Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Resubmissions
01/11/2023, 20:57
231101-zryfwadb3s 801/11/2023, 20:12
231101-yy98kscg5v 831/10/2023, 21:03
231031-zv82sadf91 831/10/2023, 18:05
231031-wpb83seb57 831/10/2023, 17:13
231031-vrlpvsdf34 831/10/2023, 16:52
231031-vdrc7add26 8Analysis
-
max time kernel
55s -
max time network
269s -
platform
windows10-2004_x64 -
resource
win10v2004-20231020-en -
resource tags
arch:x64arch:x86image:win10v2004-20231020-enlocale:en-usos:windows10-2004-x64system -
submitted
31/10/2023, 16:52
Static task
static1
Behavioral task
behavioral1
Sample
40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe
Resource
win10v2004-20231020-en
General
-
Target
40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe
-
Size
203KB
-
MD5
e26bba0304f14ef96beb60376791d32c
-
SHA1
24f6785ca2e82d1d1d61f4cb01d5e753f80445cf
-
SHA256
40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17
-
SHA512
f38c594c10ec95a1b0cb3acdb1e920d8343728aa34641d773d4f7fb391cf2d6bb7d11264496b9792c7aec551ce4b1b74bbb78b1a787e6d667824fb18f988d93a
-
SSDEEP
3072:7uoYEB8lWYjmGlCcrwMuWSiVuFbJj65dVi/gTXouvCFH:73V+hjm6Ccrpu+iB/gTY+CF
Malware Config
Signatures
-
Modifies Installed Components in the registry 2 TTPs 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-1873812795-1433807462-1429862679-1000\Software\Microsoft\Active Setup\Installed Components explorer.exe Key created \REGISTRY\USER\S-1-5-21-1873812795-1433807462-1429862679-1000\Software\Microsoft\Active Setup\Installed Components explorer.exe -
Drops startup file 2 IoCs
description ioc Process File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Os4HjEyhL8.BiBi1 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe -
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Drops desktop.ini file(s) 52 IoCs
description ioc Process File opened for modification C:\Users\Admin\AppData\Local\Microsoft\Windows\WinX\Group1\desktop.ini 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\desktop.ini 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance\Desktop.ini 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe File opened for modification C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group2\desktop.ini 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe File opened for modification C:\Users\Admin\3D Objects\desktop.ini 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe File opened for modification C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe File opened for modification C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\desktop.ini 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe File opened for modification C:\Users\Public\Libraries\desktop.ini 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe File opened for modification C:\Users\Admin\AppData\Local\Microsoft\Windows\Burn\Burn2\desktop.ini 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe File opened for modification C:\Users\Admin\AppData\Local\Microsoft\Windows\WinX\Group2\desktop.ini 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe File opened for modification C:\Users\Public\desktop.ini 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe File opened for modification C:\Users\Public\Documents\desktop.ini 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Desktop.ini 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe File opened for modification C:\Users\Admin\Documents\desktop.ini 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe File opened for modification C:\Users\Admin\Favorites\desktop.ini 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe File opened for modification C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\desktop.ini 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe File opened for modification C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Desktop.ini 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe File opened for modification C:\Users\Admin\AppData\Local\Microsoft\Windows\Application Shortcuts\desktop.ini 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe File opened for modification C:\Users\Admin\Desktop\desktop.ini 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe File opened for modification C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\desktop.ini 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\desktop.ini 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe File opened for modification C:\Users\Admin\Favorites\Links\desktop.ini 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe File opened for modification C:\Users\Public\AccountPictures\desktop.ini 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\AccountPictures\desktop.ini 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\SendTo\desktop.ini 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe File opened for modification C:\Users\Public\Desktop\desktop.ini 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe File opened for modification C:\Users\Public\Downloads\desktop.ini 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe File opened for modification C:\Users\Admin\AppData\Local\Microsoft\Windows\Burn\Burn1\desktop.ini 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Libraries\desktop.ini 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe File opened for modification C:\Users\Admin\Downloads\desktop.ini 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools\desktop.ini 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe File opened for modification C:\Users\Admin\AppData\Local\Microsoft\Windows\WinX\Group3\desktop.ini 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\desktop.ini 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe File opened for modification C:\Users\Admin\Contacts\desktop.ini 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe File opened for modification C:\Users\Public\Music\desktop.ini 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\desktop.ini 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe File opened for modification C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance\Desktop.ini 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe File opened for modification C:\Users\Admin\AppData\Local\Microsoft\Windows\History\desktop.ini 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe File opened for modification C:\Users\Admin\Saved Games\desktop.ini 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe File opened for modification C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\desktop.ini 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe File opened for modification C:\Users\Public\Videos\desktop.ini 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\desktop.ini 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe File opened for modification C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group1\desktop.ini 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe File opened for modification F:\$RECYCLE.BIN\S-1-5-21-1873812795-1433807462-1429862679-1000\desktop.ini explorer.exe File opened for modification C:\Users\Admin\Links\desktop.ini 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe File opened for modification C:\Users\Public\Pictures\desktop.ini 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe File opened for modification F:\$RECYCLE.BIN\S-1-5-21-1873812795-1433807462-1429862679-1000\desktop.ini 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe File opened for modification C:\Users\Admin\AppData\Local\Microsoft\Windows\Burn\Burn\desktop.ini 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\desktop.ini 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe File opened for modification C:\Users\Default\AppData\Roaming\Microsoft\Windows\SendTo\desktop.ini 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe File opened for modification C:\Users\Admin\AppData\Local\Microsoft\Windows\Burn\Burn\desktop.ini explorer.exe -
Enumerates connected drives 3 TTPs 4 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
description ioc Process File opened (read-only) \??\D: explorer.exe File opened (read-only) \??\F: explorer.exe File opened (read-only) \??\D: explorer.exe File opened (read-only) \??\F: explorer.exe -
Checks SCSI registry key(s) 3 TTPs 64 IoCs
SCSI information is often read in order to detect sandboxing environments.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{259abffc-50a7-47ce-af08-68c9a7d73366}\000C explorer.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\ConfigFlags explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{259abffc-50a7-47ce-af08-68c9a7d73366}\000C explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_DADY_DVD-ROM\4&215468a5&0&010000 explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_DADY_DVD-ROM\4&215468a5&0&010000\Properties\{8c7ed206-3f8a-4827-b3ab-ae9e1faefc6c}\0004 explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\Properties\{540b947e-8b40-45bc-a8a2-6a0b894cbda2}\0009 explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{afd97640-86a3-4210-b67c-289c41aabe55}\0002 explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{8c7ed206-3f8a-4827-b3ab-ae9e1faefc6c}\0004 explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{51236583-0c4a-4fe8-b81f-166aec13f510}\007A explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_DADY_DVD-ROM\4&215468a5&0&010000\Properties\{540b947e-8b40-45bc-a8a2-6a0b894cbda2}\0009 explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{540b947e-8b40-45bc-a8a2-6a0b894cbda2}\0009 explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{cf73bb51-3abf-44a2-85e0-9a3dc7a12132}\0006 explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\Properties\{cf73bb51-3abf-44a2-85e0-9a3dc7a12132}\0006 explorer.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_DADY_DVD-ROM\4&215468a5&0&010000\Capabilities explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{afd97640-86a3-4210-b67c-289c41aabe55}\0002 explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001 explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{540b947e-8b40-45bc-a8a2-6a0b894cbda2}\0009 explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\005A explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{259abffc-50a7-47ce-af08-68c9a7d73366}\000C explorer.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\FriendlyName explorer.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\HardwareID explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\Properties\{afd97640-86a3-4210-b67c-289c41aabe55}\0003 explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{259abffc-50a7-47ce-af08-68c9a7d73366}\000C explorer.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\FriendlyName explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{51236583-0c4a-4fe8-b81f-166aec13f510}\007A explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_DADY_DVD-ROM\4&215468a5&0&010000\Properties\{540b947e-8b40-45bc-a8a2-6a0b894cbda2}\0009 explorer.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_DADY_DVD-ROM\4&215468a5&0&010000\FriendlyName explorer.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\HardwareID explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\005A explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\Properties\{540b947e-8b40-45bc-a8a2-6a0b894cbda2}\0009 explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_DADY_DVD-ROM\4&215468a5&0&010000 explorer.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\FriendlyName explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\Properties\{8c7ed206-3f8a-4827-b3ab-ae9e1faefc6c}\0004 explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{51236583-0c4a-4fe8-b81f-166aec13f510}\007A explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_DADY_DVD-ROM\4&215468a5&0&010000\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\005A explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{a45c254e-df1c-4efd-8020-67d146a850e0}\0011 explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{8c7ed206-3f8a-4827-b3ab-ae9e1faefc6c}\0004 explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{540b947e-8b40-45bc-a8a2-6a0b894cbda2}\0009 explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\Properties\{259abffc-50a7-47ce-af08-68c9a7d73366}\000C explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_DADY_DVD-ROM\4&215468a5&0&010000\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_DADY_DVD-ROM\4&215468a5&0&010000\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\005A explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001 explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\Properties\{51236583-0c4a-4fe8-b81f-166aec13f510}\007A explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{51236583-0c4a-4fe8-b81f-166aec13f510}\0064 explorer.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Capabilities explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{8c7ed206-3f8a-4827-b3ab-ae9e1faefc6c}\0002 explorer.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Capabilities explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\005A explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_DADY_DVD-ROM\4&215468a5&0&010000\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\005A explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{8c7ed206-3f8a-4827-b3ab-ae9e1faefc6c}\0002 explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\Properties\{cf73bb51-3abf-44a2-85e0-9a3dc7a12132}\0006 explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_DADY_DVD-ROM\4&215468a5&0&010000\Properties\{8c7ed206-3f8a-4827-b3ab-ae9e1faefc6c}\0004 explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\Properties\{8c7ed206-3f8a-4827-b3ab-ae9e1faefc6c}\0004 explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\Properties\{51236583-0c4a-4fe8-b81f-166aec13f510}\007A explorer.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\FriendlyName explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_DADY_DVD-ROM\4&215468a5&0&010000\Properties\{51236583-0c4a-4fe8-b81f-166aec13f510}\007A explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_DADY_DVD-ROM\4&215468a5&0&010000\Properties\{259abffc-50a7-47ce-af08-68c9a7d73366}\000C explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_DADY_DVD-ROM\4&215468a5&0&010000\Properties\{51236583-0c4a-4fe8-b81f-166aec13f510}\0064 explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_DADY_DVD-ROM\4&215468a5&0&010000\Properties\{afd97640-86a3-4210-b67c-289c41aabe55}\0003 explorer.exe -
