Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
1199s -
max time network
1180s -
platform
windows11-21h2_x64 -
resource
win11-20240802-en -
resource tags
arch:x64arch:x86image:win11-20240802-enlocale:en-usos:windows11-21h2-x64system -
submitted
25/09/2024, 23:05
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
http://google.com
Resource
win11-20240802-en
General
-
Target
http://google.com
Malware Config
Signatures
-
Suspicious use of NtCreateProcessExOtherParentProcess 2 IoCs
description pid Process procid_target PID 2236 created 1924 2236 taskmgr.exe 78 PID 2236 created 1924 2236 taskmgr.exe 78 -
Boot or Logon Autostart Execution: Active Setup 2 TTPs 1 IoCs
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
description ioc Process Key created \REGISTRY\USER\S-1-5-21-131918955-2378418313-883382443-1000\Software\Microsoft\Active Setup\Installed Components explorer.exe -
Downloads MZ/PE file
-
Drops file in Drivers directory 1 IoCs
description ioc Process File opened for modification C:\Windows\System32\drivers\etc\ TuneupSvc.exe -
Uses Session Manager for persistence 2 TTPs 2 IoCs
Creates Session Manager registry key to run executable early in system boot.
description ioc Process Set value (data) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager\BootExecute = 6100750074006f0063006800650063006b0020006100750074006f00630068006b0020002a0000000000 icarus.exe Set value (data) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Session Manager\BootExecute = 6100750074006f0063006800650063006b0020006100750074006f00630068006b0020002a0000006900630061007200750073005f0072007600720074002e0065007800650000000000 icarus.exe -
Executes dropped EXE 38 IoCs
pid Process 4876 Bloxstrap-v2.7.0.exe 8076 RobloxPlayerBeta.exe 6584 Bloxstrap-v2.7.0.exe 6244 RobloxPlayerBeta.exe 5880 avast_cleanup_online_setup.exe 5264 icarus.exe 5940 icarus_ui.exe 1900 icarus.exe 5124 pdfix.exe 8112 TuneupSvc.exe 5668 TuneupUI.exe 6808 TuneupUI.exe 5164 TuneupUI.exe 5280 TuneupUI.exe 6016 TuneupUI.exe 7316 TuneupUI.exe 7776 TuneupUI.exe 6680 su_worker.exe 3584 gf2hlp.exe 4464 gf2hlp.exe 3944 gf2hlp.exe 6188 gf2hlp.exe 2056 gf2hlp.exe 6952 gf2hlp.exe 4748 gf2hlp.exe 2140 gf2hlp.exe 7020 gf2hlp.exe 1964 gf2hlp.exe 5624 dismhost.exe 5172 gf2hlp.exe 4468 TuneupUI.exe 3620 TuneupUI.exe 5448 TuneupUI.exe 2784 TuneupUI.exe 7576 TuneupUI.exe 2228 Bloxstrap-v2.7.0.exe 8136 RobloxPlayerBeta.exe 4188 TuneupUI.exe -
Loads dropped DLL 64 IoCs
pid Process 8076 RobloxPlayerBeta.exe 6244 RobloxPlayerBeta.exe 1900 icarus.exe 8112 TuneupSvc.exe 8112 TuneupSvc.exe 8112 TuneupSvc.exe 8112 TuneupSvc.exe 8112 TuneupSvc.exe 8112 TuneupSvc.exe 8112 TuneupSvc.exe 8112 TuneupSvc.exe 8112 TuneupSvc.exe 8112 TuneupSvc.exe 8112 TuneupSvc.exe 8112 TuneupSvc.exe 8112 TuneupSvc.exe 8112 TuneupSvc.exe 8112 TuneupSvc.exe 8112 TuneupSvc.exe 8112 TuneupSvc.exe 8112 TuneupSvc.exe 8112 TuneupSvc.exe 8112 TuneupSvc.exe 8112 TuneupSvc.exe 8112 TuneupSvc.exe 8112 TuneupSvc.exe 8112 TuneupSvc.exe 8112 TuneupSvc.exe 8112 TuneupSvc.exe 8112 TuneupSvc.exe 8112 TuneupSvc.exe 8112 TuneupSvc.exe 8112 TuneupSvc.exe 5668 TuneupUI.exe 5668 TuneupUI.exe 5668 TuneupUI.exe 5668 TuneupUI.exe 5668 TuneupUI.exe 5668 TuneupUI.exe 5668 TuneupUI.exe 5668 TuneupUI.exe 5668 TuneupUI.exe 5668 TuneupUI.exe 5668 TuneupUI.exe 5668 TuneupUI.exe 5668 TuneupUI.exe 5668 TuneupUI.exe 5668 TuneupUI.exe 5668 TuneupUI.exe 5668 TuneupUI.exe 5668 TuneupUI.exe 5668 TuneupUI.exe 5668 TuneupUI.exe 6808 TuneupUI.exe 6808 TuneupUI.exe 6808 TuneupUI.exe 6808 TuneupUI.exe 6808 TuneupUI.exe 6808 TuneupUI.exe 6808 TuneupUI.exe 6808 TuneupUI.exe 6808 TuneupUI.exe 6808 TuneupUI.exe 6808 TuneupUI.exe -
Reads user/profile data of local email clients 2 TTPs
Email clients store some user data on disk where infostealers will often target it.
-
Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\TuneupUI.exe = "\"C:\\Program Files\\Avast Software\\Cleanup\\TuneupUI.exe\" /nogui" icarus.exe -
Checks for any installed AV software in registry 1 TTPs 17 IoCs
description ioc Process Key opened \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\avast software\avast\ su_worker.exe Key opened \REGISTRY\MACHINE\SOFTWARE\avast software\avast\ su_worker.exe Key opened \REGISTRY\MACHINE\Software\AVAST Software\Avast\properties TuneupSvc.exe Key opened \REGISTRY\MACHINE\SOFTWARE\Avira\Antivirus TuneupSvc.exe Key opened \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\avira\launcher\ su_worker.exe Key opened \REGISTRY\MACHINE\SOFTWARE\avast software\avast\properties\webshield\common\ su_worker.exe Key opened \REGISTRY\MACHINE\SOFTWARE\avast software\avast\properties\fwsettings\firewall\ su_worker.exe Key opened \REGISTRY\MACHINE\Software\AVAST Software\Avast icarus.exe Key opened \REGISTRY\MACHINE\Software\Avira\Antivirus TuneupSvc.exe Key opened \REGISTRY\MACHINE\SOFTWARE\AVAST Software\Avast TuneupSvc.exe Key opened \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Avira\Antivirus TuneupSvc.exe Key opened \REGISTRY\MACHINE\SOFTWARE\avira\launcher\ su_worker.exe Key opened \REGISTRY\MACHINE\Software\AVAST Software\Avast TuneupSvc.exe Key opened \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\AVAST Software\Avast TuneupSvc.exe Key opened \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\avast software\avast\properties\webshield\common\ su_worker.exe Key opened \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\avast software\avast\properties\fwsettings\firewall\ su_worker.exe Key opened \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Avast Software\Avast icarus.exe -
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
description ioc Process Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA TuneupSvc.exe -
Enumerates connected drives 3 TTPs 28 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
description ioc Process File opened (read-only) \??\F: TuneupSvc.exe File opened (read-only) \??\N: TuneupSvc.exe File opened (read-only) \??\D: TuneupSvc.exe File opened (read-only) \??\P: TuneupSvc.exe File opened (read-only) \??\T: TuneupSvc.exe File opened (read-only) \??\A: TuneupSvc.exe File opened (read-only) \??\B: TuneupSvc.exe File opened (read-only) \??\M: TuneupSvc.exe File opened (read-only) \??\Y: TuneupSvc.exe File opened (read-only) \??\L: TuneupSvc.exe File opened (read-only) \??\O: TuneupSvc.exe File opened (read-only) \??\S: TuneupSvc.exe File opened (read-only) \??\I: TuneupSvc.exe File opened (read-only) \??\Q: TuneupSvc.exe File opened (read-only) \??\Z: TuneupSvc.exe File opened (read-only) \??\G: TuneupSvc.exe File opened (read-only) \??\V: TuneupSvc.exe File opened (read-only) \??\F: gf2hlp.exe File opened (read-only) \??\F: explorer.exe File opened (read-only) \??\E: TuneupSvc.exe File opened (read-only) \??\W: TuneupSvc.exe File opened (read-only) \??\X: TuneupSvc.exe File opened (read-only) \??\R: TuneupSvc.exe File opened (read-only) \??\U: TuneupSvc.exe File opened (read-only) \??\D: explorer.exe File opened (read-only) \??\H: TuneupSvc.exe File opened (read-only) \??\J: TuneupSvc.exe File opened (read-only) \??\K: TuneupSvc.exe -
Legitimate hosting services abused for malware hosting/C2 1 TTPs 8 IoCs
flow ioc 20 camo.githubusercontent.com 62 camo.githubusercontent.com 63 camo.githubusercontent.com 64 camo.githubusercontent.com 65 camo.githubusercontent.com 66 camo.githubusercontent.com 67 camo.githubusercontent.com 1 raw.githubusercontent.com -
Writes to the Master Boot Record (MBR) 1 TTPs 4 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
description ioc Process File opened for modification \??\PhysicalDrive0 avast_cleanup_online_setup.exe File opened for modification \??\PhysicalDrive0 icarus.exe File opened for modification \??\PhysicalDrive0 icarus.exe File opened for modification \??\PhysicalDrive0 TuneupSvc.exe -
Drops file in System32 directory 64 IoCs
description ioc Process File opened for modification C:\Windows\System32\config\systemprofile\AppData\Local\tw-f70-f74-888f.tmp\ TuneupSvc.exe File opened for modification C:\Windows\System32\spool\ TuneupSvc.exe File opened for modification C:\Windows\SysWOW64\wbem\Logs\ TuneupSvc.exe File opened for modification C:\Windows\system32\LogFiles\setupcln\diagerr.xml gf2hlp.exe File opened for modification C:\Windows\System32\config\systemprofile\AppData\Local\tw-f70-f74-886f.tmp\ TuneupSvc.exe File opened for modification C:\Windows\System32\config\systemprofile\AppData\Local\tw-f70-f74-8895.tmp\ TuneupSvc.exe File opened for modification C:\Windows\System32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\ TuneupSvc.exe File opened for modification C:\Windows\system32\LogFiles\setupcln\diagwrn.xml gf2hlp.exe File opened for modification C:\Windows\system32\LogFiles\setupcln\setupact.log gf2hlp.exe File opened for modification C:\Windows\system32\icarus_rvrt.exe icarus.exe File opened for modification C:\Windows\System32\config\systemprofile\AppData\Local\tw-f70-f74-8879.tmp\ TuneupSvc.exe File opened for modification C:\Windows\System32\config\systemprofile\AppData\Local\tw-f70-f74-889b.tmp\ TuneupSvc.exe File opened for modification C:\Windows\System32\SleepStudy\ TuneupSvc.exe File opened for modification C:\Windows\System32\FileRecovery.log TuneupSvc.exe File opened for modification C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Office\OTele\ TuneupSvc.exe File opened for modification C:\Windows\System32\config\systemprofile\AppData\Local\tw-f70-f74-8871.tmp\ TuneupSvc.exe File opened for modification C:\Windows\System32\WDI\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\ TuneupSvc.exe File opened for modification C:\Windows\system32\LogFiles\setupcln\setupact.log gf2hlp.exe File opened for modification C:\Windows\system32\LogFiles\setupcln\setuperr.log gf2hlp.exe File opened for modification C:\Windows\System32\config\systemprofile\AppData\Local\tw-f70-f74-886d.tmp\ TuneupSvc.exe File opened for modification C:\Windows\System32\config\systemprofile\AppData\Local\tw-f70-f74-88af.tmp\ TuneupSvc.exe File opened for modification C:\Windows\System32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\ TuneupSvc.exe File opened for modification C:\Windows\system32\LogFiles\setupcln\setuperr.log gf2hlp.exe File opened for modification C:\Windows\System32\config\systemprofile\AppData\Local\D3DSCache\ TuneupSvc.exe File opened for modification C:\Windows\System32\config\systemprofile\AppData\Local\tw-f70-f74-8897.tmp\ TuneupSvc.exe File opened for modification C:\Windows\System32\SleepStudy\ScreenOn\ TuneupSvc.exe File opened for modification C:\Windows\system32\LogFiles\setupcln\setupact.log gf2hlp.exe File opened for modification C:\Windows\system32\LogFiles\setupcln\diagwrn.xml gf2hlp.exe File opened for modification C:\Windows\System32\catroot2\ TuneupSvc.exe File opened for modification C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\CLR_v2.0\ TuneupSvc.exe File opened for modification C:\Windows\SysWOW64\ TuneupSvc.exe File opened for modification C:\Windows\SysWOW64\config\systemprofile\ TuneupSvc.exe File created C:\Windows\system32\icarus_rvrt.exe icarus.exe File opened for modification C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Notifications\wpnidm\ TuneupSvc.exe File opened for modification C:\Windows\System32\config\systemprofile\AppData\Local\tw-f70-f74-888b.tmp\ TuneupSvc.exe File opened for modification C:\Windows\system32\LogFiles\setupcln\diagerr.xml gf2hlp.exe File opened for modification C:\Windows\system32\ TuneupSvc.exe File opened for modification C:\Windows\System32\config\systemprofile\AppData\Local\tw-f70-f74-8891.tmp\ TuneupSvc.exe File opened for modification C:\Windows\system32\logfiles\ TuneupSvc.exe File opened for modification C:\Windows\System32\config\systemprofile\AppData\Local\tw-f70-f74-8875.tmp\ TuneupSvc.exe File opened for modification C:\Windows\System32\config\systemprofile\AppData\Local\tw-f70-f74-888d.tmp\ TuneupSvc.exe File opened for modification C:\Windows\System32\config\systemprofile\AppData\Local\tw-f70-f74-8893.tmp\ TuneupSvc.exe File opened for modification C:\Windows\System32\wbem\Logs\ TuneupSvc.exe File opened for modification C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\ TuneupSvc.exe File opened for modification C:\Windows\System32\config\systemprofile\AppData\Local\tw-f70-f74-8877.tmp\ TuneupSvc.exe File opened for modification C:\Windows\System32\config\systemprofile\AppData\Local\tw-f70-f74-88ad.tmp\ TuneupSvc.exe File opened for modification C:\Windows\System32\sru\ TuneupSvc.exe File opened for modification C:\Windows\system32\LogFiles\setupcln\setuperr.log gf2hlp.exe File opened for modification C:\Windows\system32\LogFiles\setupcln\diagwrn.xml gf2hlp.exe File opened for modification C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\CLR_v4.0\ TuneupSvc.exe File opened for modification C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\INetCookies\ TuneupSvc.exe File opened for modification C:\Windows\System32\config\systemprofile\AppData\Local\tw-f70-f74-8899.tmp\ TuneupSvc.exe File opened for modification C:\Windows\System32\config\systemprofile\AppData\Local\tw-f70-f74-88b1.tmp\ TuneupSvc.exe File opened for modification C:\Windows\System32\WDI\LogFiles\ TuneupSvc.exe File opened for modification C:\Windows\system32\LogFiles\setupcln\diagwrn.xml gf2hlp.exe File opened for modification C:\Windows\System32\config\systemprofile\ TuneupSvc.exe File opened for modification C:\Windows\System32\DriverStore\ TuneupSvc.exe File opened for modification C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\InstallService\ TuneupSvc.exe File opened for modification C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\ TuneupSvc.exe File opened for modification C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\WebCache\ TuneupSvc.exe File opened for modification C:\Windows\System32\config\systemprofile\AppData\Local\tw-f70-f74-885c.tmp\ TuneupSvc.exe File opened for modification C:\Windows\system32\LogFiles\setupcln\diagerr.xml gf2hlp.exe File opened for modification C:\Windows\system32\LogFiles\setupcln\setuperr.log gf2hlp.exe File opened for modification C:\Windows\System32\config\ TuneupSvc.exe -
Suspicious use of NtCreateThreadExHideFromDebugger 3 IoCs
pid Process 8076 RobloxPlayerBeta.exe 6244 RobloxPlayerBeta.exe 8136 RobloxPlayerBeta.exe -
Suspicious use of NtSetInformationThreadHideFromDebugger 60 IoCs
pid Process 8076 RobloxPlayerBeta.exe 8076 RobloxPlayerBeta.exe 8076 RobloxPlayerBeta.exe 8076 RobloxPlayerBeta.exe 8076 RobloxPlayerBeta.exe 8076 RobloxPlayerBeta.exe 8076 RobloxPlayerBeta.exe 8076 RobloxPlayerBeta.exe 8076 RobloxPlayerBeta.exe 8076 RobloxPlayerBeta.exe 8076 RobloxPlayerBeta.exe 8076 RobloxPlayerBeta.exe 8076 RobloxPlayerBeta.exe 8076 RobloxPlayerBeta.exe 8076 RobloxPlayerBeta.exe 8076 RobloxPlayerBeta.exe 8076 RobloxPlayerBeta.exe 8076 RobloxPlayerBeta.exe 6244 RobloxPlayerBeta.exe 6244 RobloxPlayerBeta.exe 6244 RobloxPlayerBeta.exe 6244 RobloxPlayerBeta.exe 6244 RobloxPlayerBeta.exe 6244 RobloxPlayerBeta.exe 6244 RobloxPlayerBeta.exe 6244 RobloxPlayerBeta.exe 6244 RobloxPlayerBeta.exe 6244 RobloxPlayerBeta.exe 6244 RobloxPlayerBeta.exe 6244 RobloxPlayerBeta.exe 6244 RobloxPlayerBeta.exe 6244 RobloxPlayerBeta.exe 6244 RobloxPlayerBeta.exe 6244 RobloxPlayerBeta.exe 6244 RobloxPlayerBeta.exe 6244 RobloxPlayerBeta.exe 8136 RobloxPlayerBeta.exe 8136 RobloxPlayerBeta.exe 8136 RobloxPlayerBeta.exe 8136 RobloxPlayerBeta.exe 8136 RobloxPlayerBeta.exe 8136 RobloxPlayerBeta.exe 8136 RobloxPlayerBeta.exe 8136 RobloxPlayerBeta.exe 8136 RobloxPlayerBeta.exe 8136 RobloxPlayerBeta.exe 8136 RobloxPlayerBeta.exe 8136 RobloxPlayerBeta.exe 8136 RobloxPlayerBeta.exe 8136 RobloxPlayerBeta.exe 8136 RobloxPlayerBeta.exe 8136 RobloxPlayerBeta.exe 8136 RobloxPlayerBeta.exe 8136 RobloxPlayerBeta.exe 6244 RobloxPlayerBeta.exe 6244 RobloxPlayerBeta.exe 6244 RobloxPlayerBeta.exe 8136 RobloxPlayerBeta.exe 8136 RobloxPlayerBeta.exe 8136 RobloxPlayerBeta.exe -
Drops file in Program Files directory 64 IoCs
description ioc Process File opened for modification C:\Program Files\Avast Software\Cleanup\dll_loader.dll icarus.exe File opened for modification C:\Program Files\Avast Software\Cleanup\locales\sl.pak.ipending.1649140d icarus.exe File opened for modification C:\Program Files\Avast Software\Cleanup\Resources\offline.htm.ipending.1649140d icarus.exe File opened for modification C:\Program Files\Avast Software\Cleanup\Setup\setup.ini TuneupSvc.exe File opened for modification C:\Program Files\Avast Software\Cleanup\locales\ko.pak icarus.exe File opened for modification C:\Program Files\Avast Software\Cleanup\AvBugReport.exe.ipending.1649140d icarus.exe File opened for modification C:\Program Files\Common Files\Avast Software\Icarus\avast-tu\product-def.xml icarus.exe File opened for modification C:\Program Files\Avast Software\Cleanup\resources.pak icarus.exe File opened for modification C:\Program Files\Avast Software\Cleanup\avast.local_vc142.crt\api-ms-win-crt-private-l1-1-0.dll.ipending.1649140d icarus.exe File created C:\Program Files\Avast Software\Cleanup\Resources\dist\assets\i18n\he.json.ipending.1649140d.lzma icarus.exe File created C:\Program Files\Avast Software\Cleanup\Resources\dist\assets\i18n\fi.json.ipending.1649140d icarus.exe File created C:\Program Files\Avast Software\Cleanup\Resources\dist\assets\vnext\spawn-layout-avg.css.ipending.1649140d icarus.exe File created C:\Program Files\Avast Software\Cleanup\avast.local_vc142.crt\api-ms-win-crt-runtime-l1-1-0.dll.ipending.1649140d.lzma icarus.exe File opened for modification C:\Program Files\Avast Software\Cleanup\Resources\dist\assets\i18n\es-ES.json icarus.exe File created C:\Program Files\Avast Software\Cleanup\locales\he.pak.ipending.1649140d.lzma icarus.exe File created C:\Program Files\Avast Software\Cleanup\Resources\dist\assets\i18n\ur.json.ipending.1649140d icarus.exe File created C:\Program Files\Avast Software\Cleanup\avast.local_vc142.crt\api-ms-win-crt-stdio-l1-1-0.dll.ipending.1649140d.lzma icarus.exe File created C:\Program Files\Avast Software\Cleanup\chrome_100_percent.pak.ipending.1649140d icarus.exe File opened for modification C:\Program Files\Avast Software\Cleanup\aswIP.dll icarus.exe File opened for modification C:\Program Files\Avast Software\Cleanup\avast.local_vc142.crt\api-ms-win-core-synch-l1-1-0.dll.ipending.1649140d icarus.exe File opened for modification C:\Program Files\Avast Software\Cleanup\Resources\dist\assets\vnext\spawn-flags.css.ipending.1649140d icarus.exe File created C:\Program Files\Avast Software\Cleanup\TuneupSvc.exe.ipending.1649140d.lzma icarus.exe File created C:\Program Files\Avast Software\Cleanup\event_manager_burger.dll.ipending.1649140d icarus.exe File opened for modification C:\Program Files\Avast Software\Cleanup\locales\en-GB.pak icarus.exe File created C:\Program Files\Avast Software\Cleanup\Resources\dist\assets\i18n\fa.json.ipending.1649140d.lzma icarus.exe File created C:\Program Files\Avast Software\Cleanup\Resources\dist\assets\i18n\sr.json.ipending.1649140d icarus.exe File opened for modification C:\Program Files\Avast Software\Cleanup\Resources\dist\assets\i18n\fi.json icarus.exe File created C:\Program Files\Avast Software\Cleanup\avast.local_vc142.crt\ucrtbase.dll.ipending.1649140d icarus.exe File created C:\Program Files\Avast Software\Cleanup\Resources\dist\assets\vnext\spawn-font-one.css.ipending.1649140d icarus.exe File created C:\Program Files\Avast Software\Cleanup\v8_context_snapshot.bin.ipending.1649140d.lzma icarus.exe File created C:\Program Files\Avast Software\Cleanup\autoreactivator.exe.ipending.1649140d.lzma icarus.exe File created C:\Program Files\Avast Software\Cleanup\Resources\dist\assets\vnext\spawn.css.ipending.1649140d.lzma icarus.exe File opened for modification C:\Program Files\Avast Software\Cleanup\avast.local_vc142.crt\api-ms-win-core-file-l2-1-0.dll icarus.exe File opened for modification C:\Program Files\Avast Software\Cleanup\Resources\dist\assets\i18n\bg.json.ipending.1649140d icarus.exe File opened for modification C:\Program Files\Avast Software\Cleanup\Resources\dist\assets\i18n\fi.json.ipending.1649140d icarus.exe File created C:\Program Files\Avast Software\Cleanup\avast.local_vc142.crt\api-ms-win-crt-locale-l1-1-0.dll.ipending.1649140d.lzma icarus.exe File created C:\Program Files\Avast Software\Cleanup\event_manager.dll.ipending.1649140d.lzma icarus.exe File created C:\Program Files\Avast Software\Cleanup\libwautils.dll.ipending.1649140d.lzma icarus.exe File opened for modification C:\Program Files\Avast Software\Cleanup\Resources\SvgInline.svg.ipending.1649140d icarus.exe File created C:\Program Files\Avast Software\Cleanup\avast.local_vc142.crt\api-ms-win-core-processthreads-l1-1-1.dll.ipending.1649140d.lzma icarus.exe File created C:\Program Files\Avast Software\Cleanup\Resources\dist\assets\css\index.css.ipending.1649140d icarus.exe File opened for modification C:\Program Files\Avast Software\Cleanup\commchannel.dll.ipending.1649140d icarus.exe File opened for modification C:\Program Files\Avast Software\Cleanup\locales\th.pak.ipending.1649140d icarus.exe File opened for modification C:\Program Files\Avast Software\Cleanup\locales\tr.pak.ipending.1649140d icarus.exe File created C:\Program Files\Avast Software\Cleanup\Resources\avast.brand.ipending.1649140d.lzma icarus.exe File opened for modification C:\Program Files\Avast Software\Cleanup\chrome_200_percent.pak icarus.exe File opened for modification C:\Program Files\Avast Software\Cleanup\ntp_time.dll icarus.exe File created C:\Program Files\Avast Software\Cleanup\avast.local_vc142.crt\api-ms-win-core-file-l1-2-0.dll.ipending.1649140d.lzma icarus.exe File created C:\Program Files\Avast Software\Cleanup\locales\fa.pak.ipending.1649140d icarus.exe File opened for modification C:\Program Files\Avast Software\Cleanup\Resources\dist\assets\vnext\spawn-font.css icarus.exe File opened for modification C:\Program Files\Avast Software\Cleanup\Resources\dist\assets\i18n\ro.json.ipending.1649140d icarus.exe File created C:\Program Files\Avast Software\Cleanup\aswIP.dll.ipending.1649140d icarus.exe File opened for modification C:\Program Files\Avast Software\Cleanup\avast.local_vc142.crt\msvcp140_1.dll.ipending.1649140d icarus.exe File opened for modification C:\Program Files\Avast Software\Cleanup\locales\gu.pak.ipending.1649140d icarus.exe File opened for modification C:\Program Files\Avast Software\Cleanup\locales\fr.pak icarus.exe File opened for modification C:\Program Files\Avast Software\Cleanup\aswCmnOS.dll icarus.exe File opened for modification C:\Program Files\Avast Software\Cleanup\Resources\dist\assets\i18n\sk.json icarus.exe File created C:\Program Files\Common Files\Avast Software\Icarus\avast-tu\icarus.exe icarus.exe File opened for modification C:\Program Files\Avast Software\Cleanup\setup\opm.ini TuneupSvc.exe File created C:\Program Files\Avast Software\Cleanup\SupportTool.exe.ipending.1649140d.lzma icarus.exe File created C:\Program Files\Avast Software\Cleanup\Resources\dist\assets\i18n\bn.json.ipending.1649140d icarus.exe File opened for modification C:\Program Files\Avast Software\Cleanup\avast.local_vc142.crt\api-ms-win-core-memory-l1-1-0.dll icarus.exe File created C:\Program Files\Avast Software\Cleanup\3rdparty_licenses\readme.txt.ipending.1649140d icarus.exe File opened for modification C:\Program Files\Avast Software\Cleanup\SupportTool.exe icarus.exe -
Drops file in Windows directory 30 IoCs
description ioc Process File opened for modification C:\Windows\ServiceProfiles\LocalService\ TuneupSvc.exe File opened for modification C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\ TuneupSvc.exe File opened for modification C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\ TuneupSvc.exe File opened for modification C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\INetCookies\ TuneupSvc.exe File opened for modification C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\ TuneupSvc.exe File opened for modification C:\Windows\AppCompat\Programs\ TuneupSvc.exe File opened for modification C:\Windows\ServiceProfiles\LocalService\AppData\Local\ TuneupSvc.exe File opened for modification C:\Windows\ServiceProfiles\LocalService\AppData\Local\FontCache\ TuneupSvc.exe File opened for modification C:\Windows\SoftwareDistribution\DataStore\Logs\ TuneupSvc.exe File opened for modification C:\Windows\Logs\DISM\dism.log dismhost.exe File opened for modification C:\Windows\Performance\WinSAT\DataStore\ TuneupSvc.exe File opened for modification C:\Windows\SoftwareDistribution\Download\ TuneupSvc.exe File opened for modification C:\Windows\Logs\DISM\dism.log gf2hlp.exe File opened for modification C:\Windows\inf\ TuneupSvc.exe File opened for modification C:\Windows\LiveKernelReports\ TuneupSvc.exe File opened for modification C:\Windows\Panther\ TuneupSvc.exe File opened for modification C:\Windows\Panther\UnattendGC\ TuneupSvc.exe File opened for modification C:\Windows\ServiceProfiles\NetworkService\AppData\ TuneupSvc.exe File opened for modification C:\Windows\ TuneupSvc.exe File opened for modification C:\Windows\Help\ TuneupSvc.exe File opened for modification C:\Windows\ServiceProfiles\NetworkService\ TuneupSvc.exe File opened for modification C:\Windows\Installer\ TuneupSvc.exe File opened for modification C:\Windows\Microsoft.NET\Framework\ TuneupSvc.exe File opened for modification C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\INetCache\ TuneupSvc.exe File opened for modification C:\Windows\debug\ TuneupSvc.exe File opened for modification C:\Windows\Microsoft.NET\Framework64\ TuneupSvc.exe File opened for modification C:\Windows\security\logs\ TuneupSvc.exe File opened for modification C:\Windows\TEMP TuneupSvc.exe File opened for modification C:\Windows\Logs\ TuneupSvc.exe File opened for modification C:\Windows\Performance\WinSAT\ TuneupSvc.exe -
Subvert Trust Controls: Mark-of-the-Web Bypass 1 TTPs 2 IoCs
When files are downloaded from the Internet, they are tagged with a hidden NTFS Alternate Data Stream (ADS) named Zone.Identifier with a specific value known as the MOTW.
description ioc Process File opened for modification C:\Users\Admin\Downloads\Bloxstrap-v2.7.0.exe:Zone.Identifier msedge.exe File opened for modification C:\Users\Admin\Downloads\avast_cleanup_online_setup.exe:Zone.Identifier msedge.exe -
Embeds OpenSSL 2 IoCs
Embeds OpenSSL, may be used to circumvent TLS interception.
resource yara_rule behavioral1/files/0x000100000002bd3a-6350.dat embeds_openssl behavioral1/files/0x000100000002bcd1-6050.dat embeds_openssl -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language avast_cleanup_online_setup.exe -
Checks SCSI registry key(s) 3 TTPs 64 IoCs
SCSI information is often read in order to detect sandboxing environments.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{259abffc-50a7-47ce-af08-68c9a7d73366}\000C explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Properties\{cf73bb51-3abf-44a2-85e0-9a3dc7a12132}\0006 explorer.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags explorer.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{a8b865dd-2e3d-4094-ad97-e593a70c75d6}\0005\ gf2hlp.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{51236583-0c4a-4fe8-b81f-166aec13f510}\007A explorer.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\FriendlyName explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{cf73bb51-3abf-44a2-85e0-9a3dc7a12132}\0006 explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Properties\{540b947e-8b40-45bc-a8a2-6a0b894cbda2}\0009 explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{51236583-0c4a-4fe8-b81f-166aec13f510}\0064 explorer.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Capabilities explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_QEMU&PROD_QEMU_DVD-ROM\4&215468A5&0&010000 gf2hlp.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{a8b865dd-2e3d-4094-ad97-e593a70c75d6}\0005\ gf2hlp.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{259abffc-50a7-47ce-af08-68c9a7d73366}\000C explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A explorer.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\HardwareID explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{afd97640-86a3-4210-b67c-289c41aabe55}\0003 explorer.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\HardwareID gf2hlp.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\FriendlyName taskmgr.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\FriendlyName explorer.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\FriendlyName explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Properties\{259abffc-50a7-47ce-af08-68c9a7d73366}\000C explorer.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Capabilities explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{83da6326-97a6-4088-9453-a1923f573b29}\0004 gf2hlp.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{8c7ed206-3f8a-4827-b3ab-ae9e1faefc6c}\0004 explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{cf73bb51-3abf-44a2-85e0-9a3dc7a12132}\0006 explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{a45c254e-df1c-4efd-8020-67d146a850e0}\0011 explorer.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\ConfigFlags gf2hlp.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{a8b865dd-2e3d-4094-ad97-e593a70c75d6}\0005 gf2hlp.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\CompatibleIDs gf2hlp.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{51236583-0c4a-4fe8-b81f-166aec13f510}\0064 explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{51236583-0c4a-4fe8-b81f-166aec13f510}\0064 explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_MSFT&PROD_VIRTUAL_DVD-ROM\2&1F4ADFFE&0&000001 gf2hlp.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{a8b865dd-2e3d-4094-ad97-e593a70c75d6}\0014 gf2hlp.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{8c7ed206-3f8a-4827-b3ab-ae9e1faefc6c}\0004 explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Properties\{a8b865dd-2e3d-4094-ad97-e593a70c75d6}\0005 gf2hlp.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Properties\{a8b865dd-2e3d-4094-ad97-e593a70c75d6}\0005\ gf2hlp.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Properties\{83da6326-97a6-4088-9453-a1923f573b29}\0015 gf2hlp.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A taskmgr.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\005A explorer.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Phantom gf2hlp.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Phantom gf2hlp.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{a8b865dd-2e3d-4094-ad97-e593a70c75d6}\0014 gf2hlp.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\HardwareID explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{540b947e-8b40-45bc-a8a2-6a0b894cbda2}\0009 explorer.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\FriendlyName explorer.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Capabilities explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Properties\{83da6326-97a6-4088-9453-a1923f573b29}\0004 gf2hlp.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\CompatibleIDs gf2hlp.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A explorer.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\HardwareID gf2hlp.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\HardwareID explorer.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags gf2hlp.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{a8b865dd-2e3d-4094-ad97-e593a70c75d6}\0005 gf2hlp.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{a8b865dd-2e3d-4094-ad97-e593a70c75d6}\0014 gf2hlp.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\HardwareID gf2hlp.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{cf73bb51-3abf-44a2-85e0-9a3dc7a12132}\0006 explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Properties\{afd97640-86a3-4210-b67c-289c41aabe55}\0003 explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000 explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{8c7ed206-3f8a-4827-b3ab-ae9e1faefc6c}\0004 explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Properties\{8c7ed206-3f8a-4827-b3ab-ae9e1faefc6c}\0004 explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{afd97640-86a3-4210-b67c-289c41aabe55}\0002 explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{8c7ed206-3f8a-4827-b3ab-ae9e1faefc6c}\0002 explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_MSFT&PROD_VIRTUAL_DVD-ROM\2&1F4ADFFE&0&000002 gf2hlp.exe -
Checks processor information in registry 2 TTPs 64 IoCs
Processor information is often read in order to detect sandboxing environments.
