.img_ACK(2).GIF-dead-19037255>
6385 .a. -rwxrwxrwx 0
0
16329928 <part2.img_ERGHI~1.JPE-dead-16329928>
Wed Feb 17 1999 12:38:36 16310 ..c -rwxrwxrwx 0
0
19037304
<part2.img-_VS~1.HTM-dead-19037304>
Wed Feb 17 1999 12:38:40 23091 ..c -rwxrwxrwx 0
0
16330198
<part2.img-_ANNER~2.GIF-dead-16330198>
3657 ..c -rwxrwxrwx 0
0
16330196 <part2.img-_1.GIFdead-16330196>
473 ..c -rwxrwxrwx 0
0
19037306 <part2.img-_3.GIFdead-19037306>
Wed Feb 17 1999 12:38:42
473 m.. -rwxrwxrwx 0
0
19037306
<part2.img-_3.GIF-dead-19037306>
16310 m.. -rwxrwxrwx 0
0
19037304 <part2.img_VS~1.HTM-dead-19037304>
3657 m.. -rwxrwxrwx 0
0
16330196 <part2.img_1.GIF-dead-16330196>
Wed Feb 17 1999 12:38:48 2168 ..c -rwxrwxrwx 0
0
19037308
<part2.img-_TORE_~1.GIF-dead-19037308>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Wed Feb 17 1999 12:38:50 2168 m.. -rwxrwxrwx 0
0
19037308
<part2.img-_TORE_~1.GIF-dead-19037308>
3990 ..c -rwxrwxrwx 0
0
16330201 <part2.img_NTRO_~1.GIF-dead-16330201>
Wed Feb 17 1999 12:38:52 23091 m.. -rwxrwxrwx 0
0
16330198
<part2.img-_ANNER~2.GIF-dead-16330198>
Wed Feb 17 1999 12:38:54 3990 m.. -rwxrwxrwx 0
0
16330201
<part2.img-_NTRO_~1.GIF-dead-16330201>
Wed Feb 17 1999 12:39:00 2082 ..c -rwxrwxrwx 0
0
19037311
<part2.img-_NVEST~1.GIF-dead-19037311>
Wed Feb 17 1999 12:39:02 1226 ..c -rwxrwxrwx 0
0
19037313
<part2.img-_T.GIF-dead-19037313>
2082 m.. -rwxrwxrwx 0
0
19037311 <part2.img_NVEST~1.GIF-dead-19037311>
Wed Feb 17 1999 12:39:04 2553 ..c -rwxrwxrwx 0
0
16330203
<part2.img-_ANNER~3.GIF-dead-16330203>
1226 m.. -rwxrwxrwx 0
0
19037313 <part2.img_T.GIF-dead-19037313>
Wed Feb 17 1999 12:39:06 2553 m.. -rwxrwxrwx 0
0
16330203
<part2.img-_ANNER~3.GIF-dead-16330203>
3851 ..c -rwxrwxrwx 0
0
19037317 <part2.img_OON.GIF-dead-19037317>
2226 ..c -rwxrwxrwx 0
0
16330205 <part2.img_AN4.GIF-dead-16330205>
1297 ..c -rwxrwxrwx 0
0
19037315 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
_AN2.GIF-dead-19037315>
Wed Feb 17 1999 12:39:08 3851 m.. -rwxrwxrwx 0
0
19037317
<part2.img-_OON.GIF-dead-19037317>
1297 m.. -rwxrwxrwx 0
0
19037315 <part2.img_AN2.GIF-dead-19037315>
Wed Feb 17 1999 12:39:10 2226 m.. -rwxrwxrwx 0
0
16330205
<part2.img-_AN4.GIF-dead-16330205>
Wed Feb 17 1999 12:39:30 22565 ..c -rwxrwxrwx 0
0
16330208
<part2.img-_NDEX~12.HTM-dead-16330208>
Wed Feb 17 1999 12:39:34
495 ..c -rwxrwxrwx 0
0
19037322
<part2.img-_OPBAR.GIF-dead-19037322>
4488 ..c -rwxrwxrwx 0
0
16330211 <part2.img_PECIA~1.GIF-dead-16330211>
Wed Feb 17 1999 12:39:36
495 m.. -rwxrwxrwx 0
0
19037322
<part2.img-_OPBAR.GIF-dead-19037322>
4488 m.. -rwxrwxrwx 0
0
16330211 <part2.img_PECIA~1.GIF-dead-16330211>
468 ..c -rwxrwxrwx 0
0
19037326 <part2.img_OP02_ON.GIF-dead-19037326>
Wed Feb 17 1999 12:39:38 1558 ..c -rwxrwxrwx 0
0
16330213
<part2.img-_IDETI~1.GIF-dead-16330213>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
1019 ..c -rwxrwxrwx 0
0
16330216 <part2.img_IDE01~1.GIF-dead-16330216>
468 m.. -rwxrwxrwx 0
0
19037326 <part2.img_OP02_ON.GIF-dead-19037326>
22565 m.. -rwxrwxrwx 0
0
16330208 <part2.img_NDEX~12.HTM-dead-16330208>
366 ..c -rwxrwxrwx 0
0
19037328 <part2.img_OP04_~1.GIF-dead-19037328>
Wed Feb 17 1999 12:39:40 1558 m.. -rwxrwxrwx 0
0
16330213
<part2.img-_IDETI~1.GIF-dead-16330213>
1019 m.. -rwxrwxrwx 0
0
16330216 <part2.img_IDE01~1.GIF-dead-16330216>
366 m.. -rwxrwxrwx 0
0
19037328 <part2.img_OP04_~1.GIF-dead-19037328>
745 ..c -rwxrwxrwx 0
0
19037347 <part2.img_IDE03~1.GIF-dead-19037347>
850 ..c -rwxrwxrwx 0
0
16330219 <part2.img_IDE05~1.GIF-dead-16330219>
Wed Feb 17 1999 12:39:42 3236 ..c -rwxrwxrwx 0
0
16330221
<part2.img-_LOG.GIF-dead-16330221>
850 m.. -rwxrwxrwx 0
0
16330219 <part2.img_IDE05~1.GIF-dead-16330219>
745 m.. -rwxrwxrwx 0
0
19037347 <part2.img_IDE03~1.GIF-dead-19037347>
3337 ..c -rwxrwxrwx 0
0
16330223 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
_REG.GIF-dead-16330223>
Wed Feb 17 1999 12:39:44 3337 m.. -rwxrwxrwx 0
0
16330223
<part2.img-_REG.GIF-dead-16330223>
Wed Feb 17 1999 12:39:46 3236 m.. -rwxrwxrwx 0
0
16330221
<part2.img-_LOG.GIF-dead-16330221>
Wed Feb 17 1999 12:39:52 8557 ..c -rwxrwxrwx 0
0
16330225
<part2.img-_XCENT~2.HTM-dead-16330225>
Wed Feb 17 1999 12:39:54 4522 ..c -rwxrwxrwx 0
0
19037354
<part2.img-_RESCE~1.GIF-dead-19037354>
8557 m.. -rwxrwxrwx 0
0
16330225 <part2.img_XCENT~2.HTM-dead-16330225>
Wed Feb 17 1999 12:39:56 4522 m.. -rwxrwxrwx 0
0
19037354
<part2.img-_RESCE~1.GIF-dead-19037354>
880 ..c -rwxrwxrwx 0
0
16330227 <part2.img_IDE03~1.GIF-dead-16330227>
Wed Feb 17 1999 12:39:58
880 m.. -rwxrwxrwx 0
0
16330227
<part2.img-_IDE03~1.GIF-dead-16330227>
Wed Feb 17 1999 12:40:00 9618 ..c -rwxrwxrwx 0
0
19037330
<part2.img-_PI~1.HTM-dead-19037330>
Wed Feb 17 1999 12:40:02 4861 ..c -rwxrwxrwx 0
0
16330229
<part2.img-_ATIENT.GIF-dead-16330229>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Wed Feb 17 1999 12:40:04 9618 m.. -rwxrwxrwx 0
0
19037330
<part2.img-_PI~1.HTM-dead-19037330>
Wed Feb 17 1999 12:40:06 4861 m.. -rwxrwxrwx 0
0
16330229
<part2.img-_ATIENT.GIF-dead-16330229>
Wed Feb 17 1999 12:40:14 25468 ..c -rwxrwxrwx 0
0
19037349
<part2.img-_NDEX(~9.HTM-dead-19037349>
Wed Feb 17 1999 12:40:18
283 ..c -rwxrwxrwx 0
0
19037356
<part2.img-_OP.GIF-dead-19037356>
25468 m.. -rwxrwxrwx 0
0
19037349 <part2.img_NDEX(~9.HTM-dead-19037349>
Wed Feb 17 1999 12:40:20
283 m.. -rwxrwxrwx 0
0
19037356
<part2.img-_OP.GIF-dead-19037356>
Wed Feb 17 1999 12:40:30 8855 ..c -rwxrwxrwx 0
0
16330231
<part2.img-_OLOFT~1.HTM-dead-16330231>
Wed Feb 17 1999 12:40:32 1558 ..c -rwxrwxrwx 0
0
19037358
<part2.img-_EALTH.GIF-dead-19037358>
8855 m.. -rwxrwxrwx 0
0
16330231 <part2.img_OLOFT~1.HTM-dead-16330231>
Wed Feb 17 1999 12:40:34 1558 m.. -rwxrwxrwx 0
0
19037358
<part2.img-_EALTH.GIF-dead-19037358>
Wed Feb 17 1999 12:41:24 10074 ..c -rwxrwxrwx 0
0
16330233
<part2.img-_IME~1.HTM-dead-16330233>
Wed Feb 17 1999 12:41:26 4879 ..c -rwxrwxrwx 0
0
16330235
<part2.img-_ESSAGE.GIF-dead-16330235>
1036 ..c -rwxrwxrwx 0
0
19037363 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
_IDE01~1.GIF-dead-19037363>
Wed Feb 17 1999 12:41:28 10074 m.. -rwxrwxrwx 0
0
16330233
<part2.img-_IME~1.HTM-dead-16330233>
1036 m.. -rwxrwxrwx 0
0
19037363 <part2.img_IDE01~1.GIF-dead-19037363>
Wed Feb 17 1999 12:41:30 4879 m.. -rwxrwxrwx 0
0
16330235
<part2.img-_ESSAGE.GIF-dead-16330235>
Wed Feb 17 1999 12:41:56 15603 ..c -rwxrwxrwx 0
0
19037365
<part2.img-_NDEX~10.HTM-dead-19037365>
Wed Feb 17 1999 12:42:04 4900 ..c -rwxrwxrwx 0
0
19037367
<part2.img-_HC_SHRT.GIF-dead-19037367>
Wed Feb 17 1999 12:42:08 4900 m.. -rwxrwxrwx 0
0
19037367
<part2.img-_HC_SHRT.GIF-dead-19037367>
824 ..c -rwxrwxrwx 0
0
16330239 <part2.img-_S.GIFdead-16330239>
15603 m.. -rwxrwxrwx 0
0
19037365 <part2.img_NDEX~10.HTM-dead-19037365>
1649 ..c -rwxrwxrwx 0
0
16330237 <part2.img_ELCOME.GIF-dead-16330237>
Wed Feb 17 1999 12:42:10
824 m.. -rwxrwxrwx 0
0
16330239
<part2.img-_S.GIF-dead-16330239>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
1649 m.. -rwxrwxrwx 0
0
16330237 <part2.img_ELCOME.GIF-dead-16330237>
Wed Feb 17 1999 12:42:12 3566 ..c -rwxrwxrwx 0
0
19037369
<part2.img-_ISTING.GIF-dead-19037369>
Wed Feb 17 1999 12:42:14 3566 m.. -rwxrwxrwx 0
0
19037369
<part2.img-_ISTING.GIF-dead-19037369>
Wed Feb 17 1999 12:42:36 4689 ..c -rwxrwxrwx 0
0
16330241
<part2.img-_INKS.GIF-dead-16330241>
Wed Feb 17 1999 12:42:38 3975 ..c -rwxrwxrwx 0
0
19037371
<part2.img-_RL_TI~1.GIF-dead-19037371>
4689 m.. -rwxrwxrwx 0
0
16330241 <part2.img_INKS.GIF-dead-16330241>
Wed Feb 17 1999 12:42:40 3975 m.. -rwxrwxrwx 0
0
19037371
<part2.img-_RL_TI~1.GIF-dead-19037371>
Wed Feb 17 1999 12:43:30 9417 ..c -rwxrwxrwx 0
0
19037377
<part2.img-_AHOO~1.HTM-dead-19037377>
Wed Feb 17 1999 12:43:32 9417 m.. -rwxrwxrwx 0
0
19037377
<part2.img-_AHOO~1.HTM-dead-19037377>
2032 ..c -rwxrwxrwx 0
0
20025859 <part2.img_ROMO1~1.GIF-dead-20025859>
Wed Feb 17 1999 12:43:34 2032 m.. -rwxrwxrwx 0
0
20025859
<part2.img-_ROMO1~1.GIF-dead-20025859>
Wed Feb 17 1999 12:43:54 7420 ..c -rwxrwxrwx 0
0
19037381
<part2.img-_RUGS_~2.HTM-dead-19037381>
Wed Feb 17 1999 12:43:56 7420 m.. -rwxrwxrwx 0
0
19037381
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
<part2.img-_RUGS_~2.HTM-dead-19037381>
2404 ..c -rwxrwxrwx 0
0
20025861 <part2.img_IGHTF~1.JPE-dead-20025861>
Wed Feb 17 1999 12:43:58 2404 m.. -rwxrwxrwx 0
0
20025861
<part2.img-_IGHTF~1.JPE-dead-20025861>
921 ..c -rwxrwxrwx 0
0
19037388 <part2.img_IVETH~1.GIF-dead-19037388>
Wed Feb 17 1999 12:44:00
921 m.. -rwxrwxrwx 0
0
19037388
<part2.img-_IVETH~1.GIF-dead-19037388>
Wed Feb 17 1999 12:44:02 22482 ..c -rwxrwxrwx 0
0
20025865
<part2.img-_PECIF~1.HTM-dead-20025865>
Wed Feb 17 1999 12:44:06 22482 m.. -rwxrwxrwx 0
0
20025865
<part2.img-_PECIF~1.HTM-dead-20025865>
10826 ..c -rwxrwxrwx 0
0
19037391 <part2.img_2_07_~1.GIF-dead-19037391>
Wed Feb 17 1999 12:44:08 10826 m.. -rwxrwxrwx 0
0
19037391
<part2.img-_2_07_~1.GIF-dead-19037391>
Wed Feb 17 1999 12:45:20 7665 ..c -rwxrwxrwx 0
0
19037383
<part2.img-_EARCH~1.JPE-dead-19037383>
Wed Feb 17 1999 12:45:22 7665 m.. -rwxrwxrwx 0
0
19037383
<part2.img-_EARCH~1.JPE-dead-19037383>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Wed Feb 17 1999 12:46:36 2072 ..c -rwxrwxrwx 0
0
19037394
<part2.img-_EARC~10.HTM-dead-19037394>
Wed Feb 17 1999 12:46:38 2072 m.. -rwxrwxrwx 0
0
19037394
<part2.img-_EARC~10.HTM-dead-19037394>
Wed Feb 17 1999 12:47:26 1005 ..c -rwxrwxrwx 0
0
19037405
<part2.img-_RUGQR~3.HTM-dead-19037405>
Wed Feb 17 1999 12:47:28 1005 m.. -rwxrwxrwx 0
0
19037405
<part2.img-_RUGQR~3.HTM-dead-19037405>
Wed Feb 17 1999 12:48:54 14656 ..c -rwxrwxrwx 0
0
20025867
<part2.img-_EINDE~1.HTM-dead-20025867>
Wed Feb 17 1999 12:48:56 14656 m.. -rwxrwxrwx 0
0
20025867
<part2.img-_EINDE~1.HTM-dead-20025867>
532 ..c -rwxrwxrwx 0
0
20025869 <part2.img_3A.GIF-dead-20025869>
369 ..c -rwxrwxrwx 0
0
19037399 <part2.img_1A.GIF-dead-19037399>
Wed Feb 17 1999 12:48:58
532 m.. -rwxrwxrwx 0
0
20025869
<part2.img-_3A.GIF-dead-20025869>
690 ..c -rwxrwxrwx 0
0
19037407 <part2.img_ETNAL~1.GIF-dead-19037407>
369 m.. -rwxrwxrwx 0
0
19037399 <part2.img_1A.GIF-dead-19037399>
Wed Feb 17 1999 12:49:02
168 ..c -rwxrwxrwx 0
0
19037410
<part2.img-_NDEXL~1.GIF-dead-19037410>
690 m.. -rwxrwxrwx 0
0
19037407 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
_ETNAL~1.GIF-dead-19037407>
Wed Feb 17 1999 12:49:04
168 m.. -rwxrwxrwx 0
0
19037410
<part2.img-_NDEXL~1.GIF-dead-19037410>
569 ..c -rwxrwxrwx 0
0
19037418 <part2.img_NDEXL~2.GIF-dead-19037418>
Wed Feb 17 1999 12:49:06
569 m.. -rwxrwxrwx 0
0
19037418
<part2.img-_NDEXL~2.GIF-dead-19037418>
Wed Feb 17 1999 12:49:36 8841 ..c -rwxrwxrwx 0
0
20025872
<part2.img-_NDEX~13.HTM-dead-20025872>
Wed Feb 17 1999 12:49:38 8841 m.. -rwxrwxrwx 0
0
20025872
<part2.img-_NDEX~13.HTM-dead-20025872>
Wed Feb 17 1999 12:49:50
45 ..c -rwxrwxrwx 0
0
19037428
<part2.img-_H.GIF-dead-19037428>
Wed Feb 17 1999 12:49:52
45 m.. -rwxrwxrwx 0
0
19037428
<part2.img-_H.GIF-dead-19037428>
1770 ..c -rwxrwxrwx 0
0
19037430 <part2.img_H(1).GIF-dead-19037430>
Wed Feb 17 1999 12:49:54 1770 m.. -rwxrwxrwx 0
0
19037430
<part2.img-_H(1).GIF-dead-19037430>
2157 ..c -rwxrwxrwx 0
0
19037432 <part2.img_H(2).GIF-dead-19037432>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Wed Feb 17 1999 12:49:56 2157 m.. -rwxrwxrwx 0
0
19037432
<part2.img-_H(2).GIF-dead-19037432>
Wed Feb 17 1999 12:49:58
122 ..c -rwxrwxrwx 0
0
20025876
<part2.img-_H(1).GIF-dead-20025876>
Wed Feb 17 1999 12:50:00
122 m.. -rwxrwxrwx 0
0
20025876
<part2.img-_H(1).GIF-dead-20025876>
4373 ..c -rwxrwxrwx 0
0
19037468 <part2.img_H(4).GIF-dead-19037468>
122 ..c -rwxrwxrwx 0
0
19037443 <part2.img_H(3).GIF-dead-19037443>
Wed Feb 17 1999 12:50:02 8601 ..c -rwxrwxrwx 0
0
20025878
<part2.img-_H(2).GIF-dead-20025878>
122 m.. -rwxrwxrwx 0
0
19037443 <part2.img_H(3).GIF-dead-19037443>
Wed Feb 17 1999 12:50:04 4373 m.. -rwxrwxrwx 0
0
19037468
<part2.img-_H(4).GIF-dead-19037468>
Wed Feb 17 1999 12:50:08 8601 m.. -rwxrwxrwx 0
0
20025878
<part2.img-_H(2).GIF-dead-20025878>
7754 ..c -rwxrwxrwx 0
0
20025883 <part2.img_H(3).GIF-dead-20025883>
Wed Feb 17 1999 12:50:12 7754 m.. -rwxrwxrwx 0
0
20025883
<part2.img-_H(3).GIF-dead-20025883>
Wed Feb 17 1999 12:50:22 261293 ..c -rwxrwxrwx 0
0
20025887
<part2.img-_HTIH~1.HTM-dead-20025887>
Wed Feb 17 1999 12:50:24
702 ..c -rwxrwxrwx 0
0
19037476
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
<part2.img-_AIN_C~3.HTM-dead-19037476>
Wed Feb 17 1999 12:50:26
702 m.. -rwxrwxrwx 0
0
19037476
<part2.img-_AIN_C~3.HTM-dead-19037476>
Wed Feb 17 1999 12:50:48 261293 m.. -rwxrwxrwx 0
0
20025887
<part2.img-_HTIH~1.HTM-dead-20025887>
Wed Feb 17 1999 12:51:20
243 ..c -rwxrwxrwx 0
0
19037492
<part2.img-_AIN_C~2.HTM-dead-19037492>
Wed Feb 17 1999 12:51:22
243 m.. -rwxrwxrwx 0
0
19037492
<part2.img-_AIN_C~2.HTM-dead-19037492>
11324 ..c -rwxrwxrwx 0
0
20025889 <part2.img-_1557~1.GIF-dead-20025889>
Wed Feb 17 1999 12:51:26 11324 m.. -rwxrwxrwx 0
0
20025889
<part2.img-_1557-~1.GIF-dead-20025889>
Wed Feb 17 1999 12:52:04 24790 ..c -rwxrwxrwx 0
0
19037420
<part2.img-_HTIH~1.HTM-dead-19037420>
Wed Feb 17 1999 12:52:10 7780 ..c -rwxrwxrwx 0
0
20025895
<part2.img-_INDLA~1.GIF-dead-20025895>
24790 m.. -rwxrwxrwx 0
0
19037420 <part2.img_HTIH~1.HTM-dead-19037420>
Wed Feb 17 1999 12:52:12 7780 m.. -rwxrwxrwx 0
0
20025895
<part2.img-_INDLA~1.GIF-dead-20025895>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
4456 ..c -rwxrwxrwx 0
0
20025898 <part2.img-_134C~1.GIF-dead-20025898>
Wed Feb 17 1999 12:52:14 4456 m.. -rwxrwxrwx 0
0
20025898
<part2.img-_134-C~1.GIF-dead-20025898>
Wed Feb 17 1999 12:52:32 17075 ..c -rwxrwxrwx 0
0
19037422
<part2.img-_HTSTO~1.HTM-dead-19037422>
Wed Feb 17 1999 12:52:36 17075 m.. -rwxrwxrwx 0
0
19037422
<part2.img-_HTSTO~1.HTM-dead-19037422>
Wed Feb 17 1999 12:52:40
468 ..c -rwxrwxrwx 0
0
19037426
<part2.img-_H(6).GIF-dead-19037426>
Wed Feb 17 1999 12:52:42
468 m.. -rwxrwxrwx 0
0
19037426
<part2.img-_H(6).GIF-dead-19037426>
450 ..c -rwxrwxrwx 0
0
20025902 <part2.img_H(6).GIF-dead-20025902>
Wed Feb 17 1999 12:52:44
450 m.. -rwxrwxrwx 0
0
20025902
<part2.img-_H(6).GIF-dead-20025902>
6812 ..c -rwxrwxrwx 0
0
19037482 <part2.img_H~1.JPE-dead-19037482>
Wed Feb 17 1999 12:52:46 6182 ..c -rwxrwxrwx 0
0
19037484
<part2.img-_H(8).GIF-dead-19037484>
6812 m.. -rwxrwxrwx 0
0
19037482 <part2.img_H~1.JPE-dead-19037482>
5697 ..c -rwxrwxrwx 0
0
20025907 <part2.img_H(7).GIF-dead-20025907>
Wed Feb 17 1999 12:52:48 6182 m.. -rwxrwxrwx 0
0
19037484
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
<part2.img-_H(8).GIF-dead-19037484>
Wed Feb 17 1999 12:52:50 5697 m.. -rwxrwxrwx 0
0
20025907
<part2.img-_H(7).GIF-dead-20025907>
6342 ..c -rwxrwxrwx 0
0
19037486 <part2.img_H(9).GIF-dead-19037486>
Wed Feb 17 1999 12:52:52 6889 ..c -rwxrwxrwx 0
0
19037494
<part2.img-_H(10).GIF-dead-19037494>
Wed Feb 17 1999 12:52:54 6342 m.. -rwxrwxrwx 0
0
19037486
<part2.img-_H(9).GIF-dead-19037486>
Wed Feb 17 1999 12:53:00 6889 m.. -rwxrwxrwx 0
0
19037494
<part2.img-_H(10).GIF-dead-19037494>
6432 ..c -rwxrwxrwx 0
0
20025911 <part2.img_H(8).GIF-dead-20025911>
Wed Feb 17 1999 12:53:02 6432 m.. -rwxrwxrwx 0
0
20025911
<part2.img-_H(8).GIF-dead-20025911>
Wed Feb 17 1999 12:53:04 1632 ..c -rwxrwxrwx 0
0
20025913
<part2.img-_H(9).GIF-dead-20025913>
2730 ..c -rwxrwxrwx 0
0
19037496 <part2.img_H(11).GIF-dead-19037496>
Wed Feb 17 1999 12:53:06 1632 m.. -rwxrwxrwx 0
0
20025913
<part2.img-_H(9).GIF-dead-20025913>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
2456 ..c -rwxrwxrwx 0
0
19037504 <part2.img_H(12).GIF-dead-19037504>
2730 m.. -rwxrwxrwx 0
0
19037496 <part2.img_H(11).GIF-dead-19037496>
Wed Feb 17 1999 12:53:08 2456 m.. -rwxrwxrwx 0
0
19037504
<part2.img-_H(12).GIF-dead-19037504>
Wed Feb 17 1999 12:54:42 7917 ..c -rwxrwxrwx 0
0
20025915
<part2.img-_AY8WW~1.HTM-dead-20025915>
Wed Feb 17 1999 12:54:44 7917 m.. -rwxrwxrwx 0
0
20025915
<part2.img-_AY8WW~1.HTM-dead-20025915>
Wed Feb 17 1999 12:54:48
103 ..c -rwxrwxrwx 0
0
19037509
<part2.img-_H(13).GIF-dead-19037509>
Wed Feb 17 1999 12:54:50
103 m.. -rwxrwxrwx 0
0
19037509
<part2.img-_H(13).GIF-dead-19037509>
Wed Feb 17 1999 12:54:56
514 ..c -rwxrwxrwx 0
0
20025874
<part2.img-_H.GIF-dead-20025874>
Wed Feb 17 1999 12:54:58
514 m.. -rwxrwxrwx 0
0
20025874
<part2.img-_H.GIF-dead-20025874>
