Gen.Variant.Zusy.193565_54c91853c5 – Adaware

Susp_Dropper (Kaspersky), Gen:Variant.Zusy.193565 (B) (Emsisoft), Gen:Variant.Zusy.193565 (AdAware), Trojan.NSIS.StartPage.FD, Trojan.Win32.IEDummy.FD, mzpefinder_pcap_file.YR (Lavasoft MAS)Behaviour: Trojan

The description has been automatically generated by Lavasoft Malware Analysis System and it may contain incomplete or inaccurate information.

Summary

MD5: 54c91853c5c3aa83367f0981ac0155ce

SHA1: a80345a09fddf85e1d9b8e05263ee402b6855336

SHA256: 0c90eaec703ccab3c7ebfc4bd766c68682695d354d81f5f673a3cf8c639b583b

SSDeep: 3072:xSICBQgLL5Au0pu1YBmz/PdL41424R5fr:xSICBTLL5IBE/PdL414Z

Size: 163840 bytes

File type: EXE

Platform: WIN32

Entropy: Not Packed

PEID: UPolyXv05_v6

Company: no certificate found

Created at: 2011-01-02 17:49:35

Analyzed on: WindowsXP SP3 32-bit

Summary: Trojan. A program that appears to do one thing but actually does another (a.k.a. Trojan Horse).

Dynamic Analysis

Payload

No specific payload has been found.

Process activity

The Trojan creates the following process(es):

CheckLockedWSFiles.exe:1228
CheckLockedWSFiles.exe:828
CheckLockedWSFiles.exe:1376
%original file name%.exe:1332
whitesmoke-silent.exe:1824
wsget.exe:432

The Trojan injects its code into the following process(es):

WhiteSmokeTranslator_rev1.exe:1500
WSTray.exe:1300
WSRegistration.exe:1620

Mutexes

The following mutexes were created/opened:No objects were found.

File activity

The process %original file name%.exe:1332 makes changes in the file system.

The Trojan creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\~nsu.tmp\boost.ico (13 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\~nsu.tmp\wsget.exe (66 bytes)
%Documents and Settings%\%current user%\Desktop\Improve Your PC.lnk (1 bytes)

The process WhiteSmokeTranslator_rev1.exe:1500 makes changes in the file system.

The Trojan creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\WhiteSmoke\msvcr80.dll (21216 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsx6.tmp\System.dll (11 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsw4.tmp (563482 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsx6.tmp\Whitesmoke_EULA.txt (784 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\WhiteSmoke\CheckLockedWsFiles.exe (3312 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsx6.tmp\CustomLicense.dll (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsx6.tmp\ioSpecial.ini (897 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\WhiteSmoke\Microsoft.VC80.CRT.manifest (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsx6.tmp\modern-wizard.bmp (784 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\WhiteSmoke\msvcp80.dll (19096 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsx6.tmp\nsDialogs.dll (9 bytes)

The Trojan deletes the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\nsr3.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsx6.tmp (0 bytes)

The process whitesmoke-silent.exe:1824 makes changes in the file system.

The Trojan creates and/or writes to the following file(s):

%Program Files%\WhiteSmoke\html\english\gui\img\screens\screen_ok_press.gif (1 bytes)
%Program Files%\WhiteSmoke\wcxChrome.crx (5064 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\Letters of Appreciation\Letter of Thanks to Employee of Another Firm.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\img\plusbottom.gif (88 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\Board of Directors & SHareholders\Notice of Annual Meeting of Shareholders.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\rightBottom.gif (571 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\edit_sidefade.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\registration\img\back - Copy.png (2392 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\screens\screen_bg_top.png (5 bytes)
%Program Files%\WhiteSmoke\html\english\gui\js\NonPackedVersion\sound.js (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\top_close.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Greetings\Graduation\YouHaveGraduated.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\Business Plan\Announcement of New Business Opening.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\settings\img\Buttons\cancel_down.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\img\Background\down_arrow.png (215 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\input_bg.png (199 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\GPL-LICENSE.txt (15 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Medical\Health Plans\Appeal for Assisstance.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Resumes and Cover Letters\Resumes\Graphic Designer Resume.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Internet & Technology\Resumes\Technical Writer 3 Resume.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\common\js\prototype.js (3616 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Sales & Marketing\Customer Orders\Apology for Delay in Delivery.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\review-section\shadow2.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\img\Buttons\go_up_.gif (2 bytes)
%Program Files%\WhiteSmoke\tessdll_x64.dll (66604 bytes)
%Program Files%\WhiteSmoke\html\english\settings\img\Buttons\tab_content_on.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\store_roll.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Cover Letters\GrantCoverSheet.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\settings\img\Background\main_bg.png (4 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\screens\ico_expired.gif (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\rightBottom.gif (571 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Literary\Promotions\Promotional Letter Antique Shop.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\caption_bar_max_up.gif (672 bytes)
%Program Files%\WhiteSmoke\html\english\userGuide\images\boxBlackFix.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Medical\CV & Resumes\Medical Essay Residency Experience.html (6 bytes)
%Program Files%\WhiteSmoke\WMonitorX.dll (7192 bytes)
%Program Files%\WhiteSmoke\html\english\userGuide\images\dictionaryTab.png (1552 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Sales & Marketing\Customer Orders\Cancellation of an Order.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Confidentiality Agreements\Business Credit Application.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\caption_px_.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\registration\img\continue_button_click.png (4 bytes)
%Program Files%\WhiteSmoke\html\english\gui\js\x.gif (49 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\grammar\search_hover.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\red.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\menuline_tutorials_up.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\style\dictionary.css (12 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Sales & Marketing\Customer Services\New Representative.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\context_br2.gif (92 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\summaryline_px.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\msdropdown\dd.css (4 bytes)
%Program Files%\WhiteSmoke\html\english\gui\js\enrichmentsContextMenu.class.js (6 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Internet & Technology\Resumes\Database and Application Developer Resume.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\folder.gif (372 bytes)
%Program Files%\WhiteSmoke\html\english\templates\dtree.js (13 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\context_sub_menu_bg.png (203 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Hiring and Termination\Resignation Letters\Job Resignation Letter.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\icons\sprite.jpg (4 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\plusbottom.gif (88 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\img\Background\input_bg_old.png (199 bytes)
%Program Files%\WhiteSmoke\html\english\gui\style\iframeTest.css (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\left_input.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Agreements & Contracts\Notice to Vacate Premises.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\js\NonPackedVersion\dragdrop.js (784 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\Memorandum\template memorandum.htm (1856 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\menuline_writer_up.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Hiring and Termination\Dismissal and Rejection\Acknowledgment of Job Application.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\js\jquery-1.4.2.min.js (2392 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Power of Attorney\Special Power of Attorney.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\userGuide\images\bg - Copy.png (9 bytes)
%Program Files%\WhiteSmoke\html\english\gui\style\combobox.css (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Resumes and Cover Letters\Resumes\Medical Resume - Physician.html (6 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Agreements & Contracts\Bill of Sale.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\img\folderopen.gif (376 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\menuline_dictionary_on.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Greetings\Christmas\ChristmasGreetings.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Sales & Marketing\Customer Complaints\Request Refusal for Sales.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\js\appInterface.js (8184 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Sales & Marketing\Customer Complaints\Customer Letter of Complaint.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\summaryline_apply_up.png (4 bytes)
%Program Files%\WhiteSmoke\WSTray.exe.manifest (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Hiring and Termination\Hiring Employees\Employment Letters\Letter for Assistant Professor.html (4 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Literary\Promotions\Letter of Recommendation.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\context_tr2.gif (93 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\caption_bar_max_up_.gif (196 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Personal & Private Documents\General Release.html (2 bytes)
%Program Files%\WhiteSmoke\osmax64.ocx (20416 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\buttons_tray_px.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\img\Buttons\hTranslation.png (4 bytes)
%Program Files%\WhiteSmoke\WCaptureMoz\install.rdf (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\caption_bar_max_over.gif (196 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\jspVerticalBar.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Sales & Marketing\Customer Orders\Acknowledgment of Request for Materials.html (915 bytes)
%Program Files%\WhiteSmoke\html\english\templates\style\style.css (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\myEmpty.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\summaryline_check_down.png (4 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\caption_px_11.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Finance\InvestigationOfBillingInquiry.html (2 bytes)
%Program Files%\WhiteSmoke\tessdll.dll (48241 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Employment Requests\Request for Letter of Reference.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\grammar\addto_up.png (4 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\screens\loading_window.swf (784 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Hiring and Termination\Hiring Employees\Employment Letters\Request for Employment Test.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Resumes and Cover Letters\Resumes\Management Resume 2.html (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\summaryline_apply_down.png (4 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Internet & Technology\Resumes\Marketing Director Resume.html (4 bytes)
%Program Files%\WhiteSmoke\html\english\gui\js\grammarContextMenu.class.js (784 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\review-section\content-review4.png (9 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Literary\Promotions\Comments to Author Regarding Book.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\red2.png (3 bytes)
%Program Files%\WhiteSmoke\atl80.dll (3312 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Sales & Marketing\Customer Services\Valued Customer Status.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\grammar\search_disabled.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Students\Careers\Career Letter for Accounting Position.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\Notices & Certificates\Certificate of Abandonment of Fictitious Business Name.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Real Estate\Notices\Notice to Pay Rent or Quit.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\settings\css\index.css (7 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Medical\Medical Employment\Medical Resume Format.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\registration\img\captionbar\caption_bar_close_up_over.gif (307 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Real Estate\Leases\Memorandum of Contract for Sale and Purchase of Property.html (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\store_up.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\js\jquery.jscrollpane.min.js (12 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\resize_gripper.gif (277 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\arOpen.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\Managing & Motivating Employees\Notice of Promotion.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\leftCaptionCorner.gif (372 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Personal Matters\Sale of Automobile or Other Motor Vehicle.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\review-section\shdow_good.gif (70 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\summaryline_apply_roll.png (4 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Literary\Promotions\Magazine Review.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\settings\img\Buttons\tab_info_off.png (4 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Finances\Customer Terms of Payment.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\open.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Agreements\Acceptance of Purchase Security Agreement.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Hiring and Termination\Dismissal and Rejection\Job Rejection Letter2.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Medical\Medical Employment\Thank You After Interview.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\Copy of notice_right_top_bg.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Resumes and Cover Letters\Resumes\Technical Writer.html (4 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Finances\Letter for Customer Overdue Account.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Resumes and Cover Letters\Job Search Cover Letters\Job Search Cover Letter - Disabled Citizens.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Agreements & Contracts\Car Rental Contract.html (3 bytes)
%Program Files%\WhiteSmoke\WSMouseHook.dll (14 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\img\empty.gif (62 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\logo3.gif (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\objects\p7tm\p7t_plus.gif (58 bytes)
%Program Files%\WhiteSmoke\html\english\gui\js\unittest.js (784 bytes)
%Program Files%\WhiteSmoke\html\english\userGuide\js\userGuide.js (671 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Resumes and Cover Letters\Resumes\Database and Application Developer Resume.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Real Estate\Leases\Bill of Sale.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\screens\button_no_down.png (4 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Hiring and Termination\Hiring Employees\Employment Letters\Introduction of New Employee.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\Business Legal Notices\Final Notice of Impending Litigation.html (1 bytes)
%Program Files%\WhiteSmoke\secman.dll (5064 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\icons\1273404841_tick_16.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\img\nolines_minus.gif (861 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\img\Background\corner_top_left.png (341 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Finances\Bank Error.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\menuline_tutorials_up_.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\settings\img\Buttons\cancel_up.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Resumes and Cover Letters\Resumes\Java Developer Resume.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Resumes and Cover Letters\Resumes\Healthcare Resume.html (4 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\store_down.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Agreements\Consulting Agreement.html (14 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nst5.tmp\KillProc.dll (784 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\icons\icon_phone.gif (579 bytes)
%Program Files%\WhiteSmoke\html\english\gui\js\Contextmenu.js (9 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Internet & Technology\Resumes\Marketing Administrator Resume.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\index.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Advertising\Press Release.html (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\Business Agreements\Consignment Agreement.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Sales & Marketing\Customer Orders\Repairs to Product.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Community Work\ResignationFromVoluntaryPosition.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\caption_bottom_px_.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\leftBottom3_.gif (624 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Sales & Marketing\Customer Services\Good Customer Service.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Employee manual\Employment Applications.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\top_grey_strip.gif (151 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\summaryline_check_down.png (4 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\screens\screen_bg_old.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\topButtonsRight.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\js\dragdrop.pack.js (12 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Internet & Technology\Resumes\Power Point Designer Resume.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\summaryline_apply_roll.png (4 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\summaryline_check_up.png (5 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\rightCaptionCorner.gif (366 bytes)
%Program Files%\WhiteSmoke\html\english\gui\js\dictionaryContextMenu.class.js (784 bytes)
%Program Files%\WhiteSmoke\html\english\registration\img\down.gif (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\style\dictionary.css (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\menuline_writer_on.gif (554 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Sales & Marketing\Customer Orders\Apology for Delay of Order.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\icons\icon_cart.gif (970 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\caption_strip_right_corner.gif (348 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Agreements & Contracts\Mutual rescission of contract.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\js\NonPackedVersion\prototype.js (5064 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Sales & Marketing\New Products\New Product Ideas.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\settings\img\Buttons\cancel_disabled.png (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\caption_bottom_px.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\grammar\definition_hover.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\grammar\explanation_hover.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\js\jquery.mousewheel.js (2 bytes)
%Program Files%\WhiteSmoke\html\english\common\iepngfix\opacity.png (11 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\caption_bar_close_down.gif (316 bytes)
%Program Files%\WhiteSmoke\html\english\templates\style\templates.css (5 bytes)
%Program Files%\WhiteSmoke\html\english\registration\img\continue_button_click.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\topButtonsLeft.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\userGuide\css\style - Copy.css (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\review-section\closedy2.png (135 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\img\Buttons\down_arrow.png (215 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\caption_bar_re_up.gif (196 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Resumes and Cover Letters\Resumes\Medical Essay Residency Experience.html (5 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Real Estate\Evictions\Notice to Vacate Premises.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\menuline_translator_roll.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\Correspondence\Letter of Complaint.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Affidavits\Affidavit of No Lien.html (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\objects\ebook_js.js (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\caption_bar_close_up.gif (663 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Sales & Marketing\Customer Services\Valued Customer Party Invitation.html (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\menuline_writer_roll.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Real Estate\Leases\Contract Lease of Property.html (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\help_down.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\js\sound.pack.js (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\grammar\howto_disabled.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Collections\Letter of Credit (Irrevocable).html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Medical\Complaints\Letter for Quality of Care Complaint.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\General Admin\Change of Company Name.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\userGuide\images\i.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Finance\BankError.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\userGuide\images\arr2.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\review-section\score1.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Sales & Marketing\Resumes\Sales Representative Resume.html (4 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Literary\Advertising\Art Advertising Flyer.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\menu.htm (2392 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Internet & Technology\Resumes\Implementation Engineer Resume.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\trash.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Copyright,Patent & Trademark\Assignment of Copyright.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\menuline_writer_on.gif (554 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\General Admin\Closing A Business.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\js\jqModal.js (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\style\screens.css (6 bytes)
%Program Files%\WhiteSmoke\html\english\gui\js\jquery.ba-throttle-debounce.js (10 bytes)
%Program Files%\WhiteSmoke\html\english\gui\js\ws_content_manager.js (1856 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\grammar\addto_hover.png (4 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Greetings\Christmas\ChristmasGreetingsToWorkers.html (903 bytes)
%Program Files%\WhiteSmoke\html\english\registration\img\banner.png (6584 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\minusbottom.gif (85 bytes)
%Program Files%\WhiteSmoke\html\english\settings\img\Buttons\tab_general_off.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\objects\flashobject.js (6 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\rightBottom - Copy.gif (574 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\Business Agreements\Consulting Agreement.html (15 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Sales & Marketing\Customer Accounts\Second Request for Refund on Returned Merchandise.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\caption_bar_max_down.gif (196 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\dpreloader.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\userGuide\images\correctionssuggestions.png (2392 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Students\University Correspondence\Request for University Application Material.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Credibility\Debt Validation.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Resumes and Cover Letters\Resumes\Freelance Marcom Resume.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Sales & Marketing\Customer Accounts\Sale on Approval Acknowledgment.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\review-section\content-review.png (9 bytes)
%Program Files%\WhiteSmoke\html\english\gui\js\spellingContextMenu.class.js (6 bytes)
%Program Files%\WhiteSmoke\html\english\userGuide\images\WriterTab_old.png (3312 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Medical\Report\Operative Biopsy Report.html (4 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\icons\icon_cd.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\right_input.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\js\NonPackedVersion\slider.js (10 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\nolines_minus.gif (861 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\js\xmlhttp.js (7 bytes)
%Program Files%\WhiteSmoke\html\english\userGuide\faq.html (10 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\bottom_right_corner.gif (78 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\icons\icon_music.gif (999 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\feather.gif (568 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Collections\Request for Credit application.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\floatingButton\blue.gif (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\Staff Notices\Praise for Employee's Performance.html (1 bytes)
%Program Files%\WhiteSmoke\WCustom_x64.dll (7192 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\img\Background\leftSide.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Medical\Billing\Billing Problem.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Collections\Installment note.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\empty - Copy.gif (62 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Greetings\Christmas\InTheStillOfTheNightChristmasGreeting.html (5 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\General Admin\Business Invitation.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\summaryline_check_roll.png (4 bytes)
%Program Files%\WhiteSmoke\html\english\floatingButton_howto\js\iepngfix\helix.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Employee Reference Letters\EmploymentReferenceLetter.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\summaryline_apply_down.png (4 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Confidentiality Agreements\Discharge of Security Interest.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\menuline_dictionary_up.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\bottom_grey_strip.gif (143 bytes)
%Program Files%\WhiteSmoke\html\english\settings\img\Background\main_bg_old.png (4 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Sales & Marketing\Special Offers & Sales\Introductory Offer for a New Store.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\screens\reviewOpen_up.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\cascade.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\review-section\shadow.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\screens\screen_ok_up.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\edit_footer_px.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Thank You\Thank You Staff for Emotional Support.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\js\templatesInterface.js (1 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\img\Buttons\humanTranslation_press.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\objects\p7tm\p7t_minus.gif (57 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Literary\Resumes\Actor Resume.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\screens\caption_bar_close_over.gif (619 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Finance\LetterOfCreditGeneral.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Condolences\LetterOfCondolence.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\logologo2_11.gif (2 bytes)
%Program Files%\WhiteSmoke\html\english\userGuide\js\jquery.min.js (2392 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\Staff Notices\Reprimand for Employee Unsatisfactory Behavior.html (964 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\screens\button_yes_up.png (3 bytes)
%Program Files%\WhiteSmoke\WCaptureMoz\components\WcxComm.xpt (355 bytes)
%Program Files%\WhiteSmoke\html\english\registration\img\continue_button_over.gif (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\leftSide3_.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\Apologies\Apology for Cancellation of a Meeting.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\userGuide\images\translatorTab.png (3312 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Finances\Grant Cover Sheet.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\Correspondence\Transferring to New Division.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Employee Reference Letters\VerificationOfEmploymentLetter.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\apply_up_.png (4 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\Correspondence\Holiday Greetings.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\menuline_templates_roll.gif (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Resumes and Cover Letters\Resumes\Banking Resume.html (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\caption_bar_re_up.gif (196 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Resumes\Marketing Administrator Resume.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\review-section\score2.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Greetings\Christmas\HappyChristmasGreeting.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Personal & Private Documents\Sale of Automobile or other Motor Vehicle.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Medical\Request for Medical Information\Request for Personal Information.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\grammar\enrichment_up.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Real Estate\Assignment\Assignment of Mortgage.html (4 bytes)
%Program Files%\WhiteSmoke\html\english\common\js\common.js (2 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\img\Buttons\moreLang_press.gif (2 bytes)
%Program Files%\WhiteSmoke\html\english\floatingButton_howto\js\iepngfix\iepngfix.html (5 bytes)
%Program Files%\WhiteSmoke\html\english\userGuide\images\TheTemplatesTab.png (784 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\img\trash.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Medical\No Show\No Show for Appointment.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\common\iepngfix\blank.gif (49 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Internet & Technology\Resumes\Statistician Director of Research Resume.html (876 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\line.gif (66 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\strike_green.gif (49 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\img\musicfolder.gif (633 bytes)
%Program Files%\WhiteSmoke\secman64.dll (4992 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\edit_footer_left.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Internet & Technology\Resumes\Marketing Manager Resume.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\registration\js\regInterface.js (6 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Students\Personal Correspondence\Request for Financial Assistance from Parents.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Resumes and Cover Letters\Job Search Cover Letters\Law Internship Cover Letter.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\smallclosebutton.gif (163 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Community Affairs\Request for Traffic Light.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\userGuide\userGuide.html (10 bytes)
%Program Files%\WhiteSmoke\WS.ico (27 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\context_submenu_dis.gif (49 bytes)
%Program Files%\WhiteSmoke\html\english\settings\img\Buttons\tab_shortcut_off.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\js\iepngfix\iepngfix.htc (2 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\img\Buttons\switch.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\caption_px.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Sales & Marketing\Customer Services\Thank you to Satisfied Customer.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\settings\img\Buttons\save_over.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Real Estate\Notices\Collection Demand Letter.html (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Agreements & Contracts\Contract With Stock Broker.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\js\ws_links.js (643 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\strike_green2.gif (70 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Internet & Technology\Resumes\Marcom Expert Resume.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\menuline_templates_on.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\style\indexnew.css (1552 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\img\Buttons\moreLang_up.gif (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\review-section\reviewWhite3.gif (7 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Hiring and Firing\Termination of Employment.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\store_roll.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\img\folder.gif (372 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Resumes and Cover Letters\Resumes\Management Resume.html (3 bytes)
%Program Files%\WhiteSmoke\html\english\registration\style\registration.css (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\top_open.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Finances\Request for Documentation of Invoice.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\Correspondence\Confirmation of Reschedule of Meeting.html (920 bytes)
%Program Files%\WhiteSmoke\html\english\templates\style\jquery.jscrollpane.css (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Real Estate\Notices\Notice Of Overdue Rent.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\spacer.gif (49 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\img\base.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\floatingButton\blue-rollover.gif (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\joinbottom.gif (66 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Sales & Marketing\Customer Orders\Arrival of Outstanding Orders.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\blue.png (3 bytes)
%Program Files%\WhiteSmoke\WSTray.exe (66168 bytes)
%Program Files%\WhiteSmoke\html\english\common\iepngfix\helix.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\js\tooltip.js (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Real Estate\Mortgages\Assignment of Mortgage.html (4 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Employee manual\Employee Performance Review and Planning Sessions.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Personal & Private Documents\Living Will - Male.html (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\Apologies\Apology for Inappropriate Behavior.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\img\cd.gif (239 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\wslogo.gif (5 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Resumes\Management Resume 2.html (4 bytes)
%Program Files%\WhiteSmoke\html\english\userGuide\js\jquery.mousewheel.js (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Confidentiality Agreements\Demand by Secured Party.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Resumes and Cover Letters\Resumes\Technical Publication Manager Resume.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\menuline_tutorials_on.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\MIT-LICENSE.txt (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Internet & Technology\Resumes\Internet Marketer Resume.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Resumes and Cover Letters\Job Search Cover Letters\Cover Letter Auditor Development Program.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\js\ypSlideOutMenusContext.js (8 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Students\Admissions Essays\Graduate School Literary Essay.html (5 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\icons\button-large.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Internet & Technology\Resumes\Programmer Developer Resume.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\floatingButton\red&blue.gif (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\img\join.gif (69 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Students\Resumes\Student Resume.html (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Sales & Marketing\Resumes\Customer Service Resume 2.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\userGuide\js\jquery-1.4.2.min.js (2392 bytes)
%Program Files%\WhiteSmoke\html\english\gui\js\jquery-1.3.2.min.js (1856 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\right_input.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Real Estate\Leases\Agreement for Extension of Lease.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Resumes and Cover Letters\Resumes\Customer Service Resume.html (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Well Wishes\Welcome New Tenants.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Assignments\Assignment of Security Interest.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\style\jeegoo.css (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\grammar\howto_up.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\js\common.js (784 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\Correspondence\Staff Sympathy Letter.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\img\question.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Internet & Technology\Resumes\Product Delivery Engineer Resume.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\caption_bar_re_down.gif (196 bytes)
%Program Files%\WhiteSmoke\html\english\userGuide\images\TheRight-clickMenu.png (5520 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Employee Reference Letters\ReferenceLetterByAcquaintance.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Resumes and Cover Letters\Job Search Cover Letters\Job Application Letter.html (2 bytes)
%Program Files%\WhiteSmoke\FuncServer_WDC_x64.exe (3312 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\review-section\x_hover.gif (176 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\borders2.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\img\globe.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\img\spacer.gif (49 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Real Estate\Notices\Request Estimate of Appraisal Costs.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Students\Personal Correspondence\Congratulations to High School Graduate.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Outstanding payments\Collection Letter.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\registration\img\banner.gif (1856 bytes)
%Program Files%\WhiteSmoke\html\english\settings\img\captionbar\caption_bar_close_up.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\userGuide\images\WhiteSmokeOverview.png (1856 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Employee Reference Letters\RequestForEmployeeReferenceLetter.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\grammar\explanation_up.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Resumes and Cover Letters\Job Search Cover Letters\Resume Cover Letter2.html (770 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Sales & Marketing\Special Offers & Sales\Announcing Summer Sale.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\review-section\reviewWhite5.gif (9 bytes)
%Program Files%\WhiteSmoke\html\english\templates\js\jquery-1.4.2.min.js (2392 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Internet & Technology\Resumes\Graphic Designer Resume.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\settings\js\iepngfix\iepngfix.html (5 bytes)
%Program Files%\WhiteSmoke\html\english\gui\js\prototype.pack.js (1856 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Hiring and Termination\Hiring Employees\Thank You Letters\Thank You Letter After Interview.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\img\Buttons\go_up.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Assignments\Assignment of Deed of Trust.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\topButtonsLeft_.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\folderopen.gif (376 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Personal & Private Documents\Living Will - female.html (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Sales & Marketing\Agreements\Professional Services Agreement.html (12 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Collections\10 day notice before collections on delinquent account.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Agreements & Contracts\Bill of Sale 2.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\review-section\reviewWhite2.gif (8 bytes)
%Program Files%\WhiteSmoke\osmax.ocx (19096 bytes)
%Program Files%\WhiteSmoke\html\english\settings\js\iepngfix\iepngfix.htc (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\js\switchcontent.js (15 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\review-section\dot.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\settings\img\Buttons\tab_content_disabled.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Internet & Technology\Resumes\Packaging Senior Engineer Resume.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\logo2.gif (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\screens\welcomeGo_up.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Finance\RemovalOfInadequateInformation.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\settings\img\Buttons\tab_shortcut_disabled.png (4 bytes)
%Program Files%\WhiteSmoke\html\english\gui\style\enrichments.css (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Students\University Correspondence\Appreciation of Scholarship.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\msdropdown\dd_arrow.gif (138 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\grammar\grammarexpclosebutton.gif (183 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Literary\Promotions\Introduction of Novel.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Thank You\Message of Thanks.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\review-section\reviewWhite.gif (5 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Sales & Marketing\New Products\Introductory Product Offer.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Internet & Technology\Affiliate Program Agreement.rtf (3616 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\summaryline_left_corner.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\menuline_toolkit_up.gif (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Agreements\Business Consultant Agreement.html (5 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\icons\icon_secure.gif (373 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\menuline_writer_up_.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Employment Requests\Request for Leave of Absence.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\General Admin\Business Name Change.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Internet & Technology\Resumes\Training Manager Resume.html (1 bytes)
%Program Files%\WhiteSmoke\settings.ini (302 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Advertising\AGREEMENT FOR INTERNET ADVERTISING SERVICES.htm (784 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Resumes and Cover Letters\Resumes\Marketing Director Resume.html (4 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\menuline_translator_up.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\menuline_toolkit_on.gif (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Sales & Marketing\Special Offers & Sales\Special Offers.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\registration\img\back.png (5064 bytes)
%Program Files%\WhiteSmoke\html\english\floatingButton_howto\js\iepngfix\iepngfix.htc (2 bytes)
%Program Files%\WhiteSmoke\html\english\userGuide\troubleshooting.html (10 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\grammar\howto_hover.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Informative Letters\Announcement of Partnership Buyout.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Finances\Expense Account Statement.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\dictionary.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\rightSide2.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Greetings\Christmas\MerryChristmasToFamily.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\leftBottom3.gif (631 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Hiring and Termination\Hiring Employees\Job Acceptance\Accept or Decline Job Offer.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\settings\img\Background\logo.png (4 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\img\minusbottom.gif (85 bytes)
%Program Files%\WhiteSmoke\html\english\userGuide\css\jquery.jscrollpane.css (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\summaryline_apply_up.png (6 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Real Estate\Assignment\Assignment of Interest in Estate.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Affidavits\General Affidavit.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\icons\icon_video.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\General Admin\Opening a Business.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Internet & Technology\Resumes\Website Maintainer Resume.html (4 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Sales & Marketing\Customer Accounts\Second Request for Renewal of Service Agreement.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\js\prototype.js (3616 bytes)
%Program Files%\WhiteSmoke\html\english\gui\js\iepngfix\blank.gif (49 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Family\FamilyNewsUpdate.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Sales & Marketing\BROCHURES\MARKETING BROCHURE.html (3 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\js\Contextmenu.js (9 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\logo.gif (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\js\controls.pack.js (11 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Sales & Marketing\Customer Services\Opportunity to service your company.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\borders.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\style\jqModal.css (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Power of Attorney\General Power of Attorney.html (5 bytes)
%Program Files%\WhiteSmoke\html\english\settings\img\Buttons\tab_general_disabled.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\settings\js\settingsInterface.js (16 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\screens\welcomeGo_down.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Resumes and Cover Letters\Resumes\Product Delivery Engineer Resume.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\floatingButton_howto\js\iepngfix\opacity.png (11 bytes)
%Program Files%\WhiteSmoke\html\english\settings\img\captionbar\caption_bar_close_down.gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\WhiteSmoke\msvcp80.dll (19096 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\style\combobox.css (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\screens\loading_window.gif (4 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\x.jpg (13 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\notice_checkbox_checked.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\logo.gif (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Hiring and Termination\Dismissal and Rejection\Final Warning Before Dismissal.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\bullet.gif (48 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\js\dictInterface.js (12 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Personal Matters\Career Change.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\menuline_dictionary_up.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\menuline_tutorials_on.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\General Admin\Acceptance of Formal Business Invitation.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\globe.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\join.gif (69 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\leftSide.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Sales & Marketing\Customer Complaints\Shipment Delay.html (956 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Sales & Marketing\Telesales\Telemarketing2.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\objects\utils.js (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\js\common.js (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\review-section\grade3.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\js\effects.pack.js (16 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\leftSide2.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\menuline_translator_down.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\js\jquery.dd.js (13 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Personal & Private Documents\Personal Financial Statement.html (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\screens\welcomeGo_over.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\js\jquery-1.6.1.min.js (3312 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Literary\Advertising\Subscriber Letter News Service.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\neg_bullet.png (238 bytes)
%Program Files%\WhiteSmoke\WCaptureMoz\chrome\content\wcapturex.js (12 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Medical\Complaints\Complaints Cover Letter to State Licensing Board.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\sitting_up_.png (3 bytes)
%Documents and Settings%\All Users\Start Menu\Programs\WhiteSmoke\Launch WhiteSmoke.lnk (1 bytes)
%Program Files%\WhiteSmoke\html\english\floatingButton_howto\img\Thumbs.db (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Personal & Private Documents\Letter of Consignment for Shop Owner.html (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsy2.tmp (563919 bytes)
%Program Files%\WhiteSmoke\UninstallWhiteSmoke.exe (598 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Medical\Medical Employment\Cover Letter.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\screens\ico_analyze.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\floatingButton_howto\js\index.js (394 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\question.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Medical\Medical Employment\Hospital Administrator Recommendation.html (3 bytes)
%Program Files%\WhiteSmoke\NotifierWhiteApps.txt (44 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Resumes and Cover Letters\Letters of Recommendation\Letter of Recommendation.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Agreements\Partnership Agreement.htm (784 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Affidavits\Declaration of Witnesses.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Sales & Marketing\Vehicles\Letter to Car Service Customers.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\summaryline_check_up.png (4 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Resumes\Banking Resume.html (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Donations\Refusal for Donation.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\Business Agreements\Acceptance Of Counter Proposal.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Credibility\Letter of Dispute.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\blue_top_bg_.gif (264 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\dirOpen.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Thank You\Letter Thanking Coworker for Support.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Outstanding payments\Collection Letter 2.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\apply_press.png (4 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Employment Requests\Request to Schedule an Interview.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Resumes\Banking Resume 2.html (2 bytes)
%Program Files%\WhiteSmoke\WSKeyboardHook64.dll (24832 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\red2.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Resumes and Cover Letters\Resumes\Internship Resume.html (1 bytes)
%Program Files%\WhiteSmoke\WSEngine.dll (71262 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Literary\Legal\Assignment of Literary Property.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\menuline_toolkit_down.gif (2 bytes)
%Program Files%\WhiteSmoke\html\english\settings\img\Buttons\save_disabled.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\rightCaptionCorner2.gif (361 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Employment Requests\Refusal of Resquest For Raise.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\menuline_writer_down.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\floatingButton_howto\index.html (785 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\menuline_dictionary_down.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\Correspondence\Introduction of New Member of Administration.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\rightCaptionCorner3_11.gif (360 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Litigation\Checklist for hiring lawyer.html.html (8 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Medical\files.txt (4 bytes)
%Documents and Settings%\%current user%\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch WhiteSmoke.lnk (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Resumes and Cover Letters\Job Search Cover Letters\Resume Cover Letter.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Medical\Complaints\Letter of Complaint to Health Plan.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\Apologies\Apology for Not Attending Meeting.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Finance\LetterOfCreditRevolving.html (4 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Medical\Complaints\Complaint Against Doctor with Health Plan.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Greetings\Christmas\ArrivalOfChristmas.html (994 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\WhiteSmoke\CheckLockedWsFiles.exe (3312 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Sales & Marketing\Customer Accounts\Sale on Consignment Acknowledgment.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Medical\Lab Notification\Notification of Lab to Doctor.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\registration\img\down.png (4 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Outstanding payments\Settlement Offer on Disputed Account.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Real Estate\Leases\Real Estate Contract.html (6 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Medical\Health Plans\Special power or Attorney.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\x_old.gif (132 bytes)
%Program Files%\WhiteSmoke\html\english\gui\js\NonPackedVersion\builder.js (4 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Donations\Thank you for Fundraising Efforts.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Resumes and Cover Letters\Resumes\Sales Representative Resume.html (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\screens\ico_complete.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\img\Background\rightSide.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\red.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\caption_bottom_px.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Resumes and Cover Letters\Resumes\Medical Resume Partnership in General Practice.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\x_hover_old.gif (649 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Internet & Technology\Resumes\Sr. Product Manager Resume.html (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\left_input.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Finances\Outstanding Amount for Payment.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\js\gmonitor.js (1 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\js\transInterface.js (12 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Medical\Health Plans\Request for Additional Information of Health Plan.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\summaryline_apply_up.png (4 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\js\jquery.js (1856 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\get-full3.png (7 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\review-section\down.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\base_fade_px.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\icons\Thumbs.db (784 bytes)
%Program Files%\WhiteSmoke\html\english\userGuide\js\jquery.jscrollpane.min.js (12 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Sales & Marketing\Customer Services\Supplier Letter of Recommendation.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\Correspondence\Acknowledgment of Change in Meeting Date.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Medical\Leave request\Workers Compensation light duty request.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\style\Contextmenu.css (802 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\menuline_tutorials_roll.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Finance\LetterOfDispute.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\grammar\search_up.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Students\Personal Correspondence\Personal Letter of Recommendation.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\apply_over.png (4 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\Notices & Certificates\Certificate of Transaction of Business Under Fictitious Name.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\blue.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Employment Requests\Request for Meeting Regarding Pay Raise.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Medical\Health Plans\Letter of Appeal Denied.html (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Sales & Marketing\Customer Services\Change of Service Company.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Finances\Investigation of Billing Inquiry.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Real Estate\Mortgages\Authorization for Loan.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\screens\welcomeClose_down.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\js\iepngfix\checkerboard.gif (99 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Agreements\Consignment Agreement.html (2 bytes)
%Program Files%\WhiteSmoke\WCapture.dll (13584 bytes)
%Program Files%\WhiteSmoke\html\english\userGuide\images\faq_old.png (8 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Employee Manual\NewEmployeeOrientation.html (1 bytes)
%Program Files%\WhiteSmoke\WCaptureMoz\components\WCaptureXpcom.dll (3616 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\caption_px.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\menuline_dictionary_down.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Finance\UnauthorizedCreditInquiry.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\Notices & Certificates\ANTI SPAM policy.doc.htm (4 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Personal & Private Documents\Antenuptial Agreement.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\objects\parseURL.js (1 bytes)
%Program Files%\WhiteSmoke\WCapture_x64.dll (16424 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\menuline_toolkit_down.gif (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\result_area_top_bg.gif (64 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Collections\Demand on Guarantor.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\Notices & Certificates\Waiver of Notice.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Internet & Technology\Resumes\Controller Resume.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\x.gif (176 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Greetings\Christmas\ChristmasGreetingsMessage.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\menuline_translator_on.gif (628 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\menuline_dictionary_roll.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\grammar\enrichment_disabled.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\menuline_tutorials_down.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Medical\Appreciation to Staff\Appreciation to Doctor.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Students\Careers\Career Letter in Journalism.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\main_background.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\right_input.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\js\iepngfix\iepngfix.html (5 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\open2 - Copy.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\grammar\definition_disabled.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Employee Manual\EmployeePerformanceReviewAndPlanningSessions.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\userGuide\images\nav.jpg (3312 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Sales & Marketing\Telesales\Telemarketing.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Internet & Technology\Resumes\Technical Writer Resume.html (4 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Finances\Notice of C.O.D. Terms.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\caption_strip_right_corner.gif (348 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Students\Admissions Essays\Essay - Describe Events.html (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Sales & Marketing\Customer Services\Praise for Good Customer Service.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Personal & Private Documents\Receipt for Non Refundable Deposit.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\objects\mcl.css (6 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\img\Background\leftSide2.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\settings\img\Buttons\tab_general_on.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\main_background.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Litigation\CHECKLIST for list to take to Attorney.htm (8 bytes)
%Program Files%\WhiteSmoke\html\english\gui\js\scriptaculous.js (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\images\jspVerticalBar.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\topButtonsLeft_from_home.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\settings\js\iepngfix\helix.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\icons\icon_games.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Agreements\Website Design Non Disclosure and Confidentiality Agreement.html (11 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Internet & Technology\Resumes\Graphic Designer Resume 2.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\settings\img\Buttons\save_down.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\translator.html (3 bytes)
%Program Files%\WhiteSmoke\Microsoft.VC80.ATL.manifest (466 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\icons\icon_email.gif (369 bytes)
%Program Files%\WhiteSmoke\html\english\registration\img\captionbar\caption_bar_close_up.gif (190 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Sales & Marketing\Agreements\Bill of Sale.html (6 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\down_arrow.png (215 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\review-section\reviewWhite4.gif (8 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\left_input.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\userGuide\images\t.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\topButtonsLeft__.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\rightBottom_.gif (336 bytes)
%Program Files%\WhiteSmoke\html\english\settings\img\Buttons\save_up.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\Correspondence\Tuition Reimbursement Policy.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\js\grammarCache.class.js (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\x_hover.gif (176 bytes)
%Program Files%\WhiteSmoke\html\english\gui\js\supersleight.js (4 bytes)
%Program Files%\WhiteSmoke\html\english\floatingButton\index.html (5 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Medical\CV & Resumes\Medical Resume Internship Position.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Students\Resumes\Resume for After-School Job.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\screens\scoreUp.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Real Estate\Letter of Intent\Letter of Intent - Property.html (7 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\empty2.gif (57 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\Business Agreements\General Partnership Agreement.htm (15 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\blue_dark_bg_.gif (90 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\menuline_templates_roll.gif (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\plus_bullet.png (254 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\leftBottom3.gif (623 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Agreements & Contracts\Notice of Cancellation of Contract.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\plus.gif (89 bytes)
%Program Files%\WhiteSmoke\html\english\gui\js\NonPackedVersion\controls.js (784 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Agreements & Contracts\Acceptance of Counter Proposal.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Internet & Technology\Resumes\Software Quality Assurance Engineer Resume.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\blue_bg_.gif (445 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Agreements & Contracts\Notice of Intention to Foreclose.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\summaryline_apply_down.png (4 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\screens\screen_getitnow_up.gif (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Credibility\Removal of Inadequate Information.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\context_menu_bg.png (194 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\Letters of Appreciation\Thank You To Enterprising Employee.html (998 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\review-section\li-content.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\img\page.gif (582 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\spacer_.gif (49 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Informative Letters\Announcement of New Business Opening.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\main_background_11.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\js\monitor.js (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Cover Letters\CoverLetter.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Resumes\Management Resume.html (4 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\img\Background\input_bg.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Collections\Collection Demand Letter.html (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Agreements & Contracts\Notice of Claim of Lien.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Finance\AgreementToCompromiseDebt.html (2 bytes)
%Program Files%\WhiteSmoke\WCaptureMoz\chrome.manifest (122 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\screens\screen_getitnow_press.gif (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Greetings\Graduation\CongratulationsToTheGraduate.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\style\grammar.css (4 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Finance\LetterOfCreditIrrevocable.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Employee manual\New Employee Orientation.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Informative Letters\Letter for Tenure Track Associate Professor Senior Agent Hires.html (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\blue_dark_bg.gif (90 bytes)
%Program Files%\WhiteSmoke\Microsoft.VC80.CRT.manifest (1 bytes)
%Program Files%\WhiteSmoke\html\english\floatingButton_howto\js\iepngfix\checkerboard.gif (99 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\jspDrag.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\icons\icon_faq.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\edit_footer_right.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\Notices & Certificates\Minutes of Organization Meeting of Incorporators.html (4 bytes)
%Documents and Settings%\All Users\Desktop\WhiteSmoke.lnk (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\Business Agreements\Agreement to Retain the Services of an Accountant.html (4 bytes)
%Program Files%\WhiteSmoke\html\english\floatingButton_howto\img\Background\howto_bg.gif (1552 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\screens\screen_bg.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\settings\img\captionbar\caption_bar_close_over.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\ticket.png (1552 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Apologies\ApologyUnjustBehavior.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\context_tl2.gif (93 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\Letters of Appreciation\Thank you To Enterprising Employee 2.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Real Estate\Leases\Real Estate Lease.html (6 bytes)
%Program Files%\WhiteSmoke\html\english\settings\img\Buttons\tab_connection_on.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\leftSide3.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Well Wishes\Letter of Congratulations.html (926 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\img\nolines_plus.gif (870 bytes)
%Program Files%\WhiteSmoke\html\english\common\js\xmlhttp.js (7 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Power of Attorney\Notice of Revocation of Power of Attorney.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\General Admin\Launching of New Product Line.html (1 bytes)
%Program Files%\WhiteSmoke\WSRegistration.exe (65945 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\summaryline_check_roll.png (4 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Internet & Technology\Resumes\Freelance MarCom Resume.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\menuline_toolkit_on.gif (2 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\icons\giftlelo_dot_com.jpg (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\context_submenu.gif (49 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\Business Legal Notices\Final Notice before Legal Action.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\sitting_up.png (3 bytes)
%Program Files%\WhiteSmoke\WMonitorX_x64.dll (7192 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\buttons_tray_px_.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Students\Personal Correspondence\Compliment Student on Graduation.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Well Wishes\Wishes for Speedy Recovery.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\grammar\enrichment_hover.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\img\Background\left_input.gif (174 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Internet & Technology\Resumes\QA Engineer Resume.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\buttons_tray_px.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\js\jquery-1.3.2.js (4992 bytes)
%Program Files%\WhiteSmoke\WSTray64.exe (9608 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Resumes and Cover Letters\Resumes\PowerPoint Designer Resume.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\img\joinbottom.gif (66 bytes)
%Program Files%\WhiteSmoke\TCCons_x64.dll (3616 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\index.html (784 bytes)
%Program Files%\WhiteSmoke\FloatButtonWhiteApps.txt (54 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\Managing & Motivating Employees\Sponsorship.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\logo.png (5 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Resumes and Cover Letters\Resumes\Marketing Manager Resume.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Hiring and Termination\Hiring Employees\Employment Letters\LetterForTenureTrackAssociateProfessor.html (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\menuline_translator_down.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Resumes and Cover Letters\Resumes\Software QA Engineer Resume.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\userGuide\images\arr.png (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Resumes and Cover Letters\Resumes\Web Maintainer Resume.html (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\Correspondence\Acknowledgment of Change in Meeting.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\review-section\grade5.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\floatingButton\blue-Q-rollover.gif (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Agreements\Agreement for Internet Advertising Services.html.rtf (2392 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\icons\icon_lockopen.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Medical\CV & Resumes\Medical Resume - Physician.html (6 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Resumes and Cover Letters\Resumes\Administrative Resume.html (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\menuline_templates_up.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\menuline_tutorials_roll.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\borders_good.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\registration\index.html (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\style\Contextmenu.css (923 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\sitting_down.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\registration\img\back30_trial.png (3312 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\rightCaptionCorner3.gif (699 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Litigation\CHECKLIST of docs for Attorney.HTML.htm (784 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\screens\ico_connection.gif (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\p7t_plus.gif (58 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\js\jquery.combobox.js (7 bytes)
%Program Files%\WhiteSmoke\html\english\userGuide\images\WriterTab.png (4992 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\menuline_translator_roll.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\userGuide\css\style.css (3 bytes)
%Program Files%\WhiteSmoke\html\english\common\iepngfix\iepngfix.html (5 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Outstanding payments\Company Credit Account Approval Letter.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\menuline_templates_down.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\registration\img\continue_button_up.gif (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\base.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\menuline_templates_down.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Advertising\Press Release.doc.doc (784 bytes)
%Program Files%\WhiteSmoke\html\english\registration\img\continue_button_up.png (6 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\grammar\thesaurus_disabled.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Hiring and Termination\Hiring Employees\Job Acceptance\Job Offer Acceptance.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\close.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Greetings\Christmas\ChristmasGreetingsToASpouse.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Personal Matters\Upset Regarding Loss of Job.html (1 bytes)
%Program Files%\WhiteSmoke\WHook_x64.dll (5520 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\store_down.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\icons\sprite.gif (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\js\summary.js (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\review-section\report.png (4 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Copyright,Patent & Trademark\Assignment of Trademark.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\icons\tick.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\caption_bar_re_up.gif (196 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\img\Buttons\moreLang_roll.gif (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\screens\screen_ok_up_11.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\index.html (1856 bytes)
%Program Files%\WhiteSmoke\html\english\templates\objects\navigation.js (7 bytes)
%Program Files%\WhiteSmoke\html\english\userGuide\images\jspVerticalBar.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\Business Agreements\Car Rental Contract 2.html (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\rightCaptionCorner3_.gif (331 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\store_up.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Sales & Marketing\Resumes\Customer Service Resume.html (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\caption_bar_re_over.gif (196 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\img\minus.gif (86 bytes)
%Program Files%\WhiteSmoke\WHook.dll (5064 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\menuline_toolkit_roll.gif (2 bytes)
%Program Files%\WhiteSmoke\html\english\userGuide\images\faq.png (6 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Sales & Marketing\Special Offers & Sales\Catalog Sales.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\dtree.css (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\General Admin\Sale of Division of Business.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\review-section\grade1.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\minus.gif (86 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Power of Attorney\Power of Attorney.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\grammar\definition_up.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Apologies\ApologyInnappropriateBehavior.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Resumes\Letter for Assistant Professor Agent Hires.html (4 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\review-section\score5.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\img\line.gif (66 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\ajax-loader.gif (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Assignments\Letter of Credit irrevocable.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\menuline_writer_down.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Resumes and Cover Letters\Resumes\Web Developer Resume.html (3 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\img\Buttons\go_up.png (5 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\review-section\opencq8.png (129 bytes)
%Program Files%\WhiteSmoke\html\english\common\iepngfix\checkerboard.gif (99 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\img\Background\corner_bottom_left.png (351 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\review-section\x.gif (176 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Finance\DebtValidation.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\help_roll.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\inputline_fade_px.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\green.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Employee Manual\HealthRelatedIssues.html (1 bytes)
%Program Files%\WhiteSmoke\msvcr80.dll (21216 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\dirClose.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Hiring and Termination\Hiring Employees\Job Acceptance\Job Acceptance Letter.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\screens\screen_bg_bottom.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Hiring and Termination\Dismissal and Rejection\Rejection of Job Offer.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\menuline_dictionary_roll.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Agreements & Contracts\Notification of Appeal.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Internet & Technology\Agreements\Assignment of Copyright.html (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\logo_1.png (6 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\menuline_translator_on.gif (1 bytes)
%Program Files%\WhiteSmoke\WSLogger.exe (3312 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Greetings\Graduation\CongratulationsOnYourGraduation.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\Business Agreements\Articles of Incorporations for a Business.html (3 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\img\Background\corner_bottom_right.png (328 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Medical\Health Plans\Appeal Against Health Plan.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Real Estate\Leases\Notice of Termination of Lease.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Donations\Letter of Appreciation for Donation.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\registration\img\f2.gif (9 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Finances\Request for Credit Application.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Finance\ReturningUnsignedCheck.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Internet & Technology\Resumes\Technical Writer 2 Resume.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Collections\Letter of Credit.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\logologo2_11_.gif (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\caption_bar_re_over.gif (196 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Internet & Technology\Agreements\Affiliate Program Agreement.rtf (5520 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\edit_header_right.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\settings\img\Buttons\cancel_over.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Power of Attorney\Power of Attorney 2.html (3 bytes)
%Program Files%\WhiteSmoke\html\english\floatingButton_howto\style\style.css (402 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Hiring and Termination\Dismissal and Rejection\Job Rejection Letter.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\help_up_.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\green.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\img\Buttons\humanTranslation_roll.gif (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Employment Requests\Request for Paid or Unpaid Leave.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\review-section\score3.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\caption_bar_re_down.gif (196 bytes)
%Program Files%\WhiteSmoke\html\english\templates\objects\p7tm\p7tmbasic.css (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Resumes and Cover Letters\Resumes\Accounting Resume.html (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Real Estate\Notices\Notice of Application for Zoning Variance, Exception or Permit.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\userGuide\images\bg-good.png (8 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\logo.gif (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Finances\Business Credit Application- Refusal.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\strike_purple.gif (49 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\edit_header_px.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Medical\CV & Resumes\Thank You Letter for an Internship.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\red.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Personal & Private Documents\Last Will and Testament Of.html (5 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\icons\msDropDown.gif (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\js\switchcontent.js (15 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\img\Background\corner_top_right.png (355 bytes)
%Program Files%\WhiteSmoke\html\english\gui\js\iframeTest.js (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\js\jquery.jeegoocontext.min.js (4 bytes)
%Program Files%\WhiteSmoke\html\english\settings\img\Buttons\tab_connection_disabled.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Employee Manual\EmploymentApplications.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\objects\wm_cookies.js (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\green.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\topRightBorder.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Resumes and Cover Letters\Resumes\General CV Format.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\userGuide\images\I.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Employee Reference Letters\JobReferenceLetter.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Internet & Technology\Resumes\Technical Publication Manager Resume.html (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Sales & Marketing\Vehicles\Letter Announcing Relocation to a New Dealership.html (2 bytes)
%Program Files%\WhiteSmoke\WCaptureMoz\chrome\content\wcapturex.xul (318 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\page.gif (582 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\img\Background\right_input.gif (174 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\Business Agreements\Car Rental Contract.html (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\Letters of Appreciation\Letter of Thanks to Coordinator.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Greetings\Christmas\JoyousOccasion.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\menuline_writer_roll.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\p7t_minus.gif (57 bytes)
%Program Files%\WhiteSmoke\html\english\userGuide\images\WhiteSmokeEmailCheck.png (2392 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Resumes and Cover Letters\Resumes\End User Trainer and Instructional Designer Resume.html (1 bytes)
%Program Files%\WhiteSmoke\WCaptureMoz\chrome\content\WcxTrace.js (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Greetings\Christmas\AChristmasWish.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\userGuide\images\otk.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\img\Background\search_strip_bg3.gif (94 bytes)
%Documents and Settings%\All Users\Start Menu\Programs\WhiteSmoke\Uninstall.lnk (1 bytes)
%Program Files%\WhiteSmoke\html\english\registration\img\continue_button_over.png (4 bytes)
%Program Files%\WhiteSmoke\html\english\userGuide\images\bg.png (14 bytes)
%Program Files%\WhiteSmoke\html\english\floatingButton_howto\js\iepngfix\blank.gif (49 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\screens\reviewOpen_hover.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Agreements\Partnership Agreement.html (784 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\Business Plan\Business Plan Product or Service.html (12 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\screens\button_no_up.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Internet & Technology\Resumes\Sales Order Processor Resume.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\common\iepngfix\iepngfix.htc (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Employee Reference Letters\LetterOfReference.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\Apologies\Apology for Missing Appointment.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\common\js\pngfix.js (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Medical\Complaints\Complaint against Health Provider.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\settings\img\Buttons\tab_info_on.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\help_up.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Students\Resumes\Student Resume Forestry.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\borders3.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\nolines_plus.gif (870 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\Staff Notices\Dissension Amongst Management Team Workers.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Real Estate\Leases\Extension of Lease.html (2 bytes)
%Program Files%\WhiteSmoke\WCaptureX_x64.dll (11344 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\blue.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\strike_red.gif (49 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\collapse.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\Staff Notices\Offer of Assistance during Employee Illness.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\caption_bar_close_over.gif (315 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Literary\Promotions\Letter of Interest to Magazine.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Sales & Marketing\Special Offers & Sales\Introductory Product Offer.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\review-section\down-content.gif (743 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Literary\Advertising\Request for Advertising Rate.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\Board of Directors & SHareholders\Addition of Personnel to Board of Directors.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\General Admin\Meeting for Commencement of Project.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\settings\js\iepngfix\checkerboard.gif (99 bytes)
%Program Files%\WhiteSmoke\html\english\floatingButton\Thumbs.db (15 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Hiring and Termination\Resignation Letters\Acceptance of Employee's Resignation.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Credibility\Unauthorized Credit Inquiry.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Greetings\Christmas\BlessingsAtChristmas.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Sales & Marketing\Agreements\Marketing Alliance Agreement.html (784 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Students\Resumes\Student Resume Wildlife.html (6 bytes)
%Program Files%\WhiteSmoke\html\english\gui\js\iepngfix\opacity.png (11 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\buttons_tray_px.p_goldng (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\menuline_toolkit_up.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Medical\Request for Medical Information\Autopsy Report.html (3 bytes)
%Program Files%\WhiteSmoke\html\english\floatingButton_howto\img\spacer.gif (49 bytes)
%Program Files%\WhiteSmoke\html\english\gui\js\slider.pack.js (4 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Students\Resumes\Student Resume Automotive Service Industry.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Internet & Technology\Resumes\Online Marketing Position Resume.html (982 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Medical\CV & Resumes\Medical Resume Partnership in General Practice.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Finances\Request for Credit Information.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Finances\Payment of Outstanding Account.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\leftCaptionCorner2_.gif (334 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\screens\welcomeClose_up.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\arClose.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Resumes and Cover Letters\Job Search Cover Letters\Job Search Cover Letter - Software Employment.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\sitting_roll.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\Business Agreements\Acceptance of Purchase Security Agreement.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\registration\img\captionbar\caption_bar_close_down.gif (307 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\rightCaptionCorner.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Donations\Invitation to Donor's Dinner.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Internet & Technology\Resumes\End User Trainer and Instructional Designer Resume.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\img\Buttons\go_over.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\grammar\addto_disabled.png (4 bytes)
%Program Files%\WhiteSmoke\html\english\gui\js\final.js (15 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Finance\RequestForIncreaseOfCreditLimit.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\empty.gif (62 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Medical\Health Plans\Request for joining Health Plan.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Hiring and Termination\Hiring Employees\Thank You Letters\Thank You to Applicant for Testing.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\Letters of Appreciation\Letter of Thanks.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Greetings\Christmas\ChristmasWishes.html (1 bytes)
%Program Files%\WhiteSmoke\WCaptureMoz\plugins\npWCX.dll (10136 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\icons\enabled.gif (321 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\atart_arrow.jpg (14 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\menuline_templates_on.gif (663 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\Managing & Motivating Employees\Employee Evaluation Form.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Employment Requests\Letter Requesting Pay Raise.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\summaryline_check_roll.png (4 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\Correspondence\Collection Letter.html (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\WhiteSmoke\Microsoft.VC80.CRT.manifest (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\Correspondence\Collection Letter 2.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\Business Agreements\Professional Services Agreement.html (12 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\img\Buttons\go_press.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\js\xmlhttp.js (7 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Finance\ReplyToApplicationForCredit.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\icons\jquery-msdropdown.gif (6 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\icons\icon_sales.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\caption_bottom_px.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\imgfolder.gif (622 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\screens\myWelcome.png (3312 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\Correspondence\Copy of Acknowledgment of Change in Meeting Date.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\icons\icon_calendar.gif (601 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\screens\screen_ok_press.png (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\objects\p7tm\p7tmscripts.js (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\General Admin\Cancellation of Bonus.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\menuline_translator_up.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\img\Background\ajax-loader.gif (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\main_background_old.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\registration\img\back_trial.png (3312 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Employee Manual\TerminationOfEmployment.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\screens\welcomeClose_over.png (3 bytes)
%Documents and Settings%\All Users\Start Menu\Programs\WhiteSmoke\Registration.lnk (1 bytes)
%Program Files%\WhiteSmoke\html\english\settings\img\Buttons\tab_content_off.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\get-full.png (6 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\close2.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\settings\img\Buttons\tab_connection_off.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\context_dot.gif (35 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\img\Buttons\humanTranslation_up.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Assignments\Assignment.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\Staff Notices\Praise for Employee's Handling of Situation.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\review-section\score4.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Personal & Private Documents\Sale of Motor Vehicle.html (4 bytes)
%Program Files%\WhiteSmoke\html\english\settings\img\Buttons\tab_shortcut_on.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Sales & Marketing\Agreements\Agreement for Professional Services.html (784 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\img\imgfolder.gif (622 bytes)
%Program Files%\WhiteSmoke\html\english\gui\style\spelling.css (4 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\img\Background\loading_dictionary.gif (4 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Agreements & Contracts\Retainer Agreement.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\menuline_tutorials_up.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\cd.gif (239 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Sales & Marketing\Customer Services\Welcome to new Customer.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\js\enrichmentContextMenu.class.js (10 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Medical\Complaints\Report from Emergency Room Attention.html (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\js\ypSlideOutMenus.js (5 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\summaryline_px.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\red2.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\screens\button_yes_down.png (4 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\menuline_writer_on_.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Employee Manual\TuitionReimbursementPolicy.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\js\NonPackedVersion\effects.js (1552 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\grammar\explanation_disabled.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\menuline_toolkit_roll.gif (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\buttons_tray_px.png (2 bytes)
%Program Files%\WhiteSmoke\WCustom.dll (6360 bytes)
%Program Files%\WhiteSmoke\TCCons.dll (3616 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\apply_up.png (6 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\Correspondence\Confirmation of End of Leave.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Medical\Medical Employment\Promotional Letter.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\menuline_templates_up.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Sales & Marketing\Agreements\Consulting Agreement.html (16 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Confidentiality Agreements\Confidentially Agreement.html (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\js\builder.pack.js (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Sales & Marketing\Vehicles\Car Lease Maturity Letter.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\Business Plan\Announcement of Partnership Buyout.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\js\ws_functions.js (1552 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\leftCaptionCorner2.gif (401 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\screens\screen_captionbar_up.gif (394 bytes)
%Documents and Settings%\%current user%\Start Menu\Programs\Startup\Launch WhiteSmoke.lnk (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Sales & Marketing\Agreements\Security Agreement.html (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\open2.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Hiring and Termination\Dismissal and Rejection\Confirmation of Job Dismissal.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\menuline_tutorials_down.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\caption_bar_re_over.gif (196 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\WhiteSmoke\msvcr80.dll (21216 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\spacer.gif (49 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Finances\Company Credit Account Approval Letter.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\review-section\grade4.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Employment Requests\Request For Salary Increase.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\img\plus.gif (89 bytes)
%Program Files%\WhiteSmoke\html\english\templates\start.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\userGuide\images\buttons.png (4 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\caption_bar_re_down.gif (196 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Assignments\Assignment of Mortgage.html (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\style\enrichment.css (4 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Internet & Technology\Resumes\Software Developer Resume.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\rightSide.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Real Estate\Leases\Receipt for Non-Refundable deposit.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Greetings\Christmas\MerryChristmasAndHappyNewYear.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\logo2.gif (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\notice_checkbox_unchecked.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\js\jquery-1.2.6.pack.NotUSED.js (784 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Litigation\Checklist of Docs for Attorney.html.doc (1552 bytes)
%Program Files%\WhiteSmoke\html\english\userGuide\images\jspDrag.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\main_background.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\summaryline_apply_roll.png (4 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\review-section\shdow.gif (70 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Medical\Health Plans\Request For Cover of Non Prescription Drug.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Resumes and Cover Letters\Resumes\Engineering Resume.html (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Resumes and Cover Letters\Resumes\Marketing Administrator Resume.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Real Estate\Leases\Mutual Cancellation of Lease.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\logo.png (5 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Informative Letters\Inquiry letter.html (4 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\screens\screen_captionbar_press.gif (408 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\icons\demoaction.jpg (9 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Hiring and Termination\Hiring Employees\Employment Letters\Employment Letter.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\js\iepngfix\helix.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\summaryline_px.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Literary\Advertising\Advertising Commitment Form.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\rightSide2_11.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Personnel Office\Notice of Decision to Reprimand.html (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Sales & Marketing\Customer Orders\Shipment Delay.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\bottom_right_corner.gif (78 bytes)
%Program Files%\WhiteSmoke\msvcp80.dll (19096 bytes)
%Program Files%\WhiteSmoke\html\english\settings\img\Buttons\tab_info_disabled.png (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\Business Plan\Business Plan Product or Service.html (12 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Donations\Request for Sponsorship.html (3 bytes)
%Program Files%\WhiteSmoke\WCaptureX.dll (11344 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\summaryline_check_up.png (4 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\leftCaptionCorner2 - Copy.gif (406 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\menuline_dictionary_on.gif (678 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\menuline_writer_up.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\settings\js\iepngfix\blank.gif (49 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\Managing & Motivating Employees\Notice of Promotion 2.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Sales & Marketing\Agreements\General Partnership.html (13 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Hiring and Termination\Hiring Employees\Job Acceptance\Job Acceptance Letter 2.html (2 bytes)
%Program Files%\WhiteSmoke\WSKeyboardHook.dll (30464 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Medical\Apotropis\Special PA for Medical Authority.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\screens\screen_bg_gold.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\images\jspDrag.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\icons\preview.gif (8 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Agreements & Contracts\Notice and Tender by Debtor.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\grammar\thesaurus_hover.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\summaryline_right_corner.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\Staff Notices\Praise for Employee_ s Handling of Situation.html (820 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Sales & Marketing\Vehicles\Car Sales Follow Up Letter.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\Finances\Company Credit Account Approval Letter.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\floatingButton\blue-X-rollover.gif (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Medical\CV & Resumes\C.V. Emergency Medical Technician.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Credibility\Agreement to Compromise Debt.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\summaryline_check_down.png (4 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Internet & Technology\Resumes\Java Developer Resume.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\grammar\thesaurus_up.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Personal Matters\Letter to a Friend Regarding Change of Job.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Medical\CV & Resumes\Health Care Resume.html (4 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Hiring and Termination\Resignation Letters\Employee Termination Notice.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\settings\js\iepngfix\opacity.png (11 bytes)
%Program Files%\WhiteSmoke\ComVistaElevator.dll (1552 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Hiring and Termination\Hiring Employees\Employment Letters\Offer of Employment.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\musicfolder.gif (633 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\strike_blue.gif (49 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\review-section\grade2.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Students\Admissions Essays\Admissions Essay for Entrance to Theater Institute.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Students\University Correspondence\Request for Reference.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Sales & Marketing\Customer Services\Customer Stopped Purchasing.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\userGuide\images\ConfiguringWhiteSmoke.png (1552 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\caption_px.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Greetings\Christmas\LovePeaceAndJoy.html (970 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\edit_header_left.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\context_bl2.gif (93 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Employee manual\Health-Related Issues.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Medical\Health Plans\Request Coverage of a NonPrescription Drug.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Agreements\EXCLUSIVE DISTRIBUTION AGREEMENT.html (784 bytes)
%Program Files%\WhiteSmoke\html\english\settings\index.html (6 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\screens\screen_ok_up.png (723 bytes)

