MD5: 19625846d05da5f26051a990b574e659
SHA1: 915249b28d42256dc7d0d99086372ad1845aacb3
SHA256: 48655ff2efedc5adf2cd3500276f492190c16214b52d1621461f2fcb4f0d0aa7
SSDeep: 24576:8dKEIc6equ53qrLb66XjDSlLl6q7UnxTemmn8Ll2wN8597NkGE:C/IcRqVLPjGlLl6q7UnxTeT8J2wN4Nkt
Size: 1119320 bytes
File type: EXE
Platform: WIN32
Entropy: Packed
PEID: UPolyXv05_v6
Company: GlobalSign
Created at: 2016-07-25 03:55:51
Analyzed on: Windows7 SP1 32-bit

Summary:

Trojan. A program that appears to do one thing but actually does another (a.k.a. Trojan Horse).

Payload

No specific payload has been found.

Process activity

The not-a-virus creates the following process(es):

%original file name%.exe:2060
setup.exe:568
setup.exe:2444
mini_installer.exe:3456
chrome.exe:992

The not-a-virus injects its code into the following process(es):

SearchBar.exe:3104

Mutexes

The following mutexes were created/opened:
No objects were found.

File activity

The process %original file name%.exe:2060 makes changes in the file system.
The not-a-virus creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\{D9A923EC-4232-49BA-A281-4B2AAA4B0A93}\newtab.html (98 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4ZZNMJGQ\mini_installer[1].exe (2136472 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\~sbECC2.tmp (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\{D9A923EC-4232-49BA-A281-4B2AAA4B0A93}\img\icon48.png (196 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Uninstall.exe (9428 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsw5A24.tmp\npHelper.dll (13757 bytes)
C:\Users\"%CurrentUserName%"\Desktop\Search the Web.lnk (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\{D9A923EC-4232-49BA-A281-4B2AAA4B0A93}\img\icon128.png (2600 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Application\57.0.2987.110\default_apps\BrowserIONewTab.chromeextension.crx (784 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\{D9A923EC-4232-49BA-A281-4B2AAA4B0A93} (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsw5A24.tmp (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsw5A23.tmp (49568 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsw5A24.tmp\master_preferences (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\{D9A923EC-4232-49BA-A281-4B2AAA4B0A93}\redirect.js (366 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Search the internet.lnk (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\{D9A923EC-4232-49BA-A281-4B2AAA4B0A93}\manifest.json (732 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsw5A24.tmp\StdUtils.dll (3718 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsw5A24.tmp\inetcw.dll (808 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Application\57.0.2987.110\default_apps\external_extensions.json (505 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\SearchBar.exe (34235 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsw5A24.tmp\System.dll (23 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsw5A24.tmp\mini_installer.exe (2273570 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\{D9A923EC-4232-49BA-A281-4B2AAA4B0A93}\img\icon16.png (680 bytes)

The not-a-virus deletes the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsg5A12.tmp (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\{D9A923EC-4232-49BA-A281-4B2AAA4B0A93}\img (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsw5A24.tmp (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsw5A24.tmp\StdUtils.dll (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\~sbECC2.tmp (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\{D9A923EC-4232-49BA-A281-4B2AAA4B0A93}\redirect.js (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\{D9A923EC-4232-49BA-A281-4B2AAA4B0A93}\img\icon48.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsw5A24.tmp\System.dll (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\{D9A923EC-4232-49BA-A281-4B2AAA4B0A93}\img\icon128.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsw5A24.tmp\mini_installer.exe (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\{D9A923EC-4232-49BA-A281-4B2AAA4B0A93}\newtab.html (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsw5A24.tmp\npHelper.dll (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsw5A24.tmp\inetcw.dll (0 bytes)
C:\Users\"%CurrentUserName%"\Desktop\BrowserIO.lnk (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\{D9A923EC-4232-49BA-A281-4B2AAA4B0A93}\img\icon16.png (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Application\57.0.2987.110\default_apps\BrowserIONewTab.chromeextension.crx (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\{D9A923EC-4232-49BA-A281-4B2AAA4B0A93} (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\{D9A923EC-4232-49BA-A281-4B2AAA4B0A93}\manifest.json (0 bytes)

The process SearchBar.exe:3104 makes changes in the file system.
The not-a-virus creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JYNOWECL\settings[1] (976 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8D93UTC3\chromium[1] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4ZZNMJGQ\down-arrow[1] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\25FDO7QC\main[1] (11 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JYNOWECL\main_email[1] (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4ZZNMJGQ\jquery_min[1] (96 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\25FDO7QC\search-icon[1] (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JYNOWECL\ie[1] (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8D93UTC3\Sprite_Email_V6[1] (15 bytes)

The process setup.exe:568 makes changes in the file system.
The not-a-virus creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\User Data\Crashpad\settings.dat (40 bytes)

The process setup.exe:2444 makes changes in the file system.
The not-a-virus creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\BrowserIO.lnk (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\Locales\pt-BR.pak (274 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\Locales\ja.pak (334 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\Locales\sr.pak (419 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Application\SetupMetrics\E17B.tmp (15 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\Locales\ar.pak (382 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\natives_blob.bin (334 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\Locales\ru.pak (427 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\libegl.dll (79 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\Locales\kn.pak (625 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\Locales\zh-TW.pak (237 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\Locales\he.pak (326 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\chrome_200_percent.pak (815 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\Locales\nb.pak (256 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\Locales\hu.pak (297 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\chrome.7z (232676 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\Locales\gu.pak (543 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\Locales\am.pak (385 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\Locales\de.pak (279 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\Locales\sl.pak (269 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\Locales\el.pak (489 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\chrome.VisualElementsManifest.xml (410 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\chrome_child.dll (61472 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\Locales\fr.pak (301 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Application\chrome.exe (6704 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\Locales\lt.pak (286 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\User Data\Crashpad\settings.dat (80 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\Locales\pl.pak (278 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\libglesv2.dll (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\57.0.2987.110.manifest (252 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\Locales\mr.pak (550 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\Locales\en-GB.pak (233 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\VisualElements\smalllogo.png (17 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\eventlog_provider.dll (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\Locales\zh-CN.pak (236 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\Locales\ko.pak (285 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\Locales\et.pak (251 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\Locales\fil.pak (285 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\Locales\uk.pak (435 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Application\57.0.2987.110\Installer\setup.exe (7726 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\Locales\it.pak (276 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\Locales\hi.pak (552 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\Locales\bn.pak (578 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\d3dcompiler_47.dll (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\chrome_100_percent.pak (500 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\Locales\bg.pak (458 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\Locales\es-419.pak (281 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\VisualElements\logo.png (38 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Application\master_preferences (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\Locales\da.pak (258 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\chrome.exe (828 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\Locales\id.pak (250 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\BrowserIO.lnk (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\Locales\te.pak (610 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\Locales\sk.pak (291 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\Locales\sv.pak (258 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\Locales\ca.pak (284 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BrowserIO.lnk (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\Locales\es.pak (286 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\icudtl.dat (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\Locales\cs.pak (285 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\Locales\ta.pak (635 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\chrome_watcher.dll (458 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\chrome_elf.dll (431 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\Locales\pt-PT.pak (278 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\Locales\tr.pak (276 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\Locales\fa.pak (391 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\Locales\en-US.pak (232 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\Locales\ms.pak (257 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\chrome.dll (32673 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\resources.pak (833 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\Locales\fi.pak (265 bytes)
C:\Users\"%CurrentUserName%"\Desktop\BrowserIO.lnk (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\Locales\ro.pak (285 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\Locales\nl.pak (270 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\Locales\lv.pak (287 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\snapshot_blob.bin (963 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\Locales\th.pak (532 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\Locales\hr.pak (268 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\Locales\sw.pak (261 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\Locales\ml.pak (684 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\Locales\vi.pak (311 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\Extensions\external_extensions.json (99 bytes)

The not-a-virus deletes the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsw5A24.tmp\master_preferences (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\chrome.exe (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363 (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin (0 bytes)

The process mini_installer.exe:3456 makes changes in the file system.
The not-a-virus creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\CR_A861A.tmp\CHROME.PACKED.7Z (33616 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\CR_A861A.tmp\setup.exe (17800 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\CR_A861A.tmp\SETUP.EX_ (443 bytes)

The not-a-virus deletes the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\CR_A861A.tmp\CHROME.PACKED.7Z (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\CR_A861A.tmp\setup.exe (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\CR_A861A.tmp\SETUP.EX_ (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\CR_A861A.tmp (0 bytes)

The process chrome.exe:992 makes changes in the file system.
The not-a-virus creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\User Data\EE93.tmp (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\{D9A923EC-4232-49BA-A281-4B2AAA4B0A93}.crx (772 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\User Data\Crashpad\settings.dat (160 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir992_26745\extension.zip (29834 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\User Data\Default\Preferences (4 bytes)

The not-a-virus deletes the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir992_26745 (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir992_26745\extension.zip (0 bytes)

Registry activity

The process %original file name%.exe:2060 makes changes in the system registry.
The not-a-virus creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\BrowserIO]
"EstimatedSize" = "275141"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\BrowserIO]
"UninstallCmd" = "C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Application\57.0.2987.110\Installer\setup.exe --uninstall"

[HKLM\SOFTWARE\Microsoft\Tracing\19625846d05da5f26051a990b574e659_RASMANCS]
"ConsoleTracingMask" = "4294901760"

[HKLM\SOFTWARE\Microsoft\Tracing\19625846d05da5f26051a990b574e659_RASAPI32]
"FileTracingMask" = "4294901760"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKLM\SOFTWARE\Microsoft\Tracing\19625846d05da5f26051a990b574e659_RASMANCS]
"MaxFileSize" = "1048576"

[HKLM\SOFTWARE\Microsoft\Tracing\19625846d05da5f26051a990b574e659_RASAPI32]
"MaxFileSize" = "1048576"
"EnableFileTracing" = "0"

"EnableConsoleTracing" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 3D 00 00 00 09 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\BrowserIO]
"SearchBarUrl" = "https://search.browserio.com/search?q={searchTerms}&source=d-lp0-bb8&uid=6040453b-d765-4337-9184-0ce8d43e035e&uc=20180112&iid=bio-sbe-email-ab2&domain=hemailaccessonline.com&partner=appfocus1"

[HKLM\SOFTWARE\Microsoft\Tracing\19625846d05da5f26051a990b574e659_RASMANCS]
"FileDirectory" = "%windir%\tracing"

[HKLM\SOFTWARE\Microsoft\Tracing\19625846d05da5f26051a990b574e659_RASAPI32]
"FileDirectory" = "%windir%\tracing"

[HKLM\SOFTWARE\Microsoft\Tracing\19625846d05da5f26051a990b574e659_RASMANCS]
"EnableFileTracing" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\BrowserIO]
"UninstallString" = "C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\uninstall.exe"

[HKLM\SOFTWARE\Microsoft\Tracing\19625846d05da5f26051a990b574e659_RASAPI32]
"ConsoleTracingMask" = "4294901760"

[HKLM\SOFTWARE\Microsoft\Tracing\19625846d05da5f26051a990b574e659_RASMANCS]
"FileTracingMask" = "4294901760"
"EnableConsoleTracing" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\BrowserIO]
"UninstallImp" = "http://imp.browserio.com/do/install?value=uninstall&source=d-lp0-bb8&uc=20180112&uid=6040453b-d765-4337-9184-0ce8d43e035e&iid=bio-sbe-email-ab2&domain=hemailaccessonline.com&ua=Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063&partner=appfocus1"

To automatically run itself each time Windows is booted, the not-a-virus adds the following link to its file to the system registry autorun key:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
"SearchBar" = "C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\SearchBar.exe"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The not-a-virus deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyOverride"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyServer"
"AutoConfigURL"

The process SearchBar.exe:3104 makes changes in the system registry.
The not-a-virus creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Tracing\SearchBar_RASAPI32]
"ConsoleTracingMask" = "4294901760"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKLM\SOFTWARE\Microsoft\Tracing\SearchBar_RASAPI32]
"MaxFileSize" = "1048576"

[HKLM\SOFTWARE\Microsoft\Tracing\SearchBar_RASMANCS]
"FileDirectory" = "%windir%\tracing"

[HKLM\SOFTWARE\Microsoft\Tracing\SearchBar_RASAPI32]
"EnableFileTracing" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\BrowserIO]
"LastUpdateCheck" = "1523354156"

[HKLM\SOFTWARE\Microsoft\Tracing\SearchBar_RASMANCS]
"EnableFileTracing" = "0"
"ConsoleTracingMask" = "4294901760"
"EnableConsoleTracing" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 3E 00 00 00 09 00 00 00 00 00 00 00"

[HKLM\SOFTWARE\Microsoft\Tracing\SearchBar_RASMANCS]
"MaxFileSize" = "1048576"

[HKLM\SOFTWARE\Microsoft\Tracing\SearchBar_RASAPI32]
"EnableConsoleTracing" = "0"
"FileDirectory" = "%windir%\tracing"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKLM\SOFTWARE\Microsoft\Tracing\SearchBar_RASAPI32]
"FileTracingMask" = "4294901760"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\BrowserIO]
"selectedBrw" = "1"

[HKLM\SOFTWARE\Microsoft\Tracing\SearchBar_RASMANCS]
"FileTracingMask" = "4294901760"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The not-a-virus deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyServer"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyOverride"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\BrowserIO]
"FileRemovedAtRestart"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"

The process setup.exe:2444 makes changes in the system registry.
The not-a-virus creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Clients\StartMenuInternet\BrowserIO.556COFXMM64MBX7ISZNIVHK7OM\Capabilities\URLAssociations]
"news" = "BrwIOHTML.556COFXMM64MBX7ISZNIVHK7OM"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Taskband]
"Favorites" = "00 7C 01 00 00 14 00 1F 80 C8 27 34 1F 10 5C 10"

[HKLM\SOFTWARE\Clients\StartMenuInternet\BrowserIO.556COFXMM64MBX7ISZNIVHK7OM\Capabilities\URLAssociations]
"http" = "BrwIOHTML.556COFXMM64MBX7ISZNIVHK7OM"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\BrowserIO]
"DisplayName" = "BrowserIO"

[HKLM\SOFTWARE\Clients\StartMenuInternet\BrowserIO.556COFXMM64MBX7ISZNIVHK7OM\Capabilities\URLAssociations]
"ftp" = "BrwIOHTML.556COFXMM64MBX7ISZNIVHK7OM"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\chrome.exe]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Application\chrome.exe"

[HKLM\SOFTWARE\Clients\StartMenuInternet\BrowserIO.556COFXMM64MBX7ISZNIVHK7OM\InstallInfo]
"ReinstallCommand" = "C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Application\chrome.exe --make-default-browser"

[HKCR\.htm\OpenWithProgids]
"BrwIOHTML.556COFXMM64MBX7ISZNIVHK7OM" = ""

[HKLM\SOFTWARE\Clients\StartMenuInternet\BrowserIO.556COFXMM64MBX7ISZNIVHK7OM\Capabilities\FileAssociations]
".htm" = "BrwIOHTML.556COFXMM64MBX7ISZNIVHK7OM"

[HKLM\SOFTWARE\Clients\StartMenuInternet\BrowserIO.556COFXMM64MBX7ISZNIVHK7OM\Capabilities\URLAssociations]
"nntp" = "BrwIOHTML.556COFXMM64MBX7ISZNIVHK7OM"

[HKCR\BrwIOHTML.556COFXMM64MBX7ISZNIVHK7OM\DefaultIcon]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Application\chrome.exe,0"

[HKCU\Software\BrowserIO]
"oopcrashes" = "1"

[HKLM\SOFTWARE\Clients\StartMenuInternet\BrowserIO.556COFXMM64MBX7ISZNIVHK7OM\Capabilities\URLAssociations]
"https" = "BrwIOHTML.556COFXMM64MBX7ISZNIVHK7OM"
"sms" = "BrwIOHTML.556COFXMM64MBX7ISZNIVHK7OM"

[HKLM\SOFTWARE\Clients\StartMenuInternet\BrowserIO.556COFXMM64MBX7ISZNIVHK7OM\Capabilities\FileAssociations]
".xht" = "BrwIOHTML.556COFXMM64MBX7ISZNIVHK7OM"

[HKCU\Software\BrowserIO]
"UninstallString" = "C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Application\57.0.2987.110\Installer\setup.exe"

[HKLM\SOFTWARE\Clients\StartMenuInternet\BrowserIO.556COFXMM64MBX7ISZNIVHK7OM\Capabilities]
"ApplicationIcon" = "C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Application\chrome.exe,0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\BrowserIO]
"DisplayIcon" = "C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Application\chrome.exe,0"

[HKLM\SOFTWARE\Clients\StartMenuInternet\BrowserIO.556COFXMM64MBX7ISZNIVHK7OM\shell\open\command]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Application\chrome.exe"

[HKCU\Software\BrowserIO\Commands\on-os-upgrade]
"CommandLine" = "C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Application\57.0.2987.110\Installer\setup.exe --on-os-upgrade --verbose-logging"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\BrowserIO]
"VersionMajor" = "2987"

[HKCR\.svg\OpenWithProgIds]
"BrwIOHTML.556COFXMM64MBX7ISZNIVHK7OM" = ""

[HKLM\SOFTWARE\Clients\StartMenuInternet\BrowserIO.556COFXMM64MBX7ISZNIVHK7OM\InstallInfo]
"HideIconsCommand" = "C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Application\chrome.exe --hide-icons"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Taskband]
"FavoritesVersion" = "2"

[HKLM\SOFTWARE\Clients\StartMenuInternet\BrowserIO.556COFXMM64MBX7ISZNIVHK7OM]
"(Default)" = "BrowserIO"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\BrowserIO]
"NoModify" = "1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer]
"GlobalAssocChangedCounter" = "48"

[HKCR\.webp\OpenWithProgids]
"BrwIOHTML.556COFXMM64MBX7ISZNIVHK7OM" = ""

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\BrowserIO]
"NoRepair" = "1"

[HKCU\Software\BrowserIO]
"InstallerResult" = "0"
"InstallerSuccessLaunchCmdLine" = "C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Application\chrome.exe"

[HKLM\SOFTWARE\Clients\StartMenuInternet\BrowserIO.556COFXMM64MBX7ISZNIVHK7OM\InstallInfo]
"ShowIconsCommand" = "C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Application\chrome.exe --show-icons"

[HKLM\SOFTWARE\Clients\StartMenuInternet\BrowserIO.556COFXMM64MBX7ISZNIVHK7OM\Capabilities\FileAssociations]
".html" = "BrwIOHTML.556COFXMM64MBX7ISZNIVHK7OM"

[HKCU\Software\BrowserIO]
"UninstallArguments" = " --uninstall"

[HKLM\SOFTWARE\Clients\StartMenuInternet\BrowserIO.556COFXMM64MBX7ISZNIVHK7OM\Capabilities\FileAssociations]
".xhtml" = "BrwIOHTML.556COFXMM64MBX7ISZNIVHK7OM"

[HKCU\Software\BrowserIO]
"pv" = "57.0.2987.110"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\BrowserIO]
"InstallDate" = "20180410"

[HKLM\SOFTWARE\Clients\StartMenuInternet\BrowserIO.556COFXMM64MBX7ISZNIVHK7OM\Capabilities\FileAssociations]
".webp" = "BrwIOHTML.556COFXMM64MBX7ISZNIVHK7OM"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\BrowserIO]
"InstallLocation" = "C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Application"

[HKCR\.xht\OpenWithProgids]
"BrwIOHTML.556COFXMM64MBX7ISZNIVHK7OM" = ""

[HKLM\SOFTWARE\Clients\StartMenuInternet\BrowserIO.556COFXMM64MBX7ISZNIVHK7OM\Capabilities\URLAssociations]
"mailto" = "BrwIOHTML.556COFXMM64MBX7ISZNIVHK7OM"

[HKCU\Software\BrowserIO]
"lang" = "en"
"FirstNotDefault" = "Type: REG_QWORD, Length: 8"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\BrowserIO]
"Version" = "57.0.2987.110"

[HKLM\SOFTWARE\Clients\StartMenuInternet\BrowserIO.556COFXMM64MBX7ISZNIVHK7OM\Capabilities\Startmenu]
"StartMenuInternet" = "BrowserIO.556COFXMM64MBX7ISZNIVHK7OM"

[HKCR\.shtml\OpenWithProgids]
"BrwIOHTML.556COFXMM64MBX7ISZNIVHK7OM" = ""

[HKCU\Software\BrowserIO\Commands\on-os-upgrade]
"AutoRunOnOSUpgrade" = "1"

[HKLM\SOFTWARE\Clients\StartMenuInternet\BrowserIO.556COFXMM64MBX7ISZNIVHK7OM\Capabilities\URLAssociations]
"irc" = "BrwIOHTML.556COFXMM64MBX7ISZNIVHK7OM"

[HKCU\Software\BrowserIO]
"Name" = "BrowserIO"

[HKLM\SOFTWARE\Clients\StartMenuInternet\BrowserIO.556COFXMM64MBX7ISZNIVHK7OM\Capabilities]
"ApplicationName" = "BrowserIO"

[HKCU\Software\BrowserIO]
"InstallerError" = "0"

[HKLM\SOFTWARE\Clients\StartMenuInternet\BrowserIO.556COFXMM64MBX7ISZNIVHK7OM\Capabilities\FileAssociations]
".svg" = "BrwIOHTML.556COFXMM64MBX7ISZNIVHK7OM"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\BrowserIO]
"VersionMinor" = "110"

[HKLM\SOFTWARE\Clients\StartMenuInternet\BrowserIO.556COFXMM64MBX7ISZNIVHK7OM\Capabilities\URLAssociations]
"webcal" = "BrwIOHTML.556COFXMM64MBX7ISZNIVHK7OM"

[HKLM\SOFTWARE\RegisteredApplications]
"BrowserIO.556COFXMM64MBX7ISZNIVHK7OM" = "Software\Clients\StartMenuInternet\BrowserIO.556COFXMM64MBX7ISZNIVHK7OM\Capabilities"

[HKLM\SOFTWARE\Clients\StartMenuInternet\BrowserIO.556COFXMM64MBX7ISZNIVHK7OM\Capabilities\URLAssociations]
"urn" = "BrwIOHTML.556COFXMM64MBX7ISZNIVHK7OM"

[HKLM\SOFTWARE\Clients\StartMenuInternet\BrowserIO.556COFXMM64MBX7ISZNIVHK7OM\InstallInfo]
"IconsVisible" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\BrowserIO]
"DisplayVersion" = "57.0.2987.110"

[HKCU\Software\BrowserIO]
"InstallerProgress" = "18"

[HKLM\SOFTWARE\Clients\StartMenuInternet\BrowserIO.556COFXMM64MBX7ISZNIVHK7OM\Capabilities\URLAssociations]
"mms" = "BrwIOHTML.556COFXMM64MBX7ISZNIVHK7OM"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\BrowserIO]
"Publisher" = "BrowserIO"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Taskband]
"FavoritesChanges" = "9"

[HKLM\SOFTWARE\Clients\StartMenuInternet\BrowserIO.556COFXMM64MBX7ISZNIVHK7OM\Capabilities\FileAssociations]
".pdf" = "BrwIOHTML.556COFXMM64MBX7ISZNIVHK7OM"

[HKLM\SOFTWARE\Clients\StartMenuInternet\BrowserIO.556COFXMM64MBX7ISZNIVHK7OM\Capabilities\URLAssociations]
"smsto" = "BrwIOHTML.556COFXMM64MBX7ISZNIVHK7OM"

[HKLM\SOFTWARE\Clients\StartMenuInternet\BrowserIO.556COFXMM64MBX7ISZNIVHK7OM\Capabilities\FileAssociations]
".shtml" = "BrwIOHTML.556COFXMM64MBX7ISZNIVHK7OM"

[HKCR\BrwIOHTML.556COFXMM64MBX7ISZNIVHK7OM\shell\open\command]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Application\chrome.exe -- %1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Taskband]
"FavoritesResolve" = "CC 02 00 00 4C 00 00 00 01 14 02 00 00 00 00 00"

[HKLM\SOFTWARE\Clients\StartMenuInternet\BrowserIO.556COFXMM64MBX7ISZNIVHK7OM\Capabilities]
"ApplicationDescription" = "BrowserIO is a web browser that runs webpages and applications with lightning speed. It's fast, stable, and easy to use. Browse the web more safely with malware and phishing protection built into BrowserIO."

[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\BrowserIO]
"UninstallString" = "C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Application\57.0.2987.110\Installer\setup.exe --uninstall"

[HKCR\.pdf\OpenWithProgIds]
"BrwIOHTML.556COFXMM64MBX7ISZNIVHK7OM" = ""

[HKLM\SOFTWARE\Clients\StartMenuInternet\BrowserIO.556COFXMM64MBX7ISZNIVHK7OM\DefaultIcon]
"(Default)" = "C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Application\chrome.exe,0"

[HKCR\.xhtml\OpenWithProgids]
"BrwIOHTML.556COFXMM64MBX7ISZNIVHK7OM" = ""

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\chrome.exe]
"Path" = "C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Application"

[HKLM\SOFTWARE\Clients\StartMenuInternet\BrowserIO.556COFXMM64MBX7ISZNIVHK7OM\Capabilities\URLAssociations]
"tel" = "BrwIOHTML.556COFXMM64MBX7ISZNIVHK7OM"

[HKCR\BrwIOHTML.556COFXMM64MBX7ISZNIVHK7OM]
"(Default)" = "BrowserIO HTML Document"

[HKCR\.html\OpenWithProgids]
"BrwIOHTML.556COFXMM64MBX7ISZNIVHK7OM" = ""

The process chrome.exe:992 makes changes in the system registry.
The not-a-virus creates and/or sets the following values in system registry:

[HKCU\Software\BrowserIO]
"UsageStatsInSample" = "1"
"metricsid_enableddate" = "0"

[HKCU\Software\BrowserIO\StabilityMetrics]
"user_experience_metrics.stability.exited_cleanly" = "1"

[HKCU\Software\BrowserIO]
"metricsid_installdate" = "0"
"metricsid" = ""
"usagestats" = "0"

The not-a-virus deletes the following registry key(s):

[HKCU\Software\BrowserIO\PreReadFieldTrial]

Dropped PE files

HOSTS file anomalies

No changes have been detected.

Rootkit activity

No anomalies have been detected.

