PrivacyScore hosts lists of websites that are contributed by its users. You can browse our collection here.
The list is filtered by tag public Remove Filter
The listing is ordered according to the list popularity, i.e., the lists with the most views are shown at the top.
Currated list of french public web sites extracted from DILA data without .gouv.fr sites.
Cross-sectional site test survey
This list contains the websites of the Top 20 German Cities in terms of population count according to Wikipedia.
Alle österreichischen Pflichtversicherer der Sozialversicherung (außer KFAs ohne Webseite)
German cities (Rheinland-Pfalz) using https
Currated list of .gouv.fr sites extract from DILA and AFNIC datasets.
Reviewed cross-sectional site test survey
All partner in the area of VBN
Italian national and local institutions
A list of websites related to towns in the German Hohenlohekreis district.
The list contains the public website hosted and managed by European Environment Agency (www.eea.europa.eu) and its network (Eionet). The aim is to increase awareness about privacy and security features of these websites and help comply with Regulation (EU) 2018/1725 (GDPR for EU institutions and agencies). The attributes are Service location (the url), Strategic area (for internal use), Name (site name), Purpose (short description and purpose of the site), Availability (how important the site should be up and running).
Official websites of public administrations of Italy (from IndicePA / Monitora PA) which are in the Tranco top 1 million list.
Counterfeit Checks https://web.archive.org/web/20211213210443/https://pix.mirtouf.fr/FGOiWXlW.jpg https://web.archive.org/web/20211213210647/https://pix.mirtouf.fr/76aikMd7.jpg https://web.archive.org/web/20211213211211/https://pix.mirtouf.fr/PHUBJJxD.jpg Counterfeit Check Details: Amount $*******834.83 Routing Number/ABA Number 00000***** Account Number ***0000** Check Number 0000******** CASC Bank of America P.O. BOX 34414 SEATTLE, WA 98124-1414 Amount $*******853.48 Routing Number/ABA Number 00000***** Account Number ***0000** Check Number 0000******** CASC Bank of America P.O. BOX 34414 SEATTLE, WA 98124-1414 Amount $*******866.41 Routing Number/ABA Number 00000***** Account Number ***0000** Check Number 0000******** CASC Bank of America P.O. BOX 34414 SEATTLE, WA 98124-1414 --------------------------------------------------------------------------- The Headquarters of where this kind of activity proliferates https://www.nacarchitecture.com/portfolio/SCCScience.html Consumer Reviews of Bartleby https://www.trustpilot.com/review/bartleby.com https://www.mamma.com/us/bartleby-com https://www.complaintsboard.com/bartlebycom-b110137 https://www.sitejabber.com/reviews/bartleby.com https://www.defaulters.com/scam/bartleby-com/ NOVAD Management Consulting Unaccredited BBB Profile https://www.bbb.org/us/ok/oklahoma-city/profile/business-consultant/novad-management-consulting-0995-90043337/complaints Current Alerts For This Business Pattern of Complaint: The BBB files indicate that this business has a pattern of complaints. In the last 3 months, the BBB has received a large number of complaints against NOVAD regarding letters informing their clients of the transfer of their mortgage loan servicing. Consumers who are attempting to get information or payoff statements for their loans have difficulty contacting NOVAD due the transition and the Covid-19 pandemic. BBB is working closely with Novad find a resolution for the underlining cause for these complaints. ComplaintsBoard Listings on NOVAD Management [Other victims they've been trying to defraud and swindle] https://www.complaintsboard.com/us/ok/oklahoma-city/novad-management-consulting-2401-nw-23rd-st Home Warranty Direct Scam Discussion Board Listings https://800notes.com/Phone.aspx/1-800-299-4998 https://calldetective.net/800-299-4998/ Xact Loan BBB Unaccredited Listing https://www.bbb.org/us/oh/cincinnati/profile/debt-consolidation-services/xact-loan-0292-90040588 Metromile, Inc. Auto Insurance BBB Listing https://www.bbb.org/us/ca/san-francisco/profile/auto-insurance/metromile-inc-1116-444470 ISN Corporation BBB Unaccredited Profile Not Elsewhere Classified After Investigation https://www.bbb.org/us/md/bethesda/profile/not-elsewhere-classified-after-investigation/isn-corporation-0241-236001320 --------------------------------------------------------------------------- Kevin Brockbank https://archive.ph/HWtYX Nicole Duvernay https://archive.is/wip/dTvcv Pamela Jane Herrebout https://archive.is/tjuAs/718389dae0b20accc1132d55c40c3bc1105b4d5a License Plate: ABC5598 VIN: 4S3BMBA69B3219875 Retail Value: $4,140 Private Party Value: $9,010 Make: SUBARU Model: Legacy Year: 2011 Body Class: Sedan/Saloon Doors: 4 Series: - Type: PASSENGER CAR Jenny Martin https://archive.ph/HWtYX Scott Satake https://archive.ph/HWtYX Alison Carol Riegel https://archive.ph/HWtYX Colin Smith https://archive.is/cGgjs Lucas Werner https://archive.ph/HWtYX Douglas Revelle Carney https://archive.ph/HWtYX Michael William Stanfield https://archive.ph/HWtYX Anthony Owen Lucas https://archive.is/GFGay Tammerra Howe/Tamerra M Howe [Anti-Vaxxer] From Otis Orchards, WA https://web.archive.org/web/20210815164135/https://lutim.lagout.org/1jtkQSUV/d29PvX8Y.png Jess Edmondson [Anti-Vaxxer] https://web.archive.org/web/20210827220819/https://upload-image.rosariosis.com/L7H62MW5/tWK5R8BV.png Taylor Jones [Anti-Vaxxer] https://web.archive.org/web/20210827220908/https://upload-image.rosariosis.com/UrQGC0EO/TSXjiEc8.png Ruvim Gavrilyuk https://archive.is/rUmcZ Lexi Michelle Dawson https://archive.is/n0vEz/950e6e5569ee4332103372fa78a84a472f15d921 Sean Haskins Yolanda Hahn/Yolanda M Mitchell https://web.archive.org/web/20210731185337/https://lutim.stemy.me/XhUgl6q0/Wq0moiVR.png Thomas Crafts [Lying Snitch] https://archive.ph/7kkyQ/ba62999896f44914f9e0148e6e7851249f6983c7.jpg Jaymie Crafts [The mother of the snitch] Tiffany Nicole Husein https://archive.ph/HWtYX Norma Cantu https://archive.ph/HWtYX Heather Rebecca Slaminski https://nb-no.facebook.com/heather.slaminski Cory James Humphrey https://archive.ph/HWtYX Alexis Lisandro Guizar-Diaz https://web.archive.org/web/20210711052653/https://pbs.twimg.com/profile_images/1377032645213790210/3JM_gLVD_400x400.jpg Steven Smathers https://www.linkedin.com/in/steven-smathers-2042801bb Tito Ellis https://media-exp1.licdn.com/dms/image/C4D03AQGg_7tXkowy-Q/profile-displayphoto-shrink_200_200/0/1517029845793?e=1625097600&v=beta&t=PbE1QDMIXiVe71t9MDQJrxavMD7pOLKVoJ1BnH3AQrE Jordyn Noble https://www.linkedin.com/in/jordyn-reiter-65b5b2196 Guillermo Espinosa https://archive.ph/HWtYX Garrett William Clark https://archive.is/W0JVn Tanner Joseph Hundahl https://archive.ph/HWtYX Ger Moua https://www.ratemyprofessors.com/ShowRatings.jsp?tid=987470 Jason Eggerman Jay Reedy Broker License: #20121834 Managing Broker License: #8817 Full Name: Dr. Jamie Jo Diaz Pharm D. Provider Type: Individual Gender: Female Sole Proprietor: Yes, they are the sole owner of the medical practice. Definition: Pharmacist: An individual licensed by the appropriate state regulatory agency to engage in the practice of pharmacy. The practice of pharmacy includes, but is not limited to, assessment, interpretation,... WA Pharmacist Listings NPI: Their NPI Number is 1841624137 Learn what this is at: National Provider Identifier Standard from HHS and the Centers for Medicare & Medicaid Services. Additional: Useful things to add for visitors and potential patients: website links, office hours, specialties, etc. Aaron Kilfoyle Provider Data NPI Number 1770990608 Provider Name AARON KILFOYLE MS, LAT, ATC. Entity Type Individual Most Important Dates Provider Enumeration Date 07/11/2014 Last Updated 03/01/2021 Lori Hunt https://storage.zoominfo.com/-1509858032 Ryan Carstens https://media.spokesman.com/photos/2015/05/13/cit13_SCC.jpg Darik French https://media1.fdncms.com/inlander/imager/new-headline/u/original/2426999/protest1croppedweb.jpg Brandon Birdsill https://komonews.com/news/local/naked-man-arrested-in-community-college-womens-bathroom Steven Smathers https://www.medicarelist.com/counselor/steven-smathers-spokane-wa/ Stacey Reser - Helena, Montana https://www.linkedin.com/in/stacey-reser-9a0b5454 Spokane Community College "Honor Roll" https://www.spokesman.com/stories/2019/feb/22/area-students-make-honor-roll-at-spokane-community/ Ryan Murphy https://www.spokesman.com/stories/2013/oct/09/former-shadle-park-teacher-breaks-court-order-head/ Anthony JuJu Predisik https://www.spokesman.com/stories/2015/apr/03/supreme-court-rules-against-spokane-teachers-on/ Indian Trail Elementary https://www.spokaneschools.org/indiantrail Tyler Gabbard - North Central Wolfpack Football https://www.maxpreps.com/wa/spokane/north-central-wolfpack/football/roster/all-time/ Campus Safety / Department Directory https://www.spokaneschools.org/Page/334 North Central High School Class of 2011 https://www.spokesman.com/grads/north-central-high-school/2011/ North Central High School class lists - contact old friends https://old-friends.co/school.php?s=15692 Signature Quotations: "Don't take me. I am crazy." -Nicole Duvernay "Our goal is to kill creativity!" -Nicole Duvernay "I stole this off of the internet." -Nicole Duvernay admitting she is a thief and a liar by stealing math questions off of the internet that blatantly infringe on copyright "It's a conspiracy!" -Nicole Duvernay admitting that the entire Student Body at Spokane Community College was in on a conspiracy of silence in order to save face "We are going down this path together." -Nicole Duvernay "What happened?" -Nicole Duvernay "I'm not a real math teacher." -Nicole Duvernay admitting she is a fake "I.. Don't.. Actually... Remember..." -Nicole Duvernay on answering a question after she punked unsuspecting victims into taking a fraudulent excuse for a math course "Did I do something wrong?" -Nicole Duvernay attempting to guilt-trip with a loaded question "Be sure it isn't spiked." -Nicole Duvernay suggesting that the entire Student Body at Spokane Community College are open targets for what they did "Feeling awkward yet?" -How Nicole Duvernay answers questions with loaded insults to the students faces “I regret lighting the fireworks,” -Douglas Revelle Carney “I shouldn’t have done that.” -Douglas Revelle Carney “I don't feel real safe in my neighborhood anymore,” -Douglas Revelle Carney "I was stabbed three times, twice in the side, once in the arm right here,” -Douglas Revelle Carney "Stay in touch." -Carmen Green after the fact she tried to pull a fast one and take her potential victims insurance money for all they were worth. "welcome to higher edd" -Rob Vogel "I spit in his face." -Douglas Revelle Carney explaining what he did to get arrested at Spokane Community College after admitting to assaulting a dean “When I got to SCC, I didn’t believe that I was smart,” -Douglas Revelle Carney “As Doug became comfortable in the classroom, he responded very well to group work, particularly peer editing situations where students had opportunity to pool their knowledge and assist one another,” -Sharon Miller Whiteknighting for a convicted felon/Loan Shark “Doug became so good at this that students often asked him after class to help them with their essays.” -Sharon Miller giving credibility to a violent criminal who really belongs in federal prison “He is patient and listens well,” -Sharon Miller obviously oblivious to a complete stranger from the streets "That depends on your opinion." -Nicole Duvernay's view on Global Warming "Just let it go..." -Colin Smith (who works for these scumbags), telling others to gives criminals a free-pass and to just "sit back and enjoy all of it" "You will be successful." -Kevin Brockbank talking to his victims collectively that had their credit and debit information charged all year without notice "Actually, I'm making it up." -Nicole Duvernay bragging about insulting student intelligence "I once fell off a cliff" -Alison Carol Riegel "I'm not a professional." -Scott Satake "Scary Stuff!" -Scott Satake making a sarcastic comment during a conversation "We don't know the right answer." -Ger Moua "We only care about our money." -Ger Moua "You could keep digging yourself deeper... And then *poof* you're gone.." -Tito Ellis making an implied threat of being unpersoned from history. "You have to discriminate." -Cory James Humphrey thinking he knows it all "And I'll fail you and blame you!" -Tiffany Nicole Husein admitting she sets students up for failure by taking their money and making them do assignments with no objective truth to them all done with a smile on her ugly mug "I can muddy the water." -Tiffany Nicole Husein Admitting that she commits white-collar crime and can get away with it. "I don't understand." -Carmen Green feigning confusion to act like she doesn't know what she is listening to after the fact she makes people wait over 15 minutes and that this is how she talks to people who's time she wasted. "If it is off-campus then there is nothing we can do." -Scott Satake Admitting that he and the faculty at Spokane Community College take the side of criminals and trouble-makers and make no effort towards accountability. "Go see mental health." -Scott Satake soliciting false pretenses "I had a bet that you wouldn't make it back." -Douglas Revelle Carney admitting he puts money through russian roulette with students lives "The only person you confuse is yourself." -Douglas Revelle Carney instigating a fight "I want to go into business to sell foreign merchandise." -Douglas Revelle Carney "I'm 'that girl' that nobody wanted anything to do with." -Lexi Michelle Dawson "I got kicked out of this college ten years ago for getting into a fight with the dean of this campus." -Douglas Revelle Carney "I don't mean to be rude." -Michael William Stanfield "Hahahaaha haahahahahah EXACTLY!" -Michael William Stanfield laughing at his own demise "We call that a middle finger." -Anthony Owen Lucas "Don't you mean a 'honeytrap'?" -Michael William Stanfield implying that Pamela Jane Herrebout is a con-artist "You better be ready to f*****g kill me!" -Douglas Revelle Carney inviting pre-meditated murder in his direction "I will video stalk you." -Travis Lee Humphries admitting to violating people's safety and personal boundaries "This is my last time victimizing all of you!" -Nicole Duvernay admitting she rips people off "Hahaha I love confusing people!" -Nicole Duvernay "You may be feeling ripped off." -Nicole Duvernay "These next few weeks are really going to suck for you!" -Nicole Duvernay "Garrett is my favorite!" -Nicole Duvernay "Your my favorite!" -Nicole Duvernay to Jordyn C Noble/Jordyn Reiter during a final exam in front of over 20 people after she got a special invitation to have a thanksgiving dinner at her place of residence. "Here are my favorites!" -Nicole Duvernay pointing to Anthony Owen Lucas and Michael William Stanfield out in a hallway waiting for her to unlock the doors "What works for you does not work for me." -Michael William Stanfield "Who is doing this?" -Michael William Stanfield "We call that natural selection." -Anthony Owen Lucas "I prefer cheating." -Anthony Owen Lucas on being a self-described cheater before doing the final exam and giving dirty looks to people "Change your phone number." -Pamela Herrebout/Pamela Huffman "Sue Margado introduced radiology student Pam Herrebout who shared her story on her road to recovery from alcoholism to brain surgery." -Pamela Jane Herrebout on official record for being both an alcoholic and a batshit insane con-artist Nicole Duvernay Ratemyprofessor Profile https://archive.is/hBMKv What Nicole Duvernay Really Thinks of herself as https://archive.is/WcxqF Her Dead Relative https://archive.is/23XDx/044820f46396374937812b540334775d8230243a Photo Bomb https://archive.is/Cd4u Hosted Kiry Shabazz to make fun of people who have been segregated against their will. https://archive.is/4XCsX Michael William Stanfield's Metacafe Profile metacafe.com/channels/will0814 Douglas Revelle Carney's SWAT Arrest https://www.khq.com/news/swat-standoff-in-west-central-ends-with-arrest/article_8fa7a037-b340-5dad-8931-0ac5408ba55e.html Name Court Case Number Judgment Record Court Information 1 Brockbank, Kevin Charles Defendant Spokane County Dist 9Z1086041 12-02-2019 Name Court Case Number Judgment Record Court Information 1 Werner, Lucas Respondent Thurston County Dist UHS16-026 02-22-2016 2 Werner, Lucas Colby Defendant Grays Harbor Dist #2 C00216012 07-16-1998 3 Werner, Lucas Colby Defendant Olympia Municipal Ct 2Z0638820 09-17-2012 4 Werner, Lucas Colby Respondent Thurston County Dist DV12-0076 08-06-2012 5 Werner, Lucas Colby Defendant Grays Harbor Dist #2 C00216013 07-16-1998 6 Werner, Lucas Colby Defendant Olympia Municipal Ct 3Z0205435 02-28-2013 7 Werner, Lucas Colby Defendant Thurston County Dist 2Z0525297 08-15-2012 8 Werner, Lucas Colby Respondent Spokane County Dist 16720694 01-05-2017 9 Werner, Lucas Colby Defendant Spokane Municipal N00051841 08-19-2020 10 Werner, Lucas Colby Defendant Spokane Municipal N00044042 08-11-2020 11 Werner, Lucas Colby Defendant Spokane Municipal N00063296 07-13-2020 12 Werner, Lucas Colby Defendant Spokane Municipal N00058732 04-20-2021 Name Court Case Number Judgment Record Court Information 1 Slaminski, Heather Rebecca Defendant Stanfield, Michael William Defendant Spokane Municipal XZ0819890 11-09-2020 Name Court Case Number Judgment Record Court Information 1 Riegel, Alison Carol Defendant Upper Kittitas Dist 7Z0478568 03-16-2017 2 Riegel, Alison Carol Defendant Spokane County Dist 1A0313484 03-10-2021 Name Court Case Number Judgment Record Court Information 1 Gavrilyuk, Ruvim V Sr Defendant Spokane County Dist 6Z0691142 07-07-2016 2 Gavrilyuk, Ruvim V Sr Defendant Spokane County Dist 8Z0983066 10-03-2018 3 Gavrilyuk, Ruvim V Sr Defendant Spokane County Dist 7Z0092385 11-13-2017 4 Gavrilyuk, Ruvim V Sr Defendant Spokane County Dist 9Z0438602 04-15-2019 5 Gavrilyuk, Ruvim V Sr Defendant Clark County Dist 8Z0662618 06-25-2018 6 Gavrilyuk, Ruvim V Sr Defendant Spokane County Dist 1A0332602 04-26-2021 Smith, Colin Defendant Clark County Dist 13C7410-6 10-29-2013 Smith, Colin Defendant Tacoma Municipal A00136926 06-27-2014 Smith, Colin Defendant Tacoma Municipal A00136927 06-27-2014 Smith, Colin Defendant Clark County Dist 17C2824-2 07-13-2017 Smith, Colin Defendant Spokane County Dist 18182335 10-05-2018 Smith, Colin Defendant Lynnwood Municipal 180286517 11-08-2018 Smith, Colin Petitioner Sno Co-south Div C03-02824 12-03-2003 Smith, Colin Defendant Lynnwood Municipal 190190635 07-23-2019 Smith, Colin Defendant Lynnwood Municipal 210036313 03-01-2021 Case #: CR00000526-00 Defendant: FARMER, MELANIE Offense Date: 08/23/2000 Hearing: 03/15/2001 Charge: FORGERY Code Section: 18.2-172 Frederick Circuit Court Case #: CR00000526-01 Defendant: FARMER, MELANIE Offense Date: 08/23/2000 Hearing: 07/10/2003 Charge: REV.PROB.(FORGERY) Code Section: 19.2-306 Frederick Circuit Court Case #: CR00000527-00 Defendant: FARMER, MELANIE Offense Date: 08/23/2000 Hearing: 03/15/2001 Charge: UTTER FORGED CHECK Code Section: 18.2-172 Frederick Circuit Court Case #: CR00000527-01 Defendant: FARMER, MELANIE Offense Date: 08/23/2000 Hearing: 07/10/2003 Charge: REV.PROB.(UTTERING) Code Section: 19.2-306 Frederick Circuit Court Case #: CR00000526-01 Defendant: FARMER, MELANIE Defendant Information Gender: FEMALE Race: WHITE DOB: 02/13/**** Attorney: WILLIAM CRANE Case/Charge Information Defendant Status: BAIL Filed Date: 04/03/2003 Locality: COMMONWEALTH OF VA Code Section: 19.2-306 Charge: REV.PROB.(FORGERY) Case Type: FELONY Class: UNCLASSIFIED Commenced By: REINSTATEMENT Offense Date: 08/23/2000 Arrest Date: 04/10/2003 Amended Code Section: Amended Charge: Amended Case Type: Amended Class: Appeal Information Appeal Date: Hearing Information Date Time Result Type Courtroom Plea Duration Jury 07/10/2003 09:00 AM SENTENCED REVOCATION 3A 05/08/2003 09:00 AM CONTINUED REVOCATION 3A 04/10/2003 09:00 AM SET FOR TRIAL MOTION - OTHER PRE-TRIAL 3A Disposition Information Disposition: SENTENCE/PROBATION REVOKED Disposition Date: 07/10/2003 Concluded By: GUILTY PLEA Jail/Penitentiary: Concurrent/Consecutive: Life/Death: Sentence Time: Sentence Suspended: Program Type: Probation Type: Probation Time: Probation Starts: Operator License Suspension Time: Restriction Effective Date: Operator License Restrictions: Military: Traffic Fatality: Court/DMV Surrender: Driver Improvement Clinic: VASAP: Restitution Paid: Restitution Amount: Fine: * Costs: $138.00 * Fine/Costs Paid: YES Fine/Costs Paid Date: 11/25/2003 * This system cannot process online payments at this time. Please refer to ' How to Pay Traffic Tickets and Other Offenses ' for more information. Service/Process No Services/Processes found. Pleadings/Orders Seq. # Date Type Party Judge Book & Page Instrument Remarks 3 07/25/2003 FINAL ORDER 107, 613 2 05/08/2003 ORDER 106, 1084 1 04/10/2003 ORDER 106, 660 Frederick Circuit Court Case #: CR00000526-00 Defendant: FARMER, MELANIE Defendant Information Gender: FEMALE Race: WHITE DOB: 02/13/**** Attorney: LUKE BOYD Case/Charge Information Defendant Status: BAIL Filed Date: 10/31/2000 Locality: COMMONWEALTH OF VA Code Section: 18.2-172 Charge: FORGERY Case Type: FELONY Class: CLASS 5 Commenced By: INDICTMENT Offense Date: 08/23/2000 Arrest Date: 09/07/2000 Amended Code Section: Amended Charge: Amended Case Type: Amended Class: Appeal Information Appeal Date: Hearing Information Date Time Result Type Courtroom Plea Duration Jury 03/15/2001 09:00 AM SENTENCED PRE-SENTENCE REPORT 3A 01/25/2001 09:00 AM CONTINUED PLEA 3A 12/15/2000 09:00 AM CONTINUED MOTION - OTHER PRE-TRIAL 3A 11/09/2000 09:00 AM CONTINUED MOTION - OTHER PRE-TRIAL 3A 11/09/2000 09:00 AM TRUE BILL GRAND JURY 3A Disposition Information Disposition: GUILTY Disposition Date: 03/15/2001 Concluded By: GUILTY PLEA Jail/Penitentiary: PENITENTIARY Concurrent/Consecutive: Life/Death: Sentence Time: 2 Year(s) Sentence Suspended: 2 Year(s) Program Type: Probation Type: SUPERVISED Probation Time: 3 Year(s) Probation Starts: Operator License Suspension Time: Restriction Effective Date: Operator License Restrictions: Military: Traffic Fatality: Court/DMV Surrender: Driver Improvement Clinic: VASAP: Restitution Paid: Restitution Amount: Fine: * Costs: $828.50 * Fine/Costs Paid: YES Fine/Costs Paid Date: 07/24/2003 * This system cannot process online payments at this time. Please refer to ' How to Pay Traffic Tickets and Other Offenses ' for more information. Service/Process No Services/Processes found. Pleadings/Orders Seq. # Date Type Party Judge Book & Page Instrument Remarks 6 04/06/2001 FINAL ORDER 99, 1417 5 03/14/2001 ORDER 99, 1040 4 02/02/2001 ORDER 99, 547 3 01/05/2001 ORDER 99, 200 2 11/28/2000 ORDER 98, 1575 1 11/09/2000 ORDER 98, 1243 Frederick Circuit Court Case #: CR00000527-00 Defendant: FARMER, MELANIE Defendant Information Gender: FEMALE Race: WHITE DOB: 02/13/**** Attorney: LUKE BOYD Case/Charge Information Defendant Status: BAIL Filed Date: 10/31/2000 Locality: COMMONWEALTH OF VA Code Section: 18.2-172 Charge: UTTER FORGED CHECK Case Type: FELONY Class: CLASS 5 Commenced By: INDICTMENT Offense Date: 08/23/2000 Arrest Date: 09/07/2000 Amended Code Section: Amended Charge: Amended Case Type: Amended Class: Appeal Information Appeal Date: Hearing Information Date Time Result Type Courtroom Plea Duration Jury 03/15/2001 09:00 AM SENTENCED PRE-SENTENCE REPORT 3A 01/25/2001 09:00 AM CONTINUED PLEA 3A 12/15/2000 09:00 AM CONTINUED MOTION - OTHER PRE-TRIAL 3A 11/09/2000 09:00 AM CONTINUED MOTION - OTHER PRE-TRIAL 3A 11/09/2000 09:00 AM TRUE BILL GRAND JURY 3A Disposition Information Disposition: GUILTY Disposition Date: 03/15/2001 Concluded By: GUILTY PLEA Jail/Penitentiary: PENITENTIARY Concurrent/Consecutive: Life/Death: Sentence Time: 2 Year(s) Sentence Suspended: 2 Year(s) Program Type: Probation Type: SUPERVISED Probation Time: 3 Year(s) Probation Starts: Operator License Suspension Time: Restriction Effective Date: Operator License Restrictions: Military: Traffic Fatality: Court/DMV Surrender: Driver Improvement Clinic: VASAP: Restitution Paid: Restitution Amount: Fine: * Costs: * Fine/Costs Paid: Fine/Costs Paid Date: * This system cannot process online payments at this time. Please refer to ' How to Pay Traffic Tickets and Other Offenses ' for more information. Service/Process No Services/Processes found. Pleadings/Orders Seq. # Date Type Party Judge Book & Page Instrument Remarks 1 04/06/2001 FINAL ORDER 99, 1417 Frederick Circuit Court Case #: CR00000527-01 Defendant: FARMER, MELANIE Defendant Information Gender: FEMALE Race: WHITE DOB: 02/13/**** Attorney: WILLIAM CRANE Case/Charge Information Defendant Status: BAIL Filed Date: 04/03/2003 Locality: COMMONWEALTH OF VA Code Section: 19.2-306 Charge: REV.PROB.(UTTERING) Case Type: FELONY Class: UNCLASSIFIED Commenced By: REINSTATEMENT Offense Date: 08/23/2000 Arrest Date: 04/10/2003 Amended Code Section: Amended Charge: Amended Case Type: Amended Class: Appeal Information Appeal Date: Hearing Information Date Time Result Type Courtroom Plea Duration Jury 07/10/2003 09:00 AM SENTENCED REVOCATION 3A 05/08/2003 09:00 AM CONTINUED REVOCATION 3A 04/10/2003 09:00 AM SET FOR TRIAL MOTION - OTHER PRE-TRIAL 3A Disposition Information Disposition: SENTENCE/PROBATION REVOKED Disposition Date: 07/10/2003 Concluded By: GUILTY PLEA Jail/Penitentiary: JAIL Concurrent/Consecutive: Life/Death: Sentence Time: 4 Month(s) Sentence Suspended: Program Type: Probation Type: SUPERVISED Probation Time: 3 Year(s) Probation Starts: Operator License Suspension Time: Restriction Effective Date: Operator License Restrictions: Military: Traffic Fatality: Court/DMV Surrender: Driver Improvement Clinic: VASAP: Restitution Paid: Restitution Amount: Fine: * Costs: * Fine/Costs Paid: Fine/Costs Paid Date: * This system cannot process online payments at this time. Please refer to ' How to Pay Traffic Tickets and Other Offenses ' for more information. Service/Process No Services/Processes found. Pleadings/Orders Seq. # Date Type Party Judge Book & Page Instrument Remarks 1 07/25/2003 FINAL ORDER 107, 613 Douglas Revelle Carney: Wealth Score 6 Green Score 29 Donor Score 11 Travel Score 29 Tech Score 29 Shopping Score 20 Carmen Green UBI #: 604521018 [Does not Exist] Qualifications Years in Practice: 21 Years License: Washington / LF00002255 School: Pacific Lutheran University Year Graduated: 2001 I am a Licensed Marriage and Family Therapist and a Licensed Mental Health Counselor with over 20 years of experience. Additional Credentials Membership: American Association of Marriage and Family Therapists / 136512 Member Since: 2011 License No. and State: LF00009493 Washington State Tiffany Nicole Husein UBI# 603470018 [Does not exist] License Number: PY60196500 NPI number: 1548685613 Show entries Search (All columns are searched for letters/numbers entered): FirstPrevious1NextLast Name Start Date End Date Court Case No. Location Hearing Type Case Type Official Status HOWE, TAMERRA M 7/14/2020 8:00 AM 7/14/2020 DC 1960989 Ex Parte Hearing Small Claims-SC FASSBENDER, JENNIFER L Held PRATT, KOURTNIE; HOWE, TAMERRA M Case: 1960989 Charges: N/A Case Type: Small Claims-SC File Date: 09/16/2019 Incident Number: N/A Court: District Court Case Status: Open Hearings Hearing Type Date/Time Location Official Name Status Ex Parte Hearing 07/14/2020 8:00 am FASSBENDER, JENNIFER L Held Non Jury Trial - Small Claim 07/08/2020 9:00 am FASSBENDER, JENNIFER L Not Held-Other Non Jury Trial - Small Claim 04/27/2020 9:00 am FASSBENDER, JENNIFER L Not Held-Canceled Non Jury Trial - Small Claim 02/03/2020 9:00 am FASSBENDER, JENNIFER L Not Held-Continued Non Jury Trial - Small Claim 11/19/2019 9:00 am FASSBENDER, JENNIFER L Not Held-Continued Name: Alison Carol Riegel Wayup Profile: https://www.wayup.com/profile/Alison-Riegel-37695893a7/ Simbi: https://simbi.com/alison-riegel Physician Assistant Profile: https://www.physicianassistantforum.com/profile/182750-riegel/ Youshareproject profile: https://web.archive.org/web/20210619025525/https://www.youshareproject.com/author/aglimpseofsanity/ Pinterest: https://www.pinterest.com/littleriegel/ School: Gonzaga University Education: Bachelor of Arts in Psychology Username: Littleriegel **Please note that Alison Carol Riegel stole a photo of a young woman walking her dog. That isn't her original photo.** Alison Riegel Graduates from Gonzaga University Alison Riegel of Sammamish, WA recently earned the following degree(s): Bachelor of Arts in Psychology Honors: with Distinction Gonzaga University’s Commencement ceremonies were held on May 9, 2021 at Union Stadium. Gonzaga University is a private Catholic, Jesuit, and humanistic university providing education to more than 7,800 students. Situated along the Spokane River near downtown Spokane, Washington, Gonzaga is routinely recognized among the West's best comprehensive regional universities. Gonzaga offers 75 fields of study, 26 master's degrees, doctorate degrees in leadership studies and nursing, and a juris doctor degree through the School of Law. 11/21/20 Spokane Interview By Kelsi , October 21, 2020 in WASHINGTON: University of Washington Prev 1 2 Page 2 of 2 kaylaraphillips Newbie Members 1 2 posts Posted November 20, 2020 So excited to meet everyone tomorrow! I'm so nervous! Kayla Riegel Newbie Members 3 2 posts Posted November 21, 2020 Hey! Found you guys late! 🙂 I'm so glad I got meet you guys and hope to meet you in person soon. Alison Riegel kjgrover32 Member Members 4 14 posts Posted November 21, 2020 Good luck to every one! Was great meeting with you all. oit20 Newbie Members 2 2 posts Posted November 24, 2020 Has anyone heard anything yet? I’m going crazy 😂 Daysha Crosier Aroohoo Member Members 19 16 posts Posted November 24, 2020 I just got the call about 20 minutes ago... I cried like an absolute baby. My mouth was dry from all of it, so I tried to drink some of my coffee. Now my stomach hurts. But... I got in. Like 3 Jwahlquist Member Members 28 29 posts Posted November 24, 2020 Those of you who are accepted join our facebook page "MEDEX Spokane Class 25" 🙂 Like 1 KarenAlexander Newbie Members 5 3 posts Posted November 24, 2020 I got accepted!! So excited! Karen Like 4 kjgrover32 Member Members 4 14 posts Posted November 25, 2020 I also have been accepted! Good luck to those still waiting! Like 3 Riegel Newbie Members 3 2 posts Posted November 25, 2020 Congratulations to everyone so far!! I’m still waiting 😅 Like 3 Kelsi Member Members 9 11 posts Author Posted November 25, 2020 3rd times a charm for this girl! Beyond excited! Like 3 rm2020 Newbie Members 2 6 posts Posted November 25, 2020 (edited) I got notice that I am waitlisted for now. Anyone else? Congrats to those not stuck in limbo! Edited November 25, 2020 by rm2020 Typo DjH2020 Member Members 9 12 posts Posted November 25, 2020 I got the call this afternoon!!! I’m so excited and on cloud nine right! Good luck to everyone still waiting! David Prev 1 2 Page 2 of 2 11/21/20 Spokane Interview By Kelsi , October 21, 2020 in WASHINGTON: University of Washington 1 2 Next Page 1 of 2 Kelsi Member Members 9 11 posts Posted October 21, 2020 Wanted to start a group for those invited to interview on 11/21 via Zoom. Almost embarrassed to say but this will be my 3rd year interviewing! Hoping 3rd times a charm. It’s been very helpful to meet fellow interviewees before the big day, so hoping we can set up a zoom meeting for us to all meet! I’d suggest doing it on 11/20 unless that doesn’t work for most. Very excited! Like 3 MDalpias Advanced Member Members 19 37 posts Posted October 21, 2020 Kelsi, I have not gotten an interview for this date. BUT! I think its awesome you've kept on it and come back each year. Good luck! medworldpa Newbie Members 0 2 posts Posted October 21, 2020 When did you receive the invite to interview in November? Kelsi Member Members 9 11 posts Author Posted October 22, 2020 5 hours ago, medworldpa said: When did you receive the invite to interview in November? October 19 Like 1 caltmen Member Members 3 10 posts Posted October 22, 2020 I am interviewing this date as well! I’d love to talk and meet any and everyone! Like 2 kaylaraphillips Newbie Members 1 2 posts Posted October 24, 2020 Hi everyone! I am fortunate enough to get to interview this day as well! I can't wait to meet all of you and I am all for a prep zoom meeting! See you soon, Kayla Like 1 kjgrover32 Member Members 4 14 posts Posted October 25, 2020 Hello everyone! I also will be interviewing on Nov. 21. I think it would be nice to meet everyone on the 20th as well! Good luck to us all. Like 1 kjgrover32 Member Members 4 14 posts Posted October 27, 2020 Where is everyone from nd what re your backgrounds? I'm from Boise Idaho area and work in medical imaging. I have been working in x Ray the last few years. Kelsi Member Members 9 11 posts Author Posted October 27, 2020 1 hour ago, kjgrover32 said: Where is everyone from nd what re your backgrounds? I'm from Boise Idaho area and work in medical imaging. I have been working in x Ray the last few years. I’m from Coeur d’ Alene and have been a scribe, patient care tech and now a medical assistant. KarenAlexander Newbie Members 5 3 posts Posted October 30, 2020 I’m also interviewing this date and would love to do a meet and greet the day before via zoom! I live on the north side of Spokane and work at two local hospitals as a speech language pathologist. This is my first time applying to PA school. I have a home and family here, and I plan to stay in Spokane long term. I look forward to meeting everyone! Karen Alexander tahpa Newbie Members 1 5 posts Posted October 31, 2020 Hi all! I am interviewing this day and I think it would be a great idea for us to meet beforehand! Looking forward to meeting you all. Taylor Aroohoo Member Members 19 16 posts Posted November 1, 2020 Excited and nervous to interview with you all in 20 days... Does anyone know about how many people are interviewed in each group and how they break down the schedule for the day? I was not able to attend the information sessions last fall so I fell doubly nervous because I am certain there was information provided that I very much wish I had gotten. CC background... We live about an hour south of Spokane in a tiny little farming community. I work another hour south of there in a CAH as an NOC NAC and ER Tech. I would love to meet on the 20th if later in the day is possible? KateK Newbie Members 0 2 posts Posted November 3, 2020 (edited) Hi all! I was also invited to interview for this date in Spokane and would love to meet people before hand! I was born in rural Eastern Wa, and have grown up in the Spokane area my whole life. I am currently living in Portland as my husband finishes school at OHSU, then we plan to move back to the Spokane area and settle down. I have worked as an EMT, MA and am now educating patients as an exercise physiologist In cardiopulmonary rehab 🙂 This is my first time applying and first interview so definitely feeling the nerves! Good luck to all and I look forward to meeting you all! Kate Edited November 3, 2020 by KateK rm2020 Newbie Members 2 6 posts Posted November 5, 2020 Hi, I am also interviewing on this date. I would love to join the Zoom meet and greet, Friday 11/20 in the afternoon/evening works for me. I currently live and work in Spokane as a NAC at a hospital, and have worked in mental health counseling and ABA therapy in the past. Kelsi Member Members 9 11 posts Author Posted November 6, 2020 On 11/1/2020 at 3:27 AM, Aroohoo said: Excited and nervous to interview with you all in 20 days... Does anyone know about how many people are interviewed in each group and how they break down the schedule for the day? I was not able to attend the information sessions last fall so I fell doubly nervous because I am certain there was information provided that I very much wish I had gotten. CC background... We live about an hour south of Spokane in a tiny little farming community. I work another hour south of there in a CAH as an NOC NAC and ER Tech. I would love to meet on the 20th if later in the day is possible? Hey Congrats! I’m happy to talk about and answer any questions I can during the zoom meet and greet since I have some experience with these interviews, but of course I’ve never done one over zoom so it might be a little different. I can’t remember how many people are in each group but I’d guesstimate about 30, and it was a very long day but enjoyable. They do group interviews with 2 interviewers and 3 applicants at a time. You have 3 of these throughout the day. KarenAlexander Newbie Members 5 3 posts Posted November 13, 2020 I typed up a list of questions and tips about the interview from the info session. Just thought I would share for anyone who was interested. It’s pretty basic. I also heard from someone who interviewed at the last session that it was heavy on medical ethics. I found this online question bank (https://www.blackstonetutors.co.uk/100-medical-school-mmi-interview-ethical-questions--scenarios.html) that seems like a good resource for preparing for this part of the interview. What time should we zoom on the 20th? Karen PA Interview Questions.docx Like 1 kjgrover32 Member Members 4 14 posts Posted November 13, 2020 54 minutes ago, KarenAlexander said: I typed up a list of questions and tips about the interview from the info session. Just thought I would share for anyone who was interested. It’s pretty basic. I also heard from someone who interviewed at the last session that it was heavy on medical ethics. I found this online question bank (https://www.blackstonetutors.co.uk/100-medical-school-mmi-interview-ethical-questions--scenarios.html) that seems like a good resource for preparing for this part of the interview. What time should we zoom on the 20th? Karen PA Interview Questions.docx 13.52 kB · 2 downloads Great resources! Thank you! KateK Newbie Members 0 2 posts Posted November 16, 2020 On 10/21/2020 at 9:51 AM, Kelsi said: Wanted to start a group for those invited to interview on 11/21 via Zoom. Almost embarrassed to say but this will be my 3rd year interviewing! Hoping 3rd times a charm. It’s been very helpful to meet fellow interviewees before the big day, so hoping we can set up a zoom meeting for us to all meet! I’d suggest doing it on 11/20 unless that doesn’t work for most. Very excited! Kelsi, what time are you thinking to zoom on Friday? Later in the evening works best for me but I am flexible that day. Thanks! kjgrover32 Member Members 4 14 posts Posted November 16, 2020 21 minutes ago, KateK said: Kelsi, what time are you thinking to zoom on Friday? Later in the evening works best for me but I am flexible that day. Thanks! I agree, evening works best but I can do earlier if needed. Kelsi Member Members 9 11 posts Author Posted November 16, 2020 Evening works great for me too. I’m totally flexible with time so whatever y’all think. rm2020 Newbie Members 2 6 posts Posted November 17, 2020 What about 7 pm on Friday? Would that work for everyone? kjgrover32 Member Members 4 14 posts Posted November 17, 2020 1 hour ago, rm2020 said: What about 7 pm on Friday? Would that work for everyone? Is that pacific time? Kelsi Member Members 9 11 posts Author Posted November 18, 2020 (edited) 7 pacific time sounds good unless that’s too late for anyone farther East? My number is, two zero eight six nine nine seven nine two zero, if everyone sends me their name and email I can send out the Zoom invite! Edited November 19, 2020 by Kelsi Like 1 DjH2020 Member Members 9 12 posts Posted November 18, 2020 Hello all, I also have an interview on the 21st! Very excited. I am a reapplicant. I interviewed last year, but did not get a seat. I am an RT and have worked at Sacred Heart for the last 10 years. I live in Spokane Valley, have a family here, and would like to stay in the area long term as well. I think Friday evening at 1900 works great I am looking forward to this conference/interview with everyone. I think meeting beforehand will be beneficial and help ease the tension. David Hughes Like 2 Lntarango Newbie Members 0 1 post Posted November 20, 2020 Hi everyone, I will also be interviewing on this day! I am a re-applicant, however I did not receive an interview last time. I attended EWU for my undergrad and worked at Sacred Heart as a NAC for a little while before moving to a more rural hospital. Kelsi, my email is Lntarango4@hotmail.com I would love to be apart of the zoom call tomorrow! Laura Tarango 1 2 Next Page 1 of 2 WayUp logo Candidates Employers Login Alison Riegel About Me Hi! I'm finishing my undergrad hopefully within the next year and pursuing a Masters in Clinical Mental Health. I enjoy a wide variety of activities and value each learning opportunity. Life is as good as you make it, and I plan on making mine great. :) Education Gonzaga University December 2016 - December 2017 degree Bachelor's major Psychology Work Experience Pine Lake Covenant Church Child Care Provider August 2016 - present company Pine Lake Covenant Church title Child Care Provider overview • One of the mothers that are part of the program contacted the head of the program to ask for my details specifically to continue babysitting outside of the program. • I help run a classroom of 5 toddlers. We engage in learning activities and make sure the children are safe and happy. Guess Sales Associate April 2014 - March 2015 company Guess title Sales Associate overview • I was employee of the month with the top sales the first two months I worked there. • I interacted with customers on the floor providing answers to questions, offering suggestions, and making sure each need is met. • I consistently met the sales goal during each shift. Sammamish Library Volunteer August 2009 - November 2012 company Sammamish Library title Volunteer overview • I was punctual and communicated clearly if anything came up. • I helped pull books that people had requested, organized the hold sections, and offered help when asked. Fun Fact I once fell off a cliff Skills Languages Skills Leadership Research Team Member Theater Choir member Dance Hobbies Hiking There's nothing like standing on top of a mountain enjoying the view. Writing I've loved writing since I could hold a pencil. I have written songs, poems, short stories, blog regularly, and have two novels I am working on. I also journal occasionally. I hope to be published one day. Name Court Case Number Judgment Record Court Information 1 Albrecht, Pamela Trudel Defendant Douglas District 6Z0043160 01-19-2016 Name Court Case Number Judgment Record Court Information 1 Herrebout, Pamela J RESPONDENT S17 King Co Superior Ct 07-3-00621-8 01-10-2007 2 Herrebout, Pamela J TAXPAYER King Co Superior Ct 16-2-24854-3 Available 10-13-2016 3 Herrebout, Pamela Jane Defendant King County District 4Z0344429 03-20-2014 4 Herrebout, Pamela Jane Defendant Island County Dist 6Z1036649 10-19-2016 Judgment Record Number Name Participant File Date 16-9-19269-1 HERREBOUT, PAMELA J DEBTOR 10/13/2016 16-9-19269-1 WASHINGTON STATE OF EMPLOYMENT CREDITOR 10/13/2016 Court: King Co Superior Ct Case Number: 16-9-19269-1 1 Young, Amanda Defendant Spokane County Dist 14154000 12-30-2014 2 Young, Amanda Defendant Fife Municipal FRL430927 05-17-2017 3 Young, Amanda Defendant Lk Forest Park Muni 170079681 08-15-2017 4 Young, Amanda Defendant Fife Municipal FRL445215 09-27-2017 5 Young, Amanda Defendant Clark County Dist 18C3228-3 07-13-2018 6 Young, Amanda Defendant Chelan Co Dist Court 98-001266 07-23-1998 7 Young, Amanda Defendant Puyallup Municipal 190300968 11-22-2019 Sub Docket Date Docket Code Docket Description Misc Info 10-13-2016 FILING FEE VOUCHERED Filing Fee Vouchered 20.00 10-13-2016 WARRANT OVERPAID BENEFITS EMPLY SEC Warrant Overpaid Benefits Emply Sec Against Deft, Pamela J Herrebout & The Mar (stat Int @ 12.00% Per A) Comm Company Name: ALL ABOUT IT L.L.C. File Number: 602948518 Filing State: Washington (WA) Filing Status: Inactive Social Engineering Example: https://web.archive.org/web/20200529172721/https://postimg.cc/pp4kt4cy https://web.archive.org/web/20200529172901/https://postimg.cc/R3QTKFSn https://web.archive.org/web/20200330163543/https://postimg.cc/06JN8bNS https://web.archive.org/web/20200330163715/https://postimg.cc/8F3ZqkKs https://web.archive.org/web/20200330163757/https://postimg.cc/crhb9h09 https://web.archive.org/web/20200330164406/https://postimg.cc/4Hnddhrb https://web.archive.org/web/20200330164023/https://postimg.cc/Lh99nyCv Patterns Recognized CAPEC-407: Pretexting Attack Pattern ID: 407 CAPEC-416: Manipulating Human Behavior Attack Pattern ID: 416 Notes: *Attractive Women referenced. *Animals referenced. *Buzzwords like "Unique" and "Original" and "Genuine" are frequently used. *"Free Gift" comes with a payment of $29.95 plus shipping and service of $4.95. *Manipulator attempts to build the connection through an appeal to philanthropy. POFHeadlines Archived Website Report https://www.hybrid-analysis.com/sample/40f148fe67bc914e110a971c9b2bcf3aa6cdb867c3c1014e4c2fac018125c8ee https://www.hybrid-analysis.com/sample/40f148fe67bc914e110a971c9b2bcf3aa6cdb867c3c1014e4c2fac018125c8ee/5e50a49d2439b471dc760d4e https://archive.is/QlsQo This report is generated from a file or URL submitted to this webservice on February 22nd 2020 03:48:55 (UTC) and action script Default browser analysis Guest System: Windows 7 32 bit, Professional, 6.1 (build 7601), Service Pack 1 Report generated by Falcon Sandbox v8.30 (C) Hybrid Analysis Analyzed on: 02/22/2020 03:48:55 (UTC) Environment: Windows 7 32 bit Threat Score: 88/100 AV Detection: 2% Phishing site MITRE ATT&CK(TM) Technique - T1035 - Service Execution ATT&CK ID T1035 Tactics Execution Permissions Required Administrator, SYSTEM Description Adversaries may execute a binary, command, or script via a method that interacts with Windows services, such as the Service Control Manager(...) Source https://attack.mitre.org/wiki/Technique/T1035 Informative Indicators Opened the service control manager MITRE ATT&CK(TM) Technique - T1179 - Hooking ATT&CK ID T1179 Tactics Credential Access, Persistence, Privilege Escalation Permissions Required Administrator, SYSTEM Description Windows processes often leverage application programming interface (API) functions to perform tasks that require reusable system resources(...) Source https://attack.mitre.org/wiki/Technique/T1179 Informative Indicators Installs hooks/patches the running process MITRE ATT&CK(TM) Technique - T1179 - Hooking ATT&CK ID T1179 Tactics Credential Access, Persistence, Privilege Escalation Permissions Required Administrator, SYSTEM Description Windows processes often leverage application programming interface (API) functions to perform tasks that require reusable system resources(...) Source https://attack.mitre.org/wiki/Technique/T1179 Informative Indicators Installs hooks/patches the running process MITRE ATT&CK(TM) Technique - T1179 - Hooking ATT&CK ID T1179 Tactics Credential Access, Persistence, Privilege Escalation Permissions Required Administrator, SYSTEM Description Windows processes often leverage application programming interface (API) functions to perform tasks that require reusable system resources(...) Source https://attack.mitre.org/wiki/Technique/T1179 Informative Indicators Installs hooks/patches the running process Network Related Malicious artifacts seen in the context of the input URL details Found malicious artifacts related to the input domain "http://pofheadlines.com" (IP: 69.89.31.169): ... URL: https://pofheadlines.com/wp-includes/js/jquery/jquery.js?ver=1.12.4 (AV positives: 2/72 scanned on 02/22/2020 03:52:06) URL: https://pofheadlines.com/xmlrpc.php (AV positives: 2/72 scanned on 02/19/2020 22:43:09) URL: http://pofheadlines.com/wp-content/themes/iribbon/inc/js/html5.js (AV positives: 2/72 scanned on 02/18/2020 19:08:03) URL: http://pofheadlines.com/ (AV positives: 2/72 scanned on 02/18/2020 13:34:54) URL: https://pofheadlines.com/wp-includes/js/comment-reply.min.js?ver=5.0.8 (AV positives: 2/72 scanned on 02/17/2020 23:59:35) File SHA256: 03f7b1097f58d1dd9bb791cc9e21e416d1fdfa0b758af6aa7714edddc752a5ea (AV positives: 4/73 scanned on 01/10/2020 01:34:10) File SHA256: b1ec43bf9699682442f816152032e426a2673107b668ccd541ba1f824d589029 (AV positives: 5/74 scanned on 01/09/2020 01:04:36) File SHA256: 67d353a19eee55b044861ef40ec1da8519f1b7300bce30a6a4c250e19788abf9 (AV positives: 1/73 scanned on 06/12/2019 03:55:28) File SHA256: c8d62662b0e43429408de3579e9be5038385ff532fd2b9af52a09951030bc01d (AV positives: 1/72 scanned on 06/05/2019 21:40:23) File SHA256: 93b262f676510c4006baa6cdb95735b5caa7ddfa1524a92a6022a01dc01c9ad4 (AV positives: 1/72 scanned on 04/08/2019 00:29:04) File SHA256: 56deec984a97d4066258357f7e59739f9161e51e6fa74d0d8e3c173229f2a928 (Date: 10/24/2017 23:56:51) File SHA256: 4e00b102f3e0ebd9273aee350a21d806182035c9c0cca635688d10ddc2d6a8e5 (Date: 10/24/2017 23:53:24) source Network Traffic relevance 10/10 This report was generated with enabled TOR analysis DNS Requests Domain Address Registrar Country c.statcounter.com 104.20.151.33 TTL: 193 pairNIC INC Organization: StatCounter Name Server: MAY.NS.CLOUDFLARE.COM Creation Date: Wed, 05 Jan 2000 00:00:00 GMT Flag of United States United States cm.g.doubleclick.net 172.217.9.130 TTL: 21599 MarkMonitor, Inc. Flag of United States United States cms.quantserve.com 192.184.69.196 TTL: 299 MarkMonitor, Inc. Flag of United States United States crt.usertrust.com 91.199.212.52 TTL: 425 CSC CORPORATE DOMAINS, INC. Flag of United Kingdom United Kingdom fonts.googleapis.com 172.217.13.74 TTL: 299 MarkMonitor, Inc. Flag of United States United States fonts.gstatic.com 172.217.8.3 TTL: 299 MarkMonitor, Inc. Flag of United States United States googleads.g.doubleclick.net 172.217.1.130 TTL: 299 MarkMonitor, Inc. Flag of United States United States image6.pubmatic.com 104.36.113.23 TTL: 254 - Flag of United States United States ocsp.pki.goog 172.217.13.227 TTL: 166 - Flag of United States United States ocsp.sectigo.com 151.139.128.14 TTL: 2502 - Flag of United States United States odr.mookie1.com 35.190.90.30 TTL: 299 - Flag of United States United States pagead2.googlesyndication.com 172.217.8.2 TTL: 95 - Flag of United States United States partner.googleadservices.com 216.58.194.130 TTL: 299 - Flag of United States United States pixel.everesttech.net 192.243.250.36 TTL: 287 - Flag of United States United States pixel.rubiconproject.com 8.39.36.143 TTL: 71 - Flag of United States United States pofheadlines.com 69.89.31.169 TTL: 14112 - Flag of United States United States rtb.openx.net 34.96.87.211 TTL: 299 - Flag of United States United States secure.statcounter.com 104.20.150.33 TTL: 296 - Flag of United States United States ssum-sec.casalemedia.com 23.44.169.67 TTL: 20233 - Flag of United States United States tpc.googlesyndication.com 172.217.6.161 TTL: 299 - Flag of United States United States www.googletagservices.com 172.217.1.130 TTL: 21599 - Flag of United States United States www.gstatic.com 172.217.1.227 TTL: 299 - Flag of United States United States https://www.hybrid-analysis.com/sample/f9e7ffd2529ba67fb2a326f96a98238d7510761d4d44923a5737efc51435a208/5e8292f87360a93d4e548017 Suspicious Indicators 3 External Systems Found an IP/URL artifact that was identified as malicious by at least one reputation engine details 1/76 reputation engines marked "http://unpkg.com" as malicious (1% detection rate) 1/76 reputation engines marked "http://ocsp.trust-provider.com" as malicious (1% detection rate) source External System relevance 10/10 Network Related Malicious artifacts seen in the context of a contacted host details Found malicious artifacts related to "104.16.125.175": ... URL: https://unpkg.com/scroll-hint@1.1.10/js/scroll-hint.js (AV positives: 1/76 scanned on 03/30/2020 07:41:32) URL: https://unpkg.com/infinite-scroll@3.0.6/dist/infinite-scroll.pkgd.js (AV positives: 1/76 scanned on 03/27/2020 13:18:34) URL: https://unpkg.com/picnic (AV positives: 1/76 scanned on 03/27/2020 04:51:43) URL: https://unpkg.com/leaflet@1.5.1/dist/leaflet.css (AV positives: 1/76 scanned on 03/27/2020 04:29:22) URL: http://unpkg.com/ (AV positives: 1/76 scanned on 03/25/2020 10:58:38) File SHA256: 98f0762725f964f8fba65272e29dc9ad0588b75d35facabc29d2a58541181c54 (Date: 03/21/2020 20:19:29) File SHA256: b15fc681c29496c360dddbdb2e1a326b78e36024b9baa6ff59269b796e5250b6 (Date: 03/16/2020 14:48:12) File SHA256: 4868221a1c9c9907b6b5b77e1893e5134aaa99498f334e1179b71ca1638f371e (Date: 03/16/2020 01:19:25) File SHA256: 9b87954a5f3b0403f4610177323bf89e591ca5a6bbb6e37ae268d48271bf265f (Date: 03/13/2020 00:14:19) File SHA256: e95930019345a42151d00f0221b61a5cddda6e49443a831fa1c084dfb467131a (Date: 03/03/2020 03:21:42) File SHA256: 458b46902ed3b12fa3b9b52528a59a9e3f7e100b7d5c42f3650a996768ad2e53 (AV positives: 11/69 scanned on 11/29/2018 11:44:21) source Network Traffic relevance 10/10 Sends traffic on typical HTTP outbound port, but without HTTP header details TCP traffic to 209.197.3.24 on port 443 is sent without HTTP header TCP traffic to 104.17.208.240 on port 443 is sent without HTTP header TCP traffic to 104.17.209.240 on port 443 is sent without HTTP header TCP traffic to 216.58.192.132 on port 443 is sent without HTTP header TCP traffic to 104.16.125.175 on port 443 is sent without HTTP header TCP traffic to 216.58.192.227 on port 80 is sent without HTTP header TCP traffic to 172.217.0.3 on port 443 is sent without HTTP header TCP traffic to 172.217.8.163 on port 443 is sent without HTTP header source Network Traffic relevance 5/10 ATT&CK ID T1043 (Show technique in the MITRE ATT&CK(TM) matrix) Type Path Access OPEN %WINDIR%system32apphelp.dll FILE_READ_DATA | FILE_EXECUTE CREATE %WINDIR%System32rundll32.exe GENERIC_READ | FILE_READ_ATTRIBUTES CREATE %WINDIR%AppPatchAcLayers.dll GENERIC_READ | FILE_READ_ATTRIBUTES OPEN %WINDIR%AppPatchAcLayers.DLL FILE_READ_DATA | FILE_EXECUTE OPEN %WINDIR%System32SspiCli.dll FILE_READ_DATA | FILE_EXECUTE OPEN %WINDIR%System32WINSPOOL.DRV FILE_READ_DATA | FILE_EXECUTE OPEN %WINDIR%System32MPR.dll FILE_READ_DATA | FILE_EXECUTE OPEN %WINDIR%system32IMM32.DLL FILE_READ_DATA CREATE %WINDIR%System32en-USrundll32.exe.mui GENERIC_READ | FILE_READ_ATTRIBUTES OPEN %WINDIR%System32api-ms-win-downlevel-shell32-l1-1-0.dll FILE_READ_DATA | FILE_EXECUTE OPEN %WINDIR%System32version.DLL FILE_READ_DATA | FILE_EXECUTE OPEN %WINDIR%WinSxSx86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d FILE_EXECUTE OPEN %WINDIR%WinSxSx86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705dcomctl32.dll FILE_READ_DATA | FILE_EXECUTE OPEN %WINDIR%WindowsShell.Manifest FILE_GENERIC_EXECUTE | FILE_READ_DATA | FILE_READ_EA OPEN %WINDIR%system32uxtheme.dll FILE_READ_DATA | FILE_EXECUTE OPEN %WINDIR%System32dwmapi.dll FILE_READ_DATA | FILE_EXECUTE OPEN %WINDIR%system32rpcss.dll FILE_READ_DATA OPEN %WINDIR%System32CRYPTBASE.dll FILE_READ_DATA | FILE_EXECUTE OPEN %WINDIR%System32api-ms-win-downlevel-shlwapi-l2-1-0.dll FILE_READ_DATA | FILE_EXECUTE CREATE C:f9e7ffd2529ba67fb2a326f96a98238d7510761d4d44923a5737efc51435a208.url GENERIC_READ | FILE_READ_ATTRIBUTES OPEN %WINDIR%System32PROPSYS.dll FILE_READ_DATA | FILE_EXECUTE OPEN %WINDIR%system32SHELL32.dll FILE_GENERIC_READ CREATE %PROGRAMFILES%Internet Explorereniexplore.exe.mui GENERIC_READ | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%MicrosoftInternet ExplorerRecoveryHighActive READ_CONTROL | WRITE_OWNER | FILE_READ_ATTRIBUTES CREATE %WINDIR%System32rsaenh.dll GENERIC_READ | FILE_READ_ATTRIBUTES CREATE %PROGRAMFILES%Internet Exploreriexplore.exe GENERIC_READ | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%MicrosoftInternet ExplorerRecoveryHighActive{9A7D4109-72D8-11EA-A0A0-0A0027477BF1}.dat GENERIC_WRITE | GENERIC_READ | FILE_READ_ATTRIBUTES CREATE %WINDIR%AppPatchsysmain.sdb GENERIC_READ | FILE_READ_ATTRIBUTES CREATE %PROGRAMFILES%MICROS~3Office14URLREDIR.DLL GENERIC_READ | FILE_READ_ATTRIBUTES CREATE %PROGRAMFILES%Javajre1.8.0_151libplugin.jar FILE_READ_ATTRIBUTES CREATE %PROGRAMFILES%Javajre1.8.0_151binjavaws.exe FILE_READ_ATTRIBUTES CREATE %TEMP%JavaDeployReg.log GENERIC_WRITE | GENERIC_READ | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet Files FILE_READ_DATA CREATE %USERPROFILE%AppDataRoaming FILE_READ_DATA CREATE %APPDATA%MicrosoftWindowsCookies FILE_READ_DATA CREATE %LOCALAPPDATA%MicrosoftWindowsHistory FILE_READ_DATA CREATE %WINDIR%System32stdole2.tlb GENERIC_READ | FILE_READ_ATTRIBUTES CREATE %WINDIR%System32wshqos.dll GENERIC_READ | FILE_READ_ATTRIBUTES CREATE %USERPROFILE%Favoritesdesktop.ini GENERIC_READ | FILE_READ_ATTRIBUTES CREATE %WINDIR%System32en-USmsctf.dll.mui GENERIC_READ | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%owMicrosoftCryptnetUrlCacheMetaData57C8EDB95DF3F0AD4EE2DC2B8CFD4157 GENERIC_WRITE | GENERIC_READ | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%owMicrosoftCryptnetUrlCacheMetaData7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6 GENERIC_READ | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%owMicrosoftCryptnetUrlCacheMetaData7423F88C7F265F0DEFC08EA88C3BDE45_1374AC543829516A5CA56081CD00C32A GENERIC_READ | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%owMicrosoftCryptnetUrlCacheMetaData69C6F6EC64E114822DF688DC12CDD86C GENERIC_READ | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%owMicrosoftCryptnetUrlCacheMetaData6DB145CFEEC544B1582FED1ADA3370DD GENERIC_READ | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%owMicrosoftCryptnetUrlCacheContent7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6 GENERIC_WRITE | GENERIC_READ | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE5QQW0X29Ylogin[1].htm GENERIC_WRITE | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%owMicrosoftCryptnetUrlCacheMetaData5080DC7A65DB6A5960ECD874088F3328_6CBA2C06D5985DD95AE59AF8FC7C6220 GENERIC_READ | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%owMicrosoftCryptnetUrlCacheMetaData5080DC7A65DB6A5960ECD874088F3328_1790C2BABAA04BAF417FFE9589C10997 GENERIC_READ | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%owMicrosoftCryptnetUrlCacheMetaDataCC42971B7939A9CA55C44CFC893D7C1D GENERIC_READ | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE5CKDNCXYSlogin[1].css GENERIC_WRITE | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE537NU00GPbundle[1].js GENERIC_WRITE | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%owMicrosoftCryptnetUrlCacheContent5080DC7A65DB6A5960ECD874088F3328_6CBA2C06D5985DD95AE59AF8FC7C6220 GENERIC_WRITE | GENERIC_READ | FILE_READ_ATTRIBUTES CREATE %WINDIR%System32oleaccrc.dll GENERIC_READ | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE52UXTWTJRQualtricsGrotesque-Thin.99cea185cc[1].eot GENERIC_WRITE | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE5CKDNCXYSQualtricsGrotesque-Regular.d29c18d159[1].eot GENERIC_WRITE | FILE_READ_ATTRIBUTES CREATE %WINDIR%System32en-USjscript9.dll.mui GENERIC_READ | FILE_READ_ATTRIBUTES CREATE %WINDIR%Fontsarial.ttf GENERIC_READ | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%MicrosoftWindowsCaches FILE_READ_DATA CREATE %LOCALAPPDATA%MicrosoftWindowsCachescversions.1.db GENERIC_READ | FILE_READ_ATTRIBUTES CREATE C:share FILE_READ_ATTRIBUTES CREATE %WINDIR%System32en-USshell32.dll.mui GENERIC_READ | FILE_READ_ATTRIBUTES CREATE %WINDIR%Fontsseguisym.ttf GENERIC_READ | FILE_READ_ATTRIBUTES CREATE %WINDIR%Microsoft.NETFrameworkv1.0.3705mscorwks.dll READ_CONTROL | FILE_READ_ATTRIBUTES CREATE %WINDIR%Microsoft.NETFrameworkv1.1.4322clr.dll READ_CONTROL | FILE_READ_ATTRIBUTES CREATE %WINDIR%Microsoft.NETFrameworkv1.1.4322mscorwks.dll READ_CONTROL | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%MicrosoftInternet ExplorerDOMStoreHVI1ZDNFcss.co1.qualtrics[1].xml GENERIC_WRITE | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%MicrosoftInternet Explorerimagestore3mt7jhvimagestore.dat GENERIC_WRITE | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%owMicrosoftCryptnetUrlCacheMetaData1E11E75149C17A93653DA7DC0B8CF53F_447F5E83577BE48F231168C454280CA6 GENERIC_READ | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%owMicrosoftCryptnetUrlCacheMetaData1E11E75149C17A93653DA7DC0B8CF53F_B6E1EA240B4521A4F1D7437E2AE3098D GENERIC_READ | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%owMicrosoftCryptnetUrlCacheMetaData6B17EC2CD0C9B19353018FF1C12BC489 GENERIC_READ | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%owMicrosoftCryptnetUrlCacheMetaData5B9763FB83E74617D0DB58992800F69B GENERIC_READ | FILE_READ_ATTRIBUTES CREATE %APPDATA%MicrosoftWindowsCookiesDYBRXUFE.txt GENERIC_READ | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE5CKDNCXYSqualtrics-logo[1].png GENERIC_WRITE | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE5QQW0X29Yqualtrics-logo.min[1].svg GENERIC_WRITE | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE5QQW0X29YQualtricsIconFont.685c5b7d8e[1].eot GENERIC_WRITE | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE5QQW0X29Ylock.min[1].svg GENERIC_WRITE | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%owMicrosoftCryptnetUrlCacheMetaDataCFE86DBBE02D859DC92F1E17E0574EE8_46766FC45507C0B9E264E4C18BC7288B GENERIC_WRITE | GENERIC_READ | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%owMicrosoftCryptnetUrlCacheContentCFE86DBBE02D859DC92F1E17E0574EE8_46766FC45507C0B9E264E4C18BC7288B GENERIC_WRITE | GENERIC_READ | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%owMicrosoftCryptnetUrlCacheMetaDataBE8B021F9E811DFC8C8A28572A17C05A_B4E256AEE3EBA21D6B1078B3E1B79532 GENERIC_WRITE | GENERIC_READ | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%owMicrosoftCryptnetUrlCacheContentBE8B021F9E811DFC8C8A28572A17C05A_B4E256AEE3EBA21D6B1078B3E1B79532 GENERIC_WRITE | GENERIC_READ | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%owMicrosoftCryptnetUrlCacheMetaData6AF4EE75E3A4ABA658C0087EB9A0BB5B_D2FB8B90C888995EAF59F301AECA9E24 GENERIC_READ | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%owMicrosoftCryptnetUrlCacheMetaData6AF4EE75E3A4ABA658C0087EB9A0BB5B_51CCA0D20796B7CDC9BFC98988A9B0ED GENERIC_READ | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%owMicrosoftCryptnetUrlCacheMetaData74F831100DEB0B8799203064F3E38B68 GENERIC_READ | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%owMicrosoftCryptnetUrlCacheContent6AF4EE75E3A4ABA658C0087EB9A0BB5B_D2FB8B90C888995EAF59F301AECA9E24 GENERIC_WRITE | GENERIC_READ | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%owMicrosoftCryptnetUrlCacheMetaDataBE8B021F9E811DFC8C8A28572A17C05A_0B97942EE72A6E3F514E8E84F294CC72 GENERIC_READ | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%owMicrosoftCryptnetUrlCacheMetaDataBE8B021F9E811DFC8C8A28572A17C05A_A61001BAFE86CCE0A5899061868CC05C GENERIC_READ | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%MicrosoftInternet ExplorerRecoveryHighActiveRecoveryStore.