The Trojan deletes the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\nst5.tmp\KillProc.dll (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nst5.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nss1.tmp (0 bytes)

The process wsget.exe:432 makes changes in the file system.

The Trojan creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\WhiteSmokeWriterTrial[1].exe (378349 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@whitesmoke[2].txt (337 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\~nsu.tmp\whitesmoke-silent.exe.part (20664 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\~nsu.tmp\whitesmoke-silent.exe (378349 bytes)
%Documents and Settings%\%current user%\Cookies\index.dat (2892 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\~nsu.tmp\WhiteSmokeTranslator_rev1.exe (378349 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@whitesmoke[1].txt (673 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\~nsu.tmp\WhiteSmokeTranslator_rev1.exe.part (20636 bytes)

The Trojan deletes the following file(s):

%Documents and Settings%\%current user%\Cookies\Current_User@whitesmoke[1].txt (0 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@whitesmoke[2].txt (0 bytes)

Registry activity

The process CheckLockedWSFiles.exe:1228 makes changes in the system registry.

The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Startup" = "%Documents and Settings%\%current user%\Start Menu\Programs\Startup"

The process CheckLockedWSFiles.exe:828 makes changes in the system registry.

The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Startup" = "%Documents and Settings%\%current user%\Start Menu\Programs\Startup"

The process CheckLockedWSFiles.exe:1376 makes changes in the system registry.

The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Startup" = "%Documents and Settings%\%current user%\Start Menu\Programs\Startup"

The process %original file name%.exe:1332 makes changes in the system registry.

The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "95 A1 1C 38 26 59 40 B8 CE 57 59 AE E0 A5 3C 2B"

[HKCU\Environment]
"WS_TARGET_DIR" = "%Program Files%\WhiteSmoke Translator"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Documents" = "%Documents and Settings%\All Users\Documents"
"CommonVideo" = "%Documents and Settings%\All Users\Documents\My Videos"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Desktop" = "%Documents and Settings%\%current user%\Desktop"
"My Pictures" = "%Documents and Settings%\%current user%\My Documents\My Pictures"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"CommonMusic" = "%Documents and Settings%\All Users\Documents\My Music"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Desktop" = "%Documents and Settings%\All Users\Desktop"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Start Menu" = "%Documents and Settings%\All Users\Start Menu"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Start Menu" = "%Documents and Settings%\%current user%\Start Menu"

[HKCU\Software\WhiteSmokeTranslator]
"DistID" = "5202"

[HKLM\SOFTWARE\WhiteSmokeTranslator]
"InstallOption" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Personal" = "%Documents and Settings%\%current user%\My Documents"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"CommonPictures" = "%Documents and Settings%\All Users\Documents\My Pictures"

[HKLM\SOFTWARE\WhiteSmokeTranslator]
"DistID" = "5202"

The process WhiteSmokeTranslator_rev1.exe:1500 makes changes in the system registry.

The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "D9 C6 92 CB 47 67 00 B5 69 54 E2 46 DB 5D 16 C6"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

The process whitesmoke-silent.exe:1824 makes changes in the system registry.

The Trojan creates and/or sets the following values in system registry:

[HKCR\AppID\{5C731C2A-6ADF-487E-99A2-7291BF794A14}]
"(Default)" = "osmax"

[HKCR\WSEngine.WSGenericHtmlWnd\CurVer]
"(Default)" = "WSEngine.WSGenericHtmlWnd.1"

[HKCR\CLSID\{20E1481B-E285-4ABC-ADC7-AE24842B81CD}\MiscStatus\1]
"(Default)" = "132497"

[HKCR\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}\InprocServer32]
"ThreadingModel" = "Apartment"

[HKLM\SOFTWARE\WhiteSmoke]
"ProductID" = "0"

[HKCR\CLSID\{49269ABB-3D8A-4153-93BC-2A695B066F82}\ProgID]
"(Default)" = "ComVistaElevator.LocalMachineWriter.1"

[HKCU\Software\WhiteSmoke]
"IslicensedVersion" = "0"

[HKCR\ComVistaElevator.LocalMachineWriter\CLSID]
"(Default)" = "{49269ABB-3D8A-4153-93BC-2A695B066F82}"

[HKCR\Interface\{0194532A-A99C-4337-937E-2A452C8957BE}\TypeLib]
"Version" = "1.0"

[HKCR\CLSID\{03E0DF2F-5DD6-4E6D-8DD8-FDACE6DDED11}\ProgID]
"(Default)" = "Director.Enrichment.1"

[HKLM\SOFTWARE\WhiteSmoke\SoftwareUrls]
"Support" = "http://grammar.whitesmoke.com/client_V2/index.html?state=2&d=11&a=8&r=0&utm_source=WhiteSmokeSoftware&utm_medium=Client&utm_content=SupportButton&utm_campaign=SupportButton"

[HKCR\CLSID\{03E0DF2F-5DD6-4E6D-8DD8-FDACE6DDED11}\TypeLib]
"(Default)" = "{97FD9656-07A9-4EEA-911C-16E1375BDBB4}"

[HKCR\ComVistaElevator.LocalMachineWriter.1\CLSID]
"(Default)" = "{49269ABB-3D8A-4153-93BC-2A695B066F82}"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Startup" = "%Documents and Settings%\%current user%\Start Menu\Programs\Startup"

[HKLM\SOFTWARE\WhiteSmoke\SoftwareUrls]
"WebClient" = "http://grammar.whitesmoke.com/client_v2/welcome/welcome_screen1.php"

[HKCR\WSEngine.WSGenericHtmlWnd.1]
"(Default)" = "WSGenericHtmlWnd Class"

[HKCR\TypeLib\{11549FE4-7C5A-4C17-9FC3-56FC5162A994}\1.0\0\win32]
"(Default)" = "%Program Files%\WhiteSmoke\secman.dll"

[HKCR\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\TypeLib\{97FD9656-07A9-4EEA-911C-16E1375BDBB4}\1.0]
"(Default)" = "WSEngine 1.0 Type Library"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKLM\SOFTWARE\WhiteSmoke]
"dir" = "%Program Files%\WhiteSmoke\"

[HKCR\Interface\{7E54B049-A893-4A7F-B3EC-206E01A4F9F8}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\AddInExpress.OutlookSecurityManager\CurVer]
"(Default)" = "AddInExpress.OutlookSecurityManager.1"

[HKCR\CLSID\{20E1481B-E285-4ABC-ADC7-AE24842B81CD}\ToolboxBitmap32]
"(Default)" = "%Program Files%\WhiteSmoke\osmax.ocx, 102"

[HKCR\secman.OutlookSecurityManager\CLSID]
"(Default)" = "{826D7151-8D99-434B-8540-082B8C2AE556}"

[HKCR\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}\ProxyStubClsid]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\WhiteSmoke]
"ShowRegistration" = "1"

[HKCR\CLSID\{03E0DF2F-5DD6-4E6D-8DD8-FDACE6DDED11}\VersionIndependentProgID]
"(Default)" = "Director.Enrichment"

[HKCU\Software\WhiteSmoke]
"PromotionBrowserInterval" = "43200000"

[HKCR\Interface\{5844E584-CC22-49FB-A473-BEA4F19EFA53}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\Interface\{97276C83-5857-4819-B12B-0837E2234B87}\TypeLib]
"Version" = "1.0"

[HKCR\CLSID\{03E0DF2F-5DD6-4E6D-8DD8-FDACE6DDED11}\InprocServer32]
"(Default)" = "%Program Files%\WhiteSmoke\WSEngine.dll"

[HKCR\AppID\{BC610E82-9398-42B0-ACCA-B6B5E54C2BE5}]
"(Default)" = "ComVistaElevator"

[HKCR\Interface\{7131C082-F3C6-404D-B8CC-8AF9CFB6209D}\TypeLib]
"Version" = "1.0"

[HKCR\CLSID\{537E23DF-DF2A-46AC-AC4A-F1E40E0CDC02}]
"AppID" = "{96763D83-1A26-467F-8713-F8E4D58BA742}"

[HKCR\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}\VersionIndependentProgID]
"(Default)" = "secman.OutlookSecurityManager"

[HKCU\Software\WhiteSmoke]
"silent" = "0"

[HKCR\Interface\{0194532A-A99C-4337-937E-2A452C8957BE}\ProxyStubClsid]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\CLSID\{20E1481B-E285-4ABC-ADC7-AE24842B81CD}\VersionIndependentProgID]
"(Default)" = "AddInExpress.OutlookSecurityManager"

[HKCR\CLSID\{20E1481B-E285-4ABC-ADC7-AE24842B81CD}\MiscStatus]
"(Default)" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"History" = "%Documents and Settings%\%current user%\Local Settings\History"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Desktop" = "%Documents and Settings%\%current user%\Desktop"

[HKCR\secman.OutlookSecurityManager\CurVer]
"(Default)" = "secman.OutlookSecurityManager.1"

[HKLM\SOFTWARE\WhiteSmoke\SoftwareUrls]
"DictLanding" = "http://grammar.whitesmoke.com/client_v2/dict/promotion.html"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Paths" = "4"

[HKCR\CLSID\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}]
"(Default)" = "PSFactoryBuffer"

[HKCR\AddInExpress.OutlookSecurityManager.1]
"(Default)" = "OutlookSecMan Control"

[HKCR\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKLM\SOFTWARE\WhiteSmoke\SoftwareUrls]
"Demo" = "http://grammar.whitesmoke.com/client_v2/help/index.html?state=1"

[HKCR\Interface\{7E54B049-A893-4A7F-B3EC-206E01A4F9F8}]
"(Default)" = "IGenericWndScriptExternal"

[HKCR\Interface\{7E54B049-A893-4A7F-B3EC-206E01A4F9F8}\TypeLib]
"Version" = "1.0"

[HKCR\Interface\{F33928A1-8849-48DE-BECB-829D7727AAF2}]
"(Default)" = "ILocalMachineWriter"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CacheLimit" = "65452"

[HKCR\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}\TypeLib]
"(Default)" = "{11549FE4-7C5A-4C17-9FC3-56FC5162A994}"

[HKCR\TypeLib\{CD6A6945-EB68-4F46-A4D2-184082A0491F}\1.0\FLAGS]
"(Default)" = "0"

[HKCR\CLSID\{20E1481B-E285-4ABC-ADC7-AE24842B81CD}\InprocServer32]
"(Default)" = "%Program Files%\WhiteSmoke\osmax.ocx"

[HKCR\ComVistaElevator.LocalMachineWriter\CurVer]
"(Default)" = "ComVistaElevator.LocalMachineWriter.1"

[HKCR\CLSID\{537E23DF-DF2A-46AC-AC4A-F1E40E0CDC02}]
"(Default)" = "WSGenericHtmlWnd Class"

[HKCR\Interface\{5844E584-CC22-49FB-A473-BEA4F19EFA53}]
"(Default)" = "IEnrichment"

[HKCU\Software\WhiteSmoke]
"LanguageID" = "1"

[HKCR\TypeLib\{11549FE4-7C5A-4C17-9FC3-56FC5162A994}\1.0\FLAGS]
"(Default)" = "0"

[HKCR\WSEngine.FloatButton.1\CLSID]
"(Default)" = "{78F44EB2-0CDF-4b37-B211-B34F20C69788}"

[HKCR\AddInExpress.OutlookSecurityManager.1\CLSID]
"(Default)" = "{20E1481B-E285-4ABC-ADC7-AE24842B81CD}"

[HKCR\CLSID\{49269ABB-3D8A-4153-93BC-2A695B066F82}\Elevation]
"(Default)" = ""

[HKCU\Software\WhiteSmoke]
"ShortCutID" = "113"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WhiteSmoke]
"DisplayName" = "WhiteSmoke"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Documents" = "%Documents and Settings%\All Users\Documents"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Personal" = "%Documents and Settings%\%current user%\My Documents"

[HKCR\TypeLib\{97FD9656-07A9-4EEA-911C-16E1375BDBB4}\1.0\0\win32]
"(Default)" = "%Program Files%\WhiteSmoke\WSEngine.dll"

[HKCR\CLSID\{78F44EB2-0CDF-4b37-B211-B34F20C69788}]
"(Default)" = "FloatButton Class"

[HKLM\SOFTWARE\WhiteSmoke\SoftwareUrls]
"WebTemplateWelcome" = "http://grammar.whitesmoke.com/client_v2/templates/template_welcome.html"

[HKCR\TypeLib\{97FD9656-07A9-4EEA-911C-16E1375BDBB4}\1.0\HELPDIR]
"(Default)" = ""

[HKCR\Interface\{4276FDEC-36D7-4D9E-AE46-A63FFA0E1EC7}\ProxyStubClsid]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\Interface\{0194532A-A99C-4337-937E-2A452C8957BE}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\WSEngine.WSGenericHtmlWnd]
"(Default)" = "WSGenericHtmlWnd Class"

[HKCR\CLSID\{20E1481B-E285-4ABC-ADC7-AE24842B81CD}\InprocServer32]
"ThreadingModel" = "Apartment"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WhiteSmoke]
"UninstallString" = "%Program Files%\WhiteSmoke\UninstallWhiteSmoke.exe"

[HKCR\TypeLib\{97FD9656-07A9-4EEA-911C-16E1375BDBB4}\1.0\FLAGS]
"(Default)" = "0"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WhiteSmoke]
"Publisher" = "WhiteSmoke"

[HKLM\SOFTWARE\WhiteSmoke\SoftwareUrls]
"UserGuide" = "http://grammar.whitesmoke.com/client_v2/help/index.html?state=2&d=11&a=8&r=0&utm_source=WhiteSmokeSoftware&utm_medium=Client&utm_content=GuideButton&utm_campaign=GuideButton&"

[HKCR\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}\NumMethods]
"(Default)" = "11"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Desktop" = "%Documents and Settings%\All Users\Desktop"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WhiteSmoke]
"URLInfoAbout" = "http://www.WhiteSmoke.com"

[HKCR\CLSID\{78F44EB2-0CDF-4b37-B211-B34F20C69788}\ProgID]
"(Default)" = "WSEngine.FloatButton.1"

[HKCR\Interface\{7131C082-F3C6-404D-B8CC-8AF9CFB6209D}\ProxyStubClsid32]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCR\Interface\{7E54B049-A893-4A7F-B3EC-206E01A4F9F8}\ProxyStubClsid]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}\TypeLib]
"(Default)" = "{11549FE4-7C5A-4C17-9FC3-56FC5162A994}"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Programs" = "%Documents and Settings%\All Users\Start Menu\Programs"

[HKCR\WSEngine.WSGenericHtmlWnd\CLSID]
"(Default)" = "{537E23DF-DF2A-46AC-AC4A-F1E40E0CDC02}"

[HKCU\Software\WhiteSmoke]
"PromotionNotifierInterval" = "21600000"
"WSSignature" = "Yes"

[HKCR\Interface\{F33928A1-8849-48DE-BECB-829D7727AAF2}\NumMethods]
"(Default)" = "9"

[HKLM\SOFTWARE\WhiteSmoke\SoftwareUrls]
"Purchase" = "http://www.whitesmoke.com/buy.php?id_client=7"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"CommonVideo" = "%Documents and Settings%\All Users\Documents\My Videos"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CacheLimit" = "65452"

[HKCR\Interface\{BE3A6465-A928-4257-8543-C89D3EF617FD}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56}]
"(Default)" = "secman"

[HKCR\Director.Enrichment.1]
"(Default)" = "Enrichment Class"

[HKCR\CLSID\{F33928A1-8849-48DE-BECB-829D7727AAF2}]
"(Default)" = "PSFactoryBuffer"

[HKCR\TypeLib\{92E5039E-FF1E-4AFB-8F24-87592D20C383}\1.0]
"(Default)" = "Outlook Security Manager Component"

[HKCR\TypeLib\{CD6A6945-EB68-4F46-A4D2-184082A0491F}\1.0\HELPDIR]
"(Default)" = ""

[HKCR\Interface\{5844E584-CC22-49FB-A473-BEA4F19EFA53}\TypeLib]
"Version" = "1.0"

[HKCR\Interface\{97276C83-5857-4819-B12B-0837E2234B87}\TypeLib]
"(Default)" = "{97FD9656-07A9-4EEA-911C-16E1375BDBB4}"

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "A0 A8 C8 BD 46 3C 4C 0B 3D F2 29 7D 6A 2B 1E 39"

[HKCR\Interface\{97276C83-5857-4819-B12B-0837E2234B87}]
"(Default)" = "IMainWndScriptExternal"

[HKCR\Director.Enrichment.1\CLSID]
"(Default)" = "{03E0DF2F-5DD6-4E6D-8DD8-FDACE6DDED11}"

[HKCR\CLSID\{20E1481B-E285-4ABC-ADC7-AE24842B81CD}\TypeLib]
"(Default)" = "{92E5039E-FF1E-4AFB-8F24-87592D20C383}"

[HKCR\CLSID\{03E0DF2F-5DD6-4E6D-8DD8-FDACE6DDED11}\InprocServer32]
"ThreadingModel" = "Apartment"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCR\CLSID\{537E23DF-DF2A-46AC-AC4A-F1E40E0CDC02}\ProgID]
"(Default)" = "WSEngine.WSGenericHtmlWnd.1"

[HKCR\Director.Enrichment]
"(Default)" = "Enrichment Class"

[HKCR\Interface\{4276FDEC-36D7-4D9E-AE46-A63FFA0E1EC7}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\Director.Enrichment\CurVer]
"(Default)" = "Director.Enrichment.1"

[HKCR\AppID\secman.DLL]
"AppID" = "{4D076AB4-7562-427A-B5D2-BD96E19DEE56}"

[HKCR\Interface\{7131C082-F3C6-404D-B8CC-8AF9CFB6209D}]
"(Default)" = "_ISecManEvents"

[HKLM\SOFTWARE\WhiteSmoke\SoftwareUrls]
"UseIt" = "http://grammar.whitesmoke.com/client_v2/help/index.html?state=2&d=11&a=8&r=0&utm_source=WhiteSmokeSoftware&utm_medium=Client&utm_content=GuideButton&utm_campaign=GuideButton&first_time=yes&"

[HKCR\CLSID\{537E23DF-DF2A-46AC-AC4A-F1E40E0CDC02}\InprocServer32]
"ThreadingModel" = "Apartment"

[HKCR\Interface\{F33928A1-8849-48DE-BECB-829D7727AAF2}\TypeLib]
"Version" = "1.0"

[HKCR\Interface\{97276C83-5857-4819-B12B-0837E2234B87}\ProxyStubClsid]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\CLSID\{537E23DF-DF2A-46AC-AC4A-F1E40E0CDC02}\VersionIndependentProgID]
"(Default)" = "WSEngine.WSGenericHtmlWnd"

[HKCR\Interface\{7131C082-F3C6-404D-B8CC-8AF9CFB6209D}\ProxyStubClsid]
"(Default)" = "{00020420-0000-0000-C000-000000000046}"

[HKCR\Interface\{BE3A6465-A928-4257-8543-C89D3EF617FD}]
"(Default)" = "IMainHtmlWindow"

[HKCR\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}\ProgID]
"(Default)" = "secman.OutlookSecurityManager.1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"

[HKCR\WSEngine.FloatButton\CurVer]
"(Default)" = "WSEngine.FloatButton.1"

[HKCR\CLSID\{49269ABB-3D8A-4153-93BC-2A695B066F82}]
"(Default)" = "LocalMachineWriter Class"

[HKCR\Interface\{BE3A6465-A928-4257-8543-C89D3EF617FD}\ProxyStubClsid]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Start Menu" = "%Documents and Settings%\%current user%\Start Menu"

[HKCR\CLSID\{78F44EB2-0CDF-4b37-B211-B34F20C69788}]
"AppID" = "{96763D83-1A26-467F-8713-F8E4D58BA742}"

[HKLM\SOFTWARE\WhiteSmoke\SoftwareUrls]
"UpgradeProfile" = "https://buy.whitesmoke.com/?d=11&a=8&r=0&utm_source=WhiteSmokeSoftware&utm_medium=Client&utm_content=BuyButton&utm_campaign=BuyButton"

[HKCR\Interface\{7131C082-F3C6-404D-B8CC-8AF9CFB6209D}\TypeLib]
"(Default)" = "{92E5039E-FF1E-4AFB-8F24-87592D20C383}"

[HKCR\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}]
"(Default)" = "IOutlookSecurityManager2"

[HKCR\TypeLib\{92E5039E-FF1E-4AFB-8F24-87592D20C383}\1.0\FLAGS]
"(Default)" = "0"

[HKCR\TypeLib\{11549FE4-7C5A-4C17-9FC3-56FC5162A994}\1.0]
"(Default)" = "secman 1.0 Type Library"

[HKCR\CLSID\{78F44EB2-0CDF-4b37-B211-B34F20C69788}\VersionIndependentProgID]
"(Default)" = "WSEngine.FloatButton"

[HKLM\SOFTWARE\WhiteSmoke\SoftwareUrls]
"WelcomeURL" = "http://grammar.whitesmoke.com/client_v2/welcome/welcome_screen.php"

[HKCR\Interface\{F33928A1-8849-48DE-BECB-829D7727AAF2}\ProxyStubClsid]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\Interface\{4276FDEC-36D7-4D9E-AE46-A63FFA0E1EC7}\TypeLib]
"Version" = "1.0"

[HKCR\WSEngine.WSGenericHtmlWnd.1\CLSID]
"(Default)" = "{537E23DF-DF2A-46AC-AC4A-F1E40E0CDC02}"

[HKCR\TypeLib\{92E5039E-FF1E-4AFB-8F24-87592D20C383}\1.0\0\win32]
"(Default)" = "%Program Files%\WhiteSmoke\osmax.ocx"

[HKCU\Software\WhiteSmoke]
"Promotion" = "1"

[HKCR\CLSID\{49269ABB-3D8A-4153-93BC-2A695B066F82}\TypeLib]
"(Default)" = "{CD6A6945-EB68-4F46-A4D2-184082A0491F}"

[HKCR\Interface\{0194532A-A99C-4337-937E-2A452C8957BE}\TypeLib]
"(Default)" = "{92E5039E-FF1E-4AFB-8F24-87592D20C383}"

[HKCR\CLSID\{F33928A1-8849-48DE-BECB-829D7727AAF2}\InProcServer32]
"ThreadingModel" = "Both"

[HKCR\CLSID\{78F44EB2-0CDF-4b37-B211-B34F20C69788}\InprocServer32]
"(Default)" = "%Program Files%\WhiteSmoke\WSEngine.dll"

[HKCR\Interface\{F33928A1-8849-48DE-BECB-829D7727AAF2}\TypeLib]
"(Default)" = "{CD6A6945-EB68-4F46-A4D2-184082A0491F}"

[HKCR\Interface\{97276C83-5857-4819-B12B-0837E2234B87}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\CLSID\{49269ABB-3D8A-4153-93BC-2A695B066F82}\InprocServer32]
"ThreadingModel" = "Apartment"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WhiteSmoke]
"DisplayVersion" = "1.00.6034.13143"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"My Pictures" = "%Documents and Settings%\%current user%\My Documents\My Pictures"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Directory" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5"

[HKCR\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}\NumMethods]
"(Default)" = "12"

[HKLM\SOFTWARE\WhiteSmoke\SoftwareUrls]
"PostURL" = "http://grammar.whitesmoke.com/client_v2/post.php"

[HKCR\CLSID\{78F44EB2-0CDF-4b37-B211-B34F20C69788}\InprocServer32]
"ThreadingModel" = "Apartment"

[HKCU\Software\WhiteSmoke]
"WSAutoCheck" = "No"

[HKCR\AppID\osmax.ocx]
"AppID" = "{5C731C2A-6ADF-487E-99A2-7291BF794A14}"

[HKCR\Interface\{5844E584-CC22-49FB-A473-BEA4F19EFA53}\ProxyStubClsid]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}\ProxyStubClsid]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\secman.OutlookSecurityManager.1]
"(Default)" = "OutlookSecurityManager Class"

[HKCR\TypeLib\{11549FE4-7C5A-4C17-9FC3-56FC5162A994}\1.0\HELPDIR]
"(Default)" = ""

[HKCR\Interface\{F33928A1-8849-48DE-BECB-829D7727AAF2}\ProxyStubClsid32]
"(Default)" = "{00020424-0000-0000-C000-000000000046}"

[HKCR\AppID\WSEngine.DLL]
"AppID" = "{96763D83-1A26-467F-8713-F8E4D58BA742}"

[HKCR\AddInExpress.OutlookSecurityManager]
"(Default)" = "OutlookSecMan Control"

[HKCR\CLSID\{537E23DF-DF2A-46AC-AC4A-F1E40E0CDC02}\TypeLib]
"(Default)" = "{PRODUCT_DIRECTOR_TYPELIB}"

[HKCR\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}]
"(Default)" = "IOutlookSecurityManager"

[HKLM\SOFTWARE\WhiteSmoke]
"ContentVersion" = "1"

[HKCR\secman.OutlookSecurityManager]
"(Default)" = "OutlookSecurityManager Class"

[HKCR\CLSID\{49269ABB-3D8A-4153-93BC-2A695B066F82}\Elevation]
"Enabled" = "1"

[HKCU\Software\WhiteSmoke]
"DictKeyState" = "2"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache1"

[HKLM\SOFTWARE\WhiteSmoke]
"Build" = "1.00.6034.13143"

[HKCR\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}]
"(Default)" = "OutlookSecurityManager Class"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"

[HKCR\Interface\{BE3A6465-A928-4257-8543-C89D3EF617FD}\TypeLib]
"Version" = "1.0"

[HKCR\Interface\{4276FDEC-36D7-4D9E-AE46-A63FFA0E1EC7}]
"(Default)" = "IGenericHtmlWindow"

[HKCR\AppID\{BC610E82-9398-42B0-ACCA-B6B5E54C2BE5}]
"DllSurrogate" = ""

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WhiteSmoke]
"DisplayIcon" = "%Program Files%\WhiteSmoke\UninstallWhiteSmoke.exe"

[HKCR\CLSID\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}\InProcServer32]
"(Default)" = "%Program Files%\WhiteSmoke\secman.dll"

[HKCR\AppID\{96763D83-1A26-467F-8713-F8E4D58BA742}]
"(Default)" = "WSEngine"

[HKCR\secman.OutlookSecurityManager.1\CLSID]
"(Default)" = "{826D7151-8D99-434B-8540-082B8C2AE556}"

[HKCR\WSEngine.FloatButton\CLSID]
"(Default)" = "{78F44EB2-0CDF-4b37-B211-B34F20C69788}"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache2"

[HKCR\CLSID\{20E1481B-E285-4ABC-ADC7-AE24842B81CD}]
"AppID" = "{5C731C2A-6ADF-487E-99A2-7291BF794A14}"
"(Default)" = "Add-in Express Outlook Security Manager"

[HKCU\Software\WhiteSmoke]
"DictMouseButton" = "2"

[HKCR\CLSID\{78F44EB2-0CDF-4b37-B211-B34F20C69788}\TypeLib]
"(Default)" = "{PRODUCT_DIRECTOR_TYPELIB}"

[HKCR\Interface\{BE3A6465-A928-4257-8543-C89D3EF617FD}\TypeLib]
"(Default)" = "{97FD9656-07A9-4EEA-911C-16E1375BDBB4}"

[HKCU\Software\WhiteSmoke]
"SetShowDictTip" = "1"

[HKLM\SOFTWARE\WhiteSmoke\SoftwareUrls]
"DictExpired" = "http://grammar.whitesmoke.com/client_v2/dict/expired.html"

[HKCR\TypeLib\{CD6A6945-EB68-4F46-A4D2-184082A0491F}\1.0]
"(Default)" = "ComVistaElevator 1.0 Type Library"

[HKCU\Software\WhiteSmoke]
"ShowMarkedMsg" = "Yes"

[HKCR\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}]
"AppID" = "{4D076AB4-7562-427A-B5D2-BD96E19DEE56}"

[HKLM\SOFTWARE\WhiteSmoke]
"IsBundledTranslator" = "1"

[HKCU\Software\WhiteSmoke]
"IsFirstUse" = "1"

[HKCR\Interface\{5844E584-CC22-49FB-A473-BEA4F19EFA53}\TypeLib]
"(Default)" = "{97FD9656-07A9-4EEA-911C-16E1375BDBB4}"

[HKCU\Software\WhiteSmoke]
"OutlookCheckOnSend" = "1"

[HKCR\WSEngine.FloatButton]
"(Default)" = "FloatButton Class"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKLM\SOFTWARE\WhiteSmoke]
"ProductName" = "WhiteSmoke"

[HKCR\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}\TypeLib]
"(Default)" = "{11549FE4-7C5A-4C17-9FC3-56FC5162A994}"

[HKLM\SOFTWARE\WhiteSmoke]
"IslicensedVersion" = "0"

[HKCR\Interface\{7E54B049-A893-4A7F-B3EC-206E01A4F9F8}\TypeLib]
"(Default)" = "{97FD9656-07A9-4EEA-911C-16E1375BDBB4}"

[HKCR\AddInExpress.OutlookSecurityManager\Clsid]
"(Default)" = "{20E1481B-E285-4ABC-ADC7-AE24842B81CD}"

[HKLM\SOFTWARE\WhiteSmoke\SoftwareUrls]
"FAQ" = "http://grammar.whitesmoke.com/client_v2/help/index.html?state=3&d=11&a=8&r=0&utm_source=WhiteSmokeSoftware&utm_medium=Client&utm_content=FaqButton&utm_campaign=FaqButton"

[HKCR\CLSID\{49269ABB-3D8A-4153-93BC-2A695B066F82}]
"LocalizedString" = "@%Program Files%\WhiteSmoke\ComVistaElevator.dll,-100"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"

[HKCU\Software\WhiteSmoke]
"ShowOnStartUp" = "1"
"ShowUserGuide" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"

[HKCR\CLSID\{49269ABB-3D8A-4153-93BC-2A695B066F82}]
"AppID" = "{BC610E82-9398-42B0-ACCA-B6B5E54C2BE5}"

[HKCU\Software\WhiteSmoke]
"StatisticsInterval" = "43200000"

[HKCR\CLSID\{20E1481B-E285-4ABC-ADC7-AE24842B81CD}\Version]
"(Default)" = "1.0"

[HKCU\Software\WhiteSmoke]
"AutoFormat" = "Yes"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path4]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache4"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Start Menu" = "%Documents and Settings%\All Users\Start Menu"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cookies" = "%Documents and Settings%\%current user%\Cookies"

[HKCR\CLSID\{F33928A1-8849-48DE-BECB-829D7727AAF2}\InProcServer32]
"(Default)" = "%Program Files%\WhiteSmoke\ComVistaElevator.dll"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"CommonMusic" = "%Documents and Settings%\All Users\Documents\My Music"

[HKCR\CLSID\{20E1481B-E285-4ABC-ADC7-AE24842B81CD}\ProgID]
"(Default)" = "AddInExpress.OutlookSecurityManager.1"

[HKCR\WSEngine.FloatButton.1]
"(Default)" = "FloatButton Class"

[HKCR\Director.Enrichment\CLSID]
"(Default)" = "{03E0DF2F-5DD6-4E6D-8DD8-FDACE6DDED11}"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"CommonPictures" = "%Documents and Settings%\All Users\Documents\My Pictures"

[HKCU\Software\WhiteSmoke]
"ShowFloatingButton" = "1"

[HKLM\SOFTWARE\WhiteSmoke]
"Version" = "1.00.6034.13143"

[HKCR\CLSID\{537E23DF-DF2A-46AC-AC4A-F1E40E0CDC02}\InprocServer32]
"(Default)" = "%Program Files%\WhiteSmoke\WSEngine.dll"

[HKLM\SOFTWARE\WhiteSmoke\SoftwareUrls]
"RegistrationForm" = "http://whitesmoke.com/registersoft/"

[HKCR\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}\TypeLib]
"Version" = "1.0"

[HKCR\CLSID\{03E0DF2F-5DD6-4E6D-8DD8-FDACE6DDED11}]
"(Default)" = "Enrichment Class"

[HKCR\TypeLib\{CD6A6945-EB68-4F46-A4D2-184082A0491F}\1.0\0\win32]
"(Default)" = "%Program Files%\WhiteSmoke\ComVistaElevator.dll"

[HKLM\SOFTWARE\WhiteSmoke\SoftwareUrls]
"DictURL" = "http://grammar.whitesmoke.com/client_v2/lib/action.post.php"

[HKCR\Interface\{4276FDEC-36D7-4D9E-AE46-A63FFA0E1EC7}\TypeLib]
"(Default)" = "{97FD9656-07A9-4EEA-911C-16E1375BDBB4}"

[HKCR\CLSID\{49269ABB-3D8A-4153-93BC-2A695B066F82}\InprocServer32]
"(Default)" = "%Program Files%\WhiteSmoke\ComVistaElevator.dll"

[HKCR\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}\InprocServer32]
"(Default)" = "%Program Files%\WhiteSmoke\secman.dll"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache3"

[HKCR\Interface\{0194532A-A99C-4337-937E-2A452C8957BE}]
"(Default)" = "IOutlookSecurityManager"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path4]
"CacheLimit" = "65452"

[HKCR\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}\TypeLib]
"Version" = "1.0"

[HKCR\CLSID\{49269ABB-3D8A-4153-93BC-2A695B066F82}\VersionIndependentProgID]
"(Default)" = "ComVistaElevator.LocalMachineWriter"

[HKCR\TypeLib\{92E5039E-FF1E-4AFB-8F24-87592D20C383}\1.0\HELPDIR]
"(Default)" = ""

[HKCR\ComVistaElevator.LocalMachineWriter]
"(Default)" = "LocalMachineWriter Class"

[HKCR\CLSID\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}\InProcServer32]
"ThreadingModel" = "Both"

[HKCR\ComVistaElevator.LocalMachineWriter.1]
"(Default)" = "LocalMachineWriter Class"

[HKLM\SOFTWARE\WhiteSmoke]
"WebsiteUrl" = "www.WhiteSmoke.com"

The Trojan modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "1"

The Trojan modifies IE settings for security zones to map all urls to the Intranet Zone:

"IntranetName" = "1"

To automatically run itself each time Windows is booted, the Trojan adds the following link to its file to the system registry autorun key:

[HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"WhiteSmoke Installer" = "C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\~nsu.tmp\whitesmoke-silent.exe"

The Trojan modifies IE settings for security zones to map all web-nodes that bypassing the proxy to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass" = "1"

The process wsget.exe:432 makes changes in the system registry.

The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Directory" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path4]
"CacheLimit" = "65452"
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache4"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"

"Cookies" = "%Documents and Settings%\%current user%\Cookies"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache2"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"

[HKLM\System\CurrentControlSet\Hardware Profiles\0001\Software\Microsoft\windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "3C 00 00 00 1D 00 00 00 01 00 00 00 00 00 00 00"

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "F9 CA B6 B4 55 3F 53 34 B0 F5 E3 5F F6 C7 A4 DB"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"MigrateProxy" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"History" = "%Documents and Settings%\%current user%\Local Settings\History"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache3"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Paths" = "4"

The Trojan modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "1"

The Trojan modifies IE settings for security zones to map all web-nodes that bypassing the proxy to the Intranet Zone:

"ProxyBypass" = "1"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Trojan modifies IE settings for security zones to map all urls to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName" = "1"

The Trojan deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"
"ProxyServer"
"ProxyOverride"

The process WSTray.exe:1300 makes changes in the system registry.

The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "BB 28 B9 65 32 7E AF E4 26 DF D2 D5 12 99 D5 FD"

The process WSRegistration.exe:1620 makes changes in the system registry.

The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "56 F8 00 ED A2 03 2D DD A9 7F 1A 7F 2C FB 3F 85"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cookies" = "%Documents and Settings%\%current user%\Cookies"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKLM\SOFTWARE\Microsoft\DirectDraw\MostRecentApplication]
"ID" = "1392800403"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache2"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"History" = "%Documents and Settings%\%current user%\Local Settings\History"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Directory" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path4]
"CacheLimit" = "65452"
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache4"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache3"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Paths" = "4"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CacheLimit" = "65452"

[HKLM\SOFTWARE\Microsoft\DirectDraw\MostRecentApplication]
"Name" = "WSRegistration.exe"

Dropped PE files

MD5	File path
aded98da2bdabb157965ecf70ed8b056	c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\WhiteSmoke\CheckLockedWsFiles.exe
0b3595a4ff0b36d68e5fc67fd7d70fdc	c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\WhiteSmoke\msvcp80.dll
c9564cf4976e7e96b4052737aa2492b4	c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\WhiteSmoke\msvcr80.dll
ae97fd89eec5000b400e6bc7e8db0e56	c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\nsx6.tmp\CustomLicense.dll
a78507ea1078cadaa8b2ec1a2e1d874f	c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\nsx6.tmp\System.dll
e301e0184786c5c75b4b34e4d04608eb	c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\nsx6.tmp\nsDialogs.dll
ab390ac492056f5d672d578045e6930d	c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\~nsu.tmp\WhiteSmokeTranslator_rev1.exe
ab390ac492056f5d672d578045e6930d	c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\~nsu.tmp\whitesmoke-silent.exe
6bc1888efde62de708d06dd70235ebc1	c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\~nsu.tmp\wsget.exe
ab390ac492056f5d672d578045e6930d	c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\WhiteSmokeWriterTrial[1].exe
bc1b64775a45f8b9ba6e95de08a409fe	c:\Program Files\WhiteSmoke\ComVistaElevator.dll
8aad03bbff954b17308f61e3dcb93e33	c:\Program Files\WhiteSmoke\FuncServer_WDC_x64.exe
d3d886c507e12a67cc1c5ebec7b88593	c:\Program Files\WhiteSmoke\TCCons.dll
63fcb34f802affc02d0c1fe351138a43	c:\Program Files\WhiteSmoke\TCCons_x64.dll
260ebcc0d3f2a984a466494cc85c13bf	c:\Program Files\WhiteSmoke\UninstallWhiteSmoke.exe
c6f37c9ea23457dc1a1c988915a5921f	c:\Program Files\WhiteSmoke\WCapture.dll
24b87db4cc80d04881d999e2688ef0dd	c:\Program Files\WhiteSmoke\WCaptureMoz\components\WCaptureXpcom.dll
ca20f4239ddde1d62713ee3d6b21c978	c:\Program Files\WhiteSmoke\WCaptureMoz\plugins\npWCX.dll
d00f8e73ea1f2502a4a7c0ff6e917509	c:\Program Files\WhiteSmoke\WCaptureX.dll
bfd0da7faad0a463ac8de028e2d77457	c:\Program Files\WhiteSmoke\WCaptureX_x64.dll
628f7f83b22c13bae007bfb0f5942f2d	c:\Program Files\WhiteSmoke\WCapture_x64.dll
fd8ba79ce6d900fae4fb312faa97239b	c:\Program Files\WhiteSmoke\WCustom.dll
a7e3390a6556def75b38cacc28baf68a	c:\Program Files\WhiteSmoke\WCustom_x64.dll
83025bb47c6cd4a2795b1922c27bc30c	c:\Program Files\WhiteSmoke\WHook.dll
1155f089671bac5e198ecc266d11dd55	c:\Program Files\WhiteSmoke\WHook_x64.dll
807515434e955a9ea7a277b5bab9d43b	c:\Program Files\WhiteSmoke\WMonitorX.dll
52b881188349f0c7159c25ec14a99c88	c:\Program Files\WhiteSmoke\WMonitorX_x64.dll
592c32e3cd99e79a81d8d96383f8b4f0	c:\Program Files\WhiteSmoke\WSEngine.dll
c78f2d7f8b0ec0500b567380b3cac3a2	c:\Program Files\WhiteSmoke\WSKeyboardHook.dll
b9f9e1fef9b623275aa767b35f563234	c:\Program Files\WhiteSmoke\WSKeyboardHook64.dll
fce21621e9b76d4a5806a69d7a915406	c:\Program Files\WhiteSmoke\WSLogger.exe
b115108444d3b4a2b87e7067c2552865	c:\Program Files\WhiteSmoke\WSMouseHook.dll
78f796d36d186a49784027ea6d85fbea	c:\Program Files\WhiteSmoke\WSRegistration.exe
1effbdd388ca7f839153a5179315b182	c:\Program Files\WhiteSmoke\WSTray.exe
9ddff150111c820db67c2103934a75a0	c:\Program Files\WhiteSmoke\WSTray64.exe
d5e459bed3db9cf7fc6cc1455f177d2d	c:\Program Files\WhiteSmoke\atl80.dll
0b3595a4ff0b36d68e5fc67fd7d70fdc	c:\Program Files\WhiteSmoke\msvcp80.dll
c9564cf4976e7e96b4052737aa2492b4	c:\Program Files\WhiteSmoke\msvcr80.dll
ea10fb9c1901e6c83fbd3335eccef099	c:\Program Files\WhiteSmoke\osmax.ocx
52b3bfa65e00c4fc1a46cb34d2db3f29	c:\Program Files\WhiteSmoke\osmax64.ocx
1c9620eec8c0d634971503560fec7b73	c:\Program Files\WhiteSmoke\secman.dll
a9dc007092620d179929952ca6f35256	c:\Program Files\WhiteSmoke\secman64.dll
821d03ad964aac99e5811de2123e6f72	c:\Program Files\WhiteSmoke\tessdll.dll
5126dad3449259762e6634506ce69a65	c:\Program Files\WhiteSmoke\tessdll_x64.dll

HOSTS file anomalies

No changes have been detected.

Rootkit activity

No anomalies have been detected.

Propagation

Removals

Remove it with Ad-Aware

Click (here) to download and install Ad-Aware Free Antivirus.
Update the definition files.
Run a full scan of your computer.

Manual removal*

Terminate malicious process(es) (How to End a Process With the Task Manager):
CheckLockedWSFiles.exe:1228
CheckLockedWSFiles.exe:828
CheckLockedWSFiles.exe:1376
%original file name%.exe:1332
whitesmoke-silent.exe:1824
wsget.exe:432
Delete the original Trojan file.
Delete or disinfect the following files created/modified by the Trojan:
%Documents and Settings%\%current user%\Local Settings\Temp\~nsu.tmp\boost.ico (13 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\~nsu.tmp\wsget.exe (66 bytes)
%Documents and Settings%\%current user%\Desktop\Improve Your PC.lnk (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\WhiteSmoke\msvcr80.dll (21216 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsx6.tmp\System.dll (11 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsw4.tmp (563482 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsx6.tmp\Whitesmoke_EULA.txt (784 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\WhiteSmoke\CheckLockedWsFiles.exe (3312 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsx6.tmp\CustomLicense.dll (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsx6.tmp\ioSpecial.ini (897 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\WhiteSmoke\Microsoft.VC80.CRT.manifest (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsx6.tmp\modern-wizard.bmp (784 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\WhiteSmoke\msvcp80.dll (19096 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsx6.tmp\nsDialogs.dll (9 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\screens\screen_ok_press.gif (1 bytes)
%Program Files%\WhiteSmoke\wcxChrome.crx (5064 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\Letters of Appreciation\Letter of Thanks to Employee of Another Firm.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\img\plusbottom.gif (88 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\Board of Directors & SHareholders\Notice of Annual Meeting of Shareholders.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\rightBottom.gif (571 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\edit_sidefade.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\registration\img\back - Copy.png (2392 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\screens\screen_bg_top.png (5 bytes)
%Program Files%\WhiteSmoke\html\english\gui\js\NonPackedVersion\sound.js (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\top_close.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Greetings\Graduation\YouHaveGraduated.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\Business Plan\Announcement of New Business Opening.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\settings\img\Buttons\cancel_down.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\img\Background\down_arrow.png (215 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\input_bg.png (199 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\GPL-LICENSE.txt (15 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Medical\Health Plans\Appeal for Assisstance.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Resumes and Cover Letters\Resumes\Graphic Designer Resume.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Internet & Technology\Resumes\Technical Writer 3 Resume.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\common\js\prototype.js (3616 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Sales & Marketing\Customer Orders\Apology for Delay in Delivery.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\review-section\shadow2.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\img\Buttons\go_up_.gif (2 bytes)
%Program Files%\WhiteSmoke\tessdll_x64.dll (66604 bytes)
%Program Files%\WhiteSmoke\html\english\settings\img\Buttons\tab_content_on.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\store_roll.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Cover Letters\GrantCoverSheet.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\settings\img\Background\main_bg.png (4 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\screens\ico_expired.gif (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\rightBottom.gif (571 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Literary\Promotions\Promotional Letter Antique Shop.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\caption_bar_max_up.gif (672 bytes)
%Program Files%\WhiteSmoke\html\english\userGuide\images\boxBlackFix.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Medical\CV & Resumes\Medical Essay Residency Experience.html (6 bytes)
%Program Files%\WhiteSmoke\WMonitorX.dll (7192 bytes)
%Program Files%\WhiteSmoke\html\english\userGuide\images\dictionaryTab.png (1552 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Sales & Marketing\Customer Orders\Cancellation of an Order.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Confidentiality Agreements\Business Credit Application.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\caption_px_.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\registration\img\continue_button_click.png (4 bytes)
%Program Files%\WhiteSmoke\html\english\gui\js\x.gif (49 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\grammar\search_hover.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\red.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\menuline_tutorials_up.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\style\dictionary.css (12 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Sales & Marketing\Customer Services\New Representative.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\context_br2.gif (92 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\summaryline_px.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\msdropdown\dd.css (4 bytes)
%Program Files%\WhiteSmoke\html\english\gui\js\enrichmentsContextMenu.class.js (6 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Internet & Technology\Resumes\Database and Application Developer Resume.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\folder.gif (372 bytes)
%Program Files%\WhiteSmoke\html\english\templates\dtree.js (13 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\context_sub_menu_bg.png (203 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Hiring and Termination\Resignation Letters\Job Resignation Letter.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\icons\sprite.jpg (4 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\plusbottom.gif (88 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\img\Background\input_bg_old.png (199 bytes)
%Program Files%\WhiteSmoke\html\english\gui\style\iframeTest.css (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\left_input.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Agreements & Contracts\Notice to Vacate Premises.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\js\NonPackedVersion\dragdrop.js (784 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\Memorandum\template memorandum.htm (1856 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\menuline_writer_up.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Hiring and Termination\Dismissal and Rejection\Acknowledgment of Job Application.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\js\jquery-1.4.2.min.js (2392 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Power of Attorney\Special Power of Attorney.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\userGuide\images\bg - Copy.png (9 bytes)
%Program Files%\WhiteSmoke\html\english\gui\style\combobox.css (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Resumes and Cover Letters\Resumes\Medical Resume - Physician.html (6 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Agreements & Contracts\Bill of Sale.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\img\folderopen.gif (376 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\menuline_dictionary_on.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Greetings\Christmas\ChristmasGreetings.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Sales & Marketing\Customer Complaints\Request Refusal for Sales.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\js\appInterface.js (8184 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Sales & Marketing\Customer Complaints\Customer Letter of Complaint.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\summaryline_apply_up.png (4 bytes)
%Program Files%\WhiteSmoke\WSTray.exe.manifest (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Hiring and Termination\Hiring Employees\Employment Letters\Letter for Assistant Professor.html (4 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Literary\Promotions\Letter of Recommendation.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\context_tr2.gif (93 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\caption_bar_max_up_.gif (196 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Personal & Private Documents\General Release.html (2 bytes)
%Program Files%\WhiteSmoke\osmax64.ocx (20416 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\buttons_tray_px.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\img\Buttons\hTranslation.png (4 bytes)
%Program Files%\WhiteSmoke\WCaptureMoz\install.rdf (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\caption_bar_max_over.gif (196 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\jspVerticalBar.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Sales & Marketing\Customer Orders\Acknowledgment of Request for Materials.html (915 bytes)
%Program Files%\WhiteSmoke\html\english\templates\style\style.css (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\myEmpty.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\summaryline_check_down.png (4 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\caption_px_11.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Finance\InvestigationOfBillingInquiry.html (2 bytes)
%Program Files%\WhiteSmoke\tessdll.dll (48241 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Employment Requests\Request for Letter of Reference.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\grammar\addto_up.png (4 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\screens\loading_window.swf (784 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Hiring and Termination\Hiring Employees\Employment Letters\Request for Employment Test.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Resumes and Cover Letters\Resumes\Management Resume 2.html (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\summaryline_apply_down.png (4 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Internet & Technology\Resumes\Marketing Director Resume.html (4 bytes)
%Program Files%\WhiteSmoke\html\english\gui\js\grammarContextMenu.class.js (784 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\review-section\content-review4.png (9 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Literary\Promotions\Comments to Author Regarding Book.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\red2.png (3 bytes)
%Program Files%\WhiteSmoke\atl80.dll (3312 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Sales & Marketing\Customer Services\Valued Customer Status.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\grammar\search_disabled.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Students\Careers\Career Letter for Accounting Position.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\Notices & Certificates\Certificate of Abandonment of Fictitious Business Name.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Real Estate\Notices\Notice to Pay Rent or Quit.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\settings\css\index.css (7 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Medical\Medical Employment\Medical Resume Format.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\registration\img\captionbar\caption_bar_close_up_over.gif (307 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Real Estate\Leases\Memorandum of Contract for Sale and Purchase of Property.html (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\store_up.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\js\jquery.jscrollpane.min.js (12 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\resize_gripper.gif (277 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\arOpen.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\Managing & Motivating Employees\Notice of Promotion.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\leftCaptionCorner.gif (372 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Personal Matters\Sale of Automobile or Other Motor Vehicle.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\review-section\shdow_good.gif (70 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\summaryline_apply_roll.png (4 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Literary\Promotions\Magazine Review.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\settings\img\Buttons\tab_info_off.png (4 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Finances\Customer Terms of Payment.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\open.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Agreements\Acceptance of Purchase Security Agreement.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Hiring and Termination\Dismissal and Rejection\Job Rejection Letter2.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Medical\Medical Employment\Thank You After Interview.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\Copy of notice_right_top_bg.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Resumes and Cover Letters\Resumes\Technical Writer.html (4 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Finances\Letter for Customer Overdue Account.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Resumes and Cover Letters\Job Search Cover Letters\Job Search Cover Letter - Disabled Citizens.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Agreements & Contracts\Car Rental Contract.html (3 bytes)
%Program Files%\WhiteSmoke\WSMouseHook.dll (14 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\img\empty.gif (62 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\logo3.gif (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\objects\p7tm\p7t_plus.gif (58 bytes)
%Program Files%\WhiteSmoke\html\english\gui\js\unittest.js (784 bytes)
%Program Files%\WhiteSmoke\html\english\userGuide\js\userGuide.js (671 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Resumes and Cover Letters\Resumes\Database and Application Developer Resume.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Real Estate\Leases\Bill of Sale.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\screens\button_no_down.png (4 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Hiring and Termination\Hiring Employees\Employment Letters\Introduction of New Employee.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\Business Legal Notices\Final Notice of Impending Litigation.html (1 bytes)
%Program Files%\WhiteSmoke\secman.dll (5064 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\icons\1273404841_tick_16.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\img\nolines_minus.gif (861 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\img\Background\corner_top_left.png (341 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Finances\Bank Error.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\menuline_tutorials_up_.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\settings\img\Buttons\cancel_up.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Resumes and Cover Letters\Resumes\Java Developer Resume.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Resumes and Cover Letters\Resumes\Healthcare Resume.html (4 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\store_down.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Agreements\Consulting Agreement.html (14 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nst5.tmp\KillProc.dll (784 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\icons\icon_phone.gif (579 bytes)
%Program Files%\WhiteSmoke\html\english\gui\js\Contextmenu.js (9 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Internet & Technology\Resumes\Marketing Administrator Resume.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\index.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Advertising\Press Release.html (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\Business Agreements\Consignment Agreement.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Sales & Marketing\Customer Orders\Repairs to Product.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Community Work\ResignationFromVoluntaryPosition.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\caption_bottom_px_.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\leftBottom3_.gif (624 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Sales & Marketing\Customer Services\Good Customer Service.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Employee manual\Employment Applications.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\top_grey_strip.gif (151 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\summaryline_check_down.png (4 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\screens\screen_bg_old.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\topButtonsRight.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\js\dragdrop.pack.js (12 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Internet & Technology\Resumes\Power Point Designer Resume.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\summaryline_apply_roll.png (4 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\summaryline_check_up.png (5 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\rightCaptionCorner.gif (366 bytes)
%Program Files%\WhiteSmoke\html\english\gui\js\dictionaryContextMenu.class.js (784 bytes)
%Program Files%\WhiteSmoke\html\english\registration\img\down.gif (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\style\dictionary.css (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\menuline_writer_on.gif (554 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Sales & Marketing\Customer Orders\Apology for Delay of Order.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\icons\icon_cart.gif (970 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\caption_strip_right_corner.gif (348 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Agreements & Contracts\Mutual rescission of contract.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\js\NonPackedVersion\prototype.js (5064 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Sales & Marketing\New Products\New Product Ideas.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\settings\img\Buttons\cancel_disabled.png (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\caption_bottom_px.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\grammar\definition_hover.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\grammar\explanation_hover.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\js\jquery.mousewheel.js (2 bytes)
%Program Files%\WhiteSmoke\html\english\common\iepngfix\opacity.png (11 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\caption_bar_close_down.gif (316 bytes)
%Program Files%\WhiteSmoke\html\english\templates\style\templates.css (5 bytes)
%Program Files%\WhiteSmoke\html\english\registration\img\continue_button_click.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\topButtonsLeft.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\userGuide\css\style - Copy.css (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\review-section\closedy2.png (135 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\img\Buttons\down_arrow.png (215 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\caption_bar_re_up.gif (196 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Resumes and Cover Letters\Resumes\Medical Essay Residency Experience.html (5 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Real Estate\Evictions\Notice to Vacate Premises.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\menuline_translator_roll.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\Correspondence\Letter of Complaint.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Affidavits\Affidavit of No Lien.html (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\objects\ebook_js.js (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\caption_bar_close_up.gif (663 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Sales & Marketing\Customer Services\Valued Customer Party Invitation.html (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\menuline_writer_roll.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Real Estate\Leases\Contract Lease of Property.html (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\help_down.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\js\sound.pack.js (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\grammar\howto_disabled.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Collections\Letter of Credit (Irrevocable).html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Medical\Complaints\Letter for Quality of Care Complaint.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\General Admin\Change of Company Name.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\userGuide\images\i.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Finance\BankError.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\userGuide\images\arr2.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\review-section\score1.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Sales & Marketing\Resumes\Sales Representative Resume.html (4 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Literary\Advertising\Art Advertising Flyer.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\menu.htm (2392 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Internet & Technology\Resumes\Implementation Engineer Resume.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\trash.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Copyright,Patent & Trademark\Assignment of Copyright.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\menuline_writer_on.gif (554 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\General Admin\Closing A Business.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\js\jqModal.js (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\style\screens.css (6 bytes)
%Program Files%\WhiteSmoke\html\english\gui\js\jquery.ba-throttle-debounce.js (10 bytes)
%Program Files%\WhiteSmoke\html\english\gui\js\ws_content_manager.js (1856 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\grammar\addto_hover.png (4 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Greetings\Christmas\ChristmasGreetingsToWorkers.html (903 bytes)
%Program Files%\WhiteSmoke\html\english\registration\img\banner.png (6584 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\minusbottom.gif (85 bytes)
%Program Files%\WhiteSmoke\html\english\settings\img\Buttons\tab_general_off.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\objects\flashobject.js (6 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\rightBottom - Copy.gif (574 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\Business Agreements\Consulting Agreement.html (15 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Sales & Marketing\Customer Accounts\Second Request for Refund on Returned Merchandise.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\caption_bar_max_down.gif (196 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\dpreloader.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\userGuide\images\correctionssuggestions.png (2392 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Students\University Correspondence\Request for University Application Material.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Credibility\Debt Validation.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Resumes and Cover Letters\Resumes\Freelance Marcom Resume.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Sales & Marketing\Customer Accounts\Sale on Approval Acknowledgment.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\review-section\content-review.png (9 bytes)
%Program Files%\WhiteSmoke\html\english\gui\js\spellingContextMenu.class.js (6 bytes)
%Program Files%\WhiteSmoke\html\english\userGuide\images\WriterTab_old.png (3312 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Medical\Report\Operative Biopsy Report.html (4 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\icons\icon_cd.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\right_input.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\js\NonPackedVersion\slider.js (10 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\nolines_minus.gif (861 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\js\xmlhttp.js (7 bytes)
%Program Files%\WhiteSmoke\html\english\userGuide\faq.html (10 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\bottom_right_corner.gif (78 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\icons\icon_music.gif (999 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\feather.gif (568 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Collections\Request for Credit application.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\floatingButton\blue.gif (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\Staff Notices\Praise for Employee's Performance.html (1 bytes)
%Program Files%\WhiteSmoke\WCustom_x64.dll (7192 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\img\Background\leftSide.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Medical\Billing\Billing Problem.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Collections\Installment note.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\empty - Copy.gif (62 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Greetings\Christmas\InTheStillOfTheNightChristmasGreeting.html (5 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\General Admin\Business Invitation.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\summaryline_check_roll.png (4 bytes)
%Program Files%\WhiteSmoke\html\english\floatingButton_howto\js\iepngfix\helix.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Employee Reference Letters\EmploymentReferenceLetter.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\summaryline_apply_down.png (4 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Confidentiality Agreements\Discharge of Security Interest.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\menuline_dictionary_up.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\bottom_grey_strip.gif (143 bytes)
%Program Files%\WhiteSmoke\html\english\settings\img\Background\main_bg_old.png (4 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Sales & Marketing\Special Offers & Sales\Introductory Offer for a New Store.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\screens\reviewOpen_up.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\cascade.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\review-section\shadow.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\screens\screen_ok_up.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\edit_footer_px.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Thank You\Thank You Staff for Emotional Support.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\js\templatesInterface.js (1 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\img\Buttons\humanTranslation_press.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\objects\p7tm\p7t_minus.gif (57 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Literary\Resumes\Actor Resume.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\screens\caption_bar_close_over.gif (619 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Finance\LetterOfCreditGeneral.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Condolences\LetterOfCondolence.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\logologo2_11.gif (2 bytes)
%Program Files%\WhiteSmoke\html\english\userGuide\js\jquery.min.js (2392 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\Staff Notices\Reprimand for Employee Unsatisfactory Behavior.html (964 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\screens\button_yes_up.png (3 bytes)
%Program Files%\WhiteSmoke\WCaptureMoz\components\WcxComm.xpt (355 bytes)
%Program Files%\WhiteSmoke\html\english\registration\img\continue_button_over.gif (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\leftSide3_.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\Apologies\Apology for Cancellation of a Meeting.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\userGuide\images\translatorTab.png (3312 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Finances\Grant Cover Sheet.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\Correspondence\Transferring to New Division.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Employee Reference Letters\VerificationOfEmploymentLetter.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\apply_up_.png (4 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\Correspondence\Holiday Greetings.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\menuline_templates_roll.gif (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Resumes and Cover Letters\Resumes\Banking Resume.html (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\caption_bar_re_up.gif (196 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Resumes\Marketing Administrator Resume.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\review-section\score2.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Greetings\Christmas\HappyChristmasGreeting.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Personal & Private Documents\Sale of Automobile or other Motor Vehicle.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Medical\Request for Medical Information\Request for Personal Information.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\grammar\enrichment_up.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Real Estate\Assignment\Assignment of Mortgage.html (4 bytes)
%Program Files%\WhiteSmoke\html\english\common\js\common.js (2 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\img\Buttons\moreLang_press.gif (2 bytes)
%Program Files%\WhiteSmoke\html\english\floatingButton_howto\js\iepngfix\iepngfix.html (5 bytes)
%Program Files%\WhiteSmoke\html\english\userGuide\images\TheTemplatesTab.png (784 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\img\trash.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Medical\No Show\No Show for Appointment.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\common\iepngfix\blank.gif (49 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Internet & Technology\Resumes\Statistician Director of Research Resume.html (876 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\line.gif (66 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\strike_green.gif (49 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\img\musicfolder.gif (633 bytes)
%Program Files%\WhiteSmoke\secman64.dll (4992 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\edit_footer_left.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Internet & Technology\Resumes\Marketing Manager Resume.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\registration\js\regInterface.js (6 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Students\Personal Correspondence\Request for Financial Assistance from Parents.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Resumes and Cover Letters\Job Search Cover Letters\Law Internship Cover Letter.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\smallclosebutton.gif (163 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Community Affairs\Request for Traffic Light.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\userGuide\userGuide.html (10 bytes)
%Program Files%\WhiteSmoke\WS.ico (27 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\context_submenu_dis.gif (49 bytes)
%Program Files%\WhiteSmoke\html\english\settings\img\Buttons\tab_shortcut_off.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\js\iepngfix\iepngfix.htc (2 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\img\Buttons\switch.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\caption_px.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Sales & Marketing\Customer Services\Thank you to Satisfied Customer.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\settings\img\Buttons\save_over.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Real Estate\Notices\Collection Demand Letter.html (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Agreements & Contracts\Contract With Stock Broker.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\js\ws_links.js (643 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\strike_green2.gif (70 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Internet & Technology\Resumes\Marcom Expert Resume.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\menuline_templates_on.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\style\indexnew.css (1552 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\img\Buttons\moreLang_up.gif (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\review-section\reviewWhite3.gif (7 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Hiring and Firing\Termination of Employment.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\store_roll.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\img\folder.gif (372 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Resumes and Cover Letters\Resumes\Management Resume.html (3 bytes)
%Program Files%\WhiteSmoke\html\english\registration\style\registration.css (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\top_open.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Finances\Request for Documentation of Invoice.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\Correspondence\Confirmation of Reschedule of Meeting.html (920 bytes)
%Program Files%\WhiteSmoke\html\english\templates\style\jquery.jscrollpane.css (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Real Estate\Notices\Notice Of Overdue Rent.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\spacer.gif (49 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\img\base.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\floatingButton\blue-rollover.gif (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\joinbottom.gif (66 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Sales & Marketing\Customer Orders\Arrival of Outstanding Orders.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\blue.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\common\iepngfix\helix.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\js\tooltip.js (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Real Estate\Mortgages\Assignment of Mortgage.html (4 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Employee manual\Employee Performance Review and Planning Sessions.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Personal & Private Documents\Living Will - Male.html (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\Apologies\Apology for Inappropriate Behavior.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\img\cd.gif (239 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\wslogo.gif (5 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Resumes\Management Resume 2.html (4 bytes)
%Program Files%\WhiteSmoke\html\english\userGuide\js\jquery.mousewheel.js (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Confidentiality Agreements\Demand by Secured Party.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Resumes and Cover Letters\Resumes\Technical Publication Manager Resume.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\menuline_tutorials_on.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\MIT-LICENSE.txt (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Internet & Technology\Resumes\Internet Marketer Resume.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Resumes and Cover Letters\Job Search Cover Letters\Cover Letter Auditor Development Program.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\js\ypSlideOutMenusContext.js (8 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Students\Admissions Essays\Graduate School Literary Essay.html (5 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\icons\button-large.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Internet & Technology\Resumes\Programmer Developer Resume.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\floatingButton\red&blue.gif (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\img\join.gif (69 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Students\Resumes\Student Resume.html (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Sales & Marketing\Resumes\Customer Service Resume 2.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\userGuide\js\jquery-1.4.2.min.js (2392 bytes)
%Program Files%\WhiteSmoke\html\english\gui\js\jquery-1.3.2.min.js (1856 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\right_input.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Real Estate\Leases\Agreement for Extension of Lease.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Resumes and Cover Letters\Resumes\Customer Service Resume.html (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Well Wishes\Welcome New Tenants.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Assignments\Assignment of Security Interest.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\style\jeegoo.css (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\grammar\howto_up.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\js\common.js (784 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\Correspondence\Staff Sympathy Letter.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\img\question.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Internet & Technology\Resumes\Product Delivery Engineer Resume.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\caption_bar_re_down.gif (196 bytes)
%Program Files%\WhiteSmoke\html\english\userGuide\images\TheRight-clickMenu.png (5520 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Employee Reference Letters\ReferenceLetterByAcquaintance.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Resumes and Cover Letters\Job Search Cover Letters\Job Application Letter.html (2 bytes)
%Program Files%\WhiteSmoke\FuncServer_WDC_x64.exe (3312 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\review-section\x_hover.gif (176 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\borders2.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\img\globe.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\img\spacer.gif (49 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Real Estate\Notices\Request Estimate of Appraisal Costs.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Students\Personal Correspondence\Congratulations to High School Graduate.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Outstanding payments\Collection Letter.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\registration\img\banner.gif (1856 bytes)
%Program Files%\WhiteSmoke\html\english\settings\img\captionbar\caption_bar_close_up.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\userGuide\images\WhiteSmokeOverview.png (1856 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Employee Reference Letters\RequestForEmployeeReferenceLetter.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\grammar\explanation_up.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Resumes and Cover Letters\Job Search Cover Letters\Resume Cover Letter2.html (770 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Sales & Marketing\Special Offers & Sales\Announcing Summer Sale.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\review-section\reviewWhite5.gif (9 bytes)
%Program Files%\WhiteSmoke\html\english\templates\js\jquery-1.4.2.min.js (2392 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Internet & Technology\Resumes\Graphic Designer Resume.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\settings\js\iepngfix\iepngfix.html (5 bytes)
%Program Files%\WhiteSmoke\html\english\gui\js\prototype.pack.js (1856 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Hiring and Termination\Hiring Employees\Thank You Letters\Thank You Letter After Interview.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\img\Buttons\go_up.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Assignments\Assignment of Deed of Trust.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\topButtonsLeft_.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\folderopen.gif (376 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Personal & Private Documents\Living Will - female.html (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Sales & Marketing\Agreements\Professional Services Agreement.html (12 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Collections\10 day notice before collections on delinquent account.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Agreements & Contracts\Bill of Sale 2.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\review-section\reviewWhite2.gif (8 bytes)
%Program Files%\WhiteSmoke\osmax.ocx (19096 bytes)
%Program Files%\WhiteSmoke\html\english\settings\js\iepngfix\iepngfix.htc (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\js\switchcontent.js (15 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\review-section\dot.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\settings\img\Buttons\tab_content_disabled.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Internet & Technology\Resumes\Packaging Senior Engineer Resume.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\logo2.gif (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\screens\welcomeGo_up.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Finance\RemovalOfInadequateInformation.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\settings\img\Buttons\tab_shortcut_disabled.png (4 bytes)
%Program Files%\WhiteSmoke\html\english\gui\style\enrichments.css (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Students\University Correspondence\Appreciation of Scholarship.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\msdropdown\dd_arrow.gif (138 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\grammar\grammarexpclosebutton.gif (183 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Literary\Promotions\Introduction of Novel.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Thank You\Message of Thanks.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\review-section\reviewWhite.gif (5 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Sales & Marketing\New Products\Introductory Product Offer.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Internet & Technology\Affiliate Program Agreement.rtf (3616 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\summaryline_left_corner.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\menuline_toolkit_up.gif (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Agreements\Business Consultant Agreement.html (5 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\icons\icon_secure.gif (373 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\menuline_writer_up_.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Employment Requests\Request for Leave of Absence.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\General Admin\Business Name Change.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Internet & Technology\Resumes\Training Manager Resume.html (1 bytes)
%Program Files%\WhiteSmoke\settings.ini (302 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Advertising\AGREEMENT FOR INTERNET ADVERTISING SERVICES.htm (784 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Resumes and Cover Letters\Resumes\Marketing Director Resume.html (4 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\menuline_translator_up.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\menuline_toolkit_on.gif (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Sales & Marketing\Special Offers & Sales\Special Offers.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\registration\img\back.png (5064 bytes)
%Program Files%\WhiteSmoke\html\english\floatingButton_howto\js\iepngfix\iepngfix.htc (2 bytes)
%Program Files%\WhiteSmoke\html\english\userGuide\troubleshooting.html (10 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\grammar\howto_hover.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Informative Letters\Announcement of Partnership Buyout.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Finances\Expense Account Statement.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\dictionary.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\rightSide2.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Greetings\Christmas\MerryChristmasToFamily.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\leftBottom3.gif (631 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Hiring and Termination\Hiring Employees\Job Acceptance\Accept or Decline Job Offer.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\settings\img\Background\logo.png (4 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\img\minusbottom.gif (85 bytes)
%Program Files%\WhiteSmoke\html\english\userGuide\css\jquery.jscrollpane.css (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\summaryline_apply_up.png (6 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Real Estate\Assignment\Assignment of Interest in Estate.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Affidavits\General Affidavit.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\icons\icon_video.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\General Admin\Opening a Business.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Internet & Technology\Resumes\Website Maintainer Resume.html (4 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Sales & Marketing\Customer Accounts\Second Request for Renewal of Service Agreement.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\js\prototype.js (3616 bytes)
%Program Files%\WhiteSmoke\html\english\gui\js\iepngfix\blank.gif (49 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Family\FamilyNewsUpdate.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Sales & Marketing\BROCHURES\MARKETING BROCHURE.html (3 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\js\Contextmenu.js (9 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\logo.gif (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\js\controls.pack.js (11 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Sales & Marketing\Customer Services\Opportunity to service your company.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\borders.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\style\jqModal.css (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Power of Attorney\General Power of Attorney.html (5 bytes)
%Program Files%\WhiteSmoke\html\english\settings\img\Buttons\tab_general_disabled.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\settings\js\settingsInterface.js (16 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\screens\welcomeGo_down.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Resumes and Cover Letters\Resumes\Product Delivery Engineer Resume.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\floatingButton_howto\js\iepngfix\opacity.png (11 bytes)
%Program Files%\WhiteSmoke\html\english\settings\img\captionbar\caption_bar_close_down.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\style\combobox.css (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\screens\loading_window.gif (4 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\x.jpg (13 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\notice_checkbox_checked.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\logo.gif (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Hiring and Termination\Dismissal and Rejection\Final Warning Before Dismissal.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\bullet.gif (48 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\js\dictInterface.js (12 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Personal Matters\Career Change.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\menuline_dictionary_up.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\menuline_tutorials_on.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\General Admin\Acceptance of Formal Business Invitation.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\globe.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\join.gif (69 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\leftSide.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Sales & Marketing\Customer Complaints\Shipment Delay.html (956 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Sales & Marketing\Telesales\Telemarketing2.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\objects\utils.js (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\js\common.js (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\review-section\grade3.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\js\effects.pack.js (16 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\leftSide2.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\menuline_translator_down.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\js\jquery.dd.js (13 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Personal & Private Documents\Personal Financial Statement.html (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\screens\welcomeGo_over.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\js\jquery-1.6.1.min.js (3312 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Literary\Advertising\Subscriber Letter News Service.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\neg_bullet.png (238 bytes)
%Program Files%\WhiteSmoke\WCaptureMoz\chrome\content\wcapturex.js (12 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Medical\Complaints\Complaints Cover Letter to State Licensing Board.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\sitting_up_.png (3 bytes)
%Documents and Settings%\All Users\Start Menu\Programs\WhiteSmoke\Launch WhiteSmoke.lnk (1 bytes)
%Program Files%\WhiteSmoke\html\english\floatingButton_howto\img\Thumbs.db (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Personal & Private Documents\Letter of Consignment for Shop Owner.html (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsy2.tmp (563919 bytes)
%Program Files%\WhiteSmoke\UninstallWhiteSmoke.exe (598 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Medical\Medical Employment\Cover Letter.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\screens\ico_analyze.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\floatingButton_howto\js\index.js (394 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\question.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Medical\Medical Employment\Hospital Administrator Recommendation.html (3 bytes)
%Program Files%\WhiteSmoke\NotifierWhiteApps.txt (44 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Resumes and Cover Letters\Letters of Recommendation\Letter of Recommendation.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Agreements\Partnership Agreement.htm (784 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Affidavits\Declaration of Witnesses.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Sales & Marketing\Vehicles\Letter to Car Service Customers.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\summaryline_check_up.png (4 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Resumes\Banking Resume.html (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Donations\Refusal for Donation.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\Business Agreements\Acceptance Of Counter Proposal.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Credibility\Letter of Dispute.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\blue_top_bg_.gif (264 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\dirOpen.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Thank You\Letter Thanking Coworker for Support.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Outstanding payments\Collection Letter 2.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\apply_press.png (4 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Employment Requests\Request to Schedule an Interview.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Resumes\Banking Resume 2.html (2 bytes)
%Program Files%\WhiteSmoke\WSKeyboardHook64.dll (24832 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\red2.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Resumes and Cover Letters\Resumes\Internship Resume.html (1 bytes)
%Program Files%\WhiteSmoke\WSEngine.dll (71262 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Literary\Legal\Assignment of Literary Property.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\menuline_toolkit_down.gif (2 bytes)
%Program Files%\WhiteSmoke\html\english\settings\img\Buttons\save_disabled.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\rightCaptionCorner2.gif (361 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Employment Requests\Refusal of Resquest For Raise.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\menuline_writer_down.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\floatingButton_howto\index.html (785 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\menuline_dictionary_down.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\Correspondence\Introduction of New Member of Administration.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\rightCaptionCorner3_11.gif (360 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Litigation\Checklist for hiring lawyer.html.html (8 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Medical\files.txt (4 bytes)
%Documents and Settings%\%current user%\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch WhiteSmoke.lnk (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Resumes and Cover Letters\Job Search Cover Letters\Resume Cover Letter.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Medical\Complaints\Letter of Complaint to Health Plan.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\Apologies\Apology for Not Attending Meeting.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Finance\LetterOfCreditRevolving.html (4 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Medical\Complaints\Complaint Against Doctor with Health Plan.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Greetings\Christmas\ArrivalOfChristmas.html (994 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Sales & Marketing\Customer Accounts\Sale on Consignment Acknowledgment.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Medical\Lab Notification\Notification of Lab to Doctor.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\registration\img\down.png (4 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Outstanding payments\Settlement Offer on Disputed Account.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Real Estate\Leases\Real Estate Contract.html (6 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Medical\Health Plans\Special power or Attorney.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\x_old.gif (132 bytes)
%Program Files%\WhiteSmoke\html\english\gui\js\NonPackedVersion\builder.js (4 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Donations\Thank you for Fundraising Efforts.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Resumes and Cover Letters\Resumes\Sales Representative Resume.html (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\screens\ico_complete.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\img\Background\rightSide.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\red.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\caption_bottom_px.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Resumes and Cover Letters\Resumes\Medical Resume Partnership in General Practice.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\x_hover_old.gif (649 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Internet & Technology\Resumes\Sr. Product Manager Resume.html (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\left_input.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Finances\Outstanding Amount for Payment.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\js\gmonitor.js (1 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\js\transInterface.js (12 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Medical\Health Plans\Request for Additional Information of Health Plan.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\summaryline_apply_up.png (4 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\js\jquery.js (1856 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\get-full3.png (7 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\review-section\down.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\base_fade_px.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\icons\Thumbs.db (784 bytes)
%Program Files%\WhiteSmoke\html\english\userGuide\js\jquery.jscrollpane.min.js (12 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Sales & Marketing\Customer Services\Supplier Letter of Recommendation.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\Correspondence\Acknowledgment of Change in Meeting Date.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Medical\Leave request\Workers Compensation light duty request.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\style\Contextmenu.css (802 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\menuline_tutorials_roll.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Finance\LetterOfDispute.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\grammar\search_up.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Students\Personal Correspondence\Personal Letter of Recommendation.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\apply_over.png (4 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\Notices & Certificates\Certificate of Transaction of Business Under Fictitious Name.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\blue.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Employment Requests\Request for Meeting Regarding Pay Raise.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Medical\Health Plans\Letter of Appeal Denied.html (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Sales & Marketing\Customer Services\Change of Service Company.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Finances\Investigation of Billing Inquiry.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Real Estate\Mortgages\Authorization for Loan.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\screens\welcomeClose_down.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\js\iepngfix\checkerboard.gif (99 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Agreements\Consignment Agreement.html (2 bytes)
%Program Files%\WhiteSmoke\WCapture.dll (13584 bytes)
%Program Files%\WhiteSmoke\html\english\userGuide\images\faq_old.png (8 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Employee Manual\NewEmployeeOrientation.html (1 bytes)
%Program Files%\WhiteSmoke\WCaptureMoz\components\WCaptureXpcom.dll (3616 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\caption_px.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\menuline_dictionary_down.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Finance\UnauthorizedCreditInquiry.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\Notices & Certificates\ANTI SPAM policy.doc.htm (4 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Personal & Private Documents\Antenuptial Agreement.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\objects\parseURL.js (1 bytes)
%Program Files%\WhiteSmoke\WCapture_x64.dll (16424 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\menuline_toolkit_down.gif (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\result_area_top_bg.gif (64 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Collections\Demand on Guarantor.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\Notices & Certificates\Waiver of Notice.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Internet & Technology\Resumes\Controller Resume.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\x.gif (176 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Greetings\Christmas\ChristmasGreetingsMessage.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\menuline_translator_on.gif (628 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\menuline_dictionary_roll.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\grammar\enrichment_disabled.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\menuline_tutorials_down.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Medical\Appreciation to Staff\Appreciation to Doctor.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Students\Careers\Career Letter in Journalism.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\main_background.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\right_input.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\js\iepngfix\iepngfix.html (5 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\open2 - Copy.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\grammar\definition_disabled.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Employee Manual\EmployeePerformanceReviewAndPlanningSessions.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\userGuide\images\nav.jpg (3312 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Sales & Marketing\Telesales\Telemarketing.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Internet & Technology\Resumes\Technical Writer Resume.html (4 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Finances\Notice of C.O.D. Terms.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\caption_strip_right_corner.gif (348 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Students\Admissions Essays\Essay - Describe Events.html (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Sales & Marketing\Customer Services\Praise for Good Customer Service.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Personal & Private Documents\Receipt for Non Refundable Deposit.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\objects\mcl.css (6 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\img\Background\leftSide2.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\settings\img\Buttons\tab_general_on.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\main_background.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Litigation\CHECKLIST for list to take to Attorney.htm (8 bytes)
%Program Files%\WhiteSmoke\html\english\gui\js\scriptaculous.js (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\images\jspVerticalBar.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\topButtonsLeft_from_home.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\settings\js\iepngfix\helix.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\icons\icon_games.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Agreements\Website Design Non Disclosure and Confidentiality Agreement.html (11 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Internet & Technology\Resumes\Graphic Designer Resume 2.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\settings\img\Buttons\save_down.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\translator.html (3 bytes)
%Program Files%\WhiteSmoke\Microsoft.VC80.ATL.manifest (466 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\icons\icon_email.gif (369 bytes)
%Program Files%\WhiteSmoke\html\english\registration\img\captionbar\caption_bar_close_up.gif (190 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Sales & Marketing\Agreements\Bill of Sale.html (6 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\down_arrow.png (215 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\review-section\reviewWhite4.gif (8 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\left_input.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\userGuide\images\t.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\topButtonsLeft__.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\rightBottom_.gif (336 bytes)
%Program Files%\WhiteSmoke\html\english\settings\img\Buttons\save_up.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\Correspondence\Tuition Reimbursement Policy.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\js\grammarCache.class.js (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\x_hover.gif (176 bytes)
%Program Files%\WhiteSmoke\html\english\gui\js\supersleight.js (4 bytes)
%Program Files%\WhiteSmoke\html\english\floatingButton\index.html (5 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Medical\CV & Resumes\Medical Resume Internship Position.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Students\Resumes\Resume for After-School Job.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\screens\scoreUp.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Real Estate\Letter of Intent\Letter of Intent - Property.html (7 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\empty2.gif (57 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\Business Agreements\General Partnership Agreement.htm (15 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\blue_dark_bg_.gif (90 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\menuline_templates_roll.gif (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\plus_bullet.png (254 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\leftBottom3.gif (623 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Agreements & Contracts\Notice of Cancellation of Contract.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\plus.gif (89 bytes)
%Program Files%\WhiteSmoke\html\english\gui\js\NonPackedVersion\controls.js (784 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Agreements & Contracts\Acceptance of Counter Proposal.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Internet & Technology\Resumes\Software Quality Assurance Engineer Resume.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\blue_bg_.gif (445 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Agreements & Contracts\Notice of Intention to Foreclose.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\summaryline_apply_down.png (4 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\screens\screen_getitnow_up.gif (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Credibility\Removal of Inadequate Information.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\context_menu_bg.png (194 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\Letters of Appreciation\Thank You To Enterprising Employee.html (998 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\review-section\li-content.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\img\page.gif (582 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\spacer_.gif (49 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Informative Letters\Announcement of New Business Opening.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\main_background_11.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\js\monitor.js (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Cover Letters\CoverLetter.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Resumes\Management Resume.html (4 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\img\Background\input_bg.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Collections\Collection Demand Letter.html (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Agreements & Contracts\Notice of Claim of Lien.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Finance\AgreementToCompromiseDebt.html (2 bytes)
%Program Files%\WhiteSmoke\WCaptureMoz\chrome.manifest (122 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\screens\screen_getitnow_press.gif (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Greetings\Graduation\CongratulationsToTheGraduate.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\style\grammar.css (4 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Finance\LetterOfCreditIrrevocable.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Employee manual\New Employee Orientation.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Informative Letters\Letter for Tenure Track Associate Professor Senior Agent Hires.html (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\blue_dark_bg.gif (90 bytes)
%Program Files%\WhiteSmoke\Microsoft.VC80.CRT.manifest (1 bytes)
%Program Files%\WhiteSmoke\html\english\floatingButton_howto\js\iepngfix\checkerboard.gif (99 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\jspDrag.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\icons\icon_faq.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\edit_footer_right.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\Notices & Certificates\Minutes of Organization Meeting of Incorporators.html (4 bytes)
%Documents and Settings%\All Users\Desktop\WhiteSmoke.lnk (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\Business Agreements\Agreement to Retain the Services of an Accountant.html (4 bytes)
%Program Files%\WhiteSmoke\html\english\floatingButton_howto\img\Background\howto_bg.gif (1552 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\screens\screen_bg.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\settings\img\captionbar\caption_bar_close_over.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\ticket.png (1552 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Apologies\ApologyUnjustBehavior.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\context_tl2.gif (93 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\Letters of Appreciation\Thank you To Enterprising Employee 2.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Real Estate\Leases\Real Estate Lease.html (6 bytes)
%Program Files%\WhiteSmoke\html\english\settings\img\Buttons\tab_connection_on.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\leftSide3.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Well Wishes\Letter of Congratulations.html (926 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\img\nolines_plus.gif (870 bytes)
%Program Files%\WhiteSmoke\html\english\common\js\xmlhttp.js (7 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Power of Attorney\Notice of Revocation of Power of Attorney.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\General Admin\Launching of New Product Line.html (1 bytes)
%Program Files%\WhiteSmoke\WSRegistration.exe (65945 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\summaryline_check_roll.png (4 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Internet & Technology\Resumes\Freelance MarCom Resume.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\menuline_toolkit_on.gif (2 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\icons\giftlelo_dot_com.jpg (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\context_submenu.gif (49 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\Business Legal Notices\Final Notice before Legal Action.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\sitting_up.png (3 bytes)
%Program Files%\WhiteSmoke\WMonitorX_x64.dll (7192 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\buttons_tray_px_.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Students\Personal Correspondence\Compliment Student on Graduation.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Well Wishes\Wishes for Speedy Recovery.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\grammar\enrichment_hover.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\img\Background\left_input.gif (174 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Internet & Technology\Resumes\QA Engineer Resume.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\buttons_tray_px.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\js\jquery-1.3.2.js (4992 bytes)
%Program Files%\WhiteSmoke\WSTray64.exe (9608 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Resumes and Cover Letters\Resumes\PowerPoint Designer Resume.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\img\joinbottom.gif (66 bytes)
%Program Files%\WhiteSmoke\TCCons_x64.dll (3616 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\index.html (784 bytes)
%Program Files%\WhiteSmoke\FloatButtonWhiteApps.txt (54 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\Managing & Motivating Employees\Sponsorship.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\logo.png (5 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Resumes and Cover Letters\Resumes\Marketing Manager Resume.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Hiring and Termination\Hiring Employees\Employment Letters\LetterForTenureTrackAssociateProfessor.html (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\menuline_translator_down.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Resumes and Cover Letters\Resumes\Software QA Engineer Resume.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\userGuide\images\arr.png (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Resumes and Cover Letters\Resumes\Web Maintainer Resume.html (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\Correspondence\Acknowledgment of Change in Meeting.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\review-section\grade5.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\floatingButton\blue-Q-rollover.gif (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Agreements\Agreement for Internet Advertising Services.html.rtf (2392 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\icons\icon_lockopen.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Medical\CV & Resumes\Medical Resume - Physician.html (6 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Resumes and Cover Letters\Resumes\Administrative Resume.html (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\menuline_templates_up.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\menuline_tutorials_roll.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\borders_good.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\registration\index.html (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\style\Contextmenu.css (923 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\sitting_down.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\registration\img\back30_trial.png (3312 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\rightCaptionCorner3.gif (699 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Litigation\CHECKLIST of docs for Attorney.HTML.htm (784 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\screens\ico_connection.gif (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\p7t_plus.gif (58 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\js\jquery.combobox.js (7 bytes)
%Program Files%\WhiteSmoke\html\english\userGuide\images\WriterTab.png (4992 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\menuline_translator_roll.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\userGuide\css\style.css (3 bytes)
%Program Files%\WhiteSmoke\html\english\common\iepngfix\iepngfix.html (5 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Outstanding payments\Company Credit Account Approval Letter.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\menuline_templates_down.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\registration\img\continue_button_up.gif (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\base.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\menuline_templates_down.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Advertising\Press Release.doc.doc (784 bytes)
%Program Files%\WhiteSmoke\html\english\registration\img\continue_button_up.png (6 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\grammar\thesaurus_disabled.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Hiring and Termination\Hiring Employees\Job Acceptance\Job Offer Acceptance.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\close.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Greetings\Christmas\ChristmasGreetingsToASpouse.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Personal Matters\Upset Regarding Loss of Job.html (1 bytes)
%Program Files%\WhiteSmoke\WHook_x64.dll (5520 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\store_down.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\icons\sprite.gif (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\js\summary.js (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\review-section\report.png (4 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Copyright,Patent & Trademark\Assignment of Trademark.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\icons\tick.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\caption_bar_re_up.gif (196 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\img\Buttons\moreLang_roll.gif (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\screens\screen_ok_up_11.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\index.html (1856 bytes)
%Program Files%\WhiteSmoke\html\english\templates\objects\navigation.js (7 bytes)
%Program Files%\WhiteSmoke\html\english\userGuide\images\jspVerticalBar.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\Business Agreements\Car Rental Contract 2.html (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\rightCaptionCorner3_.gif (331 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\store_up.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Sales & Marketing\Resumes\Customer Service Resume.html (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\caption_bar_re_over.gif (196 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\img\minus.gif (86 bytes)
%Program Files%\WhiteSmoke\WHook.dll (5064 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\menuline_toolkit_roll.gif (2 bytes)
%Program Files%\WhiteSmoke\html\english\userGuide\images\faq.png (6 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Sales & Marketing\Special Offers & Sales\Catalog Sales.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\dtree.css (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\General Admin\Sale of Division of Business.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\review-section\grade1.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\minus.gif (86 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Power of Attorney\Power of Attorney.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\grammar\definition_up.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Apologies\ApologyInnappropriateBehavior.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Resumes\Letter for Assistant Professor Agent Hires.html (4 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\review-section\score5.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\img\line.gif (66 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\ajax-loader.gif (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Assignments\Letter of Credit irrevocable.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\menuline_writer_down.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Resumes and Cover Letters\Resumes\Web Developer Resume.html (3 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\img\Buttons\go_up.png (5 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\review-section\opencq8.png (129 bytes)
%Program Files%\WhiteSmoke\html\english\common\iepngfix\checkerboard.gif (99 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\img\Background\corner_bottom_left.png (351 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\review-section\x.gif (176 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Finance\DebtValidation.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\help_roll.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\inputline_fade_px.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\green.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Employee Manual\HealthRelatedIssues.html (1 bytes)
%Program Files%\WhiteSmoke\msvcr80.dll (21216 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\dirClose.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Hiring and Termination\Hiring Employees\Job Acceptance\Job Acceptance Letter.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\screens\screen_bg_bottom.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Hiring and Termination\Dismissal and Rejection\Rejection of Job Offer.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\menuline_dictionary_roll.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Agreements & Contracts\Notification of Appeal.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Internet & Technology\Agreements\Assignment of Copyright.html (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\logo_1.png (6 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\menuline_translator_on.gif (1 bytes)
%Program Files%\WhiteSmoke\WSLogger.exe (3312 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Greetings\Graduation\CongratulationsOnYourGraduation.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\Business Agreements\Articles of Incorporations for a Business.html (3 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\img\Background\corner_bottom_right.png (328 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Medical\Health Plans\Appeal Against Health Plan.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Real Estate\Leases\Notice of Termination of Lease.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Donations\Letter of Appreciation for Donation.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\registration\img\f2.gif (9 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Finances\Request for Credit Application.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Finance\ReturningUnsignedCheck.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Internet & Technology\Resumes\Technical Writer 2 Resume.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Collections\Letter of Credit.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\logologo2_11_.gif (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\caption_bar_re_over.gif (196 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Internet & Technology\Agreements\Affiliate Program Agreement.rtf (5520 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\edit_header_right.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\settings\img\Buttons\cancel_over.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Power of Attorney\Power of Attorney 2.html (3 bytes)
%Program Files%\WhiteSmoke\html\english\floatingButton_howto\style\style.css (402 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Hiring and Termination\Dismissal and Rejection\Job Rejection Letter.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\help_up_.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\green.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\img\Buttons\humanTranslation_roll.gif (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Employment Requests\Request for Paid or Unpaid Leave.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\review-section\score3.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\caption_bar_re_down.gif (196 bytes)
%Program Files%\WhiteSmoke\html\english\templates\objects\p7tm\p7tmbasic.css (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Resumes and Cover Letters\Resumes\Accounting Resume.html (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Real Estate\Notices\Notice of Application for Zoning Variance, Exception or Permit.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\userGuide\images\bg-good.png (8 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\logo.gif (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Finances\Business Credit Application- Refusal.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\strike_purple.gif (49 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\edit_header_px.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Medical\CV & Resumes\Thank You Letter for an Internship.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\red.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Personal & Private Documents\Last Will and Testament Of.html (5 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\icons\msDropDown.gif (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\js\switchcontent.js (15 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\img\Background\corner_top_right.png (355 bytes)
%Program Files%\WhiteSmoke\html\english\gui\js\iframeTest.js (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\js\jquery.jeegoocontext.min.js (4 bytes)
%Program Files%\WhiteSmoke\html\english\settings\img\Buttons\tab_connection_disabled.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Employee Manual\EmploymentApplications.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\objects\wm_cookies.js (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\green.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\topRightBorder.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Resumes and Cover Letters\Resumes\General CV Format.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\userGuide\images\I.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Employee Reference Letters\JobReferenceLetter.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Internet & Technology\Resumes\Technical Publication Manager Resume.html (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Sales & Marketing\Vehicles\Letter Announcing Relocation to a New Dealership.html (2 bytes)
%Program Files%\WhiteSmoke\WCaptureMoz\chrome\content\wcapturex.xul (318 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\page.gif (582 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\img\Background\right_input.gif (174 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\Business Agreements\Car Rental Contract.html (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\Letters of Appreciation\Letter of Thanks to Coordinator.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Greetings\Christmas\JoyousOccasion.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\menuline_writer_roll.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\p7t_minus.gif (57 bytes)
%Program Files%\WhiteSmoke\html\english\userGuide\images\WhiteSmokeEmailCheck.png (2392 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Resumes and Cover Letters\Resumes\End User Trainer and Instructional Designer Resume.html (1 bytes)
%Program Files%\WhiteSmoke\WCaptureMoz\chrome\content\WcxTrace.js (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Greetings\Christmas\AChristmasWish.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\userGuide\images\otk.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\img\Background\search_strip_bg3.gif (94 bytes)
%Documents and Settings%\All Users\Start Menu\Programs\WhiteSmoke\Uninstall.lnk (1 bytes)
%Program Files%\WhiteSmoke\html\english\registration\img\continue_button_over.png (4 bytes)
%Program Files%\WhiteSmoke\html\english\userGuide\images\bg.png (14 bytes)
%Program Files%\WhiteSmoke\html\english\floatingButton_howto\js\iepngfix\blank.gif (49 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\screens\reviewOpen_hover.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Agreements\Partnership Agreement.html (784 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\Business Plan\Business Plan Product or Service.html (12 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\screens\button_no_up.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Internet & Technology\Resumes\Sales Order Processor Resume.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\common\iepngfix\iepngfix.htc (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Employee Reference Letters\LetterOfReference.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\Apologies\Apology for Missing Appointment.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\common\js\pngfix.js (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Medical\Complaints\Complaint against Health Provider.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\settings\img\Buttons\tab_info_on.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\help_up.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Students\Resumes\Student Resume Forestry.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\borders3.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\nolines_plus.gif (870 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\Staff Notices\Dissension Amongst Management Team Workers.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Real Estate\Leases\Extension of Lease.html (2 bytes)
%Program Files%\WhiteSmoke\WCaptureX_x64.dll (11344 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\blue.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\strike_red.gif (49 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\collapse.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\Staff Notices\Offer of Assistance during Employee Illness.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\caption_bar_close_over.gif (315 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Literary\Promotions\Letter of Interest to Magazine.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Sales & Marketing\Special Offers & Sales\Introductory Product Offer.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\review-section\down-content.gif (743 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Literary\Advertising\Request for Advertising Rate.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\Board of Directors & SHareholders\Addition of Personnel to Board of Directors.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\General Admin\Meeting for Commencement of Project.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\settings\js\iepngfix\checkerboard.gif (99 bytes)
%Program Files%\WhiteSmoke\html\english\floatingButton\Thumbs.db (15 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Hiring and Termination\Resignation Letters\Acceptance of Employee's Resignation.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Credibility\Unauthorized Credit Inquiry.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Greetings\Christmas\BlessingsAtChristmas.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Sales & Marketing\Agreements\Marketing Alliance Agreement.html (784 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Students\Resumes\Student Resume Wildlife.html (6 bytes)
%Program Files%\WhiteSmoke\html\english\gui\js\iepngfix\opacity.png (11 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\buttons_tray_px.p_goldng (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\menuline_toolkit_up.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Medical\Request for Medical Information\Autopsy Report.html (3 bytes)
%Program Files%\WhiteSmoke\html\english\floatingButton_howto\img\spacer.gif (49 bytes)
%Program Files%\WhiteSmoke\html\english\gui\js\slider.pack.js (4 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Students\Resumes\Student Resume Automotive Service Industry.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Internet & Technology\Resumes\Online Marketing Position Resume.html (982 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Medical\CV & Resumes\Medical Resume Partnership in General Practice.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Finances\Request for Credit Information.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Finances\Payment of Outstanding Account.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\leftCaptionCorner2_.gif (334 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\screens\welcomeClose_up.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\arClose.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Resumes and Cover Letters\Job Search Cover Letters\Job Search Cover Letter - Software Employment.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\sitting_roll.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\Business Agreements\Acceptance of Purchase Security Agreement.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\registration\img\captionbar\caption_bar_close_down.gif (307 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\rightCaptionCorner.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Donations\Invitation to Donor's Dinner.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Internet & Technology\Resumes\End User Trainer and Instructional Designer Resume.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\img\Buttons\go_over.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\grammar\addto_disabled.png (4 bytes)
%Program Files%\WhiteSmoke\html\english\gui\js\final.js (15 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Finance\RequestForIncreaseOfCreditLimit.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\empty.gif (62 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Medical\Health Plans\Request for joining Health Plan.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Hiring and Termination\Hiring Employees\Thank You Letters\Thank You to Applicant for Testing.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\Letters of Appreciation\Letter of Thanks.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Greetings\Christmas\ChristmasWishes.html (1 bytes)
%Program Files%\WhiteSmoke\WCaptureMoz\plugins\npWCX.dll (10136 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\icons\enabled.gif (321 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\atart_arrow.jpg (14 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\menuline_templates_on.gif (663 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\Managing & Motivating Employees\Employee Evaluation Form.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Employment Requests\Letter Requesting Pay Raise.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\summaryline_check_roll.png (4 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\Correspondence\Collection Letter.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\Correspondence\Collection Letter 2.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\Business Agreements\Professional Services Agreement.html (12 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\img\Buttons\go_press.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\js\xmlhttp.js (7 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Finance\ReplyToApplicationForCredit.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\icons\jquery-msdropdown.gif (6 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\icons\icon_sales.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\caption_bottom_px.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\imgfolder.gif (622 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\screens\myWelcome.png (3312 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\Correspondence\Copy of Acknowledgment of Change in Meeting Date.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\icons\icon_calendar.gif (601 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\screens\screen_ok_press.png (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\objects\p7tm\p7tmscripts.js (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\General Admin\Cancellation of Bonus.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\menuline_translator_up.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\img\Background\ajax-loader.gif (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\main_background_old.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\registration\img\back_trial.png (3312 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Employee Manual\TerminationOfEmployment.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\screens\welcomeClose_over.png (3 bytes)
%Documents and Settings%\All Users\Start Menu\Programs\WhiteSmoke\Registration.lnk (1 bytes)
%Program Files%\WhiteSmoke\html\english\settings\img\Buttons\tab_content_off.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\get-full.png (6 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\close2.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\settings\img\Buttons\tab_connection_off.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\context_dot.gif (35 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\img\Buttons\humanTranslation_up.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Assignments\Assignment.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\Staff Notices\Praise for Employee's Handling of Situation.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\review-section\score4.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Personal & Private Documents\Sale of Motor Vehicle.html (4 bytes)
%Program Files%\WhiteSmoke\html\english\settings\img\Buttons\tab_shortcut_on.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Sales & Marketing\Agreements\Agreement for Professional Services.html (784 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\img\imgfolder.gif (622 bytes)
%Program Files%\WhiteSmoke\html\english\gui\style\spelling.css (4 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\img\Background\loading_dictionary.gif (4 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Agreements & Contracts\Retainer Agreement.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\menuline_tutorials_up.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\cd.gif (239 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Sales & Marketing\Customer Services\Welcome to new Customer.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\js\enrichmentContextMenu.class.js (10 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Medical\Complaints\Report from Emergency Room Attention.html (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\js\ypSlideOutMenus.js (5 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\summaryline_px.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\red2.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\screens\button_yes_down.png (4 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\menuline_writer_on_.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Employee Manual\TuitionReimbursementPolicy.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\js\NonPackedVersion\effects.js (1552 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\grammar\explanation_disabled.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\menuline_toolkit_roll.gif (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\buttons_tray_px.png (2 bytes)
%Program Files%\WhiteSmoke\WCustom.dll (6360 bytes)
%Program Files%\WhiteSmoke\TCCons.dll (3616 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\apply_up.png (6 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\Correspondence\Confirmation of End of Leave.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Medical\Medical Employment\Promotional Letter.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\menuline_templates_up.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Sales & Marketing\Agreements\Consulting Agreement.html (16 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Confidentiality Agreements\Confidentially Agreement.html (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\js\builder.pack.js (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Sales & Marketing\Vehicles\Car Lease Maturity Letter.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\Business Plan\Announcement of Partnership Buyout.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\js\ws_functions.js (1552 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\leftCaptionCorner2.gif (401 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\screens\screen_captionbar_up.gif (394 bytes)
%Documents and Settings%\%current user%\Start Menu\Programs\Startup\Launch WhiteSmoke.lnk (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Sales & Marketing\Agreements\Security Agreement.html (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\open2.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Hiring and Termination\Dismissal and Rejection\Confirmation of Job Dismissal.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\menuline_tutorials_down.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\caption_bar_re_over.gif (196 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\spacer.gif (49 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Finances\Company Credit Account Approval Letter.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\review-section\grade4.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Employment Requests\Request For Salary Increase.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\img\plus.gif (89 bytes)
%Program Files%\WhiteSmoke\html\english\templates\start.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\userGuide\images\buttons.png (4 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\caption_bar_re_down.gif (196 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Assignments\Assignment of Mortgage.html (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\style\enrichment.css (4 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Internet & Technology\Resumes\Software Developer Resume.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\rightSide.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Real Estate\Leases\Receipt for Non-Refundable deposit.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Greetings\Christmas\MerryChristmasAndHappyNewYear.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\logo2.gif (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\notice_checkbox_unchecked.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\js\jquery-1.2.6.pack.NotUSED.js (784 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Litigation\Checklist of Docs for Attorney.html.doc (1552 bytes)
%Program Files%\WhiteSmoke\html\english\userGuide\images\jspDrag.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\main_background.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\summaryline_apply_roll.png (4 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\review-section\shdow.gif (70 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Medical\Health Plans\Request For Cover of Non Prescription Drug.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Resumes and Cover Letters\Resumes\Engineering Resume.html (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Resumes and Cover Letters\Resumes\Marketing Administrator Resume.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Real Estate\Leases\Mutual Cancellation of Lease.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\logo.png (5 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Informative Letters\Inquiry letter.html (4 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\screens\screen_captionbar_press.gif (408 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\icons\demoaction.jpg (9 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Hiring and Termination\Hiring Employees\Employment Letters\Employment Letter.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\js\iepngfix\helix.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\summaryline_px.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Literary\Advertising\Advertising Commitment Form.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\rightSide2_11.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Personnel Office\Notice of Decision to Reprimand.html (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Sales & Marketing\Customer Orders\Shipment Delay.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\bottom_right_corner.gif (78 bytes)
%Program Files%\WhiteSmoke\msvcp80.dll (19096 bytes)
%Program Files%\WhiteSmoke\html\english\settings\img\Buttons\tab_info_disabled.png (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\Business Plan\Business Plan Product or Service.html (12 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Donations\Request for Sponsorship.html (3 bytes)
%Program Files%\WhiteSmoke\WCaptureX.dll (11344 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\summaryline_check_up.png (4 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\leftCaptionCorner2 - Copy.gif (406 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\menuline_dictionary_on.gif (678 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\menuline_writer_up.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\settings\js\iepngfix\blank.gif (49 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\Managing & Motivating Employees\Notice of Promotion 2.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Sales & Marketing\Agreements\General Partnership.html (13 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Hiring and Termination\Hiring Employees\Job Acceptance\Job Acceptance Letter 2.html (2 bytes)
%Program Files%\WhiteSmoke\WSKeyboardHook.dll (30464 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Medical\Apotropis\Special PA for Medical Authority.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\screens\screen_bg_gold.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\images\jspDrag.gif (1 bytes)
%Program Files%\WhiteSmoke\html\english\dictClientDic\icons\preview.gif (8 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Agreements & Contracts\Notice and Tender by Debtor.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\grammar\thesaurus_hover.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\summaryline_right_corner.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\Staff Notices\Praise for Employee_ s Handling of Situation.html (820 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Sales & Marketing\Vehicles\Car Sales Follow Up Letter.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Business Management\Finances\Company Credit Account Approval Letter.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\floatingButton\blue-X-rollover.gif (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Medical\CV & Resumes\C.V. Emergency Medical Technician.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Legal\Credibility\Agreement to Compromise Debt.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Buttons\summaryline_check_down.png (4 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Internet & Technology\Resumes\Java Developer Resume.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\grammar\thesaurus_up.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Personal Matters\Letter to a Friend Regarding Change of Job.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Medical\CV & Resumes\Health Care Resume.html (4 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Hiring and Termination\Resignation Letters\Employee Termination Notice.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\settings\js\iepngfix\opacity.png (11 bytes)
%Program Files%\WhiteSmoke\ComVistaElevator.dll (1552 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Human Resources\Hiring and Termination\Hiring Employees\Employment Letters\Offer of Employment.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\img\musicfolder.gif (633 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\strike_blue.gif (49 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\review-section\grade2.png (3 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Students\Admissions Essays\Admissions Essay for Entrance to Theater Institute.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Students\University Correspondence\Request for Reference.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Sales & Marketing\Customer Services\Customer Stopped Purchasing.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\userGuide\images\ConfiguringWhiteSmoke.png (1552 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\captionbar\caption_px.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\General\Greetings\Christmas\LovePeaceAndJoy.html (970 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\edit_header_left.png (2 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\Background\context_bl2.gif (93 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Employee manual\Health-Related Issues.html (1 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Medical\Health Plans\Request Coverage of a NonPrescription Drug.html (2 bytes)
%Program Files%\WhiteSmoke\html\english\templates\Business\Agreements\EXCLUSIVE DISTRIBUTION AGREEMENT.html (784 bytes)
%Program Files%\WhiteSmoke\html\english\settings\index.html (6 bytes)
%Program Files%\WhiteSmoke\html\english\gui\img\screens\screen_ok_up.png (723 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\WhiteSmokeWriterTrial[1].exe (378349 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@whitesmoke[2].txt (337 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\~nsu.tmp\whitesmoke-silent.exe.part (20664 bytes)
%Documents and Settings%\%current user%\Cookies\index.dat (2892 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\~nsu.tmp\WhiteSmokeTranslator_rev1.exe (378349 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@whitesmoke[1].txt (673 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\~nsu.tmp\WhiteSmokeTranslator_rev1.exe.part (20636 bytes)
Delete the following value(s) in the autorun key (How to Work with System Registry):
[HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"WhiteSmoke Installer" = "C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\~nsu.tmp\whitesmoke-silent.exe"
Clean the Temporary Internet Files folder, which may contain infected files (How to clean Temporary Internet Files folder).
Reboot the computer.

