Sample File: MD5 hash: 8116e91fec95489c642bd30a402960ba SHA1 hash: fdb6f8c9e8487c06290efb68bec7617ff93bea2a SHA256 hash: 5435f4769f88fa3fb5f019d1788c78460fd974a3f1827e46d29d75c6fa5d81bb SSDEEP hash: 3072:vlqQsr2q0MSbpl/d6RfXpSWgIQROb2ODLx0lB+V7LAoeLNgJqtcQ:vPsr2q0MSbp+RfpXgFOXfV3kL Filename(s): uni.exe Filetype: Windows Exe (x86-32) Mutex IOCs: Global\{FD64C8AB-F74D-C8D4-F31D-96A1BB45705E} {Global\{-D2A8-E443--570-7-F5B2-D923-} {{16E1D10-D-C0-32-9-739--65D6-A4AD8A8} Registry Key IOCs: HKEY_LOCAL_MACHINE HKEY_LOCAL_MACHINE\SOFTWARE HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\ConsentPromptBehaviorAdmin HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\PromptOnSecureDesktop HKEY_CURRENT_USER HKEY_CURRENT_USER\Software HKEY_CURRENT_USER\Software\Microsoft HKEY_CURRENT_USER\Software\Microsoft\Windows HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\AppData HKEY_LOCAL_MACHINE\SYSTEM HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\msiserver HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\RequiredPrivileges HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\RequiredPrivileges HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\ObjectName HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\ObjectName HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\DependOnService HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\DependOnService HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\ImagePath HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\ImagePath HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\DNSLookupOrder HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Domain HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\DhcpDomain HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\DNSClient HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\SearchList HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\DhcpSearchList HKEY_CURRENT_USER\Software\Classes HKEY_CURRENT_USER\Software\Classes\MSCFile\shell\open\command Domain IOCs: - None - IP IOCs: 192.168.0.1 URL IOCs: - None - File IOCs: Filenames: C:\Windows\TEMP\eRE9C7.tmp C:\Program Files\Microsoft Office\MEDIA\OFFICE14\1033 C:\Boot\nl-NL C:\Program Files\Microsoft Sync Framework\v1.0\Runtime\x64\resources C:\Boot\Fonts\jpn_boot.ttf C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData C:\Program Files\Common Files\Microsoft Shared\ink\en-US C:\Boot\fi-FI C:\Program Files\Microsoft Office\Office14\1033 C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.msi.un1que_readme C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\OWOW32LR.cab C:\Program Files\Microsoft Analysis Services C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUEPRNT C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\STS2 C:\Program Files\Common Files\Microsoft Shared\TRANSLAT C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLENDS C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.xml.un1que_readme C:\Program Files\Microsoft Sync Framework\v1.0\Runtime\x64 C:\Program Files\Microsoft Office\Office14\1033\Bibliography C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PublisherMUI.xml.un1que_readme C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Groove.en-us C:\Program Files\Windows Media Player\Visualizations C:\Program Files\Common Files\Microsoft Shared\GRPHFLT C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PptLR.cab C:\Program Files\DVD Maker\Shared\DvdStyles\OldAge C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C C:\Program Files\Common Files\Microsoft Shared\THEMES14\RMNSQUE C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveDocumentReview C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\en-US C:\Documents and Settings C:\Program Files\Common Files\Microsoft Shared\THEMES14\PROFILE C:\Program Files\Common Files\Microsoft Shared\ink\et-EE C:\Program Files\Common Files\Microsoft Shared\ink\ru-RU C:\Program Files\Common Files\Microsoft Shared\Triedit\en-US C:\Program Files\Microsoft Office\Office14\ADDINS C:\Program Files\Common Files\Microsoft Shared\THEMES14\JOURNAL C:\Boot\Fonts\cht_boot.ttf C:\Program Files\Common Files\Microsoft Shared\THEMES14\BLUECALM C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.msi C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C\1033 C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0 C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.cab.un1que_readme C:\Program Files\Common Files\Microsoft Shared\ink\ja-JP C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3 C:\Program Files\Common Files\Microsoft Shared\ink\de-DE C:\Program Files\Microsoft Office\Office14\Groove\ToolData C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Setup.xml C:\Program Files\Microsoft Office\Templates\1033\Access\DataType C:\MSOCache\All Users\{90140000-00A1-0409-1000-0000000FF1CE}-C C:\Program Files\Common Files\Microsoft Shared\THEMES14\SKY C:\Program Files (x86)\Adobe C:\Program Files\Common Files\Microsoft Shared\THEMES14\EVRGREEN C:\Program Files\DVD Maker\Shared\DvdStyles\Stacking C:\Boot\nb-NO C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Oasis C:\MSOCache\All Users\{90140000-0054-0409-1000-0000000FF1CE}-C C:\Program Files\Common Files\Microsoft Shared\ink\pl-PL C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.msi C:\Program Files\Common Files\Microsoft Shared\ink\ko-KR C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.xml.un1que_readme C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskmenu C:\Program Files\Common Files\Microsoft Shared\ink\ro-RO C:\Program Files\Common Files\Microsoft Shared\ink\uk-UA C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\en-US C:\Program Files\Common Files\System\msadc C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Word.en-us C:\$Recycle.Bin\S-1-5-21-3388679973-3930757225-3770151564-1000 C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.en C:\Program Files\Microsoft Office\Office14\Visio Content C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\BrightYellow C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\DocumentShare C:\Program Files\Microsoft Office\Office14\XLSTART C:\Program Files\Windows Portable Devices C:\Boot\da-DK\bootmgr.exe.mui C:\Program Files (x86) C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\144DPI C:\Program Files\Common Files\Microsoft Shared\ink\hu-HU C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\ProjectTool\Project Report Type\Basic C:\Program Files\MSBuild\Microsoft\Windows Workflow Foundation\v3.5 C:\Program Files\Common Files\Microsoft Shared\EQUATION C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.xml C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Slate C:\Users\5P5NRG~1\AppData\Roaming\2K1JYkQzE C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PptLR.cab.un1que_readme C:\Program Files\Common Files\Microsoft Shared\EQUATION\1033 C:\Boot\es-ES\bootmgr.exe.mui C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Setup.xml C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.cab C:\MSOCache\All