Author: Phuck Yu
Counterfeit Checks
https://web.archive.org/web/20211213210443/https://pix.mirtouf.fr/FGOiWXlW.jpg
https://web.archive.org/web/20211213210647/https://pix.mirtouf.fr/76aikMd7.jpg
https://web.archive.org/web/20211213211211/https://pix.mirtouf.fr/PHUBJJxD.jpg
Counterfeit Check Details:
Amount $*******834.83
Routing Number/ABA Number 00000*****
Account Number ***0000**
Check Number 0000********
CASC Bank of America P.O. BOX 34414 SEATTLE, WA 98124-1414
Amount $*******853.48
Routing Number/ABA Number 00000*****
Account Number ***0000**
Check Number 0000********
CASC Bank of America P.O. BOX 34414 SEATTLE, WA 98124-1414
Amount $*******866.41
Routing Number/ABA Number 00000*****
Account Number ***0000**
Check Number 0000********
CASC Bank of America P.O. BOX 34414 SEATTLE, WA 98124-1414
---------------------------------------------------------------------------
The Headquarters of where this kind of activity proliferates
https://www.nacarchitecture.com/portfolio/SCCScience.html
Consumer Reviews of Bartleby
https://www.trustpilot.com/review/bartleby.com
https://www.mamma.com/us/bartleby-com
https://www.complaintsboard.com/bartlebycom-b110137
https://www.sitejabber.com/reviews/bartleby.com
https://www.defaulters.com/scam/bartleby-com/
NOVAD Management Consulting Unaccredited BBB Profile
https://www.bbb.org/us/ok/oklahoma-city/profile/business-consultant/novad-management-consulting-0995-90043337/complaints
Current Alerts For This Business
Pattern of Complaint:
The BBB files indicate that this business has a pattern of complaints. In the last 3 months, the BBB has received a large number of complaints against NOVAD regarding letters informing their clients of the transfer of their mortgage loan servicing. Consumers who are attempting to get information or payoff statements for their loans have difficulty contacting NOVAD due the transition and the Covid-19 pandemic.
BBB is working closely with Novad find a resolution for the underlining cause for these complaints.
ComplaintsBoard Listings on NOVAD Management [Other victims they've been trying to defraud and swindle]
https://www.complaintsboard.com/us/ok/oklahoma-city/novad-management-consulting-2401-nw-23rd-st
Home Warranty Direct Scam Discussion Board Listings
https://800notes.com/Phone.aspx/1-800-299-4998
https://calldetective.net/800-299-4998/
Xact Loan BBB Unaccredited Listing
https://www.bbb.org/us/oh/cincinnati/profile/debt-consolidation-services/xact-loan-0292-90040588
Metromile, Inc. Auto Insurance BBB Listing
https://www.bbb.org/us/ca/san-francisco/profile/auto-insurance/metromile-inc-1116-444470
ISN Corporation BBB Unaccredited Profile
Not Elsewhere Classified After Investigation
https://www.bbb.org/us/md/bethesda/profile/not-elsewhere-classified-after-investigation/isn-corporation-0241-236001320
---------------------------------------------------------------------------
Kevin Brockbank
https://archive.ph/HWtYX
Nicole Duvernay
https://archive.is/wip/dTvcv
Pamela Jane Herrebout
https://archive.is/tjuAs/718389dae0b20accc1132d55c40c3bc1105b4d5a
License Plate: ABC5598
VIN: 4S3BMBA69B3219875
Retail Value: $4,140
Private Party Value: $9,010
Make: SUBARU
Model: Legacy
Year: 2011
Body Class: Sedan/Saloon
Doors: 4
Series: -
Type: PASSENGER CAR
Jenny Martin
https://archive.ph/HWtYX
Scott Satake
https://archive.ph/HWtYX
Alison Carol Riegel
https://archive.ph/HWtYX
Colin Smith
https://archive.is/cGgjs
Lucas Werner
https://archive.ph/HWtYX
Douglas Revelle Carney
https://archive.ph/HWtYX
Michael William Stanfield
https://archive.ph/HWtYX
Anthony Owen Lucas
https://archive.is/GFGay
Tammerra Howe/Tamerra M Howe [Anti-Vaxxer] From Otis Orchards, WA
https://web.archive.org/web/20210815164135/https://lutim.lagout.org/1jtkQSUV/d29PvX8Y.png
Jess Edmondson [Anti-Vaxxer]
https://web.archive.org/web/20210827220819/https://upload-image.rosariosis.com/L7H62MW5/tWK5R8BV.png
Taylor Jones [Anti-Vaxxer]
https://web.archive.org/web/20210827220908/https://upload-image.rosariosis.com/UrQGC0EO/TSXjiEc8.png
Ruvim Gavrilyuk
https://archive.is/rUmcZ
Lexi Michelle Dawson
https://archive.is/n0vEz/950e6e5569ee4332103372fa78a84a472f15d921
Sean Haskins
Yolanda Hahn/Yolanda M Mitchell
https://web.archive.org/web/20210731185337/https://lutim.stemy.me/XhUgl6q0/Wq0moiVR.png
Thomas Crafts [Lying Snitch]
https://archive.ph/7kkyQ/ba62999896f44914f9e0148e6e7851249f6983c7.jpg
Jaymie Crafts [The mother of the snitch]
Tiffany Nicole Husein
https://archive.ph/HWtYX
Norma Cantu
https://archive.ph/HWtYX
Heather Rebecca Slaminski
https://nb-no.facebook.com/heather.slaminski
Cory James Humphrey
https://archive.ph/HWtYX
Alexis Lisandro Guizar-Diaz
https://web.archive.org/web/20210711052653/https://pbs.twimg.com/profile_images/1377032645213790210/3JM_gLVD_400x400.jpg
Steven Smathers
https://www.linkedin.com/in/steven-smathers-2042801bb
Tito Ellis
https://media-exp1.licdn.com/dms/image/C4D03AQGg_7tXkowy-Q/profile-displayphoto-shrink_200_200/0/1517029845793?e=1625097600&v=beta&t=PbE1QDMIXiVe71t9MDQJrxavMD7pOLKVoJ1BnH3AQrE
Jordyn Noble
https://www.linkedin.com/in/jordyn-reiter-65b5b2196
Guillermo Espinosa
https://archive.ph/HWtYX
Garrett William Clark
https://archive.is/W0JVn
Tanner Joseph Hundahl
https://archive.ph/HWtYX
Ger Moua
https://www.ratemyprofessors.com/ShowRatings.jsp?tid=987470
Jason Eggerman
Jay Reedy
Broker License: #20121834
Managing Broker License: #8817
Full Name: Dr. Jamie Jo Diaz Pharm D.
Provider Type: Individual
Gender: Female
Sole Proprietor: Yes, they are the sole owner of the medical practice.
Definition:
Pharmacist:
An individual licensed by the appropriate state regulatory agency to engage in the practice of pharmacy.
The practice of pharmacy includes, but is not limited to, assessment, interpretation,...
WA Pharmacist Listings
NPI:
Their NPI Number is 1841624137
Learn what this is at: National Provider Identifier Standard from HHS and the Centers for Medicare & Medicaid Services.
Additional:
Useful things to add for visitors and potential patients: website links, office hours, specialties, etc.
Aaron Kilfoyle
Provider Data
NPI Number 1770990608
Provider Name AARON KILFOYLE MS, LAT, ATC.
Entity Type Individual
Most Important Dates
Provider Enumeration Date 07/11/2014
Last Updated 03/01/2021
Lori Hunt
https://storage.zoominfo.com/-1509858032
Ryan Carstens
https://media.spokesman.com/photos/2015/05/13/cit13_SCC.jpg
Darik French
https://media1.fdncms.com/inlander/imager/new-headline/u/original/2426999/protest1croppedweb.jpg
Brandon Birdsill
https://komonews.com/news/local/naked-man-arrested-in-community-college-womens-bathroom
Steven Smathers
https://www.medicarelist.com/counselor/steven-smathers-spokane-wa/
Stacey Reser - Helena, Montana
https://www.linkedin.com/in/stacey-reser-9a0b5454
Spokane Community College "Honor Roll"
https://www.spokesman.com/stories/2019/feb/22/area-students-make-honor-roll-at-spokane-community/
Ryan Murphy
https://www.spokesman.com/stories/2013/oct/09/former-shadle-park-teacher-breaks-court-order-head/
Anthony JuJu Predisik
https://www.spokesman.com/stories/2015/apr/03/supreme-court-rules-against-spokane-teachers-on/
Indian Trail Elementary
https://www.spokaneschools.org/indiantrail
Tyler Gabbard - North Central Wolfpack Football
https://www.maxpreps.com/wa/spokane/north-central-wolfpack/football/roster/all-time/
Campus Safety / Department Directory
https://www.spokaneschools.org/Page/334
North Central High School Class of 2011
https://www.spokesman.com/grads/north-central-high-school/2011/
North Central High School class lists - contact old friends
https://old-friends.co/school.php?s=15692
Signature Quotations:
"Don't take me. I am crazy."
-Nicole Duvernay
"Our goal is to kill creativity!"
-Nicole Duvernay
"I stole this off of the internet."
-Nicole Duvernay admitting she is a thief and a liar by stealing math questions off of the internet that blatantly infringe on copyright
"It's a conspiracy!"
-Nicole Duvernay admitting that the entire Student Body at Spokane Community College was in on a conspiracy of silence in order to save face
"We are going down this path together."
-Nicole Duvernay
"What happened?"
-Nicole Duvernay
"I'm not a real math teacher."
-Nicole Duvernay admitting she is a fake
"I.. Don't.. Actually... Remember..."
-Nicole Duvernay on answering a question after she punked unsuspecting victims into taking a fraudulent excuse for a math course
"Did I do something wrong?"
-Nicole Duvernay attempting to guilt-trip with a loaded question
"Be sure it isn't spiked."
-Nicole Duvernay suggesting that the entire Student Body at Spokane Community College are open targets for what they did
"Feeling awkward yet?"
-How Nicole Duvernay answers questions with loaded insults to the students faces
“I regret lighting the fireworks,”
-Douglas Revelle Carney
“I shouldn’t have done that.”
-Douglas Revelle Carney
“I don't feel real safe in my neighborhood anymore,”
-Douglas Revelle Carney
"I was stabbed three times, twice in the side, once in the arm right here,”
-Douglas Revelle Carney
"Stay in touch."
-Carmen Green after the fact she tried to pull a fast one and take her potential victims insurance money for all they were worth.
"welcome to higher edd"
-Rob Vogel
"I spit in his face."
-Douglas Revelle Carney explaining what he did to get arrested at Spokane Community College after admitting to assaulting a dean
“When I got to SCC, I didn’t believe that I was smart,”
-Douglas Revelle Carney
“As Doug became comfortable in the classroom, he responded very well to group work, particularly peer editing situations where students had opportunity to pool their knowledge and assist one another,”
-Sharon Miller Whiteknighting for a convicted felon/Loan Shark
“Doug became so good at this that students often asked him after class to help them with their essays.”
-Sharon Miller giving credibility to a violent criminal who really belongs in federal prison
“He is patient and listens well,”
-Sharon Miller obviously oblivious to a complete stranger from the streets
"That depends on your opinion."
-Nicole Duvernay's view on Global Warming
"Just let it go..."
-Colin Smith (who works for these scumbags), telling others to gives criminals a free-pass and to just "sit back and enjoy all of it"
"You will be successful."
-Kevin Brockbank talking to his victims collectively that had their credit and debit information charged all year without notice
"Actually, I'm making it up."
-Nicole Duvernay bragging about insulting student intelligence
"I once fell off a cliff"
-Alison Carol Riegel
"I'm not a professional."
-Scott Satake
"Scary Stuff!"
-Scott Satake making a sarcastic comment during a conversation
"We don't know the right answer."
-Ger Moua
"We only care about our money."
-Ger Moua
"You could keep digging yourself deeper... And then *poof* you're gone.."
-Tito Ellis making an implied threat of being unpersoned from history.
"You have to discriminate."
-Cory James Humphrey thinking he knows it all
"And I'll fail you and blame you!"
-Tiffany Nicole Husein admitting she sets students up for failure by taking their money and making them do assignments with no objective truth to them all done with a smile on her ugly mug
"I can muddy the water."
-Tiffany Nicole Husein Admitting that she commits white-collar crime and can get away with it.
"I don't understand."
-Carmen Green feigning confusion to act like she doesn't know what she is listening to after the fact she makes people wait over 15 minutes and that this is how she talks to people who's time she wasted.
"If it is off-campus then there is nothing we can do."
-Scott Satake Admitting that he and the faculty at Spokane Community College take the side of criminals and trouble-makers and make no effort towards accountability.
"Go see mental health."
-Scott Satake soliciting false pretenses
"I had a bet that you wouldn't make it back."
-Douglas Revelle Carney admitting he puts money through russian roulette with students lives
"The only person you confuse is yourself."
-Douglas Revelle Carney instigating a fight
"I want to go into business to sell foreign merchandise."
-Douglas Revelle Carney
"I'm 'that girl' that nobody wanted anything to do with."
-Lexi Michelle Dawson
"I got kicked out of this college ten years ago for getting into a fight with the dean of this campus."
-Douglas Revelle Carney
"I don't mean to be rude."
-Michael William Stanfield
"Hahahaaha haahahahahah EXACTLY!"
-Michael William Stanfield laughing at his own demise
"We call that a middle finger."
-Anthony Owen Lucas
"Don't you mean a 'honeytrap'?"
-Michael William Stanfield implying that Pamela Jane Herrebout is a con-artist
"You better be ready to f*****g kill me!"
-Douglas Revelle Carney inviting pre-meditated murder in his direction
"I will video stalk you."
-Travis Lee Humphries admitting to violating people's safety and personal boundaries
"This is my last time victimizing all of you!"
-Nicole Duvernay admitting she rips people off
"Hahaha I love confusing people!"
-Nicole Duvernay
"You may be feeling ripped off."
-Nicole Duvernay
"These next few weeks are really going to suck for you!"
-Nicole Duvernay
"Garrett is my favorite!"
-Nicole Duvernay
"Your my favorite!"
-Nicole Duvernay to Jordyn C Noble/Jordyn Reiter during a final exam in front of over 20 people after she got a special invitation to have a thanksgiving dinner at her place of residence.
"Here are my favorites!"
-Nicole Duvernay pointing to Anthony Owen Lucas and Michael William Stanfield out in a hallway waiting for her to unlock the doors
"What works for you does not work for me."
-Michael William Stanfield
"Who is doing this?"
-Michael William Stanfield
"We call that natural selection."
-Anthony Owen Lucas
"I prefer cheating."
-Anthony Owen Lucas on being a self-described cheater before doing the final exam and giving dirty looks to people
"Change your phone number."
-Pamela Herrebout/Pamela Huffman
"Sue Margado introduced radiology student Pam Herrebout who shared her story on her road to
recovery from alcoholism to brain surgery."
-Pamela Jane Herrebout on official record for being both an alcoholic and a batshit insane con-artist
Nicole Duvernay Ratemyprofessor Profile
https://archive.is/hBMKv
What Nicole Duvernay Really Thinks of herself as
https://archive.is/WcxqF
Her Dead Relative
https://archive.is/23XDx/044820f46396374937812b540334775d8230243a
Photo Bomb
https://archive.is/Cd4u
Hosted Kiry Shabazz to make fun of people who have been segregated against their will.
https://archive.is/4XCsX
Michael William Stanfield's Metacafe Profile
metacafe.com/channels/will0814
Douglas Revelle Carney's SWAT Arrest
https://www.khq.com/news/swat-standoff-in-west-central-ends-with-arrest/article_8fa7a037-b340-5dad-8931-0ac5408ba55e.html
Name Court Case Number Judgment Record Court Information
1 Brockbank, Kevin Charles
Defendant Spokane County Dist 9Z1086041 12-02-2019
Name Court Case Number Judgment Record Court Information
1 Werner, Lucas
Respondent Thurston County Dist UHS16-026 02-22-2016
2 Werner, Lucas Colby
Defendant Grays Harbor Dist #2 C00216012 07-16-1998
3 Werner, Lucas Colby
Defendant Olympia Municipal Ct 2Z0638820 09-17-2012
4 Werner, Lucas Colby
Respondent Thurston County Dist DV12-0076 08-06-2012
5 Werner, Lucas Colby
Defendant Grays Harbor Dist #2 C00216013 07-16-1998
6 Werner, Lucas Colby
Defendant Olympia Municipal Ct 3Z0205435 02-28-2013
7 Werner, Lucas Colby
Defendant Thurston County Dist 2Z0525297 08-15-2012
8 Werner, Lucas Colby
Respondent Spokane County Dist 16720694 01-05-2017
9 Werner, Lucas Colby
Defendant Spokane Municipal N00051841 08-19-2020
10 Werner, Lucas Colby
Defendant Spokane Municipal N00044042 08-11-2020
11 Werner, Lucas Colby
Defendant Spokane Municipal N00063296 07-13-2020
12 Werner, Lucas Colby
Defendant Spokane Municipal N00058732 04-20-2021
Name Court Case Number Judgment Record Court Information
1 Slaminski, Heather Rebecca
Defendant
Stanfield, Michael William
Defendant Spokane Municipal XZ0819890 11-09-2020
Name Court Case Number Judgment Record Court Information
1 Riegel, Alison Carol
Defendant Upper Kittitas Dist 7Z0478568 03-16-2017
2 Riegel, Alison Carol
Defendant Spokane County Dist 1A0313484 03-10-2021
Name Court Case Number Judgment Record Court Information
1 Gavrilyuk, Ruvim V Sr
Defendant Spokane County Dist 6Z0691142 07-07-2016
2 Gavrilyuk, Ruvim V Sr
Defendant Spokane County Dist 8Z0983066 10-03-2018
3 Gavrilyuk, Ruvim V Sr
Defendant Spokane County Dist 7Z0092385 11-13-2017
4 Gavrilyuk, Ruvim V Sr
Defendant Spokane County Dist 9Z0438602 04-15-2019
5 Gavrilyuk, Ruvim V Sr
Defendant Clark County Dist 8Z0662618 06-25-2018
6 Gavrilyuk, Ruvim V Sr
Defendant Spokane County Dist 1A0332602 04-26-2021
Smith, Colin
Defendant Clark County Dist 13C7410-6 10-29-2013
Smith, Colin
Defendant Tacoma Municipal A00136926 06-27-2014
Smith, Colin
Defendant Tacoma Municipal A00136927 06-27-2014
Smith, Colin
Defendant Clark County Dist 17C2824-2 07-13-2017
Smith, Colin
Defendant Spokane County Dist 18182335 10-05-2018
Smith, Colin
Defendant Lynnwood Municipal 180286517 11-08-2018
Smith, Colin
Petitioner Sno Co-south Div C03-02824 12-03-2003
Smith, Colin
Defendant Lynnwood Municipal 190190635 07-23-2019
Smith, Colin
Defendant Lynnwood Municipal 210036313 03-01-2021
Case #: CR00000526-00
Defendant: FARMER, MELANIE
Offense Date: 08/23/2000
Hearing: 03/15/2001
Charge: FORGERY
Code Section: 18.2-172
Frederick Circuit Court
Case #: CR00000526-01
Defendant: FARMER, MELANIE
Offense Date: 08/23/2000
Hearing: 07/10/2003
Charge: REV.PROB.(FORGERY)
Code Section: 19.2-306
Frederick Circuit Court
Case #: CR00000527-00
Defendant: FARMER, MELANIE
Offense Date: 08/23/2000
Hearing: 03/15/2001
Charge: UTTER FORGED CHECK
Code Section: 18.2-172
Frederick Circuit Court
Case #: CR00000527-01
Defendant: FARMER, MELANIE
Offense Date: 08/23/2000
Hearing: 07/10/2003
Charge: REV.PROB.(UTTERING)
Code Section: 19.2-306
Frederick Circuit Court
Case #: CR00000526-01
Defendant: FARMER, MELANIE
Defendant Information
Gender: FEMALE
Race: WHITE
DOB: 02/13/****
Attorney: WILLIAM CRANE
Case/Charge Information
Defendant Status: BAIL
Filed Date: 04/03/2003
Locality: COMMONWEALTH OF VA
Code Section: 19.2-306
Charge: REV.PROB.(FORGERY)
Case Type: FELONY
Class: UNCLASSIFIED
Commenced By: REINSTATEMENT
Offense Date: 08/23/2000
Arrest Date: 04/10/2003
Amended Code Section:
Amended Charge:
Amended Case Type:
Amended Class:
Appeal Information
Appeal Date:
Hearing Information
Date Time Result Type Courtroom Plea Duration Jury 07/10/2003 09:00 AM SENTENCED REVOCATION 3A
05/08/2003 09:00 AM CONTINUED REVOCATION 3A
04/10/2003 09:00 AM SET FOR TRIAL MOTION - OTHER PRE-TRIAL 3A
Disposition Information
Disposition: SENTENCE/PROBATION REVOKED
Disposition Date: 07/10/2003
Concluded By: GUILTY PLEA
Jail/Penitentiary:
Concurrent/Consecutive:
Life/Death:
Sentence Time:
Sentence Suspended:
Program Type:
Probation Type:
Probation Time:
Probation Starts:
Operator License Suspension Time:
Restriction Effective Date:
Operator License Restrictions:
Military:
Traffic Fatality:
Court/DMV Surrender:
Driver Improvement Clinic:
VASAP:
Restitution Paid:
Restitution Amount:
Fine: *
Costs: $138.00 *
Fine/Costs Paid: YES
Fine/Costs Paid Date: 11/25/2003
* This system cannot process online payments at this time. Please refer to ' How to Pay Traffic Tickets and Other Offenses ' for more information.
Service/Process
No Services/Processes found.
Pleadings/Orders
Seq. # Date Type Party Judge Book & Page Instrument Remarks 3 07/25/2003 FINAL ORDER 107, 613
2 05/08/2003 ORDER 106, 1084
1 04/10/2003 ORDER 106, 660
Frederick Circuit Court
Case #: CR00000526-00
Defendant: FARMER, MELANIE
Defendant Information
Gender: FEMALE
Race: WHITE
DOB: 02/13/****
Attorney: LUKE BOYD
Case/Charge Information
Defendant Status: BAIL
Filed Date: 10/31/2000
Locality: COMMONWEALTH OF VA
Code Section: 18.2-172
Charge: FORGERY
Case Type: FELONY
Class: CLASS 5
Commenced By: INDICTMENT
Offense Date: 08/23/2000
Arrest Date: 09/07/2000
Amended Code Section:
Amended Charge:
Amended Case Type:
Amended Class:
Appeal Information
Appeal Date:
Hearing Information
Date Time Result Type Courtroom Plea Duration Jury 03/15/2001 09:00 AM SENTENCED PRE-SENTENCE REPORT 3A
01/25/2001 09:00 AM CONTINUED PLEA 3A
12/15/2000 09:00 AM CONTINUED MOTION - OTHER PRE-TRIAL 3A
11/09/2000 09:00 AM CONTINUED MOTION - OTHER PRE-TRIAL 3A
11/09/2000 09:00 AM TRUE BILL GRAND JURY 3A
Disposition Information
Disposition: GUILTY
Disposition Date: 03/15/2001
Concluded By: GUILTY PLEA
Jail/Penitentiary: PENITENTIARY
Concurrent/Consecutive:
Life/Death:
Sentence Time: 2 Year(s)
Sentence Suspended: 2 Year(s)
Program Type:
Probation Type: SUPERVISED
Probation Time: 3 Year(s)
Probation Starts:
Operator License Suspension Time:
Restriction Effective Date:
Operator License Restrictions:
Military:
Traffic Fatality:
Court/DMV Surrender:
Driver Improvement Clinic:
VASAP:
Restitution Paid:
Restitution Amount:
Fine: *
Costs: $828.50 *
Fine/Costs Paid: YES
Fine/Costs Paid Date: 07/24/2003
* This system cannot process online payments at this time. Please refer to ' How to Pay Traffic Tickets and Other Offenses ' for more information.
Service/Process
No Services/Processes found.
Pleadings/Orders
Seq. # Date Type Party Judge Book & Page Instrument Remarks 6 04/06/2001 FINAL ORDER 99, 1417
5 03/14/2001 ORDER 99, 1040
4 02/02/2001 ORDER 99, 547
3 01/05/2001 ORDER 99, 200
2 11/28/2000 ORDER 98, 1575
1 11/09/2000 ORDER 98, 1243
Frederick Circuit Court
Case #: CR00000527-00
Defendant: FARMER, MELANIE
Defendant Information
Gender: FEMALE
Race: WHITE
DOB: 02/13/****
Attorney: LUKE BOYD
Case/Charge Information
Defendant Status: BAIL
Filed Date: 10/31/2000
Locality: COMMONWEALTH OF VA
Code Section: 18.2-172
Charge: UTTER FORGED CHECK
Case Type: FELONY
Class: CLASS 5
Commenced By: INDICTMENT
Offense Date: 08/23/2000
Arrest Date: 09/07/2000
Amended Code Section:
Amended Charge:
Amended Case Type:
Amended Class:
Appeal Information
Appeal Date:
Hearing Information
Date Time Result Type Courtroom Plea Duration Jury 03/15/2001 09:00 AM SENTENCED PRE-SENTENCE REPORT 3A
01/25/2001 09:00 AM CONTINUED PLEA 3A
12/15/2000 09:00 AM CONTINUED MOTION - OTHER PRE-TRIAL 3A
11/09/2000 09:00 AM CONTINUED MOTION - OTHER PRE-TRIAL 3A
11/09/2000 09:00 AM TRUE BILL GRAND JURY 3A
Disposition Information
Disposition: GUILTY
Disposition Date: 03/15/2001
Concluded By: GUILTY PLEA
Jail/Penitentiary: PENITENTIARY
Concurrent/Consecutive:
Life/Death:
Sentence Time: 2 Year(s)
Sentence Suspended: 2 Year(s)
Program Type:
Probation Type: SUPERVISED
Probation Time: 3 Year(s)
Probation Starts:
Operator License Suspension Time:
Restriction Effective Date:
Operator License Restrictions:
Military:
Traffic Fatality:
Court/DMV Surrender:
Driver Improvement Clinic:
VASAP:
Restitution Paid:
Restitution Amount:
Fine: *
Costs: *
Fine/Costs Paid:
Fine/Costs Paid Date:
* This system cannot process online payments at this time. Please refer to ' How to Pay Traffic Tickets and Other Offenses ' for more information.
Service/Process
No Services/Processes found.
Pleadings/Orders
Seq. # Date Type Party Judge Book & Page Instrument Remarks 1 04/06/2001 FINAL ORDER 99, 1417
Frederick Circuit Court
Case #: CR00000527-01
Defendant: FARMER, MELANIE
Defendant Information
Gender: FEMALE
Race: WHITE
DOB: 02/13/****
Attorney: WILLIAM CRANE
Case/Charge Information
Defendant Status: BAIL
Filed Date: 04/03/2003
Locality: COMMONWEALTH OF VA
Code Section: 19.2-306
Charge: REV.PROB.(UTTERING)
Case Type: FELONY
Class: UNCLASSIFIED
Commenced By: REINSTATEMENT
Offense Date: 08/23/2000
Arrest Date: 04/10/2003
Amended Code Section:
Amended Charge:
Amended Case Type:
Amended Class:
Appeal Information
Appeal Date:
Hearing Information
Date Time Result Type Courtroom Plea Duration Jury 07/10/2003 09:00 AM SENTENCED REVOCATION 3A
05/08/2003 09:00 AM CONTINUED REVOCATION 3A
04/10/2003 09:00 AM SET FOR TRIAL MOTION - OTHER PRE-TRIAL 3A
Disposition Information
Disposition: SENTENCE/PROBATION REVOKED
Disposition Date: 07/10/2003
Concluded By: GUILTY PLEA
Jail/Penitentiary: JAIL
Concurrent/Consecutive:
Life/Death:
Sentence Time: 4 Month(s)
Sentence Suspended:
Program Type:
Probation Type: SUPERVISED
Probation Time: 3 Year(s)
Probation Starts:
Operator License Suspension Time:
Restriction Effective Date:
Operator License Restrictions:
Military:
Traffic Fatality:
Court/DMV Surrender:
Driver Improvement Clinic:
VASAP:
Restitution Paid:
Restitution Amount:
Fine: *
Costs: *
Fine/Costs Paid:
Fine/Costs Paid Date:
* This system cannot process online payments at this time. Please refer to ' How to Pay Traffic Tickets and Other Offenses ' for more information.
Service/Process
No Services/Processes found.
Pleadings/Orders
Seq. # Date Type Party Judge Book & Page Instrument Remarks 1 07/25/2003 FINAL ORDER 107, 613
Douglas Revelle Carney:
Wealth Score
6
Green Score
29
Donor Score
11
Travel Score
29
Tech Score
29
Shopping Score
20
Carmen Green
UBI #: 604521018 [Does not Exist]
Qualifications
Years in Practice: 21 Years
License: Washington / LF00002255
School: Pacific Lutheran University
Year Graduated: 2001
I am a Licensed Marriage and Family Therapist and a Licensed Mental Health Counselor with over 20 years of experience.
Additional Credentials
Membership: American Association of Marriage and Family Therapists / 136512
Member Since: 2011
License No. and State: LF00009493 Washington State
Tiffany Nicole Husein
UBI# 603470018 [Does not exist]
License Number: PY60196500
NPI number: 1548685613
Show entries
Search (All columns are searched for letters/numbers entered):
FirstPrevious1NextLast
Name
Start Date
End Date
Court
Case No.
Location
Hearing Type
Case Type
Official
Status
HOWE, TAMERRA M 7/14/2020 8:00 AM 7/14/2020 DC 1960989
Ex Parte Hearing Small Claims-SC FASSBENDER, JENNIFER L Held
PRATT, KOURTNIE; HOWE, TAMERRA M
Case: 1960989
Charges: N/A
Case Type: Small Claims-SC
File Date: 09/16/2019
Incident Number: N/A
Court: District Court
Case Status: Open
Hearings
Hearing Type Date/Time Location Official Name Status
Ex Parte Hearing 07/14/2020
8:00 am
FASSBENDER, JENNIFER L Held
Non Jury Trial - Small Claim 07/08/2020
9:00 am
FASSBENDER, JENNIFER L Not Held-Other
Non Jury Trial - Small Claim 04/27/2020
9:00 am
FASSBENDER, JENNIFER L Not Held-Canceled
Non Jury Trial - Small Claim 02/03/2020
9:00 am
FASSBENDER, JENNIFER L Not Held-Continued
Non Jury Trial - Small Claim 11/19/2019
9:00 am
FASSBENDER, JENNIFER L Not Held-Continued
Name: Alison Carol Riegel
Wayup Profile: https://www.wayup.com/profile/Alison-Riegel-37695893a7/
Simbi: https://simbi.com/alison-riegel
Physician Assistant Profile: https://www.physicianassistantforum.com/profile/182750-riegel/
Youshareproject profile: https://web.archive.org/web/20210619025525/https://www.youshareproject.com/author/aglimpseofsanity/
Pinterest: https://www.pinterest.com/littleriegel/
School: Gonzaga University
Education: Bachelor of Arts in Psychology
Username: Littleriegel
**Please note that Alison Carol Riegel stole a photo of a young woman walking her dog. That isn't her original photo.**
Alison Riegel Graduates from Gonzaga University
Alison Riegel of Sammamish, WA recently earned the following degree(s):
Bachelor of Arts in Psychology
Honors: with Distinction
Gonzaga University’s Commencement ceremonies were held on May 9, 2021 at Union Stadium.
Gonzaga University is a private Catholic, Jesuit, and humanistic university providing education to more than 7,800 students. Situated along the Spokane River near downtown Spokane, Washington, Gonzaga is routinely recognized among the West's best comprehensive regional universities. Gonzaga offers 75 fields of study, 26 master's degrees, doctorate degrees in leadership studies and nursing, and a juris doctor degree through the School of Law.
11/21/20 Spokane Interview
By Kelsi ,
October 21, 2020 in WASHINGTON: University of Washington
Prev
1
2
Page 2 of 2
kaylaraphillips
Newbie
Members
1
2 posts
Posted November 20, 2020
So excited to meet everyone tomorrow!
I'm so nervous!
Kayla
Riegel
Newbie
Members
3
2 posts
Posted November 21, 2020
Hey! Found you guys late! 🙂
I'm so glad I got meet you guys and hope to meet you in person soon.
Alison Riegel
kjgrover32
Member
Members
4
14 posts
Posted November 21, 2020
Good luck to every one! Was great meeting with you all.
oit20
Newbie
Members
2
2 posts
Posted November 24, 2020
Has anyone heard anything yet? I’m going crazy 😂
Daysha Crosier
Aroohoo
Member
Members
19
16 posts
Posted November 24, 2020
I just got the call about 20 minutes ago... I cried like an absolute baby. My mouth was dry from all of it, so I tried to drink some of my coffee. Now my stomach hurts. But... I got in.
Like 3
Jwahlquist
Member
Members
28
29 posts
Posted November 24, 2020
Those of you who are accepted join our facebook page "MEDEX Spokane Class 25" 🙂
Like 1
KarenAlexander
Newbie
Members
5
3 posts
Posted November 24, 2020
I got accepted!! So excited!
Karen
Like 4
kjgrover32
Member
Members
4
14 posts
Posted November 25, 2020
I also have been accepted! Good luck to those still waiting!
Like 3
Riegel
Newbie
Members
3
2 posts
Posted November 25, 2020
Congratulations to everyone so far!! I’m still waiting 😅
Like 3
Kelsi
Member
Members
9
11 posts
Author
Posted November 25, 2020
3rd times a charm for this girl! Beyond excited!
Like 3
rm2020
Newbie
Members
2
6 posts
Posted November 25, 2020 (edited)
I got notice that I am waitlisted for now. Anyone else?
Congrats to those not stuck in limbo!
Edited November 25, 2020 by rm2020
Typo
DjH2020
Member
Members
9
12 posts
Posted November 25, 2020
I got the call this afternoon!!! I’m so excited and on cloud nine right! Good luck to everyone still waiting!
David
Prev
1
2
Page 2 of 2
11/21/20 Spokane Interview
By Kelsi ,
October 21, 2020 in WASHINGTON: University of Washington
1
2
Next
Page 1 of 2
Kelsi
Member
Members
9
11 posts
Posted October 21, 2020
Wanted to start a group for those invited to interview on 11/21 via Zoom. Almost embarrassed to say but this will be my 3rd year interviewing! Hoping 3rd times a charm. It’s been very helpful to meet fellow interviewees before the big day, so hoping we can set up a zoom meeting for us to all meet! I’d suggest doing it on 11/20 unless that doesn’t work for most. Very excited!
Like 3
MDalpias
Advanced Member
Members
19
37 posts
Posted October 21, 2020
Kelsi, I have not gotten an interview for this date. BUT! I think its awesome you've kept on it and come back each year. Good luck!
medworldpa
Newbie
Members
0
2 posts
Posted October 21, 2020
When did you receive the invite to interview in November?
Kelsi
Member
Members
9
11 posts
Author
Posted October 22, 2020
5 hours ago, medworldpa said:
When did you receive the invite to interview in November?
October 19
Like 1
caltmen
Member
Members
3
10 posts
Posted October 22, 2020
I am interviewing this date as well! I’d love to talk and meet any and everyone!
Like 2
kaylaraphillips
Newbie
Members
1
2 posts
Posted October 24, 2020
Hi everyone!
I am fortunate enough to get to interview this day as well! I can't wait to meet all of you and I am all for a prep zoom meeting!
See you soon,
Kayla
Like 1
kjgrover32
Member
Members
4
14 posts
Posted October 25, 2020
Hello everyone! I also will be interviewing on Nov. 21. I think it would be nice to meet everyone on the 20th as well! Good luck to us all.
Like 1
kjgrover32
Member
Members
4
14 posts
Posted October 27, 2020
Where is everyone from nd what re your backgrounds?
I'm from Boise Idaho area and work in medical imaging. I have been working in x Ray the last few years.
Kelsi
Member
Members
9
11 posts
Author
Posted October 27, 2020
1 hour ago, kjgrover32 said:
Where is everyone from nd what re your backgrounds?
I'm from Boise Idaho area and work in medical imaging. I have been working in x Ray the last few years.
I’m from Coeur d’ Alene and have been a scribe, patient care tech and now a medical assistant.
KarenAlexander
Newbie
Members
5
3 posts
Posted October 30, 2020
I’m also interviewing this date and would love to do a meet and greet the day before via zoom! I live on the north side of Spokane and work at two local hospitals as a speech language pathologist. This is my first time applying to PA school. I have a home and family here, and I plan to stay in Spokane long term.
I look forward to meeting everyone!
Karen Alexander
tahpa
Newbie
Members
1
5 posts
Posted October 31, 2020
Hi all!
I am interviewing this day and I think it would be a great idea for us to meet beforehand! Looking forward to meeting you all.
Taylor
Aroohoo
Member
Members
19
16 posts
Posted November 1, 2020
Excited and nervous to interview with you all in 20 days... Does anyone know about how many people are interviewed in each group and how they break down the schedule for the day? I was not able to attend the information sessions last fall so I fell doubly nervous because I am certain there was information provided that I very much wish I had gotten. CC background... We live about an hour south of Spokane in a tiny little farming community. I work another hour south of there in a CAH as an NOC NAC and ER Tech. I would love to meet on the 20th if later in the day is possible?
KateK
Newbie
Members
0
2 posts
Posted November 3, 2020 (edited)
Hi all!
I was also invited to interview for this date in Spokane and would love to meet people before hand! I was born in rural Eastern Wa, and have grown up in the Spokane area my whole life. I am currently living in Portland as my husband finishes school at OHSU, then we plan to move back to the Spokane area and settle down. I have worked as an EMT, MA and am now educating patients as an exercise physiologist In cardiopulmonary rehab 🙂 This is my first time applying and first interview so definitely feeling the nerves! Good luck to all and I look forward to meeting you all!
Kate
Edited November 3, 2020 by KateK
rm2020
Newbie
Members
2
6 posts
Posted November 5, 2020
Hi, I am also interviewing on this date. I would love to join the Zoom meet and greet, Friday 11/20 in the afternoon/evening works for me.
I currently live and work in Spokane as a NAC at a hospital, and have worked in mental health counseling and ABA therapy in the past.
Kelsi
Member
Members
9
11 posts
Author
Posted November 6, 2020
On 11/1/2020 at 3:27 AM, Aroohoo said:
Excited and nervous to interview with you all in 20 days... Does anyone know about how many people are interviewed in each group and how they break down the schedule for the day? I was not able to attend the information sessions last fall so I fell doubly nervous because I am certain there was information provided that I very much wish I had gotten. CC background... We live about an hour south of Spokane in a tiny little farming community. I work another hour south of there in a CAH as an NOC NAC and ER Tech. I would love to meet on the 20th if later in the day is possible?
Hey Congrats! I’m happy to talk about and answer any questions I can during the zoom meet and greet since I have some experience with these interviews, but of course I’ve never done one over zoom so it might be a little different. I can’t remember how many people are in each group but I’d guesstimate about 30, and it was a very long day but enjoyable. They do group interviews with 2 interviewers and 3 applicants at a time. You have 3 of these throughout the day.
KarenAlexander
Newbie
Members
5
3 posts
Posted November 13, 2020
I typed up a list of questions and tips about the interview from the info session. Just thought I would share for anyone who was interested. It’s pretty basic.
I also heard from someone who interviewed at the last session that it was heavy on medical ethics. I found this online question bank (https://www.blackstonetutors.co.uk/100-medical-school-mmi-interview-ethical-questions--scenarios.html) that seems like a good resource for preparing for this part of the interview.
What time should we zoom on the 20th?
Karen
PA Interview Questions.docx
Like 1
kjgrover32
Member
Members
4
14 posts
Posted November 13, 2020
54 minutes ago, KarenAlexander said:
I typed up a list of questions and tips about the interview from the info session. Just thought I would share for anyone who was interested. It’s pretty basic.
I also heard from someone who interviewed at the last session that it was heavy on medical ethics. I found this online question bank (https://www.blackstonetutors.co.uk/100-medical-school-mmi-interview-ethical-questions--scenarios.html) that seems like a good resource for preparing for this part of the interview.
What time should we zoom on the 20th?
Karen
PA Interview Questions.docx 13.52 kB · 2 downloads
Great resources! Thank you!
KateK
Newbie
Members
0
2 posts
Posted November 16, 2020
On 10/21/2020 at 9:51 AM, Kelsi said:
Wanted to start a group for those invited to interview on 11/21 via Zoom. Almost embarrassed to say but this will be my 3rd year interviewing! Hoping 3rd times a charm. It’s been very helpful to meet fellow interviewees before the big day, so hoping we can set up a zoom meeting for us to all meet! I’d suggest doing it on 11/20 unless that doesn’t work for most. Very excited!
Kelsi, what time are you thinking to zoom on Friday? Later in the evening works best for me but I am flexible that day. Thanks!
kjgrover32
Member
Members
4
14 posts
Posted November 16, 2020
21 minutes ago, KateK said:
Kelsi, what time are you thinking to zoom on Friday? Later in the evening works best for me but I am flexible that day. Thanks!
I agree, evening works best but I can do earlier if needed.
Kelsi
Member
Members
9
11 posts
Author
Posted November 16, 2020
Evening works great for me too. I’m totally flexible with time so whatever y’all think.
rm2020
Newbie
Members
2
6 posts
Posted November 17, 2020
What about 7 pm on Friday? Would that work for everyone?
kjgrover32
Member
Members
4
14 posts
Posted November 17, 2020
1 hour ago, rm2020 said:
What about 7 pm on Friday? Would that work for everyone?
Is that pacific time?
Kelsi
Member
Members
9
11 posts
Author
Posted November 18, 2020 (edited)
7 pacific time sounds good unless that’s too late for anyone farther East?
My number is, two zero eight six nine nine seven nine two zero, if everyone sends me their name and email I can send out the Zoom invite!
Edited November 19, 2020 by Kelsi
Like 1
DjH2020
Member
Members
9
12 posts
Posted November 18, 2020
Hello all, I also have an interview on the 21st! Very excited. I am a reapplicant. I interviewed last year, but did not get a seat. I am an RT and have worked at Sacred Heart for the last 10 years. I live in Spokane Valley, have a family here, and would like to stay in the area long term as well. I think Friday evening at 1900 works great I am looking forward to this conference/interview with everyone. I think meeting beforehand will be beneficial and help ease the tension.
David Hughes
Like 2
Lntarango
Newbie
Members
0
1 post
Posted November 20, 2020
Hi everyone, I will also be interviewing on this day! I am a re-applicant, however I did not receive an interview last time. I attended EWU for my undergrad and worked at Sacred Heart as a NAC for a little while before moving to a more rural hospital.
Kelsi, my email is Lntarango4@hotmail.com
I would love to be apart of the zoom call tomorrow!
Laura Tarango
1
2
Next
Page 1 of 2
WayUp logo
Candidates
Employers
Login
Alison Riegel
About Me
Hi! I'm finishing my undergrad hopefully within the next year and pursuing a Masters in Clinical Mental Health. I enjoy a wide variety of activities and value each learning opportunity. Life is as good as you make it, and I plan on making mine great. :)
Education
Gonzaga University
December 2016 - December 2017
degree
Bachelor's
major
Psychology
Work Experience
Pine Lake Covenant Church
Child Care Provider
August 2016 - present
company
Pine Lake Covenant Church
title
Child Care Provider
overview
• One of the mothers that are part of the program contacted the head of the program to ask for my details specifically to continue babysitting outside of the program.
• I help run a classroom of 5 toddlers. We engage in learning activities and make sure the children are safe and happy.
Guess
Sales Associate
April 2014 - March 2015
company
Guess
title
Sales Associate
overview
• I was employee of the month with the top sales the first two months I worked there.
• I interacted with customers on the floor providing answers to questions, offering suggestions, and making sure each need is met.
• I consistently met the sales goal during each shift.
Sammamish Library
Volunteer
August 2009 - November 2012
company
Sammamish Library
title
Volunteer
overview
• I was punctual and communicated clearly if anything came up.
• I helped pull books that people had requested, organized the hold sections, and offered help when asked.
Fun Fact
I once fell off a cliff
Skills
Languages
Skills
Leadership
Research Team Member
Theater
Choir member
Dance
Hobbies
Hiking
There's nothing like standing on top of a mountain enjoying the view.
Writing
I've loved writing since I could hold a pencil. I have written songs, poems, short stories, blog regularly, and have two novels I am working on. I also journal occasionally. I hope to be published one day.
Name Court Case Number Judgment Record Court Information
1 Albrecht, Pamela Trudel
Defendant Douglas District 6Z0043160 01-19-2016
Name Court Case Number Judgment Record Court Information
1 Herrebout, Pamela J
RESPONDENT S17 King Co Superior Ct 07-3-00621-8 01-10-2007
2 Herrebout, Pamela J
TAXPAYER King Co Superior Ct 16-2-24854-3 Available 10-13-2016
3 Herrebout, Pamela Jane
Defendant King County District 4Z0344429 03-20-2014
4 Herrebout, Pamela Jane
Defendant Island County Dist 6Z1036649 10-19-2016
Judgment Record Number Name Participant File Date
16-9-19269-1 HERREBOUT, PAMELA J DEBTOR 10/13/2016
16-9-19269-1 WASHINGTON STATE OF EMPLOYMENT CREDITOR 10/13/2016
Court: King Co Superior Ct
Case Number: 16-9-19269-1
1 Young, Amanda
Defendant Spokane County Dist 14154000 12-30-2014
2 Young, Amanda
Defendant Fife Municipal FRL430927 05-17-2017
3 Young, Amanda
Defendant Lk Forest Park Muni 170079681 08-15-2017
4 Young, Amanda
Defendant Fife Municipal FRL445215 09-27-2017
5 Young, Amanda
Defendant Clark County Dist 18C3228-3 07-13-2018
6 Young, Amanda
Defendant Chelan Co Dist Court 98-001266 07-23-1998
7 Young, Amanda
Defendant Puyallup Municipal 190300968 11-22-2019
Sub Docket Date Docket Code Docket Description Misc Info
10-13-2016 FILING FEE VOUCHERED Filing Fee Vouchered 20.00
10-13-2016 WARRANT OVERPAID BENEFITS EMPLY SEC Warrant Overpaid Benefits Emply Sec
Against Deft, Pamela J Herrebout & The Mar
(stat Int @ 12.00% Per A)
Comm
Company Name: ALL ABOUT IT L.L.C.
File Number: 602948518
Filing State: Washington (WA)
Filing Status: Inactive
Social Engineering Example:
https://web.archive.org/web/20200529172721/https://postimg.cc/pp4kt4cy
https://web.archive.org/web/20200529172901/https://postimg.cc/R3QTKFSn
https://web.archive.org/web/20200330163543/https://postimg.cc/06JN8bNS
https://web.archive.org/web/20200330163715/https://postimg.cc/8F3ZqkKs
https://web.archive.org/web/20200330163757/https://postimg.cc/crhb9h09
https://web.archive.org/web/20200330164406/https://postimg.cc/4Hnddhrb
https://web.archive.org/web/20200330164023/https://postimg.cc/Lh99nyCv
Patterns Recognized
CAPEC-407: Pretexting
Attack Pattern ID: 407
CAPEC-416: Manipulating Human Behavior
Attack Pattern ID: 416
Notes:
*Attractive Women referenced.
*Animals referenced.
*Buzzwords like "Unique" and "Original" and "Genuine" are frequently used.
*"Free Gift" comes with a payment of $29.95 plus shipping and service of $4.95.
*Manipulator attempts to build the connection through an appeal to philanthropy.
POFHeadlines Archived Website Report
https://www.hybrid-analysis.com/sample/40f148fe67bc914e110a971c9b2bcf3aa6cdb867c3c1014e4c2fac018125c8ee
https://www.hybrid-analysis.com/sample/40f148fe67bc914e110a971c9b2bcf3aa6cdb867c3c1014e4c2fac018125c8ee/5e50a49d2439b471dc760d4e
https://archive.is/QlsQo
This report is generated from a file or URL submitted to this webservice on February 22nd 2020 03:48:55 (UTC) and action script Default browser analysis
Guest System: Windows 7 32 bit, Professional, 6.1 (build 7601), Service Pack 1
Report generated by Falcon Sandbox v8.30 (C) Hybrid Analysis
Analyzed on: 02/22/2020 03:48:55 (UTC)
Environment: Windows 7 32 bit
Threat Score: 88/100
AV Detection: 2% Phishing site
MITRE ATT&CK(TM) Technique - T1035 - Service Execution
ATT&CK ID T1035
Tactics Execution
Permissions Required Administrator, SYSTEM
Description Adversaries may execute a binary, command, or script via a method that interacts with Windows services, such as the Service Control Manager(...)
Source https://attack.mitre.org/wiki/Technique/T1035
Informative Indicators
Opened the service control manager
MITRE ATT&CK(TM) Technique - T1179 - Hooking
ATT&CK ID T1179
Tactics Credential Access, Persistence, Privilege Escalation
Permissions Required Administrator, SYSTEM
Description Windows processes often leverage application programming interface (API) functions to perform tasks that require reusable system resources(...)
Source https://attack.mitre.org/wiki/Technique/T1179
Informative Indicators
Installs hooks/patches the running process
MITRE ATT&CK(TM) Technique - T1179 - Hooking
ATT&CK ID T1179
Tactics Credential Access, Persistence, Privilege Escalation
Permissions Required Administrator, SYSTEM
Description Windows processes often leverage application programming interface (API) functions to perform tasks that require reusable system resources(...)
Source https://attack.mitre.org/wiki/Technique/T1179
Informative Indicators
Installs hooks/patches the running process
MITRE ATT&CK(TM) Technique - T1179 - Hooking
ATT&CK ID T1179
Tactics Credential Access, Persistence, Privilege Escalation
Permissions Required Administrator, SYSTEM
Description Windows processes often leverage application programming interface (API) functions to perform tasks that require reusable system resources(...)
Source https://attack.mitre.org/wiki/Technique/T1179
Informative Indicators
Installs hooks/patches the running process
Network Related
Malicious artifacts seen in the context of the input URL
details
Found malicious artifacts related to the input domain "http://pofheadlines.com" (IP: 69.89.31.169): ...
URL: https://pofheadlines.com/wp-includes/js/jquery/jquery.js?ver=1.12.4 (AV positives: 2/72 scanned on 02/22/2020 03:52:06)
URL: https://pofheadlines.com/xmlrpc.php (AV positives: 2/72 scanned on 02/19/2020 22:43:09)
URL: http://pofheadlines.com/wp-content/themes/iribbon/inc/js/html5.js (AV positives: 2/72 scanned on 02/18/2020 19:08:03)
URL: http://pofheadlines.com/ (AV positives: 2/72 scanned on 02/18/2020 13:34:54)
URL: https://pofheadlines.com/wp-includes/js/comment-reply.min.js?ver=5.0.8 (AV positives: 2/72 scanned on 02/17/2020 23:59:35)
File SHA256: 03f7b1097f58d1dd9bb791cc9e21e416d1fdfa0b758af6aa7714edddc752a5ea (AV positives: 4/73 scanned on 01/10/2020 01:34:10)
File SHA256: b1ec43bf9699682442f816152032e426a2673107b668ccd541ba1f824d589029 (AV positives: 5/74 scanned on 01/09/2020 01:04:36)
File SHA256: 67d353a19eee55b044861ef40ec1da8519f1b7300bce30a6a4c250e19788abf9 (AV positives: 1/73 scanned on 06/12/2019 03:55:28)
File SHA256: c8d62662b0e43429408de3579e9be5038385ff532fd2b9af52a09951030bc01d (AV positives: 1/72 scanned on 06/05/2019 21:40:23)
File SHA256: 93b262f676510c4006baa6cdb95735b5caa7ddfa1524a92a6022a01dc01c9ad4 (AV positives: 1/72 scanned on 04/08/2019 00:29:04)
File SHA256: 56deec984a97d4066258357f7e59739f9161e51e6fa74d0d8e3c173229f2a928 (Date: 10/24/2017 23:56:51)
File SHA256: 4e00b102f3e0ebd9273aee350a21d806182035c9c0cca635688d10ddc2d6a8e5 (Date: 10/24/2017 23:53:24)
source
Network Traffic
relevance
10/10
This report was generated with enabled TOR analysis
DNS Requests
Domain Address Registrar Country
c.statcounter.com
104.20.151.33
TTL: 193 pairNIC INC
Organization: StatCounter
Name Server: MAY.NS.CLOUDFLARE.COM
Creation Date: Wed, 05 Jan 2000 00:00:00 GMT Flag of United States United States
cm.g.doubleclick.net
172.217.9.130
TTL: 21599 MarkMonitor, Inc. Flag of United States United States
cms.quantserve.com
192.184.69.196
TTL: 299 MarkMonitor, Inc. Flag of United States United States
crt.usertrust.com
91.199.212.52
TTL: 425 CSC CORPORATE DOMAINS, INC. Flag of United Kingdom United Kingdom
fonts.googleapis.com
172.217.13.74
TTL: 299 MarkMonitor, Inc. Flag of United States United States
fonts.gstatic.com
172.217.8.3
TTL: 299 MarkMonitor, Inc. Flag of United States United States
googleads.g.doubleclick.net
172.217.1.130
TTL: 299 MarkMonitor, Inc. Flag of United States United States
image6.pubmatic.com
104.36.113.23
TTL: 254 - Flag of United States United States
ocsp.pki.goog
172.217.13.227
TTL: 166 - Flag of United States United States
ocsp.sectigo.com 151.139.128.14
TTL: 2502 - Flag of United States United States
odr.mookie1.com 35.190.90.30
TTL: 299 - Flag of United States United States
pagead2.googlesyndication.com 172.217.8.2
TTL: 95 - Flag of United States United States
partner.googleadservices.com 216.58.194.130
TTL: 299 - Flag of United States United States
pixel.everesttech.net 192.243.250.36
TTL: 287 - Flag of United States United States
pixel.rubiconproject.com 8.39.36.143
TTL: 71 - Flag of United States United States
pofheadlines.com 69.89.31.169
TTL: 14112 - Flag of United States United States
rtb.openx.net 34.96.87.211
TTL: 299 - Flag of United States United States
secure.statcounter.com 104.20.150.33
TTL: 296 - Flag of United States United States
ssum-sec.casalemedia.com 23.44.169.67
TTL: 20233 - Flag of United States United States
tpc.googlesyndication.com 172.217.6.161
TTL: 299 - Flag of United States United States
www.googletagservices.com 172.217.1.130
TTL: 21599 - Flag of United States United States
www.gstatic.com 172.217.1.227
TTL: 299 - Flag of United States United States
https://www.hybrid-analysis.com/sample/f9e7ffd2529ba67fb2a326f96a98238d7510761d4d44923a5737efc51435a208/5e8292f87360a93d4e548017
Suspicious Indicators 3
External Systems
Found an IP/URL artifact that was identified as malicious by at least one reputation engine
details
1/76 reputation engines marked "http://unpkg.com" as malicious (1% detection rate)
1/76 reputation engines marked "http://ocsp.trust-provider.com" as malicious (1% detection rate)
source
External System
relevance
10/10
Network Related
Malicious artifacts seen in the context of a contacted host
details
Found malicious artifacts related to "104.16.125.175": ...
URL: https://unpkg.com/scroll-hint@1.1.10/js/scroll-hint.js (AV positives: 1/76 scanned on 03/30/2020 07:41:32)
URL: https://unpkg.com/infinite-scroll@3.0.6/dist/infinite-scroll.pkgd.js (AV positives: 1/76 scanned on 03/27/2020 13:18:34)
URL: https://unpkg.com/picnic (AV positives: 1/76 scanned on 03/27/2020 04:51:43)
URL: https://unpkg.com/leaflet@1.5.1/dist/leaflet.css (AV positives: 1/76 scanned on 03/27/2020 04:29:22)
URL: http://unpkg.com/ (AV positives: 1/76 scanned on 03/25/2020 10:58:38)
File SHA256: 98f0762725f964f8fba65272e29dc9ad0588b75d35facabc29d2a58541181c54 (Date: 03/21/2020 20:19:29)
File SHA256: b15fc681c29496c360dddbdb2e1a326b78e36024b9baa6ff59269b796e5250b6 (Date: 03/16/2020 14:48:12)
File SHA256: 4868221a1c9c9907b6b5b77e1893e5134aaa99498f334e1179b71ca1638f371e (Date: 03/16/2020 01:19:25)
File SHA256: 9b87954a5f3b0403f4610177323bf89e591ca5a6bbb6e37ae268d48271bf265f (Date: 03/13/2020 00:14:19)
File SHA256: e95930019345a42151d00f0221b61a5cddda6e49443a831fa1c084dfb467131a (Date: 03/03/2020 03:21:42)
File SHA256: 458b46902ed3b12fa3b9b52528a59a9e3f7e100b7d5c42f3650a996768ad2e53 (AV positives: 11/69 scanned on 11/29/2018 11:44:21)
source
Network Traffic
relevance
10/10
Sends traffic on typical HTTP outbound port, but without HTTP header
details
TCP traffic to 209.197.3.24 on port 443 is sent without HTTP header
TCP traffic to 104.17.208.240 on port 443 is sent without HTTP header
TCP traffic to 104.17.209.240 on port 443 is sent without HTTP header
TCP traffic to 216.58.192.132 on port 443 is sent without HTTP header
TCP traffic to 104.16.125.175 on port 443 is sent without HTTP header
TCP traffic to 216.58.192.227 on port 80 is sent without HTTP header
TCP traffic to 172.217.0.3 on port 443 is sent without HTTP header
TCP traffic to 172.217.8.163 on port 443 is sent without HTTP header
source
Network Traffic
relevance
5/10
ATT&CK ID
T1043 (Show technique in the MITRE ATT&CK(TM) matrix)
Type Path Access
OPEN %WINDIR%system32apphelp.dll FILE_READ_DATA | FILE_EXECUTE
CREATE %WINDIR%System32rundll32.exe GENERIC_READ | FILE_READ_ATTRIBUTES
CREATE %WINDIR%AppPatchAcLayers.dll GENERIC_READ | FILE_READ_ATTRIBUTES
OPEN %WINDIR%AppPatchAcLayers.DLL FILE_READ_DATA | FILE_EXECUTE
OPEN %WINDIR%System32SspiCli.dll FILE_READ_DATA | FILE_EXECUTE
OPEN %WINDIR%System32WINSPOOL.DRV FILE_READ_DATA | FILE_EXECUTE
OPEN %WINDIR%System32MPR.dll FILE_READ_DATA | FILE_EXECUTE
OPEN %WINDIR%system32IMM32.DLL FILE_READ_DATA
CREATE %WINDIR%System32en-USrundll32.exe.mui GENERIC_READ | FILE_READ_ATTRIBUTES
OPEN %WINDIR%System32api-ms-win-downlevel-shell32-l1-1-0.dll FILE_READ_DATA | FILE_EXECUTE
OPEN %WINDIR%System32version.DLL FILE_READ_DATA | FILE_EXECUTE
OPEN %WINDIR%WinSxSx86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d FILE_EXECUTE
OPEN %WINDIR%WinSxSx86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705dcomctl32.dll FILE_READ_DATA | FILE_EXECUTE
OPEN %WINDIR%WindowsShell.Manifest FILE_GENERIC_EXECUTE | FILE_READ_DATA | FILE_READ_EA
OPEN %WINDIR%system32uxtheme.dll FILE_READ_DATA | FILE_EXECUTE
OPEN %WINDIR%System32dwmapi.dll FILE_READ_DATA | FILE_EXECUTE
OPEN %WINDIR%system32rpcss.dll FILE_READ_DATA
OPEN %WINDIR%System32CRYPTBASE.dll FILE_READ_DATA | FILE_EXECUTE
OPEN %WINDIR%System32api-ms-win-downlevel-shlwapi-l2-1-0.dll FILE_READ_DATA | FILE_EXECUTE
CREATE C:f9e7ffd2529ba67fb2a326f96a98238d7510761d4d44923a5737efc51435a208.url GENERIC_READ | FILE_READ_ATTRIBUTES
OPEN %WINDIR%System32PROPSYS.dll FILE_READ_DATA | FILE_EXECUTE
OPEN %WINDIR%system32SHELL32.dll FILE_GENERIC_READ
CREATE %PROGRAMFILES%Internet Explorereniexplore.exe.mui GENERIC_READ | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%MicrosoftInternet ExplorerRecoveryHighActive READ_CONTROL | WRITE_OWNER | FILE_READ_ATTRIBUTES
CREATE %WINDIR%System32rsaenh.dll GENERIC_READ | FILE_READ_ATTRIBUTES
CREATE %PROGRAMFILES%Internet Exploreriexplore.exe GENERIC_READ | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%MicrosoftInternet ExplorerRecoveryHighActive{9A7D4109-72D8-11EA-A0A0-0A0027477BF1}.dat GENERIC_WRITE | GENERIC_READ | FILE_READ_ATTRIBUTES
CREATE %WINDIR%AppPatchsysmain.sdb GENERIC_READ | FILE_READ_ATTRIBUTES
CREATE %PROGRAMFILES%MICROS~3Office14URLREDIR.DLL GENERIC_READ | FILE_READ_ATTRIBUTES
CREATE %PROGRAMFILES%Javajre1.8.0_151libplugin.jar FILE_READ_ATTRIBUTES
CREATE %PROGRAMFILES%Javajre1.8.0_151binjavaws.exe FILE_READ_ATTRIBUTES
CREATE %TEMP%JavaDeployReg.log GENERIC_WRITE | GENERIC_READ | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet Files FILE_READ_DATA
CREATE %USERPROFILE%AppDataRoaming FILE_READ_DATA
CREATE %APPDATA%MicrosoftWindowsCookies FILE_READ_DATA
CREATE %LOCALAPPDATA%MicrosoftWindowsHistory FILE_READ_DATA
CREATE %WINDIR%System32stdole2.tlb GENERIC_READ | FILE_READ_ATTRIBUTES
CREATE %WINDIR%System32wshqos.dll GENERIC_READ | FILE_READ_ATTRIBUTES
CREATE %USERPROFILE%Favoritesdesktop.ini GENERIC_READ | FILE_READ_ATTRIBUTES
CREATE %WINDIR%System32en-USmsctf.dll.mui GENERIC_READ | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%owMicrosoftCryptnetUrlCacheMetaData57C8EDB95DF3F0AD4EE2DC2B8CFD4157 GENERIC_WRITE | GENERIC_READ | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%owMicrosoftCryptnetUrlCacheMetaData7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6 GENERIC_READ | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%owMicrosoftCryptnetUrlCacheMetaData7423F88C7F265F0DEFC08EA88C3BDE45_1374AC543829516A5CA56081CD00C32A GENERIC_READ | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%owMicrosoftCryptnetUrlCacheMetaData69C6F6EC64E114822DF688DC12CDD86C GENERIC_READ | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%owMicrosoftCryptnetUrlCacheMetaData6DB145CFEEC544B1582FED1ADA3370DD GENERIC_READ | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%owMicrosoftCryptnetUrlCacheContent7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6 GENERIC_WRITE | GENERIC_READ | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE5QQW0X29Ylogin[1].htm GENERIC_WRITE | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%owMicrosoftCryptnetUrlCacheMetaData5080DC7A65DB6A5960ECD874088F3328_6CBA2C06D5985DD95AE59AF8FC7C6220 GENERIC_READ | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%owMicrosoftCryptnetUrlCacheMetaData5080DC7A65DB6A5960ECD874088F3328_1790C2BABAA04BAF417FFE9589C10997 GENERIC_READ | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%owMicrosoftCryptnetUrlCacheMetaDataCC42971B7939A9CA55C44CFC893D7C1D GENERIC_READ | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE5CKDNCXYSlogin[1].css GENERIC_WRITE | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE537NU00GPbundle[1].js GENERIC_WRITE | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%owMicrosoftCryptnetUrlCacheContent5080DC7A65DB6A5960ECD874088F3328_6CBA2C06D5985DD95AE59AF8FC7C6220 GENERIC_WRITE | GENERIC_READ | FILE_READ_ATTRIBUTES
CREATE %WINDIR%System32oleaccrc.dll GENERIC_READ | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE52UXTWTJRQualtricsGrotesque-Thin.99cea185cc[1].eot GENERIC_WRITE | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE5CKDNCXYSQualtricsGrotesque-Regular.d29c18d159[1].eot GENERIC_WRITE | FILE_READ_ATTRIBUTES
CREATE %WINDIR%System32en-USjscript9.dll.mui GENERIC_READ | FILE_READ_ATTRIBUTES
CREATE %WINDIR%Fontsarial.ttf GENERIC_READ | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%MicrosoftWindowsCaches FILE_READ_DATA
CREATE %LOCALAPPDATA%MicrosoftWindowsCachescversions.1.db GENERIC_READ | FILE_READ_ATTRIBUTES
CREATE C:share FILE_READ_ATTRIBUTES
CREATE %WINDIR%System32en-USshell32.dll.mui GENERIC_READ | FILE_READ_ATTRIBUTES
CREATE %WINDIR%Fontsseguisym.ttf GENERIC_READ | FILE_READ_ATTRIBUTES
CREATE %WINDIR%Microsoft.NETFrameworkv1.0.3705mscorwks.dll READ_CONTROL | FILE_READ_ATTRIBUTES
CREATE %WINDIR%Microsoft.NETFrameworkv1.1.4322clr.dll READ_CONTROL | FILE_READ_ATTRIBUTES
CREATE %WINDIR%Microsoft.NETFrameworkv1.1.4322mscorwks.dll READ_CONTROL | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%MicrosoftInternet ExplorerDOMStoreHVI1ZDNFcss.co1.qualtrics[1].xml GENERIC_WRITE | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%MicrosoftInternet Explorerimagestore3mt7jhvimagestore.dat GENERIC_WRITE | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%owMicrosoftCryptnetUrlCacheMetaData1E11E75149C17A93653DA7DC0B8CF53F_447F5E83577BE48F231168C454280CA6 GENERIC_READ | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%owMicrosoftCryptnetUrlCacheMetaData1E11E75149C17A93653DA7DC0B8CF53F_B6E1EA240B4521A4F1D7437E2AE3098D GENERIC_READ | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%owMicrosoftCryptnetUrlCacheMetaData6B17EC2CD0C9B19353018FF1C12BC489 GENERIC_READ | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%owMicrosoftCryptnetUrlCacheMetaData5B9763FB83E74617D0DB58992800F69B GENERIC_READ | FILE_READ_ATTRIBUTES
CREATE %APPDATA%MicrosoftWindowsCookiesDYBRXUFE.txt GENERIC_READ | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE5CKDNCXYSqualtrics-logo[1].png GENERIC_WRITE | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE5QQW0X29Yqualtrics-logo.min[1].svg GENERIC_WRITE | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE5QQW0X29YQualtricsIconFont.685c5b7d8e[1].eot GENERIC_WRITE | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE5QQW0X29Ylock.min[1].svg GENERIC_WRITE | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%owMicrosoftCryptnetUrlCacheMetaDataCFE86DBBE02D859DC92F1E17E0574EE8_46766FC45507C0B9E264E4C18BC7288B GENERIC_WRITE | GENERIC_READ | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%owMicrosoftCryptnetUrlCacheContentCFE86DBBE02D859DC92F1E17E0574EE8_46766FC45507C0B9E264E4C18BC7288B GENERIC_WRITE | GENERIC_READ | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%owMicrosoftCryptnetUrlCacheMetaDataBE8B021F9E811DFC8C8A28572A17C05A_B4E256AEE3EBA21D6B1078B3E1B79532 GENERIC_WRITE | GENERIC_READ | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%owMicrosoftCryptnetUrlCacheContentBE8B021F9E811DFC8C8A28572A17C05A_B4E256AEE3EBA21D6B1078B3E1B79532 GENERIC_WRITE | GENERIC_READ | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%owMicrosoftCryptnetUrlCacheMetaData6AF4EE75E3A4ABA658C0087EB9A0BB5B_D2FB8B90C888995EAF59F301AECA9E24 GENERIC_READ | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%owMicrosoftCryptnetUrlCacheMetaData6AF4EE75E3A4ABA658C0087EB9A0BB5B_51CCA0D20796B7CDC9BFC98988A9B0ED GENERIC_READ | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%owMicrosoftCryptnetUrlCacheMetaData74F831100DEB0B8799203064F3E38B68 GENERIC_READ | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%owMicrosoftCryptnetUrlCacheContent6AF4EE75E3A4ABA658C0087EB9A0BB5B_D2FB8B90C888995EAF59F301AECA9E24 GENERIC_WRITE | GENERIC_READ | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%owMicrosoftCryptnetUrlCacheMetaDataBE8B021F9E811DFC8C8A28572A17C05A_0B97942EE72A6E3F514E8E84F294CC72 GENERIC_READ | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%owMicrosoftCryptnetUrlCacheMetaDataBE8B021F9E811DFC8C8A28572A17C05A_A61001BAFE86CCE0A5899061868CC05C GENERIC_READ | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%MicrosoftInternet ExplorerRecoveryHighActiveRecoveryStore.{9A7D4107-72D8-11EA-A0A0-0A0027477BF1}.dat GENERIC_WRITE | GENERIC_READ | FILE_READ_ATTRIBUTES
CREATE %APPDATA%MicrosoftWindowsCookiesERV9N2EC.txt GENERIC_READ | FILE_READ_ATTRIBUTES
CREATE %APPDATA%MicrosoftWindowsCookiesL8DC4A47.txt GENERIC_READ | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE537NU00GPrecaptcha__en[1].js GENERIC_WRITE | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE52UXTWTJRQualtricsGrotesque-ExLight[1].eot GENERIC_WRITE | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE52UXTWTJRQualtricsGrotesque-Regular[1].eot GENERIC_WRITE | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE52UXTWTJRQualtricsGrotesque-Thin[1].eot GENERIC_WRITE | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE5CKDNCXYSQualtricsGrotesque-Bold[1].eot GENERIC_WRITE | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE5CKDNCXYSQualtricsGrotesque-ExLight[1].woff GENERIC_WRITE | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE5CKDNCXYSQualtricsGrotesque-SemiBold[1].eot GENERIC_WRITE | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE537NU00GPQualtricsGrotesque-ExLight[1].ttf GENERIC_WRITE | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE537NU00GPQualtricsGrotesque-Bold[1].woff GENERIC_WRITE | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE5QQW0X29Yfavicon[3].ico GENERIC_WRITE | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE537NU00GPfavicon[7].png GENERIC_WRITE | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE537NU00GPfavicon[8].png GENERIC_WRITE | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%owMicrosoftInternet ExplorerServicessearch_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico GENERIC_READ | FILE_READ_ATTRIBUTES | FILE_WRITE_ATTRIBUTES
OPEN %WINDIR%SYSTEM32sechost.dll FILE_READ_DATA | FILE_EXECUTE
CREATE %TEMP%~DFFEE3C3317B5DF4FB.TMP GENERIC_WRITE | GENERIC_READ | DELETE | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE5QQW0X29Yanchor[1].htm GENERIC_WRITE | FILE_READ_ATTRIBUTES
OPEN %PROGRAMFILES%Internet Explorerieproxy.dll FILE_READ_DATA | FILE_READ_ATTRIBUTES