description ioc Process Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString icarus.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz icarus_ui.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision TuneupSvc.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz gf2hlp.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz TuneupUI.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 icarus.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 taskmgr.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz su_worker.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 gf2hlp.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz gf2hlp.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 TuneupUI.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 gf2hlp.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 su_worker.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz gf2hlp.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz TuneupUI.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 gf2hlp.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 TuneupUI.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz TuneupUI.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 gf2hlp.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 TuneupUI.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 gf2hlp.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz gf2hlp.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 gf2hlp.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz gf2hlp.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz TuneupUI.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz TuneupUI.exe Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 TuneupSvc.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 TuneupUI.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz icarus.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 gf2hlp.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 gf2hlp.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 TuneupUI.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 TuneupUI.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz TuneupUI.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 gf2hlp.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString taskmgr.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz icarus.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz TuneupUI.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz TuneupUI.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz TuneupUI.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz TuneupUI.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 TuneupUI.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 TuneupUI.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz TuneupUI.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz gf2hlp.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 gf2hlp.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz TuneupUI.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature TuneupSvc.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 icarus.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 TuneupUI.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 TuneupUI.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 gf2hlp.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz gf2hlp.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz gf2hlp.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 icarus_ui.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz TuneupSvc.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 TuneupUI.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz TuneupUI.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz gf2hlp.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 TuneupSvc.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz gf2hlp.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 TuneupUI.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 TuneupUI.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz gf2hlp.exe -
Enumerates system info in registry 2 TTPs 5 IoCs
description ioc Process Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSKU SearchHost.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS msedge.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer msedge.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName msedge.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS SearchHost.exe -
description ioc Process Key created \REGISTRY\USER\S-1-5-21-131918955-2378418313-883382443-1000\Software\Microsoft\Internet Explorer\TypedURLs taskmgr.exe Key created \REGISTRY\USER\S-1-5-21-131918955-2378418313-883382443-1000\Software\Microsoft\Internet Explorer\GPU SearchHost.exe Key created \REGISTRY\USER\S-1-5-21-131918955-2378418313-883382443-1000\Software\Microsoft\Internet Explorer\Toolbar explorer.exe Set value (int) \REGISTRY\USER\S-1-5-21-131918955-2378418313-883382443-1000\Software\Microsoft\Internet Explorer\Toolbar\Locked = "1" explorer.exe Key created \REGISTRY\USER\S-1-5-21-131918955-2378418313-883382443-1000\Software\Microsoft\Internet Explorer\Toolbar\ShellBrowser explorer.exe Set value (data) \REGISTRY\USER\S-1-5-21-131918955-2378418313-883382443-1000\Software\Microsoft\Internet Explorer\Toolbar\ShellBrowser\ITBar7Layout = 13000000000000000000000020000000100000000000000001000000010700005e01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 explorer.exe -
Modifies data under HKEY_USERS 19 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Windows\CurrentVersion TuneupSvc.exe Key created \REGISTRY\USER\S-1-5-20\Software\Microsoft TuneupSvc.exe Key created \REGISTRY\USER\S-1-5-20\Software\Microsoft\Windows\CurrentVersion TuneupSvc.exe Key created \REGISTRY\USER\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved TuneupSvc.exe Key created \REGISTRY\USER\S-1-5-19\Software TuneupSvc.exe Key created \REGISTRY\USER\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Explorer TuneupSvc.exe Set value (data) \REGISTRY\USER\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run\OneDriveSetup = 020000000000000000000000 TuneupSvc.exe Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft TuneupSvc.exe Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Windows TuneupSvc.exe Key created \REGISTRY\USER\S-1-5-20\Software TuneupSvc.exe Key created \REGISTRY\USER\S-1-5-20\Software\Microsoft\Windows TuneupSvc.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Cached TuneupSvc.exe Key created \REGISTRY\USER\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections svchost.exe Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run TuneupSvc.exe Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Explorer TuneupSvc.exe Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved TuneupSvc.exe Set value (data) \REGISTRY\USER\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run\OneDriveSetup = 020000000000000000000000 TuneupSvc.exe Key created \REGISTRY\USER\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run TuneupSvc.exe Set value (data) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Cached\{4234D49B-0245-4DF3-B780-3893943456E1} {000214E6-0000-0000-C000-000000000046} 0xFFFF = 010000000000000064902b21a00fdb01 TuneupSvc.exe -
Modifies registry class 64 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-131918955-2378418313-883382443-1000_Classes\roblox-player Bloxstrap-v2.7.0.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\avasttu\ = "Avast Cleanup" icarus.exe Set value (data) \REGISTRY\USER\S-1-5-21-131918955-2378418313-883382443-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 020202 explorer.exe Set value (int) \REGISTRY\USER\S-1-5-21-131918955-2378418313-883382443-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\TrayNotify\UserStartTime = "133670855649585230" explorer.exe Set value (str) \REGISTRY\USER\S-1-5-21-131918955-2378418313-883382443-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\Shell\SniffedFolderType = "Downloads" explorer.exe Key created \REGISTRY\USER\S-1-5-21-131918955-2378418313-883382443-1000_Classes\roblox\shell\open Bloxstrap-v2.7.0.exe Set value (str) \REGISTRY\USER\S-1-5-21-131918955-2378418313-883382443-1000_Classes\roblox\DefaultIcon\ = "C:\\Users\\Admin\\AppData\\Local\\Bloxstrap\\Bloxstrap.exe" Bloxstrap-v2.7.0.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\C06AEB9D-8774-46E7-8160-8321BCD14D9F\7CCD586D-2ABC-42FF-A23B-3731F4F183D9 = "65F115A51CCCDBF623206AEDE3B3D8A4" avast_cleanup_online_setup.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\C06AEB9D-8774-46E7-8160-8321BCD14D9F\56C7A9DA-4B11-406A-8B1A-EFF157C294D6 = "028f88a1-9471-4ff3-a230-98a403bb8feb" icarus.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\avasttu\shell\open\command\ = "\"C:\\Program Files\\Avast Software\\Cleanup\\TuneupUI.exe\" /%1" icarus.exe Set value (int) \REGISTRY\USER\S-1-5-21-131918955-2378418313-883382443-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Explorer\DOMStorage\www.bing.com\ = "1042" SearchHost.exe Set value (int) \REGISTRY\USER\S-1-5-21-131918955-2378418313-883382443-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\Shell\{24CCB8A6-C45A-477D-B940-3382B9225668}\IconSize = "48" explorer.exe Key created \REGISTRY\USER\S-1-5-21-131918955-2378418313-883382443-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\0 explorer.exe Key created \REGISTRY\USER\S-1-5-21-131918955-2378418313-883382443-1000_Classes\roblox\DefaultIcon Bloxstrap-v2.7.0.exe Set value (str) \REGISTRY\USER\S-1-5-21-131918955-2378418313-883382443-1000_Classes\roblox\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Bloxstrap\\Bloxstrap.exe\" %1" Bloxstrap-v2.7.0.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\avasttu\shell\open icarus.exe Key created \REGISTRY\USER\S-1-5-21-131918955-2378418313-883382443-1000_Classes\Local Settings explorer.exe Key created \REGISTRY\USER\S-1-5-21-131918955-2378418313-883382443-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell explorer.exe Set value (int) \REGISTRY\USER\S-1-5-21-131918955-2378418313-883382443-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Explorer\DOMStorage\Total\ = "1075" SearchHost.exe Set value (int) \REGISTRY\USER\S-1-5-21-131918955-2378418313-883382443-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\Shell\{24CCB8A6-C45A-477D-B940-3382B9225668}\Mode = "6" explorer.exe Set value (str) \REGISTRY\USER\S-1-5-21-131918955-2378418313-883382443-1000_Classes\roblox\URL Protocol Bloxstrap-v2.7.0.exe Set value (str) \REGISTRY\USER\S-1-5-21-131918955-2378418313-883382443-1000_Classes\roblox-player\URL Protocol Bloxstrap-v2.7.0.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\C06AEB9D-8774-46E7-8160-8321BCD14D9F\56C7A9DA-4B11-406A-8B1A-EFF157C294D6 = "028f88a1-9471-4ff3-a230-98a403bb8feb" icarus.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\C06AEB9D-8774-46E7-8160-8321BCD14D9F TuneupSvc.exe Set value (data) \REGISTRY\USER\S-1-5-21-131918955-2378418313-883382443-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\Shell\{24CCB8A6-C45A-477D-B940-3382B9225668}\Sort = 0000000000000000000000000000000002000000f4eec83032a8e241ab32e3c3ca28fd29030000000100000030f125b7ef471a10a5f102608c9eebac0a00000001000000 explorer.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\avasttu\URL Protocol icarus.exe Set value (data) \REGISTRY\USER\S-1-5-21-131918955-2378418313-883382443-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy\ApplicationFrame\Microsoft.Windows.PeopleExperienceHost = 6801000088020000 explorer.exe Key created \REGISTRY\USER\S-1-5-21-131918955-2378418313-883382443-1000_Classes\Local Settings\MuiCache StartMenuExperienceHost.exe Key created \REGISTRY\USER\S-1-5-21-131918955-2378418313-883382443-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Explorer\DOMStorage\Total SearchHost.exe Set value (int) \REGISTRY\USER\S-1-5-21-131918955-2378418313-883382443-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Explorer\DOMStorage\www.bing.com\ = "8246" SearchHost.exe Set value (int) \REGISTRY\USER\S-1-5-21-131918955-2378418313-883382443-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Explorer\DOMStorage\Total\ = "13176" SearchHost.exe Key created \REGISTRY\USER\S-1-5-21-131918955-2378418313-883382443-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\WorkFolders explorer.exe Set value (str) \REGISTRY\USER\S-1-5-21-131918955-2378418313-883382443-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Settings\Cache\Cookies\CachePrefix = "Cookie:" SearchHost.exe Key created \REGISTRY\USER\S-1-5-21-131918955-2378418313-883382443-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Explorer\DOMStorage\bing.com SearchHost.exe Set value (int) \REGISTRY\USER\S-1-5-21-131918955-2378418313-883382443-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Explorer\DOMStorage\www.bing.com\ = "13176" SearchHost.exe Key created \REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-131918955-2378418313-883382443-1000\{91B411CC-D30C-471E-A952-A0127918DC96} msedge.exe Key created \REGISTRY\USER\S-1-5-21-131918955-2378418313-883382443-1000_Classes\roblox-player\DefaultIcon Bloxstrap-v2.7.0.exe Key created \REGISTRY\USER\S-1-5-21-131918955-2378418313-883382443-1000_Classes\roblox-player\shell Bloxstrap-v2.7.0.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\avasttu\shell icarus.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\C06AEB9D-8774-46E7-8160-8321BCD14D9F\56C7A9DA-4B11-406A-8B1A-EFF157C294D6 = "028f88a1-9471-4ff3-a230-98a403bb8feb" TuneupSvc.exe Set value (str) \REGISTRY\USER\S-1-5-21-131918955-2378418313-883382443-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Settings\Cache\Content\CachePrefix SearchHost.exe Key created \REGISTRY\USER\S-1-5-21-131918955-2378418313-883382443-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Explorer\EdpDomStorage\Total SearchHost.exe Set value (int) \REGISTRY\USER\S-1-5-21-131918955-2378418313-883382443-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\Shell\{24CCB8A6-C45A-477D-B940-3382B9225668}\GroupView = "4294967295" explorer.exe Set value (data) \REGISTRY\USER\S-1-5-21-131918955-2378418313-883382443-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\MRUListEx = 0000000001000000ffffffff explorer.exe Key created \REGISTRY\USER\S-1-5-21-131918955-2378418313-883382443-1000_Classes\Local Settings msedge.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\C06AEB9D-8774-46E7-8160-8321BCD14D9F icarus.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\C06AEB9D-8774-46E7-8160-8321BCD14D9F icarus.exe Key created \REGISTRY\USER\S-1-5-21-131918955-2378418313-883382443-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1 explorer.exe Set value (int) \REGISTRY\USER\S-1-5-21-131918955-2378418313-883382443-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Explorer\DOMStorage\Total\ = "8246" SearchHost.exe Set value (str) \REGISTRY\USER\S-1-5-21-131918955-2378418313-883382443-1000_Classes\roblox-player\ = "URL: Roblox Protocol" Bloxstrap-v2.7.0.exe Set value (str) \REGISTRY\USER\S-1-5-21-131918955-2378418313-883382443-1000_Classes\roblox-player\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Bloxstrap\\Bloxstrap.exe\" %1" Bloxstrap-v2.7.0.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\C06AEB9D-8774-46E7-8160-8321BCD14D9F\7CCD586D-2ABC-42FF-A23B-3731F4F183D9 = "65F115A51CCCDBF623206AEDE3B3D8A4" icarus.exe Key created \REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-131918955-2378418313-883382443-1000\{FB624106-A08C-48AB-A0BF-5A9D31295ED3} explorer.exe Key created \REGISTRY\USER\S-1-5-21-131918955-2378418313-883382443-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\ explorer.exe Key created \REGISTRY\USER\S-1-5-21-131918955-2378418313-883382443-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Explorer\EdpDomStorage\www.bing.com SearchHost.exe Set value (int) \REGISTRY\USER\S-1-5-21-131918955-2378418313-883382443-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Explorer\DOMStorage\bing.com\Total = "1075" SearchHost.exe Set value (data) \REGISTRY\USER\S-1-5-21-131918955-2378418313-883382443-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\TrayNotify\PastIconsStream = 1400000005000000010001000400000014000000494c2006040058002c0010001000ffffffff2110ffffffffffffffff424d36000000000000003600000028000000100000008005000001002000000000000060010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006de7e70073f4f40073f4f40073f4f40073f4f40073f4f4006ff1f40069f0f4006cf0f4006ff1f40070f2f40072f4f40073f4f40073f4f40073f4f4006de7e70073f4f40078ffff0078ffff0078ffff0078ffff0072fcff006bfaff006efbff0070fcff0072fcff0074fdff0075feff0077ffff0078ffff0078ffff0073f4f40073f4f40078ffff0078ffff0078ffff0070fcff0067f8ff006afaff0067faff006dfbff0070fcff0072fcff006ffdff0075feff0077ffff0078ffff0073f4f40073f4f40078ffff0077ffff006afbff0062f7ff0062f8ff0063f9ff7eb3fcff3585fbff006dfbff0063fcff96c6feff0067fdff0075feff0077ffff0073f4f40073f4f40078ffff0b79ffffb9d6fdff3678f8ffa7c8fcff0e62f8ffa9cbfdffb4d3fdff2174fbff8fbefdfff7fbffffb3d4feff006efdff0075feff0072f4f40073f4f40078ffff0077ffff2983ffffb5d2fdff1b64f7ff9dbcfcffbbd1fdff8caffbff4689fbff005ffaffa2cafdff0063fcff0072fcff0074fdff0070f2f40073f4f40078ffff0078ffff0075ffff065ff8ff93b6fbff5a94f9ff216ef9ff9dc2fcffadcbfcff146dfaff0065faff006dfbff0070fcff0072fcff006ff1f40073f4f40078ffff0076ffff7fb1fdffb7cffcffc3dafdff0055f5ff0063f7ff005ff7ff2772f9ffb8d4fdff327efaff006bfaff006efbff0070fcff006cf0f40073f4f40078ffff0074ffff98c4ffff6290f8ff8ab0faff568ef8ff0060f6ff226ff7ff84b6fbff3778f9ffb8d6fdff0566f9ff006cfaff006efbff006af0f40073f4f40078ffff0078ffff0072ffff68abffff7cb4ffffbcd9fdff004ef5ffb6d2fcff2261f6ffc6ddfdff5e8dfaff679efbff006af9ff006cfaff006af0f40073f4f40078ffff0078ffff0078ffff0077ffff0075ffff54a0ffff739df9ff85aafaff89b5fbffb0cefcff085ff7ff9bc4fcff0063f9ff006dfaff0073f2f40073f4f40078ffff0078ffff0078ffff0078ffff0078ffff0072ffff8cbeffff81a4faff1c6bf6ff0052f5ff0053f5ffbad6fdff0060f9ff0078ffff0073f4f40073f4f40078ffff0078ffff0078ffff0078ffff0078ffff0078ffff0073ffff4897ffffa6d0ffffc2dbfdffb5d0fcff9ac5fdff0072feff0078ffff0073f4f40073f4f40078ffff0078ffff0078ffff0078ffff0078ffff0078ffff0078ffff0078ffff0072ffff0071ffff0073ffff0073ffff0078ffff0078ffff0073f4f40073f4f40078ffff0078ffff0078ffff0078ffff0078ffff0078ffff0078ffff0078ffff0078ffff0078ffff0078ffff0078ffff0078ffff0078ffff0073f4f4006de7e70073f4f40073f4f40073f4f40073f4f40073f4f40073f4f40073f4f40073f4f40073f4f40073f4f40073f4f40073f4f40073f4f40073f4f4006de7e700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000808080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00000000000000000000000000000000808080ffffc057ffffc057ffffc057ffffc057ffffc057ffffc057ffffc057ffffc057ffffc057ffffc057ffffffffff00000000000000000000000000000000808080ffffc057ffffc057ffffc057ffffc057ffffc057ffffc057ffffc057ffffc057ffffc057ffffc057ffffffffff00000000000000000000000000000000808080ffffc057ffffc057ffffc057ffffc057ffffc057ffffc057ffffc057ffffc057ffffc057ffffc057ffffffffff00000000000000000000000000000000808080ffffc057ffffc057ffffc057ffffc057ffffc057ffffc057ffffc057ffffc057ffffc057ffffc057ffffffffff00000000000000000000000000000000808080ffffc057ffffc057ffffc057ffffc057ffffc057ffffc057ffffc057ffffc057ffffc057ffffc057ffffffffff00000000000000000000000000000000808080ffffc057ffffc057ffffc057ffffc057ffffc057ffffc057ffffc057ffffc057ffffc057ffffc057ffffffffff00000000000000000000000000000000808080ff00000054333333880000005433333388000000543333338800000054333333880000005433333388ffffffff00000000000000000000000000000000808080ff33333388333333883333338833333388333333883333338833333388333333883333338833333388ffffffff00000000000000000000000000000000808080ff00000054333333880000005433333388000000543333338800000054333333880000005433333388ffffffff00000000000000000000000000000000808080ff33333388333333883333338833333388333333883333338833333388333333883333338833333388ffffffff00000000000000000000000000000000808080ff00000054333333880000005433333388000000543333338800000054333333880000005433333388ffffffff00000000000000000000000000000000808080ff808080ff808080ff808080ff808080ff808080ff808080ff808080ff808080ff808080ff808080ffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000ff00000060000000000000000000000020000000b0000000ff000000ff000000ff000000ff000000ff000000ff000000ff000000ff000000ff000000ff00000060000000200000000000000020000000f00d0d0df09d9d9dffc8c8c8ffe5e5e5ffe5e5e5ffe5e5e5ffe5e5e5ffe5e5e5ff8f8f8fff000000ff000000603f3f3f66000000ff00000060000000900a0a0af0c0c0c0ffe5e5e5ffe5e5e5ffe5e5e5ffe5e5e5ffe5e5e5ffe5e5e5ff8f8f8fff000000ff0000006056565660e2e2e2ff474747eb000000d0000000e04c4c4cee999999ff939393eeb1b1b1f0e0e0e0ffe5e5e5ffe5e5e5ff8f8f8fff000000ff0000006056565660c8c8c8f7adadadf6858585ff000000ff000000ff737373ff999999ff999999ff999999ff999999ffa0a0a0e8868686ff000000ff000000606d6d6d88aaaaaaebb2b2b2ffb2b2b2ff7a7a7aff000000ff000000ff696969ff999999ff999999ff999999ff999999ff5f5f5fff000000ff0000006045454571b2b2b2ffb2b2b2ffb2b2b2ffa7a7a7ff1b1b1be8000000c0000000b0080808f08f8f8fff999999ff999999ff5f5f5fff000000ff00000060303030607f7f7fff7b7b7bf67e7e7ee2525252e20a0a0af0000000f00000003000000020000000f0101010eb5a5a5af6505050ff000000ff00000060303030607f7f7fff7f7f7fff7f7f7fff676767ff000000ff000000b000000020000000000000000000000020000000b0000000ff000000ff00000060303030607f7f7fff7f7f7fff7f7f7fff777777ff080808f0000000d0000000000000000000000000000000000000000000000060000000ff00000060000000602c2c2ceb5f5f5fff5f5f5fff3f3f3fee080808f0000000f0000000300000000000000000000000000000000000000000000000a0000000600000000000000050000000b0000000f0000000ff000000f0000000a000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000ff00000060000000000000000000000020000000b0000000ff000000ff000000ff000000ff000000ff000000ff000000ff000000ff000000ff000000ff00000060000000200000000000000020000000f00d0d0df09d9d9dffc8c8c8ffe5e5e5ffe5e5e5ffe5e5e5ffe5e5e5ffe5e5e5ff8f8f8fff000000ff000000603f3f3f66000000ff00000060000000900a0a0af0c0c0c0ffe5e5e5ffe5e5e5ffe5e5e5ffe5e5e5ffe5e5e5ffe5e5e5ff8f8f8fff000000ff0000006056565660e2e2e2ff474747eb000000d0000000e04c4c4cee999999ff939393eeb1b1b1f0e0e0e0ffe5e5e5ffe5e5e5ff8f8f8fff000000ff0000006056565660c8c8c8f7adadadf6858585ff000000ff000000ff737373ff999999ff999999ff999999ff999999ffa0a0a0e8868686ff000000ff000000606d6d6d88aaaaaaebb2b2b2ffb2b2b2ff7a7a7aff000000ff000000ff696969ff999999ff999999ff999999ff999999ff5f5f5fff000000ff0000006045454571b2b2b2ffb2b2b2ffb2b2b2ffa7a7a7ff1b1b1be8000000c0000000b0080808f08f8f8fff999999ff999999ff5f5f5fff000000ff00000060303030607f7f7fff7b7b7bf67e7e7ee2525252e20a0a0af0000000f00000003000000020000000f0101010eb5a5a5af6505050ff000000ff00000060303030607f7f7fff7f7f7fff7f7f7fff676767ff000000ff000000b000000020000000000000000000000020000000b0000000ff000000ff00000060303030607f7f7fff7f7f7fff7f7f7fff777777ff080808f0000000d0000000000000000000000000000000000000000000000060000000ff00000060000000602c2c2ceb5f5f5fff5f5f5fff3f3f3fee080808f0000000f0000000300000000000000000000000000000000000000000000000a0000000600000000000000050000000b0000000f0000000ff000000f0000000a000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000424d3e000000000000003e0000002800000010000000800500000100010000000000001600000000000000000000000000000000000000000000ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffff0000ffff0000c0030000c0030000c0030000c0030000c0030000c0030000c0030000c0030000c0030000c0030000c0030000c0030000c0030000ffff0000ffff0000fff90000fff10000800100000000000000000000000000000000000000000000000000000001000080070000c0070000c80f0000ffff0000ffff0000ffff0000fff90000fff10000800100000000000000000000000000000000000000000000000000000001000080070000c0070000c80f0000ffff0000ffff00000000000000000000000000000000000000000000000001000000080000000400000004000000340000000100000000000000010000000000000001000000000000000100000000000000 explorer.exe Set value (data) \REGISTRY\USER\S-1-5-21-131918955-2378418313-883382443-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\TrayNotify\IconStreams = 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 explorer.exe Key created \REGISTRY\USER\S-1-5-21-131918955-2378418313-883382443-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0 explorer.exe Set value (int) \REGISTRY\USER\S-1-5-21-131918955-2378418313-883382443-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\Shell\{24CCB8A6-C45A-477D-B940-3382B9225668}\FFlags = "1092616193" explorer.exe Set value (data) \REGISTRY\USER\S-1-5-21-131918955-2378418313-883382443-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\Shell\{24CCB8A6-C45A-477D-B940-3382B9225668}\ColInfo = 00000000000000000000000000000000fddfdffd100000000000000000000000040000001800000030f125b7ef471a10a5f102608c9eebac0a0000001001000030f125b7ef471a10a5f102608c9eebac0e0000009000000030f125b7ef471a10a5f102608c9eebac040000007800000030f125b7ef471a10a5f102608c9eebac0c00000050000000 explorer.exe Set value (int) \REGISTRY\USER\S-1-5-21-131918955-2378418313-883382443-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\Shell\{24CCB8A6-C45A-477D-B940-3382B9225668}\GroupByDirection = "1" explorer.exe Key created \REGISTRY\USER\S-1-5-21-131918955-2378418313-883382443-1000_Classes\roblox\shell\open\command Bloxstrap-v2.7.0.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\avasttu\shell\open\command icarus.exe -
description ioc Process Key created \REGISTRY\USER\S-1-5-21-131918955-2378418313-883382443-1000\Software\Microsoft\SystemCertificates\CA\Certificates\9E99A48A9960B14926BB7F3B02E22DA2B0AB7280 TuneupUI.exe Set value (data) \REGISTRY\USER\S-1-5-21-131918955-2378418313-883382443-1000\Software\Microsoft\SystemCertificates\CA\Certificates\9E99A48A9960B14926BB7F3B02E22DA2B0AB7280\Blob = 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 TuneupUI.exe -
NTFS ADS 5 IoCs
description ioc Process File created C:\Users\Admin\AppData\Local\Bloxstrap\Bloxstrap.exe\:SmartScreen:$DATA Bloxstrap-v2.7.0.exe File opened for modification C:\Users\Admin\Downloads\Unconfirmed 441666.crdownload:SmartScreen msedge.exe File opened for modification C:\Users\Admin\Downloads\avast_cleanup_online_setup.exe:Zone.Identifier msedge.exe File opened for modification C:\Users\Admin\Downloads\Unconfirmed 611244.crdownload:SmartScreen msedge.exe File opened for modification C:\Users\Admin\Downloads\Bloxstrap-v2.7.0.exe:Zone.Identifier msedge.exe -
Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 6264 explorer.exe -
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 364 msedge.exe 364 msedge.exe 1924 msedge.exe 1924 msedge.exe 480 msedge.exe 480 msedge.exe 2644 identity_helper.exe 2644 identity_helper.exe 1516 msedge.exe 1516 msedge.exe 4552 msedge.exe 4552 msedge.exe 4876 Bloxstrap-v2.7.0.exe 4876 Bloxstrap-v2.7.0.exe 4876 Bloxstrap-v2.7.0.exe 8076 RobloxPlayerBeta.exe 4876 Bloxstrap-v2.7.0.exe 4876 Bloxstrap-v2.7.0.exe 4876 Bloxstrap-v2.7.0.exe 4876 Bloxstrap-v2.7.0.exe 4876 Bloxstrap-v2.7.0.exe 4876 Bloxstrap-v2.7.0.exe 4876 Bloxstrap-v2.7.0.exe 4876 Bloxstrap-v2.7.0.exe 4876 Bloxstrap-v2.7.0.exe 4876 Bloxstrap-v2.7.0.exe 5692 msedge.exe 5692 msedge.exe 5692 msedge.exe 5692 msedge.exe 4876 Bloxstrap-v2.7.0.exe 4876 Bloxstrap-v2.7.0.exe 4876 Bloxstrap-v2.7.0.exe 4876 Bloxstrap-v2.7.0.exe 4876 Bloxstrap-v2.7.0.exe 6584 Bloxstrap-v2.7.0.exe 6584 Bloxstrap-v2.7.0.exe 6584 Bloxstrap-v2.7.0.exe 6244 RobloxPlayerBeta.exe 6584 Bloxstrap-v2.7.0.exe 6584 Bloxstrap-v2.7.0.exe 6584 Bloxstrap-v2.7.0.exe 6584 Bloxstrap-v2.7.0.exe 6584 Bloxstrap-v2.7.0.exe 6584 Bloxstrap-v2.7.0.exe 6584 Bloxstrap-v2.7.0.exe 6584 Bloxstrap-v2.7.0.exe 6584 Bloxstrap-v2.7.0.exe 6584 Bloxstrap-v2.7.0.exe 6584 Bloxstrap-v2.7.0.exe 6584 Bloxstrap-v2.7.0.exe 6584 Bloxstrap-v2.7.0.exe 6584 Bloxstrap-v2.7.0.exe 6584 Bloxstrap-v2.7.0.exe 6584 Bloxstrap-v2.7.0.exe 6584 Bloxstrap-v2.7.0.exe 6584 Bloxstrap-v2.7.0.exe 6584 Bloxstrap-v2.7.0.exe 6584 Bloxstrap-v2.7.0.exe 6584 Bloxstrap-v2.7.0.exe 6584 Bloxstrap-v2.7.0.exe 6584 Bloxstrap-v2.7.0.exe 6584 Bloxstrap-v2.7.0.exe 6584 Bloxstrap-v2.7.0.exe -
Suspicious behavior: GetForegroundWindowSpam 2 IoCs
pid Process 6264 explorer.exe 2236 taskmgr.exe -
Suspicious behavior: LoadsDriver 6 IoCs
pid Process 4 Process not Found 4 Process not Found 4 Process not Found 4 Process not Found 4 Process not Found 708 Process not Found -
Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 27 IoCs
pid Process 1924 msedge.exe 1924 msedge.exe 1924 msedge.exe 1924 msedge.exe 1924 msedge.exe 1924 msedge.exe 1924 msedge.exe 1924 msedge.exe 1924 msedge.exe 1924 msedge.exe 1924 msedge.exe 1924 msedge.exe 1924 msedge.exe 1924 msedge.exe 1924 msedge.exe 1924 msedge.exe 1924 msedge.exe 1924 msedge.exe 1924 msedge.exe 1924 msedge.exe 1924 msedge.exe 1924 msedge.exe 1924 msedge.exe 1924 msedge.exe 1924 msedge.exe 1924 msedge.exe 1924 msedge.exe -
Suspicious use of AdjustPrivilegeToken 64 IoCs
description pid Process Token: SeDebugPrivilege 4876 Bloxstrap-v2.7.0.exe Token: SeDebugPrivilege 6584 Bloxstrap-v2.7.0.exe Token: SeRestorePrivilege 5264 icarus.exe Token: SeTakeOwnershipPrivilege 5264 icarus.exe Token: SeRestorePrivilege 5264 icarus.exe Token: SeTakeOwnershipPrivilege 5264 icarus.exe Token: SeRestorePrivilege 5264 icarus.exe Token: SeTakeOwnershipPrivilege 5264 icarus.exe Token: SeRestorePrivilege 5264 icarus.exe Token: SeTakeOwnershipPrivilege 5264 icarus.exe Token: SeDebugPrivilege 5264 icarus.exe Token: SeDebugPrivilege 5940 icarus_ui.exe Token: SeRestorePrivilege 1900 icarus.exe Token: SeTakeOwnershipPrivilege 1900 icarus.exe Token: SeRestorePrivilege 1900 icarus.exe Token: SeTakeOwnershipPrivilege 1900 icarus.exe Token: SeRestorePrivilege 1900 icarus.exe Token: SeTakeOwnershipPrivilege 1900 icarus.exe Token: SeRestorePrivilege 1900 icarus.exe Token: SeTakeOwnershipPrivilege 1900 icarus.exe Token: SeDebugPrivilege 1900 icarus.exe Token: SeDebugPrivilege 8112 TuneupSvc.exe Token: SeDebugPrivilege 5668 TuneupUI.exe Token: SeDebugPrivilege 6808 TuneupUI.exe Token: SeShutdownPrivilege 8112 TuneupSvc.exe Token: SeCreatePagefilePrivilege 8112 TuneupSvc.exe Token: SeDebugPrivilege 5280 TuneupUI.exe Token: SeDebugPrivilege 6016 TuneupUI.exe Token: SeDebugPrivilege 5164 TuneupUI.exe Token: SeShutdownPrivilege 8112 TuneupSvc.exe Token: SeCreatePagefilePrivilege 8112 TuneupSvc.exe Token: SeDebugPrivilege 7316 TuneupUI.exe Token: SeDebugPrivilege 7776 TuneupUI.exe Token: SeShutdownPrivilege 8112 TuneupSvc.exe Token: SeCreatePagefilePrivilege 8112 TuneupSvc.exe Token: SeShutdownPrivilege 8112 TuneupSvc.exe Token: SeCreatePagefilePrivilege 8112 TuneupSvc.exe Token: SeShutdownPrivilege 8112 TuneupSvc.exe Token: SeCreatePagefilePrivilege 8112 TuneupSvc.exe Token: SeTcbPrivilege 8112 TuneupSvc.exe Token: SeDebugPrivilege 4464 gf2hlp.exe Token: SeDebugPrivilege 3584 gf2hlp.exe Token: SeDebugPrivilege 3944 gf2hlp.exe Token: SeBackupPrivilege 6084 vssvc.exe Token: SeRestorePrivilege 6084 vssvc.exe Token: SeAuditPrivilege 6084 vssvc.exe Token: SeDebugPrivilege 6188 gf2hlp.exe Token: SeDebugPrivilege 8112 TuneupSvc.exe Token: SeDebugPrivilege 8112 TuneupSvc.exe Token: SeDebugPrivilege 8112 TuneupSvc.exe Token: SeDebugPrivilege 8112 TuneupSvc.exe Token: SeDebugPrivilege 8112 TuneupSvc.exe Token: SeDebugPrivilege 8112 TuneupSvc.exe Token: SeDebugPrivilege 8112 TuneupSvc.exe Token: SeDebugPrivilege 8112 TuneupSvc.exe Token: SeDebugPrivilege 8112 TuneupSvc.exe Token: SeDebugPrivilege 8112 TuneupSvc.exe Token: SeDebugPrivilege 8112 TuneupSvc.exe Token: SeDebugPrivilege 8112 TuneupSvc.exe Token: SeDebugPrivilege 8112 TuneupSvc.exe Token: SeDebugPrivilege 8112 TuneupSvc.exe Token: SeDebugPrivilege 8112 TuneupSvc.exe Token: SeDebugPrivilege 8112 TuneupSvc.exe Token: SeDebugPrivilege 8112 TuneupSvc.exe -
Suspicious use of FindShellTrayWindow 64 IoCs
pid Process 1924 msedge.exe 1924 msedge.exe 1924 msedge.exe 1924 msedge.exe 1924 msedge.exe 1924 msedge.exe 1924 msedge.exe 1924 msedge.exe 1924 msedge.exe 1924 msedge.exe 1924 msedge.exe 1924 msedge.exe 1924 msedge.exe 1924 msedge.exe 1924 msedge.exe 1924 msedge.exe 1924 msedge.exe 1924 msedge.exe 1924 msedge.exe 1924 msedge.exe 1924 msedge.exe 1924 msedge.exe 1924 msedge.exe 1924 msedge.exe 1924 msedge.exe 1924 msedge.exe 1924 msedge.exe 1924 msedge.exe 1924 msedge.exe 1924 msedge.exe 1924 msedge.exe 1924 msedge.exe 1924 msedge.exe 1924 msedge.exe 1924 msedge.exe 1924 msedge.exe 1924 msedge.exe 1924 msedge.exe 1924 msedge.exe 4876 Bloxstrap-v2.7.0.exe 4876 Bloxstrap-v2.7.0.exe 1924 msedge.exe 1924 msedge.exe 1924 msedge.exe 1924 msedge.exe 1924 msedge.exe 1924 msedge.exe 1924 msedge.exe 1924 msedge.exe 6584 Bloxstrap-v2.7.0.exe 1924 msedge.exe 1924 msedge.exe 1924 msedge.exe 1924 msedge.exe 1924 msedge.exe 1924 msedge.exe 1924 msedge.exe 1924 msedge.exe 1924 msedge.exe 1924 msedge.exe 1924 msedge.exe 1924 msedge.exe 1924 msedge.exe 1924 msedge.exe -
Suspicious use of SendNotifyMessage 64 IoCs
pid Process 1924 msedge.exe 1924 msedge.exe 1924 msedge.exe 1924 msedge.exe 1924 msedge.exe 1924 msedge.exe 1924 msedge.exe 1924 msedge.exe 1924 msedge.exe 1924 msedge.exe 1924 msedge.exe 1924 msedge.exe 4876 Bloxstrap-v2.7.0.exe 4876 Bloxstrap-v2.7.0.exe 1924 msedge.exe 1924 msedge.exe 1924 msedge.exe 1924 msedge.exe 6584 Bloxstrap-v2.7.0.exe 1924 msedge.exe 1924 msedge.exe 1924 msedge.exe 1924 msedge.exe 5668 TuneupUI.exe 5668 TuneupUI.exe 5668 TuneupUI.exe 5668 TuneupUI.exe 5668 TuneupUI.exe 5668 TuneupUI.exe 5668 TuneupUI.exe 5668 TuneupUI.exe 5668 TuneupUI.exe 5668 TuneupUI.exe 5668 TuneupUI.exe 5668 TuneupUI.exe 5668 TuneupUI.exe 5668 TuneupUI.exe 5668 TuneupUI.exe 5668 TuneupUI.exe 5668 TuneupUI.exe 5668 TuneupUI.exe 5668 TuneupUI.exe 5668 TuneupUI.exe 5668 TuneupUI.exe 5668 TuneupUI.exe 5668 TuneupUI.exe 5668 TuneupUI.exe 5668 TuneupUI.exe 5668 TuneupUI.exe 2236 taskmgr.exe 2236 taskmgr.exe 2236 taskmgr.exe 2236 taskmgr.exe 2236 taskmgr.exe 2236 taskmgr.exe 2236 taskmgr.exe 2236 taskmgr.exe 2236 taskmgr.exe 2236 taskmgr.exe 2236 taskmgr.exe 2236 taskmgr.exe 2236 taskmgr.exe 2236 taskmgr.exe 2236 taskmgr.exe -
Suspicious use of SetWindowsHookEx 17 IoCs
pid Process 5880 avast_cleanup_online_setup.exe 5264 icarus.exe 5940 icarus_ui.exe 5940 icarus_ui.exe 1900 icarus.exe 5124 pdfix.exe 5124 pdfix.exe 3696 MiniSearchHost.exe 6264 explorer.exe 6724 SearchHost.exe 6048 StartMenuExperienceHost.exe 6264 explorer.exe 6264 explorer.exe 6264 explorer.exe 6264 explorer.exe 6264 explorer.exe 6264 explorer.exe -
Suspicious use of UnmapMainImage 3 IoCs
pid Process 8076 RobloxPlayerBeta.exe 6244 RobloxPlayerBeta.exe 8136 RobloxPlayerBeta.exe -
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 1924 wrote to memory of 2284 1924 msedge.exe 79 PID 1924 wrote to memory of 2284 1924 msedge.exe 79 PID 1924 wrote to memory of 3344 1924 msedge.exe 80 PID 1924 wrote to memory of 3344 1924 msedge.exe 80 PID 1924 wrote to memory of 3344 1924 msedge.exe 80 PID 1924 wrote to memory of 3344 1924 msedge.exe 80 PID 1924 wrote to memory of 3344 1924 msedge.exe 80 PID 1924 wrote to memory of 3344 1924 msedge.exe 80 PID 1924 wrote to memory of 3344 1924 msedge.exe 80 PID 1924 wrote to memory of 3344 1924 msedge.exe 80 PID 1924 wrote to memory of 3344 1924 msedge.exe 80 PID 1924 wrote to memory of 3344 1924 msedge.exe 80 PID 1924 wrote to memory of 3344 1924 msedge.exe 80 PID 1924 wrote to memory of 3344 1924 msedge.exe 80 PID 1924 wrote to memory of 3344 1924 msedge.exe 80 PID 1924 wrote to memory of 3344 1924 msedge.exe 80 PID 1924 wrote to memory of 3344 1924 msedge.exe 80 PID 1924 wrote to memory of 3344 1924 msedge.exe 80 PID 1924 wrote to memory of 3344 1924 msedge.exe 80 PID 1924 wrote to memory of 3344 1924 msedge.exe 80 PID 1924 wrote to memory of 3344 1924 msedge.exe 80 PID 1924 wrote to memory of 3344 1924 msedge.exe 80 PID 1924 wrote to memory of 3344 1924 msedge.exe 80 PID 1924 wrote to memory of 3344 1924 msedge.exe 80 PID 1924 wrote to memory of 3344 1924 msedge.exe 80 PID 1924 wrote to memory of 3344 1924 msedge.exe 80 PID 1924 wrote to memory of 3344 1924 msedge.exe 80 PID 1924 wrote to memory of 3344 1924 msedge.exe 80 PID 1924 wrote to memory of 3344 1924 msedge.exe 80 PID 1924 wrote to memory of 3344 1924 msedge.exe 80 PID 1924 wrote to memory of 3344 1924 msedge.exe 80 PID 1924 wrote to memory of 3344 1924 msedge.exe 80 PID 1924 wrote to memory of 3344 1924 msedge.exe 80 PID 1924 wrote to memory of 3344 1924 msedge.exe 80 PID 1924 wrote to memory of 3344 1924 msedge.exe 80 PID 1924 wrote to memory of 3344 1924 msedge.exe 80 PID 1924 wrote to memory of 3344 1924 msedge.exe 80 PID 1924 wrote to memory of 3344 1924 msedge.exe 80 PID 1924 wrote to memory of 3344 1924 msedge.exe 80 PID 1924 wrote to memory of 3344 1924 msedge.exe 80 PID 1924 wrote to memory of 3344 1924 msedge.exe 80 PID 1924 wrote to memory of 3344 1924 msedge.exe 80 PID 1924 wrote to memory of 364 1924 msedge.exe 81 PID 1924 wrote to memory of 364 1924 msedge.exe 81 PID 1924 wrote to memory of 2540 1924 msedge.exe 82 PID 1924 wrote to memory of 2540 1924 msedge.exe 82 PID 1924 wrote to memory of 2540 1924 msedge.exe 82 PID 1924 wrote to memory of 2540 1924 msedge.exe 82 PID 1924 wrote to memory of 2540 1924 msedge.exe 82 PID 1924 wrote to memory of 2540 1924 msedge.exe 82 PID 1924 wrote to memory of 2540 1924 msedge.exe 82 PID 1924 wrote to memory of 2540 1924 msedge.exe 82 PID 1924 wrote to memory of 2540 1924 msedge.exe 82 PID 1924 wrote to memory of 2540 1924 msedge.exe 82 PID 1924 wrote to memory of 2540 1924 msedge.exe 82 PID 1924 wrote to memory of 2540 1924 msedge.exe 82 PID 1924 wrote to memory of 2540 1924 msedge.exe 82 PID 1924 wrote to memory of 2540 1924 msedge.exe 82 PID 1924 wrote to memory of 2540 1924 msedge.exe 82 PID 1924 wrote to memory of 2540 1924 msedge.exe 82 PID 1924 wrote to memory of 2540 1924 msedge.exe 82 PID 1924 wrote to memory of 2540 1924 msedge.exe 82 PID 1924 wrote to memory of 2540 1924 msedge.exe 82 PID 1924 wrote to memory of 2540 1924 msedge.exe 82 -
Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
-
Uses Volume Shadow Copy WMI provider
The Volume Shadow Copy service is used to manage backups/snapshots.
