ebbcb489171abfcfce56554dbaeacd22a15838391cbc7c756db02995129def5a

max time kernel
1800s
max time network
1801s
platform
windows11-21h2_x64
resource
win11-20241007-en
resource tags

arch:x64arch:x86image:win11-20241007-enlocale:en-usos:windows11-21h2-x64system
submitted
20-11-2024 07:25

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Bootstrapper.exe
Size

800KB
MD5

2a4dcf20b82896be94eb538260c5fb93
SHA1

21f232c2fd8132f8677e53258562ad98b455e679
SHA256

ebbcb489171abfcfce56554dbaeacd22a15838391cbc7c756db02995129def5a
SHA512

4f1164b2312fb94b7030d6eb6aa9f3502912ffa33505f156443570fc964bfd3bb21ded3cf84092054e07346d2dce83a0907ba33f4ba39ad3fe7a78e836efe288
SSDEEP

12288:t0zVvgDNMoWjTmFzAzBocaKjyWtiR1pptHxQ0z:O5vgHWjTwAlocaKjyyItHDz

Score

8^/10

credential_access defense_evasion discovery execution persistence phishing privilege_escalation spyware stealer

Malware Config

Signatures

Boot or Logon Autostart Execution: Active Setup 2 TTPs 1 IoCs

Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

persistence

Active Setup

T1547.014

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-4249425805-3408538557-1766626484-1000\Software\Microsoft\Active Setup\Installed Components	explorer.exe

Contacts a large (574) amount of remote hosts 1 TTPs
This may indicate a network scan to discover remotely running services.
discovery

Network Service Discovery
T1046
Downloads MZ/PE file

Drops file in Drivers directory 21 IoCs

description	ioc	Process
File opened for modification	C:\Windows\system32\DRIVERS\SETE3BD.tmp	ekrn.exe
File opened for modification	C:\Windows\system32\DRIVERS\SETE4C8.tmp	ekrn.exe
File opened for modification	C:\Windows\system32\DRIVERS\ekbdflt.sys	ekrn.exe
File created	C:\Windows\system32\DRIVERS\SETE921.tmp	ekrn.exe
File opened for modification	C:\Windows\system32\DRIVERS\SETE9AE.tmp	ekrn.exe
File opened for modification	C:\Windows\system32\DRIVERS\SETEA5B.tmp	ekrn.exe
File created	C:\Windows\system32\DRIVERS\SETEA5B.tmp	ekrn.exe
File created	C:\Windows\system32\DRIVERS\SETE3BD.tmp	ekrn.exe
File opened for modification	C:\Windows\system32\DRIVERS\ehdrv.sys	ekrn.exe
File opened for modification	C:\Windows\system32\DRIVERS\edevmon.sys	ekrn.exe
File opened for modification	C:\Windows\system32\DRIVERS\eamonm.sys	ekrn.exe
File opened for modification	C:\Windows\system32\DRIVERS\epfw.sys	ekrn.exe
File opened for modification	C:\Windows\system32\DRIVERS\eelam.sys	ekrn.exe
File created	C:\Windows\system32\DRIVERS\SETE4C8.tmp	ekrn.exe
File opened for modification	C:\Windows\system32\DRIVERS\SETE789.tmp	ekrn.exe
File opened for modification	C:\Windows\system32\DRIVERS\SETE874.tmp	ekrn.exe
File created	C:\Windows\system32\DRIVERS\SETE874.tmp	ekrn.exe
File created	C:\Windows\system32\DRIVERS\SETE789.tmp	ekrn.exe
File opened for modification	C:\Windows\system32\DRIVERS\SETE921.tmp	ekrn.exe
File created	C:\Windows\system32\DRIVERS\SETE9AE.tmp	ekrn.exe
File opened for modification	C:\Windows\system32\DRIVERS\epfwwfp.sys	ekrn.exe

Event Triggered Execution: Image File Execution Options Injection 1 TTPs 4 IoCs

persistence

Image File Execution Options Injection

T1546.012

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ekrn.exe	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\egui.exe	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ekrn.exe	MsiExec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ekrn.exe\MitigationOptions = "16777216"	MsiExec.exe

A potential corporate email address has been identified in the URL: 5CSSS08123F5245AEE00A490D45@AdobeOrg
phishing
A potential corporate email address has been identified in the URL: [email protected]
phishing
A potential corporate email address has been identified in the URL: [email protected]
phishing
A potential corporate email address has been identified in the URL: [email protected]
phishing
Credentials from Password Stores: Windows Credential Manager 1 TTPs
Suspicious access to Credentials History.
credential_access stealer

Windows Credential Manager
T1555.004

Drops startup file 2 IoCs

description	ioc	Process
File created	C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\taskmgr.lnk	ESETSecurityUltimate18.0.12.0x64.tmp
File opened for modification	\??\c:\users\admin\appdata\roaming\microsoft\windows\start menu\programs\startup\taskmgr.lnk	ekrn.exe

Event Triggered Execution: Component Object Model Hijacking 1 TTPs
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
persistence privilege_escalation

Component Object Model Hijacking
T1546.015

Executes dropped EXE 21 IoCs

pid	Process
3936	ESET HOME Security Ultimate Installer.exe
2752	utweb_installer.exe
5568	utweb_installer.tmp
4928	utweb_installer.exe
396	utweb.exe
5984	utweb.exe
3736	utweb.exe
3312	utweb.exe
3928	utweb.exe
3888	utweb.exe
2428	ESETSecurityUltimate18.0.12.0x64.exe
5568	ESETSecurityUltimate18.0.12.0x64.tmp
324	wlogon.exe
5644	ESETSecurityUltimate18.0.12.0x64.exe
2052	InstHelper.exe
784	ekrn.exe
5104	efwd.exe
2732	InstHelper.exe
5224	InstHelper.exe
3076	eguiproxy.exe
6116	egui.exe

Loads dropped DLL 64 IoCs

pid	Process
3936	ESET HOME Security Ultimate Installer.exe
3936	ESET HOME Security Ultimate Installer.exe
4928	utweb_installer.exe
4928	utweb_installer.exe
4928	utweb_installer.exe
4928	utweb_installer.exe
4928	utweb_installer.exe
4928	utweb_installer.exe
4928	utweb_installer.exe
4928	utweb_installer.exe
4928	utweb_installer.exe
4928	utweb_installer.exe
396	utweb.exe
396	utweb.exe
396	utweb.exe
396	utweb.exe
396	utweb.exe
396	utweb.exe
5984	utweb.exe
5984	utweb.exe
5984	utweb.exe
5984	utweb.exe
5984	utweb.exe
5984	utweb.exe
3736	utweb.exe
3736	utweb.exe
3736	utweb.exe
3736	utweb.exe
3736	utweb.exe
3736	utweb.exe
3312	utweb.exe
3312	utweb.exe
3312	utweb.exe
3312	utweb.exe
3312	utweb.exe
3312	utweb.exe
3928	utweb.exe
3928	utweb.exe
3928	utweb.exe
3928	utweb.exe
3928	utweb.exe
3928	utweb.exe
3888	utweb.exe
3888	utweb.exe
3888	utweb.exe
3888	utweb.exe
3888	utweb.exe
3888	utweb.exe
1952	MsiExec.exe
1952	MsiExec.exe
1952	MsiExec.exe
1952	MsiExec.exe
1952	MsiExec.exe
1952	MsiExec.exe
1952	MsiExec.exe
1952	MsiExec.exe
1952	MsiExec.exe
1952	MsiExec.exe
1952	MsiExec.exe
1952	MsiExec.exe
1952	MsiExec.exe
1952	MsiExec.exe
1952	MsiExec.exe
1952	MsiExec.exe

Modifies system executable filetype association 2 TTPs 3 IoCs

persistence

Modify Registry

T1112

Change Default File Association

T1546.001

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\lnkfile\Shellex\ContextMenuHandlers	MsiExec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\lnkfile\shellex\ContextMenuHandlers\ESET Security Shell	MsiExec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\lnkfile\shellex\ContextMenuHandlers\ESET Security Shell\ = "{B089FE88-FB52-11D3-BDF1-0050DA34150D}"	MsiExec.exe

Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Credentials from Web Browsers
T1555.003

Adds Run key to start application 2 TTPs 2 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-4249425805-3408538557-1766626484-1000\Software\Microsoft\Windows\CurrentVersion\Run\utweb = "\"C:\\Users\\Admin\\AppData\\Roaming\\uTorrent Web\\utweb.exe\" /MINIMIZED"	utweb.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\egui = "\"C:\\Program Files\\ESET\\ESET Security\\ecmds.exe\" /run /hide /proxy"	msiexec.exe

Blocklisted process makes network request 1 IoCs

flow	pid	Process
1587	648	msiexec.exe

Checks for any installed AV software in registry 1 TTPs 10 IoCs

Security Software Discovery

T1518.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\AVG\AV\Dir	utweb_installer.tmp
Key opened	\REGISTRY\MACHINE\SOFTWARE\AVG\AV\Dir	utweb_installer.tmp
Key opened	\REGISTRY\MACHINE\Software\Wow6432Node\ESET\NOD	msiexec.exe
Key opened	\REGISTRY\MACHINE\SOFTWARE\Avira\Browser\Installed	utweb_installer.tmp
Key opened	\REGISTRY\USER\S-1-5-21-4249425805-3408538557-1766626484-1000\SOFTWARE\Avira\Browser\Installed	utweb_installer.tmp
Key opened	\REGISTRY\MACHINE\SOFTWARE\AVAST Software\Avast	utweb_installer.tmp
Key opened	\REGISTRY\USER\S-1-5-21-4249425805-3408538557-1766626484-1000\SOFTWARE\AVAST Software\Avast	utweb_installer.tmp
Key opened	\REGISTRY\USER\S-1-5-21-4249425805-3408538557-1766626484-1000\SOFTWARE\AVG\AV\Dir	utweb_installer.tmp
Key opened	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Avira\Browser\Installed	utweb_installer.tmp
Key opened	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\AVAST Software\Avast	utweb_installer.tmp

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Command and Scripting Interpreter: PowerShell 1 TTPs 2 IoCs

Using powershell.exe command.

execution

PowerShell

T1059.001

pid	Process
3964	powershell.exe
1784	powershell.exe

Enumerates connected drives 3 TTPs 50 IoCs

Attempts to read the root path of hard drives other than the default C: drive.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
File opened (read-only)	\??\A:	msiexec.exe
File opened (read-only)	\??\E:	msiexec.exe
File opened (read-only)	\??\A:	msiexec.exe
File opened (read-only)	\??\E:	msiexec.exe
File opened (read-only)	\??\H:	msiexec.exe
File opened (read-only)	\??\O:	msiexec.exe
File opened (read-only)	\??\Q:	msiexec.exe
File opened (read-only)	\??\H:	msiexec.exe
File opened (read-only)	\??\Q:	msiexec.exe
File opened (read-only)	\??\Z:	msiexec.exe
File opened (read-only)	\??\S:	msiexec.exe
File opened (read-only)	\??\B:	msiexec.exe
File opened (read-only)	\??\L:	msiexec.exe
File opened (read-only)	\??\N:	msiexec.exe
File opened (read-only)	\??\G:	msiexec.exe
File opened (read-only)	\??\K:	msiexec.exe
File opened (read-only)	\??\Z:	msiexec.exe
File opened (read-only)	\??\G:	msiexec.exe
File opened (read-only)	\??\R:	msiexec.exe
File opened (read-only)	\??\T:	msiexec.exe
File opened (read-only)	\??\Y:	msiexec.exe
File opened (read-only)	\??\X:	msiexec.exe
File opened (read-only)	\??\Y:	msiexec.exe
File opened (read-only)	\??\M:	msiexec.exe
File opened (read-only)	\??\O:	msiexec.exe
File opened (read-only)	\??\S:	msiexec.exe
File opened (read-only)	\??\U:	msiexec.exe
File opened (read-only)	\??\V:	msiexec.exe
File opened (read-only)	\??\N:	msiexec.exe
File opened (read-only)	\??\R:	msiexec.exe
File opened (read-only)	\??\T:	msiexec.exe
File opened (read-only)	\??\V:	msiexec.exe
File opened (read-only)	\??\W:	msiexec.exe
File opened (read-only)	\??\D:	ekrn.exe
File opened (read-only)	\??\F:	ekrn.exe
File opened (read-only)	\??\D:	explorer.exe
File opened (read-only)	\??\J:	msiexec.exe
File opened (read-only)	\??\K:	msiexec.exe
File opened (read-only)	\??\X:	msiexec.exe
File opened (read-only)	\??\U:	msiexec.exe
File opened (read-only)	\??\I:	msiexec.exe
File opened (read-only)	\??\W:	msiexec.exe
File opened (read-only)	\??\P:	msiexec.exe
File opened (read-only)	\??\P:	msiexec.exe
File opened (read-only)	\??\B:	msiexec.exe
File opened (read-only)	\??\I:	msiexec.exe
File opened (read-only)	\??\J:	msiexec.exe
File opened (read-only)	\??\L:	msiexec.exe
File opened (read-only)	\??\M:	msiexec.exe
File opened (read-only)	\??\F:	explorer.exe

Legitimate hosting services abused for malware hosting/C2 1 TTPs 4 IoCs

Web Service

T1102

flow	ioc
3	yandex.com
11	yandex.com
12	yandex.com
57	yandex.com

Maps connected drives based on registry 3 TTPs 3 IoCs

Disk information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\disk\Enum	ekrn.exe
Key queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\disk\Enum	ekrn.exe
Key value enumerated	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\disk\Enum	ekrn.exe

Drops file in System32 directory 64 IoCs

description	ioc	Process
File opened for modification	C:\Windows\System32\CatRoot2\dberr.txt	DrvInst.exe
File created	C:\Windows\System32\DriverStore\Temp\{cdbb6c4d-e6dd-d745-b257-014723b017c6}\SETE66D.tmp	DrvInst.exe
File opened for modification	C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8EC9B1D0ABBD7F98B401D425828828CE_E86F8D6F678FE58E3CAF469A3E635A8B	ekrn.exe
File opened for modification	C:\Windows\System32\DriverStore\Temp\{b84d2d87-a79e-9342-bf85-ee368fd3fccb}\SETE227.tmp	DrvInst.exe
File opened for modification	C:\Windows\System32\DriverStore\Temp\{39d9a674-96c6-9747-9b6e-1e27b9695677}	DrvInst.exe
File opened for modification	C:\Windows\System32\DriverStore\FileRepository\epfw.inf_amd64_6fb5d81c635ceb57\epfw.inf	DrvInst.exe
File opened for modification	\??\c:\windows\system32\6dmwvd.exe	ekrn.exe
File created	C:\Windows\system32\config\systemprofile\AppData\Local\ESET\ESET Security\Quarantine\21F232C2FD8132F8677E53258562AD98B455E679.NAF.tmp	ekrn.exe
File opened for modification	C:\Windows\system32\config\systemprofile\AppData\Local\ESET\ESET Security\Quarantine\702DFF2E0E597D53A9A4E5A60AC1FEE71C69A0D3.NAF.tmp	ekrn.exe
File opened for modification	C:\Windows\System32\DriverStore\Temp\{2423176e-c32a-a043-aaf1-71c6bdcc06bf}\SETE3EC.tmp	DrvInst.exe
File opened for modification	C:\Windows\System32\DriverStore\FileRepository\edevmon.inf_amd64_18842a6760f7febc\edevmon.cat	DrvInst.exe
File opened for modification	C:\Windows\System32\DriverStore\Temp\{7d6a430c-19d4-c242-815b-7255a188a1ec}\SETE9D7.tmp	DrvInst.exe
File created	C:\Windows\System32\DriverStore\Temp\{e13567f3-0cc3-cb49-a827-f99d888b7844}\SETE6CB.tmp	DrvInst.exe
File opened for modification	C:\Windows\System32\DriverStore\Temp\{1deea432-dcb6-6d43-aeb1-cbbdee7d8d5e}\epfwwfp.sys	DrvInst.exe
File opened for modification	C:\Windows\System32\DriverStore\FileRepository\epfwwfp.inf_amd64_5e4958ec862cb154\epfwwfp.cat	DrvInst.exe
File opened for modification	C:\Windows\System32\DriverStore\FileRepository\ehdrv.inf_amd64_cf54eb551f78c5ed\ehdrv.inf	DrvInst.exe
File opened for modification	C:\Windows\System32\DriverStore\Temp\{2423176e-c32a-a043-aaf1-71c6bdcc06bf}\ehdrv.inf	DrvInst.exe
File opened for modification	C:\Windows\System32\DriverStore\FileRepository\ehdrv.inf_amd64_cf54eb551f78c5ed\ehdrv.sys	DrvInst.exe
File opened for modification	C:\Windows\System32\DriverStore\FileRepository\eamonm.inf_amd64_7d82dc616a6b0fc0\eamonm.inf	DrvInst.exe
File opened for modification	C:\Windows\System32\DriverStore\Temp\{7d6a430c-19d4-c242-815b-7255a188a1ec}\epfw.inf	DrvInst.exe
File opened for modification	C:\Windows\System32\DriverStore\Temp\{7d6a430c-19d4-c242-815b-7255a188a1ec}\epfw.sys	DrvInst.exe
File opened for modification	C:\Windows\system32\config\systemprofile\AppData\Local\ESET\ESET Security\Quarantine\21F232C2FD8132F8677E53258562AD98B455E679.NAF	ekrn.exe
File opened for modification	C:\Windows\System32\DriverStore\Temp\{b84d2d87-a79e-9342-bf85-ee368fd3fccb}\eelam.sys	DrvInst.exe
File opened for modification	C:\Windows\System32\DriverStore\Temp\{1deea432-dcb6-6d43-aeb1-cbbdee7d8d5e}\SETE7A6.tmp	DrvInst.exe
File opened for modification	C:\Windows\System32\DriverStore\FileRepository\epfwwfp.inf_amd64_5e4958ec862cb154\epfwwfp.inf	DrvInst.exe
File opened for modification	C:\Windows\System32\DriverStore\FileRepository\epfw.inf_amd64_6fb5d81c635ceb57\epfw.cat	DrvInst.exe
File opened for modification	C:\Windows\System32\DriverStore\Temp\{7d6a430c-19d4-c242-815b-7255a188a1ec}	DrvInst.exe
File created	C:\Windows\system32\config\systemprofile\AppData\Local\ESET\ESET Security\Quarantine\702DFF2E0E597D53A9A4E5A60AC1FEE71C69A0D3.NAF	ekrn.exe
File opened for modification	C:\Windows\System32\DriverStore\Temp\{cdbb6c4d-e6dd-d745-b257-014723b017c6}\ekbdflt.cat	DrvInst.exe
File opened for modification	C:\Windows\System32\DriverStore\FileRepository\eelam.inf_amd64_558ab54140135969\eelam.cat	DrvInst.exe
File opened for modification	C:\Windows\System32\DriverStore\Temp\{cdbb6c4d-e6dd-d745-b257-014723b017c6}\SETE66D.tmp	DrvInst.exe
File opened for modification	C:\Windows\System32\DriverStore\Temp\{7d6a430c-19d4-c242-815b-7255a188a1ec}\epfw.cat	DrvInst.exe
File opened for modification	C:\Windows\System32\DriverStore\Temp\{b84d2d87-a79e-9342-bf85-ee368fd3fccb}\eelam.inf	DrvInst.exe
File opened for modification	C:\Windows\system32\config\systemprofile\AppData\Local\ESET\ESET Security\Quarantine\5FC9C6AB334DB1F875FBC59A03F5506C478C6C3E.NAF.tmp	ekrn.exe
File created	C:\Windows\system32\config\systemprofile\AppData\Local\ESET\ESET Security\Quarantine\21F232C2FD8132F8677E53258562AD98B455E679.NDF.tmp	ekrn.exe
File created	C:\Windows\system32\config\systemprofile\AppData\Local\ESET\ESET Security\Quarantine\702DFF2E0E597D53A9A4E5A60AC1FEE71C69A0D3.NDF.tmp	ekrn.exe
File created	C:\Windows\system32\config\systemprofile\AppData\Local\ESET\ESET Security\Quarantine\5FC9C6AB334DB1F875FBC59A03F5506C478C6C3E.NDF	ekrn.exe
File opened for modification	C:\Windows\System32\DriverStore\FileRepository\ehdrv.inf_amd64_cf54eb551f78c5ed\ehdrv.cat	DrvInst.exe
File created	C:\Windows\System32\DriverStore\Temp\{e13567f3-0cc3-cb49-a827-f99d888b7844}\SETE6CA.tmp	DrvInst.exe
File opened for modification	C:\Windows\System32\CatRoot2\dberr.txt	DrvInst.exe
File created	C:\Windows\System32\DriverStore\drvstore.tmp	DrvInst.exe
File opened for modification	C:\Windows\system32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\C8E534EE129F27D55460CE17FD628216_1130D9B25898B0DB0D4F04DC5B93F141	ekrn.exe
File created	C:\Windows\System32\DriverStore\Temp\{b84d2d87-a79e-9342-bf85-ee368fd3fccb}\SETE237.tmp	DrvInst.exe
File opened for modification	C:\Windows\System32\DriverStore\Temp\{cdbb6c4d-e6dd-d745-b257-014723b017c6}\SETE65D.tmp	DrvInst.exe
File created	C:\Windows\system32\config\systemprofile\AppData\Local\ESET\ESET Security\Quarantine\21F232C2FD8132F8677E53258562AD98B455E679.NQF	ekrn.exe
File opened for modification	C:\Windows\System32\DriverStore\Temp\{2423176e-c32a-a043-aaf1-71c6bdcc06bf}\SETE3FC.tmp	DrvInst.exe
File created	C:\Windows\System32\DriverStore\Temp\{39d9a674-96c6-9747-9b6e-1e27b9695677}\SETE6E9.tmp	DrvInst.exe
File created	C:\Windows\System32\DriverStore\drvstore.tmp	DrvInst.exe
File opened for modification	C:\Windows\System32\DriverStore\FileRepository\edevmon.inf_amd64_18842a6760f7febc\edevmon.sys	DrvInst.exe
File created	C:\Windows\system32\config\systemprofile\AppData\Local\ESET\ESET Security\Quarantine\5FC9C6AB334DB1F875FBC59A03F5506C478C6C3E.NDF.tmp	ekrn.exe
File opened for modification	C:\Windows\System32\DriverStore\Temp\{2423176e-c32a-a043-aaf1-71c6bdcc06bf}\ehdrv.sys	DrvInst.exe
File opened for modification	C:\Windows\System32\DriverStore\Temp\{2423176e-c32a-a043-aaf1-71c6bdcc06bf}	DrvInst.exe
File opened for modification	C:\Windows\System32\DriverStore\Temp\{39d9a674-96c6-9747-9b6e-1e27b9695677}\SETE6E9.tmp	DrvInst.exe
File created	C:\Windows\System32\DriverStore\Temp\{1deea432-dcb6-6d43-aeb1-cbbdee7d8d5e}\SETE718.tmp	DrvInst.exe
File created	C:\Windows\system32\config\systemprofile\AppData\Local\ESET\ESET Security\Quarantine\21F232C2FD8132F8677E53258562AD98B455E679.NDF	ekrn.exe
File created	C:\Windows\System32\DriverStore\Temp\{b84d2d87-a79e-9342-bf85-ee368fd3fccb}\SETE238.tmp	DrvInst.exe
File opened for modification	C:\Windows\System32\DriverStore\Temp\{e13567f3-0cc3-cb49-a827-f99d888b7844}\SETE6CB.tmp	DrvInst.exe
File opened for modification	C:\Windows\System32\DriverStore\Temp\{39d9a674-96c6-9747-9b6e-1e27b9695677}\eamonm.cat	DrvInst.exe
File opened for modification	C:\Windows\System32\DriverStore\Temp\{2423176e-c32a-a043-aaf1-71c6bdcc06bf}\SETE3FD.tmp	DrvInst.exe
File created	C:\Windows\System32\DriverStore\Temp\{cdbb6c4d-e6dd-d745-b257-014723b017c6}\SETE65D.tmp	DrvInst.exe
File created	C:\Windows\System32\DriverStore\Temp\{39d9a674-96c6-9747-9b6e-1e27b9695677}\SETE749.tmp	DrvInst.exe
File created	C:\Windows\System32\DriverStore\drvstore.tmp	DrvInst.exe
File opened for modification	C:\Windows\System32\DriverStore\Temp\{7d6a430c-19d4-c242-815b-7255a188a1ec}\SETE9D8.tmp	DrvInst.exe
File created	C:\Windows\system32\config\systemprofile\AppData\Local\ESET\ESET Security\Quarantine\5FC9C6AB334DB1F875FBC59A03F5506C478C6C3E.NQF	ekrn.exe

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\ESET\ESET Security\ekrnIPM.dll	msiexec.exe
File created	C:\Program Files\ESET\ESET Security\ekrnCerberusLang.dll	msiexec.exe
File created	C:\Program Files\ESET\ESET Security\Help\ping1.png	MsiExec.exe
File opened for modification	C:\Program Files\ESET\ESET Security\Modules\tempAD927949\NUP52B2.tmp	ekrn.exe
File opened for modification	C:\Program Files\ESET\ESET Security\Modules\tempAD927949\NUP52C4.tmp	ekrn.exe
File opened for modification	C:\Program Files\ESET\ESET Security\Modules\tempAD927949\NUP5C5E.tmp	ekrn.exe
File created	C:\Program Files\ESET\ESET Security\api-ms-win-core-file-l1-1-0.dll	msiexec.exe
File created	C:\Program Files\ESET\ESET Security\api-ms-win-crt-runtime-l1-1-0.dll	msiexec.exe
File created	C:\Program Files\ESET\ESET Security\DMON.dll	msiexec.exe
File created	C:\Program Files\ESET\ESET Security\updater.dll	msiexec.exe
File opened for modification	C:\Program Files\ESET\ESET Security\Modules\em021_64\15388\new_5B6725D2\em021_64.dll	ekrn.exe
File opened for modification	C:\Program Files\ESET\ESET Security\Modules\em042_64\2335\new_48197114\em042_64.dll	ekrn.exe
File opened for modification	C:\Program Files\ESET\ESET Security\eula.rtf	ekrn.exe
File created	C:\Program Files\ESET\ESET Security\Drivers\ekbdflt\ekbdflt.sys	msiexec.exe
File created	C:\Program Files\ESET\ESET Security\Drivers\epfwlwf\EpfwLwf.inf	msiexec.exe
File created	C:\Program Files\ESET\ESET Security\eguiActivationLang.dll	msiexec.exe
File created	C:\Program Files\ESET\ESET Security\ekrnScanLang.dll	msiexec.exe
File opened for modification	C:\Program Files\ESET\ESET Security\Modules\temp374D2002\NUPD4D6.tmp	MsiExec.exe
File opened for modification	C:\Program Files\ESET\ESET Security\Modules\temp374D2002\NUPD766.tmp	MsiExec.exe
File opened for modification	C:\Program Files\ESET\ESET Security\Modules\tempAD927949\NUP52F4.tmp	ekrn.exe
File opened for modification	C:\Program Files\ESET\ESET Security\Modules\tempAD927949\NUP3696.tmp	ekrn.exe
File created	C:\Program Files\ESET\ESET Security\api-ms-win-core-namedpipe-l1-1-0.dll	msiexec.exe
File created	C:\Program Files\ESET\ESET Security\api-ms-win-core-processthreads-l1-1-1.dll	msiexec.exe
File created	C:\Program Files\ESET\ESET Security\ecmds.exe	msiexec.exe
File created	C:\Program Files\ESET\ESET Security\ekrn.exe	msiexec.exe
File created	C:\Program Files\ESET\ESET Security\eclsLang.dll	msiexec.exe
File created	C:\Program Files\ESET\ESET Security\eguiDemeterLang.dll	msiexec.exe
File opened for modification	C:\Program Files\ESET\ESET Security\Modules\tempAD927949\NUP30D0.tmp	ekrn.exe
File opened for modification	C:\Program Files\ESET\ESET Security\Modules\tempAD927949\NUP188.tmp	ekrn.exe
File created	C:\Program Files\ESET\ESET Security\api-ms-win-core-synch-l1-1-0.dll	msiexec.exe
File created	C:\Program Files\ESET\ESET Security\cfgres.dll	msiexec.exe
File created	C:\Program Files\ESET\ESET Security\ecls.exe	msiexec.exe
File created	C:\Program Files\ESET\ESET Security\Drivers\eelam\eelam.inf	msiexec.exe
File created	C:\Program Files\ESET\ESET Security\efwd.exe	msiexec.exe
File created	C:\Program Files\ESET\ESET Security\Drivers\epfw\epfw.inf	msiexec.exe
File created	C:\Program Files\ESET\ESET Security\Help\r_copyright.png	MsiExec.exe
File opened for modification	C:\Program Files\ESET\ESET Security\Modules\tempAD927949\NUP3FA2.tmp	ekrn.exe
File opened for modification	C:\Program Files\ESET\ESET Security\Modules\tempAD927949\NUP56DA.tmp	ekrn.exe
File created	C:\Program Files\ESET\ESET Security\ekrnHips.dll	msiexec.exe
File created	C:\Program Files\ESET\ESET Security\EsetContextMenu.msix	msiexec.exe
File created	C:\Program Files\ESET\ESET Security\api-ms-win-crt-filesystem-l1-1-0.dll	msiexec.exe
File created	C:\Program Files\ESET\ESET Security\x86\eplgOE.dll	msiexec.exe
File opened for modification	C:\Program Files\ESET\ESET Security\Modules\tempAD927949\NUP2E6C.tmp	ekrn.exe
File opened for modification	C:\Program Files\ESET\ESET Security\EUL9A8B.tmp	ekrn.exe
File created	C:\Program Files\ESET\ESET Security\api-ms-win-core-console-l1-2-0.dll	msiexec.exe
File created	C:\Program Files\ESET\ESET Security\api-ms-win-crt-heap-l1-1-0.dll	msiexec.exe
File created	C:\Program Files\ESET\ESET Security\ShellExtLang.dll	msiexec.exe
File created	C:\Program Files\ESET\ESET Security\Help\blank.png	MsiExec.exe
File created	C:\Program Files\ESET\ESET Security\Help\no_internet_connection_malware.html	MsiExec.exe
File opened for modification	C:\Program Files\ESET\ESET Security\Modules\em023_64\38663\new_C0B5DA5F\em023_64.dll	ekrn.exe
File created	C:\Program Files\ESET\ESET Security\api-ms-win-crt-time-l1-1-0.dll	msiexec.exe
File created	C:\Program Files\ESET\ESET Security\Drivers\eamonm\eamonm.cat	msiexec.exe
File created	C:\Program Files\ESET\ESET Security\eCapture.exe	msiexec.exe
File created	C:\Program Files\ESET\ESET Security\x86\edb.dll	msiexec.exe
File created	C:\Program Files\ESET\ESET Security\eguiParental.dll	msiexec.exe
File created	C:\Program Files\ESET\ESET Security\Drivers\epfwwfp\epfwwfp.cat	msiexec.exe
File created	C:\Program Files\ESET\ESET Security\vcruntime140_threads.dll	msiexec.exe
File created	C:\Program Files\ESET\ESET Security\eguiOnlineHelpLang.dll	msiexec.exe
File opened for modification	C:\Program Files\ESET\ESET Security\Modules\temp374D2002\NUPD54D.tmp	MsiExec.exe
File opened for modification	C:\Program Files\ESET\ESET Security\Modules\tempAD927949\NUP3B3.tmp	ekrn.exe
File created	C:\Program Files\ESET\ESET Security\api-ms-win-crt-conio-l1-1-0.dll	msiexec.exe
File created	C:\Program Files\ESET\ESET Security\eguiLang.dll	msiexec.exe
File opened for modification	C:\Program Files\ESET\ESET Security\Modules\tempAD927949\NUP303F.tmp	ekrn.exe
File opened for modification	C:\Program Files\ESET\ESET Security\Modules\em035_64\1366\new_CB3995BC\em035_64.dll	ekrn.exe

Drops file in Windows directory 64 IoCs

description	ioc	Process
File opened for modification	C:\Windows\Installer\{2AE41595-0CB6-45AD-A2FA-E20798D8842F}\Icon_Help	msiexec.exe
File opened for modification	C:\Windows\INF\setupapi.dev.log	DrvInst.exe
File opened for modification	C:\Windows\inf\oem9.inf	DrvInst.exe
File opened for modification	C:\Windows\Installer\MSIC416.tmp	msiexec.exe
File opened for modification	C:\Windows\Installer\MSICBB5.tmp	msiexec.exe
File opened for modification	C:\Windows\Installer\MSIC3E5.tmp	msiexec.exe
File opened for modification	C:\Windows\Installer\MSIDD95.tmp	msiexec.exe
File opened for modification	C:\Windows\Installer\MSIDD74.tmp	msiexec.exe
File opened for modification	C:\Windows\Installer\MSIDDE9.tmp	msiexec.exe
File opened for modification	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.log	msiexec.exe
File opened for modification	C:\Windows\INF\setupapi.dev.log	DrvInst.exe
File created	C:\Windows\Installer\e60bcd0.msi	msiexec.exe
File opened for modification	C:\Windows\Installer\MSICD0E.tmp	msiexec.exe
File opened for modification	C:\Windows\Installer\MSID1A7.tmp	msiexec.exe
File created	C:\Windows\INF\oem5.PNF	ekrn.exe
File opened for modification	C:\Windows\SystemTemp	chrome.exe
File created	C:\Windows\inf\oem9.inf	DrvInst.exe
File opened for modification	C:\Windows\Installer\MSIDDC7.tmp	msiexec.exe
File created	C:\Windows\inf\oem5.inf	DrvInst.exe
File created	C:\Windows\inf\oem6.inf	DrvInst.exe
File created	C:\Windows\INF\oem7.PNF	ekrn.exe
File opened for modification	C:\Windows\Installer\MSIC446.tmp	msiexec.exe
File opened for modification	C:\Windows\Installer\MSID3FA.tmp	msiexec.exe
File opened for modification	C:\Windows\INF\setupapi.dev.log	DrvInst.exe
File opened for modification	C:\Windows\Installer\MSID3EA.tmp	msiexec.exe
File opened for modification	C:\Windows\Installer\MSID41B.tmp	msiexec.exe
File opened for modification	C:\Windows\Installer\MSIDEE9.tmp	msiexec.exe
File opened for modification	C:\Windows\Installer\MSIC3F6.tmp	msiexec.exe
File opened for modification	C:\Windows\inf\oem8.inf	DrvInst.exe
File created	C:\Windows\inf\oem4.inf	DrvInst.exe
File opened for modification	C:\Windows\INF\setupapi.dev.log	DrvInst.exe
File opened for modification	C:\Windows\Installer\MSIC620.tmp	msiexec.exe
File opened for modification	C:\Windows\ELAMBKUP\SETE3CD.tmp	ekrn.exe
File opened for modification	C:\Windows\Installer\MSICA4C.tmp	msiexec.exe
File created	C:\Windows\SystemTemp\~DF78CE142BCCC2052B.TMP	msiexec.exe
File opened for modification	C:\Windows\Installer\MSIC5F0.tmp	msiexec.exe
File created	C:\Windows\Installer\SourceHash{2AE41595-0CB6-45AD-A2FA-E20798D8842F}	msiexec.exe
File opened for modification	C:\Windows\INF\setupapi.dev.log	DrvInst.exe
File opened for modification	C:\Windows\Installer\	msiexec.exe
File created	C:\Windows\Installer\{2AE41595-0CB6-45AD-A2FA-E20798D8842F}\Icon_Product	msiexec.exe
File opened for modification	C:\Windows\Installer\MSICA1C.tmp	msiexec.exe
File opened for modification	C:\Windows\Installer\MSIDDA6.tmp	msiexec.exe
File opened for modification	C:\Windows\inf\oem3.inf	DrvInst.exe
File created	C:\Windows\ServiceProfiles\NetworkService\AppData\Local\ESET\ESET Security\registryFileStorage_userA.cfg	ekrn.exe
File opened for modification	C:\Windows\INF\setupapi.dev.log	DrvInst.exe
File opened for modification	C:\Windows\Installer\MSIC364.tmp	msiexec.exe
File opened for modification	C:\Windows\Installer\MSIC799.tmp	msiexec.exe
File created	C:\Windows\INF\oem9.PNF	ekrn.exe
File created	C:\Windows\SystemTemp\~DF3B4DD6FCDCF0F359.TMP	msiexec.exe
File opened for modification	C:\Windows\Installer\MSIC73A.tmp	msiexec.exe
File created	C:\Windows\inf\oem3.inf	DrvInst.exe
File opened for modification	C:\Windows\Installer\e60bccc.msi	msiexec.exe
File created	C:\Windows\SystemTemp\~DF4522270B498AB1BA.TMP	msiexec.exe
File opened for modification	C:\Windows\Installer\MSICD40.tmp	msiexec.exe
File opened for modification	C:\Windows\Installer\MSIE032.tmp	msiexec.exe
File created	C:\Windows\inf\oem8.inf	DrvInst.exe
File opened for modification	C:\Windows\Installer\MSICD2E.tmp	msiexec.exe
File opened for modification	C:\Windows\Installer\MSIDE3C.tmp	msiexec.exe
File opened for modification	C:\Windows\Installer\MSIC3A3.tmp	msiexec.exe
File opened for modification	C:\Windows\Installer\MSID45A.tmp	msiexec.exe
File opened for modification	C:\Windows\Installer\MSIDDF9.tmp	msiexec.exe
File opened for modification	C:\Windows\INF\setupapi.dev.log	ekrn.exe
File opened for modification	C:\Windows\Installer\MSIC3C3.tmp	msiexec.exe
File created	C:\Windows\Installer\{2AE41595-0CB6-45AD-A2FA-E20798D8842F}\Icon_Uninstall	msiexec.exe

Subvert Trust Controls: Mark-of-the-Web Bypass 1 TTPs 2 IoCs

When files are downloaded from the Internet, they are tagged with a hidden NTFS Alternate Data Stream (ADS) named Zone.Identifier with a specific value known as the MOTW.

defense_evasion

SIP and Trust Provider Hijacking

T1553.003

description	ioc	Process
File opened for modification	C:\Users\Admin\Downloads\ESET HOME Security Ultimate Installer.exe:Zone.Identifier	chrome.exe
File opened for modification	C:\Users\Admin\Downloads\utweb_installer.exe:Zone.Identifier	chrome.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Event Triggered Execution: Netsh Helper DLL 1 TTPs 6 IoCs

Netsh.exe (also referred to as Netshell) is a command-line scripting utility used to interact with the network configuration of a system.

persistence privilege_escalation

Netsh Helper DLL

T1546.007

description	ioc	Process
Key value enumerated	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\NetSh	ekrn.exe
Key opened	\REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh	ekrn.exe
Key queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh	ekrn.exe
Key value enumerated	\REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh	ekrn.exe
Key opened	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\NetSh	ekrn.exe
Key queried	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\NetSh	ekrn.exe

System Location Discovery: System Language Discovery 1 TTPs 18 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Language	ekrn.exe
Key value enumerated	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Language	ekrn.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	utweb_installer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	utweb.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	utweb.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	utweb.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	ESETSecurityUltimate18.0.12.0x64.tmp
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	utweb.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	utweb.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	cmd.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	powershell.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Language	ekrn.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	utweb_installer.tmp
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	utweb_installer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	utweb.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	ESETSecurityUltimate18.0.12.0x64.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	cmd.exe

Checks SCSI registry key(s) 3 TTPs 64 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Properties\{51236583-0c4a-4fe8-b81f-166aec13f510}\0064	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{51236583-0c4a-4fe8-b81f-166aec13f510}\0064	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{8c7ed206-3f8a-4827-b3ab-ae9e1faefc6c}\0002	explorer.exe
Key queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Device Parameters\Storport	ekrn.exe
Key value enumerated	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Device Parameters	ekrn.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_MSFT&PROD_VIRTUAL_DVD-ROM\2&1F4ADFFE&0&000001	DrvInst.exe
Key enumerated	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM	ekrn.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Phantom	DrvInst.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{51236583-0c4a-4fe8-b81f-166aec13f510}\007A	explorer.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	explorer.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\ConfigFlags	explorer.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Phantom	DrvInst.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\CompatibleIDs	DrvInst.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\HardwareID	DrvInst.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	DrvInst.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Storport	ekrn.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Phantom	DrvInst.exe
Key queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002	ekrn.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000	ekrn.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\HardwareID	DrvInst.exe
Key enumerated	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000	ekrn.exe
Key value enumerated	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Device Parameters\Storport	ekrn.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\FriendlyName	explorer.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\FriendlyName	explorer.exe
Key enumerated	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001	ekrn.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\ConfigFlags	svchost.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\005A	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{afd97640-86a3-4210-b67c-289c41aabe55}\0003	explorer.exe
Key queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM	ekrn.exe
Key queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr	ekrn.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\CompatibleIDs	DrvInst.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Phantom	DrvInst.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\CompatibleIDs	DrvInst.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Device Parameters	ekrn.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_MSFT&PROD_VIRTUAL_DVD-ROM\2&1F4ADFFE&0&000001	DrvInst.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_QEMU&PROD_QEMU_DVD-ROM\4&215468A5&0&010000	DrvInst.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	DrvInst.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\HardwareID	DrvInst.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_QEMU&PROD_QEMU_DVD-ROM\4&215468A5&0&010000	DrvInst.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Phantom	DrvInst.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\CompatibleIDs	DrvInst.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\CompatibleIDs	DrvInst.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\CompatibleIDs	DrvInst.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	svchost.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Phantom	DrvInst.exe
Key queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters	vssvc.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\CompatibleIDs	DrvInst.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties	ekrn.exe
Set value (data)	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr\PartitionTableCache = 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	vssvc.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\CompatibleIDs	DrvInst.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\HardwareID	DrvInst.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	DrvInst.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	DrvInst.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{cf73bb51-3abf-44a2-85e0-9a3dc7a12132}\0006	explorer.exe
Key value enumerated	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000	ekrn.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Phantom	DrvInst.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\HardwareID	DrvInst.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_MSFT&PROD_VIRTUAL_DVD-ROM\2&1F4ADFFE&0&000001	DrvInst.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Phantom	DrvInst.exe
Key queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Device Parameters	ekrn.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{83da6326-97a6-4088-9453-a1923f573b29}\0009	svchost.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{8c7ed206-3f8a-4827-b3ab-ae9e1faefc6c}\0002	explorer.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\HardwareID	DrvInst.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{540b947e-8b40-45bc-a8a2-6a0b894cbda2}\0009	explorer.exe

Checks processor information in registry 2 TTPs 13 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor	ekrn.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	ekrn.exe
Key value enumerated	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	ekrn.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\1	ekrn.exe
Key queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\1	ekrn.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	utweb_installer.tmp
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\	utweb_installer.tmp
Key opened	\Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0	ekrn.exe
Key value enumerated	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\1	ekrn.exe
Key queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	ekrn.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz	ekrn.exe
Key queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor	ekrn.exe
Key enumerated	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor	ekrn.exe

Enumerates system info in registry 2 TTPs 64 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value enumerated	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\FloatingPointProcessor\1	ekrn.exe
Key queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\MultifunctionAdapter\0\DiskController\0	ekrn.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\VideoAdapterBusses\PCIBus	ekrn.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	SearchHost.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\FloatingPointProcessor\1	ekrn.exe
Key queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\MultifunctionAdapter\0\KeyboardController\0\KeyboardPeripheral	ekrn.exe
Key enumerated	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\MultifunctionAdapter\0\KeyboardController\0\KeyboardPeripheral	ekrn.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\MultifunctionAdapter	ekrn.exe
Key enumerated	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\MultifunctionAdapter\0\DiskController\0\DiskPeripheral	ekrn.exe
Key queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\MultifunctionAdapter\0\KeyboardController\0\KeyboardPeripheral\0	ekrn.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\MultifunctionAdapter\0\DiskController\0\DiskPeripheral\0	ekrn.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\VideoAdapterBusses	ekrn.exe
Key queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\VideoAdapterBusses	ekrn.exe
Key enumerated	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\VideoAdapterBusses\PCIBus	ekrn.exe
Key queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\MultifunctionAdapter\0	ekrn.exe
Key value enumerated	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\MultifunctionAdapter\2	ekrn.exe
Key queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	ekrn.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\VideoAdapterBusses\PCIBus\0000	ekrn.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key enumerated	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\MultifunctionAdapter\0\KeyboardController	ekrn.exe
Key value enumerated	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\MultifunctionAdapter\0	ekrn.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\MultifunctionAdapter\2	ekrn.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\MultifunctionAdapter\0\DiskController	ekrn.exe
Key enumerated	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\MultifunctionAdapter\0\DiskController\0	ekrn.exe
Key value enumerated	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\MultifunctionAdapter\0\DiskController\0	ekrn.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\MultifunctionAdapter\0\KeyboardController\0\KeyboardPeripheral	ekrn.exe
Key queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\VideoAdapterBusses\PCIBus	ekrn.exe
Key value enumerated	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\MultifunctionAdapter\1	ekrn.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\FloatingPointProcessor\1	ekrn.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\MultifunctionAdapter\0\DiskController\0\DiskPeripheral\0	ekrn.exe
Key enumerated	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\MultifunctionAdapter\0\KeyboardController\0	ekrn.exe
Key value enumerated	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\MultifunctionAdapter\0\KeyboardController\0\KeyboardPeripheral\0	ekrn.exe
Key queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\VideoAdapterBusses\PCIBus\0000	ekrn.exe
Key value enumerated	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\VideoAdapterBusses\PCIBus	ekrn.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\FloatingPointProcessor	ekrn.exe
Key value enumerated	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\MultifunctionAdapter\0\KeyboardController\0	ekrn.exe
Key value enumerated	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\VideoAdapterBusses\PCIBus\0000	ekrn.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\BIOSVendor	ekrn.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\MultifunctionAdapter\0	ekrn.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\FloatingPointProcessor\0	ekrn.exe
Key enumerated	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\MultifunctionAdapter\0	ekrn.exe
Key queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\MultifunctionAdapter\0\DiskController	ekrn.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\MultifunctionAdapter\1	ekrn.exe
Key queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\FloatingPointProcessor	ekrn.exe
Key queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\MultifunctionAdapter	ekrn.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\MultifunctionAdapter\0\DiskController\0\DiskPeripheral	ekrn.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\MultifunctionAdapter\0\KeyboardController\0\KeyboardPeripheral\0	ekrn.exe
Key queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\MultifunctionAdapter\2	ekrn.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	ekrn.exe
Key enumerated	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\FloatingPointProcessor	ekrn.exe
Key queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\MultifunctionAdapter\0\DiskController\0\DiskPeripheral	ekrn.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\MultifunctionAdapter\0\KeyboardController\0	ekrn.exe

Gathers network information 2 TTPs 1 IoCs

Uses commandline utility to view network configuration.