Wed Feb 17 1999 12:55:16 2729 ..c -rwxrwxrwx 0
0
20025901
<part2.img-_EW_HE~1.GIF-dead-20025901>
2821 ..c -rwxrwxrwx 0
0
19037535 <part2.img_NK_NA~6.GIF-dead-19037535>
Wed Feb 17 1999 12:55:18 2729 m.. -rwxrwxrwx 0
0
20025901
<part2.img-_EW_HE~1.GIF-dead-20025901>
Wed Feb 17 1999 12:55:22 2821 m.. -rwxrwxrwx 0
0
19037535
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
<part2.img-_NK_NA~6.GIF-dead-19037535>
Wed Feb 17 1999 12:55:30 3204 ..c -rwxrwxrwx 0
0
20025885
<part2.img-_H(4).GIF-dead-20025885>
Wed Feb 17 1999 12:55:32 3204 m.. -rwxrwxrwx 0
0
20025885
<part2.img-_H(4).GIF-dead-20025885>
Wed Feb 17 1999 12:55:34 7022 ..c -rwxrwxrwx 0
0
20025918
<part2.img-_134-M~1.GIF-dead-20025918>
1820 ..c -rwxrwxrwx 0
0
19037425 <part2.img-_284B~1.GIF-dead-19037425>
Wed Feb 17 1999 12:55:36 7022 m.. -rwxrwxrwx 0
0
20025918
<part2.img-_134-M~1.GIF-dead-20025918>
1820 m.. -rwxrwxrwx 0
0
19037425 <part2.img-_284B~1.GIF-dead-19037425>
Wed Feb 17 1999 12:55:40
753 ..c -rwxrwxrwx 0
0
20025920
<part2.img-_H(5).GIF-dead-20025920>
Wed Feb 17 1999 12:55:42
753 m.. -rwxrwxrwx 0
0
20025920
<part2.img-_H(5).GIF-dead-20025920>
Wed Feb 17 1999 12:55:58 3672 ..c -rwxrwxrwx 0
0
19037538
<part2.img-_134-W~1.GIF-dead-19037538>
Wed Feb 17 1999 12:56:00 3672 m.. -rwxrwxrwx 0
0
19037538
<part2.img-_134-W~1.GIF-dead-19037538>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Wed Feb 17 1999 12:56:08
316 ..c -rwxrwxrwx 0
0
19037577
<part2.img-_AIN_C~5.HTM-dead-19037577>
Wed Feb 17 1999 12:56:10
316 m.. -rwxrwxrwx 0
0
19037577
<part2.img-_AIN_C~5.HTM-dead-19037577>
Wed Feb 17 1999 12:56:48 6461 ..c -rwxrwxrwx 0
0
19037544
<part2.img-_RUGS_~1.HTM-dead-19037544>
Wed Feb 17 1999 12:56:50 6461 m.. -rwxrwxrwx 0
0
19037544
<part2.img-_RUGS_~1.HTM-dead-19037544>
Wed Feb 17 1999 12:58:36 23259 ..c -rwxrwxrwx 0
0
19037380
<part2.img-_HARMA~2.HTM-dead-19037380>
Wed Feb 17 1999 12:58:40 23259 m.. -rwxrwxrwx 0
0
19037380
<part2.img-_HARMA~2.HTM-dead-19037380>
Wed Feb 17 1999 12:59:36 1262 ..c -rwxrwxrwx 0
0
19037478
<part2.img-_.GIF-dead-19037478>
Wed Feb 17 1999 12:59:38 1262 m.. -rwxrwxrwx 0
0
19037478
<part2.img-_.GIF-dead-19037478>
Wed Feb 17 1999 12:59:44
94 ..c -rwxrwxrwx 0
0
19037513
<part2.img-_G_TILE.GIF-dead-19037513>
Wed Feb 17 1999 12:59:46
94 m.. -rwxrwxrwx 0
0
19037513
<part2.img-_G_TILE.GIF-dead-19037513>
Wed Feb 17 1999 12:59:50 6080 ..c -rwxrwxrwx 0
0
19037554
<part2.img-_NIMAT~1.GIF-dead-19037554>
Wed Feb 17 1999 12:59:54 6080 m.. -rwxrwxrwx 0
0
19037554
<part2.img-_NIMAT~1.GIF-dead-19037554>
Wed Feb 17 1999 13:00:06
518 ..c -rwxrwxrwx 0
0
19037559
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
<part2.img-_OME_F~2.HTM-dead-19037559>
Wed Feb 17 1999 13:00:08
518 m.. -rwxrwxrwx 0
0
19037559
<part2.img-_OME_F~2.HTM-dead-19037559>
Wed Feb 17 1999 13:00:18
534 ..c -rwxrwxrwx 0
0
19037562
<part2.img-_ITAMI~1.GIF-dead-19037562>
Wed Feb 17 1999 13:00:20
534 m.. -rwxrwxrwx 0
0
19037562
<part2.img-_ITAMI~1.GIF-dead-19037562>
1058 ..c -rwxrwxrwx 0
0
19037568 <part2.img_EAUTY~1.GIF-dead-19037568>
Wed Feb 17 1999 13:00:22 1058 m.. -rwxrwxrwx 0
0
19037568
<part2.img-_EAUTY~1.GIF-dead-19037568>
Fri Feb 19 1999 23:00:00
616 .a. -rwxrwxrwx 0
0
18497725
<part2.img-_ELECT~5.GIF-dead-18497725>
341 .a. -rwxrwxrwx 0
0
10738160 <part2.img_ELECT~1.GIF-dead-10738160>
551 .a. -rwxrwxrwx 0
0
18497715 <part2.img_ELECT~3.GIF-dead-18497715>
43 .a. -rwxrwxrwx 0
0
16416375 <part2.img-_.GIFdead-16416375>
559 .a. -rwxrwxrwx 0
0
18497702 <part2.img_ELECT~2.GIF-dead-18497702>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
705 .a. -rwxrwxrwx 0
0
10738151 <part2.img_THER_~1.GIF-dead-10738151>
461 .a. -rwxrwxrwx 0
0
10738157 <part2.img_OREAN.GIF-dead-10738157>
546 .a. -rwxrwxrwx 0
0
16416382 <part2.img_ELECT~1.GIF-dead-16416382>
496 .a. -rwxrwxrwx 0
0
16416385 <part2.img_EARCH~4.GIF-dead-16416385>
20248 .a. -rwxrwxrwx 0
0
16329754 <part2.img_NANDT~1.HTM-dead-16329754>
406 .a. -rwxrwxrwx 0
0
18497718 <part2.img_ELECT~4.GIF-dead-18497718>
224 .a. -rwxrwxrwx 0
0
16416387 <part2.img_OTTOM.GIF-dead-16416387>
Tue Feb 23 1999 23:00:00 1315 .a. -rwxrwxrwx 0
0
200217
<part2.img-_ICENSE.TXT-dead-200217>
1315 .a. -/-rwxrwxrwx 0
0
200217
c:\/WINDOWS/TEMP/IXP000.TMP/_ICENSE.TXT (deleted)
282896 m.. -/--wx-wx-wx 0
0
6740490
c:\/TEMP/Shlwapi.dll (SHLWAPI.DLL)
Wed Feb 24 1999 04:43:32 111738 m.c -/-rwxrwxrwx 0
0
3905032
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/TERRAIN/tf1.wav (TF1.WAV)
Wed Feb 24 1999 05:19:00 138616 m.c -/-rwxrwxrwx 0
0
3905034
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/TERRAIN/tf2.wav (TF2.WAV)
Wed Feb 24 1999 05:21:00 144504 m.c -/-rwxrwxrwx 0
0
3905036
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/TERRAIN/tf3.wav 4E46
(TF3.WAV)
Wed Feb 24 1999 05:29:34 163962 m.c -/-rwxrwxrwx 0
0
3905038
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/TERRAIN/tf4.wav (TF4.WAV)
Wed Feb 24 1999 17:44:54 1315 m.c -/-rwxrwxrwx 0
0
200217
c:\/WINDOWS/TEMP/IXP000.TMP/_ICENSE.TXT (deleted)
1315 m.c -rwxrwxrwx 0
0
200217 <part2.img_ICENSE.TXT-dead-200217>
Thu Feb 25 1999 11:11:30 25360 m.c -rwxrwxrwx 0
0
200216
<part2.img-_ILLSVR.EXE-dead-200216>
25360 m.c -/-rwxrwxrwx 0
0
200216
c:\/WINDOWS/TEMP/IXP000.TMP/_ILLSVR.EXE (deleted)
Fri Mar 26 1999 12:09:46 2772 m.c -/-rwxrwxrwx 0
0
200197
c:\/WINDOWS/TEMP/IXP000.TMP/_PLAY.INF (deleted)
2772 m.c -rwxrwxrwx 0
0
200197 <part2.img_PLAY.INF-dead-200197>
Fri Mar 26 1999 14:46:48
11 m.c -/-rwxrwxrwx 0
0
3901958
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SAVEGAME/MULTI/Multi.txt
(MULTI.TXT)
Thu Apr 08 1999 16:52:54
281 m.c -/-rwxrwxrwx 0
0
200225
c:\/WINDOWS/TEMP/IXP000.TMP/regsp.inf (_EGSP.INF) (deleted)
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
281 m.c -rwxrwxrwx 0
0
200225 <part2.img_EGSP.INF-dead-200225>
Mon Apr 12 1999 11:19:22
299 m.c -rwxrwxrwx 0
0
200227
<part2.img-_PLAY61A.TXT-dead-200227>
299 m.c -/-rwxrwxrwx 0
0
200227
c:\/WINDOWS/TEMP/IXP000.TMP/dplay61a.txt (_PLAY61A.TXT) (deleted)
299 m.. -/-rwxrwxrwx 0
0
342610
c:\/WINDOWS/SYSTEM/DPLAY61A.TXT
Mon Apr 12 1999 11:19:24 2588 m.c -/-rwxrwxrwx 0
0
200218
c:\/WINDOWS/TEMP/IXP000.TMP/_SDPLAY.INF (deleted)
2588 m.c -rwxrwxrwx 0
0
200218 <part2.img_SDPLAY.INF-dead-200218>
Thu Apr 22 1999 12:21:46 222328 m.c -/-rwxrwxrwx 0
0
3905030
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/TERRAIN/Cricket.wav
(CRICKET.WAV)
Thu Apr 22 1999 14:16:18 67190 m.c -/-rwxrwxrwx 0
0
3905040
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/TERRAIN/tf6.wav (TF6.WAV)
Thu Apr 22 1999 14:50:18 66390 m.c -/-rwxrwxrwx 0
0
3905042
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/TERRAIN/tf7.wav (TF7.WAV)
Mon Apr 26 1999 13:34:10 229512 m.c -/-rwxrwxrwx 0
0
3905060
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/TERRAIN/Wind3.wav
(WIND3.WAV)
Thu May 06 1999 16:29:28 107638 m.c -/-rwxrwxrwx 0
0
3905044
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/TERRAIN/tf8.wav (TF8.WAV)
Fri May 07 1999 08:11:26 329568 m.c -/-rwxrwxrwx 0
0
3899403
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
c:\/PROGRA~1/MICROS~1/AGEOFE~1/DATA/blendomatic.dat
(BLENDO~1.DAT)
Tue May 11 1999 00:00:00 2562 .a. -rwxrwxrwx 0
0
200204
<part2.img-_PLAYGER.INF-dead-200204>
2556 .a. -rwxrwxrwx 0
0
200205 <part2.img_PLAYITN.INF-dead-200205>
2514 .a. -/-rwxrwxrwx 0
0
200207
c:\/WINDOWS/TEMP/IXP000.TMP/_PLAYKOR.INF (deleted)
2542 .a. -/-rwxrwxrwx 0
0
200203
c:\/WINDOWS/TEMP/IXP000.TMP/_PLAYFRN.INF (deleted)
2577 .a. -rwxrwxrwx 0
0
200210 <part2.img_PLAYRUS.INF-dead-200210>
2508 .a. -rwxrwxrwx 0
0
200200 <part2.img_PLAYCHT.INF-dead-200200>
2552 .a. -rwxrwxrwx 0
0
200202 <part2.img_PLAYDUT.INF-dead-200202>
2520 .a. -/-rwxrwxrwx 0
0
200199
c:\/WINDOWS/TEMP/IXP000.TMP/_PLAYCHS.INF (deleted)
2577 .a. -/-rwxrwxrwx 0
0
200210
c:\/WINDOWS/TEMP/IXP000.TMP/_PLAYRUS.INF (deleted)
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
2556 .a. -/-rwxrwxrwx 0
0
200205
c:\/WINDOWS/TEMP/IXP000.TMP/_PLAYITN.INF (deleted)
2539 .a. -rwxrwxrwx 0
0
200208 <part2.img_PLAYNEC.INF-dead-200208>
2546 .a. -/-rwxrwxrwx 0
0
200211
c:\/WINDOWS/TEMP/IXP000.TMP/_PLAYSPA.INF (deleted)
2520 .a. -rwxrwxrwx 0
0
200199 <part2.img_PLAYCHS.INF-dead-200199>
2526 .a. -/-rwxrwxrwx 0
0
200201
c:\/WINDOWS/TEMP/IXP000.TMP/_PLAYCZE.INF (deleted)
2562 .a. -/-rwxrwxrwx 0
0
200204
c:\/WINDOWS/TEMP/IXP000.TMP/_PLAYGER.INF (deleted)
2552 .a. -/-rwxrwxrwx 0
0
200202
c:\/WINDOWS/TEMP/IXP000.TMP/_PLAYDUT.INF (deleted)
2526 .a. -rwxrwxrwx 0
0
200201 <part2.img_PLAYCZE.INF-dead-200201>
2539 .a. -/-rwxrwxrwx 0
0
200206
c:\/WINDOWS/TEMP/IXP000.TMP/_PLAYJPN.INF (deleted)
2554 .a. -/-rwxrwxrwx 0
0
200198
c:\/WINDOWS/TEMP/IXP000.TMP/_PLAYBRZ.INF (deleted)
2546 .a. -rwxrwxrwx 0
0
200211 <part2.img_PLAYSPA.INF-dead-200211>
2554 .a. -rwxrwxrwx 0
0
200198 <part2.img_PLAYBRZ.INF-dead-200198>
2514 .a. -rwxrwxrwx 0
0
200207 <part2.imgKey
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
_PLAYKOR.INF-dead-200207>
2508 .a. -/-rwxrwxrwx 0
0
200200
c:\/WINDOWS/TEMP/IXP000.TMP/_PLAYCHT.INF (deleted)
2542 .a. -rwxrwxrwx 0
0
200203 <part2.img_PLAYFRN.INF-dead-200203>
2550 .a. -/-rwxrwxrwx 0
0
200209
c:\/WINDOWS/TEMP/IXP000.TMP/_PLAYPOL.INF (deleted)
2539 .a. -/-rwxrwxrwx 0
0
200208
c:\/WINDOWS/TEMP/IXP000.TMP/_PLAYNEC.INF (deleted)
2550 .a. -rwxrwxrwx 0
0
200209 <part2.img_PLAYPOL.INF-dead-200209>
2539 .a. -rwxrwxrwx 0
0
200206 <part2.img_PLAYJPN.INF-dead-200206>
Tue May 11 1999 16:57:38 217872 m.. -/-rwxrwxrwx 0
0
342615
c:\/WINDOWS/SYSTEM/DPLAYX.DLL
217872 m.c -/-rwxrwxrwx 0
0
200213
c:\/WINDOWS/TEMP/IXP000.TMP/_PLAYX.DLL (deleted)
217872 m.c -rwxrwxrwx 0
0
200213 <part2.img_PLAYX.DLL-dead-200213>
Tue May 11 1999 16:58:42 29968 m.c -rwxrwxrwx 0
0
200212
<part2.img-_PLAYSVR.EXE-dead-200212>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
29968 m.c -/-rwxrwxrwx 0
0
200212
c:\/WINDOWS/TEMP/IXP000.TMP/_PLAYSVR.EXE (deleted)
29968 m.. -/-rwxrwxrwx 0
0
342613
c:\/WINDOWS/SYSTEM/DPLAYSVR.EXE
Tue May 11 1999 16:58:44 46864 m.c -/-rwxrwxrwx 0
0
200219
c:\/WINDOWS/TEMP/IXP000.TMP/_EGSP.EXE (deleted)
46864 m.c -rwxrwxrwx 0
0
200219 <part2.img_EGSP.EXE-dead-200219>
Tue May 11 1999 17:05:16 2554 m.c -/-rwxrwxrwx 0
0
200198
c:\/WINDOWS/TEMP/IXP000.TMP/_PLAYBRZ.INF (deleted)
2554 m.c -rwxrwxrwx 0
0
200198 <part2.img_PLAYBRZ.INF-dead-200198>
Tue May 11 1999 17:05:18 2520 m.c -rwxrwxrwx 0
0
200199
<part2.img-_PLAYCHS.INF-dead-200199>
2556 m.c -/-rwxrwxrwx 0
0
200205
c:\/WINDOWS/TEMP/IXP000.TMP/_PLAYITN.INF (deleted)
2508 m.c -rwxrwxrwx 0
0
200200 <part2.img_PLAYCHT.INF-dead-200200>
2526 m.c -/-rwxrwxrwx 0
0
200201
c:\/WINDOWS/TEMP/IXP000.TMP/_PLAYCZE.INF (deleted)
2542 m.c -rwxrwxrwx 0
0
200203 <part2.img_PLAYFRN.INF-dead-200203>
2562 m.c -rwxrwxrwx 0
0
200204 <part2.img_PLAYGER.INF-dead-200204>
2520 m.c -/-rwxrwxrwx 0
0
200199
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/WINDOWS/TEMP/IXP000.TMP/_PLAYCHS.INF (deleted)
2552 m.c -rwxrwxrwx 0
0
200202 <part2.img_PLAYDUT.INF-dead-200202>
2508 m.c -/-rwxrwxrwx 0
0
200200
c:\/WINDOWS/TEMP/IXP000.TMP/_PLAYCHT.INF (deleted)
2556 m.c -rwxrwxrwx 0
0
200205 <part2.img_PLAYITN.INF-dead-200205>
2542 m.c -/-rwxrwxrwx 0
0
200203
c:\/WINDOWS/TEMP/IXP000.TMP/_PLAYFRN.INF (deleted)
2526 m.c -rwxrwxrwx 0
0
200201 <part2.img_PLAYCZE.INF-dead-200201>
2562 m.c -/-rwxrwxrwx 0
0
200204
c:\/WINDOWS/TEMP/IXP000.TMP/_PLAYGER.INF (deleted)
2552 m.c -/-rwxrwxrwx 0
0
200202
c:\/WINDOWS/TEMP/IXP000.TMP/_PLAYDUT.INF (deleted)
Tue May 11 1999 17:05:20 2577 m.c -rwxrwxrwx 0
0
200210
<part2.img-_PLAYRUS.INF-dead-200210>
2539 m.c -rwxrwxrwx 0
0
200208 <part2.img_PLAYNEC.INF-dead-200208>
2577 m.c -/-rwxrwxrwx 0
0
200210
c:\/WINDOWS/TEMP/IXP000.TMP/_PLAYRUS.INF (deleted)
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
2539 m.c -/-rwxrwxrwx 0
0
200208
c:\/WINDOWS/TEMP/IXP000.TMP/_PLAYNEC.INF (deleted)
2550 m.c -rwxrwxrwx 0
0
200209 <part2.img_PLAYPOL.INF-dead-200209>
2546 m.c -/-rwxrwxrwx 0
0
200211
c:\/WINDOWS/TEMP/IXP000.TMP/_PLAYSPA.INF (deleted)
2539 m.c -/-rwxrwxrwx 0
0
200206
c:\/WINDOWS/TEMP/IXP000.TMP/_PLAYJPN.INF (deleted)
2539 m.c -rwxrwxrwx 0
0
200206 <part2.img_PLAYJPN.INF-dead-200206>
2514 m.c -rwxrwxrwx 0
0
200207 <part2.img_PLAYKOR.INF-dead-200207>
2550 m.c -/-rwxrwxrwx 0
0
200209
c:\/WINDOWS/TEMP/IXP000.TMP/_PLAYPOL.INF (deleted)
2514 m.c -/-rwxrwxrwx 0
0
200207
c:\/WINDOWS/TEMP/IXP000.TMP/_PLAYKOR.INF (deleted)
2546 m.c -rwxrwxrwx 0
0
200211 <part2.img_PLAYSPA.INF-dead-200211>
Tue May 11 1999 17:05:28 76560 m.c -/-rwxrwxrwx 0
0
200214
c:\/WINDOWS/TEMP/IXP000.TMP/_PMODEMX.DLL (deleted)
76560 m.c -rwxrwxrwx 0
0
200214 <part2.img_PMODEMX.DLL-dead-200214>
76560 m.. -/-rwxrwxrwx 0
0
342661
c:\/WINDOWS/SYSTEM/DPMODEMX.DLL
Tue May 11 1999 17:05:32 66832 m.c -/-rwxrwxrwx 0
0
200215
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
c:\/WINDOWS/TEMP/IXP000.TMP/_PWSOCKX.DLL (deleted)
66832 m.. -/-rwxrwxrwx 0
0
342716
c:\/WINDOWS/SYSTEM/DPWSOCKX.DLL
66832 m.c -rwxrwxrwx 0
0
200215 <part2.img_PWSOCKX.DLL-dead-200215>
Tue May 11 1999 17:13:24 6784 m.c -rwxrwxrwx 0
0
200221
<part2.img-_XMIGR.DLL-dead-200221>
6784 m.c -/-rwxrwxrwx 0
0
200221
c:\/WINDOWS/TEMP/IXP000.TMP/dxmigr.dll (_XMIGR.DLL) (deleted)
6784 m.. -/-rwxrwxrwx 0
0
342757
c:\/WINDOWS/SYSTEM/DXMIGR.DLL
Thu May 13 1999 11:51:16 1252112 m.c -/-rwxrwxrwx 0
0
200223
c:\/WINDOWS/TEMP/IXP000.TMP/DXDiag.exe (_XDIAG.EXE) (deleted)
1252112 m.. -/-rwxrwxrwx 0
0
342775
c:\/WINDOWS/SYSTEM/dxdiag.exe (DXDIAG.EXE)
1252112 m.c -rwxrwxrwx 0
0
200223 <part2.img_XDIAG.EXE-dead-200223>
Thu May 27 1999 18:40:08 300124 m.c -/-rwxrwxrwx 0
0
3899410
c:\/PROGRA~1/MICROS~1/AGEOFE~1/DATA/FilterMaps.dat (FILTER~1.DAT)
Mon May 31 1999 09:29:24 73800 m.c -/-rwxrwxrwx 0
0
3899418
c:\/PROGRA~1/MICROS~1/AGEOFE~1/DATA/lightMaps.dat (LIGHTM~1.DAT)
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Sun Jun 13 1999 16:28:58
10 m.c -/-rwxrwxrwx 0
0
3899910
c:\/PROGRA~1/MICROS~1/AGEOFE~1/DATA/LOAD/Load.txt (LOAD.TXT)
Sun Jun 13 1999 17:17:20
8 m.c -/-rwxrwxrwx 0
0
3894278
c:\/PROGRA~1/MICROS~1/AGEOFE~1/AI/AI.txt (AI.TXT)
Fri Jun 18 1999 16:35:30 485600 m.c -/-rwxrwxrwx 0
0
3892256
c:\/PROGRA~1/MICROS~1/AGEOFE~1/DPLAY61A.EXE
Thu Jun 24 1999 13:35:04 39915 m.c -/-rwxrwxrwx 0
0
3905569
c:\/PROGRA~1/MICROS~1/AGEOFE~1/TAUNT/11 Herb laugh.mp3
(11HERB~1.MP3)
Fri Jun 25 1999 05:02:22 12747 m.c -/-rwxrwxrwx 0
0
3905563
c:\/PROGRA~1/MICROS~1/AGEOFE~1/TAUNT/09 Oooh.mp3
(09OOOH~1.MP3)
Fri Jun 25 1999 05:02:24 12329 m.c -/-rwxrwxrwx 0
0
3905553
c:\/PROGRA~1/MICROS~1/AGEOFE~1/TAUNT/05 Gold, PLease.mp3
(05GOLD~1.MP3)
11493 m.c -/-rwxrwxrwx 0
0
3905547
c:\/PROGRA~1/MICROS~1/AGEOFE~1/TAUNT/03 Food, please.mp3
(03FOOD~1.MP3)
10657 m.c -/-rwxrwxrwx 0
0
3905550
c:\/PROGRA~1/MICROS~1/AGEOFE~1/TAUNT/04 Wood, please.mp3
(04WOOD~1.MP3)
4806 m.c -/-rwxrwxrwx 0
0
3905544
c:\/PROGRA~1/MICROS~1/AGEOFE~1/TAUNT/02 No.mp3 (02NO~1.MP3)
Fri Jun 25 1999 05:02:26 5642 m.c -/-rwxrwxrwx 0
0
3905542
c:\/PROGRA~1/MICROS~1/AGEOFE~1/TAUNT/01 Yes.mp3 (01YES~1.MP3)
Key fingerprint = AF19
FA27
998D FDB5
06E4 A169 4E46
28630
m.c2F94
-/-rwxrwxrwx
0 DE3D
0 F8B5
3905561
c:\/PROGRA~1/MICROS~1/AGEOFE~1/TAUNT/08 All hail.mp3
(08ALLH~1.MP3)
11911 m.c -/-rwxrwxrwx 0
0
3905556
c:\/PROGRA~1/MICROS~1/AGEOFE~1/TAUNT/06 Stone, please.mp3
(06STON~1.MP3)
14837 m.c -/-rwxrwxrwx 0
0
3905558
c:\/PROGRA~1/MICROS~1/AGEOFE~1/TAUNT/07 Ahh.mp3 (07AHH~1.MP3)
Fri Jun 25 1999 05:02:28 20688 m.c -/-rwxrwxrwx 0
0
3905566
c:\/PROGRA~1/MICROS~1/AGEOFE~1/TAUNT/10 Back to Age 1.mp3
(10BACK~1.MP3)
Fri Jun 25 1999 05:02:30 14837 m.c -/-rwxrwxrwx 0
0
3905582
c:\/PROGRA~1/MICROS~1/AGEOFE~1/TAUNT/15 Don't Point That Thing.mp3
(15DON'~1.MP3)
8568 m.c -/-rwxrwxrwx 0
0
3905572
c:\/PROGRA~1/MICROS~1/AGEOFE~1/TAUNT/12 Being rushed.mp3
(12BEIN~1.MP3)
13165 m.c -/-rwxrwxrwx 0
0
3905575
c:\/PROGRA~1/MICROS~1/AGEOFE~1/TAUNT/13 Blame your isp.mp3
(13BLAM~1.MP3)
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
17345 m.c -/-rwxrwxrwx 0
0
3905578
c:\/PROGRA~1/MICROS~1/AGEOFE~1/TAUNT/14 Start the game.mp3
(14STAR~1.MP3)
Fri Jun 25 1999 05:02:32 14837 m.c -/-rwxrwxrwx 0
0
3905591
c:\/PROGRA~1/MICROS~1/AGEOFE~1/TAUNT/18 I Need a Monk.mp3
(18INEE~1.MP3)
11493 m.c -/-rwxrwxrwx 0
0
3905594
c:\/PROGRA~1/MICROS~1/AGEOFE~1/TAUNT/19 Long Time No Siege.mp3
(19LONG~1.MP3)
8150 m.c -/-rwxrwxrwx 0
0
3905585
c:\/PROGRA~1/MICROS~1/AGEOFE~1/TAUNT/16 Enemy Sighted.mp3