-
Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
Processes
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.com1⤵
- Enumerates system info in registry
- Modifies registry class
- NTFS ADS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1924 -
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ff965c73cb8,0x7ff965c73cc8,0x7ff965c73cd82⤵PID:2284
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1900,1328634799722193213,17197663692298463082,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1852 /prefetch:22⤵PID:3344
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1900,1328634799722193213,17197663692298463082,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2380 /prefetch:32⤵
- Suspicious behavior: EnumeratesProcesses
PID:364
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1900,1328634799722193213,17197663692298463082,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2676 /prefetch:82⤵PID:2540
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1900,1328634799722193213,17197663692298463082,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3196 /prefetch:12⤵PID:3664
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1900,1328634799722193213,17197663692298463082,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3208 /prefetch:12⤵PID:1284
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1900,1328634799722193213,17197663692298463082,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4624 /prefetch:12⤵PID:2408
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1900,1328634799722193213,17197663692298463082,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3444 /prefetch:82⤵
- Suspicious behavior: EnumeratesProcesses
PID:480
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe"C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1900,1328634799722193213,17197663692298463082,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5260 /prefetch:82⤵
- Suspicious behavior: EnumeratesProcesses
PID:2644
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1900,1328634799722193213,17197663692298463082,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1996 /prefetch:12⤵PID:1160
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1900,1328634799722193213,17197663692298463082,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3436 /prefetch:12⤵PID:228
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1900,1328634799722193213,17197663692298463082,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4620 /prefetch:12⤵PID:4604
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1900,1328634799722193213,17197663692298463082,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5640 /prefetch:12⤵PID:1512
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1900,1328634799722193213,17197663692298463082,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5252 /prefetch:12⤵PID:3220
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1900,1328634799722193213,17197663692298463082,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3328 /prefetch:12⤵PID:3464
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1900,1328634799722193213,17197663692298463082,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4756 /prefetch:12⤵PID:1352
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1900,1328634799722193213,17197663692298463082,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5988 /prefetch:12⤵PID:3676
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=1900,1328634799722193213,17197663692298463082,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=3216 /prefetch:82⤵PID:2372
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --field-trial-handle=1900,1328634799722193213,17197663692298463082,131072 --lang=en-US --service-sandbox-type=video_capture --mojo-platform-channel-handle=5884 /prefetch:82⤵
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
PID:1516
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1900,1328634799722193213,17197663692298463082,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4820 /prefetch:12⤵PID:2100
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1900,1328634799722193213,17197663692298463082,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6104 /prefetch:12⤵PID:3792
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1900,1328634799722193213,17197663692298463082,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5420 /prefetch:12⤵PID:3100
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1900,1328634799722193213,17197663692298463082,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6024 /prefetch:12⤵PID:2576
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1900,1328634799722193213,17197663692298463082,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5352 /prefetch:12⤵PID:2408
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1900,1328634799722193213,17197663692298463082,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6104 /prefetch:12⤵PID:1136
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1900,1328634799722193213,17197663692298463082,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=6816 /prefetch:82⤵PID:1512
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1900,1328634799722193213,17197663692298463082,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5152 /prefetch:82⤵
- Subvert Trust Controls: Mark-of-the-Web Bypass
- NTFS ADS
- Suspicious behavior: EnumeratesProcesses
PID:4552
-
-
C:\Users\Admin\Downloads\Bloxstrap-v2.7.0.exe"C:\Users\Admin\Downloads\Bloxstrap-v2.7.0.exe"2⤵
- Executes dropped EXE
- Modifies registry class
- NTFS ADS
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:4876 -
C:\Users\Admin\AppData\Local\Bloxstrap\Versions\version-b591875ddfbc4294\RobloxPlayerBeta.exe"C:\Users\Admin\AppData\Local\Bloxstrap\Versions\version-b591875ddfbc4294\RobloxPlayerBeta.exe" --app -channel production3⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of NtCreateThreadExHideFromDebugger
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of UnmapMainImage
PID:8076
-
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1900,1328634799722193213,17197663692298463082,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --gpu-preferences=SAAAAAAAAADoAAAwAAAAAAAAAAAAAAAAAABgAAAQAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1316 /prefetch:22⤵
- Suspicious behavior: EnumeratesProcesses
PID:5692
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1900,1328634799722193213,17197663692298463082,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5172 /prefetch:12⤵PID:6880
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1900,1328634799722193213,17197663692298463082,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3456 /prefetch:12⤵PID:6940
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1900,1328634799722193213,17197663692298463082,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1812 /prefetch:12⤵PID:1868
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1900,1328634799722193213,17197663692298463082,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3012 /prefetch:12⤵PID:7120
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1900,1328634799722193213,17197663692298463082,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5952 /prefetch:12⤵PID:7116
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1900,1328634799722193213,17197663692298463082,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1020 /prefetch:12⤵PID:5468
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1900,1328634799722193213,17197663692298463082,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3240 /prefetch:12⤵PID:5464
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1900,1328634799722193213,17197663692298463082,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5336 /prefetch:12⤵PID:2676
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1900,1328634799722193213,17197663692298463082,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7156 /prefetch:12⤵PID:2960
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1900,1328634799722193213,17197663692298463082,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7088 /prefetch:12⤵PID:5228
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1900,1328634799722193213,17197663692298463082,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=7304 /prefetch:82⤵PID:3488
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1900,1328634799722193213,17197663692298463082,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6032 /prefetch:82⤵
- Subvert Trust Controls: Mark-of-the-Web Bypass
- NTFS ADS
PID:6192
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1900,1328634799722193213,17197663692298463082,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2800 /prefetch:82⤵PID:1868
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1900,1328634799722193213,17197663692298463082,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1020 /prefetch:32⤵PID:6628
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=1900,1328634799722193213,17197663692298463082,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4064 /prefetch:82⤵PID:6276
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1900,1328634799722193213,17197663692298463082,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=2392 /prefetch:22⤵PID:6816
-
-
C:\Windows\System32\CompPkgSrv.exeC:\Windows\System32\CompPkgSrv.exe -Embedding1⤵PID:1936
-
C:\Windows\System32\CompPkgSrv.exeC:\Windows\System32\CompPkgSrv.exe -Embedding1⤵PID:572
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalService -p -s NPSMSvc1⤵PID:5816
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:6544
-
C:\Users\Admin\Downloads\Bloxstrap-v2.7.0.exe"C:\Users\Admin\Downloads\Bloxstrap-v2.7.0.exe"1⤵
- Executes dropped EXE
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:6584 -
C:\Users\Admin\AppData\Local\Bloxstrap\Versions\version-b591875ddfbc4294\RobloxPlayerBeta.exe"C:\Users\Admin\AppData\Local\Bloxstrap\Versions\version-b591875ddfbc4294\RobloxPlayerBeta.exe" --app -channel production2⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of NtCreateThreadExHideFromDebugger
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of UnmapMainImage
PID:6244
-
-
C:\Users\Admin\Downloads\avast_cleanup_online_setup.exe"C:\Users\Admin\Downloads\avast_cleanup_online_setup.exe"1⤵
- Executes dropped EXE
- Writes to the Master Boot Record (MBR)
- System Location Discovery: System Language Discovery
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:5880 -
C:\Windows\Temp\asw-31a6b844-2b5a-4749-8c83-e7f5bd4c6dce\common\icarus.exeC:\Windows\Temp\asw-31a6b844-2b5a-4749-8c83-e7f5bd4c6dce\common\icarus.exe /icarus-info-path:C:\Windows\Temp\asw-31a6b844-2b5a-4749-8c83-e7f5bd4c6dce\icarus-info.xml /install /sssid:58802⤵
- Executes dropped EXE
- Writes to the Master Boot Record (MBR)
- Checks processor information in registry
- Modifies registry class
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
PID:5264 -
C:\Windows\Temp\asw-31a6b844-2b5a-4749-8c83-e7f5bd4c6dce\common\icarus_ui.exeC:\Windows\Temp\asw-31a6b844-2b5a-4749-8c83-e7f5bd4c6dce\common\icarus_ui.exe /sssid:5880 /er_master:master_ep_2adf8219-0d43-4f2c-87f2-bc2e571ba182 /er_ui:ui_ep_42f09daf-64b2-4e5c-b631-2fb77a0f6bbc3⤵
- Executes dropped EXE
- Checks processor information in registry
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
PID:5940
-
-
C:\Windows\Temp\asw-31a6b844-2b5a-4749-8c83-e7f5bd4c6dce\avast-tu\icarus.exeC:\Windows\Temp\asw-31a6b844-2b5a-4749-8c83-e7f5bd4c6dce\avast-tu\icarus.exe /sssid:5880 /er_master:master_ep_2adf8219-0d43-4f2c-87f2-bc2e571ba182 /er_ui:ui_ep_42f09daf-64b2-4e5c-b631-2fb77a0f6bbc /er_slave:avast-tu_slave_ep_a7b7c824-d745-4a0c-b4c6-fc90d1c8ed13 /slave:avast-tu3⤵
- Uses Session Manager for persistence
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
- Checks for any installed AV software in registry
- Writes to the Master Boot Record (MBR)
- Drops file in System32 directory
- Drops file in Program Files directory
- Checks processor information in registry
- Modifies registry class
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
PID:1900 -
C:\Program Files\Avast Software\Cleanup\pdfix.exe"C:\Program Files\Avast Software\Cleanup\pdfix.exe" /fixifeo4⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
PID:5124
-
-
-
-
C:\Program Files\Avast Software\Cleanup\TuneupSvc.exe"C:\Program Files\Avast Software\Cleanup\TuneupSvc.exe"1⤵
- Drops file in Drivers directory
- Executes dropped EXE
- Loads dropped DLL
- Checks for any installed AV software in registry
- Checks whether UAC is enabled
- Enumerates connected drives
- Writes to the Master Boot Record (MBR)
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- Checks processor information in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious use of AdjustPrivilegeToken
PID:8112 -
C:\Program Files\Avast Software\Cleanup\su_worker.exesu_worker.exe /SkipEndpointSignatureCheck /EnableDebugLogging=0 /CustomLogDirectory="C:\ProgramData\Avast Software\Cleanup\log"2⤵
- Executes dropped EXE
- Checks for any installed AV software in registry
- Checks processor information in registry
PID:6680
-
-
C:\Program Files\Avast Software\Cleanup\gf2hlp.exe"C:\Program Files\Avast Software\Cleanup\gf2hlp.exe" /analyze cleanupHandlers eyJhYm9ydCI6MjAxMiwiYnVmZmVyIjoyOTY0LCJoYW5kbGVyIjoiZXNkSW5zdGFsbGF0aW9uIiwicHJvZ3Jlc3MiOjI5Njh92⤵
- Executes dropped EXE
- Drops file in System32 directory
- Checks processor information in registry
- Suspicious use of AdjustPrivilegeToken
PID:3584
-
-
C:\Program Files\Avast Software\Cleanup\gf2hlp.exe"C:\Program Files\Avast Software\Cleanup\gf2hlp.exe" /analyze recycleBin2⤵
- Executes dropped EXE
- Enumerates connected drives
- Checks processor information in registry
- Suspicious use of AdjustPrivilegeToken
PID:4464
-
-
C:\Program Files\Avast Software\Cleanup\gf2hlp.exe"C:\Program Files\Avast Software\Cleanup\gf2hlp.exe" /analyze cleanupHandlers eyJhYm9ydCI6MjAxMiwiYnVmZmVyIjoyOTY0LCJoYW5kbGVyIjoidGh1bWJuYWlsQ2FjaGUiLCJwcm9ncmVzcyI6Mjk2OH0=2⤵
- Executes dropped EXE
- Checks processor information in registry
- Suspicious use of AdjustPrivilegeToken
PID:3944
-
-
C:\Program Files\Avast Software\Cleanup\gf2hlp.exe"C:\Program Files\Avast Software\Cleanup\gf2hlp.exe" /analyze cleanupHandlers eyJhYm9ydCI6MjAxMiwiYnVmZmVyIjoyOTY0LCJoYW5kbGVyIjoidXBncmFkZURpc2NhcmRlZCIsInByb2dyZXNzIjoyOTY4fQ==2⤵
- Executes dropped EXE
- Drops file in System32 directory
- Checks processor information in registry
- Suspicious use of AdjustPrivilegeToken
PID:6188
-
-
C:\Program Files\Avast Software\Cleanup\gf2hlp.exe"C:\Program Files\Avast Software\Cleanup\gf2hlp.exe" /analyze cleanupHandlers eyJhYm9ydCI6MjAxMiwiYnVmZmVyIjoyOTY0LCJoYW5kbGVyIjoiZDNkU2hhZGVyQ2FjaGUiLCJwcm9ncmVzcyI6Mjk2OH0=2⤵
- Executes dropped EXE
- Checks processor information in registry
PID:2056
-
-
C:\Program Files\Avast Software\Cleanup\gf2hlp.exe"C:\Program Files\Avast Software\Cleanup\gf2hlp.exe" /analyze cleanupHandlers eyJhYm9ydCI6MjAxMiwiYnVmZmVyIjoyOTY0LCJoYW5kbGVyIjoicHJldmlvdXNJbnN0YWxsYXRpb25zIiwicHJvZ3Jlc3MiOjI5Njh92⤵
- Executes dropped EXE
- Drops file in System32 directory
- Checks processor information in registry
PID:6952
-
-
C:\Program Files\Avast Software\Cleanup\gf2hlp.exe"C:\Program Files\Avast Software\Cleanup\gf2hlp.exe" /analyze cleanupHandlers eyJhYm9ydCI6MjAxMiwiYnVmZmVyIjoyOTY0LCJoYW5kbGVyIjoiZGVsT3B0RmlsZXMiLCJwcm9ncmVzcyI6Mjk2OH0=2⤵
- Executes dropped EXE
- Checks processor information in registry
PID:4748
-
-
C:\Program Files\Avast Software\Cleanup\gf2hlp.exe"C:\Program Files\Avast Software\Cleanup\gf2hlp.exe" /analyze cleanupHandlers eyJhYm9ydCI6MjAxMiwiYnVmZmVyIjoyOTY0LCJoYW5kbGVyIjoidXBncmFkZUxvZ3MiLCJwcm9ncmVzcyI6Mjk2OH0=2⤵
- Executes dropped EXE
- Drops file in System32 directory
- Checks processor information in registry
PID:2140
-
-
C:\Program Files\Avast Software\Cleanup\gf2hlp.exe"C:\Program Files\Avast Software\Cleanup\gf2hlp.exe" /analyze cleanupHandlers eyJhYm9ydCI6MjAxMiwiYnVmZmVyIjoyOTY0LCJoYW5kbGVyIjoic2VydmljZVBhY2tDbGVhbnVwIiwicHJvZ3Jlc3MiOjI5Njh92⤵
- Executes dropped EXE
- Checks processor information in registry
PID:7020
-
-
C:\Program Files\Avast Software\Cleanup\gf2hlp.exe"C:\Program Files\Avast Software\Cleanup\gf2hlp.exe" /analyze cleanupHandlers eyJhYm9ydCI6MjAxMiwiYnVmZmVyIjoyOTY0LCJoYW5kbGVyIjoidXBkYXRlQ2xlYW51cCIsInByb2dyZXNzIjoyOTY4fQ==2⤵
- Executes dropped EXE
- Drops file in Windows directory
- Checks processor information in registry
PID:1964 -
C:\Users\Admin\AppData\Local\Temp\8F1C2D71-F4D2-4BFC-82F6-78F2266D6BA5\dismhost.exeC:\Users\Admin\AppData\Local\Temp\8F1C2D71-F4D2-4BFC-82F6-78F2266D6BA5\dismhost.exe {598BF13B-AA75-41D1-9CCA-0C4849F67781}3⤵
- Executes dropped EXE
- Drops file in Windows directory
PID:5624
-
-
-
C:\Program Files\Avast Software\Cleanup\gf2hlp.exe"C:\Program Files\Avast Software\Cleanup\gf2hlp.exe" /analyze cleanupHandlers eyJhYm9ydCI6MjAxMiwiYnVmZmVyIjoyOTY0LCJoYW5kbGVyIjoiZGV2aWNlUGFja2FnZXMiLCJwcm9ncmVzcyI6Mjk2OH0=2⤵
- Executes dropped EXE
- Checks SCSI registry key(s)
- Checks processor information in registry
PID:5172
-
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k netprofm -p -s NlaSvc1⤵
- Modifies data under HKEY_USERS
PID:2116
-
C:\Program Files\Avast Software\Cleanup\TuneupUI.exe"C:\Program Files\Avast Software\Cleanup\TuneupUI.exe" /afterinstall1⤵
- Executes dropped EXE
- Loads dropped DLL
- Checks processor information in registry
- Modifies system certificate store
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SendNotifyMessage
PID:5668 -
C:\Program Files\Avast Software\Cleanup\TuneupUI.exe"C:\Program Files\Avast Software\Cleanup\TuneupUI.exe" --type=gpu-process --field-trial-handle=2544,15639296349470442746,4795643422462653214,131072 --disable-features=CookiesWithoutSameSiteMustBeSecure,ForcedColors,SameSiteByDefaultCookies,SameSiteDefaultChecksMethodRigorously --no-sandbox --disable-gpu-driver-bug-workarounds --log-file="C:\Users\Admin\AppData\Roaming\Avast Software\Cleanup\log\cef_log.txt" --log-severity=error --user-agent="Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.101 Safari/537.36 Avastium" --lang=en-US --disable-webaudio --force-wave-audio --disable-software-rasterizer --no-sandbox --blacklist-accelerated-compositing --disable-accelerated-2d-canvas --disable-accelerated-compositing --disable-accelerated-layers --disable-accelerated-video-decode --blacklist-webgl --disable-bundled-ppapi-flash --disable-flash-3d --enable-aggressive-domstorage-flushing --enable-media-stream --disable-gpu --disable-webgl --disable-gpu-compositing --allow-file-access-from-files=1 --pack_loading_disabled=1 --gpu-preferences=SAAAAAAAAADgAABwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --use-gl=swiftshader-webgl --log-file="C:\Users\Admin\AppData\Roaming\Avast Software\Cleanup\log\cef_log.txt" --mojo-platform-channel-handle=2708 /prefetch:22⤵
- Executes dropped EXE
- Loads dropped DLL
- Checks processor information in registry
- Suspicious use of AdjustPrivilegeToken
PID:6808
-
-
C:\Program Files\Avast Software\Cleanup\TuneupUI.exe"C:\Program Files\Avast Software\Cleanup\TuneupUI.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2544,15639296349470442746,4795643422462653214,131072 --disable-features=CookiesWithoutSameSiteMustBeSecure,ForcedColors,SameSiteByDefaultCookies,SameSiteDefaultChecksMethodRigorously --lang=en-US --service-sandbox-type=utility --no-sandbox --force-wave-audio --log-file="C:\Users\Admin\AppData\Roaming\Avast Software\Cleanup\log\cef_log.txt" --log-severity=error --user-agent="Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.101 Safari/537.36 Avastium" --lang=en-US --disable-webaudio --force-wave-audio --disable-software-rasterizer --no-sandbox --blacklist-accelerated-compositing --disable-accelerated-2d-canvas --disable-accelerated-compositing --disable-accelerated-layers --disable-accelerated-video-decode --blacklist-webgl --disable-bundled-ppapi-flash --disable-flash-3d --enable-aggressive-domstorage-flushing --enable-media-stream --disable-gpu --disable-webgl --disable-gpu-compositing --allow-file-access-from-files=1 --pack_loading_disabled=1 --log-file="C:\Users\Admin\AppData\Roaming\Avast Software\Cleanup\log\cef_log.txt" --mojo-platform-channel-handle=4116 /prefetch:82⤵
- Executes dropped EXE
- Checks processor information in registry
- Suspicious use of AdjustPrivilegeToken
PID:5164
-
-
C:\Program Files\Avast Software\Cleanup\TuneupUI.exe"C:\Program Files\Avast Software\Cleanup\TuneupUI.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2544,15639296349470442746,4795643422462653214,131072 --disable-features=CookiesWithoutSameSiteMustBeSecure,ForcedColors,SameSiteByDefaultCookies,SameSiteDefaultChecksMethodRigorously --lang=en-US --service-sandbox-type=none --no-sandbox --force-wave-audio --log-file="C:\Users\Admin\AppData\Roaming\Avast Software\Cleanup\log\cef_log.txt" --log-severity=error --user-agent="Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.101 Safari/537.36 Avastium" --lang=en-US --disable-webaudio --force-wave-audio --disable-software-rasterizer --no-sandbox --blacklist-accelerated-compositing --disable-accelerated-2d-canvas --disable-accelerated-compositing --disable-accelerated-layers --disable-accelerated-video-decode --blacklist-webgl --disable-bundled-ppapi-flash --disable-flash-3d --enable-aggressive-domstorage-flushing --enable-media-stream --disable-gpu --disable-webgl --disable-gpu-compositing --allow-file-access-from-files=1 --pack_loading_disabled=1 --log-file="C:\Users\Admin\AppData\Roaming\Avast Software\Cleanup\log\cef_log.txt" --mojo-platform-channel-handle=4132 /prefetch:82⤵
- Executes dropped EXE
- Checks processor information in registry
- Suspicious use of AdjustPrivilegeToken
PID:5280
-
-
C:\Program Files\Avast Software\Cleanup\TuneupUI.exe"C:\Program Files\Avast Software\Cleanup\TuneupUI.exe" --type=renderer --no-sandbox --autoplay-policy=no-user-gesture-required --log-file="C:\Users\Admin\AppData\Roaming\Avast Software\Cleanup\log\cef_log.txt" --field-trial-handle=2544,15639296349470442746,4795643422462653214,131072 --disable-features=CookiesWithoutSameSiteMustBeSecure,ForcedColors,SameSiteByDefaultCookies,SameSiteDefaultChecksMethodRigorously --disable-gpu-compositing --lang=en-US --log-file="C:\Users\Admin\AppData\Roaming\Avast Software\Cleanup\log\cef_log.txt" --log-severity=error --user-agent="Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.101 Safari/537.36 Avastium" --disable-webaudio --force-wave-audio --disable-software-rasterizer --no-sandbox --blacklist-accelerated-compositing --disable-accelerated-2d-canvas --disable-accelerated-compositing --disable-accelerated-layers --disable-accelerated-video-decode --blacklist-webgl --disable-bundled-ppapi-flash --disable-flash-3d --enable-aggressive-domstorage-flushing --enable-media-stream --disable-gpu --disable-webgl --disable-gpu-compositing --allow-file-access-from-files=1 --pack_loading_disabled=1 --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=3 --mojo-platform-channel-handle=4408 /prefetch:12⤵
- Executes dropped EXE
- Checks processor information in registry
- Suspicious use of AdjustPrivilegeToken
PID:6016
-
-
C:\Program Files\Avast Software\Cleanup\TuneupUI.exe"C:\Program Files\Avast Software\Cleanup\TuneupUI.exe" --type=renderer --no-sandbox --autoplay-policy=no-user-gesture-required --log-file="C:\Users\Admin\AppData\Roaming\Avast Software\Cleanup\log\cef_log.txt" --field-trial-handle=2544,15639296349470442746,4795643422462653214,131072 --disable-features=CookiesWithoutSameSiteMustBeSecure,ForcedColors,SameSiteByDefaultCookies,SameSiteDefaultChecksMethodRigorously --disable-gpu-compositing --lang=en-US --log-file="C:\Users\Admin\AppData\Roaming\Avast Software\Cleanup\log\cef_log.txt" --log-severity=error --user-agent="Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.101 Safari/537.36 Avastium" --disable-webaudio --force-wave-audio --disable-software-rasterizer --no-sandbox --blacklist-accelerated-compositing --disable-accelerated-2d-canvas --disable-accelerated-compositing --disable-accelerated-layers --disable-accelerated-video-decode --blacklist-webgl --disable-bundled-ppapi-flash --disable-flash-3d --enable-aggressive-domstorage-flushing --enable-media-stream --disable-gpu --disable-webgl --disable-gpu-compositing --allow-file-access-from-files=1 --pack_loading_disabled=1 --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=4620 /prefetch:12⤵