System Information Discovery

T1082

Command and Scripting Interpreter

T1059

pid	Process
3200	ipconfig.exe

Kills process with taskkill 2 IoCs

evasion

pid	Process
5436	taskkill.exe
5368	taskkill.exe

Modifies Internet Explorer settings 1 TTPs 1 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-4249425805-3408538557-1766626484-1000\Software\Microsoft\Internet Explorer\GPU	SearchHost.exe

Modifies data under HKEY_USERS 64 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\Certificates	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\Certificates	DrvInst.exe
Set value (str)	\REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\27\52C64B7E\@%SystemRoot%\system32\dnsapi.dll,-103 = "Domain Name System (DNS) Server Trust"	ekrn.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople	ekrn.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\Certificates	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\CRLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CRLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CRLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CTLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\Certificates	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CTLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CTLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CTLs	ekrn.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CRLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CTLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CRLs	ekrn.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CRLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\Certificates	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CTLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\CRLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\Certificates	ekrn.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CTLs	ekrn.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CTLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\Certificates	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA	ekrn.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\Certificates	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CRLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CTLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CRLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\Certificates	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\Certificates	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\CTLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\Certificates	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CRLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot	ekrn.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CRLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\Certificates	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\Certificates	DrvInst.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\UNCAsIntranet = "1"	MsiExec.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CTLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\Certificates	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\CRLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\Certificates	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\Certificates	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\Certificates	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\Certificates	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CRLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CRLs	DrvInst.exe

Modifies registry class 64 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B089FE88-FB52-11D3-BDF1-0050DA34150D}\ = "ESET Security Shell"	MsiExec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\lnkfile\Shellex\ContextMenuHandlers	MsiExec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32	ekrn.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-4249425805-3408538557-1766626484-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Explorer\DOMStorage\www.bing.com\ = "7368"	SearchHost.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\lnkfile\shellex\ContextMenuHandlers\ESET Security Shell	MsiExec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\59514EA26BC0DA542AAF2E70898D48F2\EmailClientProtection = "_Features"	msiexec.exe
Key created	\REGISTRY\USER\S-1-5-21-4249425805-3408538557-1766626484-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-4249425805-3408538557-1766626484-1000_Classes\Local Settings\MuiCache	SearchHost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\BTWKey File\DefaultIcon\ = "C:\\Users\\Admin\\AppData\\Roaming\\uTorrent Web\\utweb.exe,0"	utweb_installer.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Magnet\shell\open\command\ = "C:\\Users\\Admin\\AppData\\Roaming\\uTorrent Web\\utweb.exe \"%1\" /SHELLASSOC"	utweb_installer.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\59514EA26BC0DA542AAF2E70898D48F2\GraphicUserInterface = "_Features"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\59514EA26BC0DA542AAF2E70898D48F2\OnlinePaymentProtection = "_Features"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\59514EA26BC0DA542AAF2E70898D48F2\SourceList\Media\1 = ";"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.torrent\OpenWithProgids	utweb_installer.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Drives\Shellex\ContextMenuHandlers	MsiExec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\59514EA26BC0DA542AAF2E70898D48F2\SysRescue = "_Features"	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\59514EA26BC0DA542AAF2E70898D48F2\DeploymentFlags = "3"	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\.zip\OpenWithProgids	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Magnet\DefaultIcon\ = "C:\\Users\\Admin\\AppData\\Roaming\\uTorrent Web\\utweb.exe,0"	utweb_installer.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Drives\Shellex\ContextMenuHandlers\ESET Security Shell	MsiExec.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-4249425805-3408538557-1766626484-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy\ApplicationFrame\Microsoft.Windows.PeopleExperienceHo = 6801000088020000	explorer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4249425805-3408538557-1766626484-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Settings\Cache\History\CachePrefix = "Visited:"	SearchHost.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\.torrent\OpenWithProgids\Torrent File = "0"	utweb_installer.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Torrent File\ = "Torrent File"	utweb_installer.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Magnet\Content Type = "application/x-magnet"	utweb_installer.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\ESET.OutlookAddin\CLSID	MsiExec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.xml\OpenWithProgIds\ESET.SysInspector	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\59514EA26BC0DA542AAF2E70898D48F2\SourceList\Media\8 = ";"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32	ekrn.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\BTWKey File\shell\open\command	utweb_installer.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\59514EA26BC0DA542AAF2E70898D48F2\PackageCode = "8E4EB6B13F62C9844A4FD31D4300F72E"	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\59514EA26BC0DA542AAF2E70898D48F2\Assignment = "1"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{f3130cdb-aa52-4c3a-ab32-85ffc23af9c1}\InprocServer32	ekrn.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\ESET.SysInspector	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\*\shellex\ContextMenuHandlers\ESET Security Shell\ = "{B089FE88-FB52-11D3-BDF1-0050DA34150D}"	MsiExec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\59514EA26BC0DA542AAF2E70898D48F2\SourceList	msiexec.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-4249425805-3408538557-1766626484-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Explorer\DOMStorage\bing.com\Total = "12474"	SearchHost.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Folder\Shellex\ContextMenuHandlers	MsiExec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{ECC7E393-B680-4109-86BD-7779105DF1BF}\ = "EsetAmsiProvider"	ekrn.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\59514EA26BC0DA542AAF2E70898D48F2\Clients = 3a0000000000	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\InProcServer32	ekrn.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-4249425805-3408538557-1766626484-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Explorer\DOMStorage\www.bing.com\ = "12474"	SearchHost.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\BTWKey File\DefaultIcon	utweb_installer.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\79AA332A50D011E4585D700F695D0537	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\59514EA26BC0DA542AAF2E70898D48F2\SourceList\Media\3 = ";"	msiexec.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-4249425805-3408538557-1766626484-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Explorer\DOMStorage\www.bing.com\ = "165"	SearchHost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.torrent\ = "Torrent File"	utweb_installer.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\59514EA26BC0DA542AAF2E70898D48F2\EDTD = "_Features"	msiexec.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-4249425805-3408538557-1766626484-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\TrayNotify\PastIconsStream = 1400000005000000010001000600000014000000494c200606008000440010001000ffffffff2110ffffffffffffffff424d3600000000000000360000002800000010000000000800000100200000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080a2062080a2062080a2062080a2062080a2062080a2062080a20620000000f0000000000000000000000000000000d0707004c100f0073171500881a1800913942e0ff3942e0ff3c44e0ffb0b4f3ff434be2ff3942e0ff3942e0ff0000011b000000000000000b403c00ab8a8000fa928800ff958c08ffa09720ffa49b2aff787771ff3942e0ff3a43e0ff6f76e9ff3c45e1ff3942e0ff1d2073b800000000000000025e5600ce938903ffd5d19dfff4f3e5fffffffefffffffffffffffffffdfdffff434ce2ff3942e0ffebedfcff3a43e0ff353fd7fb01010220000000000a0a005e928800ffe6e3c4ffffffffffffffffffffffffffffffffffffffffffffffffffdadcf9ff424ae1ffffffffff5b62e6ff4c4c6ce80000000000000000443e00afaba43bfffffffffffffffffffffffeffbdb764ffa29a26ffa19924ffa49c2affcec98dff6c72e8ff565ee5ff4850d7ff908605ff0302002f000000106a6300dbcec98cffffffffffffffffffa9a137ff928800ff948a03ffa49b29ff928800ff928800ffc2bf9cff3942e0ffb4b7edff928800ff0d0c006501010022867c00f5dad7a9ffffffffffffffffff999011ff928800fff8f7eeffffffffffdedcb3ffc9c482ffdbd8abfff8f8feffffffffff9d941aff151400830202002d928800ffdedab1ffffffffffffffffff968c09ff928800ffada640ff9c9533ffaea743ffafa843ffc9c480ffffffffffffffffffa29a26ff19180090030200318a8000f9dddab0ffffffffffffffffff978d0bff928800ffc1bb6dffa8a14eff70660bff8b8100ffbcb562ffffffffffffffffffa29925ff171500880202002e796f00e9d6d29effffffffffffffffff9e951dff928800ffd3cf9bffd6d2a3ff786d05ff6a5f00ffa29a47fff8f7eefffffffeff978d0bff1110007502020028575100c6beb867ffffffffffffffffffdcd9adff9a9114ff8d8300ff837900ff7b7103ff837a1bffbdb665ffb2aa4bffc9c385ff8f8500ff0706004b0101001a24220089968d0afffaf9f2fffffffffffffffffffefefcfff3f2e2ffe2dfbdffd9d5a7ffcfca8fffc5bf78ffbeb867ff999036ff605400fa0000000c0000000401010021877e00f8b8b159fffaf9f3fffffffffffbfaf5fff1f0e0ffe7e5c7ffdddab0ffd4d09bffcbc586ffb1a959ff6f6301ff2e2a00ab000000000000000000000000100f005e877e00f8968c0affbdb765ffcfcb92ffcfcb96ffcac58dffbfb979ffaca455ff8b8221ff736900ff484000cd0000000c000000000000000000000000000000000101002123210089555000c6716a00e77f7700f8857a00ff756a00f45a5100da373200ae0807005d00000002000000000000000000000000000000000000000000000000000000000002010f041d0e590e582ca213783dc613783dc611542ca2041c0e590002010f00000000000000000000000000000000000000000000000000000001052010583f9762de65c48bfe1dbb5dff1ebb5eff53c581ffe6f1eaffaed9bffe409762de0520105800000001000000000000000000000000000000010b3d207e8ccda5fbf6faf8ff4ec880ff1ebb5eff1dba5dffb9e4cafffffffffffffffffff9fbfaff90cda7fb0b3d207e0000000100000000000000000627135c91d1a9fbfefefeffd5f1e0ff20bb5fff1ebb5eff3ec073ffeef9f2fffafdfbfffffffffffffffffffefefeff95d2acfb0627135c00000000010804124aa870e3fafcfbffffffffff85d8a7ff1dba5dff1ebb5eff2abe67ff2fc06aff3cc473ff8bdcacfff5fcf8fffffffffffbfdfcff4da973e301080412072f1864bde7cefffffffffff6fcf8ff39c271ff1ebb5eff1ebb5eff1fb85dff3db96fff39b86cff1cb95cff74d49bffd7f2e2ff8fddafff6cd095ff072f18641d7d45b3f2faf5ffffffffffbeead0ff1dba5dff1ebb5eff24b961ffaedcc0fffbfcfcfff9fbfaff8dd2a9ff22bb60ff26bd63ff1dba5dff1bb85bff147b3eb338a063d7fefefeffffffffff6ad094ff1dbb5dff1dba5dff82d2a2ffffffffffffffffffffffffffe8f6eeff25bc62ff1ebb5eff37ba6cffb9dec8ff349e60d83ca667daffffffffeaf8f0ff2abe67ff1ebb5eff23ba60ffdbf1e4ffffffffffffffffffffffffffb1e6c7ff1dba5dff1db95cffaedec1ffffffffff40a76adb268e50bef8fcfaffa5e2beff1cba5dff1dbb5eff5bc887fffefefefffffffffffffffffffcfefdff50c981ff1ebb5eff3ebd72fff7faf8fff9fdfaff278e50be0f562c79d0f0ddff58c484ff1cb75bff1bb95bffb5e3c8ffffffffffffffffffffffffffc9eed8ff1fbb5fff1cba5dffa0d9b7ffffffffffd3f1dfff0f562c7904170c2069c78ff2e7f1ebffc0e0cdffa2d5b6fff7fbf8ffffffffffffffffffffffffff66cf91ff1dbb5dff34bb6bfff1f8f4fffefffeff6cc891f204170c2000000000115d3080bae9cdfffffffffffffffffffffffffffffffffffffffffffefefeffb0dbc1ff7ac799ffa9d9bdffffffffffbdeacfff115d30800000000000000000010503071e7f44abbeebd0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffc0ecd2ff1e7f46ab01050307000000000000000000000000010603081366358b77cf9cf7def5e7fffdfefefffffffffffffffffffdfefeffdff5e8ff79d09ef71466358b010603080000000000000000000000000000000000000000000000000622112e146e39953cac68dc5ec98af75ec98af73cac68dc146e39950622112e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080a2062080a2062080a2062080a2062080a2062080a2062080a20620000000f0000000000000000000000000000000d0605004c0e0d007315130088181600913942e0ff3942e0ff3c44e0ffb0b4f3ff434be2ff3942e0ff3942e0ff0000011b000000000000000b342f00ab6f6600fa796e00ff807505ff8e8418ff978e21ff74726eff3942e0ff3a43e0ff6f76e9ff3c45e1ff3942e0ff1d2073b80000000000000002453e00ce716601ffa8a04fffc7c181ffd7d3a3ffe1debaffeae8cefff2f1e5ff434be1ff3942e0ffebedfcff3a43e0ff353fd7fb01010220000000000706005e695e00ffaaa24cffc3bd73ffcbc686ffd5d09cffdfdcb6ffebead1fff6f5eaffd9dbf8ff424ae1ffffffffff5b62e6ff4c4c6ce80000000000000000433e00af8b811affb1a949ffbbb460ffc4be76ff999137ff8d831aff958c1dffa19828ffcec98dff6c72e8ff565ee5ff4850d7ff908605ff0302002f000000106a6300dbcec98cfff8f8efffbab35fff7a7011ff726700ff7c7202ff988f22ff918700ff928800ffc2bf9cff3942e0ffb4b7edff928800ff0d0c006501010022867c00f5dad7a9ffffffffffffffffff918810ff665b00ffc4bd7afff1efdcffdedcb3ffc9c482ffdbd8abfff8f8feffffffffff9d941aff151400830202002d928800ffdedab1ffffffffffffffffff968c09ff928800ff958d29ff9f9735ffafa843ffafa843ffc9c480ffffffffffffffffffa29a26ff19180090030200318a8000f9dddab0ffffffffffffffffff978d0bff928800ffc1bb6dffc3be73ffa29a26ff928800ffbcb562ffffffffffffffffffa29925ff171500880202002e796f00e9d6d29effffffffffffffffff9e951dff928800ffd6d29ffff0eedbff968d0aff928800ffd9d6a7fffffffffffffffeff978d0bff1110007502020028575100c6beb867ffffffffffffffffffdcd9adff9a9114ff928800ff928800ff948b06ffa9a135fffffffffffffffffff4f3e5ff928800ff0706004b0101001a24220089968d0afffaf9f2fffffffffffffffffffffffffffefefcfffaf9f3ffffffffffffffffffffffffffffffffffd5d19cff8a8000fa0000000c0000000401010021877e00f8b8b159fffaf9f3ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe5e3c3ff938903ff423e00ab000000000000000000000000100f005e877e00f8968c0affbdb766ffd4d19bffdcd9adffdedcb3ffdbd7aaffccc787ffaba43bff928800ff5c5700cd0000000c000000000000000000000000000000000101002123210089575100c6776f00e7877e00f8928800ff837a00f4686100da433d00ae0a09005d00000002000000000000000000000000000000000000000000000000000000000002010f041d0e590e582ca213783dc613783dc611542ca2041c0e590002010f00000000000000000000000000000000000000000000000000000001052010583f9762de65c48bfe1dbb5dff1ebb5eff53c581ffe6f1eaffaed9bffe409762de0520105800000001000000000000000000000000000000010b3d207e8ccda5fbf6faf8ff4ec880ff1ebb5eff1dba5dffb9e4cafffffffffffffffffff9fbfaff90cda7fb0b3d207e0000000100000000000000000627135c91d1a9fbfefefeffd5f1e0ff20bb5fff1ebb5eff3ec073ffeef9f2fffafdfbfffffffffffffffffffefefeff95d2acfb0627135c00000000010804124aa870e3fafcfbffffffffff85d8a7ff1dba5dff1ebb5eff2abe67ff2fc06aff3cc473ff8bdcacfff5fcf8fffffffffffbfdfcff4da973e301080412072f1864bde7cefffffffffff6fcf8ff39c271ff1ebb5eff1ebb5eff1fb85dff3db96fff39b86cff1cb95cff74d49bffd7f2e2ff8fddafff6cd095ff072f18641d7d45b3f2faf5ffffffffffbeead0ff1dba5dff1ebb5eff24b961ffaedcc0fffbfcfcfff9fbfaff8dd2a9ff22bb60ff26bd63ff1dba5dff1bb85bff147b3eb338a063d7fefefeffffffffff6ad094ff1dbb5dff1dba5dff82d2a2ffffffffffffffffffffffffffe8f6eeff25bc62ff1ebb5eff37ba6cffb9dec8ff349e60d83ca667daffffffffeaf8f0ff2abe67ff1ebb5eff23ba60ffdbf1e4ffffffffffffffffffffffffffb1e6c7ff1dba5dff1db95cffaedec1ffffffffff40a76adb268e50bef8fcfaffa5e2beff1cba5dff1dbb5eff5bc887fffefefefffffffffffffffffffcfefdff50c981ff1ebb5eff3ebd72fff7faf8fff9fdfaff278e50be0f562c79d0f0ddff58c484ff1cb75bff1bb95bffb5e3c8ffffffffffffffffffffffffffc9eed8ff1fbb5fff1cba5dffa0d9b7ffffffffffd3f1dfff0f562c7904170c2069c78ff2e7f1ebffc0e0cdffa2d5b6fff7fbf8ffffffffffffffffffffffffff66cf91ff1dbb5dff34bb6bfff1f8f4fffefffeff6cc891f204170c2000000000115d3080bae9cdfffffffffffffffffffffffffffffffffffffffffffefefeffb0dbc1ff7ac799ffa9d9bdffffffffffbdeacfff115d30800000000000000000010503071e7f44abbeebd0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffc0ecd2ff1e7f46ab01050307000000000000000000000000010603081366358b77cf9cf7def5e7fffdfefefffffffffffffffffffdfefeffdff5e8ff79d09ef71466358b010603080000000000000000000000000000000000000000000000000622112e146e39953cac68dc5ec98af75ec98af73cac68dc146e39950622112e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000ff00000060000000000000000000000020000000b0000000ff000000ff000000ff000000ff000000ff000000ff000000ff000000ff000000ff000000ff00000060000000200000000000000020000000f00d0d0df09d9d9dffc8c8c8ffe5e5e5ffe5e5e5ffe5e5e5ffe5e5e5ffe5e5e5ff8f8f8fff000000ff000000603f3f3f66000000ff00000060000000900a0a0af0c0c0c0ffe5e5e5ffe5e5e5ffe5e5e5ffe5e5e5ffe5e5e5ffe5e5e5ff8f8f8fff000000ff0000006056565660e2e2e2ff474747eb000000d0000000e04c4c4cee999999ff939393eeb1b1b1f0e0e0e0ffe5e5e5ffe5e5e5ff8f8f8fff000000ff0000006056565660c8c8c8f7adadadf6858585ff000000ff000000ff737373ff999999ff999999ff999999ff999999ffa0a0a0e8868686ff000000ff000000606d6d6d88aaaaaaebb2b2b2ffb2b2b2ff7a7a7aff000000ff000000ff696969ff999999ff999999ff999999ff999999ff5f5f5fff000000ff0000006045454571b2b2b2ffb2b2b2ffb2b2b2ffa7a7a7ff1b1b1be8000000c0000000b0080808f08f8f8fff999999ff999999ff5f5f5fff000000ff00000060303030607f7f7fff7b7b7bf67e7e7ee2525252e20a0a0af0000000f00000003000000020000000f0101010eb5a5a5af6505050ff000000ff00000060303030607f7f7fff7f7f7fff7f7f7fff676767ff000000ff000000b000000020000000000000000000000020000000b0000000ff000000ff00000060303030607f7f7fff7f7f7fff7f7f7fff777777ff080808f0000000d0000000000000000000000000000000000000000000000060000000ff00000060000000602c2c2ceb5f5f5fff5f5f5fff3f3f3fee080808f0000000f0000000300000000000000000000000000000000000000000000000a0000000600000000000000050000000b0000000f0000000ff000000f0000000a000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000ff00000060000000000000000000000020000000b0000000ff000000ff000000ff000000ff000000ff000000ff000000ff000000ff000000ff000000ff00000060000000200000000000000020000000f00d0d0df09d9d9dffc8c8c8ffe5e5e5ffe5e5e5ffe5e5e5ffe5e5e5ffe5e5e5ff8f8f8fff000000ff000000603f3f3f66000000ff00000060000000900a0a0af0c0c0c0ffe5e5e5ffe5e5e5ffe5e5e5ffe5e5e5ffe5e5e5ffe5e5e5ff8f8f8fff000000ff0000006056565660e2e2e2ff474747eb000000d0000000e04c4c4cee999999ff939393eeb1b1b1f0e0e0e0ffe5e5e5ffe5e5e5ff8f8f8fff000000ff0000006056565660c8c8c8f7adadadf6858585ff000000ff000000ff737373ff999999ff999999ff999999ff999999ffa0a0a0e8868686ff000000ff000000606d6d6d88aaaaaaebb2b2b2ffb2b2b2ff7a7a7aff000000ff000000ff696969ff999999ff999999ff999999ff999999ff5f5f5fff000000ff0000006045454571b2b2b2ffb2b2b2ffb2b2b2ffa7a7a7ff1b1b1be8000000c0000000b0080808f08f8f8fff999999ff999999ff5f5f5fff000000ff00000060303030607f7f7fff7b7b7bf67e7e7ee2525252e20a0a0af0000000f00000003000000020000000f0101010eb5a5a5af6505050ff000000ff00000060303030607f7f7fff7f7f7fff7f7f7fff676767ff000000ff000000b000000020000000000000000000000020000000b0000000ff000000ff00000060303030607f7f7fff7f7f7fff7f7f7fff777777ff080808f0000000d0000000000000000000000000000000000000000000000060000000ff00000060000000602c2c2ceb5f5f5fff5f5f5fff3f3f3fee080808f0000000f0000000300000000000000000000000000000000000000000000000a0000000600000000000000050000000b0000000f0000000ff000000f0000000a000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000424d3e000000000000003e0000002800000010000000000800000100010000000000002000000000000000000000000000000000000000000000ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00f0000c0030000800100008001000000000000000000000000000000000000000000000000000000000000000000008001000080010000c0030000e007000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00f0000c0030000800100008001000000000000000000000000000000000000000000000000000000000000000000008001000080010000c0030000e0070000ffff0000fff90000fff10000800100000000000000000000000000000000000000000000000000000001000080070000c0070000c80f0000ffff0000ffff0000ffff0000fff90000fff10000800100000000000000000000000000000000000000000000000000000001000080070000c0070000c80f0000ffff0000ffff000000000000000000000000000000000000000000000000010000000800000007000000040000004c0000000100000000000000010000000000000001000000000000000100000000000000010000000000000001000000000000000000000000000000	explorer.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\79AA332A50D011E4585D700F695D0537\59514EA26BC0DA542AAF2E70898D48F2	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Magnet	utweb_installer.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\ESET.SysInspector\	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\*\shellex\ContextMenuHandlers\ESET Security Shell	MsiExec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Drive\Shellex\ContextMenuHandlers	MsiExec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\59514EA26BC0DA542AAF2E70898D48F2\ProtocolFiltering = "_Features"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\59514EA26BC0DA542AAF2E70898D48F2\eula = "_Features"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\BTWKey File\shell	utweb_installer.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{F43F5136-AA90-4005-9368-F91F5C120D69}\InprocServer32\ThreadingModel = "Apartment"	MsiExec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\InProcServer32	ekrn.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\.btwkey\OpenWithProgids\BTWKey File = "0"	utweb_installer.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID	MsiExec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{ECC7E393-B680-4109-86BD-7779105DF1BF}	ekrn.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{ECC7E393-B680-4109-86BD-7779105DF1BF}\InprocServer32\ = "C:\\Program Files\\ESET\\ESET Security\\x86\\eamsi.dll"	ekrn.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\59514EA26BC0DA542AAF2E70898D48F2\SourceList\PackageName = "ehs_nt64.msi"	msiexec.exe

Modifies system certificate store 2 TTPs 11 IoCs

evasion spyware trojan

Install Root Certificate

T1553.004

Modify Registry

T1112

description	ioc	Process
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\503006091D97D4F5AE39F7CBE7927D7D652D3431\Blob = 040000000100000010000000ee2931bc327e9ae6e8b5f751b43471900f0000000100000014000000327fc447408de9bf596f83d4b2fa4b8e3e7097d8090000000100000054000000305206082b0601050507030206082b06010505070303060a2b0601040182370a030406082b0601050507030406082b0601050507030606082b0601050507030706082b0601050507030106082b06010505070308530000000100000041000000303f3020060a6086480186fa6c0a010230123010060a2b0601040182373c0101030200c0301b060567810c010330123010060a2b0601040182373c0101030200c07f000000010000002c000000302a060a2b0601040182370a030406082b0601050507030506082b0601050507030606082b060105050703076200000001000000200000006dc47172e01cbcb0bf62580d895fe2b8ac9ad4f873801e0c10b9c837d21eb1770b000000010000001e00000045006e00740072007500730074002000280032003000340038002900000014000000010000001400000055e481d11180bed889b908a331f9a1240916b9701d0000000100000010000000e871723e266f38af5d49cda2a502669c7e000000010000000800000000c001b39667d601030000000100000014000000503006091d97d4f5ae39f7cbe7927d7d652d343119000000010000001000000091fad483f14848a8a69b18b805cdbb3a20000000010000002e0400003082042a30820312a00302010202043863def8300d06092a864886f70d01010505003081b431143012060355040a130b456e74727573742e6e65743140303e060355040b14377777772e656e74727573742e6e65742f4350535f3230343820696e636f72702e206279207265662e20286c696d697473206c6961622e2931253023060355040b131c286329203139393920456e74727573742e6e6574204c696d69746564313330310603550403132a456e74727573742e6e65742043657274696669636174696f6e20417574686f7269747920283230343829301e170d3939313232343137353035315a170d3239303732343134313531325a3081b431143012060355040a130b456e74727573742e6e65743140303e060355040b14377777772e656e74727573742e6e65742f4350535f3230343820696e636f72702e206279207265662e20286c696d697473206c6961622e2931253023060355040b131c286329203139393920456e74727573742e6e6574204c696d69746564313330310603550403132a456e74727573742e6e65742043657274696669636174696f6e20417574686f726974792028323034382930820122300d06092a864886f70d01010105000382010f003082010a0282010100ad4d4ba91286b2eaa320071516642a2b4bd1bf0b4a4d8eed8076a567b77840c07342c868c0db532bdd5eb8769835938b1a9d7c133a0e1f5bb71ecfe524141eb181a98d7db8cc6b4b03f1020cdcaba54024007f7494a19d0829b3880bf587779d55cde4c37ed76a64ab851486955b9732506f3dc8ba660ce3fcbdb849c176894919fdc0a8bd89a3672fc69fbc711960b82de92cc99076667b94e2af78d665535d3cd69cb2cf2903f92fa450b2d448ce0532558afdb2644c0ee4980775db7fdfb9085560853029f97b48a46986e3353f1e865d7a7a15bdef008e1522541700902693bc0e496891bff847d39d9542c10e4ddf6f26cfc3182162664370d6d5c007e10203010001a3423040300e0603551d0f0101ff040403020106300f0603551d130101ff040530030101ff301d0603551d0e0416041455e481d11180bed889b908a331f9a1240916b970300d06092a864886f70d010105050003820101003b9b8f569b30e753997c7a79a74d97d7199590fb061fca337c46638f966624fa401b2127cae67273f24ffe3199fdc80c4c6853c680821398fab6adda5d3df1ce6ef6151194820cee3f95af11ab0fd72fde1f038f572c1ec9bb9a1a4495eb184fa61fcd7d57102f9b04095a84b56ed81d3ae1d69ed16c795e791c14c5e3d04c933b653ceddf3dbea6e5951ac3b519c3bd5e5bbbff23ef6819cb1293275c032d6f30d01eb61aacde5af7d1aaa827a6fe7981c479993357ba12b0a9e0426c93ca56defe6d840b088b7e8dead79821c6f3e73c792f5e9cd14c158de1ec2237cc9a430b97dc80908db3679b6f48081556cfbff12b7c5e9a76e95990c57c8335116551	utweb.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\503006091D97D4F5AE39F7CBE7927D7D652D3431\Blob = 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	utweb.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\5C602E01189AE674539A720B25D0ADABF069295B\Blob = 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	ekrn.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\5C602E01189AE674539A720B25D0ADABF069295B\Blob = 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	ekrn.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\5C602E01189AE674539A720B25D0ADABF069295B\Blob = 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	ekrn.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DDFB16CD4931C973A2037D3FC83A4D7D775D05E4	utweb.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DDFB16CD4931C973A2037D3FC83A4D7D775D05E4\Blob = 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	utweb.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\503006091D97D4F5AE39F7CBE7927D7D652D3431	utweb.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DDFB16CD4931C973A2037D3FC83A4D7D775D05E4\Blob = 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	utweb.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\5C602E01189AE674539A720B25D0ADABF069295B	ekrn.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\5C602E01189AE674539A720B25D0ADABF069295B\Blob = 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	ekrn.exe

NTFS ADS 3 IoCs

description	ioc	Process
File opened for modification	C:\Users\Admin\Downloads\FTUApps.com-ESET-Security-Ultimate-v18.0.12.0-Multilingual-Pre-Activated.torrent:Zone.Identifier	chrome.exe
File opened for modification	C:\Users\Admin\Downloads\utweb_installer.exe:Zone.Identifier	chrome.exe
File opened for modification	C:\Users\Admin\Downloads\ESET HOME Security Ultimate Installer.exe:Zone.Identifier	chrome.exe

Script User-Agent 1 IoCs

Uses user-agent string associated with script host/environment.

description	flow	ioc
HTTP User-Agent header	319	Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)

Suspicious behavior: EnumeratesProcesses 64 IoCs

pid	Process
3016	chrome.exe
3016	chrome.exe
3116	msedge.exe
3116	msedge.exe
4240	msedge.exe
4240	msedge.exe
2684	identity_helper.exe
2684	identity_helper.exe
5512	msedge.exe
5512	msedge.exe
5628	chrome.exe
5628	chrome.exe
5628	chrome.exe
5628	chrome.exe
2936	msedge.exe
2936	msedge.exe
2936	msedge.exe
2936	msedge.exe
5568	utweb_installer.tmp
5568	utweb_installer.tmp
5568	utweb_installer.tmp
5568	utweb_installer.tmp
5568	utweb_installer.tmp
5568	utweb_installer.tmp
5568	utweb_installer.tmp
5568	utweb_installer.tmp
5568	utweb_installer.tmp
5568	utweb_installer.tmp
5568	utweb_installer.tmp
5568	utweb_installer.tmp
5568	utweb_installer.tmp
5568	utweb_installer.tmp
5568	utweb_installer.tmp
5568	utweb_installer.tmp
5568	utweb_installer.tmp
5568	utweb_installer.tmp
5568	utweb_installer.tmp
5568	utweb_installer.tmp
5568	utweb_installer.tmp
5568	utweb_installer.tmp
4928	utweb_installer.exe
4928	utweb_installer.exe
1348	msedge.exe
1348	msedge.exe
5372	msedge.exe
5372	msedge.exe
3636	msedge.exe
3636	msedge.exe
5840	identity_helper.exe
5840	identity_helper.exe
4880	msedge.exe
4880	msedge.exe
1820	msedge.exe
1820	msedge.exe
3244	msedge.exe
3244	msedge.exe
5532	identity_helper.exe
5532	identity_helper.exe
6124	msedge.exe
6124	msedge.exe
6124	msedge.exe
6124	msedge.exe
3964	powershell.exe
3964	powershell.exe

Suspicious behavior: GetForegroundWindowSpam 2 IoCs

pid	Process
6116	egui.exe
3076	eguiproxy.exe

Suspicious behavior: LoadsDriver 10 IoCs

pid	Process
676	Process not Found
676	Process not Found
676	Process not Found
676	Process not Found
676	Process not Found
676	Process not Found
676	Process not Found
676	Process not Found
676	Process not Found
676	Process not Found

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 47 IoCs

pid	Process
3016	chrome.exe
3016	chrome.exe
3016	chrome.exe
3016	chrome.exe
3016	chrome.exe
3016	chrome.exe
3016	chrome.exe
3016	chrome.exe
3016	chrome.exe
3016	chrome.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
3016	chrome.exe
3016	chrome.exe
3016	chrome.exe
3016	chrome.exe
3016	chrome.exe
3016	chrome.exe
3016	chrome.exe
3016	chrome.exe
3016	chrome.exe
4240	msedge.exe
5372	msedge.exe
5372	msedge.exe
5372	msedge.exe
5372	msedge.exe
5372	msedge.exe
5372	msedge.exe
1820	msedge.exe
1820	msedge.exe
1820	msedge.exe
1820	msedge.exe
1820	msedge.exe
1820	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
560	msedge.exe
748	msedge.exe
748	msedge.exe

Suspicious behavior: RenamesItself 10 IoCs

pid	Process
784	ekrn.exe
784	ekrn.exe
784	ekrn.exe
784	ekrn.exe
784	ekrn.exe
784	ekrn.exe
784	ekrn.exe
784	ekrn.exe
784	ekrn.exe
784	ekrn.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	3016	chrome.exe
Token: SeCreatePagefilePrivilege	3016	chrome.exe
Token: SeShutdownPrivilege	3016	chrome.exe
Token: SeCreatePagefilePrivilege	3016	chrome.exe
Token: SeShutdownPrivilege	3016	chrome.exe
Token: SeCreatePagefilePrivilege	3016	chrome.exe
Token: SeShutdownPrivilege	3016	chrome.exe
Token: SeCreatePagefilePrivilege	3016	chrome.exe
Token: SeShutdownPrivilege	3016	chrome.exe
Token: SeCreatePagefilePrivilege	3016	chrome.exe
Token: SeShutdownPrivilege	3016	chrome.exe
Token: SeCreatePagefilePrivilege	3016	chrome.exe
Token: SeShutdownPrivilege	3016	chrome.exe
Token: SeCreatePagefilePrivilege	3016	chrome.exe
Token: SeShutdownPrivilege	3016	chrome.exe
Token: SeCreatePagefilePrivilege	3016	chrome.exe
Token: SeShutdownPrivilege	3016	chrome.exe
Token: SeCreatePagefilePrivilege	3016	chrome.exe
Token: SeShutdownPrivilege	3016	chrome.exe
Token: SeCreatePagefilePrivilege	3016	chrome.exe
Token: SeShutdownPrivilege	3016	chrome.exe
Token: SeCreatePagefilePrivilege	3016	chrome.exe
Token: SeShutdownPrivilege	3016	chrome.exe
Token: SeCreatePagefilePrivilege	3016	chrome.exe
Token: SeShutdownPrivilege	3016	chrome.exe
Token: SeCreatePagefilePrivilege	3016	chrome.exe
Token: SeShutdownPrivilege	3016	chrome.exe
Token: SeCreatePagefilePrivilege	3016	chrome.exe
Token: SeShutdownPrivilege	3016	chrome.exe
Token: SeCreatePagefilePrivilege	3016	chrome.exe
Token: SeShutdownPrivilege	3016	chrome.exe
Token: SeCreatePagefilePrivilege	3016	chrome.exe
Token: SeShutdownPrivilege	3016	chrome.exe
Token: SeCreatePagefilePrivilege	3016	chrome.exe
Token: SeShutdownPrivilege	3016	chrome.exe
Token: SeCreatePagefilePrivilege	3016	chrome.exe
Token: SeShutdownPrivilege	3016	chrome.exe
Token: SeCreatePagefilePrivilege	3016	chrome.exe
Token: SeShutdownPrivilege	3016	chrome.exe
Token: SeCreatePagefilePrivilege	3016	chrome.exe
Token: SeShutdownPrivilege	3016	chrome.exe
Token: SeCreatePagefilePrivilege	3016	chrome.exe
Token: SeShutdownPrivilege	3016	chrome.exe
Token: SeCreatePagefilePrivilege	3016	chrome.exe
Token: SeShutdownPrivilege	3016	chrome.exe
Token: SeCreatePagefilePrivilege	3016	chrome.exe
Token: SeShutdownPrivilege	3016	chrome.exe
Token: SeCreatePagefilePrivilege	3016	chrome.exe
Token: SeShutdownPrivilege	3016	chrome.exe
Token: SeCreatePagefilePrivilege	3016	chrome.exe
Token: SeShutdownPrivilege	3016	chrome.exe
Token: SeCreatePagefilePrivilege	3016	chrome.exe
Token: SeShutdownPrivilege	3016	chrome.exe
Token: SeCreatePagefilePrivilege	3016	chrome.exe
Token: SeShutdownPrivilege	3016	chrome.exe
Token: SeCreatePagefilePrivilege	3016	chrome.exe
Token: SeShutdownPrivilege	3016	chrome.exe
Token: SeCreatePagefilePrivilege	3016	chrome.exe
Token: SeShutdownPrivilege	3016	chrome.exe
Token: SeCreatePagefilePrivilege	3016	chrome.exe
Token: SeShutdownPrivilege	3016	chrome.exe
Token: SeCreatePagefilePrivilege	3016	chrome.exe
Token: SeShutdownPrivilege	3016	chrome.exe
Token: SeCreatePagefilePrivilege	3016	chrome.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
3016	chrome.exe
3016	chrome.exe
3016	chrome.exe
3016	chrome.exe
3016	chrome.exe
3016	chrome.exe
3016	chrome.exe
3016	chrome.exe
3016	chrome.exe
3016	chrome.exe
3016	chrome.exe
3016	chrome.exe
3016	chrome.exe
3016	chrome.exe
3016	chrome.exe
3016	chrome.exe
3016	chrome.exe
3016	chrome.exe
3016	chrome.exe
3016	chrome.exe
3016	chrome.exe
3016	chrome.exe
3016	chrome.exe
3016	chrome.exe
3016	chrome.exe
3016	chrome.exe
3016	chrome.exe
3016	chrome.exe
3016	chrome.exe
3016	chrome.exe
3016	chrome.exe
3016	chrome.exe
3016	chrome.exe
3016	chrome.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe

Suspicious use of SendNotifyMessage 64 IoCs

pid	Process
3016	chrome.exe
3016	chrome.exe
3016	chrome.exe
3016	chrome.exe
3016	chrome.exe
3016	chrome.exe
3016	chrome.exe
3016	chrome.exe
3016	chrome.exe
3016	chrome.exe
3016	chrome.exe
3016	chrome.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
396	utweb.exe
396	utweb.exe
396	utweb.exe
5372	msedge.exe
5372	msedge.exe
5372	msedge.exe
5372	msedge.exe
5372	msedge.exe
5372	msedge.exe
5372	msedge.exe
5372	msedge.exe
5372	msedge.exe
5372	msedge.exe
5372	msedge.exe
5372	msedge.exe
1820	msedge.exe
1820	msedge.exe
1820	msedge.exe
1820	msedge.exe
1820	msedge.exe
1820	msedge.exe
1820	msedge.exe
1820	msedge.exe
1820	msedge.exe
1820	msedge.exe
1820	msedge.exe
1820	msedge.exe
396	utweb.exe
3076	eguiproxy.exe
3076	eguiproxy.exe
3076	eguiproxy.exe
3076	eguiproxy.exe
3076	eguiproxy.exe
3076	eguiproxy.exe
3076	eguiproxy.exe
3076	eguiproxy.exe

Suspicious use of SetWindowsHookEx 5 IoCs

pid	Process
6116	egui.exe
6100	explorer.exe
2188	SearchHost.exe
2800	StartMenuExperienceHost.exe
6100	explorer.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2864 wrote to memory of 3488	2864	Bootstrapper.exe	81
PID 2864 wrote to memory of 3488	2864	Bootstrapper.exe	81
PID 3488 wrote to memory of 3200	3488	cmd.exe	83
PID 3488 wrote to memory of 3200	3488	cmd.exe	83
PID 3016 wrote to memory of 4424	3016	chrome.exe	87
PID 3016 wrote to memory of 4424	3016	chrome.exe	87
PID 3016 wrote to memory of 5020	3016	chrome.exe	88
PID 3016 wrote to memory of 5020	3016	chrome.exe	88
PID 3016 wrote to memory of 5020	3016	chrome.exe	88
PID 3016 wrote to memory of 5020	3016	chrome.exe	88
PID 3016 wrote to memory of 5020	3016	chrome.exe	88
PID 3016 wrote to memory of 5020	3016	chrome.exe	88
PID 3016 wrote to memory of 5020	3016	chrome.exe	88
PID 3016 wrote to memory of 5020	3016	chrome.exe	88
PID 3016 wrote to memory of 5020	3016	chrome.exe	88
PID 3016 wrote to memory of 5020	3016	chrome.exe	88
PID 3016 wrote to memory of 5020	3016	chrome.exe	88
PID 3016 wrote to memory of 5020	3016	chrome.exe	88
PID 3016 wrote to memory of 5020	3016	chrome.exe	88
PID 3016 wrote to memory of 5020	3016	chrome.exe	88
PID 3016 wrote to memory of 5020	3016	chrome.exe	88
PID 3016 wrote to memory of 5020	3016	chrome.exe	88
PID 3016 wrote to memory of 5020	3016	chrome.exe	88
PID 3016 wrote to memory of 5020	3016	chrome.exe	88
PID 3016 wrote to memory of 5020	3016	chrome.exe	88
PID 3016 wrote to memory of 5020	3016	chrome.exe	88
PID 3016 wrote to memory of 5020	3016	chrome.exe	88
PID 3016 wrote to memory of 5020	3016	chrome.exe	88
PID 3016 wrote to memory of 5020	3016	chrome.exe	88
PID 3016 wrote to memory of 5020	3016	chrome.exe	88
PID 3016 wrote to memory of 5020	3016	chrome.exe	88
PID 3016 wrote to memory of 5020	3016	chrome.exe	88
PID 3016 wrote to memory of 5020	3016	chrome.exe	88
PID 3016 wrote to memory of 5020	3016	chrome.exe	88
PID 3016 wrote to memory of 5020	3016	chrome.exe	88
PID 3016 wrote to memory of 5020	3016	chrome.exe	88
PID 3016 wrote to memory of 2948	3016	chrome.exe	89
PID 3016 wrote to memory of 2948	3016	chrome.exe	89
PID 3016 wrote to memory of 1032	3016	chrome.exe	90
PID 3016 wrote to memory of 1032	3016	chrome.exe	90
PID 3016 wrote to memory of 1032	3016	chrome.exe	90
PID 3016 wrote to memory of 1032	3016	chrome.exe	90
PID 3016 wrote to memory of 1032	3016	chrome.exe	90
PID 3016 wrote to memory of 1032	3016	chrome.exe	90
PID 3016 wrote to memory of 1032	3016	chrome.exe	90
PID 3016 wrote to memory of 1032	3016	chrome.exe	90
PID 3016 wrote to memory of 1032	3016	chrome.exe	90
PID 3016 wrote to memory of 1032	3016	chrome.exe	90
PID 3016 wrote to memory of 1032	3016	chrome.exe	90
PID 3016 wrote to memory of 1032	3016	chrome.exe	90
PID 3016 wrote to memory of 1032	3016	chrome.exe	90
PID 3016 wrote to memory of 1032	3016	chrome.exe	90
PID 3016 wrote to memory of 1032	3016	chrome.exe	90
PID 3016 wrote to memory of 1032	3016	chrome.exe	90
PID 3016 wrote to memory of 1032	3016	chrome.exe	90
PID 3016 wrote to memory of 1032	3016	chrome.exe	90
PID 3016 wrote to memory of 1032	3016	chrome.exe	90
PID 3016 wrote to memory of 1032	3016	chrome.exe	90
PID 3016 wrote to memory of 1032	3016	chrome.exe	90
PID 3016 wrote to memory of 1032	3016	chrome.exe	90
PID 3016 wrote to memory of 1032	3016	chrome.exe	90
PID 3016 wrote to memory of 1032	3016	chrome.exe	90
PID 3016 wrote to memory of 1032	3016	chrome.exe	90
PID 3016 wrote to memory of 1032	3016	chrome.exe	90

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012
Uses Volume Shadow Copy WMI provider
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware
Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware

C:\Users\Admin\AppData\Local\Temp\Bootstrapper.exe
"C:\Users\Admin\AppData\Local\Temp\Bootstrapper.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2864
- C:\Windows\SYSTEM32\cmd.exe
  "cmd" /c ipconfig /all
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:3488
- - C:\Windows\system32\ipconfig.exe
    ipconfig /all
    3⤵
    - Gathers network information
    PID:3200