CREATE C:https:css.co1.qualtrics.comlogin?path=%2FControlPanel%2F&product=ControlPanel GENERIC_READ | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE5QQW0X29Ystyles__ltr[1].css GENERIC_WRITE | FILE_READ_ATTRIBUTES
OPEN %WINDIR%system32sfc.dll FILE_READ_DATA | FILE_EXECUTE
OPEN %WINDIR%System32sfc_os.DLL FILE_READ_DATA | FILE_EXECUTE
OPEN SystemRootWinSxSFileMapsprogram_files_internet_explorer_a421d1bfaf856e2b.cdf-ms FILE_GENERIC_READ
CREATE %LOCALAPPDATA%MicrosoftInternet ExplorerUrlBlockManagerurlblocklist.bin GENERIC_READ | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesLow READ_CONTROL | WRITE_DAC | WRITE_OWNER | FILE_READ_ATTRIBUTES
CREATE %APPDATA%MicrosoftWindowsCookiesLow READ_CONTROL | WRITE_DAC | WRITE_OWNER | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%MicrosoftWindowsHistoryLow READ_CONTROL | WRITE_DAC | WRITE_OWNER | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesVirtualized READ_CONTROL | WRITE_DAC | WRITE_OWNER | FILE_READ_ATTRIBUTES
CREATE %APPDATA%AdobeFlash PlayerNativeCache READ_CONTROL | WRITE_DAC | WRITE_OWNER | FILE_READ_ATTRIBUTES
CREATE %APPDATA%MicrosoftInternet ExplorerUserDataLow READ_CONTROL | WRITE_DAC | WRITE_OWNER | FILE_READ_ATTRIBUTES
CREATE %USERPROFILE%Favorites READ_CONTROL | WRITE_DAC | WRITE_OWNER | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%MicrosoftInternet ExplorerTracking Protection READ_CONTROL | WRITE_DAC | WRITE_OWNER | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%MicrosoftFeeds READ_CONTROL | WRITE_DAC | WRITE_OWNER | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%MicrosoftInternet ExplorerTabRoaming READ_CONTROL | WRITE_DAC | WRITE_OWNER | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%MicrosoftPlayReady READ_CONTROL | WRITE_DAC | WRITE_OWNER | FILE_READ_ATTRIBUTES
CREATE %APPDATA%MicrosoftWindowsPrivacIE FILE_READ_DATA
CREATE %APPDATA%MicrosoftWindowsPrivacIELow READ_CONTROL | WRITE_DAC | WRITE_OWNER | FILE_READ_ATTRIBUTES
CREATE %APPDATA%MicrosoftWindowsDNTException FILE_READ_DATA
CREATE %APPDATA%MicrosoftWindowsDNTExceptionLow READ_CONTROL | WRITE_DAC | WRITE_OWNER | FILE_READ_ATTRIBUTES
CREATE %APPDATA%MicrosoftWindowsIECompatCache FILE_READ_DATA
CREATE %APPDATA%MicrosoftWindowsIECompatCacheLow READ_CONTROL | WRITE_DAC | WRITE_OWNER | FILE_READ_ATTRIBUTES
CREATE %APPDATA%MicrosoftWindowsIECompatUACache FILE_READ_DATA
CREATE %APPDATA%MicrosoftWindowsIECompatUACacheLow READ_CONTROL | WRITE_DAC | WRITE_OWNER | FILE_READ_ATTRIBUTES
CREATE %TEMP%Low READ_CONTROL | WRITE_DAC | WRITE_OWNER | FILE_READ_ATTRIBUTES
CREATE %WINDIR%GlobalizationSortingSortDefault.nls GENERIC_READ | FILE_READ_ATTRIBUTES
CREATE C: FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet Filescounters.dat GENERIC_WRITE | GENERIC_READ | FILE_READ_ATTRIBUTES
CREATE %TEMP%~DFFA3F50DF93BA22DC.TMP GENERIC_WRITE | GENERIC_READ | DELETE | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE5QQW0X29YKFOlCnqEu92Fr1MmYUtfBBc9[1].ttf GENERIC_WRITE | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE5QQW0X29YKFOmCnqEu92Fr1Mu4mxP[1].ttf GENERIC_WRITE | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE5QQW0X29Ybframe[1].htm GENERIC_WRITE | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE5QQW0X29YKFOlCnqEu92Fr1MmEU9fBBc9[1].ttf GENERIC_WRITE | FILE_READ_ATTRIBUTES
CREATE %WINDIR%System32tzres.dll GENERIC_READ | FILE_READ_ATTRIBUTES
CREATE %TEMP%~DF9CA989E6F4F9A1FF.TMP GENERIC_WRITE | GENERIC_READ | DELETE | FILE_READ_ATTRIBUTES
CREATE %WINDIR%FontsStaticCache.dat GENERIC_READ | FILE_READ_ATTRIBUTES
CREATE %WINDIR%System32ieframe.dll GENERIC_READ | FILE_READ_ATTRIBUTES
CREATE %WINDIR%System32MacromedFlashFlash32_27_0_0_187.ocx GENERIC_READ | FILE_READ_ATTRIBUTES
CREATE %WINDIR%System32en-USKernelBase.dll.mui GENERIC_READ | FILE_READ_ATTRIBUTES
CREATE DEVICENETBT_TCPIP_{E29AC6C2-7037-11DE-816D-806E6F6E6963} FILE_READ_DATA
CREATE DEVICENETBT_TCPIP_{F5E5586C-DA91-47DA-AEAC-0A88CD2FFB01} FILE_READ_DATA
CREATE %LOCALAPPDATA%owMicrosoftCryptnetUrlCacheContent57C8EDB95DF3F0AD4EE2DC2B8CFD4157 GENERIC_WRITE | GENERIC_READ | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%owMicrosoftCryptnetUrlCacheMetaData5457A8CE4B2A7499F8299A013B6E1C7C_76125806E8CF735FD0B67DD73E892015 GENERIC_READ | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%owMicrosoftCryptnetUrlCacheMetaData3B6E683A7A45CC59BF035C9BA8C7AB9D GENERIC_READ | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE5QQW0X29Ybundle[1].css GENERIC_WRITE | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%owMicrosoftCryptnetUrlCacheMetaData5457A8CE4B2A7499F8299A013B6E1C7C_CE50F893881D43DC0C815E4D80FAF2B4 GENERIC_WRITE | GENERIC_READ | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%owMicrosoftCryptnetUrlCacheContent5457A8CE4B2A7499F8299A013B6E1C7C_CE50F893881D43DC0C815E4D80FAF2B4 GENERIC_WRITE | GENERIC_READ | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE5QQW0X29Yutils[1].js GENERIC_WRITE | FILE_READ_ATTRIBUTES
CREATE %TEMP%~okmgpus.tmp GENERIC_READ | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE537NU00GPpep[1].js GENERIC_WRITE | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE52UXTWTJRQualtricsGrotesque-ExLight.50d9a1c002[1].eot GENERIC_WRITE | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE5CKDNCXYSQualtricsGrotesque-SemiBold.be0ffea786[1].eot GENERIC_WRITE | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE5QQW0X29YQualtricsGrotesque-Bold.8be46ae077[1].eot GENERIC_WRITE | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE5QQW0X29YQualtricsGrotesque-ExtraBold.8772e4de57[1].eot GENERIC_WRITE | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE5QQW0X29YQualtricsGrotesque-Light.a35eab429f[1].eot GENERIC_WRITE | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%MicrosoftWindowsCaches{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000001d.db GENERIC_READ | FILE_READ_ATTRIBUTES
CREATE C:Usersdesktop.ini GENERIC_READ | FILE_READ_ATTRIBUTES
CREATE C:Users FILE_READ_DATA | FILE_READ_ATTRIBUTES
CREATE C:Users%OSUSER% FILE_READ_DATA | FILE_READ_ATTRIBUTES
CREATE %USERPROFILE%AppData FILE_READ_DATA | FILE_READ_ATTRIBUTES
CREATE %USERPROFILE%AppDataLocal FILE_READ_DATA | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%Microsoft FILE_READ_DATA | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%MicrosoftWindows FILE_READ_DATA | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%MicrosoftWindowsHistorydesktop.ini GENERIC_READ | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE537NU00GPfavicon[1].ico GENERIC_WRITE | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE537NU00GPfavicon[2].ico GENERIC_WRITE | FILE_READ_ATTRIBUTES
CREATE %WINDIR%Microsoft.NETFrameworkv1.0.3705clr.dll READ_CONTROL | FILE_READ_ATTRIBUTES
CREATE %APPDATA%MicrosoftWindowsCookiesK8FJGHQ4.txt GENERIC_WRITE | FILE_READ_ATTRIBUTES
CREATE %WINDIR%Microsoft.NETFrameworkv2.0.50727clr.dll READ_CONTROL | FILE_READ_ATTRIBUTES
CREATE %WINDIR%Microsoft.NETFrameworkv2.0.50727mscorwks.dll READ_CONTROL | FILE_READ_ATTRIBUTES
CREATE %WINDIR%Microsoft.NETFrameworkv4.0.30319clr.dll READ_CONTROL | FILE_READ_ATTRIBUTES
CREATE %PROGRAMFILES%Internet Exploreriexplore.exe.config GENERIC_READ | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE537NU00GPWRSiteInterceptEngine[1].js GENERIC_WRITE | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE52UXTWTJRCCS+Logo+Stacked[1] GENERIC_WRITE | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%MicrosoftInternet ExplorerMSIMGSIZ.DAT GENERIC_WRITE | GENERIC_READ | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE5CKDNCXYSuser.min[1].svg GENERIC_WRITE | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%owMicrosoftCryptnetUrlCacheMetaDataCFE86DBBE02D859DC92F1E17E0574EE8_5FA8E5E800867BF860DF5E533E701BAF GENERIC_READ | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%owMicrosoftCryptnetUrlCacheMetaData85B3F147E3624A14E6A20DB4F6C2C5D9 GENERIC_READ | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%owMicrosoftCryptnetUrlCacheMetaData9EC3B71635F8BA3FC68DE181A104A0EF_F6C39EF89D8A3A72327D8412589658B2 GENERIC_READ | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%owMicrosoftCryptnetUrlCacheMetaData9EC3B71635F8BA3FC68DE181A104A0EF_6BB6788F6A8528A0F9C552EFF5B09463 GENERIC_READ | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%owMicrosoftCryptnetUrlCacheMetaDataFAC339B39377A299AE11B4D208AD3090 GENERIC_READ | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE52UXTWTJRspinner[1].gif GENERIC_WRITE | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%owMicrosoftCryptnetUrlCacheContent1E11E75149C17A93653DA7DC0B8CF53F_447F5E83577BE48F231168C454280CA6 GENERIC_WRITE | GENERIC_READ | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE537NU00GPCoreModule[1].js GENERIC_WRITE | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%owMicrosoftCryptnetUrlCacheMetaDataBE8B021F9E811DFC8C8A28572A17C05A_286433916EEAE31B2DFC22857D309481 GENERIC_READ | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%owMicrosoftCryptnetUrlCacheMetaData521F25E202FF760B8461B88413F425E7 GENERIC_READ | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%owMicrosoftCryptnetUrlCacheContent9EC3B71635F8BA3FC68DE181A104A0EF_F6C39EF89D8A3A72327D8412589658B2 GENERIC_WRITE | GENERIC_READ | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%owMicrosoftCryptnetUrlCacheMetaData64DCC9872C5635B1B7891B30665E0558_0D8A59131C70FA8C84AEB496F0935D24 GENERIC_READ | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%owMicrosoftCryptnetUrlCacheMetaDataA6E643304C5FBB7CBF4025F1978D6EED GENERIC_READ | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE52UXTWTJRapi[1].js GENERIC_WRITE | FILE_READ_ATTRIBUTES
CREATE %APPDATA%MicrosoftWindowsCookies3S9Q96YC.txt GENERIC_READ | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%owMicrosoftCryptnetUrlCacheMetaData64DCC9872C5635B1B7891B30665E0558_5552C20A2631357820903FD38A8C0F9F GENERIC_WRITE | GENERIC_READ | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%owMicrosoftCryptnetUrlCacheContent64DCC9872C5635B1B7891B30665E0558_5552C20A2631357820903FD38A8C0F9F GENERIC_WRITE | GENERIC_READ | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE5CKDNCXYSbase-styles[1].css GENERIC_WRITE | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE5CKDNCXYSfavicon[1].ico GENERIC_READ | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%owMicrosoftCryptnetUrlCacheContentBE8B021F9E811DFC8C8A28572A17C05A_0B97942EE72A6E3F514E8E84F294CC72 GENERIC_WRITE | GENERIC_READ | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%owMicrosoftCryptnetUrlCacheMetaData6BADA8974A10C4BD62CC921D13E43B18_A7A8E86FCB076C144BD04C40841E7074 GENERIC_READ | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%owMicrosoftCryptnetUrlCacheMetaData82CB34DD3343FE727DF8890D352E0D8F GENERIC_READ | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE52UXTWTJRQualtricsGrotesque-Light[1].eot GENERIC_WRITE | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE5CKDNCXYSQualtricsGrotesque-ExtraBold[1].eot GENERIC_WRITE | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE5CKDNCXYSQualtricsGrotesque-Light[1].woff GENERIC_WRITE | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE5QQW0X29Yfavicon[1].ico GENERIC_WRITE | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE5QQW0X29Yfavicon[2].ico GENERIC_WRITE | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE537NU00GPfavicon[1].png GENERIC_WRITE | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE537NU00GPfavicon[2].png GENERIC_WRITE | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE537NU00GPfavicon[3].png GENERIC_WRITE | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE537NU00GPfavicon[4].png GENERIC_WRITE | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE537NU00GPfavicon[5].png GENERIC_WRITE | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE537NU00GPfavicon[6].png GENERIC_WRITE | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%MicrosoftInternet ExplorerRecoveryHighActive{9A7D410A-72D8-11EA-A0A0-0A0027477BF1}.dat GENERIC_WRITE | GENERIC_READ | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE537NU00GPYmOevPGj3bX7-XCtHZ_2hk0qUgWuurkHo3TApIzCqYU[1].js GENERIC_WRITE | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE537NU00GPwebworker[1].js GENERIC_WRITE | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE537NU00GPurlblockindex[1].bin GENERIC_WRITE | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE537NU00GPurlblockindex[2].bin GENERIC_WRITE | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%MicrosoftInternet ExplorerVersionManagerver23EF.tmp GENERIC_READ | FILE_READ_ATTRIBUTES
CREATE %APPDATA%MicrosoftWindowsCookiesZN1CVVJS.txt GENERIC_READ | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%owMicrosoftCryptnetUrlCacheMetaData6BADA8974A10C4BD62CC921D13E43B18_D9817BD5013875AD517DA73475345203 GENERIC_READ | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%owMicrosoftCryptnetUrlCacheContent6BADA8974A10C4BD62CC921D13E43B18_D9817BD5013875AD517DA73475345203 GENERIC_READ | FILE_READ_ATTRIBUTES
CREATE %APPDATA%MicrosoftWindowsCookiesKXAJDNXT.txt GENERIC_WRITE | FILE_READ_ATTRIBUTES
CREATE %APPDATA%MicrosoftWindowsCookies537MO3FQ.txt GENERIC_WRITE | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE52UXTWTJRsuggestions[1].en-US GENERIC_WRITE | FILE_READ_ATTRIBUTES
CREATE %APPDATA%MicrosoftWindowsCookies1WPQSD40.txt GENERIC_WRITE | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%owMicrosoftCryptnetUrlCacheMetaData6BADA8974A10C4BD62CC921D13E43B18_BEB37ABADF39714871232B4792417E04 GENERIC_WRITE | GENERIC_READ | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%owMicrosoftCryptnetUrlCacheContent6BADA8974A10C4BD62CC921D13E43B18_BEB37ABADF39714871232B4792417E04 GENERIC_WRITE | GENERIC_READ | FILE_READ_ATTRIBUTES
CREATE %APPDATA%MicrosoftWindowsCookiesI88H097X.txt GENERIC_READ | FILE_READ_ATTRIBUTES
CREATE %APPDATA%MicrosoftWindowsCookies2DO2L16S.txt GENERIC_WRITE | FILE_READ_ATTRIBUTES
CREATE %APPDATA%MicrosoftWindowsCookies6352928A.txt GENERIC_WRITE | FILE_READ_ATTRIBUTES
CREATE %APPDATA%MicrosoftWindowsCookies527SSSUP.txt GENERIC_READ | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%MicrosoftWindowsTemporary Internet FilesContent.IE5CKDNCXYSsearch[1].json GENERIC_WRITE | FILE_READ_ATTRIBUTES
CREATE %APPDATA%MicrosoftWindowsCookiesX4PHSKOX.txt GENERIC_READ | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%MicrosoftInternet ExplorerDomainSuggestions FILE_READ_DATA
WRITE %LOCALAPPDATA%MicrosoftInternet ExplorerDomainSuggestionsen-US.2 -
CREATE %LOCALAPPDATA%MicrosoftInternet ExplorerDomainSuggestionsen-US.1 DELETE | FILE_READ_DATA | FILE_READ_ATTRIBUTES
CREATE %LOCALAPPDATA%owMicrosoftCryptnetUrlCacheMetaData6BADA8974A10C4BD62CC921D13E43B18_49FC544F04082FD9F64F9EFB226AF8B5 GENERIC_READ | FILE_READ_ATTRIBUTES
CREATE %APPDATA%MicrosoftWindowsCookiesVG8BU31O.txt GENERIC_READ | FILE_READ_ATTRIBUTES
CREATE %APPDATA%MicrosoftWindowsCookies4F7NV88N.txt GENERIC_READ | FILE_READ_ATTRIBUTES
Module Path Module Base
%WINDIR%System32kernel32.dll 76500000
%WINDIR%System32KernelBase.dll 75910000
%WINDIR%System32msvcrt.dll 768E0000
%WINDIR%System32api-ms-win-downlevel-advapi32-l1-1-0.dll 759B0000
%WINDIR%System32advapi32.dll 76300000
%WINDIR%System32sechost.dll 77B50000
%WINDIR%GlobalizationSortingSortDefault.nls 01970000
%WINDIR%System32api-ms-win-downlevel-shell32-l1-1-0.dll 72650000
%WINDIR%System32shell32.dll 76B80000
%WINDIR%System32ieframe.dll 6C6B0000
%WINDIR%System32ole32.dll 76780000
%WINDIR%System32oleaut32.dll 77B90000
%WINDIR%winsxsx86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705dcomctl32.dll 74750000
%WINDIR%WindowsShell.Manifest 01C50000
%WINDIR%System32urlmon.dll 763B0000
%WINDIR%System32api-ms-win-downlevel-ole32-l1-1-0.dll 75960000
%WINDIR%System32wininet.dll 75D90000
%WINDIR%System32userenv.dll 75C00000
%WINDIR%System32profapi.dll 75900000
%WINDIR%System32mswsock.dll 75320000
%WINDIR%System32wship6.dll 75390000
%WINDIR%System32IPHLPAPI.DLL 74E60000
%WINDIR%System32winnsi.dll 74E50000
%WINDIR%System32rsaenh.dll 75050000
%WINDIR%System32RpcRtRemote.dll 75880000
%WINDIR%System32npmproxy.dll 6FED0000
%PROGRAMFILES%Internet Explorerieproxy.dll 6F3F0000
%WINDIR%System32WSHTCPIP.DLL 74D70000
%WINDIR%System32dnsapi.dll 75140000
%WINDIR%System32rasadhlp.dll 70390000
%WINDIR%System32apphelp.dll 75790000
%WINDIR%System32crypt32.dll 75A00000
%WINDIR%System32msasn1.dll 758F0000
%WINDIR%System32ExplorerFrame.dll 71960000
%WINDIR%System32duser.dll 74160000
%WINDIR%System32dui70.dll 741B0000
%WINDIR%System32en-USmsctf.dll.mui 03660000
%WINDIR%System32dhcpcsvc6.dll 73850000
%WINDIR%System32dhcpcsvc.dll 74D80000
%WINDIR%System32setupapi.dll 765E0000
%WINDIR%System32cfgmgr32.dll 75B30000
%WINDIR%System32devobj.dll 759C0000
%WINDIR%System32wshqos.dll 71410000
%WINDIR%System32credssp.dll 75310000
%WINDIR%System32schannel.dll 750C0000
%WINDIR%System32rpcrt4.dll 769B0000
%WINDIR%System32iertutil.dll 76040000
%WINDIR%System32api-ms-win-downlevel-version-l1-1-0.dll 75BF0000
%WINDIR%System32version.dll 74E80000
%WINDIR%System32api-ms-win-downlevel-user32-l1-1-0.dll 759E0000
%WINDIR%System32user32.dll 75C80000
%WINDIR%System32gdi32.dll 778C0000
%WINDIR%System32lpk.dll 77B30000
%WINDIR%System32usp10.dll 76AE0000
%WINDIR%System32api-ms-win-downlevel-normaliz-l1-1-0.dll 759F0000
%WINDIR%System32normaliz.dll 77B80000
%WINDIR%System32api-ms-win-downlevel-shlwapi-l1-1-0.dll 75970000
%WINDIR%System32shlwapi.dll 75C20000
%WINDIR%System32imm32.dll 000D0000
%WINDIR%System32imm32.dll 76990000
%WINDIR%System32msctf.dll 77910000
%WINDIR%System32cryptbase.dll 757E0000
%PROGRAMFILES%Internet ExplorerIEShims.dll 6F7A0000
%WINDIR%System32comdlg32.dll 76280000
%WINDIR%System32rpcss.dll 01C70000
%WINDIR%System32uxtheme.dll 74500000
%WINDIR%System32dwmapi.dll 740F0000
%PROGRAMFILES%Internet Explorersqmapi.dll 73140000
%WINDIR%System32secur32.dll 75620000
%WINDIR%System32sspicli.dll 75770000
%WINDIR%System32api-ms-win-downlevel-advapi32-l2-1-0.dll 72180000
%LOCALAPPDATA%MicrosoftWindowsTemporary Internet Filescounters.dat 01DA0000
%WINDIR%System32ws2_32.dll 75D50000
%WINDIR%System32nsi.dll 77B40000
%WINDIR%System32api-ms-win-downlevel-shlwapi-l2-1-0.dll 72900000
%WINDIR%System32clbcatq.dll 777D0000
%WINDIR%System32netprofm.dll 70810000
%WINDIR%System32nlaapi.dll 73C10000
%WINDIR%System32cryptsp.dll 75360000
%WINDIR%System32rsaenh.dll 01DD0000
%WINDIR%System32netapi32.dll 73C90000
%WINDIR%System32netutils.dll 73C70000
%WINDIR%System32srvcli.dll 75490000
%WINDIR%System32wkscli.dll 73C60000
%WINDIR%System32api-ms-win-core-synch-l1-2-0.dll 72F20000
%WINDIR%System32FWPUCLNT.DLL 73870000
%WINDIR%System32ieui.dll 6EE70000
%WINDIR%FontsStaticCache.dat 03810000
%WINDIR%System32WindowsCodecs.dll 73F80000
%WINDIR%System32oleacc.dll 6C670000
%WINDIR%System32oleaccrc.dll 025B0000
%WINDIR%System32msimg32.dll 73090000
%WINDIR%System32mlang.dll 70640000
%WINDIR%System32propsys.dll 74630000
%WINDIR%System32ntmarta.dll 74E20000
%WINDIR%System32Wldap32.dll 76A60000
%LOCALAPPDATA%MicrosoftWindowsCaches{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000001d.db 037A0000
%ALLUSERSPROFILE%MicrosoftWindowsCachescversions.2.db 03790000
%ALLUSERSPROFILE%MicrosoftWindowsCaches{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000012.db 04140000
%ALLUSERSPROFILE%MicrosoftWindowsCachescversions.2.db 04170000
%ALLUSERSPROFILE%MicrosoftWindowsCaches{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000002.db 04180000
%WINDIR%System32ncrypt.dll 75420000
%WINDIR%System32bcrypt.dll 753F0000
%WINDIR%System32bcryptprimitives.dll 74FB0000
%WINDIR%System32wintrust.dll 75980000
%WINDIR%System32gpapi.dll 74EC0000
%WINDIR%System32cryptnet.dll 71230000
%WINDIR%System32SensApi.dll 6D5A0000
%WINDIR%System32winhttp.dll 71670000
%WINDIR%System32webio.dll 71620000
%WINDIR%System32en-USKernelBase.dll.mui 049F0000
%LOCALAPPDATA%owMicrosoftInternet ExplorerServicessearch_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico 04860000
%WINDIR%System32MacromedFlashFlash32_27_0_0_187.ocx 65510000
%WINDIR%System32MacromedFlashFlash32_27_0_0_187.ocx 640C0000
%WINDIR%Microsoft.NETFrameworkv4.0.30319mscoreei.dll 6E080000
%WINDIR%System32mscoree.dll 6EF10000
%PROGRAMFILES%Internet Exploreriexplore.exe 04770000
%WINDIR%System32xmllite.dll 740C0000
%WINDIR%System32sxs.dll 75820000
%PROGRAMFILES%Internet Exploreriexplore.exe 03390000
%WINDIR%Microsoft.NETFrameworkv2.0.50727mscorwks.dll 6AED0000
%WINDIR%Microsoft.NETFrameworkv2.0.50727mscorwks.dll 663B0000
Type (ID) Path
KeyHandle (656) HKCUSoftwareMicrosoftWindowsCurrentVersionInternet Settings
KeyHandle (840) HKCUSoftwareMicrosoftWindowsCurrentVersionInternet SettingsZoneMap
KeyHandle (844) HKLMSOFTWAREMicrosoftWindowsCurrentVersionInternet SettingsZoneMap
KeyHandle (1176) HKCUSoftwareMicrosoftWindowsCurrentVersionInternet SettingsWpad{FD4316C2-FF33-42BF-BE78-39051EB67EC2}
KeyHandle (1180) HKCUSoftwareMicrosoftWindowsCurrentVersionInternet SettingsWpad 0-00-5e-00-01-01
KeyHandle (1312) HKCUSoftwareMicrosoftInternet ExplorerRecoveryAdminActive
KeyHandle (1340) HKCUSoftwareMicrosoftInternet ExplorerTabbedBrowsingNewTabPage
Name
Sessions1BaseNamedObjectsIsoScope_1094_IESQMMUTEX_0_519
LocalInternetShortcutMutex
IsoScope_1094_IESQMMUTEX_0_519
{5312EE61-79E3-4A24-BFE1-132B85B23C3A}
IsoScope_1094_IESQMMUTEX_0_331
LocalZonesCacheCounterMutex
LocalVERMGMTBlockListFileMutex
IsoScope_1094_ConnHashTable<4244>_HashTable_Mutex
IsoScope_1094_IE_EarlyTabStart_0x1208_Mutex
LocalZonesLockedCacheCounterMutex
LocalURLBLOCK_DOWNLOAD_MUTEX
LocalURLBLOCK_FILEMAPSWITCH_MUTEX_4244
IsoScope_1094_IESQMMUTEX_0_303
{66D0969A-1E86-44CF-B4EC-3806DDDA3B5D}
UpdatingNewTabPageData
LocalURLBLOCK_HASHFILESWITCH_MUTEX
Local!BrowserEmulation!SharedMemory!Mutex
Sessions1BaseNamedObjectsUpdatingNewTabPageData
Sessions1BaseNamedObjectsLocal!BrowserEmulation!SharedMemory!Mutex
Sessions1BaseNamedObjectsLocalVERMGMTBlockListFileMutex
Sessions1BaseNamedObjectsLocalURLBLOCK_FILEMAPSWITCH_MUTEX_4244
Sessions1BaseNamedObjectsLocalURLBLOCK_HASHFILESWITCH_MUTEX
Sessions1BaseNamedObjectsLocalURLBLOCK_DOWNLOAD_MUTEX
Sessions1BaseNamedObjectsLocalZonesCacheCounterMutex
Sessions1BaseNamedObjectsLocalZonesLockedCacheCounterMutex
Sessions1BaseNamedObjectsIsoScope_1094_IE_EarlyTabStart_0x1208_Mutex
Sessions1BaseNamedObjectsIsoScope_1094_ConnHashTable<4244>_HashTable_Mutex
Sessions1BaseNamedObjects{5312EE61-79E3-4A24-BFE1-132B85B23C3A}
Sessions1BaseNamedObjectsIsoScope_1094_IESQMMUTEX_0_303
Sessions1BaseNamedObjectsIsoScope_1094_IESQMMUTEX_0_331
Sessions1BaseNamedObjects{66D0969A-1E86-44CF-B4EC-3806DDDA3B5D}
Ad-Aware
Trojan.Agent.DQGO
AegisLab
Trojan.Script.Generic.4!c
AhnLab-V3
JS/Coinminer
ALYac
Trojan.Script.Agent
Arcabit
Trojan.Agent.DQGO
Avast
Other:Malware-gen [Trj]
AVG
Other:Malware-gen [Trj]
BitDefender
Trojan.Agent.DQGO
Cyren
Trojan.XJZA-2
DrWeb
JS.Siggen3.18530
Emsisoft
Trojan.Agent.DQGO (B)
eScan
Trojan.Agent.DQGO
FireEye
Trojan.Agent.DQGO
Fortinet
JS/Malpackage.IN!tr
GData
Script.Trojan-Stealer.Bicorewall.B
Ikarus
Trojan.Script.FlatMap
Jiangmin
Trojan.Script.aiyb
Kaspersky
HEUR:Trojan.Script.Generic
MAX
Malware (ai Score=100)
MaxSecure
Trojan.Malware.1726719.susgen
McAfee
Trojan-CoinStealer
McAfee-GW-Edition
Trojan-CoinStealer
Microsoft
Trojan:JS/CoinMiner
Qihoo-360
Win32/Trojan.Script.ed4
Sangfor Engine Zero
Malware
Sophos AV
Troj/Bckdoor-AL
Symantec
Infostealer
TrendMicro
TrojanSpy.JS.COINSTEAL.AA
TrendMicro-HouseCall
TrojanSpy.JS.COINSTEAL.AA
ZoneAlarm by Check Point
HEUR:Trojan.Script.Generic
Stanfield, Michael W
https://archive.is/43icO
Schools: Spokane Community College and Southern Oregon University
Defendant Spokane County Dist VE0014868 06-09-2010
Stanfield, Michael William
Defendant Spokane Municipal N00010333 07-26-2010
Stanfield, Michael William
Defendant Spokane Municipal 2Z0539029 08-03-2012
Stanfield, Michael William
Defendant Spokane Municipal B00077501 10-24-2008
Stanfield, Michael William
Defendant Spokane Municipal B00076326 10-23-2008
Stanfield, Michael William
Defendant Spokane Municipal U00103746 10-24-2008
Stanfield, Michael William
Defendant Spokane Municipal U00098835 10-23-2008
Stanfield, Michael William
Defendant Spokane County Dist IN0482473 07-11-2008
Stanfield, Michael William
Defendant Spokane County Dist CR0094389 11-04-2008
Stanfield, Michael William
Defendant Spokane County Dist IN0441309 11-28-2007
Stanfield, Michael William
Defendant Spokane County Dist CR0092658 06-27-2008
Stanfield, Michael William
Defendant Spokane Municipal B00075662 08-25-2008
Case No: 041011605 - STANFIELD, MICHAEL WILLIAM 04/29/1981
Print
Charges COUNT 1:RESIDENTIAL BURGLARY(D, COUNT 2:ASSAULT-3D(CR NEG/BOD
Case Type Criminal
Case File Date 04/05/2004
Court Superior Court
Case Status CMPL-08/17/2004
Case Information
File Date Sub Number Docket Entry
4/5/2004 1 INFORMATION
4/5/2004 2 STATEMENT OF FACTS
4/5/2004 3 CERTIFICATE OF ADDRESS SEARCH
4/6/2004 4 SUMMONS
4/8/2004 5 NOTICE OF APPEARANCE
4/12/2004 6 NOTICE OF APPEARANCE
4/14/2004 0 INITIAL ARRAIGNMENT
4/14/2004 7 ORDER SETTING TRIAL DATE
4/14/2004 8 ORD FOR PROTECTION
4/14/2004 9 OMNIBUS APPLICATION OF PROS ATTY
4/14/2004 10 ORDER ESTABLISHING COND. OF RELEASE
5/19/2004 11 ORDER SETTING TRIAL DATE
6/2/2004 12 ORDER SETTING TRIAL DATE
6/2/2004 13 ORDER AMEND PRETRIAL CONDITIONS
6/8/2004 14 ORDER AMENDING RELEASE CONDITIONS
6/25/2004 15 WAIVER OF SPEEDY TRIAL
6/25/2004 16 ORDER SETTING TRIAL DATE
7/23/2004 17 ORDER SETTING TRIAL DATE
8/13/2004 18 ORDER SETTING TRIAL DATE
8/17/2004 0 MOTION HEARING
8/17/2004 0 GUILTY PLEA AND SENTENCING HEARING
8/17/2004 0 CASE RESOLUTION GUILTY PLEA BEFORE TRIAL COMMENCEMENT
8/17/2004 19 ORD PERMITTING FILING AMENDED INFO
8/17/2004 20 AMENDED INFORMATION
8/17/2004 21 ORD FOR PROTECTION
8/17/2004 22 LETTERS TO THE COURT
8/17/2004 23 STATEMENT OF DEFENDANT,PLEA GUILTY
8/17/2004 24 APPENDIX DEF CRIMINAL HISTORY
8/17/2004 25 WARRANT OF COMMITMENT
8/17/2004 26 JUDGMENT AND SENTENCE 049062632
8/31/2004 27 NOTIFICATION OF FELONY CONVICTION
9/10/2004 0 DOC SUPERVISION DOC is supervising the case.
10/28/2004 28 SATISFACTION OF JUDGMENT 04906263-2
10/27/2005 29 REQUEST FOR TERMINATION/DISCHARGE
10/31/2005 30 CERTIFICATE AND ORDER OF DISCHARGE
5/29/2018 0 ORDER OF DESTRUCTION
11/3/2018 0 OC PAID IN FULL
11/3/2018 0 RT PAYMENT IN FULL
11/10/2018 0 AOC BILLING DOC CONSIDERS UNCOLLECTIBLE System Generated
Hearings/Due Dates
Case Number Hearing Type/Due Date Calendar Start Date/Time End Date Location Status Official Name
041011605 Criminal Trial Criminal Trial Calendar 08/30/2004 9:30AM 08/30/2004 CMPL-08/17/2004
041011605 Criminal Trial Criminal Trial Calendar 08/16/2004 9:30AM 08/16/2004 CMPL-08/17/2004
041011605 Criminal Trial Trial Readiness Calendar 08/16/2004 9:00AM 08/16/2004 CMPL-08/17/2004 GREGORY SYPOLT
041011605 Criminal Trial Criminal Trial Calendar 07/26/2004 9:30AM 07/26/2004 CMPL-08/17/2004
041011605 Criminal Trial Trial Readiness Calendar 07/26/2004 9:00AM 07/26/2004 CMPL-08/17/2004 GREGORY SYPOLT
041011605 Criminal Trial Criminal Trial Calendar 06/28/2004 9:30AM 06/28/2004 CMPL-08/17/2004
041011605 Criminal Trial Trial Readiness Calendar 06/28/2004 9:00AM 06/28/2004 CMPL-08/17/2004 GREGORY SYPOLT
041011605 Arraignment Chief Criminal Calendar 04/14/2004 10:30AM 04/14/2004 CMPL-08/17/2004 GREGORY SYPOLT
License Holder: Ruvim Gavrilyuk
License Type: Construction Contractor (WA)
License number: #2859072
Valid through 03/01/2021
Payment Methods: Cash, Check, Credit card
WA UBI no. 604 397 258
License no. ROBINCL819DA
Bond account no. 64918366
Policy no. CL-00190528
Casualty Insurance Policy no. 2859072
Acceptance Casualty Insurance Policy no. CL-00190528
Carney, Douglas Revelle
Defendant Spokane Municipal K00523240 05-28-1996
Carney, Douglas Revelle
Defendant Spokane Municipal B00080678 02-09-2009
Carney, Douglas Revelle
Defendant Spokane Municipal K00534549 02-18-1997
Carney, Douglas Revelle
Defendant Spokane Municipal 2Z0068831 01-14-2012
Carney, Douglas Revelle
Defendant Spokane Municipal K00527344 08-14-1996
Carney, Douglas Revelle
Defendant Spokane County Dist F00081785 06-16-2008
Carney, Douglas Revelle
Defendant Spokane Municipal K00517493 04-08-1996
Carney, Douglas Revelle
Defendant Spokane County Dist CB0011456 12-27-1996
Carney, Douglas Revelle
Defendant Spokane County Dist CK0522856 04-23-1996
Carney, Douglas Revelle
Defendant Spokane Municipal K00509809 09-12-1995
Carney, Douglas Revelle
Defendant Spokane County Dist CB0021641 07-21-1997
Carney, Douglas Revelle
Defendant Spokane County Dist CB0005734 06-25-1997
Carney, Douglas Revelle
Defendant Spokane County Dist CB0014537 09-27-1995
Carney, Douglas Revelle
Defendant Grant County Dist Ct 99451CC 11-02-1999
Carney, Douglas Revelle
Defendant Spokane County Dist 3Z0939920 12-03-2013
Carney, Douglas Revelle
Defendant Spokane Municipal M00063578 02-21-2003
Carney, Douglas Revelle
Defendant Spokane Municipal T00061297 01-03-2005
Carney, Douglas Revelle
Defendant Spokane Municipal T00061296 01-03-2005
Carney, Douglas Revelle
Defendant Spokane Municipal K00509208 06-02-1995
Carney, Douglas Revelle
Defendant Spokane Municipal K00539953 06-24-1997
Carney, Douglas Revelle
Defendant Spokane Municipal W00008238 04-15-2011
Carney, Douglas Revelle
Defendant Spokane County Dist 1Z0322601 06-09-2011
Carney, Douglas Revelle
Defendant Upper Kittitas Dist 6Z0597827 05-23-2016
Carney, Douglas Revelle
Defendant Pend Oreille Dist 6Z0894103 09-19-2016
Carney, Douglas Revelle
Defendant Spokane Municipal 6Z1003733 10-25-2016
Carney, Douglas Revelle
Defendant Franklin District I00623786 06-18-1997
Carney, Douglas Revelle
Defendant Spokane Municipal U00087803 07-08-2008
Carney, Douglas Revelle
Defendant Spokane County Dist XZ0094504 02-03-2020
CARNEY, DOUGLAS REVELLET00061296INSPP01/03/2005FAIL LICENSE DOG/CAT
CARNEY, DOUGLAS REVELLET00061297INSPP01/03/2005FAIL LICENSE DOG/CAT
CARNEY, DOUGLAS REVELLEM00040114CTSPPCL12/11/2000DWLS 3RD DEGREE
CARNEY, DOUGLAS REVELLER00049983ITSPP12/11/2000NEGLIGENT DRIVING 2ND DEGREE
CARNEY, DOUGLAS REVELLE 2Z0068831CTSPPCL 01/14/2012 DWLS 3RD DEGREE
Case No: 121001627 - CARNEY, DOUGLAS REVELLE 06/24/1975
Print
Charges COUNT 1:RIOT(WEAPON)
Case Type Criminal
Case File Date 01/18/2012
Court Superior Court
Case Status CMPL-02/27/2013
Case Information
File Date Sub Number Docket Entry
1/17/2012 0 PRELIMINARY APPEARANCE
1/17/2012 1 NOTICE OF ARREST
1/17/2012 2 STATEMENT OF FACTS
1/17/2012 3 ORDER OF RELEASE JAIL - BOND $5,000
1/17/2012 4 BOND $5,000 - ANGELS BAIL BONDS
1/17/2012 5 NOTICE OF APPEARANCE - LIMITED
1/17/2012 6 ORDER SETTING ARRAIGNMENT 02-01-12
1/18/2012 7 INFORMATION
1/18/2012 8 STATEMENT OF FACTS
1/18/2012 9 CERTIFICATE OF ADDRESS SEARCH
1/18/2012 10 SUMMONS
2/1/2012 11 NOTICE OF APPEARANCE
2/1/2012 12 ORDER SETTING TRIAL DATE
2/1/2012 13 OMNIBUS APPLICATION OF PROS ATTY
2/1/2012 14 ORDER ESTABLISHING COND. OF RELEASE
3/5/2012 15 ORDER EXONERATING BOND/BAIL
3/5/2012 16 COPY FAX
4/13/2012 0 MOTION HEARING
4/13/2012 0 HEARING CONTINUED: STIPULATED
4/13/2012 17 ORDER SETTING TRIAL DATE
6/1/2012 0 HEARING CONTINUED: STIPULATED
6/1/2012 0 MOTION HEARING
6/1/2012 18 ORDER SETTING TRIAL DATE
7/20/2012 0 HEARING CONTINUED: STIPULATED
7/20/2012 0 MOTION HEARING
7/20/2012 19 ORDER SETTING TRIAL DATE
9/7/2012 0 MOTION HEARING
9/7/2012 0 HEARING CONTINUED: STIPULATED
9/7/2012 20 ORDER SETTING TRIAL DATE
10/19/2012 0 HEARING CONTINUED: STIPULATED
10/19/2012 0 MOTION HEARING
10/19/2012 21 ORDER SETTING TRIAL DATE
12/7/2012 0 HEARING CONTINUED: STIPULATED
12/7/2012 22 ORDER SETTING TRIAL DATE
2/8/2013 23 ORDER SETTING TRIAL DATE
2/27/2013 0 GUILTY PLEA AND SENTENCING HEARING
2/27/2013 0 CASE RESOLUTION GUILTY PLEA BEFORE TRIAL COMMENCEMENT
2/27/2013 24 NOTICE: DEFENDANT REPORTING
2/27/2013 25 ORDER CLERKS LEGAL FINANCIAL INFO
2/27/2013 26 ORD PERMITTING FILING AMENDED INFO
2/27/2013 27 AMENDED INFORMATION
2/27/2013 28 STATEMENT OF DEFENDANT,PLEA GUILTY
2/27/2013 29 APPENDIX CRIMINAL HISTORY
2/27/2013 30 ORDER DNA TESTING
2/27/2013 31 FELONY JUDGMENT AND SENT 139017300
3/7/2013 0 NO DATA AT DOC DOC has no data for the case. AOC billing depends on funding.
4/10/2014 0 DOC SUPERVISION DOC is supervising the case.
5/8/2014 0 DOC ENDED SUPERVISION DOC ended supervision. AOC will bill if other conditions met.
7/25/2014 32 COLLECTION NOTICE
1/2/2015 33 AGREEMENT PAYMENT
5/7/2015 34 NOTICE OF ADDRESS CHANGE
12/19/2016 35 ORDER MODIFYING SENTENCE
6/13/2018 0 JUVENILE RESTITUTION NO INTEREST An automated system program update has changed the accrue interest flag(s) for non-restitution amounts on this case to NO, per RCW 10.82.090.
8/3/2018 0 COSTS ASSESSED COLLECTION FEE $100
11/3/2018 0 OC CLERK COSTS ONLY
11/3/2018 0 RT AGREED ORDER OUT OF CUSTODY
7/9/2019 36 NOTICE OF DEFT CHG OF ADDRESS
Hearings/Due Dates
Case Number Hearing Type/Due Date Calendar Start Date/Time End Date Location Status Official Name
121001627 Criminal Trial Criminal Trial Calendar 03/04/2013 9:30AM 03/04/2013 CMPL-02/27/2013 JAMES TRIPLET
121001627 Plea and Sentencing Plea Judge 02/27/2013 8:30AM 02/27/2013 CMPL-02/27/2013 MICHAEL PRICE
121001627 Pretrial Conference Chief Criminal Calendar 02/22/2013 10:30AM 02/22/2013 CMPL-02/27/2013 JAMES TRIPLET
121001627 Arraignment Chief Criminal Calendar 02/01/2012 9:30AM 02/01/2012 CMPL-02/27/2013 ANNETTE PLESE
121001627 First Appearance Chief Criminal Calendar 01/17/2012 1:30PM 01/17/2012 CMPL-02/27/2013 ANNETTE PLESE
Case No: 081019706 - CARNEY, DOUGLAS REVELLE 06/24/1975
Print
Charges COUNT 1:ASSAULT-3D(CR NEG/BOD
Case Type Criminal
Case File Date 06/18/2008
Court Superior Court
Case Status CMPL-02/10/2009
Case Information
File Date Sub Number Docket Entry
6/18/2008 1 INFORMATION
6/18/2008 2 STATEMENT OF FACTS
6/19/2008 3 CERTIFICATE OF ADDRESS SEARCH
6/19/2008 4 SUMMONS TO DEF TO APPEAR
6/23/2008 5 FEE ASSESSD-PUBLIC DEFENSE RECOUPMT
6/25/2008 6 NOTICE OF APPEARANCE
7/7/2008 0 INITIAL ARRAIGNMENT
7/7/2008 7 OMNIBUS APPLICATION OF PROS ATTY
7/7/2008 8 ORDER ESTABLISHING COND. OF RELEASE
7/7/2008 9 ORDER SETTING TRIAL DATE
7/9/2008 10 BOND $25,000 - MARCIS BAIL BONDS
7/11/2008 11 STATE'S LIST OF WITNESSES
7/30/2008 12 RETURN ON SUBPOENA-BRENDON WARNER
8/7/2008 13 RETURN ON SUBPOENA-LISA BAXTER
9/8/2008 0 OMNIBUS HEARING
9/8/2008 14 ORDER SETTING TRIAL DATE
10/17/2008 0 MOTION HEARING
10/17/2008 15 ORDER SETTING TRIAL DATE
11/3/2008 16 ORDER MODIFYING RELEASE CONDITIONS
1/5/2009 17 MOTION & AFFIDAVIT BENCH WARRANT
1/5/2009 18 ORDER FOR WARRANT NO BAIL ACCEPTED
1/6/2009 0 PRELIMINARY APPEARANCE
1/6/2009 19 SHERIFF'S RETURN ON A BENCH WARRANT
1/7/2009 20 ORDER SETTING TRIAL DATE
1/9/2009 0 HEARING CONTINUED: STIPULATED
1/9/2009 21 BOND MARCIS BAIL BONDS $25,000
1/9/2009 22 ORDER SETTING TRIAL DATE
1/26/2009 0 GUILTY PLEA ONLY HEARING
1/26/2009 23 ORD PERMITTING FILING AMENDED INFO
1/26/2009 24 AMENDED INFORMATION
1/26/2009 25 ORDER SETTING SENT HRG 2-9-09
1/27/2009 0 CASE RESOLUTION GUILTY PLEA BEFORE TRIAL COMMENCEMENT
1/27/2009 26 STATEMENT OF DEFENDANT,PLEA GUILTY
1/27/2009 27 APPENDIX DEF CRIMINAL HISTORY
2/9/2009 0 HEARING CONTINUED: UNSPECIFIED
2/10/2009 0 SENTENCING HEARING
2/10/2009 28 WARRANT OF COMMITMENT
2/10/2009 29 ORDER EXONERATING BOND/BAIL
2/10/2009 30 ORDER ON CLERKS FINANCIAL INFO
2/10/2009 31 FELONY JUDG AND SENT 09901249-1
2/10/2009 32 ORDER SETTING RESTITUTION 099012491
3/5/2009 0 DOC SUPERVISION DOC is supervising the case.
1/31/2012 0 COSTS ASSESSED - $100 COLLECTION
1/31/2012 33 DISPOSITION REPORT RCV'D
2/9/2012 0 DOC ENDED SUPERVISION DOC ended supervision. AOC will bill if other conditions met.
2/23/2012 34 COLLECTION NOTICE
2/28/2012 35 MAIL RETURN - UNCLAIMED
3/14/2012 36 LETTER RE LFO PYMNTS
4/16/2012 37 ORDER MODIFYING SENTENCE X-X
5/16/2013 38 NON-COMPLIANCE SANCTIONS ASSESSED
6/26/2013 39 NOTICE OF SCHEDULING 7/26/2013
6/28/2013 40 RETURN RECEIPT - CERTIFIED MAIL
7/2/2013 41 ORDER MODIFYING SENTENCE X-X
9/9/2014 42 NON-COMPLIANCE SANCTIONS ASSESSED
11/21/2014 43 NOTICE OF SCHEDULING 1/9/2015
12/1/2014 44 RETURN RECEIPT - CERTIFIED MAIL
1/7/2015 45 ORDER MODIFYING SENTENCE
5/7/2015 46 NOTICE OF ADDRESS CHANGE
3/8/2016 47 NON-COMPLIANCE OF LFO ORDER
12/19/2016 48 ORDER MODIFYING SENTENCE
6/13/2018 0 JUVENILE RESTITUTION NO INTEREST An automated system program update has changed the accrue interest flag(s) for non-restitution amounts on this case to NO, per RCW 10.82.090.
6/20/2018 0 FIN HOLD AS UNCLAIMED MONEY REPORT #: 09-2841
11/1/2018 0 FIN HOLD AS UNCLAIMED MONEY REPORT #: 09-2841
11/3/2018 0 OC CLERK RESITUTION ORDERED
11/3/2018 0 RT AGREED ORDER OUT OF CUSTODY
7/9/2019 49 NOTICE OF DEFT CHG OF ADDRESS
Hearings/Due Dates
Case Number Hearing Type/Due Date Calendar Start Date/Time End Date Location Status Official Name
081019706 First Appearance Chief Criminal Calendar 01/06/2009 1:30PM 01/06/2009 CMPL-02/10/2009 ELLEN CLARK
081019706 Omnibus Hearing Chief Criminal Calendar 09/08/2008 8:30AM 09/08/2008 CMPL-02/10/2009 JEROME LEVEQUE
081019706 Arraignment Chief Criminal Calendar 07/07/2008 10:00AM 07/07/2008 CMPL-02/10/2009 ELLEN CLARK
Case No: 051006049 - CARNEY, DOUGLAS REVELLE 06/24/1975
Print
Charges COUNT 1:CNTL SUB(DEL)CONSPIRAC, COUNT 2:CNTL SUB(POSS W/INT DE
Case Type Criminal
Case File Date 02/23/2005
Court Superior Court
Case Status CMPL-06/15/2005
Case Information
File Date Sub Number Docket Entry
2/23/2005 1 INFORMATION
2/23/2005 2 STATEMENT OF FACTS
2/25/2005 3 CERTIFICATE OF ADDRESS SEARCH
2/25/2005 4 SUMMONS
3/2/2005 5 NOTICE OF APPEARANCE
3/7/2005 0 INITIAL ARRAIGNMENT
3/8/2005 6 ORDER SETTING TRIAL DATE
3/8/2005 7 OMNIBUS APPLICATION OF PROS ATTY
3/8/2005 8 OMNIBUS APPLICATION BY DEFENDANT
3/8/2005 9 ORDER ESTABLISHING COND. OF RELEASE
4/11/2005 0 OMNIBUS HEARING
4/11/2005 10 ORDER SETTING TRIAL DATE
5/25/2005 11 MOTION TO SUPPRESS EVIDENCE
5/25/2005 12 MEMORANDUM OF AUTHORITIES
5/25/2005 13 NOTE FOR MOTION DOCKET
5/25/2005 14 MOTION FOR SEVERANCE OF OFFENSES
5/25/2005 15 MEMORANDUM OF AUTHORITIES
5/25/2005 16 NOTE FOR MOTION DOCKET
6/2/2005 0 HEARING STRICKEN: IN COURT OTHER
6/7/2005 17 ORDER SETTING TRIAL DATE
6/15/2005 0 GUILTY PLEA AND SENTENCING HEARING
6/15/2005 0 CASE RESOLUTION GUILTY PLEA BEFORE TRIAL COMMENCEMENT
6/15/2005 18 STATEMENT OF DEFENDANT,PLEA GUILTY
6/15/2005 19 APPENDIX CRIMINAL HISTORY
6/15/2005 20 WARRANT OF COMMITMENT
6/15/2005 21 ORDER OF DISPOSITION
6/15/2005 22 ORD PERMITTING FILING AMENDED INFO
6/15/2005 23 AMENDED INFORMATION
6/15/2005 24 JUDGMENT AND SENTENCE 059046449
7/7/2005 25 NOTIFICATION OF FELONY CONVICTION
7/8/2005 0 DOC SUPERVISION DOC is supervising the case.
8/11/2006 0 DOC ENDED SUPERVISION DOC ended supervision. AOC will bill if other conditions met.
8/25/2006 26 DISPOSITION REPORT RCV'D
8/29/2006 0 COSTS ASSESSED - $100 COLLECTION
8/30/2006 27 DISPOSITION REPORT RCV'D
9/13/2006 28 AGREEMENT - PAYMENT
3/18/2008 29 NOTICE OF ADDRESS CHANGE
4/16/2008 30 NOTICE OF ADDRESS CHANGE
8/29/2008 0 COSTS ASSESSED - REASSESSMENT $100
3/5/2009 0 DOC SUPERVISION DOC is supervising the case.
8/29/2009 0 COSTS ASSESSED - REASSESSMENT $100
12/3/2010 31 LETTER - LFO
1/10/2011 0 DOC ENDED SUPERVISION DOC ended supervision. AOC will bill if other conditions met.
9/30/2011 32 COLLECTION NOTICE
3/14/2012 33 LETTER RE LFO PYMNTS
4/16/2012 34 ORDER MODIFYING SENTENCE X-X
5/16/2013 35 NON-COMPLIANCE SANCTIONS ASSESSED
6/26/2013 36 NOTICE OF SCHEDULING 7/26/2013
6/28/2013 37 RETURN RECEIPT - CERTIFIED MAIL
7/2/2013 38 ORDER MODIFYING SENTENCE X-X
9/9/2014 39 NON-COMPLIANCE SANCTIONS ASSESSED
11/21/2014 40 NOTICE OF SCHEDULING 1/9/2015
12/1/2014 41 RETURN RECEIPT - CERTIFIED MAIL
1/7/2015 42 ORDER MODIFYING SENTENCE
5/7/2015 43 NOTICE OF ADDRESS CHANGE
3/8/2016 44 NON-COMPLIANCE OF LFO ORDER
12/19/2016 45 ORDER MODIFYING SENTENCE
6/13/2018 0 JUVENILE RESTITUTION NO INTEREST An automated system program update has changed the accrue interest flag(s) for non-restitution amounts on this case to NO, per RCW 10.82.090.
11/3/2018 0 OC CLERK COSTS ONLY
11/3/2018 0 RT AGREED ORDER OUT OF CUSTODY
7/9/2019 46 NOTICE OF DEFT CHG OF ADDRESS
Hearings/Due Dates
Case Number Hearing Type/Due Date Calendar Start Date/Time End Date Location Status Official Name
051006049 Pretrial Conference Chief Criminal Calendar 06/17/2005 10:00AM 06/17/2005 CMPL-06/15/2005 NEAL RIELLY
051006049 Motion Chief Criminal Calendar 06/02/2005 2:00PM 06/02/2005 CMPL-06/15/2005 SALVATORE COZZA
051006049 Omnibus Hearing Chief Criminal Calendar 04/11/2005 8:30AM 04/11/2005 CMPL-06/15/2005 KATHLEEN O'CONNOR
051006049 Arraignment Chief Criminal Calendar 03/07/2005 3:30PM 03/07/2005 CMPL-06/15/2005 KATHLEEN O'CONNOR
ROHRICH, CODY WILLIAM 06/17/2020
11:30AM 6/17/2020 11:30 06/17/2020 2010194932 COURTHOUSE: COURTROOM 401 Arraignment Criminal - ADULT CRIMINAL MARYANN MORENO
ROHRICH, CODY WILLIAM RYAN 06/17/2020
11:30AM 6/17/2020 11:30 06/17/2020 2010194932 COURTHOUSE: COURTROOM 401 Arraignment Criminal - ADULT CRIMINAL MARYANN MORENO
Case No: 2010194932 - ROHRICH, CODY WILLIAM 01/02/1992
Print
Charges COUNT 1:THEFT-2D(OBTAIN/EXERT, COUNT 2:POSS STOLEN MOTOR VEH
Case Type Criminal
Case File Date 06/09/2020
Court Superior Court
Case Status ACT -06/09/2020
Case Information
File Date Sub Number Docket Entry
6/5/2020 0 PRELIMINARY APPEARANCE Court Reporter: FTR GOLD DPA: SCHAFF ATD: NORDTVEDT BOND: OR AGREED SIGNED: SCHEDULING ORDER (ARR: 6/17); RELEASE CONDITIONS;
6/5/2020 1 NOTICE OF ARREST
6/5/2020 2 STATEMENT OF FACTS
6/5/2020 3 PRETRIAL REPORT
6/5/2020 4 ORDER ESTABLISHING CONDITIONS OF RELEASE
6/5/2020 5 ORDER SETTING ARRAIGN 6/17/20 @ 11:30
6/9/2020 6 INFORMATION
6/9/2020 7 STATEMENT OF FACTS
6/16/2020 8 NOTICE OF APPEARANCE AND REQUEST FOR DISCOVERY
6/17/2020 0 INITIAL ARRAIGNMENT COURT REPORTER: TERRI COCHRAN DPA: MOSCOWITZ ATD: SCHMIDT SIGNED: SCHEDULING ORDER: TR: 8/24 TD: 9/8; OMNIBUS APP BY PLAINTIFF
Hearings/Due Dates
Case Number Hearing Type/Due Date Calendar Start Date/Time End Date Location Status Official Name
2010194932 Criminal Trial Criminal Trial Calendar 09/08/2020 9:30AM 09/08/2020 COURTHOUSE: COURTROOM 408 ACT -06/09/2020 JOHN COONEY
2010194932 Trial Readiness Call Chief Criminal Calendar 08/24/2020 1:30PM 08/24/2020 COURTHOUSE: COURTROOM 408 ACT -06/09/2020 JOHN COONEY
2010194932 Arraignment Criminal Commissioner Calendar 06/17/2020 11:30AM 06/17/2020 COURTHOUSE: COURTROOM 401 ACT -06/09/2020 MARYANN MORENO
2010194932 First Appearance Criminal Commissioner Calendar 06/05/2020 1:30PM 06/05/2020 ACT -06/09/2020 JOHN STINE
164 Results for Hearings in Spokane County Superior Court for 6/5/2020. ...
ROHRICH, CODY WILLIAM: 06/05/2020 1:30PM: 6/5/2020 13:30: 06/05/2020: 2010194932 2010194932:
COURTHOUSE: COURTROOM 305: First Appearance : Criminal - PRE FILE ADULT CRIMINAL:
Case No: 2010194932 - ROHRICH, CODY WILLIAM 01/02/1992
Print
Charges COUNT 1:THEFT 2D SHOPLIFTING, COUNT 2:CONTROLLED SUBSTANCES POSSE, COUNT 3:POSSESSION OF STOLEN MOTOR
Case Type Criminal
Case File Date 06/05/2020
Court Superior Court
Case Status ACT -06/05/2020
Case Information
File Date Sub Number Docket Entry
6/5/2020 0 PRELIMINARY APPEARANCE Court Reporter: FTR GOLD DPA: SCHAFF ATD: NORDTVEDT BOND: OR AGREED SIGNED: SCHEDULING ORDER (ARR: 6/17); RELEASE CONDITIONS;
6/5/2020 1 NOTICE OF ARREST
Hearings/Due Dates
Case Number Hearing Type/Due Date Calendar Start Date/Time End Date Location Status Official Name
2010194932 Arraignment Criminal Commissioner Calendar 06/17/2020 11:30AM 06/17/2020 COURTHOUSE: COURTROOM 401 ACT -06/05/2020 MARYANN MORENO
2010194932 First Appearance Criminal Commissioner Calendar 06/05/2020 1:30PM 06/05/2020 ACT -06/05/2020 JOHN STINE
ROHRICH, CODY WILLIAM RYAN (28 years old) -- Inmate Number: 57522
Booking Number: 20J1117
Booked Date/Time: 6/5/2020 5:46:00 PM
Alleged Offenses: 1) COLFAX MUNI COURT CRIM TRSPSS 1; MAL MISCH 3; FLSE STTMNT PUB SERV (WARRANT NUMBER: 18-CF1864) (WARRANT)
Bond Information: $5,050.00 Bond or $5,050.00 Cash (Colfax Muni.)
Sentence Class: UM
STATE OF WASHINGTON vs ROHRICH, CODY WILLIAM ROBERT
Case: 2010215732
Charges: COUNT 1:BURGLARY-2ND DEG-ATMPT
Case Type: Criminal
File Date: 06/26/2020
Court: Superior Court
Case Status: ACT -06/26/2020
Hearings
Official Name Calendar Hearing Type Start Date End Date Location
TONY HAZEL Chief Criminal Calendar Arraignment 07/07/2020 9:00AM 07/07/2020
JOHN STINE Criminal Commissioner Calendar First Appearance 06/24/2020 1:30PM 06/24/2020
Arbeit
Real life record's
Artist . 23. Dezember 2019 bis heute . Spokane
Just me n a few other outsiders fittin in gettin it down low kane town style
Real life record's
Musician . 23. Dezember 2019 bis heute . Spokane
Ausbildung
Animal Behavior College
ABC Certified Dog Trainer . Valencia (Santa Clarita)
On Track Academy
Bis zum 2011 . Spokane
Aktueller Wohnort und Heimatort
Spokane
Aktueller Wohnort
Favoriten
Sonstiges
Lane K Brown Foundation, Idaho County Sheriff's Office, Idaho County Free Press, Spokane Houses,Rooms,Rentals, Hood Revenue Kennels, Off Leash K9 Training, LLC Spokane/CDA, Douglas Remodelers, Love and miss my Dad, Death Drugs and Beauty 3.0, Barber College, Branded Bills (Tempe), Alumishine Metal Polishing
Lane K Brown Foundation
Cody William Robert Rohrich of Colfax, WA and Spokane, WA
https://web.archive.org/web/20200606051801/https://s1.mylife.com/photos/031/202/894L.jpg
1 Rohrich, Cody
Respondent Whitman County Dist AH1211Y14 12-11-2014
2 Rohrich, Cody
Defendant Colfax Municipal 13691 04-05-2013
3 Rohrich, Cody
Defendant Whitman County Dist P00151032 02-19-2015
4 Rohrich, Cody
Respondent Whitman County Dist AH0072715 07-27-2015
5 Rohrich, Cody
Defendant Whitman County Dist P00151033 02-19-2015
6 Rohrich, Cody
Defendant Whitman County Dist P00151058 03-27-2015
7 Rohrich, Cody
Defendant Spokane Municipal N00027617 02-08-2011
8 Rohrich, Cody
Defendant Colfax Municipal 13642 05-14-2013
9 Rohrich, Cody
Defendant Colfax Municipal 13024 06-11-2013
10 Rohrich, Cody
Defendant Whitman County Dist P00151012 01-22-2015
11 Rohrich, Cody
Defendant Colfax Municipal 12CF0986A 10-30-2012
12 Rohrich, Cody
Defendant Colfax Municipal 13648 07-01-2013
13 Rohrich, Cody
Defendant Whitman County Dist P00151085 05-05-2015
14 Rohrich, Cody
Defendant Colfax Municipal 4191 10-16-2012
15 Rohrich, Cody William
Defendant Colfax Municipal 8Z0177188 01-29-2018
16 Rohrich, Cody William
Defendant Colfax Municipal 8Z0539099 07-23-2018
17 Rohrich, Cody William
Defendant Whitman County Dist P00191289 11-20-2019
18 Rohrich, Cody William Robert
Defendant Colfax Municipal 18-CF1864 10-30-2018
19 Rohrich, Cody William Robert
Defendant Colfax Municipal PC0102018 10-22-2018
20 Rohrich, Cody William Robert
Respondent Whitman County Dist DV0010419 01-04-2019
21 Rohrich, Cody William Robert
Defendant Colfax Municipal PC122918B 01-08-2019
22 Rohrich, Cody William Robert
Defendant Colfax Municipal 19-CF0117 02-05-2019
23 Rohrich, Cody William Robert
Defendant Colfax Municipal 19-CF0031 01-10-2019
24 Rohrich, Cody William Robert
Defendant Colfax Municipal 18-CF1573 09-11-2018
25 Rohrich, Cody William Robert
Defendant Spokane Municipal XZ0139450 02-05-2020
26 Rohrich, Cody William Robert
Defendant Spokane Municipal XZ0139451 02-05-2020
Linkedin Status as Unemployed:
https://www.linkedin.com/in/cody-rohrich-85398b138
Inmate Search: Connect with Cody Rohrich, Colfax, Washington
https://www.inmateaid.com/inmate-profiles/cody-rohrich
Cody Rohrich is an inmate currently at the Whitman County Jail, located in Colfax,WA. If you are wishing to visit, the visitation hours are limited by the security level of the facility;
Criminal or Civil Court records found on Cody's Background Report
Criminal or Civil Court records found on Cody's Family, Friends, Neighbors, or Classmates
Approximate
Reputation Score
0/5
AKA:cody w rohrich
Associates:deana j burlingame, kathryn rohrich
https://www.mylife.com/cody-rohrich/e73581211083318
Locations:
Colfax, WA
Spokane, WA
West Fargo, ND
Studied At:
Moorhead High School
Shadle Park High School
IP addresses:
97.107.204.79
216.171.84.176
192.68.253.217
Whitman County Gazette:
https://www.wcgazette.com/story/2018/10/25/news/dog-knapper-arrested/27258.html
Cody W. Rohrich, 26, Colfax, was booked into jail here early Tuesday morning, Oct. 16, on probable charges of burglary, possession of stolen property and possession of methamphetamine.
Rohrich, who had been sentenced to a week in jail on a drug possession charge Oct. 5, was alleged to be in possession of two dogs which had turned up missing from the Colfax dog pound Sept. 15.
According to an arrest report by Colfax Officer Cory Alcantar, he went to the scene of an arrest early Oct. 16 by Deputy Tyler Langerfeld in Colfax and observed Deeno, a pit bull believed to be owned by Rohrich, in the vehicle. Alcantar said another pit bull owned by Rohrich, Viper, later peeked out from under a blanket inside the vehicle.
The two pit bulls had been cut out of cages where they had been confined Sept. 15 by the city in the pound which is located at the sewer plant on the Walla Walla Highway. Deeno and Viper had been confiscated by city police to hold for a dangerous dog hearing.
Officer Alcantar said he had been attacked by one of the dogs, and after Rohrich had been cautioned, one the dogs got loose and bit a Colfax resident.
A separate arrest report by Officer Perry Tate said after Rohrich had been jailed he began to complain about discomfort and admitted he had stuck a baggie containing six to eight grams of methamphetamine up his r****m. He admitted he had been unsuccessful in an attempt to remove the packet while he was being processed for entry into the jail. He allegedly told Tate he believed he had damaged the packet and feared he would suffer a drug overdose.
The report said Rohrich began showing signs of drug ingestion and was taken to Whitman Hospital where the packet was recovered. It was turned over to the police department as evidence.
Bond for pre-trial release was set at $25,000 in a first appearance later Oct. 17.
The Oct. 5 conviction related to a charge of possession of methamphetamine which was confiscated during an arrest July 27, when Rohrich was a passenger in a car driven by another drug suspect at McDonald's in Pullman.
Friday, Deputy Prosecutor Merritt Decker informed Judge Gary Libey the county does not intend to file felony charges in superior court against Rohrich.
Decker said he anticipates any charges in the case will be filed in Colfax Municipal Court.
https://web.archive.org/web/20200608052054/https://postimg.cc/Cd7TP1br
https://web.archive.org/web/20200608052311/https://postimg.cc/ns4wXRkS
Public Records | Local | dnews.com
https://dnews.com/local/public-records/article_7bce30e8-96e9-5acd-9ce4-21becf6b5cb2.html
Cody Rohrich, 23, was convicted of second-degree criminal trespassing and a probation violation, sentenced to 30 days in jail, with 27 suspended and fined $43.
https://www.hybrid-analysis.com/sample/fe79063e212e26c7d262a00923c2e7440e24f575519f0f122779725e4f982db7/5ee11fa231040469e12d6333
LockDownBrowser-2-0-6-06.exe
malicious
Threat Score: 100/100 AV Detection: 5% Labeled as: Unavailable
This report is generated from a file or URL submitted to this webservice on June 10th 2020 18:00:27 (UTC)
Guest System: Windows 7 32 bit, Professional, 6.1 (build 7601), Service Pack 1
Report generated by Falcon Sandbox v8.30 (C) Hybrid Analysis
Detected as: QVM41.1.Malware.Gen, Heur.Corrupt, Trojan.Banker.ClipBanker.afk, Trojan.Win32.Dofoil.gfrmxi, Malware.generic, and BScope.Trojan.Shelma
Basic Properties
MD5 09e116f0a1ac0a159c01f43ed6bd184c
SHA-1 a5b27ebb50da026dd270247b618e1c7932c2ff80
SHA-256 fe79063e212e26c7d262a00923c2e7440e24f575519f0f122779725e4f982db7
Vhash 077066656d15155567zd004dmz18fz
Authentihash a2da0b2dd9fae46976b3f14248110627845ca2059cfe9a5be7d14085761f51e5
Imphash 1f61de89f20bdb68b3a74d97c24509aa
SSDEEP 1572864:FehMRuLF/wO5XK3p5jLLHIBHDykjaVAOlTyCFlSVgEKgIu8ELcc16GQr+k8cEnKU:aF/wO5XEjLzIxaVAOlurVgEKgIuoc16y
File type Win32 EXE
Magic PE32 executable for MS Windows (GUI) Intel 80386 32-bit
File size 72.96 MB (76500024 bytes)
F-PROT packer embedded, appended, Unicode, ZIP
History
Creation Time 2020-05-11 20:43:39
Signature Date 2020-05-19 18:04:00
First Submission 2020-06-10 17:55:03
Last Submission 2020-06-10 17:55:03
Last Analysis 2020-06-11 00:29:07
Spyware
Found a string that may be used as part of an injection method
Persistence
Writes data to a remote process
Fingerprint
Queries kernel debugger information
Reads the active computer name
Reads the cryptographic machine GUID
Evasive
Marks file for deletion
Possibly tries to implement anti-virtualization techniques
Spreading
Opens the MountPointManager (often used to detect additional infection locations)
Malicious 2
LockDownBrowser.dll
Size 72KiB (73728 bytes)
Type pedll executable
Description PE32 executable (DLL) (console) Intel 80386, for MS Windows
AV Scan Result Labeled as "Malware.Generic" (1/71)
Runtime Process Setup.exe (PID: 2188)
MD5 006ca23771361cbc560cfb3434c9e2fc
SHA1 f369bda126b4ebc97876e703e90dc9f82b5fdfb5
SHA256 8f724ad443b1eeeb9ba2804855f31cc297ee2c75c4c09107bb4837ed1f8b0d9b
LockDownBrowser.dll
Filename
LockDownBrowser.dll
Size
72KiB (73728 bytes)
Type
pedll executable
Description
PE32 executable (DLL) (console) Intel 80386, for MS Windows
Architecture
32 Bit
MD5
006ca23771361cbc560cfb3434c9e2fc Copy MD5 to clipboard
SHA1
f369bda126b4ebc97876e703e90dc9f82b5fdfb5 Copy SHA1 to clipboard
SHA256
8f724ad443b1eeeb9ba2804855f31cc297ee2c75c4c09107bb4837ed1f8b0d9b Copy SHA256 to clipboard
SHA512
b5476e4198630cebbfd29f246ce405d7638fc5a108fbb9929acd7a42e15e25a93418326d806eba2acb63fd4c77267417851e281b2c3fb4274c1883c8000b4c7e Copy SHA512 to clipboard
ssdeep
1536:gMJdcGTDI1Sx5j1q5JuJJnsWsUcdq5V2UdPA:g4dcGTDHxuYGVq5V2UdI
imphash
ab940816ca76beca65cfa9235e0f5485
authentihash
1998eeafcd3035b4ed73f49265750ee4e7c7ee28b8427ce735a830c7fe4175bf
Compiler/Packer
Borland Delphi 3.0 (???)
File Sections
Name Entropy Virtual Address Virtual Size Raw Size MD5
.text 6.58599845539 0x1000 0xa637 0xa800 4614b2bff124dd777c2c0f38ccbb2f30
.rdata 4.88373307589 0xc000 0x599c 0x5a00 b4239b42a2c0de3a72a203a8e37565fc
.data 2.03561095123 0x12000 0x1174 0x800 94ae50da525d8aba995849a1e0b32d2e
.cldb 0.0518759625885 0x14000 0xc 0x200 59ea0c2cf193600c3f855c2beb08781e
.reloc 6.19246495135 0x15000 0xe30 0x1000 841f08ad26023c627793e96f9a53a514
File Imports
KERNEL32.dll
USER32.dll
CloseHandle
CreateFileW
DecodePointer
DeleteCriticalSection
EnterCriticalSection
ExitProcess
FindClose
FindFirstFileExA
FindNextFileA
FlushFileBuffers
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCommandLineA
GetCommandLineW
GetConsoleCP
GetConsoleMode
GetCPInfo
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentStringsW
GetFileType
GetLastError
GetModuleFileNameA
GetModuleHandleExW
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSectionAndSpinCount
InitializeSListHead
InterlockedFlushSList
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
LCMapStringW
LeaveCriticalSection
LoadLibraryExW
MultiByteToWideChar
QueryPerformanceCounter
RaiseException
RtlUnwind
SetFilePointerEx
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
WideCharToMultiByte
WriteConsoleW
WriteFile
File Exports
Name Ordinal Address
?CLDBDoSomeOtherStuff@@YAHPAH@Z #1 0x10001000
?CLDBDoSomeOtherStuffs@@YAHPAH@Z #2 0x10001070
?CLDBDoSomeStuff@@YAHPAH@Z #3 0x100010a0
?CLDBDoYetMoreStuff@@YAHPAH@Z #4 0x100011b0
libcef.dll
Size 5MiB (5210112 bytes)
Type pedll executable
Description PE32 executable (DLL) (console) Intel 80386, for MS Windows
AV Scan Result Labeled as "Heur.Corrupt" (1/70)
Runtime Process Setup.exe (PID: 2188)
MD5 3d74d5d1ee3f52c025493dd615c21d99
SHA1 eeb2e9f2319f6f57871282da1005c117a4297cfe
SHA256 6944c878e13e097612241582a192752df5a0d3bb76d5d28e2449642c64ff4f39
File Sections
Name Entropy Virtual Address Virtual Size Raw Size MD5
.text 6.80168727834 0x1000 0x4f4e382 0x4f4e400 23822a11b83bca4fd71023a7d15b7346
.rdata 0 0x4f50000 0xcbb81c 0xcbba00 d41d8cd98f00b204e9800998ecf8427e
.data 0 0x5c0c000 0x206900 0x42600 d41d8cd98f00b204e9800998ecf8427e
.00cfg 0 0x5e13000 0x4 0x200 d41d8cd98f00b204e9800998ecf8427e
.rodata 0 0x5e14000 0x1df0 0x1e00 d41d8cd98f00b204e9800998ecf8427e
.tls 0 0x5e16000 0xc9 0x200 d41d8cd98f00b204e9800998ecf8427e
.voltbl 0 0x5e17000 0x183 0x200 d41d8cd98f00b204e9800998ecf8427e
CPADinfo 0 0x5e18000 0x28 0x200 d41d8cd98f00b204e9800998ecf8427e
prot 0 0x5e19000 0xcd 0x200 d41d8cd98f00b204e9800998ecf8427e
.rsrc 0 0x5e1a000 0x20e58 0x21000 d41d8cd98f00b204e9800998ecf8427e
.reloc 0 0x5e3b000 0x2f3c04 0x2f3e00 d41d8cd98f00b204e9800998ecf8427e
/4 0 0x612f000 0x2a3a 0x2c00 d41d8cd98f00b204e9800998ecf8427e
MITRE ATT&CK(TM) Technique - T1035 - Service Execution
ATT&CK ID: T1035
Tactics: Execution
Permissions Required: Administrator, SYSTEM
Description: Adversaries may execute a binary, command, or script via a method that interacts with Windows services, such as the Service Control Manager(...)
Source: https://attack.mitre.org/techniques/T1035
Suspicious Indicators: 1 confidential indicators
MITRE ATT&CK(TM) Technique - T1179 - Hooking
ATT&CK ID: T1179
Tactics: Persistence, Privilege Escalation, Credential Access
Permissions Required: Administrator, SYSTEM
Description: Windows processes often leverage application programming interface (API) functions to perform tasks that require reusable system resources(...)
Source: https://attack.mitre.org/techniques/T1179
Suspicious Indicators: Installs hooks/patches the running process
Informative Indicators: Loads rich edit control libraries
MITRE ATT&CK(TM) Technique - T1215 - Kernel Modules and Extensions
ATT&CK ID: T1215
Tactics: Persistence
Permissions Required: root
Description: Loadable Kernel Modules (or LKMs) are pieces of code that can be loaded and unloaded into the kernel upon demand(...)
Source: https://attack.mitre.org/techniques/T1215
Informative Indicators: Opens the Kernel Security Device Driver (KsecDD) of Windows
MITRE ATT&CK(TM) Technique - T1179 - Hooking
ATT&CK ID: T1179
Tactics: Persistence, Privilege Escalation, Credential Access
Permissions Required Administrator, SYSTEM
Description: Windows processes often leverage application programming interface (API) functions to perform tasks that require reusable system resources(...)
Source: https://attack.mitre.org/techniques/T1179
Suspicious Indicators: Installs hooks/patches the running process
Informative Indicators: Loads rich edit control libraries
MITRE ATT&CK(TM) Technique - T1055 - Process Injection
ATT&CK ID: T1055
Tactics: Defense Evasion, Privilege Escalation
Permissions Required: User, Administrator, SYSTEM, root
Description: Process injection is a method of executing arbitrary code in the address space of a separate live process(...)
Source: https://attack.mitre.org/techniques/T1055
Malicious Indicators
*Allocates virtual memory in a remote process
*Writes data to a remote process
Suspicious Indicators: 3 confidential indicators
MITRE ATT&CK(TM) Technique - T1107 - File Deletion
ATT&CK ID: T1107
Tactics: Defense Evasion
Permissions Required: User
Description: Malware, tools, or other non-native files dropped or created on a system by an adversary may leave traces behind as to what was done within a network and how(...)
Source: https://attack.mitre.org/techniques/T1107
Suspicious Indicators: Marks file for deletion
MITRE ATT&CK(TM) Technique - T1112 - Modify Registry
ATT&CK ID: T1112
Tactics: Defense Evasion
Permissions Required: User, Administrator, SYSTEM
Description: Adversaries may interact with the Windows Registry to hide configuration information within Registry keys, remove information as part of cleaning up, or as part of other techniques to aid in Persistence and Execution(...)
Source https://attack.mitre.org/techniques/T1112
Suspicious Indicators: 1 confidential indicators
Informative Indicators: Creates or modifies windows services
MITRE ATT&CK(TM) Technique - T1055 - Process Injection
ATT&CK ID: T1055
Tactics: Defense Evasion, Privilege Escalation
Permissions Required: User, Administrator, SYSTEM, root
Description: Process injection is a method of executing arbitrary code in the address space of a separate live process(...)
Source: https://attack.mitre.org/techniques/T1055
Malicious Indicators
*Allocates virtual memory in a remote process
*Writes data to a remote process
Suspicious Indicators: 3 confidential indicators
MITRE ATT&CK(TM) Technique - T1045 - Software Packing
ATT&CK ID: T1045
Tactics: Defense Evasion
Description: Software packing is a method of compressing or encrypting an executable(...)
Source: https://attack.mitre.org/techniques/T1045
Informative Indicators :
*Matched Compiler/Packer signature
MITRE ATT&CK(TM) Technique - T1497 - Virtualization/Sandbox Evasion
ATT&CK ID: T1497
Tactics: Defense Evasion, Discovery
Description: Adversaries may check for the presence of a virtual machine environment (VME) or sandbox to avoid potential detection of tools and activities(...)
Source: https://attack.mitre.org/techniques/T1497
Suspicious Indicators:
*Possibly tries to implement anti-virtualization techniques
MITRE ATT&CK(TM) Technique - T1179 - Hooking
ATT&CK ID: T1179
Tactics: Persistence, Privilege Escalation, Credential Access
Permissions Required: Administrator, SYSTEM
Description: Windows processes often leverage application programming interface (API) functions to perform tasks that require reusable system resources(...)
Source: https://attack.mitre.org/techniques/T1179
Suspicious Indicators:
*Installs hooks/patches the running process
Informative Indicators:
*Loads rich edit control libraries
MITRE ATT&CK(TM) Technique - T1010 - Application Window Discovery
ATT&CK ID: T1010
Tactics: Discovery
Permissions Required: User
Description: Adversaries may attempt to get a listing of open application windows(...)
Source: https://attack.mitre.org/techniques/T1010
Informative Indicators
*Scanning for window names
MITRE ATT&CK(TM) Technique - T1046 - Network Service Scanning
ATT&CK ID: T1046
Tactics: Discovery
Permissions Required: Administrator, SYSTEM, User
Description: Adversaries may attempt to get a listing of services running on remote hosts, including those that may be vulnerable to remote software exploitation(...)
Source: https://attack.mitre.org/techniques/T1046
Suspicious Indicators:
*Detected increased number of ARP broadcast requests (network device lookup)
MITRE ATT&CK(TM) Technique - T1120 - Peripheral Device Discovery
ATT&CK ID: T1120
Tactics: Discovery
Permissions Required: User, Administrator, SYSTEM
Description: Adversaries may attempt to gather information about attached peripheral devices and components connected to a computer system(...)
Source: https://attack.mitre.org/techniques/T1120
Informative Indicators
*Queries volume information
*Queries volume information of an entire harddrive
MITRE ATT&CK(TM) Technique - T1012 - Query Registry
ATT&CK ID: T1012
Tactics: Discovery
Permissions Required: User, Administrator, SYSTEM
Description: Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software(...)
Source: https://attack.mitre.org/techniques/T1012
Suspicious Indicators:
*Reads information about supported languages
*Reads the cryptographic machine GUID
*2 confidential indicators
Informative Indicators:
*Reads the registry for installed applications
MITRE ATT&CK(TM) Technique - T1497 - Virtualization/Sandbox Evasion
ATT&CK ID: T1497
Tactics: Defense Evasion, Discovery
Description: Adversaries may check for the presence of a virtual machine environment (VME) or sandbox to avoid potential detection of tools and activities(...)
Source: https://attack.mitre.org/techniques/T1497
Suspicious Indicators:
*Possibly tries to implement anti-virtualization techniques
MITRE ATT&CK(TM) Technique - T1114 - Email Collection
ATT&CK ID: T1114
Tactics: Collection
Description: Adversaries may target user email to collect sensitive information from a target(...)