{9A7D4107-72D8-11EA-A0A0-0A0027477BF1}.dat GENERIC_WRITE | GENERIC_READ | FILE_READ_ATTRIBUTES CREATE %APPDATA%MicrosoftWindowsCookiesERV9N2EC.txt GENERIC_READ | FILE_READ_ATTRIBUTES CREATE %APPDATA%MicrosoftWindowsCookiesL8DC4A47.txt GENERIC_READ | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE537NU00GPrecaptcha__en[1].js GENERIC_WRITE | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE52UXTWTJRQualtricsGrotesque-ExLight[1].eot GENERIC_WRITE | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE52UXTWTJRQualtricsGrotesque-Regular[1].eot GENERIC_WRITE | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE52UXTWTJRQualtricsGrotesque-Thin[1].eot GENERIC_WRITE | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE5CKDNCXYSQualtricsGrotesque-Bold[1].eot GENERIC_WRITE | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE5CKDNCXYSQualtricsGrotesque-ExLight[1].woff GENERIC_WRITE | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE5CKDNCXYSQualtricsGrotesque-SemiBold[1].eot GENERIC_WRITE | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE537NU00GPQualtricsGrotesque-ExLight[1].ttf GENERIC_WRITE | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE537NU00GPQualtricsGrotesque-Bold[1].woff GENERIC_WRITE | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE5QQW0X29Yfavicon[3].ico GENERIC_WRITE | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE537NU00GPfavicon[7].png GENERIC_WRITE | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE537NU00GPfavicon[8].png GENERIC_WRITE | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%owMicrosoftInternet ExplorerServicessearch_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico GENERIC_READ | FILE_READ_ATTRIBUTES | FILE_WRITE_ATTRIBUTES OPEN %WINDIR%SYSTEM32sechost.dll FILE_READ_DATA | FILE_EXECUTE CREATE %TEMP%~DFFEE3C3317B5DF4FB.TMP GENERIC_WRITE | GENERIC_READ | DELETE | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE5QQW0X29Yanchor[1].htm GENERIC_WRITE | FILE_READ_ATTRIBUTES OPEN %PROGRAMFILES%Internet Explorerieproxy.dll FILE_READ_DATA | FILE_READ_ATTRIBUTES CREATE C:https:css.co1.qualtrics.comlogin?path=%2FControlPanel%2F&product=ControlPanel GENERIC_READ | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE5QQW0X29Ystyles__ltr[1].css GENERIC_WRITE | FILE_READ_ATTRIBUTES OPEN %WINDIR%system32sfc.dll FILE_READ_DATA | FILE_EXECUTE OPEN %WINDIR%System32sfc_os.DLL FILE_READ_DATA | FILE_EXECUTE OPEN SystemRootWinSxSFileMapsprogram_files_internet_explorer_a421d1bfaf856e2b.cdf-ms FILE_GENERIC_READ CREATE %LOCALAPPDATA%MicrosoftInternet ExplorerUrlBlockManagerurlblocklist.bin GENERIC_READ | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesLow READ_CONTROL | WRITE_DAC | WRITE_OWNER | FILE_READ_ATTRIBUTES CREATE %APPDATA%MicrosoftWindowsCookiesLow READ_CONTROL | WRITE_DAC | WRITE_OWNER | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%MicrosoftWindowsHistoryLow READ_CONTROL | WRITE_DAC | WRITE_OWNER | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesVirtualized READ_CONTROL | WRITE_DAC | WRITE_OWNER | FILE_READ_ATTRIBUTES CREATE %APPDATA%AdobeFlash PlayerNativeCache READ_CONTROL | WRITE_DAC | WRITE_OWNER | FILE_READ_ATTRIBUTES CREATE %APPDATA%MicrosoftInternet ExplorerUserDataLow READ_CONTROL | WRITE_DAC | WRITE_OWNER | FILE_READ_ATTRIBUTES CREATE %USERPROFILE%Favorites READ_CONTROL | WRITE_DAC | WRITE_OWNER | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%MicrosoftInternet ExplorerTracking Protection READ_CONTROL | WRITE_DAC | WRITE_OWNER | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%MicrosoftFeeds READ_CONTROL | WRITE_DAC | WRITE_OWNER | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%MicrosoftInternet ExplorerTabRoaming READ_CONTROL | WRITE_DAC | WRITE_OWNER | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%MicrosoftPlayReady READ_CONTROL | WRITE_DAC | WRITE_OWNER | FILE_READ_ATTRIBUTES CREATE %APPDATA%MicrosoftWindowsPrivacIE FILE_READ_DATA CREATE %APPDATA%MicrosoftWindowsPrivacIELow READ_CONTROL | WRITE_DAC | WRITE_OWNER | FILE_READ_ATTRIBUTES CREATE %APPDATA%MicrosoftWindowsDNTException FILE_READ_DATA CREATE %APPDATA%MicrosoftWindowsDNTExceptionLow READ_CONTROL | WRITE_DAC | WRITE_OWNER | FILE_READ_ATTRIBUTES CREATE %APPDATA%MicrosoftWindowsIECompatCache FILE_READ_DATA CREATE %APPDATA%MicrosoftWindowsIECompatCacheLow READ_CONTROL | WRITE_DAC | WRITE_OWNER | FILE_READ_ATTRIBUTES CREATE %APPDATA%MicrosoftWindowsIECompatUACache FILE_READ_DATA CREATE %APPDATA%MicrosoftWindowsIECompatUACacheLow READ_CONTROL | WRITE_DAC | WRITE_OWNER | FILE_READ_ATTRIBUTES CREATE %TEMP%Low READ_CONTROL | WRITE_DAC | WRITE_OWNER | FILE_READ_ATTRIBUTES CREATE %WINDIR%GlobalizationSortingSortDefault.nls GENERIC_READ | FILE_READ_ATTRIBUTES CREATE C: FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet Filescounters.dat GENERIC_WRITE | GENERIC_READ | FILE_READ_ATTRIBUTES CREATE %TEMP%~DFFA3F50DF93BA22DC.TMP GENERIC_WRITE | GENERIC_READ | DELETE | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE5QQW0X29YKFOlCnqEu92Fr1MmYUtfBBc9[1].ttf GENERIC_WRITE | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE5QQW0X29YKFOmCnqEu92Fr1Mu4mxP[1].ttf GENERIC_WRITE | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE5QQW0X29Ybframe[1].htm GENERIC_WRITE | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE5QQW0X29YKFOlCnqEu92Fr1MmEU9fBBc9[1].ttf GENERIC_WRITE | FILE_READ_ATTRIBUTES CREATE %WINDIR%System32tzres.dll GENERIC_READ | FILE_READ_ATTRIBUTES CREATE %TEMP%~DF9CA989E6F4F9A1FF.TMP GENERIC_WRITE | GENERIC_READ | DELETE | FILE_READ_ATTRIBUTES CREATE %WINDIR%FontsStaticCache.dat GENERIC_READ | FILE_READ_ATTRIBUTES CREATE %WINDIR%System32ieframe.dll GENERIC_READ | FILE_READ_ATTRIBUTES CREATE %WINDIR%System32MacromedFlashFlash32_27_0_0_187.ocx GENERIC_READ | FILE_READ_ATTRIBUTES CREATE %WINDIR%System32en-USKernelBase.dll.mui GENERIC_READ | FILE_READ_ATTRIBUTES CREATE DEVICENETBT_TCPIP_{E29AC6C2-7037-11DE-816D-806E6F6E6963} FILE_READ_DATA CREATE DEVICENETBT_TCPIP_{F5E5586C-DA91-47DA-AEAC-0A88CD2FFB01} FILE_READ_DATA CREATE %LOCALAPPDATA%owMicrosoftCryptnetUrlCacheContent57C8EDB95DF3F0AD4EE2DC2B8CFD4157 GENERIC_WRITE | GENERIC_READ | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%owMicrosoftCryptnetUrlCacheMetaData5457A8CE4B2A7499F8299A013B6E1C7C_76125806E8CF735FD0B67DD73E892015 GENERIC_READ | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%owMicrosoftCryptnetUrlCacheMetaData3B6E683A7A45CC59BF035C9BA8C7AB9D GENERIC_READ | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE5QQW0X29Ybundle[1].css GENERIC_WRITE | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%owMicrosoftCryptnetUrlCacheMetaData5457A8CE4B2A7499F8299A013B6E1C7C_CE50F893881D43DC0C815E4D80FAF2B4 GENERIC_WRITE | GENERIC_READ | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%owMicrosoftCryptnetUrlCacheContent5457A8CE4B2A7499F8299A013B6E1C7C_CE50F893881D43DC0C815E4D80FAF2B4 GENERIC_WRITE | GENERIC_READ | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE5QQW0X29Yutils[1].js GENERIC_WRITE | FILE_READ_ATTRIBUTES CREATE %TEMP%~okmgpus.tmp GENERIC_READ | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE537NU00GPpep[1].js GENERIC_WRITE | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE52UXTWTJRQualtricsGrotesque-ExLight.50d9a1c002[1].eot GENERIC_WRITE | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE5CKDNCXYSQualtricsGrotesque-SemiBold.be0ffea786[1].eot GENERIC_WRITE | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE5QQW0X29YQualtricsGrotesque-Bold.8be46ae077[1].eot GENERIC_WRITE | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE5QQW0X29YQualtricsGrotesque-ExtraBold.8772e4de57[1].eot GENERIC_WRITE | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE5QQW0X29YQualtricsGrotesque-Light.a35eab429f[1].eot GENERIC_WRITE | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%MicrosoftWindowsCaches{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000001d.db GENERIC_READ | FILE_READ_ATTRIBUTES CREATE C:Usersdesktop.ini GENERIC_READ | FILE_READ_ATTRIBUTES CREATE C:Users FILE_READ_DATA | FILE_READ_ATTRIBUTES CREATE C:Users%OSUSER% FILE_READ_DATA | FILE_READ_ATTRIBUTES CREATE %USERPROFILE%AppData FILE_READ_DATA | FILE_READ_ATTRIBUTES CREATE %USERPROFILE%AppDataLocal FILE_READ_DATA | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%Microsoft FILE_READ_DATA | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%MicrosoftWindows FILE_READ_DATA | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%MicrosoftWindowsHistorydesktop.ini GENERIC_READ | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE537NU00GPfavicon[1].ico GENERIC_WRITE | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE537NU00GPfavicon[2].ico GENERIC_WRITE | FILE_READ_ATTRIBUTES CREATE %WINDIR%Microsoft.NETFrameworkv1.0.3705clr.dll READ_CONTROL | FILE_READ_ATTRIBUTES CREATE %APPDATA%MicrosoftWindowsCookiesK8FJGHQ4.txt GENERIC_WRITE | FILE_READ_ATTRIBUTES CREATE %WINDIR%Microsoft.NETFrameworkv2.0.50727clr.dll READ_CONTROL | FILE_READ_ATTRIBUTES CREATE %WINDIR%Microsoft.NETFrameworkv2.0.50727mscorwks.dll READ_CONTROL | FILE_READ_ATTRIBUTES CREATE %WINDIR%Microsoft.NETFrameworkv4.0.30319clr.dll READ_CONTROL | FILE_READ_ATTRIBUTES CREATE %PROGRAMFILES%Internet Exploreriexplore.exe.config GENERIC_READ | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE537NU00GPWRSiteInterceptEngine[1].js GENERIC_WRITE | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE52UXTWTJRCCS+Logo+Stacked[1] GENERIC_WRITE | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%MicrosoftInternet ExplorerMSIMGSIZ.DAT GENERIC_WRITE | GENERIC_READ | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE5CKDNCXYSuser.min[1].svg GENERIC_WRITE | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%owMicrosoftCryptnetUrlCacheMetaDataCFE86DBBE02D859DC92F1E17E0574EE8_5FA8E5E800867BF860DF5E533E701BAF GENERIC_READ | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%owMicrosoftCryptnetUrlCacheMetaData85B3F147E3624A14E6A20DB4F6C2C5D9 GENERIC_READ | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%owMicrosoftCryptnetUrlCacheMetaData9EC3B71635F8BA3FC68DE181A104A0EF_F6C39EF89D8A3A72327D8412589658B2 GENERIC_READ | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%owMicrosoftCryptnetUrlCacheMetaData9EC3B71635F8BA3FC68DE181A104A0EF_6BB6788F6A8528A0F9C552EFF5B09463 GENERIC_READ | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%owMicrosoftCryptnetUrlCacheMetaDataFAC339B39377A299AE11B4D208AD3090 GENERIC_READ | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE52UXTWTJRspinner[1].gif GENERIC_WRITE | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%owMicrosoftCryptnetUrlCacheContent1E11E75149C17A93653DA7DC0B8CF53F_447F5E83577BE48F231168C454280CA6 GENERIC_WRITE | GENERIC_READ | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE537NU00GPCoreModule[1].js GENERIC_WRITE | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%owMicrosoftCryptnetUrlCacheMetaDataBE8B021F9E811DFC8C8A28572A17C05A_286433916EEAE31B2DFC22857D309481 GENERIC_READ | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%owMicrosoftCryptnetUrlCacheMetaData521F25E202FF760B8461B88413F425E7 GENERIC_READ | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%owMicrosoftCryptnetUrlCacheContent9EC3B71635F8BA3FC68DE181A104A0EF_F6C39EF89D8A3A72327D8412589658B2 GENERIC_WRITE | GENERIC_READ | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%owMicrosoftCryptnetUrlCacheMetaData64DCC9872C5635B1B7891B30665E0558_0D8A59131C70FA8C84AEB496F0935D24 GENERIC_READ | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%owMicrosoftCryptnetUrlCacheMetaDataA6E643304C5FBB7CBF4025F1978D6EED GENERIC_READ | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE52UXTWTJRapi[1].js GENERIC_WRITE | FILE_READ_ATTRIBUTES CREATE %APPDATA%MicrosoftWindowsCookies3S9Q96YC.txt GENERIC_READ | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%owMicrosoftCryptnetUrlCacheMetaData64DCC9872C5635B1B7891B30665E0558_5552C20A2631357820903FD38A8C0F9F GENERIC_WRITE | GENERIC_READ | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%owMicrosoftCryptnetUrlCacheContent64DCC9872C5635B1B7891B30665E0558_5552C20A2631357820903FD38A8C0F9F GENERIC_WRITE | GENERIC_READ | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE5CKDNCXYSbase-styles[1].css GENERIC_WRITE | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE5CKDNCXYSfavicon[1].ico GENERIC_READ | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%owMicrosoftCryptnetUrlCacheContentBE8B021F9E811DFC8C8A28572A17C05A_0B97942EE72A6E3F514E8E84F294CC72 GENERIC_WRITE | GENERIC_READ | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%owMicrosoftCryptnetUrlCacheMetaData6BADA8974A10C4BD62CC921D13E43B18_A7A8E86FCB076C144BD04C40841E7074 GENERIC_READ | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%owMicrosoftCryptnetUrlCacheMetaData82CB34DD3343FE727DF8890D352E0D8F GENERIC_READ | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE52UXTWTJRQualtricsGrotesque-Light[1].eot GENERIC_WRITE | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE5CKDNCXYSQualtricsGrotesque-ExtraBold[1].eot GENERIC_WRITE | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE5CKDNCXYSQualtricsGrotesque-Light[1].woff GENERIC_WRITE | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE5QQW0X29Yfavicon[1].ico GENERIC_WRITE | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE5QQW0X29Yfavicon[2].ico GENERIC_WRITE | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE537NU00GPfavicon[1].png GENERIC_WRITE | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE537NU00GPfavicon[2].png GENERIC_WRITE | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE537NU00GPfavicon[3].png GENERIC_WRITE | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE537NU00GPfavicon[4].png GENERIC_WRITE | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE537NU00GPfavicon[5].png GENERIC_WRITE | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE537NU00GPfavicon[6].png GENERIC_WRITE | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%MicrosoftInternet ExplorerRecoveryHighActive{9A7D410A-72D8-11EA-A0A0-0A0027477BF1}.dat GENERIC_WRITE | GENERIC_READ | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE537NU00GPYmOevPGj3bX7-XCtHZ_2hk0qUgWuurkHo3TApIzCqYU[1].js GENERIC_WRITE | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE537NU00GPwebworker[1].js GENERIC_WRITE | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE537NU00GPurlblockindex[1].bin GENERIC_WRITE | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE537NU00GPurlblockindex[2].bin GENERIC_WRITE | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%MicrosoftInternet ExplorerVersionManagerver23EF.tmp GENERIC_READ | FILE_READ_ATTRIBUTES CREATE %APPDATA%MicrosoftWindowsCookiesZN1CVVJS.txt GENERIC_READ | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%owMicrosoftCryptnetUrlCacheMetaData6BADA8974A10C4BD62CC921D13E43B18_D9817BD5013875AD517DA73475345203 GENERIC_READ | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%owMicrosoftCryptnetUrlCacheContent6BADA8974A10C4BD62CC921D13E43B18_D9817BD5013875AD517DA73475345203 GENERIC_READ | FILE_READ_ATTRIBUTES CREATE %APPDATA%MicrosoftWindowsCookiesKXAJDNXT.txt GENERIC_WRITE | FILE_READ_ATTRIBUTES CREATE %APPDATA%MicrosoftWindowsCookies537MO3FQ.txt GENERIC_WRITE | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE52UXTWTJRsuggestions[1].en-US GENERIC_WRITE | FILE_READ_ATTRIBUTES CREATE %APPDATA%MicrosoftWindowsCookies1WPQSD40.txt GENERIC_WRITE | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%owMicrosoftCryptnetUrlCacheMetaData6BADA8974A10C4BD62CC921D13E43B18_BEB37ABADF39714871232B4792417E04 GENERIC_WRITE | GENERIC_READ | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%owMicrosoftCryptnetUrlCacheContent6BADA8974A10C4BD62CC921D13E43B18_BEB37ABADF39714871232B4792417E04 GENERIC_WRITE | GENERIC_READ | FILE_READ_ATTRIBUTES CREATE %APPDATA%MicrosoftWindowsCookiesI88H097X.txt GENERIC_READ | FILE_READ_ATTRIBUTES CREATE %APPDATA%MicrosoftWindowsCookies2DO2L16S.txt GENERIC_WRITE | FILE_READ_ATTRIBUTES CREATE %APPDATA%MicrosoftWindowsCookies6352928A.txt GENERIC_WRITE | FILE_READ_ATTRIBUTES CREATE %APPDATA%MicrosoftWindowsCookies527SSSUP.txt GENERIC_READ | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE5CKDNCXYSsearch[1].json GENERIC_WRITE | FILE_READ_ATTRIBUTES CREATE %APPDATA%MicrosoftWindowsCookiesX4PHSKOX.txt GENERIC_READ | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%MicrosoftInternet ExplorerDomainSuggestions FILE_READ_DATA WRITE %LOCALAPPDATA%MicrosoftInternet ExplorerDomainSuggestionsen-US.2 - CREATE %LOCALAPPDATA%MicrosoftInternet ExplorerDomainSuggestionsen-US.1 DELETE | FILE_READ_DATA | FILE_READ_ATTRIBUTES CREATE %LOCALAPPDATA%owMicrosoftCryptnetUrlCacheMetaData6BADA8974A10C4BD62CC921D13E43B18_49FC544F04082FD9F64F9EFB226AF8B5 GENERIC_READ | FILE_READ_ATTRIBUTES CREATE %APPDATA%MicrosoftWindowsCookiesVG8BU31O.txt GENERIC_READ | FILE_READ_ATTRIBUTES CREATE %APPDATA%MicrosoftWindowsCookies4F7NV88N.txt GENERIC_READ | FILE_READ_ATTRIBUTES Module Path Module Base %WINDIR%System32kernel32.dll 76500000 %WINDIR%System32KernelBase.dll 75910000 %WINDIR%System32msvcrt.dll 768E0000 %WINDIR%System32api-ms-win-downlevel-advapi32-l1-1-0.dll 759B0000 %WINDIR%System32advapi32.dll 76300000 %WINDIR%System32sechost.dll 77B50000 %WINDIR%GlobalizationSortingSortDefault.nls 01970000 %WINDIR%System32api-ms-win-downlevel-shell32-l1-1-0.dll 72650000 %WINDIR%System32shell32.dll 76B80000 %WINDIR%System32ieframe.dll 6C6B0000 %WINDIR%System32ole32.dll 76780000 %WINDIR%System32oleaut32.dll 77B90000 %WINDIR%winsxsx86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705dcomctl32.dll 74750000 %WINDIR%WindowsShell.Manifest 01C50000 %WINDIR%System32urlmon.dll 763B0000 %WINDIR%System32api-ms-win-downlevel-ole32-l1-1-0.dll 75960000 %WINDIR%System32wininet.dll 75D90000 %WINDIR%System32userenv.dll 75C00000 %WINDIR%System32profapi.dll 75900000 %WINDIR%System32mswsock.dll 75320000 %WINDIR%System32wship6.dll 75390000 %WINDIR%System32IPHLPAPI.DLL 74E60000 %WINDIR%System32winnsi.dll 74E50000 %WINDIR%System32rsaenh.dll 75050000 %WINDIR%System32RpcRtRemote.dll 75880000 %WINDIR%System32npmproxy.dll 6FED0000 %PROGRAMFILES%Internet Explorerieproxy.dll 6F3F0000 %WINDIR%System32WSHTCPIP.DLL 74D70000 %WINDIR%System32dnsapi.dll 75140000 %WINDIR%System32rasadhlp.dll 70390000 %WINDIR%System32apphelp.dll 75790000 %WINDIR%System32crypt32.dll 75A00000 %WINDIR%System32msasn1.dll 758F0000 %WINDIR%System32ExplorerFrame.dll 71960000 %WINDIR%System32duser.dll 74160000 %WINDIR%System32dui70.dll 741B0000 %WINDIR%System32en-USmsctf.dll.mui 03660000 %WINDIR%System32dhcpcsvc6.dll 73850000 %WINDIR%System32dhcpcsvc.dll 74D80000 %WINDIR%System32setupapi.dll 765E0000 %WINDIR%System32cfgmgr32.dll 75B30000 %WINDIR%System32devobj.dll 759C0000 %WINDIR%System32wshqos.dll 71410000 %WINDIR%System32credssp.dll 75310000 %WINDIR%System32schannel.dll 750C0000 %WINDIR%System32rpcrt4.dll 769B0000 %WINDIR%System32iertutil.dll 76040000 %WINDIR%System32api-ms-win-downlevel-version-l1-1-0.dll 75BF0000 %WINDIR%System32version.dll 74E80000 %WINDIR%System32api-ms-win-downlevel-user32-l1-1-0.dll 759E0000 %WINDIR%System32user32.dll 75C80000 %WINDIR%System32gdi32.dll 778C0000 %WINDIR%System32lpk.dll 77B30000 %WINDIR%System32usp10.dll 76AE0000 %WINDIR%System32api-ms-win-downlevel-normaliz-l1-1-0.dll 759F0000 %WINDIR%System32normaliz.dll 77B80000 %WINDIR%System32api-ms-win-downlevel-shlwapi-l1-1-0.dll 75970000 %WINDIR%System32shlwapi.dll 75C20000 %WINDIR%System32imm32.dll 000D0000 %WINDIR%System32imm32.dll 76990000 %WINDIR%System32msctf.dll 77910000 %WINDIR%System32cryptbase.dll 757E0000 %PROGRAMFILES%Internet ExplorerIEShims.dll 6F7A0000 %WINDIR%System32comdlg32.dll 76280000 %WINDIR%System32rpcss.dll 01C70000 %WINDIR%System32uxtheme.dll 74500000 %WINDIR%System32dwmapi.dll 740F0000 %PROGRAMFILES%Internet Explorersqmapi.dll 73140000 %WINDIR%System32secur32.dll 75620000 %WINDIR%System32sspicli.dll 75770000 %WINDIR%System32api-ms-win-downlevel-advapi32-l2-1-0.dll 72180000 %LOCALAPPDATA%MicrosoftWindowsTemporary Internet Filescounters.dat 01DA0000 %WINDIR%System32ws2_32.dll 75D50000 %WINDIR%System32nsi.dll 77B40000 %WINDIR%System32api-ms-win-downlevel-shlwapi-l2-1-0.dll 72900000 %WINDIR%System32clbcatq.dll 777D0000 %WINDIR%System32netprofm.dll 70810000 %WINDIR%System32nlaapi.dll 73C10000 %WINDIR%System32cryptsp.dll 75360000 %WINDIR%System32rsaenh.dll 01DD0000 %WINDIR%System32netapi32.dll 73C90000 %WINDIR%System32netutils.dll 73C70000 %WINDIR%System32srvcli.dll 75490000 %WINDIR%System32wkscli.dll 73C60000 %WINDIR%System32api-ms-win-core-synch-l1-2-0.dll 72F20000 %WINDIR%System32FWPUCLNT.DLL 73870000 %WINDIR%System32ieui.dll 6EE70000 %WINDIR%FontsStaticCache.dat 03810000 %WINDIR%System32WindowsCodecs.dll 73F80000 %WINDIR%System32oleacc.dll 6C670000 %WINDIR%System32oleaccrc.dll 025B0000 %WINDIR%System32msimg32.dll 73090000 %WINDIR%System32mlang.dll 70640000 %WINDIR%System32propsys.dll 74630000 %WINDIR%System32ntmarta.dll 74E20000 %WINDIR%System32Wldap32.dll 76A60000 %LOCALAPPDATA%MicrosoftWindowsCaches{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000001d.db 037A0000 %ALLUSERSPROFILE%MicrosoftWindowsCachescversions.2.db 03790000 %ALLUSERSPROFILE%MicrosoftWindowsCaches{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000012.db 04140000 %ALLUSERSPROFILE%MicrosoftWindowsCachescversions.2.db 04170000 %ALLUSERSPROFILE%MicrosoftWindowsCaches{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000002.db 04180000 %WINDIR%System32ncrypt.dll 75420000 %WINDIR%System32bcrypt.dll 753F0000 %WINDIR%System32bcryptprimitives.dll 74FB0000 %WINDIR%System32wintrust.dll 75980000 %WINDIR%System32gpapi.dll 74EC0000 %WINDIR%System32cryptnet.dll 71230000 %WINDIR%System32SensApi.dll 6D5A0000 %WINDIR%System32winhttp.dll 71670000 %WINDIR%System32webio.dll 71620000 %WINDIR%System32en-USKernelBase.dll.mui 049F0000 %LOCALAPPDATA%owMicrosoftInternet ExplorerServicessearch_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico 04860000 %WINDIR%System32MacromedFlashFlash32_27_0_0_187.ocx 65510000 %WINDIR%System32MacromedFlashFlash32_27_0_0_187.ocx 640C0000 %WINDIR%Microsoft.NETFrameworkv4.0.30319mscoreei.dll 6E080000 %WINDIR%System32mscoree.dll 6EF10000 %PROGRAMFILES%Internet Exploreriexplore.exe 04770000 %WINDIR%System32xmllite.dll 740C0000 %WINDIR%System32sxs.dll 75820000 %PROGRAMFILES%Internet Exploreriexplore.exe 03390000 %WINDIR%Microsoft.NETFrameworkv2.0.50727mscorwks.dll 6AED0000 %WINDIR%Microsoft.NETFrameworkv2.0.50727mscorwks.dll 663B0000 Type (ID) Path KeyHandle (656) HKCUSoftwareMicrosoftWindowsCurrentVersionInternet Settings KeyHandle (840) HKCUSoftwareMicrosoftWindowsCurrentVersionInternet SettingsZoneMap KeyHandle (844) HKLMSOFTWAREMicrosoftWindowsCurrentVersionInternet SettingsZoneMap KeyHandle (1176) HKCUSoftwareMicrosoftWindowsCurrentVersionInternet SettingsWpad{FD4316C2-FF33-42BF-BE78-39051EB67EC2} KeyHandle (1180) HKCUSoftwareMicrosoftWindowsCurrentVersionInternet SettingsWpad 0-00-5e-00-01-01 KeyHandle (1312) HKCUSoftwareMicrosoftInternet ExplorerRecoveryAdminActive KeyHandle (1340) HKCUSoftwareMicrosoftInternet ExplorerTabbedBrowsingNewTabPage Name Sessions1BaseNamedObjectsIsoScope_1094_IESQMMUTEX_0_519 LocalInternetShortcutMutex IsoScope_1094_IESQMMUTEX_0_519 {5312EE61-79E3-4A24-BFE1-132B85B23C3A} IsoScope_1094_IESQMMUTEX_0_331 LocalZonesCacheCounterMutex LocalVERMGMTBlockListFileMutex IsoScope_1094_ConnHashTable<4244>_HashTable_Mutex IsoScope_1094_IE_EarlyTabStart_0x1208_Mutex LocalZonesLockedCacheCounterMutex LocalURLBLOCK_DOWNLOAD_MUTEX LocalURLBLOCK_FILEMAPSWITCH_MUTEX_4244 IsoScope_1094_IESQMMUTEX_0_303 {66D0969A-1E86-44CF-B4EC-3806DDDA3B5D} UpdatingNewTabPageData LocalURLBLOCK_HASHFILESWITCH_MUTEX Local!BrowserEmulation!SharedMemory!Mutex Sessions1BaseNamedObjectsUpdatingNewTabPageData Sessions1BaseNamedObjectsLocal!BrowserEmulation!SharedMemory!Mutex Sessions1BaseNamedObjectsLocalVERMGMTBlockListFileMutex Sessions1BaseNamedObjectsLocalURLBLOCK_FILEMAPSWITCH_MUTEX_4244 Sessions1BaseNamedObjectsLocalURLBLOCK_HASHFILESWITCH_MUTEX Sessions1BaseNamedObjectsLocalURLBLOCK_DOWNLOAD_MUTEX Sessions1BaseNamedObjectsLocalZonesCacheCounterMutex Sessions1BaseNamedObjectsLocalZonesLockedCacheCounterMutex Sessions1BaseNamedObjectsIsoScope_1094_IE_EarlyTabStart_0x1208_Mutex Sessions1BaseNamedObjectsIsoScope_1094_ConnHashTable<4244>_HashTable_Mutex Sessions1BaseNamedObjects{5312EE61-79E3-4A24-BFE1-132B85B23C3A} Sessions1BaseNamedObjectsIsoScope_1094_IESQMMUTEX_0_303 Sessions1BaseNamedObjectsIsoScope_1094_IESQMMUTEX_0_331 Sessions1BaseNamedObjects{66D0969A-1E86-44CF-B4EC-3806DDDA3B5D} Ad-Aware Trojan.Agent.DQGO AegisLab Trojan.Script.Generic.4!c AhnLab-V3 JS/Coinminer ALYac Trojan.Script.Agent Arcabit Trojan.Agent.DQGO Avast Other:Malware-gen [Trj] AVG Other:Malware-gen [Trj] BitDefender Trojan.Agent.DQGO Cyren Trojan.XJZA-2 DrWeb JS.Siggen3.18530 Emsisoft Trojan.Agent.DQGO (B) eScan Trojan.Agent.DQGO FireEye Trojan.Agent.DQGO Fortinet JS/Malpackage.IN!tr GData Script.Trojan-Stealer.Bicorewall.B Ikarus Trojan.Script.FlatMap Jiangmin Trojan.Script.aiyb Kaspersky HEUR:Trojan.Script.Generic MAX Malware (ai Score=100) MaxSecure Trojan.Malware.1726719.susgen McAfee Trojan-CoinStealer McAfee-GW-Edition Trojan-CoinStealer Microsoft Trojan:JS/CoinMiner Qihoo-360 Win32/Trojan.Script.ed4 Sangfor Engine Zero Malware Sophos AV Troj/Bckdoor-AL Symantec Infostealer TrendMicro TrojanSpy.JS.COINSTEAL.AA TrendMicro-HouseCall TrojanSpy.JS.COINSTEAL.AA ZoneAlarm by Check Point HEUR:Trojan.Script.Generic Stanfield, Michael W https://archive.is/43icO Schools: Spokane Community College and Southern Oregon University Defendant Spokane County Dist VE0014868 06-09-2010 Stanfield, Michael William Defendant Spokane Municipal N00010333 07-26-2010 Stanfield, Michael William Defendant Spokane Municipal 2Z0539029 08-03-2012 Stanfield, Michael William Defendant Spokane Municipal B00077501 10-24-2008 Stanfield, Michael William Defendant Spokane Municipal B00076326 10-23-2008 Stanfield, Michael William Defendant Spokane Municipal U00103746 10-24-2008 Stanfield, Michael William Defendant Spokane Municipal U00098835 10-23-2008 Stanfield, Michael William Defendant Spokane County Dist IN0482473 07-11-2008 Stanfield, Michael William Defendant Spokane County Dist CR0094389 11-04-2008 Stanfield, Michael William Defendant Spokane County Dist IN0441309 11-28-2007 Stanfield, Michael William Defendant Spokane County Dist CR0092658 06-27-2008 Stanfield, Michael William Defendant Spokane Municipal B00075662 08-25-2008 Case No: 041011605 - STANFIELD, MICHAEL WILLIAM 04/29/1981 Print Charges COUNT 1:RESIDENTIAL BURGLARY(D, COUNT 2:ASSAULT-3D(CR NEG/BOD Case Type Criminal Case File Date 04/05/2004 Court Superior Court Case Status CMPL-08/17/2004 Case Information File Date Sub Number Docket Entry 4/5/2004 1 INFORMATION 4/5/2004 2 STATEMENT OF FACTS 4/5/2004 3 CERTIFICATE OF ADDRESS SEARCH 4/6/2004 4 SUMMONS 4/8/2004 5 NOTICE OF APPEARANCE 4/12/2004 6 NOTICE OF APPEARANCE 4/14/2004 0 INITIAL ARRAIGNMENT 4/14/2004 7 ORDER SETTING TRIAL DATE 4/14/2004 8 ORD FOR PROTECTION 4/14/2004 9 OMNIBUS APPLICATION OF PROS ATTY 4/14/2004 10 ORDER ESTABLISHING COND. OF RELEASE 5/19/2004 11 ORDER SETTING TRIAL DATE 6/2/2004 12 ORDER SETTING TRIAL DATE 6/2/2004 13 ORDER AMEND PRETRIAL CONDITIONS 6/8/2004 14 ORDER AMENDING RELEASE CONDITIONS 6/25/2004 15 WAIVER OF SPEEDY TRIAL 6/25/2004 16 ORDER SETTING TRIAL DATE 7/23/2004 17 ORDER SETTING TRIAL DATE 8/13/2004 18 ORDER SETTING TRIAL DATE 8/17/2004 0 MOTION HEARING 8/17/2004 0 GUILTY PLEA AND SENTENCING HEARING 8/17/2004 0 CASE RESOLUTION GUILTY PLEA BEFORE TRIAL COMMENCEMENT 8/17/2004 19 ORD PERMITTING FILING AMENDED INFO 8/17/2004 20 AMENDED INFORMATION 8/17/2004 21 ORD FOR PROTECTION 8/17/2004 22 LETTERS TO THE COURT 8/17/2004 23 STATEMENT OF DEFENDANT,PLEA GUILTY 8/17/2004 24 APPENDIX DEF CRIMINAL HISTORY 8/17/2004 25 WARRANT OF COMMITMENT 8/17/2004 26 JUDGMENT AND SENTENCE 049062632 8/31/2004 27 NOTIFICATION OF FELONY CONVICTION 9/10/2004 0 DOC SUPERVISION DOC is supervising the case. 10/28/2004 28 SATISFACTION OF JUDGMENT 04906263-2 10/27/2005 29 REQUEST FOR TERMINATION/DISCHARGE 10/31/2005 30 CERTIFICATE AND ORDER OF DISCHARGE 5/29/2018 0 ORDER OF DESTRUCTION 11/3/2018 0 OC PAID IN FULL 11/3/2018 0 RT PAYMENT IN FULL 11/10/2018 0 AOC BILLING DOC CONSIDERS UNCOLLECTIBLE System Generated Hearings/Due Dates Case Number Hearing Type/Due Date Calendar Start Date/Time End Date Location Status Official Name 041011605 Criminal Trial Criminal Trial Calendar 08/30/2004 9:30AM 08/30/2004 CMPL-08/17/2004 041011605 Criminal Trial Criminal Trial Calendar 08/16/2004 9:30AM 08/16/2004 CMPL-08/17/2004 041011605 Criminal Trial Trial Readiness Calendar 08/16/2004 9:00AM 08/16/2004 CMPL-08/17/2004 GREGORY SYPOLT 041011605 Criminal Trial Criminal Trial Calendar 07/26/2004 9:30AM 07/26/2004 CMPL-08/17/2004 041011605 Criminal Trial Trial Readiness Calendar 07/26/2004 9:00AM 07/26/2004 CMPL-08/17/2004 GREGORY SYPOLT 041011605 Criminal Trial Criminal Trial Calendar 06/28/2004 9:30AM 06/28/2004 CMPL-08/17/2004 041011605 Criminal Trial Trial Readiness Calendar 06/28/2004 9:00AM 06/28/2004 CMPL-08/17/2004 GREGORY SYPOLT 041011605 Arraignment Chief Criminal Calendar 04/14/2004 10:30AM 04/14/2004 CMPL-08/17/2004 GREGORY SYPOLT License Holder: Ruvim Gavrilyuk License Type: Construction Contractor (WA) License number: #2859072 Valid through 03/01/2021 Payment Methods: Cash, Check, Credit card WA UBI no. 604 397 258 License no. ROBINCL819DA Bond account no. 64918366 Policy no. CL-00190528 Casualty Insurance Policy no. 2859072 Acceptance Casualty Insurance Policy no. CL-00190528 Carney, Douglas Revelle Defendant Spokane Municipal K00523240 05-28-1996 Carney, Douglas Revelle Defendant Spokane Municipal B00080678 02-09-2009 Carney, Douglas Revelle Defendant Spokane Municipal K00534549 02-18-1997 Carney, Douglas Revelle Defendant Spokane Municipal 2Z0068831 01-14-2012 Carney, Douglas Revelle Defendant Spokane Municipal K00527344 08-14-1996 Carney, Douglas Revelle Defendant Spokane County Dist F00081785 06-16-2008 Carney, Douglas Revelle Defendant Spokane Municipal K00517493 04-08-1996 Carney, Douglas Revelle Defendant Spokane County Dist CB0011456 12-27-1996 Carney, Douglas Revelle Defendant Spokane County Dist CK0522856 04-23-1996 Carney, Douglas Revelle Defendant Spokane Municipal K00509809 09-12-1995 Carney, Douglas Revelle Defendant Spokane County Dist CB0021641 07-21-1997 Carney, Douglas Revelle Defendant Spokane County Dist CB0005734 06-25-1997 Carney, Douglas Revelle Defendant Spokane County Dist CB0014537 09-27-1995 Carney, Douglas Revelle Defendant Grant County Dist Ct 99451CC 11-02-1999 Carney, Douglas Revelle Defendant Spokane County Dist 3Z0939920 12-03-2013 Carney, Douglas Revelle Defendant Spokane Municipal M00063578 02-21-2003 Carney, Douglas Revelle Defendant Spokane Municipal T00061297 01-03-2005 Carney, Douglas Revelle Defendant Spokane Municipal T00061296 01-03-2005 Carney, Douglas Revelle Defendant Spokane Municipal K00509208 06-02-1995 Carney, Douglas Revelle Defendant Spokane Municipal K00539953 06-24-1997 Carney, Douglas Revelle Defendant Spokane Municipal W00008238 04-15-2011 Carney, Douglas Revelle Defendant Spokane County Dist 1Z0322601 06-09-2011 Carney, Douglas Revelle Defendant Upper Kittitas Dist 6Z0597827 05-23-2016 Carney, Douglas Revelle Defendant Pend Oreille Dist 6Z0894103 09-19-2016 Carney, Douglas Revelle Defendant Spokane Municipal 6Z1003733 10-25-2016 Carney, Douglas Revelle Defendant Franklin District I00623786 06-18-1997 Carney, Douglas Revelle Defendant Spokane Municipal U00087803 07-08-2008 Carney, Douglas Revelle Defendant Spokane County Dist XZ0094504 02-03-2020 CARNEY, DOUGLAS REVELLET00061296INSPP01/03/2005FAIL LICENSE DOG/CAT CARNEY, DOUGLAS REVELLET00061297INSPP01/03/2005FAIL LICENSE DOG/CAT CARNEY, DOUGLAS REVELLEM00040114CTSPPCL12/11/2000DWLS 3RD DEGREE CARNEY, DOUGLAS REVELLER00049983ITSPP12/11/2000NEGLIGENT DRIVING 2ND DEGREE CARNEY, DOUGLAS REVELLE 2Z0068831CTSPPCL 01/14/2012 DWLS 3RD DEGREE Case No: 121001627 - CARNEY, DOUGLAS REVELLE 06/24/1975 Print Charges COUNT 1:RIOT(WEAPON) Case Type Criminal Case File Date 01/18/2012 Court Superior Court Case Status CMPL-02/27/2013 Case Information File Date Sub Number Docket Entry 1/17/2012 0 PRELIMINARY APPEARANCE 1/17/2012 1 NOTICE OF ARREST 1/17/2012 2 STATEMENT OF FACTS 1/17/2012 3 ORDER OF RELEASE JAIL - BOND $5,000 1/17/2012 4 BOND $5,000 - ANGELS BAIL BONDS 1/17/2012 5 NOTICE OF APPEARANCE - LIMITED 1/17/2012 6 ORDER SETTING ARRAIGNMENT 02-01-12 1/18/2012 7 INFORMATION 1/18/2012 8 STATEMENT OF FACTS 1/18/2012 9 CERTIFICATE OF ADDRESS SEARCH 1/18/2012 10 SUMMONS 2/1/2012 11 NOTICE OF APPEARANCE 2/1/2012 12 ORDER SETTING TRIAL DATE 2/1/2012 13 OMNIBUS APPLICATION OF PROS ATTY 2/1/2012 14 ORDER ESTABLISHING COND. OF RELEASE 3/5/2012 15 ORDER EXONERATING BOND/BAIL 3/5/2012 16 COPY FAX 4/13/2012 0 MOTION HEARING 4/13/2012 0 HEARING CONTINUED: STIPULATED 4/13/2012 17 ORDER SETTING TRIAL DATE 6/1/2012 0 HEARING CONTINUED: STIPULATED 6/1/2012 0 MOTION HEARING 6/1/2012 18 ORDER SETTING TRIAL DATE 7/20/2012 0 HEARING CONTINUED: STIPULATED 7/20/2012 0 MOTION HEARING 7/20/2012 19 ORDER SETTING TRIAL DATE 9/7/2012 0 MOTION HEARING 9/7/2012 0 HEARING CONTINUED: STIPULATED 9/7/2012 20 ORDER SETTING TRIAL DATE 10/19/2012 0 HEARING CONTINUED: STIPULATED 10/19/2012 0 MOTION HEARING 10/19/2012 21 ORDER SETTING TRIAL DATE 12/7/2012 0 HEARING CONTINUED: STIPULATED 12/7/2012 22 ORDER SETTING TRIAL DATE 2/8/2013 23 ORDER SETTING TRIAL DATE 2/27/2013 0 GUILTY PLEA AND SENTENCING HEARING 2/27/2013 0 CASE RESOLUTION GUILTY PLEA BEFORE TRIAL COMMENCEMENT 2/27/2013 24 NOTICE: DEFENDANT REPORTING 2/27/2013 25 ORDER CLERKS LEGAL FINANCIAL INFO 2/27/2013 26 ORD PERMITTING FILING AMENDED INFO 2/27/2013 27 AMENDED INFORMATION 2/27/2013 28 STATEMENT OF DEFENDANT,PLEA GUILTY 2/27/2013 29 APPENDIX CRIMINAL HISTORY 2/27/2013 30 ORDER DNA TESTING 2/27/2013 31 FELONY JUDGMENT AND SENT 139017300 3/7/2013 0 NO DATA AT DOC DOC has no data for the case. AOC billing depends on funding. 4/10/2014 0 DOC SUPERVISION DOC is supervising the case. 5/8/2014 0 DOC ENDED SUPERVISION DOC ended supervision. AOC will bill if other conditions met. 7/25/2014 32 COLLECTION NOTICE 1/2/2015 33 AGREEMENT PAYMENT 5/7/2015 34 NOTICE OF ADDRESS CHANGE 12/19/2016 35 ORDER MODIFYING SENTENCE 6/13/2018 0 JUVENILE RESTITUTION NO INTEREST An automated system program update has changed the accrue interest flag(s) for non-restitution amounts on this case to NO, per RCW 10.82.090. 8/3/2018 0 COSTS ASSESSED COLLECTION FEE $100 11/3/2018 0 OC CLERK COSTS ONLY 11/3/2018 0 RT AGREED ORDER OUT OF CUSTODY 7/9/2019 36 NOTICE OF DEFT CHG OF ADDRESS Hearings/Due Dates Case Number Hearing Type/Due Date Calendar Start Date/Time End Date Location Status Official Name 121001627 Criminal Trial Criminal Trial Calendar 03/04/2013 9:30AM 03/04/2013 CMPL-02/27/2013 JAMES TRIPLET 121001627 Plea and Sentencing Plea Judge 02/27/2013 8:30AM 02/27/2013 CMPL-02/27/2013 MICHAEL PRICE 121001627 Pretrial Conference Chief Criminal Calendar 02/22/2013 10:30AM 02/22/2013 CMPL-02/27/2013 JAMES TRIPLET 121001627 Arraignment Chief Criminal Calendar 02/01/2012 9:30AM 02/01/2012 CMPL-02/27/2013 ANNETTE PLESE 121001627 First Appearance Chief Criminal Calendar 01/17/2012 1:30PM 01/17/2012 CMPL-02/27/2013 ANNETTE PLESE Case No: 081019706 - CARNEY, DOUGLAS REVELLE 06/24/1975 Print Charges COUNT 1:ASSAULT-3D(CR NEG/BOD Case Type Criminal Case File Date 06/18/2008 Court Superior Court Case Status CMPL-02/10/2009 Case Information File Date Sub Number Docket Entry 6/18/2008 1 INFORMATION 6/18/2008 2 STATEMENT OF FACTS 6/19/2008 3 CERTIFICATE OF ADDRESS SEARCH 6/19/2008 4 SUMMONS TO DEF TO APPEAR 6/23/2008 5 FEE ASSESSD-PUBLIC DEFENSE RECOUPMT 6/25/2008 6 NOTICE OF APPEARANCE 7/7/2008 0 INITIAL ARRAIGNMENT 7/7/2008 7 OMNIBUS APPLICATION OF PROS ATTY 7/7/2008 8 ORDER ESTABLISHING COND. OF RELEASE 7/7/2008 9 ORDER SETTING TRIAL DATE 7/9/2008 10 BOND $25,000 - MARCIS BAIL BONDS 7/11/2008 11 STATE'S LIST OF WITNESSES 7/30/2008 12 RETURN ON SUBPOENA-BRENDON WARNER 8/7/2008 13 RETURN ON SUBPOENA-LISA BAXTER 9/8/2008 0 OMNIBUS HEARING 9/8/2008 14 ORDER SETTING TRIAL DATE 10/17/2008 0 MOTION HEARING 10/17/2008 15 ORDER SETTING TRIAL DATE 11/3/2008 16 ORDER MODIFYING RELEASE CONDITIONS 1/5/2009 17 MOTION & AFFIDAVIT BENCH WARRANT 1/5/2009 18 ORDER FOR WARRANT NO BAIL ACCEPTED 1/6/2009 0 PRELIMINARY APPEARANCE 1/6/2009 19 SHERIFF'S RETURN ON A BENCH WARRANT 1/7/2009 20 ORDER SETTING TRIAL DATE 1/9/2009 0 HEARING CONTINUED: STIPULATED 1/9/2009 21 BOND MARCIS BAIL BONDS $25,000 1/9/2009 22 ORDER SETTING TRIAL DATE 1/26/2009 0 GUILTY PLEA ONLY HEARING 1/26/2009 23 ORD PERMITTING FILING AMENDED INFO 1/26/2009 24 AMENDED INFORMATION 1/26/2009 25 ORDER SETTING SENT HRG 2-9-09 1/27/2009 0 CASE RESOLUTION GUILTY PLEA BEFORE TRIAL COMMENCEMENT 1/27/2009 26 STATEMENT OF DEFENDANT,PLEA GUILTY 1/27/2009 27 APPENDIX DEF CRIMINAL HISTORY 2/9/2009 0 HEARING CONTINUED: UNSPECIFIED 2/10/2009 0 SENTENCING HEARING 2/10/2009 28 WARRANT OF COMMITMENT 2/10/2009 29 ORDER EXONERATING BOND/BAIL 2/10/2009 30 ORDER ON CLERKS FINANCIAL INFO 2/10/2009 31 FELONY JUDG AND SENT 09901249-1 2/10/2009 32 ORDER SETTING RESTITUTION 099012491 3/5/2009 0 DOC SUPERVISION DOC is supervising the case. 1/31/2012 0 COSTS ASSESSED - $100 COLLECTION 1/31/2012 33 DISPOSITION REPORT RCV'D 2/9/2012 0 DOC ENDED SUPERVISION DOC ended supervision. AOC will bill if other conditions met. 2/23/2012 34 COLLECTION NOTICE 2/28/2012 35 MAIL RETURN - UNCLAIMED 3/14/2012 36 LETTER RE LFO PYMNTS 4/16/2012 37 ORDER MODIFYING SENTENCE X-X 5/16/2013 38 NON-COMPLIANCE SANCTIONS ASSESSED 6/26/2013 39 NOTICE OF SCHEDULING 7/26/2013 6/28/2013 40 RETURN RECEIPT - CERTIFIED MAIL 7/2/2013 41 ORDER MODIFYING SENTENCE X-X 9/9/2014 42 NON-COMPLIANCE SANCTIONS ASSESSED 11/21/2014 43 NOTICE OF SCHEDULING 1/9/2015 12/1/2014 44 RETURN RECEIPT - CERTIFIED MAIL 1/7/2015 45 ORDER MODIFYING SENTENCE 5/7/2015 46 NOTICE OF ADDRESS CHANGE 3/8/2016 47 NON-COMPLIANCE OF LFO ORDER 12/19/2016 48 ORDER MODIFYING SENTENCE 6/13/2018 0 JUVENILE RESTITUTION NO INTEREST An automated system program update has changed the accrue interest flag(s) for non-restitution amounts on this case to NO, per RCW 10.82.090. 6/20/2018 0 FIN HOLD AS UNCLAIMED MONEY REPORT #: 09-2841 11/1/2018 0 FIN HOLD AS UNCLAIMED MONEY REPORT #: 09-2841 11/3/2018 0 OC CLERK RESITUTION ORDERED 11/3/2018 0 RT AGREED ORDER OUT OF CUSTODY 7/9/2019 49 NOTICE OF DEFT CHG OF ADDRESS Hearings/Due Dates Case Number Hearing Type/Due Date Calendar Start Date/Time End Date Location Status Official Name 081019706 First Appearance Chief Criminal Calendar 01/06/2009 1:30PM 01/06/2009 CMPL-02/10/2009 ELLEN CLARK 081019706 Omnibus Hearing Chief Criminal Calendar 09/08/2008 8:30AM 09/08/2008 CMPL-02/10/2009 JEROME LEVEQUE 081019706 Arraignment Chief Criminal Calendar 07/07/2008 10:00AM 07/07/2008 CMPL-02/10/2009 ELLEN CLARK Case No: 051006049 - CARNEY, DOUGLAS REVELLE 06/24/1975 Print Charges COUNT 1:CNTL SUB(DEL)CONSPIRAC, COUNT 2:CNTL SUB(POSS W/INT DE Case Type Criminal Case File Date 02/23/2005 Court Superior Court Case Status CMPL-06/15/2005 Case Information File Date Sub Number Docket Entry 2/23/2005 1 INFORMATION 2/23/2005 2 STATEMENT OF FACTS 2/25/2005 3 CERTIFICATE OF ADDRESS SEARCH 2/25/2005 4 SUMMONS 3/2/2005 5 NOTICE OF APPEARANCE 3/7/2005 0 INITIAL ARRAIGNMENT 3/8/2005 6 ORDER SETTING TRIAL DATE 3/8/2005 7 OMNIBUS APPLICATION OF PROS ATTY 3/8/2005 8 OMNIBUS APPLICATION BY DEFENDANT 3/8/2005 9 ORDER ESTABLISHING COND. OF RELEASE 4/11/2005 0 OMNIBUS HEARING 4/11/2005 10 ORDER SETTING TRIAL DATE 5/25/2005 11 MOTION TO SUPPRESS EVIDENCE 5/25/2005 12 MEMORANDUM OF AUTHORITIES 5/25/2005 13 NOTE FOR MOTION DOCKET 5/25/2005 14 MOTION FOR SEVERANCE OF OFFENSES 5/25/2005 15 MEMORANDUM OF AUTHORITIES 5/25/2005 16 NOTE FOR MOTION DOCKET 6/2/2005 0 HEARING STRICKEN: IN COURT OTHER 6/7/2005 17 ORDER SETTING TRIAL DATE 6/15/2005 0 GUILTY PLEA AND SENTENCING HEARING 6/15/2005 0 CASE RESOLUTION GUILTY PLEA BEFORE TRIAL COMMENCEMENT 6/15/2005 18 STATEMENT OF DEFENDANT,PLEA GUILTY 6/15/2005 19 APPENDIX CRIMINAL HISTORY 6/15/2005 20 WARRANT OF COMMITMENT 6/15/2005 21 ORDER OF DISPOSITION 6/15/2005 22 ORD PERMITTING FILING AMENDED INFO 6/15/2005 23 AMENDED INFORMATION 6/15/2005 24 JUDGMENT AND SENTENCE 059046449 7/7/2005 25 NOTIFICATION OF FELONY CONVICTION 7/8/2005 0 DOC SUPERVISION DOC is supervising the case. 8/11/2006 0 DOC ENDED SUPERVISION DOC ended supervision. AOC will bill if other conditions met. 8/25/2006 26 DISPOSITION REPORT RCV'D 8/29/2006 0 COSTS ASSESSED - $100 COLLECTION 8/30/2006 27 DISPOSITION REPORT RCV'D 9/13/2006 28 AGREEMENT - PAYMENT 3/18/2008 29 NOTICE OF ADDRESS CHANGE 4/16/2008 30 NOTICE OF ADDRESS CHANGE 8/29/2008 0 COSTS ASSESSED - REASSESSMENT $100 3/5/2009 0 DOC SUPERVISION DOC is supervising the case. 8/29/2009 0 COSTS ASSESSED - REASSESSMENT $100 12/3/2010 31 LETTER - LFO 1/10/2011 0 DOC ENDED SUPERVISION DOC ended supervision. AOC will bill if other conditions met. 9/30/2011 32 COLLECTION NOTICE 3/14/2012 33 LETTER RE LFO PYMNTS 4/16/2012 34 ORDER MODIFYING SENTENCE X-X 5/16/2013 35 NON-COMPLIANCE SANCTIONS ASSESSED 6/26/2013 36 NOTICE OF SCHEDULING 7/26/2013 6/28/2013 37 RETURN RECEIPT - CERTIFIED MAIL 7/2/2013 38 ORDER MODIFYING SENTENCE X-X 9/9/2014 39 NON-COMPLIANCE SANCTIONS ASSESSED 11/21/2014 40 NOTICE OF SCHEDULING 1/9/2015 12/1/2014 41 RETURN RECEIPT - CERTIFIED MAIL 1/7/2015 42 ORDER MODIFYING SENTENCE 5/7/2015 43 NOTICE OF ADDRESS CHANGE 3/8/2016 44 NON-COMPLIANCE OF LFO ORDER 12/19/2016 45 ORDER MODIFYING SENTENCE 6/13/2018 0 JUVENILE RESTITUTION NO INTEREST An automated system program update has changed the accrue interest flag(s) for non-restitution amounts on this case to NO, per RCW 10.82.090. 11/3/2018 0 OC CLERK COSTS ONLY 11/3/2018 0 RT AGREED ORDER OUT OF CUSTODY 7/9/2019 46 NOTICE OF DEFT CHG OF ADDRESS Hearings/Due Dates Case Number Hearing Type/Due Date Calendar Start Date/Time End Date Location Status Official Name 051006049 Pretrial Conference Chief Criminal Calendar 06/17/2005 10:00AM 06/17/2005 CMPL-06/15/2005 NEAL RIELLY 051006049 Motion Chief Criminal Calendar 06/02/2005 2:00PM 06/02/2005 CMPL-06/15/2005 SALVATORE COZZA 051006049 Omnibus Hearing Chief Criminal Calendar 04/11/2005 8:30AM 04/11/2005 CMPL-06/15/2005 KATHLEEN O'CONNOR 051006049 Arraignment Chief Criminal Calendar 03/07/2005 3:30PM 03/07/2005 CMPL-06/15/2005 KATHLEEN O'CONNOR ROHRICH, CODY WILLIAM 06/17/2020 11:30AM 6/17/2020 11:30 06/17/2020 2010194932 COURTHOUSE: COURTROOM 401 Arraignment Criminal - ADULT CRIMINAL MARYANN MORENO ROHRICH, CODY WILLIAM RYAN 06/17/2020 11:30AM 6/17/2020 11:30 06/17/2020 2010194932 COURTHOUSE: COURTROOM 401 Arraignment Criminal - ADULT CRIMINAL MARYANN MORENO Case No: 2010194932 - ROHRICH, CODY WILLIAM 01/02/1992 Print Charges COUNT 1:THEFT-2D(OBTAIN/EXERT, COUNT 2:POSS STOLEN MOTOR VEH Case Type Criminal Case File Date 06/09/2020 Court Superior Court Case Status ACT -06/09/2020 Case Information File Date Sub Number Docket Entry 6/5/2020 0 PRELIMINARY APPEARANCE Court Reporter: FTR GOLD DPA: SCHAFF ATD: NORDTVEDT BOND: OR AGREED SIGNED: SCHEDULING ORDER (ARR: 6/17); RELEASE CONDITIONS; 6/5/2020 1 NOTICE OF ARREST 6/5/2020 2 STATEMENT OF FACTS 6/5/2020 3 PRETRIAL REPORT 6/5/2020 4 ORDER ESTABLISHING CONDITIONS OF RELEASE 6/5/2020 5 ORDER SETTING ARRAIGN 6/17/20 @ 11:30 6/9/2020 6 INFORMATION 6/9/2020 7 STATEMENT OF FACTS 6/16/2020 8 NOTICE OF APPEARANCE AND REQUEST FOR DISCOVERY 6/17/2020 0 INITIAL ARRAIGNMENT COURT REPORTER: TERRI COCHRAN DPA: MOSCOWITZ ATD: SCHMIDT SIGNED: SCHEDULING ORDER: TR: 8/24 TD: 9/8; OMNIBUS APP BY PLAINTIFF Hearings/Due Dates Case Number Hearing Type/Due Date Calendar Start Date/Time End Date Location Status Official Name 2010194932 Criminal Trial Criminal Trial Calendar 09/08/2020 9:30AM 09/08/2020 COURTHOUSE: COURTROOM 408 ACT -06/09/2020 JOHN COONEY 2010194932 Trial Readiness Call Chief Criminal Calendar 08/24/2020 1:30PM 08/24/2020 COURTHOUSE: COURTROOM 408 ACT -06/09/2020 JOHN COONEY 2010194932 Arraignment Criminal Commissioner Calendar 06/17/2020 11:30AM 06/17/2020 COURTHOUSE: COURTROOM 401 ACT -06/09/2020 MARYANN MORENO 2010194932 First Appearance Criminal Commissioner Calendar 06/05/2020 1:30PM 06/05/2020 ACT -06/09/2020 JOHN STINE 164 Results for Hearings in Spokane County Superior Court for 6/5/2020. ... ROHRICH, CODY WILLIAM: 06/05/2020 1:30PM: 6/5/2020 13:30: 06/05/2020: 2010194932 2010194932: COURTHOUSE: COURTROOM 305: First Appearance : Criminal - PRE FILE ADULT CRIMINAL: Case No: 2010194932 - ROHRICH, CODY WILLIAM 01/02/1992 Print Charges COUNT 1:THEFT 2D SHOPLIFTING, COUNT 2:CONTROLLED SUBSTANCES POSSE, COUNT 3:POSSESSION OF STOLEN MOTOR Case Type Criminal Case File Date 06/05/2020 Court Superior Court Case Status ACT -06/05/2020 Case Information File Date Sub Number Docket Entry 6/5/2020 0 PRELIMINARY APPEARANCE Court Reporter: FTR GOLD DPA: SCHAFF ATD: NORDTVEDT BOND: OR AGREED SIGNED: SCHEDULING ORDER (ARR: 6/17); RELEASE CONDITIONS; 6/5/2020 1 NOTICE OF ARREST Hearings/Due Dates Case Number Hearing Type/Due Date Calendar Start Date/Time End Date Location Status Official Name 2010194932 Arraignment Criminal Commissioner Calendar 06/17/2020 11:30AM 06/17/2020 COURTHOUSE: COURTROOM 401 ACT -06/05/2020 MARYANN MORENO 2010194932 First Appearance Criminal Commissioner Calendar 06/05/2020 1:30PM 06/05/2020 ACT -06/05/2020 JOHN STINE ROHRICH, CODY WILLIAM RYAN (28 years old) -- Inmate Number: 57522 Booking Number: 20J1117 Booked Date/Time: 6/5/2020 5:46:00 PM Alleged Offenses: 1) COLFAX MUNI COURT CRIM TRSPSS 1; MAL MISCH 3; FLSE STTMNT PUB SERV (WARRANT NUMBER: 18-CF1864) (WARRANT) Bond Information: $5,050.00 Bond or $5,050.00 Cash (Colfax Muni.) Sentence Class: UM STATE OF WASHINGTON vs ROHRICH, CODY WILLIAM ROBERT Case: 2010215732 Charges: COUNT 1:BURGLARY-2ND DEG-ATMPT Case Type: Criminal File Date: 06/26/2020 Court: Superior Court Case Status: ACT -06/26/2020 Hearings Official Name Calendar Hearing Type Start Date End Date Location TONY HAZEL Chief Criminal Calendar Arraignment 07/07/2020 9:00AM 07/07/2020 JOHN STINE Criminal Commissioner Calendar First Appearance 06/24/2020 1:30PM 06/24/2020 Arbeit Real life record's Artist . 23. Dezember 2019 bis heute . Spokane Just me n a few other outsiders fittin in gettin it down low kane town style Real life record's Musician . 23. Dezember 2019 bis heute . Spokane Ausbildung Animal Behavior College ABC Certified Dog Trainer . Valencia (Santa Clarita) On Track Academy Bis zum 2011 . Spokane Aktueller Wohnort und Heimatort Spokane Aktueller Wohnort Favoriten Sonstiges Lane K Brown Foundation, Idaho County Sheriff's Office, Idaho County Free Press, Spokane Houses,Rooms,Rentals, Hood Revenue Kennels, Off Leash K9 Training, LLC Spokane/CDA, Douglas Remodelers, Love and miss my Dad, Death Drugs and Beauty 3.0, Barber College, Branded Bills (Tempe), Alumishine Metal Polishing Lane K Brown Foundation Cody William Robert Rohrich of Colfax, WA and Spokane, WA https://web.archive.org/web/20200606051801/https://s1.mylife.com/photos/031/202/894L.jpg 1 Rohrich, Cody Respondent Whitman County Dist AH1211Y14 12-11-2014 2 Rohrich, Cody Defendant Colfax Municipal 13691 04-05-2013 3 Rohrich, Cody Defendant Whitman County Dist P00151032 02-19-2015 4 Rohrich, Cody Respondent Whitman County Dist AH0072715 07-27-2015 5 Rohrich, Cody Defendant Whitman County Dist P00151033 02-19-2015 6 Rohrich, Cody Defendant Whitman County Dist P00151058 03-27-2015 7 Rohrich, Cody Defendant Spokane Municipal N00027617 02-08-2011 8 Rohrich, Cody Defendant Colfax Municipal 13642 05-14-2013 9 Rohrich, Cody Defendant Colfax Municipal 13024 06-11-2013 10 Rohrich, Cody Defendant Whitman County Dist P00151012 01-22-2015 11 Rohrich, Cody Defendant Colfax Municipal 12CF0986A 10-30-2012 12 Rohrich, Cody Defendant Colfax Municipal 13648 07-01-2013 13 Rohrich, Cody Defendant Whitman County Dist P00151085 05-05-2015 14 Rohrich, Cody Defendant Colfax Municipal 4191 10-16-2012 15 Rohrich, Cody William Defendant Colfax Municipal 8Z0177188 01-29-2018 16 Rohrich, Cody William Defendant Colfax Municipal 8Z0539099 07-23-2018 17 Rohrich, Cody William Defendant Whitman County Dist P00191289 11-20-2019 18 Rohrich, Cody William Robert Defendant Colfax Municipal 18-CF1864 10-30-2018 19 Rohrich, Cody William Robert Defendant Colfax Municipal PC0102018 10-22-2018 20 Rohrich, Cody William Robert Respondent Whitman County Dist DV0010419 01-04-2019 21 Rohrich, Cody William Robert Defendant Colfax Municipal PC122918B 01-08-2019 22 Rohrich, Cody William Robert Defendant Colfax Municipal 19-CF0117 02-05-2019 23 Rohrich, Cody William Robert Defendant Colfax Municipal 19-CF0031 01-10-2019 24 Rohrich, Cody William Robert Defendant Colfax Municipal 18-CF1573 09-11-2018 25 Rohrich, Cody William Robert Defendant Spokane Municipal XZ0139450 02-05-2020 26 Rohrich, Cody William Robert Defendant Spokane Municipal XZ0139451 02-05-2020 Linkedin Status as Unemployed: https://www.linkedin.com/in/cody-rohrich-85398b138 Inmate Search: Connect with Cody Rohrich, Colfax, Washington https://www.inmateaid.com/inmate-profiles/cody-rohrich Cody Rohrich is an inmate currently at the Whitman County Jail, located in Colfax,WA. If you are wishing to visit, the visitation hours are limited by the security level of the facility; Criminal or Civil Court records found on Cody's Background Report Criminal or Civil Court records found on Cody's Family, Friends, Neighbors, or Classmates Approximate Reputation Score 0/5 AKA:cody w rohrich Associates:deana j burlingame, kathryn rohrich https://www.mylife.com/cody-rohrich/e73581211083318 Locations: Colfax, WA Spokane, WA West Fargo, ND Studied At: Moorhead High School Shadle Park High School IP addresses: 97.107.204.79 216.171.84.176 192.68.253.217 Whitman County Gazette: https://www.wcgazette.com/story/2018/10/25/news/dog-knapper-arrested/27258.html Cody W. Rohrich, 26, Colfax, was booked into jail here early Tuesday morning, Oct. 16, on probable charges of burglary, possession of stolen property and possession of methamphetamine. Rohrich, who had been sentenced to a week in jail on a drug possession charge Oct. 5, was alleged to be in possession of two dogs which had turned up missing from the Colfax dog pound Sept. 15. According to an arrest report by Colfax Officer Cory Alcantar, he went to the scene of an arrest early Oct. 16 by Deputy Tyler Langerfeld in Colfax and observed Deeno, a pit bull believed to be owned by Rohrich, in the vehicle. Alcantar said another pit bull owned by Rohrich, Viper, later peeked out from under a blanket inside the vehicle. The two pit bulls had been cut out of cages where they had been confined Sept. 15 by the city in the pound which is located at the sewer plant on the Walla Walla Highway. Deeno and Viper had been confiscated by city police to hold for a dangerous dog hearing. Officer Alcantar said he had been attacked by one of the dogs, and after Rohrich had been cautioned, one the dogs got loose and bit a Colfax resident. A separate arrest report by Officer Perry Tate said after Rohrich had been jailed he began to complain about discomfort and admitted he had stuck a baggie containing six to eight grams of methamphetamine up his r****m. He admitted he had been unsuccessful in an attempt to remove the packet while he was being processed for entry into the jail. He allegedly told Tate he believed he had damaged the packet and feared he would suffer a drug overdose. The report said Rohrich began showing signs of drug ingestion and was taken to Whitman Hospital where the packet was recovered. It was turned over to the police department as evidence. Bond for pre-trial release was set at $25,000 in a first appearance later Oct. 17. The Oct. 5 conviction related to a charge of possession of methamphetamine which was confiscated during an arrest July 27, when Rohrich was a passenger in a car driven by another drug suspect at McDonald's in Pullman. Friday, Deputy Prosecutor Merritt Decker informed Judge Gary Libey the county does not intend to file felony charges in superior court against Rohrich. Decker said he anticipates any charges in the case will be filed in Colfax Municipal Court. https://web.archive.org/web/20200608052054/https://postimg.cc/Cd7TP1br https://web.archive.org/web/20200608052311/https://postimg.cc/ns4wXRkS Public Records | Local | dnews.com https://dnews.com/local/public-records/article_7bce30e8-96e9-5acd-9ce4-21becf6b5cb2.html Cody Rohrich, 23, was convicted of second-degree criminal trespassing and a probation violation, sentenced to 30 days in jail, with 27 suspended and fined $43. https://www.hybrid-analysis.com/sample/fe79063e212e26c7d262a00923c2e7440e24f575519f0f122779725e4f982db7/5ee11fa231040469e12d6333 LockDownBrowser-2-0-6-06.exe malicious Threat Score: 100/100 AV Detection: 5% Labeled as: Unavailable This report is generated from a file or URL submitted to this webservice on June 10th 2020 18:00:27 (UTC) Guest System: Windows 7 32 bit, Professional, 6.1 (build 7601), Service Pack 1 Report generated by Falcon Sandbox v8.30 (C) Hybrid Analysis Detected as: QVM41.1.Malware.Gen, Heur.Corrupt, Trojan.Banker.ClipBanker.afk, Trojan.Win32.Dofoil.gfrmxi, Malware.generic, and BScope.Trojan.Shelma Basic Properties MD5 09e116f0a1ac0a159c01f43ed6bd184c SHA-1 a5b27ebb50da026dd270247b618e1c7932c2ff80 SHA-256 fe79063e212e26c7d262a00923c2e7440e24f575519f0f122779725e4f982db7 Vhash 077066656d15155567zd004dmz18fz Authentihash a2da0b2dd9fae46976b3f14248110627845ca2059cfe9a5be7d14085761f51e5 Imphash 1f61de89f20bdb68b3a74d97c24509aa SSDEEP 1572864:FehMRuLF/wO5XK3p5jLLHIBHDykjaVAOlTyCFlSVgEKgIu8ELcc16GQr+k8cEnKU:aF/wO5XEjLzIxaVAOlurVgEKgIuoc16y File type Win32 EXE Magic PE32 executable for MS Windows (GUI) Intel 80386 32-bit File size 72.96 MB (76500024 bytes) F-PROT packer embedded, appended, Unicode, ZIP History Creation Time 2020-05-11 20:43:39 Signature Date 2020-05-19 18:04:00 First Submission 2020-06-10 17:55:03 Last Submission 2020-06-10 17:55:03 Last Analysis 2020-06-11 00:29:07 Spyware Found a string that may be used as part of an injection method Persistence Writes data to a remote process Fingerprint Queries kernel debugger information Reads the active computer name Reads the cryptographic machine GUID Evasive Marks file for deletion Possibly tries to implement anti-virtualization techniques Spreading Opens the MountPointManager (often used to detect additional infection locations) Malicious 2 LockDownBrowser.dll Size 72KiB (73728 bytes) Type pedll executable Description PE32 executable (DLL) (console) Intel 80386, for MS Windows AV Scan Result Labeled as "Malware.Generic" (1/71) Runtime Process Setup.exe (PID: 2188) MD5 006ca23771361cbc560cfb3434c9e2fc SHA1 f369bda126b4ebc97876e703e90dc9f82b5fdfb5 SHA256 8f724ad443b1eeeb9ba2804855f31cc297ee2c75c4c09107bb4837ed1f8b0d9b LockDownBrowser.dll Filename LockDownBrowser.dll Size 72KiB (73728 bytes) Type pedll executable Description PE32 executable (DLL) (console) Intel 80386, for MS Windows Architecture 32 Bit MD5 006ca23771361cbc560cfb3434c9e2fc Copy MD5 to clipboard SHA1 f369bda126b4ebc97876e703e90dc9f82b5fdfb5 Copy SHA1 to clipboard SHA256 8f724ad443b1eeeb9ba2804855f31cc297ee2c75c4c09107bb4837ed1f8b0d9b Copy SHA256 to clipboard SHA512 b5476e4198630cebbfd29f246ce405d7638fc5a108fbb9929acd7a42e15e25a93418326d806eba2acb63fd4c77267417851e281b2c3fb4274c1883c8000b4c7e Copy SHA512 to clipboard ssdeep 1536:gMJdcGTDI1Sx5j1q5JuJJnsWsUcdq5V2UdPA:g4dcGTDHxuYGVq5V2UdI imphash ab940816ca76beca65cfa9235e0f5485 authentihash 1998eeafcd3035b4ed73f49265750ee4e7c7ee28b8427ce735a830c7fe4175bf Compiler/Packer Borland Delphi 3.0 (???) File Sections Name Entropy Virtual Address Virtual Size Raw Size MD5 .text 6.58599845539 0x1000 0xa637 0xa800 4614b2bff124dd777c2c0f38ccbb2f30 .rdata 4.88373307589 0xc000 0x599c 0x5a00 b4239b42a2c0de3a72a203a8e37565fc .data 2.03561095123 0x12000 0x1174 0x800 94ae50da525d8aba995849a1e0b32d2e .cldb 0.0518759625885 0x14000 0xc 0x200 59ea0c2cf193600c3f855c2beb08781e .reloc 6.19246495135 0x15000 0xe30 0x1000 841f08ad26023c627793e96f9a53a514 File Imports KERNEL32.dll USER32.dll CloseHandle CreateFileW DecodePointer DeleteCriticalSection EnterCriticalSection ExitProcess FindClose FindFirstFileExA FindNextFileA FlushFileBuffers FreeEnvironmentStringsW FreeLibrary GetACP GetCommandLineA GetCommandLineW GetConsoleCP GetConsoleMode GetCPInfo GetCurrentProcess GetCurrentProcessId GetCurrentThreadId GetEnvironmentStringsW GetFileType GetLastError GetModuleFileNameA GetModuleHandleExW GetModuleHandleW GetOEMCP GetProcAddress GetProcessHeap GetStartupInfoW GetStdHandle GetStringTypeW GetSystemTimeAsFileTime HeapAlloc HeapFree HeapReAlloc HeapSize InitializeCriticalSectionAndSpinCount InitializeSListHead InterlockedFlushSList IsDebuggerPresent IsProcessorFeaturePresent IsValidCodePage LCMapStringW LeaveCriticalSection LoadLibraryExW MultiByteToWideChar QueryPerformanceCounter RaiseException RtlUnwind SetFilePointerEx SetLastError SetStdHandle SetUnhandledExceptionFilter TerminateProcess TlsAlloc TlsFree TlsGetValue TlsSetValue UnhandledExceptionFilter WideCharToMultiByte WriteConsoleW WriteFile File Exports Name Ordinal Address ?CLDBDoSomeOtherStuff@@YAHPAH@Z #1 0x10001000 ?CLDBDoSomeOtherStuffs@@YAHPAH@Z #2 0x10001070 ?CLDBDoSomeStuff@@YAHPAH@Z #3 0x100010a0 ?CLDBDoYetMoreStuff@@YAHPAH@Z #4 0x100011b0 libcef.dll Size 5MiB (5210112 bytes) Type pedll executable Description PE32 executable (DLL) (console) Intel 80386, for MS Windows AV Scan Result Labeled as "Heur.Corrupt" (1/70) Runtime Process Setup.exe (PID: 2188) MD5 3d74d5d1ee3f52c025493dd615c21d99 SHA1 eeb2e9f2319f6f57871282da1005c117a4297cfe SHA256 6944c878e13e097612241582a192752df5a0d3bb76d5d28e2449642c64ff4f39 File Sections Name Entropy Virtual Address Virtual Size Raw Size MD5 .text 6.80168727834 0x1000 0x4f4e382 0x4f4e400 23822a11b83bca4fd71023a7d15b7346 .rdata 0 0x4f50000 0xcbb81c 0xcbba00 d41d8cd98f00b204e9800998ecf8427e .data 0 0x5c0c000 0x206900 0x42600 d41d8cd98f00b204e9800998ecf8427e .00cfg 0 0x5e13000 0x4 0x200 d41d8cd98f00b204e9800998ecf8427e .rodata 0 0x5e14000 0x1df0 0x1e00 d41d8cd98f00b204e9800998ecf8427e .tls 0 0x5e16000 0xc9 0x200 d41d8cd98f00b204e9800998ecf8427e .voltbl 0 0x5e17000 0x183 0x200 d41d8cd98f00b204e9800998ecf8427e CPADinfo 0 0x5e18000 0x28 0x200 d41d8cd98f00b204e9800998ecf8427e prot 0 0x5e19000 0xcd 0x200 d41d8cd98f00b204e9800998ecf8427e .rsrc 0 0x5e1a000 0x20e58 0x21000 d41d8cd98f00b204e9800998ecf8427e .reloc 0 0x5e3b000 0x2f3c04 0x2f3e00 d41d8cd98f00b204e9800998ecf8427e /4 0 0x612f000 0x2a3a 0x2c00 d41d8cd98f00b204e9800998ecf8427e MITRE ATT&CK(TM) Technique - T1035 - Service Execution ATT&CK ID: T1035 Tactics: Execution Permissions Required: Administrator, SYSTEM Description: Adversaries may execute a binary, command, or script via a method that interacts with Windows services, such as the Service Control Manager(...) Source: https://attack.mitre.org/techniques/T1035 Suspicious Indicators: 1 confidential indicators MITRE ATT&CK(TM) Technique - T1179 - Hooking ATT&CK ID: T1179 Tactics: Persistence, Privilege Escalation, Credential Access Permissions Required: Administrator, SYSTEM Description: Windows processes often leverage application programming interface (API) functions to perform tasks that require reusable system resources(...) Source: https://attack.mitre.org/techniques/T1179 Suspicious Indicators: Installs hooks/patches the running process Informative Indicators: Loads rich edit control libraries MITRE ATT&CK(TM) Technique - T1215 - Kernel Modules and Extensions ATT&CK ID: T1215 Tactics: Persistence Permissions Required: root Description: Loadable Kernel Modules (or LKMs) are pieces of code that can be loaded and unloaded into the kernel upon demand(...) Source: https://attack.mitre.org/techniques/T1215 Informative Indicators: Opens the Kernel Security Device Driver (KsecDD) of Windows MITRE ATT&CK(TM) Technique - T1179 - Hooking ATT&CK ID: T1179 Tactics: Persistence, Privilege Escalation, Credential Access Permissions Required Administrator, SYSTEM Description: Windows processes often leverage application programming interface (API) functions to perform tasks that require reusable system resources(...) Source: https://attack.mitre.org/techniques/T1179 Suspicious Indicators: Installs hooks/patches the running process Informative Indicators: Loads rich edit control libraries MITRE ATT&CK(TM) Technique - T1055 - Process Injection ATT&CK ID: T1055 Tactics: Defense Evasion, Privilege Escalation Permissions Required: User, Administrator, SYSTEM, root Description: Process injection is a method of executing arbitrary code in the address space of a separate live process(...) Source: https://attack.mitre.org/techniques/T1055 Malicious Indicators *Allocates virtual memory in a remote process *Writes data to a remote process Suspicious Indicators: 3 confidential indicators MITRE ATT&CK(TM) Technique - T1107 - File Deletion ATT&CK ID: T1107 Tactics: Defense Evasion Permissions Required: User Description: Malware, tools, or other non-native files dropped or created on a system by an adversary may leave traces behind as to what was done within a network and how(...) Source: https://attack.mitre.org/techniques/T1107 Suspicious Indicators: Marks file for deletion MITRE ATT&CK(TM) Technique - T1112 - Modify Registry ATT&CK ID: T1112 Tactics: Defense Evasion Permissions Required: User, Administrator, SYSTEM Description: Adversaries may interact with the Windows Registry to hide configuration information within Registry keys, remove information as part of cleaning up, or as part of other techniques to aid in Persistence and Execution(...) Source https://attack.mitre.org/techniques/T1112 Suspicious Indicators: 1 confidential indicators Informative Indicators: Creates or modifies windows services MITRE ATT&CK(TM) Technique - T1055 - Process Injection ATT&CK ID: T1055 Tactics: Defense Evasion, Privilege Escalation Permissions Required: User, Administrator, SYSTEM, root Description: Process injection is a method of executing arbitrary code in the address space of a separate live process(...) Source: https://attack.mitre.org/techniques/T1055 Malicious Indicators *Allocates virtual memory in a remote process *Writes data to a remote process Suspicious Indicators: 3 confidential indicators MITRE ATT&CK(TM) Technique - T1045 - Software Packing ATT&CK ID: T1045 Tactics: Defense Evasion Description: Software packing is a method of compressing or encrypting an executable(...) Source: https://attack.mitre.org/techniques/T1045 Informative Indicators : *Matched Compiler/Packer signature MITRE ATT&CK(TM) Technique - T1497 - Virtualization/Sandbox Evasion ATT&CK ID: T1497 Tactics: Defense Evasion, Discovery Description: Adversaries may check for the presence of a virtual machine environment (VME) or sandbox to avoid potential detection of tools and activities(...) Source: https://attack.mitre.org/techniques/T1497 Suspicious Indicators: *Possibly tries to implement anti-virtualization techniques MITRE ATT&CK(TM) Technique - T1179 - Hooking ATT&CK ID: T1179 Tactics: Persistence, Privilege Escalation, Credential Access Permissions Required: Administrator, SYSTEM Description: Windows processes often leverage application programming interface (API) functions to perform tasks that require reusable system resources(...) Source: https://attack.mitre.org/techniques/T1179 Suspicious Indicators: *Installs hooks/patches the running process Informative Indicators: *Loads rich edit control libraries MITRE ATT&CK(TM) Technique - T1010 - Application Window Discovery ATT&CK ID: T1010 Tactics: Discovery Permissions Required: User Description: Adversaries may attempt to get a listing of open application windows(...) Source: https://attack.mitre.org/techniques/T1010 Informative Indicators *Scanning for window names MITRE ATT&CK(TM) Technique - T1046 - Network Service Scanning ATT&CK ID: T1046 Tactics: Discovery Permissions Required: Administrator, SYSTEM, User Description: Adversaries may attempt to get a listing of services running on remote hosts, including those that may be vulnerable to remote software exploitation(...) Source: https://attack.mitre.org/techniques/T1046 Suspicious Indicators: *Detected increased number of ARP broadcast requests (network device lookup) MITRE ATT&CK(TM) Technique - T1120 - Peripheral Device Discovery ATT&CK ID: T1120 Tactics: Discovery Permissions Required: User, Administrator, SYSTEM Description: Adversaries may attempt to gather information about attached peripheral devices and components connected to a computer system(...) Source: https://attack.mitre.org/techniques/T1120 Informative Indicators *Queries volume information *Queries volume information of an entire harddrive MITRE ATT&CK(TM) Technique - T1012 - Query Registry ATT&CK ID: T1012 Tactics: Discovery Permissions Required: User, Administrator, SYSTEM Description: Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software(...) Source: https://attack.mitre.org/techniques/T1012 Suspicious Indicators: *Reads information about supported languages *Reads the cryptographic machine GUID *2 confidential indicators Informative Indicators: *Reads the registry for installed applications MITRE ATT&CK(TM) Technique - T1497 - Virtualization/Sandbox Evasion ATT&CK ID: T1497 Tactics: Defense Evasion, Discovery Description: Adversaries may check for the presence of a virtual machine environment (VME) or sandbox to avoid potential detection of tools and activities(...) Source: https://attack.mitre.org/techniques/T1497 Suspicious Indicators: *Possibly tries to implement anti-virtualization techniques MITRE ATT&CK(TM) Technique - T1114 - Email Collection ATT&CK ID: T1114 Tactics: Collection Description: Adversaries may target user email to collect sensitive information from a target(...) Source https://attack.mitre.org/techniques/T1114 Suspicious Indicators: 1 confidential indicators Malicious Indicators 4 General The analysis extracted a file that was identified as malicious details 1/70 Antivirus vendors marked dropped file "libcef.dll" as malicious (classified as "Heur.Corrupt" with 1% detection rate) 1/71 Antivirus vendors marked dropped file "LockDownBrowser.dll" as malicious (classified as "Malware.Generic" with 1% detection rate) source Extracted File relevance 10/10 Installation/Persistance Allocates virtual memory in a remote process details "LockDownBrowser-2-0-6-06.exe" allocated memory in "%TEMP%ldzAAE8v8_context_snapshot.bin" "setup.exe" allocated memory in "%TEMP%{72FABB89-BE3D-4678-B3F9-B67C1E7548DD}Setup.exe" source API Call relevance 7/10 ATT&CK ID T1055 (Show technique in the MITRE ATT&CK(TM) matrix) Writes data to a remote process details "LockDownBrowser-2-0-6-06.exe" wrote 1500 bytes to a remote process "%TEMP%ldzAAE8setup.exe" (Handle: 176) "LockDownBrowser-2-0-6-06.exe" wrote 4 bytes to a remote process "C:Users%USERNAME%AppDataLocalTempldzAAE8setup.exe" (Handle: 176) "LockDownBrowser-2-0-6-06.exe" wrote 32 bytes to a remote process "C:Users%USERNAME%AppDataLocalTempldzAAE8setup.exe" (Handle: 176) "LockDownBrowser-2-0-6-06.exe" wrote 52 bytes to a remote process "C:Users%USERNAME%AppDataLocalTempldzAAE8setup.exe" (Handle: 176) "setup.exe" wrote 1500 bytes to a remote process "C:Users%USERNAME%AppDataLocalTemp{72FABB89-BE3D-4678-B3F9-B67C1E7548DD}Setup.exe" (Handle: 392) "setup.exe" wrote 4 bytes to a remote process "C:Users%USERNAME%AppDataLocalTemp{72FABB89-BE3D-4678-B3F9-B67C1E7548DD}Setup.exe" (Handle: 392) "setup.exe" wrote 32 bytes to a remote process "C:Users%USERNAME%AppDataLocalTemp{72FABB89-BE3D-4678-B3F9-B67C1E7548DD}Setup.exe" (Handle: 392) "setup.exe" wrote 52 bytes to a remote process "C:Users%USERNAME%AppDataLocalTemp{72FABB89-BE3D-4678-B3F9-B67C1E7548DD}Setup.exe" (Handle: 392) source API Call relevance 6/10 ATT&CK ID T1055 (Show technique in the MITRE ATT&CK(TM) matrix) Unusual Characteristics Checks for a resource fork (ADS) file details "Setup.exe" checked file "C:" source API Call relevance 5/10 Suspicious Indicators 28 Anti-Detection/Stealthyness Queries kernel debugger information details "Setup.exe" at 562535353-00002188-00000105-56331400129 source API Call relevance 6/10 Anti-Reverse Engineering PE file has unusual entropy sections details .text with unusual entropies 7.86483547015 source Static Parser relevance 10/10 Environment Awareness Possibly tries to implement anti-virtualization techniques details "RFqEMUdUD" (Indicator: "qemu") source String relevance 4/10 ATT&CK ID T1497 (Show technique in the MITRE ATT&CK(TM) matrix) Reads the cryptographic machine GUID details "Setup.exe" (Path: "HKLMSOFTWAREMICROSOFTCRYPTOGRAPHY"; Key: "MACHINEGUID") source Registry Access relevance 10/10 ATT&CK ID T1012 (Show technique in the MITRE ATT&CK(TM) matrix) External Systems Found an IP/URL artifact that was identified as malicious by at least one reputation engine details 1/72 reputation engines marked "http://i.pe" as malicious (1% detection rate) source External System relevance 10/10 General Reads configuration files details "setup.exe" read file "%TEMP%ldzAAE8setup.ini" "setup.exe" read file "%TEMP%{72FABB89-BE3D-4678-B3F9-B67C1E7548DD}setup.ini" "Setup.exe" read file "%TEMP%{72FABB89-BE3D-4678-B3F9-B67C1E7548DD}setup.ini" "Setup.exe" read file "%TEMP%ldzAAE8 x0407.ini" "Setup.exe" read file "%TEMP%ldzAAE8 x0409.ini" "Setup.exe" read file "%TEMP%ldzAAE8 x040a.ini" "Setup.exe" read file "%TEMP%ldzAAE8 x0410.ini" "Setup.exe" read file "%TEMP%ldzAAE8 x0416.ini" source API Call relevance 4/10 Installation/Persistance Drops executable files details "ISSetup.dll" has type "PE32 executable (DLL) (GUI) Intel 80386 for MS Windows" "chrome_elf.dll" has type "PE32 executable (DLL) (GUI) Intel 80386 for MS Windows" "Setup.exe" has type "PE32 executable (GUI) Intel 80386 for MS Windows" "libEGL.dll" has type "PE32 executable (DLL) (console) Intel 80386 for MS Windows" "LockDownBrowser.exe" has type "PE32 executable (GUI) Intel 80386 for MS Windows" "d3dcompiler_47.dll" has type "PE32 executable (DLL) (console) Intel 80386 for MS Windows" "libGLESv2.dll" has type "PE32 executable (DLL) (console) Intel 80386 for MS Windows" "libcef.dll" has type "PE32 executable (DLL) (console) Intel 80386 for MS Windows" "LockDownBrowser.dll" has type "PE32 executable (DLL) (console) Intel 80386 for MS Windows" "LdbRst10.exe" has type "PE32 executable (GUI) Intel 80386 for MS Windows" "setup.exe" has type "PE32 executable (GUI) Intel 80386 for MS Windows" "ISS9F8A.tmp" has type "PE32 executable (DLL) (GUI) Intel 80386 for MS Windows" source Extracted File relevance 10/10 Network Related Detected increased number of ARP broadcast requests (network device lookup) details Attempt to find devices in networks: "192.168.240.115/32, 192.168.241.30/32, 192.168.241.75/32, 192.168.241.126/32, 192.168.241.133/32, 192.168.241.142/32, 192.168.241.145/32, 192.168.241.148/32, 192.168.241.192/31, 192.168.241.195/32, ..." source Network Traffic relevance 10/10 ATT&CK ID T1046 (Show technique in the MITRE ATT&CK(TM) matrix) Found potential IP address in binary/memory details "2.0.6.06" source String relevance 3/10 System Destruction Marks file for deletion details "%TEMP%{72FABB89-BE3D-4678-B3F9-B67C1E7548DD}Setup.exe" marked "%TEMP%{77C18B70-EFA0-4B6F-AD72-42EB04A1D5E8}" for deletion "%TEMP%{72FABB89-BE3D-4678-B3F9-B67C1E7548DD}Setup.exe" marked "C:Users%USERNAME%AppDataLocalTemp{77FA3262-348C-4195-A883-BDDD43217032}" for deletion "%TEMP%{72FABB89-BE3D-4678-B3F9-B67C1E7548DD}Setup.exe" marked "C:Users%USERNAME%AppDataLocalTemp{AA6E03D4-5241-4B2B-B919-F95E997AEAEA}{BBC7F69B-7A94-41E9-8A4B-B55A8D06431F}set1E44.tmp" for deletion "%TEMP%{72FABB89-BE3D-4678-B3F9-B67C1E7548DD}Setup.exe" marked "C:Users%USERNAME%AppDataLocalTemp{AA6E03D4-5241-4B2B-B919-F95E997AEAEA}{BBC7F69B-7A94-41E9-8A4B-B55A8D06431F}lic1E64.tmp" for deletion "%TEMP%{72FABB89-BE3D-4678-B3F9-B67C1E7548DD}Setup.exe" marked "C:Users%USERNAME%AppDataLocalTemp{AA6E03D4-5241-4B2B-B919-F95E997AEAEA}{BBC7F69B-7A94-41E9-8A4B-B55A8D06431F}Fon1E75.tmp" for deletion "%TEMP%{72FABB89-BE3D-4678-B3F9-B67C1E7548DD}Setup.exe" marked "C:Users%USERNAME%AppDataLocalTemp{AA6E03D4-5241-4B2B-B919-F95E997AEAEA}cor1EA6.tmp" for deletion "%TEMP%{72FABB89-BE3D-4678-B3F9-B67C1E7548DD}Setup.exe" marked "C:Users%USERNAME%AppDataLocalTemp{AA6E03D4-5241-4B2B-B919-F95E997AEAEA}dot1EB6.tmp" for deletion "%TEMP%{72FABB89-BE3D-4678-B3F9-B67C1E7548DD}Setup.exe" marked "C:Users%USERNAME%AppDataLocalTemp{AA6E03D4-5241-4B2B-B919-F95E997AEAEA}dot1EC7.tmp" for deletion "%TEMP%{72FABB89-BE3D-4678-B3F9-B67C1E7548DD}Setup.exe" marked "C:Users%USERNAME%AppDataLocalTemp{AA6E03D4-5241-4B2B-B919-F95E997AEAEA}{BBC7F69B-7A94-41E9-8A4B-B55A8D06431F}Str1ED7.tmp" for deletion "%TEMP%{72FABB89-BE3D-4678-B3F9-B67C1E7548DD}Setup.exe" marked "C:Users%USERNAME%AppDataLocalTemp{AA6E03D4-5241-4B2B-B919-F95E997AEAEA}{BBC7F69B-7A94-41E9-8A4B-B55A8D06431F}isr1EE8.tmp" for deletion "%TEMP%{72FABB89-BE3D-4678-B3F9-B67C1E7548DD}Setup.exe" marked "C:Users%USERNAME%AppDataLocalTemp{AA6E03D4-5241-4B2B-B919-F95E997AEAEA}{BBC7F69B-7A94-41E9-8A4B-B55A8D06431F}def1F18.tmp" for deletion "%TEMP%{72FABB89-BE3D-4678-B3F9-B67C1E7548DD}Setup.exe" marked "C:Users%USERNAME%AppDataLocalTemp{AA6E03D4-5241-4B2B-B919-F95E997AEAEA}{BBC7F69B-7A94-41E9-8A4B-B55A8D06431F}_is1F29.tmp" for deletion "%TEMP%{72FABB89-BE3D-4678-B3F9-B67C1E7548DD}Setup.exe" marked "C:Users%USERNAME%AppDataLocalTemp1D68.tmp" for deletion "%TEMP%{72FABB89-BE3D-4678-B3F9-B67C1E7548DD}Setup.exe" marked "C:Users%USERNAME%AppDataLocalTemp{AA6E03D4-5241-4B2B-B919-F95E997AEAEA}{BBC7F69B-7A94-41E9-8A4B-B55A8D06431F}DIF1E95.tmp" for deletion "%TEMP%{72FABB89-BE3D-4678-B3F9-B67C1E7548DD}Setup.exe" marked "C:Users%USERNAME%AppDataLocalTemp{AA6E03D4-5241-4B2B-B919-F95E997AEAEA}{BBC7F69B-7A94-41E9-8A4B-B55A8D06431F}_is1FC6.tmp" for deletion "%TEMP%{72FABB89-BE3D-4678-B3F9-B67C1E7548DD}Setup.exe" marked "C:Program FilesInstallShield Installation Information{BBC7F69B-7A94-41E9-8A4B-B55A8D06431F}lay9E6D.tmp" for deletion "%TEMP%{72FABB89-BE3D-4678-B3F9-B67C1E7548DD}Setup.exe" marked "C:Program FilesInstallShield Installation Information{BBC7F69B-7A94-41E9-8A4B-B55A8D06431F}dat9E7D.tmp" for deletion "%TEMP%{72FABB89-BE3D-4678-B3F9-B67C1E7548DD}Setup.exe" marked "C:Program FilesInstallShield Installation Information{BBC7F69B-7A94-41E9-8A4B-B55A8D06431F}dat9E9E.tmp" for deletion "%TEMP%{72FABB89-BE3D-4678-B3F9-B67C1E7548DD}Setup.exe" marked "C:Program FilesInstallShield Installation Information{BBC7F69B-7A94-41E9-8A4B-B55A8D06431F}set9F2B.tmp" for deletion "%TEMP%{72FABB89-BE3D-4678-B3F9-B67C1E7548DD}Setup.exe" marked "C:Program FilesInstallShield Installation Information{BBC7F69B-7A94-41E9-8A4B-B55A8D06431F} x0A008.tmp" for deletion source API Call relevance 10/10 ATT&CK ID T1107 (Show technique in the MITRE ATT&CK(TM) matrix) Opens file with deletion access rights details "LockDownBrowser-2-0-6-06.exe" opened "%TEMP%ldzAAE8.tmp" with delete access "Setup.exe" opened "C:Users%USERNAME%AppDataLocalTemp{77C18B70-EFA0-4B6F-AD72-42EB04A1D5E8}" with delete access "Setup.exe" opened "C:Users%USERNAME%AppDataLocalTemp{77FA3262-348C-4195-A883-BDDD43217032}" with delete access "Setup.exe" opened "C:Users%USERNAME%AppDataLocalTemp{AA6E03D4-5241-4B2B-B919-F95E997AEAEA}{BBC7F69B-7A94-41E9-8A4B-B55A8D06431F}set1E44.tmp" with delete access "Setup.exe" opened "C:Users%USERNAME%AppDataLocalTemp{AA6E03D4-5241-4B2B-B919-F95E997AEAEA}{BBC7F69B-7A94-41E9-8A4B-B55A8D06431F}setup.inx" with delete access "Setup.exe" opened "C:Users%USERNAME%AppDataLocalTemp{AA6E03D4-5241-4B2B-B919-F95E997AEAEA}{BBC7F69B-7A94-41E9-8A4B-B55A8D06431F}lic1E64.tmp" with delete access "Setup.exe" opened "C:Users%USERNAME%AppDataLocalTemp{AA6E03D4-5241-4B2B-B919-F95E997AEAEA}{BBC7F69B-7A94-41E9-8A4B-B55A8D06431F}license.txt" with delete access "Setup.exe" opened "C:Users%USERNAME%AppDataLocalTemp{AA6E03D4-5241-4B2B-B919-F95E997AEAEA}{BBC7F69B-7A94-41E9-8A4B-B55A8D06431F}Fon1E75.tmp" with delete access "Setup.exe" opened "C:Users%USERNAME%AppDataLocalTemp{AA6E03D4-5241-4B2B-B919-F95E997AEAEA}cor1EA6.tmp" with delete access "Setup.exe" opened "C:Users%USERNAME%AppDataLocalTemp{AA6E03D4-5241-4B2B-B919-F95E997AEAEA}corecomp.ini" with delete access "Setup.exe" opened "C:Users%USERNAME%AppDataLocalTemp{AA6E03D4-5241-4B2B-B919-F95E997AEAEA}dot1EB6.tmp" with delete access "Setup.exe" opened "C:Users%USERNAME%AppDataLocalTemp{AA6E03D4-5241-4B2B-B919-F95E997AEAEA}dotnetinstaller.exe" with delete access "Setup.exe" opened "C:Users%USERNAME%AppDataLocalTemp{AA6E03D4-5241-4B2B-B919-F95E997AEAEA}dot1EC7.tmp" with delete access "Setup.exe" opened "C:Users%USERNAME%AppDataLocalTemp{AA6E03D4-5241-4B2B-B919-F95E997AEAEA}dotnetinstaller.exe.config" with delete access "Setup.exe" opened "C:Users%USERNAME%AppDataLocalTemp{AA6E03D4-5241-4B2B-B919-F95E997AEAEA}{BBC7F69B-7A94-41E9-8A4B-B55A8D06431F}Str1ED7.tmp" with delete access source API Call relevance 7/10 Unusual Characteristics CRC value set in PE header does not match actual value details "chrome_elf.dll" claimed CRC 0 while the actual is CRC 1667821 "Setup.exe" claimed CRC 985383 while the actual is CRC 882203 "LockDownBrowser.exe" claimed CRC 6402082 while the actual is CRC 362020 "d3dcompiler_47.dll" claimed CRC 3662075 while the actual is CRC 5239816 "LdbRst10.exe" claimed CRC 230158 while the actual is CRC 129613 source Static Parser relevance 10/10 Imports suspicious APIs details RegCreateKeyExW RegCloseKey RegOpenKeyExW RegDeleteKeyW OpenProcessToken RegEnumKeyW RegOpenKeyW RegEnumKeyExW RegDeleteValueW GetFileAttributesW GetTempPathW CopyFileW OutputDebugStringW GetModuleFileNameW IsDebuggerPresent GetModuleFileNameA LoadLibraryExA UnhandledExceptionFilter LoadLibraryExW CreateThread TerminateProcess GetModuleHandleExW LoadLibraryW GetVersionExW GetTickCount LoadLibraryA ExitThread GetFileSize GetStartupInfoW CreateDirectoryW DeleteFileW GetTempFileNameW CreateFileMappingW WriteFile FindNextFileW FindFirstFileW GetProcAddress CreateFileW CreateFileA WinExec LockResource GetCommandLineA MapViewOfFile GetModuleHandleW FindResourceW CreateProcessW Sleep VirtualAlloc GetDriveTypeW OutputDebugStringA WriteProcessMemory SleepEx VirtualProtect CreateRemoteThread OpenProcess ReadProcessMemory GetFileSizeEx GetComputerNameExW FindFirstFileExW VirtualProtectEx GetCommandLineW SleepConditionVariableSRW SetSecurityDescriptorDacl GetThreadContext FindResourceExW ShellExecuteExW FindWindowExW RegCreateKeyExA RegCreateKeyA RegOpenKeyA RegDeleteValueA RegOpenKeyExA StartServiceW RegDeleteKeyExA GetFileAttributesA OpenFileMappingW GetTempPathA CreateDirectoryA DeleteFileA FindNextFileA GetModuleHandleA FindFirstFileA CreateProcessA ShellExecuteW ShellExecuteA FindWindowW GetWindowThreadProcessId HttpSendRequestA InternetReadFile InternetCloseHandle InternetConnectA InternetQueryOptionA HttpQueryInfoA InternetOpenW RegEnumKeyExA DeviceIoControl MapViewOfFileEx GetModuleHandleExA FindFirstFileExA SetWindowsHookExA CopyFileA GetTempFileNameA InternetConnectW HttpSendRequestW recv socket bind accept WSAStartup send closesocket listen source Static Parser relevance 1/10 Installs hooks/patches the running process details "setup.exe" wrote bytes "f8115175" to virtual address "0x7552834C" (part of module "SSPICLI.DLL") "setup.exe" wrote bytes "b810152771ffe0" to virtual address "0x755111F8" (part of module "SSPICLI.DLL") "setup.exe" wrote bytes "f8110000" to virtual address "0x755112CC" (part of module "SSPICLI.DLL") "setup.exe" wrote bytes "f8115175" to virtual address "0x755283C4" (part of module "SSPICLI.DLL") "setup.exe" wrote bytes "a0112771" to virtual address "0x75C2E324" (part of module "WININET.DLL") "setup.exe" wrote bytes "f8110000" to virtual address "0x75511408" (part of module "SSPICLI.DLL") "setup.exe" wrote bytes "48125175" to virtual address "0x75528348" (part of module "SSPICLI.DLL") "setup.exe" wrote bytes "48125175" to virtual address "0x755283C0" (part of module "SSPICLI.DLL") "setup.exe" wrote bytes "68130000" to virtual address "0x77901680" (part of module "WS2_32.DLL") "setup.exe" wrote bytes "f8115175" to virtual address "0x75528368" (part of module "SSPICLI.DLL") "setup.exe" wrote bytes "48120000" to virtual address "0x7551139C" (part of module "SSPICLI.DLL") "setup.exe" wrote bytes "f8115175" to virtual address "0x755283E0" (part of module "SSPICLI.DLL") "setup.exe" wrote bytes "48125175" to virtual address "0x75528364" (part of module "SSPICLI.DLL") "setup.exe" wrote bytes "c04e7b7720547c77e0657c77b5387d770000000000d0f67600000000c5eaf6760000000088eaf67600000000e9688c7582287d77ee297d7700000000d2698c75000000007dbbf6760000000009be8c7500000000ba18f67600000000" to virtual address "0x778D1000" (part of module "NSI.DLL") "setup.exe" wrote bytes "b890122771ffe0" to virtual address "0x75511248" (part of module "SSPICLI.DLL") "setup.exe" wrote bytes "48120000" to virtual address "0x755112DC" (part of module "SSPICLI.DLL") "setup.exe" wrote bytes "48125175" to virtual address "0x755283DC" (part of module "SSPICLI.DLL") "setup.exe" wrote bytes "b880112771ffe0" to virtual address "0x77901368" (part of module "WS2_32.DLL") "Setup.exe" wrote bytes "f8115175" to virtual address "0x7552834C" (part of module "SSPICLI.DLL") "Setup.exe" wrote bytes "b810152771ffe0" to virtual address "0x755111F8" (part of module "SSPICLI.DLL") source Hook Detection relevance 10/10 ATT&CK ID T1179 (Show technique in the MITRE ATT&CK(TM) matrix) Reads information about supported languages details "LockDownBrowser-2-0-6-06.exe" (Path: "HKLMSYSTEMCONTROLSET001CONTROLNLSLOCALE"; Key: "00000409") "Setup.exe" (Path: "HKLMSYSTEMCONTROLSET001CONTROLNLSLOCALE"; Key: "00000409") source Registry Access relevance 3/10 ATT&CK ID T1012 (Show technique in the MITRE ATT&CK(TM) matrix) Timestamp in PE header is very old or in the future details "d3dcompiler_47.dll" claims program is from Wed Aug 22 06:16:26 2085 source Static Parser relevance 10/10 Bkav,clean,10.06.2020,0 MicroWorld-eScan,clean,10.06.2020,0 CAT-QuickHeal,clean,10.06.2020,0 ALYac,clean,10.06.2020,0 Malwarebytes,clean,10.06.2020,0 Zillya,clean,10.06.2020,0 SUPERAntiSpyware,clean,05.06.2020,5 Sangfor,clean,23.04.2020,48 K7AntiVirus,clean,10.06.2020,0 Alibaba,clean,27.05.2019,380 K7GW,clean,09.06.2020,1 Cybereason,clean,16.06.2019,360 Arcabit,clean,10.06.2020,0 Invincea,clean,02.05.2020,39 Baidu,clean,18.03.2019,450 F-Prot,clean,10.06.2020,0 Symantec,clean,10.06.2020,0 ESET-NOD32,clean,10.06.2020,0 APEX,clean,10.06.2020,0 Avast,clean,10.06.2020,0 ClamAV,clean,10.06.2020,0 Kaspersky,clean,10.06.2020,0 BitDefender,clean,10.06.2020,0 NANO-Antivirus,clean,10.06.2020,0 AegisLab,clean,10.06.2020,0 Rising,clean,10.06.2020,0 Ad-Aware,clean,10.06.2020,0 Sophos,clean,10.06.2020,0 Comodo,clean,10.06.2020,0 F-Secure,clean,10.06.2020,0 DrWeb,clean,10.06.2020,0 VIPRE,clean,10.06.2020,0 TrendMicro,clean,10.06.2020,0 McAfee-GW-Edition,clean,10.06.2020,0 Trapmine,clean,05.05.2020,36 Emsisoft,clean,10.06.2020,0 SentinelOne,clean,01.06.2020,9 Cyren,clean,10.06.2020,0 Jiangmin,clean,10.06.2020,0 Avira,clean,10.06.2020,0 Fortinet,clean,10.06.2020,0 Antiy-AVL,clean,10.06.2020,0 Kingsoft,clean,10.06.2020,0 Endgame,clean,08.06.2020,2 ViRobot,clean,10.06.2020,0 ZoneAlarm,clean,10.06.2020,0 Avast-Mobile,clean,10.06.2020,0 AhnLab-V3,clean,10.06.2020,0 Acronis,clean,03.06.2020,7 BitDefenderTheta,clean,09.06.2020,1 MAX,clean,10.06.2020,0 Panda,clean,10.06.2020,0 Zoner,clean,10.06.2020,0 TrendMicro-HouseCall,clean,10.06.2020,0 Tencent,clean,10.06.2020,0 Yandex,clean,09.06.2020,1 TACHYON,clean,10.06.2020,0 eGambit,clean,10.06.2020,0 AVG,clean,10.06.2020,0 Paloalto,clean,10.06.2020,0 CrowdStrike,clean,02.07.2019,344 Qihoo-360,clean,10.06.2020,0 md5,FF98074181A6B5F9929824171B8ED1B1 sha1,91E24FF97EC56EB8E38019DF3351EDA71A5FD847 sha256,C028B5494987EF5C31618829772585EED3C322D946DA6207BFD8766B1795FC19 size,0x40 (64 bytes) entropy,4.619 file-ratio,0.00 % file-header-offset,0x00000110 signature,0x00004550 (PE00) machine,Intel sections,6 compiler-stamp,0x5EB9B8FB (Mon May 11 13:43:39 2020) pointer-symbol-table,0x00000000 number-of-symbols,0 size-of-optional-header,224 (bytes) processor-32bit,true relocation-stripped,false large-address-aware,false uniprocessor,false system-image,false dynamic-link-library,false executable,true debug-stripped,false media-run-from-swap,false network-run-from-swap,false magic,0x010B entry-point,0x00006F19 (section:.text) base-of-code,0x00001000 (section:n/a) base-of-data,0x00019000 (section:.rdata) image-base,0x00400000 linker-version,14.0 size-of-code,0x00017E00 (97792 bytes) size-of-initialized-data,132608 (bytes) size-of-uninitialized-data,0 (bytes) size-of-image,245760 (bytes) size-of-headers,1024 (bytes) size-of-stack-reserve,1048576 (bytes) size-of-stack-commit,4096 (bytes) size-of-heap-reserve,1048576 (bytes) size-of-heap-commit,4096 (bytes) section-alignment,0x00001000 (4096 bytes) file-alignment,0x00000200 (512 bytes) os-version,6.0 image-version,0.0 Win32VersionValue,0x00000000 subsystem,GUI subsystem-version,6.0 file-checksum,0x00000000 real-checksum,0x049039D3 LoaderFlags,0x00000000 directories-number,16 address-space-layout-randomization (ASLR),true code-integrity,false data-execution-prevention (DEP),true image-isolation,true structured-exception-handling (SEH),true image-bound,false windows-driver-model (WDM),false terminal-server-aware,true control-flow-guard (CFG),false import-name,0x00000050 (80),0x00021EEC,.rdata,empty,-,-,- resource,0x00006E28 (28200),0x00033000,.rsrc,empty,-,-,- security,0x00001BD8 (7128),0x048F3060,n/a,empty,-,-,- relocation,0x0000122C (4652),0x0003A000,.reloc,empty,-,-,- debug,0x00000070 (112),0x00021650,.rdata,Mon May 11 13:43:39 2020 ,-,-,- load-configuration,0x00000040 (64),0x000216C0,.rdata,empty,-,-,- import-address,0x000001D4 (468),0x00019000,.rdata,empty,-,-,- export-table,0x00000000 (0),0x00000000,n/a,n/a,-,-,x exception,0x00000000 (0),0x00000000,n/a,n/a,-,-,x architecture,0x00000000 (0),0x00000000,n/a,n/a,-,-,x global-pointer,0x00000000 (0),0x00000000,n/a,n/a,-,-,x thread-storage,0x00000000 (0),0x00000000,n/a,n/a,-,-,x bound-import,0x00000000 (0),0x00000000,n/a,n/a,-,-,x delay-loaded,0x00000000 (0),0x00000000,n/a,n/a,-,-,x com-runtime,0x00000000 (0),0x00000000,n/a,n/a,-,-,x name,.text,.rdata,.data,.gfids,.rsrc,.reloc md5,0131093060C64930B54873A7FABB09FD,C6F6D4A898C3C36792DE73939291EF34,9423AB81A7FD1724D66CFBAF2694392A,B7F395B3403E445B77A5A7EA47F643D2,77FC23437AF5A3F5AB039F65BCFDB045,F8E8287F3421A14D2102CAD0520ABC42 entropy,6.662,6.116,1.834,1.577,5.783,6.336 file-ratio (0.23%),0.13 %,0.05 %,0.00 %,0.00 %,0.04 %,0.01 % raw-address,0x00000400,0x00018200,0x00021C00,0x00022600,0x00022800,0x00029800 raw-size (174080 bytes),0x00017E00 (97792 bytes),0x00009A00 (39424 bytes),0x00000A00 (2560 bytes),0x00000200 (512 bytes),0x00007000 (28672 bytes),0x00001400 (5120 bytes) virtual-address,0x00401000,0x00419000,0x00423000,0x00432000,0x00433000,0x0043A000 virtual-size (228414 bytes),0x00017D74 (97652 bytes),0x000098EA (39146 bytes),0x0000E4E0 (58592 bytes),0x000000AC (172 bytes),0x00006E28 (28200 bytes),0x0000122C (4652 bytes) entry-point,0x00006F19,-,-,-,-,- writable,-,-,x,-,-,- executable,x,-,-,-,-,- shareable,-,-,-,-,-,- discardable,-,-,-,-,-,x initialized-data,-,x,x,x,x,x uninitialized-data,-,-,-,-,-,- readable,x,x,x,x,x,x self-modifying,-,-,-,-,-,- blacklisted,-,-,-,-,-,- virtualized,-,-,-,-,-,- bitmap,129,0x00036CA0,bitmap,-,10840,0.01 %,60ADAC3D2C30CC8B69CFE9EAD978FA8E,5.811,English-United States,28 00 00 00 3C 00 00 00 3C 00 00 00 01 00 18 00 ,( .. .. .. < .. .. .. < .. .. .. .. .. .. .. icon,1,0x00033370,icon,-,744,0.00 %,3F4F68AC9991C35970D5186E10F7C5E8,4.369,English-United States,28 00 00 00 20 00 00 00 40 00 00 00 01 00 04 00 ,( .. .. .. .. .. .. @ .. .. .. .. .. .. .. icon,2,0x00033658,icon,-,2216,0.00 %,E913DCA9EC336FF59DE5959640E5CAB7,5.817,English-United States,28 00 00 00 20 00 00 00 40 00 00 00 01 00 08 00 ,( .. .. .. .. .. .. @ .. .. .. .. .. .. .. icon,3,0x00033F00,icon,-,4264,0.01 %,DD7296C9D5DD4694E0E6F5242E12E5C2,4.667,English-United States,28 00 00 00 20 00 00 00 40 00 00 00 01 00 20 00 ,( .. .. .. .. .. .. @ .. .. .. .. .. .. icon,4,0x00034FD8,icon,-,744,0.00 %,3F4F68AC9991C35970D5186E10F7C5E8,4.369,English-United States,28 00 00 00 20 00 00 00 40 00 00 00 01 00 04 00 ,( .. .. .. .. .. .. @ .. .. .. .. .. .. .. icon,5,0x000352C0,icon,-,2216,0.00 %,E913DCA9EC336FF59DE5959640E5CAB7,5.817,English-United States,28 00 00 00 20 00 00 00 40 00 00 00 01 00 08 00 ,( .. .. .. .. .. .. @ .. .. .. .. .. .. .. icon,6,0x00035B68,icon,-,4264,0.01 %,DD7296C9D5DD4694E0E6F5242E12E5C2,4.667,English-United States,28 00 00 00 20 00 00 00 40 00 00 00 01 00 20 00 ,( .. .. .. .. .. .. @ .. .. .. .. .. .. menu,109,0x00036C40,menu,-,74,0.00 %,2886CCD7DC1BD6DEC8413A00B53046A0,2.712,English-United States,00 00 00 00 10 00 26 00 46 00 69 00 6C 00 65 00 ,.. .. .. .. .. .. & .. F .. i .. l .. e .. string-table,7,0x00039A70,string-table,-,108,0.00 %,E79BAE0D6DCD90B738ACA7A2A23C6410,2.649,English-United States,00 00 00 00 00 00 00 00 00 00 00 00 00 00 16 00 ,.. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. accelerator,109,0x00036C90,accelerator,-,16,0.00 %,3D2B1AF3424DBCD504F73918619C7D99,1.799,English-United States,10 00 3F 00 68 00 00 00 90 00 2F 00 68 00 00 00 ,.. .. ? .. h .. .. .. .. .. / .. h .. .. .. icon-group,107,0x00034FA8,icon-group,-,48,0.00 %,C518E7BC4EAADEB459F51342B9EBDB91,2.433,English-United States,00 00 01 00 03 00 20 20 10 00 01 00 04 00 E8 02 ,.. .. .. .. .. .. .. .. .. .. .. .. .. .. icon-group,108,0x00036C10,icon-group,-,48,0.00 %,37A05C07B66D99B4A90C82AC93A406AF,2.550,English-United States,00 00 01 00 03 00 20 20 10 00 01 00 04 00 E8 02 ,.. .. .. .. .. .. .. .. .. .. .. .. .. .. version,1,0x000396F8,version,-,884,0.00 %,118C76E255B66CAC21B3BBADD4D4EA15,3.416,English-United States,74 03 34 00 00 00 56 00 53 00 5F 00 56 00 45 00 ,t .. 4 .. .. .. V .. S .. _ .. V .. E .. manifest,1,0x00039AE0,manifest,-,833,0.00 %,5EB2021F5084B2F5BF3A667B728642A0,5.318,English-United States,EF BB BF 3C 3F 78 6D 6C 20 76 65 72 73 69 6F 6E ,.. .. .. < ? x m l v e r s i o n md5,71AE7589461030595DBD2B6CE1914028 sha1,CE2EB7AC8FE2846A4C7BBD1829ACCB89D0F5F5D1 sha256,8A2472A0ED1F68D2861894C78E476FCA1F588ED7A289FED1F39B1EEFF67D7313 age,1 size,90 (bytes) format,RSDS debugger-stamp,0x5EB9B8FB (Mon May 11 13:43:39 2020 ) path,c:vs12lockdownchrome-selfextractorreleaseldbselfextractor.pdb guid,15000757-C1EF-494F-B57E-82F76E7E893B i>>?<?xml version="1.0" encoding="UTF-8" standalone="yes"?> <assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"><trustInfo xmlns="urn:schemas-microsoft-com:asm.v3"><security><requestedPrivileges><requestedExecutionLevel level="requireAdministrator" uiAccess="false"></requestedExecutionLevel></requestedPrivileges></security></trustInfo><compatibility xmlns="urn:schemas-microsoft-com:compatibility.v1"><application><supportedOS Id="{e2011457-1546-43c5-a5fe-008deee3d3f0}"></supportedOS><supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}"></supportedOS><supportedOS Id="{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}"></supportedOS><supportedOS Id="{1f676c76-80e1-4239-95bb-83d0f6d0da78}"></supportedOS><supportedOS Id="{8e0f7a12-bfb3-4fe8-b9a5-48fd50a15a9a}"></supportedOS></application></compatibility></assembly> md5,118C76E255B66CAC21B3BBADD4D4EA15 sha1,F669A87C576AC83980349C4E43F448A378CD99A5 sha256,0670250E0054112035859CC41D74EA167932DA7D70676A624B047B73B155E6BA file-type,executable date,empty language,English-United States code-page,Unicode UTF-16, little endian CompanyName,Respondus, Inc. FileDescription,Self-extractor wrapper for InstallShield setup FileVersion,1.0.0.1 InternalName,LdbSelfExtractor.exe LegalCopyright,Copyright (C) 2015 OriginalFilename,LdbSelfExtractor.exe ProductName,Respondus LockDown Browser setup self-extractor ProductVersion,1.0.0.1 md5,6C30FF4E41583CB8ED96ADD9D0D6BA54 sha1,26273494F2227F7748F1C9781E7BE131F7EBCEA7 sha256,75CC33133885E09022FB4A694D6470136EBED3A735798116E4DF225281EEF31B valid-from,10/12/2013 00:00:00 valid-to,09/12/2023 23:59:59 offset,0x048F3060 size,0x00001BD8 (7128 bytes) malicious Threat Score: 50/100 AV Detection: 1% Labeled as: Unrated site https://seizetheawkward.org/ This report is generated from a file or URL submitted to this webservice on August 15th 2020 02:56:13 (UTC) and action script Default browser analysis Guest System: Windows 7 32 bit, Professional, 6.1 (build 7601), Service Pack 1 Report generated by Falcon Sandbox v8.31 (C) Hybrid Analysis Indicators Not all malicious and suspicious indicators are displayed. Get your own cloud service or the full version to view all details. Malicious Indicators 1 External Systems Sample was identified as malicious by at least one Antivirus engine details 1/79 Antivirus vendors marked sample as malicious (1% detection rate) source External System relevance 8/10 Suspicious Indicators 1 External Systems Found an IP/URL artifact that was identified as malicious by at least one reputation engine details 1/79 reputation engines marked "https://seizetheawkward.org" as malicious (1% detection rate) 1/79 reputation engines marked "https://seizetheawkward.org/" as malicious (1% detection rate) source External System relevance 10/10 Informative 1 Network Related Found potential URL in binary/memory details Pattern match: "https://seizetheawkward.org/" Pattern match: "https://seizetheawkward.org" source String relevance 10/10 Session Details No relevant data available. Screenshots Hybrid Analysis Tip: Click an analysed process below to view more details. Analysed 1 process in total. rundll32.exe "%WINDIR%System32ieframe.dll",OpenURL C:103153ee61532e884f35aec027c904192ad546522df414dc0f05f9394a9b6650.url (PID: 2164) Logged Script Calls Logged Stdout Extracted Streams Memory Dumps Reduced Monitoring Network Activity Network Error Multiscan Match Network Analysis This report was generated with enabled TOR analysis DNS Requests No relevant DNS requests were made. Contacted Hosts No relevant hosts were contacted. HTTP Traffic No relevant HTTP requests were made. Extracted Strings All Details: All Strings (10) Interesting (3) rundll32.exe (1) screen_0.png (7) Input (2) "%WINDIR%System32ieframe.dll",OpenURL C:103153ee61532e884f35aec027c904192ad546522df414dc0f05f9394a9b6650.url ,,?,a_,i',0 ,^_';_____,___, ,__?, _0____, _^__, _________v?___ _YBRID https://seizetheawkward.org https://seizetheawkward.org/ Extracted Files No significant files were extracted. Notifications Runtime Not all Falcon MalQuery lookups completed in time This URL analysis has missing honeyclient data Community There are no community comments. You must be logged in to submit a comment. Indicators Session Details Screenshots (1) Hybrid Analysis (1) Network Analysis Extracted Strings Extracted Files (0) Notifications Community (0) Back to top (C) 2020 Hybrid Analysis -- Terms & Conditions -- Data Protection Policy -- Imprint <!DOCTYPE html> <html class="no-js" lang="en"> <head> <!-- Google Tag Manager --> <script>(function (w, d, s, l, i) { w[l] = w[l] || []; w[l].push({ 'gtm.start': new Date().getTime(), event: 'gtm.js' }); var f = d.getElementsByTagName(s)[0], j = d.createElement(s), dl = l != 'dataLayer' ? '&l=' + l : ''; j.async = true; j.src = 'https://www.googletagmanager.com/gtm.js?id=' + i + dl; f.parentNode.insertBefore(j, f); })(window, document, 'script', 'dataLayer', 'GTM-5W2CMGQ');</script> <!-- End Google Tag Manager --> <meta charset="utf-8"> <meta http-equiv="x-ua-compatible" content="ie=edge"> <title> Seize The Awkward - Talking to your friends about mental health and how to help </title> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1, user-scalable=no"> <meta name="keywords" content="helping a friend,friend acting strange,friend not themselves,change in behavior,change in attitude,acting differently,mental health,mental health support,depression,anxiety,sad,angry,isolation,loneliness,hopeless,self harm,suicide,suicide prevention"> <meta name="twitter:card" content="summary_large_image"> <meta name="twitter:description" content="Reaching out to a friend about their mental health is important. Learn about these tips and warning signs that can help start a conversation around depression and anxiety."> <meta name="twitter:image" content="http://www.seizetheawkward.org/images/share.jpg"> <meta name="twitter:image:height" content="630"> <meta name="twitter:image:width" content="1200"> <meta name="twitter:title" content="SEIZE THE AWKWARD"> <meta property="og:description" content="Reaching out to a friend about their mental health is important. Learn about these tips and warning signs that can help start a conversation around depression and anxiety."> <meta property="og:image:height" content="630"> <meta property="og:image:secure_url" content="http://www.seizetheawkward.org/images/share.jpg"> <meta property="og:image:url" content="http://www.seizetheawkward.org/images/share.jpg"> <meta property="og:image:width" content="1200"> <meta property="og:title" content="SEIZE THE AWKWARD"> <meta property="og:type" content="image/jpeg"> <meta property="og:url" content="http://www.seizetheawkward.org"> <link rel="shortcut icon" href="/images/favicon.ico" /> <link rel="stylesheet" href="/css/freight.css"> <link rel="stylesheet" href="/css/univers.css"> <script async src="https://www.googletagmanager.com/gtag/js?id=UA-107542574-1"></script> <script> window.dataLayer = window.dataLayer || []; function gtag() { dataLayer.push(arguments) }; gtag('js', new Date()); gtag('config', 'UA-107542574-1'); </script> <style>.FadeIn__fade-in___10JEW{transition-property:opacity,transform;transition-timing-function:cubic-bezier(0,0,.58,1);transition-duration:.5s}.FadeIn__entering___2G7Xr,.FadeIn__exited___Hklbx{opacity:0}.FadeIn__entered___2nyNQ,.FadeIn__exiting___1nvyL{opacity:1}@keyframes Spin__spin___3V0BL{100%{transform:rotate(360deg)}}.Spin__spin___3V0BL{animation-name:Spin__spin___3V0BL;animation-duration:.7s;animation-iteration-count:infinite;animation-timing-function:cubic-bezier(.25,.25,.75,.75)}.TweenTransform__tween-transform___1wH_G{transition-property:transform;transition-duration:.5s;transition-timing-function:cubic-bezier(0,0,.58,1)}.Button__button___11kzP{position:relative;padding:0;display:inline-block;border:2px solid #000;border-radius:0;background-color:#ffec00;font-family:UniversLTStd-UltraCn;font-size:2.4rem;margin:0;text-transform:uppercase;transition:background .3s cubic-bezier(0,0,.58,1);overflow:hidden}.Button__button___11kzP .Button__inner-text___1vbME,.Button__button___11kzP:after{padding:1rem 2rem .6rem 2rem;transition:transform .3s cubic-bezier(0,0,.58,1)}.Button__button___11kzP:after{position:absolute;display:block;left:0;top:0;height:100%;width:100%;content:attr(data-cta);-ms-transform:translateX(-100%);transform:translateX(-100%)}.Button__button___11kzP .Button__inner-text___1vbME{display:block;width:100%;-ms-transform:translateX(0);transform:translateX(0)}.Button__button___11kzP:active{background-color:transparent}@media (min-width:768px){.Button__button___11kzP:hover{background-color:transparent}.Button__button___11kzP:hover:after{-ms-transform:translateX(0);transform:translateX(0)}.Button__button___11kzP:hover .Button__inner-text___1vbME{-ms-transform:translateX(100%);transform:translateX(100%)}}.Button__black___1KAHz{background-color:#000;color:#ffec00}@media (min-width:768px){.Button__black___1KAHz:hover{background-color:#000}}@media (min-width:992px){.Button__button___11kzP{font-size:2.8rem}.Button__button___11kzP .Button__inner-text___1vbME,.Button__button___11kzP:after{padding:1.5rem 3rem 1.2rem 3rem}}.CircleButtonIcon__circle-button___2M_L5{position:relative;width:6.4rem;height:6.4rem;overflow:hidden;border-radius:50% 50%}.CircleButtonIcon__circle-button___2M_L5 .icon-play-border{position:absolute;top:0;left:0;width:100%;height:100%}.CircleButtonIcon__circle-button___2M_L5 .border{transition:stroke-dashoffset 1s cubic-bezier(0,0,.58,1);stroke-dasharray:239px;stroke-dashoffset:239px}.CircleButtonIcon__circle-button___2M_L5 .icon{transition:stroke-dashoffset 1s cubic-bezier(0,0,.58,1);stroke-dasharray:89px;stroke-dashoffset:89px}.CircleButtonIcon__circle-button___2M_L5 svg{stroke:#ffec00;fill:none}.CircleButtonIcon__is-in-view___TvJV6 .border{stroke-dashoffset:0}.CircleButtonIcon__is-in-view___TvJV6 .icon{stroke-dashoffset:0}.CloseButton__close-button___RmCRo{width:6.4rem;height:6.4rem;border:3px solid #ffec00;border-radius:50% 50%;overflow:hidden}.CloseButton__close-button___RmCRo svg{stroke:#ffec00;fill:none}.DupeSvgHover__svg___1fEqi{display:block;width:100%;height:auto;display:-ms-flexbox;display:flex;-ms-flex-flow:row nowrap;flex-flow:row nowrap;-ms-flex-pack:end;justify-content:flex-end;overflow:hidden}@media (min-width:768px){.DupeSvgHover__svg___1fEqi:hover svg:nth-of-type(1){-ms-transform:translateX(100%);transform:translateX(100%);opacity:0}.DupeSvgHover__svg___1fEqi:hover svg:nth-of-type(2){-ms-transform:translateX(0);transform:translateX(0);opacity:1}}.DupeSvgHover__svg___1fEqi svg{-ms-flex-negative:0;flex-shrink:0;position:absolute;top:0;left:0;width:100%;height:100%;transition:transform .4s cubic-bezier(.645,.045,.355,1),opacity .4s cubic-bezier(.25,.1,.25,1)}.DupeSvgHover__svg___1fEqi svg:nth-of-type(1){-ms-transform:translateX(0);transform:translateX(0);opacity:1}.DupeSvgHover__svg___1fEqi svg:nth-of-type(2){-ms-transform:translateX(-100%);transform:translateX(-100%);opacity:0}.FlexibleLogo__container___2Bzj2{position:relative;padding:.8rem .8rem .1rem .8rem;background-color:#00f;display:-ms-flexbox;display:flex;-ms-flex-flow:row nowrap;flex-flow:row nowrap;-ms-flex-pack:justify;justify-content:space-between;background-color:#ffec00;border:.5rem solid #000}.FlexibleLogo__container___2Bzj2 .FlexibleLogo__triangle___uKYYK{position:absolute;top:100%;right:8.9rem;width:2rem}.FlexibleLogo__container___2Bzj2 .FlexibleLogo__triangle___uKYYK svg{width:2rem}.FlexibleLogo__left___1R98c,.FlexibleLogo__right___xFZ2l{margin:0;display:inline-block;font-size:3rem;font-family:UniversLTStd-UltraCn;line-height:1;vertical-align:middle}@media (min-width:768px){.FlexibleLogo__left___1R98c,.FlexibleLogo__right___xFZ2l{font-size:6rem}}.Hamburger__hamburger___6POcz{display:block;width:35px;height:34px}.Hamburger__hamburger___6POcz svg{display:block;width:100%;height:auto}.Hamburger__hamburger___6POcz .Hamburger__border___2JumY{fill:#000}.Hamburger__hamburger___6POcz .Hamburger__background___2z24G{fill:#ffec00}.Hamburger__hamburger___6POcz .Hamburger__bar___VS45F{fill:none;stroke:#000;stroke-miterlimit:10;stroke-width:23px}@media (min-width:768px){.Hamburger__hamburger___6POcz{width:50px;height:48px}.Hamburger__hamburger___6POcz .Hamburger__bottom-bar___1m_Tu,.Hamburger__hamburger___6POcz .Hamburger__middle-bar___3i8AL,.Hamburger__hamburger___6POcz .Hamburger__top-bar___361PY{transition:.2s cubic-bezier(0,0,.58,1)}.Hamburger__hamburger___6POcz:hover .Hamburger__top-bar___361PY{-ms-transform:translateY(-8px);transform:translateY(-8px)}.Hamburger__hamburger___6POcz:hover .Hamburger__bottom-bar___1m_Tu{-ms-transform:translateY(8px);transform:translateY(8px)}.Hamburger__hamburger___6POcz:hover.Hamburger__open___1dPmi .Hamburger__middle-bar___3i8AL{-ms-transform:rotate(90deg);transform:rotate(90deg)}}.Hamburger__open___1dPmi .Hamburger__middle-bar___3i8AL{-ms-transform-origin:50% 50%;transform-origin:50% 50%}.Helpline__helpline___3o9lH a{position:absolute;top:0;right:0;bottom:0;left:0;width:100%;height:100%;display:block}.Helpline__helpline___3o9lH{display:block;position:absolute;height:3.4rem;width:3.4rem;top:0;right:0;pointer-events:auto;transition:opacity .3s,visibility 0s 0s;-webkit-mask-image:url(data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAAGXRFWHRTb2Z0d2FyZQBBZG9iZSBJbWFnZVJlYWR5ccllPAAAAA5JREFUeNpiYGBgAAgwAAAEAAGbA+oJAAAAAElFTkSuQmCC)}.Helpline__helpline___3o9lH a{display:block;overflow:hidden}@media (min-width:768px){.Helpline__helpline___3o9lH{border:3px solid #000;border:2px solid #000;border-radius:50% 50%;background-color:#ffec00;height:4.4rem;width:4.4rem}.Helpline__helpline___3o9lH svg{padding:.8rem}}.Helpline__hidden___2JfRe{visibility:hidden;opacity:0;transition:opacity .3s,visibility 0s .3s}@media (min-width:768px){.Helpline__hidden___2JfRe{visibility:visible;opacity:1}}.Logo__logo___WNaPm{width:220px;height:56px}.Logo__logo___WNaPm svg{display:block;width:220px;height:56px}.Logo__logo___WNaPm .Logo__border___nS2Yz{fill:#000}.Logo__logo___WNaPm .Logo__background___pLey9{fill:#ffec00}@media (min-width:768px){.Logo__logo___WNaPm{width:310px;height:79px}.Logo__logo___WNaPm svg{width:310px;height:79px}}.NavItem__item___ukaAQ{margin-bottom:1.3rem}@media (min-width:768px){.NavItem__item___ukaAQ{margin-bottom:3rem}}.NavItem__item___ukaAQ a{text-decoration:none}.NavItem__item-standard___EWiG8 a{position:relative;display:inline-block;overflow:hidden;color:#000;font-family:FreightTextProBook-Regular;font-size:2.2rem}.NavItem__item-standard___EWiG8 a:after,.NavItem__item-standard___EWiG8 a:before{content:'';display:block;position:absolute;left:0;bottom:0;width:100%;height:1px;background-color:currentColor;transition:transform .3s cubic-bezier(0,0,.58,1)}.NavItem__item-standard___EWiG8 a:before{-ms-transform:translateX(-100%);transform:translateX(-100%);transition-delay:0s}.NavItem__item-standard___EWiG8 a:hover{color:#fffdf2}.NavItem__item-standard___EWiG8 a:hover:before{-ms-transform:translateX(0);transform:translateX(0);transition-delay:.4s}.NavItem__item-standard___EWiG8 a:hover:after{-ms-transform:translateX(100%);transform:translateX(100%)}@media (min-width:400px){.NavItem__item-standard___EWiG8 a{font-size:2.4rem}}@media (min-width:768px){.NavItem__item-standard___EWiG8 a{font-size:2.8rem}}@media (min-width:1392px){.NavItem__item-standard___EWiG8 a{font-size:3rem}}.NavItem__item-standard___EWiG8 a:hover{color:#000}.PlayButtonLabel__play-button-label___1nAk5{font-size:1.6rem;border-bottom:1px solid #ffec00;color:#ffec00}@media (min-width:400px){.PlayButtonLabel__play-button-label___1nAk5{font-size:2.1rem}}@media (min-width:768px){.PlayButtonLabel__play-button-label___1nAk5{font-size:3.4rem}}@media (min-width:992px){.PlayButtonLabel__play-button-label___1nAk5{font-size:4.2rem}}.SliderButton__slider-button___2-D_w{width:4rem;height:4rem;transition:opacity .4s ease,transform .2s ease;border-radius:50%;overflow:hidden;border:2px solid #636363}.SliderButton__slider-button___2-D_w svg{stroke-width:4px;stroke:#636363;fill:none}.slick-next{margin-left:1.5rem}.slick-prev{margin-left:-5.5rem}.slick-disabled{pointer-events:none;opacity:.2}.slick-next,.slick-prev{position:absolute;bottom:0;left:50%}.Svg__svg___Px2o6{display:block;width:100%;height:auto}.Title__title___2h7bo{transition:opacity 1s cubic-bezier(.215,.61,.355,1);opacity:0}.Title__title___2h7bo>span{position:relative;display:inline-block;margin-right:.2em;margin-bottom:-.2em;overflow:hidden}.Title__title___2h7bo>span span{display:block;transition:transform 1s cubic-bezier(.215,.61,.355,1);-ms-transform:translateY(100%);transform:translateY(100%)}.Title__isInView___3On2X{opacity:1}.Title__isInView___3On2X>span span{-ms-transform:translateY(0);transform:translateY(0)}.VideoLoop__video-loop___1b0Kn{display:block;max-width:none;position:absolute;top:50%;left:50%;-ms-transform:translate(-50%,-50%);transform:translate(-50%,-50%);transition:opacity .45s cubic-bezier(.25,.1,.25,1)}.VideoLoop__video-loop-visible___2mGUj{opacity:1}.VideoLoop__video-loop-hidden___3sxIe{opacity:0}html{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}article,aside,details,figcaption,figure,footer,header,main,menu,nav,section,summary{display:block}audio,canvas,progress,video{display:inline-block}audio:not([controls]){display:none;height:0}progress{vertical-align:baseline}[hidden],template{display:none}a{background-color:transparent;-webkit-text-decoration-skip:objects}a:active,a:hover{outline-width:0}abbr[title]{border-bottom:none;text-decoration:underline;text-decoration:underline dotted}b,strong{font-weight:inherit}b,strong{font-weight:bolder}dfn{font-style:italic}h1{font-size:2em;margin:.67em 0}mark{background-color:#ff0;color:#000}small{font-size:80%}sub,sup{font-size:75%;line-height:0;position:relative;vertical-align:baseline}sub{bottom:-.25em}sup{top:-.5em}img{border-style:none}svg:not(:root){overflow:hidden}code,kbd,pre,samp{font-family:monospace,monospace;font-size:1em}figure{margin:1em 40px}hr{box-sizing:content-box;height:0;overflow:visible}button,input,select,textarea{font:inherit;margin:0}optgroup{font-weight:700}button,input{overflow:visible}button,select{text-transform:none}[type=reset],[type=submit],button,html [type=button]{-webkit-appearance:button}[type=button]::-moz-focus-inner,[type=reset]::-moz-focus-inner,[type=submit]::-moz-focus-inner,button::-moz-focus-inner{border-style:none;padding:0}[type=button]:-moz-focusring,[type=reset]:-moz-focusring,[type=submit]:-moz-focusring,button:-moz-focusring{outline:1px dotted ButtonText}fieldset{border:1px solid silver;margin:0 2px;padding:.35em .625em .75em}legend{box-sizing:border-box;color:inherit;display:table;max-width:100%;padding:0;white-space:normal}textarea{overflow:auto}[type=checkbox],[type=radio]{box-sizing:border-box;padding:0}[type=number]::-webkit-inner-spin-button,[type=number]::-webkit-outer-spin-button{height:auto}[type=search]{-webkit-appearance:textfield;outline-offset:-2px}[type=search]::-webkit-search-cancel-button,[type=search]::-webkit-search-decoration{-webkit-appearance:none}::-webkit-input-placeholder{color:inherit;opacity:.54}::-webkit-file-upload-button{-webkit-appearance:button;font:inherit}html{font-size:62.5%;box-sizing:border-box;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale;-webkit-tap-highlight-color:transparent}*,:after,:before{box-sizing:inherit}body,html{height:100%}body{font-family:FreightTextProBook-Regular;font-size:1rem;color:#000;background-color:#ffec00}li,p{font-size:2.25rem;line-height:1.3}li.small,p.small{font-size:1.6rem}@media (min-width:768px){li.large,p.large{font-size:2.8rem}}p{margin:0 0 1rem}em{font-style:italic}strong{font-weight:600}mark{line-height:1.1}@media (min-width:992px){mark{line-height:1.3}}h1,h2,h3,h4,h5,h6{color:#000;font-weight:400;font-family:UniversLTStd-UltraCn;text-rendering:optimizelegibility;line-height:1;margin:0}h1{font-size:11rem;letter-spacing:.02em;text-transform:uppercase}h2{color:#fffdf2;font-size:10rem;letter-spacing:.015em;text-transform:uppercase}h3{font-size:3.8rem;text-transform:uppercase}@media (min-width:768px){h3{font-size:4.8rem}}h4{font-size:2.4rem;font-family:FreightTextProBook-Regular}h5{font-size:2.1rem;font-family:FreightTextProBook-Regular}h6{font-size:1.8rem;font-family:FreightTextProBook-Regular}a{color:#000;text-decoration:none}a:hover{color:#000}figure{margin:0}hr{margin:1.6 0;border:0;border-top:1px solid #000}img{max-width:100%;height:auto;border-width:0;vertical-align:middle;-ms-interpolation-mode:bicubic}ol,ul{margin:0;padding:0;list-style:none}[role=button],button{padding:0;border:none;outline:0;background-color:transparent;cursor:pointer}form{margin:0 0 1.6 0}form fieldset{margin-bottom:1.6;padding:0;border-width:0}form p{margin-bottom:.8}form ul{list-style-type:none;margin:0 0 1.6 0;padding:0}.element3{z-index:2000}.element2{z-index:1000}.element1{z-index:-1000}.slick-slider{position:relative;display:block;box-sizing:border-box;-webkit-user-select:none;-moz-user-select:none;-ms-user-select:none;user-select:none;-ms-touch-action:pan-y;touch-action:pan-y;overflow:hidden;-webkit-tap-highlight-color:transparent}.slick-list{position:relative;display:block;margin:0;padding:0}.slick-list:focus{outline:0}.slick-list.dragging{cursor:pointer;cursor:hand}.slick-slider .slick-list,.slick-slider .slick-track{transform:translate3d(0,0,0)}.slick-track{position:relative;top:0;left:0;display:block}.slick-track:after,.slick-track:before{display:table;content:''}.slick-track{display:-ms-flexbox;display:flex;-ms-flex-flow:row nowrap;flex-flow:row nowrap}.slick-track:after{clear:both}.slick-loading .slick-track{visibility:hidden}.slick-loading .slick-slide{visibility:hidden}.slick-slide{display:none;min-height:1px}.slick-slide img{display:block}.slick-slide.slick-loading img{display:none}.slick-slide.dragging img{pointer-events:none}.slick-initialized .slick-slide{display:-ms-flexbox;display:flex}.slick-arrow.slick-hidden{display:none}.no-scroll{overflow:hidden}.app{font-size:1em;height:100%}.App__main___1IgAa{height:100%}.App__module-wrapper___2nsDK{position:relative;border-top:5px solid #ffec00}.Card__card___1aRs7{padding:1.5em;height:auto;background-color:#fffdf2;text-align:center;min-height:40rem;cursor:url(/images/openhand.cur?b06c243f534d9c5461d16528156cd5a8),move;cursor:-webkit-grab;cursor:grab}.Card__card___1aRs7:active{cursor:url(/images/closedhand.cur?a8c874b93b3d848f39a71260c57e3863),move;cursor:-webkit-grabbing;cursor:grabbing}.Card__card___1aRs7 h3{margin:2rem 0 .5rem 0;text-align:center;font-size:3.2rem;line-height:1;color:#9e9e9e}.Card__card___1aRs7 h4{margin-top:.5rem;color:#9e9e9e}.Card__card___1aRs7 p{font-size:1.8rem;width:100%}.Card__card___1aRs7 img{width:100%;-webkit-user-select:none;-moz-user-select:none;-ms-user-select:none;user-select:none}.Card__card___1aRs7>*{pointer-events:none}.Card__copy-container___2ZcF8{width:100%;-ms-flex-item-align:end;align-self:flex-end}.Card__image___s6nhv img{margin-top:-15%}.Card__quote___1F-yu{display:-ms-flexbox;display:flex;-ms-flex-flow:column nowrap;flex-flow:column nowrap}.Card__quote___1F-yu .Card__quote-container___10keo{width:100%;display:-ms-flexbox;display:flex;-ms-flex-flow:row nowrap;flex-flow:row nowrap;-ms-flex-positive:1;flex-grow:1;-ms-flex-align:center;align-items:center}.Card__quote___1F-yu .Card__quote-copy___2ndg7{text-transform:none;font-family:FreightTextProMedium-Regular;color:#000;line-height:1.3}.Card__quote___1F-yu .Card__copy-container___2ZcF8{-ms-flex-positive:0;flex-grow:0}.Card__quote___1F-yu h3,.Card__quote___1F-yu h4,.Card__quote___1F-yu p{width:100%}#during-the-conversation .slick-slide:nth-of-type(4n+1) .Card__quote___1F-yu{background-color:#feecc3}#during-the-conversation .slick-slide:nth-of-type(4n+2) .Card__quote___1F-yu{background-color:#a3ddd3}#during-the-conversation .slick-slide:nth-of-type(4n+3) .Card__quote___1F-yu{background-color:#f29488}#during-the-conversation .slick-slide:nth-of-type(4n+4) .Card__quote___1F-yu{background-color:#82a0dd}.Card__video___1v5Qp .Card__video-container___1zqtY{position:relative;width:100%;margin-top:-15%}.Card__video___1v5Qp .Card__poster___3q5sC{padding-top:127%;height:0;background-size:cover;background-position:center center}.Card__video___1v5Qp .Card__video-play___27q4k{display:-ms-flexbox;display:flex;-ms-flex-pack:center;justify-content:center;position:absolute;bottom:2rem;left:1rem;right:1rem;text-align:center;pointer-events:auto}.Card__endCard___38g2f{-ms-flex-line-pack:center;align-content:center}.Card__endCard___38g2f p{padding:0 2rem}.Card__endCard___38g2f svg{width:3rem;stroke:#000;stroke-width:2px;fill:none}.Card__endCard___38g2f{display:-ms-flexbox;display:flex;-ms-flex-flow:row wrap;flex-flow:row wrap;-ms-flex-pack:center;justify-content:center}@media (min-width:992px){.Card__card___1aRs7{min-height:44rem}.Card__card___1aRs7 h3{margin:2rem 1rem .5rem 1rem;font-size:3rem}.Card__card___1aRs7 p{font-size:1.9rem}}@media (min-width:1392px){.Card__card___1aRs7 h3{font-size:3.2rem}.Card__card___1aRs7 p{font-size:2rem}}.Intro__container___182JO{z-index:100;position:fixed;top:0;right:0;bottom:0;left:0;background-color:#ffec00;-ms-transform:translateY(-50%);transform:translateY(-50%)}.Intro__animation___1p21N{margin:0 auto}.Intro__animation___1p21N svg{display:block;width:auto;height:100vh}.ModuleCards__module-cards___18M4S{position:relative;margin:0 2rem;width:100%;max-width:34rem;min-height:500px;display:-ms-flexbox;display:flex;-ms-flex-flow:row wrap;flex-flow:row wrap;-ms-flex-align:end;align-items:flex-end;-ms-flex-pack:center;justify-content:center;background-color:#fffdf2;box-shadow:.3rem .3rem 0 rgba(0,0,0,.1)}.ModuleCards__module-cards___18M4S .card{position:absolute;top:50%;left:0;width:100%;min-height:0;-ms-transform:translateY(-60%);transform:translateY(-60%)}.ModuleCards__module-cards___18M4S .card h3{margin:4rem 4rem 0 4rem;font-size:3.2rem;line-height:1.2}.ModuleCards__button___TATJQ{margin:4rem 0}@media (min-width:992px){.ModuleCards__module-cards___18M4S{margin:-4rem 0;width:50%;min-height:800px;max-width:100%}.ModuleCards__module-cards___18M4S .ModuleCards__button___TATJQ{margin:0 0 15rem}.ModuleCards__module-cards___18M4S .card h3{margin:0 10%;font-size:5.6rem}}.ModuleContent__module-content___2c1HA{padding-left:2rem;padding-right:2rem;width:100%;margin:0}@media (min-width:768px){.ModuleContent__module-content___2c1HA{padding-left:10rem;padding-right:10rem}}.ModuleContent__top___2nZ5K{margin-bottom:2rem}.ModuleContent__bottom___1K0bn{margin-bottom:3rem}.ModuleContent__bottom___1K0bn,.ModuleContent__top___2nZ5K{text-align:center;width:100%}@media (min-width:992px){.ModuleContent__module-content___2c1HA{margin:0;width:100%}.ModuleContent__bottom___1K0bn,.ModuleContent__top___2nZ5K{width:100%;max-width:70rem}.ModuleContent__bottom___1K0bn p:last-of-type,.ModuleContent__top___2nZ5K p:last-of-type{margin-bottom:0}.ModuleContent__top___2nZ5K{margin:5rem auto 0}.ModuleContent__bottom___1K0bn{margin:2rem auto 6rem}.ModuleContent__half-width___1Ebwb{width:50%;display:-ms-flexbox;display:flex;-ms-flex-flow:row wrap;flex-flow:row wrap;-ms-flex-pack:center;justify-content:center;-ms-flex-line-pack:center;align-content:center;min-height:50vh}.ModuleContent__half-width___1Ebwb .ModuleContent__bottom___1K0bn,.ModuleContent__half-width___1Ebwb .ModuleContent__top___2nZ5K{width:100%;margin:0;padding:0}.ModuleContent__half-width___1Ebwb .ModuleContent__top___2nZ5K{margin-bottom:4rem}}.ModuleIntro__module-intro___O_djv{position:relative;height:122.67vw;overflow:hidden}@media (min-width:768px){.ModuleIntro__module-intro___O_djv{height:56.25vw}}.ModuleIntro__module-intro-hero___3-0og{height:100%}@media (min-width:768px){.ModuleIntro__module-intro-hero___3-0og{height:100%}}.ModuleIntro__container___3woPQ{display:-ms-flexbox;display:flex;-ms-flex-direction:column;flex-direction:column;-ms-flex-pack:end;justify-content:flex-end;-ms-flex-align:start;align-items:flex-start;top:0;left:0;width:100%;height:122.67vw;padding:0 2rem 4rem 2rem;overflow:hidden;background-color:#ffec00}@media (min-width:768px){.ModuleIntro__container___3woPQ{-ms-flex-pack:center;justify-content:center;height:56.25vw;padding:0 14rem}}.ModuleIntro__container-hero___2ZHmx{-ms-flex-align:start;align-items:flex-start;height:100%}@media (min-width:768px){.ModuleIntro__container-hero___2ZHmx{height:100%;padding:10rem 14rem 0}}.ModuleIntro__h2___1LKA-{font-size:5rem}@media (min-width:768px){.ModuleIntro__h2___1LKA-{font-size:7rem}}@media (min-width:992px){.ModuleIntro__h2___1LKA-{font-size:10rem}}@media (min-width:1392px){.ModuleIntro__h2___1LKA-{font-size:14rem}}.ModuleIntro__h2-hero___2LEH8{font-size:8rem}@media (min-width:768px){.ModuleIntro__h2-hero___2LEH8{font-size:9rem}}@media (min-width:992px){.ModuleIntro__h2-hero___2LEH8{font-size:11rem}}@media (min-width:1392px){.ModuleIntro__h2-hero___2LEH8{font-size:15rem}}.ModuleSlider__module-slider___2Ipt4{margin:0;width:100%}.ModuleSlider__dots___309_f{margin-top:5rem;text-align:center}.ModuleSlider__dots___309_f li{margin:0 .4rem;display:inline-block;text-indent:-99999px;overflow:hidden;border-radius:.8rem;width:.8rem;height:.8rem;background-color:rgba(99,99,99,.5)}.ModuleSlider__dots___309_f li.slick-active{background-color:#636363}.slick-slider{padding:4rem 0 0 0}@media (min-width:400px){.slick-slider{padding:4.5rem 0 1rem 0}}@media (min-width:992px){.slick-slider{padding:4.5rem 0 8rem 0}}@media (min-width:1392px){.slick-slider{padding:6rem 0 8rem 0}}.slick-slide{-ms-flex-pack:center;justify-content:center}.slick-slide .card{box-shadow:.3rem .3rem 0 rgba(0,0,0,.1);margin:.5rem 1rem;opacity:.5;-ms-transform:scale(1);transform:scale(1);transition:opacity .4s ease,transform .4s ease;width:100%}@media (min-width:768px){.slick-slide .card{box-shadow:.5rem .5rem 0 rgba(0,0,0,.1)}}@media (min-width:400px){.slick-slide .card{margin:1rem 1.5rem;max-width:32rem}}@media (min-width:768px){.slick-slide .card{margin:1rem 5%}}@media (min-width:992px){.slick-slide .card{filter:saturate(0);transition:opacity .4s ease,transform .4s ease, filter .4s ease}}@media (min-width:1392px){.slick-slide .card{max-width:100%}}.slick-center .card{opacity:1;-ms-transform:scale(1.05) translateY(-1%);transform:scale(1.05) translateY(-1%)}@media (min-width:992px){.slick-center .card{-ms-transform:scale(1.1) translateY(-2%);transform:scale(1.1) translateY(-2%);filter:saturate(100%)}}.PlayButton__play-button___3lbHs{position:relative;display:-ms-flexbox;display:flex;-ms-flex-align:center;align-items:center;margin-top:.9rem;z-index:0}@media (min-width:768px){.PlayButton__play-button___3lbHs{margin-top:2rem}}.PlayButton__icon___1lFuJ{-ms-flex-negative:0;flex-shrink:0;width:4rem;height:4rem;margin-right:1rem}@media (min-width:768px){.PlayButton__icon___1lFuJ{width:6.4rem;height:6.4rem;margin-right:3.5rem}.PlayButton__small___3XXoJ .PlayButton__icon___1lFuJ{width:5rem;margin-right:1rem}}.PlayButton__label-wrapper___1X8Jt{margin:auto 0;text-align:left;padding-bottom:.5em;opacity:0;-ms-transform:translateX(-1rem);transform:translateX(-1rem);transition:all .5s cubic-bezier(0,0,.58,1) .2s}.PlayButton__is-in-view___14nJN{opacity:1;-ms-transform:translateX(0);transform:translateX(0)}.PlayButton__small___3XXoJ .PlayButton__label___Zybt8{font-size:2.6rem}.ScrollButton__scroll-button___YFAjx{display:-ms-flexbox;display:flex;-ms-flex-align:center;align-items:center;margin-top:.9rem}@media (min-width:768px){.ScrollButton__scroll-button___YFAjx{margin-top:2rem}}.ScrollButton__icon___3cVEQ{-ms-flex-negative:0;flex-shrink:0;width:4rem;height:4rem;margin-right:1rem}@media (min-width:768px){.ScrollButton__icon___3cVEQ{width:6.4rem;height:6.4rem;margin-right:3.5rem}.ScrollButton__small___EH6Pe .ScrollButton__icon___3cVEQ{width:5rem;margin-right:1rem}}.ScrollButton__label-wrapper___1Z6Bn{margin:auto 0;text-align:left;padding-bottom:.5em;opacity:0;-ms-transform:translateX(-1rem);transform:translateX(-1rem);transition:all .5s cubic-bezier(0,0,.58,1) .2s}.ScrollButton__is-in-view___14URE{opacity:1;-ms-transform:translateX(0);transform:translateX(0)}.ScrollButton__small___EH6Pe .ScrollButton__label___CVHDc{font-size:2.6rem}.Video__video___1ZFet{position:absolute;top:0;left:0;width:100%;height:100%;z-index:200;max-height:100vh}.Video__video-hidden___3uoUU{transition:opacity .7s linear,visibility 0s linear .7s;visibility:hidden;opacity:0}.Video__video-visible-inline___25B57{transition:opacity .7s linear,visibility .7s linear;visibility:visible;opacity:1}.Video__video-visible-overlay___2T5fg{transition:opacity .7s linear,visibility .7s linear;visibility:visible;opacity:1;position:fixed}.Video__close-button___2C-hy{position:absolute;right:2rem;top:8rem;width:4.2rem;height:4.2rem;z-index:201}@media (min-width:992px){.Video__close-button___2C-hy{right:4rem;top:4rem}}.Video__video-hidden___3uoUU .Video__button___2Nkeo{display:none}.Video__button___2Nkeo{position:absolute;display:inline-block;bottom:6rem;right:2rem;z-index:201}.Video__button___2Nkeo:hover{background:#fff}@media (min-width:992px){.Video__button___2Nkeo{bottom:auto;top:14rem;right:4rem}}.Video__transcript-visible-inline___1TGA6 .Video__video___1ZFet,.Video__transcript-visible-overlay___3_H-n .Video__video___1ZFet{height:50%}.Video__transcript-visible-inline___1TGA6 .Video__transcript___2K-uv,.Video__transcript-visible-overlay___3_H-n .Video__transcript___2K-uv{display:block}@media (min-width:992px){.Video__transcript-visible-inline___1TGA6 .Video__video___1ZFet,.Video__transcript-visible-overlay___3_H-n .Video__video___1ZFet{width:70%;height:100%}.Video__transcript-visible-inline___1TGA6 .Video__transcript___2K-uv,.Video__transcript-visible-overlay___3_H-n .Video__transcript___2K-uv{width:30%;height:100%;top:0;right:0}}.Video__transcript___2K-uv{display:none;position:absolute;top:50%;right:0;width:100%;height:calc(50% + 2px);overflow-y:auto;-webkit-overflow-scrolling:touch;background:#000;color:#fff;padding:3rem;z-index:200;margin-top:-2px}.Video__transcript___2K-uv p{line-height:1.5}.Video__transcript-visible-overlay___3_H-n .Video__transcript___2K-uv{position:fixed}.Contact__contact___3QA7T{padding-left:2rem;padding-right:2rem;position:relative;padding-top:4rem;padding-bottom:4rem;background-color:#fffdf2;z-index:1}@media (min-width:768px){.Contact__contact___3QA7T{padding-left:10rem;padding-right:10rem}}.Contact__copy___3nCHZ{margin:0 auto;max-width:768px;text-align:center;margin-bottom:4rem}.Contact__copy___3nCHZ:last-of-type{margin-bottom:0}.Contact__copy___3nCHZ mark{position:relative;display:inline-block;white-space:nowrap;z-index:1;background-color:transparent}.Contact__copy___3nCHZ mark:after{content:'';position:absolute;top:0;left:0;right:0;bottom:0;transition:transform 1s .3s;-ms-transform:scaleX(0);transform:scaleX(0);-ms-transform-origin:0 0;transform-origin:0 0;background-color:#ffec00;z-index:-1}.Contact__copy___3nCHZ mark a{border:0}.Contact__copy___3nCHZ a{border-bottom:1px solid currentColor}.Contact__copy___3nCHZ p{margin-top:2rem}.Contact__is-in-view___2b_yi mark:after{-ms-transform:scaleX(1);transform:scaleX(1)}@media (min-width:768px){.Contact__contact___3QA7T{display:-ms-flexbox;display:flex;-ms-flex-flow:column nowrap;flex-flow:column nowrap;-ms-flex-pack:center;justify-content:center;-ms-flex-align:center;align-items:center;padding-top:10rem;padding-bottom:10rem;height:900px}}.Cta__cta___2_xxe{padding-left:2rem;padding-right:2rem;width:100%;margin:0;color:#fff;background:#000;position:relative;padding-top:4rem;padding-bottom:4rem;text-align:center;z-index:1}@media (min-width:768px){.Cta__cta___2_xxe{padding-left:10rem;padding-right:10rem}}.Cta__cta___2_xxe h3{color:#fff}.Cta__button___3yYjB{position:relative;padding:0;display:inline-block;border:2px solid #000;border-radius:0;background-color:#ffec00;font-family:UniversLTStd-UltraCn;font-size:2.4rem;margin:0;text-transform:uppercase;transition:background .3s cubic-bezier(0,0,.58,1);overflow:hidden}.Cta__button___3yYjB .Cta__inner-text___1Qmtv,.Cta__button___3yYjB:after{padding:1rem 2rem .6rem 2rem;transition:transform .3s cubic-bezier(0,0,.58,1),color .3s,border-color .3s}.Cta__button___3yYjB:after{position:absolute;display:block;left:0;top:0;height:100%;width:100%;content:attr(data-cta);-ms-transform:translateX(-100%);transform:translateX(-100%)}.Cta__button___3yYjB .Cta__inner-text___1Qmtv{display:block;width:100%;-ms-transform:translateX(0);transform:translateX(0)}.Cta__button___3yYjB:active{background-color:transparent}@media (min-width:768px){.Cta__button___3yYjB:hover{background-color:transparent;color:#fff;border-color:#fff}.Cta__button___3yYjB:hover:after{-ms-transform:translateX(0);transform:translateX(0)}.Cta__button___3yYjB:hover .Cta__inner-text___1Qmtv{-ms-transform:translateX(100%);transform:translateX(100%)}}.Cta__top___3ui_k{margin-top:1rem;margin-bottom:2rem}.Cta__bottom___A-bP3{margin-bottom:3rem}.Cta__bottom___A-bP3,.Cta__top___3ui_k{text-align:center;width:100%}@media (min-width:992px){.Cta__cta___2_xxe{margin:0;width:100%;padding-top:10rem;padding-bottom:10rem}.Cta__bottom___A-bP3,.Cta__top___3ui_k{width:100%;max-width:70rem}.Cta__bottom___A-bP3 p:last-of-type,.Cta__top___3ui_k p:last-of-type{margin-bottom:0}.Cta__top___3ui_k{margin:0 auto}.Cta__bottom___A-bP3{margin:2rem auto 3rem}}.Footer__footer___2TbCV{position:relative;padding-top:4rem;padding-bottom:4rem;background-color:#000;text-align:center;z-index:1}.Footer__logos___eaGXS{display:-ms-flexbox;display:flex;-ms-flex-flow:row