(16ENEM~1.MP3)
17763 m.c -/-rwxrwxrwx 0
0
3905588
c:\/PROGRA~1/MICROS~1/AGEOFE~1/TAUNT/17 It Is Good.mp3
(17ITIS~1.MP3)
Fri Jun 25 1999 05:02:34 7732 m.c -/-rwxrwxrwx 0
0
3905604
c:\/PROGRA~1/MICROS~1/AGEOFE~1/TAUNT/22 Quit Touchin.mp3
(22QUIT~1.MP3)
14001 m.c -/-rwxrwxrwx 0
0
3905601
c:\/PROGRA~1/MICROS~1/AGEOFE~1/TAUNT/21 Nice Town I'll Take It.mp3
(21NICE~1.MP3)
15673 m.c -/-rwxrwxrwx 0
0
3905597
c:\/PROGRA~1/MICROS~1/AGEOFE~1/TAUNT/20 My granny.mp3
(20MYGR~1.MP3)
Fri Jun 25 1999 05:02:36 11075 m.c -/-rwxrwxrwx 0
0
3905612
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
c:\/PROGRA~1/MICROS~1/AGEOFE~1/TAUNT/25 Smite Me.mp3 4E46
(25SMIT~1.MP3)
18181 m.c -/-rwxrwxrwx 0
0
3905615
c:\/PROGRA~1/MICROS~1/AGEOFE~1/TAUNT/26 The wonder.mp3
(26THEW~1.MP3)
12747 m.c -/-rwxrwxrwx 0
0
3905607
c:\/PROGRA~1/MICROS~1/AGEOFE~1/TAUNT/23 Raiding Party.mp3
(23RAID~1.MP3)
14837 m.c -/-rwxrwxrwx 0
0
3905609
c:\/PROGRA~1/MICROS~1/AGEOFE~1/TAUNT/24 Dadgum.mp3
(24DADG~1.MP3)
Fri Jun 25 1999 05:02:38 4388 m.c -/-rwxrwxrwx 0
0
3905624
c:\/PROGRA~1/MICROS~1/AGEOFE~1/TAUNT/29 Roggan.mp3
(29ROGG~1.MP3)
23196 m.c -/-rwxrwxrwx 0
0
3905618
c:\/PROGRA~1/MICROS~1/AGEOFE~1/TAUNT/27 You play 2 hours.mp3
(27YOUP~1.MP3)
21942 m.c -/-rwxrwxrwx 0
0
3905622
c:\/PROGRA~1/MICROS~1/AGEOFE~1/TAUNT/28 You Should See the Other
Guy.mp3 (28YOUS~1.MP3)
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Fri Jun 25 1999 05:02:40 12120 m.c -/-rwxrwxrwx 0
0
3905626
c:\/PROGRA~1/MICROS~1/AGEOFE~1/TAUNT/30 Wololo.mp3
(30WOLO~1.MP3)
Mon Jul 05 1999 09:20:00 258166 m.c -/-rwxrwxrwx 0
0
3905056
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/TERRAIN/Wind1.wav
(WIND1.WAV)
Mon Jul 05 1999 09:21:08 240758 m.c -/-rwxrwxrwx 0
0
3905058
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/TERRAIN/Wind2.wav
(WIND2.WAV)
Tue Jul 13 1999 09:44:36 61440 m.c -/-rwxrwxrwx 0
0
9751826
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w7e.mp3
(W7E.MP3)
Tue Jul 13 1999 09:44:38 55170 m.c -/-rwxrwxrwx 0
0
3904008
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/b1b.mp3
(B1B.MP3)
53289 m.c -/-rwxrwxrwx 0
0
3904010
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/b1c.mp3
(B1C.MP3)
Tue Jul 13 1999 09:44:40 14628 m.c -/-rwxrwxrwx 0
0
3904012
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/b1d.mp3
(B1D.MP3)
67709 m.c -/-rwxrwxrwx 0
0
3904014
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/b2a.mp3
(B2A.MP3)
Tue Jul 13 1999 09:44:42 75232 m.c -/-rwxrwxrwx 0
0
3904016
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/b2b.mp3
(B2B.MP3)
Tue Jul 13 1999 09:44:44 90279 m.c -/-rwxrwxrwx 0
0
3904018
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/b2c.mp3
(B2C.MP3)
41168 m.c -/-rwxrwxrwx 0
0
3904020
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/b3a.mp3
(B3A.MP3)
Tue Jul 13 1999 09:44:46 40124 m.c -/-rwxrwxrwx 0
0
3904022
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/b3aa.mp3
(B3AA.MP3)
28421 m.c -/-rwxrwxrwx 0
0
3904024
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/b3b.mp3
(B3B.MP3)
Tue Jul 13 1999 09:44:48 43467 m.c -/-rwxrwxrwx 0
0
3904028
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/b3d.mp3
(B3D.MP3)
39288 m.c -/-rwxrwxrwx 0
0
3904026
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/b3c.mp3
(B3C.MP3)
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Tue Jul 13 1999 09:44:50 98847 m.c -/-rwxrwxrwx 0
0
3904030
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/b3e.mp3
(B3E.MP3)
25495 m.c -/-rwxrwxrwx 0
0
3904032
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/b4b.mp3
(B4B.MP3)
Tue Jul 13 1999 09:44:52 37616 m.c -/-rwxrwxrwx 0
0
3904034
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/b4c.mp3
(B4C.MP3)
39288 m.c -/-rwxrwxrwx 0
0
3904036
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/b4d.mp3
(B4D.MP3)
Tue Jul 13 1999 09:44:54 75650 m.c -/-rwxrwxrwx 0
0
3904040
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/b4f.mp3
(B4F.MP3)
47647 m.c -/-rwxrwxrwx 0
0
3904038
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/b4e.mp3
(B4E.MP3)
Tue Jul 13 1999 09:44:56 48901 m.c -/-rwxrwxrwx 0
0
3904042
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/b5a.mp3
(B5A.MP3)
Tue Jul 13 1999 09:44:58 81084 m.c -/-rwxrwxrwx 0
0
3904044
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/b5b.mp3
(B5B.MP3)
107833 m.c -/-rwxrwxrwx 0
0
3904046
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/b5c.mp3
(B5C.MP3)
Tue Jul 13 1999 09:45:00 44303 m.c -/-rwxrwxrwx 0
0
3904050
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/b5e.mp3
(B5E.MP3)
67709 m.c -/-rwxrwxrwx 0
0
3904048
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/b5d.mp3
(B5D.MP3)
Tue Jul 13 1999 09:45:02 55588 m.c -/-rwxrwxrwx 0
0
3904052
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/b5f.mp3
(B5F.MP3)
51826 m.c -/-rwxrwxrwx 0
0
3904054
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/b5g.mp3
(B5G.MP3)
Tue Jul 13 1999 09:45:04 15046 m.c -/-rwxrwxrwx 0
0
3904058
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/b5i.mp3 (B5I.MP3)
17136 m.c -/-rwxrwxrwx 0
0
3904060
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/b5j.mp3
(B5J.MP3)
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
14628 m.c -/-rwxrwxrwx 0
0
3904056
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/b5h.mp3
(B5H.MP3)
Tue Jul 13 1999 09:45:06 20897 m.c -/-rwxrwxrwx 0
0
3904064
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/b5l.mp3
(B5L.MP3)
7523 m.c -/-rwxrwxrwx 0
0
3904066
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/b5m.mp3
(B5M.MP3)
61022 m.c -/-rwxrwxrwx 0
0
3904062
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/b5k.mp3
(B5K.MP3)
Tue Jul 13 1999 09:45:08 34690 m.c -/-rwxrwxrwx 0
0
3904070
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/b5o.mp3
(B5O.MP3)
70217 m.c -/-rwxrwxrwx 0
0
3904068
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/b5n.mp3
(B5N.MP3)
Tue Jul 13 1999 09:45:10 26331 m.c -/-rwxrwxrwx 0
0
3904072
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/b5p.mp3
(B5P.MP3)
23823 m.c -/-rwxrwxrwx 0
0
3904074
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/b5q.mp3
(B5Q.MP3)
Tue Jul 13 1999 09:45:12 91115 m.c -/-rwxrwxrwx 0
0
3904076
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/b6a.mp3
(B6A.MP3)
101355 m.c -/-rwxrwxrwx 0
0
3904078
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/b6b.mp3
(B6B.MP3)
Tue Jul 13 1999 09:45:14 72724 m.c -/-rwxrwxrwx 0
0
3904080
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/b6c.mp3
(B6C.MP3)
36362 m.c -/-rwxrwxrwx 0
0
3904082
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/b6d.mp3
(B6D.MP3)
Tue Jul 13 1999 09:45:16 18390 m.c -/-rwxrwxrwx 0
0
3904086
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/b6f.mp3
(B6F.MP3)
16718 m.c -/-rwxrwxrwx 0
0
3904084
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/b6e.mp3
(B6E.MP3)
40751 m.c -/-rwxrwxrwx 0
0
3904088
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/b6g.mp3
(B6G.MP3)
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Tue Jul 13 1999 09:45:18 26331 m.c -/-rwxrwxrwx 0
0
3904094
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/b6j.mp3
(B6J.MP3)
21733 m.c -/-rwxrwxrwx 0
0
3904090
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/b6h.mp3
(B6H.MP3)
23823 m.c -/-rwxrwxrwx 0
0
3904092
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/b6i.mp3 (B6I.MP3)
Tue Jul 13 1999 09:45:20 26331 m.c -/-rwxrwxrwx 0
0
3904098
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/b6l.mp3
(B6L.MP3)
25495 m.c -/-rwxrwxrwx 0
0
3904096
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/b6k.mp3
(B6K.MP3)
24659 m.c -/-rwxrwxrwx 0
0
3904102
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/b6n.mp3
(B6N.MP3)
23405 m.c -/-rwxrwxrwx 0
0
3904100
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/b6m.mp3
(B6M.MP3)
Tue Jul 13 1999 09:45:22 62275 m.c -/-rwxrwxrwx 0
0
3904110
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/g1a.mp3
(G1A.MP3)
Tue Jul 13 1999 09:45:24 40124 m.c -/-rwxrwxrwx 0
0
3904114
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/g1c.mp3
Key
fingerprint = AF19 FA27 2F94 998D FDB5 DE3D F8B5 06E4 A169 4E46
(G1C.MP3)
Tue Jul 13 1999 09:45:26 36362 m.c -/-rwxrwxrwx 0
0
3904116
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/g1d.mp3
(G1D.MP3)
44721 m.c -/-rwxrwxrwx 0
0
3904120
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/g1f.mp3
(G1F.MP3)
20480 m.c -/-rwxrwxrwx 0
0
3904118
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/g1e.mp3
(G1E.MP3)
Tue Jul 13 1999 09:45:28 34899 m.c -/-rwxrwxrwx 0
0
3904122
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/g1g.mp3
(G1G.MP3)
Tue Jul 13 1999 09:45:30 47229 m.c -/-rwxrwxrwx 0
0
3904126
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/g1i.mp3 (G1I.MP3)
114520 m.c -/-rwxrwxrwx 0
0
3904124
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/g1h.mp3
(G1H.MP3)
Tue Jul 13 1999 09:45:32 104071 m.c -/-rwxrwxrwx 0
0
3904128
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/g1j.mp3
(G1J.MP3)
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
35108 m.c -/-rwxrwxrwx 0
0
3904130
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/g1k.mp3
(G1K.MP3)
Tue Jul 13 1999 09:45:34 94458 m.c -/-rwxrwxrwx 0
0
3904132
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/g1l.mp3
(G1L.MP3)
26331 m.c -/-rwxrwxrwx 0
0
3904134
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/g1lold.mp3
(G1LOLD.MP3)
Tue Jul 13 1999 09:45:36 18390 m.c -/-rwxrwxrwx 0
0
3904138
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/g2a.mp3
(G2A.MP3)
96548 m.c -/-rwxrwxrwx 0
0
3904136
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/g1m.mp3
(G1M.MP3)
Tue Jul 13 1999 09:45:38 31137 m.c -/-rwxrwxrwx 0
0
3904142
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/g2c.mp3
(G2C.MP3)
42213 m.c -/-rwxrwxrwx 0
0
3904144
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/g2d.mp3
(G2D.MP3)
18808 m.c -/-rwxrwxrwx 0
0
3904140
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/g2b.mp3
(G2B.MP3)
Tue Jul 13 1999 09:45:40 35108 m.c -/-rwxrwxrwx 0
0
3904146
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/g2e.mp3
(G2E.MP3)
65201 m.c -/-rwxrwxrwx 0
0
3904148
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/g2f.mp3
(G2F.MP3)
Tue Jul 13 1999 09:45:42 42422 m.c -/-rwxrwxrwx 0
0
3904152
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/g2h.mp3
(G2H.MP3)
33436 m.c -/-rwxrwxrwx 0
0
3904150
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/g2g.mp3
(G2G.MP3)
25495 m.c -/-rwxrwxrwx 0
0
3904154
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/g3a.mp3
(G3A.MP3)
Tue Jul 13 1999 09:45:44 126641 m.c -/-rwxrwxrwx 0
0
3904156
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/g3b.mp3
(G3B.MP3)
Tue Jul 13 1999 09:45:46 58932 m.c -/-rwxrwxrwx 0
0
3904158
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/g3c.mp3
(G3C.MP3)
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
18808 m.c -/-rwxrwxrwx 0
0
3904162
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/g3e.mp3
(G3E.MP3)
30928 m.c -/-rwxrwxrwx 0
0
3904160
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/g3d.mp3
(G3D.MP3)
Tue Jul 13 1999 09:45:48 116192 m.c -/-rwxrwxrwx 0
0
3904166
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/g4b.mp3
(G4B.MP3)
17136 m.c -/-rwxrwxrwx 0
0
3904164
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/g4a.mp3
(G4A.MP3)
Tue Jul 13 1999 09:45:50 19644 m.c -/-rwxrwxrwx 0
0
3904170
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/g4d.mp3
(G4D.MP3)
54334 m.c -/-rwxrwxrwx 0
0
3904168
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/g4c.mp3
(G4C.MP3)
Tue Jul 13 1999 09:45:52 45139 m.c -/-rwxrwxrwx 0
0
3904174
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/g4f.mp3
(G4F.MP3)
66873 m.c -/-rwxrwxrwx 0
0
3904172
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/g4e.mp3
(G4E.MP3)
Tue Jul 13 1999 09:45:54 16718 m.c -/-rwxrwxrwx 0
0
3904176
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/g4g.mp3
(G4G.MP3)
38034 m.c -/-rwxrwxrwx 0
0
3904180
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/g4i.mp3 (G4I.MP3)
28003 m.c -/-rwxrwxrwx 0
0
3904178
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/g4h.mp3
(G4H.MP3)
Tue Jul 13 1999 09:45:56 47020 m.c -/-rwxrwxrwx 0
0
3904182
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/g4j.mp3
(G4J.MP3)
Tue Jul 13 1999 09:45:58 114102 m.c -/-rwxrwxrwx 0
0
3904184
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/g5a.mp3
(G5A.MP3)
Tue Jul 13 1999 09:46:00 71262 m.c -/-rwxrwxrwx 0
0
3904186
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/g5b.mp3
(G5B.MP3)
34272 m.c -/-rwxrwxrwx 0
0
3904190
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/g5d.mp3
(G5D.MP3)
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
15464 m.c -/-rwxrwxrwx 0
0
3904188
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/g5c.mp3
(G5C.MP3)
Tue Jul 13 1999 09:46:02 18390 m.c -/-rwxrwxrwx 0
0
3904194
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/g5f.mp3
(G5F.MP3)
15464 m.c -/-rwxrwxrwx 0
0
3904192
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/g5e.mp3
(G5E.MP3)
45975 m.c -/-rwxrwxrwx 0
0
3904196
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/g5g.mp3
(G5G.MP3)
Tue Jul 13 1999 09:46:04 22151 m.c -/-rwxrwxrwx 0
0
3904200
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/g5i.mp3 (G5I.MP3)
62484 m.c -/-rwxrwxrwx 0
0
3904198
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/g5h.mp3
(G5H.MP3)
Tue Jul 13 1999 09:46:06 60813 m.c -/-rwxrwxrwx 0
0
3904204
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/g6a.mp3
(G6A.MP3)
49737 m.c -/-rwxrwxrwx 0
0
3904202
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/g5j.mp3
(G5J.MP3)
Tue Jul 13 1999 09:46:08 26749 m.c -/-rwxrwxrwx 0
0
3904212
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/g6e.mp3
Key
fingerprint = AF19 FA27 2F94 998D FDB5 DE3D F8B5 06E4 A169 4E46
(G6E.MP3)
34481 m.c -/-rwxrwxrwx 0
0
3904210
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/g6d.mp3
(G6D.MP3)
22987 m.c -/-rwxrwxrwx 0
0
3904206
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/g6b.mp3
(G6B.MP3)
26331 m.c -/-rwxrwxrwx 0
0
3904208
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/g6c.mp3
(G6C.MP3)
Tue Jul 13 1999 09:46:10 48901 m.c -/-rwxrwxrwx 0
0
3904216
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/g6g.mp3
(G6G.MP3)
7105 m.c -/-rwxrwxrwx 0
0
3904214
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/g6f.mp3
(G6F.MP3)
Tue Jul 13 1999 09:46:12 31764 m.c -/-rwxrwxrwx 0
0
3904222
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/j1a.mp3
(J1A.MP3)
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
59768 m.c -/-rwxrwxrwx 0
0
3904218
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/g6h.mp3
(G6H.MP3)
7105 m.c -/-rwxrwxrwx 0
0
3904220
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/g6i.mp3 (G6I.MP3)
Tue Jul 13 1999 09:46:14 45139 m.c -/-rwxrwxrwx 0
0
3904224
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/j1b.mp3
(J1B.MP3)
39706 m.c -/-rwxrwxrwx 0
0
3904226
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/j1c.mp3
(J1C.MP3)
Tue Jul 13 1999 09:46:16 65201 m.c -/-rwxrwxrwx 0
0
3904228
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/j1d.mp3
(J1D.MP3)
52662 m.c -/-rwxrwxrwx 0
0
3904230
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/j1e.mp3
(J1E.MP3)
Tue Jul 13 1999 09:46:18 13374 m.c -/-rwxrwxrwx 0
0
3904234
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/j1g.mp3
(J1G.MP3)
16300 m.c -/-rwxrwxrwx 0
0
3904232
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/j1f.mp3 (J1F.MP3)
17554 m.c -/-rwxrwxrwx 0
0
3904236
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/j1h.mp3
(J1H.MP3)
Key
= AF19
FA27 2F94
998D
DE3D F8B5
4E46
Tue fingerprint
Jul 13 1999
09:46:20
43049
m.cFDB5
-/-rwxrwxrwx
0 06E4
0 A169
3904240
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/j1j.mp3 (J1J.MP3)
21733 m.c -/-rwxrwxrwx 0
0
3904238
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/j1i.mp3 (J1I.MP3)
Tue Jul 13 1999 09:46:22 15046 m.c -/-rwxrwxrwx 0
0
3904242
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/j1k.mp3 (J1K.MP3)
28421 m.c -/-rwxrwxrwx 0
0
3904248
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/j1n.mp3