Modifies registry class 52 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-1873812795-1433807462-1429862679-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\Internet Explorer\DOMStorage\microsoft.windows.search SearchApp.exe Set value (int) \REGISTRY\USER\S-1-5-21-1873812795-1433807462-1429862679-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\Internet Explorer\DOMStorage\Total\ = "152" SearchApp.exe Set value (data) \REGISTRY\USER\S-1-5-21-1873812795-1433807462-1429862679-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = ffffffff explorer.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4336a54d-038b-4685-ab02-99bb52d3fb8b}\Instance\ explorer.exe Key created \REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1873812795-1433807462-1429862679-1000\{50AB356A-AF70-4E4B-9C01-4B3D464CC141} explorer.exe Key created \REGISTRY\USER\S-1-5-21-1873812795-1433807462-1429862679-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\Internet Explorer\DOMStorage\windows.search SearchApp.exe Key created \REGISTRY\USER\S-1-5-21-1873812795-1433807462-1429862679-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell explorer.exe Key created \REGISTRY\USER\S-1-5-21-1873812795-1433807462-1429862679-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU explorer.exe Set value (int) \REGISTRY\USER\S-1-5-21-1873812795-1433807462-1429862679-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\Internet Explorer\DOMStorage\windows.search\Total = "0" SearchApp.exe Key created \REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1873812795-1433807462-1429862679-1000\{E54CBCE9-20DC-40DF-8B7F-BFDFFE21A224} explorer.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\ explorer.exe Set value (data) \REGISTRY\USER\S-1-5-21-1873812795-1433807462-1429862679-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy\ApplicationFrame\Microsoft.Windows.PeopleExperienceHo = 6801000088020000 explorer.exe Key created \REGISTRY\USER\S-1-5-21-1873812795-1433807462-1429862679-1000_Classes\Local Settings\MuiCache SearchApp.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\ explorer.exe Set value (int) \REGISTRY\USER\S-1-5-21-1873812795-1433807462-1429862679-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\Internet Explorer\DOMStorage\Total\ = "129" SearchApp.exe Key created \REGISTRY\USER\S-1-5-21-1873812795-1433807462-1429862679-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU explorer.exe Set value (data) \REGISTRY\USER\S-1-5-21-1873812795-1433807462-1429862679-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy\ApplicationFrame\Microsoft.Windows.PeopleExperienceHo = 6801000088020000 explorer.exe Set value (data) \REGISTRY\USER\S-1-5-21-1873812795-1433807462-1429862679-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\TrayNotify\IconStreams = 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 explorer.exe Set value (data) \REGISTRY\USER\S-1-5-21-1873812795-1433807462-1429862679-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots explorer.exe Key created \REGISTRY\USER\S-1-5-21-1873812795-1433807462-1429862679-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\Internet Explorer\DOMStorage SearchApp.exe Set value (int) \REGISTRY\USER\S-1-5-21-1873812795-1433807462-1429862679-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\TrayNotify\UserStartTime = "133422949732343163" explorer.exe Key created \REGISTRY\USER\S-1-5-21-1873812795-1433807462-1429862679-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\ explorer.exe Key created \REGISTRY\USER\S-1-5-21-1873812795-1433807462-1429862679-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\Internet Explorer\DOMStorage\Total SearchApp.exe Key created \REGISTRY\USER\S-1-5-21-1873812795-1433807462-1429862679-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\Internet Explorer\EdpDomStorage\Total SearchApp.exe Set value (int) \REGISTRY\USER\S-1-5-21-1873812795-1433807462-1429862679-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\Internet Explorer\DOMStorage\windows.search\Total = "23" SearchApp.exe Key created \REGISTRY\USER\S-1-5-21-1873812795-1433807462-1429862679-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\TrayNotify explorer.exe Set value (str) \REGISTRY\USER\S-1-5-21-1873812795-1433807462-1429862679-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\Internet Settings\Cache\History\CachePrefix = "Visited:" SearchApp.exe Set value (data) \REGISTRY\USER\S-1-5-21-1873812795-1433807462-1429862679-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = ffffffff explorer.exe Key created \REGISTRY\USER\S-1-5-21-1873812795-1433807462-1429862679-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\Internet Explorer\EdpDomStorage SearchApp.exe Key created \REGISTRY\USER\S-1-5-21-1873812795-1433807462-1429862679-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\Internet Explorer\DomStorageState SearchApp.exe Set value (int) \REGISTRY\USER\S-1-5-21-1873812795-1433807462-1429862679-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\Internet Explorer\DOMStorage\microsoft.windows.search\ = "0" SearchApp.exe Set value (data) \REGISTRY\USER\S-1-5-21-1873812795-1433807462-1429862679-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\TrayNotify\PastIconsStream = 1400000005000000010001002100000014000000494c2006210024003c0010001000ffffffff2110ffffffffffffffff424d36000000000000003600000028000000100000004002000001002000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000202020c1c1c1c5b6c6c6caf898989f7959493db434242831010102f000000000000000000000000000000000000000000000000000000001b1b1b576c6c6caf878787f76c6c6cff466046ff354d35ffb0aeadffaeadacffaeadacff959493db3f3f3d7b0c0c0c2400000000000000000000000000000000757575ff444444ff343434ff323232ff2e362eff555a54ffc7c5c4ffbbb9b8ffb3b2b1ffb0aeadffaeadacffaeadacff8c8c8bcf3f3f3d7b0000000300000000595959ff2d2d2dff4f4f4eff8c8a89ffccc9c7ffe6e3e1ffe5e2e0ffe0dddbffd5d3d1ffc7c5c4ffbbb9b8ffb3b2b1ffb0aeadffaeadacff0000000400000000696868a3c0c0bef3e6e3e1ffe6e3e1ffe6e3e1ffe6e3e1ffe6e3e1ffe6e3e1ffd3d0cfffcccac9ffcdcbcaffd5d3d2ffc7c5c4ffbbb9b8ff000000000000000000000000020202082323234f92908fa3dad6d5f3e6e3e1ffd4d1d0ffaaa8a7ffabaaa7ffb0aeabffb0aeacffacaaa9ffbfbdbbe355545483000000000000000000000000000000000000000000000000020202083c3b3b67b0afacffbfbdb8ffbcbab4ffbdbbb5ffc2c0bbffd3d1cfff9d9c9ae703030318000000000000000000000000000000000000000000000000000000003d3d3c8bcfcdc8ffd2d2ccffc6c5c0ffafafabe9d0d0cdffd3d2ceffc6c5bfff3c3c3b8b000000000000000000000000000000000000000000000000000000007b7b79bfdbdad4ffe0dfdaff888884a9737269a07d7d75a9d5d4cdffd1d0c9ff797976bf000000000000000000000000000000000000000000000000000000007e7c7cbfeae1e6fff4e7f2ff8b8b89a680807da085857ea9e3e2dcffdddcd5ff7c7c79bf000000000000000000000000000000000000000000000000000000003f3d3f8bf2e8f0fff9f8f7ffececeaffc4c4c2e9dee2d2ffe3e9cdffdfdfd6ff3e3e3d8b0000000000000000000000000000000000000000000000000000000003030318aeaeace7f9f9f7fff0efe9ffe9e9e1ffe6e6ddffe5e9d1ffa7aa9beb030303180000000000000000000000000000000000000000000000000000000000000000050505278c8c8acfd6d6cfffdcdcd3ffd2d2caff888886cf0d0d0d2f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0e0e34111111400e0e0e3400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dfdfdfdf30303030000000000000000000000000000000000000000060606060ffffffff0000000000000000000000000000000000000000000000000000000080808080bfbfbfbf0000000000000000000000000000000060606060ffffffffffffffff00000000000000000000000000000000ffffffff505050500000000010101010efefefef30303030000000000000000060606060ffffffff60606060ffffffff0000000000000000000000000000000060606060efefefef10101010000000008f8f8f8f8f8f8f8fffffffffffffffffffffffff6060606000000000ffffffff0000000000000000ffffffff30303030000000009f9f9f9f8f8f8f8f0000000050505050bfbfbfbfffffffff00000000000000000000000000000000ffffffff000000000000000070707070afafafaf0000000040404040dfdfdfdf0000000020202020ffffffffffffffff00000000000000000000000000000000ffffffff000000000000000010101010ffffffff0000000000000000ffffffff0000000000000000ffffffffffffffff00000000000000000000000000000000ffffffff000000000000000010101010ffffffff0000000000000000ffffffff0000000000000000ffffffffffffffff00000000000000000000000000000000ffffffff000000000000000070707070afafafaf0000000040404040cfcfcfcf0000000020202020ffffffffffffffffffffffffffffffff6060606000000000ffffffff0000000000000000ffffffff40404040000000009f9f9f9f8f8f8f8f0000000050505050bfbfbfbf000000000000000060606060ffffffff60606060ffffffff0000000000000000000000000000000060606060efefefef10101010000000008f8f8f8f8f8f8f8f00000000000000000000000060606060ffffffffffffffff00000000000000000000000000000000ffffffff505050500000000010101010efefefef303030300000000000000000000000000000000060606060ffffffff0000000000000000000000000000000000000000000000000000000080808080bfbfbfbf0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dfdfdfdf303030300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffff000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000000ffffffff00000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dfdfdfdf30303030000000000000000000000000000000000000000060606060ffffffff0000000000000000000000000000000000000000000000000000000080808080bfbfbfbf0000000000000000000000000000000060606060ffffffffffffffff00000000000000000000000000000000ffffffff505050500000000010101010efefefef30303030000000000000000060606060ffffffff60606060ffffffff0000000000000000000000000000000060606060efefefef10101010000000008f8f8f8f8f8f8f8fffffffffffffffffffffffff6060606000000000ffffffff0000000000000000ffffffff30303030000000009f9f9f9f8f8f8f8f0000000050505050bfbfbfbfffffffff00000000000000000000000000000000ffffffff000000000000000070707070afafafaf0000000040404040dfdfdfdf0000000020202020ffffffffffffffff00000000000000000000000000000000ffffffff000000000000000010101010ffffffff0000000000000000ffffffff0000000000000000ffffffffffffffff00000000000000000000000000000000ffffffff000000000000000010101010ffffffff0000000000000000ffffffff0000000000000000ffffffffffffffff00000000000000000000000000000000ffffffff000000000000000070707070afafafaf0000000040404040cfcfcfcf0000000020202020ffffffffffffffffffffffffffffffff6060606000000000ffffffff0000000000000000ffffffff40404040000000009f9f9f9f8f8f8f8f0000000050505050bfbfbfbf000000000000000060606060ffffffff60606060ffffffff0000000000000000000000000000000060606060efefefef10101010000000008f8f8f8f8f8f8f8f00000000000000000000000060606060ffffffffffffffff00000000000000000000000000000000ffffffff505050500000000010101010efefefef303030300000000000000000000000000000000060606060ffffffff0000000000000000000000000000000000000000000000000000000080808080bfbfbfbf0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dfdfdfdf303030300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffff000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000000ffffffff00000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dfdfdfdf30303030000000000000000000000000000000000000000060606060ffffffff0000000000000000000000000000000000000000000000000000000080808080bfbfbfbf0000000000000000000000000000000060606060ffffffffffffffff00000000000000000000000000000000ffffffff505050500000000010101010efefefef30303030000000000000000060606060ffffffff60606060ffffffff0000000000000000000000000000000060606060efefefef10101010000000008f8f8f8f8f8f8f8fffffffffffffffffffffffff6060606000000000ffffffff0000000000000000ffffffff30303030000000009f9f9f9f8f8f8f8f0000000050505050bfbfbfbfffffffff00000000000000000000000000000000ffffffff000000000000000070707070afafafaf0000000040404040dfdfdfdf0000000020202020ffffffffffffffff00000000000000000000000000000000ffffffff000000000000000010101010ffffffff0000000000000000ffffffff0000000000000000ffffffffffffffff00000000000000000000000000000000ffffffff000000000000000010101010ffffffff0000000000000000ffffffff0000000000000000ffffffffffffffff00000000000000000000000000000000ffffffff000000000000000070707070afafafaf0000000040404040cfcfcfcf0000000020202020ffffffffffffffffffffffffffffffff6060606000000000ffffffff0000000000000000ffffffff40404040000000009f9f9f9f8f8f8f8f0000000050505050bfbfbfbf000000000000000060606060ffffffff60606060ffffffff0000000000000000000000000000000060606060efefefef10101010000000008f8f8f8f8f8f8f8f00000000000000000000000060606060ffffffffffffffff00000000000000000000000000000000ffffffff505050500000000010101010efefefef303030300000000000000000000000000000000060606060ffffffff0000000000000000000000000000000000000000000000000000000080808080bfbfbfbf0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dfdfdfdf3030303000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040404040a0a0a0a0f0f0f0f0ffffffff9f9f9f9f0000000090