Incident Response
Risk Assessment
- Persistence
-
Modifies System Certificates Settings
Spawns a lot of processes
Writes data to a remote process
Writes to the hosts file
- Fingerprint
-
Reads the active computer name
Reads the cryptographic machine GUID
- Spreading
-
Opens the MountPointManager (often used to detect additional infection locations)
- Network Behavior
-
Contacts 2 hosts.
View all details
Indicators
Not all malicious and suspicious indicators are displayed. Get your own cloud service or the full version to view all details.
-
General
-
Installation/Persistance
-
Allocates virtual memory in a remote process
- details
-
"<Input Sample>" allocated memory in "\REGISTRY\MACHINE\SOFTWARE\Classes\Folder"
"<Input Sample>" allocated memory in "\REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer"
"UPSecurityInput.exe" allocated memory in "\REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\SideBySide"
- source
- API Call
- relevance
- 7/10
-
Writes data to a remote process
- details
-
"<Input Sample>" wrote 32 bytes to a remote process "C:\Windows\SysWOW64\UPEditNew\UPEditor.exe" (Handle: 480)
"<Input Sample>" wrote 52 bytes to a remote process "C:\Windows\SysWOW64\UPEditNew\UPEditor.exe" (Handle: 480)
"<Input Sample>" wrote 4 bytes to a remote process "C:\Windows\SysWOW64\UPEditNew\UPEditor.exe" (Handle: 480)
"<Input Sample>" wrote 8 bytes to a remote process "C:\Windows\SysWOW64\UPEditNew\UPEditor.exe" (Handle: 480)
"<Input Sample>" wrote 32 bytes to a remote process "C:\Windows\SysWOW64\UPEditNew\UPService.exe" (Handle: 28)
"<Input Sample>" wrote 52 bytes to a remote process "C:\Windows\SysWOW64\UPEditNew\UPService.exe" (Handle: 28)
"<Input Sample>" wrote 4 bytes to a remote process "C:\Windows\SysWOW64\UPEditNew\UPService.exe" (Handle: 28)
"<Input Sample>" wrote 8 bytes to a remote process "C:\Windows\SysWOW64\UPEditNew\UPService.exe" (Handle: 28)
"<Input Sample>" wrote 32 bytes to a remote process "C:\Windows\SysWOW64\UPEditNew\UPSecurityInput.exe" (Handle: 480)
"<Input Sample>" wrote 52 bytes to a remote process "C:\Windows\SysWOW64\UPEditNew\UPSecurityInput.exe" (Handle: 480)
"<Input Sample>" wrote 4 bytes to a remote process "C:\Windows\SysWOW64\UPEditNew\UPSecurityInput.exe" (Handle: 480)
"<Input Sample>" wrote 8 bytes to a remote process "C:\Windows\SysWOW64\UPEditNew\UPSecurityInput.exe" (Handle: 480)
"<Input Sample>" wrote 32 bytes to a remote process "%TEMP%\certmgr.exe" (Handle: 844)
"<Input Sample>" wrote 52 bytes to a remote process "C:\Users\%USERNAME%\AppData\Local\Temp\certmgr.exe" (Handle: 844)
"<Input Sample>" wrote 4 bytes to a remote process "C:\Users\%USERNAME%\AppData\Local\Temp\certmgr.exe" (Handle: 844)
"<Input Sample>" wrote 8 bytes to a remote process "C:\Users\%USERNAME%\AppData\Local\Temp\certmgr.exe" (Handle: 844)
"<Input Sample>" wrote 32 bytes to a remote process "C:\Users\%USERNAME%\AppData\Local\Temp\certmgr.exe" (Handle: 880)
"<Input Sample>" wrote 52 bytes to a remote process "C:\Users\%USERNAME%\AppData\Local\Temp\certmgr.exe" (Handle: 880)
"<Input Sample>" wrote 4 bytes to a remote process "C:\Users\%USERNAME%\AppData\Local\Temp\certmgr.exe" (Handle: 880)
"<Input Sample>" wrote 8 bytes to a remote process "C:\Users\%USERNAME%\AppData\Local\Temp\certmgr.exe" (Handle: 880)
"UPSecurityInput.exe" wrote 32 bytes to a remote process "C:\Windows\SysWOW64\schtasks.exe" (Handle: 244)
"UPSecurityInput.exe" wrote 52 bytes to a remote process "C:\Windows\SysWOW64\schtasks.exe" (Handle: 244)
"UPSecurityInput.exe" wrote 4 bytes to a remote process "C:\Windows\SysWOW64\schtasks.exe" (Handle: 244)
"UPSecurityInput.exe" wrote 8 bytes to a remote process "C:\Windows\SysWOW64\schtasks.exe" (Handle: 244)
"UPSecurityInput.exe" wrote 32 bytes to a remote process "C:\Windows\SysWOW64\schtasks.exe" (Handle: 256)
"UPSecurityInput.exe" wrote 52 bytes to a remote process "C:\Windows\SysWOW64\schtasks.exe" (Handle: 256)
"UPSecurityInput.exe" wrote 4 bytes to a remote process "C:\Windows\SysWOW64\schtasks.exe" (Handle: 256)
"UPSecurityInput.exe" wrote 8 bytes to a remote process "C:\Windows\SysWOW64\schtasks.exe" (Handle: 256)
"UPSecurityInput.exe" wrote 32 bytes to a remote process "C:\Windows\SysWOW64\UPEditNew\certutil.exe" (Handle: 312)
"UPSecurityInput.exe" wrote 52 bytes to a remote process "C:\Windows\SysWOW64\UPEditNew\certutil.exe" (Handle: 312)
"UPSecurityInput.exe" wrote 4 bytes to a remote process "C:\Windows\SysWOW64\UPEditNew\certutil.exe" (Handle: 312)
"UPSecurityInput.exe" wrote 8 bytes to a remote process "C:\Windows\SysWOW64\UPEditNew\certutil.exe" (Handle: 312)
- source
- API Call
- relevance
- 6/10
-
Network Related
-
Writes to the hosts file
- details
-
"UPService.exe" wrote to file "%WINDIR%\System32\drivers\etc\hosts"
- source
- API Call
- relevance
- 10/10
-
System Security
-
Modifies System Certificates Settings
- details
-
"certmgr.exe" (Access type: "DELETEVAL"; Path: "HKLM\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\ROOT\CERTIFICATES"; Key: "FF9CEB13C83F15B800E6EFF987B2C72E01B4B320")
"certmgr.exe" (Access type: "SETVAL"; Path: "HKLM\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\ROOT\CERTIFICATES\FF9CEB13C83F15B800E6EFF987B2C72E01B4B320"; Key: "BLOB")
"certmgr.exe" (Access type: "DELETEVAL"; Path: "HKLM\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\CA\CERTIFICATES"; Key: "07E032E020B72C3F192F0628A2593A19A70F069E")
"certmgr.exe" (Access type: "SETVAL"; Path: "HKLM\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\CA\CERTIFICATES\07E032E020B72C3F192F0628A2593A19A70F069E"; Key: "BLOB")
- source
- Registry Access
- relevance
- 8/10
-
Unusual Characteristics
-
Contains native function calls
-
Spawns a lot of processes
- details
-
Spawned process "<Input Sample>" (Show Process)
Spawned process "UPEditor.exe" with commandline ""-s"" (Show Process)
Spawned process "UPService.exe" with commandline ""-install"" (Show Process)
Spawned process "UPSecurityInput.exe" with commandline "%WINDIR%\system32\UPEditNew\UPSecurityInput.exe" (Show Process)
Spawned process "UPService.exe" with commandline ""-control" "UPSecurityInputService" "start"" (Show Process)
Spawned process "UPService.exe" (Show Process)
Spawned process "schtasks.exe" with commandline "%WINDIR%\system32\schtasks.exe /delete /tn "ÒøÁªÔÚÏß°²È«ÊäÈë³ÌÐò" /f" (Show Process)
Spawned process "schtasks.exe" with commandline "%WINDIR%\system32\schtasks.exe /create /tn "ÒøÁªÔÚÏß°²È«ÊäÈë³ÌÐò" /tr "%WINDIR%\SysWOW64\UPEditNew\UPSecurityInput.exe" /sc onlogon" (Show Process)
Spawned process "certutil.exe" with commandline "-A -d "%APPDATA%\Mozilla\Firefox\Profiles\fg6ygf16.default" -i .\root_bundle.crt -n "WoSign Class 1 DV Server CA G2" -t "C
"" (Show Process)
Spawned process "certmgr.exe" with commandline "-add "%TEMP%\wosign.cer" -c -s -r localMachine Root" (Show Process)
Spawned process "certmgr.exe" with commandline "-add "%TEMP%\mysign.cer" -c -s -r localMachine CA" (Show Process)
- source
- Monitored Target
- relevance
- 8/10
-
Hiding 5 Malicious Indicators
-
All indicators are available only in the private webservice or standalone version
-
Anti-Detection/Stealthyness
-
Queries kernel debugger information
- details
-
"UPSecurityInput.exe" at 00016014-00002328-00000033-63403239
"certmgr.exe" at 00018812-00003184-00000033-69113830
"certmgr.exe" at 00019421-00002444-00000033-71379807
- source
- API Call
- relevance
- 6/10
-
Queries process information
- details
-
"<Input Sample>" queried SystemProcessInformation at 00013355-00003372-00000033-53004572
"<Input Sample>" queried SystemProcessInformation at 00013355-00003372-00000033-53017098
"<Input Sample>" queried SystemProcessInformation at 00013355-00003372-00000033-53017296
"<Input Sample>" queried SystemProcessInformation at 00013355-00003372-00000033-53035039
"<Input Sample>" queried SystemProcessInformation at 00013355-00003372-00000033-53035180
"<Input Sample>" queried SystemProcessInformation at 00013355-00003372-00000033-55229271
"<Input Sample>" queried SystemProcessInformation at 00013355-00003372-00000033-55229456
"UPSecurityInput.exe" queried SystemProcessInformation at 00016014-00002328-00000033-63410956
"UPService.exe" queried SystemProcessInformation at 00017017-00001080-00000033-63086961
"UPService.exe" queried SystemProcessInformation at 00017017-00001080-00000033-63087196
"UPService.exe" queried SystemProcessInformation at 00017017-00001080-00000033-64718163
"UPService.exe" queried SystemProcessInformation at 00017017-00001080-00000033-64718376
"UPService.exe" queried SystemProcessInformation at 00017017-00001080-00000033-65604232
"UPService.exe" queried SystemProcessInformation at 00017017-00001080-00000033-65604463
"UPService.exe" queried SystemProcessInformation at 00017017-00001080-00000033-66579834
"UPService.exe" queried SystemProcessInformation at 00017017-00001080-00000033-66580053
"UPService.exe" queried SystemProcessInformation at 00017017-00001080-00000033-67532954
"UPService.exe" queried SystemProcessInformation at 00017017-00001080-00000033-67533168
"UPService.exe" queried SystemProcessInformation at 00017017-00001080-00000033-68445878
"UPService.exe" queried SystemProcessInformation at 00017017-00001080-00000033-68446034
- source
- API Call
- relevance
- 4/10
-
Anti-Reverse Engineering
-
Cryptographic Related
-
Found a cryptographic related string
- details
-
"DES" (Indicator: "des"; File: "00016014-00002328.00000001.18257.00160000.00000002.mdmp")
"des" (Indicator: "des"; File: "00016014-00002328.00000001.18257.00160000.00000002.mdmp")
"blowfish" (Indicator: "blowfish"; File: "00016014-00002328.00000001.18257.00160000.00000002.mdmp")
"AES128" (Indicator: "aes128"; File: "00016014-00002328.00000001.18257.00160000.00000002.mdmp")
"aes128" (Indicator: "aes128"; File: "00016014-00002328.00000001.18257.00160000.00000002.mdmp")
"AES192" (Indicator: "aes192"; File: "00016014-00002328.00000001.18257.00160000.00000002.mdmp")
"aes192" (Indicator: "aes192"; File: "00016014-00002328.00000001.18257.00160000.00000002.mdmp")
"AES256" (Indicator: "aes256"; File: "00016014-00002328.00000001.18257.00160000.00000002.mdmp")
"aes256" (Indicator: "aes256"; File: "00016014-00002328.00000001.18257.00160000.00000002.mdmp")
"RC4" (Indicator: "rc4"; File: "00016014-00002328.00000001.18257.00161000.00000020.mdmp")
"ecdsa" (Indicator: "ecdsa"; File: "00016014-00002328.00000001.18257.0025F000.00000002.mdmp")
"rc4" (Indicator: "rc4"; File: "00016014-00002328.00000001.18257.0025F000.00000002.mdmp")
"ECDSA" (Indicator: "ecdsa"; File: "00016014-00002328.00000001.18257.0025F000.00000002.mdmp")
- source
- File/Memory
- relevance
- 10/10
-
Environment Awareness
-
Contains ability to measure performance
-
Contains ability to query CPU information
-
Found a reference to a WMI query string known to be used for VM detection
- details
-
"Win32_BIOS" (Indicator: "win32_bios"; File: "00016014-00002328.00000001.18257.00160000.00000002.mdmp")
"Win32_Processor" (Indicator: "win32_process"; File: "00016014-00002328.00000001.18257.00160000.00000002.mdmp")
- source
- File/Memory
- relevance
- 10/10
-
Reads the active computer name
- details
-
"<Input Sample>" (Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\COMPUTERNAME\ACTIVECOMPUTERNAME"; Key: "COMPUTERNAME")
"UPEditor.exe" (Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\COMPUTERNAME\ACTIVECOMPUTERNAME"; Key: "COMPUTERNAME")
"UPService.exe" (Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\COMPUTERNAME\ACTIVECOMPUTERNAME"; Key: "COMPUTERNAME")
"UPSecurityInput.exe" (Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\COMPUTERNAME\ACTIVECOMPUTERNAME"; Key: "COMPUTERNAME")
"schtasks.exe" (Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\COMPUTERNAME\ACTIVECOMPUTERNAME"; Key: "COMPUTERNAME")
"certutil.exe" (Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\COMPUTERNAME\ACTIVECOMPUTERNAME"; Key: "COMPUTERNAME")
- source
- Registry Access
- relevance
- 5/10
-
Reads the cryptographic machine GUID
- details
-
"UPSecurityInput.exe" (Path: "HKLM\SOFTWARE\MICROSOFT\CRYPTOGRAPHY"; Key: "MACHINEGUID")
"certmgr.exe" (Path: "HKLM\SOFTWARE\MICROSOFT\CRYPTOGRAPHY"; Key: "MACHINEGUID")
- source
- Registry Access
- relevance
- 10/10
-
External Systems
-
General
-
Reads configuration files
- details
-
"<Input Sample>" read file "%USERPROFILE%\Desktop\desktop.ini"
"<Input Sample>" read file "%USERPROFILE%\Users\%OSUSER%\Searches\desktop.ini"
"<Input Sample>" read file "%USERPROFILE%\Videos\desktop.ini"
"<Input Sample>" read file "%USERPROFILE%\Pictures\desktop.ini"
"<Input Sample>" read file "%USERPROFILE%\Contacts\desktop.ini"
"<Input Sample>" read file "%USERPROFILE%\Favorites\desktop.ini"
"<Input Sample>" read file "%USERPROFILE%\Music\desktop.ini"
- source
- API Call
- relevance
- 4/10
-
Installation/Persistance
-
Drops executable files
- details
-
"certmgr.exe" has type "PE32 executable (console) Intel 80386 for MS Windows"
"msvcr120.dll" has type "PE32 executable (DLL) (GUI) Intel 80386 for MS Windows"
"nspr4.dll" has type "PE32 executable (DLL) (GUI) Intel 80386 for MS Windows"
"freebl3.dll" has type "PE32 executable (DLL) (GUI) Intel 80386 for MS Windows"
"smime3.dll" has type "PE32 executable (DLL) (GUI) Intel 80386 for MS Windows"
"KillProcDLL.dll" has type "PE32 executable (DLL) (GUI) Intel 80386 for MS Windows"
"sqlite3.dll" has type "PE32 executable (DLL) (GUI) Intel 80386 for MS Windows"
"plc4.dll" has type "PE32 executable (DLL) (GUI) Intel 80386 for MS Windows"
"System.dll" has type "PE32 executable (DLL) (GUI) Intel 80386 for MS Windows"
"nssutil3.dll" has type "PE32 executable (DLL) (GUI) Intel 80386 for MS Windows"
"nss3.dll" has type "PE32 executable (DLL) (GUI) Intel 80386 for MS Windows"
"UPService.exe" has type "PE32 executable (GUI) Intel 80386 for MS Windows"
"certutil.exe" has type "PE32 executable (console) Intel 80386 for MS Windows"
"uninst.exe" has type "PE32 executable (GUI) Intel 80386 for MS Windows Nullsoft Installer self-extracting archive"
"plds4.dll" has type "PE32 executable (DLL) (GUI) Intel 80386 for MS Windows"
"softokn3.dll" has type "PE32 executable (DLL) (GUI) Intel 80386 for MS Windows"
"killer.dll" has type "PE32 executable (DLL) (GUI) Intel 80386 for MS Windows"
"nsDialogs.dll" has type "PE32 executable (DLL) (GUI) Intel 80386 for MS Windows"
"FindProcDLL.dll" has type "PE32 executable (DLL) (GUI) Intel 80386 for MS Windows"
"UPSecurityInput.exe" has type "PE32 executable (GUI) Intel 80386 for MS Windows"
- source
- Binary File
- relevance
- 10/10
-
Network Related
-
Found potential IP address in binary/memory
- details
-
Heuristic match: "UnionPay Security Non plug 1.0.0.4 Setup"
Heuristic match: "%USERPROFILE%\Desktop\UnionPay Security Non plug 1.0.0.3.lnk"
Heuristic match: "all\UnionPay Security Non plug 1.0.0.3"
Heuristic match: "Please wait while UnionPay Security Non plug 1.0.0.4 installation process is running."
Heuristic match: "UnionPay Security Non plug 1.0.0.3.lnk"
Heuristic match: "g 1.0.0.3"
"1.0.1.1"
"1.0.1.8"
"1.0.0.4"
Heuristic match: "Origin: http://192.168.8.72:8080"
"1.0.1.3"
Heuristic match: "Host: 192.168.8.72:8080"
"127.0.0.1"
Heuristic match: "%-20s - OID (example): 1.2.3.4"
Heuristic match: "OID.2.5.29.32.0"
"2.5.29.1"
"2.5.29.35"
"2.5.29.31"
"2.5.29.14"
"2.5.29.2"
"2.5.29.7"
"2.5.29.8"
"2.5.29.17"
"2.5.29.18"
Heuristic match: "1.3.6.1.4.1.311.10.2"
"2.5.29.4"
"2.5.29.10"
"2.5.29.15"
"2.5.29.19"
"2.5.29.32"
Heuristic match: "1.3.6.1.4.1.311.2.1.10"
Heuristic match: "1.3.6.1.4.1.311.2.1.27"
Heuristic match: "1.3.6.1.4.1.311.2.1.26"
"2.5.4.3"
"2.5.29.37"
"2.5.29.21"
- source
- File/Memory
- relevance
- 3/10
-
Reads the hosts file
- details
-
"UPService.exe" read 824 bytes from file "%WINDIR%\System32\drivers\etc\hosts"
"UPService.exe" read 863 bytes from file "%WINDIR%\System32\drivers\etc\hosts"
- source
- API Call
- relevance
- 10/10
-
Remote Access Related
-
Spyware/Information Retrieval
-
System Destruction
-
Marks file for deletion
- details
-
"C:\UPEditorEdge_1.exe" marked "%TEMP%\nsf5351.tmp" for deletion
"C:\UPEditorEdge_1.exe" marked "%TEMP%\nsf543C.tmp" for deletion
"C:\UPEditorEdge_1.exe" marked "%TEMP%\certmgr.exe" for deletion
"C:\UPEditorEdge_1.exe" marked "%TEMP%\wosign.cer" for deletion
"C:\UPEditorEdge_1.exe" marked "%TEMP%\mysign.cer" for deletion
- source
- API Call
- relevance
- 10/10
-
Opens file with deletion access rights
- details
-
"<Input Sample>" opened "%TEMP%\nsf5351.tmp" with delete access
"<Input Sample>" opened "%TEMP%\nsf543C.tmp" with delete access
"<Input Sample>" opened "%TEMP%\certmgr.exe" with delete access
"<Input Sample>" opened "%TEMP%\wosign.cer" with delete access
"<Input Sample>" opened "%TEMP%\mysign.cer" with delete access
- source
- API Call
- relevance
- 7/10
-
System Security
-
Modifies proxy settings
- details
-
"<Input Sample>" (Access type: "DELETEVAL"; Path: "HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET SETTINGS\ZONEMAP"; Key: "PROXYBYPASS")
"<Input Sample>" (Access type: "DELETEVAL"; Path: "HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET SETTINGS\ZONEMAP"; Key: "PROXYBYPASS")
- source
- Registry Access
- relevance
- 10/10
-
Queries sensitive IE security settings
- details
-
"<Input Sample>" (Path: "HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SECURITY"; Key: "DISABLESECURITYSETTINGSCHECK")
- source
- Registry Access
- relevance
- 8/10
-
Unusual Characteristics
-
CRC value set in PE header does not match actual value
- details
-
"certmgr.exe" claimed CRC 125532 while the actual is CRC 6866587
"msvcr120.dll" claimed CRC 1028896 while the actual is CRC 125532
"UPService.exe" claimed CRC 411681 while the actual is CRC 831544
"certutil.exe" claimed CRC 170725 while the actual is CRC 411681
"uninst.exe" claimed CRC 6866587 while the actual is CRC 170725
"UPEditor.exe" claimed CRC 610677 while the actual is CRC 37199
- source
- Static Parser
- relevance
- 10/10
-
Entrypoint in PE header is within an uncommon section
- details
-
"UPService.exe" has an entrypoint in section ".upx1"
- source
- Static Parser
- relevance
- 10/10
-
Imports suspicious APIs
- details
-
RegDeleteKeyA
RegCloseKey
RegOpenKeyExA
RegDeleteValueA
RegCreateKeyExA
RegEnumKeyA
GetFileAttributesA
CopyFileA
GetModuleFileNameA
LoadLibraryA
LoadLibraryExA
GetFileSize
CreateDirectoryA
DeleteFileA
GetCommandLineA
GetProcAddress
GetTempPathA
CreateThread
GetModuleHandleA
FindFirstFileA
WriteFile
GetTempFileNameA
FindNextFileA
CreateProcessA
Sleep
CreateFileA
GetTickCount
ShellExecuteA
FindWindowExA
CertDeleteCertificateFromStore
UnhandledExceptionFilter
MapViewOfFile
CreateFileMappingA
TerminateProcess
CreateFileW
GetDriveTypeW
GetTempPathW
OutputDebugStringW
OutputDebugStringA
GetModuleFileNameW
LoadLibraryExW
ExitThread
GetModuleHandleExW
LoadLibraryW
GetVersionExW
VirtualProtect
GetStartupInfoW
CreateDirectoryW
DeleteFileW
FindFirstFileExA
FindNextFileW
FindFirstFileExW
IsDebuggerPresent
GetCommandLineW
GetModuleHandleW
GetFileAttributesExW
CreateProcessW
VirtualAlloc
SetSecurityDescriptorDacl
OpenProcessToken
GetVersionExA
OpenFileMappingA
GetThreadContext
GetFileAttributesExA
accept
WSAStartup
connect
recv
send
listen
closesocket
socket
bind
recvfrom
sendto
GetComputerNameA
OpenProcess
GetFileAttributesW
CreateFileMappingW
GetModuleFileNameExA
CreateToolhelp32Snapshot
Process32First
Process32Next
StartServiceW
CreateServiceW
DeviceIoControl
LockResource
FindResourceExW
FindResourceW
- source
- Static Parser
- relevance
- 1/10
-
Installs hooks/patches the running process
- details
-
"<Input Sample>" wrote bytes "d0556875647371750000000051c1627694986276ee9c627675dc6476273e64760fb368760000000085482976698729760f772b76d9172976ead72a76a9342976f8112976201429760c112976f516297654142976ff1029763214297600000000" to virtual address "0x74701000" (part of module "SHFOLDER.DLL")
"<Input Sample>" wrote bytes "54421d75de401d759a3f1d75000000003f732b76d38a2b76f81129762e3e2976e0132976ead72a762a882b76f2182a76d9172976f8542976561929762e582976d551297600000000d894487500000000" to virtual address "0x74672000" (part of module "KILLER.DLL")
"<Input Sample>" wrote bytes "711122027a3b2102ab8b02007f950200fc8c0200729602006cc805001ecd1e027d261e02" to virtual address "0x754707E4" (part of module "USER32.DLL")
"<Input Sample>" wrote bytes "c2000000" to virtual address "0x0055404C"
"<Input Sample>" wrote bytes "fe182976f854297657d12a76f2182a76852a2b76221229763e18297668342976eb59297677492976451229762e582976dd16297626182976ff422976c011297600000000d89448750000000008223e76d1e43b7600000000" to virtual address "0x00553000"
"<Input Sample>" wrote bytes "9c1800004a1800005e1800006c1800007c1800008a1800003c180000ac180000ba1800004019000000000000d4180000de180000f2180000fc180000121900001a1900002619000030190000e81800005c19000000000000" to virtual address "0x00851000"
"UPEditor.exe" wrote bytes "711122027a3b2102ab8b02007f950200fc8c0200729602006cc805001ecd1e027d261e02" to virtual address "0x754707E4" (part of module "USER32.DLL")
"UPService.exe" wrote bytes "c0df63771cf96277ccf862770d64647700000000c011297600000000fc3e297600000000e0132976000000009457517625e06377c6e0637700000000bc6a507600000000cf3129760000000093195176000000002c32297600000000" to virtual address "0x76EB1000" (part of module "NSI.DLL")
"UPService.exe" wrote bytes "711122027a3b2102ab8b02007f950200fc8c0200729602006cc805001ecd1e027d261e02" to virtual address "0x754707E4" (part of module "USER32.DLL")
"UPService.exe" wrote bytes "ead72a7600000000d4701e75000000001aad1577000000005f3c767600000000bc15137500000000f04829760000000045122976774929765c162976dc2c297681142976b079297600000000" to virtual address "0x00F0B000" (part of module "UPSERVICE.EXE")
"UPSecurityInput.exe" wrote bytes "c0df63771cf96277ccf862770d64647700000000c011297600000000fc3e297600000000e0132976000000009457517625e06377c6e0637700000000bc6a507600000000cf3129760000000093195176000000002c32297600000000" to virtual address "0x76EB1000" (part of module "NSI.DLL")
"UPSecurityInput.exe" wrote bytes "711122027a3b2102ab8b02007f950200fc8c0200729602006cc805001ecd1e027d261e02" to virtual address "0x754707E4" (part of module "USER32.DLL")
"UPSecurityInput.exe" wrote bytes "7d07677781ed6577ae866477c6e06377effd66772d16657760146777478d6477a8e263776089647700000000ad3776768b2d7676b641767600000000" to virtual address "0x74401000" (part of module "WSHTCPIP.DLL")
"schtasks.exe" wrote bytes "711122027a3b2102ab8b02007f950200fc8c0200729602006cc805001ecd1e027d261e02" to virtual address "0x754707E4" (part of module "USER32.DLL")
"certutil.exe" wrote bytes "c0df63771cf96277ccf862770d64647700000000c011297600000000fc3e297600000000e0132976000000009457517625e06377c6e0637700000000bc6a507600000000cf3129760000000093195176000000002c32297600000000" to virtual address "0x76EB1000" (part of module "NSI.DLL")
"certutil.exe" wrote bytes "711122027a3b2102ab8b02007f950200fc8c0200729602006cc805001ecd1e027d261e02" to virtual address "0x754707E4" (part of module "USER32.DLL")
- source
- Hook Detection
- relevance
- 10/10
-
Reads information about supported languages
- details
-
"<Input Sample>" (Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\NLS\LOCALE"; Key: "00000409")
- source
- Registry Access
- relevance
- 3/10
-
Hiding 11 Suspicious Indicators
-
All indicators are available only in the private webservice or standalone version
Screenshots
Loading content, please wait...
Hybrid Analysis
Tip: Click an analysed process below to view more details.
Analysed 11 processes in total (System Resource Monitor).
Logged Script Calls |
Logged Stdout |
Extracted Streams |
Memory Dumps |
Reduced Monitoring |
Network Activityy |
Network Error |
Multiscan Match |
Network Analysis
DNS Requests
No relevant DNS requests were made.
HTTP Traffic
No relevant HTTP requests were made.
Extracted Files
Displaying 31 extracted file(s). The remaining 3
file(s) are available in the full version and XML/JSON reports.
