What is help_it.exe?

help_it.exe is usually located in the 'c:\downloads\' folder.

None of the anti-virus scanners at VirusTotal reports anything malicious about help_it.exe.

If you have additional information about the file, please share it with the FreeFixer users by posting a comment at the bottom of this page.

VirusTotal report

None of the 69 anti-virus programs at VirusTotal detected the help_it.exe file.

Sandbox Report

The following information was gathered by executing the file inside Cuckoo Sandbox.

Summary

Successfully executed process in sandbox.

Summary

{
    "file_created": [
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4000a.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1440.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set9330.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4000.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_other16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_ot_rest16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_jl_printer.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_p100-25_16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\iconk13.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1100.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\header_btn_sch.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1380.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_user.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_right_view.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_key.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\note.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\permission\\contents\\cntpermission_a5.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_psave16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\lsb1720.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_job010.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\top0030.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6340.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job2620p.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\top0060.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6360a.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set8030.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\btn_arrow_left2.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1311.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set3510a.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4130.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1360.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\iconk21.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1140.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0500.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_job020.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_proll50_16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0985.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_jl_netfile.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0840a.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0990.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\lsb1100.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_error16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0998.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_doc_lock.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_ot_full16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job2650.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0890.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\permission\\permission.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\logo01.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\permission\\contents\\cntpermission_u1.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_tnend16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\top2100a.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set9300.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_help.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6110.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set8080.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6360.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4170.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set8010.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\iconk19-s.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_dosattack.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set7110.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_tn_bar_k80.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job7235.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1100a.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_func_netfile.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0970.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_scall_fax16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_fax010.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6380.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\pri1060.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0540.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_pri020.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_p_jam16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\top0070.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0560b.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_wup16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4190.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0975b.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\iconk14.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_group.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0600.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\lsb1800.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0000.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set8020.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_adr090.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6160.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\wim_help.js",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0870.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1450.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1420.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6361.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_proll100_16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_box040.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1130.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0970c.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\icnk_y.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job7240.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6230.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6010.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set7220a.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\top0020.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set7280.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\pri2210.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6350b.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0990a.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0510a.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_cmode_color.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1400.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1080.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0980a.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\permission\\contents\\cntpermission_a2.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job2605.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_right_owner.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\tn03.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_fax020.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0580.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set9350.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0520c.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job2630.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set9010.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\tonner_nise.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0940.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box0000.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job2700a.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_func_unit_doc.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\btn_arrow_right1.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6270.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0970b.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_fax040.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\btn_thumbnail.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4180.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0998a.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_proll25_16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\top0051.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_dv.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0990b.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\img\\item_title_head.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0980b.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\tn02.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set8130.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_adr030.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0840.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1350.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0510.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_proll75_16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\yougo.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set7220.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1120.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job2605a.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\tonner_off.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1030.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_tn_bar_k80ok.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_adr000.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4240.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\btn_sort_up.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set9320.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\permission\\contents\\cntpermission_a4.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\permission\\contents\\cntpermission_u3.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\tn04.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_func_others.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_cmode_single.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0550.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1430.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_ready16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job2610.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1030a.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\lsb1710.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6320.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\lsb1780.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set8110.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\header_btn_link_page.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_p75_16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_tend16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set8050.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_offline_16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_box020.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_cmode_r.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\permission\\contents\\cntpermission_u2.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\top0010.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_cmode_br.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_toner_bg.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1290.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_prollend16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1340.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job2640.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_job000.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\tonner_on.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\keyicon01.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\top0000.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\btn_arrow_right2.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_print16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\header_btn_help.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job2600.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0560a.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_func_copy.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_cmode_bw.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_fax000.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6130.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\index.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_ot_16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_right_access.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1260.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6120.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\s_pr_dv1.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0810.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\btn_net_ricoh.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6210.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set9310.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6330.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4231.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_pri030.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_box010.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_pri000.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set9110.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1295.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4230.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0975a.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_p100_16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6310.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job7230.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1010.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1310.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0590.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_fax030.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\access_right.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\tn01.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\permission\\contents\\cntpermission_a3.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\permission\\title\\titpermission.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\btn_sort_down.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_prollnend16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0960.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_box000.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4230a.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1285.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_func_fax.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0950.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\tonner_no.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_box060.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6220.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1250.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\spacer.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1060.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set7290.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_cmode_b.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set8070.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_p50_16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4230b.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4000c.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\copyright.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_func_scan.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0860.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_scall16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_tonerk.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\pri2000.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_func_printer.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_adr020.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_p25_16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\top2100.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0980c.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\btn_icon.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1240.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\permission\\contents\\cntpermission_a1.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\icnk_t.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set9021.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1091.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_tn_bar_k.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_box070.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_box050.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_jl_docubox.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1220.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4230c.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6260.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\btn_arrow_left1.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1370.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set3550.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0995.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_right_fullaccess.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job2620.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\header_btn_version_Inf.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set8090.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_jl_copy.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\img\\item_name_head.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_c_open16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_adr040.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_pnend16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_box080.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1100b.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_pri010.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set7150.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0910.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6350a.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_box030.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set9340.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0970e.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1320.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0670.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set8500.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_adf_jam16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set7295.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6351.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\btn_list.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_adr010.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0975.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0850.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_adr050.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job2700.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set3510.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1270.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0930.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0970d.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set8100.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_toneru.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\lsb1100a.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_right_edit.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\img\\sup_title_head.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_pend16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_fax_error.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_proll100-25_16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0585.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0980.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0880.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6350.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\btn_property.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0510b.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4110.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\s_pr_dh1.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_adr100.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\lsb1750.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\btn_status-n.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\lsb1100b.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\pri1080.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_jl_web.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_job030.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_toner_16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4000b.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_top010.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\wim_help.css",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1190.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\lsb0000.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_func_unitdoc.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_adr060.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\pri0000.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_dh.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\thmbd.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_cmode_double.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4230d.html"
    ],
    "directory_created": [
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\permission\\contents",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\img",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\permission\\title",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\permission"
    ],
    "dll_loaded": [
        "MACDRAPI.DLL",
        "comctl32.dll",
        "C:\\Windows\\syswow64\\MSCTF.dll",
        "kernel32.dll",
        "dwmapi.dll",
        "KERNEL32.DLL",
        "OLEAUT32.DLL",
        "C:\\Windows\\system32\\ole32.dll",
        "SHELL32.dll",
        "imm32.dll",
        "USER32.dll",
        "C:\\Windows\\system32\\uxtheme.dll"
    ],
    "file_opened": [
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4000a.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1440.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set9330.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4000.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_other16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_ot_rest16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_jl_printer.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_p100-25_16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\iconk13.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1100.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\header_btn_sch.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1380.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_user.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_right_view.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_key.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\note.html",
        "C:\\Windows\\Globalization\\Sorting\\sortdefault.nls",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\permission\\contents\\cntpermission_a5.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_psave16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\lsb1720.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_job010.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\top0030.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6340.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job2620p.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\top0060.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6360a.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set8030.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\btn_arrow_left2.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1311.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set3510a.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4130.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1360.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\iconk21.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1140.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0500.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_job020.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_proll50_16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0985.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_jl_netfile.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0840a.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0990.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\lsb1100.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_error16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0998.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_doc_lock.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_ot_full16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job2650.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0890.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\permission\\permission.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\logo01.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\permission\\contents\\cntpermission_u1.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_tnend16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\top2100a.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set9300.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_help.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6110.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set8080.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6360.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4170.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set8010.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\iconk19-s.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_dosattack.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set7110.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_tn_bar_k80.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job7235.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1100a.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_func_netfile.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0970.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_scall_fax16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_fax010.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6380.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\pri1060.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0540.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_pri020.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_p_jam16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\top0070.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0560b.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_wup16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4190.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0975b.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\iconk14.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_group.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0600.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\lsb1800.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0000.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set8020.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_adr090.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6160.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\wim_help.js",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0870.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1450.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1420.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6361.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_proll100_16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_box040.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1130.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0970c.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\icnk_y.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job7240.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6230.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6010.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set7220a.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\top0020.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set7280.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\pri2210.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6350b.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0990a.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0510a.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_cmode_color.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1400.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1080.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0980a.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\permission\\contents\\cntpermission_a2.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job2605.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_right_owner.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\tn03.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_fax020.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0580.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set9350.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0520c.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job2630.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set9010.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\tonner_nise.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0940.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box0000.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job2700a.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_func_unit_doc.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\btn_arrow_right1.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6270.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0970b.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_fax040.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\btn_thumbnail.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4180.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0998a.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_proll25_16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\top0051.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_dv.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0990b.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\img\\item_title_head.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0980b.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\tn02.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set8130.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_adr030.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0840.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1350.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0510.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_proll75_16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\yougo.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set7220.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1120.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job2605a.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\tonner_off.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1030.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_tn_bar_k80ok.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_adr000.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4240.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\btn_sort_up.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set9320.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\permission\\contents\\cntpermission_a4.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\permission\\contents\\cntpermission_u3.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\tn04.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_func_others.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_cmode_single.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0550.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1430.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_ready16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job2610.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1030a.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\lsb1710.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6320.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\lsb1780.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set8110.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\header_btn_link_page.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_p75_16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_tend16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set8050.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_offline_16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_box020.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_cmode_r.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\permission\\contents\\cntpermission_u2.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\top0010.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_cmode_br.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_toner_bg.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1290.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_prollend16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1340.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job2640.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_job000.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\tonner_on.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\keyicon01.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\top0000.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\btn_arrow_right2.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_print16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\header_btn_help.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job2600.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0560a.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_func_copy.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_cmode_bw.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_fax000.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6130.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\index.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_ot_16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_right_access.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1260.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6120.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\s_pr_dv1.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0810.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\btn_net_ricoh.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6210.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set9310.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6330.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4231.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_pri030.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_box010.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_pri000.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set9110.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1295.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4230.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0975a.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_p100_16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6310.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job7230.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1010.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1310.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0590.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_fax030.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\access_right.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\tn01.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\permission\\contents\\cntpermission_a3.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\permission\\title\\titpermission.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\btn_sort_down.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_prollnend16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0960.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_box000.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4230a.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1285.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_func_fax.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0950.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\tonner_no.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_box060.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6220.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1250.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\spacer.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1060.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set7290.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_cmode_b.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set8070.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_p50_16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4230b.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4000c.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\copyright.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_func_scan.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0860.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_scall16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_tonerk.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\pri2000.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_func_printer.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_adr020.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_p25_16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\top2100.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0980c.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\btn_icon.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1240.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\permission\\contents\\cntpermission_a1.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\icnk_t.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set9021.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1091.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_tn_bar_k.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_box070.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_box050.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_jl_docubox.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1220.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4230c.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6260.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\btn_arrow_left1.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1370.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set3550.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0995.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_right_fullaccess.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\3e0ab14314114ad5a273ccc7889831961475f3cbe4a06b2b3e98cb9e2da9ee4b.bin",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job2620.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\header_btn_version_Inf.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set8090.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_jl_copy.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\img\\item_name_head.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_c_open16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_adr040.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_pnend16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_box080.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1100b.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_pri010.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set7150.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0910.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6350a.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_box030.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set9340.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0970e.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1320.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0670.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set8500.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_adf_jam16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set7295.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6351.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\btn_list.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_adr010.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0975.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0850.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_adr050.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job2700.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set3510.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1270.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0930.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0970d.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set8100.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_toneru.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\lsb1100a.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_right_edit.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\img\\sup_title_head.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_pend16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_fax_error.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_proll100-25_16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0585.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0980.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0880.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6350.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\btn_property.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0510b.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4110.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\s_pr_dh1.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_adr100.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\lsb1750.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\btn_status-n.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\lsb1100b.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\pri1080.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_jl_web.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_job030.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_toner_16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4000b.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_top010.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\wim_help.css",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1190.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\lsb0000.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_func_unitdoc.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_adr060.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\pri0000.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_dh.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\thmbd.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_cmode_double.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4230d.html"
    ],
    "regkey_opened": [
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{8613E14C-D0C0-4161-AC0F-1DD2563286BC}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\OLE\\Tracing",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{0000897b-83df-4b96-be07-0fb58b01c4a4}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\CTF\\LayoutIcon\\0409\\0000041d",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\CTF\\TIP\\{0000897b-83df-4b96-be07-0fb58b01c4a4}\\LanguageProfile\\0x00000000\\{0001bea3-ed56-483d-a2e2-aeae25577436}",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{C1EE01F2-B3B6-4A6A-9DDD-E988C088EC82}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{F25E9F57-2FC8-4EB3-A41A-CCE5F08541E6}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{07EB03D6-B001-41DF-9192-BF9B841EE71F}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\KnownClasses",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{AE6BE008-07FB-400D-8BEB-337A64F7051F}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\OLE",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{E429B25A-E5D3-4D1F-9BE3-0C608477E3A1}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\CTF\\DirectSwitchHotkeys",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\LanguagePack\\SurrogateFallback",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\LanguagePack\\SurrogateFallback\\MS Sans Serif",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{F89E9E58-BD2F-4008-9AC2-0F816C09F4EE}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{DCBD6FA8-032F-11D3-B5B1-00C04FC324A1}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\OLEAUT",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{3697C5FA-60DD-4B56-92D4-74A569205C16}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{531FDEBF-9B4C-4A43-A2AA-960E8FCDC732}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\Compatibility\\3e0ab14314114ad5a273ccc7889831961475f3cbe4a06b2b3e98cb9e2da9ee4b.bin",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{A028AE76-01B1-46C2-99C4-ACD9858AE02F}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{81D4E9C9-1D3B-41BC-9E6C-4B40BF79E35E}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{03B5835F-F03C-411B-9CE2-AA23E1171E36}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
        "HKEY_CURRENT_USER\\Keyboard Layout\\Toggle",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{78CB5B0E-26ED-4FCC-854C-77E8F3D1AA80}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}"
    ],
    "file_written": [
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4000a.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1440.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set9330.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4000.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_other16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_ot_rest16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_jl_printer.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_p100-25_16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\iconk13.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1100.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\header_btn_sch.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1380.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_user.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_right_view.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_key.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\note.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\permission\\contents\\cntpermission_a5.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_psave16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\lsb1720.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_job010.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\top0030.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6340.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job2620p.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\top0060.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6360a.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set8030.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\btn_arrow_left2.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1311.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set3510a.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4130.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1360.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\iconk21.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1140.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0500.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_job020.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_proll50_16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0985.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_jl_netfile.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0840a.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0990.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\lsb1100.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_error16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0998.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_doc_lock.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_ot_full16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job2650.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0890.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\permission\\permission.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\logo01.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\permission\\contents\\cntpermission_u1.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_tnend16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\top2100a.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set9300.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_help.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6110.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set8080.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6360.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4170.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set8010.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\iconk19-s.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_dosattack.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set7110.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_tn_bar_k80.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job7235.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1100a.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_func_netfile.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0970.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_scall_fax16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_fax010.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6380.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\pri1060.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0540.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_pri020.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_p_jam16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\top0070.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0560b.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_wup16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4190.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0975b.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\iconk14.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_group.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0600.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\lsb1800.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0000.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set8020.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_adr090.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6160.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\wim_help.js",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0870.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1450.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1420.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6361.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_proll100_16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_box040.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1130.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0970c.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\icnk_y.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job7240.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6230.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6010.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set7220a.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\top0020.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set7280.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\pri2210.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6350b.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0990a.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0510a.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_cmode_color.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1400.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1080.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0980a.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\permission\\contents\\cntpermission_a2.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job2605.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_right_owner.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\tn03.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_fax020.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0580.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set9350.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0520c.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job2630.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set9010.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\tonner_nise.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0940.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box0000.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job2700a.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_func_unit_doc.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\btn_arrow_right1.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6270.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0970b.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_fax040.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\btn_thumbnail.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4180.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0998a.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_proll25_16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\top0051.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_dv.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0990b.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\img\\item_title_head.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0980b.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\tn02.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set8130.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_adr030.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0840.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1350.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0510.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_proll75_16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\yougo.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set7220.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1120.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job2605a.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\tonner_off.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1030.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_tn_bar_k80ok.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_adr000.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4240.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\btn_sort_up.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set9320.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\permission\\contents\\cntpermission_a4.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\permission\\contents\\cntpermission_u3.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\tn04.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_func_others.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_cmode_single.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0550.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1430.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_ready16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job2610.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1030a.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\lsb1710.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6320.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\lsb1780.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set8110.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\header_btn_link_page.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_p75_16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_tend16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set8050.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_offline_16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_box020.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_cmode_r.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\permission\\contents\\cntpermission_u2.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\top0010.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_cmode_br.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_toner_bg.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1290.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_prollend16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1340.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job2640.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_job000.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\tonner_on.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\keyicon01.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\top0000.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\btn_arrow_right2.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_print16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\header_btn_help.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job2600.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0560a.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_func_copy.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_cmode_bw.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_fax000.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6130.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\index.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_ot_16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_right_access.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1260.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6120.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\s_pr_dv1.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0810.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\btn_net_ricoh.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6210.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set9310.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6330.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4231.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_pri030.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_box010.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_pri000.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set9110.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1295.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4230.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0975a.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_p100_16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6310.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job7230.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1010.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1310.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0590.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_fax030.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\access_right.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\tn01.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\permission\\contents\\cntpermission_a3.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\permission\\title\\titpermission.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\btn_sort_down.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_prollnend16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0960.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_box000.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4230a.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1285.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_func_fax.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0950.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\tonner_no.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_box060.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6220.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1250.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\spacer.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1060.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set7290.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_cmode_b.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set8070.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_p50_16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4230b.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4000c.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\copyright.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_func_scan.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0860.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_scall16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_tonerk.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\pri2000.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_func_printer.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_adr020.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_p25_16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\top2100.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0980c.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\btn_icon.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1240.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\permission\\contents\\cntpermission_a1.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\icnk_t.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set9021.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1091.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_tn_bar_k.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_box070.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_box050.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_jl_docubox.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1220.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4230c.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6260.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\btn_arrow_left1.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1370.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set3550.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0995.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_right_fullaccess.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job2620.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\header_btn_version_Inf.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set8090.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_jl_copy.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\img\\item_name_head.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_c_open16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_adr040.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_pnend16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_box080.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1100b.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_pri010.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set7150.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0910.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6350a.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_box030.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set9340.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0970e.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1320.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0670.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set8500.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_adf_jam16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set7295.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6351.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\btn_list.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_adr010.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0975.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0850.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_adr050.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job2700.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set3510.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1270.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0930.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0970d.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set8100.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_toneru.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\lsb1100a.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_right_edit.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\img\\sup_title_head.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_pend16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_fax_error.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_proll100-25_16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0585.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0980.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0880.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6350.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\btn_property.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0510b.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4110.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\s_pr_dh1.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_adr100.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\lsb1750.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\btn_status-n.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\lsb1100b.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\pri1080.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_jl_web.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_job030.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_toner_16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4000b.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_top010.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\wim_help.css",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1190.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\lsb0000.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_func_unitdoc.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_adr060.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\pri0000.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_dh.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\thmbd.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_cmode_double.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4230d.html"
    ],
    "file_exists": [
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1320.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4000a.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1440.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set9330.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4000.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_other16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_ot_rest16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_jl_printer.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_p100-25_16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\iconk13.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1100.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\header_btn_sch.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1380.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_user.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_right_view.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_key.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\note.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\permission\\contents\\cntpermission_a5.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_psave16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\lsb1720.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_job010.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\top0030.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6340.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job2620p.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\top0060.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6360a.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set8030.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\btn_arrow_left2.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1311.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set3510a.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4130.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1360.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\iconk21.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1140.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0500.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_job020.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_proll50_16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0985.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_jl_netfile.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0840a.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0990.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\lsb1100.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_error16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0998.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_doc_lock.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_ot_full16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job2650.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0890.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\permission\\permission.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\logo01.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\permission\\contents\\cntpermission_u1.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_tnend16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\top2100a.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set9300.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_help.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6110.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set8080.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6360.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4170.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set8010.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\iconk19-s.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_dosattack.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set7110.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_tn_bar_k80.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job7235.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1100a.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_func_netfile.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0970.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_scall_fax16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_fax010.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6380.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\pri1060.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0540.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_pri020.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_p_jam16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\top0070.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0560b.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_wup16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4190.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0975b.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\iconk14.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_group.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0600.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\lsb1800.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0000.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set8020.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_adr090.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6160.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\wim_help.js",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0870.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1450.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1420.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6361.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_proll100_16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_box040.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1130.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0970c.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\icnk_y.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job7240.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6230.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6010.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set7220a.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\top0020.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set7280.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\pri2210.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6350b.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\permission",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0990a.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0510a.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_cmode_color.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1400.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1080.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0980a.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\permission\\contents\\cntpermission_a2.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job2605.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_right_owner.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\tn03.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_fax020.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0580.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set9350.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0520c.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job2630.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set9010.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\tonner_nise.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0940.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box0000.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job2700a.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_func_unit_doc.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\btn_arrow_right1.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6270.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0970b.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_fax040.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\btn_thumbnail.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4180.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0998a.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_proll25_16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\top0051.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_dv.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0990b.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\img\\item_title_head.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0980b.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\tn02.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set8130.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_adr030.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0840.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1350.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0510.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_proll75_16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\yougo.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set7220.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1120.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job2605a.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\tonner_off.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1030.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_tn_bar_k80ok.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_adr000.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4240.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\btn_sort_up.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set9320.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\permission\\contents\\cntpermission_a4.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\permission\\contents\\cntpermission_u3.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\tn04.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_func_others.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_cmode_single.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0550.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1430.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_ready16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job2610.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1030a.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\lsb1710.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6320.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\lsb1780.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set8110.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\header_btn_link_page.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_p75_16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_tend16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set8050.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_offline_16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_box020.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_cmode_r.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\permission\\contents\\cntpermission_u2.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\top0010.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_cmode_br.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_toner_bg.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1290.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_prollend16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1340.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job2640.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_job000.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\tonner_on.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\keyicon01.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\top0000.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\btn_arrow_right2.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_print16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\header_btn_help.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job2600.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0560a.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_func_copy.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_cmode_bw.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_fax000.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6130.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\index.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_ot_16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_right_access.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1260.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6120.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\s_pr_dv1.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0810.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\btn_net_ricoh.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6210.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set9310.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6330.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4231.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_pri030.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_box010.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_pri000.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set9110.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1295.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4230.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0975a.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_p100_16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6310.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job7230.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1010.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1310.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0590.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_fax030.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\access_right.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\tn01.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\permission\\contents\\cntpermission_a3.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\permission\\title\\titpermission.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\btn_sort_down.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_prollnend16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0960.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_box000.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\permission\\title",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4230a.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1285.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_func_fax.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0950.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\img",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\tonner_no.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_box060.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6220.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1250.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\spacer.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1060.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set7290.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_cmode_b.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set8070.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_p50_16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4230b.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4000c.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\copyright.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_func_scan.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0860.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_scall16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_tonerk.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\pri2000.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_func_printer.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_adr020.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_p25_16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\top2100.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0980c.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\btn_icon.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1240.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\permission\\contents\\cntpermission_a1.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\icnk_t.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set9021.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1091.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_tn_bar_k.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_box070.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_box050.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_jl_docubox.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1220.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4230c.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6260.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\btn_arrow_left1.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1370.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set3550.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0995.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_right_fullaccess.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job2620.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\header_btn_version_Inf.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set8090.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_jl_copy.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\img\\item_name_head.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_c_open16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_adr040.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_pnend16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_box080.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1100b.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_pri010.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set7150.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0910.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6350a.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_box030.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set9340.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0970e.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\permission\\contents",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0670.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set8500.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_adf_jam16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set7295.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6351.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\btn_list.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_adr010.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0975.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0850.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_adr050.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job2700.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set3510.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1270.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0930.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0970d.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set8100.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_toneru.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\lsb1100a.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_right_edit.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\img\\sup_title_head.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_pend16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_fax_error.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_proll100-25_16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0585.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0980.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0880.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6350.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\btn_property.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0510b.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4110.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\s_pr_dh1.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_adr100.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\lsb1750.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\btn_status-n.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\lsb1100b.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\pri1080.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_jl_web.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_job030.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_toner_16.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4000b.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_top010.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\wim_help.css",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1190.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\lsb0000.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_func_unitdoc.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_adr060.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\pri0000.html",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_dh.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\thmbd.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_cmode_double.gif",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4230d.html"
    ],
    "file_read": [
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\3e0ab14314114ad5a273ccc7889831961475f3cbe4a06b2b3e98cb9e2da9ee4b.bin"
    ],
    "regkey_read": [
        "HKEY_CURRENT_USER\\Keyboard Layout\\Toggle\\Language Hotkey",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\CTF\\EnableAnchorContext",
        "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Nls\\CustomLocale\\en-US",
        "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Nls\\Locale\\00000409",
        "HKEY_CURRENT_USER\\Keyboard Layout\\Toggle\\Hotkey",
        "HKEY_CURRENT_USER\\Keyboard Layout\\Toggle\\Layout Hotkey",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\OLE\\PageAllocatorUseSystemHeap",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{0000897b-83df-4b96-be07-0fb58b01c4a4}\\LanguageProfile\\0x00000000\\{0001bea3-ed56-483d-a2e2-aeae25577436}\\Enable",
        "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Nls\\Language Groups\\1",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\GRE_Initialize\\DisableMetaFiles",
        "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Nls\\ExtendedLocale\\en-US",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\OLE\\PageAllocatorSystemHeapIsPrivate"
    ]
}