Propagation

VersionInfo

Company Name: GlobalSign
Product Name: BrowserIO
Product Version: 1.32.0.2
Legal Copyright: Copyright GlobalSign
Legal Trademarks:
Original Filename:
Internal Name:
File Version: 1.32.0.2
File Description: BrowserIO setup
Comments:
Language: Chinese (Simplified, PRC)

PE Sections

Dropped from:

Downloaded by:

Similar by SSDeep:

Similar by Lavasoft Polymorphic Checker:

URLs

URL	IP
hxxp://imp.browserio.com/do/install?value=started&source=d-lp0-bb8&uc=20180112&uid=6040453b-d765-4337-9184-0ce8d43e035e&iid=bio-sbe-email-ab2&domain=hemailaccessonline.com&ua=Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063&partner=appfocus1&distSubId3=1.32.0.2&distSubId4=InternetExplorer&distSubId5=6.1	54.243.151.72
hxxp://imp.browserio.com/do/event?value=alive&source=d-lp0-bb8&uc=20180112&uid=6040453b-d765-4337-9184-0ce8d43e035e&iid=bio-sbe-email-ab2&domain=hemailaccessonline.com&ua=Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063&partner=appfocus1&distSubId3=1.32.0.2&distSubId4=InternetExplorer&distSubId5=6.1	54.243.151.72
hxxp://imp.browserio.com/do/install?value=complete&source=d-lp0-bb8&uc=20180112&uid=6040453b-d765-4337-9184-0ce8d43e035e&iid=bio-sbe-email-ab2&domain=hemailaccessonline.com&ua=Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063&partner=appfocus1&distSubId3=1.32.0.2&distSubId4=InternetExplorer&distSubId5=6.1	54.243.151.72
hxxp://search.browserio.com/Content/kits/SBVersion.json?source=d-lp0-bb8&uid=6040453b-d765-4337-9184-0ce8d43e035e&uc=20180112&iid=bio-sbe-email-ab2&domain=hemailaccessonline.com&partner=appfocus1&distSubId3=1.32.0.2&distSubId4=InternetExplorer&distSubId5=6.1&distSubId6=update	107.22.239.30
hxxp://imp.browserio.com/do/install?value=sbstarted&source=d-lp0-bb8&uc=20180112&uid=6040453b-d765-4337-9184-0ce8d43e035e&iid=bio-sbe-email-ab2&domain=hemailaccessonline.com&ua=Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063&partner=appfocus1&distSubId3=1.32.0.2&distSubId4=InternetExplorer&distSubId5=6.1	54.243.151.72
hxxp://d1d55t0xidzq46.cloudfront.net/kits/chromium/mini_installer.exe
hxxp://x.ss2.us/x.cer	13.32.176.25
hxxp://fg.download.windowsupdate.com.c.footprint.net/msdownload/update/v3/static/trustedr/en/authrootstl.cab
hxxp://o.ss2.us//MEowSDBGMEQwQjAJBgUrDgMCGgUABBSLwZ6EW5gdYc9UaSEaaLjjETNtkAQUv1+30c7dH4b0W1Ws3NcQwg6piOcCCQCnDkpMNIK3fw==	13.32.176.124
hxxp://ocsp.rootg2.amazontrust.com/MFQwUjBQME4wTDAJBgUrDgMCGgUABBSIfaREXmfqfJR3TkMYnD7O5MhzEgQUnF8A36oB1zArOIiiuG1KnPIRkYMCEwZ/lEoqJ83z+sKuKwH5CO65xMY=	13.32.176.16
hxxp://crl.rootg2.amazontrust.com/rootg2.crl	13.32.176.90
hxxp://ocsp.rootg2.amazontrust.com/MFQwUjBQME4wTDAJBgUrDgMCGgUABBRPWaOUU8+5VZ5/a9jFTaU9pkK3FAQUhBjMhTTsvAyUlC4IWZzHshBOCggCEwZ/lFeFh+isd96yUzJbvJmLVg0=	13.32.176.16
hxxp://crl.rootg2.amazontrust.com/rootca1.crl	13.32.176.90
hxxp://ocsp.sca1b.amazontrust.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQz9arGHWbnBV0DFzpNHz4YcTiFDQQUWaRmBlKge5WSPKOUByeWdFv5PdACEATF6CtQrCRBXA3BoNLD7lk=	13.32.176.75
hxxp://crl.sca1b.amazontrust.com/sca1b.crl	13.32.176.216
hxxp://imp.browserio.com/do/install?value=setupcomplete&source=d-lp0-bb8&uc=20180112&uid=6040453b-d765-4337-9184-0ce8d43e035e&iid=bio-sbe-email-ab2&domain=hemailaccessonline.com&ua=Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063&partner=appfocus1&distSubId2=57.0.2987.110&distSubId3=1.32.0.2&distSubId4=InternetExplorer&distSubId5=6.1	54.243.151.72
hxxp://www3.l.google.com/gsr2/ME4wTDBKMEgwRjAJBgUrDgMCGgUABBTgXIsxbvr2lBkPpoIEVRE6gHlCnAQUm+IHV2ccHsBqBt5ZtJot39wZhi4CDQHjqTAc/HIGOD+aUx0=
hxxp://apps.digsigtrust.com/roots/dstrootcax3.p7c
hxxp://www3.l.google.com/GTSGIAG3/MEkwRzBFMEMwQTAJBgUrDgMCGgUABBT27bBjYjKBmjX2jXWgnQJKEapsrQQUd8K4UJpndnaxLcKG0IOgfqZ+uksCCBHSn7NRwhCM
hxxp://a279.dscq.akamai.net/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRv9GhNQxLSSGKBnMArPUcsHYovpgQUxKexpHsscfrb4UuQdf/EFWCFiRACEAoBQUIAAAFThXNqC4Xspwg=
hxxp://www3.l.google.com/GTSGIAG3.crl
hxxp://cs9.wpc.v0cdn.net/IE9CompatViewList.xml
hxxp://a1363.dscg.akamai.net/pki/crl/products/tspca.crl
www.googletagmanager.com	216.58.215.72
www.download.windowsupdate.com	67.26.75.254
www.gannett-cdn.com	151.101.2.62
apps.identrust.com	192.35.177.64
crl.rootca1.amazontrust.com	13.32.176.59
crl.pki.goog	216.58.215.78
update.searchincognitopro.com	13.32.176.7
api.rss2json.com	178.62.50.120
ie9cvlist.ie.microsoft.com	93.184.221.200
isrg.trustid.ocsp.identrust.com	91.223.19.241
ocsp.pki.goog	216.58.215.78
ocsp.rootca1.amazontrust.com	13.32.176.201
crl.microsoft.com	91.223.19.240
assets.feedblitz.com	13.32.163.148
www.google-analytics.com	216.58.215.78

IDS verdicts (Suricata alerts: Emerging Threats ET ruleset)

ET POLICY User-Agent (NSIS_Inetc (Mozilla)) - Sometimes used by hostile installers
ET POLICY PE EXE or DLL Windows file download HTTP
ET SHELLCODE Possible TCP x86 JMP to CALL Shellcode Detected

Traffic

GET /sca1b.crl HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: crl.sca1b.amazontrust.com

HTTP/1.1 200 OK

Content-Type: application/x-pkcs7-crl

Content-Length: 47323

Connection: keep-alive

Date: Mon, 09 Apr 2018 17:31:17 GMT

Cache-Control: max-age=172800

Expires: Wed, 11 Apr 2018 17:31:17 GMT

X-CFHash: "d3312dedc7c744a6001ac66d8f490866"

X-CFF: B

Last-Modified: Mon, 09 Apr 2018 17:15:12 GMT

X-CF3: M

CF4Age: 0

x-cf-tsc: 1523295077

CF4ttl: 31536000.000

X-CF2: H

Accept-Ranges: bytes

Server: CFS 0215

X-CF1: 13483:fD.fra2:cf:cacheN.fra2-01:P

Age: 59115

X-Cache: Hit from cloudfront

Via: 1.1 7931eaa1dff1cb95b1efbb64ac37670c.cloudfront.net (CloudFront)

X-Amz-Cf-Id: uouSQ7W0RjdA2JLsnmWX583euROV-5bAN8TFukZgzXQc0WhUwYsxQQ==
0...0......0...*.H........0F1.0...U....US1.0...U....Amazon1.0...U....S
erver CA 1B1.0...U....Amazon..180409170407Z..180416170000Z0...0!......
....P. ...{...170322152617Z0!......~.`"P0..A..S..170601060052Z0!...:..
..M....]...%..170601060145Z0!.........-E..<.D....170626212107Z0!...
..,.ghi.f(.......170717174247Z0!....f....l.....D....170725232901Z0!...
.7....V.;..T..z..170803221924Z0!...\*.U....Q.{.z....170803222325Z0!...
.?..Z.=.*........170807230709Z0!...331......G#..F...170811185730Z0!...
.C....#..@7..e...170814201112Z0!......e....,%. .....170816203558Z0!...
.Q...%. .........170818175637Z0!.....3>........O.k..170818175707Z0!
...qN..L&.^3G....G..170818175748Z0!...bl_..r...kC#.C\..170818175922Z0!
.....G\.V.......%}..170821212213Z0!...B........?.7.p...170822175123Z0!
.....enk.6..z.'*>...170822182644Z0!.....eT..W_5.zG.b...170831010156
Z0!.....0n.z5,.&.......170831192925Z0!...0.\$6~h4.;...:H..170901220230
Z0!...Y[.j.G.G..o......170901230928Z0!....q..}.?..(.3..,..170907185827
Z0!....S..K.C..2..vQ(..170907232106Z0!...'...wWXw.[T......170907235746
Z0!......M.&_..I.. k...170908190811Z0!....<..,H|P.2..i....170908190
827Z0!....@.F.Eh..<s.j....170908190838Z0!....\r..C`.J.45#....170910
020051Z0!......B...;2.R......170912234632Z0!....>...0.q}..,2....170
913001321Z0!...G}...CfW.EH... ..170918154322Z0!.... .c..z.y..b..i..170
918192406Z0!...dP7..1..n....\...170918192635Z0!.......m_e...^. I...170
918192928Z0!...wrr......y...et..170921195155Z0!.... ....g....i.....170
921215705Z0!....g[._.[.u.U-Z0V..170925031913Z0!...8.O.-R..iL.T....
<<< skipped >>>

GET //MEowSDBGMEQwQjAJBgUrDgMCGgUABBSLwZ6EW5gdYc9UaSEaaLjjETNtkAQUv1+30c7dH4b0W1Ws3NcQwg6piOcCCQCnDkpMNIK3fw== HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: o.ss2.us

HTTP/1.1 200 OK

Content-Type: application/ocsp-response

Content-Length: 1744

Connection: keep-alive

Date: Tue, 10 Apr 2018 01:33:45 GMT

Server: Apache

Content-Transfer-Encoding: Binary

Cache-Control: max-age=118623, public, no-transform, must-revalidate

Last-Modified: Tue, 10 Apr 2018 00:14:52 GMT

Expires: Wed, 11 Apr 2018 12:14:52 GMT

ETag: "ea0253be6ffcc8b5276213212d62e513c5576fcd"

P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"

Age: 30147

X-Cache: Hit from cloudfront

Via: 1.1 d9286e717f02e3155c648bcb65b34b7d.cloudfront.net (CloudFront)

X-Amz-Cf-Id: aeXq8gLBoFGFhF_Fp0mpcLW5rPPDVZZWUuYueRgAthH500zLn12g1w==
0..........0..... .....0......0...0......0..1.0...U....US1.0...U....Ar
izona1.0...U....Scottsdale1%0#..U....Starfield Technologies, Inc.110/.
.U...(Starfield Root Validation Authority - G1..20180410001452Z0l0j0B0
... ............[..a.Ti!.h...3m...._.......[U..............JL4.......2
0180410001452Z....20180411121452Z0...*.H.............-.i>..fXm.....
U..f|..@... ".V4.!...d...........l...$...0t.4...r......6.a....|y..n. .
<..'....p$....d..w..Sn.L.x..J`Z.]..D>....k.p[lg. ..uam.....2....
.S8..D.l.ja...\hBD.g._6...FP.?....Q...M..D.0....P.........R.0...H..h6]
.4.J...J.P......Hz....OOU7.%.o.U9..p'_....0..{0..w0.._.......(...M..B0
...*.H........0h1.0...U....US1%0#..U....Starfield Technologies, Inc.12
00..U...)Starfield Class 2 Certification Authority0...161214070000Z..2
11214070000Z0..1.0...U....US1.0...U....Arizona1.0...U....Scottsdale1%0
#..U....Starfield Technologies, Inc.110/..U...(Starfield Root Validati
on Authority - G10.."0...*.H.............0.............}...@.H........
..j.b.2.c....'eSA.....6""2.hf.m.m9........_N."gV..{.J"{..0f.W$.Xr....|
U.F.!.K.0 .(p......9.I......c.c\.9.xt.v.UN...%....,R....ZJ......rz.Z..
p...ru.6.....0..t....*...T.W.....?...X...( ..z.[. .A... z.[>-.y>
...nvU...g.wU........ Fh.6F...}.........0..0...U.......0.0...U........
...0...U.%..0... .......0...U........J!~...}....^].....0... .....0....
..0C..U...<0:08.6.4.2hXXp://crl.starfieldtech.com/repository/sfroot
.crl0P..U. .I0G0E..`.H...n....0604.. ........(hXXp://crl.starfieldtech
.com/repository/0...*.H..................H.... ..~C.&...N..y..~.j}
<<< skipped >>>

GET /x.cer HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: x.ss2.us

HTTP/1.1 200 OK

Content-Type: application/pkix-cert

Content-Length: 1302

Connection: keep-alive

Date: Wed, 14 Jun 2017 05:42:11 GMT

Last-Modified: Sun, 13 Dec 2015 04:05:29 GMT

ETag: "55540a230bdab55187a841cfe1aa1545"

Cache-Control: max-age=31556952, public

Accept-Ranges: bytes

Server: AmazonS3

Age: 25935231

X-Cache: Hit from cloudfront

Via: 1.1 1d12f97c7be42794de1ee8199cbc4d37.cloudfront.net (CloudFront)

X-Amz-Cf-Id: -SsfpFqwOw1KWa6-jmi9O1zc4FYWWCIIwKZyjk7FmC12dmGbH1KmxA==
0...0..{.........0...*.H........0..1$0"..U....ValiCert Validation Netw
ork1.0...U....ValiCert, Inc.1503..U...,ValiCert Class 2 Policy Validat
ion Authority1!0...U....hXXp://VVV.valicert.com/1 0...*.H........info@
valicert.com0...040629173916Z..240629173916Z0h1.0...U....US1%0#..U....
Starfield Technologies, Inc.1200..U...)Starfield Class 2 Certification
 Authority0.. 0...*.H.............0.........2...q......d..M.....?...&l
t;........n S..$.>...._..'D.(.?{..*...S/.......f.9.M.Z.s.%f.w..Y.J.
%.T.&.....0p...F*...)...........4_.C..6.f<......:>..;..efz...=.q
Q<0._.=ws.].l.#V. .&......?...y..6=...5..i......d...3n^J].........n
.5#^.._=...v..>.x..Bgk.....o..D..........0...0...U......._.......[U
.........0....U.#...0........0..1$0"..U....ValiCert Validation Network
1.0...U....ValiCert, Inc.1503..U...,ValiCert Class 2 Policy Validation
 Authority1!0...U....hXXp://VVV.valicert.com/1 0...*.H........info@val
icert.com...0...U.......0....09.. ........-0 0).. .....0...hXXp://ocsp
.starfieldtech.com0J..U...C0A0?.=.;.9hXXp://certificates.starfieldtech
.com/repository/root.crl0Q..U. .J0H0F..U. .0>0<.. ........0http:
//certificates.starfieldtech.com/repository0...U...........0...*.H....
.........b...]%.p=..*q.}..7.Ujm.......`J ...=u...C.h\%...}3.{.vg...S|.
..[){.Jo..D..Ek2..x.d.......-_M....8..f..A.UmZd=......P...D...s=.%..
<<< skipped >>>

GET /IE9CompatViewList.xml HTTP/1.1

Accept: */*

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)

Host: ie9cvlist.ie.microsoft.com

Connection: Keep-Alive

Cookie: WT_FPC=id=282925e51d781c135341384917303239:lv=1384918396916:ss=1384917303239

HTTP/1.1 200 OK

Content-Encoding: gzip

Cache-Control: max-age=21600

Content-MD5: UKhVh6CDGGQDbPdE2XvLTA==

Content-Type: text/xml

Date: Tue, 10 Apr 2018 09:56:56 GMT

Etag: 0x8D4D06A67EE489F

Last-Modified: Fri, 21 Jul 2017 18:57:59 GMT

Server: ECAcc (waw/0574)

Vary: Accept-Encoding

X-Cache: HIT

x-ms-blob-type: BlockBlob

x-ms-lease-status: unlocked

x-ms-request-id: a4a735b7-301e-0022-0c83-d08334000000

x-ms-version: 2009-09-19

Content-Length: 13784
.....NrY...}]s.....V.....x,.....r.w.y8u.N..}..$.b,.j..c...d;...8T;.{fz
:-....E.........,J....{...o2.u..... .z.~.._.......,.i.L.J..2,Tn..7@...
......._........^......c.../.._H.(|._.<q2...?..Q.8....Y.........1..
...w..H.Be.t..S..^(.".k......._'.....CQ.J........:..._.U"...r.}.._~n..
...A.._5..Y..F...7..!I.@...c.Q..V.....l......4..A.y".....Te..eO...7.;.
_..a..=..IC}..5.[..x.a.3s.kN...}..3X7........3..A.|..f3.s....a..BF...7
....0...B.$g.\3c."...\dQ%.U.3=.e~..6<Mf..O".VF$.h.d"........h. ..A.
y.)Cp...e: 7.....g.1.W.a.2.5.d..-..K$..P...y.Dh.-.D....>^.TZ....H..
..O..B..........Un...2d&.........]........U...b]....P.....zJ..E.f[...2
.[...J.Z......<.:..d..!.jd.S.^... ....e=..(7..s.........B).2.....E.
.,..k.D..2Wh%...3.T?..2a]2z..J.S..?;e....a.?.e"SX[.G.....T.?V")e..*`O.
.$...}.H..? .S.@8l....)*.~....?...(`...........,...m...DY.aR.....RU..\
....o*..Lk*....S.}O.H&........,{.@......"..{(3*.U....3F...u..H..s....6
K...~ZW*...........Q.Q........q.#...`{q.x.............6.v.......z....v
Q...{.qS.`Sp.2;.Q.....W......]...."B. >...8......\3......s...N.D.$.
..Z...).@D:.z....R..v.. ..&....z.8..`..j....H.u...E.A=#..b....U...\.Z.
.l...{k....:k......A.... .E.9...o..H.......`Wd..IT..>...\.O...d..8P
a..s...5.Hc`.S..Rc .=xJ.F2K...X..h...=...T..,...%I...?j...K.#.'j....I.
.$.2.c'Y..v...$.......E"...*. .l5..l..k.c.V.$....).iQ..............s.c
v5b...y.[..f.O..zN...m. a..NC..,...\..S...%...*K...Hs6-......z..v...`.
e...`..7......I..E...m=[..u.X..7-....d.VK...............n`;r.-G..@[%%p
.6.=[U........V@.V...}..........1..Q.NH.n.P.d^.U......P.;8..J.c..k
<<< skipped >>>

GET /rootg2.crl HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: crl.rootg2.amazontrust.com

HTTP/1.1 200 OK

Content-Type: application/pkix-crl

Content-Length: 608

Connection: keep-alive

Date: Tue, 12 Dec 2017 17:25:52 GMT

Last-Modified: Tue, 12 Dec 2017 16:18:38 GMT

ETag: "425ba4bafed05b83120d4319b565aa08"

Cache-Control: public

Expires: Thu, 06 Dec 2018 00:00:00 GMT

x-amz-version-id: 8y8fx1iXoCLZf9aSzjpcMfT0yhWp.nTc

Accept-Ranges: bytes

Server: AmazonS3

Age: 10254634

X-Cache: Hit from cloudfront

Via: 1.1 1573330ae19bba1a59e676d5c072337e.cloudfront.net (CloudFront)

X-Amz-Cf-Id: Q37g-v_W05nC73825IRkfLYwKu_UEAGq5MhTTDKAvgzq6KlSX56Zng==
0..\0..D...0...*.H........0..1.0...U....US1.0...U....Arizona1.0...U...
.Scottsdale1%0#..U....Starfield Technologies, Inc.1;09..U...2Starfield
 Services Root Certificate Authority - G2..171206181845Z..181206000000
Z0F0 .....130131181337Z0.0...U.......0"..).S..140401194621Z0.0...U....
..../0-0...U.......0...U.#..0...._.....0 8...mJ.....0...*.H...........
...Y....O.q.w.|.f....Q..w}...3.q...@...].M...%L-...6E..[s.Kr..7z......
..$..L.?...\.aQ.&..5.{..gV..g-M...v.......gc2,.W.wDt`h.....k.....K...T
Xy,......3....Ie[..{I.;9.....w..._..^..c,v..B.<|S.NeUN.../XX|......
...$..OOm..r..fd.f.oP..o../nzH........x.s....{Dv[.,HTTP/1.1 200 OK..Co
ntent-Type: application/pkix-crl..Content-Length: 608..Connection: kee
p-alive..Date: Tue, 12 Dec 2017 17:25:52 GMT..Last-Modified: Tue, 12 D
ec 2017 16:18:38 GMT..ETag: "425ba4bafed05b83120d4319b565aa08"..Cache-
Control: public..Expires: Thu, 06 Dec 2018 00:00:00 GMT..x-amz-version
-id: 8y8fx1iXoCLZf9aSzjpcMfT0yhWp.nTc..Accept-Ranges: bytes..Server: A
mazonS3..Age: 10254634..X-Cache: Hit from cloudfront..Via: 1.1 1573330
ae19bba1a59e676d5c072337e.cloudfront.net (CloudFront)..X-Amz-Cf-Id: Q3
7g-v_W05nC73825IRkfLYwKu_UEAGq5MhTTDKAvgzq6KlSX56Zng==..0..\0..D...0..
.*.H........0..1.0...U....US1.0...U....Arizona1.0...U....Scottsdale1%0
#..U....Starfield Technologies, Inc.1;09..U...2Starfield Services Root
 Certificate Authority - G2..171206181845Z..181206000000Z0F0 .....1301
31181337Z0.0...U.......0"..).S..140401194621Z0.0...U......../0-0...U..
.....0...U.#..0...._.....0 8...mJ.....0...*.H..............Y....O.
<<< skipped >>>

GET /do/install?value=started&source=d-lp0-bb8&uc=20180112&uid=6040453b-d765-4337-9184-0ce8d43e035e&iid=bio-sbe-email-ab2&domain=hemailaccessonline.com&ua=Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063&partner=appfocus1&distSubId3=1.32.0.2&distSubId4=InternetExplorer&distSubId5=6.1 HTTP/1.1

User-Agent: chrmm

Host: imp.browserio.com

Connection: Keep-Alive

Cache-Control: no-cache

HTTP/1.1 200 OK

Date: Tue, 10 Apr 2018 09:55:53 GMT

Server: Kestrel

X-Powered-By: ASP.NET

Content-Length: 0

Connection: keep-alive
HTTP/1.1 200 OK..Date: Tue, 10 Apr 2018 09:55:53 GMT..Server: Kestrel.
.X-Powered-By: ASP.NET..Content-Length: 0..Connection: keep-alive..ont>....


GET /do/install?value=sbstarted&source=d-lp0-bb8&uc=20180112&uid=6040453b-d765-4337-9184-0ce8d43e035e&iid=bio-sbe-email-ab2&domain=hemailaccessonline.com&ua=Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063&partner=appfocus1&distSubId3=1.32.0.2&distSubId4=InternetExplorer&distSubId5=6.1 HTTP/1.1

User-Agent: chrmm

Host: imp.browserio.com

Connection: Keep-Alive

Cache-Control: no-cache

HTTP/1.1 200 OK

Date: Tue, 10 Apr 2018 09:55:54 GMT

Server: Kestrel

X-Powered-By: ASP.NET

Content-Length: 0

Connection: keep-alive
HTTP/1.1 200 OK..Date: Tue, 10 Apr 2018 09:55:54 GMT..Server: Kestrel.
.X-Powered-By: ASP.NET..Content-Length: 0..Connection: keep-alive..ont>....


GET /do/install?value=setupcomplete&source=d-lp0-bb8&uc=20180112&uid=6040453b-d765-4337-9184-0ce8d43e035e&iid=bio-sbe-email-ab2&domain=hemailaccessonline.com&ua=Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063&partner=appfocus1&distSubId2=57.0.2987.110&distSubId3=1.32.0.2&distSubId4=InternetExplorer&distSubId5=6.1 HTTP/1.1

User-Agent: chrmm

Host: imp.browserio.com

Connection: Keep-Alive

Cache-Control: no-cache

HTTP/1.1 200 OK

Date: Tue, 10 Apr 2018 09:56:32 GMT

Server: Kestrel

X-Powered-By: ASP.NET

Content-Length: 0

Connection: keep-alive
HTTP/1.1 200 OK..Date: Tue, 10 Apr 2018 09:56:32 GMT..Server: Kestrel.
.X-Powered-By: ASP.NET..Content-Length: 0..Connection: keep-alive..

