Sample File: MD5 hash: 1221ac9d607af73c65fd6c62bec3d249 SHA1 hash: 518d5a0a8025147b9e29821bccdaf3b42c0d01db SHA256 hash: 3c7d9ecd35b21a2a8fac7cce4fdb3e11c1950d5a02a0c0b369f4082acf00bf9a Filename(s): 3c7d9ecd35b21a2a8fac7cce4fdb3e11c1950d5a02a0c0b369f4082acf00bf9a.exe Filetype: Windows Exe (x86-32) Mutex IOCs: 䩈㹇䨼䙫套杉極桯瑧㤸㜵朳橵畨㝹常⠪⠦♞⑞ Registry Key IOCs: HKEY_CURRENT_USER\Software\Microsoft\Command Processor HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\System HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor IP IOCs: - None - URL IOCs: - None - File IOCs: Filenames: C:\BOOTNXT C:\BOOTNXT.[Sepsis@protonmail.com].SEPSIS C:\BOOTSECT.BAK C:\Boot\BCD C:\Boot\BCD.LOG C:\Boot\BCD.LOG1 C:\Boot\BCD.LOG1.[Sepsis@protonmail.com].SEPSIS C:\Boot\BCD.LOG2 C:\Boot\BCD.LOG2.[Sepsis@protonmail.com].SEPSIS C:\Boot\BOOTSTAT.DAT C:\Boot\BOOTSTAT.DAT.[Sepsis@protonmail.com].SEPSIS C:\Boot\Fonts\chs_boot.ttf C:\Boot\Fonts\cht_boot.ttf C:\Boot\Fonts\jpn_boot.ttf C:\Boot\Fonts\kor_boot.ttf C:\Boot\Fonts\malgun_boot.ttf C:\Boot\Fonts\malgunn_boot.ttf C:\Boot\Fonts\meiryo_boot.ttf C:\Boot\Fonts\meiryon_boot.ttf C:\Boot\Fonts\msjh_boot.ttf C:\Boot\Fonts\msjhn_boot.ttf C:\Boot\Fonts\msyh_boot.ttf C:\Boot\Fonts\msyhn_boot.ttf C:\Boot\Fonts\segmono_boot.ttf C:\Boot\Fonts\segoe_slboot.ttf C:\Boot\Fonts\segoen_slboot.ttf C:\Boot\Fonts\wgl4_boot.ttf C:\Boot\Resources\bootres.dll C:\Boot\Resources\en-US\bootres.dll.mui C:\Boot\bg-BG\bootmgr.exe.mui C:\Boot\cs-CZ\bootmgr.exe.mui C:\Boot\cs-CZ\memtest.exe.mui C:\Boot\da-DK\bootmgr.exe.mui C:\Boot\da-DK\memtest.exe.mui C:\Boot\de-DE\bootmgr.exe.mui C:\Boot\de-DE\memtest.exe.mui C:\Boot\el-GR\bootmgr.exe.mui C:\Boot\el-GR\memtest.exe.mui C:\Boot\en-GB\bootmgr.exe.mui C:\Boot\en-US\bootmgr.exe.mui C:\Boot\en-US\memtest.exe.mui C:\Boot\es-ES\bootmgr.exe.mui C:\Boot\es-ES\memtest.exe.mui C:\Boot\et-EE\bootmgr.exe.mui C:\Boot\fi-FI\bootmgr.exe.mui C:\Boot\fi-FI\memtest.exe.mui C:\Boot\fr-FR\bootmgr.exe.mui C:\Boot\fr-FR\memtest.exe.mui C:\Boot\hr-HR\bootmgr.exe.mui C:\Boot\hu-HU\bootmgr.exe.mui C:\Boot\hu-HU\memtest.exe.mui C:\Boot\it-IT\bootmgr.exe.mui C:\Boot\it-IT\memtest.exe.mui C:\Boot\ja-JP\bootmgr.exe.mui C:\Boot\ja-JP\memtest.exe.mui C:\Boot\ko-KR\bootmgr.exe.mui C:\Boot\ko-KR\memtest.exe.mui C:\Boot\lt-LT\bootmgr.exe.mui C:\Boot\lv-LV\bootmgr.exe.mui C:\Boot\memtest.exe C:\Boot\nb-NO\bootmgr.exe.mui C:\Boot\nb-NO\memtest.exe.mui C:\Boot\nl-NL\bootmgr.exe.mui C:\Boot\nl-NL\memtest.exe.mui C:\Boot\pl-PL\bootmgr.exe.mui C:\Boot\pl-PL\memtest.exe.mui C:\Boot\pt-BR\bootmgr.exe.mui C:\Boot\pt-BR\memtest.exe.mui C:\Boot\pt-PT\bootmgr.exe.mui C:\Boot\pt-PT\memtest.exe.mui C:\Boot\qps-ploc\bootmgr.exe.mui C:\Boot\qps-ploc\memtest.exe.mui C:\Boot\ro-RO\bootmgr.exe.mui C:\Boot\ru-RU\bootmgr.exe.mui C:\Boot\ru-RU\memtest.exe.mui C:\Boot\sk-SK\bootmgr.exe.mui C:\Boot\sl-SI\bootmgr.exe.mui C:\Boot\sr-Latn-CS\bootmgr.exe.mui C:\Boot\sr-Latn-RS\bootmgr.exe.mui C:\Boot\sv-SE\bootmgr.exe.mui C:\Boot\sv-SE\memtest.exe.mui C:\Boot\tr-TR\bootmgr.exe.mui C:\Boot\tr-TR\memtest.exe.mui C:\Boot\uk-UA\bootmgr.exe.mui C:\Boot\zh-CN\bootmgr.exe.mui C:\Boot\zh-CN\memtest.exe.mui C:\Boot\zh-HK\bootmgr.exe.mui C:\Boot\zh-HK\memtest.exe.mui C:\Boot\zh-TW\bootmgr.exe.mui C:\Boot\zh-TW\memtest.exe.mui C:\Program Files\Common Files\DESIGNER\MSADDNDR.OLB C:\Program Files\Common Files\DESIGNER\MSADDNDR.OLB.[Sepsis@protonmail.com].SEPSIS C:\Program Files\Common Files\microsoft shared\DW\DBGHELP.DLL C:\Program Files\Common Files\microsoft shared\DW\DBGHELP.DLL.[Sepsis@protonmail.com].SEPSIS C:\Program Files\Common Files\microsoft shared\DW\DW20.EXE C:\Program Files\Common Files\microsoft shared\DW\DW20.EXE.[Sepsis@protonmail.com].SEPSIS C:\Program Files\Common Files\microsoft shared\DW\DWTRIG20.EXE C:\Program Files\Common Files\microsoft shared\DW\DWTRIG20.EXE.[Sepsis@protonmail.com].SEPSIS C:\Program Files\Common Files\microsoft shared\EQUATION\1033\EEINTL.DLL C:\Program Files\Common Files\microsoft shared\EQUATION\1033\EEINTL.DLL.[Sepsis@protonmail.com].SEPSIS C:\Program Files\Common Files\microsoft shared\EQUATION\EQNEDT32.CNT C:\Program Files\Common Files\microsoft shared\EQUATION\EQNEDT32.CNT.[Sepsis@protonmail.com].SEPSIS C:\Program Files\Common Files\microsoft shared\EQUATION\EQNEDT32.EXE C:\Program Files\Common Files\microsoft shared\EQUATION\EQNEDT32.EXE.[Sepsis@protonmail.com].SEPSIS C:\Program Files\Common Files\microsoft shared\EQUATION\EQNEDT32.HLP C:\Program Files\Common Files\microsoft shared\EQUATION\EQNEDT32.HLP.[Sepsis@protonmail.com].SEPSIS C:\Program Files\Common Files\microsoft shared\EQUATION\MTEXTRA.TTF C:\Program Files\Common Files\microsoft shared\EQUATION\MTEXTRA.TTF.[Sepsis@protonmail.com].SEPSIS C:\Program Files\Common Files\microsoft shared\EQUATION\eqnedt32.exe.manifest C:\Program Files\Common Files\microsoft shared\EQUATION\eqnedt32.exe.manifest.[Sepsis@protonmail.com].SEPSIS C:\Program Files\Common Files\microsoft shared\EURO\MSOEURO.DLL C:\Program Files\Common Files\microsoft shared\EURO\MSOEURO.DLL.[Sepsis@protonmail.com].SEPSIS C:\Program Files\Common Files\microsoft shared\Filters\VISFILT.DLL C:\Program Files\Common Files\microsoft shared\Filters\VISFILT.DLL.[Sepsis@protonmail.com].SEPSIS C:\Program Files\Common Files\microsoft shared\Filters\msgfilt.dll C:\Program Files\Common Files\microsoft shared\Filters\msgfilt.dll.[Sepsis@protonmail.com].SEPSIS C:\Program Files\Common Files\microsoft shared\Filters\odffilt.dll C:\Program Files\Common Files\microsoft shared\Filters\odffilt.dll.[Sepsis@protonmail.com].SEPSIS C:\Program Files\Common Files\microsoft shared\Filters\offfiltx.dll C:\Program Files\Common Files\microsoft shared\Filters\offfiltx.dll.[Sepsis@protonmail.com].SEPSIS C:\Program Files\Common Files\microsoft shared\GRPHFLT\EPSIMP32.FLT C:\Program Files\Common Files\microsoft shared\GRPHFLT\EPSIMP32.FLT.[Sepsis@protonmail.com].SEPSIS C:\Program Files\Common Files\microsoft shared\GRPHFLT\GIFIMP32.FLT C:\Program Files\Common Files\microsoft shared\GRPHFLT\GIFIMP32.FLT.