-
-
killer.dll
- Size
- 6KiB (6144 bytes)
- Type
- pedll executable
- Description
- PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
- AV Scan Result
- Labeled as "Unsafe" (1/66)
- Runtime Process
- UPEditorEdge_1.exe (PID: 3372)
- MD5
-
-
16205cd992d3b3827573f93ab8923e4e
- SHA1
-
-
4eece7a206ee619264d686ca1b3021b9f482866b
- SHA256
-
-
967d66f23cf3d9d3e5a4d6a9c6e366e792a98cc8a293196095b10cd82da9a695
Extended File Details
File Sections
Details |
Name |
Entropy |
Virtual Address |
Virtual Size |
Raw Size |
MD5 |
- Name
- .text
- Entropy
- 5.42243119028
- Virtual Address
- 0x1000
- Virtual Size
- 0x668
- Raw Size
- 0x800
- MD5
- 8be5979de67ab5473c49567cadc2bbf6
|
.text |
5.42243119028 |
0x1000 |
0x668 |
0x800 |
8be5979de67ab5473c49567cadc2bbf6 |
- Name
- .rdata
- Entropy
- 3.6572209023
- Virtual Address
- 0x2000
- Virtual Size
- 0x2d4
- Raw Size
- 0x400
- MD5
- 5c8f7a5028466f89476db787bc6c08bc
|
.rdata |
3.6572209023 |
0x2000 |
0x2d4 |
0x400 |
5c8f7a5028466f89476db787bc6c08bc |
- Name
- .data
- Entropy
- 0.0203931352361
- Virtual Address
- 0x3000
- Virtual Size
- 0x24
- Raw Size
- 0x200
- MD5
- 9475a59226943a3ad422e18169989f66
|
.data |
0.0203931352361 |
0x3000 |
0x24 |
0x200 |
9475a59226943a3ad422e18169989f66 |
- Name
- .CRT
- Entropy
- 0.0611628522412
- Virtual Address
- 0x4000
- Virtual Size
- 0x4
- Raw Size
- 0x200
- MD5
- eece4f79f14cca03875fba85f179a76d
|
.CRT |
0.0611628522412 |
0x4000 |
0x4 |
0x200 |
eece4f79f14cca03875fba85f179a76d |
- Name
- .rsrc
- Entropy
- 4.70317269765
- Virtual Address
- 0x5000
- Virtual Size
- 0x1e0
- Raw Size
- 0x200
- MD5
- 70c057a52361f99a1d3b0a95d69f9423
|
.rsrc |
4.70317269765 |
0x5000 |
0x1e0 |
0x200 |
70c057a52361f99a1d3b0a95d69f9423 |
- Name
- .reloc
- Entropy
- 2.21072199716
- Virtual Address
- 0x6000
- Virtual Size
- 0x98
- Raw Size
- 0x200
- MD5
- b2fbddd13a476116db76335851c8af23
|
.reloc |
2.21072199716 |
0x6000 |
0x98 |
0x200 |
b2fbddd13a476116db76335851c8af23 |
-
certutil.exe
- Size
- 121KiB (123880 bytes)
- Type
- peexe executable
- Description
- PE32 executable (console) Intel 80386, for MS Windows
- AV Scan Result
- Labeled as "Trojan.Heur" (1/76)
- Runtime Process
- UPEditorEdge_1.exe (PID: 3372)
- MD5
-
-
c4e4952d965e303b550a253eb96cf446
- SHA1
-
-
3518405aabe86881b9bfe8dd424f7ca26e07fa25
- SHA256
-
-
0b936c646770242c4aeca9db1f5cbeb2f90cfe3a32720e0da576680b161cf63e
Extended File Details
File Sections
Details |
Name |
Entropy |
Virtual Address |
Virtual Size |
Raw Size |
MD5 |
- Name
- .text
- Entropy
- 6.27785768985
- Virtual Address
- 0x1000
- Virtual Size
- 0xfd72
- Raw Size
- 0xfe00
- MD5
- a461e82bc2a489bdb0cc1d602fa016a0
|
.text |
6.27785768985 |
0x1000 |
0xfd72 |
0xfe00 |
a461e82bc2a489bdb0cc1d602fa016a0 |
- Name
- .rdata
- Entropy
- 5.4666531456
- Virtual Address
- 0x11000
- Virtual Size
- 0xa3f8
- Raw Size
- 0xa400
- MD5
- 835d8a490f1e6f8d2106883093f3cb8c
|
.rdata |
5.4666531456 |
0x11000 |
0xa3f8 |
0xa400 |
835d8a490f1e6f8d2106883093f3cb8c |
- Name
- .data
- Entropy
- 3.51088799958
- Virtual Address
- 0x1c000
- Virtual Size
- 0x1aa0
- Raw Size
- 0x400
- MD5
- 54ddca3505ba0bf26535b87d539d6574
|
.data |
3.51088799958 |
0x1c000 |
0x1aa0 |
0x400 |
54ddca3505ba0bf26535b87d539d6574 |
- Name
- .reloc
- Entropy
- 6.77587967312
- Virtual Address
- 0x1e000
- Virtual Size
- 0x17dc
- Raw Size
- 0x1800
- MD5
- e1219e756b9d757835f8baffbe23ba8c
|
.reloc |
6.77587967312 |
0x1e000 |
0x17dc |
0x1800 |
e1219e756b9d757835f8baffbe23ba8c |
File Imports
__PK11_SetCertificateNickname
CERT_AddExtension
CERT_AddExtensionByOID
CERT_AsciiToName
CERT_CertChainFromCert
CERT_ChangeCertTrust
CERT_CopyName
CERT_CopyRDN
CERT_CreateCertificate
CERT_CreateCertificateRequest
CERT_CreateSubjectCertList
CERT_CreateValidity
CERT_DecodeAltNameExtension
CERT_DecodeAuthInfoAccessExtension
CERT_DecodeAuthKeyID
CERT_DecodeBasicConstraintValue
CERT_DecodeCRLDistributionPoints
CERT_DecodeNameConstraintsExtension
CERT_DecodeOidSequence
CERT_DecodePrivKeyUsagePeriodExtension
CERT_DecodeTrustString
CERT_DecodeUserNotice
CERT_DestroyCertificate
CERT_DestroyCertificateList
CERT_DestroyCertificatePoliciesExtension
CERT_DestroyCertificateRequest
CERT_DestroyCertList
CERT_DestroyName
CERT_DestroyOidSequence
CERT_DestroyUserNotice
CERT_DestroyValidity
CERT_EncodeAltNameExtension
CERT_EncodeAndAddBitStrExtension
CERT_EncodeAuthKeyID
CERT_EncodeBasicConstraintValue
CERT_EncodeCertPoliciesExtension
CERT_EncodeCRLDistributionPoints
CERT_EncodeInfoAccessExtension
CERT_EncodeInhibitAnyExtension
CERT_EncodeNameConstraintsExtension
CERT_EncodeNoticeReference
CERT_EncodePolicyConstraintsExtension
CERT_EncodePolicyMappingExtension
CERT_EncodeSubjectKeyID
CERT_EncodeUserNotice
CERT_ExtractPublicKey
CERT_FindCertByDERCert
CERT_FindCertByNicknameOrEmailAddr
CERT_FinishCertificateRequestAttributes
CERT_FinishExtensions
CERT_GetCertEmailAddress
CERT_GetCertificateRequestExtensions
CERT_GetCertTrust
CERT_GetCommonName
CERT_GetCountryName
CERT_GetDefaultCertDB
CERT_GetGeneralNameTypeFromString
CERT_GetNextGeneralName
CERT_GetNextNameConstraint
CERT_GetOidString
CERT_GetOrgName
CERT_GetStateName
CERT_Hexify
CERT_MergeExtensions
CERT_NameToAscii
CERT_NewTempCertificate
CERT_SaveSMimeProfile
CERT_StartCertExtensions
CERT_StartCertificateRequestAttributes
CERT_VerifyCertificate
CERT_VerifySignedDataWithPublicKeyInfo
NSS_Get_CERT_CertificateRequestTemplate
NSS_Get_CERT_CertificateTemplate
NSS_Get_CERT_SignedDataTemplate
NSS_Get_SECKEY_RSAPSSParamsTemplate
NSS_Initialize
NSS_InitWithMerge
NSS_Shutdown
PK11_Authenticate
PK11_ChangePW
PK11_CheckUserPassword
PK11_CreateMergeLog
PK11_DeleteTokenCertAndKey
PK11_DestroyMergeLog
PK11_FindCertFromNickname
PK11_FindCertsFromEmailAddress
PK11_FindKeyByAnyCert
PK11_FindKeyByDERCert
PK11_FindSlotByName
PK11_FreeSlot
PK11_FreeSlotList
PK11_GenerateKeyPairWithOpFlags
PK11_GetAllTokens
PK11_GetCertFromPrivateKey
PK11_GetInternalKeySlot
PK11_GetLowLevelKeyIDForPrivateKey
PK11_GetPrivateKeyNickname
PK11_GetSlotName
PK11_GetTokenName
PK11_HashBuf
PK11_ImportCert
PK11_InitPin
PK11_IsFriendly
PK11_IsInternal
PK11_IsLoggedIn
PK11_IsPresent
PK11_IsRemovable
PK11_ListCerts
PK11_ListCertsInSlot
PK11_ListPrivateKeysInSlot
PK11_ListPrivKeysInSlot
PK11_MergeTokens
PK11_NeedLogin
PK11_NeedUserInit
PK11_ProtectedAuthenticationPath
PK11_RandomUpdate
PK11_ReadRawAttribute
PK11_ResetToken
PK11_SetPasswordFunc
SEC_DeletePermCertificate
SEC_DerSignData
SEC_GetSignatureAlgorithmOidTag
SEC_PKCS5IsAlgorithmPBEAlgTag
SECKEY_CreateSubjectPublicKeyInfo
SECKEY_DestroyPrivateKey
SECKEY_DestroyPrivateKeyList
SECKEY_DestroyPublicKey
SECKEY_DestroySubjectPublicKeyInfo
SECKEY_ExtractPublicKey
SECMOD_CloseUserDB
SECMOD_OpenUserDB
-
-
certmgr.exe
- Size
- 78KiB (79816 bytes)
- Type
- peexe executable
- Description
- PE32 executable (console) Intel 80386, for MS Windows
- AV Scan Result
- 0/77
- Runtime Process
- UPEditorEdge_1.exe (PID: 3372)
- MD5
-
-
ec58a1586ad70953d48e3c393163348f
- SHA1
-
-
f18eebaea4460b057f5b49e8239779f1c0c05bb9
- SHA256
-
-
a097cc322fa68e1ff500d79598f657d9c211e86e632c3c3b896e566852cea991
Extended File Details
File Sections
Details |
Name |
Entropy |
Virtual Address |
Virtual Size |
Raw Size |
MD5 |
- Name
- .text
- Entropy
- 6.26175404873
- Virtual Address
- 0x1000
- Virtual Size
- 0x7fdc
- Raw Size
- 0x8000
- MD5
- 2de079f9b5b185ff69f140aeff6d2719
|
.text |
6.26175404873 |
0x1000 |
0x7fdc |
0x8000 |
2de079f9b5b185ff69f140aeff6d2719 |
- Name
- .data
- Entropy
- 1.29061218351
- Virtual Address
- 0x9000
- Virtual Size
- 0x25e4
- Raw Size
- 0x200
- MD5
- 5d3598e837ab21a814efb704b2caa7f3
|
.data |
1.29061218351 |
0x9000 |
0x25e4 |
0x200 |
5d3598e837ab21a814efb704b2caa7f3 |
- Name
- .idata
- Entropy
- 5.13902636812
- Virtual Address
- 0xc000
- Virtual Size
- 0xdaa
- Raw Size
- 0xe00
- MD5
- bc5b2eb036f21228eaacee67618e4dab
|
.idata |
5.13902636812 |
0xc000 |
0xdaa |
0xe00 |
bc5b2eb036f21228eaacee67618e4dab |
- Name
- .rsrc
- Entropy
- 3.78993755687
- Virtual Address
- 0xd000
- Virtual Size
- 0x59e8
- Raw Size
- 0x5a00
- MD5
- 3eae03282c6c521e99debcad69f850cd
|
.rsrc |
3.78993755687 |
0xd000 |
0x59e8 |
0x5a00 |
3eae03282c6c521e99debcad69f850cd |
- Name
- .reloc
- Entropy
- 5.97031968641
- Virtual Address
- 0x13000
- Virtual Size
- 0xd48
- Raw Size
- 0xe00
- MD5
- 7f592cdb0b785bf4710bf11b1231fd51
|
.reloc |
5.97031968641 |
0x13000 |
0xd48 |
0xe00 |
7f592cdb0b785bf4710bf11b1231fd51 |
-
FindProcDLL.dll
- Size
- 3.5KiB (3584 bytes)
- Type
- pedll executable
- Description
- PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
- AV Scan Result
- 0/67
- Runtime Process
- UPEditorEdge_1.exe (PID: 3372)
- MD5
-
-
8614c450637267afacad1645e23ba24a
- SHA1
-
-
e7b7b09b5bbc13e910aa36316d9cc5fc5d4dcdc2
- SHA256
-
-
0fa04f06a6de18d316832086891e9c23ae606d7784d5d5676385839b21ca2758
Extended File Details
File Sections
Details |
Name |
Entropy |
Virtual Address |
Virtual Size |
Raw Size |
MD5 |
- Name
- .text
- Entropy
- 5.25377405619
- Virtual Address
- 0x1000
- Virtual Size
- 0x6eb
- Raw Size
- 0x800
- MD5
- 837b5769e7402e4623f3905c931dc740
|
.text |
5.25377405619 |
0x1000 |
0x6eb |
0x800 |
837b5769e7402e4623f3905c931dc740 |
- Name
- .reloc
- Entropy
- 1.27762509398
- Virtual Address
- 0x2000
- Virtual Size
- 0x68
- Raw Size
- 0x200
- MD5
- 56905e239cc8bac85ba99d3b3dd77cae
|
.reloc |
1.27762509398 |
0x2000 |
0x68 |
0x200 |
56905e239cc8bac85ba99d3b3dd77cae |
-
KillProcDLL.dll
- Size
- 4KiB (4096 bytes)
- Type
- pedll executable
- Description
- PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
- AV Scan Result
- 0/77
- Runtime Process
- UPEditorEdge_1.exe (PID: 3372)
- MD5
-
-
99f345cf51b6c3c317d20a81acb11012
- SHA1
-
-
b3d0355f527c536ea14a8ff51741c8739d66f727
- SHA256
-
-
c2689ba1f66066afce85ca6457ecd36370be0fe351c58422e45efd0948655c93
Extended File Details
File Sections
Details |
Name |
Entropy |
Virtual Address |
Virtual Size |
Raw Size |
MD5 |
- Name
- .text
- Entropy
- 5.8194206756
- Virtual Address
- 0x1000
- Virtual Size
- 0x9bb
- Raw Size
- 0xa00
- MD5
- b89775642b12378faae778f03e8e7562
|
.text |
5.8194206756 |
0x1000 |
0x9bb |
0xa00 |
b89775642b12378faae778f03e8e7562 |
- Name
- .reloc
- Entropy
- 2.01329713714
- Virtual Address
- 0x2000
- Virtual Size
- 0xac
- Raw Size
- 0x200
- MD5
- 219f2da6309bbfe6e8892e3481009eb5
|
.reloc |
2.01329713714 |
0x2000 |
0xac |
0x200 |
219f2da6309bbfe6e8892e3481009eb5 |
-
System.dll
- Size
- 11KiB (11264 bytes)
- Type
- pedll executable
- Description
- PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
- AV Scan Result
- 0/77
- Runtime Process
- UPEditorEdge_1.exe (PID: 3372)
- MD5
-
-
a436db0c473a087eb61ff5c53c34ba27
- SHA1
-
-
65ea67e424e75f5065132b539c8b2eda88aa0506
- SHA256
-
-
75ed40311875312617d6711baed0be29fcaee71031ca27a8d308a72b15a51e49
Extended File Details
File Sections
Details |
Name |
Entropy |
Virtual Address |
Virtual Size |
Raw Size |
MD5 |
- Name
- .text
- Entropy
- 6.40882916212
- Virtual Address
- 0x1000
- Virtual Size
- 0x1d6f
- Raw Size
- 0x1e00
- MD5
- 070f959a17866f5d86cbf6677784065e
|
.text |
6.40882916212 |
0x1000 |
0x1d6f |
0x1e00 |
070f959a17866f5d86cbf6677784065e |
- Name
- .rdata
- Entropy
- 3.88796673587
- Virtual Address
- 0x3000
- Virtual Size
- 0x343
- Raw Size
- 0x400
- MD5
- 03259eec9c90a0a12b929194c4bc2def
|
.rdata |
3.88796673587 |
0x3000 |
0x343 |
0x400 |
03259eec9c90a0a12b929194c4bc2def |
- Name
- .data
- Entropy
- 0.349885353835
- Virtual Address
- 0x4000
- Virtual Size
- 0x68
- Raw Size
- 0x200
- MD5
- 8cec75e61624383326fcbccb6ac5c1ee
|
.data |
0.349885353835 |
0x4000 |
0x68 |
0x200 |
8cec75e61624383326fcbccb6ac5c1ee |
- Name
- .reloc
- Entropy
- 3.48777309958
- Virtual Address
- 0x5000
- Virtual Size
- 0x246
- Raw Size
- 0x400
- MD5
- 252b28c60097d4bb1d036c8e741d3cb3
|
.reloc |
3.48777309958 |
0x5000 |
0x246 |
0x400 |
252b28c60097d4bb1d036c8e741d3cb3 |
-
nsDialogs.dll
- Size
- 9.5KiB (9728 bytes)
- Type
- pedll executable
- Description
- PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
- AV Scan Result
- 0/67
- Runtime Process
- UPEditorEdge_1.exe (PID: 3372)
- MD5
-
-
e75ae7cfe06ff9692d98a934f6aa2d3c
- SHA1
-
-
d5fd4a59a39630c4693ce656bbbc0a55ede0a500
- SHA256
-
-
1f861aeb145ebbb9a2628414e6dca6b06d0bfb252f2de624b86814cfec8097d0
Extended File Details
File Sections
Details |
Name |
Entropy |
Virtual Address |
Virtual Size |
Raw Size |
MD5 |
- Name
- .text
- Entropy
- 5.80427445606
- Virtual Address
- 0x1000
- Virtual Size
- 0x103e
- Raw Size
- 0x1200
- MD5
- 2bbc6381b85b791e9c0ad27baff9e184
|
.text |
5.80427445606 |
0x1000 |
0x103e |
0x1200 |
2bbc6381b85b791e9c0ad27baff9e184 |
- Name
- .rdata
- Entropy
- 4.77705876852
- Virtual Address
- 0x3000
- Virtual Size
- 0x76b
- Raw Size
- 0x800
- MD5
- 3c7dc9b6ef0c288ebc23d6a040c20028
|
.rdata |
4.77705876852 |
0x3000 |
0x76b |
0x800 |
3c7dc9b6ef0c288ebc23d6a040c20028 |
- Name
- .data
- Entropy
- 1.86788138216
- Virtual Address
- 0x4000
- Virtual Size
- 0x10e8
- Raw Size
- 0x200
- MD5
- a96370db641f6deefdac735e4850aac8
|
.data |
1.86788138216 |
0x4000 |
0x10e8 |
0x200 |
a96370db641f6deefdac735e4850aac8 |
- Name
- .rsrc
- Entropy
- 0.6216517742
- Virtual Address
- 0x6000
- Virtual Size
- 0x98
- Raw Size
- 0x200
- MD5
- a6688c41614140dc3584b09a485bfbc7
|
.rsrc |
0.6216517742 |
0x6000 |
0x98 |
0x200 |
a6688c41614140dc3584b09a485bfbc7 |
- Name
- .reloc
- Entropy
- 3.34197267153
- Virtual Address
- 0x7000
- Virtual Size
- 0x268
- Raw Size
- 0x400
- MD5
- f07d72136e04ea1a88794be7acfe5b08
|
.reloc |
3.34197267153 |
0x7000 |
0x268 |
0x400 |
f07d72136e04ea1a88794be7acfe5b08 |
-
UPEditor.exe
- Size
- 559KiB (572176 bytes)
- Type
- peexe executable
- Description
- PE32 executable (GUI) Intel 80386, for MS Windows
- AV Scan Result
- 0/67
- Runtime Process
- UPEditorEdge_1.exe (PID: 3372)
- MD5
-
-
010e990848a4b5ba2d9ebbd6d7f9ba08
- SHA1
-
-
36fc7b9ffed8458f77e733b70a6eebb5a80dc1f5
- SHA256
-
-
bab84856b24fcc39587cf3a4aa497550e4cefbcdc970ce211d50a1abd44e9cb1
Extended File Details
File Sections
Details |
Name |
Entropy |
Virtual Address |
Virtual Size |
Raw Size |
MD5 |
- Name
- .text
- Entropy
- 6.47877767322
- Virtual Address
- 0x1000
- Virtual Size
- 0xe8df
- Raw Size
- 0xea00
- MD5
- 9e84da94658d67df9a4281de273cf789
|
.text |
6.47877767322 |
0x1000 |
0xe8df |
0xea00 |
9e84da94658d67df9a4281de273cf789 |
- Name
- .rdata
- Entropy
- 4.9452838896
- Virtual Address
- 0x10000
- Virtual Size
- 0x386c
- Raw Size
- 0x3a00
- MD5
- 88fc63154d235c8240053f34e3857cc5
|
.rdata |
4.9452838896 |
0x10000 |
0x386c |
0x3a00 |
88fc63154d235c8240053f34e3857cc5 |
- Name
- .data
- Entropy
- 1.86672216972
- Virtual Address
- 0x14000
- Virtual Size
- 0x3608
- Raw Size
- 0x1800
- MD5
- cf6af5fa7b522669091f609c1647b006
|
.data |
1.86672216972 |
0x14000 |
0x3608 |
0x1800 |
cf6af5fa7b522669091f609c1647b006 |
- Name
- .rsrc
- Entropy
- 7.86697120686
- Virtual Address
- 0x18000
- Virtual Size
- 0x74249
- Raw Size
- 0x74400
- MD5
- b0474b29ded82823c303d880a9da8fd2
|
.rsrc |
7.86697120686 |
0x18000 |
0x74249 |
0x74400 |
b0474b29ded82823c303d880a9da8fd2 |
- Name
- .reloc
- Entropy
- 3.72432913051
- Virtual Address
- 0x8d000
- Virtual Size
- 0x1d66
- Raw Size
- 0x1e00
- MD5
- 03c0ccea8e6b0d437da162af60f4fce1
|
.reloc |
3.72432913051 |
0x8d000 |
0x1d66 |
0x1e00 |
03c0ccea8e6b0d437da162af60f4fce1 |
-
UPSecurityInput.exe
- Size
- 4MiB (4238096 bytes)
- Type
- peexe executable
- Description
- PE32 executable (GUI) Intel 80386, for MS Windows
- AV Scan Result
- 0/66
- Runtime Process
- UPEditorEdge_1.exe (PID: 3372)
- MD5
-
-
7423eba53d44257a6efb34a0637a36fa
- SHA1
-
-
d76926e6c87f401c71c5f9a1194196d681a8a77d
- SHA256
-
-
c6855198d0b07233f0e6bab819318320f77342a3560687330fe1fc8790ea48c7
-
UPService.exe
- Size
- 350KiB (358160 bytes)
- Type
- peexe executable
- Description
- PE32 executable (GUI) Intel 80386, for MS Windows
- AV Scan Result
- 0/67
- Runtime Process
- UPService.exe (PID: 2340)
- MD5
-
-
3159ea5bb2b8a9ac2955959cda6e25de
- SHA1
-
-
b72e2858c524a19047d34da19db7fe1e2db4a9b6
- SHA256
-
-
1ed617272137d545f0ed49e6e7de5c9670fe155969ff6eeefd9357e476149bdd
Extended File Details
File Sections
Details |
Name |
Entropy |
Virtual Address |
Virtual Size |
Raw Size |
MD5 |
- Name
- .text
- Entropy
- 0
- Virtual Address
- 0x1000
- Virtual Size
- 0x1c5f0
- Raw Size
- 0x0
- MD5
- d41d8cd98f00b204e9800998ecf8427e
|
.text |
0 |
0x1000 |
0x1c5f0 |
0x0 |
d41d8cd98f00b204e9800998ecf8427e |
- Name
- .rdata
- Entropy
- 0
- Virtual Address
- 0x1e000
- Virtual Size
- 0x5a1c
- Raw Size
- 0x0
- MD5
- d41d8cd98f00b204e9800998ecf8427e
|
.rdata |
0 |
0x1e000 |
0x5a1c |
0x0 |
d41d8cd98f00b204e9800998ecf8427e |
- Name
- .data
- Entropy
- 0
- Virtual Address
- 0x24000
- Virtual Size
- 0x31b0
- Raw Size
- 0x0
- MD5
- d41d8cd98f00b204e9800998ecf8427e
|
.data |
0 |
0x24000 |
0x31b0 |
0x0 |
d41d8cd98f00b204e9800998ecf8427e |
- Name
- .upx0
- Entropy
- 0
- Virtual Address
- 0x28000
- Virtual Size
- 0x2e1e1
- Raw Size
- 0x0
- MD5
- d41d8cd98f00b204e9800998ecf8427e
|
.upx0 |
0 |
0x28000 |
0x2e1e1 |
0x0 |
d41d8cd98f00b204e9800998ecf8427e |
- Name
- .tls
- Entropy
- 0
- Virtual Address
- 0x57000
- Virtual Size
- 0x18
- Raw Size
- 0x200
- MD5
- bf619eac0cdf3f68d496ea9344137e8b
|
.tls |
0 |
0x57000 |
0x18 |
0x200 |
bf619eac0cdf3f68d496ea9344137e8b |
- Name
- .upx1
- Entropy
- 7.91133806504
- Virtual Address
- 0x58000
- Virtual Size
- 0x54e94
- Raw Size
- 0x55000
- MD5
- 3890e0337049cbc8e9b74f9c1fc8a761
|
.upx1 |
7.91133806504 |
0x58000 |
0x54e94 |
0x55000 |
3890e0337049cbc8e9b74f9c1fc8a761 |
- Name
- .reloc
- Entropy
- 1.89016966991
- Virtual Address
- 0xad000
- Virtual Size
- 0xb4
- Raw Size
- 0x200
- MD5
- 68c43d758f515f579d2a305fc9a542e6
|
.reloc |
1.89016966991 |
0xad000 |
0xb4 |
0x200 |
68c43d758f515f579d2a305fc9a542e6 |
- Name
- .rsrc
- Entropy
- 3.71870579444
- Virtual Address
- 0xae000
- Virtual Size
- 0x50e
- Raw Size
- 0x600
- MD5
- e720248216d4163c99ee401067b46d15
|
.rsrc |
3.71870579444 |
0xae000 |
0x50e |
0x600 |
e720248216d4163c99ee401067b46d15 |
-
freebl3.dll
- Size
- 315KiB (322560 bytes)
- Type
- pedll executable
- Description
- PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
- AV Scan Result
- 0/71
- Runtime Process
- certutil.exe (PID: 2956)
- MD5
-
-
f36ce41b064dfe375998bc3ecd067141
- SHA1
-
-
af980af75da5920d27d624b8a826b3ac4bf2771e
- SHA256
-
-
49a7859570c91396645a64ee16104d04ea014f135d9b0cfb078861fad9ec5da7
Extended File Details
File Sections
Details |
Name |
Entropy |
Virtual Address |
Virtual Size |
Raw Size |
MD5 |
- Name
- .text
- Entropy
- 6.5311614206
- Virtual Address
- 0x1000
- Virtual Size
- 0x3cad2
- Raw Size
- 0x3cc00
- MD5
- 5174108be238c9d292635d159e4bf4ee
|
.text |
6.5311614206 |
0x1000 |
0x3cad2 |
0x3cc00 |
5174108be238c9d292635d159e4bf4ee |
- Name
- .rdata
- Entropy
- 6.43735037309
- Virtual Address
- 0x3e000
- Virtual Size
- 0xf8e6
- Raw Size
- 0xfa00
- MD5
- 31c6b310803e723a631a62113c934fc6
|
.rdata |
6.43735037309 |
0x3e000 |
0xf8e6 |
0xfa00 |
31c6b310803e723a631a62113c934fc6 |
- Name
- .data
- Entropy
- 2.57249113247
- Virtual Address
- 0x4e000
- Virtual Size
- 0x4930
- Raw Size
- 0x400
- MD5
- 69a2898745db43f5672683899e3b0a1e
|
.data |
2.57249113247 |
0x4e000 |
0x4930 |
0x400 |
69a2898745db43f5672683899e3b0a1e |
- Name
- .rsrc
- Entropy
- 2.69516810494
- Virtual Address
- 0x53000
- Virtual Size
- 0x330
- Raw Size
- 0x400
- MD5
- 7e0cd52400ad13fef7a675bdaa864f1b
|
.rsrc |
2.69516810494 |
0x53000 |
0x330 |
0x400 |
7e0cd52400ad13fef7a675bdaa864f1b |
- Name
- .reloc
- Entropy
- 6.54075545726
- Virtual Address
- 0x54000
- Virtual Size
- 0x18ac
- Raw Size
- 0x1a00
- MD5
- 75944febd4c0e71fb59c12f374975f26
|
.reloc |
6.54075545726 |
0x54000 |
0x18ac |
0x1a00 |
75944febd4c0e71fb59c12f374975f26 |
-
msvcr120.dll
- Size
- 948KiB (970912 bytes)
- Type
- pedll executable
- Description
- PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
- AV Scan Result
- 0/78
- Runtime Process
- UPEditorEdge_1.exe (PID: 3372)
- MD5
-
-
034ccadc1c073e4216e9466b720f9849
- SHA1
-
-
f19e9d8317161edc7d3e963cc0fc46bd5e4a55a1
- SHA256
-
-
86e39b5995af0e042fcdaa85fe2aefd7c9ddc7ad65e6327bd5e7058bc3ab615f
Extended File Details
File Sections
Details |
Name |
Entropy |
Virtual Address |
Virtual Size |
Raw Size |
MD5 |
- Name
- .text
- Entropy
- 6.95576372951
- Virtual Address
- 0x1000
- Virtual Size
- 0xdc1f1
- Raw Size
- 0xdc200
- MD5
- 719b010b2f84a7045da3117299b3e5b3
|
.text |
6.95576372951 |
0x1000 |
0xdc1f1 |
0xdc200 |
719b010b2f84a7045da3117299b3e5b3 |
- Name
- .data
- Entropy
- 3.82128783559
- Virtual Address
- 0xde000
- Virtual Size
- 0x6534
- Raw Size
- 0x5600
- MD5
- 71756912a7abb5f9f91dab2fb725de0f
|
.data |
3.82128783559 |
0xde000 |
0x6534 |
0x5600 |
71756912a7abb5f9f91dab2fb725de0f |
- Name
- .idata
- Entropy
- 5.39767432875
- Virtual Address
- 0xe5000
- Virtual Size
- 0x12ec
- Raw Size
- 0x1400
- MD5
- 7f27e799c9e42325fce4b69861f0e28c
|
.idata |
5.39767432875 |
0xe5000 |
0x12ec |
0x1400 |
7f27e799c9e42325fce4b69861f0e28c |
- Name
- .rsrc
- Entropy
- 3.28373683679
- Virtual Address
- 0xe7000
- Virtual Size
- 0x3e8
- Raw Size
- 0x400
- MD5
- e0edefd2e2eb4987efc6daa2ba7603f3
|
.rsrc |
3.28373683679 |
0xe7000 |
0x3e8 |
0x400 |
e0edefd2e2eb4987efc6daa2ba7603f3 |
- Name
- .reloc
- Entropy
- 6.68394723061
- Virtual Address
- 0xe8000
- Virtual Size
- 0x5d64
- Raw Size
- 0x5e00
- MD5
- af05197e7e0189f71f009fa8645e69bc
|
.reloc |
6.68394723061 |
0xe8000 |
0x5d64 |
0x5e00 |
af05197e7e0189f71f009fa8645e69bc |
-
nspr4.dll
- Size
- 156KiB (159232 bytes)
- Type
- pedll executable
- Description
- PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
- AV Scan Result
- 0/71
- Runtime Process
- certutil.exe (PID: 2956)
- MD5
-
-
75243ea9ba0a6172e2ed92ec58191d2d
- SHA1
-
-
7f0075e990439a6ecdabe026c06d87fab846d0ca
- SHA256
-
-
45c3fad5522462f076444b60d33da177332e0607141df0230af7fddfc3230bd6
Extended File Details
File Sections
Details |
Name |
Entropy |
Virtual Address |
Virtual Size |
Raw Size |
MD5 |
- Name
- .text
- Entropy
- 6.44630386374
- Virtual Address
- 0x1000
- Virtual Size
- 0x1d0b8
- Raw Size
- 0x1d200
- MD5
- a94d38f5bf1c290bbab14aa919fac803
|
.text |
6.44630386374 |
0x1000 |
0x1d0b8 |
0x1d200 |
a94d38f5bf1c290bbab14aa919fac803 |
- Name
- .rdata
- Entropy
- 5.74764262695
- Virtual Address
- 0x1f000
- Virtual Size
- 0x7050
- Raw Size
- 0x7200
- MD5
- 87570c562741537931eaa13d4103b04a
|
.rdata |
5.74764262695 |
0x1f000 |
0x7050 |
0x7200 |
87570c562741537931eaa13d4103b04a |
- Name
- .data
- Entropy
- 3.49381054921
- Virtual Address
- 0x27000
- Virtual Size
- 0x16bc
- Raw Size
- 0x800
- MD5
- 756ae26e4b4c1badae8fe3ce0bc32f70
|
.data |
3.49381054921 |
0x27000 |
0x16bc |
0x800 |
756ae26e4b4c1badae8fe3ce0bc32f70 |
- Name
- .rsrc
- Entropy
- 2.53386663279
- Virtual Address
- 0x29000
- Virtual Size
- 0x2f8
- Raw Size
- 0x400
- MD5
- 850b07a8a2698d7e8103d419480cb98e
|
.rsrc |
2.53386663279 |
0x29000 |
0x2f8 |
0x400 |
850b07a8a2698d7e8103d419480cb98e |
- Name
- .reloc
- Entropy
- 6.48669196904
- Virtual Address
- 0x2a000
- Virtual Size
- 0x183c
- Raw Size
- 0x1a00
- MD5
- 1052a060b8708c8cccdcf46fd1453dcb
|
.reloc |
6.48669196904 |
0x2a000 |
0x183c |
0x1a00 |
1052a060b8708c8cccdcf46fd1453dcb |
-
nss3.dll
- Size
- 789KiB (807424 bytes)
- Type
- pedll executable
- Description
- PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
- AV Scan Result
- 0/71
- Runtime Process
- certutil.exe (PID: 2956)
- MD5
-
-
6bdcf9fdd0dea6f76a671c7f4c85e8ce
- SHA1
-
-
89f821c911b0bb1e626b3a88064d457e13c4a6c2
- SHA256
-
-
b4c0d5ff09a865211e7394ebb797880459d076562e77407425e4d5ac2e87961b
Extended File Details
File Sections
Details |
Name |
Entropy |
Virtual Address |
Virtual Size |
Raw Size |
MD5 |
- Name
- .text
- Entropy
- 6.18502384449
- Virtual Address
- 0x1000
- Virtual Size
- 0xa53a0
- Raw Size
- 0xa5400
- MD5
- bea11639e2c3f123bdc3f566df0c120d
|
.text |
6.18502384449 |
0x1000 |
0xa53a0 |
0xa5400 |
bea11639e2c3f123bdc3f566df0c120d |
- Name
- .rdata
- Entropy
- 5.46475855498
- Virtual Address
- 0xa7000
- Virtual Size
- 0x19844
- Raw Size
- 0x19a00
- MD5
- 39ed4889a96ecd6cc950c035b61c4f82
|
.rdata |
5.46475855498 |
0xa7000 |
0x19844 |
0x19a00 |
39ed4889a96ecd6cc950c035b61c4f82 |
- Name
- .data
- Entropy
- 2.7852227576
- Virtual Address
- 0xc1000
- Virtual Size
- 0x1820