Source https://attack.mitre.org/techniques/T1114
Suspicious Indicators: 1 confidential indicators
Malicious Indicators 4
General
The analysis extracted a file that was identified as malicious
details
1/70 Antivirus vendors marked dropped file "libcef.dll" as malicious (classified as "Heur.Corrupt" with 1% detection rate)
1/71 Antivirus vendors marked dropped file "LockDownBrowser.dll" as malicious (classified as "Malware.Generic" with 1% detection rate)
source
Extracted File
relevance
10/10
Installation/Persistance
Allocates virtual memory in a remote process
details
"LockDownBrowser-2-0-6-06.exe" allocated memory in "%TEMP%ldzAAE8v8_context_snapshot.bin"
"setup.exe" allocated memory in "%TEMP%{72FABB89-BE3D-4678-B3F9-B67C1E7548DD}Setup.exe"
source
API Call
relevance
7/10
ATT&CK ID
T1055 (Show technique in the MITRE ATT&CK(TM) matrix)
Writes data to a remote process
details
"LockDownBrowser-2-0-6-06.exe" wrote 1500 bytes to a remote process "%TEMP%ldzAAE8setup.exe" (Handle: 176)
"LockDownBrowser-2-0-6-06.exe" wrote 4 bytes to a remote process "C:Users%USERNAME%AppDataLocalTempldzAAE8setup.exe" (Handle: 176)
"LockDownBrowser-2-0-6-06.exe" wrote 32 bytes to a remote process "C:Users%USERNAME%AppDataLocalTempldzAAE8setup.exe" (Handle: 176)
"LockDownBrowser-2-0-6-06.exe" wrote 52 bytes to a remote process "C:Users%USERNAME%AppDataLocalTempldzAAE8setup.exe" (Handle: 176)
"setup.exe" wrote 1500 bytes to a remote process "C:Users%USERNAME%AppDataLocalTemp{72FABB89-BE3D-4678-B3F9-B67C1E7548DD}Setup.exe" (Handle: 392)
"setup.exe" wrote 4 bytes to a remote process "C:Users%USERNAME%AppDataLocalTemp{72FABB89-BE3D-4678-B3F9-B67C1E7548DD}Setup.exe" (Handle: 392)
"setup.exe" wrote 32 bytes to a remote process "C:Users%USERNAME%AppDataLocalTemp{72FABB89-BE3D-4678-B3F9-B67C1E7548DD}Setup.exe" (Handle: 392)
"setup.exe" wrote 52 bytes to a remote process "C:Users%USERNAME%AppDataLocalTemp{72FABB89-BE3D-4678-B3F9-B67C1E7548DD}Setup.exe" (Handle: 392)
source
API Call
relevance
6/10
ATT&CK ID
T1055 (Show technique in the MITRE ATT&CK(TM) matrix)
Unusual Characteristics
Checks for a resource fork (ADS) file
details
"Setup.exe" checked file "C:"
source
API Call
relevance
5/10
Suspicious Indicators 28
Anti-Detection/Stealthyness
Queries kernel debugger information
details
"Setup.exe" at 562535353-00002188-00000105-56331400129
source
API Call
relevance
6/10
Anti-Reverse Engineering
PE file has unusual entropy sections
details
.text with unusual entropies 7.86483547015
source
Static Parser
relevance
10/10
Environment Awareness
Possibly tries to implement anti-virtualization techniques
details
"RFqEMUdUD" (Indicator: "qemu")
source
String
relevance
4/10
ATT&CK ID
T1497 (Show technique in the MITRE ATT&CK(TM) matrix)
Reads the cryptographic machine GUID
details
"Setup.exe" (Path: "HKLMSOFTWAREMICROSOFTCRYPTOGRAPHY"; Key: "MACHINEGUID")
source
Registry Access
relevance
10/10
ATT&CK ID
T1012 (Show technique in the MITRE ATT&CK(TM) matrix)
External Systems
Found an IP/URL artifact that was identified as malicious by at least one reputation engine
details
1/72 reputation engines marked "http://i.pe" as malicious (1% detection rate)
source
External System
relevance
10/10
General
Reads configuration files
details
"setup.exe" read file "%TEMP%ldzAAE8setup.ini"
"setup.exe" read file "%TEMP%{72FABB89-BE3D-4678-B3F9-B67C1E7548DD}setup.ini"
"Setup.exe" read file "%TEMP%{72FABB89-BE3D-4678-B3F9-B67C1E7548DD}setup.ini"
"Setup.exe" read file "%TEMP%ldzAAE8 x0407.ini"
"Setup.exe" read file "%TEMP%ldzAAE8 x0409.ini"
"Setup.exe" read file "%TEMP%ldzAAE8 x040a.ini"
"Setup.exe" read file "%TEMP%ldzAAE8 x0410.ini"
"Setup.exe" read file "%TEMP%ldzAAE8 x0416.ini"
source
API Call
relevance
4/10
Installation/Persistance
Drops executable files
details
"ISSetup.dll" has type "PE32 executable (DLL) (GUI) Intel 80386 for MS Windows"
"chrome_elf.dll" has type "PE32 executable (DLL) (GUI) Intel 80386 for MS Windows"
"Setup.exe" has type "PE32 executable (GUI) Intel 80386 for MS Windows"
"libEGL.dll" has type "PE32 executable (DLL) (console) Intel 80386 for MS Windows"
"LockDownBrowser.exe" has type "PE32 executable (GUI) Intel 80386 for MS Windows"
"d3dcompiler_47.dll" has type "PE32 executable (DLL) (console) Intel 80386 for MS Windows"
"libGLESv2.dll" has type "PE32 executable (DLL) (console) Intel 80386 for MS Windows"
"libcef.dll" has type "PE32 executable (DLL) (console) Intel 80386 for MS Windows"
"LockDownBrowser.dll" has type "PE32 executable (DLL) (console) Intel 80386 for MS Windows"
"LdbRst10.exe" has type "PE32 executable (GUI) Intel 80386 for MS Windows"
"setup.exe" has type "PE32 executable (GUI) Intel 80386 for MS Windows"
"ISS9F8A.tmp" has type "PE32 executable (DLL) (GUI) Intel 80386 for MS Windows"
source
Extracted File
relevance
10/10
Network Related
Detected increased number of ARP broadcast requests (network device lookup)
details
Attempt to find devices in networks: "192.168.240.115/32, 192.168.241.30/32, 192.168.241.75/32, 192.168.241.126/32, 192.168.241.133/32, 192.168.241.142/32, 192.168.241.145/32, 192.168.241.148/32, 192.168.241.192/31, 192.168.241.195/32, ..."
source
Network Traffic
relevance
10/10
ATT&CK ID
T1046 (Show technique in the MITRE ATT&CK(TM) matrix)
Found potential IP address in binary/memory
details
"2.0.6.06"
source
String
relevance
3/10
System Destruction
Marks file for deletion
details
"%TEMP%{72FABB89-BE3D-4678-B3F9-B67C1E7548DD}Setup.exe" marked "%TEMP%{77C18B70-EFA0-4B6F-AD72-42EB04A1D5E8}" for deletion
"%TEMP%{72FABB89-BE3D-4678-B3F9-B67C1E7548DD}Setup.exe" marked "C:Users%USERNAME%AppDataLocalTemp{77FA3262-348C-4195-A883-BDDD43217032}" for deletion
"%TEMP%{72FABB89-BE3D-4678-B3F9-B67C1E7548DD}Setup.exe" marked "C:Users%USERNAME%AppDataLocalTemp{AA6E03D4-5241-4B2B-B919-F95E997AEAEA}{BBC7F69B-7A94-41E9-8A4B-B55A8D06431F}set1E44.tmp" for deletion
"%TEMP%{72FABB89-BE3D-4678-B3F9-B67C1E7548DD}Setup.exe" marked "C:Users%USERNAME%AppDataLocalTemp{AA6E03D4-5241-4B2B-B919-F95E997AEAEA}{BBC7F69B-7A94-41E9-8A4B-B55A8D06431F}lic1E64.tmp" for deletion
"%TEMP%{72FABB89-BE3D-4678-B3F9-B67C1E7548DD}Setup.exe" marked "C:Users%USERNAME%AppDataLocalTemp{AA6E03D4-5241-4B2B-B919-F95E997AEAEA}{BBC7F69B-7A94-41E9-8A4B-B55A8D06431F}Fon1E75.tmp" for deletion
"%TEMP%{72FABB89-BE3D-4678-B3F9-B67C1E7548DD}Setup.exe" marked "C:Users%USERNAME%AppDataLocalTemp{AA6E03D4-5241-4B2B-B919-F95E997AEAEA}cor1EA6.tmp" for deletion
"%TEMP%{72FABB89-BE3D-4678-B3F9-B67C1E7548DD}Setup.exe" marked "C:Users%USERNAME%AppDataLocalTemp{AA6E03D4-5241-4B2B-B919-F95E997AEAEA}dot1EB6.tmp" for deletion
"%TEMP%{72FABB89-BE3D-4678-B3F9-B67C1E7548DD}Setup.exe" marked "C:Users%USERNAME%AppDataLocalTemp{AA6E03D4-5241-4B2B-B919-F95E997AEAEA}dot1EC7.tmp" for deletion
"%TEMP%{72FABB89-BE3D-4678-B3F9-B67C1E7548DD}Setup.exe" marked "C:Users%USERNAME%AppDataLocalTemp{AA6E03D4-5241-4B2B-B919-F95E997AEAEA}{BBC7F69B-7A94-41E9-8A4B-B55A8D06431F}Str1ED7.tmp" for deletion
"%TEMP%{72FABB89-BE3D-4678-B3F9-B67C1E7548DD}Setup.exe" marked "C:Users%USERNAME%AppDataLocalTemp{AA6E03D4-5241-4B2B-B919-F95E997AEAEA}{BBC7F69B-7A94-41E9-8A4B-B55A8D06431F}isr1EE8.tmp" for deletion
"%TEMP%{72FABB89-BE3D-4678-B3F9-B67C1E7548DD}Setup.exe" marked "C:Users%USERNAME%AppDataLocalTemp{AA6E03D4-5241-4B2B-B919-F95E997AEAEA}{BBC7F69B-7A94-41E9-8A4B-B55A8D06431F}def1F18.tmp" for deletion
"%TEMP%{72FABB89-BE3D-4678-B3F9-B67C1E7548DD}Setup.exe" marked "C:Users%USERNAME%AppDataLocalTemp{AA6E03D4-5241-4B2B-B919-F95E997AEAEA}{BBC7F69B-7A94-41E9-8A4B-B55A8D06431F}_is1F29.tmp" for deletion
"%TEMP%{72FABB89-BE3D-4678-B3F9-B67C1E7548DD}Setup.exe" marked "C:Users%USERNAME%AppDataLocalTemp1D68.tmp" for deletion
"%TEMP%{72FABB89-BE3D-4678-B3F9-B67C1E7548DD}Setup.exe" marked "C:Users%USERNAME%AppDataLocalTemp{AA6E03D4-5241-4B2B-B919-F95E997AEAEA}{BBC7F69B-7A94-41E9-8A4B-B55A8D06431F}DIF1E95.tmp" for deletion
"%TEMP%{72FABB89-BE3D-4678-B3F9-B67C1E7548DD}Setup.exe" marked "C:Users%USERNAME%AppDataLocalTemp{AA6E03D4-5241-4B2B-B919-F95E997AEAEA}{BBC7F69B-7A94-41E9-8A4B-B55A8D06431F}_is1FC6.tmp" for deletion
"%TEMP%{72FABB89-BE3D-4678-B3F9-B67C1E7548DD}Setup.exe" marked "C:Program FilesInstallShield Installation Information{BBC7F69B-7A94-41E9-8A4B-B55A8D06431F}lay9E6D.tmp" for deletion
"%TEMP%{72FABB89-BE3D-4678-B3F9-B67C1E7548DD}Setup.exe" marked "C:Program FilesInstallShield Installation Information{BBC7F69B-7A94-41E9-8A4B-B55A8D06431F}dat9E7D.tmp" for deletion
"%TEMP%{72FABB89-BE3D-4678-B3F9-B67C1E7548DD}Setup.exe" marked "C:Program FilesInstallShield Installation Information{BBC7F69B-7A94-41E9-8A4B-B55A8D06431F}dat9E9E.tmp" for deletion
"%TEMP%{72FABB89-BE3D-4678-B3F9-B67C1E7548DD}Setup.exe" marked "C:Program FilesInstallShield Installation Information{BBC7F69B-7A94-41E9-8A4B-B55A8D06431F}set9F2B.tmp" for deletion
"%TEMP%{72FABB89-BE3D-4678-B3F9-B67C1E7548DD}Setup.exe" marked "C:Program FilesInstallShield Installation Information{BBC7F69B-7A94-41E9-8A4B-B55A8D06431F} x0A008.tmp" for deletion
source
API Call
relevance
10/10
ATT&CK ID
T1107 (Show technique in the MITRE ATT&CK(TM) matrix)
Opens file with deletion access rights
details
"LockDownBrowser-2-0-6-06.exe" opened "%TEMP%ldzAAE8.tmp" with delete access
"Setup.exe" opened "C:Users%USERNAME%AppDataLocalTemp{77C18B70-EFA0-4B6F-AD72-42EB04A1D5E8}" with delete access
"Setup.exe" opened "C:Users%USERNAME%AppDataLocalTemp{77FA3262-348C-4195-A883-BDDD43217032}" with delete access
"Setup.exe" opened "C:Users%USERNAME%AppDataLocalTemp{AA6E03D4-5241-4B2B-B919-F95E997AEAEA}{BBC7F69B-7A94-41E9-8A4B-B55A8D06431F}set1E44.tmp" with delete access
"Setup.exe" opened "C:Users%USERNAME%AppDataLocalTemp{AA6E03D4-5241-4B2B-B919-F95E997AEAEA}{BBC7F69B-7A94-41E9-8A4B-B55A8D06431F}setup.inx" with delete access
"Setup.exe" opened "C:Users%USERNAME%AppDataLocalTemp{AA6E03D4-5241-4B2B-B919-F95E997AEAEA}{BBC7F69B-7A94-41E9-8A4B-B55A8D06431F}lic1E64.tmp" with delete access
"Setup.exe" opened "C:Users%USERNAME%AppDataLocalTemp{AA6E03D4-5241-4B2B-B919-F95E997AEAEA}{BBC7F69B-7A94-41E9-8A4B-B55A8D06431F}license.txt" with delete access
"Setup.exe" opened "C:Users%USERNAME%AppDataLocalTemp{AA6E03D4-5241-4B2B-B919-F95E997AEAEA}{BBC7F69B-7A94-41E9-8A4B-B55A8D06431F}Fon1E75.tmp" with delete access
"Setup.exe" opened "C:Users%USERNAME%AppDataLocalTemp{AA6E03D4-5241-4B2B-B919-F95E997AEAEA}cor1EA6.tmp" with delete access
"Setup.exe" opened "C:Users%USERNAME%AppDataLocalTemp{AA6E03D4-5241-4B2B-B919-F95E997AEAEA}corecomp.ini" with delete access
"Setup.exe" opened "C:Users%USERNAME%AppDataLocalTemp{AA6E03D4-5241-4B2B-B919-F95E997AEAEA}dot1EB6.tmp" with delete access
"Setup.exe" opened "C:Users%USERNAME%AppDataLocalTemp{AA6E03D4-5241-4B2B-B919-F95E997AEAEA}dotnetinstaller.exe" with delete access
"Setup.exe" opened "C:Users%USERNAME%AppDataLocalTemp{AA6E03D4-5241-4B2B-B919-F95E997AEAEA}dot1EC7.tmp" with delete access
"Setup.exe" opened "C:Users%USERNAME%AppDataLocalTemp{AA6E03D4-5241-4B2B-B919-F95E997AEAEA}dotnetinstaller.exe.config" with delete access
"Setup.exe" opened "C:Users%USERNAME%AppDataLocalTemp{AA6E03D4-5241-4B2B-B919-F95E997AEAEA}{BBC7F69B-7A94-41E9-8A4B-B55A8D06431F}Str1ED7.tmp" with delete access
source
API Call
relevance
7/10
Unusual Characteristics
CRC value set in PE header does not match actual value
details
"chrome_elf.dll" claimed CRC 0 while the actual is CRC 1667821
"Setup.exe" claimed CRC 985383 while the actual is CRC 882203
"LockDownBrowser.exe" claimed CRC 6402082 while the actual is CRC 362020
"d3dcompiler_47.dll" claimed CRC 3662075 while the actual is CRC 5239816
"LdbRst10.exe" claimed CRC 230158 while the actual is CRC 129613
source
Static Parser
relevance
10/10
Imports suspicious APIs
details
RegCreateKeyExW
RegCloseKey
RegOpenKeyExW
RegDeleteKeyW
OpenProcessToken
RegEnumKeyW
RegOpenKeyW
RegEnumKeyExW
RegDeleteValueW
GetFileAttributesW
GetTempPathW
CopyFileW
OutputDebugStringW
GetModuleFileNameW
IsDebuggerPresent
GetModuleFileNameA
LoadLibraryExA
UnhandledExceptionFilter
LoadLibraryExW
CreateThread
TerminateProcess
GetModuleHandleExW
LoadLibraryW
GetVersionExW
GetTickCount
LoadLibraryA
ExitThread
GetFileSize
GetStartupInfoW
CreateDirectoryW
DeleteFileW
GetTempFileNameW
CreateFileMappingW
WriteFile
FindNextFileW
FindFirstFileW
GetProcAddress
CreateFileW
CreateFileA
WinExec
LockResource
GetCommandLineA
MapViewOfFile
GetModuleHandleW
FindResourceW
CreateProcessW
Sleep
VirtualAlloc
GetDriveTypeW
OutputDebugStringA
WriteProcessMemory
SleepEx
VirtualProtect
CreateRemoteThread
OpenProcess
ReadProcessMemory
GetFileSizeEx
GetComputerNameExW
FindFirstFileExW
VirtualProtectEx
GetCommandLineW
SleepConditionVariableSRW
SetSecurityDescriptorDacl
GetThreadContext
FindResourceExW
ShellExecuteExW
FindWindowExW
RegCreateKeyExA
RegCreateKeyA
RegOpenKeyA
RegDeleteValueA
RegOpenKeyExA
StartServiceW
RegDeleteKeyExA
GetFileAttributesA
OpenFileMappingW
GetTempPathA
CreateDirectoryA
DeleteFileA
FindNextFileA
GetModuleHandleA
FindFirstFileA
CreateProcessA
ShellExecuteW
ShellExecuteA
FindWindowW
GetWindowThreadProcessId
HttpSendRequestA
InternetReadFile
InternetCloseHandle
InternetConnectA
InternetQueryOptionA
HttpQueryInfoA
InternetOpenW
RegEnumKeyExA
DeviceIoControl
MapViewOfFileEx
GetModuleHandleExA
FindFirstFileExA
SetWindowsHookExA
CopyFileA
GetTempFileNameA
InternetConnectW
HttpSendRequestW
recv
socket
bind
accept
WSAStartup
send
closesocket
listen
source
Static Parser
relevance
1/10
Installs hooks/patches the running process
details
"setup.exe" wrote bytes "f8115175" to virtual address "0x7552834C" (part of module "SSPICLI.DLL")
"setup.exe" wrote bytes "b810152771ffe0" to virtual address "0x755111F8" (part of module "SSPICLI.DLL")
"setup.exe" wrote bytes "f8110000" to virtual address "0x755112CC" (part of module "SSPICLI.DLL")
"setup.exe" wrote bytes "f8115175" to virtual address "0x755283C4" (part of module "SSPICLI.DLL")
"setup.exe" wrote bytes "a0112771" to virtual address "0x75C2E324" (part of module "WININET.DLL")
"setup.exe" wrote bytes "f8110000" to virtual address "0x75511408" (part of module "SSPICLI.DLL")
"setup.exe" wrote bytes "48125175" to virtual address "0x75528348" (part of module "SSPICLI.DLL")
"setup.exe" wrote bytes "48125175" to virtual address "0x755283C0" (part of module "SSPICLI.DLL")
"setup.exe" wrote bytes "68130000" to virtual address "0x77901680" (part of module "WS2_32.DLL")
"setup.exe" wrote bytes "f8115175" to virtual address "0x75528368" (part of module "SSPICLI.DLL")
"setup.exe" wrote bytes "48120000" to virtual address "0x7551139C" (part of module "SSPICLI.DLL")
"setup.exe" wrote bytes "f8115175" to virtual address "0x755283E0" (part of module "SSPICLI.DLL")
"setup.exe" wrote bytes "48125175" to virtual address "0x75528364" (part of module "SSPICLI.DLL")
"setup.exe" wrote bytes "c04e7b7720547c77e0657c77b5387d770000000000d0f67600000000c5eaf6760000000088eaf67600000000e9688c7582287d77ee297d7700000000d2698c75000000007dbbf6760000000009be8c7500000000ba18f67600000000" to virtual address "0x778D1000" (part of module "NSI.DLL")
"setup.exe" wrote bytes "b890122771ffe0" to virtual address "0x75511248" (part of module "SSPICLI.DLL")
"setup.exe" wrote bytes "48120000" to virtual address "0x755112DC" (part of module "SSPICLI.DLL")
"setup.exe" wrote bytes "48125175" to virtual address "0x755283DC" (part of module "SSPICLI.DLL")
"setup.exe" wrote bytes "b880112771ffe0" to virtual address "0x77901368" (part of module "WS2_32.DLL")
"Setup.exe" wrote bytes "f8115175" to virtual address "0x7552834C" (part of module "SSPICLI.DLL")
"Setup.exe" wrote bytes "b810152771ffe0" to virtual address "0x755111F8" (part of module "SSPICLI.DLL")
source
Hook Detection
relevance
10/10
ATT&CK ID
T1179 (Show technique in the MITRE ATT&CK(TM) matrix)
Reads information about supported languages
details
"LockDownBrowser-2-0-6-06.exe" (Path: "HKLMSYSTEMCONTROLSET001CONTROLNLSLOCALE"; Key: "00000409")
"Setup.exe" (Path: "HKLMSYSTEMCONTROLSET001CONTROLNLSLOCALE"; Key: "00000409")
source
Registry Access
relevance
3/10
ATT&CK ID
T1012 (Show technique in the MITRE ATT&CK(TM) matrix)
Timestamp in PE header is very old or in the future
details
"d3dcompiler_47.dll" claims program is from Wed Aug 22 06:16:26 2085
source
Static Parser
relevance
10/10
Bkav,clean,10.06.2020,0
MicroWorld-eScan,clean,10.06.2020,0
CAT-QuickHeal,clean,10.06.2020,0
ALYac,clean,10.06.2020,0
Malwarebytes,clean,10.06.2020,0
Zillya,clean,10.06.2020,0
SUPERAntiSpyware,clean,05.06.2020,5
Sangfor,clean,23.04.2020,48
K7AntiVirus,clean,10.06.2020,0
Alibaba,clean,27.05.2019,380
K7GW,clean,09.06.2020,1
Cybereason,clean,16.06.2019,360
Arcabit,clean,10.06.2020,0
Invincea,clean,02.05.2020,39
Baidu,clean,18.03.2019,450
F-Prot,clean,10.06.2020,0
Symantec,clean,10.06.2020,0
ESET-NOD32,clean,10.06.2020,0
APEX,clean,10.06.2020,0
Avast,clean,10.06.2020,0
ClamAV,clean,10.06.2020,0
Kaspersky,clean,10.06.2020,0
BitDefender,clean,10.06.2020,0
NANO-Antivirus,clean,10.06.2020,0
AegisLab,clean,10.06.2020,0
Rising,clean,10.06.2020,0
Ad-Aware,clean,10.06.2020,0
Sophos,clean,10.06.2020,0
Comodo,clean,10.06.2020,0
F-Secure,clean,10.06.2020,0
DrWeb,clean,10.06.2020,0
VIPRE,clean,10.06.2020,0
TrendMicro,clean,10.06.2020,0
McAfee-GW-Edition,clean,10.06.2020,0
Trapmine,clean,05.05.2020,36
Emsisoft,clean,10.06.2020,0
SentinelOne,clean,01.06.2020,9
Cyren,clean,10.06.2020,0
Jiangmin,clean,10.06.2020,0
Avira,clean,10.06.2020,0
Fortinet,clean,10.06.2020,0
Antiy-AVL,clean,10.06.2020,0
Kingsoft,clean,10.06.2020,0
Endgame,clean,08.06.2020,2
ViRobot,clean,10.06.2020,0
ZoneAlarm,clean,10.06.2020,0
Avast-Mobile,clean,10.06.2020,0
AhnLab-V3,clean,10.06.2020,0
Acronis,clean,03.06.2020,7
BitDefenderTheta,clean,09.06.2020,1
MAX,clean,10.06.2020,0
Panda,clean,10.06.2020,0
Zoner,clean,10.06.2020,0
TrendMicro-HouseCall,clean,10.06.2020,0
Tencent,clean,10.06.2020,0
Yandex,clean,09.06.2020,1
TACHYON,clean,10.06.2020,0
eGambit,clean,10.06.2020,0
AVG,clean,10.06.2020,0
Paloalto,clean,10.06.2020,0
CrowdStrike,clean,02.07.2019,344
Qihoo-360,clean,10.06.2020,0
md5,FF98074181A6B5F9929824171B8ED1B1
sha1,91E24FF97EC56EB8E38019DF3351EDA71A5FD847
sha256,C028B5494987EF5C31618829772585EED3C322D946DA6207BFD8766B1795FC19
size,0x40 (64 bytes)
entropy,4.619
file-ratio,0.00 %
file-header-offset,0x00000110
signature,0x00004550 (PE00)
machine,Intel
sections,6
compiler-stamp,0x5EB9B8FB (Mon May 11 13:43:39 2020)
pointer-symbol-table,0x00000000
number-of-symbols,0
size-of-optional-header,224 (bytes)
processor-32bit,true
relocation-stripped,false
large-address-aware,false
uniprocessor,false
system-image,false
dynamic-link-library,false
executable,true
debug-stripped,false
media-run-from-swap,false
network-run-from-swap,false
magic,0x010B
entry-point,0x00006F19 (section:.text)
base-of-code,0x00001000 (section:n/a)
base-of-data,0x00019000 (section:.rdata)
image-base,0x00400000
linker-version,14.0
size-of-code,0x00017E00 (97792 bytes)
size-of-initialized-data,132608 (bytes)
size-of-uninitialized-data,0 (bytes)
size-of-image,245760 (bytes)
size-of-headers,1024 (bytes)
size-of-stack-reserve,1048576 (bytes)
size-of-stack-commit,4096 (bytes)
size-of-heap-reserve,1048576 (bytes)
size-of-heap-commit,4096 (bytes)
section-alignment,0x00001000 (4096 bytes)
file-alignment,0x00000200 (512 bytes)
os-version,6.0
image-version,0.0
Win32VersionValue,0x00000000
subsystem,GUI
subsystem-version,6.0
file-checksum,0x00000000
real-checksum,0x049039D3
LoaderFlags,0x00000000
directories-number,16
address-space-layout-randomization (ASLR),true
code-integrity,false
data-execution-prevention (DEP),true
image-isolation,true
structured-exception-handling (SEH),true
image-bound,false
windows-driver-model (WDM),false
terminal-server-aware,true
control-flow-guard (CFG),false
import-name,0x00000050 (80),0x00021EEC,.rdata,empty,-,-,-
resource,0x00006E28 (28200),0x00033000,.rsrc,empty,-,-,-
security,0x00001BD8 (7128),0x048F3060,n/a,empty,-,-,-
relocation,0x0000122C (4652),0x0003A000,.reloc,empty,-,-,-
debug,0x00000070 (112),0x00021650,.rdata,Mon May 11 13:43:39 2020
,-,-,-
load-configuration,0x00000040 (64),0x000216C0,.rdata,empty,-,-,-
import-address,0x000001D4 (468),0x00019000,.rdata,empty,-,-,-
export-table,0x00000000 (0),0x00000000,n/a,n/a,-,-,x
exception,0x00000000 (0),0x00000000,n/a,n/a,-,-,x
architecture,0x00000000 (0),0x00000000,n/a,n/a,-,-,x
global-pointer,0x00000000 (0),0x00000000,n/a,n/a,-,-,x
thread-storage,0x00000000 (0),0x00000000,n/a,n/a,-,-,x
bound-import,0x00000000 (0),0x00000000,n/a,n/a,-,-,x
delay-loaded,0x00000000 (0),0x00000000,n/a,n/a,-,-,x
com-runtime,0x00000000 (0),0x00000000,n/a,n/a,-,-,x
name,.text,.rdata,.data,.gfids,.rsrc,.reloc
md5,0131093060C64930B54873A7FABB09FD,C6F6D4A898C3C36792DE73939291EF34,9423AB81A7FD1724D66CFBAF2694392A,B7F395B3403E445B77A5A7EA47F643D2,77FC23437AF5A3F5AB039F65BCFDB045,F8E8287F3421A14D2102CAD0520ABC42
entropy,6.662,6.116,1.834,1.577,5.783,6.336
file-ratio (0.23%),0.13 %,0.05 %,0.00 %,0.00 %,0.04 %,0.01 %
raw-address,0x00000400,0x00018200,0x00021C00,0x00022600,0x00022800,0x00029800
raw-size (174080 bytes),0x00017E00 (97792 bytes),0x00009A00 (39424 bytes),0x00000A00 (2560 bytes),0x00000200 (512 bytes),0x00007000 (28672 bytes),0x00001400 (5120 bytes)
virtual-address,0x00401000,0x00419000,0x00423000,0x00432000,0x00433000,0x0043A000
virtual-size (228414 bytes),0x00017D74 (97652 bytes),0x000098EA (39146 bytes),0x0000E4E0 (58592 bytes),0x000000AC (172 bytes),0x00006E28 (28200 bytes),0x0000122C (4652 bytes)
entry-point,0x00006F19,-,-,-,-,-
writable,-,-,x,-,-,-
executable,x,-,-,-,-,-
shareable,-,-,-,-,-,-
discardable,-,-,-,-,-,x
initialized-data,-,x,x,x,x,x
uninitialized-data,-,-,-,-,-,-
readable,x,x,x,x,x,x
self-modifying,-,-,-,-,-,-
blacklisted,-,-,-,-,-,-
virtualized,-,-,-,-,-,-
bitmap,129,0x00036CA0,bitmap,-,10840,0.01 %,60ADAC3D2C30CC8B69CFE9EAD978FA8E,5.811,English-United States,28 00 00 00 3C 00 00 00 3C 00 00 00 01 00 18 00 ,( .. .. .. < .. .. .. < .. .. .. .. .. .. ..
icon,1,0x00033370,icon,-,744,0.00 %,3F4F68AC9991C35970D5186E10F7C5E8,4.369,English-United States,28 00 00 00 20 00 00 00 40 00 00 00 01 00 04 00 ,( .. .. .. .. .. .. @ .. .. .. .. .. .. ..
icon,2,0x00033658,icon,-,2216,0.00 %,E913DCA9EC336FF59DE5959640E5CAB7,5.817,English-United States,28 00 00 00 20 00 00 00 40 00 00 00 01 00 08 00 ,( .. .. .. .. .. .. @ .. .. .. .. .. .. ..
icon,3,0x00033F00,icon,-,4264,0.01 %,DD7296C9D5DD4694E0E6F5242E12E5C2,4.667,English-United States,28 00 00 00 20 00 00 00 40 00 00 00 01 00 20 00 ,( .. .. .. .. .. .. @ .. .. .. .. .. ..
icon,4,0x00034FD8,icon,-,744,0.00 %,3F4F68AC9991C35970D5186E10F7C5E8,4.369,English-United States,28 00 00 00 20 00 00 00 40 00 00 00 01 00 04 00 ,( .. .. .. .. .. .. @ .. .. .. .. .. .. ..
icon,5,0x000352C0,icon,-,2216,0.00 %,E913DCA9EC336FF59DE5959640E5CAB7,5.817,English-United States,28 00 00 00 20 00 00 00 40 00 00 00 01 00 08 00 ,( .. .. .. .. .. .. @ .. .. .. .. .. .. ..
icon,6,0x00035B68,icon,-,4264,0.01 %,DD7296C9D5DD4694E0E6F5242E12E5C2,4.667,English-United States,28 00 00 00 20 00 00 00 40 00 00 00 01 00 20 00 ,( .. .. .. .. .. .. @ .. .. .. .. .. ..
menu,109,0x00036C40,menu,-,74,0.00 %,2886CCD7DC1BD6DEC8413A00B53046A0,2.712,English-United States,00 00 00 00 10 00 26 00 46 00 69 00 6C 00 65 00 ,.. .. .. .. .. .. & .. F .. i .. l .. e ..
string-table,7,0x00039A70,string-table,-,108,0.00 %,E79BAE0D6DCD90B738ACA7A2A23C6410,2.649,English-United States,00 00 00 00 00 00 00 00 00 00 00 00 00 00 16 00 ,.. .. .. .. .. .. .. .. .. .. .. .. .. .. .. ..
accelerator,109,0x00036C90,accelerator,-,16,0.00 %,3D2B1AF3424DBCD504F73918619C7D99,1.799,English-United States,10 00 3F 00 68 00 00 00 90 00 2F 00 68 00 00 00 ,.. .. ? .. h .. .. .. .. .. / .. h .. .. ..
icon-group,107,0x00034FA8,icon-group,-,48,0.00 %,C518E7BC4EAADEB459F51342B9EBDB91,2.433,English-United States,00 00 01 00 03 00 20 20 10 00 01 00 04 00 E8 02 ,.. .. .. .. .. .. .. .. .. .. .. .. .. ..
icon-group,108,0x00036C10,icon-group,-,48,0.00 %,37A05C07B66D99B4A90C82AC93A406AF,2.550,English-United States,00 00 01 00 03 00 20 20 10 00 01 00 04 00 E8 02 ,.. .. .. .. .. .. .. .. .. .. .. .. .. ..
version,1,0x000396F8,version,-,884,0.00 %,118C76E255B66CAC21B3BBADD4D4EA15,3.416,English-United States,74 03 34 00 00 00 56 00 53 00 5F 00 56 00 45 00 ,t .. 4 .. .. .. V .. S .. _ .. V .. E ..
manifest,1,0x00039AE0,manifest,-,833,0.00 %,5EB2021F5084B2F5BF3A667B728642A0,5.318,English-United States,EF BB BF 3C 3F 78 6D 6C 20 76 65 72 73 69 6F 6E ,.. .. .. < ? x m l v e r s i o n
md5,71AE7589461030595DBD2B6CE1914028
sha1,CE2EB7AC8FE2846A4C7BBD1829ACCB89D0F5F5D1
sha256,8A2472A0ED1F68D2861894C78E476FCA1F588ED7A289FED1F39B1EEFF67D7313
age,1
size,90 (bytes)
format,RSDS
debugger-stamp,0x5EB9B8FB (Mon May 11 13:43:39 2020
)
path,c:vs12lockdownchrome-selfextractorreleaseldbselfextractor.pdb
guid,15000757-C1EF-494F-B57E-82F76E7E893B
i>>?<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"><trustInfo xmlns="urn:schemas-microsoft-com:asm.v3"><security><requestedPrivileges><requestedExecutionLevel level="requireAdministrator" uiAccess="false"></requestedExecutionLevel></requestedPrivileges></security></trustInfo><compatibility xmlns="urn:schemas-microsoft-com:compatibility.v1"><application><supportedOS Id="{e2011457-1546-43c5-a5fe-008deee3d3f0}"></supportedOS><supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}"></supportedOS><supportedOS Id="{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}"></supportedOS><supportedOS Id="{1f676c76-80e1-4239-95bb-83d0f6d0da78}"></supportedOS><supportedOS Id="{8e0f7a12-bfb3-4fe8-b9a5-48fd50a15a9a}"></supportedOS></application></compatibility></assembly>
md5,118C76E255B66CAC21B3BBADD4D4EA15
sha1,F669A87C576AC83980349C4E43F448A378CD99A5
sha256,0670250E0054112035859CC41D74EA167932DA7D70676A624B047B73B155E6BA
file-type,executable
date,empty
language,English-United States
code-page,Unicode UTF-16, little endian
CompanyName,Respondus, Inc.
FileDescription,Self-extractor wrapper for InstallShield setup
FileVersion,1.0.0.1
InternalName,LdbSelfExtractor.exe
LegalCopyright,Copyright (C) 2015
OriginalFilename,LdbSelfExtractor.exe
ProductName,Respondus LockDown Browser setup self-extractor
ProductVersion,1.0.0.1
md5,6C30FF4E41583CB8ED96ADD9D0D6BA54
sha1,26273494F2227F7748F1C9781E7BE131F7EBCEA7
sha256,75CC33133885E09022FB4A694D6470136EBED3A735798116E4DF225281EEF31B
valid-from,10/12/2013 00:00:00
valid-to,09/12/2023 23:59:59
offset,0x048F3060
size,0x00001BD8 (7128 bytes)
malicious
Threat Score: 50/100 AV Detection: 1% Labeled as: Unrated site
https://seizetheawkward.org/
This report is generated from a file or URL submitted to this webservice on August 15th 2020 02:56:13 (UTC) and action script Default browser analysis
Guest System: Windows 7 32 bit, Professional, 6.1 (build 7601), Service Pack 1
Report generated by Falcon Sandbox v8.31 (C) Hybrid Analysis
Indicators
Not all malicious and suspicious indicators are displayed. Get your own cloud service or the full version to view all details.
Malicious Indicators 1
External Systems
Sample was identified as malicious by at least one Antivirus engine
details
1/79 Antivirus vendors marked sample as malicious (1% detection rate)
source
External System
relevance
8/10
Suspicious Indicators 1
External Systems
Found an IP/URL artifact that was identified as malicious by at least one reputation engine
details
1/79 reputation engines marked "https://seizetheawkward.org" as malicious (1% detection rate)
1/79 reputation engines marked "https://seizetheawkward.org/" as malicious (1% detection rate)
source
External System
relevance
10/10
Informative 1
Network Related
Found potential URL in binary/memory
details
Pattern match: "https://seizetheawkward.org/"
Pattern match: "https://seizetheawkward.org"
source
String
relevance
10/10
Session Details
No relevant data available.
Screenshots
Hybrid Analysis
Tip: Click an analysed process below to view more details.
Analysed 1 process in total.
rundll32.exe "%WINDIR%System32ieframe.dll",OpenURL C:103153ee61532e884f35aec027c904192ad546522df414dc0f05f9394a9b6650.url (PID: 2164)
Logged Script Calls Logged Stdout Extracted Streams Memory Dumps
Reduced Monitoring Network Activity Network Error Multiscan Match
Network Analysis
This report was generated with enabled TOR analysis
DNS Requests
No relevant DNS requests were made.
Contacted Hosts
No relevant hosts were contacted.
HTTP Traffic
No relevant HTTP requests were made.
Extracted Strings
All Details:
All Strings (10)
Interesting (3)
rundll32.exe (1)
screen_0.png (7)
Input (2)
"%WINDIR%System32ieframe.dll",OpenURL C:103153ee61532e884f35aec027c904192ad546522df414dc0f05f9394a9b6650.url
,,?,a_,i',0
,^_';_____,___,
,__?,
_0____,
_^__,
_________v?___
_YBRID
https://seizetheawkward.org
https://seizetheawkward.org/
Extracted Files
No significant files were extracted.
Notifications
Runtime
Not all Falcon MalQuery lookups completed in time
This URL analysis has missing honeyclient data
Community
There are no community comments.
You must be logged in to submit a comment.
Indicators
Session Details
Screenshots (1)
Hybrid Analysis (1)
Network Analysis
Extracted Strings
Extracted Files (0)
Notifications
Community (0)
Back to top
(C) 2020 Hybrid Analysis -- Terms & Conditions -- Data Protection Policy -- Imprint
<!DOCTYPE html>
<html class="no-js" lang="en">
<head>
<!-- Google Tag Manager -->
<script>(function (w, d, s, l, i) {
w[l] = w[l] || []; w[l].push({
'gtm.start':
new Date().getTime(), event: 'gtm.js'
}); var f = d.getElementsByTagName(s)[0],
j = d.createElement(s), dl = l != 'dataLayer' ? '&l=' + l : ''; j.async = true; j.src =
'https://www.googletagmanager.com/gtm.js?id=' + i + dl; f.parentNode.insertBefore(j, f);
})(window, document, 'script', 'dataLayer', 'GTM-5W2CMGQ');</script>
<!-- End Google Tag Manager -->
<meta charset="utf-8">
<meta http-equiv="x-ua-compatible" content="ie=edge">
<title>
Seize The Awkward - Talking to your friends about mental health and how to help
</title>
<meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1, user-scalable=no">
<meta name="keywords" content="helping a friend,friend acting strange,friend not themselves,change in behavior,change in attitude,acting differently,mental health,mental health support,depression,anxiety,sad,angry,isolation,loneliness,hopeless,self harm,suicide,suicide prevention">
<meta name="twitter:card" content="summary_large_image">
<meta name="twitter:description" content="Reaching out to a friend about their mental health is important. Learn about these tips and warning signs that can help start a conversation around depression and anxiety.">
<meta name="twitter:image" content="http://www.seizetheawkward.org/images/share.jpg">
<meta name="twitter:image:height" content="630">
<meta name="twitter:image:width" content="1200">
<meta name="twitter:title" content="SEIZE THE AWKWARD">
<meta property="og:description" content="Reaching out to a friend about their mental health is important. Learn about these tips and warning signs that can help start a conversation around depression and anxiety.">
<meta property="og:image:height" content="630">
<meta property="og:image:secure_url" content="http://www.seizetheawkward.org/images/share.jpg">
<meta property="og:image:url" content="http://www.seizetheawkward.org/images/share.jpg">
<meta property="og:image:width" content="1200">
<meta property="og:title" content="SEIZE THE AWKWARD">
<meta property="og:type" content="image/jpeg">
<meta property="og:url" content="http://www.seizetheawkward.org">
<link rel="shortcut icon" href="/images/favicon.ico" />
<link rel="stylesheet" href="/css/freight.css">
<link rel="stylesheet" href="/css/univers.css">
<script async src="https://www.googletagmanager.com/gtag/js?id=UA-107542574-1"></script>
<script>
window.dataLayer = window.dataLayer || [];
function gtag() { dataLayer.push(arguments) };
gtag('js', new Date());
gtag('config', 'UA-107542574-1');
</script>
<style>.FadeIn__fade-in___10JEW{transition-property:opacity,transform;transition-timing-function:cubic-bezier(0,0,.58,1);transition-duration:.5s}.FadeIn__entering___2G7Xr,.FadeIn__exited___Hklbx{opacity:0}.FadeIn__entered___2nyNQ,.FadeIn__exiting___1nvyL{opacity:1}@keyframes Spin__spin___3V0BL{100%{transform:rotate(360deg)}}.Spin__spin___3V0BL{animation-name:Spin__spin___3V0BL;animation-duration:.7s;animation-iteration-count:infinite;animation-timing-function:cubic-bezier(.25,.25,.75,.75)}.TweenTransform__tween-transform___1wH_G{transition-property:transform;transition-duration:.5s;transition-timing-function:cubic-bezier(0,0,.58,1)}.Button__button___11kzP{position:relative;padding:0;display:inline-block;border:2px solid #000;border-radius:0;background-color:#ffec00;font-family:UniversLTStd-UltraCn;font-size:2.4rem;margin:0;text-transform:uppercase;transition:background .3s cubic-bezier(0,0,.58,1);overflow:hidden}.Button__button___11kzP .Button__inner-text___1vbME,.Button__button___11kzP:after{padding:1rem 2rem .6rem 2rem;transition:transform .3s cubic-bezier(0,0,.58,1)}.Button__button___11kzP:after{position:absolute;display:block;left:0;top:0;height:100%;width:100%;content:attr(data-cta);-ms-transform:translateX(-100%);transform:translateX(-100%)}.Button__button___11kzP .Button__inner-text___1vbME{display:block;width:100%;-ms-transform:translateX(0);transform:translateX(0)}.Button__button___11kzP:active{background-color:transparent}@media (min-width:768px){.Button__button___11kzP:hover{background-color:transparent}.Button__button___11kzP:hover:after{-ms-transform:translateX(0);transform:translateX(0)}.Button__button___11kzP:hover .Button__inner-text___1vbME{-ms-transform:translateX(100%);transform:translateX(100%)}}.Button__black___1KAHz{background-color:#000;color:#ffec00}@media (min-width:768px){.Button__black___1KAHz:hover{background-color:#000}}@media (min-width:992px){.Button__button___11kzP{font-size:2.8rem}.Button__button___11kzP .Button__inner-text___1vbME,.Button__button___11kzP:after{padding:1.5rem 3rem 1.2rem 3rem}}.CircleButtonIcon__circle-button___2M_L5{position:relative;width:6.4rem;height:6.4rem;overflow:hidden;border-radius:50% 50%}.CircleButtonIcon__circle-button___2M_L5 .icon-play-border{position:absolute;top:0;left:0;width:100%;height:100%}.CircleButtonIcon__circle-button___2M_L5 .border{transition:stroke-dashoffset 1s cubic-bezier(0,0,.58,1);stroke-dasharray:239px;stroke-dashoffset:239px}.CircleButtonIcon__circle-button___2M_L5 .icon{transition:stroke-dashoffset 1s cubic-bezier(0,0,.58,1);stroke-dasharray:89px;stroke-dashoffset:89px}.CircleButtonIcon__circle-button___2M_L5 svg{stroke:#ffec00;fill:none}.CircleButtonIcon__is-in-view___TvJV6 .border{stroke-dashoffset:0}.CircleButtonIcon__is-in-view___TvJV6 .icon{stroke-dashoffset:0}.CloseButton__close-button___RmCRo{width:6.4rem;height:6.4rem;border:3px solid #ffec00;border-radius:50% 50%;overflow:hidden}.CloseButton__close-button___RmCRo svg{stroke:#ffec00;fill:none}.DupeSvgHover__svg___1fEqi{display:block;width:100%;height:auto;display:-ms-flexbox;display:flex;-ms-flex-flow:row nowrap;flex-flow:row nowrap;-ms-flex-pack:end;justify-content:flex-end;overflow:hidden}@media (min-width:768px){.DupeSvgHover__svg___1fEqi:hover svg:nth-of-type(1){-ms-transform:translateX(100%);transform:translateX(100%);opacity:0}.DupeSvgHover__svg___1fEqi:hover svg:nth-of-type(2){-ms-transform:translateX(0);transform:translateX(0);opacity:1}}.DupeSvgHover__svg___1fEqi svg{-ms-flex-negative:0;flex-shrink:0;position:absolute;top:0;left:0;width:100%;height:100%;transition:transform .4s cubic-bezier(.645,.045,.355,1),opacity .4s cubic-bezier(.25,.1,.25,1)}.DupeSvgHover__svg___1fEqi svg:nth-of-type(1){-ms-transform:translateX(0);transform:translateX(0);opacity:1}.DupeSvgHover__svg___1fEqi svg:nth-of-type(2){-ms-transform:translateX(-100%);transform:translateX(-100%);opacity:0}.FlexibleLogo__container___2Bzj2{position:relative;padding:.8rem .8rem .1rem .8rem;background-color:#00f;display:-ms-flexbox;display:flex;-ms-flex-flow:row nowrap;flex-flow:row nowrap;-ms-flex-pack:justify;justify-content:space-between;background-color:#ffec00;border:.5rem solid #000}.FlexibleLogo__container___2Bzj2 .FlexibleLogo__triangle___uKYYK{position:absolute;top:100%;right:8.9rem;width:2rem}.FlexibleLogo__container___2Bzj2 .FlexibleLogo__triangle___uKYYK svg{width:2rem}.FlexibleLogo__left___1R98c,.FlexibleLogo__right___xFZ2l{margin:0;display:inline-block;font-size:3rem;font-family:UniversLTStd-UltraCn;line-height:1;vertical-align:middle}@media (min-width:768px){.FlexibleLogo__left___1R98c,.FlexibleLogo__right___xFZ2l{font-size:6rem}}.Hamburger__hamburger___6POcz{display:block;width:35px;height:34px}.Hamburger__hamburger___6POcz svg{display:block;width:100%;height:auto}.Hamburger__hamburger___6POcz .Hamburger__border___2JumY{fill:#000}.Hamburger__hamburger___6POcz .Hamburger__background___2z24G{fill:#ffec00}.Hamburger__hamburger___6POcz .Hamburger__bar___VS45F{fill:none;stroke:#000;stroke-miterlimit:10;stroke-width:23px}@media (min-width:768px){.Hamburger__hamburger___6POcz{width:50px;height:48px}.Hamburger__hamburger___6POcz .Hamburger__bottom-bar___1m_Tu,.Hamburger__hamburger___6POcz .Hamburger__middle-bar___3i8AL,.Hamburger__hamburger___6POcz .Hamburger__top-bar___361PY{transition:.2s cubic-bezier(0,0,.58,1)}.Hamburger__hamburger___6POcz:hover .Hamburger__top-bar___361PY{-ms-transform:translateY(-8px);transform:translateY(-8px)}.Hamburger__hamburger___6POcz:hover .Hamburger__bottom-bar___1m_Tu{-ms-transform:translateY(8px);transform:translateY(8px)}.Hamburger__hamburger___6POcz:hover.Hamburger__open___1dPmi .Hamburger__middle-bar___3i8AL{-ms-transform:rotate(90deg);transform:rotate(90deg)}}.Hamburger__open___1dPmi .Hamburger__middle-bar___3i8AL{-ms-transform-origin:50% 50%;transform-origin:50% 50%}.Helpline__helpline___3o9lH a{position:absolute;top:0;right:0;bottom:0;left:0;width:100%;height:100%;display:block}.Helpline__helpline___3o9lH{display:block;position:absolute;height:3.4rem;width:3.4rem;top:0;right:0;pointer-events:auto;transition:opacity .3s,visibility 0s 0s;-webkit-mask-image:url(data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAAGXRFWHRTb2Z0d2FyZQBBZG9iZSBJbWFnZVJlYWR5ccllPAAAAA5JREFUeNpiYGBgAAgwAAAEAAGbA+oJAAAAAElFTkSuQmCC)}.Helpline__helpline___3o9lH a{display:block;overflow:hidden}@media (min-width:768px){.Helpline__helpline___3o9lH{border:3px solid #000;border:2px solid #000;border-radius:50% 50%;background-color:#ffec00;height:4.4rem;width:4.4rem}.Helpline__helpline___3o9lH svg{padding:.8rem}}.Helpline__hidden___2JfRe{visibility:hidden;opacity:0;transition:opacity .3s,visibility 0s .3s}@media (min-width:768px){.Helpline__hidden___2JfRe{visibility:visible;opacity:1}}.Logo__logo___WNaPm{width:220px;height:56px}.Logo__logo___WNaPm svg{display:block;width:220px;height:56px}.Logo__logo___WNaPm .Logo__border___nS2Yz{fill:#000}.Logo__logo___WNaPm .Logo__background___pLey9{fill:#ffec00}@media (min-width:768px){.Logo__logo___WNaPm{width:310px;height:79px}.Logo__logo___WNaPm svg{width:310px;height:79px}}.NavItem__item___ukaAQ{margin-bottom:1.3rem}@media (min-width:768px){.NavItem__item___ukaAQ{margin-bottom:3rem}}.NavItem__item___ukaAQ a{text-decoration:none}.NavItem__item-standard___EWiG8 a{position:relative;display:inline-block;overflow:hidden;color:#000;font-family:FreightTextProBook-Regular;font-size:2.2rem}.NavItem__item-standard___EWiG8 a:after,.NavItem__item-standard___EWiG8 a:before{content:'';display:block;position:absolute;left:0;bottom:0;width:100%;height:1px;background-color:currentColor;transition:transform .3s cubic-bezier(0,0,.58,1)}.NavItem__item-standard___EWiG8 a:before{-ms-transform:translateX(-100%);transform:translateX(-100%);transition-delay:0s}.NavItem__item-standard___EWiG8 a:hover{color:#fffdf2}.NavItem__item-standard___EWiG8 a:hover:before{-ms-transform:translateX(0);transform:translateX(0);transition-delay:.4s}.NavItem__item-standard___EWiG8 a:hover:after{-ms-transform:translateX(100%);transform:translateX(100%)}@media (min-width:400px){.NavItem__item-standard___EWiG8 a{font-size:2.4rem}}@media (min-width:768px){.NavItem__item-standard___EWiG8 a{font-size:2.8rem}}@media (min-width:1392px){.NavItem__item-standard___EWiG8 a{font-size:3rem}}.NavItem__item-standard___EWiG8 a:hover{color:#000}.PlayButtonLabel__play-button-label___1nAk5{font-size:1.6rem;border-bottom:1px solid #ffec00;color:#ffec00}@media (min-width:400px){.PlayButtonLabel__play-button-label___1nAk5{font-size:2.1rem}}@media (min-width:768px){.PlayButtonLabel__play-button-label___1nAk5{font-size:3.4rem}}@media (min-width:992px){.PlayButtonLabel__play-button-label___1nAk5{font-size:4.2rem}}.SliderButton__slider-button___2-D_w{width:4rem;height:4rem;transition:opacity .4s ease,transform .2s ease;border-radius:50%;overflow:hidden;border:2px solid #636363}.SliderButton__slider-button___2-D_w svg{stroke-width:4px;stroke:#636363;fill:none}.slick-next{margin-left:1.5rem}.slick-prev{margin-left:-5.5rem}.slick-disabled{pointer-events:none;opacity:.2}.slick-next,.slick-prev{position:absolute;bottom:0;left:50%}.Svg__svg___Px2o6{display:block;width:100%;height:auto}.Title__title___2h7bo{transition:opacity 1s cubic-bezier(.215,.61,.355,1);opacity:0}.Title__title___2h7bo>span{position:relative;display:inline-block;margin-right:.2em;margin-bottom:-.2em;overflow:hidden}.Title__title___2h7bo>span span{display:block;transition:transform 1s cubic-bezier(.215,.61,.355,1);-ms-transform:translateY(100%);transform:translateY(100%)}.Title__isInView___3On2X{opacity:1}.Title__isInView___3On2X>span span{-ms-transform:translateY(0);transform:translateY(0)}.VideoLoop__video-loop___1b0Kn{display:block;max-width:none;position:absolute;top:50%;left:50%;-ms-transform:translate(-50%,-50%);transform:translate(-50%,-50%);transition:opacity .45s cubic-bezier(.25,.1,.25,1)}.VideoLoop__video-loop-visible___2mGUj{opacity:1}.VideoLoop__video-loop-hidden___3sxIe{opacity:0}html{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}article,aside,details,figcaption,figure,footer,header,main,menu,nav,section,summary{display:block}audio,canvas,progress,video{display:inline-block}audio:not([controls]){display:none;height:0}progress{vertical-align:baseline}[hidden],template{display:none}a{background-color:transparent;-webkit-text-decoration-skip:objects}a:active,a:hover{outline-width:0}abbr[title]{border-bottom:none;text-decoration:underline;text-decoration:underline dotted}b,strong{font-weight:inherit}b,strong{font-weight:bolder}dfn{font-style:italic}h1{font-size:2em;margin:.67em 0}mark{background-color:#ff0;color:#000}small{font-size:80%}sub,sup{font-size:75%;line-height:0;position:relative;vertical-align:baseline}sub{bottom:-.25em}sup{top:-.5em}img{border-style:none}svg:not(:root){overflow:hidden}code,kbd,pre,samp{font-family:monospace,monospace;font-size:1em}figure{margin:1em 40px}hr{box-sizing:content-box;height:0;overflow:visible}button,input,select,textarea{font:inherit;margin:0}optgroup{font-weight:700}button,input{overflow:visible}button,select{text-transform:none}[type=reset],[type=submit],button,html [type=button]{-webkit-appearance:button}[type=button]::-moz-focus-inner,[type=reset]::-moz-focus-inner,[type=submit]::-moz-focus-inner,button::-moz-focus-inner{border-style:none;padding:0}[type=button]:-moz-focusring,[type=reset]:-moz-focusring,[type=submit]:-moz-focusring,button:-moz-focusring{outline:1px dotted ButtonText}fieldset{border:1px solid silver;margin:0 2px;padding:.35em .625em .75em}legend{box-sizing:border-box;color:inherit;display:table;max-width:100%;padding:0;white-space:normal}textarea{overflow:auto}[type=checkbox],[type=radio]{box-sizing:border-box;padding:0}[type=number]::-webkit-inner-spin-button,[type=number]::-webkit-outer-spin-button{height:auto}[type=search]{-webkit-appearance:textfield;outline-offset:-2px}[type=search]::-webkit-search-cancel-button,[type=search]::-webkit-search-decoration{-webkit-appearance:none}::-webkit-input-placeholder{color:inherit;opacity:.54}::-webkit-file-upload-button{-webkit-appearance:button;font:inherit}html{font-size:62.5%;box-sizing:border-box;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale;-webkit-tap-highlight-color:transparent}*,:after,:before{box-sizing:inherit}body,html{height:100%}body{font-family:FreightTextProBook-Regular;font-size:1rem;color:#000;background-color:#ffec00}li,p{font-size:2.25rem;line-height:1.3}li.small,p.small{font-size:1.6rem}@media (min-width:768px){li.large,p.large{font-size:2.8rem}}p{margin:0 0 1rem}em{font-style:italic}strong{font-weight:600}mark{line-height:1.1}@media (min-width:992px){mark{line-height:1.3}}h1,h2,h3,h4,h5,h6{color:#000;font-weight:400;font-family:UniversLTStd-UltraCn;text-rendering:optimizelegibility;line-height:1;margin:0}h1{font-size:11rem;letter-spacing:.02em;text-transform:uppercase}h2{color:#fffdf2;font-size:10rem;letter-spacing:.015em;text-transform:uppercase}h3{font-size:3.8rem;text-transform:uppercase}@media (min-width:768px){h3{font-size:4.8rem}}h4{font-size:2.4rem;font-family:FreightTextProBook-Regular}h5{font-size:2.1rem;font-family:FreightTextProBook-Regular}h6{font-size:1.8rem;font-family:FreightTextProBook-Regular}a{color:#000;text-decoration:none}a:hover{color:#000}figure{margin:0}hr{margin:1.6 0;border:0;border-top:1px solid #000}img{max-width:100%;height:auto;border-width:0;vertical-align:middle;-ms-interpolation-mode:bicubic}ol,ul{margin:0;padding:0;list-style:none}[role=button],button{padding:0;border:none;outline:0;background-color:transparent;cursor:pointer}form{margin:0 0 1.6 0}form fieldset{margin-bottom:1.6;padding:0;border-width:0}form p{margin-bottom:.8}form ul{list-style-type:none;margin:0 0 1.6 0;padding:0}.element3{z-index:2000}.element2{z-index:1000}.element1{z-index:-1000}.slick-slider{position:relative;display:block;box-sizing:border-box;-webkit-user-select:none;-moz-user-select:none;-ms-user-select:none;user-select:none;-ms-touch-action:pan-y;touch-action:pan-y;overflow:hidden;-webkit-tap-highlight-color:transparent}.slick-list{position:relative;display:block;margin:0;padding:0}.slick-list:focus{outline:0}.slick-list.dragging{cursor:pointer;cursor:hand}.slick-slider .slick-list,.slick-slider .slick-track{transform:translate3d(0,0,0)}.slick-track{position:relative;top:0;left:0;display:block}.slick-track:after,.slick-track:before{display:table;content:''}.slick-track{display:-ms-flexbox;display:flex;-ms-flex-flow:row nowrap;flex-flow:row nowrap}.slick-track:after{clear:both}.slick-loading .slick-track{visibility:hidden}.slick-loading .slick-slide{visibility:hidden}.slick-slide{display:none;min-height:1px}.slick-slide img{display:block}.slick-slide.slick-loading img{display:none}.slick-slide.dragging img{pointer-events:none}.slick-initialized .slick-slide{display:-ms-flexbox;display:flex}.slick-arrow.slick-hidden{display:none}.no-scroll{overflow:hidden}.app{font-size:1em;height:100%}.App__main___1IgAa{height:100%}.App__module-wrapper___2nsDK{position:relative;border-top:5px solid #ffec00}.Card__card___1aRs7{padding:1.5em;height:auto;background-color:#fffdf2;text-align:center;min-height:40rem;cursor:url(/images/openhand.cur?b06c243f534d9c5461d16528156cd5a8),move;cursor:-webkit-grab;cursor:grab}.Card__card___1aRs7:active{cursor:url(/images/closedhand.cur?a8c874b93b3d848f39a71260c57e3863),move;cursor:-webkit-grabbing;cursor:grabbing}.Card__card___1aRs7 h3{margin:2rem 0 .5rem 0;text-align:center;font-size:3.2rem;line-height:1;color:#9e9e9e}.Card__card___1aRs7 h4{margin-top:.5rem;color:#9e9e9e}.Card__card___1aRs7 p{font-size:1.8rem;width:100%}.Card__card___1aRs7 img{width:100%;-webkit-user-select:none;-moz-user-select:none;-ms-user-select:none;user-select:none}.Card__card___1aRs7>*{pointer-events:none}.Card__copy-container___2ZcF8{width:100%;-ms-flex-item-align:end;align-self:flex-end}.Card__image___s6nhv img{margin-top:-15%}.Card__quote___1F-yu{display:-ms-flexbox;display:flex;-ms-flex-flow:column nowrap;flex-flow:column nowrap}.Card__quote___1F-yu .Card__quote-container___10keo{width:100%;display:-ms-flexbox;display:flex;-ms-flex-flow:row nowrap;flex-flow:row nowrap;-ms-flex-positive:1;flex-grow:1;-ms-flex-align:center;align-items:center}.Card__quote___1F-yu .Card__quote-copy___2ndg7{text-transform:none;font-family:FreightTextProMedium-Regular;color:#000;line-height:1.3}.Card__quote___1F-yu .Card__copy-container___2ZcF8{-ms-flex-positive:0;flex-grow:0}.Card__quote___1F-yu h3,.Card__quote___1F-yu h4,.Card__quote___1F-yu p{width:100%}#during-the-conversation .slick-slide:nth-of-type(4n+1) .Card__quote___1F-yu{background-color:#feecc3}#during-the-conversation .slick-slide:nth-of-type(4n+2) .Card__quote___1F-yu{background-color:#a3ddd3}#during-the-conversation .slick-slide:nth-of-type(4n+3) .Card__quote___1F-yu{background-color:#f29488}#during-the-conversation .slick-slide:nth-of-type(4n+4) .Card__quote___1F-yu{background-color:#82a0dd}.Card__video___1v5Qp .Card__video-container___1zqtY{position:relative;width:100%;margin-top:-15%}.Card__video___1v5Qp .Card__poster___3q5sC{padding-top:127%;height:0;background-size:cover;background-position:center center}.Card__video___1v5Qp .Card__video-play___27q4k{display:-ms-flexbox;display:flex;-ms-flex-pack:center;justify-content:center;position:absolute;bottom:2rem;left:1rem;right:1rem;text-align:center;pointer-events:auto}.Card__endCard___38g2f{-ms-flex-line-pack:center;align-content:center}.Card__endCard___38g2f p{padding:0 2rem}.Card__endCard___38g2f svg{width:3rem;stroke:#000;stroke-width:2px;fill:none}.Card__endCard___38g2f{display:-ms-flexbox;display:flex;-ms-flex-flow:row wrap;flex-flow:row wrap;-ms-flex-pack:center;justify-content:center}@media (min-width:992px){.Card__card___1aRs7{min-height:44rem}.Card__card___1aRs7 h3{margin:2rem 1rem .5rem 1rem;font-size:3rem}.Card__card___1aRs7 p{font-size:1.9rem}}@media (min-width:1392px){.Card__card___1aRs7 h3{font-size:3.2rem}.Card__card___1aRs7 p{font-size:2rem}}.Intro__container___182JO{z-index:100;position:fixed;top:0;right:0;bottom:0;left:0;background-color:#ffec00;-ms-transform:translateY(-50%);transform:translateY(-50%)}.Intro__animation___1p21N{margin:0 auto}.Intro__animation___1p21N svg{display:block;width:auto;height:100vh}.ModuleCards__module-cards___18M4S{position:relative;margin:0 2rem;width:100%;max-width:34rem;min-height:500px;display:-ms-flexbox;display:flex;-ms-flex-flow:row wrap;flex-flow:row wrap;-ms-flex-align:end;align-items:flex-end;-ms-flex-pack:center;justify-content:center;background-color:#fffdf2;box-shadow:.3rem .3rem 0 rgba(0,0,0,.1)}.ModuleCards__module-cards___18M4S .card{position:absolute;top:50%;left:0;width:100%;min-height:0;-ms-transform:translateY(-60%);transform:translateY(-60%)}.ModuleCards__module-cards___18M4S .card h3{margin:4rem 4rem 0 4rem;font-size:3.2rem;line-height:1.2}.ModuleCards__button___TATJQ{margin:4rem 0}@media (min-width:992px){.ModuleCards__module-cards___18M4S{margin:-4rem 0;width:50%;min-height:800px;max-width:100%}.ModuleCards__module-cards___18M4S .ModuleCards__button___TATJQ{margin:0 0 15rem}.ModuleCards__module-cards___18M4S .card h3{margin:0 10%;font-size:5.6rem}}.ModuleContent__module-content___2c1HA{padding-left:2rem;padding-right:2rem;width:100%;margin:0}@media (min-width:768px){.ModuleContent__module-content___2c1HA{padding-left:10rem;padding-right:10rem}}.ModuleContent__top___2nZ5K{margin-bottom:2rem}.ModuleContent__bottom___1K0bn{margin-bottom:3rem}.ModuleContent__bottom___1K0bn,.ModuleContent__top___2nZ5K{text-align:center;width:100%}@media (min-width:992px){.ModuleContent__module-content___2c1HA{margin:0;width:100%}.ModuleContent__bottom___1K0bn,.ModuleContent__top___2nZ5K{width:100%;max-width:70rem}.ModuleContent__bottom___1K0bn p:last-of-type,.ModuleContent__top___2nZ5K p:last-of-type{margin-bottom:0}.ModuleContent__top___2nZ5K{margin:5rem auto 0}.ModuleContent__bottom___1K0bn{margin:2rem auto 6rem}.ModuleContent__half-width___1Ebwb{width:50%;display:-ms-flexbox;display:flex;-ms-flex-flow:row wrap;flex-flow:row wrap;-ms-flex-pack:center;justify-content:center;-ms-flex-line-pack:center;align-content:center;min-height:50vh}.ModuleContent__half-width___1Ebwb .ModuleContent__bottom___1K0bn,.ModuleContent__half-width___1Ebwb .ModuleContent__top___2nZ5K{width:100%;margin:0;padding:0}.ModuleContent__half-width___1Ebwb .ModuleContent__top___2nZ5K{margin-bottom:4rem}}.ModuleIntro__module-intro___O_djv{position:relative;height:122.67vw;overflow:hidden}@media (min-width:768px){.ModuleIntro__module-intro___O_djv{height:56.25vw}}.ModuleIntro__module-intro-hero___3-0og{height:100%}@media (min-width:768px){.ModuleIntro__module-intro-hero___3-0og{height:100%}}.ModuleIntro__container___3woPQ{display:-ms-flexbox;display:flex;-ms-flex-direction:column;flex-direction:column;-ms-flex-pack:end;justify-content:flex-end;-ms-flex-align:start;align-items:flex-start;top:0;left:0;width:100%;height:122.67vw;padding:0 2rem 4rem 2rem;overflow:hidden;background-color:#ffec00}@media (min-width:768px){.ModuleIntro__container___3woPQ{-ms-flex-pack:center;justify-content:center;height:56.25vw;padding:0 14rem}}.ModuleIntro__container-hero___2ZHmx{-ms-flex-align:start;align-items:flex-start;height:100%}@media (min-width:768px){.ModuleIntro__container-hero___2ZHmx{height:100%;padding:10rem 14rem 0}}.ModuleIntro__h2___1LKA-{font-size:5rem}@media (min-width:768px){.ModuleIntro__h2___1LKA-{font-size:7rem}}@media (min-width:992px){.ModuleIntro__h2___1LKA-{font-size:10rem}}@media (min-width:1392px){.ModuleIntro__h2___1LKA-{font-size:14rem}}.ModuleIntro__h2-hero___2LEH8{font-size:8rem}@media (min-width:768px){.ModuleIntro__h2-hero___2LEH8{font-size:9rem}}@media (min-width:992px){.ModuleIntro__h2-hero___2LEH8{font-size:11rem}}@media (min-width:1392px){.ModuleIntro__h2-hero___2LEH8{font-size:15rem}}.ModuleSlider__module-slider___2Ipt4{margin:0;width:100%}.ModuleSlider__dots___309_f{margin-top:5rem;text-align:center}.ModuleSlider__dots___309_f li{margin:0 .4rem;display:inline-block;text-indent:-99999px;overflow:hidden;border-radius:.8rem;width:.8rem;height:.8rem;background-color:rgba(99,99,99,.5)}.ModuleSlider__dots___309_f li.slick-active{background-color:#636363}.slick-slider{padding:4rem 0 0 0}@media (min-width:400px){.slick-slider{padding:4.5rem 0 1rem 0}}@media (min-width:992px){.slick-slider{padding:4.5rem 0 8rem 0}}@media (min-width:1392px){.slick-slider{padding:6rem 0 8rem 0}}.slick-slide{-ms-flex-pack:center;justify-content:center}.slick-slide .card{box-shadow:.3rem .3rem 0 rgba(0,0,0,.1);margin:.5rem 1rem;opacity:.5;-ms-transform:scale(1);transform:scale(1);transition:opacity .4s ease,transform .4s ease;width:100%}@media (min-width:768px){.slick-slide .card{box-shadow:.5rem .5rem 0 rgba(0,0,0,.1)}}@media (min-width:400px){.slick-slide .card{margin:1rem 1.5rem;max-width:32rem}}@media (min-width:768px){.slick-slide .card{margin:1rem 5%}}@media (min-width:992px){.slick-slide .card{filter:saturate(0);transition:opacity .4s ease,transform .4s ease, filter .4s ease}}@media (min-width:1392px){.slick-slide .card{max-width:100%}}.slick-center .card{opacity:1;-ms-transform:scale(1.05) translateY(-1%);transform:scale(1.05) translateY(-1%)}@media (min-width:992px){.slick-center .card{-ms-transform:scale(1.1) translateY(-2%);transform:scale(1.1) translateY(-2%);filter:saturate(100%)}}.PlayButton__play-button___3lbHs{position:relative;display:-ms-flexbox;display:flex;-ms-flex-align:center;align-items:center;margin-top:.9rem;z-index:0}@media (min-width:768px){.PlayButton__play-button___3lbHs{margin-top:2rem}}.PlayButton__icon___1lFuJ{-ms-flex-negative:0;flex-shrink:0;width:4rem;height:4rem;margin-right:1rem}@media (min-width:768px){.PlayButton__icon___1lFuJ{width:6.4rem;height:6.4rem;margin-right:3.5rem}.PlayButton__small___3XXoJ .PlayButton__icon___1lFuJ{width:5rem;margin-right:1rem}}.PlayButton__label-wrapper___1X8Jt{margin:auto 0;text-align:left;padding-bottom:.5em;opacity:0;-ms-transform:translateX(-1rem);transform:translateX(-1rem);transition:all .5s cubic-bezier(0,0,.58,1) .2s}.PlayButton__is-in-view___14nJN{opacity:1;-ms-transform:translateX(0);transform:translateX(0)}.PlayButton__small___3XXoJ .PlayButton__label___Zybt8{font-size:2.6rem}.ScrollButton__scroll-button___YFAjx{display:-ms-flexbox;display:flex;-ms-flex-align:center;align-items:center;margin-top:.9rem}@media (min-width:768px){.ScrollButton__scroll-button___YFAjx{margin-top:2rem}}.ScrollButton__icon___3cVEQ{-ms-flex-negative:0;flex-shrink:0;width:4rem;height:4rem;margin-right:1rem}@media (min-width:768px){.ScrollButton__icon___3cVEQ{width:6.4rem;height:6.4rem;margin-right:3.5rem}.ScrollButton__small___EH6Pe .ScrollButton__icon___3cVEQ{width:5rem;margin-right:1rem}}.ScrollButton__label-wrapper___1Z6Bn{margin:auto 0;text-align:left;padding-bottom:.5em;opacity:0;-ms-transform:translateX(-1rem);transform:translateX(-1rem);transition:all .5s cubic-bezier(0,0,.58,1) .2s}.ScrollButton__is-in-view___14URE{opacity:1;-ms-transform:translateX(0);transform:translateX(0)}.ScrollButton__small___EH6Pe .ScrollButton__label___CVHDc{font-size:2.6rem}.Video__video___1ZFet{position:absolute;top:0;left:0;width:100%;height:100%;z-index:200;max-height:100vh}.Video__video-hidden___3uoUU{transition:opacity .7s linear,visibility 0s linear .7s;visibility:hidden;opacity:0}.Video__video-visible-inline___25B57{transition:opacity .7s linear,visibility .7s linear;visibility:visible;opacity:1}.Video__video-visible-overlay___2T5fg{transition:opacity .7s linear,visibility .7s linear;visibility:visible;opacity:1;position:fixed}.Video__close-button___2C-hy{position:absolute;right:2rem;top:8rem;width:4.2rem;height:4.2rem;z-index:201}@media (min-width:992px){.Video__close-button___2C-hy{right:4rem;top:4rem}}.Video__video-hidden___3uoUU .Video__button___2Nkeo{display:none}.Video__button___2Nkeo{position:absolute;display:inline-block;bottom:6rem;right:2rem;z-index:201}.Video__button___2Nkeo:hover{background:#fff}@media (min-width:992px){.Video__button___2Nkeo{bottom:auto;top:14rem;right:4rem}}.Video__transcript-visible-inline___1TGA6 .Video__video___1ZFet,.Video__transcript-visible-overlay___3_H-n .Video__video___1ZFet{height:50%}.Video__transcript-visible-inline___1TGA6 .Video__transcript___2K-uv,.Video__transcript-visible-overlay___3_H-n .Video__transcript___2K-uv{display:block}@media (min-width:992px){.Video__transcript-visible-inline___1TGA6 .Video__video___1ZFet,.Video__transcript-visible-overlay___3_H-n .Video__video___1ZFet{width:70%;height:100%}.Video__transcript-visible-inline___1TGA6 .Video__transcript___2K-uv,.Video__transcript-visible-overlay___3_H-n .Video__transcript___2K-uv{width:30%;height:100%;top:0;right:0}}.Video__transcript___2K-uv{display:none;position:absolute;top:50%;right:0;width:100%;height:calc(50% + 2px);overflow-y:auto;-webkit-overflow-scrolling:touch;background:#000;color:#fff;padding:3rem;z-index:200;margin-top:-2px}.Video__transcript___2K-uv p{line-height:1.5}.Video__transcript-visible-overlay___3_H-n .Video__transcript___2K-uv{position:fixed}.Contact__contact___3QA7T{padding-left:2rem;padding-right:2rem;position:relative;padding-top:4rem;padding-bottom:4rem;background-color:#fffdf2;z-index:1}@media (min-width:768px){.Contact__contact___3QA7T{padding-left:10rem;padding-right:10rem}}.Contact__copy___3nCHZ{margin:0 auto;max-width:768px;text-align:center;margin-bottom:4rem}.Contact__copy___3nCHZ:last-of-type{margin-bottom:0}.Contact__copy___3nCHZ mark{position:relative;display:inline-block;white-space:nowrap;z-index:1;background-color:transparent}.Contact__copy___3nCHZ mark:after{content:'';position:absolute;top:0;left:0;right:0;bottom:0;transition:transform 1s .3s;-ms-transform:scaleX(0);transform:scaleX(0);-ms-transform-origin:0 0;transform-origin:0 0;background-color:#ffec00;z-index:-1}.Contact__copy___3nCHZ mark a{border:0}.Contact__copy___3nCHZ a{border-bottom:1px solid currentColor}.Contact__copy___3nCHZ p{margin-top:2rem}.Contact__is-in-view___2b_yi mark:after{-ms-transform:scaleX(1);transform:scaleX(1)}@media (min-width:768px){.Contact__contact___3QA7T{display:-ms-flexbox;display:flex;-ms-flex-flow:column nowrap;flex-flow:column nowrap;-ms-flex-pack:center;justify-content:center;-ms-flex-align:center;align-items:center;padding-top:10rem;padding-bottom:10rem;height:900px}}.Cta__cta___2_xxe{padding-left:2rem;padding-right:2rem;width:100%;margin:0;color:#fff;background:#000;position:relative;padding-top:4rem;padding-bottom:4rem;text-align:center;z-index:1}@media (min-width:768px){.Cta__cta___2_xxe{padding-left:10rem;padding-right:10rem}}.Cta__cta___2_xxe h3{color:#fff}.Cta__button___3yYjB{position:relative;padding:0;display:inline-block;border:2px solid #000;border-radius:0;background-color:#ffec00;font-family:UniversLTStd-UltraCn;font-size:2.4rem;margin:0;text-transform:uppercase;transition:background .3s cubic-bezier(0,0,.58,1);overflow:hidden}.Cta__button___3yYjB .Cta__inner-text___1Qmtv,.Cta__button___3yYjB:after{padding:1rem 2rem .6rem 2rem;transition:transform .3s cubic-bezier(0,0,.58,1),color .3s,border-color .3s}.Cta__button___3yYjB:after{position:absolute;display:block;left:0;top:0;height:100%;width:100%;content:attr(data-cta);-ms-transform:translateX(-100%);transform:translateX(-100%)}.Cta__button___3yYjB .Cta__inner-text___1Qmtv{display:block;width:100%;-ms-transform:translateX(0);transform:translateX(0)}.Cta__button___3yYjB:active{background-color:transparent}@media (min-width:768px){.Cta__button___3yYjB:hover{background-color:transparent;color:#fff;border-color:#fff}.Cta__button___3yYjB:hover:after{-ms-transform:translateX(0);transform:translateX(0)}.Cta__button___3yYjB:hover .Cta__inner-text___1Qmtv{-ms-transform:translateX(100%);transform:translateX(100%)}}.Cta__top___3ui_k{margin-top:1rem;margin-bottom:2rem}.Cta__bottom___A-bP3{margin-bottom:3rem}.Cta__bottom___A-bP3,.Cta__top___3ui_k{text-align:center;width:100%}@media (min-width:992px){.Cta__cta___2_xxe{margin:0;width:100%;padding-top:10rem;padding-bottom:10rem}.Cta__bottom___A-bP3,.Cta__top___3ui_k{width:100%;max-width:70rem}.Cta__bottom___A-bP3 p:last-of-type,.Cta__top___3ui_k p:last-of-type{margin-bottom:0}.Cta__top___3ui_k{margin:0 auto}.Cta__bottom___A-bP3{margin:2rem auto 3rem}}.Footer__footer___2TbCV{position:relative;padding-top:4rem;padding-bottom:4rem;background-color:#000;text-align:center;z-index:1}.Footer__logos___eaGXS{display:-ms-flexbox;display:flex;-ms-flex-flow:row wrap;flex-flow:row wrap;-ms-flex-pack:center;justify-content:center;margin-bottom:4rem}.Footer__logo___1DU08{margin:0 .8rem}.Footer__logo___1DU08 svg{width:auto;height:5rem}.Footer__links___2Nwtu{text-align:center;white-space:nowrap}.Footer__link___2rCRi{display:inline-block;margin:0 .3rem;padding-right:.6rem;line-height:1.1;font-size:1.5rem;border-right:1px solid rgba(255,253,242,.25)}.Footer__link___2rCRi:last-of-type{padding-right:0;border-right:none}.Footer__link___2rCRi a{position:relative;display:inline-block;overflow:hidden;color:#fffdf2}.Footer__link___2rCRi a:after,.Footer__link___2rCRi a:before{content:'';display:block;position:absolute;left:0;bottom:0;width:100%;height:1px;background-color:currentColor;transition:transform .3s cubic-bezier(0,0,.58,1)}.Footer__link___2rCRi a:before{-ms-transform:translateX(-100%);transform:translateX(-100%);transition-delay:0s}.Footer__link___2rCRi a:hover{color:#fffdf2}.Footer__link___2rCRi a:hover:before{-ms-transform:translateX(0);transform:translateX(0);transition-delay:.4s}.Footer__link___2rCRi a:hover:after{-ms-transform:translateX(100%);transform:translateX(100%)}.Footer__follow___3oJdO,.Footer__shares___25FIZ{margin-left:2rem;margin-top:4rem;text-align:center;display:inline-block}.Footer__follow___3oJdO p,.Footer__shares___25FIZ p{display:inline-block;margin-right:2rem;color:#fffdf2}.Footer__follow___3oJdO ul,.Footer__shares___25FIZ ul{display:inline-block}.Footer__shares___25FIZ{border-right:1px solid rgba(255,253,242,.25)}.Footer__shares___25FIZ p{margin-bottom:0}.Footer__share___2K3MA{display:inline-block;white-space:nowrap}.Footer__share___2K3MA span{display:inline-block;vertical-align:middle;position:relative;width:2.5rem;height:2.5rem;margin-right:1.5rem}.Footer__legal___1ngzn{margin:3rem 3rem 0;text-align:center;color:#fffdf2}@media (min-width:768px){.Footer__footer___2TbCV{padding-top:8rem;padding-bottom:8rem;text-align:center}.Footer__nav___2OziI{vertical-align:bottom}.Footer__nav___2OziI,.Footer__shares___25FIZ{margin-top:4rem}.Footer__shares___25FIZ{line-height:3.2}.Footer__link___2rCRi{padding-right:4rem;margin:0 2rem;font-size:2.2rem}.Footer__logo___1DU08{margin:0 2rem}.Footer__logo___1DU08:last-of-type{margin-left:1.2rem}.Footer__logo___1DU08 svg{height:6rem}}@media (max-width:480px){.Footer__link___2rCRi{display:block;margin-bottom:2rem}.Footer__link___2rCRi:last-of-type{margin-bottom:0}}.Header__header___34z-4{display:-ms-flexbox;display:flex;position:fixed;top:1rem;left:1rem;right:1rem;margin-top:0;pointer-events:none;z-index:100;transition:transform .3s,margin-top .3s}.Header__header___34z-4 h1{display:none!important}@media (min-width:768px){.Header__header___34z-4{top:4rem;left:4rem;right:4rem}}.Header__header-hidden___1B4E5{transform:translate3d(0,-200%,0);transition-timing-function:ease-in}.Header__header-visible___2JjBc{transform:translate3d(0,0,0);transition-timing-function:ease-out}.Header__hamburger___1mM7x{pointer-events:auto}.Header__logo___2Np8B{margin-left:.9rem;pointer-events:auto}@media (min-width:768px){.Header__logo___2Np8B{margin-left:1.6rem}}.Header__header-message___-T6Py{position:absolute;top:0;left:0;z-index:9999;width:100%;background:#000;padding:12px 15px;font-family:UniversLTStd-UltraCn;font-size:2.1rem;letter-spacing:.02em;text-align:center}.Header__header-message___-T6Py a{color:#fff}.Header__header-message___-T6Py span{text-decoration:underline}.Header__header-top___1xCcV .Header__header___34z-4{margin-top:8rem}@media (min-width:501px){.Header__header-top___1xCcV .Header__header___34z-4{margin-top:6rem}}@media (min-width:768px){.Header__header-top___1xCcV .Header__header___34z-4{margin-top:3rem}}.Hero__hero___35Hdx{height:100%;margin-bottom:-5px}.Hero__intro-wrapper___cn-GF{height:100%}@media (min-width:768px){.Hero__intro-wrapper___cn-GF{position:fixed;top:0;left:0;width:100%}}@media (min-width:768px){.Module__intro-wrapper___6iqDe{top:0}}@media (min-width:768px){.Module__sticky___3nhYK{position:-webkit-sticky;position:sticky}}.Module__content-wrapper___16Ju5{position:relative;display:-ms-flexbox;display:flex;-ms-flex-pack:center;justify-content:center;-ms-flex-flow:row wrap;flex-flow:row wrap;padding:4rem 0;background-color:#ffec00;z-index:1}.Navigation__navigation___3YSE9{position:fixed;top:0;left:0;width:100%;height:100%;z-index:50;overflow-y:auto}.Navigation__nav-open___2rnq7{background-color:rgba(0,0,0,.5);transition:visibility 0s linear 0s,background-color .3s linear;visibility:visible}.Navigation__nav-closed___1jB7M{visibility:hidden;background-color:rgba(0,0,0,0);transition:visibility 0s linear 1s,background-color .3s linear;pointer-events:none}.Navigation__links-container___2QcrG{position:absolute;width:100%;height:100%;padding:11rem 3rem 4rem 3rem}@media (min-width:768px){.Navigation__links-container___2QcrG{width:auto;padding:12.5rem 10.5rem 0;min-height:675px}}.Navigation__links-background___Nh7wL{position:absolute;top:0;left:0;width:100%;height:100%;background-color:rgba(255,236,0,.95)}.Navigation__links-background-open___BVo5Q{-ms-transform:translateY(0);transform:translateY(0);transition:transform .3s ease-out}.Navigation__links-background-closed___jVoUs{-ms-transform:translateY(-100%);transform:translateY(-100%);transition:transform .3s ease-in .3s}.Navigation__links___1Kbg0{position:relative;display:-ms-flexbox;display:flex;-ms-flex-direction:column;flex-direction:column;-ms-flex-pack:center;justify-content:center;width:100%;height:100%}.Navigation__links-open___TTa0x{opacity:1;transition:opacity .3s linear .2s}.Navigation__links-closed___2UCfy{opacity:0;transition:opacity .5s linear}.Rotate__rotate___wuvYH{display:none;-ms-flex-direction:column;flex-direction:column;-ms-flex-pack:center;justify-content:center;-ms-flex-align:center;align-items:center;position:fixed;top:0;left:0;width:100%;height:100%;background-color:#ffec00;z-index:150}@media only screen and (max-width:828px) and (orientation:landscape){.Rotate__rotate___wuvYH{display:-ms-flexbox;display:flex}}.Rotate__video-playing___3mavQ{display:none}.Rotate__svg___2Gw3J{width:5rem;margin-bottom:1rem}.Rotate__copy___1l0ZS{font-family:UniversLTStd-UltraCn;font-size:2.6rem;text-transform:uppercase;color:#000}</style></head>
<body>
<div id="app" class="app"></div>
<script type="text/javascript" src="/js/vendor.bundle.js" defer></script><script type="text/javascript" src="/js/client.js" defer></script></body>
</html>
8 Outgoing links
These are links going to different origins than the main page. For each link, only the first name is shown.
https://www.quantcast.com/gdpr/consent-management-solution/
Title: upgrade
https://www.adcouncil.org/
Title: .fil0 {fill:#FFFFFF;fill-rule:nonzero}
https://afsp.org/
Title: .st0 { fill: #fffdf2; }
https://www.jedfoundation.org/?utm_source=adcouncil&utm_medium=stawebsite&utm_campaign=sta#ppsShowPopUp_111
Title: JED
https://www.adcouncil.org/About-Us/Terms-of-Use
Title: Terms of Use
https://www.adcouncil.org/About-Us/Privacy-Policy
Title: Privacy Policy
https://www.adcouncil.org/About-Us/Contact-Us
Title: Contact Us
https://www.instagram.com/seizetheawkward/
Title:
Detected technologies
Nginx (Web Servers) Website Facebook (Widgets) Website Google Analytics (Analytics) Website Google Tag Manager (Tag Managers) Website Quantcast (Analytics) Website
Stats
90
Requests
0
Ad-blocked
0
Malicious
100%
HTTPS
65%
IPv6
18
Domains
24
Subdomains
23
IPs
5
Countries
5,995kB
Transfer
8,068kB
Size
4
Cookies
Robbery - Individual
IR Number: 2020-20081823
Crime: ROBBERY 2D PERSON
Location Type: Highway/Road/Alley
Date: 05/16/2020
Time: 7:00 PM
Motor Vehicle Theft
IR Number: 2018-20216199
Crime: POSS STOLEN MOTOR VEHICLE
Location Type: Highway/Road/Alley
Date: 10/29/2018
Time: 3:20 PM
Robbery - Individual
IR Number: 2018-20198372
Crime: ROBBERY 2D PERSON (NOT PURSE SNATCHING)
Location Type: Field/Woods
Date: 10/04/2018
Time: 10:15 AM
Burglary - Residential
IR Number: 2018-20173591
Crime: BURGLARY-RESIDENTIAL
Location Type: Residence/Apartment
Date: 09/01/2018
Time: 1:30 AM
Motor Vehicle Theft
IR Number: 2018-20166289
Crime: THEFT OF MOTOR VEHICLE
Location Type: Parking Lot/Garage
Date: 08/22/2018
Time: 9:00 AM
Motor Vehicle Theft
IR Number: 2018-20067170
Crime: THEFT OF MOTOR VEHICLE
Location Type: School-College/University
Date: 04/12/2018
Time: 1:20 PM
Motor Vehicle Theft
IR Number: 2018-20197791
Crime: THEFT OF MOTOR VEHICLE
Location Type: School-College/University
Date: 10/03/2018
Time: 9:00 AM
Theft
1 of 2
IR Number: 2018-20067711
Crime: THEFT-2D (From Building)
Location Type: School-College/University
Date: 04/03/2018
Time: 6:00 PM
Theft
2 of 2
IR Number: 2018-20199760
Crime: THEFT-2D (From Building)
Location Type: School-College/University
Date: 10/02/2018
Time: 2:30 PM
Motor Vehicle Theft
IR Number: 2018-20223098
Crime: THEFT OF MOTOR VEHICLE
Location Type: School-College/University
Date: 11/08/2018
Time: 9:30 AM
Burglary - Commercial
IR Number: 2018-20066232
Crime: BURGLARY 2D COMMERCIAL
Location Type: Construction Site
Date: 04/10/2018
Time: 3:30 PM
Motor Vehicle Theft
IR Number: 2018-20191347
Crime: THEFT OF MOTOR VEHICLE
Location Type: School-College/University
Date: 09/24/2018
Time: 8:15 AM
Theft
IR Number: 2018-20177798
Crime: THEFT-2D (From Building)
Location Type: School-College/University
Date: 09/05/2018
Time: 7:45 AM
Aggravated Assault
IR Number: 2019-20027516
Crime: ASSAULT 3D WEAPON OR NEGLIGENT INJURY
Location Type: Air/Bus/Train Terminal
Date: 02/14/2019
Time: 12:30 PM
Motor Vehicle Theft
IR Number: 2019-20014251
Crime: THEFT OF MOTOR VEHICLE
Location Type: School-College/University
Date: 01/23/2019
Time: 8:30 AM
Burglary - Residential
IR Number: 2019-20002305
Crime: RESIDENTIAL BURGLARY
Location Type: Residence/Apartment
Date: 01/04/2019
Time: 4:00 PM
heft
IR Number: 2019-20154615
Crime: THEFT 1D OBTAIN GOODS FROM COUNTERFEIT/FORGERY/FRAUD
Location Type: Auto Dealership New/Used
Date: 02/10/2019
Time: 12:00 AM
Motor Vehicle Theft
IR Number: 2019-20004495
Crime: THEFT OF MOTOR VEHICLE
Location Type: Parking Lot/Garage
Date: 01/08/2019
Time: 8:00 AM
Burglary - Commercial
IR Number: 2019-20087178
Crime: BURGLARY 1D COMMERCIAL
Location Type: School-College/University
Date: 05/15/2019
Time: 3:50 AM
Burglary - Commercial
IR Number: 2019-20164257
Crime: BURGLARY 2D COMMERCIAL
Location Type: Commercial/Office Building
Date: 08/28/2019
Time: 6:00 PM
Motor Vehicle Theft
IR Number: 2019-20189191
Crime: THEFT OF MOTOR VEHICLE
Location Type: Parking Lot/Garage
Date: 10/03/2019
Time: 8:00 PM
heft
IR Number: 2019-20227913
Crime: THEFT 3D FROM COIN OPERATED DEVICE
Location Type: School-College/University
Date: 12/04/2019
Time: 8:00 PM
Aggravated Assault
IR Number: 2019-20223034
Crime: ASSAULT 2D
Location Type: Field/Woods
Date: 11/24/2019
Time: 10:00 PM
Burglary - Commercial
IR Number: 2020-20000694
Crime: BURGLARY 2D COMMERCIAL
Location Type: Commercial/Office Building
Date: 01/01/2020
Time: 7:00 PM
Burglary - Residential
IR Number: 2020-20057267
Crime: RESIDENTIAL BURGLARY
Location Type: Residence/Apartment
Date: 04/04/2020
Time: 6:56 AM
Theft
IR Number: 2020-20079567
Crime: THEFT 1D OBTAIN GOODS FROM COUNTERFEIT/FORGERY/FRAUD
Location Type: Cyberspace
Date: 05/11/2020
Time: 12:00 PM
Burglary - Commercial
IR Number: 2020-20083752
Crime: BURGLARY 2D COMMERCIAL
Location Type: Commercial/Office Building
Date: 05/18/2020
Time: 5:00 PM
Motor Vehicle Theft
IR Number: 2020-20049471
Crime: THEFT OF MOTOR VEHICLE
Location Type: Highway/Road/Alley
Date: 03/21/2020
Time: 2:37 PM
Nicole Duvernay (2018)
Math Teacher
Spokane Community College (SCC)
Nicole Duvernay worked as a Math Teacher for Spokane Community College (SCC) and in 2018 had a reported pay of $76,000 according to public records. This is 14.1 percent higher than the average pay for university and college employees and 19.5 percent higher than the national average for government employees.