GET /rootca1.crl HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: crl.rootca1.amazontrust.com

HTTP/1.1 200 OK

Content-Type: application/pkix-crl

Content-Length: 439

Connection: keep-alive

Date: Tue, 12 Dec 2017 17:25:52 GMT

Last-Modified: Tue, 12 Dec 2017 16:18:33 GMT

ETag: "809a76b87e3e2a9f0c864610b7ccbc3c"

Cache-Control: public

Expires: Thu, 06 Dec 2018 00:00:00 GMT

x-amz-version-id: WKVmHgNA6ZV2w6nUGb9jmlkd_cvXFyIE

Accept-Ranges: bytes

Server: AmazonS3

Age: 10254639

X-Cache: Hit from cloudfront

Via: 1.1 d8be805548e2ddcdc76c59a729c3cad5.cloudfront.net (CloudFront)

X-Amz-Cf-Id: MASAHmO1_Pfyg0X0wrBg1BSjCgxx2erk9HHBhUm4u2WHKxLCDRw6Ig==
0...0.....0...*.H........091.0...U....US1.0...U....Amazon1.0...U....Am
azon Root CA 1..171206181332Z..181206000000Z./0-0...U.......0...U.#..0
.......4.......Y....N..0...*.H.............C.....)9.......|.ap...f....
>`Xl..d..k..c.*.....q...?uk3...=z)h.....W:.....J;..X......N....?..T
......r....(M...(....k.?..?1a.lf-.L....y....R@j....^...B..u..~.wS.{...
@......8..r.X.>..z.8..}...g......."...DM.5....D..`.....Z.......;...
.h.c.{.....-...aEh.1.]."%HTTP/1.1 200 OK..Content-Type: application/pk
ix-crl..Content-Length: 439..Connection: keep-alive..Date: Tue, 12 Dec
 2017 17:25:52 GMT..Last-Modified: Tue, 12 Dec 2017 16:18:33 GMT..ETag
: "809a76b87e3e2a9f0c864610b7ccbc3c"..Cache-Control: public..Expires: 
Thu, 06 Dec 2018 00:00:00 GMT..x-amz-version-id: WKVmHgNA6ZV2w6nUGb9jm
lkd_cvXFyIE..Accept-Ranges: bytes..Server: AmazonS3..Age: 10254639..X-
Cache: Hit from cloudfront..Via: 1.1 d8be805548e2ddcdc76c59a729c3cad5.
cloudfront.net (CloudFront)..X-Amz-Cf-Id: MASAHmO1_Pfyg0X0wrBg1BSjCgxx
2erk9HHBhUm4u2WHKxLCDRw6Ig==..0...0.....0...*.H........091.0...U....US
1.0...U....Amazon1.0...U....Amazon Root CA 1..171206181332Z..181206000
000Z./0-0...U.......0...U.#..0.......4.......Y....N..0...*.H..........
...C.....)9.......|.ap...f....>`Xl..d..k..c.*.....q...?uk3...=z)h..
...W:.....J;..X......N....?..T......r....(M...(....k.?..?1a.lf-.L....y
....R@j....^...B..u..~.wS.{...@......8..r.X.>..z.8..}...g......."..
.DM.5....D..`.....Z.......;....h.c.{.....-...aEh.1.]."%..
<<< skipped >>>

GET /x.cer HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: x.ss2.us

arfieldtech.com0J..U...C0A0?.=.;.9hXXp://certificates.starfieldtech.co
m/repository/root.crl0Q..U. .J0H0F..U. .0>0<.. ........0hXXp://c
ertificates.starfieldtech.com/repository0...U...........0...*.H.......
......b...]%.p=..*q.}..7.Ujm.......`J ...=u...C.h\%...}3.{.vg...S|...[
){.Jo..D..Ek2..x.d.......-_M....8..f..A.UmZd=......P...D...s=.%

GET /gsr2/ME4wTDBKMEgwRjAJBgUrDgMCGgUABBTgXIsxbvr2lBkPpoIEVRE6gHlCnAQUm+IHV2ccHsBqBt5ZtJot39wZhi4CDQHjqTAc/HIGOD+aUx0= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.pki.goog

HTTP/1.1 200 OK

Content-Type: application/ocsp-response

Date: Sun, 08 Apr 2018 11:48:50 GMT

Server: ocsp_responder

Content-Length: 468

X-XSS-Protection: 1; mode=block

X-Frame-Options: SAMEORIGIN

Cache-Control: public, max-age=345600

Age: 166063
0..........0..... .....0......0...0.........Wg...j..Y..-.......2017061
5184500Z0p0n0F0... .........\.1n........U.:.yB......Wg...j..Y..-......
....0..r.8?.S.....20170615000000Z....20180615000000Z0...*.H...........
..8%\)..d....i=.T[H....dZ....c...;...|..:R1.F.:d.."&..T.........e.. 5.
.S...[g.'..{..?..(t.0..}.K...6Ok..7J.bRXC.UjxW./.'..# .!:m.j.......!..
..M?...OL.>JY...T..&*.....k..(.... ..N.$.........9.....$.....R..y.;
m....U<....h.1...|..]m|G..b.(..%.-i.(}.. Kf.8.2.TK.HTTP/1.1 200 OK.
.Content-Type: application/ocsp-response..Date: Sun, 08 Apr 2018 11:48
:50 GMT..Server: ocsp_responder..Content-Length: 468..X-XSS-Protection
: 1; mode=block..X-Frame-Options: SAMEORIGIN..Cache-Control: public, m
ax-age=345600..Age: 166063..0..........0..... .....0......0...0.......
..Wg...j..Y..-.......20170615184500Z0p0n0F0... .........\.1n........U.
:.yB......Wg...j..Y..-..........0..r.8?.S.....20170615000000Z....20180
615000000Z0...*.H.............8%\)..d....i=.T[H....dZ....c...;...|..:R
1.F.:d.."&..T.........e.. 5..S...[g.'..{..?..(t.0..}.K...6Ok..7J.bRXC.
UjxW./.'..# .!:m.j.......!....M?...OL.>JY...T..&*.....k..(.... ..N.
$.........9.....$.....R..y.;m....U<....h.1...|..]m|G..b.(..%.-i.(}.
. Kf.8.2.TK.....


GET /GTSGIAG3/MEkwRzBFMEMwQTAJBgUrDgMCGgUABBT27bBjYjKBmjX2jXWgnQJKEapsrQQUd8K4UJpndnaxLcKG0IOgfqZ+uksCCBHSn7NRwhCM HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.pki.goog

HTTP/1.1 200 OK

Content-Type: application/ocsp-response

Date: Sun, 08 Apr 2018 00:12:14 GMT

Server: ocsp_responder

Content-Length: 463

X-XSS-Protection: 1; mode=block

X-Frame-Options: SAMEORIGIN

Cache-Control: public, max-age=345600

Age: 207869
0..........0..... .....0......0...0......w..P.gvv.-.....~.~.K..2018040
7195815Z0k0i0A0... ...........cb2..5..u...J..l...w..P.gvv.-.....~.~.K.
.....Q.......20180407195815Z....20180414195815Z0...*.H............. ..
z.x....,...%s..[.....:...G..C0..".Q.3.-.Sb..&.:yS..p.....]......./....
....vlm......)p..g.&-9.......e.X.^_..h..b....^}....g1s..J...@Q......M.
.Q}....<..E.x`....TR..P"..Af......{e.F......Q.V....R.=....<.-...
5G...t.W,Pf.....n.."jf....s..c.6..yn.^..<..,`....HTTP/1.1 200 OK..C
ontent-Type: application/ocsp-response..Date: Sun, 08 Apr 2018 00:12:1
4 GMT..Server: ocsp_responder..Content-Length: 463..X-XSS-Protection: 
1; mode=block..X-Frame-Options: SAMEORIGIN..Cache-Control: public, max
-age=345600..Age: 207869..0..........0..... .....0......0...0......w..
P.gvv.-.....~.~.K..20180407195815Z0k0i0A0... ...........cb2..5..u...J.
.l...w..P.gvv.-.....~.~.K......Q.......20180407195815Z....201804141958
15Z0...*.H............. ..z.x....,...%s..[.....:...G..C0..".Q.3.-.Sb..
&.:yS..p.....]......./........vlm......)p..g.&-9.......e.X.^_..h..b...
.^}....g1s..J...@Q......M..Q}....<..E.x`....TR..P"..Af......{e.F...
...Q.V....R.=....<.-...5G...t.W,Pf.....n.."jf....s..c.6..yn.^..<
..,`......

GET //MEowSDBGMEQwQjAJBgUrDgMCGgUABBSLwZ6EW5gdYc9UaSEaaLjjETNtkAQUv1+30c7dH4b0W1Ws3NcQwg6piOcCCQCnDkpMNIK3fw== HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: o.ss2.us

HTTP/1.1 200 OK

Content-Type: application/ocsp-response

Content-Length: 1744

Connection: keep-alive

Date: Tue, 10 Apr 2018 01:33:45 GMT

Server: Apache

Content-Transfer-Encoding: Binary

Cache-Control: max-age=118623, public, no-transform, must-revalidate

Last-Modified: Tue, 10 Apr 2018 00:14:52 GMT

Expires: Wed, 11 Apr 2018 12:14:52 GMT

ETag: "ea0253be6ffcc8b5276213212d62e513c5576fcd"

P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"

Age: 30147

X-Cache: Hit from cloudfront

Via: 1.1 c4ac29c6fe4bd9c4b1ce0d01d99b45ef.cloudfront.net (CloudFront)

X-Amz-Cf-Id: gIL2h_kGA3ktIosr3dRPaEZX1t04i2EWm5zu8_9UJznELZcaxOmhyw==
0..........0..... .....0......0...0......0..1.0...U....US1.0...U....Ar
izona1.0...U....Scottsdale1%0#..U....Starfield Technologies, Inc.110/.
.U...(Starfield Root Validation Authority - G1..20180410001452Z0l0j0B0
... ............[..a.Ti!.h...3m...._.......[U..............JL4.......2
0180410001452Z....20180411121452Z0...*.H.............-.i>..fXm.....
U..f|..@... ".V4.!...d...........l...$...0t.4...r......6.a....|y..n. .
<..'....p$....d..w..Sn.L.x..J`Z.]..D>....k.p[lg. ..uam.....2....
.S8..D.l.ja...\hBD.g._6...FP.?....Q...M..D.0....P.........R.0...H..h6]
.4.J...J.P......Hz....OOU7.%.o.U9..p'_....0..{0..w0.._.......(...M..B0
...*.H........0h1.0...U....US1%0#..U....Starfield Technologies, Inc.12
00..U...)Starfield Class 2 Certification Authority0...161214070000Z..2
11214070000Z0..1.0...U....US1.0...U....Arizona1.0...U....Scottsdale1%0
#..U....Starfield Technologies, Inc.110/..U...(Starfield Root Validati
on Authority - G10.."0...*.H.............0.............}...@.H........
..j.b.2.c....'eSA.....6""2.hf.m.m9........_N."gV..{.J"{..0f.W$.Xr....|
U.F.!.K.0 .(p......9.I......c.c\.9.xt.v.UN...%....,R....ZJ......rz.Z..
p...ru.6.....0..t....*...T.W.....?...X...( ..z.[. .A... z.[>-.y>
...nvU...g.wU........ Fh.6F...}.........0..0...U.......0.0...U........
...0...U.%..0... .......0...U........J!~...}....^].....0... .....0....
..0C..U...<0:08.6.4.2hXXp://crl.starfieldtech.com/repository/sfroot
.crl0P..U. .I0G0E..`.H...n....0604.. ........(hXXp://crl.starfieldtech
.com/repository/0...*.H..................H.... ..~C.&...N..y..~.j}
<<< skipped >>>

GET /msdownload/update/v3/static/trustedr/en/authrootstl.cab HTTP/1.1

Cache-Control: max-age = 86405

Connection: Keep-Alive

Accept: */*

If-Modified-Since: Fri, 22 Sep 2017 22:03:52 GMT

If-None-Match: "014e8acee33d31:0"

User-Agent: Microsoft-CryptoAPI/6.1

Host: VVV.download.windowsupdate.com

HTTP/1.1 200 OK

Date: Mon, 09 Apr 2018 11:38:05 GMT

Content-Type: application/vnd.ms-cab-compressed

Content-Length: 54015

Connection: keep-alive

Cache-Control: max-age=604800

ETag: "8048a29636c5d31:0"

Expires: Fri, 06 Apr 2018 11:37:55 GMT

Last-Modified: Mon, 26 Mar 2018 19:13:57 GMT

Server: Microsoft-IIS/8.5

x-ccc: DE

x-cid: 3

X-Powered-By: ASP.NET

MSRegion: EMEA

Age: 80281

Accept-Ranges: bytes
MSCF............,...................I.................zL.\ .authroot.s
tl.....X7..CK...<........i.g.B.A.E#k..Z.d.H.lQI..RZdM...".%.KY"D..%
*J...?3nez&7....{....y.........~.9.Da&..3..1..e.0......:o.`08....N....
........d.10&R....l.E.,FX...t.2.0a1...GN.......%E...N..l...v#...0...}.
3.../. .#.`."...H.'...[Y...aF.z~M..S."4..V.'.>o...4.....q\0.P......
....5;..O ......a,{~.3.Z*.Wr....f.$.W..2.)W..,...z.2...z.!.%z.6S/.rK..
...8}.S....4..,....ch ...@~P ..@A..d.Z~...D....3[....6..kC........AP..
A.....;.`....v.>W!.?x}HU.$.8F...C......;L8v..a.g.=tt...hT..m...qgN.
.>P.N..F..!..`.&P...D...........CSc?W...B...B.7sw>.W}....4..u.dD
t)P....d.[!Kpy@....h...X......z|.].:..P.../K..`;V.XsY.oF$...{(.sP..[..
./f.._.-.t.E........h,....r..g3.\.lr.8.y..r4.........Y./..Mu........&l
t;-..d...%.YG.E.V\x..`...................\...}3. h..G....`E..N..".Z.Gh
.....>......A.x.}K].o.... .q..:.*).Y.N%jN..6..$D.....ipk!...[.V.*zD
 E..p.".Y.c.....m.=..1...0$..F..G.B.o_}.m[...........h.=.....d......~.
~..9.@a<..x..K.a..h..`4...O;..=1..x.r.Ioh....y!.....I..........2$..
.Q2.H.Z.L&.Q.@..................I#.......Q.rb....>....f..VM..]Y...?
..x0....t..f`5..S/...6>....m..l. .....`......M.^.CV."..7.C.{.#..(%`
10./.h.I.......w !z...(...?..o....9y.........s>I...4.]..o.t.B.A.q.y
.. ..c......?..rF.....^qr.?dTlf...f..........F..&........F[^..5($.46&l
t;......&......vjK...........x......z2..KTm..H..@&E....;H...(...._....
a|R.Z~......S:........d....Uv*v?7.0..l;.....l....m.o.o..8zv./t.].Q...%
N..F.#..t.DV...B8....CK.....0..dD....?Q5.}.A.P...3=.}J&.........^.
<<< skipped >>>

GET /do/event?value=alive&source=d-lp0-bb8&uc=20180112&uid=6040453b-d765-4337-9184-0ce8d43e035e&iid=bio-sbe-email-ab2&domain=hemailaccessonline.com&ua=Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063&partner=appfocus1&distSubId3=1.32.0.2&distSubId4=InternetExplorer&distSubId5=6.1 HTTP/1.1

Host: imp.browserio.com

Connection: Keep-Alive

Cache-Control: no-cache

HTTP/1.1 200 OK

Date: Tue, 10 Apr 2018 09:55:54 GMT

Server: Kestrel

X-Powered-By: ASP.NET

Content-Length: 0

Connection: keep-alive
HTTP/1.1 200 OK..Date: Tue, 10 Apr 2018 09:55:54 GMT..Server: Kestrel.
.X-Powered-By: ASP.NET..Content-Length: 0..Connection: keep-alive..ont>....


GET /do/install?value=complete&source=d-lp0-bb8&uc=20180112&uid=6040453b-d765-4337-9184-0ce8d43e035e&iid=bio-sbe-email-ab2&domain=hemailaccessonline.com&ua=Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36 Edge/15.15063&partner=appfocus1&distSubId3=1.32.0.2&distSubId4=InternetExplorer&distSubId5=6.1 HTTP/1.1

Host: imp.browserio.com

Connection: Keep-Alive

Cache-Control: no-cache

HTTP/1.1 200 OK

Date: Tue, 10 Apr 2018 09:55:54 GMT

Server: Kestrel

X-Powered-By: ASP.NET

Content-Length: 0

Connection: keep-alive
HTTP/1.1 200 OK..Date: Tue, 10 Apr 2018 09:55:54 GMT..Server: Kestrel.
.X-Powered-By: ASP.NET..Content-Length: 0..Connection: keep-alive..

GET /MFQwUjBQME4wTDAJBgUrDgMCGgUABBSIfaREXmfqfJR3TkMYnD7O5MhzEgQUnF8A36oB1zArOIiiuG1KnPIRkYMCEwZ/lEoqJ83z+sKuKwH5CO65xMY= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.rootg2.amazontrust.com

HTTP/1.1 200 OK

Content-Type: application/ocsp-response

Content-Length: 1548

Connection: keep-alive

Cache-Control: max-age=302400, public, no-transform, must-revalidate

Date: Tue, 10 Apr 2018 07:02:32 GMT

ETag: 99f11c9c3debdf23f97574bfac6e5747580ad1a8

Expires: Tue, 17 Apr 2018 07:02:32 GMT

Last-Modified: Tue, 10 Apr 2018 07:02:32 GMT

Server: WEBrick/1.3.1 (Ruby/2.3.6/2017-12-14)

Age: 10430

X-Cache: Hit from cloudfront

Via: 1.1 a2b89888577de972e86eb4ebe78a0de4.cloudfront.net (CloudFront)

X-Amz-Cf-Id: lBuW9I1ct72TbVGH1y8e3pR4nLEqmDJxfBjOEiGwfnDEjJ3q7vL_tg==
0..........0..... .....0......0...0...V0T1.0...U....US1.0...U....Amazo
n1402..U... Starfield Services G2 Root CA Status Signer..2018041007023
2Z0v0t0L0... .........}.D^g.|.wNC..>...s...._.....0 8...mJ.........
.J*'..... ...........20180410060232Z....20180417070232Z0...*.H........
.....H...P..u.0.....5Db[F..&...q0N..O.7.....[.{...t^$=.h...wGyk.).._..
..~~C.q..!.n.y..]x..n...H ......>W5...E9....(...[..1.{?.U.,X4).....
.DJ:.vu.....#n....$l..,..O..HDV.....3oT0.....s....X...q<....F......
...'..&-.a..U.$......i'GVd......lI....I=.8{#N....Z..B........0...0...0
...........{Pq.....D...O|.r..0...*.H........0..1.0...U....US1.0...U...
.Arizona1.0...U....Scottsdale1%0#..U....Starfield Technologies, Inc.1;
09..U...2Starfield Services Root Certificate Authority - G20...1510212
22921Z..190121222921Z0T1.0...U....US1.0...U....Amazon1402..U... Starfi
eld Services G2 Root CA Status Signer0.."0...*.H.............0........
.d....zL.^.\.....5)..QP. W..9...I..|"...Dt....g...4.WBW...,E....K...W.
..'..'.h.Q.......K.Pl.z ......o.z....zl..G......[v..<..Sg.........Q
7...n...i....*We2....T..q.Kqx......N..H...........S..Q...b].[.........
.o.S..!.....4v"."?.Mo......r.[./D....c>...g...H........l0j0...U....
.......0...U.#..0...._.....0 8...mJ.....0...U.%..0... .......0... ....
.0......0...U. ..0.0... .;.0...*.H...................e.P....I.....S...
.%.u)U.v.q...y..j...(....N....$.yI.e>.E@..'...;..w.....g]..t..(..#C
..a~...{<,}.m.o..m.a...-........~.@.2.P..58..|k^.b.as.........f.E.[
.:......}.....2..p-b..^..p...h...[`.......*...I.x...8.y..RN.#@P..M
<<< skipped >>>

GET /rootca1.crl HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: crl.rootca1.amazontrust.com

HTTP/1.1 200 OK

Content-Type: application/pkix-crl

Content-Length: 439

Connection: keep-alive

Date: Tue, 12 Dec 2017 17:25:52 GMT

Last-Modified: Tue, 12 Dec 2017 16:18:33 GMT

ETag: "809a76b87e3e2a9f0c864610b7ccbc3c"

Cache-Control: public

Expires: Thu, 06 Dec 2018 00:00:00 GMT

x-amz-version-id: WKVmHgNA6ZV2w6nUGb9jmlkd_cvXFyIE

Accept-Ranges: bytes

Server: AmazonS3

Age: 10254639

X-Cache: Hit from cloudfront

Via: 1.1 40f3ea21c54b47558ffa3227d831f118.cloudfront.net (CloudFront)

X-Amz-Cf-Id: vK7PSploHBg_K_nzmn2BNFM_eVjKYupKXc6x-VBMMlUqnb1OiAtaJA==
0...0.....0...*.H........091.0...U....US1.0...U....Amazon1.0...U....Am
azon Root CA 1..171206181332Z..181206000000Z./0-0...U.......0...U.#..0
.......4.......Y....N..0...*.H.............C.....)9.......|.ap...f....
>`Xl..d..k..c.*.....q...?uk3...=z)h.....W:.....J;..X......N....?..T
......r....(M...(....k.?..?1a.lf-.L....y....R@j....^...B..u..~.wS.{...
@......8..r.X.>..z.8..}...g......."...DM.5....D..`.....Z.......;...
.h.c.{.....-...aEh.1.]."%HTTP/1.1 200 OK..Content-Type: application/pk
ix-crl..Content-Length: 439..Connection: keep-alive..Date: Tue, 12 Dec
 2017 17:25:52 GMT..Last-Modified: Tue, 12 Dec 2017 16:18:33 GMT..ETag
: "809a76b87e3e2a9f0c864610b7ccbc3c"..Cache-Control: public..Expires: 
Thu, 06 Dec 2018 00:00:00 GMT..x-amz-version-id: WKVmHgNA6ZV2w6nUGb9jm
lkd_cvXFyIE..Accept-Ranges: bytes..Server: AmazonS3..Age: 10254639..X-
Cache: Hit from cloudfront..Via: 1.1 40f3ea21c54b47558ffa3227d831f118.
cloudfront.net (CloudFront)..X-Amz-Cf-Id: vK7PSploHBg_K_nzmn2BNFM_eVjK
YupKXc6x-VBMMlUqnb1OiAtaJA==..0...0.....0...*.H........091.0...U....US
1.0...U....Amazon1.0...U....Amazon Root CA 1..171206181332Z..181206000
000Z./0-0...U.......0...U.#..0.......4.......Y....N..0...*.H..........
...C.....)9.......|.ap...f....>`Xl..d..k..c.*.....q...?uk3...=z)h..
...W:.....J;..X......N....?..T......r....(M...(....k.?..?1a.lf-.L....y
....R@j....^...B..u..~.wS.{...@......8..r.X.>..z.8..}...g......."..
.DM.5....D..`.....Z.......;....h.c.{.....-...aEh.1.]."%..
<<< skipped >>>

GET /MFQwUjBQME4wTDAJBgUrDgMCGgUABBRPWaOUU8+5VZ5/a9jFTaU9pkK3FAQUhBjMhTTsvAyUlC4IWZzHshBOCggCEwZ/lFeFh+isd96yUzJbvJmLVg0= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.rootca1.amazontrust.com

HTTP/1.1 200 OK

Content-Type: application/ocsp-response

Content-Length: 1426

Connection: keep-alive

Cache-Control: max-age=302400, public, no-transform, must-revalidate

Date: Sun, 08 Apr 2018 01:06:41 GMT

ETag: 6d4692e94f4d4c4ec1d1908808fa12e4bda9aa83

Expires: Sun, 15 Apr 2018 01:06:41 GMT

Last-Modified: Sun, 08 Apr 2018 01:06:41 GMT

Server: WEBrick/1.3.1 (Ruby/2.3.6/2017-12-14)

Age: 204588

X-Cache: Hit from cloudfront

Via: 1.1 a113497aae688d6f2a2e7d7dd9086dae.cloudfront.net (CloudFront)

X-Amz-Cf-Id: _nSBgAno8EtnVf6UeTITOfidX3QIJ-cbGiExySCarYJOkGafh65NUg==
0..........0..... .....0.....t0..p0...I0G1.0...U....US1.0...U....Amazo
n1'0%..U....Amazon Root CA 1 Status Signer..20180408010641Z0v0t0L0... 
........OY..S..U..k..M.=.B........4.......Y....N.......W....w..S2[...V
.....20180408000641Z....20180415010641Z0...*.H..............N.Z..0.{T?
...ov8d}......w...z....L..C..V..e.....g....H... .5H....._...o........e
..z.>..........\S.J.v..x'}s.J'.'.YlbDF*$.9O.....a..s<.....#.^..'
E.f..[@.3............%@.J.N......*..#..= .......4e.\{=..{......(@:."..
..:.h|Az.p...W.&o...z.;....$....E....C.Og....0..}0..y0..a........{Pq.t
....0......O.0...*.H........091.0...U....US1.0...U....Amazon1.0...U...
.Amazon Root CA 10...151021222920Z..190121222920Z0G1.0...U....US1.0...
U....Amazon1'0%..U....Amazon Root CA 1 Status Signer0.."0...*.H.......
......0.........S.9......].....<..H..N....{M&I....R4...}P......@f~.
%e......zF.".,[..Z..#!.6..J$..)7...~&y}1v.0.`1w........fA#.7........5.
~.....r...m.3....W....wb.9.....p...W......(...`..F..mW6..... z..F..=..
.,6.Da<.;..l.ni1./.d........lJ........Z-m0z.=......Y..H..v,..*.....
...l0j0...U...........0...U.#..0.......4.......Y....N..0...U.%..0... .
......0... .....0......0...U. ..0.0... .;.0...*.H...............jG.$cJ
.....q.G...iM_d.?..(....7Nc&...\c....Vi..D.;.|..d;!.....:...Y^4%.7RJ..
..O.)..=....]Ug..$.m...................R.........H...m.mF..k..c....q.3
.Sk.;^.$..9....s.En....)Ajre..c.....:........,g.T."Sb..r..p.. . ..:..E
......8.3. m.. .S.r..h4@uKs3....d}d.....
<<< skipped >>>

GET /rootg2.crl HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: crl.rootg2.amazontrust.com

HTTP/1.1 200 OK

Content-Type: application/pkix-crl

Content-Length: 608

Connection: keep-alive

Date: Tue, 12 Dec 2017 17:25:52 GMT

Last-Modified: Tue, 12 Dec 2017 16:18:38 GMT

ETag: "425ba4bafed05b83120d4319b565aa08"

Cache-Control: public

Expires: Thu, 06 Dec 2018 00:00:00 GMT

x-amz-version-id: 8y8fx1iXoCLZf9aSzjpcMfT0yhWp.nTc

Accept-Ranges: bytes

Server: AmazonS3

Age: 10254634

X-Cache: Hit from cloudfront

Via: 1.1 9e37d9895cd1458fe98065a1f5f73b33.cloudfront.net (CloudFront)

X-Amz-Cf-Id: vXfrgfKK0N0e1V760O9Te3vEH0mKuikDkCNNW1Vv_Qh4h6BinT-54w==
0..\0..D...0...*.H........0..1.0...U....US1.0...U....Arizona1.0...U...
.Scottsdale1%0#..U....Starfield Technologies, Inc.1;09..U...2Starfield
 Services Root Certificate Authority - G2..171206181845Z..181206000000
Z0F0 .....130131181337Z0.0...U.......0"..).S..140401194621Z0.0...U....
..../0-0...U.......0...U.#..0...._.....0 8...mJ.....0...*.H...........
...Y....O.q.w.|.f....Q..w}...3.q...@...].M...%L-...6E..[s.Kr..7z......
..$..L.?...\.aQ.&..5.{..gV..g-M...v.......gc2,.W.wDt`h.....k.....K...T
Xy,......3....Ie[..{I.;9.....w..._..^..c,v..B.<|S.NeUN.../XX|......
...$..OOm..r..fd.f.oP..o../nzH........x.s....{Dv[.,HTTP/1.1 200 OK..Co
ntent-Type: application/pkix-crl..Content-Length: 608..Connection: kee
p-alive..Date: Tue, 12 Dec 2017 17:25:52 GMT..Last-Modified: Tue, 12 D
ec 2017 16:18:38 GMT..ETag: "425ba4bafed05b83120d4319b565aa08"..Cache-
Control: public..Expires: Thu, 06 Dec 2018 00:00:00 GMT..x-amz-version
-id: 8y8fx1iXoCLZf9aSzjpcMfT0yhWp.nTc..Accept-Ranges: bytes..Server: A
mazonS3..Age: 10254634..X-Cache: Hit from cloudfront..Via: 1.1 9e37d98
95cd1458fe98065a1f5f73b33.cloudfront.net (CloudFront)..X-Amz-Cf-Id: vX
frgfKK0N0e1V760O9Te3vEH0mKuikDkCNNW1Vv_Qh4h6BinT-54w==..0..\0..D...0..
.*.H........0..1.0...U....US1.0...U....Arizona1.0...U....Scottsdale1%0
#..U....Starfield Technologies, Inc.1;09..U...2Starfield Services Root
 Certificate Authority - G2..171206181845Z..181206000000Z0F0 .....1301
31181337Z0.0...U.......0"..).S..140401194621Z0.0...U......../0-0...U..
.....0...U.#..0...._.....0 8...mJ.....0...*.H..............Y....O.
<<< skipped >>>