- Executes dropped EXE
- Checks processor information in registry
- Suspicious use of AdjustPrivilegeToken
PID:7316
-
-
C:\Program Files\Avast Software\Cleanup\TuneupUI.exe"C:\Program Files\Avast Software\Cleanup\TuneupUI.exe" --type=renderer --no-sandbox --autoplay-policy=no-user-gesture-required --log-file="C:\Users\Admin\AppData\Roaming\Avast Software\Cleanup\log\cef_log.txt" --field-trial-handle=2544,15639296349470442746,4795643422462653214,131072 --disable-features=CookiesWithoutSameSiteMustBeSecure,ForcedColors,SameSiteByDefaultCookies,SameSiteDefaultChecksMethodRigorously --disable-gpu-compositing --lang=en-US --log-file="C:\Users\Admin\AppData\Roaming\Avast Software\Cleanup\log\cef_log.txt" --log-severity=error --user-agent="Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.101 Safari/537.36 Avastium" --disable-webaudio --force-wave-audio --disable-software-rasterizer --no-sandbox --blacklist-accelerated-compositing --disable-accelerated-2d-canvas --disable-accelerated-compositing --disable-accelerated-layers --disable-accelerated-video-decode --blacklist-webgl --disable-bundled-ppapi-flash --disable-flash-3d --enable-aggressive-domstorage-flushing --enable-media-stream --disable-gpu --disable-webgl --disable-gpu-compositing --allow-file-access-from-files=1 --pack_loading_disabled=1 --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=4740 /prefetch:12⤵
- Executes dropped EXE
- Checks processor information in registry
- Suspicious use of AdjustPrivilegeToken
PID:7776
-
-
C:\Program Files\Avast Software\Cleanup\TuneupUI.exe"C:\Program Files\Avast Software\Cleanup\TuneupUI.exe" --type=renderer --no-sandbox --autoplay-policy=no-user-gesture-required --log-file="C:\Users\Admin\AppData\Roaming\Avast Software\Cleanup\log\cef_log.txt" --field-trial-handle=2544,15639296349470442746,4795643422462653214,131072 --disable-features=CookiesWithoutSameSiteMustBeSecure,ForcedColors,SameSiteByDefaultCookies,SameSiteDefaultChecksMethodRigorously --disable-gpu-compositing --lang=en-US --log-file="C:\Users\Admin\AppData\Roaming\Avast Software\Cleanup\log\cef_log.txt" --log-severity=error --user-agent="Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.101 Safari/537.36 Avastium" --disable-webaudio --force-wave-audio --disable-software-rasterizer --no-sandbox --blacklist-accelerated-compositing --disable-accelerated-2d-canvas --disable-accelerated-compositing --disable-accelerated-layers --disable-accelerated-video-decode --blacklist-webgl --disable-bundled-ppapi-flash --disable-flash-3d --enable-aggressive-domstorage-flushing --enable-media-stream --disable-gpu --disable-webgl --disable-gpu-compositing --allow-file-access-from-files=1 --pack_loading_disabled=1 --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --mojo-platform-channel-handle=4776 /prefetch:12⤵
- Executes dropped EXE
- Checks processor information in registry
PID:4468
-
-
C:\Program Files\Avast Software\Cleanup\TuneupUI.exe"C:\Program Files\Avast Software\Cleanup\TuneupUI.exe" --type=renderer --no-sandbox --autoplay-policy=no-user-gesture-required --log-file="C:\Users\Admin\AppData\Roaming\Avast Software\Cleanup\log\cef_log.txt" --field-trial-handle=2544,15639296349470442746,4795643422462653214,131072 --disable-features=CookiesWithoutSameSiteMustBeSecure,ForcedColors,SameSiteByDefaultCookies,SameSiteDefaultChecksMethodRigorously --disable-gpu-compositing --lang=en-US --log-file="C:\Users\Admin\AppData\Roaming\Avast Software\Cleanup\log\cef_log.txt" --log-severity=error --user-agent="Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.101 Safari/537.36 Avastium" --disable-webaudio --force-wave-audio --disable-software-rasterizer --no-sandbox --blacklist-accelerated-compositing --disable-accelerated-2d-canvas --disable-accelerated-compositing --disable-accelerated-layers --disable-accelerated-video-decode --blacklist-webgl --disable-bundled-ppapi-flash --disable-flash-3d --enable-aggressive-domstorage-flushing --enable-media-stream --disable-gpu --disable-webgl --disable-gpu-compositing --allow-file-access-from-files=1 --pack_loading_disabled=1 --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --mojo-platform-channel-handle=2552 /prefetch:12⤵
- Executes dropped EXE
- Checks processor information in registry
PID:3620
-
-
C:\Program Files\Avast Software\Cleanup\TuneupUI.exe"C:\Program Files\Avast Software\Cleanup\TuneupUI.exe" --type=renderer --no-sandbox --autoplay-policy=no-user-gesture-required --log-file="C:\Users\Admin\AppData\Roaming\Avast Software\Cleanup\log\cef_log.txt" --field-trial-handle=2544,15639296349470442746,4795643422462653214,131072 --disable-features=CookiesWithoutSameSiteMustBeSecure,ForcedColors,SameSiteByDefaultCookies,SameSiteDefaultChecksMethodRigorously --disable-gpu-compositing --lang=en-US --log-file="C:\Users\Admin\AppData\Roaming\Avast Software\Cleanup\log\cef_log.txt" --log-severity=error --user-agent="Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.101 Safari/537.36 Avastium" --disable-webaudio --force-wave-audio --disable-software-rasterizer --no-sandbox --blacklist-accelerated-compositing --disable-accelerated-2d-canvas --disable-accelerated-compositing --disable-accelerated-layers --disable-accelerated-video-decode --blacklist-webgl --disable-bundled-ppapi-flash --disable-flash-3d --enable-aggressive-domstorage-flushing --enable-media-stream --disable-gpu --disable-webgl --disable-gpu-compositing --allow-file-access-from-files=1 --pack_loading_disabled=1 --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --mojo-platform-channel-handle=3472 /prefetch:12⤵
- Executes dropped EXE
- Checks processor information in registry
PID:5448
-
-
C:\Program Files\Avast Software\Cleanup\TuneupUI.exe"C:\Program Files\Avast Software\Cleanup\TuneupUI.exe" --type=renderer --no-sandbox --autoplay-policy=no-user-gesture-required --log-file="C:\Users\Admin\AppData\Roaming\Avast Software\Cleanup\log\cef_log.txt" --field-trial-handle=2544,15639296349470442746,4795643422462653214,131072 --disable-features=CookiesWithoutSameSiteMustBeSecure,ForcedColors,SameSiteByDefaultCookies,SameSiteDefaultChecksMethodRigorously --disable-gpu-compositing --lang=en-US --log-file="C:\Users\Admin\AppData\Roaming\Avast Software\Cleanup\log\cef_log.txt" --log-severity=error --user-agent="Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.101 Safari/537.36 Avastium" --disable-webaudio --force-wave-audio --disable-software-rasterizer --no-sandbox --blacklist-accelerated-compositing --disable-accelerated-2d-canvas --disable-accelerated-compositing --disable-accelerated-layers --disable-accelerated-video-decode --blacklist-webgl --disable-bundled-ppapi-flash --disable-flash-3d --enable-aggressive-domstorage-flushing --enable-media-stream --disable-gpu --disable-webgl --disable-gpu-compositing --allow-file-access-from-files=1 --pack_loading_disabled=1 --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --mojo-platform-channel-handle=3312 /prefetch:12⤵
- Executes dropped EXE
- Checks processor information in registry
PID:2784
-
-
C:\Program Files\Avast Software\Cleanup\TuneupUI.exe"C:\Program Files\Avast Software\Cleanup\TuneupUI.exe" --type=renderer --no-sandbox --autoplay-policy=no-user-gesture-required --log-file="C:\Users\Admin\AppData\Roaming\Avast Software\Cleanup\log\cef_log.txt" --field-trial-handle=2544,15639296349470442746,4795643422462653214,131072 --disable-features=CookiesWithoutSameSiteMustBeSecure,ForcedColors,SameSiteByDefaultCookies,SameSiteDefaultChecksMethodRigorously --disable-gpu-compositing --lang=en-US --log-file="C:\Users\Admin\AppData\Roaming\Avast Software\Cleanup\log\cef_log.txt" --log-severity=error --user-agent="Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.101 Safari/537.36 Avastium" --disable-webaudio --force-wave-audio --disable-software-rasterizer --no-sandbox --blacklist-accelerated-compositing --disable-accelerated-2d-canvas --disable-accelerated-compositing --disable-accelerated-layers --disable-accelerated-video-decode --blacklist-webgl --disable-bundled-ppapi-flash --disable-flash-3d --enable-aggressive-domstorage-flushing --enable-media-stream --disable-gpu --disable-webgl --disable-gpu-compositing --allow-file-access-from-files=1 --pack_loading_disabled=1 --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --mojo-platform-channel-handle=3532 /prefetch:12⤵
- Executes dropped EXE
- Checks processor information in registry
PID:7576
-
-
C:\Program Files\Avast Software\Cleanup\TuneupUI.exe"C:\Program Files\Avast Software\Cleanup\TuneupUI.exe" --type=renderer --no-sandbox --autoplay-policy=no-user-gesture-required --log-file="C:\Users\Admin\AppData\Roaming\Avast Software\Cleanup\log\cef_log.txt" --field-trial-handle=2544,15639296349470442746,4795643422462653214,131072 --disable-features=CookiesWithoutSameSiteMustBeSecure,ForcedColors,SameSiteByDefaultCookies,SameSiteDefaultChecksMethodRigorously --disable-gpu-compositing --lang=en-US --log-file="C:\Users\Admin\AppData\Roaming\Avast Software\Cleanup\log\cef_log.txt" --log-severity=error --user-agent="Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.101 Safari/537.36 Avastium" --disable-webaudio --force-wave-audio --disable-software-rasterizer --no-sandbox --blacklist-accelerated-compositing --disable-accelerated-2d-canvas --disable-accelerated-compositing --disable-accelerated-layers --disable-accelerated-video-decode --blacklist-webgl --disable-bundled-ppapi-flash --disable-flash-3d --enable-aggressive-domstorage-flushing --enable-media-stream --disable-gpu --disable-webgl --disable-gpu-compositing --allow-file-access-from-files=1 --pack_loading_disabled=1 --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --mojo-platform-channel-handle=2732 /prefetch:12⤵
- Executes dropped EXE
- Checks processor information in registry
PID:4188
-
-
C:\Windows\system32\vssvc.exeC:\Windows\system32\vssvc.exe1⤵
- Suspicious use of AdjustPrivilegeToken
PID:6084
-
C:\Windows\system32\wbem\unsecapp.exeC:\Windows\system32\wbem\unsecapp.exe -Embedding1⤵PID:4552
-
C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe"C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe" -ServerName:MiniSearchUI.AppXj3y73at8fy1htwztzxs68sxx1v7cksp7.mca1⤵
- Suspicious use of SetWindowsHookEx
PID:3696
-
C:\Windows\system32\taskmgr.exe"C:\Windows\system32\taskmgr.exe" /01⤵
- Suspicious use of NtCreateProcessExOtherParentProcess
- Checks SCSI registry key(s)
- Checks processor information in registry
- Modifies Internet Explorer settings
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SendNotifyMessage
PID:2236 -
C:\Windows\explorer.exe"C:\Windows\explorer.exe"2⤵
- Boot or Logon Autostart Execution: Active Setup
- Enumerates connected drives
- Checks SCSI registry key(s)
- Modifies Internet Explorer settings
- Modifies registry class
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:6264 -
C:\Users\Admin\Downloads\Bloxstrap-v2.7.0.exe"C:\Users\Admin\Downloads\Bloxstrap-v2.7.0.exe"3⤵
- Executes dropped EXE
PID:2228 -
C:\Users\Admin\AppData\Local\Bloxstrap\Versions\version-b591875ddfbc4294\RobloxPlayerBeta.exe"C:\Users\Admin\AppData\Local\Bloxstrap\Versions\version-b591875ddfbc4294\RobloxPlayerBeta.exe" --app -channel production4⤵
- Executes dropped EXE
- Suspicious use of NtCreateThreadExHideFromDebugger
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious use of UnmapMainImage
PID:8136
-
-
-
-
C:\Windows\System32\CompPkgSrv.exeC:\Windows\System32\CompPkgSrv.exe -Embedding1⤵PID:1104
-
C:\Windows\System32\CompPkgSrv.exeC:\Windows\System32\CompPkgSrv.exe -Embedding1⤵PID:4748
-
C:\Windows\system32\werfault.exewerfault.exe /h /shared Global\10b66a11749d468cb83d7bec987b1f10 /t 4144 /p 19241⤵PID:8100
-
C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe"C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:6048
-
C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe"C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe" -ServerName:CortanaUI.AppXstmwaab17q5s3y22tp6apqz7a45vwv65.mca1⤵
- Enumerates system info in registry
- Modifies Internet Explorer settings
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:6724
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:4592
Network
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
3Active Setup
1Registry Run Keys / Startup Folder
2Pre-OS Boot
1Bootkit
1Privilege Escalation
Boot or Logon Autostart Execution
3Active Setup
1Registry Run Keys / Startup Folder
2Defense Evasion
Modify Registry
5Pre-OS Boot
1Bootkit
1Subvert Trust Controls
2Install Root Certificate
1SIP and Trust Provider Hijacking
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
2Credentials In Files
2Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
103KB
MD56a6dff1bc515009d8b2eebf1911d616b
SHA194329a3443ea95bac5153da84aea2c5ad33e2c01
SHA256ea51bf1b18be61059770f076f526635bb2d880e1a64c4dd85334abf17f25e426
SHA5120655cb6ad688703f43352846a380d58be4ba2ad91d76ae04463f8c40d8f7969716d8b01b1c56ea34f14592fc8f9f0180bdda5760b75b0c4916df4839cb5899a9
-
Filesize
130B
MD5ea5d490f91c4aafe91878fd57d511a70
SHA1a994b05062fe359970fafd4840529bc55aee95c1
SHA256564f66a078ff6e186c23983a233193e81e2c68df11933c1645464cb999d8d7cd
SHA5126f61f640877f491936d619f44dc983530cdb7e4713b7340413a18967fc69750e1b47ff859b9b802de733304ec0ce1e5216b7c7ab5bbcf5d062c6328280ad037a
-
Filesize
5.6MB
MD5a4777c374089982b9bb695e2a126936c
SHA1b637b0f0786663e7307e050a4524bb532a8240f4
SHA2560118e63a1dc68757351c904022bdd60f5003e8348d3c0f0fd7c6c4e9644b0535
SHA512ce7a9a0e2f72608d1987d3402337ef70cfe2cf0c66ee72822ed27a6add588260daaf33fa8da8248b5ec331633cf97dc294cad46154a77d1a77fd358da8ed6329
-
Filesize
103B
MD55ab76134c39794a57e91bf4e7a20603e
SHA168fcbd020aa4e19f72bc258001f190785b8e97f4
SHA256b61f48c235bfa90c7aa9d95320f72c7597948f3456e7620dd0b80f2d7fa3a6c6
SHA512bd834237deb8d16b20f6033b83bac92ee98da7d805192e414f63604cb8de3e7bbceefda56df871f6f788d8337728e662c26759d8b47e464a8398ce86df193cc1
-
Filesize
931KB
MD5204dc0f52e52763bd9979ff2a02d12a7
SHA1b03fa26717cbb5bb62344de03aa03a604a2c0627
SHA25620d7b576daa4bc3619df988004de4952315a1b855b0c51fc02273e3245af7032
SHA5126821ce923f79c50b0e568697ef319f15d57f3ab2d093d8b41814e2b11a6f29896ca13077fa763a5aac14083fb221ebad475ba44e6d6c3479cf9b20afda2d9356
-
Filesize
966KB
MD57cf17a9178e268308c3aa777e720dc5e
SHA109932d6b021e1cfa8bc793f43f078e7421cc2c17
SHA256883a8aaeadb8012a706bb5f9a36ba3053451b2757fcff90dbefc824f1abe03fe
SHA512674bfa1abf7f3f119d0c0c566053b37921d0cb35b906545ae07a695ec67b02401b84e9bb1b32124bea4fb52aef932d81b4caf47e6b0fc533928f5f8b50fdb3d5
-
Filesize
35B
MD50f2b0f6b35ea6bdfbe03181d8a8acd01
SHA1ce100801778cad5903862b2a38e4385dd7cd8a38
SHA256c418afdbd2677a8460ef2f0b1d2f83fb5737c7e8be77cfaa2f5a714e8db1ccae
SHA512726e320282e14b3c7980ef17cd8ae307b90709f10fe9de85be351f2d73c3dfba9a2c50a0b32ad372f77e5f36a6a679f565f563508845c742c58df96b9fd0ed16
-
Filesize
200KB
MD5c58a21018e1141b81aeeca7054c4a741
SHA18b8e05102fe0830661550336667f59ef3cf18507
SHA256e9dc04037f0e378dc9f61a4c49bc84179faea427167f4fefd04d9897ff802663
SHA5128cc68ffe4ec84817034fd545bf107f01b503f1573ef208292ea1ecd6e1d0747a7392e84e54fe67fecdd5d2737df2725591a0f723666fc894fdd16ba425a2c213
-
Filesize
181KB
MD50acac3d5dbd932cb537464552b3cadc5
SHA19c8cf94c6dbc90f2f7a7d4be60b982e807f41b6b
SHA256ec4affb795d408291cb813542c634ff63a6d820ee59e985a58093ddf7373e661
SHA51277790b7e383b1a5f7f8bc8e969fcc95cc4fdd21e40999b35d500a2bd6d16a13642e84827313307c85707746445dbbc2bc37437f0771d34f00fe8d8a7ba1a6988
-
Filesize
176KB
MD5e40016bb2194d1a24bf922c6461b3b00
SHA136d2cb479182116535f2502d200485f77be3cc87
SHA2569b84980c13cf974afa1ef0939318c5831d5003262a600bc55e93336cf7c40d4a
SHA51212ffec9ebc7a7d89ba57f2fe25f7c450eb69a5db22fa3596e1418f6eb962bd79eb34409dbba3a6b44e56c6d52f4dc0b2fd8a9f426ce4c2d1ab9845bfa568e00c
-
Filesize
214KB
MD5dcb59d305e631963432553f00ecbd0c8
SHA17cdabc4555cd970f23309b6e822a374e33fe3a59
SHA2565bd31195aa2d90887131d5cbbb99ad0d0465d1f2ea39592aa28382694fbcc680
SHA5127818edc0fdb2a4f494d7a53759c2cb1373e13acfbaac1934795b9866a7a095d6bc42d768778a6a819e197ab755dc1204a1c1e98e36b1bf5a95d4a0af1c43616c
-
Filesize
123KB
MD5ec302dafb23e086d35a4ca11b2b4172d
SHA174ee97273977a83cef7ac0cf2fb9685a5a27a5b2
SHA2563a59fe67bb39da242c1cefb9bfbe5c36207644b1fb19df64a4ce2355392092ec
SHA512cec914d143c8e505dfee54f4c8cdc95a7066ad3a197b6893c69412d6ef8a90b5c1753a17d6029ea78977e5e918b7796f020a7bbf27682d5e8e84079a4257a3fb
-
Filesize
131KB
MD57de016b8b9ff4c984483ec1531880467
SHA14062ed3de7b9d92b3e634e34aa622ec7b461f045
SHA25638a238fc6a268399c36452551693503f48fafad29ec519536adb2fa30d2f28c7
SHA512174fb43ae726cc8a285963c66cf4d09aee46cc2b69daa28525db2dc2de02cf259509c24b40c9c7e120e7fb0623abbddc1bdb2a019294baace86fcf965ef3fdb7
-
Filesize
116KB
MD55b71fd179e89d275dc00eb22027cf824
SHA17c1b07d42f519ca6c5e8c8811137d23785b242ac
SHA2562da6b64cd6fc728ee755bb5fb00a677802e2fa473864242893a1e7feb1d23849
SHA512799f31c03340a46ab6dcf677ff6fb6a36121c35b92f1da7eeb82522e998c177bd3983bd5176546db6fbc932c75d778bb07040f9ebffa3d29997dff6bfa826af8
-
Filesize
126KB
MD5c68afbaf58421bd8c36754c616a4748f
SHA1493ffd258a616d1ae3850f00421a4a436d592097
SHA256622860702ece78875273a3647e2c3508698f740778a4ee76ab5ba7a5d28c21e5
SHA5123637cb92106aa53fa304d1073ec1f4516eabbff7dc4abb33c29fdffb20408cedffb1498e2964b3424b649d1d1c036520c0b87898fd6287d0e7587e29e9238c46
-
Filesize
188KB
MD50896238e023d613fa3a31e23059c9a5c
SHA1918815772f2024bcb9f4249d1b30feddb24148e9
SHA25631de00684c98da84fd4d7ef999abe2e876f4b75cf1a1fb51de2aaa298a499e9a
SHA5122854897336c285e7c1e289f39dceb590e46403f6f4aa8a98e22d34c071b833e81f8b79dea95ecf86b3613fd010c1141ead2c98a4e40a44f44cb70a82ed30551f
-
Filesize
109KB
MD52abe4adce1805bcc9fc067db26752175
SHA13956865d8ae2df00d06b8529f65e44eb1e7be2c4
SHA25650657f15759f4e8a9e6f2cd28d4d9ab2b30d8ab728d7b3ca8e9582a17b9fd9d3
SHA51201bb90c0ec3f059ddd5e0f81acaf12121cd52fbbe8c64462c4730afcf9620cc8e1c4d34e087895295703eb37e013e9d9f9d5b0cf88e8e15f091f730e499bc6df
-
Filesize
123KB
MD5df7c559b81e5d31525ea4a3c01812c50
SHA1c353e5673542cd7d514cccc5f0982ce8af3c8c28
SHA256692563989659c485ed390aed27925b37619d66c5cb2a5b6059efacb33b48b3c9
SHA512e5cfdfd192a4a85940a2540a80ed9cf019adb81330b44ea6083ad012c577b3e22732c7987a9b92de036cc956072bfd6f9a5dc2f57c66e48c1551b3ccbc148efb
-
Filesize
2B
MD599914b932bd37a50b983c5e7c90ae93b
SHA1bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA25644136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
SHA51227c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
-
Filesize
115KB
MD503528a489429f1a0da5465093f4952b4
SHA162abd4756b0208a61452583530001e9d653a1273
SHA2566e4f391f6564de7ecba08069641f2782bef5ecfa80cd8facb7afdd671dfbd366
SHA5123b5fee132e32d6d8008569654c74dabcfd49709f0cf9dff25b5462df7314d193cee4ec53bdab943d13d7265694aecbb777937f5b19ddaad7f68265795938f2fb
-
Filesize
149KB
MD54caa862f355f693c40688b59f07e0595
SHA1025d8f243ce5627e6f08b67bf106cd4f103d4554
SHA2569b41487e88ec5a7fd7b149647359a17caeef8b65b28d4c20c0314678619fa02b
SHA512495220da5f25fc10bb2182eec7cfef059eb93462d78f25b826141cf425aae4dd701c4688d1ba53ce6ff6b59fdda51f35479104c8d37330c21afddb21e76ce0fd
-
Filesize
118KB
MD5734307fce4618dd9ed9478cb52390d51
SHA15dc94f24ef1d701056f8d4c80d33646703e3df41
SHA25651f268d2d90ce9722237d5c3632bbacba81a7fdda170e60523dc4922569d8e16
SHA512c17d953027fe7d1b1aa0060575a13c65c8c4b1c1e1fdb8974875a21712fa3f13aec6dd04f0bf5c13c2332669e862dedba53baf42f6d310de676af23af7c7c4e8
-
Filesize
129KB
MD5e0aa898c41f349ac1d457f2edd933909
SHA14dc41bd042e3856abc6c83add0069ba5e925c85b
SHA256ed28d09f562a379e253d0bb641f3c45b2df1d0c55804ed59db7878ba63b5edc4
SHA512f8e3d446ab760c87b03bc14f188c52986114ff2a97a7984445d467909de367f46de0b0051aed17500bac6f37c705f455229c310a86d0517062bb7f17794acf31
-
Filesize
136KB
MD519f3c27f199ef88d84cf51216bd97c6c
SHA13eef9e4355f9afe796176116e1d0a0d890b20a7d
SHA25629f8ccb61d52c319de66c7254fb148684996dc3966473d48ff11ad5fcc45c095
SHA512decff1fb20e507cb21ad9ec2bfb703b6b8e8516c06f36717be0da52c3e089b097441bc78206bb1b275363f5561d7b88da1873e97ed2121cccd2f340365575ab9
-
Filesize
211KB
MD55b191d80e2b6f76a23bc006462a2b486
SHA1aa565561b8a1be8d5f3fdb69e8d289d6af92e0e2
SHA256a03aaa9a4b1afdfe61dde00454fa9033137bcb307fe352d6968024e804eb6b2f
SHA5123891bc89993f414ad3b48aec7d1c5fb9fd7bbbd5d385cd054412a4d9995e7f3671ba6736c8fc963cccc4be510909b39c292a3079951d54efbbee5153f8a3aa8a
-
Filesize
131KB
MD5860661e1a64fbce06688504ea3a8ef16
SHA1a1a0de4cc357821477e58f71cb32e35cfad8e06a
SHA25650d80c879885e524dbd9d02ae1a5c469fc4ed4554ae0dd2a7ffc2de56690bc19
SHA5128f1d1fe7867ffd35af5c568204e6e60c85a9f9b2d0a0e93c72aea55ed89cbe92cb23d3a39449becd9ff253cb2d35af3331bc91c88af87b0ec5b2374c396d0272
-
Filesize
128KB
MD5a5913c69d3e9df725b68549247b484e8
SHA16d91991793b2bcecb62f29722fd7ae4e676a60ff
SHA256b8dd016d33ca4ac180babdcb304b5e0f9cd1642e40d616d89dc2a1e8f7d1968a
SHA5125b82f7b25ce9b828a576b6852b317a572fce4c7c12133e4c0a7d48efbfbf74ff14ec35a3e101083821377804f91587baccc86d68ec53ddcaa78a2329b9e922d5
-
Filesize
106KB
MD5995dec2bc163160171e25fa7b52e61e5
SHA10427287b2cf04bb2c841ebe56ab77fc618db1a69
SHA25690f327c6a35f2c3fd4d775875b05451f5eddddddfaee0ce2d050fb73647e5d7c
SHA512d9bbf248a510076363a7b59807f09638a2aad25040de33bb378833c65696934ca637552f3acce939372db940d6447ab10c5f78dc3410b173759bb47fc4a8a4e4
-
Filesize
122KB
MD597be73edc897101879bbbabecf729636
SHA1817f2dd9aa740c239e4943217b2b6379cc457344
SHA25665974383b4bbe5b67e32fac59af1ef125f2460a73db0f22788c5f8b2c645baec
SHA512056847677516cc08766da9b07ade0be1844d919f2e9f3d830afacd07c00cb4191d3153079f4e08686a5e9480fa3db307e2e5b1dc59d999ae3176b4c85dfd53c4
-
Filesize
130KB
MD52781b011d89ce016b404eb33dc3f8ea1
SHA14726a2d9cf6faef64207a3542b24aee0c234c04d
SHA256c2a533c1da7061b805a70e77299693b8e453a55002da66c271f53177e978bd26
SHA51256b337e812d11c7e78baf26de232f067c5d4671092b1036bf1a2b8f9861184b166eb456e356384c459d23ca7af5a458e5536e8a270c5a7ca1ee1af449f2dd3b5
-
Filesize
115KB
MD5633b2beb392b276aeea895570848bbba
SHA1eafe9d43c1700fb8a7cc6256354e60479cdcbbce
SHA2564e2590942dd76ff4d41a9c8f7537dba71bdec80641d543b401b67b0c3f1d2e28
SHA5126985a5c1619fc7a89adebf2511fd7010015f5fe2a20dc821d1a232bf5944cbc0e6108913dac2ba02d3cdf0244ae11073035f062984f2152ab03f9106988ee748
-
Filesize
130KB
MD5159504006becfd719e29a558dbd1ea96
SHA1a74afb6d30725d0742d8d5e004bb64cb71e4c400
SHA25681826e457e43601b5217abebb4bba2490d108622116be54ee26a8952f812b596
SHA5128532b100b5fc470a0ad431e0604371f77a247cfec1517236126dc4ff137dc636e1b4e895b3b976382503faae521de60657c3578cf31d3e99a703aac9fe1163af
-
Filesize
131KB
MD5db6385219911c4563ef5d1ff53a00295
SHA129fbc5d440957b24d2e01b87380ca60999068ce3
SHA256a67e8491c9d1d4f9c7c39db0d6b11c35137a4461c79cf02b304e3acf13acfdee
SHA5123f73f4d5abd833fc14193a1b0e279d246a8b731e5786a40785c18d98d908a69a1ced72d6540e90d8017dc3ba1ba945f1b198bc017f789a69a2d6c30619d14b08
-
Filesize
107KB
MD58e222b849ff692660cc6415791c579cf
SHA1e0c259f5683bbdc2233db56fff77af7e67bfdab9
SHA256f42da4f784a4270b07fc637be707e569f90563a53c711f6723eee240b471cfe4
SHA512a40e4a46af6c105be3a101db368ecab65095428516d97766a76d7fb205c89a319e2dfe90a27fb4e092a925d3913aabecf511ac5993299471976159efe9156b22
-
Filesize
114KB
MD55e2504b9bc1b135cb9936629e8521c56
SHA14f649805b77fc1726705ff08253ec3d0bc0df257
SHA25614d9fd15718e0bfee9bdbbcb085d05b2cbf95b147d81c5e009e8066948cce1cb
SHA51277886f806a000a0376225d44f78c1c802525fd2daca10359d5f3c8589c96f27a2d8f4a1c5a21388302045e114632cdecc483000a903018027e0ecc650d225192
-
Filesize
121KB
MD56b137bf1590f32534289807d4514e78f
SHA1a531bb0fe5b80c1eafec9bccba95727d5b7b079b
SHA25668888d7ff5cdbe186df69cbabe7f2dcd1dd60ba4408feadae7e55b2f2a816053
SHA512948b22ab0030b50ceebd0a38e3a89bfdee30fb0fbb4a8f84f1cefd90857520f8c417cc1db77b1ad6d72f4917cbdf14c7a126e9bde9844bd380230dc089644e4c
-
Filesize
134KB
MD5ee25753167dedda6c370c5bff7dd3d6e
SHA13461db6aff40e050ee67c0be0307558fab68cfac
SHA2569eec5598c5139376f9afe424af8999127746dcc085e5334fa494b868605a5e7e
SHA512046f90cc7e6ce30652f39ab15e84c0b6565b9c77b57799fe1fcffffdb99e74d46497e39bfe3a36e6be9567c9fc0e7c0141266912c4ae8d0b6e6a30dc121baf96
-
Filesize
120KB
MD5bd80bc3655030a3ee9461ce9d11b1701
SHA13306916d7b4e021e7d870ecb73cb6420e3470491
SHA256a167a3ab58b890e0a28b1c3df9fed99777d46d1db2ba6d50ff9f73b8e268c0fd