(J1N.MP3)
22569 m.c -/-rwxrwxrwx 0
0
3904244
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/j1l.mp3 (J1L.MP3)
22987 m.c -/-rwxrwxrwx 0
0
3904246
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/j1m.mp3
(J1M.MP3)
Tue Jul 13 1999 09:46:24 61022 m.c -/-rwxrwxrwx 0
0
3904250
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/j1o.mp3
(J1O.MP3)
Tue Jul 13 1999 09:46:26 38870 m.c -/-rwxrwxrwx 0
0
3904254
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/j1q.mp3
(J1Q.MP3)
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
80248 m.c -/-rwxrwxrwx 0
0
3904252
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/j1p.mp3
(J1P.MP3)
35108 m.c -/-rwxrwxrwx 0
0
3904256
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/j1r.mp3 (J1R.MP3)
Tue Jul 13 1999 09:46:28 50991 m.c -/-rwxrwxrwx 0
0
3904258
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/j1t.mp3 (J1T.MP3)
53916 m.c -/-rwxrwxrwx 0
0
3904260
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/j1u.mp3
(J1U.MP3)
Tue Jul 13 1999 09:46:30 34899 m.c -/-rwxrwxrwx 0
0
3904266
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/j1x.mp3 (J1X.MP3)
27167 m.c -/-rwxrwxrwx 0
0
3904262
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/j1v.mp3 (J1V.MP3)
24241 m.c -/-rwxrwxrwx 0
0
3904264
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/j1w.mp3
(J1W.MP3)
Tue Jul 13 1999 09:46:32 74814 m.c -/-rwxrwxrwx 0
0
3904268
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/j1y.mp3 (J1Y.MP3)
18390 m.c -/-rwxrwxrwx 0
0
3904270
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/j1z.mp3 (J1Z.MP3)
54752 m.c -/-rwxrwxrwx 0
0
3904272
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/j2a.mp3
(J2A.MP3)
Tue Jul 13 1999 09:46:34 24241 m.c -/-rwxrwxrwx 0
0
3904276
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/j2c.mp3
(J2C.MP3)
21733 m.c -/-rwxrwxrwx 0
0
3904274
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/j2b.mp3
(J2B.MP3)
Tue Jul 13 1999 09:46:36 34272 m.c -/-rwxrwxrwx 0
0
3904278
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/j2d.mp3
(J2D.MP3)
38452 m.c -/-rwxrwxrwx 0
0
3904280
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/j2e.mp3
(J2E.MP3)
20897 m.c -/-rwxrwxrwx 0
0
3904282
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/j2f.mp3 (J2F.MP3)
Tue Jul 13 1999 09:46:38 27585 m.c -/-rwxrwxrwx 0
0
3904286
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/j2h.mp3
(J2H.MP3)
21733 m.c -/-rwxrwxrwx 0
0
3904288
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/j2i.mp3 (J2I.MP3)
13792 m.c -/-rwxrwxrwx 0
0
3904284
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/j2g.mp3
(J2G.MP3)
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Tue Jul 13 1999 09:46:40 43676 m.c -/-rwxrwxrwx 0
0
3904290
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/j2j.mp3 (J2J.MP3)
Tue Jul 13 1999 09:46:42 30511 m.c -/-rwxrwxrwx 0
0
3904298
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/j2n.mp3
(J2N.MP3)
21524 m.c -/-rwxrwxrwx 0
0
3904294
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/j2l.mp3 (J2L.MP3)
63529 m.c -/-rwxrwxrwx 0
0
3904292
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/j2k.mp3 (J2K.MP3)
21733 m.c -/-rwxrwxrwx 0
0
3904296
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/j2m.mp3
(J2M.MP3)
Tue Jul 13 1999 09:46:44 41795 m.c -/-rwxrwxrwx 0
0
3904300
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/j2o.mp3
(J2O.MP3)
44721 m.c -/-rwxrwxrwx 0
0
3904302
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/j3a.mp3
(J3A.MP3)
Tue Jul 13 1999 09:46:46 26331 m.c -/-rwxrwxrwx 0
0
3904304
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/j3b.mp3
(J3B.MP3)
31764 m.c -/-rwxrwxrwx 0
0
3904306
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/j3c.mp3
(J3C.MP3)
Tue Jul 13 1999 09:46:48 16300 m.c -/-rwxrwxrwx 0
0
3904314
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/j3g.mp3
(J3G.MP3)
18808 m.c -/-rwxrwxrwx 0
0
3904310
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/j3e.mp3
(J3E.MP3)
36362 m.c -/-rwxrwxrwx 0
0
3904312
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/j3f.mp3 (J3F.MP3)
64365 m.c -/-rwxrwxrwx 0
0
3904308
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/j3d.mp3
(J3D.MP3)
Tue Jul 13 1999 09:46:50 30511 m.c -/-rwxrwxrwx 0
0
3904316
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/j3h.mp3
(J3H.MP3)
29257 m.c -/-rwxrwxrwx 0
0
3904318
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/j3i.mp3 (J3I.MP3)
Tue Jul 13 1999 09:46:52 19644 m.c -/-rwxrwxrwx 0
0
3904320
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/j3j.mp3 (J3J.MP3)
13792 m.c -/-rwxrwxrwx 0
0
3904324
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/j3l.mp3 (J3L.MP3)
11702 m.c -/-rwxrwxrwx 0
0
3904322
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/j3k.mp3 (J3K.MP3)
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
30511 m.c -/-rwxrwxrwx 0
0
3904326
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/j3m.mp3
(J3M.MP3)
Tue Jul 13 1999 09:46:54 26331 m.c -/-rwxrwxrwx 0
0
3904330
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/j3o.mp3
(J3O.MP3)
31764 m.c -/-rwxrwxrwx 0
0
3904328
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/j3n.mp3
(J3N.MP3)
27167 m.c -/-rwxrwxrwx 0
0
3904332
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/j3p.mp3
(J3P.MP3)
Tue Jul 13 1999 09:46:56 26331 m.c -/-rwxrwxrwx 0
0
3904340
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/j4c2.mp3
(J4C2.MP3)
22151 m.c -/-rwxrwxrwx 0
0
3904334
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/j4a.mp3
(J4A.MP3)
15464 m.c -/-rwxrwxrwx 0
0
3904338
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/j4c.mp3
(J4C.MP3)
14628 m.c -/-rwxrwxrwx 0
0
3904336
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/j4b.mp3
(J4B.MP3)
Tue Jul 13 1999 09:46:58 20062 m.c -/-rwxrwxrwx 0
0
3904342
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/j4d.mp3
(J4D.MP3)
16091 m.c -/-rwxrwxrwx 0
0
3904348
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/j4h.mp3
(J4H.MP3)
8359 m.c -/-rwxrwxrwx 0
0
3904346
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/j4f.mp3 (J4F.MP3)
22569 m.c -/-rwxrwxrwx 0
0
3904344
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/j4e.mp3
(J4E.MP3)
Tue Jul 13 1999 09:47:00 28003 m.c -/-rwxrwxrwx 0
0
3904352
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/j4j.mp3 (J4J.MP3)
15882 m.c -/-rwxrwxrwx 0
0
3904350
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/j4i.mp3 (J4I.MP3)
40960 m.c -/-rwxrwxrwx 0
0
3904354
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/j5a.mp3
(J5A.MP3)
Tue Jul 13 1999 09:47:02 30928 m.c -/-rwxrwxrwx 0
0
3904356
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/j5b.mp3
(J5B.MP3)
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
20480 m.c -/-rwxrwxrwx 0
0
3904358
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/j5c.mp3
(J5C.MP3)
Tue Jul 13 1999 09:47:04 56006 m.c -/-rwxrwxrwx 0
0
3904362
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/j5e.mp3
(J5E.MP3)
71471 m.c -/-rwxrwxrwx 0
0
3904360
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/j5d.mp3
(J5D.MP3)
Tue Jul 13 1999 09:47:06 48065 m.c -/-rwxrwxrwx 0
0
3904368
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/j5h.mp3
(J5H.MP3)
28212 m.c -/-rwxrwxrwx 0
0
3904364
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/j5f.mp3 (J5F.MP3)
35944 m.c -/-rwxrwxrwx 0
0
3904366
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/j5g.mp3
(J5G.MP3)
Tue Jul 13 1999 09:47:08 49737 m.c -/-rwxrwxrwx 0
0
3904370
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/j5i.mp3 (J5I.MP3)
22987 m.c -/-rwxrwxrwx 0
0
3904372
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/j5j.mp3 (J5J.MP3)
Tue Jul 13 1999 09:47:10 50155 m.c -/-rwxrwxrwx 0
0
3904374
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/j5k.mp3 (J5K.MP3)
37616 m.c -/-rwxrwxrwx 0
0
3904376
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/j5l.mp3 (J5L.MP3)
Key
= AF19
FA27 2F94
998D
DE3D F8B5
4E46
Tue fingerprint
Jul 13 1999
09:47:12
25913
m.cFDB5
-/-rwxrwxrwx
0 06E4
0 A169
3904378
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/j6a.mp3
(J6A.MP3)
19644 m.c -/-rwxrwxrwx 0
0
3904382
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/j6b.mp3
(J6B.MP3)
22569 m.c -/-rwxrwxrwx 0
0
3904380
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/j6a2.mp3
(J6A2.MP3)
Tue Jul 13 1999 09:47:14 17972 m.c -/-rwxrwxrwx 0
0
3904390
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/j6f.mp3 (J6F.MP3)
32182 m.c -/-rwxrwxrwx 0
0
3904384
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/j6c.mp3
(J6C.MP3)
28003 m.c -/-rwxrwxrwx 0
0
3904386
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/j6d.mp3
(J6D.MP3)
10448 m.c -/-rwxrwxrwx 0
0
3904388
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/j6e.mp3
(J6E.MP3)
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Tue Jul 13 1999 09:47:16 30928 m.c -/-rwxrwxrwx 0
0
3904392
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/j6g.mp3
(J6G.MP3)
19017 m.c -/-rwxrwxrwx 0
0
3904396
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/j6j.mp3 (J6J.MP3)
24241 m.c -/-rwxrwxrwx 0
0
3904394
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/j6i.mp3 (J6I.MP3)
15464 m.c -/-rwxrwxrwx 0
0
3904398
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/j6k.mp3 (J6K.MP3)
Tue Jul 13 1999 09:47:18 49528 m.c -/-rwxrwxrwx 0
0
3904402
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/j6m.mp3
(J6M.MP3)
33018 m.c -/-rwxrwxrwx 0
0
3904400
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/j6l.mp3 (J6L.MP3)
Tue Jul 13 1999 09:47:20 35108 m.c -/-rwxrwxrwx 0
0
3904404
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/j6n.mp3
(J6N.MP3)
28003 m.c -/-rwxrwxrwx 0
0
3904408
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/j6q.mp3
(J6Q.MP3)
20897 m.c -/-rwxrwxrwx 0
0
3904406
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/j6o.mp3
(J6O.MP3)
Tue Jul 13 1999 09:47:22 88607 m.c -/-rwxrwxrwx 0
0
3904410
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/S1a.mp3
Key
fingerprint = AF19 FA27 2F94 998D FDB5 DE3D F8B5 06E4 A169 4E46
(S1A.MP3)
Tue Jul 13 1999 09:47:24 40542 m.c -/-rwxrwxrwx 0
0
3904414
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/s1c.mp3
(S1C.MP3)
21315 m.c -/-rwxrwxrwx 0
0
3904412
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/s1b.mp3
(S1B.MP3)
Tue Jul 13 1999 09:47:26 50991 m.c -/-rwxrwxrwx 0
0
3904416
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/s1d.mp3
(S1D.MP3)
84009 m.c -/-rwxrwxrwx 0
0
3904418
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/s1e.mp3
(S1E.MP3)
Tue Jul 13 1999 09:47:28 37198 m.c -/-rwxrwxrwx 0
0
3904420
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/s1f.mp3
(S1F.MP3)
30093 m.c -/-rwxrwxrwx 0
0
3904424
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/s1h.mp3
(S1H.MP3)
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
12120 m.c -/-rwxrwxrwx 0
0
3904422
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/s1g.mp3
(S1G.MP3)
Tue Jul 13 1999 09:47:30 15882 m.c -/-rwxrwxrwx 0
0
3904426
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/s1i.mp3 (S1I.MP3)
34690 m.c -/-rwxrwxrwx 0
0
3904428
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/s1j.mp3 (S1J.MP3)
Tue Jul 13 1999 09:47:32 15464 m.c -/-rwxrwxrwx 0
0
3904434
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/s2c.mp3
(S2C.MP3)
16718 m.c -/-rwxrwxrwx 0
0
3904436
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/s2d.mp3
(S2D.MP3)
43049 m.c -/-rwxrwxrwx 0
0
3904430
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/s2a.mp3
(S2A.MP3)
33227 m.c -/-rwxrwxrwx 0
0
3904432
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/s2b.mp3
(S2B.MP3)
Tue Jul 13 1999 09:47:34 30928 m.c -/-rwxrwxrwx 0
0
3904438
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/s2e.mp3
(S2E.MP3)
16718 m.c -/-rwxrwxrwx 0
0
3904442
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/s2g.mp3
(S2G.MP3)
Key fingerprint = AF19
FA27
998D FDB5
06E4 A169 4E46
25077
m.c2F94
-/-rwxrwxrwx
0 DE3D
0 F8B5
3904440
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/s2f.mp3
(S2F.MP3)
Tue Jul 13 1999 09:47:36 14628 m.c -/-rwxrwxrwx 0
0
3904444
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/s2i.mp3 (S2I.MP3)
16718 m.c -/-rwxrwxrwx 0
0
3904448
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/s2l.mp3
(S2L.MP3)
5851 m.c -/-rwxrwxrwx 0
0
3904446
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/s2j.mp3 (S2J.MP3)
Tue Jul 13 1999 09:47:38 30928 m.c -/-rwxrwxrwx 0
0
3904452
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/s3b.mp3
(S3B.MP3)
46811 m.c -/-rwxrwxrwx 0
0
3904450
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/s3a.mp3
(S3A.MP3)
Tue Jul 13 1999 09:47:40 57678 m.c -/-rwxrwxrwx 0
0
3904456
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/s3d.mp3
(S3D.MP3)
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
39288 m.c -/-rwxrwxrwx 0
0
3904454
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/s3c.mp3
(S3C.MP3)
Tue Jul 13 1999 09:47:42 22987 m.c -/-rwxrwxrwx 0
0
3904460
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/s3f.mp3
(S3F.MP3)
32809 m.c -/-rwxrwxrwx 0
0
3904458
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/s3e.mp3
(S3E.MP3)
51826 m.c -/-rwxrwxrwx 0
0
3904462
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/s4a.mp3
(S4A.MP3)
Tue Jul 13 1999 09:47:44 15882 m.c -/-rwxrwxrwx 0
0
3904464
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/s4b.mp3
(S4B.MP3)
45975 m.c -/-rwxrwxrwx 0
0
3904466
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/s4c.mp3
(S4C.MP3)
Tue Jul 13 1999 09:47:46 20688 m.c -/-rwxrwxrwx 0
0
3904474
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/s4g.mp3
(S4G.MP3)
14628 m.c -/-rwxrwxrwx 0
0
3904470
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/s4e.mp3
(S4E.MP3)
13792 m.c -/-rwxrwxrwx 0
0
3904468
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/s4d.mp3
(S4D.MP3)
28003 m.c -/-rwxrwxrwx 0
0
3904472
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/s4f.mp3
(S4F.MP3)
Tue Jul 13 1999 09:47:48 38870 m.c -/-rwxrwxrwx 0
0
3904476
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/s4h.mp3
(S4H.MP3)
45557 m.c -/-rwxrwxrwx 0
0
3904478
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/s4i.mp3 (S4I.MP3)
Tue Jul 13 1999 09:47:50 26331 m.c -/-rwxrwxrwx 0
0
3904482
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/s4k.mp3
(S4K.MP3)
27167 m.c -/-rwxrwxrwx 0
0
3904480
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/s4j.mp3 (S4J.MP3)
Tue Jul 13 1999 09:47:52 11493 m.c -/-rwxrwxrwx 0
0
3904486
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/s4m.mp3
(S4M.MP3)
37616 m.c -/-rwxrwxrwx 0
0
3904484
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/s4l.mp3
(S4L.MP3)
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Tue Jul 13 1999 09:47:54 76486 m.c -/-rwxrwxrwx 0
0
3904490
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/s5b.mp3
(S5B.MP3)
84009 m.c -/-rwxrwxrwx 0
0
3904488
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/s5a.mp3
(S5A.MP3)
Tue Jul 13 1999 09:47:56 15255 m.c -/-rwxrwxrwx 0
0
3904492
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/s5c.mp3
(S5C.MP3)
40124 m.c -/-rwxrwxrwx 0
0
3904494
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/s5d.mp3
(S5D.MP3)
Tue Jul 13 1999 09:47:58 44512 m.c -/-rwxrwxrwx 0
0
3904496
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/s6a.mp3
(S6A.MP3)
14628 m.c -/-rwxrwxrwx 0
0
3904500
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/s6c.mp3
(S6C.MP3)
18808 m.c -/-rwxrwxrwx 0
0
3904498
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/s6b.mp3
(S6B.MP3)
19226 m.c -/-rwxrwxrwx 0
0
3904502
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/s6d.mp3
(S6D.MP3)
Tue Jul 13 1999 09:48:00 8359 m.c -/-rwxrwxrwx 0
0
3904508
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/s6g.mp3
(S6G.MP3)
16718 m.c -/-rwxrwxrwx 0
0
3904506
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/s6f.mp3
(S6F.MP3)
15464 m.c -/-rwxrwxrwx 0
0
3904504
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/s6e.mp3
(S6E.MP3)
Tue Jul 13 1999 09:48:02 29675 m.c -/-rwxrwxrwx 0
0
3904512
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/s6i.mp3 (S6I.MP3)
52662 m.c -/-rwxrwxrwx 0
0
3904510