GET /GTSGIAG3.crl HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: crl.pki.goog

HTTP/1.1 200 OK

Accept-Ranges: bytes

Content-Type: application/pkix-crl

Content-Length: 552

Date: Tue, 10 Apr 2018 09:09:49 GMT

Expires: Tue, 10 Apr 2018 10:09:49 GMT

Last-Modified: Tue, 10 Apr 2018 02:15:00 GMT

X-Content-Type-Options: nosniff

Server: sffe

X-XSS-Protection: 1; mode=block

Cache-Control: public, max-age=3600

Age: 2816
0..$0......0...*.H........0T1.0...U....US1.0...U....Google Trust Servi
ces1%0#..U....Google Internet Authority G3..180410010021Z..18042001002
1Z0R0'..HQ........170911131858Z0.0...U.......0'..g....Z.[..18022618194
5Z0.0...U........00.0...U.#..0...w..P.gvv.-.....~.~.K0...U........0...
*.H...............6G....CF3?.iDP....'...9.....y..12j.|-...9Z..#i/9.-8U
Q%..K...2o.0..vH.<.$.....Y.u_..r...[.N.b.H.g7...&.xG..v.W.\.K*..9.1
u.D!.w.*{lB....\z....J%.P....I...gA6......X5.r....}.nic.u V.... .?.]{.
.Gd.Q....d.{?..E@R...T.7....`.........-.&x...M.. G2....6S`p.20F-.HTTP/
1.1 200 OK..Accept-Ranges: bytes..Content-Type: application/pkix-crl..
Content-Length: 552..Date: Tue, 10 Apr 2018 09:09:49 GMT..Expires: Tue
, 10 Apr 2018 10:09:49 GMT..Last-Modified: Tue, 10 Apr 2018 02:15:00 G
MT..X-Content-Type-Options: nosniff..Server: sffe..X-XSS-Protection: 1
; mode=block..Cache-Control: public, max-age=3600..Age: 2816..0..$0...
...0...*.H........0T1.0...U....US1.0...U....Google Trust Services1%0#.
.U....Google Internet Authority G3..180410010021Z..180420010021Z0R0'..
HQ........170911131858Z0.0...U.......0'..g....Z.[..180226181945Z0.0...
U........00.0...U.#..0...w..P.gvv.-.....~.~.K0...U........0...*.H.....
..........6G....CF3?.iDP....'...9.....y..12j.|-...9Z..#i/9.-8UQ%..K...
2o.0..vH.<.$.....Y.u_..r...[.N.b.H.g7...&.xG..v.W.\.K*..9.1u.D!.w.*
{lB....\z....J%.P....I...gA6......X5.r....}.nic.u V.... .?.]{..Gd.Q...
.d.{?..E@R...T.7....`.........-.&x...M.. G2....6S`p.20F-...
<<< skipped >>>

GET /MFQwUjBQME4wTDAJBgUrDgMCGgUABBRPWaOUU8+5VZ5/a9jFTaU9pkK3FAQUhBjMhTTsvAyUlC4IWZzHshBOCggCEwZ/lFeFh+isd96yUzJbvJmLVg0= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.rootca1.amazontrust.com

HTTP/1.1 200 OK

Content-Type: application/ocsp-response

Content-Length: 1426

Connection: keep-alive

Cache-Control: max-age=302400, public, no-transform, must-revalidate

Date: Sun, 08 Apr 2018 01:06:41 GMT

ETag: 6d4692e94f4d4c4ec1d1908808fa12e4bda9aa83

Expires: Sun, 15 Apr 2018 01:06:41 GMT

Last-Modified: Sun, 08 Apr 2018 01:06:41 GMT

Server: WEBrick/1.3.1 (Ruby/2.3.6/2017-12-14)

Age: 204588

X-Cache: Hit from cloudfront

Via: 1.1 d9286e717f02e3155c648bcb65b34b7d.cloudfront.net (CloudFront)

X-Amz-Cf-Id: FFhsDRw-xvjxmQHd82ZrbGHSaIQWRgaRMAcGTeiDl3bn4QCWWr0SRA==
0..........0..... .....0.....t0..p0...I0G1.0...U....US1.0...U....Amazo
n1'0%..U....Amazon Root CA 1 Status Signer..20180408010641Z0v0t0L0... 
........OY..S..U..k..M.=.B........4.......Y....N.......W....w..S2[...V
.....20180408000641Z....20180415010641Z0...*.H..............N.Z..0.{T?
...ov8d}......w...z....L..C..V..e.....g....H... .5H....._...o........e
..z.>..........\S.J.v..x'}s.J'.'.YlbDF*$.9O.....a..s<.....#.^..'
E.f..[@.3............%@.J.N......*..#..= .......4e.\{=..{......(@:."..
..:.h|Az.p...W.&o...z.;....$....E....C.Og....0..}0..y0..a........{Pq.t
....0......O.0...*.H........091.0...U....US1.0...U....Amazon1.0...U...
.Amazon Root CA 10...151021222920Z..190121222920Z0G1.0...U....US1.0...
U....Amazon1'0%..U....Amazon Root CA 1 Status Signer0.."0...*.H.......
......0.........S.9......].....<..H..N....{M&I....R4...}P......@f~.
%e......zF.".,[..Z..#!.6..J$..)7...~&y}1v.0.`1w........fA#.7........5.
~.....r...m.3....W....wb.9.....p...W......(...`..F..mW6..... z..F..=..
.,6.Da<.;..l.ni1./.d........lJ........Z-m0z.=......Y..H..v,..*.....
...l0j0...U...........0...U.#..0.......4.......Y....N..0...U.%..0... .
......0... .....0......0...U. ..0.0... .;.0...*.H...............jG.$cJ
.....q.G...iM_d.?..(....7Nc&...\c....Vi..D.;.|..d;!.....:...Y^4%.7RJ..
..O.)..=....]Ug..$.m...................R.........H...m.mF..k..c....q.3
.Sk.;^.$..9....s.En....)Ajre..c.....:........,g.T."Sb..r..p.. . ..:..E
......8.3. m.. .S.r..h4@uKs3....d}d.....
<<< skipped >>>

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBQz9arGHWbnBV0DFzpNHz4YcTiFDQQUWaRmBlKge5WSPKOUByeWdFv5PdACEATF6CtQrCRBXA3BoNLD7lk= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.sca1b.amazontrust.com

HTTP/1.1 200 OK

Content-Type: application/ocsp-response

Content-Length: 471

Connection: keep-alive

Accept-Ranges: bytes

Cache-Control: max-age=157337

Date: Tue, 10 Apr 2018 05:29:15 GMT

ETag: "5acbf074-1d7"

Expires: Thu, 12 Apr 2018 01:11:32 GMT

Last-Modified: Mon, 09 Apr 2018 23:00:04 GMT

Server: ECS (ams/49C1)

Age: 16037

X-Cache: Hit from cloudfront

Via: 1.1 acd7fe6a3bbd25442a0016dba005ecd3.cloudfront.net (CloudFront)

X-Amz-Cf-Id: KdNk3nc74bmhc6ycTfoWWwB5sUz4MMkGEWNlxuHbryDcDLUayc8npg==
0..........0..... .....0......0...0......Y.f.R.{..<...'.t[.=...2018
0409215947Z0s0q0I0... ........3....f..]..:M.>.q8....Y.f.R.{..<..
.'.t[.=...... P.$A\......Y....20180409215947Z....20180416211447Z0...*.
H.............J..^.~...D..EE.g&...0.!$......r...)*1.tQ... . %...7.&p..
..5........Jn.. ...R;nE...)yWC^.....W~..0.>.R.U..p.A....V....i<{
..']....15...k...j.......;.s..4......Ih....D.x...gm.....n=.8U......D.d
.K...R&dO.....1....E.b.M.....I...L!$O.....A...9..U.M....n[...f....HTTP
/1.1 200 OK..Content-Type: application/ocsp-response..Content-Length: 
471..Connection: keep-alive..Accept-Ranges: bytes..Cache-Control: max-
age=157337..Date: Tue, 10 Apr 2018 05:29:15 GMT..ETag: "5acbf074-1d7".
.Expires: Thu, 12 Apr 2018 01:11:32 GMT..Last-Modified: Mon, 09 Apr 20
18 23:00:04 GMT..Server: ECS (ams/49C1)..Age: 16037..X-Cache: Hit from
 cloudfront..Via: 1.1 acd7fe6a3bbd25442a0016dba005ecd3.cloudfront.net 
(CloudFront)..X-Amz-Cf-Id: KdNk3nc74bmhc6ycTfoWWwB5sUz4MMkGEWNlxuHbryD
cDLUayc8npg==..0..........0..... .....0......0...0......Y.f.R.{..<.
..'.t[.=...20180409215947Z0s0q0I0... ........3....f..]..:M.>.q8....
Y.f.R.{..<...'.t[.=...... P.$A\......Y....20180409215947Z....201804
16211447Z0...*.H.............J..^.~...D..EE.g&...0.!$......r...)*1.tQ.
.. . %...7.&p....5........Jn.. ...R;nE...)yWC^.....W~..0.>.R.U..p.A
....V....i<{..']....15...k...j.......;.s..4......Ih....D.x...gm....
.n=.8U......D.d.K...R&dO.....1....E.b.M.....I...L!$O.....A...9..U.M...
.n[...f......
<<< skipped >>>

GET /Content/kits/SBVersion.json?source=d-lp0-bb8&uid=6040453b-d765-4337-9184-0ce8d43e035e&uc=20180112&iid=bio-sbe-email-ab2&domain=hemailaccessonline.com&partner=appfocus1&distSubId3=1.32.0.2&distSubId4=InternetExplorer&distSubId5=6.1&distSubId6=update HTTP/1.1

Accept-Encoding: gzip,deflate

Host: search.browserio.com

Connection: Keep-Alive

Cache-Control: no-cache

HTTP/1.1 200 OK

Accept-Ranges: bytes

Content-Type: application/json

Date: Tue, 10 Apr 2018 09:55:54 GMT

ETag: "04ca3f63aad31:0"

Last-Modified: Tue, 20 Feb 2018 15:55:36 GMT

Server: Microsoft-IIS/10.0

X-Powered-By: ASP.NET

Content-Length: 100

Connection: keep-alive
{..  "url": "hXXp://search.browserio.com/Content/kits/SearchBar_9.16.e
xe",..  "ver": "1.16.0.1"..}..HTTP/1.1 200 OK..Accept-Ranges: bytes..C
ontent-Type: application/json..Date: Tue, 10 Apr 2018 09:55:54 GMT..ET
ag: "04ca3f63aad31:0"..Last-Modified: Tue, 20 Feb 2018 15:55:36 GMT..S
erver: Microsoft-IIS/10.0..X-Powered-By: ASP.NET..Content-Length: 100.
.Connection: keep-alive..{..  "url": "hXXp://search.browserio.com/Cont
ent/kits/SearchBar_9.16.exe",..  "ver": "1.16.0.1"..}....

GET /roots/dstrootcax3.p7c HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: apps.identrust.com

HTTP/1.1 200 OK

Date: Mon, 09 Apr 2018 14:08:36 GMT

Server: Apache

X-Frame-Options: SAMEORIGIN

X-XSS-Protection: 1; mode=block

Last-Modified: Fri, 19 Oct 2012 20:08:11 GMT

Accept-Ranges: bytes

Content-Length: 893

Cache-control: max-age=86400

Content-Type: application/x-pkcs7-mime
0..y..*.H.........j0..f...1.0...*.H.........N0..J0..2.......D.....'..0
9...@k0...*.H........0?1$0"..U....Digital Signature Trust Co.1.0...U..
..DST Root CA X30...000930211219Z..210930140115Z0?1$0"..U....Digital S
ignature Trust Co.1.0...U....DST Root CA X30.."0...*.H.............0..
..........P..W..be......,k0.[...}.@......3vI*.?!I..N..>H.e...!.e.*.
2....w..{........s.z..2..~..0....*8.y.1.P..e..Qc....a.Ka..Rk...K.(.H..
....>.... .[.*....p....%.tr.{j.4.0...h.{T.....Z...=d......Ap..r.&.8
U9C....\@..........%.......:..n.>..\..<..i....*.)W..=....]......
B0@0...U.......0....0...U...........0...U..........{,q...K.u...`...0..
.*.H...............,...\...(f7:...?K.... ]..YD.>.>..K.t.....t..~
.....K. D.....}..j.....N...:.pI............:^H...X._..Z.......Y..n....
...f3.Y[....sG. ...7H..VK....r2...D.SrmC.&H.Rg.X..gvqx...V..9$1....Z0G
..P.......dc`........}...=2.e..|.Wv...(9..e...w.j..w........).....55.1
.HTTP/1.1 200 OK..Date: Mon, 09 Apr 2018 14:08:36 GMT..Server: Apache.
.X-Frame-Options: SAMEORIGIN..X-XSS-Protection: 1; mode=block..Last-Mo
dified: Fri, 19 Oct 2012 20:08:11 GMT..Accept-Ranges: bytes..Content-L
ength: 893..Cache-control: max-age=86400..Content-Type: application/x-
pkcs7-mime..0..y..*.H.........j0..f...1.0...*.H.........N0..J0..2.....
..D.....'..09...@k0...*.H........0?1$0"..U....Digital Signature Trust 
Co.1.0...U....DST Root CA X30...000930211219Z..210930140115Z0?1$0"..U.
...Digital Signature Trust Co.1.0...U....DST Root CA X30.."0...*.H....
.........0............P..W..be......,k0.[...}.@......3vI*.?!I..N..
<<< skipped >>>

GET /roots/dstrootcax3.p7c HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: apps.identrust.com

HTTP/1.1 200 OK

Date: Mon, 09 Apr 2018 14:08:36 GMT

Server: Apache

X-Frame-Options: SAMEORIGIN

X-XSS-Protection: 1; mode=block

Last-Modified: Fri, 19 Oct 2012 20:08:11 GMT

Accept-Ranges: bytes

Content-Length: 893

Cache-control: max-age=86400

Content-Type: application/x-pkcs7-mime
0..y..*.H.........j0..f...1.0...*.H.........N0..J0..2.......D.....'..0
9...@k0...*.H........0?1$0"..U....Digital Signature Trust Co.1.0...U..
..DST Root CA X30...000930211219Z..210930140115Z0?1$0"..U....Digital S
ignature Trust Co.1.0...U....DST Root CA X30.."0...*.H.............0..
..........P..W..be......,k0.[...}.@......3vI*.?!I..N..>H.e...!.e.*.
2....w..{........s.z..2..~..0....*8.y.1.P..e..Qc....a.Ka..Rk...K.(.H..
....>.... .[.*....p....%.tr.{j.4.0...h.{T.....Z...=d......Ap..r.&.8
U9C....\@..........%.......:..n.>..\..<..i....*.)W..=....]......
B0@0...U.......0....0...U...........0...U..........{,q...K.u...`...0..
.*.H...............,...\...(f7:...?K.... ]..YD.>.>..K.t.....t..~
.....K. D.....}..j.....N...:.pI............:^H...X._..Z.......Y..n....
...f3.Y[....sG. ...7H..VK....r2...D.SrmC.&H.Rg.X..gvqx...V..9$1....Z0G
..P.......dc`........}...=2.e..|.Wv...(9..e...w.j..w........).....55.1
.HTTP/1.1 200 OK..Date: Mon, 09 Apr 2018 14:08:36 GMT..Server: Apache.
.X-Frame-Options: SAMEORIGIN..X-XSS-Protection: 1; mode=block..Last-Mo
dified: Fri, 19 Oct 2012 20:08:11 GMT..Accept-Ranges: bytes..Content-L
ength: 893..Cache-control: max-age=86400..Content-Type: application/x-
pkcs7-mime..0..y..*.H.........j0..f...1.0...*.H.........N0..J0..2.....
..D.....'..09...@k0...*.H........0?1$0"..U....Digital Signature Trust 
Co.1.0...U....DST Root CA X30...000930211219Z..210930140115Z0?1$0"..U.
...Digital Signature Trust Co.1.0...U....DST Root CA X30.."0...*.H....
.........0............P..W..be......,k0.[...}.@......3vI*.?!I..N..
<<< skipped >>>

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBQz9arGHWbnBV0DFzpNHz4YcTiFDQQUWaRmBlKge5WSPKOUByeWdFv5PdACEATF6CtQrCRBXA3BoNLD7lk= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.sca1b.amazontrust.com

HTTP/1.1 200 OK

Content-Type: application/ocsp-response

Content-Length: 471

Connection: keep-alive

Accept-Ranges: bytes

Cache-Control: max-age=157337

Date: Tue, 10 Apr 2018 05:29:15 GMT

ETag: "5acbf074-1d7"

Expires: Thu, 12 Apr 2018 01:11:32 GMT

Last-Modified: Mon, 09 Apr 2018 23:00:04 GMT

Server: ECS (ams/49C1)

Age: 16037

X-Cache: Hit from cloudfront

Via: 1.1 0a4361fb92c26cacf90809c7a37c58ce.cloudfront.net (CloudFront)

X-Amz-Cf-Id: PQNody2orfYwo-lNQMBXs11kOCNO0Bqm-Aad5NnRGQ2jG6EZTrbTVw==
0..........0..... .....0......0...0......Y.f.R.{..<...'.t[.=...2018
0409215947Z0s0q0I0... ........3....f..]..:M.>.q8....Y.f.R.{..<..
.'.t[.=...... P.$A\......Y....20180409215947Z....20180416211447Z0...*.
H.............J..^.~...D..EE.g&...0.!$......r...)*1.tQ... . %...7.&p..
..5........Jn.. ...R;nE...)yWC^.....W~..0.>.R.U..p.A....V....i<{
..']....15...k...j.......;.s..4......Ih....D.x...gm.....n=.8U......D.d
.K...R&dO.....1....E.b.M.....I...L!$O.....A...9..U.M....n[...f....HTTP
/1.1 200 OK..Content-Type: application/ocsp-response..Content-Length: 
471..Connection: keep-alive..Accept-Ranges: bytes..Cache-Control: max-
age=157337..Date: Tue, 10 Apr 2018 05:29:15 GMT..ETag: "5acbf074-1d7".
.Expires: Thu, 12 Apr 2018 01:11:32 GMT..Last-Modified: Mon, 09 Apr 20
18 23:00:04 GMT..Server: ECS (ams/49C1)..Age: 16037..X-Cache: Hit from
 cloudfront..Via: 1.1 0a4361fb92c26cacf90809c7a37c58ce.cloudfront.net 
(CloudFront)..X-Amz-Cf-Id: PQNody2orfYwo-lNQMBXs11kOCNO0Bqm-Aad5NnRGQ2
jG6EZTrbTVw==..0..........0..... .....0......0...0......Y.f.R.{..<.
..'.t[.=...20180409215947Z0s0q0I0... ........3....f..]..:M.>.q8....
Y.f.R.{..<...'.t[.=...... P.$A\......Y....20180409215947Z....201804
16211447Z0...*.H.............J..^.~...D..EE.g&...0.!$......r...)*1.tQ.
.. . %...7.&p....5........Jn.. ...R;nE...)yWC^.....W~..0.>.R.U..p.A
....V....i<{..']....15...k...j.......;.s..4......Ih....D.x...gm....
.n=.8U......D.d.K...R&dO.....1....E.b.M.....I...L!$O.....A...9..U.M...
.n[...f......
<<< skipped >>>

GET /kits/chromium/mini_installer.exe HTTP/1.1

User-Agent: NSIS_Inetc (Mozilla)

Host: update.searchincognitopro.com

Connection: Keep-Alive

Cache-Control: no-cache

HTTP/1.1 200 OK

Content-Type: application/octet-stream

Content-Length: 35183144

Connection: keep-alive

Date: Thu, 05 Apr 2018 17:35:16 GMT

Server: nginx

Last-Modified: Wed, 04 Oct 2017 14:16:15 GMT

ETag: "59d4ed2f-218da28"

Accept-Ranges: bytes

Age: 41417

X-Cache: Hit from cloudfront

Via: 1.1 1573330ae19bba1a59e676d5c072337e.cloudfront.net (CloudFront)

X-Amz-Cf-Id: uDE_ilYE4NE-pKJWbuNt-WdQUjPh-Pt5GNFv3yZdcY4Otaxe1rjBxA==
MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.........yD........
....................c.......f...............c.......Rich..............
..............PE..L....w.Y.........."......"..........F........@....@.
................................T.....@...............................
...P..P....`..0...............(.......t...0...8.......................
.....................P...............................text...\!......."
.................. ..`.data........@......................@....idata..
|....P.......&..............@..@.rsrc...0....`......................@.
.@.reloc..t...........................@..B............................
......................................................................
......................................................................
......................................................................
......................................................................
................................................ ... .-.-...=.".....".
 .-.-....."...D.:.P.A.I.(.A.;.;.F.A.;.;.;.B.A.).(.A.;.O.I.I.O.C.I.;.G.
A.;.;.;.B.A.).(.A.;.;.F.A.;.;.;.S.Y.).(.A.;.O.I.I.O.C.I.;.G.A.;.;.;.S.
Y.).(.A.;.O.I.I.O.C.I.;.G.A.;.;.;.C.O.).(.A.;.;.F.A.;.;.;.....).....t.
m.p.....\...\.*...*.....*...*...T.@...@.c.h.r.o.m.e._...........G.o.o.
g.l.e.U.p.d.a.t.e.I.s.M.a.c.h.i.n.e...-.-.s.y.s.t.e.m.-.l.e.v.e.l.....
-.-.c.l.e.a.n.u.p...-.-.c.h.r.o.m.e.-.f.r.a.m.e.......@...@.@.@.%.W.I.
N.D.I.R.%.\.s.y.s.t.e.m.3.2.\.c.a.b.i.n.e.t...d.l.l.......%.S.Y.S.
<<< skipped >>>

GET /sca1b.crl HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: crl.sca1b.amazontrust.com

HTTP/1.1 200 OK

Content-Type: application/x-pkcs7-crl

Content-Length: 47323

Connection: keep-alive

Date: Mon, 09 Apr 2018 17:31:17 GMT

Cache-Control: max-age=172800

Expires: Wed, 11 Apr 2018 17:31:17 GMT

X-CFHash: "d3312dedc7c744a6001ac66d8f490866"

X-CFF: B

Last-Modified: Mon, 09 Apr 2018 17:15:12 GMT

X-CF3: M

CF4Age: 0

x-cf-tsc: 1523295077

CF4ttl: 31536000.000

X-CF2: H

Accept-Ranges: bytes

Server: CFS 0215

X-CF1: 13483:fD.fra2:cf:cacheN.fra2-01:P

Age: 59115

X-Cache: Hit from cloudfront

Via: 1.1 c4ac29c6fe4bd9c4b1ce0d01d99b45ef.cloudfront.net (CloudFront)

X-Amz-Cf-Id: lMSkPegNX8cpcQ-TJVG5HDYNVd0IbpnYZoFWF2VzHIXuQ1Kl198hnw==
0...0......0...*.H........0F1.0...U....US1.0...U....Amazon1.0...U....S
erver CA 1B1.0...U....Amazon..180409170407Z..180416170000Z0...0!......
....P. ...{...170322152617Z0!......~.`"P0..A..S..170601060052Z0!...:..
..M....]...%..170601060145Z0!.........-E..<.D....170626212107Z0!...
..,.ghi.f(.......170717174247Z0!....f....l.....D....170725232901Z0!...
.7....V.;..T..z..170803221924Z0!...\*.U....Q.{.z....170803222325Z0!...
.?..Z.=.*........170807230709Z0!...331......G#..F...170811185730Z0!...
.C....#..@7..e...170814201112Z0!......e....,%. .....170816203558Z0!...
.Q...%. .........170818175637Z0!.....3>........O.k..170818175707Z0!
...qN..L&.^3G....G..170818175748Z0!...bl_..r...kC#.C\..170818175922Z0!
.....G\.V.......%}..170821212213Z0!...B........?.7.p...170822175123Z0!
.....enk.6..z.'*>...170822182644Z0!.....eT..W_5.zG.b...170831010156
Z0!.....0n.z5,.&.......170831192925Z0!...0.\$6~h4.;...:H..170901220230
Z0!...Y[.j.G.G..o......170901230928Z0!....q..}.?..(.3..,..170907185827
Z0!....S..K.C..2..vQ(..170907232106Z0!...'...wWXw.[T......170907235746
Z0!......M.&_..I.. k...170908190811Z0!....<..,H|P.2..i....170908190
827Z0!....@.F.Eh..<s.j....170908190838Z0!....\r..C`.J.45#....170910
020051Z0!......B...;2.R......170912234632Z0!....>...0.q}..,2....170
913001321Z0!...G}...CfW.EH... ..170918154322Z0!.... .c..z.y..b..i..170
918192406Z0!...dP7..1..n....\...170918192635Z0!.......m_e...^. I...170
918192928Z0!...wrr......y...et..170921195155Z0!.... ....g....i.....170
921215705Z0!....g[._.[.u.U-Z0V..170925031913Z0!...8.O.-R..iL.T....
<<< skipped >>>

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBRv9GhNQxLSSGKBnMArPUcsHYovpgQUxKexpHsscfrb4UuQdf/EFWCFiRACEAoBQUIAAAFThXNqC4Xspwg= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: isrg.trustid.ocsp.identrust.com

HTTP/1.1 200 OK

Content-transfer-encoding: Binary

Last-Modified: Sun, 08 Apr 2018 00:08:57 GMT

ETag: "da80c39672a8657a632e964374a1bb5df27df4c9"