909090ffffffffffffffffffffffff9090909000000000000000000000000010101010b0b0b0b0f0f0f0f0b8b8b8b8f3f3f3f32f2f2f2f0303030390909090f0f0f0f07070707030303030a6a6a6a6f9f9f9f9909090900000000010101010d0d0d0d0b0b0b0b01f1f1f1ff0f0f0f0404040400000000000000000ffffffff707070700000000060606060ffffffffa6a6a6a6ffffffff00000000b0b0b0b0b0b0b0b00000000060606060d0d0d0d0000000000000000000000000ffffffff3030303060606060ffffffff6060606040404040ffffffff40404040f0f0f0f01010101000000000a0a0a0a070707070000000000000000000000000ffffffff9c9c9c9cffffffff606060600000000070707070ffffffffb8b8b8b8fffffffffffffffffffffffffffffffffffffffffffffffffbfbfbfb0f0f0f0f90909090f9f9f9f9a6a6a6a64040404070707070f0f0f0f090909090e0e0e0e0303030300000000000000000ffffffff101010100000000000000000000000000000000090909090ffffffffffffffffffffffff9090909000000000ffffffff000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000009f9f9f9fffffffff000000000000000000000000ffffffff000000000000000000000000000000000000000000000000efefefef000000000000000000000000ffffffffe0e0e0e0303030300000000000000000ffffffff101010100000000000000000000000000000000010101010ffffffff000000000000000030303030e0e0e0e0b8b8b8b8ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffb8b8b8b840404040f0f0f0f01010101000000000a0a0a0a0707070700000000000000000000000000000000070707070a0a0a0a00000000010101010f0f0f0f04040404000000000b0b0b0b0b0b0b0b00000000060606060d0d0d0d000000000000000000000000000000000d0d0d0d06060606000000000b0b0b0b0b0b0b0b0000000000000000010101010d0d0d0d0b0b0b0b01f1f1f1ff0f0f0f040404040000000000000000040404040f0f0f0f01f1f1f1fb0b0b0b0d0d0d0d01010101000000000000000000000000010101010b0b0b0b0f0f0f0f0b8b8b8b8f3f3f3f33030303030303030f3f3f3f3b8b8b8b8f0f0f0f0b0b0b0b01010101000000000000000000000000000000000000000000000000040404040a0a0a0a0f0f0f0f0fffffffffffffffff0f0f0f0a0a0a0a040404040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dfdfdfdf30303030000000000000000000000000000000000000000060606060ffffffff0000000000000000000000000000000000000000000000000000000080808080bfbfbfbf0000000000000000000000000000000060606060ffffffffffffffff00000000000000000000000000000000ffffffff505050500000000010101010efefefef30303030000000000000000060606060ffffffff60606060ffffffff0000000000000000000000000000000060606060efefefef10101010000000008f8f8f8f8f8f8f8fffffffffffffffffffffffff6060606000000000ffffffff0000000000000000ffffffff30303030000000009f9f9f9f8f8f8f8f0000000050505050bfbfbfbfffffffff00000000000000000000000000000000ffffffff000000000000000070707070afafafaf0000000040404040dfdfdfdf0000000020202020ffffffffffffffff00000000000000000000000000000000ffffffff000000000000000010101010ffffffff0000000000000000ffffffff0000000000000000ffffffffffffffff00000000000000000000000000000000ffffffff000000000000000010101010ffffffff0000000000000000ffffffff0000000000000000ffffffffffffffff00000000000000000000000000000000ffffffff000000000000000070707070afafafaf0000000040404040cfcfcfcf0000000020202020ffffffffffffffffffffffffffffffff6060606000000000ffffffff0000000000000000ffffffff40404040000000009f9f9f9f8f8f8f8f0000000050505050bfbfbfbf000000000000000060606060ffffffff60606060ffffffff0000000000000000000000000000000060606060efefefef10101010000000008f8f8f8f8f8f8f8f00000000000000000000000060606060ffffffffffffffff00000000000000000000000000000000ffffffff505050500000000010101010efefefef303030300000000000000000000000000000000060606060ffffffff0000000000000000000000000000000000000000000000000000000080808080bfbfbfbf0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dfdfdfdf303030300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffff000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000000ffffffff00000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dfdfdfdf30303030000000000000000000000000000000000000000060606060ffffffff0000000000000000000000000000000000000000000000000000000080808080bfbfbfbf0000000000000000000000000000000060606060ffffffffffffffff00000000000000000000000000000000ffffffff505050500000000010101010efefefef30303030000000000000000060606060ffffffff60606060ffffffff0000000000000000000000000000000060606060efefefef10101010000000008f8f8f8f8f8f8f8fffffffffffffffffffffffff6060606000000000ffffffff0000000000000000ffffffff30303030000000009f9f9f9f8f8f8f8f0000000050505050bfbfbfbfffffffff00000000000000000000000000000000ffffffff000000000000000070707070afafafaf0000000040404040dfdfdfdf0000000020202020ffffffffffffffff00000000000000000000000000000000ffffffff000000000000000010101010ffffffff0000000000000000ffffffff0000000000000000ffffffffffffffff00000000000000000000000000000000ffffffff000000000000000010101010ffffffff0000000000000000ffffffff0000000000000000ffffffffffffffff00000000000000000000000000000000ffffffff000000000000000070707070afafafaf0000000040404040cfcfcfcf0000000020202020ffffffffffffffffffffffffffffffff6060606000000000ffffffff0000000000000000ffffffff40404040000000009f9f9f9f8f8f8f8f0000000050505050bfbfbfbf000000000000000060606060ffffffff60606060ffffffff0000000000000000000000000000000060606060efefefef10101010000000008f8f8f8f8f8f8f8f00000000000000000000000060606060ffffffffffffffff00000000000000000000000000000000ffffffff505050500000000010101010efefefef303030300000000000000000000000000000000060606060ffffffff0000000000000000000000000000000000000000000000000000000080808080bfbfbfbf0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dfdfdfdf303030300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffff000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000000ffffffff00000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dfdfdfdf30303030000000000000000000000000000000000000000060606060ffffffff0000000000000000000000000000000000000000000000000000000080808080bfbfbfbf0000000000000000000000000000000060606060ffffffffffffffff00000000000000000000000000000000ffffffff505050500000000010101010efefefef30303030000000000000000060606060ffffffff60606060ffffffff0000000000000000000000000000000060606060efefefef10101010000000008f8f8f8f8f8f8f8fffffffffffffffffffffffff6060606000000000ffffffff0000000000000000ffffffff30303030000000009f9f9f9f8f8f8f8f0000000050505050bfbfbfbfffffffff00000000000000000000000000000000ffffffff000000000000000070707070afafafaf0000000040404040dfdfdfdf0000000020202020ffffffffffffffff00000000000000000000000000000000ffffffff000000000000000010101010ffffffff0000000000000000ffffffff0000000000000000ffffffffffffffff00000000000000000000000000000000ffffffff000000000000000010101010ffffffff0000000000000000ffffffff0000000000000000ffffffffffffffff00000000000000000000000000000000ffffffff000000000000000070707070afafafaf0000000040404040cfcfcfcf0000000020202020ffffffffffffffffffffffffffffffff6060606000000000ffffffff0000000000000000ffffffff40404040000000009f9f9f9f8f8f8f8f0000000050505050bfbfbfbf000000000000000060606060ffffffff60606060ffffffff0000000000000000000000000000000060606060efefefef10101010000000008f8f8f8f8f8f8f8f00000000000000000000000060606060ffffffffffffffff00000000000000000000000000000000ffffffff505050500000000010101010efefefef303030300000000000000000000000000000000060606060ffffffff0000000000000000000000000000000000000000000000000000000080808080bfbfbfbf0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dfdfdfdf303030300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffff000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000000ffffffff00000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dfdfdfdf30303030000000000000000000000000000000000000000060606060ffffffff0000000000000000000000000000000000000000000000000000000080808080bfbfbfbf0000000000000000000000000000000060606060ffffffffffffffff00000000000000000000000000000000ffffffff505050500000000010101010efefefef30303030000000000000000060606060ffffffff60606060ffffffff0000000000000000000000000000000060606060efefefef10101010000000008f8f8f8f8f8f8f8fffffffffffffffffffffffff6060606000000000ffffffff0000000000000000ffffffff30303030000000009f9f9f9f8f8f8f8f0000000050505050bfbfbfbfffffffff00000000000000000000000000000000ffffffff000000000000000070707070afafafaf0000000040404040dfdfdfdf0000000020202020ffffffffffffffff00000000000000000000000000000000ffffffff000000000000000010101010ffffffff0000000000000000ffffffff0000000000000000ffffffffffffffff00000000000000000000000000000000ffffffff000000000000000010101010ffffffff0000000000000000ffffffff0000000000000000ffffffffffffffff00000000000000000000000000000000ffffffff000000000000000070707070afafafaf0000000040404040cfcfcfcf0000000020202020ffffffffffffffffffffffffffffffff6060606000000000ffffffff0000000000000000ffffffff40404040000000009f9f9f9f8f8f8f8f0000000050505050bfbfbfbf000000000000000060606060ffffffff60606060ffffffff0000000000000000000000000000000060606060efefefef10101010000000008f8f8f8f8f8f8f8f00000000000000000000000060606060ffffffffffffffff00000000000000000000000000000000ffffffff505050500000000010101010efefefef303030300000000000000000000000000000000060606060ffffffff0000000000000000000000000000000000000000000000000000000080808080bfbfbfbf0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dfdfdfdf303030300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffff000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000000ffffffff00000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dfdfdfdf30303030000000000000000000000000000000000000000060606060ffffffff0000000000000000000000000000000000000000000000000000000080808080bfbfbfbf0000000000000000000000000000000060606060ffffffffffffffff00000000000000000000000000000000ffffffff505050500000000010101010efefefef30303030000000000000000060606060ffffffff60606060ffffffff0000000000000000000000000000000060606060efefefef10101010000000008f8f8f8f8f8f8f8fffffffffffffffffffffffff6060606000000000ffffffff0000000000000000ffffffff30303030000000009f9f9f9f8f8f8f8f0000000050505050bfbfbfbfffffffff00000000000000000000000000000000ffffffff000000000000000070707070afafafaf0000000040404040dfdfdfdf0000000020202020ffffffffffffffff00000000000000000000000000000000ffffffff000000000000000010101010ffffffff0000000000000000ffffffff0000000000000000ffffffffffffffff00000000000000000000000000000000ffffffff000000000000000010101010ffffffff0000000000000000ffffffff0000000000000000ffffffffffffffff00000000000000000000000000000000ffffffff000000000000000070707070afafafaf0000000040404040cfcfcfcf0000000020202020ffffffffffffffffffffffffffffffff6060606000000000ffffffff0000000000000000ffffffff40404040000000009f9f9f9f8f8f8f8f0000000050505050bfbfbfbf000000000000000060606060ffffffff60606060ffffffff0000000000000000000000000000000060606060efefefef10101010000000008f8f8f8f8f8f8f8f00000000000000000000000060606060ffffffffffffffff00000000000000000000000000000000ffffffff505050500000000010101010efefefef303030300000000000000000000000000000000060606060ffffffff0000000000000000000000000000000000000000000000000000000080808080bfbfbfbf0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dfdfdfdf303030300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffff000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000000ffffffff00000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dfdfdfdf30303030000000000000000000000000000000000000000060606060ffffffff0000000000000000000000000000000000000000000000000000000080808080bfbfbfbf0000000000000000000000000000000060606060ffffffffffffffff00000000000000000000000000000000ffffffff505050500000000010101010efefefef30303030000000000000000060606060ffffffff60606060ffffffff0000000000000000000000000000000060606060efefefef10101010000000008f8f8f8f8f8f8f8fffffffffffffffffffffffff6060606000000000ffffffff0000000000000000ffffffff30303030000000009f9f9f9f8f8f8f8f0000000050505050bfbfbfbfffffffff00000000000000000000000000000000ffffffff000000000000000070707070afafafaf0000000040404040dfdfdfdf0000000020202020ffffffffffffffff00000000000000000000000000000000ffffffff000000000000000010101010ffffffff0000000000000000ffffffff0000000000000000ffffffffffffffff00000000000000000000000000000000ffffffff000000000000000010101010ffffffff0000000000000000ffffffff0000000000000000ffffffffffffffff00000000000000000000000000000000ffffffff000000000000000070707070afafafaf0000000040404040cfcfcfcf0000000020202020ffffffffffffffffffffffffffffffff6060606000000000ffffffff0000000000000000ffffffff40404040000000009f9f9f9f8f8f8f8f0000000050505050bfbfbfbf000000000000000060606060ffffffff60606060ffffffff0000000000000000000000000000000060606060efefefef10101010000000008f8f8f8f8f8f8f8f00000000000000000000000060606060ffffffffffffffff00000000000000000000000000000000ffffffff505050500000000010101010efefefef303030300000000000000000000000000000000060606060ffffffff0000000000000000000000000000000000000000000000000000000080808080bfbfbfbf0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dfdfdfdf303030300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffff000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000000ffffffff00000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dfdfdfdf30303030000000000000000000000000000000000000000060606060ffffffff0000000000000000000000000000000000000000000000000000000080808080bfbfbfbf0000000000000000000000000000000060606060ffffffffffffffff00000000000000000000000000000000ffffffff505050500000000010101010efefefef30303030000000000000000060606060ffffffff60606060ffffffff0000000000000000000000000000000060606060efefefef10101010000000008f8f8f8f8f8f8f8fffffffffffffffffffffffff6060606000000000ffffffff0000000000000000ffffffff30303030000000009f9f9f9f8f8f8f8f0000000050505050bfbfbfbfffffffff00000000000000000000000000000000ffffffff000000000000000070707070afafafaf0000000040404040dfdfdfdf0000000020202020ffffffffffffffff00000000000000000000000000000000ffffffff000000000000000010101010ffffffff0000000000000000ffffffff0000000000000000ffffffffffffffff00000000000000000000000000000000ffffffff000000000000000010101010ffffffff0000000000000000ffffffff0000000000000000ffffffffffffffff00000000000000000000000000000000ffffffff000000000000000070707070afafafaf0000000040404040cfcfcfcf0000000020202020ffffffffffffffffffffffffffffffff6060606000000000ffffffff0000000000000000ffffffff40404040000000009f9f9f9f8f8f8f8f0000000050505050bfbfbfbf000000000000000060606060ffffffff60606060ffffffff0000000000000000000000000000000060606060efefefef10101010000000008f8f8f8f8f8f8f8f00000000000000000000000060606060ffffffffffffffff00000000000000000000000000000000ffffffff505050500000000010101010efefefef303030300000000000000000000000000000000060606060ffffffff0000000000000000000000000000000000000000000000000000000080808080bfbfbfbf0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dfdfdfdf303030300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffff000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000000ffffffff00000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dfdfdfdf30303030000000000000000000000000000000000000000060606060ffffffff0000000000000000000000000000000000000000000000000000000080808080bfbfbfbf0000000000000000000000000000000060606060ffffffffffffffff00000000000000000000000000000000ffffffff505050500000000010101010efefefef30303030000000000000000060606060ffffffff60606060ffffffff0000000000000000000000000000000060606060efefefef10101010000000008f8f8f8f8f8f8f8fffffffffffffffffffffffff6060606000000000ffffffff0000000000000000ffffffff30303030000000009f9f9f9f8f8f8f8f0000000050505050bfbfbfbfffffffff00000000000000000000000000000000ffffffff000000000000000070707070afafafaf0000000040404040dfdfdfdf0000000020202020ffffffffffffffff00000000000000000000000000000000ffffffff000000000000000010101010ffffffff0000000000000000ffffffff0000000000000000ffffffffffffffff00000000000000000000000000000000ffffffff000000000000000010101010ffffffff0000000000000000ffffffff0000000000000000ffffffffffffffff00000000000000000000000000000000ffffffff000000000000000070707070afafafaf0000000040404040cfcfcfcf0000000020202020ffffffffffffffffffffffffffffffff6060606000000000ffffffff0000000000000000ffffffff40404040000000009f9f9f9f8f8f8f8f0000000050505050bfbfbfbf000000000000000060606060ffffffff60606060ffffffff0000000000000000000000000000000060606060efefefef10101010000000008f8f8f8f8f8f8f8f00000000000000000000000060606060ffffffffffffffff00000000000000000000000000000000ffffffff505050500000000010101010efefefef303030300000000000000000000000000000000060606060ffffffff0000000000000000000000000000000000000000000000000000000080808080bfbfbfbf0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dfdfdfdf303030300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffff000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000000ffffffff00000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dfdfdfdf30303030000000000000000000000000000000000000000060606060ffffffff0000000000000000000000000000000000000000000000000000000080808080bfbfbfbf0000000000000000000000000000000060606060ffffffffffffffff00000000000000000000000000000000ffffffff505050500000000010101010efefefef30303030000000000000000060606060ffffffff60606060ffffffff0000000000000000000000000000000060606060efefefef10101010000000008f8f8f8f8f8f8f8fffffffffffffffffffffffff6060606000000000ffffffff0000000000000000ffffffff30303030000000009f9f9f9f8f8f8f8f0000000050505050bfbfbfbfffffffff00000000000000000000000000000000ffffffff000000000000000070707070afafafaf0000000040404040dfdfdfdf0000000020202020ffffffffffffffff00000000000000000000000000000000ffffffff000000000000000010101010ffffffff0000000000000000ffffffff0000000000000000ffffffffffffffff00000000000000000000000000000000ffffffff000000000000000010101010ffffffff0000000000000000ffffffff0000000000000000ffffffffffffffff00000000000000000000000000000000ffffffff000000000000000070707070afafafaf0000000040404040cfcfcfcf0000000020202020ffffffffffffffffffffffffffffffff6060606000000000ffffffff0000000000000000ffffffff40404040000000009f9f9f9f8f8f8f8f0000000050505050bfbfbfbf000000000000000060606060ffffffff60606060ffffffff0000000000000000000000000000000060606060efefefef10101010000000008f8f8f8f8f8f8f8f00000000000000000000000060606060ffffffffffffffff00000000000000000000000000000000ffffffff505050500000000010101010efefefef303030300000000000000000000000000000000060606060ffffffff0000000000000000000000000000000000000000000000000000000080808080bfbfbfbf0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dfdfdfdf303030300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffff000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000000ffffffff00000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060606060a0a0a0a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060606060ffffffff60606060000000000000000030303030868686869999999999999999999999999999999999999999999999999999999999999999babababaffffffff60606060303030300a0a0a0a3c3c3c3c9e9e9e9e9999999999999999999999999999999999999999999999999999999999999999babababaffffffff606060603a3a3a3a999999996b6b6b6b464646467d7d7d7d8c8c8c8ca6a6a6a69999999999999999999999999999999999999999babababaffffffff606060603a3a3a3aa6a6a6a69b9b9b9b7d7d7d7d6666666666666666666666666c6c6c6c8c8c8c8c9b9b9b9b9b9b9b9b99999999babababaffffffff60606060404040409f9f9f9f8e8e8e8e808080808080808066666666666666666666666666666666666666666666666684848484b7b7b7b7ffffffff606060603030303097979797808080808080808080808080787878785a5a5a5a66666666666666666666666666666666666666669c9c9c9cffffffff606060602626262687878787808080808080808080808080808080802828282820202020666666666666666666666666666666669c9c9c9cffffffff606060601d1d1d1d4d4d4d4d535353536a6a6a6a6b6b6b6b40404040101010100000000000000000202020205a5a5a5a69696969a0a0a0a0ffffffff606060601d1d1d1d4d4d4d4d4d4d4d4d4d4d4d4d4d4d4d4d3a3a3a3a00000000000000000000000000000000000000000000000063636363ffffffff606060601d1d1d1d4d4d4d4d4d4d4d4d4d4d4d4d4d4d4d4d484848480e0e0e0e000000000000000000000000000000000000000060606060ffffffff606060600a0a0a0a4d4d4d4d4d4d4d4d4d4d4d4d4d4d4d4d444444440e0e0e0e000000000000000000000000000000000000000000000000a0a0a0a06060606000000000000000000000000013131313131313130e0e0e0e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000056565678888888bf888888bf888888bf888888bf888888bf888888bf888888bf888888bf888888bf888888bf4d4d4d6c33333348888888bf6f6f6f9b2b2b2b3c888888bf888888bf888888bf888888bf888888bf888888bf888888bf888888bf888888bf888888bf888888bf888888bf888888bf888888bf6a6a6a953737374d888888bf888888bf888888bf888888bf888888bf888888bf888888bf888888bf888888bf888888bf888888bf808080b4888888bf888888bf808080b30909090c6c6c6c97888888bf888888bf888888bf888888bf888888bf888888bf888888bf888888bf888888bf787878a8111111186f6f6f9c888888bf888888bf5e5e5e831010101711111118888888bf888888bf888888bf888888bf888888bf888888bf888888bf888888bf4d4d4d6c000000000909090c4d4d4d6c888888bf888888bf888888bf101010176363638b888888bf888888bf888888bf828282b65c5c5c81696969934545456000000000000000000000000011111118888888bf888888bf888888bf6f6f6f9b0808080b4242425d4f4f4f6e4c4c4c6b111111182222222f1515151e000000000000000000000000000000000000000067676790888888bf888888bf888888bf838383b96a6a6a956666668f6666668f777777a7888888bf3c3c3c5400000000000000000000000000000000000000000909090c565656786767679056565678808080b4888888bf888888bf888888bf888888bf808080b40909090c0000000000000000000000000000000000000000000000000000000000000000000000001a1a1a24787878a8888888bf888888bf676767901a1a1a240000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dfdfdfdf30303030000000000000000000000000000000000000000060606060ffffffff0000000000000000000000000000000000000000000000000000000080808080bfbfbfbf0000000000000000000000000000000060606060ffffffffffffffff00000000000000000000000000000000ffffffff505050500000000010101010efefefef30303030000000000000000060606060ffffffff60606060ffffffff0000000000000000000000000000000060606060efefefef10101010000000008f8f8f8f8f8f8f8fffffffffffffffffffffffff6060606000000000ffffffff0000000000000000ffffffff30303030000000009f9f9f9f8f8f8f8f0000000050505050bfbfbfbfffffffff00000000000000000000000000000000ffffffff000000000000000070707070afafafaf0000000040404040dfdfdfdf0000000020202020ffffffffffffffff00000000000000000000000000000000ffffffff000000000000000010101010ffffffff0000000000000000ffffffff0000000000000000ffffffffffffffff00000000000000000000000000000000ffffffff000000000000000010101010ffffffff0000000000000000ffffffff0000000000000000ffffffffffffffff00000000000000000000000000000000ffffffff000000000000000070707070afafafaf0000000040404040cfcfcfcf0000000020202020ffffffffffffffffffffffffffffffff6060606000000000ffffffff0000000000000000ffffffff40404040000000009f9f9f9f8f8f8f8f0000000050505050bfbfbfbf000000000000000060606060ffffffff60606060ffffffff0000000000000000000000000000000060606060efefefef10101010000000008f8f8f8f8f8f8f8f00000000000000000000000060606060ffffffffffffffff00000000000000000000000000000000ffffffff505050500000000010101010efefefef303030300000000000000000000000000000000060606060ffffffff0000000000000000000000000000000000000000000000000000000080808080bfbfbfbf0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dfdfdfdf303030300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffff000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000000ffffffff00000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dfdfdfdf30303030000000000000000000000000000000000000000060606060ffffffff0000000000000000000000000000000000000000000000000000000080808080bfbfbfbf0000000000000000000000000000000060606060ffffffffffffffff00000000000000000000000000000000ffffffff505050500000000010101010efefefef30303030000000000000000060606060ffffffff60606060ffffffff0000000000000000000000000000000060606060efefefef10101010000000008f8f8f8f8f8f8f8fffffffffffffffffffffffff6060606000000000ffffffff0000000000000000ffffffff30303030000000009f9f9f9f8f8f8f8f0000000050505050bfbfbfbfffffffff00000000000000000000000000000000ffffffff000000000000000070707070afafafaf0000000040404040dfdfdfdf0000000020202020ffffffffffffffff00000000000000000000000000000000ffffffff000000000000000010101010ffffffff0000000000000000ffffffff0000000000000000ffffffffffffffff00000000000000000000000000000000ffffffff000000000000000010101010ffffffff0000000000000000ffffffff0000000000000000ffffffffffffffff00000000000000000000000000000000ffffffff000000000000000070707070afafafaf0000000040404040cfcfcfcf0000000020202020ffffffffffffffffffffffffffffffff6060606000000000ffffffff0000000000000000ffffffff40404040000000009f9f9f9f8f8f8f8f0000000050505050bfbfbfbf000000000000000060606060ffffffff60606060ffffffff0000000000000000000000000000000060606060efefefef10101010000000008f8f8f8f8f8f8f8f00000000000000000000000060606060ffffffffffffffff00000000000000000000000000000000ffffffff505050500000000010101010efefefef303030300000000000000000000000000000000060606060ffffffff0000000000000000000000000000000000000000000000000000000080808080bfbfbfbf0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dfdfdfdf303030300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffff000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000000ffffffff00000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dfdfdfdf30303030000000000000000000000000000000000000000060606060ffffffff0000000000000000000000000000000000000000000000000000000080808080bfbfbfbf0000000000000000000000000000000060606060ffffffffffffffff00000000000000000000000000000000ffffffff505050500000000010101010efefefef30303030000000000000000060606060ffffffff60606060ffffffff0000000000000000000000000000000060606060efefefef10101010000000008f8f8f8f8f8f8f8fffffffffffffffffffffffff6060606000000000ffffffff0000000000000000ffffffff30303030000000009f9f9f9f8f8f8f8f0000000050505050bfbfbfbfffffffff00000000000000000000000000000000ffffffff000000000000000070707070afafafaf0000000040404040dfdfdfdf0000000020202020ffffffffffffffff00000000000000000000000000000000ffffffff000000000000000010101010ffffffff0000000000000000ffffffff0000000000000000ffffffffffffffff00000000000000000000000000000000ffffffff000000000000000010101010ffffffff0000000000000000ffffffff0000000000000000ffffffffffffffff00000000000000000000000000000000ffffffff000000000000000070707070afafafaf0000000040404040cfcfcfcf0000000020202020ffffffffffffffffffffffffffffffff6060606000000000ffffffff0000000000000000ffffffff40404040000000009f9f9f9f8f8f8f8f0000000050505050bfbfbfbf000000000000000060606060ffffffff60606060ffffffff0000000000000000000000000000000060606060efefefef10101010000000008f8f8f8f8f8f8f8f00000000000000000000000060606060ffffffffffffffff00000000000000000000000000000000ffffffff505050500000000010101010efefefef303030300000000000000000000000000000000060606060ffffffff0000000000000000000000000000000000000000000000000000000080808080bfbfbfbf0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dfdfdfdf303030300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffff000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000000ffffffff00000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000424d3e000000000000003e0000002800000010000000400200000100010000000000000900000000000000000000000000000000000000000000ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffff0000e03f000080070000800000008000000080010000c0010000f8010000fc010000fc010000fc010000fc010000fc010000fe030000ff8f0000ffff0000ffff0000fff90000f3f90000e3c80000c3c400000b2400007b2400007b3600007b3600007b2400000b240000c3c40000e3c80000f3f90000fff90000ffff0000ffff0000d80f0000df7f0000df7f0000c0000000dffe0000dffe0000dffe000007fe000077fe000057fe000007fe000077fe000000000000ffff0000ffff0000ffff0000fff90000f3f90000e3c80000c3c400000b2400007b2400007b3600007b3600007b2400000b240000c3c40000e3c80000f3f90