Dropped

[
    {
        "yara": [],
        "sha1": "77802846c7f71537c7d89449f2be897be862cae9",
        "name": "378b33d3cefba03a_set8020.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set8020.html",
        "type": "HTML document, ASCII text, with very long lines, with CRLF line terminators",
        "sha256": "378b33d3cefba03a749a31ec3d0619b28e0377b4db9719d84f05920ddcd25395",
        "urls": [],
        "crc32": "5F27DAB6",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/378b33d3cefba03a_set8020.html",
        "ssdeep": null,
        "size": 9822,
        "sha512": "c95076de26b220bf386a1ffe05f8fce3d2bd69eca58e6bb30472c76670de3e5528caba578ed16451987e2b06a42e730fcbf9bfa69c652c506de4e27cbd7b88b1",
        "pids": [
            2124
        ],
        "md5": "581f7922d972875939269023057fbcdd"
    },
    {
        "yara": [],
        "sha1": "caaf90e0898415fa82c32d21d0f729427764da6d",
        "name": "db00afc77f371acd_set4000a.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4000a.html",
        "type": "HTML document, ASCII text, with very long lines, with CRLF line terminators",
        "sha256": "db00afc77f371acdcb76d598ec39dccc5a550c424a8c2cbebdb2f7a57dc0f0ff",
        "urls": [],
        "crc32": "A17580FB",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/db00afc77f371acd_set4000a.html",
        "ssdeep": null,
        "size": 2844,
        "sha512": "26849303bdcb69285107d29cc55bf0760155cd80e58315c7e1f6c525d124794dac0f458f71935eb1251912f5313a69c6ad8c789a5c2da301b22d904b4b763934",
        "pids": [
            2124
        ],
        "md5": "1177fb0e64b6c6af95e306873c78c366"
    },
    {
        "yara": [],
        "sha1": "f693afbffe8eddb10cadd0ec108b8284a755c61f",
        "name": "161fcca1e1ea79b4_cntpermission_u2.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\permission\\contents\\cntpermission_u2.html",
        "type": "HTML document, ASCII text, with very long lines, with CRLF line terminators",
        "sha256": "161fcca1e1ea79b41498e7ec0b506fb8995a75e7a66fb17fab73b12a8c39fa21",
        "urls": [],
        "crc32": "A4B153DE",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/161fcca1e1ea79b4_cntpermission_u2.html",
        "ssdeep": null,
        "size": 36122,
        "sha512": "42f3ddfc25e553c6bde7d7a402e028d2692fc4bf9670965bc855985aa2efbc6a345c1d4d0fbb911c03b0e0a49fedfbfaecdde5bd6abd019fdfed5f5fcf1c2d09",
        "pids": [
            2124
        ],
        "md5": "ff72aab90f8bfce4e796943f7ea272ee"
    },
    {
        "yara": [],
        "sha1": "5d638306c3c4fd22bde3cfb64d79c50357a6ba3d",
        "name": "bb7b07bfefb5180d_dev_st_tn_bar_k80.gif",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_tn_bar_k80.gif",
        "type": "GIF image data, version 89a, 80 x 18",
        "sha256": "bb7b07bfefb5180d9dc5f539be80e650c3eb89df50eab71fdb4f82df823e49e0",
        "urls": [],
        "crc32": "E109DC32",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/bb7b07bfefb5180d_dev_st_tn_bar_k80.gif",
        "ssdeep": null,
        "size": 275,
        "sha512": "94f5719d882168b3f8e4bdab653156f13a907301b95cbce777400a0751402c347c8cf15d541f92d33442fe4efbdb8f329be187b74d420b857b8b6ebe54f44b04",
        "pids": [
            2124
        ],
        "md5": "4ed6ee32fc0242adfbb4632bb1c860c9"
    },
    {
        "yara": [],
        "sha1": "4e84294c60a8eda658f7123d026b6a307f6df97e",
        "name": "8c0b561cffd5298b_icon_func_unit_doc.gif",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_func_unit_doc.gif",
        "type": "GIF image data, version 89a, 20 x 16",
        "sha256": "8c0b561cffd5298b70ac88129cfb8afe419b2848ba6f1e72280e39f4eb87a446",
        "urls": [],
        "crc32": "29E92AB2",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/8c0b561cffd5298b_icon_func_unit_doc.gif",
        "ssdeep": null,
        "size": 154,
        "sha512": "5bc1009802e6ba1f3eaa07352984374dcd26d2dd2aa80eb26e7a807730297d74ac9e78f9872ee8c017d8879346cc78e10a5f86fc61ac5deb82747f57e941301d",
        "pids": [
            2124
        ],
        "md5": "72dc421d4e89445de80443b27f054998"
    },
    {
        "yara": [],
        "sha1": "0155fbb522b8ae1aff7a86f0f0c36da1566f60b5",
        "name": "63cd2acee99e9608_dev_st_tonerk.gif",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_tonerk.gif",
        "type": "GIF image data, version 89a, 18 x 20",
        "sha256": "63cd2acee99e96086dceda165630867ab79b70c1e02b9363b6a7c3d7e6c20b70",
        "urls": [],
        "crc32": "A787DCC6",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/63cd2acee99e9608_dev_st_tonerk.gif",
        "ssdeep": null,
        "size": 639,
        "sha512": "754029da522efb6173f90c15d078746950b27aa91874b5cbc59323b431f72ed8d4c97e74e9fcccab5049f1e2af451b6365a1ae062b93829efa19fb945ce56cc5",
        "pids": [
            2124
        ],
        "md5": "47795c95058742d95fbd3453fb3a2afc"
    },
    {
        "yara": [],
        "sha1": "09c3709cca6b47719963da6ee92ee65c48fa69d9",
        "name": "7e892cb23854a892_p_adr000.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_adr000.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "7e892cb23854a8928f071d18bd99a753655d7f7bbff422a2f8d4915e1f0bf685",
        "urls": [],
        "crc32": "8C79DC01",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/7e892cb23854a892_p_adr000.html",
        "ssdeep": null,
        "size": 1661,
        "sha512": "13c389340baeef007c17377389d0e0971733f7d5c114e95139f2cbae7d41a30cf70370622611de61b468ea28f2970e3461795485edf8bf596c64017d97441647",
        "pids": [
            2124
        ],
        "md5": "ab2c410bad1d6ecb480178f7fdad6a2e"
    },
    {
        "yara": [],
        "sha1": "d205b75f54cfe1f4a0b3ce95087961f51f4e4450",
        "name": "3de5726cdc539697_cntpermission_a1.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\permission\\contents\\cntpermission_a1.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "3de5726cdc53969742be51c79861335bef70dde8440ba6e0a72baee6891b0135",
        "urls": [],
        "crc32": "FC0FDA1C",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/3de5726cdc539697_cntpermission_a1.html",
        "ssdeep": null,
        "size": 25717,
        "sha512": "6c1ee6fbf2b680500d2e74a26d084101e55a7cbcccaff75b4c81680adec808bebb7c85e54a4ed952ea762d36151af296c33f7b06ee1aef51abfdfc1c0509c790",
        "pids": [
            2124
        ],
        "md5": "875c2b5d2d456e7e715a712c978f5ed1"
    },
    {
        "yara": [],
        "sha1": "22cd6caa553bfd40ef96968d219c974543a6ada2",
        "name": "e02c02ea95e10f2e_p_box000.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_box000.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "e02c02ea95e10f2e4a5e618e3a0708d7c73b99fe62e8e756472327f9175e1232",
        "urls": [],
        "crc32": "24338AB9",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/e02c02ea95e10f2e_p_box000.html",
        "ssdeep": null,
        "size": 1694,
        "sha512": "44ef6c7f711a4ca1ca80afde25ab47df712896dcf26eec22c7dd06c8ad0bd3ff336ecf560a8846bbfc5e56b75540c66c423b7fe0bd1a7877a31619588893e82f",
        "pids": [
            2124
        ],
        "md5": "9f4564e45b7192e80e888303448ee5f9"
    },
    {
        "yara": [],
        "sha1": "f38d45ba715eb17dff9c9a0146958ba81b540a1b",
        "name": "787c04821ef8e841_adr0560a.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0560a.html",
        "type": "HTML document, ASCII text, with very long lines, with CRLF line terminators",
        "sha256": "787c04821ef8e8414fa9132f8ec3c0e1c7c4ad9ef4808ce85a245a488e2836cc",
        "urls": [],
        "crc32": "83D1DDE5",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/787c04821ef8e841_adr0560a.html",
        "ssdeep": null,
        "size": 11191,
        "sha512": "6abbedcb420a2ff5c81f4bcdce4902ee692d3ce7580d48b94d18ba41f7fd1055b647fbf5a0765fbc98be74b8c43db44c3cf0ac75631e4fdd3a0febf83832c239",
        "pids": [
            2124
        ],
        "md5": "2a6fd9c775ce2578af4c6b719cafec95"
    },
    {
        "yara": [],
        "sha1": "610659b98e358d305da4aefad1839a4b6b885b32",
        "name": "f97a7465c3bf633e_box1310.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1310.html",
        "type": "HTML document, ASCII text, with very long lines, with CRLF line terminators",
        "sha256": "f97a7465c3bf633e2fa9ea6e7db7e20dc0a4323ef878f1b11c1745a2c040473b",
        "urls": [],
        "crc32": "16490CAE",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/f97a7465c3bf633e_box1310.html",
        "ssdeep": null,
        "size": 10973,
        "sha512": "d7be851db9272a639d28f9a5d35347fc25a6d7889c48369415364a2b2bba756b57f4db8b2b3d803900acaaff86546543340ddb0e8cced33a57114b2b8565b475",
        "pids": [
            2124
        ],
        "md5": "e4808098a2ee10522be853619a64d507"
    },
    {
        "yara": [],
        "sha1": "f8e6a80b3b8b27ed3543a79b56ccf0fe33b1424f",
        "name": "f2da79eff59f240b_adr0600.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0600.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "f2da79eff59f240b445c3f3b5c7ded4504f4f66771dae47f51060529d1215a56",
        "urls": [],
        "crc32": "7F98C441",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/f2da79eff59f240b_adr0600.html",
        "ssdeep": null,
        "size": 2430,
        "sha512": "a1b19c9533b1cb35811c9a798eefa494b7e22b6ad18e183dfa6ec485c921e11540730620e6430c7ccc5291abd34bbf943a78f1fd30bd69071ed975801bf89caa",
        "pids": [
            2124
        ],
        "md5": "c25ba0ace2dd4f7de14a85af0c04832c"
    },
    {
        "yara": [],
        "sha1": "45d46fece462158998a87277a0b2dcfad1731025",
        "name": "5c7d20d516680635_p_adr030.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_adr030.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "5c7d20d5166806354543f0c7c8d5c944d08761e7c5cb5f46eaf2360450cb8f52",
        "urls": [],
        "crc32": "5790E5BA",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/5c7d20d516680635_p_adr030.html",
        "ssdeep": null,
        "size": 2323,
        "sha512": "7678339f3b7acfd3beb9ad943a159db821cf8af63c2f38092e7ebb0caad3f4e22aff4dedefcc6327b2c63169481374af63bb0be243c03f86392de2f096ef888b",
        "pids": [
            2124
        ],
        "md5": "6e535f0c267f31c2725400dfcbe9bded"
    },
    {
        "yara": [],
        "sha1": "a279518770baba0153f2f920527670a58e6f5e50",
        "name": "16599f0b14540fbc_dev_st_dv.gif",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_dv.gif",
        "type": "GIF image data, version 89a, 16 x 16",
        "sha256": "16599f0b14540fbc381774e86e7f2c54023a4efc1c459fb4aa3bdbf5436d8b2e",
        "urls": [],
        "crc32": "26E7D079",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/16599f0b14540fbc_dev_st_dv.gif",
        "ssdeep": null,
        "size": 153,
        "sha512": "7e683fb9662a4b6f5f4497fc85c8368bceaadd12a4344b48c14fcecd8e4f20e581d856010efad869f1cc921f4865500ea30985b7b5cc27a8273bce365dc7b2c9",
        "pids": [
            2124
        ],
        "md5": "da716d906aa4472c5271743aee722983"
    },
    {
        "yara": [],
        "sha1": "956d55785b789d6673d7caa0125841c5663b51ae",
        "name": "7be3131d25a884cb_set4230c.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4230c.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "7be3131d25a884cb7bec788ce07920ee86ac57f5320adc75bc926ff24068dd2d",
        "urls": [],
        "crc32": "0328496D",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/7be3131d25a884cb_set4230c.html",
        "ssdeep": null,
        "size": 2680,
        "sha512": "613761d00bd1fc62a1fd028e1e3d89370b8a0058037ca39a9e08f021f0345436c2679042f6f4747ee0cbb86b32a288bb457df42384d9278026a524ed9bec7329",
        "pids": [
            2124
        ],
        "md5": "ab0926bc1cd3ea1cdfc09474b8bcff4b"
    },
    {
        "yara": [],
        "sha1": "f991f23a5fabe85eb4ff8b5448d60df46c7c84e5",
        "name": "ffb9381ec9f31c59_p_job030.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_job030.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "ffb9381ec9f31c59217ae210eb2252a173e872262faec996727df3e1b38d4a93",
        "urls": [],
        "crc32": "9B47F758",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/ffb9381ec9f31c59_p_job030.html",
        "ssdeep": null,
        "size": 5955,
        "sha512": "1d2cffa539782b791264e41f902404816686d60e42d3d642a8970c71c6e7cceb23e819b1c7fc972ccf63f82b9ea0201060a806f142f99d682571cb97c80bd835",
        "pids": [
            2124
        ],
        "md5": "dac432d0127fec4679fef48c2d569aa0"
    },
    {
        "yara": [],
        "sha1": "01d070755cb0eb7d57d616aaf6dfbbe3ca9a3ae3",
        "name": "4d26a67f23d9d4ed_dev_st_proll25_16.gif",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_proll25_16.gif",
        "type": "GIF image data, version 89a, 16 x 16",
        "sha256": "4d26a67f23d9d4ed7fced0ba19adf198f664ae77af3bc6eeea901ef9dd0587d0",
        "urls": [],
        "crc32": "C6ED0DBB",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/4d26a67f23d9d4ed_dev_st_proll25_16.gif",
        "ssdeep": null,
        "size": 90,
        "sha512": "1855aa54fad681d14d250b915b67f6f319ba66c9f1c148b78900b933fb2b17f316fc05bd49d2ae182c0a53db60da8986416a9c1b7300a8ceb5df1120bb48ba28",
        "pids": [
            2124
        ],
        "md5": "9f1e63d90b750b5737b9a939512c7657"
    },
    {
        "yara": [],
        "sha1": "ca519bb0a579f830809792b114c4e8166a9988aa",
        "name": "17eaae7dd29c9d6b_set0975.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0975.html",
        "type": "HTML document, ASCII text, with very long lines, with CRLF line terminators",
        "sha256": "17eaae7dd29c9d6b0cc9d6b07f10496b828bc779ebfc0e07eecc881110036f23",
        "urls": [],
        "crc32": "CECBCC70",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/17eaae7dd29c9d6b_set0975.html",
        "ssdeep": null,
        "size": 5427,
        "sha512": "c36f0e3b3997b7fdd7a825144c5c6c2b5df3a8daab3b29a9104450ce018e5d55a268ad757ab0e80a48553f9824bfbdeef8103ea2cb6b054b0e8b07ba99aac4f1",
        "pids": [
            2124
        ],
        "md5": "8692c57b99125476c75cecf0056d7bef"
    },
    {
        "yara": [],
        "sha1": "5bab599136e7b0a95f31117a1267c3db7ab3320b",
        "name": "3432b81496a838e5_index.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\index.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "3432b81496a838e56af81bfb04fbf929d891da12facefec63b2878375c481ea8",
        "urls": [],
        "crc32": "FCDCD79F",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/3432b81496a838e5_index.html",
        "ssdeep": null,
        "size": 1926,
        "sha512": "125cf7df47e47bb0c511d94861fb14c1f9097129aaa2212bbbfc3005bf91137139ebf3f5ec8854fb5f3066c8c63a98070f3bb22195c1fe3fc7d25ef952e28944",
        "pids": [
            2124
        ],
        "md5": "7a86fbddb06647baf4c2ebbd162d4e28"
    },
    {
        "yara": [],
        "sha1": "dfb284162b945d5a8077a7a58f607e02c56649ec",
        "name": "cac0345884be0eea_dev_st_p_jam16.gif",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_p_jam16.gif",
        "type": "GIF image data, version 89a, 16 x 16",
        "sha256": "cac0345884be0eeab373f8d44f60ab41cb30c9c571a31ea7bcf1737446ce7d95",
        "urls": [],
        "crc32": "C31BB341",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/cac0345884be0eea_dev_st_p_jam16.gif",
        "ssdeep": null,
        "size": 118,
        "sha512": "a7784916982c5c4762f14d23f7d48ff5ecaa4c1b489efbc7afc1e4ce83be8df64deb52208d8e602abd3e0040d99a950e6fffe14e32e911affc8d0e3427a024cb",
        "pids": [
            2124
        ],
        "md5": "c467e909801b5cdd458721daf5c44c06"
    },
    {
        "yara": [],
        "sha1": "198ce0c701d2127398e6dd9bf4a0410b2f3f3dbe",
        "name": "60f179698fa3ad94_p_fax040.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_fax040.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "60f179698fa3ad9458ac461310e71705877d0dcc923ee8edd719f2fb71f2b64e",
        "urls": [],
        "crc32": "8096CC93",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/60f179698fa3ad94_p_fax040.html",
        "ssdeep": null,
        "size": 2193,
        "sha512": "0ce39f1a9c2443901e3741feb249fd3b36b2ebe74f7a5c0f9229419efd5c5345ba7703969bc18ecf174fbaf5a74982e5d3fe8c8b27efac67ac3848f5e11cb812",
        "pids": [
            2124
        ],
        "md5": "669ab66c34b9cb20cdaf8d411d6c915d"
    },
    {
        "yara": [],
        "sha1": "7cd60fffb138816c76927a3be9c0bc1865fad8e6",
        "name": "200bbe125b995d4e_p_pri020.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_pri020.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "200bbe125b995d4edee8c78de97fc290459332e45373184ed07118a36c85e56b",
        "urls": [],
        "crc32": "C73D5546",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/200bbe125b995d4e_p_pri020.html",
        "ssdeep": null,
        "size": 3675,
        "sha512": "3c70d8b979c34a36b6cd67daf0fbec672c2113e9dfd2e71007302deed2c3810bfb0d1476109ba183dcf5df6c585f4f11e4e3951a650d359bcf0a36292d93e04a",
        "pids": [
            2124
        ],
        "md5": "4a74f2beba6b3753fc6a01b896e59a50"
    },
    {
        "yara": [],
        "sha1": "4029df84eb91f668b2b2a1464e8eb20c8c0c6aa7",
        "name": "43e8ce8e7090ac39_btn_property.gif",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\btn_property.gif",
        "type": "GIF image data, version 89a, 20 x 20",
        "sha256": "43e8ce8e7090ac39114111312ccdc88cd0ac28df2865d2ab7058391f0e9aecab",
        "urls": [],
        "crc32": "7B526195",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/43e8ce8e7090ac39_btn_property.gif",
        "ssdeep": null,
        "size": 1156,
        "sha512": "880d2e3befdca60fb19dc778202d2cee939aff78978a3f52aea46ebdb7e12a08db0158a3e4ac9465826d9d9de8e3a408920ddeb007546b2f88075dac9ae4fbc8",
        "pids": [
            2124
        ],
        "md5": "427584a1580f71b4d2f3745670f1d8a5"
    },
    {
        "yara": [],
        "sha1": "ba63fb53d8de12402248b56695052b31ffa284b4",
        "name": "37ba312f3b2b9449_set6380.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6380.html",
        "type": "HTML document, ASCII text, with very long lines, with CRLF line terminators",
        "sha256": "37ba312f3b2b94492ff60415d07ee48f8dc63db47cee11f57958951f155ff2b9",
        "urls": [],
        "crc32": "AC8DEA19",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/37ba312f3b2b9449_set6380.html",
        "ssdeep": null,
        "size": 3579,
        "sha512": "6adf1e70f44092bf84c94a2038a325b2f4745bf56107e3b039aac1d777c90ecc43b6b2bf4c811c18704cbebcf4155487e6cc46215f124d3cb0a5108caf652d34",
        "pids": [
            2124
        ],
        "md5": "055d8819080c2d99fd1165a1fe5f8bf5"
    },
    {
        "yara": [],
        "sha1": "35be26e7361fc06f430ed396001e23a9212673a1",
        "name": "599dd218d0cf8692_set9110.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set9110.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "599dd218d0cf8692ef4cc0b2ed9a3c21364a29aa4303615eded5c3708769271f",
        "urls": [],
        "crc32": "81BAD702",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/599dd218d0cf8692_set9110.html",
        "ssdeep": null,
        "size": 3675,
        "sha512": "f7adc1ece8e40fae887a2df3e843768ed140f2575cb09e94aa0b5ce3d0f2c137a14452e278b8ec35c73b3daabe24bb31c151dde8c29bc3d4468cd1a514b1d2ea",
        "pids": [
            2124
        ],
        "md5": "71b38198e3ba668e829a33613ee107e5"
    },
    {
        "yara": [],
        "sha1": "200b2b18440738336698350e66c676a1f0b9a19a",
        "name": "edbf2bfc3a65b79a_set0970b.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0970b.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "edbf2bfc3a65b79ac70c706332580d70e4f8347bdbda44a2a5d29ebb7d41a4a5",
        "urls": [],
        "crc32": "E5BAB7CE",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/edbf2bfc3a65b79a_set0970b.html",
        "ssdeep": null,
        "size": 2322,
        "sha512": "09758fc5122faf728e30c3886b0cebbcd93010850f0d3972cf8dbfccee1ce5d7019ac830237e5adb9278e6d9f0c65caf2055ff43ea8fa9444177f0f41b8034a5",
        "pids": [
            2124
        ],
        "md5": "40b5d2a4e1e1b1cfa9b810b01eafb9f8"
    },
    {
        "yara": [],
        "sha1": "a10a6e7f244627408339467e8e446436815c514f",
        "name": "598e1d491e680a6e_lsb1750.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\lsb1750.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "598e1d491e680a6ea302dcd194ee2bfa8a81c3dcbb1305b58e4004d3914d793d",
        "urls": [],
        "crc32": "0DB2FA81",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/598e1d491e680a6e_lsb1750.html",
        "ssdeep": null,
        "size": 4690,
        "sha512": "14f20723ad4185c94ac99ac3fa1331423962ef6c06c68e7c3f8a678c19978d90921c72273a8a295a1c8b9a687af2d0d2db637e4d2ff572fa16b27d9bccf65329",
        "pids": [
            2124
        ],
        "md5": "780ef197be383eaa4d88e6e880ed7a92"
    },
    {
        "yara": [],
        "sha1": "99030c773db3057389229a6aca92a8c94ea70209",
        "name": "f59d581ec14e8e40_dev_st_p100_16.gif",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_p100_16.gif",
        "type": "GIF image data, version 89a, 16 x 16",
        "sha256": "f59d581ec14e8e40aa2e53f49e7f935ac18708004aa251ab0373d23eab661b72",
        "urls": [],
        "crc32": "BB9B0E5B",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/f59d581ec14e8e40_dev_st_p100_16.gif",
        "ssdeep": null,
        "size": 78,
        "sha512": "3b6072b2dc2e57a942fc1dc866b7cea46a0134c8beb852721bb273aca070443b8c5f21ec08d54971c624d65f57f73439f4e12ca9e062c1948aed57125d247ec2",
        "pids": [
            2124
        ],
        "md5": "d513e56d4d71b03b16d71b3b72758f1d"
    },
    {
        "yara": [],
        "sha1": "6bd85625161cb3dfa4378002ee233fa719a7aedc",
        "name": "b5e149e33020b730_yougo.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\yougo.html",
        "type": "HTML document, ASCII text, with very long lines, with CRLF line terminators",
        "sha256": "b5e149e33020b730fa30fafd868773e5ce1dfdcd34430676a0fc7da7ed5aa9eb",
        "urls": [],
        "crc32": "93BA7DCA",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/b5e149e33020b730_yougo.html",
        "ssdeep": null,
        "size": 3670,
        "sha512": "04ab00dc82b810c54ab53c4aa2212f947463a3d62f49b4e0b7e7af1c17b4186c64cff825f6a20f1d89a3e2f087dde797aa090db35664be71729ff41b1b1cfbae",
        "pids": [
            2124
        ],
        "md5": "c06da68e30e19209389d92a0433a5f0b"
    },
    {
        "yara": [],
        "sha1": "99e0af603d205ef194f2e68f5ff409cc617d706c",
        "name": "3fd0bb51712ffa2a_set9340.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set9340.html",
        "type": "HTML document, ASCII text, with very long lines, with CRLF line terminators",
        "sha256": "3fd0bb51712ffa2a6056279ff7823617e857b86806aca2e4a578f88a3ceeeadc",
        "urls": [],
        "crc32": "FD67C577",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/3fd0bb51712ffa2a_set9340.html",
        "ssdeep": null,
        "size": 6423,
        "sha512": "b2b975c69b26e5f74ac3f457bd02bf0f514b10278ab210183a395ebed480685e0f17a514afadd25b354ba3c4016cb31cb4ca64f67526f5583f0e9860ea282d6e",
        "pids": [
            2124
        ],
        "md5": "36d778a492c1b46e44251579c5c5b8ac"
    },
    {
        "yara": [],
        "sha1": "4494489ec92d7f5f1dc3792f95b5fddd05fae0ae",
        "name": "0434fe69f7eefaf3_set0930.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0930.html",
        "type": "HTML document, ASCII text, with very long lines, with CRLF line terminators",
        "sha256": "0434fe69f7eefaf36f1a33a68109751080ae8f73d216fd8171238e063a0c3370",
        "urls": [],
        "crc32": "D3D6D60A",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/0434fe69f7eefaf3_set0930.html",
        "ssdeep": null,
        "size": 15478,
        "sha512": "780054aecde7de3a888c294c20e351783b1210d61bb6166e8dd7d6e09ef5eba0f6b4813e11d2ec02f53f9f9648248a0ab534ec790d165e12983a0f3a0b1a8c5b",
        "pids": [
            2124
        ],
        "md5": "7f73fb7b2fba9e2c1e186e784da76ddc"
    },
    {
        "yara": [],
        "sha1": "abab1e050c4a835c4c635f294b08d3365a43f429",
        "name": "26bb6576e4070a8f_cntpermission_a3.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\permission\\contents\\cntpermission_a3.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "26bb6576e4070a8f0f95423916d44d4196ebaa3d67c5d96855ac2ad447f59349",
        "urls": [],
        "crc32": "8E6DE19B",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/26bb6576e4070a8f_cntpermission_a3.html",
        "ssdeep": null,
        "size": 25709,
        "sha512": "12229d2414223ebdb3565434b8d2191f252dd18796796c168d1bb9e0691e3bab92e62368d0788abee7f236ee311f85f0a90f352f415df9004d9c7a0f52216105",
        "pids": [
            2124
        ],
        "md5": "ee5964d68b665ac118d9df86f009ac84"
    },
    {
        "yara": [],
        "sha1": "3ee94c971f3c2aa803098aab42f9171b150bb91d",
        "name": "7c9d8a54947fad63_set8070.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set8070.html",
        "type": "HTML document, ASCII text, with very long lines, with CRLF line terminators",
        "sha256": "7c9d8a54947fad633ef95af4cfc101dd7399f31abc5d8684723f6d252b3cb4f2",
        "urls": [],
        "crc32": "BACAE84A",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/7c9d8a54947fad63_set8070.html",
        "ssdeep": null,
        "size": 6878,
        "sha512": "643b7eb5e94cfa0e6a6c43b7246ffae51d4c8988d27e0b798e98158a9e675a5aad63709402c8c0b2ed58b033d806fea8c57cf6d67f8be9311afdc906e6efd60f",
        "pids": [
            2124
        ],
        "md5": "24be7ad1aa29efdebdf03d257c48cb5d"
    },
    {
        "yara": [],
        "sha1": "99cd1ddfe9c8e199f7b68b02e273d303b05a45a4",
        "name": "ed8f82235e7fd9d7_p_box050.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_box050.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "ed8f82235e7fd9d72f93157ea549c756041e979ae0ad5131fdd854beb9db7110",
        "urls": [],
        "crc32": "E56A2ACB",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/ed8f82235e7fd9d7_p_box050.html",
        "ssdeep": null,
        "size": 5487,
        "sha512": "512c759cce78764550615b1b0c2d6f5a9bcb11bf2ee097b151c49ae4d1a7ba7fadfb00ffbf38fe1912bfe03cf6d14036060dfbef40dc52be106a8404a0a93766",
        "pids": [
            2124
        ],
        "md5": "0d5fb58e52ef0617428e6289e27a74d4"
    },
    {
        "yara": [],
        "sha1": "cac5e4fda5b77e97197020979646520ab62f5d0c",
        "name": "3e579f565406ffab_p_box030.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_box030.html",
        "type": "HTML document, ASCII text, with very long lines, with CRLF line terminators",
        "sha256": "3e579f565406ffabb24264d9e556ab60c5ab66ddf4297cde85c9a0d4d1258215",
        "urls": [],
        "crc32": "A2765FA6",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/3e579f565406ffab_p_box030.html",
        "ssdeep": null,
        "size": 3841,
        "sha512": "b1f3485a49c32d856356ac714925d5c59d316674b2d961aad98ce33cccc34f5e905680db495fc6795eb21573390e32fe1020b031da2f5293c471a001be0f1967",
        "pids": [
            2124
        ],
        "md5": "46ab9f09601fdffb1ecf4c754b2ecfab"
    },
    {
        "yara": [],
        "sha1": "77d8c238f8b6c3b6b278478cf2359dbb59680f42",
        "name": "7e2192f137cab670_set0980.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0980.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "7e2192f137cab6709bade8b61903ccdfe27ff165bc8c1698c83fa1526639deca",
        "urls": [],
        "crc32": "09425D3D",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/7e2192f137cab670_set0980.html",
        "ssdeep": null,
        "size": 4522,
        "sha512": "ed065d90042ee0444bd32bd0e58128ac3054fe0e342006076e7d9e8d3b8c2a8dbe5f4403461795a5fcebcb85ea2263a1a56ac3ea1e4645f6866d22198ad03508",
        "pids": [
            2124
        ],
        "md5": "3c42c73077eb337443bf50de3552182c"
    },
    {
        "yara": [],
        "sha1": "14c248a521cb250af94951be82671847f17ea00f",
        "name": "ac988e00a309ea2c_box1311.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1311.html",
        "type": "HTML document, ASCII text, with very long lines, with CRLF line terminators",
        "sha256": "ac988e00a309ea2ca8f21a8f33716279cf91f37168210d981e88f83692b04642",
        "urls": [],
        "crc32": "965C67AA",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/ac988e00a309ea2c_box1311.html",
        "ssdeep": null,
        "size": 12670,
        "sha512": "7c7a26eb49f3db29692c12ebcd59ef9de5c848f8897544c145d9c1a0b9f1ba882b3d1824c1f53c6aa7701bdf4f805db6ac6f7817a5e1b9077a7c7349d3222223",
        "pids": [
            2124
        ],
        "md5": "0085bbf6f95bb43121d78a6cb407d567"
    },
    {
        "yara": [],
        "sha1": "e7885afeff2f7f7e1fd5a0e5aefc2a7ee04d7e7d",
        "name": "def24bb3bfc841d7_set4190.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4190.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "def24bb3bfc841d78de7f7ff5dade090243942d9984139766effe44e4e14faad",
        "urls": [],
        "crc32": "9E539B1D",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/def24bb3bfc841d7_set4190.html",
        "ssdeep": null,
        "size": 3085,
        "sha512": "d8e7e13501717456aac3820522c97d2b03cc37c14dcdd9a381e5f02b9dcb95ad907f49e4c511b770925656cc7ce6da703c3432a34f51ee090649c155dfb87d21",
        "pids": [
            2124
        ],
        "md5": "0d951df82287795c27790096b067b110"
    },
    {
        "yara": [],
        "sha1": "0a574f42a4a005b3bf95e32343d652ee3dc237c0",
        "name": "8e9da97be25959a5_box1080.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1080.html",
        "type": "HTML document, ASCII text, with very long lines, with CRLF line terminators",
        "sha256": "8e9da97be25959a59c3a81198e8e694a3bb8f421bbefe18ac22ec6b6324d514e",
        "urls": [],
        "crc32": "7C94ACA5",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/8e9da97be25959a5_box1080.html",
        "ssdeep": null,
        "size": 6441,
        "sha512": "5deb68f6902596c6f96a2c7809854801965e4c775485950df68c279410da175af1a86cda4452f0faead36c30fae4fd7174dfa7fa08f02bdb403b69b62b800283",
        "pids": [
            2124
        ],
        "md5": "73b203b4b128473bc9d4cdcee7af55b2"
    },
    {
        "yara": [],
        "sha1": "7792c503da0fd1169df4859ee26c639d4905e56c",
        "name": "3577d8ca49de6b3f_icon_cmode_bw.gif",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_cmode_bw.gif",
        "type": "GIF image data, version 89a, 21 x 17",
        "sha256": "3577d8ca49de6b3f8c8a4a9cbd9c39368cfd82f9d0f7f849ab4587074e83c18c",
        "urls": [],
        "crc32": "BF89009A",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/3577d8ca49de6b3f_icon_cmode_bw.gif",
        "ssdeep": null,
        "size": 564,
        "sha512": "6a53aa2089e8e2b0aed5f4c16d45c95ee5609d2de91f2d148a07718efa60974ca90cbff1e54e5e3d69f6f42497bad76fe74279e1f15a1342778ead61ef3b2052",
        "pids": [
            2124
        ],
        "md5": "339a1a6152e95d02f582f6866c53d988"
    },
    {
        "yara": [],
        "sha1": "4665c81939a62be96478fe6a921f9945f5aa8d11",
        "name": "2bc03cf9fd93985e_p_adr090.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_adr090.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "2bc03cf9fd93985e00778573d402dd924e192f0b6e9053eb0f7529cbe94fb509",
        "urls": [],
        "crc32": "2934784D",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/2bc03cf9fd93985e_p_adr090.html",
        "ssdeep": null,
        "size": 2143,
        "sha512": "5abc519beb5bf8f32c9ef75cac8a48d23a848c2e12d7f465b97e15fe2b66d986782bb2ff6fccdd9754367c02ebcf6ad50f38e9a084750c5ded0957294ce30f5c",
        "pids": [
            2124
        ],
        "md5": "0b218a703825d42c3f2ff37ee8582c6c"
    },
    {
        "yara": [],
        "sha1": "a1e88e4ce448555dd3bb68d1a6b6edb3933bc785",
        "name": "a53bdc9ab8fcedbe_adr0590.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0590.html",
        "type": "HTML document, ASCII text, with very long lines, with CRLF line terminators",
        "sha256": "a53bdc9ab8fcedbe713874ff27b627a945d7e65b4433c789a431dd68ea21a96c",
        "urls": [],
        "crc32": "380C6E1A",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/a53bdc9ab8fcedbe_adr0590.html",
        "ssdeep": null,
        "size": 3685,
        "sha512": "f97a4c6e28bff212a1f06e62a953965faa5c1523be9417aff15cfeb46b8f5fa1644c0772df363d853813a95e28c040faeb4d8c5c2764ea8c077424008ef11b2a",
        "pids": [
            2124
        ],
        "md5": "73faa11f0811e6b81b7986497fdedbcb"
    },
    {
        "yara": [],
        "sha1": "005f1484e1bf58d352a8ee456bd1524d459d12bb",
        "name": "0ce3c0af49b48d25_adr0510.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0510.html",
        "type": "HTML document, ASCII text, with very long lines, with CRLF line terminators",
        "sha256": "0ce3c0af49b48d25210e077306c9cc6bfa1770c0f0b3f1a5ab36621046f6a1ca",
        "urls": [],
        "crc32": "DD026543",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/0ce3c0af49b48d25_adr0510.html",
        "ssdeep": null,
        "size": 25144,
        "sha512": "67037e110190241507efb6a3feda0183494c867d0396a34ca1c523a109710f5ea587548200caf156fec94b4bbf5db74ba82c5e3ca1e2251b964f81e69e4fe49d",
        "pids": [
            2124
        ],
        "md5": "64627b37eead8610727e891bbb22e4c6"
    },
    {
        "yara": [],
        "sha1": "a44d71fd7db537f187af01618269dbebc328dad0",
        "name": "cf973de1a90ec01a_set8050.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set8050.html",
        "type": "HTML document, ASCII text, with very long lines, with CRLF line terminators",
        "sha256": "cf973de1a90ec01a7f964e7a7d7e6b1538a02112981488e34b2a470f44b0ff39",
        "urls": [],
        "crc32": "8B8C9AD6",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/cf973de1a90ec01a_set8050.html",
        "ssdeep": null,
        "size": 11203,
        "sha512": "3b7dbf20faad5d00d48f583fd01fafdfd7cdfc1327c86c7d1cf60c265dd27346b4566a7f7753df4eda60dda83310aeb226091354350c55526f27ea2c8d724020",
        "pids": [
            2124
        ],
        "md5": "aa3286db3470e2b577e09167a42f176e"
    },
    {
        "yara": [],
        "sha1": "c2b3cce5442c7493dc47b608261deb869b2bcece",
        "name": "cb4f852ade7c10ba_box1320.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1320.html",
        "type": "HTML document, ASCII text, with very long lines, with CRLF line terminators",
        "sha256": "cb4f852ade7c10ba5ce6325157ca7bc53f592f4c7d5ff56b2ec7208607fe32a2",
        "urls": [],
        "crc32": "7F5E2873",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/cb4f852ade7c10ba_box1320.html",
        "ssdeep": null,
        "size": 10517,
        "sha512": "7912592727a466f0cb516d36e4f9b873036e33075368bfa35f642f3198871fdabab57b050086c172d5239413d32291816a25c316eaa6aed1a1b71d63e5392cfc",
        "pids": [
            2124
        ],
        "md5": "b7dc9b61ebdb2d41ff4f5ebd24801cef"
    },
    {
        "yara": [],
        "sha1": "f7cba0cd684389a7ccf3a7f942cc7c79a59d36e0",
        "name": "5a299da70ae575ef_pri2210.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\pri2210.html",
        "type": "HTML document, ASCII text, with very long lines, with CRLF line terminators",
        "sha256": "5a299da70ae575efbfbf9c2fed79cc6d4d27e3ac9c0cae15e1f1b88f4a0cbff9",
        "urls": [],
        "crc32": "C47001BB",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/5a299da70ae575ef_pri2210.html",
        "ssdeep": null,
        "size": 7046,
        "sha512": "636631bc14b0a480e34fb5932c4eaf50bd9d83c68a91d36d610d4eb32fb4a7c9ce004ddc3efb15a4c001dd262265da7e3c49c1ca383a7a97357f6e523700290a",
        "pids": [
            2124
        ],
        "md5": "e03bc8d4fba62eed2c3e2655f7f1fd52"
    },
    {
        "yara": [],
        "sha1": "dd7fe14a3324980a8ed78c4e5ab9205e8c95b578",
        "name": "f8c69aff80ff2049_p_fax020.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_fax020.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "f8c69aff80ff204959a55958d615fea727d003059d00ca8634c1029b2c6d04b6",
        "urls": [],
        "crc32": "B518D634",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/f8c69aff80ff2049_p_fax020.html",
        "ssdeep": null,
        "size": 2771,
        "sha512": "1b6e61562f148d8a6c5f9599b9fa1b7784a43099e9e0cc70b6d26689f8c54a5d85cc62f292cb8b67a2356e55183540a2bcf36143191ea9b5720e970d744d5122",
        "pids": [
            2124
        ],
        "md5": "346d67da7f17db241e51ea2064da5738"
    },
    {
        "yara": [],
        "sha1": "0c0768c1e2a90d5fd255ef8bf7d8071daa393a67",
        "name": "f2f97795ae48d071_p_help.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_help.html",
        "type": "HTML document, ASCII text, with very long lines, with CRLF line terminators",
        "sha256": "f2f97795ae48d071069818c1d4dd4ec0858648549d51f48871183f3bf82a58b2",
        "urls": [],
        "crc32": "EE96D48A",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/f2f97795ae48d071_p_help.html",
        "ssdeep": null,
        "size": 5392,
        "sha512": "bdd44692019510d56e96ee9d872510086fd00d3026989dcf7626343a9da1ce45bb14e0934fa5b6d53b7052e7cf3ef7f700693319af3efb3a0b5733a8459a2535",
        "pids": [
            2124
        ],
        "md5": "26038d9d940680c94b6f9c8e0bb67b71"
    },
    {
        "yara": [],
        "sha1": "39809914a42b10f5ab8d44f46af12b47870d200b",
        "name": "42d2c9418d533bea_set6361.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6361.html",
        "type": "HTML document, ASCII text, with very long lines, with CRLF line terminators",
        "sha256": "42d2c9418d533bea0a495b683ba37b5433a2b99fffd10e5f2c843d6731341bff",
        "urls": [],
        "crc32": "24DF5F70",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/42d2c9418d533bea_set6361.html",
        "ssdeep": null,
        "size": 8863,
        "sha512": "90978d0880a96afe3792d1c7932f4259716800084215a069c58126df0c69a95a50eb1228be6cefe9b231364d4432e9de189c1fd55081e1920b145bcce6df4b28",
        "pids": [
            2124
        ],
        "md5": "8caae2d81a513b8136c266a4ec498db1"
    },
    {
        "yara": [],
        "sha1": "bd957344baa24999451ea032b00c04e7b8b63509",
        "name": "3be7ac742a343f71_icon_key.gif",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_key.gif",
        "type": "GIF image data, version 89a, 16 x 21",
        "sha256": "3be7ac742a343f71e68d82093450f049372aa5cb1884bed3c9dad8baf76ed42f",
        "urls": [],
        "crc32": "91D3823F",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/3be7ac742a343f71_icon_key.gif",
        "ssdeep": null,
        "size": 327,
        "sha512": "3f5779e38b426e3af2051dc79dae2a54ec8310f68c97f9f5befea4dbeb441b4a220a9fa37b4b2b2872ec5a12676bc8c8b521f6c9205ff637212f76bd422f0044",
        "pids": [
            2124
        ],
        "md5": "70fd9d6565538c6dfc45ccc166a9efb5"
    },
    {
        "yara": [],
        "sha1": "fc40f332b73dc04bc4dc027eb4d28f381b303325",
        "name": "02d6b6cd5ea46307_pri2000.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\pri2000.html",
        "type": "HTML document, ASCII text, with very long lines, with CRLF line terminators",
        "sha256": "02d6b6cd5ea46307e588f641db9c91cf561ea22fd2b18cc6ea46468339855b9f",
        "urls": [],
        "crc32": "21E26439",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/02d6b6cd5ea46307_pri2000.html",
        "ssdeep": null,
        "size": 9185,
        "sha512": "ccf2df5a52bcf5ece4c365e17dcbdaf67d511f41acc62ad3784b8f98361737d375378bcc3d3d32c469b76ddb8ee6b23218e83574f9c8fa951ca8c7fd16dde88a",
        "pids": [
            2124
        ],
        "md5": "0765360a3f45af24aa5d4aa42f9463b9"
    },
    {
        "yara": [],
        "sha1": "9de44f745343f871b770181d4d76a2e9bd114edf",
        "name": "7c755b58f91326ad_set6310.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6310.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "7c755b58f91326ad0caaac76b41f2b07c1c80bf73a4aa0eadc94a9a8eb395a03",
        "urls": [],
        "crc32": "96BE9E42",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/7c755b58f91326ad_set6310.html",
        "ssdeep": null,
        "size": 3591,
        "sha512": "7be9272d56d4379cc35237d4d900675411dac243871995374b2e838eb40d1786ba794b5517c2b46b5d64211b01960c86153b54e2764dfd7d62c507ca04840993",
        "pids": [
            2124
        ],
        "md5": "ae05ec7f950633364bbda86af5d4f278"
    },
    {
        "yara": [],
        "sha1": "91721aeee2e9a53d206b454d497f39accea9b8ac",
        "name": "af3991b45c693519_box1420.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1420.html",
        "type": "HTML document, ASCII text, with very long lines, with CRLF line terminators",
        "sha256": "af3991b45c6935196c6f3d8b9d4b98353e535e70660bc963bee45f80fe7d6bf4",
        "urls": [],
        "crc32": "BF26256E",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/af3991b45c693519_box1420.html",
        "ssdeep": null,
        "size": 4394,
        "sha512": "665cca20ad902377156e52f884ac06f03764a45e785a389f69bba3954722a4501b8582f7580cfa1081deca82357ffa58e33efda4a0fbeea746aaa339a194a4de",
        "pids": [
            2124
        ],
        "md5": "6edb1d28a0e3b45a8aaafdf9fdce23b3"
    },
    {
        "yara": [],
        "sha1": "cd03f4f47a63bef16d21e3fe4ac749fb5f759fdd",
        "name": "441abb6ebf6cf4bb_dev_st_toner_bg.gif",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_toner_bg.gif",
        "type": "GIF image data, version 89a, 18 x 20",
        "sha256": "441abb6ebf6cf4bbb2cfc607ec840de7e95966f70537c23b557ddf4d03b0e4d8",
        "urls": [],
        "crc32": "2FFB22A4",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/441abb6ebf6cf4bb_dev_st_toner_bg.gif",
        "ssdeep": null,
        "size": 77,
        "sha512": "d8782b3bb7053d5e1a51591d3ce88fb66c0663ee4970a44dcbf8ac6978a36c601975b5f6b6793b97f3d1de421f7b1d7315c26c8169f43bdb6d55fe21ccbffdee",
        "pids": [
            2124
        ],
        "md5": "e363d0f1c4ca8852331dca05335b0938"
    },
    {
        "yara": [],
        "sha1": "57c4b9240199eb9dcfc4397322b4872b71074942",
        "name": "d8278ab0346bc3f9_lsb1100.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\lsb1100.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "d8278ab0346bc3f9a8fe579c09d8b21266839c35ca6b1069ff54c475143ceaed",
        "urls": [],
        "crc32": "983A8700",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/d8278ab0346bc3f9_lsb1100.html",
        "ssdeep": null,
        "size": 4828,
        "sha512": "246e1b9ae7772ffae9e2e87658369640c2366ed17060e1cd475d191f6b21a3b9bbcbeb8a75ad5eb3fd8a3275f1c78ce2ff80397ea4b0f428df1dda2e735eb893",
        "pids": [
            2124
        ],
        "md5": "e91313172ac70fc4ee28d16663a7fb0e"
    },
    {
        "yara": [],
        "sha1": "dad26e7092733083ec530c333081490f21e15a20",
        "name": "207d866c21b83581_titpermission.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\permission\\title\\titpermission.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "207d866c21b8358197267698fb6c410fad19f65be44668d46658e81c8bb26a5c",
        "urls": [],
        "crc32": "8D43953C",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/207d866c21b83581_titpermission.html",
        "ssdeep": null,
        "size": 1660,
        "sha512": "198a10349facf985a3dc7928c30d482568ae8c06986cd774cf08cbf1328be0149a4240b2a68ea528cb3ef5af601aec916d8c4c884439cf5986ce2223e89906ed",
        "pids": [
            2124
        ],
        "md5": "d208ee33acf2063610f3b20763dfe38b"
    },
    {
        "yara": [],
        "sha1": "ce10ef9f16093d18a0c08b825bb0236a6f13ec53",
        "name": "0cb952b4b7b70e69_btn_thumbnail.gif",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\btn_thumbnail.gif",
        "type": "GIF image data, version 89a, 27 x 22",
        "sha256": "0cb952b4b7b70e694ffe8597b04948a8a4e99a5fe7a4cf6d9730ad191dc0d324",
        "urls": [],
        "crc32": "2E722965",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/0cb952b4b7b70e69_btn_thumbnail.gif",
        "ssdeep": null,
        "size": 244,
        "sha512": "6f7470e2b562060a3ee6a4c0b18d28544678b7f79b86ca6938ad97a1037933e8436a8b4a99c83585ababffe0fa88faf312a7ecb7c4edbd882171c26383126a1d",
        "pids": [
            2124
        ],
        "md5": "5973cfc97b036ab4ea6dedc2568c6a9e"
    },
    {
        "yara": [],
        "sha1": "f8305b2f57de1424be750e6100f5420f01f6b5b8",
        "name": "6d31f361e76b00bf_dev_st_print16.gif",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_print16.gif",
        "type": "GIF image data, version 89a, 16 x 16",
        "sha256": "6d31f361e76b00bf11d5d4d62675dbd3be30e84ee81a020ff7a3dd62cf0e0f06",
        "urls": [],