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3016
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=123.0.6312.123 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ff8007acc40,0x7ff8007acc4c,0x7ff8007acc58
  2⤵
  PID:4424
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=2052,i,16001807759733056417,3672010576613840394,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=2032 /prefetch:2
  2⤵
  PID:5020
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=1796,i,16001807759733056417,3672010576613840394,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=2104 /prefetch:3
  2⤵
  PID:2948
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=2240,i,16001807759733056417,3672010576613840394,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=2424 /prefetch:8
  2⤵
  PID:1032
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3084,i,16001807759733056417,3672010576613840394,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3240 /prefetch:1
  2⤵
  PID:1500
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3152,i,16001807759733056417,3672010576613840394,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3268 /prefetch:1
  2⤵
  PID:2728
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --field-trial-handle=4468,i,16001807759733056417,3672010576613840394,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3568 /prefetch:1
  2⤵
  PID:4708
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=4868,i,16001807759733056417,3672010576613840394,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4348 /prefetch:8
  2⤵
  PID:3664
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4656,i,16001807759733056417,3672010576613840394,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4964 /prefetch:8
  2⤵
  PID:4420
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --field-trial-handle=4892,i,16001807759733056417,3672010576613840394,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4316 /prefetch:1
  2⤵
  PID:5100
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=3388,i,16001807759733056417,3672010576613840394,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3396 /prefetch:8
  2⤵
  PID:3332
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4996,i,16001807759733056417,3672010576613840394,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5020 /prefetch:8
  2⤵
  PID:2008
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --field-trial-handle=3324,i,16001807759733056417,3672010576613840394,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3344 /prefetch:1
  2⤵
  PID:4144
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --field-trial-handle=3340,i,16001807759733056417,3672010576613840394,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3736 /prefetch:1
  2⤵
  PID:2716
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --field-trial-handle=3496,i,16001807759733056417,3672010576613840394,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5028 /prefetch:1
  2⤵
  PID:1424
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --no-appcompat-clear --field-trial-handle=5292,i,16001807759733056417,3672010576613840394,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5040 /prefetch:8
  2⤵
  PID:796
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=5312,i,16001807759733056417,3672010576613840394,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5428 /prefetch:8
  2⤵
  PID:992
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --field-trial-handle=5424,i,16001807759733056417,3672010576613840394,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5472 /prefetch:1
  2⤵
  PID:4664
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --field-trial-handle=3460,i,16001807759733056417,3672010576613840394,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3320 /prefetch:1
  2⤵
  PID:2908
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --field-trial-handle=3252,i,16001807759733056417,3672010576613840394,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4408 /prefetch:1
  2⤵
  PID:4312
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --no-appcompat-clear --field-trial-handle=5884,i,16001807759733056417,3672010576613840394,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5912 /prefetch:8
  2⤵
  PID:1932
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --no-appcompat-clear --field-trial-handle=5608,i,16001807759733056417,3672010576613840394,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5596 /prefetch:8
  2⤵
  PID:1360
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --no-appcompat-clear --field-trial-handle=5932,i,16001807759733056417,3672010576613840394,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=6084 /prefetch:8
  2⤵
  PID:3024
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --no-appcompat-clear --field-trial-handle=6112,i,16001807759733056417,3672010576613840394,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=6240 /prefetch:8
  2⤵
  PID:4216
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=5496,i,16001807759733056417,3672010576613840394,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3268 /prefetch:8
  2⤵
  - Subvert Trust Controls: Mark-of-the-Web Bypass
  - NTFS ADS
  PID:1048
- C:\Users\Admin\Downloads\ESET HOME Security Ultimate Installer.exe
  "C:\Users\Admin\Downloads\ESET HOME Security Ultimate Installer.exe"
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:3936
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://apps.microsoft.com/store/detail/XPDNH6NKMMR9BP?ocid=&referrer=psi
    3⤵
    - Enumerates system info in registry
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    - Suspicious use of FindShellTrayWindow
    - Suspicious use of SendNotifyMessage
    PID:4240
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x120,0x124,0x128,0xfc,0x12c,0x7fffe5b43cb8,0x7fffe5b43cc8,0x7fffe5b43cd8
      4⤵
      PID:4064
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1868,15136786915439875726,13868520270510226165,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1880 /prefetch:2
      4⤵
      PID:3024
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1868,15136786915439875726,13868520270510226165,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2180 /prefetch:3
      4⤵
      Suspicious behavior: EnumeratesProcesses
      PID:3116
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1868,15136786915439875726,13868520270510226165,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2712 /prefetch:8
      4⤵
      PID:1480
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1868,15136786915439875726,13868520270510226165,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3296 /prefetch:1
      4⤵
      PID:1948
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1868,15136786915439875726,13868520270510226165,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3340 /prefetch:1
      4⤵
      PID:1832
  - - C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1868,15136786915439875726,13868520270510226165,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5252 /prefetch:8
      4⤵
      Suspicious behavior: EnumeratesProcesses
      PID:2684
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1868,15136786915439875726,13868520270510226165,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3484 /prefetch:8
      4⤵
      Suspicious behavior: EnumeratesProcesses
      PID:5512
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1868,15136786915439875726,13868520270510226165,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4124 /prefetch:1
      4⤵
      PID:5608
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1868,15136786915439875726,13868520270510226165,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5440 /prefetch:1
      4⤵
      PID:5616
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1868,15136786915439875726,13868520270510226165,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3356 /prefetch:1
      4⤵
      PID:5760
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1868,15136786915439875726,13868520270510226165,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5288 /prefetch:1
      4⤵
      PID:5768
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1868,15136786915439875726,13868520270510226165,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --gpu-preferences=SAAAAAAAAADoAAAwAAAAAAAAAAAAAAAAAABgAAAQAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=4896 /prefetch:2
      4⤵
      Suspicious behavior: EnumeratesProcesses
      PID:2936
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1868,15136786915439875726,13868520270510226165,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4148 /prefetch:1
      4⤵
      PID:4980
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --field-trial-handle=6364,i,16001807759733056417,3672010576613840394,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5756 /prefetch:1
  2⤵
  PID:6120
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --field-trial-handle=6708,i,16001807759733056417,3672010576613840394,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=6732 /prefetch:1
  2⤵
  PID:1360
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=5548,i,16001807759733056417,3672010576613840394,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4408 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5628
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --field-trial-handle=4392,i,16001807759733056417,3672010576613840394,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5788 /prefetch:1
  2⤵
  PID:6104
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --field-trial-handle=5636,i,16001807759733056417,3672010576613840394,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=6488 /prefetch:1
  2⤵
  PID:5416
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --field-trial-handle=5704,i,16001807759733056417,3672010576613840394,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5484 /prefetch:1
  2⤵
  PID:5452
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=6876,i,16001807759733056417,3672010576613840394,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5136 /prefetch:8
  2⤵
  - NTFS ADS
  PID:576
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --field-trial-handle=7140,i,16001807759733056417,3672010576613840394,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3820 /prefetch:1
  2⤵
  PID:3360
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --field-trial-handle=6436,i,16001807759733056417,3672010576613840394,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=6672 /prefetch:1
  2⤵
  PID:5956
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --field-trial-handle=4336,i,16001807759733056417,3672010576613840394,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=7240 /prefetch:1
  2⤵
  PID:976
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --field-trial-handle=7452,i,16001807759733056417,3672010576613840394,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=7396 /prefetch:1
  2⤵
  PID:4716
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --no-appcompat-clear --field-trial-handle=7584,i,16001807759733056417,3672010576613840394,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=7648 /prefetch:8
  2⤵
  PID:5984
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --no-appcompat-clear --field-trial-handle=7620,i,16001807759733056417,3672010576613840394,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=7296 /prefetch:8
  2⤵
  PID:6016
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --no-appcompat-clear --field-trial-handle=7656,i,16001807759733056417,3672010576613840394,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=7844 /prefetch:8
  2⤵
  PID:5960
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --no-appcompat-clear --field-trial-handle=7672,i,16001807759733056417,3672010576613840394,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=7600 /prefetch:8
  2⤵
  PID:5260
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=7308,i,16001807759733056417,3672010576613840394,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=7796 /prefetch:8
  2⤵
  - Subvert Trust Controls: Mark-of-the-Web Bypass
  - NTFS ADS
  PID:1160
- C:\Users\Admin\Downloads\utweb_installer.exe
  "C:\Users\Admin\Downloads\utweb_installer.exe"
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  PID:2752
- - C:\Users\Admin\AppData\Local\Temp\is-M8T0M.tmp\utweb_installer.tmp
    "C:\Users\Admin\AppData\Local\Temp\is-M8T0M.tmp\utweb_installer.tmp" /SL5="$802A4,866469,820736,C:\Users\Admin\Downloads\utweb_installer.exe"
    3⤵
    - Executes dropped EXE
    - Checks for any installed AV software in registry
    - System Location Discovery: System Language Discovery
    - Checks processor information in registry
    - Suspicious behavior: EnumeratesProcesses
    PID:5568
  - - C:\Users\Admin\AppData\Local\Temp\is-24V69.tmp\utweb_installer.exe
      "C:\Users\Admin\AppData\Local\Temp\is-24V69.tmp\utweb_installer.exe" /S
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      System Location Discovery: System Language Discovery
      Modifies registry class
      Suspicious behavior: EnumeratesProcesses
      PID:4928
  - - C:\Users\Admin\AppData\Roaming\uTorrent Web\utweb.exe
      "C:\Users\Admin\AppData\Roaming\uTorrent Web\utweb.exe" /RUNONSTARTUP
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      Adds Run key to start application
      System Location Discovery: System Language Discovery
      Modifies system certificate store
      Suspicious use of SendNotifyMessage
      PID:396
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://utweb.rainberrytv.com/gui/index.html?v=1.4.0.5871&firstrun=1&localauth=localapi799195e2fab103db:
        5⤵
        
        PID:3560
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x120,0x124,0x128,0x104,0x12c,0x7fffe5b43cb8,0x7fffe5b43cc8,0x7fffe5b43cd8
        6⤵
        
        PID:5676
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://utweb.rainberrytv.com/gui/index.html?v=1.4.0.5871&localauth=localapi799195e2fab103db:
        5⤵
        Enumerates system info in registry
        Suspicious behavior: EnumeratesProcesses
        Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
        Suspicious use of SendNotifyMessage
        
        PID:5372
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x120,0x124,0x128,0xfc,0x12c,0x7fffe5b43cb8,0x7fffe5b43cc8,0x7fffe5b43cd8
        6⤵
        
        PID:5040
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1948,2384143956390461402,9948211554047364685,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1956 /prefetch:2
        6⤵
        
        PID:4468
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1948,2384143956390461402,9948211554047364685,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2312 /prefetch:3
        6⤵
        Suspicious behavior: EnumeratesProcesses
        
        PID:1348
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1948,2384143956390461402,9948211554047364685,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2864 /prefetch:8
        6⤵
        
        PID:2276
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1948,2384143956390461402,9948211554047364685,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1944 /prefetch:1
        6⤵
        
        PID:888
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1948,2384143956390461402,9948211554047364685,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3432 /prefetch:1
        6⤵
        
        PID:2904
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1948,2384143956390461402,9948211554047364685,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4888 /prefetch:8
        6⤵
        Suspicious behavior: EnumeratesProcesses
        
        PID:3636
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1948,2384143956390461402,9948211554047364685,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5332 /prefetch:1
        6⤵
        
        PID:388
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1948,2384143956390461402,9948211554047364685,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5388 /prefetch:1
        6⤵
        
        PID:2472
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1948,2384143956390461402,9948211554047364685,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5776 /prefetch:1
        6⤵
        
        PID:1484
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1948,2384143956390461402,9948211554047364685,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3532 /prefetch:1
        6⤵
        
        PID:3348
      - C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1948,2384143956390461402,9948211554047364685,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5668 /prefetch:8
        6⤵
        Suspicious behavior: EnumeratesProcesses
        
        PID:5840
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://utweb.rainberrytv.com/gui/index.html?v=1.4.0.5871&localauth=localapi799195e2fab103db:
        5⤵
        Enumerates system info in registry
        Suspicious behavior: EnumeratesProcesses
        Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
        Suspicious use of SendNotifyMessage
        
        PID:1820
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x12c,0x130,0x134,0xfc,0x138,0x7fffe5b43cb8,0x7fffe5b43cc8,0x7fffe5b43cd8
        6⤵
        
        PID:1468
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2056,15543123400203166538,1488851013100085495,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=2068 /prefetch:2
        6⤵
        
        PID:5116
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2056,15543123400203166538,1488851013100085495,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2136 /prefetch:3
        6⤵
        Suspicious behavior: EnumeratesProcesses
        
        PID:4880
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2056,15543123400203166538,1488851013100085495,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2656 /prefetch:8
        6⤵
        
        PID:688
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,15543123400203166538,1488851013100085495,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3216 /prefetch:1
        6⤵
        
        PID:4720
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,15543123400203166538,1488851013100085495,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3224 /prefetch:1
        6⤵
        
        PID:4728
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,15543123400203166538,1488851013100085495,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4976 /prefetch:1
        6⤵
        
        PID:3096
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,15543123400203166538,1488851013100085495,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5060 /prefetch:1
        6⤵
        
        PID:1972
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,15543123400203166538,1488851013100085495,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2480 /prefetch:1
        6⤵
        
        PID:3532
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,15543123400203166538,1488851013100085495,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3700 /prefetch:1
        6⤵
        
        PID:4956
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=2056,15543123400203166538,1488851013100085495,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4032 /prefetch:8
        6⤵
        Suspicious behavior: EnumeratesProcesses
        
        PID:3244
      - C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2056,15543123400203166538,1488851013100085495,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3336 /prefetch:8
        6⤵
        Suspicious behavior: EnumeratesProcesses
        
        PID:5532
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2056,15543123400203166538,1488851013100085495,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --gpu-preferences=SAAAAAAAAADoAAAwAAAAAAAAAAAAAAAAAABgAAAQAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=3312 /prefetch:2
        6⤵
        Suspicious behavior: EnumeratesProcesses
        
        PID:6124
- C:\Users\Admin\AppData\Roaming\uTorrent Web\utweb.exe
  "C:\Users\Admin\AppData\Roaming\uTorrent Web\utweb.exe" "C:\Users\Admin\Downloads\FTUApps.com-ESET-Security-Ultimate-v18.0.12.0-Multilingual-Pre-Activated.torrent" /SHELLASSOC
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - System Location Discovery: System Language Discovery
  PID:5984

C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe"
1⤵
PID:3660

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:2028

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:972

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3480

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x00000000000004C8 0x00000000000004D4
1⤵
PID:3748

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1004

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2952

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:5124

C:\Users\Admin\AppData\Roaming\uTorrent Web\utweb.exe
"C:\Users\Admin\AppData\Roaming\uTorrent Web\utweb.exe" "C:\Users\Admin\Downloads\FTUApps.com-ESET-Security-Ultimate-v18.0.12.0-Multilingual-Pre-Activated.torrent" /SHELLASSOC
1⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:3736

C:\Users\Admin\AppData\Roaming\uTorrent Web\utweb.exe
"C:\Users\Admin\AppData\Roaming\uTorrent Web\utweb.exe" "C:\Users\Admin\Downloads\FTUApps.com-ESET-Security-Ultimate-v18.0.12.0-Multilingual-Pre-Activated.torrent" /SHELLASSOC
1⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:3312

C:\Users\Admin\AppData\Roaming\uTorrent Web\utweb.exe
"C:\Users\Admin\AppData\Roaming\uTorrent Web\utweb.exe" "C:\Users\Admin\Downloads\FTUApps.com-ESET-Security-Ultimate-v18.0.12.0-Multilingual-Pre-Activated.torrent" /SHELLASSOC
1⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:3928

C:\Users\Admin\AppData\Roaming\uTorrent Web\utweb.exe
"C:\Users\Admin\AppData\Roaming\uTorrent Web\utweb.exe" "C:\Users\Admin\Downloads\FTUApps.com-ESET-Security-Ultimate-v18.0.12.0-Multilingual-Pre-Activated.torrent" /SHELLASSOC
1⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:3888

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2772

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3492

C:\Users\Admin\Downloads\[FTUApps.com] - ESET Security Ultimate v18.0.12.0 Multilingual Pre-Activated\ESETSecurityUltimate18.0.12.0x64.exe
"C:\Users\Admin\Downloads\[FTUApps.com] - ESET Security Ultimate v18.0.12.0 Multilingual Pre-Activated\ESETSecurityUltimate18.0.12.0x64.exe"
1⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
PID:2428
- C:\Users\Admin\AppData\Local\Temp\is-AM0NQ.tmp\ESETSecurityUltimate18.0.12.0x64.tmp
  "C:\Users\Admin\AppData\Local\Temp\is-AM0NQ.tmp\ESETSecurityUltimate18.0.12.0x64.tmp" /SL5="$1038C,50029225,820224,C:\Users\Admin\Downloads\[FTUApps.com] - ESET Security Ultimate v18.0.12.0 Multilingual Pre-Activated\ESETSecurityUltimate18.0.12.0x64.exe"
  2⤵
  - Drops startup file
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  PID:5568
- - C:\Windows\SysWOW64\cmd.exe
    "C:\Windows\system32\cmd.exe" /C taskkill /F /IM "wlogon.exe"
    3⤵
    - System Location Discovery: System Language Discovery
    PID:5784
  - - C:\Windows\SysWOW64\taskkill.exe
      taskkill /F /IM "wlogon.exe"
      4⤵
      System Location Discovery: System Language Discovery
      Kills process with taskkill
      PID:5436
- - C:\Windows\SysWOW64\cmd.exe
    "C:\Windows\system32\cmd.exe" /C powershell -command Expand-Archive 'C:\Users\Admin\AppData\Local\Packages\ESET Security Ultimate v18.0.12.0x64.zip' 'C:\Users\Admin\AppData\Local\Packages\' -Force
    3⤵
    - System Location Discovery: System Language Discovery
    PID:3292
  - - C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
      powershell -command Expand-Archive 'C:\Users\Admin\AppData\Local\Packages\ESET Security Ultimate v18.0.12.0x64.zip' 'C:\Users\Admin\AppData\Local\Packages\' -Force
      4⤵
      Command and Scripting Interpreter: PowerShell
      System Location Discovery: System Language Discovery
      Suspicious behavior: EnumeratesProcesses
      PID:3964
- - C:\Users\Admin\AppData\Local\Packages\wlogon.exe
    "C:\Users\Admin\AppData\Local\Packages\wlogon.exe" u/RTqlXMlzPLL8WaLYk634Uv2S/VhCGTLsOSfIJ72cQA/wXuvgq9XKHqBbFPlg== /f
    3⤵
    - Executes dropped EXE
    PID:324
- - C:\Users\Admin\AppData\Local\Packages\ESETSecurityUltimate18.0.12.0x64.exe
    "C:\Users\Admin\AppData\Local\Packages\ESETSecurityUltimate18.0.12.0x64.exe"
    3⤵
    - Executes dropped EXE
    PID:5644
  - - C:\Windows\System32\msiexec.exe
      "C:\Windows\System32\msiexec.exe" /i "C:\Users\Admin\AppData\Local\Temp\RarSFX0\ehs_nt64.msi" /qb PRODUCTTYPE=esu CFG_POTENTIALLYUNWANTED_ENABLED=0 CFG_LIVEGRID_ENABLED=1 FIRSTSCAN_ENABLE=0 CFG_EPFW_MODE=0 ACTIVATION_DLG_SUPPRESS=0
      4⤵
      Enumerates connected drives
      PID:5028
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://ftuapps.dev/
      4⤵
      Enumerates system info in registry
      Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
      PID:560
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x128,0x12c,0x130,0x104,0x134,0x7fffe5b43cb8,0x7fffe5b43cc8,0x7fffe5b43cd8
        5⤵
        
        PID:3188
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2064,486610062374826770,5463729698974626799,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=2072 /prefetch:2
        5⤵
        
        PID:572
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2064,486610062374826770,5463729698974626799,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2108 /prefetch:3
        5⤵
        
        PID:5948
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2064,486610062374826770,5463729698974626799,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2808 /prefetch:8
        5⤵
        
        PID:5900
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,486610062374826770,5463729698974626799,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3344 /prefetch:1
        5⤵
        
        PID:4824
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,486610062374826770,5463729698974626799,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3356 /prefetch:1
        5⤵
        
        PID:5544
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,486610062374826770,5463729698974626799,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4748 /prefetch:1
        5⤵
        
        PID:564
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=2064,486610062374826770,5463729698974626799,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3684 /prefetch:8
        5⤵
        
        PID:6036
    - - C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2064,486610062374826770,5463729698974626799,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5552 /prefetch:8
        5⤵
        
        PID:4116
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,486610062374826770,5463729698974626799,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5156 /prefetch:1
        5⤵
        
        PID:2232
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,486610062374826770,5463729698974626799,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5548 /prefetch:1
        5⤵
        
        PID:5624
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,486610062374826770,5463729698974626799,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4928 /prefetch:1
        5⤵
        
        PID:6040
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,486610062374826770,5463729698974626799,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5000 /prefetch:1
        5⤵
        
        PID:5636
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2064,486610062374826770,5463729698974626799,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --gpu-preferences=SAAAAAAAAADoAAAwAAAAAAAAAAAAAAAAAABgAAAQAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=3716 /prefetch:2
        5⤵
        
        PID:1108

C:\Windows\system32\msiexec.exe
C:\Windows\system32\msiexec.exe /V
1⤵
- Event Triggered Execution: Image File Execution Options Injection
- Adds Run key to start application
- Blocklisted process makes network request
- Checks for any installed AV software in registry
- Enumerates connected drives
- Drops file in Program Files directory
- Drops file in Windows directory
- Modifies registry class
PID:648
- C:\Windows\system32\srtasks.exe
  C:\Windows\system32\srtasks.exe ExecuteScopeRestorePoint /WaitForRestorePoint:2
  2⤵
  PID:5392
- C:\Windows\System32\MsiExec.exe
  C:\Windows\System32\MsiExec.exe -Embedding D8EE7EA1752E99935194CE1ECA330ED1
  2⤵
  - Loads dropped DLL
  PID:1952
- - C:\Users\Admin\AppData\Local\Temp\eset.temp\{02D83BBE-7F3D-8F05-DE03-72C39D27B6FE}\InstHelper.exe
    "C:\Users\Admin\AppData\Local\Temp\eset.temp\{02D83BBE-7F3D-8F05-DE03-72C39D27B6FE}\InstHelper.exe" -gv
    3⤵
    - Executes dropped EXE
    PID:2732
- - C:\Users\Admin\AppData\Local\Temp\eset.temp\{02D83BBE-7F3D-8F05-DE03-72C39D27B6FE}\InstHelper.exe
    "C:\Users\Admin\AppData\Local\Temp\eset.temp\{02D83BBE-7F3D-8F05-DE03-72C39D27B6FE}\InstHelper.exe" -sd "C:\Windows\Temp\eset\bts.stats" "ESET Security" "18.0.12.0" "1033"
    3⤵
    - Executes dropped EXE
    PID:5224
- C:\Windows\System32\MsiExec.exe
  C:\Windows\System32\MsiExec.exe -Embedding 42B04B90AE4F71F851070B0FBB758234 E Global\MSI0000
  2⤵
  - Event Triggered Execution: Image File Execution Options Injection
  - Modifies system executable filetype association
  - Drops file in Program Files directory
  - Modifies data under HKEY_USERS
  - Modifies registry class
  PID:3124
- - C:\Windows\System32\taskkill.exe
    "C:\Windows\System32\taskkill.exe" /F /T /IM ehttpsrv.exe
    3⤵
    - Kills process with taskkill
    PID:5368
- - C:\Users\Admin\AppData\Local\Temp\eset.temp\{02D83BBE-7F3D-8F05-DE03-72C39D27B6FE}\InstHelper.exe
    "C:\Users\Admin\AppData\Local\Temp\eset.temp\{02D83BBE-7F3D-8F05-DE03-72C39D27B6FE}\InstHelper.exe" -ci "C:\Users\Admin\AppData\Local\Temp\eset.temp\{02D83BBE-7F3D-8F05-DE03-72C39D27B6FE}\_InstData.xml"
    3⤵
    - Executes dropped EXE
    PID:2052

C:\Windows\system32\vssvc.exe
C:\Windows\system32\vssvc.exe
1⤵
- Checks SCSI registry key(s)
PID:5356

C:\Program Files\ESET\ESET Security\ekrn.exe
"C:\Program Files\ESET\ESET Security\ekrn.exe"
1⤵
- Drops file in Drivers directory
- Drops startup file
- Executes dropped EXE
- Enumerates connected drives
- Maps connected drives based on registry
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- Event Triggered Execution: Netsh Helper DLL
- System Location Discovery: System Language Discovery
- Checks SCSI registry key(s)
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Modifies system certificate store
- Suspicious behavior: RenamesItself
PID:784
- C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
  "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -NonInteractive -Command if (((Get-AppxPackage -Name 'EsetContextMenu').length -ne '1') -Or ((Get-AppxPackage -Name 'EsetContextMenu').version -ne '10.48.20.0')) { Get-AppxPackage -Name 'EsetContextMenu' | Remove-AppxPackage; Add-AppxPackage -Path 'C:\Program Files\ESET\ESET Security\EsetContextMenu.msix' -ExternalLocation 'C:\Program Files\ESET\ESET Security\' }
  2⤵
  - Command and Scripting Interpreter: PowerShell
  PID:1784
- C:\Program Files\ESET\ESET Security\eguiproxy.exe
  "C:\Program Files\ESET\ESET Security\eguiproxy.exe"
  2⤵
  - Executes dropped EXE
  - Suspicious behavior: GetForegroundWindowSpam
  - Suspicious use of SendNotifyMessage
  PID:3076
- C:\Program Files\ESET\ESET Security\egui.exe
  "C:\Program Files\ESET\ESET Security\egui.exe"
  2⤵
  - Executes dropped EXE
  - Suspicious behavior: GetForegroundWindowSpam
  - Suspicious use of SetWindowsHookEx
  PID:6116
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://go.eset.com/ehome_security_features?feature=vpn&lng=1033
    3⤵
    - Enumerates system info in registry
    - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    PID:748
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7fffe5b43cb8,0x7fffe5b43cc8,0x7fffe5b43cd8
      4⤵
      PID:4788
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1880,18442650964571671371,1122215363967433192,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1892 /prefetch:2
      4⤵
      PID:752
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1880,18442650964571671371,1122215363967433192,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2328 /prefetch:3
      4⤵
      PID:1552
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1880,18442650964571671371,1122215363967433192,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2876 /prefetch:8
      4⤵
      PID:884
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,18442650964571671371,1122215363967433192,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3348 /prefetch:1
      4⤵
      PID:6004
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,18442650964571671371,1122215363967433192,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3356 /prefetch:1
      4⤵
      PID:5064

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k DcomLaunch -p -s DeviceInstall
1⤵
- Checks SCSI registry key(s)
PID:3964
- C:\Windows\system32\DrvInst.exe
  DrvInst.exe "4" "9" "C:\Program Files\ESET\ESET Security\Drivers\eelam\eelam.inf" "9" "4d8859be3" "0000000000000150" "Service-0x0-3e7$\Default" "0000000000000160" "208" "C:\Program Files\ESET\ESET Security\Drivers\eelam"
  2⤵
  - Drops file in System32 directory
  - Drops file in Windows directory
  - Checks SCSI registry key(s)
  - Modifies data under HKEY_USERS
  PID:1084
- C:\Windows\system32\DrvInst.exe
  DrvInst.exe "4" "9" "C:\Program Files\ESET\ESET Security\Drivers\ehdrv\ehdrv.inf" "9" "446a2f407" "000000000000016C" "Service-0x0-3e7$\Default" "0000000000000160" "208" "C:\Program Files\ESET\ESET Security\Drivers\ehdrv"
  2⤵
  - Drops file in System32 directory
  - Drops file in Windows directory
  - Checks SCSI registry key(s)
  - Modifies data under HKEY_USERS
  PID:3316
- C:\Windows\system32\DrvInst.exe
  DrvInst.exe "4" "9" "C:\Program Files\ESET\ESET Security\Drivers\ekbdflt\ekbdflt.inf" "9" "4f39970b7" "0000000000000160" "Service-0x0-3e7$\Default" "0000000000000164" "208" "C:\Program Files\ESET\ESET Security\Drivers\ekbdflt"
  2⤵
  - Drops file in System32 directory
  - Drops file in Windows directory
  - Checks SCSI registry key(s)
  - Modifies data under HKEY_USERS
  PID:4152
- C:\Windows\system32\DrvInst.exe
  DrvInst.exe "4" "9" "C:\Program Files\ESET\ESET Security\Drivers\eamonm\eamonm.inf" "9" "4d14d0413" "000000000000015C" "Service-0x0-3e7$\Default" "0000000000000168" "208" "C:\Program Files\ESET\ESET Security\Drivers\eamonm"
  2⤵
  - Drops file in System32 directory
  - Drops file in Windows directory
  - Checks SCSI registry key(s)
  - Modifies data under HKEY_USERS
  PID:240
- C:\Windows\system32\DrvInst.exe
  DrvInst.exe "4" "9" "C:\Program Files\ESET\ESET Security\Drivers\epfwwfp\epfwwfp.inf" "9" "48fcaabe7" "0000000000000184" "Service-0x0-3e7$\Default" "0000000000000188" "208" "C:\Program Files\ESET\ESET Security\Drivers\epfwwfp"
  2⤵
  - Drops file in System32 directory
  - Drops file in Windows directory
  - Checks SCSI registry key(s)
  - Modifies data under HKEY_USERS
  PID:5948
- C:\Windows\system32\DrvInst.exe
  DrvInst.exe "4" "9" "C:\Program Files\ESET\ESET Security\Drivers\edevmon\edevmon.inf" "9" "48c1400ab" "0000000000000198" "Service-0x0-3e7$\Default" "000000000000019C" "208" "C:\Program Files\ESET\ESET Security\Drivers\edevmon"
  2⤵
  - Drops file in System32 directory
  - Drops file in Windows directory
  - Checks SCSI registry key(s)
  - Modifies data under HKEY_USERS
  PID:5424
- C:\Windows\system32\DrvInst.exe
  DrvInst.exe "4" "9" "C:\Program Files\ESET\ESET Security\Drivers\epfw\epfw.inf" "9" "456eea8cb" "0000000000000188" "Service-0x0-3e7$\Default" "000000000000018C" "208" "C:\Program Files\ESET\ESET Security\Drivers\epfw"
  2⤵
  - Drops file in System32 directory
  - Drops file in Windows directory
  - Checks SCSI registry key(s)
  - Modifies data under HKEY_USERS
  PID:5820

C:\Program Files\ESET\ESET Security\efwd.exe
"C:\Program Files\ESET\ESET Security\efwd.exe"
1⤵
- Executes dropped EXE
PID:5104

C:\Windows\system32\DllHost.exe
C:\Windows\system32\DllHost.exe /Processid:{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}
1⤵
PID:4152

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1828

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3312

C:\Windows\system32\wbem\WmiApSrv.exe
C:\Windows\system32\wbem\WmiApSrv.exe
1⤵
PID:4528

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2032

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4996

C:\Windows\system32\wbem\WmiApSrv.exe
C:\Windows\system32\wbem\WmiApSrv.exe
1⤵
PID:564

C:\Windows\system32\wbem\WmiApSrv.exe
C:\Windows\system32\wbem\WmiApSrv.exe
1⤵
PID:4976

C:\Windows\system32\sihost.exe
sihost.exe
1⤵
PID:1728
- C:\Windows\explorer.exe
  explorer.exe /LOADSAVEDWINDOWS
  2⤵
  - Boot or Logon Autostart Execution: Active Setup
  - Enumerates connected drives
  - Checks SCSI registry key(s)
  - Modifies registry class
  - Suspicious use of SetWindowsHookEx
  PID:6100

C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe
"C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe" -ServerName:CortanaUI.AppXstmwaab17q5s3y22tp6apqz7a45vwv65.mca
1⤵
- Enumerates system info in registry
- Modifies Internet Explorer settings
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:2188

C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
"C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
1⤵
- Suspicious use of SetWindowsHookEx
PID:2800

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

PowerShell

T1059.001

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Registry Run Keys / Startup Folder

T1547.001

Event Triggered Execution

T1546

Change Default File Association

T1546.001

Component Object Model Hijacking

T1546.015

Image File Execution Options Injection

T1546.012

Netsh Helper DLL

T1546.007

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Registry Run Keys / Startup Folder

T1547.001

Event Triggered Execution

T1546

Change Default File Association

T1546.001

Component Object Model Hijacking

T1546.015

Image File Execution Options Injection

T1546.012

Netsh Helper DLL

T1546.007

Defense Evasion

Modify Registry

T1112

Subvert Trust Controls

T1553

Install Root Certificate

T1553.004

SIP and Trust Provider Hijacking

T1553.003

Credential Access

Credentials from Password Stores

T1555

Credentials from Web Browsers

T1555.003

Windows Credential Manager

T1555.004

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Browser Information Discovery

T1217

Network Service Discovery

T1046

Peripheral Device Discovery

T1120

Query Registry

T1012

Software Discovery

T1518

Security Software Discovery

T1518.001

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Config.Msi\e60bccf.rbs

Filesize
12.7MB

MD5
b42e22fdc8da75bcf4752d0f6da9e353

SHA1
d6bf984d7e7b743767ab15253121c39792a5b030

SHA256
dcc38c71353d54e2b726aaa25b802d6c278c861ec9f921306bb74eb029037d0d

SHA512
620eb9e3ab88fd10fd49a2ffbc1ebf7b37093dafadf84a88c6f262ed4c6c78514b5b37c6e6603798453e2b1416363a4b5135884a0d231ac015f7a6065d71f855

Download Submit
C:\Program Files\ESET\ESET Security\BrowserPrivacyAndSecurity.exe

Filesize
243KB

MD5
bb7fe98c5ff75b45bab1783871d66e01

SHA1
d497240c06cacdf66513f846c060fa8e9d3df03f

SHA256
06d6571fd313982f95fe93ea740ff3513b04876137c4e2fac3c366fc0beb1e61

SHA512
313dda50dc4dab6e4e97bb537f4af3c807b4ab6dd2b49116327832be63951cfe939e5050a1b488174d0bbcc8dfa07edad87ceabfdc0d61cadee0524b190ade7c

Download Submit
C:\Program Files\ESET\ESET Security\Modules\em000_64\1113\em000_64.dll

Filesize
220KB

MD5
10013ab30e9b33af6171a094ebed27cc

SHA1
8a79cf3ff977d97ecdbb9f65127c61b5b513a882

SHA256
bb35315ad2a04a38565b2adbb12bcdcaf3afd22f5cdb2c29dbfa0e7b2593a5f9

SHA512
e45c8c8c0bfdc8112fd8d45543fa834eb8e0a4c396f3554ab2f4e084905ca8fbd4ae49e0bc6ee94808d482f07e864a4e70853641fac6eda5bbc8db07c15a9867

Download Submit
C:\Program Files\ESET\ESET Security\Modules\em000k_64\1024\em000k_64.dll

Filesize
54KB

MD5
32b123a74a0cd763ec9d88dbdf49e947

SHA1
5bc7d5c9729b70c7aa5362aad57facad8e3d793a

SHA256
1cb999282603d370a8a907d29f98c7300eadce3139817334f2a1ea7eac55200c

SHA512
0f125f0628bc0d7487a8a8f778f8ead63d43736e7333feee75598cb0756e01755fb7a0c78970470cc3225af748bfeece6b15ed8189f3f435bfb51de74010d309

Download Submit
C:\Program Files\ESET\ESET Security\Modules\em001_64\2450\new_C253D0F9\em001_64.dll

Filesize
4.0MB

MD5
5ad821f98390ddc0eb07775e046af2f2

SHA1
e22a3568a4005c7757e0cca4a0a6b6e0a4d07b96

SHA256
738a41f45aa2b5bf8e4cb438ea861275c3b71764ee7faf0c68d024c9ef134a3d

SHA512
b4d485b19a12c8d009dc87ed511a4172c40d2880e8b31145eb3efbc00245a9cac61d3764c1caa9b29e8595b927030309ef6801c12de9eeedb31c445870d4b1cc

Download Submit
C:\Program Files\ESET\ESET Security\Modules\em004_64\1249\new_7571C656\em004_64.dll

Filesize
6.8MB

MD5
a403a513668ba99cf9e057204a1b4492

SHA1
6a38681a83bbb7ac469a91f74c7a26379969ba0a

SHA256
6f705a3c88ae55b599a6ffe634041e29578d959c598182f0c8307088606c1f97

SHA512
139bcff1052a2da915189407fb4f93cfc789a4b02d61ea3fcbe2e323a271a6bcf7861a33d3430411f514a34ff0813f325c8685c207c8a173c3dd9333090210f0

Download Submit
C:\Program Files\ESET\ESET Security\Modules\em005_64\1403\new_B26F2FDA\em005_64.dll

Filesize
1.6MB

MD5
acb5d9c40c572d8bff60356d58b86750

SHA1
1f553751be90fededf7c6af37eaa9fd8e8d8e36a

SHA256
4e734e1e9febc60b69c1482120590890d3e5841e1aba070fe7f053e8e49cc10f

SHA512
b6b3e100b81e613cbdc7eca2286adfa2e402fe5117885ee65054707ab3b90f57f606a65f2ee01ced61e6ca8450a93a6a11c8c5390d161d42773447e530d29378

Download Submit
C:\Program Files\ESET\ESET Security\Modules\em006_64\1251\em006_64.dll

Filesize
272KB

MD5
74c870fc0a704079dcf7ab848b1d2fe8

SHA1
2b836c8515a3adc7e54fc4b6d74ef68dac522a7a

SHA256
a164052acce0a165f94d4bf4ef7d4681bacc7765b64a1f6ceb1efdac026e84aa

SHA512
433642be228ac51dd6f9c6732581433c2283c10d0ca01ede85723d914b9276f835548999373ba71dfb1ef0a90f460cda2017447b183c1076538d479ddb24b7eb

Download Submit
C:\Program Files\ESET\ESET Security\Modules\em006_64\1252\new_8274C4DB\em006_64.dll

Filesize
272KB

MD5
2b2e302ba8b9a6b32149977431463d19

SHA1
603807472a89207fc09acdc92dc4e5dad8743182

SHA256
76542cbb97b098acd932904af7f374f6224e43536e22499cef1a97cf863934a5

SHA512
697899ed962f53b1a6bc1492a0278730f04e927a098171d10636efe5a3eba8f0d50051da997862c5d4d23f7069a941cee3bc25c9e7f0feb7f55f63480b0406f3

Download Submit
C:\Program Files\ESET\ESET Security\Modules\em008_64\1640\new_0E14EF9E\em008_64.dll

Filesize
2.3MB

MD5
9bfd3c2973b3837a5e8a63ddd7c5db14

SHA1
b98dadd79561065fdd0de56aaa5aed9b7dcb9942

SHA256
2b31554c5825f149451aa8d5cb59310fd69f3289439a99e56fe5fdbfc4ae2180

SHA512
60591361e9db8b4170c1d498a70511e46cc5f41bf68fc5245eadf36441f0abbbb5902db0b41f3f7b1f4ca2626c01dd99b995e059f392eaf78d9b17ec62192c4e

Download Submit
C:\Program Files\ESET\ESET Security\Modules\em008k_64\1640\new_ECD2F57F\em008k_64.dll

Filesize
405KB

MD5
bd0b6d293440fe6f4fb21a7f71ff80c9

SHA1
c5d3ff48172ff9523effeceac90e5f97c1e7d7b0

SHA256
1b4b73db4d727c29fcaf6d60a1673f983b7abff910e642499dee6173595cc84e

SHA512
b92201169ab5f4963ab5b5cc332c4c729b69f87389cd5999d2afc3df72fbccf5c99f53030751c24a7ec0976bf458b0288ab991f503f79675eb415d620ef241f2

Download Submit
C:\Program Files\ESET\ESET Security\Modules\em009_64\1323\new_46FC0A91\em009_64.dll

Filesize
4.9MB

MD5
69593efd75a2034e993ad0f2b2d70f6c

SHA1
026a20d0282d56be0cec9a339adbb6d2e64cd8a5

SHA256
f9522c4a36a32a3e4303efbc0309bf8e3631a01a08cb01627364d0c4eb0ba99a

SHA512
25395938e00113864d784e4e9d877d34a88d1097ca70666d0b7334ded3171b71f80f8d693b1adc2f2fb26af3fc9390070d02124b92f10fb5f4ed20f46f4ed372

Download Submit
C:\Program Files\ESET\ESET Security\Modules\em017_64\2133\em017_64.dll

Filesize
19.0MB

MD5
721754e1cf8d3f30716442948a4948f5

SHA1
e8f453e0368552881494a794265957e811cacd21

SHA256
907e976f2f817c88f5ec64a1f7e3a39b7f37ae2a358fdb7b80f85d24f842070b

SHA512
23225c19078c6310ec18945fdfebbbc20163105b626293324d1704e108229b76677e26e286f9c50378e83d787dc7da50482a2de741ad620f434a560d77a4530d

Download Submit
C:\Program Files\ESET\ESET Security\Modules\em017_64\2134\new_BA4C7E3E\em017_64.dll

Filesize
19.2MB

MD5
9f41d52745429f3c5c92e0b5f9a60734

SHA1
231da1100672be8ffa872a34885747c881199983

SHA256
82dd86101b48477e78f1e51eaf447b3c092a3400f366510108cdb0f085d3f931

SHA512
6f7849f33b29675c7da173f955c3c43f13486659aa13865024b7b5fdb676dbe6c404e3550b99b49687699e1630107471da9c59b0485f30edbb5b0c950fab90cf

Download Submit
C:\Program Files\ESET\ESET Security\Modules\em018_64\1886\new_D8EE0EB3\em018_64.dll

Filesize
3.2MB

MD5
ea843374768d682a6e532548d9e82537

SHA1
b51a823c4e545bbfc03d6e9b0020f63e53dbfbfe

SHA256
3e251540ce6f1e7aa570c4ae2c88197d2c87a47532aa6e66c95076196a166662

SHA512
5935531eef7d749c76017e71c580e3412646824efd34e1ae036f4eeb2ec09dd48aeecfd1ef376abca4cb0d9d480bc33bc377941c2996f51ea622e6bcda394f68

Download Submit
C:\Program Files\ESET\ESET Security\Modules\em018k_64\1886\new_61821918\em018k_64.dll

Filesize
397KB

MD5
cdef41825f1ca11c30db1001953058dc

SHA1
82b4db44bf958231901b7e104126db989518294b

SHA256
6857f129b63d9a5b73af7ba2bb89612eb2ec4c4ec479f8eb4a3c4bbc89956ebb

SHA512
7e69d00accc03aadae0785451d1df4117f829ba38d8d0b0f1bc78747e73008cfa198efed9cf4fe2033d739f6aac67f7854e3c8c0e33431f7860efbe445d80fd3

Download Submit
C:\Program Files\ESET\ESET Security\Modules\em019_64\1680\new_4DCB4DE4\em019_64.dll

Filesize
1.8MB

MD5
1473e5225b7cee51729103c8c9be345d

SHA1
8a19cd0a1443f130a1c0be76e7d4ce6b7f0f762a

SHA256
e65ec610c409bfb564f13caa834cf31c7b89c85416bd42383d3f0a5b5e3a611f

SHA512
f43937e16ba70ea7236d741603c059a565dd1665ec859c6baf8d7b60243a01d3c8ede69316484d3891343f8e2b0f8d4f2dd85a830ab80fe5f9c34033847ba1b2

Download Submit
C:\Program Files\ESET\ESET Security\Modules\em020_64\1092\new_DD1FB360\em020_64.dll

Filesize
136KB

MD5
e3e139fb097a565801d4e8639c3cdcf7

SHA1
49fe22c2dc0b5ee830b90147d15d39497a4c1430

SHA256
e751b36f00f5797cb931083c99c769cf0e0aa675994d29908a8896f4e5bea910

SHA512
fa312c40a122cfda55f9ab6c8a6c4efff6adca5d3bdd0201c7b0bd035edca73e3b36885fa85083a4dc0caeae503d2da5e481dd8a5165deee10c8172c5d5816c4

Download Submit
C:\Program Files\ESET\ESET Security\Modules\em021_64\15388\new_5B6725D2\em021_64.dll

Filesize
5.8MB

MD5
0be37ff3c7ca32f2ef8c0c376645b8ab

SHA1
61a17b95b7a14c291c7c1903a95a277cc62ff834

SHA256
077ab38207e4fa9b4963c5b0791d770954b6c0652e9018065f5a99774432c3f6

SHA512
047739d8e1f832bc8bee1c67558ebad5d6ecc6d35d6ec0af77115a46db9ec946bd80c6bce06b8c694ec2fbca1bc9e069efcbddc9732be167c9cb7c59c1da102f

Download Submit
C:\Program Files\ESET\ESET Security\Modules\em022_64\1137\new_55918E77\em022_64.dll

Filesize
1.1MB

MD5
1746df806c5b7dc00fc1928c16fce3b2

SHA1
b453066f78bb4fdcc6b8936fe43c0e984b6bfbe0

SHA256
cc42ea63c61eab519a5b90a5e0d69bb351ac16069f605fe0b266153faa1787d3

SHA512
5319a818c0cb2cef218a9fde3cf925914cd92f3ecd111623c218a3492d4f303d638829e9650959b0181875f661fbea81414ba9e5ef035f1a12f289788058b63a

Download Submit
C:\Program Files\ESET\ESET Security\Modules\em024_64\1157\em024_64.dll

Filesize
2.3MB

MD5
bf04ab42afcd7280521ad0ab03a9fb9b

SHA1
f6eccfa70d40e49ddfe2a108658c98f9734be3c9

SHA256
c8ac19a0f0d6a684278e59c912b6836ef533d64e636f412fbcf1ea66e41bec60

SHA512
d778312523dc8de837feda80a27608ac87735b3e0791ebc114d711cf839a8f6a813d4c6965274c40cb277fa2f13e5a3b37973d9d6238e4f50856b324c29ca067

Download Submit
C:\Program Files\ESET\ESET Security\Modules\em034_64\1038\new_280F77AF\em034_64.dll

Filesize
809KB

MD5
9a0bfe8f7c60b44812f7d286b697542f

SHA1
0bcdcd44462775ef4f0d8392037ba02427ea869d

SHA256
730840492b843cc5f5c424cb9978026cde4d158e18da4fd42cbf673908533dde

SHA512
29b3e3756b47ec54f596d1d821df745560079824fd0ad9048f2696da060c9db65f56967f58d22c3eb731e097e6310908c9bd76fef9bf205fb7d324dcdc8b0727

Download Submit
C:\Program Files\ESET\ESET Security\Modules\em035_64\1366\new_CB3995BC\em035_64.dll

Filesize
4.4MB

MD5
aa83c21ce6225b9b5460a15bfc250e27

SHA1
e33686b9b8a743c0c431a0e35997bc77da4e3fe7

SHA256
6e08f023467ad8b9153d17af877f1188317fcc4004978f4b6ab4fe730b557380

SHA512
01876ee356945e6c7d8cb820ce0909dda99bac817e2cbba3950d912c522c0f600a29cc426c7358b5a9b3903f6c974303436989b593843975f7f643d959bf39d1

Download Submit
C:\Program Files\ESET\ESET Security\Modules\em039_64\2225\em039_64.dll

Filesize
7.8MB

MD5
fb533bc591e8948f134ea4ce6ddb6d71

SHA1
76ece3e07cc23eec5c28b10aaa154fb606ca0144

SHA256
a45a1d26a6fd07380e238efe6f3dd9d686dfe708fa1c525bfb282fcd47c24930

SHA512
6d1ba7f46b2b237d165b1c41a9ba531023aa67b1d886783330ad4d71b6aacfa4a337623f554526c8b923b0e293ffb2cf3229db8b6b08a9e9a25215c09d69da17

Download Submit
C:\Program Files\ESET\ESET Security\Modules\em039_64\2236\new_A25D70A6\em039_64.dll

Filesize
7.8MB

MD5
b4f9f4c536b578a7138535efca626be5

SHA1
f74e77cdf124dd5bded95e5e97183553b9570f56

SHA256
39fd8c9b75e1c846b7ac1278e681b57516dbdfcbd4b8ad6ade0de570c7fb68a8

SHA512
9f13f7baf79649ee1de7d63c5bab1cd55fa26871ca1d87bfbbe0792f4e67bd6107072a23665d62a14d73e5f9a048f660688ef572fd02a59f4b58efd5a9bbce3b

Download Submit
C:\Program Files\ESET\ESET Security\Modules\em042_64\2335\new_48197114\em042_64.dll

Filesize
1.6MB

MD5
14c5799631b8c5aee1996b1d75a898ed

SHA1
70d33c7737cfc5b04fa3bde9c659fff1a9b44fae

SHA256
54da5521c1ebd261bda4e041277944c43ef20e3775635a44f21b4600923a2e87

SHA512
08b4a5ea5e1b00882ddf3aa67adb6db07b51fe86459d3e2a77f72ec35df086b4e64c274e6a76722e4a05cd91ab3701381c5a3a999b743f700a59b2c4919b10ba

Download Submit
C:\Program Files\ESET\ESET Security\Modules\em044_64\1090\new_9263BE55\em044_64.dll