[Sepsis@protonmail.com].SEPSIS C:\Program Files\Common Files\microsoft shared\GRPHFLT\JPEGIM32.FLT C:\Program Files\Common Files\microsoft shared\GRPHFLT\JPEGIM32.FLT.[Sepsis@protonmail.com].SEPSIS C:\Program Files\Common Files\microsoft shared\GRPHFLT\MS.EPS C:\Program Files\Common Files\microsoft shared\GRPHFLT\MS.EPS.[Sepsis@protonmail.com].SEPSIS C:\Program Files\Common Files\microsoft shared\GRPHFLT\MS.GIF C:\Program Files\Common Files\microsoft shared\GRPHFLT\MS.GIF.[Sepsis@protonmail.com].SEPSIS C:\Program Files\Common Files\microsoft shared\GRPHFLT\MS.JPG C:\Program Files\Common Files\microsoft shared\GRPHFLT\MS.JPG.[Sepsis@protonmail.com].SEPSIS C:\Program Files\Common Files\microsoft shared\GRPHFLT\MS.PNG C:\Program Files\Common Files\microsoft shared\GRPHFLT\MS.PNG.[Sepsis@protonmail.com].SEPSIS C:\Program Files\Common Files\microsoft shared\GRPHFLT\MS.WPG C:\Program Files\Common Files\microsoft shared\GRPHFLT\MS.WPG.[Sepsis@protonmail.com].SEPSIS C:\Program Files\Common Files\microsoft shared\GRPHFLT\PICTIM32.FLT C:\Program Files\Common Files\microsoft shared\GRPHFLT\PICTIM32.FLT.[Sepsis@protonmail.com].SEPSIS C:\Program Files\Common Files\microsoft shared\GRPHFLT\PNG32.FLT C:\Program Files\Common Files\microsoft shared\GRPHFLT\PNG32.FLT.[Sepsis@protonmail.com].SEPSIS C:\Program Files\Common Files\microsoft shared\GRPHFLT\WPGIMP32.FLT C:\Program Files\Common Files\microsoft shared\GRPHFLT\WPGIMP32.FLT.[Sepsis@protonmail.com].SEPSIS C:\Program Files\Common Files\microsoft shared\Help\Hx.HxC C:\Program Files\Common Files\microsoft shared\Help\Hx.HxC.[Sepsis@protonmail.com].SEPSIS C:\Program Files\Common Files\microsoft shared\Help\Hx.HxT C:\Program Files\Common Files\microsoft shared\Help\Hx.HxT.[Sepsis@protonmail.com].SEPSIS C:\Program Files\Common Files\microsoft shared\Help\HxRuntime.HxS C:\Program Files\Common Files\microsoft shared\Help\HxRuntime.HxS.[Sepsis@protonmail.com].SEPSIS C:\Program Files\Common Files\microsoft shared\Help\Keywords.HxK C:\Program Files\Common Files\microsoft shared\Help\Keywords.HxK.[Sepsis@protonmail.com].SEPSIS C:\Program Files\Common Files\microsoft shared\Help\NamedUrls.HxK C:\Program Files\Common Files\microsoft shared\Help\NamedUrls.HxK.[Sepsis@protonmail.com].SEPSIS C:\Program Files\Common Files\microsoft shared\Help\hxds.dll C:\Program Files\Common Files\microsoft shared\Help\hxds.dll.[Sepsis@protonmail.com].SEPSIS C:\Program Files\Common Files\microsoft shared\Help\itircl55.dll C:\Program Files\Common Files\microsoft shared\Help\itircl55.dll.[Sepsis@protonmail.com].SEPSIS C:\Program Files\Common Files\microsoft shared\Help\msitss55.dll C:\Program Files\Common Files\microsoft shared\Help\msitss55.dll.[Sepsis@protonmail.com].SEPSIS C:\Program Files\Common Files\microsoft shared\MSClientDataMgr\MSCDM.DLL C:\Program Files\Common Files\microsoft shared\MSClientDataMgr\MSCDM.DLL.[Sepsis@protonmail.com].SEPSIS C:\Program Files\Common Files\microsoft shared\MSInfo\en-US\msinfo32.exe.mui C:\Program Files\Common Files\microsoft shared\MSInfo\msinfo32.exe C:\Program Files\Common Files\microsoft shared\OFFICE15\1033\ACEINTL.DLL C:\Program Files\Common Files\microsoft shared\OFFICE15\1033\ACEINTL.DLL.[Sepsis@protonmail.com].SEPSIS C:\Program Files\Common Files\microsoft shared\OFFICE15\1033\ACEODBCI.DLL C:\Program Files\Common Files\microsoft shared\OFFICE15\1033\ACEODBCI.DLL.[Sepsis@protonmail.com].SEPSIS C:\Program Files\Common Files\microsoft shared\OFFICE15\1033\ACEWSTR.DLL C:\Program Files\Common Files\microsoft shared\OFFICE15\1033\ACEWSTR.DLL.[Sepsis@protonmail.com].SEPSIS C:\Program Files\Common Files\microsoft shared\OFFICE15\1033\ADO210.CHM C:\Program Files\Common Files\microsoft shared\OFFICE15\1033\ADO210.CHM.[Sepsis@protonmail.com].SEPSIS C:\Program Files\Common Files\microsoft shared\OFFICE15\1033\ALRTINTL.DLL C:\Program Files\Common Files\microsoft shared\OFFICE15\1033\ALRTINTL.DLL.[Sepsis@protonmail.com].SEPSIS C:\Program Files\Common Files\microsoft shared\OFFICE15\1033\MSOINTL.DLL C:\Program Files\Common Files\microsoft shared\OFFICE15\1033\MSOINTL.DLL.IDX_DLL C:\Program Files\Common Files\microsoft shared\OFFICE15\1033\MSOINTL.DLL.IDX_DLL.[Sepsis@protonmail.com].SEPSIS C:\Program Files\Common Files\microsoft shared\OFFICE15\1033\MSOINTL.DLL.[Sepsis@protonmail.com].SEPSIS C:\Program Files\Common Files\microsoft shared\OFFICE15\1033\MSOINTL.REST.IDX_DLL C:\Program Files\Common Files\microsoft shared\OFFICE15\1033\MSOINTL.REST.IDX_DLL.[Sepsis@protonmail.com].SEPSIS C:\Program Files\Common Files\microsoft shared\OFFICE15\1033\MSSOAPR3.DLL C:\Program Files\Common Files\microsoft shared\OFFICE15\1033\MSSOAPR3.DLL.[Sepsis@protonmail.com].SEPSIS C:\Program Files\Common Files\microsoft shared\OFFICE15\1033\OARPMANR.DLL C:\Program Files\Common Files\microsoft shared\OFFICE15\1033\OARPMANR.DLL.[Sepsis@protonmail.com].SEPSIS C:\Program Files\Common Files\microsoft shared\OFFICE15\1033\OSFINTL.DLL C:\Program Files\Common Files\microsoft shared\OFFICE15\1033\OSFINTL.DLL.[Sepsis@protonmail.com].SEPSIS C:\Program Files\Common Files\microsoft shared\OFFICE15\1033\README.HTM C:\Program Files\Common Files\microsoft shared\OFFICE15\1033\README.HTM.[Sepsis@protonmail.com].SEPSIS C:\Program Files\Common Files\microsoft shared\OFFICE15\1033\osmdp32.msi C:\Program Files\Common Files\microsoft shared\OFFICE15\1033\osmdp32.msi.[Sepsis@protonmail.com].SEPSIS C:\Program Files\Common Files\microsoft shared\OFFICE15\1033\osmdp64.msi C:\Program Files\Common Files\microsoft shared\OFFICE15\1033\osmdp64.msi.[Sepsis@protonmail.com].SEPSIS C:\Program Files\Common Files\microsoft shared\OFFICE15\1033\osmia32.msi C:\Program Files\Common Files\microsoft shared\OFFICE15\1033\osmia32.msi.[Sepsis@protonmail.com].SEPSIS C:\Program Files\Common Files\microsoft shared\OFFICE15\1033\osmia64.msi C:\Program Files\Common Files\microsoft shared\OFFICE15\1033\osmia64.msi.[Sepsis@protonmail.com].SEPSIS C:\Program Files\Common Files\microsoft shared\OFFICE15\1033\xlsrvintl.dll C:\Program Files\Common Files\microsoft shared\OFFICE15\1033\xlsrvintl.dll.