SHA5124ae109f4afd96d74edad0cd3551eb1a413b7d3c90f772ccc43ad7b47aa8b00245940e8dfa20ccf012f333032bc5dda135582ca014cfb9d9c327b4ac7c5296776
-
Filesize
121KB
MD5c665b8c6591d6eb23b9f4fcdc291fa5e
SHA1f3fb84c9677ebded2d85bbff781328fd4376ed20
SHA256baa4ff3d067ff4017816df56f3e37e40b87c23987b90c714b5b35b5042ba23f5
SHA512a315cdcffb1f31d4ec44b3a78dec3ef3d5f13480a6682d712a01873278308a6eabdac1ecc68cdd6855f945324dca57f8361db23a568064cb1a6038d677c386dd
-
Filesize
137KB
MD56d89c941fc239049cb8b501d4f6b6fd9
SHA146e07ada0e5b280a2f34fb3ed096baf8f7c5f331
SHA256c456fda9dcbfbbde09c680265c98293334cf8705c4f011ed35ad34765f909270
SHA5121542794610b3e22913439ae6adfce2f2884008bb42f940ccee519c04f9f0972603b8bb406144b7fcbac14e9573a22a603849b6c0b8bef214eb166eb7a7e3ed84
-
Filesize
181KB
MD5926d6130b7c4f439a28bc7f94551f71b
SHA15a23e2bf4a69a4049bf839c4adf56188c77feffc
SHA256516722122dc612e3722b6e2bf9afa7594c241c5d52489a363b572c365be81805
SHA51235598c825dc72eb689319ce52fb7d8e274e8a6e04a11a8fbb0c2c05407b4343f9cb3eefa55aa07026200e9551e549a64c45e7337cf4543395c6dcb2fcdb0995a
-
Filesize
136KB
MD5cad1093eb54f2ce1c7c12625b3943a9a
SHA11b2da41a876a31d1a5b7db07a49a550b7072ac8b
SHA256e1baf753df9355815d44045a6429669d9cd7e0c99b00648f5fd4c6e8822273a0
SHA51237f1a00ad51c4210926d4af6ec3578ed8fdf76cc68a1f8a83d4f79ee1e4735e7287a9c0eb5e56156ec6995fccaf674469f997cd2856907944954a24e26e4e37d
-
Filesize
140KB
MD561df6b627122afaf671b593f279e3e3d
SHA1d5c6b5652df4350aece683043cd827d2b481db5e
SHA2568f5f38311c8b57cc71215a58f596de4e88016e4cc76ddbdd629333fbd71cbdcc
SHA512c9eb8cb287769d743e4b4831b17044c0730a5081de127fd9373befcf9c11df20c4e5a2c7a5e6e0f6e144479ea0654b421fa781e5d7401e87840cb5b294805cd3
-
Filesize
131KB
MD5c11dadf35c0463e57e357338b48dedf5
SHA168440592633b9ff6196f73945a1dc3d71ea50950
SHA2569b6c56a1003a49a3b1cfe13a022b85e943a32f7a435221c161db50e67fc27a81
SHA51267c0f3cdc022b83629ab77316604d5b9e0e62b598f5b97bd1a85ca2be6fc2ae45cdde2550ec7c25df3fa083d75e8eda058284b7f01fe575949fa199942a48b40
-
Filesize
116KB
MD5d3bc7e46e20dd64514dc091c9d9e6f60
SHA1c6a0a133e1b181836de9871096464f126feae99f
SHA25685d3ed64fae74658d0954099e20676def89474b46ee224c1b1b78afc7375b0cc
SHA5125f43262b5583ec78c1f121735c1e1b59419c59a4bd08572abf67b2f83f47c1ff6e5a21bce7bd3c4e29eaeededad83bebe0fff103b8bfd142ec67d28f893346a4
-
Filesize
190KB
MD5c4c8d6830cd71d4a02b3e78ba73704b5
SHA144092456ffee41bf0b6e1e20bd978f853827aeb3
SHA256f118e4e31f6299e714ec723cf18625a07b02a97a634cfe634f12d6209a7f2490
SHA512ab3d85fde0b7e831f03ef0f18d97a45a4ce3ecdf844e2c8085e8f2cb0a1357f14838cad3074eb8e1209aa4512abb08dd6303e65984325597fca55ffefc538229
-
Filesize
124KB
MD521f4e23aaf65416eb4209979a2843251
SHA15cb472bf40235335fdb2f00e19150e02ffab885b
SHA25651c78c4723714f322adbf0ebffe141b8239f2ffad2a5c344e41946e35aeda061
SHA51292fc817a71d844750ce0de5b53426527dc086911f802e563adc5e89d97656ebeb8f891371e3078e96c8ccbd8fb2fc15c75693d0e85af74b022e1a8c00753a855
-
Filesize
179KB
MD54ec712107497357743dc1733d7b4c51c
SHA1b47af61dacb5cdefd11f5253961e0cf7194db175
SHA2560dc94a151423d23712254fd154dc6aa77300a0cb78ac0440d454b8679a40e327
SHA5126c44bb64d0de4b6de549063e0539dbc11de23ff6eec6b34483c3727e4ab557678d932f71d20d5c385ac27a2e683fc0a2415dcba289145e8fb31ba0c9a071f88a
-
Filesize
161KB
MD51cab6ecfb39dba81bcefd368242ecfd1
SHA190f3b7a29707a7a430696bf33b87f61c1c420662
SHA2566713651717f06e0359db92ed73a3451363db2ca6c075547f24cb2159b6cf62a9
SHA5121d95ac9818fa3f54f1fc78c6b796c6d85cb8a1f893142f914b5d0fe088ec4614285960dcbd935c95301865c923db308a4abd59b16601663441cf1b51d1c52962
-
Filesize
127KB
MD53cfdb90416f47f6700300e3a71c5507c
SHA13c33c83cf910222fc7ea7b9ba7f3b1f412498d42
SHA256fccabe376939d610f1fbb40b293c5c83a18e8f9537ac37c26b1a952bcbe2411e
SHA51267e5f4b716906c7048c4597b1b350356df5b6ab3a28e8cf013098e97788322a9539e15fe6e2b7ff08f9593b69bff81b83391c4176f0d58bb32b9df0e817ddc2f
-
Filesize
97KB
MD512899406aac9655bd485f4f6a4d5d6dd
SHA1055d06c1512c073a1a9a9c8aefabc528eb47c7c8
SHA256733f153f5591152cd1e159c74428707de52355f546891a7b84ad158f9d3b6b93
SHA512c5a3d92ed5e48edfed526bff2d462d0c7a175ff0db30fa11591273c6a02121cf37659ae603e319b98f765662cc5c282f95dea65897e0fad32e91b542a46ce3da
-
Filesize
98KB
MD54a7578360d96cda4b9bd7511980ad48e
SHA1d73aa66d7f4c89eecce83d6d0aa6fa0a77416b72
SHA256505a531c568a768fc50e72f04d308d7f2b621fbd769942b0097c63051e365e5f
SHA5120903ec7ea5843de8a6fa523f7b28be52082008604e7650dc362bb8a37ced3c6f37f8b893f7c5ba301dee838409a2c2569c231a1cc9baab806edc593e3d5d5132
-
Filesize
823KB
MD59075993bd06948d1746d34b8896018b3
SHA1e492a2c617adc0845711317015e07a09a7cb20c6
SHA2569a528b722db2e56f04c5cbbb28ea94d411a81ae8375f10f71955ff6587f56fec
SHA51223399bd96679861f91e814f4fe97ffbc14524b0834fb2acf79af355795a3122d06bde1d47bd1cdb62ca1f6e5302685dc2fb20577973079e8abed19a50f59da56
-
Filesize
912KB
MD5856c7fc70242f3cb3679e7611aaacde3
SHA19f8772a0927f7d4c06512349c5fc05552b20e973
SHA256458a8a40cd994078dc9702e49e715da37227d47b36d627ac9af2f199c767c588
SHA51260e07679199b830d78dfde94d448715b6b1fc6f851759b2821bd7b1cf5642b0674f7108333d8ff47d3ab0abb3588416f191bd6ae7e80d503171b260d7d62fb3f
-
Filesize
251KB
MD5a315a44489619a1eedb37818507d70ea
SHA1bebc31ea22407cb1efbabc13db72505267691db8
SHA25653ea070af084fe7967d52f51ec412972c0bb732686816c4552697cc3eb7d341d
SHA512872fb4711c3ca69a67c7cc4e380ce90d401c1be987604c6bd9c10877335babdd64be43bf99f9db88db4fe281c624e00cfbbb9db23089f7a33580e42e9f60374c
-
Filesize
382KB
MD5231d43fa3864a8726f8cbf457a666700
SHA15260a5ddaee5e9f3cf7d7a2e9c6970649c9f6fc0
SHA2562a1dbb211b19bad193f05168a92279c78d7a35d054136debae552629d1f57ed1
SHA512fb1fad1f4543c54285d674ad4def7e36b4b972184c58207d2254acd1d93dc1ae9d61a40ad3567e100dcf31e6af4e3ce32861f62e444752b6e3514e4397507275
-
Filesize
280KB
MD53cb58f48abdd011ce7a917a792854250
SHA142d857dc55f0812f368b6776a5c14a7edb785b40
SHA2563c29339bc247023d8bbe702780df818e728c8372a3417bb3a9fae8f9b59b4d25
SHA512427a838f9f78c32569e19c913ddeae5f3362ce1cc1d607e9abaf07dec4c68b4c7da12517de36cb0a4fda642a3356abc0f41f67d96e8e561fa4e200c886ca79c5
-
Filesize
2.5MB
MD5c1e6ae5229ae125bed534af2a830663b
SHA11aba497adcc1f6fb06c04bbb5960421d7f33f586
SHA2565b8f06830a229865590f1cd767fb4eee53fc432652710e678d73265147a0d779
SHA5128439f41f4cc120b448c783ff3791e821fb1142df4902c863192353787f55ebb7f190090f6304810e85301c6796d91ccdfe1f19c668153b4110a0ab62fef2bd1c
-
Filesize
1.0MB
MD52b27cbd963263aea783c65eafbed4670
SHA12f9500a0c15ddb62b3cb04c3f8a03175f0d24fdf
SHA256f98254e399a058df8be19d7536ab6e1cd89568a870ed8c0a408a5ae89fe8f435
SHA512718086eac83f543c19a60459faee1f6061bdf1902e63e0d4bf705093f88a1a1acdfdbf382ff92bda385511792a7aba12556e97b3edb163cb3a724acf1b0ffbb2
-
Filesize
102KB
MD545b9836beb16da615f0a74ead7c4b40c
SHA1fb7a461636866804fc4e0f55642384a9b522b917
SHA25659173f786dd1f3802f7ab26fd339aac4099dc10c6cb54a6a92213e6af277592a
SHA512bc34cbca27e304176619e26b24c3bbc3ea9b6e4fbbbb2a0ab14c64860c4fb67dd84a1495b297b35341177fbf34b71060357cdf2a412dedadd184bb3b36622725
-
Filesize
358KB
MD58b4066f266320fe38bfa7147df2b7589
SHA1bb1b18a287fe6f9a1b13d4cc9a78fb3c9e420668
SHA256167763cbfa301f2ab7fada0d0a5b30f6571fb2b81a24d97b0c1bebddf99df72a
SHA512ac6610c411e879d04546927cf6cef94a9ffbe909edb89d1997d01d347a67e8c5d15b128b0c998ee3365c1efbc9fde21d26d6865d8be408560347561eb08f732e
-
Filesize
448KB
MD5cfc24bb39b2af4060deee4503e356aba
SHA1a568ffd8a8ecbfbe2bf106a9e3b37ec786e92bd7
SHA2561380162e4e38bb4d25be467e8a02420988036f7fc84d27f89686c262748e7d96
SHA512fb25676fe6877a96a3da745a2270c785e9d50f54375e5ee12a5fa2ae0ff54d520fa9256ec64817fd61c6acbd6021e0975e6eb7431608a1a63f9ce44a9ac9ba22
-
Filesize
1.1MB
MD5a38111677ca9d75c88e21cabbefd4527
SHA11c515c8d716bfc87573f6b25bde4f65b3c6d3d6d
SHA2560be9d91a9dcc5f3291697173f4ddf238ccb757c636bae1be16e4a8d046d82739
SHA512a790898964d51a1e3d28f9e5f40c81c2ec0074897df748173df49487dd69dd4a1beda4b29bc8a339e07bff836e70ddf4cf07b5c949e93fa44aa9763efe6737ab
-
Filesize
165KB
MD5975110efbc2bac20980b4d2038a67a94
SHA1debcc613f03f10fd50eabd1081342f2caf775f1d
SHA2566eac1b865eab76398b25e532065cd1adbfb6933f88b90aff6994b704bb333688
SHA5126f3d809470b5a7c4ac82e4a3cc2dee119616f32bbe0ce5d91ab4769b543de1d103ff56e1ebd213f0d32c5e69931145ad297b7c047c9b6adbde723a048170e3d8
-
Filesize
111KB
MD5e4b2259df67453f50381c99b62a611a5
SHA13e90e5ccec746aec540b22d458cbdf940483783d
SHA256cc89c31c6bb236467369dee2feaa6be10b2824fc31bdcfbbbf16b5ef124d7d8d
SHA512f85bdaba92ad8100e5762c20ec514f28afae22458f9035ba0838003270956ebc82b5587214376273d09572c725f3adf5c76e67db5b9d8f26f6b86d4550a5e939
-
Filesize
128KB
MD57c7154bc10fd50a18b84233861290445
SHA130fd0e0e797663b44619282b1c41dead1f465731
SHA25637dee8b7f9251258d2be3aa006fcb5473d4adff044d087b6f1422e8c17c6ac0f
SHA512257dd6b2f0bee60732c366d820e1c855e756000eccdf6a24b5607bb976aee4cca458f8460fcf175b7ebd140dc4673b92f1bf6620c180b9f2900e1f2ddc507b7b
-
Filesize
24KB
MD582bb7532ef68f604ddcf58a4a44d26ae
SHA15a6b3e22784493f3cd86335533828affa763676f
SHA2567b5556c06bc747b81202b271b527a7d777c1ad76cc53a3fe3d0f70e55d507b1c
SHA51252e8fe198f7dac6cebba23d54f722ec71ee75dcf53306e66310b011eb5277e0f53775b0c01098492f6effb9443d1ef2486011f84b4aad82e0414cced7b8c15e4
-
Filesize
38KB
MD50fe5533d6671ad93c2769a2d02c90939
SHA1c500ebe60c0d3605fe4b01a1d2e57ea880008c3e
SHA2566ba0a830266e0ceb14ac21b69091829f3799615969702124fb78f1aa292edc77
SHA512a7772750655fe1bf941c125f0982a7507d88106dfa9e780d47381314dc47fb894ec49af1eed3eb9947aaa0e77630f77a4f71c2564adae69e8dc5d4b3f23286b7
-
Filesize
46KB
MD5ef5a2a2e61b6bf62236689aed1ea0f44
SHA1375fddd1557c67f926e7224d2a701a810ef1220c
SHA256be1ddcea515691d8a64442eb42b837b4d5b12e726ddb6251565eb65d00fd79dd
SHA5124c8bb20f546d5281f52a6c8678f0978e6e1ebfef2d9a59cb04617841b3e09aa18bf6ba7e020bc348ff175753c4c87fbe2714157b19b57f3d5f06f793cf76e41a
-
Filesize
32KB
MD54f5a680cf78f5ed0c46a0473499bf5b2
SHA1823a248b5dd46e326fb340ecdff9257cbeea2d8e
SHA256459a55f06d23b6f913e3992e635847e6fb87175dbe48a0c5a025e298958f8a68
SHA512085aa7ae6fcbaf91159a7fb5c977acd789d536da322875a0c2137d127804a61dbb9a00160eed0b23169d2722bf6f544c01eff140d4350c41f34dd8c4a2d753ef
-
Filesize
448KB
MD58ba384f1f40acb63ef99a6528b8a8dab
SHA1fde53302f66c6d100330d8524b2c62f8e35d8a13
SHA2564314b0374ed6018ce9bed89112801a9bdf9d9f9c1b55bffa15ccf9bc05842e6c
SHA512aa89769171ed55c4d1d406ed4cedc60a47f39b39e52876906eb42d04f719d6594fe9e89e5783800117f75d6acc22b8f8fee27fa4578abf52c154b6f566abf4da
-
Filesize
439KB
MD587d6020552f4b07c6d3d0e2f1788326a
SHA174923b26aa3017d8776263b0ce73ec0dccf98e52
SHA256a79631a7edb6e5b700a7459d273f5261eb14177900423a8d3ba36e5c2b729b54
SHA512a4aec9f715e560f7b8415d16b805b0842490555ca9f1600cbae7e77b5f308fbaadf064614013eecb48484d3665eb1bd42f389960d1a813331c82e7c6811e1c3e
-
Filesize
218KB
MD512fc9ab7458f6a062e604759a45c0672
SHA15341cdeeb93214411d662bf54136645bfdcd0782
SHA256e72082928402426a47d26d7f30dbd6b6e4442073d5e89b8b0d33c4179ad5e0d0
SHA51288b5313c137c5a5b29fdc92296ecb773eedff7a506b5cda670820bc88255db68f31876dcbac0428d84fe88fd19f9abc72d6ce72ee8da21bab7eb40a5066e9156
-
Filesize
918KB
MD5bac208ce77a54ae9851042351d219561
SHA1771b9d46fc8bd98addc0b471e8f3c4fa0536b0c3
SHA256171c006e970eb027d9f389c34fd5a508b7b10e756ee41b0cb66caec49a91209f
SHA5120a73a30da6e161db587eb5d2801b0f9647c66828ba74c9efdd9d3934780c3f2b84900e94a172fe1bd8b8104b0a4dbae03517f89f73d5d2930e7ed88745a291b6
-
Filesize
1.2MB
MD578fde989750fbe9bca801c1aa5dc234b
SHA1091e0b9393c65df998de39db04219e1e5ef534b6
SHA256a2d3c326b616f0a7abdd5b67499e21a2fb6f319921121754a8e627a8c9da591b
SHA512dcbf0cb1c332f75c203c5574ab51e6f32ce0725d969da059ef224e904651e6f71a39a6f7e451f4695cdd9783c20af1ccf4bfefdcaa8beaabfbdf3ba5efe7a0ff
-
Filesize
432KB
MD5a0e640d04a2fd73b269249e70fce9e89
SHA10df79d5083259f5a9007be155e4d6d1eac340daa
SHA256f3bc064a760af5a862cc57c1734b2a5fa78a259b634061ae8de2c52b75e6c1b4
SHA5125646a77cab19374432dbdeeed0d296d350a7e49b4440483a6518a3030d5aaf67006e8ab4517f0d54181e3937a3173d1c3b0d5e64fea82c03947a830abbd571e7
-
Filesize
2.4MB
MD52a0c1677de6a3a19915339bdf99a2dbe
SHA1f92f57876425428d6da6c21b7fee204f74f73313
SHA2566b2a09e0e504397129e99fe4c66e8ab6dc4d4e99f35cea7907d8f39baa14ea15
SHA5125276146842e52e1ef88c2995cfebded3aacdf989d05b17f638a16c0728794a6a94fa30a6732409e67e57ecd116d09618f658d96fd02b14f944704ed121b7072b
-
Filesize
2KB
MD507eca9f2f763fcd71bb7a8fc738c095f
SHA12714c3e0212505e407e310a32f935226ae0c5362
SHA256d920c2d30a8b49c106459fb1aed4068e0ee6f2253fa031ed1d2c133156f306ee
SHA51203bd69d5e1380454099cf938f4176187e851c2bc76546fa8906630229b4c7dcc04077be94bbe08f7c800e77bb443e8d7e64290afa9939e0ba22ba1b2595bf9ea
-
Filesize
99B
MD54c1e93ea46f7ffc090a5d0ef5e9f3e51
SHA1fdffe18fd031bb1661e3557c0994400343c29e18
SHA256f872fa9138af2b4632d1c48cafbbbd2cfac6eb80a04047bb402b393fb0d0f051
SHA512e995ecfa8936281cea32fb482323667e5b2fa1f0958846fbe9b6ff58888a0b7f0a7ada8194d1dbe2bf170b1a42aed5c56cfee40758c04535dec4f447514908b0
-
Filesize
5KB
MD5cb820169736a6ac946c31760c153090c
SHA1c77f9f4c0352c0ae06fdf24c457ff2b70ec189a8
SHA25649d8c891208721e90033878933141c0106712f82d4b52497886d9803ec777db7
SHA5125253e353495bd569454e437eab6763de3c4f428f3839541fc93afa08aa08bf613277d8c79357d6e3a13ab3ecc3ec5cdf753e009a64470f7e7cb6768330302728
-
Filesize
15KB
MD596824dda099b9eaa9042ca5d00fba32e
SHA19e70ca0cb90ebdedc85be43db385f1544bbb42ca
SHA2564abb0e5af79adf7adce791b65307ea6d4062b4e614dd2c0c87b31b8fe9ab1e93
SHA512c3cc11510cb2ed28c5963943120d087d50f00f95b4923e67ee54cd99cca1964eb4b80d048097a65b5c06a5b82698946cbb4b6c3441e4d2826992b527e9c383aa
-
Filesize
416B
MD59c8956d856e5d3002a1ac1fdeae6194c
SHA1ef6a80bfc28f1921703d97c33d540e635d906fb2
SHA256ea0e1e49b758aa2b3179e8bb643b25f0ff2ac220dcff7dcc47f1a8cfbf42dd8f
SHA512333d78fc1a4943cdfb4f5de113a9ac87f9b4460250b3122d7ba8210ff7094b4b8f509b02221d3b791f7b4f83414847d4301965201bd79b22b738c21fe6df8fe9
-
Filesize
42B
MD5a2d21fd7e238eb53f1afb52aeda4214d
SHA10523387a1110b3fda6b5ecbbd099b1a3f72c5fb1
SHA256d28867006eceed94995b6db166ada3cc80a7045bb640b3d6e23954bb417665eb
SHA512d1df99ca4e0c63d3ea38678e79b54a854ebcb8934b8d8d38e708237d3be50edb77bb53910b52eb3b9a90ce8607630962aa12d6c985baea0d4cd40e3aebfa6317
-
Filesize
176B
MD54f0b326aee8a362642d3f80166c8a0f5
SHA1014be0cf2833e795413975e7f1402d430f8afc47
SHA256e85f7df0be2eae78de4cae78f96c38e2545c72260d4392a337e50418342bc543
SHA5129a7cf95c34bb947bd2ca9f72aea8690643d7a6e156bc5d1b041c83fee77396d58d567227ac9b31be0e7c750385210d8ada8721e5ae2ce9ccfc9e80f070799756
-
Filesize
8.6MB
MD59846e5587f3799c5c43be692a6fd9335
SHA14925104824bddcb0a102157260666376a94f4171
SHA256d0efd9ccaf96a68456a9f86a785c28dad2b9bd7aecf2b487a31d0d6401fcb2c7
SHA5123bf86ae10ee7153566bf17d5182197c74c69efbc321912eb9a515fa68567e9782f58178517fb2db5b84fd764065574187e4722814f6ab45a94453ac9b7505909
-
Filesize
18.3MB
MD5b5f8d61238a993b789319b113b25095f
SHA13bb61e15e2f9f1474e995d7f95a12fab522f8e90
SHA2567aa4e4e2d1ab0e6e0a98aa65e2bb7943007427cb499364eeb1463ca8d525bdf0
SHA512268523c741e0d9cf9e63bf6e506cf16d34caa7bafbf45c8e6fbb8e1fdf602c90e2b434a7014761b1e8bbc527fdc947dde26854470e077718798ae5cd892830b0
-
Filesize
9.9MB
MD5c1f35f360955c828566969a1bc1dbbf2
SHA12b589fa22d9b9d5b1e29e8795e8d7dd9b0803f58
SHA25670667936ef5e94d0d83f697189260c1685e3db067c998b783de98785f49d6b9c
SHA5129e18b9802f74cf78f9af41e18cf4b764ca25a7c91aaffa5c9d302410b95b5f7cf01378a1a536db6f1686ff22aa0473b6d5cd8ef281f1d6d80c08fbe0e2349991
-
Filesize
447KB
MD59bcca80641cd86b2fae606d24f21e798
SHA18bd26fc76bea865e27da741a0013c720beed9651
SHA2566bc69d6b214a65edee678b3595ffab3bd867e2ec405c0d43dc9257727a585a28
SHA512245c2cec87d27091e08dff4138de4bfdb35f647325449c33ea11372565e8b3b6f371d70356665c3defb377077a61b8b367d95a5b7c81075302f445044a9f9bb0
-
Filesize
479KB
MD560a7a34c2ad9310a407e2414c03b6527
SHA131bbb01ec66838d2082ace42e96e8b4e1f312bf1
SHA2567a190775fe3b07d0de25e98b52c46aaf5572022eeb71f0f024c73fd0e752676c
SHA512a5e34da4ae294f58d7460eec8d9bbfe8319df46d3809d4a71fec7a88fee3c7ceff6ee72aae9797508957a4f94f269c5bd8eb58d33fa19e720d03cec59917741e
-
Filesize
209KB
MD590d5c8639fe91923d4bc83c421ed758a
SHA1179882466cd330e3e0813aaec7a8115130429672
SHA25618273708e39b2177c906bb55c6fca833f3abe4485ab3ab9192dc3ac7583fed92
SHA5125ba37f050b975d8bf355c18c43ca884a4450e46d637b5a3b0a855c21a01db3d91b37814122a97684774337be8a4c672b76cf8751680bde6d006c0c6a52ad3e2c
-
Filesize
379KB
MD5af32d0b03bda6f0830672d74c0bb1867
SHA1bce464dde9220172082d90d088326219d67d138e
SHA25647aa06adf3bf0c8d9a9abec440f2c893092070669750e13e6bc8cd63fcde1e89
SHA512162cd529986b04a3d8cf8cc7e7e5f475d6e51676690367c0127c1a474af1591cc5e96652b18f2a0aa426ad0ab1b3bf10133e27bf00add64e63ab3487e8c4a5eb
-
Filesize
1.4MB
MD5519981595a51c379a39341862cc2ae2f
SHA102644181b31408173546e7fd04583c310a244254
SHA256674b2833eef257acbad29c5faafb078b1e56017db0bcb4b3fd810ff4acc28e96
SHA512ed8effcd6598914ed230408f9600fe84cde47a16afe33d65c4695cacb5eff2fab399236d0599a9911d8c684ea0f0abd2349b0892e49b0f81806f86d010e9d6d5
-
Filesize
1018KB
MD587356e557cbada5c0764bcc3d37349b6
SHA1324dde733a8d19ea700e43db0ea7ee2ae6c5d53a
SHA256b9c11fe51c58d1315653cdffd875fd6c11b57c24db415861c886d0f91e92b9ef
SHA5124fa86532071c65f2413e999725724a61f9d988eea0546ce8e69d2ec8b939b0aae6c44fd2e1d44141b585c84cf690ed4fac2208f90f8503f5b069de9ef3fb1395
-
Filesize
784KB
MD5d0681972606c6812a6e6391ba535d10e
SHA134c04580db99cd4c72179b3750afae03016d0d5e
SHA256f68822b8b5493d0916a3eee32e5e891dedef52d522616231f094764c5379f588
SHA5125bc0eec22639f6f82f73412752588626faf18c49d6dbb15c2e38b12f224b4181ab8d7d9de6ed9038a2036d35963c6ae2bfb4086de6d4eed20708bf70568ea2aa
-
Filesize
3.3MB
MD5233f8e8ce4bc2e8fb7aee8070bf53bb7
SHA138f5014562302ebe232b0f28e303c7b02d796bb1
SHA25697b07098f048cd1d3fe12d8c71b852d1333fde87fa85b8112a8e0785754b4c39
SHA51263be1ab6d09a35f61267c072a2ba2c18d08f1e71a014670eed2ae76728996431e86123a83e7a77cada8fb4602b62b497c3a7b5ce02097c41adf6494de28476e6
-
Filesize
21KB
MD50909e61c8c9c717976828f65c987e5f9
SHA1b5affabb8afda55ebb1f404edab69c6c239affe6
SHA25603ffdb036329a25beacf905d62611a13e3dfdda6cbd2d13af830258e8cf40ec0
SHA5127f78746e40da64631c08d0e173fbdeb40beed180932b42382d9f3ac0cdb4348d2a5b1c29770bb98f5d4823cfd66ecac2285afbcaf109f82c8b75c7711f10c49d
-
Filesize
21KB
MD56b33e6f1d77cec0901ea8e91473bc18b
SHA1a397d2c6aead0b3e57d413a8d4af7f28e67f4166
SHA256449631a3f5fadef72acc2c2f84765208d0ca014ec1fe93fb9ad805eec1d40eae
SHA5128f5214e38202719f6a7549b2b97ad24288974cfb6cf0da1e9eec5b3b2092220f2330a260b17e28afa90b90226666a765a4e64fe91107e2063cde8e285f64773b
-
Filesize
21KB
MD52b4a3a51e075ab9819c6d6bc40efb4b5
SHA1bc52c10ded8b087c73229dc2f98714b5a368f521
SHA256d718e1b6c352112c2f8e36b4ba5ed28e6179257fd2fe944c4a0d404b5c15b5ae
SHA51213b07dc2247d51dad1ab9bc7df93e0d3e1bd6cc4fd16f9aff87ceffd40a56933d569a5fb82177dea7b6ea04ebf9f909f95451d123126155a13de6a85f747c592
-
Filesize
21KB
MD5607703b245d9b4fc69a8b5363ff626fa
SHA1dcf4626787ea220b19e08cc5bf9e55553a3a2aef
SHA256f65b1b3ea2767f98f0c29118e85b06f4e61654bec34b60b3abb593b24ec29af4
SHA51292d761f733f2c678946894ca72459b0e6dc62cd3abe1073653104689ab48c19603e6e1109c07b2f110822b424430f22d112f87c629b99d0b3ccc16e179549628
-
C:\Program Files\Avast Software\Cleanup\avast.local_vc142.crt\api-ms-win-core-errorhandling-l1-1-0.dll
Filesize21KB
MD5059129bae1776f03c59d3ba66a6f6dee
SHA133b1dbcaba1d16eaf5413f1378119cecc1298724
SHA256a83af0f79abb5e5c818c6f38a38da80e531081f3255cb006ed4c29635cc0b9ce
SHA5126a7da7e58620bc1ce4b6d3cab1e0b746fc9fcf05a84d85931f845412301880786fbc63b31611d9442b5a1cfa72558966375ef14edc749473e2b7c988dd20b675
-
Filesize
21KB
MD59fa3992f5dac5ea5dfa15b9669c68154
SHA1a453fb6c4064da8c01ad03a4ea3c0434efe82635
SHA2569057131f628e547c14754d545140ad6544e64606358104da50841e9a1b03f442
SHA512ad73f3952dda55cfaa6a0d6a0233df785650f5965caa4859b6c1577e3fbd6020e60b4b26338387690cc48b16a186d2b530708a71d2671ab17ee8904399de292f
-
Filesize
25KB
MD5817f9a76b7eadc1226b006ccbdd38a11
SHA18b81897cdd4d48befa389c1df2d0b887ffeb58cb
SHA25699ed148ffbb35829480412dc64da6ad24dfabe2f9a0eff9ba1493455d7127677
SHA51253d8b2561862c6b2465665d761612aaa8b7adc887058260fbf970aac0fb006317283ada01468b1e042fd9dd44def90451793afee297ed787086645cebce45cd2
-
Filesize
21KB
MD5e334f2fe1e0e6d5d6966f139ed328d97
SHA168b2cd826f3dfa59531397ebb3f382dec9af5fe5
SHA256d56eae93c55abdc8eb77d132777049634e28a9b59fd4b2101d51351546b984d1
SHA512fb6ee02f06447c906a4353d93ce247e14a9a1ea4255819a88e395afe2e3775fe3aeb622b7a97d86086d88c739ba4d2e2fba9e8fd6467e167fc75d595c9182327
-
Filesize
21KB
MD57f0ef1cf592d04b082b65f75584652cd
SHA1f7b9a2851a66a6a8eb509f2541b6ccc3b551f2fa
SHA2569f496e181b1c862c7a7d03c09d9b0a5361535c98acbb1a9d50a27bcfb0a2bcc5
SHA51230d2d695773e7bfd67de8691c40e571b3b91858e72eab3d78c84902b359108e9988247bf81689ab15fef6ed0a9ef62031f1937c6e7ce4ce8e1a34970ba23e727
-
Filesize
21KB
MD51902b85a588178857e9637902e5a1b85
SHA131ae4cf76a34ccbd92fdbe60bee080998741ef4d
SHA2565e48c99dd6318b017686bde507cdcb9d6ecf25f4f78f345845b865e443f1ee66
SHA5120755e9c0adc9e374060c851d4f7fa62633ec07dde0bbfd56ffc9bc8ecff5b9efd6fa8418c43e838770eed43a54a48fd61a41226d9ea84834275a4a36c7796472
-
Filesize
21KB
MD5892e47390f34aac7d20afe63ffa92f20
SHA14a78a77ae1d5bdba55534167f781a3c8675c7ed3
SHA2566070ffb5e20ed032d460d323df981d369fa68045fab130fd100803a00ab88c23
SHA5128b37866ebdca5047673d984bd779b1df052e3d44e3fabc3a4ce2e747489baa2bd86add629d95c76cf08150f74281d89d46372ef64266b90304cf7dd581af3a93
-
C:\Program Files\Avast Software\Cleanup\avast.local_vc142.crt\api-ms-win-core-interlocked-l1-1-0.dll
Filesize21KB
MD5d8999e328af5ee1eb23c216336637cb7
SHA1a7bde6c833e4d6ddefcc4050997b1583ff1ffa42
SHA2564ea02b683513a157e21824b1c1e9ebb782d22f14209b67961f97b1f79673d3ed
SHA5124f041ed2daf781b7f86b4459e74330650b2687ee46dfb961ed7a0716ac7ad2082a631cb619cc6d3c7d19f550bc030553b9656aeba14f969dd52df0b40a0e418f
-
C:\Program Files\Avast Software\Cleanup\avast.local_vc142.crt\api-ms-win-core-libraryloader-l1-1-0.dll
Filesize21KB
MD56337654372aa9adf6a8fc97d9676a33d
SHA1b790f4828e7aa18cd0eae77e78c67ddd66f3ec5e
SHA2566fc551cfbcaa0f90ed24dd09fa117e9fb3b6755a3fc0251d33ca64862a9a3414
SHA5124a888d71747c64cb4a964d8df956c5ed9e3de9e8cf30d804e3ba76e8c35502e1802423ce527a419935b0d8c8e4c0f6168657b2734ab79d01afc946521a88d528
-
C:\Program Files\Avast Software\Cleanup\avast.local_vc142.crt\api-ms-win-core-localization-l1-2-0.dll
Filesize21KB
MD5d4bad006e413ace7d729b1249c49b92f
SHA1cf0dff1b371316c8517619fdeff81c583268bad3
SHA256245d48bfce5cf6e9c5093e995d6ab5988e2401d32530fd6863bd5f8fd688d780
SHA512d1a5001633f1cce60db2687da28706f66644613672fa8487b065e3aa8d77ddcc96d9272c665d894b243e222e1c104be10be1dff8e5d007490e50f2bd2a708d0f
-
Filesize
21KB
MD5714e850aa29e808568933c5ed8c7df5a
SHA1ad84833bcac69b5217705e1c4d33d54c856525e1
SHA2564a244eea4596ebde0f9094cc6dfeeb5abb3c4385225bb0630ef55a431fe1c4f2
SHA5123a220ad4e2fd49f40f7fe5fdfc53608b114661f31993c0329e993c5d733b6d6f3a366eb46f93aaa9d5cad90766b21d85e5ccd09cb9c5ab905118d70702a3ed11
-
Filesize
21KB
MD59ad2e67f2b1f04b760deb00b889fab53
SHA1465314c9bdd359840f7da11a619ad0b409c271d8
SHA2565662035361e37f6c5e4a5a19de134df2ec20bd4c0f1be803203b37c95ee61265
SHA512cdb358848d48cd3913e7249eaa45470bee4ba9f9d92d975215018477a57db930c16b349541da2d82a2f9131220ec3b3cf9ff471ca411c2f705bfe916e8736be5
-
C:\Program Files\Avast Software\Cleanup\avast.local_vc142.crt\api-ms-win-core-processenvironment-l1-1-0.dll
Filesize21KB
MD5772d6c07e47e77a4479c7a9eccfeac4d
SHA1b88db71fc80eb57182db6dc6ac00b022e1e47cb3
SHA2562c9a8f8d47b49d04a82e8e689ae9f6552482b1861eb8398f3733e97327191c2a
SHA512f87bb803e818372f57319af97227834673cce9988c81ffd4a3d1c6d7038c6f7398e06a7133a17f063cae152ad27666a6d18f87ed77bb46dbe141c1272bc3ac84
-
C:\Program Files\Avast Software\Cleanup\avast.local_vc142.crt\api-ms-win-core-processthreads-l1-1-0.dll
Filesize21KB
MD59ac788a87032640e046f305413585503
SHA141b74cecf0f78134204dd3d8aaddfae34d6aacbb
SHA256363825adb27d5a5bd249fe58460a977077f823e50dac7509e124fcbac1512128
SHA512cc725796af3f7793ce6e6faa96a201ebf5e77ed00dfac3211a66a95ee071e559c9efb8e47ae0287d9cc1feded559000a582a2138736ab8c628325428c78e648c
-
C:\Program Files\Avast Software\Cleanup\avast.local_vc142.crt\api-ms-win-core-processthreads-l1-1-1.dll
Filesize21KB
MD531f60bf9a22a86cb8879fce5c1022254
SHA123cdaa4d6ae0e953d083b968558a2af49bf95a4f
SHA25653afac76a7124a132a7c11261f3b6ba8d6a5466e7e8f683c8d12ac370b7d6b62
SHA512c41ebb39cc0939b38d788b692e75c10c78a806cc8844d8526ff25869777eefd086518cfd817ebb700e20b3937401d6c0f7f506bcd479fafe1b801507376f4ba6
-
Filesize
21KB
MD5948e3c479e87ad905a3689bc94cbf86b
SHA1c9b2dcc45feb9b0bcd52122b51adf98d7fa5b0e5
SHA256982fcc32d7614cb921cc5203970e3997a33b31aa1d91f14db5db25a582dcc3af
SHA5126f15478ba5e7b403580b4b52924866e52adcd112d82900dd17a2ce67efa10306a5a86e1ba5cab76bbe3577e2497b83adafd6cf6c39a81c35b53b528e8bf6b440
-
Filesize
21KB
MD557745a06849d90cd5c79ccbec559e7b5
SHA171d3d3c0998e648ef6b061f7c65850c6a2a8593e