- Raw Size
- 0xa00
- MD5
- e6054b445ebd3f9c188d0ad4ac8df59a
|
.data |
2.7852227576 |
0xc1000 |
0x1820 |
0xa00 |
e6054b445ebd3f9c188d0ad4ac8df59a |
- Name
- .rsrc
- Entropy
- 2.64780206677
- Virtual Address
- 0xc3000
- Virtual Size
- 0x320
- Raw Size
- 0x400
- MD5
- 874ad1c9baf8a0238b914874005fa9aa
|
.rsrc |
2.64780206677 |
0xc3000 |
0x320 |
0x400 |
874ad1c9baf8a0238b914874005fa9aa |
- Name
- .reloc
- Entropy
- 6.72244702545
- Virtual Address
- 0xc4000
- Virtual Size
- 0x5118
- Raw Size
- 0x5200
- MD5
- 0d4a0f365a85d37ab01c8e325a15170a
|
.reloc |
6.72244702545 |
0xc4000 |
0x5118 |
0x5200 |
0d4a0f365a85d37ab01c8e325a15170a |
File Imports
_SGN_VerifyPKCS1DigestInfo
ATOB_AsciiToData_Util
ATOB_ConvertAsciiToItem_Util
BTOA_ConvertItemToAscii_Util
BTOA_DataToAscii_Util
CERT_GenTime2FormattedAscii_Util
DER_AsciiToTime_Util
DER_DecodeTimeChoice_Util
DER_Encode_Util
DER_EncodeTimeChoice_Util
DER_GeneralizedDayToAscii_Util
DER_GeneralizedTimeToTime_Util
DER_GetInteger_Util
DER_GetUInteger
DER_LengthLength
DER_Lengths_Util
DER_SetUInteger
DER_StoreHeader
DER_TimeChoiceDayToAscii_Util
DER_TimeToGeneralizedTime_Util
DER_TimeToGeneralizedTimeArena_Util
DER_TimeToUTCTime_Util
DER_UTCDayToAscii_Util
DER_UTCTimeToAscii_Util
DER_UTCTimeToTime_Util
NSS_Get_SEC_AnyTemplate_Util
NSS_Get_SEC_BitStringTemplate_Util
NSS_Get_SEC_BMPStringTemplate_Util
NSS_Get_SEC_EnumeratedTemplate
NSS_Get_SEC_GeneralizedTimeTemplate_Util
NSS_Get_SEC_IA5StringTemplate_Util
NSS_Get_SEC_IntegerTemplate_Util
NSS_Get_SEC_NullTemplate_Util
NSS_Get_SEC_ObjectIDTemplate_Util
NSS_Get_SEC_OctetStringTemplate_Util
NSS_Get_SEC_PointerToAnyTemplate_Util
NSS_Get_SEC_PointerToEnumeratedTemplate
NSS_Get_SEC_PointerToGeneralizedTimeTemplate
NSS_Get_SEC_PrintableStringTemplate
NSS_Get_SEC_SequenceOfAnyTemplate
NSS_Get_SEC_SequenceOfObjectIDTemplate
NSS_Get_SEC_SetOfAnyTemplate_Util
NSS_Get_SEC_SkipTemplate
NSS_Get_SEC_T61StringTemplate
NSS_Get_SEC_UniversalStringTemplate
NSS_Get_SEC_UTF8StringTemplate_Util
NSS_Get_SECOID_AlgorithmIDTemplate_Util
NSS_GetAlgorithmPolicy
NSS_InitializePRErrorTable
NSS_PutEnv_Util
NSSBase64_DecodeBuffer_Util
NSSBase64_EncodeItem_Util
NSSBase64Decoder_Create_Util
NSSBase64Decoder_Destroy_Util
NSSBase64Decoder_Update_Util
NSSBase64Encoder_Create_Util
NSSBase64Encoder_Destroy_Util
NSSBase64Encoder_Update_Util
NSSRWLock_Destroy_Util
NSSRWLock_HaveWriteLock_Util
NSSRWLock_LockRead_Util
NSSRWLock_LockWrite_Util
NSSRWLock_New_Util
NSSRWLock_UnlockRead_Util
NSSRWLock_UnlockWrite_Util
NSSUTIL_ArgDecodeNumber
NSSUTIL_ArgFetchValue
NSSUTIL_ArgGetLabel
NSSUTIL_ArgGetParamValue
NSSUTIL_ArgHasFlag
NSSUTIL_ArgIsBlank
NSSUTIL_ArgParseCipherFlags
NSSUTIL_ArgParseModuleSpec
NSSUTIL_ArgParseSlotInfo
NSSUTIL_ArgReadLong
NSSUTIL_ArgSkipParameter
NSSUTIL_ArgStrip
NSSUTIL_DoubleEscape
NSSUTIL_DoubleEscapeSize
NSSUTIL_Escape
NSSUTIL_EscapeSize
NSSUTIL_MkModuleSpec
NSSUTIL_MkNSSString
NSSUTIL_MkSlotString
PORT_Alloc_Util
PORT_ArenaAlloc_Util
PORT_ArenaGrow_Util
PORT_ArenaMark_Util
PORT_ArenaRelease_Util
PORT_ArenaStrdup_Util
PORT_ArenaUnmark_Util
PORT_ArenaZAlloc_Util
PORT_Free_Util
PORT_FreeArena_Util
PORT_GetError_Util
PORT_ISO88591_UTF8Conversion
PORT_LoadLibraryFromOrigin
PORT_NewArena_Util
PORT_Realloc_Util
PORT_RegExpCaseSearch
PORT_RegExpValid
PORT_SetError_Util
PORT_SetUCS2_ASCIIConversionFunction_Util
PORT_SetUCS2_UTF8ConversionFunction_Util
PORT_SetUCS4_UTF8ConversionFunction_Util
PORT_Strdup_Util
PORT_UCS2_ASCIIConversion_Util
PORT_UCS2_UTF8Conversion_Util
PORT_UCS4_UTF8Conversion
PORT_ZAlloc_Util
PORT_ZFree_Util
SEC_ASN1Decode_Util
SEC_ASN1DecodeInteger_Util
SEC_ASN1DecodeItem_Util
SEC_ASN1DecoderAbort_Util
SEC_ASN1DecoderClearFilterProc_Util
SEC_ASN1DecoderClearNotifyProc_Util
SEC_ASN1DecoderFinish_Util
SEC_ASN1DecoderSetFilterProc_Util
SEC_ASN1DecoderSetNotifyProc_Util
SEC_ASN1DecoderStart_Util
SEC_ASN1DecoderUpdate_Util
SEC_ASN1Encode_Util
SEC_ASN1EncodeInteger_Util
SEC_ASN1EncodeItem_Util
SEC_ASN1EncoderAbort_Util
SEC_ASN1EncoderClearNotifyProc_Util
SEC_ASN1EncoderClearStreaming_Util
SEC_ASN1EncoderClearTakeFromBuf_Util
SEC_ASN1EncoderFinish_Util
SEC_ASN1EncoderSetNotifyProc_Util
SEC_ASN1EncoderSetStreaming_Util
SEC_ASN1EncoderSetTakeFromBuf_Util
SEC_ASN1EncoderStart_Util
SEC_ASN1EncoderUpdate_Util
SEC_ASN1EncodeUnsignedInteger_Util
SEC_ASN1LengthLength_Util
SEC_QuickDERDecodeItem_Util
SEC_StringToOID
SECITEM_AllocItem_Util
SECITEM_ArenaDupItem_Util
SECITEM_CompareItem_Util
SECITEM_CopyItem_Util
SECITEM_DupItem_Util
SECITEM_FreeItem_Util
SECITEM_Hash
SECITEM_HashCompare
SECITEM_ItemsAreEqual_Util
SECITEM_ZfreeItem_Util
SECOID_AddEntry_Util
SECOID_CompareAlgorithmID_Util
SECOID_CopyAlgorithmID_Util
SECOID_DestroyAlgorithmID_Util
SECOID_FindOID_Util
SECOID_FindOIDByMechanism
SECOID_FindOIDByTag_Util
SECOID_FindOIDTag_Util
SECOID_FindOIDTagDescription_Util
SECOID_GetAlgorithmTag_Util
SECOID_Init
SECOID_KnownCertExtenOID
SECOID_SetAlgorithmID_Util
SECOID_Shutdown
SGN_CompareDigestInfo_Util
SGN_CopyDigestInfo_Util
SGN_CreateDigestInfo_Util
SGN_DecodeDigestInfo
SGN_DestroyDigestInfo_Util
-
nssdbm3.dll
- Size
- 100KiB (102400 bytes)
- Type
- pedll executable
- Description
- PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
- AV Scan Result
- 0/60
- Runtime Process
- certutil.exe (PID: 2956)
- MD5
-
-
feb3e8d63d70b1e78c0c42bc5eff28b8
- SHA1
-
-
4a4d9d6d242f9615f01e3bb273be1332361d01a8
- SHA256
-
-
3bf09ab61cdd884cae005363f154081636147ae48f79a56d89c5b064e936206c
Extended File Details
File Sections
Details |
Name |
Entropy |
Virtual Address |
Virtual Size |
Raw Size |
MD5 |
- Name
- .text
- Entropy
- 6.41385196177
- Virtual Address
- 0x1000
- Virtual Size
- 0x15ef2
- Raw Size
- 0x16000
- MD5
- dfe9a3cf4ca90eddfe9c11eff8c15ab1
|
.text |
6.41385196177 |
0x1000 |
0x15ef2 |
0x16000 |
dfe9a3cf4ca90eddfe9c11eff8c15ab1 |
- Name
- .rdata
- Entropy
- 4.90277576319
- Virtual Address
- 0x17000
- Virtual Size
- 0x1ae6
- Raw Size
- 0x1c00
- MD5
- 5cebfc449350067a126a965ed75b4c7b
|
.rdata |
4.90277576319 |
0x17000 |
0x1ae6 |
0x1c00 |
5cebfc449350067a126a965ed75b4c7b |
- Name
- .data
- Entropy
- 0.476907412639
- Virtual Address
- 0x19000
- Virtual Size
- 0x3c8
- Raw Size
- 0x200
- MD5
- 13c5ead021a8c392f6d9c190316838a3
|
.data |
0.476907412639 |
0x19000 |
0x3c8 |
0x200 |
13c5ead021a8c392f6d9c190316838a3 |
- Name
- .rsrc
- Entropy
- 2.72414737492
- Virtual Address
- 0x1a000
- Virtual Size
- 0x338
- Raw Size
- 0x400
- MD5
- 5b2001a2dedaba27cd722ec239546c3f
|
.rsrc |
2.72414737492 |
0x1a000 |
0x338 |
0x400 |
5b2001a2dedaba27cd722ec239546c3f |
- Name
- .reloc
- Entropy
- 6.5229229699
- Virtual Address
- 0x1b000
- Virtual Size
- 0x9c0
- Raw Size
- 0xa00
- MD5
- aa4f0a5ee648c4bf343dfd1934d4caff
|
.reloc |
6.5229229699 |
0x1b000 |
0x9c0 |
0xa00 |
aa4f0a5ee648c4bf343dfd1934d4caff |
-
nssutil3.dll
- Size
- 108KiB (110592 bytes)
- Type
- pedll executable
- Description
- PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
- AV Scan Result
- 0/75
- Runtime Process
- certutil.exe (PID: 2956)
- MD5
-
-
b0f5738014be133e5ed8e9ec4b730dd3
- SHA1
-
-
5a87eebd9f9a24b30bfd4e21aa45fac3e87c7d3a
- SHA256
-
-
0c4000c19bf781b1b8087afb562a9a75f6f397e695e306bdc785d771041e03f6
Extended File Details
File Sections
Details |
Name |
Entropy |
Virtual Address |
Virtual Size |
Raw Size |
MD5 |
- Name
- .text
- Entropy
- 6.42097957153
- Virtual Address
- 0x1000
- Virtual Size
- 0xd350
- Raw Size
- 0xd400
- MD5
- 3e27fd2b530b5940e5d992a5c0eafab4
|
.text |
6.42097957153 |
0x1000 |
0xd350 |
0xd400 |
3e27fd2b530b5940e5d992a5c0eafab4 |
- Name
- .rdata
- Entropy
- 5.70457966924
- Virtual Address
- 0xf000
- Virtual Size
- 0xbfd6
- Raw Size
- 0xc000
- MD5
- fc3c4579804a0904bfb72accbb3e9756
|
.rdata |
5.70457966924 |
0xf000 |
0xbfd6 |
0xc000 |
fc3c4579804a0904bfb72accbb3e9756 |
- Name
- .data
- Entropy
- 2.50831161428
- Virtual Address
- 0x1b000
- Virtual Size
- 0xaf0
- Raw Size
- 0x400
- MD5
- a5ca9d3db1b7af7c6c3b962ab8e909e6
|
.data |
2.50831161428 |
0x1b000 |
0xaf0 |
0x400 |
a5ca9d3db1b7af7c6c3b962ab8e909e6 |
- Name
- .rsrc
- Entropy
- 2.57841630394
- Virtual Address
- 0x1c000
- Virtual Size
- 0x310
- Raw Size
- 0x400
- MD5
- a1c7e9ccad019e779c7d978f44f6e406
|
.rsrc |
2.57841630394 |
0x1c000 |
0x310 |
0x400 |
a1c7e9ccad019e779c7d978f44f6e406 |
- Name
- .reloc
- Entropy
- 6.34727259331
- Virtual Address
- 0x1d000
- Virtual Size
- 0xf78
- Raw Size
- 0x1000
- MD5
- 681873650753d8f8fb1f952c2c47ac9d
|
.reloc |
6.34727259331 |
0x1d000 |
0xf78 |
0x1000 |
681873650753d8f8fb1f952c2c47ac9d |
-
plc4.dll
- Size
- 14KiB (13824 bytes)
- Type
- pedll executable
- Description
- PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
- AV Scan Result
- 0/74
- Runtime Process
- certutil.exe (PID: 2956)
- MD5
-
-
d48f583eff3d5e7d807a9ce4cef2d89b
- SHA1
-
-
a696a033f357d62356d04f5951e7ff0ab16d55be
- SHA256
-
-
2353c8cc904a0f954a442cf439f1c96b790f67b8e7c4f02a32a1a92dd69f44f2
Extended File Details
File Sections
Details |
Name |
Entropy |
Virtual Address |
Virtual Size |
Raw Size |
MD5 |
- Name
- .text
- Entropy
- 6.36344470049
- Virtual Address
- 0x1000
- Virtual Size
- 0x1caa
- Raw Size
- 0x1e00
- MD5
- 57230b1c17e78f6e2f69d97369692b26
|
.text |
6.36344470049 |
0x1000 |
0x1caa |
0x1e00 |
57230b1c17e78f6e2f69d97369692b26 |
- Name
- .rdata
- Entropy
- 5.45065179252
- Virtual Address
- 0x3000
- Virtual Size
- 0xb72
- Raw Size
- 0xc00
- MD5
- f759f6b1fe249f241a8b9a504f2b1423
|
.rdata |
5.45065179252 |
0x3000 |
0xb72 |
0xc00 |
f759f6b1fe249f241a8b9a504f2b1423 |
- Name
- .data
- Entropy
- 0.861015041426
- Virtual Address
- 0x4000
- Virtual Size
- 0x3ac
- Raw Size
- 0x200
- MD5
- de3cf1c52a4b0cdfe3ab00b05db7ae75
|
.data |
0.861015041426 |
0x4000 |
0x3ac |
0x200 |
de3cf1c52a4b0cdfe3ab00b05db7ae75 |
- Name
- .rsrc
- Entropy
- 2.51009892254
- Virtual Address
- 0x5000
- Virtual Size
- 0x2f8
- Raw Size
- 0x400
- MD5
- 9582f9618c2bb2db6e295ae2dcb52c24
|
.rsrc |
2.51009892254 |
0x5000 |
0x2f8 |
0x400 |
9582f9618c2bb2db6e295ae2dcb52c24 |
- Name
- .reloc
- Entropy
- 5.8589870994
- Virtual Address
- 0x6000
- Virtual Size
- 0x1c8
- Raw Size
- 0x200
- MD5
- 9cea86ac02547da04706cbefb31b93dd
|
.reloc |
5.8589870994 |
0x6000 |
0x1c8 |
0x200 |
9cea86ac02547da04706cbefb31b93dd |
-
plds4.dll
- Size
- 12KiB (11776 bytes)
- Type
- pedll executable
- Description
- PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
- AV Scan Result
- 0/75
- Runtime Process
- certutil.exe (PID: 2956)
- MD5
-
-
2ca927798dc32e6c97d35e40c5f19dfb
- SHA1
-
-
07d3a8c2dbf44cae765c20d237f77c320b996293
- SHA256
-
-
bc5c468372754c561be416ab381f25b1cdcac5f4c341b709ef04d9bed5924628
Extended File Details
File Sections
Details |
Name |
Entropy |
Virtual Address |
Virtual Size |
Raw Size |
MD5 |
- Name
- .text
- Entropy
- 6.32872489008
- Virtual Address
- 0x1000
- Virtual Size
- 0x17ca
- Raw Size
- 0x1800
- MD5
- 4f2a119e9f8ada720c3cd4d2bab0be78
|
.text |
6.32872489008 |
0x1000 |
0x17ca |
0x1800 |
4f2a119e9f8ada720c3cd4d2bab0be78 |
- Name
- .rdata
- Entropy
- 4.81804200032
- Virtual Address
- 0x3000
- Virtual Size
- 0x8f4
- Raw Size
- 0xa00
- MD5
- 2587f0beb3e9148da72086ac14deae7a
|
.rdata |
4.81804200032 |
0x3000 |
0x8f4 |
0xa00 |
2587f0beb3e9148da72086ac14deae7a |
- Name
- .data
- Entropy
- 0.971280854014
- Virtual Address
- 0x4000
- Virtual Size
- 0x3b4
- Raw Size
- 0x200
- MD5
- 0eda4b29335b626325369d01801bc1cd
|
.data |
0.971280854014 |
0x4000 |
0x3b4 |
0x200 |
0eda4b29335b626325369d01801bc1cd |
- Name
- .rsrc
- Entropy
- 2.52875637825
- Virtual Address
- 0x5000
- Virtual Size
- 0x2f8
- Raw Size
- 0x400
- MD5
- 080de0167f3ea4972ec36c02c041d779
|
.rsrc |
2.52875637825 |
0x5000 |
0x2f8 |
0x400 |
080de0167f3ea4972ec36c02c041d779 |
- Name
- .reloc
- Entropy
- 5.82308254601
- Virtual Address
- 0x6000
- Virtual Size
- 0x1dc
- Raw Size
- 0x200
- MD5
- 010f355889a3276e3959b1bb977d2300
|
.reloc |
5.82308254601 |
0x6000 |
0x1dc |
0x200 |
010f355889a3276e3959b1bb977d2300 |
-
smime3.dll
- Size
- 97KiB (98816 bytes)
- Type
- pedll executable
- Description
- PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
- AV Scan Result
- 0/75
- Runtime Process
- certutil.exe (PID: 2956)
- MD5
-
-
e14db78bc66d3daee2b3600e7b91e989
- SHA1
-
-
99c2e635266c3b26ec6c58eaf005376551f5a0ae
- SHA256
-
-
3173141bec7496911eefc07ace7de2f63cf78c785884564f4100299ba7c6f174
Extended File Details
File Sections
Details |
Name |
Entropy |
Virtual Address |
Virtual Size |
Raw Size |
MD5 |
- Name
- .text
- Entropy
- 6.17780169953
- Virtual Address
- 0x1000
- Virtual Size
- 0x11612
- Raw Size
- 0x11800
- MD5
- d384394523d829945d0467e1245751c0
|
.text |
6.17780169953 |
0x1000 |
0x11612 |
0x11800 |
d384394523d829945d0467e1245751c0 |
- Name
- .rdata
- Entropy
- 4.88413030632
- Virtual Address
- 0x13000
- Virtual Size
- 0x5476
- Raw Size
- 0x5600
- MD5
- 74303459282e38469c1ba8b200cd1136
|
.rdata |
4.88413030632 |
0x13000 |
0x5476 |
0x5600 |
74303459282e38469c1ba8b200cd1136 |
- Name
- .data
- Entropy
- 2.1689453894
- Virtual Address
- 0x19000
- Virtual Size
- 0x56c
- Raw Size
- 0x200
- MD5
- fcf42353bb72e188dec1dfcd5a0cf18d
|
.data |
2.1689453894 |
0x19000 |
0x56c |
0x200 |
fcf42353bb72e188dec1dfcd5a0cf18d |
- Name
- .rsrc
- Entropy
- 2.69461811994
- Virtual Address
- 0x1a000
- Virtual Size
- 0x330
- Raw Size
- 0x400
- MD5
- 99ca69dc0691f26bf539f32897c9d350
|
.rsrc |
2.69461811994 |
0x1a000 |
0x330 |
0x400 |
99ca69dc0691f26bf539f32897c9d350 |
- Name
- .reloc
- Entropy
- 6.25336561332
- Virtual Address
- 0x1b000
- Virtual Size
- 0x948
- Raw Size
- 0xa00
- MD5
- 906214e0c0f919a26d2c39bb274cf0d7
|
.reloc |
6.25336561332 |
0x1b000 |
0x948 |
0xa00 |
906214e0c0f919a26d2c39bb274cf0d7 |
File Imports
__CERT_DecodeDERCertificate
CERT_AddCertToListTail
CERT_CertChainFromCert
CERT_CertListFromCert
CERT_DestroyCertArray
CERT_DestroyCertificate
CERT_DestroyCertificateList
CERT_DestroyCertList
CERT_DupCertificate
CERT_ExtractPublicKey
CERT_FilterCertListByUsage
CERT_FindCertByDERCert
CERT_FindCertByIssuerAndSN
CERT_FindCertBySubjectKeyID
CERT_FindSMimeProfile
CERT_FindSubjectKeyIDExtension
CERT_GetCertIssuerAndSN
CERT_GetCommonName
CERT_GetDefaultCertDB
CERT_ImportCerts
CERT_IsCADERCert
CERT_IsRootDERCert
CERT_NewCertList
CERT_NewTempCertificate
CERT_SaveSMimeProfile
CERT_VerifyCert
HASH_GetHashObjectByOidTag
HASH_GetHashTypeByOidTag
HASH_ResultLen
NSS_Get_CERT_IssuerAndSNTemplate
NSS_Get_CERT_SetOfSignedCrlTemplate
NSS_Get_CERT_TimeChoiceTemplate
NSS_Get_SECKEY_PointerToEncryptedPrivateKeyInfoTemplate
NSS_Get_SECKEY_PointerToPrivateKeyInfoTemplate
NSS_Get_SECKEY_PrivateKeyInfoTemplate
NSS_RegisterShutdown
NSS_VersionCheck
PK11_AlgtagToMechanism
PK11_CipherOp
PK11_CreateContextBySymKey
PK11_CreatePBEAlgorithmID
PK11_CreatePBEParams
PK11_DestroyContext
PK11_DestroyPBEParams
PK11_DigestBegin
PK11_DigestFinal
PK11_DigestOp
PK11_ExportEncryptedPrivateKeyInfo
PK11_ExportPrivateKeyInfo
PK11_FindCertAndKeyByRecipientList
PK11_FindCertAndKeyByRecipientListNew
PK11_FindKeyByAnyCert
PK11_FindKeyByDERCert
PK11_FindPrivateKeyFromCert
PK11_FreeSlot
PK11_FreeSymKey
PK11_GenerateNewParam
PK11_GenerateRandom
PK11_GetBestSlot
PK11_GetBlockSize
PK11_GetInternalKeySlot
PK11_GetInternalSlot
PK11_GetKeyStrength
PK11_GetPBECryptoMechanism
PK11_GetSlotFromKey
PK11_GetSymKeyUserData
PK11_GetTokenName
PK11_HashBuf
PK11_ImportCertForKeyToSlot
PK11_ImportDERCert
PK11_ImportEncryptedPrivateKeyInfo
PK11_ImportPrivateKeyInfo
PK11_ImportPublicKey
PK11_IsHW
PK11_IsInternal
PK11_KeyGen
PK11_ParamFromAlgid
PK11_ParamToAlgid
PK11_PBEKeyGen
PK11_PubUnwrapSymKey
PK11_PubWrapSymKey
PK11_ReferenceSlot
PK11_ReferenceSymKey
PK11_SetPasswordFunc
PK11_SetSymKeyUserData
PK11_TraverseCertsForNicknameInSlot
PK11_TraverseCertsForSubjectInSlot
SEC_GetSignatureAlgorithmOidTag
SEC_PKCS5GetCryptoAlgorithm
SEC_PKCS5GetKeyLength
SEC_PKCS5IsAlgorithmPBEAlg
SEC_PKCS5IsAlgorithmPBEAlgTag
SEC_SignData
SECKEY_CopyEncryptedPrivateKeyInfo
SECKEY_CopyPrivateKey
SECKEY_CopyPrivateKeyInfo
SECKEY_CopyPublicKey
SECKEY_CreateSubjectPublicKeyInfo
SECKEY_DestroyEncryptedPrivateKeyInfo
SECKEY_DestroyPrivateKey
SECKEY_DestroyPrivateKeyInfo
SECKEY_DestroyPublicKey
SECKEY_DestroySubjectPublicKeyInfo
SECKEY_GetPublicKeyType
SECKEY_PublicKeyStrength
SECKEY_PublicKeyStrengthInBits
SGN_Digest
VFY_VerifyDataDirect
VFY_VerifyDigestDirect
ATOB_AsciiToData_Util
ATOB_ConvertAsciiToItem_Util
DER_DecodeTimeChoice_Util
DER_EncodeTimeChoice_Util
DER_GetInteger_Util
NSS_Get_SEC_AnyTemplate_Util
NSS_Get_SEC_BitStringTemplate_Util
NSS_Get_SEC_BMPStringTemplate_Util
NSS_Get_SEC_IA5StringTemplate_Util
NSS_Get_SEC_ObjectIDTemplate_Util
NSS_Get_SEC_OctetStringTemplate_Util
NSS_Get_SEC_PointerToAnyTemplate_Util
NSS_Get_SEC_PointerToOctetStringTemplate_Util
NSS_Get_SEC_SetOfAnyTemplate_Util
NSS_Get_SECOID_AlgorithmIDTemplate_Util
NSS_Get_sgn_DigestInfoTemplate_Util
PORT_Alloc_Util
PORT_ArenaAlloc_Util
PORT_ArenaGrow_Util
PORT_ArenaMark_Util
PORT_ArenaRelease_Util
PORT_ArenaStrdup_Util
PORT_ArenaUnmark_Util
PORT_ArenaZAlloc_Util
PORT_Free_Util
PORT_FreeArena_Util
PORT_GetError_Util
PORT_NewArena_Util
PORT_Realloc_Util
PORT_SetError_Util
PORT_Strdup_Util
PORT_UCS2_ASCIIConversion_Util
PORT_UCS2_UTF8Conversion_Util
PORT_ZAlloc_Util
PORT_ZFree_Util
SEC_ASN1DecodeInteger_Util
SEC_ASN1DecodeItem_Util
SEC_ASN1DecoderAbort_Util
SEC_ASN1DecoderClearFilterProc_Util
SEC_ASN1DecoderClearNotifyProc_Util
SEC_ASN1DecoderFinish_Util
SEC_ASN1DecoderSetFilterProc_Util
SEC_ASN1DecoderSetNotifyProc_Util
SEC_ASN1DecoderStart_Util
SEC_ASN1DecoderUpdate_Util
SEC_ASN1Encode_Util
SEC_ASN1EncodeInteger_Util
SEC_ASN1EncodeItem_Util
SEC_ASN1EncoderAbort_Util
SEC_ASN1EncoderClearNotifyProc_Util
SEC_ASN1EncoderClearStreaming_Util
SEC_ASN1EncoderClearTakeFromBuf_Util
SEC_ASN1EncoderFinish_Util
SEC_ASN1EncoderSetNotifyProc_Util
SEC_ASN1EncoderSetStreaming_Util
SEC_ASN1EncoderSetTakeFromBuf_Util
SEC_ASN1EncoderStart_Util
SEC_ASN1EncoderUpdate_Util
SEC_QuickDERDecodeItem_Util
SECITEM_AllocItem_Util
SECITEM_ArenaDupItem_Util
SECITEM_CompareItem_Util
SECITEM_CopyItem_Util
SECITEM_DupItem_Util
SECITEM_FreeItem_Util
SECITEM_ItemsAreEqual_Util
SECITEM_ZfreeItem_Util
SECOID_CompareAlgorithmID_Util
SECOID_CopyAlgorithmID_Util
SECOID_DestroyAlgorithmID_Util
SECOID_FindOID_Util
SECOID_FindOIDByTag_Util
SECOID_FindOIDTag_Util
SECOID_GetAlgorithmTag_Util
SECOID_SetAlgorithmID_Util
SGN_CopyDigestInfo_Util
SGN_CreateDigestInfo_Util
SGN_DestroyDigestInfo_Util
-
softokn3.dll
- Size
- 167KiB (170496 bytes)
- Type
- pedll executable
- Description
- PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
- AV Scan Result
- 0/66
- Runtime Process
- certutil.exe (PID: 2956)
- MD5
-
-
0694c07cb9075f57235202c16ec92986
- SHA1
-
-
bf42e9c4c65318d473d436988d2f560df0d65686
- SHA256
-
-
5cff75c7e20c6036bbea97ba5cc7f87d441d533213cbe31c2957b910cffb46e5
Extended File Details
File Sections
Details |
Name |
Entropy |
Virtual Address |
Virtual Size |
Raw Size |
MD5 |
- Name
- .text
- Entropy
- 6.27831100445
- Virtual Address
- 0x1000
- Virtual Size
- 0x224b0
- Raw Size
- 0x22600
- MD5
- b160712f83ad70d2756d4a447884f7eb
|
.text |
6.27831100445 |
0x1000 |
0x224b0 |
0x22600 |
b160712f83ad70d2756d4a447884f7eb |
- Name
- .rdata
- Entropy
- 5.85611262529
- Virtual Address
- 0x24000
- Virtual Size
- 0x4f5e
- Raw Size
- 0x5000
- MD5
- 5994a3376c9e75eb4ab387111a7f1927
|
.rdata |
5.85611262529 |
0x24000 |
0x4f5e |
0x5000 |
5994a3376c9e75eb4ab387111a7f1927 |
- Name
- .data
- Entropy
- 2.56758148184
- Virtual Address
- 0x29000
- Virtual Size
- 0x6d4
- Raw Size
- 0x400
- MD5
- 9edc46678795f0cd174414fb962a7477
|
.data |
2.56758148184 |
0x29000 |
0x6d4 |
0x400 |
9edc46678795f0cd174414fb962a7477 |
- Name
- .rsrc
- Entropy
- 2.734397185
- Virtual Address
- 0x2a000
- Virtual Size
- 0x338
- Raw Size
- 0x400
- MD5
- e75ed9a60d1c999fa02d699a334a3d38
|
.rsrc |
2.734397185 |
0x2a000 |
0x338 |
0x400 |
e75ed9a60d1c999fa02d699a334a3d38 |
- Name
- .reloc
- Entropy
- 6.69785349229
- Virtual Address
- 0x2b000
- Virtual Size
- 0x17f0
- Raw Size
- 0x1800
- MD5
- 944fd6884ab02f718229767fb5d054be
|
.reloc |
6.69785349229 |
0x2b000 |
0x17f0 |
0x1800 |
944fd6884ab02f718229767fb5d054be |
-
sqlite3.dll
- Size
- 467KiB (478208 bytes)
- Type
- pedll executable
- Description
- PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
- AV Scan Result
- 0/75
- Runtime Process
- certutil.exe (PID: 2956)
- MD5
-
-
2413e69e314ae461b2d84da7fda440df
- SHA1
-
-
0eeb0d7f6d700df1d83dbd8dcdbae2fc56760cae
- SHA256
-
-
94d7c8f60194c03bc9d54e484df5d6e1dac9b67886c79a43776d0a8aad8c9510
Extended File Details
File Sections
Details |
Name |
Entropy |
Virtual Address |
Virtual Size |
Raw Size |
MD5 |
- Name
- .text
- Entropy
- 6.54829659216
- Virtual Address
- 0x1000
- Virtual Size
- 0x66fb8
- Raw Size
- 0x67000
- MD5
- 87d87308db5efdb978c2af4c565b6957
|
.text |
6.54829659216 |
0x1000 |
0x66fb8 |
0x67000 |
87d87308db5efdb978c2af4c565b6957 |
- Name
- .rdata
- Entropy
- 6.11898031198
- Virtual Address
- 0x68000
- Virtual Size
- 0x9afc
- Raw Size
- 0x9c00
- MD5
- 141c7ef54b443f61b73a4dc338495d29
|
.rdata |
6.11898031198 |
0x68000 |
0x9afc |
0x9c00 |
141c7ef54b443f61b73a4dc338495d29 |
- Name
- .data
- Entropy
- 2.58583146702
- Virtual Address
- 0x72000
- Virtual Size
- 0x1618
- Raw Size
- 0x1000
- MD5
- 9988910892c416aa79010a9e2e564bc0
|
.data |
2.58583146702 |
0x72000 |
0x1618 |
0x1000 |
9988910892c416aa79010a9e2e564bc0 |
- Name
- .reloc
- Entropy
- 6.52227708655
- Virtual Address
- 0x74000
- Virtual Size
- 0x2a1c
- Raw Size
- 0x2c00
- MD5
- 0dd386e1dd2f0be14ccb7ed2a709a154
|
.reloc |
6.52227708655 |
0x74000 |
0x2a1c |
0x2c00 |
0dd386e1dd2f0be14ccb7ed2a709a154 |
-
uninst.exe
- Size
- 82KiB (84068 bytes)
- Type
- peexe executable
- Description
- PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
- AV Scan Result
- 0/67
- MD5
-
-
bfbfe63a09211bf61f1f4acfd550408e
- SHA1
-
-
154a691a2501c3656b3ee547beda8f46845e2fc4
- SHA256
-
-
09ae66bd5cd2d891b1c6ce9043a84c290acfc58c0fbc74808ea03dfa907c8162
Extended File Details
File Sections
Details |
Name |
Entropy |
Virtual Address |
Virtual Size |
Raw Size |
MD5 |
- Name
- .text
- Entropy
- 6.4186984047
- Virtual Address
- 0x1000
- Virtual Size
- 0x5a68
- Raw Size
- 0x5c00
- MD5
- e50f4a1111bafdc813b1f7ec153b8ea9
|
.text |
6.4186984047 |
0x1000 |
0x5a68 |
0x5c00 |
e50f4a1111bafdc813b1f7ec153b8ea9 |
- Name
- .rdata
- Entropy
- 5.23558258678
- Virtual Address
- 0x7000
- Virtual Size
- 0x11ce
- Raw Size
- 0x1200
- MD5
- 640f709ec19b4ed0455a4c64e5934d5e
|
.rdata |
5.23558258678 |
0x7000 |
0x11ce |
0x1200 |
640f709ec19b4ed0455a4c64e5934d5e |
- Name
- .data
- Entropy
- 4.87122636881
- Virtual Address
- 0x9000
- Virtual Size
- 0x1a7b8
- Raw Size
- 0x400
- MD5
- 54c75104a38a6f79dc7a8d3b020a9139
|
.data |
4.87122636881 |
0x9000 |
0x1a7b8 |
0x400 |
54c75104a38a6f79dc7a8d3b020a9139 |
- Name
- .ndata
- Entropy
- 0
- Virtual Address
- 0x24000
- Virtual Size
- 0x11000
- Raw Size
- 0x0
- MD5
- d41d8cd98f00b204e9800998ecf8427e
|
.ndata |
0 |
0x24000 |
0x11000 |
0x0 |
d41d8cd98f00b204e9800998ecf8427e |
- Name
- .rsrc
- Entropy
- 4.80540380062
- Virtual Address
- 0x35000
- Virtual Size
- 0x9a60
- Raw Size
- 0x9c00
- MD5
- 2481e8c9cb619970f415ca6ca7fe5a27
|
.rsrc |
4.80540380062 |
0x35000 |
0x9a60 |
0x9c00 |
2481e8c9cb619970f415ca6ca7fe5a27 |
-
-
- Size
- 1.3KiB (1376 bytes)
- Type
- unknown
- Description
- PEM certificate
- Runtime Process
- UPEditorEdge_1.exe (PID: 3372)
- MD5
-
-
c741baa6b6afd5374712b7efce6c3348
- SHA1
-
-
8b7dea788339967643837ed8ae23d46682ac4fc4
- SHA256
-
-
3b1288b7fd26cdf1d1eac8ea906b1f1fbeb7baeed5aa4a7f82cc321b56317504
-
- Size
- 1.7KiB (1756 bytes)
- Type
- unknown
- Description
- PEM certificate
- Runtime Process
- UPEditorEdge_1.exe (PID: 3372)
- MD5
-
-
4bd7c219dcefbe14be5dc3d60e9eb98f
- SHA1
-
-
fc87981b94e85efba21466bae300efed5b3c1c41
- SHA256
-
-
ded432460c8ecaa5072eb866077f4f937f0beae0dd9cd8ba8f6a3802dc610a64
-
- Size
- 1.9KiB (1920 bytes)
- Type
- lnk
- Description
- MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Icon number=0, Archive, ctime=Thu Mar 23 04:43:38 2017, mtime=Sat Mar 31 02:18:28 2018, atime=Thu Mar 23 04:43:38 2017, length=4238096, window=hide
- Runtime Process
- UPEditorEdge_1.exe (PID: 3372)
- MD5
-
-
e357e0ee2f6a7acc05bf76a8fd9e960e
- SHA1
-
-
4c6a9f9498a81b7bfef3ad000568f2eb6215fc2b
- SHA256