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/s6h.mp3
(S6H.MP3)
Tue Jul 13 1999 09:48:04 49946 m.c -/-rwxrwxrwx 0
0
9751556
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w1b.mp3
(W1B.MP3)
49737 m.c -/-rwxrwxrwx 0
0
3904514
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w1a.mp3
(W1A.MP3)
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Tue Jul 13 1999 09:48:06 38034 m.c -/-rwxrwxrwx 0
0
9751558
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w1c.mp3
(W1C.MP3)
33018 m.c -/-rwxrwxrwx 0
0
9751560
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w1d.mp3
(W1D.MP3)
Tue Jul 13 1999 09:48:08 46811 m.c -/-rwxrwxrwx 0
0
9751564
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w1f.mp3
(W1F.MP3)
58932 m.c -/-rwxrwxrwx 0
0
9751562
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w1e.mp3
(W1E.MP3)
Tue Jul 13 1999 09:48:10 44303 m.c -/-rwxrwxrwx 0
0
9751568
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w1h.mp3
(W1H.MP3)
63111 m.c -/-rwxrwxrwx 0
0
9751566
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w1g.mp3
(W1G.MP3)
Tue Jul 13 1999 09:48:12 96966 m.c -/-rwxrwxrwx 0
0
9751570
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w1i.mp3
(W1I.MP3)
Tue Jul 13 1999 09:48:14 18808 m.c -/-rwxrwxrwx 0
0
9751574
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w1k.mp3
(W1K.MP3)
15464 m.c -/-rwxrwxrwx 0
0
9751572
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w1j.mp3
(W1J.MP3)
42213 m.c -/-rwxrwxrwx 0
0
9751576
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w1l.mp3
(W1L.MP3)
Tue Jul 13 1999 09:48:16 8359 m.c -/-rwxrwxrwx 0
0
9751580
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w1n.mp3
(W1N.MP3)
15046 m.c -/-rwxrwxrwx 0
0
9751578
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w1m.mp3
(W1M.MP3)
Tue Jul 13 1999 09:48:18 88607 m.c -/-rwxrwxrwx 0
0
9751584
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w1p.mp3
(W1P.MP3)
53498 m.c -/-rwxrwxrwx 0
0
9751582
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w1o.mp3
(W1O.MP3)
Tue Jul 13 1999 09:48:20 38034 m.c -/-rwxrwxrwx 0
0
9751586
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w1q.mp3
(W1Q.MP3)
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Tue Jul 13 1999 09:48:22 91533 m.c -/-rwxrwxrwx 0
0
9751588
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w1r.mp3
(W1R.MP3)
Tue Jul 13 1999 09:48:24 117655 m.c -/-rwxrwxrwx 0
0
9751590
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w1s.mp3
(W1S.MP3)
35108 m.c -/-rwxrwxrwx 0
0
9751592
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w1t.mp3
(W1T.MP3)
45139 m.c -/-rwxrwxrwx 0
0
9751594
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w1wa.mp3
(W1WA.MP3)
Tue Jul 13 1999 09:48:26 19644 m.c -/-rwxrwxrwx 0
0
9751598
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w1wc.mp3
(W1WC.MP3)
22987 m.c -/-rwxrwxrwx 0
0
9751596
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w1wb.mp3
(W1WB.MP3)
Tue Jul 13 1999 09:48:28 29257 m.c -/-rwxrwxrwx 0
0
9751600
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w2a.mp3
(W2A.MP3)
42631 m.c -/-rwxrwxrwx 0
0
9751602
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w2aa.mp3
(W2AA.MP3)
Tue Jul 13 1999 09:48:30 34272 m.c -/-rwxrwxrwx 0
0
9751604
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w2b.mp3
(W2B.MP3)
35526 m.c -/-rwxrwxrwx 0
0
9751606
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w2c.mp3
(W2C.MP3)
Tue Jul 13 1999 09:48:32 94458 m.c -/-rwxrwxrwx 0
0
9751608
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w2d.mp3
(W2D.MP3)
16300 m.c -/-rwxrwxrwx 0
0
9751610
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w2e.mp3
(W2E.MP3)
Tue Jul 13 1999 09:48:34 54334 m.c -/-rwxrwxrwx 0
0
9751612
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w2f.mp3
(W2F.MP3)
36362 m.c -/-rwxrwxrwx 0
0
9751614
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w2g.mp3
(W2G.MP3)
Tue Jul 13 1999 09:48:36 19226 m.c -/-rwxrwxrwx 0
0
9751618
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w2i.mp3
(W2I.MP3)
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
37198 m.c -/-rwxrwxrwx 0
0
9751620
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w2j.mp3
(W2J.MP3)
53498 m.c -/-rwxrwxrwx 0
0
9751616
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w2h.mp3
(W2H.MP3)
Tue Jul 13 1999 09:48:38 19226 m.c -/-rwxrwxrwx 0
0
9751624
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w2wa.mp3
(W2WA.MP3)
98220 m.c -/-rwxrwxrwx 0
0
9751622
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w2k.mp3
(W2K.MP3)
Tue Jul 13 1999 09:48:40 34272 m.c -/-rwxrwxrwx 0
0
9751626
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w3a.mp3
(W3A.MP3)
42213 m.c -/-rwxrwxrwx 0
0
9751628
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w3b.mp3
(W3B.MP3)
Tue Jul 13 1999 09:48:42 71888 m.c -/-rwxrwxrwx 0
0
9751630
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w3c.mp3
(W3C.MP3)
57678 m.c -/-rwxrwxrwx 0
0
9751632
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w3d.mp3
(W3D.MP3)
Tue Jul 13 1999 09:48:44 54543 m.c -/-rwxrwxrwx 0
0
9751636
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w3e2.mp3
(W3E2.MP3)
51408 m.c -/-rwxrwxrwx 0
0
9751634
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w3e.mp3
(W3E.MP3)
Tue Jul 13 1999 09:48:46 35526 m.c -/-rwxrwxrwx 0
0
9751638
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w3f.mp3
(W3F.MP3)
24241 m.c -/-rwxrwxrwx 0
0
9751640
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w3g.mp3
(W3G.MP3)
Tue Jul 13 1999 09:48:48 67709 m.c -/-rwxrwxrwx 0
0
9751642
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w3h.mp3
(W3H.MP3)
74814 m.c -/-rwxrwxrwx 0
0
9751644
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w3i.mp3
(W3I.MP3)
Tue Jul 13 1999 09:48:50 67709 m.c -/-rwxrwxrwx 0
0
9751646
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w3j.mp3
(W3J.MP3)
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
63529 m.c -/-rwxrwxrwx 0
0
9751648
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w3k.mp3
(W3K.MP3)
Tue Jul 13 1999 09:48:52 35108 m.c -/-rwxrwxrwx 0
0
9751650
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w3l.mp3
(W3L.MP3)
49737 m.c -/-rwxrwxrwx 0
0
9751652
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w3m.mp3
(W3M.MP3)
Tue Jul 13 1999 09:48:54 55588 m.c -/-rwxrwxrwx 0
0
9751656
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w3o.mp3
(W3O.MP3)
77322 m.c -/-rwxrwxrwx 0
0
9751654
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w3n.mp3
(W3N.MP3)
Tue Jul 13 1999 09:48:56 49737 m.c -/-rwxrwxrwx 0
0
9751660
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w4a.mp3
(W4A.MP3)
28003 m.c -/-rwxrwxrwx 0
0
9751658
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w3wa.mp3
(W3WA.MP3)
Tue Jul 13 1999 09:48:58 76068 m.c -/-rwxrwxrwx 0
0
9751664
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w4c.mp3
(W4C.MP3)
105743 m.c -/-rwxrwxrwx 0
0
9751662
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w4b.mp3
(W4B.MP3)
Tue Jul 13 1999 09:49:00 66873 m.c -/-rwxrwxrwx 0
0
9751668
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w4e.mp3
(W4E.MP3)
54752 m.c -/-rwxrwxrwx 0
0
9751666
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w4d.mp3
(W4D.MP3)
Tue Jul 13 1999 09:49:02 84427 m.c -/-rwxrwxrwx 0
0
9751670
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w4f.mp3
(W4F.MP3)
Tue Jul 13 1999 09:49:04 66455 m.c -/-rwxrwxrwx 0
0
9751672
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w4g.mp3
(W4G.MP3)
25495 m.c -/-rwxrwxrwx 0
0
9751674
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w4h.mp3
(W4H.MP3)
Tue Jul 13 1999 09:49:06 75232 m.c -/-rwxrwxrwx 0
0
9751678
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w4j.mp3
(W4J.MP3)
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
53916 m.c -/-rwxrwxrwx 0
0
9751676
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w4i.mp3
(W4I.MP3)
Tue Jul 13 1999 09:49:08 25077 m.c -/-rwxrwxrwx 0
0
9751682
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w4l.mp3
(W4L.MP3)
48274 m.c -/-rwxrwxrwx 0
0
9751680
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w4k.mp3
(W4K.MP3)
Tue Jul 13 1999 09:49:10 48901 m.c -/-rwxrwxrwx 0
0
9751686
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w4n.mp3
(W4N.MP3)
47229 m.c -/-rwxrwxrwx 0
0
9751684
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w4m.mp3
(W4M.MP3)
Tue Jul 13 1999 09:49:12 45139 m.c -/-rwxrwxrwx 0
0
9751688
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w4o.mp3
(W4O.MP3)
24241 m.c -/-rwxrwxrwx 0
0
9751690
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w4p.mp3
(W4P.MP3)
Tue Jul 13 1999 09:49:14 88189 m.c -/-rwxrwxrwx 0
0
9751692
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w4q.mp3
(W4Q.MP3)
52662 m.c -/-rwxrwxrwx 0
0
9751694
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w4wa.mp3
(W4WA.MP3)
Tue Jul 13 1999 09:49:16 20897 m.c -/-rwxrwxrwx 0
0
9751696
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w4wb.mp3
(W4WB.MP3)
51617 m.c -/-rwxrwxrwx 0
0
9751698
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w4wc.mp3
(W4WC.MP3)
Tue Jul 13 1999 09:49:18 40542 m.c -/-rwxrwxrwx 0
0
9751702
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w5a2.mp3
(W5A2.MP3)
96966 m.c -/-rwxrwxrwx 0
0
9751700
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w5a.mp3
(W5A.MP3)
Tue Jul 13 1999 09:49:20 65410 m.c -/-rwxrwxrwx 0
0
9751704
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w5b.mp3
(W5B.MP3)
Tue Jul 13 1999 09:49:22 71053 m.c -/-rwxrwxrwx 0
0
9751708
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w5d.mp3
(W5D.MP3)
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
75650 m.c -/-rwxrwxrwx 0
0
9751706
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w5c.mp3
(W5C.MP3)
Tue Jul 13 1999 09:49:24 29257 m.c -/-rwxrwxrwx 0
0
9751710
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w5e.mp3
(W5E.MP3)
Tue Jul 13 1999 09:49:26 92368 m.c -/-rwxrwxrwx 0
0
9751714
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w5g.mp3
(W5G.MP3)
112013 m.c -/-rwxrwxrwx 0
0
9751712
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w5f.mp3
(W5F.MP3)
Tue Jul 13 1999 09:49:28 78576 m.c -/-rwxrwxrwx 0
0
9751716
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w5h.mp3
(W5H.MP3)
Tue Jul 13 1999 09:49:30 33436 m.c -/-rwxrwxrwx 0
0
9751718
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w5i.mp3
(W5I.MP3)
59350 m.c -/-rwxrwxrwx 0
0
9751720
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w5j.mp3
(W5J.MP3)
Tue Jul 13 1999 09:49:32 61857 m.c -/-rwxrwxrwx 0
0
9751724
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w5l.mp3
(W5L.MP3)
85681 m.c -/-rwxrwxrwx 0
0
9751722
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w5k.mp3
(W5K.MP3)
Tue Jul 13 1999 09:49:34 64783 m.c -/-rwxrwxrwx 0
0
9751726
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w5m.mp3
(W5M.MP3)
Tue Jul 13 1999 09:49:36 85263 m.c -/-rwxrwxrwx 0
0
9751728
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w5n.mp3
(W5N.MP3)
62693 m.c -/-rwxrwxrwx 0
0
9751730
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w5o.mp3
(W5O.MP3)
Tue Jul 13 1999 09:49:38 61857 m.c -/-rwxrwxrwx 0
0
9751732
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w5p.mp3
(W5P.MP3)
43049 m.c -/-rwxrwxrwx 0
0
9751734
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w5q.mp3
(W5Q.MP3)
Tue Jul 13 1999 09:49:40 92786 m.c -/-rwxrwxrwx 0
0
9751736
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w5r.mp3
(W5R.MP3)
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Tue Jul 13 1999 09:49:42 81084 m.c -/-rwxrwxrwx 0
0
9751740
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w5t.mp3
(W5T.MP3)
65619 m.c -/-rwxrwxrwx 0
0
9751738
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w5s.mp3
(W5S.MP3)
Tue Jul 13 1999 09:49:44 41377 m.c -/-rwxrwxrwx 0
0
9751742
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w5u.mp3
(W5U.MP3)
Tue Jul 13 1999 09:49:46 78994 m.c -/-rwxrwxrwx 0
0
9751744
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w5v.mp3
(W5V.MP3)
60604 m.c -/-rwxrwxrwx 0
0
9751746
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w5w.mp3
(W5W.MP3)
Tue Jul 13 1999 09:49:48 28421 m.c -/-rwxrwxrwx 0
0
9751750
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w5wd.mp3
(W5WD.MP3)
93622 m.c -/-rwxrwxrwx 0
0
9751748
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w5wa.mp3
(W5WA.MP3)
Tue Jul 13 1999 09:49:50 70217 m.c -/-rwxrwxrwx 0
0
9751754
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w5wf.mp3
(W5WF.MP3)
30928 m.c -/-rwxrwxrwx 0
0
9751752
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w5we.mp3
(W5WE.MP3)
Tue Jul 13 1999 09:49:52 50991 m.c -/-rwxrwxrwx 0
0
9751756
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w5wg.mp3
(W5WG.MP3)
87771 m.c -/-rwxrwxrwx 0
0
9751758
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w5wh.mp3
(W5WH.MP3)
Tue Jul 13 1999 09:49:54 58514 m.c -/-rwxrwxrwx 0
0
9751760
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w5x.mp3
(W5X.MP3)
Tue Jul 13 1999 09:49:56 25495 m.c -/-rwxrwxrwx 0
0
9751766
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w5z2.mp3
(W5Z2.MP3)
65619 m.c -/-rwxrwxrwx 0
0
9751764
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w5z.mp3
(W5Z.MP3)
34272 m.c -/-rwxrwxrwx 0
0
9751762
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w5y.mp3
(W5Y.MP3)
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Tue Jul 13 1999 09:49:58 64783 m.c -/-rwxrwxrwx 0
0
9751768
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w5z3.mp3
(W5Z3.MP3)
Tue Jul 13 1999 09:50:00 92577 m.c -/-rwxrwxrwx 0
0
9751770
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w5z4.mp3
(W5Z4.MP3)
51826 m.c -/-rwxrwxrwx 0
0
9751772
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w6a.mp3
(W6A.MP3)
Tue Jul 13 1999 09:50:02 111595 m.c -/-rwxrwxrwx 0
0
9751774
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w6b.mp3
(W6B.MP3)
Tue Jul 13 1999 09:50:04 129985 m.c -/-rwxrwxrwx 0
0
9751776
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w6c.mp3
(W6C.MP3)
Tue Jul 13 1999 09:50:06 92786 m.c -/-rwxrwxrwx 0
0
9751780
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w6e.mp3
(W6E.MP3)
53080 m.c -/-rwxrwxrwx 0
0
9751778
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w6d.mp3
(W6D.MP3)
Tue Jul 13 1999 09:50:10 135209 m.c -/-rwxrwxrwx 0
0
9751782
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w6f.mp3
(W6F.MP3)
110341 m.c -/-rwxrwxrwx 0
0
9751784
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w6g.mp3
(W6G.MP3)
Tue Jul 13 1999 09:50:12 40960 m.c -/-rwxrwxrwx 0
0
9751786
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w6h.mp3
(W6H.MP3)
40542 m.c -/-rwxrwxrwx 0
0
9751788
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w6i.mp3
(W6I.MP3)
Tue Jul 13 1999 09:50:14 36989 m.c -/-rwxrwxrwx 0
0
9751790
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w6j.mp3
(W6J.MP3)
Tue Jul 13 1999 09:50:16 45139 m.c -/-rwxrwxrwx 0
0
9751794
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w6l.mp3
(W6L.MP3)
83591 m.c -/-rwxrwxrwx 0
0
9751792
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w6k.mp3
(W6K.MP3)
Tue Jul 13 1999 09:50:18 43467 m.c -/-rwxrwxrwx 0
0
9751796
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w6m.mp3
(W6M.MP3)
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
36571 m.c -/-rwxrwxrwx 0
0
9751798
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w6n.mp3
(W6N.MP3)
31764 m.c -/-rwxrwxrwx 0
0
9751800
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w6o.mp3
(W6O.MP3)
Tue Jul 13 1999 09:50:20 60604 m.c -/-rwxrwxrwx 0
0
9751802
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w6p.mp3
(W6P.MP3)
Tue Jul 13 1999 09:50:22 119118 m.c -/-rwxrwxrwx 0
0
9751804
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w6q.mp3
(W6Q.MP3)
Tue Jul 13 1999 09:50:24 86099 m.c -/-rwxrwxrwx 0
0
9751806
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w6r.mp3
(W6R.MP3)
Tue Jul 13 1999 09:50:26 79412 m.c -/-rwxrwxrwx 0
0
9751808
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w6s.mp3
(W6S.MP3)
Tue Jul 13 1999 09:50:28 94458 m.c -/-rwxrwxrwx 0
0
9751810
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w6t.mp3
(W6T.MP3)
124133 m.c -/-rwxrwxrwx 0
0
9751812
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w6u.mp3