wrap;flex-flow:row wrap;-ms-flex-pack:center;justify-content:center;margin-bottom:4rem}.Footer__logo___1DU08{margin:0 .8rem}.Footer__logo___1DU08 svg{width:auto;height:5rem}.Footer__links___2Nwtu{text-align:center;white-space:nowrap}.Footer__link___2rCRi{display:inline-block;margin:0 .3rem;padding-right:.6rem;line-height:1.1;font-size:1.5rem;border-right:1px solid rgba(255,253,242,.25)}.Footer__link___2rCRi:last-of-type{padding-right:0;border-right:none}.Footer__link___2rCRi a{position:relative;display:inline-block;overflow:hidden;color:#fffdf2}.Footer__link___2rCRi a:after,.Footer__link___2rCRi a:before{content:'';display:block;position:absolute;left:0;bottom:0;width:100%;height:1px;background-color:currentColor;transition:transform .3s cubic-bezier(0,0,.58,1)}.Footer__link___2rCRi a:before{-ms-transform:translateX(-100%);transform:translateX(-100%);transition-delay:0s}.Footer__link___2rCRi a:hover{color:#fffdf2}.Footer__link___2rCRi a:hover:before{-ms-transform:translateX(0);transform:translateX(0);transition-delay:.4s}.Footer__link___2rCRi a:hover:after{-ms-transform:translateX(100%);transform:translateX(100%)}.Footer__follow___3oJdO,.Footer__shares___25FIZ{margin-left:2rem;margin-top:4rem;text-align:center;display:inline-block}.Footer__follow___3oJdO p,.Footer__shares___25FIZ p{display:inline-block;margin-right:2rem;color:#fffdf2}.Footer__follow___3oJdO ul,.Footer__shares___25FIZ ul{display:inline-block}.Footer__shares___25FIZ{border-right:1px solid rgba(255,253,242,.25)}.Footer__shares___25FIZ p{margin-bottom:0}.Footer__share___2K3MA{display:inline-block;white-space:nowrap}.Footer__share___2K3MA span{display:inline-block;vertical-align:middle;position:relative;width:2.5rem;height:2.5rem;margin-right:1.5rem}.Footer__legal___1ngzn{margin:3rem 3rem 0;text-align:center;color:#fffdf2}@media (min-width:768px){.Footer__footer___2TbCV{padding-top:8rem;padding-bottom:8rem;text-align:center}.Footer__nav___2OziI{vertical-align:bottom}.Footer__nav___2OziI,.Footer__shares___25FIZ{margin-top:4rem}.Footer__shares___25FIZ{line-height:3.2}.Footer__link___2rCRi{padding-right:4rem;margin:0 2rem;font-size:2.2rem}.Footer__logo___1DU08{margin:0 2rem}.Footer__logo___1DU08:last-of-type{margin-left:1.2rem}.Footer__logo___1DU08 svg{height:6rem}}@media (max-width:480px){.Footer__link___2rCRi{display:block;margin-bottom:2rem}.Footer__link___2rCRi:last-of-type{margin-bottom:0}}.Header__header___34z-4{display:-ms-flexbox;display:flex;position:fixed;top:1rem;left:1rem;right:1rem;margin-top:0;pointer-events:none;z-index:100;transition:transform .3s,margin-top .3s}.Header__header___34z-4 h1{display:none!important}@media (min-width:768px){.Header__header___34z-4{top:4rem;left:4rem;right:4rem}}.Header__header-hidden___1B4E5{transform:translate3d(0,-200%,0);transition-timing-function:ease-in}.Header__header-visible___2JjBc{transform:translate3d(0,0,0);transition-timing-function:ease-out}.Header__hamburger___1mM7x{pointer-events:auto}.Header__logo___2Np8B{margin-left:.9rem;pointer-events:auto}@media (min-width:768px){.Header__logo___2Np8B{margin-left:1.6rem}}.Header__header-message___-T6Py{position:absolute;top:0;left:0;z-index:9999;width:100%;background:#000;padding:12px 15px;font-family:UniversLTStd-UltraCn;font-size:2.1rem;letter-spacing:.02em;text-align:center}.Header__header-message___-T6Py a{color:#fff}.Header__header-message___-T6Py span{text-decoration:underline}.Header__header-top___1xCcV .Header__header___34z-4{margin-top:8rem}@media (min-width:501px){.Header__header-top___1xCcV .Header__header___34z-4{margin-top:6rem}}@media (min-width:768px){.Header__header-top___1xCcV .Header__header___34z-4{margin-top:3rem}}.Hero__hero___35Hdx{height:100%;margin-bottom:-5px}.Hero__intro-wrapper___cn-GF{height:100%}@media (min-width:768px){.Hero__intro-wrapper___cn-GF{position:fixed;top:0;left:0;width:100%}}@media (min-width:768px){.Module__intro-wrapper___6iqDe{top:0}}@media (min-width:768px){.Module__sticky___3nhYK{position:-webkit-sticky;position:sticky}}.Module__content-wrapper___16Ju5{position:relative;display:-ms-flexbox;display:flex;-ms-flex-pack:center;justify-content:center;-ms-flex-flow:row wrap;flex-flow:row wrap;padding:4rem 0;background-color:#ffec00;z-index:1}.Navigation__navigation___3YSE9{position:fixed;top:0;left:0;width:100%;height:100%;z-index:50;overflow-y:auto}.Navigation__nav-open___2rnq7{background-color:rgba(0,0,0,.5);transition:visibility 0s linear 0s,background-color .3s linear;visibility:visible}.Navigation__nav-closed___1jB7M{visibility:hidden;background-color:rgba(0,0,0,0);transition:visibility 0s linear 1s,background-color .3s linear;pointer-events:none}.Navigation__links-container___2QcrG{position:absolute;width:100%;height:100%;padding:11rem 3rem 4rem 3rem}@media (min-width:768px){.Navigation__links-container___2QcrG{width:auto;padding:12.5rem 10.5rem 0;min-height:675px}}.Navigation__links-background___Nh7wL{position:absolute;top:0;left:0;width:100%;height:100%;background-color:rgba(255,236,0,.95)}.Navigation__links-background-open___BVo5Q{-ms-transform:translateY(0);transform:translateY(0);transition:transform .3s ease-out}.Navigation__links-background-closed___jVoUs{-ms-transform:translateY(-100%);transform:translateY(-100%);transition:transform .3s ease-in .3s}.Navigation__links___1Kbg0{position:relative;display:-ms-flexbox;display:flex;-ms-flex-direction:column;flex-direction:column;-ms-flex-pack:center;justify-content:center;width:100%;height:100%}.Navigation__links-open___TTa0x{opacity:1;transition:opacity .3s linear .2s}.Navigation__links-closed___2UCfy{opacity:0;transition:opacity .5s linear}.Rotate__rotate___wuvYH{display:none;-ms-flex-direction:column;flex-direction:column;-ms-flex-pack:center;justify-content:center;-ms-flex-align:center;align-items:center;position:fixed;top:0;left:0;width:100%;height:100%;background-color:#ffec00;z-index:150}@media only screen and (max-width:828px) and (orientation:landscape){.Rotate__rotate___wuvYH{display:-ms-flexbox;display:flex}}.Rotate__video-playing___3mavQ{display:none}.Rotate__svg___2Gw3J{width:5rem;margin-bottom:1rem}.Rotate__copy___1l0ZS{font-family:UniversLTStd-UltraCn;font-size:2.6rem;text-transform:uppercase;color:#000}</style></head> <body> <div id="app" class="app"></div> <script type="text/javascript" src="/js/vendor.bundle.js" defer></script><script type="text/javascript" src="/js/client.js" defer></script></body> </html> 8 Outgoing links These are links going to different origins than the main page. For each link, only the first name is shown. https://www.quantcast.com/gdpr/consent-management-solution/ Title: upgrade https://www.adcouncil.org/ Title: .fil0 {fill:#FFFFFF;fill-rule:nonzero} https://afsp.org/ Title: .st0 { fill: #fffdf2; } https://www.jedfoundation.org/?utm_source=adcouncil&utm_medium=stawebsite&utm_campaign=sta#ppsShowPopUp_111 Title: JED https://www.adcouncil.org/About-Us/Terms-of-Use Title: Terms of Use https://www.adcouncil.org/About-Us/Privacy-Policy Title: Privacy Policy https://www.adcouncil.org/About-Us/Contact-Us Title: Contact Us https://www.instagram.com/seizetheawkward/ Title: Detected technologies Nginx (Web Servers) Website Facebook (Widgets) Website Google Analytics (Analytics) Website Google Tag Manager (Tag Managers) Website Quantcast (Analytics) Website Stats 90 Requests 0 Ad-blocked 0 Malicious 100% HTTPS 65% IPv6 18 Domains 24 Subdomains 23 IPs 5 Countries 5,995kB Transfer 8,068kB Size 4 Cookies Robbery - Individual IR Number: 2020-20081823 Crime: ROBBERY 2D PERSON Location Type: Highway/Road/Alley Date: 05/16/2020 Time: 7:00 PM Motor Vehicle Theft IR Number: 2018-20216199 Crime: POSS STOLEN MOTOR VEHICLE Location Type: Highway/Road/Alley Date: 10/29/2018 Time: 3:20 PM Robbery - Individual IR Number: 2018-20198372 Crime: ROBBERY 2D PERSON (NOT PURSE SNATCHING) Location Type: Field/Woods Date: 10/04/2018 Time: 10:15 AM Burglary - Residential IR Number: 2018-20173591 Crime: BURGLARY-RESIDENTIAL Location Type: Residence/Apartment Date: 09/01/2018 Time: 1:30 AM Motor Vehicle Theft IR Number: 2018-20166289 Crime: THEFT OF MOTOR VEHICLE Location Type: Parking Lot/Garage Date: 08/22/2018 Time: 9:00 AM Motor Vehicle Theft IR Number: 2018-20067170 Crime: THEFT OF MOTOR VEHICLE Location Type: School-College/University Date: 04/12/2018 Time: 1:20 PM Motor Vehicle Theft IR Number: 2018-20197791 Crime: THEFT OF MOTOR VEHICLE Location Type: School-College/University Date: 10/03/2018 Time: 9:00 AM Theft 1 of 2 IR Number: 2018-20067711 Crime: THEFT-2D (From Building) Location Type: School-College/University Date: 04/03/2018 Time: 6:00 PM Theft 2 of 2 IR Number: 2018-20199760 Crime: THEFT-2D (From Building) Location Type: School-College/University Date: 10/02/2018 Time: 2:30 PM Motor Vehicle Theft IR Number: 2018-20223098 Crime: THEFT OF MOTOR VEHICLE Location Type: School-College/University Date: 11/08/2018 Time: 9:30 AM Burglary - Commercial IR Number: 2018-20066232 Crime: BURGLARY 2D COMMERCIAL Location Type: Construction Site Date: 04/10/2018 Time: 3:30 PM Motor Vehicle Theft IR Number: 2018-20191347 Crime: THEFT OF MOTOR VEHICLE Location Type: School-College/University Date: 09/24/2018 Time: 8:15 AM Theft IR Number: 2018-20177798 Crime: THEFT-2D (From Building) Location Type: School-College/University Date: 09/05/2018 Time: 7:45 AM Aggravated Assault IR Number: 2019-20027516 Crime: ASSAULT 3D WEAPON OR NEGLIGENT INJURY Location Type: Air/Bus/Train Terminal Date: 02/14/2019 Time: 12:30 PM Motor Vehicle Theft IR Number: 2019-20014251 Crime: THEFT OF MOTOR VEHICLE Location Type: School-College/University Date: 01/23/2019 Time: 8:30 AM Burglary - Residential IR Number: 2019-20002305 Crime: RESIDENTIAL BURGLARY Location Type: Residence/Apartment Date: 01/04/2019 Time: 4:00 PM heft IR Number: 2019-20154615 Crime: THEFT 1D OBTAIN GOODS FROM COUNTERFEIT/FORGERY/FRAUD Location Type: Auto Dealership New/Used Date: 02/10/2019 Time: 12:00 AM Motor Vehicle Theft IR Number: 2019-20004495 Crime: THEFT OF MOTOR VEHICLE Location Type: Parking Lot/Garage Date: 01/08/2019 Time: 8:00 AM Burglary - Commercial IR Number: 2019-20087178 Crime: BURGLARY 1D COMMERCIAL Location Type: School-College/University Date: 05/15/2019 Time: 3:50 AM Burglary - Commercial IR Number: 2019-20164257 Crime: BURGLARY 2D COMMERCIAL Location Type: Commercial/Office Building Date: 08/28/2019 Time: 6:00 PM Motor Vehicle Theft IR Number: 2019-20189191 Crime: THEFT OF MOTOR VEHICLE Location Type: Parking Lot/Garage Date: 10/03/2019 Time: 8:00 PM heft IR Number: 2019-20227913 Crime: THEFT 3D FROM COIN OPERATED DEVICE Location Type: School-College/University Date: 12/04/2019 Time: 8:00 PM Aggravated Assault IR Number: 2019-20223034 Crime: ASSAULT 2D Location Type: Field/Woods Date: 11/24/2019 Time: 10:00 PM Burglary - Commercial IR Number: 2020-20000694 Crime: BURGLARY 2D COMMERCIAL Location Type: Commercial/Office Building Date: 01/01/2020 Time: 7:00 PM Burglary - Residential IR Number: 2020-20057267 Crime: RESIDENTIAL BURGLARY Location Type: Residence/Apartment Date: 04/04/2020 Time: 6:56 AM Theft IR Number: 2020-20079567 Crime: THEFT 1D OBTAIN GOODS FROM COUNTERFEIT/FORGERY/FRAUD Location Type: Cyberspace Date: 05/11/2020 Time: 12:00 PM Burglary - Commercial IR Number: 2020-20083752 Crime: BURGLARY 2D COMMERCIAL Location Type: Commercial/Office Building Date: 05/18/2020 Time: 5:00 PM Motor Vehicle Theft IR Number: 2020-20049471 Crime: THEFT OF MOTOR VEHICLE Location Type: Highway/Road/Alley Date: 03/21/2020 Time: 2:37 PM Nicole Duvernay (2018) Math Teacher Spokane Community College (SCC) Nicole Duvernay worked as a Math Teacher for Spokane Community College (SCC) and in 2018 had a reported pay of $76,000 according to public records. This is 14.1 percent higher than the average pay for university and college employees and 19.5 percent higher than the national average for government employees. Overview Payroll Year 2018 Name Duvernay, Nicole Formatted Name Nicole Duvernay State Washington Employer/Location Spokane Community College Employer/Source Spokane Community College Job Title Mathematics Formatted Job Title Math Teacher Employer & Work Details Government Level University & College Agency Spokane Community College School Abbreviation SCC University/College Spokane Community College Pay, Salary, Benefits Information Information may include where available: pay, salary, bonuses, benefits, retirement contributions, pensions, and other financial data. Payroll Type University & College Base/Regular Pay $76,000 Nicole Duvernay (2017) Math Teacher Spokane Community College (SCC) Nicole Duvernay worked as a Math Teacher for Spokane Community College (SCC) and in 2017 had a reported pay of $72,100 according to public records. This is 8.3 percent higher than the average pay for university and college employees and 13.3 percent higher than the national average for government employees. Overview Payroll Year 2017 Name Duvernay, Nicole Formatted Name Nicole Duvernay State Washington Employer/Location Spokane Community College Employer/Source Spokane Community College Job Title Mathematics Formatted Job Title Math Teacher Employer & Work Details Government Level University & College Agency Spokane Community College School Abbreviation SCC University/College Spokane Community College Pay, Salary, Benefits Information Information may include where available: pay, salary, bonuses, benefits, retirement contributions, pensions, and other financial data. Payroll Type University & College Base/Regular Pay $72,100 Nicole Duvernay (2016) Math Teacher Spokane Community College (SCC) Nicole Duvernay worked as a Math Teacher for Spokane Community College (SCC) and in 2016 had a reported pay of $69,700 according to public records. This is 4.7 percent higher than the average pay for university and college employees and 9.6 percent higher than the national average for government employees. Overview Payroll Year 2016 Name Duvernay, Nicole Formatted Name Nicole Duvernay State Washington Employer/Location Spokane Community College Employer/Source Spokane Community College Job Title Mathematics Formatted Job Title Math Teacher Employer & Work Details Government Level University & College Agency Spokane Community College School Abbreviation SCC University/College Spokane Community College Pay, Salary, Benefits Information Information may include where available: pay, salary, bonuses, benefits, retirement contributions, pensions, and other financial data. Payroll Type University & College Base/Regular Pay $69,700 Nicole Duvernay (2015) Math Teacher Spokane Community College (SCC) Nicole Duvernay worked as a Math Teacher for Spokane Community College (SCC) and in 2015 had a reported pay of $50,700 according to public records. This is 23.9 percent lower than the average pay for university and college employees and 20.3 percent lower than the national average for government employees. Overview Payroll Year 2015 Name Duvernay, Nicole Formatted Name Nicole Duvernay State Washington Employer/Location Spokane Community College Employer/Source Spokane Community College Job Title Mathematics Formatted Job Title Math Teacher Employer & Work Details Government Level University & College Agency Spokane Community College School Abbreviation SCC University/College Spokane Community College Pay, Salary, Benefits Information Information may include where available: pay, salary, bonuses, benefits, retirement contributions, pensions, and other financial data. Payroll Type University & College Base/Regular Pay $50,700 Nicole Duvernay (2014) Faculty Spokane Community College (SCC) Nicole Duvernay worked for Spokane Community College (SCC) and in 2014 had a reported pay of $75,600 according to public records. This is 13.5 percent higher than the average pay for university and college employees and 18.8 percent higher than the national average for government employees. Overview Payroll Year 2014 Name Duvernay, Nicole Formatted Name Nicole Duvernay State Washington Employer/Location Spokane Community College Employer/Source Spokane Community College Job Title Faculty Employer & Work Details Government Level University & College Agency Spokane Community College School Abbreviation SCC University/College Spokane Community College Pay, Salary, Benefits Information Information may include where available: pay, salary, bonuses, benefits, retirement contributions, pensions, and other financial data. Payroll Type University & College Base/Regular Pay $75,600 Nicole Duvernay (2013) Faculty Spokane Community College (SCC) Nicole Duvernay worked for Spokane Community College (SCC) and in 2013 had a reported pay of $77,000 according to public records. This is 15.6 percent higher than the average pay for university and college employees and 21.0 percent higher than the national average for government employees. Overview Payroll Year 2013 Name Duvernay, Nicole Formatted Name Nicole Duvernay State Washington Employer/Location Spokane Community College Employer/Source Spokane Community College Job Title Faculty Employer & Work Details Government Level University & College Agency Spokane Community College School Abbreviation SCC University/College Spokane Community College Pay, Salary, Benefits Information Information may include where available: pay, salary, bonuses, benefits, retirement contributions, pensions, and other financial data. Payroll Type University & College Base/Regular Pay $77,000 Nicole Duvernay (2012) Faculty Spokane Community College (SCC) Nicole Duvernay worked for Spokane Community College (SCC) and in 2012 had a reported pay of $65,000 according to public records. This is 2.4 percent lower than the average pay for university and college employees but 2.2 percent higher than the national average for government employees. Overview Payroll Year 2012 Name Duvernay, Nicole Formatted Name Nicole Duvernay State Washington Employer/Location Spokane Community College Employer/Source Spokane Community College Job Title Faculty Employer & Work Details Government Level University & College Agency Spokane Community College School Abbreviation SCC University/College Spokane Community College Pay, Salary, Benefits Information Information may include where available: pay, salary, bonuses, benefits, retirement contributions, pensions, and other financial data. Payroll Type University & College Base/Regular Pay $65,000 Charles Hollen (2018) Director District Security Spokane Community College (SCC) Charles Hollen worked for Spokane Community College (SCC) and in 2018 had a reported pay of $72,300 according to public records. This is 8.6 percent higher than the average pay for university and college employees and 13.6 percent higher than the national average for government employees. Overview Payroll Year 2018 Name Hollen, Charles Formatted Name Charles Hollen State Washington Employer/Location Spokane Community College Employer/Source Spokane Community College Job Title Director District Security Employer & Work Details Government Level University & College Agency Spokane Community College School Abbreviation SCC University/College Spokane Community College Pay, Salary, Benefits Information Information may include where available: pay, salary, bonuses, benefits, retirement contributions, pensions, and other financial data. Payroll Type University & College Base/Regular Pay $72,300 Taylor Lundean (2018) Security Guard Spokane Community College (SCC) Taylor Lundean worked for Spokane Community College (SCC) and in 2018 had a reported pay of $17,200 according to public records. This is 74.2 percent lower than the average pay for university and college employees and 73.0 percent lower than the national average for government employees. Overview Payroll Year 2018 Name Lundean, Taylor Formatted Name Taylor Lundean State Washington Employer/Location Spokane Community College Employer/Source Spokane Community College Job Title Security Guard Employer & Work Details Government Level University & College Agency Spokane Community College School Abbreviation SCC University/College Spokane Community College Pay, Salary, Benefits Information Information may include where available: pay, salary, bonuses, benefits, retirement contributions, pensions, and other financial data. Payroll Type University & College Base/Regular Pay $17,200 Terrance Van Weerdhuizen (2018) Campus Security Officer Spokane Community College (SCC) Terrance Van Weerdhuizen worked for Spokane Community College (SCC) and in 2018 had a reported pay of $46,600 according to public records. This is 30.0 percent lower than the average pay for university and college employees and 26.8 percent lower than the national average for government employees. Overview Payroll Year 2018 Name Van Weerdhuizen, Terrance Formatted Name Terrance Van Weerdhuizen State Washington Employer/Location Spokane Community College Employer/Source Spokane Community College Job Title Campus Security Officer Employer & Work Details Government Level University & College Agency Spokane Community College School Abbreviation SCC University/College Spokane Community College Pay, Salary, Benefits Information Information may include where available: pay, salary, bonuses, benefits, retirement contributions, pensions, and other financial data. Payroll Type University & College Base/Regular Pay $46,600 Tyler Ables (2018) Security Officer Spokane Community College (SCC) Tyler Ables worked as a Security Officer for Spokane Community College (SCC) and in 2018 had a reported pay of $53,000 according to public records. This is 20.4 percent lower than the average pay for university and college employees and 16.7 percent lower than the national average for government employees. Overview Payroll Year 2018 Name Ables, Tyler Formatted Name Tyler Ables State Washington Employer/Location Spokane Community College Employer/Source Spokane Community College Job Title Security Officer Lead Formatted Job Title Security Officer Employer & Work Details Government Level University & College Agency Spokane Community College School Abbreviation SCC University/College Spokane Community College Pay, Salary, Benefits Information Information may include where available: pay, salary, bonuses, benefits, retirement contributions, pensions, and other financial data. Payroll Type University & College Base/Regular Pay $53,000 Zane Sheets (2018) Campus Security Officer Spokane Community College (SCC) Zane Sheets worked for Spokane Community College (SCC) and in 2018 had a reported pay of $48,000 according to public records. This is 27.9 percent lower than the average pay for university and college employees and 24.6 percent lower than the national average for government employees. Overview Payroll Year 2018 Name Sheets, Zane Formatted Name Zane Sheets State Washington Employer/Location Spokane Community College Employer/Source Spokane Community College Job Title Campus Security Officer Employer & Work Details Government Level University & College Agency Spokane Community College School Abbreviation SCC University/College Spokane Community College Pay, Salary, Benefits Information Information may include where available: pay, salary, bonuses, benefits, retirement contributions, pensions, and other financial data. Payroll Type University & College Base/Regular Pay $48,000 Erica Perez (2018) Campus Security Officer Spokane Community College (SCC) Erica Perez worked for Spokane Community College (SCC) and in 2018 had a reported pay of $41,400 according to public records. This is 37.8 percent lower than the average pay for university and college employees and 34.9 percent lower than the national average for government employees. Overview Payroll Year 2018 Name Perez, Erica Formatted Name Erica Perez State Washington Employer/Location Spokane Community College Employer/Source Spokane Community College Job Title Campus Security Officer Employer & Work Details Government Level University & College Agency Spokane Community College School Abbreviation SCC University/College Spokane Community College Pay, Salary, Benefits Information Information may include where available: pay, salary, bonuses, benefits, retirement contributions, pensions, and other financial data. Payroll Type University & College Base/Regular Pay $41,400 David Slater (2018) Security Guard Spokane Community College (SCC) David Slater worked for Spokane Community College (SCC) and in 2018 had a reported pay of $68,900 according to public records. This is 3.5 percent higher than the average pay for university and college employees and 8.3 percent higher than the national average for government employees. Overview Payroll Year 2018 Name Slater, David Formatted Name David Slater State Washington Employer/Location Spokane Community College Employer/Source Spokane Community College Job Title Security Guard Employer & Work Details Government Level University & College Agency Spokane Community College School Abbreviation SCC University/College Spokane Community College Pay, Salary, Benefits Information Information may include where available: pay, salary, bonuses, benefits, retirement contributions, pensions, and other financial data. Payroll Type University & College Base/Regular Pay $68,900 Lexi Michelle Dawson (2018) Forest Firefighter State of Washington Lexi Michelle Dawson worked as a Forest Firefighter for the State of Washington and in 2018 had a reported pay of $11,700 according to public records. Overview Payroll Year 2018 Name Dawson, Lexi Formatted Name Lexi Dawson State Washington Employer/Location Natural Resources Employer/Source State of Washington Job Title Sf-Forest Fire Fighter Formatted Job Title Forest Firefighter Employer & Work Details Government Level State Agency Natural Resources Pay, Salary, Benefits Information Information may include where available: pay, salary, bonuses, benefits, retirement contributions, pensions, and other financial data. Payroll Type State Base/Regular Pay $11,700 Lexi Michelle Dawson (2017) Forest Firefighter State of Washington Lexi Dawson worked as a Forest Firefighter for the State of Washington and in 2017 had a reported pay of $16,000 according to public records. This is 72.8 percent lower than the average pay for state employees and 74.9 percent lower than the national average for government employees. Overview Payroll Year 2017 Name Dawson, Lexi Formatted Name Lexi Dawson State Washington Employer/Location Natural Resources Employer/Source State of Washington Job Title Sf-Forest Fire Fighter Formatted Job Title Forest Firefighter Employer & Work Details Government Level State Agency Natural Resources Pay, Salary, Benefits Information Information may include where available: pay, salary, bonuses, benefits, retirement contributions, pensions, and other financial data. Payroll Type State Base/Regular Pay $16,000 Tito Ellis (2018) Office Assistant 3 Spokane Community College (SCC) Tito Ellis worked for Spokane Community College (SCC) and in 2018 had a reported pay of $24,800 according to public records. This is 62.8 percent lower than the average pay for university and college employees and 61.0 percent lower than the national average for government employees. Overview Payroll Year 2018 Name Ellis, Tito Formatted Name Tito Ellis State Washington Employer/Location Spokane Community College Employer/Source Spokane Community College Job Title Office Assistant 3 Employer & Work Details Government Level University & College Agency Spokane Community College School Abbreviation SCC University/College Spokane Community College Tito Ellis (2018) Admissions/Reg Asst II Spokane Community College (SCC) Tito Ellis worked for Spokane Community College (SCC) and in 2018 had a reported pay of $4,200 according to public records. Overview Payroll Year 2018 Name Ellis, Tito Formatted Name Tito Ellis State Washington Employer/Location Spokane Community College Employer/Source Spokane Community College Job Title Admissions/reg Asst Ii Employer & Work Details Government Level University & College Agency Spokane Community College School Abbreviation SCC University/College Spokane Community College Pay, Salary, Benefits Information Information may include where available: pay, salary, bonuses, benefits, retirement contributions, pensions, and other financial data. Payroll Type University & College Base/Regular Pay $4,200 Anthony Owen Lucas Lucas, Anthony Owen Defendant Spokane Municipal N00006356 08-17-2010 Tony Lucas @TonyLucc Im a STRRRAAAAANNGER FOR LIFE! Spokane, WA Joined April 2011 Tony Lucas ? @TonyLucc 29 May 2012 Spokane, WA is calling your name @KuttCalhoun! 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 29 Nov 2011 @ombakri2 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 12 Oct 2011 Replying to @weeddickwilly @Mexicanstiffler seriously dude, have you even listened to tech? I have never herd any one not like him #strangemusicalldayallnight 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 8 Oct 2011 #twitterisstupid 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 8 Oct 2011 #facebookisbetterthantwitter 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 8 Oct 2011 #fucktwitter 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 8 Oct 2011 f**k twitter, this s**t is stupid #twitterisdumb 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 1 Oct 2011 Replying to @KrizzKaliko @KrizzKaliko when is your next album, ive been stuck on that #ShockTreatment 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 29 Sep 2011 Replying to @DrJimSears @DrJimSears can you guys do a show that weighs the health benefits and risks of smoking marijuana? 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 29 Sep 2011 Replying to @TheDoctors @TheDoctors can you guys do a show that weighs the health benefits and risks of smoking marijuana? 0 replies 0 retweets 1 like Tony Lucas ? @TonyLucc 27 Sep 2011 Replying to @DrJimSears @DrJimSears I have a 3 and a half year old boy, he is a super picky eater, what are some tips for breaking this habit? 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 23 Sep 2011 Replying to @KHQDaveCotton @KHQDaveCotton did i get it? 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 20 Sep 2011 #readyforbed 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 20 Sep 2011 Replying to @TechN9ne @TechN9ne my girl thinks your avenge seven fold shirt is hot. Keep it Strange!!! 0 replies 0 retweets 0 likes Tony Lucas Retweeted KHQ Local News ?Verified account @KHQLocalNews 13 Sep 2011 Helmet Ordinance In Spokane County Approved 1 reply 1 retweet 0 likes Tony Lucas Retweeted JM Agbayani ? @janmae04 13 Sep 2011 "you can't trade magic like f****n Pokemon cards!". can't get over of Jesus death #trueblood 0 replies 2 retweets 0 likes Tony Lucas ? @TonyLucc 13 Sep 2011 #strangmusic 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 2 Sep 2011 @RealYoungBleed welcome to #strangemusic 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 1 Sep 2011 Replying to @TheNewKuttyCal @KuttCalhoun what is your next full length album going to be called? 0 replies 0 retweets 0 likes Tony Lucas Retweeted Kutt Calhoun ?Verified account @TheNewKuttyCal 1 Sep 2011 @beautyful_lotus my plan to take ova n go str8 to da top!! 2 replies 1 retweet 0 likes Tony Lucas ? @TonyLucc 1 Sep 2011 Replying to @TheNewKuttyCal @KuttCalhoun charlie sheen rocks, good work red headed stepchild 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 25 Aug 2011 Replying to @elocineniledam @MissMiksNicole whats up? 0 replies 0 retweets 0 likes Tony Lucas Retweeted Stuff Stoners Like ? @stoner_stuff 24 Jun 2011 If we were as rich as we are STONED right now...we'd have more money than Oprah 1 reply 16 retweets 1 like Tony Lucas Retweeted Stuff Stoners Like ? @stoner_stuff 26 Jun 2011 slow down, relax and smoke some weed, man...it's the weekend. 5 replies 37 retweets 4 likes Tony Lucas ? @TonyLucc 23 Jun 2011 @Eminem I think a collaboration with @techn9ne would be sick as f**k 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 23 Jun 2011 Replying to @50cent @50cent I think a collaboration with @techn9ne would be sick as f**k 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 22 Jun 2011 NO f*****g RESPECT!!! 0 replies 0 retweets 0 likes Tony Lucas Retweeted Stevie Stone ?Verified account @StevieStone09 15 Jun 2011 I WANT TO GIVE A BIG CONGRATS TO @TechN9ne @StrangeMusicInc HIMMI 0 replies 1 retweet 0 likes Tony Lucas ? @TonyLucc 13 Jun 2011 Dear Life, Why do you hate me? -Your Worst Enemy Tony 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 12 Jun 2011 Who wants to buy my tv? 32"HDTV, 3 HDMI ports, six inputs, and remote, $150 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 11 Jun 2011 Idk I guess I'm going to end up as a homeless bum under a bridge. I have the worst luck in life. 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 9 Jun 2011 Replying to @KrizzKaliko @KrizzKaliko what's up with Kabosh, Amafrican Psycho? Been waiting forever! 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 8 Jun 2011 @TechN9ne this guy can f**k off too, http://www.wspentertainment.com/jsin/content/reviews/music/2011/n9ne-6and7.php 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 8 Jun 2011 @techn9ne I think #spinsreviewonall6'sand7's is bull s**t, this album is just as good as #anghellic 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 3 Jun 2011 s**t, GOD d**n!!! 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 3 Jun 2011 @Techn9ne & @lilwayne collaboration finally released today! #fuckfood 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 30 May 2011 RT @stoner_stuff if at first you don't succeed...take another hit......word 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 30 May 2011 @TechN9ne welcome to spokane! 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 30 May 2011 @KuttCalhoun welcome to spokane! 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 30 May 2011 @KrizzKaliko welcome to spokane! 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 30 May 2011 @therealBigScoob welcome to spokane! 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 30 May 2011 @StevieStone09 welcome to spokane! 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 30 May 2011 @MAYDAYMUSIC welcome to spokane!! 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 29 May 2011 6688846993 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 29 May 2011 TECCA...... 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 29 May 2011 WHEN I SAY TECH TECH, YOU SAY N9NE N9NE...........TECH..TECH..... 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 29 May 2011 WHO IS PUMPED FOR THE TECH N9NE SHOW TOMORROW? 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 29 May 2011 WHEN I SAY TECH, YOU SAY N9NE.......TECH........ 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 29 May 2011 TECH TO THE N-9-N-E!! 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 29 May 2011 n9ne.n9ne.n9ne.n9ne 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 29 May 2011 tech.tech.tech.tech 0 replies 0 retweets 0 likes Tony Lucas Retweeted Dizz ? @Dizz2K7 29 May 2011 This just in, f**k @chrisbrown.... That is all 0 replies 1 retweet 0 likes Tony Lucas ? @TonyLucc 29 May 2011 The M's won again! 9-1 for their last 10, GO MARINERS!!! 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 28 May 2011 Dont ya be comin round here talkin sideways, ima make you fly away! DONT GET STOMPED! 0 replies 0 retweets 0 likes Tony Lucas Retweeted Stuff Stoners Like ? @stoner_stuff 28 May 2011 lotsa people wouldn't be such a******s if they'd just get STONED every now and then 0 replies 25 retweets 1 like Tony Lucas ? @TonyLucc 27 May 2011 That sounded like a cat jumping off the Empire State Building 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 25 May 2011 RT @stoner_stuff MARIJUANA is a perfect fit 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 25 May 2011 Thinking about changing my number...... 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 24 May 2011 i am a..... []D [] []V[] []D 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 23 May 2011 to all the crazy ex girlfriends (or befriends) in the world....... f**k YOU!!!!! 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 23 May 2011 THAT f*****g FOOL IS GOING TO GET ROCKED HARD, THEN HIS p***y AS IS PROBABLY GOING TO CALL THE COPS ON ME 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 23 May 2011 Just leave him the h**l alone, hes trying to eat! 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 22 May 2011 DB, my main man, you got tossed into the right dumpster! 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 22 May 2011 I can't believe it's pot butter! 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 22 May 2011 Thats like bringing weed to Amsterdam! 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 21 May 2011 ripped....... 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 21 May 2011 Weird f*****g people on the bus.... 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 21 May 2011 Who wants to go flying in my desert eagle? 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 19 May 2011 Replying to @elocineniledam @MissMiksNicole I was only joking, haven't you learned that about me yet? 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 19 May 2011 Beer pong was AWESOME last night, now I'm feeling kinda....UGH 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 19 May 2011 ug RT @MissMiksNicole It REALLY bothers me when people think I'm lying.... Thats a lie 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 18 May 2011 @TechN9ne needs to do a collabos with @therealbigscoob called 'All 56s & 57s' 0 replies 0 retweets 0 likes Tony Lucas Retweeted Cannibis fact ? @weedfact 10 May 2011 According to one report, it would take 800 joints to kill a person but the cause of death would be carbon monoxide poisoning. .. 0 replies 148 retweets 6 likes Tony Lucas Retweeted Cannibis fact ? @weedfact 13 May 2011 In 1937, the marijuana Tax Stamp prohibited the use, sale and cultivation of hemp/marijuana in the United States... 0 replies 12 retweets 2 likes Tony Lucas Retweeted Cannibis fact ? @weedfact 14 May 2011 The original drafts of the Declaration of Independence were written on hemp paper... 0 replies 33 retweets 4 likes Tony Lucas Retweeted Cannibis fact ? @weedfact 16 May 2011 Both George Washington and Tomas Jefferson grew marijuana on thier plantations.. 0 replies 137 retweets 9 likes Tony Lucas Retweeted Cannibis fact ? @weedfact 16 May 2011 One acre of hemp will produce as much paper as four acres of trees... 0 replies 74 retweets 2 likes Tony Lucas ? @TonyLucc 16 May 2011 Nig-ga Nig-ga This s**t right here n***a This s**t right here? 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 12 May 2011 RT @Dizz2K7 @KuttCalhoun hard and honest!!!....... #RawNUnkutt is my all time fav 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 11 May 2011 Been a boring day 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 11 May 2011 Mortal Kombat + Expert Mode = Me Pissed Off f**k! 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 11 May 2011 @KrizzKaliko I pre-order all your music and can't this time-lost my job, can you send me one on da house? 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 11 May 2011 No check for me today...): Who wants to loan me money until wednesday? 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 11 May 2011 Replying to @DIZZO509 @DIZZO509 Now I got the dunkin bubble gut farts ha lol! 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 9 May 2011 RT @MissMiksNicole I'm bored. Someone text me lol.....if I had your number, I would text you :) 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 9 May 2011 RT @weedfact More than 150,000 Americans die of alcohol abuse each year. But in 10k years of usage, no one has ever died from marijuana.. 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 9 May 2011 Replying to @therealBigScoob @therealBigScoob Happy Birthday- Make sure Tech and Krizz sing the bday anthem to you- from Genius 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 9 May 2011 RT @MissMiksNicole @TonyLucc Aw :) Thanks!..... And theres more where that came from :) you are welcome 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 9 May 2011 RT @MissMiksNicole @TonyLucc Isn't that a good thing? :) :).....especially when its a good smile :) 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 9 May 2011 RT @MissMiksNicole You know you've got something good when all you can do is SMILE :)... Thats all you ever do is smile :) 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 9 May 2011 RT @MissMiksNicole Slept like s**t... Me too :( 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 9 May 2011 Good morning facebook and twitter! 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 8 May 2011 Chinese food, lol got the munchies! 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 8 May 2011 f**k you Carls Jr. 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 7 May 2011 Cleaned a s**t load today, now I just need to get some..... 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 7 May 2011 @TechN9ne @StrangeMusicInc when are you going to sign @irvdaphenom, in my eyes, he is already STRANGE! 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 7 May 2011 I got the lead b*****s with a A high flush against a Queen high flush http://yfrog.com/hs51633742j 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 6 May 2011 Anyone down for some $5 hold 'em tonight? 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 6 May 2011 @NESTOTHEOWNER wanna buy the bar? 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 6 May 2011 Dickey Mouf b***h! 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 6 May 2011 Good morning cruel world! 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 6 May 2011 Replying to @StrangeMusicInc @StrangeMusicInc follow me! 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 5 May 2011 Run my finger down the list, all the way to the Ts, find her name, and check it off. 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 5 May 2011 @DIZZO509 YORT!!!! 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 4 May 2011 Replying to @elocineniledam @MissMiksNicole where you moving to? 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 4 May 2011 @therealBigScoob hey ya d**n fool, I sent you a pic of my pre order, and you aint followin me..... 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 4 May 2011 RT @MissMiksNicole @TonyLucc Lol not really a system, just a routine :) Mmmm hmmm 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 4 May 2011 RT @DIZZO509 "@TonyLucc what up son, just wanted to say it was Hella tight kikin it wit today and goin to........ (cont) http://deck.ly/~9yDJq 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 4 May 2011 RT @MissMiksNicole "@TonyLucc It's actually set an hr and 15 min before I really wake up haha Then I usuall... (cont) http://deck.ly/~MO6zC 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 4 May 2011 Replying to @DIZZO509 @DIZZO509 DIZZO NOW THATS A REAL DUDE RIGHT THERE!!! 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 4 May 2011 Replying to @elocineniledam @MissMiksNicole set your alarm an hour before you need to get up, then smash snooze, lol 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 4 May 2011 Replying to @elocineniledam @MissMiksNicole make sure you hit that snooze button, lol 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 3 May 2011 Sky high is fun and all, just not for fat asses like me HAHA! 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 3 May 2011 Replying to @therealBigScoob @therealBigScoob BEEN BUMPIN d**n FOOL ALL DAY http://yfrog.com/hs3kaxrj 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 2 May 2011 Replying to @therealBigScoob @therealBigScoob http://yfrog.com/h44y5hj Got that d**n Fool Big Homie 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 1 May 2011 Time for a change....... 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 27 Apr 2011 Replying to @therealBigScoob @therealBigScoob and we dont get any tornadoes in spokane! 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 27 Apr 2011 @therealBigScoob buy a house in spokane, you get so much love here. 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 27 Apr 2011 Replying to @therealBigScoob @therealBigScoob d**n FOOL, 5 days and counting! 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 27 Apr 2011 Replying to @TechN9ne @TechN9ne Watch this video http://www.youtube.com/watch?v=3FwnbXW1qEU&feature=youtube_gdata_player 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 24 Apr 2011 f**k HOLIDAYS! WHY DOES LIFE GOTTA BE FULL OF BULL s**t? 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 22 Apr 2011 RT @MissMiksNicole: "@TonyLucc I been on Twitter fool haha" who you calling a fool, you fool 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 22 Apr 2011 Replying to @elocineniledam @MissMiksNicole so now your on twitter huh? you better follow me lol 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 20 Apr 2011 Replying to @therealBigScoob @therealBigScoob big homie, I hear youre giving away free posters, can ya biggest fan get one too? 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 20 Apr 2011 4our 2wo zer0 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 20 Apr 2011 Ugh, would be nice if people helped. 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 19 Apr 2011 Replying to @KrizzKaliko @KrizzKaliko samuel isn't cured 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 18 Apr 2011 Now its hail 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 18 Apr 2011 Replying to @DIZZO509 @DIZZO509 its just work dude, stressing me the f**k out. 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 18 Apr 2011 WHY IS IT SNOWING?!?! 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 17 Apr 2011 I just wanna be happy :( 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 16 Apr 2011 Well................work should be interesting today..................... 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 16 Apr 2011 Replying to @TechN9ne @TechN9ne STAMINA!!! 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 16 Apr 2011 Replying to @TechN9ne @TechN9ne can't wait for all 6s & 7s, I think you should make a 'big bad wolf' remix or 'beef' remix 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 15 Apr 2011 f**k you b*****s, I'm stepping down. Lay your problems on somebody else. 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 14 Apr 2011 Just got a dining room table, its all coming together quite nicely. 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 14 Apr 2011 s**t, I wish I was rich b***h! 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 13 Apr 2011 I got a pay raise b*****s 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 13 Apr 2011 Replying to @KrizzKaliko @KrizzKaliko your next album is going to be S.I.C. Can't wait, I listen to your other three everyday......KALI BABY!!!! 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 13 Apr 2011 Now I'm satisfied :) 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 13 Apr 2011 Starving......ugh 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 13 Apr 2011 Moved the computer desk, now I need to get a dining room table! 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 9 Apr 2011 Replying to @therealBigScoob @therealBigScoob when we going to smoke a blunt big homie? May 30th in spokane, wa? 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 9 Apr 2011 f**k YOU 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 9 Apr 2011 "@DIZZO509: @Spazzme420 does this work????"like this you noob :-) 0 replies 1 retweet 0 likes Tony Lucas ? @TonyLucc 9 Apr 2011 "@Spazzme420: @TonyLucc BIOTCH!!!!!!" f*g 0 replies 0 retweets 0 likes Tony Lucas ? @TonyLucc 9 Apr 2011 @DIZZO509 @Spazzme420 what up b*****s! 0 replies 0 retweets 0 likes Pamela Jane Huffman/Herrebout ADDITIONAL NAMES: Pamela J Herrebout , Pam Huffman , Pam Herrebout Pamela J Huffman 47 years old Female From Seattle & Crown Hill, Washington CAREER: Telecommunications Professional Lexi Dawson 1 Dawson, Lexi Michelle Defendant Lincoln Cnty Dist Ct 6Z1110562 01-03-2017 2 Dawson, Lexi Michelle Defendant Lincoln Cnty Dist Ct 7Z1084542 10-17-2017 Merrill Gardens Waitress . Spokane, Washington Washington State Department of Natural Resources Wildland Firefighter Current City and Hometown Spokane, Washington Current city Omak, Washington Hometown Favorites Movies [Coach Carter] Coach Carter Television [The Fresh Prince of Bel-Air] The Fresh Prince of Bel-Air Athletes [Nate Robinson] Nate Robinson Sports [Cross Country] Cross Country Other Omak Lady Hawks/OMS Basketball, Spokane Hoopfest, Hometown Pizza Omak, Nike, Rise & Grind Espresso, Worldstar Hip Hop, Lavish Salon, Everything Michael Cera, Terrain Race, Omakfitforlife, Funny Memes Pacific NW, U.S. News and World Report, Nerds with Vaginas, Tomi Lahren, Washington State Department of Natural Resources, Backcountry, Spokane Community College, Eastern Washington Interagency Fire Training Academy, Toyaturnup_watchjazzy, Midori Bikinis, Kanye's Diary, Spokane Fitness Center - North, Spokane Fitness Center - Valley, Okanogan Dogs Adoption Coordinators, Turning Point USA, Omak Stampede, Inc., Donald J. Trump, BluElephant Photography, The Class of 2016, Tasty, Omak-Okanogan County Chronicle, BuzzFeed Video, Poems p**n, Tribal Tribune, Omak School District, Colville Confederated Tribes, KXLY 4 News, The Color Run, Free Bird Espresso, Omak Battleground, Maggie's Omak, Rawson's, Grandmas Attic, okanogan family faire, Omak Pioneer Fastpitch, Snooki, Nike Sportswear, Nike Basketball, The North Face, Gonzaga University, Wilson Baseball / Softball Nicole Duvernay worked as a Math Teacher for Spokane Community College (SCC) and in 2017 had a reported pay of $72,100 according to public records. This is 11.3 percent higher than the average pay for university and college employees and 17.7 percent higher than the national average for government employees. Overview Payroll Year 2017 Name Duvernay, Nicole Formatted Name Nicole Duvernay State Washington Employer/Location Spokane Community College Employer/Source Spokane Community College Job Title Mathematics Formatted Job Title Math Teacher Work Details Government Level University & College Agency Spokane Community College University/College Spokane Community College Clark, Garrett William Defendant Spokane County Dist 5Z0525173 05-01-2015 Work Four Seasons Landscaping inc Laborer . June 2013 to June 2016 . Spokane, Washington Pro-Formance Lube Center Education Spokane Community College 2012 to 2014 . Spokane, Washington Education Current Community Colleges of Spokane Graduating Class 2015 Hometown Spokane Valley Affiliations Community Colleges of Spokane East Valley High School Laborer at The Grounds Guys of Spokane Valley Worked at Pro-Formance Lube Center Former Laborer at Four Seasons Landscaping inc Studied at Spokane Community College Lives in Spokane, Washington From Spokane, Washington Engaged to Hanna Foster Joined on April 2010 Hostname: www.groundsguys.com ISP: Hostway Services, Inc. Continent: North America Flag: US Country: United States Country Code: US IP Address: 64.70.194.20 Latitude: 37.751 Longitude: -97.822 Favorites Music [The South Hill] The South Hill Movies [The Hobbit] The Hobbit Games [Princess Liv] Princess Liv Athletes [Joey Votto] Joey Votto Sports Teams [Cincinnati Reds] Cincinnati Reds Sports [Baseball] Baseball Other Champs Sports, Silver Safari - Valley Mall, Sprint, Reliable Towing, Brianna Rene Fitness, Washington Trails Association, Washington State Parks & Recreation Commission, Mermaid Melissa, The Book of Mormon on Broadway, Took By Snook, Humans of Spokane, Starbucks Frappuccino, Hidden Collective, CAFE, Survival Magazine, Looking Glass Tattoo, Web That Sells, Auto-Vue Drive-In Theatre, Leukemia Awareness, ChaanduActive, Lularoe with Joy Burk, Survivalhikingcampinglife, Legalize it, don't Criticize it, I Go Backpacking, AlpineExpert - Hiking & Camping, Huckberry, Gear Assistant, CancerCon, Stupid Cancer, Idaho Hiking Club, Million Dollar Beard Club, Nugs&Dabs, Nepal Hiking, Only In Washington, Bobby Hill, Hank Hill, Studio Ghibli, Everest Base Camp, The Leukemia & Lymphoma Society, Traverse Northwest, SoDelicious, Sorry I'm just a guy, Marijuana World News, CauseWereGuys, National Academy of Sports Medicine (NASM), Lashes and Locks by Haylee Name: Tanner Hundahl https://www.archive.is/hYDH4 Twitter: https://twitter.com/tannerhundahl Name Court Case Number Judgment Record Court Information 1 Hundahl, Tanner Joseph Defendant Benton County Dist K00023174 09-16-2016 Intro Lifeguard at Silverwood Theme Park Studied at Spokane Community College Lives in Spokane Valley, Washington From Kennewick, Washington Single About Tanner Hundahl Work Silverwood Theme Park Lifeguard . May 1, 2018 to present Target Cashier . November 4, 2017 to present Education Kamiakin High School Aug 2011 to 2015 . Kennewick, Washington Spokane Community College Current City and Hometown Spokane Valley, Washington Current city Kennewick, Washington Hometown Favorites Television [The Walking Dead] The Walking Dead Athletes [Russell Wilson] Russell Wilson Sports Teams [The Bodybuilding Nation] The Bodybuilding Nation Other The Awkward Moment When Your crush ask "who do you like?", Orbit Gum, Vine Videos, Orange Julius Columbia Center Mall, Samsung, Too Small to Fail, Pac-12 Conference, Conrad & Adams Fruit, LLC., Daily Plug, North Idaho Pike Anglers, Bent Trivia, Badger Canyon Herb Co., LLC dba Badger Canyon Herb & Tea, Tyson Patten Page, Tackle Warehouse, SpareFoot, Spokane Bass Club, City Stars Gentlemen's Club, The Wake Up Call, Basscasters, Brooke Thomas, Luke Kehoe Tattoos, Garland Tattoo and Piercing, Anchored Art Tattoo & Gallery, Infamous Tattoo/Jerk Jagger Studios, Deputy Hook'em and Deputy Book'em, Donald J. Trump, Pick Up Lines, Pureledkit, FOOD INSIDER, AJ+, MagiQuiz, Officer Daniels, Lil Mayo, Andrew Michael Dayton Memorial page, KFC, Tostitos, Shelton, Washington, Tri Cities Wrestling Club, Stefanie's Photography, Savanna's Modeling, Gillette, Pray For Kate and Ethan Austin, Kamiakin High School YoungLife, Kamiakin Wrestling, Mid-Columbia Gymnastics & Cheer, Jamie's World, Ford Mustang Jordyn Christene Noble Female From Spokane, Washington Lives in Spokane, Washington From Spokane, Washington Married to Dylan Noble USERNAME: jordyissaucy15 ADDITIONAL NAMES: Jordyn N Reiter , Noble C Jordyn LOCATION: Spokane, Washington About Jordyn Christene Noble Work Name Court Case Number Judgment Record Court Information 1 Noble, Jordyn Christene Defendant Spokane County Dist 18178152 04-09-2018 Jack and Dan's Server . February 1, 2016 to August 1, 2016 . Spokane, Washington Current City and Hometown Spokane, Washington Current city Spokane, Washington Hometown Favorites Music [Chris Brown] Chris Brown Books [A Child Called "It"] A Child Called "It" Movies [Dear John] Dear John Television [Cake Boss] Cake Boss Games [Volleyball] Volleyball Athletes [Reggie Bush] Reggie Bush Sports Teams [Spokane Chiefs] Spokane Chiefs Other Mary Lou's Milk Bottle, Silverwood Theme Park, Wendy's, HonorSociety.org, McDonald's, Ellen DeGeneres, Family in My Heart - Minetees.com, Babies, Power of Positivity, Weird People, Word p**n, 3LittlePitties, Bookkeeper Business Launch, Welcome to the Woods, Capture The Moment Photography, Intelligence is s**y, Positive Energy+, Treat A Dog, I Love Being a Mom, Nucific, Positive Plus, Heaven Soul, The Dodo, Nesting Place, Growing Gracefully, Teach Me Life, Auto-Vue Drive-In Theatre, Art by Aud, Addicted to Saving, The Penny Hoarder, Better Homes & Gardens, Ritual, Succulent Studios, Dezda Finn Properties, LLC, Lil Bit Of Top Knot Grooming, Weber Concrete & Co., Meriah's Esty Life & Lashes, Strong Mind, 100% Dog Lovers, Ashes into Glass, 1 Million Women, Global Buy, Smart School House, Kitchen Fun With My 3 Sons, Dad and Bloated, Cactus & plants in Lattakia syria", Karla's garden, Orquideando, ROSES, Flowers and Gardens, The Church at New Bern, Pittie Nation, Pet Ninja, Savannah Salerno - Coldwell Banker Tomlinson, Offset Solar, TruDog, Dog Pawty, Wood Creations by Mark, BarkBox, ComfyWool, Cheddar, WheelMan Spokane, Mom Date Monday, Jax n Daisy, GoodGood Outdoors, Sand & Sky, Volaire, Classic Dad, Rough Country Rustic Furniture & Decor, Tasty, CJ Darnell-Morrow, Cakes by Spanky, Cupcakes by Ari, Danette May, Pitbulls&Rottweilers, Positive Pitbulls, Animal Rescue Home, Santacon Spokane, The Blvd Coffee Company, On Point Photography By Stephanie Craft, Facebook Marketplace Community, Tip Hero, AWM America, Noland Real Estate, Animal Farm Foundation, LeAnn Allred Fitness, thredUP, Love, s*x, Intelligence, Beauty Bakerie, Spokane Paranormal Investigation Group, HopStop Home Brew & Wine Making Supplies, Jordan Wertman, Buy Nothing Project, KREM 2 News, KHQ Local News, The Grand Latte, Smish Smash Sandwich Co., Big Brothers Big Sisters of the Inland Northwest, Waddell's Brewing Co., Thunder Down Under - The Excalibur, Gary Peterson, Go Pro Floors, Benefit Cosmetics, Drinkery, Rare and Retro Vintage, Nutella, Corset Wedding / Bridal Gowns, Bridal Boutique, Hope For Paws, SIMPLY ELEGANT WEDDING CAKES, Bridesmaid Boutique, Bride and Groom Magazine - Sri Lanka, Funny Wedding Cakes!, The Bride's Diary, TED, Dreamwedding, Miss Missy Photography, Wedding Chicks, Weddingish, Wedding Selections, Engagement 101 Magazine, Health Digest, Baristas Are Awesome, Tarte Cosmetics: Makeup, Luke Bryan Fanss, Alexander York, The Academy, Alexander York The Salon & Barbershop, Rigo Ranch, Too Faced Cosmetics, Top Drawer Cabinets, Deb's Espresso, My Makeup Brush Set, Cedar Crossing Apartments, Hut no. 8 Spokane & Valley, Overstock, Associated Agents Group Inc., Dreamcatchers by Shanda & Lance, Waddell's Neighborhood Pub & Grille, Friendly Christmas Trees - Maui, Bread Tie Challenge, Spokane News, For her and for him, zulily, Emily Doll - The Vintage Doll, Daily Inspirational Quotes, Vintage Life Magazine, Pin-up Style, Fashion Jewellery, Motivational Quotes, Pinup Fashion, Chubby Chico Charms, American Cancer Society Relay For Life, Polar Bears, Country Music, INKED Australia/NZ, Inked Fresh Magazine, Tattoos by myttoos.com, Tattoo Extreme Magazine / ??????, Netflix, Pizza Hut, Verragio Engagement Rings and Wedding Bands, Dairy Queen, Netflix 24 Following Following 42 Followers Followers 62 Jordyn Reiter @JordynReiter Joined September 2011 Tweets Tweets Tweets, current page. Tweets & replies Jordyn Reiter ? @JordynReiter 27 Mar 2013 This lady driving next to me is wearing a winter coat and a beanie. What? Haha it's spring summer!! 0 replies 0 retweets 0 likes Jordyn Reiter ? @JordynReiter 21 Feb 2013 That one time you are craving oatmeal and there is none in your whole house ? 0 replies 0 retweets 0 likes Jordyn Reiter ? @JordynReiter 21 Feb 2013 Try to beat me! My Ruzzle username is 'jo3reiter'. @ruzzlegame http://ruzzle-game.com/download 0 replies 0 retweets 0 likes Jordyn Reiter ? @JordynReiter 21 Feb 2013 Learning how to work twitter again #confusing 0 replies 0 retweets 0 likes Jordyn Reiter Retweeted Amani Amr ? @AmaniiiAmr 20 Feb 2013 the number of calories that I have consumed within the past 25 minutes.. ? 1 reply 1 retweet 1 like Jordyn Reiter Retweeted Brigid Rypien ? @brigidryp 18 Feb 2013 If you have ever typed the letters LMS, reevaluate your choices 1 reply 3 retweets 4 likes Jordyn Reiter ? @JordynReiter 16 May 2012 We have 15 more school days till we graduate!!!! @AmaniiiAmr 0 replies 0 retweets 0 likes Jordyn Reiter ? @JordynReiter 2 May 2012 The sky is black...hate these days #depressing 0 replies 0 retweets 0 likes Jordyn Reiter ? @JordynReiter 30 Apr 2012 When you randomly wake up 4 min before your alarm goes off. #weird 0 replies 0 retweets 0 likes Jordyn Reiter ? @JordynReiter 28 Apr 2012 A dream that I dream will come true(: #Cinderella 0 replies 0 retweets 0 likes Jordyn Reiter ? @JordynReiter 23 Apr 2012 Speeding ticket payed off!!! #relieved 0 replies 0 retweets 0 likes Jordyn Reiter ? @JordynReiter 20 Apr 2012 Cake batter #addicting 0 replies 0 retweets 0 likes Jordyn Reiter ? @JordynReiter 28 Mar 2012 Wish I had a credit card that always had money on it #broke 0 replies 0 retweets 0 likes Jordyn Reiter ? @JordynReiter 22 Mar 2012 RT @ShelbyAngstrom How tired you get after #crying, its like your body's way of saying "you've suffered enough tonight, get some rest" 0 replies 0 retweets 0 likes Jordyn Reiter ? @JordynReiter 19 Mar 2012 Wanted to sleep in today :/ #tired 0 replies 0 retweets 0 likes Jordyn Reiter ? @JordynReiter 18 Mar 2012 RT @12Rockyy I really want a personal trainer 0 replies 0 retweets 0 likes Jordyn Reiter ? @JordynReiter 28 Nov 2011 @Thee_ZABORSKI i ruv you(: 0 replies 0 retweets 0 likes Jordyn Reiter ? @JordynReiter 8 Nov 2011 @12Rockyy im not!! lol 0 replies 0 retweets 0 likes Jordyn Reiter ? @JordynReiter 8 Nov 2011 sooooooo bored. got ditched by an a*****e i should have never made plans with!!!! 0 replies 0 retweets 1 like Jordyn Reiter ? @JordynReiter 26 Sep 2011 finally got one because REKIYAH made me lol 0 replies 0 retweets 0 likes Christopher Michael Riley IP Address: 192.188.250.90 Favorites Television [Tucker Carlson Tonight] Tucker Carlson Tonight Games [Overwatch] Overwatch Athletes [Spider Man] Spider Man Other Fallout Memes, For The Win, Gaming Never Dies, b***h Please, I'm a Pokemon Trainer, We Love Pkmn, I Love Cats, Squatting Slavs In Tracksuits, CJ Pearson, Unprofessional Madman, GameSpot, Social Justice Warriors 5: Backup, Jenna's Pies - Charity Pie Sales, Steven Crowder, CollegeHumor, GanonDork, LGBTQ@Facebook, Student Problems, We the Internet TV, Blaire White, Social Justice Warriors, The Anti Feminist Bank, The Pathetic Life of an Average /k/ommando Backup, Ben Shapiro, Rated Red, Stefan Molymemes, Senator Chris McDaniel, The Pathetic Life of an Average /k/ommando, RWBY Nation, RWBY Memes, Star Wars Universe, Paul Joseph Watson, UNILAD, RWBY Universe, Milo Yiannopoulos, Overwatch: Memes, 4chan Memes and Other Creamy Supremes, Gaaaaaaaaaaary, Triggering Memes for Regressive Teens II, Degeneracy Sucks & So Do You, Pokemon Fusion Art, vonvon, God Emperor Trump, 4chan /g/ that actually posts stuff from /g/, Politically Incorrect - /pol/, k**t Boy and Lava CIit, 4channel, The Joker Unleashed, Deadpool, Lonk, Harambe, Bored AF, Cyanide & Happiness, 4chan, OverMeme - Overwatch Memes, PUNtastic, Arby's, Arekkz Gaming, Microsoft, Xbox, Nintendo, Apex Gaming, Jamie Costa, Monster Hunter's Tavern, Ranker, Teostra, The Monster Hunter Guild, GameZone, Anime Fandom, Sangheili, Like A Boss, Drew's Reviews, The Legend of Zelda: Twilight Princess, Brendan, Master of the Hoenn League, Video Games Talk, Drax: The Destroyer, Tony Stark, Rosalina, Rocket Raccoon, I am Groot, Shadow Lugia, Anime Ecchi y algo mas, Primal Rayquaza, Sword Art Online II Br, Fairy Tail Couples, Legend of Zelda Family, Pokelogic, Pokemon Global News, Scizor The Hard One Case No: IN0491307 - HUMPHREY, CORY JAMES Print Charges 46.16.010.3.O-FL RENEW EXPIRED REG > 2 MTHS; 46.16.010.3.O-FL RENEW EXPIRED REG > 2 MTHS; 46.30.020-OP MOT VEH W/OUT INSURANCE; 46.30.020-OP MOT VEH W/OUT INSURANCE Case Type Infraction Traffic-IT LEA SPOKANE COUNTY SHERIFF Jurisdiction Spokane County Incident # Court District Court Case File Date 08/26/2008 Case Status Closed - 09/29/2017 2017-09-29 Case Obligation Removed from Collections 2017-09-29 17275100009 Penalty Payment Paid in Full 200.92 Case Closed 2017-09-29 PD BY VEC CK 5634 2017-09-25 PD IN FULL, CC, INVOICE 388771 2017-09-25 FTR Adjudicated: Case Paid 2017-09-25 DOL will not be notified of this adjudication 2017-09-25 CLEARED THROUGH IHIPS 2017-08-24 17235101918 Partial Fine Payment Received 56.00 2017-08-24 PD BY VEC CK # 5537 2017-08-10 17221101083 Partial Fine Payment Received 68.96 2017-08-10 PD BY VEC CK 5497 2017-07-13 17193101145 Partial Fine Payment Received 117.12 2017-07-13 PD BY VEC CK 5419 2015-05-15 *INFRACTION CITATION-SCANNED* 2015-05-15 *AFFIDAVIT-SCANNED* 2015-05-15 ****************TO BE SHREDDED IN 90 DAYS******************** 2011-08-18 DEF CLLD REFERRED HIM TO VEC 2011-01-14 Case Obligation Assigned to VALLEY EMPIRE COLLECTION for Collections 2010-12-10 Collections: 1st Notice Prepared 2010-12-07 NOTICE OF TERMINATION FILED: X INVOLUNTARY / VOLUNTARY 2010-12-07 INVOLUNTARY TERMINATION PRIOR TO PROGRAM ENTRY 2010-12-07 ON THE ORDER DATE, THE DEFENDANT WAS TERMINATED FROM THE 2010-12-07 RELICENSING PROGRAM FOR THE FOLLOWING REASON. 