Filesize
518KB

MD5
517b975883d5d1d87e128628933d2965

SHA1
0d2aefea672c8cd8ed5c4072a3fd8f9b38d9b6e2

SHA256
280a7031776e090975bd4be226d3eca744e24dbdb36cbaa29cbe457219de6f58

SHA512
1a72a4cd4c236a0a42af2df787c0142a26bb628a100057cb172f4d0c58018f5abf08106cb013e33b712e12d3770367503e0807e94e4b2b8c26672dcb95397094

Download Submit
C:\Program Files\ESET\ESET Security\Modules\em045_64\1094\em045_64.dll

Filesize
5.4MB

MD5
67647e66c8eb2598c63190bba21cde4b

SHA1
8cc36dbe530cb8955850533366f601e540a399bd

SHA256
5eac896dc2b6132a19b5a6738488085d58e1fbb3317ac6eb5df7ed593e1ce403

SHA512
90e6f46b97e55dc5cba1fde6d389fdd642f36c4fbdd14696dbea2f319f7c74873955210297b66460f006ae0e7404b496cc966c916eabea9580862bfda45ac318

Download Submit
C:\Program Files\ESET\ESET Security\Modules\em046_64\1066\new_EFC02453\em046_64.dll

Filesize
715KB

MD5
1d6750f509faa648da9a4319a7ba98f9

SHA1
fbbb2431f83826d3cc3232873c1008f907f95e7a

SHA256
1fc7015556ddfd1ce7d45a46fe7e1e5b63b60e57a950cb1c7ab7ab4691cde78a

SHA512
97813d503dec45547fe915b1de653e4eb9da37d1a9d5ded658fd1db234146ad9a18f5ea6d95a44cc0b68dbb97d2c763b189644dcfd5666dd23133de8f7854a12

Download Submit
C:\Program Files\ESET\ESET Security\Modules\em047_64\1058\new_CCE9638F\em047_64.dll

Filesize
271KB

MD5
b7818b84218dfbbe8bedd96e0e0cd867

SHA1
c013335e676e5cb3c0a18758743a4cc7559f36bb

SHA256
a3fbc3e9a3e32886789949378f036a76c01e99b9735c0c478ea155b42bf30f3a

SHA512
366b0b4e822146fd1965d6f45725e6e2be9d42c9996af2aa793b806b7a18ded6f3e9ec7558334945e05869a82c8dbc4298aa4b8e940b88870c81272406a2fe67

Download Submit
C:\Program Files\ESET\ESET Security\Modules\em048_64\1213\new_ED246E48\em048_64.dll

Filesize
2.1MB

MD5
4162d8c99206746031967ea48609fa13

SHA1
3d095ee989320aefcdc161210c7e078332653aeb

SHA256
8d01a527c775a390a5ae4abdd72c8c68f26b1ec99c11b20c17c0885db44c593b

SHA512
37d855c1f4de35d1f7e443bae7cebce742f22f3c72075b00130e3e43f37a87ab818fe2918a28c797a985b594d6c03e084bb6f9bc24a8b919a42cca41e720b5ca

Download Submit
C:\Program Files\ESET\ESET Security\Modules\em049_64\21548\new_07A4FA7D\em049_64.dll

Filesize
3.1MB

MD5
bd47aaf17df7014f65f4c45e100d3b85

SHA1
96762cc96d3fe0546789198bb4efb5c79bc25641

SHA256
f73b830bd35129db2039272b5ae4cb28f0b35933bb2071ab8008e0bf7d700479

SHA512
b6c9b85bc86f166e4b77996137edb62812f4f9f514762f52b4de707148358c77d07a00cd9b5c736b12a9a07a9394d6cf1cde5415a74a3856a89fb35187370df8

Download Submit
C:\Program Files\ESET\ESET Security\Modules\em050_64\1163\new_2C29A7A3\em050_64.dll

Filesize
25.1MB

MD5
1bf394a9f8acd8bcbd36f65b67d80543

SHA1
bb399bbd3649f3efac6f24c5fbfe92e2f5cd75ed

SHA256
e38b218504ab64eb55ec068f16fe0ff5a47a71bdb8b4476f3b96140e6c2963e9

SHA512
898aa9d2ff1b67538995df76838eb3f6437361078b6b3774b38c40b8b0dbb18bf93f820c256711849b1eeecdca9450a89096631eda9ca326ce777f62e0c9c9cd

Download Submit
C:\Program Files\ESET\ESET Security\Modules\em051_64\1042\new_F653B74F\em051_64.dll

Filesize
274KB

MD5
7d193481f73f9f092fab039a43143c29

SHA1
cbc5420fbfeac29027c714fb3fd6d0c9bc83df97

SHA256
040aec9ddfe36fb4b439a457e2f338d30b339bf3ac2202998c029570aa58f3d3

SHA512
fb6695c603167609c35101b3ab743123ae547619428ac2efefcd04b2bfad0499db58ac1e21416bcf24f04ac61040502d28485111c537f9918ecd7879fa2926d5

Download Submit
C:\Program Files\ESET\ESET Security\Modules\tempAD927949\NUP2D7F.tmp

Filesize
4.6MB

MD5
f0a8c8a60ee980d2c458fa312331caed

SHA1
cc37d09acf6454dce8f498fa06cce567f8ddc3b9

SHA256
62f6a9aad1bf4827e89b4ea6fb9ecae2d6639ee2ed6297a0aa51ef89826c1ab6

SHA512
03ea6fd71b2ffa6b437e2872f5e9be7d28b9475361f0abf77840196237c05e09fa0483990b400386c0b5bbae9b5b56cce50e7896c5cfd5e540fc527105c99c3b

Download Submit
C:\Program Files\ESET\ESET Security\ebehmonl.dll

Filesize
18KB

MD5
de677f178fc98dc84456097cb85277bc

SHA1
be2a1b3946b28c12c6b542c631c4682713860a67

SHA256
a13dc5982f43883e4b0a265dd267c3fe2ee6d6efd99bb7daa7e19c3adef9c37c

SHA512
375fc8e94a9f209a8d6fd5914fb8ab9a7c63d2e980fa41e1ac664e24e7331fd8570865f132029c966dd8412455432c99fd02e79cd3221beea4cd1ecca5c86aad

Download Submit
C:\Program Files\ESET\ESET Security\eula.html

Filesize
45KB

MD5
9dbeae5da1c2e6d30e507cbb31857ab3

SHA1
6b57ebf49a633d5edc3985caea1fca15909e1c39

SHA256
9f5d6e08d41b9372d311a319663ffb96fd17652b016ebb77d2ce06736ae3198f

SHA512
8a019dfd4a236b0981bee3bd843c51fd5bc65f0491c4824ea4993d163c04548c2bc3445d811b0c46ef890dafa89858d43d47a66bf1a9ce73ea50bc0f1033abd5

Download Submit
C:\Program Files\ESET\ESET Security\eula.rtf

Filesize
44KB

MD5
b4cdb5f3e4e1ab808fc5ed674d9c8adf

SHA1
69c9d2b93830dc59673fbd2dae5dc45e9b6c51a4

SHA256
611bf136ecf7a28e05125239e390b1b34872f5e1fff8c50e675615afd7d22423

SHA512
e9578bccee12db4c7e33d0f943c48e69a00ad8081a77991fb608f28df744f0a3cc25be1ff5ef77a1eaec206de9f5e88c6620972f07382aa1a5e17498c1f56f4f

Download Submit
C:\Program Files\ESET\ESET Security\x86\ebehmonl.dll

Filesize
17KB

MD5
d05425adb61e2087fa2b27b471701b2d

SHA1
a4b03631644494572b7be43becc98f8ab628e90e

SHA256
ad76d564a8e8460bca1ec0817f8d9e22732c54857f9a37639ce4c139fc3d6ab9

SHA512
7d8ac2a8ac043ec6b3c53de62d48e9dff9378d54c2a51a429029a5b705730fcb957964daab4b3b669d4130179ed3875b2eda26828e1593cc4a7e3766d0a947b2

Download Submit
C:\ProgramData\ESET\ESET Security\Installer\DeslockInstaller.msi

Filesize
9.4MB

MD5
07fb1aae6dc47eeae4a7e030e09925f3

SHA1
5f9dc79627a111e7284625d50314dfea5c90baf7

SHA256
8d92934cc4ea37e0f3dca62b491015776bda6077817872e56b1617f9a2ecc675

SHA512
df96c6f8beee1ad7dfcf73689913645deb4b8b3741dfaf2ea01751744b18bf124a9b727d8c5955c518122ee4230b333198e31fa5d05f68781f05447358156655

Download Submit
C:\ProgramData\ESET\ESET Security\Logs\hipslog.dat

Filesize
56B

MD5
b7a10545087982529166410cacb21166

SHA1
8d962498d7663f67510e10d735a915d0ec93c232

SHA256
7c2c798f57f87b1d18f3fddfd407a55621889d4c2da306ec776f02de8a41aec4

SHA512
084d01c6fec254dfb241ecba1c695d760abdee8a786ad290fcba1de01371e400f84bf86c3e84fc7bc0335d4d2efd8c2b4833070b1bf9be649d8b54bb0d848a3d

Download Submit
C:\ProgramData\ESET\ESET Security\ScanCache\1249\01BD7259859FDF69246A5F139D23765547A58152000000000000000000000000.ahc

Filesize
28KB

MD5
5d164da0ed2c9b6bed017ce7ff76c515

SHA1
928cc7eba90d47df7efdc0e4f6e6b23539453bdf

SHA256
5918a49eafec066636847081bc6cd8e8258545efa8bf61f751af5a609e3c861e

SHA512
ca70b94ea57478765dd3a09f13424b12b7a603674ba2be2d9ff6f02a374a2ec76310cd49c8d32aefa586706f8f26e4d47e799cc61287fc8757a1094bcb1d6eaa

Download Submit
C:\ProgramData\ESET\ESET Security\ScanCache\1249\02D6CC30A1AD7F6C9672D9C4E315A0AA566BE877000000000000000000000000.ahc

Filesize
112KB

MD5
06eb60a6608df1ffc1fb2aa6b03ef8c1

SHA1
29f977e31729cda2bdc98a359258df468de81046

SHA256
e26d51fc13412d4ceb8292acbc83a801a6b1a403c2452c4a7c7f9a84e3d15d7d

SHA512
6e3fcb58379f1fa54e2a226328637e54d326a911647dc3d282fbf65d992b532562d4e8678a7ebcdaaedb82e4c018177baf5e048393b299d3fe4f7a7a9e4069c8

Download Submit
C:\ProgramData\ESET\ESET Security\ScanCache\1249\19B1E54345E4656B9D8FE0A179A5698F5DE526BB000000000000000000000000.ahc

Filesize
319KB

MD5
a20d270fecfe48e24c579b8795688ef7

SHA1
c61b6e9fdb25e8cdde44542cb838a4927eee93e4

SHA256
8484973e0ef0a89d592b6dfe37cbf6c8b37cd5ce30caa7197fc2d96a4a607bcf

SHA512
3c0772f3c59498a626170d536e9ebbfdd26a900bce9034b8177336a81df0e53269a66b11396ce08c398b6f37f69b16a174a5f18ff6740cc03fadb9ebe0c99d61

Download Submit
C:\ProgramData\ESET\ESET Security\ScanCache\1249\635BFF5C4F47DCCF2C7678EE60A74721BACDFA12000000000000000000000000.ahc

Filesize
19KB

MD5
22986ae08b37cbda9395405d483d1a56

SHA1
aad12de4f606f6cea1dd51819b3e396d99337aee

SHA256
a876aef3cc01fe3fe43943eb6cb23d76aa139e9f061576b0a8a370f92f16547d

SHA512
81f5e2cd984336dcfac96d7b9c95e54996f7e8b70b493b3703f1e0a2f142cca395ee19357c41b958bdddc1ed666c2f07ca46f82df788da900d498f7ad0ee458a

Download Submit
C:\ProgramData\ESET\ESET Security\ScanCache\1249\702DFF2E0E597D53A9A4E5A60AC1FEE71C69A0D3000000000000000000000000.ahc

Filesize
27KB

MD5
56c251f21450e4d77379bd1e9b8f564d

SHA1
83d88b8ce2b3b556338f186da932de8a9af0e9af

SHA256
9eeef401338f214db8bb9bb3006abc0a81dcbb54c778ac97a8526d9043e29963

SHA512
8e7bd4d052313674ff301e7dcd051db45c6cb438afc6d216f98a213027610c0d7e39b7375cdc573965a27eb69791d99e9f835917598ab19b488391d2917028cf

Download Submit
C:\ProgramData\ESET\ESET Security\ScanCache\1249\8786C8C5077B529B84ED5692B816ED21F697537B000000000000000000000000.ahc

Filesize
93KB

MD5
3e72bcb750c7fcdd3577523cd9896759

SHA1
41051aa21e35795607ab68eb92bd9ca5cfe904fd

SHA256
58bf1b9ddc98bd80ee7c18392cacdd644a7605aff901a2f41a17d50b2e9500b4

SHA512
f24e3e75f5dfb6da4b5a4dfe0ea3d544b0a1ede131b13591a4e49d53a722e97c3463717f248cfece4bce81f01cd243bdbca7289446c307684ae1537f470a2f71

Download Submit
C:\ProgramData\ESET\ESET Security\ScanCache\1249\9685E8D107DE92EDFAE380B45E4FF0F1623DC847000000000000000000000000.ahc

Filesize
89KB

MD5
935e6b21feacb29ffc3a4f5867c06db8

SHA1
05b2ebef5df93468a73e3653ccb440fd8dabf6e7

SHA256
214869a8dd60031edef7ac22883d335e8210250dfeee128444b198ea056a4f18

SHA512
aa2b7752bd1ddd6bf39221c44f31ac6b5625faa85d73a91ce1293e22c384b5734e7b9f865269ddae8a965ad82d2eba5cea091e7b51cc6a91a0ca3915e3a77622

Download Submit
C:\ProgramData\ESET\ESET Security\ScanCache\1249\BDB666066CA7DEE0BCA86A24D4E760A9776B148F000000000000000000000000.ahc

Filesize
37KB

MD5
71ca538a3f984d5fbdd086f4697527a3

SHA1
8b8e6011ed884b8f030a424644d62325b9b36980

SHA256
1cfe9c9010058fa06211d5f2925a435f152b8ed121281001ea609d48736c0965

SHA512
eaf875490d2bd119c358750505d1a557614dcea103817423243e4db66ce4420d59a7fa1b92ac6dce6bf39775f95b3691bceec17d45e3b61715c58d867a64355a

Download Submit
C:\ProgramData\ESET\ESET Security\ScanCache\1249\E0FFB9DEB5E21BA2890921BD6F482C23DDF5C7A0000000000000000000000000.ahc

Filesize
182KB

MD5
cb6dc01aa16d0e7f415feb4a969183b5

SHA1
41e4ad425dcd70c97720b7c4372841e5fc0ffeea

SHA256
316c8f9b5acd890313e61485e45050ef638f5bc9bb9522a1d7bef19aba5ecc17

SHA512
578199ba02579664cc3a09dff6e5860c0a714562cafb8f5f26a5552ce8ad93c95a379c43598d8ec908184d0b0e7455da24adc390eb0fc8a0f77ac005e6fe754c

Download Submit
C:\ProgramData\ESET\ESET Security\ScanCache\1249\E313BC477BCCBD426A8C11D1C44496455FCA1AEF000000000000000000000000.ahc

Filesize
18KB

MD5
f4e8954ce22df55779835e16318b5956

SHA1
a435d9990be5bfad4ac5ed534f7b17465a975370

SHA256
f690b263e296bd2fe5ef895605ab08c45770e2b4f3a13a9c179b3bc769ceadc7

SHA512
8804cd8326f53aec3420461d2c35ba999326b819323fe9aa3eb5912a73a2a270d63f2c28f1ae2198fbe3ce9fd650b49850be6b40b1c2ad757ad3ee0ff276537a

Download Submit
C:\ProgramData\ESET\ESET Security\ScanCache\1249\F8D9028325511DDF1DB43314BCB0D3A3FF063CD0000000000000000000000000.ahc

Filesize
37KB

MD5
fcb0168fffda5c17a6e8fafb68e70a23

SHA1
e83c60a7569d1aefb29b773b506bc01844e8c34d

SHA256
01c67eddab18ee566559690523c3d912c1121767df7ce9b7dd2bbd452577c6cb

SHA512
cc615e15fb9cf5d8205cd156c088b0a4f17b58f8c83fdff89a7399570db8033bb2c5d55966eaee8c108626e9deea53aaa3446df064e1d45428ec7a10eeeee4b3

Download Submit
C:\ProgramData\ESET\ESET Security\Stats\net202411a.dat

Filesize
1KB

MD5
c67f24e55b539c8b359d573f4869cb84

SHA1
6d6e77f25090d258e87fecf5256c05a12b2ff22d

SHA256
97498c358f009e679f9fc792ddf494927bd14d35d5b0d594fe129882fc004896

SHA512
1d6d8f5928e4bdaed8d5a15e864a64d1d212da0cd82a52a196686fd58e7e059db17bf90253e3bcc64ef6f55e7397c6ede18fab4d3f2f8fd018c172283b49df72

Download Submit
C:\ProgramData\ESET\ESET Security\Updfiles\nod064AE534.dll.nup

Filesize
309KB

MD5
024336ebe3013fc14d6d9d6ee49ca7fe

SHA1
589cdaf5855496c67ba5ae1ecf9519024743acea

SHA256
9c986731fadf1282d600145c918ff55dacff265b1068e296e124a2c4d1d8f8f9

SHA512
b96c0b9f94563f0903fbc62776393f5717a428047c9e6a0858bade1e4bfb1c22c0ccfb21521229b827d959b351e2f2cd21927cd69f11c7dd19dac5399767beba

Download Submit
C:\ProgramData\ESET\ESET Security\Updfiles\nod0EB1E313.dll.nup

Filesize
1.6MB

MD5
725366818f87aa4de143793675740e52

SHA1
95973ebfb61bfa81e08da020e65c2722e3172e62

SHA256
bd8b2d2fb0aa3d4afb0737334a8ab840737f01b0e242087813d6f0ba14274c82

SHA512
d029cee1aaa391e82323b22204423a1f10ac3d2182790af333b345d9f76bb4c3a1bf5edd1d61707f3b332968a24e8b02866ba17c478600916ecb0b2cf8f711e5

Download Submit
C:\ProgramData\ESET\ESET Security\Updfiles\nod135DD5ED.dll.nup

Filesize
884KB

MD5
7888d836f52a78adddf5b9ee9b22e144

SHA1
f95cb963aa1323b103f37265f23e8ab520dce7c8

SHA256
3bf21a9ff6484cd5a97c0312b996b480c8b58618a1df201a3cf99a477b3c0ba1

SHA512
c9bf4f29cfe26837ab377ce1bacfe8a2e8208701891a56699778a36513d5c28de2c51fda352276e6b6f01c21c146f69dbb534cd01841968c6ec8320b9fb89cb9

Download Submit
C:\ProgramData\ESET\ESET Security\Updfiles\nod2305F6A0.dll.nup

Filesize
42KB

MD5
8058e2d5607f1f1afd78b09754d2aacb

SHA1
6b47ed418342265215561f37cd20261ec29e31e5

SHA256
10b943dc1178fc32db29bc7b05f9f77b7939c476b5eb2f680613d5ba2169a528

SHA512
a9fb82a6afd84a513645d827a58ef9764642df413b7613dac1215c8639d4c46f044b42c32b0c26b3697bee6fb2334c9d902aeddced453c9b9865ac1762e19724

Download Submit
C:\ProgramData\ESET\ESET Security\Updfiles\nod266292D0.dll.nup

Filesize
131KB

MD5
a162de0e35975dba146e9352d1c72c26

SHA1
e4c7f40967d71926ffc174e10388d77f62e4c270

SHA256
8241af9a8ebfa3472bb7612de3b296cb6bc58c35193ba51cea8bf7688a1674f6

SHA512
fb6bb5505cc4c9754e310520d1eade486f57b2a9f809d3370d80a62650605d74c1b4e5ceae8e34d54e3678d3bf6d3087d145de742ec71c452f02811f8edbba99

Download Submit
C:\ProgramData\ESET\ESET Security\Updfiles\nod27538598.dll.nup

Filesize
122KB

MD5
9d8c97b6c71a1e8aad12b2d3c8815108

SHA1
5f678adee7dd1fd0a4419c6ebfd1d255e870a563

SHA256
4ab084eba883bac4dfe7cb5f7c8bacd475dc9911b49a74ec074832dc4eb1cdc6

SHA512
79db803dac7e78729226a2ae5e0108a803ea4b41bbf72c3e2753607ec2c815ae91bb33c1d7db198905294ffa7c2596f9b35d2d3e26c5ff2d5dcea68c2dded894

Download Submit
C:\ProgramData\ESET\ESET Security\Updfiles\nod34D9F9FE.dll.nup

Filesize
1.6MB

MD5
afe3fce8842414396d4f2c6d84fdf286

SHA1
b8de3094caede5070b73c112ef502472fa6858a6

SHA256
6626ff990dce3c5387de3c3fe8e3ef6d01e2aba95e71a411fdc57d6ea4fa448e

SHA512
1c0eedd254febae07859de00209b0215e65e8aefa791c6532a0a775d1758cf2ad97af1678fc17eb3e055fdc504f20c0e3270e0a19425c1c738afde33c9fe4122

Download Submit
C:\ProgramData\ESET\ESET Security\Updfiles\nod355BA7CD.dll.nup

Filesize
1.4MB

MD5
6e03d723c92eb4f1f8d988795286b11d

SHA1
9b392f4fb4182381eaff16d41c19179422087caf

SHA256
3fd212cfdd379ee4a97c14f3504b0dc44a9f558e649c69e6f03108f3c4fb461f

SHA512
c94f434ef9a3a05900a0f14155bc8d26abb78cf01d876f4ad0ff701d44dcaf41e2d5abb31f557ccd382f477d603b380d6cb116c43f6ebcee6553565ecd3523aa

Download Submit
C:\ProgramData\ESET\ESET Security\Updfiles\nod3954E947.dll.nup

Filesize
331KB

MD5
7df578b8702e26bd9176a82997b446ce

SHA1
a209d598fc60bb64bd26f807529dbad7ada4543f

SHA256
e17b53f2237c405c075918098d12edddb6c7bef79d8e95cf877eca4f5ad74f38

SHA512
8daaab2772af2dac9a45754170ee4670f634a62c5dc454d06acebd11ab4a8ebf2442c0ffb728c7e54a4e9d3e9b2d2345fd1d448f335e09829935414e34396510

Download Submit
C:\ProgramData\ESET\ESET Security\Updfiles\nod40F5293E.dll.nup

Filesize
113KB

MD5
d140bbf5b5f6bb1d373af4abf124dadd

SHA1
83d0125f1aa74cc897201946c5145604165823e6

SHA256
86f8508c901b3ef81222797fccf1e961d5e5415bd028c50bcff78152a66ee148

SHA512
b63c99cb236fb2e1323f32be9d97569530350a4cbe9b892604013935fa91f9ac60af986bc1d6468e23e36dbb940d47eeb21ad80e453cdc81dff62637f0de4903

Download Submit
C:\ProgramData\ESET\ESET Security\Updfiles\nod498DCD2E.dll.nup

Filesize
493KB

MD5
08c288d4019cb3e4b0de1fa76a0417ec

SHA1
352d9475dbd35d3992dc646b9ee470a09d64d2d5

SHA256
6998534ef5537c76935b2c8c86c808822658090c5cad60bdca900cbe873ec5d6

SHA512
fc4f732f438f49e1d0b333bf2054cd7a3fb476a6afabaca1d361454a7491b578f280df1c5db36300bd8324ec2e1060d3060a54972676bd4aa75049b058248c67

Download Submit
C:\ProgramData\ESET\ESET Security\Updfiles\nod4EFC5EC6.dll.nup

Filesize
86KB

MD5
2ad2929f390496aa8709f5ee457ee25a

SHA1
c0f6a30c1fcea19a3f34bf222ca33247496d66bc

SHA256
2d7344c61535b64e45d70d2299b25a665e7c063d9408e8a64d57e57c22c30245

SHA512
77eb5011bea921cfc2468dcd45967f5cee8c84e12e6ac1ea225e2dba3b5104b304293fc20bfea46ff0b9ef197f08b149c7c9e7456115768eaff051ee9451d658

Download Submit
C:\ProgramData\ESET\ESET Security\Updfiles\nod5DD1D25A.dll.nup

Filesize
290KB

MD5
2d1401c9c29f3b6a1b137bcb333dec23

SHA1
722bd1756a330a8475bc913f9a13bcf0afe25f6e

SHA256
987c52c3112d0df666c34efdc67ebe108ba6855ba6580b33bfff99cb2e47c48a

SHA512
773a1f7c37cae220c465d2448f14d7aef024e6f7ad6354b0ccd337e123fd47519f157f1c9eccb2ff3097463ea35bb94c25e41c9c50bbc5f6608b79a54f6936e3

Download Submit
C:\ProgramData\ESET\ESET Security\Updfiles\nod5E0AF4A5.dll.nup

Filesize
1.8MB

MD5
d0b975edb185e10077b96b2b89c927fb

SHA1
dad669a163c6f359d6ea245a97229f5ccb092561

SHA256
5d8989952efeeef0230763931e51e8170e29d67b8a499bd7ee0f4b5098666487

SHA512
537eb9b89483739eb236ec3353b10694ebad37ca7b304b74b6dc763af614d476a931ca2341615f93d813b703f3e8a03aa02b2af35db7da1c19080e87f832b8f3

Download Submit
C:\ProgramData\ESET\ESET Security\Updfiles\nod66546E6F.dll.nup

Filesize
448KB

MD5
8353325c4d072a5e1243a4658e133d38

SHA1
3ee049907cb9457633d4158920114d10f826d1d6

SHA256
40229f80ca7626bcf3ae36b0978c1d62530875a00165f78884dff937aed46aa5

SHA512
ce9f53738b68b15f42847843b61407ae7ee4c16bea1078197bc1e893612ec22203f4bb27ade5a83af90fbd9a3c56a16f1e0ac8200bc67e04228f7d30c33cd5ef

Download Submit
C:\ProgramData\ESET\ESET Security\Updfiles\nod67C99848.dll.nup

Filesize
701KB

MD5
ea53299351e606573e9671ff1541f345

SHA1
13c31494bec306471ae108ff163d3b9c09d1abe2

SHA256
09a1035aa83f64ab881d108191f92177239bec897cfd3b60a68b4719dd6f5804

SHA512
fe57c37db592002a7e200880a1b01c51dc89f61e14f23bdbc0568688b35c2acd5503dda69519b2f999680dd8bbbe899a178d646bce48d835f3e8c7547c8c2a32

Download Submit
C:\ProgramData\ESET\ESET Security\Updfiles\nod715466F8.dll.nup

Filesize
2.1MB

MD5
90c3f3a2b4fd7e045c2cc6a9a3338b15

SHA1
fdc41b6d5f08417ac1140c4016e65a4bfb8fecd7

SHA256
4e09530a2ef80f8dc45ae2fcb9bc172f87da20e6ef11635972a5cfa5b3bd2173

SHA512
a4aaa8ede6eee7839984b8084d9813397b841fd6bc4d49c0792024f01e89662379fcb0ff0df6b105907d4c1d8c9755c24aeccb4ee7a660539ec17faaf80303cb

Download Submit
C:\ProgramData\ESET\ESET Security\Updfiles\nod763435CF.dll.nup

Filesize
57KB

MD5
9f4a646f475300d25d810428908d1769

SHA1
564b95fc628718686e016c9ceccf3c0a354eb035

SHA256
8d976f66598f9df91cc31c39456c8fb0ffe20e233498da87f6fcd4ab80e894a9

SHA512
95e7e2b732880111c79d272616816db45c876642cc18096195993ee6b4468c5ff591ea0fbe728679f96951950345837a248cb5a1816d6e972aa384ebeb35aee2

Download Submit
C:\ProgramData\ESET\ESET Security\Updfiles\nod78286797.dll.nup

Filesize
84KB

MD5
3a26cb527e05ee20b6954cb33d34ce8e

SHA1
fdb2c5c4c3250b88ca25b46792d104769fe4f7c9

SHA256
9d196e948994c36217ec56b4c462ad23ffeed2a29b934d6d53311c9db0fed253

SHA512
efee5396de0f9ac6cb0df3fcde9bb6f7504c3cd1c82992b7da992c4d49574dfe8e0cd8908f16054c761932af26a03fc45ad781d52dfbb673ebbf7ea4032fb57b

Download Submit
C:\ProgramData\ESET\ESET Security\Updfiles\nod7BE26CD2.dll.nup

Filesize
27KB

MD5
cf8341b216628021021b7b2532ae4f56

SHA1
42f0882ecd457c1ef5a3aab43f8c71efe7eb0b13

SHA256
c7eba674c7291906ee8767f576fad89a7dfcb517c27f6f52f8a4c58374d9e44a

SHA512
9d97856c80d00411c510c190c68b64491e2daeb1c1180ca995e4b0574d8a452214ac573bfdbdaf0205848eba8323544d6a7e8d5bd3a3b43969608d768d516084

Download Submit
C:\ProgramData\ESET\ESET Security\Updfiles\nod8178DCB2.dll.nup

Filesize
876KB

MD5
8e5a5da5b8cd537db6fd75f3539ed4b2

SHA1
63ffc57cbaca0fef3c9913b2c60747d9544cd8d1

SHA256
e95a4fe42c9e2ed929864888b7749baa80658449f74506ea55f522896580099e

SHA512
275517084d12c1c3a9fc975f149d1892efad238140b03927e19e154badf1bf77ae3a404653084035de66ec79d27cf1e4b4a1d3ac1fbe1176dba894a0eef11fa4

Download Submit
C:\ProgramData\ESET\ESET Security\Updfiles\nod88F78DBF.dll.nup

Filesize
284KB

MD5
4ac62430c513aefaa3a7cdf7340c68e9

SHA1
765e218680b7980d0816431287b8e3b2321b6c19

SHA256
abacd317e412d8b1df7c765cc8ee0cd1d23dcf7308e0ba1172f29ad611701068

SHA512
92710d5059257eb4d3d4564b10a16b3916dbf1776407cd9bfe7ecbed1501e9ce17161a23bae4b13a63a2f301300c7d4b17e8b4c1adf280d784b20a8e9b4e0282

Download Submit
C:\ProgramData\ESET\ESET Security\Updfiles\nod900388E5.dll.nup

Filesize
34KB

MD5
61b863259ce8089491c712328ece217e

SHA1
ea881be13c9deb5a442cd860e044ed7e203ec223

SHA256
388e20907aaaef64b011a281f725a40741f67b05df0ba1103c151668c33c3f38

SHA512
3091758443374c29e329ad90ad4f422faa91e6ed7e36bb154ecda3f4ce5ec26311ab051934166a75fa579216c8322cbde1e3a12f714616636b4d1778b4dc2fbf

Download Submit
C:\ProgramData\ESET\ESET Security\Updfiles\nod910AAC90.dll.nup

Filesize
46KB

MD5
4fb308395506d4ace967e95cdb82da5d

SHA1
875f5cfb465b6c0f581b64ebd791b59f77d5e8ec

SHA256
7d82f5fb785700119116efe49f5c4ae9c78ab7e3cdd6232c1520dc04d909cb6f

SHA512
cfddcfd1f134adc1c081396008cce0406efb4e98cffdac7e2a3c6b9f8bf0c35fb4e8eed6b2abfbddc7a68c1cdfb34e07fb39d72c59affbfdc8ce418a3e3abc24

Download Submit
C:\ProgramData\ESET\ESET Security\Updfiles\nod9B638651.dll.nup

Filesize
103KB

MD5
abb9333d92eeda8c725cb005f7c5e4c6

SHA1
ac7150c869c65840408fc602c0eae2b87bcb1904

SHA256
28233d7dd7c1dba815cc97776c68c591c1a19d4e1317d0f3f71fe79495f3b7db

SHA512
8aa20d5ef67926e1cfdc9d6e08f592fdf67b25d0b94b3ee94617fa255cc7e660fc47290b20562a3031e1b93c9a5c8613bb87d5c51a4ffbba31cf001edda4b62b

Download Submit
C:\ProgramData\ESET\ESET Security\Updfiles\nod9C450526.dll.nup

Filesize
72KB

MD5
2684ee37c99528ffb23d75f8bed96a8b

SHA1
ccb9fc0b4d111a6ea06110972fdec7b8f2639ffe

SHA256
26aad9178ada27db5b2193e89cdf4d9241f632ba34df1f4652e5f28021557d5c

SHA512
923b3ad7370728112aebe83c6e2038216ff41c9b01a4b811873317d26c5fd2304433e25c4cbed16700a94ab2b90b245f2634528c37825be05d6f5b3c38a4c6f0

Download Submit
C:\ProgramData\ESET\ESET Security\Updfiles\nod9C66C3B2.dll.nup

Filesize
835KB

MD5
faf92eec7268cae93f5fae1051971a7a

SHA1
fa6beabe60b8dd85f5c71f8e3656ffcc156286a3

SHA256
cdd541bf69c5376ba0edb9c6f00f583b4acabd48fb0d940876bc208be2523415

SHA512
1fc6b22b1801cebfd7d6fe6bb211e498ae0c5de85e02b5d92488fcc68c52e96d405d0a9e52b0797c17c8315ca811c1645c530c83047ee7613a5632ba3791c4c2

Download Submit
C:\ProgramData\ESET\ESET Security\Updfiles\nodADEEAA46.dll.nup

Filesize
120KB

MD5
c65f257b8697788e2c4eb300115fac9f

SHA1
7471b567ebdde3a75bb6a2fed404e358c6bfab9a

SHA256
b4e1053e07320f2e9d7490c94bd6b3a541478206a579c3060ef3b709fe9310c3

SHA512
31ee27b8f698dc2a5acc3d66d1dca7895ed7208450c586d08b52e62777979cf97e851c1adea755e59f2714199b28916a9756ddac0ad7d31c99734e9fa2d8d9e2

Download Submit
C:\ProgramData\ESET\ESET Security\Updfiles\nodB280B3AA.dll.nup

Filesize
14KB

MD5
6409e101c116501365d408a333b87c1c

SHA1
c7a0d20aa5c78ffe570de7baa9ae60fd7a7983c6

SHA256
fada3d16e05555c5406f3cb167727bb259c782e8d04bb0239df9bbbcc4fec490

SHA512
2726875c303c9e6cac1689dee677228d40edcf7475d20db92178b5097490afd69a4353b6be4976cae1e9a36969e7db590c84058bb9832cf8a5eebc3fc7258f0e

Download Submit
C:\ProgramData\ESET\ESET Security\Updfiles\nodB8053999.dll.nup

Filesize
2.8MB

MD5
8375bd47ecd066a7e227b7ea25682a15

SHA1
3047ee02b6974edc2bfc983276a5cadc9e13cd72

SHA256
0c80748b5be04adff7be54c6ffbb732fe7b71ff2fe2ca21c0f38350467e715c6

SHA512
8efda7f0454cf03791347aa9b29b9da438d5243711f4a4a660e02f35dee0cc286880d749f31989bea030cded60ad7976aae14259e90c002853bbea81d0c89b7d

Download Submit
C:\ProgramData\ESET\ESET Security\Updfiles\nodB8A89326.dll.nup

Filesize
582KB

MD5
794e8aed610b95b9625f9fd56f14b82a

SHA1
639bb773a9b91030969babac63d076f90234269c

SHA256
51a2129a288b437d83ba47f9638584d03af6cc58eb070e4d7e5187a15ff3c622

SHA512
26c17c39a52b0b15a403049307aaadfb9cdc081fafe548250f5fda4d2f4e3c5d99176bc3a4b8519781e582da752f772e50d6e6c962f2c1176dec91acfa40300b

Download Submit
C:\ProgramData\ESET\ESET Security\Updfiles\nodBBBB0534.dll.nup

Filesize
200KB

MD5
73bfdb5761da3b78b63a7e088daec5b1

SHA1
0917fae44dd11a52b178885b67bdd1d711f094d5

SHA256
902bffa344e3eb96d9439a97702331a95482871fab60bbd4034a3dd216506501

SHA512
a4f722692888cb5eac82f8c8bb939af9a82fd0fbf963291487e06cf18fa08d67480f6af76b51155ada0fa1bde92e072375d0d972655892e14a16f8fed362761e

Download Submit
C:\ProgramData\ESET\ESET Security\Updfiles\nodC1D5C009.dll.nup

Filesize
316KB

MD5
cdaf6c489e03926578afced1fd252ce4

SHA1
0d1e1eeb3d43b00b879a13394e311c01f762571e

SHA256
00005b83a37d6c716693bbbec2220b4c236e78ebbfabb22a9f43081a52969881

SHA512
ca2cb75eb4cad5d6277319f0933fee7b851d3e19ac210862bef1e55a8be8cd823f8653110f66860cf8c2b409d60e8cce70d46215dcb3f103c1fd4f01e9947ce8

Download Submit
C:\ProgramData\ESET\ESET Security\Updfiles\nodC3FCB79B.dll.nup

Filesize
15KB

MD5
490661691ae8e40118faa1fd7a7fc52e

SHA1
c9e67a4629ba65b6676247d91e23e377b0e5a1a3

SHA256
cde8c2f970d1040e7e454fcaef28ddcf7f9b1e94eef5191445dbd24169ad1583

SHA512
37ba478635e57b54831333c6ab6a51bdbbe31220bc4d4be839cc8a5916c9bdc2ffcae6291be170ba08eb6de65f9b6d64335a99948eba6784ad69c45da0ab7a9e

Download Submit
C:\ProgramData\ESET\ESET Security\Updfiles\nodC68DE448.dll.nup

Filesize
393KB

MD5
dee7bbf157aa381d51679cd8723228e5

SHA1
e7639d58f1a4000ebf7730f3b533f326d4f99a09

SHA256
79759aae35f0b2685555d8db8593a9f887a2ad6cc6ea45fa2d5a258056d2943a

SHA512
c2e2b78e679ec8c92465043f858a5d7d91ef0df4d863fbdaf014b43695d3ae07c9a818800c06cb000a82754c82b25ccd60e845c4fc103da39f73e95766992ba0

Download Submit
C:\ProgramData\ESET\ESET Security\Updfiles\nodD1427E8F.dll.nup

Filesize
779KB

MD5
ee5a1811518e5b1f8e93ff88db3d0f26

SHA1
b33b2866602bbdc60a9d6addd0f5694a38c06b87

SHA256
f5d29b0821d55088c150506206929933eab243ba6920d291a15874a15e8bb00f

SHA512
d5a228fbf8fe03a1a4a88b15a198420573f5e1eca2dff2cff5a8a295f452afcd0063b20ccae194374faa3fa13de41e6225ddd82dabdd7a0c049d9bb17f049e93

Download Submit
C:\ProgramData\ESET\ESET Security\Updfiles\nodD59E24AD.dll.nup

Filesize
199KB

MD5
93a9d51148ec66f8e23b925d045f75f9

SHA1
f5a892866126d3a6c6c2f2717afe30ae45ddc95e

SHA256
5068ccf57fb411ecf8fe6e59b3072d344ab35b1d832bb6ec41a994e58143ae27

SHA512
5b028c0d1c156e681fb0fe059e1620716fa495be45a76caa6c6d3e4ee25dfa23b38be6e46e1813b66d1ad13fd2e4bf03b8020f571b26a550d323b1fcca0ab51e

Download Submit
C:\ProgramData\ESET\ESET Security\Updfiles\nodDC7D4EEC.dll.nup

Filesize
20KB

MD5
3d4fcc6e49dda9f79dd75a5c98987f69

SHA1
6020b3629329c90571359f650d187ac2d1fa1312

SHA256
23b4eb244c3131ede53f220529d83d0c867f78e4f4b7eff0c8814ce080a7f199

SHA512
9a36371df1f52db41b2347cfe1fb000f6591407c2c2c370262dcb5baca2948f1483d5a3a90b1721e4aeb67d99f577e1b2b02455060b15e2ac5f13fe084eaaed5

Download Submit
C:\ProgramData\ESET\ESET Security\Updfiles\nodE69A8AC8.dll.nup

Filesize
1.8MB

MD5
f4ce71eb1c2991f9fa662964e8d659c8

SHA1
02407c395d339c65537c2ab74923837d4cacae79

SHA256
37a333c5de4aae03d9c1499a8aa22e23a611b503b25c4f06ed11f46c19bebf64

SHA512
971dd30e83492197a6133b146ec2058ca06cd30ece72bb5e40c8a22e01e86e5d12b1781c378cdfc98d915baa61846bd63342992abc4752b10777db42d6af0ceb

Download Submit
C:\ProgramData\ESET\ESET Security\Updfiles\nodE9896904.dll.nup

Filesize
7KB

MD5
6a574033fc90811e1debd30b81ce704a

SHA1
200a52abe5a502a824606021a1a0fde3f39d7cd8

SHA256
f8a466bd692e7c7fd73e494be2c2022545c1bbae7d423ced7d223b4c6e5f51ee

SHA512
d6bc82f9ba1f5915d8d60ba9a1202b16ec77ff6c49395d19e9aade5dc4796482e0b38ce8d7a7ec6ddcd10c49c3c29c6c203a795678b9258dce4a9d79dbb39696

Download Submit
C:\ProgramData\ESET\ESET Security\Updfiles\nodEF4C4E3C.dll.nup

Filesize
96KB

MD5
5b8195a8ce2e455eb59beab22505a5d7

SHA1
40f5c5d446bb175caf87c01546e35498f3e2c6c1

SHA256
42f814fcd37d46256c50552be68ef9c1b73373991ccb8993a0206b8fb162c2a9

SHA512
a6dd70d54d691d514077e28e9dd1959b167fa5324e13249b45c5c123c834776a37c5c5fd9c4e9583beb1a99da139f4b6fe87e68f9a3a38a0f2fcd1b60b503eed

Download Submit
C:\ProgramData\ESET\ESET Security\Updfiles\nodF65FB67F.dll.nup

Filesize
2.6MB

MD5
5181e57967203448acf33a4c6529b3eb

SHA1
d0146c24fb665ad27a77093b1942cf2ebce12cd9

SHA256
3bd558a43feaea9df8c1f65074059ba315a685664a66a678e21819638a814e6b

SHA512
719c3716eee88afe70a5c1079e7bbb281ff0c74ef58b009c33eb2ebaad81eea6f5f8dd66df1fcfded320d6a6f2f51a708d86fec5f5970073d4e99853288c0b04

Download Submit
C:\ProgramData\ESET\ESET Security\Updfiles\nodF865E4E8.dll.nup

Filesize
19.8MB

MD5
765ce41787b9c335a3c2c07be786a99a

SHA1
37f0aa732152b2d99fb18e779f0246a4ae59cbd1

SHA256
575eacbf11b312fc5bff273d32ed5e3755139982d67215aba9ef4a9cebd908b7

SHA512
56ba8ddee4ae8d735e09418651a096a128a1480b8dc3465265a5b79bd408f4266867f97752aac9dd3f7f8d30cc6ac8fe89f3d8e510127f4f2fd9f38226caa7c4

Download Submit
C:\ProgramData\ESET\ESET Security\Updfiles\nodFD490C0D.dll.nup

Filesize
3.9MB

MD5
a2b6551188ab12aa98430c271e8b1fdf

SHA1
54904c43486db5b4b259604d5501b31fb02ec497

SHA256
da2cccda08163dc6c8fdf44548d1c7c587dfac49ba89d9327f7aeb632f67f85b

SHA512
d0a46d107995ae7bec606a76f6fae4eca582c70739445152b37ea862efed74fa55e6a5bb6022a21da3bc2a8f3fa40a7090683fcc2d80016fc5365fccbe84034c

Download Submit
C:\ProgramData\ESET\ESET Security\Updfiles\repository.eset.com\v1\com\eset\apps\home\deslock\metadata3

Filesize
4KB

MD5
9472814870cd20f3adf53770d84caec8

SHA1
4a135fb96f68130e008c30a6b123533e6cee4229

SHA256
88c20d4c7e623a9875d3664c8f040bf453c57c6703cec1e4db2f205452248ac9

SHA512
1301ed022719cf3f39a233fe79bc579b4f94a69e8618742b39669dade29052eff30ea35e1195b53959c491b0ffc259d9d8b4923f24aeff60b5c9e61b3c68b24c

Download Submit
C:\ProgramData\ESET\ESET Security\Updfiles\repository.eset.com\v1\com\eset\eulas\product\lg\ehsw\metadata3

Filesize
1KB

MD5
cd29ae0105a3c92ab7147364129846e8

SHA1
671ef4f61c2105445427bfae0fd4cc08ade5ebd3

SHA256
c28123c16e24ee1dbb2ac49edfb692a2db51df03d2b8d0873f280de3be861369

SHA512
f22c5f2d8dc89619ea20d13c64c260768b8486a5eb611af3b6aba3b8cd67d4bd9e0a2a8f7c11b90418a4b6efe1b5b3ae22562f75c43f967826c9fe067b09e530

Download Submit
C:\ProgramData\ESET\ESET Security\Updfiles\repository.eset.com\v1\com\eset\eulas\product\lg\ehsw\v3537\3537.0.5\eula-product-lg-ehsw.zip\manifest.erm

Filesize
34KB

MD5
508eadfc2e5bf4d57e4b39ef6737e3b8

SHA1
1ef19729b03c9cb1f35d5c3fe7616b0203d24219

SHA256
e5f364db3dc09b7205d373a7e446a862dd19f22f2a61a6e586ad097badd85948

SHA512
7d853f9cae19fc7e61dbd0fdf76fd18a5f4de34f087330f88e81ac713c85c016849a52f273b55d65e156c8ac8a480efe4a81c787ce0a518dcd38c0ae1763f96c

Download Submit
C:\ProgramData\ESET\ESET Security\Updfiles\repositorynocdn.eset.com\v1\com\eset\apps\home\security\windows\metadata3.default

Filesize
454KB

MD5
a7a76fefd643e20a6cfb31d666c80c14

SHA1
075eb54f6d6ab434b740d66edc5da839abaee5d0

SHA256
95122b333eb3e3d27059f06498904233992fcf9c062baf6592f1ddfb2aaf1179

SHA512
23d158016c2264b79c687c429a3502b45555b571c755969410ff09f507d2edf5d17d55e36c5685fe953a8d87ebd42e390d4972c5bbebb4fa8eb8fc96756ba98f

Download Submit
C:\ProgramData\ESET\ESET Security\Updfiles\repositorynocdn.eset.com\v1\com\eset\apps\home\security\windows\metadata3.o2

Filesize
21KB

MD5
8d37aa07aa14d22d82e30314261469d8

SHA1
34687c66a201c542090fb655d80beca43297219b

SHA256
504d3ffae758a45a0f6114320221cd4df3325bdfed7225514ee7178a33b664cc

SHA512
d23c295de6e82558283260fd7a08a8bfd7f1d8ba7e9573d64003a8af0a80a0f6d81dd53309813508a254df3eb9e3e19a1278ace8e8ee145b7c42ce35fe11613c