        "crc32": "DBC8590C",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/6d31f361e76b00bf_dev_st_print16.gif",
        "ssdeep": null,
        "size": 115,
        "sha512": "d7e49af650b4203d3d79498d0b65922823251806ac21ad3927a3a6c7bcf8ee167118e4ea5c9db392a630dc83962ff1efdd26e364a3e2f3d6413f639b84d1e25b",
        "pids": [
            2124
        ],
        "md5": "b3d721251f60a4410160a7bd6cbf3e79"
    },
    {
        "yara": [],
        "sha1": "5590c40800265e3611c138e00d4e50e4aec6f8ec",
        "name": "da6b73a34c843f03_set8010.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set8010.html",
        "type": "HTML document, ASCII text, with very long lines, with CRLF line terminators",
        "sha256": "da6b73a34c843f033de1bc94a0a669a7d19fbf0e504acd535360571d0de484c6",
        "urls": [],
        "crc32": "BCA6B0CE",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/da6b73a34c843f03_set8010.html",
        "ssdeep": null,
        "size": 12196,
        "sha512": "b351192b57e2d2a3fb0ca7a0862f4c9ab2dcdfb390dd91e2274ee7d4fcd598568955b6c89be69a67cde517b51eea9e55b9aef64767bc34fc93c2385d07581d39",
        "pids": [
            2124
        ],
        "md5": "46141e0cf9af8a66d9a213439939aed0"
    },
    {
        "yara": [],
        "sha1": "f59cbd3a83c80ba86a0d4a881703809ef31c97fc",
        "name": "b6a49cb599724a9d_job2640.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job2640.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "b6a49cb599724a9d518fff5c8130187d0ecb2cbfaf79cc1bb7672d5c66181854",
        "urls": [],
        "crc32": "C56B6A5D",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/b6a49cb599724a9d_job2640.html",
        "ssdeep": null,
        "size": 5405,
        "sha512": "97b0fd915b60ae53a85dbc1287ba8c64608554edb6e8cc9eb86591469921eafc2ec0cf061db59914ef286774a0ef8ede216089cf7172d5bfb45e208eb51aac22",
        "pids": [
            2124
        ],
        "md5": "2b130f80d64baabb11fc954d96b550a8"
    },
    {
        "yara": [],
        "sha1": "feab47f2885ad16ff30edfcb38fa332f2bddb982",
        "name": "a90dd3a1c274e82b_btn_status-n.gif",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\btn_status-n.gif",
        "type": "GIF image data, version 89a, 43 x 22",
        "sha256": "a90dd3a1c274e82bd4e3cb5243a508a800f2c6f776e663e04b58158cf417328a",
        "urls": [],
        "crc32": "F7688763",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/a90dd3a1c274e82b_btn_status-n.gif",
        "ssdeep": null,
        "size": 272,
        "sha512": "f063b7e5afcb5e89791bbef96258cc41bad02c0d6291cab8ed643f2d25f1eb527473ed4c1a8c0e5c6dff91bddceb9072cc13a633fdb9a252a0f171bf6ac3a256",
        "pids": [
            2124
        ],
        "md5": "72517cfa7fc362e5859979b29308a346"
    },
    {
        "yara": [],
        "sha1": "8d0982652299b087ad60dee00fabe9eac4ee2c08",
        "name": "49b1ceaffddd9f4a_cntpermission_a4.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\permission\\contents\\cntpermission_a4.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "49b1ceaffddd9f4a3f03ba7cbcc2c1f28262500b7bfee7313167e377fea61a98",
        "urls": [],
        "crc32": "F6349FDA",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/49b1ceaffddd9f4a_cntpermission_a4.html",
        "ssdeep": null,
        "size": 25595,
        "sha512": "6b0512f3f5c53b791955e7f68eb8ef721c8f81e4ebfb52b0bf5a4c52dfee70cc6ac60465633cab8d598be06d01015c4a623c104ef669b869bd2bba04f2e0460b",
        "pids": [
            2124
        ],
        "md5": "24ab5c54068cecf9473dd8e4de54265b"
    },
    {
        "yara": [],
        "sha1": "61a37e5e2fe3dfaffcf07f1808aa2e794cb65330",
        "name": "243f1dbf3ee15ce2_p_box060.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_box060.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "243f1dbf3ee15ce2f1d6b9ba5067241b6856089ee7a5362bfd60ed96cc614914",
        "urls": [],
        "crc32": "17FA1A9D",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/243f1dbf3ee15ce2_p_box060.html",
        "ssdeep": null,
        "size": 2135,
        "sha512": "dbdc8306115c2ff151f35f2ee6e90254f67a0b6b23ce0bfc6ae97241fda3ee9f2cd74b7379f8c610a2f43c43b54fc54e27fd4dabcadcfb1357b3674807d1b77f",
        "pids": [
            2124
        ],
        "md5": "3648b6e1b8b3930a2a39e5a48ee29cad"
    },
    {
        "yara": [],
        "sha1": "c7835b2d95d75c31c1024ad69a317911d1d067ad",
        "name": "95f8cd152e3cc54c_icon_cmode_double.gif",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_cmode_double.gif",
        "type": "GIF image data, version 89a, 21 x 17",
        "sha256": "95f8cd152e3cc54cbfc772237a2990f18f825177a5b2bc67961e95679c6fa153",
        "urls": [],
        "crc32": "9A9CEB65",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/95f8cd152e3cc54c_icon_cmode_double.gif",
        "ssdeep": null,
        "size": 370,
        "sha512": "eac5d7fd1551305b788b8da180d79a1fcf0d25a130cec7593cb27856167bb1b3c5e14806035171d5ad61c5b66375f7e76a0d8e15956db7243c35a393bc4f3c11",
        "pids": [
            2124
        ],
        "md5": "b9414f3d1aef5d1a57ad692c504e28bb"
    },
    {
        "yara": [],
        "sha1": "115f4c0c4d46b1aba33a36226b30f3854e271737",
        "name": "5f15efb07344529c_box1120.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1120.html",
        "type": "HTML document, ASCII text, with very long lines, with CRLF line terminators",
        "sha256": "5f15efb07344529c8bef701777b7ec676f321970951e98a3c80a9e4d0c858bc9",
        "urls": [],
        "crc32": "F9D7C910",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/5f15efb07344529c_box1120.html",
        "ssdeep": null,
        "size": 8017,
        "sha512": "4e621a80f7f6390041adfcb922d322503778424842305a41de40468e9714f86a731002d820cb72d187d436ae595fdcbd58811583d8afed9ddd6db61412ae2610",
        "pids": [
            2124
        ],
        "md5": "8294856efd3b707a9d5a88218ac32bc9"
    },
    {
        "yara": [],
        "sha1": "39a90a27377ec666a32ea9c0588123bb343c3ac7",
        "name": "863403504df26c6e_set0870.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0870.html",
        "type": "HTML document, ASCII text, with very long lines, with CRLF line terminators",
        "sha256": "863403504df26c6e5bb1b03311114961bd45b7ba82794d7876ff05d9c6949df7",
        "urls": [],
        "crc32": "C01CE5EF",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/863403504df26c6e_set0870.html",
        "ssdeep": null,
        "size": 12188,
        "sha512": "7a01b331874110fac41bcfe96ad91a676cf20ef8c6386f564d9b85decdb52c0af458c621d022c3ead19dc9b2a0b2046940c0c3a954978b547bfba80127c7c03b",
        "pids": [
            2124
        ],
        "md5": "80af9b5be01447b1e090c5f9a715df17"
    },
    {
        "yara": [],
        "sha1": "93be11055e3634b7080617830e9b730cdfbcca37",
        "name": "932c03e3e57c025e_set0910.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0910.html",
        "type": "HTML document, ASCII text, with very long lines, with CRLF line terminators",
        "sha256": "932c03e3e57c025e7e28ffe6aef4d9f1218336c536dda3501892366ab38e5aed",
        "urls": [],
        "crc32": "7A16FFC5",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/932c03e3e57c025e_set0910.html",
        "ssdeep": null,
        "size": 7911,
        "sha512": "31482be3bb09b25faeb794949f61c6ad0cb369b92a7a35e8786db02c00876488c2ee34bcc1bb3a60c3976c7fef042a1d73e302d063265bced15f0e41b8f4e9d7",
        "pids": [
            2124
        ],
        "md5": "b8230dcb84ac26087c3bf521487c2085"
    },
    {
        "yara": [],
        "sha1": "05eb32948ad8a0264631b21cabe02f9d9d6e61c4",
        "name": "a50fe2621d3d4942_set0975b.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0975b.html",
        "type": "HTML document, ASCII text, with very long lines, with CRLF line terminators",
        "sha256": "a50fe2621d3d49426bcec1cfb4f95708dce6fb2564344696b6f27a8a106fbdb5",
        "urls": [],
        "crc32": "D152D435",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/a50fe2621d3d4942_set0975b.html",
        "ssdeep": null,
        "size": 3226,
        "sha512": "9acc72fdeb9cc577cd8fe87ab2add9920f453afc02e33feb17d9a3f30d728d7768cd78e0cb42a3b665e96a2255f0a349521cb9f71747553abe3dde7582cb4331",
        "pids": [
            2124
        ],
        "md5": "a33e86eb694821ed0bc5b862be7d568e"
    },
    {
        "yara": [],
        "sha1": "1cf16d5865d23b26729ed17b7af65163e220db9e",
        "name": "f6c144e27478a061_icon_func_scan.gif",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_func_scan.gif",
        "type": "GIF image data, version 89a, 20 x 16",
        "sha256": "f6c144e27478a061b46a0cff4e22b4b98de975e26ed1385bf1319e4412009ef7",
        "urls": [],
        "crc32": "EEE3B145",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/f6c144e27478a061_icon_func_scan.gif",
        "ssdeep": null,
        "size": 354,
        "sha512": "32be86fe03673e1bfc85dfc42728428a7211b2a1f9162f8844a295d83cd717b0bc3e4d7a180335c2e9c757043260a308bba8dfd7dc05260ffe8caad75611485b",
        "pids": [
            2124
        ],
        "md5": "cd5aba7b59ef663aa04eaa27a21b83bf"
    },
    {
        "yara": [],
        "sha1": "48c44b7f30b17edaddc87adf03cdfc8653405829",
        "name": "96a5b90785fae5ad_header_btn_link_page.gif",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\header_btn_link_page.gif",
        "type": "GIF image data, version 89a, 27 x 20",
        "sha256": "96a5b90785fae5ad3fdad66020f105371a4e3f5a5bd9823c9dcbd954ed337ec1",
        "urls": [],
        "crc32": "439FA644",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/96a5b90785fae5ad_header_btn_link_page.gif",
        "ssdeep": null,
        "size": 712,
        "sha512": "84446363898fd3212c654ad4b17f4c6ad488b61badaaa113ea16005240fb5f0df1a674e2e61d79d1147941c68dd4fb65afb6de6e33cad1ae70accb0919c3a6f0",
        "pids": [
            2124
        ],
        "md5": "6f48731ff11520b20c8679d6629420bf"
    },
    {
        "yara": [],
        "sha1": "293d35d6031fcdcacaa49af434db5be9cc8e661b",
        "name": "de3d4a740d22c6b3_dev_st_pend16.gif",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_pend16.gif",
        "type": "GIF image data, version 89a, 16 x 16",
        "sha256": "de3d4a740d22c6b3243ada3e8834adc36c8a02d307479bd5ec692f69ca648afa",
        "urls": [],
        "crc32": "A828BEFE",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/de3d4a740d22c6b3_dev_st_pend16.gif",
        "ssdeep": null,
        "size": 150,
        "sha512": "005c11955cfcaf59db49241ee705844aca254de0a0fa3055727eaf9e8bf63c02e26a664bf1e1050b2c13837e0e66f94872a831822cf2cb78b6215fda19bbed44",
        "pids": [
            2124
        ],
        "md5": "6a04fe7ebc173626d98fb0daedbe76ed"
    },
    {
        "yara": [],
        "sha1": "12f49f575abcaa2734e6e6b8659a1970fa810145",
        "name": "e7be557c1ad3f150_icon_right_edit.gif",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_right_edit.gif",
        "type": "GIF image data, version 89a, 20 x 16",
        "sha256": "e7be557c1ad3f150c3b074c0eccd64da1bdfc050e7bf4295c513f6572a4029a8",
        "urls": [],
        "crc32": "F4C4EBA1",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/e7be557c1ad3f150_icon_right_edit.gif",
        "ssdeep": null,
        "size": 369,
        "sha512": "61c7ac6398f55176afb007d5c46b4b2af3051fbdca3d4a6edb820d8e27cd42379b39c359c0029e15050940d629ea8518e584375c98c75d92dbc76d3aff494741",
        "pids": [
            2124
        ],
        "md5": "324332d7b5b0ed935cfe69c2dcdbeac2"
    },
    {
        "yara": [],
        "sha1": "1648012f91ce42ccdf3cb278af788af97bad81d8",
        "name": "7ede5fdb811a673f_set0985.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0985.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "7ede5fdb811a673fe60054ae3e55b9f96b0474c31af5ac3bea30bec513715b85",
        "urls": [],
        "crc32": "9DE36F1A",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/7ede5fdb811a673f_set0985.html",
        "ssdeep": null,
        "size": 2963,
        "sha512": "d4f2321e2308367921e64414bc5791a8741839ffdd5cb1d624a356623b0542f518ae1372aa5f1c945bd50225c404e1bb55c3b107be9affa613325f2f49d7ab73",
        "pids": [
            2124
        ],
        "md5": "6cc9d11ce3694bdbe68390340851f2dd"
    },
    {
        "yara": [],
        "sha1": "7a8cbf6e33f1162922e6f47b853839692ab697f3",
        "name": "d0b027843909d7c9_set0990b.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0990b.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "d0b027843909d7c9ecbfc9ccd191b8a662db0a3f4814bb8f3b5be796f820d5df",
        "urls": [],
        "crc32": "43F332B4",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/d0b027843909d7c9_set0990b.html",
        "ssdeep": null,
        "size": 2343,
        "sha512": "5fe1f954934d657f3b11d45e279ab863794efec88aa0b654853114411660a0b00d968df5c1eeefed22e64e024ab36adfb445e79a703fccf5be1d0840f88f1357",
        "pids": [
            2124
        ],
        "md5": "ef5e8fa409e44dcff7d3561eac3b633f"
    },
    {
        "yara": [],
        "sha1": "8a0412dd54bcb381d733915eb06ad56a4a3b357b",
        "name": "f433b0c849082e4a_set9300.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set9300.html",
        "type": "HTML document, ASCII text, with very long lines, with CRLF line terminators",
        "sha256": "f433b0c849082e4a46b934ba07ba611f41ae7c8a9618a78466439ffc3e0eddab",
        "urls": [],
        "crc32": "B5EDF205",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/f433b0c849082e4a_set9300.html",
        "ssdeep": null,
        "size": 5604,
        "sha512": "16075e5ed7652c98c4cf8fa7e77a3477b7667dee98e9651f9234d061609e9331c5ec0b4f1c955cffe8b3d61dfb3199d599646d2793faaad7964ff3528074730d",
        "pids": [
            2124
        ],
        "md5": "4def77d9a2c072dc141fd39c0060a054"
    },
    {
        "yara": [],
        "sha1": "a0167f502aef71b64d3eff20de5bf2d07e6f31a4",
        "name": "3c242efa4d89020b_cntpermission_a2.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\permission\\contents\\cntpermission_a2.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "3c242efa4d89020b0c27d74ffd1a2d9a81d2ab0c8ad6ca5303621777859b36f4",
        "urls": [],
        "crc32": "93593E34",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/3c242efa4d89020b_cntpermission_a2.html",
        "ssdeep": null,
        "size": 25646,
        "sha512": "54a7d82db5429cb79939d7df36930835948cb9b044e8ce53f8aa39672b8afe48f684cf4fe49845f3a4a0791594d2962e55b41116b7556196283b7182e2cd8b99",
        "pids": [
            2124
        ],
        "md5": "0d3cb0da9e7669ee4dcaf01b3df56e71"
    },
    {
        "yara": [],
        "sha1": "6d62d2eef251767b84af67a3951abcd71d9c17d1",
        "name": "963da5f87bf18558_top0010.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\top0010.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "963da5f87bf185586ffb835e6225918ccba6efa6d54db67a4c5c03331aeabf0a",
        "urls": [],
        "crc32": "0D4DCB69",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/963da5f87bf18558_top0010.html",
        "ssdeep": null,
        "size": 3080,
        "sha512": "5e86bf20aacd0b2d16a0fab1f70114ce37424648738b110d79f80ca59b7265bedf8aa8a8de5cb986fe58021863a091ee439028fd2d199f614fcab0f67dc36503",
        "pids": [
            2124
        ],
        "md5": "1377e8ac2ec2f238d75d5e0ff59017a2"
    },
    {
        "yara": [],
        "sha1": "e48101df749d91b29dddaed5d4521c118e15607e",
        "name": "b64fd653434dfd47_iconk21.gif",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\iconk21.gif",
        "type": "GIF image data, version 89a, 32 x 32",
        "sha256": "b64fd653434dfd479d5f29c73cd347e6b4206ddf7a4c77378028345063b71dc7",
        "urls": [],
        "crc32": "0EE5C28B",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/b64fd653434dfd47_iconk21.gif",
        "ssdeep": null,
        "size": 211,
        "sha512": "eaaf5d39934e251b1d6d871d80f79e52f66b086c6b90028955f0f913d36902b803e35a191b66c5626dc7d1431116ee0bbf8c59450fdd1aba9e41b7501e523300",
        "pids": [
            2124
        ],
        "md5": "cdfc0c54da3ea552317610024df040fe"
    },
    {
        "yara": [],
        "sha1": "1c175267728d31f188caf5f9fd6aca346cc02efa",
        "name": "23c077882d2f3ddc_dev_st_p25_16.gif",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_p25_16.gif",
        "type": "GIF image data, version 89a, 16 x 16",
        "sha256": "23c077882d2f3ddcb9cb98d643661fc479c7c63d10ee33a82017479f9804608c",
        "urls": [],
        "crc32": "F01EFBE1",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/23c077882d2f3ddc_dev_st_p25_16.gif",
        "ssdeep": null,
        "size": 75,
        "sha512": "59027cd4e3e0ec17a8331aed25a55c828fca127bcb41191330e369f969a2fc024a681d86ca79493eaca115ace7f262e148a82b23ba3dd601dfdd0af503dc5598",
        "pids": [
            2124
        ],
        "md5": "61563bf1feb742108fb5c92558b83a1e"
    },
    {
        "yara": [],
        "sha1": "9658a8dee9b5fa09f81b1448553e9bb56d776b73",
        "name": "70a4de725e0c1089_set4231.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4231.html",
        "type": "HTML document, ASCII text, with very long lines, with CRLF line terminators",
        "sha256": "70a4de725e0c1089cdf6eeda1ce19286ba40a31509aeedc0a599334dec380a98",
        "urls": [],
        "crc32": "2FA93C48",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/70a4de725e0c1089_set4231.html",
        "ssdeep": null,
        "size": 6952,
        "sha512": "8ce79ad3fe523ed93ac6191790ae47044d613e5c5cf893329a119a665bf9aa88d26e0ba45f9f93e9df98ab231624b3b8450596f147a31af45d2d48362b36dec1",
        "pids": [
            2124
        ],
        "md5": "efc9947c768b33798073ad873da7b8ae"
    },
    {
        "yara": [],
        "sha1": "d5e0bb44b26f4e44c29a2aba2575521150c6ab98",
        "name": "0268afe35d4970b2_set3550.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set3550.html",
        "type": "HTML document, ASCII text, with very long lines, with CRLF line terminators",
        "sha256": "0268afe35d4970b2debf1e812d5822965479de335b653132391c2244d8b8bd0e",
        "urls": [],
        "crc32": "458A43A8",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/0268afe35d4970b2_set3550.html",
        "ssdeep": null,
        "size": 3008,
        "sha512": "718bfcbb18d0653a24540fd671161d40f758e75c12e45494a46e5facb5583b27e4eaaa4fbe6772a479d77e74eb672c00800115852a79992697a5f538fc2df743",
        "pids": [
            2124
        ],
        "md5": "a0c84835832d1b7eee6c97dab5d9a643"
    },
    {
        "yara": [],
        "sha1": "2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a",
        "name": "b1442e85b03bdcaf_spacer.gif",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\spacer.gif",
        "type": "GIF image data, version 89a, 1 x 1",
        "sha256": "b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b",
        "urls": [],
        "crc32": "9ACCEAB1",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/b1442e85b03bdcaf_spacer.gif",
        "ssdeep": null,
        "size": 43,
        "sha512": "717ea0ff7f3f624c268eccb244e24ec1305ab21557abb3d6f1a7e183ff68a2d28f13d1d2af926c9ef6d1fb16dd8cbe34cd98cacf79091dddc7874dcee21ecfdc",
        "pids": [
            2124
        ],
        "md5": "325472601571f31e1bf00674c368d335"
    },
    {
        "yara": [],
        "sha1": "41df648bc48b17927508847920b8c59b29c394be",
        "name": "a437e05691ad19f7_icon_jl_copy.gif",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_jl_copy.gif",
        "type": "GIF image data, version 89a, 20 x 16",
        "sha256": "a437e05691ad19f7f4e6343368c41bfd6ed081e3a157a03b1b51ad1e5f38b950",
        "urls": [],
        "crc32": "0EBFD92C",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/a437e05691ad19f7_icon_jl_copy.gif",
        "ssdeep": null,
        "size": 112,
        "sha512": "6ef849552b14fe4eb473d7d452500b3d6b99da26cceda33975b289d30bf93c10349d77b64f33f125ebe83cb4b9ef8e1d9ee5b61a2460bd0a56b90bec04b78e72",
        "pids": [
            2124
        ],
        "md5": "0d5c2184e577a44c0a527e811828347f"
    },
    {
        "yara": [],
        "sha1": "e34fab0bf2e051b027abaa4c283644627f9cca6c",
        "name": "76c0a42270158338_dev_st_adf_jam16.gif",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_adf_jam16.gif",
        "type": "GIF image data, version 89a, 16 x 16",
        "sha256": "76c0a4227015833816438a690eed27048f5a77aebd043910037bef46e5c01b24",
        "urls": [],
        "crc32": "A7ADD284",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/76c0a42270158338_dev_st_adf_jam16.gif",
        "ssdeep": null,
        "size": 118,
        "sha512": "781b62f619937c88dfc5b66cceb10eb99d4b9a4fba2d675156497dfc74a37a56a587d464cd37e53d6ceba167dcf01bf9877a1c4764457d1db45b05486540a77f",
        "pids": [
            2124
        ],
        "md5": "78c401df6767abdda274d5c620ab342c"
    },
    {
        "yara": [],
        "sha1": "3408af298d0ea2e81cdce10a8c5a1e55dadec8d8",
        "name": "dc716c4fdcd11163_box1030a.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1030a.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "dc716c4fdcd111633975339f24aa74b122472a1b677177d8ab8217a1d611a071",
        "urls": [],
        "crc32": "3F0E81D7",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/dc716c4fdcd11163_box1030a.html",
        "ssdeep": null,
        "size": 2785,
        "sha512": "b90b3fdb4eb504916465950634e1f2d756b01f3990f34d7ae0f4436375261d11a29c1e6b48bb4eb4feea54228e20142f44d84455f3b99b4d291366bfca5d0b85",
        "pids": [
            2124
        ],
        "md5": "c3b28c4396b45145c3f402dd6e3e62f9"
    },
    {
        "yara": [],
        "sha1": "fe5ffcce72c350c20ff01631dffa398ccc9b4b6c",
        "name": "9128fcf9e098ceb5_set8030.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set8030.html",
        "type": "HTML document, ASCII text, with very long lines, with CRLF line terminators",
        "sha256": "9128fcf9e098ceb546005fbba4527849870645800dd3fb3ae2621b855414e439",
        "urls": [],
        "crc32": "E7966223",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/9128fcf9e098ceb5_set8030.html",
        "ssdeep": null,
        "size": 8335,
        "sha512": "06dd13de2c211bb197f4a1db352bb6181e2c77eada56bc1d62ba944bffe60a7e8786f8c1903a3644c29066390077ac04a0b45991699d29efe9637578cc76c072",
        "pids": [
            2124
        ],
        "md5": "a9cd84bf9b316f70f9867e8e89df75ac"
    },
    {
        "yara": [],
        "sha1": "2bb3c883654f01d61835ee548b17f28c531cd2bf",
        "name": "d5b1cc93c2c88115_box0000.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box0000.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "d5b1cc93c2c881156b44a6db92d6a842b023e8d402e37d86e336718dfd1e3d02",
        "urls": [],
        "crc32": "E5803139",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/d5b1cc93c2c88115_box0000.html",
        "ssdeep": null,
        "size": 4353,
        "sha512": "2f623d9bbb7cd075aa9edbca38bc343b88d6bd0538a406ff832361ea1270380af0d95b5cc507bf670969e1e1e583da6062350fa17157cae1a4845d9037e835c8",
        "pids": [
            2124
        ],
        "md5": "8a608678526815d20ea09d19330c9c5f"
    },
    {
        "yara": [],
        "sha1": "f2b1636868b8e86eeeb28d3c9231db8a4e3810ef",
        "name": "eb3e6fa7c09934f9_job2700a.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job2700a.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "eb3e6fa7c09934f9ea54eb18cdf60453fe9d98f3bf85a56e7ad47c260954cad4",
        "urls": [],
        "crc32": "8C77BE7A",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/eb3e6fa7c09934f9_job2700a.html",
        "ssdeep": null,
        "size": 3056,
        "sha512": "a4a6df2b1d04e57d17cf0a95adfb841c31741056bfed84511937650560183f5c2f4aa85fecc0019548cbb3f1f143658e6f9e469af0b9c3bb615a946a52b541ee",
        "pids": [
            2124
        ],
        "md5": "576484f15b516a862ab70ff81d52adf0"
    },
    {
        "yara": [],
        "sha1": "04f263c8f5eebf34216c448e95d1f3173821c5f6",
        "name": "e7b9dd2e3b20c0a3_set0970d.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0970d.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "e7b9dd2e3b20c0a360c096b55156c178c146160a22e58757c3912066ffbd839b",
        "urls": [],
        "crc32": "CD8E17D1",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/e7b9dd2e3b20c0a3_set0970d.html",
        "ssdeep": null,
        "size": 2219,
        "sha512": "74d106ca7210b4c2b08cf58fe607adaa024d6187b33cadcbd54a1fb667dbae9aad487eb0c20fafa04f312368e95c7f079e9e0e289a1d9a1f5b6094bc0c59abbc",
        "pids": [
            2124
        ],
        "md5": "83d8000266389a226d62fa83f2fa8553"
    },
    {
        "yara": [],
        "sha1": "e4906ff1a27c2bb95f4c9233fa6f48e440a33000",
        "name": "9151f154a7f85d78_tonner_off.gif",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\tonner_off.gif",
        "type": "GIF image data, version 89a, 14 x 10",
        "sha256": "9151f154a7f85d78479ab4c73a1da8313a0b13f6b6096e6d75acf57f290c112d",
        "urls": [],
        "crc32": "66884E67",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/9151f154a7f85d78_tonner_off.gif",
        "ssdeep": null,
        "size": 61,
        "sha512": "c9527efe76b9032b70fa54fe8f18ef7806ecebda80a33c406ec290a84e507db29b42be282b1333974d7ee6a7e56bf46d694c2304fc4c79676b382eb4dfc40c39",
        "pids": [
            2124
        ],
        "md5": "40716189bdd77aa3794f79388a6500dc"
    },
    {
        "yara": [],
        "sha1": "b7b1a52f32e4259e2b615b6f145cce66cfbc9215",
        "name": "1f27a9944c9d2e70_set6110.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6110.html",
        "type": "HTML document, ASCII text, with very long lines, with CRLF, NEL line terminators",
        "sha256": "1f27a9944c9d2e70a4355bb859a64bb30375751f90eae0d466931ffcae44b15f",
        "urls": [],
        "crc32": "313DB6C1",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/1f27a9944c9d2e70_set6110.html",
        "ssdeep": null,
        "size": 15433,
        "sha512": "ffec991e131db3cc0f69209004443dd08fa99cbe9fb39dccb193e583e4fdb53f6b1a45435f60379899b7e9488547a87248f462c8a4b2c2f5749f7e2c772904eb",
        "pids": [
            2124
        ],
        "md5": "f9ed66eda174f7b71a6a3e59ed0dbbcf"
    },
    {
        "yara": [],
        "sha1": "a7fda2207bbd399ff4de84fe8a133605aa4a01ac",
        "name": "ed40b7ced7c8e633_dev_st_ready16.gif",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_ready16.gif",
        "type": "GIF image data, version 89a, 16 x 16",
        "sha256": "ed40b7ced7c8e633a917014f2c5385dc3e3688e404ea6409d70e2069e5a1ca73",
        "urls": [],
        "crc32": "7AED1162",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/ed40b7ced7c8e633_dev_st_ready16.gif",
        "ssdeep": null,
        "size": 123,
        "sha512": "ecc34af84fb9946224f1773b1d5728ec4c005e17976d53e5877d50971952f3999b168d83539184e9bdd6d0da94fbeb4bc0bac3e11711dafb30f1ea57626077f1",
        "pids": [
            2124
        ],
        "md5": "93e5a96f60feeeb25617f267e02bd0a4"
    },
    {
        "yara": [],
        "sha1": "842b5d04ac311f661eab6ef9c0ff327582e59cd7",
        "name": "73135044b5e6e06a_icon_cmode_b.gif",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_cmode_b.gif",
        "type": "GIF image data, version 89a, 21 x 17",
        "sha256": "73135044b5e6e06a94c7b99aee345100232144e6c33c74849ca31c5e81915416",
        "urls": [],
        "crc32": "985BAA3A",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/73135044b5e6e06a_icon_cmode_b.gif",
        "ssdeep": null,
        "size": 550,
        "sha512": "b906c9200107bd52329098932dce1be9a8ea5108f40edbf2de166d668f2f850509f30f90ee515cf4ce28c60a572ee1478be2a5ff4ba19daa262e29300ca8fbed",
        "pids": [
            2124
        ],
        "md5": "f90cc65cd2d8d5906f2ed6c5937c7c03"
    },
    {
        "yara": [],
        "sha1": "75fa807aa5838be76e143e44f5ca417f1abf9bbc",
        "name": "cf156070361a87d7_dev_st_ot_rest16.gif",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_ot_rest16.gif",
        "type": "GIF image data, version 89a, 16 x 16",
        "sha256": "cf156070361a87d7d7e881af69a8a13029d8e173bf570456b5bcf5ff7ddebce8",
        "urls": [],
        "crc32": "E297B85D",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/cf156070361a87d7_dev_st_ot_rest16.gif",
        "ssdeep": null,
        "size": 108,
        "sha512": "049d38871172ee999b1c97a29a5110edda4d96fbc0fbd187e79a48b1a3585de29e79f117ddc46c23709d7e0f2e16001858543a1088166d7981f2e3c0b1c11338",
        "pids": [
            2124
        ],
        "md5": "4b739ddf6155e3643486c0573c7d3307"
    },
    {
        "yara": [],
        "sha1": "f2b22e195a684e76a829e0f635a6a1b104e9e284",
        "name": "a2983280bdf459d0_set4230.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4230.html",
        "type": "HTML document, ASCII text, with very long lines, with CRLF line terminators",
        "sha256": "a2983280bdf459d01bf0dd43a3de389c8cf804ff478b3c269e5aedb284568af0",
        "urls": [],
        "crc32": "5BAF6AF0",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/a2983280bdf459d0_set4230.html",
        "ssdeep": null,
        "size": 11712,
        "sha512": "03523febd5527c3f38b21a19fbcedc9a634f9caf19047afd8be4f4ace34b22fcd820db5149f90bf0a533a0b51a14bdfb3fd4b319044ed60ef3d5b46d1f0cb616",
        "pids": [
            2124
        ],
        "md5": "68e79adea5ce69458b98bc2a4661333c"
    },
    {
        "yara": [],
        "sha1": "dec4df0a09aa5a9ab2a6256bec2a4de662b10487",
        "name": "bfbd2499c1ca598c_set7280.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set7280.html",
        "type": "HTML document, ASCII text, with very long lines, with CRLF line terminators",
        "sha256": "bfbd2499c1ca598c3d36ef6a177955e9067520feeabf918faf236cc56ba1bff5",
        "urls": [],
        "crc32": "B7BF2314",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/bfbd2499c1ca598c_set7280.html",
        "ssdeep": null,
        "size": 10640,
        "sha512": "fc44dc20cc2d8dae5d3a85fc5d55bc6e5b600837f8cfc4e54e559e93361ce5c40a2186676be35a72451ec3a7c79fc2b28afc40db71a347fcd2c9eea2288e9db1",
        "pids": [
            2124
        ],
        "md5": "641dea816e92ece20f82eb29068f4588"
    },
    {
        "yara": [],
        "sha1": "c9c42729f9710eb539c095a97a998974c90fdd54",
        "name": "0e0e7e1658de03a5_top0070.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\top0070.html",
        "type": "HTML document, ASCII text, with very long lines, with CRLF line terminators",
        "sha256": "0e0e7e1658de03a533240a0cd95d4fb4f99df6b40a61b7f0f6d040c742b58f9f",
        "urls": [],
        "crc32": "44FA3C95",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/0e0e7e1658de03a5_top0070.html",
        "ssdeep": null,
        "size": 2778,
        "sha512": "9ed722b5fad4dbd2c0ffcf96489c4772d92c70644075fc34be025d986ef806d0e3b766f11d952134f5916e3283ee0fdc829ac9a378727e04a2a979ca841a914f",
        "pids": [
            2124
        ],
        "md5": "1ae1f33f9277ee677abfa2fd35e3fbc1"
    },
    {
        "yara": [],
        "sha1": "8cff03b936ce7ccab9753d761d4bed45d7b5654b",
        "name": "b1be143839cf1850_box1450.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1450.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "b1be143839cf185031e00b8835b4823e5e5adebb9118db98e43c63f7827f63be",
        "urls": [],
        "crc32": "C64DFA54",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/b1be143839cf1850_box1450.html",
        "ssdeep": null,
        "size": 2822,
        "sha512": "f16ba55261269de0afeb23be71e2403d4b942e7936b2ec77b408a5822ad4713d11ceb3b99e3d8cfdca46335b963f1b7b5c7379ded736a6453d88749ae2567027",
        "pids": [
            2124
        ],
        "md5": "548a6c3974ef01069c5e57bcf5f7424a"
    },
    {
        "yara": [],
        "sha1": "446131d6ec14f6ab6a167981d041ffa60775bfa9",
        "name": "e104489895077fc4_dev_st_wup16.gif",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_wup16.gif",
        "type": "GIF image data, version 89a, 16 x 16",
        "sha256": "e104489895077fc4708fd2fead3f43619bdd5e5820dd9100bf7734dcc0deeb25",
        "urls": [],
        "crc32": "3964392F",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/e104489895077fc4_dev_st_wup16.gif",
        "ssdeep": null,
        "size": 120,
        "sha512": "f6baab018fb2c9ff44c658ad0f3084d48703df91cbcc6c2e4342a6d125f039dbda084f2cf037a7877c6428fee0dd513b29bb5e0e7c39b2b7b52825f7074d3675",
        "pids": [
            2124
        ],
        "md5": "56644f6c32a5dcf3820d960bc42f2085"
    },
    {
        "yara": [],
        "sha1": "dbe591fdd17f649655eaeb3bbfcc588c1411bd5d",
        "name": "ff20f76e40d4b1ef_set6351.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6351.html",
        "type": "HTML document, ASCII text, with very long lines, with CRLF line terminators",
        "sha256": "ff20f76e40d4b1ef761c0820f290d917019c887292ef7259ab7cb919bf8a04a3",
        "urls": [],
        "crc32": "55780927",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/ff20f76e40d4b1ef_set6351.html",
        "ssdeep": null,
        "size": 5599,
        "sha512": "c2d0bcd5c162b08957f45367a4d0031ca4971511cddad041afc4014eac74c69d2c5208610c27ddc28105540c57d0bfd61eee459efa0aad7f3f0f5b778ea00bd3",
        "pids": [
            2124
        ],
        "md5": "e8891adc7c9264c17ffc982e6ffa2119"
    },
    {
        "yara": [],
        "sha1": "074e7825b623971c814c0fbfae5669a9eaa0a059",
        "name": "afe0a3a7d171b006_set4240.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4240.html",
        "type": "HTML document, ASCII text, with very long lines, with CRLF line terminators",
        "sha256": "afe0a3a7d171b00608964ec3198b7cad8ba270016539398948c6214f1082183c",
        "urls": [],
        "crc32": "67566ABE",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/afe0a3a7d171b006_set4240.html",
        "ssdeep": null,
        "size": 7129,
        "sha512": "1c98f572eebfc24c849f84dd1d31b47842e6febb2c62c60a55328c01499465550b3ee46188ca169fa6669d577e42c05e905d85dcd8e09cab979c509fb28210db",
        "pids": [
            2124
        ],
        "md5": "9b78cc6642434aa260e542c0ffe71bfb"
    },
    {
        "yara": [],
        "sha1": "7cab762c2288db3282cec4a895e06e8d2fbe1da4",
        "name": "7b4a0416e78f8399_cntpermission_u3.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\permission\\contents\\cntpermission_u3.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "7b4a0416e78f83997e92a2cae8531ced729dec5aef4281dd0ada5c9a0f21bfd2",
        "urls": [],
        "crc32": "690B04F6",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/7b4a0416e78f8399_cntpermission_u3.html",
        "ssdeep": null,
        "size": 25705,
        "sha512": "91f79649a1078df396f3d146b996fcc16bd2860385a3c139bb1edae0abb8df630d69bc99b019e7f8092cf2449a49fda9ae8eb80e6efaa522ae79ac79cb47c4a7",
        "pids": [
            2124
        ],
        "md5": "4e7767bee93bbfede147363e418089b1"
    },
    {
        "yara": [],
        "sha1": "ffdb5cf891e82d86b595d2f1fea4a7ef16da9688",
        "name": "6b951496f5ef23f2_job2605a.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job2605a.html",
        "type": "HTML document, ASCII text, with very long lines, with CRLF line terminators",
        "sha256": "6b951496f5ef23f21aa19acd65d9bb72f059f54c9189b7ba50a4feca7e8420a3",
        "urls": [],
        "crc32": "96E549A3",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/6b951496f5ef23f2_job2605a.html",
        "ssdeep": null,
        "size": 6513,
        "sha512": "c5f993e38d85e3b6e5efe1ac6ea4080ed3bc5e4d377a2ff39fc07792660d8c6ac7d18e179dedf5f1d5ecfa44fed99ba0409d522d148a4e35f2a4ba96fca57ecd",
        "pids": [
            2124
        ],
        "md5": "b5953c6f7c5e8c6ead774b491c6d459a"
    },
    {
        "yara": [],
        "sha1": "471951d4e1644c9be32a4aa436d94d87ab1a48ac",
        "name": "7d8b92aa13aca421_set0890.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0890.html",
        "type": "HTML document, ASCII text, with very long lines, with CRLF line terminators",
        "sha256": "7d8b92aa13aca421419281258efbb3a4b2fc8a0776ce52d179918d921d58a05f",
        "urls": [],
        "crc32": "6C0EC597",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/7d8b92aa13aca421_set0890.html",
        "ssdeep": null,
        "size": 5766,
        "sha512": "f54c18514269482c71e3943cfcde7c26cc7b9f1d4d51c129cb2a79cb95615d929945dc023b23e2fffd11c0d21a3fdf995163cfcc4ba5f22f4bf7c84653a5b135",
        "pids": [
            2124
        ],
        "md5": "83122e59165a3a6275eb999b9657aff2"
    },
    {
        "yara": [],
        "sha1": "6e0d63e56d0f25ca9a7c48652d1cae20ac021beb",
        "name": "5e93aef745d46c12_box1360.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1360.html",
        "type": "HTML document, ASCII text, with very long lines, with CRLF line terminators",
        "sha256": "5e93aef745d46c12604e34d375e0f1a853469d1d65e817e89840df8f6019da8f",
        "urls": [],
        "crc32": "FCEF5A86",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/5e93aef745d46c12_box1360.html",
        "ssdeep": null,
        "size": 11101,
        "sha512": "0eba823f36bb27028b2562ec0ba147e62ddee789f83f6103b5e37eb8357761478a5df5ef2b60b86af4e3989c36171bc75434cc0f5606dd826935b5fe77197797",
        "pids": [
            2124
        ],
        "md5": "60d3e094a45d429ac7f4bfe36516c116"
    },
    {
        "yara": [],
        "sha1": "411194b342cd8a0ae4104ecb17cc146b21572541",
        "name": "b68ff7af035328c9_set7220a.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set7220a.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "b68ff7af035328c9b7c6fb9648d2cb39dae06ee9987967c53cec66e1fd419ded",
        "urls": [],
        "crc32": "8FEBC9C7",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/b68ff7af035328c9_set7220a.html",
        "ssdeep": null,
        "size": 2602,
        "sha512": "fa37d91806bbe7a436bdd0129197527843a38cd6727aa101bd09029e3c3a67958b9bd36faae1ee1a5b57dc6b6cad1a895f693cf9aba318818874f29ba8088b45",
        "pids": [
            2124
        ],
        "md5": "c79a70fccd97357c9e91d2f4eed0df49"
    },
    {
        "yara": [],
        "sha1": "3931071f4201ae41366422837a2c157c56a3262d",
        "name": "20506630cf66aec9_box1100b.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1100b.html",
        "type": "HTML document, ASCII text, with very long lines, with CRLF line terminators",
        "sha256": "20506630cf66aec937c324bdf34dcb6222564ee8b9494b59da596f85cf62ca41",
        "urls": [],
        "crc32": "35032697",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/20506630cf66aec9_box1100b.html",
        "ssdeep": null,
        "size": 2523,
        "sha512": "571c4e9681867dd880e080307e6722606968dcaf3d9bb63436d72d8d256660faa7fed1c66403736ab637ded1451225f78d96a7dc361d97dd4edc03462525331a",
        "pids": [
            2124
        ],
        "md5": "6c5217915a467bac9c16429b4063651a"
    },
    {
        "yara": [],
        "sha1": "bc1dd7b26b5429b5c257da0055065caeddbf597b",
        "name": "71207a0771c3b23a_dev_st_tend16.gif",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_tend16.gif",
        "type": "GIF image data, version 89a, 16 x 16",
        "sha256": "71207a0771c3b23a421c6716a101b78b649e0f8740b69009c2b1219881381753",
        "urls": [],
        "crc32": "F747D9A9",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/71207a0771c3b23a_dev_st_tend16.gif",
        "ssdeep": null,
        "size": 152,
        "sha512": "76d73c08f23025a4538580f79785b85800f3eb88d1cf4f8dcc4bff19b5c9b88e7cb3699859049ee04e5f200e4e50ce0dfd9d7ac36e14f86d25f5b04776754d1d",
        "pids": [
            2124
        ],
        "md5": "e5a5c1f424a15e77cf8d01b9430faa7f"
    },
    {
        "yara": [],
        "sha1": "c0608b6e12badb9ac85a079ce954b71746eee076",
        "name": "3bf998fbd60d9cc9_item_name_head.gif",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\img\\item_name_head.gif",
        "type": "GIF image data, version 89a, 12 x 12",
        "sha256": "3bf998fbd60d9cc9bad2c43372c53dbfbf6c7f1633f42810edeaa3737d2e2051",
        "urls": [],
        "crc32": "6E3EB777",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/3bf998fbd60d9cc9_item_name_head.gif",
        "ssdeep": null,
        "size": 62,
        "sha512": "6c29a9d83e25804ee21f55baef9e29a6c84828fc249c680de9bb7aaba527b37867054c8a5c1b398a987cee81762fc3cd751a319d1b181e90f87b37b9b939a612",
        "pids": [
            2124
        ],
        "md5": "b9a326cdf6894a832c541911522be646"
    },
    {
        "yara": [],
        "sha1": "f73b158c31e61eba490b630c14ce3c07af47204e",
        "name": "a47a0880b1925721_dev_st_other16.gif",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_other16.gif",
        "type": "GIF image data, version 89a, 16 x 16",
        "sha256": "a47a0880b1925721b49b932e4e6669cdc0c32a092f4bd74cf2c572c16294befc",
        "urls": [],
        "crc32": "F9EF4D0B",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/a47a0880b1925721_dev_st_other16.gif",
        "ssdeep": null,
        "size": 123,
        "sha512": "14dd444b189346e28c1fbdf8472f8bbe08bed88788e3c0d7b40b14560b9ee631759117a3f02fd99ec8d564ba99310f8bb3dbef15088315c5afba0f4693f4a3f4",
        "pids": [
            2124
        ],
        "md5": "37630b536c2f010050ac320f0725a7ac"
    },
    {
        "yara": [],
        "sha1": "fc32e070820474bf252879f4f1b6f6b17feba893",
        "name": "23f404ed9d6ac42f_p_adr040.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_adr040.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "23f404ed9d6ac42f9aa80c419407840f972f0d1f6dcf9d93f6182c0f5eb8a3c4",
        "urls": [],
        "crc32": "52EE4CA8",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/23f404ed9d6ac42f_p_adr040.html",
        "ssdeep": null,
        "size": 2319,
        "sha512": "f05a2892d15c01fd5e4e8fe1cbd9ff1ca44cb8b08291d5fcc979ddd5b95269189f21a566c7bbf580e71de94fbc7c0b71f8bf3d368f068d93652a019bc5def672",
        "pids": [
            2124
        ],
        "md5": "3cd9c4c1e4da96b49d087578e3b713a2"
    },
    {
        "yara": [],
        "sha1": "1bad9526f9ca520606365b6c8abb9389ae16fd8d",
        "name": "052272676cac8597_p_box080.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_box080.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "052272676cac859733e41749bc4d16b8f6c6710c216ae00b309f7991417c74b6",
        "urls": [],
        "crc32": "42913AA0",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/052272676cac8597_p_box080.html",
        "ssdeep": null,
        "size": 2604,
        "sha512": "a9b7f76c791b7a0a84fddc08a485af1dca2d230d29dd8463be0317146939ba177120edf1a557dc6f8450aeb332d8ee05c71ef4d8f750c976df8afe7767ad4c65",
        "pids": [
            2124
        ],
        "md5": "60f7f263a9172d27b3b974c1fe74d3b3"
    },
    {
        "yara": [],
        "sha1": "87ab36dc44e6391f51e5c89eaa8446fc998012a3",
        "name": "327d276e5ebab4d7_set0960.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0960.html",
        "type": "HTML document, ASCII text, with very long lines, with CRLF line terminators",
        "sha256": "327d276e5ebab4d7ce98f1880938dad26027d9b69c1bd3c6c830b64ff8c8a866",
        "urls": [],
        "crc32": "B491EEA2",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/327d276e5ebab4d7_set0960.html",
        "ssdeep": null,
        "size": 8697,
        "sha512": "fb4f7fe0c3114ec5894e539123e74e549faf25e8ba283ae52656f042ab87f1e97f1d0d3aec1a5da9650863789e9d3ac370b3f508d00d7fab0fb42964ca5dae1e",
        "pids": [
            2124
        ],
        "md5": "4cc554666def1128bb97fea88918cfe1"
    },
    {
        "yara": [],
        "sha1": "d421eb5f92b467d9f654f317bd49c09d7ad8826f",
        "name": "0a6d0c4c187c8aca_icon_doc_lock.gif",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_doc_lock.gif",
        "type": "GIF image data, version 89a, 16 x 21",
        "sha256": "0a6d0c4c187c8aca82f0745b9efcceda59fb9d3a1246586abf487d26b2e4cfcf",
        "urls": [],
        "crc32": "3FF7E57A",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/0a6d0c4c187c8aca_icon_doc_lock.gif",
        "ssdeep": null,
        "size": 598,
        "sha512": "cbce46a08bc9bb080c0088ba81347ef85dcf029b64da6f3279f996b9b50946597072ecbffa24575734de66644921c93fc85d0d6784dc8ab8d9cd0e81d7b22c64",
        "pids": [
            2124
        ],
        "md5": "a7bd0b032ff4fd38af2ee708c1c300ec"
    },
    {
        "yara": [],
        "sha1": "d1243c03faf9c54008ca69ac8a27d088dfacd3fc",
        "name": "9b0c96043f483900_box1100.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1100.html",
        "type": "HTML document, ASCII text, with very long lines, with CRLF line terminators",
        "sha256": "9b0c96043f4839007afd1a1465f8cf62d26d686053e5469186de549e404c2ecf",
        "urls": [],
        "crc32": "49FEAA69",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/9b0c96043f483900_box1100.html",
        "ssdeep": null,
        "size": 5221,
        "sha512": "674dcf330f67f580e2132b609e4f59915d3420df9a67ebc439d98d6a9628c1687fbe5f5021aa386b8bfc4a3f226389d3e7d9099f1581b22ed6cb5db80e60ec3d",
        "pids": [
            2124
        ],
        "md5": "12fb5eec133268b6cc5ec06b5fa4f3ee"
    },
    {
        "yara": [],
        "sha1": "d21a1deefef2b4cc645d5c30ef3a0542a83c194f",
        "name": "e108eb623827d39f_set0980b.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0980b.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "e108eb623827d39f6bcbe89793e7b9db31136ce56e98a33af1d0e57982b8a4fe",
        "urls": [],
        "crc32": "4E41C008",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/e108eb623827d39f_set0980b.html",
        "ssdeep": null,
        "size": 2275,
        "sha512": "e0ec2c58d8d9221543905d384155159994779c99eced5d94f751dcee4728428e1fb987f7dd0c0c61452bf7abaddef01d01f1524a1dd88a4113edb637f18cdbb2",
        "pids": [
            2124
        ],
        "md5": "c2614a7a2521a39963e1bb38cc0098fc"
    },
    {
        "yara": [],
        "sha1": "daee2fc1474918aa4c63f86a00673d801535e64a",
        "name": "c110b86029b4396c_job2605.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job2605.html",
        "type": "HTML document, ASCII text, with very long lines, with CRLF line terminators",
        "sha256": "c110b86029b4396c72ec2da1949953109a970eea1c6e1938f92b4a1e9198ee92",
        "urls": [],
        "crc32": "F10B5233",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/c110b86029b4396c_job2605.html",
        "ssdeep": null,
        "size": 9777,
        "sha512": "e3f8304c98d8957a343f0db96efcc3a22bbbe37e4bca0c2e8812c8c430c083f3cadd7db2e7a15ae7d6f861d30fcfbd429dd8e1a94b2382179bf58972ab697909",
        "pids": [
            2124
        ],
        "md5": "e812ca7400d1a56e03eef2f9492a9cc9"
    },
    {
        "yara": [],
        "sha1": "4b73b5a0123fac50d71ccce44877b04646d4222e",
        "name": "38c4a1834e8552a3_job2620.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job2620.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "38c4a1834e8552a3b2b2b8b73df180f05f59facd282725c37f6445f0edf0dd47",
        "urls": [],
        "crc32": "3F622854",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/38c4a1834e8552a3_job2620.html",
        "ssdeep": null,
        "size": 5229,
        "sha512": "2c92576654b5dcf804420ac1c8f065d392b8ea278401614a3513efd1d1bac2ced246c6388c4af97ec4cce9e18e059b0b5df9749fe8f095cebbad643f650c3f08",
        "pids": [
            2124
        ],
        "md5": "e903c353237e5624497ab26e06215adc"
    },
    {
        "yara": [],
        "sha1": "6f171f3c67c502eab26a4bd6b6bed0a78990b21e",
        "name": "2f1571708f75630b_p_job000.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_job000.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "2f1571708f75630bad54e65d5f97129c9b8ba605c0f7b4447c20f88dc51efff8",
        "urls": [],
        "crc32": "3895DF86",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/2f1571708f75630b_p_job000.html",
        "ssdeep": null,
        "size": 1291,
        "sha512": "3efd63d47576b82df391b7a661470bf28fd5907bb89bd99c51a9d129e24473e0fb94dd60c62e568ea3a6c79c3e78f38813e05250189fbe3c98c82258da295cb1",
        "pids": [
            2124
        ],
        "md5": "6a0f663b93c3416ea125a4a8521308e1"
    },
    {
        "yara": [],
        "sha1": "d371aec63f28637a3501319335f50ad700cb4162",
        "name": "8d33245110f13a93_set0990a.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0990a.html",
        "type": "HTML document, ASCII text, with very long lines, with CRLF line terminators",
        "sha256": "8d33245110f13a937f89f22441f00d5b93e640df99b50b5813dafc236d257503",
        "urls": [],
        "crc32": "74E199E3",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/8d33245110f13a93_set0990a.html",
        "ssdeep": null,
        "size": 2444,
        "sha512": "600ee2b07f8c83f04498fa811192d34795c0b27436621d2afd5fdb1e78d8945dd9742fcf60cbcd5f374b329b3a51655ae1afd211aafc191c73c0923ee2eccf84",
        "pids": [
            2124
        ],
        "md5": "d2f6ec5efb27ce088742ab0dd9f2a3b2"
    },
    {
        "yara": [],
        "sha1": "3ade7829f4da83af8c69d8978bc9096ea7343a3c",
        "name": "2670b86d2d848bcc_set0880.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0880.html",
        "type": "HTML document, ASCII text, with very long lines, with CRLF line terminators",
        "sha256": "2670b86d2d848bcc8f651852ed2f22710c9eaaef7b3159e946ca8da58c66f119",
        "urls": [],
        "crc32": "66A5D302",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/2670b86d2d848bcc_set0880.html",
        "ssdeep": null,
        "size": 12198,
        "sha512": "adde6a2161aabb2c223b00904d1c0cf15ee71115b45aeb0ba2d568d696da4f6772ab1c0aa4ce57a97c82822628f8d8e52eae27ab11966c887cd5810fb6c4af03",
        "pids": [
            2124
        ],
        "md5": "059543eecbf235319d7a577e863fcd11"
    },
    {
        "yara": [],
        "sha1": "d74b621f03ed6e0628b77697d2218fead45cd14c",
        "name": "e9fb294a283d2bd3_set0990.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0990.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "e9fb294a283d2bd386d4cc91bb00c41068aff3eef8c890f40d943bd9a8e2649e",
        "urls": [],
        "crc32": "56A8402B",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/e9fb294a283d2bd3_set0990.html",
        "ssdeep": null,
        "size": 5533,
        "sha512": "1c08b583d1a5dbbbbeb0f8a300d56728ea625a9b4a615bb314e09dfef8778802a6aef172f2c8e342159ee41626a822a2ee2c08caaf8725720cc7784bb75188a3",
        "pids": [
            2124
        ],
        "md5": "dde6e05ee3c7d8bff7a3ae398ee7532f"
    },
    {
        "yara": [],
        "sha1": "10e96a5be0f71f9be03ccb3d6d2b8df32cfd2ac6",
        "name": "22847d43559b9696_dev_st_toneru.gif",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_toneru.gif",
        "type": "GIF image data, version 89a, 18 x 20",
        "sha256": "22847d43559b9696b93dbc5857f572736b4c77ee89dcd41c563a74ab6f85092c",
        "urls": [],
        "crc32": "E2939D26",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/22847d43559b9696_dev_st_toneru.gif",
        "ssdeep": null,
        "size": 99,
        "sha512": "6baeb3637dea468e665d0a86cb3d653610dc29a51faa8d00a6e7b9d3b47a6338707a9798c57b2406ed3603dfebc5f587ded51e0f597249e920e5a2f17f6c9c0f",
        "pids": [
            2124
        ],
        "md5": "4602c2287fd49355a5ea3a27ad8b70e5"
    },
    {
        "yara": [],
        "sha1": "75cb7af758a498d98364228ee2c5d0c463980ef3",
        "name": "d0a6cc986c2924e6_set4170.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4170.html",
        "type": "HTML document, ASCII text, with very long lines, with CRLF line terminators",
        "sha256": "d0a6cc986c2924e60247fe420fd189aec094b0de40b731ef9c99866ee6f21a3f",
        "urls": [],
        "crc32": "17FEBA73",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/d0a6cc986c2924e6_set4170.html",
        "ssdeep": null,
        "size": 19893,
        "sha512": "e78b95029d111acd3e2ca1e749245e47545cead08465509eaf6e0bdfbfe776037e0c2b3f4eaa8fec90e2c45a89fef2c1b5c05e7ec9c88531757da0b93a1583eb",
        "pids": [
            2124
        ],
        "md5": "4e13214beab46ade32cbdf196520fe9d"
    },
    {
        "yara": [],
        "sha1": "1937d7a5343189413b0269eeab8848c6b1b6f328",
        "name": "a412f430cb33c42a_box1430.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1430.html",
        "type": "HTML document, ASCII text, with very long lines, with CRLF line terminators",
        "sha256": "a412f430cb33c42a8b90ce722a00c67586c7bc9de8e7f8bbbb8885b979af9c28",
        "urls": [],
        "crc32": "D95D370A",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/a412f430cb33c42a_box1430.html",
        "ssdeep": null,
        "size": 3003,
        "sha512": "d222717270d2aa3b7c9141f28ad0f5ae7b0353aa1d753891ffc9db2cd06ffb222a9dea6477dff017aab27a49b912d9bb2d394a76387fce0677d63e1ac59ffd07",
        "pids": [
            2124
        ],
        "md5": "f4c5e1480e755567972256bd31bcafba"
    },
    {
        "yara": [],
        "sha1": "23022aeb3741f9cdb75cd67da2a4020100dc9169",
        "name": "0419f26218adbe42_set0998.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0998.html",
        "type": "HTML document, ASCII text, with very long lines, with CRLF line terminators",
        "sha256": "0419f26218adbe42a59aa761522a0b45c4b635ffb40e9f226570854a36b3c409",
        "urls": [],
        "crc32": "85A99C3E",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/0419f26218adbe42_set0998.html",
        "ssdeep": null,
        "size": 8494,
        "sha512": "f4cd359a92810cd4cf5151f9e998bede1b2bda226d0bbdfdef9662dfcbc125a27d0787db13dea600812d82c870da45471a9c2621fa3f3d2f31657bf174009383",
        "pids": [
            2124
        ],
        "md5": "1aa25e41734d82be84dc173bb2c9d292"
    },
    {
        "yara": [],
        "sha1": "5af323bb4d95a805707325702e7921d2794e101d",
        "name": "e2542a9d086a833d_p_pri000.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_pri000.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "e2542a9d086a833dafe22b0574d4c9005e73aac98e96262e62a80bba969b0121",
        "urls": [],
        "crc32": "15A1454B",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/e2542a9d086a833d_p_pri000.html",
        "ssdeep": null,
        "size": 1334,
        "sha512": "24e234be7ace13b124f649b54c89e2980a76d338a7f55944bde9bf569d04d88e6608e7e803f0582fa54f47eaca25598a89808602e11aafdab64e50d8322ffa32",
        "pids": [
            2124
        ],
        "md5": "b7e800e457f636a5f49fbb491b998226"
    },
    {
        "yara": [],
        "sha1": "032cf65d550a88389433141cd8f44d569e55eb81",
        "name": "881e92adfe06d6c2_set0998a.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0998a.html",
        "type": "HTML document, ASCII text, with very long lines, with CRLF line terminators",
        "sha256": "881e92adfe06d6c2f3072b2f45c8e3d527de8c529e6b0e302db9a3163d417884",
        "urls": [],
        "crc32": "0B017A25",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/881e92adfe06d6c2_set0998a.html",
        "ssdeep": null,
        "size": 2280,
        "sha512": "dbef6c8839980efefbea10ede1d93ad7804dcf4ae638a8626304e6960d0b66a24f5397ecce65c9b25d519ada53259287a85f27f015c71599a86605fcef3131f1",
        "pids": [
            2124
        ],
        "md5": "157a32fec92aaf6bc432b5026fe14682"
    },
    {
        "yara": [],
        "sha1": "15ac10b852881884800ea5a392f2ab92050fdc0c",
        "name": "6627df3a8e9bb51a_dev_st_proll100-25_16.gif",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_proll100-25_16.gif",
        "type": "GIF image data, version 89a, 82 x 16",
        "sha256": "6627df3a8e9bb51a2447ccb4765b5aa6f3a6398904a0050c9a1722be4fed6508",
        "urls": [],
        "crc32": "4133C2FA",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/6627df3a8e9bb51a_dev_st_proll100-25_16.gif",
        "ssdeep": null,
        "size": 226,
        "sha512": "955ddf6a57c6c20cf373b6e22cd16c9f770f9c7253a175ff585a631d50d4eb2140131a1ccd6ad7557e564a37ea0bd57ddd8f926ad5e325a67bde4b93d1784eaa",
        "pids": [
            2124
        ],
        "md5": "ef04e5a555471c2d2bd6067f7634c5bd"
    },
    {
        "yara": [],
        "sha1": "a1a968face70e79943153a742506352f26c42c8b",
        "name": "f66ba50f285116d0_set4000c.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4000c.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "f66ba50f285116d0e418bf2e86b8a77f3e226c125540064e47f3971e323ec07b",
        "urls": [],
        "crc32": "9D6CADFE",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/f66ba50f285116d0_set4000c.html",
        "ssdeep": null,
        "size": 3398,
        "sha512": "af42737d210c17a6cf5862f14e866b6d4181a83322e300beeadbdab418c5e2a3c12d5bd4ea6626a036904666be39652ef8264269f60f572ffe99ce6a618d0117",
        "pids": [
            2124
        ],
        "md5": "71850a55c1325e0783ca2dbbf85435ee"
    },
    {
        "yara": [],
        "sha1": "25f0965811bc8bfc97f8731c9edbb5ead579e187",
        "name": "7790b04f5288228a_pri1080.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\pri1080.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "7790b04f5288228a290ed134d27f7b2982a453d69bcf5a5b9182df82d6b58ace",
        "urls": [],
        "crc32": "A3299837",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/7790b04f5288228a_pri1080.html",
        "ssdeep": null,
        "size": 6047,
        "sha512": "ef38e8054c724ba68ecc323bb298c3fbf16150a9cca601bf7b74f791c7afcc08bd562a61be6235d0c30548a0aa6a763cfa3c546ad697166e4dec07fdb7e1abf2",
        "pids": [
            2124
        ],
        "md5": "adbb263e13cafa939f7fe6cbd4b1ac50"
    },
    {
        "yara": [],
        "sha1": "3ceaa753c570195dbb341f36d356029abbac360b",
        "name": "bb51954bc992e3fe_job7235.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job7235.html",
        "type": "HTML document, ASCII text, with very long lines, with CRLF line terminators",
        "sha256": "bb51954bc992e3fe6aad5dfce65a33f2ef4ebedd0c3834a1e04903371ee7c002",
        "urls": [],
        "crc32": "47CCD718",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/bb51954bc992e3fe_job7235.html",
        "ssdeep": null,
        "size": 5570,
        "sha512": "521a06e06fdac7e1228cdc5b1ba2c21ee1d07f2d3635f86297005d13af8924dd7c3251d6489cac1a346c1b573e2046c2b94f1e859451e645292fb58964cc6129",
        "pids": [
            2124
        ],
        "md5": "0e4a7a4df88e3e597aa645673a91576d"
    },
    {
        "yara": [],
        "sha1": "6f0785c576d886d509612e70bce88d66249d0767",
        "name": "d0a3e4d05769c45b_dev_st_tn_bar_k80ok.gif",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_tn_bar_k80ok.gif",
        "type": "GIF image data, version 89a, 100 x 18",
        "sha256": "d0a3e4d05769c45be0cd3aa8327a6e88f6285d0f4cfd72d2738d5c313798226e",
        "urls": [],
        "crc32": "59AD57F6",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/d0a3e4d05769c45b_dev_st_tn_bar_k80ok.gif",
        "ssdeep": null,
        "size": 1328,
        "sha512": "4f8d4f66345c97223bf4f5526007b55c3a075117ff56aaf744b22302d797047f68845097f3b34b85e9d56962cd52d8105df3941d0bcc51238d5099eb9639fe58",
        "pids": [
            2124
        ],
        "md5": "f33ee3df881916f784f714838ce6778c"
    },
    {
        "yara": [],
        "sha1": "87bd9df80e81bc6b7e4924815f2001bf78e7943f",
        "name": "397209dcb80d88f0_box1010.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1010.html",
        "type": "HTML document, ASCII text, with very long lines, with CRLF line terminators",
        "sha256": "397209dcb80d88f05488801732d0e073a6550a93e52716d0dd7f303fe3291c7f",
        "urls": [],
        "crc32": "3639D38C",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/397209dcb80d88f0_box1010.html",
        "ssdeep": null,
        "size": 19127,
        "sha512": "e1cfac9d5b88a84fc3f7cc65bb05f8053cea7788157dcc802996abd8f028a85a44c005d97e5e98dd1d525713f2a3d792d67da1db953051cbfe6ea7dbe50c73dc",
        "pids": [
            2124
        ],
        "md5": "030172abc2074cca8b2c98839f9afc2a"
    },
    {
        "yara": [],
        "sha1": "e42585a7b8c23a28b123391555af6b6f00322fbc",
        "name": "63e1efee1ac5fcce_adr0560b.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0560b.html",
        "type": "HTML document, ASCII text, with very long lines, with CRLF line terminators",
        "sha256": "63e1efee1ac5fcce304f3792f1f1b4548f75b3e97223708c69bbd4384da28a68",
        "urls": [],
        "crc32": "F434E1D6",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/63e1efee1ac5fcce_adr0560b.html",
        "ssdeep": null,
        "size": 10882,
        "sha512": "f5f130a78036ff91af56403b3f21f54d11f00f79509ed0806e5f8cf0578eef80340da7a2c1c58d9590ab1ea2b86854ad732b768651bd416ca501ba10942dd415",
        "pids": [
            2124
        ],
        "md5": "29a2b93dcb63ffbff1bf37af0607c5d1"
    },
    {
        "yara": [],
        "sha1": "75297801271c80740d56865b32c5b8ad766a5cc7",
        "name": "6c2434c905610293_p_job020.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_job020.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "6c2434c905610293ad084754a33d6c156a153ada4646418156494122467f41b4",
        "urls": [],
        "crc32": "DE52995D",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/6c2434c905610293_p_job020.html",
        "ssdeep": null,
        "size": 4249,
        "sha512": "d4924afb7a2436bfc0baff4890265d7a341467d5a19588693134efc1dfbab0c10dca15c0e294018d0e3652fd90801da3859238aa7e4798e55e9afef27aef3931",
        "pids": [
            2124
        ],
        "md5": "1cf35ed94dbc1df9d29c7303251b1765"
    },
    {
        "yara": [],
        "sha1": "8d2bfaa0924544403bcf5da717ac2ae929e4b3fc",
        "name": "32c356c197df94ea_icon_func_copy.gif",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_func_copy.gif",
        "type": "GIF image data, version 89a, 20 x 16",
        "sha256": "32c356c197df94eacca21f9cc7cc088cf5b8742e3a24203fc5a01bd62aa2049b",
        "urls": [],
        "crc32": "CAC851B0",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/32c356c197df94ea_icon_func_copy.gif",
        "ssdeep": null,
        "size": 260,
        "sha512": "fcb6741b834c84ec2e7fb8174b2b71a9d3074c3077e9f080a4e1bc79f0cb2b11515a3355ad2daa49b11f6933660f19738755408bb54951727d19f27b2e14532c",
        "pids": [
            2124
        ],
        "md5": "c49339922e2cd2e63ba066ca5f273333"
    },
    {
        "yara": [],
        "sha1": "2cb14e0f37623bc0c88586f822ef2b100cdb8329",
        "name": "837aaed7215bdbae_set4230b.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4230b.html",
        "type": "HTML document, ASCII text, with very long lines, with CRLF line terminators",
        "sha256": "837aaed7215bdbae70d94a7c9381662a2c2970912dabd1a9ec879dbdd7a6709c",
        "urls": [],
        "crc32": "0415D98D",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/837aaed7215bdbae_set4230b.html",
        "ssdeep": null,
        "size": 2584,
        "sha512": "d4e0033d718df5d50654ff75d9107f1e54de020b4267cf33c6f283fc43db034f37bed61446c07243dbb44f892c485a813f4abf7d25902aab4ed1730d39be257c",
        "pids": [
            2124
        ],
        "md5": "328b89a477dc399db9737525023266d1"
    },
    {
        "yara": [],
        "sha1": "84b3fdd15977168bcd789676bef1553bac8f7c73",
        "name": "d7c87dcf982a5f71_box1400.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1400.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "d7c87dcf982a5f71f08bb80457f81be6f2e59d9c3807cc87861f00dfdbf41851",
        "urls": [],
        "crc32": "30911EDA",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/d7c87dcf982a5f71_box1400.html",
        "ssdeep": null,
        "size": 6095,
        "sha512": "6460bed12af0417ee1a82a53d04e9c646c0afdf67e4ba51a165d015221c9b5ca58a4299181c0f2ed16f8f91f002b9faaf4f73d81645fed87159204ef5c4a26a5",
        "pids": [
            2124
        ],
        "md5": "94f86d76478e836f7bba74eb36986bb0"
    },
    {
        "yara": [],
        "sha1": "79bf6007d62252055c7c6434142b3a218ab2fb85",
        "name": "f53d2fbf8452bad4_set0940.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0940.html",
        "type": "HTML document, ASCII text, with very long lines, with CRLF line terminators",
        "sha256": "f53d2fbf8452bad4c489c1ecf8f26c6d0d60f10016e859aa33ba04c096aa369a",
        "urls": [],
        "crc32": "1BD01EED",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/f53d2fbf8452bad4_set0940.html",
        "ssdeep": null,
        "size": 6323,
        "sha512": "0c9a40d6aae758176571077e30c6b35c9fbc167a42d81712834da12824c81196b5e221f418866ba235930314243b9b4527c011814c2d1d1b85d0a27a03b203dc",
        "pids": [
            2124
        ],
        "md5": "dac52361fdf4eb1f8a64dc9d69b08a42"
    },
    {
        "yara": [],
        "sha1": "341a6e6ac86ae7ba0c5565f212e2cac3234941f3",
        "name": "470d3be0dedc9292_set7110.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set7110.html",
        "type": "HTML document, ASCII text, with very long lines, with CRLF line terminators",
        "sha256": "470d3be0dedc929258bcb66cbf20457a1a48910f39a9183e45f8ab268e94bd28",
        "urls": [],
        "crc32": "FB386AD0",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/470d3be0dedc9292_set7110.html",
        "ssdeep": null,
        "size": 10081,
        "sha512": "2d562fbdd8cf831bfdc1017a86c49d30691bd21b31a5be9694b988d11ef6a7a6a48e37ae4cd234dc73dd90e9979e0671ed23a4276a16665594d184909a54d4f4",
        "pids": [
            2124
        ],
        "md5": "1337ea67edaa0cbf7e9d036dcad8a09d"
    },
    {
        "yara": [],
        "sha1": "3b492b6dee85749a896cfd695cdb60443e5f0f92",
        "name": "5813a1632c47b421_set7295.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set7295.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "5813a1632c47b421aed595fef8be7c7e42545f90ed2cd4730c601accd459e6de",
        "urls": [],
        "crc32": "D1B0FFFB",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/5813a1632c47b421_set7295.html",
        "ssdeep": null,
        "size": 3481,
        "sha512": "0715a9de9f0266e9b985350b0821e6f1f8bff1fad30d8adad5f3c3e6ac67191c7b7fe021ed629c8ebd181dd3725b574c8bc5f7a6c301b961890dd2c2b059a5df",
        "pids": [
            2124
        ],
        "md5": "af85b73e555dbfed7e88f4cf385bdbd1"
    },
    {
        "yara": [],
        "sha1": "3c983a0cfd3c2c34d7dde167b84fa308e2efbac1",
        "name": "ecdd3f8c98e6dc45_lsb1800.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\lsb1800.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "ecdd3f8c98e6dc453801732c5a5dd525747014a56dfc69aa392d927d69204719",
        "urls": [],
        "crc32": "3BD2C294",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/ecdd3f8c98e6dc45_lsb1800.html",
        "ssdeep": null,
        "size": 2072,
        "sha512": "5e45994924c616f65ad03d5f357b79676bb6363c3416b6b342b5b4cd588f0210a2b3fce3d75f7a55f436f3563093e3760803cd941deb6301ec7bc6670ecb5866",
        "pids": [
            2124
        ],
        "md5": "21dbd18a6b7d572ae826602d9ad70c61"
    },
    {
        "yara": [],
        "sha1": "89400941c6f05ef229514b5d94ebe2ac1b57e567",
        "name": "4cde8b3e7931aeb4_note.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\note.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "4cde8b3e7931aeb491b8b548ca46c1662588037e00754df495d10759851eba02",
        "urls": [],
        "crc32": "B52B7EE7",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/4cde8b3e7931aeb4_note.html",
        "ssdeep": null,
        "size": 4517,
        "sha512": "32d482c7fb4a8a755dd469c413e187bd422c0d374b6425e32a5c990a219f81366f17482768546d38ce9ce584cbae2cc29aaace33d012ce4916706b6d357414c5",
        "pids": [
            2124
        ],
        "md5": "1ae09d9b63b16b212bf96bc9009e4e1a"
    },
    {
        "yara": [],
        "sha1": "c8029e39c0b9f7ad30538663c90b947412c0e784",
        "name": "751c06a67517506d_p_fax010.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_fax010.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "751c06a67517506ddaef91680b386f881293c86eefca1947744a8e530032df41",
        "urls": [],
        "crc32": "91C41E61",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/751c06a67517506d_p_fax010.html",
        "ssdeep": null,
        "size": 2934,
        "sha512": "f447352309934bb71fbfab5a8d1c05d6604dfa504b1c76a072c7f415990d7dd68ec223d2de760fd8e2108797091426f8ce2ae2037e23fb8f3d8f39374967815a",
        "pids": [
            2124
        ],
        "md5": "a0cafab55cfd243962e466d1a1bd1b03"
    },
    {
        "yara": [],
        "sha1": "223374552b7a4b6ddc16232d36c46291fcc5a2ee",
        "name": "ad46809f20b8bced_set9310.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set9310.html",
        "type": "HTML document, ASCII text, with very long lines, with CRLF line terminators",
        "sha256": "ad46809f20b8bced3d708280a4a38e51553545094d2d3ec1fc67cd177b3185bf",
        "urls": [],
        "crc32": "5EE62C87",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/ad46809f20b8bced_set9310.html",
        "ssdeep": null,
        "size": 6134,
        "sha512": "6f7444ab3c289553d651c6ee783069252501da9e1c523c6542324cdf5018bf0d21b3376066806c459c64153c0008e0ef81a9c2efff00d10a207653911d4c4bb4",
        "pids": [
            2124
        ],
        "md5": "5d0d21392c9f9eecaaf3b57c317952ba"
    },
    {
        "yara": [],
        "sha1": "d43f806de30fb45a817cdec67751c86d15d910ff",
        "name": "05b52a10750397a3_box1130.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1130.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "05b52a10750397a391e460eab59a1e25a216a18a5e904941a364093f16800c47",
        "urls": [],
        "crc32": "8A2BCCC9",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/05b52a10750397a3_box1130.html",
        "ssdeep": null,
        "size": 2708,
        "sha512": "6d896ce97760a246b8eaf9b799d79ff51748f74b263e3da684954fed112bc952c8a1a5592bb7621cfc2ffe1c8da1c7412955907753a3011815fbcaa0ff2b1d0d",
        "pids": [
            2124
        ],
        "md5": "595fe70d2dc70497a6fc5d0a36d9ece0"
    },
    {
        "yara": [],
        "sha1": "06988079c4f235a575cd89fb3a9fa5013a7861ac",
        "name": "6277c6e112768e8d_job2650.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job2650.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "6277c6e112768e8d75d5367ae43613157422c5b878653dd72fad8c2118afca1c",
        "urls": [],
        "crc32": "626DBE6F",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/6277c6e112768e8d_job2650.html",
        "ssdeep": null,
        "size": 5939,
        "sha512": "23f6838f5f6cf63427f675dff41693f9c7412913c139656e257f5ba249f565e0f6cb0454a8e1ec0ab96269783e44c137af9f24812dd9cf87ca253417888bf3c0",
        "pids": [
            2124
        ],
        "md5": "416dc9a9a7a2477658146576e9834177"
    },
    {
        "yara": [],
        "sha1": "23422c9d63c889de6053baca47a0199bd8ccc916",
        "name": "027c276a17fc09c4_set8130.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set8130.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "027c276a17fc09c49642d65ea0bb7e2bd5800d07bc0e76731912043d6e462aa0",
        "urls": [],
        "crc32": "0E0F6455",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/027c276a17fc09c4_set8130.html",
        "ssdeep": null,
        "size": 1784,
        "sha512": "0d20a7ac7c3cbd30f880561e0449a27d6b97a60f8c945ea9e3636edbca6e50ad3e1ee0f3f256a3a1ee208f6547d50dd3047c10dea3d96128adb880146920ee46",
        "pids": [
            2124
        ],
        "md5": "d0e3fdd9fea95a8be62927fa72c18b4f"
    },
    {
        "yara": [],
        "sha1": "dc787a76d2b8a0c14b84c0649502def7af262bc6",
        "name": "a0c6851b3723eda3_icon_cmode_color.gif",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_cmode_color.gif",
        "type": "GIF image data, version 89a, 21 x 17",
        "sha256": "a0c6851b3723eda393f36cf1582aace0be8ab9f33c6a3a8fdc45d87afb68de41",
        "urls": [],
        "crc32": "2813F054",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/a0c6851b3723eda3_icon_cmode_color.gif",
        "ssdeep": null,
        "size": 1024,
        "sha512": "eec2c11f28e09c1c039cd7f42f2043bfc7c7922f379ee9edba3af811402f4b72dac5ee3d46713c722b774c749aea5595446ac278c8a5d086f2421f45319884e4",
        "pids": [
            2124
        ],
        "md5": "28fb1c04dd697fc568e168a66bffb708"
    },
    {
        "yara": [],
        "sha1": "a38d5e777a4c6a81989cca7f5aadb266092dcba7",
        "name": "8c00ff98eecb0163_set8100.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set8100.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "8c00ff98eecb0163cf632271e389686fa297bb760307f1d85137010460597ce0",
        "urls": [],
        "crc32": "CF48F291",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/8c00ff98eecb0163_set8100.html",
        "ssdeep": null,
        "size": 4041,
        "sha512": "00ae3b2941f486ad9b1eb2d58b87d21026c7b95eb31b27e41a6f2b2a14633ca3963400ceef867f9e9376c818de7fda5790c0dc225fb97cd7417cfabce46f80e0",
        "pids": [
            2124
        ],
        "md5": "a39090129d434e2fbb6afffce5c74ae1"
    },
    {
        "yara": [],
        "sha1": "acff3f14472b169882acca799e19dbef738a0ecb",
        "name": "a94bef1c43404120_adr0500.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0500.html",
        "type": "HTML document, ASCII text, with very long lines, with CRLF line terminators",
        "sha256": "a94bef1c43404120f5e92fe14c35aab675f42d1cb67b2c1e16d460e0f5d65123",
        "urls": [],
        "crc32": "D8593502",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/a94bef1c43404120_adr0500.html",
        "ssdeep": null,
        "size": 10743,
        "sha512": "6a4273c9e741d2f793f154b23832e0a418da310e78c260766b8defd489c802c9598ee11db8ff9664b51677c1c506e0a79849f7dc1b05357abcdc0a6b71b7d088",
        "pids": [
            2124
        ],
        "md5": "ba171c52faeda5e88c76e66a740a125f"
    },
    {
        "yara": [],
        "sha1": "358912fa2c110656280e1f8f621620714f06ba75",
        "name": "76848c40a87fedbf_dev_st_p75_16.gif",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_p75_16.gif",
        "type": "GIF image data, version 89a, 16 x 16",
        "sha256": "76848c40a87fedbf0b11aedd9d7fd758c2682d672c3342410db774c7461bbf6e",
        "urls": [],
        "crc32": "EB98C2A3",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/76848c40a87fedbf_dev_st_p75_16.gif",
        "ssdeep": null,
        "size": 76,
        "sha512": "d5df3aabcc7dd95dc48f1413a18e5c4703596363ff88a6f4fc2f758dbf624293178fa7021094f31306bd9bc5f9e7fc4537256fc8d5f8a4262d7c7b1d7d7a62f3",
        "pids": [
            2124
        ],
        "md5": "22d6108117d0b5cdaf13fe47faffebf0"
    },
    {
        "yara": [],
        "sha1": "436fe22e1f61f90c8f1441d7883f9f0b370f843e",
        "name": "daa452013cb53fbf_set6350b.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6350b.html",
        "type": "HTML document, ASCII text, with very long lines, with CRLF line terminators",
        "sha256": "daa452013cb53fbfd873678725edaa8754f27dbe8e6a710e6df051b19009c7d3",
        "urls": [],
        "crc32": "750CB950",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/daa452013cb53fbf_set6350b.html",
        "ssdeep": null,
        "size": 3636,
        "sha512": "8bf6625ea06a0d2b161fdcf1b65d52c3ebd0f2b8544f1f86d97ab27e74993d62129090c85931d2fadb60ab3f8daa34be9dcd3cd332e8327ba25544349325bb3c",
        "pids": [
            2124
        ],
        "md5": "e8353704c10952764d0bf08138d0ee2e"
    },
    {
        "yara": [],
        "sha1": "252aca3a465a86d4a45950a3961b7c7ea1d88817",
        "name": "f5224cd7b0c83763_p_adr010.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_adr010.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "f5224cd7b0c8376332c3329e985445f7a5fdeb86193f1f48e6d18439db05a054",
        "urls": [],
        "crc32": "7377948F",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/f5224cd7b0c83763_p_adr010.html",
        "ssdeep": null,
        "size": 2308,
        "sha512": "d7a2f90998ccc0923ee117bf0a21783dbaf6b3504b73cb7261de81cf1d26d60cbfe4d1fce016591bf0d2f4ab84089c13c66d8f54f519ebdd95ec46a346baaf5d",
        "pids": [
            2124
        ],
        "md5": "1403259094665d19ef69458010baeddd"
    },
    {
        "yara": [],
        "sha1": "6ad1c9714dad49493260355e99b2e2d89c90adf5",
        "name": "2c4f771973a3392f_adr0670.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0670.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "2c4f771973a3392fba82f82bb148683089c150adcdb9cadd7ba2d7fa51f5c9e9",
        "urls": [],
        "crc32": "86AF935F",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/2c4f771973a3392f_adr0670.html",
        "ssdeep": null,
        "size": 2573,
        "sha512": "51a899d014ec0791bef3409bc72597db6eda1af5a702efd73db28a68aab319ccd8e8c0daec24d8eda811a579a8229ccc39627229972c15f85b774da176dc340a",
        "pids": [
            2124
        ],
        "md5": "10c8c14b6018c838e71debd680dc3d9b"
    },
    {
        "yara": [],
        "sha1": "f650493f2a7d04895a3f0d98c1ed60957178c7fc",
        "name": "e7ca9c0289adfb06_job2630.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job2630.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "e7ca9c0289adfb06af9cfc186f110f40d1c21cddc9a49092db5eb2676d269e5a",
        "urls": [],
        "crc32": "A7C6893B",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/e7ca9c0289adfb06_job2630.html",
        "ssdeep": null,
        "size": 6533,
        "sha512": "319dab607cd20f838593b3b60d4e5da8365b6b6c7867e68cb0b548a6d439a60d2215ba178c6726ac8f1c8851e852993aa96343b0c84100eec6adb11c655c8015",
        "pids": [
            2124
        ],
        "md5": "5f5bc8be77f0de4d7568f4f84bbe825d"
    },
    {
        "yara": [],
        "sha1": "feb94a97cc22ea70feb6dae26c6647d6d5308a57",
        "name": "14666147a207e7f3_icon_right_fullaccess.gif",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_right_fullaccess.gif",
        "type": "GIF image data, version 89a, 20 x 16",
        "sha256": "14666147a207e7f3d3f633f6cb24dd2ebbb85741a35426b7d74eb6e382f04be4",
        "urls": [],
        "crc32": "4DADCDF4",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/14666147a207e7f3_icon_right_fullaccess.gif",
        "ssdeep": null,
        "size": 564,
        "sha512": "399c44fa7035cde643f2b5002a0459119717aa76afc713e5e786893a1e67c4264256dfa4b1692917571fe862ac38148b4a064759e6240fc65913b80e4acec64c",
        "pids": [
            2124
        ],
        "md5": "4c2142f185b62dd6aa71bca93f2682a6"
    },
    {
        "yara": [],
        "sha1": "635c0c2ff9a65d05771802f831f4ec96ba7cef4b",
        "name": "91c1e6429ab6f3eb_btn_arrow_right2.gif",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\btn_arrow_right2.gif",
        "type": "GIF image data, version 89a, 16 x 15",
        "sha256": "91c1e6429ab6f3ebd6fa733eb52e420315b0849b5565290666794acd5f5c5c1f",
        "urls": [],
        "crc32": "86B134DE",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/91c1e6429ab6f3eb_btn_arrow_right2.gif",
        "ssdeep": null,
        "size": 354,
        "sha512": "a8717986bdbd20b893b3d4b8acadcdcd1d2d603ade64fafd135ecafce9b88440f6f72c9b4e32577a99e7d98fad14ec2469d43f248f3bbc94024996bc80bced0c",
        "pids": [
            2124
        ],
        "md5": "1665f358970ecf40cdc559b2d92f4930"
    },
    {
        "yara": [],
        "sha1": "65b652190cb82d3402dba3a396149d01aafe7dee",
        "name": "c22ed08699d18037_dev_st_tnend16.gif",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_tnend16.gif",
        "type": "GIF image data, version 89a, 16 x 16",
        "sha256": "c22ed08699d18037d9bf10a45a1f4a1db85f95474ec524ecd882f8f96e9965d1",
        "urls": [],
        "crc32": "F4D06A83",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/c22ed08699d18037_dev_st_tnend16.gif",
        "ssdeep": null,
        "size": 152,
        "sha512": "6d566a22a69f55a1ce576adf3ea39c96fb5ea562200c029ee20543d3fbed382277b66712166a86cab72b3a74540f0eed94b9c91be46a563506e17bbdd37a7507",
        "pids": [
            2124
        ],
        "md5": "c381653b452689aea2e9fb2c7e1be98b"
    },
    {
        "yara": [],
        "sha1": "0d839883e6c927e2caab8aaaa0d83eff4596e2d7",
        "name": "6c7b38162171506b_p_adr050.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_adr050.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "6c7b38162171506b37afdab293d84ea0aa52f98e1a1db1133fd9b7ef40633b89",
        "urls": [],
        "crc32": "E01A6084",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/6c7b38162171506b_p_adr050.html",
        "ssdeep": null,
        "size": 1907,
        "sha512": "a932a5ba9c2571fb370fa7bb04391dfab30590c1e37f8e4b1b4bd09490a491a654e6467bc39c0a14bcb6158ad175d48adcd2af5aa153baa3ff4280384a237cd6",
        "pids": [
            2124
        ],
        "md5": "f78be97f8bb20dd5be262fb578c8bf0e"
    },
    {
        "yara": [],
        "sha1": "c3c59801ef1204bbebcdbce3a07cbb3f437e77d0",
        "name": "2d68df565ca57b17_dev_st_scall_fax16.gif",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_scall_fax16.gif",
        "type": "GIF image data, version 89a, 16 x 16",
        "sha256": "2d68df565ca57b173e635cc662b5c713b16eebc91381c5dfafd39b8925cfc122",
        "urls": [],
        "crc32": "758DC869",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/2d68df565ca57b17_dev_st_scall_fax16.gif",
        "ssdeep": null,
        "size": 114,
        "sha512": "590fc65a382e72532d945f0af95ddd1f7b7935f8d8c0864b00cc1872ce221d0a2caa57487eb5b5f687dda2b0144655ba5aeab051d1314590eafe4efe150e5672",
        "pids": [
            2124
        ],
        "md5": "4e11a1d6713745a4959a366e69fea261"
    },
    {
        "yara": [],
        "sha1": "f9a619a3915f2d028f573d727f8d958b28c08917",
        "name": "95932c5f7de3b36c_tonner_no.gif",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\tonner_no.gif",
        "type": "GIF image data, version 89a, 14 x 10",
        "sha256": "95932c5f7de3b36c8c1c1d0270f7a2066666562dba1c8c0fa9fa9b09a93d8017",
        "urls": [],
        "crc32": "41E660C3",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/95932c5f7de3b36c_tonner_no.gif",
        "ssdeep": null,
        "size": 61,
        "sha512": "9c12ed72f51a04376b81a17b2c7193c59473588e9eaf236bfbe20093a8aee896ca5e701610761f4362cc9c4aab16dc0d5e430a2541b462ecd0b518a297f9a211",
        "pids": [
            2124
        ],
        "md5": "0d9de09e4eb19b6da816a2c322619b37"
    },
    {
        "yara": [],
        "sha1": "517eee1e95c28ee33505d76a9da1ea2a11582db9",
        "name": "b7b1f4a400170863_p_adr100.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_adr100.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "b7b1f4a400170863339cacc9740c33ec6034b0b8cbc0f45e2661b4c73d3b2b47",
        "urls": [],
        "crc32": "20FE6583",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/b7b1f4a400170863_p_adr100.html",
        "ssdeep": null,
        "size": 2142,
        "sha512": "cc5eb92d7fe55cb8e8d3ed08914bc8c158432a6c814bb6d8865f0a367f2cc4c9dddcfb0ead47c90d5c60cd8484f44b7e06e19955bcca236f7847dbffd2076a50",
        "pids": [
            2124
        ],
        "md5": "05309d065dcc4b459553f06388d59b44"
    },
    {
        "yara": [],
        "sha1": "35b18fedcbff2b9f44cc3b47053adfe97d569655",
        "name": "eaa594c4297b1899_p_adr060.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_adr060.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "eaa594c4297b1899da7a51c2da5ca51bcfa99cb444f26a117901a4adf77fe0b2",
        "urls": [],
        "crc32": "3F547FB2",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/eaa594c4297b1899_p_adr060.html",
        "ssdeep": null,
        "size": 2320,
        "sha512": "3d9706004b00c35a38647287c95b27bf8045869f62233677d8b5472a36a520ad6078a143da0b1dfac2e85ac8eb0aa945d0edc14be1ba8a18d544495043933c2b",
        "pids": [
            2124
        ],
        "md5": "ad8185e9bbc28e6a5d0f774c8f4aeb63"
    },
    {
        "yara": [],
        "sha1": "573495eea958c30d2d1089140497af789f3f37db",
        "name": "d2d3e0b9d4af232a_set9320.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set9320.html",
        "type": "HTML document, ASCII text, with very long lines, with CRLF line terminators",
        "sha256": "d2d3e0b9d4af232a1a8b9053443a3a9a8034f4c8197b8273b6926c2972a6ab38",
        "urls": [],
        "crc32": "69D03C8B",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/d2d3e0b9d4af232a_set9320.html",
        "ssdeep": null,
        "size": 7292,
        "sha512": "2115f27d98bb5e2364e1844c62d9b560e809bc87f68554a3c0d9ab636c26908960c54eb18d23ae2dd03ebeebaad19df6b51c598b72848b59484d459599702157",
        "pids": [
            2124
        ],
        "md5": "3d7d1768b85110585b290d097a3253f4"
    },
    {
        "yara": [],
        "sha1": "0b9aaee9217897989810ce37fe1c83bc4483a0f4",
        "name": "1df1587ab2ac8b64_p_pri010.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_pri010.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "1df1587ab2ac8b64bb968776e3f20e033d7473d9266bc0a98f993de372f66fd1",
        "urls": [],
        "crc32": "80133434",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/1df1587ab2ac8b64_p_pri010.html",
        "ssdeep": null,
        "size": 2111,
        "sha512": "090ceebd2f0c70438be856c761f3da1bdb6d13cb5c18bce241577a71c0837746717cf194ee1083a35504ccc6676d4846978b2834b4c04eaa0e056edbd734e799",
        "pids": [
            2124
        ],
        "md5": "f0b21864a2b9b58936d34ead03713eb4"
    },
    {
        "yara": [],
        "sha1": "367571e57fd734c483f841fe504281eec03836db",
        "name": "caafe88f9acfc310_set6350a.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6350a.html",
        "type": "HTML document, ASCII text, with very long lines, with CRLF line terminators",
        "sha256": "caafe88f9acfc3102b2177040348588fe05be22ff87bb7657a99da0dedae5f5d",
        "urls": [],
        "crc32": "F4EAB376",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/caafe88f9acfc310_set6350a.html",
        "ssdeep": null,
        "size": 3248,
        "sha512": "b2847c245945221abb1fdc3f6cfcdc51aa931d6bb70f17342351a80b534cd77b9bb169df5942b4d70e75f7b7534f640bfc1763e74ebb85cd8779262072cbc80b",
        "pids": [
            2124
        ],
        "md5": "d290a4f04a18968549c8c3b06a8b4d1e"
    },
    {
        "yara": [],
        "sha1": "cbff3542861fb315435d1b47582b19f839ea37cf",
        "name": "7a60ca06725e7476_set6010.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6010.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "7a60ca06725e7476dbf1858d26883461b31fd14b831268b3b5ca8d99b31c416b",
        "urls": [],
        "crc32": "367B5200",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/7a60ca06725e7476_set6010.html",
        "ssdeep": null,
        "size": 5930,
        "sha512": "f0a502dec76809e0dae7273be2653c7be7de5e38d4ef638c8c95606a11c7514d07b6dde4107f8601698dfca3b04a66cd4510e80b788a62d7c9e0ba5fe4bfdf8e",
        "pids": [
            2124
        ],
        "md5": "784e560e220d62f42f5d789f6a132c11"
    },
    {
        "yara": [],
        "sha1": "b3d6ddea9a0b849e7c8785afa560cc6e75af5ab3",
        "name": "a6c647582e7ee72d_icon_func_printer.gif",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_func_printer.gif",
        "type": "GIF image data, version 89a, 20 x 16",
        "sha256": "a6c647582e7ee72d74a9c682ddb0cb120c50e60d23ba0c2368a33f43ebb729b4",
        "urls": [],
        "crc32": "636DC457",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/a6c647582e7ee72d_icon_func_printer.gif",
        "ssdeep": null,
        "size": 244,
        "sha512": "94bd8a61fe23ad6151d76a50690e42edd8cec1836e9057325ac202d3bf94ca5f27fc72507d766087c9845a2ba7867d0db9f704ba1cade51bd7846691e6e0f696",
        "pids": [
            2124
        ],
        "md5": "6837a40abc4da89892a19fda7ad3c74a"
    },
    {
        "yara": [],
        "sha1": "f1466e634932bea6ce28a3920472157020f2a3ef",
        "name": "c20203635861ceb9_box1060.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1060.html",
        "type": "HTML document, ASCII text, with very long lines, with CRLF line terminators",
        "sha256": "c20203635861ceb950eda58e535ca706aed2d1a53fea692aa0ddd2e603349cce",
        "urls": [],
        "crc32": "CA9CEC90",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/c20203635861ceb9_box1060.html",
        "ssdeep": null,
        "size": 14768,
        "sha512": "31bea746eb2f6250790c8e49d4bee58e612ae9d503cbd80d11a22d406e8f134edade1c7cfed3a810fabc3be6a0e75f1de8d70c45e1634f6b621251641ffd1b01",
        "pids": [
            2124
        ],
        "md5": "a21223fe93cc2ca9dfaa5f3a7069f7da"
    },
    {
        "yara": [],
        "sha1": "23b5c3fe55a1ab3072d893a7ae45d03414f1c135",
        "name": "7bea66131bef130e_icon_func_others.gif",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_func_others.gif",
        "type": "GIF image data, version 89a, 20 x 16",
        "sha256": "7bea66131bef130eb53e832faf4e388cd22de151e77601f05d10a3feec50b075",
        "urls": [],
        "crc32": "F4DB3004",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/7bea66131bef130e_icon_func_others.gif",
        "ssdeep": null,
        "size": 97,
        "sha512": "8d9f1b8e404ac810f54e809d6a39379593e2ca410b33cdc8b701022fbeeae73b33978aa01e5bd952f47a64aef87304884632135281a7fb1fe754d4df0abce9e9",
        "pids": [
            2124
        ],
        "md5": "6701d7b8c28db1adb288d0f501f91858"
    },
    {
        "yara": [],
        "sha1": "59cff9ee24c0bba9b03cb24217d4383aa514005f",
        "name": "8e722768f73af8a6_set0810.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0810.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "8e722768f73af8a6c35e4fd574e41baf165d0605bc13c13d6f598749d63ea04a",
        "urls": [],
        "crc32": "8FCF0FB1",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/8e722768f73af8a6_set0810.html",
        "ssdeep": null,
        "size": 7224,
        "sha512": "f0965d95ef08ba1ed9ebf54ce4f03ef64809df528e7ac82f172e328d985e9b3ec6945d802120ed542798b05e8227ac1547f775c2d2d12cfa512bc080f89cb3bd",