-
-
382924b753b8b9bdba7b37296297a875c2e651476fe53925c67eb859f5426a95
-
- Size
- 3.4KiB (3449 bytes)
- Type
- unknown
- Description
- PEM certificate
- Runtime Process
- certutil.exe (PID: 2956)
- MD5
-
-
00275a8c42f1f8377b332adfce33e4cf
- SHA1
-
-
64bff7dbc26e15a830a36f4d85d605587c2de7f6
- SHA256
-
-
aefd1ec82c1b1ec04001139e84b966de72dc7784c02e7d9826f536d1f99b5b45
-
-
- Size
- 64KiB (65536 bytes)
- Runtime Process
- certutil.exe (PID: 2956)
- MD5
-
-
24cf55dcb29b082127a041329450d63e
- SHA1
-
-
2500e7b36c06e43d7aaf2fc0408c6903673df05b
- SHA256
-
-
909e4e750be612867cd4038e792bce92ed1d49cc55a190e336c942f85bf643f6
-
- Size
- 16KiB (16384 bytes)
- Runtime Process
- certutil.exe (PID: 2956)
- MD5
-
-
5dd394e182c1225c609cd4f1ae25d9f0
- SHA1
-
-
678655028ac0a13143ab92a2dcb92e5b1f17d301
- SHA256
-
-
73f7d7123dd563bb9b47d127aebcfa4cf773e94b3fdf5fbf093ec6df0e6cc2d6
-
- Size
- 25KiB (25818 bytes)
- Runtime Process
- UPEditorEdge_1.exe (PID: 3372)
- MD5
-
-
0cec787e4c05b87939962d42d1cb8275
- SHA1
-
-
5307f0748e48c6d1ca09ab071670c0c4496e1405
- SHA256
-
-
3dc4ef67950a1bd74595fe0a0040f4d55533a2571bcd0220682df297c44c08d7
-
- Size
- 151KiB (154542 bytes)
- Runtime Process
- UPEditorEdge_1.exe (PID: 3372)
- MD5
-
-
91f4841138f8fb23ca3422662ebe1441
- SHA1
-
-
31f622444964da0686558a46ba3437122d9e1225
- SHA256
-
-
5193152942fe5b5c40e077f3093a0e74a9083f543bd3ac58ce2d3fe39ff5de4d
-
- Size
- 30KiB (30894 bytes)
- Runtime Process
- UPEditorEdge_1.exe (PID: 3372)
- MD5
-
-
4be75242ae2533f5b83f60072196c95f
- SHA1
-
-
3da885a4784341373ac5390b64e185c4f035e5ed
- SHA256
-
-
c5a5476b58ce8216d49249882781c19094d8df637fb1503ba6d10fcd38fa3bed
Notifications
- Added comment to Virus Total report
- Not all IP/URL string resources were checked online
- Not all sources for indicator ID "api-12" are available in the report
- Not all sources for indicator ID "api-33" are available in the report
- Not all sources for indicator ID "api-4" are available in the report
- Not all sources for indicator ID "api-55" are available in the report
- Not all sources for indicator ID "api-6" are available in the report
- Not all sources for indicator ID "api-9" are available in the report
- Not all sources for indicator ID "binary-0" are available in the report
- Not all sources for indicator ID "binary-1" are available in the report
- Not all sources for indicator ID "binary-16" are available in the report
- Not all sources for indicator ID "hooks-8" are available in the report
- Not all sources for indicator ID "mutant-0" are available in the report
- Not all sources for indicator ID "registry-17" are available in the report
- Not all sources for indicator ID "static-6" are available in the report
- Not all sources for indicator ID "string-24" are available in the report
- Not all strings are visible in the report, because the maximum number of strings was reached (5000)
- Some low-level data is hidden, as this is only a slim report
{"publicService":true,"flashFadeaway":true,"fadeawayTimeout":15,"autoLogout":false,"autoLogoutTimeout":0,"reCaptcha":"6LeJvv0SAAAAAG8IuH0lT5UnCjGxQHHqXJNsX-uT","enableCookieBanner":true}
Hybrid Analysis requires that users undergo the Hybrid Analysis Vetting Process prior to obtaining an API key or downloading malware samples. Please note that you must abide by the Hybrid Analysis Terms and Conditions and only use these samples for research purposes. You are not permitted to share your user credentials or API key with anyone else. Please notify Hybrid Analysis immediately if you believe that your API key or user credentials have been compromised.
{"id":"5ae67c0f7ca3e11c417820ea","sample_targets_streams_data":{"00013355-00003372-31802-31-00401434":{"uid":"00013355-00003372-31802-31-00401434","pid":3372,"name":"UPEditorEdge_1.exe","root_target_uid":"00013355-00003372","stream_type":0,"instructions":1727},"00013355-00003372-37865-31-00401434":{"uid":"00013355-00003372-37865-31-00401434","pid":3372,"name":"UPEditorEdge_1.exe","root_target_uid":"00013355-00003372","stream_type":0,"instructions":1727},"00013355-00003372-31802-1-004030B6":{"uid":"00013355-00003372-31802-1-004030B6","pid":3372,"name":"UPEditorEdge_1.exe","root_target_uid":"00013355-00003372","stream_type":0,"instructions":335},"00013355-00003372-31802-80-00404F8E":{"uid":"00013355-00003372-31802-80-00404F8E","pid":3372,"name":"UPEditorEdge_1.exe","root_target_uid":"00013355-00003372","stream_type":0,"instructions":280},"00013355-00003372-31802-71-00404291":{"uid":"00013355-00003372-31802-71-00404291","pid":3372,"name":"UPEditorEdge_1.exe","root_target_uid":"00013355-00003372","stream_type":0,"instructions":268},"00013355-00003372-31802-52-004035EE":{"uid":"00013355-00003372-31802-52-004035EE","pid":3372,"name":"UPEditorEdge_1.exe","root_target_uid":"00013355-00003372","stream_type":0,"instructions":216},"00013355-00003372-31802-98-00403983":{"uid":"00013355-00003372-31802-98-00403983","pid":3372,"name":"UPEditorEdge_1.exe","root_target_uid":"00013355-00003372","stream_type":0,"instructions":344},"00013355-00003372-31802-60-00401000":{"uid":"00013355-00003372-31802-60-00401000","pid":3372,"name":"UPEditorEdge_1.exe","root_target_uid":"00013355-00003372","stream_type":0,"instructions":125},"00013355-00003372-31802-7-00405B87":{"uid":"00013355-00003372-31802-7-00405B87","pid":3372,"name":"UPEditorEdge_1.exe","root_target_uid":"00013355-00003372","stream_type":0,"instructions":199},"00013355-00003372-31802-56-00402C29":{"uid":"00013355-00003372-31802-56-00402C29","pid":3372,"name":"UPEditorEdge_1.exe","root_target_uid":"00013355-00003372","stream_type":0,"instructions":182},"00013355-00003372-31802-77-004047CD":{"uid":"00013355-00003372-31802-77-004047CD","pid":3372,"name":"UPEditorEdge_1.exe","root_target_uid":"00013355-00003372","stream_type":0,"instructions":481},"00013355-00003372-31802-4-00405425":{"uid":"00013355-00003372-31802-4-00405425","pid":3372,"name":"UPEditorEdge_1.exe","root_target_uid":"00013355-00003372","stream_type":0,"instructions":159},"00013355-00003372-41578-58-004035EE":{"uid":"00013355-00003372-41578-58-004035EE","pid":3372,"name":"UPEditorEdge_1.exe","root_target_uid":"00013355-00003372","stream_type":0,"instructions":216},"00013355-00003372-31802-72-00404639":{"uid":"00013355-00003372-31802-72-00404639","pid":3372,"name":"UPEditorEdge_1.exe","root_target_uid":"00013355-00003372","stream_type":0,"instructions":78},"00013355-00003372-31802-65-00403F9C":{"uid":"00013355-00003372-31802-65-00403F9C","pid":3372,"name":"UPEditorEdge_1.exe","root_target_uid":"00013355-00003372","stream_type":0,"instructions":205},"00013355-00003372-31802-38-00405F90":{"uid":"00013355-00003372-31802-38-00405F90","pid":3372,"name":"UPEditorEdge_1.exe","root_target_uid":"00013355-00003372","stream_type":0,"instructions":781},"00013355-00003372-31802-14-0040589D":{"uid":"00013355-00003372-31802-14-0040589D","pid":3372,"name":"UPEditorEdge_1.exe","root_target_uid":"00013355-00003372","stream_type":0,"instructions":136},"00013355-00003372-31802-55-004038B3":{"uid":"00013355-00003372-31802-55-004038B3","pid":3372,"name":"UPEditorEdge_1.exe","root_target_uid":"00013355-00003372","stream_type":0,"instructions":71},"00013355-00003372-41578-9-00405B87":{"uid":"00013355-00003372-41578-9-00405B87","pid":3372,"name":"UPEditorEdge_1.exe","root_target_uid":"00013355-00003372","stream_type":0,"instructions":199},"00013355-00003372-31802-36-00402E62":{"uid":"00013355-00003372-31802-36-00402E62","pid":3372,"name":"UPEditorEdge_1.exe","root_target_uid":"00013355-00003372","stream_type":0,"instructions":166},"00013355-00003372-31802-41-00405379":{"uid":"00013355-00003372-31802-41-00405379","pid":3372,"name":"UPEditorEdge_1.exe","root_target_uid":"00013355-00003372","stream_type":0,"instructions":21},"00013355-00003372-31802-63-00403EBA":{"uid":"00013355-00003372-31802-63-00403EBA","pid":3372,"name":"UPEditorEdge_1.exe","root_target_uid":"00013355-00003372","stream_type":0,"instructions":61},"00013355-00003372-31802-61-00402B42":{"uid":"00013355-00003372-31802-61-00402B42","pid":3372,"name":"UPEditorEdge_1.exe","root_target_uid":"00013355-00003372","stream_type":0,"instructions":40},"00013355-00003372-31802-6-00404E50":{"uid":"00013355-00003372-31802-6-00404E50","pid":3372,"name":"UPEditorEdge_1.exe","root_target_uid":"00013355-00003372","stream_type":0,"instructions":73},"00013355-00003372-31802-57-00402BC5":{"uid":"00013355-00003372-31802-57-00402BC5","pid":3372,"name":"UPEditorEdge_1.exe","root_target_uid":"00013355-00003372","stream_type":0,"instructions":33},"00013355-00003372-31802-78-0040479B":{"uid":"00013355-00003372-31802-78-0040479B","pid":3372,"name":"UPEditorEdge_1.exe","root_target_uid":"00013355-00003372","stream_type":0,"instructions":18},"00013355-00003372-37865-6-00404E50":{"uid":"00013355-00003372-37865-6-00404E50","pid":3372,"name":"UPEditorEdge_1.exe","root_target_uid":"00013355-00003372","stream_type":0,"instructions":73},"00013355-00003372-31802-45-00402A3D":{"uid":"00013355-00003372-31802-45-00402A3D","pid":3372,"name":"UPEditorEdge_1.exe","root_target_uid":"00013355-00003372","stream_type":0,"instructions":67},"18422-33-00401434":{"uid":"18422-33-00401434","pid":3372,"name":"UPEditorEdge_1.exe","root_target_uid":"00013355-00003372","stream_type":0,"instructions":1727},"18422-1-004030B6":{"uid":"18422-1-004030B6","pid":3372,"name":"UPEditorEdge_1.exe","root_target_uid":"00013355-00003372","stream_type":0,"instructions":335},"18422-62-00402C29":{"uid":"18422-62-00402C29","pid":3372,"name":"UPEditorEdge_1.exe","root_target_uid":"00013355-00003372","stream_type":0,"instructions":182},"18422-58-004035EE":{"uid":"18422-58-004035EE","pid":3372,"name":"UPEditorEdge_1.exe","root_target_uid":"00013355-00003372","stream_type":0,"instructions":216},"18422-9-00405B87":{"uid":"18422-9-00405B87","pid":3372,"name":"UPEditorEdge_1.exe","root_target_uid":"00013355-00003372","stream_type":0,"instructions":199},"18422-276-00403F9C":{"uid":"18422-276-00403F9C","pid":3372,"name":"UPEditorEdge_1.exe","root_target_uid":"00013355-00003372","stream_type":0,"instructions":205},"18422-288-004047CD":{"uid":"18422-288-004047CD","pid":3372,"name":"UPEditorEdge_1.exe","root_target_uid":"00013355-00003372","stream_type":0,"instructions":481},"18422-282-00404291":{"uid":"18422-282-00404291","pid":3372,"name":"UPEditorEdge_1.exe","root_target_uid":"00013355-00003372","stream_type":0,"instructions":268},"18422-40-00405F90":{"uid":"18422-40-00405F90","pid":3372,"name":"UPEditorEdge_1.exe","root_target_uid":"00013355-00003372","stream_type":0,"instructions":781},"18422-16-0040589D":{"uid":"18422-16-0040589D","pid":3372,"name":"UPEditorEdge_1.exe","root_target_uid":"00013355-00003372","stream_type":0,"instructions":136},"00014848-00002184-45829-46-008B2070":{"uid":"00014848-00002184-45829-46-008B2070","pid":2184,"name":"UPEditor.exe","child_target_uid":"00014848-00002184","root_target_uid":"00013355-00003372","stream_type":0,"instructions":460},"00014848-00002184-45829-14-008BB65E":{"uid":"00014848-00002184-45829-14-008BB65E","pid":2184,"name":"UPEditor.exe","child_target_uid":"00014848-00002184","root_target_uid":"00013355-00003372","stream_type":0,"instructions":134},"00014848-00002184-45829-166-008B1F30":{"uid":"00014848-00002184-45829-166-008B1F30","pid":2184,"name":"UPEditor.exe","child_target_uid":"00014848-00002184","root_target_uid":"00013355-00003372","stream_type":0,"instructions":105},"00014848-00002184-45829-229-008B9444":{"uid":"00014848-00002184-45829-229-008B9444","pid":2184,"name":"UPEditor.exe","child_target_uid":"00014848-00002184","root_target_uid":"00013355-00003372","stream_type":0,"instructions":109},"00014848-00002184-45829-10-008B6F32":{"uid":"00014848-00002184-45829-10-008B6F32","pid":2184,"name":"UPEditor.exe","child_target_uid":"00014848-00002184","root_target_uid":"00013355-00003372","stream_type":0,"instructions":148},"00015446-00002584-53585-163-00F09F62":{"uid":"00015446-00002584-53585-163-00F09F62","pid":2584,"name":"UPService.exe","child_target_uid":"00015446-00002584","root_target_uid":"00013355-00003372","stream_type":0,"instructions":20},"00015446-00002584-53585-270-00F4B3F1":{"uid":"00015446-00002584-53585-270-00F4B3F1","pid":2584,"name":"UPService.exe","child_target_uid":"00015446-00002584","root_target_uid":"00013355-00003372","stream_type":0,"instructions":46},"00016014-00002328-57689-2506-001DDE30":{"uid":"00016014-00002328-57689-2506-001DDE30","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":400},"00016014-00002328-57689-2501-001FC4B0":{"uid":"00016014-00002328-57689-2501-001FC4B0","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":628},"00016014-00002328-61821-1252-0023FA80":{"uid":"00016014-00002328-61821-1252-0023FA80","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":684},"00016014-00002328-57689-4654-001919B0":{"uid":"00016014-00002328-57689-4654-001919B0","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":409},"00016014-00002328-57689-3758-00188240":{"uid":"00016014-00002328-57689-3758-00188240","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":271},"00016014-00002328-57689-4643-0018C080":{"uid":"00016014-00002328-57689-4643-0018C080","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":511},"00016014-00002328-57689-3387-00192FD0":{"uid":"00016014-00002328-57689-3387-00192FD0","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":363},"00016014-00002328-57689-4632-00185240":{"uid":"00016014-00002328-57689-4632-00185240","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":368},"00016014-00002328-57689-4037-00186000":{"uid":"00016014-00002328-57689-4037-00186000","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":347},"00016014-00002328-57689-4636-00187580":{"uid":"00016014-00002328-57689-4636-00187580","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":262},"00016014-00002328-61821-1247-00243030":{"uid":"00016014-00002328-61821-1247-00243030","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":717},"00016014-00002328-61821-848-00247420":{"uid":"00016014-00002328-61821-848-00247420","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":533},"00016014-00002328-57689-5678-001C4FD1":{"uid":"00016014-00002328-57689-5678-001C4FD1","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":459},"00016014-00002328-61821-1272-00240600":{"uid":"00016014-00002328-61821-1272-00240600","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":849},"00016014-00002328-61821-359-001CB690":{"uid":"00016014-00002328-61821-359-001CB690","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":544},"00016014-00002328-61821-1053-00248970":{"uid":"00016014-00002328-61821-1053-00248970","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":962},"00016014-00002328-57689-5959-00205480":{"uid":"00016014-00002328-57689-5959-00205480","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":445},"00016014-00002328-57689-3874-0018D960":{"uid":"00016014-00002328-57689-3874-0018D960","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":351},"00016014-00002328-61821-1700-002209C0":{"uid":"00016014-00002328-61821-1700-002209C0","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":436},"00016014-00002328-57689-3870-0018E030":{"uid":"00016014-00002328-57689-3870-0018E030","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":283},"00016014-00002328-57689-2318-001EB2F0":{"uid":"00016014-00002328-57689-2318-001EB2F0","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":278},"00016014-00002328-61821-430-0025B410":{"uid":"00016014-00002328-61821-430-0025B410","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":490},"00016014-00002328-61821-1284-00241390":{"uid":"00016014-00002328-61821-1284-00241390","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":854},"00016014-00002328-57689-5328-00233660":{"uid":"00016014-00002328-57689-5328-00233660","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":108},"00016014-00002328-61821-1039-00247EA0":{"uid":"00016014-00002328-61821-1039-00247EA0","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":455},"00016014-00002328-57689-5663-001C0420":{"uid":"00016014-00002328-57689-5663-001C0420","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":299},"00016014-00002328-57689-1919-001E2050":{"uid":"00016014-00002328-57689-1919-001E2050","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":284},"00016014-00002328-61821-1232-00244490":{"uid":"00016014-00002328-61821-1232-00244490","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":397},"00016014-00002328-57689-2503-001DE880":{"uid":"00016014-00002328-57689-2503-001DE880","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":337},"00016014-00002328-57689-4594-00166BC0":{"uid":"00016014-00002328-57689-4594-00166BC0","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":433},"00016014-00002328-61821-1265-0023B670":{"uid":"00016014-00002328-61821-1265-0023B670","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":355},"00016014-00002328-57689-2035-001EF1B0":{"uid":"00016014-00002328-57689-2035-001EF1B0","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":184},"00016014-00002328-57689-3714-00187E80":{"uid":"00016014-00002328-57689-3714-00187E80","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":250},"00016014-00002328-61821-1434-0022F800":{"uid":"00016014-00002328-61821-1434-0022F800","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":319},"00016014-00002328-61821-1397-00232D90":{"uid":"00016014-00002328-61821-1397-00232D90","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":451},"00016014-00002328-61821-1674-001EF430":{"uid":"00016014-00002328-61821-1674-001EF430","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":159},"00016014-00002328-57689-2330-001EAFF0":{"uid":"00016014-00002328-57689-2330-001EAFF0","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":205},"00016014-00002328-57689-5963-001EA23C":{"uid":"00016014-00002328-57689-5963-001EA23C","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":206},"00016014-00002328-57689-2316-001EB6C0":{"uid":"00016014-00002328-57689-2316-001EB6C0","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":171},"00016014-00002328-57689-4204-00172820":{"uid":"00016014-00002328-57689-4204-00172820","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":163},"00016014-00002328-61821-889-0024DA00":{"uid":"00016014-00002328-61821-889-0024DA00","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":449},"00016014-00002328-61821-818-00250300":{"uid":"00016014-00002328-61821-818-00250300","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":1275},"00016014-00002328-57689-2543-001DDCD0":{"uid":"00016014-00002328-57689-2543-001DDCD0","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":82},"00016014-00002328-57689-5199-00188424":{"uid":"00016014-00002328-57689-5199-00188424","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":109},"00016014-00002328-57689-1744-00207B40":{"uid":"00016014-00002328-57689-1744-00207B40","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":301},"00016014-00002328-57689-2267-001F08B0":{"uid":"00016014-00002328-57689-2267-001F08B0","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":246},"00016014-00002328-61821-1546-00224240":{"uid":"00016014-00002328-61821-1546-00224240","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":485},"00016014-00002328-57689-3198-00195DB0":{"uid":"00016014-00002328-57689-3198-00195DB0","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":285},"00016014-00002328-57689-3196-00196450":{"uid":"00016014-00002328-57689-3196-00196450","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":231},"00016014-00002328-61821-1384-00234980":{"uid":"00016014-00002328-61821-1384-00234980","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":659},"00016014-00002328-61821-1347-00238130":{"uid":"00016014-00002328-61821-1347-00238130","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":647},"00016014-00002328-57689-5327-00235590":{"uid":"00016014-00002328-57689-5327-00235590","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":107},"00016014-00002328-61821-1399-002326F0":{"uid":"00016014-00002328-61821-1399-002326F0","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":258},"00016014-00002328-57689-2266-001F0C60":{"uid":"00016014-00002328-57689-2266-001F0C60","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":207},"00016014-00002328-57689-3666-00187AB0":{"uid":"00016014-00002328-57689-3666-00187AB0","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":144},"00016014-00002328-57689-4224-00171B70":{"uid":"00016014-00002328-57689-4224-00171B70","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":167},"00016014-00002328-57689-3940-0018D4F0":{"uid":"00016014-00002328-57689-3940-0018D4F0","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":144},"00016014-00002328-57689-3920-00192050":{"uid":"00016014-00002328-57689-3920-00192050","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":139},"00016014-00002328-57689-5958-001E958C":{"uid":"00016014-00002328-57689-5958-001E958C","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":214},"00016014-00002328-57689-6588-00244E83":{"uid":"00016014-00002328-57689-6588-00244E83","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":265},"00016014-00002328-57689-6895-002082A0":{"uid":"00016014-00002328-57689-6895-002082A0","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":250},"00016014-00002328-61821-919-0021C880":{"uid":"00016014-00002328-61821-919-0021C880","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":388},"00016014-00002328-61821-1139-00249AD0":{"uid":"00016014-00002328-61821-1139-00249AD0","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":879},"00016014-00002328-61821-1649-00221AD0":{"uid":"00016014-00002328-61821-1649-00221AD0","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":291},"00016014-00002328-57689-4209-001724F0":{"uid":"00016014-00002328-57689-4209-001724F0","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":56},"00016014-00002328-61821-442-001C4920":{"uid":"00016014-00002328-61821-442-001C4920","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":338},"00016014-00002328-57689-2030-001EFBF0":{"uid":"00016014-00002328-57689-2030-001EFBF0","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":102},"00016014-00002328-57689-1932-002059D0":{"uid":"00016014-00002328-57689-1932-002059D0","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":172},"00016014-00002328-57689-2060-001FDB00":{"uid":"00016014-00002328-57689-2060-001FDB00","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":316},"00016014-00002328-61821-1290-00241F60":{"uid":"00016014-00002328-61821-1290-00241F60","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":403},"00016014-00002328-57689-3841-00176C40":{"uid":"00016014-00002328-57689-3841-00176C40","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":162},"00016014-00002328-61821-37-001B1288":{"uid":"00016014-00002328-61821-37-001B1288","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":138},"00016014-00002328-61821-1259-0023CC30":{"uid":"00016014-00002328-61821-1259-0023CC30","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":640},"00016014-00002328-57689-2259-001F13D0":{"uid":"00016014-00002328-57689-2259-001F13D0","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":146},"00016014-00002328-61821-1455-0022E600":{"uid":"00016014-00002328-61821-1455-0022E600","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":166},"00016014-00002328-57689-2474-001DF6D0":{"uid":"00016014-00002328-57689-2474-001DF6D0","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":237},"00016014-00002328-57689-3306-00192D00":{"uid":"00016014-00002328-57689-3306-00192D00","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":169},"00016014-00002328-57689-6586-00244A51":{"uid":"00016014-00002328-57689-6586-00244A51","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":354},"00016014-00002328-61821-1297-00242A00":{"uid":"00016014-00002328-61821-1297-00242A00","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":303},"00016014-00002328-61821-1699-00220F10":{"uid":"00016014-00002328-61821