Download Submit
C:\ProgramData\ESET\ESET Security\Updfiles\upd.ver

Filesize
258KB

MD5
bb9cca9716ccd4623615ab1233aecc65

SHA1
500b213e5112cdcc8901c513001c214f402f225e

SHA256
309ed4369a3f12386c561245211cf42d7c4c53c50a336230af01b279481d2131

SHA512
15585ce83e64577a74fce28cf9ceb8cd3c9ca66a2b26758abb7c26de32e08dec381d769faa7925108e151506f749912d62c8e926f65b969508e64aba5684c68c

Download Submit
C:\ProgramData\ESET\ESET Security\Updfiles\update.eset.com\auto\consumer\windows\dll\update.ver.signed

Filesize
259KB

MD5
aaa0cb21200dcf447b3fd58ebfc7ab11

SHA1
6596d3effcc6af24d38e82fc54d8aa38e7d2431e

SHA256
eece446bc6b2eaa6bcf858dfabd6f5097a88ce68a2d8c76fa3033ae556f9c4a2

SHA512
c8c0dd60f7fd0effe3786252868c2792a873e439f59c76a0f95e5450d5eb460c1cbb3ae93d2381dc4367f92ea57943ed64bbd0dd53a2900987d5546840213dcb

Download Submit
C:\ProgramData\ESET\ESET Security\epfwdata.bin

Filesize
35KB

MD5
805d004358339006499848c9ca0c758c

SHA1
564948010e6f19181ec80550a0210861ea0b599a

SHA256
33c64a4e97be8ca8fe66a5338d1e4880f9ac90688b49c5735fa08a7b67059d3b

SHA512
763a75a3b2f294d3d13b58b9181e4fab46825f43dcf8d449ffc140f865dccfda93fa66ea033f36238de7ce38b5db05b6a08a595531e44802395274e14d4a8c8f

Download Submit
C:\ProgramData\ESET\ESET Security\pico\1\220650.pic

Filesize
377B

MD5
09bfec119ea7151ca25202a7c22bcb29

SHA1
ea2c45ee5a0c5e11caa853238a4064fe1772a826

SHA256
d1f483bec29f6271a0b62b764326898c15615a42af49755a685dcf5555e69fbf

SHA512
82c8e4fbe201ebfa89d3eefef5fa7f1fb91fe031cba52c4f9ea80317ae8cd7db525e49ae0ed04975bfa010b7711dcc5eb3e6f532fcf902f0d9309211023f002c

Download Submit
C:\ProgramData\ESET\ESET Security\pico\1\220651.pic

Filesize
150B

MD5
943b97c07ba8df29bab76a1ad8c6c02b

SHA1
554ddbf56145bc870de9cf8b3ef603f67f78baea

SHA256
894d4a2e22cde5ee475d634a67231a8d9724c93ea338c8c4e35cac1b500748cd

SHA512
730131b0b98374e875c3758fd28d50373240bf8075c9aab328b27249817aaffab049850cf05b061918942e5794e7f829df90834f07addf402d703ec0d9bd0080

Download Submit
C:\ProgramData\ESET\ESET Security\pico\1\220652.pic

Filesize
167B

MD5
8e62ce552d871e2b945eab9c82e41994

SHA1
fd4df89714da9ab57dd8b69502ef624359c8555a

SHA256
e469c73e1a251f587ebde9d100e8bc0eb16c3a4eff325247593cdf92cf007e6b

SHA512
289f17be4a7ab31db035533c34b575cf0b582d4a087d78975717beeba22f99c245f5afee321479245202fe4cb8c43c9ac894ff731affdbf63375525f0bdbcf4b

Download Submit
C:\ProgramData\ESET\ESET Security\pico\1\220653.pic

Filesize
230B

MD5
3befc2739cf004d94e25b1c239a460e6

SHA1
6f9d83e7a78524016af58bf1be3e25aaa0505797

SHA256
38e177cb67a551bbe86c3ac68503510e49e0e871262ce32b23d7d6f140269d46

SHA512
c2fd96236fe5f3c9a34478fa3bdd05ba50c433ae4df12b882414ec0e7e96fadf76ec052874ee25c55b601d473967012115123db81db9a43b86c11d9450669e0b

Download Submit
C:\ProgramData\ESET\ESET Security\pico\1\220654.pic

Filesize
247B

MD5
eb27f7d77aee9e4011785604d62f8831

SHA1
2f805ffb33bc253d7c89de7a49dcfc9fa75ce756

SHA256
6a77a6296f33ecfd1052816d82dc361d46ef38ddf836e383eea2d30b819a3096

SHA512
34578735f538fd68f173f9a581b505cf60ef2416996663fd354969b717814cc68a88599b975cf77c0a8b76b532e871fadab778b70a9e7f127ebdd5623bd57c93

Download Submit
C:\ProgramData\ESET\ESET Security\pico\1\220655.pic

Filesize
263B

MD5
837db9c0a40190b080802d0d505cea3b

SHA1
742e2596ad6a4b98ff189fbf00ddc00bdd0c94f0

SHA256
ef9693ed9142de3aae6723598e404e78842c580d9bd8daa2d623296a65ab7ff5

SHA512
16fc48516442ad85fc357430e53c9ad489a279c02ad0a3b05b54f97e477794d206ad6d6e5e32164f2d8c4b2dfe2b3cc551a56e66b555b0f9c2d01e0176648501

Download Submit
C:\ProgramData\ESET\ESET Security\pico\1\220656.pic

Filesize
162B

MD5
765ba4aabf648a825aca7474d7240956

SHA1
e38575f497e93e37b21707bb2dbc322c88520b56

SHA256
617006d5c2f09a8b6ad7de9ddb832d0e553d55ee946a1a9efd19db4f633b6bbd

SHA512
662838f234bbcb6911d541c2036f9352845340a4bd24a2d52e7c2a72fde8f0a7bed1def964005cd545b6031bafea0464724bed56703a00b3981a24ae858c6137

Download Submit
C:\ProgramData\ESET\ESET Security\pico\1\220657.pic

Filesize
206B

MD5
9ac8e9efdd063eae14fcecdb838b8915

SHA1
726c1c4088487fb4b061aa4e7f808aab08bb8670

SHA256
6417527071a5abeab5bfc537f53e9b299ad71924fc6b338aacfad6863a63764b

SHA512
1fcbef70f894cba91e677af6164972d636cfbf9672b1dbd72da526402bcd6c839a3a928654e78bc3c60bc529f97b26ed81b4eaabcbd21d874fbd6af064061c75

Download Submit
C:\ProgramData\ESET\ESET Security\pico\1\220658.pic

Filesize
2KB

MD5
0dbe7674b1b7ade6d693904b975d9d73

SHA1
2c44fe0c2ea5da7e0b02ef339faf99b478f94ee2

SHA256
fe08de5bd22f383a3d24dee6f0e07c7329034cedf642c962deb7d36a50bb3545

SHA512
86f61a154611cdb4cb254ea65d15be7770908f044f688bf78de80bad5ca2568313e036082e58c906f983731dd822eb6f7245f7fbf3be04b16dd009323e7bbf84

Download Submit
C:\ProgramData\ESET\ESET Security\pico\1\220659.pic

Filesize
239B

MD5
f793356d3aa3b17a2d5f96c87723ce14

SHA1
5cc7cd43609e8d8e8d207475fcc2604a9e248a09

SHA256
bc5227700b194be695e0ebce37fc336cc8c8e338a73acdc721d856fccc1e5458

SHA512
672e7f8864c692f70ad1768823d6fbcddcdec7656d55c801297d176ff6be22ab9cca75613d53c2bfb80b565658d13a0d30d9fb1309d70513e8c622faa8212f6f

Download Submit
C:\ProgramData\ESET\ESET Security\pico\1\220660.pic

Filesize
400B

MD5
dd53d6fd4c6819459f4a112a196856bf

SHA1
4b5b7cd4e0def217f2cc69055a7f04fd93f713b9

SHA256
7c5012adca0bbc31ad7ee0d1458ad7356af44a79977aa4e295e04a3e48893375

SHA512
b94d17ee56f07f9b68d80842d74f0eb0490e3d62954423b3ba0d37956428205042bd5941b365abdc979da6457131722eb23d1996e352acda132a93bb2247a4ba

Download Submit
C:\ProgramData\ESET\ESET Security\pico\1\220661.pic

Filesize
263B

MD5
bcf5a947d53508ee23f44008a55d2a7a

SHA1
beea71540511ed1eafbde97d94be79e5513abd18

SHA256
e4ebd689eff4535616400fd744f123613e32a3143d811612a1db1af0e00ec0e6

SHA512
90ddb6a3a09fe863f3eca1eefd540d9c0cbceefecedbb273998f976f33f0d6bd982c6119703651362a17f4a64c0613ccab471512ead3c51ab538560c0de81b66

Download Submit
C:\ProgramData\ESET\ESET Security\pico\1\220662.pic

Filesize
165B

MD5
54c6ac63fbaebf2e907a776c243e63c4

SHA1
c7b0c59aed38ae746955f292e8ae513ded6b7d09

SHA256
2a970c2f18436ff708d516744e5ea4e15651eddd29d5c45291d0f8ebe42afa86

SHA512
a42465b5a5160337cee53ee58cc0cd025523c07086c06c0fe6ef8125d5b718fcf7ba2c8c322fee8ca43241a4eaf81339081493a1063965244fe4648db042c159

Download Submit
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESET\ESET Security\ESET Safe Banking & Browsing.lnk

Filesize
1KB

MD5
bdcbb38ef121cd6c3004622f69f0e64a

SHA1
64b321585f15833d67223a00a347f12a6d7198ba

SHA256
ca562d8f4f45488a5133338d987ff9d61cea3893a83909b0124e109644442943

SHA512
a4d62c8cd1903a6a66693eaf0670e4a7d5e82162eaeadbead91dca7c4f66f9a71aedbd6a7cd38a42f7706875d6d2d3cd634d1f73d9fa4b0747e65b01f318c0c7

Download Submit
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESET\ESET Security\ESET Security.lnk

Filesize
2KB

MD5
40f595cc0506ba4dc8d3fdca82d5a682

SHA1
5367c3dc260a9874868aa0387ae8bd937ab4dfa5

SHA256
49238a231b6bc56d5cde4e88fbd6662fd0012ff0c8db9ac32f4edebc0229ae61

SHA512
fe8556e7130909c056800d059401716aead8117ce3f173fd452228ba98fc2361c91499a95c0a190291c12d64b08ffbf844d7dbe254d76628b7fcdde4441cce2c

Download Submit
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESET\ESET Security\ESET Security.lnk~RFe60d229.TMP

Filesize
2KB

MD5
c533d3a1e445495aa8e21467c814c0e4

SHA1
a6b5ae155f03cdc6f551ecf84a2cdf3e02afd177

SHA256
e5e191ad47cfb0c26eed36da60d716514a678df22a23cdb66e051d6e5af43597

SHA512
8f289e0a3e06c2ed92dc82e5d361cea9621402330bdf89221136bf8993a3d968a5015aae474fdb1437309e49a39bb0e9a7428f91a27e210d61fc40748f8c6a20

Download Submit
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESET\ESET Security\ESET SysInspector.lnk

Filesize
1KB

MD5
2014ee0ef2c5143fc0fa678fa3621997

SHA1
74f23a1e98a2c96122a8a12be846e7a99d04a323

SHA256
391c59189cc6fe0727127d4a2914f49f263e0853b0388cb4e524d0661e2d7796

SHA512
e58438108bd7b8d6f173aaba311d4304d0bb354871eac7953df09f12fed29fa98aa3d37a42d41f94f943598c2c2dae0af565a952ca846f25205078e25c68126a

Download Submit
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESET\ESET Security\ESET SysInspector.lnk

Filesize
1KB

MD5
03ae2aabc4081435caa268eb810d2df1

SHA1
fe43f08a94d18a78d4761da0ee48834b88a44524

SHA256
e3a03494066237515733c99c049f98b3eae637aae27e518942fb85c31e8ee20c

SHA512
c6b35eafde9578746b9113cff723c8ce80f186ddc486fdfae4228284e6f7fb2ebf4674aaa8bd8788d69151567264bab5acba4e91ca17c9bba46441f2858ee416

Download Submit
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESET\ESET Security\ESET SysInspector.lnk

Filesize
1KB

MD5
4acff339fe8f3284cb57a289f9def002

SHA1
e78c93eee006eaca0cbf2f3eaeacb59717f0d9b8

SHA256
bd13c4f5fbac07dbdc1838372c4c06fbc05e2dd92da8076636563bb34f4988c5

SHA512
354a30c30e08ab8b7b44955a4a496c32f51fcbd0f06775a35b87af5acaf89b4029ecb9e7709250c3d5346f70147335b4b30cbf6bb2e3e528196ffd84ee0c51c1

Download Submit
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESET\ESET Security\ESET SysInspector.lnk~RFe60d267.TMP

Filesize
1KB

MD5
56ade8b8532242d18651a2971cb04616

SHA1
6b523a7a1b854a3238f4abefaf8753091e327d39

SHA256
2d1f0ef3618e308eabda49d2ee9cc38ada443ed1a2dd0e6349d7cfdabe853ea3

SHA512
fd463119e8c1c7b7ce9fc52824f5010019b509010f43f5915f435b361e3f3fd1dea6fc5d6dcc9a2ce8e96a1f467432b738046018144ec056d3031a2269bb20ea

Download Submit
C:\Users\Admin\AppData\Local\D3DSCache\cb00da9ba77862e\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.idx

Filesize
64KB

MD5
b5ad5caaaee00cb8cf445427975ae66c

SHA1
dcde6527290a326e048f9c3a85280d3fa71e1e22

SHA256
b6409b9d55ce242ff022f7a2d86ae8eff873daabf3a0506031712b8baa6197b8

SHA512
92f7fbbcbbea769b1af6dd7e75577be3eb8bb4a4a6f8a9288d6da4014e1ea309ee649a7b089be09ba27866e175ab6f6a912413256d7e13eaf60f6f30e492ce7f

Download Submit
C:\Users\Admin\AppData\Local\D3DSCache\cb00da9ba77862e\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.lock

Filesize
4B

MD5
f49655f856acb8884cc0ace29216f511

SHA1
cb0f1f87ec0455ec349aaa950c600475ac7b7b6b

SHA256
7852fce59c67ddf1d6b8b997eaa1adfac004a9f3a91c37295de9223674011fba

SHA512
599e93d25b174524495ed29653052b3590133096404873318f05fd68f4c9a5c9a3b30574551141fbb73d7329d6be342699a17f3ae84554bab784776dfda2d5f8

Download Submit
C:\Users\Admin\AppData\Local\D3DSCache\cb00da9ba77862e\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.val

Filesize
1008B

MD5
d222b77a61527f2c177b0869e7babc24

SHA1
3f23acb984307a4aeba41ebbb70439c97ad1f268

SHA256
80dc3ffa698e4ff2e916f97983b5eae79470203e91cb684c5ccd4ff1a465d747

SHA512
d17d836ea77aeaff4cd01f9c7523345167a4a6bc62528aac74acde12679f48079d75d159e9cea2e614da50e83c2dcd92c374c899ea6c4fe8e5513d9bf06c01ff

Download Submit
C:\Users\Admin\AppData\Local\ESET\ESET Security\Quarantine\21F232C2FD8132F8677E53258562AD98B455E679.NDF

Filesize
448B

MD5
68de62f90fa8f5b35fca7c03bf653860

SHA1
aa3b83763d3a31dd48e66111e09d8ec971680072

SHA256
826fcbd9b18bef3c10542d7db0891b4f811b1647dadce988ba9de6ea14a4b048

SHA512
c669c71f47571ccd5e765c302b5a4b51f636249cd7c6d4ff7125893d144abf905d4c7e153c8536fc45377bdd17efdac86213f281c684143951de5fbfdeed8109

Download Submit
C:\Users\Admin\AppData\Local\ESET\ESET Security\Quarantine\21F232C2FD8132F8677E53258562AD98B455E679.NDF

Filesize
806B

MD5
52cd16864033f782d3f935e6e01c43c1

SHA1
06898b952427c62133aa435b69041afaa4536278

SHA256
26f0fe4050ca2fe45b48160ca569b349c70f1961add532b54e95b548145dfb6f

SHA512
6c7579cfe80b4d1913b0074da09dbb8fdbdfd9596b0a3e117158ea5532c0974fc34c2fc9e145f9076f4ec1714e74891521528ffe50c8be71fa0e3fdfe0080681

Download Submit
C:\Users\Admin\AppData\Local\ESET\ESET Security\Quarantine\702DFF2E0E597D53A9A4E5A60AC1FEE71C69A0D3.NDF

Filesize
432B

MD5
adc6fb2c07ee7f8525f8e039ba20a2f5

SHA1
ce57d8121d91be967c7e7f75b697cc24099d3ade

SHA256
1811bfe4315a7c55385a01d61980ca5fc565e946e0a42c0824fee08f8fa48262

SHA512
ac906c7b5b70a01e296ecfa0462e635c590e659283d0ad8bdf4055752dcd74d3775cb46dbb9852eaebf752058781348254bcb982c0fc59b1e85054cc04a80c0a

Download Submit
C:\Users\Admin\AppData\Local\ESET\ESET Security\Quarantine\702DFF2E0E597D53A9A4E5A60AC1FEE71C69A0D3.NDF

Filesize
770B

MD5
523d7049089ff3d31952c5ccc28a1722

SHA1
a115c3f6b5d4b19aff28cc3932194597690c4ef2

SHA256
3ae6a474947fb4d0fc03ce4cded3d19f8b6f2f7d599af01005fdc31bea4f0686

SHA512
d0c298aa5a89f86a8b0522659431170a869956ef33db13e7ca70ac0195a5dbe3a70e7f0b7264538af468495af05cfb77e804e7b5bec478724932b68fee14cd1e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\187cb11d-b0a0-45fe-9a40-8cf8e3c4344e.tmp

Filesize
233KB

MD5
c2b3dfe94de94691fff69e9632ba7a75

SHA1
8065c8fed21111de6b2eee8cf877d0c5e1047c6e

SHA256
2d85e9beaf890d26b8154ea914b44220030abbc4d54142f884aad86c5f88db41

SHA512
297eba47ddd1d80458cad697a34566a581ba407ed20deb5d09001706a51596f76ffd4fd0694d8efe08d29a6df6d07e20341fabc14599e9833a763fb8d6bde7cf

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\6468f898-fd1e-4ab1-8f9b-3fd17a2876ff.tmp

Filesize
233KB

MD5
3bf9f53a3c849aecfa6044b5b7d7d88b

SHA1
c78d92fd873ff575754695c125e5ab638fc806c9

SHA256
50486d41dcb800d07e6c97e5a1a7538f41ffb0dd2de593904240c1e2a3ef3485

SHA512
fc2a52039ed04e5196319d79e530d2bbbb33bf076d8a7758f59ffa89b1973a08553c7120d0020aa7c5b5bff0229e859f346f026e9119a9820f83dee7dfef7bef

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState

Filesize
649B

MD5
a363b9eae1eec3cf7005d94359705e1b

SHA1
065810b0d01593e4081291f49d8a651c65a114f3

SHA256
1a9bf6ea18c4ae538c06f35eb2d113309652137e5ff1f75caf2a5f64eead2176

SHA512
3bbf20c585ebc687e9d81fb5a1978f6e5da8a0c8f3e1361476176333688201a6017bb588c23169b0fc661b75f41c8fe93790c358f69cb4f5e9e5a7209aaae913

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000005

Filesize
39KB

MD5
074d7c0ab0352d979572b757de8b9f0c

SHA1
ca7dd3b86c5e8a750401b8d6d773a9cc3af55b81

SHA256
46a06c3ec01cd4c5d5d8bb131febc48e3b1eeac94a47fe0718dfce6af821f83a

SHA512
00de9f645ca784322b005c73302aa573ab0665e8334533e7408326f0c84c12f3d056f39a2197d5c4bb8092f3b09dec4b79ec73de1b5d161951c5c48b9548216d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00007d

Filesize
215KB

MD5
e579aca9a74ae76669750d8879e16bf3

SHA1
0b8f462b46ec2b2dbaa728bea79d611411bae752

SHA256
6e51c7866705bf0098febfaf05cf4652f96e69ac806c837bfb1199b6e21e6aaf

SHA512
df22f1dff74631bc14433499d1f61609de71e425410067fd08ec193d100b70d98672228906081c309a06bcba03c097ace885240a3ce71e0da4fdb8a022fc9640

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000089

Filesize
20KB

MD5
87e8230a9ca3f0c5ccfa56f70276e2f2

SHA1
eb116c8fd20cb2f85b7a942c7dae3b0ed6d27fe7

SHA256
e18d7214e7d3d47d913c0436f5308b9296ca3c6cd34059bf9cbf03126bafafe9

SHA512
37690a81a9e48b157298080746aa94289a4c721c762b826329e70b41ba475bb0261d048f9ab8e7301e43305c5ebf53246c20da8cd001130bf156e8b3bd38b9b8

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000ae

Filesize
104KB

MD5
e7ae98681edfa1df7f1e3ebba0d4fb88

SHA1
3231cce0f5079e179d9b736e635f9eac6f162979

SHA256
2efd8e3c56059b3950afdbf4380633a3bf0c456a44e0e5b1f7a7ade7dcee022b

SHA512
b4d298a14b308a517f1b17ae8c4f737b0d0bd4d681e3b2bcbf3dd61bc014d81cc51d82072dd93d3ce94d97b6a3ac9481a0ede4072a9e7539a7f0b56a3244c8ac

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000af

Filesize
97KB

MD5
1e081edc16d92d42aeccec760174fbf4

SHA1
54c9ca7d208d52e6962f59d45741538fa2c6bd40

SHA256
c342b1b7f7d19be1429fef29bf3af6d9e8c3e21aba846e082cdee1db8a530c83

SHA512
da87083aaae3013af77f2fd4c0f82964e126126ebd8c27f891aa7e62b98d2d77fc8fe204cd9ed987a9fa5f0d0335de240bf46d23dc53be9ecb274d3c80617dbd

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000b1

Filesize
104KB

MD5
c709803c3cab6f1116039e881ecf531a

SHA1
21c2bd3c2e5c28337dc6edc83c3eeb8f027d82c5

SHA256
a4e1e7e6c1021f0f62e6f5878d260e7fd69171a110f92306257f1b01240caccd

SHA512
afa82e4ad8d5074464ed9720620b33b5d71365b4595357be0a40989d6430b4056f2dc7e912f048168d0c90f0f7af308e826dd6eae5335c7ddaef607b81cc2b43

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
4KB

MD5
dcae50e7c0cf16cbbab0131a864e4db6

SHA1
65df49125b1c64ff7e951958136852d2a221a6c1

SHA256
bd5c7c8b20b8768e626890b3901ecc417186fd03e27e6fa1586266574a9684e8

SHA512
b9a469fcf6ff18978ae9010286ded2d5392b4522060b42a9b933a3e938ac35878501b80174bed0d904c87bf9f9e9f3e4e28c99fc0552c8aaab886d7da45f9d1b

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
6KB

MD5
798fc935075e8a231ce8ac7225332fa1

SHA1
9c4401ce8046b7829d972efd2c567dd8444dd36e

SHA256
584c9a24f29944ffdb5d777f677f1d43926486780fbe7aecae9cf489e2051528

SHA512
b3ff55df1f302cf66e9fc57cba6e3ab5e51081bc60decfa4b62aeabba0cf2acd432760e43579818cdae7a119e1815917bfbdda3ac69df0589388bf0f36f734b3

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
3KB

MD5
650e5e0c3f673688b362b095ca627dfb

SHA1
3fc11b4930da1902918f903ea368292bc2fac07f

SHA256
6a414d9dae2473feb156a808230be100534fe4a2ee9c11539da63f99daf09513

SHA512
a7ba05e82a8ad23c87ac74a5ebb2d03dbd9b57524d125725a593cad9c8fa3263e8ec82af19002a678e0a83054208358d27a9a1d242c6bcb3d5467ee9ffdcba4f

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
6KB

MD5
a740eaf16f414584aa768edba42ebe15

SHA1
98b69a023d77506511e0c2e5817e5ac18f7aab13

SHA256
8cb3acf8d1be5c3b3b2eff7746fb21ab72d309d5732f3dc159ca089b53c50f14

SHA512
b726afb599d6b9e00a0ac8d9e0e6384bff677a7f7f65e421c9ef89c95dbfe2bf46bc1d95a7a8e2ba78893882182b459615c5a6447bd106a28fa3b3cd138e03a0

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
6KB

MD5
02b7f1ad239f7f75f1c44c7aa14323db

SHA1
2323054f33c68022e0e7a91dfc445e01796220c9

SHA256
6fe6725c94c63dd52784b7fe6bbf2f1d82d4e8ffa9591cf2408b1b5e30819ca8

SHA512
5c63e633365ba2237c41c7ed37fd66df4495f5e22587417d20f2e93805ae61ec39f4708d6de44166683e93627ea45f82815bdabc025b341e4cd320fba7860e99

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\File System\000\t\Paths\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
16KB

MD5
ebb748af577b11f8cf3ca250f6abdca2

SHA1
e577b9e39799a29fa86b1dc65218494cd03afdd3

SHA256
cf2fdda14383012e6b047d8f15acce69dd6bf2b60a22da5f4f6bf58b26a253ab

SHA512
213b8c03c20f21a5955b9d5955f6ee6c41613eefe543683563c66341c8c435f38cf21c5e0aba2e154a3473c1b2db5162bea42792f2b9ee85ca295c80013e4bfb

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
9KB

MD5
0c7794083accffe238a357d9934250a6

SHA1
ce771f4971f5d93a545188af656431b23498f94d

SHA256
7d9351c935a55aa4ab1ccc7348cf2a35a33b3f38348ecfb007937a0cdd9d9670

SHA512
24cbb4a46ad6ecbcb51efbcabec804523c435e6d46fece1cfb0a9c668ce896ef352ee2555b2f3007b8acff28eaf19686f83bbfa0dfa50622f6037d57d453838b

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports

Filesize
2B

MD5
d751713988987e9331980363e24189ce

SHA1
97d170e1550eee4afc0af065b78cda302a97674c

SHA256
4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

SHA512
b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
5KB

MD5
b41e399df3413392bdef635c240b7779

SHA1
95ff59c5f96dfa5c8329b5ffdc02340e912cf235

SHA256
21628ff5e334c1d2fc49679971ed2850fa0f97a7e8a524c5fe210210f64bfb9d

SHA512
d8722a65fdd316c088805abc39f49db1d9e2a6abdc4a0257c719dbbd7edf34a43c3308323c58fcd9b26f3aaf7e6c82c663ae75210152fd48ebf673171ada60f2

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
5KB

MD5
0309424e266167a6bb8b5b02f4f29feb

SHA1
9d26ca24ed73a3f483777e396eefecc18055ca9e

SHA256
092bb99de6a9ec178f35a51d523148e5e3b9d01294310d6fdd78bb8b9214e210

SHA512
2cf9c33ab08fca45d025cac82762446baecabe0586073282a7a3795eb0e91f9217257e1acd826a171f15e7c16d5c63785cf27baf8dc8d309041efde265210cdc

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
5KB

MD5
f57534fa424d8d29224ff7029c7cc335

SHA1
e5823b085923160dc8194bafc5ddf122bc5c93c3

SHA256
999a465410720545655f19b9c84f32aad18ebb4cefaa5f476931c7ea4572939c

SHA512
df4ccddfe3998d75b4145071d4ec3a7147006d931f2122184ab2eedd6cd50f9a4dd2d4459653bb98ee853e885a3cc50b03119603856eeba67b85bae6ee1cd93e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
4KB

MD5
648a77c4537a0b642f31ec2084aafe04

SHA1
35f4a2c0742b3d413f50f57fee6232b347945ae8

SHA256
d853552fc38db27366dc056b11b52ebc2eb1ffb8a64ff923bf3c42cbba6f858b

SHA512
128274c59f4a036027e6adf6b1e41f9214d1f13540be3eb45125f9e16e7492edd89e388244d26027b347b8314e63c9b7d4c62f5e6cc018e26c59b9f0d752ac65

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
356B

MD5
b048c08066e1d6e14a88804af988f5ff

SHA1
b0d95484332e60accdd96c1537cebfd115cab7ca

SHA256
38ae97207846d6d633217411b164710685cb87ab358be22e0ebaa665ab46cf06

SHA512
74a617ce16bbbce0bcb2cd79039c3a9721a304acb299984338b9ec55845f87930d3619928716072037921d51abd1cd41f16690c273962881c3756685ae3bb4a8

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
2KB

MD5
4898f67799b8f666f2c197702e321532

SHA1
9cda5b3974235c50677b141485d10648089d93a0

SHA256
fdf3caebd66126d02ba14ec06f1d3a6db1fbc6a4f96ae1496e97ec6ce46bd500

SHA512
f957538d89e65c70f34db6ebc0bdc3e3967c95574243292deb85d62bb39980b1e6180e771780a44e50e1c8bffb955aa4b78b766b6d8b9f5de75578c60deb0abc

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
5KB

MD5
0fe073ea0587bd59ca03eb635b2b01e6

SHA1
374e0d14d7e738b9e9e682747e1931456b4575b5

SHA256
4aad8f2e67eef8f73e7977acaa201ad3aa458f5a1a72f67d66fc79af1f444d88

SHA512
12a1f26ef2903df3aaaf4f7ed48eb939db191375d8190665c23ffa38be6bc1e56a6a2ec026232c1022691cbb3aa1caa66b94aad409fc664e1bd51ebf7b389e3f

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
636691506e9755f31cdf86251e500a95

SHA1
404c877cef53b91f49ee95037c8e3092d91d9c18

SHA256
ebdc886776258d718c01ec4ffa96548a5508c4a81b98af4ee68b8d1b9e4fd61f

SHA512
cc6eca7e98ecbf02719c8cf30796f6d21240774b646a21681d3bf4f46627c36557483f85892701d5d5fb28908ad245b9f299c1e304cb6eda1986452eff4d7922

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
4KB

MD5
228caf772103ec1cd05dac7248d4c86c

SHA1
22d246f1c89a44d9cdfb288a0cb75fe7e10e33f5

SHA256
6aef5e3ffce2b1f3a141cc87b941381e7813efb9aa40f2ca7ea65c2c713593c6

SHA512
fd6ce6088f137a102ae79eb0f7792076859341d2d6e9383bdac5627e16937059d007ffe99d45d32e37bb2647d1cc11b83dcf8f01d6b91a4b901007092e248de2

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
4KB

MD5
a774b196ac52e2fd71498f665ae8e1ad

SHA1
e580bc4470316d4713ef65d3fb2d70c4f5ca9aa4

SHA256
10f663541161dc30bdb12e189d37ba7abab3f1430e64e496cfd73462b9de0dcf

SHA512
ffc46fd82a8d67d623014e1e0a668e9dc2079b6f37dc071ecd5722a26fb53bd94c2009745b992963753fdb78e00aa7d25b44382a5eb2e7aa5e7e61a335394ed4

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
4KB

MD5
55f3fd9a8531aad96fb7f551b03902d9

SHA1
ae9efc285146f6ecaeef977fd0e0f5b4fc070129

SHA256
9b0fa957397c5abdfbb9456ea962938c1448aabf482baa0c40056bcdbc3cda99

SHA512
5aa7039f296b04f523ddfbed402754dd4d3024fb2f720ea1d44c7eeaa0d6dfa88141a6693b99c27bc88f68c18b1c03852e80c5bb3544018b635c5c744dff0ae8

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
3KB

MD5
c2f7fe50f02112066c7fcd0f33e1e77e

SHA1
4381c1a8c9d2cae3305377d8f3fa91c003bd9255

SHA256
612881fafc27abf248b0ea8170840f881a94a4875e8adfce2362317c39e172fd

SHA512
ac48a0df17ef3a0b6a584024b9f16f1135c53737c2a9160de4e8f2b2b09a5a3d190710e5c9f7356e1874613f221a91cc5283c3aae7ed47d5c7a82e0e9619cff6

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
12KB

MD5
79e8ec57856a6397ac1385867781adb8

SHA1
801d073f979639cccb1d4592352f6c3755dbc8ea

SHA256
1a9cd37449dba440f8d3ba292e24f0b82466121cd2b57e4d4d4035422a159da9

SHA512
b042e495344dbe6f6b37c841d84612f77902ce1be95b615561e31c2076175159bc37c484cd35ab5a7251f4789cc069fc7f87cd3c36e3ff81c877010e129ee407

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
11KB

MD5
4db0ced2af5a6386882a3c98f02e1f73

SHA1
cfa46636d2ff5513b0c8f4a5744e4646629bd885

SHA256
e287d41d4719f51eda6f3bbeca360e6373c08cd13a1d219f8121ca9dfa100a3b

SHA512
dbf57b1682fb8d461ed5fb1799dcf2b39ab1e779195dd4ee0be209c8d67732eecc7e09ae25783ebc5817bccb62be5d970a905dfb1695b147e22d6d9a65a29418

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
28b2d72172dcaf16ea01c38d2f22cd34

SHA1
03ab370eeb747180189fed1ce4e38d68d36116d5

SHA256
52c2789ac4235adda1c214499eac35552f82d49065e84fad193b140dbbb72bac

SHA512
866c91c9475b26546104d6d3a39b6457fec68d4c2cffa55473d44f4f2d6640fa7ece9464e2dca3a66e94ebb11fbb81e7d3c0c96d75f9ba0b9e8204bfe6757ec8

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
11KB

MD5
dd935adcc2d221a02aa5547f05284a9d

SHA1
3a91fc6a4a30c71c5a28096a7a857ff1089aca31

SHA256
942fa2dd085037d631dc6289895d3366128e561275f2334aa1c9e47b29fe8057

SHA512
36e286e9f05abc569c31cfbd2b94662ad353ad3e82f0288a2e20e1ab06239c4c00727b8e279d68c0ac1a5074f90025261db3475a18b54cf81961fed4020625e6

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
11KB

MD5
e3d4764bdb4c6e6d750698c41fcbb884

SHA1
c505f85c534121be535f48e650f7cbe0fe87e270

SHA256
bbe9c5fc79c776bf3e859d4b7a35216341b3b92bd73c358bd019640a9d3f49a0

SHA512
22796a9306c672bb92c19e6b8570751b5e32b58a3ba968c522dc6d758920c15481361d0065dbec195cbe9ee992dc02043ddd5299fba8c01c6835b52f675463d9

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
11KB

MD5
e64b077be908cc669e85214372d7f88a

SHA1
fb7245243d7b3b95ff52cbf50877ae7e9f61661f

SHA256
5db7cec6b114639d7a7ad07ef7ba3e2c71a62a831990aabf634175e51a9b29c3

SHA512
24ab72f0ba3e1af9028cc972e5c1f76f7bf7675b3597ad828fb6e54b275ef5faf952a3c2184ad3c795e7b04c72b24c02eb8e0c1aa139e57ebd34b24a6062eb26

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
c4214d20fc28420f013787fae6161077

SHA1
a8c5c2ca6bd0e516129a3ca7a64da0257a58daa1

SHA256
0838e88cc4dfad0d473ef2513d0b46d7e74225226bbc27e97898dab40570eaf1

SHA512
5d6842a390914144c5e33dd755acf91593a4e04d1946b5f3fd2d78e043290207a7d4045dc7242138235e5abc214de8dc2d423678d0ccdefc75ef40ae5badeda2

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
12KB

MD5
d9414d047bd4f0a522f72ae139347f13

SHA1
ddd90cf4f61aa5f633cedb96579b35d34202c63d

SHA256
879a1dc2a5c17475064e33d7fbdaa1b8b20799e1f5635dbc4479dee1434e1f76

SHA512
ca3ce2b42c2796d114c7b059d2b7a74397ed613c9d66c4b98cf902b42ac72b032534652a4249fc140ef8f9bbf037d6983c73ecde198ee7d3516e7a9055039aff

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
12KB

MD5
8257f56237a05628c4c11e3b8dc23a6a

SHA1
1506c1b1d334b15f7e22a5082d8b13428622a91c

SHA256
7495c21ec82301173ee12865944a830320aa95eef9261c3d269e0fc18941a795

SHA512
c6dd86542e3c3e7ae482ad785c31b9f6bb978d164d364062fa9b54b6ad8a3eba159292bc41cb80c147a16c3695076ed3990936612f0844dfb50357cd4a55a21d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
12KB

MD5
8c1788bf9dc4efe23400ee9eb87f8f5f

SHA1
831769cbb500a8c4e490e4a964b8a9bb3c28e3e0

SHA256
0cbce926bfe6d308209fd281867af33ce7c6e922ebbf5486643fadea72249cfc

SHA512
b27978cbe3a6b73271ca222336cddef49a96341e66d786a3e2f223211d270edc37ed616d9826fb3127b6ccc3b2f0b5b7bf029755817d757d5adc4e100db92295

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
6b7ec074490c65ac17ac7060a70f242f

SHA1
c65b7aafe0ee887d57a341b311647151f79d8c5f

SHA256
49bc4b9e608b1739de1f12b481f1c11c176855ae97bc6b9514f051dc1117df60

SHA512
abe6ff81989042ae7fc6381aa9ff9f468f2f1a4bdf84c5288d62928418e69cc94504cab87371507eac457e01942ad985cfac0f7980091cf6405b083504cf8533

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
80cfe62859995842e7844deaafb77a8d

SHA1
e45cb46f8bc1ee11f8e92cd312dcbdbf0a8a3a13

SHA256
782edc95cf104c6211d36cc434362ca53932e764c38ca4caeb62398761a09aa7

SHA512
03afaa9a839c415926c3804a1ee748abcc5c19a7470d9f1bede162b5bb90a6754ae621b631a46efe4d54e5332234927edfbf6f151353a49d579b44fc431335c9

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
aa0eb6f00a28d79bc61e60100eef635e

SHA1
2e2f867f6246f55f596b4df324694abe5e4f44a0

SHA256
c3248927b268e851a2090c0a5c59cca338f85b994f23f77f4f0f3dd14528827f

SHA512
5d7e3bf80ab770107045128ca4ccb37fd4ad64f4b725b1fe046ff9776de31b20878caaad1293ca2e6f651c898a196e03edbfed4fe372d425d430ce8c5ce96821

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
122751b7980fc040b22bb5de6ca1d396

SHA1
5ac3de218d7b0b261510b16aeee23970211dd649

SHA256
fd180b2ffe831e696b09404d8225b7d5c767ae026cd555a040590aaaf6c5c5af

SHA512
e6215adaf1fc5a735e27da22c77066882ba721942fdaecdb8c55131277a6e97a76606d2da1a53e95c2cd502e504eda0166ed56efb5e6150f0a475b1211bfcde2

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
11KB

MD5
08afd59a5c9a08591a17965d76a1958c

SHA1
608995f42ff520f7937c182a59c82381d997774b

SHA256
a005f2447a68ae6bdc0f08dc0421def2152c044c81dca52cce39620a7d5cdab4

SHA512
51deb16c4596d0ad7c22d0856f9b65ba4d4d1def9684978460abee4df8024725a7d141c06d0686e78d728d5bc65d711246c06ec07e520d9e329de5a09b6fa3f0

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
12KB

MD5
877864730eb23ee8f053396927ed31e8

SHA1
3b73dcebe75d42a0a0b4430a31636e083b4b0f4b

SHA256
1d8fa93a7b72c45d419b60028673733d63b3f155b4622522dc7f339ff873071a

SHA512
a540c3ce6aef459ab9081e429cf28dbc349ac0a5809d5807a4191d503170ef99e65271db2aca98ac7ebb793576a6c3e70d30320ac97cbe5a628e4fe14ae27ab0

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
9d24d4773391d443df14ad2ec9e4b1fd

SHA1
95366e482d063d982ed2e304563e9d7627efc32c

SHA256
d881b1264d7c876debdee9d0eba3908e95e67b4cec6f39faf526cb177c8c1224

SHA512
f851c44c71b54fdc348ecfef979fb222bceed2046ab326de8faf738486c616e2a5be4166345e1ebc6d24d4626b2dbb81725681cc354fcea68574d0e612144818

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
12KB

MD5
ff49c2d840d1281ce3ccd8b88825d7b5

SHA1
e4e323dacfec0667ba13936724a66b5610ca635d

SHA256
fc2aa5514e53d6bf9455b616e48a30b8f90573cae4e9f9764af17722372e1021

SHA512
45fa30e38d01db002de11434e85cdd5dbfddc61f8e9481bbb05fb4148a9c51c6361e56f806c4ce88ea0abb17ddecf3e890c81d172fa641dc6c6d9402cb189d42

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
12KB

MD5
013b7d9fb568c9340adfd9288c03dd27

SHA1
4c2fe183ae11af28c40436dafc9f9c6ad45bb234

SHA256
d0245c70cc67d592aad3c8d0d9b2453922b808dd62566fe0f4d7731c9499c629

SHA512
4c9bc55fcb0a786c5590562cf950b762ca4cebd7e45d6f44df23470becb54cc521c5932aeeb884fb63c60e3453eb271fe0a3b7acf5a0cc2233239e2a6ad924d7

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
12KB

MD5
606320ad828fb6a0fbcd503f0a593d34

SHA1
afcf5408cf08fe07a731302bed06902328b2b952

SHA256
4d5e89a395536a97217fa56aa384d8ee0b4ee68af5da3ddc2993e80d6ecfc6ce

SHA512
0a79ad76dce54fae2f4b022d3172ab261363ff2239e458ca75d96770c641d31219656b2445c64c20b2ea27f922b9f5986b4cd0c9b6b0994e6c7f8d7ee79a49ae

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
12KB

MD5
658d50e6f7eb457d635e3f2d3e62c1d6

SHA1
e4219306fc9c7a693d644385cee0597c9fcd08ed

SHA256
916b4a2ddc0d3aca4cd7bbcbf36711f8f314c7634ab050544b6f2666027e538f

SHA512
f010c0cf0a8bca1ffa669631085b9882734f832417139a44fc196f526a9f290814110f3ad53d6f25461fff292b8ed0882b4667d6c42d4628edfa424ff5eb0b95

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
14KB

MD5
116f69aad1a73b40e1d7bf167dd83a64

SHA1
897f436d7bff765dedda0ddb7dfd71382002b7a8

SHA256
82f2a66ffae00f7be6d4c74384035794c7312ba2dad8eaa5aba472d54bef02f8

SHA512
29cc0b7817843a7d65524e1b4660408a83b2aa3084e70c97fdaddeb41fa744c43c3b5b1d30c8c6537e20c146ede398c56614113957c93551c98cb5fcc8ebd5f6

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
12KB

MD5
fed38283e3930db4c7a55913c78ee682

SHA1
e7c0093396cb7e653aa7138ce6a7aa701ba9721e

SHA256
1052e7d2bb622176cb30d8929033c40f8dd3196b3f864842224ec793fd435489

SHA512
62c55044c62e398ce1220b871990568f78aabcb4e6a347f6426e7ed7b303c1b5e77dd3d501936c919eb64993ce02817440d30ce5b84e6d6436c5018e22dec7ca

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
12KB

MD5
4db3b68df47d1ccea7c364cf2577a790

SHA1
61f0e05dbca96ddb9a139f687bb45bfc57e2687d

SHA256
7e866db54d8b4519605bdbac4767a8f9beef5e3728de43d688790356fef66c21

SHA512
ab6498136da0c4c1ce27b375a39775a60de529679b714bb833f9611e370c2dc9361fe5e5d51009fec06079886d3cd999eafb0c5efac8dffca1dd879d4d66f8cf

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
5b533383247a334eed034c308ecc298e

SHA1
219b577c0e9a1501aeddeebbc0cdfd7ff0c5638c

SHA256
5646ab8fdbc5155105f01c3fbbf08c3b6d8eefdad58a16185636d9cc5bb1378c

SHA512
0fabe754027f327aee9ec099950f75960e681c8e4bc4e95a4a5ba440a6359cca32cfa26cd91b38c293b59f5f3f3a6f694813c0b70d11977ad2481ce5ba9e03be

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
12KB

MD5
24dac9d8eeb8022361e708f937e8df67

SHA1
132bb700c2b90c5ec529c68c2c3e41628c7f5e2e

SHA256
7fc0e90b49ec296538cac990b0ce7cc10fea1df6d9e1a7eefec3c7b37aad2fab

SHA512
9bf6b63308c5c2c95fb36319aadd8c58c641d7c79ba685362bdc66e34794d852205a488e329e6d1314512618b7a0127248719891e95dd014a61a731320272ea9

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
11KB

MD5
f5cfb649426587cb13eeb8865a531c42

SHA1
28de4ef39fbb3b64189a79e8c2b228428eb9f2d5

SHA256
3b9eb2e1e9f47c3fe84022e7c1f30e4c6e69b867677589458ccf50316a741b63

SHA512
d8985879bea5cc9e8c39a360295c8bd4394bf51656de86758cf7cddda54fa9ffd8b3c4316a3cf5401c62607e4599585a6b95bc809bdbbdb1b7266cc3e383700e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
5634259332534558c37493420a095dd3

SHA1
54a1734a0966e9993b91279fb4655d232e9f4045

SHA256
b130052c3dd37055d02b671bfc18f8c1c194557bab8964af02e60e7409478919

SHA512
85c09d8889378a5dd4dbf46427ee42b63e03e85ea93bd8b261bdc09247396594d80519431886f98a988f76a96a2eb51eb383d164b3cdc352704c04718897c474

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
12KB

MD5
ef2192c2f4c7812b2cc85c7be8941193

SHA1
22f245f5a7b5720c22b5aa5164166493a7398a63

SHA256
3f57c658ab7514b241001b8311f2342d343237fc69a548bad0ee7e0e74360128

SHA512
796c69fc927c4bdbe12aa7503a0f60546c22e93d18a37aad62c23967e6b1ba0d024caf80c016941441296aa3361b04867d24d61a29b9919c3feaa161e30bdbe9

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences

Filesize
15KB

MD5
7b4d0720f259d41dc0566828f406f561

SHA1
4db1a1fecc2630f46b3ee7f6000eb585f2925e98

SHA256
f8af74c48f35cb5b5469361af8d6a7f8804156eeb6fe3345aafa9d84b787e076

SHA512
3f6f25f87e38951964aebd5a02b4b266c439edf3fbca6c1719f8559632a8cc9099013bca6e08d2b13486977b91e098fbbee63257ae32b0959205af51b928e237

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\98ae1de6-67fa-4a8d-b49b-7e9b23ebb8a2\index-dir\the-real-index