*Manual removal may cause unexpected system behaviour and should be performed at your own risk.

Static Analysis

VersionInfo

No information is available.

PE Sections

Name	Virtual Address	Virtual Size	Raw Size	Entropy	Section MD5
.text	4096	54666	54784	4.51966	5b72537c61902f15f1b8295df1e80d51
.rdata	61440	14438	14848	3.43673	4de43351e2ada616c100dcf4f38853ef
.data	77824	12232	4608	1.72228	10ca879fe800901ef3fd5417f40d5d62
.rsrc	90112	81092	81408	4.2478	8eea673fbdbca544554e60683a12e48c
.reloc	172032	6704	7168	0	21eb7229dde310fab9cd2dbec6208123

Dropped from:

Downloaded by:

Similar by SSDeep:

Similar by Lavasoft Polymorphic Checker:

Network Activity

URLs

URL	IP
hxxp://web1.whitesmoke.com/TranslatorTools/whitesmoke-silent.exe
hxxp://web1.whitesmoke.com/index.html
hxxp://web1.whitesmoke.com/WhiteSmokeWriterTrial.exe
hxxp://web1.whitesmoke.com/TranslatorTools/WhiteSmokeTranslator_rev1.exe
hxxp://web1.whitesmoke.com/promotions/popups/directpostinstallation.php?user_id=&dist_id=${DISTID}&installOption=0&offer=0
hxxp://web1.whitesmoke.com/promotions/popups/popup_writer_funnel_external.php?user_id=&dist_id=${DISTID}&installOption=0&offer=0&
hxxp://web1.whitesmoke.com/postInstallation/?user_id=&dist_id=${DISTID}&installOption=0&offer=0&
hxxp://googleadapis.l.google.com/css?family=Scada:400,700,400italic
hxxp://web1.whitesmoke.com/website2016/css/bxslider/jquery.bxslider.css
hxxp://web1.whitesmoke.com/website2016/css/bootstrap/bootstrap.min.css
hxxp://web1.whitesmoke.com/website2016/css/whitesmoke.css
hxxp://web1.whitesmoke.com/postInstallation/css/font-awesome/css/font-awesome.min.css
hxxp://web1.whitesmoke.com/website2016/js/html5/html5shiv.js
hxxp://web1.whitesmoke.com/website2016/css/fonts/glyphicons-halflings-regular.eot?
hxxp://gstaticadssl.l.google.com/s/scada/v4/CM50sIngpG0EkWzrh5qt7g.eot
hxxp://web1.whitesmoke.com/website2016/js/html5/respond.min.js
hxxp://web1.whitesmoke.com/website2016/img/logos/logo.png
hxxp://www-googletagmanager.l.google.com/gtm.js?id=GTM-TFRTLG
hxxp://web1.whitesmoke.com/website2016/img/homepage/header/menu/products.png
hxxp://www-google-analytics.l.google.com/analytics.js
hxxp://web1.whitesmoke.com/website2016/img/homepage/header/menu/store.png
hxxp://pagead.l.doubleclick.net/pagead/conversion.js
hxxp://scontent.xx.fbcdn.net/en_US/fbds.js
hxxp://prod.trendemon.com/js/trdflame.js?aid=142&uid=156&baseurl=hxxp://prod.trendemon.com/&appid=208770359181748&lang=en	54.88.162.177
hxxp://web1.whitesmoke.com/website2016/img/homepage/header/menu/demo.png
hxxp://web1.whitesmoke.com/website2016/img/homepage/header/menu/videos.png
hxxp://tags-cluster.mediaforge.com/js/1972
hxxp://www-google-analytics.l.google.com/r/collect?v=1&_v=j43&a=1574335295&t=pageview&_s=1&dl=http://www.whitesmoke.com/postInstallation/?user_id=&dist_id=${DISTID}&installOption=0&offer=0&&ul=en-us&de=utf-8&dt=Thank You For Downloading \| World-Leading Language Solutions by WhiteSmoke&sd=32-bit&sr=1276x846&vp=1256x693&je=0&fl=11.6 r602&_u=QEAAAAAAI~&jid=1945868367&cid=548354617.1463966766&tid=UA-63220888-1&_r=1&gtm=GTM-TFRTLG&cd1=4176269485&cd2=&cd3=&cd4=&z=1247214657
hxxp://prod.trendemon.com/apis/loadflame/main_flame_js?aid=142&uid=156&baseurl=hxxp://prod.trendemon.com/&appid=208770359181748&lang=en	54.88.162.177
hxxp://www-google-analytics.l.google.com/r/collect?v=1&_v=j43&a=1574335295&t=pageview&_s=1&dl=http://www.whitesmoke.com/postInstallation/?user_id=&dist_id=${DISTID}&installOption=0&offer=0&&ul=en-us&de=utf-8&dt=Thank You For Downloading \| World-Leading Language Solutions by WhiteSmoke&sd=32-bit&sr=1276x846&vp=1256x693&je=0&fl=11.6 r602&_u=QECAAAAAI~&jid=1961696502&cid=548354617.1463966766&tid=UA-63220888-4&_r=1&gtm=GTM-TFRTLG&cd1=4176269485&cd2=&cd3=&cd4=&z=2017842639
hxxp://web1.whitesmoke.com/website2016/img/homepage/header/menu/mobile.png
hxxp://web1.whitesmoke.com/website2016/img/homepage/header/menu/about.png
hxxp://tags-cluster.mediaforge.com/fpid/1972?d=whitesmoke.com
hxxp://web1.whitesmoke.com/website2016/img/homepage/header/menu/contact.png
hxxp://web1.whitesmoke.com/website2016/img/post_installation/UsingWhiteSmoke.gif
hxxp://tags-cluster.mediaforge.com/pix/1972?type=pos&href=http://www.whitesmoke.com/postInstallation/?user_id=&dist_id=${DISTID}&installOption=0&offer=0&
hxxp://web1.whitesmoke.com/website2016/img/post_installation/facebook.jpg
hxxp://web1.whitesmoke.com/website2016/img/post_installation/twitter.jpg
hxxp://web1.whitesmoke.com/website2016/img/content/buy/get_whitesmoke.png
hxxp://web1.whitesmoke.com/website2016/img/homepage/footer/facebook.png
hxxp://web1.whitesmoke.com/website2016/img/homepage/footer/twitter.png
hxxp://web1.whitesmoke.com/website2016/img/homepage/footer/google.png
hxxp://web1.whitesmoke.com/website2016/img/homepage/footer/email.png
hxxp://web1.whitesmoke.com/website2016/js/jquery/jquery.js
hxxp://web1.whitesmoke.com/website2016/js/bootstrap/bootstrap.min.js
hxxp://web1.whitesmoke.com/website2016/js/bxslider/jquery.bxslider.min.js
hxxp://cm.dpclk.com/cm?network_id=mediaforge&network_uid=520DFD85208511E68B34D7AA77F06648	52.91.99.99
hxxp://www.whitesmoke.com/website2016/img/homepage/header/menu/contact.png	52.35.124.6
hxxp://www.whitesmoke.com/website2016/img/homepage/footer/google.png	52.35.124.6
hxxp://www.whitesmoke.com/promotions/popups/directpostinstallation.php?user_id=&dist_id=${DISTID}&installOption=0&offer=0	52.35.124.6
hxxp://www.whitesmoke.com/website2016/css/bxslider/jquery.bxslider.css	52.35.124.6
hxxp://www.whitesmoke.com/website2016/img/post_installation/UsingWhiteSmoke.gif	52.35.124.6
hxxp://www.whitesmoke.com/website2016/css/whitesmoke.css	52.35.124.6
hxxp://tags.mediaforge.com/fpid/1972?d=whitesmoke.com	50.112.121.29
hxxp://www.whitesmoke.com/website2016/img/homepage/footer/facebook.png	52.35.124.6
hxxp://www.google-analytics.com/r/collect?v=1&_v=j43&a=1574335295&t=pageview&_s=1&dl=http://www.whitesmoke.com/postInstallation/?user_id=&dist_id=${DISTID}&installOption=0&offer=0&&ul=en-us&de=utf-8&dt=Thank You For Downloading \| World-Leading Language Solutions by WhiteSmoke&sd=32-bit&sr=1276x846&vp=1256x693&je=0&fl=11.6 r602&_u=QECAAAAAI~&jid=1961696502&cid=548354617.1463966766&tid=UA-63220888-4&_r=1&gtm=GTM-TFRTLG&cd1=4176269485&cd2=&cd3=&cd4=&z=2017842639	173.194.113.200
hxxp://www.whitesmoke.com/postInstallation/?user_id=&dist_id=${DISTID}&installOption=0&offer=0&	52.35.124.6
hxxp://www.whitesmoke.com/postInstallation/css/font-awesome/css/font-awesome.min.css	52.35.124.6
hxxp://get.whitesmoke.com/index.html	52.35.124.6
hxxp://get.whitesmoke.com/TranslatorTools/whitesmoke-silent.exe	52.35.124.6
hxxp://www.whitesmoke.com/website2016/js/bxslider/jquery.bxslider.min.js	52.35.124.6
hxxp://www.whitesmoke.com/website2016/js/html5/respond.min.js	52.35.124.6
hxxp://www.whitesmoke.com/website2016/img/homepage/footer/twitter.png	52.35.124.6
hxxp://www.whitesmoke.com/website2016/js/jquery/jquery.js	52.35.124.6
hxxp://www.googletagmanager.com/gtm.js?id=GTM-TFRTLG	173.194.113.222
hxxp://www.whitesmoke.com/website2016/js/bootstrap/bootstrap.min.js	52.35.124.6
hxxp://www.whitesmoke.com/website2016/css/fonts/glyphicons-halflings-regular.eot?	52.35.124.6
hxxp://www.whitesmoke.com/website2016/img/post_installation/twitter.jpg	52.35.124.6
hxxp://tags.mediaforge.com/pix/1972?type=pos&href=http://www.whitesmoke.com/postInstallation/?user_id=&dist_id=${DISTID}&installOption=0&offer=0&	50.112.121.29
hxxp://www.googleadservices.com/pagead/conversion.js	173.194.113.205
hxxp://get.whitesmoke.com/WhiteSmokeWriterTrial.exe	52.35.124.6
hxxp://fonts.googleapis.com/css?family=Scada:400,700,400italic	64.233.164.95
hxxp://www.whitesmoke.com/website2016/img/homepage/header/menu/demo.png	52.35.124.6
hxxp://www.google-analytics.com/r/collect?v=1&_v=j43&a=1574335295&t=pageview&_s=1&dl=http://www.whitesmoke.com/postInstallation/?user_id=&dist_id=${DISTID}&installOption=0&offer=0&&ul=en-us&de=utf-8&dt=Thank You For Downloading \| World-Leading Language Solutions by WhiteSmoke&sd=32-bit&sr=1276x846&vp=1256x693&je=0&fl=11.6 r602&_u=QEAAAAAAI~&jid=1945868367&cid=548354617.1463966766&tid=UA-63220888-1&_r=1&gtm=GTM-TFRTLG&cd1=4176269485&cd2=&cd3=&cd4=&z=1247214657	173.194.113.200
hxxp://www.whitesmoke.com/website2016/img/homepage/header/menu/videos.png	52.35.124.6
hxxp://connect.facebook.net/en_US/fbds.js	31.13.90.6
hxxp://www.whitesmoke.com/website2016/css/bootstrap/bootstrap.min.css	52.35.124.6
hxxp://www.whitesmoke.com/website2016/img/homepage/header/menu/mobile.png	52.35.124.6
hxxp://tags.mediaforge.com/js/1972	50.112.121.29
hxxp://www.whitesmoke.com/website2016/img/homepage/header/menu/store.png	52.35.124.6
hxxp://www.whitesmoke.com/website2016/js/html5/html5shiv.js	52.35.124.6
hxxp://www.whitesmoke.com/website2016/img/homepage/header/menu/about.png	52.35.124.6
hxxp://www.whitesmoke.com/website2016/img/logos/logo.png	52.35.124.6
hxxp://www.whitesmoke.com/website2016/img/homepage/footer/email.png	52.35.124.6
hxxp://www.whitesmoke.com/website2016/img/homepage/header/menu/products.png	52.35.124.6
hxxp://fonts.gstatic.com/s/scada/v4/CM50sIngpG0EkWzrh5qt7g.eot	173.194.113.223
hxxp://www.whitesmoke.com/website2016/img/content/buy/get_whitesmoke.png	52.35.124.6
hxxp://www.google-analytics.com/analytics.js	173.194.113.200
hxxp://get.whitesmoke.com/TranslatorTools/WhiteSmokeTranslator_rev1.exe	52.35.124.6
hxxp://www.whitesmoke.com/website2016/img/post_installation/facebook.jpg	52.35.124.6
hxxp://www.whitesmoke.com/promotions/popups/popup_writer_funnel_external.php?user_id=&dist_id=${DISTID}&installOption=0&offer=0&	52.35.124.6
googleads.g.doubleclick.net	173.194.113.217
www.facebook.com	31.13.90.36
chat.whitesmoke.com	52.27.193.11
www.google.com.ua	173.194.113.207

IDS verdicts (Suricata alerts: Emerging Threats ET ruleset)

Traffic

GET /gtm.js?id=GTM-TFRTLG HTTP/1.1

Accept: */*

Referer: hXXp://VVV.whitesmoke.com/postInstallation/?user_id=&dist_id=${DISTID}&installOption=0&offer=0&

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.googletagmanager.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Content-Type: application/javascript; charset=UTF-8

Content-Encoding: gzip

Vary: Accept-Encoding

Date: Mon, 23 May 2016 01:26:05 GMT

Expires: Mon, 23 May 2016 01:26:05 GMT

Cache-Control: private, max-age=963

Server: Google Tag Manager (scaffolding)

Content-Length: 17250

X-XSS-Protection: 1; mode=block

...........}i[....w~E............./........m..q......[U..$ff.......})..J...ji...4h...T.Tk..~?.E....K[q\..ai .bp/...*f..x.'...b0l.{......{..>...Z/........ejO-.......mH.\.xx..=...[.N3[/....|Pz..(j...w2...._W...?..s......%n.....7.....Z.....[j..#..0..`.......=...a..9.BT..kc..#C......u.G.........c.....-(.....%..M.-...C.&..7..b...K.X..Q..d.{..`.}c1....mO..........p.......v.8.4da.5?6Ic..4...V.....$,*m.F.c*..(.........mMR.......8;)z..l;.o....<.f*3.C..5.......Y.......x2.i.n.v<....6~2]..N.r.G..Z.....B...X..J....r.dz.......VE......er...ax.?.W...P.K.........=..v.....|!..H.....P.'.|$&.".{....V.nv.h..t8..kG..kC.../.G.....d4d..1q.n...t'..1..C.....)...4.m......z...f...f..N-r@vU....!x2..^..WP&.....o...U{4x".S..@Z.co.....Avfd..K.f..-fF{x.?..d=,V...y. .K....&.4...O.....K..q.......=(FtHb.....6.....b.....l....[2.px.o....j..h.<H..._........ ..we..J.-.$X.\Z..S.EoJ(v..DAv..S>......5-v."...g..R...N9....g..}.... ..q..................u..2.e.e..B.E..qY....z.....ew...l.......w....]...g.m.l.e...w....]v..c.}v...N]..eg.;w.W.]...eW................{...c..<......<.z,.X.c7..x,.X.c=..z..c...=6...c..{.....<...-.m{l.c........<v..=v..c.}....N=..cg.;..W.]@..]y....{...~z...~{.....\.y>.}&|..,....:>.....[...l....F>....g.>{.....}...m...l.g{>......}v..c.}....N}..gg>;..W.]...gW>....>....>....>{.......$./..,.,.,..-..`..b........k.N..`C.F......A.G...{.lK.m.v...lO.}...;..H.c.>.v"..`_.;..\...].v).....9.&K}$v.h.X.$........p.0,....@_.c....8..W.\h.J..4.].?4....fC`.._:....h`...r5.i....@..P...n4.k........u.

<<< skipped >>>

GET /s/scada/v4/CM50sIngpG0EkWzrh5qt7g.eot HTTP/1.1

Accept: */*

Referer: hXXp://VVV.whitesmoke.com/postInstallation/?user_id=&dist_id=${DISTID}&installOption=0&offer=0&

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: fonts.gstatic.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Vary: Accept-Encoding

Content-Type: font/eot

Access-Control-Allow-Origin: *

Timing-Allow-Origin: *

Date: Sun, 22 May 2016 21:45:57 GMT

Expires: Mon, 22 May 2017 21:45:57 GMT

Last-Modified: Wed, 27 Aug 2014 15:21:42 GMT

X-Content-Type-Options: nosniff

Content-Encoding: gzip

Server: sffe

X-XSS-Protection: 1; mode=block

Cache-Control: public, max-age=31536000

Content-Length: 18922

Age: 13208

..........d.uP.L.&..............<h.,..........].K.`.....}_.U.u.<OwOWW..3..J..."............C@8@......&.< ....$.........G..:.........`...v.../..?......._....p.|...@.>.'..?..................e..g......r8.".....>...A...my.............z.........?.............H.(h..gA.x\.8..b..V?.._qc.k...*^.<<i.D....x..6..wG..I..x rm%.GA..........bJ.R.F....#.......;<.[..X.d3."..B...>.#......O5..~...tH.8..?g..U.....:...............3].Q....s(y..d ..C.q{4e.. ....]U.....0.....<d/Ol....=..:[..._....fXyCXE..Fv..U.......`.9|..X....a^..i ...a...U..;...k.6.._.XD.s.......^<..b....4>.....J.....W...C.{..&....@.DW..v....&..p ...b...D..A.pHh)......lN.;..vAh....t,..............w.f.4..M..]j.z,X.oWt........HUm..............d3.~.m..g...F{...H..#4Dn..=..Q........;c.8..3.....j>......W'..Y..c....A..o)..!..P..z...$.j.q~....) .2\.V..6d4...x.....k.....&..&.t<..|F# pd....>..'6......"B.Q.q.hL....{4F.....].0.K..QPI.;.Ib........%.@z. `.......3. ....fa......j.-.".4..l.m.,.Q4..90..7=u....l=X...V!*u..E.cQ....w......Y...SB.?V%'..fV......;.?=...P....:(@....'.l.Qg.....r......D.....~....=..u...}....j.8....Znw.....;..H......"".h../..8.;..pq..@M..........2.T...8...l..?0..KA.m%.a...@..y.".N(R...x<.n..:....gb...;....Uv:s.....Fb.=..i.jg.g..%....C..w..#,x...lh?....1.dM...l....a...!.h.Fh.Y.Ib.c..........h0...(..x.......z.....0X.*..3..s.f}......b...".O.../.x.P.o.\}..v.R....#....... ..Q..M....l.t....$...v..Q.........%. .......@..J.6.d....|u....q.......=..K..5..]..?fyx...R.}7.c.bS.s.vP1.#......L.hl....Eu..QI.o.|..3&..Bv..]N...].!

<<< skipped >>>

GET /en_US/fbds.js HTTP/1.1

Accept: */*

Referer: hXXp://VVV.whitesmoke.com/postInstallation/?user_id=&dist_id=${DISTID}&installOption=0&offer=0&

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: connect.facebook.net

Connection: Keep-Alive

HTTP/1.1 200 OK

ETag: "3def617c55fe407ef7646976cc91a03e"

Cache-Control: public, max-age=1200, stale-while-revalidate=3600

X-XSS-Protection: 0

Content-Security-Policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: chrome-extension://lifbcibllhkdhoafpjfnlhfpfgnpldfl;style-src * 'unsafe-inline' data:;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* hXXps://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: 127.0.0.1:*;

Timing-Allow-Origin: *

Content-Type: application/x-javascript; charset=utf-8

X-Content-Type-Options: nosniff

Strict-Transport-Security: max-age=15552000; preload

Expires: Mon, 23 May 2016 01:34:19 GMT

Vary: Accept-Encoding

Content-Encoding: gzip

Content-MD5: WeIT0S5uQf9CPDbtRB8xWA==

X-FB-Debug: QC5LVfNad/024e2siJQBnEtYSAP3uKqJYOmdBsHQPwUMAO5OQheVkC5FiYe4UXNHVThsDk7PyDkZYJkX8nzKnQ==

Date: Mon, 23 May 2016 01:26:05 GMT

Connection: keep-alive

Content-Length: 1565

...........Vmo.6..._...)....].ZQ..M..YR,...^AI..D&........I)Q.n..H...x<>......^.|....oo1.t..9..Tr. &....^.z..................>...d.L9.IL#!n.s..0.g/XLyI.g..*..Q.}Ab.u3......p...."S..M.u]..X.B.........g..g.Z...%[g..kn.t..p..o[.............p....../.e.....$._H..j...$Uk...!....K&.L.2D:...-....b5Ur.p.nw....&..L.......*%.8.`.(`S...: .....0H.t...... ?.|...9n.f2.j..[....`1A!.P...~...T...)Wv.p.y.=.S.7.q......v.n.k.w.>...Bv*?..2.V.?0....<.$A..o4/.S.V..u......x!....._^.A.b.$J#4......'b.z..k%._.P.".;q..0B../.cI..g9].=!. .A....D..B...L.na.CE..*.BkcZ.....4h.._.h.R.9..V..m.8....l..=........Ib..V*...0!.....T..u8|...4.4z.f......#.....K....T..% .,%.A.g.....Os...<9.X..........!...\B...]L..._.....h...ZAFi.a=....VT$_......P.d.c(.C"..% ..s%*j.[0..V...S.."?..S..,.......'......;....$.o... .U@.N....WQi...c#..*..u%.1.....h....m.j.`..g TQ...R.B.7!....o...\.l.....m..@...(t.@..u6..5..#.......V..CE.#|3THP...,E8.*T.0.......f..*u=[J....Y.B.DtCc.D......x...HyU..R.T...x....f.Yh..04e.../.u...[ED;..;..b{50.B.S.g.;.".v...Z.7..-.pp....z.....v.t}u..t.J...:.J.pq.g}..K[C.......J...8:x.......4........S_...,........;.p.X.A/.{....2.....~.1.s0....,8.5.~..mU._f,.L..{.s.&...B......h...t...!..~a.< X.=P.N...*..h..u..]......}.I..,C..P...d".;..%\.}..w...u.D9...k...0h:......,0... u..(...5....M.?..-5.ta..fK.g...m.u.,x..d=..J'[......v)P. 1.......4...2..t....`.p6..gU.....&.Bs-......u......'"6;.\.D..!.%....A...R....x...}.}.~{...6.9...h%.Tw..~..P...0..'qxS...wx..9^.....#3?.......agD.......t...Xh..4l<..*...E./My....gll...R..KX.mJ..1Dpa.c.-.G.m..

<<< skipped >>>

GET /analytics.js HTTP/1.1

Accept: */*

Referer: hXXp://VVV.whitesmoke.com/postInstallation/?user_id=&dist_id=${DISTID}&installOption=0&offer=0&

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.google-analytics.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Date: Sun, 22 May 2016 23:54:11 GMT

Expires: Mon, 23 May 2016 01:54:11 GMT

Last-Modified: Mon, 09 May 2016 22:17:11 GMT

X-Content-Type-Options: nosniff

Content-Type: text/javascript

Vary: Accept-Encoding

Content-Encoding: gzip

Server: Golfe2

Content-Length: 11491

Age: 5514

Cache-Control: public, max-age=7200

...........}is....w....GCF0%.N..r....$.......XR.-$.U...u7...2.....T..6...F.@...H$.....ox.d].).{.I.........ys]..h......c..h....T[h.Fb,U.{..8r.u<hwX.............a.....N....!Oz..`.=..s..=.....~.5q0=..w..3pv_..z...........?~.|rz................p4....dzs{w.P.onm?{....6~8...h7qq....5#.L.......G..x....y.?.F.#u.Hl.o}..qs#.]P.c.#.C..5........k...zMN........SY.:..}...\.....x.....B....".(Jq,.Ia[t..3.A....s.p....s...._...M.k^s..f..h.#.....t.cAN. ....9.^..=..*.<.."~......#.d|.D.Q..|0pu5.q.~....../..J./.7.;...x.'.T$...k..GR.._......_X63T-.4..!..W.........bT../..;^.Tfii..e.....YR.B.../"...z..j..N...j..m_&......w{...H...D8gS...s.............x8....O...>..6oLc.....I...."..l...3&..N..?r.K.......D.T.Z....T.^......U...G....@So.x"z...a..z.9..............!..-_...2...rE.8,,...D......../...JX....c..C.......:;.........O....C../..DUW....5`..u4}a..H.........pS..<...`.P...Y.......0&lD3`....w..PeC.k...........6VQ.R..P.`.U.r.d.F...%.$n..;..c.0T..'..9. ....k.S.5...d..i..0.....x...4.i.....sv.z.D.JE...@...4.V..zY.....9sK.!0G.Z]=%.z.t:@...Y....9..p$.7B@T....S...dtZ... .....7g.|.............`P.f\...h..CY........y..n....!H$;.J...d.0..#..x>.w.......l}..?~.......x.4s.vi[..(9T.~...E_.. VO...O...qh.[..A..P..H._...$H..n.`.b.<.8.....o.....q..4.............6r............i.#4.W|...,.b.'.Wd.;U..;rJ....:PJ`...%.......|v..|...q.o.a .b..............3|.m..V.6..c<6?..x..%...q......y8P..}.>K.&.x=.c....F|...rY....>.:,B...K..17.....U..e...x|.......]..U.>......|.....| N.%.......d...5.;..^Z..@.e........1Dh.].x.L.>.%....z.*.. .Z.zC.

<<< skipped >>>

GET /r/collect?v=1&_v=j43&a=1574335295&t=pageview&_s=1&dl=http://VVV.whitesmoke.com/postInstallation/?user_id=&dist_id=${DISTID}&installOption=0&offer=0&&ul=en-us&de=utf-8&dt=Thank You For Downloading | World-Leading Language Solutions by WhiteSmoke&sd=32-bit&sr=1276x846&vp=1256x693&je=0&fl=11.6 r602&_u=QEAAAAAAI~&jid=1945868367&cid=548354617.1463966766&tid=UA-63220888-1&_r=1&gtm=GTM-TFRTLG&cd1=4176269485&cd2=&cd3=&cd4=&z=1247214657 HTTP/1.1

Accept: */*

Referer: hXXp://VVV.whitesmoke.com/postInstallation/?user_id=&dist_id=${DISTID}&installOption=0&offer=0&

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.google-analytics.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Access-Control-Allow-Origin: *

Date: Mon, 23 May 2016 01:26:06 GMT

Pragma: no-cache

Expires: Fri, 01 Jan 1990 00:00:00 GMT

Cache-Control: no-cache, no-store, must-revalidate

Last-Modified: Sun, 17 May 1998 03:00:00 GMT

X-Content-Type-Options: nosniff

Content-Type: image/gif

Server: Golfe2

Content-Length: 35

GIF89a.............,...........D..;HTTP/1.1 200 OK..Access-Control-Allow-Origin: *..Date: Mon, 23 May 2016 01:26:06 GMT..Pragma: no-cache..Expires: Fri, 01 Jan 1990 00:00:00 GMT..Cache-Control: no-cache, no-store, must-revalidate..Last-Modified: Sun, 17 May 1998 03:00:00 GMT..X-Content-Type-Options: nosniff..Content-Type: image/gif..Server: Golfe2..Content-Length: 35..GIF89a.............,...........D..;....

GET /r/collect?v=1&_v=j43&a=1574335295&t=pageview&_s=1&dl=http://VVV.whitesmoke.com/postInstallation/?user_id=&dist_id=${DISTID}&installOption=0&offer=0&&ul=en-us&de=utf-8&dt=Thank You For Downloading | World-Leading Language Solutions by WhiteSmoke&sd=32-bit&sr=1276x846&vp=1256x693&je=0&fl=11.6 r602&_u=QECAAAAAI~&jid=1961696502&cid=548354617.1463966766&tid=UA-63220888-4&_r=1&gtm=GTM-TFRTLG&cd1=4176269485&cd2=&cd3=&cd4=&z=2017842639 HTTP/1.1

Accept: */*

Referer: hXXp://VVV.whitesmoke.com/postInstallation/?user_id=&dist_id=${DISTID}&installOption=0&offer=0&

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.google-analytics.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Access-Control-Allow-Origin: *

Date: Mon, 23 May 2016 01:26:06 GMT

Pragma: no-cache

Expires: Fri, 01 Jan 1990 00:00:00 GMT

Cache-Control: no-cache, no-store, must-revalidate

Last-Modified: Sun, 17 May 1998 03:00:00 GMT

X-Content-Type-Options: nosniff

Content-Type: image/gif

Server: Golfe2

Content-Length: 35

GET /js/1972 HTTP/1.1

Accept: */*

Referer: hXXp://VVV.whitesmoke.com/postInstallation/?user_id=&dist_id=${DISTID}&installOption=0&offer=0&

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: tags.mediaforge.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Accept-Ranges: bytes

Cache-Control: no-store

Content-Length: 4515

Content-Type: text/html

Last-Modified: Fri, 20 May 2016 22:37:41 GMT

P3P: policyref="/p3p.xml", CP="DSP NOI ADM PSAo PSDo OUR BUS NAV COM UNI INT"

Pragma: no-cache

Rm-Event: 520DFD4B208511E68088FEBC5EBD5C76

Set-Cookie: uID=hf0NUuYRhSCq1zSLSGbwdw==; Expires=Tue, 23 May 2017 01:26:06 UTC; Domain=.mediaforge.com; Path=/

Set-Cookie: uid3=520DFD85208511E68B34D7AA77F06648; Expires=Tue, 23 May 2017 01:26:06 UTC; Domain=.mediaforge.com; Path=/

Date: Mon, 23 May 2016 01:26:06 GMT

Set-Cookie: SERVERID="prod,0(i-50cbd997)tags_c"; path=/

<<< skipped >>>

GET /fpid/1972?d=whitesmoke.com HTTP/1.1

Accept: */*

Referer: hXXp://VVV.whitesmoke.com/postInstallation/?user_id=&dist_id=${DISTID}&installOption=0&offer=0&

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: tags.mediaforge.com

Connection: Keep-Alive

Cookie: uID=hf0NUuYRhSCq1zSLSGbwdw==; uid3=520DFD85208511E68B34D7AA77F06648; SERVERID="prod,0(i-50cbd997)tags_c"

HTTP/1.1 204 No Content

Cache-Control: private, no-store, no-cache

Expires: -1

P3P: policyref="/p3p.xml", CP="DSP NOI ADM PSAo PSDo OUR BUS NAV COM UNI INT"

Pragma: no-cache

Set-Cookie: uID=hf0NUuYRhSCq1zSLSGbwdw==; Expires=Tue, 23 May 2017 01:26:06 UTC; Domain=.mediaforge.com; Path=/

Set-Cookie: uid3=520DFD85208511E68B34D7AA77F06648; Expires=Tue, 23 May 2017 01:26:06 UTC; Domain=.mediaforge.com; Path=/

Date: Mon, 23 May 2016 01:26:06 GMT

HTTP/1.1 204 No Content..Cache-Control: private, no-store, no-cache..Expires: -1..P3P: policyref="/p3p.xml", CP="DSP NOI ADM PSAo PSDo OUR BUS NAV COM UNI INT"..Pragma: no-cache..Set-Cookie: uID=hf0NUuYRhSCq1zSLSGbwdw==; Expires=Tue, 23 May 2017 01:26:06 UTC; Domain=.mediaforge.com; Path=/..Set-Cookie: uid3=520DFD85208511E68B34D7AA77F06648; Expires=Tue, 23 May 2017 01:26:06 UTC; Domain=.mediaforge.com; Path=/..Date: Mon, 23 May 2016 01:26:06 GMT..

GET /TranslatorTools/whitesmoke-silent.exe HTTP/1.1

Host: get.whitesmoke.com

HTTP/1.1 302 Found

Content-Type: text/html; charset=iso-8859-1

Date: Mon, 23 May 2016 01:28:49 GMT

Location: hXXp://get.whitesmoke.com/index.html

Server: Apache

Content-Length: 220

Connection: keep-alive

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>302 Found</title>.</head><body>.<h1>Found</h1>.<p>The document has moved <a href="hXXp://get.whitesmoke.com/index.html">here</a>.</p>.</body></html>.....

GET /index.html HTTP/1.1

Host: get.whitesmoke.com

Connection: Keep-Alive

HTTP/1.1 302 Found

Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0

Content-Type: text/html; charset=UTF-8

Date: Mon, 23 May 2016 01:28:49 GMT

Expires: Thu, 19 Nov 1981 08:52:00 GMT

Location: hXXp://get.whitesmoke.com/WhiteSmokeWriterTrial.exe

Pragma: no-cache

Server: Apache

Set-Cookie: PHPSESSID=hqloiiesf9ghgqdjaq34unlf65; path=/

Set-Cookie: freeUserID=4176269485; expires=Sat, 22-May-2021 01:28:49 GMT; path=/; domain=.whitesmoke.com

Set-Cookie: freeUserIDExpires=1621646929; expires=Sat, 22-May-2021 01:28:49 GMT; path=/; domain=.whitesmoke.com

Set-Cookie: freeUserIDSetTime=1463966929; expires=Sat, 22-May-2021 01:28:49 GMT; path=/; domain=.whitesmoke.com

X-Powered-By: PHP/5.1.6

Content-Length: 0

Connection: keep-alive

....

GET /WhiteSmokeWriterTrial.exe HTTP/1.1

Host: get.whitesmoke.com

Connection: Keep-Alive

Cookie: PHPSESSID=hqloiiesf9ghgqdjaq34unlf65; freeUserID=4176269485; freeUserIDExpires=1621646929; freeUserIDSetTime=1463966929

HTTP/1.1 200 OK

Accept-Ranges: bytes

Content-Type: application/octet-stream

Date: Mon, 23 May 2016 01:28:49 GMT

Last-Modified: Mon, 31 Mar 2014 04:32:44 GMT

Server: Apache

Content-Length: 7538072

Connection: keep-alive

MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......A{.{...(...(...(.b\(...(.bL(...(...(...(..u(...(..E(...(..B(...(Rich...(........................PE..L...T.GO.................l...*..."...8............@..................................ms...@.................................L............2..........p.r.(............................................................................................text...2k.......l.................. ..`.rdata........... ...p..............@..@.data...\...........................@....ndata...................................rsrc....2.......4..................@..@.reloc..............................@..B........................................................................................................................................................................................................................................................................................................................U....\.}..t .}.F.E.u..H....l.D..H.P.u..u..u...p.@..K...SV.5t.D.W.E.P.u...t.@..e...E..E.P.u...x.@..}..e....D.@........FR..VV..U... M..........M........E...FQ.....NU..M.......M...VT..U........FP..E...............E.P.M...H.@..E..P.E..E.P.u...|.@..u....E..9}...n....~X.te.v4..L.@..E...tU.}.j.W.E......E.......P.@..vXW..T.@..u..5X.@.W..h ....E..E.Pj.h`HD.W....@..u.W...u....E.P.u.....@._^3.[.....L$....D...i.. ...T.....tUVW.q.3.;5..D.sD..i.. ...D..S.....t.G.....t...O..t .....u...3....3...F.. ..;5..D.r.[_^...U..QQ.U.

<<< skipped >>>

GET /TranslatorTools/WhiteSmokeTranslator_rev1.exe HTTP/1.1

Host: get.whitesmoke.com

Cookie: PHPSESSID=hqloiiesf9ghgqdjaq34unlf65; freeUserID=4176269485; freeUserIDExpires=1621646929; freeUserIDSetTime=1463966929

HTTP/1.1 302 Found

Content-Type: text/html; charset=iso-8859-1

Date: Mon, 23 May 2016 01:29:16 GMT

Location: hXXp://get.whitesmoke.com/index.html

Server: Apache

Content-Length: 220

Connection: keep-alive

GET /index.html HTTP/1.1

Host: get.whitesmoke.com

Connection: Keep-Alive

Cookie: PHPSESSID=hqloiiesf9ghgqdjaq34unlf65; freeUserID=4176269485; freeUserIDExpires=1621646929; freeUserIDSetTime=1463966929

HTTP/1.1 302 Found

Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0

Content-Type: text/html; charset=UTF-8

Date: Mon, 23 May 2016 01:29:16 GMT

Expires: Thu, 19 Nov 1981 08:52:00 GMT

Location: hXXp://get.whitesmoke.com/WhiteSmokeWriterTrial.exe

Pragma: no-cache

Server: Apache

X-Powered-By: PHP/5.1.6

Content-Length: 0

Connection: keep-alive

HTTP/1.1 302 Found..Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0..Content-Type: text/html; charset=UTF-8..Date: Mon, 23 May 2016 01:29:16 GMT..Expires: Thu, 19 Nov 1981 08:52:00 GMT..Location: hXXp://get.whitesmoke.com/WhiteSmokeWriterTrial.exe..Pragma: no-cache..Server: Apache..X-Powered-By: PHP/5.1.6..Content-Length: 0..Connection: keep-alive..