-1699-00220F10","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":203},"00016014-00002328-57689-3391-00188A70":{"uid":"00016014-00002328-57689-3391-00188A70","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":151},"00016014-00002328-57689-6673-0024EC97":{"uid":"00016014-00002328-57689-6673-0024EC97","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":158},"00016014-00002328-61821-1097-001D5B10":{"uid":"00016014-00002328-61821-1097-001D5B10","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":275},"00016014-00002328-61821-1591-00206A10":{"uid":"00016014-00002328-61821-1591-00206A10","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":183},"00016014-00002328-61821-1454-0022E800":{"uid":"00016014-00002328-61821-1454-0022E800","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":123},"00016014-00002328-57689-2241-001F5080":{"uid":"00016014-00002328-57689-2241-001F5080","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":136},"00016014-00002328-57689-2715-001CD5E0":{"uid":"00016014-00002328-57689-2715-001CD5E0","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":137},"00016014-00002328-61821-35-001AA03A":{"uid":"00016014-00002328-61821-35-001AA03A","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":151},"00016014-00002328-61821-468-001B7BF0":{"uid":"00016014-00002328-61821-468-001B7BF0","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":159},"00016014-00002328-61821-431-001C5460":{"uid":"00016014-00002328-61821-431-001C5460","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":151},"00016014-00002328-61821-885-00233960":{"uid":"00016014-00002328-61821-885-00233960","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":244},"00016014-00002328-61821-1042-0023BB20":{"uid":"00016014-00002328-61821-1042-0023BB20","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":401},"00016014-00002328-61821-1439-0022F430":{"uid":"00016014-00002328-61821-1439-0022F430","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":265},"00016014-00002328-61821-1644-00221ED0":{"uid":"00016014-00002328-61821-1644-00221ED0","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":160},"00016014-00002328-57689-1943-00204400":{"uid":"00016014-00002328-57689-1943-00204400","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":257},"00016014-00002328-57689-2262-001F0F70":{"uid":"00016014-00002328-57689-2262-001F0F70","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":104},"00016014-00002328-57689-2686-001CEED0":{"uid":"00016014-00002328-57689-2686-001CEED0","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":103},"00016014-00002328-57689-2700-001CE7B0":{"uid":"00016014-00002328-57689-2700-001CE7B0","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":74},"00016014-00002328-57689-4783-001A9CCD":{"uid":"00016014-00002328-57689-4783-001A9CCD","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":111},"00016014-00002328-57689-5329-0019260A":{"uid":"00016014-00002328-57689-5329-0019260A","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":109},"00016014-00002328-61821-465-001C3580":{"uid":"00016014-00002328-61821-465-001C3580","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":227},"00016014-00002328-61821-516-001EC470":{"uid":"00016014-00002328-61821-516-001EC470","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":221},"00016014-00002328-61821-510-001B65E0":{"uid":"00016014-00002328-61821-510-001B65E0","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":233},"00016014-00002328-61821-546-001C5F50":{"uid":"00016014-00002328-61821-546-001C5F50","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":215},"00016014-00002328-61821-1041-0023C3E0":{"uid":"00016014-00002328-61821-1041-0023C3E0","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":131},"00016014-00002328-61821-773-002525B0":{"uid":"00016014-00002328-61821-773-002525B0","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":206},"00016014-00002328-61821-1310-00251F70":{"uid":"00016014-00002328-61821-1310-00251F70","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":210},"00016014-00002328-57689-1918-00208570":{"uid":"00016014-00002328-57689-1918-00208570","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":350},"00016014-00002328-57689-1907-002090E0":{"uid":"00016014-00002328-57689-1907-002090E0","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":144},"00016014-00002328-57689-2955-0019C2E0":{"uid":"00016014-00002328-57689-2955-0019C2E0","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":219},"00016014-00002328-57689-3001-0019B220":{"uid":"00016014-00002328-57689-3001-0019B220","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":233},"00016014-00002328-57689-3795-001761B0":{"uid":"00016014-00002328-57689-3795-001761B0","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":202},"00016014-00002328-57689-4541-00163CE0":{"uid":"00016014-00002328-57689-4541-00163CE0","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":134},"00016014-00002328-61821-694-001F2690":{"uid":"00016014-00002328-61821-694-001F2690","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":767},"00016014-00002328-61821-526-001BD2D0":{"uid":"00016014-00002328-61821-526-001BD2D0","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":116},"00016014-00002328-61821-860-0024D410":{"uid":"00016014-00002328-61821-860-0024D410","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":319},"00016014-00002328-61821-1120-001E4F10":{"uid":"00016014-00002328-61821-1120-001E4F10","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":312},"00016014-00002328-61821-845-0024E900":{"uid":"00016014-00002328-61821-845-0024E900","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":195},"00016014-00002328-61821-1182-001E4D00":{"uid":"00016014-00002328-61821-1182-001E4D00","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":199},"00016014-00002328-61821-1281-002424E0":{"uid":"00016014-00002328-61821-1281-002424E0","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":335},"00016014-00002328-61821-1352-002378E0":{"uid":"00016014-00002328-61821-1352-002378E0","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":347},"00016014-00002328-61821-1238-001E2DE0":{"uid":"00016014-00002328-61821-1238-001E2DE0","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":168},"00016014-00002328-61821-1167-0024A670":{"uid":"00016014-00002328-61821-1167-0024A670","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":322},"00016014-00002328-61821-1385-002345A0":{"uid":"00016014-00002328-61821-1385-002345A0","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":318},"00016014-00002328-61821-1277-00241120":{"uid":"00016014-00002328-61821-1277-00241120","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":199},"00016014-00002328-61821-1629-001F3FD0":{"uid":"00016014-00002328-61821-1629-001F3FD0","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":778},"00016014-00002328-57689-1752-001E6D10":{"uid":"00016014-00002328-57689-1752-001E6D10","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":177},"00016014-00002328-57689-2413-001E7510":{"uid":"00016014-00002328-57689-2413-001E7510","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":305},"00016014-00002328-57689-2687-001CE9F0":{"uid":"00016014-00002328-57689-2687-001CE9F0","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":173},"00016014-00002328-57689-3664-00179D40":{"uid":"00016014-00002328-57689-3664-00179D40","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":101},"00016014-00002328-57689-3717-0018A8B0":{"uid":"00016014-00002328-57689-3717-0018A8B0","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":177},"00016014-00002328-57689-6668-0024E232":{"uid":"00016014-00002328-57689-6668-0024E232","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":308},"00016014-00002328-61821-1005-00252260":{"uid":"00016014-00002328-61821-1005-00252260","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":164},"00016014-00002328-61821-1081-0022BB00":{"uid":"00016014-00002328-61821-1081-0022BB00","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":635},"00016014-00002328-61821-811-00251960":{"uid":"00016014-00002328-61821-811-00251960","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":270},"00016014-00002328-61821-839-0024F7C0":{"uid":"00016014-00002328-61821-839-0024F7C0","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":160},"00016014-00002328-61821-1032-0023ADB0":{"uid":"00016014-00002328-61821-1032-0023ADB0","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":653},"00016014-00002328-61821-1647-00205DB0":{"uid":"00016014-00002328-61821-1647-00205DB0","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":138},"00016014-00002328-61821-1687-001CF1B0":{"uid":"00016014-00002328-61821-1687-001CF1B0","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":275},"00016014-00002328-61821-1666-002215C0":{"uid":"00016014-00002328-61821-1666-002215C0","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":83},"00016014-00002328-57689-2265-001F07B0":{"uid":"00016014-00002328-57689-2265-001F07B0","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":89},"00016014-00002328-57689-2504-001DE4F0":{"uid":"00016014-00002328-57689-2504-001DE4F0","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":257},"00016014-00002328-57689-2401-001E7890":{"uid":"00016014-00002328-57689-2401-001E7890","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":281},"00016014-00002328-57689-3194-00196EB0":{"uid":"00016014-00002328-57689-3194-00196EB0","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":145},"00016014-00002328-57689-3214-0018F2D0":{"uid":"00016014-00002328-57689-3214-0018F2D0","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":664},"00016014-00002328-57689-3399-0017AB90":{"uid":"00016014-00002328-57689-3399-0017AB90","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":664},"00016014-00002328-57689-3204-00195870":{"uid":"00016014-00002328-57689-3204-00195870","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":87},"00016014-00002328-57689-4086-00183480":{"uid":"00016014-00002328-57689-4086-00183480","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":664},"00016014-00002328-57689-4008-00189A00":{"uid":"00016014-00002328-57689-4008-00189A00","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":664},"00016014-00002328-57689-4920-00165B5B":{"uid":"00016014-00002328-57689-4920-00165B5B","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":199},"00016014-00002328-57689-5756-001CF065":{"uid":"00016014-00002328-57689-5756-001CF065","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":43},"00016014-00002328-57689-6748-0025A517":{"uid":"00016014-00002328-57689-6748-0025A517","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":271},"00016014-00002328-61821-696-001D2290":{"uid":"00016014-00002328-61821-696-001D2290","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":511},"00016014-00002328-61821-918-0023DDD0":{"uid":"00016014-00002328-61821-918-0023DDD0","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":103},"00016014-00002328-61821-1022-0024B460":{"uid":"00016014-00002328-61821-1022-0024B460","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":548},"00016014-00002328-61821-1210-00246FC0":{"uid":"00016014-00002328-61821-1210-00246FC0","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":124},"00016014-00002328-61821-1264-00240440":{"uid":"00016014-00002328-61821-1264-00240440","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":123},"00016014-00002328-61821-1410-00232098":{"uid":"00016014-00002328-61821-1410-00232098","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":125},"00016014-00002328-61821-1716-00220910":{"uid":"00016014-00002328-61821-1716-00220910","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":59},"00016014-00002328-61821-1689-001D3FD0":{"uid":"00016014-00002328-61821-1689-001D3FD0","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":103},"00016014-00002328-57689-1935-00204CC0":{"uid":"00016014-00002328-57689-1935-00204CC0","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":512},"00016014-00002328-57689-2714-001CD780":{"uid":"00016014-00002328-57689-2714-001CD780","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":73},"00016014-00002328-57689-2723-001CA1B0":{"uid":"00016014-00002328-57689-2723-001CA1B0","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":109},"00016014-00002328-57689-2828-001BF520":{"uid":"00016014-00002328-57689-2828-001BF520","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":109},"00016014-00002328-57689-2376-001E06E0":{"uid":"00016014-00002328-57689-2376-001E06E0","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":510},"00016014-00002328-57689-3197-00196250":{"uid":"00016014-00002328-57689-3197-00196250","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":110},"00016014-00002328-57689-4664-0019A7A0":{"uid":"00016014-00002328-57689-4664-0019A7A0","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":73},"00016014-00002328-57689-4033-00186BA0":{"uid":"00016014-00002328-57689-4033-00186BA0","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":112},"00016014-00002328-57689-4441-0016A650":{"uid":"00016014-00002328-57689-4441-0016A650","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":558},"00016014-00002328-57689-4223-00171770":{"uid":"00016014-00002328-57689-4223-00171770","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":118},"00016014-00002328-57689-3851-00176A20":{"uid":"00016014-00002328-57689-3851-00176A20","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":113},"00016014-00002328-57689-4956-00173422":{"uid":"00016014-00002328-57689-4956-00173422","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":56},"00016014-00002328-57689-4946-00172F70":{"uid":"00016014-00002328-57689-4946-00172F70","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":69},"00016014-00002328-57689-4964-001649CA":{"uid":"00016014-00002328-57689-4964-001649CA","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":25},"00016014-00002328-61821-303-001BC830":{"uid":"00016014-00002328-61821-303-001BC830","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":75},"00016014-00002328-61821-651-001F2B00":{"uid":"00016014-00002328-61821-651-001F2B00","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":453},"00016014-00002328-61821-520-001C45B0":{"uid":"00016014-00002328-61821-520-001C45B0","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":68},"00016014-00002328-61821-508-001B5E40":{"uid":"00016014-00002328-61821-508-001B5E40","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":168},"00016014-00002328-61821-905-0024C870":{"uid":"00016014-00002328-61821-905-0024C870","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":441},"00016014-00002328-61821-983-0021D3C0":{"uid":"00016014-00002328-61821-983-0021D3C0","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":178},"00016014-00002328-61821-1341-0023A050":{"uid":"00016014-00002328-61821-1341-0023A050","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":439},"00016014-00002328-61821-1440-001B8530":{"uid":"00016014-00002328-61821-1440-001B8530","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":157},"00016014-00002328-61821-1376-00235AE0":{"uid":"00016014-00002328-61821-1376-00235AE0","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":402},"00016014-00002328-61821-1646-00221E00":{"uid":"00016014-00002328-61821-1646-00221E00","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":44},"00016014-00002328-61821-1696-002211A0":{"uid":"00016014-00002328-61821-1696-002211A0","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":88},"00016014-00002328-57689-2029-001FF980":{"uid":"00016014-00002328-57689-2029-001FF980","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":152},"00016014-00002328-57689-2264-001F0B90":{"uid":"00016014-00002328-57689-2264-001F0B90","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":69},"00016014-00002328-57689-2807-001E5B50":{"uid":"00016014-00002328-57689-2807-001E5B50","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":428},"00016014-00002328-57689-3482-00179EB0":{"uid":"00016014-00002328-57689-3482-00179EB0","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":83},"00016014-00002328-57689-3485-00179FE0":{"uid":"00016014-00002328-57689-3485-00179FE0","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":90},"00016014-00002328-57689-3244-00192810":{"uid":"00016014-00002328-57689-3244-00192810","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":90},"00016014-00002328-57689-3526-00175280":{"uid":"00016014-00002328-57689-3526-00175280","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":77},"00016014-00002328-57689-3937-0018D7C0":{"uid":"00016014-00002328-57689-3937-0018D7C0","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":41},"00016014-00002328-57689-6927-001C5BB0":{"uid":"00016014-00002328-57689-6927-001C5BB0","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":198},"00016014-00002328-57689-6581-002441F7":{"uid":"00016014-00002328-57689-6581-002441F7","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":165},"00016014-00002328-57689-6449-0022E530":{"uid":"00016014-00002328-57689-6449-0022E530","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":78},"00016014-00002328-57689-6589-00243FD0":{"uid":"00016014-00002328-57689-6589-00243FD0","pid":2328,"name":"UPSecurityInput.exe","child_target_uid":"00016014-00002328","root_target_uid":"00013355-00003372","stream_type":0,"instructions":165},"00017695-00002956-65396-7-013E64E0":{"uid":"00017695-00002956-65396-7-013E64E0","pid":2956,"name":"certutil.exe","child_target_uid":"00017695-00002956","root_target_uid":"00013355-00003372","stream_type":0,"instructions":2006},"00017695-00002956-65396-43-013E9760":{"uid":"00017695-00002956-65396-43-013E9760","pid":2956,"name":"certutil.exe","child_target_uid":"00017695-00002956","root_target_uid":"00013355-00003372","stream_type":0,"instructions":372},"00017695-00002956-65396-78-013EC130":{"uid":"00017695-00002956-65396-78-013EC130","pid":2956,"name":"certutil.exe","child_target_uid":"00017695-00002956","root_target_uid":"00013355-00003372","stream_type":0,"instructions":1022},"00017695-00002956-65396-230-013E5C00":{"uid":"00017695-00002956-65396-230-013E5C00","pid":2956,"name":"certutil.exe","child_target_uid":"00017695-00002956","root_target_uid":"00013355-00003372","stream_type":0,"instructions":327},"00017695-00002956-65396-60-013E84C0":{"uid":"00017695-00002956-65396-60-013E84C0","pid":2956,"name":"certutil.exe","child_target_uid":"00017695-00002956","root_target_uid":"00013355-00003372","stream_type":0,"instructions":216},"00017695-00002956-65396-142-013E1DD0":{"uid":"00017695-00002956-65396-142-013E1DD0","pid":2956,"name":"certutil.exe","child_target_uid":"00017695-00002956","root_target_uid":"00013355-00003372","stream_type":0,"instructions":408},"00017695-00002956-65396-59-013E8B30":{"uid":"00017695-00002956-65396-59-013E8B30","pid":2956,"name":"certutil.exe","child_target_uid":"00017695-00002956","root_target_uid":"00013355-00003372","stream_type":0,"instructions":214},"00017695-00002956-65396-48-013E9450":{"uid":"00017695-00002956-65396-48-013E9450","pid":2956,"name":"certutil.exe","child_target_uid":"00017695-00002956","root_target_uid":"00013355-00003372","stream_type":0,"instructions":187},"00017695-00002956-65396-47-013E9EF0":{"uid":"00017695-00002956-65396-47-013E9EF0","pid":2956,"name":"certutil.exe","child_target_uid":"00017695-00002956","root_target_uid":"00013355-00003372","stream_type":0,"instructions":181},"00017695-00002956-65396-61-013E89C0":{"uid":"00017695-00002956-65396-61-013E89C0","pid":2956,"name":"certutil.exe","child_target_uid":"00017695-00002956","root_target_uid":"00013355-00003372","stream_type":0,"instructions":183},"00017695-00002956-65396-163-013E3DD0":{"uid":"00017695-00002956-65396-163-013E3DD0","pid":2956,"name":"certutil.exe","child_target_uid":"00017695-00002956","root_target_uid":"00013355-00003372","stream_type":0,"instructions":488},"00017695-00002956-65396-200-013E4750":{"uid":"00017695-00002956-65396-200-013E4750","pid":2956,"name":"certutil.exe","child_target_uid":"00017695-00002956","root_target_uid":"00013355-00003372","stream_type":0,"instructions":322},"00017695-00002956-65396-53-013E8ED0":{"uid":"00017695-00002956-65396-53-013E8ED0","pid":2956,"name":"certutil.exe","child_target_uid":"00017695-00002956","root_target_uid":"00013355-00003372","stream_type":0,"instructions":127},"00017695-00002956-65396-45-013E9D80":{"uid":"00017695-00002956-65396-45-013E9D80","pid":2956,"name":"certutil.exe","child_target_uid":"00017695-00002956","root_target_uid":"00013355-00003372","stream_type":0,"instructions":122},"00017695-00002956-65396-306-013EE980":{"uid":"00017695-00002956-65396-306-013EE980","pid":2956,"name":"certutil.exe","child_target_uid":"00017695-00002956","root_target_uid":"00013355-00003372","stream_type":0,"instructions":207},"00017695-00002956-65396-339-013EC2A0":{"uid":"00017695-00002956-65396-339-013EC2A0","pid":2956,"name":"certutil.exe","child_target_uid":"00017695-00002956","root_target_uid":"00013355-00003372","stream_type":0,"instructions":171},"00017695-00002956-65396-174-013E16A0":{"uid":"00017695-00002956-65396-174-013E16A0","pid":2956,"name":"certutil.exe","child_target_uid":"00017695-00002956","root_target_uid":"00013355-00003372","stream_type":0,"instructions":368},"00017695-00002956-65396-317-013EE170":{"uid":"00017695-00002956-65396-317-013EE170","pid":2956,"name":"certutil.exe","child_target_uid":"00017695-00002956","root_target_uid":"00013355-00003372","stream_type":0,"instructions":201},"00017695-00002956-65396-169-013E2280":{"uid":"00017695-00002956-65396-169-013E2280","pid":2956,"name":"certutil.exe","child_target_uid":"00017695-00002956","root_target_uid":"00013355-00003372","stream_type":0,"instructions":253},"00017695-00002956-65396-332-013EE390":{"uid":"00017695-00002956-65396-332-013EE390","pid":2956,"name":"certutil.exe","child_target_uid":"00017695-00002956","root_target_uid":"00013355-00003372","stream_type":0,"instructions":194},"00017695-00002956-65396-293-013EEF30":{"uid":"00017695-00002956-65396-293-013EEF30","pid":2956,"name":"certutil.exe","child_target_uid":"00017695-00002956","root_target_uid":"00013355-00003372","stream_type":0,"instructions":170},"00017695-00002956-65396-54-013E8DA0":{"uid":"00017695-00002956-65396-54-013E8DA0","pid":2956,"name":"certutil.exe","child_target_uid":"00017695-00002956","root_target_uid":"00013355-00003372","stream_type":0,"instructions":111},"00017695-00002956-65396-44-013E9130":{"uid":"00017695-00002956-65396-44-013E9130","pid":2956,"name":"certutil.exe","child_target_uid":"00017695-00002956","root_target_uid":"00013355-00003372","stream_type":0,"instructions":106},"00017695-00002956-65396-38-013E61C0":{"uid":"00017695-00002956-65396-38-013E61C0","pid":2956,"name":"certutil.exe","child_target_uid":"00017695-00002956","root_target_uid":"00013355-00003372","stream_type":0,"instructions":234},"00017695-00002956-65396-160-013E2F60":{"uid":"00017695-00002956-65396-160-013E2F60","pid":2956,"name":"certutil.exe","child_target_uid":"00017695-00002956","root_target_uid":"00013355-00003372","stream_type":0,"instructions":252},"00017695-00002956-65396-144-013E3380":{"uid":"00017695-00002956-65396-144-013E3380","pid":2956,"name":"certutil.exe","child_target_uid":"00017695-00002956","root_target_uid":"00013355-00003372","stream_type":0,"instructions":302},"00017695-00002956-65396-331-013EDD70":{"uid":"00017695-00002956-65396-331-013EDD70","pid":2956,"name":"certutil.exe","child_target_uid":"00017695-00002956","root_target_uid":"00013355-00003372","stream_type":0,"instructions":167},"00017695-00002956-65396-110-013EA580":{"uid":"00017695-00002956-65396-110-013EA580","pid":2956,"name":"certutil.exe","child_target_uid":"00017695-00002956","root_target_uid":"00013355-00003372","stream_type":0,"instructions":163},"00017695-00002956-65396-286-013EF320":{"uid":"00017695-00002956-65396-286-013EF320","pid":2956,"name":"certutil.exe","child_target_uid":"00017695-00002956","root_target_uid":"00013355-00003372","stream_type":0,"instructions":139},"00017695-00002956-65396-16-013ED070":{"uid":"00017695-00002956-65396-16-013ED070","pid":2956,"name":"certutil.exe","child_target_uid":"00017695-00002956","root_target_uid":"00013355-00003372","stream_type":0,"instructions":178},"00017695-00002956-65396-49-013E9350":{"uid":"00017695-00002956-65396-49-013E9350","pid":2956,"name":"certutil.exe","child_target_uid":"00017695-00002956","root_target_uid":"00013355-00003372","stream_type":0,"instructions":97},"00017695-00002956-65396-57-013E9670":{"uid":"00017695-00002956-65396-57-013E9670","pid":2956,"name":"certutil.exe","child_target_uid":"00017695-00002956","root_target_uid":"00013355-00003372","stream_type":0,"instructions":90},"00017695-00002956-65396-128-013E4C50":{"uid":"00017695-00002956-65396-128-013E4C50","pid":2956,"name":"certutil.exe","child_target_uid":"00017695-00002956","root_target_uid":"00013355-00003372","stream_type":0,"instructions":199},"00017695-00002956-65396-227-013E5500":{"uid":"00017695-00002956-65396-227-013E5500","pid":2956,"name":"certutil.exe","child_target_uid":"00017695-00002956","root_target_uid":"00013355-00003372","stream_type":0,"instructions":238},"00017695-00002956-65396-162-013E13D0":{"uid":"00017695-00002956-65396-162-013E13D0","pid":2956,"name":"certutil.exe","child_target_uid":"00017695-00002956","root_target_uid":"00013355-00003372","stream_type":0,"instructions":222},"00017695-00002956-65396-319-013ED320":{"uid":"00017695-00002956-65396-319-013ED320","pid":2956,"name":"certutil.exe","child_target_uid":"00017695-00002956","root_target_uid":"00013355-00003372","stream_type":0,"instructions":100},"00017695-00002956-65396-52-013E9040":{"uid":"00017695-00002956-65396-52-013E9040","pid":2956,"name":"certutil.exe","child_target_uid":"00017695-00002956","root_target_uid":"00013355-00003372","stream_type":0,"instructions":90},"00017695-00002956-65396-50-013E9BB0":{"uid":"00017695-00002956-65396-50-013E9BB0","pid":2956,"name":"certutil.exe","child_target_uid":"00017695-00002956","root_target_uid":"00013355-00003372","stream_type":0,"instructions":90},"00017695-00002956-65396-51-013E9260":{"uid":"00017695-00002956-65396-51-013E9260","pid":2956,"name":"certutil.exe","child_target_uid":"00017695-00002956","root_target_uid":"00013355-00003372","stream_type":0,"instructions":90},"00017695-00002956-65396-316-013ED980":{"uid":"00017695-00002956-65396-316-013ED980","pid":2956,"name":"certutil.exe","child_target_uid":"00017695-00002956","root_target_uid":"00013355-00003372","stream_type":0,"instructions":150},"00017695-00002956-65396-340-013EA200":{"uid":"00017695-00002956-65396-340-013EA200","pid":2956,"name":"certutil.exe","child_target_uid":"00017695-00002956","root_target_uid":"00013355-00003372","stream_type":0,"instructions":105},"00017695-00002956-65396-74-013ED560":{"uid":"00017695-00002956-65396-74-013ED560","pid":2956,"name":"certutil.exe","child_target_uid":"00017695-00002956","root_target_uid":"00013355-00003372","stream_type":0,"instructions":150},"00017695-00002956-65396-170-013E3730":{"uid":"00017695-00002956-65396-170-013E3730","pid":2956,"name":"certutil.exe","child_target_uid":"00017695-00002956","root_target_uid":"00013355-00003372","stream_type":0,"instructions":285},"00017695-00002956-65396-180-013E2890":{"uid":"00017695-00002956-65396-180-013E2890","pid":2956,"name":"certutil.exe","child_target_uid":"00017695-00002956","root_target_uid":"00013355-00003372","stream_type":0,"instructions":212},"00017695-00002956-65396-75-013EFAE0":{"uid":"00017695-00002956-65396-75-013EFAE0","pid":2956,"name":"certutil.exe","child_target_uid":"00017695-00002956","root_target_uid":"00013355-00003372","stream_type":0,"instructions":193},"00017695-00002956-65396-130-013E6010":{"uid":"00017695-00002956-65396-130-013E6010","pid":2956,"name":"certutil.exe","child_target_uid":"00017695-00002956","root_target_uid":"00013355-00003372","stream_type":0,"instructions":142},"00017695-00002956-65396-122-013E45C0":{"uid":"00017695-00002956-65396-122-013E45C0","pid":2956,"name":"certutil.exe","child_target_uid":"00017695-00002956","root_target_uid":"00013355-00003372","stream_type":0,"instructions":136},"00017695-00002956-65396-334-013ED820":{"uid":"00017695-00002956-65396-334-013ED820","pid":2956,"name":"certutil.exe","child_target_uid":"00017695-00002956","root_target_uid":"00013355-00003372","stream_type":0,"instructions":111},"00017695-00002956-65396-181-013E11C0":{"uid":"00017695-00002956-65396-181-013E11C0","pid":2956,"name":"certutil.exe","child_target_uid":"00017695-00002956","root_target_uid":"00013355-00003372","stream_type":0,"instructions":174},"00017695-00002956-65396-159-013E2D90":{"uid":"00017695-00002956-65396-159-013E2D90","pid":2956,"name":"certutil.exe","child_target_uid":"00017695-00002956","root_target_uid":"00013355-00003372","stream_type":0,"instructions":144},"00017695-00002956-65396-55-013E9CA0":{"uid":"00017695-00002956-65396-55-013E9CA0","pid":2956,"name":"certutil.exe","child_target_uid":"00017695-00002956","root_target_uid":"00013355-00003372","stream_type":0,"instructions":83},"00017695-00002956-65396-56-013E8A50":{"uid":"00017695-00002956-65396-56-013E8A50","pid":2956,"name":"certutil.exe","child_target_uid":"00017695-00002956","root_target_uid":"00013355-00003372","stream_type":0,"instructions":83},"00017695-00002956-65396-58-013E88E0":{"uid":"00017695-00002956-65396-58-013E88E0","pid":2956,"name":"certutil.exe","child_target_uid":"00017695-00002956","root_target_uid":"00013355-00003372","stream_type":0,"instructions":83},"00017695-00002956-65396-46-013EA0F0":{"uid":"00017695-00002956-65396-46-013EA0F0","pid":2956,"name":"certutil.exe","child_target_uid":"00017695-00002956","root_target_uid":"00013355-00003372","stream_type":0,"instructions":83},"00017695-00002956-65396-179-013E1000":{"uid":"00017695-00002956-65396-179-013E1000","pid":2956,"name":"certutil.exe","child_target_uid":"00017695-00002956","root_target_uid":"00013355-00003372","stream_type":0,"instructions":157},"00017695-00002956-65396-305-013EEC10":{"uid":"00017695-00002956-65396-305-013EEC10","pid":2956,"name":"certutil.exe","child_target_uid":"00017695-00002956","root_target_uid":"00013355-00003372","stream_type":0,"instructions":109},"00017695-00002956-65396-105-013EBE80":{"uid":"00017695-00002956-65396-105-013EBE80","pid":2956,"name":"certutil.exe","child_target_uid":"00017695-00002956","root_target_uid":"00013355-00003372","stream_type":0,"instructions":125},"00017695-00002956-65396-312-013EE820":{"uid":"00017695-00002956-65396-312-013EE820","pid":2956,"name":"certutil.exe","child_target_uid":"00017695-00002956","root_target_uid":"00013355-00003372","stream_type":0,"instructions":127},"00017695-00002956-65396-70-013EB930":{"uid":"00017695-00002956-65396-70-013EB930","pid":2956,"name":"certutil.exe","child_target_uid":"00017695-00002956","root_target_uid":"00013355-00003372","stream_type":0,"instructions":160},"00017695-00002956-65396-296-013EE730":{"uid":"00017695-00002956-65396-296-013EE730","pid":2956,"name":"certutil.exe","child_target_uid":"00017695-00002956","root_target_uid":"00013355-00003372","stream_type":0,"instructions":83},"00017695-00002956-65396-228-013E57D0":{"uid":"00017695-00002956-65396-228-013E57D0","pid":2956,"name":"certutil.exe","child_target_uid":"00017695-00002956","root_target_uid":"00013355-00003372","stream_type":0,"instructions":174},"00017695-00002956-65396-214-013E4B40":{"uid":"00017695-00002956-65396-214-013E4B40","pid":2956,"name":"certutil.exe","child_target_uid":"00017695-00002956","root_target_uid":"00013355-00003372","stream_type":0,"instructions":105},"00017695-00002956-65396-80-013EB2C0":{"uid":"00017695-00002956-65396-80-013EB2C0","pid":2956,"name":"certutil.exe","child_target_uid":"00017695-00002956","root_target_uid":"00013355-00003372","stream_type":0,"instructions":131},"00017695-00002956-65396-301-013EF210":{"uid":"00017695-00002956-65396-301-013EF210","pid":2956,"name":"certutil.exe","child_target_uid":"00017695-00002956","root_target_uid":"00013355-00003372","stream_type":0,"instructions":91},"00017695-00002956-65396-182-013E1B40":{"uid":"00017695-00002956-65396-182-013E1B40","pid":2956,"name":"certutil.exe","child_target_uid":"00017695-00002956","root_target_uid":"00013355-00003372","stream_type":0,"instructions":205},"00017695-00002956-65396-250-013E50D0":{"uid":"00017695-00002956-65396-250-013E50D0","pid":2956,"name":"certutil.exe","child_target_uid":"00017695-00002956","root_target_uid":"00013355-00003372","stream_type":0,"instructions":107},"00017695-00002956-65396-328-013ED6F0":{"uid":"00017695-00002956-65396-328-013ED6F0","pid":2956,"name":"certutil.exe","child_target_uid":"00017695-00002956","root_target_uid":"00013355-00003372","stream_type":0,"instructions":110},"00017695-00002956-65396-302-013EC950":{"uid":"00017695-00002956-65396-302-013EC950","pid":2956,"name":"certutil.exe","child_target_uid":"00017695-00002956","root_target_uid":"00013355-00003372","stream_type":0,"instructions":169},"00017695-00002956-65396-171-013E2B20":{"uid":"00017695-00002956-65396-171-013E2B20","pid":2956,"name":"certutil.exe","child_target_uid":"00017695-00002956","root_target_uid":"00013355-00003372","stream_type":0,"instructions":153},"00017695-00002956-65396-188-013E26A0":{"uid":"00017695-00002956-65396-188-013E26A0","pid":2956,"name":"certutil.exe","child_target_uid":"00017695-00002956","root_target_uid":"00013355-00003372","stream_type":0,"instructions":153},"00017695-00002956-65396-176-013E3270":{"uid":"00017695-00002956-65396-176-013E3270","pid":2956,"name":"certutil.exe","child_target_uid":"00017695-00002956","root_target_uid":"00013355-00003372","stream_type":0,"instructions":88},"00017695-00002956-65396-289-013EC4B0":{"uid":"00017695-00002956-65396-289-013EC4B0","pid":2956,"name":"certutil.exe","child_target_uid":"00017695-00002956","root_target_uid":"00013355-00003372","stream_type":0,"instructions":44},"00017695-00002956-65396-77-013EFE70":{"uid":"00017695-00002956-65396-77-013EFE70","pid":2956,"name":"certutil.exe","child_target_uid":"00017695-00002956","root_target_uid":"00013355-00003372","stream_type":0,"instructions":72},"00017695-00002956-65396-297-013EEE60":{"uid":"00017695-00002956-65396-297-013EEE60","pid":2956,"name":"certutil.exe","child_target_uid":"00017695-00002956","root_target_uid":"00013355-00003372","stream_type":0,"instructions":71},"00017695-00002956-65396-242-013E5440":{"uid":"00017695-00002956-65396-242-013E5440","pid":2956,"name":"certutil.exe","child_target_uid":"00017695-00002956","root_target_uid":"00013355-00003372","stream_type":0,"instructions":67},"00017695-00002956-65396-321-013ECF90":{"uid":"00017695-00002956-65396-321-013ECF90","pid":2956,"name":"certutil.exe","child_target_uid":"00017695-00002956","root_target_uid":"00013355-00003372","stream_type":0,"instructions":55},"00017695-00002956-65396-298-013EEDA0":{"uid":"00017695-00002956-65396-298-013EEDA0","pid":2956,"name":"certutil.exe","child_target_uid":"00017695-00002956","root_target_uid":"00013355-00003372","stream_type":0,"instructions":71},"00017695-00002956-65396-314-013EDC40":{"uid":"00017695-00002956-65396-314-013EDC40","pid":2956,"name":"certutil.exe","child_target_uid":"00017695-00002956","root_target_uid":"00013355-00003372","stream_type":0,"instructions":57},"00017695-00002956-65396-103-013EBC20":{"uid":"00017695-00002956-65396-103-013EBC20","pid":2956,"name":"certutil.exe","child_target_uid":"00017695-00002956","root_target_uid":"00013355-00003372","stream_type":0,"instructions":162},"00017695-00002956-65396-154-013E25C0":{"uid":"00017695-00002956-65396-154-013E25C0","pid":2956,"name":"certutil.exe","child_target_uid":"00017695-00002956","root_target_uid":"00013355-00003372","stream_type":0,"instructions":77},"00017695-00002956-65396-238-013E4FC0":{"uid":"00017695-00002956-65396-238-013E4FC0","pid":2956,"name":"certutil.exe","child_target_uid":"00017695-00002956","root_target_uid":"00013355-00003372","stream_type":0,"instructions":98},"00017695-00002956-65396-288-013ECD30":{"uid":"00017695-00002956-65396-288-013ECD30","pid":2956,"name":"certutil.exe","child_target_uid":"00017695-00002956","root_target_uid":"00013355-00003372","stream_type":0,"instructions":43},"00016018-00002340-37839-163-00F09F62":{"uid":"00016018-00002340-37839-163-00F09F62","pid":2340,"name":"UPService.exe","child_target_uid":"00016018-00002340","root_target_uid":"00013355-00003372","stream_type":0,"instructions":20},"00016018-00002340-37839-270-00F4B3F1":{"uid":"00016018-00002340-37839-270-00F4B3F1","pid":2340,"name":"UPService.exe","child_target_uid":"00016018-00002340","root_target_uid":"00013355-00003372","stream_type":0,"instructions":46},"00018812-00003184-8830-20-00BC6926":{"uid":"00018812-00003184-8830-20-00BC6926","pid":3184,"name":"certmgr.exe","child_target_uid":"00018812-00003184","root_target_uid":"00013355-00003372","stream_type":0,"instructions":448},"00018812-00003184-8830-65-00BC5DA9":{"uid":"00018812-00003184-8830-65-00BC5DA9","pid":3184,"name":"certmgr.exe","child_target_uid":"00018812-00003184","root_target_uid":"00013355-00003372","stream_type":0,"instructions":152},"00018812-00003184-8830-40-00BC6679":{"uid":"00018812-00003184-8830-40-00BC6679","pid":3184,"name":"certmgr.exe","child_target_uid":"00018812-00003184","root_target_uid":"00013355-00003372","stream_type":0,"instructions":226},"00018812-00003184-8830-31-00BC71DF":{"uid":"00018812-00003184-8830-31-00BC71DF","pid":3184,"name":"certmgr.exe","child_target_uid":"00018812-00003184","root_target_uid":"00013355-00003372","stream_type":0,"instructions":109},"00018812-00003184-8830-88-00BC37FB":{"uid":"00018812-00003184-8830-88-00BC37FB","pid":3184,"name":"certmgr.exe","child_target_uid":"00018812-00003184","root_target_uid":"00013355-00003372","stream_type":0,"instructions":179},"00018812-00003184-8830-29-00BC70EC":{"uid":"00018812-00003184-8830-29-00BC70EC","pid":3184,"name":"certmgr.exe","child_target_uid":"00018812-00003184","root_target_uid":"00013355-00003372","stream_type":0,"instructions":37},"00018812-00003184-8830-30-00BC7053":{"uid":"00018812-00003184-8830-30-00BC7053","pid":3184,"name":"certmgr.exe","child_target_uid":"00018812-00003184","root_target_uid":"00013355-00003372","stream_type":0,"instructions":45},"00018812-00003184-8830-25-00BC785C":{"uid":"00018812-00003184-8830-25-00BC785C","pid":3184,"name":"certmgr.exe","child_target_uid":"00018812-00003184","root_target_uid":"00013355-00003372","stream_type":0,"instructions":55},"00019421-00002444-13514-20-011C6926":{"uid":"00019421-00002444-13514-20-011C6926","pid":2444,"name":"certmgr.exe","child_target_uid":"00019421-00002444","root_target_uid":"00013355-00003372","stream_type":0,"instructions":448},"00019421-00002444-13514-65-011C5DA9":{"uid":"00019421-00002444-13514-65-011C5DA9","pid":2444,"name":"certmgr.exe","child_target_uid":"00019421-00002444","root_target_uid":"00013355-00003372","stream_type":0,"instructions":152},"00019421-00002444-13514-40-011C6679":{"uid":"00019421-00002444-13514-40-011C6679","pid":2444,"name":"certmgr.exe","child_target_uid":"00019421-00002444","root_target_uid":"00013355-00003372","stream_type":0,"instructions":226},"00019421-00002444-13514-31-011C71DF":{"uid":"00019421-00002444-13514-31-011C71DF","pid":2444,"name":"certmgr.exe","child_target_uid":"00019421-00002444","root_target_uid":"00013355-00003372","stream_type":0,"instructions":109},"00019421-00002444-13514-88-011C37FB":{"uid":"00019421-00002444-13514-88-011C37FB","pid":2444,"name":"certmgr.exe","child_target_uid":"00019421-00002444","root_target_uid":"00013355-00003372","stream_type":0,"instructions":179},"00019421-00002444-13514-29-011C70EC":{"uid":"00019421-00002444-13514-29-011C70EC","pid":2444,"name":"certmgr.exe","child_target_uid":"00019421-00002444","root_target_uid":"00013355-00003372","stream_type":0,"instructions":37},"00019421-00002444-13514-30-011C7053":{"uid":"00019421-00002444-13514-30-011C7053","pid":2444,"name":"certmgr.exe","child_target_uid":"00019421-00002444","root_target_uid":"00013355-00003372","stream_type":0,"instructions":45},"00019421-00002444-13514-25-011C785C":{"uid":"00019421-00002444-13514-25-011C785C","pid":2444,"name":"certmgr.exe","child_target_uid":"00019421-00002444","root_target_uid":"00013355-00003372","stream_type":0,"instructions":55},"00017017-00001080-44309-503-00EAC550":{"uid":"00017017-00001080-44309-503-00EAC550","pid":1080,"name":"UPService.exe","root_target_uid":"00017017-00001080","stream_type":0,"instructions":419},"00017017-00001080-44309-26-00EBAE3B":{"uid":"00017017-00001080-44309-26-00EBAE3B","pid":1080,"name":"UPService.exe","root_target_uid":"00017017-00001080","stream_type":0,"instructions":137},"00017017-00001080-44309-159-00EAF470":{"uid":"00017017-00001080-44309-159-00EAF470","pid":1080,"name":"UPService.exe","root_target_uid":"00017017-00001080","stream_type":0,"instructions":95},"00017017-00001080-44309-247-00EAC1C0":{"uid":"00017017-00001080-44309-247-00EAC1C0","pid":1080,"name":"UPService.exe","root_target_uid":"00017017-00001080","stream_type":0,"instructions":198},"00017017-00001080-44309-21-00EB6913":{"uid":"00017017-00001080-44309-21-00EB6913","pid":1080,"name":"UPService.exe","root_target_uid":"00017017-00001080","stream_type":0,"instructions":150},"00017017-00001080-44309-407-00EABFD0":{"uid":"00017017-00001080-44309-407-00EABFD0","pid":1080,"name":"UPService.exe","root_target_uid":"00017017-00001080","stream_type":0,"instructions":158},"00017017-00001080-44309-270-00EA84B0":{"uid":"00017017-00001080-44309-270-00EA84B0","pid":1080,"name":"UPService.exe","root_target_uid":"00017017-00001080","stream_type":0,"instructions":302},"00017017-00001080-44309-252-00EA20B0":{"uid":"00017017-00001080-44309-252-00EA20B0","pid":1080,"name":"UPService.exe","root_target_uid":"00017017-00001080","stream_type":0,"instructions":319},"00017017-00001080-44309-458-00EA40A0":{"uid":"00017017-00001080-44309-458-00EA40A0","pid":1080,"name":"UPService.exe","root_target_uid":"00017017-00001080","stream_type":0,"instructions":306},"00017017-00001080-44309-1005-00EB5F42":{"uid":"00017017-00001080-44309-1005-00EB5F42","pid":1080,"name":"UPService.exe","root_target_uid":"00017017-00001080","stream_type":0,"instructions":103},"00017017-00001080-44309-242-00EACD90":{"uid":"00017017-00001080-44309-242-00EACD90","pid":1080,"name":"UPService.exe","root_target_uid":"00017017-00001080","stream_type":0,"instructions":103},"00017017-00001080-57006-270-00F4B3F1":{"uid":"00017017-00001080-57006-270-00F4B3F1","pid":1080,"name":"UPService.exe","root_target_uid":"00017017-00001080","stream_type":0,"instructions":46},"00017017-00001080-57006-163-00F09F62":{"uid":"00017017-00001080-57006-163-00F09F62","pid":1080,"name":"UPService.exe","root_target_uid":"00017017-00001080","stream_type":0,"instructions":20},"00017017-00001080-44309-251-00EA1DE0":{"uid":"00017017-00001080-44309-251-00EA1DE0","pid":1080,"name":"UPService.exe","root_target_uid":"00017017-00001080","stream_type":0,"instructions":195},"16522-1158-0047E67F":{"uid":"16522-1158-0047E67F","file_uid":"1ed617272137d545f0ed49e6e7de5c9670fe155969ff6eeefd9357e476149bdd","child_target_uid":"00016018-00002340","stream_type":2,"instructions":1797},"16522-1176-0047F813":{"uid":"16522-1176-0047F813","file_uid":"1ed617272137d545f0ed49e6e7de5c9670fe155969ff6eeefd9357e476149bdd","child_target_uid":"00016018-00002340","stream_type":2,"instructions":1993},"16522-1240-004820C4":{"uid":"16522-1240-004820C4","file_uid":"1ed617272137d545f0ed49e6e7de5c9670fe155969ff6eeefd9357e476149bdd","child_target_uid":"00016018-00002340","stream_type":2,"instructions":1322},"16522-1078-0047B6C3":{"uid":"16522-1078-0047B6C3","file_uid":"1ed617272137d545f0ed49e6e7de5c9670fe155969ff6eeefd9357e476149bdd","child_target_uid":"00016018-00002340","stream_type":2,"instructions":701},"16522-94-00400000":{"uid":"16522-94-00400000","file_uid":"1ed617272137d545f0ed49e6e7de5c9670fe155969ff6eeefd9357e476149bdd","child_target_uid":"00016018-00002340","stream_type":2,"instructions":390},"16522-106-0046CBCA":{"uid":"16522-106-0046CBCA","file_uid":"1ed617272137d545f0ed49e6e7de5c9670fe155969ff6eeefd9357e476149bdd","child_target_uid":"00016018-00002340","stream_type":2,"instructions":788},"16522-968-00476891":{"uid":"16522-968-00476891","file_uid":"1ed617272137d545f0ed49e6e7de5c9670fe155969ff6eeefd9357e476149bdd","child_target_uid":"00016018-00002340","stream_type":2,"instructions":201},"16522-118-0045BC9D":{"uid":"16522-118-0045BC9D","file_uid":"1ed617272137d545f0ed49e6e7de5c9670fe155969ff6eeefd9357e476149bdd","child_target_uid":"00016018-00002340","stream_type":2,"instructions":282},"16522-795-0046F222":{"uid":"16522-795-0046F222","file_uid":"1ed617272137d545f0ed49e6e7de5c9670fe155969ff6eeefd9357e476149bdd","child_target_uid":"00016018-00002340","stream_type":2,"instructions":956},"16522-144-0045D703":{"uid":"16522-144-0045D703","file_uid":"1ed617272137d545f0ed49e6e7de5c9670fe155969ff6eeefd9357e476149bdd","child_target_uid":"00016018-00002340","stream_type":2,"instructions":803},"16522-160-00469F62":{"uid":"16522-160-00469F62","file_uid":"1ed617272137d545f0ed49e6e7de5c9670fe155969ff6eeefd9357e476149bdd","child_target_uid":"00016018-00002340","stream_type":2,"instructions":20},"16522-886-00472B45":{"uid":"16522-886-00472B45","file_uid":"1ed617272137d545f0ed49e6e7de5c9670fe155969ff6eeefd9357e476149bdd","child_target_uid":"00016018-00002340","stream_type":2,"instructions":556},"16522-310-004AC1A1":{"uid":"16522-310-004AC1A1","file_uid":"1ed617272137d545f0ed49e6e7de5c9670fe155969ff6eeefd9357e476149bdd","child_target_uid":"00016018-00002340","stream_type":2,"instructions":58},"16522-941-00475240":{"uid":"16522-941-00475240","file_uid":"1ed617272137d545f0ed49e6e7de5c9670fe155969ff6eeefd9357e476149bdd","child_target_uid":"00016018-00002340","stream_type":2,"instructions":511},"16522-1263-00483140":{"uid":"16522-1263-00483140","file_uid":"1ed617272137d545f0ed49e6e7de5c9670fe155969ff6eeefd9357e476149bdd","child_target_uid":"00016018-00002340","stream_type":2,"instructions":501},"16522-1-0046A407":{"uid":"16522-1-0046A407","file_uid":"1ed617272137d545f0ed49e6e7de5c9670fe155969ff6eeefd9357e476149bdd","child_target_uid":"00016018-00002340","stream_type":2,"instructions":442},"16522-129-004661FC":{"uid":"16522-129-004661FC","file_uid":"1ed617272137d545f0ed49e6e7de5c9670fe155969ff6eeefd9357e476149bdd","child_target_uid":"00016018-00002340","stream_type":2,"instructions":468},"16522-1062-0047AB02":{"uid":"16522-1062-0047AB02","file_uid":"1ed617272137d545f0ed49e6e7de5c9670fe155969ff6eeefd9357e476149bdd","child_target_uid":"00016018-00002340","stream_type":2,"instructions":417},"16522-910-00473964":{"uid":"16522-910-00473964","file_uid":"1ed617272137d545f0ed49e6e7de5c9670fe155969ff6eeefd9357e476149bdd","child_target_uid":"00016018-00002340","stream_type":2,"instructions":441},"16522-2515-004A746C":{"uid":"16522-2515-004A746C","file_uid":"1ed617272137d545f0ed49e6e7de5c9670fe155969ff6eeefd9357e476149bdd","child_target_uid":"00016018-00002340","stream_type":2,"instructions":421},"16522-2614-004AB420":{"uid":"16522-2614-004AB420","file_uid":"1ed617272137d545f0ed49e6e7de5c9670fe155969ff6eeefd9357e476149bdd","child_target_uid":"00016018-00002340","stream_type":2,"instructions":403},"21797-7-004064E0":{"uid":"21797-7-004064E0","file_uid":"0b936c646770242c4aeca9db1f5cbeb2f90cfe3a32720e0da576680b161cf63e","child_target_uid":"00013355-00003372","stream_type":2,"instructions":2006},"21797-43-00409760":{"uid":"21797-43-00409760","file_uid":"0b936c646770242c4aeca9db1f5cbeb2f90cfe3a32720e0da576680b161cf63e","child_target_uid":"00013355-00003372","stream_type":2,"instructions":372},"21797-6-0041044E":{"uid":"21797-6-0041044E","file_uid":"0b936c646770242c4aeca9db1f5cbeb2f90cfe3a32720e0da576680b161cf63e","child_target_uid":"00013355-00003372","stream_type":2,"instructions":2245},"21797-78-0040C130":{"uid":"21797-78-0040C130","file_uid":"0b936c646770242c4aeca9db1f5cbeb2f90cfe3a32720e0da576680b161cf63e","child_target_uid":"00013355-00003372","stream_type":2,"instructions":1022},"21797-230-00405C00":{"uid":"21797