Filesize
1KB

MD5
f701c4548fa4181b1b7a31cac46f59ff

SHA1
0c79c5f6542b5b5bea3606f416a74b06979d55ca

SHA256
831ec01578e4833ddc4dd6466cefee27abf73091555627a738b777758dbba751

SHA512
0a4f162fbbc78cc6fe7001d33601dbdc2fbc972b6cf6a1d1062198baecbeb58a4c8be094809d60189513a164279880602a86a9854138f4b23dc1d82004dd809a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\98ae1de6-67fa-4a8d-b49b-7e9b23ebb8a2\index-dir\the-real-index~RFe58c435.TMP

Filesize
48B

MD5
0a450c327c2ffad5909372d4816e9181

SHA1
9d51fdb4ef9236a69bb0c578685d3457aa858460

SHA256
ff0061d792ebe8b836ebc1a8d4caa7c54c0ace5c6594ede337b78a9c10862195

SHA512
e7cd58ad22ce00a9937fe0095d19cb6b4b39ffb9c29e3d9bb0c26be5692476468b492bbe54cf6daf484091f073f0d6c67d5bcb5efff4f4e6d7851df0e537e4e6

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\aaef6cdf-3528-4399-bcbd-7c425940ff35\index-dir\the-real-index

Filesize
72B

MD5
fd170d56b1b6708e611ac717781b7798

SHA1
5445d1613b0fe536532033e50047e867013948a9

SHA256
acc922a1cb4053c5301dd092d2ff6f0169806b0b1d055b968515aef5b0b63c5d

SHA512
703f6b233028008cc4217abed83a5f2deafb8ecb0524823d41ddd650ed77864eaadee14a80f9e585bee4c432091e21289835d6000b811b04e78343b2210409b6

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\aaef6cdf-3528-4399-bcbd-7c425940ff35\index-dir\the-real-index~RFe58bab0.TMP

Filesize
48B

MD5
16f4907ee78126f205d547b008cc6b96

SHA1
0d216cf202212e7cbcfcfdca22c114495ee8c1be

SHA256
74344b2e04632552a65af38b785b205cb65fe03ff6f2adf6bc3e12373447b11c

SHA512
25f371328670f3f3e738fbbdb883b78c358140e8558e33890722127b10c58e3d3fc711fbd032e75ae04a841fbec48d100b7baa00d4944fecba790d918592cc4e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\index.txt

Filesize
237B

MD5
02709b3ffab9bf343cce0324d86565e4

SHA1
846dbf521fef364eb74c84187d4b13d910cc0f69

SHA256
bcf7732f225caa1e6e359bb18f9776391bd5681463df096168a9c09af625f913

SHA512
983c031f4ffa239ca492064fd861f6677bfe2a193fed33558f4600b1df032ecb571b5401196d573364d7803d41887b0c5710da4f9dbb87ab251958a6dec854d8

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\index.txt

Filesize
234B

MD5
4887815792239ddd6d3d8409a516c48a

SHA1
9e3f72f1962ce6563a60ec1000b5a97bbf4d2b4f

SHA256
efaf307e2c8c4aa69ff31b194a0a603140b78b25d83cc23361ed728828d23484

SHA512
210baf9414b939c29722335c81690db4800914fe245c4aaf3da9d8bf691e240bf9806203d3d0dd657e48edf60bb063769b6b0c5c3a2c3d114640dc7a69f59111

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\index.txt~RFe586c61.TMP

Filesize
142B

MD5
4a409da5368989c13ea8bcd8dc826d1e

SHA1
aeecc1c356334528838394b2be63370776fedaa3

SHA256
f24cadc1cf517fa6f25a3675d8e6055b51575a0f143c895e374b9121b1af336f

SHA512
7d05e2dfab144ebe0c20cd1efe0866ef29aeb1d84b1207de0fe11fb2c5f4428c9aa0c29f1dfd32fb870832d46fd331998407d82b0f57769c227209d62330b238

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

Filesize
120B

MD5
ad469c0cf52a4b592b7d93f6968c7045

SHA1
9a7051602582d16f666b976a5f5aa1566a8538ea

SHA256
6d1da66b3ed5b1f16327c42fc6d04b57e5a3a1afcc25563834bd3c6e21507ca6

SHA512
bd3817f88190caa7f9f0e8bfe58d1525301050cc92a65b78b5a042a686aecb2238055b0b158e87b30fab6ac76ab8324f45d582d6b36076cd0ef4c272da483421

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

Filesize
96B

MD5
cf7661ee53a35c8686fb7612106a4c30

SHA1
e84f3a05a1f388203acb69764f275e1f59f0e696

SHA256
2e9040e100f4d16c1809fad5108da5eeb88d6ab77f4097557b07b63ce0c257ca

SHA512
4774b758df162ef7f4d1e2a8e4907808c5cef916000e9201f5b9e616726554cee19cc906684453ac643b2bdcc353a73b898545a3bb76864bcd7bd00e16a90cd9

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

Filesize
144B

MD5
db3311ddef6b06bbff311e0b3570e954

SHA1
fdd3c411976f939107b8fae22ebde7c45e4509fe

SHA256
57583c896da6251b4032b4687945f64e08fb2d78222a581791b30108e62c0752

SHA512
03b71278f2ad950614382a441750363b9bc8ac7059eff4245f393d7835dfb3bce63e2e17d4b3add6a698a0e59d3dfb5dfdfb550420b58a1e11ab9da3084af498

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\4\CacheStorage\index.txt

Filesize
92B

MD5
f916abcb6dd6dac5967430cd5e49e6e7

SHA1
a2d0a49b4c3b6eff252109efec7d347681d05a96

SHA256
73c7abba62f8f470534b8b3c76164f36438a584e9ad0c3dc14cc7f289e683805

SHA512
b7f2f376b18f39a64d12159d99824dec71747d9d7396bca17218dd88a19168fbfa4f144669f02a9d69ad729ee7c218878faefe50d703f52bad7ea921535bc76d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\4\CacheStorage\index.txt~RFe5828d0.TMP

Filesize
156B

MD5
2ec24243cf02e62aa8e2c31034fcf19c

SHA1
ac1f7d0a3ed99a90d6a983c24668d337e9be316a

SHA256
2302473c9b7e98706796bb0f115595f8244fd3e1a11d1db15ee04db60dd5e57c

SHA512
a89cd57c117903126f0263c6f9e21666a8627e364e5962681abacae2fd2402f1c3ca31bd103bb48c34d55414a2984072a0fe9f1fbe7c67050aeda3356e732e4a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\6\CacheStorage\index.txt

Filesize
79B

MD5
6ac589d2647248a089c566d7da73fe83

SHA1
12009ce38de7840279403df7ab401f469321a683

SHA256
f2a07c3c947ac3cd1002f740720f241d06053774b08bc6d7c9e120179490ec21

SHA512
83cbc887e15229b5d320ebcb80966d924c302e2df886852fc58d2c4bc57e3a97cf71fc2c64fedbee753f904ecb256b8a23a239dc0117141a2cf07ba1858afbbd

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\6\CacheStorage\index.txt~RFe593a31.TMP

Filesize
143B

MD5
803275a53ee7445ddd3216dfc300f393

SHA1
9de0b5101473660346ec4002d57907a5f530d1bd

SHA256
6bf2fded400cace61a2255679974e79c06d5db5805b74bffb341a97e231f3553

SHA512
841d84801452c59941b4f159939fb741430bc640081894627370e9089d4b63c1bedb409c58afd3fc8d8266994139c21b106c747ab14cd81a89c564b3775a7702

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\f24ce7c3-230e-4a26-ac78-9c67c5da2b70.tmp

Filesize
11KB

MD5
a98bb9e97e659d9b772ee513f13412d8

SHA1
ecc61f0aec5230dd46473385e2a55fee82912efe

SHA256
fbfe828d6b7c1bf575d870b883de6d8e8ebfd0bb1c1a122265b52d47aed44f04

SHA512
e78b2e4f5358090c887b29cdd9fd94d150ca47c6460e6241ea3540b4321aa89154c36503db0b801a717d8ff318c8c6bd92a5437c1742d811277d237891a394e7

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\GraphiteDawnCache\data_1

Filesize
264KB

MD5
00426c83c72926fcc7787eecf1b17141

SHA1
83b5e53e0fd984cf6f154965de2c747af65e7846

SHA256
22c1f7749ebee594ec4889c5d07469f2f439494a06ec8c6372fb943f51a810cf

SHA512
7bf47ab5838b17a534e6d3d589bf31085a1bfb083fe9f3a3583bb452a8b7e70fbd440b04fcb17a2bdce1639d91542f9cafc6c4c461e0a65ed712c97a47e43a25

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
233KB

MD5
736c2888b633300e2404323b6cab5570

SHA1
2b58c7b59acba1eadf2f3c784a560d1d358e1436

SHA256
e0720c7e0bbb84dbc0413ec1637807e9b67fe51c78d42773c95e577baceca128

SHA512
53505a860f8b7c131c9dcf62999926f7b3c6f03740689b8c2deb7af9ffd2e202c44ead8996d924b108dd9cdcf396320e51d2c00add1063303133e6c9a00c6e19

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
233KB

MD5
dcfb4061ffca4268dbc619c25eb9df1c

SHA1
de1db8547574b6fd00914b018dfac8e5e1bd784a

SHA256
67f0a0a68275f112ba053c542fedbb90907be669a6be9eca44f01206d517ac9d

SHA512
344e8fc676a421cc4f485dfe413fc00bb507e228344adb44b7935fafc5904afcebfd14af791d9806d1c51003e2d05723eff468f61293895103dc090ea86d64a7

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
233KB

MD5
14dca28026c546d1ae613347b7d0373c

SHA1
96c2ecaf9c11be8f54408ae29c10f10846dc556c

SHA256
f2c76305534f432fd87c4bf14cf7590c85a400332b05cf73faa64e35be3b1569

SHA512
428b69328441f9c32f68c1afa322b3a242c21efd74f4b2a925a4dca279a3abc2584197d40fb51d8a46b6bc5a2b14a8bc73f57c4d531e29adc7601456ddf70905

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
233KB

MD5
0cd9c6150d99c47b5a65ea17e32968d6

SHA1
a1e787f76b08a91dcd960c5e69266bd5ee778806

SHA256
91d76914aad1f70cb2ee2c86d4a5f299ba22d3cc07b2e5e16a02e02435157958

SHA512
dadfc1e35db82acee7995a9e8fa30690dc116f373a932435688a7ea99a9259f8fdecce08bd143e3c1a78aa102a775aa6ed9e8f4d35cd78f8eec939b2b5a0126c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
233KB

MD5
9b73d1ca490041a637cc6fcc12e24706

SHA1
b238fe93a23e024bbe06146bf79063f331145bbd

SHA256
9fe42a16ec55383e1675d8437bab0b1fbfc4d43b2ba98dda63da98a9b191aa7c

SHA512
750ba4c91da8471b54d95fdaf00414383ffc6d46147c35cac422d2f7a1c8721009478d145ec8df83e46135e3fbf996be4bd1db4719935b80955343c674242deb

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
233KB

MD5
12dede221f624ba0841b0284155bad05

SHA1
30f702eb129fce3cca6d3155d9f9e38c9caa5b5c

SHA256
7375aa2a13fe42326c09c121f6cef784ad5251d78884207a636763580b4c2e14

SHA512
37aa6a85a35ec00a4aa787ffc4c804e987d829b9af6b5a486877870de3d7dda91dbf8e19ad16ae88ac985bfcf23066b949b497777c687f7e8bdb5184c8f038d8

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
233KB

MD5
648cb17317cdb9e1c08e8449c0ba02bd

SHA1
6637450ce9dcc39d90f2fb329a1595c2e059b26c

SHA256
d65b680043b52a10ebe6bafae8d5020fd04509bdef86ca290f6be710501f86d7

SHA512
b348b3c2babe47cb1e926c282998bd3228b1501b3bda2ba7aaa848734ddbecedfe0a7ca4d5f179ed97f4ea9b5619481820e1fc155fa62472a3adc0ece978e45b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
0e6988bb4c329ff2730e1f237db757f2

SHA1
1e7bc54b8eff485dc17c0cc09cc2572bf93679d6

SHA256
3d186f7dbe9a4b3959bf438f115eb477952b5fab9c3137b29088ee0d885b0ea0

SHA512
c403f5e8f4332a49879d3ba778e79a0b32b8fc1564b230514f1147608055bd984cb17d5b10a78f9b5c430c87e6f2bebbb88b6ba91d4e2ed7d1c5c8e4867da3ae

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
af49c8fb65892ae4696882a7a37fb783

SHA1
ecda6457ddc122e94a9ceb338d57b4b6326a1982

SHA256
4f764d99386c8762b9188df44b9d1abb0003f2e233c9f64a8fd1eaa76f2306d1

SHA512
7b58366efdde2027f52117a1dc2f89f957b1a5c601703db98ad431d143d2b1c5dac74642c46cb79876fb944b9efc560b5cd06427967adb32532a0593eba38460

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
572a45d325ffcfcb0c4ef5abbd1a9c68

SHA1
74f276a5580b132f1e4a41b9c000680d61331b37

SHA256
1e973b1c0c589388e81719c4b86700a4fb5aa6859db9795de4e8d2463219276a

SHA512
17fcfa334f8b3a9d36a69ac18d4912082cadf03d6e32735700d899d3d1060bb41418cca0ae82feb110e27cdf1560d7190b72dfaa1ae976259eeb3d3dd1a3692b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
fba7769e89b36cbefbc42161261f6714

SHA1
4b12a7435e402f86b089856b2e4d187de986ccda

SHA256
9bf5b816d36ec12acccf4fc1bf088847bc9801dd7d3b52678dba5b959fe8ceec

SHA512
f668fe6d9290b248b00a92da282f356b1b090a183e913af851793cbf8a19b07c4dd9895a16311aa659802c5539343f67759904356e95d30f000552a28f002090

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
347fc610daf0b68573d02854021521b3

SHA1
5b4043ef7f4e829f0ae555f120d51e9295f44f9c

SHA256
5d2f2a7003045730f6482d225ad37102c5928a5b054a96e5454084d80eb51fe2

SHA512
8405b0ce3d0099ddee4e9d038bc6d1face559fe6db49f46cb4d1384cae270c06111d581e39d3efc41d51e46a75930c9f986960e1d68b15df901ea9101f29bf6e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
d91478312beae099b8ed57e547611ba2

SHA1
4b927559aedbde267a6193e3e480fb18e75c43d7

SHA256
df43cd7779d9fc91fd0416155d6771bc81565e98be38689cb17caece256bf043

SHA512
4086c4ebe410a37d0124fc8bd00c58775e70ab2b7b5a39b4e49b332ce5b4866c6775707436395467aff9596507c96fb4896f3bf0249c5b9c99a927f31dcc1a96

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
d7145ec3fa29a4f2df900d1418974538

SHA1
1368d579635ba1a53d7af0ed89bf0b001f149f9d

SHA256
efc56eb46cf3352bf706c0309d5d740bca6ac06142f9bdc5e8344b81d4d83d59

SHA512
5bb663ede88f8b7c96b09c1214aac68eda99bc09525ac383baa96914ff7d553ea1aed09e3c9d16893d791c81ddb164c682dfbb4759ac0bc751221f3e36558a91

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5c1f53d3-98c0-47cd-98fd-09fc4d36493b.tmp

Filesize
1B

MD5
5058f1af8388633f609cadb75a75dc9d

SHA1
3a52ce780950d4d969792a2559cd519d7ee8c727

SHA256
cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8

SHA512
0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000002

Filesize
207KB

MD5
a72fa42d8e898ce9d17a40249a206b44

SHA1
b54c683d3576134ee436f85b8b2eec15cc0121d4

SHA256
bbcc6cb7dd767d93a9522e77f147557d83a9c7b36e80b6045141f4b2127edc81

SHA512
d40a4062ae747c554f6a2dc70523668664a0fd7cf756a5f93a2c8744d5f61f7073784da625b2174c12fd53df6ab32aabef5873321693a371e1db8ce10b423ccc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000003

Filesize
46KB

MD5
cf8549604dc9715dd3ad4cd63412ae74

SHA1
bc3481722189605cb096b94c442534f512eff08a

SHA256
122403a945731a6f5fc4e7d7ecdb0b93b875a17269c2eae08b392f560d3e8bde

SHA512
b5827116865c2f7ee5a797292a18abfbc1de2706908b3f941fb315f8ce29839e67c63ae5f3b92760947b069153491667370bf33ea13bc6ccb79f524ace3131fb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000004

Filesize
27KB

MD5
1ba1020e4c949103f185849b96dd7af5

SHA1
1a8483ed725c453c96b1ef428fcdb2958716102e

SHA256
5ebed5c7c70f19005c88d1ebc9622695e8cf8853832800b694698ef807d68453

SHA512
54ad6dd66aa398b483e59b1bed9c1973dd1f4dc9d04a79b800cf9a590ff94bc3bc8cd4370311b21f129122cc26d5c7468aa718a5add7bdc6cca2c2af3b286c00

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000005

Filesize
24KB

MD5
df6682138af8c37789ca876e9a1b0546

SHA1
3814f1254b7769ea9c0a1434ef9733139db12c3b

SHA256
238b81563cf13dfb4d160ce6f561d4bbf78aeddcb1567c1f4069b8caa47b11d0

SHA512
e87175e64336ec79d1d9929d8a7f2a2d2510d71e04cf0758711786892a14ae688f41e796ba6a907899b241784248d5b13c16e256a320fed3d2f8a070842df2b7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000006

Filesize
40KB

MD5
f96095a826f4c8a4ee231b4534923cb4

SHA1
a6d554aa3c24750774b58c35753057fa9a288c4e

SHA256
7ce5db2c03325f509eb95bb72890220e4055f3e44893b1a7ce1be4ff8a247c77

SHA512
6ad4a5033487d55fd9168968f9a956df0504ebd0c7a557b9a5e03657c37c08e78d7bdf3ec20da19408a02a642b0f62b73b878ab47d609b4cc070263c65041ce0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000009

Filesize
91KB

MD5
c5936af48840743593317fbbad8b1578

SHA1
ed256f90d1d3805d9032bf55a25f2f951f9af027

SHA256
d0c207f099024e77db1b69d2fb99c63e8e731f3c731517f1241c0415209010c7

SHA512
9940e4ce73ff108f2d757c25ec30ac32dec39d16e708005c0e93508b8fb26074961086f28408661cf2568b79e0c56bc1fd67421bf706ead919b8f90854b40121

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000a

Filesize
82KB

MD5
48019141bf74a45b29964cc0bef4be3d

SHA1
3257fe8e20548955d23bef24e87a610a71410a64

SHA256
53625ab15c7b5f431896ec61ab7d936254640821815c36138288b117e74c8c53

SHA512
8db40d306b8970167b3a64e7b61702d5eae70025ec639040ea66acef6d0102d7ed79a7470952d3a9c025f6ef65a7e2ace72f50969fc2b53116d56b8c96b2602e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000b

Filesize
28KB

MD5
46b151bbc5a21cf5633cdd813837ab8e

SHA1
fd262fd696c4f34525514007248b575679d490de

SHA256
68bbe068d137224d5bc3a3f2c1e9c1ed7445e9215aee65ead180e9565b86658f

SHA512
c1a3a1f73db2cb7377b4b534d73db6215def50fc2ef325670d042352d995b438263a557d76533803c7c10ea9c90a6dc6dc0114dea7ce8ec1731856bf7189637d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000d

Filesize
30KB

MD5
c441f3c0f761c12fb9f85aaa01ff0fe5

SHA1
43fc31805b950f5739c272551eca4bf19a275351

SHA256
01424aee401f9f3c2ce3fa42512a1cab9ead5655373aec8599ff9336974bd7d4

SHA512
b9cb7a8ac810d0f3dfb368bb168ca6b422afc8d520fc0a01572a39c0c0fca92f104dd4db684eac5ef845f471008cb75e2de8ae98ca78fe30e21adabd77816fcf

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000e

Filesize
40KB

MD5
bf9a21529ec32ee19db12a8fb9acb20f

SHA1
7be7da345128c7ed460a52e9dc308f988dd3c7a9

SHA256
614755d35bd049be15fc37ccb5eb016f4ee721060d5d615efba1808f9a916d44

SHA512
0b90bfc3efa44fb74eb13bc06784dee19bf810539cac478e890e5941dbbd1c273090f6aadc2b8637c6a0157955e4817a0aa6182dee385ea07e8fdcf469a8f7ab

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000010

Filesize
39KB

MD5
59afbef85deb00838030dbe835777115

SHA1
49a3820371e870b4dc239ae48a72aa513e71c632

SHA256
4ba9577d60c96d96c70d778e1ecb983b3ec8fd5a998b4a7eeaf68702e276a761

SHA512
424e09d48cdb3550aa4165ed4958876496c9cc65e67f849e35e02e91a4787d1a49f7e2fd7fe8e68c49cef6b1e6fbeeadeb02162d7f233d1e2427f183a742ac2d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000017

Filesize
65KB

MD5
82bc745ffacf1e9dcef01ff7e6114521

SHA1
e759cfe7308e9586d4037532615a41efc8bcadab

SHA256
f397ae70ed588d52332eb9e28c554f8f99d935e9ccad6cb34bc4ad5825cf3fcd

SHA512
df0ed95fc2a3ce8fe648ec3010b3bd87f1d0c54bf5ebc98c34a94888c8762aa052c52bb2f1aea81b99ce1f195a7df1e95a01396e860bd9f7ed76a7704a6ad57e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000018

Filesize
42KB

MD5
c3810004c7ec2d5f40a1da201aec6fe9

SHA1
3c33ada8b7e25b61e56dbc61a7872bc53c485210

SHA256
bafd5ad035f0eefe6369e57d9abc71e47cbb270d7a70fd0260f1486f0a38e708

SHA512
48cbffffeeadbe255db88d01ab8c15f2601b3ffc91016242bc8f7c54b31495124fe53a98a3e688a9195268f4455a1e840eb0fe2cebcf5087d046b23cbefa5e5c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000019

Filesize
33KB

MD5
1e824fdb767c91d45fef6941c011ba26

SHA1
68bf6dc6ded971a948fd5d30a3df7b7d41610186

SHA256
8baac37a486532f8b9cd20c52a7e2f1be11129516422aea19ed4647c7aef7e72

SHA512
674a4f44ffd4b55c0f4250fb6a1126b9d2706ecc59ad57d9ff3964ad39b6af0fd16b60a977d17a1f2f7febfe701863c25fe1fca9e2e4329e8f1d443f2c6a161b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001a

Filesize
178KB

MD5
f89da9ee06f9a9299850db9fe76f4a9b

SHA1
5741e0ed0ca65fdfcae0cc31d17cff2a953515d7

SHA256
2b7a91b3bb8e6fd97c668318eed067bd89d5f4a027d6e21a699cac311cc2c0de

SHA512
4f8b418ab7b72de691b74b37ae36956619161c56cf44e159e3abd358177f8cd8902d4aa20344f4fad3fbdee5e30abac2b70fd07d012878bf62e1f03bdadbe078

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001c

Filesize
164KB

MD5
fb8c361873ab7d45fbf7498a5aa57a60

SHA1
b0859ffa3bb60a68de88c8f04e780f4f4c33d6b8

SHA256
2ce9110f1235e5cf007588604497b02afe9dc9d487e536a4fe2a35e44cd160a8

SHA512
37968446723ab45f5c3a914f40aa5af8ef0cc7f21bf672390791467c0f3d3dfcb1a8f9a27f3fb4e64acca144a688d6fbc61e5a69fd8d12493502823beb804593

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000020

Filesize
64KB

MD5
3488659b0bfbea0fd873c45d690bf562

SHA1
ff0aa12d22cb32e23e416c03410944b3854ba8b8

SHA256
88cc581f6e6b74011a2b01ed62ff84288cbe8bbd199a0f5a1e89b9162643094f

SHA512
1ed4cacb7547ca72f3dddac11cc4cc014afb364935a7b0ee8f892df9a8bf659ccd402ecaa92ffb6704d60e13cc2b81558148c7a2c1a37074b667c83ea7725a10

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000022

Filesize
28KB

MD5
1b8e5496aca8acfc597832f2aee42ec5

SHA1
9f8308fd46ec50e4de5419428107c5703ad36995

SHA256
7c3b99a73f295ce216cd7d8143af310fe64cd0a6d6f60caaa7c7c4c97442bdad

SHA512
f84492cf9efb9889e3578b0977d494367ca9bc9bddb0aaebdab5285850c59bbe918145abfa16a9725f4f47d5cd7c31dfefe98156e698a4a409288d5ae3e34621

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00002a

Filesize
244KB

MD5
766304e17715e000e612ac472ec7fb54

SHA1
0e8448d4b51cbb7e4efec3158c1d29380c8499ab

SHA256
51aed6ec5d7b61e43be474701b1e485e8a1f12ce7aa99adb652dadfcccd81073

SHA512
55f127668dadc02b3f0919a5bd239df12e1abdda3c38bc881fbda9207f2a63e2465d5d10299cb51cc63eec364a93d307059869663864397d6d510b4f227c3792

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index

Filesize
888B

MD5
55925e0ad757e016841aaa6cb6ca3d51

SHA1
56d8b3bf58949593a86281764162f44ee2199af9

SHA256
d753f7bb1a63d42474dd7caab84fa306b8fe15622c52da8668b36e498f9a661d

SHA512
fd8ab3a9af5de5374c92cda03ee8cc976e0257356f09af651cc88ad5194e05f74d7f1bdc2e03403c33fc16c30f85b27ca76da55be72f23edb71d667e0ebbab3c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
1KB

MD5
82e8dd5ef0dcf15e7fff635294b6a394

SHA1
90da31c3787c8d2d3cce23d4de5c5062250a7ea5

SHA256
0214a033d256d3aed3e8e16ddf2203d704aa05c14ba93b626a8f9bf56289d0e3

SHA512
056daba446173b5ccf50f11667acf2ce05990cae16a0dc95c2356361d5f10ddf63bac2d5be75cb4029bb67492360bada332a7d101157570270670ecd508f5e0b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
1KB

MD5
648fa79030a6e289029201e08d0d73c8

SHA1
aa6c0c508d2fae75a8a2b07ab6a4322add1d1a45

SHA256
3dc020e6387614c48c58c2dab158663d892690150b987c353932fb96e80d8b3c

SHA512
78b20015c2db989ee5a46b5340c5aa3a72838702fdc31f7863d63eae6d7ecd5147209822af9adf826b156f0887272a1fa02d6401d6675bb21f2490bd1a5bc3e7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
264B

MD5
dfe5b023c33736ad224128f2d6f35378

SHA1
bc35533af7a6baed534a1d7266f09bb38e24f480

SHA256
64c2c8182acd37d530e71827ba20cbaac5951af5f429b59f7ece77b74a8ecb7b

SHA512
50529849b24d1e9147003e0b5887e5372c11e1286c4b98850f6fa24af66ea40449a90dfaf8241fe202908b68317135cb44553a3e296377cf24d8e8cedb716721

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
768B

MD5
720d5246ff20a485e348611a0f1d28bf

SHA1
5b853517ece8aa6d06d754abc76a4ff0ca4b669a

SHA256
d81f690b6a1a840635ae3e08871ebd0593b3e639d28db241c8afc69f8d82497d

SHA512
e28ee9fbd3898f8bd9e6b8784d498b1b242ca885277c2729fed043b167fa3d3818caddc933ec3597e439c567f7d42f954b074509567ba396aa15458c65d8bffb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
936B

MD5
7524fc88bd99d10accdc7242fd2f4b50

SHA1
423208167959ae24938316e18589ff4836528846

SHA256
c48e0b1e5a1510230d29da23366e20517d3708f372ecfc5e08cbcafba8324e75

SHA512
d65096a125668805759d08b8dad37417cef1dc09c5fa3fd386b1b48fd7fd6025024c1c610f0e457599dd82e1ea911c45a60f34d1c0766345ce8bd01302195110

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
936B

MD5
56ba74d5e1a9fa404a4aa8ef666b4a2b

SHA1
ae40e337b3aad6f2fe0ce1cb8b7608694be78738

SHA256
603e00849a8e5dcd9d1a322e1375867bdf1898fc7804eec4936af0bb005c1dc2

SHA512
8048638f673cf553197f8906ef89db2d6cacedd141b07fa5386e44184ad873653d51c7da8878d90fd61131927eabec368e1485e63ab9f4c18041aee51f504b25

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
936B

MD5
399e9bb162a5a8a4cf407dab22e3e230

SHA1
e08dde50d0a22737382d96d9b8392cd237e66b6f

SHA256
904e1bc74c6f21864a4d43dc6ba9be43fd4b0864e9eceed2aca138b872c1f734

SHA512
d0dc39fc6532a05fe5ba4858cd9ec1810897e7b5e4f66da48061598860ed8822cbdbcc63771ca7ef510e47abd9dae6d8f57c75642bb9e4d756cbcbb5eadcf179

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
120B

MD5
021034b13a168673353acdc7f5294485

SHA1
d603bd6caf9007ed9e984b675db4b11e0ae9a812

SHA256
416cdd713061324fb6f9c8bceba4f8a7f85108926292ea32e82da4fd17edceef

SHA512
4954d1eb7ab9e25954e340866f4104220c888b18c7c1a74581b8a1a7a820642c077c723e659ecd72aeb807c9578aa02b0dea728ba14a8ad5e6292ba4214c1d17

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_apps.microsoft.com_0.indexeddb.leveldb\MANIFEST-000001

Filesize
23B

MD5
3fd11ff447c1ee23538dc4d9724427a3

SHA1
1335e6f71cc4e3cf7025233523b4760f8893e9c9

SHA256
720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed

SHA512
10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
258B

MD5
2c611a5e0570b35e3a86dbfb8a943254

SHA1
831b31fcc2ede459f33bffe011b16da64b593355

SHA256
ff8900bdf7180809bc7a96e48d2b2144cebc5b7a07bf28fba808d5f14a40d993

SHA512
cf36a01f8959acb6a74db5510717c12c9b17f67620a261590164c0e7b59e1dfc0602d05de4e80cd1a543829b7e01e863c54eec6a7f49acab7a707c085848254b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
854B

MD5
18d619ff39facc80af4fc4f3d92e54b7

SHA1
fcb5c6a1372e45aa46fddf236d4bfa10709f31bf

SHA256
11020427a2f974518144f6339bfaa5163a54257fc2a7848fc8cfcd305e4c2b25

SHA512
d4bd918646a1e41db4f781fcd7801df0fe82290dd81f5c5fcac436bf3622ebcdef5f3395b7577add699d7eb13e3b5b0d9e2045a5935542101abec06d7641cf04

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
717B

MD5
7804549a8455c2bab6971c9236f2fa17

SHA1
4523449288511c875772f9c23d515e425e3c7be3

SHA256
95817faf3e600b7466a1bf33e88a671ce70cfd6c2823c3c2aa530f28ed4e423b

SHA512
db54a8497a5b833338e669b99a07cb51656a5caa0e625c5ab7f9cfa294b7b16e4d5b52430c91057cca2e70ed1a8f1175cf2be70beb546643ed52c3bdfebe1ac0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
3KB

MD5
20a02e54bfee4d41abb78f610d578d58

SHA1
047ffd50ca575b52086f3bed722d1e2511d82a29

SHA256
cbbb880bbfe4b37ec8784f082f38c28f879813e945b0486e54514e5937d2097d

SHA512
983c00f09e41fdebedcbd8337116b059597fcdab3064695c9c8888ce38264cff1a4c04c58c277be8cbc2d068d54009006493c147cf6e1b66fcc42d1b12e8d23b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
45270f00406e795ff637a69e090f79af

SHA1
5549299282c6188f82ad0dd0dbbf5c5cab753de2

SHA256
feeebf2d43080b16e87c15d10aea4b3c2d2d5137d9ee6af8b3f9b214ac44cd42

SHA512
5fdba2ab5b02f1dcfba22b77f0e7ff577fbff79619f8746c91b58e983563b9d973e87ff366fd9a49ea545b523a6fe030b4164668794240f8d67a45b039d70986

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
92af86ca6d9f65d582e4ae10a7058c92

SHA1
3270d135e69b01431ab5cd41085da94a29291555

SHA256
2a41ffa55bdbd753b3ac52b8ee7d92459e80baac2bff84b38e6000ce3c94b5c1

SHA512
e1aa5409660570a35f65ccc3edbccc54a1b126cd94be5e8cabd7b014b9e89e5fa312254324b5df0438fec6b4d07961dfad4e0d54e49c80d8228822cf5fc6cbc8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
37f99b009e8e8e37f5fcdb11a417c7ad

SHA1
4269de66c863642311f93b81e0027eb0a4ef9934

SHA256
9fbd40c8920306618d995c9fcdc1d45bc697449a23a2f85804dc6df4707550b5

SHA512
1d64a34f140b61d74c74341a7e7ae649a6ee31a717206d6d841ec5e34a53008bdc3360cd5ff6dac47d15eddf963da00fd6df8b4949892df8d2a30d3e4901618d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
2af02cfbc9cf2089251a24759159f650

SHA1
69fd9a59ae7c2e37a4373fddd2c2441a12a20036

SHA256
9570fd3f26d0216472f9e1cd736ee25994a8ceda37bb4129b8e897a4cc8b128d

SHA512
246b33971677f347d5a520b0428d5e1e84014ec2d7131c6aa0df3dcc3f51a45be895a23a252fb20926d9e43b8a0c32d9e143592ece34ee69df9c9444f553d385

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
58a30376ce54360af9920125d907b90b

SHA1
174f84b58c4edb2fb74684aab02aca70dc5e18a5

SHA256
9710cd394af1ed8a15a974f82de00817408acccd7f65afebc397e5aed2f08c6c

SHA512
24106376b42a82f7d0e0d4659b165a620322391a4252b7b213e808ce65fc0e97f6816b5a1bfa9e89da06915b9add1f80eaf1e5869890a693e2163ae75cfb074d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
9KB

MD5
a46782e7f3941edd0ba80b54af104dd4

SHA1
45a25db998d9345ea37e41d098d8469d614926de

SHA256
44fa8f7135879ff8af99c0c247b6132a1004a8be72d4618457b55df26fa4ef59

SHA512
be4adcadc6dee66af7c76bd25dd799403523968d875c7b9c08dc85df388585de774059f7c9d4e1916037f02ed0d8037323a1f6fa2136d70f74369a75bcfcebd7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
9KB

MD5
cc30bd1d523c393169426896c5563d68

SHA1
62798ae91a62a2483e36bc9cfe184290f7e6ee42

SHA256
b6fde584af959bcb8d640af3253d6f5066d6e87b9f9ead7aa606ab4c42070431

SHA512
1b99dfa8666ccf33f8930c13a0cb2d5cfb13a76a12195940042bd88e03ceff482f42e79808cb1f7f9e442fda94dd553eefc8b6bd7fab2bf3409133ce63630974

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
9KB

MD5
bb848ccbed63676c96184848cd386786

SHA1
8b93c5e865fcf0ae4e52695982ca7df479c1b7b3

SHA256
7c23ab5d466b89deb27ab2174e1489dd389ecfac678c1f53e8699487d82c08a0

SHA512
0d6b5954d5a117b0be82cd90ceeacf5eff37aa79c57ec44cd563fc653fd61fcf6198c016fbc107b46cb718cb5d10ff46842786abbf0f2956c299cf429b9750e1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
9fd102ddae6179d856730ba4c11d6f7e

SHA1
efe156c60d71f29a9092b42f25d15d02a98f8793

SHA256
c9f2a3aea564c2596e7d90015b151f0466c2feec51efcb6622f2c188846ffa7d

SHA512
3e5de4a6b7d41db6c4d7958d5dbcb71150f2409b35778032ae7280e63790846c799888826a3d5ad36bb5b38e0cc3d9b6e21cdce268badd15f96b19de2061982b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
aaafdc955e495f7db513c29e2aa29bd3

SHA1
3142801b46b26812f1e30834bdda966e9a794095

SHA256
689d22533585447ddf061fcf7ac3d09966fcbc00b818c7b07d259b449af31187

SHA512
402f3e1c9d778f23c12151a8d7d6347ac27993102ab55fbd73be48866e3505b7dea6ff3ecde55499d2fcdc62ae107a7a230e3851af96cbf2042c5e20c28f3ffc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
63bc2ce80d61bfe129ecd637a74fb45f

SHA1
a8802caf8bd0623202520836c1e683084b2a0445

SHA256
f26ded6b91cfc17fbba9641fe5668780ac9921a48ec7e0609b18b97a98c33cf9

SHA512
f075bcc8ba5367a1e98cc520fe3ad9c494a32dfe432d439d09b2da686a18b7f90ca1ddc08ac9b26e41bc9438b7b89b505abaf69eda55848494745c7267ca7e99

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
ba43d977f23c7680b73f0c46124b982a

SHA1
db29d20ed47849c8fa4716f94126e1c34b8f2db7

SHA256
994fb1268991554f6420c7d96a08f8d992d7e6266eb2a1f4dda0d3746a2a5c91

SHA512
25dbe1ba13f5a3e7e08553e0f4d3dbed9a84038e1eb4268fed90389528fef0bb0122f8b4982711def0e689a1f548134312d39d2ab4a4955b02c219eedfac081b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
7674f13d788ed64d59c659604b88f2ec

SHA1
6cdd7c2a39270fa19aa5cbd2d839e798591a4523

SHA256
5a6e5e46c88907798ce9e2b58267270f6d843a6fe7ec0f8d05cf44a842a489c5

SHA512
8850e674c385285bf69764fef81e3100a0ef287f6c29d3cc950da684a17a39aecc89929986c3bbf420249dd8f77763c8d429d13964a0844092026f3d3971988d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
8KB

MD5
dc267cf11373e3ea82ecdd74c24585ed

SHA1
82cf6dbb239f3c9be7b248085de708c4141d3224

SHA256
5653d2d3551f2a3069b4ac67d07db98ab3cda6914b87c3ba2cf9e770831d3853

SHA512
06bac34eca48cdc3f88886a6420a45018d0e6b8aa15d113630e1f1212427ca007cc85bcebd103299b5bcb2a24e097bab69f9f79218a073e725841cb52a5d86ac

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
91a8ed5c052f4a2747c3dab2606768c1

SHA1
808e6c70b279344b4b708db1b4800ede3e574e4a

SHA256
32a2c3a0bc0cd29ba48eb153bcc6e2f42e312974698036cda61691ae4b6a39b7

SHA512
c8e9ccf49f0f22cbc0f4713964e1160c94e2ac4f7637c6098c7fa8bc44d100150768ff5dbb3b395d1b3072f7ceced1f32c719924607551b52902a56bb05b9ecf

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
9KB

MD5
92dbb7c444370496fa028ad4b970ab16

SHA1
aa9f08c1d45dfc198d71c49163d1c66506257208

SHA256
0b2665cf191269ca703d71be514ca1e15ef3357f33a00d6865cd86f6c7c11ec0

SHA512
df78cfede4f53e169616662fcd82cf57feab29975104a79eecac1d9e78fa194a4fcf24fb5e6823548a69e4809139a743fb80a54e9ac50e6c72ba5a66f9e9ce60

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
f766f840f4eb5078e750783d618af513

SHA1
56ac579eac8c971cdc4731aaaf857edd8ef5b0d0

SHA256
0a8e165750c58ec39e73f9564ac25f2bf32b2b3c1ed30613b5749fd68bed8f4d

SHA512
1582841bc3452c10e51b96ad4bbb432dcfb40bc860f128ec8dffd394b2a08649a263dab7a8793eeb54b9142c62485191e86dec606651ff706d0949b1433f23e9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
8KB

MD5
7e3283224422178505bbe21ea58d0a8a

SHA1
c6db4fb24e84d7638cf27d32a9c1ee7b24bef75b

SHA256
3a8713fb2260e45da618a8c04d64102f0f4b26b30c6acd8271da4c9b0b4e0218

SHA512
b5df1e51bb768ba8ac7df327b4c098afc97a1fa983bcd58ed99c94d00382599831690eed52d5b1ce401b4ec067a4d9da9a2744bc6c879147dd42e4436d2baa4e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
661c0c313cd8af0be994bf9fed034603

SHA1
b3ed6801108e6a53fcae032c79af9381004c83c7

SHA256
a0844eab75e4e6e21a8f902af62795a515678d58ed7eddd10b3e408ec8907762

SHA512
cf1ee23bc26435b4bc2d16fee8a21b16d394745e81d0609d998c4e3919d394c013593b74677923abb910b8f7988cef87003da42cf775f667859e32b8a25756bb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\25faa82f-dd9c-48c7-a627-ace871cb93d2\index

Filesize
24B

MD5
54cb446f628b2ea4a5bce5769910512e

SHA1
c27ca848427fe87f5cf4d0e0e3cd57151b0d820d

SHA256
fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d

SHA512
8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\25faa82f-dd9c-48c7-a627-ace871cb93d2\index-dir\the-real-index

Filesize
72B

MD5
03c9db83a3a137602713a1ee9b0ba45b

SHA1
a0e15364dcf0e8ba4a08c6c780f0f2d87844ab3a

SHA256
2cfa55a7adab2bb9b8e4d5f0e48cb7c66abd3d1eefec3d560161fcaf5004ffd2

SHA512
17ea065ddb9e6d2f50bfa96c29afa1a5b9bdc0e8a44cbb12b515c471f64cbb23e2cb46f44b8e32faf2f683c901f2a13f7cc3312a1420088caac5c29bcd674c53

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\25faa82f-dd9c-48c7-a627-ace871cb93d2\index-dir\the-real-index~RFe592e1b.TMP

Filesize
48B

MD5
0d4f62563188c92157d268f886029780

SHA1
01eb28f6ab5dde7459a41e1dcd92e479b24e75f2

SHA256
4f1e0c45d159f5b1bf9b389fb097c25843b8388985b3d1e0750212d7bd39801e

SHA512
8d3712a25c5febd0d166529e0ce7e10314a4aa7a6151d65f076c6c42b29cd5fbc473e28b245e85433ca2fbc64b6adce0aebeb586ee6cad555992b9b5f39a00d8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\2d6dbb3d-07f7-4277-9c32-46125bbe3073\index-dir\the-real-index

Filesize
120B

MD5
9fb08e9405081b45bbca5928a5f8c56c

SHA1
f7d7ab839bb4529f025c4a7f748a745f094317cf

SHA256
b69b5ebee409700d5304212ef3d353f0161b10206d27fd0c9e6b73c53b3ca5ae

SHA512
701412ac820bd7b913a937e8d58a3c955bbf4757146e266b28712ce8d8b57cb7ceeee6e18ec6b88ddcf4d2b7ec0397da73016cf65be494c0aa38ed58351fe0f8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\2d6dbb3d-07f7-4277-9c32-46125bbe3073\index-dir\the-real-index~RFe5948b7.TMP

Filesize
48B

MD5
e6e03e8de1a7484e38c407e59704fe94

SHA1
c39e77336ca1473f05a61c5fad5e68467096986a

SHA256
b500243670ded0349e37b806adeb1bdc42f5320bfecfe2a585c2c1ac3fd5be79

SHA512
b901963cb9b874343a866bdcfe61c1eed26362f105219a24b946b00b1fd163465ec18668206171e3cf351c23a2e34e1946f1d0a8f5b17c496080c7a4640f1fec

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\4db921a0-6344-442b-b6ba-6d613f80756e\index-dir\the-real-index

Filesize
96B

MD5
c3af7d10a8da832c0af13585980196c0

SHA1
67a53ffe9480b7fed4ee3e4a3adcddea9237387d

SHA256
b1c71545c59e75cecdbbd0ea09f2c8d11d26bbef4550a7662f0324b37630ab7a

SHA512
671df09275f5af672a88995c974a2f999e0d1fc437185ea93f6fa67f6b6d7c86bd6e79e9f75da6e8c24997b1605393d9268f51874e85f2b56ee6d5173427c492

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\4db921a0-6344-442b-b6ba-6d613f80756e\index-dir\the-real-index~RFe594869.TMP

Filesize
48B

MD5
f827d928d19a31d9a880466db4043e6d

SHA1
14fd9295f8d53b1a9039d144ec4fecc7ad626226

SHA256
21fca0605bfedfe753b6fe15e12816a26edf053a2d2aaf6ccfa14d3434ff7adf

SHA512
598280fcb6bd250f48181cd69640a17b57c209aef9e9e1d9ed215239d0756aa2dd169ef07a237c5ed60dc22193a1d715ef99dc9a42add3e2304e4009aeb73a73

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\dca53c0d-b765-4a76-80c6-d1a3a2b9b018\d93c1631d0550dec_0

Filesize
671KB

MD5
a44c1d50288131fe94b7ef72a9867434

SHA1
b96b7c4872cc0dec1edcca8fd6e7c4d7692627df

SHA256
5d9a2c726caee1f6041c4e6cb2e259ef2ed95b04f86509b2ce964456925da6c6

SHA512
1b4447dbbaebe0df0b288a3ab511df71699b705cc7860e33a0324830b1b8f94f4c255402d1551db7b05256da27a2fc7ce09e4713faa0d6d3dcfffda4719438ac

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\dca53c0d-b765-4a76-80c6-d1a3a2b9b018\index-dir\the-real-index

Filesize
1KB

MD5
6080b0536bf5cdfd7893f41f752fbf22

SHA1
6975c543b713b9bfa83911dc4d44608fcac47359

SHA256
37e6d3d2fe388d0b158e30cdf02e38b7b70e5157df1fa4c70fe6622977aa49e4

SHA512
8a7556509c9e069a278f3fa7f4b1eed901fe15c092a93f635cb33b1501ec98a10c82f5ce33873659079fc53b37efb971d63388ea4515c335b71395c2eaceea64

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\dca53c0d-b765-4a76-80c6-d1a3a2b9b018\index-dir\the-real-index~RFe5947fc.TMP

Filesize
48B

MD5
8d464a78267640cfe4cdf25447be32e7

SHA1
5ede85a02fe2eff4cec51165d5852b3d52a56bb4

SHA256
4e2fec0a35864af4db61686db439696991de82ff981dac30bd5530aec567ea12

SHA512
bef8d134d392b34f3b0d9a8aa8613016f820b5eed995792440be4289cbeca735deab6b66414315a4b09b3f0e52f3b03f547d9043f7a849949c43e2e25a36a156

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\index.txt

Filesize
109B

MD5
71b67a18513681c4e0e9440102c97b60

SHA1
eb1d071bfa026fa67fc878e41eab8c2fd7d911c5

SHA256
45012a297c2e7dead84688f09487306906f50b23a377cef26f1b8dac4b789634

SHA512
f82e159322f6bf047dce306719d7078958d65ecec25bb6a56b4fae63cd66a1a2dad33c573eab1d30cfad88fc58285cc52a338b3281908bf72c5cebf76a1ec124