000fff90000ffff0000ffff0000d80f0000df7f0000df7f0000c0000000dffe0000dffe0000dffe000007fe000077fe000057fe000007fe000077fe000000000000ffff0000ffff0000ffff0000fff90000f3f90000e3c80000c3c400000b2400007b2400007b3600007b3600007b2400000b240000c3c40000e3c80000f3f90000fff90000ffff0000f0410000c00000008190000093800000138400000000000033c1000077fe000077ee000033cc00000000000013c8000093c9000081810000c0030000f00f0000ffff0000fff90000f3f90000e3c80000c3c400000b2400007b2400007b3600007b3600007b2400000b240000c3c40000e3c80000f3f90000fff90000ffff0000ffff0000d80f0000df7f0000df7f0000c0000000dffe0000dffe0000dffe000007fe000077fe000057fe000007fe000077fe000000000000ffff0000ffff0000ffff0000fff90000f3f90000e3c80000c3c400000b2400007b2400007b3600007b3600007b2400000b240000c3c40000e3c80000f3f90000fff90000ffff0000ffff0000d80f0000df7f0000df7f0000c0000000dffe0000dffe0000dffe000007fe000077fe000057fe000007fe000077fe000000000000ffff0000ffff0000ffff0000fff90000f3f90000e3c80000c3c400000b2400007b2400007b3600007b3600007b2400000b240000c3c40000e3c80000f3f90000fff90000ffff0000ffff0000d80f0000df7f0000df7f0000c0000000dffe0000dffe0000dffe000007fe000077fe000057fe000007fe000077fe000000000000ffff0000ffff0000ffff0000fff90000f3f90000e3c80000c3c400000b2400007b2400007b3600007b3600007b2400000b240000c3c40000e3c80000f3f90000fff90000ffff0000ffff0000d80f0000df7f0000df7f0000c0000000dffe0000dffe0000dffe000007fe000077fe000057fe000007fe000077fe000000000000ffff0000ffff0000ffff0000fff90000f3f90000e3c80000c3c400000b2400007b2400007b3600007b3600007b2400000b240000c3c40000e3c80000f3f90000fff90000ffff0000ffff0000d80f0000df7f0000df7f0000c0000000dffe0000dffe0000dffe000007fe000077fe000057fe000007fe000077fe000000000000ffff0000ffff0000ffff0000fff90000f3f90000e3c80000c3c400000b2400007b2400007b3600007b3600007b2400000b240000c3c40000e3c80000f3f90000fff90000ffff0000ffff0000d80f0000df7f0000df7f0000c0000000dffe0000dffe0000dffe000007fe000077fe000057fe000007fe000077fe000000000000ffff0000ffff0000ffff0000fff90000f3f90000e3c80000c3c400000b2400007b2400007b3600007b3600007b2400000b240000c3c40000e3c80000f3f90000fff90000ffff0000ffff0000d80f0000df7f0000df7f0000c0000000dffe0000dffe0000dffe000007fe000077fe000057fe000007fe000077fe000000000000ffff0000ffff0000ffff0000fff90000f3f90000e3c80000c3c400000b2400007b2400007b3600007b3600007b2400000b240000c3c40000e3c80000f3f90000fff90000ffff0000ffff0000d80f0000df7f0000df7f0000c0000000dffe0000dffe0000dffe000007fe000077fe000057fe000007fe000077fe000000000000ffff0000ffff0000ffff0000fff90000f3f90000e3c80000c3c400000b2400007b2400007b3600007b3600007b2400000b240000c3c40000e3c80000f3f90000fff90000ffff0000ffff0000d80f0000df7f0000df7f0000c0000000dffe0000dffe0000dffe000007fe000077fe000057fe000007fe000077fe000000000000ffff0000ffff0000ffff0000fff90000fff100008000000000000000000000000000000000000000000000000001000080070000e0070000c00f0000ce3f0000ffff0000ffff0000ffff0000ffff0000ffff0000ffff0000f0000000000000000000000000000000000100000003000080070000c0070000c0070000fc0f0000ffff0000ffff0000ffff0000fff90000f3f90000e3c80000c3c400000b2400007b2400007b3600007b3600007b2400000b240000c3c40000e3c80000f3f90000fff90000ffff0000ffff0000d80f0000df7f0000df7f0000c0000000dffe0000dffe0000dffe000007fe000077fe000057fe000007fe000077fe000000000000ffff0000ffff0000ffff0000fff90000f3f90000e3c80000c3c400000b2400007b2400007b3600007b3600007b2400000b240000c3c40000e3c80000f3f90000fff90000ffff0000ffff0000d80f0000df7f0000df7f0000c0000000dffe0000dffe0000dffe000007fe000077fe000057fe000007fe000077fe000000000000ffff0000ffff0000ffff0000fff90000f3f90000e3c80000c3c400000b2400007b2400007b3600007b3600007b2400000b240000c3c40000e3c80000f3f90000fff90000ffff0000ffff0000d80f0000df7f0000df7f0000c0000000dffe0000dffe0000dffe000007fe000077fe000057fe000007fe000077fe000000000000ffff0000ffff0000000000000000000000000000000000000000000000000100000008000000210000000a0000001c010000010000000000000001000000000000000100000000000000010000000000000001000000000000000100000000000000010000000000000001000000000000000100000000000000010000000000000001000000000000000100000000000000010000000000000001000000000000000100000000000000010000000000000001000000000000000100000000000000010000000000000001000000000000000100000000000000010000000000000001000000000000000100000000000000010000000000000001000000000000000100000000000000010000000000000001000000000000000100000000000000010000000000000001000000000000000100000000000000 explorer.exe Set value (int) \REGISTRY\USER\S-1-5-21-1873812795-1433807462-1429862679-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\Internet Explorer\DOMStorage\microsoft.windows.search\ = "23" SearchApp.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\Instance\ explorer.exe Set value (data) \REGISTRY\USER\S-1-5-21-1873812795-1433807462-1429862679-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots explorer.exe Key created \REGISTRY\USER\S-1-5-21-1873812795-1433807462-1429862679-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\ohDO1Sgy3MzgdEgEb4WYfDS4ei SearchApp.exe Set value (str) \REGISTRY\USER\S-1-5-21-1873812795-1433807462-1429862679-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\Internet Settings\Cache\Content\CachePrefix SearchApp.exe Set value (int) \REGISTRY\USER\S-1-5-21-1873812795-1433807462-1429862679-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\Internet Explorer\DOMStorage\windows.search\NumberOfSubdomains = "2" SearchApp.exe Key created \REGISTRY\USER\S-1-5-21-1873812795-1433807462-1429862679-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\Internet Explorer\EdpDomStorage\microsoft.windows.search SearchApp.exe Key created \REGISTRY\USER\S-1-5-21-1873812795-1433807462-1429862679-1000_Classes\Local Settings explorer.exe Key created \REGISTRY\USER\S-1-5-21-1873812795-1433807462-1429862679-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell explorer.exe Set value (str) \REGISTRY\USER\S-1-5-21-1873812795-1433807462-1429862679-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\SOFTWARE\Microsoft\Speech_OneCore\Isolated\ohDO1Sgy3MzgdEgEb4WYfDS4ei = "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Speech_OneCore\\Recognizers\\Tokens\\MS-1033-110-WINMO-DNN" SearchApp.exe Set value (int) \REGISTRY\USER\S-1-5-21-1873812795-1433807462-1429862679-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\Internet Explorer\DOMStorage\Total\ = "185" SearchApp.exe Set value (int) \REGISTRY\USER\S-1-5-21-1873812795-1433807462-1429862679-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\Internet Explorer\DOMStorage\microsoft.windows.search\ = "56" SearchApp.exe Key created \REGISTRY\USER\S-1-5-21-1873812795-1433807462-1429862679-1000_Classes\Local Settings explorer.exe Key created \REGISTRY\USER\S-1-5-21-1873812795-1433807462-1429862679-1000_Classes\Local Settings\MuiCache StartMenuExperienceHost.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4336a54d-038b-4685-ab02-99bb52d3fb8b}\Instance\ explorer.exe Key created \REGISTRY\USER\S-1-5-21-1873812795-1433807462-1429862679-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\ explorer.exe Key created \REGISTRY\USER\S-1-5-21-1873812795-1433807462-1429862679-1000_Classes\Local Settings\MuiCache StartMenuExperienceHost.exe Key created \REGISTRY\USER\S-1-5-21-1873812795-1433807462-1429862679-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\Internet Explorer\EdpDomStorage\windows.search SearchApp.exe Set value (str) \REGISTRY\USER\S-1-5-21-1873812795-1433807462-1429862679-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\Internet Settings\Cache\Cookies\CachePrefix = "Cookie:" SearchApp.exe Set value (int) \REGISTRY\USER\S-1-5-21-1873812795-1433807462-1429862679-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\Internet Explorer\DOMStorage\windows.search\Total = "56" SearchApp.exe -
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 2900 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe 2900 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe 2900 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe 2900 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe 2900 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe 2900 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe 2900 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe 2900 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe 2900 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe 2900 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe 2900 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe 2900 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe 2900 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe 2900 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe 2900 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe 2900 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe 2900 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe 2900 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe 2900 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe 2900 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe 2900 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe 2900 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe 2900 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe 2900 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe 2900 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe 2900 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe 2900 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe 2900 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe 2900 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe 2900 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe 2900 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe 2900 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe 2900 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe 2900 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe 2900 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe 2900 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe 2900 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe 2900 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe 2900 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe 2900 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe 2900 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe 2900 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe 2900 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe 2900 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe 2900 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe 2900 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe 2900 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe 2900 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe 2900 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe 2900 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe 2900 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe 2900 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe 2900 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe 2900 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe 2900 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe 2900 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe 2900 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe 2900 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe 2900 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe 2900 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe 2900 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe 2900 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe 2900 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe 2900 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe -
Suspicious use of AdjustPrivilegeToken 55 IoCs
description pid Process Token: SeShutdownPrivilege 2472 explorer.exe Token: SeCreatePagefilePrivilege 2472 explorer.exe Token: SeShutdownPrivilege 2472 explorer.exe Token: SeCreatePagefilePrivilege 2472 explorer.exe Token: SeShutdownPrivilege 2472 explorer.exe Token: SeCreatePagefilePrivilege 2472 explorer.exe Token: SeShutdownPrivilege 2472 explorer.exe Token: SeCreatePagefilePrivilege 2472 explorer.exe Token: SeShutdownPrivilege 2472 explorer.exe Token: SeCreatePagefilePrivilege 2472 explorer.exe Token: SeShutdownPrivilege 5812 explorer.exe Token: SeCreatePagefilePrivilege 5812 explorer.exe Token: SeShutdownPrivilege 5812 explorer.exe Token: SeCreatePagefilePrivilege 5812 explorer.exe Token: SeShutdownPrivilege 5812 explorer.exe Token: SeCreatePagefilePrivilege 5812 explorer.exe Token: SeShutdownPrivilege 5812 explorer.exe Token: SeCreatePagefilePrivilege 5812 explorer.exe Token: SeShutdownPrivilege 5812 explorer.exe Token: SeCreatePagefilePrivilege 5812 explorer.exe Token: SeShutdownPrivilege 5812 explorer.exe Token: SeCreatePagefilePrivilege 5812 explorer.exe Token: SeShutdownPrivilege 5812 explorer.exe Token: SeCreatePagefilePrivilege 5812 explorer.exe Token: SeShutdownPrivilege 5812 explorer.exe Token: SeCreatePagefilePrivilege 5812 explorer.exe Token: SeShutdownPrivilege 5812 explorer.exe Token: SeCreatePagefilePrivilege 5812 explorer.exe Token: SeShutdownPrivilege 5812 explorer.exe Token: SeCreatePagefilePrivilege 5812 explorer.exe Token: SeShutdownPrivilege 5812 explorer.exe Token: SeCreatePagefilePrivilege 5812 explorer.exe Token: SeShutdownPrivilege 5812 explorer.exe Token: SeCreatePagefilePrivilege 5812 explorer.exe Token: SeShutdownPrivilege 5812 explorer.exe Token: SeCreatePagefilePrivilege 5812 explorer.exe Token: SeShutdownPrivilege 5812 explorer.exe Token: SeCreatePagefilePrivilege 5812 explorer.exe Token: SeShutdownPrivilege 5812 explorer.exe Token: SeCreatePagefilePrivilege 5812 explorer.exe Token: SeShutdownPrivilege 5812 explorer.exe Token: SeCreatePagefilePrivilege 5812 explorer.exe Token: SeShutdownPrivilege 5812 explorer.exe Token: SeCreatePagefilePrivilege 5812 explorer.exe Token: SeShutdownPrivilege 5812 explorer.exe Token: SeCreatePagefilePrivilege 5812 explorer.exe Token: SeShutdownPrivilege 5812 explorer.exe Token: SeCreatePagefilePrivilege 5812 explorer.exe Token: SeManageVolumePrivilege 840 svchost.exe Token: SeShutdownPrivilege 5812 explorer.exe Token: SeCreatePagefilePrivilege 5812 explorer.exe Token: SeShutdownPrivilege 5812 explorer.exe Token: SeCreatePagefilePrivilege 5812 explorer.exe Token: SeShutdownPrivilege 5812 explorer.exe Token: SeCreatePagefilePrivilege 5812 explorer.exe -