(W6U.MP3)
Tue Jul 13 1999 09:50:30 71053 m.c -/-rwxrwxrwx 0
0
9751814
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
4E46
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w6v.mp3
(W6V.MP3)
Tue Jul 13 1999 09:50:32 84009 m.c -/-rwxrwxrwx 0
0
9751818
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w7a.mp3
(W7A.MP3)
41377 m.c -/-rwxrwxrwx 0
0
9751816
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w6w.mp3
(W6W.MP3)
Tue Jul 13 1999 09:50:34 10866 m.c -/-rwxrwxrwx 0
0
9751822
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w7c.mp3
(W7C.MP3)
61022 m.c -/-rwxrwxrwx 0
0
9751820
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w7b.mp3
(W7B.MP3)
Tue Jul 13 1999 09:50:36 53916 m.c -/-rwxrwxrwx 0
0
9751824
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w7d.mp3
(W7D.MP3)
Tue Jul 13 1999 09:50:38 96966 m.c -/-rwxrwxrwx 0
0
9751828
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w7f.mp3
(W7F.MP3)
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Tue Jul 13 1999 09:50:40 42422 m.c -/-rwxrwxrwx 0
0
9751830
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w7g.mp3
(W7G.MP3)
Tue Jul 13 1999 09:50:42 79412 m.c -/-rwxrwxrwx 0
0
9751832
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w7h.mp3
(W7H.MP3)
Tue Jul 13 1999 09:50:44 96966 m.c -/-rwxrwxrwx 0
0
9751834
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w7i.mp3
(W7I.MP3)
Tue Jul 13 1999 09:50:46 120372 m.c -/-rwxrwxrwx 0
0
9751836
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w7j.mp3
(W7J.MP3)
66455 m.c -/-rwxrwxrwx 0
0
9751838
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w7k.mp3
(W7K.MP3)
Tue Jul 13 1999 09:50:50 131657 m.c -/-rwxrwxrwx 0
0
9751842
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w7m.mp3
(W7M.MP3)
Tue Jul 13 1999 09:50:52 80666 m.c -/-rwxrwxrwx 0
0
9751844
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w7n.mp3
(W7N.MP3)
Tue Jul 13 1999 09:50:54 36780 m.c -/-rwxrwxrwx 0
0
9751848
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w7p.mp3
(W7P.MP3)
103653 m.c -/-rwxrwxrwx 0
0
9751846
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w7o.mp3
(W7O.MP3)
Tue Jul 13 1999 09:50:56 71888 m.c -/-rwxrwxrwx 0
0
9751850
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w7q.mp3
(W7Q.MP3)
Wed Jul 14 1999 10:36:38 129280 m.. -/-rwxrwxrwx 0
0
3345944
c:\/WINDOWS/SYSTEM/TRID_D3D.DRV
Wed Jul 21 1999 07:44:46 1931 m.c -/-rwxrwxrwx 0
0
3900422
c:\/PROGRA~1/MICROS~1/AGEOFE~1/HISTORY/Armies.txt (ARMIES.TXT)
3767 m.c -/-rwxrwxrwx 0
0
3900439
c:\/PROGRA~1/MICROS~1/AGEOFE~1/HISTORY/British original.txt
(BRITIS~1.TXT)
4274 m.c -/-rwxrwxrwx 0
0
3900425
c:\/PROGRA~1/MICROS~1/AGEOFE~1/HISTORY/ArmiesMongols.txt
(ARMIES~1.TXT)
2139 m.c -/-rwxrwxrwx 0
0
3900430
c:\/PROGRA~1/MICROS~1/AGEOFE~1/HISTORY/ArmiesStrat.txt
(ARMIES~3.TXT)
5944 m.c -/-rwxrwxrwx 0
0
3900427
c:\/PROGRA~1/MICROS~1/AGEOFE~1/HISTORY/ArmiesOrg.txt
(ARMIES~2.TXT)
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
2178 m.c -/-rwxrwxrwx 0
0
3900466
c:\/PROGRA~1/MICROS~1/AGEOFE~1/HISTORY/charlemagne.txt
(CHARLE~1.TXT)
6349 m.c -/-rwxrwxrwx 0
0
3900453
c:\/PROGRA~1/MICROS~1/AGEOFE~1/HISTORY/CastleDefenses.txt
(CASTLE~1.TXT)
1110 m.c -/-rwxrwxrwx 0
0
3900458
c:\/PROGRA~1/MICROS~1/AGEOFE~1/HISTORY/Castles.txt (CASTLES.TXT)
3045 m.c -/-rwxrwxrwx 0
0
3900436
c:\/PROGRA~1/MICROS~1/AGEOFE~1/HISTORY/barbarianinvaders.txt
(BARBAR~1.TXT)
4856 m.c -/-rwxrwxrwx 0
0
3900456
c:\/PROGRA~1/MICROS~1/AGEOFE~1/HISTORY/CastleEvolution.txt
(CASTLE~2.TXT)
2549 m.c -/-rwxrwxrwx 0
0
3900463
c:\/PROGRA~1/MICROS~1/AGEOFE~1/HISTORY/Celts.txt (CELTS.TXT)
Wed Jul 21 1999 07:44:48 2654 m.c -/-rwxrwxrwx 0
0
3900478
c:\/PROGRA~1/MICROS~1/AGEOFE~1/HISTORY/economy.txt
(ECONOMY.TXT)
369 m.c -/-rwxrwxrwx 0
0
3900473
c:\/PROGRA~1/MICROS~1/AGEOFE~1/HISTORY/darkages.txt
(DARKAGES.TXT)
4521 m.c -/-rwxrwxrwx 0
0
3900476
c:\/PROGRA~1/MICROS~1/AGEOFE~1/HISTORY/DarkArmies.txt
(DARKAR~1.TXT)
Key fingerprint = AF19
998D FDB5
06E4 A169 4E46
3782FA27
m.c 2F94
-/-rwxrwxrwx
0 DE3D
0 F8B5
3900468
c:\/PROGRA~1/MICROS~1/AGEOFE~1/HISTORY/Chinese.txt (CHINESE.TXT)
3570 m.c -/-rwxrwxrwx 0
0
3900471
c:\/PROGRA~1/MICROS~1/AGEOFE~1/HISTORY/darkagereligion.txt
(DARKAG~1.TXT)
Wed Jul 21 1999 07:44:50 6306 m.c -/-rwxrwxrwx 0
0
3900546
c:\/PROGRA~1/MICROS~1/AGEOFE~1/HISTORY/WeaponsCav.txt
(WEAPON~1.TXT)
4914 m.c -/-rwxrwxrwx 0
0
3900486
c:\/PROGRA~1/MICROS~1/AGEOFE~1/HISTORY/feudalismdecline.txt
(FEUDAL~3.TXT)
3613 m.c -/-rwxrwxrwx 0
0
3900488
c:\/PROGRA~1/MICROS~1/AGEOFE~1/HISTORY/Franks.txt (FRANKS.TXT)
2073 m.c -/-rwxrwxrwx 0
0
3900481
c:\/PROGRA~1/MICROS~1/AGEOFE~1/HISTORY/feudalcontract.txt
(FEUDAL~1.TXT)
342 m.c -/-rwxrwxrwx 0
0
3900483
c:\/PROGRA~1/MICROS~1/AGEOFE~1/HISTORY/feudalism.txt
(FEUDAL~2.TXT)
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
3558 m.c -/-rwxrwxrwx 0
0
3900549
c:\/PROGRA~1/MICROS~1/AGEOFE~1/HISTORY/WeaponsHand.txt
(WEAPON~2.TXT)
11763 m.c -/-rwxrwxrwx 0
0
3900498
c:\/PROGRA~1/MICROS~1/AGEOFE~1/HISTORY/Knights.txt (KNIGHTS.TXT)
6580 m.c -/-rwxrwxrwx 0
0
3900508
c:\/PROGRA~1/MICROS~1/AGEOFE~1/HISTORY/Naval.txt (NAVAL.TXT)
4512 m.c -/-rwxrwxrwx 0
0
3900552
c:\/PROGRA~1/MICROS~1/AGEOFE~1/HISTORY/WeaponsMissile.txt
(WEAPON~3.TXT)
971 m.c -/-rwxrwxrwx 0
0
3900543
c:\/PROGRA~1/MICROS~1/AGEOFE~1/HISTORY/Weapons.txt
(WEAPONS.TXT)
3433 m.c -/-rwxrwxrwx 0
0
3900506
c:\/PROGRA~1/MICROS~1/AGEOFE~1/HISTORY/Mongols.txt
(MONGOLS.TXT)
2903 m.c -/-rwxrwxrwx 0
0
3900517
c:\/PROGRA~1/MICROS~1/AGEOFE~1/HISTORY/renaissance.txt
(RENAIS~1.TXT)
3171 m.c -/-rwxrwxrwx 0
0
3900494
c:\/PROGRA~1/MICROS~1/AGEOFE~1/HISTORY/history.txt (HISTORY.TXT)
3117 m.c -/-rwxrwxrwx 0
0
3900492
c:\/PROGRA~1/MICROS~1/AGEOFE~1/HISTORY/Gunpowder.txt
(GUNPOW~1.TXT)
1366 m.c -/-rwxrwxrwx 0
0
3900504
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/PROGRA~1/MICROS~1/AGEOFE~1/HISTORY/middleages.txt
(MIDDLE~1.TXT)
3484 m.c -/-rwxrwxrwx 0
0
3900539
c:\/PROGRA~1/MICROS~1/AGEOFE~1/HISTORY/Vikings.txt (VIKINGS.TXT)
3584 m.c -/-rwxrwxrwx 0
0
3900524
c:\/PROGRA~1/MICROS~1/AGEOFE~1/HISTORY/Teutons.txt (TEUTONS.TXT)
1198 m.c -/-rwxrwxrwx 0
0
3900522
c:\/PROGRA~1/MICROS~1/AGEOFE~1/HISTORY/technology.txt
(TECHNO~1.TXT)
1570 m.c -/-rwxrwxrwx 0
0
3900510
c:\/PROGRA~1/MICROS~1/AGEOFE~1/HISTORY/Persians.txt
(PERSIANS.TXT)
3385 m.c -/-rwxrwxrwx 0
0
3900530
c:\/PROGRA~1/MICROS~1/AGEOFE~1/HISTORY/thefallofrome.txt
(THEFAL~1.TXT)
1671 m.c -/-rwxrwxrwx 0
0
3900514
c:\/PROGRA~1/MICROS~1/AGEOFE~1/HISTORY/religion.txt (RELIGION.TXT)
3141 m.c -/-rwxrwxrwx 0
0
3900535
c:\/PROGRA~1/MICROS~1/AGEOFE~1/HISTORY/thevikings.txt
(THEVIK~1.TXT)
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
1862 m.c -/-rwxrwxrwx 0
0
3900541
c:\/PROGRA~1/MICROS~1/AGEOFE~1/HISTORY/Warfare.txt (WARFARE.TXT)
3208 m.c -/-rwxrwxrwx 0
0
3900496
c:\/PROGRA~1/MICROS~1/AGEOFE~1/HISTORY/Japanese.txt
(JAPANESE.TXT)
3037 m.c -/-rwxrwxrwx 0
0
3900537
c:\/PROGRA~1/MICROS~1/AGEOFE~1/HISTORY/Turks.txt (TURKS.TXT)
2222 m.c -/-rwxrwxrwx 0
0
3900532
c:\/PROGRA~1/MICROS~1/AGEOFE~1/HISTORY/themanor.txt
(THEMANOR.TXT)
3070 m.c -/-rwxrwxrwx 0
0
3900490
c:\/PROGRA~1/MICROS~1/AGEOFE~1/HISTORY/Goths.txt (GOTHS.TXT)
4793 m.c -/-rwxrwxrwx 0
0
3900527
c:\/PROGRA~1/MICROS~1/AGEOFE~1/HISTORY/thecrusades.txt
(THECRU~1.TXT)
3606 m.c -/-rwxrwxrwx 0
0
3900519
c:\/PROGRA~1/MICROS~1/AGEOFE~1/HISTORY/Saracens.txt
(SARACENS.TXT)
Thu Jul 22 1999 10:50:02 454656 m.. -/-rwxrwxrwx 0
0
3345942
c:\/WINDOWS/SYSTEM/TRID_D3D.DLL
Mon Jul 26 1999 19:34:36
14 m.c -/-rwxrwxrwx 0
0
3901448
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SAVEGAME/SaveGame.txt
(SAVEGAME.TXT)
Tue Jul 27 1999 17:56:32 1165 m.c -/-rwxrwxrwx 0
0
3899427
c:\/PROGRA~1/MICROS~1/AGEOFE~1/DATA/shadow.col (SHADOW.COL)
Key fingerprint
= AF19
FA27 2F94
998D
FDB5
DE3D F8B5
4E46
Mon
Aug 02 1999
15:27:46
50364
m.c
-/-rwxrwxrwx
0 06E40 A1693904108
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/d1c.mp3
(D1C.MP3)
Mon Aug 02 1999 15:27:48 35735 m.c -/-rwxrwxrwx 0
0
3904104
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/d1a.mp3
(D1A.MP3)
31973 m.c -/-rwxrwxrwx 0
0
3904106
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/d1b.mp3
(D1B.MP3)
Fri Aug 06 1999 04:40:14 77113 m.c -/-rwxrwxrwx 0
0
3904112
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/g1b.mp3
(G1B.MP3)
Fri Aug 06 1999 04:46:48 53707 m.c -/-rwxrwxrwx 0
0
3904006
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/b1a.mp3
(B1A.MP3)
Tue Aug 10 1999 11:53:32 3767 m.c -/-rwxrwxrwx 0
0
3900442
c:\/PROGRA~1/MICROS~1/AGEOFE~1/HISTORY/british regular.txt
(BRITIS~2.TXT)
Tue Aug 10 1999 12:04:52 19213 m.c -/-rwxrwxrwx 0
0
3900445
c:\/PROGRA~1/MICROS~1/AGEOFE~1/HISTORY/british test.txt
(BRITIS~3.TXT)
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Tue Aug 10 1999 17:06:40 3977 m.c -/-rwxrwxrwx 0
0
3900450
c:\/PROGRA~1/MICROS~1/AGEOFE~1/HISTORY/Byzantines.txt
(BYZANT~1.TXT)
Fri Aug 13 1999 11:31:00 294912 m.c -/-rwxrwxrwx 0
0
3899437
c:\/PROGRA~1/MICROS~1/AGEOFE~1/DATA/view_icm.dat (VIEW_ICM.DAT)
Fri Aug 13 1999 15:04:46 3768 m.c -/-rwxrwxrwx 0
0
3900447
c:\/PROGRA~1/MICROS~1/AGEOFE~1/HISTORY/british.txt (BRITISH.TXT)
11990 m.c -/-rwxrwxrwx 0
0
3900433
c:\/PROGRA~1/MICROS~1/AGEOFE~1/HISTORY/ArmiesTactics.txt
(ARMIES~4.TXT)
Fri Aug 13 1999 21:48:08 124623 m.c -/-rwxrwxrwx 0
0
3899422
c:\/PROGRA~1/MICROS~1/AGEOFE~1/DATA/LoQMaps.dat (LOQMAPS.DAT)
Mon Aug 16 1999 00:23:58 40507 m.c -/-rwxrwxrwx 0
0
3892255
c:\/PROGRA~1/MICROS~1/AGEOFE~1/EULA.RTF
Mon Aug 16 1999 08:52:44 164000 m.c -/-rwxrwxrwx 0
0
3899425
c:\/PROGRA~1/MICROS~1/AGEOFE~1/DATA/PatternMasks.dat
(PATTER~1.DAT)
Wed Aug 25 1999 07:59:58 13343 m.c -/-rwxrwxrwx 0
0
3900461
c:\/PROGRA~1/MICROS~1/AGEOFE~1/HISTORY/CastleSiege.txt
(CASTLE~3.TXT)
527 m.c -/-rwxrwxrwx 0
0
3900501
c:\/PROGRA~1/MICROS~1/AGEOFE~1/HISTORY/latemiddleages.txt
(LATEMI~1.TXT)
2068 m.c -/-rwxrwxrwx 0
0
3900512
c:\/PROGRA~1/MICROS~1/AGEOFE~1/HISTORY/politics.txt (POLITICS.TXT)
Key
= AF19
FA27 2F94
998D
FDB5
DE3D F8B5
4E46
Tue fingerprint
Aug 31 1999
09:33:32
77531
m.c
-/-rwxrwxrwx
0 06E4
0 A1699751840
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SOUND/SCENARIO/w7l.mp3
(W7L.MP3)
Tue Aug 31 1999 11:00:10 11116 m.c -/-rwxrwxrwx 0
0
3899420
c:\/PROGRA~1/MICROS~1/AGEOFE~1/DATA/list.cr (LIST.CR)
Wed Sep 01 1999 10:17:14 1370624 m.. -/--wx-wx-wx 0
0
6740486
c:\/TEMP/Rejaton.exe (REJATON.EXE)
Thu Sep 02 1999 05:41:58 53304 m.c -/-rwxrwxrwx 0
0
3892270
c:\/PROGRA~1/MICROS~1/AGEOFE~1/EBUEula.dll (EBUEULA.DLL)
Thu Sep 02 1999 15:14:46 368366 m.c -/--wx-wx-wx 0
0
3897352
c:\/PROGRA~1/MICROS~1/AGEOFE~1/CAMPAIGN/cam1.cpn (CAM1.CPN)
Thu Sep 02 1999 15:14:52 162791 m.c -/--wx-wx-wx 0
0
3897360
c:\/PROGRA~1/MICROS~1/AGEOFE~1/CAMPAIGN/cam8.cpn (CAM8.CPN)
Fri Sep 03 1999 03:10:36 4810396 m.c -/-rwxrwxrwx 0
0
3899433
c:\/PROGRA~1/MICROS~1/AGEOFE~1/DATA/terrain.drs (TERRAIN.DRS)
Fri Sep 03 1999 03:12:54 29678340 m.c -/-rwxrwxrwx 0
0
3899429
c:\/PROGRA~1/MICROS~1/AGEOFE~1/DATA/sounds.drs (SOUNDS.DRS)
Fri Sep 03 1999 09:48:50 263910 m.c -/--wx-wx-wx 0
0
3897354
c:\/PROGRA~1/MICROS~1/AGEOFE~1/CAMPAIGN/cam2.cpn (CAM2.CPN)
Fri Sep 03 1999 09:48:54 327031 m.c -/--wx-wx-wx 0
0
3897356
c:\/PROGRA~1/MICROS~1/AGEOFE~1/CAMPAIGN/cam3.cpn (CAM3.CPN)
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
Sun Sep 05 1999 20:28:34 158902 m.c -/-rwxrwxrwx 0
0
3892274
c:\/PROGRA~1/MICROS~1/AGEOFE~1/scenariobkg.bmp (SCENAR~1.BMP)
Mon Sep 06 1999 16:11:50 372059 m.c -/--wx-wx-wx 0
0
3897358
c:\/PROGRA~1/MICROS~1/AGEOFE~1/CAMPAIGN/cam4.cpn (CAM4.CPN)
Tue Sep 07 1999 02:20:02 532476 m.c -/-rwxrwxrwx 0
0
3899412
c:\/PROGRA~1/MICROS~1/AGEOFE~1/DATA/gamedata.drs
(GAMEDATA.DRS)
Wed Sep 08 1999 06:25:28 499712 m.c -/-rwxrwxrwx 0
0
3892250
c:\/PROGRA~1/MICROS~1/AGEOFE~1/language.dll (LANGUAGE.DLL)
Fri Sep 10 1999 12:06:30
4 ..c -/-rwxrwxrwx 0
0
3902470
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SCENARIO/scenario.inf
(SCENARIO.INF)
Mon Sep 13 1999 17:31:36 73566713 m.c -/-rwxrwxrwx 0
0
3899414
c:\/PROGRA~1/MICROS~1/AGEOFE~1/DATA/graphics.drs (GRAPHICS.DRS)
Mon Sep 13 1999 17:39:22 35591977 m.c -/-rwxrwxrwx 0
0
3899416
c:\/PROGRA~1/MICROS~1/AGEOFE~1/DATA/interfac.drs (INTERFAC.DRS)
Mon Sep 13 1999 21:13:06 659808 m.c -/-rwxrwxrwx 0
0
3899400
c:\/PROGRA~1/MICROS~1/AGEOFE~1/DATA/empires2.dat (EMPIRES2.DAT)
Tue Sep 14 1999 14:02:58 57363 m.c -/-rwxrwxrwx 0
0
3892254
c:\/PROGRA~1/MICROS~1/AGEOFE~1/Readme.rtf (README.RTF)
Tue Sep 14 1999 16:44:08 2211840 m.c -/-rwxrwxrwx 0
0
3892252
c:\/PROGRA~1/MICROS~1/AGEOFE~1/SETUPENU.DLL
Tue Sep 14 1999 16:47:34 585790 m.c -/-rwxrwxrwx 0
0
3892251
c:\/PROGRA~1/MICROS~1/AGEOFE~1/UNINSTAL.EXE
Tue Sep 14 1999 17:43:38 32256 m.c -/-rwxrwxrwx 0
0
3892268
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
A169
c:\/PROGRA~1/MICROS~1/AGEOFE~1/drvmgt.dll (DRVMGT.DLL) 4E46
Tue Sep 14 1999 17:43:44 163328 m.c -/-rwxrwxrwx 0
0
3892266
c:\/PROGRA~1/MICROS~1/AGEOFE~1/dplayerx.dll (DPLAYERX.DLL)
Tue Sep 14 1999 17:43:48 2560045 m.c -/-rwxrwxrwx 0
0
3892248
c:\/PROGRA~1/MICROS~1/AGEOFE~1/EMPIRES2.ICD
280307 m.c -/-rwxrwxrwx 0
0
3892247
c:\/PROGRA~1/MICROS~1/AGEOFE~1/empires2.exe (EMPIRES2.EXE)
Tue Sep 14 1999 17:43:50 6784 m.c -/-rwxrwxrwx 0
0
3892260
c:\/PROGRA~1/MICROS~1/AGEOFE~1/clcd16.dll (CLCD16.DLL)
27648 m.c -/-rwxrwxrwx 0
0
3892262
c:\/PROGRA~1/MICROS~1/AGEOFE~1/clcd32.dll (CLCD32.DLL)
177152 m.c -/-rwxrwxrwx 0
0
3892264
c:\/PROGRA~1/MICROS~1/AGEOFE~1/clokspl.exe (CLOKSPL.EXE)
308278 m.c -/-rwxrwxrwx 0
0
3892258
c:\/PROGRA~1/MICROS~1/AGEOFE~1/00000409.256
153718 m.c -/-rwxrwxrwx 0
0
3892257
c:\/PROGRA~1/MICROS~1/AGEOFE~1/00000409.016
Wed Dec 08 1999 13:20:46 3833 m.. -/-rwxrwxrwx 0
0
3898382
c:\/WINDOWS/INF/OTHER/Jaton CorporationVIDEO67P.INF (JATONC~1.INF)
Sat Mar 25 2000 23:00:00 6928 .a. -/-rwxrwxrwx 0
0
1568
c:\/WINDOWS/SYSBCKUP/DCIMAN.DLL
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
40576 .a. -/-rwxrwxrwx 0
0
342818
c:\/WINDOWS/SYSTEM/OLECNV32.DLL
6656 .a. -/-rwxrwxrwx 0
0
342866
c:\/WINDOWS/SYSTEM/FONTREG.EXE
13101 .a. -/-rwxrwxrwx 0
0
368172
c:\/WINDOWS/HELP/MFCUIX.HLP
16384 .a. d/drwxrwxrwx 0
0
3285018
c:\/WINDOWS/STARTM~1/PROGRAMS/ACCESS~1/System Tools
(SYSTEM~1)
9696 .a. -/-rwxrwxrwx 0
0
343019
c:\/WINDOWS/SYSTEM/RPCLTS6.DLL
49543 .a. -/-rwxrwxrwx 0
0
343560
c:\/WINDOWS/COMMAND/FORMAT.COM
22096 .a. -/-rwxrwxrwx 0
0
342586
c:\/WINDOWS/SYSTEM/MAINCP16.DLL
578 .a. -/-rwxrwxrwx 0
0
327709
c:\/WINDOWS/Pinstripe.bmp (PINSTR~1.BMP)
149504 .a. -/-r-xr-xr-x 0
0
1243657
c:\/PROGRA~1/THEMIC~1/MOSCOMP.DLL
153040 .a. -/-rwxrwxrwx 0
0
342805
c:\/WINDOWS/SYSTEM/OLE2NLS.DLL
27507 .a. -/-rwxrwxrwx 0
0
368178
c:\/WINDOWS/HELP/WINHLP32.HLP
6144 .a. -/-rwxrwxrwx 0
0
342620
c:\/WINDOWS/SYSTEM/AWDCXC32.DLL
Key fingerprint = AF19
FA27
2F94 998D FDB5
06E4 A169 4E46
12288
.a. -/-rwxrwxrwx
0 DE3D
0 F8B5
342813
c:\/WINDOWS/SYSTEM/OLECLI32.DLL
9004 .a. -/-rwxrwxrwx 0
0
342721
c:\/WINDOWS/SYSTEM/WFM0203A.CSP
72272 .a. -/-rwxrwxrwx 0
0
342722
c:\/WINDOWS/SYSTEM/AVICAP.DLL
20480 .a. -/-rwxrwxrwx 0
0
342863
c:\/WINDOWS/SYSTEM/PANMAP.DLL
164352 .a. -rwxrwxrwx 0
0
551435 <part2.img_SWD6_32.WPC-dead-551435>
3158 .a. -/-rwxrwxrwx 0
0
537606
c:\/PROGRA~1/NETMEE~1/OBSCURE.BMP
66048 .a. -/-rwxrwxrwx 0
0
342689
c:\/WINDOWS/SYSTEM/FTMAPI.DLL
63116 .a. -/-rwxrwxrwx 0
0
343562
c:\/WINDOWS/COMMAND/FDISK.EXE
2169 .a. -/-rwxrwxrwx 0
0
368203
c:\/WINDOWS/HELP/WINFILE.CNT
69120 .a. -/-rwxrwxrwx 0
0
1306633
c:\/PROGRA~1/INTERN~1/INFINST.EXE
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
3570 .a. -/-rwxrwxrwx 0
0
1194501
c:\/WINDOWS/DESKTOP/ONLINE~1/_NFORM~1.TXT (deleted)
16577 .a. -/-rwxrwxrwx 0
0
368173
c:\/WINDOWS/HELP/MOUSE.HLP
10240 .a. -/-rwxrwxrwx 0
0
342624
c:\/WINDOWS/SYSTEM/AWVIEW32.DLL
8042 .a. -/-rwxrwxrwx 0
0
368201
c:\/WINDOWS/HELP/QFECHECK.HLP
16384 .a. d/d-wx-wx-wx 0
0
537100
c:\/PROGRA~1/Windows Messaging (WINDOW~1)
5632 .a. -/-rwxrwxrwx 0
0
342816
c:\/WINDOWS/SYSTEM/MFCUIA32.DLL
31120 .a. -/-rwxrwxrwx 0
0
1556
c:\/WINDOWS/SYSBCKUP/COMPOBJ.DLL
23025 .a. -/-rwxrwxrwx 0
0
343030
c:\/WINDOWS/SYSTEM/FILESEC.VXD
8502 .a. -/-rwxrwxrwx 0
0
368156
c:\/WINDOWS/HELP/WANGSHL.HLP
204288 .a. -/-rwxrwxrwx 0
0
342913
c:\/WINDOWS/SYSTEM/DIGSIG.DLL
399 .a. -/-rwxrwxrwx 0
0
1194515
c:\/WINDOWS/DESKTOP/ONLINE~1/AT&T WorldNet Signup.lnk
(AT&TWO~1.LNK)
17172 .a. -/-rwxrwxrwx 0
0
368186
c:\/WINDOWS/HELP/ACCESSIB.HLP