-230-00405C00","file_uid":"0b936c646770242c4aeca9db1f5cbeb2f90cfe3a32720e0da576680b161cf63e","child_target_uid":"00013355-00003372","stream_type":2,"instructions":327},"21797-142-00401DD0":{"uid":"21797-142-00401DD0","file_uid":"0b936c646770242c4aeca9db1f5cbeb2f90cfe3a32720e0da576680b161cf63e","child_target_uid":"00013355-00003372","stream_type":2,"instructions":408},"21797-60-004084C0":{"uid":"21797-60-004084C0","file_uid":"0b936c646770242c4aeca9db1f5cbeb2f90cfe3a32720e0da576680b161cf63e","child_target_uid":"00013355-00003372","stream_type":2,"instructions":216},"21797-59-00408B30":{"uid":"21797-59-00408B30","file_uid":"0b936c646770242c4aeca9db1f5cbeb2f90cfe3a32720e0da576680b161cf63e","child_target_uid":"00013355-00003372","stream_type":2,"instructions":214},"21797-48-00409450":{"uid":"21797-48-00409450","file_uid":"0b936c646770242c4aeca9db1f5cbeb2f90cfe3a32720e0da576680b161cf63e","child_target_uid":"00013355-00003372","stream_type":2,"instructions":187},"21797-47-00409EF0":{"uid":"21797-47-00409EF0","file_uid":"0b936c646770242c4aeca9db1f5cbeb2f90cfe3a32720e0da576680b161cf63e","child_target_uid":"00013355-00003372","stream_type":2,"instructions":181},"21797-61-004089C0":{"uid":"21797-61-004089C0","file_uid":"0b936c646770242c4aeca9db1f5cbeb2f90cfe3a32720e0da576680b161cf63e","child_target_uid":"00013355-00003372","stream_type":2,"instructions":183},"21797-163-00403DD0":{"uid":"21797-163-00403DD0","file_uid":"0b936c646770242c4aeca9db1f5cbeb2f90cfe3a32720e0da576680b161cf63e","child_target_uid":"00013355-00003372","stream_type":2,"instructions":488},"21797-200-00404750":{"uid":"21797-200-00404750","file_uid":"0b936c646770242c4aeca9db1f5cbeb2f90cfe3a32720e0da576680b161cf63e","child_target_uid":"00013355-00003372","stream_type":2,"instructions":322},"21797-465-0040E980":{"uid":"21797-465-0040E980","file_uid":"0b936c646770242c4aeca9db1f5cbeb2f90cfe3a32720e0da576680b161cf63e","child_target_uid":"00013355-00003372","stream_type":2,"instructions":207},"21797-53-00408ED0":{"uid":"21797-53-00408ED0","file_uid":"0b936c646770242c4aeca9db1f5cbeb2f90cfe3a32720e0da576680b161cf63e","child_target_uid":"00013355-00003372","stream_type":2,"instructions":127},"21797-45-00409D80":{"uid":"21797-45-00409D80","file_uid":"0b936c646770242c4aeca9db1f5cbeb2f90cfe3a32720e0da576680b161cf63e","child_target_uid":"00013355-00003372","stream_type":2,"instructions":122},"21797-498-0040C2A0":{"uid":"21797-498-0040C2A0","file_uid":"0b936c646770242c4aeca9db1f5cbeb2f90cfe3a32720e0da576680b161cf63e","child_target_uid":"00013355-00003372","stream_type":2,"instructions":171},"21797-476-0040E170":{"uid":"21797-476-0040E170","file_uid":"0b936c646770242c4aeca9db1f5cbeb2f90cfe3a32720e0da576680b161cf63e","child_target_uid":"00013355-00003372","stream_type":2,"instructions":201},"21797-491-0040E390":{"uid":"21797-491-0040E390","file_uid":"0b936c646770242c4aeca9db1f5cbeb2f90cfe3a32720e0da576680b161cf63e","child_target_uid":"00013355-00003372","stream_type":2,"instructions":194},"21797-174-004016A0":{"uid":"21797-174-004016A0","file_uid":"0b936c646770242c4aeca9db1f5cbeb2f90cfe3a32720e0da576680b161cf63e","child_target_uid":"00013355-00003372","stream_type":2,"instructions":368},"21797-110-0040A580":{"uid":"21797-110-0040A580","file_uid":"0b936c646770242c4aeca9db1f5cbeb2f90cfe3a32720e0da576680b161cf63e","child_target_uid":"00013355-00003372","stream_type":2,"instructions":163},"21797-169-00402280":{"uid":"21797-169-00402280","file_uid":"0b936c646770242c4aeca9db1f5cbeb2f90cfe3a32720e0da576680b161cf63e","child_target_uid":"00013355-00003372","stream_type":2,"instructions":253},"21797-482-0040C6A0":{"uid":"21797-482-0040C6A0","file_uid":"0b936c646770242c4aeca9db1f5cbeb2f90cfe3a32720e0da576680b161cf63e","child_target_uid":"00013355-00003372","stream_type":2,"instructions":191},"21797-54-00408DA0":{"uid":"21797-54-00408DA0","file_uid":"0b936c646770242c4aeca9db1f5cbeb2f90cfe3a32720e0da576680b161cf63e","child_target_uid":"00013355-00003372","stream_type":2,"instructions":111},"21797-44-00409130":{"uid":"21797-44-00409130","file_uid":"0b936c646770242c4aeca9db1f5cbeb2f90cfe3a32720e0da576680b161cf63e","child_target_uid":"00013355-00003372","stream_type":2,"instructions":106},"21797-452-0040EF30":{"uid":"21797-452-0040EF30","file_uid":"0b936c646770242c4aeca9db1f5cbeb2f90cfe3a32720e0da576680b161cf63e","child_target_uid":"00013355-00003372","stream_type":2,"instructions":170},"21797-38-004061C0":{"uid":"21797-38-004061C0","file_uid":"0b936c646770242c4aeca9db1f5cbeb2f90cfe3a32720e0da576680b161cf63e","child_target_uid":"00013355-00003372","stream_type":2,"instructions":234},"21797-49-00409350":{"uid":"21797-49-00409350","file_uid":"0b936c646770242c4aeca9db1f5cbeb2f90cfe3a32720e0da576680b161cf63e","child_target_uid":"00013355-00003372","stream_type":2,"instructions":97},"21797-445-0040F320":{"uid":"21797-445-0040F320","file_uid":"0b936c646770242c4aeca9db1f5cbeb2f90cfe3a32720e0da576680b161cf63e","child_target_uid":"00013355-00003372","stream_type":2,"instructions":139},"21797-490-0040DD70":{"uid":"21797-490-0040DD70","file_uid":"0b936c646770242c4aeca9db1f5cbeb2f90cfe3a32720e0da576680b161cf63e","child_target_uid":"00013355-00003372","stream_type":2,"instructions":167},"21797-160-00402F60":{"uid":"21797-160-00402F60","file_uid":"0b936c646770242c4aeca9db1f5cbeb2f90cfe3a32720e0da576680b161cf63e","child_target_uid":"00013355-00003372","stream_type":2,"instructions":252},"21797-144-00403380":{"uid":"21797-144-00403380","file_uid":"0b936c646770242c4aeca9db1f5cbeb2f90cfe3a32720e0da576680b161cf63e","child_target_uid":"00013355-00003372","stream_type":2,"instructions":302},"21797-57-00409670":{"uid":"21797-57-00409670","file_uid":"0b936c646770242c4aeca9db1f5cbeb2f90cfe3a32720e0da576680b161cf63e","child_target_uid":"00013355-00003372","stream_type":2,"instructions":90},"21797-52-00409040":{"uid":"21797-52-00409040","file_uid":"0b936c646770242c4aeca9db1f5cbeb2f90cfe3a32720e0da576680b161cf63e","child_target_uid":"00013355-00003372","stream_type":2,"instructions":90},"21797-16-0040D070":{"uid":"21797-16-0040D070","file_uid":"0b936c646770242c4aeca9db1f5cbeb2f90cfe3a32720e0da576680b161cf63e","child_target_uid":"00013355-00003372","stream_type":2,"instructions":178},"21797-499-0040A200":{"uid":"21797-499-0040A200","file_uid":"0b936c646770242c4aeca9db1f5cbeb2f90cfe3a32720e0da576680b161cf63e","child_target_uid":"00013355-00003372","stream_type":2,"instructions":105},"21797-227-00405500":{"uid":"21797-227-00405500","file_uid":"0b936c646770242c4aeca9db1f5cbeb2f90cfe3a32720e0da576680b161cf63e","child_target_uid":"00013355-00003372","stream_type":2,"instructions":238},"21797-475-0040D980":{"uid":"21797-475-0040D980","file_uid":"0b936c646770242c4aeca9db1f5cbeb2f90cfe3a32720e0da576680b161cf63e","child_target_uid":"00013355-00003372","stream_type":2,"instructions":150},"21797-128-00404C50":{"uid":"21797-128-00404C50","file_uid":"0b936c646770242c4aeca9db1f5cbeb2f90cfe3a32720e0da576680b161cf63e","child_target_uid":"00013355-00003372","stream_type":2,"instructions":199},"21797-50-00409BB0":{"uid":"21797-50-00409BB0","file_uid":"0b936c646770242c4aeca9db1f5cbeb2f90cfe3a32720e0da576680b161cf63e","child_target_uid":"00013355-00003372","stream_type":2,"instructions":90},"21797-51-00409260":{"uid":"21797-51-00409260","file_uid":"0b936c646770242c4aeca9db1f5cbeb2f90cfe3a32720e0da576680b161cf63e","child_target_uid":"00013355-00003372","stream_type":2,"instructions":90},"21797-162-004013D0":{"uid":"21797-162-004013D0","file_uid":"0b936c646770242c4aeca9db1f5cbeb2f90cfe3a32720e0da576680b161cf63e","child_target_uid":"00013355-00003372","stream_type":2,"instructions":222},"21797-46-0040A0F0":{"uid":"21797-46-0040A0F0","file_uid":"0b936c646770242c4aeca9db1f5cbeb2f90cfe3a32720e0da576680b161cf63e","child_target_uid":"00013355-00003372","stream_type":2,"instructions":83},"21797-478-0040D320":{"uid":"21797-478-0040D320","file_uid":"0b936c646770242c4aeca9db1f5cbeb2f90cfe3a32720e0da576680b161cf63e","child_target_uid":"00013355-00003372","stream_type":2,"instructions":100},"21797-58-004088E0":{"uid":"21797-58-004088E0","file_uid":"0b936c646770242c4aeca9db1f5cbeb2f90cfe3a32720e0da576680b161cf63e","child_target_uid":"00013355-00003372","stream_type":2,"instructions":83},"21797-179-00401000":{"uid":"21797-179-00401000","file_uid":"0b936c646770242c4aeca9db1f5cbeb2f90cfe3a32720e0da576680b161cf63e","child_target_uid":"00013355-00003372","stream_type":2,"instructions":157},"21797-75-0040FAE0":{"uid":"21797-75-0040FAE0","file_uid":"0b936c646770242c4aeca9db1f5cbeb2f90cfe3a32720e0da576680b161cf63e","child_target_uid":"00013355-00003372","stream_type":2,"instructions":193},"21797-74-0040D560":{"uid":"21797-74-0040D560","file_uid":"0b936c646770242c4aeca9db1f5cbeb2f90cfe3a32720e0da576680b161cf63e","child_target_uid":"00013355-00003372","stream_type":2,"instructions":150},"21797-461-0040C950":{"uid":"21797-461-0040C950","file_uid":"0b936c646770242c4aeca9db1f5cbeb2f90cfe3a32720e0da576680b161cf63e","child_target_uid":"00013355-00003372","stream_type":2,"instructions":169},"21797-130-00406010":{"uid":"21797-130-00406010","file_uid":"0b936c646770242c4aeca9db1f5cbeb2f90cfe3a32720e0da576680b161cf63e","child_target_uid":"00013355-00003372","stream_type":2,"instructions":142},"21797-271-0040B660":{"uid":"21797-271-0040B660","file_uid":"0b936c646770242c4aeca9db1f5cbeb2f90cfe3a32720e0da576680b161cf63e","child_target_uid":"00013355-00003372","stream_type":2,"instructions":94},"21797-170-00403730":{"uid":"21797-170-00403730","file_uid":"0b936c646770242c4aeca9db1f5cbeb2f90cfe3a32720e0da576680b161cf63e","child_target_uid":"00013355-00003372","stream_type":2,"instructions":285},"21797-180-00402890":{"uid":"21797-180-00402890","file_uid":"0b936c646770242c4aeca9db1f5cbeb2f90cfe3a32720e0da576680b161cf63e","child_target_uid":"00013355-00003372","stream_type":2,"instructions":212},"21797-56-00408A50":{"uid":"21797-56-00408A50","file_uid":"0b936c646770242c4aeca9db1f5cbeb2f90cfe3a32720e0da576680b161cf63e","child_target_uid":"00013355-00003372","stream_type":2,"instructions":83},"21797-55-00409CA0":{"uid":"21797-55-00409CA0","file_uid":"0b936c646770242c4aeca9db1f5cbeb2f90cfe3a32720e0da576680b161cf63e","child_target_uid":"00013355-00003372","stream_type":2,"instructions":83},"21797-122-004045C0":{"uid":"21797-122-004045C0","file_uid":"0b936c646770242c4aeca9db1f5cbeb2f90cfe3a32720e0da576680b161cf63e","child_target_uid":"00013355-00003372","stream_type":2,"instructions":136},"21797-493-0040D820":{"uid":"21797-493-0040D820","file_uid":"0b936c646770242c4aeca9db1f5cbeb2f90cfe3a32720e0da576680b161cf63e","child_target_uid":"00013355-00003372","stream_type":2,"instructions":111},"21797-181-004011C0":{"uid":"21797-181-004011C0","file_uid":"0b936c646770242c4aeca9db1f5cbeb2f90cfe3a32720e0da576680b161cf63e","child_target_uid":"00013355-00003372","stream_type":2,"instructions":174},"21797-159-00402D90":{"uid":"21797-159-00402D90","file_uid":"0b936c646770242c4aeca9db1f5cbeb2f90cfe3a32720e0da576680b161cf63e","child_target_uid":"00013355-00003372","stream_type":2,"instructions":144},"21797-455-0040E730":{"uid":"21797-455-0040E730","file_uid":"0b936c646770242c4aeca9db1f5cbeb2f90cfe3a32720e0da576680b161cf63e","child_target_uid":"00013355-00003372","stream_type":2,"instructions":83},"21797-464-0040EC10":{"uid":"21797-464-0040EC10","file_uid":"0b936c646770242c4aeca9db1f5cbeb2f90cfe3a32720e0da576680b161cf63e","child_target_uid":"00013355-00003372","stream_type":2,"instructions":109},"21797-471-0040E820":{"uid":"21797-471-0040E820","file_uid":"0b936c646770242c4aeca9db1f5cbeb2f90cfe3a32720e0da576680b161cf63e","child_target_uid":"00013355-00003372","stream_type":2,"instructions":127},"21797-105-0040BE80":{"uid":"21797-105-0040BE80","file_uid":"0b936c646770242c4aeca9db1f5cbeb2f90cfe3a32720e0da576680b161cf63e","child_target_uid":"00013355-00003372","stream_type":2,"instructions":125},"21797-460-0040F210":{"uid":"21797-460-0040F210","file_uid":"0b936c646770242c4aeca9db1f5cbeb2f90cfe3a32720e0da576680b161cf63e","child_target_uid":"00013355-00003372","stream_type":2,"instructions":91},"21797-228-004057D0":{"uid":"21797-228-004057D0","file_uid":"0b936c646770242c4aeca9db1f5cbeb2f90cfe3a32720e0da576680b161cf63e","child_target_uid":"00013355-00003372","stream_type":2,"instructions":174},"21797-70-0040B930":{"uid":"21797-70-0040B930","file_uid":"0b936c646770242c4aeca9db1f5cbeb2f90cfe3a32720e0da576680b161cf63e","child_target_uid":"00013355-00003372","stream_type":2,"instructions":160},"21797-486-0040F920":{"uid":"21797-486-0040F920","file_uid":"0b936c646770242c4aeca9db1f5cbeb2f90cfe3a32720e0da576680b161cf63e","child_target_uid":"00013355-00003372","stream_type":2,"instructions":119},"21797-214-00404B40":{"uid":"21797-214-00404B40","file_uid":"0b936c646770242c4aeca9db1f5cbeb2f90cfe3a32720e0da576680b161cf63e","child_target_uid":"00013355-00003372","stream_type":2,"instructions":105},"21797-80-0040B2C0":{"uid":"21797-80-0040B2C0","file_uid":"0b936c646770242c4aeca9db1f5cbeb2f90cfe3a32720e0da576680b161cf63e","child_target_uid":"00013355-00003372","stream_type":2,"instructions":131},"21797-65-0040BAF0":{"uid":"21797-65-0040BAF0","file_uid":"0b936c646770242c4aeca9db1f5cbeb2f90cfe3a32720e0da576680b161cf63e","child_target_uid":"00013355-00003372","stream_type":2,"instructions":88},"21797-176-00403270":{"uid":"21797-176-00403270","file_uid":"0b936c646770242c4aeca9db1f5cbeb2f90cfe3a32720e0da576680b161cf63e","child_target_uid":"00013355-00003372","stream_type":2,"instructions":88},"21797-182-00401B40":{"uid":"21797-182-00401B40","file_uid":"0b936c646770242c4aeca9db1f5cbeb2f90cfe3a32720e0da576680b161cf63e","child_target_uid":"00013355-00003372","stream_type":2,"instructions":205},"21797-250-004050D0":{"uid":"21797-250-004050D0","file_uid":"0b936c646770242c4aeca9db1f5cbeb2f90cfe3a32720e0da576680b161cf63e","child_target_uid":"00013355-00003372","stream_type":2,"instructions":107},"21797-456-0040EE60":{"uid":"21797-456-0040EE60","file_uid":"0b936c646770242c4aeca9db1f5cbeb2f90cfe3a32720e0da576680b161cf63e","child_target_uid":"00013355-00003372","stream_type":2,"instructions":71},"21797-457-0040EDA0":{"uid":"21797-457-0040EDA0","file_uid":"0b936c646770242c4aeca9db1f5cbeb2f90cfe3a32720e0da576680b161cf63e","child_target_uid":"00013355-00003372","stream_type":2,"instructions":71},"21797-448-0040C4B0":{"uid":"21797-448-0040C4B0","file_uid":"0b936c646770242c4aeca9db1f5cbeb2f90cfe3a32720e0da576680b161cf63e","child_target_uid":"00013355-00003372","stream_type":2,"instructions":44},"21797-487-0040D6F0":{"uid":"21797-487-0040D6F0","file_uid":"0b936c646770242c4aeca9db1f5cbeb2f90cfe3a32720e0da576680b161cf63e","child_target_uid":"00013355-00003372","stream_type":2,"instructions":110},"21797-446-0040B170":{"uid":"21797-446-0040B170","file_uid":"0b936c646770242c4aeca9db1f5cbeb2f90cfe3a32720e0da576680b161cf63e","child_target_uid":"00013355-00003372","stream_type":2,"instructions":66},"21797-451-0040C040":{"uid":"21797-451-0040C040","file_uid":"0b936c646770242c4aeca9db1f5cbeb2f90cfe3a32720e0da576680b161cf63e","child_target_uid":"00013355-00003372","stream_type":2,"instructions":105},"21797-62-00408420":{"uid":"21797-62-00408420","file_uid":"0b936c646770242c4aeca9db1f5cbeb2f90cfe3a32720e0da576680b161cf63e","child_target_uid":"00013355-00003372","stream_type":2,"instructions":57},"21797-188-004026A0":{"uid":"21797-188-004026A0","file_uid":"0b936c646770242c4aeca9db1f5cbeb2f90cfe3a32720e0da576680b161cf63e","child_target_uid":"00013355-00003372","stream_type":2,"instructions":153},"21797-447-0040CD30":{"uid":"21797-447-0040CD30","file_uid":"0b936c646770242c4aeca9db1f5cbeb2f90cfe3a32720e0da576680b161cf63e","child_target_uid":"00013355-00003372","stream_type":2,"instructions":43},"21797-468-0040E5F0":{"uid":"21797-468-0040E5F0","file_uid":"0b936c646770242c4aeca9db1f5cbeb2f90cfe3a32720e0da576680b161cf63e","child_target_uid":"00013355-00003372","stream_type":2,"instructions":96},"21797-238-00404FC0":{"uid":"21797-238-00404FC0","file_uid":"0b936c646770242c4aeca9db1f5cbeb2f90cfe3a32720e0da576680b161cf63e","child_target_uid":"00013355-00003372","stream_type":2,"instructions":98},"21797-500-0040B4C0":{"uid":"21797-500-0040B4C0","file_uid":"0b936c646770242c4aeca9db1f5cbeb2f90cfe3a32720e0da576680b161cf63e","child_target_uid":"00013355-00003372","stream_type":2,"instructions":29},"21797-171-00402B20":{"uid":"21797-171-00402B20","file_uid":"0b936c646770242c4aeca9db1f5cbeb2f90cfe3a32720e0da576680b161cf63e","child_target_uid":"00013355-00003372","stream_type":2,"instructions":153},"21797-8-0040B210":{"uid":"21797-8-0040B210","file_uid":"0b936c646770242c4aeca9db1f5cbeb2f90cfe3a32720e0da576680b161cf63e","child_target_uid":"00013355-00003372","stream_type":2,"instructions":68},"21797-473-0040DC40":{"uid":"21797-473-0040DC40","file_uid":"0b936c646770242c4aeca9db1f5cbeb2f90cfe3a32720e0da576680b161cf63e","child_target_uid":"00013355-00003372","stream_type":2,"instructions":57},"21797-642-00410D42":{"uid":"21797-642-00410D42","file_uid":"0b936c646770242c4aeca9db1f5cbeb2f90cfe3a32720e0da576680b161cf63e","child_target_uid":"00013355-00003372","stream_type":2,"instructions":1},"21797-77-0040FE70":{"uid":"21797-77-0040FE70","file_uid":"0b936c646770242c4aeca9db1f5cbeb2f90cfe3a32720e0da576680b161cf63e","child_target_uid":"00013355-00003372","stream_type":2,"instructions":72},"21797-444-0040F7C0":{"uid":"21797-444-0040F7C0","file_uid":"0b936c646770242c4aeca9db1f5cbeb2f90cfe3a32720e0da576680b161cf63e","child_target_uid":"00013355-00003372","stream_type":2,"instructions":72},"21797-480-0040CF90":{"uid":"21797-480-0040CF90","file_uid":"0b936c646770242c4aeca9db1f5cbeb2f90cfe3a32720e0da576680b161cf63e","child_target_uid":"00013355-00003372","stream_type":2,"instructions":55},"21797-242-00405440":{"uid":"21797-242-00405440","file_uid":"0b936c646770242c4aeca9db1f5cbeb2f90cfe3a32720e0da576680b161cf63e","child_target_uid":"00013355-00003372","stream_type":2,"instructions":67},"21797-442-0040FD00":{"uid":"21797-442-0040FD00","file_uid":"0b936c646770242c4aeca9db1f5cbeb2f90cfe3a32720e0da576680b161cf63e","child_target_uid":"00013355-00003372","stream_type":2,"instructions":66},"21797-2-00410CAE":{"uid":"21797-2-00410CAE","file_uid":"0b936c646770242c4aeca9db1f5cbeb2f90cfe3a32720e0da576680b161cf63e","child_target_uid":"00013355-00003372","stream_type":2,"instructions":415},"21797-449-0040E0E0":{"uid":"21797-449-0040E0E0","file_uid":"0b936c646770242c4aeca9db1f5cbeb2f90cfe3a32720e0da576680b161cf63e","child_target_uid":"00013355-00003372","stream_type":2,"instructions":46},"21797-479-0040D260":{"uid":"21797-479-0040D260","file_uid":"0b936c646770242c4aeca9db1f5cbeb2f90cfe3a32720e0da576680b161cf63e","child_target_uid":"00013355-00003372","stream_type":2,"instructions":67},"21797-154-004025C0":{"uid":"21797-154-004025C0","file_uid":"0b936c646770242c4aeca9db1f5cbeb2f90cfe3a32720e0da576680b161cf63e","child_target_uid":"00013355-00003372","stream_type":2,"instructions":77},"21797-244-0040C170":{"uid":"21797-244-0040C170","file_uid":"0b936c646770242c4aeca9db1f5cbeb2f90cfe3a32720e0da576680b161cf63e","child_target_uid":"00013355-00003372","stream_type":2,"instructions":95},"21797-610-0041069D":{"uid":"21797-610-0041069D","file_uid":"0b936c646770242c4aeca9db1f5cbeb2f90cfe3a32720e0da576680b161cf63e","child_target_uid":"00013355-00003372","stream_type":2,"instructions":44},"21797-103-0040BC20":{"uid":"21797-103-0040BC20","file_uid":"0b936c646770242c4aeca9db1f5cbeb2f90cfe3a32720e0da576680b161cf63e","child_target_uid":"00013355-00003372","stream_type":2,"instructions":162},"21797-495-0040B820":{"uid":"21797-495-0040B820","file_uid":"0b936c646770242c4aeca9db1f5cbeb2f90cfe3a32720e0da576680b161cf63e","child_target_uid":"00013355-00003372","stream_type":2,"instructions":96},"26564-70-1002DB46":{"uid":"26564-70-1002DB46","file_uid":"86e39b5995af0e042fcdaa85fe2aefd7c9ddc7ad65e6327bd5e7058bc3ab615f","child_target_uid":"00013355-00003372","stream_type":2,"instructions":2165},"26564-673-100A7CBD":{"uid":"26564-673-100A7CBD","file_uid":"86e39b5995af0e042fcdaa85fe2aefd7c9ddc7ad65e6327bd5e7058bc3ab615f","child_target_uid":"00013355-00003372","stream_type":2,"instructions":702},"26564-784-100A63C7":{"uid":"26564-784-100A63C7","file_uid":"86e39b5995af0e042fcdaa85fe2aefd7c9ddc7ad65e6327bd5e7058bc3ab615f","child_target_uid":"00013355-00003372","stream_type":2,"instructions":611},"26564-472-100D42D8":{"uid":"26564-472-100D42D8","file_uid":"86e39b5995af0e042fcdaa85fe2aefd7c9ddc7ad65e6327bd5e7058bc3ab615f","child_target_uid":"00013355-00003372","stream_type":2,"instructions":1167},"26564-153-100D6158":{"uid":"26564-153-100D6158","file_uid":"86e39b5995af0e042fcdaa85fe2aefd7c9ddc7ad65e6327bd5e7058bc3ab615f","child_target_uid":"00013355-00003372","stream_type":2,"instructions":183},"26564-718-1001B082":{"uid":"26564-718-1001B082","file_uid":"86e39b5995af0e042fcdaa85fe2aefd7c9ddc7ad65e6327bd5e7058bc3ab615f","child_target_uid":"00013355-00003372","stream_type":2,"instructions":933},"26564-694-1001D315":{"uid":"26564-694-1001D315","file_uid":"86e39b5995af0e042fcdaa85fe2aefd7c9ddc7ad65e6327bd5e7058bc3ab615f","child_target_uid":"00013355-00003372","stream_type":2,"instructions":820},"26564-30-100DE000":{"uid":"26564-30-100DE000","file_uid":"86e39b5995af0e042fcdaa85fe2aefd7c9ddc7ad65e6327bd5e7058bc3ab615f","child_target_uid":"00013355-00003372","stream_type":2,"instructions":47},"26564-476-100D8933":{"uid":"26564-476-100D8933","file_uid":"86e39b5995af0e042fcdaa85fe2aefd7c9ddc7ad65e6327bd5e7058bc3ab615f","child_target_uid":"00013355-00003372","stream_type":2,"instructions":2008},"26564-829-10010EAC":{"uid":"26564-829-10010EAC","file_uid":"86e39b5995af0e042fcdaa85fe2aefd7c9ddc7ad65e6327bd5e7058bc3ab615f","child_target_uid":"00013355-00003372","stream_type":2,"instructions":1889},"26564-627-1007C686":{"uid":"26564-627-1007C686","file_uid":"86e39b5995af0e042fcdaa85fe2aefd7c9ddc7ad65e6327bd5e7058bc3ab615f","child_target_uid":"00013355-00003372","stream_type":2,"instructions":264},"26564-126-100A4E66":{"uid":"26564-126-100A4E66","file_uid":"86e39b5995af0e042fcdaa85fe2aefd7c9ddc7ad65e6327bd5e7058bc3ab615f","child_target_uid":"00013355-00003372","stream_type":2,"instructions":171},"26564-491-100D73C5":{"uid":"26564-491-100D73C5","file_uid":"86e39b5995af0e042fcdaa85fe2aefd7c9ddc7ad65e6327bd5e7058bc3ab615f","child_target_uid":"00013355-00003372","stream_type":2,"instructions":1546},"26564-791-100A9CBC":{"uid":"26564-791-100A9CBC","file_uid":"86e39b5995af0e042fcdaa85fe2aefd7c9ddc7ad65e6327bd5e7058bc3ab615f","child_target_uid":"00013355-00003372","stream_type":2,"instructions":171},"26564-527-100BB710":{"uid":"26564-527-100BB710","file_uid":"86e39b5995af0e042fcdaa85fe2aefd7c9ddc7ad65e6327bd5e7058bc3ab615f","child_target_uid":"00013355-00003372","stream_type":2,"instructions":400},"26564-51-1007BE40":{"uid":"26564-51-1007BE40","file_uid":"86e39b5995af0e042fcdaa85fe2aefd7c9ddc7ad65e6327bd5e7058bc3ab615f","child_target_uid":"00013355-00003372","stream_type":2,"instructions":243},"26564-1-100DF74C":{"uid":"26564-1-100DF74C","file_uid":"86e39b5995af0e042fcdaa85fe2aefd7c9ddc7ad65e6327bd5e7058bc3ab615f","child_target_uid":"00013355-00003372","stream_type":2,"instructions":622},"26564-382-10036A46":{"uid":"26564-382-10036A46","file_uid":"86e39b5995af0e042fcdaa85fe2aefd7c9ddc7ad65e6327bd5e7058bc3ab615f","child_target_uid":"00013355-00003372","stream_type":2,"instructions":844},"26564-787-10016C0F":{"uid":"26564-787-10016C0F","file_uid":"86e39b5995af0e042fcdaa85fe2aefd7c9ddc7ad65e6327bd5e7058bc3ab615f","child_target_uid":"00013355-00003372","stream_type":2,"instructions":804},"26564-562-1001A5C0":{"uid":"26564-562-1001A5C0","file_uid":"86e39b5995af0e042fcdaa85fe2aefd7c9ddc7ad65e6327bd5e7058bc3ab615f","child_target_uid":"00013355-00003372","stream_type":2,"instructions":707},"26564-169-100D2334":{"uid":"26564-169-100D2334","file_uid":"86e39b5995af0e042fcdaa85fe2aefd7c9ddc7ad65e6327bd5e7058bc3ab615f","child_target_uid":"00013355-00003372","stream_type":2,"instructions":609},"26564-209-100D0C3E":{"uid":"26564-209-100D0C3E","file_uid":"86e39b5995af0e042fcdaa85fe2aefd7c9ddc7ad65e6327bd5e7058bc3ab615f","child_target_uid":"00013355-00003372","stream_type