Overview
Payroll Year
2018
Name
Duvernay, Nicole
Formatted Name
Nicole Duvernay
State
Washington
Employer/Location
Spokane Community College
Employer/Source
Spokane Community College
Job Title
Mathematics
Formatted Job Title
Math Teacher
Employer & Work Details
Government Level
University & College
Agency
Spokane Community College
School Abbreviation
SCC
University/College
Spokane Community College
Pay, Salary, Benefits Information
Information may include where available: pay, salary, bonuses, benefits, retirement contributions, pensions, and other financial data.
Payroll Type
University & College
Base/Regular Pay
$76,000
Nicole Duvernay (2017)
Math Teacher
Spokane Community College (SCC)
Nicole Duvernay worked as a Math Teacher for Spokane Community College (SCC) and in 2017 had a reported pay of $72,100 according to public records. This is 8.3 percent higher than the average pay for university and college employees and 13.3 percent higher than the national average for government employees.
Overview
Payroll Year
2017
Name
Duvernay, Nicole
Formatted Name
Nicole Duvernay
State
Washington
Employer/Location
Spokane Community College
Employer/Source
Spokane Community College
Job Title
Mathematics
Formatted Job Title
Math Teacher
Employer & Work Details
Government Level
University & College
Agency
Spokane Community College
School Abbreviation
SCC
University/College
Spokane Community College
Pay, Salary, Benefits Information
Information may include where available: pay, salary, bonuses, benefits, retirement contributions, pensions, and other financial data.
Payroll Type
University & College
Base/Regular Pay
$72,100
Nicole Duvernay (2016)
Math Teacher
Spokane Community College (SCC)
Nicole Duvernay worked as a Math Teacher for Spokane Community College (SCC) and in 2016 had a reported pay of $69,700 according to public records. This is 4.7 percent higher than the average pay for university and college employees and 9.6 percent higher than the national average for government employees.
Overview
Payroll Year
2016
Name
Duvernay, Nicole
Formatted Name
Nicole Duvernay
State
Washington
Employer/Location
Spokane Community College
Employer/Source
Spokane Community College
Job Title
Mathematics
Formatted Job Title
Math Teacher
Employer & Work Details
Government Level
University & College
Agency
Spokane Community College
School Abbreviation
SCC
University/College
Spokane Community College
Pay, Salary, Benefits Information
Information may include where available: pay, salary, bonuses, benefits, retirement contributions, pensions, and other financial data.
Payroll Type
University & College
Base/Regular Pay
$69,700
Nicole Duvernay (2015)
Math Teacher
Spokane Community College (SCC)
Nicole Duvernay worked as a Math Teacher for Spokane Community College (SCC) and in 2015 had a reported pay of $50,700 according to public records. This is 23.9 percent lower than the average pay for university and college employees and 20.3 percent lower than the national average for government employees.
Overview
Payroll Year
2015
Name
Duvernay, Nicole
Formatted Name
Nicole Duvernay
State
Washington
Employer/Location
Spokane Community College
Employer/Source
Spokane Community College
Job Title
Mathematics
Formatted Job Title
Math Teacher
Employer & Work Details
Government Level
University & College
Agency
Spokane Community College
School Abbreviation
SCC
University/College
Spokane Community College
Pay, Salary, Benefits Information
Information may include where available: pay, salary, bonuses, benefits, retirement contributions, pensions, and other financial data.
Payroll Type
University & College
Base/Regular Pay
$50,700
Nicole Duvernay (2014)
Faculty
Spokane Community College (SCC)
Nicole Duvernay worked for Spokane Community College (SCC) and in 2014 had a reported pay of $75,600 according to public records. This is 13.5 percent higher than the average pay for university and college employees and 18.8 percent higher than the national average for government employees.
Overview
Payroll Year
2014
Name
Duvernay, Nicole
Formatted Name
Nicole Duvernay
State
Washington
Employer/Location
Spokane Community College
Employer/Source
Spokane Community College
Job Title
Faculty
Employer & Work Details
Government Level
University & College
Agency
Spokane Community College
School Abbreviation
SCC
University/College
Spokane Community College
Pay, Salary, Benefits Information
Information may include where available: pay, salary, bonuses, benefits, retirement contributions, pensions, and other financial data.
Payroll Type
University & College
Base/Regular Pay
$75,600
Nicole Duvernay (2013)
Faculty
Spokane Community College (SCC)
Nicole Duvernay worked for Spokane Community College (SCC) and in 2013 had a reported pay of $77,000 according to public records. This is 15.6 percent higher than the average pay for university and college employees and 21.0 percent higher than the national average for government employees.
Overview
Payroll Year
2013
Name
Duvernay, Nicole
Formatted Name
Nicole Duvernay
State
Washington
Employer/Location
Spokane Community College
Employer/Source
Spokane Community College
Job Title
Faculty
Employer & Work Details
Government Level
University & College
Agency
Spokane Community College
School Abbreviation
SCC
University/College
Spokane Community College
Pay, Salary, Benefits Information
Information may include where available: pay, salary, bonuses, benefits, retirement contributions, pensions, and other financial data.
Payroll Type
University & College
Base/Regular Pay
$77,000
Nicole Duvernay (2012)
Faculty
Spokane Community College (SCC)
Nicole Duvernay worked for Spokane Community College (SCC) and in 2012 had a reported pay of $65,000 according to public records. This is 2.4 percent lower than the average pay for university and college employees but 2.2 percent higher than the national average for government employees.
Overview
Payroll Year
2012
Name
Duvernay, Nicole
Formatted Name
Nicole Duvernay
State
Washington
Employer/Location
Spokane Community College
Employer/Source
Spokane Community College
Job Title
Faculty
Employer & Work Details
Government Level
University & College
Agency
Spokane Community College
School Abbreviation
SCC
University/College
Spokane Community College
Pay, Salary, Benefits Information
Information may include where available: pay, salary, bonuses, benefits, retirement contributions, pensions, and other financial data.
Payroll Type
University & College
Base/Regular Pay
$65,000
Charles Hollen (2018)
Director District Security
Spokane Community College (SCC)
Charles Hollen worked for Spokane Community College (SCC) and in 2018 had a reported pay of $72,300 according to public records. This is 8.6 percent higher than the average pay for university and college employees and 13.6 percent higher than the national average for government employees.
Overview
Payroll Year
2018
Name
Hollen, Charles
Formatted Name
Charles Hollen
State
Washington
Employer/Location
Spokane Community College
Employer/Source
Spokane Community College
Job Title
Director District Security
Employer & Work Details
Government Level
University & College
Agency
Spokane Community College
School Abbreviation
SCC
University/College
Spokane Community College
Pay, Salary, Benefits Information
Information may include where available: pay, salary, bonuses, benefits, retirement contributions, pensions, and other financial data.
Payroll Type
University & College
Base/Regular Pay
$72,300
Taylor Lundean (2018)
Security Guard
Spokane Community College (SCC)
Taylor Lundean worked for Spokane Community College (SCC) and in 2018 had a reported pay of $17,200 according to public records. This is 74.2 percent lower than the average pay for university and college employees and 73.0 percent lower than the national average for government employees.
Overview
Payroll Year
2018
Name
Lundean, Taylor
Formatted Name
Taylor Lundean
State
Washington
Employer/Location
Spokane Community College
Employer/Source
Spokane Community College
Job Title
Security Guard
Employer & Work Details
Government Level
University & College
Agency
Spokane Community College
School Abbreviation
SCC
University/College
Spokane Community College
Pay, Salary, Benefits Information
Information may include where available: pay, salary, bonuses, benefits, retirement contributions, pensions, and other financial data.
Payroll Type
University & College
Base/Regular Pay
$17,200
Terrance Van Weerdhuizen (2018)
Campus Security Officer
Spokane Community College (SCC)
Terrance Van Weerdhuizen worked for Spokane Community College (SCC) and in 2018 had a reported pay of $46,600 according to public records. This is 30.0 percent lower than the average pay for university and college employees and 26.8 percent lower than the national average for government employees.
Overview
Payroll Year
2018
Name
Van Weerdhuizen, Terrance
Formatted Name
Terrance Van Weerdhuizen
State
Washington
Employer/Location
Spokane Community College
Employer/Source
Spokane Community College
Job Title
Campus Security Officer
Employer & Work Details
Government Level
University & College
Agency
Spokane Community College
School Abbreviation
SCC
University/College
Spokane Community College
Pay, Salary, Benefits Information
Information may include where available: pay, salary, bonuses, benefits, retirement contributions, pensions, and other financial data.
Payroll Type
University & College
Base/Regular Pay
$46,600
Tyler Ables (2018)
Security Officer
Spokane Community College (SCC)
Tyler Ables worked as a Security Officer for Spokane Community College (SCC) and in 2018 had a reported pay of $53,000 according to public records. This is 20.4 percent lower than the average pay for university and college employees and 16.7 percent lower than the national average for government employees.
Overview
Payroll Year
2018
Name
Ables, Tyler
Formatted Name
Tyler Ables
State
Washington
Employer/Location
Spokane Community College
Employer/Source
Spokane Community College
Job Title
Security Officer Lead
Formatted Job Title
Security Officer
Employer & Work Details
Government Level
University & College
Agency
Spokane Community College
School Abbreviation
SCC
University/College
Spokane Community College
Pay, Salary, Benefits Information
Information may include where available: pay, salary, bonuses, benefits, retirement contributions, pensions, and other financial data.
Payroll Type
University & College
Base/Regular Pay
$53,000
Zane Sheets (2018)
Campus Security Officer
Spokane Community College (SCC)
Zane Sheets worked for Spokane Community College (SCC) and in 2018 had a reported pay of $48,000 according to public records. This is 27.9 percent lower than the average pay for university and college employees and 24.6 percent lower than the national average for government employees.
Overview
Payroll Year
2018
Name
Sheets, Zane
Formatted Name
Zane Sheets
State
Washington
Employer/Location
Spokane Community College
Employer/Source
Spokane Community College
Job Title
Campus Security Officer
Employer & Work Details
Government Level
University & College
Agency
Spokane Community College
School Abbreviation
SCC
University/College
Spokane Community College
Pay, Salary, Benefits Information
Information may include where available: pay, salary, bonuses, benefits, retirement contributions, pensions, and other financial data.
Payroll Type
University & College
Base/Regular Pay
$48,000
Erica Perez (2018)
Campus Security Officer
Spokane Community College (SCC)
Erica Perez worked for Spokane Community College (SCC) and in 2018 had a reported pay of $41,400 according to public records. This is 37.8 percent lower than the average pay for university and college employees and 34.9 percent lower than the national average for government employees.
Overview
Payroll Year
2018
Name
Perez, Erica
Formatted Name
Erica Perez
State
Washington
Employer/Location
Spokane Community College
Employer/Source
Spokane Community College
Job Title
Campus Security Officer
Employer & Work Details
Government Level
University & College
Agency
Spokane Community College
School Abbreviation
SCC
University/College
Spokane Community College
Pay, Salary, Benefits Information
Information may include where available: pay, salary, bonuses, benefits, retirement contributions, pensions, and other financial data.
Payroll Type
University & College
Base/Regular Pay
$41,400
David Slater (2018)
Security Guard
Spokane Community College (SCC)
David Slater worked for Spokane Community College (SCC) and in 2018 had a reported pay of $68,900 according to public records. This is 3.5 percent higher than the average pay for university and college employees and 8.3 percent higher than the national average for government employees.
Overview
Payroll Year
2018
Name
Slater, David
Formatted Name
David Slater
State
Washington
Employer/Location
Spokane Community College
Employer/Source
Spokane Community College
Job Title
Security Guard
Employer & Work Details
Government Level
University & College
Agency
Spokane Community College
School Abbreviation
SCC
University/College
Spokane Community College
Pay, Salary, Benefits Information
Information may include where available: pay, salary, bonuses, benefits, retirement contributions, pensions, and other financial data.
Payroll Type
University & College
Base/Regular Pay
$68,900
Lexi Michelle Dawson (2018)
Forest Firefighter
State of Washington
Lexi Michelle Dawson worked as a Forest Firefighter for the State of Washington and in 2018 had a reported pay of $11,700 according to public records.
Overview
Payroll Year
2018
Name
Dawson, Lexi
Formatted Name
Lexi Dawson
State
Washington
Employer/Location
Natural Resources
Employer/Source
State of Washington
Job Title
Sf-Forest Fire Fighter
Formatted Job Title
Forest Firefighter
Employer & Work Details
Government Level
State
Agency
Natural Resources
Pay, Salary, Benefits Information
Information may include where available: pay, salary, bonuses, benefits, retirement contributions, pensions, and other financial data.
Payroll Type
State
Base/Regular Pay
$11,700
Lexi Michelle Dawson (2017)
Forest Firefighter
State of Washington
Lexi Dawson worked as a Forest Firefighter for the State of Washington and in 2017 had a reported pay of $16,000 according to public records. This is 72.8 percent lower than the average pay for state employees and 74.9 percent lower than the national average for government employees.
Overview
Payroll Year
2017
Name
Dawson, Lexi
Formatted Name
Lexi Dawson
State
Washington
Employer/Location
Natural Resources
Employer/Source
State of Washington
Job Title
Sf-Forest Fire Fighter
Formatted Job Title
Forest Firefighter
Employer & Work Details
Government Level
State
Agency
Natural Resources
Pay, Salary, Benefits Information
Information may include where available: pay, salary, bonuses, benefits, retirement contributions, pensions, and other financial data.
Payroll Type
State
Base/Regular Pay
$16,000
Tito Ellis (2018)
Office Assistant 3
Spokane Community College (SCC)
Tito Ellis worked for Spokane Community College (SCC) and in 2018 had a reported pay of $24,800 according to public records. This is 62.8 percent lower than the average pay for university and college employees and 61.0 percent lower than the national average for government employees.
Overview
Payroll Year
2018
Name
Ellis, Tito
Formatted Name
Tito Ellis
State
Washington
Employer/Location
Spokane Community College
Employer/Source
Spokane Community College
Job Title
Office Assistant 3
Employer & Work Details
Government Level
University & College
Agency
Spokane Community College
School Abbreviation
SCC
University/College
Spokane Community College
Tito Ellis (2018)
Admissions/Reg Asst II
Spokane Community College (SCC)
Tito Ellis worked for Spokane Community College (SCC) and in 2018 had a reported pay of $4,200 according to public records.
Overview
Payroll Year
2018
Name
Ellis, Tito
Formatted Name
Tito Ellis
State
Washington
Employer/Location
Spokane Community College
Employer/Source
Spokane Community College
Job Title
Admissions/reg Asst Ii
Employer & Work Details
Government Level
University & College
Agency
Spokane Community College
School Abbreviation
SCC
University/College
Spokane Community College
Pay, Salary, Benefits Information
Information may include where available: pay, salary, bonuses, benefits, retirement contributions, pensions, and other financial data.
Payroll Type
University & College
Base/Regular Pay
$4,200
Anthony Owen Lucas
Lucas, Anthony Owen
Defendant Spokane Municipal N00006356 08-17-2010
Tony Lucas
@TonyLucc
Im a STRRRAAAAANNGER FOR LIFE!
Spokane, WA
Joined April 2011
Tony Lucas
? @TonyLucc
29 May 2012
Spokane, WA is calling your name @KuttCalhoun!
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
29 Nov 2011
@ombakri2
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
12 Oct 2011
Replying to @weeddickwilly
@Mexicanstiffler seriously dude, have you even listened to tech? I have never herd any one not like him #strangemusicalldayallnight
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
8 Oct 2011
#twitterisstupid
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
8 Oct 2011
#facebookisbetterthantwitter
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
8 Oct 2011
#fucktwitter
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
8 Oct 2011
f**k twitter, this s**t is stupid #twitterisdumb
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
1 Oct 2011
Replying to @KrizzKaliko
@KrizzKaliko when is your next album, ive been stuck on that #ShockTreatment
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
29 Sep 2011
Replying to @DrJimSears
@DrJimSears can you guys do a
show that weighs the health benefits and
risks of smoking marijuana?
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
29 Sep 2011
Replying to @TheDoctors
@TheDoctors can you guys do a show that weighs the health benefits and risks of smoking marijuana?
0 replies 0 retweets 1 like
Tony Lucas
? @TonyLucc
27 Sep 2011
Replying to @DrJimSears
@DrJimSears I have a 3 and a half year old boy, he is a super picky eater, what are some tips for breaking this habit?
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
23 Sep 2011
Replying to @KHQDaveCotton
@KHQDaveCotton did i get it?
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
20 Sep 2011
#readyforbed
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
20 Sep 2011
Replying to @TechN9ne
@TechN9ne my girl thinks your avenge seven fold shirt is hot. Keep it Strange!!!
0 replies 0 retweets 0 likes
Tony Lucas Retweeted
KHQ Local News
?Verified account @KHQLocalNews
13 Sep 2011
Helmet Ordinance In Spokane County Approved
1 reply 1 retweet 0 likes
Tony Lucas Retweeted
JM Agbayani
? @janmae04
13 Sep 2011
"you can't trade magic like f****n Pokemon cards!". can't get over of Jesus death #trueblood
0 replies 2 retweets 0 likes
Tony Lucas
? @TonyLucc
13 Sep 2011
#strangmusic
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
2 Sep 2011
@RealYoungBleed welcome to #strangemusic
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
1 Sep 2011
Replying to @TheNewKuttyCal
@KuttCalhoun what is your next full length album going to be called?
0 replies 0 retweets 0 likes
Tony Lucas Retweeted
Kutt Calhoun
?Verified account @TheNewKuttyCal
1 Sep 2011
@beautyful_lotus my plan to take ova n go str8 to da top!!
2 replies 1 retweet 0 likes
Tony Lucas
? @TonyLucc
1 Sep 2011
Replying to @TheNewKuttyCal
@KuttCalhoun charlie sheen rocks, good work red headed stepchild
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
25 Aug 2011
Replying to @elocineniledam
@MissMiksNicole whats up?
0 replies 0 retweets 0 likes
Tony Lucas Retweeted
Stuff Stoners Like
? @stoner_stuff
24 Jun 2011
If we were as rich as we are STONED right now...we'd have more money than Oprah
1 reply 16 retweets 1 like
Tony Lucas Retweeted
Stuff Stoners Like
? @stoner_stuff
26 Jun 2011
slow down, relax and smoke some weed, man...it's the weekend.
5 replies 37 retweets 4 likes
Tony Lucas
? @TonyLucc
23 Jun 2011
@Eminem I think a collaboration with @techn9ne would be sick as f**k
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
23 Jun 2011
Replying to @50cent
@50cent I think a collaboration with @techn9ne would be sick as f**k
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
22 Jun 2011
NO f*****g RESPECT!!!
0 replies 0 retweets 0 likes
Tony Lucas Retweeted
Stevie Stone
?Verified account @StevieStone09
15 Jun 2011
I WANT TO GIVE A BIG CONGRATS TO @TechN9ne @StrangeMusicInc HIMMI
0 replies 1 retweet 0 likes
Tony Lucas
? @TonyLucc
13 Jun 2011
Dear Life,
Why do you hate me?
-Your Worst Enemy
Tony
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
12 Jun 2011
Who wants to buy my tv? 32"HDTV, 3 HDMI ports, six inputs, and remote, $150
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
11 Jun 2011
Idk I guess I'm going to end up as a homeless bum under a bridge. I have the worst luck in life.
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
9 Jun 2011
Replying to @KrizzKaliko
@KrizzKaliko what's up with Kabosh, Amafrican Psycho? Been waiting forever!
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
8 Jun 2011
@TechN9ne this guy can f**k off too, http://www.wspentertainment.com/jsin/content/reviews/music/2011/n9ne-6and7.php
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
8 Jun 2011
@techn9ne I think #spinsreviewonall6'sand7's is bull s**t, this album is just as good as #anghellic
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
3 Jun 2011
s**t, GOD d**n!!!
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
3 Jun 2011
@Techn9ne & @lilwayne collaboration finally released today! #fuckfood
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
30 May 2011
RT @stoner_stuff if at first you don't succeed...take another hit......word
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
30 May 2011
@TechN9ne welcome to spokane!
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
30 May 2011
@KuttCalhoun welcome to spokane!
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
30 May 2011
@KrizzKaliko welcome to spokane!
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
30 May 2011
@therealBigScoob welcome to spokane!
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
30 May 2011
@StevieStone09 welcome to spokane!
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
30 May 2011
@MAYDAYMUSIC welcome to spokane!!
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
29 May 2011
6688846993
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
29 May 2011
TECCA......
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
29 May 2011
WHEN I SAY TECH TECH, YOU SAY N9NE N9NE...........TECH..TECH.....
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
29 May 2011
WHO IS PUMPED FOR THE TECH N9NE SHOW TOMORROW?
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
29 May 2011
WHEN I SAY TECH, YOU SAY N9NE.......TECH........
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
29 May 2011
TECH TO THE N-9-N-E!!
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
29 May 2011
n9ne.n9ne.n9ne.n9ne
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
29 May 2011
tech.tech.tech.tech
0 replies 0 retweets 0 likes
Tony Lucas Retweeted
Dizz
? @Dizz2K7
29 May 2011
This just in, f**k @chrisbrown.... That is all
0 replies 1 retweet 0 likes
Tony Lucas
? @TonyLucc
29 May 2011
The M's won again! 9-1 for their last 10, GO MARINERS!!!
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
28 May 2011
Dont ya be comin round here talkin sideways, ima make you fly away! DONT GET STOMPED!
0 replies 0 retweets 0 likes
Tony Lucas Retweeted
Stuff Stoners Like
? @stoner_stuff
28 May 2011
lotsa people wouldn't be such a******s if they'd just get STONED every now and then
0 replies 25 retweets 1 like
Tony Lucas
? @TonyLucc
27 May 2011
That sounded like a cat jumping off the Empire State Building
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
25 May 2011
RT @stoner_stuff MARIJUANA is a perfect fit
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
25 May 2011
Thinking about changing my number......
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
24 May 2011
i am a.....
[]D [] []V[] []D
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
23 May 2011
to all the crazy ex girlfriends (or befriends) in the world.......
f**k YOU!!!!!
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
23 May 2011
THAT f*****g FOOL IS GOING TO GET ROCKED HARD, THEN HIS p***y AS IS PROBABLY GOING TO CALL THE COPS ON ME
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
23 May 2011
Just leave him the h**l alone, hes trying to eat!
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
22 May 2011
DB, my main man, you got tossed into the right dumpster!
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
22 May 2011
I can't believe it's pot butter!
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
22 May 2011
Thats like bringing weed to Amsterdam!
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
21 May 2011
ripped.......
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
21 May 2011
Weird f*****g people on the bus....
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
21 May 2011
Who wants to go flying in my desert eagle?
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
19 May 2011
Replying to @elocineniledam
@MissMiksNicole I was only joking, haven't you learned that about me yet?
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
19 May 2011
Beer pong was AWESOME last night, now I'm feeling kinda....UGH
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
19 May 2011
ug
RT @MissMiksNicole It REALLY bothers me when people think I'm lying.... Thats a lie
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
18 May 2011
@TechN9ne needs to do a collabos with @therealbigscoob called 'All 56s & 57s'
0 replies 0 retweets 0 likes
Tony Lucas Retweeted
Cannibis fact
? @weedfact
10 May 2011
According to one report, it would take 800 joints to kill a person but the cause of death would be carbon monoxide poisoning.
..
0 replies 148 retweets 6 likes
Tony Lucas Retweeted
Cannibis fact
? @weedfact
13 May 2011
In 1937, the marijuana Tax Stamp prohibited the use, sale and cultivation of hemp/marijuana in the United States...
0 replies 12 retweets 2 likes
Tony Lucas Retweeted
Cannibis fact
? @weedfact
14 May 2011
The original drafts of the Declaration of Independence were written on hemp paper...
0 replies 33 retweets 4 likes
Tony Lucas Retweeted
Cannibis fact
? @weedfact
16 May 2011
Both George Washington and Tomas Jefferson grew marijuana on thier plantations..
0 replies 137 retweets 9 likes
Tony Lucas Retweeted
Cannibis fact
? @weedfact
16 May 2011
One acre of hemp will produce as much paper as four acres of trees...
0 replies 74 retweets 2 likes
Tony Lucas
? @TonyLucc
16 May 2011
Nig-ga
Nig-ga
This s**t right here n***a
This s**t right here?
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
12 May 2011
RT @Dizz2K7 @KuttCalhoun hard and honest!!!....... #RawNUnkutt is my all time fav
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
11 May 2011
Been a boring day
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
11 May 2011
Mortal Kombat + Expert Mode = Me Pissed Off
f**k!
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
11 May 2011
@KrizzKaliko I pre-order all your music and can't this time-lost my job, can you send me one on da house?
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
11 May 2011
No check for me today...):
Who wants to loan me money until wednesday?
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
11 May 2011
Replying to @DIZZO509
@DIZZO509 Now I got the dunkin bubble gut farts ha lol!
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
9 May 2011
RT @MissMiksNicole I'm bored. Someone text me lol.....if I had your number, I would text you :)
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
9 May 2011
RT @weedfact More than 150,000 Americans die of alcohol abuse each year.
But in 10k years of usage, no one has ever died from marijuana..
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
9 May 2011
Replying to @therealBigScoob
@therealBigScoob Happy Birthday- Make sure Tech and Krizz sing the bday anthem to you- from Genius
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
9 May 2011
RT @MissMiksNicole @TonyLucc Aw :) Thanks!..... And theres more where that came from :) you are welcome
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
9 May 2011
RT @MissMiksNicole @TonyLucc Isn't that a good thing? :) :).....especially when its a good smile :)
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
9 May 2011
RT @MissMiksNicole You know you've got something good when all you can do is SMILE :)... Thats all you ever do is smile :)
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
9 May 2011
RT @MissMiksNicole Slept like s**t... Me too :(
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
9 May 2011
Good morning facebook and twitter!
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
8 May 2011
Chinese food, lol got the munchies!
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
8 May 2011
f**k you Carls Jr.
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
7 May 2011
Cleaned a s**t load today, now I just need to get some.....
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
7 May 2011
@TechN9ne @StrangeMusicInc when are you going to sign @irvdaphenom, in my eyes, he is already STRANGE!
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
7 May 2011
I got the lead b*****s with a A high flush against a Queen high flush http://yfrog.com/hs51633742j
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
6 May 2011
Anyone down for some $5 hold 'em tonight?
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
6 May 2011
@NESTOTHEOWNER wanna buy the bar?
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
6 May 2011
Dickey Mouf b***h!
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
6 May 2011
Good morning cruel world!
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
6 May 2011
Replying to @StrangeMusicInc
@StrangeMusicInc follow me!
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
5 May 2011
Run my finger down the list, all the way to the Ts, find her name, and check it off.
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
5 May 2011
@DIZZO509 YORT!!!!
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
4 May 2011
Replying to @elocineniledam
@MissMiksNicole where you moving to?
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
4 May 2011
@therealBigScoob hey ya d**n fool, I sent you a pic of my pre order, and you aint followin me.....
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
4 May 2011
RT @MissMiksNicole @TonyLucc Lol not really a system, just a routine :)
Mmmm hmmm
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
4 May 2011
RT @DIZZO509 "@TonyLucc what up son, just wanted to say it was Hella tight kikin it wit today and goin to........ (cont) http://deck.ly/~9yDJq
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
4 May 2011
RT @MissMiksNicole "@TonyLucc It's actually set an hr and 15 min before I really wake up haha Then I usuall... (cont) http://deck.ly/~MO6zC
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
4 May 2011
Replying to @DIZZO509
@DIZZO509 DIZZO NOW THATS A REAL DUDE RIGHT THERE!!!
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
4 May 2011
Replying to @elocineniledam
@MissMiksNicole set your alarm an hour before you need to get up, then smash snooze, lol
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
4 May 2011
Replying to @elocineniledam
@MissMiksNicole make sure you hit that snooze button, lol
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
3 May 2011
Sky high is fun and all, just not for fat asses like me HAHA!
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
3 May 2011
Replying to @therealBigScoob
@therealBigScoob BEEN BUMPIN d**n FOOL ALL DAY http://yfrog.com/hs3kaxrj
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
2 May 2011
Replying to @therealBigScoob
@therealBigScoob http://yfrog.com/h44y5hj Got that d**n Fool Big Homie
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
1 May 2011
Time for a change.......
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
27 Apr 2011
Replying to @therealBigScoob
@therealBigScoob and we dont get any tornadoes in spokane!
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
27 Apr 2011
@therealBigScoob buy a house in spokane, you get so much love here.
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
27 Apr 2011
Replying to @therealBigScoob
@therealBigScoob d**n FOOL, 5 days and counting!
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
27 Apr 2011
Replying to @TechN9ne
@TechN9ne Watch this video http://www.youtube.com/watch?v=3FwnbXW1qEU&feature=youtube_gdata_player
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
24 Apr 2011
f**k HOLIDAYS! WHY DOES LIFE GOTTA BE FULL OF BULL s**t?
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
22 Apr 2011
RT @MissMiksNicole: "@TonyLucc I been on Twitter fool haha" who you calling a fool, you fool
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
22 Apr 2011
Replying to @elocineniledam
@MissMiksNicole so now your on twitter huh? you better follow me lol
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
20 Apr 2011
Replying to @therealBigScoob
@therealBigScoob big homie, I hear youre giving away free posters, can ya biggest fan get one too?
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
20 Apr 2011
4our 2wo zer0
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
20 Apr 2011
Ugh, would be nice if people helped.
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
19 Apr 2011
Replying to @KrizzKaliko
@KrizzKaliko samuel isn't cured
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
18 Apr 2011
Now its hail
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
18 Apr 2011
Replying to @DIZZO509
@DIZZO509 its just work dude, stressing me the f**k out.
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
18 Apr 2011
WHY IS IT SNOWING?!?!
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
17 Apr 2011
I just wanna be happy :(
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
16 Apr 2011
Well................work should be interesting today.....................
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
16 Apr 2011
Replying to @TechN9ne
@TechN9ne STAMINA!!!
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
16 Apr 2011
Replying to @TechN9ne
@TechN9ne can't wait for all 6s & 7s, I think you should make a 'big bad wolf' remix or 'beef' remix
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
15 Apr 2011
f**k you b*****s, I'm stepping down. Lay your problems on somebody else.
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
14 Apr 2011
Just got a dining room table, its all coming together quite nicely.
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
14 Apr 2011
s**t, I wish I was rich b***h!
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
13 Apr 2011
I got a pay raise b*****s
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
13 Apr 2011
Replying to @KrizzKaliko
@KrizzKaliko your next album is going to be S.I.C. Can't wait, I listen to your other three everyday......KALI BABY!!!!
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
13 Apr 2011
Now I'm satisfied :)
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
13 Apr 2011
Starving......ugh
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
13 Apr 2011
Moved the computer desk, now I need to get a dining room table!
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
9 Apr 2011
Replying to @therealBigScoob
@therealBigScoob when we going to smoke a blunt big homie? May 30th in spokane, wa?
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
9 Apr 2011
f**k YOU
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
9 Apr 2011
"@DIZZO509: @Spazzme420 does this work????"like this you noob :-)
0 replies 1 retweet 0 likes
Tony Lucas
? @TonyLucc
9 Apr 2011
"@Spazzme420: @TonyLucc BIOTCH!!!!!!" f*g
0 replies 0 retweets 0 likes
Tony Lucas
? @TonyLucc
9 Apr 2011
@DIZZO509 @Spazzme420 what up b*****s!
0 replies 0 retweets 0 likes
Pamela Jane Huffman/Herrebout
ADDITIONAL NAMES:
Pamela J Herrebout , Pam Huffman , Pam Herrebout
Pamela J Huffman
47 years old
Female
From Seattle & Crown Hill, Washington
CAREER:
Telecommunications Professional
Lexi Dawson
1 Dawson, Lexi Michelle
Defendant Lincoln Cnty Dist Ct 6Z1110562 01-03-2017
2 Dawson, Lexi Michelle
Defendant Lincoln Cnty Dist Ct 7Z1084542 10-17-2017
Merrill Gardens
Waitress . Spokane, Washington
Washington State Department of Natural Resources
Wildland Firefighter
Current City and Hometown
Spokane, Washington
Current city
Omak, Washington
Hometown
Favorites
Movies
[Coach Carter]
Coach Carter
Television
[The Fresh Prince of Bel-Air]
The Fresh Prince of Bel-Air
Athletes
[Nate Robinson]
Nate Robinson
Sports
[Cross Country]
Cross Country
Other
Omak Lady Hawks/OMS Basketball, Spokane Hoopfest, Hometown Pizza Omak, Nike, Rise & Grind Espresso, Worldstar Hip Hop, Lavish Salon, Everything Michael Cera, Terrain Race, Omakfitforlife, Funny Memes Pacific NW, U.S. News and World Report, Nerds with Vaginas, Tomi Lahren, Washington State Department of Natural Resources, Backcountry, Spokane Community College, Eastern Washington Interagency Fire Training Academy, Toyaturnup_watchjazzy, Midori Bikinis, Kanye's Diary, Spokane Fitness Center - North, Spokane Fitness Center - Valley, Okanogan Dogs Adoption Coordinators, Turning Point USA, Omak Stampede, Inc., Donald J. Trump, BluElephant Photography, The Class of 2016, Tasty, Omak-Okanogan County Chronicle, BuzzFeed Video, Poems p**n, Tribal Tribune, Omak School District, Colville Confederated Tribes, KXLY 4 News, The Color Run, Free Bird Espresso, Omak Battleground, Maggie's Omak, Rawson's, Grandmas Attic, okanogan family faire, Omak Pioneer Fastpitch, Snooki, Nike Sportswear, Nike Basketball, The North Face, Gonzaga University, Wilson Baseball / Softball
Nicole Duvernay worked as a Math Teacher for Spokane Community College (SCC) and in 2017 had a reported pay of $72,100 according to public records. This is 11.3 percent higher than the average pay for university and college employees and 17.7 percent higher than the national average for government employees.
Overview
Payroll Year
2017
Name
Duvernay, Nicole
Formatted Name
Nicole Duvernay
State
Washington
Employer/Location
Spokane Community College
Employer/Source
Spokane Community College
Job Title
Mathematics
Formatted Job Title
Math Teacher
Work Details
Government Level
University & College
Agency
Spokane Community College
University/College
Spokane Community College
Clark, Garrett William
Defendant Spokane County Dist 5Z0525173 05-01-2015
Work
Four Seasons Landscaping inc
Laborer . June 2013 to June 2016 . Spokane, Washington
Pro-Formance Lube Center
Education
Spokane Community College
2012 to 2014 . Spokane, Washington
Education
Current
Community Colleges of Spokane
Graduating Class
2015
Hometown
Spokane Valley
Affiliations
Community Colleges of Spokane
East Valley High School
Laborer at The Grounds Guys of Spokane Valley
Worked at Pro-Formance Lube Center
Former Laborer at Four Seasons Landscaping inc
Studied at Spokane Community College
Lives in Spokane, Washington
From Spokane, Washington
Engaged to Hanna Foster
Joined on April 2010
Hostname: www.groundsguys.com
ISP: Hostway Services, Inc.
Continent: North America
Flag: US
Country: United States
Country Code: US
IP Address: 64.70.194.20
Latitude: 37.751
Longitude: -97.822
Favorites
Music
[The South Hill]
The South Hill
Movies
[The Hobbit]
The Hobbit
Games
[Princess Liv]
Princess Liv
Athletes
[Joey Votto]
Joey Votto
Sports Teams
[Cincinnati Reds]
Cincinnati Reds
Sports
[Baseball]
Baseball
Other
Champs Sports, Silver Safari - Valley Mall, Sprint, Reliable Towing, Brianna Rene Fitness, Washington Trails Association, Washington State Parks & Recreation Commission, Mermaid Melissa, The Book of Mormon on Broadway, Took By Snook, Humans of Spokane, Starbucks Frappuccino, Hidden Collective, CAFE, Survival Magazine, Looking Glass Tattoo, Web That Sells, Auto-Vue Drive-In Theatre, Leukemia Awareness, ChaanduActive, Lularoe with Joy Burk, Survivalhikingcampinglife, Legalize it, don't Criticize it, I Go Backpacking, AlpineExpert - Hiking & Camping, Huckberry, Gear Assistant, CancerCon, Stupid Cancer, Idaho Hiking Club, Million Dollar Beard Club, Nugs&Dabs, Nepal Hiking, Only In Washington, Bobby Hill, Hank Hill, Studio Ghibli, Everest Base Camp, The Leukemia & Lymphoma Society, Traverse Northwest, SoDelicious, Sorry I'm just a guy, Marijuana World News, CauseWereGuys, National Academy of Sports Medicine (NASM), Lashes and Locks by Haylee
Name: Tanner Hundahl
https://www.archive.is/hYDH4
Twitter: https://twitter.com/tannerhundahl
Name Court Case Number Judgment Record Court Information
1 Hundahl, Tanner Joseph
Defendant Benton County Dist K00023174 09-16-2016
Intro
Lifeguard at Silverwood Theme Park
Studied at Spokane Community College
Lives in Spokane Valley, Washington
From Kennewick, Washington
Single
About Tanner Hundahl
Work
Silverwood Theme Park
Lifeguard . May 1, 2018 to present
Target
Cashier . November 4, 2017 to present
Education
Kamiakin High School
Aug 2011 to 2015 . Kennewick, Washington
Spokane Community College
Current City and Hometown
Spokane Valley, Washington
Current city
Kennewick, Washington
Hometown
Favorites
Television
[The Walking Dead]
The Walking Dead
Athletes
[Russell Wilson]
Russell Wilson
Sports Teams
[The Bodybuilding Nation]
The Bodybuilding Nation
Other
The Awkward Moment When Your crush ask "who do you like?", Orbit Gum, Vine Videos, Orange Julius Columbia Center Mall, Samsung, Too Small to Fail, Pac-12 Conference, Conrad & Adams Fruit, LLC., Daily Plug, North Idaho Pike Anglers, Bent Trivia, Badger Canyon Herb Co., LLC dba Badger Canyon Herb & Tea, Tyson Patten Page, Tackle Warehouse, SpareFoot, Spokane Bass Club, City Stars Gentlemen's Club, The Wake Up Call, Basscasters, Brooke Thomas, Luke Kehoe Tattoos, Garland Tattoo and Piercing, Anchored Art Tattoo & Gallery, Infamous Tattoo/Jerk Jagger Studios, Deputy Hook'em and Deputy Book'em, Donald J. Trump, Pick Up Lines, Pureledkit, FOOD INSIDER, AJ+, MagiQuiz, Officer Daniels, Lil Mayo, Andrew Michael Dayton Memorial page, KFC, Tostitos, Shelton, Washington, Tri Cities Wrestling Club, Stefanie's Photography, Savanna's Modeling, Gillette, Pray For Kate and Ethan Austin, Kamiakin High School YoungLife, Kamiakin Wrestling, Mid-Columbia Gymnastics & Cheer, Jamie's World, Ford Mustang
Jordyn Christene Noble
Female
From Spokane, Washington
Lives in Spokane, Washington
From Spokane, Washington
Married to Dylan Noble
USERNAME:
jordyissaucy15
ADDITIONAL NAMES:
Jordyn N Reiter , Noble C Jordyn
LOCATION:
Spokane, Washington
About Jordyn Christene Noble
Work
Name Court Case Number Judgment Record Court Information
1 Noble, Jordyn Christene
Defendant Spokane County Dist 18178152 04-09-2018
Jack and Dan's
Server . February 1, 2016 to August 1, 2016 . Spokane, Washington
Current City and Hometown
Spokane, Washington
Current city
Spokane, Washington
Hometown
Favorites
Music
[Chris Brown]
Chris Brown
Books
[A Child Called "It"]
A Child Called "It"
Movies
[Dear John]
Dear John
Television
[Cake Boss]
Cake Boss
Games
[Volleyball]
Volleyball
Athletes
[Reggie Bush]
Reggie Bush
Sports Teams
[Spokane Chiefs]
Spokane Chiefs
Other
Mary Lou's Milk Bottle, Silverwood Theme Park, Wendy's, HonorSociety.org, McDonald's, Ellen DeGeneres, Family in My Heart - Minetees.com, Babies, Power of Positivity, Weird People, Word p**n, 3LittlePitties, Bookkeeper Business Launch, Welcome to the Woods, Capture The Moment Photography, Intelligence is s**y, Positive Energy+, Treat A Dog, I Love Being a Mom, Nucific, Positive Plus, Heaven Soul, The Dodo, Nesting Place, Growing Gracefully, Teach Me Life, Auto-Vue Drive-In Theatre, Art by Aud, Addicted to Saving, The Penny Hoarder, Better Homes & Gardens, Ritual, Succulent Studios, Dezda Finn Properties, LLC, Lil Bit Of Top Knot Grooming, Weber Concrete & Co., Meriah's Esty Life & Lashes, Strong Mind, 100% Dog Lovers, Ashes into Glass, 1 Million Women, Global Buy, Smart School House, Kitchen Fun With My 3 Sons, Dad and Bloated, Cactus & plants in Lattakia syria", Karla's garden, Orquideando, ROSES, Flowers and Gardens, The Church at New Bern, Pittie Nation, Pet Ninja, Savannah Salerno - Coldwell Banker Tomlinson, Offset Solar, TruDog, Dog Pawty, Wood Creations by Mark, BarkBox, ComfyWool, Cheddar, WheelMan Spokane, Mom Date Monday, Jax n Daisy, GoodGood Outdoors, Sand & Sky, Volaire, Classic Dad, Rough Country Rustic Furniture & Decor, Tasty, CJ Darnell-Morrow, Cakes by Spanky, Cupcakes by Ari, Danette May, Pitbulls&Rottweilers, Positive Pitbulls, Animal Rescue Home, Santacon Spokane, The Blvd Coffee Company, On Point Photography By Stephanie Craft, Facebook Marketplace Community, Tip Hero, AWM America, Noland Real Estate, Animal Farm Foundation, LeAnn Allred Fitness, thredUP, Love, s*x, Intelligence, Beauty Bakerie, Spokane Paranormal Investigation Group, HopStop Home Brew & Wine Making Supplies, Jordan Wertman, Buy Nothing Project, KREM 2 News, KHQ Local News, The Grand Latte, Smish Smash Sandwich Co., Big Brothers Big Sisters of the Inland Northwest, Waddell's Brewing Co., Thunder Down Under - The Excalibur, Gary Peterson, Go Pro Floors, Benefit Cosmetics, Drinkery, Rare and Retro Vintage, Nutella, Corset Wedding / Bridal Gowns, Bridal Boutique, Hope For Paws, SIMPLY ELEGANT WEDDING CAKES, Bridesmaid Boutique, Bride and Groom Magazine - Sri Lanka, Funny Wedding Cakes!, The Bride's Diary, TED, Dreamwedding, Miss Missy Photography, Wedding Chicks, Weddingish, Wedding Selections, Engagement 101 Magazine, Health Digest, Baristas Are Awesome, Tarte Cosmetics: Makeup, Luke Bryan Fanss, Alexander York, The Academy, Alexander York The Salon & Barbershop, Rigo Ranch, Too Faced Cosmetics, Top Drawer Cabinets, Deb's Espresso, My Makeup Brush Set, Cedar Crossing Apartments, Hut no. 8 Spokane & Valley, Overstock, Associated Agents Group Inc., Dreamcatchers by Shanda & Lance, Waddell's Neighborhood Pub & Grille, Friendly Christmas Trees - Maui, Bread Tie Challenge, Spokane News, For her and for him, zulily, Emily Doll - The Vintage Doll, Daily Inspirational Quotes, Vintage Life Magazine, Pin-up Style, Fashion Jewellery, Motivational Quotes, Pinup Fashion, Chubby Chico Charms, American Cancer Society Relay For Life, Polar Bears, Country Music, INKED Australia/NZ, Inked Fresh Magazine, Tattoos by myttoos.com, Tattoo Extreme Magazine / ??????, Netflix, Pizza Hut, Verragio Engagement Rings and Wedding Bands, Dairy Queen, Netflix
24
Following Following 42
Followers Followers 62
Jordyn Reiter
@JordynReiter
Joined September 2011
Tweets
Tweets Tweets, current page. Tweets & replies
Jordyn Reiter
? @JordynReiter
27 Mar 2013
This lady driving next to me is wearing a winter coat and a beanie. What? Haha it's spring summer!!
0 replies 0 retweets 0 likes
Jordyn Reiter
? @JordynReiter
21 Feb 2013
That one time you are craving oatmeal and there is none in your whole house ?
0 replies 0 retweets 0 likes
Jordyn Reiter
? @JordynReiter
21 Feb 2013
Try to beat me! My Ruzzle username is 'jo3reiter'. @ruzzlegame http://ruzzle-game.com/download
0 replies 0 retweets 0 likes
Jordyn Reiter
? @JordynReiter
21 Feb 2013
Learning how to work twitter again #confusing
0 replies 0 retweets 0 likes
Jordyn Reiter Retweeted
Amani Amr
? @AmaniiiAmr
20 Feb 2013
the number of calories that I have consumed within the past 25 minutes.. ?
1 reply 1 retweet 1 like
Jordyn Reiter Retweeted
Brigid Rypien
? @brigidryp
18 Feb 2013
If you have ever typed the letters LMS, reevaluate your choices
1 reply 3 retweets 4 likes
Jordyn Reiter
? @JordynReiter
16 May 2012
We have 15 more school days till we graduate!!!! @AmaniiiAmr
0 replies 0 retweets 0 likes
Jordyn Reiter
? @JordynReiter
2 May 2012
The sky is black...hate these days #depressing
0 replies 0 retweets 0 likes
Jordyn Reiter
? @JordynReiter
30 Apr 2012
When you randomly wake up 4 min before your alarm goes off. #weird
0 replies 0 retweets 0 likes
Jordyn Reiter
? @JordynReiter
28 Apr 2012
A dream that I dream will come true(: #Cinderella
0 replies 0 retweets 0 likes
Jordyn Reiter
? @JordynReiter
23 Apr 2012
Speeding ticket payed off!!! #relieved
0 replies 0 retweets 0 likes
Jordyn Reiter
? @JordynReiter
20 Apr 2012
Cake batter #addicting
0 replies 0 retweets 0 likes
Jordyn Reiter
? @JordynReiter
28 Mar 2012
Wish I had a credit card that always had money on it #broke
0 replies 0 retweets 0 likes
Jordyn Reiter
? @JordynReiter
22 Mar 2012
RT @ShelbyAngstrom How tired you get after #crying, its like your body's way of saying "you've suffered enough tonight, get some rest"
0 replies 0 retweets 0 likes
Jordyn Reiter
? @JordynReiter
19 Mar 2012
Wanted to sleep in today :/ #tired
0 replies 0 retweets 0 likes
Jordyn Reiter
? @JordynReiter
18 Mar 2012
RT @12Rockyy I really want a personal trainer
0 replies 0 retweets 0 likes
Jordyn Reiter
? @JordynReiter
28 Nov 2011
@Thee_ZABORSKI i ruv you(:
0 replies 0 retweets 0 likes
Jordyn Reiter
? @JordynReiter
8 Nov 2011
@12Rockyy im not!! lol
0 replies 0 retweets 0 likes
Jordyn Reiter
? @JordynReiter
8 Nov 2011
sooooooo bored. got ditched by an a*****e i should have never made plans with!!!!
0 replies 0 retweets 1 like
Jordyn Reiter
? @JordynReiter
26 Sep 2011
finally got one because REKIYAH made me lol
0 replies 0 retweets 0 likes
Christopher Michael Riley
IP Address: 192.188.250.90
Favorites
Television
[Tucker Carlson Tonight]
Tucker Carlson Tonight
Games
[Overwatch]
Overwatch
Athletes
[Spider Man]
Spider Man
Other
Fallout Memes, For The Win, Gaming Never Dies, b***h Please, I'm a Pokemon Trainer, We Love Pkmn, I Love Cats, Squatting Slavs In Tracksuits, CJ Pearson, Unprofessional Madman, GameSpot, Social Justice Warriors 5: Backup, Jenna's Pies - Charity Pie Sales, Steven Crowder, CollegeHumor, GanonDork, LGBTQ@Facebook, Student Problems, We the Internet TV, Blaire White, Social Justice Warriors, The Anti Feminist Bank, The Pathetic Life of an Average /k/ommando Backup, Ben Shapiro, Rated Red, Stefan Molymemes, Senator Chris McDaniel, The Pathetic Life of an Average /k/ommando, RWBY Nation, RWBY Memes, Star Wars Universe, Paul Joseph Watson, UNILAD, RWBY Universe, Milo Yiannopoulos, Overwatch: Memes, 4chan Memes and Other Creamy Supremes, Gaaaaaaaaaaary, Triggering Memes for Regressive Teens II, Degeneracy Sucks & So Do You, Pokemon Fusion Art, vonvon, God Emperor Trump, 4chan /g/ that actually posts stuff from /g/, Politically Incorrect - /pol/, k**t Boy and Lava CIit, 4channel, The Joker Unleashed, Deadpool, Lonk, Harambe, Bored AF, Cyanide & Happiness, 4chan, OverMeme - Overwatch Memes, PUNtastic, Arby's, Arekkz Gaming, Microsoft, Xbox, Nintendo, Apex Gaming, Jamie Costa, Monster Hunter's Tavern, Ranker, Teostra, The Monster Hunter Guild, GameZone, Anime Fandom, Sangheili, Like A Boss, Drew's Reviews, The Legend of Zelda: Twilight Princess, Brendan, Master of the Hoenn League, Video Games Talk, Drax: The Destroyer, Tony Stark, Rosalina, Rocket Raccoon, I am Groot, Shadow Lugia, Anime Ecchi y algo mas, Primal Rayquaza, Sword Art Online II Br, Fairy Tail Couples, Legend of Zelda Family, Pokelogic, Pokemon Global News, Scizor The Hard One
Case No: IN0491307 - HUMPHREY, CORY JAMES
Print
Charges 46.16.010.3.O-FL RENEW EXPIRED REG > 2 MTHS; 46.16.010.3.O-FL RENEW EXPIRED REG > 2 MTHS; 46.30.020-OP MOT VEH W/OUT INSURANCE; 46.30.020-OP MOT VEH W/OUT INSURANCE
Case Type Infraction Traffic-IT
LEA SPOKANE COUNTY SHERIFF
Jurisdiction Spokane County
Incident #
Court District Court
Case File Date 08/26/2008
Case Status Closed - 09/29/2017
2017-09-29 Case Obligation Removed from Collections
2017-09-29 17275100009 Penalty Payment Paid in Full 200.92 Case Closed
2017-09-29 PD BY VEC CK 5634
2017-09-25 PD IN FULL, CC, INVOICE 388771
2017-09-25 FTR Adjudicated: Case Paid
2017-09-25 DOL will not be notified of this adjudication
2017-09-25 CLEARED THROUGH IHIPS
2017-08-24 17235101918 Partial Fine Payment Received 56.00
2017-08-24 PD BY VEC CK # 5537
2017-08-10 17221101083 Partial Fine Payment Received 68.96
2017-08-10 PD BY VEC CK 5497
2017-07-13 17193101145 Partial Fine Payment Received 117.12
2017-07-13 PD BY VEC CK 5419
2015-05-15 *INFRACTION CITATION-SCANNED*
2015-05-15 *AFFIDAVIT-SCANNED*
2015-05-15 ****************TO BE SHREDDED IN 90 DAYS********************
2011-08-18 DEF CLLD REFERRED HIM TO VEC
2011-01-14 Case Obligation Assigned to VALLEY EMPIRE COLLECTION for Collections
2010-12-10 Collections: 1st Notice Prepared
2010-12-07 NOTICE OF TERMINATION FILED: X INVOLUNTARY / VOLUNTARY
2010-12-07 INVOLUNTARY TERMINATION PRIOR TO PROGRAM ENTRY
2010-12-07 ON THE ORDER DATE, THE DEFENDANT WAS TERMINATED FROM THE
2010-12-07 RELICENSING PROGRAM FOR THE FOLLOWING REASON.
2010-12-07 FAILURE TO APPEAR:
2010-12-07 60 DAY 90 DAY 120 DAY REVIEW.
2010-12-07 FAILURE TO COMPLY:
2010-12-07 LIVING SKILLS X PAYMENTS DRIVING BEHAVIOR
2010-12-07 OTHER.
2010-12-07 NOTICE OF TERMINATION MAILED TO DEF BY PROS OFFICE. FTA
2010-12-07 REISSUED AS INDICATED BY ORDER ONLY.
2010-12-07 FTR Ordered
2010-12-07 Case Obligation Removed from Collections
2010-12-07 Case Obligation Selected for Collections
2010-12-07 FTR Issued, Amount Due 443.00
2010-10-27 10300101967 Partial Fine Payment Received 25.00
2010-10-27 PD BY PAR CK 2401
2010-09-29 10272100535 Partial Fine Payment Received 25.00
2010-09-29 PD BY PAR CK 2365
2010-09-01 10244200443 Partial Fine Payment Received 25.00
2010-09-01 PD BY PAR CK 2351
2010-07-22 10203101042 Partial Fine Payment Received 50.00
2010-07-22 PD BY PAR CK 2323
2010-06-02 10153101213 Partial Fine Payment Received 25.00
2010-06-02 PD BY PAR CK 2289
2010-05-03 10123201201 Partial Fine Payment Received 25.00
2010-05-03 PD BY PAR CK 2266
2010-04-02 10093100525 Partial Fine Payment Received 25.00
2010-04-02 PD BY PAR CK 2247
2010-03-03 10062102029 Partial Fine Payment Received 25.00
2010-03-03 PD BY PAR CK 2227
2010-01-26 10026101956 Partial Fine Payment Received 25.00
2010-01-26 PAID BY PAR CK 2203
2009-12-30 9363102954 Partial Fine Payment Received 25.00
2009-12-30 PD BY PAR CK 2184
2009-12-02 9336100812 Partial Fine Payment Received 25.00
2009-12-02 PD BY PAR CK 2165
2009-10-20 9293100553 Partial Fine Payment Received 25.00
2009-10-20 PAID BY PAR CK 2136
2009-09-23 9266101955 Partial Fine Payment Received 25.00
2009-09-23 PAID BY PAR CK 2120
2009-08-19 9231100516 Partial Fine Payment Received 25.00
2009-08-19 PAID BY PAR CK 2096
2009-07-02 RELICENSING PROJECT TIER 1 PARTICIPATION NOTIFICATION FILED.
2009-07-02 INITIATE ACTIONS PER GENERAL ORDER# 01-2008
2009-07-02 TRANSFER ALL CASES UNDER ORDER TO PAR STATUS FOR PAYMENT.
2009-07-02 PAYMENT SET AT $25.00 PER MONTH COMMENCING IN AUGUST OF 2009,
2009-07-02 WITH MONTHLY PAYMENTS DUE THEREAFTER BY THE 20TH DAY TO PAR
2009-07-02 UNTIL; 1)SUCH FINES/CIVIL PENALTIES ARE PIF, 2) FURTHER COURT
2009-07-02 ORDER, 3) NOTICE OF TERMINATION IS FILED OR 4)DEFAULT STATUS
2009-07-02 OF THE PAYMENT PLAN OCCURS DURING OR AFTER COMPLETION STATUS.
2009-07-02 FAILURE TO PAY WILL LEAD TO FTA/S BEING REISSUED, FULL
2009-07-02 COLLECTION STATUS AND ADDITIONAL FEES OR FINES. INCLUDES
2009-07-02 IN491307
2009-07-02 FTR Adjudicated: Court Appearance Scheduled
2009-07-02 Case Obligation Removed from Collections
2009-07-02 Collection Status Manually Assigned to PAR ACCEPTANCE CORPORATION
2009-07-02 FTA adjudication automatically sent to DOL
2008-11-10 Case Obligation Assigned to VALLEY EMPIRE COLLECTION for Collections
2008-10-06 Collections: 1st Notice Prepared
2008-09-30 Accounts Receivable Created 818.00
2008-09-30 FTR Ordered
2008-09-30 Case Obligation Selected for Collections
2008-09-30 Finding/Judgment of COMMITTED for Charge 01
2008-09-30 Finding/Judgment of COMMITTED for Charge 02
2008-09-30 FTR Issued, Amount Due 818.00
2008-08-29 DEF 1 HUMPHREY, CORY JAMES Added as Participant
2008-08-29 OFF 1 KNIGHT, DP Added as Participant
2008-08-29 JTR fee included in the bail amount
2008-08-26 Case Filed on 08/26/2008
CORY JAMES HUMPHREY
Record ID: 127441864
ID Case Number: SPOKANE COUNTY DISTRICT COURTCB0045312
Last Name: HUMPHREY
First Name: CORY
Middle Name: JAMES
DOB: 20/06/1983
Charges Filed Date: 11/12/2001
Offense Date: 08/12/2001
Offense Code: 46.61.500
Offense Description: RECKLESS DRIVING
Disposition: Amended
Disposition Date: 23/01/2002
Fines: 000025000
Source State: WA
BUY FULL REPORT
CORY JAMES HUMPHREY
Record ID: 127441865
ID Case Number: SPOKANE COUNTY DISTRICT COURTCB0045312
Last Name: HUMPHREY
First Name: CORY
Middle Name: JAMES
DOB: 20/06/1983
Charges Filed Date: 11/12/2001
Offense Date: 08/12/2001
Offense Code: 46.61.525
Offense Description: NEGLIGENT DRIVING 2ND DEGREE
Disposition: Committed
Disposition Date: 22/01/2002
Fines: 000025000
Source State: WA
Ruvim M Gavrilyuk
https://www.youtube.com/channel/UCL_gP_xs55d3gag2QbF8idQ/featured
https://archive.is/r5NXY [Small-time wannabe black-hat hacker on Minecraft]
IP Address
97.114.69.161
Found an IP/URL artifact that was identified as malicious by at least one reputation engine
details
1/76 reputation engines marked "http://ocsp.trust-provider.com" as malicious (1% detection rate)
source
External System
relevance
10/10
Network Related
Malicious artifacts seen in the context of a contacted host
details
Found malicious artifacts related to "23.35.71.67": ...
URL: https://www.chip.de/downloader/?pid=focus&cid=54418612&browser=unknown&lastchange=1517766291&source=landingpage (AV positives: 2/76 scanned on 03/26/2020 04:46:23)
URL: http://downloaderapi.chip.de/download/54406063/?app_key=c6bbb44ff3856592ea1486159ac37d8e (AV positives: 2/76 scanned on 03/26/2020 04:41:12)
URL: https://www.psicars.com/ (AV positives: 2/71 scanned on 02/24/2020 04:01:17)
URL: https://www.firsthorizon.com/products-and-services/borrowing/credit-cards?msclkid=f32361d051e51fca7a5c3ff9e63b4c17 (AV positives: 3/72 scanned on 02/11/2020 05:04:07)
URL: https://www.firsthorizon.com/ (AV positives: 2/72 scanned on 02/10/2020 19:27:40)
File SHA256: f98bc99cb8160d4e7f19fb76410ca4fab37c3d3dbfef6123b54c6c78d0be174c (AV positives: 42/72 scanned on 03/23/2020 01:41:32)
Found malicious artifacts related to "74.125.192.155": ...
URL: https://stats.g.doubleclick.net/r/collect?v=1&aip=1&t=dc&_r=3&tid=UA-51915447-1&cid=1561689094.1430196265&jid=1743330473&_v=j35&z=1388274836 (AV positives: 1/63 scanned on 04/28/2015 04:45:35)
URL: https://stats.g.doubleclick.net/r/collect?v=1&aip=1&t=dc&_r=3&tid=UA-51915447-1&cid=982038166.1430196095&jid=339211618&_v=j35&z=1108641866 (AV positives: 1/63 scanned on 04/28/2015 04:43:02)
URL: https://stats.g.doubleclick.net/r/collect?v=1&aip=1&t=dc&_r=3&tid=UA-51915447-1&cid=616252409.1430195976&jid=803007462&_v=j35&z=1987499391 (AV positives: 1/63 scanned on 04/28/2015 04:40:47)
URL: https://stats.g.doubleclick.net/r/collect?v=1&aip=1&t=dc&_r=3&tid=UA-51915447-1&cid=789606747.1430195847&jid=2024444283&_v=j35&z=618399270 (AV positives: 1/63 scanned on 04/28/2015 04:39:59)
URL: https://stats.g.doubleclick.net/r/collect?v=1&aip=1&t=dc&_r=3&tid=UA-51915447-1&cid=1863498444.1430195804&jid=1759761465&_v=j35&z=1909541938 (AV positives: 1/63 scanned on 04/28/2015 04:38:57)
File SHA256: bfb33147f9b8bd5db589d5354a0d477217a926f8cd92617fc56467875f589086 (Date: 04/25/2019 03:59:15)
File SHA256: 8679362afe8969e39c8a67bd10dc4f154067e9b1c67b774f41efb11315df5314 (AV positives: 20/53 scanned on 08/31/2014 19:10:16)
File SHA256: e717b4a152e1951565d90cd594868766146f57248bc9e1e37f317f7234fd5f15 (AV positives: 1/52 scanned on 07/14/2014 16:36:14)
File SHA256: 18cda4fc1d191ed1d9e2dd77513a0e7cb928651510b1053049e8cd86e4cf1886 (AV positives: 1/50 scanned on 06/05/2014 12:00:08)
File SHA256: 38b88de0565dee0113b4576650a26548c5f95f1a1ab4ed96dfc5f07ce80503bb (AV positives: 1/51 scanned on 02/15/2014 02:41:46)
File SHA256: 77e0d97c5e8f1ebcbe5946a714f6118a335868f26474fc67533212209aaeb5cc (AV positives: 2/50 scanned on 01/28/2014 14:43:50)
Found malicious artifacts related to "108.174.10.10": ...
URL: https://lnkd.in/fycrnud (AV positives: 6/76 scanned on 03/29/2020 14:58:48)
URL: https://lnkd.in/eqNTnyy (AV positives: 6/76 scanned on 03/29/2020 06:02:22)
URL: http://lnkd.in/gdaw-b2 (AV positives: 4/76 scanned on 03/29/2020 00:30:22)
URL: http://lnkd.in/f3vMe3e (AV positives: 5/76 scanned on 03/28/2020 01:29:52)
URL: http://lnkd.in/gyj7crg?idtrack=ka6uc68o (AV positives: 4/76 scanned on 03/27/2020 14:59:30)
File SHA256: 09d2c9944582dab6475d519fbfc08dee1d0eedd821b2853ae0b74bc664bfbc6a (Date: 03/29/2020 12:32:40)
File SHA256: e31e809fad7b9b4acd911c9dcbaafac39d8e8697a1361a0c780a1f266d96926a (Date: 03/29/2020 07:53:21)
File SHA256: bd7596d4aea2b20e21f2a53f6928075bacf36109e4f9d19e786309c086c46a79 (Date: 03/28/2020 09:38:55)
File SHA256: 7dcd4f08314907574ebbf4a58daee519fa6296658476da0cda4a053d81fbd452 (Date: 03/28/2020 04:48:59)
File SHA256: f6ca90a2f27a0e40a0325b1e283ad1a4a4cadfacd051b1fadba9a3e321bfa81d (Date: 03/28/2020 03:11:04)
File SHA256: d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3 (AV positives: 1/73 scanned on 03/14/2020 09:13:13)
File SHA256: 84f1d1ffdc036768ffeba1be92362dcf619e7ce6ec27500ab47844ed24fc4230 (AV positives: 20/74 scanned on 03/06/2020 16:28:05)
File SHA256: 92724fa6e5728c5e46df11dc2c8e57c75f051ed8d1ce843e8a4b1cb9de05d2e9 (AV positives: 1/75 scanned on 02/21/2020 17:11:57)
File SHA256: d0d92045526c516afec269826eb681ef55df6353dd9d131bc58a1b19042b7c6c (AV positives: 1/74 scanned on 02/05/2020 20:00:22)
File SHA256: 37ce6b6f7a4026a69784ee202283bb4d9f13651b84cb1abaec0ca4f359514a0b (AV positives: 27/75 scanned on 02/03/2020 21:08:12)
source
Network Traffic
relevance
10/10
Sends traffic on typical HTTP outbound port, but without HTTP header
details
TCP traffic to 35.227.45.219 on port 80 is sent without HTTP header
TCP traffic to 35.227.45.219 on port 443 is sent without HTTP header
TCP traffic to 192.124.249.23 on port 80 is sent without HTTP header
TCP traffic to 34.98.83.188 on port 443 is sent without HTTP header
TCP traffic to 172.217.11.8 on port 443 is sent without HTTP header
TCP traffic to 172.217.4.195 on port 80 is sent without HTTP header
TCP traffic to 157.240.11.35 on port 443 is sent without HTTP header
TCP traffic to 151.101.196.157 on port 443 is sent without HTTP header
TCP traffic to 172.217.10.142 on port 443 is sent without HTTP header
TCP traffic to 108.174.10.14 on port 443 is sent without HTTP header
TCP traffic to 172.217.10.226 on port 443 is sent without HTTP header
TCP traffic to 172.217.11.38 on port 443 is sent without HTTP header
TCP traffic to 35.186.249.72 on port 443 is sent without HTTP header
TCP traffic to 13.249.128.202 on port 443 is sent without HTTP header
TCP traffic to 23.35.71.67 on port 443 is sent without HTTP header
TCP traffic to 23.35.68.10 on port 80 is sent without HTTP header
TCP traffic to 74.125.192.155 on port 443 is sent without HTTP header
TCP traffic to 104.244.42.133 on port 443 is sent without HTTP header
TCP traffic to 104.244.42.67 on port 443 is sent without HTTP header
TCP traffic to 108.174.10.10 on port 443 is sent without HTTP header
source
Network Traffic
relevance
5/10
Uses a User Agent typical for browsers, although no browser was ever launched
details
Found user agent(s): Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko
source
Network Traffic
relevance
10/10
Unusual Characteristics
Installs hooks/patches the running process
details
"iexplore.exe" wrote bytes "3030596d" to virtual address "0x75231380" (part of module "SHLWAPI.DLL")
"iexplore.exe" wrote bytes "b033596d" to virtual address "0x73A01250" (part of module "UXTHEME.DLL")
"iexplore.exe" wrote bytes "60cd5c6d" to virtual address "0x7523130C" (part of module "SHLWAPI.DLL")
"iexplore.exe" wrote bytes "60cd5c6d" to virtual address "0x75BA1E14" (part of module "SHELL32.DLL")
"iexplore.exe" wrote bytes "b033596d" to virtual address "0x757A1164" (part of module "USP10.DLL")
"iexplore.exe" wrote bytes "b033596d" to virtual address "0x76C71100" (part of module "MSCTF.DLL")
"iexplore.exe" wrote bytes "b033596d" to virtual address "0x754D1210" (part of module "IMM32.DLL")
"iexplore.exe" wrote bytes "a035596d" to virtual address "0x73A0139C" (part of module "UXTHEME.DLL")
"iexplore.exe" wrote bytes "b033596d" to virtual address "0x75A214E0" (part of module "USER32.DLL")
"iexplore.exe" wrote bytes "a035596d" to virtual address "0x7523131C" (part of module "SHLWAPI.DLL")
"iexplore.exe" wrote bytes "b033596d" to virtual address "0x75AF17CC" (part of module "ADVAPI32.DLL")
"iexplore.exe" wrote bytes "a035596d" to virtual address "0x76B8B0CC" (part of module "IERTUTIL.DLL")
"iexplore.exe" wrote bytes "b033596d" to virtual address "0x012A70C0"
"iexplore.exe" wrote bytes "70cc5c6d" to virtual address "0x75231310" (part of module "SHLWAPI.DLL")
"iexplore.exe" wrote bytes "a035596d" to virtual address "0x754D1064" (part of module "IMM32.DLL")
"iexplore.exe" wrote bytes "b033596d" to virtual address "0x759D11BC" (part of module "GDI32.DLL")
"iexplore.exe" wrote bytes "b033596d" to virtual address "0x6E12F6A0" (part of module "IEFRAME.DLL")
"iexplore.exe" wrote bytes "60d25c6d" to virtual address "0x75BA1D7C" (part of module "SHELL32.DLL")
"iexplore.exe" wrote bytes "b033596d" to virtual address "0x752311B8" (part of module "SHLWAPI.DLL")
"iexplore.exe" wrote bytes "a035596d" to virtual address "0x75BA202C" (part of module "SHELL32.DLL")
source
Hook Detection
relevance
10/10
Phishing attempt by User of blacklisted Canadian IP 70.50.227.57 (Return-Path: johngreen@solicitors.org
IP: 70.50.227.57 ;
Located in Toronto, Ontario, Canada.
ISP: Bell Canada.
Source Host: TOROON12-1177740089.sdsl.bell.ca ;
Organization: Sympatico ;
Received: from mail.tranquinet.com ([213.195.72.46])
Received: from User [70.50.227.57] by mail.tranquinet.com with ESMTP (SMTPD32-6.06) id A98F1BBE00E4;
Mon, 25 Jun 2012 17:53:51 +0200
Reply-To: <jgreenesq@consultant.com>
From: "John Green"<johngreen@solicitors.org>
Subject: RE: (YOUR REF: PAG/A0511007)
2.)
419 Phish by User of IP 77.231.82.172 and sent via host uva.uvaolhost.com.br by authenticated_id: palazzolouniao@uvaol.com.br ;
Fraudster details in phish-
Reply-To: <unitednationsoffice001@consultant.com>
&
United Nations Office Representatives In Nigeria
Contact Information Officer: Mr. Donald Bold
Email: mrdonaldbold@yahoo.com
Tele:+2348182595393<
Received: from uva.uvaolhost.com.br ([142.4.31.38]) by COL004-MC4F31.hotmail.com over TLS secured channel with Microsoft SMTPSVC(7.5.7601.22712);
Sat, 26 Jul 2014 19:34:59 -0700
Received: from [77.231.82.172] (port=3638 helo=User)
by uva.uvaolhost.com.br with esmtpa (Exim 4.82)
(envelope-from <info@unitednations.org>)
id 1XBEIb-00022U-12; Sat, 26 Jul 2014 23:34:58 -0300
Reply-To: <unitednationsoffice001@consultant.com>
From: "FROM UNITED NATIONS OFFICE"<info@unitednations.org>
Subject: YOU HAVE TO CONTACT THE RIGHT OFFICE FOR YOUR FUNDS
Date: Sun, 27 Jul 2014 04:31:55 +0200
xxxxx
X-AntiAbuse: Sender Address Domain - unitednations.org
X-Get-Message-Sender-Via: uva.uvaolhost.com.br: authenticated_id: palazzolouniao@uvaol.com.br
Return-Path: info@unitednations.org
ETC Less
Spamvertized STOOGE Site. Spam Distributors, Tracking & Redirection - Illegal Phishing/ID Theft Scams.
- Site associated with World.com Media Group LLC., a mass-Spamming/Scamming site host who promotes Spam, Scams and Phishing.
- These scammers are only after your Identity and credit card information.
- Do not click on links found in spam e-mail messages or these websites.
- Do not become their next victim.
These sites are associated with criminals by knowingly violating US Law.
Site Willingly and Knowingly Violates the US CAN-SPAM Act by sending or have sent on their behalf UCE "Spam" to Non-Opt-In email accounts, violating Federal Law, which is a criminal act! Which of course sounds nothing like how a legitimate and reputable company would do business.
Avira malware site
ESET suspicious site
Header returned by request for: http //redifbsm4 top/?237 -> 69.89.31.169
HTTP/1.1 200 OK
Server: nginx/1.14.1
Date: Thu, 05 Sep 2019 02:08:00 GMT
Content-Type: text/html
Content-Length: 822
Connection: close
Last-Modified: Sat, 10 Aug 2019 00:27:18 GMT
Accept-Ranges: bytes
Cache-Control: max-age=0, no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: Fri, 13 Feb 1976 06:00:00 GMT
Content that was returned by your request for the URL: http //redifbsm4 top/?237
1: < !DOCTYPE html>
2: < html>
3: < head>
4: < meta charset="utf-8">
5: < title> Redirecting...< /title>
7: < !-- Default Statcounter code for 0-FBS-Redifbsm4.top
8: http://redifbsm4.top -->
9: < script type="text/javascript">
10: var sc_project=12044319;
11: var sc_invisible=1;
12: var sc_security="ec90d266";
13: < / script >
14: < script type="text/javascript"
15: src="https://www.statcounter.com/counter/counter.js"
16: async> < / script >
17: < no- script > < div class="statcounter"> < a title="Web Analytics"
18: href="https://statcounter.com/" target="_blank"> < img
19: class="statcounter"
20: src="https://c.statcounter.com/12044319/0/ec90d266/1/"
21: alt="Web Analytics"> < /a> < /div> < /no- script >
22: < !-- End of Statcounter Code -->
25: < script language="javascript">
26: setTimeout("top.location.href = 'http://pofheadlines.com/all/fb/'",2000);
27: < / script >
29: < /head>
30: < body>
31: < p> Please wait...< /p>
32: < /body>
33: < /html>
Hybrid Analysis Report
https://www.hybrid-analysis.com/sample/7ba772f7f6ef25875c7f10ad48af6d5ecdf7f54d3956464e88696db9b9de6385/5e826523e4493b3af1760656
Malicious artifacts seen in the context of the input URL
details
Found malicious artifacts related to the input domain "http://redifbsm4.top" (IP: 69.89.31.169): ...