Key fingerprint = AF19
FA27
2F94 998D FDB5
06E4 A169 4E46
62968
.a. -/-rwxrwxrwx
0 DE3D
0 F8B5
765961
c:\/WINDOWS/FONTS/ARIALI.TTF
26 .a. -/-rwxrwxrwx 0
0
327803
c:\/WINDOWS/MSOFFICE.INI
601 .a. -/-rwxrwxrwx 0
0
342952
c:\/WINDOWS/SYSTEM/SWEDISH.TRN
190 .a. -/-rwxrwxrwx 0
0
327707
c:\/WINDOWS/Waves.bmp (WAVES.BMP)
4912 .a. -/-rwxrwxrwx 0
0
327774
c:\/WINDOWS/RUNDLL.EXE
30720 .a. -/-rwxrwxrwx 0
0
342593
c:\/WINDOWS/SYSTEM/MF3216.DLL
42496 .a. -/-rwxrwxrwx 0
0
342995
c:\/WINDOWS/SYSTEM/VLB32.DLL
173 .a. -/-rwxrwxrwx 0
0
368211
c:\/WINDOWS/HELP/MSNAUTH.CNT
3570 .a. -/-rwxrwxrwx 0
0
1194520
c:\/WINDOWS/DESKTOP/ONLINE~1/About The Online Services.txt
(ABOUTT~1.TXT)
2501 .a. -/-rwxrwxrwx 0
0
2885643
c:\/PROGRA~1/ONLINE~1/AT&T/JUMPER.GIF
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
221696 .a. -/-rwxrwxrwx 0
0
342666
c:\/WINDOWS/SYSTEM/MSAWT.DLL
15376 .a. -/-rwxrwxrwx 0
0
537625
c:\/PROGRA~1/NETMEE~1/MNMAL_.DLL
44 .a. -/-rwxrwxrwx 0
0
327799
c:\/WINDOWS/EXCHNG32.INI
2352 .a. -/-rwxrwxrwx 0
0
1306630
c:\/PROGRA~1/INTERN~1/INST16.DLL
10444 .a. -/-rwxrwxrwx 0
0
327702
c:\/WINDOWS/IOS.INI
78965 .a. -/-rwxrwxrwx 0
0
545839
c:\/WINDOWS/SYSTEM/VMM32/_HELL.VXD (deleted)
6144 .a. -/-rwxrwxrwx 0
0
342576
c:\/WINDOWS/SYSTEM/UMDM32.DLL
23696 .a. -/-rwxrwxrwx 0
0
342536
c:\/WINDOWS/SYSTEM/LZEXPAND.DLL
2497 .a. -/-rwxrwxrwx 0
0
342867
c:\/WINDOWS/SYSTEM/CONTROL.INF
5120 .a. -/-rwxrwxrwx 0
0
342683
c:\/WINDOWS/SYSTEM/INDICDLL.DLL
7584 .a. -/-rwxrwxrwx 0
0
343014
c:\/WINDOWS/SYSTEM/RPCLTC3.DLL
328 .a. -/-rwxrwxrwx 0
0
1225222
c:\/PROGRA~1/ICW-IN~1/ICWIP.DUN
851 .a. -/-rwxrwxrwx 0
0
1225230
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/PROGRA~1/ICW-IN~1/STATE.ICW
4096 .a. -/-rwxrwxrwx 0
0
342596
c:\/WINDOWS/SYSTEM/VDMDBG.DLL
16384 .a. d/drwxrwxrwx 0
0
3285021
c:\/WINDOWS/STARTM~1/PROGRAMS/ACCESS~1/Internet Tools (INTERN~1)
17780 .a. -/-rwxrwxrwx 0
0
368190
c:\/WINDOWS/HELP/MSN.HLP
311808 .a. -/-rwxrwxrwx 0
0
551431
c:\/PROGRA~1/ACCESS~1/MSPAINT.EXE
16384 .a. d/drwxrwxrwx 0
0
342565
c:\/WINDOWS/SYSTEM/IOSUBSYS
30931 .a. -/-rwxrwxrwx 0
0
545819
c:\/WINDOWS/SYSTEM/VMM32/_MPOLL.VXD (deleted)
4096 .a. -/-rwxrwxrwx 0
0
342883
c:\/WINDOWS/SYSTEM/VMODCTL.DLL
62464 .a. -/-r-xr-xr-x 0
0
551443
c:\/PROGRA~1/ACCESS~1/write32.wpc (WRITE32.WPC)
75776 .a. -/-rwxrwxrwx 0
0
342695
c:\/WINDOWS/SYSTEM/PRODINV.DLL
3186 .a. -/-rwxrwxrwx 0
0
342948
c:\/WINDOWS/SYSTEM/RSACI.RAT
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
461 .a. -/-rwxrwxrwx 0
0
2257929
c:\/WINDOWS/SHELLNEW/PRESENTA.SHW
16384 .a. d/drwxrwxrwx 0
0
1308165
c:\/WINDOWS/JAVA/CLASSES
728 .a. -/-rwxrwxrwx 0
0
327884
c:\/WINDOWS/HOSTS.SAM
1676 .a. -/-rwxrwxrwx 0
0
2885650
c:\/PROGRA~1/ONLINE~1/AT&T/SIGNUP_B.GIF
121 .a. -/-rwxrwxrwx 0
0
368182
c:\/WINDOWS/HELP/CONNECT.CNT
9943 .a. -/-rwxrwxrwx 0
0
342964
c:\/WINDOWS/SYSTEM/WinTrust.hlp (WINTRUST.HLP)
56320 .a. -/-rwxrwxrwx 0
0
342637
c:\/WINDOWS/SYSTEM/WANGCMN.DLL
20574 .a. -/-rwxrwxrwx 0
0
343578
c:\/WINDOWS/COMMAND/FC.EXE
93 .a. -/-rwxrwxrwx 0
0
342946
c:\/WINDOWS/SYSTEM/BLANK.HTM
19216 .a. -/-rwxrwxrwx 0
0
2885652
c:\/PROGRA~1/ONLINE~1/AT&T/UNIVCARD.GIF
100063 .a. -/-rwxrwxrwx 0
0
342871
c:\/WINDOWS/SYSTEM/3NICDIAG.HLP
16384 .a. d/d-wx-wx-wx 0
0
17
c:\/Program Files
(PROGRA~1)
58870 .a. -/-rwxrwxrwx 0
0
343593
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/WINDOWS/COMMAND/EGA.CPI
26496 .a. -/-rwxrwxrwx 0
0
1360901
c:\/PROGRA~1/WINDOW~1/MLSHEXT.DLL
39744 .a. -/-rwxrwxrwx 0
0
342802
c:\/WINDOWS/SYSTEM/OLE2.DLL
12144 .a. -/-rwxrwxrwx 0
0
2172934
c:\/WINDOWS/CURSORS/HOURGLAS.ANI
16384 .a. d/d-wx-wx-wx 0
0
537108
c:\/PROGRA~1/Accessories (ACCESS~1)
12663 .a. -/-rwxrwxrwx 0
0
327761
c:\/WINDOWS/RAMDRIVE.SYS
16690 .a. -/-rwxrwxrwx 0
0
327731
c:\/WINDOWS/PRINTERS.TXT
32815 .a. -rwxrwxrwx 0
0
545835 <part2.img_MOUSE.VXD-dead-545835>
17904 .a. -/-rwxrwxrwx 0
0
343585
c:\/WINDOWS/COMMAND/SUBST.EXE
519340 .a. -/-rwxrwxrwx 0
0
368177
c:\/WINDOWS/HELP/WINDOWS.HLP
59964 .a. -/-rwxrwxrwx 0
0
1201162
c:\/WINDOWS/SYSTEM/COLOR/MNEBUG18.ICM
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
7746 .a. -/-rwxrwxrwx 0
0
1225229
c:\/PROGRA~1/ICW-IN~1/PHONE.ICW
15252 .a. -/-rwxrwxrwx 0
0
343563
c:\/WINDOWS/COMMAND/ATTRIB.EXE
38389 .a. -/-rwxrwxrwx 0
0
368191
c:\/WINDOWS/HELP/MSNPSS.HLP
28422 .a. -/-rwxrwxrwx 0
0
368145
c:\/WINDOWS/HELP/WORDPAD.HLP
29008 .a. -/-rwxrwxrwx 0
0
342911
c:\/WINDOWS/SYSTEM/CACHEVU.DLL
31886 .a. -/-rwxrwxrwx 0
0
368170
c:\/WINDOWS/HELP/CALC.HLP
350208 .a. -/-rwxrwxrwx 0
0
342870
c:\/WINDOWS/SYSTEM/3NICDIAG.EXE
37440 .a. -/-rwxrwxrwx 0
0
342679
c:\/WINDOWS/SYSTEM/ACTXPRXY.DLL
116736 .a. -/-rwxrwxrwx 0
0
537610
c:\/PROGRA~1/NETMEE~1/MCATPSTN.DLL
198 .a. -/-rwxrwxrwx 0
0
327860
c:\/WINDOWS/Triangles.bmp (TRIANG~1.BMP)
193024 .a. -/-rwxrwxrwx 0
0
342731
c:\/WINDOWS/SYSTEM/IR32_32.DLL
812406 .a. -/-rwxrwxrwx 0
0
1308677
c:\/WINDOWS/JAVA/CLASSES/CLASSES.ZIP
5448 .a. -/-rwxrwxrwx 0
0
342794
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/WINDOWS/SYSTEM/CP_28593.NLS
9815 .a. -rwxrwxrwx 0
0
545834 <part2.img_MD.VXD-dead-545834>
1067520 .a. -/-rwxrwxrwx 0
0
327785
c:\/WINDOWS/SETUPSLT.EXE
37888 .a. -/-rwxrwxrwx 0
0
342693
c:\/WINDOWS/SYSTEM/MOSCUDLL.DLL
16384 .a. d/drwxrwxrwx 0
0
1193997
c:\/WINDOWS/DESKTOP/Online Services (ONLINE~1)
57856 .a. -/-rwxrwxrwx 0
0
342658
c:\/WINDOWS/SYSTEM/IEDKCS32.DLL
25473 .a. -/-rwxrwxrwx 0
0
343569
c:\/WINDOWS/COMMAND/MSCDEX.EXE
27967 .a. -/-rwxrwxrwx 0
0
368188
c:\/WINDOWS/HELP/WHATSNEW.HLP
27076 .a. -/-rwxrwxrwx 0
0
2885644
c:\/PROGRA~1/ONLINE~1/AT&T/MGRMAP.GIF
16384 .a. d/drwxrwxrwx 0
0
2461706
c:\/PROGRA~1/ONLINE~1/CompuServe (COMPUS~1)
601 .a. -/-rwxrwxrwx 0
0
342950
c:\/WINDOWS/SYSTEM/ISO88591.TRN
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
9584 .a. -/-rwxrwxrwx 0
0
368195
c:\/WINDOWS/HELP/MMDRV.HLP
35511 .a. -/-rwxrwxrwx 0
0
342579
c:\/WINDOWS/SYSTEM/LPT.VXD
13912 .a. -rwxrwxrwx 0
0
545800 <part2.img_OSNET.VXD-dead-545800>
5184 .a. -/-rwxrwxrwx 0
0
342712
c:\/WINDOWS/SYSTEM/WFM0201.ACV
105984 .a. -/-rwxrwxrwx 0
0
342859
c:\/WINDOWS/SYSTEM/FONTEXT.DLL
571 .a. -/-rwxrwxrwx 0
0
368166
c:\/WINDOWS/HELP/NOTEPAD.CNT
14438 .a. -/-rwxrwxrwx 0
0
343037
c:\/WINDOWS/SYSTEM/NWSP.VXD
3200 .a. -/-rwxrwxrwx 0
0
342597
c:\/WINDOWS/SYSTEM/WIN32S16.DLL
72272 .a. -/-rwxrwxrwx 0
0
1577
c:\/WINDOWS/SYSBCKUP/AVICAP.DLL
32815 .a. -/-rwxrwxrwx 0
0
545835
c:\/WINDOWS/SYSTEM/VMM32/_MOUSE.VXD (deleted)
239136 .a. -/-rwxrwxrwx 0
0
327735
c:\/WINDOWS/DEFRAG.EXE
4608 .a. -/-rwxrwxrwx 0
0
1306631
c:\/PROGRA~1/INTERN~1/INST32.DLL
6007 .a. -/-rwxrwxrwx 0
0
327888
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/WINDOWS/SERVICES
334848 .a. -/-rwxrwxrwx 0
0
342629
c:\/WINDOWS/SYSTEM/OIDIS400.DLL
16960 .a. -/-rwxrwxrwx 0
0
685586
c:\/WINDOWS/SYSTEM/IOSUBSYS/SPARROW.MPD
9815 .a. -/-rwxrwxrwx 0
0
545834
c:\/WINDOWS/SYSTEM/VMM32/_MD.VXD (deleted)
9168 .a. -/-rwxrwxrwx 0
0
343017
c:\/WINDOWS/SYSTEM/RPCLTS3.DLL
3200 .a. -/-rwxrwxrwx 0
0
1548
c:\/WINDOWS/SYSBCKUP/WIN32S16.DLL
41616 .a. -/-rwxrwxrwx 0
0
1360902
c:\/PROGRA~1/WINDOW~1/MLSET32.EXE
6682 .a. -/-rwxrwxrwx 0
0
342990
c:\/WINDOWS/SYSTEM/PCOMDRV.VXD
16384 .a. d/d-wx-wx-wx 0
0
537119
c:\/PROGRA~1/_$!$!$!$.$!$ (deleted)
63240 .a. -/-rwxrwxrwx 0
0
327700
c:\/WINDOWS/DIALER.EXE
449296 .a. -/-rwxrwxrwx 0
0
342933
c:\/WINDOWS/SYSTEM/SHDOCVW.DLL
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
20992 .a. -/-rwxrwxrwx 0
0
342836
c:\/WINDOWS/SYSTEM/SPOOL32.EXE
156160 .a. -/-rwxrwxrwx 0
0
537609
c:\/PROGRA~1/NETMEE~1/MCATIPX.DLL
26905 .a. -/-rwxrwxrwx 0
0
368147
c:\/WINDOWS/HELP/LICENSE.HLP
247808 .a. -/-rwxrwxrwx 0
0
342924
c:\/WINDOWS/SYSTEM/JSCRIPT.DLL
1023 .a. -/-rwxrwxrwx 0
0
368194
c:\/WINDOWS/HELP/SOUNDREC.CNT
15872 .a. -/-rwxrwxrwx 0
0
342555
c:\/WINDOWS/SYSTEM/MFCN30.DLL
14840 .a. -/-rwxrwxrwx 0
0
368167
c:\/WINDOWS/HELP/WINDOWS.CNT
16384 .a. d/d-wx-wx-wx 0
0
537106
c:\/PROGRA~1/The Microsoft Network (THEMIC~1)
4415 .a. -/-rwxrwxrwx 0
0
368151
c:\/WINDOWS/HELP/WANGOCXD.CNT
32256 .a. -/-rwxrwxrwx 0
0
342625
c:\/WINDOWS/SYSTEM/JPEG1X32.DLL
37376 .a. -/-rwxrwxrwx 0
0
342895
c:\/WINDOWS/SYSTEM/PASSWORD.CPL
140288 .a. -/-rwxrwxrwx 0
0
342652
c:\/WINDOWS/SYSTEM/ICM32.DLL
22016 .a. -/-rwxrwxrwx 0
0
342662
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/WINDOWS/SYSTEM/JAVAPRXY.DLL
182752 .a. -/-rwxrwxrwx 0
0
342935
c:\/WINDOWS/SYSTEM/URLMON.DLL
13360 .a. -/-rwxrwxrwx 0
0
537644
c:\/PROGRA~1/NETMEE~1/MNMTDDS_.DLL
189 .a. -/-rwxrwxrwx 0
0
1225231
c:\/PROGRA~1/ICW-IN~1/MSICW.ISP
59964 .a. -/-rwxrwxrwx 0
0
1201163
c:\/WINDOWS/SYSTEM/COLOR/MNEBUG21.ICM
21473 .a. -/-rwxrwxrwx 0
0
368139
c:\/WINDOWS/HELP/HYPERTRM.HLP
1078 .a. -/-rwxrwxrwx 0
0
2885658
c:\/PROGRA~1/ONLINE~1/AT&T/ATTWNS.ICO
4608 .a. -/-rwxrwxrwx 0
0
537607
c:\/PROGRA~1/NETMEE~1/GCC32.DLL
109200 .a. -/-rwxrwxrwx 0
0
342932
c:\/WINDOWS/SYSTEM/SCHANNEL.DLL
30768 .a. -/-rwxrwxrwx 0
0
685582
c:\/WINDOWS/SYSTEM/IOSUBSYS/AIC78XX.MPD
10752 .a. -/-rwxrwxrwx 0
0
342784
c:\/WINDOWS/SYSTEM/MSIPRT.DLL
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
46740 .a. -rwxrwxrwx 0
0
545820 <part2.img_PICD.VXD-dead-545820>
910 .a. -/-rwxrwxrwx 0
0
368136
c:\/WINDOWS/HELP/HYPERTRM.CNT
86 .a. -/-rwxrwxrwx 0
0
327805
c:\/WINDOWS/SYSTEM.CB
462336 .a. -/-rwxrwxrwx 0
0
537619
c:\/PROGRA~1/NETMEE~1/CONF.EXE
16384 .a. d/drwxrwxrwx 0
0
3284497
c:\/WINDOWS/STARTM~1/PROGRAMS/StartUp (STARTUP)
2715 .a. -/-rwxrwxrwx 0
0
2885646
c:\/PROGRA~1/ONLINE~1/AT&T/RELIABTN.GIF
590 .a. -/-rwxrwxrwx 0
0
327850
c:\/WINDOWS/Straw Mat.bmp (STRAWM~1.BMP)
289552 .a. -/-rwxrwxrwx 0
0
342937
c:\/WINDOWS/SYSTEM/WININET.DLL
11776 .a. -/-rwxrwxrwx 0
0
342621
c:\/WINDOWS/SYSTEM/AWDENC32.DLL
59980 .a. -/-rwxrwxrwx 0
0
1201165
c:\/WINDOWS/SYSTEM/COLOR/MNP22G18.ICM
59980 .a. -/-rwxrwxrwx 0
0
1201166
c:\/WINDOWS/SYSTEM/COLOR/MNP22G21.ICM
123904 .a. -/-rwxrwxrwx 0
0
1225226
c:\/PROGRA~1/ICW-IN~1/ICWCONN1.EXE
22408 .a. -/-rwxrwxrwx 0
0
545812
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
c:\/WINDOWS/SYSTEM/VMM32/_CDFSD.VXD (deleted)06E4 A169 4E46
10127 .a. -/-rwxrwxrwx 0
0
368133
c:\/WINDOWS/HELP/LICENSE.TXT
375930 .a. -/-rwxrwxrwx 0
0
327890
c:\/WINDOWS/NET.EXE
16384 .a. d/dr-xr-xr-x 0
0
327831 c:\/WINDOWS/PIF
6729752 .a. -/-rwxrwxrwx 0
0
2462215
c:\/PROGRA~1/ONLINE~1/AOL/SETUP32.EXE
121 .a. -/-rwxrwxrwx 0
0
368184
c:\/WINDOWS/HELP/ACCESSIB.CNT
46656 .a. -/-rwxrwxrwx 0
0
343558
c:\/WINDOWS/COMMAND/EXTRACT.EXE
18432 .a. -/-rwxrwxrwx 0
0
1225233
c:\/PROGRA~1/ICW-IN~1/INETWIZ.EXE
7723 .a. -/-rwxrwxrwx 0
0
545832
c:\/WINDOWS/SYSTEM/VMM32/_FLATD.VXD (deleted)
462 .a. -/-rwxrwxrwx 0
0
368185
c:\/WINDOWS/HELP/PSSPOS.CNT
4785 .a. -/-rwxrwxrwx 0
0
343023
c:\/WINDOWS/SYSTEM/LMSCRIPT.EXE
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
17408 .a. -/-rwxrwxrwx 0
0
342698
c:\/WINDOWS/SYSTEM/MSNEXCH.EXE
18077 .a. -rwxrwxrwx 0
0
545798 <part2.img_IOSXLAT.VXD-dead-545798>
18338 .a. -/-rwxrwxrwx 0
0
368181
c:\/WINDOWS/HELP/REGEDIT.HLP
17920 .a. -/-rwxrwxrwx 0
0
343006
c:\/WINDOWS/SYSTEM/MSPP32.DLL
9079 .a. -/-rwxrwxrwx 0
0
368225
c:\/WINDOWS/HELP/EXPO.HLP
16384 .a. d/drwxrwxrwx 0
0
327804
c:\/WINDOWS/TEMP
24064 .a. -/-rwxrwxrwx 0
0
1558
c:\/WINDOWS/SYSBCKUP/OLESVR.DLL
47616 .a. -/-rwxrwxrwx 0
0
342675
c:\/WINDOWS/SYSTEM/JDBGMGR.EXE
4416 .a. -/-rwxrwxrwx 0
0
537630
c:\/PROGRA~1/NETMEE~1/MNMCPI_.DLL
547 .a. -/-rwxrwxrwx 0
0
1225224
c:\/PROGRA~1/ICW-IN~1/ICWX25B.DUN
73275 .a. -/-rwxrwxrwx 0
0
327893
c:\/WINDOWS/NETH.MSG
55438 .a. -/-rwxrwxrwx 0
0
342582
c:\/WINDOWS/SYSTEM/UNIMODEM.VXD
43152 .a. -/-rwxrwxrwx 0
0
342616
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/WINDOWS/SYSTEM/IMNIMP.DLL
59636 .a. -/-rwxrwxrwx 0
0
765998
c:\/WINDOWS/FONTS/VERDANAZ.TTF
83552 .a. -/-rwxrwxrwx 0
0
342914
c:\/WINDOWS/SYSTEM/GAPIA32.DLL
15495 .a. -/-rwxrwxrwx 0
0
343571
c:\/WINDOWS/COMMAND/DOSKEY.COM
86016 .a. -/-rwxrwxrwx 0
0
537614
c:\/PROGRA~1/NETMEE~1/OSSAPI.DLL
107131 .a. -/-rwxrwxrwx 0
0
545831
c:\/WINDOWS/SYSTEM/VMM32/_DD.VXD (deleted)
5584 .a. -/-rwxrwxrwx 0
0
342732
c:\/WINDOWS/SYSTEM/MCIOLE.DLL
41632 .a. -/-rwxrwxrwx 0
0
342665
c:\/WINDOWS/SYSTEM/LICMGR10.DLL
11799 .a. -/-rwxrwxrwx 0
0
342954
c:\/WINDOWS/SYSTEM/MAILNEWS.TXT
2448 .a. -/-rwxrwxrwx 0
0
2257931
c:\/WINDOWS/SHELLNEW/LOTUS.WK4
38400 .a. -/-rwxrwxrwx 0
0
342927
c:\/WINDOWS/SYSTEM/NPRA32.DLL
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
29184 .a. -/-rwxrwxrwx 0
0
342590
c:\/WINDOWS/SYSTEM/POWERCFG.DLL
196608 .a. -/-rwxrwxrwx 0
0
342985
c:\/WINDOWS/SYSTEM/3C76XCFG.DLL
16432 .a. -/-rwxrwxrwx 0
0
342594
c:\/WINDOWS/SYSTEM/SYSTHUNK.DLL
7309 .a. -/-rwxrwxrwx 0
0
327733
c:\/WINDOWS/SUPPORT.TXT
29696 .a. -/-rwxrwxrwx 0
0
537631
c:\/PROGRA~1/NETMEE~1/MNMCPI32.DLL
294736 .a. -/-rwxrwxrwx 0
0
537639
c:\/PROGRA~1/NETMEE~1/MNMSHCO_.DLL
16384 .a. d/drwxrwxrwx 0
0
3284514
c:\/WINDOWS/STARTM~1/PROGRAMS/3Com NIC Utilities (3COMNI~1)
19456 .a. -/-rwxrwxrwx 0
0
1243667
c:\/PROGRA~1/THEMIC~1/SUUTIL.DLL
18688 .a. -/-rwxrwxrwx 0
0
537629
c:\/PROGRA~1/NETMEE~1/MNMCMG_.DLL
5856 .a. -/-rwxrwxrwx 0
0
342919
c:\/WINDOWS/SYSTEM/INET16.DLL
2112 .a. -/-rwxrwxrwx 0
0
327769
c:\/WINDOWS/CONTROL.EXE
22127 .a. -/-rwxrwxrwx 0
0
545809
c:\/WINDOWS/SYSTEM/VMM32/_EBOOT.VXD (deleted)
52224 .a. -/-rwxrwxrwx 0
0
342636
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/WINDOWS/SYSTEM/OIUI400.DLL
91136 .a. -/-rwxrwxrwx 0
0
342989
c:\/WINDOWS/SYSTEM/HWACCESS.DLL
4111 .a. -/-rwxrwxrwx 0
0
327729
c:\/WINDOWS/MSN.TXT
60096 .a. -/-rwxrwxrwx 0
0
765991
c:\/WINDOWS/FONTS/SYMBOL.TTF
66672 .a. -/-rwxrwxrwx 0
0
327879
c:\/WINDOWS/TELNET.EXE
930 .a. -/-rwxrwxrwx 0
0
368168
c:\/WINDOWS/HELP/WINHLP32.CNT
147968 .a. -/-rwxrwxrwx 0
0
1542
c:\/WINDOWS/SYSBCKUP/MPLAYER.EXE
18578 .a. -/-rwxrwxrwx 0
0
545818
c:\/WINDOWS/SYSTEM/VMM32/_MCPD.VXD (deleted)
106867 .a. -/-rwxrwxrwx 0
0
545799
c:\/WINDOWS/SYSTEM/VMM32/_OSMGR.VXD (deleted)
2621 .a. -/-rwxrwxrwx 0
0
368208
c:\/WINDOWS/HELP/IEXPLORE.CNT
7315 .a. -/-rwxrwxrwx 0
0
368206
c:\/WINDOWS/HELP/TELEPHON.HLP
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
34923 .a. -/-rwxrwxrwx 0
0
368135
c:\/WINDOWS/HELP/ACCESS.HLP
48880 .a. -/-rwxrwxrwx 0
0
342572
c:\/WINDOWS/SYSTEM/PKPD.DLL
113664 .a. -/-rwxrwxrwx 0
0
1572
c:\/WINDOWS/SYSBCKUP/MSVIDEO.DLL
10790 .a. -/-rwxrwxrwx 0
0
343570
c:\/WINDOWS/COMMAND/EDIT.HLP
33792 .a. -/-rwxrwxrwx 0
0
342705
c:\/WINDOWS/SYSTEM/SEC_SSPI.DLL
59964 .a. -/-rwxrwxrwx 0
0
1201161
c:\/WINDOWS/SYSTEM/COLOR/MNEBUG15.ICM
12800 .a. -/-rwxrwxrwx 0
0
342638
c:\/WINDOWS/SYSTEM/WANGSHL.DLL
1264 .a. -/-rwxrwxrwx 0
0
342738
c:\/WINDOWS/SYSTEM/MSMIXMGR.DLL
16384 .a. d/drwxrwxrwx 0
0
1193989
c:\/WINDOWS/DESKTOP/_NLINE~1 (deleted)
57012 .a. -/-rwxrwxrwx 0
0
765997
c:\/WINDOWS/FONTS/VERDANAI.TTF
358 .a. -/-rwxrwxrwx 0
0
1194512
c:\/WINDOWS/DESKTOP/ONLINE~1/AOL & Internet FREE Trial!.lnk
(AOL&IN~1.LNK)
16384 .a. d/dr-xr-xr-x 0
0
198670
c:\/WINDOWS/TEMPOR~1/cache4 (CACHE4)
Key fingerprint = AF19
FA27
2F94 998D FDB5
06E4 A169 4E46
38400
.a. -/-rwxrwxrwx
0 DE3D
0 F8B5
327751
c:\/WINDOWS/SCRIPT.DOC
88544 .a. -/-rwxrwxrwx 0
0
1565
c:\/WINDOWS/SYSBCKUP/COMMDLG.DLL
174080 .a. -/-rwxrwxrwx 0
0
342844
c:\/WINDOWS/SYSTEM/RASAPI32.DLL
4017 .a. -/-rwxrwxrwx 0
0
2257930
c:\/WINDOWS/SHELLNEW/QUATTRO.WB2
16384 .a. d/drwxrwxrwx 0
0
327825
c:\/WINDOWS/Cookies (COOKIES)
42368 .a. -/-rwxrwxrwx 0
0
327895
c:\/WINDOWS/WINSOCK.OLD
129078 .a. -/-r-xr-xr-x 0
0
11
c:\/logo.sys
(LOGO.SYS)
161552 .a. -/-rwxrwxrwx 0
0
342569
c:\/WINDOWS/SYSTEM/ASYCPICT.DLL
18546 .a. -/-rwxrwxrwx 0
0
545823
c:\/WINDOWS/SYSTEM/VMM32/_TDAPI.VXD (deleted)
42200 .a. -/-rwxrwxrwx 0
0
1065478
c:\/WINDOWS/WANGSAMP/IMGSAMP.FRM
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
10401 .a. -/-rwxrwxrwx 0
0
545825
c:\/WINDOWS/SYSTEM/VMM32/_OMBUFF.VXD (deleted)
6675 .a. -/-rwxrwxrwx 0
0
368210
c:\/WINDOWS/HELP/MAILNEWS.CNT
16384 .a. d/drwxrwxrwx 0
0
2461702
c:\/PROGRA~1/ONLINE~1/_OMPUS~1 (deleted)
3 .a. -/-rwxrwxrwx 0
0
327871
c:\/WINDOWS/Internet Mail.{89292102-4755-11cf-9DC2-00AA006C2B84}
(INTERN~1.{89)
206848 .a. -/-rwxrwxrwx 0
0
342936
c:\/WINDOWS/SYSTEM/VBSCRIPT.DLL
79424 .a. -/-rwxrwxrwx 0
0
342820
c:\/WINDOWS/SYSTEM/OLETHK32.DLL
4 .a. -/-rwxrwxrwx 0
0
1243665
c:\/PROGRA~1/THEMIC~1/MSNVER.TXT
71440 .a. -/-rwxrwxrwx 0
0
342931
c:\/WINDOWS/SYSTEM/RSABASE.DLL
5532 .a. -/-rwxrwxrwx 0
0
342810
c:\/WINDOWS/SYSTEM/STDOLE.TLB
9719 .a. -/-rwxrwxrwx 0
0
343588
c:\/WINDOWS/COMMAND/ANSI.SYS