Suspicious use of FindShellTrayWindow 64 IoCs
pid Process 2472 explorer.exe 2472 explorer.exe 2472 explorer.exe 2472 explorer.exe 2472 explorer.exe 2472 explorer.exe 2472 explorer.exe 2472 explorer.exe 2472 explorer.exe 5812 explorer.exe 5812 explorer.exe 5812 explorer.exe 5812 explorer.exe 5812 explorer.exe 5812 explorer.exe 5812 explorer.exe 5812 explorer.exe 5812 explorer.exe 5812 explorer.exe 5812 explorer.exe 5812 explorer.exe 5812 explorer.exe 5812 explorer.exe 5812 explorer.exe 5812 explorer.exe 5812 explorer.exe 5812 explorer.exe 5812 explorer.exe 5812 explorer.exe 5812 explorer.exe 5812 explorer.exe 5812 explorer.exe 5812 explorer.exe 5812 explorer.exe 5812 explorer.exe 5812 explorer.exe 5812 explorer.exe 5812 explorer.exe 5812 explorer.exe 5812 explorer.exe 5812 explorer.exe 5812 explorer.exe 5812 explorer.exe 5812 explorer.exe 5812 explorer.exe 5812 explorer.exe 5812 explorer.exe 5812 explorer.exe 5812 explorer.exe 5812 explorer.exe 5812 explorer.exe 5812 explorer.exe 5812 explorer.exe 5812 explorer.exe 5812 explorer.exe 5812 explorer.exe 5812 explorer.exe 5812 explorer.exe 5812 explorer.exe 5812 explorer.exe 5812 explorer.exe 5812 explorer.exe 5812 explorer.exe 5812 explorer.exe -
Suspicious use of SendNotifyMessage 38 IoCs
pid Process 2472 explorer.exe 2472 explorer.exe 2472 explorer.exe 2472 explorer.exe 2472 explorer.exe 2472 explorer.exe 2472 explorer.exe 2472 explorer.exe 2472 explorer.exe 2472 explorer.exe 5812 explorer.exe 5812 explorer.exe 5812 explorer.exe 5812 explorer.exe 5812 explorer.exe 5812 explorer.exe 5812 explorer.exe 5812 explorer.exe 5812 explorer.exe 5812 explorer.exe 5812 explorer.exe 5812 explorer.exe 5812 explorer.exe 5812 explorer.exe 5812 explorer.exe 5812 explorer.exe 5812 explorer.exe 5812 explorer.exe 5812 explorer.exe 5812 explorer.exe 5812 explorer.exe 5812 explorer.exe 5812 explorer.exe 5812 explorer.exe 5812 explorer.exe 5812 explorer.exe 5812 explorer.exe 5812 explorer.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 3400 StartMenuExperienceHost.exe 6660 StartMenuExperienceHost.exe 5272 SearchApp.exe 5812 explorer.exe -
Suspicious use of WriteProcessMemory 8 IoCs
description pid Process procid_target PID 2900 wrote to memory of 1976 2900 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe 97 PID 2900 wrote to memory of 1976 2900 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe 97 PID 2900 wrote to memory of 2308 2900 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe 96 PID 2900 wrote to memory of 2308 2900 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe 96 PID 2900 wrote to memory of 4068 2900 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe 95 PID 2900 wrote to memory of 4068 2900 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe 95 PID 2900 wrote to memory of 4260 2900 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe 94 PID 2900 wrote to memory of 4260 2900 40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe 94 -
Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
Processes
-
C:\Users\Admin\AppData\Local\Temp\40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe"C:\Users\Admin\AppData\Local\Temp\40417e937cd244b2f928150cae6fa0eff5551fdb401ea072f6ecdda67a747e17.exe"1⤵
- Drops startup file
- Drops desktop.ini file(s)
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2900 -
C:\Windows\SYSTEM32\cmd.execmd.exe /c bcdedit /set {default} recoveryenabled no2⤵PID:4260
-
-
C:\Windows\SYSTEM32\cmd.execmd.exe / c bcdedit / set {default} bootstatuspolicy ignoreallfailures2⤵PID:4068
-
-
C:\Windows\SYSTEM32\cmd.execmd.exe /c wmic shadowcopy delete2⤵PID:2308
-
-
C:\Windows\SYSTEM32\cmd.execmd.exe /c vssadmin delete shadows /quIet /all2⤵PID:1976
-
-
C:\Windows\explorer.exeexplorer.exe1⤵
- Modifies Installed Components in the registry
- Enumerates connected drives
- Checks SCSI registry key(s)
- Modifies registry class
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:2472
-
C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe"C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:3400
-
C:\Windows\explorer.exeexplorer.exe1⤵
- Modifies Installed Components in the registry
- Drops desktop.ini file(s)
- Enumerates connected drives
- Checks SCSI registry key(s)
- Modifies registry class
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:5812
-
C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe"C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:6660
-
C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe"C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:5272
-
C:\Windows\system32\rundll32.exe"C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy1⤵PID:776
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k UnistackSvcGroup1⤵
- Suspicious use of AdjustPrivilegeToken
PID:840
-
C:\Windows\system32\rundll32.exe"C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy1⤵PID:6044
-
C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe"C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca1⤵PID:7828
-
C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe"C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca1⤵PID:6316
-
C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe"C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca1⤵PID:7052
-
C:\Windows\system32\rundll32.exe"C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy1⤵PID:7552
-
C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe"C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca1⤵PID:3768
-
C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe"C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca1⤵PID:5532
-
C:\Windows\system32\rundll32.exe"C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy1⤵PID:4692
-
C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe"C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca1⤵PID:6352
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
535KB
MD520b557f7d8f6c8d2139d6931c7ca888d
SHA1c544952d5ac19732e2df1dc00fdc5e8867a0a27d
SHA2568c442de0127dd5746715723d0469446b50a7bb04410583a1c15ae23ed54429e5
SHA5126bb2eeac26c9144c3d17f3dc27c2bf3cd3f7e256428f2f4305fcc11a9372346263ccf422b08bf88936e6755213e551d7f661e3ca7880226cd56e0e68dc0a1511
-
Filesize
674KB
MD5722fc428563ff80a14a8feede15c429f
SHA10f235ee28b24e4fdd59503b464a1e9b0312a7d24
SHA256b6e96a577769ad46efc05e5646b35c474fe99cde4602ea9a56157f3ce32c5023
SHA512aa93e6ef2bccd4ab8417a8ffd8d26b341387c54e77363efbdc6a6ab2f59952c139c25ffd10c9cd72957c94870af2533f045296dafdd486164f4862a97a54710f
-
Filesize
442KB
MD5923de8579355683c546629d33f6fc2a1
SHA153213bc9184b8dcf0bcee82f70273cdcf63f7ba8
SHA256d251c438d7854d3e8f29a27fd262698b59ba61dca2f5f035a4164fd24a20cea1
SHA51256764b2f9a87e335dfd2bfd4e92f5f5fadc32b50b90d9da9c6fb4045f0e8c7700ecfbd04fdcaa0019ac5206f0776f9ae42607e31417f032066c81de981cbabbb
-
Filesize
628KB
MD5de4e7326b95ddb66afb28a7d45486414
SHA184ea852e8d08be6d5f2ca05454f4335c5ee898e0
SHA2563428cbbf46f5a2b2e5e2475564c4e97693a63f8e979e76a83f6a59cbee6803f3
SHA512d6f131572fba154bceb72804b6d6be59bdcc29948ae63bb35a35b1c7e467e00d8681530c065e92e321561f94987e1ed033164d0a6221f856d5b53d3363d3ef0e
-
Filesize
279KB
MD5365174fab608d9b8ede5b4bc6917ca92
SHA165b4755dd75a9a03227c88ff845ebeefd495957c
SHA256a3ccfbd2bc64e6fb4366fd261058b50c696e4f4593d45ea268be78083954ea0f
SHA5123fdd205b29474ba12bf3bc2bc115499a4097b1e28b0eb264179752813ea86b2deb953d774f6061f84729b871f9f7b428afd3c7c7aac67e7024c278f7ef68b1b2
-
Filesize
349KB
MD52f254bbd85bc83582e7a4af9921d9b20
SHA16bd1631d94764eba23aa77fd074e8b7d68b1baae
SHA256c95470c4d1fccaa27d5bbf1e0f844caf847d458aab46e3d5bdc4f689e4b2dcfc
SHA512203de2b2d1b5ed185d5a6de3012b80565df94fe861087b95900cf1e3fced839df69dbc29a926f67a58c092cbfd26262f51250b812f950226c3ff7827ca6f28bc
-
Filesize
325KB
MD5b536132171c226c72d26b3ee882069df
SHA1afddfa89afac0c23bbc4f06f97c2b1f468dbc8cd
SHA25620ed33f958babae5a52d2ab8a319d82e40048a2a1c93c202e84ca3ddad4f4d2c
SHA512f4e7bbdbf592d6d7a48b3ecb84d49acd3f020afb119e4530babc1cf1e364a935150cc75b529960dd302e2c2ac3a9da46320ef285da5d701d10dbb66cfd1ce9bf
-
Filesize
488KB
MD5d5182033a953c4f235a382b0c6a8caff
SHA106969b49fd5a268b28255ec9289e8a98e209f2ba
SHA2565f1bad2acd01c05a0681df61f5df323503a913568440c77bc7cce17409ecea6b
SHA512980a0e2eab4d8e8e6650f5e1a9e6b00dd2b06dc5911c361681c0f24520cd6a52558f326efba0776cfab4422f7950e078cd8fae04023b0070c3b8049b2ca81a2e
-
Filesize
511KB
MD5b0da1686b8dd7a3ba6d8798c5359e49b
SHA140bc91259347a79fb599caeafdb53e64b8ff2525
SHA256b085d882051a537e261ac74528cfea05f41e8301748f20f11ee560e54703362f
SHA5129c4b31e8bf9448b59ef66bd892fbc32dde3096e6d29f760f55bd9d6468ee0d70b38cf7bd71d9b1165be2aa82525d96652ca83ff4ea21883361da0b35dc808466
-
Filesize
302KB
MD5ff21a8db40d0a92d97445e817e2312d3
SHA14fd25559f70b18269393575062fab887abe34faf
SHA25667313128707874d132178ee3e094642272351e6efae0274c34b102dac096d406
SHA512bc420b4a7f2179379bfd13ba9a55f04a53c39db7d19c39454a9adccf16d404144e433346d35a1f1a4de5ff7bc2031a30d5ac285dbffe243872b54ea481c3dbc1
-
Filesize
698KB
MD5a07adbe5f76df2c3d0b44d61d697b7ca
SHA1287ee2a5974c0b14bcfefe15179b08cd7ed7fc8e
SHA256f0cc7e3e7689f81754b7e868d30421c455cb17494dd162c339095b72c7464afd
SHA51263955aaa539ae461f4bed34e61d3397eff435b9222ec56ca061c60bf6a12214905ba11d580f5e66d3020ed0d0706ddca81be40b7364c46db1fe6d801f5717f11
-
Filesize
418KB
MD56b189421f82de2847a606223fcf7848a
SHA14485ce2e0e30b1395e3d58c9dbfc2768525f4c3a
SHA256b48f612563163a5029a9e8daa67fac68ec30a5fc3b126cc13e5e303e3cc8177e
SHA5123f3279b1df581ac35919e2aa145771e00b6e320cf8f1baa67a33ab1bedae11f75484f25edc76004439306a8c99ba2a1416e8cb94a4b542979c09b21c10f4843a
-
Filesize
395KB
MD5fb2c86e05bb1450eb44254e153f4929d
SHA1f55742edb3540ba2c2fed2ecb840a565526aa097
SHA256c03b4e232ba44d703e4e34ee341631e9e5d97039f0bdea379089cd848164801f
SHA5126fe3ffe914b4fe8ad56a6f039634cce4da30bc9abc16b8a604c72ffd23579726327413eafd2804368a16f927bdca0c1c14725a05aaff7354a0042c0a182c38c5
-
Filesize
1000KB
MD532bbac19a00e830e3c7c65986e6227e9
SHA195ca3b882ee761cb1c67728cd587d90fdb4bd52f
SHA25616478cf61789d138b001761b9ba6109ca133ce87b5975f0d9917e8182ce17f5f
SHA512d1b3d12bbbc381975b8e4f20ad31fccb7ff1aae1e90b1909708e1d2b009e2d373bb8132d79e5ccae2dfac0881af8af45e863afe612ae0c4d2e95c39c3faf6562
-
Filesize
465KB
MD5eff03643f0d98c0a1750d76ad684525e
SHA1955127e92e9e6ea0fb762cf0639bb3c23a758796
SHA2568b03ae018367f0957981ce5e95f61beca3567c0bb6ac1866967fcd741b538719
SHA51288927e69297bd88d5b64b15bcd9935d37200e0f0105eb0dfd1cb1304abc206930493f9675293ddd34fbb9392d254438f852306d22efe5d26b01a647dc8fd11c6
-
Filesize
558KB
MD5ddb8474ff1e183910aec81f1ff3ae253
SHA131091e700bb668eef76ed2ce16a7d72888e46b29
SHA256495ad586a5ea6ac2bce49db015eca98216ba45b57f7cff40255316b97960bfaa
SHA5129b56526a0120d810e38ae31e0c600074b526c76456be60770195ece12bc800d4ff922699fed3524826d208af2be68aaa46f638973399ff20bf3490bb107ea47f
-
Filesize
372KB
MD552779c84932c93e991dc7a8ff1053584
SHA1bda0ace72de64c799e50179373aae3bbeed66742
SHA256edbf344d9853e6aacd5c803eb73fb9f8d21e7ba1baa4585c1160e203304bbb54
SHA512fb2775381fcd2c00cd8140b88b325bdf1a69fc87bf0d18df10048de9d2d7127cecbb9294db919ed7719e1fb8cf469a98c7f8e15802ee9bc3c4b41f8e22d92017
-
Filesize
255KB
MD5afd2c8a11abdffa6c12cdd53fc1a149e
SHA10578fb195ccea0639b4d04298e07532d78aebb20
SHA256cacaddb2b876a1f866d34a962d2126da419d6da18313e2329aaa8f5f3b869150
SHA5123957b6577a49a079a1e675d65a93fbe6cb17a2cb4e01f749da5913017c97404074c051f1df17305c39b30b3b1f7834049f37c267b69a4cd1cefef85f4cef47e1
-
Filesize
605KB
MD5f091f1028da59485e8cc4e7e6df5aec8
SHA11b3376cf7015a101030878035ab9fa3965aa2cf7
SHA2567821e3d2671e3be9c7f25a63d94efe1034558c99454737300597282460a94bc2
SHA51268bf1218f2f6fa406800f949be1e970f4b449ff2a5a7e6e47c27465660d1f4962f83dbf09dec11c72ddd586a7551e55b7e21ebfcadfdf5b39a82142271c5874d
-
Filesize
651KB
MD588849bf7986d1326eb40320f8689c210
SHA14272de0426574504f880e21145ad9a83fcaa4ae5
SHA2562d5d3292083302d8fd44d922cfee26d9a69723c927c26676c8aef8d3b88e329b
SHA51240708883b95d025f8f95c4f38f7f7368f54f8799dea0c2e7088214a5be8f55dcd8373345e651c2ea365c63b1c8268d5fe68f7b5db738e205d935fbbd9bfc5c2b
-
Filesize
721KB
MD5a9a6ff8c3d4675ce23eefac962e57f26
SHA17f9585bfad4e1b9180b25c987e9a30b6192812fe
SHA25679d545c7ea9cbd5d01b735945f67ac7b1e6424af993e3b326fd4711bac4e159c
SHA5125f63751435a3d09ace5dc3941aa39dfcad4dd3a4419570d5c792b65b9ee80ef7fa2ae15b7b2eca7dd8aee38b7da94d947245363d600eeb0da1bb6c7f3f6f9438
-
Filesize
2KB
MD52ae4c91769d0ad569625964cbf66f603
SHA1523cfe32a53e608849dcd492811ad7a282619a52
SHA2564c3e17b4cdd9bc74dff14740285e713183d4528bcf21c604c52e5d8a5ff6cee1
SHA512d9a557c2ce0106401100f2a5da0ee7b473939ded2983aba369f784ab3389522427985107b506ab0a00cd0f61ca6ad05cf5198deb3ea5f92c8e183fbfa2a6eef1
-
Filesize
581KB
MD572195086dda012919299a208aa0c6cc4
SHA1ec3f0c1407ebc7e0d0b728e80a9a3b5b5492939e
SHA2568f822b61a0755e0516760327f31681ac4df7924fdae0196fc667aa9861e486a9