GET /website2016/css/bootstrap/bootstrap.min.css HTTP/1.1

Accept: */*

Referer: hXXp://VVV.whitesmoke.com/postInstallation/?user_id=&dist_id=${DISTID}&installOption=0&offer=0&

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.whitesmoke.com

Connection: Keep-Alive

Cookie: freeUserID=4176269485; freeUserIDExpires=1621646929; freeUserIDSetTime=1463966929; httpReferer=No Referer; httpRefererExpires=1527038967; httpRefererSetTime=1463966967; landingUrl=VVV.whitesmoke.com/postInstallation/?user_id=&dist_id=${DISTID}&installOption=0&offer=0&; landingUrlExpires=1527038967; landingUrlSetTime=1463966967; landingDate=20160523; landingDateExpires=1527038967; landingDateSetTime=1463966967; trail=1463966788:2875; trailExpires=1527038967; trailSetTime=1463966967; SN4a76bf0fab3d8=usfaupclfqqc6ifploeum43i77

HTTP/1.1 200 OK

Accept-Ranges: bytes

Content-Type: text/css

Date: Mon, 23 May 2016 01:29:27 GMT

Last-Modified: Fri, 11 Dec 2015 07:47:08 GMT

Server: Apache

Content-Length: 121260

Connection: keep-alive

/*!. * Bootstrap v3.3.6 (hXXp://getbootstrap.com). * Copyright 2011-2015 Twitter, Inc.. * Licensed under MIT (hXXps://github.com/twbs/bootstrap/blob/master/LICENSE). *//*! normalize.css v3.0.3 | MIT License | github.com/necolas/normalize.css */html{font-family:sans-serif;-webkit-text-size-adjust:100%;-ms-text-size-adjust:100%}body{margin:0}article,aside,details,figcaption,figure,footer,header,hgroup,main,menu,nav,section,summary{display:block}audio,canvas,progress,video{display:inline-block;vertical-align:baseline}audio:not([controls]){display:none;height:0}[hidden],template{display:none}a{background-color:transparent}a:active,a:hover{outline:0}abbr[title]{border-bottom:1px dotted}b,strong{font-weight:700}dfn{font-style:italic}h1{margin:.67em 0;font-size:2em}mark{color:#000;background:#ff0}small{font-size:80%}sub,sup{position:relative;font-size:75%;line-height:0;vertical-align:baseline}sup{top:-.5em}sub{bottom:-.25em}img{border:0}svg:not(:root){overflow:hidden}figure{margin:1em 40px}hr{height:0;-webkit-box-sizing:content-box;-moz-box-sizing:content-box;box-sizing:content-box}pre{overflow:auto}code,kbd,pre,samp{font-family:monospace,monospace;font-size:1em}button,input,optgroup,select,textarea{margin:0;font:inherit;color:inherit}button{overflow:visible}button,select{text-transform:none}button,html input[type=button],input[type=reset],input[type=submit]{-webkit-appearance:button;cursor:pointer}button[disabled],html input[disabled]{cursor:default}button::-moz-focus-inner,input::-moz-focus-inner{padding:0;border:0}

<<< skipped >>>

GET /website2016/js/html5/html5shiv.js HTTP/1.1

Accept: */*

Referer: hXXp://VVV.whitesmoke.com/postInstallation/?user_id=&dist_id=${DISTID}&installOption=0&offer=0&

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.whitesmoke.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Accept-Ranges: bytes

Content-Type: application/x-javascript

Date: Mon, 23 May 2016 01:29:28 GMT

Last-Modified: Tue, 05 Jan 2016 11:50:27 GMT

Server: Apache

Content-Length: 2429

Connection: keep-alive

/*. HTML5 Shiv v3.7.0 | @afarkas @jdalton @jon_neal @rem | MIT/GPL2 Licensed.*/.(function(l,f){function m(){var a=e.elements;return"string"==typeof a?a.split(" "):a}function i(a){var b=n[a[o]];b||(b={},h ,a[o]=h,n[h]=b);return b}function p(a,b,c){b||(b=f);if(g)return b.createElement(a);c||(c=i(b));b=c.cache[a]?c.cache[a].cloneNode():r.test(a)?(c.cache[a]=c.createElem(a)).cloneNode():c.createElem(a);return b.canHaveChildren&&!s.test(a)?c.frag.appendChild(b):b}function t(a,b){if(!b.cache)b.cache={},b.createElem=a.createElement,b.createFrag=a.createDocumentFragment,b.frag=b.createFrag();.a.createElement=function(c){return!e.shivMethods?b.createElem(c):p(c,a,b)};a.createDocumentFragment=Function("h,f","return function(){var n=f.cloneNode(),c=n.createElement;h.shivMethods&&(" m().join().replace(/[\w\-] /g,function(a){b.createElem(a);b.frag.createElement(a);return'c("' a '")'}) ");return n}")(e,b.frag)}function q(a){a||(a=f);var b=i(a);if(e.shivCSS&&!j&&!b.hasCSS){var c,d=a;c=d.createElement("p");d=d.getElementsByTagName("head")[0]||d.documentElement;c.innerHTML="x<style>article,aside,dialog,figcaption,figure,footer,header,hgroup,main,nav,section{display:block}mark{background:#FF0;color:#000}template{display:none}</style>";.c=d.insertBefore(c.lastChild,d.firstChild);b.hasCSS=!!c}g||t(a,b);return a}var k=l.html5||{},s=/^<|^(?:button|map|select|textarea|object|iframe|option|optgroup)$/i,r=/^(?:a|b|code|div|fieldset|h1|h2|h3|h4|h5|h6|i|label|li|ol|p|q|span|strong|style|table|tbody|td|th|tr|ul)$/i,j,o="_h

<<< skipped >>>

GET /website2016/js/html5/respond.min.js HTTP/1.1

Accept: */*

Referer: hXXp://VVV.whitesmoke.com/postInstallation/?user_id=&dist_id=${DISTID}&installOption=0&offer=0&

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.whitesmoke.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Accept-Ranges: bytes

Content-Type: application/x-javascript

Date: Mon, 23 May 2016 01:29:28 GMT

Last-Modified: Tue, 05 Jan 2016 11:50:36 GMT

Server: Apache

Content-Length: 4377

Connection: keep-alive

/*! Respond.js v1.4.2: min/max-width media query polyfill * Copyright 2013 Scott Jehl. * Licensed under hXXps://github.com/scottjehl/Respond/blob/master/LICENSE-MIT. * */..!function(a){"use strict";a.matchMedia=a.matchMedia||function(a){var b,c=a.documentElement,d=c.firstElementChild||c.firstChild,e=a.createElement("body"),f=a.createElement("div");return f.id="mq-test-1",f.style.cssText="position:absolute;top:-100em",e.style.background="none",e.appendChild(f),function(a){return f.innerHTML='<style media="' a '"> #mq-test-1 { width: 42px; }</style>',c.insertBefore(e,d),b=42===f.offsetWidth,c.removeChild(e),{matches:b,media:a}}}(a.document)}(this),function(a){"use strict";function b(){u(!0)}var c={};a.respond=c,c.update=function(){};var d=[],e=function(){var b=!1;try{b=new a.XMLHttpRequest}catch(c){b=new a.ActiveXObject("Microsoft.XMLHTTP")}return function(){return b}}(),f=function(a,b){var c=e();c&&(c.open("GET",a,!0),c.onreadystatechange=function(){4!==c.readyState||200!==c.status&&304!==c.status||b(c.responseText)},4!==c.readyState&&c.send(null))};if(c.ajax=f,c.queue=d,c.regex={media:/@media[^\{] \{([^\{\}]*\{[^\}\{]*\}) /gi,keyframes:/@(?:\-(?:o|moz|webkit)\-)?keyframes[^\{] \{(?:[^\{\}]*\{[^\}\{]*\}) [^\}]*\}/gi,urls:/(url$)['"]?([^\/$'"][^:\)'"] )['"]?(\))/g,findStyles:/@media *([^\{] )\{([\S\s] ?)$/,only:/(only\s )?([a-zA-Z] )\s?/,minw:/$[\s]*min\-width\s*:[\s]*([\s]*[0-9\.] )(px|em)[\s]*$/,maxw:/$[\s]*max\-width\s*:[\s]*([\s]*[0-9\.] )(px|em)[\s]*$/},c.mediaQueriesSupported=a.match

<<< skipped >>>

GET /website2016/img/logos/logo.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.whitesmoke.com/postInstallation/?user_id=&dist_id=${DISTID}&installOption=0&offer=0&

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.whitesmoke.com

Connection: Keep-Alive

Cookie: freeUserID=4176269485; freeUserIDExpires=1621646929; freeUserIDSetTime=1463966929; httpReferer=No Referer; httpRefererExpires=1527038967; httpRefererSetTime=1463966967; landingUrl=VVV.whitesmoke.com/postInstallation/?user_id=&dist_id=${DISTID}&installOption=0&offer=0&; landingUrlExpires=1527038967; landingUrlSetTime=1463966967; landingDate=20160523; landingDateExpires=1527038967; landingDateSetTime=1463966967; trail=1463966788:2875,1463966790:708975; trailExpires=1527038968; trailSetTime=1463966968; SN4a76bf0fab3d8=usfaupclfqqc6ifploeum43i77

HTTP/1.1 200 OK

Accept-Ranges: bytes

Content-Type: image/png

Date: Mon, 23 May 2016 01:29:29 GMT

Last-Modified: Sun, 17 Jan 2016 13:25:58 GMT

Server: Apache

Content-Length: 8413

Connection: keep-alive

.PNG........IHDR.......W........d....tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:dc="hXXp://purl.org/dc/elements/1.1/" xmpMM:OriginalDocumentID="uuid:5D20892493BFDB11914A8590D31508C8" xmpMM:DocumentID="xmp.did:D887A5ADBD1D11E5AC4ED168E0A390BC" xmpMM:InstanceID="xmp.iid:D887A5ACBD1D11E5AC4ED168E0A390BC" xmp:CreatorTool="Adobe Illustrator CS5"> <xmpMM:DerivedFrom stRef:instanceID="uuid:e8f0edda-8c48-41c2-8839-862c672f87b0" stRef:documentID="xmp.did:D44DE09410F5E211A76A99EA34C683D1"/> <dc:title> <rdf:Alt> <rdf:li xml:lang="x-default">WS logo</rdf:li> </rdf:Alt> </dc:title> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.b~8....IDATx..]..\U.>U..[:k'...BHH @......\@....s.AEGp...D..q.T.Gt`.G.-#[X...$...@.N.$.;..}.m....R._^UWuW/.w../.U.^.w.........J.R...w...].hbZIc...M.......F.k.G...*)..$..RT:RZj6H..e.u ...e.....~9$rRy...=]..YZ.`}g2".:.IE.KF..%....2.....j.iWy8...s..u.....mR.N......0.W)..S...X...V..Q..Tut.......|C.^.\.#....P.W.K.KT'.].....}..n.kU....T..U.p.{C.5...{.j.j.j.j*....6.!...H.

<<< skipped >>>

GET /website2016/img/homepage/header/menu/store.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.whitesmoke.com/postInstallation/?user_id=&dist_id=${DISTID}&installOption=0&offer=0&

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.whitesmoke.com

Connection: Keep-Alive

Cookie: freeUserID=4176269485; freeUserIDExpires=1621646929; freeUserIDSetTime=1463966929; httpReferer=No Referer; httpRefererExpires=1527038967; httpRefererSetTime=1463966967; landingUrl=VVV.whitesmoke.com/postInstallation/?user_id=&dist_id=${DISTID}&installOption=0&offer=0&; landingUrlExpires=1527038967; landingUrlSetTime=1463966967; landingDate=20160523; landingDateExpires=1527038967; landingDateSetTime=1463966967; trail=1463966788:2875,1463966790:708975; trailExpires=1527038968; trailSetTime=1463966968; SN4a76bf0fab3d8=usfaupclfqqc6ifploeum43i77

HTTP/1.1 200 OK

Accept-Ranges: bytes

Content-Type: image/png

Date: Mon, 23 May 2016 01:29:29 GMT

Last-Modified: Sun, 24 Jan 2016 09:19:33 GMT

Server: Apache

Content-Length: 3116

Connection: keep-alive

.PNG........IHDR...$...%......>.j....tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:94BCCD20C27B11E5B6CED42F63F9D7E4" xmpMM:InstanceID="xmp.iid:94BCCD1FC27B11E5B6CED42F63F9D7E4" xmp:CreatorTool="Adobe Photoshop CS6 Windows"> <xmpMM:DerivedFrom stRef:instanceID="23910A4E51BCB3322AAF1DD4E76D28F8" stRef:documentID="23910A4E51BCB3322AAF1DD4E76D28F8"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.z-.....IDATx..Wk.\g..n....L...t....4.m.,mH.5..... ^."./.....GE!..A......*..VD....E..J.56!.$.i6......9...<..d/&a..dv.|..y..}......."h)..)T.>h-....J(...B...........GUi@J....m..........9....e..1..,lY.#R..y...|f..O..xZ...Vh.s0 ..>.....3Rq..u*.SxV....c....,....3.Iz'.Li.-.........H......a].Z.h....._...en}:~........frh...].....\.d...>.#.."/.*..O..HJ#....TR.".._>?..0.lp.YI_xb.C.. ^...V..4./...o....XO.'........$&.Nn......[$....3...W..Vy.4.@..u..R;........^.~....J..R..%l....EF..W;;.........}....$ .*..&..\.x>8G`T..*(.........G.?....lP.!<..q.5.j..|W.......c.'..h.u.b....e...D...LE..X...,...J)A.HR.\

<<< skipped >>>

GET /website2016/img/homepage/header/menu/videos.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.whitesmoke.com/postInstallation/?user_id=&dist_id=${DISTID}&installOption=0&offer=0&

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.whitesmoke.com

Connection: Keep-Alive

Cookie: freeUserID=4176269485; freeUserIDExpires=1621646929; freeUserIDSetTime=1463966929; httpReferer=No Referer; httpRefererExpires=1527038967; httpRefererSetTime=1463966967; landingUrl=VVV.whitesmoke.com/postInstallation/?user_id=&dist_id=${DISTID}&installOption=0&offer=0&; landingUrlExpires=1527038967; landingUrlSetTime=1463966967; landingDate=20160523; landingDateExpires=1527038967; landingDateSetTime=1463966967; trail=1463966788:2875,1463966790:708975; trailExpires=1527038968; trailSetTime=1463966968; SN4a76bf0fab3d8=usfaupclfqqc6ifploeum43i77

HTTP/1.1 200 OK

Accept-Ranges: bytes

Content-Type: image/png

Date: Mon, 23 May 2016 01:29:29 GMT

Last-Modified: Sun, 24 Jan 2016 09:20:18 GMT

Server: Apache

Content-Length: 2636

Connection: keep-alive

.PNG........IHDR...%...%.....J..T....tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:AFAF25B0C27B11E5BBD0E205FBBA7BCF" xmpMM:InstanceID="xmp.iid:AFAF25AFC27B11E5BBD0E205FBBA7BCF" xmp:CreatorTool="Adobe Photoshop CS6 Windows"> <xmpMM:DerivedFrom stRef:instanceID="23910A4E51BCB3322AAF1DD4E76D28F8" stRef:documentID="23910A4E51BCB3322AAF1DD4E76D28F8"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...h....IDATx..WMo.U.}........Z(.4UQUT$B....-.$$6H.X..._ ....BB.. 6.........@..BH...M.;.g..w9......&.5...w.;..s..KKK._A.@B.a.AI.........AQ.....>.Gfp....r.H.-..I.....A.#..A.$h,.#8~B..b..SR$.T....... ....2!..T.Z&..V*..l.o.!<.>... ].F%tD....S^.Ko...e...]IO_m\h..;.....F.).,...0...!S'....>....g.$.A./..=?.]..$.'..M..FQI.(.B*b.D.aW.a...z....Q.~.....\...Gv..s.v...%x.....cX.d..?V.[.{.7...5\.T?^...'..}...'...:w....J'(m.8..........Fw..2.....K..4...,.."}(..f8E....wR...f......4...8.^h{...f.^$..d.2E..A.l..^...._. w...x.\....K... ....,...(.pj...[=...sSo..i....K.....k..ii.T.......0V..S.....t..'.........T..q...S...

<<< skipped >>>

GET /website2016/img/homepage/header/menu/mobile.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.whitesmoke.com/postInstallation/?user_id=&dist_id=${DISTID}&installOption=0&offer=0&

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.whitesmoke.com

Connection: Keep-Alive

Cookie: freeUserID=4176269485; freeUserIDExpires=1621646929; freeUserIDSetTime=1463966929; httpReferer=No Referer; httpRefererExpires=1527038967; httpRefererSetTime=1463966967; landingUrl=VVV.whitesmoke.com/postInstallation/?user_id=&dist_id=${DISTID}&installOption=0&offer=0&; landingUrlExpires=1527038967; landingUrlSetTime=1463966967; landingDate=20160523; landingDateExpires=1527038967; landingDateSetTime=1463966967; trail=1463966788:2875,1463966790:708975; trailExpires=1527038968; trailSetTime=1463966968; SN4a76bf0fab3d8=usfaupclfqqc6ifploeum43i77

HTTP/1.1 200 OK

Accept-Ranges: bytes

Content-Type: image/png

Date: Mon, 23 May 2016 01:29:30 GMT

Last-Modified: Sun, 24 Jan 2016 09:20:37 GMT

Server: Apache

Content-Length: 2222

Connection: keep-alive

.PNG........IHDR.......%.....<.......tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:BAAABB50C27B11E59DAEABF7201CA84D" xmpMM:InstanceID="xmp.iid:BAAABB4FC27B11E59DAEABF7201CA84D" xmp:CreatorTool="Adobe Photoshop CS6 Windows"> <xmpMM:DerivedFrom stRef:instanceID="23910A4E51BCB3322AAF1DD4E76D28F8" stRef:documentID="23910A4E51BCB3322AAF1DD4E76D28F8"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>e.TJ...4IDATx..V..\E....7.qv...!!.D..sS./."..z.........&!..A.1&Q....U.fggwg.......3..7}.3.y...~|.}E.>...B(A.(.M(JL..E..X.....F.wX...?(...>.....2.P|]o%..zaM.o...........S.....pT).~Q.w!.f......X*!.=. lb....s.\^.L.;...Qq...?..M...U.N....mk.........................8L.4.4.2m%[|.........K.7/O&...#b.0H:oy..O.?.3.c....?.......p.......>.a.3...=-a.h1]..../...j..9..rG-..Us. ......tk.........E. ....,!.....g.\Y_...1\HP.[....... .&(..TR.s]..|."..p.r...q.....Y............a,......#r`8Z.6.. .nC.../.."|...B.2.>....V>.%...."...(gD5m..@.8.......qV@..N/.fY ........y.\.%..>..!..AZ..V,.%.a.........5Sq.Z.t.sk.C..

<<< skipped >>>

GET /website2016/img/homepage/header/menu/contact.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.whitesmoke.com/postInstallation/?user_id=&dist_id=${DISTID}&installOption=0&offer=0&

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.whitesmoke.com

Connection: Keep-Alive

Cookie: freeUserID=4176269485; freeUserIDExpires=1621646929; freeUserIDSetTime=1463966929; httpReferer=No Referer; httpRefererExpires=1527038967; httpRefererSetTime=1463966967; landingUrl=VVV.whitesmoke.com/postInstallation/?user_id=&dist_id=${DISTID}&installOption=0&offer=0&; landingUrlExpires=1527038967; landingUrlSetTime=1463966967; landingDate=20160523; landingDateExpires=1527038967; landingDateSetTime=1463966967; trail=1463966788:2875,1463966790:708975; trailExpires=1527038968; trailSetTime=1463966968; SN4a76bf0fab3d8=usfaupclfqqc6ifploeum43i77

HTTP/1.1 200 OK

Accept-Ranges: bytes

Content-Type: image/png

Date: Mon, 23 May 2016 01:29:30 GMT

Last-Modified: Sun, 24 Jan 2016 09:21:10 GMT

Server: Apache

Content-Length: 2861

Connection: keep-alive

.PNG........IHDR... ...%.....T5......tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:CE2C52B0C27B11E59131B5B9EEE9CC2C" xmpMM:InstanceID="xmp.iid:CE2C52AFC27B11E59131B5B9EEE9CC2C" xmp:CreatorTool="Adobe Photoshop CS6 Windows"> <xmpMM:DerivedFrom stRef:instanceID="23910A4E51BCB3322AAF1DD4E76D28F8" stRef:documentID="23910A4E51BCB3322AAF1DD4E76D28F8"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.Vh.....IDATx..X.n......g..I..&K"#K..!...R`@...!.A..@. _.7?...8q $t6%..,.i..Hj..1g....>.zL....'. fz..u.s.=.rooO...>..)....B.....JJ..I.....{.N.)..^...^|n.......c..$...E..< .].a...Wa.OI.q.'a...t.L....l..s.. .R.IG.[.d<...I.$..0..XxcJU..;.o....u....wJh). .q8?7U..b....t..RJH .). ~.........G..!.P..!Q...$d....."G.c.....W;..S.E.U..*|.#..*AJ.....R.R..>.N....",....._.l.1d\;..V.N..uR'..*.......D....(...V..KI=..vH...'..JX].E.._d..'..p{)..3.....%$:.....h;Kz...rV...M..Z)#.Vl...o]ij#....E9....8.."...........D..|hg...E.V..Y=JR.........EU<.S.)t..\.B... ........G.[W&.O7....bd@YA..=G.D..5..K....P\..w.o...6S..X.

<<< skipped >>>

GET /website2016/img/post_installation/facebook.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.whitesmoke.com/postInstallation/?user_id=&dist_id=${DISTID}&installOption=0&offer=0&

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.whitesmoke.com

Connection: Keep-Alive

Cookie: freeUserID=4176269485; freeUserIDExpires=1621646929; freeUserIDSetTime=1463966929; httpReferer=No Referer; httpRefererExpires=1527038967; httpRefererSetTime=1463966967; landingUrl=VVV.whitesmoke.com/postInstallation/?user_id=&dist_id=${DISTID}&installOption=0&offer=0&; landingUrlExpires=1527038967; landingUrlSetTime=1463966967; landingDate=20160523; landingDateExpires=1527038967; landingDateSetTime=1463966967; trail=1463966788:2875,1463966790:708975; trailExpires=1527038968; trailSetTime=1463966968; SN4a76bf0fab3d8=usfaupclfqqc6ifploeum43i77

HTTP/1.1 200 OK

Accept-Ranges: bytes

Content-Type: image/jpeg

Date: Mon, 23 May 2016 01:29:30 GMT

Last-Modified: Mon, 25 Jan 2016 08:44:43 GMT

Server: Apache

Content-Length: 3367

Connection: keep-alive

......Exif..II*.................Ducky.......<......hXXp://ns.adobe.com/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:E14B2480C33F11E5A5E1AB85745A55D2" xmpMM:InstanceID="xmp.iid:E14B247FC33F11E5A5E1AB85745A55D2" xmp:CreatorTool="Adobe Photoshop CS6 Windows"> <xmpMM:DerivedFrom stRef:instanceID="28DD3286E822A11A01004155F74D5227" stRef:documentID="28DD3286E822A11A01004155F74D5227"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.................................................................................................................................................h.h.........................................................................................!1.AQa..q."....2R#Bbrs.$t......67.......................!1.2.AQ3aq.".#R..............?.jh..(.........qr'.....:.1..MZ..%..;........K.*.,..g..N.....Esy#Ke........I..E.d2:{.I..k........M.......k...Z.z....1...;X..o.'.....k6.O.Mr..o..lI......\.C..kBxz..jO...V...^N..^.....r..sap.......5.......IRO....B.(....x`....qF.;...;Me,...WZ..iq[q.V.Rk....'p..}m....n.x"..I%vy.........j.").d.P..P......9...

<<< skipped >>>

GET /website2016/img/post_installation/twitter.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.whitesmoke.com/postInstallation/?user_id=&dist_id=${DISTID}&installOption=0&offer=0&

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.whitesmoke.com

Connection: Keep-Alive

Cookie: freeUserID=4176269485; freeUserIDExpires=1621646929; freeUserIDSetTime=1463966929; httpReferer=No Referer; httpRefererExpires=1527038967; httpRefererSetTime=1463966967; landingUrl=VVV.whitesmoke.com/postInstallation/?user_id=&dist_id=${DISTID}&installOption=0&offer=0&; landingUrlExpires=1527038967; landingUrlSetTime=1463966967; landingDate=20160523; landingDateExpires=1527038967; landingDateSetTime=1463966967; trail=1463966788:2875,1463966790:708975; trailExpires=1527038968; trailSetTime=1463966968; SN4a76bf0fab3d8=usfaupclfqqc6ifploeum43i77

HTTP/1.1 200 OK

Accept-Ranges: bytes

Content-Type: image/jpeg

Date: Mon, 23 May 2016 01:29:30 GMT

Last-Modified: Mon, 25 Jan 2016 08:44:59 GMT

Server: Apache

Content-Length: 3818

Connection: keep-alive

......Exif..II*.................Ducky.......<......hXXp://ns.adobe.com/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:EAD61320C33F11E58CEBB9F4605DDFED" xmpMM:InstanceID="xmp.iid:EAD6131FC33F11E58CEBB9F4605DDFED" xmp:CreatorTool="Adobe Photoshop CS6 Windows"> <xmpMM:DerivedFrom stRef:instanceID="28DD3286E822A11A01004155F74D5227" stRef:documentID="28DD3286E822A11A01004155F74D5227"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.................................................................................................................................................h.h..........................................................................................!A..1aQq."2B..Rr.#S.....b.3..$........................!1A.Q."aq.2B......Rb#...34............?......@..Y|v6.5...@...'....).Ed..D Y..B.wz.... ..)..?..S.7.lC....Z..K...6\H.a..E.t..a.........u....w......=S?Oj..J..>E....yy.U}... ..I..9......?.........,Ww.DCr5.3|..zH.. v....eF..5........X?k8...........%..C.6......;J.t..... ....T.Q.!.l.....o.....V....n..hX\f'2...V.......@.G.-%T.....~.v..L.

<<< skipped >>>

GET /website2016/img/content/buy/get_whitesmoke.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.whitesmoke.com/postInstallation/?user_id=&dist_id=${DISTID}&installOption=0&offer=0&

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.whitesmoke.com

Connection: Keep-Alive

Cookie: freeUserID=4176269485; freeUserIDExpires=1621646929; freeUserIDSetTime=1463966929; httpReferer=No Referer; httpRefererExpires=1527038967; httpRefererSetTime=1463966967; landingUrl=VVV.whitesmoke.com/postInstallation/?user_id=&dist_id=${DISTID}&installOption=0&offer=0&; landingUrlExpires=1527038967; landingUrlSetTime=1463966967; landingDate=20160523; landingDateExpires=1527038967; landingDateSetTime=1463966967; trail=1463966788:2875,1463966790:708975; trailExpires=1527038968; trailSetTime=1463966968; SN4a76bf0fab3d8=usfaupclfqqc6ifploeum43i77

HTTP/1.1 200 OK

Accept-Ranges: bytes

Content-Type: image/png

Date: Mon, 23 May 2016 01:29:30 GMT

Last-Modified: Wed, 03 Feb 2016 11:53:55 GMT

Server: Apache

Content-Length: 65736

Connection: keep-alive

.PNG........IHDR...e...T.......-.....tEXtSoftware.Adobe ImageReadyq.e<...viTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:67bd17a3-5144-8e4b-aaf1-b54d1d35cf78" xmpMM:DocumentID="xmp.did:CD4AF97ECA6C11E59EBBED8EAB93CAE5" xmpMM:InstanceID="xmp.iid:CD4AF97DCA6C11E59EBBED8EAB93CAE5" xmp:CreatorTool="Adobe Photoshop CC 2015 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:67bd17a3-5144-8e4b-aaf1-b54d1d35cf78" stRef:documentID="xmp.did:67bd17a3-5144-8e4b-aaf1-b54d1d35cf78"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?><.Zw....IDATx..}..U...........e.Kg..D.H..bG...h.....%.5..gI>..OP1.i4F.X.D.X..{...R..Y.....^....[."s.....w..3.9s..s....9r.....<....9r.@..#G..9Pv...#....9r....#G..9Pv...#G'@.D.....5}.!...........Z. .\.nH.9r...Ar.%.vrm .JrQp.M.}..........45......:r.'W...#G..F.)..U......K.......OuEN..b..>".&r..\.8@v....D1.[...4...g"(.#.trM#.....9r...h.gS...;.@.9.. ..r.vc....o(..8......(c....SH.o..r...YB.....}=@.p..t........Y...#Gg.5.....]..|.....nr....&...q............'.#..L...q.../(...O..U..d@h...G..9b4$V'............

<<< skipped >>>

GET /website2016/img/homepage/footer/facebook.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.whitesmoke.com/postInstallation/?user_id=&dist_id=${DISTID}&installOption=0&offer=0&

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.whitesmoke.com

Connection: Keep-Alive

Cookie: freeUserID=4176269485; freeUserIDExpires=1621646929; freeUserIDSetTime=1463966929; httpReferer=No Referer; httpRefererExpires=1527038967; httpRefererSetTime=1463966967; landingUrl=VVV.whitesmoke.com/postInstallation/?user_id=&dist_id=${DISTID}&installOption=0&offer=0&; landingUrlExpires=1527038967; landingUrlSetTime=1463966967; landingDate=20160523; landingDateExpires=1527038967; landingDateSetTime=1463966967; trail=1463966788:2875,1463966790:708975; trailExpires=1527038968; trailSetTime=1463966968; SN4a76bf0fab3d8=usfaupclfqqc6ifploeum43i77

HTTP/1.1 200 OK

Accept-Ranges: bytes

Content-Type: image/png

Date: Mon, 23 May 2016 01:29:31 GMT

Last-Modified: Sun, 17 Jan 2016 13:59:47 GMT

Server: Apache

Content-Length: 4353

Connection: keep-alive

.PNG........IHDR...@...@......iq.....pHYs...#...#.x.?v...OiCCPPhotoshop ICC profile..x..SgTS..=...BK...KoR.. RB....&*!..J.!...Q..EE...........Q,......!.........{.k........>...........H3Q5...B..........@..$p....d!s.#...~<< ".....x.....M..0.....B.\.....t.8K....@z.B..@F....&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH.............0Q..)..{.`.##x.....F.W<. ...*..x..<.$9E.[.-q.WW..(.I. .6a.a.@..y..2.4..............x.....6..._-...."bb.....p@...t~..,/...;..m..%..h^..u..f..@.....W.p.~<<E.........J.B[a.W}.g._.W.l.~<......$.2].G......L......b...G.......".Ib.X*..Q.q.D...2.".B.).%..d..,..>.5..j>.{.-.]c..K'.Xt.......o..(...h...w..?.G.%..fI.q..^D$.T..?....D..*.A....,.........`6.B$..B.B.d..r`)..B(....*`/.@.4.Qh..p...U..=p..a...(....A...a!...b.X#......!.H...$ ...Q"K.5H1R.T UH..=r.9.\F..;..2....G1...Q=...C..7..F...dt1......r..=.6....h...>C.0....3.l0...B.8,..c.."......V.....c..w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b21.XH,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9., .......3...!.[..b@q..S.(R.jJ....4..e.2AU..R...T.5.ZB...R.Q...4u.9...IK......h.h.i..t.....N..W...G.....w.......g(.....g.w...L......T071......oUX*.*|.....J.&..*/T.......U.U.T..^S}.FU3S......U..P.S.Sg.;...g.oT?.~Y...Y.L.OC.Q.._... .c..x,!k...u.5.&...|v*......=...9C3J3W.R..f?...q..tN..(...~....).)..4L.1e\k....X.H.Q.G..6......E.Y...A.J'\'Gg.....S.S.....M=:....k....Dw.n.....^..Lo..y....}/.T.m...G.X...$.....<.5qo<./...QC].@C.a.a......<..F.F..i.\.$.m.m..&.&!&KM.M..RM..).;L;L........5.=1.2.......

<<< skipped >>>

GET /website2016/img/homepage/footer/google.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.whitesmoke.com/postInstallation/?user_id=&dist_id=${DISTID}&installOption=0&offer=0&

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.whitesmoke.com

Connection: Keep-Alive

Cookie: freeUserID=4176269485; freeUserIDExpires=1621646929; freeUserIDSetTime=1463966929; httpReferer=No Referer; httpRefererExpires=1527038967; httpRefererSetTime=1463966967; landingUrl=VVV.whitesmoke.com/postInstallation/?user_id=&dist_id=${DISTID}&installOption=0&offer=0&; landingUrlExpires=1527038967; landingUrlSetTime=1463966967; landingDate=20160523; landingDateExpires=1527038967; landingDateSetTime=1463966967; trail=1463966788:2875,1463966790:708975; trailExpires=1527038968; trailSetTime=1463966968; SN4a76bf0fab3d8=usfaupclfqqc6ifploeum43i77

HTTP/1.1 200 OK

Accept-Ranges: bytes

Content-Type: image/png

Date: Mon, 23 May 2016 01:29:31 GMT

Last-Modified: Sun, 17 Jan 2016 13:59:55 GMT

Server: Apache

Content-Length: 5503

Connection: keep-alive

<<< skipped >>>

GET /website2016/js/jquery/jquery.js HTTP/1.1

Accept: */*

Referer: hXXp://VVV.whitesmoke.com/postInstallation/?user_id=&dist_id=${DISTID}&installOption=0&offer=0&

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.whitesmoke.com

Connection: Keep-Alive

Cookie: freeUserID=4176269485; freeUserIDExpires=1621646929; freeUserIDSetTime=1463966929; httpReferer=No Referer; httpRefererExpires=1527038967; httpRefererSetTime=1463966967; landingUrl=VVV.whitesmoke.com/postInstallation/?user_id=&dist_id=${DISTID}&installOption=0&offer=0&; landingUrlExpires=1527038967; landingUrlSetTime=1463966967; landingDate=20160523; landingDateExpires=1527038967; landingDateSetTime=1463966967; trail=1463966788:2875,1463966790:708975; trailExpires=1527038968; trailSetTime=1463966968; SN4a76bf0fab3d8=usfaupclfqqc6ifploeum43i77

HTTP/1.1 200 OK

Accept-Ranges: bytes

Content-Type: application/x-javascript

Date: Mon, 23 May 2016 01:29:32 GMT

Last-Modified: Fri, 11 Dec 2015 07:47:08 GMT

Server: Apache

Content-Length: 95785

Connection: keep-alive

/*! jQuery v1.11.1 | (c) 2005, 2014 jQuery Foundation, Inc. | jquery.org/license */.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=c.slice,e=c.concat,f=c.push,g=c.indexOf,h={},i=h.toString,j=h.hasOwnProperty,k={},l="1.11.1",m=function(a,b){return new m.fn.init(a,b)},n=/^[\s\uFEFF\xA0] |[\s\uFEFF\xA0] $/g,o=/^-ms-/,p=/-([\da-z])/gi,q=function(a,b){return b.toUpperCase()};m.fn=m.prototype={jquery:l,constructor:m,selector:"",length:0,toArray:function(){return d.call(this)},get:function(a){return null!=a?0>a?this[a this.length]:this[a]:d.call(this)},pushStack:function(a){var b=m.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a,b){return m.each(this,a,b)},map:function(a){return this.pushStack(m.map(this,function(b,c){return a.call(b,c,b)}))},slice:function(){return this.pushStack(d.apply(this,arguments))},first:function(){return this.eq(0)},last:function(){return this.eq(-1)},eq:function(a){var b=this.length,c= a (0>a?b:0);return this.pushStack(c>=0&&b>c?[this[c]]:[])},end:function(){return this.prevObject||this.constructor(null)},push:f,sort:c.sort,splice:c.splice},m.extend=m.fn.extend=function(){var a,b,c,d,e,f,g=arguments[0]||{},h=1,i=arguments.length,j=!1;for("boolean"==typeof g&&(j=g,g=arguments[h]||{},h ),"object"==typeof g||m.

<<< skipped >>>

GET /website2016/js/bxslider/jquery.bxslider.min.js HTTP/1.1

Accept: */*

Referer: hXXp://VVV.whitesmoke.com/postInstallation/?user_id=&dist_id=${DISTID}&installOption=0&offer=0&

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.whitesmoke.com

Connection: Keep-Alive

Cookie: freeUserID=4176269485; freeUserIDExpires=1621646929; freeUserIDSetTime=1463966929; httpReferer=No Referer; httpRefererExpires=1527038967; httpRefererSetTime=1463966967; landingUrl=VVV.whitesmoke.com/postInstallation/?user_id=&dist_id=${DISTID}&installOption=0&offer=0&; landingUrlExpires=1527038967; landingUrlSetTime=1463966967; landingDate=20160523; landingDateExpires=1527038967; landingDateSetTime=1463966967; trail=1463966788:2875,1463966790:708975; trailExpires=1527038968; trailSetTime=1463966968; _ga=GA1.2.548354617.1463966766; _gat_UA-63220888-1=1; _gat_UA-63220888-4=1; SN4a76bf0fab3d8=usfaupclfqqc6ifploeum43i77

HTTP/1.1 200 OK

Accept-Ranges: bytes

Content-Type: application/x-javascript

Date: Mon, 23 May 2016 01:29:33 GMT

Last-Modified: Fri, 04 Apr 2014 21:14:38 GMT

Server: Apache

Content-Length: 19359

Connection: keep-alive

/**. * BxSlider v4.1.2 - Fully loaded, responsive content slider. * http://bxslider.com. *. * Copyright 2014, Steven Wanderski - hXXp://stevenwanderski.com - hXXp://bxcreative.com. * Written while drinking Belgian ales and listening to jazz. *. * Released under the MIT license - hXXp://opensource.org/licenses/MIT. */.!function(t){var e={},s={mode:"horizontal",slideSelector:"",infiniteLoop:!0,hideControlOnEnd:!1,speed:500,easing:null,slideMargin:0,startSlide:0,randomStart:!1,captions:!1,ticker:!1,tickerHover:!1,adaptiveHeight:!1,adaptiveHeightSpeed:500,video:!1,useCSS:!0,preloadImages:"visible",responsive:!0,slideZIndex:50,touchEnabled:!0,swipeThreshold:50,oneToOneTouch:!0,preventDefaultSwipeX:!0,preventDefaultSwipeY:!1,pager:!0,pagerType:"full",pagerShortSeparator:" / ",pagerSelector:null,buildPager:null,pagerCustom:null,controls:!0,nextText:"Next",prevText:"Prev",nextSelector:null,prevSelector:null,autoControls:!1,startText:"Start",stopText:"Stop",autoControlsCombine:!1,autoControlsSelector:null,auto:!1,pause:4e3,autoStart:!0,autoDirection:"next",autoHover:!1,autoDelay:0,minSlides:1,maxSlides:1,moveSlides:0,slideWidth:0,onSliderLoad:function(){},onSlideBefore:function(){},onSlideAfter:function(){},onSlideNext:function(){},onSlidePrev:function(){},onSliderResize:function(){}};t.fn.bxSlider=function(n){if(0==this.length)return this;if(this.length>1)return this.each(function(){t(this).bxSlider(n)}),this;var o={},r=this;e.el=this;var a=t(window).width(),l=t(window).height(),d=function(){o.settings=t.extend({},s

<<< skipped >>>

GET /website2016/img/homepage/header/menu/products.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.whitesmoke.com/postInstallation/?user_id=&dist_id=${DISTID}&installOption=0&offer=0&

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.whitesmoke.com

Connection: Keep-Alive

Cookie: freeUserID=4176269485; freeUserIDExpires=1621646929; freeUserIDSetTime=1463966929; httpReferer=No Referer; httpRefererExpires=1527038967; httpRefererSetTime=1463966967; landingUrl=VVV.whitesmoke.com/postInstallation/?user_id=&dist_id=${DISTID}&installOption=0&offer=0&; landingUrlExpires=1527038967; landingUrlSetTime=1463966967; landingDate=20160523; landingDateExpires=1527038967; landingDateSetTime=1463966967; trail=1463966788:2875,1463966790:708975; trailExpires=1527038968; trailSetTime=1463966968; SN4a76bf0fab3d8=usfaupclfqqc6ifploeum43i77

HTTP/1.1 200 OK

Accept-Ranges: bytes

Content-Type: image/png

Date: Mon, 23 May 2016 01:29:29 GMT

Last-Modified: Sun, 24 Jan 2016 09:18:36 GMT

Server: Apache

Content-Length: 3108

Connection: keep-alive

.PNG........IHDR...%...%.....J..T....tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:72A64CC0C27B11E5966FAFA67C49F12B" xmpMM:InstanceID="xmp.iid:72A64CBFC27B11E5966FAFA67C49F12B" xmp:CreatorTool="Adobe Photoshop CS6 Windows"> <xmpMM:DerivedFrom stRef:instanceID="23910A4E51BCB3322AAF1DD4E76D28F8" stRef:documentID="23910A4E51BCB3322AAF1DD4E76D28F8"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>dE......IDATx..WK..W..k...s..M.hcjJ}T..Z...t"m).R.N.G"N.;(....\....Fp$5.3...Ah....bK..I.$7.....{....}...7.p.....{...X.\.vUS6.".I.Xr.d)%^qO{/...t..k.Jmj:.m>...Y...a..Uq.{K..WS......>.. [.....[.T...#."...o.W.G...c.%.........<.j9'u..G.S3jU..[...p........_.!ko,...'..t..e.bfo......#..;x..l...,UKn...4............m.L._C.S#....,..<..2Z....?....~....ZRm...Z.aa^.L...\... ....H>...#E.....-..K6f8]....~..f{..'.Z.C.jRJ.E..Q.........)....8.Rc.4..@c...|.p3R.....o.,on._.z...o<~b!...2...wf9.xu..8....8......N.........:f.zj/_o..p....[.....ys..(..)..r..e......................n.....F..ki..tA..T. ...r.N.E..6......[

<<< skipped >>>

GET /website2016/img/homepage/header/menu/demo.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.whitesmoke.com/postInstallation/?user_id=&dist_id=${DISTID}&installOption=0&offer=0&

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.whitesmoke.com

Connection: Keep-Alive

Cookie: freeUserID=4176269485; freeUserIDExpires=1621646929; freeUserIDSetTime=1463966929; httpReferer=No Referer; httpRefererExpires=1527038967; httpRefererSetTime=1463966967; landingUrl=VVV.whitesmoke.com/postInstallation/?user_id=&dist_id=${DISTID}&installOption=0&offer=0&; landingUrlExpires=1527038967; landingUrlSetTime=1463966967; landingDate=20160523; landingDateExpires=1527038967; landingDateSetTime=1463966967; trail=1463966788:2875,1463966790:708975; trailExpires=1527038968; trailSetTime=1463966968; SN4a76bf0fab3d8=usfaupclfqqc6ifploeum43i77

HTTP/1.1 200 OK

Accept-Ranges: bytes

Content-Type: image/png

Date: Mon, 23 May 2016 01:29:29 GMT

Last-Modified: Sun, 24 Jan 2016 09:20:01 GMT

Server: Apache

Content-Length: 2946

Connection: keep-alive

.PNG........IHDR...,...%.............tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:A587A8F0C27B11E58872D78453C77199" xmpMM:InstanceID="xmp.iid:A587A8EFC27B11E58872D78453C77199" xmp:CreatorTool="Adobe Photoshop CS6 Windows"> <xmpMM:DerivedFrom stRef:instanceID="23910A4E51BCB3322AAF1DD4E76D28F8" stRef:documentID="23910A4E51BCB3322AAF1DD4E76D28F8"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>)._.....IDATx..X]o]G...g..k_'..|..(VE.6E|..R%$.D.R_x..x.....~B...~.Bj%$x..T^.......4)$BQ..8v......f.9..7!.RzOnn.=.3{..{.5...eS.29.s.HL....l....V..eCB.%.q..)c...P&v..J2.D.E.$.'.Dd#..P..._..F6.P]9y........vRHt#...6....U.;...o..$%%..nR1..........q.f.O...............&"..I....v...._9}tq.&kl...wh.0..u...7..>.........X.sJ....H$..n.}m...o~.S.g...... !.....]....._<uh.r...ERDl.$.....ux.....-..xT>j.....eZx.$....0.a.......O.......O.V.0t..X~{....c/,.....1d4i..3.."p ........6..2...H.&a~.I. ..o.D..bB .M........Ws.].1.b.K...N.n..k.E.(.g]....5fj..RO.Z.....&.t..Z..R.RJ`4H.4.?5....s...@.]..6........$.....jF).2G9:^..-.3.