[Sepsis@protonmail.com].SEPSIS C:\Program Files\Common Files\microsoft shared\OFFICE15\ACECORE.DLL C:\Program Files\Common Files\microsoft shared\OFFICE15\ACECORE.DLL.[Sepsis@protonmail.com].SEPSIS C:\Program Files\Common Files\microsoft shared\OFFICE15\ACEDAO.DLL C:\Program Files\Common Files\microsoft shared\OFFICE15\ACEDAO.DLL.[Sepsis@protonmail.com].SEPSIS C:\Program Files\Common Files\microsoft shared\OFFICE15\ACEERR.DLL C:\Program Files\Common Files\microsoft shared\OFFICE15\ACEERR.DLL.[Sepsis@protonmail.com].SEPSIS C:\Program Files\Common Files\microsoft shared\OFFICE15\ACEES.DLL C:\Program Files\Common Files\microsoft shared\OFFICE15\ACEES.DLL.[Sepsis@protonmail.com].SEPSIS C:\Program Files\Common Files\microsoft shared\OFFICE15\ACEEXCH.DLL C:\Program Files\Common Files\microsoft shared\OFFICE15\ACEEXCH.DLL.[Sepsis@protonmail.com].SEPSIS C:\Program Files\Common Files\microsoft shared\OFFICE15\ACEEXCL.DLL C:\Program Files\Common Files\microsoft shared\OFFICE15\ACEEXCL.DLL.[Sepsis@protonmail.com].SEPSIS C:\Program Files\Common Files\microsoft shared\OFFICE15\ACEODBC.DLL C:\Program Files\Common Files\microsoft shared\OFFICE15\ACEODBC.DLL.[Sepsis@protonmail.com].SEPSIS C:\Program Files\Common Files\microsoft shared\OFFICE15\ACEODEXL.DLL C:\Program Files\Common Files\microsoft shared\OFFICE15\ACEODEXL.DLL.[Sepsis@protonmail.com].SEPSIS C:\Program Files\Common Files\microsoft shared\OFFICE15\ACEODTXT.DLL C:\Program Files\Common Files\microsoft shared\OFFICE15\ACEODTXT.DLL.[Sepsis@protonmail.com].SEPSIS C:\Program Files\Common Files\microsoft shared\OFFICE15\ACEOLEDB.DLL C:\Program Files\Common Files\microsoft shared\OFFICE15\ACEOLEDB.DLL.[Sepsis@protonmail.com].SEPSIS C:\Program Files\Common Files\microsoft shared\OFFICE15\ACETXT.DLL C:\Program Files\Common Files\microsoft shared\OFFICE15\ACETXT.DLL.[Sepsis@protonmail.com].SEPSIS C:\Program Files\Common Files\microsoft shared\OFFICE15\ACEWDAT.DLL C:\Program Files\Common Files\microsoft shared\OFFICE15\ACEWDAT.DLL.[Sepsis@protonmail.com].SEPSIS C:\Program Files\Common Files\microsoft shared\OFFICE15\ACEWSS.DLL C:\Program Files\Common Files\microsoft shared\OFFICE15\ACEWSS.DLL.[Sepsis@protonmail.com].SEPSIS C:\Program Files\Common Files\microsoft shared\OFFICE15\ADAL.DLL C:\Program Files\Common Files\microsoft shared\OFFICE15\ADAL.DLL.[Sepsis@protonmail.com].SEPSIS C:\Program Files\Common Files\microsoft shared\OFFICE15\CMigrate.exe C:\Program Files\Common Files\microsoft shared\OFFICE15\CMigrate.exe.[Sepsis@protonmail.com].SEPSIS C:\Program Files\Common Files\microsoft shared\OFFICE15\CSISYNCCLIENT.EXE C:\Program Files\Common Files\microsoft shared\OFFICE15\CSISYNCCLIENT.EXE.[Sepsis@protonmail.com].SEPSIS C:\Program Files\Common Files\microsoft shared\OFFICE15\Csi.dll C:\Program Files\Common Files\microsoft shared\OFFICE15\Csi.dll.[Sepsis@protonmail.com].SEPSIS C:\Program Files\Common Files\microsoft shared\OFFICE15\Cultures\OFFICE.ODF C:\Program Files\Common Files\microsoft shared\OFFICE15\DataModel\Cartridges\as80.xsl C:\Program Files\Common Files\microsoft shared\OFFICE15\DataModel\Cartridges\as80.xsl.[Sepsis@protonmail.com].SEPSIS C:\Program Files\Common Files\microsoft shared\OFFICE15\DataModel\Cartridges\as90.xsl C:\Program Files\Common Files\microsoft shared\OFFICE15\DataModel\Cartridges\as90.xsl.[Sepsis@protonmail.com].SEPSIS C:\Program Files\Common Files\microsoft shared\OFFICE15\DataModel\Cartridges\db2v0801.xsl C:\Program Files\Common Files\microsoft shared\OFFICE15\DataModel\Cartridges\db2v0801.xsl.[Sepsis@protonmail.com].SEPSIS C:\Program Files\Common Files\microsoft shared\OFFICE15\DataModel\Cartridges\informix.xsl C:\Program Files\Common Files\microsoft shared\OFFICE15\DataModel\Cartridges\informix.xsl.[Sepsis@protonmail.com].SEPSIS C:\Program Files\Common Files\microsoft shared\OFFICE15\DataModel\Cartridges\msjet.xsl C:\Program Files\Common Files\microsoft shared\OFFICE15\DataModel\Cartridges\msjet.xsl.[Sepsis@protonmail.com].SEPSIS C:\Program Files\Common Files\microsoft shared\OFFICE15\DataModel\Cartridges\orcl7.xsl C:\Program Files\Common Files\microsoft shared\OFFICE15\DataModel\Cartridges\orcl7.xsl.[Sepsis@protonmail.com].SEPSIS C:\Program Files\Common Files\microsoft shared\OFFICE15\DataModel\Cartridges\sql2000.xsl C:\Program Files\Common Files\microsoft shared\OFFICE15\DataModel\Cartridges\sql2000.xsl.[Sepsis@protonmail.com].SEPSIS C:\Program Files\Common Files\microsoft shared\OFFICE15\DataModel\Cartridges\sql70.xsl C:\Program Files\Common Files\microsoft shared\OFFICE15\DataModel\Cartridges\sql70.xsl.[Sepsis@protonmail.com].SEPSIS C:\Program Files\Common Files\microsoft shared\OFFICE15\DataModel\Cartridges\sql90.xsl C:\Program Files\Common Files\microsoft shared\OFFICE15\DataModel\Cartridges\sql90.xsl.[Sepsis@protonmail.com].SEPSIS C:\Program Files\Common Files\microsoft shared\OFFICE15\DataModel\Cartridges\sqlpdw.xsl C:\Program Files\Common Files\microsoft shared\ink\Alphabet.xml C:\Program Files\Common Files\microsoft shared\ink\Content.xml C:\Program Files\Common Files\microsoft shared\ink\FlickAnimation.avi C:\Program Files\Common Files\microsoft shared\ink\FlickLearningWizard.exe C:\Program Files\Common Files\microsoft shared\ink\IPSEventLogMsg.dll C:\Program Files\Common Files\microsoft shared\ink\InkDiv.dll C:\Program Files\Common Files\microsoft shared\ink\InkObj.dll C:\Program Files\Common Files\microsoft shared\ink\InputPersonalization.exe C:\Program Files\Common Files\microsoft shared\ink\IpsMigrationPlugin.dll C:\Program Files\Common Files\microsoft shared\ink\IpsPlugin.dll C:\Program Files\Common Files\microsoft shared\ink\Microsoft.Ink.dll C:\Program Files\Common Files\microsoft shared\ink\ShapeCollector.exe C:\Program Files\Common Files\microsoft shared\ink\TabIpsps.dll C:\Program Files\Common Files\microsoft shared\ink\TabTip.exe C:\Program Files\Common Files\microsoft shared\ink\TipBand.dll C:\Program Files\Common Files\microsoft shared\ink\TipRes.dll C:\Program Files\Common Files\microsoft