Users\{91140000-0011-0000-1000-0000000FF1CE}-C C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskpred C:\Program Files\Common Files\Microsoft Shared\THEMES14\EDGE C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\ProjectTool\Project Report Type\Fancy C:\Program Files\Microsoft Office\Office14\SAMPLES C:\Boot\en-US\bootmgr.exe.mui C:\Program Files\Microsoft Sync Framework\v1.0\Runtime C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\GrayCheck C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\VISIOR C:\Program Files\Common Files\Microsoft Shared\OFFICE14\1033 C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlookMUI.xml.un1que_readme C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\SoftBlue C:\Program Files\Microsoft Sync Framework\v1.0 C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Lime C:\Windows\TEMP\SzV6KKI.cmd C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\en-US C:\Program Files\Common Files\Microsoft Shared\THEMES14 C:\Program Files\Common Files\Microsoft Shared\THEMES14\ARCTIC C:\Program Files\Microsoft Office\Document Themes 14 C:\Program Files\Common Files\Microsoft Shared\THEMES14\LAYERS C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Americana C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PowerPoint.en-us C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Oasis C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\en-US\js C:\Program Files\Common Files\System\ado C:\Program Files\Microsoft Office\Office14\Document Parts C:\Program Files\Microsoft Office\Office14\1033\Vsdir C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\ARFR C:\MSOCache\All Users\{91140000-0057-0000-1000-0000000FF1CE}-C C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.fr C:\Program Files\Microsoft Office\Office14\InfoPathOM\InfoPathOMV12 C:\Program Files\Common Files\Microsoft Shared\MSInfo\en-US C:\Boot\BCD.LOG C:\Boot\nb-NO\bootmgr.exe.mui C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.msi.un1que_readme C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Swirl C:\Boot\cs-CZ C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\numbers C:\Program Files\Microsoft Office\Office14\InfoPathOM\InfoPathOMFormServices\InfoPathOMFormServicesV12 C:\Program Files\Common Files\Microsoft Shared\ink\cs-CZ C:\Boot\Fonts\chs_boot.ttf C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proofing.en-us C:\Program Files\Microsoft Office\Office14\Bibliography\Style C:\Program Files\Microsoft Office\Office14\Groove\Sounds C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PROPLUSR C:\Program Files\DVD Maker\Shared\DvdStyles\Shatter C:\Program Files\Microsoft SQL Server Compact Edition C:\Program Files\Windows Sidebar\Gadgets\CPU.Gadget\en-US\css C:\Program Files\Common Files\SpeechEngines\Microsoft\TTS20\en-US C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\14\BIN\1033 C:\Program Files\Common Files\Microsoft Shared\MSClientDataMgr C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.cab.un1que_readme C:\Program Files\Common Files\Microsoft Shared\ink\ar-SA C:\Boot\tr-TR C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proofing.xml C:\Windows\system32\C:\Windows\system32\WerFaultSecure.exe C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PowerPointMUI.xml.un1que_readme C:\Program Files\MSBuild\Microsoft\Windows Workflow Foundation C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\BabyBlue C:\Program Files\Common Files\Microsoft Shared\THEMES14\EXPEDITN C:\Boot\zh-CN\bootmgr.exe.mui C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.cab.un1que_readme C:\Program Files\Common Files\System\MSMAPI\1033 C:\Users\5P5NRG~1\AppData\Roaming\UKLHCL~1\VG4YAF~1.EXE C:\Program Files\Microsoft Office\Office14\FORMS\1033 C:\Boot\ko-KR\bootmgr.exe.mui C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms C:\Program Files\Windows Defender C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es C:\Program Files\Microsoft Office\Templates\Presentation Designs C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\images\on_desktop C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Resources\1033 C:\Program Files\Microsoft Office\MEDIA\CAGCAT10\1033 C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Slate C:\MSOCache\All Users\{90140000-0115-0409-1000-0000000FF1CE}-C C:\Program Files\Common Files\Microsoft Shared\THEMES14\BREEZE C:\Program Files\Microsoft Office\Office14\1036 C:\Program Files\Microsoft SQL Server Compact Edition\v3.5 C:\Program Files\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP C:\Boot\el-GR\bootmgr.exe.mui C:\Program Files\Common Files\Microsoft Shared\VC C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\Setup.xml C:\Program Files\Microsoft Office\Office14\OneNote C:\Program Files\Microsoft Office\MEDIA C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Lime C:\Windows\system32\C:\Windows\system32\FXSUNATD.exe C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\Setup.xml.un1que_readme C:\Program Files\Common Files\Microsoft Shared\THEMES14\SUMIPNTG C:\Boot C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\auxpad C:\Program Files\Windows Sidebar\Gadgets C:\Program Files\Microsoft Office\CLIPART\Publisher\Backgrounds C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.WW C:\Program Files\Microsoft Analysis Services\AS OLEDB\10 C:\Program Files\Microsoft Office\Office14\Groove\ToolBMPs C:\Program Files\Microsoft Synchronization Services\ADO.NET\v1.0 C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\RedistList C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\images C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\GrayCheck C:\Program Files\Microsoft Office\MEDIA\OFFICE14 C:\Program Files\Common Files\Microsoft Shared\THEMES14\LEVEL C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.xml C:\Windows\TEMP\xEEF6.tmp C:\Program Files\Microsoft Office\Office14\OutlookAutoDiscover C:\Boot\it-IT C:\Program Files\Common Files\Microsoft Shared\Web Folders C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C C:\Program Files\Microsoft Office\Office14\Bibliography C:\Program Files\DVD Maker\Shared\DvdStyles\Rectangles C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FieldTypePreview C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Oasis C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5 C:\Program Files\Common Files\Microsoft Shared\ink\HWRCustomization C:\Program Files\Common Files\Microsoft Shared\THEMES14\CONCRETE C:\Program Files\DVD Maker C:\Program Files\Common Files\Microsoft Shared\THEMES14\QUAD C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Setup.xml.un1que_readme C:\Program Files\Common Files\System C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget\en-US C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget\images C:\Program Files (x86)\Adobe\Reader 10.0 C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PowerPointMUI.msi C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Visio.en-us C:\Program Files\Common Files\Microsoft Shared\ink\it-IT C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Desert