Content-Type: application/ocsp-response

Content-Length: 1398

Cache-Control: public, no-transform, must-revalidate, max-age=38506

Expires: Tue, 10 Apr 2018 20:38:31 GMT

Date: Tue, 10 Apr 2018 09:56:45 GMT

Connection: keep-alive
0..r......k0..g.. .....0.....X0..T0........ ..zJ.!.I...u(......2018040
8000857Z0s0q0I0... ........o.hMC..Hb... =G,../.......{,q...K.u...`....
...AB...S.sj.........20180408000857Z....20180415000857Z0...*.H........
......gu... ...)....h....E.......g.Yv........9..Kuq..e.\...?.GA ......
..T .j.r..*.?m/=.q..|...(A......{....x... .......=?O......j.....`D.Q#.
.A.1. ..,.1.....OX.,c....Bt}n|..N...1....V...\......}.>.9..9.....G.
]..hU.^6d.8Z7$.......A Ei.2...G.....wUds.p..-B9...G[......0...0...0..{
.........AB...[.s^*(R.40...*.H........0?1$0"..U....Digital Signature T
rust Co.1.0...U....DST Root CA X30...170510174115Z..180510174115Z0..1.
0...U....US1 0...U....Digital Signature Trust1.0...U....DST1.0...U....
DST CA X3 OCSP Signer1$0"..*.H........pki-ops@IdenTrust.com0.."0...*.H
.............0.........C#......}.>.....r....P..%b.b....mh...O....c.
?..1_...O....9.K.6I.#O..6\..`..`~.5..&.!y....;..Y.Fcob.}....nz..V.....
..F...{.2.4....AIt........s..lgQ..v...P7....)dk..`...../{..^N...%-../-
.z.|w.9..TFw.(...g....K=6..xr.B9..d{..Lf......T....t.........1ne.7.t..
.......F0D0...U.......0.0...U...........0... .....0......0...U.%..0...
 .......0...*.H..............p.A....o.....L.c.J.-5.h.nbE.r0\...)3}..e.
Lo.U.......&......l....$...........I...BI..Y.#..y(<h.?....i7...d...
'k..A....H.$.6BP.*.o..\..`rh....oR.#..._}_.F.V..j..v>.}=Z.I..O...QO
r3.b.3.2.~ht./2t#d..M.}.?..T...$=....C...h....7F....2..]....'.P.......
..M.@>.;.W..
<<< skipped >>>

GET /GTSGIAG3.crl HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: crl.pki.goog

HTTP/1.1 200 OK

Accept-Ranges: bytes

Content-Type: application/pkix-crl

Content-Length: 552

Date: Tue, 10 Apr 2018 09:09:49 GMT

Expires: Tue, 10 Apr 2018 10:09:49 GMT

Last-Modified: Tue, 10 Apr 2018 02:15:00 GMT

X-Content-Type-Options: nosniff

Server: sffe

X-XSS-Protection: 1; mode=block

Cache-Control: public, max-age=3600

Age: 2816
0..$0......0...*.H........0T1.0...U....US1.0...U....Google Trust Servi
ces1%0#..U....Google Internet Authority G3..180410010021Z..18042001002
1Z0R0'..HQ........170911131858Z0.0...U.......0'..g....Z.[..18022618194
5Z0.0...U........00.0...U.#..0...w..P.gvv.-.....~.~.K0...U........0...
*.H...............6G....CF3?.iDP....'...9.....y..12j.|-...9Z..#i/9.-8U
Q%..K...2o.0..vH.<.$.....Y.u_..r...[.N.b.H.g7...&.xG..v.W.\.K*..9.1
u.D!.w.*{lB....\z....J%.P....I...gA6......X5.r....}.nic.u V.... .?.]{.
.Gd.Q....d.{?..E@R...T.7....`.........-.&x...M.. G2....6S`p.20F-.HTTP/
1.1 200 OK..Accept-Ranges: bytes..Content-Type: application/pkix-crl..
Content-Length: 552..Date: Tue, 10 Apr 2018 09:09:49 GMT..Expires: Tue
, 10 Apr 2018 10:09:49 GMT..Last-Modified: Tue, 10 Apr 2018 02:15:00 G
MT..X-Content-Type-Options: nosniff..Server: sffe..X-XSS-Protection: 1
; mode=block..Cache-Control: public, max-age=3600..Age: 2816..0..$0...
...0...*.H........0T1.0...U....US1.0...U....Google Trust Services1%0#.
.U....Google Internet Authority G3..180410010021Z..180420010021Z0R0'..
HQ........170911131858Z0.0...U.......0'..g....Z.[..180226181945Z0.0...
U........00.0...U.#..0...w..P.gvv.-.....~.~.K0...U........0...*.H.....
..........6G....CF3?.iDP....'...9.....y..12j.|-...9Z..#i/9.-8UQ%..K...
2o.0..vH.<.$.....Y.u_..r...[.N.b.H.g7...&.xG..v.W.\.K*..9.1u.D!.w.*
{lB....\z....J%.P....I...gA6......X5.r....}.nic.u V.... .?.]{..Gd.Q...
.d.{?..E@R...T.7....`.........-.&x...M.. G2....6S`p.20F-...
<<< skipped >>>

GET /MFQwUjBQME4wTDAJBgUrDgMCGgUABBSIfaREXmfqfJR3TkMYnD7O5MhzEgQUnF8A36oB1zArOIiiuG1KnPIRkYMCEwZ/lEoqJ83z+sKuKwH5CO65xMY= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.rootg2.amazontrust.com

HTTP/1.1 200 OK

Content-Type: application/ocsp-response

Content-Length: 1548

Connection: keep-alive

Cache-Control: max-age=302400, public, no-transform, must-revalidate

Date: Tue, 10 Apr 2018 07:02:32 GMT

ETag: 99f11c9c3debdf23f97574bfac6e5747580ad1a8

Expires: Tue, 17 Apr 2018 07:02:32 GMT

Last-Modified: Tue, 10 Apr 2018 07:02:32 GMT

Server: WEBrick/1.3.1 (Ruby/2.3.6/2017-12-14)

Age: 10430

X-Cache: Hit from cloudfront

Via: 1.1 7931eaa1dff1cb95b1efbb64ac37670c.cloudfront.net (CloudFront)

X-Amz-Cf-Id: DP9uas6wP15ubZRKaukralEDLrmLOj70S9-sMv9ki7poUnb8BhvfJg==
0..........0..... .....0......0...0...V0T1.0...U....US1.0...U....Amazo
n1402..U... Starfield Services G2 Root CA Status Signer..2018041007023
2Z0v0t0L0... .........}.D^g.|.wNC..>...s...._.....0 8...mJ.........
.J*'..... ...........20180410060232Z....20180417070232Z0...*.H........
.....H...P..u.0.....5Db[F..&...q0N..O.7.....[.{...t^$=.h...wGyk.).._..
..~~C.q..!.n.y..]x..n...H ......>W5...E9....(...[..1.{?.U.,X4).....
.DJ:.vu.....#n....$l..,..O..HDV.....3oT0.....s....X...q<....F......
...'..&-.a..U.$......i'GVd......lI....I=.8{#N....Z..B........0...0...0
...........{Pq.....D...O|.r..0...*.H........0..1.0...U....US1.0...U...
.Arizona1.0...U....Scottsdale1%0#..U....Starfield Technologies, Inc.1;
09..U...2Starfield Services Root Certificate Authority - G20...1510212
22921Z..190121222921Z0T1.0...U....US1.0...U....Amazon1402..U... Starfi
eld Services G2 Root CA Status Signer0.."0...*.H.............0........
.d....zL.^.\.....5)..QP. W..9...I..|"...Dt....g...4.WBW...,E....K...W.
..'..'.h.Q.......K.Pl.z ......o.z....zl..G......[v..<..Sg.........Q
7...n...i....*We2....T..q.Kqx......N..H...........S..Q...b].[.........
.o.S..!.....4v"."?.Mo......r.[./D....c>...g...H........l0j0...U....
.......0...U.#..0...._.....0 8...mJ.....0...U.%..0... .......0... ....
.0......0...U. ..0.0... .;.0...*.H...................e.P....I.....S...
.%.u)U.v.q...y..j...(....N....$.yI.e>.E@..'...;..w.....g]..t..(..#C
..a~...{<,}.m.o..m.a...-........~.@.2.P..58..|k^.b.as.........f.E.[
.:......}.....2..p-b..^..p...h...[`.......*...I.x...8.y..RN.#@P..M
<<< skipped >>>

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBRv9GhNQxLSSGKBnMArPUcsHYovpgQUxKexpHsscfrb4UuQdf/EFWCFiRACEAoBQUIAAAFThXNqC4Xspwg= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: isrg.trustid.ocsp.identrust.com

HTTP/1.1 200 OK

Content-transfer-encoding: Binary

Last-Modified: Sun, 08 Apr 2018 00:08:57 GMT

ETag: "da80c39672a8657a632e964374a1bb5df27df4c9"

Content-Type: application/ocsp-response

Content-Length: 1398

Cache-Control: public, no-transform, must-revalidate, max-age=38506

Expires: Tue, 10 Apr 2018 20:38:31 GMT

Date: Tue, 10 Apr 2018 09:56:45 GMT

Connection: keep-alive
0..r......k0..g.. .....0.....X0..T0........ ..zJ.!.I...u(......2018040
8000857Z0s0q0I0... ........o.hMC..Hb... =G,../.......{,q...K.u...`....
...AB...S.sj.........20180408000857Z....20180415000857Z0...*.H........
......gu... ...)....h....E.......g.Yv........9..Kuq..e.\...?.GA ......
..T .j.r..*.?m/=.q..|...(A......{....x... .......=?O......j.....`D.Q#.
.A.1. ..,.1.....OX.,c....Bt}n|..N...1....V...\......}.>.9..9.....G.
]..hU.^6d.8Z7$.......A Ei.2...G.....wUds.p..-B9...G[......0...0...0..{
.........AB...[.s^*(R.40...*.H........0?1$0"..U....Digital Signature T
rust Co.1.0...U....DST Root CA X30...170510174115Z..180510174115Z0..1.
0...U....US1 0...U....Digital Signature Trust1.0...U....DST1.0...U....
DST CA X3 OCSP Signer1$0"..*.H........pki-ops@IdenTrust.com0.."0...*.H
.............0.........C#......}.>.....r....P..%b.b....mh...O....c.
?..1_...O....9.K.6I.#O..6\..`..`~.5..&.!y....;..Y.Fcob.}....nz..V.....
..F...{.2.4....AIt........s..lgQ..v...P7....)dk..`...../{..^N...%-../-
.z.|w.9..TFw.(...g....K=6..xr.B9..d{..Lf......T....t.........1ne.7.t..
.......F0D0...U.......0.0...U...........0... .....0......0...U.%..0...
 .......0...*.H..............p.A....o.....L.c.J.-5.h.nbE.r0\...)3}..e.
Lo.U.......&......l....$...........I...BI..Y.#..y(<h.?....i7...d...
'k..A....H.$.6BP.*.o..\..`rh....oR.#..._}_.F.V..j..v>.}=Z.I..O...QO
r3.b.3.2.~ht./2t#d..M.}.?..T...$=....C...h....7F....2..]....'.P.......
..M.@>.;.W..
<<< skipped >>>

GET /pki/crl/products/tspca.crl HTTP/1.1

Cache-Control: max-age = 848

Connection: Keep-Alive

Accept: */*

If-Modified-Since: Sat, 24 May 2014 05:04:54 GMT

If-None-Match: "8ab194b3d77cf1:0"

User-Agent: Microsoft-CryptoAPI/6.1

Host: crl.microsoft.com

HTTP/1.1 200 OK

Content-Length: 521

Content-Type: application/pkix-crl

Content-MD5: JWZin  qpTIUZVlb8qtzDA==

Last-Modified: Wed, 23 Aug 2017 20:47:09 GMT

ETag: 0x8D4EA681FF487EC

Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0

x-ms-request-id: 218e40c9-e01e-009a-1d04-bccbb5000000

x-ms-version: 2009-09-19

x-ms-lease-status: unlocked

x-ms-blob-type: BlockBlob

Date: Tue, 10 Apr 2018 09:57:06 GMT

Connection: keep-alive
0...0.....0...*.H........0y1.0...U....US1.0...U....Washington1.0...U..
..Redmond1.0...U....Microsoft Corporation1#0!..U....Microsoft Timestam
ping PCA..140514201017Z..440513202154Z.A0?0...U.#..0...o.N?..4.K......
;AC..0... .....7.......0...U......)0...*.H..............*..6k..s...e".
x(........C..L......rE/^......m....t.....I^.W.. ........`.Qa....V.c.3o
A.....7.w...>.)...[IeO!.lm.....8`.v....Y.......z?.......n).~.:....\
.l>.J.I2.17>.*...tl9.C.z."..BP..N. ..0....H......J?...>XF.G..
...@....".Y..V.].?.7..7`.7...r...~.3..c..4.HTTP/1.1 200 OK..Content-Le
ngth: 521..Content-Type: application/pkix-crl..Content-MD5: JWZin  qpT
IUZVlb8qtzDA==..Last-Modified: Wed, 23 Aug 2017 20:47:09 GMT..ETag: 0x
8D4EA681FF487EC..Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0.
.x-ms-request-id: 218e40c9-e01e-009a-1d04-bccbb5000000..x-ms-version: 
2009-09-19..x-ms-lease-status: unlocked..x-ms-blob-type: BlockBlob..Da
te: Tue, 10 Apr 2018 09:57:06 GMT..Connection: keep-alive..0...

GET /msdownload/update/v3/static/trustedr/en/authrootstl.cab HTTP/1.1

Cache-Control: max-age = 86405

Connection: Keep-Alive

Accept: */*

If-Modified-Since: Fri, 22 Sep 2017 22:03:52 GMT

If-None-Match: "014e8acee33d31:0"

User-Agent: Microsoft-CryptoAPI/6.1

Host: VVV.download.windowsupdate.com

HTTP/1.1 200 OK

Date: Mon, 09 Apr 2018 11:38:05 GMT

Content-Type: application/vnd.ms-cab-compressed

Content-Length: 54015

Connection: keep-alive

Cache-Control: max-age=604800

ETag: "8048a29636c5d31:0"

Expires: Fri, 06 Apr 2018 11:37:55 GMT

Last-Modified: Mon, 26 Mar 2018 19:13:57 GMT

Server: Microsoft-IIS/8.5

x-ccc: DE

x-cid: 3

X-Powered-By: ASP.NET

MSRegion: EMEA

Age: 80281

Accept-Ranges: bytes
MSCF............,...................I.................zL.\ .authroot.s
tl.....X7..CK...<........i.g.B.A.E#k..Z.d.H.lQI..RZdM...".%.KY"D..%
*J...?3nez&7....{....y.........~.9.Da&..3..1..e.0......:o.`08....N....
........d.10&R....l.E.,FX...t.2.0a1...GN.......%E...N..l...v#...0...}.
3.../. .#.`."...H.'...[Y...aF.z~M..S."4..V.'.>o...4.....q\0.P......
....5;..O ......a,{~.3.Z*.Wr....f.$.W..2.)W..,...z.2...z.!.%z.6S/.rK..
...8}.S....4..,....ch ...@~P ..@A..d.Z~...D....3[....6..kC........AP..
A.....;.`....v.>W!.?x}HU.$.8F...C......;L8v..a.g.=tt...hT..m...qgN.
.>P.N..F..!..`.&P...D...........CSc?W...B...B.7sw>.W}....4..u.dD
t)P....d.[!Kpy@....h...X......z|.].:..P.../K..`;V.XsY.oF$...{(.sP..[..
./f.._.-.t.E........h,....r..g3.\.lr.8.y..r4.........Y./..Mu........&l
t;-..d...%.YG.E.V\x..`...................\...}3. h..G....`E..N..".Z.Gh
.....>......A.x.}K].o.... .q..:.*).Y.N%jN..6..$D.....ipk!...[.V.*zD
 E..p.".Y.c.....m.=..1...0$..F..G.B.o_}.m[...........h.=.....d......~.
~..9.@a<..x..K.a..h..`4...O;..=1..x.r.Ioh....y!.....I..........2$..
.Q2.H.Z.L&.Q.@....hb.......u..d..p.@.:....EH..d.....^./...(..Y/"..|.Z.
..W..s.$M..*.e........g!.............2.x........?.../...Y..n:.A..|.]..
..tO\.}b`.O.....'.?..v..R......^a........N .Z\6...b..... .=H..G.......
.".Qu.....30B.>..E...GK.....II...J...y..D.T..#...X...e......6.Df..@
...4...1l:m.1c'..........Z...V4........byPm}Wg}_ P......8....s........
|..........l..%/...S..........q..[...8G]....G.@..).....8..M(....c.....
........F|U...@%.._aH.{FL..W..vl.....4a..}...s.Q..?.m..-..........
<<< skipped >>>

GET /gsr2/ME4wTDBKMEgwRjAJBgUrDgMCGgUABBTgXIsxbvr2lBkPpoIEVRE6gHlCnAQUm+IHV2ccHsBqBt5ZtJot39wZhi4CDQHjqTAc/HIGOD+aUx0= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.pki.goog

HTTP/1.1 200 OK

Content-Type: application/ocsp-response

Date: Sun, 08 Apr 2018 11:48:50 GMT

Server: ocsp_responder

Content-Length: 468

X-XSS-Protection: 1; mode=block

X-Frame-Options: SAMEORIGIN

Cache-Control: public, max-age=345600

Age: 166063
0..........0..... .....0......0...0.........Wg...j..Y..-.......2017061
5184500Z0p0n0F0... .........\.1n........U.:.yB......Wg...j..Y..-......
....0..r.8?.S.....20170615000000Z....20180615000000Z0...*.H...........
..8%\)..d....i=.T[H....dZ....c...;...|..:R1.F.:d.."&..T.........e.. 5.
.S...[g.'..{..?..(t.0..}.K...6Ok..7J.bRXC.UjxW./.'..# .!:m.j.......!..
..M?...OL.>JY...T..&*.....k..(.... ..N.$.........9.....$.....R..y.;
m....U<....h.1...|..]m|G..b.(..%.-i.(}.. Kf.8.2.TK.HTTP/1.1 200 OK.
.Content-Type: application/ocsp-response..Date: Sun, 08 Apr 2018 11:48
:50 GMT..Server: ocsp_responder..Content-Length: 468..X-XSS-Protection
: 1; mode=block..X-Frame-Options: SAMEORIGIN..Cache-Control: public, m
ax-age=345600..Age: 166063..0..........0..... .....0......0...0.......
..Wg...j..Y..-.......20170615184500Z0p0n0F0... .........\.1n........U.
:.yB......Wg...j..Y..-..........0..r.8?.S.....20170615000000Z....20180
615000000Z0...*.H.............8%\)..d....i=.T[H....dZ....c...;...|..:R
1.F.:d.."&..T.........e.. 5..S...[g.'..{..?..(t.0..}.K...6Ok..7J.bRXC.
UjxW./.'..# .!:m.j.......!....M?...OL.>JY...T..&*.....k..(.... ..N.
$.........9.....$.....R..y.;m....U<....h.1...|..]m|G..b.(..%.-i.(}.
. Kf.8.2.TK.....


GET /GTSGIAG3/MEkwRzBFMEMwQTAJBgUrDgMCGgUABBT27bBjYjKBmjX2jXWgnQJKEapsrQQUd8K4UJpndnaxLcKG0IOgfqZ+uksCCBHSn7NRwhCM HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.pki.goog

HTTP/1.1 200 OK

Content-Type: application/ocsp-response

Date: Sun, 08 Apr 2018 00:12:14 GMT

Server: ocsp_responder

Content-Length: 463

X-XSS-Protection: 1; mode=block

X-Frame-Options: SAMEORIGIN

Cache-Control: public, max-age=345600

Age: 207869
0..........0..... .....0......0...0......w..P.gvv.-.....~.~.K..2018040
7195815Z0k0i0A0... ...........cb2..5..u...J..l...w..P.gvv.-.....~.~.K.
.....Q.......20180407195815Z....20180414195815Z0...*.H............. ..
z.x....,...%s..[.....:...G..C0..".Q.3.-.Sb..&.:yS..p.....]......./....
....vlm......)p..g.&-9.......e.X.^_..h..b....^}....g1s..J...@Q......M.
.Q}....<..E.x`....TR..P"..Af......{e.F......Q.V....R.=....<.-...
5G...t.W,Pf.....n.."jf....s..c.6..yn.^..<..,`....HTTP/1.1 200 OK..C
ontent-Type: application/ocsp-response..Date: Sun, 08 Apr 2018 00:12:1
4 GMT..Server: ocsp_responder..Content-Length: 463..X-XSS-Protection: 
1; mode=block..X-Frame-Options: SAMEORIGIN..Cache-Control: public, max
-age=345600..Age: 207869..0..........0..... .....0......0...0......w..
P.gvv.-.....~.~.K..20180407195815Z0k0i0A0... ...........cb2..5..u...J.
.l...w..P.gvv.-.....~.~.K......Q.......20180407195815Z....201804141958
15Z0...*.H............. ..z.x....,...%s..[.....:...G..C0..".Q.3.-.Sb..
&.:yS..p.....]......./........vlm......)p..g.&-9.......e.X.^_..h..b...
.^}....g1s..J...@Q......M..Q}....<..E.x`....TR..P"..Af......{e.F...
...Q.V....R.=....<.-...5G...t.W,Pf.....n.."jf....s..c.6..yn.^..<
..,`......

The not-a-virus connects to the servers at the folowing location(s):

.text

`.rdata

@.data

.rsrc

@.reloc

j.Yf;

_tcPVj@

.PjRW

address family not supported

broken pipe

function not supported

inappropriate io control operation

not supported

operation canceled

operation in progress

operation not permitted

operation not supported

operation would block

protocol not supported

InitOnceExecuteOnce

atlthunk.dll

operator

operator ""

operator co_await

?#%X.y

%S#[k

()$^.* ?[]|\-{},:=!

RegOpenKeyTransactedW

RegCreateKeyTransactedW

RegDeleteKeyTransactedW

RegDeleteKeyExW

D:\Autobuild\Work\branches\2.0\SearchBar\Release\SearchBar.pdb

.text$di

.text$mn

.text$x

.text$yd

.idata$5

.CRT$XCA

.CRT$XCAA

.CRT$XCC

.CRT$XCL

.CRT$XCU

.CRT$XCZ

.CRT$XIA

.CRT$XIAA

.CRT$XIAC

.CRT$XIC

.CRT$XIZ

.CRT$XLA

.CRT$XLZ

.CRT$XPA

.CRT$XPX

.CRT$XPXA

.CRT$XPZ

.CRT$XTA

.CRT$XTZ

.rdata

.rdata$T

.rdata$r

.rdata$sxdata

.rdata$zzzdbg

.rtc$IAA

.rtc$IZZ

.rtc$TAA

.rtc$TZZ

.tls$

.tls$ZZZ

.xdata$x

.idata$2

.idata$3

.idata$4

.idata$6

.data

.data$r

.rsrc$01

.rsrc$02

urlmon.dll

VERSION.dll

HttpOpenRequestW

HttpQueryInfoW

InternetCrackUrlW

HttpSendRequestW

WININET.dll

GetProcessHeap

SetNamedPipeHandleState

CreateNamedPipeW

DisconnectNamedPipe

WaitNamedPipeW

ConnectNamedPipe

KERNEL32.dll

GetKeyState

USER32.dll

GDI32.dll

RegOpenKeyExW

RegEnumKeyExW

RegCreateKeyExW

RegDeleteKeyW

RegQueryInfoKeyW

RegCloseKey

ADVAPI32.dll

ShellExecuteExW

SHELL32.dll

ole32.dll

OLEAUT32.dll

SHLWAPI.dll

USERENV.dll

GetCPInfo

.?AU_Crt_new_delete@std@@

.?AUDWebBrowserEvents2@@

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "hXXp://VVV.w3.org/TR/html4/strict.dtd">

<meta http-equiv="MSThemeCompatible" content="yes" />

<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">

<script type="text/javascript" src="js/jquery_min.js"></script>

<script type="text/javascript" src="js/main.js"></script>

.browser-dropdown {width:40px; height:25px; margin:4px 0px 3px; padding:2px 5px; display:inline-block; background:url(img/down-arrow.png) no-repeat 86% 52%;}

.browser-dropdown:hover {background-color:#cacaca;}

.search-container{ margin:1px 0px 1px 0px; height:29px; padding:2px 0px 2px 30px; border:1px solid #a9a9a9; background:#fff url(img/search-icon.png) no-repeat 10px 50%;}

::-ms-clear {width:0; height:0; position:absolute; left:99999px; display:none !important;}

.placeholder {position:absolute;}

.search-field-placeholder {color:#000000; font-size:17px; top:6px; left:132px; font-family: Segoe UI; font-weight: lighter;}

<div class="search-field-placeholder placeholder">Search the web...</div>

<img width="25" height="25" src="img/chromium.png" />

<div id="col3"><a id="settings_button"><img src="img/settings.png" /></a></div>

.browser-dropdown {width:40px; height:25px; margin:4px 0px 3px 10px; padding:2px 5px; display:inline-block; background:url(img/down-arrow.png) no-repeat 86% 52%;}

.search-field-placeholder {color:#000000; font-size:17px; top:6px; left:90px; font-family: Segoe UI; font-weight: lighter;}

.quicklink-item {font-family: Arial, Verdana, sans-serif;float: left; margin-right: 5px;}

.quicklink-item a {text-decoration:none;display: block;padding: 4px 9px;-moz-transition: all .11s;-o-transition: all .11s;-webkit-transition: all .11s;transition: all .11s;}

.quicklink-item a:hover {background: #ccc; border-radius: 4px; box-shadow: inset 0 1px 1px rgba(0, 0, 0, .28);}

.quicklink-item img {width: 24px;height: 24px;float: left;}

.quicklink-item#quicklink-weather .text {font-weight: 700;}

.quicklink-item .text {color: #333;font-size: 14px;line-height: 24px;margin-left: 6px;white-space: nowrap;}

#toolbar-icon-news {background: url(img/Sprite_Email_V6.png) -168px 0;float: left;width: 24px;height: 24px;position: relative;}

#toolbar-icon-facebook {background: url(img/Sprite_Email_V6.png) -120px 0;float: left;width: 24px;height: 24px;position: relative;}

#toolbar-icon-gmail {background: url(img/Sprite_Email_V6.png) 0 0;float: left;width: 24px;height: 24px;position: relative;}

#toolbar-icon-yahoo {background: url(img/Sprite_Email_V6.png) -24px 0;float: left;width: 24px;height: 24px;position: relative;}

#toolbar-icon-outlook {background: url(img/Sprite_Email_V6.png) -48px 0;float: left;width: 24px;height: 24px;position: relative;}

#toolbar-icon-hotmail {background: url(img/Sprite_Email_V6.png) -72px 0;float: left;width: 24px;height: 24px;position: relative;}

#toolbar-icon-maps {background: url(img/Sprite_Email_V6.png) -96px 0;float: left;width: 24px;height: 24px;position: relative;}

<a draggable="false" href="#" title="Go to Gmail.com" id="gmail_link">

<a draggable="false" href="#" title="Go to Yahoo.com" id="yahoo_link">

<a draggable="false" href="#" title="Go to Outlook.com" id="outlook_link">

<a draggable="false" href="#" title="Go to Hotmail.com" id="hotmail_link">

<a draggable="false" href="#" title="Go to Facebook.com" id="facebook_link">

<td id="col4"><a id="settings_button"><img src="img/settings.png" /></a></td>

.quicklink-item a {text-decoration:none;display: block;padding: 4px 12px;-moz-transition: all .11s;-o-transition: all .11s;-webkit-transition: all .11s;transition: all .11s;}