2010-12-07 FAILURE TO APPEAR: 2010-12-07 60 DAY 90 DAY 120 DAY REVIEW. 2010-12-07 FAILURE TO COMPLY: 2010-12-07 LIVING SKILLS X PAYMENTS DRIVING BEHAVIOR 2010-12-07 OTHER. 2010-12-07 NOTICE OF TERMINATION MAILED TO DEF BY PROS OFFICE. FTA 2010-12-07 REISSUED AS INDICATED BY ORDER ONLY. 2010-12-07 FTR Ordered 2010-12-07 Case Obligation Removed from Collections 2010-12-07 Case Obligation Selected for Collections 2010-12-07 FTR Issued, Amount Due 443.00 2010-10-27 10300101967 Partial Fine Payment Received 25.00 2010-10-27 PD BY PAR CK 2401 2010-09-29 10272100535 Partial Fine Payment Received 25.00 2010-09-29 PD BY PAR CK 2365 2010-09-01 10244200443 Partial Fine Payment Received 25.00 2010-09-01 PD BY PAR CK 2351 2010-07-22 10203101042 Partial Fine Payment Received 50.00 2010-07-22 PD BY PAR CK 2323 2010-06-02 10153101213 Partial Fine Payment Received 25.00 2010-06-02 PD BY PAR CK 2289 2010-05-03 10123201201 Partial Fine Payment Received 25.00 2010-05-03 PD BY PAR CK 2266 2010-04-02 10093100525 Partial Fine Payment Received 25.00 2010-04-02 PD BY PAR CK 2247 2010-03-03 10062102029 Partial Fine Payment Received 25.00 2010-03-03 PD BY PAR CK 2227 2010-01-26 10026101956 Partial Fine Payment Received 25.00 2010-01-26 PAID BY PAR CK 2203 2009-12-30 9363102954 Partial Fine Payment Received 25.00 2009-12-30 PD BY PAR CK 2184 2009-12-02 9336100812 Partial Fine Payment Received 25.00 2009-12-02 PD BY PAR CK 2165 2009-10-20 9293100553 Partial Fine Payment Received 25.00 2009-10-20 PAID BY PAR CK 2136 2009-09-23 9266101955 Partial Fine Payment Received 25.00 2009-09-23 PAID BY PAR CK 2120 2009-08-19 9231100516 Partial Fine Payment Received 25.00 2009-08-19 PAID BY PAR CK 2096 2009-07-02 RELICENSING PROJECT TIER 1 PARTICIPATION NOTIFICATION FILED. 2009-07-02 INITIATE ACTIONS PER GENERAL ORDER# 01-2008 2009-07-02 TRANSFER ALL CASES UNDER ORDER TO PAR STATUS FOR PAYMENT. 2009-07-02 PAYMENT SET AT $25.00 PER MONTH COMMENCING IN AUGUST OF 2009, 2009-07-02 WITH MONTHLY PAYMENTS DUE THEREAFTER BY THE 20TH DAY TO PAR 2009-07-02 UNTIL; 1)SUCH FINES/CIVIL PENALTIES ARE PIF, 2) FURTHER COURT 2009-07-02 ORDER, 3) NOTICE OF TERMINATION IS FILED OR 4)DEFAULT STATUS 2009-07-02 OF THE PAYMENT PLAN OCCURS DURING OR AFTER COMPLETION STATUS. 2009-07-02 FAILURE TO PAY WILL LEAD TO FTA/S BEING REISSUED, FULL 2009-07-02 COLLECTION STATUS AND ADDITIONAL FEES OR FINES. INCLUDES 2009-07-02 IN491307 2009-07-02 FTR Adjudicated: Court Appearance Scheduled 2009-07-02 Case Obligation Removed from Collections 2009-07-02 Collection Status Manually Assigned to PAR ACCEPTANCE CORPORATION 2009-07-02 FTA adjudication automatically sent to DOL 2008-11-10 Case Obligation Assigned to VALLEY EMPIRE COLLECTION for Collections 2008-10-06 Collections: 1st Notice Prepared 2008-09-30 Accounts Receivable Created 818.00 2008-09-30 FTR Ordered 2008-09-30 Case Obligation Selected for Collections 2008-09-30 Finding/Judgment of COMMITTED for Charge 01 2008-09-30 Finding/Judgment of COMMITTED for Charge 02 2008-09-30 FTR Issued, Amount Due 818.00 2008-08-29 DEF 1 HUMPHREY, CORY JAMES Added as Participant 2008-08-29 OFF 1 KNIGHT, DP Added as Participant 2008-08-29 JTR fee included in the bail amount 2008-08-26 Case Filed on 08/26/2008 CORY JAMES HUMPHREY Record ID: 127441864 ID Case Number: SPOKANE COUNTY DISTRICT COURTCB0045312 Last Name: HUMPHREY First Name: CORY Middle Name: JAMES DOB: 20/06/1983 Charges Filed Date: 11/12/2001 Offense Date: 08/12/2001 Offense Code: 46.61.500 Offense Description: RECKLESS DRIVING Disposition: Amended Disposition Date: 23/01/2002 Fines: 000025000 Source State: WA BUY FULL REPORT CORY JAMES HUMPHREY Record ID: 127441865 ID Case Number: SPOKANE COUNTY DISTRICT COURTCB0045312 Last Name: HUMPHREY First Name: CORY Middle Name: JAMES DOB: 20/06/1983 Charges Filed Date: 11/12/2001 Offense Date: 08/12/2001 Offense Code: 46.61.525 Offense Description: NEGLIGENT DRIVING 2ND DEGREE Disposition: Committed Disposition Date: 22/01/2002 Fines: 000025000 Source State: WA Ruvim M Gavrilyuk https://www.youtube.com/channel/UCL_gP_xs55d3gag2QbF8idQ/featured https://archive.is/r5NXY [Small-time wannabe black-hat hacker on Minecraft] IP Address 97.114.69.161 Found an IP/URL artifact that was identified as malicious by at least one reputation engine details 1/76 reputation engines marked "http://ocsp.trust-provider.com" as malicious (1% detection rate) source External System relevance 10/10 Network Related Malicious artifacts seen in the context of a contacted host details Found malicious artifacts related to "23.35.71.67": ... URL: https://www.chip.de/downloader/?pid=focus&cid=54418612&browser=unknown&lastchange=1517766291&source=landingpage (AV positives: 2/76 scanned on 03/26/2020 04:46:23) URL: http://downloaderapi.chip.de/download/54406063/?app_key=c6bbb44ff3856592ea1486159ac37d8e (AV positives: 2/76 scanned on 03/26/2020 04:41:12) URL: https://www.psicars.com/ (AV positives: 2/71 scanned on 02/24/2020 04:01:17) URL: https://www.firsthorizon.com/products-and-services/borrowing/credit-cards?msclkid=f32361d051e51fca7a5c3ff9e63b4c17 (AV positives: 3/72 scanned on 02/11/2020 05:04:07) URL: https://www.firsthorizon.com/ (AV positives: 2/72 scanned on 02/10/2020 19:27:40) File SHA256: f98bc99cb8160d4e7f19fb76410ca4fab37c3d3dbfef6123b54c6c78d0be174c (AV positives: 42/72 scanned on 03/23/2020 01:41:32) Found malicious artifacts related to "74.125.192.155": ... URL: https://stats.g.doubleclick.net/r/collect?v=1&aip=1&t=dc&_r=3&tid=UA-51915447-1&cid=1561689094.1430196265&jid=1743330473&_v=j35&z=1388274836 (AV positives: 1/63 scanned on 04/28/2015 04:45:35) URL: https://stats.g.doubleclick.net/r/collect?v=1&aip=1&t=dc&_r=3&tid=UA-51915447-1&cid=982038166.1430196095&jid=339211618&_v=j35&z=1108641866 (AV positives: 1/63 scanned on 04/28/2015 04:43:02) URL: https://stats.g.doubleclick.net/r/collect?v=1&aip=1&t=dc&_r=3&tid=UA-51915447-1&cid=616252409.1430195976&jid=803007462&_v=j35&z=1987499391 (AV positives: 1/63 scanned on 04/28/2015 04:40:47) URL: https://stats.g.doubleclick.net/r/collect?v=1&aip=1&t=dc&_r=3&tid=UA-51915447-1&cid=789606747.1430195847&jid=2024444283&_v=j35&z=618399270 (AV positives: 1/63 scanned on 04/28/2015 04:39:59) URL: https://stats.g.doubleclick.net/r/collect?v=1&aip=1&t=dc&_r=3&tid=UA-51915447-1&cid=1863498444.1430195804&jid=1759761465&_v=j35&z=1909541938 (AV positives: 1/63 scanned on 04/28/2015 04:38:57) File SHA256: bfb33147f9b8bd5db589d5354a0d477217a926f8cd92617fc56467875f589086 (Date: 04/25/2019 03:59:15) File SHA256: 8679362afe8969e39c8a67bd10dc4f154067e9b1c67b774f41efb11315df5314 (AV positives: 20/53 scanned on 08/31/2014 19:10:16) File SHA256: e717b4a152e1951565d90cd594868766146f57248bc9e1e37f317f7234fd5f15 (AV positives: 1/52 scanned on 07/14/2014 16:36:14) File SHA256: 18cda4fc1d191ed1d9e2dd77513a0e7cb928651510b1053049e8cd86e4cf1886 (AV positives: 1/50 scanned on 06/05/2014 12:00:08) File SHA256: 38b88de0565dee0113b4576650a26548c5f95f1a1ab4ed96dfc5f07ce80503bb (AV positives: 1/51 scanned on 02/15/2014 02:41:46) File SHA256: 77e0d97c5e8f1ebcbe5946a714f6118a335868f26474fc67533212209aaeb5cc (AV positives: 2/50 scanned on 01/28/2014 14:43:50) Found malicious artifacts related to "108.174.10.10": ... URL: https://lnkd.in/fycrnud (AV positives: 6/76 scanned on 03/29/2020 14:58:48) URL: https://lnkd.in/eqNTnyy (AV positives: 6/76 scanned on 03/29/2020 06:02:22) URL: http://lnkd.in/gdaw-b2 (AV positives: 4/76 scanned on 03/29/2020 00:30:22) URL: http://lnkd.in/f3vMe3e (AV positives: 5/76 scanned on 03/28/2020 01:29:52) URL: http://lnkd.in/gyj7crg?idtrack=ka6uc68o (AV positives: 4/76 scanned on 03/27/2020 14:59:30) File SHA256: 09d2c9944582dab6475d519fbfc08dee1d0eedd821b2853ae0b74bc664bfbc6a (Date: 03/29/2020 12:32:40) File SHA256: e31e809fad7b9b4acd911c9dcbaafac39d8e8697a1361a0c780a1f266d96926a (Date: 03/29/2020 07:53:21) File SHA256: bd7596d4aea2b20e21f2a53f6928075bacf36109e4f9d19e786309c086c46a79 (Date: 03/28/2020 09:38:55) File SHA256: 7dcd4f08314907574ebbf4a58daee519fa6296658476da0cda4a053d81fbd452 (Date: 03/28/2020 04:48:59) File SHA256: f6ca90a2f27a0e40a0325b1e283ad1a4a4cadfacd051b1fadba9a3e321bfa81d (Date: 03/28/2020 03:11:04) File SHA256: d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3 (AV positives: 1/73 scanned on 03/14/2020 09:13:13) File SHA256: 84f1d1ffdc036768ffeba1be92362dcf619e7ce6ec27500ab47844ed24fc4230 (AV positives: 20/74 scanned on 03/06/2020 16:28:05) File SHA256: 92724fa6e5728c5e46df11dc2c8e57c75f051ed8d1ce843e8a4b1cb9de05d2e9 (AV positives: 1/75 scanned on 02/21/2020 17:11:57) File SHA256: d0d92045526c516afec269826eb681ef55df6353dd9d131bc58a1b19042b7c6c (AV positives: 1/74 scanned on 02/05/2020 20:00:22) File SHA256: 37ce6b6f7a4026a69784ee202283bb4d9f13651b84cb1abaec0ca4f359514a0b (AV positives: 27/75 scanned on 02/03/2020 21:08:12) source Network Traffic relevance 10/10 Sends traffic on typical HTTP outbound port, but without HTTP header details TCP traffic to 35.227.45.219 on port 80 is sent without HTTP header TCP traffic to 35.227.45.219 on port 443 is sent without HTTP header TCP traffic to 192.124.249.23 on port 80 is sent without HTTP header TCP traffic to 34.98.83.188 on port 443 is sent without HTTP header TCP traffic to 172.217.11.8 on port 443 is sent without HTTP header TCP traffic to 172.217.4.195 on port 80 is sent without HTTP header TCP traffic to 157.240.11.35 on port 443 is sent without HTTP header TCP traffic to 151.101.196.157 on port 443 is sent without HTTP header TCP traffic to 172.217.10.142 on port 443 is sent without HTTP header TCP traffic to 108.174.10.14 on port 443 is sent without HTTP header TCP traffic to 172.217.10.226 on port 443 is sent without HTTP header TCP traffic to 172.217.11.38 on port 443 is sent without HTTP header TCP traffic to 35.186.249.72 on port 443 is sent without HTTP header TCP traffic to 13.249.128.202 on port 443 is sent without HTTP header TCP traffic to 23.35.71.67 on port 443 is sent without HTTP header TCP traffic to 23.35.68.10 on port 80 is sent without HTTP header TCP traffic to 74.125.192.155 on port 443 is sent without HTTP header TCP traffic to 104.244.42.133 on port 443 is sent without HTTP header TCP traffic to 104.244.42.67 on port 443 is sent without HTTP header TCP traffic to 108.174.10.10 on port 443 is sent without HTTP header source Network Traffic relevance 5/10 Uses a User Agent typical for browsers, although no browser was ever launched details Found user agent(s): Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko source Network Traffic relevance 10/10 Unusual Characteristics Installs hooks/patches the running process details "iexplore.exe" wrote bytes "3030596d" to virtual address "0x75231380" (part of module "SHLWAPI.DLL") "iexplore.exe" wrote bytes "b033596d" to virtual address "0x73A01250" (part of module "UXTHEME.DLL") "iexplore.exe" wrote bytes "60cd5c6d" to virtual address "0x7523130C" (part of module "SHLWAPI.DLL") "iexplore.exe" wrote bytes "60cd5c6d" to virtual address "0x75BA1E14" (part of module "SHELL32.DLL") "iexplore.exe" wrote bytes "b033596d" to virtual address "0x757A1164" (part of module "USP10.DLL") "iexplore.exe" wrote bytes "b033596d" to virtual address "0x76C71100" (part of module "MSCTF.DLL") "iexplore.exe" wrote bytes "b033596d" to virtual address "0x754D1210" (part of module "IMM32.DLL") "iexplore.exe" wrote bytes "a035596d" to virtual address "0x73A0139C" (part of module "UXTHEME.DLL") "iexplore.exe" wrote bytes "b033596d" to virtual address "0x75A214E0" (part of module "USER32.DLL") "iexplore.exe" wrote bytes "a035596d" to virtual address "0x7523131C" (part of module "SHLWAPI.DLL") "iexplore.exe" wrote bytes "b033596d" to virtual address "0x75AF17CC" (part of module "ADVAPI32.DLL") "iexplore.exe" wrote bytes "a035596d" to virtual address "0x76B8B0CC" (part of module "IERTUTIL.DLL") "iexplore.exe" wrote bytes "b033596d" to virtual address "0x012A70C0" "iexplore.exe" wrote bytes "70cc5c6d" to virtual address "0x75231310" (part of module "SHLWAPI.DLL") "iexplore.exe" wrote bytes "a035596d" to virtual address "0x754D1064" (part of module "IMM32.DLL") "iexplore.exe" wrote bytes "b033596d" to virtual address "0x759D11BC" (part of module "GDI32.DLL") "iexplore.exe" wrote bytes "b033596d" to virtual address "0x6E12F6A0" (part of module "IEFRAME.DLL") "iexplore.exe" wrote bytes "60d25c6d" to virtual address "0x75BA1D7C" (part of module "SHELL32.DLL") "iexplore.exe" wrote bytes "b033596d" to virtual address "0x752311B8" (part of module "SHLWAPI.DLL") "iexplore.exe" wrote bytes "a035596d" to virtual address "0x75BA202C" (part of module "SHELL32.DLL") source Hook Detection relevance 10/10 Phishing attempt by User of blacklisted Canadian IP 70.50.227.57 (Return-Path: johngreen@solicitors.org IP: 70.50.227.57 ; Located in Toronto, Ontario, Canada. ISP: Bell Canada. Source Host: TOROON12-1177740089.sdsl.bell.ca ; Organization: Sympatico ; Received: from mail.tranquinet.com ([213.195.72.46]) Received: from User [70.50.227.57] by mail.tranquinet.com with ESMTP (SMTPD32-6.06) id A98F1BBE00E4; Mon, 25 Jun 2012 17:53:51 +0200 Reply-To: <jgreenesq@consultant.com> From: "John Green"<johngreen@solicitors.org> Subject: RE: (YOUR REF: PAG/A0511007) 2.) 419 Phish by User of IP 77.231.82.172 and sent via host uva.uvaolhost.com.br by authenticated_id: palazzolouniao@uvaol.com.br ; Fraudster details in phish- Reply-To: <unitednationsoffice001@consultant.com> & United Nations Office Representatives In Nigeria Contact Information Officer: Mr. Donald Bold Email: mrdonaldbold@yahoo.com Tele:+2348182595393< Received: from uva.uvaolhost.com.br ([142.4.31.38]) by COL004-MC4F31.hotmail.com over TLS secured channel with Microsoft SMTPSVC(7.5.7601.22712); Sat, 26 Jul 2014 19:34:59 -0700 Received: from [77.231.82.172] (port=3638 helo=User) by uva.uvaolhost.com.br with esmtpa (Exim 4.82) (envelope-from <info@unitednations.org>) id 1XBEIb-00022U-12; Sat, 26 Jul 2014 23:34:58 -0300 Reply-To: <unitednationsoffice001@consultant.com> From: "FROM UNITED NATIONS OFFICE"<info@unitednations.org> Subject: YOU HAVE TO CONTACT THE RIGHT OFFICE FOR YOUR FUNDS Date: Sun, 27 Jul 2014 04:31:55 +0200 xxxxx X-AntiAbuse: Sender Address Domain - unitednations.org X-Get-Message-Sender-Via: uva.uvaolhost.com.br: authenticated_id: palazzolouniao@uvaol.com.br Return-Path: info@unitednations.org ETC Less Spamvertized STOOGE Site. Spam Distributors, Tracking & Redirection - Illegal Phishing/ID Theft Scams. - Site associated with World.com Media Group LLC., a mass-Spamming/Scamming site host who promotes Spam, Scams and Phishing. - These scammers are only after your Identity and credit card information. - Do not click on links found in spam e-mail messages or these websites. - Do not become their next victim. These sites are associated with criminals by knowingly violating US Law. Site Willingly and Knowingly Violates the US CAN-SPAM Act by sending or have sent on their behalf UCE "Spam" to Non-Opt-In email accounts, violating Federal Law, which is a criminal act! Which of course sounds nothing like how a legitimate and reputable company would do business. Avira malware site ESET suspicious site Header returned by request for: http //redifbsm4 top/?237 -> 69.89.31.169 HTTP/1.1 200 OK Server: nginx/1.14.1 Date: Thu, 05 Sep 2019 02:08:00 GMT Content-Type: text/html Content-Length: 822 Connection: close Last-Modified: Sat, 10 Aug 2019 00:27:18 GMT Accept-Ranges: bytes Cache-Control: max-age=0, no-cache, no-store, must-revalidate Pragma: no-cache Expires: Fri, 13 Feb 1976 06:00:00 GMT Content that was returned by your request for the URL: http //redifbsm4 top/?237 1: < !DOCTYPE html> 2: < html> 3: < head> 4: < meta charset="utf-8"> 5: < title> Redirecting...< /title> 7: < !-- Default Statcounter code for 0-FBS-Redifbsm4.top 8: http://redifbsm4.top --> 9: < script type="text/javascript"> 10: var sc_project=12044319; 11: var sc_invisible=1; 12: var sc_security="ec90d266"; 13: < / script > 14: < script type="text/javascript" 15: src="https://www.statcounter.com/counter/counter.js" 16: async> < / script > 17: < no- script > < div class="statcounter"> < a title="Web Analytics" 18: href="https://statcounter.com/" target="_blank"> < img 19: class="statcounter" 20: src="https://c.statcounter.com/12044319/0/ec90d266/1/" 21: alt="Web Analytics"> < /a> < /div> < /no- script > 22: < !-- End of Statcounter Code --> 25: < script language="javascript"> 26: setTimeout("top.location.href = 'http://pofheadlines.com/all/fb/'",2000); 27: < / script > 29: < /head> 30: < body> 31: < p> Please wait...< /p> 32: < /body> 33: < /html> Hybrid Analysis Report https://www.hybrid-analysis.com/sample/7ba772f7f6ef25875c7f10ad48af6d5ecdf7f54d3956464e88696db9b9de6385/5e826523e4493b3af1760656 Malicious artifacts seen in the context of the input URL details Found malicious artifacts related to the input domain "http://redifbsm4.top" (IP: 69.89.31.169): ... URL: https://pofheadlines.com/ (AV positives: 1/76 scanned on 03/28/2020 00:51:26) URL: http://sportsandmedia.com/U3/onlineid.php (AV positives: 3/76 scanned on 03/21/2020 04:24:02) URL: http://pofheadlines.com/best-plenty-of-fish-headlines/ (AV positives: 2/72 scanned on 02/22/2020 22:20:59) URL: https://pofheadlines.com/wp-includes/js/jquery/jquery.js?ver=1.12.4 (AV positives: 2/72 scanned on 02/22/2020 03:52:06) URL: https://pofheadlines.com/xmlrpc.php (AV positives: 2/72 scanned on 02/19/2020 22:43:09) File SHA256: 03f7b1097f58d1dd9bb791cc9e21e416d1fdfa0b758af6aa7714edddc752a5ea (AV positives: 4/73 scanned on 01/10/2020 01:34:10) File SHA256: b1ec43bf9699682442f816152032e426a2673107b668ccd541ba1f824d589029 (AV positives: 5/74 scanned on 01/09/2020 01:04:36) File SHA256: 67d353a19eee55b044861ef40ec1da8519f1b7300bce30a6a4c250e19788abf9 (AV positives: 1/73 scanned on 06/12/2019 03:55:28) File SHA256: c8d62662b0e43429408de3579e9be5038385ff532fd2b9af52a09951030bc01d (AV positives: 1/72 scanned on 06/05/2019 21:40:23) File SHA256: 93b262f676510c4006baa6cdb95735b5caa7ddfa1524a92a6022a01dc01c9ad4 (AV positives: 1/72 scanned on 04/08/2019 00:29:04) File SHA256: 56deec984a97d4066258357f7e59739f9161e51e6fa74d0d8e3c173229f2a928 (Date: 10/24/2017 23:56:51) File SHA256: 4e00b102f3e0ebd9273aee350a21d806182035c9c0cca635688d10ddc2d6a8e5 (Date: 10/24/2017 23:53:24) source Network Traffic relevance 10/10 ATT&CK ID T1035 Tactics Execution Permissions Required Administrator, SYSTEM Description Adversaries may execute a binary, command, or script via a method that interacts with Windows services, such as the Service Control Manager(...) Source https://attack.mitre.org/techniques/T1035 Informative Indicators Opened the service control manager ATT&CK ID T1179 Tactics Persistence, Privilege Escalation, Credential Access Permissions Required Administrator, SYSTEM Description Windows processes often leverage application programming interface (API) functions to perform tasks that require reusable system resources(...) Source https://attack.mitre.org/techniques/T1179 Informative Indicators Installs hooks/patches the running process ATT&CK ID T1112 Tactics Defense Evasion Permissions Required User, Administrator, SYSTEM Description Adversaries may interact with the Windows Registry to hide configuration information within Registry keys, remove information as part of cleaning up, or as part of other techniques to aid in Persistence and Execution(...) Source https://attack.mitre.org/techniques/T1112 Informative Indicators Accesses System Certificates Settings ATT&CK ID T1012 Tactics Discovery Permissions Required User, Administrator, SYSTEM Description Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software(...) Source https://attack.mitre.org/techniques/T1012 Informative Indicators Reads the registry for installed applications Reads the Equation Editor Class Identifier (CLSID) Accesses Software Policy Settings ATT&CK ID T1043 Tactics Command and Control Description Adversaries may communicate over a commonly used port to bypass firewalls or network detection systems and to blend with normal network activity to avoid more detailed inspection(...) Source https://attack.mitre.org/techniques/T1043 Suspicious Indicators Sends traffic on typical HTTP outbound port, but without HTTP header malicious Threat Score: 89/100 AV Detection: Marked as clean Labeled as: Unrated site http://datingdoctor.com/ This report is generated from a file or URL submitted to this webservice on April 12th 2020 22:16:31 (UTC) and action script Default browser analysis Guest System: Windows 7 32 bit, Professional, 6.1 (build 7601), Service Pack 1 Report generated by Falcon Sandbox v8.30 (C) Hybrid Analysis Incident Response Risk Assessment Spyware POSTs files to a webserver Network Behavior Contacts 9 domains and 10 hosts. MITRE ATT&CK(TM) Techniques Detection This report has 7 indicators that were mapped to 7 attack techniques and 7 tactics. MITRE ATT&CK(TM) Technique - T1035 - Service Execution ATT&CK ID T1035 Tactics Execution Permissions Required Administrator, SYSTEM Description Adversaries may execute a binary, command, or script via a method that interacts with Windows services, such as the Service Control Manager(...) Source https://attack.mitre.org/techniques/T1035 Informative Indicators Opened the service control manager MITRE ATT&CK(TM) Technique - T1179 - Hooking ATT&CK ID T1179 Tactics Persistence, Privilege Escalation, Credential Access Permissions Required Administrator, SYSTEM Description Windows processes often leverage application programming interface (API) functions to perform tasks that require reusable system resources(...) Source https://attack.mitre.org/techniques/T1179 Informative Indicators Installs hooks/patches the running process MITRE ATT&CK(TM) Technique - T1179 - Hooking ATT&CK ID T1179 Tactics Persistence, Privilege Escalation, Credential Access Permissions Required Administrator, SYSTEM Description Windows processes often leverage application programming interface (API) functions to perform tasks that require reusable system resources(...) Source https://attack.mitre.org/techniques/T1179 Informative Indicators Installs hooks/patches the running process MITRE ATT&CK(TM) Technique - T1112 - Modify Registry ATT&CK ID T1112 Tactics Defense Evasion Permissions Required User, Administrator, SYSTEM Description Adversaries may interact with the Windows Registry to hide configuration information within Registry keys, remove information as part of cleaning up, or as part of other techniques to aid in Persistence and Execution(...) Source https://attack.mitre.org/techniques/T1112 Informative Indicators Accesses System Certificates Settings MITRE ATT&CK(TM) Technique - T1179 - Hooking ATT&CK ID T1179 Tactics Persistence, Privilege Escalation, Credential Access Permissions Required Administrator, SYSTEM Description Windows processes often leverage application programming interface (API) functions to perform tasks that require reusable system resources(...) Source https://attack.mitre.org/techniques/T1179 Informative Indicators Installs hooks/patches the running process MITRE ATT&CK(TM) Technique - T1043 - Commonly Used Port ATT&CK ID T1043 Tactics Command and Control Description Adversaries may communicate over a commonly used port to bypass firewalls or network detection systems and to blend with normal network activity to avoid more detailed inspection(...) Source https://attack.mitre.org/techniques/T1043 Suspicious Indicators Sends traffic on typical HTTP outbound port, but without HTTP header Indicators Not all malicious and suspicious indicators are displayed. Get your own cloud service or the full version to view all details. Malicious Indicators 1 Network Related Malicious artifacts seen in the context of the input URL details Found malicious artifacts related to the input domain "http://datingdoctor.com" (IP: 50.116.114.76): ... URL: https://nepalaya.org.np/ (AV positives: 2/77 scanned on 04/11/2020 04:55:10) URL: http://buddhabeautysalon.com/wp-includes/images/micro8/step2.php (AV positives: 6/72 scanned on 03/03/2020 17:24:09) URL: http://nepalaya.org.np/ (AV positives: 1/72 scanned on 01/16/2020 14:58:42) URL: http://sunrisefoodindustry.com/ (AV positives: 3/72 scanned on 12/05/2019 18:58:11) URL: http://witsend.co.nz/js/extjs/resources/images/magento/layout/uol/atualize/pagamento/index3.html (AV positives: 6/71 scanned on 10/03/2019 16:47:25) File SHA256: 0ff0b7fcb090c65d0bdcb2af4bbd2c30f33356b3ce9b117186fa20391ef840a3 (AV positives: 6/72 scanned on 12/05/2019 05:07:00) File SHA256: 6a67d85a3740ab6e955afd67cc06d70b48e8b94551b689434b79262256c2843a (AV positives: 1/69 scanned on 07/24/2018 00:08:49) File SHA256: c334ba2996f9cd6effb0a958e55bd956b4d7bdc98961bf808a91884699088d10 (AV positives: 2/57 scanned on 07/16/2017 08:55:48) source Network Traffic relevance 10/10 Suspicious Indicators 9 External Systems Found an IP/URL artifact that was identified as malicious by at least one reputation engine details 2/76 reputation engines marked "http://forms.mailmunch.co" as malicious (2% detection rate) 1/71 reputation engines marked "http://a.mailmunch.co" as malicious (1% detection rate) source External System relevance 10/10 General POSTs files to a webserver details "POST /?wc-ajax=get_refreshed_fragments HTTP/1.1 Accept: */* Content-Type: application/x-www-form-urlencoded; charset=UTF-8 X-Requested-With: XMLHttpRequest Referer: http://datingdoctor.com/ Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Host: datingdoctor.com Content-Length: 18 DNT: 1 Connection: Keep-Alive Cache-Control: no-cache Cookie: PHPSESSID=899556a4327fe08626eb56774a98b95a; mailmunch_second_pageview=true; mo_page_views_counter=1; mo_is_new=true; mo_has_visited=true" with no payload source Network Traffic relevance 5/10 Network Related Found potential IP address in binary/memory details Heuristic match: "/wp-content/plugins/mailoptin/src/core/src/assets/js/mailoptin.min.js?ver=1.2.27.0" source String relevance 3/10 Malicious artifacts seen in the context of a contacted host details Found malicious artifacts related to "50.116.114.76": ... URL: https://nepalaya.org.np/ (AV positives: 2/77 scanned on 04/11/2020 04:55:10) URL: http://buddhabeautysalon.com/wp-includes/images/micro8/step2.php (AV positives: 6/72 scanned on 03/03/2020 17:24:09) URL: http://nepalaya.org.np/ (AV positives: 1/72 scanned on 01/16/2020 14:58:42) URL: http://sunrisefoodindustry.com/ (AV positives: 3/72 scanned on 12/05/2019 18:58:11) URL: http://witsend.co.nz/js/extjs/resources/images/magento/layout/uol/atualize/pagamento/index3.html (AV positives: 6/71 scanned on 10/03/2019 16:47:25) File SHA256: 0ff0b7fcb090c65d0bdcb2af4bbd2c30f33356b3ce9b117186fa20391ef840a3 (AV positives: 6/72 scanned on 12/05/2019 05:07:00) File SHA256: 6a67d85a3740ab6e955afd67cc06d70b48e8b94551b689434b79262256c2843a (AV positives: 1/69 scanned on 07/24/2018 00:08:49) File SHA256: c334ba2996f9cd6effb0a958e55bd956b4d7bdc98961bf808a91884699088d10 (AV positives: 2/57 scanned on 07/16/2017 08:55:48) Found malicious artifacts related to "35.169.40.78": ... URL: http://beat-corona.xyz/ (AV positives: 1/77 scanned on 04/06/2020 02:18:27) URL: https://www.southernkitchen.com/ (AV positives: 1/77 scanned on 04/05/2020 02:14:51) URL: http://covid.rip/ (AV positives: 1/76 scanned on 04/01/2020 00:27:52) URL: https://app.replyify.com/contact/easy/caa146f4-eb8c-4010-b562-d6a986cf2c2b/item/5e5483e7-0b1b-4820-b2f5-4a68c5cac9d8 (AV positives: 1/76 scanned on 03/31/2020 18:36:40) URL: http://www.kanjinerd.com/en/items/%E3%83%8B%E3%83%83%E3%82%B1%E3%83%AB/ (AV positives: 3/76 scanned on 03/31/2020 09:24:36) File SHA256: beeae5a93463330d31de48bffeefbcd123a21006fb5be7072a396fd81cc57df5 (AV positives: 29/75 scanned on 03/03/2020 07:07:27) File SHA256: dd775d48f396558420d7f57dc1fc12efe84d2055a64f98e9983183105875c884 (Date: 02/11/2020 23:27:21) File SHA256: 6911cf530b8874c1b8ded272661ccf24579c83b8abd86e885a3f1f3a66848e14 (Date: 01/28/2020 17:28:00) File SHA256: 7c97f05ac87d69824251e8f7ca9d7e1125976f1390090d1acedf55c1f7a055a9 (Date: 01/28/2020 01:11:04) File SHA256: bcf971380c3cc25e00a7645d917b60032b26974d8efd1a983e35866cf0a81eed (AV positives: 4/74 scanned on 01/25/2020 14:07:47) source Network Traffic relevance 10/10 Sends traffic on typical HTTP outbound port, but without HTTP header details TCP traffic to 50.116.114.76 on port 80 is sent without HTTP header TCP traffic to 209.197.3.15 on port 80 is sent without HTTP header TCP traffic to 172.217.6.106 on port 443 is sent without HTTP header TCP traffic to 143.204.25.70 on port 80 is sent without HTTP header TCP traffic to 172.217.4.42 on port 443 is sent without HTTP header TCP traffic to 8.249.161.254 on port 80 is sent without HTTP header TCP traffic to 172.217.5.3 on port 80 is sent without HTTP header TCP traffic to 172.217.6.99 on port 443 is sent without HTTP header TCP traffic to 172.217.4.110 on port 443 is sent without HTTP header TCP traffic to 35.169.40.78 on port 80 is sent without HTTP header source Network Traffic relevance 5/10 ATT&CK ID T1043 (Show technique in the MITRE ATT&CK(TM) matrix) Uses a User Agent typical for browsers, although no browser was ever launched details Found user agent(s): Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko source Network Traffic relevance 10/10 Unusual Characteristics Contacts Mail Related Domain Names details "a.mailmunch.co" is probably a mail server "forms.mailmunch.co" is probably a mail server source Network Traffic relevance 10/10 Hiding 2 Suspicious Indicators All indicators are available only in the private webservice or standalone version Informative 20 Environment Awareness Reads the registry for installed applications details "iexplore.exe" (Path: "HKCUSOFTWAREMICROSOFTWINDOWSCURRENTVERSIONAPP PATHSIEXPLORE.EXE") "iexplore.exe" (Path: "HKLMSOFTWAREMICROSOFTWINDOWSCURRENTVERSIONAPP PATHSIEXPLORE.EXE") "iexplore.exe" (Path: "HKLMSOFTWAREMICROSOFTWINDOWSCURRENTVERSIONAPP PATHSOUTLOOK.EXE") source Registry Access relevance 10/10 ATT&CK ID T1012 (Show technique in the MITRE ATT&CK(TM) matrix) Exploit/Shellcode Reads the Equation Editor Class Identifier (CLSID) details "iexplore.exe" (Path: "HKCRSOFTWARECLASSESCLSID{00021700-0000-0000-C000-000000000046}IMPLEMENTED CATEGORIES{00021493-0000-0000-C000-000000000046}") "iexplore.exe" (Path: "HKCRSOFTWARECLASSESCLSID{0002CE02-0000-0000-C000-000000000046}IMPLEMENTED CATEGORIES{00021493-0000-0000-C000-000000000046}") "iexplore.exe" (Path: "HKCRSOFTWARECLASSESCLSID{0003000B-0000-0000-C000-000000000046}IMPLEMENTED CATEGORIES{00021493-0000-0000-C000-000000000046}") "iexplore.exe" (Path: "HKCRSOFTWARECLASSESCLSID{00021700-0000-0000-C000-000000000046}IMPLEMENTED CATEGORIES{00021494-0000-0000-C000-000000000046}") "iexplore.exe" (Path: "HKCRSOFTWARECLASSESCLSID{0002CE02-0000-0000-C000-000000000046}IMPLEMENTED CATEGORIES{00021494-0000-0000-C000-000000000046}") "iexplore.exe" (Path: "HKCRSOFTWARECLASSESCLSID{0003000B-0000-0000-C000-000000000046}IMPLEMENTED CATEGORIES{00021494-0000-0000-C000-000000000046}") source Registry Access relevance 10/10 ATT&CK ID T1012 (Show technique in the MITRE ATT&CK(TM) matrix) External Systems Sample was identified as clean by Antivirus engines details 0/66 Antivirus vendors marked sample as malicious (0% detection rate) source External System relevance 10/10 General Accesses Software Policy Settings details "iexplore.exe" (Path: "HKCUSOFTWAREPOLICIESMICROSOFTSYSTEMCERTIFICATESCA"; Key: "") "iexplore.exe" (Path: "HKCUSOFTWAREPOLICIESMICROSOFTSYSTEMCERTIFICATESCACERTIFICATES"; Key: "") "iexplore.exe" (Path: "HKCUSOFTWAREPOLICIESMICROSOFTSYSTEMCERTIFICATESCACRLS"; Key: "") "iexplore.exe" (Path: "HKCUSOFTWAREPOLICIESMICROSOFTSYSTEMCERTIFICATESCACTLS"; Key: "") "iexplore.exe" (Path: "HKLMSOFTWAREPOLICIESMICROSOFTSYSTEMCERTIFICATESCA"; Key: "") "iexplore.exe" (Path: "HKLMSOFTWAREPOLICIESMICROSOFTSYSTEMCERTIFICATESCACERTIFICATES"; Key: "") "iexplore.exe" (Path: "HKLMSOFTWAREPOLICIESMICROSOFTSYSTEMCERTIFICATESCACRLS"; Key: "") "iexplore.exe" (Path: "HKLMSOFTWAREPOLICIESMICROSOFTSYSTEMCERTIFICATESCACTLS"; Key: "") "iexplore.exe" (Path: "HKCUSOFTWAREPOLICIESMICROSOFTSYSTEMCERTIFICATESDISALLOWED"; Key: "") "iexplore.exe" (Path: "HKCUSOFTWAREPOLICIESMICROSOFTSYSTEMCERTIFICATESDISALLOWEDCERTIFICATES"; Key: "") "iexplore.exe" (Path: "HKCUSOFTWAREPOLICIESMICROSOFTSYSTEMCERTIFICATESDISALLOWEDCRLS"; Key: "") "iexplore.exe" (Path: "HKCUSOFTWAREPOLICIESMICROSOFTSYSTEMCERTIFICATESDISALLOWEDCTLS"; Key: "") "iexplore.exe" (Path: "HKLMSOFTWAREPOLICIESMICROSOFTSYSTEMCERTIFICATESDISALLOWED"; Key: "") "iexplore.exe" (Path: "HKLMSOFTWAREPOLICIESMICROSOFTSYSTEMCERTIFICATESDISALLOWEDCERTIFICATES"; Key: "") "iexplore.exe" (Path: "HKLMSOFTWAREPOLICIESMICROSOFTSYSTEMCERTIFICATESDISALLOWEDCRLS"; Key: "") "iexplore.exe" (Path: "HKLMSOFTWAREPOLICIESMICROSOFTSYSTEMCERTIFICATESDISALLOWEDCTLS"; Key: "") "iexplore.exe" (Path: "HKLMSOFTWAREPOLICIESMICROSOFTSYSTEMCERTIFICATESROOT"; Key: "") "iexplore.exe" (Path: "HKLMSOFTWAREPOLICIESMICROSOFTSYSTEMCERTIFICATESROOTCERTIFICATES"; Key: "") "iexplore.exe" (Path: "HKLMSOFTWAREPOLICIESMICROSOFTSYSTEMCERTIFICATESROOTCRLS"; Key: "") "iexplore.exe" (Path: "HKLMSOFTWAREPOLICIESMICROSOFTSYSTEMCERTIFICATESROOTCTLS"; Key: "") source Registry Access relevance 10/10 ATT&CK ID T1012 (Show technique in the MITRE ATT&CK(TM) matrix) Accesses System Certificates Settings details "iexplore.exe" (Path: "HKCUSOFTWAREMICROSOFTSYSTEMCERTIFICATESMY"; Key: "") "iexplore.exe" (Path: "HKCUSOFTWAREMICROSOFTSYSTEMCERTIFICATESCA"; Key: "") "iexplore.exe" (Path: "HKCUSOFTWAREMICROSOFTSYSTEMCERTIFICATESCACERTIFICATES"; Key: "") "iexplore.exe" (Path: "HKCUSOFTWAREMICROSOFTSYSTEMCERTIFICATESCACRLS"; Key: "") "iexplore.exe" (Path: "HKCUSOFTWAREMICROSOFTSYSTEMCERTIFICATESCACTLS"; Key: "") "iexplore.exe" (Path: "HKLMSOFTWAREMICROSOFTSYSTEMCERTIFICATESCA"; Key: "") "iexplore.exe" (Path: "HKLMSOFTWAREMICROSOFTSYSTEMCERTIFICATESCACERTIFICATES"; Key: "") "iexplore.exe" (Path: "HKLMSOFTWAREMICROSOFTSYSTEMCERTIFICATESCACRLS"; Key: "") "iexplore.exe" (Path: "HKLMSOFTWAREMICROSOFTSYSTEMCERTIFICATESCACTLS"; Key: "") "iexplore.exe" (Path: "HKCUSOFTWAREMICROSOFTSYSTEMCERTIFICATESDISALLOWED"; Key: "") "iexplore.exe" (Path: "HKCUSOFTWAREMICROSOFTSYSTEMCERTIFICATESDISALLOWEDCERTIFICATES"; Key: "") "iexplore.exe" (Path: "HKCUSOFTWAREMICROSOFTSYSTEMCERTIFICATESDISALLOWEDCRLS"; Key: "") "iexplore.exe" (Path: "HKCUSOFTWAREMICROSOFTSYSTEMCERTIFICATESDISALLOWEDCTLS"; Key: "") "iexplore.exe" (Path: "HKLMSOFTWAREMICROSOFTSYSTEMCERTIFICATESDISALLOWED"; Key: "") "iexplore.exe" (Path: "HKLMSOFTWAREMICROSOFTSYSTEMCERTIFICATESDISALLOWEDCERTIFICATES"; Key: "") "iexplore.exe" (Path: "HKLMSOFTWAREMICROSOFTSYSTEMCERTIFICATESDISALLOWEDCRLS"; Key: "") source Registry Access relevance 10/10 ATT&CK ID T1112 (Show technique in the MITRE ATT&CK(TM) matrix) Contacts domains details "datingdoctor.com" "netdna.bootstrapcdn.com" "a.mailmunch.co" source Network Traffic relevance 1/10 Contacts server details "50.116.114.76:80" "209.197.3.15:80" "172.217.6.106:443" "143.204.25.70:80" "172.217.4.42:443" "8.249.161.254:80" "172.217.5.3:80" "172.217.6.99:443" "172.217.4.110:443" "35.169.40.78:80" source Network Traffic relevance 1/10 Creates mutants details "Sessions1BaseNamedObjectsIsoScope_f1c_IESQMMUTEX_0_519" "LocalInternetShortcutMutex" "IsoScope_f1c_IESQMMUTEX_0_519" "{5312EE61-79E3-4A24-BFE1-132B85B23C3A}" "IsoScope_f1c_IESQMMUTEX_0_331" "Local!BrowserEmulation!SharedMemory!Mutex" "IsoScope_f1c_IESQMMUTEX_0_303" "LocalURLBLOCK_DOWNLOAD_MUTEX" "IsoScope_f1c_ConnHashTable<3868>_HashTable_Mutex" "LocalZonesCacheCounterMutex" "LocalURLBLOCK_HASHFILESWITCH_MUTEX" "LocalURLBLOCK_FILEMAPSWITCH_MUTEX_3868" "LocalVERMGMTBlockListFileMutex" "{66D0969A-1E86-44CF-B4EC-3806DDDA3B5D}" "IsoScope_f1c_IE_EarlyTabStart_0xaa8_Mutex" "LocalZonesLockedCacheCounterMutex" "Sessions1BaseNamedObjectsLocalVERMGMTBlockListFileMutex" "Sessions1BaseNamedObjectsLocalURLBLOCK_FILEMAPSWITCH_MUTEX_3868" "Sessions1BaseNamedObjectsLocalURLBLOCK_HASHFILESWITCH_MUTEX" "Sessions1BaseNamedObjectsLocalURLBLOCK_DOWNLOAD_MUTEX" source Created Mutant relevance 3/10 Drops files marked as clean details Antivirus vendors marked dropped file "urlblockindex_1_.bin" as clean (type is "data") source Extracted File relevance 10/10 Opened the service control manager details "iexplore.exe" called "OpenSCManager" requesting access rights "SC_MANAGER_CONNECT" (0x1) "iexplore.exe" called "OpenSCManager" requesting access rights "0XE0000000L" source API Call relevance 10/10 ATT&CK ID T1035 (Show technique in the MITRE ATT&CK(TM) matrix) Overview of unique CLSIDs touched in registry details "iexplore.exe" touched "WinInetBroker Class" (Path: "HKCUCLSID{C39EE728-D419-4BD4-A3EF-EDA059DBD935}") "iexplore.exe" touched "PSFactoryBuffer" (Path: "HKCUCLSID{057EEE47-2572-4AA1-88D7-60CE2149E33C}") "iexplore.exe" touched "Cor MIME Filter, CorFltr, CorFltr 1" (Path: "HKCRSOFTWARECLASSESCLSID{1E66F26B-79EE-11D2-8710-00C04F79ED0D}") "iexplore.exe" touched "NetworkListManager" (Path: "HKCUCLSID{DCB00C01-570F-4A9B-8D69-199FDBA5723B}TREATAS") "iexplore.exe" touched "Network List Manager" (Path: "HKCUCLSID{A47979D2-C419-11D9-A5B4-001185AD2B89}TREATAS") "iexplore.exe" touched "CLSID_RecordInfo" (Path: "HKCRSOFTWARECLASSESCLSID{0000002F-0000-0000-C000-000000000046}IMPLEMENTED CATEGORIES{00021493-0000-0000-C000-000000000046}") "iexplore.exe" touched "DAO.DBEngine.36" (Path: "HKCRSOFTWARECLASSESCLSID{00000100-0000-0010-8000-00AA006D2EA4}IMPLEMENTED CATEGORIES{00021493-0000-0000-C000-000000000046}") "iexplore.exe" touched "DAO.PrivateDBEngine.36" (Path: "HKCRSOFTWARECLASSESCLSID{00000101-0000-0010-8000-00AA006D2EA4}IMPLEMENTED CATEGORIES{00021493-0000-0000-C000-000000000046}") "iexplore.exe" touched "DAO.TableDef.36" (Path: "HKCRSOFTWARECLASSESCLSID{00000103-0000-0010-8000-00AA006D2EA4}IMPLEMENTED CATEGORIES{00021493-0000-0000-C000-000000000046}") "iexplore.exe" touched "DAO.Field.36" (Path: "HKCRSOFTWARECLASSESCLSID{00000104-0000-0010-8000-00AA006D2EA4}IMPLEMENTED CATEGORIES{00021493-0000-0000-C000-000000000046}") "iexplore.exe" touched "DAO.Index.36" (Path: "HKCRSOFTWARECLASSESCLSID{00000105-0000-0010-8000-00AA006D2EA4}IMPLEMENTED CATEGORIES{00021493-0000-0000-C000-000000000046}") "iexplore.exe" touched "DAO.Group.36" (Path: "HKCRSOFTWARECLASSESCLSID{00000106-0000-0010-8000-00AA006D2EA4}IMPLEMENTED CATEGORIES{00021493-0000-0000-C000-000000000046}") "iexplore.exe" touched "DAO.User.36" (Path: "HKCRSOFTWARECLASSESCLSID{00000107-0000-0010-8000-00AA006D2EA4}IMPLEMENTED CATEGORIES{00021493-0000-0000-C000-000000000046}") "iexplore.exe" touched "DAO.QueryDef.36" (Path: "HKCRSOFTWARECLASSESCLSID{00000108-0000-0010-8000-00AA006D2EA4}IMPLEMENTED CATEGORIES{00021493-0000-0000-C000-000000000046}") "iexplore.exe" touched "DAO.Relation.36" (Path: "HKCRSOFTWARECLASSESCLSID{00000109-0000-0010-8000-00AA006D2EA4}IMPLEMENTED CATEGORIES{00021493-0000-0000-C000-000000000046}") "iexplore.exe" touched "StdOleLink" (Path: "HKCRSOFTWARECLASSESCLSID{00000300-0000-0000-C000-000000000046}IMPLEMENTED CATEGORIES{00021493-0000-0000-C000-000000000046}") "iexplore.exe" touched "FileMoniker" (Path: "HKCRSOFTWARECLASSESCLSID{00000303-0000-0000-C000-000000000046}IMPLEMENTED CATEGORIES{00021493-0000-0000-C000-000000000046}") "iexplore.exe" touched "ItemMoniker" (Path: "HKCRSOFTWARECLASSESCLSID{00000304-0000-0000-C000-000000000046}IMPLEMENTED CATEGORIES{00021493-0000-0000-C000-000000000046}") "iexplore.exe" touched "AntiMoniker" (Path: "HKCRSOFTWARECLASSESCLSID{00000305-0000-0000-C000-000000000046}IMPLEMENTED CATEGORIES{00021493-0000-0000-C000-000000000046}") "iexplore.exe" touched "PointerMoniker" (Path: "HKCRSOFTWARECLASSESCLSID{00000306-0000-0000-C000-000000000046}IMPLEMENTED CATEGORIES{00021493-0000-0000-C000-000000000046}") source Registry Access relevance 3/10 Process launched with changed environment details Process "iexplore.exe" (Show Process) was launched with new environment variables: "PATH="%PROGRAMFILES%Internet Explorer;"" source Monitored Target relevance 10/10 Spawns new processes details Spawned process "iexplore.exe" with commandline "http://datingdoctor.com/" (Show Process) Spawned process "iexplore.exe" with commandline "SCODEF:3868 CREDAT:275457 /prefetch:2" (Show Process) source Monitored Target relevance 3/10 Spawns new processes that are not known child processes details Spawned process "iexplore.exe" with commandline "http://datingdoctor.com/" (Show Process) Spawned process "iexplore.exe" with commandline "SCODEF:3868 CREDAT:275457 /prefetch:2" (Show Process) source Monitored Target relevance 3/10 Installation/Persistance Creates new processes details "iexplore.exe" is creating a new process (Name: "%PROGRAMFILES%Internet Exploreriexplore.exe", Handle: 872) source API Call relevance 8/10 Dropped files details "urlblockindex_1_.bin" has type "data" "urlref_httpdatingdoctor.com" has type "HTML document UTF-8 Unicode text with very long lines with CRLF LF line terminators" "jquery-migrate.min_1_.js" has type "ASCII text with very long lines" "cart-fragments.min_1_.js" has type "ASCII text with very long lines with no line terminators" "font-awesome.min_1_.css" has type "ASCII text with very long lines" "6BADA8974A10C4BD62CC921D13E43B18_BEB37ABADF39714871232B4792417E04" has type "data" "wp-embed.min_1_.js" has type "ASCII text with very long lines with no line terminators" "6DRQ0S34.htm" has type "HTML document UTF-8 Unicode text with very long lines with CRLF LF line terminators" "RecoveryStore._AAC6FDDD-7CFA-11EA-A0A0-0A0027477BF1_.dat" has type "Composite Document File V2 Document Cannot read section info" "BE8B021F9E811DFC8C8A28572A17C05A_B752CF5E37B0D9106B860B99A3BDC72C" has type "data" "~DFFF5847A297D5D3A3.TMP" has type "data" "SG5MS0NQ.txt" has type "ASCII text" "PVBPQLI3.txt" has type "ASCII text" "hPukzIdj2RQ_1_.htm" has type "HTML document UTF-8 Unicode text with very long lines" "50ZRXtrlFjY_1_.htm" has type "HTML document ASCII text with very long lines" "wp-emoji-release.min_1_.js" has type "ASCII text with very long lines" "style.min_1_.css" has type "ASCII text with very long lines with no line terminators" "4IGM7X15.txt" has type "ASCII text" "ver2595.tmp" has type "XML 1.0 document UTF-8 Unicode (with BOM) text with CRLF line terminators" "mailoptin.min_1_.js" has type "UTF-8 Unicode text with very long lines" source Extracted File relevance 3/10 Network Related Found potential URL in binary/memory details Pattern match: "http://datingdoctor.com/" Pattern match: "http://datingdoctor.com" Heuristic match: "datingdoctor.com" Heuristic match: "netdna.bootstrapcdn.com" Heuristic match: "a.mailmunch.co" Heuristic match: "forms.mailmunch.co" Heuristic match: "ajax.googleapis.com" Heuristic match: "fonts.googleapis.com" Heuristic match: "fonts.gstatic.com" Pattern match: "www.youtube.com" source String relevance 10/10 Spyware/Information Retrieval Found a reference to a known community page details "www.youtube.com" (Indicator: "youtube") "GET /embed/6fIwrL56wEQ?feature=oembed HTTP/1.1 Accept: text/html, application/xhtml+xml, */* Referer: http://datingdoctor.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.youtube.com DNT: 1 Connection: Keep-Alive Cookie: CONSENT=WP.2676ba" (Indicator: "youtube") "GET /embed/50ZRXtrlFjY? HTTP/1.1 Accept: text/html, application/xhtml+xml, */* Referer: http://datingdoctor.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.youtube.com DNT: 1 Connection: Keep-Alive Cookie: CONSENT=WP.2676ba" (Indicator: "youtube") "GET /embed/hPukzIdj2RQ?feature=oembed HTTP/1.1 Accept: text/html, application/xhtml+xml, */* Referer: http://datingdoctor.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.youtube.com DNT: 1 Connection: Keep-Alive Cookie: CONSENT=WP.2676ba" (Indicator: "youtube") source String relevance 7/10 Unusual Characteristics Drops cabinet archive files details "57C8EDB95DF3F0AD4EE2DC2B8CFD4157" has type "Microsoft Cabinet archive data 6894 bytes 1 file" source Extracted File relevance 10/10 Installs hooks/patches the running process details "iexplore.exe" wrote bytes "b0337a6f" to virtual address "0x77911100" (part of module "MSCTF.DLL") "iexplore.exe" wrote bytes "a0357a6f" to virtual address "0x77B31144" (part of module "LPK.DLL") "iexplore.exe" wrote bytes "a0357a6f" to virtual address "0x76991064" (part of module "IMM32.DLL") "iexplore.exe" wrote bytes "c03a7a6f" to virtual address "0x76B81FB0" (part of module "SHELL32.DLL") "iexplore.exe" wrote bytes "a0357a6f" to virtual address "0x76B8202C" (part of module "SHELL32.DLL") "iexplore.exe" wrote bytes "b0337a6f" to virtual address "0x75C814E0" (part of module "USER32.DLL") "iexplore.exe" wrote bytes "a0357a6f" to virtual address "0x7624B0CC" (part of module "IERTUTIL.DLL") "iexplore.exe" wrote bytes "80320d0070320d0000320d0060320d0050320d0040320d0030320d00000000002cc9c876c0210d000000000090170d0050230d0000180d00601f0d0020360d000000000040360d0000000000" to virtual address "0x000D8000" "iexplore.exe" wrote bytes "b0337a6f" to virtual address "0x76AE1164" (part of module "USP10.DLL") "iexplore.exe" wrote bytes "60d27d6f" to virtual address "0x75C213B8" (part of module "SHLWAPI.DLL") "iexplore.exe" wrote bytes "b0337a6f" to virtual address "0x74E81038" (part of module "VERSION.DLL") "iexplore.exe" wrote bytes "c0bf7b6f" to virtual address "0x76B81F68" (part of module "SHELL32.DLL") "iexplore.exe" wrote bytes "b0337a6f" to virtual address "0x6CD1F6A0" (part of module "IEFRAME.DLL") "iexplore.exe" wrote bytes "b0337a6f" to virtual address "0x76991210" (part of module "IMM32.DLL") "iexplore.exe" wrote bytes "30307a6f" to virtual address "0x75C21380" (part of module "SHLWAPI.DLL") "iexplore.exe" wrote bytes "a0357a6f" to virtual address "0x7450139C" (part of module "UXTHEME.DLL") "iexplore.exe" wrote bytes "60cd7d6f" to virtual address "0x75C2130C" (part of module "SHLWAPI.DLL") "iexplore.exe" wrote bytes "a0357a6f" to virtual address "0x77911298" (part of module "MSCTF.DLL") "iexplore.exe" wrote bytes "60cd7d6f" to virtual address "0x6CD1FEC0" (part of module "IEFRAME.DLL") "iexplore.exe" wrote bytes "60d27d6f" to virtual address "0x76B81D7C" (part of module "SHELL32.DLL") source Hook Detection relevance 10/10 ATT&CK ID T1179 (Show technique in the MITRE ATT&CK(TM) matrix) Session Details No relevant data available. Screenshots Hybrid Analysis Tip: Click an analysed process below to view more details. Analysed 3 processes in total. rundll32.exe "%WINDIR%System32ieframe.dll",OpenURL C:63c1ab2d72934de3ce4d3c8a74e9253878e4a84c4de4d8bf298d35c50ed28883.url (PID: 172) iexplore.exe http://datingdoctor.com/ (PID: 3868) iexplore.exe SCODEF:3868 CREDAT:275457 /prefetch:2 (PID: 1460) Logged Script Calls Logged Stdout Extracted Streams Memory Dumps Reduced Monitoring Network Activity Network Error Multiscan Match Network Analysis This report was generated with enabled TOR analysis DNS Requests Domain Address Registrar Country a.mailmunch.co 143.204.25.70 TTL: 1638 ENOM, LLC Flag of United States United States ajax.googleapis.com 172.217.14.170 TTL: 299 MarkMonitor, Inc. Flag of United States United States datingdoctor.com 50.116.114.76 TTL: 14399 GoDaddy.com, LLC Organization: Domains By Proxy, LLC Name Server: NS8507.HOSTGATOR.COM Creation Date: Tue, 06 May 1997 04:00:00 GMT Flag of United States United States fonts.googleapis.com 172.217.12.74 TTL: 299 MarkMonitor, Inc. Flag of United States United States fonts.gstatic.com 172.217.6.163 TTL: 299 MarkMonitor, Inc. Flag of United States United States forms.mailmunch.co 35.169.40.78 TTL: 1082 ENOM, LLC Flag of United States United States netdna.bootstrapcdn.com 209.197.3.15 TTL: 108 MarkMonitor, Inc. Organization: DNStination Inc. Name Server: DNS1.P07.NSONE.NET Creation Date: Fri, 25 May 2012 00:00:00 GMT Flag of United States United States ocsp.pki.goog 172.217.5.3 TTL: 277 - Flag of United States United States www.youtube.com 172.217.9.174 TTL: 21599 MarkMonitor, Inc. Organization: Google Inc. Name Server: NS1.GOOGLE.COM Creation Date: Tue, 15 Feb 2005 00:00:00 GMT Flag of United States United States Contacted Hosts IP Address Port/Protocol Associated Process Details 50.116.114.76 80 TCP iexplore.exe PID: 1460 Flag of United States United States 209.197.3.15 80 TCP iexplore.exe PID: 1460 Flag of United States United States 172.217.6.106 443 TCP iexplore.exe PID: 1460 Flag of United States United States 143.204.25.70 80 TCP iexplore.exe PID: 1460 Flag of United States United States 172.217.4.42 443 TCP iexplore.exe PID: 1460 Flag of United States United States 8.249.161.254 80 TCP iexplore.exe PID: 1460 Flag of United States United States 172.217.5.3 80 TCP iexplore.exe PID: 1460 Flag of United States United States 172.217.6.99 443 TCP iexplore.exe PID: 1460 Flag of United States United States 172.217.4.110 443 TCP iexplore.exe PID: 1460 Flag of United States United States 35.169.40.78 80 TCP iexplore.exe PID: 1460 Flag of United States United States Contacted Countries HTTP Traffic Endpoint Request URL Data 50.116.114.76:80 (datingdoctor.com) GET / GET / HTTP/1.1 Accept: text/html, application/xhtml+xml, */* Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: datingdoctor.com DNT: 1 Connection: Keep-Alive 50.116.114.76:80 (datingdoctor.com) GET /wp-content/themes/sydney/woocommerce/css/wc.css?ver=5.3.2 GET /wp-content/themes/sydney/woocommerce/css/wc.css?ver=5.3.2 HTTP/1.1 Accept: text/css, */* Referer: http://datingdoctor.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: datingdoctor.com DNT: 1 Connection: Keep-Alive Cookie: PHPSESSID=899556a4327fe08626eb56774a98b95a 50.116.114.76:80 (datingdoctor.com) GET /wp-content/themes/sydney/css/bootstrap/bootstrap.min.css?ver=1 GET /wp-content/themes/sydney/css/bootstrap/bootstrap.min.css?ver=1 HTTP/1.1 Accept: text/css, */* Referer: http://datingdoctor.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: datingdoctor.com DNT: 1 Connection: Keep-Alive Cookie: PHPSESSID=899556a4327fe08626eb56774a98b95a 50.116.114.76:80 (datingdoctor.com) GET /wp-content/themes/sydney/css/bootstrap/bootstrap.min.css?ver=1 GET /wp-content/themes/sydney/css/bootstrap/bootstrap.min.css?ver=1 HTTP/1.1 Accept: text/css, */* Referer: http://datingdoctor.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: datingdoctor.com DNT: 1 Connection: Keep-Alive Cookie: PHPSESSID=899556a4327fe08626eb56774a98b95a 50.116.114.76:80 (datingdoctor.com) GET /wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/style.css?ver=2.5.14 GET /wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/style.css?ver=2.5.14 HTTP/1.1 Accept: text/css, */* Referer: http://datingdoctor.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: datingdoctor.com DNT: 1 Connection: Keep-Alive Cookie: PHPSESSID=899556a4327fe08626eb56774a98b95a 50.116.114.76:80 (datingdoctor.com) GET /wp-includes/css/dist/block-library/style.min.css?ver=5.3.2 GET /wp-includes/css/dist/block-library/style.min.css?ver=5.3.2 HTTP/1.1 Accept: text/css, */* Referer: http://datingdoctor.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: datingdoctor.com DNT: 1 Connection: Keep-Alive Cookie: PHPSESSID=899556a4327fe08626eb56774a98b95a 50.116.114.76:80 (datingdoctor.com) GET /wp-content/plugins/acurax-social-media-widget/css/style.css?v=3.2.10&ver=5.3.2 GET /wp-content/plugins/acurax-social-media-widget/css/style.css?v=3.2.10&ver=5.3.2 HTTP/1.1 Accept: text/css, */* Referer: http://datingdoctor.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: datingdoctor.com DNT: 1 Connection: Keep-Alive Cookie: PHPSESSID=899556a4327fe08626eb56774a98b95a 50.116.114.76:80 (datingdoctor.com) GET /wp-content/plugins/ditty-news-ticker/inc/static/libs/fontastic/styles.css?ver=2.2.15 GET /wp-content/plugins/ditty-news-ticker/inc/static/libs/fontastic/styles.css?ver=2.2.15 HTTP/1.1 Accept: text/css, */* Referer: http://datingdoctor.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: datingdoctor.com DNT: 1 Connection: Keep-Alive Cookie: PHPSESSID=899556a4327fe08626eb56774a98b95a 209.197.3.15:80 (netdna.bootstrapcdn.com) GET /font-awesome/latest/css/font-awesome.min.css?ver=5.3.2 GET /font-awesome/latest/css/font-awesome.min.css?ver=5.3.2 HTTP/1.1 Accept: text/css, */* Referer: http://datingdoctor.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: netdna.bootstrapcdn.com DNT: 1 Connection: Keep-Alive 50.116.114.76:80 (datingdoctor.com) GET /wp-content/plugins/ditty-news-ticker/inc/static/css/style.css?ver=1584982106 GET /wp-content/plugins/ditty-news-ticker/inc/static/css/style.css?ver=1584982106 HTTP/1.1 Accept: text/css, */* Referer: http://datingdoctor.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: datingdoctor.com DNT: 1 Connection: Keep-Alive Cookie: PHPSESSID=899556a4327fe08626eb56774a98b95a 50.116.114.76:80 (datingdoctor.com) GET /wp-content/plugins/woocommerce/assets/css/woocommerce-layout.css?ver=3.9.3 GET /wp-content/plugins/woocommerce/assets/css/woocommerce-layout.css?ver=3.9.3 HTTP/1.1 Accept: text/css, */* Referer: http://datingdoctor.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: datingdoctor.com DNT: 1 Connection: Keep-Alive Cookie: PHPSESSID=899556a4327fe08626eb56774a98b95a 50.116.114.76:80 (datingdoctor.com) GET /wp-content/plugins/woocommerce/assets/css/woocommerce-smallscreen.css?ver=3.9.3 GET /wp-content/plugins/woocommerce/assets/css/woocommerce-smallscreen.css?ver=3.9.3 HTTP/1.1 Accept: text/css, */* Referer: http://datingdoctor.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: datingdoctor.com DNT: 1 Connection: Keep-Alive Cookie: PHPSESSID=899556a4327fe08626eb56774a98b95a 50.116.114.76:80 (datingdoctor.com) GET /wp-content/uploads/useanyfont/uaf.css?ver=1580764507 GET /wp-content/uploads/useanyfont/uaf.css?ver=1580764507 HTTP/1.1 Accept: text/css, */* Referer: http://datingdoctor.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: datingdoctor.com DNT: 1 Connection: Keep-Alive Cookie: PHPSESSID=899556a4327fe08626eb56774a98b95a 50.116.114.76:80 (datingdoctor.com) GET /wp-content/plugins/testimonial-rotator/testimonial-rotator-style.css?ver=5.3.2 GET /wp-content/plugins/testimonial-rotator/testimonial-rotator-style.css?ver=5.3.2 HTTP/1.1 Accept: text/css, */* Referer: http://datingdoctor.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: datingdoctor.com DNT: 1 Connection: Keep-Alive Cookie: PHPSESSID=899556a4327fe08626eb56774a98b95a 50.116.114.76:80 (datingdoctor.com) GET /wp-content/themes/sydney/style.css?ver=20200129 GET /wp-content/themes/sydney/style.css?ver=20200129 HTTP/1.1 Accept: text/css, */* Referer: http://datingdoctor.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: datingdoctor.com DNT: 1 Connection: Keep-Alive Cookie: PHPSESSID=899556a4327fe08626eb56774a98b95a 50.116.114.76:80 (datingdoctor.com) GET /wp-content/themes/sydney/fonts/font-awesome.min.css?ver=5.3.2 GET /wp-content/themes/sydney/fonts/font-awesome.min.css?ver=5.3.2 HTTP/1.1 Accept: text/css, */* Referer: http://datingdoctor.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: datingdoctor.com DNT: 1 Connection: Keep-Alive Cookie: PHPSESSID=899556a4327fe08626eb56774a98b95a 50.116.114.76:80 (datingdoctor.com) GET /wp-includes/js/jquery/jquery.js?ver=1.12.4-wp GET /wp-includes/js/jquery/jquery.js?ver=1.12.4-wp HTTP/1.1 Accept: application/javascript, */*;q=0.8 Referer: http://datingdoctor.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: datingdoctor.com DNT: 1 Connection: Keep-Alive Cookie: PHPSESSID=899556a4327fe08626eb56774a98b95a 50.116.114.76:80 (datingdoctor.com) GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1 GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1 HTTP/1.1 Accept: application/javascript, */*;q=0.8 Referer: http://datingdoctor.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: datingdoctor.com DNT: 1 Connection: Keep-Alive Cookie: PHPSESSID=899556a4327fe08626eb56774a98b95a 143.204.25.70:80 (a.mailmunch.co) GET /app/v1/site.js GET /app/v1/site.js HTTP/1.1 Accept: application/javascript, */*;q=0.8 Referer: http://datingdoctor.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: a.mailmunch.co DNT: 1 Connection: Keep-Alive 50.116.114.76:80 (datingdoctor.com) GET /wp-content/plugins/contact-bank/assets/global/plugins/custom/js/custom.js?ver=5.3.2 GET /wp-content/plugins/contact-bank/assets/global/plugins/custom/js/custom.js?ver=5.3.2 HTTP/1.1 Accept: application/javascript, */*;q=0.8 Referer: http://datingdoctor.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: datingdoctor.com DNT: 1 Connection: Keep-Alive Cookie: PHPSESSID=899556a4327fe08626eb56774a98b95a 50.116.114.76:80 (datingdoctor.com) GET /wp-content/plugins/testimonial-rotator/js/jquery.cycletwo.js?ver=5.3.2 GET /wp-content/plugins/testimonial-rotator/js/jquery.cycletwo.js?ver=5.3.2 HTTP/1.1 Accept: application/javascript, */*;q=0.8 Referer: http://datingdoctor.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: datingdoctor.com DNT: 1 Connection: Keep-Alive Cookie: PHPSESSID=899556a4327fe08626eb56774a98b95a 50.116.114.76:80 (datingdoctor.com) GET /wp-content/plugins/testimonial-rotator/js/jquery.cycletwo.addons.js?ver=5.3.2 GET /wp-content/plugins/testimonial-rotator/js/jquery.cycletwo.addons.js?ver=5.3.2 HTTP/1.1 Accept: application/javascript, */*;q=0.8 Referer: http://datingdoctor.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: datingdoctor.com DNT: 1 Connection: Keep-Alive Cookie: PHPSESSID=899556a4327fe08626eb56774a98b95a 50.116.114.76:80 (datingdoctor.com) GET /wp-content/plugins/ditty-news-ticker/inc/static/js/jquery.touchSwipe.min.js?ver=2.2.15 GET /wp-content/plugins/ditty-news-ticker/inc/static/js/jquery.touchSwipe.min.js?ver=2.2.15 HTTP/1.1 Accept: application/javascript, */*;q=0.8 Referer: http://datingdoctor.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: datingdoctor.com DNT: 1 Connection: Keep-Alive Cookie: PHPSESSID=899556a4327fe08626eb56774a98b95a 50.116.114.76:80 (datingdoctor.com) GET /wp-content/plugins/ditty-news-ticker/inc/static/js/imagesloaded.pkgd.min.js?ver=4.1.4 GET /wp-content/plugins/ditty-news-ticker/inc/static/js/imagesloaded.pkgd.min.js?ver=4.1.4 HTTP/1.1 Accept: application/javascript, */*;q=0.8 Referer: http://datingdoctor.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: datingdoctor.com DNT: 1 Connection: Keep-Alive Cookie: PHPSESSID=899556a4327fe08626eb56774a98b95a 50.116.114.76:80 (datingdoctor.com) GET /wp-content/plugins/ditty-news-ticker/inc/static/js/jquery.easing.js?ver=1.4.1 GET /wp-content/plugins/ditty-news-ticker/inc/static/js/jquery.easing.js?ver=1.4.1 HTTP/1.1 Accept: application/javascript, */*;q=0.8 Referer: http://datingdoctor.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: datingdoctor.com DNT: 1 Connection: Keep-Alive Cookie: PHPSESSID=899556a4327fe08626eb56774a98b95a 50.116.114.76:80 (datingdoctor.com) GET /wp-content/plugins/ditty-news-ticker/inc/static/js/ditty-news-ticker.min.js?ver=1584982106 GET /wp-content/plugins/ditty-news-ticker/inc/static/js/ditty-news-ticker.min.js?ver=1584982106 HTTP/1.1 Accept: application/javascript, */*;q=0.8 Referer: http://datingdoctor.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: datingdoctor.com DNT: 1 Connection: Keep-Alive Cookie: PHPSESSID=899556a4327fe08626eb56774a98b95a 50.116.114.76:80 (datingdoctor.com) GET /wp-content/plugins/mailoptin/src/core/src/assets/js/mailoptin.min.js?ver=1.2.27.0 GET /wp-content/plugins/mailoptin/src/core/src/assets/js/mailoptin.min.js?ver=1.2.27.0 HTTP/1.1 Accept: application/javascript, */*;q=0.8 Referer: http://datingdoctor.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: datingdoctor.com DNT: 1 Connection: Keep-Alive Cookie: PHPSESSID=899556a4327fe08626eb56774a98b95a 50.116.114.76:80 (datingdoctor.com) GET /wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.70 GET /wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.70 HTTP/1.1 Accept: application/javascript, */*;q=0.8 Referer: http://datingdoctor.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: datingdoctor.com DNT: 1 Connection: Keep-Alive Cookie: PHPSESSID=899556a4327fe08626eb56774a98b95a 50.116.114.76:80 (datingdoctor.com) GET /wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=3.9.3 GET /wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=3.9.3 HTTP/1.1 Accept: application/javascript, */*;q=0.8 Referer: http://datingdoctor.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: datingdoctor.com DNT: 1 Connection: Keep-Alive Cookie: PHPSESSID=899556a4327fe08626eb56774a98b95a 50.116.114.76:80 (datingdoctor.com) GET /wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4 GET /wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4 HTTP/1.1 Accept: application/javascript, */*;q=0.8 Referer: http://datingdoctor.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: datingdoctor.com DNT: 1 Connection: Keep-Alive Cookie: PHPSESSID=899556a4327fe08626eb56774a98b95a 50.116.114.76:80 (datingdoctor.com) GET /wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=3.9.3 GET /wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=3.9.3 HTTP/1.1 Accept: application/javascript, */*;q=0.8 Referer: http://datingdoctor.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: datingdoctor.com DNT: 1 Connection: Keep-Alive Cookie: PHPSESSID=899556a4327fe08626eb56774a98b95a 50.116.114.76:80 (datingdoctor.com) GET /wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=3.9.3 GET /wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=3.9.3 HTTP/1.1 Accept: application/javascript, */*;q=0.8 Referer: http://datingdoctor.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: datingdoctor.com DNT: 1 Connection: Keep-Alive Cookie: PHPSESSID=899556a4327fe08626eb56774a98b95a 50.116.114.76:80 (datingdoctor.com) GET /wp-content/themes/sydney/js/scripts.js?ver=5.3.2 GET /wp-content/themes/sydney/js/scripts.js?ver=5.3.2 HTTP/1.1 Accept: application/javascript, */*;q=0.8 Referer: http://datingdoctor.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: datingdoctor.com DNT: 1 Connection: Keep-Alive Cookie: PHPSESSID=899556a4327fe08626eb56774a98b95a 50.116.114.76:80 (datingdoctor.com) GET /wp-content/themes/sydney/js/main.min.js?ver=20180716 GET /wp-content/themes/sydney/js/main.min.js?ver=20180716 HTTP/1.1 Accept: application/javascript, */*;q=0.8 Referer: http://datingdoctor.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: datingdoctor.com DNT: 1 Connection: Keep-Alive Cookie: PHPSESSID=899556a4327fe08626eb56774a98b95a 50.116.114.76:80 (datingdoctor.com) GET /wp-content/themes/sydney/js/so-legacy.js?ver=5.3.2 GET /wp-content/themes/sydney/js/so-legacy.js?ver=5.3.2 HTTP/1.1 Accept: application/javascript, */*;q=0.8 Referer: http://datingdoctor.