C:\Program Files\Microsoft Office\Office14\1033\DataServices C:\Users\5P5NRG~1\Desktop\uni.exe C:\Boot\zh-HK C:\Program Files\Common Files\Microsoft Shared\THEMES14\PAPYRUS C:\Program Files\Common Files\Microsoft Shared\THEMES14\NETWORK C:\Program Files\Common Files\Microsoft Shared C:\Boot\de-DE C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\en-US\js C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\OWOW32LR.cab.un1que_readme C:\Program Files\Common Files\Microsoft Shared\Source Engine C:\Program Files\Microsoft Office\Templates\1033\ONENOTE\14 C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\en-US C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfoPathMUI.msi C:\Program Files\Microsoft Office\Office14\PROOF\1036 C:\Program Files\Microsoft Office\Office14\Library\Analysis C:\Program Files\Microsoft Office\Office14\Bibliography\Sort C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\Setup.xml C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\SpringGreen C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget\css C:\Program Files\Microsoft Office\Office14\Groove\Certificates\groove.net C:\Program Files\Microsoft Sync Framework\v1.0\Documentation C:\Boot\fr-FR\bootmgr.exe.mui C:\Windows\servicing\TrustedInstaller.exe C:\Program Files\Microsoft Synchronization Services C:\Program Files\Common Files\Microsoft Shared\ink\hr-HR C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\BabyBlue C:\Boot\ru-RU\bootmgr.exe.mui C:\Program Files\Common Files\Microsoft Shared\MSInfo C:\Program Files\Common Files\Microsoft Shared\Visio Shared\Fonts C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\uni.exe C:\Program Files\MSBuild\Microsoft\Windows Workflow Foundation\v3.0 C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad C:\Program Files\Microsoft Office\Office14\Groove\Sounds\People C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles C:\Program Files\Reference Assemblies\Microsoft C:\Program Files\Windows Sidebar\Gadgets\CPU.Gadget\en-US C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\en-US\css C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\en-US\css C:\Program Files\Common Files\Microsoft Shared\ink\bg-BG C:\Boot\sv-SE\bootmgr.exe.mui C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset C:\Program Files\Common Files\Microsoft Shared\THEMES14\ICE C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\en-US\js C:\Program Files\Microsoft Office\MEDIA\OFFICE14\LINES C:\Program Files\Microsoft Office\Templates\1033\ONENOTE\14\Notebook Templates C:\Program Files C:\Program Files\Common Files\Microsoft Shared\THEMES14\REFINED C:\Boot\ko-KR C:\Program Files\Common Files\Microsoft Shared\ink\sk-SK C:\Program Files\Microsoft Office\Office14\Document Parts\1033 C:\Program Files\Microsoft Office\Office14\Groove\Certificates\groove.net\Servers C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\en-US\js C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\en-US\js C:\Program Files\Common Files\Microsoft Shared\ink C:\Program Files\Microsoft Office\Office14\Groove\ToolIcons C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\en-US\css C:\Program Files\Microsoft Analysis Services\AS OLEDB C:\Program Files\Microsoft Office\CLIPART C:\Program Files\Windows NT\TableTextService\en-US C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\STS2 C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS C:\Program Files\Common Files\Microsoft Shared\Visio Shared C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECHO C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Americana C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget C:\Boot\hu-HU\bootmgr.exe.mui C:\Windows\TEMP\z8xE0EE.tmp C:\Program Files\Microsoft Office\Office14\3082 C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PublisherMUI.msi.un1que_readme C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\en-US C:\Boot\pl-PL\bootmgr.exe.mui C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C\Access.en-us C:\Program Files\Common Files\System\Ole DB C:\Boot\Fonts\kor_boot.ttf C:\MSOCache\All Users\{90140000-00B4-0409-1000-0000000FF1CE}-C C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\14 C:\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles C:\PerfLogs C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfLR.cab C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\FRAR C:\Program Files\Common Files\System\ado\en-US C:\Program Files\Microsoft Office\Templates\1033\ONENOTE C:\Program Files\Common Files\Microsoft Shared\TextConv C:\Program Files\Common Files\Microsoft Shared\THEMES14\INDUST C:\Program Files\Windows Defender\en-US C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Solutions C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\Setup.xml.un1que_readme C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.xml.un1que_readme C:\Users\5P5NRG~1\AppData\Roaming\UkLHCLmzpjhG9 C:\Program Files\Microsoft Office\Office14\AccessWeb C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.msi.un1que_readme C:\Program Files\Common Files\System\msadc\en-US C:\Program Files\Microsoft Office\Templates\1033 C:\Program Files\Windows Sidebar\en-US C:\Program Files\Common Files\Microsoft Shared\ink\sr-Latn-CS C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PubLR.cab C:\Boot\pl-PL C:\Program Files\Microsoft Office\Office14\PROOF\1033 C:\Program Files\Windows Sidebar\Gadgets\CPU.Gadget\en-US\js C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.xml C:\Program Files\Internet Explorer\en-US C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\en-US\js C:\Program Files\Internet Explorer\SIGNUP C:\Program Files\Common Files\Microsoft Shared\VSTO C:\Program Files\Windows NT\TableTextService C:\Program Files\Microsoft Office\Office14\MEDIA C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\images\in_sidebar C:\Program Files\Microsoft Sync Framework\v1.0\Runtime\x64\resources\1033 C:\aaa_TouchMeNot_.txt C:\Program Files\Common Files\Microsoft Shared\Smart Tag C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget\js C:\Program Files\Common Files\Microsoft Shared\PROOF C:\Boot\pt-PT\bootmgr.exe.mui C:\Windows\system32\wbem\WmiApSrv.exe:0 C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\en-US\js C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\Computers C:\Program Files\Microsoft Office\Document Themes 14\Theme Fonts C:\Program Files\Microsoft Office\Office14\Groove\Certificates C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS\1033 C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATERMAR C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\Setup.xml C:\Boot\pt-PT C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.msi C:\Program Files\Microsoft Office\Office14\Library\SOLVER C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C C:\Program Files\Microsoft Office\Office14\Document Parts\1033\14 C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.xml.un1que_readme C:\Program Files\Windows Media Player\Network Sharing C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en