#toolbar-icon-news {background: url(img/Sprite_Maps_V3.png) -144px 0; float: left; width: 24px; height: 24px; position: relative;}

#toolbar-icon-googlemaps {background: url(img/Sprite_Maps_V3.png) -24px 0; float: left; width: 24px; height: 24px; position: relative;}

#toolbar-icon-bingmaps {background: url(img/Sprite_Maps_V3.png) -48px 0; float: left; width: 24px; height: 24px; position: relative;}

#toolbar-icon-gasprices {background: url(img/Sprite_Maps_V3.png) -72px 0; float: left; width: 24px; height: 24px; position: relative;}

#toolbar-icon-news {background: url(img/Sprite_Weather_V3.png) -216px 0; float: left; width: 24px; height: 24px; position: relative;}

#toolbar-icon-alerts {background: url(img/Sprite_Weather_V3.png) -120px 0; float: left; width: 24px; height: 24px; position: relative;}

#toolbar-icon-nationalweather {background: url(img/Sprite_Weather_V3.png) -144px 0; float: left; width: 24px; height: 24px; position: relative;}

#toolbar-icon-pollen {background: url(img/Sprite_Weather_V3.png) -168px 0; float: left; width: 24px; height: 24px; position: relative;}

#toolbar-icon-maps {background: url(img/Sprite_Weather_V3.png) -192px 0; float: left; width: 24px; height: 24px; position: relative;}

<a draggable="false" href="#" title="Get Pollen Reports" id="pollen_reports_link">

<span class="text">Pollen Reports</span>

#toolbar-icon-news{background: url(img/Sprite_Classifieds_V2.png) -168px 0;float: left;width: 24px;height: 24px;position: relative;}

#toolbar-icon-craigslist {background: url(img/Sprite_Classifieds_V2.png) -264px 0; float: left; width: 24px; height: 24px; position: relative;}

#toolbar-icon-classifiedads {background: url(img/Sprite_Classifieds_V2.png) -288px 0; float: left; width: 24px; height: 24px; position: relative;}

#toolbar-icon-closefive {background: url(img/Sprite_Classifieds_V2.png) -216px 0; float: left; width: 24px; height: 24px; position: relative;}

#toolbar-icon-super {background: url(img/Sprite_Classifieds_V2.png) -240px 0; float: left; width: 24px; height: 24px; position: relative;}

.quicklink-item img {width: 24px;height: 24px;float: left; border:0 none;}

#toolbar-icon-news {background: url(img/Sprite_FileConverter_V3.png) -288px 0;float: left;width: 24px;height: 24px;position: relative;}

<a draggable="false" href="#" title="Go to CloudConvert.com PDF" id="pdf_link">

<img src="img/fc5.png" style="height:24px;width:24px;">

<a draggable="false" href="#" title="Go to CloudConvert.com Doc" id="doc_link">

<img src="img/fc6.png" style="height:24px;width:24px;">

<a draggable="false" href="#" title="Airport Parking" id="airport_parking_link">

<span class="text"><strong>Airport</strong> Parking</span>

#toolbar-icon-news{background: url(img/Sprite_Packages_V1.png) -168px 0;float: left;width: 24px;height: 24px;position: relative;}

#toolbar-icon-form1040 {background: url(img/Sprite_Forms_V3.png) -216px 0;float: left;width: 24px;height: 24px;position: relative;}

#toolbar-icon-formw9 {background: url(img/Sprite_Forms_V3.png) -240px 0;float: left;width: 24px;height: 24px;position: relative;}

#toolbar-icon-formw4 {background: url(img/Sprite_Forms_V3.png) -264px 0;float: left;width: 24px;height: 24px;position: relative;}

#toolbar-icon-form1099 {background: url(img/Sprite_Forms_V3.png) -288px 0;float: left;width: 24px;height: 24px;position: relative;}

#toolbar-icon-commonforms {background: url(img/Sprite_Forms_V3.png) -312px 0;float: left;width: 24px;height: 24px;position: relative;}

#toolbar-icon-track17{background: url(img/Sprite_Packages_V1.png) -240px 0;float: left;width: 24px;height: 24px;position: relative;}

#toolbar-icon-facebook {background: url(img/Sprite_Packages_V1.png) -120px 0;float: left;width: 24px;height: 24px;position: relative;}

#toolbar-icon-youtube {background: url(img/Sprite_Packages_V1.png) -144px 0;float: left;width: 24px;height: 24px;position: relative;}

#toolbar-icon-yahoo {background: url(img/Sprite_Packages_V1.png) -24px 0;float: left;width: 24px;height: 24px;position: relative;}

#toolbar-icon-gmail {background: url(img/Sprite_Packages_V1.png) 0px 0;float: left;width: 24px;height: 24px;position: relative;}

<a draggable="false" href="#" title="Go To Facebook.com" id="facebook_link">

<a draggable="false" href="#" title="Go To Youtube.com" id="youtube_link">

<a draggable="false" href="#" title="Go To Gmail.com" id="gmail_link">

#toolbar-icon-news {background: url(img/Sprite_Radio_V2.png) -168px 0;float: left;width: 24px;height: 24px;position: relative;}

#toolbar-icon-iHeartRadio {background: url(img/Sprite_Radio_V2.png) -216px 0;float: left;width: 24px;height: 24px;position: relative;}

#toolbar-icon-youtube {background: url(img/Sprite_Radio_V2.png) -144px 0;float: left;width: 24px;height: 24px;position: relative;}

#toolbar-icon-soundcloud {background: url(img/Sprite_Radio_V2.png) -240px 0;float: left;width: 24px;height: 24px;position: relative;}

#toolbar-icon-spotify {background: url(img/Sprite_Radio_V2.png) -264px 0;float: left;width: 24px;height: 24px;position: relative;}

#toolbar-icon-pandora {background: url(img/Sprite_Radio_V2.png) -288px 0;float: left;width: 24px;height: 24px;position: relative;}

#toolbar-icon-espnradio {background: url(img/Sprite_Radio_V2.png) -312px 0;float: left;width: 24px;height: 24px;position: relative;}

<a draggable="false" href="#" title="Go to iHeart.com" id="iheartradio_link">

<a draggable="false" href="#" title="Go to YouTube.com" id="youtube_link">

<a draggable="false" href="#" title="Go to SoundCloud.com" id="soundcloud_link">

<a draggable="false" href="#" title="Go to Spotify.com" id="spotify_link">

<a draggable="false" href="#" title="Go to Pandora.com" id="pandora_link">

#toolbar-icon-news{background: url(img/Sprite_SpeedTest_V1.png) -168px 0;float: left;width: 24px;height: 24px;position: relative;}

#toolbar-icon-broadbandchoices {background: url(img/Sprite_SpeedTest_V1.png) -216px 0;float: left;width: 24px;height: 24px;position: relative;}

#toolbar-icon-speedguide {background: url(img/Sprite_SpeedTest_V1.png) -240px 0;float: left;width: 24px;height: 24px;position: relative;}

#toolbar-icon-speedtest {background: url(img/Sprite_SpeedTest_V1.png) -264px 0;float: left;width: 24px;height: 24px;position: relative;}

#toolbar-icon-news{background: url(img/Sprite_Television_V1.png) -168px 0;float: left;width: 24px;height: 24px;position: relative;}

#toolbar-icon-widget {background: url(img/Sprite_Television_V1.png) -240px 0;float: left;width: 24px;height: 24px;position: relative;}

#toolbar-icon-netflix {background: url(img/Sprite_Television_V1.png) -216px 0;float: left;width: 24px;height: 24px;position: relative;}

#toolbar-icon-espn {background: url(img/Sprite_Television_V1.png) -264px 0;float: left;width: 24px;height: 24px;position: relative;}

#toolbar-icon-hulu {background: url(img/Sprite_Television_V1.png) -288px 0;float: left;width: 24px;height: 24px;position: relative;}

<a draggable="false" href="#" title="Go To Netflix.com" id="netflix_link">

<a draggable="false" href="#" title="Go To Espngo.com" id="espn_link">

<a draggable="false" href="#" title="Go To Hulu.com" id="hulu_link">

.browser-dropdown-arr {border:1px solid #a9a9a9;height:33px;width:18px;background:url(img/down-arrow.png) no-repeat 6px center;display:block;position:absolute;top:0;left:40px;}

.browser-dropdown-arr:hover {background-color:#cacaca;}

.browser-dropdown {width:48px; height:29px; margin:1px 0 0; padding:3px 5px; display:inline-block;position:relative;}

.browser-dropdown-ico{display:block;position:absolute;left:0;top:0;width:39px;height:35px;}

.browser-dropdown-ico:hover {background-color:#cacaca;}

.browser-dropdown-ico img {margin:3px 0 0 6px;}

<span class="browser-dropdown-ico" id="browser_button"><img width="29" height="29" src="img/ie.png" /></span>

/*! jQuery v1.11.0 | (c) 2005, 2014 jQuery Foundation, Inc. | jquery.org/license */