        "pids": [
            2124
        ],
        "md5": "f4fb34b81f4d8e46a9cc098f0a1feb71"
    },
    {
        "yara": [],
        "sha1": "470b3ff9ccaa6afb3deb0a6e7243374c37ed98e6",
        "name": "655aaf25922f1286_tn02.gif",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\tn02.gif",
        "type": "GIF image data, version 89a, 10 x 24",
        "sha256": "655aaf25922f128691f851d32265c11a96a8236160309050302ff475d99eff56",
        "urls": [],
        "crc32": "F5AC7D0D",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/655aaf25922f1286_tn02.gif",
        "ssdeep": null,
        "size": 85,
        "sha512": "c28192341ca026fa31451e7bdd029643439b70636c69a8672985464053c14e45459b86e1a93d8388d05c0784817bfb115973202e08a6a370f1ad33bec7f89fc2",
        "pids": [
            2124
        ],
        "md5": "0a1c8ccfc36f7cc7820321a975265614"
    },
    {
        "yara": [],
        "sha1": "70a475dba8be4e6e9a1abf13568917db11929ee4",
        "name": "fb8d0801193c72b8_box1190.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1190.html",
        "type": "HTML document, ASCII text, with very long lines, with CRLF line terminators",
        "sha256": "fb8d0801193c72b8ff9352dd9f7e75a476f62b8899f0f85f2b81aa1d129ad1c4",
        "urls": [],
        "crc32": "FD940146",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/fb8d0801193c72b8_box1190.html",
        "ssdeep": null,
        "size": 3209,
        "sha512": "c020cb41bd8c6f827adfee68cebf2b3a0c10a5521c0cff801de1934f3dde50ed16e20a7a35d5698a9edd00959a81459676dbf12996b24801f37da7a211de36db",
        "pids": [
            2124
        ],
        "md5": "2bb6b4c1ada7b5a2409311fdfea2ed21"
    },
    {
        "yara": [],
        "sha1": "491ab99c386100f1b36a3cc8b5abf9114a7c7495",
        "name": "fad42d57786d9d71_adr0510a.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0510a.html",
        "type": "HTML document, ASCII text, with very long lines, with CRLF line terminators",
        "sha256": "fad42d57786d9d711c492d22b233df849b6f831ffb1ec56993eb583d989bbaa8",
        "urls": [],
        "crc32": "1E4994E6",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/fad42d57786d9d71_adr0510a.html",
        "ssdeep": null,
        "size": 25062,
        "sha512": "ff5b8959dcf31b1b9fe7221d676845d32168d68496749ff7c983c078bafd0e0131a5c3503da3abcfb36fa6876a791ccdf90b7f7fe28ef572159f930c6ffcdba1",
        "pids": [
            2124
        ],
        "md5": "eef40f1663cf35e57599f8e7a76636e8"
    },
    {
        "yara": [],
        "sha1": "f577fe9e4b67e50752ceec6e5af9d556855a71b1",
        "name": "c3485f8aed0ad7ea_icon_cmode_single.gif",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_cmode_single.gif",
        "type": "GIF image data, version 89a, 21 x 17",
        "sha256": "c3485f8aed0ad7eabe1cf3b8e3fa2aed577e67a9904afe6832b6c633efc58076",
        "urls": [],
        "crc32": "15100FE2",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/c3485f8aed0ad7ea_icon_cmode_single.gif",
        "ssdeep": null,
        "size": 371,
        "sha512": "4c99fdf11f32e8c30d71911054cfc05f057c75a409c18e62c6f46f3aeccf885013858fe0a8eb9ffbdcefec447c8395aa7d635081b46320e282687dedc1a0dbb7",
        "pids": [
            2124
        ],
        "md5": "cdd6f2b15195e3b865fc941392ce03c5"
    },
    {
        "yara": [],
        "sha1": "c267863eda6c66cdfd06f1e27810196a2fbf8728",
        "name": "9fcf80735234a760_pri1060.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\pri1060.html",
        "type": "HTML document, ASCII text, with very long lines, with CRLF line terminators",
        "sha256": "9fcf80735234a760492f23235092e7387954d9c4ccb78ba08e5698fa1d80a867",
        "urls": [],
        "crc32": "0C4E3FE8",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/9fcf80735234a760_pri1060.html",
        "ssdeep": null,
        "size": 13270,
        "sha512": "e41e5609d692fbcbbd8198ff21efffcc247d064f9df226f16aa01a31513e0bb5e0ad3b533fe74186922f3ef659fccd26aa125efcaf7fa5df1dd7b69dbed48bba",
        "pids": [
            2124
        ],
        "md5": "1dba0bbcaa68badc351d2bf38611c3c7"
    },
    {
        "yara": [],
        "sha1": "2722856be72b253f91b9a3f65ccc1f49ef27bc07",
        "name": "8561669d138a89c3_set9010.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set9010.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "8561669d138a89c3d169c5cd38bd7d4957cd56246565ccceaab0f74577f99f99",
        "urls": [],
        "crc32": "C0C1A6D7",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/8561669d138a89c3_set9010.html",
        "ssdeep": null,
        "size": 4144,
        "sha512": "0a97d279184bc0bc44c34c7bd7341b059c094cb45f27a0e6f27d91736f61875e2f3a09f005d93a6da3229d60477df4bccb1aecb675bf04fa7c4846f67d518d95",
        "pids": [
            2124
        ],
        "md5": "784f5a078aa02b1bf67f48eb05bea10d"
    },
    {
        "yara": [],
        "sha1": "810c8c5bc9c973e0a5ddcbda16a7848757a4cd48",
        "name": "c8751ef93e932e40_box1340.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1340.html",
        "type": "HTML document, ASCII text, with very long lines, with CRLF line terminators",
        "sha256": "c8751ef93e932e40068b528837c1a61c4178b8faa45fd16f1b4d0776df8f111b",
        "urls": [],
        "crc32": "D3F700FF",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/c8751ef93e932e40_box1340.html",
        "ssdeep": null,
        "size": 12332,
        "sha512": "c822f67bcdfadea6e70a560e9516ee627a65bd01d6137d2272750de5a84d8ca45e575499f6a006a55126bb7f7a081bc41386639f84532fcfbaf4fb4a0e2c9f6d",
        "pids": [
            2124
        ],
        "md5": "4c5425316bed1f29123f31fa3f01fa54"
    },
    {
        "yara": [],
        "sha1": "d5c36e62335699a3a0c4210b99c70590a6219bbd",
        "name": "3758e05b061e4670_btn_icon.gif",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\btn_icon.gif",
        "type": "GIF image data, version 89a, 27 x 22",
        "sha256": "3758e05b061e4670a25984d7c6e49e3cd520dea26647981c3c9db77e0104903d",
        "urls": [],
        "crc32": "924EE4D0",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/3758e05b061e4670_btn_icon.gif",
        "ssdeep": null,
        "size": 235,
        "sha512": "daa8b811fc5d6957a3d381c839e67d75b299f33dcc3861b1d3d73955dbde62c0cd65cf260d35bbaa31f8dc05c67350aea95e47f8eae26b7c3df8f8ef6d7ecbcc",
        "pids": [
            2124
        ],
        "md5": "ba9a91a934429ab41f6f0c555293522d"
    },
    {
        "yara": [],
        "sha1": "2381f885327a61a27a249bc797552f1f8b02e12f",
        "name": "b9e9c73bb9d93b53_lsb1100a.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\lsb1100a.html",
        "type": "HTML document, ASCII text, with very long lines, with CRLF line terminators",
        "sha256": "b9e9c73bb9d93b53fa1168a0efebf072ff97e4e4503e1839f83d802fb7a207f9",
        "urls": [],
        "crc32": "A4F6D9BA",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/b9e9c73bb9d93b53_lsb1100a.html",
        "ssdeep": null,
        "size": 2495,
        "sha512": "19661e1738f153c50d4634d0153e025d5c5687c69faf1fcb9179fc3f73c0008f7b2ba30ef29eba715025aa2796cc147d4b0db60382d657a4f6778d44777907fb",
        "pids": [
            2124
        ],
        "md5": "aa0e2c71d3e43d9435163effb406bbbe"
    },
    {
        "yara": [],
        "sha1": "3d8ff6809dd7a789aed434fd8cdc1f0b3ebd4dc1",
        "name": "c7be3182dd2d0796_btn_arrow_left2.gif",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\btn_arrow_left2.gif",
        "type": "GIF image data, version 89a, 16 x 15",
        "sha256": "c7be3182dd2d079675ef64a186a274f0cc9780a182769adbc605705fe9dd18d1",
        "urls": [],
        "crc32": "A6164354",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/c7be3182dd2d0796_btn_arrow_left2.gif",
        "ssdeep": null,
        "size": 355,
        "sha512": "3b8410c735fa5c3c51745de2795f044bbf81ccaeadd4d78cb4a432a6e9c5e237b59bfbc049bb1156d15648b55634e793cbb4afac9d17fa2e048dc4307a4e28cf",
        "pids": [
            2124
        ],
        "md5": "9207548b3c3f3089a4575de398df14b5"
    },
    {
        "yara": [],
        "sha1": "b151b28ac139c1ebfb3050069f73bf42eb66bb95",
        "name": "dee00f1c8b878c1d_top0030.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\top0030.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "dee00f1c8b878c1db58f0f781640a9f583463dc24af02e7377f4a278ef353102",
        "urls": [],
        "crc32": "8F69A10F",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/dee00f1c8b878c1d_top0030.html",
        "ssdeep": null,
        "size": 3135,
        "sha512": "411e085db6fa5c84971b873ee4c5791e1000a29c4975d65422f290388902900f0664dc3d51d70ab555e8985d34bf31fda4789d18aa52c2f76f2cf3326c84d948",
        "pids": [
            2124
        ],
        "md5": "c41b11789cb752ccfd574dfa103bdcfe"
    },
    {
        "yara": [],
        "sha1": "d792ea8302480fa94e0580ea5d59e12b94d1a1ff",
        "name": "b43fe6e985de1a31_tn01.gif",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\tn01.gif",
        "type": "GIF image data, version 89a, 10 x 24",
        "sha256": "b43fe6e985de1a3161d2ed0f0544ff42f30b636925d6019af218df1db3db20d1",
        "urls": [],
        "crc32": "8A907284",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/b43fe6e985de1a31_tn01.gif",
        "ssdeep": null,
        "size": 85,
        "sha512": "881d54dba4b1780b8f7ade376eaa2cb928588959a7c4da73a1472c587aab321dee905a4e83fd58700423037313957923acf4fff28ac829c383930a30b26c64bb",
        "pids": [
            2124
        ],
        "md5": "a3c55670cfc6448d19b1379090c029c9"
    },
    {
        "yara": [],
        "sha1": "d8683bd8855ad38540fb5af8362bac2155cfdfaa",
        "name": "ee90c0495cf646db_tonner_nise.gif",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\tonner_nise.gif",
        "type": "GIF image data, version 89a, 14 x 10",
        "sha256": "ee90c0495cf646dbbc90e41fb8d951444e0aae6c81e47916e286e87d668091e6",
        "urls": [],
        "crc32": "2FA25885",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/ee90c0495cf646db_tonner_nise.gif",
        "ssdeep": null,
        "size": 99,
        "sha512": "a33ed69e42e2205abd0d525eca1ec4dc4d60d13789c7c97bce88b1f4cdb97fa310ef4695ba79ddd087be10c88c46cf9218769bac3cde4092a12097ce195afec0",
        "pids": [
            2124
        ],
        "md5": "a3fe853c29431689e8672f01ed064e80"
    },
    {
        "yara": [],
        "sha1": "e0740fd8725edeefeb757f94d9cfbd13e7792554",
        "name": "780f888a770beb74_set0950.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0950.html",
        "type": "HTML document, ASCII text, with very long lines, with CRLF line terminators",
        "sha256": "780f888a770beb745b21b6024e4b572164e6b9a0d57e7d4f45a4abc5f78bc6b2",
        "urls": [],
        "crc32": "280C6D70",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/780f888a770beb74_set0950.html",
        "ssdeep": null,
        "size": 5030,
        "sha512": "40952624715058c8ce7bf2182e0e89a9f4c1aed0552ed787b3c228532a7353b019e837adf71197eb039a235d54227df1359a6e1180a534cb049ab421addd93c2",
        "pids": [
            2124
        ],
        "md5": "b0d78baf81236c41e415791fe08a3ce9"
    },
    {
        "yara": [],
        "sha1": "d575a14fb226fa06b5d21670325fd883d2addd50",
        "name": "506964292a1c9c79_job7230.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job7230.html",
        "type": "HTML document, ASCII text, with very long lines, with CRLF line terminators",
        "sha256": "506964292a1c9c798dd95c430accbb6eb462dc50152b4bfa5adebb427bffdb76",
        "urls": [],
        "crc32": "B2F32680",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/506964292a1c9c79_job7230.html",
        "ssdeep": null,
        "size": 10372,
        "sha512": "0e2de1506cc6757b3822a115809d3af0f7ac65091ad48567c664868495f07273079ca784765bc67e535a750a78d47c84743abb17a50d9db8e00e6ed46c4d7a55",
        "pids": [
            2124
        ],
        "md5": "53517c98e06ffae90f1f977fef9811dc"
    },
    {
        "yara": [],
        "sha1": "f1916b7e96148373a10a77d09ee85be00486d4bd",
        "name": "2faa81f925fd3d09_set3510.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set3510.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "2faa81f925fd3d090269758d1eecd8807f55e3fdee2206865bb9315667708a0f",
        "urls": [],
        "crc32": "3D1C892C",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/2faa81f925fd3d09_set3510.html",
        "ssdeep": null,
        "size": 4024,
        "sha512": "561e267aabb48b4d29355d1921e175954657098a42e720e061a95abdb306bcd9dad0ce52cd448ff757253b519d3b42214e9c31fbeca74e9705950fef9658193b",
        "pids": [
            2124
        ],
        "md5": "9db9898488c535babbd04ec17adb12e8"
    },
    {
        "yara": [],
        "sha1": "d4066eefa89f8e26001e95066ee79c5f49599b05",
        "name": "6608bfd6e92d5e38_pri0000.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\pri0000.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "6608bfd6e92d5e38ba0000b0c020f54c72a5b8841ffbb1bf74437d1876e1e7c6",
        "urls": [],
        "crc32": "FFAD1903",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/6608bfd6e92d5e38_pri0000.html",
        "ssdeep": null,
        "size": 1440,
        "sha512": "31e066aaaee18c6d1df8ec6711b083dd40aaeac5961a120072b0693d9037c7c699d72890734ccc388df4189b9101f28e80b2f29d5efb713de2b91a8e2753a686",
        "pids": [
            2124
        ],
        "md5": "d31e422877762a59dbf1157f3338ee74"
    },
    {
        "yara": [],
        "sha1": "a91a62fdfb2d623d20fe455a524c3cc7fe4206d5",
        "name": "a06c0f6d9007fe4c_set6360a.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6360a.html",
        "type": "HTML document, ASCII text, with very long lines, with CRLF line terminators",
        "sha256": "a06c0f6d9007fe4c3c4ee1c322a5e04f180afce2f0ffe9c2516f6bbf7c825955",
        "urls": [],
        "crc32": "E380B8A0",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/a06c0f6d9007fe4c_set6360a.html",
        "ssdeep": null,
        "size": 3006,
        "sha512": "d00ecf16b2cdaf801df578066aed6e17183e7f79a8be5e34bc00322365299bbb9b38dbe4f08cb93df419d94809f302b87a73b3cb34f56e949bae5e3ef534e907",
        "pids": [
            2124
        ],
        "md5": "537d023f127b41986775270ebfda8a61"
    },
    {
        "yara": [],
        "sha1": "fb29ceb51e645edd52f773f087078f60511009c3",
        "name": "cd839cee3b7b82ef_header_btn_sch.gif",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\header_btn_sch.gif",
        "type": "GIF image data, version 89a, 27 x 20",
        "sha256": "cd839cee3b7b82efb5b3fb748bf76b9626e1fe9427d0c937f42b9c5542959fec",
        "urls": [],
        "crc32": "4AF27807",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/cd839cee3b7b82ef_header_btn_sch.gif",
        "ssdeep": null,
        "size": 759,
        "sha512": "70051e892074bb99781f73f710ea53acf12c7873e90fb77b419a1586330d0ddc3b88b16e8c490de9e8c616c2b8cbad7f014b1907da25458ae6f7bf28d3cd9a3a",
        "pids": [
            2124
        ],
        "md5": "0e1c66ce66c8750469c26a4c194969fd"
    },
    {
        "yara": [],
        "sha1": "bb066519367c0b181f3bf85c019e94cffceb7d58",
        "name": "1376f92fefb1629a_set6230.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6230.html",
        "type": "HTML document, ASCII text, with very long lines, with CRLF line terminators",
        "sha256": "1376f92fefb1629a59fc41318156baef83efac7fa7ef4f6e5a19c092b9583fa9",
        "urls": [],
        "crc32": "10523AF6",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/1376f92fefb1629a_set6230.html",
        "ssdeep": null,
        "size": 5631,
        "sha512": "6832d0623dd591f77c49f3b1d226fe696341ee8da982daa373b5def06fdcdeb6609327313b021db84f443e2a7c5b83e6d237c67f83b5c4ab8cefd3edd11c05cf",
        "pids": [
            2124
        ],
        "md5": "5fb6ea1fc5db7c819959289942cbcd48"
    },
    {
        "yara": [],
        "sha1": "93f6ad4b874dc110ff4ba2fb9bc815627652f19b",
        "name": "7ffd0cbb6c267071_sup_title_head.gif",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\img\\sup_title_head.gif",
        "type": "GIF image data, version 89a, 20 x 16",
        "sha256": "7ffd0cbb6c26707161ed80b2a6561fc3caa048e2b0fa87166049248908eb02c6",
        "urls": [],
        "crc32": "2E420781",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/7ffd0cbb6c267071_sup_title_head.gif",
        "ssdeep": null,
        "size": 125,
        "sha512": "674aef1b8f9d390a2dca39caf08ad96e7705bb17a96dc5021755529236908d9de27d1cb63791673639ead1bcacfc51e903026475e3db5f136b9af37912ce1d6d",
        "pids": [
            2124
        ],
        "md5": "f5b17ffdc83a42e47ef00e1fda16bb54"
    },
    {
        "yara": [],
        "sha1": "a5f55e30d88dffc2efed9c73409b154b4640746f",
        "name": "e8b83a07478c3856_box1030.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1030.html",
        "type": "HTML document, ASCII text, with very long lines, with CRLF line terminators",
        "sha256": "e8b83a07478c385659bea143194e3b8ce8123633cb75750719e9dff173dc7d56",
        "urls": [],
        "crc32": "934FAEF6",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/e8b83a07478c3856_box1030.html",
        "ssdeep": null,
        "size": 16602,
        "sha512": "aad9a0d9ddfc6eeb151331efc4e2cbfe9b85150797a3bdd4241ceb8e0717e3dd27541d71b77985150cf99f133bab615b2dcf34cfe22b9d44ddfb7ad454c4b1e9",
        "pids": [
            2124
        ],
        "md5": "82bfaafb88f72b2418c7e069e1b25419"
    },
    {
        "yara": [],
        "sha1": "26c5d4b6bf154759fb24b6f0542aaf7c2fa2167e",
        "name": "f12d861d242bc917_p_job010.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_job010.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "f12d861d242bc917e38e94b06f466d2bfcfc60612a5208aeae8e593789e8013d",
        "urls": [],
        "crc32": "62D4FAA6",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/f12d861d242bc917_p_job010.html",
        "ssdeep": null,
        "size": 2301,
        "sha512": "69473f26804cd04263490d0c7f3458a1792f7b55962c257532a5ea284e54318922a0d3ef178727dfd09b06b4ba6a3b68f63633e900ce94de992bd3a201455e23",
        "pids": [
            2124
        ],
        "md5": "98c0d777fba6fbccce555b61f1f82e92"
    },
    {
        "yara": [],
        "sha1": "eefc0a0f8622900839d7912f817d983400a36a81",
        "name": "25c3213197a1cf6f_top0000.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\top0000.html",
        "type": "HTML document, ASCII text, with very long lines, with CRLF line terminators",
        "sha256": "25c3213197a1cf6f17ad342f43e8e36a4ad05545bca90a50bd8c98dce0103bc0",
        "urls": [],
        "crc32": "76D6AEAA",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/25c3213197a1cf6f_top0000.html",
        "ssdeep": null,
        "size": 18618,
        "sha512": "5b2ce53730c73dc94bbff0e4741f0fc6bf8fc06ae1af43aca11a7eb27cfd32caecb2eea9851133bb411782634ecef89085d416ae75aca5d1043a57ee35c35b2c",
        "pids": [
            2124
        ],
        "md5": "74dddbd8e11714aff7620726df378152"
    },
    {
        "yara": [],
        "sha1": "757752052a855037ae24cb59da614d914c6fb969",
        "name": "e86f8bec809281ec_box1380.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1380.html",
        "type": "HTML document, ASCII text, with very long lines, with CRLF line terminators",
        "sha256": "e86f8bec809281ec71bfc44a50d95015a7c6bd3c5fca8a306112c38f3606b25b",
        "urls": [],
        "crc32": "1834F1CD",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/e86f8bec809281ec_box1380.html",
        "ssdeep": null,
        "size": 7651,
        "sha512": "60f712bdd7b3f6b8bb49eac965234758b64574584572cf359f0e1455dc922aa2efa770f800e01a897a0aa9f3d792b1009465e5ea9f7cfc739364ec537786af7f",
        "pids": [
            2124
        ],
        "md5": "6a64def3696c24d1feab03dde1f88b5a"
    },
    {
        "yara": [],
        "sha1": "b5d307148e7a670b952ec7442689a944bee8356b",
        "name": "1105a5e37935d825_adr0580.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0580.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "1105a5e37935d825b55bb9382743a31d93583d0df6febcaa084e72b59c864f25",
        "urls": [],
        "crc32": "786C06D2",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/1105a5e37935d825_adr0580.html",
        "ssdeep": null,
        "size": 4804,
        "sha512": "2699971b8b7c6df15102ccd6ed426fa94010414961a8b44f8a22a216a6e5333769a5efb0e7dfecd016b75641483a61b8f4683b24b3afc11642a3f3b12f335939",
        "pids": [
            2124
        ],
        "md5": "7b58bfd58a849b8e2b7d5b636d9928b3"
    },
    {
        "yara": [],
        "sha1": "229151d108c4c63e5a27e91fe930078dfec45fd6",
        "name": "0902adfaa3841718_btn_list.gif",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\btn_list.gif",
        "type": "GIF image data, version 89a, 27 x 22",
        "sha256": "0902adfaa3841718a5c799b1198bc053f6b62949aed6572d7c5b5330fd645b7f",
        "urls": [],
        "crc32": "D96B19F7",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/0902adfaa3841718_btn_list.gif",
        "ssdeep": null,
        "size": 214,
        "sha512": "306b27c1840c0a7dbbe5f2237e9b8d0d88a3007d6e99a266ea2bfa3bf730f35e2bf2ff920a4b31de03f18c4aaffb72c646ec59efc5c6342bd571d1f2e377b441",
        "pids": [
            2124
        ],
        "md5": "56b5a3e703da88d3c4fad7b0968bce45"
    },
    {
        "yara": [],
        "sha1": "46eaba83ad9f5a1dadb097a2295a0f8672f175d4",
        "name": "3d59cdeb08e63cb2_set0850.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0850.html",
        "type": "HTML document, ASCII text, with very long lines, with CRLF line terminators",
        "sha256": "3d59cdeb08e63cb218ae66e54ff27a6445c90f8864a427fae81ab4919b07eb9a",
        "urls": [],
        "crc32": "D712FA03",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/3d59cdeb08e63cb2_set0850.html",
        "ssdeep": null,
        "size": 8794,
        "sha512": "d82d890f0355cb18bc8dbc26fcf7ed0adc2d5be4ec7765a2b22ff80dfa8e14883d097a0b39f6c27de8b9484feccd0e4a1ac1360f702d983ae231a42624033191",
        "pids": [
            2124
        ],
        "md5": "09132edacdfd7590a6345cf1dff5d1c3"
    },
    {
        "yara": [],
        "sha1": "92f74a095dbc0eaba6f32797710340ef2718a232",
        "name": "0475b3b7ff4f6901_header_btn_help.gif",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\header_btn_help.gif",
        "type": "GIF image data, version 89a, 27 x 20",
        "sha256": "0475b3b7ff4f6901e52c8cbf8e0d826a6394c0c8ca0aa17c70fa09578d01c66b",
        "urls": [],
        "crc32": "7C979006",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/0475b3b7ff4f6901_header_btn_help.gif",
        "ssdeep": null,
        "size": 748,
        "sha512": "abd38775e0e65ac594e861e99eea6d73ce436b4ee4fa5d62bf5a48645efe89ae9777b76e5c568328c70d9d6205610d52ef04b83b095e1982133d3b4e788e8d1b",
        "pids": [
            2124
        ],
        "md5": "b800502225ce43010f880ad1b9f31cc5"
    },
    {
        "yara": [],
        "sha1": "414cf773f9b56caaf02e4b7416808acb9fffdc56",
        "name": "abf180e61edaa9bf_wim_help.css",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\wim_help.css",
        "type": "Non-ISO extended-ASCII text, with CRLF, NEL line terminators",
        "sha256": "abf180e61edaa9bfbca7584f79cd9e3fa6bf6311bc27a2e816bed33f644f7bf1",
        "urls": [],
        "crc32": "35D0D629",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/abf180e61edaa9bf_wim_help.css",
        "ssdeep": null,
        "size": 5831,
        "sha512": "8f0aad42d8723734a333a50c36a10ead6521529fa0b442e06bd201955585cc30391b7ec2f6855fcb4b171e09b0baece17a66ec882ae250f8dcfe5793978b0a89",
        "pids": [
            2124
        ],
        "md5": "d53c06f023b5d1a38ad0cd3737c14cc2"
    },
    {
        "yara": [],
        "sha1": "31a5b90ba48581a598dece1dd04f797c2d6a6d1b",
        "name": "0ece123e228f66fd_p_box040.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_box040.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "0ece123e228f66fde3274a71de4f80533c9c204c26f6f9d55f913ccae809146b",
        "urls": [],
        "crc32": "4ACACDA5",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/0ece123e228f66fd_p_box040.html",
        "ssdeep": null,
        "size": 3076,
        "sha512": "2888fd890325d9df65f03b1c751feb9603a44bf5279e8b4ec28087d93c15309fa1c0571c6b63e7c921936c9e25cb69d9c86164233358d0cf0a5e2b8cd8794bf5",
        "pids": [
            2124
        ],
        "md5": "c5ea979b14429a898bdf2da8a596b7d7"
    },
    {
        "yara": [],
        "sha1": "2146cbc08dbe0ebdaa23cff7a64edbe8b8b8c5ff",
        "name": "b832cd7165981138_dev_st_ot_16.gif",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_ot_16.gif",
        "type": "GIF image data, version 89a, 16 x 16",
        "sha256": "b832cd716598113827909af9d68c832408cea85b8f17f3d4af72e57db54a5591",
        "urls": [],
        "crc32": "D22D3F93",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/b832cd7165981138_dev_st_ot_16.gif",
        "ssdeep": null,
        "size": 97,
        "sha512": "94370740000b6e5710429508c24e51cdfb359e0556b761268f50a11f99ae3ede86b8f391bc59e412ad902a6f19acc34464dc92ac30499c9be8e289c16311e056",
        "pids": [
            2124
        ],
        "md5": "8542978bd5089ac1a0c7b786893acec6"
    },
    {
        "yara": [],
        "sha1": "3869478fe0e5c685243596e523d86264f080ac50",
        "name": "77bbeed8d4b2ba6c_top2100.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\top2100.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "77bbeed8d4b2ba6c5417905ebc8f7607912512f0ebddd8f34de8b5dd6fa5b5e7",
        "urls": [],
        "crc32": "D08C06EA",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/77bbeed8d4b2ba6c_top2100.html",
        "ssdeep": null,
        "size": 1996,
        "sha512": "e18f17d6b8b9afc5194aa3872765e28bc69e9d32516b5b73af8605010a8631523dfcfdf09dccb293e54291efacf160025942dd8517c77199906a6016e5209c0e",
        "pids": [
            2124
        ],
        "md5": "0040a5d765175873e4a22c2973308e18"
    },
    {
        "yara": [],
        "sha1": "783a76a0aa207ffc588c886817089b0de0bbe5bd",
        "name": "0b466042e1483938_icon_right_view.gif",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_right_view.gif",
        "type": "GIF image data, version 89a, 20 x 16",
        "sha256": "0b466042e1483938f4103b8fc76a5123fa6cf46b39151834f353c505b49d9bb7",
        "urls": [],
        "crc32": "B40EBFD2",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/0b466042e1483938_icon_right_view.gif",
        "ssdeep": null,
        "size": 589,
        "sha512": "e3ffacd009f55b86339844568386f7a15e994ddb74bf25f5f744a67487a754a0d538a549a42f0d653ac8721ab2606bc2033216eb355c8f591fff1c833585e6ad",
        "pids": [
            2124
        ],
        "md5": "0322b84259f30a510b6422a9e9873e4e"
    },
    {
        "yara": [],
        "sha1": "827a9b10ddb002c4635e46cef0b2603419d8810e",
        "name": "03a575fb3169a66b_set0970e.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0970e.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "03a575fb3169a66bcc3f380c7ee1bd501908a2557bd1051e111e81f9b6acdaa8",
        "urls": [],
        "crc32": "44B7E85A",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/03a575fb3169a66b_set0970e.html",
        "ssdeep": null,
        "size": 2249,
        "sha512": "c87984e07cfaef1e52631514e449459cc94c54fa9ef9b05f6c31b63c13b99db3444adfaf54897783c68073d327d31ce71b3bd7465947c1e14237d4565e6ed38d",
        "pids": [
            2124
        ],
        "md5": "23458c03e66afbf7cfb016e4f650b933"
    },
    {
        "yara": [],
        "sha1": "f2f984632c57461325756bfdec1e9886e3d91c4f",
        "name": "d7c7b3a16a956ec1_icon_jl_printer.gif",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_jl_printer.gif",
        "type": "GIF image data, version 89a, 20 x 16",
        "sha256": "d7c7b3a16a956ec1292fb66242ff34f6439cf7ec2cd07bb99c91eefa78c6a3aa",
        "urls": [],
        "crc32": "C20F8480",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/d7c7b3a16a956ec1_icon_jl_printer.gif",
        "ssdeep": null,
        "size": 122,
        "sha512": "5dc4adf9fb8f84980620ff98883b808089da2e96f68d484d8536122fa88576ac805a92f8aeb8fddd4d5f10bad596fd9085996a5beb12fc8a5391d76313dc1d1c",
        "pids": [
            2124
        ],
        "md5": "e3cc36f7a7219d905635a83db96577ef"
    },
    {
        "yara": [],
        "sha1": "615983695ef495009e7ba0966be3c535c4c5376b",
        "name": "badd97dd81c0ffa9_icon_group.gif",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_group.gif",
        "type": "GIF image data, version 89a, 16 x 16",
        "sha256": "badd97dd81c0ffa97b2c564fceac6df51aa4cacd7a614b9795978f969986ad25",
        "urls": [],
        "crc32": "64BD9A85",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/badd97dd81c0ffa9_icon_group.gif",
        "ssdeep": null,
        "size": 604,
        "sha512": "4e47225b2721bc53b9416e3b15f36523ceb329cc6116299cca38f44a1fafec67077f863557162489fcb1d1f59be44f285dfb5e847b00c49d89799c9ca694c4bc",
        "pids": [
            2124
        ],
        "md5": "c7ddd603909f011fc5d0739271393f4a"
    },
    {
        "yara": [],
        "sha1": "cef296099b700896e393968602a37269b4f703a3",
        "name": "1151181fd0f91b29_icon_func_fax.gif",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_func_fax.gif",
        "type": "GIF image data, version 89a, 20 x 16",
        "sha256": "1151181fd0f91b294bd88f496228f007dc3c0190cae1dd8be1c797ace94f9a21",
        "urls": [],
        "crc32": "3096E160",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/1151181fd0f91b29_icon_func_fax.gif",
        "ssdeep": null,
        "size": 264,
        "sha512": "dab3f98e13ce45a09b4761e27b967a88ff67b9bb819abd594f688b12af41c224cdf076bce62e85be5e7d0f55924d51c7c05df221004db83a4481ef27113256a8",
        "pids": [
            2124
        ],
        "md5": "bae3752d52382df745c5a8e11f14db0d"
    },
    {
        "yara": [],
        "sha1": "5c4829c31472acb1325ab9d861c1f8a7ef8d16c2",
        "name": "b00e684f4fc1846b_p_fax000.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_fax000.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "b00e684f4fc1846bd3935beee0a2e391130fe7eca8ca4eadb9e0a618cc8b2f05",
        "urls": [],
        "crc32": "323DA908",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/b00e684f4fc1846b_p_fax000.html",
        "ssdeep": null,
        "size": 1373,
        "sha512": "249d4eeb04105895454b4b6deaed3f5b774ce7774e2a1d3a5c90ad6ec165d6b986ad3b936bad80fd2d58d06c9b5d529696bb0ed29127f9da241a63f2abefbed0",
        "pids": [
            2124
        ],
        "md5": "37ba56c1f7da8758a79fe37890c20dbe"
    },
    {
        "yara": [],
        "sha1": "b1b99a1eb32b61b0dcd3f433fb2d66e46d95e6c6",
        "name": "793d51539e655dff_copyright.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\copyright.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "793d51539e655dff37cf07406336d3ce508ffa49904e105050ebae16c5c56e2c",
        "urls": [],
        "crc32": "013AC794",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/793d51539e655dff_copyright.html",
        "ssdeep": null,
        "size": 4046,
        "sha512": "80eb8e3bdc077a4c0b1b7c11d1f985cc80ba97b683c23df31a7220669f0cd07b6811e8de6f0ad1ed0a11b38682243c736ba271061eb3053090f7b6e0ae435ec0",
        "pids": [
            2124
        ],
        "md5": "920b1e84c788d996255855d480cdde28"
    },
    {
        "yara": [],
        "sha1": "8dff7341ede1b1177baf9511d672a52661ca2f0e",
        "name": "8a51bfdc5f4650ab_top0051.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\top0051.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "8a51bfdc5f4650ab60c12fb4e0899ec03b57be958bfadc061d4052a5b76cb18a",
        "urls": [],
        "crc32": "E8033C3E",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/8a51bfdc5f4650ab_top0051.html",
        "ssdeep": null,
        "size": 4259,
        "sha512": "29f0d00facdc14d62c941035ac5591ea36faff0edc31cd36dbc6ea1cf8d7b774730d704fb365acbe96d42299c1c65b72778c2150f46e29c83cc8ce9c61d8671b",
        "pids": [
            2124
        ],
        "md5": "64ea15e0a15a4489405ec028ed02687e"
    },
    {
        "yara": [],
        "sha1": "8440ebd23fe413bd8d990e4a1c30a08f831c4c0e",
        "name": "43d2cca67cab1fc5_lsb1100b.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\lsb1100b.html",
        "type": "HTML document, ASCII text, with very long lines, with CRLF line terminators",
        "sha256": "43d2cca67cab1fc545457a6288c90bf957931984ced865e963d306295bd56b7f",
        "urls": [],
        "crc32": "18BECDF9",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/43d2cca67cab1fc5_lsb1100b.html",
        "ssdeep": null,
        "size": 2526,
        "sha512": "1212b21d872e35447b4e5ebfd358c92e379493a31bdb1db64d5ed5ada6fce416221fad8cecae54da90a92436790911c49ba03f2d35a3a8999a4400491c8bc1fe",
        "pids": [
            2124
        ],
        "md5": "bccb6be6c1b59eb71677085846261040"
    },
    {
        "yara": [],
        "sha1": "7b2af125cc2dda0d90d101dc5322d61b421469a6",
        "name": "281022f5f662fba2_p_top010.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_top010.html",
        "type": "HTML document, ASCII text, with very long lines, with CRLF line terminators",
        "sha256": "281022f5f662fba24b467ea6466a4666aff1fc04ac778818fc24c3ce1874774d",
        "urls": [],
        "crc32": "F3D78715",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/281022f5f662fba2_p_top010.html",
        "ssdeep": null,
        "size": 13985,
        "sha512": "b73d15d47448d1371182e3433b02d4e4b62d344adee8cc5a0c241d33b4fd860500431483f6c2e6f31f16b68aa81abcc1a91062850c6d732db806df958fa292fc",
        "pids": [
            2124
        ],
        "md5": "85821db2b883d022a911d973b26cf8be"
    },
    {
        "yara": [],
        "sha1": "ebaa03d040d9442cd4e65aa217c2c14bda8ac74a",
        "name": "dc665d2badf39f63_set7150.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set7150.html",
        "type": "HTML document, ASCII text, with very long lines, with CRLF line terminators",
        "sha256": "dc665d2badf39f639832b38e212c65d6606b0e35041b8b0ca60a55ca4586d733",
        "urls": [],
        "crc32": "5D54A7C0",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/dc665d2badf39f63_set7150.html",
        "ssdeep": null,
        "size": 10696,
        "sha512": "ebcd78ce8b1b2c22fd8b3a86f65e2349226597c70188807d93cda25337f9fb1e253a4627e9be548b0a89537941a157d4c17f6085411dbe03aa02ba6dfeb8c4cd",
        "pids": [
            2124
        ],
        "md5": "93d5c45f9f6e5ebd3bc3e1e576ff4ddb"
    },
    {
        "yara": [],
        "sha1": "b7f605610c68e6bda9e6fa2a6be28fd4545b1f94",
        "name": "8972973869564a42_dev_st_p50_16.gif",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_p50_16.gif",
        "type": "GIF image data, version 89a, 16 x 16",
        "sha256": "8972973869564a425164fc2819dd2077c49f51867d8cb626aa6c5c194c5f250a",
        "urls": [],
        "crc32": "194ADA42",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/8972973869564a42_dev_st_p50_16.gif",
        "ssdeep": null,
        "size": 76,
        "sha512": "84ff528e126141284bd43cb1338796c44b264c196e231dd6c99a5e06d94f4ce9b83dee4d82b93b9ccb6db7154681b6694fe082a7648fe35ef765cc821a5eccee",
        "pids": [
            2124
        ],
        "md5": "cd81a522b2d2c4a308eaa578c4041bc5"
    },
    {
        "yara": [],
        "sha1": "cfefebfcc43b26701f61dd42c1b127c4940f3252",
        "name": "b9e713cc2f59ef09_top2100a.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\top2100a.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "b9e713cc2f59ef0968f190ad9882d812555d764a4d117d029bb618753490de2d",
        "urls": [],
        "crc32": "AB530D3A",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/b9e713cc2f59ef09_top2100a.html",
        "ssdeep": null,
        "size": 2152,
        "sha512": "a02149d2014e974c3e79302661192eab22306eb7701b29701cd2eedddc8cb235c7a4de7eb57d0acbb177a013967e587c8e7868081342a4da543aa107d65906d2",
        "pids": [
            2124
        ],
        "md5": "51a0a4d84bc977ef981297e0aa22a2b1"
    },
    {
        "yara": [],
        "sha1": "0828b9fc77a72edcc08bbdd022563acbcf523452",
        "name": "1b56e8eb0c10c5fc_set4000b.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4000b.html",
        "type": "HTML document, ASCII text, with very long lines, with CRLF line terminators",
        "sha256": "1b56e8eb0c10c5fc1b58291f3cedb0d7b396cd339b43daabafb051add5f149b4",
        "urls": [],
        "crc32": "DDE750E9",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/1b56e8eb0c10c5fc_set4000b.html",
        "ssdeep": null,
        "size": 3342,
        "sha512": "f960be9d7245aae0eb3d7db9336c0790a4276bf509789970cc436d2f45b1ab90dce5e229c03e8aaeb140c244b083ccd328025f4083df30c4aadce32d72759442",
        "pids": [
            2124
        ],
        "md5": "140ada126822dcea243302e7b37096c6"
    },
    {
        "yara": [],
        "sha1": "61a3785832320adc5437a35a7b29bda9de731188",
        "name": "1940050dbef489e2_set3510a.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set3510a.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "1940050dbef489e21df20765aa0cf197c07ad5b1c1f1f04d6fa60b355d7149cf",
        "urls": [],
        "crc32": "AEF228BC",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/1940050dbef489e2_set3510a.html",
        "ssdeep": null,
        "size": 2784,
        "sha512": "6d9fea6ba6047f2621c269b85fa01a28148cf11db89051d52ba0eb5f75b1649ab429a42b33452e0a2be4f99e0e45d3695ab1d9bbbcf21945f3c4d7d879190fd4",
        "pids": [
            2124
        ],
        "md5": "56c65bab9a873dcee8bb55006c795f91"
    },
    {
        "yara": [],
        "sha1": "ed3121cfed0702eb660eeb675f817c1154b61ecb",
        "name": "a27f3e6bac793ae0_set6330.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6330.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "a27f3e6bac793ae0d3c47e479b3c372935147c25a91f6aefc9c664fb50d8dc2f",
        "urls": [],
        "crc32": "450B9448",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/a27f3e6bac793ae0_set6330.html",
        "ssdeep": null,
        "size": 2436,
        "sha512": "7b52f8eee0195da5072f8541a5d24f862b7efcaf062c17a311869d574a9172f8048ac58e993c3993b697c9b6d0ec2ebe23837a646a0e74b1ca63b14b25ee03c8",
        "pids": [
            2124
        ],
        "md5": "a746abfecf12b98bfe8b4c3f11df7061"
    },
    {
        "yara": [],
        "sha1": "65fa873b54195494b2d6bdf2a17e4757942fe927",
        "name": "2aaf87700f20f11e_thmbd.gif",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\thmbd.gif",
        "type": "GIF image data, version 89a, 44 x 44",
        "sha256": "2aaf87700f20f11e8c91979753ae420177c06fb16171d1a5b35de7acbfda9151",
        "urls": [],
        "crc32": "D2B471F7",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/2aaf87700f20f11e_thmbd.gif",
        "ssdeep": null,
        "size": 1177,
        "sha512": "eed7cf2be865f0c5854e2166a21e298b07f7487d5e680c070392f0c52643f25edc81cf396e077709b02a6595f0f51fd3966c68feefd07d24c96e929407e91529",
        "pids": [
            2124
        ],
        "md5": "bbc6a52765f8d6f856a5139dbcb7d756"
    },
    {
        "yara": [],
        "sha1": "26ad1a13b6b50ff055598c54c0257cdd6905335c",
        "name": "d201b4984bf41970_adr0510b.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0510b.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "d201b4984bf41970153165cf1657dd6ad6f2aa89f80fdc14aea59170a9dc4139",
        "urls": [],
        "crc32": "158387A9",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/d201b4984bf41970_adr0510b.html",
        "ssdeep": null,
        "size": 3068,
        "sha512": "91ace5ee8062eb7f1049cb04159660949b2a08f79ac13da1f2d83f2766b8cf7ab22fb0a281e008b7223077e10ba82997a0e4489df262717554c84a31cb60ad64",
        "pids": [
            2124
        ],
        "md5": "9e94d4cc820a2ba8564c64a1a9c0a04f"
    },
    {
        "yara": [],
        "sha1": "4d97c11fed2587073caa4b8ae4427020df098449",
        "name": "0f900cf625ef6fc8_box1370.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1370.html",
        "type": "HTML document, ASCII text, with very long lines, with CRLF line terminators",
        "sha256": "0f900cf625ef6fc8c017dc3909e14507f78a2b047b2a6ead4f6edcca239779dc",
        "urls": [],
        "crc32": "9003CFD5",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/0f900cf625ef6fc8_box1370.html",
        "ssdeep": null,
        "size": 5284,
        "sha512": "d6f9615737bb8d9f6d921dbf43ff4dab698fca06dc5421c50baa83e4fd2bc699d8f545233af2013c6fd15093caec2a9937c7b917d8dbc47ea7925b73e963b6b5",
        "pids": [
            2124
        ],
        "md5": "21e1183ea09ff62c619ff03b0e01f660"
    },
    {
        "yara": [],
        "sha1": "ea76bdb577335be7bf25e45ec7a612e071ad498e",
        "name": "5bc1fd4f592a3fac_icon_user.gif",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_user.gif",
        "type": "GIF image data, version 89a, 16 x 16",
        "sha256": "5bc1fd4f592a3fac1d1e47f8347b5ff0db2f53469be8e0d0fe5987976c5340f2",
        "urls": [],
        "crc32": "00FA325C",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/5bc1fd4f592a3fac_icon_user.gif",
        "ssdeep": null,
        "size": 571,
        "sha512": "2c530cecfd253694f7faf2725e581d4b15847c967eaa1bb5d2e2e97c536338b1e049b2bd360b0e91905bb043b8be34494e6f872e90170ebcb39815b4a2b3770a",
        "pids": [
            2124
        ],
        "md5": "405e343cb2c258cd678c722e8613c576"
    },
    {
        "yara": [],
        "sha1": "938d536eb0b7b04e08886d3830eb525b35fe08e0",
        "name": "f1a4c7ba5b1fc96f_adr0520c.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0520c.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "f1a4c7ba5b1fc96f96e0dbfc77d569cddf20fd6dd3d57f307deb4e29dbf813a2",
        "urls": [],
        "crc32": "1CE3909E",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/f1a4c7ba5b1fc96f_adr0520c.html",
        "ssdeep": null,
        "size": 2844,
        "sha512": "c9534be3ebfa813943c73e1e87c094d4f5518f94779b1349b848fc492a294d428d8288e3c9a05eb2db99c3926ef2c4d55a9652673622546bf0f6f325b6317a27",
        "pids": [
            2124
        ],
        "md5": "f49d4d45138568398d35659c77bf612b"
    },
    {
        "yara": [],
        "sha1": "3cc28d0386e97da2f5bfc6284ab780a407d894b2",
        "name": "b0a313dfbe0c860f_top0060.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\top0060.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "b0a313dfbe0c860f0eab76b546bbc170c7dd97edd475ea89d56d62f361c9372f",
        "urls": [],
        "crc32": "8287DACA",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/b0a313dfbe0c860f_top0060.html",
        "ssdeep": null,
        "size": 3476,
        "sha512": "6666ca3d866d31fc1c9d42a35da061c47803874008062e882500481e7121966236d465d06052547ecf40ba402b432c204ebf78006a49c35893d4f1306827bebd",
        "pids": [
            2124
        ],
        "md5": "f2b1a785da51a48abb347cb06e582f70"
    },
    {
        "yara": [],
        "sha1": "9c10ecda9563f24de7a2c95f91046093bf01a88e",
        "name": "e32f2eea46614851_dev_st_tn_bar_k.gif",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_tn_bar_k.gif",
        "type": "GIF image data, version 89a, 1 x 18",
        "sha256": "e32f2eea46614851043682906e15ab0d001ba5f3eb6f4f41c04e8891e7e96217",
        "urls": [],
        "crc32": "4AB0FAF3",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/e32f2eea46614851_dev_st_tn_bar_k.gif",
        "ssdeep": null,
        "size": 96,
        "sha512": "ef5f3b7e6437f7cd939c4463566cd91b85087af97a5226f21822106b400041f9a529405a618b6374d586cef6492dba8357edbc9dbcdadd84869811a2820e7dce",
        "pids": [
            2124
        ],
        "md5": "e1f70f773617bcb5e29c6de937916739"
    },
    {
        "yara": [],
        "sha1": "d1f63ce467adcf9f9a76c4f10d00734fb0e2c36c",
        "name": "392ab8bcca11e022_box1295.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1295.html",
        "type": "HTML document, ASCII text, with very long lines, with CRLF line terminators",
        "sha256": "392ab8bcca11e0226b0ec1b5dce5268d0d8ffa97a605249581cddf9ae5822721",
        "urls": [],
        "crc32": "9FE9CD72",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/392ab8bcca11e022_box1295.html",
        "ssdeep": null,
        "size": 3724,
        "sha512": "7136927e83adceb7a1c7e0ff6ede794d20cec65ac2d38a383993f13aef5f88a92a8527dc79f9fd6cb128dc46b41e53c9a0131305e67f88e89ca091b6aaab8958",
        "pids": [
            2124
        ],
        "md5": "78f4234a94115deb50d96e261e86a973"
    },
    {
        "yara": [],
        "sha1": "032b0827b6ca0c603bf922d34c01b107ce0203a8",
        "name": "c3bbf4139a7825fd_icon_cmode_br.gif",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_cmode_br.gif",
        "type": "GIF image data, version 89a, 21 x 17",
        "sha256": "c3bbf4139a7825fd3121b6bcecb7aaf6b1286eb19f94f092d912e7555acfb4af",
        "urls": [],