shared\ink\ar-SA\tipresx.dll.mui C:\Program Files\Common Files\microsoft shared\ink\bg-BG\tipresx.dll.mui C:\Program Files\Common Files\microsoft shared\ink\cs-CZ\tipresx.dll.mui C:\Program Files\Common Files\microsoft shared\ink\da-DK\tipresx.dll.mui C:\Program Files\Common Files\microsoft shared\ink\de-DE\tipresx.dll.mui C:\Program Files\Common Files\microsoft shared\ink\el-GR\tipresx.dll.mui C:\Program Files\Common Files\microsoft shared\ink\en-GB\tipresx.dll.mui C:\Program Files\Common Files\microsoft shared\ink\en-US\FlickLearningWizard.exe.mui C:\Program Files\Common Files\microsoft shared\ink\en-US\IPSEventLogMsg.dll.mui C:\Program Files\Common Files\microsoft shared\ink\en-US\InkObj.dll.mui C:\Program Files\Common Files\microsoft shared\ink\en-US\InputPersonalization.exe.mui C:\Program Files\Common Files\microsoft shared\ink\en-US\IpsMigrationPlugin.dll.mui C:\Program Files\Common Files\microsoft shared\ink\en-US\ShapeCollector.exe.mui C:\Program Files\Common Files\microsoft shared\ink\en-US\TabTip.exe.mui C:\Program Files\Common Files\microsoft shared\ink\en-US\TipBand.dll.mui C:\Program Files\Common Files\microsoft shared\ink\en-US\TipRes.dll.mui C:\Program Files\Common Files\microsoft shared\ink\en-US\TipTsf.dll.mui C:\Program Files\Common Files\microsoft shared\ink\en-US\boxed-correct.avi C:\Program Files\Common Files\microsoft shared\ink\en-US\boxed-delete.avi C:\Program Files\Common Files\microsoft shared\ink\en-US\boxed-join.avi C:\Program Files\Common Files\microsoft shared\ink\en-US\boxed-split.avi C:\Program Files\Common Files\microsoft shared\ink\en-US\correct.avi C:\Program Files\Common Files\microsoft shared\ink\en-US\delete.avi C:\Program Files\Common Files\microsoft shared\ink\en-US\join.avi C:\Program Files\Common Files\microsoft shared\ink\en-US\micaut.dll.mui C:\Program Files\Common Files\microsoft shared\ink\en-US\mip.exe.mui C:\Program Files\Common Files\microsoft shared\ink\en-US\mshwLatin.dll.mui C:\Program Files\Common Files\microsoft shared\ink\en-US\rtscom.dll.mui C:\Program Files\Common Files\microsoft shared\ink\en-US\split.avi C:\Program Files\Common Files\microsoft shared\ink\en-US\tabskb.dll.mui C:\Program Files\Common Files\microsoft shared\ink\en-US\tipresx.dll.mui C:\Program Files\Common Files\microsoft shared\ink\es-ES\tipresx.dll.mui C:\Program Files\Common Files\microsoft shared\ink\et-EE\tipresx.dll.mui C:\Program Files\Common Files\microsoft shared\ink\fi-FI\tipresx.dll.mui C:\Program Files\Common Files\microsoft shared\ink\fr-FR\tipresx.dll.mui C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\auxpad.xml C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\auxpad\auxbase.xml C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\insert.xml C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\insert\insertbase.xml C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\keypad.xml C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\keypad\ea.xml C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\keypad\keypadbase.xml C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\keypad\kor-kor.xml C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\main.xml C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\main\base.xml C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\main\baseAltGr_rtl.xml C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\main\base_altgr.xml C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\main\base_ca.xml C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\main\base_heb.xml C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\main\base_jpn.xml C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\main\base_kor.xml C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\main\base_rtl.xml C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\main\ja-jp.xml C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\main\ko-kr.xml C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\main\zh-changjei.xml C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\main\zh-dayi.xml C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\main\zh-phonetic.xml C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\oskclearui.xml C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\oskclearui\oskclearuibase.xml C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\oskmenu.xml C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\oskmenu\oskmenubase.xml C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\osknav.xml C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\osknav\osknavbase.xml C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\osknumpad.xml C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\osknumpad\osknumpadbase.xml C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\oskpred.xml C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\oskpred\oskpredbase.xml C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\symbols.xml C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\symbols\ea-sym.xml C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\symbols\ja-jp-sym.xml C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\symbols\symbase.xml C:\Program Files\Common Files\microsoft shared\ink\he-IL\tipresx.dll.mui C:\Program Files\Common Files\microsoft shared\ink\hr-HR\tipresx.dll.mui C:\Program Files\Common Files\microsoft shared\ink\hu-HU\tipresx.dll.mui C:\Program Files\Common Files\microsoft shared\ink\hwrcommonlm.dat C:\Program Files\Common Files\microsoft shared\ink\hwrenalm.dat C:\Program Files\Common Files\microsoft shared\ink\hwrenclm.dat C:\Program Files\Common Files\microsoft shared\ink\hwrlatinlm.dat C:\Program Files\Common Files\microsoft shared\ink\hwruklm.dat C:\Program Files\Common Files\microsoft shared\ink\hwruksh.dat C:\Program Files\Common Files\microsoft shared\ink\hwrusalm.dat C:\Program Files\Common Files\microsoft shared\ink\hwrusash.dat C:\Program Files\Common Files\microsoft shared\ink\ipsar.xml C:\Program Files\Common Files\microsoft shared\ink\ipscat.xml C:\Program Files\Common