!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=c.slice,e=c.concat,f=c.push,g=c.indexOf,h={},i=h.toString,j=h.hasOwnProperty,k="".trim,l={},m="1.11.0",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0] |[\s\uFEFF\xA0] $/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return d.call(this)},get:function(a){return null!=a?0>a?this[a this.length]:this[a]:d.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a,b){return n.each(this,a,b)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.call(b,c,b)}))},slice:function(){return this.pushStack(d.apply(this,arguments))},first:function(){return this.eq(0)},last:function(){return this.eq(-1)},eq:function(a){var b=this.length,c= a (0>a?b:0);return this.pushStack(c>=0&&b>c?[this[c]]:[])},end:function(){return this.prevObject||this.constructor(null)},push:f,sort:c.sort,splice:c.splice},n.extend=n.fn.extend=function(){var a,b,c,d,e,f,g=arguments[0]||{},h=1,i=arguments.length,j=!1;for("boolean"==typeof g&&(j=g,g=arguments[h]||{},h  ),"object"==typeof g||n.isFunction(g)||(g={}),h===i&&(g=this,h--);i>h;h  )if(null!=(e=arguments[h]))for(d in e)a=g[d],c=e[d],g!==c&&(j&&c&&(n.isPlainObject(c)||(b=n.isArray(c)))?(b?(b=!1,f=a&&n.isArray(a)?a:[]):f=a&&n.isPlainObject(a)?a:{},g[d]=n.extend(j,f,c)):void 0!==c&&(g[d]=c));return g},n.extend({expando:"jQuery" (m Math.random()).replace(/\D/g,""),isReady:!0,error:function(a){throw new Error(a)},noop:function(){},isFunction:function(a){return"function"===n.type(a)},isArray:Array.isArray||function(a){return"array"===n.type(a)},isWindow:function(a){return null!=a&&a==a.window},isNumeric:function(a){return a-parseFloat(a)>=0},isEmptyObject:function(a){var b;for(b in a)return!1;return!0},isPlainObject:function(a){var b;if(!a||"object"!==n.type(a)||a.nodeType||n.isWindow(a))return!1;try{if(a.constructor&&!j.call(a,"constructor")&&!j.call(a.constructor.prototype,"isPrototypeOf"))return!1}catch(c){return!1}if(l.ownLast)for(b in a)return j.call(a,b);for(b in a);return void 0===b||j.call(a,b)},type:function(a){return null==a?a "":"object"==typeof a||"function"==typeof a?h[i.call(a)]||"object":typeof a},globalEval:function(b){b&&n.trim(b)&&(a.execScript||function(b){a.eval.call(a,b)})(b)},camelCase:function(a){return a.replace(p,"ms-").replace(q,r)},nodeName:function(a,b){return a.nodeName&&a.nodeName.toLowerCase()===b.toLowerCase()},each:function(a,b,c){var d,e=0,f=a.length,g=s(a);if(c){if(g){for(;f>e;e  )if(d=b.apply(a[e],c),d===!1)break}else for(e in a)if(d=b.apply(a[e],c),d===!1)break}else if(g){for(;f>e;e  )if(d=b.call(a[e],e,a[e]),d===!1)break}else for(e in a)if(d=b.call(a[e],e,a[e]),d===!1)break;return a},trim:k&&!k.call("\ufeff\xa0")?function(a){return null==a?"":k.call(a)}:function(a){return null==a?"":(a "").replace(o,"")},makeArray:function(a,b){var c=b||[];return null!=a&&(s(Object(a))?n.merge(c,"string"==typeof a?[a]:a):f.call(c,a)),c},inArray:function(a,b,c){var d;if(b){if(g)return g.call(b,a,c);for(d=b.length,c=c?0>c?Math.max(0,d c):c:0;d>c;c  )if(c in b&&b[c]===a)return c}return-1},merge:function(a,b){var c= b.length,d=0,e=a.length;while(c>d)a[e  ]=b[d  ];if(c!==c)while(void 0!==b[d])a[e  ]=b[d  ];return a.length=e,a},grep:function(a,b,c){for(var d,e=[],f=0,g=a.length,h=!c;g>f;f  )d=!b(a[f],f),d!==h&&e.push(a[f]);return e},map:function(a,b,c){var d,f=0,g=a.length,h=s(a),i=[];if(h)for(;g>f;f  )d=b(a[f],f,c),null!=d&&i.push(d);else for(f in a)d=b(a[f],f,c),null!=d&&i.push(d);return e.apply([],i)},guid:1,proxy:function(a,b){var c,e,f;return"string"==typeof b&&(f=a[b],b=a,a=f),n.isFunction(a)?(c=d.call(arguments,2),e=function(){return a.apply(b||this,c.concat(d.call(arguments)))},e.guid=a.guid=a.guid||n.guid  ,e):void 0},now:function(){return new Date},support:l}),n.each("Boolean Number String Function Array Date RegExp Object Error".split(" "),function(a,b){h["[object " b "]"]=b.toLowerCase()});function s(a){var b=a.length,c=n.type(a);return"function"===c||n.isWindow(a)?!1:1===a.nodeType&&b?!0:"array"===c||0===b||"number"==typeof b&&b>0&&b-1 in a}var t=function(a){var b,c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s="sizzle" -new Date,t=a.document,u=0,v=0,w=eb(),x=eb(),y=eb(),z=function(a,b){return a===b&&(j=!0),0},A="undefined",B=1<<31,C={}.hasOwnProperty,D=[],E=D.pop,F=D.push,G=D.push,H=D.slice,I=D.indexOf||function(a){for(var b=0,c=this.length;c>b;b  )if(this[b]===a)return b;return-1},J="checked|selected|async|autofocus|autoplay|controls|defer|disabled|hidden|ismap|loop|multiple|open|readonly|required|scoped",K="[\\x20\\t\\r\\n\\f]",L="(?:\\\\.|[\\w-]|[^\\x00-\\xa0]) ",M=L.replace("w","w#"),N="\\[" K "*(" L ")" K "*(?:([*^$|!~]?=)" K "*(?:(['\"])((?:\\\\.|[^\\\\])*?)\\3|(" M ")|)|)" K "*\\]",O=":(" L ")(?:\\(((['\"])((?:\\\\.|[^\\\\])*?)\\3|((?:\\\\.|[^\\\\()[\\]]|" N.replace(3,8) ")*)|.*)\\)|)",P=new RegExp("^" K " |((?:^|[^\\\\])(?:\\\\.)*)" K " $","g"),Q=new RegExp("^" K "*," K "*"),R=new RegExp("^" K "*([> ~]|" K ")" K "*"),S=new RegExp("=" K "*([^\\]'\"]*?)" K "*\\]","g"),T=new RegExp(O),U=new RegExp("^" M "$"),V={ID:new RegExp("^#(" L ")"),CLASS:new RegExp("^\\.(" L ")"),TAG:new RegExp("^(" L.replace("w","w*") ")"),ATTR:new RegExp("^" N),PSEUDO:new RegExp("^" O),CHILD:new RegExp("^:(only|first|last|nth|nth-last)-(child|of-type)(?:\\(" K "*(even|odd|(([ -]|)(\\d*)n|)" K "*(?:([ -]|)" K "*(\\d )|))" K "*\\)|)","i"),bool:new RegExp("^(?:" J ")$","i"),needsContext:new RegExp("^" K "*[> ~]|:(even|odd|eq|gt|lt|nth|first|last)(?:\\(" K "*((?:-\\d)?\\d*)" K "*\\)|)(?=[^-]|$)","i")},W=/^(?:input|select|textarea|button)$/i,X=/^h\d$/i,Y=/^[^{] \{\s*\[native \w/,Z=/^(?:#([\w-] )|(\w )|\.([\w-] ))$/,$=/[ ~]/,_=/'|\\/g,ab=new RegExp("\\\\([\\da-f]{1,6}" K "?|(" K ")|.)","ig"),bb=function(a,b,c){var d="0x" b-65536;return d!==d||c?b:0>d?String.fromCharCode(d 65536):String.fromCharCode(d>>10|55296,1023&d|56320)};try{G.apply(D=H.call(t.childNodes),t.childNodes),D[t.childNodes.length].nodeType}catch(cb){G={apply:D.length?function(a,b){F.apply(a,H.call(b))}:function(a,b){var c=a.length,d=0;while(a[c  ]=b[d  ]);a.length=c-1}}}function db(a,b,d,e){var f,g,h,i,j,m,p,q,u,v;if((b?b.ownerDocument||b:t)!==l&&k(b),b=b||l,d=d||[],!a||"string"!=typeof a)return d;if(1!==(i=b.nodeType)&&9!==i)return[];if(n&&!e){if(f=Z.exec(a))if(h=f[1]){if(9===i){if(g=b.getElementById(h),!g||!g.parentNode)return d;if(g.id===h)return d.push(g),d}else if(b.ownerDocument&&(g=b.ownerDocument.getElementById(h))&&r(b,g)&&g.id===h)return d.push(g),d}else{if(f[2])return G.apply(d,b.getElementsByTagName(a)),d;if((h=f[3])&&c.getElementsByClassName&&b.getElementsByClassName)return G.apply(d,b.getElementsByClassName(h)),d}if(c.qsa&&(!o||!o.test(a))){if(q=p=s,u=b,v=9===i&&a,1===i&&"object"!==b.nodeName.toLowerCase()){m=ob(a),(p=b.getAttribute("id"))?q=p.replace(_,"\\$&"):b.setAttribute("id",q),q="[id='" q "'] ",j=m.length;while(j--)m[j]=q pb(m[j]);u=$.test(a)&&mb(b.parentNode)||b,v=m.join(",")}if(v)try{return G.apply(d,u.querySelectorAll(v)),d}catch(w){}finally{p||b.removeAttribute("id")}}}return xb(a.replace(P,"$1"),b,d,e)}function eb(){var a=[];function b(c,e){return a.push(c " ")>d.cacheLength&&delete b[a.shift()],b[c " "]=e}return b}function fb(a){return a[s]=!0,a}function gb(a){var b=l.createElement("div");try{return!!a(b)}catch(c){return!1}finally{b.parentNode&&b.parentNode.removeChild(b),b=null}}function hb(a,b){var c=a.split("|"),e=a.length;while(e--)d.attrHandle[c[e]]=b}function ib(a,b){var c=b&&a,d=c&&1===a.nodeType&&1===b.nodeType&&(~b.sourceIndex||B)-(~a.sourceIndex||B);if(d)return d;if(c)while(c=c.nextSibling)if(c===b)return-1;return a?1:-1}function jb(a){return function(b){var c=b.nodeName.toLowerCase();return"input"===c&&b.type===a}}function kb(a){return function(b){var c=b.nodeName.toLowerCase();return("input"===c||"button"===c)&&b.type===a}}function lb(a){return fb(function(b){return b= b,fb(function(c,d){var e,f=a([],c.length,b),g=f.length;while(g--)c[e=f[g]]&&(c[e]=!(d[e]=c[e]))})})}function mb(a){return a&&typeof a.getElementsByTagName!==A&&a}c=db.support={},f=db.isXML=function(a){var b=a&&(a.ownerDocument||a).documentElement;return b?"HTML"!==b.nodeName:!1},k=db.setDocument=function(a){var b,e=a?a.ownerDocument||a:t,g=e.defaultView;return e!==l&&9===e.nodeType&&e.documentElement?(l=e,m=e.documentElement,n=!f(e),g&&g!==g.top&&(g.addEventListener?g.addEventListener("unload",function(){k()},!1):g.attachEvent&&g.attachEvent("onunload",function(){k()})),c.attributes=gb(function(a){return a.className="i",!a.getAttribute("className")}),c.getElementsByTagName=gb(function(a){return a.appendChild(e.createComment("")),!a.getElementsByTagName("*").length}),c.getElementsByClassName=Y.test(e.getElementsByClassName)&&gb(function(a){return a.innerHTML="<div class='a'></div><div class='a i'></div>",a.firstChild.className="i",2===a.getElementsByClassName("i").length}),c.getById=gb(function(a){return m.appendChild(a).id=s,!e.getElementsByName||!e.getElementsByName(s).length}),c.getById?(d.find.ID=function(a,b){if(typeof b.getElementById!==A&&n){var c=b.getElementById(a);return c&&c.parentNode?[c]:[]}},d.filter.ID=function(a){var b=a.replace(ab,bb);return function(a){return a.getAttribute("id")===b}}):(delete d.find.ID,d.filter.ID=function(a){var b=a.replace(ab,bb);return function(a){var c=typeof a.getAttributeNode!==A&&a.getAttributeNode("id");return c&&c.value===b}}),d.find.TAG=c.getElementsByTagName?function(a,b){return typeof b.getElementsByTagName!==A?b.getElementsByTagName(a):void 0}:function(a,b){var c,d=[],e=0,f=b.getElementsByTagName(a);if("*"===a){while(c=f[e  ])1===c.nodeType&&d.push(c);return d}return f},d.find.CLASS=c.getElementsByClassName&&function(a,b){return typeof b.getElementsByClassName!==A&&n?b.getElementsByClassName(a):void 0},p=[],o=[],(c.qsa=Y.test(e.querySelectorAll))&&(gb(function(a){a.innerHTML="<select t=''><option selected=''></option></select>",a.querySelectorAll("[t^='']").length&&o.push("[*^$]=" K "*(?:''|\"\")"),a.querySelectorAll("[selected]").length||o.push("\\[" K "*(?:value|" J ")"),a.querySelectorAll(":checked").length||o.push(":checked")}),gb(function(a){var b=e.createElement("input");b.setAttribute("type","hidden"),a.appendChild(b).setAttribute("name","D"),a.querySelectorAll("[name=d]").length&&o.push("name" K "*[*^$|!~]?="),a.querySelectorAll(":enabled").length||o.push(":enabled",":disabled"),a.querySelectorAll("*,:x"),o.push(",.*:")})),(c.matchesSelector=Y.test(q=m.webkitMatchesSelector||m.mozMatchesSelector||m.oMatchesSelector||m.msMatchesSelector))&&gb(function(a){c.disconnectedMatch=q.call(a,"div"),q.call(a,"[s!='']:x"),p.push("!=",O)}),o=o.length&&new RegExp(o.join("|")),p=p.length&&new RegExp(p.join("|")),b=Y.test(m.compareDocumentPosition),r=b||Y.test(m.contains)?function(a,b){var c=9===a.nodeType?a.documentElement:a,d=b&&b.parentNode;return a===d||!(!d||1!==d.nodeType||!(c.contains?c.contains(d):a.compareDocumentPosition&&16&a.compareDocumentPosition(d)))}:function(a,b){if(b)while(b=b.parentNode)if(b===a)return!0;return!1},z=b?function(a,b){if(a===b)return j=!0,0;var d=!a.compareDocumentPosition-!b.compareDocumentPosition;return d?d:(d=(a.ownerDocument||a)===(b.ownerDocument||b)?a.compareDocumentPosition(b):1,1&d||!c.sortDetached&&b.compareDocumentPosition(a)===d?a===e||a.ownerDocument===t&&r(t,a)?-1:b===e||b.ownerDocument===t&&r(t,b)?1:i?I.call(i,a)-I.call(i,b):0:4&d?-1:1)}:function(a,b){if(a===b)return j=!0,0;var c,d=0,f=a.parentNode,g=b.parentNode,h=[a],k=[b];if(!f||!g)return a===e?-1:b===e?1:f?-1:g?1:i?I.call(i,a)-I.call(i,b):0;if(f===g)return ib(a,b);c=a;while(c=c.parentNode)h.unshift(c);c=b;while(c=c.parentNode)k.unshift(c);while(h[d]===k[d])d  ;return d?ib(h[d],k[d]):h[d]===t?-1:k[d]===t?1:0},e):l},db.matches=function(a,b){return db(a,null,null,b)},db.matchesSelector=function(a,b){if((a.ownerDocument||a)!==l&&k(a),b=b.replace(S,"='$1']"),!(!c.matchesSelector||!n||p&&p.test(b)||o&&o.test(b)))try{var d=q.call(a,b);if(d||c.disconnectedMatch||a.document&&11!==a.document.nodeType)return d}catch(e){}return db(b,l,null,[a]).length>0},db.contains=function(a,b){return(a.ownerDocument||a)!==l&&k(a),r(a,b)},db.attr=function(a,b){(a.ownerDocument||a)!==l&&k(a);var e=d.attrHandle[b.toLowerCase()],f=e&&C.call(d.attrHandle,b.toLowerCase())?e(a,b,!n):void 0;return void 0!==f?f:c.attributes||!n?a.getAttribute(b):(f=a.getAttributeNode(b))&&f.specified?f.value:null},db.error=function(a){throw new Error("Syntax error, unrecognized expression: " a)},db.uniqueSort=function(a){var b,d=[],e=0,f=0;if(j=!c.detectDuplicates,i=!c.sortStable&&a.slice(0),a.sort(z),j){while(b=a[f  ])b===a[f]&&(e=d.push(f));while(e--)a.splice(d[e],1)}return i=null,a},e=db.getText=function(a){var b,c="",d=0,f=a.nodeType;if(f){if(1===f||9===f||11===f){if("string"==typeof a.textContent)return a.textContent;for(a=a.firstChild;a;a=a.nextSibling)c =e(a)}else if(3===f||4===f)return a.nodeValue}else while(b=a[d  ])c =e(b);return c},d=db.selectors={cacheLength:50,createPseudo:fb,match:V,attrHandle:{},find:{},relative:{">":{dir:"parentNode",first:!0}," ":{dir:"parentNode"}," ":{dir:"previousSibling",first:!0},"~":{dir:"previousSibling"}},preFilter:{ATTR:function(a){return a[1]=a[1].replace(ab,bb),a[3]=(a[4]||a[5]||"").replace(ab,bb),"~="===a[2]&&(a[3]=" " a[3] " "),a.slice(0,4)},CHILD:function(a){return a[1]=a[1].toLowerCase(),"nth"===a[1].slice(0,3)?(a[3]||db.error(a[0]),a[4]= (a[4]?a[5] (a[6]||1):2*("even"===a[3]||"odd"===a[3])),a[5]= (a[7] a[8]||"odd"===a[3])):a[3]&&db.error(a[0]),a},PSEUDO:function(a){var b,c=!a[5]&&a[2];return V.CHILD.test(a[0])?null:(a[3]&&void 0!==a[4]?a[2]=a[4]:c&&T.test(c)&&(b=ob(c,!0))&&(b=c.indexOf(")",c.length-b)-c.length)&&(a[0]=a[0].slice(0,b),a[2]=c.slice(0,b)),a.slice(0,3))}},filter:{TAG:function(a){var b=a.replace(ab,bb).toLowerCase();return"*"===a?function(){return!0}:function(a){return a.nodeName&&a.nodeName.toLowerCase()===b}},CLASS:function(a){var b=w[a " "];return b||(b=new RegExp("(^|" K ")" a "(" K "|$)"))&&w(a,function(a){return b.test("string"==typeof a.className&&a.className||typeof a.getAttribute!==A&&a.getAttribute("class")||"")})},ATTR:function(a,b,c){return function(d){var e=db.attr(d,a);return null==e?"!="===b:b?(e ="","="===b?e===c:"!="===b?e!==c:"^="===b?c&&0===e.indexOf(c):"*="===b?c&&e.indexOf(c)>-1:"$="===b?c&&e.slice(-c.length)===c:"~="===b?(" " e " ").indexOf(c)>-1:"|="===b?e===c||e.slice(0,c.length 1)===c "-":!1):!0}},CHILD:function(a,b,c,d,e){var f="nth"!==a.slice(0,3),g="last"!==a.slice(-4),h="of-type"===b;return 1===d&&0===e?function(a){return!!a.parentNode}:function(b,c,i){var j,k,l,m,n,o,p=f!==g?"nextSibling":"previousSibling",q=b.parentNode,r=h&&b.nodeName.toLowerCase(),t=!i&&!h;if(q){if(f){while(p){l=b;while(l=l[p])if(h?l.nodeName.toLowerCase()===r:1===l.nodeType)return!1;o=p="only"===a&&!o&&"nextSibling"}return!0}if(o=[g?q.firstChild:q.lastChild],g&&t){k=q[s]||(q[s]={}),j=k[a]||[],n=j[0]===u&&j[1],m=j[0]===u&&j[2],l=n&&q.childNodes[n];while(l=  n&&l&&l[p]||(m=n=0)||o.pop())if(1===l.nodeType&&  m&&l===b){k[a]=[u,n,m];break}}else if(t&&(j=(b[s]||(b[s]={}))[a])&&j[0]===u)m=j[1];else while(l=  n&&l&&l[p]||(m=n=0)||o.pop())if((h?l.nodeName.toLowerCase()===r:1===l.nodeType)&&  m&&(t&&((l[s]||(l[s]={}))[a]=[u,m]),l===b))break;return m-=e,m===d||m%d===0&&m/d>=0}}},PSEUDO:function(a,b){var c,e=d.pseudos[a]||d.setFilters[a.toLowerCase()]||db.error("unsupported pseudo: " a);return e[s]?e(b):e.length>1?(c=[a,a,"",b],d.setFilters.hasOwnProperty(a.toLowerCase())?fb(function(a,c){var d,f=e(a,b),g=f.length;while(g--)d=I.call(a,f[g]),a[d]=!(c[d]=f[g])}):function(a){return e(a,0,c)}):e}},pseudos:{not:fb(function(a){var b=[],c=[],d=g(a.replace(P,"$1"));return d[s]?fb(function(a,b,c,e){var f,g=d(a,null,e,[]),h=a.length;while(h--)(f=g[h])&&(a[h]=!(b[h]=f))}):function(a,e,f){return b[0]=a,d(b,null,f,c),!c.pop()}}),has:fb(function(a){return function(b){return db(a,b).length>0}}),contains:fb(function(a){return function(b){return(b.textContent||b.innerText||e(b)).indexOf(a)>-1}}),lang:fb(function(a){return U.test(a||"")||db.error("unsupported lang: " a),a=a.replace(ab,bb).toLowerCase(),function(b){var c;do if(c=n?b.lang:b.getAttribute("xml:lang")||b.getAttribute("lang"))return c=c.toLowerCase(),c===a||0===c.indexOf(a "-");while((b=b.parentNode)&&1===b.nodeType);return!1}}),target:function(b){var c=a.location&&a.location.hash;return c&&c.slice(1)===b.id},root:function(a){return a===m},focus:function(a){return a===l.activeElement&&(!l.hasFocus||l.hasFocus())&&!!(a.type||a.href||~a.tabIndex)},enabled:function(a){return a.disabled===!1},disabled:function(a){return a.disabled===!0},checked:function(a){var b=a.nodeName.toLowerCase();return"input"===b&&!!a.checked||"option"===b&&!!a.selected},selected:function(a){return a.parentNode&&a.parentNode.selectedIndex,a.selected===!0},empty:function(a){for(a=a.firstChild;a;a=a.nextSibling)if(a.nodeType<6)return!1;return!0},parent:function(a){return!d.pseudos.empty(a)},header:function(a){return X.test(a.nodeName)},input:function(a){return W.test(a.nodeName)},button:function(a){var b=a.nodeName.toLowerCase();return"input"===b&&"button"===a.type||"button"===b},text:function(a){var b;return"input"===a.nodeName.toLowerCase()&&"text"===a.type&&(null==(b=a.getAttribute("type"))||"text"===b.toLowerCase())},first:lb(function(){return[0]}),last:lb(function(a,b){return[b-1]}),eq:lb(function(a,b,c){return[0>c?c b:c]}),even:lb(function(a,b){for(var c=0;b>c;c =2)a.push(c);return a}),odd:lb(function(a,b){for(var c=1;b>c;c =2)a.push(c);return a}),lt:lb(function(a,b,c){for(var d=0>c?c b:c;--d>=0;)a.push(d);return a}),gt:lb(function(a,b,c){for(var d=0>c?c b:c;  d<b;)a.push(d);return a})}},d.pseudos.nth=d.pseudos.eq;for(b in{radio:!0,checkbox:!0,file:!0,password:!0,image:!0})d.pseudos[b]=jb(b);for(b in{submit:!0,reset:!0})d.pseudos[b]=kb(b);function nb(){}nb.prototype=d.filters=d.pseudos,d.setFilters=new nb;function ob(a,b){var c,e,f,g,h,i,j,k=x[a " "];if(k)return b?0:k.slice(0);h=a,i=[],j=d.preFilter;while(h){(!c||(e=Q.exec(h)))&&(e&&(h=h.slice(e[0].length)||h),i.push(f=[])),c=!1,(e=R.exec(h))&&(c=e.shift(),f.push({value:c,type:e[0].replace(P," ")}),h=h.slice(c.length));for(g in d.filter)!(e=V[g].exec(h))||j[g]&&!(e=j[g](e))||(c=e.shift(),f.push({value:c,type:g,matches:e}),h=h.slice(c.length));if(!c)break}return b?h.length:h?db.error(a):x(a,i).slice(0)}function pb(a){for(var b=0,c=a.length,d="";c>b;b  )d =a[b].value;return d}function qb(a,b,c){var d=b.dir,e=c&&"parentNode"===d,f=v  ;return b.first?function(b,c,f){while(b=b[d])if(1===b.nodeType||e)return a(b,c,f)}:function(b,c,g){var h,i,j=[u,f];if(g){while(b=b[d])if((1===b.nodeType||e)&&a(b,c,g))return!0}else while(b=b[d])if(1===b.nodeType||e){if(i=b[s]||(b[s]={}),(h=i[d])&&h[0]===u&&h[1]===f)return j[2]=h[2];if(i[d]=j,j[2]=a(b,c,g))return!0}}}function rb(a){return a.length>1?function(b,c,d){var e=a.length;while(e--)if(!a[e](b,c,d))return!1;return!0}:a[0]}function sb(a,b,c,d,e){for(var f,g=[],h=0,i=a.length,j=null!=b;i>h;h  )(f=a[h])&&(!c||c(f,d,e))&&(g.push(f),j&&b.push(h));return g}function tb(a,b,c,d,e,f){return d&&!d[s]&&(d=tb(d)),e&&!e[s]&&(e=tb(e,f)),fb(function(f,g,h,i){var j,k,l,m=[],n=[],o=g.length,p=f||wb(b||"*",h.nodeType?[h]:h,[]),q=!a||!f&&b?p:sb(p,m,a,h,i),r=c?e||(f?a:o||d)?[]:g:q;if(c&&c(q,r,h,i),d){j=sb(r,n),d(j,[],h,i),k=j.length;while(k--)(l=j[k])&&(r[n[k]]=!(q[n[k]]=l))}if(f){if(e||a){if(e){j=[],k=r.length;while(k--)(l=r[k])&&j.push(q[k]=l);e(null,r=[],j,i)}k=r.length;while(k--)(l=r[k])&&(j=e?I.call(f,l):m[k])>-1&&(f[j]=!(g[j]=l))}}else r=sb(r===g?r.splice(o,r.length):r),e?e(null,g,r,i):G.apply(g,r)})}function ub(a){for(var b,c,e,f=a.length,g=d.relative[a[0].type],i=g||d.relative[" "],j=g?1:0,k=qb(function(a){return a===b},i,!0),l=qb(function(a){return I.call(b,a)>-1},i,!0),m=[function(a,c,d){return!g&&(d||c!==h)||((b=c).nodeType?k(a,c,d):l(a,c,d))}];f>j;j  )if(c=d.relative[a[j].type])m=[qb(rb(m),c)];else{if(c=d.filter[a[j].type].apply(null,a[j].matches),c[s]){for(e=  j;f>e;e  )if(d.relative[a[e].type])break;return tb(j>1&&rb(m),j>1&&pb(a.slice(0,j-1).concat({value:" "===a[j-2].type?"*":""})).replace(P,"$1"),c,e>j&&ub(a.slice(j,e)),f>e&&ub(a=a.slice(e)),f>e&&pb(a))}m.push(c)}return rb(m)}function vb(a,b){var c=b.length>0,e=a.length>0,f=function(f,g,i,j,k){var m,n,o,p=0,q="0",r=f&&[],s=[],t=h,v=f||e&&d.find.TAG("*",k),w=u =null==t?1:Math.random()||.1,x=v.length;for(k&&(h=g!==l&&g);q!==x&&null!=(m=v[q]);q  ){if(e&&m){n=0;while(o=a[n  ])if(o(m,g,i)){j.push(m);break}k&&(u=w)}c&&((m=!o&&m)&&p--,f&&r.push(m))}if(p =q,c&&q!==p){n=0;while(o=b[n  ])o(r,s,g,i);if(f){if(p>0)while(q--)r[q]||s[q]||(s[q]=E.call(j));s=sb(s)}G.apply(j,s),k&&!f&&s.length>0&&p b.length>1&&db.uniqueSort(j)}return k&&(u=w,h=t),r};return c?fb(f):f}g=db.compile=function(a,b){var c,d=[],e=[],f=y[a " "];if(!f){b||(b=ob(a)),c=b.length;while(c--)f=ub(b[c]),f[s]?d.push(f):e.push(f);f=y(a,vb(e,d))}return f};function wb(a,b,c){for(var d=0,e=b.length;e>d;d  )db(a,b[d],c);return c}function xb(a,b,e,f){var h,i,j,k,l,m=ob(a);if(!f&&1===m.length){if(i=m[0]=m[0].slice(0),i.length>2&&"ID"===(j=i[0]).type&&c.getById&&9===b.nodeType&&n&&d.relative[i[1].type]){if(b=(d.find.ID(j.matches[0].replace(ab,bb),b)||[])[0],!b)return e;a=a.slice(i.shift().value.length)}h=V.needsContext.test(a)?0:i.length;while(h--){if(j=i[h],d.relative[k=j.type])break;if((l=d.find[k])&&(f=l(j.matches[0].replace(ab,bb),$.test(i[0].type)&&mb(b.parentNode)||b))){if(i.splice(h,1),a=f.length&&pb(i),!a)return G.apply(e,f),e;break}}}return g(a,m)(f,b,!n,e,$.test(a)&&mb(b.parentNode)||b),e}return c.sortStable=s.split("").sort(z).join("")===s,c.detectDuplicates=!!j,k(),c.sortDetached=gb(function(a){return 1&a.compareDocumentPosition(l.createElement("div"))}),gb(function(a){return a.innerHTML="<a href='#'></a>","#"===a.firstChild.getAttribute("href")})||hb("type|href|height|width",function(a,b,c){return c?void 0:a.getAttribute(b,"type"===b.toLowerCase()?1:2)}),c.attributes&&gb(function(a){return a.innerHTML="<input/>",a.firstChild.setAttribute("value",""),""===a.firstChild.getAttribute("value")})||hb("value",function(a,b,c){return c||"input"!==a.nodeName.toLowerCase()?void 0:a.defaultValue}),gb(function(a){return null==a.getAttribute("disabled")})||hb(J,function(a,b,c){var d;return c?void 0:a[b]===!0?b.toLowerCase():(d=a.getAttributeNode(b))&&d.specified?d.value:null}),db}(a);n.find=t,n.expr=t.selectors,n.expr[":"]=n.expr.pseudos,n.unique=t.uniqueSort,n.text=t.getText,n.isXMLDoc=t.isXML,n.contains=t.contains;var u=n.expr.match.needsContext,v=/^<(\w )\s*\/?>(?:<\/\1>|)$/,w=/^.[^:#\[\.,]*$/;function x(a,b,c){if(n.isFunction(b))return n.grep(a,function(a,d){return!!b.call(a,d,a)!==c});if(b.nodeType)return n.grep(a,function(a){return a===b!==c});if("string"==typeof b){if(w.test(b))return n.filter(b,a,c);b=n.filter(b,a)}return n.grep(a,function(a){return n.inArray(a,b)>=0!==c})}n.filter=function(a,b,c){var d=b[0];return c&&(a=":not(" a ")"),1===b.length&&1===d.nodeType?n.find.matchesSelector(d,a)?[d]:[]:n.find.matches(a,n.grep(b,function(a){return 1===a.nodeType}))},n.fn.extend({find:function(a){var b,c=[],d=this,e=d.length;if("string"!=typeof a)return this.pushStack(n(a).filter(function(){for(b=0;e>b;b  )if(n.contains(d[b],this))return!0}));for(b=0;e>b;b  )n.find(a,d[b],c);return c=this.pushStack(e>1?n.unique(c):c),c.selector=this.selector?this.selector " " a:a,c},filter:function(a){return this.pushStack(x(this,a||[],!1))},not:function(a){return this.pushStack(x(this,a||[],!0))},is:function(a){return!!x(this,"string"==typeof a&&u.test(a)?n(a):a||[],!1).length}});var y,z=a.document,A=/^(?:\s*(<[\w\W] >)[^>]*|#([\w-]*))$/,B=n.fn.init=function(a,b){var c,d;if(!a)return this;if("string"==typeof a){if(c="<"===a.charAt(0)&&">"===a.charAt(a.length-1)&&a.length>=3?[null,a,null]:A.exec(a),!c||!c[1]&&b)return!b||b.jquery?(b||y).find(a):this.constructor(b).find(a);if(c[1]){if(b=b instanceof n?b[0]:b,n.merge(this,n.parseHTML(c[1],b&&b.nodeType?b.ownerDocument||b:z,!0)),v.test(c[1])&&n.isPlainObject(b))for(c in b)n.isFunction(this[c])?this[c](b[c]):this.attr(c,b[c]);return this}if(d=z.getElementById(c[2]),d&&d.parentNode){if(d.id!==c[2])return y.find(a);this.length=1,this[0]=d}return this.context=z,this.selector=a,this}return a.nodeType?(this.context=this[0]=a,this.length=1,this):n.isFunction(a)?"undefined"!=typeof y.ready?y.ready(a):a(n):(void 0!==a.selector&&(this.selector=a.selector,this.context=a.context),n.makeArray(a,this))};B.prototype=n.fn,y=n(z);var C=/^(?:parents|prev(?:Until|All))/,D={children:!0,contents:!0,next:!0,prev:!0};n.extend({dir:function(a,b,c){var d=[],e=a[b];while(e&&9!==e.nodeType&&(void 0===c||1!==e.nodeType||!n(e).is(c)))1===e.nodeType&&d.push(e),e=e[b];return d},sibling:function(a,b){for(var c=[];a;a=a.nextSibling)1===a.nodeType&&a!==b&&c.push(a);return c}}),n.fn.extend({has:function(a){var b,c=n(a,this),d=c.length;return this.filter(function(){for(b=0;d>b;b  )if(n.contains(this,c[b]))return!0})},closest:function(a,b){for(var c,d=0,e=this.length,f=[],g=u.test(a)||"string"!=typeof a?n(a,b||this.context):0;e>d;d  )for(c=this[d];c&&c!==b;c=c.parentNode)if(c.nodeType<11&&(g?g.index(c)>-1:1===c.nodeType&&n.find.matchesSelector(c,a))){f.push(c);break}return this.pushStack(f.length>1?n.unique(f):f)},index:function(a){return a?"string"==typeof a?n.inArray(this[0],n(a)):n.inArray(a.jquery?a[0]:a,this):this[0]&&this[0].parentNode?this.first().prevAll().length:-1},add:function(a,b){return this.pushStack(n.unique(n.merge(this.get(),n(a,b))))},addBack:function(a){return this.add(null==a?this.prevObject:this.prevObject.filter(a))}});function E(a,b){do a=a[b];while(a&&1!==a.nodeType);return a}n.each({parent:function(a){var b=a.parentNode;return b&&11!==b.nodeType?b:null},parents:function(a){return n.dir(a,"parentNode")},parentsUntil:function(a,b,c){return n.dir(a,"parentNode",c)},next:function(a){return E(a,"nextSibling")},prev:function(a){return E(a,"previousSibling")},nextAll:function(a){return n.dir(a,"nextSibling")},prevAll:function(a){return n.dir(a,"previousSibling")},nextUntil:function(a,b,c){return n.dir(a,"nextSibling",c)},prevUntil:function(a,b,c){return n.dir(a,"previousSibling",c)},siblings:function(a){return n.sibling((a.parentNode||{}).firstChild,a)},children:function(a){return n.sibling(a.firstChild)},contents:function(a){return n.nodeName(a,"iframe")?a.contentDocument||a.contentWindow.document:n.merge([],a.childNodes)}},function(a,b){n.fn[a]=function(c,d){var e=n.map(this,b,c);return"Until"!==a.slice(-5)&&(d=c),d&&"string"==typeof d&&(e=n.filter(d,e)),this.length>1&&(D[a]||(e=n.unique(e)),C.test(a)&&(e=e.reverse())),this.pushStack(e)}});var F=/\S /g,G={};function H(a){var b=G[a]={};return n.each(a.match(F)||[],function(a,c){b[c]=!0}),b}n.Callbacks=function(a){a="string"==typeof a?G[a]||H(a):n.extend({},a);var b,c,d,e,f,g,h=[],i=!a.once&&[],j=function(l){for(c=a.memory&&l,d=!0,f=g||0,g=0,e=h.length,b=!0;h&&e>f;f  )if(h[f].apply(l[0],l[1])===!1&&a.stopOnFalse){c=!1;break}b=!1,h&&(i?i.length&&j(i.shift()):c?h=[]:k.disable())},k={add:function(){if(h){var d=h.length;!function f(b){n.each(b,function(b,c){var d=n.type(c);"function"===d?a.unique&&k.has(c)||h.push(c):c&&c.length&&"string"!==d&&f(c)})}(arguments),b?e=h.length:c&&(g=d,j(c))}return this},remove:function(){return h&&n.each(arguments,function(a,c){var d;while((d=n.inArray(c,h,d))>-1)h.splice(d,1),b&&(e>=d&&e--,f>=d&&f--)}),this},has:function(a){return a?n.inArray(a,h)>-1:!(!h||!h.length)},empty:function(){return h=[],e=0,this},disable:function(){return h=i=c=void 0,this},disabled:function(){return!h},lock:function(){return i=void 0,c||k.disable(),this},locked:function(){return!i},fireWith:function(a,c){return!h||d&&!i||(c=c||[],c=[a,c.slice?c.slice():c],b?i.push(c):j(c)),this},fire:function(){return k.fireWith(this,arguments),this},fired:function(){return!!d}};return k},n.extend({Deferred:function(a){var b=[["resolve","done",n.Callbacks("once memory"),"resolved"],["reject","fail",n.Callbacks("once memory"),"rejected"],["notify","progress",n.Callbacks("memory")]],c="pending",d={state:function(){return c},always:function(){return e.done(arguments).fail(arguments),this},then:function(){var a=arguments;return n.Deferred(function(c){n.each(b,function(b,f){var g=n.isFunction(a[b])&&a[b];e[f[1]](function(){var a=g&&g.apply(this,arguments);a&&n.isFunction(a.promise)?a.promise().done(c.resolve).fail(c.reject).progress(c.notify):c[f[0] "With"](this===d?c.promise():this,g?[a]:arguments)})}),a=null}).promise()},promise:function(a){return null!=a?n.extend(a,d):d}},e={};return d.pipe=d.then,n.each(b,function(a,f){var g=f[2],h=f[3];d[f[1]]=g.add,h&&g.add(function(){c=h},b[1^a][2].disable,b[2][2].lock),e[f[0]]=function(){return e[f[0] "With"](this===e?d:this,arguments),this},e[f[0] "With"]=g.fireWith}),d.promise(e),a&&a.call(e,e),e},when:function(a){var b=0,c=d.call(arguments),e=c.length,f=1!==e||a&&n.isFunction(a.promise)?e:0,g=1===f?a:n.Deferred(),h=function(a,b,c){return function(e){b[a]=this,c[a]=arguments.length>1?d.call(arguments):e,c===i?g.notifyWith(b,c):--f||g.resolveWith(b,c)}},i,j,k;if(e>1)for(i=new Array(e),j=new Array(e),k=new Array(e);e>b;b  )c[b]&&n.isFunction(c[b].promise)?c[b].promise().done(h(b,k,c)).fail(g.reject).progress(h(b,j,i)):--f;return f||g.resolveWith(k,c),g.promise()}});var I;n.fn.ready=function(a){return n.ready.promise().done(a),this},n.extend({isReady:!1,readyWait:1,holdReady:function(a){a?n.readyWait  :n.ready(!0)},ready:function(a){if(a===!0?!--n.readyWait:!n.isReady){if(!z.body)return setTimeout(n.ready);n.isReady=!0,a!==!0&&--n.readyWait>0||(I.resolveWith(z,[n]),n.fn.trigger&&n(z).trigger("ready").off("ready"))}}});function J(){z.addEventListener?(z.removeEventListener("DOMContentLoaded",K,!1),a.removeEventListener("load",K,!1)):(z.detachEvent("onreadystatechange",K),a.detachEvent("onload",K))}function K(){(z.addEventListener||"load"===event.type||"complete"===z.readyState)&&(J(),n.ready())}n.ready.promise=function(b){if(!I)if(I=n.Deferred(),"complete"===z.readyState)setTimeout(n.ready);else if(z.addEventListener)z.addEventListener("DOMContentLoaded",K,!1),a.addEventListener("load",K,!1);else{z.attachEvent("onreadystatechange",K),a.attachEvent("onload",K);var c=!1;try{c=null==a.frameElement&&z.documentElement}catch(d){}c&&c.doScroll&&!function e(){if(!n.isReady){try{c.doScroll("left")}catch(a){return setTimeout(e,50)}J(),n.ready()}}()}return I.promise(b)};var L="undefined",M;for(M in n(l))break;l.ownLast="0"!==M,l.inlineBlockNeedsLayout=!1,n(function(){var a,b,c=z.getElementsByTagName("body")[0];c&&(a=z.createElement("div"),a.style.cssText="border:0;width:0;height:0;position:absolute;top:0;left:-9999px;margin-top:1px",b=z.createElement("div"),c.appendChild(a).appendChild(b),typeof b.style.zoom!==L&&(b.style.cssText="border:0;margin:0;width:1px;padding:1px;display:inline;zoom:1",(l.inlineBlockNeedsLayout=3===b.offsetWidth)&&(c.style.zoom=1)),c.removeChild(a),a=b=null)}),function(){var a=z.createElement("div");if(null==l.deleteExpando){l.deleteExpando=!0;try{delete a.test}catch(b){l.deleteExpando=!1}}a=null}(),n.acceptData=function(a){var b=n.noData[(a.nodeName " ").toLowerCase()],c= a.nodeType||1;return 1!==c&&9!==c?!1:!b||b!==!0&&a.getAttribute("classid")===b};var N=/^(?:\{[\w\W]*\}|\[[\w\W]*\])$/,O=/([A-Z])/g;function P(a,b,c){if(void 0===c&&1===a.nodeType){var d="data-" b.replace(O,"-$1").toLowerCase();if(c=a.getAttribute(d),"string"==typeof c){try{c="true"===c?!0:"false"===c?!1:"null"===c?null: c ""===c? c:N.test(c)?n.parseJSON(c):c}catch(e){}n.data(a,b,c)}else c=void 0}return c}function Q(a){var b;for(b in a)if(("data"!==b||!n.isEmptyObject(a[b]))&&"toJSON"!==b)return!1;return!0}function R(a,b,d,e){if(n.acceptData(a)){var f,g,h=n.expando,i=a.nodeType,j=i?n.cache:a,k=i?a[h]:a[h]&&h;if(k&&j[k]&&(e||j[k].data)||void 0!==d||"string"!=typeof b)return k||(k=i?a[h]=c.pop()||n.guid  :h),j[k]||(j[k]=i?{}:{toJSON:n.noop}),("object"==typeof b||"function"==typeof b)&&(e?j[k]=n.extend(j[k],b):j[k].data=n.extend(j[k].data,b)),g=j[k],e||(g.data||(g.data={}),g=g.data),void 0!==d&&(g[n.camelCase(b)]=d),"string"==typeof b?(f=g[b],null==f&&(f=g[n.camelCase(b)])):f=g,f