URL: https://pofheadlines.com/ (AV positives: 1/76 scanned on 03/28/2020 00:51:26)
URL: http://sportsandmedia.com/U3/onlineid.php (AV positives: 3/76 scanned on 03/21/2020 04:24:02)
URL: http://pofheadlines.com/best-plenty-of-fish-headlines/ (AV positives: 2/72 scanned on 02/22/2020 22:20:59)
URL: https://pofheadlines.com/wp-includes/js/jquery/jquery.js?ver=1.12.4 (AV positives: 2/72 scanned on 02/22/2020 03:52:06)
URL: https://pofheadlines.com/xmlrpc.php (AV positives: 2/72 scanned on 02/19/2020 22:43:09)
File SHA256: 03f7b1097f58d1dd9bb791cc9e21e416d1fdfa0b758af6aa7714edddc752a5ea (AV positives: 4/73 scanned on 01/10/2020 01:34:10)
File SHA256: b1ec43bf9699682442f816152032e426a2673107b668ccd541ba1f824d589029 (AV positives: 5/74 scanned on 01/09/2020 01:04:36)
File SHA256: 67d353a19eee55b044861ef40ec1da8519f1b7300bce30a6a4c250e19788abf9 (AV positives: 1/73 scanned on 06/12/2019 03:55:28)
File SHA256: c8d62662b0e43429408de3579e9be5038385ff532fd2b9af52a09951030bc01d (AV positives: 1/72 scanned on 06/05/2019 21:40:23)
File SHA256: 93b262f676510c4006baa6cdb95735b5caa7ddfa1524a92a6022a01dc01c9ad4 (AV positives: 1/72 scanned on 04/08/2019 00:29:04)
File SHA256: 56deec984a97d4066258357f7e59739f9161e51e6fa74d0d8e3c173229f2a928 (Date: 10/24/2017 23:56:51)
File SHA256: 4e00b102f3e0ebd9273aee350a21d806182035c9c0cca635688d10ddc2d6a8e5 (Date: 10/24/2017 23:53:24)
source
Network Traffic
relevance
10/10
ATT&CK ID T1035
Tactics Execution
Permissions Required Administrator, SYSTEM
Description Adversaries may execute a binary, command, or script via a method that interacts with Windows services, such as the Service Control Manager(...)
Source https://attack.mitre.org/techniques/T1035
Informative Indicators
Opened the service control manager
ATT&CK ID T1179
Tactics Persistence, Privilege Escalation, Credential Access
Permissions Required Administrator, SYSTEM
Description Windows processes often leverage application programming interface (API) functions to perform tasks that require reusable system resources(...)
Source https://attack.mitre.org/techniques/T1179
Informative Indicators
Installs hooks/patches the running process
ATT&CK ID T1112
Tactics Defense Evasion
Permissions Required User, Administrator, SYSTEM
Description Adversaries may interact with the Windows Registry to hide configuration information within Registry keys, remove information as part of cleaning up, or as part of other techniques to aid in Persistence and Execution(...)
Source https://attack.mitre.org/techniques/T1112
Informative Indicators
Accesses System Certificates Settings
ATT&CK ID T1012
Tactics Discovery
Permissions Required User, Administrator, SYSTEM
Description Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software(...)
Source https://attack.mitre.org/techniques/T1012
Informative Indicators
Reads the registry for installed applications
Reads the Equation Editor Class Identifier (CLSID)
Accesses Software Policy Settings
ATT&CK ID T1043
Tactics Command and Control
Description Adversaries may communicate over a commonly used port to bypass firewalls or network detection systems and to blend with normal network activity to avoid more detailed inspection(...)
Source https://attack.mitre.org/techniques/T1043
Suspicious Indicators
Sends traffic on typical HTTP outbound port, but without HTTP header
malicious
Threat Score: 89/100 AV Detection: Marked as clean Labeled as: Unrated site
http://datingdoctor.com/
This report is generated from a file or URL submitted to this webservice on April 12th 2020 22:16:31 (UTC) and action script Default browser analysis
Guest System: Windows 7 32 bit, Professional, 6.1 (build 7601), Service Pack 1
Report generated by Falcon Sandbox v8.30 (C) Hybrid Analysis
Incident Response
Risk Assessment
Spyware
POSTs files to a webserver
Network Behavior
Contacts 9 domains and 10 hosts.
MITRE ATT&CK(TM) Techniques Detection
This report has 7 indicators that were mapped to 7 attack techniques and 7 tactics.
MITRE ATT&CK(TM) Technique - T1035 - Service Execution
ATT&CK ID T1035
Tactics Execution
Permissions Required Administrator, SYSTEM
Description Adversaries may execute a binary, command, or script via a method that interacts with Windows services, such as the Service Control Manager(...)
Source https://attack.mitre.org/techniques/T1035
Informative Indicators
Opened the service control manager
MITRE ATT&CK(TM) Technique - T1179 - Hooking
ATT&CK ID T1179
Tactics Persistence, Privilege Escalation, Credential Access
Permissions Required Administrator, SYSTEM
Description Windows processes often leverage application programming interface (API) functions to perform tasks that require reusable system resources(...)
Source https://attack.mitre.org/techniques/T1179
Informative Indicators
Installs hooks/patches the running process
MITRE ATT&CK(TM) Technique - T1179 - Hooking
ATT&CK ID T1179
Tactics Persistence, Privilege Escalation, Credential Access
Permissions Required Administrator, SYSTEM
Description Windows processes often leverage application programming interface (API) functions to perform tasks that require reusable system resources(...)
Source https://attack.mitre.org/techniques/T1179
Informative Indicators
Installs hooks/patches the running process
MITRE ATT&CK(TM) Technique - T1112 - Modify Registry
ATT&CK ID T1112
Tactics Defense Evasion
Permissions Required User, Administrator, SYSTEM
Description Adversaries may interact with the Windows Registry to hide configuration information within Registry keys, remove information as part of cleaning up, or as part of other techniques to aid in Persistence and Execution(...)
Source https://attack.mitre.org/techniques/T1112
Informative Indicators
Accesses System Certificates Settings
MITRE ATT&CK(TM) Technique - T1179 - Hooking
ATT&CK ID T1179
Tactics Persistence, Privilege Escalation, Credential Access
Permissions Required Administrator, SYSTEM
Description Windows processes often leverage application programming interface (API) functions to perform tasks that require reusable system resources(...)
Source https://attack.mitre.org/techniques/T1179
Informative Indicators
Installs hooks/patches the running process
MITRE ATT&CK(TM) Technique - T1043 - Commonly Used Port
ATT&CK ID T1043
Tactics Command and Control
Description Adversaries may communicate over a commonly used port to bypass firewalls or network detection systems and to blend with normal network activity to avoid more detailed inspection(...)
Source https://attack.mitre.org/techniques/T1043
Suspicious Indicators
Sends traffic on typical HTTP outbound port, but without HTTP header
Indicators
Not all malicious and suspicious indicators are displayed. Get your own cloud service or the full version to view all details.
Malicious Indicators 1
Network Related
Malicious artifacts seen in the context of the input URL
details
Found malicious artifacts related to the input domain "http://datingdoctor.com" (IP: 50.116.114.76): ...
URL: https://nepalaya.org.np/ (AV positives: 2/77 scanned on 04/11/2020 04:55:10)
URL: http://buddhabeautysalon.com/wp-includes/images/micro8/step2.php (AV positives: 6/72 scanned on 03/03/2020 17:24:09)
URL: http://nepalaya.org.np/ (AV positives: 1/72 scanned on 01/16/2020 14:58:42)
URL: http://sunrisefoodindustry.com/ (AV positives: 3/72 scanned on 12/05/2019 18:58:11)
URL: http://witsend.co.nz/js/extjs/resources/images/magento/layout/uol/atualize/pagamento/index3.html (AV positives: 6/71 scanned on 10/03/2019 16:47:25)
File SHA256: 0ff0b7fcb090c65d0bdcb2af4bbd2c30f33356b3ce9b117186fa20391ef840a3 (AV positives: 6/72 scanned on 12/05/2019 05:07:00)
File SHA256: 6a67d85a3740ab6e955afd67cc06d70b48e8b94551b689434b79262256c2843a (AV positives: 1/69 scanned on 07/24/2018 00:08:49)
File SHA256: c334ba2996f9cd6effb0a958e55bd956b4d7bdc98961bf808a91884699088d10 (AV positives: 2/57 scanned on 07/16/2017 08:55:48)
source
Network Traffic
relevance
10/10
Suspicious Indicators 9
External Systems
Found an IP/URL artifact that was identified as malicious by at least one reputation engine
details
2/76 reputation engines marked "http://forms.mailmunch.co" as malicious (2% detection rate)
1/71 reputation engines marked "http://a.mailmunch.co" as malicious (1% detection rate)
source
External System
relevance
10/10
General
POSTs files to a webserver
details
"POST /?wc-ajax=get_refreshed_fragments HTTP/1.1
Accept: */*
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Referer: http://datingdoctor.com/
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko
Host: datingdoctor.com
Content-Length: 18
DNT: 1
Connection: Keep-Alive
Cache-Control: no-cache
Cookie: PHPSESSID=899556a4327fe08626eb56774a98b95a; mailmunch_second_pageview=true; mo_page_views_counter=1; mo_is_new=true; mo_has_visited=true" with no payload
source
Network Traffic
relevance
5/10
Network Related
Found potential IP address in binary/memory
details
Heuristic match: "/wp-content/plugins/mailoptin/src/core/src/assets/js/mailoptin.min.js?ver=1.2.27.0"
source
String
relevance
3/10
Malicious artifacts seen in the context of a contacted host
details
Found malicious artifacts related to "50.116.114.76": ...
URL: https://nepalaya.org.np/ (AV positives: 2/77 scanned on 04/11/2020 04:55:10)
URL: http://buddhabeautysalon.com/wp-includes/images/micro8/step2.php (AV positives: 6/72 scanned on 03/03/2020 17:24:09)
URL: http://nepalaya.org.np/ (AV positives: 1/72 scanned on 01/16/2020 14:58:42)
URL: http://sunrisefoodindustry.com/ (AV positives: 3/72 scanned on 12/05/2019 18:58:11)
URL: http://witsend.co.nz/js/extjs/resources/images/magento/layout/uol/atualize/pagamento/index3.html (AV positives: 6/71 scanned on 10/03/2019 16:47:25)
File SHA256: 0ff0b7fcb090c65d0bdcb2af4bbd2c30f33356b3ce9b117186fa20391ef840a3 (AV positives: 6/72 scanned on 12/05/2019 05:07:00)
File SHA256: 6a67d85a3740ab6e955afd67cc06d70b48e8b94551b689434b79262256c2843a (AV positives: 1/69 scanned on 07/24/2018 00:08:49)
File SHA256: c334ba2996f9cd6effb0a958e55bd956b4d7bdc98961bf808a91884699088d10 (AV positives: 2/57 scanned on 07/16/2017 08:55:48)
Found malicious artifacts related to "35.169.40.78": ...
URL: http://beat-corona.xyz/ (AV positives: 1/77 scanned on 04/06/2020 02:18:27)
URL: https://www.southernkitchen.com/ (AV positives: 1/77 scanned on 04/05/2020 02:14:51)
URL: http://covid.rip/ (AV positives: 1/76 scanned on 04/01/2020 00:27:52)
URL: https://app.replyify.com/contact/easy/caa146f4-eb8c-4010-b562-d6a986cf2c2b/item/5e5483e7-0b1b-4820-b2f5-4a68c5cac9d8 (AV positives: 1/76 scanned on 03/31/2020 18:36:40)
URL: http://www.kanjinerd.com/en/items/%E3%83%8B%E3%83%83%E3%82%B1%E3%83%AB/ (AV positives: 3/76 scanned on 03/31/2020 09:24:36)
File SHA256: beeae5a93463330d31de48bffeefbcd123a21006fb5be7072a396fd81cc57df5 (AV positives: 29/75 scanned on 03/03/2020 07:07:27)
File SHA256: dd775d48f396558420d7f57dc1fc12efe84d2055a64f98e9983183105875c884 (Date: 02/11/2020 23:27:21)
File SHA256: 6911cf530b8874c1b8ded272661ccf24579c83b8abd86e885a3f1f3a66848e14 (Date: 01/28/2020 17:28:00)
File SHA256: 7c97f05ac87d69824251e8f7ca9d7e1125976f1390090d1acedf55c1f7a055a9 (Date: 01/28/2020 01:11:04)
File SHA256: bcf971380c3cc25e00a7645d917b60032b26974d8efd1a983e35866cf0a81eed (AV positives: 4/74 scanned on 01/25/2020 14:07:47)
source
Network Traffic
relevance
10/10
Sends traffic on typical HTTP outbound port, but without HTTP header
details
TCP traffic to 50.116.114.76 on port 80 is sent without HTTP header
TCP traffic to 209.197.3.15 on port 80 is sent without HTTP header
TCP traffic to 172.217.6.106 on port 443 is sent without HTTP header
TCP traffic to 143.204.25.70 on port 80 is sent without HTTP header
TCP traffic to 172.217.4.42 on port 443 is sent without HTTP header
TCP traffic to 8.249.161.254 on port 80 is sent without HTTP header
TCP traffic to 172.217.5.3 on port 80 is sent without HTTP header
TCP traffic to 172.217.6.99 on port 443 is sent without HTTP header
TCP traffic to 172.217.4.110 on port 443 is sent without HTTP header
TCP traffic to 35.169.40.78 on port 80 is sent without HTTP header
source
Network Traffic
relevance
5/10
ATT&CK ID
T1043 (Show technique in the MITRE ATT&CK(TM) matrix)
Uses a User Agent typical for browsers, although no browser was ever launched
details
Found user agent(s): Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko
source
Network Traffic
relevance
10/10
Unusual Characteristics
Contacts Mail Related Domain Names
details
"a.mailmunch.co" is probably a mail server
"forms.mailmunch.co" is probably a mail server
source
Network Traffic
relevance
10/10
Hiding 2 Suspicious Indicators
All indicators are available only in the private webservice or standalone version
Informative 20
Environment Awareness
Reads the registry for installed applications
details
"iexplore.exe" (Path: "HKCUSOFTWAREMICROSOFTWINDOWSCURRENTVERSIONAPP PATHSIEXPLORE.EXE")
"iexplore.exe" (Path: "HKLMSOFTWAREMICROSOFTWINDOWSCURRENTVERSIONAPP PATHSIEXPLORE.EXE")
"iexplore.exe" (Path: "HKLMSOFTWAREMICROSOFTWINDOWSCURRENTVERSIONAPP PATHSOUTLOOK.EXE")
source
Registry Access
relevance
10/10
ATT&CK ID
T1012 (Show technique in the MITRE ATT&CK(TM) matrix)
Exploit/Shellcode
Reads the Equation Editor Class Identifier (CLSID)
details
"iexplore.exe" (Path: "HKCRSOFTWARECLASSESCLSID{00021700-0000-0000-C000-000000000046}IMPLEMENTED CATEGORIES{00021493-0000-0000-C000-000000000046}")
"iexplore.exe" (Path: "HKCRSOFTWARECLASSESCLSID{0002CE02-0000-0000-C000-000000000046}IMPLEMENTED CATEGORIES{00021493-0000-0000-C000-000000000046}")
"iexplore.exe" (Path: "HKCRSOFTWARECLASSESCLSID{0003000B-0000-0000-C000-000000000046}IMPLEMENTED CATEGORIES{00021493-0000-0000-C000-000000000046}")
"iexplore.exe" (Path: "HKCRSOFTWARECLASSESCLSID{00021700-0000-0000-C000-000000000046}IMPLEMENTED CATEGORIES{00021494-0000-0000-C000-000000000046}")
"iexplore.exe" (Path: "HKCRSOFTWARECLASSESCLSID{0002CE02-0000-0000-C000-000000000046}IMPLEMENTED CATEGORIES{00021494-0000-0000-C000-000000000046}")
"iexplore.exe" (Path: "HKCRSOFTWARECLASSESCLSID{0003000B-0000-0000-C000-000000000046}IMPLEMENTED CATEGORIES{00021494-0000-0000-C000-000000000046}")
source
Registry Access
relevance
10/10
ATT&CK ID
T1012 (Show technique in the MITRE ATT&CK(TM) matrix)
External Systems
Sample was identified as clean by Antivirus engines
details
0/66 Antivirus vendors marked sample as malicious (0% detection rate)
source
External System
relevance
10/10
General
Accesses Software Policy Settings
details
"iexplore.exe" (Path: "HKCUSOFTWAREPOLICIESMICROSOFTSYSTEMCERTIFICATESCA"; Key: "")
"iexplore.exe" (Path: "HKCUSOFTWAREPOLICIESMICROSOFTSYSTEMCERTIFICATESCACERTIFICATES"; Key: "")
"iexplore.exe" (Path: "HKCUSOFTWAREPOLICIESMICROSOFTSYSTEMCERTIFICATESCACRLS"; Key: "")
"iexplore.exe" (Path: "HKCUSOFTWAREPOLICIESMICROSOFTSYSTEMCERTIFICATESCACTLS"; Key: "")
"iexplore.exe" (Path: "HKLMSOFTWAREPOLICIESMICROSOFTSYSTEMCERTIFICATESCA"; Key: "")
"iexplore.exe" (Path: "HKLMSOFTWAREPOLICIESMICROSOFTSYSTEMCERTIFICATESCACERTIFICATES"; Key: "")
"iexplore.exe" (Path: "HKLMSOFTWAREPOLICIESMICROSOFTSYSTEMCERTIFICATESCACRLS"; Key: "")
"iexplore.exe" (Path: "HKLMSOFTWAREPOLICIESMICROSOFTSYSTEMCERTIFICATESCACTLS"; Key: "")
"iexplore.exe" (Path: "HKCUSOFTWAREPOLICIESMICROSOFTSYSTEMCERTIFICATESDISALLOWED"; Key: "")
"iexplore.exe" (Path: "HKCUSOFTWAREPOLICIESMICROSOFTSYSTEMCERTIFICATESDISALLOWEDCERTIFICATES"; Key: "")
"iexplore.exe" (Path: "HKCUSOFTWAREPOLICIESMICROSOFTSYSTEMCERTIFICATESDISALLOWEDCRLS"; Key: "")
"iexplore.exe" (Path: "HKCUSOFTWAREPOLICIESMICROSOFTSYSTEMCERTIFICATESDISALLOWEDCTLS"; Key: "")
"iexplore.exe" (Path: "HKLMSOFTWAREPOLICIESMICROSOFTSYSTEMCERTIFICATESDISALLOWED"; Key: "")
"iexplore.exe" (Path: "HKLMSOFTWAREPOLICIESMICROSOFTSYSTEMCERTIFICATESDISALLOWEDCERTIFICATES"; Key: "")
"iexplore.exe" (Path: "HKLMSOFTWAREPOLICIESMICROSOFTSYSTEMCERTIFICATESDISALLOWEDCRLS"; Key: "")
"iexplore.exe" (Path: "HKLMSOFTWAREPOLICIESMICROSOFTSYSTEMCERTIFICATESDISALLOWEDCTLS"; Key: "")
"iexplore.exe" (Path: "HKLMSOFTWAREPOLICIESMICROSOFTSYSTEMCERTIFICATESROOT"; Key: "")
"iexplore.exe" (Path: "HKLMSOFTWAREPOLICIESMICROSOFTSYSTEMCERTIFICATESROOTCERTIFICATES"; Key: "")
"iexplore.exe" (Path: "HKLMSOFTWAREPOLICIESMICROSOFTSYSTEMCERTIFICATESROOTCRLS"; Key: "")
"iexplore.exe" (Path: "HKLMSOFTWAREPOLICIESMICROSOFTSYSTEMCERTIFICATESROOTCTLS"; Key: "")
source
Registry Access
relevance
10/10
ATT&CK ID
T1012 (Show technique in the MITRE ATT&CK(TM) matrix)
Accesses System Certificates Settings
details
"iexplore.exe" (Path: "HKCUSOFTWAREMICROSOFTSYSTEMCERTIFICATESMY"; Key: "")
"iexplore.exe" (Path: "HKCUSOFTWAREMICROSOFTSYSTEMCERTIFICATESCA"; Key: "")
"iexplore.exe" (Path: "HKCUSOFTWAREMICROSOFTSYSTEMCERTIFICATESCACERTIFICATES"; Key: "")
"iexplore.exe" (Path: "HKCUSOFTWAREMICROSOFTSYSTEMCERTIFICATESCACRLS"; Key: "")
"iexplore.exe" (Path: "HKCUSOFTWAREMICROSOFTSYSTEMCERTIFICATESCACTLS"; Key: "")
"iexplore.exe" (Path: "HKLMSOFTWAREMICROSOFTSYSTEMCERTIFICATESCA"; Key: "")
"iexplore.exe" (Path: "HKLMSOFTWAREMICROSOFTSYSTEMCERTIFICATESCACERTIFICATES"; Key: "")
"iexplore.exe" (Path: "HKLMSOFTWAREMICROSOFTSYSTEMCERTIFICATESCACRLS"; Key: "")
"iexplore.exe" (Path: "HKLMSOFTWAREMICROSOFTSYSTEMCERTIFICATESCACTLS"; Key: "")
"iexplore.exe" (Path: "HKCUSOFTWAREMICROSOFTSYSTEMCERTIFICATESDISALLOWED"; Key: "")
"iexplore.exe" (Path: "HKCUSOFTWAREMICROSOFTSYSTEMCERTIFICATESDISALLOWEDCERTIFICATES"; Key: "")
"iexplore.exe" (Path: "HKCUSOFTWAREMICROSOFTSYSTEMCERTIFICATESDISALLOWEDCRLS"; Key: "")
"iexplore.exe" (Path: "HKCUSOFTWAREMICROSOFTSYSTEMCERTIFICATESDISALLOWEDCTLS"; Key: "")
"iexplore.exe" (Path: "HKLMSOFTWAREMICROSOFTSYSTEMCERTIFICATESDISALLOWED"; Key: "")
"iexplore.exe" (Path: "HKLMSOFTWAREMICROSOFTSYSTEMCERTIFICATESDISALLOWEDCERTIFICATES"; Key: "")
"iexplore.exe" (Path: "HKLMSOFTWAREMICROSOFTSYSTEMCERTIFICATESDISALLOWEDCRLS"; Key: "")
source
Registry Access
relevance
10/10
ATT&CK ID
T1112 (Show technique in the MITRE ATT&CK(TM) matrix)
Contacts domains
details
"datingdoctor.com"
"netdna.bootstrapcdn.com"
"a.mailmunch.co"
source
Network Traffic
relevance
1/10
Contacts server
details
"50.116.114.76:80"
"209.197.3.15:80"
"172.217.6.106:443"
"143.204.25.70:80"
"172.217.4.42:443"
"8.249.161.254:80"
"172.217.5.3:80"
"172.217.6.99:443"
"172.217.4.110:443"
"35.169.40.78:80"
source
Network Traffic
relevance
1/10
Creates mutants
details
"Sessions1BaseNamedObjectsIsoScope_f1c_IESQMMUTEX_0_519"
"LocalInternetShortcutMutex"
"IsoScope_f1c_IESQMMUTEX_0_519"
"{5312EE61-79E3-4A24-BFE1-132B85B23C3A}"
"IsoScope_f1c_IESQMMUTEX_0_331"
"Local!BrowserEmulation!SharedMemory!Mutex"
"IsoScope_f1c_IESQMMUTEX_0_303"
"LocalURLBLOCK_DOWNLOAD_MUTEX"
"IsoScope_f1c_ConnHashTable<3868>_HashTable_Mutex"
"LocalZonesCacheCounterMutex"
"LocalURLBLOCK_HASHFILESWITCH_MUTEX"
"LocalURLBLOCK_FILEMAPSWITCH_MUTEX_3868"
"LocalVERMGMTBlockListFileMutex"
"{66D0969A-1E86-44CF-B4EC-3806DDDA3B5D}"
"IsoScope_f1c_IE_EarlyTabStart_0xaa8_Mutex"
"LocalZonesLockedCacheCounterMutex"
"Sessions1BaseNamedObjectsLocalVERMGMTBlockListFileMutex"
"Sessions1BaseNamedObjectsLocalURLBLOCK_FILEMAPSWITCH_MUTEX_3868"
"Sessions1BaseNamedObjectsLocalURLBLOCK_HASHFILESWITCH_MUTEX"
"Sessions1BaseNamedObjectsLocalURLBLOCK_DOWNLOAD_MUTEX"
source
Created Mutant
relevance
3/10
Drops files marked as clean
details
Antivirus vendors marked dropped file "urlblockindex_1_.bin" as clean (type is "data")
source
Extracted File
relevance
10/10
Opened the service control manager
details
"iexplore.exe" called "OpenSCManager" requesting access rights "SC_MANAGER_CONNECT" (0x1)
"iexplore.exe" called "OpenSCManager" requesting access rights "0XE0000000L"
source
API Call
relevance
10/10
ATT&CK ID
T1035 (Show technique in the MITRE ATT&CK(TM) matrix)
Overview of unique CLSIDs touched in registry
details
"iexplore.exe" touched "WinInetBroker Class" (Path: "HKCUCLSID{C39EE728-D419-4BD4-A3EF-EDA059DBD935}")
"iexplore.exe" touched "PSFactoryBuffer" (Path: "HKCUCLSID{057EEE47-2572-4AA1-88D7-60CE2149E33C}")
"iexplore.exe" touched "Cor MIME Filter, CorFltr, CorFltr 1" (Path: "HKCRSOFTWARECLASSESCLSID{1E66F26B-79EE-11D2-8710-00C04F79ED0D}")
"iexplore.exe" touched "NetworkListManager" (Path: "HKCUCLSID{DCB00C01-570F-4A9B-8D69-199FDBA5723B}TREATAS")
"iexplore.exe" touched "Network List Manager" (Path: "HKCUCLSID{A47979D2-C419-11D9-A5B4-001185AD2B89}TREATAS")
"iexplore.exe" touched "CLSID_RecordInfo" (Path: "HKCRSOFTWARECLASSESCLSID{0000002F-0000-0000-C000-000000000046}IMPLEMENTED CATEGORIES{00021493-0000-0000-C000-000000000046}")
"iexplore.exe" touched "DAO.DBEngine.36" (Path: "HKCRSOFTWARECLASSESCLSID{00000100-0000-0010-8000-00AA006D2EA4}IMPLEMENTED CATEGORIES{00021493-0000-0000-C000-000000000046}")
"iexplore.exe" touched "DAO.PrivateDBEngine.36" (Path: "HKCRSOFTWARECLASSESCLSID{00000101-0000-0010-8000-00AA006D2EA4}IMPLEMENTED CATEGORIES{00021493-0000-0000-C000-000000000046}")
"iexplore.exe" touched "DAO.TableDef.36" (Path: "HKCRSOFTWARECLASSESCLSID{00000103-0000-0010-8000-00AA006D2EA4}IMPLEMENTED CATEGORIES{00021493-0000-0000-C000-000000000046}")
"iexplore.exe" touched "DAO.Field.36" (Path: "HKCRSOFTWARECLASSESCLSID{00000104-0000-0010-8000-00AA006D2EA4}IMPLEMENTED CATEGORIES{00021493-0000-0000-C000-000000000046}")
"iexplore.exe" touched "DAO.Index.36" (Path: "HKCRSOFTWARECLASSESCLSID{00000105-0000-0010-8000-00AA006D2EA4}IMPLEMENTED CATEGORIES{00021493-0000-0000-C000-000000000046}")
"iexplore.exe" touched "DAO.Group.36" (Path: "HKCRSOFTWARECLASSESCLSID{00000106-0000-0010-8000-00AA006D2EA4}IMPLEMENTED CATEGORIES{00021493-0000-0000-C000-000000000046}")
"iexplore.exe" touched "DAO.User.36" (Path: "HKCRSOFTWARECLASSESCLSID{00000107-0000-0010-8000-00AA006D2EA4}IMPLEMENTED CATEGORIES{00021493-0000-0000-C000-000000000046}")
"iexplore.exe" touched "DAO.QueryDef.36" (Path: "HKCRSOFTWARECLASSESCLSID{00000108-0000-0010-8000-00AA006D2EA4}IMPLEMENTED CATEGORIES{00021493-0000-0000-C000-000000000046}")
"iexplore.exe" touched "DAO.Relation.36" (Path: "HKCRSOFTWARECLASSESCLSID{00000109-0000-0010-8000-00AA006D2EA4}IMPLEMENTED CATEGORIES{00021493-0000-0000-C000-000000000046}")
"iexplore.exe" touched "StdOleLink" (Path: "HKCRSOFTWARECLASSESCLSID{00000300-0000-0000-C000-000000000046}IMPLEMENTED CATEGORIES{00021493-0000-0000-C000-000000000046}")
"iexplore.exe" touched "FileMoniker" (Path: "HKCRSOFTWARECLASSESCLSID{00000303-0000-0000-C000-000000000046}IMPLEMENTED CATEGORIES{00021493-0000-0000-C000-000000000046}")
"iexplore.exe" touched "ItemMoniker" (Path: "HKCRSOFTWARECLASSESCLSID{00000304-0000-0000-C000-000000000046}IMPLEMENTED CATEGORIES{00021493-0000-0000-C000-000000000046}")
"iexplore.exe" touched "AntiMoniker" (Path: "HKCRSOFTWARECLASSESCLSID{00000305-0000-0000-C000-000000000046}IMPLEMENTED CATEGORIES{00021493-0000-0000-C000-000000000046}")
"iexplore.exe" touched "PointerMoniker" (Path: "HKCRSOFTWARECLASSESCLSID{00000306-0000-0000-C000-000000000046}IMPLEMENTED CATEGORIES{00021493-0000-0000-C000-000000000046}")
source
Registry Access
relevance
3/10
Process launched with changed environment
details
Process "iexplore.exe" (Show Process) was launched with new environment variables: "PATH="%PROGRAMFILES%Internet Explorer;""
source
Monitored Target
relevance
10/10
Spawns new processes
details
Spawned process "iexplore.exe" with commandline "http://datingdoctor.com/" (Show Process)
Spawned process "iexplore.exe" with commandline "SCODEF:3868 CREDAT:275457 /prefetch:2" (Show Process)
source
Monitored Target
relevance
3/10
Spawns new processes that are not known child processes
details
Spawned process "iexplore.exe" with commandline "http://datingdoctor.com/" (Show Process)
Spawned process "iexplore.exe" with commandline "SCODEF:3868 CREDAT:275457 /prefetch:2" (Show Process)
source
Monitored Target
relevance
3/10
Installation/Persistance
Creates new processes
details
"iexplore.exe" is creating a new process (Name: "%PROGRAMFILES%Internet Exploreriexplore.exe", Handle: 872)
source
API Call
relevance
8/10
Dropped files
details
"urlblockindex_1_.bin" has type "data"
"urlref_httpdatingdoctor.com" has type "HTML document UTF-8 Unicode text with very long lines with CRLF LF line terminators"
"jquery-migrate.min_1_.js" has type "ASCII text with very long lines"
"cart-fragments.min_1_.js" has type "ASCII text with very long lines with no line terminators"
"font-awesome.min_1_.css" has type "ASCII text with very long lines"
"6BADA8974A10C4BD62CC921D13E43B18_BEB37ABADF39714871232B4792417E04" has type "data"
"wp-embed.min_1_.js" has type "ASCII text with very long lines with no line terminators"
"6DRQ0S34.htm" has type "HTML document UTF-8 Unicode text with very long lines with CRLF LF line terminators"
"RecoveryStore._AAC6FDDD-7CFA-11EA-A0A0-0A0027477BF1_.dat" has type "Composite Document File V2 Document Cannot read section info"
"BE8B021F9E811DFC8C8A28572A17C05A_B752CF5E37B0D9106B860B99A3BDC72C" has type "data"
"~DFFF5847A297D5D3A3.TMP" has type "data"
"SG5MS0NQ.txt" has type "ASCII text"
"PVBPQLI3.txt" has type "ASCII text"
"hPukzIdj2RQ_1_.htm" has type "HTML document UTF-8 Unicode text with very long lines"
"50ZRXtrlFjY_1_.htm" has type "HTML document ASCII text with very long lines"
"wp-emoji-release.min_1_.js" has type "ASCII text with very long lines"
"style.min_1_.css" has type "ASCII text with very long lines with no line terminators"
"4IGM7X15.txt" has type "ASCII text"
"ver2595.tmp" has type "XML 1.0 document UTF-8 Unicode (with BOM) text with CRLF line terminators"
"mailoptin.min_1_.js" has type "UTF-8 Unicode text with very long lines"
source
Extracted File
relevance
3/10
Network Related
Found potential URL in binary/memory
details
Pattern match: "http://datingdoctor.com/"
Pattern match: "http://datingdoctor.com"
Heuristic match: "datingdoctor.com"
Heuristic match: "netdna.bootstrapcdn.com"
Heuristic match: "a.mailmunch.co"
Heuristic match: "forms.mailmunch.co"
Heuristic match: "ajax.googleapis.com"
Heuristic match: "fonts.googleapis.com"
Heuristic match: "fonts.gstatic.com"
Pattern match: "www.youtube.com"
source
String
relevance
10/10
Spyware/Information Retrieval
Found a reference to a known community page
details
"www.youtube.com" (Indicator: "youtube")
"GET /embed/6fIwrL56wEQ?feature=oembed HTTP/1.1
Accept: text/html, application/xhtml+xml, */*
Referer: http://datingdoctor.com/
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: www.youtube.com
DNT: 1
Connection: Keep-Alive
Cookie: CONSENT=WP.2676ba" (Indicator: "youtube")
"GET /embed/50ZRXtrlFjY? HTTP/1.1
Accept: text/html, application/xhtml+xml, */*
Referer: http://datingdoctor.com/
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: www.youtube.com
DNT: 1
Connection: Keep-Alive
Cookie: CONSENT=WP.2676ba" (Indicator: "youtube")
"GET /embed/hPukzIdj2RQ?feature=oembed HTTP/1.1
Accept: text/html, application/xhtml+xml, */*
Referer: http://datingdoctor.com/
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: www.youtube.com
DNT: 1
Connection: Keep-Alive
Cookie: CONSENT=WP.2676ba" (Indicator: "youtube")
source
String
relevance
7/10
Unusual Characteristics
Drops cabinet archive files
details
"57C8EDB95DF3F0AD4EE2DC2B8CFD4157" has type "Microsoft Cabinet archive data 6894 bytes 1 file"
source
Extracted File
relevance
10/10
Installs hooks/patches the running process
details
"iexplore.exe" wrote bytes "b0337a6f" to virtual address "0x77911100" (part of module "MSCTF.DLL")
"iexplore.exe" wrote bytes "a0357a6f" to virtual address "0x77B31144" (part of module "LPK.DLL")
"iexplore.exe" wrote bytes "a0357a6f" to virtual address "0x76991064" (part of module "IMM32.DLL")
"iexplore.exe" wrote bytes "c03a7a6f" to virtual address "0x76B81FB0" (part of module "SHELL32.DLL")
"iexplore.exe" wrote bytes "a0357a6f" to virtual address "0x76B8202C" (part of module "SHELL32.DLL")
"iexplore.exe" wrote bytes "b0337a6f" to virtual address "0x75C814E0" (part of module "USER32.DLL")
"iexplore.exe" wrote bytes "a0357a6f" to virtual address "0x7624B0CC" (part of module "IERTUTIL.DLL")
"iexplore.exe" wrote bytes "80320d0070320d0000320d0060320d0050320d0040320d0030320d00000000002cc9c876c0210d000000000090170d0050230d0000180d00601f0d0020360d000000000040360d0000000000" to virtual address "0x000D8000"
"iexplore.exe" wrote bytes "b0337a6f" to virtual address "0x76AE1164" (part of module "USP10.DLL")
"iexplore.exe" wrote bytes "60d27d6f" to virtual address "0x75C213B8" (part of module "SHLWAPI.DLL")
"iexplore.exe" wrote bytes "b0337a6f" to virtual address "0x74E81038" (part of module "VERSION.DLL")
"iexplore.exe" wrote bytes "c0bf7b6f" to virtual address "0x76B81F68" (part of module "SHELL32.DLL")
"iexplore.exe" wrote bytes "b0337a6f" to virtual address "0x6CD1F6A0" (part of module "IEFRAME.DLL")
"iexplore.exe" wrote bytes "b0337a6f" to virtual address "0x76991210" (part of module "IMM32.DLL")
"iexplore.exe" wrote bytes "30307a6f" to virtual address "0x75C21380" (part of module "SHLWAPI.DLL")
"iexplore.exe" wrote bytes "a0357a6f" to virtual address "0x7450139C" (part of module "UXTHEME.DLL")
"iexplore.exe" wrote bytes "60cd7d6f" to virtual address "0x75C2130C" (part of module "SHLWAPI.DLL")
"iexplore.exe" wrote bytes "a0357a6f" to virtual address "0x77911298" (part of module "MSCTF.DLL")
"iexplore.exe" wrote bytes "60cd7d6f" to virtual address "0x6CD1FEC0" (part of module "IEFRAME.DLL")
"iexplore.exe" wrote bytes "60d27d6f" to virtual address "0x76B81D7C" (part of module "SHELL32.DLL")
source
Hook Detection
relevance
10/10
ATT&CK ID
T1179 (Show technique in the MITRE ATT&CK(TM) matrix)
Session Details
No relevant data available.
Screenshots
Hybrid Analysis
Tip: Click an analysed process below to view more details.
Analysed 3 processes in total.
rundll32.exe "%WINDIR%System32ieframe.dll",OpenURL C:63c1ab2d72934de3ce4d3c8a74e9253878e4a84c4de4d8bf298d35c50ed28883.url (PID: 172)
iexplore.exe http://datingdoctor.com/ (PID: 3868)
iexplore.exe SCODEF:3868 CREDAT:275457 /prefetch:2 (PID: 1460)
Logged Script Calls Logged Stdout Extracted Streams Memory Dumps
Reduced Monitoring Network Activity Network Error Multiscan Match
Network Analysis
This report was generated with enabled TOR analysis
DNS Requests
Domain Address Registrar Country
a.mailmunch.co
143.204.25.70
TTL: 1638 ENOM, LLC Flag of United States United States
ajax.googleapis.com
172.217.14.170
TTL: 299 MarkMonitor, Inc. Flag of United States United States
datingdoctor.com
50.116.114.76
TTL: 14399 GoDaddy.com, LLC
Organization: Domains By Proxy, LLC
Name Server: NS8507.HOSTGATOR.COM
Creation Date: Tue, 06 May 1997 04:00:00 GMT Flag of United States United States
fonts.googleapis.com
172.217.12.74
TTL: 299 MarkMonitor, Inc. Flag of United States United States
fonts.gstatic.com
172.217.6.163
TTL: 299 MarkMonitor, Inc. Flag of United States United States
forms.mailmunch.co
35.169.40.78
TTL: 1082 ENOM, LLC Flag of United States United States
netdna.bootstrapcdn.com
209.197.3.15
TTL: 108 MarkMonitor, Inc.
Organization: DNStination Inc.
Name Server: DNS1.P07.NSONE.NET
Creation Date: Fri, 25 May 2012 00:00:00 GMT Flag of United States United States
ocsp.pki.goog
172.217.5.3
TTL: 277 - Flag of United States United States
www.youtube.com
172.217.9.174
TTL: 21599 MarkMonitor, Inc.
Organization: Google Inc.
Name Server: NS1.GOOGLE.COM
Creation Date: Tue, 15 Feb 2005 00:00:00 GMT Flag of United States United States
Contacted Hosts
IP Address Port/Protocol Associated Process Details
50.116.114.76
80
TCP iexplore.exe
PID: 1460 Flag of United States United States
209.197.3.15
80
TCP iexplore.exe
PID: 1460 Flag of United States United States
172.217.6.106
443
TCP iexplore.exe
PID: 1460 Flag of United States United States
143.204.25.70
80
TCP iexplore.exe
PID: 1460 Flag of United States United States
172.217.4.42
443
TCP iexplore.exe
PID: 1460 Flag of United States United States
8.249.161.254
80
TCP iexplore.exe
PID: 1460 Flag of United States United States
172.217.5.3
80
TCP iexplore.exe
PID: 1460 Flag of United States United States
172.217.6.99
443
TCP iexplore.exe
PID: 1460 Flag of United States United States
172.217.4.110
443
TCP iexplore.exe
PID: 1460 Flag of United States United States
35.169.40.78
80
TCP iexplore.exe
PID: 1460 Flag of United States United States
Contacted Countries
HTTP Traffic
Endpoint Request URL Data
50.116.114.76:80 (datingdoctor.com) GET / GET / HTTP/1.1 Accept: text/html, application/xhtml+xml, */* Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: datingdoctor.com DNT: 1 Connection: Keep-Alive
50.116.114.76:80 (datingdoctor.com) GET /wp-content/themes/sydney/woocommerce/css/wc.css?ver=5.3.2 GET /wp-content/themes/sydney/woocommerce/css/wc.css?ver=5.3.2 HTTP/1.1 Accept: text/css, */* Referer: http://datingdoctor.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: datingdoctor.com DNT: 1 Connection: Keep-Alive Cookie: PHPSESSID=899556a4327fe08626eb56774a98b95a
50.116.114.76:80 (datingdoctor.com) GET /wp-content/themes/sydney/css/bootstrap/bootstrap.min.css?ver=1 GET /wp-content/themes/sydney/css/bootstrap/bootstrap.min.css?ver=1 HTTP/1.1 Accept: text/css, */* Referer: http://datingdoctor.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: datingdoctor.com DNT: 1 Connection: Keep-Alive Cookie: PHPSESSID=899556a4327fe08626eb56774a98b95a
50.116.114.76:80 (datingdoctor.com) GET /wp-content/themes/sydney/css/bootstrap/bootstrap.min.css?ver=1 GET /wp-content/themes/sydney/css/bootstrap/bootstrap.min.css?ver=1 HTTP/1.1 Accept: text/css, */* Referer: http://datingdoctor.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: datingdoctor.com DNT: 1 Connection: Keep-Alive Cookie: PHPSESSID=899556a4327fe08626eb56774a98b95a
50.116.114.76:80 (datingdoctor.com) GET /wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/style.css?ver=2.5.14 GET /wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/style.css?ver=2.5.14 HTTP/1.1 Accept: text/css, */* Referer: http://datingdoctor.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: datingdoctor.com DNT: 1 Connection: Keep-Alive Cookie: PHPSESSID=899556a4327fe08626eb56774a98b95a
50.116.114.76:80 (datingdoctor.com) GET /wp-includes/css/dist/block-library/style.min.css?ver=5.3.2 GET /wp-includes/css/dist/block-library/style.min.css?ver=5.3.2 HTTP/1.1 Accept: text/css, */* Referer: http://datingdoctor.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: datingdoctor.com DNT: 1 Connection: Keep-Alive Cookie: PHPSESSID=899556a4327fe08626eb56774a98b95a
50.116.114.76:80 (datingdoctor.com) GET /wp-content/plugins/acurax-social-media-widget/css/style.css?v=3.2.10&ver=5.3.2 GET /wp-content/plugins/acurax-social-media-widget/css/style.css?v=3.2.10&ver=5.3.2 HTTP/1.1 Accept: text/css, */* Referer: http://datingdoctor.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: datingdoctor.com DNT: 1 Connection: Keep-Alive Cookie: PHPSESSID=899556a4327fe08626eb56774a98b95a
50.116.114.76:80 (datingdoctor.com) GET /wp-content/plugins/ditty-news-ticker/inc/static/libs/fontastic/styles.css?ver=2.2.15 GET /wp-content/plugins/ditty-news-ticker/inc/static/libs/fontastic/styles.css?ver=2.2.15 HTTP/1.1 Accept: text/css, */* Referer: http://datingdoctor.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: datingdoctor.com DNT: 1 Connection: Keep-Alive Cookie: PHPSESSID=899556a4327fe08626eb56774a98b95a
209.197.3.15:80 (netdna.bootstrapcdn.com) GET /font-awesome/latest/css/font-awesome.min.css?ver=5.3.2 GET /font-awesome/latest/css/font-awesome.min.css?ver=5.3.2 HTTP/1.1 Accept: text/css, */* Referer: http://datingdoctor.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: netdna.bootstrapcdn.com DNT: 1 Connection: Keep-Alive
50.116.114.76:80 (datingdoctor.com) GET /wp-content/plugins/ditty-news-ticker/inc/static/css/style.css?ver=1584982106 GET /wp-content/plugins/ditty-news-ticker/inc/static/css/style.css?ver=1584982106 HTTP/1.1 Accept: text/css, */* Referer: http://datingdoctor.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: datingdoctor.com DNT: 1 Connection: Keep-Alive Cookie: PHPSESSID=899556a4327fe08626eb56774a98b95a
50.116.114.76:80 (datingdoctor.com) GET /wp-content/plugins/woocommerce/assets/css/woocommerce-layout.css?ver=3.9.3 GET /wp-content/plugins/woocommerce/assets/css/woocommerce-layout.css?ver=3.9.3 HTTP/1.1 Accept: text/css, */* Referer: http://datingdoctor.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: datingdoctor.com DNT: 1 Connection: Keep-Alive Cookie: PHPSESSID=899556a4327fe08626eb56774a98b95a
50.116.114.76:80 (datingdoctor.com) GET /wp-content/plugins/woocommerce/assets/css/woocommerce-smallscreen.css?ver=3.9.3 GET /wp-content/plugins/woocommerce/assets/css/woocommerce-smallscreen.css?ver=3.9.3 HTTP/1.1 Accept: text/css, */* Referer: http://datingdoctor.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: datingdoctor.com DNT: 1 Connection: Keep-Alive Cookie: PHPSESSID=899556a4327fe08626eb56774a98b95a
50.116.114.76:80 (datingdoctor.com) GET /wp-content/uploads/useanyfont/uaf.css?ver=1580764507 GET /wp-content/uploads/useanyfont/uaf.css?ver=1580764507 HTTP/1.1 Accept: text/css, */* Referer: http://datingdoctor.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: datingdoctor.com DNT: 1 Connection: Keep-Alive Cookie: PHPSESSID=899556a4327fe08626eb56774a98b95a
50.116.114.76:80 (datingdoctor.com) GET /wp-content/plugins/testimonial-rotator/testimonial-rotator-style.css?ver=5.3.2 GET /wp-content/plugins/testimonial-rotator/testimonial-rotator-style.css?ver=5.3.2 HTTP/1.1 Accept: text/css, */* Referer: http://datingdoctor.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: datingdoctor.com DNT: 1 Connection: Keep-Alive Cookie: PHPSESSID=899556a4327fe08626eb56774a98b95a
50.116.114.76:80 (datingdoctor.com) GET /wp-content/themes/sydney/style.css?ver=20200129 GET /wp-content/themes/sydney/style.css?ver=20200129 HTTP/1.1 Accept: text/css, */* Referer: http://datingdoctor.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: datingdoctor.com DNT: 1 Connection: Keep-Alive Cookie: PHPSESSID=899556a4327fe08626eb56774a98b95a
50.116.114.76:80 (datingdoctor.com) GET /wp-content/themes/sydney/fonts/font-awesome.min.css?ver=5.3.2 GET /wp-content/themes/sydney/fonts/font-awesome.min.css?ver=5.3.2 HTTP/1.1 Accept: text/css, */* Referer: http://datingdoctor.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: datingdoctor.com DNT: 1 Connection: Keep-Alive Cookie: PHPSESSID=899556a4327fe08626eb56774a98b95a
50.116.114.76:80 (datingdoctor.com) GET /wp-includes/js/jquery/jquery.js?ver=1.12.4-wp GET /wp-includes/js/jquery/jquery.js?ver=1.12.4-wp HTTP/1.1 Accept: application/javascript, */*;q=0.8 Referer: http://datingdoctor.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: datingdoctor.com DNT: 1 Connection: Keep-Alive Cookie: PHPSESSID=899556a4327fe08626eb56774a98b95a
50.116.114.76:80 (datingdoctor.com) GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1 GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1 HTTP/1.1 Accept: application/javascript, */*;q=0.8 Referer: http://datingdoctor.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: datingdoctor.com DNT: 1 Connection: Keep-Alive Cookie: PHPSESSID=899556a4327fe08626eb56774a98b95a
143.204.25.70:80 (a.mailmunch.co) GET /app/v1/site.js GET /app/v1/site.js HTTP/1.1 Accept: application/javascript, */*;q=0.8 Referer: http://datingdoctor.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: a.mailmunch.co DNT: 1 Connection: Keep-Alive
50.116.114.76:80 (datingdoctor.com) GET /wp-content/plugins/contact-bank/assets/global/plugins/custom/js/custom.js?ver=5.3.2 GET /wp-content/plugins/contact-bank/assets/global/plugins/custom/js/custom.js?ver=5.3.2 HTTP/1.1 Accept: application/javascript, */*;q=0.8 Referer: http://datingdoctor.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: datingdoctor.com DNT: 1 Connection: Keep-Alive Cookie: PHPSESSID=899556a4327fe08626eb56774a98b95a
50.116.114.76:80 (datingdoctor.com) GET /wp-content/plugins/testimonial-rotator/js/jquery.cycletwo.js?ver=5.3.2 GET /wp-content/plugins/testimonial-rotator/js/jquery.cycletwo.js?ver=5.3.2 HTTP/1.1 Accept: application/javascript, */*;q=0.8 Referer: http://datingdoctor.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: datingdoctor.com DNT: 1 Connection: Keep-Alive Cookie: PHPSESSID=899556a4327fe08626eb56774a98b95a
50.116.114.76:80 (datingdoctor.com) GET /wp-content/plugins/testimonial-rotator/js/jquery.cycletwo.addons.js?ver=5.3.2 GET /wp-content/plugins/testimonial-rotator/js/jquery.cycletwo.addons.js?ver=5.3.2 HTTP/1.1 Accept: application/javascript, */*;q=0.8 Referer: http://datingdoctor.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: datingdoctor.com DNT: 1 Connection: Keep-Alive Cookie: PHPSESSID=899556a4327fe08626eb56774a98b95a
50.116.114.76:80 (datingdoctor.com) GET /wp-content/plugins/ditty-news-ticker/inc/static/js/jquery.touchSwipe.min.js?ver=2.2.15 GET /wp-content/plugins/ditty-news-ticker/inc/static/js/jquery.touchSwipe.min.js?ver=2.2.15 HTTP/1.1 Accept: application/javascript, */*;q=0.8 Referer: http://datingdoctor.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: datingdoctor.com DNT: 1 Connection: Keep-Alive Cookie: PHPSESSID=899556a4327fe08626eb56774a98b95a
50.116.114.76:80 (datingdoctor.com) GET /wp-content/plugins/ditty-news-ticker/inc/static/js/imagesloaded.pkgd.min.js?ver=4.1.4 GET /wp-content/plugins/ditty-news-ticker/inc/static/js/imagesloaded.pkgd.min.js?ver=4.1.4 HTTP/1.1 Accept: application/javascript, */*;q=0.8 Referer: http://datingdoctor.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: datingdoctor.com DNT: 1 Connection: Keep-Alive Cookie: PHPSESSID=899556a4327fe08626eb56774a98b95a
50.116.114.76:80 (datingdoctor.com) GET /wp-content/plugins/ditty-news-ticker/inc/static/js/jquery.easing.js?ver=1.4.1 GET /wp-content/plugins/ditty-news-ticker/inc/static/js/jquery.easing.js?ver=1.4.1 HTTP/1.1 Accept: application/javascript, */*;q=0.8 Referer: http://datingdoctor.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: datingdoctor.com DNT: 1 Connection: Keep-Alive Cookie: PHPSESSID=899556a4327fe08626eb56774a98b95a
50.116.114.76:80 (datingdoctor.com) GET /wp-content/plugins/ditty-news-ticker/inc/static/js/ditty-news-ticker.min.js?ver=1584982106 GET /wp-content/plugins/ditty-news-ticker/inc/static/js/ditty-news-ticker.min.js?ver=1584982106 HTTP/1.1 Accept: application/javascript, */*;q=0.8 Referer: http://datingdoctor.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: datingdoctor.com DNT: 1 Connection: Keep-Alive Cookie: PHPSESSID=899556a4327fe08626eb56774a98b95a
50.116.114.76:80 (datingdoctor.com) GET /wp-content/plugins/mailoptin/src/core/src/assets/js/mailoptin.min.js?ver=1.2.27.0 GET /wp-content/plugins/mailoptin/src/core/src/assets/js/mailoptin.min.js?ver=1.2.27.0 HTTP/1.1 Accept: application/javascript, */*;q=0.8 Referer: http://datingdoctor.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: datingdoctor.com DNT: 1 Connection: Keep-Alive Cookie: PHPSESSID=899556a4327fe08626eb56774a98b95a
50.116.114.76:80 (datingdoctor.com) GET /wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.70 GET /wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.70 HTTP/1.1 Accept: application/javascript, */*;q=0.8 Referer: http://datingdoctor.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: datingdoctor.com DNT: 1 Connection: Keep-Alive Cookie: PHPSESSID=899556a4327fe08626eb56774a98b95a
50.116.114.76:80 (datingdoctor.com) GET /wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=3.9.3 GET /wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=3.9.3 HTTP/1.1 Accept: application/javascript, */*;q=0.8 Referer: http://datingdoctor.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: datingdoctor.com DNT: 1 Connection: Keep-Alive Cookie: PHPSESSID=899556a4327fe08626eb56774a98b95a
50.116.114.76:80 (datingdoctor.com) GET /wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4 GET /wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4 HTTP/1.1 Accept: application/javascript, */*;q=0.8 Referer: http://datingdoctor.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: datingdoctor.com DNT: 1 Connection: Keep-Alive Cookie: PHPSESSID=899556a4327fe08626eb56774a98b95a
50.116.114.76:80 (datingdoctor.com) GET /wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=3.9.3 GET /wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=3.9.3 HTTP/1.1 Accept: application/javascript, */*;q=0.8 Referer: http://datingdoctor.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: datingdoctor.com DNT: 1 Connection: Keep-Alive Cookie: PHPSESSID=899556a4327fe08626eb56774a98b95a
50.116.114.76:80 (datingdoctor.com) GET /wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=3.9.3 GET /wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=3.9.3 HTTP/1.1 Accept: application/javascript, */*;q=0.8 Referer: http://datingdoctor.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: datingdoctor.com DNT: 1 Connection: Keep-Alive Cookie: PHPSESSID=899556a4327fe08626eb56774a98b95a
50.116.114.76:80 (datingdoctor.com) GET /wp-content/themes/sydney/js/scripts.js?ver=5.3.2 GET /wp-content/themes/sydney/js/scripts.js?ver=5.3.2 HTTP/1.1 Accept: application/javascript, */*;q=0.8 Referer: http://datingdoctor.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: datingdoctor.com DNT: 1 Connection: Keep-Alive Cookie: PHPSESSID=899556a4327fe08626eb56774a98b95a
50.116.114.76:80 (datingdoctor.com) GET /wp-content/themes/sydney/js/main.min.js?ver=20180716 GET /wp-content/themes/sydney/js/main.min.js?ver=20180716 HTTP/1.1 Accept: application/javascript, */*;q=0.8 Referer: http://datingdoctor.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: datingdoctor.com DNT: 1 Connection: Keep-Alive Cookie: PHPSESSID=899556a4327fe08626eb56774a98b95a
50.116.114.76:80 (datingdoctor.com) GET /wp-content/themes/sydney/js/so-legacy.js?ver=5.3.2 GET /wp-content/themes/sydney/js/so-legacy.js?ver=5.3.2 HTTP/1.1 Accept: application/javascript, */*;q=0.8 Referer: http://datingdoctor.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: datingdoctor.com DNT: 1 Connection: Keep-Alive Cookie: PHPSESSID=899556a4327fe08626eb56774a98b95a
50.116.114.76:80 (datingdoctor.com) GET /wp-content/themes/sydney/js/so-legacy-main.js?ver=5.3.2 GET /wp-content/themes/sydney/js/so-legacy-main.js?ver=5.3.2 HTTP/1.1 Accept: application/javascript, */*;q=0.8 Referer: http://datingdoctor.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: datingdoctor.com DNT: 1 Connection: Keep-Alive Cookie: PHPSESSID=899556a4327fe08626eb56774a98b95a
50.116.114.76:80 (datingdoctor.com) GET /wp-includes/js/wp-embed.min.js?ver=5.3.2 GET /wp-includes/js/wp-embed.min.js?ver=5.3.2 HTTP/1.1 Accept: application/javascript, */*;q=0.8 Referer: http://datingdoctor.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: datingdoctor.com DNT: 1 Connection: Keep-Alive Cookie: PHPSESSID=899556a4327fe08626eb56774a98b95a
50.116.114.76:80 (datingdoctor.com) GET /wp-content/uploads/2016/02/Coleman-Wedding-Photo-2.jpg GET /wp-content/uploads/2016/02/Coleman-Wedding-Photo-2.jpg HTTP/1.1 Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5 Referer: http://datingdoctor.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: datingdoctor.com DNT: 1 Connection: Keep-Alive Cookie: PHPSESSID=899556a4327fe08626eb56774a98b95a
50.116.114.76:80 (datingdoctor.com) GET /wp-content/uploads/2015/11/Coleman-Wedding-Photo-1-2.jpg GET /wp-content/uploads/2015/11/Coleman-Wedding-Photo-1-2.jpg HTTP/1.1 Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5 Referer: http://datingdoctor.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: datingdoctor.com DNT: 1 Connection: Keep-Alive Cookie: PHPSESSID=899556a4327fe08626eb56774a98b95a
50.116.114.76:80 (datingdoctor.com) GET /wp-content/uploads/2020/03/PROMO-STAGE-PIC-NAT-EDIT-2.png GET /wp-content/uploads/2020/03/PROMO-STAGE-PIC-NAT-EDIT-2.png HTTP/1.1 Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5 Referer: http://datingdoctor.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: datingdoctor.com DNT: 1 Connection: Keep-Alive Cookie: PHPSESSID=899556a4327fe08626eb56774a98b95a
50.116.114.76:80 (datingdoctor.com) GET /wp-content/uploads/2015/11/media-header.jpg GET /wp-content/uploads/2015/11/media-header.jpg HTTP/1.1 Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5 Referer: http://datingdoctor.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: datingdoctor.com DNT: 1 Connection: Keep-Alive Cookie: PHPSESSID=899556a4327fe08626eb56774a98b95a
50.116.114.76:80 (datingdoctor.com) GET /wp-content/themes/sydney/images/header.jpg GET /wp-content/themes/sydney/images/header.jpg HTTP/1.1 Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5 Referer: http://datingdoctor.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: datingdoctor.com DNT: 1 Connection: Keep-Alive Cookie: PHPSESSID=899556a4327fe08626eb56774a98b95a
50.116.114.76:80 (datingdoctor.com) GET /wp-content/uploads/2018/02/datedoc.jpg GET /wp-content/uploads/2018/02/datedoc.jpg HTTP/1.1 Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5 Referer: http://datingdoctor.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: datingdoctor.com DNT: 1 Connection: Keep-Alive Cookie: PHPSESSID=899556a4327fe08626eb56774a98b95a
50.116.114.76:80 (datingdoctor.com) GET /wp-content/uploads/2016/03/TEDx.jpeg GET /wp-content/uploads/2016/03/TEDx.jpeg HTTP/1.1 Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5 Referer: http://datingdoctor.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: datingdoctor.com DNT: 1 Connection: Keep-Alive Cookie: PHPSESSID=899556a4327fe08626eb56774a98b95a
50.116.114.76:80 (datingdoctor.com) GET /wp-includes/js/wp-emoji-release.min.js?ver=5.3.2 GET /wp-includes/js/wp-emoji-release.min.js?ver=5.3.2 HTTP/1.1 Accept: application/javascript, */*;q=0.8 Referer: http://datingdoctor.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: datingdoctor.com DNT: 1 Connection: Keep-Alive Cookie: PHPSESSID=899556a4327fe08626eb56774a98b95a
172.217.5.3:80 (ocsp.pki.goog) GET /gsr2/ME4wTDBKMEgwRjAJBgUrDgMCGgUABBTgXIsxbvr2lBkPpoIEVRE6gHlCnAQUm%2BIHV2ccHsBqBt5ZtJot39wZhi4CDQHjtJqhjYqpgSVpULg%3D GET /gsr2/ME4wTDBKMEgwRjAJBgUrDgMCGgUABBTgXIsxbvr2lBkPpoIEVRE6gHlCnAQUm%2BIHV2ccHsBqBt5ZtJot39wZhi4CDQHjtJqhjYqpgSVpULg%3D HTTP/1.1 Connection: Keep-Alive Accept: */* User-Agent: Microsoft-CryptoAPI/6.1 Host: ocsp.pki.goog
172.217.5.3:80 (ocsp.pki.goog) GET /gts1o1/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRCRjDCJxnb3nDwj%2Fxz5aZfZjgXvAQUmNH4bhDrz5vsYJ8YkBug630J%2FSsCEByn1x02lFOOCAAAAAA17VA%3D GET /gts1o1/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRCRjDCJxnb3nDwj%2Fxz5aZfZjgXvAQUmNH4bhDrz5vsYJ8YkBug630J%2FSsCEByn1x02lFOOCAAAAAA17VA%3D HTTP/1.1 Connection: Keep-Alive Accept: */* User-Agent: Microsoft-CryptoAPI/6.1 Host: ocsp.pki.goog
143.204.25.70:80 (a.mailmunch.co) GET /app/v1/styles.css GET /app/v1/styles.css HTTP/1.1 Accept: text/css, */* Referer: http://datingdoctor.com/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: a.mailmunch.co DNT: 1 Connection: Keep-Alive
172.217.5.3:80 (ocsp.pki.goog) GET /gts1o1/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRCRjDCJxnb3nDwj%2Fxz5aZfZjgXvAQUmNH4bhDrz5vsYJ8YkBug630J%2FSsCEQCRUm2CdHJBtwgAAAAANe1T GET /gts1o1/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRCRjDCJxnb3nDwj%2Fxz5aZfZjgXvAQUmNH4bhDrz5vsYJ8YkBug630J%2FSsCEQCRUm2CdHJBtwgAAAAANe1T HTTP/1.1 Connection: Keep-Alive Accept: */* User-Agent: Microsoft-CryptoAPI/6.1 Host: ocsp.pki.goog
35.169.40.78:80 (forms.mailmunch.co) GET /sites/179735 GET /sites/179735 HTTP/1.1 Accept: */* Referer: http://datingdoctor.com/ Accept-Language: en-US Origin: http://datingdoctor.com Accept-Encoding: gzip, deflate User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Host: forms.mailmunch.co DNT: 1 Connection: Keep-Alive Cache-Control: no-cache
35.169.40.78:80 (forms.mailmunch.co) GET /sites/179735 GET /sites/179735 HTTP/1.1 Accept: */* Referer: http://datingdoctor.com/ Accept-Language: en-US Origin: http://datingdoctor.com Accept-Encoding: gzip, deflate User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Host: forms.mailmunch.co DNT: 1 Connection: Keep-Alive Cache-Control: no-cache
172.217.5.3:80 (ocsp.pki.goog) GET /gts1o1/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRCRjDCJxnb3nDwj%2Fxz5aZfZjgXvAQUmNH4bhDrz5vsYJ8YkBug630J%2FSsCEH5AOqyo%2BE9TAgAAAABfl14%3D GET /gts1o1/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRCRjDCJxnb3nDwj%2Fxz5aZfZjgXvAQUmNH4bhDrz5vsYJ8YkBug630J%2FSsCEH5AOqyo%2BE9TAgAAAABfl14%3D HTTP/1.1 Connection: Keep-Alive Accept: */* User-Agent: Microsoft-CryptoAPI/6.1 Host: ocsp.pki.goog
172.217.5.3:80 (ocsp.pki.goog) GET /gts1o1/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRCRjDCJxnb3nDwj%2Fxz5aZfZjgXvAQUmNH4bhDrz5vsYJ8YkBug630J%2FSsCEH5AOqyo%2BE9TAgAAAABfl14%3D GET /gts1o1/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRCRjDCJxnb3nDwj%2Fxz5aZfZjgXvAQUmNH4bhDrz5vsYJ8YkBug630J%2FSsCEH5AOqyo%2BE9TAgAAAABfl14%3D HTTP/1.1 Connection: Keep-Alive Accept: */* User-Agent: Microsoft-CryptoAPI/6.1 Host: ocsp.pki.goog
172.217.5.3:80 (ocsp.pki.goog) GET /gts1o1/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRCRjDCJxnb3nDwj%2Fxz5aZfZjgXvAQUmNH4bhDrz5vsYJ8YkBug630J%2FSsCEH5AOqyo%2BE9TAgAAAABfl14%3D GET /gts1o1/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRCRjDCJxnb3nDwj%2Fxz5aZfZjgXvAQUmNH4bhDrz5vsYJ8YkBug630J%2FSsCEH5AOqyo%2BE9TAgAAAABfl14%3D HTTP/1.1 Connection: Keep-Alive Accept: */* User-Agent: Microsoft-CryptoAPI/6.1 Host: ocsp.pki.goog
50.116.114.76:80 (datingdoctor.com) POST /?wc-ajax=get_refreshed_fragments POST /?wc-ajax=get_refreshed_fragments HTTP/1.1 Accept: */* Content-Type: application/x-www-form-urlencoded; charset=UTF-8 X-Requested-With: XMLHttpRequest Referer: http://datingdoctor.com/ Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Host: datingdoctor.com Content-Length: 18 DNT: 1 Connection: Keep-Alive Cache-Control: no-cache Cookie: PHPSESSID=899556a4327fe08626eb56774a98b95a; mailmunch_second_pageview=true; mo_page_views_...