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: datingdoctor.com DNT: 1 Connection: Keep-Alive Cookie: PHPSESSID=899556a4327fe08626eb56774a98b95a 50.116.114.76:80 (datingdoctor.com) GET /wp-content/themes/sydney/js/so-legacy-main.js?ver=5.3.2 GET /wp-content/themes/sydney/js/so-legacy-main.js?ver=5.3.2 HTTP/1.1 Accept: application/javascript, */*;q=0.8 Referer: http://datingdoctor.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: datingdoctor.com DNT: 1 Connection: Keep-Alive Cookie: PHPSESSID=899556a4327fe08626eb56774a98b95a 50.116.114.76:80 (datingdoctor.com) GET /wp-includes/js/wp-embed.min.js?ver=5.3.2 GET /wp-includes/js/wp-embed.min.js?ver=5.3.2 HTTP/1.1 Accept: application/javascript, */*;q=0.8 Referer: http://datingdoctor.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: datingdoctor.com DNT: 1 Connection: Keep-Alive Cookie: PHPSESSID=899556a4327fe08626eb56774a98b95a 50.116.114.76:80 (datingdoctor.com) GET /wp-content/uploads/2016/02/Coleman-Wedding-Photo-2.jpg GET /wp-content/uploads/2016/02/Coleman-Wedding-Photo-2.jpg HTTP/1.1 Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5 Referer: http://datingdoctor.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: datingdoctor.com DNT: 1 Connection: Keep-Alive Cookie: PHPSESSID=899556a4327fe08626eb56774a98b95a 50.116.114.76:80 (datingdoctor.com) GET /wp-content/uploads/2015/11/Coleman-Wedding-Photo-1-2.jpg GET /wp-content/uploads/2015/11/Coleman-Wedding-Photo-1-2.jpg HTTP/1.1 Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5 Referer: http://datingdoctor.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: datingdoctor.com DNT: 1 Connection: Keep-Alive Cookie: PHPSESSID=899556a4327fe08626eb56774a98b95a 50.116.114.76:80 (datingdoctor.com) GET /wp-content/uploads/2020/03/PROMO-STAGE-PIC-NAT-EDIT-2.png GET /wp-content/uploads/2020/03/PROMO-STAGE-PIC-NAT-EDIT-2.png HTTP/1.1 Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5 Referer: http://datingdoctor.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: datingdoctor.com DNT: 1 Connection: Keep-Alive Cookie: PHPSESSID=899556a4327fe08626eb56774a98b95a 50.116.114.76:80 (datingdoctor.com) GET /wp-content/uploads/2015/11/media-header.jpg GET /wp-content/uploads/2015/11/media-header.jpg HTTP/1.1 Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5 Referer: http://datingdoctor.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: datingdoctor.com DNT: 1 Connection: Keep-Alive Cookie: PHPSESSID=899556a4327fe08626eb56774a98b95a 50.116.114.76:80 (datingdoctor.com) GET /wp-content/themes/sydney/images/header.jpg GET /wp-content/themes/sydney/images/header.jpg HTTP/1.1 Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5 Referer: http://datingdoctor.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: datingdoctor.com DNT: 1 Connection: Keep-Alive Cookie: PHPSESSID=899556a4327fe08626eb56774a98b95a 50.116.114.76:80 (datingdoctor.com) GET /wp-content/uploads/2018/02/datedoc.jpg GET /wp-content/uploads/2018/02/datedoc.jpg HTTP/1.1 Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5 Referer: http://datingdoctor.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: datingdoctor.com DNT: 1 Connection: Keep-Alive Cookie: PHPSESSID=899556a4327fe08626eb56774a98b95a 50.116.114.76:80 (datingdoctor.com) GET /wp-content/uploads/2016/03/TEDx.jpeg GET /wp-content/uploads/2016/03/TEDx.jpeg HTTP/1.1 Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5 Referer: http://datingdoctor.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: datingdoctor.com DNT: 1 Connection: Keep-Alive Cookie: PHPSESSID=899556a4327fe08626eb56774a98b95a 50.116.114.76:80 (datingdoctor.com) GET /wp-includes/js/wp-emoji-release.min.js?ver=5.3.2 GET /wp-includes/js/wp-emoji-release.min.js?ver=5.3.2 HTTP/1.1 Accept: application/javascript, */*;q=0.8 Referer: http://datingdoctor.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: datingdoctor.com DNT: 1 Connection: Keep-Alive Cookie: PHPSESSID=899556a4327fe08626eb56774a98b95a 172.217.5.3:80 (ocsp.pki.goog) GET /gsr2/ME4wTDBKMEgwRjAJBgUrDgMCGgUABBTgXIsxbvr2lBkPpoIEVRE6gHlCnAQUm%2BIHV2ccHsBqBt5ZtJot39wZhi4CDQHjtJqhjYqpgSVpULg%3D GET /gsr2/ME4wTDBKMEgwRjAJBgUrDgMCGgUABBTgXIsxbvr2lBkPpoIEVRE6gHlCnAQUm%2BIHV2ccHsBqBt5ZtJot39wZhi4CDQHjtJqhjYqpgSVpULg%3D HTTP/1.1 Connection: Keep-Alive Accept: */* User-Agent: Microsoft-CryptoAPI/6.1 Host: ocsp.pki.goog 172.217.5.3:80 (ocsp.pki.goog) GET /gts1o1/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRCRjDCJxnb3nDwj%2Fxz5aZfZjgXvAQUmNH4bhDrz5vsYJ8YkBug630J%2FSsCEByn1x02lFOOCAAAAAA17VA%3D GET /gts1o1/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRCRjDCJxnb3nDwj%2Fxz5aZfZjgXvAQUmNH4bhDrz5vsYJ8YkBug630J%2FSsCEByn1x02lFOOCAAAAAA17VA%3D HTTP/1.1 Connection: Keep-Alive Accept: */* User-Agent: Microsoft-CryptoAPI/6.1 Host: ocsp.pki.goog 143.204.25.70:80 (a.mailmunch.co) GET /app/v1/styles.css GET /app/v1/styles.css HTTP/1.1 Accept: text/css, */* Referer: http://datingdoctor.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: a.mailmunch.co DNT: 1 Connection: Keep-Alive 172.217.5.3:80 (ocsp.pki.goog) GET /gts1o1/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRCRjDCJxnb3nDwj%2Fxz5aZfZjgXvAQUmNH4bhDrz5vsYJ8YkBug630J%2FSsCEQCRUm2CdHJBtwgAAAAANe1T GET /gts1o1/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRCRjDCJxnb3nDwj%2Fxz5aZfZjgXvAQUmNH4bhDrz5vsYJ8YkBug630J%2FSsCEQCRUm2CdHJBtwgAAAAANe1T HTTP/1.1 Connection: Keep-Alive Accept: */* User-Agent: Microsoft-CryptoAPI/6.1 Host: ocsp.pki.goog 35.169.40.78:80 (forms.mailmunch.co) GET /sites/179735 GET /sites/179735 HTTP/1.1 Accept: */* Referer: http://datingdoctor.com/ Accept-Language: en-US Origin: http://datingdoctor.com Accept-Encoding: gzip, deflate User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Host: forms.mailmunch.co DNT: 1 Connection: Keep-Alive Cache-Control: no-cache 35.169.40.78:80 (forms.mailmunch.co) GET /sites/179735 GET /sites/179735 HTTP/1.1 Accept: */* Referer: http://datingdoctor.com/ Accept-Language: en-US Origin: http://datingdoctor.com Accept-Encoding: gzip, deflate User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Host: forms.mailmunch.co DNT: 1 Connection: Keep-Alive Cache-Control: no-cache 172.217.5.3:80 (ocsp.pki.goog) GET /gts1o1/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRCRjDCJxnb3nDwj%2Fxz5aZfZjgXvAQUmNH4bhDrz5vsYJ8YkBug630J%2FSsCEH5AOqyo%2BE9TAgAAAABfl14%3D GET /gts1o1/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRCRjDCJxnb3nDwj%2Fxz5aZfZjgXvAQUmNH4bhDrz5vsYJ8YkBug630J%2FSsCEH5AOqyo%2BE9TAgAAAABfl14%3D HTTP/1.1 Connection: Keep-Alive Accept: */* User-Agent: Microsoft-CryptoAPI/6.1 Host: ocsp.pki.goog 172.217.5.3:80 (ocsp.pki.goog) GET /gts1o1/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRCRjDCJxnb3nDwj%2Fxz5aZfZjgXvAQUmNH4bhDrz5vsYJ8YkBug630J%2FSsCEH5AOqyo%2BE9TAgAAAABfl14%3D GET /gts1o1/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRCRjDCJxnb3nDwj%2Fxz5aZfZjgXvAQUmNH4bhDrz5vsYJ8YkBug630J%2FSsCEH5AOqyo%2BE9TAgAAAABfl14%3D HTTP/1.1 Connection: Keep-Alive Accept: */* User-Agent: Microsoft-CryptoAPI/6.1 Host: ocsp.pki.goog 172.217.5.3:80 (ocsp.pki.goog) GET /gts1o1/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRCRjDCJxnb3nDwj%2Fxz5aZfZjgXvAQUmNH4bhDrz5vsYJ8YkBug630J%2FSsCEH5AOqyo%2BE9TAgAAAABfl14%3D GET /gts1o1/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRCRjDCJxnb3nDwj%2Fxz5aZfZjgXvAQUmNH4bhDrz5vsYJ8YkBug630J%2FSsCEH5AOqyo%2BE9TAgAAAABfl14%3D HTTP/1.1 Connection: Keep-Alive Accept: */* User-Agent: Microsoft-CryptoAPI/6.1 Host: ocsp.pki.goog 50.116.114.76:80 (datingdoctor.com) POST /?wc-ajax=get_refreshed_fragments POST /?wc-ajax=get_refreshed_fragments HTTP/1.1 Accept: */* Content-Type: application/x-www-form-urlencoded; charset=UTF-8 X-Requested-With: XMLHttpRequest Referer: http://datingdoctor.com/ Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Host: datingdoctor.com Content-Length: 18 DNT: 1 Connection: Keep-Alive Cache-Control: no-cache Cookie: PHPSESSID=899556a4327fe08626eb56774a98b95a; mailmunch_second_pageview=true; mo_page_views_... 143.204.25.70:80 (a.mailmunch.co) GET /forms-cache/179735/settings-1586729793.json GET /forms-cache/179735/settings-1586729793.json HTTP/1.1 Accept: */* Referer: http://datingdoctor.com/ Accept-Language: en-US Origin: http://datingdoctor.com Accept-Encoding: gzip, deflate User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Host: a.mailmunch.co DNT: 1 Connection: Keep-Alive Cache-Control: no-cache Trojan Javascript Code Samples from POFHeadlines: #1 !function(a,b,c){function d(a,b){var c=String.fromCharCode;l.clearRect(0,0,k.width,k.height),l.fillText(c.apply(this,a),0,0);var d=k.toDataURL();l.clearRect(0,0,k.width,k.height),l.fillText(c.apply(this,b),0,0);var e=k.toDataURL();return d===e}function e(a){var b;if(!l||!l.fillText)return!1;switch(l.textBaseline="top",l.font="600 32px Arial",a){case"flag":return!(b=d([55356,56826,55356,56819],[55356,56826,8203,55356,56819]))&&(b=d([55356,57332,56128,56423,56128,56418,56128,56421,56128,56430,56128,56423,56128,56447],[55356,57332,8203,56128,56423,8203,56128,56418,8203,56128,56421,8203,56128,56430,8203,56128,56423,8203,56128,56447]),!b);case"emoji":return b=d([55358,56760,9792,65039],[55358,56760,8203,9792,65039]),!b}return!1}function f(a){var c=b.createElement("script");c.src=a,c.defer=c.type="text/javascript",b.getElementsByTagName("head")[0].appendChild(c)}var g,h,i,j,k=b.createElement("canvas"),l=k.getContext&&k.getContext("2d");for(j=Array("flag","emoji"),c.supports={everything:!0,everythingExceptFlag:!0},i=0;i<j.length;i++)c.supports[j[i]]=e(j[i]),c.supports.everything=c.supports.everything&&c.supports[j[i]],"flag"!==j[i]&&(c.supports.everythingExceptFlag=c.supports.everythingExceptFlag&&c.supports[j[i]]);c.supports.everythingExceptFlag=c.supports.everythingExceptFlag&&!c.supports.flag,c.DOMReady=!1,c.readyCallback=function(){c.DOMReady=!0},c.supports.everything||(h=function(){c.readyCallback()},b.addEventListener?(b.addEventListener("DOMContentLoaded",h,!1),a.addEventListener("load",h,!1)):(a.attachEvent("onload",h),b.attachEvent("onreadystatechange",function(){"complete"===b.readyState&&c.readyCallback()})),g=c.source||{},g.concatemoji?f(g.concatemoji):g.wpemoji&&g.twemoji&&(f(g.twemoji),f(g.wpemoji)))}(window,document,window._wpemojiSettings); </script> #2 /*! jQuery v1.12.4 | (c) jQuery Foundation | jquery.org/license | WordPress 2019-05-16 */ !function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="1.12.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[suFEFFxA0]+|[suFEFFxA0]+$/g,p=/^-ms-/,q=/-([da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?a<0?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.call(b,c,b)}))},slice:function(){return this.pushStack(e.apply(this,arguments))},first:function(){return this.eq(0)},last:function(){return this.eq(-1)},eq:function(a){var b=this.length,c=+a+(a<0?b:0);return this.pushStack(c>=0&&c<b?[this[c]]:[])},end:function(){return this.prevObject||this.constructor()},push:g,sort:c.sort,splice:c.splice},n.extend=n.fn.extend=function(){var a,b,c,d,e,f,g=arguments[0]||{},h=1,i=arguments.length,j=!1;for("boolean"==typeof g&&(j=g,g=arguments[h]||{},h++),"object"==typeof g||n.isFunction(g)||(g={}),h===i&&(g=this,h--);h<i;h++)if(null!=(e=arguments[h]))for(d in e)a=g[d],c=e[d],"__proto__"!==d&&g!==c&&(j&&c&&(n.isPlainObject(c)||(b=n.isArray(c)))?(b?(b=!1,f=a&&n.isArray(a)?a:[]):f=a&&n.isPlainObject(a)?a:{},g[d]=n.extend(j,f,c)):void 0!==c&&(g[d]=c));return g},n.extend({expando:"jQuery"+(m+Math.random()).replace(/D/g,""),isReady:!0,error:function(a){throw new Error(a)},noop:function(){},isFunction:function(a){return"function"===n.type(a)},isArray:Array.isArray||function(a){return"array"===n.type(a)},isWindow:function(a){return null!=a&&a==a.window},isNumeric:function(a){var b=a&&a.toString();return!n.isArray(a)&&b-parseFloat(b)+1>=0},isEmptyObject:function(a){var b;for(b in a)return!1;return!0},isPlainObject:function(a){var b;if(!a||"object"!==n.type(a)||a.nodeType||n.isWindow(a))return!1;try{if(a.constructor&&!k.call(a,"constructor")&&!k.call(a.constructor.prototype,"isPrototypeOf"))return!1}catch(c){return!1}if(!l.ownFirst)for(b in a)return k.call(a,b);for(b in a);return void 0===b||k.call(a,b)},type:function(a){return null==a?a+"":"object"==typeof a||"function"==typeof a?i[j.call(a)]||"object":typeof a},globalEval:function(b){b&&n.trim(b)&&(a.execScript||function(b){a.eval.call(a,b)})(b)},camelCase:function(a){return a.replace(p,"ms-").replace(q,r)},nodeName:function(a,b){return a.nodeName&&a.nodeName.toLowerCase()===b.toLowerCase()},each:function(a,b){var c,d=0;if(s(a)){for(c=a.length;d<c;d++)if(!1===b.call(a[d],d,a[d]))break}else for(d in a)if(!1===b.call(a[d],d,a[d]))break;return a},trim:function(a){return null==a?"":(a+"").replace(o,"")},makeArray:function(a,b){var c=b||[];return null!=a&&(s(Object(a))?n.merge(c,"string"==typeof a?[a]:a):g.call(c,a)),c},inArray:function(a,b,c){var d;if(b){if(h)return h.call(b,a,c);for(d=b.length,c=c?c<0?Math.max(0,d+c):c:0;c<d;c++)if(c in b&&b[c]===a)return c}return-1},merge:function(a,b){var c=+b.length,d=0,e=a.length;while(d<c)a[e++]=b[d++];if(c!==c)while(void 0!==b[d])a[e++]=b[d++];return a.length=e,a},grep:function(a,b,c){for(var d,e=[],f=0,g=a.length,h=!c;f<g;f++)(d=!b(a[f],f))!==h&&e.push(a[f]);return e},map:function(a,b,c){var d,e,g=0,h=[];if(s(a))for(d=a.length;g<d;g++)null!=(e=b(a[g],g,c))&&h.push(e);else for(g in a)null!=(e=b(a[g],g,c))&&h.push(e);return f.apply([],h)},guid:1,proxy:function(a,b){var c,d,f;if("string"==typeof b&&(f=a[b],b=a,a=f),n.isFunction(a))return c=e.call(arguments,2),d=function(){return a.apply(b||this,c.concat(e.call(arguments)))},d.guid=a.guid=a.guid||n.guid++,d},now:function(){return+new Date},support:l}),"function"==typeof Symbol&&(n.fn[Symbol.iterator]=c[Symbol.iterator]),n.each("Boolean Number String Function Array Date RegExp Object Error Symbol".split(" "),function(a,b){i["[object "+b+"]"]=b.toLowerCase()});function s(a){var b=!!a&&"length"in a&&a.length,c=n.type(a);return"function"!==c&&!n.isWindow(a)&&("array"===c||0===b||"number"==typeof b&&b>0&&b-1 in a)}var t=function(a){var b,c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u="sizzle"+1*new Date,v=a.document,w=0,x=0,y=fa(),z=fa(),A=fa(),B=function(a,b){return a===b&&(l=!0),0},C=1<<31,D={}.hasOwnProperty,E=[],F=E.pop,G=E.push,H=E.push,I=E.slice,J=function(a,b){for(var c=0,d=a.length;c<d;c++)if(a[c]===b)return c;return-1},K="checked|selected|async|autofocus|autoplay|controls|defer|disabled|hidden|ismap|loop|multiple|open|readonly|required|scoped",L="[\x20\t\r\n\f]",M="(?:\\.|[\w-]|[^\x00-\xa0])+",N="\["+L+"*("+M+")(?:"+L+"*([*^$|!~]?=)"+L+"*(?:'((?:\\.|[^\\'])*)'|"((?:\\.|[^\\"])*)"|("+M+"))|)"+L+"*\]",O=":("+M+")(?:\((('((?:\\.|[^\\'])*)'|"((?:\\.|[^\\"])*)")|((?:\\.|[^\\()[\]]|"+N+")*)|.*)\)|)",P=new RegExp(L+"+","g"),Q=new RegExp("^"+L+"+|((?:^|[^\\])(?:\\.)*)"+L+"+$","g"),R=new RegExp("^"+L+"*,"+L+"*"),S=new RegExp("^"+L+"*([>+~]|"+L+")"+L+"*"),T=new RegExp("="+L+"*([^\]'"]*?)"+L+"*\]","g"),U=new RegExp(O),V=new RegExp("^"+M+"$"),W={ID:new RegExp("^#("+M+")"),CLASS:new RegExp("^\.("+M+")"),TAG:new RegExp("^("+M+"|[*])"),ATTR:new RegExp("^"+N),PSEUDO:new RegExp("^"+O),CHILD:new RegExp("^:(only|first|last|nth|nth-last)-(child|of-type)(?:\("+L+"*(even|odd|(([+-]|)(\d*)n|)"+L+"*(?:([+-]|)"+L+"*(\d+)|))"+L+"*\)|)","i"),bool:new RegExp("^(?:"+K+")$","i"),needsContext:new RegExp("^"+L+"*[>+~]|:(even|odd|eq|gt|lt|nth|first|last)(?:\("+L+"*((?:-\d)?\d*)"+L+"*\)|)(?=[^-]|$)","i")},X=/^(?:input|select|textarea|button)$/i,Y=/^hd$/i,Z=/^[^{]+{s*[native w/,$=/^(?:#([w-]+)|(w+)|.([w-]+))$/,_=/[+~]/,aa=/'|\/g,ba=new RegExp("\\([\da-f]{1,6}"+L+"?|("+L+")|.)","ig"),ca=function(a,b,c){var d="0x"+b-65536;return d!==d||c?b:d<0?String.fromCharCode(d+65536):String.fromCharCode(d>>10|55296,1023&d|56320)},da=function(){m()};try{H.apply(E=I.call(v.childNodes),v.childNodes),E[v.childNodes.length].nodeType}catch(xa){H={apply:E.length?function(a,b){G.apply(a,I.call(b))}:function(a,b){var c=a.length,d=0;while(a[c++]=b[d++]);a.length=c-1}}}function ea(a,b,d,e){var f,h,j,k,l,o,r,s,w=b&&b.ownerDocument,x=b?b.nodeType:9;if(d=d||[],"string"!=typeof a||!a||1!==x&&9!==x&&11!==x)return d;if(!e&&((b?b.ownerDocument||b:v)!==n&&m(b),b=b||n,p)){if(11!==x&&(o=$.exec(a)))if(f=o[1]){if(9===x){if(!(j=b.getElementById(f)))return d;if(j.id===f)return d.push(j),d}else if(w&&(j=w.getElementById(f))&&t(b,j)&&j.id===f)return d.push(j),d}else{if(o[2])return H.apply(d,b.getElementsByTagName(a)),d;if((f=o[3])&&c.getElementsByClassName&&b.getElementsByClassName)return H.apply(d,b.getElementsByClassName(f)),d}if(c.qsa&&!A[a+" "]&&(!q||!q.test(a))){if(1!==x)w=b,s=a;else if("object"!==b.nodeName.toLowerCase()){(k=b.getAttribute("id"))?k=k.replace(aa,"\$&"):b.setAttribute("id",k=u),r=g(a),h=r.length,l=V.test(k)?"#"+k:"[id='"+k+"']";while(h--)r[h]=l+" "+pa(r[h]);s=r.join(","),w=_.test(a)&&na(b.parentNode)||b}if(s)try{return H.apply(d,w.querySelectorAll(s)),d}catch(y){}finally{k===u&&b.removeAttribute("id")}}}return i(a.replace(Q,"$1"),b,d,e)}function fa(){var a=[];function b(c,e){return a.push(c+" ")>d.cacheLength&&delete b[a.shift()],b[c+" "]=e}return b}function ga(a){return a[u]=!0,a}function ha(a){var b=n.createElement("div");try{return!!a(b)}catch(xa){return!1}finally{b.parentNode&&b.parentNode.removeChild(b),b=null}}function ia(a,b){var c=a.split("|"),e=c.length;while(e--)d.attrHandle[c[e]]=b}function ja(a,b){var c=b&&a,d=c&&1===a.nodeType&&1===b.nodeType&&(~b.sourceIndex||C)-(~a.sourceIndex||C);if(d)return d;if(c)while(c=c.nextSibling)if(c===b)return-1;return a?1:-1}function ka(a){return function(b){return"input"===b.nodeName.toLowerCase()&&b.type===a}}function la(a){return function(b){var c=b.nodeName.toLowerCase();return("input"===c||"button"===c)&&b.type===a}}function ma(a){return ga(function(b){return b=+b,ga(function(c,d){var e,f=a([],c.length,b),g=f.length;while(g--)c[e=f[g]]&&(c[e]=!(d[e]=c[e]))})})}function na(a){return a&&void 0!==a.getElementsByTagName&&a}c=ea.support={},f=ea.isXML=function(a){var b=a&&(a.ownerDocument||a).documentElement;return!!b&&"HTML"!==b.nodeName},m=ea.setDocument=function(a){var b,e,g=a?a.ownerDocument||a:v;return g!==n&&9===g.nodeType&&g.documentElement?(n=g,o=n.documentElement,p=!f(n),(e=n.defaultView)&&e.top!==e&&(e.addEventListener?e.addEventListener("unload",da,!1):e.attachEvent&&e.attachEvent("onunload",da)),c.attributes=ha(function(a){return a.className="i",!a.getAttribute("className")}),c.getElementsByTagName=ha(function(a){return a.appendChild(n.createComment("")),!a.getElementsByTagName("*").length}),c.getElementsByClassName=Z.test(n.getElementsByClassName),c.getById=ha(function(a){return o.appendChild(a).id=u,!n.getElementsByName||!n.getElementsByName(u).length}),c.getById?(d.find.ID=function(a,b){if(void 0!==b.getElementById&&p){var c=b.getElementById(a);return c?[c]:[]}},d.filter.ID=function(a){var b=a.replace(ba,ca);return function(a){return a.getAttribute("id")===b}}):(delete d.find.ID,d.filter.ID=function(a){var b=a.replace(ba,ca);return function(a){var c=void 0!==a.getAttributeNode&&a.getAttributeNode("id");return c&&c.value===b}}),d.find.TAG=c.getElementsByTagName?function(a,b){return void 0!==b.getElementsByTagName?b.getElementsByTagName(a):c.qsa?b.querySelectorAll(a):void 0}:function(a,b){var c,d=[],e=0,f=b.getElementsByTagName(a);if("*"===a){while(c=f[e++])1===c.nodeType&&d.push(c);return d}return f},d.find.CLASS=c.getElementsByClassName&&function(a,b){if(void 0!==b.getElementsByClassName&&p)return b.getElementsByClassName(a)},r=[],q=[],(c.qsa=Z.test(n.querySelectorAll))&&(ha(function(a){o.appendChild(a).innerHTML="<a id='"+u+"'></a><select id='"+u+"-r\' msallowcapture=''><option selected=''></option></select>",a.querySelectorAll("[msallowcapture^='']").length&&q.push("[*^$]="+L+"*(?:''|"")"),a.querySelectorAll("[selected]").length||q.push("\["+L+"*(?:value|"+K+")"),a.querySelectorAll("[id~="+u+"-]").length||q.push("~="),a.querySelectorAll(":checked").length||q.push(":checked"),a.querySelectorAll("a#"+u+"+*").length||q.push(".#.+[+~]")}),ha(function(a){var b=n.createElement("input");b.setAttribute("type","hidden"),a.appendChild(b).setAttribute("name","D"),a.querySelectorAll("[name=d]").length&&q.push("name"+L+"*[*^$|!~]?="),a.querySelectorAll(":enabled").length||q.push(":enabled",":disabled"),a.querySelectorAll("*,:x"),q.push(",.*:")})),(c.matchesSelector=Z.test(s=o.matches||o.webkitMatchesSelector||o.mozMatchesSelector||o.oMatchesSelector||o.msMatchesSelector))&&ha(function(a){c.disconnectedMatch=s.call(a,"div"),s.call(a,"[s!='']:x"),r.push("!=",O)}),q=q.length&&new RegExp(q.join("|")),r=r.length&&new RegExp(r.join("|")),b=Z.test(o.compareDocumentPosition),t=b||Z.test(o.contains)?function(a,b){var c=9===a.nodeType?a.documentElement:a,d=b&&b.parentNode;return a===d||!(!d||1!==d.nodeType||!(c.contains?c.contains(d):a.compareDocumentPosition&&16&a.compareDocumentPosition(d)))}:function(a,b){if(b)while(b=b.parentNode)if(b===a)return!0;return!1},B=b?function(a,b){if(a===b)return l=!0,0;var d=!a.compareDocumentPosition-!b.compareDocumentPosition;return d||(d=(a.ownerDocument||a)===(b.ownerDocument||b)?a.compareDocumentPosition(b):1,1&d||!c.sortDetached&&b.compareDocumentPosition(a)===d?a===n||a.ownerDocument===v&&t(v,a)?-1:b===n||b.ownerDocument===v&&t(v,b)?1:k?J(k,a)-J(k,b):0:4&d?-1:1)}:function(a,b){if(a===b)return l=!0,0;var c,d=0,e=a.parentNode,f=b.parentNode,g=[a],h=[b];if(!e||!f)return a===n?-1:b===n?1:e?-1:f?1:k?J(k,a)-J(k,b):0;if(e===f)return ja(a,b);c=a;while(c=c.parentNode)g.unshift(c);c=b;while(c=c.parentNode)h.unshift(c);while(g[d]===h[d])d++;return d?ja(g[d],h[d]):g[d]===v?-1:h[d]===v?1:0},n):n},ea.matches=function(a,b){return ea(a,null,null,b)},ea.matchesSelector=function(a,b){if((a.ownerDocument||a)!==n&&m(a),b=b.replace(T,"='$1']"),c.matchesSelector&&p&&!A[b+" "]&&(!r||!r.test(b))&&(!q||!q.test(b)))try{var d=s.call(a,b);if(d||c.disconnectedMatch||a.document&&11!==a.document.nodeType)return d}catch(xa){}return ea(b,n,null,[a]).length>0},ea.contains=function(a,b){return(a.ownerDocument||a)!==n&&m(a),t(a,b)},ea.attr=function(a,b){(a.ownerDocument||a)!==n&&m(a);var e=d.attrHandle[b.toLowerCase()],f=e&&D.call(d.attrHandle,b.toLowerCase())?e(a,b,!p):void 0;return void 0!==f?f:c.attributes||!p?a.getAttribute(b):(f=a.getAttributeNode(b))&&f.specified?f.value:null},ea.error=function(a){throw new Error("Syntax error, unrecognized expression: "+a)},ea.uniqueSort=function(a){var b,d=[],e=0,f=0;if(l=!c.detectDuplicates,k=!c.sortStable&&a.slice(0),a.sort(B),l){while(b=a[f++])b===a[f]&&(e=d.push(f));while(e--)a.splice(d[e],1)}return k=null,a},e=ea.getText=function(a){var b,c="",d=0,f=a.nodeType;if(f){if(1===f||9===f||11===f){if("string"==typeof a.textContent)return a.textContent;for(a=a.firstChild;a;a=a.nextSibling)c+=e(a)}else if(3===f||4===f)return a.nodeValue}else while(b=a[d++])c+=e(b);return c},d=ea.selectors={cacheLength:50,createPseudo:ga,match:W,attrHandle:{},find:{},relative:{">":{dir:"parentNode",first:!0}," ":{dir:"parentNode"},"+":{dir:"previousSibling",first:!0},"~":{dir:"previousSibling"}},preFilter:{ATTR:function(a){return a[1]=a[1].replace(ba,ca),a[3]=(a[3]||a[4]||a[5]||"").replace(ba,ca),"~="===a[2]&&(a[3]=" "+a[3]+" "),a.slice(0,4)},CHILD:function(a){return a[1]=a[1].toLowerCase(),"nth"===a[1].slice(0,3)?(a[3]||ea.error(a[0]),a[4]=+(a[4]?a[5]+(a[6]||1):2*("even"===a[3]||"odd"===a[3])),a[5]=+(a[7]+a[8]||"odd"===a[3])):a[3]&&ea.error(a[0]),a},PSEUDO:function(a){var b,c=!a[6]&&a[2];return W.CHILD.test(a[0])?null:(a[3]?a[2]=a[4]||a[5]||"":c&&U.test(c)&&(b=g(c,!0))&&(b=c.indexOf(")",c.length-b)-c.length)&&(a[0]=a[0].slice(0,b),a[2]=c.slice(0,b)),a.slice(0,3))}},filter:{TAG:function(a){var b=a.replace(ba,ca).toLowerCase();return"*"===a?function(){return!0}:function(a){return a.nodeName&&a.nodeName.toLowerCase()===b}},CLASS:function(a){var b=y[a+" "];return b||(b=new RegExp("(^|"+L+")"+a+"("+L+"|$)"))&&y(a,function(a){return b.test("string"==typeof a.className&&a.className||void 0!==a.getAttribute&&a.getAttribute("class")||"")})},ATTR:function(a,b,c){return function(d){var e=ea.attr(d,a);return null==e?"!="===b:!b||(e+="","="===b?e===c:"!="===b?e!==c:"^="===b?c&&0===e.indexOf(c):"*="===b?c&&e.indexOf(c)>-1:"$="===b?c&&e.slice(-c.length)===c:"~="===b?(" "+e.replace(P," ")+" ").indexOf(c)>-1:"|="===b&&(e===c||e.slice(0,c.length+1)===c+"-"))}},CHILD:function(a,b,c,d,e){var f="nth"!==a.slice(0,3),g="last"!==a.slice(-4),h="of-type"===b;return 1===d&&0===e?function(a){return!!a.parentNode}:function(b,c,i){var j,k,l,m,n,o,p=f!==g?"nextSibling":"previousSibling",q=b.parentNode,r=h&&b.nodeName.toLowerCase(),s=!i&&!h,t=!1;if(q){if(f){while(p){m=b;while(m=m[p])if(h?m.nodeName.toLowerCase()===r:1===m.nodeType)return!1;o=p="only"===a&&!o&&"nextSibling"}return!0}if(o=[g?q.firstChild:q.lastChild],g&&s){m=q,l=m[u]||(m[u]={}),k=l[m.uniqueID]||(l[m.uniqueID]={}),j=k[a]||[],n=j[0]===w&&j[1],t=n&&j[2],m=n&&q.childNodes[n];while(m=++n&&m&&m[p]||(t=n=0)||o.pop())if(1===m.nodeType&&++t&&m===b){k[a]=[w,n,t];break}}else if(s&&(m=b,l=m[u]||(m[u]={}),k=l[m.uniqueID]||(l[m.uniqueID]={}),j=k[a]||[],n=j[0]===w&&j[1],t=n),!1===t)while(m=++n&&m&&m[p]||(t=n=0)||o.pop())if((h?m.nodeName.toLowerCase()===r:1===m.nodeType)&&++t&&(s&&(l=m[u]||(m[u]={}),k=l[m.uniqueID]||(l[m.uniqueID]={}),k[a]=[w,t]),m===b))break;return(t-=e)===d||t%d==0&&t/d>=0}}},PSEUDO:function(a,b){var c,e=d.pseudos[a]||d.setFilters[a.toLowerCase()]||ea.error("unsupported pseudo: "+a);return e[u]?e(b):e.length>1?(c=[a,a,"",b],d.setFilters.hasOwnProperty(a.toLowerCase())?ga(function(a,c){var d,f=e(a,b),g=f.length;while(g--)d=J(a,f[g]),a[d]=!(c[d]=f[g])}):function(a){return e(a,0,c)}):e}},pseudos:{not:ga(function(a){var b=[],c=[],d=h(a.replace(Q,"$1"));return d[u]?ga(function(a,b,c,e){var f,g=d(a,null,e,[]),h=a.length;while(h--)(f=g[h])&&(a[h]=!(b[h]=f))}):function(a,e,f){return b[0]=a,d(b,null,f,c),b[0]=null,!c.pop()}}),has:ga(function(a){return function(b){return ea(a,b).length>0}}),contains:ga(function(a){return a=a.replace(ba,ca),function(b){return(b.textContent||b.innerText||e(b)).indexOf(a)>-1}}),lang:ga(function(a){return V.test(a||"")||ea.error("unsupported lang: "+a),a=a.replace(ba,ca).toLowerCase(),function(b){var c;do{if(c=p?b.lang:b.getAttribute("xml:lang")||b.getAttribute("lang"))return(c=c.toLowerCase())===a||0===c.indexOf(a+"-")}while((b=b.parentNode)&&1===b.nodeType);return!1}}),target:function(b){var c=a.location&&a.location.hash;return c&&c.slice(1)===b.id},root:function(a){return a===o},focus:function(a){return a===n.activeElement&&(!n.hasFocus||n.hasFocus())&&!!(a.type||a.href||~a.tabIndex)},enabled:function(a){return!1===a.disabled},disabled:function(a){return!0===a.disabled},checked:function(a){var b=a.nodeName.toLowerCase();return"input"===b&&!!a.checked||"option"===b&&!!a.selected},selected:function(a){return a.parentNode&&a.parentNode.selectedIndex,!0===a.selected},empty:function(a){for(a=a.firstChild;a;a=a.nextSibling)if(a.nodeType<6)return!1;return!0},parent:function(a){return!d.pseudos.empty(a)},header:function(a){return Y.test(a.nodeName)},input:function(a){return X.test(a.nodeName)},button:function(a){var b=a.nodeName.toLowerCase();return"input"===b&&"button"===a.type||"button"===b},text:function(a){var b;return"input"===a.nodeName.toLowerCase()&&"text"===a.type&&(null==(b=a.getAttribute("type"))||"text"===b.toLowerCase())},first:ma(function(){return[0]}),last:ma(function(a,b){return[b-1]}),eq:ma(function(a,b,c){return[c<0?c+b:c]}),even:ma(function(a,b){for(var c=0;c<b;c+=2)a.push(c);return a}),odd:ma(function(a,b){for(var c=1;c<b;c+=2)a.push(c);return a}),lt:ma(function(a,b,c){for(var d=c<0?c+b:c;--d>=0;)a.push(d);return a}),gt:ma(function(a,b,c){for(var d=c<0?c+b:c;++d<b;)a.push(d);return a})}},d.pseudos.nth=d.pseudos.eq;for(b in{radio:!0,checkbox:!0,file:!0,password:!0,image:!0})d.pseudos[b]=ka(b);for(b in{submit:!0,reset:!0})d.pseudos[b]=la(b);function oa(){}oa.prototype=d.filters=d.pseudos,d.setFilters=new oa,g=ea.tokenize=function(a,b){var c,e,f,g,h,i,j,k=z[a+" "];if(k)return b?0:k.slice(0);h=a,i=[],j=d.preFilter;while(h){c&&!(e=R.exec(h))||(e&&(h=h.slice(e[0].length)||h),i.push(f=[])),c=!1,(e=S.exec(h))&&(c=e.shift(),f.push({value:c,type:e[0].replace(Q," ")}),h=h.slice(c.length));for(g in d.filter)!(e=W[g].exec(h))||j[g]&&!(e=j[g](e))||(c=e.shift(),f.push({value:c,type:g,matches:e}),h=h.slice(c.length));if(!c)break}return b?h.length:h?ea.error(a):z(a,i).slice(0)};function pa(a){for(var b=0,c=a.length,d="";b<c;b++)d+=a[b].value;return d}function qa(a,b,c){var d=b.dir,e=c&&"parentNode"===d,f=x++;return b.first?function(b,c,f){while(b=b[d])if(1===b.nodeType||e)return a(b,c,f)}:function(b,c,g){var h,i,j,k=[w,f];if(g){while(b=b[d])if((1===b.nodeType||e)&&a(b,c,g))return!0}else while(b=b[d])if(1===b.nodeType||e){if(j=b[u]||(b[u]={}),i=j[b.uniqueID]||(j[b.uniqueID]={}),(h=i[d])&&h[0]===w&&h[1]===f)return k[2]=h[2];if(i[d]=k,k[2]=a(b,c,g))return!0}}}function ra(a){return a.length>1?function(b,c,d){var e=a.length;while(e--)if(!a[e](b,c,d))return!1;return!0}:a[0]}function sa(a,b,c){for(var d=0,e=b.length;d<e;d++)ea(a,b[d],c);return c}function ta(a,b,c,d,e){for(var f,g=[],h=0,i=a.length,j=null!=b;h<i;h++)(f=a[h])&&(c&&!c(f,d,e)||(g.push(f),j&&b.push(h)));return g}function ua(a,b,c,d,e,f){return d&&!d[u]&&(d=ua(d)),e&&!e[u]&&(e=ua(e,f)),ga(function(f,g,h,i){var j,k,l,m=[],n=[],o=g.length,p=f||sa(b||"*",h.nodeType?[h]:h,[]),q=!a||!f&&b?p:ta(p,m,a,h,i),r=c?e||(f?a:o||d)?[]:g:q;if(c&&c(q,r,h,i),d){j=ta(r,n),d(j,[],h,i),k=j.length;while(k--)(l=j[k])&&(r[n[k]]=!(q[n[k]]=l))}if(f){if(e||a){if(e){j=[],k=r.length;while(k--)(l=r[k])&&j.push(q[k]=l);e(null,r=[],j,i)}k=r.length;while(k--)(l=r[k])&&(j=e?J(f,l):m[k])>-1&&(f[j]=!(g[j]=l))}}else r=ta(r===g?r.splice(o,r.length):r),e?e(null,g,r,i):H.apply(g,r)})}function va(a){for(var b,c,e,f=a.length,g=d.relative[a[0].type],h=g||d.relative[" "],i=g?1:0,k=qa(function(a){return a===b},h,!0),l=qa(function(a){return J(b,a)>-1},h,!0),m=[function(a,c,d){var e=!g&&(d||c!==j)||((b=c).nodeType?k(a,c,d):l(a,c,d));return b=null,e}];i<f;i++)if(c=d.relative[a[i].type])m=[qa(ra(m),c)];else{if(c=d.filter[a[i].type].apply(null,a[i].matches),c[u]){for(e=++i;e<f;e++)if(d.relative[a[e].type])break;return ua(i>1&&ra(m),i>1&&pa(a.slice(0,i-1).concat({value:" "===a[i-2].type?"*":""})).replace(Q,"$1"),c,i<e&&va(a.slice(i,e)),e<f&&va(a=a.slice(e)),e<f&&pa(a))}m.push(c)}return ra(m)}function wa(a,b){var c=b.length>0,e=a.length>0,f=function(f,g,h,i,k){var l,o,q,r=0,s="0",t=f&&[],u=[],v=j,x=f||e&&d.find.TAG("*",k),y=w+=null==v?1:Math.random()||.1,z=x.length;for(k&&(j=g===n||g||k);s!==z&&null!=(l=x[s]);s++){if(e&&l){o=0,g||l.ownerDocument===n||(m(l),h=!p);while(q=a[o++])if(q(l,g||n,h)){i.push(l);break}k&&(w=y)}c&&((l=!q&&l)&&r--,f&&t.push(l))}if(r+=s,c&&s!==r){o=0;while(q=b[o++])q(t,u,g,h);if(f){if(r>0)while(s--)t[s]||u[s]||(u[s]=F.call(i));u=ta(u)}H.apply(i,u),k&&!f&&u.length>0&&r+b.length>1&&ea.uniqueSort(i)}return k&&(w=y,j=v),t};return c?ga(f):f}return h=ea.compile=function(a,b){var c,d=[],e=[],f=A[a+" "];if(!f){b||(b=g(a)),c=b.length;while(c--)f=va(b[c]),f[u]?d.push(f):e.push(f);f=A(a,wa(e,d)),f.selector=a}return f},i=ea.select=function(a,b,e,f){var i,j,k,l,m,n="function"==typeof a&&a,o=!f&&g(a=n.selector||a);if(e=e||[],1===o.length){if(j=o[0]=o[0].slice(0),j.length>2&&"ID"===(k=j[0]).type&&c.getById&&9===b.nodeType&&p&&d.relative[j[1].type]){if(!(b=(d.find.ID(k.matches[0].replace(ba,ca),b)||[])[0]))return e;n&&(b=b.parentNode),a=a.slice(j.shift().value.length)}i=W.needsContext.test(a)?0:j.length;while(i--){if(k=j[i],d.relative[l=k.type])break;if((m=d.find[l])&&(f=m(k.matches[0].replace(ba,ca),_.test(j[0].type)&&na(b.parentNode)||b))){if(j.splice(i,1),!(a=f.length&&pa(j)))return H.apply(e,f),e;break}}}return(n||h(a,o))(f,b,!p,e,!b||_.test(a)&&na(b.parentNode)||b),e},c.sortStable=u.split("").sort(B).join("")===u,c.detectDuplicates=!!l,m(),c.sortDetached=ha(function(a){return 1&a.compareDocumentPosition(n.createElement("div"))}),ha(function(a){return a.innerHTML="<a href='#'></a>","#"===a.firstChild.getAttribute("href")})||ia("type|href|height|width",function(a,b,c){if(!c)return a.getAttribute(b,"type"===b.toLowerCase()?1:2)}),c.attributes&&ha(function(a){return a.innerHTML="<input/>",a.firstChild.setAttribute("value",""),""===a.firstChild.getAttribute("value")})||ia("value",function(a,b,c){if(!c&&"input"===a.nodeName.toLowerCase())return a.defaultValue}),ha(function(a){return null==a.getAttribute("disabled")})||ia(K,function(a,b,c){var d;if(!c)return!0===a[b]?b.toLowerCase():(d=a.getAttributeNode(b))&&d.specified?d.value:null}),ea}(a);n.find=t,n.expr=t.selectors,n.expr[":"]=n.expr.pseudos,n.uniqueSort=n.unique=t.uniqueSort,n.text=t.getText,n.isXMLDoc=t.isXML,n.contains=t.contains;var u=function(a,b,c){var d=[],e=void 0!==c;while((a=a[b])&&9!==a.nodeType)if(1===a.nodeType){if(e&&n(a).is(c))break;d.push(a)}return d},v=function(a,b){for(var c=[];a;a=a.nextSibling)1===a.nodeType&&a!==b&&c.push(a);return c},w=n.expr.match.needsContext,x=/^<([w-]+)s*/?>(?:</1>|)$/,y=/^.[^:#[.,]*$/;function z(a,b,c){if(n.isFunction(b))return n.grep(a,function(a,d){return!!b.call(a,d,a)!==c});if(b.nodeType)return n.grep(a,function(a){return a===b!==c});if("string"==typeof b){if(y.test(b))return n.filter(b,a,c);b=n.filter(b,a)}return n.grep(a,function(a){return n.inArray(a,b)>-1!==c})}n.filter=function(a,b,c){var d=b[0];return c&&(a=":not("+a+")"),1===b.length&&1===d.nodeType?n.find.matchesSelector(d,a)?[d]:[]:n.find.matches(a,n.grep(b,function(a){return 1===a.nodeType}))},n.fn.extend({find:function(a){var b,c=[],d=this,e=d.length;if("string"!=typeof a)return this.pushStack(n(a).filter(function(){for(b=0;b<e;b++)if(n.contains(d[b],this))return!0}));for(b=0;b<e;b++)n.find(a,d[b],c);return c=this.pushStack(e>1?n.unique(c):c),c.selector=this.selector?this.selector+" "+a:a,c},filter:function(a){return this.pushStack(z(this,a||[],!1))},not:function(a){return this.pushStack(z(this,a||[],!0))},is:function(a){return!!z(this,"string"==typeof a&&w.test(a)?n(a):a||[],!1).length}});var A,B=/^(?:s*(<[wW]+>)[^>]*|#([w-]*))$/;(n.fn.init=function(a,b,c){var e,f;if(!a)return this;if(c=c||A,"string"==typeof a){if(!(e="<"===a.charAt(0)&&">"===a.charAt(a.length-1)&&a.length>=3?[null,a,null]:B.exec(a))||!e[1]&&b)return!b||b.jquery?(b||c).find(a):this.constructor(b).find(a);if(e[1]){if(b=b instanceof n?b[0]:b,n.merge(this,n.parseHTML(e[1],b&&b.nodeType?b.ownerDocument||b:d,!0)),x.test(e[1])&&n.isPlainObject(b))for(e in b)n.isFunction(this[e])?this[e](b[e]):this.attr(e,b[e]);return this}if((f=d.getElementById(e[2]))&&f.parentNode){if(f.id!==e[2])return A.find(a);this.length=1,this[0]=f}return this.context=d,this.selector=a,this}return a.nodeType?(this.context=this[0]=a,this.length=1,this):n.isFunction(a)?void 0!==c.ready?c.ready(a):a(n):(void 0!==a.selector&&(this.selector=a.selector,this.context=a.context),n.makeArray(a,this))}).prototype=n.fn,A=n(d);var C=/^(?:parents|prev(?:Until|All))/,D={children:!0,contents:!0,next:!0,prev:!0};n.fn.extend({has:function(a){var b,c=n(a,this),d=c.length;return this.filter(function(){for(b=0;b<d;b++)if(n.contains(this,c[b]))return!0})},closest:function(a,b){for(var c,d=0,e=this.length,f=[],g=w.test(a)||"string"!=typeof a?n(a,b||this.context):0;d<e;d++)for(c=this[d];c&&c!==b;c=c.parentNode)if(c.nodeType<11&&(g?g.index(c)>-1:1===c.nodeType&&n.find.matchesSelector(c,a))){f.push(c);break}return this.pushStack(f.length>1?n.uniqueSort(f):f)},index:function(a){return a?"string"==typeof a?n.inArray(this[0],n(a)):n.inArray(a.jquery?a[0]:a,this):this[0]&&this[0].parentNode?this.first().prevAll().length:-1},add:function(a,b){return this.pushStack(n.uniqueSort(n.merge(this.get(),n(a,b))))},addBack:function(a){return this.add(null==a?this.prevObject:this.prevObject.filter(a))}});function E(a,b){do{a=a[b]}while(a&&1!==a.nodeType);return a}n.each({parent:function(a){var b=a.parentNode;return b&&11!==b.nodeType?b:null},parents:function(a){return u(a,"parentNode")},parentsUntil:function(a,b,c){return u(a,"parentNode",c)},next:function(a){return E(a,"nextSibling")},prev:function(a){return E(a,"previousSibling")},nextAll:function(a){return u(a,"nextSibling")},prevAll:function(a){return u(a,"previousSibling")},nextUntil:function(a,b,c){return u(a,"nextSibling",c)},prevUntil:function(a,b,c){return u(a,"previousSibling",c)},siblings:function(a){return v((a.parentNode||{}).firstChild,a)},children:function(a){return v(a.firstChild)},contents:function(a){return n.nodeName(a,"iframe")?a.contentDocument||a.contentWindow.document:n.merge([],a.childNodes)}},function(a,b){n.fn[a]=function(c,d){var e=n.map(this,b,c);return"Until"!==a.slice(-5)&&(d=c),d&&"string"==typeof d&&(e=n.filter(d,e)),this.length>1&&(D[a]||(e=n.uniqueSort(e)),C.test(a)&&(e=e.reverse())),this.pushStack(e)}});var F=/S+/g;function G(a){var b={};return n.each(a.match(F)||[],function(a,c){b[c]=!0}),b}n.Callbacks=function(a){a="string"==typeof a?G(a):n.extend({},a);var b,c,d,e,f=[],g=[],h=-1,i=function(){for(e=a.once,d=b=!0;g.length;h=-1){c=g.shift();while(++h<f.length)!1===f[h].apply(c[0],c[1])&&a.stopOnFalse&&(h=f.length,c=!1)}a.memory||(c=!1),b=!1,e&&(f=c?[]:"")},j={add:function(){return f&&(c&&!b&&(h=f.length-1,g.push(c)),function b(c){n.each(c,function(c,d){n.isFunction(d)?a.unique&&j.has(d)||f.push(d):d&&d.length&&"string"!==n.type(d)&&b(d)})}(arguments),c&&!b&&i()),this},remove:function(){return n.each(arguments,function(a,b){var c;while((c=n.inArray(b,f,c))>-1)f.splice(c,1),c<=h&&h--}),this},has:function(a){return a?n.inArray(a,f)>-1:f.length>0},empty:function(){return f&&(f=[]),this},disable:function(){return e=g=[],f=c="",this},disabled:function(){return!f},lock:function(){return e=!0,c||j.disable(),this},locked:function(){return!!e},fireWith:function(a,c){return e||(c=c||[],c=[a,c.slice?c.slice():c],g.push(c),b||i()),this},fire:function(){return j.fireWith(this,arguments),this},fired:function(){return!!d}};return j},n.extend({Deferred:function(a){var b=[["resolve","done",n.Callbacks("once memory"),"resolved"],["reject","fail",n.Callbacks("once memory"),"rejected"],["notify","progress",n.Callbacks("memory")]],c="pending",d={state:function(){return c},always:function(){return e.done(arguments).fail(arguments),this},then:function(){var a=arguments;return n.Deferred(function(c){n.each(b,function(b,f){var g=n.isFunction(a[b])&&a[b];e[f[1]](function(){var a=g&&g.apply(this,arguments);a&&n.isFunction(a.promise)?a.promise().progress(c.notify).done(c.resolve).fail(c.reject):c[f[0]+"With"](this===d?c.promise():this,g?[a]:arguments)})}),a=null}).promise()},promise:function(a){return null!=a?n.extend(a,d):d}},e={};return d.pipe=d.then,n.each(b,function(a,f){var g=f[2],h=f[3];d[f[1]]=g.add,h&&g.add(function(){c=h},b[1^a][2].disable,b[2][2].lock),e[f[0]]=function(){return e[f[0]+"With"](this===e?d:this,arguments),this},e[f[0]+"With"]=g.fireWith}),d.promise(e),a&&a.call(e,e),e},when:function(a){var b=0,c=e.call(arguments),d=c.length,f=1!==d||a&&n.isFunction(a.promise)?d:0,g=1===f?a:n.Deferred(),h=function(a,b,c){return function(d){b[a]=this,c[a]=arguments.length>1?e.call(arguments):d,c===i?g.notifyWith(b,c):--f||g.resolveWith(b,c)}},i,j,k;if(d>1)for(i=new Array(d),j=new Array(d),k=new Array(d);b<d;b++)c[b]&&n.isFunction(c[b].promise)?c[b].promise().progress(h(b,j,i)).done(h(b,k,c)).fail(g.reject):--f;return f||g.resolveWith(k,c),g.promise()}});var H;n.fn.ready=function(a){return n.ready.promise().done(a),this},n.extend({isReady:!1,readyWait:1,holdReady:function(a){a?n.readyWait++:n.ready(!0)},ready:function(a){(!0===a?--n.readyWait:n.isReady)||(n.isReady=!0,!0!==a&&--n.readyWait>0||(H.resolveWith(d,[n]),n.fn.triggerHandler&&(n(d).triggerHandler("ready"),n(d).off("ready"))))}});function I(){d.addEventListener?(d.removeEventListener("DOMContentLoaded",J),a.removeEventListener("load",J)):(d.detachEvent("onreadystatechange",J),a.detachEvent("onload",J))}function J(){(d.addEventListener||"load"===a.event.type||"complete"===d.readyState)&&(I(),n.ready())}n.ready.promise=function(b){if(!H)if(H=n.Deferred(),"complete"===d.readyState||"loading"!==d.readyState&&!d.documentElement.doScroll)a.setTimeout(n.ready);else if(d.addEventListener)d.addEventListener("DOMContentLoaded",J),a.addEventListener("load",J);else{d.attachEvent("onreadystatechange",J),a.attachEvent("onload",J);var c=!1;try{c=null==a.frameElement&&d.documentElement}catch(e){}c&&c.doScroll&&function b(){if(!n.isReady){try{c.doScroll("left")}catch(e){return a.setTimeout(b,50)}I(),n.ready()}}()}return H.promise(b)},n.ready.promise();var K;for(K in n(l))break;l.ownFirst="0"===K,l.inlineBlockNeedsLayout=!1,n(function(){var a,b,c,e;(c=d.getElementsByTagName("body")[0])&&c.style&&(b=d.createElement("div"),e=d.createElement("div"),e.style.cssText="position:absolute;border:0;width:0;height:0;top:0;left:-9999px",c.appendChild(e).appendChild(b),void 0!==b.style.zoom&&(b.style.cssText="display:inline;margin:0;border:0;padding:1px;width:1px;zoom:1",l.inlineBlockNeedsLayout=a=3===b.offsetWidth,a&&(c.style.zoom=1)),c.removeChild(e))}),function(){var a=d.createElement("div");l.deleteExpando=!0;try{delete a.test}catch(b){l.deleteExpando=!1}a=null}();var L=function(a){var b=n.noData[(a.nodeName+" ").toLowerCase()],c=+a.nodeType||1;return(1===c||9===c)&&(!b||!0!==b&&a.getAttribute("classid")===b)},M=/^(?:{[wW]*}|[[wW]*])$/,N=/([A-Z])/g;function O(a,b,c){if(void 0===c&&1===a.nodeType){var d="data-"+b.replace(N,"-$1").toLowerCase();if("string"==typeof(c=a.getAttribute(d))){try{c="true"===c||"false"!==c&&("null"===c?null:+c+""===c?+c:M.test(c)?n.parseJSON(c):c)}catch(e){}n.data(a,b,c)}else c=void 0}return c}function P(a){var b ;for(b in a)if(("data"!==b||!n.isEmptyObject(a[b]))&&"toJSON"!==b)return!1;return!0}function Q(a,b,d,e){if(L(a)){var f,g,h=n.expando,i=a.nodeType,j=i?n.cache:a,k=i?a[h]:a[h]&&h;if(k&&j[k]&&(e||j[k].data)||void 0!==d||"string"!=typeof b)return k||(k=i?a[h]=c.pop()||n.guid++:h),j[k]||(j[k]=i?{}:{toJSON:n.noop}),"object"!=typeof b&&"function"!=typeof b||(e?j[k]=n.extend(j[k],b):j[k].data=n.extend(j[k].data,b)),g=j[k],e||(g.data||(g.data={}),g=g.data),void 0!==d&&(g[n.camelCase(b)]=d),"string"==typeof b?null==(f=g[b])&&(f=g[n.camelCase(b)]):f=g,f}}function R(a,b,c){if(L(a)){var d,e,f=a.nodeType,g=f?n.cache:a,h=f?a[n.expando]:n.expando;if(g[h]){if(b&&(d=c?g[h]:g[h].data)){n.isArray(b)?b=b.concat(n.map(b,n.camelCase)):b in d?b=[b]:(b=n.camelCase(b),b=b in d?[b]:b.split(" ")),e=b.length;while(e--)delete d[b[e]];if(c?!P(d):!n.isEmptyObject(d))return}(c||(delete g[h].data,P(g[h])))&&(f?n.cleanData([a],!0):l.deleteExpando||g!=g.window?delete g[h]:g[h]=void 0)}}}n.extend({cache:{},noData:{"applet ":!0,"embed ":!0,"object ":"clsid:D27CDB6E-AE6D-11cf-96B8-444553540000"},hasData:function(a){return!!(a=a.nodeType?n.cache[a[n.expando]]:a[n.expando])&&!P(a)},data:function(a,b,c){return Q(a,b,c)},removeData:function(a,b){return R(a,b)},_data:function(a,b,c){return Q(a,b,c,!0)},_removeData:function(a,b){return R(a,b,!0)}}),n.fn.extend({data:function(a,b){var c,d,e,f=this[0],g=f&&f.attributes;if(void 0===a){if(this.length&&(e=n.data(f),1===f.nodeType&&!n._data(f,"parsedAttrs"))){c=g.length;while(c--)g[c]&&(d=g[c].name,0===d.indexOf("data-")&&(d=n.camelCase(d.slice(5)),O(f,d,e[d])));n._data(f,"parsedAttrs",!0)}return e}return"object"==typeof a?this.each(function(){n.data(this,a)}):arguments.length>1?this.each(function(){n.data(this,a,b)}):f?O(f,a,n.data(f,a)):void 0},removeData:function(a){return this.each(function(){n.removeData(this,a)})}}),n.extend({queue:function(a,b,c){var d;if(a)return b=(b||"fx")+"queue",d=n._data(a,b),c&&(!d||n.isArray(c)?d=n._data(a,b,n.makeArray(c)):d.push(c)),d||[]},dequeue:function(a,b){b=b||"fx";var c=n.queue(a,b),d=c.length,e=c.shift(),f=n._queueHooks(a,b),g=function(){n.dequeue(a,b)};"inprogress"===e&&(e=c.shift(),d--),e&&("fx"===b&&c.unshift("inprogress"),delete f.stop,e.call(a,g,f)),!d&&f&&f.empty.fire()},_queueHooks:function(a,b){var c=b+"queueHooks";return n._data(a,c)||n._data(a,c,{empty:n.Callbacks("once memory").add(function(){n._removeData(a,b+"queue"),n._removeData(a,c)})})}}),n.fn.extend({queue:function(a,b){var c=2;return"string"!=typeof a&&(b=a,a="fx",c--),arguments.length<c?n.queue(this[0],a):void 0===b?this:this.each(function(){var c=n.queue(this,a,b);n._queueHooks(this,a),"fx"===a&&"inprogress"!==c[0]&&n.dequeue(this,a)})},dequeue:function(a){return this.each(function(){n.dequeue(this,a)})},clearQueue:function(a){return this.queue(a||"fx",[])},promise:function(a,b){var c,d=1,e=n.Deferred(),f=this,g=this.length,h=function(){--d||e.resolveWith(f,[f])};"string"!=typeof a&&(b=a,a=void 0),a=a||"fx";while(g--)(c=n._data(f[g],a+"queueHooks"))&&c.empty&&(d++,c.empty.add(h));return h(),e.promise(b)}}),function(){var a;l.shrinkWrapBlocks=function(){if(null!=a)return a;a=!1;var b,c,e;return(c=d.getElementsByTagName("body")[0])&&c.style?(b=d.createElement("div"),e=d.createElement("div"),e.style.cssText="position:absolute;border:0;width:0;height:0;top:0;left:-9999px",c.appendChild(e).appendChild(b),void 0!==b.style.zoom&&(b.style.cssText="-webkit-box-sizing:content-box;-moz-box-sizing:content-box;box-sizing:content-box;display:block;margin:0;border:0;padding:1px;width:1px;zoom:1",b.appendChild(d.createElement("div")).style.width="5px",a=3!==b.offsetWidth),c.removeChild(e),a):void 0}}();var S=/[+-]?(?:d*.|)d+(?:[eE][+-]?d+|)/.source,T=new RegExp("^(?:([+-])=|)("+S+")([a-z%]*)$","i"),U=["Top","Right","Bottom","Left"],V=function(a,b){return a=b||a,"none"===n.css(a,"display")||!n.contains(a.ownerDocument,a)};function W(a,b,c,d){var e,f=1,g=20,h=d?function(){return d.cur()}:function(){return n.css(a,b,"")},i=h(),j=c&&c[3]||(n.cssNumber[b]?"":"px"),k=(n.cssNumber[b]||"px"!==j&&+i)&&T.exec(n.css(a,b));if(k&&k[3]!==j){j=j||k[3],c=c||[],k=+i||1;do{f=f||".5",k/=f,n.style(a,b,k+j)}while(f!==(f=h()/i)&&1!==f&&--g)}return c&&(k=+k||+i||0,e=c[1]?k+(c[1]+1)*c[2]:+c[2],d&&(d.unit=j,d.start=k,d.end=e)),e}var X=function(a,b,c,d,e,f,g){var h=0,i=a.length,j=null==c;if("object"===n.type(c)){e=!0;for(h in c)X(a,b,h,c[h],!0,f,g)}else if(void 0!==d&&(e=!0,n.isFunction(d)||(g=!0),j&&(g?(b.call(a,d),b=null):(j=b,b=function(a,b,c){return j.call(n(a),c)})),b))for(;h<i;h++)b(a[h],c,g?d:d.call(a[h],h,b(a[h],c)));return e?a:j?b.call(a):i?b(a[0],c):f},Y=/^(?:checkbox|radio)$/i,Z=/<([w:-]+)/,$=/^$|/(?:java|ecma)script/i,_=/^s+/,aa="abbr|article|aside|audio|bdi|canvas|data|datalist|details|dialog|figcaption|figure|footer|header|hgroup|main|mark|meter|nav|output|picture|progress|section|summary|template|time|video";function ba(a){var b=aa.split("|"),c=a.createDocumentFragment();if(c.createElement)while(b.length)c.createElement(b.pop());return c}!function(){var a=d.createElement("div"),b=d.createDocumentFragment(),c=d.createElement("input");a.innerHTML=" <link/><table></table><a href='/a'>a</a><input type='checkbox'/>",l.leadingWhitespace=3===a.firstChild.nodeType,l.tbody=!a.getElementsByTagName("tbody").length,l.htmlSerialize=!!a.getElementsByTagName("link").length,l.html5Clone="<:nav></:nav>"!==d.createElement("nav").cloneNode(!0).outerHTML,c.type="checkbox",c.checked=!0,b.appendChild(c),l.appendChecked=c.checked,a.innerHTML="<textarea>x</textarea>",l.noCloneChecked=!!a.cloneNode(!0).lastChild.defaultValue,b.appendChild(a),c=d.createElement("input"),c.setAttribute("type","radio"),c.setAttribute("checked","checked"),c.setAttribute("name","t"),a.appendChild(c),l.checkClone=a.cloneNode(!0).cloneNode(!0).lastChild.checked,l.noCloneEvent=!!a.addEventListener,a[n.expando]=1,l.attributes=!a.getAttribute(n.expando)}();var ca={option:[1,"<select multiple='multiple'>","</select>"],legend:[1,"<fieldset>","</fieldset>"],area:[1,"<map>","</map>"],param:[1,"<object>","</object>"],thead:[1,"<table>","</table>"],tr:[2,"<table><tbody>","</tbody></table>"],col:[2,"<table><tbody></tbody><colgroup>","</colgroup></table>"],td:[3,"<table><tbody><tr>","</tr></tbody></table>"],_default:l.htmlSerialize?[0,"",""]:[1,"X<div>","</div>"]};ca.optgroup=ca.option,ca.tbody=ca.tfoot=ca.colgroup=ca.caption=ca.thead,ca.th=ca.td;function da(a,b){var c,d,e=0,f=void 0!==a.getElementsByTagName?a.getElementsByTagName(b||"*"):void 0!==a.querySelectorAll?a.querySelectorAll(b||"*"):void 0;if(!f)for(f=[],c=a.childNodes||a;null!=(d=c[e]);e++)!b||n.nodeName(d,b)?f.push(d):n.merge(f,da(d,b));return void 0===b||b&&n.nodeName(a,b)?n.merge([a],f):f}function ea(a,b){for(var c,d=0;null!=(c=a[d]);d++)n._data(c,"globalEval",!b||n._data(b[d],"globalEval"))}var fa=/<|&#?w+;/,ga=/<tbody/i;function ha(a){Y.test(a.type)&&(a.defaultChecked=a.checked)}function ia(a,b,c,d,e){for(var f,g,h,i,j,k,m,o=a.length,p=ba(b),q=[],r=0;r<o;r++)if((g=a[r])||0===g)if("object"===n.type(g))n.merge(q,g.nodeType?[g]:g);else if(fa.test(g)){i=i||p.appendChild(b.createElement("div")),j=(Z.exec(g)||["",""])[1].toLowerCase(),m=ca[j]||ca._default,i.innerHTML=m[1]+n.htmlPrefilter(g)+m[2],f=m[0];while(f--)i=i.lastChild;if(!l.leadingWhitespace&&_.test(g)&&q.push(b.createTextNode(_.exec(g)[0])),!l.tbody){g="table"!==j||ga.test(g)?"<table>"!==m[1]||ga.test(g)?0:i:i.firstChild,f=g&&g.childNodes.length;while(f--)n.nodeName(k=g.childNodes[f],"tbody")&&!k.childNodes.length&&g.removeChild(k)}n.merge(q,i.childNodes),i.textContent="";while(i.firstChild)i.removeChild(i.firstChild);i=p.lastChild}else q.push(b.createTextNode(g));i&&p.removeChild(i),l.appendChecked||n.grep(da(q,"input"),ha),r=0;while(g=q[r++])if(d&&n.inArray(g,d)>-1)e&&e.push(g);else if(h=n.contains(g.ownerDocument,g),i=da(p.appendChild(g),"script"),h&&ea(i),c){f=0;while(g=i[f++])$.test(g.type||"")&&c.push(g)}return i=null,p}!function(){var b,c,e=d.createElement("div");for(b in{submit:!0,change:!0,focusin:!0})c="on"+b,(l[b]=c in a)||(e.setAttribute(c,"t"),l[b]=!1===e.attributes[c].expando);e=null}();var ja=/^(?:input|select|textarea)$/i,ka=/^key/,la=/^(?:mouse|pointer|contextmenu|drag|drop)|click/,ma=/^(?:focusinfocus|focusoutblur)$/,na=/^([^.]*)(?:.(.+)|)/;function oa(){return!0}function pa(){return!1}function qa(){try{return d.activeElement}catch(a){}}function ra(a,b,c,d,e,f){var g,h;if("object"==typeof b){"string"!=typeof c&&(d=d||c,c=void 0);for(h in b)ra(a,h,c,d,b[h],f);return a}if(null==d&&null==e?(e=c,d=c=void 0):null==e&&("string"==typeof c?(e=d,d=void 0):(e=d,d=c,c=void 0)),!1===e)e=pa;else if(!e)return a;return 1===f&&(g=e,e=function(a){return n().off(a),g.apply(this,arguments)},e.guid=g.guid||(g.guid=n.guid++)),a.each(function(){n.event.add(this,b,e,d,c)})}n.event={global:{},add:function(a,b,c,d,e){var f,g,h,i,j,k,l,m,o,p,q,r=n._data(a);if(r){c.handler&&(i=c,c=i.handler,e=i.selector),c.guid||(c.guid=n.guid++),(g=r.events)||(g=r.events={}),(k=r.handle)||(k=r.handle=function(a){return void 0===n||a&&n.event.triggered===a.type?void 0:n.event.dispatch.apply(k.elem,arguments)},k.elem=a),b=(b||"").match(F)||[""],h=b.length;while(h--)f=na.exec(b[h])||[],o=q=f[1],p=(f[2]||"").split(".").sort(),o&&(j=n.event.special[o]||{},o=(e?j.delegateType:j.bindType)||o,j=n.event.special[o]||{},l=n.extend({type:o,origType:q,data:d,handler:c,guid:c.guid,selector:e,needsContext:e&&n.expr.match.needsContext.test(e),namespace:p.join(".")},i),(m=g[o])||(m=g[o]=[],m.delegateCount=0,j.setup&&!1!==j.setup.call(a,d,p,k)||(a.addEventListener?a.addEventListener(o,k,!1):a.attachEvent&&a.attachEvent("on"+o,k))),j.add&&(j.add.call(a,l),l.handler.guid||(l.handler.guid=c.guid)),e?m.splice(m.delegateCount++,0,l):m.push(l),n.event.global[o]=!0);a=null}},remove:function(a,b,c,d,e){var f,g,h,i,j,k,l,m,o,p,q,r=n.hasData(a)&&n._data(a);if(r&&(k=r.events)){b=(b||"").match(F)||[""],j=b.length;while(j--)if(h=na.exec(b[j])||[],o=q=h[1],p=(h[2]||"").split(".").sort(),o){l=n.event.special[o]||{},o=(d?l.delegateType:l.bindType)||o,m=k[o]||[],h=h[2]&&new RegExp("(^|\.)"+p.join("\.(?:.*\.|)")+"(\.|$)"),i=f=m.length;while(f--)g=m[f],!e&&q!==g.origType||c&&c.guid!==g.guid||h&&!h.test(g.namespace)||d&&d!==g.selector&&("**"!==d||!g.selector)||(m.splice(f,1),g.selector&&m.delegateCount--,l.remove&&l.remove.call(a,g));i&&!m.length&&(l.teardown&&!1!==l.teardown.call(a,p,r.handle)||n.removeEvent(a,o,r.handle),delete k[o])}else for(o in k)n.event.remove(a,o+b[j],c,d,!0);n.isEmptyObject(k)&&(delete r.handle,n._removeData(a,"events"))}},trigger:function(b,c,e,f){var g,h,i,j,l,m,o,p=[e||d],q=k.call(b,"type")?b.type:b,r=k.call(b,"namespace")?b.namespace.split("."):[];if(i=m=e=e||d,3!==e.nodeType&&8!==e.nodeType&&!ma.test(q+n.event.triggered)&&(q.indexOf(".")>-1&&(r=q.split("."),q=r.shift(),r.sort()),h=q.indexOf(":")<0&&"on"+q,b=b[n.expando]?b:new n.Event(q,"object"==typeof b&&b),b.isTrigger=f?2:3,b.namespace=r.join("."),b.rnamespace=b.namespace?new RegExp("(^|\.)"+r.join("\.(?:.*\.|)")+"(\.|$)"):null,b.result=void 0,b.target||(b.target=e),c=null==c?[b]:n.makeArray(c,[b]),l=n.event.special[q]||{},f||!l.trigger||!1!==l.trigger.apply(e,c))){if(!f&&!l.noBubble&&!n.isWindow(e)){for(j=l.delegateType||q,ma.test(j+q)||(i=i.parentNode);i;i=i.parentNode)p.push(i),m=i;m===(e.ownerDocument||d)&&p.push(m.defaultView||m.parentWindow||a)}o=0;while((i=p[o++])&&!b.isPropagationStopped())b.type=o>1?j:l.bindType||q,g=(n._data(i,"events")||{})[b.type]&&n._data(i,"handle"),g&&g.apply(i,c),(g=h&&i[h])&&g.apply&&L(i)&&(b.result=g.apply(i,c),!1===b.result&&b.preventDefault());if(b.type=q,!f&&!b.isDefaultPrevented()&&(!l._default||!1===l._default.apply(p.pop(),c))&&L(e)&&h&&e[q]&&!n.isWindow(e)){m=e[h],m&&(e[h]=null),n.event.triggered=q;try{e[q]()}catch(s){}n.event.triggered=void 0,m&&(e[h]=m)}return b.result}},dispatch:function(a){a=n.event.fix(a);var b,c,d,f,g,h=[],i=e.call(arguments),j=(n._data(this,"events")||{})[a.type]||[],k=n.event.special[a.type]||{};if(i[0]=a,a.delegateTarget=this,!k.preDispatch||!1!==k.preDispatch.call(this,a)){h=n.event.handlers.call(this,a,j),b=0;while((f=h[b++])&&!a.isPropagationStopped()){a.currentTarget=f.elem,c=0;while((g=f.handlers[c++])&&!a.isImmediatePropagationStopped())a.rnamespace&&!a.rnamespace.test(g.namespace)||(a.handleObj=g,a.data=g.data,void 0!==(d=((n.event.special[g.origType]||{}).handle||g.handler).apply(f.elem,i))&&!1===(a.result=d)&&(a.preventDefault(),a.stopPropagation()))}return k.postDispatch&&k.postDispatch.call(this,a),a.result}},handlers:function(a,b){var c,d,e,f,g=[],h=b.delegateCount,i=a.target;if(h&&i.nodeType&&("click"!==a.type||isNaN(a.button)||a.button<1))for(;i!=this;i=i.parentNode||this)if(1===i.nodeType&&(!0!==i.disabled||"click"!==a.type)){for(d=[],c=0;c<h;c++)f=b[c],e=f.selector+" ",void 0===d[e]&&(d[e]=f.needsContext?n(e,this).index(i)>-1:n.find(e,this,null,[i]).length),d[e]&&d.push(f);d.length&&g.push({elem:i,handlers:d})}return h<b.length&&g.push({elem:this,handlers:b.slice(h)}),g},fix:function(a){if(a[n.expando])return a;var b,c,e,f=a.type,g=a,h=this.fixHooks[f];h||(this.fixHooks[f]=h=la.test(f)?this.mouseHooks:ka.test(f)?this.keyHooks:{}),e=h.props?this.props.concat(h.props):this.props,a=new n.Event(g),b=e.length;while(b--)c=e[b],a[c]=g[c];return a.target||(a.target=g.srcElement||d),3===a.target.nodeType&&(a.target=a.target.parentNode),a.metaKey=!!a.metaKey,h.filter?h.filter(a,g):a},props:"altKey bubbles cancelable ctrlKey currentTarget detail eventPhase metaKey relatedTarget shiftKey target timeStamp view which".split(" "),fixHooks:{},keyHooks:{props:"char charCode key keyCode".split(" "),filter:function(a,b){return null==a.which&&(a.which=null!=b.charCode?b.charCode:b.keyCode),a}},mouseHooks:{props:"button buttons clientX clientY fromElement offsetX offsetY pageX pageY screenX screenY toElement".split(" "),filter:function(a,b){var c,e,f,g=b.button,h=b.fromElement;return null==a.pageX&&null!=b.clientX&&(e=a.target.ownerDocument||d,f=e.documentElement,c=e.body,a.pageX=b.clientX+(f&&f.scrollLeft||c&&c.scrollLeft||0)-(f&&f.clientLeft||c&&c.clientLeft||0),a.pageY=b.clientY+(f&&f.scrollTop||c&&c.scrollTop||0)-(f&&f.clientTop||c&&c.clientTop||0)),!a.relatedTarget&&h&&(a.relatedTarget=h===a.target?b.toElement:h),a.which||void 0===g||(a.which=1&g?1:2&g?3:4&g?2:0),a}},special:{load:{noBubble:!0},focus:{trigger:function(){if(this!==qa()&&this.focus)try{return this.focus(),!1}catch(a){}},delegateType:"focusin"},blur:{trigger:function(){if(this===qa()&&this.blur)return this.blur(),!1},delegateType:"focusout"},click:{trigger:function(){if(n.nodeName(this,"input")&&"checkbox"===this.type&&this.click)return this.click(),!1},_default:function(a){return n.nodeName(a.target,"a")}},beforeunload:{postDispatch:function(a){void 0!==a.result&&a.originalEvent&&(a.originalEvent.returnValue=a.result)}}},simulate:function(a,b,c){var d=n.extend(new n.Event,c,{type:a,isSimulated:!0});n.event.trigger(d,null,b),d.isDefaultPrevented()&&c.preventDefault()}},n.removeEvent=d.removeEventListener?function(a,b,c){a.removeEventListener&&a.removeEventListener(b,c)}:function(a,b,c){var d="on"+b;a.detachEvent&&(void 0===a[d]&&(a[d]=null),a.detachEvent(d,c))},n.Event=function(a,b){if(!(this instanceof n.Event))return new n.Event(a,b);a&&a.type?(this.originalEvent=a,this.type=a.type,this.isDefaultPrevented=a.defaultPrevented||void 0===a.defaultPrevented&&!1===a.returnValue?oa:pa):this.type=a,b&&n.extend(this,b),this.timeStamp=a&&a.timeStamp||n.now(),this[n.expando]=!0},n.Event.prototype={constructor:n.Event,isDefaultPrevented:pa,isPropagationStopped:pa,isImmediatePropagationStopped:pa,preventDefault:function(){var a=this.originalEvent;this.isDefaultPrevented=oa,a&&(a.preventDefault?a.preventDefault():a.returnValue=!1)},stopPropagation:function(){var a=this.originalEvent;this.isPropagationStopped=oa,a&&!this.isSimulated&&(a.stopPropagation&&a.stopPropagation(),a.cancelBubble=!0)},stopImmediatePropagation:function(){var a=this.originalEvent;this.isImmediatePropagationStopped=oa,a&&a.stopImmediatePropagation&&a.stopImmediatePropagation(),this.stopPropagation()}},n.each({mouseenter:"mouseover",mouseleave:"mouseout",pointerenter:"pointerover",pointerleave:"pointerout"},function(a,b){n.event.special[a]={delegateType:b,bindType:b,handle:function(a){var c,d=this,e=a.relatedTarget,f=a.handleObj;return e&&(e===d||n.contains(d,e))||(a.type=f.origType,c=f.handler.apply(this,arguments),a.type=b),c}}}),l.submit||(n.event.special.submit={setup:function(){if(n.nodeName(this,"form"))return!1;n.event.add(this,"click._submit keypress._submit",function(a){var b=a.target,c=n.nodeName(b,"input")||n.nodeName(b,"button")?n.prop(b,"form"):void 0;c&&!n._data(c,"submit")&&(n.event.add(c,"submit._submit",function(a){a._submitBubble=!0}),n._data(c,"submit",!0))})},postDispatch:function(a){a._submitBubble&&(delete a._submitBubble,this.parentNode&&!a.isTrigger&&n.event.simulate("submit",this.parentNode,a))},teardown:function(){if(n.nodeName(this,"form"))return!1;n.event.remove(this,"._submit")}}),l.change||(n.event.special.change={setup:function(){if(ja.test(this.nodeName))return"checkbox"!==this.type&&"radio"!==this.type||(n.event.add(this,"propertychange._change",function(a){"checked"===a.originalEvent.propertyName&&(this._justChanged=!0)}),n.event.add(this,"click._change",function(a){this._justChanged&&!a.isTrigger&&(this._justChanged=!1),n.event.simulate("change",this,a)})),!1;n.event.add(this,"beforeactivate._change",function(a){var b=a.target;ja.test(b.nodeName)&&!n._data(b,"change")&&(n.event.add(b,"change._change",function(a){!this.parentNode||a.isSimulated||a.isTrigger||n.event.simulate("change",this.parentNode,a)}),n._data(b,"change",!0))})},handle:function(a){var b=a.target;if(this!==b||a.isSimulated||a.isTrigger||"radio"!==b.type&&"checkbox"!==b.type)return a.handleObj.handler.apply(this,arguments)},teardown:function(){return n.event.remove(this,"._change"),!ja.test(this.nodeName)}}),l.focusin||n.each({focus:"focusin",blur:"focusout"},function(a,b){var c=function(a){n.event.simulate(b,a.target,n.event.fix(a))};n.event.special[b]={setup:function(){var d=this.ownerDocument||this,e=n._data(d,b);e||d.addEventListener(a,c,!0),n._data(d,b,(e||0)+1)},teardown:function(){var d=this.ownerDocument||this,e=n._data(d,b)-1;e?n._data(d,b,e):(d.removeEventListener(a,c,!0),n._removeData(d,b))}}}),n.fn.extend({on:function(a,b,c,d){return ra(this,a,b,c,d)},one:function(a,b,c,d){return ra(this,a,b,c,d,1)},off:function(a,b,c){var d,e;if(a&&a.preventDefault&&a.handleObj)return d=a.handleObj,n(a.delegateTarget).off(d.namespace?d.origType+"."+d.namespace:d.origType,d.selector,d.handler),this;if("object"==typeof a){for(e in a)this.off(e,b,a[e]);return this}return!1!==b&&"function"!=typeof b||(c=b,b=void 0),!1===c&&(c=pa),this.each(function(){n.event.remove(this,a,c,b)})},trigger:function(a,b){return this.each(function(){n.event.trigger(a,b,this)})},triggerHandler:function(a,b){var c=this[0];if(c)return n.event.trigger(a,b,c,!0)}});var sa=/ jQueryd+="(?:null|d+)"/g,ta=new RegExp("<(?:"+aa+")[\s/>]","i"),ua=/<(?!area|br|col|embed|hr|img|input|link|meta|param)(([w:-]+)[^>]*)/>/gi,va=/<script|<style|<link/i,wa=/checkeds*(?:[^=]|=s*.checked.)/i,xa=/^true/(.*)/,ya=/^s*<!(?:[CDATA[|--)|(?:]]|--)>s*$/g,za=ba(d),Aa=za.appendChild(d.createElement("div"));function Ba(a,b){return n.nodeName(a,"table")&&n.nodeName(11!==b.nodeType?b:b.firstChild,"tr")?a.getElementsByTagName("tbody")[0]||a.appendChild(a.ownerDocument.createElement("tbody")):a}function Ca(a){return a.type=(null!==n.find.attr(a,"type"))+"/"+a.type,a}function Da(a){var b=xa.exec(a.type);return b?a.type=b[1]:a.removeAttribute("type"),a}function Ea(a,b){if(1===b.nodeType&&n.hasData(a)){var c,d,e,f=n._data(a),g=n._data(b,f),h=f.events;if(h){delete g.handle,g.events={};for(c in h)for(d=0,e=h[c].length;d<e;d++)n.event.add(b,c,h[c][d])}g.data&&(g.data=n.extend({},g.data))}}function Fa(a,b){var c,d,e;if(1===b.nodeType){if(c=b.nodeName.toLowerCase(),!l.noCloneEvent&&b[n.expando]){e=n._data(b);for(d in e.events)n.removeEvent(b,d,e.handle);b.removeAttribute(n.expando)}"script"===c&&b.text!==a.text?(Ca(b).text=a.text,Da(b)):"object"===c?(b.parentNode&&(b.outerHTML=a.outerHTML),l.html5Clone&&a.innerHTML&&!n.trim(b.innerHTML)&&(b.innerHTML=a.innerHTML)):"input"===c&&Y.test(a.type)?(b.defaultChecked=b.checked=a.checked,b.value!==a.value&&(b.value=a.value)):"option"===c?b.defaultSelected=b.selected=a.defaultSelected:"input"!==c&&"textarea"!==c||(b.defaultValue=a.defaultValue)}}function Ga(a,b,c,d){b=f.apply([],b);var e,g,h,i,j,k,m=0,o=a.length,p=o-1,q=b[0],r=n.isFunction(q);if(r||o>1&&"string"==typeof q&&!l.checkClone&&wa.test(q))return a.each(function(e){var f=a.eq(e);r&&(b[0]=q.call(this,e,f.html())),Ga(f,b,c,d)});if(o&&(k=ia(b,a[0].ownerDocument,!1,a,d),e=k.firstChild,1===k.childNodes.length&&(k=e),e||d)){for(i=n.map(da(k,"script"),Ca),h=i.length;m<o;m++)g=k,m!==p&&(g=n.clone(g,!0,!0),h&&n.merge(i,da(g,"script"))),c.call(a[m],g,m);if(h)for(j=i[i.length-1].ownerDocument,n.map(i,Da),m=0;m<h;m++)g=i[m],$.test(g.type||"")&&!n._data(g,"globalEval")&&n.contains(j,g)&&(g.src?n._evalUrl&&n._evalUrl(g.src):n.globalEval((g.text||g.textContent||g.innerHTML||"").replace(ya,"")));k=e=null}return a}function Ha(a,b,c){for(var d,e=b?n.filter(b,a):a,f=0;null!=(d=e[f]);f++)c||1!==d.nodeType||n.cleanData(da(d)),d.parentNode&&(c&&n.contains(d.ownerDocument,d)&&ea(da(d,"script")),d.parentNode.removeChild(d));return a}n.extend({htmlPrefilter:function(a){return a.replace(ua,"<$1></$2>")},clone:function(a,b,c){var d,e,f,g,h,i=n.contains(a.ownerDocument,a);if(l.html5Clone||n.isXMLDoc(a)||!ta.test("<"+a.nodeName+">")?f=a.cloneNode(!0):(Aa.innerHTML=a.outerHTML,Aa.removeChild(f=Aa.firstChild)),!(l.noCloneEvent&&l.noCloneChecked||1!==a.nodeType&&11!==a.nodeType||n.isXMLDoc(a)))for(d=da(f),h=da(a),g=0;null!=(e=h[g]);++g)d[g]&&Fa(e,d[g]);if(b)if(c)for(h=h||da(a),d=d||da(f),g=0;null!=(e=h[g]);g++)Ea(e,d[g]);else Ea(a,f);return d=da(f,"script"),d.length>0&&ea(d,!i&&da(a,"script")),d=h=e=null,f},cleanData:function(a,b){for(var d,e,f,g,h=0,i=n.expando,j=n.cache,k=l.attributes,m=n.event.special;null!