C:\Program Files\Common Files\Microsoft Shared\THEMES14\WATER C:\Program Files\Microsoft Office\Office14\Groove\Sounds\Places C:\Program Files\Microsoft Office\Office14\Groove\XML Files\Space Templates C:\Program Files\Microsoft Office\Stationery C:\Program Files\Microsoft Synchronization Services\ADO.NET C:\Program Files\Microsoft Office\Office14\BORDERS C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\web C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7 C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.xml C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\SpringGreen C:\Program Files\Windows Media Player\en-US C:\Program Files\Common Files\DESIGNER C:\Program Files\Microsoft Office\Office14\PUBBA C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\SoftBlue C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.xml C:\Program Files\Common Files\Microsoft Shared\ink\nl-NL C:\Users\5P5NRG~1\AppData\Local\Temp\kP8E59.tmp C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\Discussion C:\Config.Msi C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office.en-us C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelLR.cab C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\SpringGreen C:\Program Files\Windows Media Player\Icons C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Access.en-us C:\Boot\hu-HU C:\Program Files\Common Files\Microsoft Shared\ink\fr-FR C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\OneNote.en-us C:\Program Files\Common Files\Microsoft Shared\VBA C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.msi C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\images C:\Boot\it-IT\bootmgr.exe.mui C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelLR.cab.un1que_readme C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PubLR.cab.un1que_readme C:\Program Files\DVD Maker\en-US C:\Program Files\Microsoft Office\Templates\1033\ONENOTE\14\Stationery C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordLR.cab.un1que_readme C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\FREN C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\osknumpad C:\Program Files\Common Files\Microsoft Shared\THEMES14\IRIS C:\Program Files\Microsoft Office\Office14\PUBWIZ C:\Boot\de-DE\bootmgr.exe.mui C:\Program Files\Microsoft Office\Office14\1033\PUBSPAPR C:\Program Files\Microsoft Office\Office14\InfoPathOM C:\Program Files\Windows Media Player\Media Renderer C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordMUI.msi.un1que_readme C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions C:\Program Files\DVD Maker\Shared\DvdStyles\Full C:\Program Files\DVD Maker\Shared\DvdStyles\VideoWall C:\Program Files\Windows Media Player\Skins C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.xml.un1que_readme C:\Program Files\Common Files\Microsoft Shared\ink\da-DK C:\Program Files\Common Files\Microsoft Shared\THEMES14\STRTEDGE C:\MSOCache\All Users\{90140000-00BA-0409-1000-0000000FF1CE}-C C:\Program Files\DVD Maker\Shared\DvdStyles C:\Program Files\Common Files\Microsoft Shared\THEMES14\SATIN C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\en-US\css C:\Program Files\DVD Maker\Shared\DvdStyles\HueCycle C:\Program Files\Common Files\Microsoft Shared\VGX C:\Program Files\Common Files\Microsoft Shared\THEMES14\DEEPBLUE C:\Program Files\Microsoft Office\Office14\Groove\Certificates\Verisign C:\Program Files\Windows Sidebar C:\Boot\BOOTSTAT.DAT C:\Program Files\Common Files\System\en-US C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Proof.es C:\Program Files\Common Files\Microsoft Shared\Smart Tag\LISTS C:\Program Files\Microsoft Sync Framework\v1.0\Documentation\1033\License Agreements C:\MSOCache\All Users C:\Boot\zh-TW\bootmgr.exe.mui C:\Program Files\Common Files\Microsoft Shared\THEMES14\CASCADE C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\en-US\css C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordMUI.xml.un1que_readme C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\GrayCheck C:\Program Files\Microsoft Sync Framework C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images C:\Program Files\Windows Photo Viewer C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Excel.en-us C:\Program Files\Common Files\Microsoft Shared\ink\pt-PT C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\ProjectTool C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\Setup.xml.un1que_readme C:\Windows\TEMP\EG1F9B2.tmp C:\Program Files\Microsoft Office\Document Themes 14\Theme Colors C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlookMUI.msi.un1que_readme C:\Boot\pt-BR\bootmgr.exe.mui C:\Program Files\Common Files\Microsoft Shared\Help C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Biscay C:\PerfLogs\Admin C:\Program Files\MSBuild C:\Boot\zh-TW C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\BabyBlue C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\ENFR C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\ExcelMUI.msi.un1que_readme C:\Program Files\Microsoft Office\Templates\1033\Access\Part C:\Program Files\Common Files\Microsoft Shared\THEMES14\STUDIO C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\Welcome Tool C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\RedistList C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C C:\Program Files\Microsoft Office\Office14\Groove\Certificates\Verisign\Components C:\Program Files\Microsoft Office\Office14\Groove C:\Program Files\Common Files\Microsoft Shared\DW C:\Program Files\Common Files\Microsoft Shared\THEMES14\SONORA C:\Program Files\Microsoft Office\Office14\Visio Content\1033 C:\Boot\nl-NL\bootmgr.exe.mui C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\Setup.xml.un1que_readme C:\Program Files\MSBuild\Microsoft C:\Program Files\Microsoft Office C:\Program Files\Microsoft Office\Office14\CONVERT\1033 C:\Program Files\Microsoft Office\Templates\1033\FAX C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.msi.un1que_readme C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\InfoPath.en-us C:\Program Files\Microsoft Office\Office14\InfoPathOM\InfoPathOMFormServices C:\Program Files\Microsoft Office\Office14\Groove\XML Files C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Cartridges C:\Program Files\Common Files\Microsoft Shared\THEMES14\ECLIPSE C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Publisher.en-us C:\Program Files\Common Files\Microsoft Shared\ink\sl-SI C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Biscay C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PublisherMUI.xml C:\Program Files\Common Files\Microsoft Shared\ink\tr-TR C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\symbols C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.msi.un1que_readme C:\Boot\Fonts\wgl4_boot.ttf C:\Windows\TEMP\1j5C5.tmp C:\Program Files\Common Files\Microsoft Shared\ink\fi-FI C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\SoftBlue C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordMUI.xml