":2,"instructions":609},"26564-528-100B7384":{"uid":"26564-528-100B7384","file_uid":"86e39b5995af0e042fcdaa85fe2aefd7c9ddc7ad65e6327bd5e7058bc3ab615f","child_target_uid":"00013355-00003372","stream_type":2,"instructions":613},"26564-193-100D1811":{"uid":"26564-193-100D1811","file_uid":"86e39b5995af0e042fcdaa85fe2aefd7c9ddc7ad65e6327bd5e7058bc3ab615f","child_target_uid":"00013355-00003372","stream_type":2,"instructions":596},"26564-471-100C0DB3":{"uid":"26564-471-100C0DB3","file_uid":"86e39b5995af0e042fcdaa85fe2aefd7c9ddc7ad65e6327bd5e7058bc3ab615f","child_target_uid":"00013355-00003372","stream_type":2,"instructions":547},"26564-586-10020189":{"uid":"26564-586-10020189","file_uid":"86e39b5995af0e042fcdaa85fe2aefd7c9ddc7ad65e6327bd5e7058bc3ab615f","child_target_uid":"00013355-00003372","stream_type":2,"instructions":552},"26564-563-1001A8CA":{"uid":"26564-563-1001A8CA","file_uid":"86e39b5995af0e042fcdaa85fe2aefd7c9ddc7ad65e6327bd5e7058bc3ab615f","child_target_uid":"00013355-00003372","stream_type":2,"instructions":204},"21534-6-100025AA":{"uid":"21534-6-100025AA","file_uid":"bc5c468372754c561be416ab381f25b1cdcac5f4c341b709ef04d9bed5924628","child_target_uid":"00017695-00002956","stream_type":2,"instructions":1098},"23736-20-00406926":{"uid":"23736-20-00406926","file_uid":"a097cc322fa68e1ff500d79598f657d9c211e86e632c3c3b896e566852cea991","child_target_uid":"00013355-00003372","stream_type":2,"instructions":448},"23736-4-00408BE4":{"uid":"23736-4-00408BE4","file_uid":"a097cc322fa68e1ff500d79598f657d9c211e86e632c3c3b896e566852cea991","child_target_uid":"00013355-00003372","stream_type":2,"instructions":1825},"23736-65-00405DA9":{"uid":"23736-65-00405DA9","file_uid":"a097cc322fa68e1ff500d79598f657d9c211e86e632c3c3b896e566852cea991","child_target_uid":"00013355-00003372","stream_type":2,"instructions":152},"23736-88-004037FB":{"uid":"23736-88-004037FB","file_uid":"a097cc322fa68e1ff500d79598f657d9c211e86e632c3c3b896e566852cea991","child_target_uid":"00013355-00003372","stream_type":2,"instructions":179},"23736-40-00406679":{"uid":"23736-40-00406679","file_uid":"a097cc322fa68e1ff500d79598f657d9c211e86e632c3c3b896e566852cea991","child_target_uid":"00013355-00003372","stream_type":2,"instructions":226},"23736-31-004071DF":{"uid":"23736-31-004071DF","file_uid":"a097cc322fa68e1ff500d79598f657d9c211e86e632c3c3b896e566852cea991","child_target_uid":"00013355-00003372","stream_type":2,"instructions":109},"23736-63-00404C6A":{"uid":"23736-63-00404C6A","file_uid":"a097cc322fa68e1ff500d79598f657d9c211e86e632c3c3b896e566852cea991","child_target_uid":"00013355-00003372","stream_type":2,"instructions":240},"23736-30-00407053":{"uid":"23736-30-00407053","file_uid":"a097cc322fa68e1ff500d79598f657d9c211e86e632c3c3b896e566852cea991","child_target_uid":"00013355-00003372","stream_type":2,"instructions":45},"23736-29-004070EC":{"uid":"23736-29-004070EC","file_uid":"a097cc322fa68e1ff500d79598f657d9c211e86e632c3c3b896e566852cea991","child_target_uid":"00013355-00003372","stream_type":2,"instructions":37},"23736-35-00407347":{"uid":"23736-35-00407347","file_uid":"a097cc322fa68e1ff500d79598f657d9c211e86e632c3c3b896e566852cea991","child_target_uid":"00013355-00003372","stream_type":2,"instructions":103},"23736-13-00404550":{"uid":"23736-13-00404550","file_uid":"a097cc322fa68e1ff500d79598f657d9c211e86e632c3c3b896e566852cea991","child_target_uid":"00013355-00003372","stream_type":2,"instructions":529},"23736-25-0040785C":{"uid":"23736-25-0040785C","file_uid":"a097cc322fa68e1ff500d79598f657d9c211e86e632c3c3b896e566852cea991","child_target_uid":"00013355-00003372","stream_type":2,"instructions":55},"23736-10-00402AF3":{"uid":"23736-10-00402AF3","file_uid":"a097cc322fa68e1ff500d79598f657d9c211e86e632c3c3b896e566852cea991","child_target_uid":"00013355-00003372","stream_type":2,"instructions":466},"23736-90-004030CE":{"uid":"23736-90-004030CE","file_uid":"a097cc322fa68e1ff500d79598f657d9c211e86e632c3c3b896e566852cea991","child_target_uid":"00013355-00003372","stream_type":2,"instructions":440},"23736-73-004025B4":{"uid":"23736-73-004025B4","file_uid":"a097cc322fa68e1ff500d79598f657d9c211e86e632c3c3b896e566852cea991","child_target_uid":"00013355-00003372","stream_type":2,"instructions":417},"27278-3-10001758":{"uid":"27278-3-10001758","file_uid":"c2689ba1f66066afce85ca6457ecd36370be0fe351c58422e45efd0948655c93","child_target_uid":"00013355-00003372","stream_type":2,"instructions":433},"29367-321-10001120":{"uid":"29367-321-10001120","file_uid":"49a7859570c91396645a64ee16104d04ea014f135d9b0cfb078861fad9ec5da7","child_target_uid":"00017695-00002956","stream_type":2,"instructions":159},"29367-353-100217C0":{"uid":"29367-353-100217C0","file_uid":"49a7859570c91396645a64ee16104d04ea014f135d9b0cfb078861fad9ec5da7","child_target_uid":"00017695-00002956","stream_type":2,"instructions":239},"29367-281-100280F2":{"uid":"29367-281-100280F2","file_uid":"49a7859570c91396645a64ee16104d04ea014f135d9b0cfb078861fad9ec5da7","child_target_uid":"00017695-00002956","stream_type":2,"instructions":511},"29367-176-1002B1C0":{"uid":"29367-176-1002B1C0","file_uid":"49a7859570c91396645a64ee16104d04ea014f135d9b0cfb078861fad9ec5da7","child_target_uid":"00017695-00002956","stream_type":2,"instructions":255},"29367-377-1001EA40":{"uid":"29367-377-1001EA40","file_uid":"49a7859570c91396645a64ee16104d04ea014f135d9b0cfb078861fad9ec5da7","child_target_uid":"00017695-00002956","stream_type":2,"instructions":249},"29367-291-10026F50":{"uid":"29367-291-10026F50","file_uid":"49a7859570c91396645a64ee16104d04ea014f135d9b0cfb078861fad9ec5da7","child_target_uid":"00017695-00002956","stream_type":2,"instructions":1466},"29367-188-10032FF0":{"uid":"29367-188-10032FF0","file_uid":"49a7859570c91396645a64ee16104d04ea014f135d9b0cfb078861fad9ec5da7","child_target_uid":"00017695-00002956","stream_type":2,"instructions":976},"29367-97-1003B750":{"uid":"29367-97-1003B750","file_uid":"49a7859570c91396645a64ee16104d04ea014f135d9b0cfb078861fad9ec5da7","child_target_uid":"00017695-00002956","stream_type":2,"instructions":713},"29367-190-10032B90":{"uid":"29367-190-10032B90","file_uid":"49a7859570c91396645a64ee16104d04ea014f135d9b0cfb078861fad9ec5da7","child_target_uid":"00017695-00002956","stream_type":2,"instructions":341},"29367-134-10034A20":{"uid":"29367-134-10034A20","file_uid":"49a7859570c91396645a64ee16104d04ea014f135d9b0cfb078861fad9ec5da7","child_target_uid":"00017695-00002956","stream_type":2,"instructions":695},"29367-235-1002BF40":{"uid":"29367-235-1002BF40","file_uid":"49a7859570c91396645a64ee16104d04ea014f135d9b0cfb078861fad9ec5da7","child_target_uid":"00017695-00002956","stream_type":2,"instructions":654},"29367-397-10026620":{"uid":"29367-397-10026620","file_uid":"49a7859570c91396645a64ee16104d04ea014f135d9b0cfb078861fad9ec5da7","child_target_uid":"00017695-00002956","stream_type":2,"instructions":285},"29367-625-1003D535":{"uid":"29367-625-1003D535","file_uid":"49a7859570c91396645a64ee16104d04ea014f135d9b0cfb078861fad9ec5da7","child_target_uid":"00017695-00002956","stream_type":2,"instructions":115},"29367-498-1000EF20":{"uid":"29367-498-1000EF20","file_uid":"49a7859570c91396645a64ee16104d04ea014f135d9b0cfb078861fad9ec5da7","child_target_uid":"00017695-00002956","stream_type":2,"instructions":275},"29367-299-100261B0":{"uid":"29367-299-100261B0","file_uid":"49a7859570c91396645a64ee16104d04ea014f135d9b0cfb078861fad9ec5da7","child_target_uid":"00017695-00002956","stream_type":2,"instructions":118},"29367-244-1002ED20":{"uid":"29367-244-1002ED20","file_uid":"49a7859570c91396645a64ee16104d04ea014f135d9b0cfb078861fad9ec5da7","child_target_uid":"00017695-00002956","stream_type":2,"instructions":537},"29367-415-1001ADA0":{"uid":"29367-415-1001ADA0","file_uid":"49a7859570c91396645a64ee16104d04ea014f135d9b0cfb078861fad9ec5da7","child_target_uid":"00017695-00002956","stream_type":2,"instructions":570},"29367-414-1001BD5F":{"uid":"29367-414-1001BD5F","file_uid":"49a7859570c91396645a64ee16104d04ea014f135d9b0cfb078861fad9ec5da7","child_target_uid":"00017695-00002956","stream_type":2,"instructions":545},"29367-137-100358E0":{"uid":"29367-137-100358E0","file_uid":"49a7859570c91396645a64ee16104d04ea014f135d9b0cfb078861fad9ec5da7","child_target_uid":"00017695-00002956","stream_type":2,"instructions":438},"29367-254-1002CF30":{"uid":"29367-254-1002CF30","file_uid":"49a7859570c91396645a64ee16104d04ea014f135d9b0cfb078861fad9ec5da7","child_target_uid":"00017695-00002956","stream_type":2,"instructions":46},"29367-217-10031520":{"uid":"29367-217-10031520","file_uid":"49a7859570c91396645a64ee16104d04ea014f135d9b0cfb078861fad9ec5da7","child_target_uid":"00017695-00002956","stream_type":2,"instructions":475},"29367-328-10001020":{"uid":"29367-328-10001020","file_uid":"49a7859570c91396645a64ee16104d04ea014f135d9b0cfb078861fad9ec5da7","child_target_uid":"00017695-00002956","stream_type":2,"instructions":98},"29367-387-1001FD20":{"uid":"29367-387-1001FD20","file_uid":"49a7859570c91396645a64ee16104d04ea014f135d9b0cfb078861fad9ec5da7","child_target_uid":"00017695-00002956","stream_type":2,"instructions":420},"29367-461-100174A0":{"uid":"29367-461-100174A0","file_uid":"49a7859570c91396645a64ee16104d04ea014f135d9b0cfb078861fad9ec5da7","child_target_uid":"00017695-00002956","stream_type":2,"instructions":418},"29367-618-10025BA0":{"uid":"29367-618-10025BA0","file_uid":"49a7859570c91396645a64ee16104d04ea014f135d9b0cfb078861fad9ec5da7","child_target_uid":"00017695-00002956","stream_type":2,"instructions":446},"29367-1360-100485E5":{"uid":"29367-1360-100485E5","file_uid":"49a7859570c91396645a64ee16104d04ea014f135d9b0cfb078861fad9ec5da7","child_target_uid":"00017695-00002956","stream_type":2,"instructions":453},"29367-617-1001DEB0":{"uid":"29367-617-1001DEB0","file_uid":"49a7859570c91396645a64ee16104d04ea014f135d9b0cfb078861fad9ec5da7","child_target_uid":"00017695-00002956","stream_type":2,"instructions":463},"29367-389-1001F7D0":{"uid":"29367-389-1001F7D0","file_uid":"49a7859570c91396645a64ee16104d04ea014f135d9b0cfb078861fad9ec5da7","child_target_uid":"00017695-00002956","stream_type":2,"instructions":458},"35873-14-10002ABB":{"uid":"35873-14-10002ABB","file_uid":"75ed40311875312617d6711baed0be29fcaee71031ca27a8d308a72b15a51e49","child_target_uid":"00013355-00003372","stream_type":2,"instructions":53},"35873-43-10001A86":{"uid":"35873-43-10001A86","file_uid":"75ed40311875312617d6711baed0be29fcaee71031ca27a8d308a72b15a51e49","child_target_uid":"00013355-00003372","stream_type":2,"instructions":538},"38074-6-10002A8A":{"uid":"38074-6-10002A8A","file_uid":"2353c8cc904a0f954a442cf439f1c96b790f67b8e7c4f02a32a1a92dd69f44f2","child_target_uid":"00017695-00002956","stream_type":2,"instructions":1449},"38074-15-10002180":{"uid":"38074-15-10002180","file_uid":"2353c8cc904a0f954a442cf439f1c96b790f67b8e7c4f02a32a1a92dd69f44f2","child_target_uid":"00017695-00002956","stream_type":2,"instructions":203},"40291-309-10050D00":{"uid":"40291-309-10050D00","file_uid":"94d7c8f60194c03bc9d54e484df5d6e1dac9b67886c79a43776d0a8aad8c9510","child_target_uid":"00017695-00002956","stream_type":2,"instructions":2076},"40291-324-10064D80":{"uid":"40291-324-10064D80","file_uid":"94d7c8f60194c03bc9d54e484df5d6e1dac9b67886c79a43776d0a8aad8c9510","child_target_uid":"00017695-00002956","stream_type":2,"instructions":2028},"40291-37-1004ECC0":{"uid":"40291-37-1004ECC0","file_uid":"94d7c8f60194c03bc9d54e484df5d6e1dac9b67886c79a43776d0a8aad8c9510","child_target_uid":"00017695-00002956","stream_type":2,"instructions":1307},"40291-334-10035120":{"uid":"40291-334-10035120","file_uid":"94d7c8f60194c03bc9d54e484df5d6e1dac9b67886c79a43776d0a8aad8c9510","child_target_uid":"00017695-00002956","stream_type":2,"instructions":698},"40291-628-1003C1D0":{"uid":"40291-628-1003C1D0","file_uid":"94d7c8f60194c03bc9d54e484df5d6e1dac9b67886c79a43776d0a8aad8c9510","child_target_uid":"00017695-00002956","stream_type":2,"instructions":1647},"40291-465-1003F810":{"uid":"40291-465-1003F810","file_uid":"94d7c8f60194c03bc9d54e484df5d6e1dac9b67886c79a43776d0a8aad8c9510","child_target_uid":"00017695-00002956","stream_type":2,"instructions":1449},"40291-479-10049110":{"uid":"40291-479-10049110","file_uid":"94d7c8f60194c03bc9d54e484df5d6e1dac9b67886c79a43776d0a8aad8c9510","child_target_uid":"00017695-00002956","stream_type":2,"instructions":2001},"40291-534-10015010":{"uid":"40291-534-10015010","file_uid":"94d7c8f60194c03bc9d54e484df5d6e1dac9b67886c79a43776d0a8aad8c9510","child_target_uid":"00017695-00002956","stream_type":2,"instructions":1479},"40291-472-10038630":{"uid":"40291-472-10038630","file_uid":"94d7c8f60194c03bc9d54e484df5d6e1dac9b67886c79a43776d0a8aad8c9510","child_target_uid":"00017695-00002956","stream_type":2,"instructions":1157},"40291-595-100223F0":{"uid":"40291-595-100223F0","file_uid":"94d7c8f60194c03bc9d54e484df5d6e1dac9b67886c79a43776d0a8aad8c9510","child_target_uid":"00017695-00002956","stream_type":2,"instructions":679},"40291-540-100190E0":{"uid":"40291-540-100190E0","file_uid":"94d7c8f60194c03bc9d54e484df5d6e1dac9b67886c79a43776d0a8aad8c9510","child_target_uid":"00017695-00002956","stream_type":2,"instructions":189},"40291-193-100602F0":{"uid":"40291-193-100602F0","file_uid":"94d7c8f60194c03bc9d54e484df5d6e1dac9b67886c79a43776d0a8aad8c9510","child_target_uid":"00017695-00002956","stream_type":2,"instructions":631},"40291-560-10019420":{"uid":"40291-560-10019420","file_uid":"94d7c8f60194c03bc9d54e484df5d6e1dac9b67886c79a43776d0a8aad8c9510","child_target_uid":"00017695-00002956","stream_type":2,"instructions":620},"40291-401-1003F460":{"uid":"40291-401-1003F460","file_uid":"94d7c8f60194c03bc9d54e484df5d6e1dac9b67886c79a43776d0a8aad8c9510","child_target_uid":"00017695-00002956","stream_type":2,"instructions":294},"40291-445-10036840":{"uid":"40291-445-10036840","file_uid":"94d7c8f60194c03bc9d54e484df5d6e1dac9b67886c79a43776d0a8aad8c9510","child_target_uid":"00017695-00002956","stream_type":2,"instructions":217},"40291-474-10033F20":{"uid":"40291-474-10033F20","file_uid":"94d7c8f60194c03bc9d54e484df5d6e1dac9b67886c79a43776d0a8aad8c9510","child_target_uid":"00017695-00002956","stream_type":2,"instructions":371},"40291-17-100090C0":{"uid":"40291-17-100090C0","file_uid":"94d7c8f60194c03bc9d54e484df5d6e1dac9b67886c79a43776d0a8aad8c9510","child_target_uid":"00017695-00002956","stream_type":2,"instructions":69},"40291-314-100054E0":{"uid":"40291-314-100054E0","file_uid":"94d7c8f60194c03bc9d54e484df5d6e1dac9b67886c79a43776d0a8aad8c9510","child_target_uid":"00017695-00002956","stream_type":2,"instructions":430},"40291-603-10022C60":{"uid":"40291-603-10022C60","file_uid":"94d7c8f60194c03bc9d54e484df5d6e1dac9b67886c79a43776d0a8aad8c9510","child_target_uid":"00017695-00002956","stream_type":2,"instructions":2006},"40291-7-10067D8A":{"uid":"40291-7-10067D8A","file_uid":"94d7c8f60194c03bc9d54e484df5d6e1dac9b67886c79a43776d0a8aad8c9510","child_target_uid":"00017695-00002956","stream_type":2,"instructions":1800},"40291-511-1005C9B0":{"uid":"40291-511-1005C9B0","file_uid":"94d7c8f60194c03bc9d54e484df5d6e1dac9b67886c79a43776d0a8aad8c9510","child_target_uid":"00017695-00002956","stream_type":2,"instructions":839},"40291-70-100411D0":{"uid":"40291-70-100411D0","file_uid":"94d7c8f60194c03bc9d54e484df5d6e1dac9b67886c79a43776d0a8aad8c9510","child_target_uid":"00017695-00002956","stream_type":2,"instructions":202},"40291-558-10016FF0":{"uid":"40291-558-10016FF0","file_uid":"94d7c8f60194c03bc9d54e484df5d6e1dac9b67886c79a43776d0a8aad8c9510","child_target_uid":"00017695-00002956","stream_type":2,"instructions":688},"40291-238-1000D030":{"uid":"40291-238-1000D030","file_uid":"94d7c8f60194c03bc9d54e484df5d6e1dac9b67886c79a43776d0a8aad8c9510","child_target_uid":"00017695-00002956","stream_type":2,"instructions":635},"40291-517-1002D450":{"uid":"40291-517-1002D450","file_uid":"94d7c8f60194c03bc9d54e484df5d6e1dac9b67886c79a43776d0a8aad8c9510","child_target_uid":"00017695-00002956","stream_type":2,"instructions":65},"40291-307-1000B870":{"uid":"40291-307-1000B870","file_uid":"94d7c8f60194c03bc9d54e484df5d6e1dac9b67886c79a43776d0a8aad8c9510","child_target_uid":"00017695-00002956","stream_type":2,"instructions":200},"40291-442-10034C20":{"uid":"40291-442-10034C20","file_uid":"94d7c8f60194c03bc9d54e484df5d6e1dac9b67886c79a43776d0a8aad8c9510","child_target_uid":"00017695-00002956","stream_type":2,"instructions":291},"40291-447-10033B20":{"uid":"40291-447-10033B20","file_uid":"94d7c8f60194c03bc9d54e484df5d6e1dac9b67886c79a43776d0a8aad8c9510","child_target_uid":"00017695-00002956","stream_type":2,"instructions":178},"40291-429-1003F250":{"uid":"40291-429-1003F250","file_uid":"94d7c8f60194c03bc9d54e484df5d6e1dac9b67886c79a43776d0a8aad8c9510","child_target_uid":"00017695-00002956","stream_type":2,"instructions":185},"40291-513-10011100":{"uid":"40291-513-10011100","file_uid":"94d7c8f60194c03bc9d54e484df5d6e1dac9b67886c79a43776d0a8aad8c9510","child_target_uid":"00017695-00002956","stream_type":2,"instructions":834},"40291-315-1000A470":{"uid":"40291-315-1000A470","file_uid":"94d7c8f60194c03bc9d54e484df5d6e1dac9b67886c79a43776d0a8aad8c9510","child_target_uid":"00017695-00002956","stream_type":2,"instructions":70},"40291-319-10046DF0":{"uid":"40291-319-10046DF0","file_uid":"94d7c8f60194c03bc9d54e484df5d6e1dac9b67886c79a43776d0a8aad8c9510","child_target_uid":"00017695-00002956","stream_type":2,"instructions":308},"40291-451-10036C00":{"uid":"40291-451-10036C00","file_uid":"94d7c8f60194c03bc9d54e484df5d6e1dac9b67886c79a43776d0a8aad8c9510","child_target_uid":"00017695-00002956","stream_type":2,"instructions":193},"40291-602-10018E50":{"uid":"40291-602-10018E50","file_uid":"94d7c8f60194c03bc9d54e484df5d6e1dac9b67886c79a43776d0a8aad8c9510","child_target_uid":"00017695-00002956","stream_type":2,"instructions":43},"40291-626-1001BFD0":{"uid":"40291-626-1001BFD0","file_uid":"94d7c8f60194c03bc9d54e484df5d6e1dac9b67886c79a43776d0a8aad8c9510","child_target_uid":"00017695-00002956","stream_type":2,"instructions":766},"40291-185-1000C810":{"uid":"40291-185-1000C810","file_uid":"94d7c8f60194c03bc9d54e484df5d6e1dac9b67886c79a43776d0a8aad8c9510","child_target_uid":"00017695-00002956","stream_type":2,"instructions":283},"40291-146-1005C540":{"uid":"40291-146-1005C540","file_uid":"94d7c8f60194c03bc9d54e484df5d6e1dac9b67886c79a43776d0a8aad8c9510","child_target_uid":"00017695-00002956","stream_type":2,"instructions":148},"40291-333-1002D270":{"uid":"40291-333-1002D270","file_uid":"94d7c8f60194c03bc9d54e484df5d6e1dac9b67886c79a43776d0a8aad8c9510","child_target_uid":"00017695-00002956","stream_type":2,"instructions":160},"40291-320-10048420":{"uid":"40291-320-10048420","file_uid":"94d7c8f60194c03bc9d54e484df5d6e1dac9b67886c79a43776d0a8aad8c9510","child_target_uid":"00017695-00002956","stream_type":2,"instructions":268},"40291-581-1002C080":{"uid":"40291-581-1002C080","file_uid":"94d7c8f60194c03bc9d54e484df5d6e1dac9b67886c79a43776d0a8aad8c9510","child_target_uid":"00017695-00002956","stream_type":2,"instructions":608},"40291-223-1000F750":{"uid":"40291-223-1000F750","file_uid":"94d7c8f60194c03bc9d54e484df5d6e1dac9b67886c79a43776d0a8aad8c9510","child_target_uid":"00017695-00002956","stream_type":2,"instructions":215},"40291-450-10018310":{"uid":"40291-450-10018310","file_uid":"94d7c8f60194c03bc9d54e484df5d6e1dac9b67886c79a43776d0a8aad8c9510","child_target_uid":"00017695-00002956","stream_type":2,"instructions":100},"40291-399-10041460":{"uid":"40291-399-10041460","file_uid":"94d7c8f60194c03bc9d54e484df5d6e1dac9b67886c79a43776d0a8aad8c9510","child_target_uid":"00017695-00002956","stream_type":2,"instructions":62},"40291-382-10032260":{"uid":"40291-382-10032260","file_uid":"94d7c8f60194c03bc9d54e484df5d6e1dac9b67886c79a43776d0a8aad8c9510","child_target_uid":"00017695-00002956","stream_type":2,"instructions":503},"40291-619-1005B550":{"uid":"40291-619-1005B550","file_uid":"94d7c8f60194c03bc9d54e484df5d6e1dac9b67886c79a43776d0a8aad8c9510","child_target_uid":"00017695-00002956","stream_type":2,"instructions":113},"40291-507-1005F3B0":{"uid":"40291-507-1005F3B0","file_uid":"94d7c8f60194c03bc9d54e484df5d6e1dac9b67886c79a43776d0a8aad8c9510","child_target_uid":"00017695-00002956","stream_type":2,"instructions":505},"40291-625-10021070":{"uid":"40291-625-10021070","file_uid":"94d7c8f60194c03bc9d54e484df5d6e1dac9b67886c79a43776d0a8aad8c9510","child_target_uid":"00017695-00002956","stream_type":2,"instructions":205},"40291-561-10019BE0":{"uid":"40291-561-10019BE0","file_uid":"94d7c8f60194c03bc9d54e484df5d6e1dac9b67886c79a43776d0a8aad8c9510","child_target_uid":"00017695-00002956","stream_type":2,"instructions":510},"40291-25-1005DAE0":{"uid":"40291-25-1005DAE0","file_uid":"94d7c8f60194c03bc9d54e484df5d6e1dac9b67886c79a43776d0a8aad8c9510","child_target_uid":"00017695-00002956","stream_type":2,"instructions":174},"40291-230-10012BA0":{"uid":"40291-230-10012BA0","file_uid":"94d7c8f60194c03bc9d54e484df5d6e1dac9b67886c79a43776d0a8aad8c9510","child_target_uid":"00017695-00002956","stream_type":2,"instructions":181},"40291-232-10021E30":{"uid":"40291-232-10021E30","file_uid":"94d7c8f60194c03bc9d54e484df5d6e1dac9b67886c79a43776d0a8aad8c9510","child_target_uid":"00017695-00002956","stream_type":2,"instructions":191},"40291-206-1005BEE0":{"uid":"40291-206-1005BEE0","file_uid":"94d7c8f60194c03bc9d54e484df5d6e1dac9b67886c79a43776d0a8aad8c9510","child_target_uid":"00017695-00002956","stream_type":2,"instructions":452},"40291-430-10017AB0":{"uid":"40291-430-10017AB0","file_uid":"94d7c8f60194c03bc9d54e484df5d6e1dac9b67886c79a43776d0a8aad8c9510","child_target_uid":"00017695-00002956","stream_type":2,"instructions":48},"40291-302-1002E150":{"uid":"40291-302-1002E150","file_uid":"94d7c8f60194c03bc9d54e484df5d6e1dac9b67886c79a43776d0a8aad8c9510","child_target_uid":"00017695-00002956","stream_type":2,"instructions":485},"40291-293-100595D0":{"uid":"40291-293-100595D0","file_uid":"94d7c8f60194c03bc9d54e484df5d6e1dac9b67886c79a43776d0a8aad8c9510","child_target_uid":"00017695-00002956","stream_type":2,"instructions":412},"40291-541-10018ED0":{"uid":"40291-541-10018ED0","file_uid":"94d7c8f60194c03bc9d54e484df5d6e1dac9b67886c79a43776d0a8aad8c9510","child_target_uid":"00017695-00002956","stream_type":2,"instructions":164},"40291-486-1001D0E0":{"uid":"40291-486-1001D0E0","file_uid":"94d7c8f60194c03bc9d54e484df5d6e1dac9b67886c79a43776d0a8aad8c9510","child_target_uid":"00017695-00002956","stream_type":2,"instructions":436},"40291-623-1003B520":{"uid":"40291-623-1003B520","file_uid":"94d7c8f60194c03bc9d54e484df5d6e1dac9b67886c79a43776d0a8aad8c9510","child_target_uid":"00017695-00002956","stream_type":2,"instructions":414},"40291-590-1001E380":{"uid":"40291-590-1001E380","file_uid":"94d7c8f60194c03bc9d54e484df5d6e1dac9b67886c79a43776d0a8aad8c9510","child_target_uid":"00017695-00002956","stream_type":2,"instructions":411},"40291-503-1005D490":{"uid":"40291-503-1005D490","file_uid":"94d7c8f60194c03bc9d54e484df5d6e1dac9b67886c79a43776d0a8aad8c9510","child_target_uid":"00017695-00002956","stream_type":2,"instructions":410},"40291-627-1002EAD0":{"uid":"40291-627-1002EAD0","file_uid":"94d7c8f60194c03bc9d54e484df5d6e1dac9b67886c79a43776d0a8aad8c9510","child_target_uid":"00017695-00002956","stream_type":2,"instructions":77},"40291-639-100645E0":{"uid":"40291-639-100645E0","file_uid":"94d7c8f60194c03bc9d54e484df5d6e1dac9b67886c79a43776d0a8aad8c9510","child_target_uid":"00017695-00002956","stream_type":2,"instructions":479},"40291-525-10061540":{"uid":"40291-525-10061540","file_uid":"94d7c8f60194c03bc9d54e484df5d6e1dac9b67886c79a43776d0a8aad8c9510","child_target_uid":"00017695-00002956","stream_type":2,"instructions":81},"40291-624-1001C9A0":{"uid":"40291-624-1001C9A0","file_uid":"94d7c8f60194c03bc9d54e484df5d6e1dac9b67886c79a43776d0a8aad8c9510","child_target_uid":"00017695-00002956","stream_type":2,"instructions":457},"40291-599-10016880":{"uid":"40291-599-10016880","file_uid":"94d7c8f60194c03bc9d54e484df5d6e1dac9b67886c79a43776d0a8aad8c9510","child_target_uid":"00017695-00002956","stream_type":2,"instructions":166}},"similar_samples":true,"search_button":true,"search_button_number_of":3}