<<< skipped >>>

GET /website2016/img/homepage/header/menu/about.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.whitesmoke.com/postInstallation/?user_id=&dist_id=${DISTID}&installOption=0&offer=0&

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.whitesmoke.com

Connection: Keep-Alive

Cookie: freeUserID=4176269485; freeUserIDExpires=1621646929; freeUserIDSetTime=1463966929; httpReferer=No Referer; httpRefererExpires=1527038967; httpRefererSetTime=1463966967; landingUrl=VVV.whitesmoke.com/postInstallation/?user_id=&dist_id=${DISTID}&installOption=0&offer=0&; landingUrlExpires=1527038967; landingUrlSetTime=1463966967; landingDate=20160523; landingDateExpires=1527038967; landingDateSetTime=1463966967; trail=1463966788:2875,1463966790:708975; trailExpires=1527038968; trailSetTime=1463966968; SN4a76bf0fab3d8=usfaupclfqqc6ifploeum43i77

HTTP/1.1 200 OK

Accept-Ranges: bytes

Content-Type: image/png

Date: Mon, 23 May 2016 01:29:30 GMT

Last-Modified: Sun, 24 Jan 2016 09:20:47 GMT

Server: Apache

Content-Length: 2226

Connection: keep-alive

.PNG........IHDR...#...%.....G.......tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:C0EEE360C27B11E5AF2284FB0C37B437" xmpMM:InstanceID="xmp.iid:C0EEE35FC27B11E5AF2284FB0C37B437" xmp:CreatorTool="Adobe Photoshop CS6 Windows"> <xmpMM:DerivedFrom stRef:instanceID="23910A4E51BCB3322AAF1DD4E76D28F8" stRef:documentID="23910A4E51BCB3322AAF1DD4E76D28F8"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>AK.....8IDATx..W.n\E....;.....!..(...".A.|....RVd....G...A..;>!..l.."..8..)...3s..8.........~.Lw.z.:U.6..h..4...,d%..p.e...(...U.w($.r.XM....A.5A......A...`..:.......hPb.QV..B....=@..6$....M..d...M..T...>.......~W.q..p..;.....$.P.6..6.s...f....o..)%U=<h{H......Z......,._.D.]..(../.....|..?H....(hcHn....Ww-Ih~}<X{2..../=..o..b..:_....}.....t.!#6.6...K.3.......3...o.......>..o....n.I....... ....."8._H...*.... .......S.f..TA............rayn.v* e..Hg\`~..Y..a.F;SH.b.-..L....V6..p...g.>.......s..TA.6.[...6.D..M.*.B,<....W..f.,....4.:....R........$..D....b...i..~..V...m....A.,E?......)@ F...d..^

<<< skipped >>>

GET /website2016/img/post_installation/UsingWhiteSmoke.gif HTTP/1.1

Accept: */*

Referer: hXXp://VVV.whitesmoke.com/postInstallation/?user_id=&dist_id=${DISTID}&installOption=0&offer=0&

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.whitesmoke.com

Connection: Keep-Alive

Cookie: freeUserID=4176269485; freeUserIDExpires=1621646929; freeUserIDSetTime=1463966929; httpReferer=No Referer; httpRefererExpires=1527038967; httpRefererSetTime=1463966967; landingUrl=VVV.whitesmoke.com/postInstallation/?user_id=&dist_id=${DISTID}&installOption=0&offer=0&; landingUrlExpires=1527038967; landingUrlSetTime=1463966967; landingDate=20160523; landingDateExpires=1527038967; landingDateSetTime=1463966967; trail=1463966788:2875,1463966790:708975; trailExpires=1527038968; trailSetTime=1463966968; SN4a76bf0fab3d8=usfaupclfqqc6ifploeum43i77

HTTP/1.1 200 OK

Accept-Ranges: bytes

Content-Type: image/gif

Date: Mon, 23 May 2016 01:29:30 GMT

Last-Modified: Sun, 24 Jan 2016 12:45:11 GMT

Server: Apache

Content-Length: 191880

Connection: keep-alive

GIF89aG..............................................x.............................~..|..y..w..t..s..t..v..z..|..~..................................*..1..(..%..&..&..&..#..#..$..%..'..)..*.. ..N..N..X..d..h..o..y......................................................................................m..U..L..I..Go.C\.CI.DDdDDHTDEzID.VD._C.u..u..w..x..z..|..~.......................................B..F..P..`..q...............................................................c..4....4....c.....3...3................................................3.3c........4..4..b.....................................c.........s....g..4.d..b..4P.483..4.3L.4=.B5.^ .0..c23.73..4..b..b.b....b..b....3..........(..3.74.`..e.b..W.JL.N3.B#..$..........9.44.45.Ll...2..4(d..e.........32.J4.EN.4].4x.F..^.!..NETSCAPE2.0.....!.......,....G..........H......*\......#J.H.....3j...... C..I....(S.\.....0c..I....8s.......@...J....H.*].....P.J.J....X.j......`...K....h..].....p...K....x............L...... ^......#K.L.....3k.......C..M.....S.^......c..M.....s...........N...... _.......K.N......k...........O......._.........O...............(....h...&....6....F(...Vh...f....v... .(..$.h..(....,....0.(..4.h..8....<....@.)..D.i..H&...L6...PF)..TVi..Xf...\v...`.)..d.i..h....l....p.)..t.i..x....|......*....j...&....6....F*...Vj...f....v.....*....z...............*....j.............. ....k...&....6....F ...Vk...f....v..... ....k.............. ....k..............L ...l...'....7....G,...Wl...g....w... .,..$.l..(....,.....j ..4.l..8....;....@.L..D.]..G'...J7...P?-

<<< skipped >>>

GET /website2016/img/homepage/footer/twitter.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.whitesmoke.com/postInstallation/?user_id=&dist_id=${DISTID}&installOption=0&offer=0&

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.whitesmoke.com

Connection: Keep-Alive

Cookie: freeUserID=4176269485; freeUserIDExpires=1621646929; freeUserIDSetTime=1463966929; httpReferer=No Referer; httpRefererExpires=1527038967; httpRefererSetTime=1463966967; landingUrl=VVV.whitesmoke.com/postInstallation/?user_id=&dist_id=${DISTID}&installOption=0&offer=0&; landingUrlExpires=1527038967; landingUrlSetTime=1463966967; landingDate=20160523; landingDateExpires=1527038967; landingDateSetTime=1463966967; trail=1463966788:2875,1463966790:708975; trailExpires=1527038968; trailSetTime=1463966968; SN4a76bf0fab3d8=usfaupclfqqc6ifploeum43i77

HTTP/1.1 200 OK

Accept-Ranges: bytes

Content-Type: image/png

Date: Mon, 23 May 2016 01:29:31 GMT

Last-Modified: Sun, 17 Jan 2016 13:59:51 GMT

Server: Apache

Content-Length: 5106

Connection: keep-alive

<<< skipped >>>

GET /website2016/img/homepage/footer/email.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.whitesmoke.com/postInstallation/?user_id=&dist_id=${DISTID}&installOption=0&offer=0&

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.whitesmoke.com

Connection: Keep-Alive

Cookie: freeUserID=4176269485; freeUserIDExpires=1621646929; freeUserIDSetTime=1463966929; httpReferer=No Referer; httpRefererExpires=1527038967; httpRefererSetTime=1463966967; landingUrl=VVV.whitesmoke.com/postInstallation/?user_id=&dist_id=${DISTID}&installOption=0&offer=0&; landingUrlExpires=1527038967; landingUrlSetTime=1463966967; landingDate=20160523; landingDateExpires=1527038967; landingDateSetTime=1463966967; trail=1463966788:2875,1463966790:708975; trailExpires=1527038968; trailSetTime=1463966968; SN4a76bf0fab3d8=usfaupclfqqc6ifploeum43i77

HTTP/1.1 200 OK

Accept-Ranges: bytes

Content-Type: image/png

Date: Mon, 23 May 2016 01:29:31 GMT

Last-Modified: Sun, 17 Jan 2016 13:59:57 GMT

Server: Apache

Content-Length: 4900

Connection: keep-alive

<<< skipped >>>

GET /website2016/js/bootstrap/bootstrap.min.js HTTP/1.1

Accept: */*

Referer: hXXp://VVV.whitesmoke.com/postInstallation/?user_id=&dist_id=${DISTID}&installOption=0&offer=0&

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.whitesmoke.com

Connection: Keep-Alive

Cookie: freeUserID=4176269485; freeUserIDExpires=1621646929; freeUserIDSetTime=1463966929; httpReferer=No Referer; httpRefererExpires=1527038967; httpRefererSetTime=1463966967; landingUrl=VVV.whitesmoke.com/postInstallation/?user_id=&dist_id=${DISTID}&installOption=0&offer=0&; landingUrlExpires=1527038967; landingUrlSetTime=1463966967; landingDate=20160523; landingDateExpires=1527038967; landingDateSetTime=1463966967; trail=1463966788:2875,1463966790:708975; trailExpires=1527038968; trailSetTime=1463966968; _ga=GA1.2.548354617.1463966766; _gat_UA-63220888-1=1; _gat_UA-63220888-4=1; SN4a76bf0fab3d8=usfaupclfqqc6ifploeum43i77

HTTP/1.1 200 OK

Accept-Ranges: bytes

Content-Type: application/x-javascript

Date: Mon, 23 May 2016 01:29:32 GMT

Last-Modified: Fri, 11 Dec 2015 07:47:08 GMT

Server: Apache

Content-Length: 36868

Connection: keep-alive

/*!. * Bootstrap v3.3.6 (hXXp://getbootstrap.com). * Copyright 2011-2015 Twitter, Inc.. * Licensed under the MIT license. */.if("undefined"==typeof jQuery)throw new Error("Bootstrap's JavaScript requires jQuery"); function(a){"use strict";var b=a.fn.jquery.split(" ")[0].split(".");if(b[0]<2&&b[1]<9||1==b[0]&&9==b[1]&&b[2]<1||b[0]>2)throw new Error("Bootstrap's JavaScript requires jQuery version 1.9.1 or higher, but lower than version 3")}(jQuery), function(a){"use strict";function b(){var a=document.createElement("bootstrap"),b={WebkitTransition:"webkitTransitionEnd",MozTransition:"transitionend",OTransition:"oTransitionEnd otransitionend",transition:"transitionend"};for(var c in b)if(void 0!==a.style[c])return{end:b[c]};return!1}a.fn.emulateTransitionEnd=function(b){var c=!1,d=this;a(this).one("bsTransitionEnd",function(){c=!0});var e=function(){c||a(d).trigger(a.support.transition.end)};return setTimeout(e,b),this},a(function(){a.support.transition=b(),a.support.transition&&(a.event.special.bsTransitionEnd={bindType:a.support.transition.end,delegateType:a.support.transition.end,handle:function(b){return a(b.target).is(this)?b.handleObj.handler.apply(this,arguments):void 0}})})}(jQuery), function(a){"use strict";function b(b){return this.each(function(){var c=a(this),e=c.data("bs.alert");e||c.data("bs.alert",e=new d(this)),"string"==typeof b&&e[b].call(c)})}var c='[data-dismiss="alert"]',d=function(b){a(b).on("click",c,this.close)};d.VERSION="3.3.6",d.TRANSITION_DURATION=150,d.prototype.close=funct

<<< skipped >>>

GET /pagead/conversion.js HTTP/1.1

Accept: */*

Referer: hXXp://VVV.whitesmoke.com/postInstallation/?user_id=&dist_id=${DISTID}&installOption=0&offer=0&

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.googleadservices.com

Connection: Keep-Alive

HTTP/1.1 200 OK

P3P: policyref="hXXp://VVV.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"

Content-Type: text/javascript; charset=UTF-8

ETag: 8143778643697739115

Date: Mon, 23 May 2016 01:26:05 GMT

Expires: Mon, 23 May 2016 01:26:05 GMT

Cache-Control: private, max-age=86400

X-Content-Type-Options: nosniff

Content-Disposition: attachment; filename="f.txt"

Content-Encoding: gzip

Server: cafe

Content-Length: 4569

X-XSS-Protection: 1; mode=block

...........Z{s........RD...L..E.Sv.<N.g7....,5..P,$".0.|..=.'....-..f....._.H...'..@...<j.X2.b._9g9....._...{..A......hp.J.V.i.>...;sIm.*E...i...........d....^.......s]....e$".."...}..M..~....o.. ..|/.^'<...7......a.!.....m^........lF.....y0....X._...........#...4........M..c7.M.bj.....M....6i.........0...]..j ..je.....6e...H,....Em...S......j.U.J7...........]`.;.*;...G.x..<.r.B^|........v....}.........g....L(L...K..g...h%.u.D.0.).c..A....F.%.N"/...(L.d.............}........u.....-......Qg..B...`.........g...w.D...........7.I.Y......lc.b...`.......eG..4.~.f.(Y...o..A.....Uue.Q-...x.F.......G..p....y.q....K.%[.....].j....=............s..l.......8..G..aW....#..IB@;.(...^B....K..O.8..-........$..p#..<..-...#.S...\.._..>Y..l...../.AT..>n....%......>....]../..T..Ay.Ww..Q..R7.....6.{D.q.j#..h....A..F.g.8.QG..........idk.>...Z.a.1~H..\.7a....>.>.<.y@.W..0.:l.:.A.y....x.K.j.jh..`.jhr....M....7..V..Y.u]._}....5-L.%.....7.........."...C>...f].eK-...R#^B........^....'sc.o5..E0K.....od]....jMO.5m......N..@u.9....I..o...F#.......Jt2.~....rC)7b?...A.. R.....\....W......t......L..Z6[)F3#@d....b.V.f...m-K..@.....M......:V..f.....t.[.......w%..o8{.j..@[v.#....6_..%O.c..G..........Ohj......ij.Y..|.y..?`..vN?.?N..jaCT..E..>...v../....2.....i0.y...'.6..%.x.....2U.lh..zo. ....X..k..6U..|h...k..wP'.q....c. ...c..8.a. .D@...7.....I.......]....4.........i..S....k.L\...]....Z..^.A.P..#u$...y.g..............<.is.{......&.........n...r.V..F../...|..LZh.a..#....mV..SDhv:Q ...p._. ...G..j&...

<<< skipped >>>

GET /css?family=Scada:400,700,400italic HTTP/1.1

Accept: */*

Referer: hXXp://VVV.whitesmoke.com/postInstallation/?user_id=&dist_id=${DISTID}&installOption=0&offer=0&

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: fonts.googleapis.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Content-Type: text/css; charset=utf-8

Access-Control-Allow-Origin: *

Timing-Allow-Origin: *

Content-Encoding: identity

Content-Length: 157

Expires: Mon, 23 May 2016 01:26:03 GMT

Date: Mon, 23 May 2016 01:26:03 GMT

Cache-Control: private, max-age=86400

X-Content-Type-Options: nosniff

X-Frame-Options: SAMEORIGIN

X-XSS-Protection: 1; mode=block

Server: GSE

@font-face {. font-family: 'Scada';. font-style: normal;. font-weight: 400;. src: url(hXXp://fonts.gstatic.com/s/scada/v4/CM50sIngpG0EkWzrh5qt7g.eot);.}.HTTP/1.1 200 OK..Content-Type: text/css; charset=utf-8..Access-Control-Allow-Origin: *..Timing-Allow-Origin: *..Content-Encoding: identity..Content-Length: 157..Expires: Mon, 23 May 2016 01:26:03 GMT..Date: Mon, 23 May 2016 01:26:03 GMT..Cache-Control: private, max-age=86400..X-Content-Type-Options: nosniff..X-Frame-Options: SAMEORIGIN..X-XSS-Protection: 1; mode=block..Server: GSE..@font-face {. font-family: 'Scada';. font-style: normal;. font-weight: 400;. src: url(hXXp://fonts.gstatic.com/s/scada/v4/CM50sIngpG0EkWzrh5qt7g.eot);.}...

GET /promotions/popups/directpostinstallation.php?user_id=&dist_id=${DISTID}&installOption=0&offer=0 HTTP/1.1

Accept: */*

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.whitesmoke.com

Connection: Keep-Alive

Cookie: freeUserID=4176269485; freeUserIDExpires=1621646929; freeUserIDSetTime=1463966929

HTTP/1.1 301 Moved Permanently

Content-Type: text/html; charset=UTF-8

Date: Mon, 23 May 2016 01:29:26 GMT

Location: hXXp://VVV.whitesmoke.com/promotions/popups/popup_writer_funnel_external.php?user_id=&dist_id=${DISTID}&installOption=0&offer=0&

Server: Apache

X-Powered-By: PHP/5.1.6

Content-Length: 0

Connection: keep-alive

....

GET /promotions/popups/popup_writer_funnel_external.php?user_id=&dist_id=${DISTID}&installOption=0&offer=0& HTTP/1.1

Accept: */*

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.whitesmoke.com

Connection: Keep-Alive

Cookie: freeUserID=4176269485; freeUserIDExpires=1621646929; freeUserIDSetTime=1463966929

HTTP/1.1 301 Moved Permanently

Content-Type: text/html; charset=UTF-8

Date: Mon, 23 May 2016 01:29:26 GMT

Location: hXXp://VVV.whitesmoke.com/postInstallation/?user_id=&dist_id=${DISTID}&installOption=0&offer=0&

Server: Apache

X-Powered-By: PHP/5.1.6

Content-Length: 0

Connection: keep-alive

....

GET /postInstallation/?user_id=&dist_id=${DISTID}&installOption=0&offer=0& HTTP/1.1

Accept: */*

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.whitesmoke.com

Connection: Keep-Alive

Cookie: freeUserID=4176269485; freeUserIDExpires=1621646929; freeUserIDSetTime=1463966929

HTTP/1.1 200 OK

Cache-Control: private, must-revalidate

Content-Type: text/html; charset=UTF-8

Date: Mon, 23 May 2016 01:29:26 GMT

P3P: CP="NOI NID ADMa OUR IND UNI COM NAV"

Server: Apache

Set-Cookie: SN4a76bf0fab3d8=usfaupclfqqc6ifploeum43i77; path=/

Set-Cookie: httpReferer=No Referer; expires=Wed, 23-May-2018 01:29:27 GMT; path=/; domain=.whitesmoke.com

Set-Cookie: httpRefererExpires=1527038967; expires=Wed, 23-May-2018 01:29:27 GMT; path=/; domain=.whitesmoke.com

Set-Cookie: httpRefererSetTime=1463966967; expires=Wed, 23-May-2018 01:29:27 GMT; path=/; domain=.whitesmoke.com

Set-Cookie: landingUrl=VVV.whitesmoke.com/postInstallation/?user_id=&dist_id=${DISTID}&installOption=0&offer=0&; expires=Wed, 23-May-2018 01:29:27 GMT; path=/; domain=.whitesmoke.com

Set-Cookie: landingUrlExpires=1527038967; expires=Wed, 23-May-2018 01:29:27 GMT; path=/; domain=.whitesmoke.com

Set-Cookie: landingUrlSetTime=1463966967; expires=Wed, 23-May-2018 01:29:27 GMT; path=/; domain=.whitesmoke.com

Set-Cookie: landingDate=20160523; expires=Wed, 23-May-2018 01:29:27 GMT; path=/; domain=.whitesmoke.com

Set-Cookie: landingDateExpires=1527038967; expires=Wed, 23-May-2018 01:29:27 GMT; path=/; domain=.whitesmoke.com

Set-Cookie: landingDateSetTime=1463966967; expires=Wed, 23-May-2018 01:29:27 GMT; path=/; domain=.whitesmoke.com

Set-Cookie: trail=1463966788:2875; expires=Wed, 23-May-2018 01:29:27 GMT; path=/; domain=.whitesmoke.com

Set-Cookie: trailExpires=1527038967; expires=Wed, 23-May-2018 01:29:27 GMT; path=/; domain=.whitesmoke.com

Set-Cookie: trailSetTime=1463966967; expires=Wed, 23-May-2018 01:29:27 GMT; path=/; domain=.whitesmoke.com

X-Powered-By: PHP/5.1.6

transfer-encoding: chunked

Connection: keep-alive

3790.. ..<!DOCTYPE html>..<html lang="en">..<head>.. <meta charset="utf-8">.. <meta http-equiv="X-UA-Compatible" content="IE=edge">.. <meta name="viewport" content="width=device-width, user-scalable=no,initial-scale=1.0, minimum-scale=1.0, maximum-scale=1.0" />...<title>Thank You For Downloading | World-Leading Language Solutions by WhiteSmoke</title>...<meta name="description" content="">...<meta name="author" content="World-Leading Language Solutions by WhiteSmoke">...<meta name="keywords" content="" />...<meta name="copyright" content="World-Leading Language Solutions by WhiteSmoke" />.........<meta itemprop="name" content="Thank You For Downloading">...<meta itemprop="description" content="">..........<meta name="twitter:title" content="Thank You For Downloading">...<meta name="twitter:description" content="">................<meta property="og:title" content="Thank You For Downloading" />...<meta property="og:type" content="article" />...<meta property="og:url" content="hXXp://VVV.whitesmoke.com/" />.....<meta property="og:description" content="" />...<meta property="og:site_name" content="WhiteSmoke" />...........<link rel="shortcut icon" href="hXXp://7b394543352b6cede2b5-6c7b7fd41e78078cd3df313882b331b1.r21.cf2.rackcdn.com/whitesmoke.ico" />.. <!-- Bootstra

<<< skipped >>>

GET /website2016/css/bxslider/jquery.bxslider.css HTTP/1.1

Accept: */*

Referer: hXXp://VVV.whitesmoke.com/postInstallation/?user_id=&dist_id=${DISTID}&installOption=0&offer=0&

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.whitesmoke.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Accept-Ranges: bytes

Content-Type: text/css

Date: Mon, 23 May 2016 01:29:27 GMT

Last-Modified: Fri, 04 Apr 2014 21:14:38 GMT

Server: Apache

Content-Length: 3836

Connection: keep-alive

/**. * BxSlider v4.1.2 - Fully loaded, responsive content slider. * http://bxslider.com. *. * Written by: Steven Wanderski, 2014. * hXXp://stevenwanderski.com. * (while drinking Belgian ales and listening to jazz). *. * CEO and founder of bxCreative, LTD. * hXXp://bxcreative.com. */.../** RESET AND LAYOUT.===================================*/...bx-wrapper {..position: relative;..margin: 0 auto 60px;..padding: 0;..*zoom: 1;.}...bx-wrapper img {..max-width: 100%;..display: block;.}../** THEME.===================================*/...bx-wrapper .bx-viewport {..-moz-box-shadow: 0 0 5px #ccc;..-webkit-box-shadow: 0 0 5px #ccc;..box-shadow: 0 0 5px #ccc;..border: 5px solid #fff;..left: -5px;..background: #fff;..../*fix other elements on the page moving (on Chrome)*/..-webkit-transform: translatez(0);..-moz-transform: translatez(0);. .-ms-transform: translatez(0);. .-o-transform: translatez(0);. .transform: translatez(0);.}...bx-wrapper .bx-pager,..bx-wrapper .bx-controls-auto {..position: absolute;..bottom: -30px;..width: 100%;.}../* LOADER */...bx-wrapper .bx-loading {..min-height: 50px;..background: url(images/bx_loader.gif) center center no-repeat #fff;..height: 100%;..width: 100%;..position: absolute;..top: 0;..left: 0;..z-index: 2000;.}../* PAGER */...bx-wrapper .bx-pager {..text-align: center;..font-size: .85em;..font-family: Arial;..font-weight: bold;..color: #666;..padding-top: 20px;.}...bx-wrapper .bx-pager .bx-pager-item,..bx-wrapper .bx-controls-auto .bx-controls-auto-item {..display: inline-block

<<< skipped >>>

GET /website2016/css/whitesmoke.css HTTP/1.1

Accept: */*

Referer: hXXp://VVV.whitesmoke.com/postInstallation/?user_id=&dist_id=${DISTID}&installOption=0&offer=0&

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.whitesmoke.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Accept-Ranges: bytes

Content-Type: text/css

Date: Mon, 23 May 2016 01:29:27 GMT

Last-Modified: Tue, 10 May 2016 13:35:15 GMT

Server: Apache

Content-Length: 47571

Connection: keep-alive

body {.. overflow-x: hidden;.. font-family: "Scada", "Roboto Slab", "Helvetica Neue", Helvetica, Arial, sans-serif;..}..#logo {...margin-top: -5px;.. width: 68%;..}..#test header {...padding-top:110px;..}..#firefox_thanks {...padding-top:200px;...padding-bottom:200px;..}..#firefox_thanks h1 {.....width:90%;.....padding-left:10px;.....padding-right:10px;.....margin-left:auto;.....margin-right:auto;....}...navbar-default {...background-color:#e7e7e7;...height:82px;...box-shadow: 0 5px 5px -7px #333 !important;..}...navbar-collapse{...background-color:#e7e7e7;..}...navbar-right .dropdown-menu {...right:-50px;..}...dropdown-menu>li>a {...color:#1c84c3;..}..nav li li {.. background:url('../img/homepage/header/menu/divider.png') no-repeat right;.. padding-left: 10px..}..nav .dropdown-menu li li{...padding-left:0px;..}..nav .dropdown-menu {...background-color:#e7e7e7;..}..nav ul li:last-child {.. background:none;..}...navbar-default .navbar-nav > li {...text-align:center;..}...navbar-default .navbar-nav > li > a{...color:#1c84c3;...padding-top:10px;...font-size:17px;...}...navbar-default .navbar-nav > li > a:hover{...color:#1c84c3;..}...navbar-toggle {...margin-top:22px !important;...margin-right:25px !important;..}..p {.. font-size: 14px;.. line-height: 1.75;..}..p.large {.. font-size: 16px;..}..a, a:hover, a:focus, a:active, a.active {.. outline: 0;..}..a {.. color: #1e83c4;..}..a:hover, a:focus, a:active, a.active {.. color: #fec503;..}..h1, h2, h3, h4,

<<< skipped >>>

GET /postInstallation/css/font-awesome/css/font-awesome.min.css HTTP/1.1

Accept: */*

Referer: hXXp://VVV.whitesmoke.com/postInstallation/?user_id=&dist_id=${DISTID}&installOption=0&offer=0&

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.whitesmoke.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Cache-Control: private, must-revalidate

Content-Type: text/html; charset=UTF-8

Date: Mon, 23 May 2016 01:29:28 GMT

P3P: CP="NOI NID ADMa OUR IND UNI COM NAV"

Server: Apache

Set-Cookie: SN4a76bf0fab3d8=usfaupclfqqc6ifploeum43i77; path=/

X-Powered-By: PHP/5.1.6

transfer-encoding: chunked

Connection: keep-alive

<<< skipped >>>

GET /website2016/css/fonts/glyphicons-halflings-regular.eot? HTTP/1.1

Accept: */*

Referer: hXXp://VVV.whitesmoke.com/postInstallation/?user_id=&dist_id=${DISTID}&installOption=0&offer=0&

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.whitesmoke.com

Connection: Keep-Alive

HTTP/1.1 404 Not Found

Cache-Control: private, must-revalidate

Content-Type: text/html; charset=UTF-8

Date: Mon, 23 May 2016 01:29:28 GMT

P3P: CP="NOI NID ADMa OUR IND UNI COM NAV"

Server: Apache

Set-Cookie: SN4a76bf0fab3d8=usfaupclfqqc6ifploeum43i77; path=/

Set-Cookie: trail=1463966788:2875,1463966790:708975; expires=Wed, 23-May-2018 01:29:28 GMT; path=/; domain=.whitesmoke.com

Set-Cookie: trailExpires=1527038968; expires=Wed, 23-May-2018 01:29:28 GMT; path=/; domain=.whitesmoke.com

Set-Cookie: trailSetTime=1463966968; expires=Wed, 23-May-2018 01:29:28 GMT; path=/; domain=.whitesmoke.com

X-Powered-By: PHP/5.1.6

transfer-encoding: chunked

Connection: keep-alive

311b.. ..<!DOCTYPE html>..<html lang="en">..<head>.. <meta charset="utf-8">.. <meta http-equiv="X-UA-Compatible" content="IE=edge">.. <meta name="viewport" content="width=device-width, user-scalable=no,initial-scale=1.0, minimum-scale=1.0, maximum-scale=1.0" />...<title>404 Not Found | World-Leading Language Solutions by WhiteSmoke</title>...<meta name="description" content="">...<meta name="author" content="World-Leading Language Solutions by WhiteSmoke">...<meta name="keywords" content="" />...<meta name="copyright" content="World-Leading Language Solutions by WhiteSmoke" />.........<meta itemprop="name" content="404 Not Found">...<meta itemprop="description" content="">..........<meta name="twitter:title" content="404 Not Found">...<meta name="twitter:description" content="">................<meta property="og:title" content="404 Not Found" />...<meta property="og:type" content="article" />...<meta property="og:url" content="hXXp://VVV.whitesmoke.com/" />.....<meta property="og:description" content="" />...<meta property="og:site_name" content="WhiteSmoke" />.. .. <meta http-equiv="refresh" content="5; url=hXXp://VVV.whitesmoke.com/">.......<link rel="shortcut icon" href="hXXp://7b394543352b6cede2b5-6c7b7fd41e78078cd3df313882b331b1.r21.cf2.rackcdn.co

<<< skipped >>>

GET /pix/1972?type=pos&href=http://VVV.whitesmoke.com/postInstallation/?user_id=&dist_id=${DISTID}&installOption=0&offer=0& HTTP/1.1

Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/x-ms-application, application/x-ms-xbap, application/vnd.ms-xpsdocument, application/xaml xml, */*

Referer: hXXp://VVV.whitesmoke.com/postInstallation/?user_id=&dist_id=${DISTID}&installOption=0&offer=0&

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: tags.mediaforge.com

Connection: Keep-Alive

Cookie: uID=hf0NUuYRhSCq1zSLSGbwdw==; uid3=520DFD85208511E68B34D7AA77F06648; SERVERID="prod,0(i-50cbd997)tags_c"

HTTP/1.1 200 OK

Accept-Ranges: bytes

Cache-Control: no-store

Content-Length: 6932

Content-Type: text/html

Last-Modified: Fri, 20 May 2016 22:37:41 GMT

P3P: policyref="/p3p.xml", CP="DSP NOI ADM PSAo PSDo OUR BUS NAV COM UNI INT"

Pragma: no-cache

Set-Cookie: uID=hf0NUuYRhSCq1zSLSGbwdw==; Expires=Tue, 23 May 2017 01:26:06 UTC; Domain=.mediaforge.com; Path=/

Set-Cookie: uid3=520DFD85208511E68B34D7AA77F06648; Expires=Tue, 23 May 2017 01:26:06 UTC; Domain=.mediaforge.com; Path=/

Date: Mon, 23 May 2016 01:26:06 GMT

<html>.<head>.<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">.</head>.<body>.<div id="mf_pix_div"></div>.<script type="text/javascript">var _dfm=_dfm||[],triggit_advertiser="",triggit_segments="",triggit_data="",triggit_conversion_tag="",triggit_conversion_values="";!function(e){var t={},r={},i="mf_pix_div";setUrlPixelDrops=function(){r={}},setParametersDefault=function(){t.orderNumber="",t.prodID="",t.catID="",t.cart="",t.price="",t.href="",t.referrer="",t.nan_type="visit",t.nan_name="landing",t.ts=(new Date).getTime(),t.uid=translateUID(),t.uid3=readCookie("uid3"),t.uid1="",t.deepForest={acctuser:"",acctpass:""},t.cid="",t.triggit={twoCharacter:"",conversionTag:"",homepageUrl:""}},createCookie=function(e,t,r){if(r){var i=new Date;i.setTime(i.getTime() 24*r*60*60*1e3);var a="; expires=" i.toGMTString()}else var a="";document.cookie=e "=" t a ";path=/;domain=.mediaforge.com;"},readCookie=function(t){for(var r=e.cookie.split(";"),i="",a=0;a<r.length;a ){for(var n=r[a];" "==n.charAt(0);)n=n.substring(1,n.length);if(0==n.indexOf(t)){i=n.substring(t.length 1);break}}return i},cleanCookies=function(t){for(var r=e.cookie.split(";"),i=[],a=12,n=0;n<r.length;n ){for(var o=r[n];" "==o.charAt(0);)o=o.substring(1,o.length);if(0==o.indexOf(t)){i=o.substring(t.length 1).split("|");break}}for(var c={},s=0;s<i.length;s ){var d=i[s].indexOf(",");if(-1!=d){var g=i[s].replace(/,{2,}/g,",");","==g.charAt(g.length-1)&&(g=g.slice(0,-1));var m=g.substr(0

<<< skipped >>>

GET /js/trdflame.js?aid=142&uid=156&baseurl=hXXp://prod.trendemon.com/&appid=208770359181748&lang=en HTTP/1.1

Accept: */*

Referer: hXXp://VVV.whitesmoke.com/postInstallation/?user_id=&dist_id=${DISTID}&installOption=0&offer=0&

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: prod.trendemon.com

Connection: Keep-Alive

HTTP/1.1 302 Found

Date: Mon, 23 May 2016 01:26:05 GMT

Server: Apache/2.4.18 (Amazon) OpenSSL/1.0.1k-fips PHP/5.5.31

Location: hXXp://prod.trendemon.com/apis/loadflame/main_flame_js?aid=142&uid=156&baseurl=hXXp://prod.trendemon.com/&appid=208770359181748&lang=en

Content-Length: 335

Keep-Alive: timeout=2, max=100

Connection: Keep-Alive

Content-Type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>302 Found</title>.</head><body>.<h1>Found</h1>.<p>The document has moved <a href="hXXp://prod.trendemon.com/apis/loadflame/main_flame_js?aid=142&uid=156&baseurl=hXXp://prod.trendemon.com/&appid=208770359181748&lang=en">here</a>.</p>.</body></html>.....

GET /apis/loadflame/main_flame_js?aid=142&uid=156&baseurl=hXXp://prod.trendemon.com/&appid=208770359181748&lang=en HTTP/1.1

Accept: */*

Referer: hXXp://VVV.whitesmoke.com/postInstallation/?user_id=&dist_id=${DISTID}&installOption=0&offer=0&

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: prod.trendemon.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Date: Mon, 23 May 2016 01:26:06 GMT

Server: Apache/2.4.18 (Amazon) OpenSSL/1.0.1k-fips PHP/5.5.31

X-Powered-By: PHP/5.5.31

Set-Cookie: cisession=a:4:{s:10:"session_id";s:32:"f99a01c97e687b5edd515dbb38c4bff7";s:10:"ip_address";s:14:"194.242.96.218";s:10:"user_agent";s:50:"Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;";s:13:"last_activity";i:1463966766;}aa9247a1d1be2992b578225ef793e554; expires=Mon, 23-May-2016 03:26:06 GMT; Max-Age=7200; path=/

Cache-Control: max-age=86400

Expires: Tue, 24 May 2016 01:26:06 GMT

Keep-Alive: timeout=2, max=99

Connection: Keep-Alive

Transfer-Encoding: chunked

Content-Type: application/x-javascript; charset=UTF-8

22ae6../*! jQuery v1.9.1 | (c) 2005, 2012 jQuery Foundation, Inc. | jquery.org/license.//@ sourceMappingURL=jquery.min.map.*/(function(e,t){var n,r,i=typeof t,o=e.document,a=e.location,s=e.jQuery,u=e.$,l={},c=[],p="1.9.1",f=c.concat,d=c.push,h=c.slice,g=c.indexOf,m=l.toString,y=l.hasOwnProperty,v=p.trim,b=function(e,t){return new b.fn.init(e,t,r)},x=/[ -]?(?:\d*\.|)\d (?:[eE][ -]?\d |)/.source,w=/\S /g,T=/^[\s\uFEFF\xA0] |[\s\uFEFF\xA0] $/g,N=/^(?:(<[\w\W] >)[^>]*|#([\w-]*))$/,C=/^<(\w )\s*\/?>(?:<\/\1>|)$/,k=/^[\],:{}\s]*$/,E=/(?:^|:|,)(?:\s*\[) /g,S=/\\(?:["\\\/bfnrt]|u[\da-fA-F]{4})/g,A=/"[^"\\\r\n]*"|true|false|null|-?(?:\d \.|)\d (?:[eE][ -]?\d |)/g,j=/^-ms-/,D=/-([\da-z])/gi,L=function(e,t){return t.toUpperCase()},H=function(e){(o.addEventListener||"load"===e.type||"complete"===o.readyState)&&(q(),b.ready())},q=function(){o.addEventListener?(o.removeEventListener("DOMContentLoaded",H,!1),e.removeEventListener("load",H,!1)):(o.detachEvent("onreadystatechange",H),e.detachEvent("onload",H))};b.fn=b.prototype={jquery:p,constructor:b,init:function(e,n,r){var i,a;if(!e)return this;if("string"==typeof e){if(i="<"===e.charAt(0)&&">"===e.charAt(e.length-1)&&e.length>=3?[null,e,null]:N.exec(e),!i||!i[1]&&n)return!n||n.jquery?(n||r).find(e):this.constructor(n).find(e);if(i[1]){if(n=n instanceof b?n[0]:n,b.merge(this,b.parseHTML(i[1],n&&n.nodeType?n.ownerDocument||n:o,!0)),C.test(i[1])&&b.isPlainObject(n))for(i in n)b.isFunction(this[i])?this[i](n[i]):this.attr(i,n[i]);return this}if(a=o

<<< skipped >>>

Map

The Trojan connects to the servers at the folowing location(s):

Strings from Dumps

wsget.exe_432:

.text

`.rdata

@.data

.rsrc

@.reloc

Please contact the application's support team for more information.

- Attempt to initialize the CRT more than once.

- CRT not initialized

- floating point support not loaded

GetProcessWindowStation

USER32.DLL

GetProcessHeap

KERNEL32.dll

USER32.dll

SHELL32.dll

HttpSendRequestW

HttpOpenRequestW

InternetCrackUrlW

HttpQueryInfoW

WININET.dll

SHLWAPI.dll

GetCPInfo

GetConsoleOutputCP

hXXp://get.whitesmoke.com/TranslatorTools/WhiteSmokeTranslator_rev1.exe

hXXp://VVV.symantec.com/index.jsp

hXXp://get.whitesmoke.com/TranslatorTools/whitesmoke-silent.exe

Global\WST2010_{58343C24-CB4B-4a57-9B4D-E3DD88463B62}_INITIALIZE

@"%s"%s

~nsu.tmp

.part

@Global\WST2010_Feature_%d

Global\WST2010_WSGet_{121FE16E-C44A-4d1f-8C14-514C77C2C29E}

Global\{B94C8223-660A-4e0b-9D09-F1A4368934A1}

KERNEL32.DLL

mscoree.dll

C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\~nsu.tmp\wsget.exe

WhiteSmokeTranslator_rev1.exe_1500:

.text

`.rdata

@.data

.ndata

.rsrc

@.reloc

uDSSh

logging set to %d

settings logging to %d

created uninstaller: %d, "%s"

WriteReg: error creating key "%s\%s"

WriteReg: error writing into "%s\%s" "%s"

WriteRegBin: "%s\%s" "%s"="%s"

WriteRegDWORD: "%s\%s" "%s"="0xx"

WriteRegExpandStr: "%s\%s" "%s"="%s"

WriteRegStr: "%s\%s" "%s"="%s"

DeleteRegKey: "%s\%s"

DeleteRegValue: "%s\%s" "%s"

WriteINIStr: wrote [%s] %s=%s in %s

CopyFiles "%s"->"%s"

CreateShortCut: out: "%s", in: "%s %s", icon: %s,%d, sw=%d, hk=%d

Error registering DLL: Could not load %s

Error registering DLL: %s not found in %s

GetTTFFontName(%s) returned %s

GetTTFVersionString(%s) returned %s

Exec: failed createprocess ("%s")

Exec: success ("%s")

Exec: command="%s"

ExecShell: success ("%s": file:"%s" params:"%s")

ExecShell: warning: error ("%s": file:"%s" params:"%s")=%d

Exch: stack

RMDir: "%s"

MessageBox: %d,"%s"

Delete: "%s"

File: wrote %d to "%s"

File: skipped: "%s" (overwriteflag=%d)

File: error creating "%s"

File: overwriteflag=%d, allowskipfilesflag=%d, name="%s"

Rename failed: %s

Rename on reboot: %s

Rename: %s

IfFileExists: file "%s" does not exist, jumping %d

IfFileExists: file "%s" exists, jumping %d

CreateDirectory: "%s" created

CreateDirectory: can't create "%s" - a file already exists

CreateDirectory: can't create "%s" (err=%d)

CreateDirectory: "%s" (%d)

SetFileAttributes: "%s":X

Sleep(%d)

detailprint: %s

Call: %d

Aborting: "%s"

Jump: %d

verifying installer: %d%%

unpacking data: %d%%

... %d%%

hXXp://nsis.sf.net/NSIS_Error

~nsu.tmp

install.log

%u.%u%s%s

Skipping section: "%s"

Section: "%s"

New install of "%s" to "%s"

.DEFAULT\Control Panel\International

RegDeleteKeyExA

Software\Microsoft\Windows\CurrentVersion

*?|/":

invalid registry key

HKEY_DYN_DATA

HKEY_CURRENT_CONFIG

HKEY_PERFORMANCE_DATA

HKEY_USERS

HKEY_LOCAL_MACHINE

HKEY_CURRENT_USER

HKEY_CLASSES_ROOT

x%c

Kernel32.DLL

PSAPI.DLL

%s=%s

RMDir: RemoveDirectory failed("%s")

RMDir: RemoveDirectory on Reboot("%s")

RMDir: RemoveDirectory("%s")

RMDir: RemoveDirectory invalid input("%s")

Delete: DeleteFile failed("%s")

Delete: DeleteFile on Reboot("%s")

Delete: DeleteFile("%s")

%s: failed opening file "%s"

GetWindowsDirectoryA

KERNEL32.dll

ExitWindowsEx

GetAsyncKeyState

USER32.dll

GDI32.dll

SHFileOperationA

ShellExecuteA

SHELL32.dll

RegDeleteKeyA

RegCloseKey

RegEnumKeyA

RegOpenKeyExA

RegCreateKeyExA

ADVAPI32.dll

COMCTL32.dll

ole32.dll

VERSION.dll

CUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsx6.tmp\nsDialogs.dll

s.exe" targetdir="%Program Files%\WhiteSmoke" silent

C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsx6.tmp\nsDialogs.dll

C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsx6.tmp

modern-wizard.bmp

i%Sy\K

%s<.>T

.reloc

callback%d

kernel32.dll

System.dll

2#2'2 2/23272;2

4.3 Licensor is not responsible for problems associated with or caused by incompatible operating systems or equipment, or for problems in the interaction of the Software with software not furnished by Licensor. DURING THE INSTALLATION PROCESS OF THE TRIAL VERSION OF THE SOFTWARE, THE USER HAS AN OPTION OF INSTALLING A TOOLBAR FOR USE WITH THE SOFTWARE. INSTALLING THE TOOLBAR TOGETHER WITH THE TRIAL VERSION OF THE SOFTWARE IS OPTIONAL. . In the course of installation process, Licensees will be prompted to provide an email address.

(v) condition the continuation of the License on your accepting Product improvements, corrections, adaptations, or changes, or accepting revised or new terms of License, as will be made available on or through the WhiteSmoke website. WhiteSmoke shall notify its users through the Software, by e-mail or through the WhiteSmoke website of changes in this Agreement.

5.2 IN NO EVENT SHALL LICENSOR BE LIABLE TO YOU OR ANY THIRD PARTY FOR THE USE OR INABILITY TO USE, OR THE QUALITY OF, OF THE SOFTWARE OR SERVICES. IN NO EVENT SHALL LICENSOR BE LIABLE FOR ANY DIRECT OR INDIRECT, INCIDENTAL, CONSEQUENTIAL, SPECIAL, PUNITIVE OR EXEMPLARY LOSS OR DAMAGE WHATSOEVER (INCLUDING, WITHOUT LIMITATION, DAMAGES FOR LOSS OF DATA, DELAYS, LOSS OF BUSINESS OR PROFITS OR BUSINESS INTERRUPTION), OR FOR LOST DATA, DAMAGE TO OTHER SOFTWARE, COMPUTER FAILURE, OR MALFUNCTION, OR DOWNTIME, REGARDLESS OF WHETHER LICENSOR HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES OR NOT

nsx6.tmp

File: skipped: "C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsx6.tmp\nsDialogs.dll" (overwriteflag=1)

p\nsDialogs.dll"

OCALS~1\Temp\nsx6.tmp\ioSpecial.ini

OCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsx6.tmp

84542444

"C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\~nsu.tmp\WhiteSmokeTranslator_rev1.exe" "%Program Files%\WhiteSmoke Translator"

%Program Files%\WhiteSmoke

C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\WhiteSmoke

C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\~nsu.tmp

WhiteSmokeTranslator_rev1.exe

CUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsr3.tmp

C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\

C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\~nsu.tmp\WhiteSmokeTranslator_rev1.exe

1779041391

1114350

1310942

1638692

Nullsoft Install System v2.46.4-ANSI

04090000

1.00.6034.13143

iexplore.exe_1964:

%?9-*09,*19}*09

.text

`.data

.rsrc

msvcrt.dll

KERNEL32.dll

NTDLL.DLL

USER32.dll

SHLWAPI.dll

SHDOCVW.dll

Software\Microsoft\Windows\CurrentVersion\Explorer\BrowseNewProcess

IE-X-X

rsabase.dll

System\CurrentControlSet\Control\Windows

dw15 -x -s %u

watson.microsoft.com

IEWatsonURL

%s -h %u

iedw.exe

Iexplore.XPExceptionFilter

jscript.DLL

mshtml.dll

mlang.dll

urlmon.dll

wininet.dll

shdocvw.DLL

browseui.DLL

comctl32.DLL

IEXPLORE.EXE

iexplore.pdb

ADVAPI32.dll

MsgWaitForMultipleObjects

IExplorer.EXE

IIIIIB(II<.fg>

7?_____ZZSSH%

)z.UUUUUUUU

,....Qym

````2```

{.QLQIIIKGKGKGKGKGKG

;33;33;0

8888880

8887080

browseui.dll

shdocvw.dll

6.00.2900.5512 (xpsp.080413-2105)

Windows

Operating System

6.00.2900.5512

WSTray.exe_1300:

.text

`.rdata

@.data

.rsrc

8%uNP

QSShH

|$0)|$,3

1 23 456

[

<.udj>

|$ht%S

L$DtCP

\$43\$

\$,3\$4#

.LwH'

uÂ0t

FTPR

q%D,3

kernel32.dll

hXXps://

hXXp://

c4aeUs/8CAABCWmgzMUFZJlNZbjaSrAABWf/f/2djtuOzXoASASoIBSICQiQAkQwwIiQwfELn6dcGsAD5EGoapmkIyYTJo9IyaMQMnqMmJo9JiMmBo9CjaT1DmmIyMmmTQDIaMhkyAAAGRpkaBhDIEipT0mg00GmgaaA0aaAyAGgAGIBpjRpJrgEkikwCFoAbAUppQsSksIWkTWiBggfJK2mXZCMdjYBmsDLYrrVCGAjGAw4MmagG3aUCA4C/whBwZmr63cX62EuXIwMQ9qiAOrHmJ3Hnwc0GnodiulxTYn1uuc9Ja2dg/m peBS5mlWiBQ53tFtg6Xg3YwNTNetgah9vkHNCiZn ROQoqpklqO/hqb1M74elMO2Pw/jzYdCxSGDoOPC/EAomhJYN6LIuSFE0BGwRgO8wLjQr7FfYJB/i7kinChINxtJVgA==

c4aeUs 0CAABCWmgzMUFZJlNZfAS/SQABXv/n/ /jImMyVAAAEBAAIAACxCCAhQIgIFIGJen3EbAA8RiNJJkaBoBppoyGgAGgxA0zTUGakVPapoZMIaGgaNNNA0AZNBiGGkppoZGhgRpoBowmRiYEAD1AZACbYJNqQ21AmoG1AmDgUAgGwTdgcCqnCVQkE6Qkp015KVKpNKQ2gSYMpOeLYftSBPaASSrkDasShq3uwmtA0 sggCnMqDIFEc5iYwHTz3EOmPu 2sAu0wsEtwRR8sCaiJmrqVxu1/vmxLBF9Ph0QITcgRb8wrdXkPWp 7i76ip0MxMRq7OqjIAiLaYAAbMF710VhaDKFVH2SKc5WPipEwSapU0q7iFUPtBc9oEAcwIAHMAcxAiH8XckU4UJB8BL9JA=

c4aeUswIDAABCWmgzMUFZJlNZ l25SAABWX//52ZromE2VoISECIIaC4SWiAAgYAADCggJDDeAxf/9wKwANkhhPU9E0AAA00AANAAAyGgZPSYZIHNGjQ0wgGmBNNAGQ0MQBoxGhgjIAJFJQ0aAADTI9QAGQ0NGhoANAAbCjaYkhDYAiPgoRst3aKLbQLCx4IkapxQJhgMaJnUYrluBKwtMdAgGdlQI6/L1flexRFenEi8KKT6qAErq7oOmzCDDEj/Dtzh7r0tKm2xDCWkQWV0IfywCKkZ0uNKQzw8cXJdM1YwpdDsP2i0cIS4LiNcAR3nGRSTmDID4fht bgl/Y/exeT71WLAnuRSdpIRHCMGbc nKAKZiSSnaAR/i7kinChIfS7cpAA=

c4aeUswIDAABCWmgzMUFZJlNZXc1e0wABWf//52frMmE2VoIxACoIiCIC0iSggBgIBUAiJDBUAtf5/4awANkhVNqaaGRoAAAADQGgNA0BkyYaRtQaHNMRkZNMmgGQ0ZDJkAAAMjTI0DCGQJFKjRpoNAaANNNBkGmQND1Bo0GgBoZMajaaSQhtJIJ/FhSV5yBSm2ApeVALbDUvoF4aTGK45rFYdtharwS0ZkDen9cVdxVccJJVz4Bwzkey s5LihRTqDNWbJbZU9HtWBmJkA0WyhB0winSA2REgUYctGqoNNcCzK4c4BA5iJe/BHpUkVwKjFJgCYCsRhcHFxDLE4/8kVYwTvtqdZyJeDHQgSo8Slf3LvVYLpIRQcedeSSI2JJKJiBH LuSKcKEgu5q9pg=

c4aeUs4UBAABCWmgzMUFZJlNZwr1xdwAAv HQYAAAAKAAAgAgAAACIAAxDAEfqRMlzcUFwCUDpvuy/i7kinChIYV64u4=

c4aeUswIDAABCWmgzMUFZJlNZNC4mNAABWf//92fjIvE2XApQCQAIQCJCQiQggAIAAiBgYiBUAmf7/4awANkhVMR6mhoAHqBoaANAA02poDQYxQ9Q0OMjTJiaDJkwmmQMhoDQGmTQwAmgMJFST0h6gaeoGg0yAyAaaeoMgGgAbRo1I3AgEhtIoNABZpX4j0hSyxpIjeiwotbNCBYk0NgTOrHAl5svsleOMWczasydR 99HIE1IwZ0AWGHD4Gm26bPVU8dxmDO7DMqPoeMAGpYonkisHeiCQ9pmMJ8ju1oyZFPiwWyzAgrb bprwQEeRUcRftBXupQiIvpGQHc7kX y1ackU /Bp5WvPghml5s YcKibZvT6uFJIxMSShaEE7El7NI8GCA/xdyRThQkDQuJjQ=

c4aeUswIDAABCWmgzMUFZJlNZOYxIOQABWH//92ZrouE2VoISECIIaC4SWiAAgYAADiggZDDeAxf/9wKwANkhhM1GgaAADQAA0A0ABoMhtExMCBwNBpkNNGhhAyGhgjQ0yaNAMgxAAGgkUlBoaBoANB6gAAPUaGgAA0AD1MylJwEkIbQRMSA3aEbK1ki4baBXd/BFdrIigTDAY0TPJpQF/VoFhhzsdAgGMyOTi6fyTgtbYFGENpOhBDjzh1ENXmg47kskFRFXexglwgUyiuo4AXC2plcAD8iO32bVNZW5lPQcDOIQIjCBnhPaSLWJTTCPbLrDgaurqppPPYz8lhD5b69j7j9KlGfa2IqM/7FL1EpESDBmrPmSgCrtJJWjSAmYJTNCnYID/F3JFOFCQOYxIOQ=

c4aeUswIDAABCWmgzMUFZJlNZVbeq6AABWX//92fjKuE2VoI3ASIIBqBCwiYRgCgEmqRiZDhYAhf598KwANkRCRTNNBGmhkYj0amnqYmBGAgGQyaep6mbVPIYTT0gcaGTTTJoAGCANBk0AAyaAAAGTIBoJFJRoAAANAAZGhkDRoA0AA0BkZD1F44AkBE0gIMSQbe7aWZSr0rUYCur2AVmGPFAjaVGEBfjyWik/thWj6ok7EgGMzN3 zikFFhI8yACsy6vqlqVS k1hI3CsfxvNF1pGRZIFpN1w65IMgNp03E7 6UBQV6Um1Z7URGSXl98NllBgn4SR9HAu2n/B/rPFURKsufWI9YbhF2wWCQlbJuhNbVgR27joe5o9tx/S69B7QI/sOPCrM1iIiBiAICOW0II2gCNgH8wAP8XckU4UJBVt6ro

c4aeUs4UBAABCWmgzMUFZJlNZl7vlQgAAone//9/u7IDACI0ACDAAEgAIAFYLAKAAAJAAizuv/rAA8jCJomSY1HqBo0GgBoMgDQNANPSBqn6JTag0AAAAAAAAAAGmqTQMgBo0AAAGmgNAGhjUeLiB0uRS4GhrXkVgQzFRxr55XSDCVjAhAL9AS RAGkJcXCwU4brWJeQNMdiBSJpAUqRCIDSAr5VCRDJSIEDChnZHScRcuTt8hw8/C/hlUYWJmV lp9Olb98qDnA5qlnJLbSWSB1DTbONZomDhJgP9Gtniu5QAnXgUPaYHNQme/JvWmwQJBeYr Y4eaLDQElM9mSoVL7sNARc3MwQiCRTVfnd7shPJxqajAPkB8pk9rIOJQRLrQkAfoKtSCOIikJCiAl8ogAV/F3JFOFCQl7vlQg=

c4aeUs4UBAABCWmgzMUFZJlNZ4XhUsgAAoP f/X/0aIqCCAEbxaQAOAQCAGYBRiWAggqCihu/57AA2SGRkwnqGRoDRoA0AAGmmmJtTCGJk/UhwDCMJpiGAQDIAYRpkyYRgIaDEiU8oaepk9IGjTTTINBoANBhMTQZNP0okY2A20BsRsTHosEiWTIskki5GRJEiRF650SyBilYCg5hTiYSJ6cgpmBESIc/S1c1ytCSZiQXPKjTLEkpdOOAIgZhYNDB5lakMgehfqPTzUH0ZDC5HCR52hu HG9u8RK68LAWEBrCZtqnTTe0Ebqyg/V9U9sgiZpiSKIRCVPl8y1qO5c0zCrqSzzaAL5bfs zlYHMgBEjBfNpiJ/Fp0HogCEsHAAW0SYIAmf/F3JFOFCQ4XhUsg==

c4aeUs4UBAABCWmgzMUFZJlNZBIkEowAApX ////07cGIsAARxeAIMAACAACMSgBsoBgIEAgPmvWvsAD2xCImmoNNNAeoAAADQA00aBtTTQGTTQiaaUPIQA0BoAAAAAAAAAGmkUnlMCYmBMmQxBo000yaZNGCYmAam0ciY6UrOEAkQEFCcAJY64rgJiEAQREpLYxCk6lEhBIYqulBzlpDC0iCbRcaogOqrCoDkAq6QsHpcbCGUiAxhCEMowERFPh KmPGggquZZKJbUdh96kk9jzABeb4aefgHM2bYwovfWSRDomW/MrslyGqP48GIAE y18cV5QpjKtVMHBqSvr2TEyc71NqjXYY4yA6Tfq0sj1lDqewikL42bs6UHHfxBN4IJAkVqOZofqcWPb DEeKAezygJJKBB/kXz0FAnWQj5QdhCAlAj/IXckU4UJAEiQSjA==

pqTkLrZ8ugJ2hzaeXqaMptKyT9ryy82rgbwoVmvTfdFM2CVLqDNx6HrUrLLHeIXp4srmrF2TvGn1/6zjI6FiLmgrwRCQbzpf5OK/c2IFQ031J1h2dy2lY4MLzN/FGJWXZpJKIDXBGScfIOzC0beofJe9zXOXyaP9jcyh2KZPnnyfUdzz79 b uzK6 b0/k/lM64OPl69 Lg6/bP Twn2/V593T4IgX/qyK5H5QhASDqlhtXhRWQN3D/w0aIr9PPzVDdcSceAX lkhwGuOCUorCBA8VrIgdgh0UvmJn3lQnkCgIGAkouwUgfM0fAjZ81NE7/QqzdRMv317yZCO4j5L8nK pgF/r QsXulfDy6T6F/K4tLUkNsduNM/1FNevHAPTf 3Nc/5/l4vj E

6s jBRdAvnbfzVLwUXZNX9LpMvLe5GIoYAAtsgalnJb5JPexKVJq7zedLn227M /1Pq2itl8KpOaHofZSnFgrs 9 0YmIAA9WfFm6NHyvDFZrl81aacFqOivfQc4mfAmYGaW2 Q tUP/936/vzpkQgxpNDi0imqzo2MeqPVtDeFGnv/S9 EhhlmNfIvxiEBi3z4Zkq1Cv447P6esshy5N3b3NV6cQu6QH4AJUWjX9SnMUD0nm7D945qd8TtTuMhzyv7UFQj7HFOvNw7qRQeaqQ6T3YJePYKU6xZ7pZL84voKgIMP3Z9R4TmekOQ3b07MQckzKcpHYxydOn/RuYgcFOQzZmw2i2srbeGogEGZYzVkvSxjz1Gow25sEmqt2/e9mVuhgAK1r70z5j3

HnNMlW7XpLdkEobelH2jeo 3tGM2sMaak3uOiz276Czw InQTAgh6ZXm9NFnnZxkU2Z8dJm6q8g8Pda3Qhy7UkVbDz9apgdDu6/y8/cOsFhxnGSGHsvAgNAm8K7HDpdxd1Fby4tJSMc5UZcYRKFODNLt lbV3Imnht8x/s4l7Awl2ARm5NuVAySmOa4oxzuBlq1oFAy1WA4mzbunZk2eZ56Gc1ZxD5XU0kPFQmdvlt2dGMKzwkDhnm74rlDx24UWqge1MF35HLqiFvXPyOajYhbR8Tq7TR7F6RpLctsEqRdzc2oTi kyMlNVQktfb8Zy7VSHNTXeuYdw47qpcpd8uZuuKYmf7d11NjlqSU2BXuPuqcpGJJSiK9TblPUq1pirUdpa3KxAS inOVvB

JT0QJx0aRSeObJC2aHmMzUQUQg9DDtL6gUFmRV88UhsX/ihUKqPolI4oit10kENtoue4k0bGqko8HzLMvoIJIM29xKz0 LHYJhs8xWHq32vaSZ o4mbT4 vTSx4LEoRqRL2tEZTGaSGM VZeMtjJgaggY 3reAzDdtUGmyYr/HQ/9Fwn1V/Z2XWs2cMNrQ3hj6zfhlqm7W9olkq3Lhd52H06F1LwLLMJcvKhEnNGVzVY5BorZZ/d4m7ZTrCgKVSAH2hfRnMRmqOI0qEBAyYQiNZFJ11HGCmEuwxW1HOeejjsYZSX0Z22Ms4r3zOYgczmLn0SQXW9Wk0YxCgni8K/hHGldWJSC6O3tTmiaVdBLS4JYBbzz85GdkNnUAla9HKeYMBlQ8CEOvsiaASt

sTmsf6vP4Fjm ZuazIipNibDXW9RgURU8uIY PcadwN5ThjYxiFn73s7TYVBW5iEL1NZotVlVIph4NnCqXMTXyVBBnr/Iz3q8taLAuTa1cxbiBiYK143CxsjU17NpWY4gQVCAxHLHOE4DkFICXlu6sJVuoAK5X/W54L1iZ3lEOBixwLi00xnx4AFeEBO2EIggfZ78iMHcZ7962atsNF5FUABhDM/6Nuf5dWlsVpZ4A7Wtby4KcBg6j2PHkQEXekmUQZ0iym5jiiCeP5m6t3LMtlJdwCYK00sFVgX1NPE tRU085leqABgr UtSqoPEbzwpU5A6KgAPxKWC4d9bc8tk1UnqkyVm8L4stA5pSsqBKeyXMPdY6qQjQYODzzs2 LW9cYqJI0Fpr6WBZa

RHfKmMUdiq OcmDHeKIhBKCxDBzHiCE0ajMCcnn2atabvhrEFox/Hj1UmmeqRb77qn5W1MGtXntnItb3VKjITAo4gY0gRgOO9qL469lUYxoYicRRRobQN jl5ti7GSisCQgMGLy4rqT1ROqciuTAYEUn3CvLv2zTXpfbKXfOMri6orgXdXaIecyoJBiqYQqr4vzzrAY/g1ACW1vbV6efKotUslHFtFPqXTpdD9TTUWQaG0GTCfTMyI4b4enXNat5W0J1UUWstvMZQAhR2ceFpQEYuz8TOCFlt4keuHKsJ556vNttDyoxpSTZW7ijbaE03TFBDw0ITajSm1qqTapvIUIUeKqpTZHXsOquJ6edPO9RQ02oLVJziQjWBveZGhUnIrIFD5FjKjx6j8Jk

w7nopW2B6y1vPsOs7CB/u4vdXL/K5b/qf5N2/BtAH/ZGgNGAaUeUpJsDdikoSf1dxu5LQhW6/uObR fm77B4bNAv0BGMcNQGa10GNTzGB/B/Of2/7K/VtSbA/fplYMfR6lBX1xPF3AeiSwEb/QkpSMgNUQYcBiT8U08bEGKyyijuKIpt lqd/Ac4flDaME/LND/wus63QZNkcpih9OX/rX4Nu8dYtYZEQfJufnxWhBmBVVcKH1i/lP8sB8rE8BGG1 3Ce Ab06q0Y2qbfuNJQN1 bpfrV3sb4HXcxME0nKldXUwHn9pgVT/ LuSKcKEgHvHUzA==

EuRk9sGR7k2ihi6bUTXn25vxeM4O8Q/B9GKDAKOLeUriUCDVYNUAAFL SdJzCjOkQouPzHHUiMIO7tLMh5zko836S737ZyVD2fgXfkYBcyCYPE6ywfrxjTWtKNrZqBk588dOMdLO30wAEIEd8TchlQ/1xNdYlIMt1VCQRTc0OCuZcvcQWSyzx/f H3l hRQrEpuZUT16bIvdde0TCYm7g9q6obHV9817yv6CuzNP3DD80n6m 8 SvOmFwQhAGvTdjRwMSlI0sqLS2EWkcycXKnz7kmg4OKziHmeHk23Rmykofwb3qR7qWN0N0gwqRoY6SpjDuRZKqF3WfQRC15R5cJEl6w5Aa8D0X039KShCEAB0BqUd45otMk/qOP69kOxH6UbfVoqVivR46WTC

nvM0VUPa4j5HkwLpJSBkFhJidivaXIIWS7ucoobwxrmLOtn9ONXcBqO/Msco9Vx8yhdx bNemCtC9VUdpHR0Tp3en0Pd1aRlnq1EDU6vbZ4ynRhlvz4iK3pO9qdfX7jbrdyECoT59Y8LiWr 9JpDGUwX8oxrdg1LTY/g9HCzaY8PGM6YtwvL2e UiudeC5yLo68n6gmELX2h74lXr8twjuLwmkHIGOxX RMEsRK5kbdLKkhZdWYk7ary4SHCOucVKE0nMRegQAqXYed4V3PZKZvlGpLvEl11Wc24ErV81vp2eT46tc64s T5xBOiIt1yp/rTh6Lpy50mUyAauYT0n3cAhLHheXg4yQ8jmX0Yg/l9mxgMh7t0eOhNGLups0V4xcWxnn5Y5Oe0dfLL

bX73mP0weJOqLgv YhZzg6oWfmmkhnCII0RB2hONpu3kC5O5UPH wbujDGuKWXGUapGedouqhZwoOP64SH9lOK biqfahd6OlA2P1zscvS0BjgE/7A2QPBhm6pwkEk/kIJ9MpCtMqQ7pYNSYfF59ddyVY4Lhe26 leNmb1Rh he/iPOPENqWMV3k1TFfVDvlLFiUea7Q7J5xF6QHsMKqUrIN24Mtb1AtK6QgBpXXruuhS/CINTC65IQsy4U zvbFBniVoa/XSQkZjRaqsuXEpEPmpo diByUmz8hws5ZTReunUfwRm5tlv6qHynkXB LfYjMYkidK8V2udpt2ejHCrw6UNLiTzXCaL0oG8eVtOcWH0KfKTU/NyTtzuJ0JTbEym1HX9MwDOfGF5oO

B1lCiBh ddG5DyFl7cmDe0HhSo4NxJrUcZkcslyysyVidPrZW9waKWb v3x BxdTXp1qnUVfFPGbwyhfqNR AoHNFtW0jnbf0eh7wH6mib/3u4V249pGwU34 1RD4 S6a5zZZ2to2TglF7xevY9jg58yu5v6yZ Rsk321Tw01MFNsHnzHjsaAaGbTJse6JpxBCEdWDgnb pHJxBUVPYgvveZk53b2DNranuI2gfnI9RG/ XwsDJznsUpjavHrZ O8tZKvltZxPfrHo0Y1zT1qpikWpDmRYAUAFSLFBsAdC9nVddWlNTQs6QJCIEyR8tmVUn6ldeVVU70WTWCPwYanAXhN1S/L06ngaYMqjp5gPtkM WmnyxwsrJaA7Z2uaohtnnlgdfgUiDugNo9

sUbJ5xDzlbzotCGIJR3Pw1JZCYbysQLtlqaW3oMxofhI I/SRSkWR5u76TGU64HWooYQzZO4cylWgKVxyzV13JYNgiUIGOQk/aS0q083758l 2lSKU9A2BCdI3xQRPmW89u2PwQXqy9cbko tzcA IhwRUV4VM3e4bKwjGxVTU nqwvalvtsaayfUFkUozWa63M1N0dNwRfuNKU0Og dqU7svMvrTyuexDZFKSpSjKCEIdnKPDoceSqvBz72fuet5X gKR55HA4HTa YjwkWhorzqSAlOs3zTyjC51Gzb6EpfNnPgcSp6B6JRIiajGJa0Xd5vmt7fYcpinUayBdNQvjVJc7F qX/f9 w18Uzkhjw6JEJmKjwjTaVBHQS f6vxso/l8uFS01Bwg5H

NFORxIeteewrz9nmSGfHJ6pJGOI11r2NKhr6dZSc043Sap6eqpg6YVqVT2nl2gdlbUH72yGDO1GAYQvZEyujZLPVlXfUMnvE7Jqo92SgzZRKhLeRcMGDQYbogIcrd2yDD7lqtsL LqHM0oiTe2IWIqDumHe095HtqSPy85oDlGPI7ZsI2gvGrs3MauAc/J8OU1EkZUoo65TXNdRKmIfoNMPIYZkgYaAwYnt4MK4AvT85kCPB2qy0aH1kd6UhcbipK3NA9aTo8DyWmMdipGNqjK/yRZPmERLCIDL67jWs1lTneRSazWXl4 UnIkWiiHE1uuxKoPOLA8RWwdfkhjYzckiY8D 47RtNqOYCQvBznNDdsq/Egn8Z7SZTcCkIjjQ/Th5LXQ dZr3RfSnH

qMgNtfEPcig2cFwoY611UGpT1UA3taPQoauVOtbuDZcKdED6IH54Q2Xts1nrXif1zwKrS8meQXeiSmDdwYZJhaWx9RapwOPe73h9BjbNjIDwGBhaCBzhzBPXEErmve3f2rowE1f9qjm95tdosvJZG fvDphC5Y67UwnHGPr NbPJBlp BCmoOExmS62re3K3SnH2DzzfTpXdo6nMlrykpMmmKrUAKe2/wKPAbdrcTm1m32KHZsDgDF7IgDPqliPn0fQ7F4mimcQFboD DfDU2IwWixx3DZDqtr88HBySWe 5TLVhnlFr 6akkESUjgAbzPAcZy8BUzr2kohq2xoA2YnsyW6ud4EemQmu/sxgajObL62OuztM6iuzPFIk5yBZtdhssgSGESwkoxz6

dYpU3FkwDdnVKVsRjN2qEiXICmZrlvTXy6gSZQCfIAoSA nvysSwRhYQgzCglijkgCcIhjm4fEYHhQUTpWiBfuFSb3SoA9dqiYXUXfSi EoBamfKQMIqUphTBkCXLkpRX6oGUCoGj4ClVQqnOolAaMuQImqWo3u2wJry6p4TaEJYFEeyChPCa4pL1CiNoXjEdGaIEERZacawOSEdlsRHmmu5Fl4QHJGzHqg5x2QUiSAltB4jABSmSiFEWUhSBTEDWPK6KgOCiOCJupVBWEDPPO8KoHOyqQRFBrKKIoLgoj0gcmDVIEiZp1giAOXtsJyd9geonwLtIDzdzg6jk7TJ1fMx6Xj4T8aNfA/Mk4UaUPy7rZ4Ofk5D2cnd3ybj6Wu6Dn H6z6Wkh51tpTd

Bg6jpjIRfnaeEU1snqdTAo5oBedh5Wpj20Am8kQPbyA66AHW2CQXVlVdHNgUMoROckFO9hADQkEOggROLZSqGulQ0MsIpSIeJgwglCpQgJEoAFIAUAIn/CURcSgHpIMQjQgNIIFAtIi0iiakiGJAaBUYkAKVQPWQacIH6siZoAFzwLQqbWAANnKoJlAguslFOZAgZZYVE2EAjsIVNpCuIEHnZQBDvIRTKEQDsZAB1YR0pUMQKFCglCpQohmkEXEAGnGUACUAKZMggsSitIAhSgauMCIlKvs4AcSKPPSAH68oaEZpBShFdZAiaelmyBAykU9nKq5SoaEICayEX3EIuykzkimjjCoHdwgGj0Vg3e3wCuwlHiRsdjgU18hp6Xn9jp6H29n 74eh9zvN

XeQAIOgVZiXEGnCYlDkybWQ rbuVdKER0JpAoEdnOhKAZQFA5pRTEIp/alxIH5sCmIACgEpApE1sqasJ TAfz4VX8eVTXyaMi0oUqrr5NKDNCGJQeFCqYnPKDjNgMSg6cvpIAzwIFABt4A2UBsIBQ18Lz0Dv40YEVAoVA0oUflwoupCApQKLrZQefkFXQhQDq4FDPFDlCRJmkxLRl52DK2lqyZQGlGrHG9pg0OixoyNFF0mDzI9XBrpTV1cK/kQhpQdl5GNXNgXnve4AdfZpAzymhAORIciQxIdfIOlC9TKGzuPd1D92QfSSunGhC76FykTNH60hlIv7UIYgRumwIYvypFxKBs5AxC0cuXEoBQUgmxz4EMQ5QJ/klHEgOrK4lE1YQMT9K3UhlIUj

1K84UGfLQALFnwGB9euUMsgiMBluG 66Y0epFu7jXl/a0cOvHetfh4ufiX1nAWv6igIClV0ERXa3VGTyIQSZ6lHAPeRtW Chqbg ObpZhgUxBtiALwgAHmcapHf6NpiFGPoLPJv 8l W 3MDGnfQYiSlALAnaIGIQRAKxfVd2fooNIr03VZb4dvib1X02GpMqWK6kSMsKNNAAAH0Kap7gGobud Pkq0fn084y92kyqfTdzLw5f2 nLTPbhqpPEF8QQEP1veG8b28A GKltKY1L3T1vKPBd8nt/M0cMggAbPF8c232rM cu/DycEJ/L9KFr8kZgHYRYsp1o5bf5TqAfB6igADY50X8NXQeSMbuu2diieY9CviaMzDaFsessVZBnfxPDckFuQYhBAA

RqeqFNrV/v/avnEQAy3a7VNOI0IICErtT3TnP5g/opU 5ZSpOx20LzdTmUKUv9ie nKP3UBQG1IAAPamJeDZ3Mc/eLbqhN7 NvQ3Z4UHivDBBqQREIebPm030 I AfBqn8pvpufKqNmSLSAHdIDoggA6Pj3sg1xHtuNuhOHWlWldvUPpP5hA0CH1pQEQ7F7LEj i3QYSGTy97m9x7LhT5mOTuEEHBBCrIAAOavqjPfH JlH4/IZQ7hzc0R0SCABMNPG7 /AX3CF7wow sg0JBEeVX2Yv 83iNJygzPtSaZAdpi/aaUKhRCMABCfIEyx7/gt92O4QTxADF PMYIj5lVjbtjISQ/8kxV7ku hKG QRAH5NcihpBopk8y HyMA0iAgiC6wcVet4/YfG

5T2l1aTDov7WEBHzKCjBnygBhBARCftSjS6b mxDyCYQU8HXZuJqlzJ1 Whvb2YkI9hLCvl/y9Gf OBWa/NXc2fj4lS00HsWbfg3wMKjQh3XzOOy54J wvIxgccx59Y2ZmrOcw pe4SSF6MEhBjkFSQQETr0oDroH6uB0sqZi 7CKE UWp7/bgTDmY3FNR69njXZUp/0qlzpT2dk3vrj2vPxGM7wwfjns8HSumML75ba2 zmMDy1tOr B7Zc bJNDwknpgoAABh708YsYFVa8rTY9LOSa8243cSVu9ceUVQeV6jSl/tFRaGwl1mOrCYbWVScWH lDRTZm9x3HV9FRfTA 3jTYRoYRBqCCIipIJNR5bO5h tpERMbinEbB1yUcuwL9ThVd2dBX0ns

3zAwbhh9waWq0NUizjrKWAgDyWTRkSVCCABA17VaY2FnEJUiFCAAxo1Q1dANgvDIhmXhm5Id9E7B3YNEeuki9bh8GqYUcx/JKp6xXudPERSQryI5ZuoUfneaYhb9Zw5kLFBGws41FhhFM9bPYHN6blnYUSGOQDpLH 6Or3V5tZcowIQAPxF8c1uTiob5dPHhB0Uuyv4DBSO6YwPA1p0DFwhdnQ6VF/c7 ijzQKmx0bXYrOBt/ifUBCvihdpapjf9 Y5XF6e M kFNa490mWJmn1a9bWPXOg/jRPNU3iFWZi/2MsdJlprj3jIAbNR/owf0hl7ZAo6 Ybf Hgw64oB9nxLos4yB22xRIdf3 v1fd P3ePc5TBJJJx T3HI22ABJkk0kARAAWkEAEBK

xk7efp2XoWIWB0cvcXyOD0sEOZGY3dXpJQ3ay0fVpuMqw7 VMWpwFK2c8lGFQukJE6WkSaaLDeRZdTJGLqbob LDgmsKFWMTpKomoCYkEzHCmDElxId8ogfB4tch2iTfESlTU8HUoGxS0LUjM3dmAjjcmbk1hjziiGvcMiR0IM01o/EZ472wOF92y1ilKt3a1aiehEXmrlPvEHNxL3Mg7Un5qCZTId04N10udSNIojUqKRYw7Ugg1UoBooSctB1fAbNhoVjP1fOtON0 SwdEJRdE7u1xFE2CRHfSsAQeCrE fhbtULmzcBOmUdVgdKkgVNmtJfVBAUVhtEHE6TzdJd1UzOzsNDtaZXTlI3VsxYnBy1F99Ok qkhZ0kOc7tSKkwpYmb6xLJGh0NuV

jGmOdkKNooMrs pMllkFUqiN2Hd0ciChVGeKRNVoZPUrJAoh96Gj0ealtdXyItjNpJGSmoF0xLRMS9sSgyVCeegzkcLQ/Y6TnMYzh NBETI0viFk80o5MLKaTEtO7WojNmZiEaIxeYFU8weJVu5Y7DCzwEwBtXp8w9sFDjQvQcg7btaAT1V0xYA0ELNkEUDTRg3d7W82MEl8s4HdWLwL2EplaHLBiw5eep06KRvYyw c8IYSNNeuCZIB0IZexCMDXDQyZBntVRNZR2UXdFNIpi2WAzEHlO8ycFSwLtsvMnVQzzeHuodEjOFBvAXGbkRsU5uLuCnaUrzCaynNrNqVsroVyXYUDIJJO8jJ9bIU2tMkt7nfwrUigbpNhXctyhqQWheZaCSxbat6tJe

KtHJDMeCmY62yxNi 5TpzVTcp8imOhCLN PLwzQyo5HG8imkHz9sa6SbLdT6aMPNrTMYtwTk1vQRxhstYI43s1lIHBm HC7JY4XbzvKY2GdrptC9PyF5duza0KIRES m5O8XaQn3ZqXIJFJmpiUBseIFGZBjXUZRNjJRK61ceFUoWWDud3RI7THPOWQUbnW66WQYPAaKN2dbDlVENN6cu5AfAMAMQCiYIgrArN3oKoZE35b/NVamFjVuTLOmreodCUpMyiaS0KIxdC5kqzdpxM0pCRcWYQKUYery0eXNsgnJuybLVdwMGAZJdBDBENCpnZWYpNN45Der1x79r60rm7W1U6JrnInklErZNopGyu6LIBp2YhFMuv1Yu5mmUaK8 9l5UY4ubI3HS9XJ

0gKKtqKgsRGLFppVZFEYxigKit2gTCwaUsS e1rmjLIcjC2GORYFmKIyhoVVF1bW8zNKzAY0/MsWjaiCCwVUQVSMiJjhWDL 92mF7qbqqQY3KLu TtcKiqpLuON5il7YVZfEh74WCRTQZpEoMiETHV4DFEBmBQMWRUElsK6Zl1xYOFrYViy0cGknuLUiwUFkhZgQpFBYUk29s5Y2rAsyClIA3ureGPICIFrkH216e3HFcJkXsxEruenjsZAaED284EaGB4CGKBCBFqpKv4P b EWR9JBAcTGUYy4yG Wd34VazmOXm7uqzF5FHtD N69WjtJtPy9UAM9tN9zBuFDWtfeVgsMKMLTOnkXol9pztGU5iXTrX2fven0MVy40sN7jWwQR28vxKd3f5zG

elLgE0Tk68yVTNrUJDUXaeLFJJBi3xYGJQJ1H2KXESdRAURhpj9Zj Jn9x8Z0tGNtbqjoYfC JJeXEfAEs1XnWbdYuHyJiCNv6q84WxKm8LMw0fW8dta4dk 41Nsh9sF61Vj7jbry0ZsVSbIs3LW8zAIjCS7YoGE8dOctsnL1B0tVy7S8868B7W29OcsiHxebE4Pf5/Cq0zC/3Lo8SkOp3 uoSBjn8P4yvgOR23j0KuKfDHaBInVKiL3fyHGrWfkTWJVteV8ZT4uT0fyd V5J9jPAUMHzeJ B6FdUmm3uYML6ulBYF6b86VCXgdCka34/flXfy9v0fpeuq6XwEH8jVaM1SQAR2RtBknk4xNATPGJHi8M5s2QwH9WZaGA5/M1KGSIAMI3EZkqSAyn

nbq/H62HonlmCXjaZ7D7/afO5ZvZYFB5iDukBSQBARQeJ50L4cdvW6E3M6vRR8/mZyJmofMPfd4DrEkLbxjisZDbOrDoMJkrXnKlXa6 cc39QqSbFAAB2EAAELHp HVmmGatismEri2UHJ/H0M69tZ7wp2Naqh6SK7tfyqslnQGwKVoO0gBsEAQGkoShEQCXvW1Qv7NLGacKarNUDdssrnGxZvvq8st9ZwvbBTZo/BrLuzzPJdEEak3dQx2tNZBgAa9RXtvWBYCM6QRAQQ0M33UM5ULFT x24XnvWbJNsP7Knpfgxm9iPNf3rjwYf7b9svDe42RgPhJcCAEIAZ52ftM8DRhbbFD1/t6vtaFfPHmuTZQUTiTCUr XGWRuPI65XtcpM5Fno3s9iU79

zO9lSjQnKyBsXOPQr7/TqdBanomJVpr3bd1JybXsN6fxPnAEcUgAAac5wrZjsuLWX0ejVvHng8Nrp9eCcwve3jvXMaVl6Hx7PSkNri9qQYI6JBAQQMUO8ltclyiuL/esF914DOCgltl8hkbJzT7eDDxmCnG0KeXERBhIX1Wpu80e/RTTbgvuunmtqnQta2fk5gkkQNZ VtMtmigGgARwHVy9fqPt35Mti/1daA3e87rS/arCFt/NguphzkaQKVIlDRxhOi/mEG8IAAT VQ5TzZ/UzmX1X4dP72qB1MJXKPka08l27z9euitt1pP8mroqEta2 k15qJ815/RBQ8TAoAAW/ZAJnVih3QuoZS1HdTPJ3eCXlPP r9Di1NOmjuXc7Nmu62o43KyW7 zN

mlRMjhqnu2mA GX1uystXz0sWD8Mb2pbU7Gdmx8e82daXiey9Sy8fWe9h7TiX/m89RSW5Ll8umSL2hTt5ljZT9KdrO1KFV6r4GNbg8 vrqzhW MspGs6hHt5p6LYy9N9V89ehI5l432mqDHnx ynpH 8K3es2k4sQT80eKqycvYVtws6d tOnKqmiwyV 5SWmd7qdDxWXZx24FGmjumeC6j29JFXy4GEPYiTcPhd6jWQ6d5MSQ3gAtZUYmN2JOLIsKYLMsw8w/iFd1sbTLsTINjilSceLryfBwnps0SKc5Z7bOlBMN5/I1IG2MLXXyyDjbdUssQePpeHaL1lb4nVib0rwIhXE9lj5NSWQilclmWqPViyf1YR5flNkOPqUxyZbpsei7WWNkILdrus

5qwMjT5cBacm1bGJCA2qBX8/k4UFUtC4hnPzWdzZGczouqKNxULB3WTI0MaoXBGRgRDFVZKXf8TOGhlDEF go3VFEwKdoVF9k65uFWRUx6J4QRZwYPPsYiWI4aYrKRGqPDlEfBsILF3Ty1XyEV9AWm8uRpRHDDpTCYynUrZgx 6nipjVa9Mi4jYyiS5gv7q23luLUU4rtCh7ct1ZpRwwWId/sM gTMpBrvGH4r6LYUzJ/2ztB1fslYedVn/j5zg6R4t7a3Mt fdb6njZ2a6dDkJkPEJVORk2I1RCchkmO9GIZM8jOJLi9vS1rFLAU L Hi8JsfgjcYdLCVVvpyE39226VnrgL1r5kXlXsmjyW2/9u1vNJr7Xo0kG Tl5GQ5f7GmsgzryIgBO8kkE

sXaHXUhAfLTpuKeYzfNeSacDj9luyowa6aKoGcRXL/PEvofSmmFcYCHrjX/2yWDz8FOjfZ1GikkgF Ov1vzfqDgC6tYbBFoa0V3ONwQB wM1/WvYblfeWxbA44PF4GjTEGnX3EaGQy8O8 P3FJQWrVcJr/7W/WHfDOQk2/H2qITv2IPO6v0XGgpg8qUO/gDdNLbXVgj4C5XFVdQUPnQyu4uC5NfVl2Ea28XvVTd1wNpliurjw3zOAnj9DSJoM7PIbTW3VEIrOTIsu2 SRqrGvCnLuctTdahpvR1E7s7ZPsIzmHtObCJKdlShV8J34Fy7WJGxKrbyPndeLHiF2KlHe9VNPkVuYXXs8q2Qj5S85QJiraPldJ4KeeT6OwSknLvOwaZZzIr5PktA3xJQ

L00XVmjCtR5CZIHjbwqVYa5ki8BPGaW6xS1c4qorIcDwatsRNzFi7Uqvi6FB9tNTZyZKPfi4muq3q8TMbFzdoJwJlCr2mlxw7vUYt7Zqp VFVJvlrgxkBatfxZVqiSPGTQsQLbbSdCahZ81tWm/pZxoV0rUc06dSHXodKsuaGjCpP2teBVXinImd3GRmzBl4qNJxzkfGng3rVYYq0Mr2XDetVVDDAcbHOOGvwCsYEAobPN166eLN3WNorl0hE1z6qvjiqo0 OOd1kynJmpGMdPPuU48CptWREUaindzDupClFUgrFzt5QrprJRk6Mqk8MSHuKstBoxezQoraaPYtqIChpitZaq35xO1QpEHhPCd7T72mRo5ImTPZl9Cys3qk8VTZFl0YO70FWolf

M3uy3VCWTCsl5 fWbaQDTasTyY6qoCoB92lm3RZhLNuGFTdRlX1T4ftEMowN6FhBNm4tCi2JqzRDJXTXy8tbda4vHti5Eq4b7ZkfRMcHqqHsZlhNbmcudtTyy8ULGMqafnVGhXaeLdx3uQgivcjpVL6 VmrDnxfwKXAIQR8RfPN bSsEZwJPjScpqHqb0GbzTaeDXi617OcKUmbIYhdemS/P2HnWV02VOeec4WUac51VoLdXu7poJNEBR2pMidNqeludncpBuJPns/u41ZYxcGJk5isi CMPZLivl0y7Ul/bOf/vKG9RrxfbX3fhXWmPcrtqGUeUcaOR6qW3Hp2pt4vToUE ZJn7glHNrnnN5VcRcFI9wXG pyJZMMG4MXPm/DO z3aZ7Yxcb570

X2ictNloQa2ZEDUCMEaNlBWDCAMIp8Knfh0Fihl oFByA /iCGYbEyYQf8HpguxSf80i2TV7O 1tYfzr6nphZN3OV3 TcP4tHVKrSgu8WNbfSYNxMxQrelsFOj2lPLRFKb3jAQAoF7jy5QOblaUkS0OcGIBAD0VygAkylxajuWUJDbKFv/tgMLNMm0uSF4bA3dCpgS8e2vAY2pBcc3NJTO1B3/EY6gSLFEwMNsM/Eo5RN5HDnBbabn35YFIKeSDftBNYXKoNcKFW4FuEWbQbRR0cGtErKoAVgG8pqc39aSHrYwesreYk4Pld4OFLaB/JFIFSMPbEAIACK0Rzjeq3JYdwVmLMMioDOnAULhhfBbCIP68Kzk/cZ64dRsvSOA3 DF25MqkZQ9nWUfYu

NFOUVQ2N9hQ2MBA9DEAhPoxAcbEVvp0u aWeBq kRcTKlzOooK5kBrxYu4Pem53Jfo9nq46a4WN7jOIBny/kHS2TdktJyyi71xbV5r1r9bNKhaotZLVFxyPui2tbDGqHh8u3qqdWeKgFzeHCBQSUgAJGIBAJLoSBPdy PtUVLni79BXjO0sLxZpHkhrmpo9KLmw3P2VWS9PTm80F8hiaFn7PMufVRxB6HXqfnAfPX0teIo7aXVZJwrfpHuXUwAOVLUPi2GI/LJpq4EMtR1DoiQ2Z7k6covMMix1PNRLDMuiXAMjE6DEdGIQgAtRkBfF39BB8hlgGR56Azi7YkQmNgQfju3SJ1iFtQ4C/BdL8zOd5A2m09211PcD218JsMZDW7pQ13llC8ZpLPib

6N1rpWbyJ7z7HTMEuiV0jfTSUlrupYQEZDmQisOT4l0Xi6gvoLWIoL0/MMReoGE 1LfGHsF cWg 7Z/sWB7rk61 2PwRvFAE9uUQJFjqA9UQPb /Kr0q JPawPSnuzywXbe8tiWko6Cu2Vpamx1Ok2UNcwZ BrrCzLMY4aCiXyyZrFrojSlkpI2ztmvVw64uW9Mt6NJFD8nvpIcmDPUX6fYfU0U/XOfyZHsLEedgwxM R5fLFbE1ZEXzteqSS7z7k2JsEj Y46ivJ3VIkuCMdPez6EuY9ky6LwOPMRP2JzMFeNBH6sBKn2XbjqH2BNY 6hXmRARcFhlE5RLLHa3tfaIOIAkxITSFmm0sgB5ob0MKuBsxzm7UQO6tf7I0JRUsJtEWOkXC7DX9Hb

cy1c93CMFOe6vv/ZRGdIw3FIomrNj6qMeFm0dRWfadjDnX4CtgV3QkInO6OaF772rGSBUnnXqsRRkSLt0RIvHp1g1bhTDlBVOIjRJ0KQ6mWO4NaQ8yU3cVmPcsFAGZTFKUsQTM18DKbSxa0saiXDemy6NwpePriJGXfUcVEJ0Z/QXkNJPatjYUfdv5BSgMszIekVEsVSv1d5PABzfdzudwO3ubvFqN4dp IxDoqtErsZ5by3Yg2/w394fJdb9vfFeuOwaKe/5do3E7D1tcTD6BZN0cuYZ7VahHUwfyZno7bryqE3PnSV4pJWdvCMSGgqS7ewQBIU4wWDjB03AIABB/gxCEJkiyBBaDCjMVBIgCW0NOTLSLoSUbKN5ndFSy9rQSpydcDZVkOzdZW2

t6uX8mgN8wP ce9ybZZC1bn4z XjasFgMv1LbyjfIEDdvKCADO7cHI5 bla4nEZKBBld7hy5bIRyIoIJpACh57nRzmpmev1ZhxR9eHZ7XNy iXVJVKACA0E9kSOaF6EMVxGFhSjBbXRqwjsGsADJyochyutiDPU9MFJR0 g7TCUTTe9QZIbnuSe5r05cFr1Ykt91p5Zvpzy XuKxPBEyJ5 yY/N5n/XSJK5T4zpjwshkMCmd qJH6PHCrRqJ4Vr0tftFYk7BPjGlesPTfPRqVHxOUxST7TNbDE2ar2H4ZQc2BiUxPi5l2 tMc4BExVJCl0kAkRk3qpJUBYszB2RgJFSyPeAxjKUp1rar9XDBvUSci5dXJUgY0vFkmgECSK1mtq942lt9FzGHB1Y2

HnL7KM9BRAHweQF8jbPSQ4ebrvLQJPIdO8h27TzIxYJ0R91ANQtg1SkoG9qjqXvmSZs PGnXqLaC6UCYUwOUKDKBJoNQGoDPBxSJ1Ge88yBFIFIoBARsClw77ADZQcRTqGIq/o4WO9N0Yk6c8AjYxVWoBvheYI8anmR48ZxBCRq5T3YzVnvvuhJgOi43lwuNADqOWGOugwEEJSofBGrtsIBGBiA9YKcZ6TkxJMMqLutoEZBkgo42 uu3KWiTgUUN5sbuM6HXajqIl4zAcUYA4RsCRHlQWZHd2x4qAOkJVz1zbzwdoT3UCOBtSWcMTwuedsZyo4xFYlrViW6rSAC2SRAD02Ws2wygGwRaKQDUD2BWp4MaNhR6VKNGSeCgwAQI02K /TdbCCgce4/4

tSn7K5JASsUxd6n1sbxkCCAb0yib7 vgB7POuQgxQQxm2e2D2bfRFybrz/aZhTDIu1lATi73l6zDQ4b6liDIwZ1SRoUe53ViKSgQK2c6sGvrtMQGCXrLRLBLHWrD1eiM3jg3AYvDyBYlZutH9DKa1L89aCgfCQI3arV4p jrs8BGCScaKq9meYZU y02QGiJwMeHG79vG1W0dzcVYiFkojaS5wwu95WpZQcR2CBwlJwNjqpcUpzYbwTcPcYh7DzVakugzXKdR1CgescWzY0XrPLkV8nvRYowxMmTOSRjbwzIvPvxQEiIQ9jc7tHZDEmTLk33qOluSI kQErl8gaBgsyvBiM2wUpUJG3T39 054u2FdxgK0yABUjjjHWGJF1XdwKAQU9nTeDDoNx2

PfEfANA8eP2KZRjt6X140I9cj1j3eXVjloh2HffoPS1zeQZPvDC6drAJF2hGvkWnGhmd7QCIFGA0EI4ED0d6GTHyhjXyb1EiLBGgqQ92oqCPfysi0zAOR8PjI9zRQEM7YmjEaEKp0TuGnh08Wrx9OmO6IDr9Og6rN2M7dlLy9vCp7XK73e NkgedlTmQHtHlYUNUd/AIGaVBECyUCAIgF7jX0Zuvco7LoHJyqA5AUqAe0sIsXz4pKkCID1qFwhBn6ciHZutVsfGXjdWoOKuplBIIgBRACSSRBRUidDPPLYCDQKUN BcQ3n7PhiMoEjg8Z5TpHYBGpQgyqObIFzNjZOXEQBYISG7sdbAFHdUEGXuRlgmnl9HKwiClwPc gceR36qauCMitWHTKucM

XKBGHeTolMjIMs5RCXSkdpSTNVQ7 nL1 llEDN7D8zCcpHfKTC60qXUUgwiKBQVpWVcZiLxaaZMnW435XZJbpaxKIjjtWJ7yKKENOi4WkRVZjUPIdE0qUxckoDk mZZgaDJAxim2woDsO48Mhbg38BhhEHBnKRMaWpBOBwLb/iqXcmm50vqQVV0uzFDjUeUrpKXAedl7wtyq2hSmvAcRpmExIj86uyIVqDhAimLUV2mSQNMjAdnrQQ6zrGoylYjMZUo7 yoSDkkJptUXGMmNsxq2w1JM83c1SKIlyFYDcnR7I4aQZlZa5ckWoY7IRtuQOxh0FCgcUmKRPMYhHZ8Rx7Ur7Pa9nZatAIH3MhPX4PujOOe2nlr4JHyRgLyIEjzEa CquLCMD4JARfRC

Da2YNlyNWM8GIDkSJ9dWfPaFkSR7ZEaHzmIsgZyo7CPeGANNdHGmFvwmiNqeDlcfJHdtqeXatOOznj3Y9XgA7O0z2/Bg3kLhSICO5Y11QQqzInXuKjcI0KiFZCiiHoWL1gLCpXR5WOVdVLzbdjpQdpPaTyITsY4rueZg4LZcU9dJhETjNKYRSoRgwKCUDaIEBkEDGjqQPuqkEAUjSMXFYVlPQFFCFBlIo0Mai9AATkAwv6rgDEq Iaci7UGJ3J1xrg76XsuXg4pDi6OA1TTRtWJNzLBt3Mg2bmFABOrkzwrrh1RvwnFt72RtcPFkL10Bub2rJ5EDjs8ByYU7SF1SNIG7AuyA1RyZrgk5ccEpogD56Q3JE7SQOCVzyhsg7GM3DhE9/lKV66AA13wc

WaDEcmUGhAOKVADakdN6WM8jrgOTIG5czj8nJM1lCc2xBudPBlb0bsqcMDx7HZYMoNEDiXny0qfO8GE5MBrmnRLmg5UO1Ltb DPD4FslUAK5IDqY8T4GSAPOYAA9wiKI34oB2o0LGgUmIlKZ94lM HDvqR0PnI1NkAYPlHsKNtkBx7UBwBtGnWULBsFzzSJLCPGSQooghItmWUuFBdM8gRjamqq11AQypUt Y0BilJ1EaS60xQulIT70jBglreIoQWKDFVpSZEZVWUpFsqRJN2PPj1WhiRqCxikJgP3ZM/DauUrMphBkkIwVIAy0BXRqLPSmlITFcqpdsQ5GmjNQhQNGJqarIzrrc2AynasacY40YcTsz4FFHjXWw7c5558G7AGyeRGqQ7CE5N04

OGVaHd wQqPCuUyQATsDJA2XpLhPLPQzWlwOEhEvQa8ZEqaEiAS9aHCro7UueekhNbeWeutPV6OBkxr73jUjP35IHppRHGqASHQ8rp8kE1qQjwlRolHI6 zXozQyYnbo ZHGt3jeNGEaKyhDaAFkBNkMykH1qdTxJu3gkoGypUCjGeMsY2yXNoeBFGGrqQSPA73bAhYuJxVMfZmiOCo2Se5CoiZCodq8pi6QpuDpMtQKL6K/GUGumCpmPjzo7bBZC83xboijEYIhFFs243I2Xu3GO 6n0kppaWdnPRCSBRgAIgc0gal90ziURx7 vdw0vQgk9ENMvlIHJ2GNzGEg9km6Ex3mSNjZkgcs4HZMbkR3HJHibNmXg8utCdULNkFbvx5rHNACzGNtJ8Dg

NJNBP1QA09ENBiAxNAA0NAANAADIAAAAAAAAANNDINMQiE0E0ChkxTTCpsyUepibU2p6QNGg0A0A0ekAAAGnqAAYQGEDIAAAABoAAAAANA0DEGgAAYkmiNU9PSp Cp lHp4o2SR4k/VH6oD0RhPaoHqHqAaANAAAABoAAAAAABoAAaAAAABoAANNAANNAaCFSQFNoRppPSepgJ6mgAE9U8BR6I8U9E9Ieo9TQMIyADTTQANAAAAAAA0AAAAAAAaAAADQA0ZAI7shDtMURZ0yhJ2SClBkQNDFmIddd1PPSdG1nNW5mMiy3NObH4vd5DnlHwZUd Fe3lBU2oAECikUCgBPE9LhVTIjZCYkTEq9GR6MiL4soJnkoSgAaKQpUWihRaD6clVcSkUSiJTT

uMp3RQ6n7MMwAE1uSgQgeSa78WfnG7mhBJy1Q2/MRJblT2D5hjVRMAYqujJRmGSxykvvGis1rW4y3rZrzg8puP00Lpl8khiwK1CIAHcDI4EgEs7TO17aaFVNvG7XXRI 3h8/J7dd2PN n8X X89vm7QAz88vF9npm5Y0exhzYWxKYgQEqYkBQAACKryJJ3i 9pZcLIJSULSq85f4XZSJibV6a1KxNssHmhbiZmI/qzoQ7nVyJs5Py 4czel9Id0IEDwpZzNS 2mqxKqXzOnXooAfpdjcKfRmULPxj4oRjuAxyXUf5hoAgjEPqCW0k3EVRt5NmXTWxhktIoqNN2xExoNKniIgXd0PzeFWXfiUcvfopMbMchpCzia8nwO99badlqKHX8vQxc9R0MQw

2jj6Oc15PsUgKNHXM6xiXvnzNm17C3K9jVozNJ3xW6vTIwLkzXvFHDRO1sEXNAYQAnMMKqEG43I4OxDWJKjd5OPElFbZqFXe5wq0Ki7fybQ0C5uLtWdwV 1UobipkLxm1WR6kH7UxpBWu 1YlPFnP3R5ZI9cU R5LrA5vybS0/c/vf3/Nwe31Mzx/6LvbnPkkvfpvnsk4A28UUglc/j5FJFXyjEHSdnZmY6s ikSPdtG1W FMTiKJEXea2WK/SeEt/1u2B0nK6rkVWfn BWdHuvttGnNDme 40mAZmzw1p2c50TRw0HDKTvxIFuPS0i44gBGggS2ebi5u82BtxP19Re8Hdo4ASs7fJplG/hXRjR8OPOMvVW5QMvDL2hFf6bNLDXFESWcwPA9CRtO

mJvLd9GMGGVENlvMaZXiJfFdGmmhxpSeFKVtLyYSMZhsXaalIxcK0gkSEQmcmDJ/Orq7I45WgI49rq2ixfLWmfq8cDgYzhtYeSI7RRN WRGeZVPwFr1XdnlXjgmYN2eqBEb4T3b3yhy4pO72SDjR4NhM0w1iozVAMlQUUrkXKJnnMXMXWWED3Di8DnG58/i0sqmfOXymZEYxMcKNWRXNS93RtvduEg8N1HLGMXFzFFCXGG8KXMXVhGicLVqr347a1aCgkB3LthFbHViMmBiAzg6EbKnaMBGkGDERMACJBlgLhN3eb5qIkk0QKMd1WZkKEis3TEwRPCQwylrQcAronlM4QVavR8jN41iCd8 BmLoRShKyKJPYH4mNzvVpaQKv16uByKorUplDwVMR

DjRCc/ZX6T4/S5uI0jpaEm06qA0F4PeyxpKaR3Iv1JQFMuzOT0ztIQjBwRpJIigsyjEKVdyPENOK5GZMgp6a DQkbXI10lyfDb8O86zPE4hA0UzNIFUWK65d51iGUTwbZAzs0wll20Nk anScExUw1DBIKLZLXFwYPWcl3UkEjMNnuq0nIIJAg6ntma41F0tyKULE9Rq3gS8Rr1LLmnHOrlzNX0lPUzHn20ODZlO9XcQMqBQuaJz1PpgKgkrnDiLtt Z11i00MdiYiZUaET LLszOh7UwISEcqYMKGOSfiSpUkbntRG/U792erfNmRluov0oDUhSjZ0mYIUkmA N45mSWM0gdzh Xd9dWxzunzLO 3c1nteXyMW4mSGRRC3fNjROImUlyNOALWtc

bbwEB6f6urdnBciNASdOKXLye0CjB9D8jljiZ08q90hkbtXV5 npDgLhD4UryX6/mGIAOvltYs0skHs6WL9woA1yeDwm7RsgRb2rzVOlrXg9es2jRBUgqEIdCmdVOgzx /VYz4KqCkgC6WMc0hnskdydYUgUpQAC Ct5BoQErAd/7fFcgqB6lexZy1Hwz6e38/WnXpnFtC s8HghpYIZ6rqQbCISJHhR0XUm9O3uULCQ14wjzujPikhvrmMK/jpv9FdTQQ9pMcCiZNp94bs5KkE6NZITIgRqikC0FebxJAuRMwH0GZ7 Q3lSIVir5g99AEuArktRzifApSsq3pZoH1X0JaYQSljYGx8mtJXJ9y8EyUYIDIAHe829ESqQmF8FNpItB6F0dEbEY1VP

IIIAORbVfxh4b7eIawfd209NlKssbs9WF4GcaBzvpE/QWBoQxAlEMAAgBACNeTuiZGOltvGQFNt3MkbozTs5MmFdaOdoR/fvcLcSvdw8/d0iyjpz6/u6d4JFD3vDIIF0kAAsMAQAAAAH/oH3B3oPpsynzERr6u y16 5TphWC/PyoOc2L4mw7OsB2 kgaauYjYfwHOkCouqVp8voNS9tpvH68Iyx4Kl251tjb/ANMQWz07jss9VYdGxJdODxzfiQwEA6nwE5PIGAAAIkGAIAQQAgepGSersz1webFBb6BL8t39R95deR6XDZzpLjzb5dVZ3W6vGcbfeghc dt6kS8V 4qQVTCxVDppcon0qKPnEfXggsc4gnzbVOEjOEPFUP5P6FPg1V5cSXieKs

LHc/PrxS5skSsYo4 aNtdh9rGmFGi5T QTTyaZhgMLdsjHw7RAZGIP71CowNUIKrcL6wwahgGyh2BWLIZuW1GHEHT0sD6TMCgC2hhIGxyGJNQJzVyunYq8H50mGTxSrQElnkQmIeJwSQlOwiwvEhyWSnA2gCqPGBqkWqJCZFoioZJ7T/yImoaEz1bcNRFIpOrnvTGmnS0jxPhFJyLcA8hHJ0ZHQMirCNpVRWX1MJpLYaWx50K8Y V8uT2Vg8vxNkngGEvHl2ReA7SF4urVkHUNpZBAAAAC8nLj4iwzrO1z/XFItKSlsqxGHJVIlUWm971vZQkxYHDFBReX0JgXujf6FBBAC46xMEaHN1P5NP2Bg1nx7WJk/G9oLLg6jI4yvfglD9FZu1U0qOs/6N

AZKfh7p548rMGT4jTXN1vIM3YQ7yFrVbHtP7/bdwbY1ZfvTkovCLQEphGKJNYTcxI9/cw2uNmEsiVBwrv/2xwZVLWSMBysQlnnB26W29hTYzJEq0UhDrZJGRtGGjkA1fAZuEYv6UR8xMCaLoRrntKnUZ1VOjvJYBtLn0DfiRAdPvVPeWgYlmLYO41FB193PUGVeKlP33K236s/Xmog3bIvXFoUkDoEZC40t88vjpW0Dh45Dm/cXMz470/0jL8fKzgDvfFm w52vuF297aPpvzU3viknxk6LgjrtFh6cbtBjwM/hshuoHmCJxsROfojsraX0fjm4Zv/191B38UOfFrO37kl1XtOeFQQM3s5X6oa4LanpOo01E0bkuRtDgy mLpN y6T7r3xSn/t5L

2Kel/iqYonA J0I8KTaHAWkElcXg ptcp5ay6L0ZQYp5KyOUCIfvt55inkBeDCbxxZpXyQK9n2Aj5/V907cx2RTiQ8oyJYYdqD4KsGNqYzKMXEa/J/85b6hdzqbraiB8uzpS1lKbXcuwrHeeuBxBLjG/i2DAvjXFzGR0qe0yhQLpPkTQ8wiQXlZvfdxM7zGZGZnzVGyjVtaRfKpGfXuJT5RJJLBPn3CIbIvfN0qPTxYN7/HKPGgCCB/aDJMrfNgJIZO3b93bRFY/ZsLNp8/uzQc6z76r9ozwlATrJ8oPMisvKOUHe9QOvyfjSB0kX0ByuqKqC2oSWVTYzzZ/zyIHn4IQlsd Epfo1qODbM649fr/bsXs36Bj2N8vSYxIxnjCpQx9UacXIwk/4 gW

yfE2Kp44Bfx95g1dCvKMHtFYcgRdn2k6YV25ZpREArwrkRG/md9iwWlvMkEgWxDG84sIAQF ugGGHc7YgcQmH67g5MxfAYoUyWdqLo2aAfpfrfdvmMN/2i407t/Nxvbm2 FGHnz8kp051qONKL4zXWYDWRRQMFYECAAJZ2TugS07vyt5KRIn4QLUK22iFdQVNqzuTCwyIyckkfH5nV/9LVDSznS/dxRTH0JmBY4NjdyKpCYZwn4Oad4qqBcmt9OtqTrFmbyEWIAPb5Uww/jAgBBN0ZBoShCrTO3GUrYeSa7my0yoi5dEFJMSzl9YMFUAxSXbp607JYI1a8rE3MHQ8sRFYEmwtEPeqB0imLR iUeuojLZCOtfn9JMpp86nuRYABBM207Ht4n6apz3

H85eTrlN/k0RAJDXjBhDE0MIAQQvNY7e4k3vQ8yt9OuMuetM1aHmWzJyuTOpENF0jZiyKT5LMmMfAQtbiTBxTAxhmg1rtzGho3nfYmGJxprrLztv1W5 Aoza3ObZugFbrrBNNikQszplTVH5L0zN PLTendnPkHQMmSP Bg4XdIpYSFcPtUtIoprgrKDAhInIIXW7VUTsbktx3BgZ 8xKG2m93EFISEKMSgW9XtStQ/xF/WhmFNh HLDiQfjDCCCYur6nUTAWbyHjGegJRbfU lU5Ead18tV6mZ1veG0PibISyxIcN4zTcR3tH9rZVvTYJ2sac OLee2Gs3M6/Mhe2W8KRB6e6MoWGXTSSxh8JmS A2k2GaJAnwwBACMUtwP9u4kc2jnYxFupdw

YDnHITiNlIxqRR7BDoH35azKhNJhkVb1Y4Dafn7iQqYHUHktlg9NkynI6stKpaI4SZqnmkWAIIGG5Kf91hhOV7HiAwtvG/pd443Z4Rjy/jhvOFt4TMnl1QsFjgffF67xRJUbvelbL4xBLn2CY/x9iDE8XTDE6lZlFUZFfJN o2X3wQHGLF1lY3dgQXDWsa0IqI60G0SEhOsYD5XLju1NGonqUto3YyWEBdrFGj2XHo xGbyJfVS5brvlJiTTy2bHCwBBAucZW7PB9RXjIO6VuFvoKor9kpmqQy6K10ET oiGBFbFiKPwegopX3/7GeabvIuN9O0PzJJ7NhmB3SaDHdTlnyev83MXxcpOwVR69LHpE2Liwjjb5Xh l2WRSVyt4Hq0GfXPX3JTX6mG

3yxM3ULEvmfL2o3vT1MwhpHN yazKfSRGroat91reX0SPEu KTNC3zORl9V nZZKaD6OrF3FPCTW2W/XKGX2Pp5eJ2e197bK2BUiN3MpHFYyNrSmLPylLLqLMmnlq11RoIlCSsv7Lm16zh9ExvnpO/ y9KfyrrxI/ac1mr58HvHcKVbUWYnk8lvhXLGdzlXskYqiqJxX0HLDrYwxDtuvCvjf2fFCMDnYedv9cmK6k7 n/F/L7b9sVsYKJ/fhT iOkvmPxrr57L9YnrioKHnY8j5Pyp5n33Qyp8ADyD1giuKuwHKkycMseWs5mG4gcn37pqBuvKK0f6mrZW8lgaiEm0FJDmy78dLEwN3rfs28UyDsnpGiK3jrgKwFVhi2tHTTQ01/yfXQ5kVXmDbI

KYS2vlYWvBAPAiCjqLKmjr0KjX8pN9tz2KYNiowpqNqhJ6EFJH1B H27IWac6aedFaKFhWBKa Rg5bda/AMOFxbWrcR0EPGJAMKhvYWY8a42bj9lDzvCZSkJY8mF u42vbrCYsBymBK2ik4QfJo6A8pUDpbkUZI5tBtuyND596iADphZDd144oIakTIUgq2bGMiRBOxLDE28r zKAjMaaimZrznLJyhyyKt9T2T/LQOFul6wTl7MDtbL /gHw hVRi6PqubgeChCeFE861OcNx HxksuIpdDmxt pYnmwzrwO7GjcyAwwIHlG9WbN3OqzYliJtXMwZfk/crRVKv4 RNiOI6s6c5cAyyhmBsK5oWeS5IG3JEc0Pe rfuosxRQTuyqqz0sxkbDA0fI

7pqEizFoJ6WhfUV72u58kUVrQ5UwQpfhRrECByQbWRYci mymESHTbFon2VvVuYJybpehjwqFN26Tc7U7EohyoINWxwWwoGS8kLJXtey88Spgqh1Sshg5cc uMOihm1Z20mU2DhVHwOrvMAzjI6A9fDDB0LM1AWyc8W8uk5YsrGUQ50oyoEK6W101Q0noY1lz3Caapl4F10XShXmMAgz6EyME9ZYojRCCYaORmk3HQXuThS/SwRP7JWZMGXLdwiDXwZTcYH48ixmHVyPWxqUJLsYpMNrlliTdlwRMfjcr0QLo92zsd776ebvFilZ8/iF8Ea4B6V7cjdiy/20bDsdJrKjmP8/XBuV/nYvL2bTHrsEVRb8OFGKdDMxF9YRsCmzoCEtpx2U1Mm124pn

TO8rVSnGgXYfftxlxDHXbAuJnTw1RsgzTQqKBUVHSe17gs6YT6hmbG2bVDHKiZkd6Qml RrcCV6dFUCLkQraFUGepJkxsNvQb wmNaBhaNEKNC87vHrrRTjIQQMxEEZnRGQMcqhBIhgpsRDwrvqOa9PWsH3Ut8Tbox8pAhFEeDV59biPB4 WNouThzoyDEYNDVka0kZsiP50gbjRx6SGA5UhPrCmdpK8hAk9VlTldpyOVp2SLa5Nuk4lYUFswqxPSkMsiuieqz7E0EbJkBcZM68rEJaWs61FRaXHZal1ZRxpSJGnOg86t41Xi11Q1wt7LQERvvCRBAMXIqmGilBXwdxxoFybVjBFWBc5FE6a3pAWZVGMhjZvhKzDRvYNit aplDrm3rUVgpxqXMG

6AKZN0zGOIQkeOZYmJ0HkBGJxz5mZNafRkeWSCC9bDLlUp4UApbaRCKJ3UjnscExpz8fcgUMzaZxJSFhttSUNQ0HpjZgOPnRx1pGFxFO1BFs2K lCEIRK0gQk7aQJF2ZOQLPGHFG5Fs0Aq8VHbjoL5rUzpjPvtrPbrkNeLWyx7iY0TtPJxYvxDy 787cMDbPnWaDm0O2ZEy0G FuNUlyTJEgy5B5u0hHAluU4YggmXCQgQ9HJTGect9hctscmaGa1SRrgKtRSvyYoiYt4905YCKdaZed8CuIQumjPxV5L7zf5QWr3 vDM28ig44ChvCYHN9dzGoL lApqOI4jZqQOJIGtEIMA6CEOFBi Zsmc2gJhV5yyFCaUwu6sMgbZkiCcyQsSE7tDjeWuakZ

emjkR2eqlqb8WbBJTejHJeM3d0qr32p0xIGzSSYJ3BjoJqdGtmh6Ag/LoRa0H9Hvy85Fbc FO7biWBvLMCtcTIPZMkBuNE0GpRDkEcLNOlgZoodpMnBJIQnE4gSR2MgNkfFsN3fqZII5FHEhZ9yzMFaX8E2U4YrY9IkxLxqT1DV3IKYslYrFTuSceDZ6zSRLnTO/HTZZifAlTqqonU6UwkVEN5zhURmtngVT4ppvHP054xDrKE7L7/b3tXteIKTeWhcaVMxY9NbN9YRDAPUNxgxewkUoZTl hhe7k72fe0Nx1ysgDCTdgSiUJv7kto0R8jfKVOc4AYF9zOFyMrWifJRv llivPjjgp4IzZXCzgYGkDGXEYjiaqrl8i9bsShLkJ29d7bsqXHARCCd

qF7DEY27SFGzBqibVQlZIpSTLKWSjwooJHjmzjyR7vI6LbfO2ek2GYp62jqcAiR hAhU00IF dkGIZsHLkhmlxrjMUqcmSbA6Z8pk88dWKHCyLm0xhgNaSKU8vYgZBTI1mbGnuuMfqsAjwBLJWXEV97QIw1uOKIHFU0SEbtSbzr9MdMgbiZx 753ZvloHm2yNZ mLlur H0QxC1BwIeRl1pxuSEzTe96tzoHHZgWIhgEVaqQbnJNpSi FeoxEyVryqupo5e5IJ4X5Onrra k7lv1IKmxKnvX4qiznIzkXw/Qv0ZXcseSFgMB5ESS0JhZxK bzb1660hCZqtXfkHVUnej3LUVl5966zBtyZJ2RRJwK4UhKwmtRSQudPeqlyZbxDzX5738AdGJJRI5

Hw3qMRsRLlcA tBUXAAvQcDsxo28ciYzlzBA6bb4dOmt74AIdNbWURo8KiH2GVMFeB0EQNehM2LXz7tbqpsWTkXpdY25bTMRCRDiQCYhQT1ak6NCNN6cpgzMGlCkVeKwPwOQBTBQdmmZzA5MqhBHYmB mrr4OiPIQk9FuHM4ZCLzZFlK7nTdbTypiMPDrWMgUaKdN7XHCJnJuxHnvhhpQJgCfNFYCe6tzGA KWhmEUunp8F/FvAdMdm/YFcBlr8uiHS Bx9gi0440g2cnLjXJ2qB3JC4KSFtUweww6YEHysiGDSp8GzdLNvz7fasUZs3Y9szghrIQYJkCgimlASp2HNeUbhiXywmiJjIJkITORLgbwIlcmWmFfSkFAbi2eNr5kEYKwTKkFDkDGzL

1JxoMKMFULi1WLqFrNBuslN1eJk8Eiywa9fMWSJiKXkykZsaEIK/E/tpwDMzUN2Fc5CMSZsiroSkqKtHAo0kI4FrENlBrbYWZcJDwnDdD5mzvxBv2kyKriyrDNa8Jjb1tzWiUyZE5zyizI9ouqea3kMBGUyNNyQbSHFpGQwI1BkmS3FYr3ZZOLbnB5EjLTuYHm9kGhRAnhPKsWaRo1I0LnxhNNXP3s1IdBEKjmWhSENyZt6WXkQBsfdTcqmZoRSWZUCepUIVC96WS4kPczptUhosxOOaVYkTIkZEpa5HA1ukCbCGTjzY6 lzlj1lLdUkhnKEYDzmBYzFo/4tqjjD67NK6IXt1hdrtKiqhi50QjOpcggbJ40wFbY71Ftqnn12w0ER1aV6CJSGuomn

pU1lKUm 9U1HlA7vXfwzpRkUUiqGIamRDq3GTUxiyRalGCgjAUmYXBJrJcL8UmCsWLFFft96T1k1VisUFIs80rF20FWTvW4zEFGM7tPDOt1XiRpQU1M63FhK2MrxDNLCqWxRW0LbJULrZDEy1GKZaEoqIyY4rMVBQ ssMykULaoKCnqPSG7YIwKqStQUDpmK8SsUXWKUZKhU87cS/K2pPlGVHtYQKlXlhWBlpWGMKOJKna2O0qtYNsUFFgCkU1JUWHkwlSbtJjIY0REFU43Gy7mCxSCxVLbMaqKsBalZEVgarYw9VsVnHWYxemBemii8S24kxJS3xYVhMGblURkxsQzOYHtuWGssZU9shgrDK2F86VgCrMtlezj7hKxYvikrCLFONQ5aRYLJ4pK/

kriKWlI 5sogKeyYazGRUVVS0uMoz6WzUMSKCyTWURVi1qKpltRZiYyraRQFkWTGpF EaqCkTKVnjaYi1kiIKoiHqMCqikxIT7NlgosxIsPNmIKKMS zuICiMn7p5 hsl2wS0lFis8mFQOyVIMWMFEYsk/9WovKQFCtQrEYctWSlsUWGJWKiNtYjFgjIIyVIVkylRBVmJWPegVWRYYlQqFSVJrisqFZ0l2lQVQWNKSqJIsX2GZlgqkPbp05aSosWHTKrz7TTBMSsrIcEMywrIsiJIpRKinGxfRYSqiIakCloeGUVYi8pV2hYMQRTmUwQFCj QYYRi9ku0FzLJFnZqqiJ2Qq8oFVbSQnjfGTFu0KiwrItaPZI2gHghecuTECiImWk1hUFmM7ZU6pW

c4aeUswY0AQBCWmgzMUFZJlNZJOZ6ugB/Gv/////////////////////////////////////////////gXp58T77AGm0qV9NoKapoAYrqBGBYLYUaAAAAAAAAAAAAAAAAAAAAAAAAAAF5s8B6NKVrJtqCgBQDQNNUAaDEABKgAApIoAM2DVSVtbVCtAbZ8Pve906dAAAAUYi3gHt0PUpeD2ccMd7tVsBgAAAAAAAAAQAIAAAAAAAAAIEFh30AHxVQ6iAFAAeKhAmBMmBA0AaAaBoAATACYAAJiZGCMEYmTJpk0GE0YRpk0MmE0GTU8Q0xGIMQ0aZBpkwmTTTINAU8aKDVP0QQACZAACaaATIAFGTCmJhNMU8gjTyNIyDQNNDRoaDTIepoZHppA9Qy

DOW, d MONTH %d d:d:d

%a, %d %b %Y %H:%M:%S %z

%H:%M:%S

%I:%M:%S %p

%Y-%m-%d

%m/%d/%y

%a %b %e %H:%M:%S %Y

%a, %d %b %Y %H:%M:%S

ddd

%d%d%d

d:d

%d:%d

%d:%d:%d

%d%s%d

\\?\UNC

WindowsError

errorMsg

.NET 2.0 / x64

.NET 2.0

.NET 1.*

Set the Charset property equal to an appropriate charset (see hXXp://VVV.chilkatsoft.com/p/p_463.asp)

SetFromUrl

30277129240

ChilkatHttp

twitter.com

A password has been provided.

HttpLogin

port

https

OriginalUrl

Failed to construct new URL for redirect

redirectUrl

PostUrlEncoded

OriginallySetFromUrl

https:

certSubjectCN

Cannot do this while background HTTP task on this object instance is running.

2.16.840.1.101.3.4.2.3

2.16.840.1.101.3.4.2.2

2.16.840.1.101.3.4.2.1

1.2.840.113549.2.2

1.2.840.113549.2.5

1.3.14.3.2.26

windows-1256

windows-1254

windows-874

Windows-31J

HTTP-EQUIV

Elapsed time: %d millisec

WindowsErrorCode

windows-1258

windows-1257

windows-1255

windows-1253

windows-1252

windows-1251

windows-1250

cswindows31j

csshiftjis

iso-646.irv:1991

!"#$%*;@[]^`{|}

httpVersion

application/x-www-form-urlencoded

urlencoded

HTTP/

application/x-www-form-urlencoded; charset=

HttpVersion

InvalidCmd

HashKey

Failed to get cookie hashkey.

Failed to parse URL

No charset specified, assuming Windows-1252

HttpInfo

Existing connection with HTTP server no longer open, restarting with new connection.

Socket not writeable, re-opening connection with HTTP server (1)

Socket not writeable, re-opening connection with HTTP server (2)

00290120340

Chilkat/1.0.0 ( hXXp://VVV.chilkatsoft.com/ChilkatHttpUA.asp)

ProxyPort

ProxyPasswordLen

ProxyPartialUrl

ProxyLogin

PasswordLen

MimicFirefox

MaxUrlLen

LoginDomain

HttpMethod

HttpOptions

ADAMCOFTP_QO

ERICDEFTP_WL

UYGARYFTP_X

SIXGRPFTP_Oz

CRSPCHSSH_vHd

slynxxSSH_frd

TEGRITSSH_kwNK

BRIGHTFTP_sZGTc

KEITHSSSH_Vhyu

WAVENESSH_Dyw

MAXDDRFTP_37

NCTINCSSH_Y

RECAIOFTP_yv

NETLINFTP_ywMn

FTPT34MB

TRUSTHSSH_TF

SELECTHttp_cRF2u

DCASSH_YzTb

VITRASFTP_X2O