143.204.25.70:80 (a.mailmunch.co) GET /forms-cache/179735/settings-1586729793.json GET /forms-cache/179735/settings-1586729793.json HTTP/1.1 Accept: */* Referer: http://datingdoctor.com/ Accept-Language: en-US Origin: http://datingdoctor.com Accept-Encoding: gzip, deflate User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko Host: a.mailmunch.co DNT: 1 Connection: Keep-Alive Cache-Control: no-cache
Trojan Javascript Code Samples from POFHeadlines:
#1
!function(a,b,c){function d(a,b){var c=String.fromCharCode;l.clearRect(0,0,k.width,k.height),l.fillText(c.apply(this,a),0,0);var d=k.toDataURL();l.clearRect(0,0,k.width,k.height),l.fillText(c.apply(this,b),0,0);var e=k.toDataURL();return d===e}function e(a){var b;if(!l||!l.fillText)return!1;switch(l.textBaseline="top",l.font="600 32px Arial",a){case"flag":return!(b=d([55356,56826,55356,56819],[55356,56826,8203,55356,56819]))&&(b=d([55356,57332,56128,56423,56128,56418,56128,56421,56128,56430,56128,56423,56128,56447],[55356,57332,8203,56128,56423,8203,56128,56418,8203,56128,56421,8203,56128,56430,8203,56128,56423,8203,56128,56447]),!b);case"emoji":return b=d([55358,56760,9792,65039],[55358,56760,8203,9792,65039]),!b}return!1}function f(a){var c=b.createElement("script");c.src=a,c.defer=c.type="text/javascript",b.getElementsByTagName("head")[0].appendChild(c)}var g,h,i,j,k=b.createElement("canvas"),l=k.getContext&&k.getContext("2d");for(j=Array("flag","emoji"),c.supports={everything:!0,everythingExceptFlag:!0},i=0;i<j.length;i++)c.supports[j[i]]=e(j[i]),c.supports.everything=c.supports.everything&&c.supports[j[i]],"flag"!==j[i]&&(c.supports.everythingExceptFlag=c.supports.everythingExceptFlag&&c.supports[j[i]]);c.supports.everythingExceptFlag=c.supports.everythingExceptFlag&&!c.supports.flag,c.DOMReady=!1,c.readyCallback=function(){c.DOMReady=!0},c.supports.everything||(h=function(){c.readyCallback()},b.addEventListener?(b.addEventListener("DOMContentLoaded",h,!1),a.addEventListener("load",h,!1)):(a.attachEvent("onload",h),b.attachEvent("onreadystatechange",function(){"complete"===b.readyState&&c.readyCallback()})),g=c.source||{},g.concatemoji?f(g.concatemoji):g.wpemoji&&g.twemoji&&(f(g.twemoji),f(g.wpemoji)))}(window,document,window._wpemojiSettings);
</script>
#2
/*! jQuery v1.12.4 | (c) jQuery Foundation | jquery.org/license | WordPress 2019-05-16 */
!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="1.12.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[suFEFFxA0]+|[suFEFFxA0]+$/g,p=/^-ms-/,q=/-([da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?a<0?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.call(b,c,b)}))},slice:function(){return this.pushStack(e.apply(this,arguments))},first:function(){return this.eq(0)},last:function(){return this.eq(-1)},eq:function(a){var b=this.length,c=+a+(a<0?b:0);return this.pushStack(c>=0&&c<b?[this[c]]:[])},end:function(){return this.prevObject||this.constructor()},push:g,sort:c.sort,splice:c.splice},n.extend=n.fn.extend=function(){var a,b,c,d,e,f,g=arguments[0]||{},h=1,i=arguments.length,j=!1;for("boolean"==typeof g&&(j=g,g=arguments[h]||{},h++),"object"==typeof g||n.isFunction(g)||(g={}),h===i&&(g=this,h--);h<i;h++)if(null!=(e=arguments[h]))for(d in e)a=g[d],c=e[d],"__proto__"!==d&&g!==c&&(j&&c&&(n.isPlainObject(c)||(b=n.isArray(c)))?(b?(b=!1,f=a&&n.isArray(a)?a:[]):f=a&&n.isPlainObject(a)?a:{},g[d]=n.extend(j,f,c)):void 0!==c&&(g[d]=c));return g},n.extend({expando:"jQuery"+(m+Math.random()).replace(/D/g,""),isReady:!0,error:function(a){throw new Error(a)},noop:function(){},isFunction:function(a){return"function"===n.type(a)},isArray:Array.isArray||function(a){return"array"===n.type(a)},isWindow:function(a){return null!=a&&a==a.window},isNumeric:function(a){var b=a&&a.toString();return!n.isArray(a)&&b-parseFloat(b)+1>=0},isEmptyObject:function(a){var b;for(b in a)return!1;return!0},isPlainObject:function(a){var b;if(!a||"object"!==n.type(a)||a.nodeType||n.isWindow(a))return!1;try{if(a.constructor&&!k.call(a,"constructor")&&!k.call(a.constructor.prototype,"isPrototypeOf"))return!1}catch(c){return!1}if(!l.ownFirst)for(b in a)return k.call(a,b);for(b in a);return void 0===b||k.call(a,b)},type:function(a){return null==a?a+"":"object"==typeof a||"function"==typeof a?i[j.call(a)]||"object":typeof a},globalEval:function(b){b&&n.trim(b)&&(a.execScript||function(b){a.eval.call(a,b)})(b)},camelCase:function(a){return a.replace(p,"ms-").replace(q,r)},nodeName:function(a,b){return a.nodeName&&a.nodeName.toLowerCase()===b.toLowerCase()},each:function(a,b){var c,d=0;if(s(a)){for(c=a.length;d<c;d++)if(!1===b.call(a[d],d,a[d]))break}else for(d in a)if(!1===b.call(a[d],d,a[d]))break;return a},trim:function(a){return null==a?"":(a+"").replace(o,"")},makeArray:function(a,b){var c=b||[];return null!=a&&(s(Object(a))?n.merge(c,"string"==typeof a?[a]:a):g.call(c,a)),c},inArray:function(a,b,c){var d;if(b){if(h)return h.call(b,a,c);for(d=b.length,c=c?c<0?Math.max(0,d+c):c:0;c<d;c++)if(c in b&&b[c]===a)return c}return-1},merge:function(a,b){var c=+b.length,d=0,e=a.length;while(d<c)a[e++]=b[d++];if(c!==c)while(void 0!==b[d])a[e++]=b[d++];return a.length=e,a},grep:function(a,b,c){for(var d,e=[],f=0,g=a.length,h=!c;f<g;f++)(d=!b(a[f],f))!==h&&e.push(a[f]);return e},map:function(a,b,c){var d,e,g=0,h=[];if(s(a))for(d=a.length;g<d;g++)null!=(e=b(a[g],g,c))&&h.push(e);else for(g in a)null!=(e=b(a[g],g,c))&&h.push(e);return f.apply([],h)},guid:1,proxy:function(a,b){var c,d,f;if("string"==typeof b&&(f=a[b],b=a,a=f),n.isFunction(a))return c=e.call(arguments,2),d=function(){return a.apply(b||this,c.concat(e.call(arguments)))},d.guid=a.guid=a.guid||n.guid++,d},now:function(){return+new Date},support:l}),"function"==typeof Symbol&&(n.fn[Symbol.iterator]=c[Symbol.iterator]),n.each("Boolean Number String Function Array Date RegExp Object Error Symbol".split(" "),function(a,b){i["[object "+b+"]"]=b.toLowerCase()});function s(a){var b=!!a&&"length"in a&&a.length,c=n.type(a);return"function"!==c&&!n.isWindow(a)&&("array"===c||0===b||"number"==typeof b&&b>0&&b-1 in a)}var t=function(a){var b,c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u="sizzle"+1*new Date,v=a.document,w=0,x=0,y=fa(),z=fa(),A=fa(),B=function(a,b){return a===b&&(l=!0),0},C=1<<31,D={}.hasOwnProperty,E=[],F=E.pop,G=E.push,H=E.push,I=E.slice,J=function(a,b){for(var c=0,d=a.length;c<d;c++)if(a[c]===b)return c;return-1},K="checked|selected|async|autofocus|autoplay|controls|defer|disabled|hidden|ismap|loop|multiple|open|readonly|required|scoped",L="[\x20\t\r\n\f]",M="(?:\\.|[\w-]|[^\x00-\xa0])+",N="\["+L+"*("+M+")(?:"+L+"*([*^$|!~]?=)"+L+"*(?:'((?:\\.|[^\\'])*)'|"((?:\\.|[^\\"])*)"|("+M+"))|)"+L+"*\]",O=":("+M+")(?:\((('((?:\\.|[^\\'])*)'|"((?:\\.|[^\\"])*)")|((?:\\.|[^\\()[\]]|"+N+")*)|.*)\)|)",P=new RegExp(L+"+","g"),Q=new RegExp("^"+L+"+|((?:^|[^\\])(?:\\.)*)"+L+"+$","g"),R=new RegExp("^"+L+"*,"+L+"*"),S=new RegExp("^"+L+"*([>+~]|"+L+")"+L+"*"),T=new RegExp("="+L+"*([^\]'"]*?)"+L+"*\]","g"),U=new RegExp(O),V=new RegExp("^"+M+"$"),W={ID:new RegExp("^#("+M+")"),CLASS:new RegExp("^\.("+M+")"),TAG:new RegExp("^("+M+"|[*])"),ATTR:new RegExp("^"+N),PSEUDO:new RegExp("^"+O),CHILD:new RegExp("^:(only|first|last|nth|nth-last)-(child|of-type)(?:\("+L+"*(even|odd|(([+-]|)(\d*)n|)"+L+"*(?:([+-]|)"+L+"*(\d+)|))"+L+"*\)|)","i"),bool:new RegExp("^(?:"+K+")$","i"),needsContext:new RegExp("^"+L+"*[>+~]|:(even|odd|eq|gt|lt|nth|first|last)(?:\("+L+"*((?:-\d)?\d*)"+L+"*\)|)(?=[^-]|$)","i")},X=/^(?:input|select|textarea|button)$/i,Y=/^hd$/i,Z=/^[^{]+{s*[native w/,$=/^(?:#([w-]+)|(w+)|.([w-]+))$/,_=/[+~]/,aa=/'|\/g,ba=new RegExp("\\([\da-f]{1,6}"+L+"?|("+L+")|.)","ig"),ca=function(a,b,c){var d="0x"+b-65536;return d!==d||c?b:d<0?String.fromCharCode(d+65536):String.fromCharCode(d>>10|55296,1023&d|56320)},da=function(){m()};try{H.apply(E=I.call(v.childNodes),v.childNodes),E[v.childNodes.length].nodeType}catch(xa){H={apply:E.length?function(a,b){G.apply(a,I.call(b))}:function(a,b){var c=a.length,d=0;while(a[c++]=b[d++]);a.length=c-1}}}function ea(a,b,d,e){var f,h,j,k,l,o,r,s,w=b&&b.ownerDocument,x=b?b.nodeType:9;if(d=d||[],"string"!=typeof a||!a||1!==x&&9!==x&&11!==x)return d;if(!e&&((b?b.ownerDocument||b:v)!==n&&m(b),b=b||n,p)){if(11!==x&&(o=$.exec(a)))if(f=o[1]){if(9===x){if(!(j=b.getElementById(f)))return d;if(j.id===f)return d.push(j),d}else if(w&&(j=w.getElementById(f))&&t(b,j)&&j.id===f)return d.push(j),d}else{if(o[2])return H.apply(d,b.getElementsByTagName(a)),d;if((f=o[3])&&c.getElementsByClassName&&b.getElementsByClassName)return H.apply(d,b.getElementsByClassName(f)),d}if(c.qsa&&!A[a+" "]&&(!q||!q.test(a))){if(1!==x)w=b,s=a;else if("object"!==b.nodeName.toLowerCase()){(k=b.getAttribute("id"))?k=k.replace(aa,"\$&"):b.setAttribute("id",k=u),r=g(a),h=r.length,l=V.test(k)?"#"+k:"[id='"+k+"']";while(h--)r[h]=l+" "+pa(r[h]);s=r.join(","),w=_.test(a)&&na(b.parentNode)||b}if(s)try{return H.apply(d,w.querySelectorAll(s)),d}catch(y){}finally{k===u&&b.removeAttribute("id")}}}return i(a.replace(Q,"$1"),b,d,e)}function fa(){var a=[];function b(c,e){return a.push(c+" ")>d.cacheLength&&delete b[a.shift()],b[c+" "]=e}return b}function ga(a){return a[u]=!0,a}function ha(a){var b=n.createElement("div");try{return!!a(b)}catch(xa){return!1}finally{b.parentNode&&b.parentNode.removeChild(b),b=null}}function ia(a,b){var c=a.split("|"),e=c.length;while(e--)d.attrHandle[c[e]]=b}function ja(a,b){var c=b&&a,d=c&&1===a.nodeType&&1===b.nodeType&&(~b.sourceIndex||C)-(~a.sourceIndex||C);if(d)return d;if(c)while(c=c.nextSibling)if(c===b)return-1;return a?1:-1}function ka(a){return function(b){return"input"===b.nodeName.toLowerCase()&&b.type===a}}function la(a){return function(b){var c=b.nodeName.toLowerCase();return("input"===c||"button"===c)&&b.type===a}}function ma(a){return ga(function(b){return b=+b,ga(function(c,d){var e,f=a([],c.length,b),g=f.length;while(g--)c[e=f[g]]&&(c[e]=!(d[e]=c[e]))})})}function na(a){return a&&void 0!==a.getElementsByTagName&&a}c=ea.support={},f=ea.isXML=function(a){var b=a&&(a.ownerDocument||a).documentElement;return!!b&&"HTML"!==b.nodeName},m=ea.setDocument=function(a){var b,e,g=a?a.ownerDocument||a:v;return g!==n&&9===g.nodeType&&g.documentElement?(n=g,o=n.documentElement,p=!f(n),(e=n.defaultView)&&e.top!==e&&(e.addEventListener?e.addEventListener("unload",da,!1):e.attachEvent&&e.attachEvent("onunload",da)),c.attributes=ha(function(a){return a.className="i",!a.getAttribute("className")}),c.getElementsByTagName=ha(function(a){return a.appendChild(n.createComment("")),!a.getElementsByTagName("*").length}),c.getElementsByClassName=Z.test(n.getElementsByClassName),c.getById=ha(function(a){return o.appendChild(a).id=u,!n.getElementsByName||!n.getElementsByName(u).length}),c.getById?(d.find.ID=function(a,b){if(void 0!==b.getElementById&&p){var c=b.getElementById(a);return c?[c]:[]}},d.filter.ID=function(a){var b=a.replace(ba,ca);return function(a){return a.getAttribute("id")===b}}):(delete d.find.ID,d.filter.ID=function(a){var b=a.replace(ba,ca);return function(a){var c=void 0!==a.getAttributeNode&&a.getAttributeNode("id");return c&&c.value===b}}),d.find.TAG=c.getElementsByTagName?function(a,b){return void 0!==b.getElementsByTagName?b.getElementsByTagName(a):c.qsa?b.querySelectorAll(a):void 0}:function(a,b){var c,d=[],e=0,f=b.getElementsByTagName(a);if("*"===a){while(c=f[e++])1===c.nodeType&&d.push(c);return d}return f},d.find.CLASS=c.getElementsByClassName&&function(a,b){if(void 0!==b.getElementsByClassName&&p)return b.getElementsByClassName(a)},r=[],q=[],(c.qsa=Z.test(n.querySelectorAll))&&(ha(function(a){o.appendChild(a).innerHTML="<a id='"+u+"'></a><select id='"+u+"-r\' msallowcapture=''><option selected=''></option></select>",a.querySelectorAll("[msallowcapture^='']").length&&q.push("[*^$]="+L+"*(?:''|"")"),a.querySelectorAll("[selected]").length||q.push("\["+L+"*(?:value|"+K+")"),a.querySelectorAll("[id~="+u+"-]").length||q.push("~="),a.querySelectorAll(":checked").length||q.push(":checked"),a.querySelectorAll("a#"+u+"+*").length||q.push(".#.+[+~]")}),ha(function(a){var b=n.createElement("input");b.setAttribute("type","hidden"),a.appendChild(b).setAttribute("name","D"),a.querySelectorAll("[name=d]").length&&q.push("name"+L+"*[*^$|!~]?="),a.querySelectorAll(":enabled").length||q.push(":enabled",":disabled"),a.querySelectorAll("*,:x"),q.push(",.*:")})),(c.matchesSelector=Z.test(s=o.matches||o.webkitMatchesSelector||o.mozMatchesSelector||o.oMatchesSelector||o.msMatchesSelector))&&ha(function(a){c.disconnectedMatch=s.call(a,"div"),s.call(a,"[s!='']:x"),r.push("!=",O)}),q=q.length&&new RegExp(q.join("|")),r=r.length&&new RegExp(r.join("|")),b=Z.test(o.compareDocumentPosition),t=b||Z.test(o.contains)?function(a,b){var c=9===a.nodeType?a.documentElement:a,d=b&&b.parentNode;return a===d||!(!d||1!==d.nodeType||!(c.contains?c.contains(d):a.compareDocumentPosition&&16&a.compareDocumentPosition(d)))}:function(a,b){if(b)while(b=b.parentNode)if(b===a)return!0;return!1},B=b?function(a,b){if(a===b)return l=!0,0;var d=!a.compareDocumentPosition-!b.compareDocumentPosition;return d||(d=(a.ownerDocument||a)===(b.ownerDocument||b)?a.compareDocumentPosition(b):1,1&d||!c.sortDetached&&b.compareDocumentPosition(a)===d?a===n||a.ownerDocument===v&&t(v,a)?-1:b===n||b.ownerDocument===v&&t(v,b)?1:k?J(k,a)-J(k,b):0:4&d?-1:1)}:function(a,b){if(a===b)return l=!0,0;var c,d=0,e=a.parentNode,f=b.parentNode,g=[a],h=[b];if(!e||!f)return a===n?-1:b===n?1:e?-1:f?1:k?J(k,a)-J(k,b):0;if(e===f)return ja(a,b);c=a;while(c=c.parentNode)g.unshift(c);c=b;while(c=c.parentNode)h.unshift(c);while(g[d]===h[d])d++;return d?ja(g[d],h[d]):g[d]===v?-1:h[d]===v?1:0},n):n},ea.matches=function(a,b){return ea(a,null,null,b)},ea.matchesSelector=function(a,b){if((a.ownerDocument||a)!==n&&m(a),b=b.replace(T,"='$1']"),c.matchesSelector&&p&&!A[b+" "]&&(!r||!r.test(b))&&(!q||!q.test(b)))try{var d=s.call(a,b);if(d||c.disconnectedMatch||a.document&&11!==a.document.nodeType)return d}catch(xa){}return ea(b,n,null,[a]).length>0},ea.contains=function(a,b){return(a.ownerDocument||a)!==n&&m(a),t(a,b)},ea.attr=function(a,b){(a.ownerDocument||a)!==n&&m(a);var e=d.attrHandle[b.toLowerCase()],f=e&&D.call(d.attrHandle,b.toLowerCase())?e(a,b,!p):void 0;return void 0!==f?f:c.attributes||!p?a.getAttribute(b):(f=a.getAttributeNode(b))&&f.specified?f.value:null},ea.error=function(a){throw new Error("Syntax error, unrecognized expression: "+a)},ea.uniqueSort=function(a){var b,d=[],e=0,f=0;if(l=!c.detectDuplicates,k=!c.sortStable&&a.slice(0),a.sort(B),l){while(b=a[f++])b===a[f]&&(e=d.push(f));while(e--)a.splice(d[e],1)}return k=null,a},e=ea.getText=function(a){var b,c="",d=0,f=a.nodeType;if(f){if(1===f||9===f||11===f){if("string"==typeof a.textContent)return a.textContent;for(a=a.firstChild;a;a=a.nextSibling)c+=e(a)}else if(3===f||4===f)return a.nodeValue}else while(b=a[d++])c+=e(b);return c},d=ea.selectors={cacheLength:50,createPseudo:ga,match:W,attrHandle:{},find:{},relative:{">":{dir:"parentNode",first:!0}," ":{dir:"parentNode"},"+":{dir:"previousSibling",first:!0},"~":{dir:"previousSibling"}},preFilter:{ATTR:function(a){return a[1]=a[1].replace(ba,ca),a[3]=(a[3]||a[4]||a[5]||"").replace(ba,ca),"~="===a[2]&&(a[3]=" "+a[3]+" "),a.slice(0,4)},CHILD:function(a){return a[1]=a[1].toLowerCase(),"nth"===a[1].slice(0,3)?(a[3]||ea.error(a[0]),a[4]=+(a[4]?a[5]+(a[6]||1):2*("even"===a[3]||"odd"===a[3])),a[5]=+(a[7]+a[8]||"odd"===a[3])):a[3]&&ea.error(a[0]),a},PSEUDO:function(a){var b,c=!a[6]&&a[2];return W.CHILD.test(a[0])?null:(a[3]?a[2]=a[4]||a[5]||"":c&&U.test(c)&&(b=g(c,!0))&&(b=c.indexOf(")",c.length-b)-c.length)&&(a[0]=a[0].slice(0,b),a[2]=c.slice(0,b)),a.slice(0,3))}},filter:{TAG:function(a){var b=a.replace(ba,ca).toLowerCase();return"*"===a?function(){return!0}:function(a){return a.nodeName&&a.nodeName.toLowerCase()===b}},CLASS:function(a){var b=y[a+" "];return b||(b=new RegExp("(^|"+L+")"+a+"("+L+"|$)"))&&y(a,function(a){return b.test("string"==typeof a.className&&a.className||void 0!==a.getAttribute&&a.getAttribute("class")||"")})},ATTR:function(a,b,c){return function(d){var e=ea.attr(d,a);return null==e?"!="===b:!b||(e+="","="===b?e===c:"!="===b?e!==c:"^="===b?c&&0===e.indexOf(c):"*="===b?c&&e.indexOf(c)>-1:"$="===b?c&&e.slice(-c.length)===c:"~="===b?(" "+e.replace(P," ")+" ").indexOf(c)>-1:"|="===b&&(e===c||e.slice(0,c.length+1)===c+"-"))}},CHILD:function(a,b,c,d,e){var f="nth"!==a.slice(0,3),g="last"!==a.slice(-4),h="of-type"===b;return 1===d&&0===e?function(a){return!!a.parentNode}:function(b,c,i){var j,k,l,m,n,o,p=f!==g?"nextSibling":"previousSibling",q=b.parentNode,r=h&&b.nodeName.toLowerCase(),s=!i&&!h,t=!1;if(q){if(f){while(p){m=b;while(m=m[p])if(h?m.nodeName.toLowerCase()===r:1===m.nodeType)return!1;o=p="only"===a&&!o&&"nextSibling"}return!0}if(o=[g?q.firstChild:q.lastChild],g&&s){m=q,l=m[u]||(m[u]={}),k=l[m.uniqueID]||(l[m.uniqueID]={}),j=k[a]||[],n=j[0]===w&&j[1],t=n&&j[2],m=n&&q.childNodes[n];while(m=++n&&m&&m[p]||(t=n=0)||o.pop())if(1===m.nodeType&&++t&&m===b){k[a]=[w,n,t];break}}else if(s&&(m=b,l=m[u]||(m[u]={}),k=l[m.uniqueID]||(l[m.uniqueID]={}),j=k[a]||[],n=j[0]===w&&j[1],t=n),!1===t)while(m=++n&&m&&m[p]||(t=n=0)||o.pop())if((h?m.nodeName.toLowerCase()===r:1===m.nodeType)&&++t&&(s&&(l=m[u]||(m[u]={}),k=l[m.uniqueID]||(l[m.uniqueID]={}),k[a]=[w,t]),m===b))break;return(t-=e)===d||t%d==0&&t/d>=0}}},PSEUDO:function(a,b){var c,e=d.pseudos[a]||d.setFilters[a.toLowerCase()]||ea.error("unsupported pseudo: "+a);return e[u]?e(b):e.length>1?(c=[a,a,"",b],d.setFilters.hasOwnProperty(a.toLowerCase())?ga(function(a,c){var d,f=e(a,b),g=f.length;while(g--)d=J(a,f[g]),a[d]=!(c[d]=f[g])}):function(a){return e(a,0,c)}):e}},pseudos:{not:ga(function(a){var b=[],c=[],d=h(a.replace(Q,"$1"));return d[u]?ga(function(a,b,c,e){var f,g=d(a,null,e,[]),h=a.length;while(h--)(f=g[h])&&(a[h]=!(b[h]=f))}):function(a,e,f){return b[0]=a,d(b,null,f,c),b[0]=null,!c.pop()}}),has:ga(function(a){return function(b){return ea(a,b).length>0}}),contains:ga(function(a){return a=a.replace(ba,ca),function(b){return(b.textContent||b.innerText||e(b)).indexOf(a)>-1}}),lang:ga(function(a){return V.test(a||"")||ea.error("unsupported lang: "+a),a=a.replace(ba,ca).toLowerCase(),function(b){var c;do{if(c=p?b.lang:b.getAttribute("xml:lang")||b.getAttribute("lang"))return(c=c.toLowerCase())===a||0===c.indexOf(a+"-")}while((b=b.parentNode)&&1===b.nodeType);return!1}}),target:function(b){var c=a.location&&a.location.hash;return c&&c.slice(1)===b.id},root:function(a){return a===o},focus:function(a){return a===n.activeElement&&(!n.hasFocus||n.hasFocus())&&!!(a.type||a.href||~a.tabIndex)},enabled:function(a){return!1===a.disabled},disabled:function(a){return!0===a.disabled},checked:function(a){var b=a.nodeName.toLowerCase();return"input"===b&&!!a.checked||"option"===b&&!!a.selected},selected:function(a){return a.parentNode&&a.parentNode.selectedIndex,!0===a.selected},empty:function(a){for(a=a.firstChild;a;a=a.nextSibling)if(a.nodeType<6)return!1;return!0},parent:function(a){return!d.pseudos.empty(a)},header:function(a){return Y.test(a.nodeName)},input:function(a){return X.test(a.nodeName)},button:function(a){var b=a.nodeName.toLowerCase();return"input"===b&&"button"===a.type||"button"===b},text:function(a){var b;return"input"===a.nodeName.toLowerCase()&&"text"===a.type&&(null==(b=a.getAttribute("type"))||"text"===b.toLowerCase())},first:ma(function(){return[0]}),last:ma(function(a,b){return[b-1]}),eq:ma(function(a,b,c){return[c<0?c+b:c]}),even:ma(function(a,b){for(var c=0;c<b;c+=2)a.push(c);return a}),odd:ma(function(a,b){for(var c=1;c<b;c+=2)a.push(c);return a}),lt:ma(function(a,b,c){for(var d=c<0?c+b:c;--d>=0;)a.push(d);return a}),gt:ma(function(a,b,c){for(var d=c<0?c+b:c;++d<b;)a.push(d);return a})}},d.pseudos.nth=d.pseudos.eq;for(b in{radio:!0,checkbox:!0,file:!0,password:!0,image:!0})d.pseudos[b]=ka(b);for(b in{submit:!0,reset:!0})d.pseudos[b]=la(b);function oa(){}oa.prototype=d.filters=d.pseudos,d.setFilters=new oa,g=ea.tokenize=function(a,b){var c,e,f,g,h,i,j,k=z[a+" "];if(k)return b?0:k.slice(0);h=a,i=[],j=d.preFilter;while(h){c&&!(e=R.exec(h))||(e&&(h=h.slice(e[0].length)||h),i.push(f=[])),c=!1,(e=S.exec(h))&&(c=e.shift(),f.push({value:c,type:e[0].replace(Q," ")}),h=h.slice(c.length));for(g in d.filter)!(e=W[g].exec(h))||j[g]&&!(e=j[g](e))||(c=e.shift(),f.push({value:c,type:g,matches:e}),h=h.slice(c.length));if(!c)break}return b?h.length:h?ea.error(a):z(a,i).slice(0)};function pa(a){for(var b=0,c=a.length,d="";b<c;b++)d+=a[b].value;return d}function qa(a,b,c){var d=b.dir,e=c&&"parentNode"===d,f=x++;return b.first?function(b,c,f){while(b=b[d])if(1===b.nodeType||e)return a(b,c,f)}:function(b,c,g){var h,i,j,k=[w,f];if(g){while(b=b[d])if((1===b.nodeType||e)&&a(b,c,g))return!0}else while(b=b[d])if(1===b.nodeType||e){if(j=b[u]||(b[u]={}),i=j[b.uniqueID]||(j[b.uniqueID]={}),(h=i[d])&&h[0]===w&&h[1]===f)return k[2]=h[2];if(i[d]=k,k[2]=a(b,c,g))return!0}}}function ra(a){return a.length>1?function(b,c,d){var e=a.length;while(e--)if(!a[e](b,c,d))return!1;return!0}:a[0]}function sa(a,b,c){for(var d=0,e=b.length;d<e;d++)ea(a,b[d],c);return c}function ta(a,b,c,d,e){for(var f,g=[],h=0,i=a.length,j=null!=b;h<i;h++)(f=a[h])&&(c&&!c(f,d,e)||(g.push(f),j&&b.push(h)));return g}function ua(a,b,c,d,e,f){return d&&!d[u]&&(d=ua(d)),e&&!e[u]&&(e=ua(e,f)),ga(function(f,g,h,i){var j,k,l,m=[],n=[],o=g.length,p=f||sa(b||"*",h.nodeType?[h]:h,[]),q=!a||!f&&b?p:ta(p,m,a,h,i),r=c?e||(f?a:o||d)?[]:g:q;if(c&&c(q,r,h,i),d){j=ta(r,n),d(j,[],h,i),k=j.length;while(k--)(l=j[k])&&(r[n[k]]=!(q[n[k]]=l))}if(f){if(e||a){if(e){j=[],k=r.length;while(k--)(l=r[k])&&j.push(q[k]=l);e(null,r=[],j,i)}k=r.length;while(k--)(l=r[k])&&(j=e?J(f,l):m[k])>-1&&(f[j]=!(g[j]=l))}}else r=ta(r===g?r.splice(o,r.length):r),e?e(null,g,r,i):H.apply(g,r)})}function va(a){for(var b,c,e,f=a.length,g=d.relative[a[0].type],h=g||d.relative[" "],i=g?1:0,k=qa(function(a){return a===b},h,!0),l=qa(function(a){return J(b,a)>-1},h,!0),m=[function(a,c,d){var e=!g&&(d||c!==j)||((b=c).nodeType?k(a,c,d):l(a,c,d));return b=null,e}];i<f;i++)if(c=d.relative[a[i].type])m=[qa(ra(m),c)];else{if(c=d.filter[a[i].type].apply(null,a[i].matches),c[u]){for(e=++i;e<f;e++)if(d.relative[a[e].type])break;return ua(i>1&&ra(m),i>1&&pa(a.slice(0,i-1).concat({value:" "===a[i-2].type?"*":""})).replace(Q,"$1"),c,i<e&&va(a.slice(i,e)),e<f&&va(a=a.slice(e)),e<f&&pa(a))}m.push(c)}return ra(m)}function wa(a,b){var c=b.length>0,e=a.length>0,f=function(f,g,h,i,k){var l,o,q,r=0,s="0",t=f&&[],u=[],v=j,x=f||e&&d.find.TAG("*",k),y=w+=null==v?1:Math.random()||.1,z=x.length;for(k&&(j=g===n||g||k);s!==z&&null!=(l=x[s]);s++){if(e&&l){o=0,g||l.ownerDocument===n||(m(l),h=!p);while(q=a[o++])if(q(l,g||n,h)){i.push(l);break}k&&(w=y)}c&&((l=!q&&l)&&r--,f&&t.push(l))}if(r+=s,c&&s!==r){o=0;while(q=b[o++])q(t,u,g,h);if(f){if(r>0)while(s--)t[s]||u[s]||(u[s]=F.call(i));u=ta(u)}H.apply(i,u),k&&!f&&u.length>0&&r+b.length>1&&ea.uniqueSort(i)}return k&&(w=y,j=v),t};return c?ga(f):f}return h=ea.compile=function(a,b){var c,d=[],e=[],f=A[a+" "];if(!f){b||(b=g(a)),c=b.length;while(c--)f=va(b[c]),f[u]?d.push(f):e.push(f);f=A(a,wa(e,d)),f.selector=a}return f},i=ea.select=function(a,b,e,f){var i,j,k,l,m,n="function"==typeof a&&a,o=!f&&g(a=n.selector||a);if(e=e||[],1===o.length){if(j=o[0]=o[0].slice(0),j.length>2&&"ID"===(k=j[0]).type&&c.getById&&9===b.nodeType&&p&&d.relative[j[1].type]){if(!(b=(d.find.ID(k.matches[0].replace(ba,ca),b)||[])[0]))return e;n&&(b=b.parentNode),a=a.slice(j.shift().value.length)}i=W.needsContext.test(a)?0:j.length;while(i--){if(k=j[i],d.relative[l=k.type])break;if((m=d.find[l])&&(f=m(k.matches[0].replace(ba,ca),_.test(j[0].type)&&na(b.parentNode)||b))){if(j.splice(i,1),!(a=f.length&&pa(j)))return H.apply(e,f),e;break}}}return(n||h(a,o))(f,b,!p,e,!b||_.test(a)&&na(b.parentNode)||b),e},c.sortStable=u.split("").sort(B).join("")===u,c.detectDuplicates=!!l,m(),c.sortDetached=ha(function(a){return 1&a.compareDocumentPosition(n.createElement("div"))}),ha(function(a){return a.innerHTML="<a href='#'></a>","#"===a.firstChild.getAttribute("href")})||ia("type|href|height|width",function(a,b,c){if(!c)return a.getAttribute(b,"type"===b.toLowerCase()?1:2)}),c.attributes&&ha(function(a){return a.innerHTML="<input/>",a.firstChild.setAttribute("value",""),""===a.firstChild.getAttribute("value")})||ia("value",function(a,b,c){if(!c&&"input"===a.nodeName.toLowerCase())return a.defaultValue}),ha(function(a){return null==a.getAttribute("disabled")})||ia(K,function(a,b,c){var d;if(!c)return!0===a[b]?b.toLowerCase():(d=a.getAttributeNode(b))&&d.specified?d.value:null}),ea}(a);n.find=t,n.expr=t.selectors,n.expr[":"]=n.expr.pseudos,n.uniqueSort=n.unique=t.uniqueSort,n.text=t.getText,n.isXMLDoc=t.isXML,n.contains=t.contains;var u=function(a,b,c){var d=[],e=void 0!==c;while((a=a[b])&&9!==a.nodeType)if(1===a.nodeType){if(e&&n(a).is(c))break;d.push(a)}return d},v=function(a,b){for(var c=[];a;a=a.nextSibling)1===a.nodeType&&a!==b&&c.push(a);return c},w=n.expr.match.needsContext,x=/^<([w-]+)s*/?>(?:</1>|)$/,y=/^.[^:#[.,]*$/;function z(a,b,c){if(n.isFunction(b))return n.grep(a,function(a,d){return!!b.call(a,d,a)!==c});if(b.nodeType)return n.grep(a,function(a){return a===b!==c});if("string"==typeof b){if(y.test(b))return n.filter(b,a,c);b=n.filter(b,a)}return n.grep(a,function(a){return n.inArray(a,b)>-1!==c})}n.filter=function(a,b,c){var d=b[0];return c&&(a=":not("+a+")"),1===b.length&&1===d.nodeType?n.find.matchesSelector(d,a)?[d]:[]:n.find.matches(a,n.grep(b,function(a){return 1===a.nodeType}))},n.fn.extend({find:function(a){var b,c=[],d=this,e=d.length;if("string"!=typeof a)return this.pushStack(n(a).filter(function(){for(b=0;b<e;b++)if(n.contains(d[b],this))return!0}));for(b=0;b<e;b++)n.find(a,d[b],c);return c=this.pushStack(e>1?n.unique(c):c),c.selector=this.selector?this.selector+" "+a:a,c},filter:function(a){return this.pushStack(z(this,a||[],!1))},not:function(a){return this.pushStack(z(this,a||[],!0))},is:function(a){return!!z(this,"string"==typeof a&&w.test(a)?n(a):a||[],!1).length}});var A,B=/^(?:s*(<[wW]+>)[^>]*|#([w-]*))$/;(n.fn.init=function(a,b,c){var e,f;if(!a)return this;if(c=c||A,"string"==typeof a){if(!(e="<"===a.charAt(0)&&">"===a.charAt(a.length-1)&&a.length>=3?[null,a,null]:B.exec(a))||!e[1]&&b)return!b||b.jquery?(b||c).find(a):this.constructor(b).find(a);if(e[1]){if(b=b instanceof n?b[0]:b,n.merge(this,n.parseHTML(e[1],b&&b.nodeType?b.ownerDocument||b:d,!0)),x.test(e[1])&&n.isPlainObject(b))for(e in b)n.isFunction(this[e])?this[e](b[e]):this.attr(e,b[e]);return this}if((f=d.getElementById(e[2]))&&f.parentNode){if(f.id!==e[2])return A.find(a);this.length=1,this[0]=f}return this.context=d,this.selector=a,this}return a.nodeType?(this.context=this[0]=a,this.length=1,this):n.isFunction(a)?void 0!==c.ready?c.ready(a):a(n):(void 0!==a.selector&&(this.selector=a.selector,this.context=a.context),n.makeArray(a,this))}).prototype=n.fn,A=n(d);var C=/^(?:parents|prev(?:Until|All))/,D={children:!0,contents:!0,next:!0,prev:!0};n.fn.extend({has:function(a){var b,c=n(a,this),d=c.length;return this.filter(function(){for(b=0;b<d;b++)if(n.contains(this,c[b]))return!0})},closest:function(a,b){for(var c,d=0,e=this.length,f=[],g=w.test(a)||"string"!=typeof a?n(a,b||this.context):0;d<e;d++)for(c=this[d];c&&c!==b;c=c.parentNode)if(c.nodeType<11&&(g?g.index(c)>-1:1===c.nodeType&&n.find.matchesSelector(c,a))){f.push(c);break}return this.pushStack(f.length>1?n.uniqueSort(f):f)},index:function(a){return a?"string"==typeof a?n.inArray(this[0],n(a)):n.inArray(a.jquery?a[0]:a,this):this[0]&&this[0].parentNode?this.first().prevAll().length:-1},add:function(a,b){return this.pushStack(n.uniqueSort(n.merge(this.get(),n(a,b))))},addBack:function(a){return this.add(null==a?this.prevObject:this.prevObject.filter(a))}});function E(a,b){do{a=a[b]}while(a&&1!==a.nodeType);return a}n.each({parent:function(a){var b=a.parentNode;return b&&11!==b.nodeType?b:null},parents:function(a){return u(a,"parentNode")},parentsUntil:function(a,b,c){return u(a,"parentNode",c)},next:function(a){return E(a,"nextSibling")},prev:function(a){return E(a,"previousSibling")},nextAll:function(a){return u(a,"nextSibling")},prevAll:function(a){return u(a,"previousSibling")},nextUntil:function(a,b,c){return u(a,"nextSibling",c)},prevUntil:function(a,b,c){return u(a,"previousSibling",c)},siblings:function(a){return v((a.parentNode||{}).firstChild,a)},children:function(a){return v(a.firstChild)},contents:function(a){return n.nodeName(a,"iframe")?a.contentDocument||a.contentWindow.document:n.merge([],a.childNodes)}},function(a,b){n.fn[a]=function(c,d){var e=n.map(this,b,c);return"Until"!==a.slice(-5)&&(d=c),d&&"string"==typeof d&&(e=n.filter(d,e)),this.length>1&&(D[a]||(e=n.uniqueSort(e)),C.test(a)&&(e=e.reverse())),this.pushStack(e)}});var F=/S+/g;function G(a){var b={};return n.each(a.match(F)||[],function(a,c){b[c]=!0}),b}n.Callbacks=function(a){a="string"==typeof a?G(a):n.extend({},a);var b,c,d,e,f=[],g=[],h=-1,i=function(){for(e=a.once,d=b=!0;g.length;h=-1){c=g.shift();while(++h<f.length)!1===f[h].apply(c[0],c[1])&&a.stopOnFalse&&(h=f.length,c=!1)}a.memory||(c=!1),b=!1,e&&(f=c?[]:"")},j={add:function(){return f&&(c&&!b&&(h=f.length-1,g.push(c)),function b(c){n.each(c,function(c,d){n.isFunction(d)?a.unique&&j.has(d)||f.push(d):d&&d.length&&"string"!==n.type(d)&&b(d)})}(arguments),c&&!b&&i()),this},remove:function(){return n.each(arguments,function(a,b){var c;while((c=n.inArray(b,f,c))>-1)f.splice(c,1),c<=h&&h--}),this},has:function(a){return a?n.inArray(a,f)>-1:f.length>0},empty:function(){return f&&(f=[]),this},disable:function(){return e=g=[],f=c="",this},disabled:function(){return!f},lock:function(){return e=!0,c||j.disable(),this},locked:function(){return!!e},fireWith:function(a,c){return e||(c=c||[],c=[a,c.slice?c.slice():c],g.push(c),b||i()),this},fire:function(){return j.fireWith(this,arguments),this},fired:function(){return!!d}};return j},n.extend({Deferred:function(a){var b=[["resolve","done",n.Callbacks("once memory"),"resolved"],["reject","fail",n.Callbacks("once memory"),"rejected"],["notify","progress",n.Callbacks("memory")]],c="pending",d={state:function(){return c},always:function(){return e.done(arguments).fail(arguments),this},then:function(){var a=arguments;return n.Deferred(function(c){n.each(b,function(b,f){var g=n.isFunction(a[b])&&a[b];e[f[1]](function(){var a=g&&g.apply(this,arguments);a&&n.isFunction(a.promise)?a.promise().progress(c.notify).done(c.resolve).fail(c.reject):c[f[0]+"With"](this===d?c.promise():this,g?[a]:arguments)})}),a=null}).promise()},promise:function(a){return null!=a?n.extend(a,d):d}},e={};return d.pipe=d.then,n.each(b,function(a,f){var g=f[2],h=f[3];d[f[1]]=g.add,h&&g.add(function(){c=h},b[1^a][2].disable,b[2][2].lock),e[f[0]]=function(){return e[f[0]+"With"](this===e?d:this,arguments),this},e[f[0]+"With"]=g.fireWith}),d.promise(e),a&&a.call(e,e),e},when:function(a){var b=0,c=e.call(arguments),d=c.length,f=1!==d||a&&n.isFunction(a.promise)?d:0,g=1===f?a:n.Deferred(),h=function(a,b,c){return function(d){b[a]=this,c[a]=arguments.length>1?e.call(arguments):d,c===i?g.notifyWith(b,c):--f||g.resolveWith(b,c)}},i,j,k;if(d>1)for(i=new Array(d),j=new Array(d),k=new Array(d);b<d;b++)c[b]&&n.isFunction(c[b].promise)?c[b].promise().progress(h(b,j,i)).done(h(b,k,c)).fail(g.reject):--f;return f||g.resolveWith(k,c),g.promise()}});var H;n.fn.ready=function(a){return n.ready.promise().done(a),this},n.extend({isReady:!1,readyWait:1,holdReady:function(a){a?n.readyWait++:n.ready(!0)},ready:function(a){(!0===a?--n.readyWait:n.isReady)||(n.isReady=!0,!0!==a&&--n.readyWait>0||(H.resolveWith(d,[n]),n.fn.triggerHandler&&(n(d).triggerHandler("ready"),n(d).off("ready"))))}});function I(){d.addEventListener?(d.removeEventListener("DOMContentLoaded",J),a.removeEventListener("load",J)):(d.detachEvent("onreadystatechange",J),a.detachEvent("onload",J))}function J(){(d.addEventListener||"load"===a.event.type||"complete"===d.readyState)&&(I(),n.ready())}n.ready.promise=function(b){if(!H)if(H=n.Deferred(),"complete"===d.readyState||"loading"!==d.readyState&&!d.documentElement.doScroll)a.setTimeout(n.ready);else if(d.addEventListener)d.addEventListener("DOMContentLoaded",J),a.addEventListener("load",J);else{d.attachEvent("onreadystatechange",J),a.attachEvent("onload",J);var c=!1;try{c=null==a.frameElement&&d.documentElement}catch(e){}c&&c.doScroll&&function b(){if(!n.isReady){try{c.doScroll("left")}catch(e){return a.setTimeout(b,50)}I(),n.ready()}}()}return H.promise(b)},n.ready.promise();var K;for(K in n(l))break;l.ownFirst="0"===K,l.inlineBlockNeedsLayout=!1,n(function(){var a,b,c,e;(c=d.getElementsByTagName("body")[0])&&c.style&&(b=d.createElement("div"),e=d.createElement("div"),e.style.cssText="position:absolute;border:0;width:0;height:0;top:0;left:-9999px",c.appendChild(e).appendChild(b),void 0!==b.style.zoom&&(b.style.cssText="display:inline;margin:0;border:0;padding:1px;width:1px;zoom:1",l.inlineBlockNeedsLayout=a=3===b.offsetWidth,a&&(c.style.zoom=1)),c.removeChild(e))}),function(){var a=d.createElement("div");l.deleteExpando=!0;try{delete a.test}catch(b){l.deleteExpando=!1}a=null}();var L=function(a){var b=n.noData[(a.nodeName+" ").toLowerCase()],c=+a.nodeType||1;return(1===c||9===c)&&(!b||!0!==b&&a.getAttribute("classid")===b)},M=/^(?:{[wW]*}|[[wW]*])$/,N=/([A-Z])/g;function O(a,b,c){if(void 0===c&&1===a.nodeType){var d="data-"+b.replace(N,"-$1").toLowerCase();if("string"==typeof(c=a.getAttribute(d))){try{c="true"===c||"false"!==c&&("null"===c?null:+c+""===c?+c:M.test(c)?n.parseJSON(c):c)}catch(e){}n.data(a,b,c)}else c=void 0}return c}function P(a){var b
;for(b in a)if(("data"!==b||!n.isEmptyObject(a[b]))&&"toJSON"!==b)return!1;return!0}function Q(a,b,d,e){if(L(a)){var f,g,h=n.expando,i=a.nodeType,j=i?n.cache:a,k=i?a[h]:a[h]&&h;if(k&&j[k]&&(e||j[k].data)||void 0!==d||"string"!=typeof b)return k||(k=i?a[h]=c.pop()||n.guid++:h),j[k]||(j[k]=i?{}:{toJSON:n.noop}),"object"!=typeof b&&"function"!=typeof b||(e?j[k]=n.extend(j[k],b):j[k].data=n.extend(j[k].data,b)),g=j[k],e||(g.data||(g.data={}),g=g.data),void 0!==d&&(g[n.camelCase(b)]=d),"string"==typeof b?null==(f=g[b])&&(f=g[n.camelCase(b)]):f=g,f}}function R(a,b,c){if(L(a)){var d,e,f=a.nodeType,g=f?n.cache:a,h=f?a[n.expando]:n.expando;if(g[h]){if(b&&(d=c?g[h]:g[h].data)){n.isArray(b)?b=b.concat(n.map(b,n.camelCase)):b in d?b=[b]:(b=n.camelCase(b),b=b in d?[b]:b.split(" ")),e=b.length;while(e--)delete d[b[e]];if(c?!P(d):!n.isEmptyObject(d))return}(c||(delete g[h].data,P(g[h])))&&(f?n.cleanData([a],!0):l.deleteExpando||g!=g.window?delete g[h]:g[h]=void 0)}}}n.extend({cache:{},noData:{"applet ":!0,"embed ":!0,"object ":"clsid:D27CDB6E-AE6D-11cf-96B8-444553540000"},hasData:function(a){return!!(a=a.nodeType?n.cache[a[n.expando]]:a[n.expando])&&!P(a)},data:function(a,b,c){return Q(a,b,c)},removeData:function(a,b){return R(a,b)},_data:function(a,b,c){return Q(a,b,c,!0)},_removeData:function(a,b){return R(a,b,!0)}}),n.fn.extend({data:function(a,b){var c,d,e,f=this[0],g=f&&f.attributes;if(void 0===a){if(this.length&&(e=n.data(f),1===f.nodeType&&!n._data(f,"parsedAttrs"))){c=g.length;while(c--)g[c]&&(d=g[c].name,0===d.indexOf("data-")&&(d=n.camelCase(d.slice(5)),O(f,d,e[d])));n._data(f,"parsedAttrs",!0)}return e}return"object"==typeof a?this.each(function(){n.data(this,a)}):arguments.length>1?this.each(function(){n.data(this,a,b)}):f?O(f,a,n.data(f,a)):void 0},removeData:function(a){return this.each(function(){n.removeData(this,a)})}}),n.extend({queue:function(a,b,c){var d;if(a)return b=(b||"fx")+"queue",d=n._data(a,b),c&&(!d||n.isArray(c)?d=n._data(a,b,n.makeArray(c)):d.push(c)),d||[]},dequeue:function(a,b){b=b||"fx";var c=n.queue(a,b),d=c.length,e=c.shift(),f=n._queueHooks(a,b),g=function(){n.dequeue(a,b)};"inprogress"===e&&(e=c.shift(),d--),e&&("fx"===b&&c.unshift("inprogress"),delete f.stop,e.call(a,g,f)),!d&&f&&f.empty.fire()},_queueHooks:function(a,b){var c=b+"queueHooks";return n._data(a,c)||n._data(a,c,{empty:n.Callbacks("once memory").add(function(){n._removeData(a,b+"queue"),n._removeData(a,c)})})}}),n.fn.extend({queue:function(a,b){var c=2;return"string"!=typeof a&&(b=a,a="fx",c--),arguments.length<c?n.queue(this[0],a):void 0===b?this:this.each(function(){var c=n.queue(this,a,b);n._queueHooks(this,a),"fx"===a&&"inprogress"!==c[0]&&n.dequeue(this,a)})},dequeue:function(a){return this.each(function(){n.dequeue(this,a)})},clearQueue:function(a){return this.queue(a||"fx",[])},promise:function(a,b){var c,d=1,e=n.Deferred(),f=this,g=this.length,h=function(){--d||e.resolveWith(f,[f])};"string"!=typeof a&&(b=a,a=void 0),a=a||"fx";while(g--)(c=n._data(f[g],a+"queueHooks"))&&c.empty&&(d++,c.empty.add(h));return h(),e.promise(b)}}),function(){var a;l.shrinkWrapBlocks=function(){if(null!=a)return a;a=!1;var b,c,e;return(c=d.getElementsByTagName("body")[0])&&c.style?(b=d.createElement("div"),e=d.createElement("div"),e.style.cssText="position:absolute;border:0;width:0;height:0;top:0;left:-9999px",c.appendChild(e).appendChild(b),void 0!==b.style.zoom&&(b.style.cssText="-webkit-box-sizing:content-box;-moz-box-sizing:content-box;box-sizing:content-box;display:block;margin:0;border:0;padding:1px;width:1px;zoom:1",b.appendChild(d.createElement("div")).style.width="5px",a=3!==b.offsetWidth),c.removeChild(e),a):void 0}}();var S=/[+-]?(?:d*.|)d+(?:[eE][+-]?d+|)/.source,T=new RegExp("^(?:([+-])=|)("+S+")([a-z%]*)$","i"),U=["Top","Right","Bottom","Left"],V=function(a,b){return a=b||a,"none"===n.css(a,"display")||!n.contains(a.ownerDocument,a)};function W(a,b,c,d){var e,f=1,g=20,h=d?function(){return d.cur()}:function(){return n.css(a,b,"")},i=h(),j=c&&c[3]||(n.cssNumber[b]?"":"px"),k=(n.cssNumber[b]||"px"!==j&&+i)&&T.exec(n.css(a,b));if(k&&k[3]!==j){j=j||k[3],c=c||[],k=+i||1;do{f=f||".5",k/=f,n.style(a,b,k+j)}while(f!==(f=h()/i)&&1!==f&&--g)}return c&&(k=+k||+i||0,e=c[1]?k+(c[1]+1)*c[2]:+c[2],d&&(d.unit=j,d.start=k,d.end=e)),e}var X=function(a,b,c,d,e,f,g){var h=0,i=a.length,j=null==c;if("object"===n.type(c)){e=!0;for(h in c)X(a,b,h,c[h],!0,f,g)}else if(void 0!==d&&(e=!0,n.isFunction(d)||(g=!0),j&&(g?(b.call(a,d),b=null):(j=b,b=function(a,b,c){return j.call(n(a),c)})),b))for(;h<i;h++)b(a[h],c,g?d:d.call(a[h],h,b(a[h],c)));return e?a:j?b.call(a):i?b(a[0],c):f},Y=/^(?:checkbox|radio)$/i,Z=/<([w:-]+)/,$=/^$|/(?:java|ecma)script/i,_=/^s+/,aa="abbr|article|aside|audio|bdi|canvas|data|datalist|details|dialog|figcaption|figure|footer|header|hgroup|main|mark|meter|nav|output|picture|progress|section|summary|template|time|video";function ba(a){var b=aa.split("|"),c=a.createDocumentFragment();if(c.createElement)while(b.length)c.createElement(b.pop());return c}!function(){var a=d.createElement("div"),b=d.createDocumentFragment(),c=d.createElement("input");a.innerHTML=" <link/><table></table><a href='/a'>a</a><input type='checkbox'/>",l.leadingWhitespace=3===a.firstChild.nodeType,l.tbody=!a.getElementsByTagName("tbody").length,l.htmlSerialize=!!a.getElementsByTagName("link").length,l.html5Clone="<:nav></:nav>"!==d.createElement("nav").cloneNode(!0).outerHTML,c.type="checkbox",c.checked=!0,b.appendChild(c),l.appendChecked=c.checked,a.innerHTML="<textarea>x</textarea>",l.noCloneChecked=!!a.cloneNode(!0).lastChild.defaultValue,b.appendChild(a),c=d.createElement("input"),c.setAttribute("type","radio"),c.setAttribute("checked","checked"),c.setAttribute("name","t"),a.appendChild(c),l.checkClone=a.cloneNode(!0).cloneNode(!0).lastChild.checked,l.noCloneEvent=!!a.addEventListener,a[n.expando]=1,l.attributes=!a.getAttribute(n.expando)}();var ca={option:[1,"<select multiple='multiple'>","</select>"],legend:[1,"<fieldset>","</fieldset>"],area:[1,"<map>","</map>"],param:[1,"<object>","</object>"],thead:[1,"<table>","</table>"],tr:[2,"<table><tbody>","</tbody></table>"],col:[2,"<table><tbody></tbody><colgroup>","</colgroup></table>"],td:[3,"<table><tbody><tr>","</tr></tbody></table>"],_default:l.htmlSerialize?[0,"",""]:[1,"X<div>","</div>"]};ca.optgroup=ca.option,ca.tbody=ca.tfoot=ca.colgroup=ca.caption=ca.thead,ca.th=ca.td;function da(a,b){var c,d,e=0,f=void 0!==a.getElementsByTagName?a.getElementsByTagName(b||"*"):void 0!==a.querySelectorAll?a.querySelectorAll(b||"*"):void 0;if(!f)for(f=[],c=a.childNodes||a;null!=(d=c[e]);e++)!b||n.nodeName(d,b)?f.push(d):n.merge(f,da(d,b));return void 0===b||b&&n.nodeName(a,b)?n.merge([a],f):f}function ea(a,b){for(var c,d=0;null!=(c=a[d]);d++)n._data(c,"globalEval",!b||n._data(b[d],"globalEval"))}var fa=/<|&#?w+;/,ga=/<tbody/i;function ha(a){Y.test(a.type)&&(a.defaultChecked=a.checked)}function ia(a,b,c,d,e){for(var f,g,h,i,j,k,m,o=a.length,p=ba(b),q=[],r=0;r<o;r++)if((g=a[r])||0===g)if("object"===n.type(g))n.merge(q,g.nodeType?[g]:g);else if(fa.test(g)){i=i||p.appendChild(b.createElement("div")),j=(Z.exec(g)||["",""])[1].toLowerCase(),m=ca[j]||ca._default,i.innerHTML=m[1]+n.htmlPrefilter(g)+m[2],f=m[0];while(f--)i=i.lastChild;if(!l.leadingWhitespace&&_.test(g)&&q.push(b.createTextNode(_.exec(g)[0])),!l.tbody){g="table"!==j||ga.test(g)?"<table>"!==m[1]||ga.test(g)?0:i:i.firstChild,f=g&&g.childNodes.length;while(f--)n.nodeName(k=g.childNodes[f],"tbody")&&!k.childNodes.length&&g.removeChild(k)}n.merge(q,i.childNodes),i.textContent="";while(i.firstChild)i.removeChild(i.firstChild);i=p.lastChild}else q.push(b.createTextNode(g));i&&p.removeChild(i),l.appendChecked||n.grep(da(q,"input"),ha),r=0;while(g=q[r++])if(d&&n.inArray(g,d)>-1)e&&e.push(g);else if(h=n.contains(g.ownerDocument,g),i=da(p.appendChild(g),"script"),h&&ea(i),c){f=0;while(g=i[f++])$.test(g.type||"")&&c.push(g)}return i=null,p}!function(){var b,c,e=d.createElement("div");for(b in{submit:!0,change:!0,focusin:!0})c="on"+b,(l[b]=c in a)||(e.setAttribute(c,"t"),l[b]=!1===e.attributes[c].expando);e=null}();var ja=/^(?:input|select|textarea)$/i,ka=/^key/,la=/^(?:mouse|pointer|contextmenu|drag|drop)|click/,ma=/^(?:focusinfocus|focusoutblur)$/,na=/^([^.]*)(?:.(.+)|)/;function oa(){return!0}function pa(){return!1}function qa(){try{return d.activeElement}catch(a){}}function ra(a,b,c,d,e,f){var g,h;if("object"==typeof b){"string"!=typeof c&&(d=d||c,c=void 0);for(h in b)ra(a,h,c,d,b[h],f);return a}if(null==d&&null==e?(e=c,d=c=void 0):null==e&&("string"==typeof c?(e=d,d=void 0):(e=d,d=c,c=void 0)),!1===e)e=pa;else if(!e)return a;return 1===f&&(g=e,e=function(a){return n().off(a),g.apply(this,arguments)},e.guid=g.guid||(g.guid=n.guid++)),a.each(function(){n.event.add(this,b,e,d,c)})}n.event={global:{},add:function(a,b,c,d,e){var f,g,h,i,j,k,l,m,o,p,q,r=n._data(a);if(r){c.handler&&(i=c,c=i.handler,e=i.selector),c.guid||(c.guid=n.guid++),(g=r.events)||(g=r.events={}),(k=r.handle)||(k=r.handle=function(a){return void 0===n||a&&n.event.triggered===a.type?void 0:n.event.dispatch.apply(k.elem,arguments)},k.elem=a),b=(b||"").match(F)||[""],h=b.length;while(h--)f=na.exec(b[h])||[],o=q=f[1],p=(f[2]||"").split(".").sort(),o&&(j=n.event.special[o]||{},o=(e?j.delegateType:j.bindType)||o,j=n.event.special[o]||{},l=n.extend({type:o,origType:q,data:d,handler:c,guid:c.guid,selector:e,needsContext:e&&n.expr.match.needsContext.test(e),namespace:p.join(".")},i),(m=g[o])||(m=g[o]=[],m.delegateCount=0,j.setup&&!1!==j.setup.call(a,d,p,k)||(a.addEventListener?a.addEventListener(o,k,!1):a.attachEvent&&a.attachEvent("on"+o,k))),j.add&&(j.add.call(a,l),l.handler.guid||(l.handler.guid=c.guid)),e?m.splice(m.delegateCount++,0,l):m.push(l),n.event.global[o]=!0);a=null}},remove:function(a,b,c,d,e){var f,g,h,i,j,k,l,m,o,p,q,r=n.hasData(a)&&n._data(a);if(r&&(k=r.events)){b=(b||"").match(F)||[""],j=b.length;while(j--)if(h=na.exec(b[j])||[],o=q=h[1],p=(h[2]||"").split(".").sort(),o){l=n.event.special[o]||{},o=(d?l.delegateType:l.bindType)||o,m=k[o]||[],h=h[2]&&new RegExp("(^|\.)"+p.join("\.(?:.*\.|)")+"(\.|$)"),i=f=m.length;while(f--)g=m[f],!e&&q!==g.origType||c&&c.guid!==g.guid||h&&!h.test(g.namespace)||d&&d!==g.selector&&("**"!==d||!g.selector)||(m.splice(f,1),g.selector&&m.delegateCount--,l.remove&&l.remove.call(a,g));i&&!m.length&&(l.teardown&&!1!==l.teardown.call(a,p,r.handle)||n.removeEvent(a,o,r.handle),delete k[o])}else for(o in k)n.event.remove(a,o+b[j],c,d,!0);n.isEmptyObject(k)&&(delete r.handle,n._removeData(a,"events"))}},trigger:function(b,c,e,f){var g,h,i,j,l,m,o,p=[e||d],q=k.call(b,"type")?b.type:b,r=k.call(b,"namespace")?b.namespace.split("."):[];if(i=m=e=e||d,3!==e.nodeType&&8!==e.nodeType&&!ma.test(q+n.event.triggered)&&(q.indexOf(".")>-1&&(r=q.split("."),q=r.shift(),r.sort()),h=q.indexOf(":")<0&&"on"+q,b=b[n.expando]?b:new n.Event(q,"object"==typeof b&&b),b.isTrigger=f?2:3,b.namespace=r.join("."),b.rnamespace=b.namespace?new RegExp("(^|\.)"+r.join("\.(?:.*\.|)")+"(\.|$)"):null,b.result=void 0,b.target||(b.target=e),c=null==c?[b]:n.makeArray(c,[b]),l=n.event.special[q]||{},f||!l.trigger||!1!==l.trigger.apply(e,c))){if(!f&&!l.noBubble&&!n.isWindow(e)){for(j=l.delegateType||q,ma.test(j+q)||(i=i.parentNode);i;i=i.parentNode)p.push(i),m=i;m===(e.ownerDocument||d)&&p.push(m.defaultView||m.parentWindow||a)}o=0;while((i=p[o++])&&!b.isPropagationStopped())b.type=o>1?j:l.bindType||q,g=(n._data(i,"events")||{})[b.type]&&n._data(i,"handle"),g&&g.apply(i,c),(g=h&&i[h])&&g.apply&&L(i)&&(b.result=g.apply(i,c),!1===b.result&&b.preventDefault());if(b.type=q,!f&&!b.isDefaultPrevented()&&(!l._default||!1===l._default.apply(p.pop(),c))&&L(e)&&h&&e[q]&&!n.isWindow(e)){m=e[h],m&&(e[h]=null),n.event.triggered=q;try{e[q]()}catch(s){}n.event.triggered=void 0,m&&(e[h]=m)}return b.result}},dispatch:function(a){a=n.event.fix(a);var b,c,d,f,g,h=[],i=e.call(arguments),j=(n._data(this,"events")||{})[a.type]||[],k=n.event.special[a.type]||{};if(i[0]=a,a.delegateTarget=this,!k.preDispatch||!1!==k.preDispatch.call(this,a)){h=n.event.handlers.call(this,a,j),b=0;while((f=h[b++])&&!a.isPropagationStopped()){a.currentTarget=f.elem,c=0;while((g=f.handlers[c++])&&!a.isImmediatePropagationStopped())a.rnamespace&&!a.rnamespace.test(g.namespace)||(a.handleObj=g,a.data=g.data,void 0!==(d=((n.event.special[g.origType]||{}).handle||g.handler).apply(f.elem,i))&&!1===(a.result=d)&&(a.preventDefault(),a.stopPropagation()))}return k.postDispatch&&k.postDispatch.call(this,a),a.result}},handlers:function(a,b){var c,d,e,f,g=[],h=b.delegateCount,i=a.target;if(h&&i.nodeType&&("click"!==a.type||isNaN(a.button)||a.button<1))for(;i!=this;i=i.parentNode||this)if(1===i.nodeType&&(!0!==i.disabled||"click"!==a.type)){for(d=[],c=0;c<h;c++)f=b[c],e=f.selector+" ",void 0===d[e]&&(d[e]=f.needsContext?n(e,this).index(i)>-1:n.find(e,this,null,[i]).length),d[e]&&d.push(f);d.length&&g.push({elem:i,handlers:d})}return h<b.length&&g.push({elem:this,handlers:b.slice(h)}),g},fix:function(a){if(a[n.expando])return a;var b,c,e,f=a.type,g=a,h=this.fixHooks[f];h||(this.fixHooks[f]=h=la.test(f)?this.mouseHooks:ka.test(f)?this.keyHooks:{}),e=h.props?this.props.concat(h.props):this.props,a=new n.Event(g),b=e.length;while(b--)c=e[b],a[c]=g[c];return a.target||(a.target=g.srcElement||d),3===a.target.nodeType&&(a.target=a.target.parentNode),a.metaKey=!!a.metaKey,h.filter?h.filter(a,g):a},props:"altKey bubbles cancelable ctrlKey currentTarget detail eventPhase metaKey relatedTarget shiftKey target timeStamp view which".split(" "),fixHooks:{},keyHooks:{props:"char charCode key keyCode".split(" "),filter:function(a,b){return null==a.which&&(a.which=null!=b.charCode?b.charCode:b.keyCode),a}},mouseHooks:{props:"button buttons clientX clientY fromElement offsetX offsetY pageX pageY screenX screenY toElement".split(" "),filter:function(a,b){var c,e,f,g=b.button,h=b.fromElement;return null==a.pageX&&null!=b.clientX&&(e=a.target.ownerDocument||d,f=e.documentElement,c=e.body,a.pageX=b.clientX+(f&&f.scrollLeft||c&&c.scrollLeft||0)-(f&&f.clientLeft||c&&c.clientLeft||0),a.pageY=b.clientY+(f&&f.scrollTop||c&&c.scrollTop||0)-(f&&f.clientTop||c&&c.clientTop||0)),!a.relatedTarget&&h&&(a.relatedTarget=h===a.target?b.toElement:h),a.which||void 0===g||(a.which=1&g?1:2&g?3:4&g?2:0),a}},special:{load:{noBubble:!0},focus:{trigger:function(){if(this!==qa()&&this.focus)try{return this.focus(),!1}catch(a){}},delegateType:"focusin"},blur:{trigger:function(){if(this===qa()&&this.blur)return this.blur(),!1},delegateType:"focusout"},click:{trigger:function(){if(n.nodeName(this,"input")&&"checkbox"===this.type&&this.click)return this.click(),!1},_default:function(a){return n.nodeName(a.target,"a")}},beforeunload:{postDispatch:function(a){void 0!==a.result&&a.originalEvent&&(a.originalEvent.returnValue=a.result)}}},simulate:function(a,b,c){var d=n.extend(new n.Event,c,{type:a,isSimulated:!0});n.event.trigger(d,null,b),d.isDefaultPrevented()&&c.preventDefault()}},n.removeEvent=d.removeEventListener?function(a,b,c){a.removeEventListener&&a.removeEventListener(b,c)}:function(a,b,c){var d="on"+b;a.detachEvent&&(void 0===a[d]&&(a[d]=null),a.detachEvent(d,c))},n.Event=function(a,b){if(!(this instanceof n.Event))return new n.Event(a,b);a&&a.type?(this.originalEvent=a,this.type=a.type,this.isDefaultPrevented=a.defaultPrevented||void 0===a.defaultPrevented&&!1===a.returnValue?oa:pa):this.type=a,b&&n.extend(this,b),this.timeStamp=a&&a.timeStamp||n.now(),this[n.expando]=!0},n.Event.prototype={constructor:n.Event,isDefaultPrevented:pa,isPropagationStopped:pa,isImmediatePropagationStopped:pa,preventDefault:function(){var a=this.originalEvent;this.isDefaultPrevented=oa,a&&(a.preventDefault?a.preventDefault():a.returnValue=!1)},stopPropagation:function(){var a=this.originalEvent;this.isPropagationStopped=oa,a&&!this.isSimulated&&(a.stopPropagation&&a.stopPropagation(),a.cancelBubble=!0)},stopImmediatePropagation:function(){var a=this.originalEvent;this.isImmediatePropagationStopped=oa,a&&a.stopImmediatePropagation&&a.stopImmediatePropagation(),this.stopPropagation()}},n.each({mouseenter:"mouseover",mouseleave:"mouseout",pointerenter:"pointerover",pointerleave:"pointerout"},function(a,b){n.event.special[a]={delegateType:b,bindType:b,handle:function(a){var c,d=this,e=a.relatedTarget,f=a.handleObj;return e&&(e===d||n.contains(d,e))||(a.type=f.origType,c=f.handler.apply(this,arguments),a.type=b),c}}}),l.submit||(n.event.special.submit={setup:function(){if(n.nodeName(this,"form"))return!1;n.event.add(this,"click._submit keypress._submit",function(a){var b=a.target,c=n.nodeName(b,"input")||n.nodeName(b,"button")?n.prop(b,"form"):void 0;c&&!n._data(c,"submit")&&(n.event.add(c,"submit._submit",function(a){a._submitBubble=!0}),n._data(c,"submit",!0))})},postDispatch:function(a){a._submitBubble&&(delete a._submitBubble,this.parentNode&&!a.isTrigger&&n.event.simulate("submit",this.parentNode,a))},teardown:function(){if(n.nodeName(this,"form"))return!1;n.event.remove(this,"._submit")}}),l.change||(n.event.special.change={setup:function(){if(ja.test(this.nodeName))return"checkbox"!==this.type&&"radio"!==this.type||(n.event.add(this,"propertychange._change",function(a){"checked"===a.originalEvent.propertyName&&(this._justChanged=!0)}),n.event.add(this,"click._change",function(a){this._justChanged&&!a.isTrigger&&(this._justChanged=!1),n.event.simulate("change",this,a)})),!1;n.event.add(this,"beforeactivate._change",function(a){var b=a.target;ja.test(b.nodeName)&&!n._data(b,"change")&&(n.event.add(b,"change._change",function(a){!this.parentNode||a.isSimulated||a.isTrigger||n.event.simulate("change",this.parentNode,a)}),n._data(b,"change",!0))})},handle:function(a){var b=a.target;if(this!==b||a.isSimulated||a.isTrigger||"radio"!==b.type&&"checkbox"!==b.type)return a.handleObj.handler.apply(this,arguments)},teardown:function(){return n.event.remove(this,"._change"),!ja.test(this.nodeName)}}),l.focusin||n.each({focus:"focusin",blur:"focusout"},function(a,b){var c=function(a){n.event.simulate(b,a.target,n.event.fix(a))};n.event.special[b]={setup:function(){var d=this.ownerDocument||this,e=n._data(d,b);e||d.addEventListener(a,c,!0),n._data(d,b,(e||0)+1)},teardown:function(){var d=this.ownerDocument||this,e=n._data(d,b)-1;e?n._data(d,b,e):(d.removeEventListener(a,c,!0),n._removeData(d,b))}}}),n.fn.extend({on:function(a,b,c,d){return ra(this,a,b,c,d)},one:function(a,b,c,d){return ra(this,a,b,c,d,1)},off:function(a,b,c){var d,e;if(a&&a.preventDefault&&a.handleObj)return d=a.handleObj,n(a.delegateTarget).off(d.namespace?d.origType+"."+d.namespace:d.origType,d.selector,d.handler),this;if("object"==typeof a){for(e in a)this.off(e,b,a[e]);return this}return!1!==b&&"function"!=typeof b||(c=b,b=void 0),!1===c&&(c=pa),this.each(function(){n.event.remove(this,a,c,b)})},trigger:function(a,b){return this.each(function(){n.event.trigger(a,b,this)})},triggerHandler:function(a,b){var c=this[0];if(c)return n.event.trigger(a,b,c,!0)}});var sa=/ jQueryd+="(?:null|d+)"/g,ta=new RegExp("<(?:"+aa+")[\s/>]","i"),ua=/<(?!area|br|col|embed|hr|img|input|link|meta|param)(([w:-]+)[^>]*)/>/gi,va=/<script|<style|<link/i,wa=/checkeds*(?:[^=]|=s*.checked.)/i,xa=/^true/(.*)/,ya=/^s*<!(?:[CDATA[|--)|(?:]]|--)>s*$/g,za=ba(d),Aa=za.appendChild(d.createElement("div"));function Ba(a,b){return n.nodeName(a,"table")&&n.nodeName(11!==b.nodeType?b:b.firstChild,"tr")?a.getElementsByTagName("tbody")[0]||a.appendChild(a.ownerDocument.createElement("tbody")):a}function Ca(a){return a.type=(null!==n.find.attr(a,"type"))+"/"+a.type,a}function Da(a){var b=xa.exec(a.type);return b?a.type=b[1]:a.removeAttribute("type"),a}function Ea(a,b){if(1===b.nodeType&&n.hasData(a)){var c,d,e,f=n._data(a),g=n._data(b,f),h=f.events;if(h){delete g.handle,g.events={};for(c in h)for(d=0,e=h[c].length;d<e;d++)n.event.add(b,c,h[c][d])}g.data&&(g.data=n.extend({},g.data))}}function Fa(a,b){var c,d,e;if(1===b.nodeType){if(c=b.nodeName.toLowerCase(),!l.noCloneEvent&&b[n.expando]){e=n._data(b);for(d in e.events)n.removeEvent(b,d,e.handle);b.removeAttribute(n.expando)}"script"===c&&b.text!==a.text?(Ca(b).text=a.text,Da(b)):"object"===c?(b.parentNode&&(b.outerHTML=a.outerHTML),l.html5Clone&&a.innerHTML&&!n.trim(b.innerHTML)&&(b.innerHTML=a.innerHTML)):"input"===c&&Y.test(a.type)?(b.defaultChecked=b.checked=a.checked,b.value!==a.value&&(b.value=a.value)):"option"===c?b.defaultSelected=b.selected=a.defaultSelected:"input"!==c&&"textarea"!==c||(b.defaultValue=a.defaultValue)}}function Ga(a,b,c,d){b=f.apply([],b);var e,g,h,i,j,k,m=0,o=a.length,p=o-1,q=b[0],r=n.isFunction(q);if(r||o>1&&"string"==typeof q&&!l.checkClone&&wa.test(q))return a.each(function(e){var f=a.eq(e);r&&(b[0]=q.call(this,e,f.html())),Ga(f,b,c,d)});if(o&&(k=ia(b,a[0].ownerDocument,!1,a,d),e=k.firstChild,1===k.childNodes.length&&(k=e),e||d)){for(i=n.map(da(k,"script"),Ca),h=i.length;m<o;m++)g=k,m!==p&&(g=n.clone(g,!0,!0),h&&n.merge(i,da(g,"script"))),c.call(a[m],g,m);if(h)for(j=i[i.length-1].ownerDocument,n.map(i,Da),m=0;m<h;m++)g=i[m],$.test(g.type||"")&&!n._data(g,"globalEval")&&n.contains(j,g)&&(g.src?n._evalUrl&&n._evalUrl(g.src):n.globalEval((g.text||g.textContent||g.innerHTML||"").replace(ya,"")));k=e=null}return a}function Ha(a,b,c){for(var d,e=b?n.filter(b,a):a,f=0;null!=(d=e[f]);f++)c||1!==d.nodeType||n.cleanData(da(d)),d.parentNode&&(c&&n.contains(d.ownerDocument,d)&&ea(da(d,"script")),d.parentNode.removeChild(d));return a}n.extend({htmlPrefilter:function(a){return a.replace(ua,"<$1></$2>")},clone:function(a,b,c){var d,e,f,g,h,i=n.contains(a.ownerDocument,a);if(l.html5Clone||n.isXMLDoc(a)||!ta.test("<"+a.nodeName+">")?f=a.cloneNode(!0):(Aa.innerHTML=a.outerHTML,Aa.removeChild(f=Aa.firstChild)),!(l.noCloneEvent&&l.noCloneChecked||1!==a.nodeType&&11!==a.nodeType||n.isXMLDoc(a)))for(d=da(f),h=da(a),g=0;null!=(e=h[g]);++g)d[g]&&Fa(e,d[g]);if(b)if(c)for(h=h||da(a),d=d||da(f),g=0;null!=(e=h[g]);g++)Ea(e,d[g]);else Ea(a,f);return d=da(f,"script"),d.length>0&&ea(d,!i&&da(a,"script")),d=h=e=null,f},cleanData:function(a,b){for(var d,e,f,g,h=0,i=n.expando,j=n.cache,k=l.attributes,m=n.event.special;null!=(d=a[h]);h++)if((b||L(d))&&(f=d[i],g=f&&j[f])){if(g.events)for(e in g.events)m[e]?n.event.remove(d,e):n.removeEvent(d,e,g.handle);j[f]&&(delete j[f],k||void 0===d.removeAttribute?d[i]=void 0:d.removeAttribute(i),c.push(f))}}}),n.fn.extend({domManip:Ga,detach:function(a){return Ha(this,a,!0)},remove:function(a){return Ha(this,a)},text:function(a){return X(this,function(a){return void 0===a?n.text(this):this.empty().append((this[0]&&this[0].ownerDocument||d).createTextNode(a))},null,a,arguments.length)},append:function(){return Ga(this,arguments,function(a){if(1===this.nodeType||11===this.nodeType||9===this.nodeType){Ba(this,a).appendChild(a)}})},prepend:function(){return Ga(this,arguments,function(a){if(1===this.nodeType||11===this.nodeType||9===this.nodeType){var b=Ba(this,a);b.insertBefore(a,b.firstChild)}})},before:function(){return Ga(this,arguments,function(a){this.parentNode&&this.parentNode.insertBefore(a,this)})},after:function(){return Ga(this,arguments,function(a){this.parentNode&&this.parentNode.insertBefore(a,this.nextSibling)})},empty:function(){for(var a,b=0;null!=(a=this[b]);b++){1===a.nodeType&&n.cleanData(da(a,!1));while(a.firstChild)a.removeChild(a.firstChild);a.options&&n.nodeName(a,"select")&&(a.options.length=0)}return this},clone:function(a,b){return a=null!=a&&a,b=null==b?a:b,this.map(function(){return n.clone(this,a,b)})},html:function(a){return X(this,function(a){var b=this[0]||{},c=0,d=this.length;if(void 0===a)return 1===b.nodeType?b.innerHTML.replace(sa,""):void 0;if("string"==typeof a&&!va.test(a)&&(l.htmlSerialize||!ta.test(a))&&(l.leadingWhitespace||!_.test(a))&&!ca[(Z.exec(a)||["",""])[1].toLowerCase()]){a=n.htmlPrefilter(a);try{for(;c<d;c++)b=this[c]||{},1===b.nodeType&&(n.cleanData(da(b,!1)),b.innerHTML=a);b=0}catch(e){}}b&&this.empty().append(a)},null,a,arguments.length)},replaceWith:function(){var a=[];return Ga(this,arguments,function(b){var c=this.parentNode;n.inArray(this,a)<0&&(n.cleanData(da(this)),c&&c.replaceChild(b,this))},a)}}),n.each({appendTo:"append",prependTo:"prepend",insertBefore:"before",insertAfter:"after",replaceAll:"replaceWith"},function(a,b){n.fn[a]=function(a){for(var c,d=0,e=[],f=n(a),h=f.length-1;d<=h;d++)c=d===h?this:this.clone(!0),n(f[d])[b](c),g.apply(e,c.get());return this.pushStack(e)}});var Ia,Ja={HTML:"block",BODY:"block"};function Ka(a,b){var c=n(b.createElement(a)).appendTo(b.body),d=n.css(c[0],"display");return c.detach(),d}function La(a){var b=d,c=Ja[a];return c||(c=Ka(a,b),"none"!==c&&c||(Ia=(Ia||n("<iframe frameborder='0' width='0' height='0'/>")).appendTo(b.documentElement),b=(Ia[0].contentWindow||Ia[0].contentDocument).document,b.write(),b.close(),c=Ka(a,b),Ia.detach()),Ja[a]=c),c}var Ma=/^margin/,Na=new RegExp("^("+S+")(?!px)[a-z%]+$","i"),Oa=function(a,b,c,d){var e,f,g={};for(f in b)g[f]=a.style[f],a.style[f]=b[f];e=c.apply(a,d||[]);for(f in b)a.style[f]=g[f];return e},Pa=d.documentElement;!function(){var b,c,e,f,g,h,i=d.createElement("div"),j=d.createElement("div");function k(){var k,l,m=d.documentElement;m.appendChild(i),j.style.cssText="-webkit-box-sizing:border-box;box-sizing:border-box;position:relative;display:block;margin:auto;border:1px;padding:1px;top:1%;width:50%",b=e=h=!1,c=g=!0,a.getComputedStyle&&(l=a.getComputedStyle(j),b="1%"!==(l||{}).top,h="2px"===(l||{}).marginLeft,e="4px"===(l||{width:"4px"}).width,j.style.marginRight="50%",c="4px"===(l||{marginRight:"4px"}).marginRight,k=j.appendChild(d.createElement("div")),k.style.cssText=j.style.cssText="-webkit-box-sizing:content-box;-moz-box-sizing:content-box;box-sizing:content-box;display:block;margin:0;border:0;padding:0",k.style.marginRight=k.style.width="0",j.style.width="1px",g=!parseFloat((a.getComputedStyle(k)||{}).marginRight),j.removeChild(k)),j.style.display="none",f=0===j.getClientRects().length,f&&(j.style.display="",j.innerHTML="<table><tr><td></td><td>t</td></tr></table>",j.childNodes[0].style.borderCollapse="separate",k=j.getElementsByTagName("td"),k[0].style.cssText="margin:0;border:0;padding:0;display:none",(f=0===k[0].offsetHeight)&&(k[0].style.display="",k[1].style.display="none",f=0===k[0].offsetHeight)),m.removeChild(i)}j.style&&(j.style.cssText="float:left;opacity:.5",l.opacity="0.5"===j.style.opacity,l.cssFloat=!!j.style.cssFloat,j.style.backgroundClip="content-box",j.cloneNode(!0).style.backgroundClip="",l.clearCloneStyle="content-box"===j.style.backgroundClip,i=d.createElement("div"),i.style.cssText="border:0;width:8px;height:0;top:0;left:-9999px;padding:0;margin-top:1px;position:absolute",j.innerHTML="",i.appendChild(j),l.boxSizing=""===j.style.boxSizing||""===j.style.MozBoxSizing||""===j.style.WebkitBoxSizing,n.extend(l,{reliableHiddenOffsets:function(){return null==b&&k(),f},boxSizingReliable:function(){return null==b&&k(),e},pixelMarginRight:function(){return null==b&&k(),c},pixelPosition:function(){return null==b&&k(),b},reliableMarginRight:function(){return null==b&&k(),g},reliableMarginLeft:function(){return null==b&&k(),h}}))}();var Qa,Ra,Sa=/^(top|right|bottom|left)$/;a.getComputedStyle?(Qa=function(b){var c=b.ownerDocument.defaultView;return c&&c.opener||(c=a),c.getComputedStyle(b)},Ra=function(a,b,c){var d,e,f,g,h=a.style;return c=c||Qa(a),g=c?c.getPropertyValue(b)||c[b]:void 0,""!==g&&void 0!==g||n.contains(a.ownerDocument,a)||(g=n.style(a,b)),c&&!l.pixelMarginRight()&&Na.test(g)&&Ma.test(b)&&(d=h.width,e=h.minWidth,f=h.maxWidth,h.minWidth=h.maxWidth=h.width=g,g=c.width,h.width=d,h.minWidth=e,h.maxWidth=f),void 0===g?g:g+""}):Pa.currentStyle&&(Qa=function(a){return a.currentStyle},Ra=function(a,b,c){var d,e,f,g,h=a.style;return c=c||Qa(a),g=c?c[b]:void 0,null==g&&h&&h[b]&&(g=h[b]),Na.test(g)&&!Sa.test(b)&&(d=h.left,e=a.runtimeStyle,f=e&&e.left,f&&(e.left=a.currentStyle.left),h.left="fontSize"===b?"1em":g,g=h.pixelLeft+"px",h.left=d,f&&(e.left=f)),void 0===g?g:g+""||"auto"});function Ta(a,b){return{get:function(){return a()?void delete this.get:(this.get=b).apply(this,arguments)}}}var Ua=/alpha([^)]*)/i,Va=/opacitys*=s*([^)]*)/i,Wa=/^(none|table(?!-c[ea]).+)/,Xa=new RegExp("^("+S+")(.*)$","i"),Ya={position:"absolute",visibility:"hidden",display:"block"},Za={letterSpacing:"0",fontWeight:"400"},$a=["Webkit","O","Moz","ms"],_a=d.createElement("div").style;function ab(a){if(a in _a)return a;var b=a.charAt(0).toUpperCase()+a.slice(1),c=$a.length;while(c--)if((a=$a[c]+b)in _a)return a}function bb(a,b){for(var c,d,e,f=[],g=0,h=a.length;g<h;g++)d=a[g],d.style&&(f[g]=n._data(d,"olddisplay"),c=d.style.display,b?(f[g]||"none"!==c||(d.style.display=""),""===d.style.display&&V(d)&&(f[g]=n._data(d,"olddisplay",La(d.nodeName)))):(e=V(d),(c&&"none"!==c||!e)&&n._data(d,"olddisplay",e?c:n.css(d,"display"))));for(g=0;g<h;g++)d=a[g],d.style&&(b&&"none"!==d.style.display&&""!==d.style.display||(d.style.display=b?f[g]||"":"none"));return a}function cb(a,b,c){var d=Xa.exec(b);return d?Math.max(0,d[1]-(c||0))+(d[2]||"px"):b}function db(a,b,c,d,e){for(var f=c===(d?"border":"content")?4:"width"===b?1:0,g=0;f<4;f+=2)"margin"===c&&(g+=n.css(a,c+U[f],!0,e)),d?("content"===c&&(g-=n.css(a,"padding"+U[f],!0,e)),"margin"!==c&&(g-=n.css(a,"border"+U[f]+"Width",!0,e))):(g+=n.css(a,"padding"+U[f],!0,e),"padding"!==c&&(g+=n.css(a,"border"+U[f]+"Width",!0,e)));return g}function eb(a,b,c){var d=!0,e="width"===b?a.offsetWidth:a.offsetHeight,f=Qa(a),g=l.boxSizing&&"border-box"===n.css(a,"boxSizing",!1,f);if(e<=0||null==e){if(e=Ra(a,b,f),(e<0||null==e)&&(e=a.style[b]),Na.test(e))return e;d=g&&(l.boxSizingReliable()||e===a.style[b]),e=parseFloat(e)||0}return e+db(a,b,c||(g?"border":"content"),d,f)+"px"}n.extend({cssHooks:{opacity:{get:function(a,b){if(b){var c=Ra(a,"opacity");return""===c?"1":c}}}},cssNumber:{animationIterationCount:!0,columnCount:!0,fillOpacity:!0,flexGrow:!0,flexShrink:!0,fontWeight:!0,lineHeight:!0,opacity:!0,order:!0,orphans:!0,widows:!0,zIndex:!0,zoom:!0},cssProps:{float:l.cssFloat?"cssFloat":"styleFloat"},style:function(a,b,c,d){if(a&&3!==a.nodeType&&8!==a.nodeType&&a.style){var e,f,g,h=n.camelCase(b),i=a.style;if(b=n.cssProps[h]||(n.cssProps[h]=ab(h)||h),g=n.cssHooks[b]||n.cssHooks[h],void 0===c)return g&&"get"in g&&void 0!==(e=g.get(a,!1,d))?e:i[b];if(f=typeof c,"string"===f&&(e=T.exec(c))&&e[1]&&(c=W(a,b,e),f="number"),null!=c&&c===c&&("number"===f&&(c+=e&&e[3]||(n.cssNumber[h]?"":"px")),l.clearCloneStyle||""!==c||0!==b.indexOf("background")||(i[b]="inherit"),!(g&&"set"in g&&void 0===(c=g.set(a,c,d)))))try{i[b]=c}catch(j){}}},css:function(a,b,c,d){var e,f,g,h=n.camelCase(b);return b=n.cssProps[h]||(n.cssProps[h]=ab(h)||h),g=n.cssHooks[b]||n.cssHooks[h],g&&"get"in g&&(f=g.get(a,!0,c)),void 0===f&&(f=Ra(a,b,d)),"normal"===f&&b in Za&&(f=Za[b]),""===c||c?(e=parseFloat(f),!0===c||isFinite(e)?e||0:f):f}}),n.each(["height","width"],function(a,b){n.cssHooks[b]={get:function(a,c,d){if(c)return Wa.test(n.css(a,"display"))&&0===a.offsetWidth?Oa(a,Ya,function(){return eb(a,b,d)}):eb(a,b,d)},set:function(a,c,d){var e=d&&Qa(a);return cb(a,c,d?db(a,b,d,l.boxSizing&&"border-box"===n.css(a,"boxSizing",!1,e),e):0)}}}),l.opacity||(n.cssHooks.opacity={get:function(a,b){return Va.test((b&&a.currentStyle?a.currentStyle.filter:a.style.filter)||"")?.01*parseFloat(RegExp.$1)+"":b?"1":""},set:function(a,b){var c=a.style,d=a.currentStyle,e=n.isNumeric(b)?"alpha(opacity="+100*b+")":"",f=d&&d.filter||c.filter||"";c.zoom=1,(b>=1||""===b)&&""===n.trim(f.replace(Ua,""))&&c.removeAttribute&&(c.removeAttribute("filter"),""===b||d&&!d.filter)||(c.filter=Ua.test(f)?f.replace(Ua,e):f+" "+e)}}),n.cssHooks.marginRight=Ta(l.reliableMarginRight,function(a,b){if(b)return Oa(a,{display:"inline-block"},Ra,[a,"marginRight"])}),n.cssHooks.marginLeft=Ta(l.reliableMarginLeft,function(a,b){if(b)return(parseFloat(Ra(a,"marginLeft"))||(n.contains(a.ownerDocument,a)?a.getBoundingClientRect().left-Oa(a,{marginLeft:0},function(){return a.getBoundingClientRect().left}):0))+"px"}),n.each({