        "crc32": "3C0C57AA",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/c3bbf4139a7825fd_icon_cmode_br.gif",
        "ssdeep": null,
        "size": 564,
        "sha512": "2d862aec33ecdbf15723d9f10a3c0f61b2e654dc232687b70652673b61d8b03774857c88c7958c629224ea99b31d0052f4f18b8695f3a5cac4857c27405af144",
        "pids": [
            2124
        ],
        "md5": "7b40a698f44c1e7e77494ad1a2a64e3e"
    },
    {
        "yara": [],
        "sha1": "d7a01891eb6476624a975cb0c9a11d00a839b2f3",
        "name": "68fd9ba7f63e62d0_set0840a.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0840a.html",
        "type": "HTML document, ASCII text, with very long lines, with CRLF line terminators",
        "sha256": "68fd9ba7f63e62d08a2f5b7b710977ebe6934db63b10cf72a9dac816b8eafa4e",
        "urls": [],
        "crc32": "A610E245",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/68fd9ba7f63e62d0_set0840a.html",
        "ssdeep": null,
        "size": 9444,
        "sha512": "64367686753093e7381fc62260e32f2daad149ddf9b2e5116c56c7c17c0d2952bacee5540e68972b7a2cb56ed4a6ef54736f9b56e3ec8a1b271601ad61410c3c",
        "pids": [
            2124
        ],
        "md5": "9a23f8e0950c92ebe86ea652e41b9252"
    },
    {
        "yara": [],
        "sha1": "6f31b4111e1b39b2941f0b2518992e4b0d740cd4",
        "name": "ffa813163408a00c_set9021.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set9021.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "ffa813163408a00c0a2316b8e57cbb435b5467ce190bd69fc3fe67a8b02e223f",
        "urls": [],
        "crc32": "5FEB4791",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/ffa813163408a00c_set9021.html",
        "ssdeep": null,
        "size": 3381,
        "sha512": "5d00dd15ea523a2bbf00f833e20c44b5127ffb8084bfcf15901bfad7b340faeac7dcde64b938a92a3147e87d69d83cdaf7b78e4a8088e6b1959dc41082628f65",
        "pids": [
            2124
        ],
        "md5": "525567d286ba25913a367b3dbe80f8e3"
    },
    {
        "yara": [],
        "sha1": "ffe79266da66341d52c058cf8f43ca114fff5fe7",
        "name": "8125fbddfb90bb56_top0020.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\top0020.html",
        "type": "HTML document, ASCII text, with very long lines, with CRLF line terminators",
        "sha256": "8125fbddfb90bb56ed8b9a012dc7a19c631d83cc3997e7ebabac882fc8b059c3",
        "urls": [],
        "crc32": "6BA579BD",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/8125fbddfb90bb56_top0020.html",
        "ssdeep": null,
        "size": 7417,
        "sha512": "31061a896c9037c6e3c62468bba91c539f30ef4ce5c46af0da11826d71ab13cf2ae14a79f23b5ab1ba00d60a0b3385f73bcc368651e02291fc0f632613a2e7cb",
        "pids": [
            2124
        ],
        "md5": "f2b352539fcb421aaff4476544f5d514"
    },
    {
        "yara": [],
        "sha1": "683d3c4a30d2fe15a64a1c025f798dbf6f9d103c",
        "name": "af2a5ac27b6a8d47_dev_st_toner_16.gif",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_toner_16.gif",
        "type": "GIF image data, version 89a, 16 x 16",
        "sha256": "af2a5ac27b6a8d47091b1529708f89e3f2f02779212de2cd4e48aca2cae38b24",
        "urls": [],
        "crc32": "9697198C",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/af2a5ac27b6a8d47_dev_st_toner_16.gif",
        "ssdeep": null,
        "size": 315,
        "sha512": "4512c6a9ebef5353de2d7dd3ad0806ebc43d1b3ff3005e67d538a623860d6a255241c091a1494d71711d341d444692bac0fbebadbb0a60a10b628866864f484d",
        "pids": [
            2124
        ],
        "md5": "2d47aa3158d8fd34537fa1c9bf301d44"
    },
    {
        "yara": [],
        "sha1": "bcb57e920ad27b15c61742ed824eb9fe0c8cc77f",
        "name": "0a594f12efa057ad_set8110.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set8110.html",
        "type": "HTML document, ASCII text, with very long lines, with CRLF line terminators",
        "sha256": "0a594f12efa057ad50b0bc97043f1f12c2fd983e5a5f88beee32765d83772bc3",
        "urls": [],
        "crc32": "89D85654",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/0a594f12efa057ad_set8110.html",
        "ssdeep": null,
        "size": 4135,
        "sha512": "e2073e592a6d0a02fa9e44c7b399e303a3a44adbb596790c22f4fc337b6deff96bc50d29dbff4386dcc9ba499ce927f63d9fd65d15beddfde06765bb70c0f42e",
        "pids": [
            2124
        ],
        "md5": "98f260d2e9b28e9707f2bf24dfdab23f"
    },
    {
        "yara": [],
        "sha1": "172f419f7af42d2359f0d806b6b3a6250d3b86c0",
        "name": "1d48719bc9d0a927_set0975a.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0975a.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "1d48719bc9d0a927636fa7d006dc7922f22cd29ae5bac0ca62cc4abbb43e41a6",
        "urls": [],
        "crc32": "688C3980",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/1d48719bc9d0a927_set0975a.html",
        "ssdeep": null,
        "size": 4060,
        "sha512": "a158983dd817ef399eb384c069b571fa9dd2e4b649f6b1727b442e65ef3be840e3b1db85e592160c011c370019df5b14fe2c87fc2662d10db7e68578924df321",
        "pids": [
            2124
        ],
        "md5": "d8ed9d367b16780385f5a7fa265b792b"
    },
    {
        "yara": [],
        "sha1": "6f408db813425d1a1dc4f20c1fffd83f849d9c82",
        "name": "123cd3efbff59352_p_adr020.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_adr020.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "123cd3efbff593524e0d1d73eb03cf5eaa5307247c60585849d634aea51aba90",
        "urls": [],
        "crc32": "5E55C2EF",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/123cd3efbff59352_p_adr020.html",
        "ssdeep": null,
        "size": 1909,
        "sha512": "c9354c26ff1a2003fb241171b09e72ea0842198cab24feff76a851341b6b5fef05942d0609c008d339af3548dc2a81adf8f76fdbe0dea78c9b5121e456c69e79",
        "pids": [
            2124
        ],
        "md5": "09476d1cd79400be88591ebe9a7fcc55"
    },
    {
        "yara": [],
        "sha1": "b98a3738c14289654dc70b00efe45c6f9968a583",
        "name": "7ea72090482fdb34_dev_st_c_open16.gif",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_c_open16.gif",
        "type": "GIF image data, version 89a, 16 x 16",
        "sha256": "7ea72090482fdb34c60cbef06ba8e791929eedd4be7d86f1a3a44c46f3d7fb48",
        "urls": [],
        "crc32": "D838146D",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/7ea72090482fdb34_dev_st_c_open16.gif",
        "ssdeep": null,
        "size": 122,
        "sha512": "c48de86ea40a3af68a2a6ce4c4a7c6bc1b8ffcd00e6eb4198829917396e08d4d7fd1d273c384b5ea3f962789642c1c42e83a3fa2ac407c840592ce7461c4e9c4",
        "pids": [
            2124
        ],
        "md5": "93ade37b89f69edc498263c86bd23dd4"
    },
    {
        "yara": [],
        "sha1": "9a028b757e9935b6d18a8a8f206fb503947d02b9",
        "name": "bd2b2653dfd7ec4f_box1290.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1290.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "bd2b2653dfd7ec4fa695767d8b5aa5977749f7b56df21be028a53494e86c67a7",
        "urls": [],
        "crc32": "2C5DCE73",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/bd2b2653dfd7ec4f_box1290.html",
        "ssdeep": null,
        "size": 6314,
        "sha512": "6a098ba16f47cdf56a951c5c2955940d4cbb897f898001b4ab7e29def8845bbc8a26a9efdaa61d5b683291842432b95336b2e4fb0df2c5a2a174c6e40059860d",
        "pids": [
            2124
        ],
        "md5": "288674a51944b38b6053794e088359a9"
    },
    {
        "yara": [],
        "sha1": "243e481211b1a74e7dd0cbb62caf9d4792a6fc6b",
        "name": "b82dfcbf5dc4c0b9_set0970.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0970.html",
        "type": "HTML document, ASCII text, with very long lines, with CRLF line terminators",
        "sha256": "b82dfcbf5dc4c0b9fa46a81690bda9c042b87929fe41df06fe1ab72a2f231d52",
        "urls": [],
        "crc32": "815063AF",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/b82dfcbf5dc4c0b9_set0970.html",
        "ssdeep": null,
        "size": 13678,
        "sha512": "66b4dd66c85a91c3119b7054cae90aa606be1de826e365d90b7e6b2d688fbe02b8d897d0f95caa695eefd79e6c915d52ee221819a221f857d0c0e63589814c4f",
        "pids": [
            2124
        ],
        "md5": "6ceabb183fa190bb4b3963b7bea6f718"
    },
    {
        "yara": [],
        "sha1": "e86255aaed241ef87f1d41d68d172c5359de34d7",
        "name": "edaa26bcef723174_icon_func_netfile.gif",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_func_netfile.gif",
        "type": "GIF image data, version 89a, 20 x 16",
        "sha256": "edaa26bcef7231746976cc75b2369bad2feab3deeed55054a4510d5b82447c1a",
        "urls": [],
        "crc32": "2A9181A1",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/edaa26bcef723174_icon_func_netfile.gif",
        "ssdeep": null,
        "size": 585,
        "sha512": "ebfe4f37d79f7005512be0e505e8c6d28b5063e4557b948c55a814feabdae95382da120450a80cdaea04fbd83b03d81c06f24bd7e2a6810e1def918a334fc6f4",
        "pids": [
            2124
        ],
        "md5": "10503971191f7d8f6339ef1ae3c5df49"
    },
    {
        "yara": [],
        "sha1": "4d8c4cda843d77ab3c7f623d690aab0ea1b65482",
        "name": "40553b4dbc43b366_btn_arrow_right1.gif",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\btn_arrow_right1.gif",
        "type": "GIF image data, version 89a, 16 x 15",
        "sha256": "40553b4dbc43b36647f1c52f8a87c379404aae101d754907a0fb566117e07e84",
        "urls": [],
        "crc32": "4D3190A6",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/40553b4dbc43b366_btn_arrow_right1.gif",
        "ssdeep": null,
        "size": 347,
        "sha512": "b7ee4eb22bc1c531860c495e82ca0e54673c2430cbaa582f4f4613649743cdf397ea6eae2d84978cd97e2230d67c16266a44969554c369588917ea089a989a4b",
        "pids": [
            2124
        ],
        "md5": "b2a570a0bf7763070fc120c7a51ae371"
    },
    {
        "yara": [],
        "sha1": "5b25d67639407444eb1c793f998854bf65242283",
        "name": "4d3531e0bc65456b_set9350.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set9350.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "4d3531e0bc65456b77dae398d649727f7ea508ba2a2f6127cf9d26ba10bd73ae",
        "urls": [],
        "crc32": "5D5F1BC7",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/4d3531e0bc65456b_set9350.html",
        "ssdeep": null,
        "size": 3899,
        "sha512": "5ca17a8f5bb2b11ef57c99a85db8b2fcb39d6d8701350fd832d88cbe53f08d8cf8eb72aa42f90ce0fabeed509b851647e3495d80f4be4f21f9dec0b38a57a80d",
        "pids": [
            2124
        ],
        "md5": "69427d84608f9b64b6f09da1ace9fc28"
    },
    {
        "yara": [],
        "sha1": "81752c9f2c575b4850b4dbaa99c89cc4129997f6",
        "name": "b50c1ae0b4b7d23b_set6120.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6120.html",
        "type": "HTML document, ASCII text, with very long lines, with CRLF line terminators",
        "sha256": "b50c1ae0b4b7d23b6d71555151cde7e549f48547c6dc8dfde66262c8de6b7c30",
        "urls": [],
        "crc32": "0C2DE074",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/b50c1ae0b4b7d23b_set6120.html",
        "ssdeep": null,
        "size": 6255,
        "sha512": "eeace8d9fb93bded0ba648d9de21b36573241dd4e4c6bea31c8361f4cb6e20b177c0a7f86c0902103381bb8db8199d2459f82e340c06a994b056f5f967d8ad78",
        "pids": [
            2124
        ],
        "md5": "3b699e17e3b2f009976dd06f79f729fb"
    },
    {
        "yara": [],
        "sha1": "1d54053880c78e8f81bc19f429099616eb707008",
        "name": "bec1304656214eb1_set0970c.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0970c.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "bec1304656214eb1f38fde5987d81e4e1959b0f1feb59b1dd5e415fb86fb452c",
        "urls": [],
        "crc32": "273F7C63",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/bec1304656214eb1_set0970c.html",
        "ssdeep": null,
        "size": 2283,
        "sha512": "dd0177dad7cd0c5354045070ce96c0bf03558fcfb4958b418cb23a06f0bf4cae33bac41d66b4d36603f68729df048c099b8bf9bb7169e8f2393506432610be03",
        "pids": [
            2124
        ],
        "md5": "5eec12525850e3f867a138751d398523"
    },
    {
        "yara": [],
        "sha1": "e1f7e46088190fbb0fcb41d3f1f309f9cff56cc5",
        "name": "14c08b67a285b516_box1260.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1260.html",
        "type": "HTML document, ASCII text, with very long lines, with CRLF line terminators",
        "sha256": "14c08b67a285b516a4c7b1aef5c403304b90ac22f9974ec17fa512ff3baacb93",
        "urls": [],
        "crc32": "3FD382AA",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/14c08b67a285b516_box1260.html",
        "ssdeep": null,
        "size": 6747,
        "sha512": "ba3e045e4b6053646dc1f48c6d62b1c5498a91cbb28f690653c9060617ae66baf6301723ecb5200dd36f2976c119260abdfb8bab4f74b1cf58c5122af50c661e",
        "pids": [
            2124
        ],
        "md5": "c32b92309ef1e22bc5e2e5ba9dd04fc9"
    },
    {
        "yara": [],
        "sha1": "f266072c45deafd15054b1332ff505fa7bbc7257",
        "name": "1b3b86f8c21497d4_iconk14.gif",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\iconk14.gif",
        "type": "GIF image data, version 89a, 32 x 32",
        "sha256": "1b3b86f8c21497d46c6e8a2d2dcd0daf3a8bd8d8bc165fbe298a0dca591202a0",
        "urls": [],
        "crc32": "DC4B7C85",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/1b3b86f8c21497d4_iconk14.gif",
        "ssdeep": null,
        "size": 132,
        "sha512": "2171251a108fe75730f75f92002629297d12bf60697803a7637d6c5627839ff931e66f7ac00b1da91a089563d40910cf98a8f8d9f04d5c03aa8b789037e85af6",
        "pids": [
            2124
        ],
        "md5": "98f86292c898071c1f15fcf92bce5049"
    },
    {
        "yara": [],
        "sha1": "68163804caf9cc172fefbd313847b45a87615503",
        "name": "3c29f7b4bf5afde1_permission.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\permission\\permission.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "3c29f7b4bf5afde1f41ee17f4f88caa66a9193d2bf41e918445f3db4d029bca5",
        "urls": [],
        "crc32": "7703142E",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/3c29f7b4bf5afde1_permission.html",
        "ssdeep": null,
        "size": 631,
        "sha512": "5892a15f524fa9a89ea9c01afd0e81dd7ca2fe1fa72327da7543718fb25e1593636342aac4da6e0b8509124a7f3c9e4165a4976a0296044144540378481ce81a",
        "pids": [
            2124
        ],
        "md5": "d8186307c8f192840d840cfaa0ed07b8"
    },
    {
        "yara": [],
        "sha1": "4a94af852666169eccf5601cad03154e95049927",
        "name": "83e3f2abaa9bf42a_set4110.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4110.html",
        "type": "HTML document, ASCII text, with very long lines, with CRLF line terminators",
        "sha256": "83e3f2abaa9bf42a3e8d36ece439fab13ed622c4e65128a819d5ecb1e69d09b4",
        "urls": [],
        "crc32": "5ED6B7C3",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/83e3f2abaa9bf42a_set4110.html",
        "ssdeep": null,
        "size": 32746,
        "sha512": "ade6a31b7c5bbe39505eae0698d235e984407f32fe2cb84880a0b05489151a19fb0b5c3c3de2f29d72f92a4478582b4a0459891b48b3c2b37d31452e7d9862b9",
        "pids": [
            2124
        ],
        "md5": "3048fec49057715233482835bd773560"
    },
    {
        "yara": [],
        "sha1": "7dd39784aceb954d4086e22923691623a8c973ff",
        "name": "6c5d70055e8aa7a6_cntpermission_a5.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\permission\\contents\\cntpermission_a5.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "6c5d70055e8aa7a66e7276c8dd6024dc63780f943c7a4e658adc604b8202af47",
        "urls": [],
        "crc32": "47074F09",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/6c5d70055e8aa7a6_cntpermission_a5.html",
        "ssdeep": null,
        "size": 25875,
        "sha512": "7b33bd379f0658364acd7620027c246a2f708ff7422679a3a28a749b87c1c7aefdeff3056a0b4617ab8de0fe67198aff1044b1950107493cd446ea3c1a59a93b",
        "pids": [
            2124
        ],
        "md5": "e288de04c52fd7f88078fbbd5d0363ba"
    },
    {
        "yara": [],
        "sha1": "51e34e59c753d9dc13e154d3cf0c476bf7699f9e",
        "name": "1f82491766cf0c48_set0840.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0840.html",
        "type": "HTML document, ASCII text, with very long lines, with CRLF line terminators",
        "sha256": "1f82491766cf0c48ba9a7954dbdc1704073b6080ffca3920d964b5cec5a1cea7",
        "urls": [],
        "crc32": "82C40332",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/1f82491766cf0c48_set0840.html",
        "ssdeep": null,
        "size": 5717,
        "sha512": "14a4a7a5e3949c38233705fafa6ce5594d46f9bc7b8aa84dc397edc5325138ed8bee2a5329f03074f7ba3af1b7d223143ae6c94d699f9656d78418d19edecfad",
        "pids": [
            2124
        ],
        "md5": "8c104996b40109f9ccd023c773cac3cf"
    },
    {
        "yara": [],
        "sha1": "55719771e9e0397c05181da859ad7c3f54dba5db",
        "name": "3c937e955d0a0040_box1250.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1250.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "3c937e955d0a0040f470efa21a2221b1767b2fbb345f61c1f731c6adcd2635bf",
        "urls": [],
        "crc32": "EA24A04D",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/3c937e955d0a0040_box1250.html",
        "ssdeep": null,
        "size": 4728,
        "sha512": "9011bae1d7ca290f42aa3c353fc74b3c2a7021fc8a281e4b41c80931b5fdc43d297347e2bf3388987c4bd21f48b7f7b427ffd545155d0aac2f01db9f1dc2e53b",
        "pids": [
            2124
        ],
        "md5": "3984306fa54149c7224a861c053532c8"
    },
    {
        "yara": [],
        "sha1": "d47e363ea60c2430382f008dd445e8ac9e7ce575",
        "name": "28dbb8083ed6edbc_dev_st_dosattack.gif",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_dosattack.gif",
        "type": "GIF image data, version 89a, 16 x 16",
        "sha256": "28dbb8083ed6edbc2b64d1a03a9174e28f8d4709d845179faca635772998f04c",
        "urls": [],
        "crc32": "13E59F25",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/28dbb8083ed6edbc_dev_st_dosattack.gif",
        "ssdeep": null,
        "size": 235,
        "sha512": "31913b39be211e6873cae7d1be5e283d8f849f830bfefecffe5394e5077e94d078b336f93644d248004dcc5d9e43add5f6d7a0dacaf16046c0145550652a168a",
        "pids": [
            2124
        ],
        "md5": "893a9d4f0a2bc8e8a95f9b07a1899f44"
    },
    {
        "yara": [],
        "sha1": "7d2c5ae9932f0eca9a04d3630cf25c8db74cee7a",
        "name": "58d6c19060302b92_access_right.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\access_right.html",
        "type": "HTML document, Non-ISO extended-ASCII text, with very long lines, with CRLF line terminators",
        "sha256": "58d6c19060302b921250ccf5ad8353f4707e7df8381d9d75e304d11151f1ab30",
        "urls": [],
        "crc32": "EC4FC1DE",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/58d6c19060302b92_access_right.html",
        "ssdeep": null,
        "size": 9047,
        "sha512": "8e98de07fe56077e87923439e7f7ac2b6c105780c396597f9bf10691263b981494b1ff91c837cbfe911ab06a7e10f2b7cb438b0cad63aa140d987c29182222e4",
        "pids": [
            2124
        ],
        "md5": "84b7e475ef350ee3da7e83ff9d9980ba"
    },
    {
        "yara": [],
        "sha1": "06898b31a6dec00af8d86972226536ac52ba0d76",
        "name": "98a92258cfc7764c_btn_sort_up.gif",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\btn_sort_up.gif",
        "type": "GIF image data, version 89a, 12 x 6",
        "sha256": "98a92258cfc7764c0b7177bd88b165828d60e55681b394025433ee72a98b77ee",
        "urls": [],
        "crc32": "40371702",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/98a92258cfc7764c_btn_sort_up.gif",
        "ssdeep": null,
        "size": 169,
        "sha512": "560a2ffdc083d5a2aede446f9ef6acd79748453193c9c7e131ca404f524aaa1b082eb3ac21d98d99c935ac6f5bda6c4a1081638b2fcd4f80ae20b1fba0aa2034",
        "pids": [
            2124
        ],
        "md5": "be657f8bc969f6f6ca13d634b2f4575f"
    },
    {
        "yara": [],
        "sha1": "24b1d799bcac72f38f82e2d4c639da42af1b0972",
        "name": "f3b69960afe61b77_set6270.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6270.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "f3b69960afe61b77a0b01df8781a5e3071585b34dc75b2756c9278e8231b81f9",
        "urls": [],
        "crc32": "C11B3E71",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/f3b69960afe61b77_set6270.html",
        "ssdeep": null,
        "size": 2841,
        "sha512": "3fdb8cbd9e91c1962cd2c1d2960c6008ce90bf9abc8a71a481eb73cd043b220c997e1c5e12585e2cfe1c89a28d17679f1aa16fa97b3b8d54dcbbd2a54a7498e0",
        "pids": [
            2124
        ],
        "md5": "a765effa081acbbda31fe8c9ceb59571"
    },
    {
        "yara": [],
        "sha1": "1d1899760f73b95201ed0ba637bb3876520057d8",
        "name": "3050056929debf82_dev_st_ot_full16.gif",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_ot_full16.gif",
        "type": "GIF image data, version 89a, 16 x 16",
        "sha256": "3050056929debf824d9979743761dc1d29e75172e332017a09e9d492440f003c",
        "urls": [],
        "crc32": "75F7E730",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/3050056929debf82_dev_st_ot_full16.gif",
        "ssdeep": null,
        "size": 121,
        "sha512": "ed4733e05e0943d368c1649f4ae54978eb6d1e4d42c6c1b4197d0d1ca25649fcb04a0404c839ebfacaaf9046a2a64dffbb0c35e9d872fb8a230e2776e04d782d",
        "pids": [
            2124
        ],
        "md5": "85f5f3a0d3b8a712940c0e6f72b48578"
    },
    {
        "yara": [],
        "sha1": "4ec3f3e5ce304d97fd00b9fc324f421a916ccd1c",
        "name": "babbe8b4c5ed5a20_item_title_head.gif",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\img\\item_title_head.gif",
        "type": "GIF image data, version 89a, 16 x 16",
        "sha256": "babbe8b4c5ed5a200ae9b89c809b24e573c72aa6b6f6491972bc5ae629d7bfd1",
        "urls": [],
        "crc32": "FBBBDD9E",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/babbe8b4c5ed5a20_item_title_head.gif",
        "ssdeep": null,
        "size": 976,
        "sha512": "aecd665737a6dfe0078665d05ad0dd21dd5873ea9998538223adc9550244ed217e068a06f38733fe92ac342a5b3e1e0b06062a15b7462a9b9ab09b5f340ec8ac",
        "pids": [
            2124
        ],
        "md5": "3f0e7dbc2e46faa41c777e4ba2fe7196"
    },
    {
        "yara": [],
        "sha1": "7bcfbe3d4a6646c9223ccab07144103f73758eec",
        "name": "a53140a7f8d446ab_icnk_t.gif",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\icnk_t.gif",
        "type": "GIF image data, version 89a, 24 x 24",
        "sha256": "a53140a7f8d446abbe82df03ca1079306d8f8242a1661f26d8ca840c1539064a",
        "urls": [],
        "crc32": "CE5AAFAF",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/a53140a7f8d446ab_icnk_t.gif",
        "ssdeep": null,
        "size": 151,
        "sha512": "edaef3b82187ea55d434546064dd397e790836826e380e6aa2f59442500ca3aeb6b1e63bbbb7eb80c2f3672793fd67d80c34089577a26202ed55a23d64b3f638",
        "pids": [
            2124
        ],
        "md5": "e7311ad533d3aef29dbeff1e3560f723"
    },
    {
        "yara": [],
        "sha1": "36712229323e1e0e423f28448fc4ff01c949aec5",
        "name": "5ec4d7b6a10ae764_s_pr_dv1.gif",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\s_pr_dv1.gif",
        "type": "GIF image data, version 89a, 20 x 20",
        "sha256": "5ec4d7b6a10ae764fafe2be847eebeb71db398842cce42da2b543c8aa009e94a",
        "urls": [],
        "crc32": "F4F57B15",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/5ec4d7b6a10ae764_s_pr_dv1.gif",
        "ssdeep": null,
        "size": 157,
        "sha512": "f09d62ddc3737fbc0cdd1a269aed11c7f986b0374a272b4b835375e4cac426fe166a0b75a3a7da89d840614b7d274d8351bfa6fd499a47a297bc9cca8f6eb84f",
        "pids": [
            2124
        ],
        "md5": "703fa5c08988b07082e66b7d5514522e"
    },
    {
        "yara": [],
        "sha1": "0a58e350b8cddf96680732968e0fc73516a3236b",
        "name": "6c531c56b5ca56d1_p_pri030.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_pri030.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "6c531c56b5ca56d144525710540aea172439f214319be11aef7924dccbcbbce5",
        "urls": [],
        "crc32": "EEAD0175",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/6c531c56b5ca56d1_p_pri030.html",
        "ssdeep": null,
        "size": 3787,
        "sha512": "989e444434b26162b904fa99e54748092e9192ce6be934df7602a5ad245577052b7b8eb34b66a48697dc7eab48cad5513ed590de191acd467ea3ba3e7d9e7f80",
        "pids": [
            2124
        ],
        "md5": "b3aa6068b069e24409340b7c674652eb"
    },
    {
        "yara": [],
        "sha1": "c4c4359102c334dd4df3e310915dab946470cd89",
        "name": "c51ba29bb3d00c39_icon_right_access.gif",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_right_access.gif",
        "type": "GIF image data, version 89a, 20 x 16",
        "sha256": "c51ba29bb3d00c390807344bd9d970cb3246a271aa455d2286614037dcaf83ac",
        "urls": [],
        "crc32": "8760C2CF",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/c51ba29bb3d00c39_icon_right_access.gif",
        "ssdeep": null,
        "size": 215,
        "sha512": "2eb874cde1b4535de8db45f3395af51f15e7bbb2670c0099851ecc2309c35ee89e671068728398b02a6dc91ec2965cadb1abb45260e6c33e91994204d333279b",
        "pids": [
            2124
        ],
        "md5": "d02e8b98b857e4abf00b2d5644a9e537"
    },
    {
        "yara": [],
        "sha1": "10ff2ce7f72e384d09dfd52b41c01ea21e6a70bf",
        "name": "73e8e9cd2927734a_dev_st_p100-25_16.gif",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_p100-25_16.gif",
        "type": "GIF image data, version 89a, 82 x 16",
        "sha256": "73e8e9cd2927734a0bc3afc91b622fcbb89b3b34d8703e667a63cc278928a7d2",
        "urls": [],
        "crc32": "DAECA9A3",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/73e8e9cd2927734a_dev_st_p100-25_16.gif",
        "ssdeep": null,
        "size": 168,
        "sha512": "073e56746332e2df10c4a900ae314108905910bd65c86eb747d4291942eb3fa07f7baec4366f590d943d09adc0cd392b45428713141cca9437a8b7900f777828",
        "pids": [
            2124
        ],
        "md5": "470a729122e4cfc78e00a8bfae0c8f5e"
    },
    {
        "yara": [],
        "sha1": "b6c8723f8eb440fb3d42d8d22503e3c53b64c293",
        "name": "df2f4d6a497cfc80_set8080.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set8080.html",
        "type": "HTML document, ASCII text, with very long lines, with CRLF line terminators",
        "sha256": "df2f4d6a497cfc80535915b5eaafae85d601b0d1811cc89257dcd70ea4e5104b",
        "urls": [],
        "crc32": "9B647C69",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/df2f4d6a497cfc80_set8080.html",
        "ssdeep": null,
        "size": 4394,
        "sha512": "48c64d13f58a40aaf7be54500ae4be7d74d7936882bc6ecd8e202319ffe3dff6597facf91ce7beda575b1c6ad91d61418e17fdb65a722cf397c8afcfb3f2f0b8",
        "pids": [
            2124
        ],
        "md5": "0c84b0bbc7a8752019b380a6584847fa"
    },
    {
        "yara": [],
        "sha1": "7c4d48b27cf94c14de7031e9dc61055a44cddecd",
        "name": "b55c2908910dd151_dev_st_prollnend16.gif",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_prollnend16.gif",
        "type": "GIF image data, version 89a, 16 x 16",
        "sha256": "b55c2908910dd151d886dcc09bb1c6a5f66ec58e1314e7d6da87774c3f21b63c",
        "urls": [],
        "crc32": "A7CEB44D",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/b55c2908910dd151_dev_st_prollnend16.gif",
        "ssdeep": null,
        "size": 111,
        "sha512": "44b63cbcf02e2624f991d27dc5ad9b08a567073455a6f7ee54585be81209ce821ca2ba95d6747871228a84ba97e2b9227aadce12da1bb4a94b3bee635cc4016b",
        "pids": [
            2124
        ],
        "md5": "caec754f4ad47e28cefcb6b6659ebedc"
    },
    {
        "yara": [],
        "sha1": "e7e77ba6d4854a460d756f83b6b398081605ad2f",
        "name": "e9bc54508d1185c7_job2600.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job2600.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "e9bc54508d1185c7001d97662482a45360e84d90f2e15591e076057dc60f0524",
        "urls": [],
        "crc32": "7FED6A0A",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/e9bc54508d1185c7_job2600.html",
        "ssdeep": null,
        "size": 2726,
        "sha512": "62fb1e13592d67cc21691ab131f57a2347106edc65515554271fa07d5ac9d37568a6d5140d852c9afc279a4e822c123130c8351e8875ee0bf81654441a1d7951",
        "pids": [
            2124
        ],
        "md5": "dc59f4b796f153f73eba8aa509b506d0"
    },
    {
        "yara": [],
        "sha1": "3086ab156c50f4d8683749fa91f963f9bf8e12a1",
        "name": "163a00eb94f5fa30_dev_st_scall16.gif",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_scall16.gif",
        "type": "GIF image data, version 89a, 16 x 16",
        "sha256": "163a00eb94f5fa30d907637bd6eaa3ac95e7e5274c8b0b42cb0336b8a4bc0e8a",
        "urls": [],
        "crc32": "486C3583",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/163a00eb94f5fa30_dev_st_scall16.gif",
        "ssdeep": null,
        "size": 116,
        "sha512": "5d4012972e54b8e6919541db61ec719aa6213e3753c85fa830e863c14797656518c432f4b97b3bddeda5acc39e3e330f566f25c0014f7fe3b1456c13b71b8bbc",
        "pids": [
            2124
        ],
        "md5": "0d66c962bab99eb0f2276098fac561e0"
    },
    {
        "yara": [],
        "sha1": "4f31a6b816955659898bd69455e20f3da3e8f323",
        "name": "8b45c26fd5f99f09_dev_st_proll50_16.gif",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_proll50_16.gif",
        "type": "GIF image data, version 89a, 16 x 16",
        "sha256": "8b45c26fd5f99f095ab9051ae41d2e8f066a6b6b6e7723388c13289edc341e87",
        "urls": [],
        "crc32": "07F5B920",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/8b45c26fd5f99f09_dev_st_proll50_16.gif",
        "ssdeep": null,
        "size": 93,
        "sha512": "86f645debb80a9de0e11c4c09f0382fdb12e4bde9996d6c25a565d69dedd23b40fe02b2a5c33eb89388ccbae4f5699013613e9c7a9cba48928b5af3823c07be3",
        "pids": [
            2124
        ],
        "md5": "7054ecb5fbc3f743ade2456fbea1bd0f"
    },
    {
        "yara": [],
        "sha1": "fbff14063b6a721f96bf7b3d8e3776d3f2b235a2",
        "name": "9ff81f53863bcb87_dev_st_error16.gif",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_error16.gif",
        "type": "GIF image data, version 89a, 16 x 16",
        "sha256": "9ff81f53863bcb872520869f0263aed61e2010b7588c504788b91b3273fc0df7",
        "urls": [],
        "crc32": "C680B084",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/9ff81f53863bcb87_dev_st_error16.gif",
        "ssdeep": null,
        "size": 124,
        "sha512": "ae36d1f91ba56352b6536e2ff97394997620420f87da15b86a4d2349519d3176725cd8ef7ca2b400ea2d69131c78be0eb31d61ab5a5412d0eecc9f4ba506c147",
        "pids": [
            2124
        ],
        "md5": "6e27d7cb0e3d87237fb60337c54ba5ca"
    },
    {
        "yara": [],
        "sha1": "80c0229ba00e08312676e01315cfd36e36d4e2db",
        "name": "b5a18b551ded75ef_keyicon01.gif",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\keyicon01.gif",
        "type": "GIF image data, version 89a, 22 x 22",
        "sha256": "b5a18b551ded75ef9a6f5bfce487e171bdd5f2c6afafdba7652e60fa3bab26db",
        "urls": [],
        "crc32": "CCE70626",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/b5a18b551ded75ef_keyicon01.gif",
        "ssdeep": null,
        "size": 130,
        "sha512": "006b2fe6d66f3f4be6de4b2326953730fc8790bc5ac66e5de852dcaa4e929f012843c00547547551932b55541929c97f8d630b74f4dc698d884b3c86fc0379b9",
        "pids": [
            2124
        ],
        "md5": "7fd037ac1fd85fedde9e5f34613c5baa"
    },
    {
        "yara": [],
        "sha1": "b06bf745d85a733927039d77372308f02505d78b",
        "name": "f441148244d0f2a2_set7220.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set7220.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "f441148244d0f2a2ae8a0539009a6bbea68be299bcf0eea528d933467df5efe3",
        "urls": [],
        "crc32": "1D3D769F",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/f441148244d0f2a2_set7220.html",
        "ssdeep": null,
        "size": 6668,
        "sha512": "d03544c6b8f08afd448d92f596cda9073b52fa4fad2a7649de36162322976dc9a135fbfaa2c1d6549816febd36acec231267d25b7dee7ca49ae34ba6af6b2a03",
        "pids": [
            2124
        ],
        "md5": "44724f1374a857d62631a9d926ab7e02"
    },
    {
        "yara": [],
        "sha1": "5619db3d5481405f1b2ae6e85011e10a18e7c1cb",
        "name": "8a81dd2a98cf7be9_p_box010.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_box010.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "8a81dd2a98cf7be9194aa43804838bd73c33f795122442cb6e31ed78919bd817",
        "urls": [],
        "crc32": "3675BB30",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/8a81dd2a98cf7be9_p_box010.html",
        "ssdeep": null,
        "size": 2852,
        "sha512": "fb8f6de09e4bc199c122669f3993b4b9081db28bedeb2d27916f4224405d8baf4c8601df15994366d9cd2906db75947061c7d24c275dcc5236fe3cbf879d7a6c",
        "pids": [
            2124
        ],
        "md5": "5056c2ef05eecced2022a1086142b902"
    },
    {
        "yara": [],
        "sha1": "96c2a1f0f2d2f392c2e600c03b1bbb184caf51e3",
        "name": "f5152ce38d7a2f99_box1220.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1220.html",
        "type": "HTML document, ASCII text, with very long lines, with CRLF line terminators",
        "sha256": "f5152ce38d7a2f991999fac0cd961b2cf5cea28dfa405cf272b08002e7e52bcf",
        "urls": [],
        "crc32": "85E61410",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/f5152ce38d7a2f99_box1220.html",
        "ssdeep": null,
        "size": 20422,
        "sha512": "2c5ea3c79a98e7b29f7ab757e66b09295d8d7fcda2be9d07eed27db96472beadb67366ac34c774f0570eab4dc18c499c3ff0426c6d72b8eb54dde050d110a841",
        "pids": [
            2124
        ],
        "md5": "f3b6a3f24cf097e23e1a98c8b45763ce"
    },
    {
        "yara": [],
        "sha1": "d17a4d7f8e58b4b7a49cd64d81f5e970e1fce8ea",
        "name": "1ed332b301ffe2c1_box1240.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1240.html",
        "type": "HTML document, ASCII text, with very long lines, with CRLF line terminators",
        "sha256": "1ed332b301ffe2c1db08d4a06a2f290a5d340fc3e2be539325c019fc29e2ad24",
        "urls": [],
        "crc32": "8B25A343",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/1ed332b301ffe2c1_box1240.html",
        "ssdeep": null,
        "size": 7562,
        "sha512": "0d0e89ec9ba594b0523f16e8bc0f57b1e21d7f35d440cd0beb9d2950c5ddc160d839ba8997a813127cf219d2920a35aca6ca638e70f1df971c0349c8a764c007",
        "pids": [
            2124
        ],
        "md5": "e7f85c7a672b1cbf47c525db44cdf74d"
    },
    {
        "yara": [],
        "sha1": "e99ca12e6576a76bc395e1eeb1cee2f0fbebd7d4",
        "name": "508d4f6ebe1e240d_icon_jl_web.gif",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_jl_web.gif",
        "type": "GIF image data, version 89a, 20 x 16",
        "sha256": "508d4f6ebe1e240d20d871493f3e5381e80c5ccff6c6cb6f80460856c7f4a8f8",
        "urls": [],
        "crc32": "89BB648D",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/508d4f6ebe1e240d_icon_jl_web.gif",
        "ssdeep": null,
        "size": 121,
        "sha512": "82dd0e65e2f948091fa7d91c8624a855bafd7bf3b4a0bac88586b6b407d589ee238cf4ddec32b2c2d4e0d03d0e6a9ee965dacbad0b842c2b162c924f2a63de33",
        "pids": [
            2124
        ],
        "md5": "5991246aa1dcaa722762eee823d2d905"
    },
    {
        "yara": [],
        "sha1": "8a8006bd7389ddef782d0332d199524da9fe4535",
        "name": "e7c64d7eb5433419_set0980a.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0980a.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "e7c64d7eb543341904f0cb3c215be9becfa6f3e982d7dd21d151d464c6a7f249",
        "urls": [],
        "crc32": "D9AF6610",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/e7c64d7eb5433419_set0980a.html",
        "ssdeep": null,
        "size": 2277,
        "sha512": "a1af6b0438788a03b117be0205f3f1d897f1a2e9cdf35dbe58521b10de0d1ea14f365b72fb51130e51f4d04abd80995d1deb41a965612996c7a616138b0edddc",
        "pids": [
            2124
        ],
        "md5": "5dc7af4e153261a760ae7a1d617540a6"
    },
    {
        "yara": [],
        "sha1": "da2ef55e47a7a66db24111ba55675d50c870ddfc",
        "name": "ff6b978362806437_set4130.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4130.html",
        "type": "HTML document, ASCII text, with very long lines, with CRLF line terminators",
        "sha256": "ff6b978362806437c8bf354c66ec5901ad00a49d7484d9429538aa79da646d91",
        "urls": [],
        "crc32": "7EFA69B6",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/ff6b978362806437_set4130.html",
        "ssdeep": null,
        "size": 3986,
        "sha512": "7a1548e9943cae8259a23568d41e3789e2739c01a5185639fcf9965e37d5a138bead65c7bb208fb81d5322b0b2f7b1561944a745ca68fef3b0e96a105412fade",
        "pids": [
            2124
        ],
        "md5": "ac9024f213b6a29fbd8baf2163342bc0"
    },
    {
        "yara": [],
        "sha1": "1d0d0bf648a1f8cd5351f69dab2c4455523fa336",
        "name": "7877abb38690ec81_p_box070.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_box070.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "7877abb38690ec8140d9f2189169e32abce290c301c0d8855b4766a95b65e80f",
        "urls": [],
        "crc32": "B1BF08EC",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/7877abb38690ec81_p_box070.html",
        "ssdeep": null,
        "size": 2414,
        "sha512": "7108a858840378b1b82367e9ebfcccae9a64af269f496600211aa3ee2491c0992f1453ffff1b4cfbc6db80fff8ec8a2e11f777efea49373cf981fdcffa621d1a",
        "pids": [
            2124
        ],
        "md5": "d5a8aa5aba7be755ee69ab3da54c62e1"
    },
    {
        "yara": [],
        "sha1": "625cca6666e269cddd1f206f766c5ee48a756ed4",
        "name": "6deb1471d43a1df7_dev_st_prollend16.gif",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_prollend16.gif",
        "type": "GIF image data, version 89a, 16 x 16",
        "sha256": "6deb1471d43a1df7b3ca0c6f4c29595012660d1996a378f03f769800a7f9e582",
        "urls": [],
        "crc32": "30A45AC2",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/6deb1471d43a1df7_dev_st_prollend16.gif",
        "ssdeep": null,
        "size": 94,
        "sha512": "f99e5b53b0652273e28cfa9d9c551ae52ff32d799af9a137829448dc3e36e7818973ab1c124a74e6338a95e437d9b924da617a65a5460bbd4d05dc30fab7b206",
        "pids": [
            2124
        ],
        "md5": "e3ecbbc0306075ff1e7dcf7d72efa295"
    },
    {
        "yara": [],
        "sha1": "51d7a9375463d0605c207f525031248e3ee7c91f",
        "name": "ec3a734c881b5445_dev_st_offline_16.gif",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_offline_16.gif",
        "type": "GIF image data, version 89a, 16 x 16",
        "sha256": "ec3a734c881b5445277dac6ed57c7ce158c7b2bf2e4e3b24599cd5ba7eae2e94",
        "urls": [],
        "crc32": "C1A372F9",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/ec3a734c881b5445_dev_st_offline_16.gif",
        "ssdeep": null,
        "size": 120,
        "sha512": "c4d31ca49422896562816d895c28c759fae6c1906344922f4a23ffe0da0fb0d99517bed086dbb9271beeaedc4ad1dca2da3a79d996400d867c8cc1d9d8b1aaac",
        "pids": [
            2124
        ],
        "md5": "2d1598fc9c74f0e7929168f2c968f7e2"
    },
    {
        "yara": [],
        "sha1": "f260e985f07745fc727c1e4d9897e9c2a343df79",
        "name": "e5333c0c81068ccf_set4230a.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4230a.html",
        "type": "HTML document, ASCII text, with very long lines, with CRLF line terminators",
        "sha256": "e5333c0c81068ccf8d74bffadd2ce03ca952770ac19305faab3bf7ba789a70ea",
        "urls": [],
        "crc32": "B23B06C1",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/e5333c0c81068ccf_set4230a.html",
        "ssdeep": null,
        "size": 3006,
        "sha512": "1be2f9ba639f21fe694cc1a17071c6d267b397a05e34eb569f13f058fed33a9eb551140f0edfd5a6191942c7f53504729aca3dc65857bc652b8105a0456a878e",
        "pids": [
            2124
        ],
        "md5": "40393a7de42e587a984e1b3dab339ff3"
    },
    {
        "yara": [],
        "sha1": "653405d32fcb0f19a031d53b1db3b595faa66cb1",
        "name": "8661b0bdbd5e0887_box1270.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1270.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "8661b0bdbd5e0887e64939801ba315e100a679553560a60327efcf86ce473d36",
        "urls": [],
        "crc32": "C7442C19",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/8661b0bdbd5e0887_box1270.html",
        "ssdeep": null,
        "size": 3085,
        "sha512": "5e01852d053b60703a9c9fae096c8365191af671b7c8fbbac61a097d4baf2482325acd67ea69fe721fb02d43129ca890785fbc6c95c6f942e51ab830431d20d1",
        "pids": [
            2124
        ],
        "md5": "66ee6833c7b6d7afb5802320413ebc09"
    },
    {
        "yara": [],
        "sha1": "0a491fb0d3650f21b0de138a499721f1f508788f",
        "name": "34157d564afbdabb_set4180.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4180.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "34157d564afbdabbeca3fec189093fa11de8c18f8f8c5df1f7c1134b6c54bb87",
        "urls": [],
        "crc32": "A46ADE7D",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/34157d564afbdabb_set4180.html",
        "ssdeep": null,
        "size": 4048,
        "sha512": "58b454243c431850103b592a7c75f2255066ac3ba341ff711cc988f0bc964cb1333192837f939409c35f668684a0b9491bacfb36734b2a60dddff01977c371dc",
        "pids": [
            2124
        ],
        "md5": "64dc6b914923f4a21c4dec773e990083"
    },
    {
        "yara": [],
        "sha1": "f38d723b811a4f0ceccae420814283f1a7e4b904",
        "name": "06943eeb6446f2a2_box1350.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1350.html",
        "type": "HTML document, ASCII text, with very long lines, with CRLF line terminators",
        "sha256": "06943eeb6446f2a2e4289e905fbd3c9f9adb2041a5f86831ffca5307b2fe55d4",
        "urls": [],
        "crc32": "74BF9841",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/06943eeb6446f2a2_box1350.html",
        "ssdeep": null,
        "size": 11038,
        "sha512": "59c938f05dd5d170a4c3da8d4748dea771e7eb6267b4491ab220c242b5699ea085535c245a8ec308785bdf5694535d4d68cd1aadd0b06d980cf3d727705c5958",
        "pids": [
            2124
        ],
        "md5": "f2f1a8d3e5f8e0ba19186eb60ebb098f"
    },
    {
        "yara": [],
        "sha1": "4980026361a86057e8de83f2f2826e5b47f0ba16",
        "name": "8c8ede328adc07d9_adr0550.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0550.html",
        "type": "HTML document, ASCII text, with very long lines, with CRLF line terminators",
        "sha256": "8c8ede328adc07d9847a7f4a302464483c757eba3ce4166a119e86969657335d",
        "urls": [],
        "crc32": "8C5EE5B2",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/8c8ede328adc07d9_adr0550.html",
        "ssdeep": null,
        "size": 7246,
        "sha512": "bee3df79187a83ae32fa2947d77f6812756523d7122a02e55e08a242e79a5b5a1e4d7a69602055cce2214f08012f283efb3f4251138f22e0a9529de06961683f",
        "pids": [
            2124
        ],
        "md5": "953e8301600ddf0afd3390f74ae87d52"
    },
    {
        "yara": [],
        "sha1": "e54abb09722e537760442660f310692a254eeaa0",
        "name": "b7a4f941680fb7fa_job2700.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job2700.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "b7a4f941680fb7fa3f1da363518ef553b3113c1cf9a14347a79af31291ca716f",
        "urls": [],
        "crc32": "9D759B1F",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/b7a4f941680fb7fa_job2700.html",
        "ssdeep": null,
        "size": 3038,
        "sha512": "d0eec2fd64800a9c1835bf9d7ec4d481877f99e79fd5e84970a874902db6251120da53085977f6619103acfed7d274942c92e019b7160354b303fc953c3fa9a7",
        "pids": [
            2124
        ],
        "md5": "a3e7c6349ad087127838ba9301aec0be"
    },
    {
        "yara": [],
        "sha1": "6b6c17671a9a625a0b22cd5e3cd1dee183608734",
        "name": "6e6055c3e3685927_icnk_y.gif",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\icnk_y.gif",
        "type": "GIF image data, version 89a, 24 x 24",
        "sha256": "6e6055c3e368592720a7a427a97b0bd89ae6243fd8a7ea7f681ae4408c6efa08",
        "urls": [],
        "crc32": "3E634513",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/6e6055c3e3685927_icnk_y.gif",
        "ssdeep": null,
        "size": 141,
        "sha512": "e59819f89a4e1bf67d14485af3a884dfbdc8a568f9c052f67e24db3e57f68565ba1934ae6178df371309de723acde8d02ad2ff9e30d6c5d3a6a88ed69d46a164",
        "pids": [
            2124
        ],
        "md5": "60e6f57b3f53b925457e2369d8761f43"
    },
    {
        "yara": [],
        "sha1": "8415a399712e0d7ad974bcf13c9499ed9bfbc044",