SHA256890dbb72c4c35266bd658c663c1242cfa3b50cf51e2873e986b7ab2e055af4a4
SHA512ca28053575e40eb805f366a7363257b3d40a6fa8ef46ffb5b58ff17cfb0ea2668f5cdf2661355e94866b73b914950c09940f5c32fef5f9a22439932e35391dca
-
Filesize
21KB
MD51862f49d5c2ba7c2bbc78bc517cb0b38
SHA1dbdca39d6d9d166f9cb5b8855d456653419136c2
SHA25690ba9da43d6705d76905e630505bd1fd097d1899c9bca3241ad0de5ab08ee366
SHA512c9c85ec2851f5b793de07e672365e6db28f1150ed6b6057d15be828a36029f4ba9e0d4cce12c7d424da4c94713c18ae256d9ecba9e59ab88af639adf56ed6a3b
-
Filesize
21KB
MD5afc4db1ae7eb74d1b43eda3d7ea5b43c
SHA1f31b2c1161024ec2f89c72631631e11fd5ceac60
SHA256fb4b382e2dfa80b3427a98c51d3270b1e80b5c2a10fdae1a72b7c464e57fc6a7
SHA512a014e4bbe207fd707a87aaa0228241fa7c414062af8922f51e46210b958284096357b21f89e59141fef28039a999dc6ac832ec7fc38bc4895e88fbed6b9a45a0
-
Filesize
21KB
MD55dedf9f86ba1366d9e920f33eb03721c
SHA1605312ce6d623889a1d404354ee653414a7e4920
SHA2560ced53f1ac2adc9525047d2c2a7592300dc48a5f52ad8b740ce22e3f3aad85ff
SHA512bed8c7a74e57f4cd44bd0edbc1bbb1f528ce261d7ad6a5545c33974c223ba910d648f0cbea8bf0736deb5aedd3b257f373cbbc4f9765d12c56a78e823d05d4b0
-
Filesize
21KB
MD5177009944ea3860b58c09da1871db999
SHA101cf9cab3aec3a1ea89111269f8cb036e73916d6
SHA256f353bfe02e30f4fd5cdc89bd7f44703257f229a09f0d815d7794df902f67d1a1
SHA512279d1e663ecc151dd2dd15462191ef41e668c7a2bfcb7930b8d568facf7695a030948c3af7f9907226b00dede255a7f30169083ae2ce544f2381548db31c9981
-
Filesize
21KB
MD570f8acde94e2c3952b7ba7f56a4ebfb4
SHA1955064391f0c9b41362cddbff7a070ab3888ad3e
SHA25691decddc6e80d742755a1f65261d10c3c0d059aaea6389bb2da6fd3aa7ec5289
SHA51271087a283d560f08e43b1a183258f1153ab5091d5d318cf4ee0fc8385285592c377d8e68a0f06d3f0be84202aad6dc7376b56057e23b6b3753a445323580f287
-
Filesize
21KB
MD5d91e6c55a2304aa59d24e76f34884535
SHA104ebc0bc4932c09c3dc7d9259fe7c9a6166b7233
SHA2568875816a3809753c04acd961244608e9a47127523c1d5e50cddbd83a4627821c
SHA51219c1e2458c5475de2b41013fb18dcf3d149c88c0b3816596b67c90f7bdced3d5214fea97dc3782f56f8a276f93fd28cf519018257bf432c00435ef6bae60a8b9
-
Filesize
21KB
MD5a1bee0af7bd944fae7f14174d9dfdffc
SHA1ea699130cd63857569bf34826b9cbcb5ecfa1a21
SHA2562c557f6a21db6c99af6184637b5efb57e44b40fae892230a43e96ab05ab27d40
SHA512c6e9473ec6cdfc0bdd1b8f9f42bdcf3d31855b6e106b811ca52d2eca895328889451726fe12ecaf0af9a238d74c10e79bcf0870f056e7e85ccdb9be49f4515a8
-
Filesize
25KB
MD5b9d80efa3f5b0b75c523d4ced4da1fd2
SHA1f493358454a273d0ddc6467c9ad82bf460dcebc2
SHA25644ebde7f2681c0b8518e55ca242261b24f326994f089a4ef6c060f8dda04d62d
SHA512d597c0e7c5309b9631966b01fff7e166c0dd0fc9d63534d588d47f9deee593cb2cf79cd490145aefd472b9493dd65144e875d5870742c8d09fa4c7d459259feb
-
Filesize
21KB
MD56e245fdd89bb6f88f56784adbdca0b0a
SHA19ac5d68ff969f984f74e6a8cded8e683b98ffa36
SHA2560e195a8d013a329a06df877a4569a3ec772f112ad29295f086c6d3e53f322fb5
SHA512601248c38540dcbddd61fd26203df39ef5d450827570f01cdf0e415873e098913d82ca6e3c7b21a9bcae267b4cb67e970237cbd1c6320b8ffab58c9fb675a3cd
-
Filesize
21KB
MD5e4fcbf91666504c1eb70644dc4c5f479
SHA1bf96622c082eec928920a052bff477cb0c9e0573
SHA25658d9a9b2442c10140db98ba705e8c7b7b9ac5a2c030d3286a66debf63b615c1b
SHA5129dd34f36144010b3c1400ed1b1db8ac8e97997a0d2c803858abeaca75e26d19dc56512714b566edee581ca20c813c3cafd47a3f774a1596b31e23208b1eee4f5
-
Filesize
21KB
MD5374d505ced3719d875ac316ce365b1d5
SHA124da4d65eb7a9116c626bf16c3bc95b563f10176
SHA2561edf013e890072987b8957b77baecc37140bc01581e5de6b020ae454bb57f8bf
SHA512d9b82d1679afd85c660ea985d6f57cc13fd35b4d7b8104c6d9ce1f182789b615a573b68d5f1da6c25682cb35068ae0aad3c1c9b4509f339fa1a83a9eeb7f74ca
-
Filesize
21KB
MD5152925be0e3a0ff77b0979bcae7a7583
SHA14ac4bb649b42893a8d5ba345a1c92ab2ddd1ddde
SHA2562e23b53441ba6b0779b222c120d44eb9a156d55cc3648f76216017ef06f9a16f
SHA51217b41057b82b1eb037a59715970496d402ac00a59fcbe67245203f117fc38f1b7e7f5b78872850ac4fd7a5dcf4a3ec561dfdb3fb0e827ec7043978b535e9ee26
-
Filesize
29KB
MD5bf69d049653e504a7a1f8b55a6dde7bc
SHA1737a1cbf1fddc0ae93a0a99d2feddd474f4b85bf
SHA256e6e839c6d205f91adaa3d980f843bab3131b8a25e06d152d0f70a6e98fbe0fb0
SHA512a8d834d46fcaf03aa53bd48b4cec816e0fd599b06b16a14006e402bfaa5a470f47dc6a55c1a94314d635af55ff2322eb242b0c535a02fc830dac83e375adc6a2
-
Filesize
29KB
MD54847091828ad3b0734418343c712cffe
SHA124e69b32dba65631b92493b7aabd68d141cf21e3
SHA256d9388848ebfe27138998518332bb507e5dbeb1d8851e9ed0300f15e14b6958c2
SHA5125e8061cc226f3471e3964c04cdc5fbd3a607c9abd22a11a1e818eaec42b20ae873fa80cfce7f47b8f8844f3127ce98282c737f25666d20ded47704e0db6f29e3
-
Filesize
73KB
MD5533b418afd2ef8e423f42d414cdaf5ef
SHA109d3a595bad8f0e7ab5604fc02ef832d11a26b88
SHA25666f910721f4477ea238603e5c14c858d1e26fc2ceaab3b48294cac069790202c
SHA512eb73c82a91ce67f8d0265ac4f0739849e5696ec0069ab6508660368b8d382a230dc88eeb89aacf8bc9fc6b7e31c009521fdeeb979f4ebe6e80cfec083129ccf1
-
Filesize
21KB
MD5dc3fe259a9b778480c2405fdd7405c9c
SHA1d28a588217738af932fc43b809add215eb932856
SHA256b33a762f0eb072033044e7ee89505b695f357c958d4107ce6f1c4d68f88d3277
SHA51254f58f5a0d1aecfb9a6c8f12b5aac30e26ec427dccc097f8015d690a0a2244603e80810c19fb8eb2ee7ae9122d14829b3aaa81c69c77b6b4c5751d040c3849f7
-
Filesize
25KB
MD580e80532239aa8929ec0fddedb7aa8af
SHA1312e743535e66735d782cbaffacf94c6c791edab
SHA256d3641bbaeaa5a7e7d4ee0ee0ec64ccee0327cfba3d10b89094144eb70a0867a9
SHA51287e7a5496bb2dfb9bed4e9b9913db2656b335b916eb1277ebebc33ac9d6622bed50a22293dcc02193f846be5e0b4b0f032dfbcc673955aa90f04cf81b47a9305
-
Filesize
25KB
MD558a8c2d2404ad7bf6fca8bdfbb8a5b3b
SHA16e834364437bfd23b48e66d8d891966860528d08
SHA256eb7851e182a4675bb34633869938ff3579779a92a6c094194efbc970f3765dcc
SHA512d44e3b47dabd29621a3fadaed16074a46b646e1190ffcfffb7ec835b8cd6eefac88570812e41a490daae485a1d71fb2d035c91e73b65c2fbde649fda8733ceb9
-
Filesize
25KB
MD5d7164ae82b7332432bf2eb7fc7774e72
SHA1221d79c77a8a80068621a0eb8688ddb86224408c
SHA25608d811ff57efe50d9f365c76ec29e095474e0679e06bb4d0d4d0134b0120b40d
SHA512d1a4cfc0a21509382606f4650a67556b0616283231e71bb1870ccaa5deba42fd77583c3130d60d632e98f5acc4763f57a2ed932aa2eeef49601618761acd9429
-
Filesize
21KB
MD56aa7b1323c5d8e314f2fb42f855e9b12
SHA1044cd0167de5e9c1b014e07287c90473c96944a5
SHA2569c5880c395b4e7db4b8d6de49c75909abdaeeef0b041c1703c7339b05d7d2866
SHA512e99a14c8772662dbabcaa504bc61ef616590bb6f7384adf8ae0637e0a365f94c67fe4222b978605b7a2eeeaa62505e57c32857b17b51f4b2e9a0d8a033f0a204
-
Filesize
21KB
MD57b7f4484966036ff86a7e4cd303d3871
SHA118a789e9d1e9df0fdf22e94d71a18c483cdeb611
SHA2567d3d88332d4744c9b6be81e2ba8d42ced7657ce7879a26f5b8a8d3bb2331ada0
SHA51239e986994a99361fadcccbf5bd861ce9c4c6de65ce5e3da4d390b234fff34d7c561637ec012ccdb2757794adc222bc80de19a60a8917fe65fc221fdb3054149c
-
Filesize
10KB
MD5c8d9f1d775c52a92450b0b7680d93785
SHA15a8cfd770dc5c1f5fa479c09e773e3bdf1b4671c
SHA256a80616ba579b7f41424de7a43b7aeb05268cb110c987cf5862814a98eee2b3b2
SHA512a917e19be0bc75e5f39c42a23021cf609dec451248c7f3dfee06696570918ddff130ef78760bbd663a0b721cefc2f6a0447034ddbdc6e37aac5487711810e45c
-
Filesize
27KB
MD50307284d59b87eb2a10219270ebb2f4f
SHA1a0c911ad793223f3274097afaea112081246853b
SHA2561621c35f57a6202245b8b06468fc1cb2ef20de75cc2ae110819eb753607146b5
SHA512b33ed63d6d928a2345310f9d2aeac50d3d2a55179c8cd79bc7dcd2a7c5ae9a1425af354654f613715bc2aba836108986daff83651208b437345071e2bedb7bcf
-
Filesize
315KB
MD5e6d7ff1c7c1311a9011f1039639adc3d
SHA1d47faf7b6f8af8ed67546e75693200d022ebeccd
SHA256993af3de5e1fe2e3d0954cf06254fabb91a5a3aa513183fe0841b897eafdaeee
SHA51235eae324dc30a6bf652cf571daefa8d34d12c09361b248d8931ce721940347ed50a2d51222adaa655abbf9c5a0ab58d57cd91cb1cb26dabd487ed721790378eb
-
Filesize
559KB
MD5ebf8072a3c5c586979313f76e503aabf
SHA12fd9609f099a8f42b1b7ae40ad35be1569c0390e
SHA256a030dc2dfd2eca28a9375c92989adf4daf161f988db5e16b9e10678eb0dff4c7
SHA512438c2db953606818b843e42c04240d510b5e398617e8e5539498264f93cf1893ae9a6b6b02ee35b169ae60b0e3b5621d7d9f7e2945d0f1e7c2e7e0c1e9e3c1de
-
Filesize
35KB
MD511d5d26552c1730ccc440f13a1fce188
SHA14c534eb613cb05455809b6471d38e1e0976aa919
SHA256edfbcb2ced712f23842525cb076ee2c09cc7b811a389cf37922d04ef1985e10f
SHA5122428c4257ac8349035ebb286dec236a25acdbf23178aaa80fd5461b2ed3101c0a67574bf7db8728d0c101d92f45dc72e7bc578049d5b18fac367bdfb44ecfbf2
-
Filesize
261KB
MD5718e5c4a63d2f941eeb1b4e9d6d85a8c
SHA1deca5196d35d43c7abb35d9ad4b0ac0756585fd9
SHA256f3117e3445945a872a35e91371e2a6c9f7b3fa5e74e5985f6ab12ac101b280fe
SHA51261694ff307bcf3869dc14dac45e74b0cdd5a661d40e8483cfe96debe4727ec45ceef867d18e972d25a6b294c43ba0569562392b6752e068f2ba7c15407fad975
-
Filesize
49KB
MD5f9c7a19dfc5fa60b1405c81208bd959b
SHA14eb70df0a412d79fbd8011fa17ef815e10189c0d
SHA2562f9cdd965650440cebaf2349140a7dde9b587829b7753de8cd051933a777f499
SHA5122ea1e4d7d63af427a0c764b4a9a646421dac1f1eba15c1d43bd040b284fc611c8059d889c48edfca56e745abb996939d8f430ff3e249a5c6455e81b520307a55
-
Filesize
31KB
MD50f4e5f6c68c514e63c4cdae9eb9e40f5
SHA1b755c91cb14e9f22c690209d0b4c3661ab20770d
SHA256945225e01a65e5199aa7372b893da3b42dbd99f315c345f0e7c136af88e897ef
SHA5128962e7f92446c535151b38a7e34bacbfb9f0f48ab57d4c2c8f2162dc2f1cd9f15be70742032192b41aa368c97a149e1e6fa6991e29077b7b7d7c1708f1a54f9b
-
Filesize
1.1MB
MD5932dcb8d7d06f4b89fc3915726c418b7
SHA133a1fdbfc3dfa0a1b7d2fa3b2e8bad8e8c71e961
SHA256a73bd7d75f368ab2fe949dcddbb25cd5d5975ff9091761a01b98f5e26de543ee
SHA512fa24b5f9a4192fbfe737506899dc052c51f48980992cbdda878deef01ed0280ca455bed0c813089503da3ccac92a0289dd8fdfe64cbf6babdf70d7bab531540d
-
Filesize
340KB
MD522a66d8309244779b8a7f275a3ff5cbb
SHA1195e58fec7a5d39fe7a6275dac37295777da1352
SHA256aca79a9c1f6d664d99691fd0d3d84a8819993f784b2ff6d7baf8e8ab2e15e7b0
SHA512b39eacf78b9b97d968e96e357725bd6cbad7592beef5e0e5b301189cc76847be49f8a5299a16d68bd5c1c2d0e86d5263f865b29b66df8360cb1d4725b7b00ac2
-
Filesize
116KB
MD5699dd61122d91e80abdfcc396ce0ec10
SHA17b23a6562e78e1d4be2a16fc7044bdcea724855e
SHA256f843cd00d9aff9a902dd7c98d6137639a10bd84904d81a085c28a3b29f8223c1
SHA5122517e52f7f03580afd8f928c767d264033a191e831a78eed454ea35c9514c0f0df127f49a306088d766908af7880f713f5009c31ce6b0b1e4d0b67e49447bfff
-
Filesize
48KB
MD59410ee0771ff1c2007d9087a8c316a4b
SHA13f31b301b5a99a13486ddec08d25646d5ad510db
SHA256e4e85eea1106d361923995e53a0b961a28d4fb58555f40945003f35e5bf2c273
SHA512434a32ca6c4fdd8ffeb45d1bdb4d9f3c1b1259a1260ae66eb241f8bd63524cd1a3ec29d5eefa2d2f266dd740273e69b6bb8a7771badb77e781dc789dc18de2c9
-
Filesize
37KB
MD5268036dfa28320d2186b9b21631d443d
SHA196fa44f2214af9ede1160e043c7cd31b890b437a
SHA256edb3ff7cef28496d535e40769625e542dd3e13110c38ce2e3dc1caa8687b892a
SHA51299ce4bc5798320dd7f736725eb85a98553e277ab93353e1675fb7842bd258bb408a5df7bc530a161d91c1eccfcb510138f98085a80e892c3f54e2e8a723bb841
-
Filesize
1.8MB
MD52619cdf765fb76aed77f37bd6e21b970
SHA1da8abc868d831d751375e3d16abb1a78aa976d03
SHA25633f3836543a8556e3de28e491c5505819ef83fc69e84a4713d581d50219dfaea
SHA5127eba811dcd1f67d0470a114f6777a5ea30be2a0ed9968716640784dbfcf091ab25a8317fe44386b692c3ab39a256fbeb11f761f0626b67810dfe6e6874159605
-
Filesize
768KB
MD58ebb97efd9cc5bd6c500ef6c7a9fa406
SHA18e285f1ffd650c87dc4a0ec26df418acc1fc8821
SHA256aaaff8d6c9f0307c4eb3dda812f566300073414de002bcefb273a7be57f9e69e
SHA512f93b72eb950d924b66bdd44713b631409003feef26f6146ef366f05312459ba2d2c4c720b3ad13594c8ee6c3734c53e4d1295eea064c03be313ae2f541105c89
-
Filesize
1.3MB
MD58f6d29ec5f29c02e8d7188366f0ef3ae
SHA17451e3cc4a7de1a53987c5cadf2a759269d99a40
SHA2563e116ffe2f55faa2c2b96aee4da637e6424cb48bab27d9f94a958530f840c673
SHA512418be962c4dcf92423b2bb780d3a7476756e16aa1b670167ed3631bbf7ad4edb1d35a04c5f8f685c5eb79edfe5a247403d25c6ef18f43eadf1192603ddb2b386
-
Filesize
1.1MB
MD5df4ad5771b9cffa410ea860a72919040
SHA1194992f0f1bcc96fc8ef980ed7adce30b63fa3b9
SHA25678eafc968e2524216fedb753a573fac41a24076d808a9223e82c1fdf3b3b9055
SHA512d425018fd709056e8cc8034d76944b682261c635b5592c8fb4fab6b49611d2e2ef30f9b57dd14feca0eee66efb8a263b5ba4df4a653d0e0563943acd9bf6be27
-
Filesize
1.5MB
MD57d2ffb9fbb266190de737dc85ddad43a
SHA1de4fa41200271dad702420846921a59ffe1dfd69
SHA2568f2f819639e7c38aaaa11063d8b025c4050d6383617bed37270d1976425ebc36
SHA512ab5dd1932986df04bc450c043078c23d9dcaad22bc15f6b5a30ec8c364145ee288df54c63fcce66ae7f11cb4504fa1df92006b57af38322988b3f1c600156fd7
-
Filesize
4.1MB
MD59cc54c4f60b992e040bda27c882a13bd
SHA1fc11945e174c57469d3555a9fc69f680b4adb8c1
SHA256099f766a204cd8e4d1e1a5ec752905fb5d36a0eb58d0290d4b7e850aa6e5e1c1
SHA5128a0aa94b3a1ee3b7fb6acbca7d21a9b30a2aa62e175fc87f39d444fe097119cc601c1d123b79234acbe0578674940a6885e7f0d29d3633da9128f4d0c8cccf1e
-
Filesize
164KB
MD5e19391fc481029c142c909e32f94d319
SHA144d06c23792289b103c5e4e0704a5c3075430ec3
SHA256bf66494e6361210d9c0cbfa750708bd6387a5b56d1a35c6c8ab5c22670e21541
SHA512a8dd6c78c94fafed30ca3c6c2533cef49dfbf6bf42d2bac9448e3143f76f6d27cd4fa07494614d87360df19b45a4234dc824d2a610537c839e75f544b1f6e427
-
Filesize
90KB
MD59d6ec82f7319f401d73e3e5634596749
SHA1b30ae36ddbaeab05a31c7225a8efc79b343f1817
SHA2561b0087bbb82d37048f2e3e67b981407de8a2aec642d263c4d6eacbef3953ac0d
SHA512919ad8428517e30e35e5e2eb9a3fd3c7f23c8eb72917eaa937f4efabb1f9058e20ade953c968490f0f117bc9b5b3b7228e5e9250fc9c22380588a707c7653a42
-
Filesize
565KB
MD5a88279e3679a887752a5725cf60059f2
SHA14dfbe1840c02b9c2bfcf2c1664161487a9255be3
SHA256983574e6f49c74b733a231f150a2d4c5858b65715fcc9392c51e60d1fcb67d0b
SHA512a57d58743a44c1f518a23ef70d0a01ca91b5eb6b197372c2694a80abbb8baff29c7f9be162e7e558116167afa73f6ab5af734ec79e81296c7488bb5939c49571
-
Filesize
633KB
MD5ffb11a2e665d35a592b68571c2b215ed
SHA1f03e77faf701677e7117b541cbbd90af3b94704c
SHA25619fd980713b76d33101d0bf7dc41782c1ecc14a617d1f4de721ffba0a83d2287
SHA51231a0f4d7493c4e5bcbf91f3a23055c86a512b2a6b594f709a6d337e9d9545675c6417dde2f8c99ff01357678ccf46d86178dbbd330e2f1d3b9ff7086ec596074
-
Filesize
752KB
MD50b536fe2adb1e4056e7370f00a9c86d5
SHA10e8b1835ce8a18f96ad5d9d120ce397657ddd50a
SHA25628538f8a45deb3aaed52faef63a1539a322b5f139f13fe69c33da3141a71eb15
SHA512bfb42d1dcf283c9c73eb991eb48e64828672de3598a97edf24affc8fa9d01ab8c9fb58e5a323709b81140eef845877db9e69a0e0c6e7fbd9c45bfc22012a87f8
-
Filesize
1.2MB
MD54f626524d65043a67f692b3fd49efb07
SHA1729647e533cc60aeb5ac82464e02fd54a64bad46
SHA256fc39f08e08239badf60c4893f2f60658f4a99367cc6a036461d8ae35cdf65e08
SHA5129377567e4b1a218d28896d010294b573771ef48dcc065d968d15953b67ccb3976b7c8f9c421eabb866fb4a115db25a22cbd517c3208df6a938ee493cce197f3b
-
Filesize
2.7MB
MD500baaa55674a5ad59b3c535f3131fe5d
SHA198f6b932d1e28d8608e204da8c75ecf92ecd8343
SHA25609d7fd3901491825fa199dde9a040372c5486d36ef57874a18f5b6f9465eb55d
SHA51223d192e1edeb38aaafb187bb10fb6a1e2c893db0492d4fab9b6d8cc9da09de133bfa980d311d6b966649c2d56a15dd40792f9d3d5d9f26ad92181fd3210542db
-
Filesize
9.9MB
MD580a7528515595d8b0bf99a477a7eff0d
SHA1fde9a195fc5a6a23ec82b8594f958cfcf3159437
SHA2566e0b6b0d9e14c905f2278dbf25b7bb58cc0622b7680e3b6ff617a1d42348736b
SHA512c8df47a00f7b2472d272a26b3600b7e82be7ca22526d6453901ff06370b3abb66328655868db9d4e0a11dcba02e3788cc4883261fd9a7d3e521577dde1b88459
-
Filesize
404KB
MD5abcb0e5dc06a0b2bfbec4796a78e0f80
SHA167faf8d954c6913d606c81758078b56415456366
SHA256d94a14ef4e833ed6c0cead145108ae3d94a4ab88cc89b460afa43f487051ff9f
SHA5122373c8aa26281acf315f31cefdb1ed1fd803b566bc12981bff4d36956fad3f368843545dcbdcf8c5b274cdd554159975aa44197587d40a7cd66be115e1f21eaf
-
Filesize
6.5MB
MD566c6ebdf3180d0251319c454f1c46bb3
SHA17f91fa29630de3d776ac58a9228a4531e4e1f9c4
SHA25625b2b5fc76a52593dadca0515c9403199d863d4a2f968432981922bdf12c2c66
SHA512502fc9d813aaf62797bcc0f1de7c39fe35b81e63a7e3df6ddadba0e76d5756bafb7032ae9bbc720783927ff2377d21d0f350b6ef8e9b63772dfb80961da4c2c9
-
Filesize
6.2MB
MD51f337b3f7972e8783b60677fdb70d057
SHA108ab808d3bc04922b236d479eaa7f02ebbdbdef2
SHA256faab24bb05ccaeb98d0168e963af8e2dc2a592e0aa9b5ff0999755c051957a7b
SHA5123e6403dd737d9b3d3f085c66278734dd09ef77925a9bda8d7b54720ca0799162414fe35fe085875050a07ef96c3c72a5f1e194063fc59c3b1067b8f684b527fe
-
Filesize
1.0MB
MD555e8abc2e2a985bfcf63b31fcb616798
SHA11515621393b52ae31c697422c3410d9738d58ad6
SHA2560e5c4afb2fd25f3b0843c1f982d5f1314040ec5446d3587888743e6e5825ef31
SHA512a0e8ea08b458a791455846b8a38f4576e9d88040dc4240eaf76253d100212f24c3fad76963ea26edfc3dc634ac83cb0151254e64bdaedeb943dbd12d8cbd6e1f
-
Filesize
100KB
MD517b24cd98ab8714abfb1847aab4bcc38
SHA1e3c8a2ea624e9e4739e951f27e8fe0748511c420
SHA256532fd260954d47eb1364ea4e79f313b56f4b440a17f32519dcedeb7c91276705
SHA51229ae5c1d51699e1fd11e0c8d14f5d8b0e56dc973b6b39834c1892014d6a512872e8d9331d9553f3c2ff31dac51dc3b7df7d4df0bee3cb76db84d2bbe9af1a29f
-
Filesize
1.8MB
MD562d829f91ec96677fbbc4362cf6fb98d
SHA1f641fc9376557d0bd15fd5706d367d4bf76f9cca
SHA2569f2bfbd4a93bede82d4b5e465660deeffe3291f3e0df7a37c36282317be588d1
SHA5120acc08eba170495d9b815fdc1137347d60294d0f5ebf8515c5710cc49d9cc20f266710bd1f005fd867880d94a68ea9dcb8d04161652078ebb7bd6283749e789a
-
Filesize
4.4MB
MD5a7bcd6caf81ec3885556a8cf8c4add00
SHA1b0137bcd506c563e26f41eeac42300332db7c3d2
SHA25673cb1a52cda3ca650d5e6823e5454f76ffab2ce7b69eeeb261df6276006f3d2d
SHA5127e022fb8d15b99e8d5816ea491abe5e12c247c0ca338c87350e9dc499bfbfd8d32bbc76132d176b2b86e215d60a4ff331b8b66ce73275772b5155ad66c2a9c69
-
Filesize
3.4MB
MD513c520abb15829477f295cc8c11b5889
SHA1e23f9aa51e65fe6d9b30362774a5b9ba36ffc10a
SHA256f2aad2ac13e4fdc8bc1031f85928d5e00f4ea62c81ca57aefe3833a86e85a559
SHA51276e202b72f9b64e45b39b7e22b69c60ea55bfac51ed45380676064f6314039cd1e761eafe367e2b7246b1ebf933a0066843f5f6666e3cf0d27e63f60c19031f0
-
Filesize
4.6MB
MD563068466ca1174caf81e4001fd0c59bd
SHA147631e02756a1f21155ed5843f387aeb690d0a1b
SHA2563c3d8d965bd77dee71575465d21a66777f475e9dc096dc74eca7f8c8563a59fb
SHA51211821ebe6c17f24c39fb0301c5563279866c422f19620395cce909ac6729320d9461af3b4c5b44d1b4f39763464c56f375ca99fefea7311dc736c1b6b627ba1d
-
Filesize
453KB
MD5ad4acdfe76c998b945642b9af2756ea8
SHA1025ea273d63fa71f3c10c578b1a3f657dbdb3f96
SHA2564dbde72ecf65ac84b6c01251d37c425c4cedc00e3cd9cd40c0bd5a6081359b64
SHA51281f71679d2ee24ef8124e81f39f49b113a157c88af093a6f571c34b67d19933c200d095ab65ce099000f132fd2a04a44829047816c1e53a42ed4c5b517e90fc3
-
Filesize
479KB
MD598230353d1463eee93d64a4856f7008a
SHA110d98e7d0e095dcd947fbe0b8d771ed1574e3ca0
SHA25636f41a346ed07708ce12d54e5a4c4612f49a375155d1655a23c52256838617cf
SHA51253b9d1b50bb79e245d74dd30cf66da4715c81ef63af3d569eace6329eec00356eacb7357271778e837b60fee08deba2ba445b8ea74619a955bfa2b8e5c05358c
-
Filesize
518KB
MD5dec816e6e65e705be74917f249e43fd9
SHA16f90b68e6b1d904b3e41892cdab1923f4f868376
SHA256ea323024091753a5576a343e46d19bfbf9939122bdde53d91d7dfdbbea5a9c68
SHA512d21fcaf4fe07f4cc6c369d7cc5a1bf06de5ddf7e2433310b45b53aac340259f5276e1e86e15591ede8d4d5c05d719871d586942664ffc76eba1712ef3145395b
-
Filesize
671KB
MD5c7b9e899ee655e2cec7a49b9cb2300a2
SHA15c471604d1a755a393f1ca2f1acafd6e014792be
SHA256522e7a2e1f7d8e49b5632759cb5dae269578edc522689bdbcb23b74750f53e77
SHA512b56e1afb9c3f67ce891eb0215a68cb3588a82fe51e0dd2f9b18335f2312bad156cb3be032caf641a7a39ddc0a41038f96f7b36469ca327051bfcda620145f6df
-
Filesize
319KB
MD58fcb9f17f850f0dcffa2512236e25790
SHA1429b36872ed7b655d745fd8efba6b5239ad340a0
SHA256c79b92ba066cf5414fc37795e6a76e966c23143bd3c48c0cf5f61aedd5cdafef
SHA5121553cbd7fa4fc87341bfca39cf58e8834d6c3100571e34bcd5a1961884776abb69592c627cef414b918e8cd4bd709a83c4af2bed5d5c4a84b9509e896b8fbf42
-
Filesize
325KB
MD50161995c04f022922e5c036d374eceb1
SHA15294111882537c10e4ea4df72b3508fbf2d2bc30
SHA2563f2e5a65ebf8938ff4e9676b12573b23c72501761f1bff4d5ae466b68c85130c
SHA512c04c549e23d2ff33cc424746f1a1a6d70e4660612d857070810c7ad9c7021aace09acf62e0248f139acfa2369fc511b4f329e14f3d6126813ff66ee7d44b3611
-
Filesize
294KB
MD5f1e5e7dc819670c061902a3daa17daa2
SHA1583ca07af55f3055ce127b81fd825fe45cb722ca
SHA256cefdaea7b486364291fad01ff402ab8098e2e13bc73b2bbeac25c8a9daba8df8
SHA512b8e8e79f052d5165446a8392a4836fd6915cb87cf199c499e9b4e767e6e60e4e94d601420e798ed3b7354c8ca91304b1d062332cfd5016614705aa57462aec83
-
Filesize
317KB
MD56932a8734c0ef9949fe0dc3b2282e16d
SHA1817c17d5592129b6277075845557148e1e59cc78
SHA25688581d49e6c83ef74fe4aeed438c0380f321d9eaf3b8ef210d39f8378836a1c1
SHA512076f2741f28f76fb0da8fa35bb55418874db7e2304dd09afc0cc818b0c5e645831cb0c3ebf97eac474339c584e640f562b4699f54496ebd761e3733777490b6b
-
Filesize
566KB
MD5c6009c7b038068b61aa6275b4cb9f860
SHA14b77f7f822f4ee15c57dbe873c6f7549fb608028
SHA256efe6a9d8dcf76f5286bec0496209f59da3de6ab6e355a183b69a7e4bd5d36cc2
SHA512d3d5eb21caaf361bb92e0453ee1db4ef9349e071be2736589a8d2f5cd587e85d33c7d65f01342758dede0ab0a037b294d7e263d82f60c29e583ea1c30c9f3fa8
-
Filesize
260KB
MD5314c49194e366808b2b36253fdbd7714
SHA1e9e8ba1fcfe91b80e232899c69844282d39d0d23
SHA256411a729d9288a62780c32d6bf5f4cf0fd8d221ff341ce79c2eca25dfa03c9821
SHA5125c24bcfb043ec09f31e5c8e640d1bed4932f9560d68256d4409d5d51a8948af3381e2bbf164515a2e35cd7e6ab5349d9fcfb4916bd8d11453da9d69e7cd8f5de
-
Filesize
264KB
MD50a70bdd8c0efc740818bdb82993bab85
SHA1d84b6092664894f42e1afe042abc946a3e0d2e65
SHA25621fa942a5f4f26996396f0d84807b6f8c01afd5809e2da33487bbecd0a6d13ef
SHA512085c21045f8fea63a80678069af61e4273420bb6645a833319d58248e61adeee3cfca23edcb7adfc2dd59621184035e3f9e252db8d5840e6f6727e0e05b5fd63
-
Filesize
312KB
MD54861cfbe34644b1aa3a62e0b8a955b28
SHA166497635946e50bb17483db226d9d9fa0e80db7c
SHA256ef0a523bcfa4d3a1b7472947a1f2a0a68e24c628386f7f0056ca4404d82481f1
SHA512162069b7b670d7bf68ba8276d2ce0b042a4cb0f19f2f66edbc8af00dbd97e084ea9a755b817a82d77e83e63d97e79d7e50eabaf67c880b4aa85b3b6af0cce20d
-
Filesize
315KB
MD544c080e276c1c44cde4dee4c576a4358
SHA1217c766a2ed03b9a9f2f4d1e2c148f10d836cca3
SHA25685862323a3128490a2c1be66a36480f7eb73a2294d62ef4ff38ae868c034db4f
SHA512333acd81c4b1fb5f24f0b0b2f5192175586fdd455895bdfd7092425cd877a844aebe3e74aa37060c849c5821fc5174a2471d7db95a6e7098e43e177db70ef92d
-
Filesize
282KB
MD5d045af9a8b85c6ac73f60e9fdc16590e
SHA1874293f1b5d1b6e2641d9dbea59b4e1b8f377752
SHA256241f3e5286b25864081f50edb93c4693bf001f04d7c7b98f5c4921f768cd7e94
SHA512b8f9f59f6519c5839d4da668a16062100be75317c4275bbb50e1afc4b6b66ecab7268054682bfdd63c5a71dae8ae00e80eff3eaab161c2e35a3651988ad38413
-
Filesize
457KB
MD578c7adf045b3d8a05c6f6519154cdef0
SHA1694fd63b612fba0267e1deab41b8a87ee0649dc6
SHA25605a98b8dc3b6d5e3a224e17c144d873c3b84c6e704fd2b8dd659e2099789f9a3
SHA512cea96bd1621550c6108695d51a317bad4054bac9b564e45f2b0a16cea328be15475cf2ec033c33106a184215fe7180fdbbbfab709b782f43919f68b976d8cb99
-
Filesize
291KB
MD559d49ab548b74d85bae165b8cc15b073
SHA1d1946469ab92270bc99b7ed863ac723cf676f050
SHA256fa171dcc44baf46cd4331d0a833172185ff6a166a31ab4f9890eb0832e15cbf2
SHA51240b9018eac2f55828f3ce3b50e6428ed545f8453c51b193614137c035ab9853f63ae9c82c2ed1d6f9a4aee265238478bb46f468b08442d6cd4d0d49c9e1576bf
-
Filesize
325KB
MD52dc3f1409e7f6a3fdb3aa55c1bceafcf
SHA176fdde6ee054a19f7c76046bd41390004bc6ac41
SHA256fab8b112187fcf9ba5102ff0aac2f5eec63a646c8bf808fc5a2e4e08b9c62a83
SHA5125ee1981ac59456a623297de3257219b69bc053aea71fa4ae1486bb6f0689f7adb5e78daa17d8d338755eadb7164b7d7f50bd6bbc004c80d00ec4fe56603750c0
-
Filesize
342KB
MD539df7277c2854d60b4b61bc11add4188
SHA1865db185756772df35af31dcdf78dab7fb9f8549
SHA2561ffb04ba6986f4a25f5191da50939cfe48d1581388148b7f64d3c10a124439d8
SHA512de627a69981b4a4604a587a610b59a022f6fc4715cbad7be59cb444db7b42e0337cbbc42e9c0a5fea84bff066be3273a8eb251c578e5457a9ddf19f90a8c71e0
-
Filesize
644KB
MD5349ca76d987c9e2c7fb00966aa034357
SHA13bba7ea00e4f4d9768dd2311ec1ac59cc8239652
SHA25679fa0f068f09ed239a8e0c3f1da0b35fa1f86622f9fa47721e13656696184e88
SHA512330488349b8a7d9503df180611d97c4d449788284304f4bd231ec97c77d5c2221adecbf6a9486d2a8bee37b6e2c72ad22cea3937e95c1c3178c9dc6c522a52d8
-
Filesize
397KB
MD5ea6c8dd5fb4007b5b5a692b857693d46
SHA1e142738f399bf5aa7c19d478a7def3d270e61851
SHA2567652d063f1630e33228809834f71e6e2ffec75c472ec66b6ed767bd98886f928
SHA512a77fec4ea0fcea2de4863eed319abe2f4143b5fd345aa951c94068f862bceccfe16575271bd423bf09b7116c6bbf7faf4daa59bfd0025797ae9202a311637e1f
-
Filesize
668KB
MD5e7506ea783c56cf5432618080371868d
SHA191f7c1c26a7eada6af72089252c2a0153066fc03
SHA2562418a772d39e45fbea52182965a901364ddcd5459a920c8dcb56c2844954e536
SHA5124b4d90e2fcc913c061da046b4ad7256c1dba78959d08dee67a471690177dcc8561650e3e0397446fbcb4b9bec89a345b4f2911bbba6a88444ee9b135fecb49b2
-
Filesize
313KB
MD55ab62a807b85bf1b75c741abba0e9f98
SHA1641b2360699dfc465a86c0e10b51b4739bc3c770
SHA256b967887c6313fca79a82168645c1febe43c949f01e0eff3bb8413a04b590e16e
SHA512d53895053eb4aa230bf9285e1cf0fd46704a9658065f35a265496610c951d09c2436071f421217d3dbe54423624d216d357471763bbec069d3d0d938557fa291
-
Filesize
336KB