margin:"",padding:"",border:"Width"},function(a,b){n.cssHooks[a+b]={expand:function(c){for(var d=0,e={},f="string"==typeof c?c.split(" "):[c];d<4;d++)e[a+U[d]+b]=f[d]||f[d-2]||f[0];return e}},Ma.test(a)||(n.cssHooks[a+b].set=cb)}),n.fn.extend({css:function(a,b){return X(this,function(a,b,c){var d,e,f={},g=0;if(n.isArray(b)){for(d=Qa(a),e=b.length;g<e;g++)f[b[g]]=n.css(a,b[g],!1,d);return f}return void 0!==c?n.style(a,b,c):n.css(a,b)},a,b,arguments.length>1)},show:function(){return bb(this,!0)},hide:function(){return bb(this)},toggle:function(a){return"boolean"==typeof a?a?this.show():this.hide():this.each(function(){V(this)?n(this).show():n(this).hide()})}});function fb(a,b,c,d,e){return new fb.prototype.init(a,b,c,d,e)}n.Tween=fb,fb.prototype={constructor:fb,init:function(a,b,c,d,e,f){this.elem=a,this.prop=c,this.easing=e||n.easing._default,this.options=b,this.start=this.now=this.cur(),this.end=d,this.unit=f||(n.cssNumber[c]?"":"px")},cur:function(){var a=fb.propHooks[this.prop];return a&&a.get?a.get(this):fb.propHooks._default.get(this)},run:function(a){var b,c=fb.propHooks[this.prop];return this.options.duration?this.pos=b=n.easing[this.easing](a,this.options.duration*a,0,1,this.options.duration):this.pos=b=a,this.now=(this.end-this.start)*b+this.start,this.options.step&&this.options.step.call(this.elem,this.now,this),c&&c.set?c.set(this):fb.propHooks._default.set(this),this}},fb.prototype.init.prototype=fb.prototype,fb.propHooks={_default:{get:function(a){var b;return 1!==a.elem.nodeType||null!=a.elem[a.prop]&&null==a.elem.style[a.prop]?a.elem[a.prop]:(b=n.css(a.elem,a.prop,""),b&&"auto"!==b?b:0)},set:function(a){n.fx.step[a.prop]?n.fx.step[a.prop](a):1!==a.elem.nodeType||null==a.elem.style[n.cssProps[a.prop]]&&!n.cssHooks[a.prop]?a.elem[a.prop]=a.now:n.style(a.elem,a.prop,a.now+a.unit)}}},fb.propHooks.scrollTop=fb.propHooks.scrollLeft={set:function(a){a.elem.nodeType&&a.elem.parentNode&&(a.elem[a.prop]=a.now)}},n.easing={linear:function(a){return a},swing:function(a){return.5-Math.cos(a*Math.PI)/2},_default:"swing"},n.fx=fb.prototype.init,n.fx.step={};var gb,hb,ib=/^(?:toggle|show|hide)$/,jb=/queueHooks$/;function kb(){return a.setTimeout(function(){gb=void 0}),gb=n.now()}function lb(a,b){var c,d={height:a},e=0;for(b=b?1:0;e<4;e+=2-b)c=U[e],d["margin"+c]=d["padding"+c]=a;return b&&(d.opacity=d.width=a),d}function mb(a,b,c){for(var d,e=(pb.tweeners[b]||[]).concat(pb.tweeners["*"]),f=0,g=e.length;f<g;f++)if(d=e[f].call(c,b,a))return d}function nb(a,b,c){var d,e,f,g,h,i,j,k,m=this,o={},p=a.style,q=a.nodeType&&V(a),r=n._data(a,"fxshow");c.queue||(h=n._queueHooks(a,"fx"),null==h.unqueued&&(h.unqueued=0,i=h.empty.fire,h.empty.fire=function(){h.unqueued||i()}),h.unqueued++,m.always(function(){m.always(function(){h.unqueued--,n.queue(a,"fx").length||h.empty.fire()})})),1===a.nodeType&&("height"in b||"width"in b)&&(c.overflow=[p.overflow,p.overflowX,p.overflowY],j=n.css(a,"display"),"inline"===(k="none"===j?n._data(a,"olddisplay")||La(a.nodeName):j)&&"none"===n.css(a,"float")&&(l.inlineBlockNeedsLayout&&"inline"!==La(a.nodeName)?p.zoom=1:p.display="inline-block")),c.overflow&&(p.overflow="hidden",l.shrinkWrapBlocks()||m.always(function(){p.overflow=c.overflow[0],p.overflowX=c.overflow[1],p.overflowY=c.overflow[2]}));for(d in b)if(e=b[d],ib.exec(e)){if(delete b[d],f=f||"toggle"===e,e===(q?"hide":"show")){if("show"!==e||!r||void 0===r[d])continue;q=!0}o[d]=r&&r[d]||n.style(a,d)}else j=void 0;if(n.isEmptyObject(o))"inline"===("none"===j?La(a.nodeName):j)&&(p.display=j);else{r?"hidden"in r&&(q=r.hidden):r=n._data(a,"fxshow",{}),f&&(r.hidden=!q),q?n(a).show():m.done(function(){n(a).hide()}),m.done(function(){var b;n._removeData(a,"fxshow");for(b in o)n.style(a,b,o[b])});for(d in o)g=mb(q?r[d]:0,d,m),d in r||(r[d]=g.start,q&&(g.end=g.start,g.start="width"===d||"height"===d?1:0))}}function ob(a,b){var c,d,e,f,g;for(c in a)if(d=n.camelCase(c),e=b[d],f=a[c],n.isArray(f)&&(e=f[1],f=a[c]=f[0]),c!==d&&(a[d]=f,delete a[c]),(g=n.cssHooks[d])&&"expand"in g){f=g.expand(f),delete a[d];for(c in f)c in a||(a[c]=f[c],b[c]=e)}else b[d]=e}function pb(a,b,c){var d,e,f=0,g=pb.prefilters.length,h=n.Deferred().always(function(){delete i.elem}),i=function(){if(e)return!1;for(var b=gb||kb(),c=Math.max(0,j.startTime+j.duration-b),d=c/j.duration||0,f=1-d,g=0,i=j.tweens.length;g<i;g++)j.tweens[g].run(f);return h.notifyWith(a,[j,f,c]),f<1&&i?c:(h.resolveWith(a,[j]),!1)},j=h.promise({elem:a,props:n.extend({},b),opts:n.extend(!0,{specialEasing:{},easing:n.easing._default},c),originalProperties:b,originalOptions:c,startTime:gb||kb(),duration:c.duration,tweens:[],createTween:function(b,c){var d=n.Tween(a,j.opts,b,c,j.opts.specialEasing[b]||j.opts.easing);return j.tweens.push(d),d},stop:function(b){var c=0,d=b?j.tweens.length:0;if(e)return this;for(e=!0;c<d;c++)j.tweens[c].run(1);return b?(h.notifyWith(a,[j,1,0]),h.resolveWith(a,[j,b])):h.rejectWith(a,[j,b]),this}}),k=j.props;for(ob(k,j.opts.specialEasing);f<g;f++)if(d=pb.prefilters[f].call(j,a,k,j.opts))return n.isFunction(d.stop)&&(n._queueHooks(j.elem,j.opts.queue).stop=n.proxy(d.stop,d)),d;return n.map(k,mb,j),n.isFunction(j.opts.start)&&j.opts.start.call(a,j),n.fx.timer(n.extend(i,{elem:a,anim:j,queue:j.opts.queue})),j.progress(j.opts.progress).done(j.opts.done,j.opts.complete).fail(j.opts.fail).always(j.opts.always)}n.Animation=n.extend(pb,{tweeners:{"*":[function(a,b){var c=this.createTween(a,b);return W(c.elem,a,T.exec(b),c),c}]},tweener:function(a,b){n.isFunction(a)?(b=a,a=["*"]):a=a.match(F);for(var c,d=0,e=a.length;d<e;d++)c=a[d],pb.tweeners[c]=pb.tweeners[c]||[],pb.tweeners[c].unshift(b)},prefilters:[nb],prefilter:function(a,b){b?pb.prefilters.unshift(a):pb.prefilters.push(a)}}),n.speed=function(a,b,c){var d=a&&"object"==typeof a?n.extend({},a):{complete:c||!c&&b||n.isFunction(a)&&a,duration:a,easing:c&&b||b&&!n.isFunction(b)&&b};return d.duration=n.fx.off?0:"number"==typeof d.duration?d.duration:d.duration in n.fx.speeds?n.fx.speeds[d.duration]:n.fx.speeds._default,null!=d.queue&&!0!==d.queue||(d.queue="fx"),d.old=d.complete,d.complete=function(){n.isFunction(d.old)&&d.old.call(this),d.queue&&n.dequeue(this,d.queue)},d},n.fn.extend({fadeTo:function(a,b,c,d){return this.filter(V).css("opacity",0).show().end().animate({opacity:b},a,c,d)},animate:function(a,b,c,d){var e=n.isEmptyObject(a),f=n.speed(b,c,d),g=function(){var b=pb(this,n.extend({},a),f);(e||n._data(this,"finish"))&&b.stop(!0)};return g.finish=g,e||!1===f.queue?this.each(g):this.queue(f.queue,g)},stop:function(a,b,c){var d=function(a){var b=a.stop;delete a.stop,b(c)};return"string"!=typeof a&&(c=b,b=a,a=void 0),b&&!1!==a&&this.queue(a||"fx",[]),this.each(function(){var b=!0,e=null!=a&&a+"queueHooks",f=n.timers,g=n._data(this);if(e)g[e]&&g[e].stop&&d(g[e]);else for(e in g)g[e]&&g[e].stop&&jb.test(e)&&d(g[e]);for(e=f.length;e--;)f[e].elem!==this||null!=a&&f[e].queue!==a||(f[e].anim.stop(c),b=!1,f.splice(e,1));!b&&c||n.dequeue(this,a)})},finish:function(a){return!1!==a&&(a=a||"fx"),this.each(function(){var b,c=n._data(this),d=c[a+"queue"],e=c[a+"queueHooks"],f=n.timers,g=d?d.length:0;for(c.finish=!0,n.queue(this,a,[]),e&&e.stop&&e.stop.call(this,!0),b=f.length;b--;)f[b].elem===this&&f[b].queue===a&&(f[b].anim.stop(!0),f.splice(b,1));for(b=0;b<g;b++)d[b]&&d[b].finish&&d[b].finish.call(this);delete c.finish})}}),n.each(["toggle","show","hide"],function(a,b){var c=n.fn[b];n.fn[b]=function(a,d,e){return null==a||"boolean"==typeof a?c.apply(this,arguments):this.animate(lb(b,!0),a,d,e)}}),n.each({slideDown:lb("show"),slideUp:lb("hide"),slideToggle:lb("toggle"),fadeIn:{opacity:"show"},fadeOut:{opacity:"hide"},fadeToggle:{opacity:"toggle"}},function(a,b){n.fn[a]=function(a,c,d){return this.animate(b,a,c,d)}}),n.timers=[],n.fx.tick=function(){var a,b=n.timers,c=0;for(gb=n.now();c<b.length;c++)(a=b[c])()||b[c]!==a||b.splice(c--,1);b.length||n.fx.stop(),gb=void 0},n.fx.timer=function(a){n.timers.push(a),a()?n.fx.start():n.timers.pop()},n.fx.interval=13,n.fx.start=function(){hb||(hb=a.setInterval(n.fx.tick,n.fx.interval))},n.fx.stop=function(){a.clearInterval(hb),hb=null},n.fx.speeds={slow:600,fast:200,_default:400},n.fn.delay=function(b,c){return b=n.fx?n.fx.speeds[b]||b:b,c=c||"fx",this.queue(c,function(c,d){var e=a.setTimeout(c,b);d.stop=function(){a.clearTimeout(e)}})},function(){var a,b=d.createElement("input"),c=d.createElement("div"),e=d.createElement("select"),f=e.appendChild(d.createElement("option"));c=d.createElement("div"),c.setAttribute("className","t"),c.innerHTML=" <link/><table></table><a href='/a'>a</a><input type='checkbox'/>",a=c.getElementsByTagName("a")[0],b.setAttribute("type","checkbox"),c.appendChild(b),a=c.getElementsByTagName("a")[0],a.style.cssText="top:1px",l.getSetAttribute="t"!==c.className,l.style=/top/.test(a.getAttribute("style")),l.hrefNormalized="/a"===a.getAttribute("href"),l.checkOn=!!b.value,l.optSelected=f.selected,l.enctype=!!d.createElement("form").enctype,e.disabled=!0,l.optDisabled=!f.disabled,b=d.createElement("input"),b.setAttribute("value",""),l.input=""===b.getAttribute("value"),b.value="t",b.setAttribute("type","radio"),l.radioValue="t"===b.value}();var qb=/r/g,rb=/[x20trnf]+/g;n.fn.extend({val:function(a){var b,c,d,e=this[0];{if(arguments.length)return d=n.isFunction(a),this.each(function(c){var e;1===this.nodeType&&(e=d?a.call(this,c,n(this).val()):a,null==e?e="":"number"==typeof e?e+="":n.isArray(e)&&(e=n.map(e,function(a){return null==a?"":a+""})),(b=n.valHooks[this.type]||n.valHooks[this.nodeName.toLowerCase()])&&"set"in b&&void 0!==b.set(this,e,"value")||(this.value=e))});if(e)return(b=n.valHooks[e.type]||n.valHooks[e.nodeName.toLowerCase()])&&"get"in b&&void 0!==(c=b.get(e,"value"))?c:(c=e.value,"string"==typeof c?c.replace(qb,""):null==c?"":c)}}}),n.extend({valHooks:{option:{get:function(a){var b=n.find.attr(a,"value");return null!=b?b:n.trim(n.text(a)).replace(rb," ")}},select:{get:function(a){for(var b,c,d=a.options,e=a.selectedIndex,f="select-one"===a.type||e<0,g=f?null:[],h=f?e+1:d.length,i=e<0?h:f?e:0;i<h;i++)if(c=d[i],(c.selected||i===e)&&(l.optDisabled?!c.disabled:null===c.getAttribute("disabled"))&&(!c.parentNode.disabled||!n.nodeName(c.parentNode,"optgroup"))){if(b=n(c).val(),f)return b;g.push(b)}return g},set:function(a,b){var c,d,e=a.options,f=n.makeArray(b),g=e.length;while(g--)if(d=e[g],n.inArray(n.valHooks.option.get(d),f)>-1)try{d.selected=c=!0}catch(h){d.scrollHeight}else d.selected=!1;return c||(a.selectedIndex=-1),e}}}}),n.each(["radio","checkbox"],function(){n.valHooks[this]={set:function(a,b){if(n.isArray(b))return a.checked=n.inArray(n(a).val(),b)>-1}},l.checkOn||(n.valHooks[this].get=function(a){return null===a.getAttribute("value")?"on":a.value})});var sb,tb,ub=n.expr.attrHandle,vb=/^(?:checked|selected)$/i,wb=l.getSetAttribute,xb=l.input;n.fn.extend({attr:function(a,b){return X(this,n.attr,a,b,arguments.length>1)},removeAttr:function(a){return this.each(function(){n.removeAttr(this,a)})}}),n.extend({attr:function(a,b,c){var d,e,f=a.nodeType;if(3!==f&&8!==f&&2!==f)return void 0===a.getAttribute?n.prop(a,b,c):(1===f&&n.isXMLDoc(a)||(b=b.toLowerCase(),e=n.attrHooks[b]||(n.expr.match.bool.test(b)?tb:sb)),void 0!==c?null===c?void n.removeAttr(a,b):e&&"set"in e&&void 0!==(d=e.set(a,c,b))?d:(a.setAttribute(b,c+""),c):e&&"get"in e&&null!==(d=e.get(a,b))?d:(d=n.find.attr(a,b),null==d?void 0:d))},attrHooks:{type:{set:function(a,b){if(!l.radioValue&&"radio"===b&&n.nodeName(a,"input")){var c=a.value;return a.setAttribute("type",b),c&&(a.value=c),b}}}},removeAttr:function(a,b){var c,d,e=0,f=b&&b.match(F);if(f&&1===a.nodeType)while(c=f[e++])d=n.propFix[c]||c,n.expr.match.bool.test(c)?xb&&wb||!vb.test(c)?a[d]=!1:a[n.camelCase("default-"+c)]=a[d]=!1:n.attr(a,c,""),a.removeAttribute(wb?c:d)}}),tb={set:function(a,b,c){return!1===b?n.removeAttr(a,c):xb&&wb||!vb.test(c)?a.setAttribute(!wb&&n.propFix[c]||c,c):a[n.camelCase("default-"+c)]=a[c]=!0,c}},n.each(n.expr.match.bool.source.match(/w+/g),function(a,b){var c=ub[b]||n.find.attr;xb&&wb||!vb.test(b)?ub[b]=function(a,b,d){var e,f;return d||(f=ub[b],ub[b]=e,e=null!=c(a,b,d)?b.toLowerCase():null,ub[b]=f),e}:ub[b]=function(a,b,c){if(!c)return a[n.camelCase("default-"+b)]?b.toLowerCase():null}}),xb&&wb||(n.attrHooks.value={set:function(a,b,c){if(!n.nodeName(a,"input"))return sb&&sb.set(a,b,c);a.defaultValue=b}}),wb||(sb={set:function(a,b,c){var d=a.getAttributeNode(c);if(d||a.setAttributeNode(d=a.ownerDocument.createAttribute(c)),d.value=b+="","value"===c||b===a.getAttribute(c))return b}},ub.id=ub.name=ub.coords=function(a,b,c){var d;if(!c)return(d=a.getAttributeNode(b))&&""!==d.value?d.value:null},n.valHooks.button={get:function(a,b){var c=a.getAttributeNode(b);if(c&&c.specified)return c.value},set:sb.set},n.attrHooks.contenteditable={set:function(a,b,c){sb.set(a,""!==b&&b,c)}},n.each(["width","height"],function(a,b){n.attrHooks[b]={set:function(a,c){if(""===c)return a.setAttribute(b,"auto"),c}}})),l.style||(n.attrHooks.style={get:function(a){return a.style.cssText||void 0},set:function(a,b){return a.style.cssText=b+""}});var yb=/^(?:input|select|textarea|button|object)$/i,zb=/^(?:a|area)$/i;n.fn.extend({prop:function(a,b){return X(this,n.prop,a,b,arguments.length>1)},removeProp:function(a){return a=n.propFix[a]||a,this.each(function(){try{this[a]=void 0,delete this[a]}catch(b){}})}}),n.extend({prop:function(a,b,c){var d,e,f=a.nodeType;if(3!==f&&8!==f&&2!==f)return 1===f&&n.isXMLDoc(a)||(b=n.propFix[b]||b,e=n.propHooks[b]),void 0!==c?e&&"set"in e&&void 0!==(d=e.set(a,c,b))?d:a[b]=c:e&&"get"in e&&null!==(d=e.get(a,b))?d:a[b]},propHooks:{tabIndex:{get:function(a){var b=n.find.attr(a,"tabindex");return b?parseInt(b,10):yb.test(a.nodeName)||zb.test(a.nodeName)&&a.href?0:-1}}},propFix:{for:"htmlFor",class:"className"}}),l.hrefNormalized||n.each(["href","src"],function(a,b){n.propHooks[b]={get:function(a){return a.getAttribute(b,4)}}}),l.optSelected||(n.propHooks.selected={get:function(a){var b=a.parentNode;return b&&(b.selectedIndex,b.parentNode&&b.parentNode.selectedIndex),null},set:function(a){var b=a.parentNode;b&&(b.selectedIndex,b.parentNode&&b.parentNode.selectedIndex)}}),n.each(["tabIndex","readOnly","maxLength","cellSpacing","cellPadding","rowSpan","colSpan","useMap","frameBorder","contentEditable"],function(){n.propFix[this.toLowerCase()]=this}),l.enctype||(n.propFix.enctype="encoding");var Ab=/[trnf]/g;function Bb(a){return n.attr(a,"class")||""}n.fn.extend({addClass:function(a){var b,c,d,e,f,g,h,i=0;if(n.isFunction(a))return this.each(function(b){n(this).addClass(a.call(this,b,Bb(this)))});if("string"==typeof a&&a){b=a.match(F)||[];while(c=this[i++])if(e=Bb(c),d=1===c.nodeType&&(" "+e+" ").replace(Ab," ")){g=0;while(f=b[g++])d.indexOf(" "+f+" ")<0&&(d+=f+" ");h=n.trim(d),e!==h&&n.attr(c,"class",h)}}return this},removeClass:function(a){var b,c,d,e,f,g,h,i=0;if(n.isFunction(a))return this.each(function(b){n(this).removeClass(a.call(this,b,Bb(this)))});if(!arguments.length)return this.attr("class","");if("string"==typeof a&&a){b=a.match(F)||[];while(c=this[i++])if(e=Bb(c),d=1===c.nodeType&&(" "+e+" ").replace(Ab," ")){g=0;while(f=b[g++])while(d.indexOf(" "+f+" ")>-1)d=d.replace(" "+f+" "," ");h=n.trim(d),e!==h&&n.attr(c,"class",h)}}return this},toggleClass:function(a,b){var c=typeof a;return"boolean"==typeof b&&"string"===c?b?this.addClass(a):this.removeClass(a):n.isFunction(a)?this.each(function(c){n(this).toggleClass(a.call(this,c,Bb(this),b),b)}):this.each(function(){var b,d,e,f;if("string"===c){d=0,e=n(this),f=a.match(F)||[];while(b=f[d++])e.hasClass(b)?e.removeClass(b):e.addClass(b)}else void 0!==a&&"boolean"!==c||(b=Bb(this),b&&n._data(this,"__className__",b),n.attr(this,"class",b||!1===a?"":n._data(this,"__className__")||""))})},hasClass:function(a){var b,c,d=0;b=" "+a+" ";while(c=this[d++])if(1===c.nodeType&&(" "+Bb(c)+" ").replace(Ab," ").indexOf(b)>-1)return!0;return!1}}),n.each("blur focus focusin focusout load resize scroll unload click dblclick mousedown mouseup mousemove mouseover mouseout mouseenter mouseleave change select submit keydown keypress keyup error contextmenu".split(" "),function(a,b){n.fn[b]=function(a,c){return arguments.length>0?this.on(b,null,a,c):this.trigger(b)}}),n.fn.extend({hover:function(a,b){return this.mouseenter(a).mouseleave(b||a)}});var Cb=a.location,Db=n.now(),Eb=/?/,Fb=/(,)|([|{)|(}|])|"(?:[^"\rn]|\["\/bfnrt]|\u[da-fA-F]{4})*"s*:?|true|false|null|-?(?!0d)d+(?:.d+|)(?:[eE][+-]?d+|)/g;n.parseJSON=function(b){if(a.JSON&&a.JSON.parse)return a.JSON.parse(b+"");var c,d=null,e=n.trim(b+"");return e&&!n.trim(e.replace(Fb,function(a,b,e,f){return c&&b&&(d=0),0===d?a:(c=e||b,d+=!f-!e,"")}))?Function("return "+e)():n.error("Invalid JSON: "+b)},n.parseXML=function(b){var c,d;if(!b||"string"!=typeof b)return null;try{a.DOMParser?(d=new a.DOMParser,c=d.parseFromString(b,"text/xml")):(c=new a.ActiveXObject("Microsoft.XMLDOM"),c.async="false",c.loadXML(b))}catch(e){c=void 0}return c&&c.documentElement&&!c.getElementsByTagName("parsererror").length||n.error("Invalid XML: "+b),c};var Gb=/#.*$/,Hb=/([?&])_=[^&]*/,Ib=/^(.*?):[ t]*([^rn]*)r?$/gm,Jb=/^(?:about|app|app-storage|.+-extension|file|res|widget):$/,Kb=/^(?:GET|HEAD)$/,Lb=/^///,Mb=/^([w.+-]+:)(?://(?:[^/?#]*@|)([^/?#:]*)(?::(d+)|)|)/,Nb={},Ob={},Pb="*/".concat("*"),Qb=Cb.href,Rb=Mb.exec(Qb.toLowerCase())||[];function Sb(a){return function(b,c){"string"!=typeof b&&(c=b,b="*");var d,e=0,f=b.toLowerCase().match(F)||[];if(n.isFunction(c))while(d=f[e++])"+"===d.charAt(0)?(d=d.slice(1)||"*",(a[d]=a[d]||[]).unshift(c)):(a[d]=a[d]||[]).push(c)}}function Tb(a,b,c,d){var e={},f=a===Ob;function g(h){var i;return e[h]=!0,n.each(a[h]||[],function(a,h){var j=h(b,c,d);return"string"!=typeof j||f||e[j]?f?!(i=j):void 0:(b.dataTypes.unshift(j),g(j),!1)}),i}return g(b.dataTypes[0])||!e["*"]&&g("*")}function Ub(a,b){var c,d,e=n.ajaxSettings.flatOptions||{};for(d in b)void 0!==b[d]&&((e[d]?a:c||(c={}))[d]=b[d]);return c&&n.extend(!0,a,c),a}function Vb(a,b,c){var d,e,f,g,h=a.contents,i=a.dataTypes;while("*"===i[0])i.shift(),void 0===e&&(e=a.mimeType||b.getResponseHeader("Content-Type"));if(e)for(g in h)if(h[g]&&h[g].test(e)){i.unshift(g);break}if(i[0]in c)f=i[0];else{for(g in c){if(!i[0]||a.converters[g+" "+i[0]]){f=g;break}d||(d=g)}f=f||d}if(f)return f!==i[0]&&i.unshift(f),c[f]}function Wb(a,b,c,d){var e,f,g,h,i,j={},k=a.dataTypes.slice();if(k[1])for(g in a.converters)j[g.toLowerCase()]=a.converters[g];f=k.shift();while(f)if(a.responseFields[f]&&(c[a.responseFields[f]]=b),!i&&d&&a.dataFilter&&(b=a.dataFilter(b,a.dataType)),i=f,f=k.shift())if("*"===f)f=i;else if("*"!==i&&i!==f){if(!(g=j[i+" "+f]||j["* "+f]))for(e in j)if(h=e.split(" "),h[1]===f&&(g=j[i+" "+h[0]]||j["* "+h[0]])){!0===g?g=j[e]:!0!==j[e]&&(f=h[0],k.unshift(h[1]));break}if(!0!==g)if(g&&a.throws)b=g(b);else try{b=g(b)}catch(l){return{state:"parsererror",error:g?l:"No conversion from "+i+" to "+f}}}return{state:"success",data:b}}n.extend({active:0,lastModified:{},etag:{},ajaxSettings:{url:Qb,type:"GET",isLocal:Jb.test(Rb[1]),global:!0,processData:!0,async:!0,contentType:"application/x-www-form-urlencoded; charset=UTF-8",accepts:{"*":Pb,text:"text/plain",html:"text/html",xml:"application/xml, text/xml",json:"application/json, text/javascript"},contents:{xml:/bxmlb/,html:/bhtml/,json:/bjsonb/},responseFields:{xml:"responseXML",text:"responseText",json:"responseJSON"},converters:{"* text":String,"text html":!0,"text json":n.parseJSON,"text xml":n.parseXML},flatOptions:{url:!0,context:!0}},ajaxSetup:function(a,b){return b?Ub(Ub(a,n.ajaxSettings),b):Ub(n.ajaxSettings,a)},ajaxPrefilter:Sb(Nb),ajaxTransport:Sb(Ob),ajax:function(b,c){"object"==typeof b&&(c=b,b=void 0),c=c||{};var d,e,f,g,h,i,j,k,l=n.ajaxSetup({},c),m=l.context||l,o=l.context&&(m.nodeType||m.jquery)?n(m):n.event,p=n.Deferred(),q=n.Callbacks("once memory"),r=l.statusCode||{},s={},t={},u=0,v="canceled",w={readyState:0,getResponseHeader:function(a){var b;if(2===u){if(!k){k={};while(b=Ib.exec(g))k[b[1].toLowerCase()]=b[2]}b=k[a.toLowerCase()]}return null==b?null:b},getAllResponseHeaders:function(){return 2===u?g:null},setRequestHeader:function(a,b){var c=a.toLowerCase();return u||(a=t[c]=t[c]||a,s[a]=b),this},overrideMimeType:function(a){return u||(l.mimeType=a),this},statusCode:function(a){var b;if(a)if(u<2)for(b in a)r[b]=[r[b],a[b]];else w.always(a[w.status]);return this},abort:function(a){var b=a||v;return j&&j.abort(b),x(0,b),this}};if(p.promise(w).complete=q.add,w.success=w.done,w.error=w.fail,l.url=((b||l.url||Qb)+"").replace(Gb,"").replace(Lb,Rb[1]+"//"),l.type=c.method||c.type||l.method||l.type,l.dataTypes=n.trim(l.dataType||"*").toLowerCase().match(F)||[""],null==l.crossDomain&&(d=Mb.exec(l.url.toLowerCase()),l.crossDomain=!(!d||d[1]===Rb[1]&&d[2]===Rb[2]&&(d[3]||("http:"===d[1]?"80":"443"))===(Rb[3]||("http:"===Rb[1]?"80":"443")))),l.data&&l.processData&&"string"!=typeof l.data&&(l.data=n.param(l.data,l.traditional)),Tb(Nb,l,c,w),2===u)return w;i=n.event&&l.global,i&&0==n.active++&&n.event.trigger("ajaxStart"),l.type=l.type.toUpperCase(),l.hasContent=!Kb.test(l.type),f=l.url,l.hasContent||(l.data&&(f=l.url+=(Eb.test(f)?"&":"?")+l.data,delete l.data),!1===l.cache&&(l.url=Hb.test(f)?f.replace(Hb,"$1_="+Db++):f+(Eb.test(f)?"&":"?")+"_="+Db++)),l.ifModified&&(n.lastModified[f]&&w.setRequestHeader("If-Modified-Since",n.lastModified[f]),n.etag[f]&&w.setRequestHeader("If-None-Match",n.etag[f])),(l.data&&l.hasContent&&!1!==l.contentType||c.contentType)&&w.setRequestHeader("Content-Type",l.contentType),w.setRequestHeader("Accept",l.dataTypes[0]&&l.accepts[l.dataTypes[0]]?l.accepts[l.dataTypes[0]]+("*"!==l.dataTypes[0]?", "+Pb+"; q=0.01":""):l.accepts["*"]);for(e in l.headers)w.setRequestHeader(e,l.headers[e]);if(l.beforeSend&&(!1===l.beforeSend.call(m,w,l)||2===u))return w.abort();v="abort";for(e in{success:1,error:1,complete:1})w[e](l[e]);if(j=Tb(Ob,l,c,w)){if(w.readyState=1,i&&o.trigger("ajaxSend",[w,l]),2===u)return w;l.async&&l.timeout>0&&(h=a.setTimeout(function(){w.abort("timeout")},l.timeout));try{u=1,j.send(s,x)}catch(y){if(!(u<2))throw y;x(-1,y)}}else x(-1,"No Transport");function x(b,c,d,e){var k,s,t,v,x,y=c;2!==u&&(u=2,h&&a.clearTimeout(h),j=void 0,g=e||"",w.readyState=b>0?4:0,k=b>=200&&b<300||304===b,d&&(v=Vb(l,w,d)),v=Wb(l,v,w,k),k?(l.ifModified&&(x=w.getResponseHeader("Last-Modified"),x&&(n.lastModified[f]=x),(x=w.getResponseHeader("etag"))&&(n.etag[f]=x)),204===b||"HEAD"===l.type?y="nocontent":304===b?y="notmodified":(y=v.state,s=v.data,t=v.error,k=!t)):(t=y,!b&&y||(y="error",b<0&&(b=0))),w.status=b,w.statusText=(c||y)+"",k?p.resolveWith(m,[s,y,w]):p.rejectWith(m,[w,y,t]),w.statusCode(r),r=void 0,i&&o.trigger(k?"ajaxSuccess":"ajaxError",[w,l,k?s:t]),q.fireWith(m,[w,y]),i&&(o.trigger("ajaxComplete",[w,l]),--n.active||n.event.trigger("ajaxStop")))}return w},getJSON:function(a,b,c){return n.get(a,b,c,"json")},getScript:function(a,b){return n.get(a,void 0,b,"script")}}),n.each(["get","post"],function(a,b){n[b]=function(a,c,d,e){return n.isFunction(c)&&(e=e||d,d=c,c=void 0),n.ajax(n.extend({url:a,type:b,dataType:e,data:c,success:d},n.isPlainObject(a)&&a))}}),n._evalUrl=function(a){return n.ajax({url:a,type:"GET",dataType:"script",cache:!0,async:!1,global:!1,throws:!0})},n.fn.extend({wrapAll:function(a){if(n.isFunction(a))return this.each(function(b){n(this).wrapAll(a.call(this,b))});if(this[0]){var b=n(a,this[0].ownerDocument).eq(0).clone(!0);this[0].parentNode&&b.insertBefore(this[0]),b.map(function(){var a=this;while(a.firstChild&&1===a.firstChild.nodeType)a=a.firstChild;return a}).append(this)}return this},wrapInner:function(a){return n.isFunction(a)?this.each(function(b){n(this).wrapInner(a.call(this,b))}):this.each(function(){var b=n(this),c=b.contents();c.length?c.wrapAll(a):b.append(a)})},wrap:function(a){var b=n.isFunction(a);return this.each(function(c){n(this).wrapAll(b?a.call(this,c):a)})},unwrap:function(){return this.parent().each(function(){n.nodeName(this,"body")||n(this).replaceWith(this.childNodes)}).end()}});function Xb(a){return a.style&&a.style.display||n.css(a,"display")}function Yb(a){if(!n.contains(a.ownerDocument||d,a))return!0;while(a&&1===a.nodeType){if("none"===Xb(a)||"hidden"===a.type)return!0;a=a.parentNode}return!1}n.expr.filters.hidden=function(a){return l.reliableHiddenOffsets()?a.offsetWidth<=0&&a.offsetHeight<=0&&!a.getClientRects().length:Yb(a)},n.expr.filters.visible=function(a){return!n.expr.filters.hidden(a)};var Zb=/%20/g,$b=/[]$/,_b=/r?n/g,ac=/^(?:submit|button|image|reset|file)$/i,bc=/^(?:input|select|textarea|keygen)/i;function cc(a,b,c,d){var e;if(n.isArray(b))n.each(b,function(b,e){c||$b.test(a)?d(a,e):cc(a+"["+("object"==typeof e&&null!=e?b:"")+"]",e,c,d)});else if(c||"object"!==n.type(b))d(a,b);else for(e in b)cc(a+"["+e+"]",b[e],c,d)}n.param=function(a,b){var c,d=[],e=function(a,b){b=n.isFunction(b)?b():null==b?"":b,d[d.length]=encodeURIComponent(a)+"="+encodeURIComponent(b)};if(void 0===b&&(b=n.ajaxSettings&&n.ajaxSettings.traditional),n.isArray(a)||a.jquery&&!n.isPlainObject(a))n.each(a,function(){e(this.name,this.value)});else for(c in a)cc(c,a[c],b,e);return d.join("&").replace(Zb,"+")},n.fn.extend({serialize:function(){return n.param(this.serializeArray())},serializeArray:function(){return this.map(function(){var a=n.prop(this,"elements");return a?n.makeArray(a):this}).filter(function(){var a=this.type;return this.name&&!n(this).is(":disabled")&&bc.test(this.nodeName)&&!ac.test(a)&&(this.checked||!Y.test(a))}).map(function(a,b){var c=n(this).val();return null==c?null:n.isArray(c)?n.map(c,function(a){return{name:b.name,value:a.replace(_b,"rn")}}):{name:b.name,value:c.replace(_b,"rn")}}).get()}}),n.ajaxSettings.xhr=void 0!==a.ActiveXObject?function(){return this.isLocal?hc():d.documentMode>8?gc():/^(get|post|head|put|delete|options)$/i.test(this.type)&&gc()||hc()}:gc;var dc=0,ec={},fc=n.ajaxSettings.xhr();a.attachEvent&&a.attachEvent("onunload",function(){for(var a in ec)ec[a](void 0,!0)}),l.cors=!!fc&&"withCredentials"in fc,(fc=l.ajax=!!fc)&&n.ajaxTransport(function(b){if(!b.crossDomain||l.cors){var c;return{send:function(d,e){var f,g=b.xhr(),h=++dc;if(g.open(b.type,b.url,b.async,b.username,b.password),b.xhrFields)for(f in b.xhrFields)g[f]=b.xhrFields[f];b.mimeType&&g.overrideMimeType&&g.overrideMimeType(b.mimeType),b.crossDomain||d["X-Requested-With"]||(d["X-Requested-With"]="XMLHttpRequest");for(f in d)void 0!==d[f]&&g.setRequestHeader(f,d[f]+"");g.send(b.hasContent&&b.data||null),c=function(a,d){var f,i,j;if(c&&(d||4===g.readyState))if(delete ec[h],c=void 0,g.onreadystatechange=n.noop,d)4!==g.readyState&&g.abort();else{j={},f=g.status,"string"==typeof g.responseText&&(j.text=g.responseText);try{i=g.statusText}catch(k){i=""}f||!b.isLocal||b.crossDomain?1223===f&&(f=204):f=j.text?200:404}j&&e(f,i,j,g.getAllResponseHeaders())},b.async?4===g.readyState?a.setTimeout(c):g.onreadystatechange=ec[h]=c:c()},abort:function(){c&&c(void 0,!0)}}}});function gc(){try{return new a.XMLHttpRequest}catch(b){}}function hc(){try{return new a.ActiveXObject("Microsoft.XMLHTTP")}catch(b){}}n.ajaxSetup({accepts:{script:"text/javascript, application/javascript, application/ecmascript, application/x-ecmascript"},contents:{script:/b(?:java|ecma)scriptb/},converters:{"text script":function(a){return n.globalEval(a),a}}}),n.ajaxPrefilter("script",function(a){void 0===a.cache&&(a.cache=!1),a.crossDomain&&(a.type="GET",a.global=!1)}),n.ajaxTransport("script",function(a){if(a.crossDomain){var b,c=d.head||n("head")[0]||d.documentElement;return{send:function(e,f){b=d.createElement("script"),b.async=!0,a.scriptCharset&&(b.charset=a.scriptCharset),b.src=a.url,b.onload=b.onreadystatechange=function(a,c){(c||!b.readyState||/loaded|complete/.test(b.readyState))&&(b.onload=b.onreadystatechange=null,b.parentNode&&b.parentNode.removeChild(b),b=null,c||f(200,"success"))},c.insertBefore(b,c.firstChild)},abort:function(){b&&b.onload(void 0,!0)}}}});var ic=[],jc=/(=)?(?=&|$)|??/;n.ajaxSetup({jsonp:"callback",jsonpCallback:function(){var a=ic.pop()||n.expando+"_"+Db++;return this[a]=!0,a}}),n.ajaxPrefilter("json jsonp",function(b,c,d){var e,f,g,h=!1!==b.jsonp&&(jc.test(b.url)?"url":"string"==typeof b.data&&0===(b.contentType||"").indexOf("application/x-www-form-urlencoded")&&jc.test(b.data)&&"data");if(h||"jsonp"===b.dataTypes[0])return e=b.jsonpCallback=n.isFunction(b.jsonpCallback)?b.jsonpCallback():b.jsonpCallback,h?b[h]=b[h].replace(jc,"$1"+e):!1!==b.jsonp&&(b.url+=(Eb.test(b.url)?"&":"?")+b.jsonp+"="+e),b.converters["script json"]=function(){return g||n.error(e+" was not called"),g[0]},b.dataTypes[0]="json",f=a[e],a[e]=function(){g=arguments},d.always(function(){void 0===f?n(a).removeProp(e):a[e]=f,b[e]&&(b.jsonpCallback=c.jsonpCallback,ic.push(e)),g&&n.isFunction(f)&&f(g[0]),g=f=void 0}),"script"}),n.parseHTML=function(a,b,c){if(!a||"string"!=typeof a)return null;"boolean"==typeof b&&(c=b,b=!1),b=b||d;var e=x.exec(a),f=!c&&[];return e?[b.createElement(e[1])]:(e=ia([a],b,f),f&&f.length&&n(f).remove(),n.merge([],e.childNodes))};var kc=n.fn.load;n.fn.load=function(a,b,c){if("string"!=typeof a&&kc)return kc.apply(this,arguments);var d,e,f,g=this,h=a.indexOf(" ");return h>-1&&(d=n.trim(a.slice(h,a.length)),a=a.slice(0,h)),n.isFunction(b)?(c=b,b=void 0):b&&"object"==typeof b&&(e="POST"),g.length>0&&n.ajax({url:a,type:e||"GET",dataType:"html",data:b}).done(function(a){f=arguments,g.html(d?n("<div>").append(n.parseHTML(a)).find(d):a)}).always(c&&function(a,b){g.each(function(){c.apply(this,f||[a.responseText,b,a])})}),this},n.each(["ajaxStart","ajaxStop","ajaxComplete","ajaxError","ajaxSuccess","ajaxSend"],function(a,b){n.fn[b]=function(a){return this.on(b,a)}}),n.expr.filters.animated=function(a){return n.grep(n.timers,function(b){return a===b.elem}).length};function lc(a){return n.isWindow(a)?a:9===a.nodeType&&(a.defaultView||a.parentWindow)}n.offset={setOffset:function(a,b,c){var d,e,f,g,h,i,j,k=n.css(a,"position"),l=n(a),m={};"static"===k&&(a.style.position="relative"),h=l.offset(),f=n.css(a,"top"),i=n.css(a,"left"),j=("absolute"===k||"fixed"===k)&&n.inArray("auto",[f,i])>-1,j?(d=l.position(),g=d.top,e=d.left):(g=parseFloat(f)||0,e=parseFloat(i)||0),n.isFunction(b)&&(b=b.call(a,c,n.extend({},h))),null!=b.top&&(m.top=b.top-h.top+g),null!=b.left&&(m.left=b.left-h.left+e),"using"in b?b.using.call(a,m):l.css(m)}},n.fn.extend({offset:function(a){if(arguments.length)return void 0===a?this:this.each(function(b){n.offset.setOffset(this,a,b)});var b,c,d={top:0,left:0},e=this[0],f=e&&e.ownerDocument;if(f)return b=f.documentElement,n.contains(b,e)?(void 0!==e.getBoundingClientRect&&(d=e.getBoundingClientRect()),c=lc(f),{top:d.top+(c.pageYOffset||b.scrollTop)-(b.clientTop||0),left:d.left+(c.pageXOffset||b.scrollLeft)-(b.clientLeft||0)}):d},position:function(){if(this[0]){var a,b,c={top:0,left:0},d=this[0];return"fixed"===n.css(d,"position")?b=d.getBoundingClientRect():(a=this.offsetParent(),b=this.offset(),n.nodeName(a[0],"html")||(c=a.offset()),c.top+=n.css(a[0],"borderTopWidth",!0),c.left+=n.css(a[0],"borderLeftWidth",!0)),{top:b.top-c.top-n.css(d,"marginTop",!0),left:b.left-c.left-n.css(d,"marginLeft",!0)}}},offsetParent:function(){return this.map(function(){var a=this.offsetParent;while(a&&!n.nodeName(a,"html")&&"static"===n.css(a,"position"))a=a.offsetParent;return a||Pa})}}),n.each({scrollLeft:"pageXOffset",scrollTop:"pageYOffset"},function(a,b){var c=/Y/.test(b);n.fn[a]=function(d){return X(this,function(a,d,e){var f=lc(a);if(void 0===e)return f?b in f?f[b]:f.document.documentElement[d]:a[d];f?f.scrollTo(c?n(f).scrollLeft():e,c?e:n(f).scrollTop()):a[d]=e},a,d,arguments.length,null)}}),n.each(["top","left"],function(a,b){n.cssHooks[b]=Ta(l.pixelPosition,function(a,c){if(c)return c=Ra(a,b),Na.test(c)?n(a).position()[b]+"px":c})}),n.each({Height:"height",Width:"width"},function(a,b){n.each({padding:"inner"+a,content:b,"":"outer"+a},function(c,d){n.fn[d]=function(d,e){var f=arguments.length&&(c||"boolean"!=typeof d),g=c||(!0===d||!0===e?"margin":"border")
;return X(this,function(b,c,d){var e;return n.isWindow(b)?b.document.documentElement["client"+a]:9===b.nodeType?(e=b.documentElement,Math.max(b.body["scroll"+a],e["scroll"+a],b.body["offset"+a],e["offset"+a],e["client"+a])):void 0===d?n.css(b,c,g):n.style(b,c,d,g)},b,f?d:void 0,f,null)}})}),n.fn.extend({bind:function(a,b,c){return this.on(a,null,b,c)},unbind:function(a,b){return this.off(a,null,b)},delegate:function(a,b,c,d){return this.on(b,a,c,d)},undelegate:function(a,b,c){return 1===arguments.length?this.off(a,"**"):this.off(b,a||"**",c)}}),n.fn.size=function(){return this.length},n.fn.andSelf=n.fn.addBack,"function"==typeof define&&define.amd&&define("jquery",[],function(){return n});var mc=a.jQuery,nc=a.$;return n.noConflict=function(b){return a.$===n&&(a.$=nc),b&&a.jQuery===n&&(a.jQuery=mc),n},b||(a.jQuery=a.$=n),n});
jQuery.noConflict();
#3
// html5shiv MIT @rem remysharp.com/html5-enabling-script
// iepp v1.6.2 MIT @jon_neal iecss.com/print-protector
/*@cc_on(function(a,b){function r(a){var b=-1;while(++b<f)a.createElement(e[b])}if(!(!window.attachEvent||!b.createStyleSheet||!function(){var a=document.createElement("div");a.innerHTML="<elem></elem>";return a.childNodes.length!==1}())){a.iepp=a.iepp||{};var c=a.iepp,d=c.html5elements||"abbr|article|aside|audio|canvas|datalist|details|figcaption|figure|footer|header|hgroup|mark|meter|nav|output|progress|section|summary|time|video",e=d.split("|"),f=e.length,g=new RegExp("(^|\s)("+d+")","gi"),h=new RegExp("<(/*)("+d+")","gi"),i=/^s*[{}]s*$/,j=new RegExp("(^|[^\n]*?\s)("+d+")([^\n]*)({[\n\w\W]*?})","gi"),k=b.createDocumentFragment(),l=b.documentElement,m=l.firstChild,n=b.createElement("body"),o=b.createElement("style"),p=/print|all/,q;c.getCSS=function(a,b){if(a+""===undefined)return"";var d=-1,e=a.length,f,g=[];while(++d<e){f=a[d];if(f.disabled)continue;b=f.media||b,p.test(b)&&g.push(c.getCSS(f.imports,b),f.cssText),b="all"}return g.join("")},c.parseCSS=function(a){var b=[],c;while((c=j.exec(a))!=null)b.push(((i.exec(c[1])?"n":c[1])+c[2]+c[3]).replace(g,"$1.iepp_$2")+c[4]);return b.join("n")},c.writeHTML=function(){var a=-1;q=q||b.body;while(++a<f){var c=b.getElementsByTagName(e[a]),d=c.length,g=-1;while(++g<d)c[g].className.indexOf("iepp_")<0&&(c[g].className+=" iepp_"+e[a])}k.appendChild(q),l.appendChild(n),n.className=q.className,n.id=q.id,n.innerHTML=q.innerHTML.replace(h,"<$1font")},c._beforePrint=function(){o.styleSheet.cssText=c.parseCSS(c.getCSS(b.styleSheets,"all")),c.writeHTML()},c.restoreHTML=function(){n.innerHTML="",l.removeChild(n),l.appendChild(q)},c._afterPrint=function(){c.restoreHTML(),o.styleSheet.cssText=""},r(b),r(k);if(c.disablePP)return;m.insertBefore(o,m.firstChild),o.media="print",o.className="iepp-printshim",a.attachEvent("onbeforeprint",c._beforePrint),a.attachEvent("onafterprint",c._afterPrint)}})(this,document)@*/
#4
var addComment={moveForm:function(a,b,c,d){var e,f,g,h,i=this,j=i.I(a),k=i.I(c),l=i.I("cancel-comment-reply-link"),m=i.I("comment_parent"),n=i.I("comment_post_ID"),o=k.getElementsByTagName("form")[0];if(j&&k&&l&&m&&o){i.respondId=c,d=d||!1,i.I("wp-temp-form-div")||(e=document.createElement("div"),e.id="wp-temp-form-div",e.style.display="none",k.parentNode.insertBefore(e,k)),j.parentNode.insertBefore(k,j.nextSibling),n&&d&&(n.value=d),m.value=b,l.style.display="",l.onclick=function(){var a=addComment,b=a.I("wp-temp-form-div"),c=a.I(a.respondId);if(b&&c)return a.I("comment_parent").value="0",b.parentNode.insertBefore(c,b),b.parentNode.removeChild(b),this.style.display="none",this.onclick=null,!1};try{for(var p=0;p<o.elements.length;p++)if(f=o.elements[p],h=!1,"getComputedStyle"in window?g=window.getComputedStyle(f):document.documentElement.currentStyle&&(g=f.currentStyle),(f.offsetWidth<=0&&f.offsetHeight<=0||"hidden"===g.visibility)&&(h=!0),"hidden"!==f.type&&!f.disabled&&!h){f.focus();break}}catch(q){}return!1}},I:function(a){return document.getElementById(a)}};
Illegally Inserted Code at the top of the website according to a Debugger that was used:
<!DOCTYPE html>
<!--[if lt IE 7]>
<html class="ie ie6 lte9 lte8 lte7" lang="en-US" prefix="og: http: //ogp . me/ns#">
<![endif]-->
<!--[if IE 7]>
<html class="ie ie7 lte9 lte8 lte7" lang="en-US" prefix="og: http: // ogp .me /ns#">
<![endif]-->
<!--[if IE 8]>
<html class="ie ie8 lte9 lte8" lang="en-US" prefix="og: http : //ogp. me/ns#">
<![endif]-->
<!--[if IE 9]>
<html class="ie ie9" lang="en-US" prefix="og: http: //ogp . me/ns#">
<![endif]-->
<!--[if gt IE 9]>
<html lang="en-US" prefix="og: http : //ogp . me/ns#"> <![endif]-->
<!--[if !IE]><!-->
ESET Categorizes the link below as Suspicious
Response Headers
status
200
Date
Thu, 05 Sep 2019 16:44:20 GMT
Content-Type
image/gif
Connection
keep-alive
Set-Cookie
__cfduid=d332600249d81e459b097df08b5c986bb1567701860; expires=Fri, 04-Sep-20 16:44:20 GMT; path=/; domain=.statcounter.com; HttpOnly
P3P
policyref="http://www.statcounter.com/w3c/p3p.xml", CP="ADMa OUR COM NAV NID DSP NOI COR"
Expires
Mon, 26 Jul 1997 05:00:00 GMT
Server
cloudflare
CF-RAY
5119aad1ab72e129-BOM
Meta
http version
http/1.1
Request 3: http://c.statcounter.com/t.php?sc_project=11228559&java=1&security=21afdedc&u1=83B22C6593764F3CE42AA26BC6334A1F&sc_rum_f_s=0&sc_rum_f_e=884&sc_rum_e_s=893&sc_rum_e_e=933&sc_random=0.42782633933253233&jg=new&rr=1.1.1.1.1.1.1.1.1&resolution=1920&h=1200&camefrom=&u=http%3A//pofheadlines.com/all/fb/&t=Redirecting...&rcat=d&rdom=d&rdomg=new&bb=1&sc_snum=1&sess=ef5bce&p=0&invisible=1
URL: http://c.statcounter.com/t.php?sc_project=11228559&java=1&security=21afdedc&u1=83B22C6593764F3CE42AA26BC6334A1F&sc_rum_f_s=0&sc_rum_f_e=884&sc_rum_e_s=893&sc_rum_e_e=933&sc_random=0.42782633933253233&jg=new&rr=1.1.1.1.1.1.1.1.1&resolution=1920&h=1200&camefrom=&u=http%3A//pofheadlines.com/all/fb/&t=Redirecting...&rcat=d&rdom=d&rdomg=new&bb=1&sc_snum=1&sess=ef5bce&p=0&invisible=1
Host: c.statcounter.com
IP: 104.20.2.47
Error/Status Code: 200
Priority: LOWEST
Protocol: http/1.1
Initiated By: http // pofheadlines com/all/fb/
Client Port: 52160
Request Start: 1.002 s
DNS Lookup: 30 ms
Initial Connection: 35 ms
Time to First Byte: 276 ms
Content Download: 2 ms
Bytes In (downloaded): 0.0 KB
Uncompressed Size: 0.0 KB
Bytes Out (uploaded): 0.2 KB
Request Headers:
Referer: http / / pofheadlines com/all/fb/
Host: c.statcounter.com
Connection: keep-alive
Accept: image/webp,image/apng,image/*,*/*;q=0.8
Accept-Encoding: gzip, deflate
Accept-Language: en-US,en;q=0.9
Cookie: [52 bytes were stripped]
Response Headers:
Content-Length: 49
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Server: cloudflare
Connection: keep-alive
Date: Thu, 05 Sep 2019 16:30:51 GMT
P3P: policyref="http://www.statcounter.com/w3c/p3p.xml", CP="ADMa OUR COM NAV NID DSP NOI COR"
Content-Type: image/gif
CF-RAY: 5119970ffd8bd659-MAD
Set-Cookie: [105 bytes were stripped]
Form analysis 2 forms found in the DOM
Name: logoutForm -- POST /logout
<form name="logoutForm" method="POST" action="/logout">
<input type="hidden" name="action_logout" value="1">
<input name="session_token" type="hidden" value="QUFFLUhqbXZtMkRockNjdHR5ZnBqZjU0Sjc2R005cDloUXxBQ3Jtc0tsUDBPS3dtaGIzTjc0cjUtOGdfeHBiU1hTa2RCRDNTVXdta2hfOTNJb2ZzcHA3cUlYOGdfZy1CM0E0akliQXFFNTdFLUhtdHRlMEFsazZ1cGkwYzZCYnFLXzhWamVBekhISjc5cm03eW5VR0JIWnBLTFZGVll2bXRld0M0SFZGbGwzVTBSMzlUVzFmbFR6VVJsaDlvTktmelhTTHc=">
</form>
/results
<form id="masthead-search" class="search-form consolidated-form" action="/results" onsubmit="if (document.getElementById('masthead-search-term').value == '') return false;" data-clicktracking="CAEQ7VAiEwj12eWpzrjkAhWck1UKHfT2Duoo-B0"
data-visibility-tracking="CAEQ7VAiEwj12eWpzrjkAhWck1UKHfT2Duoo-B0">
<button class="yt-uix-button yt-uix-button-size-default yt-uix-button-default search-btn-component search-button" type="submit" onclick="if (document.getElementById('masthead-search-term').value == '') return false; document.getElementById('masthead-search').submit(); return false;;return true;"
tabindex="2" id="search-btn" dir="ltr">
<span class="yt-uix-button-content">Suchen</span>
</button>
<div id="masthead-search-terms" class="masthead-search-terms-border" dir="ltr">
<input id="masthead-search-term" autocomplete="off" onkeydown="if (!this.value && (event.keyCode == 40 || event.keyCode == 32 || event.keyCode == 34)) {this.onkeydown = null; this.blur();}" class="search-term masthead-search-renderer-input yt-uix-form-input-bidi"
name="search_query" value="" type="text" tabindex="1" placeholder="Suchen" title="Suchen" aria-label="Suchen">
</div>
</form>
Patches are signed using one of the PGP public keys.
Excessive CPU usage in HTTP/2 with small window updates
Severity: medium
Advisory
CVE-2019-9511
Not vulnerable: 1.17.3+, 1.16.1+
Vulnerable: 1.9.5-1.17.2
Excessive CPU usage in HTTP/2 with priority changes
Severity: low
Advisory
CVE-2019-9513
Not vulnerable: 1.17.3+, 1.16.1+
Vulnerable: 1.9.5-1.17.2
Excessive memory usage in HTTP/2 with zero length headers
Severity: low
Advisory
CVE-2019-9516
Not vulnerable: 1.17.3+, 1.16.1+
Vulnerable: 1.9.5-1.17.2
Excessive memory usage in HTTP/2
Severity: low
Advisory
CVE-2018-16843
Not vulnerable: 1.15.6+, 1.14.1+
Vulnerable: 1.9.5-1.15.5
Excessive CPU usage in HTTP/2
Severity: low
Advisory
CVE-2018-16844
Not vulnerable: 1.15.6+, 1.14.1+
Vulnerable: 1.9.5-1.15.5
Memory disclosure in the ngx_http_mp4_module
Severity: medium
Advisory
CVE-2018-16845
Not vulnerable: 1.15.6+, 1.14.1+
Vulnerable: 1.1.3-1.15.5, 1.0.7-1.0.15
The patch pgp
Integer overflow in the range filter
Severity: medium
Advisory
CVE-2017-7529
Not vulnerable: 1.13.3+, 1.12.1+
Vulnerable: 0.5.6-1.13.2
The patch pgp
NULL pointer dereference while writing client request body
Severity: medium
Advisory
CVE-2016-4450
Not vulnerable: 1.11.1+, 1.10.1+
Vulnerable: 1.3.9-1.11.0
The patch pgp (for 1.9.13-1.11.0)
The patch pgp (for 1.3.9-1.9.12)
Invalid pointer dereference in resolver
Severity: medium
Advisory
CVE-2016-0742
Not vulnerable: 1.9.10+, 1.8.1+
Vulnerable: 0.6.18-1.9.9
Use-after-free during CNAME response processing in resolver
Severity: medium
Advisory
CVE-2016-0746
Not vulnerable: 1.9.10+, 1.8.1+
Vulnerable: 0.6.18-1.9.9
Insufficient limits of CNAME resolution in resolver
Severity: medium
Advisory
CVE-2016-0747
Not vulnerable: 1.9.10+, 1.8.1+
Vulnerable: 0.6.18-1.9.9
SSL session reuse vulnerability
Severity: medium
Advisory
CVE-2014-3616
Not vulnerable: 1.7.5+, 1.6.2+
Vulnerable: 0.5.6-1.7.4
STARTTLS command injection
Severity: medium
Advisory
CVE-2014-3556
Not vulnerable: 1.7.4+, 1.6.1+
Vulnerable: 1.5.6-1.7.3
The patch pgp
SPDY heap buffer overflow
Severity: major
Advisory
CVE-2014-0133
Not vulnerable: 1.5.12+, 1.4.7+
Vulnerable: 1.3.15-1.5.11
The patch pgp
SPDY memory corruption
Severity: major
Advisory
CVE-2014-0088
Not vulnerable: 1.5.11+
Vulnerable: 1.5.10
The patch pgp
Request line parsing vulnerability
Severity: medium
Advisory
CVE-2013-4547
Not vulnerable: 1.5.7+, 1.4.4+
Vulnerable: 0.8.41-1.5.6
The patch pgp
Memory disclosure with specially crafted HTTP backend responses
Severity: medium
Advisory
CVE-2013-2070
Not vulnerable: 1.5.0+, 1.4.1+, 1.2.9+
Vulnerable: 1.1.4-1.2.8, 1.3.9-1.4.0
The patch pgp (for 1.3.9-1.4.0)
The patch pgp (for 1.1.4-1.2.8)
Stack-based buffer overflow with specially crafted request
Severity: major
Advisory
CVE-2013-2028
Not vulnerable: 1.5.0+, 1.4.1+
Vulnerable: 1.3.9-1.4.0
The patch pgp
Vulnerabilities with Windows directory aliases
Severity: medium
Advisory
CVE-2011-4963
Not vulnerable: 1.3.1+, 1.2.1+
Vulnerable: nginx/Windows 0.7.52-1.3.0
Buffer overflow in the ngx_http_mp4_module
Severity: major
Advisory
CVE-2012-2089
Not vulnerable: 1.1.19+, 1.0.15+
Vulnerable: 1.1.3-1.1.18, 1.0.7-1.0.14
The patch pgp
Memory disclosure with specially crafted backend responses
Severity: major
Advisory
CVE-2012-1180
Not vulnerable: 1.1.17+, 1.0.14+
Vulnerable: 0.1.0-1.1.16
The patch pgp
Buffer overflow in resolver
Severity: medium
CVE-2011-4315
Not vulnerable: 1.1.8+, 1.0.10+
Vulnerable: 0.6.18-1.1.7
Vulnerabilities with invalid UTF-8 sequence on Windows
Severity: major
CVE-2010-2266
Not vulnerable: 0.8.41+, 0.7.67+
Vulnerable: nginx/Windows 0.7.52-0.8.40
Vulnerabilities with Windows file default stream
Severity: major
CVE-2010-2263
Not vulnerable: 0.8.40+, 0.7.66+
Vulnerable: nginx/Windows 0.7.52-0.8.39
Vulnerabilities with Windows 8.3 filename pseudonyms
Severity: major
CORE-2010-0121
Not vulnerable: 0.8.33+, 0.7.65+
Vulnerable: nginx/Windows 0.7.52-0.8.32
An error log data are not sanitized
Severity: none
CVE-2009-4487
Not vulnerable: none
Vulnerable: all
The renegotiation vulnerability in SSL protocol
Severity: major
VU#120541 CVE-2009-3555
Not vulnerable: 0.8.23+, 0.7.64+
Vulnerable: 0.1.0-0.8.22
The patch pgp
Directory traversal vulnerability
Severity: minor
CVE-2009-3898
Not vulnerable: 0.8.17+, 0.7.63+
Vulnerable: 0.1.0-0.8.16
Buffer underflow vulnerability
Severity: major
VU#180065 CVE-2009-2629
Not vulnerable: 0.8.15+, 0.7.62+, 0.6.39+, 0.5.38+
Vulnerable: 0.1.0-0.8.14
The patch pgp
Null pointer dereference vulnerability
Severity: major
CVE-2009-3896
Not vulnerable: 0.8.14+, 0.7.62+, 0.6.39+, 0.5.38+
Vulnerable: 0.1.0-0.8.13
The patch pgp
APP14Flags0[14]
APP14Flags1(none)
ApplicationRecordVersion0
BitsPerSample8
BlueMatrixColumn0.14307 0.06061 0.7141
BlueTRC(Binary data 2060 bytes, use -b option to extract)
CMMFlagsNot Embedded, Independent
ColorComponents3
ColorModeRGB
ColorSpacesRGB
ColorSpaceDataRGB
ColorTransformYCbCr
CompressionJPEG (old-style)
ConnectionSpaceIlluminant0.9642 1 0.82491
Copyright2018 Gardner Media Group LLC
CopyrightNotice2018 Gardner Media Group LLC
CreateDate2019:06:12 14:48:06-07:00
CurrentIPTCDigestca6d44ddf8d7c201216c7003c49a5906
DCTEncodeVersion100
DeviceAttributesReflective, Glossy, Positive, Color
DeviceManufacturerHewlett-Packard
DeviceMfgDescIEC http://www.iec.ch
DeviceModelsRGB
DeviceModelDescIEC 61966-2.1 Default RGB colour space - sRGB
DisplayedUnitsXinches
DisplayedUnitsYinches
DocumentIDadobe:docid:photoshop:17b9898a-48f9-e346-9825-326196609be5
EncodingProcessProgressive DCT, Huffman coding
ExifByteOrderLittle-endian (Intel, II)
ExifImageHeight518
ExifImageWidth300
ExifVersion0221
FileTypeJPEG
FileTypeExtensionjpg
Formatimage/jpeg
GlobalAltitude30
GlobalAngle30
GreenMatrixColumn0.38515 0.71687 0.09708
GreenTRC(Binary data 2060 bytes, use -b option to extract)
HasRealMergedDataYes
ICCProfileNamesRGB IEC61966-2.1
IPTCDigestca6d44ddf8d7c201216c7003c49a5906
ImageHeight518
ImageSize300x518
ImageWidth300
InstanceIDxmp.iid:17413760-5521-43de-bddb-9e2ec3816537
LegacyIPTCDigest1282700C3E321744A562ADF2AF4E123D
Luminance76.03647 80 87.12462
MIMETypeimage/jpeg
MeasurementBacking0 0 0
MeasurementFlare0.999%
MeasurementGeometryUnknown
MeasurementIlluminantD65
MeasurementObserverCIE 1931
MediaBlackPoint0 0 0
MediaWhitePoint0.95045 1 1.08905
Megapixels0.155
MetadataDate2019:06:12 14:51:24-07:00
ModifyDate2019:06:12 14:51:24
NumSlices1
OrientationHorizontal (normal)
OriginalDocumentID37B8A5E1DC269950E3FADC9F43C2144E
PhotometricInterpretationRGB
PhotoshopFormatProgressive
PhotoshopQuality12
PhotoshopThumbnail(Binary data 4014 bytes, use -b option to extract)
PixelAspectRatio1
PrimaryPlatformMicrosoft Corporation
PrintPosition0 0
PrintScale1
PrintStyleCentered
ProfileCMMTypeLinotronic
ProfileClassDisplay Device Profile
ProfileConnectionSpaceXYZ
ProfileCopyrightCopyright (c) 1998 Hewlett-Packard Company
ProfileCreatorHewlett-Packard
ProfileDateTime1998:02:09 06:49:00
ProfileDescriptionsRGB IEC61966-2.1
ProfileFileSignatureacsp
ProfileID0
ProfileVersion2.1.0
ProgressiveScans3 Scans
ReaderNameAdobe Photoshop CC 2019
RedMatrixColumn0.43607 0.22249 0.01392
RedTRC(Binary data 2060 bytes, use -b option to extract)
RenderingIntentPerceptual
ResolutionUnitinches
Rights2018 Gardner Media Group LLC
SamplesPerPixel3
SlicesGroupNameToddWoodard_FF
SoftwareAdobe Photoshop CC 2019 (Macintosh)
TechnologyCathode Ray Tube Display
ThumbnailImage(Binary data 4014 bytes, use -b option to extract)
ThumbnailLength4014
ThumbnailOffset442
ViewingCondDescReference Viewing Condition in IEC61966-2.1
ViewingCondIlluminant19.6445 20.3718 16.8089
ViewingCondIlluminantTypeD50
ViewingCondSurround3.92889 4.07439 3.36179
WriterNameAdobe Photoshop
XMPToolkitAdobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22
XResolution72
YCbCrSubSamplingYCbCr4:4:4 (1 1)
YResolution72
Extracted Strings:
dExif
Adobe Photoshop CC 2019 (Macintosh)
2019:06:12 14:51:24
2018 Gardner Media Group LLC
0221
Adobe_CM
Adobe
b34r
7GWgw
dEU6te
0bOf
VFvE
8rySd
622k
Photoshop 3.0
8BIM
2018 Gardner Media Group LLC
8BIM
8BIM
printOutput
PstSbool
Inteenum
Inte
Clrm
printSixteenBitbool
printerNameTEXT
printProofSetupObjc
proofSetup
Bltnenum
builtinProof
proofCMYK
8BIM
printOutputOptions
Cptnbool
Clbrbool
RgsMbool
CrnCbool
CntCbool
Lblsbool
Ngtvbool
EmlDbool
Intrbool
BckgObjc
RGBC
Rd doub@o
Grn doub@o
Bl doub@o
BrdTUntF#Rlt
Bld UntF#Rlt
RsltUntF#Pxl@R
vectorDatabool
PgPsenum
PgPs
PgPC
LeftUntF#Rlt
Top UntF#Rlt
Scl UntF#Prc@Y
cropWhenPrintingbool
cropRectBottomlong
cropRectLeftlong
cropRectRightlong
cropRectToplong
8BIM
8BIM
8BIM
8BIM
8BIM
8BIM
8BIM
8BIM
8BIM
8BIM
null
boundsObjc
Rct1
Top long
Leftlong
Btomlong
Rghtlong
slicesVlLs
Objc
slice
sliceIDlong
groupIDlong
originenum
ESliceOrigin
autoGenerated
Typeenum
ESliceType
boundsObjc
Rct1
Top long
Leftlong
Btomlong
Rghtlong
urlTEXT
nullTEXT
MsgeTEXT
altTagTEXT
cellTextIsHTMLbool
cellTextTEXT
horzAlignenum
ESliceHorzAlign
default
vertAlignenum
ESliceVertAlign
default
bgColorTypeenum
ESliceBGColorType
None
topOutsetlong
leftOutsetlong
bottomOutsetlong
rightOutsetlong
8BIM
8BIM
8BIM
Adobe_CM
Adobe
b34r
7GWgw
dEU6te
0bOf
VFvE
8rySd
622k
8BIM
8BIM
http://ns.adobe.com/xap/1.0/
<?xpacket begin="
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" photoshop:LegacyIPTCDigest="1282700C3E321744A562ADF2AF4E123D" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" dc:format="image/jpeg" xmpMM:DocumentID="adobe:docid:photoshop:17b9898a-48f9-e346-9825-326196609be5" xmpMM:InstanceID="xmp.iid:17413760-5521-43de-bddb-9e2ec3816537" xmpMM:OriginalDocumentID="37B8A5E1DC269950E3FADC9F43C2144E" xmp:CreateDate="2019-06-12T14:48:06-07:00" xmp:ModifyDate="2019-06-12T14:51:24-07:00" xmp:MetadataDate="2019-06-12T14:51:24-07:00"> <dc:rights> <rdf:Alt> <rdf:li xml:lang="x-default">
2018 Gardner Media Group LLC</rdf:li> </rdf:Alt> </dc:rights> <xmpMM:History> <rdf:Seq> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:b3ad67cd-0b15-4ca5-b78b-afb9da408bcb" stEvt:when="2019-06-12T14:51:24-07:00" stEvt:softwareAgent="Adobe Photoshop CC 2019 (Macintosh)" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:17413760-5521-43de-bddb-9e2ec3816537" stEvt:when="2019-06-12T14:51:24-07:00" stEvt:softwareAgent="Adobe Photoshop CC 2019 (Macintosh)" stEvt:changed="/"/> </rdf:Seq> </xmpMM:History> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="w"?>
XICC_PROFILE
HLino
mntrRGB XYZ
acspMSFT
IEC sRGB
cprt
3desc
lwtpt
bkpt
dmnd
pdmdd
vued
view
meas
rTRC
gTRC
bTRC
text
Copyright (c) 1998 Hewlett-Packard Company
desc
sRGB IEC61966-2.1
sRGB IEC61966-2.1
desc
IEC http://www.iec.ch
IEC http://www.iec.ch
desc
.IEC 61966-2.1 Default RGB colour space - sRGB
.IEC 61966-2.1 Default RGB colour space - sRGB
desc
,Reference Viewing Condition in IEC61966-2.1
,Reference Viewing Condition in IEC61966-2.1
view
meas
CRT curv
050l0
676r6
B0BrB
rCS5
PcRaT
X0h4JR
j5w1cK
ggwV
1Il0
1cUS
LwRu5
dNaud
WX3G
MBBC
FNGd
7wQct
eeTR
BRnUd
9rLP
[J*CA rj
o3C0
Zo&qr^4II
8Qef
q4Ex
0UIg
SLIB
JRTJx!)>
vS1k
oqrE
64BiV
RhEM
SyI1
rlnE
lFaN
QncRTv
niW50
vMMey,iiR#
P5qW
6bbM
SjMX
noqr
BGrl
Rgey
rhqpd
J9RI
mqkW
TorJ
T}o^eol{4
Ix6P
xHDu
"JJdIihe
7jbXvW
KJYO
HHmA
[XFB63[C
jdFKjC)*
L8m6d
OrlX2
IvS5
LxPr
c1sP
og6tH
blQb
iim4
FFNE
A92s
5lGf
rO2I
SSP5I
sL2R
qRqQ
p"(0c2Db
GghmJf
blEo
FLI8
YnGv
FDJ5n
rGsX
xYml
3bLH
tJry
m@0%KlCL
jNkl
sLMQ
rDni
b2iFa
N4HP
Ob4r
5usmR
yloj
T4UMn8e
cuep
UBdj
N8dM
ESiw
YmZB$}[R
c8SLM
@`--X &N
oibK
tGP4
tbjF8
AnG.x]N`
D@eW?5[
5OhP
+)Cb}ONN.7
sRnV
bHoO
lKtX
lYN0
qPNw
Gsgd
F162w[[[
s'v&fb:b
jAga
X4bt
i5Hw
DKjg
wxCnCI
VUD5
nIyH
DcQ9
DD04
%(</)H}
v6Ii
FHOr
PwGeR
d8UTFUU
UYO.XVlq
bBUNA
QADT1
7bFU
P001
lCQx
bifF
wUbs
7NUk
YcubX5
HR6Q
lSCO
jV9o
KVaC0
6#1$&>
mYwX
xnE+qq+v%r
OSTb
Ecyk
Xbv3
QTp7k
KVeY
xYdw
TixAh
k2YYn
eBH9a
GnLe|rPK
GaWU
IF0O
dG9E
rQd9
wR1VP
Wvu5
eyHF
ejAbE
9rpT
tTFE
l$FGW%$U(C4X
Ydua
Uviv
EfFh
U1Mrm
HiLa
UkUd
gSPho
ofhh
=XlS6f_*
#i$U8?r1
b9bF
kcvN5l
KYyB
2Xe1
J9v5lFg
eXV0
pJocO
kpQj
XIVuC
EJ5x
sbEXg
GQTf
A^Y#FT<`
ZXkE,s^t
DMvx
nAkV
D|KhS"y`E
EYR6A
ojS^(da)+
4Iulmj
Sj5Wa
rKWhlb
kVh8
eKsB
ILue
adKTe
RH1+<k*X
BR9H
P0ssI
gifP
lDf6
BML3R
cveQ5
k4RDQ
EOef
IksHQ
UlpU
LeFKr
QBdL
5K2X
W6lGf
:#vkRj7W
;+ovfawQ
tTqE
NVev
crOec
qWFh
8eURdg
2GpA
fakc
;r%p>;a{}
y60rq
3s0B
<b9l yx(
mFkQ
IbT7
EWVQ
bESfT
sRob
C-UX|$~L
Udux
nmnK
WYbtx
BTyy3
jGpy
hutB
0RF3H
RIU3
bCqn
/n&ew!~|N>
aoDT
$x!P2.0#
wtUb
GUBP
uveX
uO4n
mAkW{gaZ_
CVFu
RYCg
VtrT
Error Transfer Degree Links: Cannot find table 0. Stack trace: at System.Data.DataTableCollection.get_Item(Int32 index) at CMSWebParts_Custom_TransferDegreeLinks.Page_Load(Object sender, EventArgs e) in E:WebSitesccsnewCMSCMSWebPartsCustomTransferDegreeLinks.ascx.cs:line 86
Output complete without errors.
IPTC
Coded Character Set = 27, 37, 71
Record Version = 2
IPTC Core (Adobe XMP)
Expand All / Collapse All / Show/Hide XMP Source / Show/Hide XMP Legend
xpacket = begin="i>>?" id="W5M0MpCehiHzreSzNTczkc9d"
x:xmpmeta
xmlns:x = "adobe:ns:meta/"
x:xmptk = "Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "
rdf:RDF
xmlns:rdf = "http://www.w3.org/1999/02/22-rdf-syntax-ns#"
rdf:Description
rdf:about = ""
xmlns:xmpMM = "http://ns.adobe.com/xap/1.0/mm/"
xmlns:stRef = "http://ns.adobe.com/xap/1.0/sType/ResourceRef#"
xmlns:xmp = "http://ns.adobe.com/xap/1.0/"
xmpMM:OriginalDocumentID = "A89AF07090963C2C5784EE6251472ACC"
xmpMM:DocumentID = "xmp.did:EBE453F6F30A11E79C6BD5C9AD65C213"
xmpMM:InstanceID = "xmp.iid:EBE453F5F30A11E79C6BD5C9AD65C213"
xmp:CreatorTool = "Adobe Photoshop Elements 12.0 Windows"
xmpMM:DerivedFrom
stRef:instanceID = "xmp.iid:34FEAD399DCAE511B82188F8A0B1F7EE"
stRef:documentID = "A89AF07090963C2C5784EE6251472ACC"
xpacket = end="r"
--------
Output complete without errors.
IPTC
Coded Character Set = 27, 37, 71, 32, 47, 32, 27, 37, 71
Record Version = 19420
Date Created = 2018/12/06
Time Created = 16:23:04+00:00
IPTC Core (Adobe XMP)
Expand All / Collapse All / Show/Hide XMP Source / Show/Hide XMP Legend
xpacket = begin="i>>?" id="W5M0MpCehiHzreSzNTczkc9d"
x:xmpmeta
xmlns:x = "adobe:ns:meta/"
x:xmptk = "Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "
rdf:RDF
xmlns:rdf = "http://www.w3.org/1999/02/22-rdf-syntax-ns#"
rdf:Description
rdf:about = ""
xmlns:aux = "http://ns.adobe.com/exif/1.0/aux/"
xmlns:xmp = "http://ns.adobe.com/xap/1.0/"
xmlns:photoshop = "http://ns.adobe.com/photoshop/1.0/"
xmlns:xmpMM = "http://ns.adobe.com/xap/1.0/mm/"
xmlns:stEvt = "http://ns.adobe.com/xap/1.0/sType/ResourceEvent#"
xmlns:stRef = "http://ns.adobe.com/xap/1.0/sType/ResourceRef#"
xmlns:dc = "http://purl.org/dc/elements/1.1/"
aux:SerialNumber = "1320501615"
aux:LensInfo = "18/1 55/1 0/0 0/0"
aux:Lens = "EF-S18-55mm f/3.5-5.6 IS STM"
aux:LensID = "4146"
aux:ImageNumber = "0"
aux:ApproximateFocusDistance = "121/100"
aux:FlashCompensation = "0/1"
aux:Firmware = "1.0.6"
xmp:ModifyDate = "2018-12-11T11:01:59-08:00"
xmp:CreateDate = "2018-12-06T16:23:04"
xmp:MetadataDate = "2018-12-11T11:01:59-08:00"
xmp:CreatorTool = "Adobe Photoshop Elements 12.0 Windows"
photoshop:DateCreated = "2018-12-06T16:23:04.079"
photoshop:LegacyIPTCDigest = "5B0218B634578B84199E98C575740B1E"
photoshop:ColorMode = "3"
photoshop:ICCProfile = "sRGB IEC61966-2.1"
xmpMM:DocumentID = "9E4C8815E7D7EEA472DE71D06E86ED5C"
xmpMM:InstanceID = "xmp.iid:e0c79bf6-b0bb-4bb5-8745-7afddda62173"
xmpMM:OriginalDocumentID = "9E4C8815E7D7EEA472DE71D06E86ED5C"
dc:format = "image/jpeg"
xmpMM:History
rdf:Seq
rdf:li
stEvt:action = "saved"
stEvt:instanceID = "xmp.iid:293F9C2352FAE811801DB3F3BA7B0D16"
stEvt:when = "2018-12-07T10:59:43-08:00"
stEvt:softwareAgent = "Adobe Photoshop Elements 12.0 Windows"
stEvt:changed = "/"
rdf:li
stEvt:action = "converted"
stEvt:parameters = "from image/jpeg to application/vnd.adobe.photoshop"
rdf:li
stEvt:action = "derived"
stEvt:parameters = "converted from image/jpeg to application/vnd.adobe.photoshop"
rdf:li
stEvt:action = "saved"
stEvt:instanceID = "xmp.iid:2A3F9C2352FAE811801DB3F3BA7B0D16"
stEvt:when = "2018-12-07T10:59:43-08:00"
stEvt:softwareAgent = "Adobe Photoshop Elements 12.0 Windows"
stEvt:changed = "/"
rdf:li
stEvt:action = "saved"
stEvt:instanceID = "xmp.iid:EBC0F1D352FAE811801DB3F3BA7B0D16"
stEvt:when = "2018-12-07T11:04:40-08:00"
stEvt:softwareAgent = "Adobe Photoshop Elements 12.0 Windows"
stEvt:changed = "/"
rdf:li
stEvt:action = "converted"
stEvt:parameters = "from application/vnd.adobe.photoshop to image/jpeg"
rdf:li
stEvt:action = "derived"
stEvt:parameters = "converted from application/vnd.adobe.photoshop to image/jpeg"
rdf:li
stEvt:action = "saved"
stEvt:instanceID = "xmp.iid:ECC0F1D352FAE811801DB3F3BA7B0D16"
stEvt:when = "2018-12-07T11:04:40-08:00"
stEvt:softwareAgent = "Adobe Photoshop Elements 12.0 Windows"
stEvt:changed = "/"
rdf:li
stEvt:action = "saved"
stEvt:instanceID = "xmp.iid:e0c79bf6-b0bb-4bb5-8745-7afddda62173"
stEvt:when = "2018-12-11T11:01:59-08:00"
stEvt:softwareAgent = "Adobe Photoshop CC 2019 (Macintosh)"
stEvt:changed = "/"
xmpMM:DerivedFrom
stRef:instanceID = "xmp.iid:EBC0F1D352FAE811801DB3F3BA7B0D16"
stRef:documentID = "9E4C8815E7D7EEA472DE71D06E86ED5C"
stRef:originalDocumentID = "9E4C8815E7D7EEA472DE71D06E86ED5C"
xpacket = end="w"
EXIF IFD0
Image Width {0x0100} = 4752 pixels
Image Length {0x0101} = 3168 pixels
Bits Per Sample {0x0102} = 8,8,8
Photometric Interpretation {0x0106} = RGB (2)
Camera Make {0x010F} = Canon
Camera Model {0x0110} = Canon EOS 50D
Picture Orientation {0x0112} = normal (1)
Samples Per Pixel {0x0115} = 3
X-Resolution {0x011A} = 1500000/10000 ===> 150
Y-Resolution {0x011B} = 1500000/10000 ===> 150
X/Y-Resolution Unit {0x0128} = inch (2)
Software / Firmware Version {0x0131} = Adobe Photoshop CC 2019 (Macintosh)
Last Modified Date/Time {0x0132} = 2018:12:11 11:01:59
Y/Cb/Cr Positioning (Subsampling) {0x0213} = co-sited / datum point (2)
EXIF Sub IFD
Exposure Time (1 / Shutter Speed) {0x829A} = 1/200 second ===> 0.005 second
Lens F-Number / F-Stop {0x829D} = 10/1 ===> f/10
Exposure Program {0x8822} = manual control (1)
ISO Speed Ratings {0x8827} = 160
EXIF Version {0x9000} = 0221
Original Date/Time {0x9003} = 2018:12:06 16:23:04
Digitization Date/Time {0x9004} = 2018:12:06 16:23:04
Components Configuration {0x9101} = 0x01,0x02,0x03,0x00 / YCbCr
Shutter Speed Value (APEX) {0x9201} = 499712/65536
Shutter Speed (Exposure Time) = 1/197.4 second
Aperture Value (APEX) {0x9202} = 434176/65536
Aperture = f/9.93
Exposure Bias (EV) {0x9204} = 0/1 ===> 0
Max Aperture Value (APEX) {0x9205} = 3625/1000 ===> 3.63
Max Aperture = f/3.51
Metering Mode {0x9207} = pattern / multi-segment (5)
Flash {0x9209} = n/a (16)
Focal Length {0x920A} = 20/1 mm ===> 20 mm
User Comment (Hex) {0x9286} = 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00
User Comment Character Code = not defined
Last Modified Subsecond Time {0x9290} = 79
Original Subsecond Time {0x9291} = 79
Digitized Subsecond Time {0x9292} = 79
FlashPix Version {0xA000} = 0100
Colour Space {0xA001} = sRGB (1)
Image Width {0xA002} = 900 pixels
Image Height {0xA003} = 477 pixels
Focal Plane X-Resolution {0xA20E} = 4752000/894 ===> 5315.44
Focal Plane Y-Resolution {0xA20F} = 3168000/597 ===> 5306.53
Focal Plane X/Y-Resolution Unit {0xA210} = inch (2)
Custom Rendered {0xA401} = normal process (0)
Exposure Mode {0xA402} = manual exposure (1)
White Balance {0xA403} = auto (0)
Scene Capture Type {0xA406} = standard (0)
EXIF IFD1
Compression {0x0103} = JPEG compression (6)
X-Resolution {0x011A} = 72/1 ===> 72
Y-Resolution {0x011B} = 72/1 ===> 72
X/Y-Resolution Unit {0x0128} = inch (2)
Embedded thumbnail image:
EXIF Interoperability IFD
Interoperability Index {0x0001} = R98
Interoperability Version {0x0002} = 0100
EXIF GPS IFD
GPS Version ID {0x00} = 0x02,0x02,0x00,0x00
-------------
Output complete without errors.
IPTC Core (Adobe XMP)
Expand All / Collapse All / Show/Hide XMP Source / Show/Hide XMP Legend
xpacket = begin="i>>?" id="W5M0MpCehiHzreSzNTczkc9d"
x:xmpmeta
xmlns:x = "adobe:ns:meta/"
x:xmptk = "Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "
rdf:RDF
xmlns:rdf = "http://www.w3.org/1999/02/22-rdf-syntax-ns#"
rdf:Description
rdf:about = ""
xmlns:xmp = "http://ns.adobe.com/xap/1.0/"
xmlns:xmpMM = "http://ns.adobe.com/xap/1.0/mm/"
xmlns:stRef = "http://ns.adobe.com/xap/1.0/sType/ResourceRef#"
xmp:CreatorTool = "Adobe Photoshop CC 2018 (Windows)"
xmpMM:InstanceID = "xmp.iid:52730FACD8D111E9BB8BE3B0BF25CB85"
xmpMM:DocumentID = "xmp.did:52730FADD8D111E9BB8BE3B0BF25CB85"
xmpMM:DerivedFrom
stRef:instanceID = "xmp.iid:52730FAAD8D111E9BB8BE3B0BF25CB85"
stRef:documentID = "xmp.did:52730FABD8D111E9BB8BE3B0BF25CB85"
xpacket = end="r"
-----
Output complete without errors.