Files\microsoft shared\ink\ipschs.xml C:\Program Files\Common Files\microsoft shared\ink\ipscht.xml C:\Program Files\Common Files\microsoft shared\ink\ipscsy.xml C:\Program Files\Common Files\microsoft shared\ink\ipsdan.xml C:\Program Files\Common Files\microsoft shared\ink\ipsdeu.xml C:\Program Files\Common Files\microsoft shared\ink\ipsel.xml C:\Program Files\Common Files\microsoft shared\ink\ipsen.xml C:\Program Files\Common Files\microsoft shared\ink\ipsesp.xml C:\Program Files\Common Files\microsoft shared\ink\ipsfin.xml C:\Program Files\Common Files\microsoft shared\ink\ipsfra.xml C:\Program Files\Common Files\microsoft shared\ink\ipshe.xml C:\Program Files\Common Files\microsoft shared\ink\ipshi.xml C:\Program Files\Common Files\microsoft shared\ink\ipshrv.xml C:\Program Files\Common Files\microsoft shared\ink\ipsid.xml C:\Program Files\Common Files\microsoft shared\ink\ipsita.xml C:\Program Files\Common Files\microsoft shared\ink\ipsjpn.xml C:\Program Files\Common Files\microsoft shared\ink\ipskor.xml C:\Program Files\Common Files\microsoft shared\ink\ipsnld.xml C:\Program Files\Common Files\microsoft shared\ink\ipsnor.xml C:\Program Files\Common Files\microsoft shared\ink\ipsplk.xml C:\Program Files\Common Files\microsoft shared\ink\ipsptb.xml C:\Program Files\Common Files\microsoft shared\ink\ipsptg.xml C:\Program Files\Common Files\microsoft shared\ink\ipsrom.xml C:\Program Files\Common Files\microsoft shared\ink\ipsrus.xml C:\Program Files\Common Files\microsoft shared\ink\ipssrb.xml C:\Program Files\Common Files\microsoft shared\ink\ipssrl.xml C:\Program Files\Common Files\microsoft shared\ink\ipssve.xml C:\Program Files\Common Files\microsoft shared\ink\ipstr.xml C:\Program Files\Common Files\microsoft shared\ink\it-IT\tipresx.dll.mui C:\Program Files\Common Files\microsoft shared\ink\ja-JP\tipresx.dll.mui C:\Program Files\Common Files\microsoft shared\ink\journal.dll C:\Program Files\Common Files\microsoft shared\ink\ko-KR\tipresx.dll.mui C:\Program Files\Common Files\microsoft shared\ink\lt-LT\tipresx.dll.mui C:\Program Files\Common Files\microsoft shared\ink\lv-LV\tipresx.dll.mui C:\Program Files\Common Files\microsoft shared\ink\micaut.dll C:\Program Files\Common Files\microsoft shared\ink\mip.exe C:\Program Files\Common Files\microsoft shared\ink\mraut.dll C:\Program Files\Common Files\microsoft shared\ink\mshwLatin.dll C:\Program Files\Common Files\microsoft shared\ink\mshwgst.dll C:\Program Files\Common Files\microsoft shared\ink\nb-NO\tipresx.dll.mui C:\Program Files\Common Files\microsoft shared\ink\nl-NL\tipresx.dll.mui C:\Program Files\Common Files\microsoft shared\ink\pl-PL\tipresx.dll.mui C:\Program Files\Common Files\microsoft shared\ink\pt-BR\tipresx.dll.mui C:\Program Files\Common Files\microsoft shared\ink\pt-PT\tipresx.dll.mui C:\Program Files\Common Files\microsoft shared\ink\ro-RO\tipresx.dll.mui C:\Program Files\Common Files\microsoft shared\ink\rtscom.dll C:\Program Files\Common Files\microsoft shared\ink\ru-RU\tipresx.dll.mui C:\Program Files\Common Files\microsoft shared\ink\sk-SK\tipresx.dll.mui C:\Program Files\Common Files\microsoft shared\ink\sl-SI\tipresx.dll.mui C:\Program Files\Common Files\microsoft shared\ink\sr-Latn-CS\tipresx.dll.mui C:\Program Files\Common Files\microsoft shared\ink\sr-Latn-RS\tipresx.dll.mui C:\Program Files\Common Files\microsoft shared\ink\sv-SE\tipresx.dll.mui C:\Program Files\Common Files\microsoft shared\ink\tabskb.dll C:\Program Files\Common Files\microsoft shared\ink\th-TH\tipresx.dll.mui C:\Program Files\Common Files\microsoft shared\ink\tipresx.dll C:\Program Files\Common Files\microsoft shared\ink\tipskins.dll C:\Program Files\Common Files\microsoft shared\ink\tiptsf.dll C:\Program Files\Common Files\microsoft shared\ink\tpcps.dll C:\Program Files\Common Files\microsoft shared\ink\tr-TR\tipresx.dll.mui C:\Program Files\Common Files\microsoft shared\ink\uk-UA\tipresx.dll.mui C:\Program Files\Common Files\microsoft shared\ink\zh-CN\tipresx.dll.mui C:\Program Files\Common Files\microsoft shared\ink\zh-HK\tipresx.dll.mui C:\Program Files\Common Files\microsoft shared\ink\zh-TW\tipresx.dll.mui C:\Users\5JgHKoaOfdp\Desktop C:\Users\5JgHKoaOfdp\Desktop\3c7d9ecd35b21a2a8fac7cce4fdb3e11c1950d5a02a0c0b369f4082acf00bf9a.exe C:\Windows\svchost.exe C:\bootmgr C:\hiberfil.sys C:\pagefile.sys bcdedit.exe vssadmin.exe MD5 hashes: 0025bc172206303fe3a5f4ba25ccebb8 007d0774541f6a407ab2ab423809a589 0194439975cb83f3c5216d7ad3f7babe 0520ae921464d91df95d8173d8cf892f 0600feb1e31732b89988e3aafb444016 07f24da6c320ab7b6dfe820fb68b676a 0a2c408dd0ca739f2b3166541dca414e 0b148a75bbcef7dfd2e0dbf1d36c6c69 0b62cc4ea7d04f52dce02f386bf96712 0cfca8e12b1969e69a50d379d1e0b0a4 0f299c2a63890deeca9861ff427d1a91 10544b35237102a985b5f53d666424d4 10ed6c90286e20b5775f08ce51dab3fc 1108df7d19a17c500de8ac684950d742 11d95746f2f93db9ae179d2a70bd0735 1221ac9d607af73c65fd6c62bec3d249 1764fad1c166cb87ce23f9a2a73b5b5f 1e53c61737cdd277038516efce7e5a2f 1f484a44f88da05c7dcce378c509d184 212886087460329da2309d9a331d9c6c 21587eaad3120394426b036fc5b7277f 228da1815eb645b81cb702ba4c93d3e8 22cd6893caa9d3c373afa2cf77635f0e 29a19ace4b25eee1bfd424e366d47dce 2afb39ab896ddcb4c51fe2e75c6cecbd 2c1a30b17e42db7703d4bf23ef0e7029 2d6e9b31482030d4fef06bce9365cc76 312289e1292aff1d25bb6a7df4d2bbe2 31d015ed828cc0b1709be03f1683e558 33061148aeaadf431d0580d42dad55bb 332f8938a6dde0047ebf514b38118915 382c886fd239f3df7e8b8d6958df8f2c 3a4407be2afbd8b0348459d72f94127d 3aed295cdb86b67ef6d20e8a6e1fb765 3b09458882c91c06db45a8036a963bda 3ea4252fab4c5db8789d25072c3ae5da 3ea451c27cf508eb310fbed92948e58e 3f0ad0ca2c91a4f1b5a2b9415b31c5ea 4679ab1652b6ae68dc69edade0a027c0 468a7549fd149f275b10d752e0c82e70 46ce3a6fe2aac3523a07e8f1c8a29660 4bbfc518967193c7be4a6d7838bd3999 4c7c5981f3c2a5957b45b1776220b4b1 4dd6290e2b84dfbe08094f2cd143d201 4ea95f48d0f2d0e5b75802d21c075970 51eb3a059480b7576659efb1bad7f521 52faa02dc4f12dde07bcbb65b69b8dad 53fa6ab167d4cf68f5485a827c9f5426 54a242b8e991dcc59204db3001d6cc24 58435dd3eed646e1eb9e69d039a8fa91 