=(d=a[h]);h++)if((b||L(d))&&(f=d[i],g=f&&j[f])){if(g.events)for(e in g.events)m[e]?n.event.remove(d,e):n.removeEvent(d,e,g.handle);j[f]&&(delete j[f],k||void 0===d.removeAttribute?d[i]=void 0:d.removeAttribute(i),c.push(f))}}}),n.fn.extend({domManip:Ga,detach:function(a){return Ha(this,a,!0)},remove:function(a){return Ha(this,a)},text:function(a){return X(this,function(a){return void 0===a?n.text(this):this.empty().append((this[0]&&this[0].ownerDocument||d).createTextNode(a))},null,a,arguments.length)},append:function(){return Ga(this,arguments,function(a){if(1===this.nodeType||11===this.nodeType||9===this.nodeType){Ba(this,a).appendChild(a)}})},prepend:function(){return Ga(this,arguments,function(a){if(1===this.nodeType||11===this.nodeType||9===this.nodeType){var b=Ba(this,a);b.insertBefore(a,b.firstChild)}})},before:function(){return Ga(this,arguments,function(a){this.parentNode&&this.parentNode.insertBefore(a,this)})},after:function(){return Ga(this,arguments,function(a){this.parentNode&&this.parentNode.insertBefore(a,this.nextSibling)})},empty:function(){for(var a,b=0;null!=(a=this[b]);b++){1===a.nodeType&&n.cleanData(da(a,!1));while(a.firstChild)a.removeChild(a.firstChild);a.options&&n.nodeName(a,"select")&&(a.options.length=0)}return this},clone:function(a,b){return a=null!=a&&a,b=null==b?a:b,this.map(function(){return n.clone(this,a,b)})},html:function(a){return X(this,function(a){var b=this[0]||{},c=0,d=this.length;if(void 0===a)return 1===b.nodeType?b.innerHTML.replace(sa,""):void 0;if("string"==typeof a&&!va.test(a)&&(l.htmlSerialize||!ta.test(a))&&(l.leadingWhitespace||!_.test(a))&&!ca[(Z.exec(a)||["",""])[1].toLowerCase()]){a=n.htmlPrefilter(a);try{for(;c<d;c++)b=this[c]||{},1===b.nodeType&&(n.cleanData(da(b,!1)),b.innerHTML=a);b=0}catch(e){}}b&&this.empty().append(a)},null,a,arguments.length)},replaceWith:function(){var a=[];return Ga(this,arguments,function(b){var c=this.parentNode;n.inArray(this,a)<0&&(n.cleanData(da(this)),c&&c.replaceChild(b,this))},a)}}),n.each({appendTo:"append",prependTo:"prepend",insertBefore:"before",insertAfter:"after",replaceAll:"replaceWith"},function(a,b){n.fn[a]=function(a){for(var c,d=0,e=[],f=n(a),h=f.length-1;d<=h;d++)c=d===h?this:this.clone(!0),n(f[d])[b](c),g.apply(e,c.get());return this.pushStack(e)}});var Ia,Ja={HTML:"block",BODY:"block"};function Ka(a,b){var c=n(b.createElement(a)).appendTo(b.body),d=n.css(c[0],"display");return c.detach(),d}function La(a){var b=d,c=Ja[a];return c||(c=Ka(a,b),"none"!==c&&c||(Ia=(Ia||n("<iframe frameborder='0' width='0' height='0'/>")).appendTo(b.documentElement),b=(Ia[0].contentWindow||Ia[0].contentDocument).document,b.write(),b.close(),c=Ka(a,b),Ia.detach()),Ja[a]=c),c}var Ma=/^margin/,Na=new RegExp("^("+S+")(?!px)[a-z%]+$","i"),Oa=function(a,b,c,d){var e,f,g={};for(f in b)g[f]=a.style[f],a.style[f]=b[f];e=c.apply(a,d||[]);for(f in b)a.style[f]=g[f];return e},Pa=d.documentElement;!function(){var b,c,e,f,g,h,i=d.createElement("div"),j=d.createElement("div");function k(){var k,l,m=d.documentElement;m.appendChild(i),j.style.cssText="-webkit-box-sizing:border-box;box-sizing:border-box;position:relative;display:block;margin:auto;border:1px;padding:1px;top:1%;width:50%",b=e=h=!1,c=g=!0,a.getComputedStyle&&(l=a.getComputedStyle(j),b="1%"!==(l||{}).top,h="2px"===(l||{}).marginLeft,e="4px"===(l||{width:"4px"}).width,j.style.marginRight="50%",c="4px"===(l||{marginRight:"4px"}).marginRight,k=j.appendChild(d.createElement("div")),k.style.cssText=j.style.cssText="-webkit-box-sizing:content-box;-moz-box-sizing:content-box;box-sizing:content-box;display:block;margin:0;border:0;padding:0",k.style.marginRight=k.style.width="0",j.style.width="1px",g=!parseFloat((a.getComputedStyle(k)||{}).marginRight),j.removeChild(k)),j.style.display="none",f=0===j.getClientRects().length,f&&(j.style.display="",j.innerHTML="<table><tr><td></td><td>t</td></tr></table>",j.childNodes[0].style.borderCollapse="separate",k=j.getElementsByTagName("td"),k[0].style.cssText="margin:0;border:0;padding:0;display:none",(f=0===k[0].offsetHeight)&&(k[0].style.display="",k[1].style.display="none",f=0===k[0].offsetHeight)),m.removeChild(i)}j.style&&(j.style.cssText="float:left;opacity:.5",l.opacity="0.5"===j.style.opacity,l.cssFloat=!!j.style.cssFloat,j.style.backgroundClip="content-box",j.cloneNode(!0).style.backgroundClip="",l.clearCloneStyle="content-box"===j.style.backgroundClip,i=d.createElement("div"),i.style.cssText="border:0;width:8px;height:0;top:0;left:-9999px;padding:0;margin-top:1px;position:absolute",j.innerHTML="",i.appendChild(j),l.boxSizing=""===j.style.boxSizing||""===j.style.MozBoxSizing||""===j.style.WebkitBoxSizing,n.extend(l,{reliableHiddenOffsets:function(){return null==b&&k(),f},boxSizingReliable:function(){return null==b&&k(),e},pixelMarginRight:function(){return null==b&&k(),c},pixelPosition:function(){return null==b&&k(),b},reliableMarginRight:function(){return null==b&&k(),g},reliableMarginLeft:function(){return null==b&&k(),h}}))}();var Qa,Ra,Sa=/^(top|right|bottom|left)$/;a.getComputedStyle?(Qa=function(b){var c=b.ownerDocument.defaultView;return c&&c.opener||(c=a),c.getComputedStyle(b)},Ra=function(a,b,c){var d,e,f,g,h=a.style;return c=c||Qa(a),g=c?c.getPropertyValue(b)||c[b]:void 0,""!==g&&void 0!==g||n.contains(a.ownerDocument,a)||(g=n.style(a,b)),c&&!l.pixelMarginRight()&&Na.test(g)&&Ma.test(b)&&(d=h.width,e=h.minWidth,f=h.maxWidth,h.minWidth=h.maxWidth=h.width=g,g=c.width,h.width=d,h.minWidth=e,h.maxWidth=f),void 0===g?g:g+""}):Pa.currentStyle&&(Qa=function(a){return a.currentStyle},Ra=function(a,b,c){var d,e,f,g,h=a.style;return c=c||Qa(a),g=c?c[b]:void 0,null==g&&h&&h[b]&&(g=h[b]),Na.test(g)&&!Sa.test(b)&&(d=h.left,e=a.runtimeStyle,f=e&&e.left,f&&(e.left=a.currentStyle.left),h.left="fontSize"===b?"1em":g,g=h.pixelLeft+"px",h.left=d,f&&(e.left=f)),void 0===g?g:g+""||"auto"});function Ta(a,b){return{get:function(){return a()?void delete this.get:(this.get=b).apply(this,arguments)}}}var Ua=/alpha([^)]*)/i,Va=/opacitys*=s*([^)]*)/i,Wa=/^(none|table(?!-c[ea]).+)/,Xa=new RegExp("^("+S+")(.*)$","i"),Ya={position:"absolute",visibility:"hidden",display:"block"},Za={letterSpacing:"0",fontWeight:"400"},$a=["Webkit","O","Moz","ms"],_a=d.createElement("div").style;function ab(a){if(a in _a)return a;var b=a.charAt(0).toUpperCase()+a.slice(1),c=$a.length;while(c--)if((a=$a[c]+b)in _a)return a}function bb(a,b){for(var c,d,e,f=[],g=0,h=a.length;g<h;g++)d=a[g],d.style&&(f[g]=n._data(d,"olddisplay"),c=d.style.display,b?(f[g]||"none"!==c||(d.style.display=""),""===d.style.display&&V(d)&&(f[g]=n._data(d,"olddisplay",La(d.nodeName)))):(e=V(d),(c&&"none"!==c||!e)&&n._data(d,"olddisplay",e?c:n.css(d,"display"))));for(g=0;g<h;g++)d=a[g],d.style&&(b&&"none"!==d.style.display&&""!==d.style.display||(d.style.display=b?f[g]||"":"none"));return a}function cb(a,b,c){var d=Xa.exec(b);return d?Math.max(0,d[1]-(c||0))+(d[2]||"px"):b}function db(a,b,c,d,e){for(var f=c===(d?"border":"content")?4:"width"===b?1:0,g=0;f<4;f+=2)"margin"===c&&(g+=n.css(a,c+U[f],!0,e)),d?("content"===c&&(g-=n.css(a,"padding"+U[f],!0,e)),"margin"!==c&&(g-=n.css(a,"border"+U[f]+"Width",!0,e))):(g+=n.css(a,"padding"+U[f],!0,e),"padding"!==c&&(g+=n.css(a,"border"+U[f]+"Width",!0,e)));return g}function eb(a,b,c){var d=!0,e="width"===b?a.offsetWidth:a.offsetHeight,f=Qa(a),g=l.boxSizing&&"border-box"===n.css(a,"boxSizing",!1,f);if(e<=0||null==e){if(e=Ra(a,b,f),(e<0||null==e)&&(e=a.style[b]),Na.test(e))return e;d=g&&(l.boxSizingReliable()||e===a.style[b]),e=parseFloat(e)||0}return e+db(a,b,c||(g?"border":"content"),d,f)+"px"}n.extend({cssHooks:{opacity:{get:function(a,b){if(b){var c=Ra(a,"opacity");return""===c?"1":c}}}},cssNumber:{animationIterationCount:!0,columnCount:!0,fillOpacity:!0,flexGrow:!0,flexShrink:!0,fontWeight:!0,lineHeight:!0,opacity:!0,order:!0,orphans:!0,widows:!0,zIndex:!0,zoom:!0},cssProps:{float:l.cssFloat?"cssFloat":"styleFloat"},style:function(a,b,c,d){if(a&&3!==a.nodeType&&8!==a.nodeType&&a.style){var e,f,g,h=n.camelCase(b),i=a.style;if(b=n.cssProps[h]||(n.cssProps[h]=ab(h)||h),g=n.cssHooks[b]||n.cssHooks[h],void 0===c)return g&&"get"in g&&void 0!==(e=g.get(a,!1,d))?e:i[b];if(f=typeof c,"string"===f&&(e=T.exec(c))&&e[1]&&(c=W(a,b,e),f="number"),null!=c&&c===c&&("number"===f&&(c+=e&&e[3]||(n.cssNumber[h]?"":"px")),l.clearCloneStyle||""!==c||0!==b.indexOf("background")||(i[b]="inherit"),!(g&&"set"in g&&void 0===(c=g.set(a,c,d)))))try{i[b]=c}catch(j){}}},css:function(a,b,c,d){var e,f,g,h=n.camelCase(b);return b=n.cssProps[h]||(n.cssProps[h]=ab(h)||h),g=n.cssHooks[b]||n.cssHooks[h],g&&"get"in g&&(f=g.get(a,!0,c)),void 0===f&&(f=Ra(a,b,d)),"normal"===f&&b in Za&&(f=Za[b]),""===c||c?(e=parseFloat(f),!0===c||isFinite(e)?e||0:f):f}}),n.each(["height","width"],function(a,b){n.cssHooks[b]={get:function(a,c,d){if(c)return Wa.test(n.css(a,"display"))&&0===a.offsetWidth?Oa(a,Ya,function(){return eb(a,b,d)}):eb(a,b,d)},set:function(a,c,d){var e=d&&Qa(a);return cb(a,c,d?db(a,b,d,l.boxSizing&&"border-box"===n.css(a,"boxSizing",!1,e),e):0)}}}),l.opacity||(n.cssHooks.opacity={get:function(a,b){return Va.test((b&&a.currentStyle?a.currentStyle.filter:a.style.filter)||"")?.01*parseFloat(RegExp.$1)+"":b?"1":""},set:function(a,b){var c=a.style,d=a.currentStyle,e=n.isNumeric(b)?"alpha(opacity="+100*b+")":"",f=d&&d.filter||c.filter||"";c.zoom=1,(b>=1||""===b)&&""===n.trim(f.replace(Ua,""))&&c.removeAttribute&&(c.removeAttribute("filter"),""===b||d&&!d.filter)||(c.filter=Ua.test(f)?f.replace(Ua,e):f+" "+e)}}),n.cssHooks.marginRight=Ta(l.reliableMarginRight,function(a,b){if(b)return Oa(a,{display:"inline-block"},Ra,[a,"marginRight"])}),n.cssHooks.marginLeft=Ta(l.reliableMarginLeft,function(a,b){if(b)return(parseFloat(Ra(a,"marginLeft"))||(n.contains(a.ownerDocument,a)?a.getBoundingClientRect().left-Oa(a,{marginLeft:0},function(){return a.getBoundingClientRect().left}):0))+"px"}),n.each({ margin:"",padding:"",border:"Width"},function(a,b){n.cssHooks[a+b]={expand:function(c){for(var d=0,e={},f="string"==typeof c?c.split(" "):[c];d<4;d++)e[a+U[d]+b]=f[d]||f[d-2]||f[0];return e}},Ma.test(a)||(n.cssHooks[a+b].set=cb)}),n.fn.extend({css:function(a,b){return X(this,function(a,b,c){var d,e,f={},g=0;if(n.isArray(b)){for(d=Qa(a),e=b.length;g<e;g++)f[b[g]]=n.css(a,b[g],!1,d);return f}return void 0!==c?n.style(a,b,c):n.css(a,b)},a,b,arguments.length>1)},show:function(){return bb(this,!0)},hide:function(){return bb(this)},toggle:function(a){return"boolean"==typeof a?a?this.show():this.hide():this.each(function(){V(this)?n(this).show():n(this).hide()})}});function fb(a,b,c,d,e){return new fb.prototype.init(a,b,c,d,e)}n.Tween=fb,fb.prototype={constructor:fb,init:function(a,b,c,d,e,f){this.elem=a,this.prop=c,this.easing=e||n.easing._default,this.options=b,this.start=this.now=this.cur(),this.end=d,this.unit=f||(n.cssNumber[c]?"":"px")},cur:function(){var a=fb.propHooks[this.prop];return a&&a.get?a.get(this):fb.propHooks._default.get(this)},run:function(a){var b,c=fb.propHooks[this.prop];return this.options.duration?this.pos=b=n.easing[this.easing](a,this.options.duration*a,0,1,this.options.duration):this.pos=b=a,this.now=(this.end-this.start)*b+this.start,this.options.step&&this.options.step.call(this.elem,this.now,this),c&&c.set?c.set(this):fb.propHooks._default.set(this),this}},fb.prototype.init.prototype=fb.prototype,fb.propHooks={_default:{get:function(a){var b;return 1!==a.elem.nodeType||null!=a.elem[a.prop]&&null==a.elem.style[a.prop]?a.elem[a.prop]:(b=n.css(a.elem,a.prop,""),b&&"auto"!==b?b:0)},set:function(a){n.fx.step[a.prop]?n.fx.step[a.prop](a):1!==a.elem.nodeType||null==a.elem.style[n.cssProps[a.prop]]&&!n.cssHooks[a.prop]?a.elem[a.prop]=a.now:n.style(a.elem,a.prop,a.now+a.unit)}}},fb.propHooks.scrollTop=fb.propHooks.scrollLeft={set:function(a){a.elem.nodeType&&a.elem.parentNode&&(a.elem[a.prop]=a.now)}},n.easing={linear:function(a){return a},swing:function(a){return.5-Math.cos(a*Math.PI)/2},_default:"swing"},n.fx=fb.prototype.init,n.fx.step={};var gb,hb,ib=/^(?:toggle|show|hide)$/,jb=/queueHooks$/;function kb(){return a.setTimeout(function(){gb=void 0}),gb=n.now()}function lb(a,b){var c,d={height:a},e=0;for(b=b?1:0;e<4;e+=2-b)c=U[e],d["margin"+c]=d["padding"+c]=a;return b&&(d.opacity=d.width=a),d}function mb(a,b,c){for(var d,e=(pb.tweeners[b]||[]).concat(pb.tweeners["*"]),f=0,g=e.length;f<g;f++)if(d=e[f].call(c,b,a))return d}function nb(a,b,c){var d,e,f,g,h,i,j,k,m=this,o={},p=a.style,q=a.nodeType&&V(a),r=n._data(a,"fxshow");c.queue||(h=n._queueHooks(a,"fx"),null==h.unqueued&&(h.unqueued=0,i=h.empty.fire,h.empty.fire=function(){h.unqueued||i()}),h.unqueued++,m.always(function(){m.always(function(){h.unqueued--,n.queue(a,"fx").length||h.empty.fire()})})),1===a.nodeType&&("height"in b||"width"in b)&&(c.overflow=[p.overflow,p.overflowX,p.overflowY],j=n.css(a,"display"),"inline"===(k="none"===j?n._data(a,"olddisplay")||La(a.nodeName):j)&&"none"===n.css(a,"float")&&(l.inlineBlockNeedsLayout&&"inline"!==La(a.nodeName)?p.zoom=1:p.display="inline-block")),c.overflow&&(p.overflow="hidden",l.shrinkWrapBlocks()||m.always(function(){p.overflow=c.overflow[0],p.overflowX=c.overflow[1],p.overflowY=c.overflow[2]}));for(d in b)if(e=b[d],ib.exec(e)){if(delete b[d],f=f||"toggle"===e,e===(q?"hide":"show")){if("show"!==e||!r||void 0===r[d])continue;q=!0}o[d]=r&&r[d]||n.style(a,d)}else j=void 0;if(n.isEmptyObject(o))"inline"===("none"===j?La(a.nodeName):j)&&(p.display=j);else{r?"hidden"in r&&(q=r.hidden):r=n._data(a,"fxshow",{}),f&&(r.hidden=!q),q?n(a).show():m.done(function(){n(a).hide()}),m.done(function(){var b;n._removeData(a,"fxshow");for(b in o)n.style(a,b,o[b])});for(d in o)g=mb(q?r[d]:0,d,m),d in r||(r[d]=g.start,q&&(g.end=g.start,g.start="width"===d||"height"===d?1:0))}}function ob(a,b){var c,d,e,f,g;for(c in a)if(d=n.camelCase(c),e=b[d],f=a[c],n.isArray(f)&&(e=f[1],f=a[c]=f[0]),c!==d&&(a[d]=f,delete a[c]),(g=n.cssHooks[d])&&"expand"in g){f=g.expand(f),delete a[d];for(c in f)c in a||(a[c]=f[c],b[c]=e)}else b[d]=e}function pb(a,b,c){var d,e,f=0,g=pb.prefilters.length,h=n.Deferred().always(function(){delete i.elem}),i=function(){if(e)return!1;for(var b=gb||kb(),c=Math.max(0,j.startTime+j.duration-b),d=c/j.duration||0,f=1-d,g=0,i=j.tweens.length;g<i;g++)j.tweens[g].run(f);return h.notifyWith(a,[j,f,c]),f<1&&i?c:(h.resolveWith(a,[j]),!1)},j=h.promise({elem:a,props:n.extend({},b),opts:n.extend(!0,{specialEasing:{},easing:n.easing._default},c),originalProperties:b,originalOptions:c,startTime:gb||kb(),duration:c.duration,tweens:[],createTween:function(b,c){var d=n.Tween(a,j.opts,b,c,j.opts.specialEasing[b]||j.opts.easing);return j.tweens.push(d),d},stop:function(b){var c=0,d=b?j.tweens.length:0;if(e)return this;for(e=!0;c<d;c++)j.tweens[c].run(1);return b?(h.notifyWith(a,[j,1,0]),h.resolveWith(a,[j,b])):h.rejectWith(a,[j,b]),this}}),k=j.props;for(ob(k,j.opts.specialEasing);f<g;f++)if(d=pb.prefilters[f].call(j,a,k,j.opts))return n.isFunction(d.stop)&&(n._queueHooks(j.elem,j.opts.queue).stop=n.proxy(d.stop,d)),d;return n.map(k,mb,j),n.isFunction(j.opts.start)&&j.opts.start.call(a,j),n.fx.timer(n.extend(i,{elem:a,anim:j,queue:j.opts.queue})),j.progress(j.opts.progress).done(j.opts.done,j.opts.complete).fail(j.opts.fail).always(j.opts.always)}n.Animation=n.extend(pb,{tweeners:{"*":[function(a,b){var c=this.createTween(a,b);return W(c.elem,a,T.exec(b),c),c}]},tweener:function(a,b){n.isFunction(a)?(b=a,a=["*"]):a=a.match(F);for(var c,d=0,e=a.length;d<e;d++)c=a[d],pb.tweeners[c]=pb.tweeners[c]||[],pb.tweeners[c].unshift(b)},prefilters:[nb],prefilter:function(a,b){b?pb.prefilters.unshift(a):pb.prefilters.push(a)}}),n.speed=function(a,b,c){var d=a&&"object"==typeof a?n.extend({},a):{complete:c||!c&&b||n.isFunction(a)&&a,duration:a,easing:c&&b||b&&!n.isFunction(b)&&b};return d.duration=n.fx.off?0:"number"==typeof d.duration?d.duration:d.duration in n.fx.speeds?n.fx.speeds[d.duration]:n.fx.speeds._default,null!=d.queue&&!0!==d.queue||(d.queue="fx"),d.old=d.complete,d.complete=function(){n.isFunction(d.old)&&d.old.call(this),d.queue&&n.dequeue(this,d.queue)},d},n.fn.extend({fadeTo:function(a,b,c,d){return this.filter(V).css("opacity",0).show().end().animate({opacity:b},a,c,d)},animate:function(a,b,c,d){var e=n.isEmptyObject(a),f=n.speed(b,c,d),g=function(){var b=pb(this,n.extend({},a),f);(e||n._data(this,"finish"))&&b.stop(!0)};return g.finish=g,e||!1===f.queue?this.each(g):this.queue(f.queue,g)},stop:function(a,b,c){var d=function(a){var b=a.stop;delete a.stop,b(c)};return"string"!=typeof a&&(c=b,b=a,a=void 0),b&&!1!==a&&this.queue(a||"fx",[]),this.each(function(){var b=!0,e=null!=a&&a+"queueHooks",f=n.timers,g=n._data(this);if(e)g[e]&&g[e].stop&&d(g[e]);else for(e in g)g[e]&&g[e].stop&&jb.test(e)&&d(g[e]);for(e=f.length;e--;)f[e].elem!==this||null!=a&&f[e].queue!==a||(f[e].anim.stop(c),b=!1,f.splice(e,1));!b&&c||n.dequeue(this,a)})},finish:function(a){return!1!==a&&(a=a||"fx"),this.each(function(){var b,c=n._data(this),d=c[a+"queue"],e=c[a+"queueHooks"],f=n.timers,g=d?d.length:0;for(c.finish=!0,n.queue(this,a,[]),e&&e.stop&&e.stop.call(this,!0),b=f.length;b--;)f[b].elem===this&&f[b].queue===a&&(f[b].anim.stop(!0),f.splice(b,1));for(b=0;b<g;b++)d[b]&&d[b].finish&&d[b].finish.call(this);delete c.finish})}}),n.each(["toggle","show","hide"],function(a,b){var c=n.fn[b];n.fn[b]=function(a,d,e){return null==a||"boolean"==typeof a?c.apply(this,arguments):this.animate(lb(b,!0),a,d,e)}}),n.each({slideDown:lb("show"),slideUp:lb("hide"),slideToggle:lb("toggle"),fadeIn:{opacity:"show"},fadeOut:{opacity:"hide"},fadeToggle:{opacity:"toggle"}},function(a,b){n.fn[a]=function(a,c,d){return this.animate(b,a,c,d)}}),n.timers=[],n.fx.tick=function(){var a,b=n.timers,c=0;for(gb=n.now();c<b.length;c++)(a=b[c])()||b[c]!==a||b.splice(c--,1);b.length||n.fx.stop(),gb=void 0},n.fx.timer=function(a){n.timers.push(a),a()?n.fx.start():n.timers.pop()},n.fx.interval=13,n.fx.start=function(){hb||(hb=a.setInterval(n.fx.tick,n.fx.interval))},n.fx.stop=function(){a.clearInterval(hb),hb=null},n.fx.speeds={slow:600,fast:200,_default:400},n.fn.delay=function(b,c){return b=n.fx?n.fx.speeds[b]||b:b,c=c||"fx",this.queue(c,function(c,d){var e=a.setTimeout(c,b);d.stop=function(){a.clearTimeout(e)}})},function(){var a,b=d.createElement("input"),c=d.createElement("div"),e=d.createElement("select"),f=e.appendChild(d.createElement("option"));c=d.createElement("div"),c.setAttribute("className","t"),c.innerHTML=" <link/><table></table><a href='/a'>a</a><input type='checkbox'/>",a=c.getElementsByTagName("a")[0],b.setAttribute("type","checkbox"),c.appendChild(b),a=c.getElementsByTagName("a")[0],a.style.cssText="top:1px",l.getSetAttribute="t"!==c.className,l.style=/top/.test(a.getAttribute("style")),l.hrefNormalized="/a"===a.getAttribute("href"),l.checkOn=!!b.value,l.optSelected=f.selected,l.enctype=!!d.createElement("form").enctype,e.disabled=!0,l.optDisabled=!f.disabled,b=d.createElement("input"),b.setAttribute("value",""),l.input=""===b.getAttribute("value"),b.value="t",b.setAttribute("type","radio"),l.radioValue="t"===b.value}();var qb=/r/g,rb=/[x20trnf]+/g;n.fn.extend({val:function(a){var b,c,d,e=this[0];{if(arguments.length)return d=n.isFunction(a),this.each(function(c){var e;1===this.nodeType&&(e=d?a.call(this,c,n(this).val()):a,null==e?e="":"number"==typeof e?e+="":n.isArray(e)&&(e=n.map(e,function(a){return null==a?"":a+""})),(b=n.valHooks[this.type]||n.valHooks[this.nodeName.toLowerCase()])&&"set"in b&&void 0!==b.set(this,e,"value")||(this.value=e))});if(e)return(b=n.valHooks[e.type]||n.valHooks[e.nodeName.toLowerCase()])&&"get"in b&&void 0!==(c=b.get(e,"value"))?c:(c=e.value,"string"==typeof c?c.replace(qb,""):null==c?"":c)}}}),n.extend({valHooks:{option:{get:function(a){var b=n.find.attr(a,"value");return null!=b?b:n.trim(n.text(a)).replace(rb," ")}},select:{get:function(a){for(var b,c,d=a.options,e=a.selectedIndex,f="select-one"===a.type||e<0,g=f?null:[],h=f?e+1:d.length,i=e<0?h:f?e:0;i<h;i++)if(c=d[i],(c.selected||i===e)&&(l.optDisabled?!c.disabled:null===c.getAttribute("disabled"))&&(!c.parentNode.disabled||!n.nodeName(c.parentNode,"optgroup"))){if(b=n(c).val(),f)return b;g.push(b)}return g},set:function(a,b){var c,d,e=a.options,f=n.makeArray(b),g=e.length;while(g--)if(d=e[g],n.inArray(n.valHooks.option.get(d),f)>-1)try{d.selected=c=!0}catch(h){d.scrollHeight}else d.selected=!1;return c||(a.selectedIndex=-1),e}}}}),n.each(["radio","checkbox"],function(){n.valHooks[this]={set:function(a,b){if(n.isArray(b))return a.checked=n.inArray(n(a).val(),b)>-1}},l.checkOn||(n.valHooks[this].get=function(a){return null===a.getAttribute("value")?"on":a.value})});var sb,tb,ub=n.expr.attrHandle,vb=/^(?:checked|selected)$/i,wb=l.getSetAttribute,xb=l.input;n.fn.extend({attr:function(a,b){return X(this,n.attr,a,b,arguments.length>1)},removeAttr:function(a){return this.each(function(){n.removeAttr(this,a)})}}),n.extend({attr:function(a,b,c){var d,e,f=a.nodeType;if(3!==f&&8!==f&&2!==f)return void 0===a.getAttribute?n.prop(a,b,c):(1===f&&n.isXMLDoc(a)||(b=b.toLowerCase(),e=n.attrHooks[b]||(n.expr.match.bool.test(b)?tb:sb)),void 0!==c?null===c?void n.removeAttr(a,b):e&&"set"in e&&void 0!==(d=e.set(a,c,b))?d:(a.setAttribute(b,c+""),c):e&&"get"in e&&null!==(d=e.get(a,b))?d:(d=n.find.attr(a,b),null==d?void 0:d))},attrHooks:{type:{set:function(a,b){if(!l.radioValue&&"radio"===b&&n.nodeName(a,"input")){var c=a.value;return a.setAttribute("type",b),c&&(a.value=c),b}}}},removeAttr:function(a,b){var c,d,e=0,f=b&&b.match(F);if(f&&1===a.nodeType)while(c=f[e++])d=n.propFix[c]||c,n.expr.match.bool.test(c)?xb&&wb||!vb.test(c)?a[d]=!1:a[n.camelCase("default-"+c)]=a[d]=!1:n.attr(a,c,""),a.removeAttribute(wb?c:d)}}),tb={set:function(a,b,c){return!1===b?n.removeAttr(a,c):xb&&wb||!vb.test(c)?a.setAttribute(!wb&&n.propFix[c]||c,c):a[n.camelCase("default-"+c)]=a[c]=!0,c}},n.each(n.expr.match.bool.source.match(/w+/g),function(a,b){var c=ub[b]||n.find.attr;xb&&wb||!vb.test(b)?ub[b]=function(a,b,d){var e,f;return d||(f=ub[b],ub[b]=e,e=null!=c(a,b,d)?b.toLowerCase():null,ub[b]=f),e}:ub[b]=function(a,b,c){if(!c)return a[n.camelCase("default-"+b)]?b.toLowerCase():null}}),xb&&wb||(n.attrHooks.value={set:function(a,b,c){if(!n.nodeName(a,"input"))return sb&&sb.set(a,b,c);a.defaultValue=b}}),wb||(sb={set:function(a,b,c){var d=a.getAttributeNode(c);if(d||a.setAttributeNode(d=a.ownerDocument.createAttribute(c)),d.value=b+="","value"===c||b===a.getAttribute(c))return b}},ub.id=ub.name=ub.coords=function(a,b,c){var d;if(!c)return(d=a.getAttributeNode(b))&&""!==d.value?d.value:null},n.valHooks.button={get:function(a,b){var c=a.getAttributeNode(b);if(c&&c.specified)return c.value},set:sb.set},n.attrHooks.contenteditable={set:function(a,b,c){sb.set(a,""!==b&&b,c)}},n.each(["width","height"],function(a,b){n.attrHooks[b]={set:function(a,c){if(""===c)return a.setAttribute(b,"auto"),c}}})),l.style||(n.attrHooks.style={get:function(a){return a.style.cssText||void 0},set:function(a,b){return a.style.cssText=b+""}});var yb=/^(?:input|select|textarea|button|object)$/i,zb=/^(?:a|area)$/i;n.fn.extend({prop:function(a,b){return X(this,n.prop,a,b,arguments.length>1)},removeProp:function(a){return a=n.propFix[a]||a,this.each(function(){try{this[a]=void 0,delete this[a]}catch(b){}})}}),n.extend({prop:function(a,b,c){var d,e,f=a.nodeType;if(3!==f&&8!==f&&2!==f)return 1===f&&n.isXMLDoc(a)||(b=n.propFix[b]||b,e=n.propHooks[b]),void 0!==c?e&&"set"in e&&void 0!==(d=e.set(a,c,b))?d:a[b]=c:e&&"get"in e&&null!==(d=e.get(a,b))?d:a[b]},propHooks:{tabIndex:{get:function(a){var b=n.find.attr(a,"tabindex");return b?parseInt(b,10):yb.test(a.nodeName)||zb.test(a.nodeName)&&a.href?0:-1}}},propFix:{for:"htmlFor",class:"className"}}),l.hrefNormalized||n.each(["href","src"],function(a,b){n.propHooks[b]={get:function(a){return a.getAttribute(b,4)}}}),l.optSelected||(n.propHooks.selected={get:function(a){var b=a.parentNode;return b&&(b.selectedIndex,b.parentNode&&b.parentNode.selectedIndex),null},set:function(a){var b=a.parentNode;b&&(b.selectedIndex,b.parentNode&&b.parentNode.selectedIndex)}}),n.each(["tabIndex","readOnly","maxLength","cellSpacing","cellPadding","rowSpan","colSpan","useMap","frameBorder","contentEditable"],function(){n.propFix[this.toLowerCase()]=this}),l.enctype||(n.propFix.enctype="encoding");var Ab=/[trnf]/g;function Bb(a){return n.attr(a,"class")||""}n.fn.extend({addClass:function(a){var b,c,d,e,f,g,h,i=0;if(n.isFunction(a))return this.each(function(b){n(this).addClass(a.call(this,b,Bb(this)))});if("string"==typeof a&&a){b=a.match(F)||[];while(c=this[i++])if(e=Bb(c),d=1===c.nodeType&&(" "+e+" ").replace(Ab," ")){g=0;while(f=b[g++])d.indexOf(" "+f+" ")<0&&(d+=f+" ");h=n.trim(d),e!==h&&n.attr(c,"class",h)}}return this},removeClass:function(a){var b,c,d,e,f,g,h,i=0;if(n.isFunction(a))return this.each(function(b){n(this).removeClass(a.call(this,b,Bb(this)))});if(!arguments.length)return this.attr("class","");if("string"==typeof a&&a){b=a.match(F)||[];while(c=this[i++])if(e=Bb(c),d=1===c.nodeType&&(" "+e+" ").replace(Ab," ")){g=0;while(f=b[g++])while(d.indexOf(" "+f+" ")>-1)d=d.replace(" "+f+" "," ");h=n.trim(d),e!==h&&n.attr(c,"class",h)}}return this},toggleClass:function(a,b){var c=typeof a;return"boolean"==typeof b&&"string"===c?b?this.addClass(a):this.removeClass(a):n.isFunction(a)?this.each(function(c){n(this).toggleClass(a.call(this,c,Bb(this),b),b)}):this.each(function(){var b,d,e,f;if("string"===c){d=0,e=n(this),f=a.match(F)||[];while(b=f[d++])e.hasClass(b)?e.removeClass(b):e.addClass(b)}else void 0!==a&&"boolean"!==c||(b=Bb(this),b&&n._data(this,"__className__",b),n.attr(this,"class",b||!1===a?"":n._data(this,"__className__")||""))})},hasClass:function(a){var b,c,d=0;b=" "+a+" ";while(c=this[d++])if(1===c.nodeType&&(" "+Bb(c)+" ").replace(Ab," ").indexOf(b)>-1)return!0;return!1}}),n.each("blur focus focusin focusout load resize scroll unload click dblclick mousedown mouseup mousemove mouseover mouseout mouseenter mouseleave change select submit keydown keypress keyup error contextmenu".split(" "),function(a,b){n.fn[b]=function(a,c){return arguments.length>0?this.on(b,null,a,c):this.trigger(b)}}),n.fn.extend({hover:function(a,b){return this.mouseenter(a).mouseleave(b||a)}});var Cb=a.location,Db=n.now(),Eb=/?/,Fb=/(,)|([|{)|(}|])|"(?:[^"\rn]|\["\/bfnrt]|\u[da-fA-F]{4})*"s*:?|true|false|null|-?(?!0d)d+(?:.d+|)(?:[eE][+-]?d+|)/g;n.parseJSON=function(b){if(a.JSON&&a.JSON.parse)return a.JSON.parse(b+"");var c,d=null,e=n.trim(b+"");return e&&!n.trim(e.replace(Fb,function(a,b,e,f){return c&&b&&(d=0),0===d?a:(c=e||b,d+=!f-!e,"")}))?Function("return "+e)():n.error("Invalid JSON: "+b)},n.parseXML=function(b){var c,d;if(!b||"string"!=typeof b)return null;try{a.DOMParser?(d=new a.DOMParser,c=d.parseFromString(b,"text/xml")):(c=new a.ActiveXObject("Microsoft.XMLDOM"),c.async="false",c.loadXML(b))}catch(e){c=void 0}return c&&c.documentElement&&!c.getElementsByTagName("parsererror").length||n.error("Invalid XML: "+b),c};var Gb=/#.*$/,Hb=/([?&])_=[^&]*/,Ib=/^(.*?):[ t]*([^rn]*)r?$/gm,Jb=/^(?:about|app|app-storage|.+-extension|file|res|widget):$/,Kb=/^(?:GET|HEAD)$/,Lb=/^///,Mb=/^([w.+-]+:)(?://(?:[^/?#]*@|)([^/?#:]*)(?::(d+)|)|)/,Nb={},Ob={},Pb="*/".concat("*"),Qb=Cb.href,Rb=Mb.exec(Qb.toLowerCase())||[];function Sb(a){return function(b,c){"string"!=typeof b&&(c=b,b="*");var d,e=0,f=b.toLowerCase().match(F)||[];if(n.isFunction(c))while(d=f[e++])"+"===d.charAt(0)?(d=d.slice(1)||"*",(a[d]=a[d]||[]).unshift(c)):(a[d]=a[d]||[]).push(c)}}function Tb(a,b,c,d){var e={},f=a===Ob;function g(h){var i;return e[h]=!0,n.each(a[h]||[],function(a,h){var j=h(b,c,d);return"string"!=typeof j||f||e[j]?f?!(i=j):void 0:(b.dataTypes.unshift(j),g(j),!1)}),i}return g(b.dataTypes[0])||!e["*"]&&g("*")}function Ub(a,b){var c,d,e=n.ajaxSettings.flatOptions||{};for(d in b)void 0!==b[d]&&((e[d]?a:c||(c={}))[d]=b[d]);return c&&n.extend(!0,a,c),a}function Vb(a,b,c){var d,e,f,g,h=a.contents,i=a.dataTypes;while("*"===i[0])i.shift(),void 0===e&&(e=a.mimeType||b.getResponseHeader("Content-Type"));if(e)for(g in h)if(h[g]&&h[g].test(e)){i.unshift(g);break}if(i[0]in c)f=i[0];else{for(g in c){if(!i[0]||a.converters[g+" "+i[0]]){f=g;break}d||(d=g)}f=f||d}if(f)return f!==i[0]&&i.unshift(f),c[f]}function Wb(a,b,c,d){var e,f,g,h,i,j={},k=a.dataTypes.slice();if(k[1])for(g in a.converters)j[g.toLowerCase()]=a.converters[g];f=k.shift();while(f)if(a.responseFields[f]&&(c[a.responseFields[f]]=b),!i&&d&&a.dataFilter&&(b=a.dataFilter(b,a.dataType)),i=f,f=k.shift())if("*"===f)f=i;else if("*"!==i&&i!==f){if(!(g=j[i+" "+f]||j["* "+f]))for(e in j)if(h=e.split(" "),h[1]===f&&(g=j[i+" "+h[0]]||j["* "+h[0]])){!0===g?g=j[e]:!0!==j[e]&&(f=h[0],k.unshift(h[1]));break}if(!0!==g)if(g&&a.throws)b=g(b);else try{b=g(b)}catch(l){return{state:"parsererror",error:g?l:"No conversion from "+i+" to "+f}}}return{state:"success",data:b}}n.extend({active:0,lastModified:{},etag:{},ajaxSettings:{url:Qb,type:"GET",isLocal:Jb.test(Rb[1]),global:!0,processData:!0,async:!0,contentType:"application/x-www-form-urlencoded; charset=UTF-8",accepts:{"*":Pb,text:"text/plain",html:"text/html",xml:"application/xml, text/xml",json:"application/json, text/javascript"},contents:{xml:/bxmlb/,html:/bhtml/,json:/bjsonb/},responseFields:{xml:"responseXML",text:"responseText",json:"responseJSON"},converters:{"* text":String,"text html":!0,"text json":n.parseJSON,"text xml":n.parseXML},flatOptions:{url:!0,context:!0}},ajaxSetup:function(a,b){return b?Ub(Ub(a,n.ajaxSettings),b):Ub(n.ajaxSettings,a)},ajaxPrefilter:Sb(Nb),ajaxTransport:Sb(Ob),ajax:function(b,c){"object"==typeof b&&(c=b,b=void 0),c=c||{};var d,e,f,g,h,i,j,k,l=n.ajaxSetup({},c),m=l.context||l,o=l.context&&(m.nodeType||m.jquery)?n(m):n.event,p=n.Deferred(),q=n.Callbacks("once memory"),r=l.statusCode||{},s={},t={},u=0,v="canceled",w={readyState:0,getResponseHeader:function(a){var b;if(2===u){if(!k){k={};while(b=Ib.exec(g))k[b[1].toLowerCase()]=b[2]}b=k[a.toLowerCase()]}return null==b?null:b},getAllResponseHeaders:function(){return 2===u?g:null},setRequestHeader:function(a,b){var c=a.toLowerCase();return u||(a=t[c]=t[c]||a,s[a]=b),this},overrideMimeType:function(a){return u||(l.mimeType=a),this},statusCode:function(a){var b;if(a)if(u<2)for(b in a)r[b]=[r[b],a[b]];else w.always(a[w.status]);return this},abort:function(a){var b=a||v;return j&&j.abort(b),x(0,b),this}};if(p.promise(w).complete=q.add,w.success=w.done,w.error=w.fail,l.url=((b||l.url||Qb)+"").replace(Gb,"").replace(Lb,Rb[1]+"//"),l.type=c.method||c.type||l.method||l.type,l.dataTypes=n.trim(l.dataType||"*").toLowerCase().match(F)||[""],null==l.crossDomain&&(d=Mb.exec(l.url.toLowerCase()),l.crossDomain=!(!d||d[1]===Rb[1]&&d[2]===Rb[2]&&(d[3]||("http:"===d[1]?"80":"443"))===(Rb[3]||("http:"===Rb[1]?"80":"443")))),l.data&&l.processData&&"string"!=typeof l.data&&(l.data=n.param(l.data,l.traditional)),Tb(Nb,l,c,w),2===u)return w;i=n.event&&l.global,i&&0==n.active++&&n.event.trigger("ajaxStart"),l.type=l.type.toUpperCase(),l.hasContent=!Kb.test(l.type),f=l.url,l.hasContent||(l.data&&(f=l.url+=(Eb.test(f)?"&":"?")+l.data,delete l.data),!1===l.cache&&(l.url=Hb.test(f)?f.replace(Hb,"$1_="+Db++):f+(Eb.test(f)?"&":"?")+"_="+Db++)),l.ifModified&&(n.lastModified[f]&&w.setRequestHeader("If-Modified-Since",n.lastModified[f]),n.etag[f]&&w.setRequestHeader("If-None-Match",n.etag[f])),(l.data&&l.hasContent&&!1!==l.contentType||c.contentType)&&w.setRequestHeader("Content-Type",l.contentType),w.setRequestHeader("Accept",l.dataTypes[0]&&l.accepts[l.dataTypes[0]]?l.accepts[l.dataTypes[0]]+("*"!==l.dataTypes[0]?", "+Pb+"; q=0.01":""):l.accepts["*"]);for(e in l.headers)w.setRequestHeader(e,l.headers[e]);if(l.beforeSend&&(!1===l.beforeSend.call(m,w,l)||2===u))return w.abort();v="abort";for(e in{success:1,error:1,complete:1})w[e](l[e]);if(j=Tb(Ob,l,c,w)){if(w.readyState=1,i&&o.trigger("ajaxSend",[w,l]),2===u)return w;l.async&&l.timeout>0&&(h=a.setTimeout(function(){w.abort("timeout")},l.timeout));try{u=1,j.send(s,x)}catch(y){if(!(u<2))throw y;x(-1,y)}}else x(-1,"No Transport");function x(b,c,d,e){var k,s,t,v,x,y=c;2!==u&&(u=2,h&&a.clearTimeout(h),j=void 0,g=e||"",w.readyState=b>0?4:0,k=b>=200&&b<300||304===b,d&&(v=Vb(l,w,d)),v=Wb(l,v,w,k),k?(l.ifModified&&(x=w.getResponseHeader("Last-Modified"),x&&(n.lastModified[f]=x),(x=w.getResponseHeader("etag"))&&(n.etag[f]=x)),204===b||"HEAD"===l.type?y="nocontent":304===b?y="notmodified":(y=v.state,s=v.data,t=v.error,k=!t)):(t=y,!b&&y||(y="error",b<0&&(b=0))),w.status=b,w.statusText=(c||y)+"",k?p.resolveWith(m,[s,y,w]):p.rejectWith(m,[w,y,t]),w.statusCode(r),r=void 0,i&&o.trigger(k?"ajaxSuccess":"ajaxError",[w,l,k?s:t]),q.fireWith(m,[w,y]),i&&(o.trigger("ajaxComplete",[w,l]),--n.active||n.event.trigger("ajaxStop")))}return w},getJSON:function(a,b,c){return n.get(a,b,c,"json")},getScript:function(a,b){return n.get(a,void 0,b,"script")}}),n.each(["get","post"],function(a,b){n[b]=function(a,c,d,e){return n.isFunction(c)&&(e=e||d,d=c,c=void 0),n.ajax(n.extend({url:a,type:b,dataType:e,data:c,success:d},n.isPlainObject(a)&&a))}}),n._evalUrl=function(a){return n.ajax({url:a,type:"GET",dataType:"script",cache:!0,async:!1,global:!1,throws:!0})},n.fn.extend({wrapAll:function(a){if(n.isFunction(a))return this.each(function(b){n(this).wrapAll(a.call(this,b))});if(this[0]){var b=n(a,this[0].ownerDocument).eq(0).clone(!0);this[0].parentNode&&b.insertBefore(this[0]),b.map(function(){var a=this;while(a.firstChild&&1===a.firstChild.nodeType)a=a.firstChild;return a}).append(this)}return this},wrapInner:function(a){return n.isFunction(a)?this.each(function(b){n(this).wrapInner(a.call(this,b))}):this.each(function(){var b=n(this),c=b.contents();c.length?c.wrapAll(a):b.append(a)})},wrap:function(a){var b=n.isFunction(a);return this.each(function(c){n(this).wrapAll(b?a.call(this,c):a)})},unwrap:function(){return this.parent().each(function(){n.nodeName(this,"body")||n(this).replaceWith(this.childNodes)}).end()}});function Xb(a){return a.style&&a.style.display||n.css(a,"display")}function Yb(a){if(!n.contains(a.ownerDocument||d,a))return!0;while(a&&1===a.nodeType){if("none"===Xb(a)||"hidden"===a.type)return!0;a=a.parentNode}return!1}n.expr.filters.hidden=function(a){return l.reliableHiddenOffsets()?a.offsetWidth<=0&&a.offsetHeight<=0&&!a.getClientRects().length:Yb(a)},n.expr.filters.visible=function(a){return!n.expr.filters.hidden(a)};var Zb=/%20/g,$b=/[]$/,_b=/r?n/g,ac=/^(?:submit|button|image|reset|file)$/i,bc=/^(?:input|select|textarea|keygen)/i;function cc(a,b,c,d){var e;if(n.isArray(b))n.each(b,function(b,e){c||$b.test(a)?d(a,e):cc(a+"["+("object"==typeof e&&null!=e?b:"")+"]",e,c,d)});else if(c||"object"!==n.type(b))d(a,b);else for(e in b)cc(a+"["+e+"]",b[e],c,d)}n.param=function(a,b){var c,d=[],e=function(a,b){b=n.isFunction(b)?b():null==b?"":b,d[d.length]=encodeURIComponent(a)+"="+encodeURIComponent(b)};if(void 0===b&&(b=n.ajaxSettings&&n.ajaxSettings.traditional),n.isArray(a)||a.jquery&&!n.isPlainObject(a))n.each(a,function(){e(this.name,this.value)});else for(c in a)cc(c,a[c],b,e);return d.join("&").replace(Zb,"+")},n.fn.extend({serialize:function(){return n.param(this.serializeArray())},serializeArray:function(){return this.map(function(){var a=n.prop(this,"elements");return a?n.makeArray(a):this}).filter(function(){var a=this.type;return this.name&&!n(this).is(":disabled")&&bc.test(this.nodeName)&&!ac.test(a)&&(this.checked||!Y.test(a))}).map(function(a,b){var c=n(this).val();return null==c?null:n.isArray(c)?n.map(c,function(a){return{name:b.name,value:a.replace(_b,"rn")}}):{name:b.name,value:c.replace(_b,"rn")}}).get()}}),n.ajaxSettings.xhr=void 0!==a.ActiveXObject?function(){return this.isLocal?hc():d.documentMode>8?gc():/^(get|post|head|put|delete|options)$/i.test(this.type)&&gc()||hc()}:gc;var dc=0,ec={},fc=n.ajaxSettings.xhr();a.attachEvent&&a.attachEvent("onunload",function(){for(var a in ec)ec[a](void 0,!0)}),l.cors=!!fc&&"withCredentials"in fc,(fc=l.ajax=!!fc)&&n.ajaxTransport(function(b){if(!b.crossDomain||l.cors){var c;return{send:function(d,e){var f,g=b.xhr(),h=++dc;if(g.open(b.type,b.url,b.async,b.username,b.password),b.xhrFields)for(f in b.xhrFields)g[f]=b.xhrFields[f];b.mimeType&&g.overrideMimeType&&g.overrideMimeType(b.mimeType),b.crossDomain||d["X-Requested-With"]||(d["X-Requested-With"]="XMLHttpRequest");for(f in d)void 0!==d[f]&&g.setRequestHeader(f,d[f]+"");g.send(b.hasContent&&b.data||null),c=function(a,d){var f,i,j;if(c&&(d||4===g.readyState))if(delete ec[h],c=void 0,g.onreadystatechange=n.noop,d)4!==g.readyState&&g.abort();else{j={},f=g.status,"string"==typeof g.responseText&&(j.text=g.responseText);try{i=g.statusText}catch(k){i=""}f||!b.isLocal||b.crossDomain?1223===f&&(f=204):f=j.text?200:404}j&&e(f,i,j,g.getAllResponseHeaders())},b.async?4===g.readyState?a.setTimeout(c):g.onreadystatechange=ec[h]=c:c()},abort:function(){c&&c(void 0,!0)}}}});function gc(){try{return new a.XMLHttpRequest}catch(b){}}function hc(){try{return new a.ActiveXObject("Microsoft.XMLHTTP")}catch(b){}}n.ajaxSetup({accepts:{script:"text/javascript, application/javascript, application/ecmascript, application/x-ecmascript"},contents:{script:/b(?:java|ecma)scriptb/},converters:{"text script":function(a){return n.globalEval(a),a}}}),n.ajaxPrefilter("script",function(a){void 0===a.cache&&(a.cache=!1),a.crossDomain&&(a.type="GET",a.global=!1)}),n.ajaxTransport("script",function(a){if(a.crossDomain){var b,c=d.head||n("head")[0]||d.documentElement;return{send:function(e,f){b=d.createElement("script"),b.async=!0,a.scriptCharset&&(b.charset=a.scriptCharset),b.src=a.url,b.onload=b.onreadystatechange=function(a,c){(c||!b.readyState||/loaded|complete/.test(b.readyState))&&(b.onload=b.onreadystatechange=null,b.parentNode&&b.parentNode.removeChild(b),b=null,c||f(200,"success"))},c.insertBefore(b,c.firstChild)},abort:function(){b&&b.onload(void 0,!0)}}}});var ic=[],jc=/(=)?(?=&|$)|??/;n.ajaxSetup({jsonp:"callback",jsonpCallback:function(){var a=ic.pop()||n.expando+"_"+Db++;return this[a]=!0,a}}),n.ajaxPrefilter("json jsonp",function(b,c,d){var e,f,g,h=!1!==b.jsonp&&(jc.test(b.url)?"url":"string"==typeof b.data&&0===(b.contentType||"").indexOf("application/x-www-form-urlencoded")&&jc.test(b.data)&&"data");if(h||"jsonp"===b.dataTypes[0])return e=b.jsonpCallback=n.isFunction(b.jsonpCallback)?b.jsonpCallback():b.jsonpCallback,h?b[h]=b[h].replace(jc,"$1"+e):!1!==b.jsonp&&(b.url+=(Eb.test(b.url)?"&":"?")+b.jsonp+"="+e),b.converters["script json"]=function(){return g||n.error(e+" was not called"),g[0]},b.dataTypes[0]="json",f=a[e],a[e]=function(){g=arguments},d.always(function(){void 0===f?n(a).removeProp(e):a[e]=f,b[e]&&(b.jsonpCallback=c.jsonpCallback,ic.push(e)),g&&n.isFunction(f)&&f(g[0]),g=f=void 0}),"script"}),n.parseHTML=function(a,b,c){if(!a||"string"!=typeof a)return null;"boolean"==typeof b&&(c=b,b=!1),b=b||d;var e=x.exec(a),f=!c&&[];return e?[b.createElement(e[1])]:(e=ia([a],b,f),f&&f.length&&n(f).remove(),n.merge([],e.childNodes))};var kc=n.fn.load;n.fn.load=function(a,b,c){if("string"!=typeof a&&kc)return kc.apply(this,arguments);var d,e,f,g=this,h=a.indexOf(" ");return h>-1&&(d=n.trim(a.slice(h,a.length)),a=a.slice(0,h)),n.isFunction(b)?(c=b,b=void 0):b&&"object"==typeof b&&(e="POST"),g.length>0&&n.ajax({url:a,type:e||"GET",dataType:"html",data:b}).done(function(a){f=arguments,g.html(d?n("<div>").append(n.parseHTML(a)).find(d):a)}).always(c&&function(a,b){g.each(function(){c.apply(this,f||[a.responseText,b,a])})}),this},n.each(["ajaxStart","ajaxStop","ajaxComplete","ajaxError","ajaxSuccess","ajaxSend"],function(a,b){n.fn[b]=function(a){return this.on(b,a)}}),n.expr.filters.animated=function(a){return n.grep(n.timers,function(b){return a===b.elem}).length};function lc(a){return n.isWindow(a)?a:9===a.nodeType&&(a.defaultView||a.parentWindow)}n.offset={setOffset:function(a,b,c){var d,e,f,g,h,i,j,k=n.css(a,"position"),l=n(a),m={};"static"===k&&(a.style.position="relative"),h=l.offset(),f=n.css(a,"top"),i=n.css(a,"left"),j=("absolute"===k||"fixed"===k)&&n.inArray("auto",[f,i])>-1,j?(d=l.position(),g=d.top,e=d.left):(g=parseFloat(f)||0,e=parseFloat(i)||0),n.isFunction(b)&&(b=b.call(a,c,n.extend({},h))),null!=b.top&&(m.top=b.top-h.top+g),null!=b.left&&(m.left=b.left-h.left+e),"using"in b?b.using.call(a,m):l.css(m)}},n.fn.extend({offset:function(a){if(arguments.length)return void 0===a?this:this.each(function(b){n.offset.setOffset(this,a,b)});var b,c,d={top:0,left:0},e=this[0],f=e&&e.ownerDocument;if(f)return b=f.documentElement,n.contains(b,e)?(void 0!==e.getBoundingClientRect&&(d=e.getBoundingClientRect()),c=lc(f),{top:d.top+(c.pageYOffset||b.scrollTop)-(b.clientTop||0),left:d.left+(c.pageXOffset||b.scrollLeft)-(b.clientLeft||0)}):d},position:function(){if(this[0]){var a,b,c={top:0,left:0},d=this[0];return"fixed"===n.css(d,"position")?b=d.getBoundingClientRect():(a=this.offsetParent(),b=this.offset(),n.nodeName(a[0],"html")||(c=a.offset()),c.top+=n.css(a[0],"borderTopWidth",!0),c.left+=n.css(a[0],"borderLeftWidth",!0)),{top:b.top-c.top-n.css(d,"marginTop",!0),left:b.left-c.left-n.css(d,"marginLeft",!0)}}},offsetParent:function(){return this.map(function(){var a=this.offsetParent;while(a&&!n.nodeName(a,"html")&&"static"===n.css(a,"position"))a=a.offsetParent;return a||Pa})}}),n.each({scrollLeft:"pageXOffset",scrollTop:"pageYOffset"},function(a,b){var c=/Y/.test(b);n.fn[a]=function(d){return X(this,function(a,d,e){var f=lc(a);if(void 0===e)return f?b in f?f[b]:f.document.documentElement[d]:a[d];f?f.scrollTo(c?n(f).scrollLeft():e,c?e:n(f).scrollTop()):a[d]=e},a,d,arguments.length,null)}}),n.each(["top","left"],function(a,b){n.cssHooks[b]=Ta(l.pixelPosition,function(a,c){if(c)return c=Ra(a,b),Na.test(c)?n(a).position()[b]+"px":c})}),n.each({Height:"height",Width:"width"},function(a,b){n.each({padding:"inner"+a,content:b,"":"outer"+a},function(c,d){n.fn[d]=function(d,e){var f=arguments.length&&(c||"boolean"!=typeof d),g=c||(!0===d||!0===e?"margin":"border") ;return X(this,function(b,c,d){var e;return n.isWindow(b)?b.document.documentElement["client"+a]:9===b.nodeType?(e=b.documentElement,Math.max(b.body["scroll"+a],e["scroll"+a],b.body["offset"+a],e["offset"+a],e["client"+a])):void 0===d?n.css(b,c,g):n.style(b,c,d,g)},b,f?d:void 0,f,null)}})}),n.fn.extend({bind:function(a,b,c){return this.on(a,null,b,c)},unbind:function(a,b){return this.off(a,null,b)},delegate:function(a,b,c,d){return this.on(b,a,c,d)},undelegate:function(a,b,c){return 1===arguments.length?this.off(a,"**"):this.off(b,a||"**",c)}}),n.fn.size=function(){return this.length},n.fn.andSelf=n.fn.addBack,"function"==typeof define&&define.amd&&define("jquery",[],function(){return n});var mc=a.jQuery,nc=a.$;return n.noConflict=function(b){return a.$===n&&(a.$=nc),b&&a.jQuery===n&&(a.jQuery=mc),n},b||(a.jQuery=a.$=n),n}); jQuery.noConflict(); #3 // html5shiv MIT @rem remysharp.com/html5-enabling-script // iepp v1.6.2 MIT @jon_neal iecss.com/print-protector /*@cc_on(function(a,b){function r(a){var b=-1;while(++b<f)a.createElement(e[b])}if(!(!window.attachEvent||!b.createStyleSheet||!function(){var a=document.createElement("div");a.innerHTML="<elem></elem>";return a.childNodes.length!==1}())){a.iepp=a.iepp||{};var c=a.iepp,d=c.html5elements||"abbr|article|aside|audio|canvas|datalist|details|figcaption|figure|footer|header|hgroup|mark|meter|nav|output|progress|section|summary|time|video",e=d.split("|"),f=e.length,g=new RegExp("(^|\s)("+d+")","gi"),h=new RegExp("<(/*)("+d+")","gi"),i=/^s*[{}]s*$/,j=new RegExp("(^|[^\n]*?\s)("+d+")([^\n]*)({[\n\w\W]*?})","gi"),k=b.createDocumentFragment(),l=b.documentElement,m=l.firstChild,n=b.createElement("body"),o=b.createElement("style"),p=/print|all/,q;c.getCSS=function(a,b){if(a+""===undefined)return"";var d=-1,e=a.length,f,g=[];while(++d<e){f=a[d];if(f.disabled)continue;b=f.media||b,p.test(b)&&g.push(c.getCSS(f.imports,b),f.cssText),b="all"}return g.join("")},c.parseCSS=function(a){var b=[],c;while((c=j.exec(a))!=null)b.push(((i.exec(c[1])?"n":c[1])+c[2]+c[3]).replace(g,"$1.iepp_$2")+c[4]);return b.join("n")},c.writeHTML=function(){var a=-1;q=q||b.body;while(++a<f){var c=b.getElementsByTagName(e[a]),d=c.length,g=-1;while(++g<d)c[g].className.indexOf("iepp_")<0&&(c[g].className+=" iepp_"+e[a])}k.appendChild(q),l.appendChild(n),n.className=q.className,n.id=q.id,n.innerHTML=q.innerHTML.replace(h,"<$1font")},c._beforePrint=function(){o.styleSheet.cssText=c.parseCSS(c.getCSS(b.styleSheets,"all")),c.writeHTML()},c.restoreHTML=function(){n.innerHTML="",l.removeChild(n),l.appendChild(q)},c._afterPrint=function(){c.restoreHTML(),o.styleSheet.cssText=""},r(b),r(k);if(c.disablePP)return;m.insertBefore(o,m.firstChild),o.media="print",o.className="iepp-printshim",a.attachEvent("onbeforeprint",c._beforePrint),a.attachEvent("onafterprint",c._afterPrint)}})(this,document)@*/ #4 var addComment={moveForm:function(a,b,c,d){var e,f,g,h,i=this,j=i.I(a),k=i.I(c),l=i.I("cancel-comment-reply-link"),m=i.I("comment_parent"),n=i.I("comment_post_ID"),o=k.getElementsByTagName("form")[0];if(j&&k&&l&&m&&o){i.respondId=c,d=d||!1,i.I("wp-temp-form-div")||(e=document.createElement("div"),e.id="wp-temp-form-div",e.style.display="none",k.parentNode.insertBefore(e,k)),j.parentNode.insertBefore(k,j.nextSibling),n&&d&&(n.value=d),m.value=b,l.style.display="",l.onclick=function(){var a=addComment,b=a.I("wp-temp-form-div"),c=a.I(a.respondId);if(b&&c)return a.I("comment_parent").value="0",b.parentNode.insertBefore(c,b),b.parentNode.removeChild(b),this.style.display="none",this.onclick=null,!1};try{for(var p=0;p<o.elements.length;p++)if(f=o.elements[p],h=!1,"getComputedStyle"in window?g=window.getComputedStyle(f):document.documentElement.currentStyle&&(g=f.currentStyle),(f.offsetWidth<=0&&f.offsetHeight<=0||"hidden"===g.visibility)&&(h=!0),"hidden"!==f.type&&!f.disabled&&!h){f.focus();break}}catch(q){}return!1}},I:function(a){return document.getElementById(a)}}; Illegally Inserted Code at the top of the website according to a Debugger that was used: <!DOCTYPE html> <!--[if lt IE 7]> <html class="ie ie6 lte9 lte8 lte7" lang="en-US" prefix="og: http: //ogp . me/ns#"> <![endif]--> <!--[if IE 7]> <html class="ie ie7 lte9 lte8 lte7" lang="en-US" prefix="og: http: // ogp .me /ns#"> <![endif]--> <!--[if IE 8]> <html class="ie ie8 lte9 lte8" lang="en-US" prefix="og: http : //ogp. me/ns#"> <![endif]--> <!--[if IE 9]> <html class="ie ie9" lang="en-US" prefix="og: http: //ogp . me/ns#"> <![endif]--> <!--[if gt IE 9]> <html lang="en-US" prefix="og: http : //ogp . me/ns#"> <![endif]--> <!--[if !IE]><!--> ESET Categorizes the link below as Suspicious Response Headers status 200 Date Thu, 05 Sep 2019 16:44:20 GMT Content-Type image/gif Connection keep-alive Set-Cookie __cfduid=d332600249d81e459b097df08b5c986bb1567701860; expires=Fri, 04-Sep-20 16:44:20 GMT; path=/; domain=.statcounter.com; HttpOnly P3P policyref="http://www.statcounter.com/w3c/p3p.xml", CP="ADMa OUR COM NAV NID DSP NOI COR" Expires Mon, 26 Jul 1997 05:00:00 GMT Server cloudflare CF-RAY 5119aad1ab72e129-BOM Meta http version http/1.1 Request 3: http://c.statcounter.com/t.php?sc_project=11228559&java=1&security=21afdedc&u1=83B22C6593764F3CE42AA26BC6334A1F&sc_rum_f_s=0&sc_rum_f_e=884&sc_rum_e_s=893&sc_rum_e_e=933&sc_random=0.42782633933253233&jg=new&rr=1.1.1.1.1.1.1.1.1&resolution=1920&h=1200&camefrom=&u=http%3A//pofheadlines.com/all/fb/&t=Redirecting...&rcat=d&rdom=d&rdomg=new&bb=1&sc_snum=1&sess=ef5bce&p=0&invisible=1 URL: http://c.statcounter.com/t.php?sc_project=11228559&java=1&security=21afdedc&u1=83B22C6593764F3CE42AA26BC6334A1F&sc_rum_f_s=0&sc_rum_f_e=884&sc_rum_e_s=893&sc_rum_e_e=933&sc_random=0.42782633933253233&jg=new&rr=1.1.1.1.1.1.1.1.1&resolution=1920&h=1200&camefrom=&u=http%3A//pofheadlines.com/all/fb/&t=Redirecting...&rcat=d&rdom=d&rdomg=new&bb=1&sc_snum=1&sess=ef5bce&p=0&invisible=1 Host: c.statcounter.com IP: 104.20.2.47 Error/Status Code: 200 Priority: LOWEST Protocol: http/1.1 Initiated By: http // pofheadlines com/all/fb/ Client Port: 52160 Request Start: 1.002 s DNS Lookup: 30 ms Initial Connection: 35 ms Time to First Byte: 276 ms Content Download: 2 ms Bytes In (downloaded): 0.0 KB Uncompressed Size: 0.0 KB Bytes Out (uploaded): 0.2 KB Request Headers: Referer: http / / pofheadlines com/all/fb/ Host: c.statcounter.com Connection: keep-alive Accept: image/webp,image/apng,image/*,*/*;q=0.8 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: [52 bytes were stripped] Response Headers: Content-Length: 49 Expires: Mon, 26 Jul 1997 05:00:00 GMT Server: cloudflare Connection: keep-alive Date: Thu, 05 Sep 2019 16:30:51 GMT P3P: policyref="http://www.statcounter.com/w3c/p3p.xml", CP="ADMa OUR COM NAV NID DSP NOI COR" Content-Type: image/gif CF-RAY: 5119970ffd8bd659-MAD Set-Cookie: [105 bytes were stripped] Form analysis 2 forms found in the DOM Name: logoutForm -- POST /logout <form name="logoutForm" method="POST" action="/logout"> <input type="hidden" name="action_logout" value="1"> <input name="session_token" type="hidden" value="QUFFLUhqbXZtMkRockNjdHR5ZnBqZjU0Sjc2R005cDloUXxBQ3Jtc0tsUDBPS3dtaGIzTjc0cjUtOGdfeHBiU1hTa2RCRDNTVXdta2hfOTNJb2ZzcHA3cUlYOGdfZy1CM0E0akliQXFFNTdFLUhtdHRlMEFsazZ1cGkwYzZCYnFLXzhWamVBekhISjc5cm03eW5VR0JIWnBLTFZGVll2bXRld0M0SFZGbGwzVTBSMzlUVzFmbFR6VVJsaDlvTktmelhTTHc="> </form> /results <form id="masthead-search" class="search-form consolidated-form" action="/results" onsubmit="if (document.getElementById('masthead-search-term').value == '') return false;" data-clicktracking="CAEQ7VAiEwj12eWpzrjkAhWck1UKHfT2Duoo-B0" data-visibility-tracking="CAEQ7VAiEwj12eWpzrjkAhWck1UKHfT2Duoo-B0"> <button class="yt-uix-button yt-uix-button-size-default yt-uix-button-default search-btn-component search-button" type="submit" onclick="if (document.getElementById('masthead-search-term').value == '') return false; document.getElementById('masthead-search').submit(); return false;;return true;" tabindex="2" id="search-btn" dir="ltr"> <span class="yt-uix-button-content">Suchen</span> </button> <div id="masthead-search-terms" class="masthead-search-terms-border" dir="ltr"> <input id="masthead-search-term" autocomplete="off" onkeydown="if (!this.value && (event.keyCode == 40 || event.keyCode == 32 || event.keyCode == 34)) {this.onkeydown = null; this.blur();}" class="search-term masthead-search-renderer-input yt-uix-form-input-bidi" name="search_query" value="" type="text" tabindex="1" placeholder="Suchen" title="Suchen" aria-label="Suchen"> </div> </form> Patches are signed using one of the PGP public keys. Excessive CPU usage in HTTP/2 with small window updates Severity: medium Advisory CVE-2019-9511 Not vulnerable: 1.17.3+, 1.16.1+ Vulnerable: 1.9.5-1.17.2 Excessive CPU usage in HTTP/2 with priority changes Severity: low Advisory CVE-2019-9513 Not vulnerable: 1.17.3+, 1.16.1+ Vulnerable: 1.9.5-1.17.2 Excessive memory usage in HTTP/2 with zero length headers Severity: low Advisory CVE-2019-9516 Not vulnerable: 1.17.3+, 1.16.1+ Vulnerable: 1.9.5-1.17.2 Excessive memory usage in HTTP/2 Severity: low Advisory CVE-2018-16843 Not vulnerable: 1.15.6+, 1.14.1+ Vulnerable: 1.9.5-1.15.5 Excessive CPU usage in HTTP/2 Severity: low Advisory CVE-2018-16844 Not vulnerable: 1.15.6+, 1.14.1+ Vulnerable: 1.9.5-1.15.5 Memory disclosure in the ngx_http_mp4_module Severity: medium Advisory CVE-2018-16845 Not vulnerable: 1.15.6+, 1.14.1+ Vulnerable: 1.1.3-1.15.5, 1.0.7-1.0.15 The patch pgp Integer overflow in the range filter Severity: medium Advisory CVE-2017-7529 Not vulnerable: 1.13.3+, 1.12.1+ Vulnerable: 0.5.6-1.13.2 The patch pgp NULL pointer dereference while writing client request body Severity: medium Advisory CVE-2016-4450 Not vulnerable: 1.11.1+, 1.10.1+ Vulnerable: 1.3.9-1.11.0 The patch pgp (for 1.9.13-1.11.0) The patch pgp (for 1.3.9-1.9.12) Invalid pointer dereference in resolver Severity: medium Advisory CVE-2016-0742 Not vulnerable: 1.9.10+, 1.8.1+ Vulnerable: 0.6.18-1.9.9 Use-after-free during CNAME response processing in resolver Severity: medium Advisory CVE-2016-0746 Not vulnerable: 1.9.10+, 1.8.1+ Vulnerable: 0.6.18-1.9.9 Insufficient limits of CNAME resolution in resolver Severity: medium Advisory CVE-2016-0747 Not vulnerable: 1.9.10+, 1.8.1+ Vulnerable: 0.6.18-1.9.9 SSL session reuse vulnerability Severity: medium Advisory CVE-2014-3616 Not vulnerable: 1.7.5+, 1.6.2+ Vulnerable: 0.5.6-1.7.4 STARTTLS command injection Severity: medium Advisory CVE-2014-3556 Not vulnerable: 1.7.4+, 1.6.1+ Vulnerable: 1.5.6-1.7.3 The patch pgp SPDY heap buffer overflow Severity: major Advisory CVE-2014-0133 Not vulnerable: 1.5.12+, 1.4.7+ Vulnerable: 1.3.15-1.5.11 The patch pgp SPDY memory corruption Severity: major Advisory CVE-2014-0088 Not vulnerable: 1.5.11+ Vulnerable: 1.5.10 The patch pgp Request line parsing vulnerability Severity: medium Advisory CVE-2013-4547 Not vulnerable: 1.5.7+, 1.4.4+ Vulnerable: 0.8.41-1.5.6 The patch pgp Memory disclosure with specially crafted HTTP backend responses Severity: medium Advisory CVE-2013-2070 Not vulnerable: 1.5.0+, 1.4.1+, 1.2.9+ Vulnerable: 1.1.4-1.2.8, 1.3.9-1.4.0 The patch pgp (for 1.3.9-1.4.0) The patch pgp (for 1.1.4-1.2.8) Stack-based buffer overflow with specially crafted request Severity: major Advisory CVE-2013-2028 Not vulnerable: 1.5.0+, 1.4.1+ Vulnerable: 1.3.9-1.4.0 The patch pgp Vulnerabilities with Windows directory aliases Severity: medium Advisory CVE-2011-4963 Not vulnerable: 1.3.1+, 1.2.1+ Vulnerable: nginx/Windows 0.7.52-1.3.0 Buffer overflow in the ngx_http_mp4_module Severity: major Advisory CVE-2012-2089 Not vulnerable: 1.1.19+, 1.0.15+ Vulnerable: 1.1.3-1.1.18, 1.0.7-1.0.14 The patch pgp Memory disclosure with specially crafted backend responses Severity: major Advisory CVE-2012-1180 Not vulnerable: 1.1.17+, 1.0.14+ Vulnerable: 0.1.0-1.1.16 The patch pgp Buffer overflow in resolver Severity: medium CVE-2011-4315 Not vulnerable: 1.1.8+, 1.0.10+ Vulnerable: 0.6.18-1.1.7 Vulnerabilities with invalid UTF-8 sequence on Windows Severity: major CVE-2010-2266 Not vulnerable: 0.8.41+, 0.7.67+ Vulnerable: nginx/Windows 0.7.52-0.8.40 Vulnerabilities with Windows file default stream Severity: major CVE-2010-2263 Not vulnerable: 0.8.40+, 0.7.66+ Vulnerable: nginx/Windows 0.7.52-0.8.39 Vulnerabilities with Windows 8.3 filename pseudonyms Severity: major CORE-2010-0121 Not vulnerable: 0.8.33+, 0.7.65+ Vulnerable: nginx/Windows 0.7.52-0.8.32 An error log data are not sanitized Severity: none CVE-2009-4487 Not vulnerable: none Vulnerable: all The renegotiation vulnerability in SSL protocol Severity: major VU#120541 CVE-2009-3555 Not vulnerable: 0.8.23+, 0.7.64+ Vulnerable: 0.1.0-0.8.22 The patch pgp Directory traversal vulnerability Severity: minor CVE-2009-3898 Not vulnerable: 0.8.17+, 0.7.63+ Vulnerable: 0.1.0-0.8.16 Buffer underflow vulnerability Severity: major VU#180065 CVE-2009-2629 Not vulnerable: 0.8.15+, 0.7.62+, 0.6.39+, 0.5.38+ Vulnerable: 0.1.0-0.8.14 The patch pgp Null pointer dereference vulnerability Severity: major CVE-2009-3896 Not vulnerable: 0.8.14+, 0.7.62+, 0.6.39+, 0.5.38+ Vulnerable: 0.1.0-0.8.13 The patch pgp APP14Flags0[14] APP14Flags1(none) ApplicationRecordVersion0 BitsPerSample8 BlueMatrixColumn0.14307 0.06061 0.7141 BlueTRC(Binary data 2060 bytes, use -b option to extract) CMMFlagsNot Embedded, Independent ColorComponents3 ColorModeRGB ColorSpacesRGB ColorSpaceDataRGB ColorTransformYCbCr CompressionJPEG (old-style) ConnectionSpaceIlluminant0.9642 1 0.82491 Copyright2018 Gardner Media Group LLC CopyrightNotice2018 Gardner Media Group LLC CreateDate2019:06:12 14:48:06-07:00 CurrentIPTCDigestca6d44ddf8d7c201216c7003c49a5906 DCTEncodeVersion100 DeviceAttributesReflective, Glossy, Positive, Color DeviceManufacturerHewlett-Packard DeviceMfgDescIEC http://www.iec.ch DeviceModelsRGB DeviceModelDescIEC 61966-2.1 Default RGB colour space - sRGB DisplayedUnitsXinches DisplayedUnitsYinches DocumentIDadobe:docid:photoshop:17b9898a-48f9-e346-9825-326196609be5 EncodingProcessProgressive DCT, Huffman coding ExifByteOrderLittle-endian (Intel, II) ExifImageHeight518 ExifImageWidth300 ExifVersion0221 FileTypeJPEG FileTypeExtensionjpg Formatimage/jpeg GlobalAltitude30 GlobalAngle30 GreenMatrixColumn0.38515 0.71687 0.09708 GreenTRC(Binary data 2060 bytes, use -b option to extract) HasRealMergedDataYes ICCProfileNamesRGB IEC61966-2.1 IPTCDigestca6d44ddf8d7c201216c7003c49a5906 ImageHeight518 ImageSize300x518 ImageWidth300 InstanceIDxmp.iid:17413760-5521-43de-bddb-9e2ec3816537 LegacyIPTCDigest1282700C3E321744A562ADF2AF4E123D Luminance76.03647 80 87.12462 MIMETypeimage/jpeg MeasurementBacking0 0 0 MeasurementFlare0.999% MeasurementGeometryUnknown MeasurementIlluminantD65 MeasurementObserverCIE 1931 MediaBlackPoint0 0 0 MediaWhitePoint0.95045 1 1.08905 Megapixels0.155 MetadataDate2019:06:12 14:51:24-07:00 ModifyDate2019:06:12 14:51:24 NumSlices1 OrientationHorizontal (normal) OriginalDocumentID37B8A5E1DC269950E3FADC9F43C2144E PhotometricInterpretationRGB PhotoshopFormatProgressive PhotoshopQuality12 PhotoshopThumbnail(Binary data 4014 bytes, use -b option to extract) PixelAspectRatio1 PrimaryPlatformMicrosoft Corporation PrintPosition0 0 PrintScale1 PrintStyleCentered ProfileCMMTypeLinotronic ProfileClassDisplay Device Profile ProfileConnectionSpaceXYZ ProfileCopyrightCopyright (c) 1998 Hewlett-Packard Company ProfileCreatorHewlett-Packard ProfileDateTime1998:02:09 06:49:00 ProfileDescriptionsRGB IEC61966-2.1 ProfileFileSignatureacsp ProfileID0 ProfileVersion2.1.0 ProgressiveScans3 Scans ReaderNameAdobe Photoshop CC 2019 RedMatrixColumn0.43607 0.22249 0.01392 RedTRC(Binary data 2060 bytes, use -b option to extract) RenderingIntentPerceptual ResolutionUnitinches Rights2018 Gardner Media Group LLC SamplesPerPixel3 SlicesGroupNameToddWoodard_FF SoftwareAdobe Photoshop CC 2019 (Macintosh) TechnologyCathode Ray Tube Display ThumbnailImage(Binary data 4014 bytes, use -b option to extract) ThumbnailLength4014 ThumbnailOffset442 ViewingCondDescReference Viewing Condition in IEC61966-2.1 ViewingCondIlluminant19.6445 20.3718 16.8089 ViewingCondIlluminantTypeD50 ViewingCondSurround3.92889 4.07439 3.36179 WriterNameAdobe Photoshop XMPToolkitAdobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 XResolution72 YCbCrSubSamplingYCbCr4:4:4 (1 1) YResolution72 Extracted Strings: dExif Adobe Photoshop CC 2019 (Macintosh) 2019:06:12 14:51:24 2018 Gardner Media Group LLC 0221 Adobe_CM Adobe b34r 7GWgw dEU6te 0bOf VFvE 8rySd 622k Photoshop 3.0 8BIM 2018 Gardner Media Group LLC 8BIM 8BIM printOutput PstSbool Inteenum Inte Clrm printSixteenBitbool printerNameTEXT printProofSetupObjc proofSetup Bltnenum builtinProof proofCMYK 8BIM printOutputOptions Cptnbool Clbrbool RgsMbool CrnCbool CntCbool Lblsbool Ngtvbool EmlDbool Intrbool BckgObjc RGBC Rd doub@o Grn doub@o Bl doub@o BrdTUntF#Rlt Bld UntF#Rlt RsltUntF#Pxl@R vectorDatabool PgPsenum PgPs PgPC LeftUntF#Rlt Top UntF#Rlt Scl UntF#Prc@Y cropWhenPrintingbool cropRectBottomlong cropRectLeftlong cropRectRightlong cropRectToplong 8BIM 8BIM 8BIM 8BIM 8BIM 8BIM 8BIM 8BIM 8BIM 8BIM null boundsObjc Rct1 Top long Leftlong Btomlong Rghtlong slicesVlLs Objc slice sliceIDlong groupIDlong originenum ESliceOrigin autoGenerated Typeenum ESliceType boundsObjc Rct1 Top long Leftlong Btomlong Rghtlong urlTEXT nullTEXT MsgeTEXT altTagTEXT cellTextIsHTMLbool cellTextTEXT horzAlignenum ESliceHorzAlign default vertAlignenum ESliceVertAlign default bgColorTypeenum ESliceBGColorType None topOutsetlong leftOutsetlong bottomOutsetlong rightOutsetlong 8BIM 8BIM 8BIM Adobe_CM Adobe b34r 7GWgw dEU6te 0bOf VFvE 8rySd 622k 8BIM 8BIM http://ns.adobe.com/xap/1.0/ <?xpacket begin=" " id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" photoshop:LegacyIPTCDigest="1282700C3E321744A562ADF2AF4E123D" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" dc:format="image/jpeg" xmpMM:DocumentID="adobe:docid:photoshop:17b9898a-48f9-e346-9825-326196609be5" xmpMM:InstanceID="xmp.iid:17413760-5521-43de-bddb-9e2ec3816537" xmpMM:OriginalDocumentID="37B8A5E1DC269950E3FADC9F43C2144E" xmp:CreateDate="2019-06-12T14:48:06-07:00" xmp:ModifyDate="2019-06-12T14:51:24-07:00" xmp:MetadataDate="2019-06-12T14:51:24-07:00"> <dc:rights> <rdf:Alt> <rdf:li xml:lang="x-default"> 2018 Gardner Media Group LLC</rdf:li> </rdf:Alt> </dc:rights> <xmpMM:History> <rdf:Seq> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:b3ad67cd-0b15-4ca5-b78b-afb9da408bcb" stEvt:when="2019-06-12T14:51:24-07:00" stEvt:softwareAgent="Adobe Photoshop CC 2019 (Macintosh)" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:17413760-5521-43de-bddb-9e2ec3816537" stEvt:when="2019-06-12T14:51:24-07:00" stEvt:softwareAgent="Adobe Photoshop CC 2019 (Macintosh)" stEvt:changed="/"/> </rdf:Seq> </xmpMM:History> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="w"?> XICC_PROFILE HLino mntrRGB XYZ acspMSFT IEC sRGB cprt 3desc lwtpt bkpt dmnd pdmdd vued view meas rTRC gTRC bTRC text Copyright (c) 1998 Hewlett-Packard Company desc sRGB IEC61966-2.1 sRGB IEC61966-2.1 desc IEC http://www.iec.ch IEC http://www.iec.ch desc .IEC 61966-2.1 Default RGB colour space - sRGB .IEC 61966-2.1 Default RGB colour space - sRGB desc ,Reference Viewing Condition in IEC61966-2.1 ,Reference Viewing Condition in IEC61966-2.1 view meas CRT curv 050l0 676r6 B0BrB rCS5 PcRaT X0h4JR j5w1cK ggwV 1Il0 1cUS LwRu5 dNaud WX3G MBBC FNGd 7wQct eeTR BRnUd 9rLP [J*CA rj o3C0 Zo&qr^4II 8Qef q4Ex 0UIg SLIB JRTJx!)> vS1k oqrE 64BiV RhEM SyI1 rlnE lFaN QncRTv niW50 vMMey,iiR# P5qW 6bbM SjMX noqr BGrl Rgey rhqpd J9RI mqkW TorJ T}o^eol{4 Ix6P xHDu "JJdIihe 7jbXvW KJYO HHmA [XFB63[C jdFKjC)* L8m6d OrlX2 IvS5 LxPr c1sP og6tH blQb iim4 FFNE A92s 5lGf rO2I SSP5I sL2R qRqQ p"(0c2Db GghmJf blEo FLI8 YnGv FDJ5n rGsX xYml 3bLH tJry m@0%KlCL jNkl sLMQ rDni b2iFa N4HP Ob4r 5usmR yloj T4UMn8e cuep UBdj N8dM ESiw YmZB$}[R c8SLM @`--X &N oibK tGP4 tbjF8 AnG.x]N` D@eW?5[ 5OhP +)Cb}ONN.7 sRnV bHoO lKtX lYN0 qPNw Gsgd F162w[[[ s'v&fb:b jAga X4bt i5Hw DKjg wxCnCI VUD5 nIyH DcQ9 DD04 %(</)H} v6Ii FHOr PwGeR d8UTFUU UYO.XVlq bBUNA QADT1 7bFU P001 lCQx bifF wUbs 7NUk YcubX5 HR6Q lSCO jV9o KVaC0 6#1$&> mYwX xnE+qq+v%r OSTb Ecyk Xbv3 QTp7k KVeY xYdw TixAh k2YYn eBH9a GnLe|rPK GaWU IF0O dG9E rQd9 wR1VP Wvu5 eyHF ejAbE 9rpT tTFE l$FGW%$U(C4X Ydua Uviv EfFh U1Mrm HiLa UkUd gSPho ofhh =XlS6f_* #i$U8?r1 b9bF kcvN5l KYyB 2Xe1 J9v5lFg eXV0 pJocO kpQj XIVuC EJ5x sbEXg GQTf A^Y#FT<` ZXkE,s^t DMvx nAkV D|KhS"y`E EYR6A ojS^(da)+ 4Iulmj Sj5Wa rKWhlb kVh8 eKsB ILue adKTe RH1+<k*X BR9H P0ssI gifP lDf6 BML3R cveQ5 k4RDQ EOef IksHQ UlpU LeFKr QBdL 5K2X W6lGf :#vkRj7W ;+ovfawQ tTqE NVev crOec qWFh 8eURdg 2GpA fakc ;r%p>;a{} y60rq 3s0B <b9l yx( mFkQ IbT7 EWVQ bESfT sRob C-UX|$~L Udux nmnK WYbtx BTyy3 jGpy hutB 0RF3H RIU3 bCqn /n&ew!