IPTC Core (Adobe XMP)
Expand All / Collapse All / Show/Hide XMP Source / Show/Hide XMP Legend
xpacket = begin="i>>?" id="W5M0MpCehiHzreSzNTczkc9d"
x:xmpmeta
xmlns:x = "adobe:ns:meta/"
x:xmptk = "Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "
rdf:RDF
xmlns:rdf = "http://www.w3.org/1999/02/22-rdf-syntax-ns#"
rdf:Description
rdf:about = ""
xmlns:xmp = "http://ns.adobe.com/xap/1.0/"
xmlns:xmpMM = "http://ns.adobe.com/xap/1.0/mm/"
xmlns:stRef = "http://ns.adobe.com/xap/1.0/sType/ResourceRef#"
xmp:CreatorTool = "Adobe Photoshop CC 2018 (Windows)"
xmpMM:InstanceID = "xmp.iid:55F65675D8D111E98EC8BB6F497D72E0"
xmpMM:DocumentID = "xmp.did:55F65676D8D111E98EC8BB6F497D72E0"
xmpMM:DerivedFrom
stRef:instanceID = "xmp.iid:55F65673D8D111E98EC8BB6F497D72E0"
stRef:documentID = "xmp.did:55F65674D8D111E98EC8BB6F497D72E0"
xpacket = end="r"
-------
Output complete without errors.
IPTC Core (Adobe XMP)
Expand All / Collapse All / Show/Hide XMP Source / Show/Hide XMP Legend
xpacket = begin="i>>?" id="W5M0MpCehiHzreSzNTczkc9d"
x:xmpmeta
xmlns:x = "adobe:ns:meta/"
x:xmptk = "Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "
rdf:RDF
xmlns:rdf = "http://www.w3.org/1999/02/22-rdf-syntax-ns#"
rdf:Description
rdf:about = ""
xmlns:xmp = "http://ns.adobe.com/xap/1.0/"
xmlns:xmpMM = "http://ns.adobe.com/xap/1.0/mm/"
xmlns:stRef = "http://ns.adobe.com/xap/1.0/sType/ResourceRef#"
xmp:CreatorTool = "Adobe Photoshop CC 2018 (Windows)"
xmpMM:InstanceID = "xmp.iid:34978FE4D8D111E9A63AB99110779965"
xmpMM:DocumentID = "xmp.did:34978FE5D8D111E9A63AB99110779965"
xmpMM:DerivedFrom
stRef:instanceID = "xmp.iid:34978FE2D8D111E9A63AB99110779965"
stRef:documentID = "xmp.did:34978FE3D8D111E9A63AB99110779965"
xpacket = end="r"
------
Output complete without errors.
IPTC Core (Adobe XMP)
Expand All / Collapse All / Show/Hide XMP Source / Show/Hide XMP Legend
xpacket = begin="i>>?" id="W5M0MpCehiHzreSzNTczkc9d"
x:xmpmeta
xmlns:x = "adobe:ns:meta/"
x:xmptk = "Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "
rdf:RDF
xmlns:rdf = "http://www.w3.org/1999/02/22-rdf-syntax-ns#"
rdf:Description
rdf:about = ""
xmlns:xmp = "http://ns.adobe.com/xap/1.0/"
xmlns:xmpMM = "http://ns.adobe.com/xap/1.0/mm/"
xmlns:stRef = "http://ns.adobe.com/xap/1.0/sType/ResourceRef#"
xmp:CreatorTool = "Adobe Photoshop CC 2018 (Windows)"
xmpMM:InstanceID = "xmp.iid:45D70A0CD8D111E984F7F4992807E616"
xmpMM:DocumentID = "xmp.did:45D70A0DD8D111E984F7F4992807E616"
xmpMM:DerivedFrom
stRef:instanceID = "xmp.iid:45D70A0AD8D111E984F7F4992807E616"
stRef:documentID = "xmp.did:45D70A0BD8D111E984F7F4992807E616"
xpacket = end="r"
------
Output complete without errors.
IPTC Core (Adobe XMP)
Expand All / Collapse All / Show/Hide XMP Source / Show/Hide XMP Legend
xpacket = begin="i>>?" id="W5M0MpCehiHzreSzNTczkc9d"
x:xmpmeta
xmlns:x = "adobe:ns:meta/"
x:xmptk = "Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "
rdf:RDF
xmlns:rdf = "http://www.w3.org/1999/02/22-rdf-syntax-ns#"
rdf:Description
rdf:about = ""
xmlns:xmp = "http://ns.adobe.com/xap/1.0/"
xmlns:xmpMM = "http://ns.adobe.com/xap/1.0/mm/"
xmlns:stRef = "http://ns.adobe.com/xap/1.0/sType/ResourceRef#"
xmp:CreatorTool = "Adobe Photoshop CC 2018 (Windows)"
xmpMM:InstanceID = "xmp.iid:40FF4ED6D8D111E9B8A28CFF2D3726E0"
xmpMM:DocumentID = "xmp.did:40FF4ED7D8D111E9B8A28CFF2D3726E0"
xmpMM:DerivedFrom
stRef:instanceID = "xmp.iid:40FF4ED4D8D111E9B8A28CFF2D3726E0"
stRef:documentID = "xmp.did:40FF4ED5D8D111E9B8A28CFF2D3726E0"
xpacket = end="r"
-----
Output complete without errors.
IPTC Core (Adobe XMP)
Expand All / Collapse All / Show/Hide XMP Source / Show/Hide XMP Legend
xpacket = begin="i>>?" id="W5M0MpCehiHzreSzNTczkc9d"
x:xmpmeta
xmlns:x = "adobe:ns:meta/"
x:xmptk = "Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "
rdf:RDF
xmlns:rdf = "http://www.w3.org/1999/02/22-rdf-syntax-ns#"
rdf:Description
rdf:about = ""
xmlns:xmp = "http://ns.adobe.com/xap/1.0/"
xmlns:xmpMM = "http://ns.adobe.com/xap/1.0/mm/"
xmlns:stRef = "http://ns.adobe.com/xap/1.0/sType/ResourceRef#"
xmp:CreatorTool = "Adobe Photoshop CC 2018 (Windows)"
xmpMM:InstanceID = "xmp.iid:4EE8BABDD8D111E98F1ED2467302ED00"
xmpMM:DocumentID = "xmp.did:4EE8BABED8D111E98F1ED2467302ED00"
xmpMM:DerivedFrom
stRef:instanceID = "xmp.iid:4EE8BABBD8D111E98F1ED2467302ED00"
stRef:documentID = "xmp.did:4EE8BABCD8D111E98F1ED2467302ED00"
xpacket = end="r"
----
Output complete without errors.
IPTC
Coded Character Set = 27, 37, 71
Record Version = 2
IPTC Core (Adobe XMP)
Expand All / Collapse All / Show/Hide XMP Source / Show/Hide XMP Legend
xpacket = begin="i>>?" id="W5M0MpCehiHzreSzNTczkc9d"
x:xmpmeta
xmlns:x = "adobe:ns:meta/"
x:xmptk = "Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "
rdf:RDF
xmlns:rdf = "http://www.w3.org/1999/02/22-rdf-syntax-ns#"
rdf:Description
rdf:about = ""
xmlns:xmp = "http://ns.adobe.com/xap/1.0/"
xmlns:xmpMM = "http://ns.adobe.com/xap/1.0/mm/"
xmlns:stEvt = "http://ns.adobe.com/xap/1.0/sType/ResourceEvent#"
xmlns:stRef = "http://ns.adobe.com/xap/1.0/sType/ResourceRef#"
xmlns:dc = "http://purl.org/dc/elements/1.1/"
xmlns:photoshop = "http://ns.adobe.com/photoshop/1.0/"
xmlns:xmpRights = "http://ns.adobe.com/xap/1.0/rights/"
xmp:CreatorTool = "Adobe Photoshop Elements 12.0 Windows"
xmp:ModifyDate = "2020-01-07T13:45:07-08:00"
xmp:CreateDate = "2011-05-10T18:15:54-07:00"
xmp:MetadataDate = "2020-01-07T13:45:07-08:00"
xmpMM:DocumentID = "adobe:docid:photoshop:2f768c5f-3774-5542-88b1-75ef0d2af75e"
xmpMM:InstanceID = "xmp.iid:1e23942d-4995-3a40-8713-6cf2e773d386"
xmpMM:OriginalDocumentID = "adobe:docid:photoshop:09f27011-6106-11da-96c9-b0c2d41de7c2"
dc:format = "image/jpeg"
photoshop:LegacyIPTCDigest = "FCE11F89C8B7C9782F346234075877EB"
photoshop:ColorMode = "3"
photoshop:ICCProfile = "sRGB IEC61966-2.1"
xmpRights:Marked = "False"
xmpMM:History
rdf:Seq
rdf:li
stEvt:action = "saved"
stEvt:instanceID = "xmp.iid:3F34A5AB1F96E611A8E1D51E5CC78D5E"
stEvt:when = "2016-10-19T10:16:09-07:00"
stEvt:softwareAgent = "Adobe Photoshop Elements 12.0 Windows"
stEvt:changed = "/"
rdf:li
stEvt:action = "converted"
stEvt:parameters = "from application/vnd.adobe.photoshop to image/jpeg"
rdf:li
stEvt:action = "derived"
stEvt:parameters = "converted from application/vnd.adobe.photoshop to image/jpeg"
rdf:li
stEvt:action = "saved"
stEvt:instanceID = "xmp.iid:4034A5AB1F96E611A8E1D51E5CC78D5E"
stEvt:when = "2016-10-19T10:16:09-07:00"
stEvt:softwareAgent = "Adobe Photoshop Elements 12.0 Windows"
stEvt:changed = "/"
rdf:li
stEvt:action = "saved"
stEvt:instanceID = "xmp.iid:1e23942d-4995-3a40-8713-6cf2e773d386"
stEvt:when = "2020-01-07T13:45:07-08:00"
stEvt:softwareAgent = "Adobe Photoshop CC 2018 (Windows)"
stEvt:changed = "/"
xmpMM:DerivedFrom
stRef:instanceID = "xmp.iid:3F34A5AB1F96E611A8E1D51E5CC78D5E"
stRef:documentID = "adobe:docid:photoshop:09f27011-6106-11da-96c9-b0c2d41de7c2"
stRef:originalDocumentID = "adobe:docid:photoshop:09f27011-6106-11da-96c9-b0c2d41de7c2"
xpacket = end="w"
EXIF IFD0
Image Width {0x0100} = 2539 pixels
Image Length {0x0101} = 1995 pixels
Bits Per Sample {0x0102} = 8,8,8
Photometric Interpretation {0x0106} = RGB (2)
Camera Make {0x010F} = HP
Camera Model {0x0110} = HP psc2500
Picture Orientation {0x0112} = normal (1)
Samples Per Pixel {0x0115} = 3
X-Resolution {0x011A} = 1813571/10000 ===> 181.36
Y-Resolution {0x011B} = 1813571/10000 ===> 181.36
X/Y-Resolution Unit {0x0128} = inch (2)
Software / Firmware Version {0x0131} = Adobe Photoshop CC 2018 (Windows)
Last Modified Date/Time {0x0132} = 2020:01:07 13:45:07
Y/Cb/Cr Positioning (Subsampling) {0x0213} = co-sited / datum point (2)
Reference Value of Black/White Point {0x0214} = 0/1,255/1,128/1,255/1,128/1,255/1
EXIF Sub IFD
EXIF Version {0x9000} = 0220
Components Configuration {0x9101} = 0x01,0x02,0x03,0x00 / YCbCr
FlashPix Version {0xA000} = 0100
Colour Space {0xA001} = sRGB (1)
Image Width {0xA002} = 400 pixels
Image Height {0xA003} = 314 pixels
EXIF IFD1
Compression {0x0103} = JPEG compression (6)
X-Resolution {0x011A} = 72/1 ===> 72
Y-Resolution {0x011B} = 72/1 ===> 72
X/Y-Resolution Unit {0x0128} = inch (2)
Embedded thumbnail image:
------------
Output complete without errors.
IPTC
Coded Character Set = 27, 37, 71
Record Version = 0
IPTC Core (Adobe XMP)
Expand All / Collapse All / Show/Hide XMP Source / Show/Hide XMP Legend
xpacket = begin="i>>?" id="W5M0MpCehiHzreSzNTczkc9d"
x:xmpmeta
xmlns:x = "adobe:ns:meta/"
x:xmptk = "Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "
rdf:RDF
xmlns:rdf = "http://www.w3.org/1999/02/22-rdf-syntax-ns#"
rdf:Description
rdf:about = ""
xmlns:dc = "http://purl.org/dc/elements/1.1/"
xmlns:xmp = "http://ns.adobe.com/xap/1.0/"
xmlns:xmpMM = "http://ns.adobe.com/xap/1.0/mm/"
xmlns:stRef = "http://ns.adobe.com/xap/1.0/sType/ResourceRef#"
xmlns:stEvt = "http://ns.adobe.com/xap/1.0/sType/ResourceEvent#"
xmlns:photoshop = "http://ns.adobe.com/photoshop/1.0/"
xmlns:xmpRights = "http://ns.adobe.com/xap/1.0/rights/"
dc:format = "image/jpeg"
xmp:CreatorTool = "Adobe Photoshop Elements 4.0 Windows"
xmp:CreateDate = "2009-01-23T10:38:20-08:00"
xmp:ModifyDate = "2020-01-07T13:45:02-08:00"
xmp:MetadataDate = "2020-01-07T13:45:02-08:00"
xmpMM:DocumentID = "adobe:docid:photoshop:7e865648-9c90-874f-a91e-47ddfa6519c6"
xmpMM:InstanceID = "xmp.iid:8dd23f8e-594e-f647-9f56-051e794036ca"
xmpMM:OriginalDocumentID = "uuid:EDAAEB3C7BE9DD11BF85F90381D8B0CD"
photoshop:LegacyIPTCDigest = "00000000000000000000000000000001"
photoshop:ColorMode = "3"
photoshop:ICCProfile = "sRGB IEC61966-2.1"
xmpRights:Marked = "False"
xmpMM:DerivedFrom
stRef:instanceID = "uuid:EBAAEB3C7BE9DD11BF85F90381D8B0CD"
stRef:documentID = "uuid:E7AAEB3C7BE9DD11BF85F90381D8B0CD"
xmpMM:History
rdf:Seq
rdf:li
stEvt:action = "saved"
stEvt:instanceID = "xmp.iid:c9ef1959-b02e-9d4f-9c16-d6a1e0afca6a"
stEvt:when = "2020-01-07T13:45:02-08:00"
stEvt:softwareAgent = "Adobe Photoshop CC 2018 (Windows)"
stEvt:changed = "/"
rdf:li
stEvt:action = "saved"
stEvt:instanceID = "xmp.iid:8dd23f8e-594e-f647-9f56-051e794036ca"
stEvt:when = "2020-01-07T13:45:02-08:00"
stEvt:softwareAgent = "Adobe Photoshop CC 2018 (Windows)"
stEvt:changed = "/"
xpacket = end="w"
EXIF IFD0
Image Width {0x0100} = 4163 pixels
Image Length {0x0101} = 3300 pixels
Bits Per Sample {0x0102} = 8,8,8
Photometric Interpretation {0x0106} = RGB (2)
Picture Orientation {0x0112} = normal (1)
Samples Per Pixel {0x0115} = 3
X-Resolution {0x011A} = 3000000/10000 ===> 300
Y-Resolution {0x011B} = 3000000/10000 ===> 300
X/Y-Resolution Unit {0x0128} = inch (2)
Software / Firmware Version {0x0131} = Adobe Photoshop CC 2018 (Windows)
Last Modified Date/Time {0x0132} = 2020:01:07 13:45:02
EXIF Sub IFD
EXIF Version {0x9000} = 0221
Colour Space {0xA001} = sRGB (1)
Image Width {0xA002} = 400 pixels
Image Height {0xA003} = 317 pixels
EXIF IFD1
Compression {0x0103} = JPEG compression (6)
X-Resolution {0x011A} = 72/1 ===> 72
Y-Resolution {0x011B} = 72/1 ===> 72
X/Y-Resolution Unit {0x0128} = inch (2)
Embedded thumbnail image:
Output complete without errors.
IPTC
Coded Character Set = 27, 37, 71, 32, 47, 32, 27, 37, 71
Record Version = 4
Date Created = 2017/08/29
Time Created = 14:40:50+00:00
Digital Creation Date = 2017/08/29
IPTC Core (Adobe XMP)
Expand All / Collapse All / Show/Hide XMP Source / Show/Hide XMP Legend
xpacket = begin="i>>?" id="W5M0MpCehiHzreSzNTczkc9d"
x:xmpmeta
xmlns:x = "adobe:ns:meta/"
x:xmptk = "Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "
rdf:RDF
xmlns:rdf = "http://www.w3.org/1999/02/22-rdf-syntax-ns#"
rdf:Description
rdf:about = ""
xmlns:aux = "http://ns.adobe.com/exif/1.0/aux/"
xmlns:xmp = "http://ns.adobe.com/xap/1.0/"
xmlns:photoshop = "http://ns.adobe.com/photoshop/1.0/"
xmlns:xmpMM = "http://ns.adobe.com/xap/1.0/mm/"
xmlns:stEvt = "http://ns.adobe.com/xap/1.0/sType/ResourceEvent#"
xmlns:stRef = "http://ns.adobe.com/xap/1.0/sType/ResourceRef#"
xmlns:dc = "http://purl.org/dc/elements/1.1/"
xmlns:crs = "http://ns.adobe.com/camera-raw-settings/1.0/"
aux:SerialNumber = "652303072"
aux:LensInfo = "24/1 70/1 0/0 0/0"
aux:Lens = "EF24-70mm f/2.8L USM"
aux:LensID = "230"
aux:ImageNumber = "0"
aux:ApproximateFocusDistance = "319/100"
aux:FlashCompensation = "0/1"
aux:Firmware = "2.1.2"
xmp:ModifyDate = "2018-02-28T10:27:34-08:00"
xmp:CreateDate = "2017-08-29T14:40:50"
xmp:Rating = "2"
xmp:CreatorTool = "Adobe Photoshop Lightroom 5.7.1 (Macintosh)"
xmp:MetadataDate = "2018-02-28T10:27:34-08:00"
photoshop:DateCreated = "2017-08-29T14:40:50.057"
photoshop:LegacyIPTCDigest = "7EE8FE672B9C13B0DF7D2DD28FDC14FF"
photoshop:ColorMode = "3"
photoshop:ICCProfile = "sRGB IEC61966-2.1"
xmpMM:DocumentID = "adobe:docid:photoshop:71bdca61-5d43-117b-9918-cd71e5205e4c"
xmpMM:OriginalDocumentID = "1B841AF98C9C0BB16942A7E209E1F70D"
xmpMM:InstanceID = "xmp.iid:786ee2d3-e546-40b1-a23b-63c13cf2cdb5"
dc:format = "image/jpeg"
crs:Version = "8.7.1"
crs:ProcessVersion = "6.7"
crs:WhiteBalance = "Custom"
crs:AutoWhiteVersion = "134348800"
crs:Temperature = "4750"
crs:Tint = "-15"
crs:Saturation = "0"
crs:Sharpness = "25"
crs:LuminanceSmoothing = "0"
crs:ColorNoiseReduction = "25"
crs:VignetteAmount = "0"
crs:ShadowTint = "0"
crs:RedHue = "0"
crs:RedSaturation = "0"
crs:GreenHue = "0"
crs:GreenSaturation = "0"
crs:BlueHue = "0"
crs:BlueSaturation = "0"
crs:Vibrance = "0"
crs:HueAdjustmentRed = "+15"
crs:HueAdjustmentOrange = "+5"
crs:HueAdjustmentYellow = "0"
crs:HueAdjustmentGreen = "0"
crs:HueAdjustmentAqua = "0"
crs:HueAdjustmentBlue = "0"
crs:HueAdjustmentPurple = "0"
crs:HueAdjustmentMagenta = "0"
crs:SaturationAdjustmentRed = "0"
crs:SaturationAdjustmentOrange = "-5"
crs:SaturationAdjustmentYellow = "0"
crs:SaturationAdjustmentGreen = "0"
crs:SaturationAdjustmentAqua = "0"
crs:SaturationAdjustmentBlue = "0"
crs:SaturationAdjustmentPurple = "0"
crs:SaturationAdjustmentMagenta = "0"
crs:LuminanceAdjustmentRed = "0"
crs:LuminanceAdjustmentOrange = "0"
crs:LuminanceAdjustmentYellow = "0"
crs:LuminanceAdjustmentGreen = "0"
crs:LuminanceAdjustmentAqua = "0"
crs:LuminanceAdjustmentBlue = "0"
crs:LuminanceAdjustmentPurple = "0"
crs:LuminanceAdjustmentMagenta = "0"
crs:SplitToningShadowHue = "0"
crs:SplitToningShadowSaturation = "0"
crs:SplitToningHighlightHue = "0"
crs:SplitToningHighlightSaturation = "0"
crs:SplitToningBalance = "0"
crs:ParametricShadows = "0"
crs:ParametricDarks = "0"
crs:ParametricLights = "0"
crs:ParametricHighlights = "0"
crs:ParametricShadowSplit = "25"
crs:ParametricMidtoneSplit = "50"
crs:ParametricHighlightSplit = "75"
crs:SharpenRadius = "+1.0"
crs:SharpenDetail = "25"
crs:SharpenEdgeMasking = "0"
crs:PostCropVignetteAmount = "0"
crs:GrainAmount = "0"
crs:ColorNoiseReductionDetail = "50"
crs:ColorNoiseReductionSmoothness = "50"
crs:LensProfileEnable = "0"
crs:LensManualDistortionAmount = "0"
crs:PerspectiveVertical = "0"
crs:PerspectiveHorizontal = "0"
crs:PerspectiveRotate = "0.0"
crs:PerspectiveScale = "100"
crs:PerspectiveAspect = "0"
crs:PerspectiveUpright = "0"
crs:AutoLateralCA = "0"
crs:Exposure2012 = "0.00"
crs:Contrast2012 = "+45"
crs:Highlights2012 = "0"
crs:Shadows2012 = "0"
crs:Whites2012 = "0"
crs:Blacks2012 = "0"
crs:Clarity2012 = "0"
crs:DefringePurpleAmount = "0"
crs:DefringePurpleHueLo = "30"
crs:DefringePurpleHueHi = "70"
crs:DefringeGreenAmount = "0"
crs:DefringeGreenHueLo = "40"
crs:DefringeGreenHueHi = "60"
crs:ConvertToGrayscale = "False"
crs:ToneCurveName = "Linear"
crs:ToneCurveName2012 = "Linear"
crs:CameraProfile = "Adobe Standard"
crs:LensProfileSetup = "LensDefaults"
crs:HasSettings = "True"
crs:CropTop = "0"
crs:CropLeft = "0.055312"
crs:CropBottom = "1"
crs:CropRight = "0.944688"
crs:CropAngle = "3.16472"
crs:CropConstrainToWarp = "0"
crs:HasCrop = "True"
crs:AlreadyApplied = "True"
xmpMM:History
rdf:Seq
rdf:li
stEvt:action = "derived"
stEvt:parameters = "converted from image/x-canon-cr2 to image/jpeg, saved to new location"
rdf:li
stEvt:action = "saved"
stEvt:instanceID = "xmp.iid:f6abcf59-341e-4bff-86d0-2fcbdd1077eb"
stEvt:when = "2017-11-06T09:48:59-08:00"
stEvt:softwareAgent = "Adobe Photoshop Lightroom 5.7.1 (Macintosh)"
stEvt:changed = "/"
rdf:li
stEvt:action = "saved"
stEvt:instanceID = "xmp.iid:786ee2d3-e546-40b1-a23b-63c13cf2cdb5"
stEvt:when = "2018-02-28T10:27:34-08:00"
stEvt:softwareAgent = "Adobe Photoshop CC 2017 (Macintosh)"
stEvt:changed = "/"
xmpMM:DerivedFrom
stRef:documentID = "1B841AF98C9C0BB16942A7E209E1F70D"
stRef:originalDocumentID = "1B841AF98C9C0BB16942A7E209E1F70D"
crs:ToneCurve
rdf:Seq
rdf:li ==> "0, 0"
rdf:li ==> "255, 255"
crs:ToneCurveRed
rdf:Seq
rdf:li ==> "0, 0"
rdf:li ==> "255, 255"
crs:ToneCurveGreen
rdf:Seq
rdf:li ==> "0, 0"
rdf:li ==> "255, 255"
crs:ToneCurveBlue
rdf:Seq
rdf:li ==> "0, 0"
rdf:li ==> "255, 255"
crs:ToneCurvePV2012
rdf:Seq
rdf:li ==> "0, 0"
rdf:li ==> "255, 255"
crs:ToneCurvePV2012Red
rdf:Seq
rdf:li ==> "0, 0"
rdf:li ==> "255, 255"
crs:ToneCurvePV2012Green
rdf:Seq
rdf:li ==> "0, 0"
rdf:li ==> "255, 255"
crs:ToneCurvePV2012Blue
rdf:Seq
rdf:li ==> "0, 0"
rdf:li ==> "255, 255"
crs:CircularGradientBasedCorrections
rdf:Seq
rdf:li
rdf:Description
crs:What = "Correction"
crs:CorrectionAmount = "1.000000"
crs:CorrectionActive = "true"
crs:LocalSaturation = "0.000000"
crs:LocalSharpness = "0.000000"
crs:LocalBrightness = "0.000000"
crs:LocalToningHue = "0.000000"
crs:LocalToningSaturation = "0.000000"
crs:LocalExposure2012 = "0.075000"
crs:LocalContrast2012 = "0.250702"
crs:LocalHighlights2012 = "-0.307584"
crs:LocalShadows2012 = "0.186710"
crs:LocalClarity2012 = "0.000000"
crs:LocalLuminanceNoise = "0.000000"
crs:LocalMoire = "0.000000"
crs:LocalDefringe = "0.000000"
crs:LocalTemperature = "0.000000"
crs:LocalTint = "0.000000"
crs:CorrectionMasks
rdf:Seq
rdf:li
crs:What = "Mask/CircularGradient"
crs:MaskValue = "1.000000"
crs:Top = "0.034708"
crs:Left = "0.527443"
crs:Bottom = "0.741254"
crs:Right = "0.660358"
crs:Angle = "3.164720"
crs:Midpoint = "+50"
crs:Roundness = "0"
crs:Feather = "+50"
crs:Flipped = "true"
crs:Version = "+2"
rdf:li
rdf:Description
crs:What = "Correction"
crs:CorrectionAmount = "1.000000"
crs:CorrectionActive = "true"
crs:LocalSaturation = "0.000000"
crs:LocalSharpness = "0.000000"
crs:LocalBrightness = "0.000000"
crs:LocalToningHue = "0.000000"
crs:LocalToningSaturation = "0.000000"
crs:LocalExposure2012 = "-0.175000"
crs:LocalContrast2012 = "0.000000"
crs:LocalHighlights2012 = "-0.010000"
crs:LocalShadows2012 = "0.000000"
crs:LocalClarity2012 = "0.000000"
crs:LocalLuminanceNoise = "0.000000"
crs:LocalMoire = "0.000000"
crs:LocalDefringe = "0.000000"
crs:LocalTemperature = "0.000000"
crs:LocalTint = "0.000000"
crs:CorrectionMasks
rdf:Seq
rdf:li
crs:What = "Mask/CircularGradient"
crs:MaskValue = "1.000000"
crs:Top = "-0.052021"
crs:Left = "0.453188"
crs:Bottom = "0.823836"
crs:Right = "0.922314"
crs:Angle = "3.164720"
crs:Midpoint = "+50"
crs:Roundness = "0"
crs:Feather = "+50"
crs:Flipped = "false"
crs:Version = "+2"
xpacket = end="w"
EXIF IFD0
Image Width {0x0100} = 3463 pixels
Image Length {0x0101} = 5194 pixels
Bits Per Sample {0x0102} = 8,8,8
Photometric Interpretation {0x0106} = RGB (2)
Camera Make {0x010F} = Canon
Camera Model {0x0110} = Canon EOS 5D Mark II
Picture Orientation {0x0112} = normal (1)
Samples Per Pixel {0x0115} = 3
X-Resolution {0x011A} = 720000/10000 ===> 72
Y-Resolution {0x011B} = 720000/10000 ===> 72
X/Y-Resolution Unit {0x0128} = inch (2)
Software / Firmware Version {0x0131} = Adobe Photoshop CC 2017 (Macintosh)
Last Modified Date/Time {0x0132} = 2018:02:28 10:27:34
EXIF Sub IFD
Exposure Time (1 / Shutter Speed) {0x829A} = 1/160 second ===> 0.00625 second
Lens F-Number / F-Stop {0x829D} = 56/10 ===> f/5.6
Exposure Program {0x8822} = manual control (1)
ISO Speed Ratings {0x8827} = 200
EXIF Version {0x9000} = 0230
Original Date/Time {0x9003} = 2017:08:29 14:40:50
Digitization Date/Time {0x9004} = 2017:08:29 14:40:50
Shutter Speed Value (APEX) {0x9201} = 7321928/1000000
Shutter Speed (Exposure Time) = 1/160 second
Aperture Value (APEX) {0x9202} = 4970854/1000000
Aperture = f/5.6
Exposure Bias (EV) {0x9204} = 0/1 ===> 0
Max Aperture Value (APEX) {0x9205} = 3/1 ===> 3
Max Aperture = f/2.83
Metering Mode {0x9207} = pattern / multi-segment (5)
Flash {0x9209} = n/a (16)
Focal Length {0x920A} = 43/1 mm ===> 43 mm
Original Subsecond Time {0x9291} = 57
Digitized Subsecond Time {0x9292} = 57
Colour Space {0xA001} = sRGB (1)
Image Width {0xA002} = 450 pixels
Image Height {0xA003} = 675 pixels
Focal Plane X-Resolution {0xA20E} = 5616000/1459 ===> 3849.21
Focal Plane Y-Resolution {0xA20F} = 3744000/958 ===> 3908.14
Focal Plane X/Y-Resolution Unit {0xA210} = inch (2)
Custom Rendered {0xA401} = normal process (0)
Exposure Mode {0xA402} = manual exposure (1)
White Balance {0xA403} = auto (0)
Scene Capture Type {0xA406} = standard (0)
Body Serial Number {0xA431} = 652303072
Lens Specification {0xA432} = 24-70mm FNaN-NaN
Lens Model {0xA434} = EF24-70mm f/2.8L USM
EXIF IFD1
Compression {0x0103} = JPEG compression (6)
X-Resolution {0x011A} = 72/1 ===> 72
Y-Resolution {0x011B} = 72/1 ===> 72
X/Y-Resolution Unit {0x0128} = inch (2)
Embedded thumbnail image:
Output complete without errors.
IPTC
Record Version = 0
IPTC Core (Adobe XMP)
Expand All / Collapse All / Show/Hide XMP Source / Show/Hide XMP Legend
xpacket = begin="i>>?" id="W5M0MpCehiHzreSzNTczkc9d"
x:xmpmeta
xmlns:x = "adobe:ns:meta/"
x:xmptk = "Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "
rdf:RDF
xmlns:rdf = "http://www.w3.org/1999/02/22-rdf-syntax-ns#"
rdf:Description
rdf:about = ""
xmlns:xmp = "http://ns.adobe.com/xap/1.0/"
xmlns:xmpMM = "http://ns.adobe.com/xap/1.0/mm/"
xmlns:stEvt = "http://ns.adobe.com/xap/1.0/sType/ResourceEvent#"
xmlns:stRef = "http://ns.adobe.com/xap/1.0/sType/ResourceRef#"
xmlns:photoshop = "http://ns.adobe.com/photoshop/1.0/"
xmlns:dc = "http://purl.org/dc/elements/1.1/"
xmp:CreatorTool = "Adobe Photoshop CC 2019 (Macintosh)"
xmp:CreateDate = "2019-08-05T14:26:34-07:00"
xmp:MetadataDate = "2019-10-03T13:59:19-07:00"
xmp:ModifyDate = "2019-10-03T13:59:19-07:00"
xmpMM:InstanceID = "xmp.iid:d5cf9caa-f4b9-de4b-8017-6e3a80bba7bc"
xmpMM:DocumentID = "adobe:docid:photoshop:8b4ff900-d1ee-e94a-9bf2-d544ef633093"
xmpMM:OriginalDocumentID = "xmp.did:d9c4faf8-eccb-4526-b937-6b38ab2d0974"
photoshop:ColorMode = "3"
photoshop:ICCProfile = "Adobe RGB (1998)"
dc:format = "image/jpeg"
xmpMM:History
rdf:Seq
rdf:li
stEvt:action = "created"
stEvt:instanceID = "xmp.iid:d9c4faf8-eccb-4526-b937-6b38ab2d0974"
stEvt:when = "2019-08-05T14:26:34-07:00"
stEvt:softwareAgent = "Adobe Photoshop CC 2019 (Macintosh)"
rdf:li
stEvt:action = "saved"
stEvt:instanceID = "xmp.iid:5f1ef5df-678c-4c62-a1c2-c2e9b9540ba6"
stEvt:when = "2019-08-05T14:26:34-07:00"
stEvt:softwareAgent = "Adobe Photoshop CC 2019 (Macintosh)"
stEvt:changed = "/"
rdf:li
stEvt:action = "saved"
stEvt:instanceID = "xmp.iid:506b8c83-a762-a542-a809-d850c8ac5d22"
stEvt:when = "2019-10-03T13:59:19-07:00"
stEvt:softwareAgent = "Adobe Photoshop CC 2018 (Windows)"
stEvt:changed = "/"
rdf:li
stEvt:action = "converted"
stEvt:parameters = "from image/png to image/jpeg"
rdf:li
stEvt:action = "derived"
stEvt:parameters = "converted from image/png to image/jpeg"
rdf:li
stEvt:action = "saved"
stEvt:instanceID = "xmp.iid:d5cf9caa-f4b9-de4b-8017-6e3a80bba7bc"
stEvt:when = "2019-10-03T13:59:19-07:00"
stEvt:softwareAgent = "Adobe Photoshop CC 2018 (Windows)"
stEvt:changed = "/"
xmpMM:DerivedFrom
stRef:instanceID = "xmp.iid:506b8c83-a762-a542-a809-d850c8ac5d22"
stRef:documentID = "adobe:docid:photoshop:40bdb99f-dfe1-2844-8668-31d558483cee"
stRef:originalDocumentID = "xmp.did:d9c4faf8-eccb-4526-b937-6b38ab2d0974"
photoshop:DocumentAncestors
rdf:Bag
rdf:li ==> "adobe:docid:photoshop:7d7669eb-767b-244d-b3b7-cae7fe3b8ca1"
rdf:li ==> "xmp.did:35014222-b333-4082-aec3-0350617f4d4c"
rdf:li ==> "xmp.did:bcf9f947-0597-4dbb-b028-81ea9c77d49b"
xpacket = end="w"
EXIF IFD0
Picture Orientation {0x0112} = normal (1)
X-Resolution {0x011A} = 720000/10000 ===> 72
Y-Resolution {0x011B} = 720000/10000 ===> 72
X/Y-Resolution Unit {0x0128} = inch (2)
Software / Firmware Version {0x0131} = Adobe Photoshop CC 2018 (Windows)
Last Modified Date/Time {0x0132} = 2019:10:03 13:59:19
EXIF Sub IFD
Colour Space {0xA001} = uncalibrated (65535)
Image Width {0xA002} = 120 pixels
Image Height {0xA003} = 150 pixels
EXIF IFD1
Compression {0x0103} = JPEG compression (6)
X-Resolution {0x011A} = 72/1 ===> 72
Y-Resolution {0x011B} = 72/1 ===> 72
X/Y-Resolution Unit {0x0128} = inch (2)
Embedded thumbnail image:
Output complete without errors.
IPTC
Record Version = 0
IPTC Core (Adobe XMP)
Expand All / Collapse All / Show/Hide XMP Source / Show/Hide XMP Legend
xpacket = begin="i>>?" id="W5M0MpCehiHzreSzNTczkc9d"
x:xmpmeta
xmlns:x = "adobe:ns:meta/"
x:xmptk = "Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "
rdf:RDF
xmlns:rdf = "http://www.w3.org/1999/02/22-rdf-syntax-ns#"
rdf:Description
rdf:about = ""
xmlns:xmp = "http://ns.adobe.com/xap/1.0/"
xmlns:xmpMM = "http://ns.adobe.com/xap/1.0/mm/"
xmlns:stEvt = "http://ns.adobe.com/xap/1.0/sType/ResourceEvent#"
xmlns:stRef = "http://ns.adobe.com/xap/1.0/sType/ResourceRef#"
xmlns:photoshop = "http://ns.adobe.com/photoshop/1.0/"
xmlns:dc = "http://purl.org/dc/elements/1.1/"
xmp:CreatorTool = "Adobe Photoshop CC 2019 (Macintosh)"
xmp:CreateDate = "2019-07-24T09:06:44-07:00"
xmp:MetadataDate = "2019-10-03T13:57:07-07:00"
xmp:ModifyDate = "2019-10-03T13:57:07-07:00"
xmpMM:InstanceID = "xmp.iid:4c7e2cd7-a5c4-c746-a48e-fe1aebcf708b"
xmpMM:DocumentID = "adobe:docid:photoshop:3c31bf2d-2e3e-034d-9219-8ce1f8578484"
xmpMM:OriginalDocumentID = "xmp.did:d95248ed-3f9c-4453-a738-7def799aeca5"
photoshop:ColorMode = "3"
photoshop:ICCProfile = "Adobe RGB (1998)"
dc:format = "image/jpeg"
xmpMM:History
rdf:Seq
rdf:li
stEvt:action = "created"
stEvt:instanceID = "xmp.iid:d95248ed-3f9c-4453-a738-7def799aeca5"
stEvt:when = "2019-07-24T09:06:44-07:00"
stEvt:softwareAgent = "Adobe Photoshop CC 2019 (Macintosh)"
rdf:li
stEvt:action = "saved"
stEvt:instanceID = "xmp.iid:42c2053f-2d91-42f8-8970-3d60ea8db4eb"
stEvt:when = "2019-07-24T09:06:44-07:00"
stEvt:softwareAgent = "Adobe Photoshop CC 2019 (Macintosh)"
stEvt:changed = "/"
rdf:li
stEvt:action = "saved"
stEvt:instanceID = "xmp.iid:6f64c07a-059c-9e4f-b42a-f26d7670e180"
stEvt:when = "2019-10-03T13:57:07-07:00"
stEvt:softwareAgent = "Adobe Photoshop CC 2018 (Windows)"
stEvt:changed = "/"
rdf:li
stEvt:action = "converted"
stEvt:parameters = "from image/png to image/jpeg"
rdf:li
stEvt:action = "derived"
stEvt:parameters = "converted from image/png to image/jpeg"
rdf:li
stEvt:action = "saved"
stEvt:instanceID = "xmp.iid:4c7e2cd7-a5c4-c746-a48e-fe1aebcf708b"
stEvt:when = "2019-10-03T13:57:07-07:00"
stEvt:softwareAgent = "Adobe Photoshop CC 2018 (Windows)"
stEvt:changed = "/"
xmpMM:DerivedFrom
stRef:instanceID = "xmp.iid:6f64c07a-059c-9e4f-b42a-f26d7670e180"
stRef:documentID = "adobe:docid:photoshop:77491708-dd0c-6b42-9cd8-3ec639c97c42"
stRef:originalDocumentID = "xmp.did:d95248ed-3f9c-4453-a738-7def799aeca5"
photoshop:DocumentAncestors
rdf:Bag
rdf:li ==> "adobe:docid:photoshop:53c0ca47-649d-914f-ad71-71c71cf8422b"
xpacket = end="w"
EXIF IFD0
Picture Orientation {0x0112} = normal (1)
X-Resolution {0x011A} = 720000/10000 ===> 72
Y-Resolution {0x011B} = 720000/10000 ===> 72
X/Y-Resolution Unit {0x0128} = inch (2)
Software / Firmware Version {0x0131} = Adobe Photoshop CC 2018 (Windows)
Last Modified Date/Time {0x0132} = 2019:10:03 13:57:07
EXIF Sub IFD
Colour Space {0xA001} = uncalibrated (65535)
Image Width {0xA002} = 120 pixels
Image Height {0xA003} = 150 pixels
EXIF IFD1
Compression {0x0103} = JPEG compression (6)
X-Resolution {0x011A} = 72/1 ===> 72
Y-Resolution {0x011B} = 72/1 ===> 72
X/Y-Resolution Unit {0x0128} = inch (2)
Embedded thumbnail image:
Output complete without errors.
IPTC
Record Version = 0
Date Created = 2015/07/16
Time Created = 07:30:14+00:00
IPTC Core (Adobe XMP)
Expand All / Collapse All / Show/Hide XMP Source / Show/Hide XMP Legend
xpacket = begin="i>>?" id="W5M0MpCehiHzreSzNTczkc9d"
x:xmpmeta
xmlns:x = "adobe:ns:meta/"
x:xmptk = "Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "
rdf:RDF
xmlns:rdf = "http://www.w3.org/1999/02/22-rdf-syntax-ns#"
rdf:Description
rdf:about = ""
xmlns:xmp = "http://ns.adobe.com/xap/1.0/"
xmlns:photoshop = "http://ns.adobe.com/photoshop/1.0/"
xmlns:xmpMM = "http://ns.adobe.com/xap/1.0/mm/"
xmlns:stEvt = "http://ns.adobe.com/xap/1.0/sType/ResourceEvent#"
xmlns:dc = "http://purl.org/dc/elements/1.1/"
xmp:CreatorTool = "3.10.49-g1f41ca8"
xmp:ModifyDate = "2019-10-23T14:25:52-07:00"
xmp:CreateDate = "2015-07-16T07:30:14"
xmp:MetadataDate = "2019-10-23T14:25:52-07:00"
photoshop:DateCreated = "2015-07-16T07:30:14.837"
photoshop:ColorMode = "3"
photoshop:ICCProfile = "sRGB IEC61966-2.1"
xmpMM:DocumentID = "adobe:docid:photoshop:7277c9b0-85a7-4440-ae3b-02a197893b4d"
xmpMM:InstanceID = "xmp.iid:b01ddeba-324a-44c1-b3c5-3573eb2d33a4"
xmpMM:OriginalDocumentID = "4A502BAD24EF4C11E68A8BEB39DD210B"
dc:format = "image/jpeg"
xmpMM:History
rdf:Seq
rdf:li
stEvt:action = "saved"
stEvt:instanceID = "xmp.iid:c393f693-8520-4e32-8608-abdb7433e21d"
stEvt:when = "2019-10-23T14:25:52-07:00"
stEvt:softwareAgent = "Adobe Photoshop CC 2019 (Macintosh)"
stEvt:changed = "/"
rdf:li
stEvt:action = "saved"
stEvt:instanceID = "xmp.iid:b01ddeba-324a-44c1-b3c5-3573eb2d33a4"
stEvt:when = "2019-10-23T14:25:52-07:00"
stEvt:softwareAgent = "Adobe Photoshop CC 2019 (Macintosh)"
stEvt:changed = "/"
xpacket = end="w"
EXIF IFD0
Image Width {0x0100} = 5376 pixels
Image Length {0x0101} = 3024 pixels
Bits Per Sample {0x0102} = 8,8,8
Photometric Interpretation {0x0106} = RGB (2)
Camera Make {0x010F} = HTC
Camera Model {0x0110} = 0PJA2
Picture Orientation {0x0112} = normal (1)
Samples Per Pixel {0x0115} = 3
X-Resolution {0x011A} = 720000/10000 ===> 72
Y-Resolution {0x011B} = 720000/10000 ===> 72
X/Y-Resolution Unit {0x0128} = inch (2)
Software / Firmware Version {0x0131} = Adobe Photoshop CC 2019 (Macintosh)
Last Modified Date/Time {0x0132} = 2019:10:23 14:25:52
Y/Cb/Cr Positioning (Subsampling) {0x0213} = centered / center of pixel array (1)
EXIF Sub IFD
Exposure Time (1 / Shutter Speed) {0x829A} = 1/120 second ===> 0.00833 second
Lens F-Number / F-Stop {0x829D} = 220/100 ===> f/2.2
Exposure Program {0x8822} = n/a (0)
ISO Speed Ratings {0x8827} = 80
EXIF Version {0x9000} = 0220
Original Date/Time {0x9003} = 2015:07:16 07:30:14
Digitization Date/Time {0x9004} = 2015:07:16 07:30:14
Components Configuration {0x9101} = 0x01,0x02,0x03,0x00 / YCbCr
Compressed Bits per Pixel {0x9102} = 4000/1000 ===> 4
Shutter Speed Value (APEX) {0x9201} = 6907/1000
Shutter Speed (Exposure Time) = 1/120.01 second
Aperture Value (APEX) {0x9202} = 227/100
Aperture = f/2.2
Brightness (APEX) {0x9203} = 484/100
Brightness = 28.64 foot-lambert
Exposure Bias (EV) {0x9204} = 0/6 ===> 0
Metering Mode {0x9207} = center weighted average (2)
Light Source / White Balance {0x9208} = unknown (0)
Flash {0x9209} = n/a (0)
Focal Length {0x920A} = 473/100 mm ===> 4.73 mm
Last Modified Subsecond Time {0x9290} = 061807
Original Subsecond Time {0x9291} = 837
Digitized Subsecond Time {0x9292} = 061807
FlashPix Version {0xA000} = 0100
Colour Space {0xA001} = sRGB (1)
Image Width {0xA002} = 430 pixels
Image Height {0xA003} = 430 pixels
Image Sensing Method {0xA217} = n/a (1)
Scene Type {0xA301} = directly photographed image
Custom Rendered {0xA401} = normal process (0)
Exposure Mode {0xA402} = auto exposure (0)
White Balance {0xA403} = auto (0)
Digital Zoom Ratio {0xA404} = 0/0 ===> NaN
Focal Length in 35mm Film {0xA405} = 5
Scene Capture Type {0xA406} = standard (0)
Gain Control {0xA407} = n/a (0)
Contrast {0xA408} = normal (0)
Saturation {0xA409} = normal (0)
Sharpness {0xA40A} = hard (2)
EXIF IFD1
Compression {0x0103} = JPEG compression (6)
X-Resolution {0x011A} = 72/1 ===> 72
Y-Resolution {0x011B} = 72/1 ===> 72
X/Y-Resolution Unit {0x0128} = inch (2)
Embedded thumbnail image:
EXIF Interoperability IFD
Interoperability Index {0x0001} = R98
Interoperability Version {0x0002} = 0100
Output complete without errors.
IPTC
Coded Character Set = 27, 37, 71
Record Version = 0
Caption/Abstract = Business people working on financial data on a digital tablet. One looks like the manager working with employees, or a financial advisor. It may also be a training session. All are dressed in business casual clothing.
Headline = Business people working on financial data on a digital tablet.
Special Instructions = Model Released (MR)
By-line = courtneyk
By-line Title = Contributor
Credit = Getty Images
Source = E+
Object Name = 1127866562
Date Created = 2018/11/24
Time Created = 00:00:00+00:00
Country/Primary Location Name = Unspecified
Country/Primary Location Code = UNS
Keywords = people / women / showing / marketing / men / technology / business / office / pointing / planning / entrepreneur / teamwork / customer / desk / computer / cooperation / data / meeting / finance / investment / growth / loan / discussion / copy space / expertise / improvement / graph / chart / calculating / forecasting / advice / business person / strategy / analyzing / diagram / board room / organization / businessman / business strategy / digital tablet / digital display / financial advisor / group of people / making money / three people / close-up / professional occupation / report - document
IPTC Core (Adobe XMP)
Expand All / Collapse All / Show/Hide XMP Source / Show/Hide XMP Legend
xpacket = begin="i>>?" id="W5M0MpCehiHzreSzNTczkc9d"
x:xmpmeta
xmlns:x = "adobe:ns:meta/"
x:xmptk = "Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "
rdf:RDF
xmlns:rdf = "http://www.w3.org/1999/02/22-rdf-syntax-ns#"
rdf:Description
rdf:about = ""
xmlns:photoshop = "http://ns.adobe.com/photoshop/1.0/"
xmlns:Iptc4xmpCore = "http://iptc.org/std/Iptc4xmpCore/1.0/xmlns/"
xmlns:GettyImagesGIFT = "http://xmp.gettyimages.com/gift/1.0/"
xmlns:plus = "http://ns.useplus.org/ldf/xmp/1.0/"
xmlns:dc = "http://purl.org/dc/elements/1.1/"
xmlns:xmp = "http://ns.adobe.com/xap/1.0/"
xmlns:aux = "http://ns.adobe.com/exif/1.0/aux/"
xmlns:xmpMM = "http://ns.adobe.com/xap/1.0/mm/"
xmlns:stEvt = "http://ns.adobe.com/xap/1.0/sType/ResourceEvent#"
photoshop:Source = "E+"
photoshop:AuthorsPosition = "Contributor"
photoshop:CopyrightFlag = "true"
photoshop:Country = "Unspecified"
photoshop:DateCreated = "2018-11-24"
photoshop:Credit = "Getty Images"
photoshop:Headline = "Business people working on financial data on a digital tablet."
photoshop:URL = "http://www.gettyimages.com"
photoshop:Instructions = "Model Released (MR) "
photoshop:LegacyIPTCDigest = "E23829B866B91A37DC86E4CD5EC77B4A"
photoshop:ColorMode = "3"
photoshop:ICCProfile = "Adobe RGB (1998)"
Iptc4xmpCore:CountryCode = "UNS"
GettyImagesGIFT:Dlref = "gnOR5KQ8B86VTkpqHDmNqQ=="
GettyImagesGIFT:ImageRank = "3"
GettyImagesGIFT:AssetID = "1127866562"
plus:LicsensorURL = "http://www.gettyimages.com"
dc:format = "image/jpeg"
xmp:CreatorTool = "Adobe Photoshop CC 2019 (Macintosh)"
xmp:ModifyDate = "2019-10-23T14:24:21-07:00"
xmp:CreateDate = "2018-11-24T12:01:45"
xmp:MetadataDate = "2019-10-23T14:24:21-07:00"
aux:SerialNumber = "7400737"
aux:LensInfo = "700/10 2000/10 28/10 28/10"
aux:Lens = "70.0-200.0 mm f/2.8"
xmpMM:DocumentID = "adobe:docid:photoshop:516c0ae9-9ad3-c342-b30b-96746b2133dc"
xmpMM:InstanceID = "xmp.iid:e566b627-bda5-4632-b571-f1caef594bc2"
xmpMM:OriginalDocumentID = "715E0CB8F6A0C87311FD0B2CFF0808C6"
dc:title
rdf:Alt
rdf:li ==> "1127866562"
xml:lang = "x-default"
dc:subject
rdf:Bag
rdf:li ==> "people"
rdf:li ==> "women"
rdf:li ==> "showing"
rdf:li ==> "marketing"
rdf:li ==> "men"
rdf:li ==> "technology"
rdf:li ==> "business"
rdf:li ==> "office"
rdf:li ==> "pointing"
rdf:li ==> "planning"
rdf:li ==> "entrepreneur"
rdf:li ==> "teamwork"
rdf:li ==> "customer"
rdf:li ==> "desk"
rdf:li ==> "computer"
rdf:li ==> "cooperation"
rdf:li ==> "data"
rdf:li ==> "meeting"
rdf:li ==> "finance"
rdf:li ==> "investment"
rdf:li ==> "growth"
rdf:li ==> "loan"
rdf:li ==> "discussion"
rdf:li ==> "copy space"
rdf:li ==> "expertise"
rdf:li ==> "improvement"
rdf:li ==> "graph"
rdf:li ==> "chart"
rdf:li ==> "calculating"
rdf:li ==> "forecasting"
rdf:li ==> "advice"
rdf:li ==> "business person"
rdf:li ==> "strategy"
rdf:li ==> "analyzing"
rdf:li ==> "diagram"
rdf:li ==> "board room"
rdf:li ==> "organization"
rdf:li ==> "businessman"
rdf:li ==> "business strategy"
rdf:li ==> "digital tablet"
rdf:li ==> "digital display"
rdf:li ==> "financial advisor"
rdf:li ==> "group of people"
rdf:li ==> "making money"
rdf:li ==> "three people"
rdf:li ==> "close-up"
rdf:li ==> "professional occupation"
rdf:li ==> "report - document"
dc:creator
rdf:Seq
rdf:li ==> "courtneyk"
dc:description
rdf:Alt
rdf:li ==> "Business people working on financial data on a digital tablet. One looks like the manager working with employees, or a financial advisor. It may also be a training session. All are dressed in business casual clothing."
xml:lang = "x-default"
xmpMM:History
rdf:Seq
rdf:li
stEvt:action = "saved"
stEvt:instanceID = "xmp.iid:b02beda7-ceb5-49e5-a91d-330958b85680"
stEvt:when = "2019-10-23T14:24:21-07:00"
stEvt:softwareAgent = "Adobe Photoshop CC 2019 (Macintosh)"
stEvt:changed = "/"
rdf:li
stEvt:action = "saved"
stEvt:instanceID = "xmp.iid:e566b627-bda5-4632-b571-f1caef594bc2"
stEvt:when = "2019-10-23T14:24:21-07:00"
stEvt:softwareAgent = "Adobe Photoshop CC 2019 (Macintosh)"
stEvt:changed = "/"
xpacket = end="w"
EXIF IFD0
Image Width {0x0100} = 5568 pixels
Image Length {0x0101} = 3712 pixels
Bits Per Sample {0x0102} = 8,8,8
Photometric Interpretation {0x0106} = RGB (2)
Image Description {0x010E} = Business people working on financial data on a digital tablet. One looks like the manager working with employees, or a financial advisor. It may also be a training session. All are dressed in business casual clothing.
Camera Make {0x010F} = NIKON CORPORATION
Camera Model {0x0110} = NIKON D5
Picture Orientation {0x0112} = normal (1)
Samples Per Pixel {0x0115} = 3
X-Resolution {0x011A} = 720000/10000 ===> 72
Y-Resolution {0x011B} = 720000/10000 ===> 72
X/Y-Resolution Unit {0x0128} = inch (2)
Software / Firmware Version {0x0131} = Adobe Photoshop CC 2019 (Macintosh)
Last Modified Date/Time {0x0132} = 2019:10:23 14:24:21
Artist {0x013B} = courtneyk
EXIF Sub IFD
Exposure Time (1 / Shutter Speed) {0x829A} = 1/50 second ===> 0.02 second
Lens F-Number / F-Stop {0x829D} = 28/10 ===> f/2.8
Exposure Program {0x8822} = manual control (1)
ISO Speed Ratings {0x8827} = 400
Sensitivity Type {0x8830} = recommended exposure index (REI) (2)
Recommended Exposure Index {0x8832} = 400
EXIF Version {0x9000} = 0221
Original Date/Time {0x9003} = 2018:11:24 12:01:45
Digitization Date/Time {0x9004} = 2018:11:24 12:01:45
Shutter Speed Value (APEX) {0x9201} = 5643856/1000000
Shutter Speed (Exposure Time) = 1/50 second
Aperture Value (APEX) {0x9202} = 2970854/1000000
Aperture = f/2.8
Exposure Bias (EV) {0x9204} = 0/6 ===> 0
Max Aperture Value (APEX) {0x9205} = 30/10 ===> 3
Max Aperture = f/2.83
Metering Mode {0x9207} = center weighted average (2)
Light Source / White Balance {0x9208} = unknown (0)
Flash {0x9209} = n/a (0)
Focal Length {0x920A} = 860/10 mm ===> 86 mm
Original Subsecond Time {0x9291} = 85
Colour Space {0xA001} = uncalibrated (65535)
Image Width {0xA002} = 430 pixels
Image Height {0xA003} = 430 pixels
Focal Plane X-Resolution {0xA20E} = 50857775/32768 ===> 1552.06
Focal Plane Y-Resolution {0xA20F} = 50857775/32768 ===> 1552.06
Focal Plane X/Y-Resolution Unit {0xA210} = centimeter (3)
Image Sensing Method {0xA217} = one-chip color area sensor (2)
Image Source {0xA300} = 0x03,0x00,0x00,0x00
Scene Type {0xA301} = directly photographed image
Colour Filter Array (CFA) Geometric Pattern {0xA302} = 0x02,0x00,0x02,0x00,0x00,0x01,0x01,0x02
Custom Rendered {0xA401} = normal process (0)
Exposure Mode {0xA402} = manual exposure (1)
White Balance {0xA403} = manual (1)
Focal Length in 35mm Film {0xA405} = 86
Scene Capture Type {0xA406} = standard (0)
Gain Control {0xA407} = n/a (0)
Contrast {0xA408} = normal (0)
Saturation {0xA409} = normal (0)
Sharpness {0xA40A} = normal (0)
Subject Distance Range {0xA40C} = unknown (0)
Body Serial Number {0xA431} = 7400737
Lens Specification {0xA432} = 70-200mm F2.8-2.8
Lens Model {0xA434} = 70.0-200.0 mm f/2.8
EXIF IFD1
Compression {0x0103} = JPEG compression (6)
X-Resolution {0x011A} = 72/1 ===> 72
Y-Resolution {0x011B} = 72/1 ===> 72
X/Y-Resolution Unit {0x0128} = inch (2)
Embedded thumbnail image:
Output complete without errors.
IPTC
Record Version = 0
Copyright Notice = (C) 2018 Gardner Media Group LLC
IPTC Core (Adobe XMP)
Expand All / Collapse All / Show/Hide XMP Source / Show/Hide XMP Legend
xpacket = begin="i>>?" id="W5M0MpCehiHzreSzNTczkc9d"
x:xmpmeta
xmlns:x = "adobe:ns:meta/"
x:xmptk = "Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "
rdf:RDF
xmlns:rdf = "http://www.w3.org/1999/02/22-rdf-syntax-ns#"
rdf:Description
rdf:about = ""
xmlns:photoshop = "http://ns.adobe.com/photoshop/1.0/"
xmlns:dc = "http://purl.org/dc/elements/1.1/"
xmlns:xmpMM = "http://ns.adobe.com/xap/1.0/mm/"
xmlns:stEvt = "http://ns.adobe.com/xap/1.0/sType/ResourceEvent#"
xmlns:xmp = "http://ns.adobe.com/xap/1.0/"
photoshop:LegacyIPTCDigest = "1282700C3E321744A562ADF2AF4E123D"
photoshop:ColorMode = "3"
photoshop:ICCProfile = "sRGB IEC61966-2.1"
dc:format = "image/jpeg"
xmpMM:DocumentID = "E06BA773807FF574029B1E01376FCF45"
xmpMM:InstanceID = "xmp.iid:1c60b36e-91ee-4f3a-b071-553da4cee106"
xmpMM:OriginalDocumentID = "E06BA773807FF574029B1E01376FCF45"
xmp:CreateDate = "2019-10-23T12:10:17-07:00"
xmp:ModifyDate = "2019-10-23T12:46:33-07:00"
xmp:MetadataDate = "2019-10-23T12:46:33-07:00"
dc:rights
rdf:Alt
rdf:li ==> "A(C) 2018 Gardner Media Group LLC"
xml:lang = "x-default"
xmpMM:History
rdf:Seq
rdf:li
stEvt:action = "saved"
stEvt:instanceID = "xmp.iid:1c60b36e-91ee-4f3a-b071-553da4cee106"
stEvt:when = "2019-10-23T12:46:33-07:00"
stEvt:softwareAgent = "Adobe Photoshop CC 2019 (Macintosh)"
stEvt:changed = "/"
xpacket = end="w"
EXIF IFD0
Image Width {0x0100} = 360 pixels
Image Length {0x0101} = 450 pixels
Bits Per Sample {0x0102} = 8,8,8
Photometric Interpretation {0x0106} = RGB (2)
Picture Orientation {0x0112} = normal (1)
Samples Per Pixel {0x0115} = 3
X-Resolution {0x011A} = 720000/10000 ===> 72
Y-Resolution {0x011B} = 720000/10000 ===> 72
X/Y-Resolution Unit {0x0128} = inch (2)
Software / Firmware Version {0x0131} = Adobe Photoshop CC 2019 (Macintosh)
Last Modified Date/Time {0x0132} = 2019:10:23 12:46:33
Copyright Owner {0x8298} = A(C) 2018 Gardner Media Group LLC
EXIF Sub IFD
EXIF Version {0x9000} = 0221
Colour Space {0xA001} = sRGB (1)
Image Width {0xA002} = 220 pixels
Image Height {0xA003} = 308 pixels
EXIF IFD1
Compression {0x0103} = JPEG compression (6)
X-Resolution {0x011A} = 72/1 ===> 72
Y-Resolution {0x011B} = 72/1 ===> 72
X/Y-Resolution Unit {0x0128} = inch (2)
Embedded thumbnail image:
Output complete without errors.
IPTC
Record Version = 0
Copyright Notice = (C) 2018 Gardner Media Group LLC
IPTC Core (Adobe XMP)
Expand All / Collapse All / Show/Hide XMP Source / Show/Hide XMP Legend
xpacket = begin="i>>?" id="W5M0MpCehiHzreSzNTczkc9d"
x:xmpmeta
xmlns:x = "adobe:ns:meta/"
x:xmptk = "Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "
rdf:RDF
xmlns:rdf = "http://www.w3.org/1999/02/22-rdf-syntax-ns#"
rdf:Description
rdf:about = ""
xmlns:photoshop = "http://ns.adobe.com/photoshop/1.0/"
xmlns:dc = "http://purl.org/dc/elements/1.1/"
xmlns:xmpMM = "http://ns.adobe.com/xap/1.0/mm/"
xmlns:stEvt = "http://ns.adobe.com/xap/1.0/sType/ResourceEvent#"
xmlns:xmp = "http://ns.adobe.com/xap/1.0/"
photoshop:LegacyIPTCDigest = "1282700C3E321744A562ADF2AF4E123D"
photoshop:ColorMode = "3"
photoshop:ICCProfile = "sRGB IEC61966-2.1"
dc:format = "image/jpeg"
xmpMM:DocumentID = "0E757ADC73D7E64BFFEC2732983EA5CB"
xmpMM:InstanceID = "xmp.iid:d85409d9-0aec-4c9b-9910-1acae6c973b7"
xmpMM:OriginalDocumentID = "0E757ADC73D7E64BFFEC2732983EA5CB"
xmp:CreateDate = "2019-10-23T12:10:35-07:00"
xmp:ModifyDate = "2019-10-23T12:45:35-07:00"
xmp:MetadataDate = "2019-10-23T12:45:35-07:00"
dc:rights
rdf:Alt
rdf:li ==> "A(C) 2018 Gardner Media Group LLC"
xml:lang = "x-default"
xmpMM:History
rdf:Seq
rdf:li
stEvt:action = "saved"
stEvt:instanceID = "xmp.iid:d85409d9-0aec-4c9b-9910-1acae6c973b7"
stEvt:when = "2019-10-23T12:45:35-07:00"
stEvt:softwareAgent = "Adobe Photoshop CC 2019 (Macintosh)"
stEvt:changed = "/"
xpacket = end="w"
EXIF IFD0
Image Width {0x0100} = 360 pixels
Image Length {0x0101} = 450 pixels
Bits Per Sample {0x0102} = 8,8,8
Photometric Interpretation {0x0106} = RGB (2)
Picture Orientation {0x0112} = normal (1)
Samples Per Pixel {0x0115} = 3
X-Resolution {0x011A} = 720000/10000 ===> 72
Y-Resolution {0x011B} = 720000/10000 ===> 72
X/Y-Resolution Unit {0x0128} = inch (2)
Software / Firmware Version {0x0131} = Adobe Photoshop CC 2019 (Macintosh)
Last Modified Date/Time {0x0132} = 2019:10:23 12:45:35
Copyright Owner {0x8298} = A(C) 2018 Gardner Media Group LLC
EXIF Sub IFD
EXIF Version {0x9000} = 0221
Colour Space {0xA001} = sRGB (1)
Image Width {0xA002} = 220 pixels
Image Height {0xA003} = 308 pixels
EXIF IFD1
Compression {0x0103} = JPEG compression (6)
X-Resolution {0x011A} = 72/1 ===> 72
Y-Resolution {0x011B} = 72/1 ===> 72
X/Y-Resolution Unit {0x0128} = inch (2)
Embedded thumbnail image:
Output complete without errors.
IPTC
Record Version = 0
Copyright Notice = (C) 2018 Gardner Media Group LLC
IPTC Core (Adobe XMP)
Expand All / Collapse All / Show/Hide XMP Source / Show/Hide XMP Legend
xpacket = begin="i>>?" id="W5M0MpCehiHzreSzNTczkc9d"
x:xmpmeta
xmlns:x = "adobe:ns:meta/"
x:xmptk = "Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "
rdf:RDF
xmlns:rdf = "http://www.w3.org/1999/02/22-rdf-syntax-ns#"
rdf:Description
rdf:about = ""
xmlns:photoshop = "http://ns.adobe.com/photoshop/1.0/"
xmlns:dc = "http://purl.org/dc/elements/1.1/"
xmlns:xmpMM = "http://ns.adobe.com/xap/1.0/mm/"
xmlns:stEvt = "http://ns.adobe.com/xap/1.0/sType/ResourceEvent#"
xmlns:xmp = "http://ns.adobe.com/xap/1.0/"
photoshop:LegacyIPTCDigest = "1282700C3E321744A562ADF2AF4E123D"
photoshop:ColorMode = "3"
photoshop:ICCProfile = "sRGB IEC61966-2.1"
dc:format = "image/jpeg"
xmpMM:DocumentID = "2D38B2BD3E043F26BAF7A148687B6911"
xmpMM:InstanceID = "xmp.iid:6e066106-96f5-4fd4-87a0-abc09f09d8cc"
xmpMM:OriginalDocumentID = "2D38B2BD3E043F26BAF7A148687B6911"
xmp:CreateDate = "2019-10-23T12:09:48-07:00"
xmp:ModifyDate = "2019-10-23T12:46:22-07:00"
xmp:MetadataDate = "2019-10-23T12:46:22-07:00"
dc:rights
rdf:Alt
rdf:li ==> "A(C) 2018 Gardner Media Group LLC"
xml:lang = "x-default"
xmpMM:History
rdf:Seq
rdf:li
stEvt:action = "saved"
stEvt:instanceID = "xmp.iid:6e066106-96f5-4fd4-87a0-abc09f09d8cc"
stEvt:when = "2019-10-23T12:46:22-07:00"
stEvt:softwareAgent = "Adobe Photoshop CC 2019 (Macintosh)"
stEvt:changed = "/"
xpacket = end="w"
EXIF IFD0
Image Width {0x0100} = 360 pixels
Image Length {0x0101} = 450 pixels
Bits Per Sample {0x0102} = 8,8,8
Photometric Interpretation {0x0106} = RGB (2)
Picture Orientation {0x0112} = normal (1)
Samples Per Pixel {0x0115} = 3
X-Resolution {0x011A} = 720000/10000 ===> 72
Y-Resolution {0x011B} = 720000/10000 ===> 72
X/Y-Resolution Unit {0x0128} = inch (2)
Software / Firmware Version {0x0131} = Adobe Photoshop CC 2019 (Macintosh)
Last Modified Date/Time {0x0132} = 2019:10:23 12:46:22
Copyright Owner {0x8298} = A(C) 2018 Gardner Media Group LLC
EXIF Sub IFD
EXIF Version {0x9000} = 0221
Colour Space {0xA001} = sRGB (1)
Image Width {0xA002} = 220 pixels
Image Height {0xA003} = 308 pixels
EXIF IFD1
Compression {0x0103} = JPEG compression (6)
X-Resolution {0x011A} = 72/1 ===> 72
Y-Resolution {0x011B} = 72/1 ===> 72
X/Y-Resolution Unit {0x0128} = inch (2)
Embedded thumbnail image:
Output complete without errors.
IPTC
Record Version = 0
Date Created = 2007/08/28
Time Created = 12:07:24+00:00
IPTC Core (Adobe XMP)
Expand All / Collapse All / Show/Hide XMP Source / Show/Hide XMP Legend
xpacket = begin="i>>?" id="W5M0MpCehiHzreSzNTczkc9d"
x:xmpmeta
xmlns:x = "adobe:ns:meta/"
x:xmptk = "Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "
rdf:RDF
xmlns:rdf = "http://www.w3.org/1999/02/22-rdf-syntax-ns#"
rdf:Description
rdf:about = ""
xmlns:xmp = "http://ns.adobe.com/xap/1.0/"
xmlns:xmpMM = "http://ns.adobe.com/xap/1.0/mm/"
xmlns:stEvt = "http://ns.adobe.com/xap/1.0/sType/ResourceEvent#"
xmlns:photoshop = "http://ns.adobe.com/photoshop/1.0/"
xmlns:dc = "http://purl.org/dc/elements/1.1/"
xmp:CreatorTool = "Adobe Photoshop CS2 Windows"
xmp:CreateDate = "2007-08-28T12:07:24"
xmp:ModifyDate = "2019-10-23T12:46:18-07:00"
xmp:MetadataDate = "2019-10-23T12:46:18-07:00"
xmpMM:InstanceID = "xmp.iid:48acdf4c-0473-4869-b15b-516b5ba09ea8"
xmpMM:DocumentID = "65D1D73367B072F124CB955E0BE0FDEE"
xmpMM:OriginalDocumentID = "65D1D73367B072F124CB955E0BE0FDEE"
photoshop:DateCreated = "2007-08-28T12:07:24"
photoshop:ColorMode = "3"
photoshop:ICCProfile = "sRGB IEC61966-2.1"
dc:format = "image/jpeg"
xmpMM:History
rdf:Seq
rdf:li
stEvt:action = "saved"
stEvt:instanceID = "xmp.iid:48acdf4c-0473-4869-b15b-516b5ba09ea8"
stEvt:when = "2019-10-23T12:46:18-07:00"
stEvt:softwareAgent = "Adobe Photoshop CC 2019 (Macintosh)"
stEvt:changed = "/"
xpacket = end="w"
EXIF IFD0
Image Width {0x0100} = 362 pixels
Image Length {0x0101} = 450 pixels
Bits Per Sample {0x0102} = 8,8,8
Photometric Interpretation {0x0106} = RGB (2)
Picture Orientation {0x0112} = normal (1)
Samples Per Pixel {0x0115} = 3
X-Resolution {0x011A} = 720000/10000 ===> 72
Y-Resolution {0x011B} = 720000/10000 ===> 72
X/Y-Resolution Unit {0x0128} = inch (2)
Software / Firmware Version {0x0131} = Adobe Photoshop CC 2019 (Macintosh)
Last Modified Date/Time {0x0132} = 2019:10:23 12:46:18
Microsoft.Padding {0xEA1C} = 0x1ce0x08
EXIF Sub IFD
EXIF Version {0x9000} = 0221
Original Date/Time {0x9003} = 2007:08:28 12:07:24
Digitization Date/Time {0x9004} = 2007:08:28 12:07:24
Original Subsecond Time {0x9291} = 00
Digitized Subsecond Time {0x9292} = 00
Colour Space {0xA001} = sRGB (1)
Image Width {0xA002} = 220 pixels
Image Height {0xA003} = 308 pixels
Microsoft.Padding {0xEA1C} = 0x1ce0x08
EXIF IFD1
Compression {0x0103} = JPEG compression (6)
X-Resolution {0x011A} = 72/1 ===> 72
Y-Resolution {0x011B} = 72/1 ===> 72
X/Y-Resolution Unit {0x0128} = inch (2)
Embedded thumbnail image:
Output complete without errors.
IPTC
Coded Character Set = 27, 37, 71
Record Version = 4
By-line = Jennifer Raudebaugh
Date Created = 2015/05/15
Time Created = 10:33:33+00:00
Digital Creation Date = 2015/05/15
Copyright Notice = Jennifer Raudebaugh Photography
IPTC Core (Adobe XMP)
Expand All / Collapse All / Show/Hide XMP Source / Show/Hide XMP Legend
xpacket = begin="i>>?" id="W5M0MpCehiHzreSzNTczkc9d"
x:xmpmeta
xpacket = end="w"
EXIF IFD0
Image Width {0x0100} = 3246 pixels
Image Length {0x0101} = 2160 pixels
Bits Per Sample {0x0102} = 8,8,8
Photometric Interpretation {0x0106} = RGB (2)
Camera Make {0x010F} = NIKON CORPORATION
Camera Model {0x0110} = NIKON D700
Picture Orientation {0x0112} = normal (1)
Samples Per Pixel {0x0115} = 3
X-Resolution {0x011A} = 720000/10000 ===> 72
Y-Resolution {0x011B} = 720000/10000 ===> 72
X/Y-Resolution Unit {0x0128} = inch (2)
Software / Firmware Version {0x0131} = Adobe Photoshop CC 2019 (Macintosh)
Last Modified Date/Time {0x0132} = 2019:07:02 15:11:44
Artist {0x013B} = Jennifer Raudebaugh
Copyright Owner {0x8298} = Jennifer Raudebaugh Photography
EXIF Sub IFD
Exposure Time (1 / Shutter Speed) {0x829A} = 1/500 second ===> 0.002 second
Lens F-Number / F-Stop {0x829D} = 35/10 ===> f/3.5
Exposure Program {0x8822} = shutter priority (4)
ISO Speed Ratings {0x8827} = 320
EXIF Version {0x9000} = 0230
Original Date/Time {0x9003} = 2015:05:15 10:33:33
Digitization Date/Time {0x9004} = 2015:05:15 10:33:33
Shutter Speed Value (APEX) {0x9201} = 8965784/1000000
Shutter Speed (Exposure Time) = 1/500 second
Aperture Value (APEX) {0x9202} = 361471/100000
Aperture = f/3.5
Exposure Bias (EV) {0x9204} = 0/6 ===> 0
Max Aperture Value (APEX) {0x9205} = 30/10 ===> 3
Max Aperture = f/2.83
Metering Mode {0x9207} = pattern / multi-segment (5)
Light Source / White Balance {0x9208} = unknown (0)
Flash {0x9209} = n/a (0)
Focal Length {0x920A} = 2000/10 mm ===> 200 mm
Original Subsecond Time {0x9291} = 42
Digitized Subsecond Time {0x9292} = 42
Colour Space {0xA001} = sRGB (1)
Image Width {0xA002} = 1800 pixels
Image Height {0xA003} = 400 pixels
Image Sensing Method {0xA217} = one-chip color area sensor (2)
Image Source {0xA300} = 0x03,0x00,0x00,0x00
Scene Type {0xA301} = directly photographed image
Colour Filter Array (CFA) Geometric Pattern {0xA302} = 0x02,0x00,0x02,0x00,0x00,0x01,0x01,0x02
Custom Rendered {0xA401} = normal process (0)
Exposure Mode {0xA402} = auto exposure (0)
White Balance {0xA403} = auto (0)
Digital Zoom Ratio {0xA404} = 1/1 ===> 1
Focal Length in 35mm Film {0xA405} = 200
Scene Capture Type {0xA406} = standard (0)
Gain Control {0xA407} = n/a (0)
Contrast {0xA408} = normal (0)
Saturation {0xA409} = normal (0)
Sharpness {0xA40A} = normal (0)
Subject Distance Range {0xA40C} = unknown (0)
Body Serial Number {0xA431} = 2316754
Lens Specification {0xA432} = 70-200mm F2.8-2.8
Lens Model {0xA434} = 70.0-200.0 mm f/2.8
EXIF IFD1
Compression {0x0103} = JPEG compression (6)
X-Resolution {0x011A} = 72/1 ===> 72
Y-Resolution {0x011B} = 72/1 ===> 72
X/Y-Resolution Unit {0x0128} = inch (2)
Embedded thumbnail image:
Output complete without errors.
IPTC
Coded Character Set = 27, 37, 71
Record Version = 4
Date Created = 2011/10/19
Time Created = 11:19:28:
Digital Creation Date = 2011/10/19
Digital Creation Time = 11:19:28:
By-line = Jennifer Raudebaugh
Copyright Notice = Jennifer Raudebaugh Photography
IPTC Core (Adobe XMP)
Expand All / Collapse All / Show/Hide XMP Source / Show/Hide XMP Legend
xpacket = begin="i>>?" id="W5M0MpCehiHzreSzNTczkc9d"
x:xmpmeta
xpacket = end="w"
EXIF IFD0
Camera Make {0x010F} = NIKON CORPORATION
Camera Model {0x0110} = NIKON D700
X-Resolution {0x011A} = 240/1 ===> 240
Y-Resolution {0x011B} = 240/1 ===> 240
X/Y-Resolution Unit {0x0128} = inch (2)
Software / Firmware Version {0x0131} = Adobe Photoshop Lightroom 3.5 (Macintosh)
Last Modified Date/Time {0x0132} = 2011:10:20 10:26:20
Artist {0x013B} = Jennifer Raudebaugh
Copyright Owner {0x8298} = Jennifer Raudebaugh Photography
EXIF Sub IFD
Exposure Time (1 / Shutter Speed) {0x829A} = 1/160 second ===> 0.00625 second
Lens F-Number / F-Stop {0x829D} = 9/1 ===> f/9
Exposure Program {0x8822} = aperture priority (3)
ISO Speed Ratings {0x8827} = 500
EXIF Version {0x9000} = 0230
Original Date/Time {0x9003} = 2011:10:19 11:19:28
Digitization Date/Time {0x9004} = 2011:10:19 11:19:28
Shutter Speed Value (APEX) {0x9201} = 7321928/1000000
Shutter Speed (Exposure Time) = 1/160 second
Aperture Value (APEX) {0x9202} = 633985/100000
Aperture = f/9
Exposure Bias (EV) {0x9204} = 2/6 ===> 0.33
Max Aperture Value (APEX) {0x9205} = 30/10 ===> 3
Max Aperture = f/2.83
Distance to Subject {0x9206} = 266/10 m
Metering Mode {0x9207} = pattern / multi-segment (5)
Light Source / White Balance {0x9208} = unknown (0)
Flash {0x9209} = n/a (0)
Focal Length {0x920A} = 700/10 mm ===> 70 mm
Original Subsecond Time {0x9291} = 65
Digitized Subsecond Time {0x9292} = 65
Image Sensing Method {0xA217} = one-chip color area sensor (2)
Image Source {0xA300} = 0x03,0x00,0x00,0x00
Scene Type {0xA301} = directly photographed image
Colour Filter Array (CFA) Geometric Pattern {0xA302} = 0x02,0x00,0x02,0x00,0x00,0x01,0x01,0x02
Custom Rendered {0xA401} = normal process (0)
Exposure Mode {0xA402} = auto exposure (0)
White Balance {0xA403} = auto (0)
Digital Zoom Ratio {0xA404} = 1/1 ===> 1
Focal Length in 35mm Film {0xA405} = 70
Scene Capture Type {0xA406} = standard (0)
Gain Control {0xA407} = low gain up (1)
Contrast {0xA408} = normal (0)
Saturation {0xA409} = normal (0)
Sharpness {0xA40A} = normal (0)
Subject Distance Range {0xA40C} = unknown (0)
Body Serial Number {0xA431} = 2316754
Lens Specification {0xA432} = 70-200mm F2.8-2.8
Lens Model {0xA434} = 70.0-200.0 mm f/2.8
EXIF IFD1
Compression {0x0103} = JPEG compression (6)
X-Resolution {0x011A} = 72/1 ===> 72
Y-Resolution {0x011B} = 72/1 ===> 72
X/Y-Resolution Unit {0x0128} = inch (2)
Embedded thumbnail image:
2000 Hyundai Sonata
KMHWF35V6YA313814
VIN
KMHWF35V6YA313814 Make
Hyundai Model
Sonata Year
2000 Trim
GLS
Style/Body
SEDAN 4-DR Engine
2.5L V6 DOHC 24V Make in
Asan, South Korea Age
21 year(s)
Take the results shown on this page with a grain of salt! Some of our checks may report wrong results.
What is this? This page shows a summary of a machine-generated analysis of several web pages commissioned by a PrivacyScore user. During the analysis it was checked whether the privacy of the visitors is protected on a technical level as well as possible when visiting the given Internet addresses, and whether the operator uses common security mechanisms on the website. This can indicate how seriously an operator takes data protection. However, it is not possible to determine the actual security level achieved. More details please!
» Configure sorting and grouping
You can influence the ranking by your preferences. Use the and arrows to change the importance (left means more important).
At the moment we only provide one ranking scheme that consists of the following categories: NoTrack, EncWeb, Attacks, and EncMail. We perform a priorized sort to obtain the ranking: We start with the first category, sorting the sites according to their rating: . Sites with an identical rating in a category are further sorted considering the next category to the right. This procedure is repeated until all categories have been considered.
Site owners can ask us to not perform further scans of their sites. For reasons of transparency we archive the result of the last successful scan here.
No sites are excluded from scans at the moment.