5a7da3333aae47c02c8fba040e3f679c 5a910a305d21654241d1881dd6b2ca98 5b61ee119abfba50caf9100f8b687924 5b80f96d7c2f1bab0df4a29f6761f9af 5bbf849c53adb02a9b4a3d080a8b640f 5f559f7baa58dc93bc354d3f58765a64 5f94fc6d7000ec07eab968cda69e9c43 647805170c08d2494f35f1437c998f6e 667f6c344628b16b732846a33ef8729a 67d7183cf742812fe8f2466eebdb114c 6936f4ee421c9242c660de4dfd7191b6 695833a6e9dc213f149bc07ebe131151 69b22a0aa6b2e57404fc7f60f7de9894 6ac34efd31c14552b76654152f935c00 6c945b72dd789c42b63d57a2865ccaeb 7197d73393763191cde8ab7fa429821d 75083afb5f033e0d63f25e50f64f1641 75e285a458724f1326823c9f7800d000 7b34955960ff21d45655ac01ec973d14 7c322691c216b019273505f78800511a 832df455a6e9126b8215ab7837212808 854d72551d4d99dbb6cc756ffd9e8738 868dec059e20c7f28ba2805e6b047e44 86abd59e7c4cf6bfa97651417625dc1d 8788bb1d89f5c3d1c2ed6fda6e0874a4 89ce4d1c870ab754d6a197c042466942 8a86d7d639eb0ec65fa33f7c3bf3caec 8b806f7da233198cbec9960a05c1aafe 8ccbfd3c7d29199e24e635aaa40a6915 8f68496d0f99b37e71c7bc326b0b9cbe 8f9811db3ddd440e2601027eb756a42d 93b885adfe0da089cdf634904fd59f71 9543c1e9a5d5f39bcfbebe1a07b76826 9bc53132f679cc81dc035fa517996f07 9c8947698f2569829b573b1f1c4f34d0 9d545a04b7368d29972e89376eeeb264 9dc9a598750e702b78db22642270e816 9e9e7daf3a4499bf1a0b01b5a0b31d24 9ebcdfa5720d1b4d0676a1b90d6050c6 9f725b0706fda1c639d4026b5bde2aa0 a090c1a1b74ff8085781f2b8e9924887 a1b434ea0c57b8f8b234d7dddfd67d5f a4844d8708a189a4292b02e61e5bf612 a74679c355958740b5165736414df2d2 a7bf2a5229e9e7566ac64fd38b60e656 a87236e214f6d42a65f5dedac816aec8 a87956a3fae7d10956b7a6f122cfd807 ab643cc9cfcd2f2da49e6d9e2b075a7c af238c549f1c5c8c9876e7a2a8c21063 b49efe9ba26919fdc25b2d725bf9ca5d b5518f87053cf19ba6018ceebe450df1 b89c66ae83ee319c47ef70aea07d4f6f b9295ce35a64cb40dade608be9ffe6c6 b9f03b53f35e476502bd2aa3a7e2e0e7 ba2cbabb58efb619b742d3594df82fe2 bab08a48799d6bceabd6ffa69a45adff bcae409c119f08f9fbcba36fb1f3996d bcc1e13f8993204b6939b1d153fe3c44 be8c8fea5988a4e1f7f26d8eea4edfcf c08256ba876262809f3fe1fcc583d069 c185e0cfcb57b9a1866fc3e1ecbc94e0 c29d9f7f3aff22bc50b2e2bf802b5fc2 c38c8e56896e4b6f62ba80600da2b576 c87b7565588cee387565a6c6ccf422a8 c93e3219fe53ed2d5313c78581cbda28 cc5126933bdd80ee02e7bbb86900a533 cecc0e57e5af5293aa27cafa6eec027e d41d8cd98f00b204e9800998ecf8427e d91ca55ab74783fc4409c6b6fa6b2a7e ddb9ea671acd9c931d308c71b2643bfe e07096cb89f2d178a14c5e81e6d12cd9 e269de5f63fcdedca11755947615f1fb e4e7bfa9e0b14f5ead56a1e7b5d6f436 e59fbd1656036dfbd76c4392a56d3b8a e71420c3b7525406739bcf2b4acf5da1 e8b4fcad81b1fc2f77bc2bbc86c74428 ed0f71ba2445385829287a632e7c8c5f ed21686acf6f81430b47aadd809139bf ee41c758a8df468da218d32f2f56c217 ef0d4357983d69bd33bf1419ee975f1d ef3ce4d94d705066ae8d508bb577fc8f f01a01b90023d35a294d577deded09c4 f0ea9218b3c1f961873efae9ac82a20d f24d563717ee2f63156fb105458c05a6 f3e1265f2f72f0f30464c19fc0d9263d f5f732c22575bee4bba87805f554b311 f68ef9775a6957488c4654d22a067d67 f7e483ce003ef580ee6f7572ee09c914 f8e664a4cdddccdd94a2e001a154d7c3 f92f9c6dafe390da792c63d84b927672 fc6f9e1fd2cd944dffd548bae8ab2fc3 ff346c9665b7e9e82af69a53d8b1429c SHA1 hashes: 0390bc6aa882f0cda5a80f382a544087bbbfb2ba 0ba478de375a06803fe995b44fe647ecb9343ad3 0c2981582c44e8505b9ab0e5a3a5d6d64b466652 0cd8377d8a3d74a0a47111938f180aab4731fbc1 0e819aef207a012e2d068ca32360ac65b6bfcab9 0edf6d2383163920e473e19114109abf26916aa8 11258317cb082042b126f9d0a4d1332b98a52f6e 157f92c567a59463dbba28af4b48375851640c8d 15e832c2647e3b819fffe933bc19a4e22a64ad3e 1657ceb6734e2283b199173665836d951c1b5ccb 16d12675c2c07f4194b57307ec887a03de5d6299 17d33df3defa238d2d6ba933c24c0c648274a32d 18ea2e4bde2874472efcc16a43c8c9774acd37fa 198e1495c5a6ab7a7e935bde35029b34e813f3d4 1bf44e86edf8ba912fd5a217a4ff814c3f8fe107 1d38d51435d660e62f23a3aa851401bb1092bdff 1ee30ea1e0ba5d1e06bf1e9b0ee6139adbd5d8ad 1fdfb454abfd257e0d0a087d43799f9d667e2ea0 253aebdb6ce8e3bb19ce52ad5fef1a3c50f38f74 277bc16091bd3db68b0c9a858f9c3e5b1234511c 27c0469956357ac7d4e8d0bf7441dfa281d7a379 27eee98511e2edbb75ee6a4b9658471d13335ffd 2cbe46d709c3229fb789a28bbd3dcb75bdf891c0 313c4e1ad1507068beee561e0378fb491b871944 3254803fe75a88b45fc9f728c7bf00990167b607 325fcdbe3b92055ab27d9f2f5930a48b44ea2035 32bca4100aaded3f9ca0a00bc39f72fe64a8c018 3588c2cefafc75a8770efd61a29d9b49419c4bc2 36ad524136d710d094c9de0cf0070901383d69e6 3753cbeacc00511bc63d961e0f711a2885acf12d 3ac471cda1cd626ebd6fe007b33b761f355eac3c 3b8d80d7538aaff83fd35ce50bdecfc965189c95 3d30076587e78ce20e9a239e35a22db5a3338f5a 4058b74ba434624ebfea89962382dc10c3751f7d 421c02567863ed9d3b5aa372f900c65e54e36da3 42f2e1488f9baf09bb89a781384981cb31a98d5a 45c7e7c2c69c75f541c67bc90f55aec0035786ff 461eefdc0da413f929e2780427bc740f6072abcb 465770f3be0a5a578e0a1776f4c4e7238caceeac 4747cb0ba11394894f1c469be496c7948b5d3a97 48fa1dcf769a7dc8d0e8fbbc0ffe7e9c20315f53 4a998e2f9733e243fda92b335f5d8ca35264dde5 4d8d59da07b8d81046b0cab6758465127b0116ca 4df06f0fd7535504d93fb6f6f13aff11cac7daa4 4f7fe874ad2827dc11340e8ecfb83a844aa502d2 50898393625d36d392fdc60fc69d3196d8db9635 518d5a0a8025147b9e29821bccdaf3b42c0d01db 51c76770f274a3e56c4d2901a064d30f3baa6246 52934a488d2e7496332dac9fda1a1ee7c50da281 533abafbb1fb6ea0d287937f2d59e6e586260adc 54d3c638053bf5a6584430881aad67cf3ae78aac 56655e71291cc8710508eb3c59addaa49a07028d 57da96b6aed705a5cba131aa4f2498b3aa5e4b1f 5839ab008b6d865f76f1929963d25d1c47ee5524 5aef92733452f766d524fc2f9433e02db6e5fb98 5ba93c9db0cff93f52b521d7420e43f6eda2784f 5bd6328400632b9b839be57f5ffc4412c176b7f7 5c02852a8b28fa336c273d0787a49641259f38a5 5e4b26033a9a29e2121387bc461ae02e3ac8a8b2 5e6c74b566ecedf7796a68ac05c7f8d1b8d75906 5e9ffb67ebeec13ef1b105fd72822ac6214e4f77 601f4e8cd6b1c5fcd8f0be4acf01a08261a07b94 615b8469602b5353538f0c3dfeb7e36c415fe634 62ec23ca63aa2d44da770d752fc9b98c9c1446f9 650b95b51ca374cfc2a74153c30d2b1bbccabd51 68772e09e649eca0b229976dce85d4e1c1c9b96e 68c83a795f703075cdb8d1ee8c995ec58c1ebfba 68f9f153c4ef0fc748d75dfa8e791cd0d1544f39 6932821d642411327a3983ad17ed866d8202e7f5 6ad0d37baa7ec6bced2ff29bbce6ded79e557cf3 7001057ce7fd9edf64caf1ffc09345fdb43e7205 70bc45e9f8c74b0dab7bed3c6480b7803c33833b 70d60aa3a92822afbca25fe3f351e20ac5b70379 