        "name": "7095aed0f7911165_set6130.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6130.html",
        "type": "HTML document, ASCII text, with very long lines, with CRLF line terminators",
        "sha256": "7095aed0f791116506ee239dcd8d73df213e8d1faf9012dd97e3d5cd16426a7e",
        "urls": [],
        "crc32": "35B51331",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/7095aed0f7911165_set6130.html",
        "ssdeep": null,
        "size": 5446,
        "sha512": "b317bfa8bf2d470a4455e91b28ed24194d74c13b75542ea8e5dd8fd4b98cef302f80c60ebd056c862e05cd6b94f88e2a92ff48a8fba9da227eadb9aa1752b176",
        "pids": [
            2124
        ],
        "md5": "54c5bfb910fef1b28b25b0d8aec66e04"
    },
    {
        "yara": [],
        "sha1": "a691ec2c7d01b6d3e3494bbf2bf406c7e7f65147",
        "name": "3b8bdbdacd8379f6_dev_st_pnend16.gif",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_pnend16.gif",
        "type": "GIF image data, version 89a, 16 x 16",
        "sha256": "3b8bdbdacd8379f6d14aa2e942d56c3fe0d3e4988b749ed258c741af253479ea",
        "urls": [],
        "crc32": "9965A5A2",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/3b8bdbdacd8379f6_dev_st_pnend16.gif",
        "ssdeep": null,
        "size": 150,
        "sha512": "359de20f7140bf567cc7661c06dc9c85ff07d4211a4cad9d0b780ff312777c5f78ca63ec11d19efe4cac63712cf42ac74c764b8d9a32da516ce335f8273bffa6",
        "pids": [
            2124
        ],
        "md5": "f51b12e2f1d9efb710dfbd7d7859812c"
    },
    {
        "yara": [],
        "sha1": "5c67b3facc4791c89bd72365864d095704c01d74",
        "name": "fa18c17fa3aaba8c_logo01.gif",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\logo01.gif",
        "type": "GIF image data, version 89a, 226 x 28",
        "sha256": "fa18c17fa3aaba8c2ede64c6ca557dfedcee993089806cb4d257584f44c79595",
        "urls": [],
        "crc32": "FC416565",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/fa18c17fa3aaba8c_logo01.gif",
        "ssdeep": null,
        "size": 3607,
        "sha512": "eb6877af0015f0ae2dc2543a9299fb4ba66d5521873c1ec5cc795355d0a3c782f1ed5a21746be3458da4942d520cd1beb6f8ce2d84f77938fa9302f2df96ae33",
        "pids": [
            2124
        ],
        "md5": "24bbadae13a56c407d805a6684c8f041"
    },
    {
        "yara": [],
        "sha1": "b24ce35775df102c278a8dcca6ac5b4fdf70dcd1",
        "name": "af1e15fd5e402211_set6210.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6210.html",
        "type": "HTML document, ASCII text, with very long lines, with CRLF line terminators",
        "sha256": "af1e15fd5e4022116b587b5bb3541be16f053a3489bd33e0c399896f1ca06595",
        "urls": [],
        "crc32": "E610061C",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/af1e15fd5e402211_set6210.html",
        "ssdeep": null,
        "size": 9113,
        "sha512": "a12ee91ac857a09615878ec485ffc56fc8723ee02bfbc4ed430a9e8874374d7bb4d79a046e039d4c9df754dc5c35e97e6a5a8c62e54736dc8d8ebfc5dcaf9a55",
        "pids": [
            2124
        ],
        "md5": "c0443099798ea2ea3f2690a7ca0916ed"
    },
    {
        "yara": [],
        "sha1": "dd03f429bee3913bb320bf4054ffe85eb7d9f176",
        "name": "ad53d01627948564_set4000.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4000.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "ad53d016279485641a2c340856a92f01b25d9ab3692a0e8c3987a4aef54a6e56",
        "urls": [],
        "crc32": "19855937",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/ad53d01627948564_set4000.html",
        "ssdeep": null,
        "size": 9414,
        "sha512": "1f49c3dbdfcdb718d3c2399aed12244e7fdd4d3471e8cf7e7704fbccff9d474094a832da761cbf511b5f5ab6ca20f7940804f4ec74006f0e2963e1f0db947742",
        "pids": [
            2124
        ],
        "md5": "a9d57c831ece0503633f568150a7b04f"
    },
    {
        "yara": [],
        "sha1": "5b36fea079437606b6c20f00b978b9bfc9878156",
        "name": "925f4790ac13f6b3_set6340.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6340.html",
        "type": "HTML document, ASCII text, with very long lines, with CRLF line terminators",
        "sha256": "925f4790ac13f6b3638db5e90de4c62c1b6fa9e7fe152be6cce7bdaec85fbb52",
        "urls": [],
        "crc32": "8D39243B",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/925f4790ac13f6b3_set6340.html",
        "ssdeep": null,
        "size": 7710,
        "sha512": "432360531520dce7cd1d17d8c60afe44d7bacf3de1682a54276f9616b0ded75e005a66b92f6e3c98c295ab0c38914d2e16b194f8ac7a2f4e9de3042f08dd4fb7",
        "pids": [
            2124
        ],
        "md5": "4188f6f60a75033568fceffd9777ed9e"
    },
    {
        "yara": [],
        "sha1": "557ba114c27a84b8aa1a521063328064a9fa0d2a",
        "name": "489d312f90683320_dev_st_proll75_16.gif",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_proll75_16.gif",
        "type": "GIF image data, version 89a, 16 x 16",
        "sha256": "489d312f90683320b0a63540370839b750bb9801cbaf11d2e1f0517e03cc3430",
        "urls": [],
        "crc32": "762102EC",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/489d312f90683320_dev_st_proll75_16.gif",
        "ssdeep": null,
        "size": 90,
        "sha512": "f124a9a988a7cd86f9aa78d2cc086e0227c612d62fc5b5179234547f5eef00e701119c7000c4580e7fa84b76dffb37e9eb558a04292a20e06989d657bf0876ab",
        "pids": [
            2124
        ],
        "md5": "3d896382fdf58f174dc90a6082f4e7af"
    },
    {
        "yara": [],
        "sha1": "5f31f1de5d9bc496c8392b0d4034f3fc74dd96f0",
        "name": "efdc23768dc4d48e_dev_st_dh.gif",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_dh.gif",
        "type": "GIF image data, version 89a, 16 x 16",
        "sha256": "efdc23768dc4d48ece8883434626761f9bcc8324535690eaaa021db0f487caa9",
        "urls": [],
        "crc32": "294F94D1",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/efdc23768dc4d48e_dev_st_dh.gif",
        "ssdeep": null,
        "size": 143,
        "sha512": "4eb62b56e0bd35a127a44c297135524f50dea5a8323dbeea089cf511a94aec67464d9b386177ea5dd6986d398cbfd796614f78da812487603d45a45255cc2576",
        "pids": [
            2124
        ],
        "md5": "ce858c2881fa1ff93785558bc05c690d"
    },
    {
        "yara": [],
        "sha1": "4719e63d2967eb78a8da7ec4ccaf5a68db10f441",
        "name": "9d66ced629238d4b_btn_net_ricoh.gif",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\btn_net_ricoh.gif",
        "type": "GIF image data, version 89a, 111 x 44",
        "sha256": "9d66ced629238d4b0393376bc9495f7ce8f9448403f0f22416376dff2ffdc20d",
        "urls": [],
        "crc32": "C0270592",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/9d66ced629238d4b_btn_net_ricoh.gif",
        "ssdeep": null,
        "size": 568,
        "sha512": "90c60556d7eba8e72726c671cb984ca90f911cf0bdb44aa26bf37e7dcbb4ef3babbb0d9046f7d8ecf1e844053be1637fd316e2caaae86ea2e9374e5a00ab8cf7",
        "pids": [
            2124
        ],
        "md5": "94bbc56dcc6a94c555b6bb353dc3f43c"
    },
    {
        "yara": [],
        "sha1": "305fa123e1c56cef52222adc5bb82e41ed425979",
        "name": "14181541d4b8ef97_set9330.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set9330.html",
        "type": "HTML document, ASCII text, with very long lines, with CRLF line terminators",
        "sha256": "14181541d4b8ef97d4f1dea9709a9a78cfa9201bd39a5f43e072f86eeae219f4",
        "urls": [],
        "crc32": "03A9EB76",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/14181541d4b8ef97_set9330.html",
        "ssdeep": null,
        "size": 3763,
        "sha512": "9cce88635402d246acc7e9fefd427deba1970e715b8bffb31f14a78b2732d7272f1c1ea1d2d0f162e6db9abbec7f69c50a26b39d3ba9af83fc36ebc234622bc2",
        "pids": [
            2124
        ],
        "md5": "6adec6d9bcfa4636b16a46e6855fb759"
    },
    {
        "yara": [],
        "sha1": "ea37a225c9cdff586e6b01df8a120465056595a2",
        "name": "3bb2f7127edc5e16_p_box020.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_box020.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "3bb2f7127edc5e164aad8c5d6ea5e07c49dcdaf4499991c2bcbebdf0b6d8b752",
        "urls": [],
        "crc32": "AAB01FF9",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/3bb2f7127edc5e16_p_box020.html",
        "ssdeep": null,
        "size": 3448,
        "sha512": "d9ba30212394f8bf7f80780f8061d1e9c6528729e376b908b9551202efad2c8e0922dbe09c3907fea9e2ef10388d618ee28526722cb36bb7d6bc05d85287fd04",
        "pids": [
            2124
        ],
        "md5": "edc685b0eb2a5a3b352c745bc5d07b6b"
    },
    {
        "yara": [],
        "sha1": "3cde3c55cc2c6330c2b81a6ec7d625aa81f03e7d",
        "name": "a9cb92a4262271bc_set0980c.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0980c.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "a9cb92a4262271bc68718887324db8aa2c283944440059421f1bdf0c10778725",
        "urls": [],
        "crc32": "27EA7FCA",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/a9cb92a4262271bc_set0980c.html",
        "ssdeep": null,
        "size": 2490,
        "sha512": "9206220763a0ac99107534cb9da0accfe61c3177b2100bf0d837aac10af908b6829474296711bdd04e096bc19c4de020eaf3de581d6b38e08c5f0c8c76d37f82",
        "pids": [
            2124
        ],
        "md5": "109bcf0ebd8ae8984bd990fa1678c792"
    },
    {
        "yara": [],
        "sha1": "cda75e25110fd0cdc1700fd8b0390bd0ee96cc67",
        "name": "655e2a5991e4c5b6_set6260.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6260.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "655e2a5991e4c5b60e410a024d11f8885e93a565bd4c19ec84a67db2323045f7",
        "urls": [],
        "crc32": "238ED3E9",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/655e2a5991e4c5b6_set6260.html",
        "ssdeep": null,
        "size": 4626,
        "sha512": "9d89d8d46f3b9d1ca18c550b5d962dd49fb95f03773e9e8d542bb2b89bd04f381e97fb41ebd371d794d11145082225aae67ae97f98f0ceed0a6e26b1c4bf3d0d",
        "pids": [
            2124
        ],
        "md5": "2825c707cfe94af0d978c4e5fa5e7edc"
    },
    {
        "yara": [],
        "sha1": "b3ac8ece9a821b64aa5aa7e7eb2966d54d13458c",
        "name": "94fe12bcc53b6782_set6220.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6220.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "94fe12bcc53b6782a7df6d0ec95255e5aa703cb7a041ebb515db4b2536e4937b",
        "urls": [],
        "crc32": "DB545B66",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/94fe12bcc53b6782_set6220.html",
        "ssdeep": null,
        "size": 4514,
        "sha512": "4202299bda3fa51845dd637581ae12af7ea05c0eb2c16904d636817ab63848f42d6a776b5c46f29e27bb29123e2107a8772ec14fc6904dceb953397104692c70",
        "pids": [
            2124
        ],
        "md5": "506ce5efd2aef949721daa25dff100a6"
    },
    {
        "yara": [],
        "sha1": "f1ad5b2b86da1ae013b5f0f31e48fd5c58d91fc6",
        "name": "1c82f818625b595c_set6350.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6350.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "1c82f818625b595c1b75bfd8fa8ea981a3de939babfac7651b8387cf9ea40daf",
        "urls": [],
        "crc32": "18CDD7A5",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/1c82f818625b595c_set6350.html",
        "ssdeep": null,
        "size": 8554,
        "sha512": "3d27b47f9f431df40f28cd134b9eafe2dd0cbe9099c2ba87535a36e1f7f6fe8d9ae43dcde5a6ebfdd8ed0e350aaa84064878f21f15d6c03d4140e91f3dae1022",
        "pids": [
            2124
        ],
        "md5": "069f2c60b94f3b22ba00f32aa1899b53"
    },
    {
        "yara": [],
        "sha1": "4d4e5b43f1e4b5ea35c0033e00874c8a707c78dd",
        "name": "1688f112468ffe1b_box1285.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1285.html",
        "type": "HTML document, ASCII text, with very long lines, with CRLF line terminators",
        "sha256": "1688f112468ffe1b760353db99e434655039b285b932214154add8542eeeab16",
        "urls": [],
        "crc32": "D11E7CE5",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/1688f112468ffe1b_box1285.html",
        "ssdeep": null,
        "size": 6342,
        "sha512": "5ad56297e66dfc843e35db99ae564d5f9288c33434ffb98c3fb6c595baf7ba732d23623d9c321ac12874fc0132ad55fa4f7078d4e9ec0df8a6778a473b145f3f",
        "pids": [
            2124
        ],
        "md5": "fa1a84787eb00f888df26023f3aba3e7"
    },
    {
        "yara": [],
        "sha1": "3ab6f28a6afff7330581745b77f06b9b9acc7210",
        "name": "d36cfd8aef1276fd_dev_st_fax_error.gif",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_fax_error.gif",
        "type": "GIF image data, version 89a, 16 x 16",
        "sha256": "d36cfd8aef1276fd4043d6cf772451ca96026a7bd88c78a4036103d6833fd0b3",
        "urls": [],
        "crc32": "AEE49905",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/d36cfd8aef1276fd_dev_st_fax_error.gif",
        "ssdeep": null,
        "size": 136,
        "sha512": "42d3604860d35a511c156a265b00fc455cb0fc3760338d30ad353dc266140fe07a157425bf5671b8ecf9d0f628324ed40456a236757559b6b0dc45386043d9fa",
        "pids": [
            2124
        ],
        "md5": "53660911e68735a22e59af54e3e416a8"
    },
    {
        "yara": [],
        "sha1": "e370b83baceb6341432646606a1248828bbb9da4",
        "name": "5b8dbe7cdf21825c_tn04.gif",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\tn04.gif",
        "type": "GIF image data, version 89a, 10 x 24",
        "sha256": "5b8dbe7cdf21825cc85d9887a38590eec9e48cd174b43e018397e0aeb9e0f39c",
        "urls": [],
        "crc32": "4A3FD94C",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/5b8dbe7cdf21825c_tn04.gif",
        "ssdeep": null,
        "size": 91,
        "sha512": "ade916b116baa1433e65b5ba37c4d23b711826e7d7ac20f4c3c3c82347bc93a14c0318e07a383041b197771df8d554ad3442ca6d16801489c2959613c56e48dd",
        "pids": [
            2124
        ],
        "md5": "b7063fd017913f27794bbfd9d33eca4c"
    },
    {
        "yara": [],
        "sha1": "484a71dff8fbc39121813328f195d3ee6d13cac9",
        "name": "0ee39ea4dabc1763_lsb1780.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\lsb1780.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "0ee39ea4dabc1763bdda055f0675a021691f0d23603e9d4aa3b6eefc5e7581ba",
        "urls": [],
        "crc32": "B5772538",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/0ee39ea4dabc1763_lsb1780.html",
        "ssdeep": null,
        "size": 3207,
        "sha512": "c5510b9e23b1aae0af3c5858e5b0dd1e385fa6de72a3a1446623914afdca0d192ad92c5939164e8a0c8ba5f531ce76f8533d668511072d1fd337dc6f842c5d58",
        "pids": [
            2124
        ],
        "md5": "cadfdbd9d70b66c59f055fdf7a1ad200"
    },
    {
        "yara": [],
        "sha1": "93d73d5eb15626a3397d4ea4e2e34745f17383e1",
        "name": "4291ea57dcf5c5f3_lsb0000.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\lsb0000.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "4291ea57dcf5c5f3456584877e180b868812ccfe254f99535d75d169032b92cb",
        "urls": [],
        "crc32": "8C9B363D",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/4291ea57dcf5c5f3_lsb0000.html",
        "ssdeep": null,
        "size": 1719,
        "sha512": "a8e30f4a9d26f7897465ae9534c08883e865f31ccaf70d9dca44ced87c96bc446cf93560a7069f59c909c8469283757cce59ee5a6c701dc25f11e92b0cfa4fed",
        "pids": [
            2124
        ],
        "md5": "ae8bc765b5f525f33bf2daddd5a29f95"
    },
    {
        "yara": [],
        "sha1": "6747a559d6ca742aa8cafe23b9303b903c9c1be2",
        "name": "06ecaae2d0591a13_box1091.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1091.html",
        "type": "HTML document, ASCII text, with very long lines, with CRLF line terminators",
        "sha256": "06ecaae2d0591a13ff813cbce4497a8bf1ad7a6d6e6d5327a807abf26115f247",
        "urls": [],
        "crc32": "13D88263",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/06ecaae2d0591a13_box1091.html",
        "ssdeep": null,
        "size": 8407,
        "sha512": "7deb588987914e54c00abf18fe09b8388328f3b92e8ba2c9b31f915464db12e31ae66548df1cbf9c32b8faf561c59b21333a0c241f99c4d69c7860607f117aed",
        "pids": [
            2124
        ],
        "md5": "94ad3e0efba625c13e82e25526745902"
    },
    {
        "yara": [],
        "sha1": "04e13fbc6eda95c7eece5c25c1486ac113b13f10",
        "name": "ddd562d42d5b3929_job2620p.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job2620p.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "ddd562d42d5b39297c00a40f8860e545781547fdfe9eab720a1564b3cbe74df4",
        "urls": [],
        "crc32": "E102BDF6",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/ddd562d42d5b3929_job2620p.html",
        "ssdeep": null,
        "size": 3117,
        "sha512": "29eb108f378e60c5773248608c495aa4eb9e44eca4e6f3e43aa050ab491f7836a7d3beb83358af68e7e490f10f1872b1a1aeed6dc86ae6c583b56309b9765945",
        "pids": [
            2124
        ],
        "md5": "1b471e77208731b2276a5b5b7b0e30bd"
    },
    {
        "yara": [],
        "sha1": "2eed8ae415128167775846d9e0e68f048147ef23",
        "name": "5ce184c388592498_lsb1710.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\lsb1710.html",
        "type": "HTML document, ASCII text, with very long lines, with CRLF line terminators",
        "sha256": "5ce184c388592498e5e58acfd5dec8295711dc35e0a2515ce6f429e656ffaa04",
        "urls": [],
        "crc32": "F1692FC8",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/5ce184c388592498_lsb1710.html",
        "ssdeep": null,
        "size": 8695,
        "sha512": "3c65b8c8a2e06c1384090643c3747b2f529cbfc1d6164becd719f840d092200b5819e01d9466b8f54f40a91317d0696b983f145f69cc59eacc9d5e9442e5b345",
        "pids": [
            2124
        ],
        "md5": "883efbc547bc10e3a0abbbddefd45763"
    },
    {
        "yara": [],
        "sha1": "b78eb7bc7d9d594166b83668730fe9975bce3dd2",
        "name": "eae5e8b989383d83_icon_cmode_r.gif",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_cmode_r.gif",
        "type": "GIF image data, version 89a, 21 x 17",
        "sha256": "eae5e8b989383d836fd0787be0ee376951ab4d9585b72f5069a66701e653f1ee",
        "urls": [],
        "crc32": "A758103B",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/eae5e8b989383d83_icon_cmode_r.gif",
        "ssdeep": null,
        "size": 550,
        "sha512": "90cfae2d201f3e0c687b3c51e8e7eab70ee607c589df389a9452b69cde36bd8f63857a1b1de8acb265786b93bb785e93b7cdc9fd7b71aba9a19c169f327fd9ed",
        "pids": [
            2124
        ],
        "md5": "a13cd858c2cface75fd51cad66b3a1d5"
    },
    {
        "yara": [],
        "sha1": "6017a60d6cacc3bfacb4ed64ce92a69a84f04f0a",
        "name": "62a7572fdc483186_box1100a.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1100a.html",
        "type": "HTML document, ASCII text, with very long lines, with CRLF line terminators",
        "sha256": "62a7572fdc4831867c8fd3a13a79d591e5c9636ae8c9cff59f5950250cd86070",
        "urls": [],
        "crc32": "A40D988C",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/62a7572fdc483186_box1100a.html",
        "ssdeep": null,
        "size": 2492,
        "sha512": "c5cb90a83d5720a27a0740692e4d2de7de6ae1c48863bd9289bfddaf857523ccb24194c0230501a275476b0cda888c0e0708cc53fdf2f1f542f9a8bb743c7bc2",
        "pids": [
            2124
        ],
        "md5": "349faf57d311271e510436daab696de7"
    },
    {
        "yara": [],
        "sha1": "757a5b4ffb6db67800011ef3f1dcdef5290707ff",
        "name": "e31faca7d35bb42d_adr0585.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0585.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "e31faca7d35bb42d154d2f001c8ff3da9a7c668c6e261a81b6005805a4ca1789",
        "urls": [],
        "crc32": "9B65A24F",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/e31faca7d35bb42d_adr0585.html",
        "ssdeep": null,
        "size": 3436,
        "sha512": "7a6a54fcc563a936d0bd0c31d358d7f1a5ed7e29c82ca9fa243aace66e0b63e5d528b7076bd981a72c19fbb5e8b36dca701d2cdd4a769630e7859b73bbf39c26",
        "pids": [
            2124
        ],
        "md5": "c3ffc1ede75da2f5f41a47afb483f41a"
    },
    {
        "yara": [],
        "sha1": "7fb711b97beab40cf13b6453a50544981ffa6010",
        "name": "d5b39c7156484874_icon_jl_netfile.gif",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_jl_netfile.gif",
        "type": "GIF image data, version 89a, 20 x 16",
        "sha256": "d5b39c7156484874db289749c7e4a373cf2792659875cc80036d1205fb13b695",
        "urls": [],
        "crc32": "7B685C42",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/d5b39c7156484874_icon_jl_netfile.gif",
        "ssdeep": null,
        "size": 124,
        "sha512": "f16d0c6d8caa39188858d953714e32c8807744e490e88b93da354c2c3f055576ebc45d7eb824c4e3f89ad729f24b9c59713a83d51e4f7f0f2f081009ae8779fb",
        "pids": [
            2124
        ],
        "md5": "25fac98217d36efb52ddf75a341ba7bb"
    },
    {
        "yara": [],
        "sha1": "6a91f740c956bb3aeb490eb3316a66707473b434",
        "name": "ddc6290f7bc7a318_box1440.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1440.html",
        "type": "HTML document, ASCII text, with very long lines, with CRLF line terminators",
        "sha256": "ddc6290f7bc7a318f159ab504da226f3e3b7fed5dd27f1437a792ac8edb094c7",
        "urls": [],
        "crc32": "1C0D32E7",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/ddc6290f7bc7a318_box1440.html",
        "ssdeep": null,
        "size": 3115,
        "sha512": "7b223fa709a6180b40f13312f897f1ab18c0ab954644ad767f625079765907d7369137d94f404766590ef962420a31c6b2ec655b7f5eac54a0feaef250e9eb36",
        "pids": [
            2124
        ],
        "md5": "48b7b6b94a6e414c06692990f7cee0f2"
    },
    {
        "yara": [],
        "sha1": "5dc87b8dc27fb5677d11914768e5d55af6a991ca",
        "name": "3315a102f2e2eda0_set0995.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0995.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "3315a102f2e2eda0138998b9da83b7812f8256b05f78cda8e891e7593898be05",
        "urls": [],
        "crc32": "AA08AEB1",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/3315a102f2e2eda0_set0995.html",
        "ssdeep": null,
        "size": 3825,
        "sha512": "7e94a9490395958ed7ba34d4d6c67a5cc53ac05fce45269f6dcff82d5c24be3cffc6fd031fa5330b9c076425f1805a7199ea987c4127dc493f4acb15035edb9b",
        "pids": [
            2124
        ],
        "md5": "ac5c42e7c4df48cafff94ddd86d1f527"
    },
    {
        "yara": [],
        "sha1": "48d657449e4032024eae518ddd3782c0c55e6afa",
        "name": "ccc629f01ba8e170_set8090.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set8090.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "ccc629f01ba8e1702f269821edb3344361be88f9db8d19aab4afd807e4abb48a",
        "urls": [],
        "crc32": "79B828BB",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/ccc629f01ba8e170_set8090.html",
        "ssdeep": null,
        "size": 5136,
        "sha512": "32967f473d17440b637beec123ad302d3afa6a7617fa5a0a4ac7ca2df26b1b1323d831236bade780b3e021e7d0424a3d64252f8e9af3bf1c61762e6c56449f5a",
        "pids": [
            2124
        ],
        "md5": "913cff745af235240a57eeb1f0cc1ea4"
    },
    {
        "yara": [],
        "sha1": "dda0d485e8803773735acc2ae98746d7953fb210",
        "name": "8a121d18cf2052fb_dev_st_psave16.gif",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_psave16.gif",
        "type": "GIF image data, version 89a, 16 x 16",
        "sha256": "8a121d18cf2052fbc544c2b4e8d00d5aca0184527e9cee8aecdfb32f3d509dee",
        "urls": [],
        "crc32": "F7354815",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/8a121d18cf2052fb_dev_st_psave16.gif",
        "ssdeep": null,
        "size": 119,
        "sha512": "21840c09de7ce61d125ed1f1a65b7622fcc0c1cd5a8c54ce7ea7cd7ef3fa8eec4ccddafa8e392d6fc9cc2e8fb345513b3c1ef1a52a96f461d82613dee6c69e8b",
        "pids": [
            2124
        ],
        "md5": "2e78d6c55c3b0c02189df28d088ad614"
    },
    {
        "yara": [],
        "sha1": "67f2550db09afa3dd821b8d019ea46f82329df77",
        "name": "47db769d7900979f_tonner_on.gif",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\tonner_on.gif",
        "type": "GIF image data, version 89a, 14 x 10",
        "sha256": "47db769d7900979f1a4b3a268e4ca7bac0b586ddd6e904799aed1cd635594ab8",
        "urls": [],
        "crc32": "AB4A2891",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/47db769d7900979f_tonner_on.gif",
        "ssdeep": null,
        "size": 61,
        "sha512": "e15d6f14221c4cdb0f8556efca331e5347e5d0906b1f1df3da7a72aa5e195152650d10eb81184ececc068e2c5c94653824072f98c7a5a9ee5858b99ceddaca3d",
        "pids": [
            2124
        ],
        "md5": "7eb326b5d5407cd7fc94722cbdd5046b"
    },
    {
        "yara": [],
        "sha1": "89c7e648412379ce27dec117c74a909e67236122",
        "name": "22de6354651be334_iconk13.gif",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\iconk13.gif",
        "type": "GIF image data, version 89a, 32 x 32",
        "sha256": "22de6354651be334675eb817dacf9d48162a77651e49eab6941898f83342f12d",
        "urls": [],
        "crc32": "CF11A85A",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/22de6354651be334_iconk13.gif",
        "ssdeep": null,
        "size": 152,
        "sha512": "4bf5382d3cbdb55fc19a9cdb9bcb75a38a311e5c812798b11dcbf1dc1a5c3f0ce00bffeff2cbc1df7bc92960eea027c0ec5f8b72595e0416bb3534d3dfce2794",
        "pids": [
            2124
        ],
        "md5": "4ef3cdedbcd6b770963f1847f59e0302"
    },
    {
        "yara": [],
        "sha1": "b09c484ca70c15a088ec28e230463ab23a537ec6",
        "name": "8f652c64a20545cd_lsb1720.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\lsb1720.html",
        "type": "HTML document, ASCII text, with very long lines, with CRLF line terminators",
        "sha256": "8f652c64a20545cd53203462aaeec827368990d660cd3ad9aaee4346ecd74a15",
        "urls": [],
        "crc32": "DE2EC104",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/8f652c64a20545cd_lsb1720.html",
        "ssdeep": null,
        "size": 5322,
        "sha512": "12879f320841b1dd5e52624086393122c30e3546ca4d0f36c433bf84047a2300776342acf021270d7c3f7839e77567a5ba977f55dd57aaf2aa0db16c763d18e4",
        "pids": [
            2124
        ],
        "md5": "03dea650ec69fb4b7bc2bc863ffa5788"
    },
    {
        "yara": [],
        "sha1": "faf7e7e0a36dd3472509dbc4575381d2569f5a52",
        "name": "412974f7fa62444f_set6160.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6160.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "412974f7fa62444f8d6cef872de7b4ef6ca44d69212c93e7464a91828dee5872",
        "urls": [],
        "crc32": "9A402C41",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/412974f7fa62444f_set6160.html",
        "ssdeep": null,
        "size": 2526,
        "sha512": "e91a349d862d077255043325ae733debb6504975b16d853730a656ecd35681b4dc70fe74a0f6c25fba1f97c2e9faab7dd224c4ced6a668b5b978748540b1a480",
        "pids": [
            2124
        ],
        "md5": "be3ff1c3013c5ff1955faf03914f7dd2"
    },
    {
        "yara": [],
        "sha1": "7946e289ec2875842a4071408248eaa95282f105",
        "name": "ff16704ba259b0d2_s_pr_dh1.gif",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\s_pr_dh1.gif",
        "type": "GIF image data, version 89a, 20 x 20",
        "sha256": "ff16704ba259b0d2f553cf039e3332e40c7544edfd1c732b87fa1b96c182fdf7",
        "urls": [],
        "crc32": "F422DBA0",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/ff16704ba259b0d2_s_pr_dh1.gif",
        "ssdeep": null,
        "size": 148,
        "sha512": "27705a13b2ed8f3a534149bb1552c49fbb0dce842247d33d3735017b5a301f4d822096d21d1ec846ca41436c15f841d1d4cff6c2e016a1f52d8140520344562c",
        "pids": [
            2124
        ],
        "md5": "3c00d533a235aae0d948abeccec46a93"
    },
    {
        "yara": [],
        "sha1": "a08f9d6c0914fd34fd352d5503ca86f7098e879f",
        "name": "dd942f9d06d7692f_set0860.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0860.html",
        "type": "HTML document, ASCII text, with very long lines, with CRLF line terminators",
        "sha256": "dd942f9d06d7692ffd8e906376350812d26e9f3b64d6d27ad80bcfbea4599fae",
        "urls": [],
        "crc32": "DA18320C",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/dd942f9d06d7692f_set0860.html",
        "ssdeep": null,
        "size": 10243,
        "sha512": "6ea6a35ecb1bfb79593e062cae36bf8afc55cbd9bbf6d3a4866e3435ccc48cc39689bce72dca56ee2a21c81ece37cdd97e7f23b87ed0d1f2149bc35001c92c20",
        "pids": [
            2124
        ],
        "md5": "06e9342ee35a85e9ff29a4a0208f5b5b"
    },
    {
        "yara": [],
        "sha1": "63251250aa2c03743f7ccf635849436930a5cb3a",
        "name": "3c42b9c421387606_cntpermission_u1.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\permission\\contents\\cntpermission_u1.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "3c42b9c4213876063afeefa761ab4e196ef167411ee87617ea3fc717ceaf2f7a",
        "urls": [],
        "crc32": "1F1ED868",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/3c42b9c421387606_cntpermission_u1.html",
        "ssdeep": null,
        "size": 25707,
        "sha512": "c453ee692933f7ab0414395d62ec7e945ed57f7ecb3cd3f758c4199dc7724d5609382f91b3e499089e1a4c10b93ac6664cac7e03fc04caa3e46bb808851ccb40",
        "pids": [
            2124
        ],
        "md5": "72925fe95eb1a51f2de2a9520ab76733"
    },
    {
        "yara": [],
        "sha1": "d812374f0a06fd0d65c92364ef32cc3a628bfdc9",
        "name": "6d9e4d4676db14a5_set6320.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6320.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "6d9e4d4676db14a5242e7fad814bea79a10b8409e6a5a22e4aafcda05263f386",
        "urls": [],
        "crc32": "39791322",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/6d9e4d4676db14a5_set6320.html",
        "ssdeep": null,
        "size": 5968,
        "sha512": "4fe708a4edcf299deabedc27a0d0fb9376f3f8c3490de2eb2e94d38a5ab03eb6dce07b661f98fb957ec61aac5898a45f70c713a91c68720a306bece8a3f1a6fb",
        "pids": [
            2124
        ],
        "md5": "f46412241d8edf3108bb900de63ca9af"
    },
    {
        "yara": [],
        "sha1": "774fbcc4687f297ea22e9efe642d336f52bbc96e",
        "name": "1469a6bd0752c195_iconk19-s.gif",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\iconk19-s.gif",
        "type": "GIF image data, version 89a, 16 x 16",
        "sha256": "1469a6bd0752c1953c2de358bdaf4be7cbcc175b0a547047094a77dbceb17fb2",
        "urls": [],
        "crc32": "EA867649",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/1469a6bd0752c195_iconk19-s.gif",
        "ssdeep": null,
        "size": 114,
        "sha512": "d1e4ed86814a5e27f0b6880be4ed286aa5a55a54ccd06a329b431624e275fec38cc49537a87d9004b0eebbae69682893874e23a36f2e968bdf56320e826fd3e9",
        "pids": [
            2124
        ],
        "md5": "f48f3f471ce7487f849abc1b4a3f1b6b"
    },
    {
        "yara": [],
        "sha1": "6ac909b6cbb8c0664399fc999d781ef0eca65aa6",
        "name": "70a49a9c55321f67_job2610.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job2610.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "70a49a9c55321f67fb5d279427392c9ec3b0bfc5d1ad4dda1cde2e702d809dad",
        "urls": [],
        "crc32": "8B7E27C2",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/70a49a9c55321f67_job2610.html",
        "ssdeep": null,
        "size": 6074,
        "sha512": "6a51542e0fe6602fcb8da25f3f2094d2fde43622e311ee27e157c1a89d9429d35810dcddc9b5d6fc8d4ecea64158d602ab23a5a7f1a1fad98ae4a4934603dcb0",
        "pids": [
            2124
        ],
        "md5": "cc696d627cce56516fe05ba5608630c4"
    },
    {
        "yara": [],
        "sha1": "30e2f966ba8569382679c4e8cb6fc41da4a9bf33",
        "name": "995037b3a8ae65a4_icon_right_owner.gif",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_right_owner.gif",
        "type": "GIF image data, version 89a, 20 x 16",
        "sha256": "995037b3a8ae65a4d3353600a0e9d6f716ef7b08afe8b2c43d5edf9c9b1ba5cb",
        "urls": [],
        "crc32": "DE09B48C",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/995037b3a8ae65a4_icon_right_owner.gif",
        "ssdeep": null,
        "size": 585,
        "sha512": "8ecc9128d9a98a7bcf05ad15610aa2685c8a5998c1c2d2bc0039e29d0a847ab785a40a29c98106de6430c76997e34ea418a2725b217f638a6daac0340e20fa9c",
        "pids": [
            2124
        ],
        "md5": "61144e7a78151c03f77d3d298d7a38bf"
    },
    {
        "yara": [],
        "sha1": "fbbacd1162980ed8b01fd523a61bab5130e92605",
        "name": "6a1d5399f680d78b_p_fax030.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_fax030.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "6a1d5399f680d78b4ff45be7a46010254a793a483b8c2bec7577d9be10ffc0f0",
        "urls": [],
        "crc32": "2B8C19B4",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/6a1d5399f680d78b_p_fax030.html",
        "ssdeep": null,
        "size": 3004,
        "sha512": "982db0d33b3b6112b6a78c5e83db8fc2db39ea511ad71f836790d5196fc5dc87d4b08776f6da1df951c6fc29dec6d35d970ed858e22ff9bf02bf243aa103b974",
        "pids": [
            2124
        ],
        "md5": "fefc21399329c8628fce88701421217c"
    },
    {
        "yara": [],
        "sha1": "2fa05110cefe4e72ab881e5b474b8ac613931b03",
        "name": "58e0c5dce59abd81_btn_arrow_left1.gif",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\btn_arrow_left1.gif",
        "type": "GIF image data, version 89a, 16 x 15",
        "sha256": "58e0c5dce59abd81c64948b80fddb5594e2cde0d9977222f5bf43ff74bd44e52",
        "urls": [],
        "crc32": "CD0B0709",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/58e0c5dce59abd81_btn_arrow_left1.gif",
        "ssdeep": null,
        "size": 349,
        "sha512": "a61baed3d045949f2138703408665aa3441a36a281ad6e1aa68cb58439e2cf8edbad7bc8c3c72ba7df1a25eb6fe5097cbf7bbb7445b4c55c79482acc0eb2ec99",
        "pids": [
            2124
        ],
        "md5": "9e108cbece79c3d6b03dc53f36d37b06"
    },
    {
        "yara": [],
        "sha1": "007290f8e1d50bf0506cef2652f6bf04bf5631d6",
        "name": "31c48fb1246b56d8_tn03.gif",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\tn03.gif",
        "type": "GIF image data, version 89a, 10 x 24",
        "sha256": "31c48fb1246b56d8df9ce97ba4fe06bb0aa469c9b3bc527d927b8308f3688695",
        "urls": [],
        "crc32": "1AA597D3",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/31c48fb1246b56d8_tn03.gif",
        "ssdeep": null,
        "size": 85,
        "sha512": "0326a3e57f0fd5a00e3c92d8eb6069d885723fdfcffbb9a03aa1bf174f18ebc592cc7747690ce39e600a66cd29e26b5e431b7200730a0a4eb404660be83b8996",
        "pids": [
            2124
        ],
        "md5": "e17567054845f55d45231dfbd1e5a2ea"
    },
    {
        "yara": [],
        "sha1": "63ac1f84316b29435259d79dfaf06c43f6815d56",
        "name": "f0436cbbb84fce32_set8500.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set8500.html",
        "type": "HTML document, ASCII text, with very long lines, with CRLF line terminators",
        "sha256": "f0436cbbb84fce327a8d4e1f8781a555dbe35b6026a6f37a6e17484b7eb437dd",
        "urls": [
            "http:\/\/a.b.c.d\/help\/.",
            "http:\/\/a.b.c.d\/help\/it\/index.html"
        ],
        "crc32": "E5A5D246",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/f0436cbbb84fce32_set8500.html",
        "ssdeep": null,
        "size": 7791,
        "sha512": "66aafd46ae7d30f88bf929dd4bae40d3b17852723539cf0dcc251a6e3a7ecc979749ab87405c2968e77a5e78d6e82c0b74ff30406e4074ce0c5c5e555e69a93f",
        "pids": [
            2124
        ],
        "md5": "50d32cde428f3a7e55d634363fd39fc1"
    },
    {
        "yara": [],
        "sha1": "dad7a43b468e21d3e3f4c052caf4b022e9d111b2",
        "name": "31f79cc3d490740f_header_btn_version_inf.gif",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\header_btn_version_Inf.gif",
        "type": "GIF image data, version 89a, 27 x 20",
        "sha256": "31f79cc3d490740f36c644ee915b19a996b3399a4ff6b0642f043afb75b0f8fc",
        "urls": [],
        "crc32": "36BD1EB9",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/31f79cc3d490740f_header_btn_version_inf.gif",
        "ssdeep": null,
        "size": 713,
        "sha512": "459a2b31752c6d8ee84fd0fb97bfc91198a8135d1bfade1f841abe1a82227e392f8d2e3e7e9d4bb727cccf01684d91407f9c1af1521b80bd60945e561ff7ff76",
        "pids": [
            2124
        ],
        "md5": "682a64f204607dce7eef6e841edaea5f"
    },
    {
        "yara": [],
        "sha1": "91acb718c4eaba18e4738c6f16f6f81d67dd43fb",
        "name": "1c5a8b9db21cfcd3_set4230d.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4230d.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "1c5a8b9db21cfcd353eb30f78dfb19468f2bbdf56e97264376cb13c0ea60c6f5",
        "urls": [],
        "crc32": "00755DDF",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/1c5a8b9db21cfcd3_set4230d.html",
        "ssdeep": null,
        "size": 2751,
        "sha512": "e62e94395fce68971991f5f9e909cf24c2c8ed0a6b71d8198867929f2fce1599fff8022525beaa6446445e21e6cfa1f17a272629a6f75185b2a0f84c40b9de66",
        "pids": [
            2124
        ],
        "md5": "e25070fd8d14ae45db1b727d4a96796e"
    },
    {
        "yara": [],
        "sha1": "461e7c41735e0aa8595427fc6155cb71fb71817c",
        "name": "846fb29e7dd454a7_job7240.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job7240.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "846fb29e7dd454a7eee216e7698597908ef9d8cd37aa6c06b02f70937fd1f74e",
        "urls": [],
        "crc32": "79B28DD5",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/846fb29e7dd454a7_job7240.html",
        "ssdeep": null,
        "size": 5256,
        "sha512": "997bb059120f2553992b8ac038f6ef8902aae321943dfd7f620713218e44881fd9c7d8644ba2d6cc5dfafeb271ee69828c230f2f78c437f26d210105a741a5bf",
        "pids": [
            2124
        ],
        "md5": "9c30e5f940e75a7540f23855ae49e2c5"
    },
    {
        "yara": [],
        "sha1": "5c036a4bb11c4193b504367cf5f5decc6dde6baa",
        "name": "e233d07531336ab3_set6360.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6360.html",
        "type": "HTML document, ASCII text, with very long lines, with CRLF line terminators",
        "sha256": "e233d07531336ab3e1613b7e0389f0f54ae755ad528a9a8f095a6c6077fe8ac2",
        "urls": [],
        "crc32": "47C45BBE",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/e233d07531336ab3_set6360.html",
        "ssdeep": null,
        "size": 11916,
        "sha512": "381bf577277870b0906af13f5bb7e7f000bb9e122f6974e3f674eb3c06aef0ccbb5cf428ac948674cb403af6fbe338ac14aaef76b6089ea5060e3f86d4fcb14f",
        "pids": [
            2124
        ],
        "md5": "c10441a3a92156242a556e3917c85af4"
    },
    {
        "yara": [],
        "sha1": "ffd046fe0104f985b6a88a32f9dec587a95ef647",
        "name": "e9630acd5c5a3b3f_btn_sort_down.gif",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\btn_sort_down.gif",
        "type": "GIF image data, version 89a, 12 x 6",
        "sha256": "e9630acd5c5a3b3f90357bd99a2c4bda4daca6df139e515941edcbdfebc1b34a",
        "urls": [],
        "crc32": "6DBB5B02",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/e9630acd5c5a3b3f_btn_sort_down.gif",
        "ssdeep": null,
        "size": 170,
        "sha512": "2a469b28fa4c909fd6ebcbae8f5baad5cf05e43863372805614ae31a76e8332d0b204b38d0e7e9ec79cdb67d7fdd5d70c5593201d446cd5b04711b5513bbda18",
        "pids": [
            2124
        ],
        "md5": "9cca15a2c9da828f6b9c6759d3b46c65"
    },
    {
        "yara": [],
        "sha1": "63302ae885ce6e928f7ade03cb562172b7650bce",
        "name": "2f51f37aad8feaf2_dev_st_proll100_16.gif",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_proll100_16.gif",
        "type": "GIF image data, version 89a, 16 x 16",
        "sha256": "2f51f37aad8feaf23ddffb06a49ae169ea0149595e8ad8b6d2050b42c46c02c5",
        "urls": [],
        "crc32": "FD896C9C",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/2f51f37aad8feaf2_dev_st_proll100_16.gif",
        "ssdeep": null,
        "size": 78,
        "sha512": "2d0707a979e4f58b76d45a433266e0dd608c7479e7550237a85c56de59370869c0b2e552e5a856ff332047342550416005c7d0c92345e32c59a62b06fbf769ef",
        "pids": [
            2124
        ],
        "md5": "56f0bac469e9ec22a67ff1b0060cfac5"
    },
    {
        "yara": [],
        "sha1": "04c0089a2bc3c2d5648c44f25fad2a3ad476c45d",
        "name": "0804483f8beaec2c_wim_help.js",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\wim_help.js",
        "type": "ASCII text, with CRLF line terminators",
        "sha256": "0804483f8beaec2c52237174326f442b273fefaf9bf4b7e0b8eb1f25a946effb",
        "urls": [],
        "crc32": "14216459",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/0804483f8beaec2c_wim_help.js",
        "ssdeep": null,
        "size": 3236,
        "sha512": "9cdb269b8138256d6163a1a84e45ec8423c50dc5399ef1b647f2955fcdf5fceea15fdb60f71c92eda0b78143db0efa8fb0faafdf3f0518b50c550bb56965aff5",
        "pids": [
            2124
        ],
        "md5": "e1ec03635597f32cce0ca94ed5eafabc"
    },
    {
        "yara": [],
        "sha1": "43bb1f5f6f9e8a7ed05e26bb1173d942a02c4f8a",
        "name": "8520d5f0cdea01fc_adr0540.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0540.html",
        "type": "HTML document, ASCII text, with very long lines, with CRLF line terminators",
        "sha256": "8520d5f0cdea01fc86a5d322e334655b4b4c3353cdddd94a6ec40649e1ca0080",
        "urls": [],
        "crc32": "549E3967",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/8520d5f0cdea01fc_adr0540.html",
        "ssdeep": null,
        "size": 6804,
        "sha512": "0889620a5d59b0ce20455bad58d735ce32dc92a883dc499aa7e603749c009aab45fb2ae1f322d91cf3b7c2538fc516008ed0522a4078f5ac4b83a122f00a6c08",
        "pids": [
            2124
        ],
        "md5": "f595a4d9c2383188da9a9ba8bf6af5dc"
    },
    {
        "yara": [],
        "sha1": "052af0ced7736164047ec7ae9767992aa6dfab47",
        "name": "95ae5704398bdf41_icon_jl_docubox.gif",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_jl_docubox.gif",
        "type": "GIF image data, version 89a, 20 x 16",
        "sha256": "95ae5704398bdf418c85df538f44fca0fbf0423db1fa17299a1b3b8c00a132e0",
        "urls": [],
        "crc32": "0689D53D",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/95ae5704398bdf41_icon_jl_docubox.gif",
        "ssdeep": null,
        "size": 219,
        "sha512": "6e34cac77f592a5f0cf61d3366d69c91e30ab42d017fe3ef7cec0bdc0d7bc7af8c9ee7e36abe762f62182cf0c4c820301bc0a08133d1b43c1b00396c72087db7",
        "pids": [
            2124
        ],
        "md5": "3116f091f43b5b8c2f7e470b689f4020"
    },
    {
        "yara": [],
        "sha1": "445bcad23c3cc79dd49f9d41989859838d8ace9f",
        "name": "db23eaf294caedfb_set7290.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set7290.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "db23eaf294caedfb89a05cf3c5f58115b642e0b21ee693a289eded30beee2285",
        "urls": [],
        "crc32": "5D0BAF4B",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/db23eaf294caedfb_set7290.html",
        "ssdeep": null,
        "size": 3350,
        "sha512": "fad8ed955964a39f2ceca9211171a816c85b540c01e92bd8590a9adfd89544ef130b0323fd231c4a6464f979749c8e14f09b3d57685e4a417abcc6039f498059",
        "pids": [
            2124
        ],
        "md5": "d9bfaa7ba93ae8a49423d5c0a283409c"
    },
    {
        "yara": [],
        "sha1": "e4d833a9d6b1d887cec81d34e733e0c3af06fe80",
        "name": "3d96644174a0945c_adr0000.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0000.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "3d96644174a0945c0ca32fca3c9febf5a150b50ab372da815d093fee430a14df",
        "urls": [],
        "crc32": "5CEB791F",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/3d96644174a0945c_adr0000.html",
        "ssdeep": null,
        "size": 1546,
        "sha512": "7ed324a608c883063690463bbae3c3bd27699e241f8390137ecf06d253c56602b5327b1087886465608828539f561f75aa5c35565c3e7ed7b82bc9731b863b07",
        "pids": [
            2124
        ],
        "md5": "5ad5d6bdc8a2605dbd9652fc8f83ebaa"
    },
    {
        "yara": [],
        "sha1": "8fc095c9f5e17fb63e7a8aef50049715720d20b2",
        "name": "fe69a4dd045a0ef0_box1140.html",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1140.html",
        "type": "HTML document, ASCII text, with CRLF line terminators",
        "sha256": "fe69a4dd045a0ef06a522549a33142d040652c690cb7251c6a766c6347381373",
        "urls": [],
        "crc32": "67651984",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/1732\/files\/fe69a4dd045a0ef0_box1140.html",
        "ssdeep": null,
        "size": 2413,
        "sha512": "1891326a338ec8567d227efabac1f5ef6620e89f50cadb9a67ae22571be34bd0a87a5c445cdc89d7175ed88a6090fab804601c9e2c5a893fcee94761a9623662",
        "pids": [
            2124
        ],
        "md5": "fe58884bf1712e86b9fc2990919824cc"
    }
]