C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\en-US\css C:\Program Files\Common Files\SpeechEngines\Microsoft\TTS20\en-US\enu-dsk C:\Program Files\DVD Maker\Shared\DvdStyles\Travel C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C C:\Program Files\DVD Maker\Shared\DvdStyles\Vignette C:\Program Files\Microsoft Office\Templates C:\Boot\Fonts C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.xml.un1que_readme C:\Boot\el-GR C:\Program Files\Common Files\Microsoft Shared\Smart Tag\1033 C:\Program Files\Common Files\Services C:\Boot\pt-BR C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\Setup.xml C:\Program Files\Windows Media Player C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\BrightOrange C:\Program Files\Windows NT\Accessories\en-US C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Desert C:\Program Files\Common Files C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Office32MUI.msi C:\Boot\en-US C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\en-US\css C:\Boot\tr-TR\bootmgr.exe.mui C:\Program Files\Common Files\Microsoft Shared\THEMES14\BOLDSTRI C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\Calendar C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\PRJPROR C:\Program Files\Microsoft Sync Framework\v1.0\Documentation\1033 C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\en-US C:\Program Files\Microsoft SQL Server Compact Edition\v3.5\Desktop C:\Program Files\Reference Assemblies C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Project.en-us C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main C:\Program Files\Microsoft Office\Office14\1033\PUBFTSCM C:\Boot\da-DK C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordMUI.msi C:\Program Files\Uninstall Information C:\Program Files\Microsoft Office\Templates\1033\Access\WSS C:\Program Files\Microsoft Office\CLIPART\Publisher C:\Program Files\Microsoft Office\Office14\PROOF C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlkLR.cab C:\Boot\sv-SE C:\Program Files\DVD Maker\Shared\DvdStyles\Memories C:\Program Files\Microsoft Office\Office14\CONVERT C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5 C:\Program Files\Microsoft Office\Stationery\1033 C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0 C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PowerPointMUI.msi.un1que_readme C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\14\BIN C:\Program Files\Microsoft Office\Office14\Groove\Certificates\groove.net\ManagedObjects C:\Program Files\Common Files\Microsoft Shared\ink\es-ES C:\Program Files\DVD Maker\Shared\DvdStyles\Push C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr\Proof.cab C:\Program Files\Common Files\Microsoft Shared\THEMES14\RICEPAPR C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures C:\Program Files\Common Files\Microsoft Shared\Filters C:\Program Files\Common Files\Microsoft Shared\ink\el-GR C:\Program Files\Microsoft Office\Templates\1033\Access C:\Program Files\Windows Journal C:\MSOCache C:\Program Files (x86)\Adobe\Reader 10.0\Reader C:\Windows\TEMP\wE9C6.tmp C:\Boot\BCD.LOG2 C:\Program Files\Common Files\Microsoft Shared\THEMES14\PIXEL C:\Boot\ja-JP\bootmgr.exe.mui C:\Program Files\Windows Sidebar\Gadgets\CPU.Gadget C:\Program Files\Common Files\Microsoft Shared\ink\he-IL C:\Windows\system32\C:\Windows\system32\mcbuilder.exe C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\Setup.xml C:\MSOCache\All Users\{90140000-0117-0409-1000-0000000FF1CE}-C C:\Boot\es-ES C:\Program Files\DVD Maker\Shared C:\Program Files\Windows Journal\Templates C:\Program Files\Windows Photo Viewer\en-US C:\Boot\cs-CZ\bootmgr.exe.mui C:\Boot\zh-CN C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C C:\Program Files\Common Files\SpeechEngines\Microsoft\TTS20 C:\Program Files\Common Files\Microsoft Shared\ink\lt-LT C:\Program Files\Common Files\Microsoft Shared\Web Folders\1033 C:\Program Files\Microsoft Office\Office14\Groove\Certificates\groove.net\Components C:\Program Files\Microsoft Office\Office14\Library C:\Program Files\Microsoft Office\Office14\PROOF\3082 C:\MSOCache\All Users\{90140000-0019-0409-1000-0000000FF1CE}-C\PublisherMUI.msi C:\Program Files\Common Files\Microsoft Shared\ink\zh-TW C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\BrightOrange C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform C:\Users\5P5NRG~1\AppData\Roaming\C2HIZS~1:bin C:\Program Files\Microsoft Office\Office14\Groove\Sounds\Things C:\Program Files\Common Files\Microsoft Shared\ink\th-TH C:\Program Files\Windows NT C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.es\Proof.cab C:\Program Files\Windows Journal\en-US C:\Boot\fr-FR C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\1033 C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\ESEN C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\BrightYellow C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\images C:\Program Files\Common Files\Microsoft Shared\ink\sv-SE C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\120DPI C:\Program Files\Common Files\Microsoft Shared\THEMES14\COMPASS C:\Boot\en-US\memtest.exe.mui C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7\1033 C:\Program Files\DVD Maker\Shared\DvdStyles\Performance C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\images C:\Boot\BCD.LOG1 C:\Program Files\Common Files\Microsoft Shared\Triedit C:\MSOCache\All Users\{90140000-0018-0409-1000-0000000FF1CE}-C\PowerPointMUI.xml C:\Boot\ru-RU C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\BrightOrange C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Lime C:\Boot\fi-FI\bootmgr.exe.mui C:\Program Files\DVD Maker\Shared\DvdStyles\Pets C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlookMUI.xml C:\Program Files\Microsoft Office\Office14\1033\QuickStyles C:\Program Files\Microsoft Office\Office14\FORMS C:\Program Files\Common Files\Microsoft Shared\OFFICE14 C:\MSOCache\All Users\{90140000-0044-0409-1000-0000000FF1CE}-C\InfLR.cab.un1que_readme C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Desert C:\Program Files\Common Files\Microsoft Shared\THEMES14\SLATE C:\Program Files\Common Files\SpeechEngines\Microsoft C:\Program Files\Common Files\System\MSMAPI C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy C:\Boot\zh-HK\bootmgr.exe.mui C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Outlook.en-us C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Swirl C:\Program Files\Common Files\Microsoft Shared\THEMES14\SPRING C:\Program Files\Microsoft Office\Office14\ACCWIZ C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsTemplates C:\Program Files\Microsoft Office\Office14\QUERIES C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.en\Proof.msi C:\MSOCache\All Users\{90140000-002C-0409-1000-0000000FF1CE}-C\Proof.fr C:\Program Files\Microsoft Office\Office14\STARTUP C:\Program Files\Common Files\SpeechEngines C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4 C:\Program Files\Microsoft Office\Office14\PAGESIZE C:\Program Files\Microsoft Office\Document Themes 