735ee1342a8db6797d461aefb11815513a7bc84b 759b229ea4cf5e82296605071de808829199c353 77a40ed76c814cb34a1da43a9201eb1f39fa84c0 7e176b93cfdd9eed36a7849139dac85520e9ba3e 7e1812d16e16c031f46b4f695993eb7da6512775 7e763738ec6a78dea41079124d4f87868d34328f 7f1f65d609c224fe5be7b4b928f46852e7ee288b 7f763efda83358603474804c53ebc6f318931263 8055bb69845508584254f90300b0813978a54823 816e816ddd31adb7e90ef84d69d7fc793679bc21 83699c3739b1e7839e81bd123cb3d5234ea9d982 88d595150a145510984b09d0ccbf860fc9d63682 88f03253366b74e934d6e8a075488e4d9de2f52e 8ae59f5baa99e842653ad9376f308ad60ec1f802 8eee9b85789becb184ff6576ccc1113152cf5da1 90b22a9ecfb0de25572bbb448c91bff1c2eff84d 912f5ceb4061fe42b901d97c5af31c4cb06350d0 93e625cd64dbf7459de2e5be89263bbf37199ccc 94197a64b2dcf3c09550efd309060754b0de9398 96076c20a1ef80baff7f0ff7e8d5804133425735 97c119a75e7f20ab0a9f0092d53d42ebf710ca43 98d89cf3573c2fe86786837e0a1e6e21c798136e 9ac50bc7adbddcd7b7c3f3d34321cb681e45aeac 9ad793bcb21e3e9b18d840c00c8ddab567bac5f5 9f1303873f9bcf255949c5ae47ff7ff0a8018247 9f6cc88a83abacd313ebeb3822fec21f46cc4a06 a02a0e367bf58098c05031739050e8d64b02001c a25e476316e50892c84b7e5030bb19d177338cba a34e172145ec418af791a16bb9e589edb84cebe0 a358df20202c117d1a93b654a9e4f1ff236f66f4 a63a10d4b34916cfc0d1b9d990244710b25b4b0f a74ae3151765acf4ea9e0b7849e8d80c9aa100e6 a78393563b3626e5247557be3935583320e9d8e2 a8cc9afd1509c53b8b3e60011b9b7e621e7f10fb ac03db4447aebce19ecaf6d371c6c7d10442255e b217f887daf47143da6375f76b17845caaa07383 b3511398b7395c490924589ee255b04f1a50e205 b6054cc98f146519f3bb00a044f85b85ae2e2de4 b6813117ca3e3964cbda66d36123878616f8b285 bb00a347c06c3408c2c7d7314a582cd5da09c272 bb28e5d9f397cba17fa0f3eac30b9383ed1f4c49 bf661ac03f4b37ed94420bb4bbdf7ac837eeb03d c0979060ffa7bdd5a3114c3324fd97328b2525b5 c3c982d90dd4caa3f6dfb2c5c99b815220a1ead8 cc14d658ed5360f09019758eab9bcdbc17ef315b ce6d17cf73c38d4abc4dc11a9f75dea67d5eed21 d4940905210412d428d32beb2bdb4bcbaed3a583 d683d6a5399d65be44ea7218a6c8134e187e6f48 d70d77b43532c14ae4090ed8e0a22643ff865916 d98492990a6c2001d1f118073d338aa13d77333c da39a3ee5e6b4b0d3255bfef95601890afd80709 daa669d055663233a2a0db4f7e769916cfebb7bf db30fdf794c98a834239bd948b6ca328df366b74 dc38edfb5a39e3ac7e6d42810656ec888a24146e de86dcd417ed56715d1575e54b44fa458d2a6000 dfc1204e28a7e82433d098f137b22339b5e88e34 dfffbb59d84cafd02c68b330faa2b1ec995502d6 e1062f7bfb53a6be9949c6b51384068c07251369 e79f6cf9b060cb29a46d51e308b4d49de2532f8b e9060b4c87dc940c889a04615dd023d123bea84c ed0f824a2319e2009dd8cd66cb3bfdb4035177e4 ef5e79accbf25fb1096345ed92fcac223d4a73b6 f16eb9b6dfc87c6f1488572f79a27b60c8dd87f4 f36d544ffaf7cb5112b502dab224087e9b323e38 f41fed3ad8a6ed248e36f447954d56aa0553534b f95072cd0eef0145ae595554494e0d172ed6ced4 f961a8c90f5c83329460ce5fb10f3d2c213dec4c fac1e073a5820950c7805fac75380def45b93976 fc8caa93324e7574d1deb61017689d7bc1ce8955 SHA256 hashes: 0021b1fff8b2d5358656b6c22c935ce2294ae9f059594a0445feb03ee8517c29 02a0429f14bad6963cf48ac29bac2693e073c29f34d8d13e09e772cdac46af87 02db11ff0f418de37dc7dea84c7df132b98dded31f404570fd3e3d57ec6526da 03bcc12d0d6ac68d9a5eb22cfdd89024a5db19104487c68191fcab14dcca395f 03f35706da7c33d3096628f62b74297df677d93df5ef1edcde9bdde1669d7058 040644b7a36c09f68d25f524e15f81c97ebced94342ad5d1cd3b07b6a4d24cef 05eb82fdffd6c6ef627b2bdb557cfbba768f6280d79cb65d9f7ec1f4edc23cf8 0822a586a050383037406804cd4f12acef429c04ac65526178d7e3ce7bab5557 092167fb8180160d65ab2f79cc9fba22ef91580af15be7bcddb27ac5613f34dd 0a468b854de09777e9c8cbee51bbab967207821070105daea6832e8d58b8bfa9 0b9173716de68122af51e8f955926f062e296619a9dbc043d2d4bc93e9078b2f 0c86848f3f2c2512e66819c64ba67c85b02f7241df3d850edcdcf18063f2953d 113948f5486837f5b352cdc34558a02ac95ede605dc271205ec702280aa1ef11 137bf5ec736bd430929690afc8fc92e999c8cfe08a4235d599cd1fdec9075762 139172e558815fe78d405bb31fde49d82d927b78f91a7bcd0c606b82321393a8 156fc56ce03ae51a79ef0743bdfb5fc1336717d899a6f813446dc26d75cbadbc 15d659e67d300d340db898395d9f77a4b93eec7a7402c8a91a160bfd46589427 163996e0c5a32e04f2ecbbdd474f53eca8ea0596ad77dffef41b9db4aa8605d4 168d0ce4baa65d6f36d6d974469c3007b8dde7998fe3904d027bd8b9e971490f 16a27ed87324a63e5f07bce00d5e1c65c77952a93ad956dacac865798c8a344f 17b9a7f50e3df33ea45ffb85e05cc6fc5dff1f69eaf9d7cf963b58c4def23d5e 18e2826bf256d1072d4f933f20b96b2800d2ed359316c99276357e2f23100f01 1929c76bbbf9f8252ccdb2d16d5ab1e5c62a76b4acb04787386ffcdf6f9c10d0 1a80a33aaad3e641ea485158a127bfc2ba07c55aae05e823b71226ea6b96bf95 1c6a5aed2a55cc4ecf1e123c9ddc5a15ff6e70e1093a50d0c2716a453555a4b8 1f6bd6b0d9750b1b96933bb4476c3d929ca3022c94338ea327bfcd60b9b0e1e7 223c21269e7f5b898bd61824b8460222de0ce89c70ffaac94aeb946cb214bd6f 24f3d1d585a06151ddacbfb1ee9512f554348d1e2bd8f8e3bd1bce3f0501f919 26761549cb1e0a3947509ada9781578fabbc61bf83e5486f3ef333acb24ffb01 27388703598ba072ce4802e4405458cc1a6a04bf11b8f8afe3d67aa62414e201 2830f64ece6ec6cfe9a8350cb8e36fc6d7c4075a92f6af8739b3e21da3e36622 28fafc6faf5765db748c736ac82c49d9cc8c32b5a6cab842dd7357484f9878b4 316aee7c9032c96299e0de908ccada5dd238b85dfd6f98aaf386e051c962d0ad 356c9cc04da8de17db7fbc3e8e5c980ea6a2b013cb99cdd4403462a5de2623e7 35c13133831490c8f803447c90b44094a659416186f898448e6130e4a5f8962a 36e5cc3a0661bfb3f27aa8a52f762f4c3e3f86fafcd5b6f2136d3436e00f8668 3729ee9975b714fef76a42b4d77fd4242fc8489f3c84c87f5088b3e4c7c45b55 3992c0be7ae184fd156150e6807bac2d2b5342a2e93d56c153670a5ddda469bb 39d247ae0014a175ec24ce5207b08f4017328cb1aae8916b046b5ac954899442 3ba1141f77ad6cb0631528a39cfdebd4783ac5e957792c9c94f3a4db916cfc54 3bdee139de0d75411cb7cf8e5943384ad903e7a8295481720f15769195f8c715 3c4a68070f3d7f14e488ae4f7ede8e7add0f8029995dc800833126ca062a2c6c 3c7d9ecd35b21a2a8fac7cce4fdb3e11c1950d5a02a0c0b369f4082acf00bf9a 3caac82d10cc4a029e96df56377e1c22e2e0f0d4a20bfa26119172d91616d479 40eddbb515314a7776d97f2e407f74cf40991b0535af2459e7aad11ab4dccd93 416917c48d2e02048bde833bd94534d068f07ca2140cfd418593894594efa40c 436f592ba523b6fbd9a355d227e1888f9fdcc27692f3874c3dfd8720470843c2 46674b4a9c0959840c2cc0bcbda88f46c745863bdc0c08f15c1409f539e60310 47ad666d0f101d1b6365997c7e18a66752d5addbbd2c53eff1a9ff1bc83f7eb6 