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\index.txt

Filesize
204B

MD5
053792ed343591f8d9a9fba8768f79eb

SHA1
6a85ee2f14e4c8557951d898d9b3799e146a8b92

SHA256
8df594bc642970aa9193924ae9bb77b4b0d734de8f53a48c85b5a004368a59ff

SHA512
429a885151accbd63ecbe6848fdbaca3e07328245db5342578076d1f0eee1de37bb4931b8d20ae610cf603384fef248c5415a3eca6ea07a5da7c7d0bbf009337

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\index.txt

Filesize
262B

MD5
21bdf1b437337d5e4ccb2a2c2d477cba

SHA1
02dd04d6c9566126b2cff234cd4c75ed45fed64a

SHA256
f6136b4a3523a646ed6fcbf74de1f04add51f36d24f141f5f6f810f5d2d90101

SHA512
2fd52d2bd77ea291e1ff52d0180980cc071c9777d482d5e3aa2667c41ae21cb4c84f2b48a333d66bbdbcc8eacf001330961b0caffb3eddcb308fe084dc6545cb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\index.txt

Filesize
331B

MD5
0869ccd0579610ea491b13184ca7c445

SHA1
b5e147ed3a8f3bf052a4a7601347a0cad75072f0

SHA256
9babd591108cfb34d4d25940b280d42b9f1c9a7a00ff4390bf0d12ae3e5c62a6

SHA512
76f27f72fa4070c3731fc60b145a7ea4027e11c413e1e9be1c87d8c86bdd16b5a0f8563ea7263c60c82c5b407289292a5e715b311aae9fd70c206f9b3bad59a0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\index.txt

Filesize
329B

MD5
99e2b6b8a99f098edf4e95a52fd10ae9

SHA1
eb1460e54708cf0745114caa0b8ebdcdb6fb3aae

SHA256
cbfa9767a65aa1bbc9828e11332bb10738a5e06ec4bb13488ddb1cb2a90cf6cd

SHA512
2b40f201eaeae5212f4f8707727436215ab31bebbe6b09202e4efe37ce56c1cc3472f304caf596d88b911df2f8b80c80016e8f74cfed6620e88a09bf9a79ee85

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\MANIFEST-000001

Filesize
41B

MD5
5af87dfd673ba2115e2fcf5cfdb727ab

SHA1
d5b5bbf396dc291274584ef71f444f420b6056f1

SHA256
f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4

SHA512
de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\2cc80dabc69f58b6_0

Filesize
75KB

MD5
2977f3a199ed6d033984365203a33afe

SHA1
275e4c74b1aa82246cf1775c763eb09723459f9f

SHA256
e8a735f4455b73f8278b66c34925447e941fa36e175fa69ff6be7790f75c893e

SHA512
2e8fdf48c4f60959b9cd8335f3c20dce5e36d210d4ca8256b5f0f5a13cde3410834f48d0e855c3ab21d09b06f358659f72d3dcb1f8514ef6ed6f18fa2c1294f1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\2cc80dabc69f58b6_1

Filesize
82KB

MD5
b6e34ac89ca98cf38f4ff9ade168ad5c

SHA1
4a7b6a5aff880fcc478e732368dc3aaeca5bbff3

SHA256
151c3d855bd1ecb97324b2428428d5c5407461be98e4e75122be95480d094556

SHA512
62bf96035cd6f0adb619fdb98b864cb1a95950680ff6da87ccf468c1b9224b9126b77bda8c3c9d0533eef73799078e991f383b38aaea04c9e8a544c988d54696

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

Filesize
72B

MD5
d30cc2c50376e503c62bc50196dec20c

SHA1
d3e13c59d7cdb5ecc04a311e2d129b4057e71329

SHA256
99620cd2d71a511b2e155f02d860f6d91d1ce10293f42d20f9e720966cd80ac3

SHA512
a892a31c2760be3437a30a235ccc7e906b296835e35ac42a1dc208ddf98d5255b8c24c8ccf683b5f8f43da4e40f29aa0a0cccbf0e3267ea5c9bf0a7498e81644

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe592dcd.TMP

Filesize
48B

MD5
e7d1145b2674513fb645c0924dedf15a

SHA1
f37cf330c889bf90fab46f2fe977b857524729f8

SHA256
73598a11a7eeecf1be891af376ad9603bd91ee16fd741a2999c2ff07bebaef11

SHA512
ae62b4edfe4020bb09bcf7d2f4f2f5d4b805c333f80557991944fb97f274b1c3c75b016525649cf93def5ce8c0548478f33e90fa18c7a41358aeb0e7b89d1fb1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
1a206410c428e75f1738fa8259bda498

SHA1
a92c8a456601dbd3bc5e32a6f40707faeb0424dc

SHA256
c7c10eb320ef950705178116c42a431b3b09cc1d7903f015f254b15f5408b99a

SHA512
84c9bec3994c00150c86b3d5fe50251b37d733d4c489cce63a1818366e07f5e003ef21c6c60631e550c2e6f69c1e9d6606f403790a703e95c82a325cf6892bdb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
705B

MD5
0aa04a10dc11db448b889efa446a2531

SHA1
c56f2ce24ab1ec6482b6b050da66eb8c79464c62

SHA256
889f4a20088016fc51eaaed10d74dc84f46e43f74c21f27999574bfd6cdac44c

SHA512
f806a03cd52282fa63116eac070d6dbc9d4baca9e9e6dd0f31bd94a6b2fbe8c6daca97468743b1aba3efb78efa930dd788937a571dd442ce294a5facacbf4dfd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
6530ed0671d78bf43a4524abd193f0c8

SHA1
541f4c347674aa7a898318b856fc245298b4cf65

SHA256
8b1708f2064b981d15d67ff2e126e91c1747e78a44de57ca559c63120741072d

SHA512
9257c9bacc61eb264976eaba394379b15125698aef09019bc6b7bc140657bdbbf1f7b8a4619819c4a14ecf394ea0fa5f41f54b9f2e1cdde2d538ffce0f1a2cae

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
64ba21887bb7065e14aeebea96687856

SHA1
2b4d57ef215c5cb74e89e63bde5200db928c172a

SHA256
5ffc2d57bb0ca50afdcba23d6248ff6931c1fcdb9427a0d3b3b1fd12733da16c

SHA512
926719e1fe9ea7870f0f8321fb1fba22d1f41f7e33e3d8775c442b52f7e914ea127e035e1ba4e264bcc0d55b8844e5b76ca221a9bce682c9490dd0f4b15284a8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
732ad4e29277b64b07c87ffbee8e89a5

SHA1
32d8f93d7e85c0bf87d4190dcbacd7c8a726a34f

SHA256
c03fb6bb3fdefc94cb61b5c3af676b52a3eeb1cd9259f6fd69c1d28bb5e96942

SHA512
c257f20bcf1c289086ae536773435a1684f25a7138c280019dfc32689a20139999352a81974ae6d0bad983983e4da5bf21f53969681be54179797d089b0eaa8c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
872B

MD5
76cab45381726baa8cde26679561c4a7

SHA1
3b13247fc085147d74ce0f70354b719f41fbb2e9

SHA256
9a6dec306a0b04b5bcad3a42d144db32fb253a802e40988d9c761d7911e74467

SHA512
f23a233f24388bd3f09c021fddae305a1cbdb76e1bc58573855d6d80257918b441cac1260447122038e0b7a27bd5bcc4f4fae8c616ba19c6168a28a05ffbde09

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
f398460437f28de04439fc3421447c45

SHA1
2821b7f6eb6ccd6888ab26670d704af88aa49139

SHA256
d35fec0c14de10b45f5dfe82ec0f29538b0b5075b69de8478024e094e0a9b5d9

SHA512
451eba600465d409d4f4a5e57791fbff29ee10aa80a76f70d11b7fd6826cc2613fd7cc7752e24a379512307f58bf90bf71fa98b5f285e02fd82411c9d483bc93

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
705B

MD5
0a68bac215e96fd837d0600eb773db89

SHA1
2a6cd98f1299dcc0dc1de9df86ede961ae4daf07

SHA256
eb7a7868612a3b52be30d877c12f7e6d0c78dccf0ecb038f90c911a8e8be842b

SHA512
11ef8461495d179065337b09f2ae2383442ceb6f8489b0cd270a43cd5a97a6378139620ceca84d9917e5b909c41768ee86ae7799b72744bda01ee71c114d53f9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
869B

MD5
3efd8cdf293eee928ce055dbbe5e0d95

SHA1
71d016164f14ad83c35d45b813b04aa45462a84e

SHA256
282e651e791d0525d6f0e5c2c59b167ad6ae1945f910f4f29162873e570ab5e8

SHA512
f0db662bb7646fd9307889be4025dda52df8e5ac21822ec50cc35dc24d52cb4a0aae3897f3c47a5b0f5e2a43b949ae57a5c5bd9937cb8e0f3347d8c4295ff60c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
aefd77f47fb84fae5ea194496b44c67a

SHA1
dcfbb6a5b8d05662c4858664f81693bb7f803b82

SHA256
4166bf17b2da789b0d0cc5c74203041d98005f5d4ef88c27e8281e00148cd611

SHA512
b733d502138821948267a8b27401d7c0751e590e1298fda1428e663ccd02f55d0d2446ff4bc265bdcdc61f952d13c01524a5341bc86afc3c2cde1d8589b2e1c3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
589c49f8a8e18ec6998a7a30b4958ebc

SHA1
cd4e0e2a5cb1fd5099ff88daf4f48bdba566332e

SHA256
26d067dbb5e448b16f93a1bb22a2541beb7134b1b3e39903346d10b96022b6b8

SHA512
e73566a037838d1f7db7e9b728eba07db08e079de471baca7c8f863c7af7beb36221e9ff77e0a898ce86d4ef4c36f83fb3af9c35e342061b7a5442ca3b9024d2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version

Filesize
11B

MD5
b29bcf9cd0e55f93000b4bb265a9810b

SHA1
e662b8c98bd5eced29495dbe2a8f1930e3f714b8

SHA256
f53ab2877a33ef4dbde62f23f0cbfb572924a80a3921f47fc080d680107064b4

SHA512
e15f515e4177d38d6bb83a939a0a8f901ce64dffe45e635063161497d527fbddaf2b1261195fde90b72b4c3e64ac0a0500003faceffcc749471733c9e83eb011

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
6614188c2ddfbeb1d0f62304c91cc45e

SHA1
8c17a06cec7333e3ef24d34b83251ee971c7a1db

SHA256
65c9a5f0d9a666f1c76e6dfa86ca776c82ea2a8530f3858f98c75ab21b19360a

SHA512
16a6c453ca02d950e14a383d48a2250b95b80e920e1173086464d49730491adf21f784b4f388ab7044de8f65af845c27a9a46058bd1c1dba2309ca964863b8f0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
cf6070095f70d928a266b2947fa4b589

SHA1
38e704e3f547a0e8f9cc8d851599e7bbba79f709

SHA256
9dc64699b3882292a352b6aade82f9548c18340fe893dfb2e4d740e0bb86f72d

SHA512
5f1a485ad1246f3e302f41da6db7549ccbd041380f3b35384cb2492e476d91e88fdd93c063927550f75b3bdd884cd04a83947438f1bfdb34b17db0d3aca3c3f4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
2a3672ade1b9b34cfc1d5a0f44641ae9

SHA1
7d538e2db114acfad389f7f0eff40aac3c98f563

SHA256
73adc7b5b6ffe1e2c9ba6257d99070f17fc04b7f67adf022609c2e04775594b5

SHA512
4823628b17ab5aed5ed703049efdeca8a743d5b0ef73af9a003b30d0234b6df8d50ec238ed02868e08773ed7a67def9b999b83d15f4209df15563aeb163fe152

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
f79008b1e10862def535204627d88db8

SHA1
af987f3d3d2d45e8c4a33cb53e630690416d6ee1

SHA256
4a4445402bd8c9a1d32c8cb4bc19fdc8263b2af7da395485fde7587b6150491c

SHA512
ab4bee5178406548b805d042af778aa260921a6ae5fdc83d4e8b2820c9a42a7bbd23f98dcaeec986fe67aca755b20cc7693925d47d61621b934027e3f2f27bb0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
ac93c48a3cf43e976d2efcf61ab21ecb

SHA1
ca7327316104b5c66c71aa4610f27a67395a7c6f

SHA256
9d92f0a8db9c18767390b4c344cc6f5ed9ef76662aee3acfeb815f9f33a759df

SHA512
0ba85701b3ce7891db4f04e513928813bd95fcde9f89a97e1030a7db9a737ea1a833ebcb6b7c561c21c05f1b0e263820afb6bceef18e80de75703c19be17581b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
12dd9798925517e47479e481fdbd034d

SHA1
2c02bcb6a2903a1ea92e482b6863913d49feb6ec

SHA256
2b9b9e6ea8087bb48b220f5b3c8269029063e12b6cab071d2e01c4d0af6525ac

SHA512
b4c99622ce0c37000438d51447bb1db37c80cb1b8c465d6d2f56523c1f9ff31359292bc33cded96f4eb7aa410da4830720b047677083036322fdf6f2386111be

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
79f1738d847a6c75e6a33cb5803795fe

SHA1
032d39e2731e134f1850365eba59b32110df0cda

SHA256
9d16132e03cf52ed4936a748a0c157ada9d8965fbcc69ab1bdd3e15f25d7deb2

SHA512
d10080dc023bb7bab15ef7da6267f3d5348bef3d115155e6b186cc2cdfdd5e6d2d5f36af064f9226ea8db2f87cab4c7bd12c90eb69530d8d3ecd6046b58481e8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
f4f79b82436c1d2de92cc64db08ec919

SHA1
ce952bf5885fac5353298a77619b1bbda043ba20

SHA256
d20d90d25935979c7d5e705279851717ca9b33f26316ddffa3db6043c80304e4

SHA512
deb285b6274740954c2573feaa54cc3dd5fff317a8892542ad4fadaca86982f5708c786316283e57ba9cd04a21e533a52be1c5472def1f03dda41bb940771b3e

Download Submit
C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\PQ45N7WT\www.bing[1].xml

Filesize
327B

MD5
56903707cb86703e68db9c7841a9623b

SHA1
c0fef0960344585206cb597e3f1ad50bf05e6711

SHA256
7d22d7b9bba97752ab02e5925063965a94391128e58080308351c5fbb5fcb27e

SHA512
90e94d2ea22e20f70d262daa7541f16f043bb67db2cca7cfacaa90ce3eb461e8b7746941589104fea623ee117d6ed18729dc1c7e0be45a5837d807bd8a16634f

Download Submit
C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\PQ45N7WT\www.bing[1].xml

Filesize
17KB

MD5
e9599eaa43c304d5386645387f653b80

SHA1
8a99d069137c6361a1ac49b560d49c49321537f3

SHA256
4c596120fa593e59d9bf5945a9f1dc23cb0d86e6dd8bd1d6c8d407f1ad4980ec

SHA512
9e73e8e4b3db8e595c2ec3020c8dc5ff15b670bf8e2c000655333ac79d946f1e25824c7ee25976a9c37ea199c965aae6f6b592589c3c99d8c49125182d3c995c

Download Submit
C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\PQ45N7WT\www.bing[1].xml

Filesize
15KB

MD5
91800d3656b58dfcd5b2deb56501195e

SHA1
94a6ea6ce5146b7811439b4ade60b6a99d53ccda

SHA256
080b6f3b7448a500d3b38c2460005cc1dfb9a1f78fd388f554c2b98add94cb4c

SHA512
822a9942361b92599e1165794d1ea685b7394b09cf2cf3f5b787177a06fd8e5c60e29ca62b0241ae470fac2f9c6b8a692d02367be3b73fe04036be24febf0fc6

Download Submit
C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133765623342727015.txt

Filesize
70KB

MD5
7d05a4f78f6788a0891487d4e9ee5557

SHA1
ae144292884d61979a5f4240ddc25b3a7e863f54

SHA256
546f7dcff5873e1d657545cf46bd74c3abc4d1ce6589d889c34293bf48b1afa6

SHA512
8a6d0b049d6a8f9148db88f35d46ba3b15062ca2a34f12840ccd16f75e95319a77f2b810bfac3540413fb96f5480cf62dbc4462c8f401564be10a215377087e7

Download Submit
C:\Users\Admin\AppData\Local\Temp\NSFD4D7.tmp

Filesize
240B

MD5
d753f05546a08a941346ab73f3501101

SHA1
9b5bd8d61e242b62856a6dd01784dbb71e1adda5

SHA256
8181bb19f41d6ee859ce5318908383f4f5473ba9e8ba9e78cce59d1d43149417

SHA512
dc8a55765230e54e8e29412d4762bd478b5ad41c9f8d2ec2f99fd4be8fe417501101464272ce0d523ea5879c5660a83fc53ad922af8dc0539fe45f315970ac79

Download Submit
C:\Users\Admin\AppData\Local\Temp\NSFD4F8.tmp

Filesize
242B

MD5
cbce462a14af0d1602e2ac3d3a136547

SHA1
f4ae8cf1560ba5bc53433f15dec56f509860545c

SHA256
ab95c0e076590d081f7ae8442e384742e8bf0f95176353d2cab11b1b334d8968

SHA512
601b95e8eb74af3183e813c633289c8d81e3bf9fdc8ab382e8266abf8eff600a5407fd11f3e0aa68cfac468bd389ed8dee930eeb909c6e3380c87f82d8c76c71

Download Submit
C:\Users\Admin\AppData\Local\Temp\NSFD50A.tmp

Filesize
224B

MD5
2c7e1fcab74f2a6f026131078bd4c91c

SHA1
bdd7ad4fcb3e2f44dc33ce50d3474169dd257dd6

SHA256
3993708208c2b2f89c51a60c5b76dd80e0b9d83ddb9538b282da2a93e129c30d

SHA512
d5ba6db8d79e815043492d9cb34cd4b97b78af41de0772109b83fc1c2defd7239c57487df5e97f99892d7024872838c0dc8df9eade4f22915b449b0cef379c5c

Download Submit
C:\Users\Admin\AppData\Local\Temp\NSFD50C.tmp

Filesize
217B

MD5
2cd2867b10f4cc6263885dff866a1799

SHA1
feabddf3a3b41961b8de1399ebf54ea1f5975ee9

SHA256
ca418b15780722b9232552646fc0f16ca770b9e273c10722aee7a6c91107dd43

SHA512
8428e7aca0b3e2b0f77f307530a779ad55f088378530be0ba38867ccfa088ca4809ad37aa4c8331770d49e5905cf2777d62b3733a73f0599742ac4099ba37e43

Download Submit
C:\Users\Admin\AppData\Local\Temp\NSFD55E.tmp

Filesize
232B

MD5
0ef76434b098b8139335b37db4352355

SHA1
ea841a97ed5ad10ff84dd4b6729ac1a094c19be7

SHA256
34f2980eb8be7c2b262abef4b1052d5b2b52eea3cd3536c995e8d87d28d7807d

SHA512
afa2b2afcd016dd99f04789a6ccf4b3134ae513d11b590e4df7ad1fcae7a5b67fd91e05b69924bf08d1ca1a0fcb49639b3b3560a7ce3f3af3b29fd483ffafd67

Download Submit
C:\Users\Admin\AppData\Local\Temp\NSFD58F.tmp

Filesize
226B

MD5
1ffd51446097ed7a7a1768fbece60e64

SHA1
400034e9e9ecfc55a214f4cd58d0bcf373c99dcc

SHA256
513106c8eac4ac400a4b65536fd87bc53d9aa33ab9668607e9253cc46c01b11e

SHA512
c745d0cf02b2392b654fedd8c6e4e7a683416f7d1dd65d2e739071019af43050af7f4d89cbe67621f10c309fedbce8cfa0874f92c38b7ef49454cb29bc6acaab

Download Submit
C:\Users\Admin\AppData\Local\Temp\NSFD767.tmp

Filesize
231B

MD5
a5e199e6c7895a18f5ed85e687d80947

SHA1
ad35ce132e417dbc4ebd3cf506fcf4ac902a3271

SHA256
dee222ea5e6abfb530343cb991a7bc311891e85091b4b94092d0a0af9250a0bb

SHA512
e011f586ccb8ec79853109d8f7f24e87bc652852b527a744fb792bee3ab87db0e9d29beb65cbc9ed511a5ccba51d705cbac27781655446dd198dad90c83c2405

Download Submit
C:\Users\Admin\AppData\Local\Temp\NSFD769.tmp

Filesize
226B

MD5
5f791538b054257ff6f342d7fd616cc3

SHA1
1e834a42ded2aff40cbc60a066e85b53f724d15b

SHA256
efee34a4fabd7b0f7f792aa4b2c503d9de13aa2f3ce066f7feec8c7a50eb2e93

SHA512
e3727ec690a03db1e21e99d010fad18f0e0f91a389eb4b99311aa6a4f833c857e7118243f4192525f18ba34f90c94730fbb9ee5456b3ee7419a96a3c964ed200

Download Submit
C:\Users\Admin\AppData\Local\Temp\NSFD79C.tmp

Filesize
263B

MD5
3c8912aaed288088e40a3397a53d9183

SHA1
d6a89a8157524a06f5501e4864ee85bde2d28cf3

SHA256
0ff962b623d5b50f1d36300e5e41aacb6c590d847fe7fd7064d00a0e0ff68eff

SHA512
bccc89abd7a36fbd1450ecffae263d275e14c2b9b3b08171dd41d2814f0c91d1afea2d093dc05c77b3afb4b9112cb138cb318a8e2ceaad30080db55aebae9fd2

Download Submit
C:\Users\Admin\AppData\Local\Temp\NSFD964.tmp

Filesize
227B

MD5
c5c3c774f5799a932dd8ca5cfef631b9

SHA1
4eb7a96ab9cda6f3ed2136916a9d168a71cf289c

SHA256
5e830847d5e4101c8024a8d89868e832d4093dbb44fdc1c87ec96986e38a5dec

SHA512
e89edec41e98412de8d2fddb5a18a23c0cbc3dceda5b23600592e9af631ed6de033c7f36cdccecd7c5796cb39538921cd267325a3d87f9e9f64848c707e2a8ae

Download Submit
C:\Users\Admin\AppData\Local\Temp\RarSFX0\CyberMania.url

Filesize
110B

MD5
afe46d7e46a902f1286c4d6eaa067183

SHA1
2a8efc9c6aecb1ed0c1a36d860200fa681936924

SHA256
3aa697f2559d375c31374fd5e7383ea542ad3daa8a714307240ed9762b376762

SHA512
5e6a1cf578ed6f121c895bcb720db8e827dd6a6a65797eba364310d2f6d7b58b15742be2f2066737dab76ac3f2ece0b45d96cb72f6c04427ef64a6dd4b674d3c

Download Submit
C:\Users\Admin\AppData\Local\Temp\TmpC7C0.tmp

Filesize
1KB

MD5
a10f31fa140f2608ff150125f3687920

SHA1
ec411cc7005aaa8e3775cf105fcd4e1239f8ed4b

SHA256
28c871238311d40287c51dc09aee6510cac5306329981777071600b1112286c6

SHA512
cf915fb34cd5ecfbd6b25171d6e0d3d09af2597edf29f9f24fa474685d4c5ec9bc742ade9f29abac457dd645ee955b1914a635c90af77c519d2ada895e7ecf12

Download Submit
C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_xzgh5c0k.xik.ps1

Filesize
60B

MD5
d17fe0a3f47be24a6453e9ef58c94641

SHA1
6ab83620379fc69f80c0242105ddffd7d98d5d9d

SHA256
96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7

SHA512
5b592e58f26c264604f98f6aa12860758ce606d1c63220736cf0c779e4e18e3cec8706930a16c38b20161754d1017d1657d35258e58ca22b18f5b232880dec82

Download Submit
C:\Users\Admin\AppData\Local\Temp\eset.temp\{02D83BBE-7F3D-8F05-DE03-72C39D27B6FE}\_InstData.xml

Filesize
17KB

MD5
003b061b600537e77571630446146b50

SHA1
625e2c07eaa4c5affb28c2352f94099e52889338

SHA256
32ae8db3ef2c20ca6d462c724fb4de939dcabc63fea00619c8c20d0418568858

SHA512
7bbbb6294cfdeec468e2ac1cae6a2ab8897682078614c5a8818e494bdced204026b43b690c8e75bf82c4be0769509a828f37b7dd978ae6e8d9e7b6c41ef63fe2

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-24V69.tmp\Opera_new.png

Filesize
65KB

MD5
ca01cd3778c987f64633d8af840ccccb

SHA1
85ecea538314c4c09ce79ce554a32331d83bb4f1

SHA256
3c1235a59c023bad329532d2c559350b40536ef859c00fb36425f76f348e82ab

SHA512
ddb561140f22c874b35849553314e034fc4a0b792486fca09f46cba947d0438cea73f84a1775f035d0c344a9a2745a9e10f610375da4948256ee249999b21cdc

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-24V69.tmp\utweb_installer.exe

Filesize
17.4MB

MD5
575c591b5502b0af0bab9be7e0fa170a

SHA1
738737d69a6f9bdd32743dd3ff0688199ce8fb3a

SHA256
a841f48ee29b6f7a62135091707cd1ce66fd515c2f304f771bfcef089eee2f8a

SHA512
c35ef49e27f1fdd609cada7250f818968635e728b44e14a1445cb7e243a0a1f3dafaf7afed5e11f15978150abdd8071bceaee1ff10b85977e7b83d36f0f5e169

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-M8T0M.tmp\utweb_installer.tmp

Filesize
3.0MB

MD5
699fa5c02ee240a5ba2ec3c9fa33fde1

SHA1
1fa73a0bff6ec35da772ec9a2f648d5bfe3151d6

SHA256
d56e74a9e8a0878284dd1b2b3cc1b12abc8bd74d48c3fa3e0be8f9872289d796

SHA512
99e4b510a4e676397b3300d690d14ce8aab71ec42cb586d1a0cc226fdc9449f9ac2d24cdf316a1b2722727d1ffa9ef658725936706dbd0f935bfb32014e09187

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsgB28F.tmp\FindProcDLL.dll

Filesize
3KB

MD5
b4faf654de4284a89eaf7d073e4e1e63

SHA1
8efcfd1ca648e942cbffd27af429784b7fcf514b

SHA256
c0948b2ec36a69f82c08935fac4b212238b6792694f009b93b4bdb478c4f26e3

SHA512
eef31e332be859cf2a64c928bf3b96442f36fe51f1a372c5628264a0d4b2fc7b3e670323c8fb5ffa72db995b8924da2555198e7de7b4f549d9e0f9e6dbb6b388

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsgB28F.tmp\INetC.dll

Filesize
24KB

MD5
640bff73a5f8e37b202d911e4749b2e9

SHA1
9588dd7561ab7de3bca392b084bec91f3521c879

SHA256
c1e568e25ec111184deb1b87cfda4bfec529b1abeab39b66539d998012f33502

SHA512
39c6c358e2b480c8cbebcc1da683924c8092fb2947f2da4a8df1b0dc1fdda61003d91d12232a436ec88ff4e0995b7f6ee8c6efbdca935eaa984001f7a72fea0a

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsgB28F.tmp\System.dll

Filesize
12KB

MD5
cff85c549d536f651d4fb8387f1976f2

SHA1
d41ce3a5ff609df9cf5c7e207d3b59bf8a48530e

SHA256
8dc562cda7217a3a52db898243de3e2ed68b80e62ddcb8619545ed0b4e7f65a8

SHA512
531d6328daf3b86d85556016d299798fa06fefc81604185108a342d000e203094c8c12226a12bd6e1f89b0db501fb66f827b610d460b933bd4ab936ac2fd8a88

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsgB28F.tmp\UAC.dll

Filesize
14KB

MD5
adb29e6b186daa765dc750128649b63d

SHA1
160cbdc4cb0ac2c142d361df138c537aa7e708c9

SHA256
2f7f8fc05dc4fd0d5cda501b47e4433357e887bbfed7292c028d99c73b52dc08

SHA512
b28adcccf0c33660fecd6f95f28f11f793dc9988582187617b4c113fb4e6fdad4cf7694cd8c0300a477e63536456894d119741a940dda09b7df3ff0087a7eada

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsgB28F.tmp\nsisFirewall.dll

Filesize
8KB

MD5
f5bf81a102de52a4add21b8a367e54e0

SHA1
cf1e76ffe4a3ecd4dad453112afd33624f16751c

SHA256
53be5716ad80945cb99681d5dbda60492f5dfb206fbfdb776b769b3eeb18d2c2

SHA512
6e280a75f706474ad31b2ce770fa34f54cb598528fac4477c466200a608b79c0f9b84011545595d9ba94331ad08e2f51bd42de91f92379db27686a28ba351256

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms

Filesize
9KB

MD5
e35010490248bfe5841a244463fc6d6b

SHA1
1f72e9e8fbf2a31460171bbd43de4076730bac6b

SHA256
dbb7c2af5fa21735573c1b1c5b3c6a9ff968a5b75f408c0e10216ba18370cb85

SHA512
58fa1b0d26bdeab877a6bba76f3d8e2c11dd80a2f9955912ebf79f531135856d602efbb7c8a1f1749bd57eef2f3a637588cb5582087c340674923c7702e7303a

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms

Filesize
11KB

MD5
069e3a44991db90c862dae5322cb64cd

SHA1
55b49e8f7ddc4f9fda64de89331087984e3c6026

SHA256
7df826b27196ebdc5434cfb78b17e7c2d769d1ea79b44e83b51ef7f43cca58d3

SHA512
40267d2a33a1ad0d05a6af4745e7cf7f5bcca2ca1661df3a13374be8593be7abe0a887719431644c9275fb8f2c974e731b3302b0105e26c00561dc0893211df2

Download Submit
C:\Users\Admin\AppData\Roaming\uTorrent Web\helper.partial

Filesize
5.6MB

MD5
96b220a306b716a01d8c6d1fe6de719a

SHA1
07ea647454d25acf0ebf6f56b9741656d92fec08

SHA256
a44c00f9ebefdaa26c5f53b8091a1adc71ad73be51494c208cd7ecfc2ba00400

SHA512
2d500a17a5bf3f653a3a500d01fee2392c37fa7fb26871bdf15b03b6acb0bbe21342bfa48297c5354627ebc1a9900c4f88bf7cbb9de4ca0c0f752e264db779ff

Download Submit
C:\Users\Admin\AppData\Roaming\uTorrent Web\utweb.exe

Filesize
6.1MB

MD5
44cf1d0d3ee2b2392e03d182c3ef4f8e

SHA1
02d6cc30a1ad7f6c9672d9c4e315a0aa566be877

SHA256
18d660245b164a86df69f97195c0189e65bc4fa8dd886ad5e6a20f9edb04c2dc

SHA512
bd3a33104abae849aa89b3314325f490a7c4275254cc78d87cd25db62189deaf745cca36139718a35227640c5a1847e25447f02e7e943570b274f8a5314cb1ee

Download Submit
C:\Users\Admin\Downloads\ESET HOME Security Ultimate Installer.exe

Filesize
1.0MB

MD5
f5dc50799e08474661af80bbc2d211ef

SHA1
936a01f8af34806a4e4884954800385d7e12a7e1

SHA256
bc060addfe5c22baeed79ea8a04907cb29d9fc43712fc18af41187c5fe864cbf

SHA512
2950c217f4fa64efd1cae4ffdd82316bcf9820d558c246e27b6080016ebe721fa3f1d612796d7168a4f9e7ab29e7f9a998f3cbb103c2bfbef51bb90a08401fcc

Download Submit
C:\Users\Admin\Downloads\ESET HOME Security Ultimate Installer.exe:Zone.Identifier

Filesize
26B

MD5
fbccf14d504b7b2dbcb5a5bda75bd93b

SHA1
d59fc84cdd5217c6cf74785703655f78da6b582b

SHA256
eacd09517ce90d34ba562171d15ac40d302f0e691b439f91be1b6406e25f5913

SHA512
aa1d2b1ea3c9de3ccadb319d4e3e3276a2f27dd1a5244fe72de2b6f94083dddc762480482c5c2e53f803cd9e3973ddefc68966f974e124307b5043e654443b98

Download Submit
C:\Users\Admin\Downloads\FTUApps.com-ESET-Security-Ultimate-v18.0.12.0-Multilingual-Pre-Activated.torrent:Zone.Identifier

Filesize
256B

MD5
444c3d4ec230e6c1e15dfc5a58c1d8e5

SHA1
ea7b2a4b0a1b2e70eacdc34421c8f3f33301c3d2

SHA256
9ea702bd2549ba5bc50e038dd6c20ffd05f407e214c2ccc6d41935ac8ca46fa6

SHA512
bfa61b3c015ae0d45cf9fb91125169f818855ddb3ea295938ff76053c54d13421e554f249156e0af2c62922e9c609f4ff6730cda01c59ea1e0f54efa6305e1fa

Download Submit
C:\Users\Admin\Downloads\Microsoft.Management.Deployment.winmd

Filesize
30KB

MD5
0694b441b2d73b97a1f565deedd54929

SHA1
ade1af19f659c4903f6c9e2e42801b7687c69ed5

SHA256
dd314ac319bcf2e9babe336c727a4051f9ee1f8f8544bedfdb4967e9d83c5420

SHA512
4bfb0e90a4bd3e93c9e8135f9ed285c109d263bc64b4cdbffbf7a575b689ee576050dfaedf1f3abcebf16c781f0555a1cc0f5633b81d9605dca72300e795cbf7

Download Submit
C:\Users\Admin\Downloads\utweb_installer.exe

Filesize
1.7MB

MD5
c5b6198058d1b8c13c5f07a034f79326

SHA1
2750a3177a01efc66e2d4d94ac124293505cd5d9

SHA256
0cc06666cac7c1254c7111eff2afc90abc76db6eea3f53b70d08e0b2d660afae

SHA512
baa264a49f906d7b65b643cf146dc8ec732afa1f26de8ed350e0bf7e7e49b521956a2cdffdcb12012b03ae0db03cd26e2d28d538b1c3e9dee1133e82b7fdc690

Download Submit
C:\Users\Admin\Downloads\utweb_installer.exe:Zone.Identifier

Filesize
61B

MD5
32f407399408f5699cf248694be99677

SHA1
e4b03b513d86565ba643d0b3582f691ac8bd3e46

SHA256
7c9778aa32d29008c79c8a33a34a213a283a1e11bd113704b7ee0c07c460701b

SHA512
a9c9951b78bf866b0279f17a562f7aba3f5e51bae988806d806ff14fdaa82107311cb9729237dc0e728fd46e9771e56dc13c0a6d2894843847dfe05017b137cb

Download Submit
C:\Users\Public\Desktop\ESET Safe Banking & Browsing.lnk

Filesize
1KB

MD5
d7e7cde339ea317dd9583d89f3734da5

SHA1
d73e0650cf5d5c9397d3231722ecdb02c2939e78

SHA256
a3b8ff04db31d2daa403970a256cfe9a7906d11762e8c726ab755e8cbcadda66

SHA512
4936688fa90a98354b67a6b3b82f44a1778f1c16b9f9414894308d1ba5bbd58347f9047f630a4a19cbd10a9e80f2dadb0728ca1828447cab41fc6033dc8e7bcb

Download Submit
C:\Windows\Installer\MSIC3C3.tmp

Filesize
1.6MB

MD5
4b0c152b4354e1c5e29677d4a2f631b8

SHA1
9624095c5da6a79d502aafebbbca9640941afe05

SHA256
f3b55570e1fe0dc725182f94da21adc5640d2ee4ddee4fab54b29a646fdb305f

SHA512
354249eed3b513081ff52006e753352ef68b3c48c44799365ae0eb6ace445bf8cb9519e4e7ce0281485ecdce312c16bf05c4e3e8b11306d68107905c5c5b2c0c

Download Submit
C:\Windows\ServiceProfiles\NetworkService\AppData\Local\ESET\ESET Security\registryFileStorage_userA.cfg

Filesize
159B

MD5
124fd3dc71d2f1ce9b08d64cf71c0613

SHA1
ea7268e0c75ac2b22d88295744f8c05470a315bb

SHA256
054e78e4704c03aaf2e2c90856dbee83b41b90ee6c84aaefa2c56bcecb46b41a

SHA512
04a493c0102855dddc79f1c82489a31291b7e0b54cc963b0e1819b258f74e36bbb96305be9369c0be78e8b1ee7ab05da8d31daa8d58b6d5542388f88fb1a97a0

Download Submit
C:\Windows\System32\DriverStore\Temp\{1deea432-dcb6-6d43-aeb1-cbbdee7d8d5e}\epfwwfp.cat

Filesize
11KB

MD5
7d10949d93d0d96d27216bca84040d6d

SHA1
dcd4e2794ce265fa9cfc818f1b403392295bae16

SHA256
e154125fbbe65f67dc0d8fc621eea8059405d831c15e1e4d4461026d36d97456

SHA512
b11b44e01db4956a00c446cbac72853198ad7bd9c1ff3f2a37c6bd672b50a66dce21b69e76ef2a4c858cc1295c68adc9c485fb3efadb0835dd03e5819dcef8be

Download Submit
C:\Windows\System32\DriverStore\Temp\{1deea432-dcb6-6d43-aeb1-cbbdee7d8d5e}\epfwwfp.inf

Filesize
1KB

MD5
1c8a1369259f4fe5b24926e9e5905407

SHA1
1bff1ae13e1fdc36cae0a7ea86363015abb3353b

SHA256
9a87e70377b839a71fe3091242884b6d2971d524818b3615350b9accb829a455

SHA512
94733111ceadf05c7c7c5f773c79c3a2f7447f3afd37e8edf8ad8916759ede2ff2c848f83ac76e1c9587a5ef1d2ea6a5f8f7978cddcc9f9f32e1c18755a4361b

Download Submit
C:\Windows\System32\DriverStore\Temp\{1deea432-dcb6-6d43-aeb1-cbbdee7d8d5e}\epfwwfp.sys

Filesize
125KB

MD5
c9cb17f0bce74c812396153c2a5509a6

SHA1
85b199b16850d1fa7b722849c2dc3dd8e7427fe8

SHA256
1993e9d0fde1dd3d11e295b0bbd347eeab285ecf40d67acf3c8b650f200730ef

SHA512
4da17aeba426111b54a182ee7078c61f258fb3056a14b63087c0978492746317e8e9aa073d8ff1a1e3ff5a5a63a0ff4b7c62c057809fecb1b23f4407eb85c69e

Download Submit
C:\Windows\System32\DriverStore\Temp\{2423176e-c32a-a043-aaf1-71c6bdcc06bf}\ehdrv.cat

Filesize
11KB

MD5
d4d28d1e6466339e153e65ce9c0f8090

SHA1
d10b0fdc9c64cae4dc96185dba9d43e02484a0c2

SHA256
712c634510f0481f4a6f6fc5d1fea74b3053b2732be4a5c87b1605f41964d712

SHA512
ff2d80b7b9ff9cd510e0c708ef45776a8a6a82c3adea511df6c721238c13b0f91dd9e3a10f170f72c0f377fef14c491f9b489458d48070e2462ad2773d160d2e

Download Submit
C:\Windows\System32\DriverStore\Temp\{2423176e-c32a-a043-aaf1-71c6bdcc06bf}\ehdrv.inf

Filesize
1KB

MD5
78c7c83e0067114a6c5fae0871bd813e

SHA1
b828418516969db83ca30223affb58ba905eb2d8

SHA256
e4a57b777458c06b6c6c552e021072612f070d774cde6300441ad761441ec8f1

SHA512
a6fffefa2a127794ffb625446eb2e4c984dbb905aa82bb373bdf3bdece4a755dc9e7a9a111000e567b03df78ec134d6871f7cabaef7b549e7a69821f858de1c7

Download Submit
C:\Windows\System32\DriverStore\Temp\{2423176e-c32a-a043-aaf1-71c6bdcc06bf}\ehdrv.sys

Filesize
262KB

MD5
09346f1d79e7a5e15f5acdc6032a98e9

SHA1
c7da07d5361be018ba24b463467ffd0a1f85c25b

SHA256
c3ed3912f3472407f7d7a8a3384dc022798b2705df320245af1c29ba67bd5cd4

SHA512
e22eb52e58cc2690fa97cc926b6a23ae26ef45cba6171079c8d6505eeb4eefd7e999ba7356a849104d6973f77820fb7be33efa0d1da84ca98cd5a6e628b45b94

Download Submit
C:\Windows\System32\DriverStore\Temp\{39d9a674-96c6-9747-9b6e-1e27b9695677}\eamonm.cat

Filesize
11KB

MD5
afc5ecf3eed6cdab03677d7b99b5e7e5

SHA1
cb2ea69bfb3cec97ff242d061a87d0d1319bffbf

SHA256
2bfbc26b7f98ae792e0e8d354c9ca07639a51aeb33c3dab4645563667b5c54df

SHA512
34a5fc8bd5d8684a58fadba43fc0c0fd3b3c9fb6bfa7bf185833263ca652dbd8256a71c486ebba59a961bf3d8c20197e19a82b51fc03484738376380a8a43eb3

Download Submit
C:\Windows\System32\DriverStore\Temp\{39d9a674-96c6-9747-9b6e-1e27b9695677}\eamonm.inf

Filesize
2KB

MD5
f32b39f7bcbbfb9251c61daeb76c0f82

SHA1
e4349081b3cb39014c24add84f718c44a8794fe3

SHA256
6d882b433b8aa6f29c89ab820def1fe7b0893544ac60a9d43ef692ca2effeafa

SHA512
fcd874a1956488d89d8342a61c8aad48371dc8fba84bb75aea1612aa0efd4f1ab702259b79366d94b06795b36e26637366fa7d9bd31dc875f325244bc9dfaf37

Download Submit
C:\Windows\System32\DriverStore\Temp\{39d9a674-96c6-9747-9b6e-1e27b9695677}\eamonm.sys

Filesize
215KB

MD5
4ac071c50b8839d16f8cc155ea5adec7

SHA1
f4de43b047980f531d88709465d397d5971d904d

SHA256
8aec3f54db669fd135e7c74da3d12f2f679a53111283397bd0e42d33b19b4026

SHA512
dce21470b460dd6d8b7c41eb022bf6bdc7cc11e89ad7b6066bc68900eb809bf55c2f5bd309360da632cff3ac669394de15f8fad76fa2bd86d7c9ccf70eb1e773

Download Submit
C:\Windows\System32\DriverStore\Temp\{7d6a430c-19d4-c242-815b-7255a188a1ec}\epfw.cat

Filesize
11KB

MD5
5f84932bb300be4f963014a614ccb6c0

SHA1
fcc6a283a7ca34f60e7defa7e2663c846a8329dd

SHA256
6a80b5c744a4f8b9a27d87da68ad634b6c122a55663ab7854b8c128a7eb7efb9

SHA512
9af907443f9f7e4d2e1a69632f7bfdda260ea4830fc879cb46d440d520b9952c1b12b3970239b81398841b9c0f1a899bab0feb66a1cd71e0aecc59f28e3befcd

Download Submit
C:\Windows\System32\DriverStore\Temp\{7d6a430c-19d4-c242-815b-7255a188a1ec}\epfw.inf

Filesize
1KB

MD5
1b29c99df69536b41b5cb28aae9e9795

SHA1
1c5697e25f87b716c700228e5fb34619ff3c2ca2

SHA256
107a2d84af8f0c5bb27ffd4e328ac4e1065d3bdc00d047cff0e6b086cc699506

SHA512
ffccdf76ef4568761557c4ff14383e81b5f97ed8835e5047229487f7add91e89504c29bad0c7995f240bf461bdbcc9ba236be22fcbbab4796b35b44aa9690035

Download Submit
C:\Windows\System32\DriverStore\Temp\{7d6a430c-19d4-c242-815b-7255a188a1ec}\epfw.sys

Filesize
85KB

MD5
cc01246d5c8f4a7ad3123a555a6b6938

SHA1
518f8278a4b80e27b89a63c3ea8cef0490b7b12a

SHA256
2fa2b5d94e112dcd26c5fc97eb76b6b766ed0c9ebe9eb36fe46aceb595120e0e

SHA512
3003cdebd1ad3c4cc5296f394ac51511704bb8009f38ff726cd834b12fda31d041910489e61a487a39669a1d0ce912e40acd7642515dce060a91629f82680eb7

Download Submit
C:\Windows\System32\DriverStore\Temp\{b84d2d87-a79e-9342-bf85-ee368fd3fccb}\eelam.cat

Filesize
11KB

MD5
11d905d5f5782b5e15b0fa70f613b862

SHA1
2fd16cb9ae82246c682fb8d6506a05a6df3364ee

SHA256
339d3b56db804fb5c6312f27c58d4e102dff527e8ba414586f116f7033eeaa20

SHA512
bacbee932783db40bc75eb60673f6220506d80d1c14e8bd207d4da5adfdac70d4839ef209cae803ea8f38d4a448851f583a45c5af919b32790b155eeae63fec0

Download Submit
C:\Windows\System32\DriverStore\Temp\{b84d2d87-a79e-9342-bf85-ee368fd3fccb}\eelam.inf

Filesize
1KB

MD5
a7d5c0c73d05acdffa664557874e7008

SHA1
3a98033c84a31e593ca4f27723dd70774c2674d0

SHA256
17af5930daa149addf4f3092516ca1cc9af8018a792de967193b391e99516a8d

SHA512
ca91643f28dca94cb25cc3af688f224139cedd0276c5b764b9c81b228854b8b7dc8a4ba87682681b020d93eb0d38e929bb0b247fab68bf88a16604048d9cfb62

Download Submit
C:\Windows\System32\DriverStore\Temp\{b84d2d87-a79e-9342-bf85-ee368fd3fccb}\eelam.sys

Filesize
15KB

MD5
6482645cefe3e5237d154470e3e66ca7

SHA1
8048b5607ffbaee37e0a7b94091a2457181cda81

SHA256
56af45ea19ea3aaf91121cae00748f533041bf4071949d270be530568a0e9c45

SHA512
2b42a3e1ed6918d6a0a98739349cfc92596fb4f00c8acd901e57a3759cfa9e8da07da19386b6060af90bccb0e69df57e1e64fe0e310f6168f17dbf6e8e97da2e

Download Submit
C:\Windows\System32\DriverStore\Temp\{cdbb6c4d-e6dd-d745-b257-014723b017c6}\ekbdflt.cat

Filesize
11KB

MD5
c9138f366a8eaf2f8903cdb93704e5b4

SHA1
df6dfb0387f34cadbb876d3559ddd5e6bee74fd1

SHA256
ac7613bf5b74e555d95763e1e9d39849b058196b486b705e91df9988a03b4938

SHA512
9d1eb19d67c311139634c82f3624b51b283b7934bf6436f2fde6e0d030363d0f2386c56756801547f932d64560a1a7caabe665a619f58eeceb841c07d4141122

Download Submit
C:\Windows\System32\DriverStore\Temp\{cdbb6c4d-e6dd-d745-b257-014723b017c6}\ekbdflt.inf