14\Theme Effects C:\Program Files\Common Files\Microsoft Shared\ink\zh-CN C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Slate C:\Program Files (x86)\Adobe\Reader 10.0\Esl C:\Program Files\Common Files\Microsoft Shared\EURO C:\Program Files\Windows Sidebar\Shared Gadgets C:\MSOCache\All Users\{90140000-0043-0409-1000-0000000FF1CE}-C\Setup.xml.un1que_readme C:\$Recycle.Bin C:\Program Files\Common Files\Microsoft Shared\THEMES14\CANYON C:\Program Files\Common Files\Microsoft Shared\THEMES14\AXIS C:\Program Files\Common Files\Microsoft Shared\THEMES14\RIPPLE C:\Program Files\Common Files\Microsoft Shared\ink\pt-BR C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\BrightYellow C:\Program Files\Common Files\Microsoft Shared\TRANSLAT\ENES C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Resources C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\en-US C:\Program Files\Common Files\Microsoft Shared\TextConv\en-US C:\Program Files\Common Files\Microsoft Shared\THEMES14\CAPSULES C:\Program Files\Common Files\System\Ole DB\en-US C:\Program Files\Common Files\Microsoft Shared\THEMES14\RADIAL C:\MSOCache\All Users\{90140000-0016-0409-1000-0000000FF1CE}-C\Setup.xml.un1que_readme C:\MSOCache\All Users\{90140000-001B-0409-1000-0000000FF1CE}-C\WordLR.cab C:\Program Files\Common Files\Microsoft Shared\ink\lv-LV C:\Program Files\Microsoft Office\CLIPART\PUB60COR C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlookMUI.msi C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5 C:\Program Files\Windows Sidebar\Gadgets\CPU.Gadget\images C:\Program Files\DVD Maker\Shared\DvdStyles\Sports C:\MSOCache\All Users\{90140000-001A-0409-1000-0000000FF1CE}-C\OutlkLR.cab.un1que_readme C:\MSOCache\All Users\{91140000-003B-0000-1000-0000000FF1CE}-C C:\Program Files\Reference Assemblies\Microsoft\Framework C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Biscay C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\STS2 C:\Program Files\Windows Mail C:\Program Files\Microsoft Office\Office14 C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Swirl C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage C:\Program Files\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Americana C:\Program Files\Microsoft Office\MEDIA\CAGCAT10 C:\Program Files\Internet Explorer C:\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels C:\Program Files\Windows Mail\en-US C:\Program Files\Common Files\Microsoft Shared\Stationery C:\Program Files\Common Files\Microsoft Shared\ink\nb-NO C:\Program Files\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\ProjectTool\Project Report Type C:\Program Files\Windows NT\Accessories C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images C:\Program Files\Common Files\Microsoft Shared\THEMES14\AFTRNOON C:\Boot\ja-JP C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Office32.en-us MD5 hashes: 5a0cf162bc99075a2cf2c806a1e1582e bd3cd0cf8d88b16576f8fb0c17e190b1 6793c835e652e8b4dd4814dd9f473dfe 24edd5e8645870c9c2f4ff487987e9da 04db8470abf2aa10cbd1184bcb3c2bf5 b118cbb51ab3b47febb7b15cbc395485 13e21ef86205c33104ec3fb3f04c05e0 86b198a99386617a1c2d417ee4085f25 dc340fec6221653983b002b81954acb0 8d13903e3627c9fa6274f23494cf91c2 7e797268e1dbe2a389530c75d1b5900e 963d04f9390bf99a6951c9811cf3cd54 088563d613b490d47ad31a54ad4d3581 6fc30d7c67c29dde4aa9c2cb9481b94a 600e1c26ce86521690e46ba076fadcb3 ee3b84e961c94200887f33cc3cba04a7 ae8e63748207c87f60b857f4317e56ba fd43cf9a73846fb74bef0055b378a407 98ae29a0d0875603259a5ed773cdc427 2103bc14acf410c436ca92018bbb1081 b8dc8a1e809c85a8a91f74d074191d09 6ed1bc2d9a4da7f6144fd5564949d974 b1080b9e249ebba794ca2a1cbeecd213 956201dbc64d3f444e09a0d5c5f6e621 6cbd4c3cdbb9a40cde70a33f401c2a5e b6f3455d58e7331c776bcbee31634cda 645248505af5e625d09a302091d38a5b a39cd88e5caac43f7fe26a1c88af6a18 5b1747ee80e92c4db1ff39d6a1534053 c4674b0d7f1623e752a3046602e7d496 d4230017dfa0fd2d588c6dadad01c446 1c8422637a946dc2c95d45bfa9462605 c3cda15142c7ce754c30f2c58ce2a57b 8409341179071a1dba132236ddabc2b9 fadf952f38606218dd241d16e698e2b2 3455a7543196eb70ae27db4f4d697a70 f3d6679df0ca076d8be382ec8665f74e 4db945da9acd07fd814e34b2e9356e20 d5da857c4254f72459c55886ea6832e2 2e5fe90bbe1610ad0f80527770a21f41 d41d8cd98f00b204e9800998ecf8427e dc916abceec59e2362f0c7d5f00544f0 643cf9f5840f6ff9c9a6380f4e46e58b 84ccc953abdaed24294cac951c852dac ed4dc2191aac16565c9adb12e0dbfdb6 9492510efcf2d1aacdc225adcc7c4879 6b2f39765e9b0c7d18df775e39c51307 db979d53371d4bde6672ba3db1ff2771 e028c8417dd1f4a1bbebe990687f60be 77b4c9c6cd7e8dc8c7c158ef43573491 38b84c94c5a8af291adfea478ae54f93 1497efd1e5f1395f13cac021b9a2115c f2ddc7e6774e6474c86840b068325820 6b6b9f0928eb83ebe98eb88acbc2a88b 8116e91fec95489c642bd30a402960ba 8ddeebc9bdc0fbbd72b490528bdec7f7 d78ad6ba2eb6413fa1e1f9519a010431 78201673d76a9507b7ef7cfd0c5fcc71 a6c1191e3d84750a6990529d203b4218 53b25660d74700f47c1093424241511b 6e2b69ad969a0d492b3d601aeabe2d62 affbedb58232ffc8733b7b4cbe48e1ce 663e70dcb6642f7b7f7a9ca2d7b1b0f4 aa84d621cc29541e3d1b0de86bc1e01b c44e117bcbef4685632a3660f69040ed b246742ce743a1379625092380e0d13e 62bdf2b585c62f9debf0d2c36740f865 99b5ded01f18495e0f1d3fef3e88d365 ead3ec4e0b8e4996eec61205e6011d81 2718d7422a97a4c0febd91ed42f5b97a fd393e6a4d741ab4afa9dd46f8df7574 aa966382efb43b9d6b4d421ad8975626 cc4b6d1c750bb485ea2feb3248374063 9dbe17c109d677010b742fd4ffb490c6 9982597d5d739bdb0e2c565cdfba9596 ee90186efe7ebf62e697d8936cc8f582 d0603829da47593e147fd28cbead07dd 0a20d60ee9e6111191d0a371cb0b121c 2573546e0ab3334904a98cb75afee06f 6503d1d2cca1bb00115f4e30ce89a07e 3783330bed01c79285d8966f200bead3 4678067bd01181640bde714e7434d241 07aeca3e6cf215135e78730eec48bb95 SHA1 hashes: 2c4d22cd696faba2a282453a0cb40420c65f09e5 a42ca49bed1a9d9d6b6f9358fcaa47698f475c02 beb1f7eed20bf1308991486538c1b4222896c3d1 7edcbf21b3b21bd2949f189277d97b6bd5dfb407 d8806b7af2b5ee034ac3e18c6c91221f2dd0589a ee0cf6f57765a76b58b5bfdd9be10dfd2597f556 9dc5c76e9fd75a3419dd67885999139819106523 68f2e53211258f1e06b603ff8d3c3f9a1093da11 a0f598739560d4fb65c2cfc1bcce7d52a49d0f59 f77e7742f249ab94f31904fb04ff17e79809ef4f 685c3eeeef9fb365643ba98c4e5c965dcd4fba99 ac7d7152c05b0140277ed3c53e37e2c3c1e550b0 0829b64abe5b384a0faceca707b1c164839f20a9 3c346ceca5266c3fdd4556fa3d87d06c34575c44 980ae7f7c1f6f33bd5300ebd45930da3d0c1f238 f8e714be55e5514dfadb3ea7cfb70acfbe374c7c 6a31266428e5a04ed00284b258fbc31c873bd791 f3087368d3f14df15d0c935e9767b7a2bfa1883d f2f73d78e21d55664e5227c605b7a89ba1354fcb 086c9489af4d032bd00370588963c2f6ce20d21c 9f868a6708de266fa2609f09ffbbb5bcaa5c0069 74f135dce0250f8542ee71bd964572a887b99dd1 8703fc1611c7d2514d8f97b4613d757e08540798 da39a3ee5e6b4b0d3255bfef95601890afd80709 1704469913c3f3ad84e37819160bfc268de4fc6c fdefe4303354200371e4310e0bbab53dd1246e18 db99c3f05843f23740af9233c6f2d31a784a325b 7ea1b3725690dfc8f8bf090f9f8e02f91a9df0c8 5a62f1ccfe6f22964ad40dfca19b60184585927c fdb6f8c9e8487c06290efb68bec7617ff93bea2a d044b58d55c6c3932d7bf233fba924f01c8fa31b f405979b85a73f616a9bc8a0cdf6f2db91453e12 bbb702541b057f7917d1137ba68cba5ce4ec16e3 2eae188678fd15e72fe45267e747e1ad69efba2c fcbaf15ccf3149fa1af11d1a7c3a1f30454ad233 