~|N> aoDT $x!P2.0# wtUb GUBP uveX uO4n mAkW{gaZ_ CVFu RYCg VtrT Error Transfer Degree Links: Cannot find table 0. Stack trace: at System.Data.DataTableCollection.get_Item(Int32 index) at CMSWebParts_Custom_TransferDegreeLinks.Page_Load(Object sender, EventArgs e) in E:WebSitesccsnewCMSCMSWebPartsCustomTransferDegreeLinks.ascx.cs:line 86 Output complete without errors. IPTC Coded Character Set = 27, 37, 71 Record Version = 2 IPTC Core (Adobe XMP) Expand All / Collapse All / Show/Hide XMP Source / Show/Hide XMP Legend xpacket = begin="i>>?" id="W5M0MpCehiHzreSzNTczkc9d" x:xmpmeta xmlns:x = "adobe:ns:meta/" x:xmptk = "Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 " rdf:RDF xmlns:rdf = "http://www.w3.org/1999/02/22-rdf-syntax-ns#" rdf:Description rdf:about = "" xmlns:xmpMM = "http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef = "http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp = "http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID = "A89AF07090963C2C5784EE6251472ACC" xmpMM:DocumentID = "xmp.did:EBE453F6F30A11E79C6BD5C9AD65C213" xmpMM:InstanceID = "xmp.iid:EBE453F5F30A11E79C6BD5C9AD65C213" xmp:CreatorTool = "Adobe Photoshop Elements 12.0 Windows" xmpMM:DerivedFrom stRef:instanceID = "xmp.iid:34FEAD399DCAE511B82188F8A0B1F7EE" stRef:documentID = "A89AF07090963C2C5784EE6251472ACC" xpacket = end="r" -------- Output complete without errors. IPTC Coded Character Set = 27, 37, 71, 32, 47, 32, 27, 37, 71 Record Version = 19420 Date Created = 2018/12/06 Time Created = 16:23:04+00:00 IPTC Core (Adobe XMP) Expand All / Collapse All / Show/Hide XMP Source / Show/Hide XMP Legend xpacket = begin="i>>?" id="W5M0MpCehiHzreSzNTczkc9d" x:xmpmeta xmlns:x = "adobe:ns:meta/" x:xmptk = "Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 " rdf:RDF xmlns:rdf = "http://www.w3.org/1999/02/22-rdf-syntax-ns#" rdf:Description rdf:about = "" xmlns:aux = "http://ns.adobe.com/exif/1.0/aux/" xmlns:xmp = "http://ns.adobe.com/xap/1.0/" xmlns:photoshop = "http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM = "http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt = "http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:stRef = "http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:dc = "http://purl.org/dc/elements/1.1/" aux:SerialNumber = "1320501615" aux:LensInfo = "18/1 55/1 0/0 0/0" aux:Lens = "EF-S18-55mm f/3.5-5.6 IS STM" aux:LensID = "4146" aux:ImageNumber = "0" aux:ApproximateFocusDistance = "121/100" aux:FlashCompensation = "0/1" aux:Firmware = "1.0.6" xmp:ModifyDate = "2018-12-11T11:01:59-08:00" xmp:CreateDate = "2018-12-06T16:23:04" xmp:MetadataDate = "2018-12-11T11:01:59-08:00" xmp:CreatorTool = "Adobe Photoshop Elements 12.0 Windows" photoshop:DateCreated = "2018-12-06T16:23:04.079" photoshop:LegacyIPTCDigest = "5B0218B634578B84199E98C575740B1E" photoshop:ColorMode = "3" photoshop:ICCProfile = "sRGB IEC61966-2.1" xmpMM:DocumentID = "9E4C8815E7D7EEA472DE71D06E86ED5C" xmpMM:InstanceID = "xmp.iid:e0c79bf6-b0bb-4bb5-8745-7afddda62173" xmpMM:OriginalDocumentID = "9E4C8815E7D7EEA472DE71D06E86ED5C" dc:format = "image/jpeg" xmpMM:History rdf:Seq rdf:li stEvt:action = "saved" stEvt:instanceID = "xmp.iid:293F9C2352FAE811801DB3F3BA7B0D16" stEvt:when = "2018-12-07T10:59:43-08:00" stEvt:softwareAgent = "Adobe Photoshop Elements 12.0 Windows" stEvt:changed = "/" rdf:li stEvt:action = "converted" stEvt:parameters = "from image/jpeg to application/vnd.adobe.photoshop" rdf:li stEvt:action = "derived" stEvt:parameters = "converted from image/jpeg to application/vnd.adobe.photoshop" rdf:li stEvt:action = "saved" stEvt:instanceID = "xmp.iid:2A3F9C2352FAE811801DB3F3BA7B0D16" stEvt:when = "2018-12-07T10:59:43-08:00" stEvt:softwareAgent = "Adobe Photoshop Elements 12.0 Windows" stEvt:changed = "/" rdf:li stEvt:action = "saved" stEvt:instanceID = "xmp.iid:EBC0F1D352FAE811801DB3F3BA7B0D16" stEvt:when = "2018-12-07T11:04:40-08:00" stEvt:softwareAgent = "Adobe Photoshop Elements 12.0 Windows" stEvt:changed = "/" rdf:li stEvt:action = "converted" stEvt:parameters = "from application/vnd.adobe.photoshop to image/jpeg" rdf:li stEvt:action = "derived" stEvt:parameters = "converted from application/vnd.adobe.photoshop to image/jpeg" rdf:li stEvt:action = "saved" stEvt:instanceID = "xmp.iid:ECC0F1D352FAE811801DB3F3BA7B0D16" stEvt:when = "2018-12-07T11:04:40-08:00" stEvt:softwareAgent = "Adobe Photoshop Elements 12.0 Windows" stEvt:changed = "/" rdf:li stEvt:action = "saved" stEvt:instanceID = "xmp.iid:e0c79bf6-b0bb-4bb5-8745-7afddda62173" stEvt:when = "2018-12-11T11:01:59-08:00" stEvt:softwareAgent = "Adobe Photoshop CC 2019 (Macintosh)" stEvt:changed = "/" xmpMM:DerivedFrom stRef:instanceID = "xmp.iid:EBC0F1D352FAE811801DB3F3BA7B0D16" stRef:documentID = "9E4C8815E7D7EEA472DE71D06E86ED5C" stRef:originalDocumentID = "9E4C8815E7D7EEA472DE71D06E86ED5C" xpacket = end="w" EXIF IFD0 Image Width {0x0100} = 4752 pixels Image Length {0x0101} = 3168 pixels Bits Per Sample {0x0102} = 8,8,8 Photometric Interpretation {0x0106} = RGB (2) Camera Make {0x010F} = Canon Camera Model {0x0110} = Canon EOS 50D Picture Orientation {0x0112} = normal (1) Samples Per Pixel {0x0115} = 3 X-Resolution {0x011A} = 1500000/10000 ===> 150 Y-Resolution {0x011B} = 1500000/10000 ===> 150 X/Y-Resolution Unit {0x0128} = inch (2) Software / Firmware Version {0x0131} = Adobe Photoshop CC 2019 (Macintosh) Last Modified Date/Time {0x0132} = 2018:12:11 11:01:59 Y/Cb/Cr Positioning (Subsampling) {0x0213} = co-sited / datum point (2) EXIF Sub IFD Exposure Time (1 / Shutter Speed) {0x829A} = 1/200 second ===> 0.005 second Lens F-Number / F-Stop {0x829D} = 10/1 ===> f/10 Exposure Program {0x8822} = manual control (1) ISO Speed Ratings {0x8827} = 160 EXIF Version {0x9000} = 0221 Original Date/Time {0x9003} = 2018:12:06 16:23:04 Digitization Date/Time {0x9004} = 2018:12:06 16:23:04 Components Configuration {0x9101} = 0x01,0x02,0x03,0x00 / YCbCr Shutter Speed Value (APEX) {0x9201} = 499712/65536 Shutter Speed (Exposure Time) = 1/197.4 second Aperture Value (APEX) {0x9202} = 434176/65536 Aperture = f/9.93 Exposure Bias (EV) {0x9204} = 0/1 ===> 0 Max Aperture Value (APEX) {0x9205} = 3625/1000 ===> 3.63 Max Aperture = f/3.51 Metering Mode {0x9207} = pattern / multi-segment (5) Flash {0x9209} = n/a (16) Focal Length {0x920A} = 20/1 mm ===> 20 mm User Comment (Hex) {0x9286} = 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00 User Comment Character Code = not defined Last Modified Subsecond Time {0x9290} = 79 Original Subsecond Time {0x9291} = 79 Digitized Subsecond Time {0x9292} = 79 FlashPix Version {0xA000} = 0100 Colour Space {0xA001} = sRGB (1) Image Width {0xA002} = 900 pixels Image Height {0xA003} = 477 pixels Focal Plane X-Resolution {0xA20E} = 4752000/894 ===> 5315.44 Focal Plane Y-Resolution {0xA20F} = 3168000/597 ===> 5306.53 Focal Plane X/Y-Resolution Unit {0xA210} = inch (2) Custom Rendered {0xA401} = normal process (0) Exposure Mode {0xA402} = manual exposure (1) White Balance {0xA403} = auto (0) Scene Capture Type {0xA406} = standard (0) EXIF IFD1 Compression {0x0103} = JPEG compression (6) X-Resolution {0x011A} = 72/1 ===> 72 Y-Resolution {0x011B} = 72/1 ===> 72 X/Y-Resolution Unit {0x0128} = inch (2) Embedded thumbnail image: EXIF Interoperability IFD Interoperability Index {0x0001} = R98 Interoperability Version {0x0002} = 0100 EXIF GPS IFD GPS Version ID {0x00} = 0x02,0x02,0x00,0x00 ------------- Output complete without errors. IPTC Core (Adobe XMP) Expand All / Collapse All / Show/Hide XMP Source / Show/Hide XMP Legend xpacket = begin="i>>?" id="W5M0MpCehiHzreSzNTczkc9d" x:xmpmeta xmlns:x = "adobe:ns:meta/" x:xmptk = "Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 " rdf:RDF xmlns:rdf = "http://www.w3.org/1999/02/22-rdf-syntax-ns#" rdf:Description rdf:about = "" xmlns:xmp = "http://ns.adobe.com/xap/1.0/" xmlns:xmpMM = "http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef = "http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool = "Adobe Photoshop CC 2018 (Windows)" xmpMM:InstanceID = "xmp.iid:52730FACD8D111E9BB8BE3B0BF25CB85" xmpMM:DocumentID = "xmp.did:52730FADD8D111E9BB8BE3B0BF25CB85" xmpMM:DerivedFrom stRef:instanceID = "xmp.iid:52730FAAD8D111E9BB8BE3B0BF25CB85" stRef:documentID = "xmp.did:52730FABD8D111E9BB8BE3B0BF25CB85" xpacket = end="r" ----- Output complete without errors. IPTC Core (Adobe XMP) Expand All / Collapse All / Show/Hide XMP Source / Show/Hide XMP Legend xpacket = begin="i>>?" id="W5M0MpCehiHzreSzNTczkc9d" x:xmpmeta xmlns:x = "adobe:ns:meta/" x:xmptk = "Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 " rdf:RDF xmlns:rdf = "http://www.w3.org/1999/02/22-rdf-syntax-ns#" rdf:Description rdf:about = "" xmlns:xmp = "http://ns.adobe.com/xap/1.0/" xmlns:xmpMM = "http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef = "http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool = "Adobe Photoshop CC 2018 (Windows)" xmpMM:InstanceID = "xmp.iid:55F65675D8D111E98EC8BB6F497D72E0" xmpMM:DocumentID = "xmp.did:55F65676D8D111E98EC8BB6F497D72E0" xmpMM:DerivedFrom stRef:instanceID = "xmp.iid:55F65673D8D111E98EC8BB6F497D72E0" stRef:documentID = "xmp.did:55F65674D8D111E98EC8BB6F497D72E0" xpacket = end="r" ------- Output complete without errors. IPTC Core (Adobe XMP) Expand All / Collapse All / Show/Hide XMP Source / Show/Hide XMP Legend xpacket = begin="i>>?" id="W5M0MpCehiHzreSzNTczkc9d" x:xmpmeta xmlns:x = "adobe:ns:meta/" x:xmptk = "Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 " rdf:RDF xmlns:rdf = "http://www.w3.org/1999/02/22-rdf-syntax-ns#" rdf:Description rdf:about = "" xmlns:xmp = "http://ns.adobe.com/xap/1.0/" xmlns:xmpMM = "http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef = "http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool = "Adobe Photoshop CC 2018 (Windows)" xmpMM:InstanceID = "xmp.iid:34978FE4D8D111E9A63AB99110779965" xmpMM:DocumentID = "xmp.did:34978FE5D8D111E9A63AB99110779965" xmpMM:DerivedFrom stRef:instanceID = "xmp.iid:34978FE2D8D111E9A63AB99110779965" stRef:documentID = "xmp.did:34978FE3D8D111E9A63AB99110779965" xpacket = end="r" ------ Output complete without errors. IPTC Core (Adobe XMP) Expand All / Collapse All / Show/Hide XMP Source / Show/Hide XMP Legend xpacket = begin="i>>?" id="W5M0MpCehiHzreSzNTczkc9d" x:xmpmeta xmlns:x = "adobe:ns:meta/" x:xmptk = "Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 " rdf:RDF xmlns:rdf = "http://www.w3.org/1999/02/22-rdf-syntax-ns#" rdf:Description rdf:about = "" xmlns:xmp = "http://ns.adobe.com/xap/1.0/" xmlns:xmpMM = "http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef = "http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool = "Adobe Photoshop CC 2018 (Windows)" xmpMM:InstanceID = "xmp.iid:45D70A0CD8D111E984F7F4992807E616" xmpMM:DocumentID = "xmp.did:45D70A0DD8D111E984F7F4992807E616" xmpMM:DerivedFrom stRef:instanceID = "xmp.iid:45D70A0AD8D111E984F7F4992807E616" stRef:documentID = "xmp.did:45D70A0BD8D111E984F7F4992807E616" xpacket = end="r" ------ Output complete without errors. IPTC Core (Adobe XMP) Expand All / Collapse All / Show/Hide XMP Source / Show/Hide XMP Legend xpacket = begin="i>>?" id="W5M0MpCehiHzreSzNTczkc9d" x:xmpmeta xmlns:x = "adobe:ns:meta/" x:xmptk = "Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 " rdf:RDF xmlns:rdf = "http://www.w3.org/1999/02/22-rdf-syntax-ns#" rdf:Description rdf:about = "" xmlns:xmp = "http://ns.adobe.com/xap/1.0/" xmlns:xmpMM = "http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef = "http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool = "Adobe Photoshop CC 2018 (Windows)" xmpMM:InstanceID = "xmp.iid:40FF4ED6D8D111E9B8A28CFF2D3726E0" xmpMM:DocumentID = "xmp.did:40FF4ED7D8D111E9B8A28CFF2D3726E0" xmpMM:DerivedFrom stRef:instanceID = "xmp.iid:40FF4ED4D8D111E9B8A28CFF2D3726E0" stRef:documentID = "xmp.did:40FF4ED5D8D111E9B8A28CFF2D3726E0" xpacket = end="r" ----- Output complete without errors. IPTC Core (Adobe XMP) Expand All / Collapse All / Show/Hide XMP Source / Show/Hide XMP Legend xpacket = begin="i>>?" id="W5M0MpCehiHzreSzNTczkc9d" x:xmpmeta xmlns:x = "adobe:ns:meta/" x:xmptk = "Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 " rdf:RDF xmlns:rdf = "http://www.w3.org/1999/02/22-rdf-syntax-ns#" rdf:Description rdf:about = "" xmlns:xmp = "http://ns.adobe.com/xap/1.0/" xmlns:xmpMM = "http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef = "http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool = "Adobe Photoshop CC 2018 (Windows)" xmpMM:InstanceID = "xmp.iid:4EE8BABDD8D111E98F1ED2467302ED00" xmpMM:DocumentID = "xmp.did:4EE8BABED8D111E98F1ED2467302ED00" xmpMM:DerivedFrom stRef:instanceID = "xmp.iid:4EE8BABBD8D111E98F1ED2467302ED00" stRef:documentID = "xmp.did:4EE8BABCD8D111E98F1ED2467302ED00" xpacket = end="r" ---- Output complete without errors. IPTC Coded Character Set = 27, 37, 71 Record Version = 2 IPTC Core (Adobe XMP) Expand All / Collapse All / Show/Hide XMP Source / Show/Hide XMP Legend xpacket = begin="i>>?" id="W5M0MpCehiHzreSzNTczkc9d" x:xmpmeta xmlns:x = "adobe:ns:meta/" x:xmptk = "Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 " rdf:RDF xmlns:rdf = "http://www.w3.org/1999/02/22-rdf-syntax-ns#" rdf:Description rdf:about = "" xmlns:xmp = "http://ns.adobe.com/xap/1.0/" xmlns:xmpMM = "http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt = "http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:stRef = "http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:dc = "http://purl.org/dc/elements/1.1/" xmlns:photoshop = "http://ns.adobe.com/photoshop/1.0/" xmlns:xmpRights = "http://ns.adobe.com/xap/1.0/rights/" xmp:CreatorTool = "Adobe Photoshop Elements 12.0 Windows" xmp:ModifyDate = "2020-01-07T13:45:07-08:00" xmp:CreateDate = "2011-05-10T18:15:54-07:00" xmp:MetadataDate = "2020-01-07T13:45:07-08:00" xmpMM:DocumentID = "adobe:docid:photoshop:2f768c5f-3774-5542-88b1-75ef0d2af75e" xmpMM:InstanceID = "xmp.iid:1e23942d-4995-3a40-8713-6cf2e773d386" xmpMM:OriginalDocumentID = "adobe:docid:photoshop:09f27011-6106-11da-96c9-b0c2d41de7c2" dc:format = "image/jpeg" photoshop:LegacyIPTCDigest = "FCE11F89C8B7C9782F346234075877EB" photoshop:ColorMode = "3" photoshop:ICCProfile = "sRGB IEC61966-2.1" xmpRights:Marked = "False" xmpMM:History rdf:Seq rdf:li stEvt:action = "saved" stEvt:instanceID = "xmp.iid:3F34A5AB1F96E611A8E1D51E5CC78D5E" stEvt:when = "2016-10-19T10:16:09-07:00" stEvt:softwareAgent = "Adobe Photoshop Elements 12.0 Windows" stEvt:changed = "/" rdf:li stEvt:action = "converted" stEvt:parameters = "from application/vnd.adobe.photoshop to image/jpeg" rdf:li stEvt:action = "derived" stEvt:parameters = "converted from application/vnd.adobe.photoshop to image/jpeg" rdf:li stEvt:action = "saved" stEvt:instanceID = "xmp.iid:4034A5AB1F96E611A8E1D51E5CC78D5E" stEvt:when = "2016-10-19T10:16:09-07:00" stEvt:softwareAgent = "Adobe Photoshop Elements 12.0 Windows" stEvt:changed = "/" rdf:li stEvt:action = "saved" stEvt:instanceID = "xmp.iid:1e23942d-4995-3a40-8713-6cf2e773d386" stEvt:when = "2020-01-07T13:45:07-08:00" stEvt:softwareAgent = "Adobe Photoshop CC 2018 (Windows)" stEvt:changed = "/" xmpMM:DerivedFrom stRef:instanceID = "xmp.iid:3F34A5AB1F96E611A8E1D51E5CC78D5E" stRef:documentID = "adobe:docid:photoshop:09f27011-6106-11da-96c9-b0c2d41de7c2" stRef:originalDocumentID = "adobe:docid:photoshop:09f27011-6106-11da-96c9-b0c2d41de7c2" xpacket = end="w" EXIF IFD0 Image Width {0x0100} = 2539 pixels Image Length {0x0101} = 1995 pixels Bits Per Sample {0x0102} = 8,8,8 Photometric Interpretation {0x0106} = RGB (2) Camera Make {0x010F} = HP Camera Model {0x0110} = HP psc2500 Picture Orientation {0x0112} = normal (1) Samples Per Pixel {0x0115} = 3 X-Resolution {0x011A} = 1813571/10000 ===> 181.36 Y-Resolution {0x011B} = 1813571/10000 ===> 181.36 X/Y-Resolution Unit {0x0128} = inch (2) Software / Firmware Version {0x0131} = Adobe Photoshop CC 2018 (Windows) Last Modified Date/Time {0x0132} = 2020:01:07 13:45:07 Y/Cb/Cr Positioning (Subsampling) {0x0213} = co-sited / datum point (2) Reference Value of Black/White Point {0x0214} = 0/1,255/1,128/1,255/1,128/1,255/1 EXIF Sub IFD EXIF Version {0x9000} = 0220 Components Configuration {0x9101} = 0x01,0x02,0x03,0x00 / YCbCr FlashPix Version {0xA000} = 0100 Colour Space {0xA001} = sRGB (1) Image Width {0xA002} = 400 pixels Image Height {0xA003} = 314 pixels EXIF IFD1 Compression {0x0103} = JPEG compression (6) X-Resolution {0x011A} = 72/1 ===> 72 Y-Resolution {0x011B} = 72/1 ===> 72 X/Y-Resolution Unit {0x0128} = inch (2) Embedded thumbnail image: ------------ Output complete without errors. IPTC Coded Character Set = 27, 37, 71 Record Version = 0 IPTC Core (Adobe XMP) Expand All / Collapse All / Show/Hide XMP Source / Show/Hide XMP Legend xpacket = begin="i>>?" id="W5M0MpCehiHzreSzNTczkc9d" x:xmpmeta xmlns:x = "adobe:ns:meta/" x:xmptk = "Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 " rdf:RDF xmlns:rdf = "http://www.w3.org/1999/02/22-rdf-syntax-ns#" rdf:Description rdf:about = "" xmlns:dc = "http://purl.org/dc/elements/1.1/" xmlns:xmp = "http://ns.adobe.com/xap/1.0/" xmlns:xmpMM = "http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef = "http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:stEvt = "http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:photoshop = "http://ns.adobe.com/photoshop/1.0/" xmlns:xmpRights = "http://ns.adobe.com/xap/1.0/rights/" dc:format = "image/jpeg" xmp:CreatorTool = "Adobe Photoshop Elements 4.0 Windows" xmp:CreateDate = "2009-01-23T10:38:20-08:00" xmp:ModifyDate = "2020-01-07T13:45:02-08:00" xmp:MetadataDate = "2020-01-07T13:45:02-08:00" xmpMM:DocumentID = "adobe:docid:photoshop:7e865648-9c90-874f-a91e-47ddfa6519c6" xmpMM:InstanceID = "xmp.iid:8dd23f8e-594e-f647-9f56-051e794036ca" xmpMM:OriginalDocumentID = "uuid:EDAAEB3C7BE9DD11BF85F90381D8B0CD" photoshop:LegacyIPTCDigest = "00000000000000000000000000000001" photoshop:ColorMode = "3" photoshop:ICCProfile = "sRGB IEC61966-2.1" xmpRights:Marked = "False" xmpMM:DerivedFrom stRef:instanceID = "uuid:EBAAEB3C7BE9DD11BF85F90381D8B0CD" stRef:documentID = "uuid:E7AAEB3C7BE9DD11BF85F90381D8B0CD" xmpMM:History rdf:Seq rdf:li stEvt:action = "saved" stEvt:instanceID = "xmp.iid:c9ef1959-b02e-9d4f-9c16-d6a1e0afca6a" stEvt:when = "2020-01-07T13:45:02-08:00" stEvt:softwareAgent = "Adobe Photoshop CC 2018 (Windows)" stEvt:changed = "/" rdf:li stEvt:action = "saved" stEvt:instanceID = "xmp.iid:8dd23f8e-594e-f647-9f56-051e794036ca" stEvt:when = "2020-01-07T13:45:02-08:00" stEvt:softwareAgent = "Adobe Photoshop CC 2018 (Windows)" stEvt:changed = "/" xpacket = end="w" EXIF IFD0 Image Width {0x0100} = 4163 pixels Image Length {0x0101} = 3300 pixels Bits Per Sample {0x0102} = 8,8,8 Photometric Interpretation {0x0106} = RGB (2) Picture Orientation {0x0112} = normal (1) Samples Per Pixel {0x0115} = 3 X-Resolution {0x011A} = 3000000/10000 ===> 300 Y-Resolution {0x011B} = 3000000/10000 ===> 300 X/Y-Resolution Unit {0x0128} = inch (2) Software / Firmware Version {0x0131} = Adobe Photoshop CC 2018 (Windows) Last Modified Date/Time {0x0132} = 2020:01:07 13:45:02 EXIF Sub IFD EXIF Version {0x9000} = 0221 Colour Space {0xA001} = sRGB (1) Image Width {0xA002} = 400 pixels Image Height {0xA003} = 317 pixels EXIF IFD1 Compression {0x0103} = JPEG compression (6) X-Resolution {0x011A} = 72/1 ===> 72 Y-Resolution {0x011B} = 72/1 ===> 72 X/Y-Resolution Unit {0x0128} = inch (2) Embedded thumbnail image: Output complete without errors. IPTC Coded Character Set = 27, 37, 71, 32, 47, 32, 27, 37, 71 Record Version = 4 Date Created = 2017/08/29 Time Created = 14:40:50+00:00 Digital Creation Date = 2017/08/29 IPTC Core (Adobe XMP) Expand All / Collapse All / Show/Hide XMP Source / Show/Hide XMP Legend xpacket = begin="i>>?" id="W5M0MpCehiHzreSzNTczkc9d" x:xmpmeta xmlns:x = "adobe:ns:meta/" x:xmptk = "Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 " rdf:RDF xmlns:rdf = "http://www.w3.org/1999/02/22-rdf-syntax-ns#" rdf:Description rdf:about = "" xmlns:aux = "http://ns.adobe.com/exif/1.0/aux/" xmlns:xmp = "http://ns.adobe.com/xap/1.0/" xmlns:photoshop = "http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM = "http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt = "http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:stRef = "http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:dc = "http://purl.org/dc/elements/1.1/" xmlns:crs = "http://ns.adobe.com/camera-raw-settings/1.0/" aux:SerialNumber = "652303072" aux:LensInfo = "24/1 70/1 0/0 0/0" aux:Lens = "EF24-70mm f/2.8L USM" aux:LensID = "230" aux:ImageNumber = "0" aux:ApproximateFocusDistance = "319/100" aux:FlashCompensation = "0/1" aux:Firmware = "2.1.2" xmp:ModifyDate = "2018-02-28T10:27:34-08:00" xmp:CreateDate = "2017-08-29T14:40:50" xmp:Rating = "2" xmp:CreatorTool = "Adobe Photoshop Lightroom 5.7.1 (Macintosh)" xmp:MetadataDate = "2018-02-28T10:27:34-08:00" photoshop:DateCreated = "2017-08-29T14:40:50.057" photoshop:LegacyIPTCDigest = "7EE8FE672B9C13B0DF7D2DD28FDC14FF" photoshop:ColorMode = "3" photoshop:ICCProfile = "sRGB IEC61966-2.1" xmpMM:DocumentID = "adobe:docid:photoshop:71bdca61-5d43-117b-9918-cd71e5205e4c" xmpMM:OriginalDocumentID = "1B841AF98C9C0BB16942A7E209E1F70D" xmpMM:InstanceID = "xmp.iid:786ee2d3-e546-40b1-a23b-63c13cf2cdb5" dc:format = "image/jpeg" crs:Version = "8.7.1" crs:ProcessVersion = "6.7" crs:WhiteBalance = "Custom" crs:AutoWhiteVersion = "134348800" crs:Temperature = "4750" crs:Tint = "-15" crs:Saturation = "0" crs:Sharpness = "25" crs:LuminanceSmoothing = "0" crs:ColorNoiseReduction = "25" crs:VignetteAmount = "0" crs:ShadowTint = "0" crs:RedHue = "0" crs:RedSaturation = "0" crs:GreenHue = "0" crs:GreenSaturation = "0" crs:BlueHue = "0" crs:BlueSaturation = "0" crs:Vibrance = "0" crs:HueAdjustmentRed = "+15" crs:HueAdjustmentOrange = "+5" crs:HueAdjustmentYellow = "0" crs:HueAdjustmentGreen = "0" crs:HueAdjustmentAqua = "0" crs:HueAdjustmentBlue = "0" crs:HueAdjustmentPurple = "0" crs:HueAdjustmentMagenta = "0" crs:SaturationAdjustmentRed = "0" crs:SaturationAdjustmentOrange = "-5" crs:SaturationAdjustmentYellow = "0" crs:SaturationAdjustmentGreen = "0" crs:SaturationAdjustmentAqua = "0" crs:SaturationAdjustmentBlue = "0" crs:SaturationAdjustmentPurple = "0" crs:SaturationAdjustmentMagenta = "0" crs:LuminanceAdjustmentRed = "0" crs:LuminanceAdjustmentOrange = "0" crs:LuminanceAdjustmentYellow = "0" crs:LuminanceAdjustmentGreen = "0" crs:LuminanceAdjustmentAqua = "0" crs:LuminanceAdjustmentBlue = "0" crs:LuminanceAdjustmentPurple = "0" crs:LuminanceAdjustmentMagenta = "0" crs:SplitToningShadowHue = "0" crs:SplitToningShadowSaturation = "0" crs:SplitToningHighlightHue = "0" crs:SplitToningHighlightSaturation = "0" crs:SplitToningBalance = "0" crs:ParametricShadows = "0" crs:ParametricDarks = "0" crs:ParametricLights = "0" crs:ParametricHighlights = "0" crs:ParametricShadowSplit = "25" crs:ParametricMidtoneSplit = "50" crs:ParametricHighlightSplit = "75" crs:SharpenRadius = "+1.0" crs:SharpenDetail = "25" crs:SharpenEdgeMasking = "0" crs:PostCropVignetteAmount = "0" crs:GrainAmount = "0" crs:ColorNoiseReductionDetail = "50" crs:ColorNoiseReductionSmoothness = "50" crs:LensProfileEnable = "0" crs:LensManualDistortionAmount = "0" crs:PerspectiveVertical = "0" crs:PerspectiveHorizontal = "0" crs:PerspectiveRotate = "0.0" crs:PerspectiveScale = "100" crs:PerspectiveAspect = "0" crs:PerspectiveUpright = "0" crs:AutoLateralCA = "0" crs:Exposure2012 = "0.00" crs:Contrast2012 = "+45" crs:Highlights2012 = "0" crs:Shadows2012 = "0" crs:Whites2012 = "0" crs:Blacks2012 = "0" crs:Clarity2012 = "0" crs:DefringePurpleAmount = "0" crs:DefringePurpleHueLo = "30" crs:DefringePurpleHueHi = "70" crs:DefringeGreenAmount = "0" crs:DefringeGreenHueLo = "40" crs:DefringeGreenHueHi = "60" crs:ConvertToGrayscale = "False" crs:ToneCurveName = "Linear" crs:ToneCurveName2012 = "Linear" crs:CameraProfile = "Adobe Standard" crs:LensProfileSetup = "LensDefaults" crs:HasSettings = "True" crs:CropTop = "0" crs:CropLeft = "0.055312" crs:CropBottom = "1" crs:CropRight = "0.944688" crs:CropAngle = "3.16472" crs:CropConstrainToWarp = "0" crs:HasCrop = "True" crs:AlreadyApplied = "True" xmpMM:History rdf:Seq rdf:li stEvt:action = "derived" stEvt:parameters = "converted from image/x-canon-cr2 to image/jpeg, saved to new location" rdf:li stEvt:action = "saved" stEvt:instanceID = "xmp.iid:f6abcf59-341e-4bff-86d0-2fcbdd1077eb" stEvt:when = "2017-11-06T09:48:59-08:00" stEvt:softwareAgent = "Adobe Photoshop Lightroom 5.7.1 (Macintosh)" stEvt:changed = "/" rdf:li stEvt:action = "saved" stEvt:instanceID = "xmp.iid:786ee2d3-e546-40b1-a23b-63c13cf2cdb5" stEvt:when = "2018-02-28T10:27:34-08:00" stEvt:softwareAgent = "Adobe Photoshop CC 2017 (Macintosh)" stEvt:changed = "/" xmpMM:DerivedFrom stRef:documentID = "1B841AF98C9C0BB16942A7E209E1F70D" stRef:originalDocumentID = "1B841AF98C9C0BB16942A7E209E1F70D" crs:ToneCurve rdf:Seq rdf:li ==> "0, 0" rdf:li ==> "255, 255" crs:ToneCurveRed rdf:Seq rdf:li ==> "0, 0" rdf:li ==> "255, 255" crs:ToneCurveGreen rdf:Seq rdf:li ==> "0, 0" rdf:li ==> "255, 255" crs:ToneCurveBlue rdf:Seq rdf:li ==> "0, 0" rdf:li ==> "255, 255" crs:ToneCurvePV2012 rdf:Seq rdf:li ==> "0, 0" rdf:li ==> "255, 255" crs:ToneCurvePV2012Red rdf:Seq rdf:li ==> "0, 0" rdf:li ==> "255, 255" crs:ToneCurvePV2012Green rdf:Seq rdf:li ==> "0, 0" rdf:li ==> "255, 255" crs:ToneCurvePV2012Blue rdf:Seq rdf:li ==> "0, 0" rdf:li ==> "255, 255" crs:CircularGradientBasedCorrections rdf:Seq rdf:li rdf:Description crs:What = "Correction" crs:CorrectionAmount = "1.000000" crs:CorrectionActive = "true" crs:LocalSaturation = "0.000000" crs:LocalSharpness = "0.000000" crs:LocalBrightness = "0.000000" crs:LocalToningHue = "0.000000" crs:LocalToningSaturation = "0.000000" crs:LocalExposure2012 = "0.075000" crs:LocalContrast2012 = "0.250702" crs:LocalHighlights2012 = "-0.307584" crs:LocalShadows2012 = "0.186710" crs:LocalClarity2012 = "0.000000" crs:LocalLuminanceNoise = "0.000000" crs:LocalMoire = "0.000000" crs:LocalDefringe = "0.000000" crs:LocalTemperature = "0.000000" crs:LocalTint = "0.000000" crs:CorrectionMasks rdf:Seq rdf:li crs:What = "Mask/CircularGradient" crs:MaskValue = "1.000000" crs:Top = "0.034708" crs:Left = "0.527443" crs:Bottom = "0.741254" crs:Right = "0.660358" crs:Angle = "3.164720" crs:Midpoint = "+50" crs:Roundness = "0" crs:Feather = "+50" crs:Flipped = "true" crs:Version = "+2" rdf:li rdf:Description crs:What = "Correction" crs:CorrectionAmount = "1.000000" crs:CorrectionActive = "true" crs:LocalSaturation = "0.000000" crs:LocalSharpness = "0.000000" crs:LocalBrightness = "0.000000" crs:LocalToningHue = "0.000000" crs:LocalToningSaturation = "0.000000" crs:LocalExposure2012 = "-0.175000" crs:LocalContrast2012 = "0.000000" crs:LocalHighlights2012 = "-0.010000" crs:LocalShadows2012 = "0.000000" crs:LocalClarity2012 = "0.000000" crs:LocalLuminanceNoise = "0.000000" crs:LocalMoire = "0.000000" crs:LocalDefringe = "0.000000" crs:LocalTemperature = "0.000000" crs:LocalTint = "0.000000" crs:CorrectionMasks rdf:Seq rdf:li crs:What = "Mask/CircularGradient" crs:MaskValue = "1.000000" crs:Top = "-0.052021" crs:Left = "0.453188" crs:Bottom = "0.823836" crs:Right = "0.922314" crs:Angle = "3.164720" crs:Midpoint = "+50" crs:Roundness = "0" crs:Feather = "+50" crs:Flipped = "false" crs:Version = "+2" xpacket = end="w" EXIF IFD0 Image Width {0x0100} = 3463 pixels Image Length {0x0101} = 5194 pixels Bits Per Sample {0x0102} = 8,8,8 Photometric Interpretation {0x0106} = RGB (2) Camera Make {0x010F} = Canon Camera Model {0x0110} = Canon EOS 5D Mark II Picture Orientation {0x0112} = normal (1) Samples Per Pixel {0x0115} = 3 X-Resolution {0x011A} = 720000/10000 ===> 72 Y-Resolution {0x011B} = 720000/10000 ===> 72 X/Y-Resolution Unit {0x0128} = inch (2) Software / Firmware Version {0x0131} = Adobe Photoshop CC 2017 (Macintosh) Last Modified Date/Time {0x0132} = 2018:02:28 10:27:34 EXIF Sub IFD Exposure Time (1 / Shutter Speed) {0x829A} = 1/160 second ===> 0.00625 second Lens F-Number / F-Stop {0x829D} = 56/10 ===> f/5.6 Exposure Program {0x8822} = manual control (1) ISO Speed Ratings {0x8827} = 200 EXIF Version {0x9000} = 0230 Original Date/Time {0x9003} = 2017:08:29 14:40:50 Digitization Date/Time {0x9004} = 2017:08:29 14:40:50 Shutter Speed Value (APEX) {0x9201} = 7321928/1000000 Shutter Speed (Exposure Time) = 1/160 second Aperture Value (APEX) {0x9202} = 4970854/1000000 Aperture = f/5.6 Exposure Bias (EV) {0x9204} = 0/1 ===> 0 Max Aperture Value (APEX) {0x9205} = 3/1 ===> 3 Max Aperture = f/2.83 Metering Mode {0x9207} = pattern / multi-segment (5) Flash {0x9209} = n/a (16) Focal Length {0x920A} = 43/1 mm ===> 43 mm Original Subsecond Time {0x9291} = 57 Digitized Subsecond Time {0x9292} = 57 Colour Space {0xA001} = sRGB (1) Image Width {0xA002} = 450 pixels Image Height {0xA003} = 675 pixels Focal Plane X-Resolution {0xA20E} = 5616000/1459 ===> 3849.21 Focal Plane Y-Resolution {0xA20F} = 3744000/958 ===> 3908.14 Focal Plane X/Y-Resolution Unit {0xA210} = inch (2) Custom Rendered {0xA401} = normal process (0) Exposure Mode {0xA402} = manual exposure (1) White Balance {0xA403} = auto (0) Scene Capture Type {0xA406} = standard (0) Body Serial Number {0xA431} = 652303072 Lens Specification {0xA432} = 24-70mm FNaN-NaN Lens Model {0xA434} = EF24-70mm f/2.8L USM EXIF IFD1 Compression {0x0103} = JPEG compression (6) X-Resolution {0x011A} = 72/1 ===> 72 Y-Resolution {0x011B} = 72/1 ===> 72 X/Y-Resolution Unit {0x0128} = inch (2) Embedded thumbnail image: Output complete without errors. IPTC Record Version = 0 IPTC Core (Adobe XMP) Expand All / Collapse All / Show/Hide XMP Source / Show/Hide XMP Legend xpacket = begin="i>>?" id="W5M0MpCehiHzreSzNTczkc9d" x:xmpmeta xmlns:x = "adobe:ns:meta/" x:xmptk = "Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 " rdf:RDF xmlns:rdf = "http://www.w3.org/1999/02/22-rdf-syntax-ns#" rdf:Description rdf:about = "" xmlns:xmp = "http://ns.adobe.com/xap/1.0/" xmlns:xmpMM = "http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt = "http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:stRef = "http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:photoshop = "http://ns.adobe.com/photoshop/1.0/" xmlns:dc = "http://purl.org/dc/elements/1.1/" xmp:CreatorTool = "Adobe Photoshop CC 2019 (Macintosh)" xmp:CreateDate = "2019-08-05T14:26:34-07:00" xmp:MetadataDate = "2019-10-03T13:59:19-07:00" xmp:ModifyDate = "2019-10-03T13:59:19-07:00" xmpMM:InstanceID = "xmp.iid:d5cf9caa-f4b9-de4b-8017-6e3a80bba7bc" xmpMM:DocumentID = "adobe:docid:photoshop:8b4ff900-d1ee-e94a-9bf2-d544ef633093" xmpMM:OriginalDocumentID = "xmp.did:d9c4faf8-eccb-4526-b937-6b38ab2d0974" photoshop:ColorMode = "3" photoshop:ICCProfile = "Adobe RGB (1998)" dc:format = "image/jpeg" xmpMM:History rdf:Seq rdf:li stEvt:action = "created" stEvt:instanceID = "xmp.iid:d9c4faf8-eccb-4526-b937-6b38ab2d0974" stEvt:when = "2019-08-05T14:26:34-07:00" stEvt:softwareAgent = "Adobe Photoshop CC 2019 (Macintosh)" rdf:li stEvt:action = "saved" stEvt:instanceID = "xmp.iid:5f1ef5df-678c-4c62-a1c2-c2e9b9540ba6" stEvt:when = "2019-08-05T14:26:34-07:00" stEvt:softwareAgent = "Adobe Photoshop CC 2019 (Macintosh)" stEvt:changed = "/" rdf:li stEvt:action = "saved" stEvt:instanceID = "xmp.iid:506b8c83-a762-a542-a809-d850c8ac5d22" stEvt:when = "2019-10-03T13:59:19-07:00" stEvt:softwareAgent = "Adobe Photoshop CC 2018 (Windows)" stEvt:changed = "/" rdf:li stEvt:action = "converted" stEvt:parameters = "from image/png to image/jpeg" rdf:li stEvt:action = "derived" stEvt:parameters = "converted from image/png to image/jpeg" rdf:li stEvt:action = "saved" stEvt:instanceID = "xmp.iid:d5cf9caa-f4b9-de4b-8017-6e3a80bba7bc" stEvt:when = "2019-10-03T13:59:19-07:00" stEvt:softwareAgent = "Adobe Photoshop CC 2018 (Windows)" stEvt:changed = "/" xmpMM:DerivedFrom stRef:instanceID = "xmp.iid:506b8c83-a762-a542-a809-d850c8ac5d22" stRef:documentID = "adobe:docid:photoshop:40bdb99f-dfe1-2844-8668-31d558483cee" stRef:originalDocumentID = "xmp.did:d9c4faf8-eccb-4526-b937-6b38ab2d0974" photoshop:DocumentAncestors rdf:Bag rdf:li ==> "adobe:docid:photoshop:7d7669eb-767b-244d-b3b7-cae7fe3b8ca1" rdf:li ==> "xmp.did:35014222-b333-4082-aec3-0350617f4d4c" rdf:li ==> "xmp.did:bcf9f947-0597-4dbb-b028-81ea9c77d49b" xpacket = end="w" EXIF IFD0 Picture Orientation {0x0112} = normal (1) X-Resolution {0x011A} = 720000/10000 ===> 72 Y-Resolution {0x011B} = 720000/10000 ===> 72 X/Y-Resolution Unit {0x0128} = inch (2) Software / Firmware Version {0x0131} = Adobe Photoshop CC 2018 (Windows) Last Modified Date/Time {0x0132} = 2019:10:03 13:59:19 EXIF Sub IFD Colour Space {0xA001} = uncalibrated (65535) Image Width {0xA002} = 120 pixels Image Height {0xA003} = 150 pixels EXIF IFD1 Compression {0x0103} = JPEG compression (6) X-Resolution {0x011A} = 72/1 ===> 72 Y-Resolution {0x011B} = 72/1 ===> 72 X/Y-Resolution Unit {0x0128} = inch (2) Embedded thumbnail image: Output complete without errors. IPTC Record Version = 0 IPTC Core (Adobe XMP) Expand All / Collapse All / Show/Hide XMP Source / Show/Hide XMP Legend xpacket = begin="i>>?" id="W5M0MpCehiHzreSzNTczkc9d" x:xmpmeta xmlns:x = "adobe:ns:meta/" x:xmptk = "Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 " rdf:RDF xmlns:rdf = "http://www.w3.org/1999/02/22-rdf-syntax-ns#" rdf:Description rdf:about = "" xmlns:xmp = "http://ns.adobe.com/xap/1.0/" xmlns:xmpMM = "http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt = "http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:stRef = "http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:photoshop = "http://ns.adobe.com/photoshop/1.0/" xmlns:dc = "http://purl.org/dc/elements/1.1/" xmp:CreatorTool = "Adobe Photoshop CC 2019 (Macintosh)" xmp:CreateDate = "2019-07-24T09:06:44-07:00" xmp:MetadataDate = "2019-10-03T13:57:07-07:00" xmp:ModifyDate = "2019-10-03T13:57:07-07:00" xmpMM:InstanceID = "xmp.iid:4c7e2cd7-a5c4-c746-a48e-fe1aebcf708b" xmpMM:DocumentID = "adobe:docid:photoshop:3c31bf2d-2e3e-034d-9219-8ce1f8578484" xmpMM:OriginalDocumentID = "xmp.did:d95248ed-3f9c-4453-a738-7def799aeca5" photoshop:ColorMode = "3" photoshop:ICCProfile = "Adobe RGB (1998)" dc:format = "image/jpeg" xmpMM:History rdf:Seq rdf:li stEvt:action = "created" stEvt:instanceID = "xmp.iid:d95248ed-3f9c-4453-a738-7def799aeca5" stEvt:when = "2019-07-24T09:06:44-07:00" stEvt:softwareAgent = "Adobe Photoshop CC 2019 (Macintosh)" rdf:li stEvt:action = "saved" stEvt:instanceID = "xmp.iid:42c2053f-2d91-42f8-8970-3d60ea8db4eb" stEvt:when = "2019-07-24T09:06:44-07:00" stEvt:softwareAgent = "Adobe Photoshop CC 2019 (Macintosh)" stEvt:changed = "/" rdf:li stEvt:action = "saved" stEvt:instanceID = "xmp.iid:6f64c07a-059c-9e4f-b42a-f26d7670e180" stEvt:when = "2019-10-03T13:57:07-07:00" stEvt:softwareAgent = "Adobe Photoshop CC 2018 (Windows)" stEvt:changed = "/" rdf:li stEvt:action = "converted" stEvt:parameters = "from image/png to image/jpeg" rdf:li stEvt:action = "derived" stEvt:parameters = "converted from image/png to image/jpeg" rdf:li stEvt:action = "saved" stEvt:instanceID = "xmp.iid:4c7e2cd7-a5c4-c746-a48e-fe1aebcf708b" stEvt:when = "2019-10-03T13:57:07-07:00" stEvt:softwareAgent = "Adobe Photoshop CC 2018 (Windows)" stEvt:changed = "/" xmpMM:DerivedFrom stRef:instanceID = "xmp.iid:6f64c07a-059c-9e4f-b42a-f26d7670e180" stRef:documentID = "adobe:docid:photoshop:77491708-dd0c-6b42-9cd8-3ec639c97c42" stRef:originalDocumentID = "xmp.did:d95248ed-3f9c-4453-a738-7def799aeca5" photoshop:DocumentAncestors rdf:Bag rdf:li ==> "adobe:docid:photoshop:53c0ca47-649d-914f-ad71-71c71cf8422b" xpacket = end="w" EXIF IFD0 Picture Orientation {0x0112} = normal (1) X-Resolution {0x011A} = 720000/10000 ===> 72 Y-Resolution {0x011B} = 720000/10000 ===> 72 X/Y-Resolution Unit {0x0128} = inch (2) Software / Firmware Version {0x0131} = Adobe Photoshop CC 2018 (Windows) Last Modified Date/Time {0x0132} = 2019:10:03 13:57:07 EXIF Sub IFD Colour Space {0xA001} = uncalibrated (65535) Image Width {0xA002} = 120 pixels Image Height {0xA003} = 150 pixels EXIF IFD1 Compression {0x0103} = JPEG compression (6) X-Resolution {0x011A} = 72/1 ===> 72 Y-Resolution {0x011B} = 72/1 ===> 72 X/Y-Resolution Unit {0x0128} = inch (2) Embedded thumbnail image: Output complete without errors. IPTC Record Version = 0 Date Created = 2015/07/16 Time Created = 07:30:14+00:00 IPTC Core (Adobe XMP) Expand All / Collapse All / Show/Hide XMP Source / Show/Hide XMP Legend xpacket = begin="i>>?" id="W5M0MpCehiHzreSzNTczkc9d" x:xmpmeta xmlns:x = "adobe:ns:meta/" x:xmptk = "Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 " rdf:RDF xmlns:rdf = "http://www.w3.org/1999/02/22-rdf-syntax-ns#" rdf:Description rdf:about = "" xmlns:xmp = "http://ns.adobe.com/xap/1.0/" xmlns:photoshop = "http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM = "http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt = "http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc = "http://purl.org/dc/elements/1.1/" xmp:CreatorTool = "3.10.49-g1f41ca8" xmp:ModifyDate = "2019-10-23T14:25:52-07:00" xmp:CreateDate = "2015-07-16T07:30:14" xmp:MetadataDate = "2019-10-23T14:25:52-07:00" photoshop:DateCreated = "2015-07-16T07:30:14.837" photoshop:ColorMode = "3" photoshop:ICCProfile = "sRGB IEC61966-2.1" xmpMM:DocumentID = "adobe:docid:photoshop:7277c9b0-85a7-4440-ae3b-02a197893b4d" xmpMM:InstanceID = "xmp.iid:b01ddeba-324a-44c1-b3c5-3573eb2d33a4" xmpMM:OriginalDocumentID = "4A502BAD24EF4C11E68A8BEB39DD210B" dc:format = "image/jpeg" xmpMM:History rdf:Seq rdf:li stEvt:action = "saved" stEvt:instanceID = "xmp.iid:c393f693-8520-4e32-8608-abdb7433e21d" stEvt:when = "2019-10-23T14:25:52-07:00" stEvt:softwareAgent = "Adobe Photoshop CC 2019 (Macintosh)" stEvt:changed = "/" rdf:li stEvt:action = "saved" stEvt:instanceID = "xmp.iid:b01ddeba-324a-44c1-b3c5-3573eb2d33a4" stEvt:when = "2019-10-23T14:25:52-07:00" stEvt:softwareAgent = "Adobe Photoshop CC 2019 (Macintosh)" stEvt:changed = "/" xpacket = end="w" EXIF IFD0 Image Width {0x0100} = 5376 pixels Image Length {0x0101} = 3024 pixels Bits Per Sample {0x0102} = 8,8,8 Photometric Interpretation {0x0106} = RGB (2) Camera Make {0x010F} = HTC Camera Model {0x0110} = 0PJA2 Picture Orientation {0x0112} = normal (1) Samples Per Pixel {0x0115} = 3 X-Resolution {0x011A} = 720000/10000 ===> 72 Y-Resolution {0x011B} = 720000/10000 ===> 72 X/Y-Resolution Unit {0x0128} = inch (2) Software / Firmware Version {0x0131} = Adobe Photoshop CC 2019 (Macintosh) Last Modified Date/Time {0x0132} = 2019:10:23 14:25:52 Y/Cb/Cr Positioning (Subsampling) {0x0213} = centered / center of pixel array (1) EXIF Sub IFD Exposure Time (1 / Shutter Speed) {0x829A} = 1/120 second ===> 0.00833 second Lens F-Number / F-Stop {0x829D} = 220/100 ===> f/2.2 Exposure Program {0x8822} = n/a (0) ISO Speed Ratings {0x8827} = 80 EXIF Version {0x9000} = 0220 Original Date/Time {0x9003} = 2015:07:16 07:30:14 Digitization Date/Time {0x9004} = 2015:07:16 07:30:14 Components Configuration {0x9101} = 0x01,0x02,0x03,0x00 / YCbCr Compressed Bits per Pixel {0x9102} = 4000/1000 ===> 4 Shutter Speed Value (APEX) {0x9201} = 6907/1000 Shutter Speed (Exposure Time) = 1/120.01 second Aperture Value (APEX) {0x9202} = 227/100 Aperture = f/2.2 Brightness (APEX) {0x9203} = 484/100 Brightness = 28.64 foot-lambert Exposure Bias (EV) {0x9204} = 0/6 ===> 0 Metering Mode {0x9207} = center weighted average (2) Light Source / White Balance {0x9208} = unknown (0) Flash {0x9209} = n/a (0) Focal Length {0x920A} = 473/100 mm ===> 4.73 mm Last Modified Subsecond Time {0x9290} = 061807 Original Subsecond Time {0x9291} = 837 Digitized Subsecond Time {0x9292} = 061807 FlashPix Version {0xA000} = 0100 Colour Space {0xA001} = sRGB (1) Image Width {0xA002} = 430 pixels Image Height {0xA003} = 430 pixels Image Sensing Method {0xA217} = n/a (1) Scene Type {0xA301} = directly photographed image Custom Rendered {0xA401} = normal process (0) Exposure Mode {0xA402} = auto exposure (0) White Balance {0xA403} = auto (0) Digital Zoom Ratio {0xA404} = 0/0 ===> NaN Focal Length in 35mm Film {0xA405} = 5 Scene Capture Type {0xA406} = standard (0) Gain Control {0xA407} = n/a (0) Contrast {0xA408} = normal (0) Saturation {0xA409} = normal (0) Sharpness {0xA40A} = hard (2) EXIF IFD1 Compression {0x0103} = JPEG compression (6) X-Resolution {0x011A} = 72/1 ===> 72 Y-Resolution {0x011B} = 72/1 ===> 72 X/Y-Resolution Unit {0x0128} = inch (2) Embedded thumbnail image: EXIF Interoperability IFD Interoperability Index {0x0001} = R98 Interoperability Version {0x0002} = 0100 Output complete without errors. IPTC Coded Character Set = 27, 37, 71 Record Version = 0 Caption/Abstract = Business people working on financial data on a digital tablet. One looks like the manager working with employees, or a financial advisor. It may also be a training session. All are dressed in business casual clothing. Headline = Business people working on financial data on a digital tablet. Special Instructions = Model Released (MR) By-line = courtneyk By-line Title = Contributor Credit = Getty Images Source = E+ Object Name = 1127866562 Date Created = 2018/11/24 Time Created = 00:00:00+00:00 Country/Primary Location Name = Unspecified Country/Primary Location Code = UNS Keywords = people / women / showing / marketing / men / technology / business / office / pointing / planning / entrepreneur / teamwork / customer / desk / computer / cooperation / data / meeting / finance / investment / growth / loan / discussion / copy space / expertise / improvement / graph / chart / calculating / forecasting / advice / business person / strategy / analyzing / diagram / board room / organization / businessman / business strategy / digital tablet / digital display / financial advisor / group of people / making money / three people / close-up / professional occupation / report - document IPTC Core (Adobe XMP) Expand All / Collapse All / Show/Hide XMP Source / Show/Hide XMP Legend xpacket = begin="i>>?" id="W5M0MpCehiHzreSzNTczkc9d" x:xmpmeta xmlns:x = "adobe:ns:meta/" x:xmptk = "Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 " rdf:RDF xmlns:rdf = "http://www.w3.org/1999/02/22-rdf-syntax-ns#" rdf:Description rdf:about = "" xmlns:photoshop = "http://ns.adobe.com/photoshop/1.0/" xmlns:Iptc4xmpCore = "http://iptc.org/std/Iptc4xmpCore/1.0/xmlns/" xmlns:GettyImagesGIFT = "http://xmp.gettyimages.com/gift/1.0/" xmlns:plus = "http://ns.useplus.org/ldf/xmp/1.0/" xmlns:dc = "http://purl.org/dc/elements/1.1/" xmlns:xmp = "http://ns.adobe.com/xap/1.0/" xmlns:aux = "http://ns.adobe.com/exif/1.0/aux/" xmlns:xmpMM = "http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt = "http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" photoshop:Source = "E+" photoshop:AuthorsPosition = "Contributor" photoshop:CopyrightFlag = "true" photoshop:Country = "Unspecified" photoshop:DateCreated = "2018-11-24" photoshop:Credit = "Getty Images" photoshop:Headline = "Business people working on financial data on a digital tablet." photoshop:URL = "http://www.gettyimages.com" photoshop:Instructions = "Model Released (MR) " photoshop:LegacyIPTCDigest = "E23829B866B91A37DC86E4CD5EC77B4A" photoshop:ColorMode = "3" photoshop:ICCProfile = "Adobe RGB (1998)" Iptc4xmpCore:CountryCode = "UNS" GettyImagesGIFT:Dlref = "gnOR5KQ8B86VTkpqHDmNqQ==" GettyImagesGIFT:ImageRank = "3" GettyImagesGIFT:AssetID = "1127866562" plus:LicsensorURL = "http://www.gettyimages.com" dc:format = "image/jpeg" xmp:CreatorTool = "Adobe Photoshop CC 2019 (Macintosh)" xmp:ModifyDate = "2019-10-23T14:24:21-07:00" xmp:CreateDate = "2018-11-24T12:01:45" xmp:MetadataDate = "2019-10-23T14:24:21-07:00" aux:SerialNumber = "7400737" aux:LensInfo = "700/10 2000/10 28/10 28/10" aux:Lens = "70.0-200.0 mm f/2.8" xmpMM:DocumentID = "adobe:docid:photoshop:516c0ae9-9ad3-c342-b30b-96746b2133dc" xmpMM:InstanceID = "xmp.iid:e566b627-bda5-4632-b571-f1caef594bc2" xmpMM:OriginalDocumentID = "715E0CB8F6A0C87311FD0B2CFF0808C6" dc:title rdf:Alt rdf:li ==> "1127866562" xml:lang = "x-default" dc:subject rdf:Bag rdf:li ==> "people" rdf:li ==> "women" rdf:li ==> "showing" rdf:li ==> "marketing" rdf:li ==> "men" rdf:li ==> "technology" rdf:li ==> "business" rdf:li ==> "office" rdf:li ==> "pointing" rdf:li ==> "planning" rdf:li ==> "entrepreneur" rdf:li ==> "teamwork" rdf:li ==> "customer" rdf:li ==> "desk" rdf:li ==> "computer" rdf:li ==> "cooperation" rdf:li ==> "data" rdf:li ==> "meeting" rdf:li ==> "finance" rdf:li ==> "investment" rdf:li ==> "growth" rdf:li ==> "loan" rdf:li ==> "discussion" rdf:li ==> "copy space" rdf:li ==> "expertise" rdf:li ==> "improvement" rdf:li ==> "graph" rdf:li ==> "chart" rdf:li ==> "calculating" rdf:li ==> "forecasting" rdf:li ==> "advice" rdf:li ==> "business person" rdf:li ==> "strategy" rdf:li ==> "analyzing" rdf:li ==> "diagram" rdf:li ==> "board room" rdf:li ==> "organization" rdf:li ==> "businessman" rdf:li ==> "business strategy" rdf:li ==> "digital tablet" rdf:li ==> "digital display" rdf:li ==> "financial advisor" rdf:li ==> "group of people" rdf:li ==> "making money" rdf:li ==> "three people" rdf:li ==> "close-up" rdf:li ==> "professional occupation" rdf:li ==> "report - document" dc:creator rdf:Seq rdf:li ==> "courtneyk" dc:description rdf:Alt rdf:li ==> "Business people working on financial data on a digital tablet. One looks like the manager working with employees, or a financial advisor. It may also be a training session. All are dressed in business casual clothing." xml:lang = "x-default" xmpMM:History rdf:Seq rdf:li stEvt:action = "saved" stEvt:instanceID = "xmp.iid:b02beda7-ceb5-49e5-a91d-330958b85680" stEvt:when = "2019-10-23T14:24:21-07:00" stEvt:softwareAgent = "Adobe Photoshop CC 2019 (Macintosh)" stEvt:changed = "/" rdf:li stEvt:action = "saved" stEvt:instanceID = "xmp.iid:e566b627-bda5-4632-b571-f1caef594bc2" stEvt:when = "2019-10-23T14:24:21-07:00" stEvt:softwareAgent = "Adobe Photoshop CC 2019 (Macintosh)" stEvt:changed = "/" xpacket = end="w" EXIF IFD0 Image Width {0x0100} = 5568 pixels Image Length {0x0101} = 3712 pixels Bits Per Sample {0x0102} = 8,8,8 Photometric Interpretation {0x0106} = RGB (2) Image Description {0x010E} = Business people working on financial data on a digital tablet. One looks like the manager working with employees, or a financial advisor. It may also be a training session. All are dressed in business casual clothing. Camera Make {0x010F} = NIKON CORPORATION Camera Model {0x0110} = NIKON D5 Picture Orientation {0x0112} = normal (1) Samples Per Pixel {0x0115} = 3 X-Resolution {0x011A} = 720000/10000 ===> 72 Y-Resolution {0x011B} = 720000/10000 ===> 72 X/Y-Resolution Unit {0x0128} = inch (2) Software / Firmware Version {0x0131} = Adobe Photoshop CC 2019 (Macintosh) Last Modified Date/Time {0x0132} = 2019:10:23 14:24:21 Artist {0x013B} = courtneyk EXIF Sub IFD Exposure Time (1 / Shutter Speed) {0x829A} = 1/50 second ===> 0.02 second Lens F-Number / F-Stop {0x829D} = 28/10 ===> f/2.8 Exposure Program {0x8822} = manual control (1) ISO Speed Ratings {0x8827} = 400 Sensitivity Type {0x8830} = recommended exposure index (REI) (2) Recommended Exposure Index {0x8832} = 400 EXIF Version {0x9000} = 0221 Original Date/Time {0x9003} = 2018:11:24 12:01:45 Digitization Date/Time {0x9004} = 2018:11:24 12:01:45 Shutter Speed Value (APEX) {0x9201} = 5643856/1000000 Shutter Speed (Exposure Time) = 1/50 second Aperture Value (APEX) {0x9202} = 2970854/1000000 Aperture = f/2.8 Exposure Bias (EV) {0x9204} = 0/6 ===> 0 Max Aperture Value (APEX) {0x9205} = 30/10 ===> 3 Max Aperture = f/2.83 Metering Mode {0x9207} = center weighted average (2) Light Source / White Balance {0x9208} = unknown (0) Flash {0x9209} = n/a (0) Focal Length {0x920A} = 860/10 mm ===> 86 mm Original Subsecond Time {0x9291} = 85 Colour Space {0xA001} = uncalibrated (65535) Image Width {0xA002} = 430 pixels Image Height {0xA003} = 430 pixels Focal Plane X-Resolution {0xA20E} = 50857775/32768 ===> 1552.06 Focal Plane Y-Resolution {0xA20F} = 50857775/32768 ===> 1552.06 Focal Plane X/Y-Resolution Unit {0xA210} = centimeter (3) Image Sensing Method {0xA217} = one-chip color area sensor (2) Image Source {0xA300} = 0x03,0x00,0x00,0x00 Scene Type {0xA301} = directly photographed image Colour Filter Array (CFA) Geometric Pattern {0xA302} = 0x02,0x00,0x02,0x00,0x00,0x01,0x01,0x02 Custom Rendered {0xA401} = normal process (0) Exposure Mode {0xA402} = manual exposure (1) White Balance {0xA403} = manual (1) Focal Length in 35mm Film {0xA405} = 86 Scene Capture Type {0xA406} = standard (0) Gain Control {0xA407} = n/a (0) Contrast {0xA408} = normal (0) Saturation {0xA409} = normal (0) Sharpness {0xA40A} = normal (0) Subject Distance Range {0xA40C} = unknown (0) Body Serial Number {0xA431} = 7400737 Lens Specification {0xA432} = 70-200mm F2.8-2.8 Lens Model {0xA434} = 70.0-200.0 mm f/2.8 EXIF IFD1 Compression {0x0103} = JPEG compression (6) X-Resolution {0x011A} = 72/1 ===> 72 Y-Resolution {0x011B} = 72/1 ===> 72 X/Y-Resolution Unit {0x0128} = inch (2) Embedded thumbnail image: Output complete without errors. IPTC Record Version = 0 Copyright Notice = (C) 2018 Gardner Media Group LLC IPTC Core (Adobe XMP) Expand All / Collapse All / Show/Hide XMP Source / Show/Hide XMP Legend xpacket = begin="i>>?" id="W5M0MpCehiHzreSzNTczkc9d" x:xmpmeta xmlns:x = "adobe:ns:meta/" x:xmptk = "Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 " rdf:RDF xmlns:rdf = "http://www.w3.org/1999/02/22-rdf-syntax-ns#" rdf:Description rdf:about = "" xmlns:photoshop = "http://ns.adobe.com/photoshop/1.0/" xmlns:dc = "http://purl.org/dc/elements/1.1/" xmlns:xmpMM = "http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt = "http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:xmp = "http://ns.adobe.com/xap/1.0/" photoshop:LegacyIPTCDigest = "1282700C3E321744A562ADF2AF4E123D" photoshop:ColorMode = "3" photoshop:ICCProfile = "sRGB IEC61966-2.1" dc:format = "image/jpeg" xmpMM:DocumentID = "E06BA773807FF574029B1E01376FCF45" xmpMM:InstanceID = "xmp.iid:1c60b36e-91ee-4f3a-b071-553da4cee106" xmpMM:OriginalDocumentID = "E06BA773807FF574029B1E01376FCF45" xmp:CreateDate = "2019-10-23T12:10:17-07:00" xmp:ModifyDate = "2019-10-23T12:46:33-07:00" xmp:MetadataDate = "2019-10-23T12:46:33-07:00" dc:rights rdf:Alt rdf:li ==> "A(C) 2018 Gardner Media Group LLC" xml:lang = "x-default" xmpMM:History rdf:Seq rdf:li stEvt:action = "saved" stEvt:instanceID = "xmp.iid:1c60b36e-91ee-4f3a-b071-553da4cee106" stEvt:when = "2019-10-23T12:46:33-07:00" stEvt:softwareAgent = "Adobe Photoshop CC 2019 (Macintosh)" stEvt:changed = "/" xpacket = end="w" EXIF IFD0 Image Width {0x0100} = 360 pixels Image Length {0x0101} = 450 pixels Bits Per Sample {0x0102} = 8,8,8 Photometric Interpretation {0x0106} = RGB (2) Picture Orientation {0x0112} = normal (1) Samples Per Pixel {0x0115} = 3 X-Resolution {0x011A} = 720000/10000 ===> 72 Y-Resolution {0x011B} = 720000/10000 ===> 72 X/Y-Resolution Unit {0x0128} = inch (2) Software / Firmware Version {0x0131} = Adobe Photoshop CC 2019 (Macintosh) Last Modified Date/Time {0x0132} = 2019:10:23 12:46:33 Copyright Owner {0x8298} = A(C) 2018 Gardner Media Group LLC EXIF Sub IFD EXIF Version {0x9000} = 0221 Colour Space {0xA001} = sRGB (1) Image Width {0xA002} = 220 pixels Image Height {0xA003} = 308 pixels EXIF IFD1 Compression {0x0103} = JPEG compression (6) X-Resolution {0x011A} = 72/1 ===> 72 Y-Resolution {0x011B} = 72/1 ===> 72 X/Y-Resolution Unit {0x0128} = inch (2) Embedded thumbnail image: Output complete without errors. IPTC Record Version = 0 Copyright Notice = (C) 2018 Gardner Media Group LLC IPTC Core (Adobe XMP) Expand All / Collapse All / Show/Hide XMP Source / Show/Hide XMP Legend xpacket = begin="i>>?" id="W5M0MpCehiHzreSzNTczkc9d" x:xmpmeta xmlns:x = "adobe:ns:meta/" x:xmptk = "Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 " rdf:RDF xmlns:rdf = "http://www.w3.org/1999/02/22-rdf-syntax-ns#" rdf:Description rdf:about = "" xmlns:photoshop = "http://ns.adobe.com/photoshop/1.0/" xmlns:dc = "http://purl.org/dc/elements/1.1/" xmlns:xmpMM = "http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt = "http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:xmp = "http://ns.adobe.com/xap/1.0/" photoshop:LegacyIPTCDigest = "1282700C3E321744A562ADF2AF4E123D" photoshop:ColorMode = "3" photoshop:ICCProfile = "sRGB IEC61966-2.1" dc:format = "image/jpeg" xmpMM:DocumentID = "0E757ADC73D7E64BFFEC2732983EA5CB" xmpMM:InstanceID = "xmp.iid:d85409d9-0aec-4c9b-9910-1acae6c973b7" xmpMM:OriginalDocumentID = "0E757ADC73D7E64BFFEC2732983EA5CB" xmp:CreateDate = "2019-10-23T12:10:35-07:00" xmp:ModifyDate = "2019-10-23T12:45:35-07:00" xmp:MetadataDate = "2019-10-23T12:45:35-07:00" dc:rights rdf:Alt rdf:li ==> "A(C) 2018 Gardner Media Group LLC" xml:lang = "x-default" xmpMM:History rdf:Seq rdf:li stEvt:action = "saved" stEvt:instanceID = "xmp.iid:d85409d9-0aec-4c9b-9910-1acae6c973b7" stEvt:when = "2019-10-23T12:45:35-07:00" stEvt:softwareAgent = "Adobe Photoshop CC 2019 (Macintosh)" stEvt:changed = "/" xpacket = end="w" EXIF IFD0 Image Width {0x0100} = 360 pixels Image Length {0x0101} = 450 pixels Bits Per Sample {0x0102} = 8,8,8 Photometric Interpretation {0x0106} = RGB (2) Picture Orientation {0x0112} = normal (1) Samples Per Pixel {0x0115} = 3 X-Resolution {0x011A} = 720000/10000 ===> 72 Y-Resolution {0x011B} = 720000/10000 ===> 72 X/Y-Resolution Unit {0x0128} = inch (2) Software / Firmware Version {0x0131} = Adobe Photoshop CC 2019 (Macintosh) Last Modified Date/Time {0x0132} = 2019:10:23 12:45:35 Copyright Owner {0x8298} = A(C) 2018 Gardner Media Group LLC EXIF Sub IFD EXIF Version {0x9000} = 0221 Colour Space {0xA001} = sRGB (1) Image Width {0xA002} = 220 pixels Image Height {0xA003} = 308 pixels EXIF IFD1 Compression {0x0103} = JPEG compression (6) X-Resolution {0x011A} = 72/1 ===> 72 Y-Resolution {0x011B} = 72/1 ===> 72 X/Y-Resolution Unit {0x0128} = inch (2) Embedded thumbnail image: Output complete without errors. IPTC Record Version = 0 Copyright Notice = (C) 2018 Gardner Media Group LLC IPTC Core (Adobe XMP) Expand All / Collapse All / Show/Hide XMP Source / Show/Hide XMP Legend xpacket = begin="i>>?" id="W5M0MpCehiHzreSzNTczkc9d" x:xmpmeta xmlns:x = "adobe:ns:meta/" x:xmptk = "Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 " rdf:RDF xmlns:rdf = "http://www.w3.org/1999/02/22-rdf-syntax-ns#" rdf:Description rdf:about = "" xmlns:photoshop = "http://ns.adobe.com/photoshop/1.0/" xmlns:dc = "http://purl.org/dc/elements/1.1/" xmlns:xmpMM = "http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt = "http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:xmp = "http://ns.adobe.com/xap/1.0/" photoshop:LegacyIPTCDigest = "1282700C3E321744A562ADF2AF4E123D" photoshop:ColorMode = "3" photoshop:ICCProfile = "sRGB IEC61966-2.1" dc:format = "image/jpeg" xmpMM:DocumentID = "2D38B2BD3E043F26BAF7A148687B6911" xmpMM:InstanceID = "xmp.iid:6e066106-96f5-4fd4-87a0-abc09f09d8cc" xmpMM:OriginalDocumentID = "2D38B2BD3E043F26BAF7A148687B6911" xmp:CreateDate = "2019-10-23T12:09:48-07:00" xmp:ModifyDate = "2019-10-23T12:46:22-07:00" xmp:MetadataDate = "2019-10-23T12:46:22-07:00" dc:rights rdf:Alt rdf:li ==> "A(C) 2018 Gardner Media Group LLC" xml:lang = "x-default" xmpMM:History rdf:Seq rdf:li stEvt:action = "saved" stEvt:instanceID = "xmp.iid:6e066106-96f5-4fd4-87a0-abc09f09d8cc" stEvt:when = "2019-10-23T12:46:22-07:00" stEvt:softwareAgent = "Adobe Photoshop CC 2019 (Macintosh)" stEvt:changed = "/" xpacket = end="w" EXIF IFD0 Image Width {0x0100} = 360 pixels Image Length {0x0101} = 450 pixels Bits Per Sample {0x0102} = 8,8,8 Photometric Interpretation {0x0106} = RGB (2) Picture Orientation {0x0112} = normal (1) Samples Per Pixel {0x0115} = 3 X-Resolution {0x011A} = 720000/10000 ===> 72 Y-Resolution {0x011B} = 720000/10000 ===> 72 X/Y-Resolution Unit {0x0128} = inch (2) Software / Firmware Version {0x0131} = Adobe Photoshop CC 2019 (Macintosh) Last Modified Date/Time {0x0132} = 2019:10:23 12:46:22 Copyright Owner {0x8298} = A(C) 2018 Gardner Media Group LLC EXIF Sub IFD EXIF Version {0x9000} = 0221 Colour Space {0xA001} = sRGB (1) Image Width {0xA002} = 220 pixels Image Height {0xA003} = 308 pixels EXIF IFD1 Compression {0x0103} = JPEG compression (6) X-Resolution {0x011A} = 72/1 ===> 72 Y-Resolution {0x011B} = 72/1 ===> 72 X/Y-Resolution Unit {0x0128} = inch (2) Embedded thumbnail image: Output complete without errors. IPTC Record Version = 0 Date Created = 2007/08/28 Time Created = 12:07:24+00:00 IPTC Core (Adobe XMP) Expand All / Collapse All / Show/Hide XMP Source / Show/Hide XMP Legend xpacket = begin="i>>?" id="W5M0MpCehiHzreSzNTczkc9d" x:xmpmeta xmlns:x = "adobe:ns:meta/" x:xmptk = "Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 " rdf:RDF xmlns:rdf = "http://www.w3.org/1999/02/22-rdf-syntax-ns#" rdf:Description rdf:about = "" xmlns:xmp = "http://ns.adobe.com/xap/1.0/" xmlns:xmpMM = "http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt = "http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:photoshop = "http://ns.adobe.com/photoshop/1.0/" xmlns:dc = "http://purl.org/dc/elements/1.1/" xmp:CreatorTool = "Adobe Photoshop CS2 Windows" xmp:CreateDate = "2007-08-28T12:07:24" xmp:ModifyDate = "2019-10-23T12:46:18-07:00" xmp:MetadataDate = "2019-10-23T12:46:18-07:00" xmpMM:InstanceID = "xmp.iid:48acdf4c-0473-4869-b15b-516b5ba09ea8" xmpMM:DocumentID = "65D1D73367B072F124CB955E0BE0FDEE" xmpMM:OriginalDocumentID = "65D1D73367B072F124CB955E0BE0FDEE" photoshop:DateCreated = "2007-08-28T12:07:24" photoshop:ColorMode = "3" photoshop:ICCProfile = "sRGB IEC61966-2.1" dc:format = "image/jpeg" xmpMM:History rdf:Seq rdf:li stEvt:action = "saved" stEvt:instanceID = "xmp.iid:48acdf4c-0473-4869-b15b-516b5ba09ea8" stEvt:when = "2019-10-23T12:46:18-07:00" stEvt:softwareAgent = "Adobe Photoshop CC 2019 (Macintosh)" stEvt:changed = "/" xpacket = end="w" EXIF IFD0 Image Width {0x0100} = 362 pixels Image Length {0x0101} = 450 pixels Bits Per Sample {0x0102} = 8,8,8 Photometric Interpretation {0x0106} = RGB (2) Picture Orientation {0x0112} = normal (1) Samples Per Pixel {0x0115} = 3 X-Resolution {0x011A} = 720000/10000 ===> 72 Y-Resolution {0x011B} = 720000/10000 ===> 72 X/Y-Resolution Unit {0x0128} = inch (2) Software / Firmware Version {0x0131} = Adobe Photoshop CC 2019 (Macintosh) Last Modified Date/Time {0x0132} = 2019:10:23 12:46:18 Microsoft.Padding {0xEA1C} = 0x1ce0x08 EXIF Sub IFD EXIF Version {0x9000} = 0221 Original Date/Time {0x9003} = 2007:08:28 12:07:24 Digitization Date/Time {0x9004} = 2007:08:28 12:07:24 Original Subsecond Time {0x9291} = 00 Digitized Subsecond Time {0x9292} = 00 Colour Space {0xA001} = sRGB (1) Image Width {0xA002} = 220 pixels Image Height {0xA003} = 308 pixels Microsoft.Padding {0xEA1C} = 0x1ce0x08 EXIF IFD1 Compression {0x0103} = JPEG compression (6) X-Resolution {0x011A} = 72/1 ===> 72 Y-Resolution {0x011B} = 72/1 ===> 72 X/Y-Resolution Unit {0x0128} = inch (2) Embedded thumbnail image: Output complete without errors. IPTC Coded Character Set = 27, 37, 71 Record Version = 4 By-line = Jennifer Raudebaugh Date Created = 2015/05/15 Time Created = 10:33:33+00:00 Digital Creation Date = 2015/05/15 Copyright Notice = Jennifer Raudebaugh Photography IPTC Core (Adobe XMP) Expand All / Collapse All / Show/Hide XMP Source / Show/Hide XMP Legend xpacket = begin="i>>?" id="W5M0MpCehiHzreSzNTczkc9d" x:xmpmeta xpacket = end="w" EXIF IFD0 Image Width {0x0100} = 3246 pixels Image Length {0x0101} = 2160 pixels Bits Per Sample {0x0102} = 8,8,8 Photometric Interpretation {0x0106} = RGB (2) Camera Make {0x010F} = NIKON CORPORATION Camera Model {0x0110} = NIKON D700 Picture Orientation {0x0112} = normal (1) Samples Per Pixel {0x0115} = 3 X-Resolution {0x011A} = 720000/10000 ===> 72 Y-Resolution {0x011B} = 720000/10000 ===> 72 X/Y-Resolution Unit {0x0128} = inch (2) Software / Firmware Version {0x0131} = Adobe Photoshop CC 2019 (Macintosh) Last Modified Date/Time {0x0132} = 2019:07:02 15:11:44 Artist {0x013B} = Jennifer Raudebaugh Copyright Owner {0x8298} = Jennifer Raudebaugh Photography EXIF Sub IFD Exposure Time (1 / Shutter Speed) {0x829A} = 1/500 second ===> 0.002 second Lens F-Number / F-Stop {0x829D} = 35/10 ===> f/3.5 Exposure Program {0x8822} = shutter priority (4) ISO Speed Ratings {0x8827} = 320 EXIF Version {0x9000} = 0230 Original Date/Time {0x9003} = 2015:05:15 10:33:33 Digitization Date/Time {0x9004} = 2015:05:15 10:33:33 Shutter Speed Value (APEX) {0x9201} = 8965784/1000000 Shutter Speed (Exposure Time) = 1/500 second Aperture Value (APEX) {0x9202} = 361471/100000 Aperture = f/3.5 Exposure Bias (EV) {0x9204} = 0/6 ===> 0 Max Aperture Value (APEX) {0x9205} = 30/10 ===> 3 Max Aperture = f/2.83 Metering Mode {0x9207} = pattern / multi-segment (5) Light Source / White Balance {0x9208} = unknown (0) Flash {0x9209} = n/a (0) Focal Length {0x920A} = 2000/10 mm ===> 200 mm Original Subsecond Time {0x9291} = 42 Digitized Subsecond Time {0x9292} = 42 Colour Space {0xA001} = sRGB (1) Image Width {0xA002} = 1800 pixels Image Height {0xA003} = 400 pixels Image Sensing Method {0xA217} = one-chip color area sensor (2) Image Source {0xA300} = 0x03,0x00,0x00,0x00 Scene Type {0xA301} = directly photographed image Colour Filter Array (CFA) Geometric Pattern {0xA302} = 0x02,0x00,0x02,0x00,0x00,0x01,0x01,0x02 Custom Rendered {0xA401} = normal process (0) Exposure Mode {0xA402} = auto exposure (0) White Balance {0xA403} = auto (0) Digital Zoom Ratio {0xA404} = 1/1 ===> 1 Focal Length in 35mm Film {0xA405} = 200 Scene Capture Type {0xA406} = standard (0) Gain Control {0xA407} = n/a (0) Contrast {0xA408} = normal (0) Saturation {0xA409} = normal (0) Sharpness {0xA40A} = normal (0) Subject Distance Range {0xA40C} = unknown (0) Body Serial Number {0xA431} = 2316754 Lens Specification {0xA432} = 70-200mm F2.8-2.8 Lens Model {0xA434} = 70.0-200.0 mm f/2.8 EXIF IFD1 Compression {0x0103} = JPEG compression (6) X-Resolution {0x011A} = 72/1 ===> 72 Y-Resolution {0x011B} = 72/1 ===> 72 X/Y-Resolution Unit {0x0128} = inch (2) Embedded thumbnail image: Output complete without errors. IPTC Coded Character Set = 27, 37, 71 Record Version = 4 Date Created = 2011/10/19 Time Created = 11:19:28: Digital Creation Date = 2011/10/19 Digital Creation Time = 11:19:28: By-line = Jennifer Raudebaugh Copyright Notice = Jennifer Raudebaugh Photography IPTC Core (Adobe XMP) Expand All / Collapse All / Show/Hide XMP Source / Show/Hide XMP Legend xpacket = begin="i>>?" id="W5M0MpCehiHzreSzNTczkc9d" x:xmpmeta xpacket = end="w" EXIF IFD0 Camera Make {0x010F} = NIKON CORPORATION Camera Model {0x0110} = NIKON D700 X-Resolution {0x011A} = 240/1 ===> 240 Y-Resolution {0x011B} = 240/1 ===> 240 X/Y-Resolution Unit {0x0128} = inch (2) Software / Firmware Version {0x0131} = Adobe Photoshop Lightroom 3.5 (Macintosh) Last Modified Date/Time {0x0132} = 2011:10:20 10:26:20 Artist {0x013B} = Jennifer Raudebaugh Copyright Owner {0x8298} = Jennifer Raudebaugh Photography EXIF Sub IFD Exposure Time (1 / Shutter Speed) {0x829A} = 1/160 second ===> 0.00625 second Lens F-Number / F-Stop {0x829D} = 9/1 ===> f/9 Exposure Program {0x8822} = aperture priority (3) ISO Speed Ratings {0x8827} = 500 EXIF Version {0x9000} = 0230 Original Date/Time {0x9003} = 2011:10:19 11:19:28 Digitization Date/Time {0x9004} = 2011:10:19 11:19:28 Shutter Speed Value (APEX) {0x9201} = 7321928/1000000 Shutter Speed (Exposure Time) = 1/160 second Aperture Value (APEX) {0x9202} = 633985/100000 Aperture = f/9 Exposure Bias (EV) {0x9204} = 2/6 ===> 0.33 Max Aperture Value (APEX) {0x9205} = 30/10 ===> 3 Max Aperture = f/2.83 Distance to Subject {0x9206} = 266/10 m Metering Mode {0x9207} = pattern / multi-segment (5) Light Source / White Balance {0x9208} = unknown (0) Flash {0x9209} = n/a (0) Focal Length {0x920A} = 700/10 mm ===> 70 mm Original Subsecond Time {0x9291} = 65 Digitized Subsecond Time {0x9292} = 65 Image Sensing Method {0xA217} = one-chip color area sensor (2) Image Source {0xA300} = 0x03,0x00,0x00,0x00 Scene Type {0xA301} = directly photographed image Colour Filter Array (CFA) Geometric Pattern {0xA302} = 0x02,0x00,0x02,0x00,0x00,0x01,0x01,0x02 Custom Rendered {0xA401} = normal process (0) Exposure Mode {0xA402} = auto exposure (0) White Balance {0xA403} = auto (0) Digital Zoom Ratio {0xA404} = 1/1 ===> 1 Focal Length in 35mm Film {0xA405} = 70 Scene Capture Type {0xA406} = standard (0) Gain Control {0xA407} = low gain up (1) Contrast {0xA408} = normal (0) Saturation {0xA409} = normal (0) Sharpness {0xA40A} = normal (0) Subject Distance Range {0xA40C} = unknown (0) Body Serial Number {0xA431} = 2316754 Lens Specification {0xA432} = 70-200mm F2.8-2.8 Lens Model {0xA434} = 70.0-200.0 mm f/2.8 EXIF IFD1 Compression {0x0103} = JPEG compression (6) X-Resolution {0x011A} = 72/1 ===> 72 Y-Resolution {0x011B} = 72/1 ===> 72 X/Y-Resolution Unit {0x0128} = inch (2) Embedded thumbnail image: 2000 Hyundai Sonata KMHWF35V6YA313814 VIN KMHWF35V6YA313814 Make Hyundai Model Sonata Year 2000 Trim GLS Style/Body SEDAN 4-DR Engine 2.5L V6 DOHC 24V Make in Asan, South Korea Age 21 year(s)