MD5ae54cf32c7e5bc9b75615225c5faffea
SHA125c6ecee303925f6a273a8d0818a79ff80a74298
SHA25612949111bf85a2236f071a294a508d99c90587a97b9ba7f61dc8d70e36f5761b
SHA512eb12669cef9fe09d8f53094aa5df2ac71c8ea334be474a2dacb5f2e8ab56bb56bbb188aac10509873fb7dd3ebb6278d69a050a700cef6388a5caa22736813932
-
Filesize
279KB
MD5556874df87f3e62bc9f2baa6353c5d73
SHA16e79085ed28fc54399bf7b91a09e69aec0e21e2d
SHA25660e0f7533dd163da804ac5445f2a80fbda26bc58ce26d8d2de7e2bfd4e5d039c
SHA512884045476c84c3c18cf41c7a0f4ef98c9df5333284a8d9f27757fa5c19a8c8f07a821b613f7d0fcdfd594fc23fc78ed5d133e2e1e5c965794376e69903f20f8b
-
Filesize
308KB
MD5ab258570cfdde79a3595b9deeb6cff01
SHA14563fc47d20d0a2ad81e7bd9298a5aecd11ddcda
SHA2565fef05d02e5c971e8d3f6b5584720ebeed7c7e6e5214320f09ca6f7d84ffa993
SHA5128a7ef6aff2682a96511e2130de62989e5e3a9ae35b8db66173f7ee0102b1e5f5e0ee7ce2a6f06588ba6e4c577c6d5d5767d0a23f1fa1bce3c2d4b08f7bcc90cd
-
Filesize
380KB
MD5017796cec4dcae8064f6303f2e3174ac
SHA11709c22b0a24a74b690deb61dace383484c08bc4
SHA2568b8407ca872711857c1efe032f0c71df17fbe8d82107a09953e812a20497e582
SHA512e469f0a63bc649126e0a191dd17c1f5db6e1bbde4b4cec63fe4dfe7c821ff5f1919980ba5bd4962095c0f8c4698ac659693b6ecf1a5feb2832936bc3c47a3af5
-
Filesize
748KB
MD53a998b7d9c41dac3b2896685116ab994
SHA18c7a3272e79fa27017c24905f2b598499a62623b
SHA2565eaca86a3792d40db18e7d1ce39683471bed1e8b169d716101808930728e1ea0
SHA512e1e7e49d4f47c6338e9530b0089c1b78f96fd8e088d7ef2edb013c8a503b86f803ec074dcb8ec3998ca981a5373fc37936c102c9d8c971abc66c6233c6758eb0
-
Filesize
319KB
MD5d324469bd2d6e373ab875328c95322ee
SHA18c4d3d7e0bb3df9d4028a49b64182d016b47443f
SHA256549b190c3722d4774cc7a8a2730f858dba66f063840469799adb449184056f9b
SHA51210a2e751d95422fbc24f5618edac8589d033f19106ee500c83830fb839d639d30f25f2b49ee017767325dfdf833a6e1f9eaaf0c1081c1d339233dfeda9876ae8
-
Filesize
336KB
MD596406518a17835d2c08ea09f6a4f5269
SHA163f2b8ac41adabfc0f58bde2ea02af3ea830cee4
SHA256336b6bfe35680a19b02d583f332df5d0f5dc6fa5729c2910fb1aa6659e6aaab6
SHA512342a9d97fa6747b52e462e302cc865e8ee6018aa65ac3d517d4625cd31cef68412e4df9d28ac10e39ed73801342455635ab99a6e167bf7527ac7acd62bab733b
-
Filesize
335KB
MD5a9f1ffb1e215b45afffe7e454dcc082a
SHA1bcc32731f6fd700496d4445545366cbaa2565220
SHA256a9cff7d778289b25bca696ff4873e45f098be21f8f4fa3105ae7e2b9b1ef95da
SHA512c8e692b0ade3dae78b1bcb7d8e3c821fe4d5fe0759180f6f44e603ecda341a8a925cae5986584e98829007bc56a4744ef0082d1feab42781261a6ff7b7b65676
-
Filesize
784KB
MD55434e2c549029aa898a97f78a65ab13f
SHA10361686f5d38363fdc5f67aa5980b6729fedd4a1
SHA256990b6559fb32e86df8045cdf8687fe7176fb810c18b2032fbb1a093d9b2c901a
SHA512d05d6e89e0f313622692b2173f715c4c84f80a7fae2ca9bc8b1ecdb02b090e5189d40f5777b647e97344ac65a84c284209256a7e1fb45016d170fde0eb7270c9
-
Filesize
631KB
MD59aab1dc6721afb63ada134d9d1bc2dc0
SHA1f0e309e0570e1595709cffc570a799e013a2431f
SHA25627baebb27c345e367f27b2ea8eb5895c2dadadea282a0fa94a1b2057859736a5
SHA5129e04ad79a36fe4142544b6d360c0a5227cd7c48e2b0b091085e8d3a011504522da4584460e5234d705d1a9e1fdf695902102e005a30ed2cb2e021b19cd58a708
-
Filesize
292KB
MD5a5d5cfe69299d29812c9dc473c9ceb72
SHA1768d505ea7678aa2d7f7aba46822de231f1a94fa
SHA25626457724f3431e3383ac833cbd990834dda8e5e76b961ff931d171aca4221626
SHA512c8a8e30e67e003720c2fd20150140370e9e8498e2c385bf7e6cce8406b7abafc20fa249f7c3ec92deb5d86145d59717d17d758350bb732f8196129ca82b1e110
-
Filesize
288KB
MD54795132dc7086e139a2af75a69fa4f63
SHA1e8acbd586ccb9ca0686c7cbf90f0be5cda48228a
SHA2568ef002c7ef1d7207b5b41038f16fef198d2343c0539f14090960d6f1295d8c7a
SHA512466f4a0eb01d2f8d8359016fba96189f152fddcf5c041b05a62c5a7b14b3d93b3f2a4c7eba7e292eb8acacb65afa68b9e9adf4843ef78c410f3d5296656911de
-
Filesize
296KB
MD5cdac79ea10a58cf43ec1e5452c5faef5
SHA135bee3062c54f83cebd26c50718081186023c0b8
SHA256ad97f1708909ba1c2d6119de7536448805f00275273a8b33e743dbf2e7ab2456
SHA512d9b907c229742808561e87fae306b8e65948ed60b21e90981de1761f162cefdfb95705edf375bf686cec15f7766ada2969fd7428f5ac4334ee83d7d1fa8b4947
-
Filesize
325KB
MD5419e3f381b0e0f080ec230a9f1b80e66
SHA1c279ff058f3f3ef086715ea2206f24cf7aa75818
SHA256a5fdcd13f711d4665d1960f512f1bd229dbbacb24c86bbb3773a905e2dd24b33
SHA512d7896ce61b64ae92f5af2774f3a996516d24e89d7cc6f84429cbf3f70aa3d87404fca8c6d242b5a088bdc1a7a73e229628ca7dbec81d6976734632cb5291e9b7
-
Filesize
309KB
MD53a4f9d62b91bc0eeab11f0865d4be286
SHA1c56a98f46b9f0ef8c5180d176cfb7773a05ce941
SHA2563051442a3e905dfdfb8f17f49d12a3722c511faf9aba0fc86d577dac90e3b654
SHA51239a81774c90476e4e8ab80b0784a8923c698040f51cd6acd08a50b5d2f90a7a22242296ca5793ce39ccc93120df3f40eb2abaf6317ffed8aebb986ff28946081
-
Filesize
313KB
MD54fbebc23d7a0aaa6dcd426777898bfe6
SHA1959ce4fa97c24143c3dc28e9420e6d6c76a7266e
SHA2563cda10980a23de97163a2c06b31829cca1ec3da63b0bb0a246126f402c19b16a
SHA512a1c4052a40059dd5a417d87935c9700c3cd127b63ab9191ca62e448b09109762906638c5d80abc0565711425f52c5ec3fffeed87aae70c0888199c45a4374880
-
Filesize
320KB
MD5de48484707e8770f47d27f0f5e2358e6
SHA1014295dc0215191606e40b2fd757a5a637164571
SHA2565fe258168978f52d2b3c6f063c7a7c381a70ac06e128ababe6656375025fc088
SHA512653da7faf9f75477c084267e30a288f52fd1260b77f7d1552981034b033d796b7ef18a6f77214179521213375f4b43a7daf69e4977e487cda90c9d7e96e82e52
-
Filesize
513KB
MD5dcbcbf5867918c54c5f8f267664056aa
SHA1f3b706adb3c222a84cdc92bf97ce26f8aa0042f2
SHA256fb9da2895730be8d82924d01d5e0dc28c454d8b91a1aab556d255462c374bf16
SHA512429896d3e774eeb6f447f9f80f1c148685df728b343899e12e58bd4d58caa70d3b38e264037a720a2074e909e3e3722c8393a21b4f4ced2157da554bdfe40f37
-
Filesize
330KB
MD50ac44c1ad8985cda2e3ef0bc2082fef9
SHA166f721bac3f1ff5be9fb7b926b87341d303a60b2
SHA256ae4a8e4e3706626f7ba53cb395e2472389bdc1319fbbaaca608ee1ae3c918e0a
SHA5125ca7d91b3ac747241acd8b76176b19a62cb44c62d991e2db6631097df9276c277d19d3ca6713e382ee69f61550b5d40daa03da838d80f04727a03a97a0b28da7
-
Filesize
315KB
MD5dbb839665d4d78d71c9d49b85a0ec0bc
SHA11b8662843a1acc58ef120d62ffcd19c764f8613d
SHA25680ab358cfdafe9533005571d832377a08e5df4801a6f61be7aeb2afe626691b9
SHA51286f7e656d140e03f68b0d7ad8c7d9168029e3fa1c8d75cddb2101dbbcebd772dfdab1da3c568effc41c1bb6b3ed0a588f4be50ff307ae14be356ccd101025950
-
Filesize
488KB
MD5d13a44314bcd033fc50fc608ad1ab91e
SHA17abb6cee31c4873b717910fa9c0669130343ec5e
SHA2566615bd59f0759e6af09309b8344c0e7f0c2dc2bec55beaa0afd1bbe09af7596d
SHA5125efaf765533e2bbf3095a05c55b3a144c32cec14812d743a5b7de47b7ebc7429088b7b94bbd498568189ee0c4cf1056f2766ff341d46303e23410cc84574c798
-
Filesize
288KB
MD5335c90be59afb384203afbe08a9d5d48
SHA130e945993e943e1e6840b8020bd78a845dc3b745
SHA256eca3cbaceb77840c7d861b559ee3ceadafa9f7777856112c9bd30b5a8d517b9b
SHA5125bbfc5404f330b047365b2fb73403f5598c696eee0659fe987c0fbacab5a949f38ce5b288bb32702cfb57e15502426a3efc373932da2d01e68bf031f57251af2
-
Filesize
296KB
MD58c427fc5a5eda451f60c0e4e6a2c6034
SHA1752eab30cfb87e90ce5cd887786e115f15a8a178
SHA256178590c5a7fcf0d41d93724de8aa04f4bad7b9cec119a54a4115f96f9219ef3c
SHA512e09599a47f5f5a2295fc13cf0ad0aa45006852eec5956092677b212a5cdb6a787349a12f78c2af0529329b51a87fe0cd614e8b452b2a049af7ba51b893f1c7ae
-
Filesize
761KB
MD535b454a9361898f148f056d02e1adbd9
SHA1c3b0dc8dffda8ceecd0f43d3b6845e5c2e031284
SHA2567f047181c386fceb204184cf02d1ad1859e5293db04122c5c6585ce7bda8da0f
SHA51211d18f6d5ad0cb7ce3b9a4cf7aecd5ffd2fd8a72a65ce48afe034f7b11269cbc109f1fdb9448021218b31cfd64f52c53875cb3f0cee5ce2243938f449ccd7201
-
Filesize
710KB
MD5facf3ab50cf9fd9a08f951a3cf3d42b1
SHA144f9874dc0bf80907ba5f1189350ef741f168cbb
SHA2563e19980886a66ca92ea762b86ab44fac8e71fb16fbf4dd13864840923c9bfd19
SHA5121a32a1f82d92f2db9556a50b05329415d995a3038fad7e21e82526b976e75bf171367eefad6dfab2ebf388862c5f0154de2c7772f6ac617577e61ea1a99bc7f6
-
Filesize
599KB
MD50b8590d79fddc502679b69005576584a
SHA137c6907483849773784652835ff5184ad88107ae
SHA256a06797086a3ae1bd42bd93fdfb239a787d521cbabdda56a0c15aa255def81e5c
SHA512c9f9ae0c139b9866e568246701473d01fd8d190024411c63859574c004befc59b8e2477a3ab9ab48b92f425744ee5e523d0f05625605dbce95d3449acb201ea0
-
Filesize
306KB
MD5d32db9a61c2f11de5df3fe64153a48ec
SHA19d9c5731e0c17600ba62ff1bb9a833602e4eeacf
SHA256f25ff7a18aebd6ecaf56c2b125aaa22a1699fe2ee9cc6f190f6525d824992f11
SHA51243c939ab2fa18bf7009ed3594de3bcfe0455797aaa2747841957678f31410a4b368c5f5fec684d9ee1487bb40bfd8395edabb97312d97be317653df9cfb58a61
-
Filesize
511KB
MD549aaf394d0376e4bf0639fd928f0008b
SHA1ecfb3e22c86323f5571c502f020ddda2d2c680e3
SHA25623752a372251b782f35f6fca4a17dc260159eca4620ddb610f5ff7720d496a18
SHA512e414936a5b36926f9bb4f01c7271c38d6d868c1c0341585b5c73e848928d0a03b5849ae088f964df1d77478a739edd938680b98bf75f10f0a23944843eb2607c
-
Filesize
360KB
MD5c31f5ba58a8a0b114e1061c7c2a8f43e
SHA1beeb19c5164c2ca5bd63a60c0499262ce8467d75
SHA25666468ec740624dc5ca9988e2aea145bbe915333db3327653f130ec4a426baf17
SHA512784f0426e303639e7174bea1ffe83973bfaaf18c7d61544cd4ee92e417442b085f6a5065593d608326ec8bb7374efe1c44c5c6d15811ef2449baa5597b502cbb
-
Filesize
265KB
MD556c3b32e97f3c52cebe29937806a5325
SHA125f4295535a90c26fb9bc476bc915d5805803db7
SHA25670070d44c9e5ec62c57b574837423f849ed363c0167e8019afd49a93c74c7e3a
SHA512207bf51c44900e25d7d2d5a128e11b11f972490221d7c3f8a28b77d0921860f059dc92ab96f687da4a7fa6defc87a1896b1fdbbff31a9bf45dd2864cb78c1cbf
-
Filesize
263KB
MD5c41412769245d56fbd7d1f114f238700
SHA1ff3ec93946677884128267d2d84869e5c6b63afe
SHA25670ea00381aa8ae93ce9f64ae29ad3de0263ee5991861120c8df7603bac540b84
SHA51213ca3d0fd0b4158f2bb751791870bc0a2199af3c39e66c1f971b2cfd6d536d9642ecab82bbe814908020330eb351b4a045e0958a22bdaec330e161b8a3f6087a
-
Filesize
402KB
MD5265605f787fe8886ceac4c0a1321dc3f
SHA170b2aa7e730960e2947b3c25506c18b2419f23d3
SHA2560f6162813ac2bc3598f411a2b18f7a75a96a2f09f379d7a23b9472b5fa956742
SHA512ced708d7cd9daaeee732387876f51a75b55dfaffd3b5fff4949b78c30255e2d05810fc53a4430a6bac5fa50a8e86a13270e6e8eaa08c32cc4d0b428ac23519e9
-
Filesize
259KB
MD5cdf0129f1cc0150880f6faf765c22e1a
SHA14973895ef739e7ea9c22c761ac309896e040eb12
SHA256b2bf6335a15c364a558111ec3abac13d062b8d90bc344fac19a5d2389d59662b
SHA51297b13c8383ad4567df06bfd5fb90eb90cbba802a41c6e431dff64fb3112c915d76011c81cc7e883706f8443f9319c2f6790418c23e3b621f54c911085e95ec9e
-
Filesize
1.3MB
MD58ed87f02b49d385c9d67c4dddc705d23
SHA1b11e39a4fc8d2f3e3d2ba91f9b234e2d520ec3f5
SHA25676a9545b03aed7530d5662ca415904b67b73b3226c9f11b2aa6af3e0897b9693
SHA51288b3949a5ad055c646e21489d2498c293f7d1246b1e470bfd7ee179dc0f166dbc437f2f7b650963f758a7c9a4440e1583389f2fb2d3e48b8274f501714dd2d36
-
Filesize
571KB
MD54d3e060167f22d874db7de1907e1608e
SHA129ca3b607a7ec064fc7c5eb3575345955de9bdf5
SHA2561103fb071b2a5dbbe6bd5efa4514a3d9305aaa31b3c6dcb6fac5b7fb8b0450af
SHA512840bb4bd81760337bf56535d64b6212424d30e522e75ff6011c2ed9b1c4aec68d0d04dfba4274d0e24b9d2843d6f7ffba2253779709d16cc2f4d104af8cfb6f3
-
Filesize
6.6MB
MD5516ed09a7c903d61961c81b88e3337e6
SHA18a18de3e864db969f6ed9db8acf4938abf695f9d
SHA2562b67bd37187336b54e0566bc1ecb3212ce9913825496eb255ecf71fb65e9c247
SHA51215dc63bfd81f02dd66dfd6fdbb8244b3c6219184fe4fb6967b9fbc7d9f57ccf58f7ca0f8207a6606f7c29ae3e7f1d3781560cbc2768c74340179defa9bd84182
-
Filesize
316KB
MD5cfebcbafc1c45ce44540d6cd33f8daf0
SHA13a858d45ca6c4f7ff8953123db4ea64906eeaa7e
SHA2562bab5d4fb05fb1f409969a7e4889e554a5aa4d0998d5524e6bfde248e471b818
SHA5122fa58dc58e371b95673a3b3404afe2a760eae606077af4a2c82667b14817d78ee3d18b2abd82a12c24dd38775beb37605104e891bb93e3cdba9d6e4daaf72600
-
Filesize
3.5MB
MD5815e5e4df9abdc14a21d61988174e9e1
SHA1e5246e844ad100fc07263c50f4f6f9c6e5c854a7
SHA2569dced5914f2c51948208aeb91565213a1ed089810a8b5fc4ded80d59b7cd496f
SHA5125eb41df1b155e498c65e9288d41488b9a306c39ea44d81344d83be4eb654734d6f9a16b858da0710a96387c386f66f1d414f4543b4d2936dbe95ea42a1672b39
-
Filesize
6.7MB
MD5bad3a80c0bbbda22c237407afe0a82a4
SHA100cfd3358c40c549d4709f4530de277ec349edda
SHA25659a0ad87f4aa0bbfc2d1462ca7d5e760e2f6f2911c6c31f0fd450a9bea7dc684
SHA512110a39d7c26745167d31edfbb065818afc68cf6bab273f967852024bbf7c4566920f93eb207c4f17105386f18cd9289d35ac66eef3c1ed5f90e5628568222fb7
-
Filesize
586KB
MD5536b9e60e97a67734f025f9dcdd39401
SHA1e00ee462ddf5e3237cc0bc57a63089d5767b6e60
SHA256fbdb99bd6921577597e0efbc816e490efa7ec2685a42f8a9b091af7b68cae7bd
SHA512cc18ace28631b2f22cf8146a9e9f36c07d20805558d70e48939b403877d985b2287f3432e3f6214fec8eb9bda34317addbb944c9c2fb697f5599455ae54f018a
-
Filesize
448KB
MD569a9f11f3ad1d2e487958efe5012a262
SHA1c0c39ab3b3e34b021d988e1052ca2b1a8a3478b0
SHA256f753e9159fe3f3f839a3b72c79fa6f9f3072590863aee9053934a2dd0ed11977
SHA512fe4dfa34b461f141b3c1a2d19996daf8e80c213098865eb9a8cc5c27c053a8ab9e03066aca5a996f79b1e9f29b52c136ad59e799a8db95732e8ccfe6f44e25c5
-
Filesize
47KB
MD54bfac8501c72cdd860ea754d1d580cc8
SHA11afb2418f3f31e924519eab2b172ceb41dbe15c2
SHA25667062dee20934c4d297aaf1dd96d97a7bee8bca5c9e3cf3c6a18cae60e6ab191
SHA512d622736ee5ebe22dd48ccd81916a400f4ed519bdddab1fa9b466e5b7012cb15601a63cb0ba5bd897ccf33aaba917e7338a0cb4339000e5f002d266396fd22511
-
Filesize
2.5MB
MD56740c776d5a9b0f49e531c6e2f25e4fe
SHA1da2361dfdd2100edc901b17a591ac2881554dd31
SHA256c50deb6aa1f8ad6f7884ae46d576eac6f0195f736b15bad77e914640bf05c080
SHA5126efbb8fc8bc65d3a07e55ba289d0f5bc65e7aa7c787dad7b3342b6ae0802c8b70bb1c04a0ab822b3ca442fdae3137bcd5e3b3e7d0e378580b9192ffef7e26871
-
Filesize
247KB
MD5656be6e53dbf0e10b8adc5e5ab3bb595
SHA18cfdd73f37369ebbde7ed0d4ec4531cdad69365a
SHA256bea448597050fdc21bd9d468e4122d693761ff3037babc5bcfc93254b9e075e5
SHA512ed6f41fc3d096bb634ed48f8707f0f1a8be0b25b08565888f49c3ae791c0fea3173d71ddc6ff6e44567c42e3750379c5337e643b05efb9ca9cc2578afb7a2eab
-
Filesize
1.5MB
MD555468c0bfbfd9249eaf78fa6dc5559a5
SHA1892c6e569afcc196ed06046934a27f18874c597f
SHA256b19a7bf114cb8a172a81cd39ee1710015d71baff5858cd5e6e443ac92be3bc5e
SHA512f940bbc2a9fdc9f8e01fb57366a2618d2e6bdcf5383ef47380be8045cdb9713b8ebfb1e44908bbc218de5e2b19c1de7a3a85be56b924998fda299a0e0acabdc9
-
Filesize
4.6MB
MD5b50440cb902905e2191445f138c57427
SHA1a7292aa7920872d67470f1474adc3a1f0430086f
SHA256e30411e62b5637ceb58f75eaf8b2de6d35644723fb55743a0a83bda3bcfb8b6c
SHA5127462faff7ebf8f4eb3fefcf159b5bcb256bcf585b349350cb058071aad61b96fab7b47bdb43d26b352008657473ed40afddd23421a23c8eaf9259e3790b3b775
-
Filesize
561KB
MD58c6068a593e1a88f4fb9d804d5ea1fa1
SHA14bdc71873acc61159c65e77fc35c962e03a484f7
SHA256f3b5e7f872739d9dfe2cbda07d9a4ebb3c17ea26e5fbb36d2b3e0953a9fa7fac
SHA51296b9cc37b7404318cba80080aab40ba24eb185c38c03b28352c62d61c35e7c674d94f8f2a21724fe092f28954214235f9ce0e587457e3a1935bcf5e239741f97
-
Filesize
161KB
MD5652a0ec5b9d98955bffbcba3ee8eb3a4
SHA12d7c8d85b0059df2b429e40f03da604c72761c22
SHA25613f67a42aaafb7c1f6dadf60387b2769c8344299607b074870dbd6837ef7b2ed
SHA5121a8968de3874006c0dd56e417ee381191bd275eedfbb83d665ab84997824a532ab44f8e32880ab740a7e15034b8ea53da4312729adfc2c213b795be594558e8b
-
Filesize
2.7MB
MD5304f226dadc5468f039fe02dfab3046c
SHA1f50b4b6bed200b6eadf67508fcb6a7c68f1f5b13
SHA256e5410f5680c636ea57b4dbf730e7d1c2c17b43c43b10cb020ab254a1d793ea0a
SHA5125e6e82a3ea2c7b616bd17af3ec0ecc3157525d0d530422a86474e4fb83a0ac8d7052a56c44646238ac19be41bbef9d0c7543a3ec8752cbf22d384b30ad14aece
-
Filesize
186B
MD50375514388232f5be7c091ac5c7ff57a
SHA1f6209d8449aabac78792592be9ef4386efe36514
SHA25618c9e99ce849265f7cb33a3ee3c88c3e4b074f1a56e8a3c7fd477194429b4f69
SHA512a4699b8ebf5f19aafa75250369533e43ff8e86e360fc99917e0fd5989129958de72b4b23e3e43474bc25d8a6bd9db8cec56297c27a50753231491428bd6c2d7b
-
Filesize
370B
MD558843eed315bd471e896d83a327fd703
SHA134f68ed9da8180cf6e439626f0b507932334a7ea
SHA25604e35a970ab3337475360bfe04e2df90aeefeb79255e4ffb960445e0fc9156bc
SHA512b67ba5c36c9e6d952dee45833cab575237654318346e358eab2bad863ef8029336833d36b45440f295a57015c9d4151ae8e7f460e0a20538cf01d8d1f05390bb
-
Filesize
204B
MD5a2b0e4ceedd0a93b7377dd74556dfb1c
SHA16c36aa627764d3d35852a4563c3e8280904b17ee
SHA256c5f4bc276e7573b33d39b50158e80b02592db704ce66bffe2050cf6846d93742
SHA512189de4e1e9eb25bddd8ee7c45733b69aefe4bfd58e2385aba9b32a63403223f8d1fe4c76a469a09cb32698bf819b4e1a9668cd962cd55320964c89588820f003
-
Filesize
36B
MD543ef773bdcc6ae30fdb37d142f2deb32
SHA167875ed4ecfbf9718a2254e3daf1092b89f59e65
SHA2567afd7b2c2b2ee7d059020d9cef40cecce3730a82f8a906856003e2a3d668f4dc
SHA51278ed8ab06974410e6ed1c6cc046c29739a5aa275d1c7e1144072b70f3f7958bb37a39b1036df7b0724bd83c2e128319eae6a731bbe20e892cd8198a21bd6b8aa
-
Filesize
240B
MD52ce7ea0c42ccc0453eb7de7b85ec84e5
SHA1d819de68ee79889f1d29cf7baec6a95dc464a54e
SHA2562a185e3fc5bff8de8a66b2429667543fecb9439a1b577458672a65e4214b4aa7
SHA5125a905a1c7449312ee03164b8448ec9b08027f6ceaa9e5050ab7d587449b0325290afe22e2916527d99ed977eda7d5eb2a59e1bc62b8d7efdb7c0453bf17b16bf
-
Filesize
276B
MD5a45d4a75a0b0c2f15e521c14db5d5189
SHA16da74282ad2e5ecfa9e77d198442890273595d61
SHA256b9927f735dea8feb96aaa83f361de4015bb9213cae6e65e90bf9058730fe10d7
SHA512ffe4e5c788238be4211776d982f0d04722d22b6f717a9706ffedc90fc7eef9a2bcf39dc8b161e9d1bd816ebfe48d0cf90b43f6f150ac8b51c819055f90160d60
-
Filesize
88B
MD526f906b7dd866714e02bdabb9d94c1b7
SHA1dc661e3aba07248a57015984deb56d4ffc8f3168
SHA25602acb4dcff15c915ed60dee9d6331802d949aa1a16528d188258fee5d820e852
SHA512e082216039c60228e84f5a7602029117472b81c0843b19b0274ee3c27aaafecbc943333448e57a46573dd7495db81d4e7da13fc11fad4f22043415c4ab4125e7
-
Filesize
200B
MD5144839902459d494d9cf9467ef8a9e01
SHA1ae0ca4dc5da2a2194c656bf526f62df053f5b4d2
SHA256adf56f62c41dda6fa0b69252dfdbb49b6cc192142ae66719a3e0d402f22d3dc4
SHA512cb32120a1d2caeea7f73bb04d8330e476e6026e05a379ac0b77d16eb927a7d5d6b4401ddf337125381e1afea0a778be536596f9a076166b2f5a02e10bbcf1268
-
Filesize
234B
MD5269a48c36453071351a0e7dad4b6fbc3
SHA12cd2a936465d22bac582135f2f7928e22eb421ed
SHA256e67290d568df64f961ccd8e3ea4a384f96998e6975961d988ba32beb0c717fbc
SHA512d901b9900140a558b278d896e648d8fcbfa8c6985237977c3826b107c5148ce04a0ce4a9d741d3bac6e861c0e91008a5cda18006a03d0e49f9bceea3029a0fa6
-
Filesize
158B
MD51d15fd94b7ae6ca8496fd3d111924445
SHA1cc7dddb79577f24a0524c462342e99230fed8e11
SHA2564c0f502eabb4b97e6b4a34165131bbe3da4d3fa82cf983d73696183901215def
SHA512e0a4d3bf203859412be4e4dbf72cd0a33d00b804022c6152052a5a382bdcca4367b7530454983fda15c13f82839833de616b5c3e360d2d1b4b3839ec15241421
-
Filesize
158B
MD5e61b4005cb49563418ba88bfafdd74dc
SHA116d88ac7fbcacb59904abee586f97de4e61ec6ee
SHA256c1f02c9f988b97326922de316b3a19421e95e11d6df8c2a9844ceb60d51d8e9e
SHA512b37287771f69035e6b471abde49583ffa95a59e54adc07c1d0b776df1ba6d706fdaa1a280a6d377f4d99d5a4fe025a3286dd111531c585ba79503eff6a466da5
-
Filesize
158B
MD5e64a83e784431bd6495fb7b704121cb5
SHA18df812e710ae0f6f79565df3bfc164f8413f935d
SHA25624af7a8f151cc18328999b8b507f96af76344393395f3d1436909a9e686b3c59
SHA512594869654a24237f172fb00a1ff287b60500265ad6a2b0bacdd895cfbe647aa5c4a79358c40cf3727ae21f754fd706c7b7983759e33eefe5675f32be6146c679
-
Filesize
234B
MD5e8b188d0561bdb6119faab46bb726e08
SHA1980a1fe6e2004aadfd351b2b034c4040ee53e38a
SHA2566ef31658d2730508371745fb06c0c45d5ea7c1651fe4663d3a03d83eb60fe3d4
SHA512d7941dd15f270cb068130df6fb9dad11a6b9de48c186b26306e56dd291f8702ee3b76c4d60e0bfb82122e18b8e54e555d6dcf2354a89414bad9fcaa6600b0f10
-
Filesize
158B
MD52623062cc09f2920028fcdbe15f9fda7
SHA1e42aaa3250d922b79b1e904fc76dc810ec7375de
SHA256ed7ea610c5a2facbccde1622fcb32ea22db5b6a8cd3dd31c692358871e7204b3
SHA5127db04dffc1958e47602abcc3742dd56566581f9e98ceb7cb3d730eca28e16e156c986fb3ab4d487562ac7f3052a0b2cb736dfcbe38db0c610aeaec7d6d4529b7
-
Filesize
158B
MD542403b8ca69c8b4a1051ccf3e3abd32c
SHA1b889f8d0233aceae0dd65bb5936248054cd56042
SHA2561da6d9a24c467102d058597de627fbeb298d54d0ed976212009365969b63841c
SHA5126332acba0a1eb88b7e8f606a2ff4cfbad48fa1dec4b98c5312e28117fa3a9617a35508f4b7a84892102d832510ee6a375feae1b70b13947a4270bd98cc688853
-
Filesize
234B
MD50e0146eeaa9a7617cf8668725ee3da26
SHA18b622d863d97868982420c408a244ebdaec649bb
SHA2560f8e9bf5b65dbd7462aaf168d6ff05c9d3eeb3ad24cecfd1302cb14f1443776d
SHA512ad6217d7274e4bf28a4730aa358c45d6386f44f7f2e9bd7c395e3918952dd11af8945d4bdf46ee50d7de61c3c21ee2323888b435a464f158c8f34d3beb8e4cff
-
Filesize
478B
MD536c1bd4a434f1e600bcbafe70f5f096b
SHA188f1c93cea8aa1081d3fda847b43de2bd1b68c13
SHA2567695bbd2ff02a68127f3fe91ed60d10515ad54d5cdcd2f348bfc9ef1c7806cf6
SHA5126ccb704e24b86e90d4942d672d33cf2d26b74c0bcdfd822202d10203c56fb73029b13e98283cc568067dd04280966a6736212d748ca81a5986a1d0473497cffe
-
Filesize
234B
MD5ee39443b34e622a2b5587b93e571044f
SHA11dbf26e3cdcdfaad7c90fa7cc0744dd39b3d44c0
SHA256241f2a941e5f2b9ae6ac7b72962f8dfc73628ba3e3e5382e07e961755e208533
SHA512c8fe24d9d008122e3d87d3afe98ba3871f4e05c22671d53c7eed030e99e193d8f054f0c5a1310c59f29016294102f77140c2c877232b76dbe1e8cab811cc50fa
-
Filesize
158B
MD5520e12153fe3b6f99fb4083668070ea4
SHA16d997386e1412325da74bae22cda65c3f91b6de2
SHA2561f83531991aecd23b32ea826ee12249379ae0f78d1cc90c73aa48e685b5412b6
SHA512803416c522b174bc6d8b550e0b8ce71bf759bb7946e7d214ffd6ce39a41ee3000ad05835c15b3822d8188bcfc4b49a29d20a35ed2b2789d15462829aeaf23a66
-
Filesize
158B
MD5a74537c1cbf5d6accc52c58c31a402f0
SHA16d70163ee3202310468d85b3e76c699d5e35d15b
SHA2564189610655e2018b8f86b488b1cbc3c655e158cb199a843e17fdb8935aa13ee0
SHA5122e838b994239099288f205926e77952a2de38cd2b6fff097d99e317760bbca336ac1f85a968874afd6431167e35bf04ad94e00de205898681271e5852f01ae79
-
Filesize
158B
MD55cec234205f979a25551f743167f88f9
SHA105ee6e2a7578a59bf77c5bb39e1fe813342040ce
SHA2564b20e63e99609d97bbb94813242979970e38ecf392b0062e8446484a7e7a4685
SHA512021c8c5d10095dc6451fe15df3bd25662a58b2098f96600644cb66ad4b0f9076523339f24d2d3e88e833fbe5083234392f0250c797105be78c5886abe4265152
-
Filesize
158B
MD5516800faad399e33754b5ac2b7f70eaa
SHA122e707b2c9d13b9fa3c88d58a0eae4cd4ac1351e
SHA2567ab601d8fcc9cb2734435f950db0944d7c0007fd375ef3b2fc85c048b177cd2e
SHA51229ea3cdc37cd03d09674e348940f2902822c4c5fdf8132143188243648b53998740f6a39afd2bcb8530cd98d149c66a414f66c43d806414d83a0e2706c110558
-
Filesize
1.2MB
MD518a56639759fae7d4cb1f09d52d3e7ee
SHA17197845f296c3c22956fc2e08eb3831f785d3ccf
SHA256bb7a4a5a1876c82573416be7fd1dd2d07fd8388b50f6db578f262374e4dfb47e
SHA512b18f433944ae36335006a1ad96c4b73178abd1f2ac4c43f46df9dbdfd82d69bd10dbf2cd252248f4a24ad57f9d83a2374358bca6704b9a16bb12961678fcd337
-
Filesize
234B
MD54a508ab25179a361c48cd92adf8f3c8c
SHA1aa4e782428399d4f4f19733e39b6d3e5d1b2974c
SHA2562297262ba535fd6384fad6f8cf9af4d2e83a9db40bf00d3157e72c9fbc74e1c2
SHA51285d064cfe53f304ca44afbbc4f5c9057fa2ab1e6c93b92a059de2c32d14065f4b5182228e103c9ba505cab436ee59bfccc47cf8884381ae3b6677b5947482f4a
-
Filesize
461B
MD582543c1d0a3a2b820a7c0496bdbdd187
SHA129ab1b34f34e71923fa901f6691217b3213a2556
SHA256d5a1ce85c3b7b6ba48c0735ed4bf70ad281d5525eaec07e3c8f075101e299412
SHA512887664a049498b21ea0b5d5d49181bfe2e2bc7ede95f6274f1783cf173c5f5c68b1b705aeb2a683479d50d86174f08ac06288c160c4095b0d02b0e0cff49f129
-
Filesize
4B
MD54352d88a78aa39750bf70cd6f27bcaa5
SHA13c585604e87f855973731fea83e21fab9392d2fc
SHA25667abdd721024f0ff4e0b3f4c2fc13bc5bad42d0b7851d456d88d203d15aaa450
SHA512edf92e3d4f80fc47d948ea2f17b9bfc742d34e2e785a7a4927f3e261e8bd9d400b648bff2123b8396d24fb28f5869979e08d58b4b5d156e640344a2c0a54675d
-
Filesize
4KB
MD5d3cd09e227bc0ff259f984c7d554ba20
SHA17a313e726c455bb55034c9acf029e45d17b8c48d
SHA256766fba1de3d2ba9d8eb3b960df3989e9861bcaa708864aaeacb3849168acbdd2
SHA512bc551005b8626ad1b28fa946c988933450d68ff46368c52d10a36ec73935c32ebdd1fa8512e7cecf2fbe045aaca8b4dde9fccf28c982363e80167515f29aec0a
-
Filesize
4KB
MD55ac325e585a13110b6930371251ed221
SHA168878ce62f7939fac285bbb76b866b1a2892de52
SHA25655964d53ffcad4aee31ef90edeeb58cc4f9c3316b9174782d77ef89da046226f
SHA51209c4cc594ffa820ee467f2aca7434cf9edab74a426ab48864d7104b5267d90fb12729edcdc0a8fab27fbfa3b0486b727bcb8ab40678e51937c496a7774021d78
-
Filesize
110B
MD52da3acdb1c8a0c20d2049e13f4a53d4c
SHA11f75c962637a0742a55270d24e2928b51090c82e
SHA2560a6d95998c79415e0f408d65f53e887c57778f3703acf1fdab78829547c157ef
SHA512bb2718465ea6b168c1b747acd1520b6a7ee468d9c07142ced9ba7dfadba4b1406d07b9cf39dc3b4dfc7e69e55ddb6ef443a521dba672186c7cf34fe4598f1d65
-
Filesize
355B
MD5478cb59c5ff4af0b6d4163d830ee993b
SHA1c512b1882f06a4daa79bec49c493775e04d5f1b2
SHA25623e7dc5fcc46117312bf6c6360a8afd78dbbd3e33ea26be5660039de048e720e
SHA5120d3d1f5abdc8eb8c40bd32f5d47a7d551ee676f4ec2720499afe392fda60edc65c383ddcf47da057f014d12c35709da40a4f0125f3451562127b0c25a2e17578
-
Filesize
679B
MD547d9609b652e64240ffd873eef3f8dfd
SHA1d32968c2ae27e615811a905b6ac5d47c1c4566e4
SHA2568898cb9132e081ea43011554f887e29bd4a88c5c5928923dc53a81796e6747fe
SHA51282653690c2323f709a169cd1472e41e1bb09cecee5f622a691b2858279fc83120672ba872595856223d3c67fda299ad273749c407e9910b7b5657030bf403707