2d599fa4187e9f7c5fc75afce7ab64872e74ae9f c8641f18b49fd22f950fff91e15739246c43d409 b5a3a9a9848082d7d192b4f4870be76b2babf317 99433a7508bc9908faa7a0e55fe9bee6aa0e9c00 75e7cf27244f7a8d533ff633f7c4b7e528ecac29 4a62e5df7b8c398b8ce1020a3b7778d684c4b5e5 03034e782171bc831680abeff056db9d39b3c3b6 735a00747091318bb37e2a99495d7d2d329eeddc 7714a9407719aed5fe9b63c13f5e9e168f4eced9 65bd915e1aa18110705fe45deb1416fac44d2f08 9727c972d3780a4cc4f3277cbd03b74221d9a290 d989361c6e4fe4151618093693115a20410e51ca 905875e7678373daee2988f44c70fce1819154fb 798c32686d6752131299ae4a4be707b0ed29cb5c 1f22446176f609d746f5d817f9a58582c78e142c 66a2240d6a8fef5f7fd6e61b3ba1fa10022a96c5 41fd47765a3739774e42943e1046ac4db884dea0 ad899c627dd022d6ef1424bc69148e3c854cbe6a 29eee9fc42f1651e83225b1cd327a247af2c3b9a 44ef8f92be27376ab9126e05f7092f55afdba7c6 17d035efa2164a84a30955eb59c44b2c91884879 ec4993177416f1e250a12e30e1af41ca95d8a2b8 a1a9d287fd2875cd039ff9c4637029a7578c17eb 70ca5d68cf4bd151ba737023f9840487b4598f4e d110e6fb8c2a9459a56f28cb7a4b0940a54a9bdc 12e7323a81e267ccf6436b437cba542eff524b52 a8cbe720da1d1898c6b3dbff07d9ae6e5ff55fd7 f33357874e8abf33de219e89d4f0bfd75ce7e850 6fc1c36f1683eb07e6b0aa52e4eb026db66f8062 8189a5f443b014142cc478c1ded09b83f6f5fdb6 a517fc72af4f952f54d907583e67f1962f8260ad 63c858187dfabcd0a71b8869418d5a6151cc1414 3862c9139f821e62b4651cbf4a57797a5e6fb9ea 913e39050fa8f40a4486b7282bcdb5084421c27a f344bb3169b7c4fd64fe432d09f88be75f78e931 1cd1d210d8ab417d9b5d62b644f210e66e69052c 31f76a2d6e8895759059185d43c65c9aeda76d17 858ac7b85f44b29b16cbbac3a26f78790eb4270c 792a2d17b130788cb5de9dab41858480e2c73204 19b95355ceeca4ee23bc26b6e4d6e10b31e6ff2f 2a6774abc694a5ad2bcc3f2d12275e0c59b7ef5e 9a244cb7a589ed2f60c439e32d6972ac5ea10743 04f97053ed48ddb088ce2f536b0fd20eb931233e 6a9cc1b6888a4414ae7217a147d3a1a45d85f446 d00edb2a6fb9773247756f267b5529e0a3c32207 3029bc76addd7085c60d1fececdf68820c3fdaaa 66a1ceaded0ee2e8e573d5be3249bc30ddbc1dd3 d863fb51b91535771633548ce84c9f4e0c55e776 SHA256 hashes: 3ca05dacd0693cc16b9e5c68e4d5821b7fc8d313030fca9466fecbcf5f337be3 726d83b1a0654782aa631157cb6fdb1b5359e52e263837655ba23cca0aa4802b 43e70efd7a501592a7611366777531d2284e8d491590310d0f6dc1db835172d7 ae01fd0a30b67a68eb3631f7e5fdf5109c0b160d464d8d6f55728dad993cd113 4a511d1301259b1e6c92881899cff0c87db79a6c6bf0b3bf78687a66252756cd 2ca85ed7882430ca3a51e9095f92f0257a4192480f13dff18daabc7259a201cb dc7ad7e681b27718adab54698218458afd514ac0716efa665e36ef04507c9cbd c2a4b12da8a8d17786b197e61c5fe8d24e1441214b8d06212688e6cb5e2e387d d097e7399a6d3e57e57529ae65b49d6dd5fccd5259638fac08c44d2f5efac010 706a40ac9aa0776db6c3122c5f964ef94e68f1c42289181417326ae5d523372f e92a2dd953795ab69a61e928f441f196555210b48e3447752803391434608eaa f837ea08610ad9c08cb6e5f8cf8a34e2474528302c6646641a525e7d64811799 b903e37206f2789d99f0da8aeeacbf7b4007a8b4ffd8a963e63fb37cffea32bb 14849afed5acc5287680bc7ffa1169b2f48d3eff1f76c872a431ef7030c75d7a efeb1f658fe8e2b8c2f465f0278912f62120a08bb16ff54222d7240809647f18 ff5851caba4d6eba4292a180e907c055d990a9e2700050b541b24a3ef6b5111f 2370332bbd48489db41263ed866eeb345472e7c6d126235469fa1c996a5dda56 72ee2d7da07d31e81b6597144eeaabeca003a6ba9dbb1ec41cd9e9b22ebb2b3a ef63cef92264e2acc964ade7407cd3190c2762a427c367db8edcada84c7eb7f6 96c5886b611148c87ea1490deafdaddbf8131f7f03cd507b340ff43ec70c8de9 6694a6a6c3e2dea54a02c92ff45a86cbc58decae4fd86a40fbd2fcfa5d013fd8 4c346b05577c62da8d827001e439cf2530aa7283d833f1062e3235efa74f9c06 ba3c7a4b7f18dc0ea262f7ef787512018b59401e6f3cd07e53d1d54a52957a8d be0ef347bf2786ebb11d042da144f5fcb94934dac65acae1fb14e8854047b887 5e0007e40dfc63ec266d6906e8171f9eb69116069a701c2c7dfabaacceab4f84 6b46b3b915eb0fba64f8b2dcc8ed51d3a8c8f17115de7002cb9c1d60198f7ab8 a3491b6d7bb2cdd08bc1e850ede6994cd6c4bb7e5cab35fb1fffbb342f378382 936ce9743326c11a1d280bfa06e770fb4dc5097e49dc01d66597fbea77289e33 83d7238bcb7cb0d44b69ea71347aa9972b34914d6ae7d655c0ff52c881e16d3f e4c829cd260fe604d1ac9e306fb7ce74522bd6e0dbccb4d6d85406c283a2860d 66d21b5a309844f828c4170ebccfca6f5c09e2bef71832d1017ec90b24035f2e a9bb4a686dad5078736189b6c124fdfe04ffcede6ac3b147f0d32850a3e19d5b 1ff6de93defec1757295889f66197301da1ba041a9acae97f069677f0a8b0189 1dc1b0ae7ef38e8c382e27e0d1e8346c5de8ac55685b6a0513cd6e31ebd94cd8 2eb0d6618048dfff12dadcd9956f2471a8491edcc901a6b4efa08076866a87d3 c8cd673c3c9797f96e19b57d5b689caf77bbb3ebb73af88b999b8b2a24987703 cb816101ebc2ecc1f6b9b57e8bc5188e0354b5a4c64faafe3494419153c817d4 ebe24c7190a164bf8b8af92eed7cd2f8110788770f1b247429dcc360d29aeb14 af60b55c3726121a1a3d99126792cbcc294c9ec39dcb3277c50bdfec0c88ac95 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 1778d87590555eb59fb8cee46959269fad8c56beed1a12019f58028e4876730b 8fee7290b604b0f13118c95d7ff994c6e5e4ffb4e6b6ac4447a248882eb7c8c5 9cea7abef444e305f883911f64994f6c72e52c2711f7830ce756a51257414534 ff674cdb94153560114f0422b68e19b1711e41800facc0e36cbafa4bc277a713 1ac267ac73670bea5f3785c9ad9db146f8e993a862c843742b21fdb90d102b2a 799acbea8cde8e8cc3eb72526e25c7366665768b00424fff272b5dc5ead23857 ad1745fb0662b3217f3d8e591fc3476278766709a185b43bdea26c966071a6c3 2d5b89818f7273f63b4781641f9be3631ca27b947d66722875adeb5a0be82ade 60c13e3e36344828a4098971835b59f51462b2baefe5ffd1d07fd31d58cc4423 676eead8b2dc3f3e81f3a72324dabc18f6495610db0c34f0f17092227d76a62b 5435f4769f88fa3fb5f019d1788c78460fd974a3f1827e46d29d75c6fa5d81bb 435f5deacc91d8b1f937e45ec8e1158a82df09d65e03e27601907386d013d30d 3f2c028d618726c98e729f249c9960930581197f76220ed7b31e329f48cc88fa c76618bab2612ef3ab9476193377469ab024c2061404b922855b2280c7926b52 2a681a1999d0160b3aa91dd8ddc68376285cd4e4e8c8a6e8b1b6cd8b1104b47e f805bc40afb3a06fd7f6791e51f2584212f5eca74e25ca726fe69f6929e2c76d 80198ae0df1a42c0375515db21dd34bbe35774c543ac848ae449649b5296f3f1 bc276c55eb524738f80c7140ba79d2369c470d0709dc2e5cf37108a80b31975f 569a2d3da4b9c4b218e93c5b651e21f8372898c2a09c7d21174f9cb9adbc6ae4 dab0dfb8673da78a5a87ff1a71a0890736e48199b975dadfb9cf05c73411653a 3d70a2e9992ad5200af3fe89073473054a9e3a38c493b6260248c26d58523021 03235a844eebf5561139bb9ef1f47e2b0fe4b01c7e8a733fd0309e863acf0234 d75f6dee0ee4f6e25cc83a8850555530b6190703878b118b35d65ee0c5ace58e 3768652c2a9eea691e968779d892bd4bfb8f256b1c031deb85431c2138e1a1b3 fcf1a13655fcca8510b523483bb410f1845a42ab9939de607090b32a3c6335d9 782ebd5859bd9a01aa2c586790820cf7deb58e3dbdb6bedc83fdbafd15e3ee7a 5ded2c71629b078bd277f7751dbe3d6c6ef81a90a18eb38a7dbec7a89252e88e 1516d72b7ccde79257f97e672b3b6b51da5a73855d70baf908af5adc38567a37 3a4d141a8b8f0fc87e902e8d9c5d33637d3afa44da8c0452ea031a28c250cf18 3dc9547bc0cc0ef80343819f504670fa2757c80234d32853512c4b569237bc17 67afcd7e2e60e314fe9a107d98e29d134d0d121f0df42517e02e2af2ae0786b3 718bc5210c79c55ed7bfdeaaf0ea3d62b5eb325eaf15c54e120deac2323eb991 f34b0986e9bd1e87510ea67a5fd82978505b4c827bd71b8d0030842820a7aa3a 01fbd858a242897d355d7953b6eb17da0c9c3abb1674efe192c71c04b5101224 dba70cace2f86ae15ff7555c843883a719265dda4c69862ee0bae268e6980dec d52461cec15046605370b8fbc8fba12239c8ce22a676c75e09783f4139da8db3 3fbf331f57f3037c148731610cc54e60bc57e4132193638016ee89347c3002d0 8b391ed50eb499fe5a7c4dc2009741059d55150da588e9a594e65398a9042812 905d48fd017e84f2bc79a9eaf19b15e1bf906d4fd979687493dabd2eed7264b0 