SHA51258209187f4f5060389784120cad26444c306333d07f22a32bbd056e5da3d3ae8cfdab937bf3a7246707cb8fc3448dfeaec516d0afcfac97416ae1542c3472573
-
Filesize
2KB
MD5f0959d233be3e6a5aba75ca8480be1d5
SHA1459c39d9cc03ed2eed4d3fd769f2ae5b88c76059
SHA256a0337063031eff488b20b15aee574ce751019d8859d2a39d97683983819e59cf
SHA512fc2f4c2489216cba8a59b6a10ccab39c464069882bd27e0eab40cfd0e92be84f099b68e7be8bfe287f55574dba83767d69468bf1efaee410b55aec80d2ef2b23
-
Filesize
2KB
MD54a0bf6f0171080df06a07bd462510e32
SHA1d66073ce870f4b0b1947a91dc3941daff0870ba3
SHA25630cfbf14d8f03932caf2aee0f9e3828411c2a55bbaa5ac1dc1ca676bd8d56b96
SHA512991e9dd6347b91ee018107a9dd263a0662b2a92f9f2b9bfbffd1cbdc08db2465da7684eda3053a090276b5edac09493548a559dd4576e9cb1f2b499a5f361278
-
Filesize
923B
MD5a9659a7b22ae56b57e283a319284b84f
SHA1efb558e67a247c05fb9c70871dc850a00978f222
SHA25686450b2bbdbaa4c00f4fc15194cebdb403f24a8fe3b903b6d41cd60878cd953f
SHA512389d025497ae3085362cbc472fa37c5ea0c3edccb59b8488538be561ba096f5c6bcf2b42fd80172ff492ed06cbea4a780729adafb00b690e546ba9067e642979
-
Filesize
1000B
MD52557322ef7bf8b4ef170f26d83959f43
SHA157b7335e806d74121bc7bdb022c4cfefe5c71ae3
SHA256660037e88c3ba8b05391ec2080e7829b04733bea847192315b04c1d5c9cf8f98
SHA512ff54ec412896588310275084bd6492f4a7ed0334be8ef31754042688f273e6b25f206a4187f5be17a757860cfd138988b9624f3aa183c55aa7c49430569f04c6
-
C:\Users\Admin\AppData\LocalLow\Adobe\Acrobat\DC\Reader\DesktopNotification\NotificationsDB\DFVPG0qP0Y.BiBi2
Filesize24KB
MD5ee15ecb8e4a12cd81119ee8161bfb54a
SHA1d3ef0e41d98a7d8e428d58b72d84a21fe67ee33d
SHA2569f78031dac37384078e608b6495d2fdf88932e735032c1572052edcd0e2d7410
SHA512c9eaef74e3a87d76f0720570eae8eea19a34e2256af59ad9991a2f8d59b788c7a7fd32bbb715020f66e66c6cbd2318f710d1b660a711984f10327d705701f7d4
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\80237EE4964FC9C409AAF55BF996A292_D46D6FA25B74360E1349F9015B5CCE53
Filesize471B
MD5cf45755e2b0cc968e78fe845d3928a6e
SHA1571c0ba8b935992f9cc56db08d8f0fbefa9c6f6a
SHA256c8941381eda04ac7287e82b68abfe32078279d33dc03206d0c7b10aa63cd77da
SHA512c31b65bf97ba7d8de4126f2ab953430cb920df9b8e0b9ca140db6d9c28d122c34a73937638f2d48fe4c7f9815d7ed86e121135cec7a9c36aba0648344ed457e6
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\80237EE4964FC9C409AAF55BF996A292_D46D6FA25B74360E1349F9015B5CCE53
Filesize412B
MD5e0f7cd9c4b2c87e0cc5d2a75603872b1
SHA145650724d6025ef448efa5ea4a0f852f95caacc8
SHA25629ccda57ee4b3f70f71cb7ae0d68681bdd2981901cd6f39d98f79192610926ac
SHA5121ef0b515ad01acf6b5476be697b1366c2e05bb2fb46fdd5ddadb6afececcae812ec33c41c1300ef9e9545da60de309d93140ab4c4cbed16aa41263d346df434d
-
Filesize
10KB
MD53bb275e1ea92623abb2076fcb65fe9e7
SHA1bb3df07df61c8a07a02d8b096bb3551ebc3f58c9
SHA256d51db5c19d31c8dc0c59f91f19c6576c03d1a6d9446b6e95a667d9756651e777
SHA512dfa18164f75f4d9b4de6891995ca54177910e36948bc1badcd2e109bb6267ebdcb37489f2b89e28d25bece9704288251bc54b82687a28faa1e71646cfcff81d2
-
Filesize
12KB
MD51abcb2d095eb71d3b4ac0126699e2e3b
SHA1e3805c096da01b3a1e53b921369d986492269f65
SHA256f99821fa95d1f24cf9e34ac576af6dad19afe286ad4809fc2c4f307bc0e6bf36
SHA512a1e18bf203358c7f613a2b9326a33ccebe15ec25fc5aac07eb01077dff7c2d43a692223aaef68f93c1e290c2e413b532152cfdd4c9b23859ff80da46004a5e9a
-
Filesize
32KB
MD533ecb54f2f6a18c8680bb2657fd066e7
SHA178121af7ac618de9618735eb7973bf2f61b47f0b
SHA2566e3da83d7485dced36c3d98c19a526c57443e3115e6625e92a2e154d9cb0479a
SHA5127a5e0ad2a500c805f1aa84f7175a9078c0bc4a60724ae5a67d4e80817d2955dca9f4ea2c5faa42a3ea5756b532bd084beca0a6a06c88fabc504e238d01b8d80a
-
Filesize
68KB
MD5573a36fc22a7d73a3285b75c81488835
SHA17ee3377db9a2b08065b951f478490a89ae3f04e5
SHA256137b11d1e154648d6e3e8360def84d4ed5b2597e2a4dbe30319e168d76ec846c
SHA5127fe04921df6bb7bb3b5018af8862f3b5948d3c4915d345dc015e7b789d583054a0b5bc8833d9d89c5e47fa82526096d0e445d67d864925e70a56e6276bb55fee
-
Filesize
68KB
MD5725a36494f3659e5a060076dca82c351
SHA1ae3948f6ae663ee457a6f839a9bb5b4f67e53a7a
SHA256324601a2076321a996b10d009104580d00591541e2a8c1905131c9af58fea111
SHA5129cea5cb648e3cb685921ea11a7ff4cba9df32b0009653f096264a8ad36e7eb1cb7991cd7faaf4bf08a265f6c63842bc35dcd23cf99c4fddbf8f35a474a1243e8
-
Filesize
12KB
MD5e54359d1ddc942e1e6f385a3f964b072
SHA1fb96de46735d7ce6d8f8f4bfdced73768625bc4c
SHA25606c3bf22acd50bdcd618fd7acda99c3e7c51cb439991c865b785b2fec6b2bcbf
SHA512ba0fd3ab500fc799c0a2502408020f86ee2e1b7a28a55b721c3c5e890f15336cb1addf58bab85c8409954b0595f5d8ca36c4206892163f7725f9218912136e20
-
Filesize
64KB
MD5f795faa1acc4ba182835376948d768dd
SHA15dfd205b27762d44e45ca497af99c69ea1ac05f7
SHA256430d749c457242ae87046744f447cc7cae718a378483b118b01b082223a9c541
SHA5123f56119112dde51a2ceaab26d9576604e9e879e891f2b11c9ea681a09670f78645bed2ede5c54514255fd08471468878f10d89f6da87ebb2faf0679438d1d82d
-
Filesize
3.0MB
MD5432bd5eab698e4a7628ee01c97923a01
SHA145bdbacc1fc52e99f4427be24255140ccee72852
SHA25641c4198cd65509554d7e81e09840719bccebac31f9675467ec3a687bdfdb4f83
SHA5121b56d8f38783b0f2426588f54369817df773c3d09f1fb8c9ad1c6ad71934ed71d3fb2c29ec6cc2c030047dd74917dc24b4e90268693f629aa14524837ddfb662
-
Filesize
6.0MB
MD525f94f99cf0e7c6a302e7cd0e808dc05
SHA1af09b210492da3ec90ea181be5dcb23a41d36af2
SHA256923e09f75d4262b41e5c2349fa3b8f375f8903f7e31f7ff510a429e2a867fc07
SHA512f8dbe298d681f4e254a51222ac3a48747b4a297014ebd43cacee2171e63a47378fad60c364a7183ff0338a10291867704308bf74f20611a1803232c0f8b2743b
-
Filesize
3.0MB
MD5ce41e3663d26ccbf4ba4cd9824beec5d
SHA1a9cd4a28fc948be3ebb6ca73e7153e766b9c6ab4
SHA2563ff9062b8c5469ca1f1468fd494db3341e29b016a29912407859cf4a6e068b64
SHA51221213cd5e3107dee0b0b57f5f7869fca3f8431f34a684a2ec0ba993a15114c72ab5c6021930308edf88346713b60c34a00f84212cc39589af9cd5aacf094e6cc
-
Filesize
3.0MB
MD5e9128d2ed984d2aae34d3c6f725837e3
SHA1c3c7b724d7d268adb5cc124339884d4994558940
SHA25684af46c443a9ce5029ea50fec2ada7ac3825241be7686423351db32e47f7c398
SHA512f96ffe17bd388e360412b956e872110692c4b3bf1814c503f7d65889bd3dd83191bb13162850ccf2830c26071d6bcbfbffbc4d6d1a37b77fca29eff76bc600ca
-
Filesize
3.0MB
MD57b7580ad9118e295a061bbb0d9bc2ab1
SHA19ac0bcb5e14323176b69eba38852c890dd3dc167
SHA256770ad38f035d542738fca7b0ec755be5cc7140e2705adaee02842744609c1fdc
SHA512ae0118291ace007ba4f03ebb1c0899eef0f66736130d2c730f3ee0c131187a4fc84806c67e3d27a6ebd3520ecd2dde4e0b76c025ff99f0e05b1a309a70401d1d
-
Filesize
1024KB
MD519236a8a1d9620eaca548f7f8a727aee
SHA111c369f5e8614cf8bd850cce53235afe7f23ece5
SHA256f208197c4d0a9377b0255d745b69c63fc8e2f087d059e5a4dea2e5376fb50653
SHA51223d5dd04e152e4a6a07b43dfbd4d2c17139206a13f47f2e45ded703096e9748d407108f332fb5e03af93dfbec543c1b0f5d93067ab14f40c49828060bcb3b4e4
-
Filesize
4.0MB
MD51b786f7501d27744a5ad463115fb0eba
SHA16e7fc3ebb326ff1b10c1f6b135216531dfce5462
SHA2561bc2e0c05b2d4d285779473a3442d1db15ca464713e9a4da78280c7f37f7f1ce
SHA5129788686a79b5bcc67808759dfc26be9ed1369b2acd78357dfd9eaec87229036c567de76b15023347798817f3b053b0653e6f1e52304f2b74ab66371d04d133a7
-
Filesize
46KB
MD58a9f6bb54b8963be20d7f7656c477e02
SHA1b4159bf47597df8bbb84e242fdaf4096c881ddbd
SHA256c313034c93d5a083c2837167c37a1feb27049331604c4f78d52bafaa6a70e950
SHA512ad232e27b3375c2471e437bfe9f59b6812f7945293ed0ed2b7fcc7ed3dd4b763ee624fe02ba6a3fa6ef6c62b6dd05e593af54f0abe726bb92011d95763056111
-
Filesize
36KB
MD55406e8c4ff30556eef1bd129f2756f46
SHA11b5a83a9f75ee397851c4d88d65493128dc41f8d
SHA256350cc741ffc7bdfe99823f975455a3f570d8d13b835d79d286cd1b183292295a
SHA5125e0fcb93bffd937c3e28fff0c883082165e538660d30ac258d7b81766a349408b9fbb44f6f83aee988b9f23de14a9ab4fdb58023fab6d2caa2c131c41bc19ebe
-
Filesize
193KB
MD53963a3d094f8e48ef94bcc9ba4192895
SHA194ad80caafd506274b8822e167ebca78523f1842
SHA2564e24c140ee17c42d1c719905aca7855b7e554c5139ef389bee6b554a535b008d
SHA512d15a24243bbece4050224a8cc4d98dbc5367be24bfb119fc8f2c48601e7c732800491bb7f441938e938b809f09fed724e9b6f313527669975555bf618570f021
-
Filesize
56KB
MD59274c6b47e7667a974302ac4c79be11d
SHA1b4c4cc08c235aade5b9553f89e68409558646847
SHA2564faa9120f1ec457653a65e61372113107953fb7f2f328fd3df0f5e0444a20cc8
SHA512a072cfefee5802a8413d90bbd471f0d3e005c39f70847b72f4055ee33681748abc270ba0a3f0357af226ab82ab6ac1f6c569e00eff0bbf756ca605318e23a827
-
Filesize
1.0MB
MD54f6625e8b8a080a271754d4b214a4159
SHA1f7fc25d06ec97a759f5b98d61dde9f5e9ca116e5
SHA256cb7a4c2f7d0d89e9398cbaea12a91b8fc70233200faba6fb39ddcd7016d4dde2
SHA512c2ec87ebcbeea8887df08c15f96fb7d370412b9aed324828a9090b885c97bab4dbb7208edb8bd5ce41c9bee2063011192c7016a85c7615a46665962cf788cf27
-
Filesize
37KB
MD51601db060d42e19aca8d79986156e93e
SHA173e4c0a19c83484b712b3aaec5b50d84b6e7e023
SHA2562ce8d804181499e0d5223905cf7787538ec4431f859c3beffd6a10df7c363467
SHA512c6074812f1c2e3001854f6d35a6ff6e778a5e94eae60c66667dcaac7fb96818bce9359245742c20334e6efb7fc571344ba3abf9f2d4bc6e6c17954f38e44a73f
-
Filesize
44KB
MD5a5dff6f8faeb7f558133785cce30fcbc
SHA12aabf916da438b5bd9ae45c75915c96c0f1b3654
SHA2563e2174a4b4fe2f85d1af7f2b85e411c67233fc67884f1eb7840b240b5e4f19d7
SHA512e9ff1bc9c43d748481300023751293de0a1070d6bd7eaf4899fd6090c8d4185087e706261160e9cdd340085c61eb64a0f7124a037d9baac0c509f983ae85264d
-
Filesize
40KB
MD5e7f0078b91980ad75a018c1906eea14b
SHA1aef136a9e0d13c9b10613c97daf34854988979c3
SHA256abf00cd0b8c158f04d64d779db0c77bebc6d9aa8ede7c915830a5229802097db
SHA51250b0567e657be6c22cfdaa09ba7178243c0e6fe823c806551f9fee7a12269a2d03b2e590a231347394ca8d6f29dec4c7c54be9164f17784c2047d16e810ffd2f
-
Filesize
512KB
MD533084dac6c86b296055d8833b6c5af4a
SHA1ad65a0e8937306618bc4f04a77c6cd80a0696137
SHA2567dfca61b957a21f3cfa014e999b81780ebde967a3a51be1fcd3e2d4aa4efe47c
SHA512210a320ac09ee69e00e1e22b9c070b6a2480e72532ef569a0a376b966141b4b479900497d8e8f30d790381bbfc72b7b17460949ca15e5dcc752bf68ecb123dd0
-
Filesize
4.0MB
MD592343cbac931b2daf32c6354a3b2be03
SHA11d24489b1ad646b8004956125431d44f6d94aded
SHA256bf629fec1e86596d7f3cc93bae88f17756736e464ea15246403a4243bf5c17c3
SHA512a499ea741165d083ed4f07bd9d0f1c7d0276d0d04ba685c22edcb85ead79cca8d4d7384806de7619fc72eb3055a2a4717c20481bbd10154746551fbaff389945
-
Filesize
264KB
MD56196ab40bfe9f5d582d937492331b580
SHA152e8f023610b9025e02e5f9bd5be87a6ff35fd90
SHA2564d409d6458e0c36401bc7c6e8b66f60cb111d2622357d6eae0ab83e9ff95d695
SHA512f35d69e0756233926728f2f223a5802787b6c98c7716c762c3c80c344daafc2eef485459842e3bd750b99dbac26db31b8311b3998e5ddecb54af27e54f35e444
-
Filesize
46KB
MD5be8f0222e12d2fe61e94358762c23cf7
SHA1b797b41dcae8cf7caf8f5322ea0625087b15058b
SHA2566903948e2bbbba490bf440541f5292e8b7ba483f679a08598690e4c382f93c87
SHA512b8377d9f1a4f016c046c76a6283e273e6703ef0d3f00eae8afc5c919c0742a8f651aef8c611948572f9ec1b9db6d1f152d46b8c98402c7598a70ea261073d27b
-
Filesize
148KB
MD581d28760bcd530cb6aecd6151bbc2289
SHA15e9c2a0198d9e84e7c8dd9e9a36722a0698871af
SHA25668472de1f572670e5ab85a97ee8cb00a4735c7efa0c1be00f1e4c34b1f0a2181
SHA51217e579dfed3feae3149b685bd358ad54956bd490b41d49f0a03eb9f6ea6c582a0ef15893882c4ef74f2d003a43d7c46469c14c0021e12417a8cd92d0335729a7
-
Filesize
264KB
MD5c3ecc37a720c406d90807e0b992f42be
SHA1093ffae89edec52cebe158577d6280491671bc62
SHA256ac8ef3354a73e36933df50c8579b580727e629d7eb9b676bb2c74ddad208777e
SHA512bfb606368dca2551d2c0fe8c8e9c8ef18f595285f3609291b6ed04ed84c74c09a00743005ad84eb6d8f49448887bcef03770f0ec559b8f79b377fc3a917524c5
-
Filesize
256KB
MD5f0162f86aed61205dfb386cfb5fc44cc
SHA154015a979a1a84f833af6a117878abdba78ea850
SHA2565fe1ce4f319edf33daab294483923afa921d520ecf36d8bf277b4f9863a29531
SHA5126d6b4575f3b4a14dd2e9df0771d89a0d2cef0ddeedf118dbf53e44730e63dca00b6ced09469c2c63e271ff5ad52020d03be8e49739e56e2bacddb9581fd21fda
-
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.62.0_0\_metadata\3KRv9UTyDx.BiBi2
Filesize18KB
MD57f73270f043823314e97a5a36d138e19
SHA1c35eb9cd0b2bb0b48d154e1100e4ba7cb36b0edd
SHA256a5c51ed954e93a2bbbf3bfe2a5af8abdf7610d5e0c082971e5876dee5be36b56
SHA51239051ec9b377f816aec682f10211d1abe1a7edf49e6f81087b05695b7bf39e7a937d2b6168120139ac16ba0623c03a16d178a92cc770db806af6a293bfc33a15
-
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.62.0_0\sRtgKrWRKx.BiBi2
Filesize76KB
MD53a8e9471b4177473fb14386f6fbdaf37
SHA1540c072125f54bc3903c39213bb0d6286ce5a00c
SHA2569fdf7e272acd9a4b3ccab964cb2ff36d09a5cace27f40d53b7ece0aa1de780ac
SHA512749c1331f538452de05bd91a324daa126b9dcb3c62f7da63b3f6dddba49b3fa69aac70c8b14d0fd5e0c5777609b344bc0170acdfd5a2461b61f36ab10b3588c6
-
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\YmBWp1olSQ.BiBi2
Filesize255KB
MD533af696025c868c7548eded9bf48b561
SHA1cdfe9acd611bda29d6e1f59e7b5da7072c5c10d9
SHA256c93a22d1578cfb5e25e2ad0d362425ba78434c05828cd3964125ca0ecffc2007
SHA5120e7c6cb3d82023ea73950966606e89f24a7b8f73d474e07f26e9524983a1bd696e0310e5fd5f86f83cdd011c056dfff5408e7966e3164b440532a41aa425c96f
-
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\images\RZB1vMivXr.BiBi2
Filesize68KB
MD595e9d8f58f71453b365b9b72a3c414ae
SHA1908d4913cd3b9fba9d8f3f9337409ddef60d19ce
SHA2561f7fb79ba16c7e5feff1e16bf9bac49b6ebebd50d6e7b9c7169b6814bc403013
SHA5128891983be0b4d3ea2714189845b2eaedce85d7af4427d8a7bd4cb429614caf821a030e41360ee3cfb75e54c5d3a5ee6951fd22a31a6d13d3e7a22e170e7ebabb
-
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\oRRGTdbpLa.BiBi2
Filesize531KB
MD55f21e2f041303c12a5af90cdeed301a9
SHA1d47d9130d4a7583a7901709c7179c348ec2e20b5
SHA256852569ad7fa6edb8ca1a41bbedd6562992d0926261cc3cc0479e27e768d863c5
SHA512d9b1d16e7013ff2cc8c4325308eb397d84083cb94aafa7dce6211b96853521089d4bda151fdd0a8dd81da27b7da4f4ff7972b7ec45718de9ae0d7e182e31f5ab
-
Filesize
128KB
MD5ec1f2a9028e32d141dedc9dad6bbe893
SHA19ef29bbb71d6003ac84461710f258eb889be2fb3
SHA2564847b8007b0630d089b4ed51a8bbdabb6aa9a8e3d06147592d335dbf0c5a1ac2