4af68262225d8c0d637ce2c0dd52dbf27f58efdba6734cb3758022a0d031b537 4ff4728b8d7f3e8a7722a88f24d613b286cc5e79662ec763ea72fde87b60e90d 506607a15f783ff167521d4fcd6f23246d4017f0d63db885e81a9729d72b5b9f 5118411007a7bc2795b566400c3994cae10b9d6960bfff4c1cd6d6b657333bd5 52454f03fc9f71121a5d0a1c87a4d492f2c5819acc5c32448cc5c7e5ee801fe0 52f465b6655509ec4d8dd902ed101d69f88fc5160ba515357c5b2e8035c7a306 547242feec7968e975e82519f7e1ada389bd4fd79257f1767b3c289ae28c4efa 5f0b6860a34a25f30e93d4cbd6dcaa601bd6edd89347886627016c10d5f849a2 6238344ffc7f7d2338349d4b4447ed5331e3a0cd0caaa8dae58a7dec6b0d8a11 6537b1484198d6606ecaf833068cb910d661e20b73cb13fa728ccb80795efe0b 65cceebd453d0ccf88114f4db6d17bbf4580d41197a83ccb19b812be88da24a6 662dbbcd37052dbe3271e56f84a0796cd5d957e51de199c29b90ab2a5e245d8e 6c469962f33b7222f07b8d1ae8025f177f4a5f5db3eb62fa1523f261a270991f 6d021f570226ea01dc30f59f2775cf9fc2332658a3f5cdb2773ffe767b6213fe 6df83d5a3e673b27aaf17135cbff03245f9d16e22101c95d0b7e4ba51931b901 6e24e0590625060c7516290e4b35267a2edb452828da9c4de3304fe424ab7e49 6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d 6e86e96a2347996cbfd82e10bff52c96c0ade00d22b04884914bbdc97bc7adb1 7316284f92a7fb4dfefe57f0ce52c76fa2b24f9ad2b7b57a4e7d1c1f18c92e61 756e173f860c789ec89215b77998efef4319aca90f3b0b570ec8c362c8314792 759e788d30f00e4ab556b864b337813811eaa0619bd074e81a8d94b658f41aa4 7804a26e4e6e682fdf642c18a3dd7bd05aea429868f0c200b061cb62afdb0729 798c229d9384dc338d2bdbe1163b4bec541137c700e9e148953c447ae97971a2 7ac8ae8fbf69e7dcba2dfc3b74c7f1ea9ca1fe85b73d0c096b8cf5d80e036931 7b06b9fa9c8063bf62a3851ba8b89b30e157dd98f14c1c6ecdc430c84f834df3 7b4b523dfb131121c8aa23cd3fc71dcd2fb2c2b6d6f7eb8537151d8499a48e0e 7bdd886c4abc19050d69dc8d0ffa51228d9237884cd438331865b87262c8016c 7eef8f4b6ab046ea737c8d1408941b2107f72d24a14bde7b80ac6d7fd453d68d 81249bd83a227142303d2a7830d7518ed14f6a4635f49314c30374784968d736 827f3149a54c5bcd6fc435953dca7a7806f76d6f9da89409d8763859233df933 84d57e8229377a7d8564767b5a288a3192f63c67fa6f5e1423fcd6c6b5c4cb2f 8b073d4ef01d2832d96fa80c8276b5ac6e52191437c9d1a797a4eff3877338b8 8e7c6603fdc9f5a7da643c99202a6568492ad840a8d833382f4887dbd038859a 8f39dccb819276c7b8671ebcf15bb236f6630bc80a3c5ea2196876f96a21d259 90074968c979523b006746c21134550ccd7067466cfe24b78276c72fbf48be74 9388cb208954158e0cc3c8647dcb2d476d9bff5b80006587ba0f3524c2f4429a 984fc67b15e46d58020e218e7b63d4b07130410e456c38e15c180c1abedea377 9dbc949ecdf073a05b4ea0ed3e0101cfeb5c65e86b3cb4ccbee656926c18945d a4caf9011f5821070762dad99393106235b7403e9708b0a96af8ebfd31e5dfcb a4d5e4c35782ac8e62e56c10358f2681b5637ac5b2e31631eac6dee5a35a3f94 a70572beede87eb6d3fc42d33d2dcffac69049e2d9f592ed330cd7e9c6e0aa87 a9e19978f5270b2ae51ba2eeac974a7ab6c7d2c1653a11142cbb0a647af37a09 ab8a0622e935c69e8d4ba839f06153e5230dcd684939270630dc2fddebb87d5a b0e628007646e79c0d74f3a41a60a9225e042de1edaef5fdc4c1eeb815b83b9f b20c0c3677553e1cc34f680aa1f13e7e10650cae310f1a594290967dd16f4a60 b3deddc19fbed73e423af31bfd83d814c26e9f18cc0908ef24c74bd78d1c5482 b4afa4deace1055af1cbf8a24e9a4f581c8213acf6485358f142af44fbc24b08 b4dd973aed2766bb439db73e91d88cc945fb283e68e437c2e330ce652e0123c5 b6e6ca83d7c32093ad31db94e75b4837f2851a7e21c4467bf37f26d268830606 b8d6e8020044e60b44c22c45d64b6c9ee13606c612ea0da946ee05d0d01e4b41 b9109453cf2bfbb128159f934a3e67faff1a4ee8f38b76d1bf3b22e3a5987550 b98af348bef74e7cc24368d048e07b5d2b9b5dc210f484f863b728975ee60db7 b9e48ff742d7b50cd760a11a7746562af25a742ef1acb43ef4ac7818593431c4 ba1194ff004e688f680e9426e8a2d8b55c250d103b97267361c4f2a0042dd8cb beb31af1581af2866335bd0ad03d916b24c7bf6aeb707c703b6f40cfc8f0bced c0ee6d2f1c8bf01c38eb9d6380adcec6cf4a8520ca82e756a92172aa776c86a1 c3d94190de397ecaa4000431b3a2a4fb38adba1b2bb13eb540604b8e42ec4343 c692d04a55a7e6b8867a6537ab503cb115fa006121c1bfb9b243bbef7f3a2a36 c709d3a80d9f054981f775496ca868e86cb361e946a8c6fd0beba9d5949de682 c9a6f70b49d71e1cf02d81c07901d684380d6ddab3850d61066585c21dd6f7ec cbd70817a676fff0dc1d70587f28313867f9e9783bdbae2b7191301d4cbe210b ce71b282e803bb143ce10e680678de427e9e6373d8625f046a7e877c4e2d2a4c cf74f95a22ff86b23f589a6229c94b59685bfbd2b62c1eaab2cc691f2e0b3f71 cfac4d55bfc01bdf961127632ac255478390794a760de3030776396c413b18af d00503057698662823a786fc3699cd36679e905690bb2d19d424b2cb5eadc3fe d1c4d43767cd10ddac2a4ce38db5ce08d28df5f7ca8f123fb7552ddde6d9b89c d839ddc0780bdb9a01632a79d065fa5e050ebd45961ac3c73039c522248b624c d8ad0522a2cafd00fc360177b7102f9fe1c8a5243a8b00de377d971fdff763d0 d9f24cc34d30c077c1faa27dce0be711d58ebc67a524136a53e623a9d2d45cee de925baa026e639f8784a60f57e8918e53e8a83eb532eeb17976e133977a08fd dea82dc2519d94070dc93f6ce0f96268c3f63c200cd5ccad8d42e4ce33bb879e dfa0841cae6fb52b0d14a78dad5bb7db6bb9e5e9b8d9cbb0813629c53e83257e e1299636ddaf703af48d75620110a84467a024e97886f034e82eabfcf45070e5 e1c1d2a6478f9b34c00be31e7b36257917553bc1669ad0402b653eff928d3316 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 e92c7a19b85d4515c9b0257cd7d45eca2ee10449ad01cae25831fb46c4828d86 e9cadc9c3a3ffb7dec58c32e0f433e90fa3c7df57e40276af79875de2f8ca2cd ebe5ca3172453f3793bbf4dd9a4626f08b1c00384b287b6bb0065b19fca449a5 ecaa81ff698af2f4d795128d0d218b4171a69cc0c6a9bdcf52c92e0fc2454ad0 edeaff47c6510fcc1a1ac4365332bcc93254972475b617b0379ba89acf14a9ff ef32bcac712cbccd06050f46febc2e1fe0a3b137979983651741c86837ea1499 f0a6819c08a07b7b5b138f92203e201023351a7826e49e8b5990fe364f4a467f f1e1d4301138e16d80d1e208185c0a622c6f4a818d9b8c95d78b23cd3c9b1114 f1e61402c69c706852a9d7628260cc3fc5ed5e570e1cb68a8c70abd8fce7c20a f27c7a2b9e3653570e783d532f65b1818eee9dc4f550f35e036d03b91eb88e17 f3ed9aa3e03b266572274e6ee73e3608435015169625402032a03a2ec09129be f74bda64e3e6709c67dae82968b75a59c1c20d6c5727d70f8aae6f8a9215d79a fa56b4f2c40eb59d3d29fea8644024d500bf79b15e1c5d8266372887f8a01e09 fbb1b8d5cf7b943ee9367e5da820ba3f10bdc40acdc0459ca4a27dc7ee5762e9 fccf5a199f776e44ceddfbbc2b7c566e0ef5e961eca803fda6484ff9091b23f6 fe9702b0ec12b5d86a079f753c9e9cfe29f30714c34eb38904ea3d6a27a60961 ff83e0451a67589c7bacfa8e8d4e10507633962895ab4d5a155165f2c5d559a4 ffb1a4dd4b6da771d46def621cf71421051203606aa1d3b64b73e92606328ecb