Filesize
1KB

MD5
21610fd68ba93578e28df2896a1158f8

SHA1
fb681ec75c2f703d78b03c68179163e0490d6223

SHA256
a775660af1a2bcc219db458feca5d60792dc3d07d1fd9ecf030a9e26ab2c22a5

SHA512
018d63b5844514448463822e6a2111ac26c5e0489668a851f18ff6445d352e75da44ae77b65dec428fd9681cf71755bad93cf393ef0d460843dd5a22af44a225

Download Submit
C:\Windows\System32\DriverStore\Temp\{cdbb6c4d-e6dd-d745-b257-014723b017c6}\ekbdflt.sys

Filesize
56KB

MD5
6b15506c57cd6de23bfa69efa853e12b

SHA1
3fa21b3f0ae8c20c08451a241ec2af62514c9178

SHA256
5561bb111dc989fcddf7187f0f77a2ffe6669f2961347ab24ee1afecea65c75e

SHA512
990661dab25c65296d4897a3498921f9a4d36662cc58308449bf60fb8c8d1560cbb4a0271392b549e9a8d09a3bfe2c5f1e126d6706de3b6af9a20935e02e6f5a

Download Submit
C:\Windows\System32\DriverStore\Temp\{e13567f3-0cc3-cb49-a827-f99d888b7844}\edevmon.cat

Filesize
11KB

MD5
252bbbfc7a7efa02b8d61c26d0f02060

SHA1
006f850b985a5f4836b3c7fa789654ec98c4ade2

SHA256
2bbb41e53ee32acd66974d49ab3215fa1f5947fddf79ea14630b6c64215a0261

SHA512
66625219d59bf600ce53b2dfe14238f02854cd954c91916e2fb61afd31f26191061aead4045464926ef7331e266cda34e1fb7379ae311ea5ac51de8ab14255c2

Download Submit
C:\Windows\System32\DriverStore\Temp\{e13567f3-0cc3-cb49-a827-f99d888b7844}\edevmon.inf

Filesize
5KB

MD5
4a40345c04c7ab851806bde03dc7a1af

SHA1
9e6de5a3cc178a7979fe654a71d23a4d2615ac9e

SHA256
03f76b86c5f4ad489387cd48be8fe9871516103f08864c573791c3afe7ea4983

SHA512
bc86512711794a5bf7d7b7438376be1417d968b95bd4fbf079630ddfe9641a7c40fcf4e4227978d3afd1f3cb6761f24cc1449fd5809159c563c07641f896df58

Download Submit
C:\Windows\System32\DriverStore\Temp\{e13567f3-0cc3-cb49-a827-f99d888b7844}\edevmon.sys

Filesize
119KB

MD5
d3d44a684f071589074d338746068406

SHA1
90be840cf4868d1b70ba8934b609c3c25109e5c6

SHA256
052d49dc7c00423f63ecda402b67ac01756ca59915e2f2b66631558b594630cb

SHA512
42685ba8e6c770bb23b50ad44c7bf0ebade70899e619e023e0adecc61f3fb5453ba5cf2a3b8808af533a0317d879a71129299dcbc1898b2562ee7d50d86e6407

Download Submit
C:\Windows\System32\catroot2\dberr.txt

Filesize
107KB

MD5
cd6f25ee96ff6edea0b5b1cda44b9ae5

SHA1
5078258b1646857ce06bf300721ef06c45aa6e72

SHA256
f287df239d50327c51a8ab5084e2970de82ebc4f76bbd51d153774a90c73e2ad

SHA512
0f7764c8611469aa9ac2ed52900b50510927a11194d5d3732d5689f5ff8d958704faed641dab1c1d6ac1c8969c51742e43fc54d3a04b8c07b44eb74808ef4769

Download Submit
C:\Windows\System32\config\systemprofile\AppData\Local\ESET\ESET Security\Quarantine\21F232C2FD8132F8677E53258562AD98B455E679.NAF

Filesize
2KB

MD5
d7dca8a09b701cae4abf1a6dc4ab9463

SHA1
0d7e48588342b39190ec8d8c4335c16894956e93

SHA256
c3e9000da5227abb36b5050c7474aac4c2cd6ea3217d229be35c883c6bd5197f

SHA512
949800a736a6c73d5fa13760cfe4253cef2db0056224d9647d05dcdc4676532b566473c4fc1c48c2f8c831b77007b1fe83ede5fe14c2a4d2ab66735c57944a77

Download Submit
C:\Windows\System32\config\systemprofile\AppData\Local\ESET\ESET Security\Quarantine\21F232C2FD8132F8677E53258562AD98B455E679.NDF

Filesize
502B

MD5
15efbb3db3e1c50c3253da17777b5b55

SHA1
d4967f065dc971357c27f6354889dec23aef42a7

SHA256
1f47eef407238c2af228d902b0dba2c642b5c01baf71b6c2e8130b0ee67cbc63

SHA512
4e906c35d3e882e7d53a01a71c92219eaa3366d9cd00937ae44cefc55aa72877a63a440afe40ee4155e3d1005202c8e501133891e4a20fa9cab3129bd5d41529

Download Submit
C:\Windows\System32\config\systemprofile\AppData\Local\ESET\ESET Security\Quarantine\21F232C2FD8132F8677E53258562AD98B455E679.NDF

Filesize
860B

MD5
c961243d6be1a38a30b3dee3587e97ce

SHA1
2c12ea4e5774f0564770a02ae71adfd710811bfe

SHA256
af4e445d5a6b1952305292ced7006c65ec2c219beefae4a7b5969774e692ec63

SHA512
be36576b8f710876a33f69b4f6af4c43a9465f54f1b270e464b69a9044d9ac6d2b6e924285d7dc18334a61d5cc639595ba2a8e82c62ed98fa6e1f0a55112f12d

Download Submit
C:\Windows\System32\config\systemprofile\AppData\Local\ESET\ESET Security\Quarantine\21F232C2FD8132F8677E53258562AD98B455E679.NDF

Filesize
1KB

MD5
56061ca70a03c33c5b635a445b9d38a0

SHA1
ec95dfd6875991e123086c3f3e637240b08d0bea

SHA256
385a1d8b814ed31f616d600ce8a8a582177be5eff5d60593585dfb5b41059b9a

SHA512
ea117399b82a03e184afb7b4ab790d270fe668dfe9dcbd8fcb0342caf5bef6e2e958dd9deeb3c7a8e3c21eb0f360dc9c217b28d44d767f9849061ac6efb4bfd0

Download Submit
C:\Windows\System32\config\systemprofile\AppData\Local\ESET\ESET Security\Quarantine\21F232C2FD8132F8677E53258562AD98B455E679.NDF

Filesize
1KB

MD5
0c7e4855efec6535601022c5150c0118

SHA1
509391cc6214da25fbbf557fe3c838682fbe734f

SHA256
1a950fb426b45d47f2ea185399df50c3eab522e6aa75247dd815bee9df82f910

SHA512
32b87ceeccc89cbcafd7028dd133d567d159d8d50762f777c5d8e4bfa80830d32da0a674432fa3035817a60921b6b78bb52ef173942c7d0fd5f88f13dcd768e4

Download Submit
C:\Windows\System32\config\systemprofile\AppData\Local\ESET\ESET Security\Quarantine\21F232C2FD8132F8677E53258562AD98B455E679.NQF

Filesize
800KB

MD5
0ec04ab217b6dc9201f83b7db1b962f5

SHA1
661c03f3b0f7192f0a1f1b0695c8660519594afc

SHA256
5e0b82cc9959dc904754d048975d9571cc46808489995a335f1f0300fe80c0dd

SHA512
55e018442dbc2ba3fa7695fe85f56174f42b094068be2c05f46bf972900540dae6757970b9a41c12370aa1a1569a618e71a1a7ff4f7dfae023e4a1fd114c0765

Download Submit
C:\Windows\System32\config\systemprofile\AppData\Local\ESET\ESET Security\Quarantine\5FC9C6AB334DB1F875FBC59A03F5506C478C6C3E.NAF

Filesize
854B

MD5
c2497a7f4923ec716ee348a82a9d3cae

SHA1
79bbbd2b89a02f8700712d79048fa1cd9940b420

SHA256
83e6e3ec94ad257aa274daf5713af8d03270a487ba92e453ab4e0d3e64cb8510

SHA512
177d83fe3403c37b6138e9bd762d2df29fb9381b648fbbc9338c5e4ca01bbe32c9a2f597cdb35439949de0ff8ec4d41618cb0fe0bccd5a30049103663a65dede

Download Submit
C:\Windows\System32\config\systemprofile\AppData\Local\ESET\ESET Security\Quarantine\5FC9C6AB334DB1F875FBC59A03F5506C478C6C3E.NDF

Filesize
402B

MD5
bcb6d4eee71217b925a98316a3dd51ed

SHA1
312ba6cc016bd4c73292aae659857c2ea38a5296

SHA256
319bb3706ae04454a9b491334cd26443dd625d81f680cc7d43d41608b8e0d2ea

SHA512
9cecc44486ed5fab727899935441f7b625e08a9b1e396688dd43e61a20b14c9667751a5003eaafc6427007575ea09451241494da63db0b0ba531be539e6e819c

Download Submit
C:\Windows\System32\config\systemprofile\AppData\Local\ESET\ESET Security\Quarantine\5FC9C6AB334DB1F875FBC59A03F5506C478C6C3E.NQF

Filesize
7.2MB

MD5
188f0b1e064112e322981b1aa4af542c

SHA1
66a87ed625259c46a40c4e223e03cecfdfb7adb5

SHA256
46361a4a595753631136df2044f2c64219211de0ec86c8fa834d19329955ff77

SHA512
7663a71c1978ba570d9941d41c1c61274ee18c605580ae7e33c79e1b53c9b570886b883c2c69b94492147a863241e14a528ee8d1582d146afe5a2ba7075dd994

Download Submit
C:\Windows\System32\config\systemprofile\AppData\Local\ESET\ESET Security\Quarantine\702DFF2E0E597D53A9A4E5A60AC1FEE71C69A0D3.NAF

Filesize
6KB

MD5
17d461424e41e545b6d82ffcfbf52c4d

SHA1
b4d0f19e950017e3d236921d17b81b199939f920

SHA256
0306e7785781ad6e73774cfe5d9cb0edae28dea21e4563df779b6547486abac2

SHA512
517e47eccf6dd733da98b1be034ac447bbb3d6424e0c38e28bec554933bd5e8636181469fa308252a43977cf4f1b1aebcef1e022d9a99f10ef8a1d4397aa59ca

Download Submit
C:\Windows\System32\config\systemprofile\AppData\Local\ESET\ESET Security\Quarantine\702DFF2E0E597D53A9A4E5A60AC1FEE71C69A0D3.NDF

Filesize
478B

MD5
880c72e10bfb1fa5c65edcb3b3fbdb34

SHA1
6e62db45c2172faa7f2d542c88cfe2e0f59ec27e

SHA256
c7268b85226d5683f079e2f535970aeea3a2f0177217ea30c7f2e5df7f7d2089

SHA512
9d8964cfd7e2166979073a58ead98530d0f19e5f7905c3a82b35dfc91618d38160b66e0bf01b96f5b673721c62a4dbd9126378d85cd14e006578e268b336d18d

Download Submit
C:\Windows\System32\config\systemprofile\AppData\Local\ESET\ESET Security\Quarantine\702DFF2E0E597D53A9A4E5A60AC1FEE71C69A0D3.NDF

Filesize
820B

MD5
763cd38f73460951665a8d60d8b7a0bf

SHA1
a6ac863b7d1b68004aef8a31fe79f055f672bc04

SHA256
a9681ce678bcbe9d1d442a797c08b8cb9f9c3dc3a49117473787cb5dee35fd36

SHA512
77837b6fb169390d0c1aa7f71b20a04074a9964eebd6e99f59b992aa9fc6404fcac6c14dfd71147bf96d388eba41b5db7d3214044b3e74fafff8dd7d66cd0390

Download Submit
C:\Windows\System32\config\systemprofile\AppData\Local\ESET\ESET Security\Quarantine\702DFF2E0E597D53A9A4E5A60AC1FEE71C69A0D3.NQF

Filesize
416KB

MD5
180c3eebe20334bbc3858a602e4c7d2c

SHA1
fbcc1c58e06fc8fcbf7910c199c882d5f5a086c8

SHA256
fb649870977cf7259b369046aa2eb2ab8f126a764dc693dac561dafff83d1eb3

SHA512
a48b22e6ec995afc7cfa5308cf2cfe5d91917efaf792f607ddd395ef126aa9d511888bfc484a933afabb44add834e3ef1784a49b2c93f54c4d231cba81ffcf4e

Download Submit
C:\Windows\Temp\NOD337A.tmp

Filesize
2.0MB

MD5
995ef16d58fb964f1aa10b49c91ba7d3

SHA1
2023db17ef2cc3f18ccc97da3d5afa2e1cef9239

SHA256
e3362914df9e87092576ed767830ab109617e8e168943feddd37adde35d4283d

SHA512
977192dd5c34e1d3ab6b6bc25f5b1a679520b076e0b921febfb79502ba4b0e5cd2dfc4201267237c0c609ab5710ee7b915388edc556fba4089f2d0c531af3c8e

Download Submit
C:\Windows\Temp\NSF6D42.tmp

Filesize
223B

MD5
96e44b1e1f4f0b17f4fa84236e437908

SHA1
6a733ea601d4ae4b476a4370f6f4f2e328870cdd

SHA256
25335506b81a42ff0ffceec20ec742ec3fea35b204fd9a4f4de79a6d7b92e600

SHA512
1b57f5a6bbe221298a3eb8f8a708de6c126e70d2f598a24fa4447aefb0f26e60b7c06bdced9dbed493918ebfad4310f78e68294182ea967997f97b56833c3ced

Download Submit
C:\Windows\Temp\NSF6D53.tmp

Filesize
236B

MD5
35eac2ea0c030b652abddbab0cd344fe

SHA1
d4548c56c62c1d4ad3b71c3f27205c380cc73d6f

SHA256
a362d5a97d246e4d4f3f3392747966d3f379c0bd1d5c14df9afab3b9cf90a31a

SHA512
53cff02ecd94c37b54f585a104d44d197c26f7e57dc9a9c6feae4afffd2a522456e8780f25dbbc32ca2c28e19b12975f2ec6ded22b9c9dff672fb0ebff8d0e2f

Download Submit
C:\Windows\Temp\NSF6D64.tmp

Filesize
219B

MD5
daac55a20879b8cbc458ba1a0c5b7041

SHA1
bee5e53f3cd1bd98b4425e98ac8578e2710146f6

SHA256
5d4b6893f2e647945f3c145b07a49dd3ae7ee2df1b4a632fbc9a1ba6da577678

SHA512
cb3b98cb77cc49a577a14620038ae17d2f22342061076f92e9356b571fe9a116a04183cb107a30d31a3dbfd273c82ed90e3fdff180a4ca958e5effc2a2e1f958

Download Submit
C:\Windows\Temp\NSF6D65.tmp

Filesize
234B

MD5
720ef52a4e7d52aa7ff116533cc2f447

SHA1
aea2eb66e775ab58657813b96f8c6c9fe60c5e8b

SHA256
091b06286925d6a0614468a38fd63526c6aa1304e79a23106a2cde969a1da4f4

SHA512
b708c545eb390a606e47603ec5753d07b15bdff93e3f9a5ff7d150aaee67c0eef62b121efc2cd6f81c8852304d7532742388f9c4c907998110189a7b6f1537f4

Download Submit
C:\Windows\Temp\NSF6D85.tmp

Filesize
220B

MD5
1fd364ee74911c2674ec68460a0eb6b1

SHA1
f8121e2ca52604d5e5a0f9086a08a1067a74e933

SHA256
28a6ffa20267599c2ca5dec5a8810a1e3dd57191527cd34e5e1bbf67dc523f16

SHA512
11f32f934ae4c0028803ad0d4f65462ef802874dcc9a58285370879544c76d9c83588ed28965b107277303806b56ed7f27123a5c4b92e2aafa98a374c94d493c

Download Submit
C:\Windows\Temp\NSF6D86.tmp

Filesize
216B

MD5
ea2dcb42769c7ee9bef257f4e6facf4b

SHA1
8c321c50edd262345bec2334742e838d7fd4e4d0

SHA256
90d6a40a4e2e6b2ec54b98567a5f64ca88a95ada40a95794b5ce3042e361c069

SHA512
e19820c7c83246fef4f5f2c1aa2d3e781af8acde7203bfd34184bb1eefbcf50f50901743aeff2f3f2b62cee9f0f6087350e35ae1ddd23c1cd0ba5cd3cf67a3df

Download Submit
C:\Windows\Temp\NSF6D87.tmp

Filesize
220B

MD5
6b8b9c2e725684a2debd24426b0b00de

SHA1
61230af8037a42f1c0674858d260b90cb25676c7

SHA256
e729331e3a0e8c82680132e34b9806c7217faac0e989b77e594661e2a3b704a6

SHA512
ea8ae78f123ad5df331c58a9101ea0a4aede08030395c7a5eb4e9c3a06964fa312b78d77917b9534715208f9b2e45e65241d79e75109e3c2797890248ad196aa

Download Submit
C:\Windows\Temp\NSF6DA7.tmp

Filesize
218B

MD5
bf30b382e6d6412ab4d2d9c1b9f3fbac

SHA1
7ae1324e97b89b25ee384244c1ff6b4b48c1393d

SHA256
fc82c4bb6d33cf76f8e3ba7538a246fc429f8d029606a53ba518adade705a078

SHA512
c033559c47f8019d8a07d4d6f5e2c9914545382f5f2e1e5920aef0222dcd4c69312d5ae5f2afbc3cc71a99ff8c2b386a3eccc9068b0d9abac4a3cf73c7211e63

Download Submit
C:\Windows\Temp\NSF6DC7.tmp

Filesize
239B

MD5
91be6a0728a5adca7350fe28657e126d

SHA1
440ec84d58e7c36d65b0a8a90f7c1a0adbad0a62

SHA256
478e996e0c93b35b158b7d989e2e8443dbc0a56d7fbab8d451526a67642a58bd

SHA512
b69339f47609131052e52bcc418926c3eae88d98f3518465edafdea57500df6e0f96a275a115c5eafa4c87ebd22c65a424ac36f75f832a1382c16a9e629fc216

Download Submit
C:\Windows\Temp\NSF6DC8.tmp

Filesize
225B

MD5
88b9eaa5bfdf08d0b6676e1e116b5b77

SHA1
033ad5afaff6cedc108e17ece2bdbbed254e6f9a

SHA256
aa00445d0bc2c847c29b2a2e08d7b61ba9bbcc133cd1a3dffb4fe82d9262c961

SHA512
79cd96cc42fccea078d95fdc7e36fd8a93ac3de7cb4c0da5bd0475da05c133ace9da4e776f7d2aa995ce4fb9b2333eec7fec85aadb8b195c4a8e338c13eeb249

Download Submit
C:\Windows\Temp\NSF6DC9.tmp

Filesize
217B

MD5
59b04fe9e4f10a0f0f9f7160902c0438

SHA1
c8f85cdec7a3486562933693d1eb810024569d14

SHA256
1a55fb54ba98d0b8da31e85ef7cd610a20c4b763f90b80b23eb97e9e5369832c

SHA512
0e29f879ed221e405b73f7c14b5f141a0ae42e510c9acc09b1050f15a95ec9859a517eaa47e47603e840e6c44e20382d9bdb0645cc8dce7eb9c2a177c9e78f5e

Download Submit
C:\Windows\Temp\NSF6DCA.tmp

Filesize
215B

MD5
31593c74c199892b9ef90ea7b349427c

SHA1
3f34c449e1fc4bf0716623927aa99cac0112be55

SHA256
b9a72014d9b1a4591bd32f29dc3a9e5865a0841d2296bdedb91ec5041c0aa4e7

SHA512
da0f063aed8304fa3bc72ce52539b7742de418fd17430a67d2a85baa34f39379d83a5761ad64b3ff1846cae641a72cb10b33a98724d67d959d17ec5842f64fb0

Download Submit
C:\Windows\Temp\NSF6DDB.tmp

Filesize
235B

MD5
b9f9b9cb745449bb3088e508348bcf1b

SHA1
e794e20d8b7aaf0b5bed73f6c91679eb787a7d8e

SHA256
54d9c13bd85ecd77758599548d1dc7f4edcfaeda0dd05453ce4bf575085c8a1a

SHA512
0df6118bf24bf13c8f213c26ca5eeb6852e93546bf495d0de1ec45b16e0b1d20ac29c6f4c41c2fca5c1f96fcf505b7e5bbaa6cf8578c954fe3f0d058c38e570f

Download Submit
C:\Windows\Temp\NSF6DEC.tmp

Filesize
217B

MD5
1a3b65eeaf9d86e3f34605f606e0f725

SHA1
2d4d93855eb7fc2dccf743d2f5734b79a65a14fe

SHA256
ee5eb09896337e6c26353b55a53a052aaab423e2375216a5a9ac73e74c290d71

SHA512
ad9a8f1c269feda3c4744eb118b994c8f20ccaed577c40e97402c8bc2766628a76b962cc71057e3c40e0fc484e9997e3f54f032b8c61446ae46ee360fdb4e754

Download Submit
C:\Windows\Temp\NSF6E0C.tmp

Filesize
234B

MD5
5bbbd044fb0ebdc032cb58957958e72c

SHA1
83759e6c123c9fe605fce1ccdeb4261a0a3b8c50

SHA256
7ddb409681696529eacece3a7d755e86556bad0aa774713ba8b996bd9320148b

SHA512
f134e4612baae9504e93396e66a07cb75a254807f6e87e0812b4af3de824badda2f0a020e4f9cb5a0aa6eca8d8447152b5211bb8bc3d0674bad9f433c37841b3

Download Submit
C:\Windows\Temp\NSF6E2C.tmp

Filesize
225B

MD5
fd808ccdb05a73dfa776dba288a314c5

SHA1
eed9a634e0803bb3fdb180ee4403ee96ac5305c1

SHA256
c629de5177257e89008a00c6d2e7347a1b17e7dc665498b55f1a01c85df566c3

SHA512
fb2637d523f16f454f3a3e0f70033f5b8b49db4e7d9197a580f114453e32161c71b0001b600eec31b0bc3da676e880695da5394560d64cce7f871ab25d63cef6

Download Submit
C:\Windows\Temp\NSF6EE9.tmp

Filesize
241B

MD5
ea9bcfb9698247bb6eff5f78509748ed

SHA1
895cac7800a6cb3228b5115c378c246de3a0e857

SHA256
8bb3b081fdf3fa0796a50b84db288e876fc4e8a74d490dd1dc83506ef8b6fb5d

SHA512
56ad62cf4dde5c928e4adf3084a8f9dfec8ade922d359140f1402a4a38e66321dd7df28777bb9e8a6798f7503db36deb15cda5bb014c75f55f4faf8958c4b8cc

Download Submit
C:\Windows\Temp\NSF7041.tmp

Filesize
226B

MD5
370fd6137a66bceb5a4d65de7d05aa7a

SHA1
54a6933dcd21bbe8e90693fcf7a0f6018f90d4ca

SHA256
5ce021a7ada958edfd38bbf9bb5d4896a98d2b22bde97ce69b986c95d245dff8

SHA512
3b453eabb264da3f54b5aa05da9a1994d723459279c241b23ddd80ca5351c668ea899e38d15310509dc54f2c83952e2c1cee351be599e9012a8de10eb20e27ed

Download Submit
C:\Windows\Temp\NSF7042.tmp

Filesize
219B

MD5
ad35844f2febb4416c5651c14a7cfa8d

SHA1
24816328341e322665bd5107d1afb08e2709ad97

SHA256
7e44990aa6bbdeb2209d9ca6ad49d43db47d3578c0223405eca7fcb93213f9af

SHA512
49e058a23e6fc85f9c519c1fe68b6d66e36afdacf04cc5076c67d8979cbc406bbcade249138232e3bc4498211875a451cc3cd8a158fc2de672f78e1d0eba81ae

Download Submit
C:\Windows\Temp\NSF7053.tmp

Filesize
214B

MD5
5a31dd75aaf785085d3fd28dd27b4e20

SHA1
309de59cd6fc4b2993e6efe260560b27aecc4667

SHA256
07be6e4c983e22a489033361fc5fce5ae1c8a2d9d83418729ade9294655341e0

SHA512
7ecedb8b588744bda44edaca3c4e92993e16c97a5804fa442c8f6a40c6d909a76277d0628f204b8703bda2f86e06d7eadbf060c4284a5b84b218c12a2be1a039

Download Submit
C:\Windows\Temp\NSF7054.tmp

Filesize
214B

MD5
aab143abc9ec6a01f9392cf31932c523

SHA1
cb81bd9193d66db891577d86e25eb21c1fdc8917

SHA256
ff7ca1995191f221c91c04b900448e0fba81c89d5ba0ee66ad6b837679f3b7b0

SHA512
26d41e67598352861531f26daadb497b1668725f6ae252466b41db915170864a33f821a224e5490f4e0fff0accbbc1ead3526a6c00e9424e38fd92aaeccb6b02

Download Submit
C:\Windows\Temp\NSF716E.tmp

Filesize
232B

MD5
5c45f4756c3a968bdf6f63c8cc5b57e2

SHA1
d299b01f35eb16448485611c3a7324985d71c8a2

SHA256
7c1f6219248ec3dc8ea336e416efbc61d81f60be6cdd80e2614fcaeeeb72c260

SHA512
57f92dabe663b7db9b71806db2d72a77fe3499b12d32e5a6f34711428a52d78c821e01c922d4bc89ac6244a876b4583ff6cc0a0bff0490ae2c1fb9abde05f7c3

Download Submit
C:\Windows\Temp\NSF73B1.tmp

Filesize
230B

MD5
5bf829b6124e6298d8325c76932ba558

SHA1
002bd145dcdf70eb6f297401ebe77efe2637d0fa

SHA256
faa4a82f2b691887b13415cfb8dd7d60dc023c39f019524f587a3e9737be2c81

SHA512
c71d2b2edce2ac8f85a3ffe05e1ed44c8734023ab07d9ea687b640484500105bfe733477035f1be52b0d772f7f03c0d4ced92c402d4e8a7e50a661f56f65642b

Download Submit
C:\Windows\Temp\NSF73B2.tmp

Filesize
217B

MD5
3d12b8444ab8469f07bacb13bea3d0c1

SHA1
326b904ae499d51cf949bd582ed2fb9f1703a4f1

SHA256
059e6dcb394e5219114030e02bf66926a87b42850df6ddf030d6e54d4df18a10

SHA512
b28383290cb6b5930eabe652c92e2fe775f0508fbdf248fae5472316d53628bd93ae67364a46745bc254fab572a5fd9e84e7d48dc6f5f1e79c6323ac446c58f9

Download Submit
C:\Windows\Temp\NSF73D3.tmp

Filesize
215B

MD5
3b17b09e49453134d2b39ca763cf463c

SHA1
95f778ea46386fd61873820ed726b43c508f4bab

SHA256
cb2696a7ab86d21003196ed7a7769f189bb8d8608920d353e06df46910011c56

SHA512
9b566ace32ee034bd12adc1134e03b27030af217c0776e44da023fc1dd801e5ea8f04dd22ad69bbff1040e6047ca4a4026aa644124564b6f8282abf30c9e64e2

Download Submit
C:\Windows\Temp\NSF73D4.tmp

Filesize
211B

MD5
9b8dfe331a179c0f432958acc2e6b8fb

SHA1
8a98181c0a1a920e9e2dba7c1f530c119ccd9ee6

SHA256
7e17788b3107ce7d0e2d02ce335fda3b018ac9084a7776aaa20028a97bb49b11

SHA512
518fc71c62906efffd39ffa4ec69ae7172601a3fa8b81f46f2f3dea0a8028c5725e26ec3e39a41ad697100e40205ab1103b7a9c2e22a704c6bb22340bb4ace28

Download Submit
C:\Windows\Temp\NSF73D5.tmp

Filesize
216B

MD5
25c22de6706d38c149ed8addcae7c89e

SHA1
8df1935fc4d0e73a04b3fd92cbf891f6891fcec5

SHA256
3a1685d246417c35a2a2e8aa15b97d878dd08502a388321c5766655a18bc6b44

SHA512
62ac615de3c415cdda99333c8adf1b28d7cb702b3caead817d716d3f8b4a541931f4e395a2ae2c20d3a85752cea70910c98a2d2b9a76797f3bc370ecc1dfe309

Download Submit
C:\Windows\Temp\NSF73D6.tmp

Filesize
210B

MD5
1c94b8472c506fca05a950a00e02f72d

SHA1
58c1e79c0bb64d0ee1e5c94e277eee3a832c701d

SHA256
213a5f1d54f54dd78d863d8c094a4e9dafc0e2bf610f844ee3cd92349401a4e9

SHA512
c62a5d1c562df72fbbe3cef899099c71f5d2aa19494cd4681f08cdf11012c604e561c5a3b4b5aa4a075e665fbb6649c3f197138651eeb134220d02f4d14c9ab1

Download Submit
C:\Windows\Temp\NSF73D7.tmp

Filesize
220B

MD5
28b342369bc0b62a14e4e0db168fbc49

SHA1
c021fc61da3f37628fa0a4fe37fae8815b222e9a

SHA256
41aaa246c26b691026cd535e95ce24b40441262e37dc8b6b05c36d53fe0e5de3

SHA512
aaa47a4a2539bfb529ac1bcc11b922321056a88acc81925feda8d2b945aa32cd888dbb73516b705e2ede576cae4b4be089b01cc2f8424b6375310f35003712f9

Download Submit
C:\Windows\Temp\NSF73E7.tmp

Filesize
221B

MD5
e32f14fca4f6dbe84b034af9b450b89e

SHA1
b5505d957a420c4258114785172c1a9d75004718

SHA256
61129b84dbdfbace2ea058bbe9093375fa82505cd6340cbc089279984cd6a6ee

SHA512
1134ed794538ebda40d6fcbb0448bb66a2823e0c5bcbe0f6f3f28978d7a97da43ecae40fb614d6e232290d98a5407e4038ab00695b0a7ec7590eccf853d3969b

Download Submit
C:\Windows\Temp\NSF73E8.tmp

Filesize
216B

MD5
df12b0fabd5c430aa098a656a0cf6f8e

SHA1
8ae7e6e13336c90d799ef0ea82616888311abb9a

SHA256
575e182b1958e2dba4d5b8822e0e31874e5008d298c5d830bf22f011d024a80f

SHA512
b9c9692d375e939bc62bd51ae5b48f665665ccb28ab5a8f180f6143b6dd8e2177a0c28692370fd7487dfa06326ebd4ca73b32d5176395e2c70e3394f6de3cc3d

Download Submit
C:\Windows\Temp\NSF73F9.tmp

Filesize
226B

MD5
97284bfa6db50c0744a719cb5405ac69

SHA1
6724ea5bb4b0984af3a5b6d79589b34e2e70242a

SHA256
adcb8983339f72335e9b9356e42123afbb3e38f0a0d0ed0ede51ae164d60ce99

SHA512
429536a3a41659251fb63cdc5f2a19ea1573417c0172c46da53a14af343bfce62a13aed28cc340e6fc778c98e9d0c1bf717587794733426b52ade0ba02e4e09a

Download Submit
C:\Windows\Temp\NSF740A.tmp

Filesize
220B

MD5
6eeca199f7a45b1a42a27244e315a162

SHA1
38d367a40a234caad0c33c4b7bc4c7d6301b501c

SHA256
ad48aca1d4da6c998336d0726793b6b0a49037f8f58452fdceb53736d0f68129

SHA512
e0902542760c10e5f99896462b991c89ac92650d295dcdf7ef1b782fbf77193ec6da5797156d520a4d7579c925e3b4d0bb5e7f570212695f61c89b36f6605e63

Download Submit
C:\Windows\Temp\NSF740B.tmp

Filesize
228B

MD5
7d8c547b082e5052e28f4a44d99d9ca8

SHA1
b194e2cdb2020c20842ca7f9e388e32d8cf143e6

SHA256
944a657108a4f5564e2fc1b13091d2881dfad5512ea7121739f6511a735f6c5e

SHA512
6e062d1117bcde477204dd6f9698ec0fc68139fc82f20331f49eff3b05858b72013f481ea9613acdccae176c7d78d27d8092aaa6e8d3a68afdb37f796e25dd89

Download Submit
C:\Windows\Temp\NSF741B.tmp

Filesize
225B

MD5
f2af166f8123fd7bc67c80da470249e4

SHA1
0f7216939c541329da0f883a116b2d0e395655f1

SHA256
c7b89184adf0d6cbbf4b9a0de7e9ef8528b680eef712bef4c5aec1e11b575a1c

SHA512
f0004af9986e331a942a58d16ebaf153383a4d53b7516445d4a314cd31f11db6062a7a8074b1a6320f391bfe9520ace3e96b0bec60aee1e721e22ba13a2b3349

Download Submit
C:\Windows\Temp\NSF741C.tmp

Filesize
226B

MD5
487c265d5c757d67c9eb9e542b3488e2

SHA1
d6ee11b1734d5bd1e63b8abdbb5a46a80cd438e9

SHA256
76099ba8a9463896fff76f7ef010a6824d8b81e25bf28d3cbd36403ab4cddcc9

SHA512
acb5ae30e02638f41201fad93b7de1a0325e623d5ccfdedbfe9b087703d7eb6fa9d352f6fdcdfae94bcfae3c0db4ac32a14b4549556e124673b4b65457064670

Download Submit
C:\Windows\Temp\NSF741D.tmp

Filesize
215B

MD5
ae28181a1338999d6c28b070c595f420

SHA1
ce6bcf6ffc4f30205b4048b08c9f33ef95d5c942

SHA256
2b529e75ebd50fbd783c4aec4d82b5eac88560c7efc9ae6d095178daf266abeb

SHA512
23bf34aaada6b216caac5238fd9e775f898ddf2c97a2d72a4e7c083c1f493007eb64507f32d7334a1fcea8283a08a64003474e42f690a695d13f519f9c1c8477

Download Submit
C:\Windows\Temp\NSF743D.tmp

Filesize
228B

MD5
ed8cd5bdc9c8a5a8415f3efa97c83557

SHA1
56a0fe1b455d232b7e1044bc243a6e1ed1cadfe8

SHA256
279d13e7275712ed073b6e01ddc41dea736497b78466e65ad20cddaeed952fcd

SHA512
57b3f54f7cad4a2fd88daaa3a3c4cc6af23dc4354e6e6a51bdcdfc18cb13bbe5bfddd7e688d8a0ce42cf0c4d4c9dc27b611b9df8ea1e12e077bd25e416d43b13

Download Submit
C:\Windows\Temp\NSF743E.tmp

Filesize
220B

MD5
a4c694c6944e1965d9794ce522f7a1d6

SHA1
2e7ab595285babda050d3f46f62d84bebbdf2a28

SHA256
e77ec4fda27511371d538b902d8c2dbcda0e52f64741785b5873aa7b4f5aa161

SHA512
4a8afe31157ac6ed7ea2e81ee75fc1c27fb410ef66a5977edffa1eca0f5e5f9e9594e47dadf6c67bb621c0b942f444df1c8ecff3e8bd83161e0cbf85dde2caa2

Download Submit
C:\Windows\Temp\NSF743F.tmp

Filesize
222B

MD5
03351fb419ee07732d8ccaaada658c3a

SHA1
973f8154860bd61520c9f914e91f1b204ff90a8f

SHA256
064cf080b67c47af055ff0dc9aedd7a302545d44f788b3e7e8f94f649c785023

SHA512
8de8e7effca26f70c7d3b79d760e642c5bc1246161c82b5581285f192ecb004086f2857bdc7bf140651e11e28a3fe1c363c1202bc2e36920813bf65920f4ef67

Download Submit
C:\Windows\Temp\NSF747F.tmp

Filesize
226B

MD5
3a694ee3716bc3221e24626972371788

SHA1
8446d52305f83d9e88546c562bc1d4a90412b4f9

SHA256
c169213b3454cae9332c7da77a8b81152cef240ddfcaa0ef04683656e12809cc

SHA512
5b183c981e7560cebe00697d422a2daf8a16b86d0366fabb973099e54d0654b6301d20667194c828088c1fca9828cd66ac9da978b403a023a8d8b6d957695cd0

Download Submit
C:\Windows\Temp\NSF7480.tmp

Filesize
213B

MD5
92e1a06ab90609fec8992aa6e5dd152f

SHA1
860491d72a8823b3ddf2305d0181b6c3d1fe11d0

SHA256
2e54633022aa248b2d4c39d48e6a74d76ddeadcc7126d9436ef76f0d52d61194

SHA512
9986c32eb233b364f60d911abc8163011e548bbd71270698685c7655548192c7405acda8e11b64618cd8311cd44aae0fbc5eb8905848b24e93328c0b23080ae5

Download Submit
C:\Windows\Temp\NSF7481.tmp

Filesize
221B

MD5
dbcdda77016c58d60083b2843cd8ff4d

SHA1
e3181505458df7c8a2caa0f8b7f999d82ba1c059

SHA256
57b6d1d5efd4740423368caf91c25bcbc91199fcaf4b5609860abc5fa2e99b92

SHA512
4e4d808f5d367d4f6929241f9c359d2f1786e51fa85b22c3aed2409b41e60fafa646712e3ac67e65c86f5093e5a987ec0f83667f9a9af9ce0a9bc61ec0111381

Download Submit
C:\Windows\Temp\NSF74A1.tmp

Filesize
220B

MD5
dba89dcdeb3811a2a5675a48799db8af

SHA1
0c03eb48dd2e3cfb58ad3e3f47b0021952a7bae9

SHA256
56f43078ba58d2dde1a25331995d6db545a6539918ed5e07bba0079141fbbb5b

SHA512
4215da58ff25dac330361e4b34a3656cca0bbc6df7a8fb9827dab1238c17286992f84076ca332a66492950e97d4165cc7485cec92a9cffd08a8de35a771f60ff

Download Submit
C:\Windows\Temp\NSF74E1.tmp

Filesize
225B

MD5
42ecb8dda6b09fc5567ee7ad2ba3b114

SHA1
6169bcbfcd494756388dfbcbe1ad6fbd332fa0a5

SHA256
febf3ccecee43e1012cb9b4ac63097fc253c21ba8dba0b9ad0cb577367079b1d

SHA512
6107432f3b467441873a03000e33a36187bcf06bb6f7f26face438c4feb1ee2b7f2257d928b6b4638976f06ff9a2fef56df779229210f83db551aafe990541d2

Download Submit
C:\Windows\Temp\NSF756E.tmp

Filesize
228B

MD5
8f126e62ed941354674b0e8d6567cc46

SHA1
df5feb9b2137b4f1e89de5f83d35ae41ebe3e5a4

SHA256
c05b96581021c17f63885d8bf92203f73c2a95e2dfc68403d94d483b43614122

SHA512
55e2ca1699bfaa72dfcbb8e5d74cea77c5c8f079bdce0a377a564c6fd939f1b21de10bca64ae096534728327427cc2c9bad69eed3518320496b95ec7b7430873

Download Submit
C:\Windows\Temp\versions.csv

Filesize
206B

MD5
e66b4875943071576a995872fb26e5d0

SHA1
4d8a2b843b4622a5caa5f4bc9e206fa755e4fe29

SHA256
3808ce8a575d6daabc15de29abdede75c45e187aa8455e8969db8c42131f096b

SHA512
24d48ccb1bd05cf9ffb0925c80c22509f3da6efda332b6562ba20abac52007e76f88bf706b0c6ac88b914dc01b8fe4fedd38eb604308d625bf79ac3af37df3b7

Download Submit
memory/324-8375-0x00007FF682150000-0x00007FF6821C1000-memory.dmp

Filesize
452KB

Download
memory/324-6835-0x00007FF682150000-0x00007FF6821C1000-memory.dmp

Filesize
452KB

Download
memory/324-7858-0x00007FF682150000-0x00007FF6821C1000-memory.dmp

Filesize
452KB

Download
memory/324-6850-0x00007FF682150000-0x00007FF6821C1000-memory.dmp

Filesize
452KB

Download
memory/324-7660-0x00007FF682150000-0x00007FF6821C1000-memory.dmp

Filesize
452KB

Download
memory/324-7880-0x00007FF682150000-0x00007FF6821C1000-memory.dmp

Filesize
452KB

Download
memory/324-8392-0x00007FF682150000-0x00007FF6821C1000-memory.dmp

Filesize
452KB

Download
memory/324-8442-0x00007FF682150000-0x00007FF6821C1000-memory.dmp

Filesize
452KB

Download
memory/324-6917-0x00007FF682150000-0x00007FF6821C1000-memory.dmp

Filesize
452KB

Download
memory/1784-5227-0x000001747DD40000-0x000001747DD62000-memory.dmp

Filesize
136KB

Download
memory/1784-5292-0x000001747DFD0000-0x000001747DFEC000-memory.dmp

Filesize
112KB

Download
memory/2052-4933-0x00007FF6FECC0000-0x00007FF6FED93000-memory.dmp

Filesize
844KB

Download
memory/2188-9011-0x000002047B360000-0x000002047B380000-memory.dmp

Filesize
128KB

Download
memory/2428-4153-0x0000000000400000-0x00000000004D6000-memory.dmp

Filesize
856KB

Download
memory/2428-4323-0x0000000000400000-0x00000000004D6000-memory.dmp

Filesize
856KB

Download
memory/2732-5356-0x00007FF6FECC0000-0x00007FF6FED93000-memory.dmp

Filesize
844KB

Download
memory/2752-2241-0x0000000000400000-0x00000000004D6000-memory.dmp

Filesize
856KB

Download
memory/2752-2280-0x0000000000400000-0x00000000004D6000-memory.dmp

Filesize
856KB

Download
memory/2752-2518-0x0000000000400000-0x00000000004D6000-memory.dmp

Filesize
856KB

Download
memory/2864-0-0x00007FFFEE623000-0x00007FFFEE625000-memory.dmp

Filesize
8KB

Download
memory/2864-1-0x0000026E72510000-0x0000026E725DE000-memory.dmp

Filesize
824KB

Download
memory/2864-34-0x00007FFFEE623000-0x00007FFFEE625000-memory.dmp

Filesize
8KB

Download
memory/3936-857-0x0000029E0B9C0000-0x0000029E0BAC2000-memory.dmp

Filesize
1.0MB

Download
memory/3936-891-0x0000029E29980000-0x0000029E29988000-memory.dmp

Filesize
32KB

Download
memory/3936-867-0x00007FFFEE620000-0x00007FFFEF0E2000-memory.dmp

Filesize
10.8MB

Download
memory/3936-868-0x0000029E0D7B0000-0x0000029E0D7BA000-memory.dmp

Filesize
40KB

Download
memory/3936-869-0x0000029E26AA0000-0x0000029E26B5A000-memory.dmp

Filesize
744KB

Download
memory/3936-882-0x0000029E0D850000-0x0000029E0D862000-memory.dmp

Filesize
72KB

Download
memory/3936-883-0x0000029E263A0000-0x0000029E263DC000-memory.dmp

Filesize
240KB

Download
memory/3936-888-0x0000029E293F0000-0x0000029E29428000-memory.dmp

Filesize
224KB

Download
memory/3936-889-0x0000029E28F70000-0x0000029E28F7E000-memory.dmp

Filesize
56KB

Download
memory/3936-890-0x0000029E297C0000-0x0000029E29948000-memory.dmp

Filesize
1.5MB

Download
memory/3936-896-0x00007FFFEE620000-0x00007FFFEF0E2000-memory.dmp

Filesize
10.8MB

Download
memory/3936-892-0x0000029E299C0000-0x0000029E299E6000-memory.dmp

Filesize
152KB

Download
memory/3964-4306-0x0000000007E30000-0x0000000007E41000-memory.dmp

Filesize
68KB

Download
memory/3964-4170-0x00000000063B0000-0x0000000006416000-memory.dmp

Filesize
408KB

Download
memory/3964-4309-0x0000000008030000-0x0000000008042000-memory.dmp

Filesize
72KB

Download
memory/3964-4310-0x0000000008020000-0x000000000802A000-memory.dmp

Filesize
40KB

Download
memory/3964-4307-0x0000000007F80000-0x0000000007FA2000-memory.dmp

Filesize
136KB

Download
memory/3964-4302-0x0000000008260000-0x00000000088DA000-memory.dmp

Filesize
6.5MB

Download
memory/3964-4301-0x0000000007AE0000-0x0000000007B84000-memory.dmp

Filesize
656KB

Download
memory/3964-4300-0x0000000006EC0000-0x0000000006EDE000-memory.dmp

Filesize
120KB

Download
memory/3964-4291-0x0000000073470000-0x00000000734BC000-memory.dmp

Filesize
304KB

Download
memory/3964-4290-0x0000000007A90000-0x0000000007AC4000-memory.dmp

Filesize
208KB

Download
memory/3964-4305-0x0000000007EB0000-0x0000000007F46000-memory.dmp

Filesize
600KB

Download
memory/3964-4304-0x0000000007CA0000-0x0000000007CAA000-memory.dmp

Filesize
40KB

Download
memory/3964-4303-0x0000000007C20000-0x0000000007C3A000-memory.dmp

Filesize
104KB

Download
memory/3964-4166-0x0000000005470000-0x00000000054A6000-memory.dmp

Filesize
216KB

Download
memory/3964-4181-0x0000000006960000-0x00000000069AC000-memory.dmp

Filesize
304KB

Download
memory/3964-4180-0x00000000068D0000-0x00000000068EE000-memory.dmp

Filesize
120KB

Download
memory/3964-4167-0x0000000005BA0000-0x00000000061CA000-memory.dmp

Filesize
6.2MB

Download
memory/3964-4168-0x0000000005B40000-0x0000000005B62000-memory.dmp

Filesize
136KB

Download
memory/3964-4169-0x0000000006340000-0x00000000063A6000-memory.dmp

Filesize
408KB

Download
memory/3964-4308-0x0000000008E90000-0x0000000009436000-memory.dmp

Filesize
5.6MB

Download
memory/3964-4179-0x0000000006420000-0x0000000006777000-memory.dmp

Filesize
3.3MB

Download
memory/5568-2283-0x0000000000400000-0x0000000000711000-memory.dmp

Filesize
3.1MB

Download
memory/5568-2279-0x0000000006ED0000-0x0000000007010000-memory.dmp

Filesize
1.2MB

Download
memory/5568-2517-0x0000000000400000-0x0000000000711000-memory.dmp

Filesize
3.1MB

Download
memory/5568-2332-0x0000000000400000-0x0000000000711000-memory.dmp

Filesize
3.1MB

Download
memory/5568-2281-0x0000000000400000-0x0000000000711000-memory.dmp

Filesize
3.1MB

Download
memory/5568-2392-0x0000000000400000-0x0000000000711000-memory.dmp

Filesize
3.1MB

Download
memory/5568-4322-0x0000000000400000-0x000000000070F000-memory.dmp

Filesize
3.1MB

Download