SHA51258a9a3f869e97053b8b1b2bf9f99935650adfcbe6d235b778d457a837017b9da3338288231c6192109966125124423a8a10f5ea093e79fcc0f6955ee286e09d6
-
Filesize
32KB
MD5a41b47bf81323f3f5009e782b33e2069
SHA1f9f247125b7ff26c07ca76df0277a1834d3e59df
SHA256a5369a572397d1d18b99c162ab3defe4844fab5963e64bcf1b7a3ad8b943f6a7
SHA512b9acd093c173c30075c5a085a4a792bd35d8bf10fb77da1747ee06dbd9c6efd92290b7a097e5332c1551de6d07c81f062c4295bf3b774c1dd2a0fc392a7be759
-
Filesize
15KB
MD54339dc6b664d3f7fe0610bf7cf188994
SHA175adf06c8632c5f6d0e75574f3aa239fc2ee1656
SHA25646f778e582b1a8945b6a23c86a5534e766652d67335d41d3cd1e9403bf6a328a
SHA51266ad49c5c3a4397c246bae481289cef727b0684adeb4f915f3ac14d8c5fb221f0f134033e6eac7d6e85330f44f9871ce4a608992847f4aee8049799925390eb0
-
Filesize
92KB
MD576dc2dca4faa2e3335898805b1ae6a40
SHA1bd61cf2f587690496700a313236532ee34cd400a
SHA2567dcfe92cb79605264e67a30b29118099e1d6f2989b02eb40e8d34cda2fba76e9
SHA512ba1f1e9659e6ed3dd1800832fc8dc6c4e1e28b0a6bd91cd9262467dce59de0094fa9133f10acd921ad7481dea5cdd22253813e8bce146ffb325481c4d4ed7838
-
Filesize
109KB
MD5e679b758cbfed361269869d380082aae
SHA1c886bdb112079e027cc35734f3eec7d137dfa344
SHA25612260395afb1443438180691ffabc5f8ab4a5844a89cdd52639fd681b48fa689
SHA512f8e981cdcd14f09d4d9e3e721c6dbc3815974a6711c9d8c890928d482e8aa1cbe7ededdfb9ccf0c7686e3ef841f7f6e8f8e93fb595a2ea4e387937b3111c9828
-
Filesize
126KB
MD50a0d1603bab34e3b74ca6d78f09d96af
SHA1617672459ce9051637b2fb27cef08cf99dde70a0
SHA25694dd4cb456d356638651e610501fc6328620b4bd8aaacd153622a2d3ad5d6f03
SHA5120e69dc14370d409739f2113bbde5ec437f2a8c855b9e4d903452e2d8e81083a3b122931fd26e10901e54720c6fda43fd52b87489dd0f5f9d34e3e6a81107c005
-
Filesize
12KB
MD57fd240fbac45e80aac8661b90bb3f690
SHA1b9aac2135285f0bfe32f4545198cbc577d5cf545
SHA25685acb24285a401be7b171c93e700b5f91d90bc5522b813331339f44f4c92ac0f
SHA512f5c3c610f4b68afd20cf6d35e01bcb653dffafa7eaf0f98c9e3c149d1e2fa0234ea5fc641f4aafbbf4dfd4e591d2f18729a782603dc686567bfdfc92a66d092f
-
Filesize
48KB
MD55cb833338c8524c7ecfbd544fdd34cd2
SHA11afbfb3b1b2e2985b343d26b8b98b93d8f81e8e9
SHA2566a8c9b5c81158a983ff0521599fd98ca7282cab290f16ecc9d42919b0b4bba17
SHA512e1f73cbf530f4d2c981d10fee06e95aa125f7f2fd3da7555064200ac1d811a6b32a26539faa23f4783c44c7261f13b407a67d20523866eb1a33fb996398991bb
-
Filesize
67KB
MD569efe164af2681ca553dd09d6c607c11
SHA11c0dbeabd1d340a50da4f401fff59acb04d2515f
SHA256aa72786ec04d9ec07f87ee6adced2aeae277be72165c31ded9c19d175d2c7e34
SHA512c9f27fed3af0c43a9099f5ecb143aae4e5894d1fe5561f242d0c99a748b13dc255cc33341023a99d6f50208901eead1065aab393df6a4f544395806d4339b0f0
-
Filesize
38KB
MD54cbc59a5a2aa70a39a0c0fa5572011c7
SHA1c4a91e060f2d2206485e3ccefc602415e1214db1
SHA25658ef718ef1ceaaa7a07d56c841d18736e9dca79ffd454aae7ec27b8ef3e10ba3
SHA512e414efa4e3d85f1218f2c2f9ec03a35f15ad00a2414852af7eb9030bf09159d3217986d6eddeca4cad1682080da79b4218b28afe51f734ea5a813c9858cb1d31
-
Filesize
413KB
MD5c847d178f9090592e5b877b33cc89970
SHA11631f19956cf170bfd73938c64c99896929ff6e6
SHA256be5ddf6dbac57a88992e86ab31934c170a0528e15ec094545b30614bc8bf51c7
SHA51295cbf73f07bff833321dde1d2ee40ee92311fcce5ade35e90b4b617731bf4fc8756e15c73aa2759de2f765f4bcf29756c7fc721e7deeae96a9620870cc1945ca
-
Filesize
174B
MD5e0fd7e6b4853592ac9ac73df9d83783f
SHA12834e77dfa1269ddad948b87d88887e84179594a
SHA256feea416e5e5c8aa81416b81fb25132d1c18b010b02663a253338dbdfb066e122
SHA512289de77ffbe328388ad080129b7460712985d42076e78a3a545124881c30f564c5ef8fb4024d98903d88a6a187c60431a600f6ecbbe2888ee69e40a67ce77b55
-
Filesize
1024KB
MD50c5df710c8242c31213509edde3fcfd4
SHA18d497c80f732a5ac2dcee1c10341b5415e6a4b26
SHA2567065c8896eb6d1e7879db0f68eac4977d5f5c0018c3cb21d5bb671049ae2e9a3
SHA51203b594ac4739e94cddb721bc39adf04e4f0f123f409ae310272d1905fbfd362ae3d12778b458ab9f9d2e890008494403576f799c85f72fb3fe9cba4995285d0a
-
Filesize
1024KB
MD530ce05521c028924888c31f6722c14b9
SHA1bcae50c2ab7ccbf71c9b4e2923a6cb54b0bc1a96
SHA256da3d078ea6543bb8c36afc1abe19e902c74cb167ba77e7b04652a22edac48dfd
SHA512f8d43b49bf721658ab7549cd7cc7ce8e3ad4cba53dd963b2a55aa8c612eccc0e75bb3b15f6959f3b35890fcaf9fb2164617007d5d4d982e1833467844fe56691
-
Filesize
1024KB
MD5fc3258b352e5038dae5299884ea5db04
SHA19ab1f49c80e41b27fe7d1785db3caf848ed23e8a
SHA2561ddf946b60776d0460a5f0de90b4b1eb4495c2d8f33d7f4cf5673f11e63e0dca
SHA5123b9541b30e8e0e212cae106ca05b8cdbce294d8031adcb889ca06c1412ae260c1de3d78828941c09ae6795a0fb86c229d9cd3c9563149cbf94b6901d822109f9
-
Filesize
7KB
MD5740ab836f98f3b212cdcff92802903ea
SHA10e6bf875be22f848a38c6d92272e99b69ae45ae1
SHA2561dcd999aa76a3a588ff89bdfa6b1e505c6d41225c5e8d1ad285c3186c098001a
SHA51261a008fc78023904664039402081f1fefb1a65f10c1f1906817b74bbffbaeccaa7a372fcfa28475c01895745b97746afd727d8c8c57e3f1a4c7b52ffed9626b8
-
Filesize
7KB
MD50b6a0bafc1ba7b17c690318368b08714
SHA193fe6a52f41b7e79eb152811fa14318470fc2de9
SHA25691c12e06bdacecd84545d8625b00e81302a63b7604384f4e6c39ea62d72c1828
SHA51210155c3ddbc8c8f05c1328a49952ed4fb7e191904b8007ca7ee814c21997640cf47632b821e2ca8f23631c2dbe86b77a49395a0442c59f96bc346732cad2ec54
-
Filesize
24B
MD5419a089e66b9e18ada06c459b000cb4d
SHA1ed2108a58ba73ac18c3d2bf0d8c1890c2632b05a
SHA256c48e42e9ab4e25b92c43a7b0416d463b9ff7c69541e4623a39513bc98085f424
SHA512bbd57bea7159748e1b13b3e459e2c8691a46bdc9323afdb9dbf9d8f09511750d46a1d98c717c7adca07d79edc859e925476dd03231507f37f45775c0a79a593c
-
Filesize
1024KB
MD5d6d0612263f07669621ea4d01466eea8
SHA10bd8a44538c10fbe94d5def561f2f5722b3437cb
SHA256f3b4f4d99fe8cf60dbb42be9f8efb016073b0292a8978a28bedc4f8f4f4050cc
SHA512cd24028070bfaeb8b77d830f6b15616f06610151b59ffbebf0a2bea4d4c25d20f13339b6014816ef07e5419689f1b552fae9c17759941670c49355da0fd47fbf
-
Filesize
24B
MD5ae6fbded57f9f7d048b95468ddee47ca
SHA1c4473ea845be2fb5d28a61efd72f19d74d5fc82e
SHA256d3c9d1ff7b54b653c6a1125cac49f52070338a2dd271817bba8853e99c0f33a9
SHA512f119d5ad9162f0f5d376e03a9ea15e30658780e18dd86e81812dda8ddf59addd1daa0706b2f5486df8f17429c2c60aa05d4f041a2082fd2ec6ea8cc9469fade3
-
Filesize
7KB
MD5bf6c4d99b21f02c2d655a84959cfb6c9
SHA12816a15f0af6c4a494de07e791cd6da4e99dd689
SHA256e6fbb8fba701c31fef6e43255c6b6464a8718c33f96825901ef33827a7860428
SHA512d4c777677b2ab22333a760996048bf584ca560746db6d00e76d10700c1b20140919cc7a87111beb5d633769042463158c29a5481fcc7dd24897023ada8cdaa8d
-
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\LY5AHA87\microsoft.windows[1].xml
Filesize97B
MD572734e0a0eaa38f29865c14e05a87e75
SHA1e9935192cfdc9fb0dd05069ab782464156056ecb
SHA2561da1485c0c8d4ae33749a2b5c847be1b57f3e4dfde4f1e793b839421fa23c5fa
SHA512d72c33d95ec10141cf89c568b4e09435948b98a9fa7c55d55324dfab7344ec3b23141e74eed8fd692bc271f1b2f7169dc2ef23df4473ca8dc1cee9aebac4e3f0
-
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\TokenBroker\Cache\95d9a2a97a42f02325559b453ba7f8fe839baa18.tbres
Filesize2KB
MD504472064ba7a89fc9df0214caf0cc11a
SHA18933e8ef22f857c19a6e938ccf3c353e0639d188
SHA256f0b7c2c0178308949199c9a396d6a4fadd0b1a4f410948499f49769e0d282d0b
SHA512d62405402ebe715f3aaa4409b637471bdfbe3eea3c260bd9ad072f3f26a84f4f6e7e6bf016f208bffcfd16e58013f1efcb207e70b6f9899e4df60853e62eafe8
-
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\Microsoft_Office_SPREADSHEETCOMPARE_EXE_15
Filesize36KB
MD5d73810507446e10f35cef691a91cc5f3
SHA1f871fc76285b469eaf3f77697acb489438671a31
SHA256bb2ac675156df74f88f154e0b586c759ad50b5c57dcd8a98005d5597ed7ad1a3
SHA512c9d458e899fcec6eb5ce5eae2371ab7f20e741b6cd3e82b052041e33fd8bc5c77fdcb4ee239bfd07913074eb810082a0c9753c25571aeb8aa6cf04f072e1f764
-
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}_comexp_msc
Filesize36KB
MD5eab75a01498a0489b0c35e8b7d0036e5
SHA1fd80fe2630e0443d1a1cef2bdb21257f3a162f86
SHA256fdf01d2265452465fcbed01f1fdd994d8cbb41a40bbb1988166604c5450ead47
SHA5122ec6c4f34dcf00b6588b536f15e3fe4d98a0b663c8d2a2df06aa7cface88e072e2c2b1b9aaf4dc5a17b29023a85297f1a007ff60b5d6d0c65d1546bf0e12dd45
-
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133432448880878937.txt
Filesize60KB
MD54d7e88f831a2c36666e2e497dfce8f9f
SHA152c3bc44e1b25af9bb5c255ef1007184aa9d17cf
SHA2569c3cf708281c6c88435cd2694c508ef240bb8b8b731804cc15ffd5af3864f715
SHA5129f086d1f9a89debbaa6e28221fd5aa1399b5d391bc942f076e2679b026599cc74da43d181646af263163628745f953e6b202cc32320f86bc6efac84714c1e5d9
-
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\TempState\CortanaUnifiedTileModelCache.dat
Filesize8KB
MD5940c60fff7114064e659a4521231b165
SHA17f0510d8d2a482dbe134d185f2ba85bb8c1450d3
SHA25623f0e0197d3b832433dbdb576a13ec7b0fb2339058d7f97513559f97e2be755f
SHA512afece45d28102721a59c05e1b0f7bee5bc77b917981f19f0394249586a71ba13d277554b61b70958a54214c17972b4404fae23a1b9808f205375147e792ab263
-
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\TempState\CortanaUnifiedTileModelCache.dat
Filesize8KB
MD5940c60fff7114064e659a4521231b165
SHA17f0510d8d2a482dbe134d185f2ba85bb8c1450d3
SHA25623f0e0197d3b832433dbdb576a13ec7b0fb2339058d7f97513559f97e2be755f
SHA512afece45d28102721a59c05e1b0f7bee5bc77b917981f19f0394249586a71ba13d277554b61b70958a54214c17972b4404fae23a1b9808f205375147e792ab263
-
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState\StartUnifiedTileModelCache.dat
Filesize5KB
MD507df6b247d34c8bbde7cc396adfb19b9
SHA1d5c601bee52bbcaac0afa4ab75d169009bd5ac2d
SHA256ad9b76b5231d0b87808d09e29a8cfe5df1702f1a890ce0713ac83325e0af7238
SHA512fbd93260c9acfce701144f20f289dceab75f5bf4b388e16833a548249e499373a74ad14768f0214b525528784ec7a7d545507bff808d133f89f2ddbeda1fd887
-
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState\StartUnifiedTileModelCache.dat
Filesize5KB
MD507df6b247d34c8bbde7cc396adfb19b9
SHA1d5c601bee52bbcaac0afa4ab75d169009bd5ac2d
SHA256ad9b76b5231d0b87808d09e29a8cfe5df1702f1a890ce0713ac83325e0af7238
SHA512fbd93260c9acfce701144f20f289dceab75f5bf4b388e16833a548249e499373a74ad14768f0214b525528784ec7a7d545507bff808d133f89f2ddbeda1fd887
-
C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\LY5AHA87\microsoft.windows[1].xml
Filesize97B
MD572734e0a0eaa38f29865c14e05a87e75
SHA1e9935192cfdc9fb0dd05069ab782464156056ecb
SHA2561da1485c0c8d4ae33749a2b5c847be1b57f3e4dfde4f1e793b839421fa23c5fa
SHA512d72c33d95ec10141cf89c568b4e09435948b98a9fa7c55d55324dfab7344ec3b23141e74eed8fd692bc271f1b2f7169dc2ef23df4473ca8dc1cee9aebac4e3f0
-
C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\LY5AHA87\microsoft.windows[1].xml
Filesize97B
MD572734e0a0eaa38f29865c14e05a87e75
SHA1e9935192cfdc9fb0dd05069ab782464156056ecb
SHA2561da1485c0c8d4ae33749a2b5c847be1b57f3e4dfde4f1e793b839421fa23c5fa
SHA512d72c33d95ec10141cf89c568b4e09435948b98a9fa7c55d55324dfab7344ec3b23141e74eed8fd692bc271f1b2f7169dc2ef23df4473ca8dc1cee9aebac4e3f0
-
C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\LY5AHA87\microsoft.windows[1].xml
Filesize97B
MD572734e0a0eaa38f29865c14e05a87e75
SHA1e9935192cfdc9fb0dd05069ab782464156056ecb
SHA2561da1485c0c8d4ae33749a2b5c847be1b57f3e4dfde4f1e793b839421fa23c5fa
SHA512d72c33d95ec10141cf89c568b4e09435948b98a9fa7c55d55324dfab7344ec3b23141e74eed8fd692bc271f1b2f7169dc2ef23df4473ca8dc1cee9aebac4e3f0
-
C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\LY5AHA87\microsoft.windows[1].xml
Filesize97B
MD572734e0a0eaa38f29865c14e05a87e75
SHA1e9935192cfdc9fb0dd05069ab782464156056ecb
SHA2561da1485c0c8d4ae33749a2b5c847be1b57f3e4dfde4f1e793b839421fa23c5fa
SHA512d72c33d95ec10141cf89c568b4e09435948b98a9fa7c55d55324dfab7344ec3b23141e74eed8fd692bc271f1b2f7169dc2ef23df4473ca8dc1cee9aebac4e3f0
-
C:\Users\Admin\AppData\Local\Packages\microsoft.windows.search_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\LY5AHA87\microsoft.windows[1].xml
Filesize97B
MD572734e0a0eaa38f29865c14e05a87e75
SHA1e9935192cfdc9fb0dd05069ab782464156056ecb
SHA2561da1485c0c8d4ae33749a2b5c847be1b57f3e4dfde4f1e793b839421fa23c5fa
SHA512d72c33d95ec10141cf89c568b4e09435948b98a9fa7c55d55324dfab7344ec3b23141e74eed8fd692bc271f1b2f7169dc2ef23df4473ca8dc1cee9aebac4e3f0
-
Filesize
10KB
MD577649e6bb1d1427fb583a77e57e40bd0
SHA1e8c78ae22f89885684a4d055da23a6eeb43cf520
SHA25674c2adf17c95d77530fd778efb726f88e16c9f4c2c35cd86c0d8a1ebe1903779
SHA512294a1525dbed352fde90277b8436cbdebf3451f9264ba20c7a955b9155677cfbebc62c38f466001e7200a9bb13a334222aacbfc1fded3c25202f76b68a1f05b6
-
Filesize
452KB
MD5b8c1e1a32997341ceb940f8372ea7d5c
SHA105d9fedf5dbc4360e504c30688b3cab7b27e090f
SHA256b9bb9b4d2288187c7953c540d90a7043190fb7315f6a6c25efa90a8fe48172dc
SHA51264b2e1acd526dc22f4703a8a95141792dd3f551fe955f26eac896a80685256203f8b27ed54292eaff8f34124ece8433bd461dc4a53040542bf91d00defe48e22
-
Filesize
702KB
MD5950b964de3e36af160e3dd849d4c20c2
SHA14d6b15df494f61d7487ed36fd207e0aa7fbdb964
SHA25635f622b6e7520e21fc9da9d3704581d9de420fb05010bbf4eff9d32683269422
SHA5124e0b119e60da40a82461f93269c3aab5218235d5e0d89410bf6dcf21e59428ee6aab05f8699f1a9597b5463ef16d80d02a2b2ea30aa49071e15790448604e968
-
Filesize
670KB
MD5c7315104de25ee5ec8053b84e7288e62
SHA1be9d6609ee896ba4177018d7817661f75fd8c5e6
SHA256dd800b2a31acb98cd14817b81638e2d4c2f1b7bb680a229bcc21d052e8591191
SHA51280315b1a5857749a6602fec8d90603955e1d73d62bd92c630dc732ad1da8e14ba26ded85b1cd84211b178b1c8336a6405ec36893d097f173870f26934179ca90
-
Filesize
608KB
MD567f7e4c5c39c1d36b712ab84d392278f
SHA188212aa9d55f72b4503c2571a57c68c6869263aa
SHA256320b47dea27641c3d3396cea1e938fa8086b0deca25607127323d91308f83265
SHA512cf00496935113b32ddfb32edad50f6ec1ce8327f7831970e6ee595ced4c7f6219ff6c1df0b8589b38847698b9b6605270195bce73923b69ea583110609b4c31a
-
Filesize
51KB
MD5bd74a3c50fd08981e89d96859e176d68
SHA10a98b96aefe60b96722d587b7c3aabcd15927618
SHA256ab305218ee0e95fa553885fa52f3a25dcc13b4deade8b7993ccb9f230a272837
SHA5120704243904abc3691177e34606fe2741945f69cf7ecb898655d98e81b145bf707d20cfa0af01fb3aa1cd170e2f3ce8f625b1612e0fcf5eba01f770617ffc9f1e