-
Filesize
15KB
MD59ca088936ed71a1ca2ad95b25c380fbc
SHA16d07792afcd65f5371b43caf2a71a52b48ccf7a1
SHA256826c21124496131bdc5ec2c2b46b011ea3a78bb68a90643a7770bee733693521
SHA512e5e76c2f1585299cf4b90669b05bbbbbf7feaaf0482fee9ec2992cffafc5bc437b8939d4e65d8aa335b54d301437e5cf6def3475f17ef30bc5e877308b594d87
-
Filesize
1KB
MD52e68b4fbbcd6f27da2ff5264d63d4952
SHA15981321942032b4ad50daae02d613a9308b09e48
SHA25675e1fa41330e6e999c7d956d51b28bf854e5f3d6b1936f415bcc2d43d28cfe23
SHA512e84f56e941d68318f87ab928f065df32bee2667010fa00ac39ee5e25e077a14b78a34652d8452b8f2ea865ec382d06015b334bd1ddb585771e90d4f051907777
-
Filesize
1KB
MD5569747d3a9927f003f618b7fcfd72cc4
SHA10ca5ecf1c7e4d5c44677a599cd70dcbabc26e0af
SHA256cc0dd19b1fb76376243e510450dfd937834e72649f30a3fdc1ed7cf298742a65
SHA5129f0e25eb601145ab89053e0caa5ca6e545c7b858fe97d09746a36737658eeac817b404db1f2ebc1cb0b93777b67c1dc10ef2575ff329a5f6b4036fd0f2989a8f
-
Filesize
1.2MB
MD5fd76a815f6947f552574386fe15d52e4
SHA16461cea03a4d1339474bde70aecf7866f0337a9a
SHA256083e4e6202c96ecf6e1202f08217c66ced4d3349d3030ccf5623a36f87eb8982
SHA51244a4c6072acc6a2a204ab64ad7086b55f4952604d683d61258c54440d22b99deec40201f835c417f50f715ad45568acbcb6dc222a320d7e12b4fe5385038d646
-
Filesize
10KB
MD576292e26319a225940e11dca12cf2e5b
SHA14bfd70cfce6bf51ab81013134e22f33a800d7383
SHA25625080df2e0dc0fcb891bce5eaad3b7b54847b54a9fa1ff9ef2d314b5cb7a7ca9
SHA512f39878cad5d44ad999875aa7084210e875345d5317b184da765e383cc01116bbaa1075b3e0af420294b0ed8f70820f5ffc73cf2431b8f70ad233a52f1e39a3d1
-
Filesize
1KB
MD5a94773fd867d0cda1c63f7f0a7310dd3
SHA1c53eef947b7168c0b2e2c9e2f5b8f87a93e7e97d
SHA256400b03de5d638fc44f763299d3442155f56f55d6890fcec7beea43bf3f01fc68
SHA512f2e0d26a8c3ca56699d4dcd76a8e5d2f80ae01bc337da8f0950155597ad8901be70e4a9fe4b5b7410576c1320ea66862c13c0b8bc5dd2582f9fce2ba834cdb13
-
Filesize
79B
MD5eab6dcc312473d43c2fa8cc41280d79c
SHA1b4e9ec7e579d06dfcaa5ac616de2751308a153c3
SHA2560a27d3c9100ab7ab6f03c45daeb0f0cd586f3aeb59daf7986e853f9614e954fe
SHA5121ce0fdc237110d644bcc8238f184554f25813ccf7142fd312ce96fbb6659081db677b04485bf66d52100136da6bb9688e48b1287455725c7b4950153aa2a4595
-
Filesize
6KB
MD59404c52d6f311da02d65d4320bfebb59
SHA10b5b5c2e7c631894953d5828fec06bdf6adba55f
SHA256c9775e361392877d1d521d0450a5368ee92d37dc542bc5e514373c9d5003f317
SHA51222aa1acbcdcf56f571170d9c32fd0d025c50936387203a7827dbb925f352d2bc082a8a79db61c2d1f1795ad979e93367c80205d9141b73d806ae08fa089837c4
-
Filesize
715B
MD5008f6b65dc7706c89b18c530c547f96d
SHA17d74166addacbfb8703dc219c1ed6153b2413606
SHA2566a49a9c85cb8cfa613e48c53bc65027caad71ab43b049f388b2bb79b0b32ba5f
SHA51236bb80d61e408617f7c51e46be893a443f9cf896784fa2f054e45242330c77052a9fa7fcced1aa0ba0fca70df1c6289c3300d198e0f7ec2bf1aa6eee515c71ee
-
Filesize
269B
MD5f07c4ac994a80bc7deb85998af501348
SHA1c26a1f7d6e0aca9aaa942d192407c0a9b0dd0c0b
SHA25686b5e6ac5221e58294c5eef0c934d6e3aa867c99918ca5df5c0007e6450bebcc
SHA51268af45acc13d5741acfe10052cfe553ff5338b2296e94d415cf511fbafe85442b2821942f3d6e305540847155398b3b0a953154f58b23e333a38b27559d2d629
-
Filesize
18.5MB
MD578dc9f08202382db76ecce3d70a7107f
SHA1110a23181673ba65356b953f28e13e5382e6da6b
SHA2561f334bd39e9e17919c8dba82b2eaaae1a45154c574aff195b1c001c5fc1cb159
SHA512c37bc98958b830101245ff422aad635c040fea0ab379556c870246964626073921440818a44c4fac5ce56d290969e3e6640f56f734cec74d986a793a59fa1be3
-
Filesize
152B
MD53e681bda746d695b173a54033103efa8
SHA1ae07be487e65914bb068174b99660fb8deb11a1d
SHA256fee5f7377e5ca213c1d8d7827b788723d0dd2538e7ce3f35581fc613fde834c2
SHA5120f4381c769d4ae18ff3ac93fd97e8d879043b8ec825611db27f08bd44c08babc1710672c3f93435a61e40db1ccbf5b74c6363aaaf5f4a7fc95a6a7786d1aced8
-
Filesize
152B
MD59f081a02d8bbd5d800828ed8c769f5d9
SHA1978d807096b7e7a4962a001b7bba6b2e77ce419a
SHA256a7645e1b16115e9afec86efa139d35d5fecc6c5c7c59174c9901b4213b1fae0e
SHA5127f3045f276f5bd8d3c65a23592419c3b98f1311c214c8e54a4dfe09122a08afb08ab7967b49bd413bc748ce6363658640bc87958d5e0a78974680a8f9beadf44
-
Filesize
62KB
MD5c3c0eb5e044497577bec91b5970f6d30
SHA1d833f81cf21f68d43ba64a6c28892945adc317a6
SHA256eb48be34490ec9c4f9402b882166cd82cd317b51b2a49aae75cdf9ee035035eb
SHA51283d3545a4ed9eed2d25f98c4c9f100ae0ac5e4bc8828dccadee38553b7633bb63222132df8ec09d32eb37d960accb76e7aab5719fc08cc0a4ef07b053f30cf38
-
Filesize
70KB
MD54308671e9d218f479c8810d2c04ea6c6
SHA1dd3686818bc62f93c6ab0190ed611031f97fdfcf
SHA2565addbdd4fe74ff8afc4ca92f35eb60778af623e4f8b5911323ab58a9beed6a9a
SHA5125936b6465140968acb7ad7f7486c50980081482766002c35d493f0bdd1cc648712eebf30225b6b7e29f6f3123458451d71e62d9328f7e0d9889028bff66e2ad2
-
Filesize
41KB
MD53fa3fda65e1e29312e0a0eb8a939d0e8
SHA18d98d28790074ad68d2715d0c323e985b9f3240e
SHA256ee5d25df51e5903841b499f56845b2860e848f9551bb1e9499d71b2719312c1b
SHA5124e63a0659d891b55952b427444c243cb2cb6339de91e60eb133ca783499261e333eaf3d04fb24886c718b1a15b79e52f50ef9e3920d6cfa0b9e6185693372cac
-
Filesize
19KB
MD52e86a72f4e82614cd4842950d2e0a716
SHA1d7b4ee0c9af735d098bff474632fc2c0113e0b9c
SHA256c1334e604dbbffdf38e9e2f359938569afe25f7150d1c39c293469c1ee4f7b6f
SHA5127a5fd3e3e89c5f8afca33b2d02e5440934e5186b9fa6367436e8d20ad42b211579225e73e3a685e5e763fa3f907fc4632b9425e8bd6d6f07c5c986b6556d47b1
-
Filesize
63KB
MD5710d7637cc7e21b62fd3efe6aba1fd27
SHA18645d6b137064c7b38e10c736724e17787db6cf3
SHA256c0997474b99524325dfedb5c020436e7ea9f9c9a1a759ed6daf7bdd4890bdc2b
SHA51219aa77bed3c441228789cf8f931ca6194cc8d4bc7bb85d892faf5eaeda67d22c8c3b066f8ceda8169177da95a1fe111bd3436ceeaf4c784bd2bf96617f4d0c44
-
Filesize
38KB
MD5bff21faca239119a0a3b3cf74ea079c6
SHA160a40c7e60425efe81e08f44731e42b4914e8ddf
SHA2568ea48b2ac756062818bd4ee2d289b88d0d62dc42a36cb6eee5bdd2ff347816c7
SHA512f9e5baefacae0cdb7b9c93afc43ad6ec3902b28c0cdf569e1a7013f4e5c8dfb7b389b5e2bc724b4ddfe554437320f4f2cc648642944c6f48ad2a78815acd9658
-
Filesize
88KB
MD5b38fbbd0b5c8e8b4452b33d6f85df7dc
SHA1386ba241790252df01a6a028b3238de2f995a559
SHA256b18b9eb934a5b3b81b16c66ec3ec8e8fecdb3d43550ce050eb2523aabc08b9cd
SHA512546ca9fb302bf28e3a178e798dd6b80c91cba71d0467257b8ed42e4f845aa6ecb858f718aac1e0865b791d4ecf41f1239081847c75c6fb3e9afd242d3704ad16
-
Filesize
1.2MB
MD5a89adb5c6831791f02042e5c022fa699
SHA1980cd42fe8e5cda2340c0176bc4cfd968becc2fa
SHA25641af50fec498894fc44367be0db8f0e7a589e8f80a92a8795848fd62b3ed3faf
SHA512287951036b70db481518a2d8f35fe290f4d12da7bf20c46cc14e5208a10bcee9e8331877568399ae1f1a26a55fd34c8342acc36ca495036c1309837413900067
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Filesize264B
MD59889159459d400f7a6363ead2475a39a
SHA11ec5c8825901af6cada84fdd98ed24cbd01c9970
SHA256f2bbf7c29c2129ccda13f0eb5c3556888656d842803d450fcb24b0264abc0c29
SHA5126fafae4b643d87b72e2695ea6de78aec4355133027d86c28a91efd7b7c14504f87cfc949e14dd882c4ba050d75b91215e34a8de4b56119f11dd1b8387896b089
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Filesize4KB
MD5c45b625996f90023ad20e7730558387d
SHA1d459d5165f6401e3da445bf0ae6c19665b762396
SHA256558bbcbc069eb4025f9666fbb13105af04c72958f4612d5a8794735430e7e54e
SHA5123704efa333b2693d53ffe9f59b42bf2da1ccf832fb68822e2434a115f2c94b7e795709dc73a2c7a2b7deed7fee80e9e11e1241065c567215f0d0e98562cbcd5a
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Filesize4KB
MD50e71947e8d5ed449d4552497392ad3ac
SHA12250b3f0b18366f3a5c63c124a0d96df19f581ee
SHA2564b7b8d383ca2ec9289f746a6e1b56b85873194817d77f05cd7bd9bbc882b17b0
SHA512f344bdc0f77be2ae4dca3a558dfc8cee5451c111aa9c1b0fe67deec2184b014eb1755fb9e8456ec1fe4a116467dc6ba2ac94a1a0e95511da6723a3b39da4e9c0
-
Filesize
5KB
MD557f588648d901c6489dbf925543409da
SHA1b8d51fafa1818edc2fd1bb42ac5db01746e4cf81
SHA256b4e7012bb9952527bb065630ef68bbd9d29915bb4488138e21983168b6c37170
SHA51234460027957e1fffaf48b687d0cc3c74e624cecc5363f6f2aabd0d71ddad62b5b7af06cb10ddbc36549baa311eaad47b4d298865acb1c290994c73c27ee79630
-
Filesize
2KB
MD52a08df125325f92c31d0a8fe65901fc3
SHA146f7fa45e5df7589555a7905e2651cfe43f92f75
SHA2565bd961bf84796c4764dc5817b6c2e6cd68d8e3623186eb0f947108edfdce1b13
SHA512ec0447fefb0e5527abe242bc5e0a02d37477506a08f60e31f86a0e16593ab225297aea4e15d356ae6a6c4b5a2b6fcb827645f7aff07c243b80b722b815f23bc9
-
Filesize
3KB
MD5df209c5e1c2dd9b3fdb6b61966365675
SHA1d51c121b348665ad633271bba23d925ecbbc4000
SHA256a6a5c9bfaf448c4008ce7a3db86bf6992e9a7b955027dac0367f39885410334b
SHA5123d15d5f2bdd3c729a3207f59c62a9468d4c6c1be3269699a8962ecef139f0d439e0fd3d5b1a2d615668f8ce5a75eeecf66eb785569c1cf85afa0117858b2991e
-
Filesize
5KB
MD540375c19be8b5a2865a11469b26d1bad
SHA1b336294084cae955e1dccc0b6a993f8b3f00485c
SHA2565cac8213f2f06da7d4150f6eae2edf702365baa459cc120a72bf890c37baa8bf
SHA5122159d2b07c9cdae92c36272380cb198515cdda8aeabeae6864ec9cdfa9695de20b0cf097e137e4ed1467345f330eb23a5678312d533a8f267c6876c5aa0cf1fa
-
Filesize
5KB
MD58d9a63ded260eed885d03f5235949fa7
SHA181fcf171dcd1161e11e9a402a2729427c2cb38d1
SHA2563b8bab62fef5406d2de373bc8e44bb618a95256ee9ef5bce58b943d4bcd15abf
SHA512d4308e562a4053ffdd23a87d26efca2d43985c8ed4d379337bcc84f529a4816f74b4a938ec3bf86780c5564acd35df57774adc7cd3e1a37582f36565f3ec23bf
-
Filesize
6KB
MD5660bb95a8d9994e5a0b1f1c173a45ce5
SHA129b62f43bd3b9ba9f130ecd264bec983471ab5ec
SHA25660610c5050a9cb4159603f9a7a467dd32be6db4fb9c5a71ab978d6b5f81614ef
SHA512b79c4f78031ce1c36e6d2eaea27bb0328bc333c7659acee211b55b480259bd6706eafd68908886450eaaff19bfb752e49cea4d1245471c0a27718fafb196558c
-
Filesize
6KB
MD5bc45db83e497126b21398764ef0e91ba
SHA1c45f60f92e30df8600c41b3d81e2d64c312dd391
SHA256cc272c85ecbb82b0b3f903298af0ddb96a430308d07697a09bfd237bd783aa3d
SHA51282104d690b1c16cd91c0766c090da5ad3770501c04d9d4694ebfe3639fbeb6fe663ceb1f3e2dfd8405417d6376047b97c355b562c07b46d4d4c29f283a9c81a1
-
Filesize
7KB
MD54949e478e6191a95848e1ff1955b2b68
SHA16b558738cfe43eb35c1b3f630997464563bae6ce
SHA25633ca7b66b5286d8ddf439d32b2ad8f3cf6468071acd738c69830152c3d56c91c
SHA512f4946a26004dc45fae2dd09aab0f41818be4a0807a5f6d2cc3ed2ab5cd51434aa6430c1a7e9563642c2795fe2af96a4dfa7937ed6377182dc7ad087626a64e07
-
Filesize
7KB
MD5a5b944ce0f111e50ce481a16b6e076d3
SHA17555cafaa050871385ea813107ebe477c4ef98a6
SHA25605496ff60ed1e73d098b73aff79e3badc560775111cd717babe3088393ed4aa3
SHA5127045a5a34ce609841b652c4c43e24409635e52cb893f028284f2ee9a26621527603896a4c92ffedad0093f96b85abe291efc30e3798929a6865091d507adce8b
-
Filesize
8KB
MD5b30c7bf2dc04db3a885d82fda112e9a6
SHA105ccb8628ae5d08a70d4e578596be1e803f753c2
SHA2564bca02e4faa5b93d9030c55bd2b5c12da7df87be286640895a899917748aa753
SHA5121832e89312b1cda2da8f22301b824df28090ea3b6d3749e7e5ed3d09a81280ec70a6c92e0212aa43c3501c2fbb902b3925a1024edf3b9df144e893123255ffd4
-
Filesize
7KB
MD5321a6ad725fa65bb87259003ffaebda5
SHA153e80a729174bc6a35c9c345fd485f4a3f586990
SHA2569ded30a9c39217ab67076ddce8b56ca2b2d39a59d81ba48eccd67ff325d6b142
SHA512030aa9843258aa7ababe4865eac373d335f074aab4280011431a81bf2780020c8c60b381c2bf0a7d15c37a698dd09b4224c5ac1f101c92e200452148c1a99ce0
-
Filesize
9KB
MD5d8f9f7f4738c199a62b6b87c7c493573
SHA1d17b7c5ffa53d4894d132907ba610c2ff815949e
SHA256cd4e2ece42660c06a7db78577e5211b4c18503737f05dab4a59950b48ed2085a
SHA512ce426623ee7c92ac5b025558e4e2a47111409b3e622c1ad1cd2ad621ee22316a0bc54a06e79a062e8a84d14fa98b621c66885c4b6aee2a3483165ce1693d1bbd
-
Filesize
2KB
MD576ad2e845ee2394f9e9eaca8516c8dcf
SHA1207f9198932cd39a92a219f5b964267f4b9ad4e5
SHA2565ed4e9817e1750694500dc870163982347c616baa6304aec145a87ef51f7ae37
SHA51274faa5f01f7c3da2834b31a2ad7c9fdc1cfa30e7a6af68eecd0718238ece05519fd828a7ead0d0c0705d66540e590855f7afddeb9847cecc9ae9d4d821d60b48
-
Filesize
4KB
MD5cd7912a3d4a688b0cf58fe706a01a526
SHA1799599ae6d921240c6014278d6164fe02ec44fbc
SHA2566d1479358c0dd265e946cbd766a0a465853d3f3d6e5307faad0a9f2f53eef5e9
SHA512ab1f9ec1d035ff63edc16b408b43fbfbd48c8de86ca5588cc02dbc2009ef33a5b9e41a054271570938da7b29de8183357d8a28f584d23ee70cfea2f65579627a
-
Filesize
2KB
MD5678a65683deaa325a3c307f44e65b3a1
SHA1d796e5192192c033f053e401e1b25a6839798eb9
SHA256213000a2fdc0de48d3108276e3c96aca0cb8cf333b3969554e72d70250b8fe95
SHA5123eac0ab6b27311cd4cde6bea2d861ed710d898d371dea9ee32c3f70acb8e6e22d549b1529cc5e8329dc059457787eb47813666327cb7065e23d51c7b8cc8561b
-
Filesize
874B
MD5d1976bde499ec89a3c3b47e36d25b699
SHA11f5fc0f34dda8ee8188f7aee5c9cbf0ef315e7bc
SHA25646e0befc14a8a726adf09bae60eb149b015fcfa1aab6d07cab46ff557ff4994e
SHA512267385726f6fc827ba4e8793bb189d98a781fd9bcc64217025c31bf221e42a501ac729daa7e28cbab7df653b2cf3d649011bee6b1afb0015dde1de0a468fdd60
-
Filesize
2KB
MD572131e33ae38ced1ff290a9bf5ff6808
SHA149a0a21ff087d98265d63d9e6a8a6b127bd21c4c
SHA2565ddf5b17d72cfad4dec967022e89de114328a0ae51dafa6486ad942d79668211
SHA512f3936dc0b0e9ab7b74925ad6ef9a7df027fa15239650485f226346fd7c3d17713879d5ff2996808ff6a867611b4f19476fab31ea455892ec792277d7110f3e04
-
Filesize
4KB
MD55cd4ec6dafe70e99676b610e64b9d1b2
SHA18aeea0dfe60c140f2d68f683e52a5d38b7b2cc6a
SHA256a118ee148614c7fbd1bf4943055862d53fdd71681e68429f09d1e248d5260925
SHA512469f60d73bdf99ee6c0c8be084fda11dc18b5acb06810eda88cb8921cc8bac7dfbd0575ba3f84d87c5e7013cd2241670289020cc0701a804e5cde244897c9e8f
-
Filesize
372B
MD58bcc0787e0555e3a3c765f7607650a3d
SHA1b8318e523c205744fc9e3612ac41aa07293a176c
SHA2561c092ec670ea8f3fa58a7275a88e7e25391a314598e7fcf011ee65c60d62e9b1
SHA51283ee789b1dcf2689e7cc10c7c32cbfccc182003c406005e1f768edf06490e049c0e9b57facb11efa31453ab8d7308d7f60c912dfd39fecc50c6115ebd0da01db
-
Filesize
16B
MD546295cac801e5d4857d09837238a6394
SHA144e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA2560f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA5128969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
-
Filesize
16B
MD5206702161f94c5cd39fadd03f4014d98
SHA1bd8bfc144fb5326d21bd1531523d9fb50e1b600a
SHA2561005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167
SHA5120af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145
-
Filesize
44KB
MD5b290f804db85ac933235f6e5b68a178c
SHA134fd7b46d1a521540cdf5a6eb32d0145f33d6fb4
SHA25637a35878ae7653b00b05300ab175671c12cf5cfcbf2b290c42f4f9e33135b01a
SHA51273ae515fbc402400bd3477c947716cab69a0920b49dda4c68357f4cdcee58b2be5f4e78afdc794d56e905c6b2d00cffb49b8b5a4180548d79a7b78e340847adf
-
Filesize
20KB
MD52a029687e73114ebcb4fad10c0114e8a
SHA1f09cbbed46b9f8c731568bdcee13024e89bda397
SHA256fe6e92a5b020858bbdd8089533c6f22703bc5927e22f689c384164096705b11b
SHA512211dc45e2bb5739bcf863c44ca8132f92e895b3c95d074929aa4338698d53c6ccb3a8e2f23180260d9226073f4f5cd21a200010a7a224de7c8ac2e1cc853730d
-
Filesize
11KB
MD5d76dcb78eff1e244729867023bca448c
SHA1280a7ce1010e86f5c18888897fa483ba3a1cbccb
SHA256434bd5f0ad13126b8bbebb3662926cf05ebbb31ca6eec54d24dcb79ad2d3cf33
SHA512e62bc278a9bc4f5775dcbd5a2af72e5b850698f7706ccbb23221af72cb6b06647253a4b7ebad25aca65fee9f738e02acba34252f9ac1d852710926f9004d5b84
-
Filesize
11KB
MD5ad8baaf24bad91061ca2725784766908
SHA17ed95d0d746bad4ae97814af8e267d02b1257673
SHA2567fe3a7beb0b88b495f941ffb30aacfd9c4ae2a0b34185045b38ca167bc94c5ea
SHA51245fb0a18b833a9bb68c37617f32aa1dfbe4d480de2bd47adf808bde6a60b75db71e1d52c9af5575529d8773b6bd2a9bc107e9b11687247cebbcc16d2472d1915
-
Filesize
264KB
MD537b5beb01b4d431e384b8dc0f54e0e74
SHA10e9c027a9ca78a6d98fa304156a51cc6c5e4a2a7
SHA256093aedbe4735e975422682b660c6a9eb1da3ca1a8b02b51a648b5f8084ce9fc2
SHA512bb1803448f61f789992f2d1ac171031258ef34a42a1f6d7c23e03e5dab86832972ccc7aa52f91b884bfb453bb9eb12095526d9bec7da66fdbc7b70afced15a09
-
Filesize
10KB
MD5d9e405dbff6f6c481310d8558f39ea4f
SHA16a573b66d9ddcb05c9f3cb28b6c03186b68c9184
SHA256c4d5c2b46401fcb899549f0a1aaa60a880c03d5f7455a3f696adbb8d280df9e5
SHA512b697af34f3995fe73d474ff3da329a430781eb507f4b3dadb987e452149f16c0bc76cc4ac99658ef99fd17607686fcb32bab02bfffbf0794ddcad2708a6ae88f
-
C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133717795371911035.txt
Filesize69KB
MD5aac59a6554a67ebb63d2f15bf9ce8176
SHA11b70e03217d5226d3a68f950a32aea9810701d20
SHA256963ba902ae0ce309de3a9bef06ae6d184b7c418b7cc6558b5c6891a1e86c0318
SHA512a226f0d0766b305f69c345c0e87351bd2c1da0ede473d88121cacd35981cbd55c21473f6cf22e949aa43d848fa31fbc6e1d05637faabc0ae4f8d63b99557ced6
-
C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TempState\SearchHoverUnifiedTileModelCache.dat
Filesize10KB
MD5112fbe8f7abd9dec0a7e0b4de4902f54
SHA10985ac732d0732790005bbb835f1240a5473616d
SHA2565d558503cd9cefdad9d251950622f10c68454832c864d783b87ee6fd298a3924
SHA512dbebebbef85af7df7d4ca8adab3a2420c8a609badb7621e3f1270d46e9a6c0528d6ab32df2faabe39ba9d3edefcb658a898f4e47987710451d477fa5d1a5cfa0
-
Filesize
64B
MD5cf7d2ba867042501d22fe4651ec2084b
SHA1ee2b6143daeb6693a034f46fa69cafeb798a7449
SHA25650e2919ba15af354d757bdd8ae19eb931e4fb9ad8c0a05b6acab7a97898935a6
SHA5124f8807fa9c3fb81b6a3b53396a0bc18aa7cb68f1a61b804c3b848f433baaed380baccdbfc50442dab5a225031ba8ad1e9c9024823ba3306f92334ee79d7ffe53
-
Filesize
72B
MD5415910bc10bb94e21d48d6bdf0ce966a
SHA1d47787d56866aa85c0e9136779e1e690cf619711
SHA2561f5223c2ff17c81e1de20107aadba64a998afc06700420f946fd89e5541ca344
SHA512e47bdf05ca597de5acd785557edc6bd85c67947759fa3ac00ae86bc739d479e0895fc31ab60d60b14a33c8f869f1b88386f3b8903dbb42f8f47061749074375e
-
Filesize
47KB
MD5769d736260ef0f16e82476a03e401c9f
SHA173b2560439fbce5a88e77ae243cf05663a33bf11
SHA256daf3d7c051401f26b285e950f7a6250875bfa5390ffa00ddd0f3fe1f213db806
SHA512cb004b2ad012eb3287ee5216c8d7b372dd003f92d905dd208401bd250a13ce91ad00520998ecd397b168dd2adf9216da65bd4ab967e64846abff17944349a602
-
Filesize
48KB
MD522a275830851ed6d1858e74a035187c8
SHA112167fdb7aa0b6fca3ae6795b6dd82572d83f56c
SHA256a6a39c1f04be889edcc04796bd1cd28769c89459d309aa90b08b1358a8131513
SHA512dbff8be39552dde332df570be1e42a6665eb9bec05aaf85c6c197708221a3e098915ef3500b6a99bdbb0df20f86bf5b0e4a690be0816738761ead269c2a7e31a
-
Filesize
48B
MD502639d425fa0f7dc1b4bb1fa72b25afa
SHA11e76fcb8c92f6368b07cc4db31cf820fc273ee5d
SHA2567fb7d760ac321ef79b9036851b7f3d0815a2eecc3f46aecb1cb526ea6924c550
SHA512505f8b272eb28705fab2adcca0298977f69cad96d9cd1573f47a8cd9e347b06f88e0e5078bd53c10c624070d49d1511ad5c5a341c9713cd57ba4ab4999f230cd
-
Filesize
96B
MD549b8ade0215fd6ce7225ab866e9c432e
SHA14ee2bb217474f3e300ef41868eadce3d851073a3
SHA25659b677aecf7c3c050f57937f0b4f9107de8f4b2c78930831825d002dc287cd0d
SHA51244a65530ffeb8b57a99ac9782aa323747f4e58158b3f898b9c3fb5eae235a684b1ffa6f3691292a7036105f25f89fd595bb95738699e3db563c2fb5f03f47d1a
-
Filesize
264B
MD5c86fb1a8576a152e1116deb479b28d02
SHA19782986d9a280cebee487aba369bc36b209df9b8
SHA25666fc10724fc134082af48c7cb3a5022181fc0b766f70eadf1825c123adf3705e
SHA512e2e1b6161db04e70fef8908dd94adde0c6fe4d248c1d23db0a8a7046b9d7655ff8da12ccb4d7321c2e9bd400e544d950d92460c696ead422c85db1ccfee2a28e
-
Filesize
41B
MD55af87dfd673ba2115e2fcf5cfdb727ab
SHA1d5b5bbf396dc291274584ef71f444f420b6056f1
SHA256f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
SHA512de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
-
Filesize
1KB
MD5f87d807474f975900c92572e970a93e6
SHA1589bb64508030baad1ff786c95e4983ff03b4a4e
SHA256b22cc161d8c51f932458ae7ac96f8fc340a718159fbeed08f9b4bf0cdf151c52
SHA512c0dcad708d950e0ec40f03bc35e9f7af52967525a46b3348332b28d4e499440064287cee7a81dddc97b8cd3cc838257cc5f22ee42198e116e7229e469d092a68
-
Filesize
1KB
MD5d87f0bd4bab87edbb52c0d86f44ea1bc
SHA1224395b06fd216187362ee0c22fe5e09796ef513
SHA256e055ae41bac9c4c4108d4d3aa833af1280483c04f08078fd954b20b675cdba65
SHA512d2f803a158146ecb989994bc9a37f154d7a0b718cbde9dd2a9fa668735196808d4dd29d2614085ea2f5fd480f8091feb63bf5aa95f2635bcd4649bfd9048f652
-
Filesize
59B
MD52800881c775077e1c4b6e06bf4676de4
SHA12873631068c8b3b9495638c865915be822442c8b
SHA256226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
SHA512e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
-
Filesize
370B
MD58ccff25c62184e18cccb1043ac204870
SHA1e7bd13c7bb37b33b6ed6a972f0dcbe116ef2ec2b
SHA2565a9646e93c0b0ee9f36014793b083d1cc41e37c3b05a66c534fca38bfba7a3e3
SHA512c01c5217a17d271b3b49635972cbb367a4425e892025b97a401a8973944919b9579d6458709a6540c31c92aca3827a1d2a5ade815bdf847c9ae089babd6a65ac
-
Filesize
704B
MD5b1710e05a996eac1bb06486e81c34734
SHA1534bca31abce7e4748d223b187e2f7fd261007d4
SHA256d9b5c1c58fb4718e3608c0b17448037f860488388e3a4d9c9d2c22055bb85bf6
SHA512fa22170095772ffbef20358eff6fb95c2f538312c77a5143622106e3dc15510a488144aaba5b14b0eb8e27ae79ac736e11376a6f8019c06cb1165ead3f52e652
-
Filesize
203B
MD589732e0cb6a931f704222a47a313a00a
SHA193c40bd49450e343549a9a8d504fc394d07fb2fa
SHA256ff4f74e51b659fb900e0a4a50ca04098499deb3714cc0ed7653dfa0760ec655a
SHA51276f6cefe4200d7e8d70d3e532224bd3159382270ae8de61972adb9a7d5784a8d7af7cbeb66804ec538864d8ec584019a5e123312e0bc2fa4532483de4448b8cb
-
Filesize
26B
MD5fbccf14d504b7b2dbcb5a5bda75bd93b
SHA1d59fc84cdd5217c6cf74785703655f78da6b582b
SHA256eacd09517ce90d34ba562171d15ac40d302f0e691b439f91be1b6406e25f5913
SHA512aa1d2b1ea3c9de3ccadb319d4e3e3276a2f27dd1a5244fe72de2b6f94083dddc762480482c5c2e53f803cd9e3973ddefc68966f974e124307b5043e654443b98
-
Filesize
1.5MB
MD5aac959d19b397392ad7fbd07fe87cc72
SHA152dd24b0f09b061b36062ee447c1fcd7eea02798
SHA2560e5d280ca1a182a08a9d7cd702eef5c0ea87d2710e7a9852080edf04de357ed6
SHA51293c5f798ebd6c938cca39437b20516a250889cd735eb81c1462ada06771bdad2551ad3a389d77a3bdae362c66af9dd71fb7b7ae4df3e5171351a096dd431aa4e
-
Filesize
10.1MB
MD52c752edef5b0aa0962a3e01c4c82a2fa
SHA19c3afd1c63f2b0dbdc2dc487709471222d2cb81e
SHA256891846bf656253ca1cdd28584a28681e9604e2a03d74cd6b99313e3bff11daf8
SHA51204d25fe7d40c8c320ffc545a038ad6ea458df6a8a552b0e0393b369a03b9bf273c72f30169bd54e8eb10757c04bdddf3859c601c1eb9e1a12fe4d15658906dfe
-
Filesize
545B
MD5a7df8b9ec2ddf502c2c470ab3defbf4b
SHA16132f6600e545a1c3441d35cf3a6537d59a74e5d
SHA2563ce4dc0f896ae6ca14a794e2523796d780f2fa13cbeb55adf74e5869cd8982b8
SHA512aaceb545095b238793f55f5997700b4f62c9aa39903e6393e950888022ecf7d82cd363a4bf1467bf2835e0ec9134443c1fa2273b1a6febf152053fc2c93b3ddc
-
Filesize
21KB
MD58f5b205f50c5255c2eb2530e04e5e0b7
SHA19567a95234f8c2e6a2d7b577c954903f15ad73da
SHA256fd2dee591d8bca4c6ce7c5cc7f67e6710eff15eb30e3b30605ecd1c436b5016a
SHA5125094a6917f7624bbbcf81aaf44e80c7dddbdf6715c9d5a6cd6f4c40fa8e6c2dfcc00b58bfed21cec65c42639bbeac401874c24fbcbd59579649c6cf2d93eb2ff
-
Filesize
49KB
MD597f5d0caaa1988c95bf38385d2cf260e
SHA1255099f6e976837a0c3eb43a57599789a6330e85
SHA25673ee549578ded906711189edcef0eedbc9db7ccbd30cf7776bd1f7dd9e034339
SHA512ad099c25868c12246ed3d4ee54cef4df49d5276a5696ca72efa64869367e262a57c8ff1fb947ad2f70caef1d618849dbab2ec6161c25758d9f96733a7534b18f
-
Filesize
4.7MB
MD5b0cea83925a2988adc06e4b942fb9670
SHA1b1201dfd532990e2ca3bfa5f501bb7428b5f1d3d
SHA2569366150823c151dc0cc02ff5b9f9e4f4d09a2c37daf50efe29a2b3525c8528d0
SHA5128cc8656ef3cd2a8a0e327b793f6a76272dd9632d6b1d21358a2ac20457e6394aab573123a3dbe4a63baa0e7a2dde381e133f348bb90b1f1e002c64cc49dad1e8
-
Filesize
3.3MB
MD509e24eeba895a09dbd5ea194f85f2c7e
SHA146b535cad6980171956399436d3399b3d448ca48
SHA256842eba5c757a39eeae697709979782bfb7851ee4679f09b1ce791f2e7a48fdd2
SHA512590782cde2d837ed85bb9c1cfbc00e00ab16ae0307fd4f2005087e0275795da144dd17327625fd48ef823d5e993fb8fe663d33d8e804fe2b76855481a5390288
-
Filesize
11.7MB
MD51c024308fb02da06e3e999fd7e1b0e96
SHA17f91ca5a147d8cf74efeed77745e340f245a2c21
SHA2567f14aa8ffddb5b3547dc9cf2dd007d71f6b551f0114bb5891d8cc6f65122d8de
SHA51211515374e679a06a7625860bd00365a65c14d894af4e22baf17afee44aa99d8f8a1db9cd7b81aad1a2e7ed7181fbfb3c7cdee1c543e92ca57411ffc80859dc30
-
Filesize
242KB
MD5fa9c64e882c6194b1be050172fc7c36c
SHA118e28a240775e7858102ff011d15afecd315806a
SHA256027291e3f4382ee93fb563ab933bbfeaaf9e1845c2d9a5b7ddc9cae83e1694f6
SHA512aabd4d62c94def2693000accc3f50a121acc42e824a60900ced3f113463940f4bd368e359a211c5739e9011450eaad0f1ca3c64cb5a5ac5bc709bbbc91d936ea
-
Filesize
309KB
MD56f7915ca5eeaba7385092e01e9884d07
SHA1e26166fb6d5a74af0adf4e132e85d6ad4a6334f5
SHA2564fcf97f12ec1af3711823b3f330cfba6244bc5a386499db3ef601eeecb782d87
SHA512a49c7d76d71ff1424e188815578087a79088a931f88af3b2caf2c0158e918bca977cc22c9ae0bbba8e6fe81876aee216211e4094418ac41c63ddb69813c3864b
-
Filesize
7.7MB
MD5dc4ab8bad890e5ae125663c7c09ae088
SHA191472fb2b452fd4337dba82c643ef9c4a858db9a
SHA256c6b2741bdbeea992944c8ace48055805f895ba07286342aa2b31f12276f957a6
SHA512ed1f930b09e16c14c6bd00aa09ccd0a87d0d14b66632f145245931a51710d63f973136f08283e740d6a68f5af668eda088f7d74954ef62ebcaa16ff3aad28168
-
Filesize
1KB
MD52b787ee909fc90a96b85181fd412545e
SHA1543507cd8afb581fc499414dd05b7e450ee449b8
SHA256dc7ad6ac414693dba9e3427fedea975507ff07a86f0964a5ab7b41ad5426005d
SHA512da6ac40d8fd93ccc5d2288477b991e1f95987d3ab7b739fe0b9e7c12dd926e861f9e652871453c86260a041d9cd748a1551c11405d6645f9bbf39a9163c9224e