CROSSCFTP_COQ

VLADIMFTP_XS

IBULIEFTP

MEHDIWFTP

HttpT34MB

Http_s40MSSb

ACREDITCIFTP

CYCLONSSH

RAYMCCFTP

URSELLFTP

BoxNewMFTP

UNYALAFTP

AADAVONFTP

NASHNETFTP

UCENTECHFTP

ARMOWEHttp

INSIGHTTECFTP

FLEXTRFTP

CHLSOLHttp

UMSGXPCrypt

VNNBZFTP

CrossMatchFTP

UNISHNVFTP

KEYTALK

scriptKey

UCertiSignC

WebSpirit

%d %d %d

keyT

%d/%d/%d

Component successfully unlocked using trial key

ddd

RegKey

Detecting windows-125* code page.

windows-125

%d/%d

Key30

Failed to create registry key (4)

Failed to create registry key (3)

Failed to create registry key (2)

Failed to create key in registry

No key yet in registry

tKey

srKey

weblogs

PTF://

certSerialNumber

numCerts

1.2.840.113549.1.12.1.3

keyContainer

password

HttpAuth

HTTP/1.1

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 1.1.4322; .NET CLR 1.0.3705; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)

Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/vnd.ms-excel, application/msword, application/x-shockwave-flash, */*

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.3) Gecko/20090824 Firefox/3.5.3 (.NET CLR 3.5.30729)

-- BuildFireFoxGetRequest --

UrlToCache

Closing connection to HTTP server. (1)

Closing connection to HTTP server. (2)

HttpRequestBegin

Closing connection to HTTP server. (4)

Application aborted HTTP operation (7)

Closing connection to HTTP server. (5)

Application aborted HTTP operation (2)

401 authentication challenge, but there is no login/password to send.

Received unexpected HTTP response (statusCode=0)

NtlmLogin

NegotiateLogin

Failed to get response data for HTTPS

Failed to get complete HTTPS response

proxyPort

HTTP/1.1 407

Socket not connected for HTTP request

No SSL on port 443 is probably incorrect! Normally HTTP on port 80 is non-SSL and port 443 is for SSL.

SSL on port 80 is probably incorrect! Normally HTTP on port 80 is non-SSL and port 443 is for SSL.

httpConnect

Starting NTLM Authentication for HttpRequest...

Path should not contain hXXp://domain

Failed to send HTTP request..

---- End of HTTP Request Header ----

---- HTTP Request Header ----

Application aborted HTTP operation (3)

https:/

http:/

Closing HTTP connection because of Connection: close header.

No response body found in SSL HTTP response

No response body found in SSL HTTP response..

HTTP/1.1

Received unexpected HTTP response

Closing connection to HTTP server. (3)

HttpStatusCode

HTTP/1.1 100

Application aborted HTTP operation...

simpleHttpRequest_5

simpleHttpRequest_4

Socket not writeable, re-opening connection with HTTP server (3)

simpleHttpRequest_3

Cannot authenticate. Login and/or password not provided.

Using logged-on user defaults for login/password.

---- Reading HTTP Authorization Response ----

Failed to send HTTP request for authorization.

mhtRedirectUrl

HttpRedirect

Failed to construct new URL

Proxy Server does not support the HTTP method being attempted

---- Continue Reading HTTP Response ----

Received HTTP 100 response.

---- Reading HTTP Response ----

---- Reading HTTP MIME POST Response ----

Application aborted HTTP GET in event callback.

simpleHttpRequest_2

Failed to allocate memory for HTTP download.

HTTP server closed the connection before the response head could be read.

Timeout trying to read HTTP response header

Failed to send HTTP GET

HttpRequest

--------- HTTP Request -----------

Socket connection to HTTP server is not writeable.

simpleHttpRequest_1

Unable to connect to HTTP server.

Using existing connection to web server...

Failed to connect to HTTP server.

Connecting to web server...

Failed to connect to HTTP server

Using HTTPS.

httpServer

HttpCacheHit

maxUrlLen

URL is longer than the maximum allowed length.

requestUrl

httpMethod

simpleHttpRequest_6

simpleHttpRequest_7

Key not found in hash map.

Key found!

findPrivateKey

findCert

2.5.29.15

Unrecognized certificate issuer part

2.5.29.17

2.5.29.37

Invalid RSA DER public key.

Application aborted HTTP operation (5)

Application aborted HTTP operation (4)

Application aborted HTTP operation (6)

Failed to send HTTP sub-header to output.

Failed to send HTTP header to output.

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)

Mozilla

Failed to get key value

Failed to open CURRENT USER key

Failed to read registry: CURRENT_USER/Software/Microsoft/Windows/CurrentVersion/Internet Settings/ProxyEnable

Failed to read registry: CURRENT_USER/Software/Microsoft/Windows/CurrentVersion/Internet Settings/ProxyServer

/Software/Microsoft/Windows/CurrentVersion/Internet Settings

DomainKey-Signature

commentUrl

WSAStartup error: 0x%x

Limit on the number of tasks supported by the Windows Sockets implementation has been reached.

A blocking Windows Sockets 1.1 operation is in progress.

The version of Windows Sockets support requested is not provided by this particular Windows Sockets implementation.

Using ws2_32.dll version %d,%d

Check to make sure the connection is not blocked by a firewall or anti-virus port filtering.

Error %x

WSAEADDRINUSE Only one usage of each socket address (protocol/network address/port) is normally permitted.

For more information see this Chilkat Blog post: hXXp://VVV.cknotes.com/?p=217

WSAENETUNREACH A socket operation was attempted to an unreachable network.

WSAESOCKTNOSUPPORT The specified socket type is not supported in this address family.

WSAEPROTONOSUPPORT The specified protocol is not supported.

WSAEINPROGRESS A blocking Windows Sockets 1.1 call is in progress, or the service provider is still processing a callback function.

WSAEAFNOSUPPORT The specified address family is not supported.

For more information see this Chilkat Blog post: hXXp://VVV.cknotes.com/?p=91

For more information see this Chilkat Blog post: hXXp://VVV.cknotes.com/?p=210

127.0.0.1

IP address passed to DNS lookup

socket operation aborted by application callback..

socket operation aborted by application callback

%d.%d.%d.%d

The peer has closed the socket (TCP) connection

Wait-for-data passed invalid socket.

Failed to receive data on the TCP socket

Failed to receive on the TCP socket

Failed to allocate buffer in Socket.ReadN

BindPort

myPort

No SOCKS4 hostname and/or port

socksPort

No SOCKS5 hostname and/or port

IPv6 addresses not yet supported.

Failed to receive port reply from SOCKS5 server.

SOCKS5 server rejected username/password

Failed to receive username/password reply from SOCKS5 server.

Failed to send username/password to SOCKS5 server.

SOCKS5 password is empty.

SOCKS5 server selected username/password authentication.

No SOCKS5 username and/or password, requesting No-Authentication...

Data pipeline did not complete!

HttpProxyConnect

0.9.2342.19200300.100.1.25

2.5.4.23

2.5.4.20

2.5.4.19

2.5.4.18

2.5.4.16

2.5.4.15

2.5.4.14

2.5.4.13

2.5.4.12

2.5.4.5

2.5.4.4

2.5.4.17

2.5.4.6

2.5.4.9

2.5.4.8

2.5.4.7

2.5.4.10

2.5.4.11

2.5.4.3

1.2.840.113549.1.9.1

No certificate store has been opened.

CertStoreLocation

certificate

No match found in ROOT local-machine certificate store.

Found match in ROOT local-machine certificate store.

No match found in ROOT current-user certificate store.

Found match in ROOT current-user certificate store.

No match found in CA local-machine certificate store.

Found match in CA local-machine certificate store.

No match found in CA current-user certificate store.

Found match in CA current-user certificate store.

No match found in MY local-machine certificate store.

Found match in MY local-machine certificate store.

No match found in MY current-user certificate store.

Found match in MY current-user certificate store.

Found matching certificate, but no private key accessible.

Found matching certificate, but no private key is available.

needPrivateKey

certIssuerCN

SearchRegistryCertificateStores

No private key available

Found private key, but not certificate.

1.2.840.113549.1.7.1

PKCS12 derive key failed.

1.2.840.113549.1.1.1

Invalid ASN.1 for RSA Private Key.

Invalid ASN.1 for RSA Private Key

Invalid ASN.1 for RSA Private Key (2)

Invalid ASN.1 for RSA Public Key..

Invalid ASN.1 for RSA Public Key.

Invalid ASN.1 for RSA Public Key

Failed to get DER encoded certificate: no encoded data found within cert context

Failed to get DER encoded certificate: no cert context found

Failed to link private key.

No certificate context exists.

1.3.6.1.5.5.7.3.4

1.3.6.1.5.5.7.3.8

1.3.6.1.5.5.7.3.7

1.3.6.1.5.5.7.3.6

1.3.6.1.5.5.7.3.5

1.3.6.1.5.5.7.3.3

1.3.6.1.5.5.7.3.2

1.3.6.1.5.5.7.3.1

Initializing certificate validity info...

CertGetCertificateContextProperty - CERT_KEY_PROV_INFO_PROP_ID (2) failed.

CertGetCertificateContextProperty - CERT_KEY_PROV_INFO_PROP_ID failed.

Failed to open key container for certificate.

No certificate context

MsCertificate key provider info not available.

keyUsage

key exchange

keyset

CertKeyProvider

myKeyContainer

Cannot acquire private key via CryptoAPI

checkPrivateKey

00000001

Unsupported qop for HTTP digest authentication.

httpUri

HttpDigestAuth

http:

Invalid password

Source is password-protected, but less than 12 bytes

Source is password-protected, but not in memory

ckZ.dat

Failed to compute CRC for password-protected Zip (2)

Failed to compute CRC for password-protected Zip (1)

Failed to compute CRC for password-protected Zip (4)

Failed to compute CRC for password-protected Zip (3)

Password protecting...

Not password protected.

Password decode successful.

Failed to delete temp file for password decoding (4)

Failed to delete temp file for password decoding (3)

Failed to password-decode data

Failed to delete temp file for password decoding (2)

Failed to delete temp file for password decoding (1)

Failed to get temp file for password decoding

Password incorrect for password-protected Zip

passwordDecode

Password decode failed (Zip 2.0 legacy encryption).

Running Zip pipeline...

NULL buffer passed to get-next-chunk.

zero-size buffer passed to get-next-chunk.

data.dat

0123456789

A common cause is when decrypting ASN.1 data with an invalid password,

totalLen=%d

len=%d

id[%x]

invalid length passed to BER decoder

null reference passed to BER decoder

%d.%d.%n

Invalid public/private key choice

Private key required, but not provided

application/vnd.wap.wmlscriptc

text/vnd.wap.wmls

application/vnd.wap.wmlc

text/vnd.wap.wml

image/vnd.wap.wbmp

application/vnd.rn-realmedia

image/x-portable-pixmap

image/x-portable-anymap

image/x-portable-graymap

image/x-portable-bitmap

audio/x-mpegurl

text/vnd.sun.j2me.app-descriptor

application/x-x509-ca-cert

Cannot do public-key encryption in chunks.

PBES2 not supported with chunks.

PBES1 not supported with chunks.

keyLength

Will search for matching PFX and pre-installed certificates for PKCS7 unenvelope.

Decrypting using CryptoAPI to avoid private key export

Using pre-specified certificate for PKCS7 unenvelope.

Certificate does not have a private key installed.

Getting pre-installed private key.

Using pre-specified private key.

Decrypt certificate is null

Using specific decrypt certificate.

Unsupported encryption algorithm for PKCS7.

1.2.840.113549.3.4

1.2.840.113549.3.2

1.2.840.113549.3.7

1.3.14.3.2.7

2.16.840.1.101.3.4.1.42

2.16.840.1.101.3.4.1.22

2.16.840.1.101.3.4.1.2

keyLengthInBits

No encryption certificates were specified.

No secret key has been set. Need a secret key for symmetric encryption algorithms

secretKeyLengthInBytes

Warning: Secret key size not equal to specified key length

secretKey

HTTP/1.0

Server certificate is verified.

Server certificate signature is verified.

Server certificate signature verification failed.

Server certificate is NOT expired.

Server certificate is expired.

Verifying server certificate...

No server certificate is available.

Server certificate verification failed.

s2_ReceiveBytes.RecvSecure.bEndOfSession

s2_ReceiveBytes.RecvSecure.bConnectionClosed

s2_ReceiveBytes.RecvSecure.b

DataPipeline_%d

Application aborted data pipeline.

Data pipeline failure (2)

Data pipeline failure (1)

processor_%d

PassThruProcessor

HKEY_CURRENT_USER

[Current User Certificate Store]

[CA Current User Certificate Store]

HKEY_LOCAL_MACHINE

[CA Local Machine Certificate Store]

[ROOT Local Machine Certificate Store]

[Local Machine Certificate Store]

[In-Memory Certificate Store]

Found matching certificate.

Did not find matching certificate.

Found certificate with matching serial number!

FindCertBySerialAndIssuerCN

Cannot password decrypt using this algorithm

1.2.840.113549.1.12.1.5

PKCS12 decryption failed (SHA1 and 2 key triple DES)

1.2.840.113549.1.12.1.4

PKCS12 decryption failed (SHA1 and 3 key triple DES)

1.2.840.113549.1.12.1.2

1.2.840.113549.1.12.1.1

1.2.840.113549.1.12.1.6

certSerialNum

symmetricKeySizeInBytes

FindPrivateKeyFromSystemCerts

Failed to load certificate DER...

Found matching certificate in PKCS7

1.2.840.113549.1.9.5

1.2.840.113549.1.12.1

KeyLength

ExtractCertsFromSignedData2

1.2.840.113549.1.7.2

PKCS7 Data -- oid must be 1.2.840.113549.1.7.1

1.2.840.113549.1.7.6

/A/contextSpecific,tag,0|/C/oid,1.2.840.113549.1.9.5|..|set|utctime|*

/A/contextSpecific,tag,0|/C/oid,1.2.840.113549.1.9.4|..|set|octets|$

/A/contextSpecific,tag,0|/C/oid,1.2.840.113549.1.9.3|..|set|oid|*

Failed to get signing certificate's IssuerCN from SignerInfo.

sequence|sequence|/C/oid,2.5.4.3|..|ia5|*

sequence|sequence|/C/oid,2.5.4.3|..|utf8|*

Failed to get signing certificate's serial number from SignerInfo.

encryptedKeyNumBytes

Digest encryption algorithm not supported.

No certificate with private key found.

Unsupported public key algorithm

Decrypting data using symmetric key...

Decrypting symmetric key...(1)

Decrypting symmetric key...(3)

Failed to RSA encrypt symmetric key.

Failed to get public key.

Failed to get certificate's serial number

Failed to get certificate's issuer DN

1.2.840.113549.1.7.3

Unsupported encryption algorithm OID

Unsupported PKCS7 encryption algorithm

Invalid RSA DER private key.

Invalid or unsupported AlgorithmIdentifier

PKCS7 EncryptedData -- first child must be oid with 1.2.840.113549.1.7.1

Cannot find matching certificate.

Signer_%d

1.2.840.113549.1.7.5

1.2.840.113549.1.7.4

ExtractCertsTimeMs

ExtractCertsFromSignedData1

No key

Failed to access private key blob (8)

Failed to access private key blob (7)

Make sure to mark the key as exportable.

Re-install the certificate and private key from a PFX.

Cannot access private key because when installed, it was not marked as exportable.

openCertKeyContainer

CryptGetUserKey(AT_KEYEXCHANGE) failed.

CryptGetUserKey(AT_SIGNATURE) failed.

Failed to access private key.

Failed to access private key (2)

Failed to access private key (1)

bExchangeKey

GetPrivateKeyToDER

Failed to acquire alternate credentials: no username and/or password

ChilkatSSPI.prepareOutboundPackage: package index out of range

ChilkatSSPI.prepareOutboundPackage: SEC_I_COMPLETE_AND_CONTINUE

ChilkatSSPI.prepareOutboundPackage: SEC_I_COMPLETE_NEEDED

ChilkatSSPI.prepareOutboundPackage: SEC_E_NO_AUTHENTICATING_AUTHORITY

ChilkatSSPI.prepareOutboundPackage: SEC_E_NO_CREDENTIALS

ChilkatSSPI.prepareOutboundPackage: SEC_E_INTERNAL_ERROR

ChilkatSSPI.prepareOutboundPackage: SEC_E_TARGET_UNKNOWN

ChilkatSSPI.prepareOutboundPackage: SEC_E_INVALID_HANDLE

No username and/or password for SSPI authenticate.

ChilkatSSPI.authenticate: failed to prepare next package

ChilkatSSPI.authenticate: exchange failed

ChilkatSSPI.authenticate: failed to prepare 1st outbound package

ChilkatSSPI.authenticate: cannot acquire alternate credentials

ChilkatSSPI.authenticate: no package exchange object

security.dll

secur32.dll

file.dat

Invalid password for WinZip AES decryption;

Invalid password for WinZip AES decryption

This Zip has been encrypted with Chilkat Zip (VVV.chilkatsoft.com).

text/webviewhtml

image/pipeg

application/ynd.ms-pkipko

application/x-pkcs7-certreqresp

application/x-pkcs7-certificates

application/vnd.ms-works

application/vnd.ms-project

application/vnd.ms-powerpoint

application/vnd.ms-pkistl

application/vnd.ms-pkiseccat

application/vnd.ms-pkicertstore

application/vnd.ms-excel

Failed to open Windows certificate stores.

zeeLog.txt

export restriction

unknown certificate authority

certificate unknown

certificate expired

certificate revoked

unsupported certificate

bad certificate

x,x

RSA_EXPORT1024_WITH_RC4_56_SHA

DHE_DSS_EXPORT1024_WITH_DES_CBC_SHA

RSA_EXPORT1024_WITH_DES_CBC_SHA

RSA_EXPORT_WITH_DES40_CBC_SHA

RSA_EXPORT_WITH_RC2_CBC_40_MD5

RSA_EXPORT_WITH_RC4_40_MD5

Certificate not available in TlsCertificates object.

CertificateSize

Failed to get cert X.509

CertificatesMessage

No ServerHello available for sending ClientCertVerify

No private key was provided for the client certificate.

ClientKeyExchange

CertificateVerify

CertificateRequest

ServerKeyExchange

Certificate

Dequeued Certificate message.

Dequeued ServerKeyExchange message.

Dequeued CertificateRequest message.

FinishedMsgLen

Zero-length ClientKeyExchange message

Queueing ClientKeyExchange message.

ClientKeyExchangeMsgLen

Zero-length Certificate message

Certificate message too short (2)

Certificate message too short (1)

certSerial

Queueing Certificates message...

NumCertificates

Total certificate message length is incorrect.

ProcessCertificates

Zero-length CertificateVerify message

Queueing CertificateVerify message.

CertificateVerifyMsgLen

Invalid CertificateRequest message

Queueing CertificateRequest message.

CertificateRequest message is OK.

CertificateRequest message too short

OtherCertificateType

Certificate Type: DSS Fixed DH

Certificate Type: RSA Fixed DH

Certificate Type: DSS Sign

Certificate Type: RSA Sign

NumCertificateTypes

Cannot build ClientKeyExchange, missing hello objects.

Encrypted pre-master secret with server certificate RSA public key is OK.

Failed to encrypt with server certificate's public key.

Failed to parse RSA DER key.

Failed to get public key from certificate.

Cannot build ClientKeyExchange, missing server certificate.

Unsupported cipher suite.

key expansion

No ClientHello when deriving keys.

Cannot derive keys without ServerHello.

No ClientKeyExchange to send!

processHandshakeMessage

tlsRec_msg

decryptedMsg

msgLen

key_len

Derived keys.

Failed to derive keys.

Failed to send client certificate verify message.

Failed to get certificate's private key for sending the CertificateVerify

Sending CertificateVerify...

Sent ClientKeyExchange message.

Failed to send ClientKeyExchange

Sending ClientKeyExchange...

Failed to build ClientKeyExchange

No client certificate required by the server.

Failed to send client certificate.

Sending client-side certificate(s)...

Failed to send 0-length certificate.

Sending 0-length certificate (this is normal).

Expected ServerCertificateRequest message, but did not receive it.

Server sent more than one ServerCertificateRequest message during handshake.

Expected ServerKeyExchange message, but did not receive it.

Server sent more than one ServerKeyExchange message during handshake.

Expected Certificates, but did not receive it.

Server sent more than one Certificate message during handshake.

wz.dat

;*.AZ-

unnamed.zip

3.6.19

SQLite format 3

CREATE TABLE sqlite_master(

sql text

CREATE TEMP TABLE sqlite_temp_master(

,o.qr

REINDEXEDESCAPEACHECKEYBEFOREIGNOREGEXPLAINSTEADDATABASELECTABLEFTHENDEFERRABLELSEXCEPTRANSACTIONATURALTERAISEXCLUSIVEXISTSAVEPOINTERSECTRIGGEREFERENCESCONSTRAINTOFFSETEMPORARYUNIQUERYATTACHAVINGROUPDATEBEGINNERELEASEBETWEENOTNULLIKECASCADELETECASECOLLATECREATECURRENT_DATEDETACHIMMEDIATEJOINSERTMATCHPLANALYZEPRAGMABORTVALUESVIRTUALIMITWHENWHERENAMEAFTEREPLACEANDEFAULTAUTOINCREMENTCASTCOLUMNCOMMITCONFLICTCROSSCURRENT_TIMESTAMPRIMARYDEFERREDISTINCTDROPFAILFROMFULLGLOBYIFISNULLORDERESTRICTOUTERIGHTROLLBACKROWUNIONUSINGVACUUMVIEWINITIALLY

LIRANBHttp_VHOYUyeXXR3u

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

large file support is disabled

SQL logic error or missing database

foreign_keys

sqlite_source_id

sqlite_version

sqlite_attach

sqlite_detach

sqlite_stat1

RowKey

d-d-d d:d:d

d:d:d

d-d-d

922337203685477580

%s\etilqs_

OsError 0x%x (%u)

invalid page number %d

2nd reference to page %d

Failed to read ptrmap key=%d

Bad ptr map entry key=%d expected=(%d,%d) got=(%d,%d)

%d of %d pages missing from overflow list starting at %d

failed to get page %d

freelist leaf count too big on page %d

Page %d:

unable to get the page. error code=%d

btreeInitPage() returns error code %d

On tree page %d cell %d:

On page %d at right child:

Corruption detected in cell %d on page %d

Multiple uses for byte %d of page %d

Fragmentation of %d bytes reported as %d on page %d

Page %d is never used

Pointer map page %d is referenced

Outstanding page count goes from %d to %d during this analysis

keyinfo(%d

%s(%d)

%s-mjX

foreign key constraint failed

unable to use function %s in the requested context

cannot open savepoint - SQL statements in progress

no such savepoint: %s

cannot %s savepoint - SQL statements in progress

cannot rollback transaction - SQL statements in progress

cannot commit transaction - SQL statements in progress

sqlite_temp_master

sqlite_master

SELECT name, rootpage, sql FROM '%q'.%s WHERE %s

database table is locked: %s

cannot open virtual table: %s

cannot open view: %s

no such column: "%s"

foreign key

indexed

cannot open %s column for writing

cannot open value of type %s

misuse of aliased aggregate %s

%s: %s.%s.%s

%s: %s.%s

%s: %s

not authorized to use function: %s

%r %s BY term out of range - should be between 1 and %d

too many terms in %s BY clause

Expression tree is too large (maximum depth %d)

variable number must be between ?1 and ?%d

too many SQL variables

too many columns in %s

misuse of aggregate: %s()

%.*s"%w"%s

%s%.*s"%w"

sqlite_rename_table

sqlite_rename_trigger

sqlite_rename_parent

%s OR name=%Q

there is already another table or index with this name: %s

sqlite_

table %s may not be altered

view %s may not be altered

UPDATE sqlite_master SET sql = sqlite_rename_parent(sql, %Q, %Q) WHERE %s;

UPDATE %Q.%s SET sql = CASE WHEN type = 'trigger' THEN sqlite_rename_trigger(sql, %Q)ELSE sqlite_rename_table(sql, %Q) END, tbl_name = %Q, name = CASE WHEN type='table' THEN %Q WHEN name LIKE 'sqlite_autoindex%%' AND type='index' THEN 'sqlite_autoindex_' || %Q || substr(name,%d 18) ELSE name END WHERE tbl_name=%Q AND (type='table' OR type='index' OR type='trigger');

sqlite_sequence

UPDATE "%w".sqlite_sequence set name = %Q WHERE name = %Q

UPDATE sqlite_temp_master SET sql = sqlite_rename_trigger(sql, %Q), tbl_name = %Q WHERE %s;

Cannot add a PRIMARY KEY column

UPDATE "%w".%s SET sql = substr(sql,1,%d) || ', ' || %Q || substr(sql,%d) WHERE type = 'table' AND name = %Q

sqlite_altertab_%s

CREATE TABLE %Q.%s(%s)

DELETE FROM %Q.%s WHERE tbl=%Q

SELECT idx, stat FROM %Q.sqlite_stat1

invalid name: "%s"

too many attached databases - max %d

database %s is already in use

unable to open database: %s

no such database: %s

cannot detach database %s

database %s is locked

%s %T cannot reference objects in database %s

access to %s.%s.%s is prohibited

access to %s.%s is prohibited

object name reserved for internal use: %s

there is already an index named %s

too many columns on %s

duplicate column name: %s

default value of column [%s] is not constant

table "%s" has more than one primary key

AUTOINCREMENT is only allowed on an INTEGER PRIMARY KEY

no such collation sequence: %s

CREATE %s %.*s

UPDATE %Q.%s SET type='%s', name=%Q, tbl_name=%Q, rootpage=#%d, sql=%Q WHERE rowid=#%d

CREATE TABLE %Q.sqlite_sequence(name,seq)

view %s is circularly defined

UPDATE %Q.%s SET rootpage=%d WHERE #%d AND rootpage=#%d

table %s may not be dropped

use DROP TABLE to delete table %s

use DROP VIEW to delete view %s

DELETE FROM %s.sqlite_sequence WHERE name=%Q

DELETE FROM %Q.%s WHERE tbl_name=%Q and type!='trigger'

DELETE FROM %Q.sqlite_stat1 WHERE tbl=%Q

foreign key on %s should reference only one column of table %T

number of columns in foreign key does not match the number of columns in the referenced table

unknown column "%s" in foreign key definition

indexed columns are not unique

table %s may not be indexed

views may not be indexed

virtual tables may not be indexed

there is already a table named %s

index %s already exists

sqlite_autoindex_%s_%d

table %s has no column named %s

CREATE%s INDEX %.*s

INSERT INTO %Q.%s VALUES('index',%Q,%Q,#%d,%Q);

no such index: %S

index associated with UNIQUE or PRIMARY KEY constraint cannot be dropped

DELETE FROM %Q.%s WHERE name=%Q

DELETE FROM %Q.sqlite_stat1 WHERE idx=%Q

a JOIN clause is required before %s

unable to identify the object to be reindexed

table %s may not be modified

cannot modify %s because it is a view

foreign key mismatch

table %S has %d columns but %d values were supplied

%d values for %d columns

table %S has no column named %s

%s.%s may not be NULL

PRIMARY KEY must be unique

sqlite3_extension_init

unable to open shared library [%s]

no entry point [%s] in shared library [%s]

error during initialization: %s

automatic extension loading failed: %s

foreign_key_list

*** in database %s ***

unsupported encoding: %s

malformed database schema (%s)

%s - %s

unsupported file format

SELECT name, rootpage, sql FROM '%q'.%s

database schema is locked: %s

unknown or unsupported join type: %T %T%s%T

RIGHT and FULL OUTER JOINs are not currently supported

a NATURAL join may not have an ON or USING clause

cannot have both ON and USING clauses in the same join

cannot join using column %s - column not present in both tables

%s.%s

%s:%d

ORDER BY clause should come after %s not before

LIMIT clause should come after %s not before

SELECTs to the left and right of %s do not have the same number of result columns

no such index: %s

sqlite_subquery_%p_

no such table: %s

sqlite3_get_table() called with two or more incompatible queries

cannot create %s trigger on view: %S

cannot create INSTEAD OF trigger on table: %S

INSERT INTO %Q.%s VALUES('trigger',%Q,%Q,0,'CREATE TRIGGER %q')

no such trigger: %S

-- TRIGGER %s

no such column: %s

PRAGMA vacuum_db.synchronous=OFF

SELECT 'CREATE TABLE vacuum_db.' || substr(sql,14) FROM sqlite_master WHERE type='table' AND name!='sqlite_sequence' AND rootpage>0

SELECT 'CREATE INDEX vacuum_db.' || substr(sql,14) FROM sqlite_master WHERE sql LIKE 'CREATE INDEX %'

SELECT 'CREATE UNIQUE INDEX vacuum_db.' || substr(sql,21) FROM sqlite_master WHERE sql LIKE 'CREATE UNIQUE INDEX %'

SELECT 'INSERT INTO vacuum_db.' || quote(name) || ' SELECT * FROM ' || quote(name) || ';'FROM sqlite_master WHERE type = 'table' AND name!='sqlite_sequence' AND rootpage>0

SELECT 'DELETE FROM vacuum_db.' || quote(name) || ';' FROM vacuum_db.sqlite_master WHERE name='sqlite_sequence'

SELECT 'INSERT INTO vacuum_db.' || quote(name) || ' SELECT * FROM ' || quote(name) || ';' FROM vacuum_db.sqlite_master WHERE name=='sqlite_sequence';

INSERT INTO vacuum_db.sqlite_master SELECT type, name, tbl_name, rootpage, sql FROM sqlite_master WHERE type='view' OR type='trigger' OR (type='table' AND rootpage=0)

UPDATE %Q.%s SET type='table', name=%Q, tbl_name=%Q, rootpage=0, sql=%Q WHERE rowid=#%d

vtable constructor failed: %s

vtable constructor did not declare schema: %s

no such module: %s

table %s: xBestIndex returned an invalid plan

at most %d tables in a join

cannot use index: %s

TABLE %s

%s AS %s

%s WITH INDEX %s

%s VIA MULTI-INDEX UNION

%s USING PRIMARY KEY

%s VIRTUAL TABLE INDEX %d:%s

%s ORDER BY

the INDEXED BY clause is not allowed on UPDATE or DELETE statements within triggers

the NOT INDEXED clause is not allowed on UPDATE or DELETE statements within triggers

unable to close due to unfinished backup operation

no such vfs: %s

c:\Users\odedr\Perforce\Oded-PC\Develop\WriteTec\WSClient\BinRelease\WSTray.pdb

HttpAddRequestHeadersW

HttpSendRequestW

HttpQueryInfoW

HttpOpenRequestW

WININET.dll

GetProcessHeap

KERNEL32.dll

MsgWaitForMultipleObjects

keybd_event

RegisterHotKey

UnregisterHotKey

EnumWindows

UnhookWindowsHookEx

USER32.dll

GDI32.dll

RegDeleteKeyW

RegCloseKey

RegQueryInfoKeyW

RegEnumKeyExW

RegCreateKeyExW

RegOpenKeyExW

ADVAPI32.dll

ShellExecuteW

ShellExecuteExW

SHFileOperationW

SHELL32.dll

ole32.dll

OLEAUT32.dll

SHLWAPI.dll

MSVCP80.dll

MSVCR80.dll

_amsg_exit

_wcmdln

_crt_debugger_hook

CertFreeCertificateContext

CertNameToStrA

CertSetCertificateContextProperty

CertFreeCertificateChain

CertFreeCertificateChainEngine

CertGetCertificateChain

CertCreateCertificateChainEngine

CertGetCertificateContextProperty

CryptAcquireCertificatePrivateKey

CertDuplicateCertificateContext

CertCreateCertificateContext

CertEnumCertificatesInStore

CertCloseStore

CertOpenStore

CRYPT32.dll

WS2_32.dll

OLEACC.dll

RegOpenKeyExA

RegCreateKeyExA

CryptExportKey

CryptDestroyKey

CryptGetUserKey

.?AVCkHttpRequest@@

.?AVCkHttpCb@@

.?AVCkHttp@@

.?AVClsHttpRequest@@

.?AVClsHttp@@

?456789:;

!"#$%&'()* ,-./0123

.?AVWindowsVersion@@

.?AVHttpRequest@@

.?AVHttpCache@@

.?AVHttpConnPool@@

.?AVHttpControl@@

.?AVHttpResult@@

.?AVRegKey@@

.?AVHttpResponseHeader@@

.?AVClsHttpResponse@@

.?AVChilkatUrl@@

.?AVClsCert@@

.?AVHttpClient@@

.?AVXCert@@

.?AVCertificate@@

.?AVHttpRequestData@@

.?AVHttpRequestItem@@

.?AVPipelineHelp@@

.?AVSystemCerts@@

.?AVMsCertificate@@

.?AVZipPipeline@@

.?AVDataPipeline@@

.?AVCertificateStore@@

.?AVKeyContainer@@

.?AVTlsClientKeyExchange@@

.?AVTlsCertificateRequest@@

.?AVTlsCertificateVerify@@

.?AVTlsCertificates@@

.?AVCertStoreSpec@@

.?AV?$CWindowImpl@VHttpRequestsHandler@@VCWindow@ATL@@V?$CWinTraits@$0A@$0A@@3@@ATL@@

.?AVHttpRequestsHandler@@

.?AV?$CWindowImpl@VCHttpWebClient@@VCWindow@ATL@@V?$CWinTraits@$0A@$0A@@3@@ATL@@

.?AVCHttpWebClient@@

.?AVHttpProgressEventObj@@

.?AVCkHttpProgress@@

66.(**.(**.(*.(.*.*******P

=&'*''''*.

%UBVBvJvJ

V4F/%XJ8F

@HttpRequestsHandler

EndInstallReported

1.00.6034.0

?id=6&serial=%s&dist=%d&version=%s

&offer=%s

hXXp://VVV.whitesmoke.com/freetrial/action.php

hXXp://whitesmoke.com

Content-Type: application/x-www-form-urlencoded

EndInstallReport

msg="

Received promotion response '%s'

PromotionBrowserUrl

?id=%s&dist=%d&version=%s

&clientIP=%S

hXXp://notifier.whitesmoke.com/client/PHPClient/checkgrammar.php

hXXp://notifier.whitesmoke.com/client/PHPClient/checkgrammarnopopup.php

&installOption=%d

Offer ID:(notifier) response '%s' keyname: '%s'

index.html

Failed to open html file '%s'!

Failed to read html file '%s'!

Html file '%s' is of 0 size!

$msgdiv$

Failed to open WSTray64 process with last error %d!

WSTray64.exe

Failed to create the 64 bits tray process with last error %d

Failed to launch 'WSTray64.exe' - already running

osmax.ocx

Failed to register osmax.ocx with error %#x!

secman.ocx

Failed to register secman.ocx with error %#x!

Outlook.Application\CurVer

Outlook.Application.14

WhiteSmoke window (hwnd = %d , %#x, caption = '%s', thread = %d , %#x, process = %d , %#x) is still open during shutdown

SerialKey

Shortcut key = '%s'

Using proxy server '%s'

CreateInstance for class '%s' has failed (hr=%#x)

CreateInstance for module '%s' and class '%s' has failed (hr=%#x)

Failed to load module '%s' with last error %d

Failed create class from module '%s' (hr=%#x)

DictKeyState

Failed to get proc address of 'InstallHook' with last error %d

Failed to get proc address of 'UnInstallHook' with last error %d

Dictionary shortcut was pressed with word under mouse '%s'. About to read translation text...

Failed to register keyboard hotkey with last error %d

Dictionary:%s

Received notifier response '%s'

Notifier failed to connect to the server with error %d

Notifier sending to server '%s'...

Notifier sentence '%s' is invalid!

Writer: Internal Capture Error '%s' occured (source = '%s', hr = %#x)

Just sent email check request to the server '%s'

Text size exceeds the limit of %d characters. Please reduce your selection and try again

WS hotkey clicked while WS editor is still open!!!

WS received on foreground window %#x isSameThread = %d, isSameProcess = %d

WSKeyboardHook.dll

Failed to install hook from module '%s' with last error %d

Successfully installed global 32 bits keyboard hook

Successfully uninstalled global 32 bits keyboard hook

WS hotkey clicked on a 64 bits window. However failed to find the WsTray64 window!

WordCapture %s %s 0x%x

IDispatch error #%d

HKEY_CURRENT_CONFIG

HKEY_DYN_DATA

HKEY_PERFORMANCE_DATA

HKEY_USERS

HKEY_CLASSES_ROOT

WSLogger.exe

\UpdateClient_Status.xml

%s\%s 0x%X

WSRegistration.exe

Dictionary = %s %s

WhiteSmoke window is still open after %d retried. Forcing shutdown!

Failed to open clipboard with error %d

%s '%s' to clipboard!

HttpWebClientWndClass

[%s] Aborting internet thread!

[%s] Internet thread was terminated!

[%s] Trying to connect using IE default proxy '%s'...

[%s] Changed proxy settings to IE default proxy '%s'

[%s] Sending http %s request to server '%s'...

[%s] Http headers = %s

[%s] WinInet returns status of %d

(The operation was canceled)

[%s] Failed to send http request with last error = %d

[%s] Sending http %s request retry #%d to server '%s'...

[%s] Chilkat returns status of %d

[%s] Failed to post data using Chilkat in iteration with error %d, retrying ...

[%s] Async %s finished after %d seconds

[%s] Failed to post data using WinInet, retrying using Chilkat...

[%s] Failed to post data using Chilkat in iteration #%d with error %d, retrying ...

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Version/%s DistID/%d Product/%s

Mozilla/4.0 (compatible, MSIE 6.0, Windows NT 5.1, SV1) Version/%s DistID/%d Product/%s

Server response is invalid! ('%s')

TextDocHandler::ShowWSWindow: text exceeds supported text length

EngineClientProxy.CheckText failed with error %#x

Close %s %d

Focused class name = '%s'

ieframe.dll

USER32.DLL

shell32.dll

Failed to create a required object - Please contact support

OnCopyData: Calling Enrichment->CheckText with notify window %#x, parent %#x, '%s'

OnCopyData: Calling Enrichment->OpenDictionaryWindow with word '%s' and translation length %d

@%d/%m/%Y %H:%M:%S

%d,%d,%d,%d,%s,%s

settings.ini

FloatButtonBlackApps.txt

Port

hXXp://application.whitesmoke.com

Software\Microsoft\Windows\CurrentVersion\Internet Settings

software\microsoft\windows\currentVersion\explorer\shell folders

\Launch WhiteSmoke.lnk

WSTray.exe

OLEACC.DLL

SetForegroundWindow(%#x) FAILED with err = %d (hWnd = %#x)

AttachForegroundThreadInput(%d, %d, TRUE) FAILED with err = %d (hWnd = %#x)

AttachFocusThreadInput(%d, %d, TRUE) FAILED with err = %d (hWnd = %#x)

notepad.exe

\AuClient.exe /Code

\AuClient.exe /Tray

%s, %ld, 0x%X, %ld

%m/%d/%Y %H:%M

stat.log

Failed to flush statistics - file size exceeds limit (%d bytes)!

Failed to upload statistics! Server response: '%s'

hXXp://VVV.whitesmoke.com/stats.php

Sending %d statistic chars to server...

1.0.6034.13052

WSRegistration.exe_1620:

.text

`.rdata

@.data

.rsrc

8%uMP

|$0)|$,3

|$4;\$,}