eda65679f238f5574269f0fb96fe6c7279c544fd98f612e0811f864c6728476b 1648408323fc251f7fb950450697a065986f12fd1607bcdef5b84194835d4b1d 030e7ef2a990ca1a9b9b1b0b19ffa42f5b7c43a76879364c162d461916fd0b11 3422caa62a0a82a0394e327a5b6959ab09c22e77efcd50a3d87c6ccba9ce59f9 SSDEEP hashes: 196608:AvkTkaegW890uZSCgE84dX/WLCxJMon0Ywm8BkLp0RK17ahH8:xI8WU7f/KCxF1wVhYIc 24:aGvGzqukMrSJgTN8ogsEOYvLDzRABVgOC+YXhELy3u7u42SjaRT1Sv:aGXuHrSCTNblXYDDzRAkOC+O3st2Tcv 49152:LY56gzmF5iMsOsT+heukAaQeImlHEzJUrVlhfyhbC8eDB1Sv8EjOU+kXuI:856gKrUT+k9A5FtzJklhqU8WmjWoj 24:qMnjBlZI9I/kSzIRMNFa2YVmH/i48uGQ6qwfr1q3If5TFMFB+vhm6WPsUeBHV81p:qMhsIcSBYVh4+u4IYXWP09q1p 3072:vlqQsr2q0MSbpl/d6RfXpSWgIQROb2ODLx0lB+V7LAoeLNgJqtcQ:vPsr2q0MSbp+RfpXgFOXfV3kL 24:aGvGzqukMrSJgTN8ogsEOCzIvL1cSd5EQwA8BoSyaZtxHzUn:aGXuHrSCTNblXVDaAEQZSyMt9Un 49152:SY0noFGUFkZbRGNe8ivwny2Bb50fPKhnGtoYj/34wsWjsof+Kz2:GW1kZlGNe5vwy2BbMPKlAwwbjsoWKa 24576:VxQ9Mh5Lnzv556mr8bm9PKFkn7QO/LxP42pDfb:U9G3visumpKuQO/L1P 196608:5JdrFQFEw5CMyOBrfplx6IIDZshGIbmsS/Rf3HPWuu7dv06iCXgQg5p2X1FIt/+N:5/NwJdPE5uvbyXuN7dv05b50XMWN 3:cPBk3QRtucmJhpozzlLq3QRtt7hX4an:oBk3QbTwhp4oAbt6a 48:eXa+fYGuHgebDPw/IBnu/QEkm1KaLGf0DvW+YNXZqcKXXfHG:kpAgePPw8uBbXGfEYNX1YPG 24:aGvGzqukMrSJgTN8ogsEOFvL33FNDg/xenuZrd0x+T8BK5x:aGXuHrSCTNblXFD3mpas 24:aGvGzqukMrSJgTN8ogsEOevLS2WYcDMz/+keYXLvQODUw2MbyTwGf:aGXuHrSCTNblXeDSTQzmWXbB97GTwGf 12288:6eM6FaOyKhh6AogQmbrnS/VHT827eyk3ip5YNP7xPJ399lnlGREGktR84g5TaL2y:6eHaOPhooQCTK5Zeyk3z0B8qT5TaL26j 24576:xK26HG4CK28/hdw4gYYi/2aD9tdWUAv9ZsOeQv4SB5zC:/6HbzpdFgz8R9tkUAv7KQQSnC 24576:eLWcKIgFPAM0tJb4/DXCSpAfl/RLmfJ4aAoAXfgCvsKq:eiFktJ4ReCfJ419Xo0Hq 96:kfXz7y62vA5qeHya739pztHuDq2CZpAnGt1dm:kfXny6vqeHLLtO7CAyM 24:D1O60dY9aTrJ0/XgMfpST6vbOEq7vwFzMeCC3fGfQhp1wZsGySflUg+gbRi5JFdX:Q6y4aTrJ6TST6DAIFzMZC31hpqK4fRiX 3:TdiHXDXCWv:RQDyo 3:TdiHJhXcsR5RAkSZv:RK5mfR 12:mA45qnLGQun9AYw80rxRXPP3U1JdjfKhprkMA0J9+Hpam8tA+hnxEtiwn:mA45ELGBn9gnk13fKhprkr0JgJKZZO7n 196608:lNv1OUuWKHRVpLyc9MfE/ZJj45bBJzBlVcy/gJLpv9O6knBgmJmJdGBbcxdJ:l1oUuWyVpLyfT5bP7VJ6pv9O9Bgs5idJ 24:aGvGzqukMrSJgTN8ogsEO00vLwXMCE7d3Jwe8xAoTEKYBBtZUDtTfp7pA:aGXuHrSCTNblX00DwXMKxAozYBBStTRi 24:8EUgQwd9Tkft3IoOe6rbt2QEepzgLXn7RKO7MjgKQ5UizZp4LrGMmoiGMmVHAW4a:DQ2klxS/8oKNKpjgKRiVp4OVmRDYImGT 196608:J7ggn9VPhXcRZbSd2xEon2ARyBB901AmzVeL0Fyr3QVHFt:JNPhXsZi2xEon2Yyf901pzM+ew 24:aGvGzqukMrSJgTN8ogsEO3vLsnOwnuFW2S/URpW1qsOIRDQz99yRfy:aGXuHrSCTNblX3Ds2FxSsFMRfy 24:aGvGzqukMrSJgTN8ogsEOxjynvL8HfxzMxJo2pPpZqP68ST5oAnZa+F+xoiW0tO:aGXuHrSCTNblXInD8tMxJX7qdy5vnZ1r 96:lW2CYmNUJAQJJcwah5nG2SCmbW9fWuXTiV+zq7fWphcwcWRNrjX061:tAQ4pSTbmHXWczq7rR+NrjE61 24:aGvGzqukMrSJgTN8ogsEOceYvLPl/VcxVmh5tJoEhGF9wlP3Plnkcv:aGXuHrSCTNblXcRD9GxVMZ1GF+Ptnke 24:aGvGzqukMrSJgTN8ogsEO5vLlBxBe8UXXZTvF4bD/eb+qjlP:aGXuHrSCTNblX5DlBne8iX9F4u6qRP 12288:n+SzMCLalVyDs0/5FrlrGHq7k7eOIIlDEvZi7aksyLAc2hid43cFeA+wbE:n+Sz4VyDb1CkkaAuvryLAxjyeubE 24:aGvGzqukMrSJgTN8ogsEOAhGvLRPFD+PCSSjcHUlWvVR5O:aGXuHrSCTNblXAhGDRP0PPd0lKVu 24:aGvGzqukMrSJgTN8ogsEO7mvLVrfKuASLb6hnQdEi1KtHHSYmbd:aGXuHrSCTNblXaD9D+hnQd9OnxmB 24:aGvGzqukMrSJgTN8ogsEOkyAvL6A2T3neA9xTUsIDkDRZnEndWriCKQa5CqneEC:aGXuHrSCTNblXkrD6AI3eEYsIDkDEndq 24:+MH+mWu/toxQlYI1vicxEudDNjYUv8wZvT14PIZUlYIK+O8gVWtIE+Ho/6YMCQyA:+MemWEtmQlYIvicxEudDJYtwZL143jKZ 24:aGvGzqukMrSJgTN8ogsEOUvLKIcdL+g/tuPEJwdSX9ls:aGXuHrSCTNblXUDKIcFDtuPFdSXjs 24:aGvGzqukMrSJgTN8ogsEO/zvLW3VdjXB9j4SSZgsv9C3YdumWc15FG74bNixkU:aGXuHrSCTNblX7DWFP9jXtY9P915csbO 24:qQbrHX7YeVBsTsMsPoF4scEvbqU+y8/xrHkjgfswGoESDpaHIUjklfxpn:qQPEeZMNFjvmUu9HkjgsNStMIukRxp 196608:baaw4v0v5+gs9sYfxgb60cxJOxXGTRNcHaLGwDowyGfrVnmfHzl:p2snlfzKGTRNiaTrVuJ 196608:JWazG9JBMPunIMDcG6GJBdl8pFfpsY/T+w6yUsy7PXey7hlyZH2rp/:tGXnIMDpjvYfpsGT/ezX7DyUZ 196608:M7tODhuua3qyMe6Qw8MhnZxVKjPtLlqvBqYdxSR8ocYsX:M5Gux3qyMenw8KZxgFAvBqYzmTsX 48:aj092HPWaCeHmURWcIkJbJPhrzuF1PJ3Dacn:aI2veg+kJbvrz6PJ3Dac 49152:o5qWIScR2q9NpAYbYYcmWTGMCUfrUapwzGGFXPdCAuGXEb4369b/5ac:o5hIScYWpAYNWTZNXXGZPgAuGUk36dBj 49152:IWa4xuo/pyTJ6QjXhIK5tmsC31psKnWvr1SmNCng3oIvvfSBSC/TmN9K:IWa4QoBylp6+tlCFFnWhSmNl3wBSATak 24:aGvGzqukMrSJgTN8ogsEO3vLDK3bgZLdgP7Ifh1+cYgVGiaA:aGXuHrSCTNblX3DDyb2gEfv+QG0 24:aGvGzqukMrSJgTN8ogsEO/JEqvLd/IdWFEUez4Bgv7w5xNbsd63:aGXuHrSCTNblX/qqDdgcEUSWgvAxqS 24:aGvGzqukMrSJgTN8ogsEOhvLgrZTVjjkHe65hrshUovHv//hKmXFPZD7H3Ca5+dn:aGXuHrSCTNblXhDgrMHecrsFnEmhVb5Y 24:bIyfWORSezEL2JEVCKN14j0vhkVLn8mbEk7gx0N6OfAPpqsaJRlOh4qtUiPJCidr:bIyXRzELDrN1w0ux887gGiqsarlOh2NW 3:: 24:aGvGzqukMrSJgTN8ogsEOpvLGA8wqoOHlvKnC/fBcZ7jFen:aGXuHrSCTNblXpDGA8wqoOFSnsetjFe 24:aGvGzqukMrSJgTN8ogsEORvLBFamwsOzWaJ27ZPnpVmtrQNPX2mNaL:aGXuHrSCTNblXRDheJ27ZPpVkrnmNaL 48:j2C7E05TPqHbGjzQpM6qxXIIvgFwvr7Ix83lT0nh:M05b6oYNqxXIigFM7IxEIh 24:aGvGzqukMrSJgTN8ogsEOQvL6QBOVJeJg/l11kCJoc5USHrKGdQoJLWqeS7nZ:aGXuHrSCTNblXQDWVGg/l11t3DrLQoJd 24576:bxD2IzQcrLFxFPteAAFv+kN2V9+AcWTUacIvh:52IzQcrZ1e9LUXGWTRFh 24:aGvGzqukMrSJgTN8ogsEO99vL4eJk3sAuRMET1vBTZyRX5:aGXuHrSCTNblXbDJEEsX5 3:TdiHTmJh1k5RAkSZv:Rewh+5mfR 3:cPBk3QRtucmJhpov:oBk3QbTwhpy 24:aGvGzqukMrSJgTN8ogsEOUvL2mAgLmzCV6njJLJNeIlAJD+//ajsbv:aGXuHrSCTNblXUD2mN3gn9LsJD+Xa4 24:aGvGzqukMrSJgTN8ogsEOYvL5yX3F5AlvdGfO6RVrMv+M02db+/I:aGXuHrSCTNblXYD5MYvdwO8xy3 3072:8ux+K3HzuejYqsRQv7120Ly762B3at7VGpWnlkfNFA8w722J4h8e:8k++HiejY3RQv71xKq78w722Sh 3:cPBk3QRtucmJhpozWNk3QRtucmJhpov:oBk3QbTwhp4WNk3QbTwhpy 49152:S/PZtlguhOy6MM+US1zaPWqh2pQYF3k2MeiF7F9mx86:S/RtR6MMi1zaONpQ8m9+86 96:H5eHQst/+PcyqRyfGEoegIXwceIihnFBMLBv1i4rVqQj6eqUjfWhdgP+9dY76TMB:HMQsbuGEhggbucLFVqBTUjOhdgJEMPhz 3:pMCMj:3Mj 24:aGvGzqukMrSJgTN8ogsEOKvLiC6hiro79o2qFMYcfRl9BYGb5gTCSdnK9d5uB:aGXuHrSCTNblXKDiCdKK8YcfH9qJTDdz 196608:McX+hpkHoLw6iqEUfB581mQrLDBW1u2i1bSk7uOGf0L22OK+wq704tWEvdNEIRK:32pkHos6iKfBgF3BJj1bL++2bN70uwIg 24:aGvGzqukMrSJgTN8ogsEO2vLHYhwTjfodxUB2vPNOn2Cf1OFidY5gCC:aGXuHrSCTNblX2DHdTjQEionFyC 24:aGvGzqukMrSJgTN8ogsEO7/vLjR2jnicfAr327kv/9tChEP8jolUqVe6:aGXuHrSCTNblXrDjRkc2SltoE0oO16 24:xYi7Wk+HvN/CO8dZ0DgekvxIOTgR8gzE0dqWV5Y7i1IDeGZ39faRyjX5:xok+PN/adeU72OnQzqWTY7qgeY39iEd 24:aGvGzqukMrSJgTN8ogsEOhYvLJtKdRTidBp2OHmIz580MKl9BYBE76:aGXuHrSCTNblXhYDJUdRmdL2OHmmsKlG 48:WRbpfAUaDLOYpbXgd/3aN1v1oEXckA+PdTsNEs9ISyxCbtJJ:e2UaDLOYpUd/3aN1CEXckvPqNEsWCzJ 24:aGvGzqukMrSJgTN8ogsEOqovnvLKuxvh0ZYBxSO7LSzdlKqpX7i/X5K:aGXuHrSCTNblXTvnDKuxvh0ZYBxzcdZ9 48:JaSQ5f3cmvaoDEmL7ha+/cT6AOWaIWO2u:gSQN3cm7HAucYtIWxu 48:CN+kxdfF8WAGepyWVNbnKwxIEBcTOJBSHIxCT8cWDy:cYVGetVUw0MkHIwT8cr 24:aGvGzqukMrSJgTN8ogsEOJvLxAlzL0KFncjVVRm08VQAn5cQFL:aGXuHrSCTNblXJDxWzwKIdm08eAWQFL 24:aGvGzqukMrSJgTN8ogsEOgvLNeg5/ZR8IgFGCxM+6pRVjouD:aGXuHrSCTNblXgDEy/rgFzxM+wR2c 24:aGvGzqukMrSJgTN8ogsEO/nvLVnNSeG1fV4YFZ+6pqXnsf0MDMwarqH9X:aGXuHrSCTNblX/nDVnNSzqY/+6pq3sf7 24:aGvGzqukMrSJgTN8ogsEOp6CvLJPCRem5gYY6shLKdZlg8dmHB7ioHRBvcNp48+e:aGXuHrSCTNblXoCDJPEVeL60LKdZlg8/ 24:aGvGzqukMrSJgTN8ogsEO/kd7nvL0L0jSKsIowF3xvY3AuavVbbvprpgJOeAeAE:aGXuHrSCTNblX/WnDRWelvkJOAf 24:aGvGzqukMrSJgTN8ogsEO+lvLdM2po4rwL12Qu79Mjo9mfViAB1z9XHP:aGXuHrSCTNblX+lDG2rwLkQqWjoQfQAJ 49152:WX4wrqaio2eOu4e+QwQ4kJ2dadyurNjcXejog6hEFHLqU/B0RZ1:+45aiIdhMQ4QdgXZgs2HJ50RZ1 24:aGvGzqukMrSJgTN8ogsEOFsnvLjJ/j4/tG2wTUag5D50Xc0eFZQ7ZluHJcsMqRG:aGXuHrSCTNblXFsnDjJ8lGsN510Xc0ew 24:aGvGzqukMrSJgTN8ogsEOvJmvLh1r5RfbBfGgD854awHXWOz9xYLN4m1UEj7n:aGXuHrSCTNblXvJmDhxFle4bWOzrYKvk