Generic

[
    {
        "process_path": "C:\\Users\\cuck\\AppData\\Local\\Temp\\3e0ab14314114ad5a273ccc7889831961475f3cbe4a06b2b3e98cb9e2da9ee4b.bin",
        "process_name": "3e0ab14314114ad5a273ccc7889831961475f3cbe4a06b2b3e98cb9e2da9ee4b.bin",
        "pid": 2124,
        "summary": {
            "file_created": [
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4000a.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1440.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set9330.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4000.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_other16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_ot_rest16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_jl_printer.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_p100-25_16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\iconk13.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1100.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\header_btn_sch.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1380.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_user.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_right_view.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_key.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\note.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\permission\\contents\\cntpermission_a5.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_psave16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\lsb1720.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_job010.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\top0030.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6340.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job2620p.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\top0060.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6360a.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set8030.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\btn_arrow_left2.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1311.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set3510a.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4130.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1360.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\iconk21.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1140.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0500.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_job020.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_proll50_16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0985.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_jl_netfile.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0840a.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0990.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\lsb1100.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_error16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0998.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_doc_lock.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_ot_full16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job2650.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0890.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\permission\\permission.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\logo01.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\permission\\contents\\cntpermission_u1.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_tnend16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\top2100a.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set9300.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_help.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6110.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set8080.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6360.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4170.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set8010.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\iconk19-s.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_dosattack.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set7110.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_tn_bar_k80.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job7235.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1100a.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_func_netfile.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0970.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_scall_fax16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_fax010.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6380.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\pri1060.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0540.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_pri020.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_p_jam16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\top0070.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0560b.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_wup16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4190.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0975b.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\iconk14.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_group.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0600.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\lsb1800.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0000.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set8020.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_adr090.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6160.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\wim_help.js",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0870.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1450.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1420.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6361.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_proll100_16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_box040.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1130.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0970c.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\icnk_y.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job7240.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6230.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6010.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set7220a.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\top0020.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set7280.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\pri2210.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6350b.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0990a.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0510a.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_cmode_color.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1400.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1080.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0980a.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\permission\\contents\\cntpermission_a2.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job2605.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_right_owner.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\tn03.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_fax020.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0580.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set9350.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0520c.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job2630.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set9010.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\tonner_nise.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0940.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box0000.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job2700a.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_func_unit_doc.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\btn_arrow_right1.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6270.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0970b.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_fax040.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\btn_thumbnail.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4180.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0998a.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_proll25_16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\top0051.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_dv.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0990b.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\img\\item_title_head.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0980b.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\tn02.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set8130.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_adr030.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0840.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1350.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0510.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_proll75_16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\yougo.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set7220.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1120.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job2605a.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\tonner_off.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1030.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_tn_bar_k80ok.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_adr000.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4240.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\btn_sort_up.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set9320.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\permission\\contents\\cntpermission_a4.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\permission\\contents\\cntpermission_u3.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\tn04.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_func_others.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_cmode_single.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0550.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1430.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_ready16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job2610.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1030a.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\lsb1710.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6320.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\lsb1780.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set8110.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\header_btn_link_page.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_p75_16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_tend16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set8050.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_offline_16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_box020.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_cmode_r.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\permission\\contents\\cntpermission_u2.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\top0010.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_cmode_br.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_toner_bg.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1290.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_prollend16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1340.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job2640.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_job000.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\tonner_on.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\keyicon01.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\top0000.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\btn_arrow_right2.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_print16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\header_btn_help.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job2600.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0560a.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_func_copy.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_cmode_bw.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_fax000.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6130.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\index.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_ot_16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_right_access.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1260.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6120.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\s_pr_dv1.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0810.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\btn_net_ricoh.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6210.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set9310.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6330.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4231.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_pri030.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_box010.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_pri000.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set9110.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1295.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4230.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0975a.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_p100_16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6310.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job7230.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1010.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1310.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0590.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_fax030.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\access_right.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\tn01.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\permission\\contents\\cntpermission_a3.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\permission\\title\\titpermission.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\btn_sort_down.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_prollnend16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0960.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_box000.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4230a.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1285.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_func_fax.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0950.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\tonner_no.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_box060.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6220.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1250.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\spacer.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1060.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set7290.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_cmode_b.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set8070.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_p50_16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4230b.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4000c.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\copyright.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_func_scan.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0860.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_scall16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_tonerk.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\pri2000.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_func_printer.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_adr020.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_p25_16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\top2100.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0980c.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\btn_icon.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1240.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\permission\\contents\\cntpermission_a1.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\icnk_t.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set9021.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1091.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_tn_bar_k.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_box070.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_box050.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_jl_docubox.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1220.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4230c.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6260.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\btn_arrow_left1.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1370.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set3550.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0995.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_right_fullaccess.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job2620.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\header_btn_version_Inf.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set8090.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_jl_copy.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\img\\item_name_head.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_c_open16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_adr040.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_pnend16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_box080.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1100b.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_pri010.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set7150.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0910.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6350a.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_box030.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set9340.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0970e.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1320.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0670.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set8500.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_adf_jam16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set7295.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6351.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\btn_list.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_adr010.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0975.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0850.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_adr050.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job2700.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set3510.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1270.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0930.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0970d.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set8100.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_toneru.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\lsb1100a.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_right_edit.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\img\\sup_title_head.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_pend16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_fax_error.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_proll100-25_16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0585.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0980.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0880.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6350.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\btn_property.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0510b.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4110.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\s_pr_dh1.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_adr100.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\lsb1750.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\btn_status-n.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\lsb1100b.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\pri1080.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_jl_web.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_job030.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_toner_16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4000b.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_top010.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\wim_help.css",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1190.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\lsb0000.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_func_unitdoc.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_adr060.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\pri0000.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_dh.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\thmbd.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_cmode_double.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4230d.html"
            ],
            "directory_created": [
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\permission\\contents",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\img",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\permission\\title",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\permission"
            ],
            "dll_loaded": [
                "MACDRAPI.DLL",
                "comctl32.dll",
                "C:\\Windows\\syswow64\\MSCTF.dll",
                "kernel32.dll",
                "dwmapi.dll",
                "KERNEL32.DLL",
                "OLEAUT32.DLL",
                "C:\\Windows\\system32\\ole32.dll",
                "SHELL32.dll",
                "imm32.dll",
                "USER32.dll",
                "C:\\Windows\\system32\\uxtheme.dll"
            ],
            "file_opened": [
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4000a.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1440.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set9330.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4000.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_other16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_ot_rest16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_jl_printer.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_p100-25_16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\iconk13.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1100.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\header_btn_sch.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1380.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_user.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_right_view.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_key.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\note.html",
                "C:\\Windows\\Globalization\\Sorting\\sortdefault.nls",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\permission\\contents\\cntpermission_a5.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_psave16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\lsb1720.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_job010.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\top0030.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6340.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job2620p.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\top0060.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6360a.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set8030.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\btn_arrow_left2.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1311.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set3510a.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4130.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1360.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\iconk21.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1140.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0500.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_job020.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_proll50_16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0985.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_jl_netfile.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0840a.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0990.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\lsb1100.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_error16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0998.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_doc_lock.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_ot_full16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job2650.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0890.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\permission\\permission.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\logo01.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\permission\\contents\\cntpermission_u1.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_tnend16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\top2100a.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set9300.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_help.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6110.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set8080.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6360.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4170.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set8010.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\iconk19-s.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_dosattack.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set7110.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_tn_bar_k80.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job7235.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1100a.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_func_netfile.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0970.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_scall_fax16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_fax010.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6380.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\pri1060.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0540.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_pri020.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_p_jam16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\top0070.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0560b.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_wup16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4190.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0975b.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\iconk14.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_group.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0600.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\lsb1800.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0000.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set8020.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_adr090.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6160.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\wim_help.js",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0870.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1450.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1420.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6361.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_proll100_16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_box040.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1130.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0970c.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\icnk_y.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job7240.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6230.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6010.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set7220a.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\top0020.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set7280.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\pri2210.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6350b.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0990a.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0510a.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_cmode_color.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1400.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1080.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0980a.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\permission\\contents\\cntpermission_a2.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job2605.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_right_owner.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\tn03.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_fax020.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0580.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set9350.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0520c.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job2630.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set9010.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\tonner_nise.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0940.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box0000.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job2700a.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_func_unit_doc.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\btn_arrow_right1.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6270.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0970b.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_fax040.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\btn_thumbnail.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4180.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0998a.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_proll25_16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\top0051.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_dv.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0990b.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\img\\item_title_head.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0980b.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\tn02.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set8130.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_adr030.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0840.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1350.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0510.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_proll75_16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\yougo.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set7220.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1120.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job2605a.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\tonner_off.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1030.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_tn_bar_k80ok.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_adr000.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4240.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\btn_sort_up.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set9320.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\permission\\contents\\cntpermission_a4.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\permission\\contents\\cntpermission_u3.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\tn04.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_func_others.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_cmode_single.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0550.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1430.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_ready16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job2610.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1030a.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\lsb1710.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6320.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\lsb1780.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set8110.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\header_btn_link_page.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_p75_16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_tend16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set8050.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_offline_16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_box020.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_cmode_r.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\permission\\contents\\cntpermission_u2.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\top0010.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_cmode_br.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_toner_bg.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1290.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_prollend16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1340.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job2640.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_job000.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\tonner_on.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\keyicon01.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\top0000.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\btn_arrow_right2.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_print16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\header_btn_help.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job2600.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0560a.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_func_copy.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_cmode_bw.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_fax000.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6130.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\index.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_ot_16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_right_access.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1260.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6120.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\s_pr_dv1.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0810.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\btn_net_ricoh.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6210.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set9310.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6330.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4231.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_pri030.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_box010.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_pri000.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set9110.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1295.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4230.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0975a.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_p100_16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6310.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job7230.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1010.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1310.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0590.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_fax030.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\access_right.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\tn01.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\permission\\contents\\cntpermission_a3.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\permission\\title\\titpermission.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\btn_sort_down.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_prollnend16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0960.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_box000.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4230a.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1285.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_func_fax.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0950.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\tonner_no.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_box060.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6220.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1250.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\spacer.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1060.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set7290.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_cmode_b.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set8070.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_p50_16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4230b.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4000c.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\copyright.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_func_scan.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0860.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_scall16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_tonerk.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\pri2000.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_func_printer.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_adr020.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_p25_16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\top2100.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0980c.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\btn_icon.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1240.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\permission\\contents\\cntpermission_a1.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\icnk_t.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set9021.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1091.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_tn_bar_k.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_box070.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_box050.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_jl_docubox.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1220.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4230c.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6260.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\btn_arrow_left1.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1370.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set3550.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0995.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_right_fullaccess.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\3e0ab14314114ad5a273ccc7889831961475f3cbe4a06b2b3e98cb9e2da9ee4b.bin",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job2620.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\header_btn_version_Inf.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set8090.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_jl_copy.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\img\\item_name_head.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_c_open16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_adr040.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_pnend16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_box080.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1100b.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_pri010.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set7150.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0910.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6350a.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_box030.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set9340.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0970e.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1320.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0670.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set8500.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_adf_jam16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set7295.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6351.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\btn_list.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_adr010.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0975.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0850.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_adr050.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job2700.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set3510.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1270.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0930.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0970d.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set8100.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_toneru.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\lsb1100a.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_right_edit.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\img\\sup_title_head.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_pend16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_fax_error.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_proll100-25_16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0585.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0980.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0880.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6350.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\btn_property.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0510b.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4110.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\s_pr_dh1.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_adr100.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\lsb1750.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\btn_status-n.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\lsb1100b.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\pri1080.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_jl_web.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_job030.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_toner_16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4000b.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_top010.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\wim_help.css",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1190.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\lsb0000.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_func_unitdoc.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_adr060.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\pri0000.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_dh.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\thmbd.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_cmode_double.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4230d.html"
            ],
            "regkey_opened": [
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{8613E14C-D0C0-4161-AC0F-1DD2563286BC}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\OLE\\Tracing",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{0000897b-83df-4b96-be07-0fb58b01c4a4}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\CTF\\LayoutIcon\\0409\\0000041d",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\CTF\\TIP\\{0000897b-83df-4b96-be07-0fb58b01c4a4}\\LanguageProfile\\0x00000000\\{0001bea3-ed56-483d-a2e2-aeae25577436}",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{C1EE01F2-B3B6-4A6A-9DDD-E988C088EC82}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{F25E9F57-2FC8-4EB3-A41A-CCE5F08541E6}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{07EB03D6-B001-41DF-9192-BF9B841EE71F}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\KnownClasses",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{AE6BE008-07FB-400D-8BEB-337A64F7051F}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\OLE",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{E429B25A-E5D3-4D1F-9BE3-0C608477E3A1}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\CTF\\DirectSwitchHotkeys",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\LanguagePack\\SurrogateFallback",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\LanguagePack\\SurrogateFallback\\MS Sans Serif",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{F89E9E58-BD2F-4008-9AC2-0F816C09F4EE}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{DCBD6FA8-032F-11D3-B5B1-00C04FC324A1}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\OLEAUT",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{3697C5FA-60DD-4B56-92D4-74A569205C16}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{531FDEBF-9B4C-4A43-A2AA-960E8FCDC732}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\Compatibility\\3e0ab14314114ad5a273ccc7889831961475f3cbe4a06b2b3e98cb9e2da9ee4b.bin",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{A028AE76-01B1-46C2-99C4-ACD9858AE02F}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{81D4E9C9-1D3B-41BC-9E6C-4B40BF79E35E}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{03B5835F-F03C-411B-9CE2-AA23E1171E36}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}",
                "HKEY_CURRENT_USER\\Keyboard Layout\\Toggle",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{78CB5B0E-26ED-4FCC-854C-77E8F3D1AA80}\\Category\\Category\\{534C48C1-0607-4098-A521-4FC899C73E90}"
            ],
            "file_written": [
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4000a.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1440.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set9330.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4000.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_other16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_ot_rest16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_jl_printer.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_p100-25_16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\iconk13.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1100.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\header_btn_sch.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1380.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_user.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_right_view.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_key.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\note.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\permission\\contents\\cntpermission_a5.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_psave16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\lsb1720.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_job010.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\top0030.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6340.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job2620p.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\top0060.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6360a.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set8030.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\btn_arrow_left2.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1311.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set3510a.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4130.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1360.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\iconk21.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1140.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0500.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_job020.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_proll50_16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0985.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_jl_netfile.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0840a.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0990.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\lsb1100.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_error16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0998.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_doc_lock.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_ot_full16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job2650.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0890.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\permission\\permission.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\logo01.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\permission\\contents\\cntpermission_u1.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_tnend16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\top2100a.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set9300.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_help.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6110.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set8080.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6360.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4170.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set8010.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\iconk19-s.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_dosattack.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set7110.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_tn_bar_k80.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job7235.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1100a.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_func_netfile.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0970.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_scall_fax16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_fax010.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6380.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\pri1060.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0540.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_pri020.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_p_jam16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\top0070.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0560b.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_wup16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4190.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0975b.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\iconk14.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_group.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0600.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\lsb1800.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0000.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set8020.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_adr090.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6160.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\wim_help.js",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0870.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1450.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1420.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6361.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_proll100_16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_box040.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1130.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0970c.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\icnk_y.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job7240.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6230.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6010.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set7220a.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\top0020.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set7280.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\pri2210.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6350b.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0990a.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0510a.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_cmode_color.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1400.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1080.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0980a.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\permission\\contents\\cntpermission_a2.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job2605.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_right_owner.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\tn03.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_fax020.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0580.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set9350.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0520c.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job2630.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set9010.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\tonner_nise.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0940.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box0000.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job2700a.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_func_unit_doc.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\btn_arrow_right1.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6270.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0970b.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_fax040.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\btn_thumbnail.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4180.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0998a.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_proll25_16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\top0051.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_dv.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0990b.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\img\\item_title_head.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0980b.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\tn02.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set8130.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_adr030.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0840.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1350.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0510.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_proll75_16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\yougo.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set7220.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1120.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job2605a.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\tonner_off.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1030.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_tn_bar_k80ok.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_adr000.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4240.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\btn_sort_up.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set9320.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\permission\\contents\\cntpermission_a4.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\permission\\contents\\cntpermission_u3.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\tn04.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_func_others.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_cmode_single.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0550.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1430.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_ready16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job2610.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1030a.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\lsb1710.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6320.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\lsb1780.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set8110.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\header_btn_link_page.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_p75_16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_tend16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set8050.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_offline_16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_box020.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_cmode_r.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\permission\\contents\\cntpermission_u2.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\top0010.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_cmode_br.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_toner_bg.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1290.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_prollend16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1340.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job2640.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_job000.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\tonner_on.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\keyicon01.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\top0000.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\btn_arrow_right2.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_print16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\header_btn_help.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job2600.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0560a.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_func_copy.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_cmode_bw.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_fax000.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6130.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\index.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_ot_16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_right_access.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1260.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6120.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\s_pr_dv1.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0810.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\btn_net_ricoh.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6210.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set9310.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6330.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4231.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_pri030.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_box010.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_pri000.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set9110.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1295.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4230.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0975a.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_p100_16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6310.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job7230.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1010.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1310.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0590.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_fax030.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\access_right.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\tn01.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\permission\\contents\\cntpermission_a3.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\permission\\title\\titpermission.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\btn_sort_down.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_prollnend16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0960.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_box000.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4230a.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1285.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_func_fax.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0950.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\tonner_no.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_box060.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6220.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1250.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\spacer.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1060.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set7290.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_cmode_b.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set8070.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_p50_16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4230b.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4000c.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\copyright.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_func_scan.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0860.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_scall16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_tonerk.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\pri2000.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_func_printer.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_adr020.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_p25_16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\top2100.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0980c.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\btn_icon.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1240.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\permission\\contents\\cntpermission_a1.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\icnk_t.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set9021.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1091.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_tn_bar_k.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_box070.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_box050.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_jl_docubox.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1220.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4230c.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6260.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\btn_arrow_left1.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1370.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set3550.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0995.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_right_fullaccess.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job2620.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\header_btn_version_Inf.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set8090.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_jl_copy.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\img\\item_name_head.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_c_open16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_adr040.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_pnend16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_box080.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1100b.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_pri010.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set7150.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0910.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6350a.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_box030.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set9340.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0970e.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1320.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0670.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set8500.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_adf_jam16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set7295.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6351.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\btn_list.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_adr010.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0975.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0850.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_adr050.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job2700.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set3510.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1270.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0930.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0970d.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set8100.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_toneru.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\lsb1100a.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_right_edit.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\img\\sup_title_head.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_pend16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_fax_error.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_proll100-25_16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0585.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0980.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0880.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6350.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\btn_property.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0510b.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4110.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\s_pr_dh1.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_adr100.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\lsb1750.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\btn_status-n.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\lsb1100b.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\pri1080.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_jl_web.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_job030.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_toner_16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4000b.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_top010.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\wim_help.css",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1190.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\lsb0000.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_func_unitdoc.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_adr060.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\pri0000.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_dh.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\thmbd.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_cmode_double.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4230d.html"
            ],
            "file_exists": [
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1320.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4000a.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1440.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set9330.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4000.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_other16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_ot_rest16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_jl_printer.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_p100-25_16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\iconk13.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1100.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\header_btn_sch.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1380.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_user.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_right_view.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_key.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\note.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\permission\\contents\\cntpermission_a5.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_psave16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\lsb1720.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_job010.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\top0030.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6340.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job2620p.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\top0060.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6360a.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set8030.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\btn_arrow_left2.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1311.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set3510a.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4130.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1360.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\iconk21.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1140.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0500.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_job020.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_proll50_16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0985.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_jl_netfile.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0840a.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0990.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\lsb1100.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_error16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0998.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_doc_lock.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_ot_full16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job2650.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0890.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\permission\\permission.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\logo01.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\permission\\contents\\cntpermission_u1.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_tnend16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\top2100a.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set9300.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_help.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6110.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set8080.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6360.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4170.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set8010.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\iconk19-s.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_dosattack.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set7110.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_tn_bar_k80.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job7235.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1100a.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_func_netfile.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0970.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_scall_fax16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_fax010.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6380.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\pri1060.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0540.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_pri020.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_p_jam16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\top0070.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0560b.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_wup16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4190.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0975b.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\iconk14.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_group.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0600.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\lsb1800.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0000.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set8020.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_adr090.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6160.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\wim_help.js",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0870.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1450.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1420.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6361.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_proll100_16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_box040.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1130.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0970c.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\icnk_y.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job7240.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6230.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6010.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set7220a.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\top0020.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set7280.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\pri2210.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6350b.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\permission",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0990a.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0510a.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_cmode_color.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1400.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1080.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0980a.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\permission\\contents\\cntpermission_a2.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job2605.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_right_owner.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\tn03.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_fax020.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0580.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set9350.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0520c.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job2630.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set9010.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\tonner_nise.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0940.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box0000.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job2700a.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_func_unit_doc.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\btn_arrow_right1.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6270.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0970b.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_fax040.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\btn_thumbnail.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4180.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0998a.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_proll25_16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\top0051.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_dv.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0990b.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\img\\item_title_head.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0980b.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\tn02.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set8130.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_adr030.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0840.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1350.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0510.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_proll75_16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\yougo.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set7220.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1120.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job2605a.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\tonner_off.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1030.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_tn_bar_k80ok.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_adr000.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4240.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\btn_sort_up.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set9320.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\permission\\contents\\cntpermission_a4.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\permission\\contents\\cntpermission_u3.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\tn04.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_func_others.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_cmode_single.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0550.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1430.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_ready16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job2610.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1030a.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\lsb1710.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6320.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\lsb1780.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set8110.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\header_btn_link_page.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_p75_16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_tend16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set8050.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_offline_16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_box020.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_cmode_r.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\permission\\contents\\cntpermission_u2.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\top0010.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_cmode_br.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_toner_bg.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1290.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_prollend16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1340.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job2640.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_job000.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\tonner_on.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\keyicon01.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\top0000.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\btn_arrow_right2.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_print16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\header_btn_help.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job2600.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0560a.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_func_copy.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_cmode_bw.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_fax000.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6130.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\index.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_ot_16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_right_access.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1260.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6120.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\s_pr_dv1.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0810.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\btn_net_ricoh.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6210.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set9310.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6330.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4231.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_pri030.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_box010.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_pri000.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set9110.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1295.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4230.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0975a.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_p100_16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6310.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job7230.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1010.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1310.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0590.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_fax030.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\access_right.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\tn01.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\permission\\contents\\cntpermission_a3.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\permission\\title\\titpermission.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\btn_sort_down.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_prollnend16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0960.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_box000.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\permission\\title",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4230a.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1285.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_func_fax.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0950.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\img",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\tonner_no.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_box060.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6220.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1250.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\spacer.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1060.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set7290.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_cmode_b.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set8070.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_p50_16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4230b.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4000c.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\copyright.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_func_scan.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0860.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_scall16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_tonerk.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\pri2000.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_func_printer.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_adr020.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_p25_16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\top2100.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0980c.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\btn_icon.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1240.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\permission\\contents\\cntpermission_a1.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\icnk_t.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set9021.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1091.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_tn_bar_k.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_box070.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_box050.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_jl_docubox.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1220.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4230c.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6260.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\btn_arrow_left1.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1370.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set3550.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0995.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_right_fullaccess.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job2620.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\header_btn_version_Inf.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set8090.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_jl_copy.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\img\\item_name_head.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_c_open16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_adr040.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_pnend16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_box080.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1100b.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_pri010.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set7150.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0910.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6350a.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_box030.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set9340.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0970e.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\permission\\contents",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0670.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set8500.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_adf_jam16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set7295.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6351.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\btn_list.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_adr010.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0975.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0850.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_adr050.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\job2700.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set3510.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1270.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0930.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0970d.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set8100.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_toneru.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\lsb1100a.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_right_edit.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\img\\sup_title_head.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_pend16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_fax_error.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_proll100-25_16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0585.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0980.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set0880.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set6350.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\btn_property.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\adr0510b.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4110.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\s_pr_dh1.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_adr100.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\lsb1750.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\btn_status-n.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\lsb1100b.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\pri1080.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_jl_web.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_job030.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_toner_16.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4000b.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_top010.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\wim_help.css",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\box1190.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\lsb0000.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_func_unitdoc.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\p_adr060.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\pri0000.html",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_status\\dev_st_dh.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\thmbd.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\gif_common\\icon_cmode_double.gif",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\it\\set4230d.html"
            ],
            "file_read": [
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\3e0ab14314114ad5a273ccc7889831961475f3cbe4a06b2b3e98cb9e2da9ee4b.bin"
            ],
            "regkey_read": [
                "HKEY_CURRENT_USER\\Keyboard Layout\\Toggle\\Language Hotkey",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\CTF\\EnableAnchorContext",
                "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Nls\\CustomLocale\\en-US",
                "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Nls\\Locale\\00000409",
                "HKEY_CURRENT_USER\\Keyboard Layout\\Toggle\\Hotkey",
                "HKEY_CURRENT_USER\\Keyboard Layout\\Toggle\\Layout Hotkey",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\OLE\\PageAllocatorUseSystemHeap",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\CTF\\TIP\\{0000897b-83df-4b96-be07-0fb58b01c4a4}\\LanguageProfile\\0x00000000\\{0001bea3-ed56-483d-a2e2-aeae25577436}\\Enable",
                "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Nls\\Language Groups\\1",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\GRE_Initialize\\DisableMetaFiles",
                "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Nls\\ExtendedLocale\\en-US",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\OLE\\PageAllocatorSystemHeapIsPrivate"
            ]
        },
        "first_seen": 1565643185.7656,
        "ppid": 2504
    },
    {
        "process_path": "C:\\Windows\\System32\\lsass.exe",
        "process_name": "lsass.exe",
        "pid": 476,
        "summary": {},
        "first_seen": 1565643185.3438,
        "ppid": 376
    }
]

Signatures

[
    {
        "markcount": 1,
        "families": [],
        "description": "Checks if process is being debugged by a debugger",
        "severity": 1,
        "marks": [
            {
                "call": {
                    "category": "system",
                    "status": 0,
                    "stacktrace": [],
                    "last_error": 0,
                    "nt_status": -1073741816,
                    "api": "IsDebuggerPresent",
                    "return_value": 0,
                    "arguments": {},
                    "time": 1565643185.8436,
                    "tid": 2800,
                    "flags": {}
                },
                "pid": 2124,
                "type": "call",
                "cid": 142
            }
        ],
        "references": [],
        "name": "checks_debugger"
    },
    {
        "markcount": 1,
        "families": [],
        "description": "The executable uses a known packer",
        "severity": 1,
        "marks": [
            {
                "category": "packer",
                "ioc": "UPX 2.90 [LZMA] -> Markus Oberhumer, Laszlo Molnar & John Reiser",
                "type": "ioc",
                "description": null
            }
        ],
        "references": [],
        "name": "peid_packer"
    },
    {
        "markcount": 2,
        "families": [],
        "description": "The binary likely contains encrypted or compressed data indicative of a packer",
        "severity": 2,
        "marks": [
            {
                "entropy": 7.9082522433553,
                "section": {
                    "size_of_data": "0x0000ee00",
                    "virtual_address": "0x0001d000",
                    "entropy": 7.9082522433553,
                    "name": "UPX1",
                    "virtual_size": "0x0000f000"
                },
                "type": "generic",
                "description": "A section with a high entropy has been found"
            },
            {
                "entropy": 0.96747967479675,
                "type": "generic",
                "description": "Overall entropy of this PE file is high"
            }
        ],
        "references": [
            "http:\/\/www.forensickb.com\/2013\/03\/file-entropy-explained.html",
            "http:\/\/virii.es\/U\/Using%20Entropy%20Analysis%20to%20Find%20Encrypted%20and%20Packed%20Malware.pdf"
        ],
        "name": "packer_entropy"
    },
    {
        "markcount": 2,
        "families": [],
        "description": "The executable is compressed using UPX",
        "severity": 2,
        "marks": [
            {
                "section": "UPX0",
                "type": "generic",
                "description": "Section name indicates UPX"
            },
            {
                "section": "UPX1",
                "type": "generic",
                "description": "Section name indicates UPX"
            }
        ],
        "references": [],
        "name": "packer_upx"
    }
]

Yara

The Yara rules did not detect anything in the file.

Network

{
    "tls": [],
    "udp": [
        {
            "src": "192.168.56.101",
            "dst": "192.168.56.255",
            "offset": 546,
            "time": 3.0782840251923,
            "dport": 137,
            "sport": 137
        },
        {
            "src": "192.168.56.101",
            "dst": "192.168.56.255",
            "offset": 5226,
            "time": 9.1043889522552,
            "dport": 138,
            "sport": 138
        },
        {
            "src": "192.168.56.101",
            "dst": "224.0.0.252",
            "offset": 7070,
            "time": 3.0356669425964,
            "dport": 5355,
            "sport": 51001
        },
        {
            "src": "192.168.56.101",
            "dst": "224.0.0.252",
            "offset": 7398,
            "time": 1.0192198753357,
            "dport": 5355,
            "sport": 53595
        },
        {
            "src": "192.168.56.101",
            "dst": "224.0.0.252",
            "offset": 7726,
            "time": 3.0466828346252,
            "dport": 5355,
            "sport": 53848
        },
        {
            "src": "192.168.56.101",
            "dst": "224.0.0.252",
            "offset": 8054,
            "time": 1.5344560146332,
            "dport": 5355,
            "sport": 54255
        },
        {
            "src": "192.168.56.101",
            "dst": "224.0.0.252",
            "offset": 8382,
            "time": -0.095793962478638,
            "dport": 5355,
            "sport": 55314
        },
        {
            "src": "192.168.56.101",
            "dst": "239.255.255.250",
            "offset": 8710,
            "time": 1.5472459793091,
            "dport": 1900,
            "sport": 1900
        },
        {
            "src": "192.168.56.101",
            "dst": "239.255.255.250",
            "offset": 26126,
            "time": 1.0488948822021,
            "dport": 3702,
            "sport": 49152
        },
        {
            "src": "192.168.56.101",
            "dst": "239.255.255.250",
            "offset": 34510,
            "time": 3.1257839202881,
            "dport": 1900,
            "sport": 53598
        }
    ],
    "dns_servers": [],
    "http": [],
    "icmp": [],
    "smtp": [],
    "tcp": [],
    "smtp_ex": [],
    "mitm": [],
    "hosts": [],
    "pcap_sha256": "ed9f75391453a95e15b85041fd3f9a768d285cf49dfa1c49ecb607120522eb32",
    "dns": [],
    "http_ex": [],
    "domains": [],
    "dead_hosts": [],
    "sorted_pcap_sha256": "ee50c00dec871de2cc4469fa0c2fd6d1fd08cf4d527ae43eeca5569bd396abdd",
    "irc": [],
    "https_ex": []
}

Screenshots

Error Messages

Malware or legitimate?

If you feel that you need more information to determine if your should keep this file or remove it, please read this guide.

And now some shameless self promotion ;)

Hi, my name is Roger Karlsson. I've been running this website since 2006. I want to let you know about the FreeFixer program. FreeFixer is a freeware tool that analyzes your system and let you manually identify unwanted programs. Once you've identified some malware files, FreeFixer is pretty good at removing them. You can download FreeFixer here. It runs on Windows 2000/XP/2003/2008/2016/2019/Vista/7/8/8.1/10. Supports both 32- and 64-bit Windows.

If you have questions, feedback on FreeFixer or the freefixer.com website, need help analyzing FreeFixer's scan result or just want to say hello, please contact me. You can find my email address at the contact page.

• Privacy Policy