13669 .a. -/-rwxrwxrwx 0
0
342829
c:\/WINDOWS/SYSTEM/EISA.VXD
9216 .a. -/-rwxrwxrwx 0
0
342694
c:\/WINDOWS/SYSTEM/MOSMISC.DLL
Key fingerprint = AF19
2F94 998D FDB5
06E4 A169 4E46
5152FA27
.a. -/-rwxrwxrwx
0 DE3D
0 F8B5
537650
c:\/PROGRA~1/NETMEE~1/MNMALP.EXE
17175 .a. -/-rwxrwxrwx 0
0
343590
c:\/WINDOWS/COMMAND/DISPLAY.SYS
10268 .a. -/-rwxrwxrwx 0
0
368161
c:\/WINDOWS/HELP/UNIMDM.HLP
214048 .a. -/-rwxrwxrwx 0
0
342534
c:\/WINDOWS/SYSTEM/DSKMAINT.DLL
126464 .a. -/-rwxrwxrwx 0
0
537617
c:\/PROGRA~1/NETMEE~1/SOEDPER.DLL
12336 .a. -/-rwxrwxrwx 0
0
342939
c:\/WINDOWS/SYSTEM/TAMAUDIO.DRV
14896 .a. -/-rwxrwxrwx 0
0
342681
c:\/WINDOWS/SYSTEM/SENDMAIL.DLL
11794 .a. -/-rwxrwxrwx 0
0
327726
c:\/WINDOWS/INTERNET.TXT
67696 .a. -/-rwxrwxrwx 0
0
1578
c:\/WINDOWS/SYSBCKUP/MCIAVI.DRV
9801 .a. -rwxrwxrwx 0
0
545807 <part2.img_ARITY.VXD-dead-545807>
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
5584 .a. -/-rwxrwxrwx 0
0
1576
c:\/WINDOWS/SYSBCKUP/MCIOLE.DLL
34566 .a. -/-rwxrwxrwx 0
0
343591
c:\/WINDOWS/COMMAND/KEYBOARD.SYS
643 .a. -/-rwxrwxrwx 0
0
368223
c:\/WINDOWS/HELP/CDPLAYER.CNT
18480 .a. -/-rwxrwxrwx 0
0
342885
c:\/WINDOWS/SYSTEM/WAVEWRAP.DRV
385536 .a. -/-rwxrwxrwx 0
0
342970
c:\/WINDOWS/SYSTEM/RICHED20.DLL
14160 .a. -/-rwxrwxrwx 0
0
342886
c:\/WINDOWS/SYSTEM/SERWAVE.VXD
24895 .a. -/-rwxrwxrwx 0
0
368198
c:\/WINDOWS/HELP/SOUNDREC.HLP
217600 .a. -/-rwxrwxrwx 0
0
1243662
c:\/PROGRA~1/THEMIC~1/SIGNUP.EXE
25600 .a. -/-rwxrwxrwx 0
0
342941
c:\/WINDOWS/SYSTEM/DIALMON.EXE
16384 .a. d/drwxrwxrwx 0
0
327749
c:\/WINDOWS/JAVA
16384 .a. d/drwxrwxrwx 0
0
327756
c:\/WINDOWS/MEDIA
42485 .a. -/-rwxrwxrwx 0
0
327723
c:\/WINDOWS/FAQ.TXT
5684 .a. -/-rwxrwxrwx 0
0
342677
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/WINDOWS/SYSTEM/JAVASUP.VXD
4766 .a. -/-rwxrwxrwx 0
0
1306635
c:\/PROGRA~1/INTERN~1/RALICENS.TXT
829 .a. -rwxrwxrwx 0
0
551946 <part2.img-_CI.HTdead-551946>
13760 .a. -/-rwxrwxrwx 0
0
537627
c:\/PROGRA~1/NETMEE~1/MNMCLP_.DLL
106867 .a. -rwxrwxrwx 0
0
545799 <part2.img_OSMGR.VXD-dead-545799>
95776 .a. -/-rwxrwxrwx 0
0
342956
c:\/WINDOWS/SYSTEM/MCIVISCA.DRV
20901 .a. -/-rwxrwxrwx 0
0
327718
c:\/WINDOWS/CMD640X2.SYS
36144 .a. -/-rwxrwxrwx 0
0
342702
c:\/WINDOWS/SYSTEM/MODEMUI.DLL
16384 .a. d/dr-xr-xr-x 0
0
198668
c:\/WINDOWS/TEMPOR~1/cache3 (CACHE3)
13264 .a. -/-rwxrwxrwx 0
0
685583
c:\/WINDOWS/SYSTEM/IOSUBSYS/AMSINT.MPD
16384 .a. d/d-wx-wx-wx 0
0
327823
c:\/WINDOWS/History (HISTORY)
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
9056 .a. -/-rwxrwxrwx 0
0
327880
c:\/WINDOWS/TRACERT.EXE
130048 .a. -/-rwxrwxrwx 0
0
342938
c:\/WINDOWS/SYSTEM/WINTRUST.DLL
109424 .a. -/-rwxrwxrwx 0
0
1571
c:\/WINDOWS/SYSBCKUP/AVIFILE.DLL
3632 .a. -/-rwxrwxrwx 0
0
327765
c:\/WINDOWS/WINVER.EXE
5532 .a. -/-rwxrwxrwx 0
0
1550
c:\/WINDOWS/SYSBCKUP/STDOLE.TLB
68608 .a. -/-rwxrwxrwx 0
0
342788
c:\/WINDOWS/SYSTEM/ULCLIENT.DLL
48128 .a. -/-rwxrwxrwx 0
0
327791
c:\/WINDOWS/FILEXFER.EXE
5291 .a. -/-rwxrwxrwx 0
0
537624
c:\/PROGRA~1/NETMEE~1/MNMVDD.386
2100 .a. -/-rwxrwxrwx 0
0
327760
c:\/WINDOWS/DBLBUFF.SYS
8274 .a. -/-rwxrwxrwx 0
0
2172933
c:\/WINDOWS/CURSORS/APPSTART.ANI
105984 .a. -/-rwxrwxrwx 0
0
327693
c:\/WINDOWS/REGEDIT.EXE
24099 .a. -/-rwxrwxrwx 0
0
327883
c:\/WINDOWS/TELNET.HLP
22233 .a. -/-rwxrwxrwx 0
0
368171
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/WINDOWS/HELP/COMMON.HLP
31120 .a. -/-rwxrwxrwx 0
0
342801
c:\/WINDOWS/SYSTEM/COMPOBJ.DLL
23377 .a. -/-rwxrwxrwx 0
0
327725
c:\/WINDOWS/HARDWARE.TXT
69886 .a. -/-rwxrwxrwx 0
0
343564
c:\/WINDOWS/COMMAND/EDIT.COM
36352 .a. -/-rwxrwxrwx 0
0
327762
c:\/WINDOWS/QFECHECK.EXE
96256 .a. -/-rwxrwxrwx 0
0
342921
c:\/WINDOWS/SYSTEM/INETCFG.DLL
19566 .a. -rwxrwxrwx 0
0
545811 <part2.img_CACHE.VXD-dead-545811>
126056 .a. -/-rwxrwxrwx 0
0
765994
c:\/WINDOWS/FONTS/IMPACT.TTF
13912 .a. -/-rwxrwxrwx 0
0
545800
c:\/WINDOWS/SYSTEM/VMM32/_OSNET.VXD (deleted)
35112 .a. -rwxrwxrwx 0
0
545824 <part2.img_XDLDR.VXD-dead-545824>
16384 .a. d/dr-xr-xr-x 0
0
198662
c:\/WINDOWS/TEMPOR~1/cache1 (CACHE1)
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
13905 .a. -rwxrwxrwx 0
0
545806 <part2.img_AGESWAP.VXD-dead-545806>
18448 .a. -/-rwxrwxrwx 0
0
537642
c:\/PROGRA~1/NETMEE~1/MNMTDDM_.DLL
147968 .a. -/-rwxrwxrwx 0
0
327752
c:\/WINDOWS/MPLAYER.EXE
20554 .a. -/-rwxrwxrwx 0
0
343566
c:\/WINDOWS/COMMAND/DEBUG.EXE
65 .a. -/-r-xr-xr-x 0
0
212486
c:\/WINDOWS/HISTORY/desktop.ini (DESKTOP.INI)
33371 .a. -/-rwxrwxrwx 0
0
327810
c:\/WINDOWS/NBTSTAT.EXE
829 .a. -/-rwxrwxrwx 0
0
551945
c:\/PROGRA~1/ACCESS~1/HYPERT~1/MCI Mail.ht (MCIMAI~1.HT)
16384 .a. -/-rwxrwxrwx 0
0
327777
c:\/WINDOWS/WELCOME.EXE
22 .a. -/-r-xr-xr-x 0
0
8
c:\/MSDOS.--59980 .a. -/-rwxrwxrwx 0
0
1201164
c:\/WINDOWS/SYSTEM/COLOR/MNP22G15.ICM
36352 .a. -/-rwxrwxrwx 0
0
327771
c:\/WINDOWS/FONTVIEW.EXE
4208 .a. -/-rwxrwxrwx 0
0
1555
c:\/WINDOWS/SYSBCKUP/STORAGE.DLL
70144 .a. -/-rwxrwxrwx 0
0
342786
c:\/WINDOWS/SYSTEM/NAC.DLL
Key fingerprint = AF19
FA27
2F94 998D FDB5
06E4 A169 4E46
16384
.a. d/drwxrwxrwx
0 DE3D
0 F8B5
327713
c:\/WINDOWS/SendTo (SENDTO)
10026 .a. -/-rwxrwxrwx 0
0
537623
c:\/PROGRA~1/NETMEE~1/RINGIN.WAV
107131 .a. -rwxrwxrwx 0
0
545831 <part2.img_DD.VXD-dead-545831>
68880 .a. -/-rwxrwxrwx 0
0
537626
c:\/PROGRA~1/NETMEE~1/MNMCCL_.DLL
27277 .a. -/-rwxrwxrwx 0
0
368183
c:\/WINDOWS/HELP/CONNECT.HLP
20992 .a. -/-rwxrwxrwx 0
0
1306634
c:\/PROGRA~1/INTERN~1/REGEXP.EXE
25558 .a. -/-rwxrwxrwx 0
0
368148
c:\/WINDOWS/HELP/WAB.HLP
109229 .a. -/-rwxrwxrwx 0
0
327892
c:\/WINDOWS/NET.MSG
1289 .a. -/-rwxrwxrwx 0
0
368209
c:\/WINDOWS/HELP/INT-MAIL.CNT
82092 .a. -/-rwxrwxrwx 0
0
765966
c:\/WINDOWS/FONTS/COURI.TTF
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
25154 .a. -/-rwxrwxrwx 0
0
342550
c:\/WINDOWS/SYSTEM/ENABLE2.VXD
202 .a. -/-rwxrwxrwx 0
0
368207
c:\/WINDOWS/HELP/AMOVIE.CNT
2000 .a. -/-rwxrwxrwx 0
0
342904
c:\/WINDOWS/SYSTEM/WINNET16.DLL
103 .a. -/-rwxrwxrwx 0
0
368158
c:\/WINDOWS/HELP/APMCP.CNT
30 .a. -/-rwxrwxrwx 0
0
2257932
c:\/WINDOWS/SHELLNEW/WORDPFCT.WPD
4464 .a. -/-rwxrwxrwx 0
0
537651
c:\/PROGRA~1/NETMEE~1/MNMNET.EXE
97 .a. -/-rwxrwxrwx 0
0
368212
c:\/WINDOWS/HELP/UPDATE.CNT
24030 .a. -/-rwxrwxrwx 0
0
327730
c:\/WINDOWS/NETWORK.TXT
116160 .a. -/-rwxrwxrwx 0
0
342682
c:\/WINDOWS/SYSTEM/INTRINSC.OCX
16614 .a. -/-rwxrwxrwx 0
0
368187
c:\/WINDOWS/HELP/PSSPOS.HLP
8651 .a. -/-rwxrwxrwx 0
0
368157
c:\/WINDOWS/HELP/AUDIOCDC.HLP
4208 .a. -/-rwxrwxrwx 0
0
342808
c:\/WINDOWS/SYSTEM/STORAGE.DLL
436736 .a. -/-rwxrwxrwx 0
0
327742
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/WINDOWS/WANGIMG.EXE
12192 .a. -/-rwxrwxrwx 0
0
342882
c:\/WINDOWS/SYSTEM/UMDMXFRM.DLL
73984 .a. -/-rwxrwxrwx 0
0
765960
c:\/WINDOWS/FONTS/ARIALBI.TTF
641536 .a. -/-rwxrwxrwx 0
0
537621
c:\/PROGRA~1/NETMEE~1/WB32.EXE
2416 .a. -/-rwxrwxrwx 0
0
1563
c:\/WINDOWS/SYSBCKUP/WINHELP.EXE
63200 .a. -/-rwxrwxrwx 0
0
537628
c:\/PROGRA~1/NETMEE~1/MNMCLPM_.DLL
24576 .a. -/-rwxrwxrwx 0
0
342619
c:\/WINDOWS/SYSTEM/AWCODC32.DLL
490 .a. -/-rwxrwxrwx 0
0
1225223
c:\/PROGRA~1/ICW-IN~1/ICWX25A.DUN
21975 .a. -/-rwxrwxrwx 0
0
343576
c:\/WINDOWS/COMMAND/DISKCOPY.COM
16384 .a. d/drwxrwxrwx 0
0
3284486
c:\/WINDOWS/STARTM~1/PROGRAMS/Accessories (ACCESS~1)
22596 .a. -/-r-xr-xr-x 0
0
15
c:\/BOOTLOG.PRV
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
16384 .a. d/drwxrwxrwx 0
0
327766
c:\/WINDOWS/CURSORS
94720 .a. -/-rwxrwxrwx 0
0
342688
c:\/WINDOWS/SYSTEM/DUNZIPNT.DLL
56832 .a. -/-rwxrwxrwx 0
0
342663
c:\/WINDOWS/SYSTEM/JAVART.DLL
61200 .a. -/-rwxrwxrwx 0
0
342915
c:\/WINDOWS/SYSTEM/HLINK.DLL
6288 .a. -/-rwxrwxrwx 0
0
2885641
c:\/PROGRA~1/ONLINE~1/AT&T/EARTH.GIF
508 .a. -/-rwxrwxrwx 0
0
368164
c:\/WINDOWS/HELP/CALC.CNT
24064 .a. -/-rwxrwxrwx 0
0
342814
c:\/WINDOWS/SYSTEM/OLESVR.DLL
415236 .a. -/---x--x--x 0
0
20
c:\/SYSTEM.1ST
77312 .a. -/-rwxrwxrwx 0
0
342641
c:\/WINDOWS/SYSTEM/AWFXEX32.EXE
601 .a. -/-rwxrwxrwx 0
0
342951
c:\/WINDOWS/SYSTEM/NORWEG.TRN
21429 .a. -rwxrwxrwx 0
0
545836 <part2.img_IOS.VXD-dead-545836>
1978 .a. -/-rwxrwxrwx 0
0
368137
c:\/WINDOWS/HELP/MSPAINT.CNT
59564 .a. -/-rwxrwxrwx 0
0
1201160
c:\/WINDOWS/SYSTEM/COLOR/MNB22G21.ICM
Key fingerprint = AF19
FA27
2F94 998D FDB5
06E4 A169 4E46
39936
.a. -/-rwxrwxrwx
0 DE3D
0 F8B5
342823
c:\/WINDOWS/SYSTEM/ULSVC.EXE
11040 .a. -/-rwxrwxrwx 0
0
537633
c:\/PROGRA~1/NETMEE~1/MNMGDC_.DLL
5408 .a. -/-rwxrwxrwx 0
0
342544
c:\/WINDOWS/SYSTEM/RNASETUP.DLL
104960 .a. -/-rwxrwxrwx 0
0
342630
c:\/WINDOWS/SYSTEM/OIFIL400.DLL
7168 .a. -/-rwxrwxrwx 0
0
342649
c:\/WINDOWS/SYSTEM/STEM0409.DLL
48640 .a. -/-rwxrwxrwx 0
0
342584
c:\/WINDOWS/SYSTEM/INTL.CPL
10401 .a. -rwxrwxrwx 0
0
545825 <part2.img_OMBUFF.VXD-dead-545825>
22618 .a. -rwxrwxrwx 0
0
545828 <part2.img_PD.VXD-dead-545828>
90521 .a. -rwxrwxrwx 0
0
545837 <part2.img_ONFIGMG.VXD-dead-545837>
7632 .a. -/-rwxrwxrwx 0
0
342881
c:\/WINDOWS/SYSTEM/TAPIINI.EXE
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
54497 .a. -rwxrwxrwx 0
0
545830 <part2.img_WIN32.VXD-dead-545830>
89680 .a. -/-r-xr-xr-x 0
0
765984
c:\/WINDOWS/FONTS/SSERIFF.FON
19968 .a. -/-rwxrwxrwx 0
0
342580
c:\/WINDOWS/SYSTEM/SERENUM.VXD
965904 .a. -/-rwxrwxrwx 0
0
342737
c:\/WINDOWS/SYSTEM/MSJT3032.DLL
46740 .a. -/-rwxrwxrwx 0
0
545820
c:\/WINDOWS/SYSTEM/VMM32/_PICD.VXD (deleted)
253952 .a. -/-rwxrwxrwx 0
0
1547
c:\/WINDOWS/SYSBCKUP/MSVCRT20.DLL
1517 .a. -/-rwxrwxrwx 0
0
368213
c:\/WINDOWS/HELP/W_IR.CNT
30807 .a. -/-rwxrwxrwx 0
0
368134
c:\/WINDOWS/HELP/NDSNP.HLP
26624 .a. -/-r-xr-xr-x 0
0
551439
c:\/PROGRA~1/ACCESS~1/pcximp32.flt (PCXIMP32.FLT)
4896 .a. -/-rwxrwxrwx 0
0
327758
c:\/WINDOWS/SCANDSKW.EXE
205072 .a. -/-rwxrwxrwx 0
0
342618
c:\/WINDOWS/SYSTEM/WAB32.DLL
194 .a. -/-rwxrwxrwx 0
0
327863 c:\/WINDOWS/Blue
Rivets.bmp (BLUERI~1.BMP)
725184 .a. -/-rwxrwxrwx 0
0
342994
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/WINDOWS/SYSTEM/MAPI32.DLL
183296 .a. -/-rwxrwxrwx 0
0
551434
c:\/PROGRA~1/ACCESS~1/WORDPAD.EXE
509 .a. -/-rwxrwxrwx 0
0
368165
c:\/WINDOWS/HELP/MOUSE.CNT
16384 .a. d/drwxrwxrwx 0
0
327747
c:\/WINDOWS/DESKTOP
68096 .a. -/-r-xr-xr-x 0
0
1243668
c:\/PROGRA~1/THEMIC~1/ENGCT.EXE
127488 .a. -/-rwxrwxrwx 0
0
342966
c:\/WINDOWS/SYSTEM/ISCTRLS.OCX
16384 .a. d/drwxrwxrwx 0
0
3285023
c:\/WINDOWS/STARTM~1/PROGRAMS/ACCESS~1/Multimedia (MULTIM~1)
1042 .a. -/-rwxrwxrwx 0
0
368192
c:\/WINDOWS/HELP/MPLAYER.CNT
82944 .a. -/-rwxrwxrwx 0
0
1559
c:\/WINDOWS/SYSBCKUP/OLECLI.DLL
473 .a. -/-rwxrwxrwx 0
0
2885655
c:\/PROGRA~1/ONLINE~1/AT&T/HEADLINE.HTM
177856 .a. -/-rwxrwxrwx 0
0
342809
c:\/WINDOWS/SYSTEM/TYPELIB.DLL
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
13456 .a. -/-rwxrwxrwx 0
0
1543
c:\/WINDOWS/SYSBCKUP/WFM0200.ACV
6144 .a. -/-rwxrwxrwx 0
0
342815
c:\/WINDOWS/SYSTEM/OLESVR32.DLL
11904 .a. -/-rwxrwxrwx 0
0
342884
c:\/WINDOWS/SYSTEM/SERWVDRV.DRV
16384 .a. d/d-wx-wx-wx 0
0
327821
c:\/WINDOWS/Temporary Internet Files (TEMPOR~1)
20480 .a. -/-rwxrwxrwx 0
0
342634
c:\/WINDOWS/SYSTEM/OISSQ400.DLL
6624 .a. -/-rwxrwxrwx 0
0
342828
c:\/WINDOWS/SYSTEM/PCIMP.PCI
153088 .a. -/-rwxrwxrwx 0
0
342680
c:\/WINDOWS/SYSTEM/JGDWMIE.DLL
131 .a. -/-rwxrwxrwx 0
0
342874
c:\/WINDOWS/SYSTEM/3VARADDR.TXT
47104 .a. -/-rwxrwxrwx 0
0
342783
c:\/WINDOWS/SYSTEM/MSCONF.DLL
15104 .a. -/-rwxrwxrwx 0
0
342945
c:\/WINDOWS/SYSTEM/SIGRES.EXE
10352 .a. -/-rwxrwxrwx 0
0
685584
c:\/WINDOWS/SYSTEM/IOSUBSYS/NCRC710.MPD
10736 .a. -/-rwxrwxrwx 0
0
343018
c:\/WINDOWS/SYSTEM/RPCLTS5.DLL
135 .a. -/-rwxrwxrwx 0
0
368163
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/WINDOWS/HELP/PINGNUM.BAT
228624 .a. -/-rwxrwxrwx 0
0
342917
c:\/WINDOWS/SYSTEM/HTMLEDIT.DLL
99376 .a. -/-rwxrwxrwx 0
0
342918
c:\/WINDOWS/SYSTEM/IMAGEHLP.DLL
26608 .a. -/-rwxrwxrwx 0
0
343012
c:\/WINDOWS/SYSTEM/PMSPL.DLL
59904 .a. -/-rwxrwxrwx 0
0
342723
c:\/WINDOWS/SYSTEM/AVICAP32.DLL
419 .a. -/-rwxrwxrwx 0
0
1194508
c:\/WINDOWS/DESKTOP/ONLINE~1/Setup WOW! from CompuServe.lnk
(SETUPW~1.LNK)
16384 .a. d/drwxrwxrwx 0
0
327688
c:\/WINDOWS/HELP
43008 .a. -/-rwxrwxrwx 0
0
343011
c:\/WINDOWS/SYSTEM/NWPP32.DLL
17920 .a. -/-rwxrwxrwx 0
0
537613
c:\/PROGRA~1/NETMEE~1/MSMCSTCP.DLL
54752 .a. -/-rwxrwxrwx 0
0
1545
c:\/WINDOWS/SYSBCKUP/SB16SND.DRV
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
12144 .a. -/-rwxrwxrwx 0
0
342851
c:\/WINDOWS/SYSTEM/VER.DLL
2629 .a. -/-rwxrwxrwx 0
0
2885649
c:\/PROGRA~1/ONLINE~1/AT&T/SIGNBTN.GIF
470 .a. -/-rwxrwxrwx 0
0
327858
c:\/WINDOWS/Houndstooth.bmp (HOUNDS~1.BMP)
8704 .a. -/-rwxrwxrwx 0
0
368146
c:\/WINDOWS/HELP/DISPLAY.HLP
9056 .a. -/-rwxrwxrwx 0
0
342713
c:\/WINDOWS/SYSTEM/WFM0202.ACV
6010 .a. -/-rwxrwxrwx 0
0
2885657
c:\/PROGRA~1/ONLINE~1/AT&T/WNTEXT.HTM
47506 .a. -/-rwxrwxrwx 0
0
368180
c:\/WINDOWS/HELP/31USERS.HLP
19193 .a. -/-rwxrwxrwx 0
0
368143
c:\/WINDOWS/HELP/DIALER.HLP
82432 .a. -/-rwxrwxrwx 0
0
342664
c:\/WINDOWS/SYSTEM/JIT.DLL
77312 .a. -/-rwxrwxrwx 0
0
327739
c:\/WINDOWS/TWAIN_32.DLL
1148176 .a. -/-rwxrwxrwx 0
0
342617
c:\/WINDOWS/SYSTEM/MAILNEWS.DLL
468 .a. -/-rwxrwxrwx 0
0
1225225
c:\/PROGRA~1/ICW-IN~1/ICWX25C.DUN
38912 .a. -/-rwxrwxrwx 0
0
327881
Key
fingerprint
=
AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4 A169 4E46
c:\/WINDOWS/WINIPCFG.EXE
125495 .a. -/-rwxrwxrwx 0
0
327757
c:\/WINDOWS/EMM386.EXE
2474 .a. -/-rwxrwxrwx 0
0
342533
c:\/WINDOWS/SYSTEM/DLCNDI.DLL
53248 .a. -/-rwxrwxrwx 0
0
537637
c:\/PROGRA~1/NETMEE~1/MNMNET_.DLL
17773 .a. -/-rwxrwxrwx 0
0
327719
c:\/WINDOWS/CONFIG.TXT
24576 .a. -/-rwxrwxrwx 0
0
327694
c:\/WINDOWS/ACCSTAT.EXE
20992 .a. -/-rwxrwxrwx 0
0
342920
c:\/WINDOWS/SYSTEM/INETAB32.DLL
103992 .a. -/-rwxrwxrwx 0
0
765992
c:\/WINDOWS/FONTS/ARIBLK.TTF
544 .a. -/-rwxrwxrwx 0
0
368179
c:\/WINDOWS/HELP/REGEDIT.CNT
56688 .a. -/-rwxrwxrwx 0
0
537632
c:\/PROGRA~1/NETMEE~1/MNMFT_.DLL
57328 .a. -/-rwxrwxrwx 0
0
342803
c:\/WINDOWS/SYSTEM/OLE2CONV.DLL
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
3115 .a. -/-rwxrwxrwx 0
0
2885640
c:\/PROGRA~1/ONLINE~1/AT&T/CUSTCARE.GIF
9004 .a. -/-rwxrwxrwx 0
0
342720
c:\/WINDOWS/SYSTEM/WFM0202A.CSP
23956 .a. -/-rwxrwxrwx 0
0
545826
c:\/WINDOWS/SYSTEM/VMM32/_CD.VXD (deleted)
150528 .a. -/-rwxrwxrwx 0
0
342639
c:\/WINDOWS/SYSTEM/XFILEXR.DLL
12112 .a. -/-rwxrwxrwx 0
0
1564
c:\/WINDOWS/SYSBCKUP/TOOLHELP.DLL
30208 .a. -/-rwxrwxrwx 0
0
342687
c:\/WINDOWS/SYSTEM/CCAPI.DLL
16384 .a. d/drwxrwxrwx 0
0
342549
c:\/WINDOWS/SYSTEM/VMM32
16384 .a. drwxrwxrwx 0
0
1193994 <part2.img_$!$.ME-dead-1193994>
38351 .a. -/-rwxrwxrwx 0
0
342942
c:\/WINDOWS/SYSTEM/DRWATSON.EXE
23 .a. -/-rwxrwxrwx 0
0
2885659
c:\/PROGRA~1/ONLINE~1/AT&T/CANCEL.INS
41844 .a. -/-rwxrwxrwx 0
0
545814
c:\/WINDOWS/SYSTEM/VMM32/_DMAD.VXD (deleted)
62138 .a. -/-rwxrwxrwx 0
0
368189
c:\/WINDOWS/HELP/MSNINT.HLP
493 .a. -/-rwxrwxrwx 0
0
13
c:\/NETLOG.TXT
Key fingerprint = AF19
FA27
2F94
998D
FDB5
DE3D
F8B5
06E4
25088 .a. -/-rwxrwxrwx 0
0
342635 A169 4E46
c:\/WINDOWS/SYSTEM/OITWA400.DLL
403 .a. -/-rwxrwxrwx 0
0
368229
c:\/WINDOWS/HELP/WINPOPUP.CNT
41420 .a. -/-rwxrwxrwx 0
0
368153
c:\/WINDOWS/HELP/WANGIMG.HLP
27196 .a. -/-rwxrwxrwx 0
0
545838
c:\/WINDOWS/SYSTEM/VMM32/_POOLER.VXD (deleted)
800 .a. -/-rwxrwxrwx 0
0
327887
c:\/WINDOWS/PROTOCOL
2118 .a. -/-rwxrwxrwx 0
0
327852
c:\/WINDOWS/Bubbles.bmp (BUBBLES.BMP)
27136 .a. -/-rwxrwxrwx 0
0
342622
c:\/WINDOWS/SYSTEM/AWKRNL32.DLL
82112 .a. -/-rwxrwxrwx 0
0
342926
c:\/WINDOWS/SYSTEM/MSRATING.DLL
1173 .a. -/-rwxrwxrwx 0
0
2885656
c:\/PROGRA~1/ONLINE~1/AT&T/WNMENU.HTM
78848 .a. -/-rwxrwxrwx 0
0
342923
c:\/WINDOWS/SYSTEM/INLOADER.DLL
© SANS Institute 2004,
As part of GIAC practical repository.
Author retains full rights.
©
SA
NS
In
sti
tu
te
20
04
,A
ut
ho
rr
eta
ins
fu
ll r
igh
ts.
190 .a. -/-rwxrwxrwx 0
0
327705
c:\/WINDOWS/Circles.bmp (CIRCLES.BMP)
55808 .a. -/-rwxrwxrwx 0
0
342554
c:\/WINDOWS/SYSTEM/MFCD30.DLL
5422 .a. -/-rwxrwxrwx 0
0
327727
c:\/WINDOWS/MOUSE.TXT
59564 .a. -/-rwxrwxrwx 0
0
1201158
c:\/WINDOWS/SYSTEM/COLOR/MNB22G15.ICM
90521 .a. -/-rwxrwxrwx 0
0
545837
c:\/WINDOWS/SYSTEM/VMM32/_ONFIGMG.VXD (deleted)
4313 .a. -/-rwxrwxrwx 0
0
342606
c:\/WINDOWS/SYSTEM/REDIRECT.MOD
32967 .a. -/-rwxrwxrwx 0
0
545827
c:\/WINDOWS/SYSTEM/VMM32/_COMM.VXD (deleted)
6824 .a. -/-rwxrwxrwx 0
0
342792
c:\/WINDOWS/SYSTEM/CP_20866.NLS
43620 .a. -/-rwxrwxrwx 0
0
368140
c:\/WINDOWS/HELP/MSPAINT.HLP
23776 .a. -/-rwxrwxrwx 0
0
327811
c:\/WINDOWS/NETSTAT.EXE
5312 .a. -/-rwxrwxrwx 0
0
342894
c:\/WINDOWS/SYSTEM/NETCPL.CPL
17993 .a. -rwxrwxrwx 0
0
545802 <p