}}function S(a,b,c){if(n.acceptData(a)){var d,e,f=a.nodeType,g=f?n.cache:a,h=f?a[n.expando]:n.expando;if(g[h]){if(b&&(d=c?g[h]:g[h].data)){n.isArray(b)?b=b.concat(n.map(b,n.camelCase)):b in d?b=[b]:(b=n.camelCase(b),b=b in d?[b]:b.split(" ")),e=b.length;while(e--)delete d[b[e]];if(c?!Q(d):!n.isEmptyObject(d))return}(c||(delete g[h].data,Q(g[h])))&&(f?n.cleanData([a],!0):l.deleteExpando||g!=g.window?delete g[h]:g[h]=null)}}}n.extend({cache:{},noData:{"applet ":!0,"embed ":!0,"object ":"clsid:D27CDB6E-AE6D-11cf-96B8-444553540000"},hasData:function(a){return a=a.nodeType?n.cache[a[n.expando]]:a[n.expando],!!a&&!Q(a)},data:function(a,b,c){return R(a,b,c)},removeData:function(a,b){return S(a,b)},_data:function(a,b,c){return R(a,b,c,!0)},_removeData:function(a,b){return S(a,b,!0)}}),n.fn.extend({data:function(a,b){var c,d,e,f=this[0],g=f&&f.attributes;if(void 0===a){if(this.length&&(e=n.data(f),1===f.nodeType&&!n._data(f,"parsedAttrs"))){c=g.length;while(c--)d=g[c].name,0===d.indexOf("data-")&&(d=n.camelCase(d.slice(5)),P(f,d,e[d]));n._data(f,"parsedAttrs",!0)}return e}return"object"==typeof a?this.each(function(){n.data(this,a)}):arguments.length>1?this.each(function(){n.data(this,a,b)}):f?P(f,a,n.data(f,a)):void 0},removeData:function(a){return this.each(function(){n.removeData(this,a)})}}),n.extend({queue:function(a,b,c){var d;return a?(b=(b||"fx") "queue",d=n._data(a,b),c&&(!d||n.isArray(c)?d=n._data(a,b,n.makeArray(c)):d.push(c)),d||[]):void 0},dequeue:function(a,b){b=b||"fx";var c=n.queue(a,b),d=c.length,e=c.shift(),f=n._queueHooks(a,b),g=function(){n.dequeue(a,b)};"inprogress"===e&&(e=c.shift(),d--),e&&("fx"===b&&c.unshift("inprogress"),delete f.stop,e.call(a,g,f)),!d&&f&&f.empty.fire()},_queueHooks:function(a,b){var c=b "queueHooks";return n._data(a,c)||n._data(a,c,{empty:n.Callbacks("once memory").add(function(){n._removeData(a,b "queue"),n._removeData(a,c)})})}}),n.fn.extend({queue:function(a,b){var c=2;return"string"!=typeof a&&(b=a,a="fx",c--),arguments.length<c?n.queue(this[0],a):void 0===b?this:this.each(function(){var c=n.queue(this,a,b);n._queueHooks(this,a),"fx"===a&&"inprogress"!==c[0]&&n.dequeue(this,a)})},dequeue:function(a){return this.each(function(){n.dequeue(this,a)})},clearQueue:function(a){return this.queue(a||"fx",[])},promise:function(a,b){var c,d=1,e=n.Deferred(),f=this,g=this.length,h=function(){--d||e.resolveWith(f,[f])};"string"!=typeof a&&(b=a,a=void 0),a=a||"fx";while(g--)c=n._data(f[g],a "queueHooks"),c&&c.empty&&(d  ,c.empty.add(h));return h(),e.promise(b)}});var T=/[ -]?(?:\d*\.|)\d (?:[eE][ -]?\d |)/.source,U=["Top","Right","Bottom","Left"],V=function(a,b){return a=b||a,"none"===n.css(a,"display")||!n.contains(a.ownerDocument,a)},W=n.access=function(a,b,c,d,e,f,g){var h=0,i=a.length,j=null==c;if("object"===n.type(c)){e=!0;for(h in c)n.access(a,b,h,c[h],!0,f,g)}else if(void 0!==d&&(e=!0,n.isFunction(d)||(g=!0),j&&(g?(b.call(a,d),b=null):(j=b,b=function(a,b,c){return j.call(n(a),c)})),b))for(;i>h;h  )b(a[h],c,g?d:d.call(a[h],h,b(a[h],c)));return e?a:j?b.call(a):i?b(a[0],c):f},X=/^(?:checkbox|radio)$/i;!function(){var a=z.createDocumentFragment(),b=z.createElement("div"),c=z.createElement("input");if(b.setAttribute("className","t"),b.innerHTML=" <link/><table></table><a href='/a'>a</a>",l.leadingWhitespace=3===b.firstChild.nodeType,l.tbody=!b.getElementsByTagName("tbody").length,l.htmlSerialize=!!b.getElementsByTagName("link").length,l.html5Clone="<:nav></:nav>"!==z.createElement("nav").cloneNode(!0).outerHTML,c.type="checkbox",c.checked=!0,a.appendChild(c),l.appendChecked=c.checked,b.innerHTML="<textarea>x</textarea>",l.noCloneChecked=!!b.cloneNode(!0).lastChild.defaultValue,a.appendChild(b),b.innerHTML="<input type='radio' checked='checked' name='t'/>",l.checkClone=b.cloneNode(!0).cloneNode(!0).lastChild.checked,l.noCloneEvent=!0,b.attachEvent&&(b.attachEvent("onclick",function(){l.noCloneEvent=!1}),b.cloneNode(!0).click()),null==l.deleteExpando){l.deleteExpando=!0;try{delete b.test}catch(d){l.deleteExpando=!1}}a=b=c=null}(),function(){var b,c,d=z.createElement("div");for(b in{submit:!0,change:!0,focusin:!0})c="on" b,(l[b "Bubbles"]=c in a)||(d.setAttribute(c,"t"),l[b "Bubbles"]=d.attributes[c].expando===!1);d=null}();var Y=/^(?:input|select|textarea)$/i,Z=/^key/,$=/^(?:mouse|contextmenu)|click/,_=/^(?:focusinfocus|focusoutblur)$/,ab=/^([^.]*)(?:\.(. )|)$/;function bb(){return!0}function cb(){return!1}function db(){try{return z.activeElement}catch(a){}}n.event={global:{},add:function(a,b,c,d,e){var f,g,h,i,j,k,l,m,o,p,q,r=n._data(a);if(r){c.handler&&(i=c,c=i.handler,e=i.selector),c.guid||(c.guid=n.guid  ),(g=r.events)||(g=r.events={}),(k=r.handle)||(k=r.handle=function(a){return typeof n===L||a&&n.event.triggered===a.type?void 0:n.event.dispatch.apply(k.elem,arguments)},k.elem=a),b=(b||"").match(F)||[""],h=b.length;while(h--)f=ab.exec(b[h])||[],o=q=f[1],p=(f[2]||"").split(".").sort(),o&&(j=n.event.special[o]||{},o=(e?j.delegateType:j.bindType)||o,j=n.event.special[o]||{},l=n.extend({type:o,origType:q,data:d,handler:c,guid:c.guid,selector:e,needsContext:e&&n.expr.match.needsContext.test(e),namespace:p.join(".")},i),(m=g[o])||(m=g[o]=[],m.delegateCount=0,j.setup&&j.setup.call(a,d,p,k)!==!1||(a.addEventListener?a.addEventListener(o,k,!1):a.attachEvent&&a.attachEvent("on" o,k))),j.add&&(j.add.call(a,l),l.handler.guid||(l.handler.guid=c.guid)),e?m.splice(m.delegateCount  ,0,l):m.push(l),n.event.global[o]=!0);a=null}},remove:function(a,b,c,d,e){var f,g,h,i,j,k,l,m,o,p,q,r=n.hasData(a)&&n._data(a);if(r&&(k=r.events)){b=(b||"").match(F)||[""],j=b.length;while(j--)if(h=ab.exec(b[j])||[],o=q=h[1],p=(h[2]||"").split(".").sort(),o){l=n.event.special[o]||{},o=(d?l.delegateType:l.bindType)||o,m=k[o]||[],h=h[2]&&new RegExp("(^|\\.)" p.join("\\.(?:.*\\.|)") "(\\.|$)"),i=f=m.length;while(f--)g=m[f],!e&&q!==g.origType||c&&c.guid!==g.guid||h&&!h.test(g.namespace)||d&&d!==g.selector&&("**"!==d||!g.selector)||(m.splice(f,1),g.selector&&m.delegateCount--,l.remove&&l.remove.call(a,g));i&&!m.length&&(l.teardown&&l.teardown.call(a,p,r.handle)!==!1||n.removeEvent(a,o,r.handle),delete k[o])}else for(o in k)n.event.remove(a,o b[j],c,d,!0);n.isEmptyObject(k)&&(delete r.handle,n._removeData(a,"events"))}},trigger:function(b,c,d,e){var f,g,h,i,k,l,m,o=[d||z],p=j.call(b,"type")?b.type:b,q=j.call(b,"namespace")?b.namespace.split("."):[];if(h=l=d=d||z,3!==d.nodeType&&8!==d.nodeType&&!_.test(p n.event.triggered)&&(p.indexOf(".")>=0&&(q=p.split("."),p=q.shift(),q.sort()),g=p.indexOf(":")<0&&"on" p,b=b[n.expando]?b:new n.Event(p,"object"==typeof b&&b),b.isTrigger=e?2:3,b.namespace=q.join("."),b.namespace_re=b.namespace?new RegExp("(^|\\.)" q.join("\\.(?:.*\\.|)") "(\\.|$)"):null,b.result=void 0,b.target||(b.target=d),c=null==c?[b]:n.makeArray(c,[b]),k=n.event.special[p]||{},e||!k.trigger||k.trigger.apply(d,c)!==!1)){if(!e&&!k.noBubble&&!n.isWindow(d)){for(i=k.delegateType||p,_.test(i p)||(h=h.parentNode);h;h=h.parentNode)o.push(h),l=h;l===(d.ownerDocument||z)&&o.push(l.defaultView||l.parentWindow||a)}m=0;while((h=o[m  ])&&!b.isPropagationStopped())b.type=m>1?i:k.bindType||p,f=(n._data(h,"events")||{})[b.type]&&n._data(h,"handle"),f&&f.apply(h,c),f=g&&h[g],f&&f.apply&&n.acceptData(h)&&(b.result=f.apply(h,c),b.result===!1&&b.preventDefault());if(b.type=p,!e&&!b.isDefaultPrevented()&&(!k._default||k._default.apply(o.pop(),c)===!1)&&n.acceptData(d)&&g&&d[p]&&!n.isWindow(d)){l=d[g],l&&(d[g]=null),n.event.triggered=p;try{d[p]()}catch(r){}n.event.triggered=void 0,l&&(d[g]=l)}return b.result}},dispatch:function(a){a=n.event.fix(a);var b,c,e,f,g,h=[],i=d.call(arguments),j=(n._data(this,"events")||{})[a.type]||[],k=n.event.special[a.type]||{};if(i[0]=a,a.delegateTarget=this,!k.preDispatch||k.preDispatch.call(this,a)!==!1){h=n.event.handlers.call(this,a,j),b=0;while((f=h[b  ])&&!a.isPropagationStopped()){a.currentTarget=f.elem,g=0;while((e=f.handlers[g  ])&&!a.isImmediatePropagationStopped())(!a.namespace_re||a.namespace_re.test(e.namespace))&&(a.handleObj=e,a.data=e.data,c=((n.event.special[e.origType]||{}).handle||e.handler).apply(f.elem,i),void 0!==c&&(a.result=c)===!1&&(a.preventDefault(),a.stopPropagation()))}return k.postDispatch&&k.postDispatch.call(this,a),a.result}},handlers:function(a,b){var c,d,e,f,g=[],h=b.delegateCount,i=a.target;if(h&&i.nodeType&&(!a.button||"click"!==a.type))for(;i!=this;i=i.parentNode||this)if(1===i.nodeType&&(i.disabled!==!0||"click"!==a.type)){for(e=[],f=0;h>f;f  )d=b[f],c=d.selector " ",void 0===e[c]&&(e[c]=d.needsContext?n(c,this).index(i)>=0:n.find(c,this,null,[i]).length),e[c]&&e.push(d);e.length&&g.push({elem:i,handlers:e})}return h<b.length&&g.push({elem:this,handlers:b.slice(h)}),g},fix:function(a){if(a[n.expando])return a;var b,c,d,e=a.type,f=a,g=this.fixHooks[e];g||(this.fixHooks[e]=g=$.test(e)?this.mouseHooks:Z.test(e)?this.keyHooks:{}),d=g.props?this.props.concat(g.props):this.props,a=new n.Event(f),b=d.length;while(b--)c=d[b],a[c]=f[c];return a.target||(a.target=f.srcElement||z),3===a.target.nodeType&&(a.target=a.target.parentNode),a.metaKey=!!a.metaKey,g.filter?g.filter(a,f):a},props:"altKey bubbles cancelable ctrlKey currentTarget eventPhase metaKey relatedTarget shiftKey target timeStamp view which".split(" "),fixHooks:{},keyHooks:{props:"char charCode key keyCode".split(" "),filter:function(a,b){return null==a.which&&(a.which=null!=b.charCode?b.charCode:b.keyCode),a}},mouseHooks:{props:"button buttons clientX clientY fromElement offsetX offsetY pageX pageY screenX screenY toElement".split(" "),filter:function(a,b){var c,d,e,f=b.button,g=b.fromElement;return null==a.pageX&&null!=b.clientX&&(d=a.target.ownerDocument||z,e=d.documentElement,c=d.body,a.pageX=b.clientX (e&&e.scrollLeft||c&&c.scrollLeft||0)-(e&&e.clientLeft||c&&c.clientLeft||0),a.pageY=b.clientY (e&&e.scrollTop||c&&c.scrollTop||0)-(e&&e.clientTop||c&&c.clientTop||0)),!a.relatedTarget&&g&&(a.relatedTarget=g===a.target?b.toElement:g),a.which||void 0===f||(a.which=1&f?1:2&f?3:4&f?2:0),a}},special:{load:{noBubble:!0},focus:{trigger:function(){if(this!==db()&&this.focus)try{return this.focus(),!1}catch(a){}},delegateType:"focusin"},blur:{trigger:function(){return this===db()&&this.blur?(this.blur(),!1):void 0},delegateType:"focusout"},click:{trigger:function(){return n.nodeName(this,"input")&&"checkbox"===this.type&&this.click?(this.click(),!1):void 0},_default:function(a){return n.nodeName(a.target,"a")}},beforeunload:{postDispatch:function(a){void 0!==a.result&&(a.originalEvent.returnValue=a.result)}}},simulate:function(a,b,c,d){var e=n.extend(new n.Event,c,{type:a,isSimulated:!0,originalEvent:{}});d?n.event.trigger(e,null,b):n.event.dispatch.call(b,e),e.isDefaultPrevented()&&c.preventDefault()}},n.removeEvent=z.removeEventListener?function(a,b,c){a.removeEventListener&&a.removeEventListener(b,c,!1)}:function(a,b,c){var d="on" b;a.detachEvent&&(typeof a[d]===L&&(a[d]=null),a.detachEvent(d,c))},n.Event=function(a,b){return this instanceof n.Event?(a&&a.type?(this.originalEvent=a,this.type=a.type,this.isDefaultPrevented=a.defaultPrevented||void 0===a.defaultPrevented&&(a.returnValue===!1||a.getPreventDefault&&a.getPreventDefault())?bb:cb):this.type=a,b&&n.extend(this,b),this.timeStamp=a&&a.timeStamp||n.now(),void(this[n.expando]=!0)):new n.Event(a,b)},n.Event.prototype={isDefaultPrevented:cb,isPropagationStopped:cb,isImmediatePropagationStopped:cb,preventDefault:function(){var a=this.originalEvent;this.isDefaultPrevented=bb,a&&(a.preventDefault?a.preventDefault():a.returnValue=!1)},stopPropagation:function(){var a=this.originalEvent;this.isPropagationStopped=bb,a&&(a.stopPropagation&&a.stopPropagation(),a.cancelBubble=!0)},stopImmediatePropagation:function(){this.isImmediatePropagationStopped=bb,this.stopPropagation()}},n.each({mouseenter:"mouseover",mouseleave:"mouseout"},function(a,b){n.event.special[a]={delegateType:b,bindType:b,handle:function(a){var c,d=this,e=a.relatedTarget,f=a.handleObj;return(!e||e!==d&&!n.contains(d,e))&&(a.type=f.origType,c=f.handler.apply(this,arguments),a.type=b),c}}}),l.submitBubbles||(n.event.special.submit={setup:function(){return n.nodeName(this,"form")?!1:void n.event.add(this,"click._submit keypress._submit",function(a){var b=a.target,c=n.nodeName(b,"input")||n.nodeName(b,"button")?b.form:void 0;c&&!n._data(c,"submitBubbles")&&(n.event.add(c,"submit._submit",function(a){a._submit_bubble=!0}),n._data(c,"submitBubbles",!0))})},postDispatch:function(a){a._submit_bubble&&(delete a._submit_bubble,this.parentNode&&!a.isTrigger&&n.event.simulate("submit",this.parentNode,a,!0))},teardown:function(){return n.nodeName(this,"form")?!1:void n.event.remove(this,"._submit")}}),l.changeBubbles||(n.event.special.change={setup:function(){return Y.test(this.nodeName)?(("checkbox"===this.type||"radio"===this.type)&&(n.event.add(this,"propertychange._change",function(a){"checked"===a.originalEvent.propertyName&&(this._just_changed=!0)}),n.event.add(this,"click._change",function(a){this._just_changed&&!a.isTrigger&&(this._just_changed=!1),n.event.simulate("change",this,a,!0)})),!1):void n.event.add(this,"beforeactivate._change",function(a){var b=a.target;Y.test(b.nodeName)&&!n._data(b,"changeBubbles")&&(n.event.add(b,"change._change",function(a){!this.parentNode||a.isSimulated||a.isTrigger||n.event.simulate("change",this.parentNode,a,!0)}),n._data(b,"changeBubbles",!0))})},handle:function(a){var b=a.target;return this!==b||a.isSimulated||a.isTrigger||"radio"!==b.type&&"checkbox"!==b.type?a.handleObj.handler.apply(this,arguments):void 0},teardown:function(){return n.event.remove(this,"._change"),!Y.test(this.nodeName)}}),l.focusinBubbles||n.each({focus:"focusin",blur:"focusout"},function(a,b){var c=function(a){n.event.simulate(b,a.target,n.event.fix(a),!0)};n.event.special[b]={setup:function(){var d=this.ownerDocument||this,e=n._data(d,b);e||d.addEventListener(a,c,!0),n._data(d,b,(e||0) 1)},teardown:function(){var d=this.ownerDocument||this,e=n._data(d,b)-1;e?n._data(d,b,e):(d.removeEventListener(a,c,!0),n._removeData(d,b))}}}),n.fn.extend({on:function(a,b,c,d,e){var f,g;if("object"==typeof a){"string"!=typeof b&&(c=c||b,b=void 0);for(f in a)this.on(f,b,c,a[f],e);return this}if(null==c&&null==d?(d=b,c=b=void 0):null==d&&("string"==typeof b?(d=c,c=void 0):(d=c,c=b,b=void 0)),d===!1)d=cb;else if(!d)return this;return 1===e&&(g=d,d=function(a){return n().off(a),g.apply(this,arguments)},d.guid=g.guid||(g.guid=n.guid  )),this.each(function(){n.event.add(this,a,d,c,b)})},one:function(a,b,c,d){return this.on(a,b,c,d,1)},off:function(a,b,c){var d,e;if(a&&a.preventDefault&&a.handleObj)return d=a.handleObj,n(a.delegateTarget).off(d.namespace?d.origType "." d.namespace:d.origType,d.selector,d.handler),this;if("object"==typeof a){for(e in a)this.off(e,b,a[e]);return this}return(b===!1||"function"==typeof b)&&(c=b,b=void 0),c===!1&&(c=cb),this.each(function(){n.event.remove(this,a,c,b)})},trigger:function(a,b){return this.each(function(){n.event.trigger(a,b,this)})},triggerHandler:function(a,b){var c=this[0];return c?n.event.trigger(a,b,c,!0):void 0}});function eb(a){var b=fb.split("|"),c=a.createDocumentFragment();if(c.createElement)while(b.length)c.createElement(b.pop());return c}var fb="abbr|article|aside|audio|bdi|canvas|data|datalist|details|figcaption|figure|footer|header|hgroup|mark|meter|nav|output|progress|section|summary|time|video",gb=/ jQuery\d ="(?:null|\d )"/g,hb=new RegExp("<(?:" fb ")[\\s/>]","i"),ib=/^\s /,jb=/<(?!area|br|col|embed|hr|img|input|link|meta|param)(([\w:] )[^>]*)\/>/gi,kb=/<([\w:] )/,lb=/<tbody/i,mb=/<|&#?\w ;/,nb=/<(?:script|style|link)/i,ob=/checked\s*(?:[^=]|=\s*.checked.)/i,pb=/^$|\/(?:java|ecma)script/i,qb=/^true\/(.*)/,rb=/^\s*<!(?:\[CDATA\[|--)|(?:\]\]|--)>\s*$/g,sb={option:[1,"<select multiple='multiple'>","</select>"],legend:[1,"<fieldset>","</fieldset>"],area:[1,"<map>","</map>"],param:[1,"<object>","</object>"],thead:[1,"<table>","</table>"],tr:[2,"<table><tbody>","</tbody></table>"],col:[2,"<table><tbody></tbody><colgroup>","</colgroup></table>"],td:[3,"<table><tbody><tr>","</tr></tbody></table>"],_default:l.htmlSerialize?[0,"",""]:[1,"X<div>","</div>"]},tb=eb(z),ub=tb.appendChild(z.createElement("div"));sb.optgroup=sb.option,sb.tbody=sb.tfoot=sb.colgroup=sb.caption=sb.thead,sb.th=sb.td;function vb(a,b){var c,d,e=0,f=typeof a.getElementsByTagName!==L?a.getElementsByTagName(b||"*"):typeof a.querySelectorAll!==L?a.querySelectorAll(b||"*"):void 0;if(!f)for(f=[],c=a.childNodes||a;null!=(d=c[e]);e  )!b||n.nodeName(d,b)?f.push(d):n.merge(f,vb(d,b));return void 0===b||b&&n.nodeName(a,b)?n.merge([a],f):f}function wb(a){X.test(a.type)&&(a.defaultChecked=a.checked)}function xb(a,b){return n.nodeName(a,"table")&&n.nodeName(11!==b.nodeType?b:b.firstChild,"tr")?a.getElementsByTagName("tbody")[0]||a.appendChild(a.ownerDocument.createElement("tbody")):a}function yb(a){return a.type=(null!==n.find.attr(a,"type")) "/" a.type,a}function zb(a){var b=qb.exec(a.type);return b?a.type=b[1]:a.removeAttribute("type"),a}function Ab(a,b){for(var c,d=0;null!=(c=a[d]);d  )n._data(c,"globalEval",!b||n._data(b[d],"globalEval"))}function Bb(a,b){if(1===b.nodeType&&n.hasData(a)){var c,d,e,f=n._data(a),g=n._data(b,f),h=f.events;if(h){delete g.handle,g.events={};for(c in h)for(d=0,e=h[c].length;e>d;d  )n.event.add(b,c,h[c][d])}g.data&&(g.data=n.extend({},g.data))}}function Cb(a,b){var c,d,e;if(1===b.nodeType){if(c=b.nodeName.toLowerCase(),!l.noCloneEvent&&b[n.expando]){e=n._data(b);for(d in e.events)n.removeEvent(b,d,e.handle);b.removeAttribute(n.expando)}"script"===c&&b.text!==a.text?(yb(b).text=a.text,zb(b)):"object"===c?(b.parentNode&&(b.outerHTML=a.outerHTML),l.html5Clone&&a.innerHTML&&!n.trim(b.innerHTML)&&(b.innerHTML=a.innerHTML)):"input"===c&&X.test(a.type)?(b.defaultChecked=b.checked=a.checked,b.value!==a.value&&(b.value=a.value)):"option"===c?b.defaultSelected=b.selected=a.defaultSelected:("input"===c||"textarea"===c)&&(b.defaultValue=a.defaultValue)}}n.extend({clone:function(a,b,c){var d,e,f,g,h,i=n.contains(a.ownerDocument,a);if(l.html5Clone||n.isXMLDoc(a)||!hb.test("<" a.nodeName ">")?f=a.cloneNode(!0):(ub.innerHTML=a.outerHTML,ub.removeChild(f=ub.firstChild)),!(l.noCloneEvent&&l.noCloneChecked||1!==a.nodeType&&11!==a.nodeType||n.isXMLDoc(a)))for(d=vb(f),h=vb(a),g=0;null!=(e=h[g]);  g)d[g]&&Cb(e,d[g]);if(b)if(c)for(h=h||vb(a),d=d||vb(f),g=0;null!=(e=h[g]);g  )Bb(e,d[g]);else Bb(a,f);return d=vb(f,"script"),d.length>0&&Ab(d,!i&&vb(a,"script")),d=h=e=null,f},buildFragment:function(a,b,c,d){for(var e,f,g,h,i,j,k,m=a.length,o=eb(b),p=[],q=0;m>q;q  )if(f=a[q],f||0===f)if("object"===n.type(f))n.merge(p,f.nodeType?[f]:f);else if(mb.test(f)){h=h||o.appendChild(b.createElement("div")),i=(kb.exec(f)||["",""])[1].toLowerCase(),k=sb[i]||sb._default,h.innerHTML=k[1] f.replace(jb,"<$1></$2>") k[2],e=k[0];while(e--)h=h.lastChild;if(!l.leadingWhitespace&&ib.test(f)&&p.push(b.createTextNode(ib.exec(f)[0])),!l.tbody){f="table"!==i||lb.test(f)?"<table>"!==k[1]||lb.test(f)?0:h:h.firstChild,e=f&&f.childNodes.length;while(e--)n.nodeName(j=f.childNodes[e],"tbody")&&!j.childNodes.length&&f.removeChild(j)}n.merge(p,h.childNodes),h.textContent="";while(h.firstChild)h.removeChild(h.firstChild);h=o.lastChild}else p.push(b.createTextNode(f));h&&o.removeChild(h),l.appendChecked||n.grep(vb(p,"input"),wb),q=0;while(f=p[q  ])if((!d||-1===n.inArray(f,d))&&(g=n.contains(f.ownerDocument,f),h=vb(o.appendChild(f),"script"),g&&Ab(h),c)){e=0;while(f=h[e  ])pb.test(f.type||"")&&c.push(f)}return h=null,o},cleanData:function(a,b){for(var d,e,f,g,h=0,i=n.expando,j=n.cache,k=l.deleteExpando,m=n.event.special;null!=(d=a[h]);h  )if((b||n.acceptData(d))&&(f=d[i],g=f&&j[f])){if(g.events)for(e in g.events)m[e]?n.event.remove(d,e):n.removeEvent(d,e,g.handle);j[f]&&(delete j[f],k?delete d[i]:typeof d.removeAttribute!==L?d.removeAttribute(i):d[i]=null,c.push(f))}}}),n.fn.extend({text:function(a){return W(this,function(a){return void 0===a?n.text(this):this.empty().append((this[0]&&this[0].ownerDocument||z).createTextNode(a))},null,a,arguments.length)},append:function(){return this.domManip(arguments,function(a){if(1===this.nodeType||11===this.nodeType||9===this.nodeType){var b=xb(this,a);b.appendChild(a)}})},prepend:function(){return this.domManip(arguments,function(a){if(1===this.nodeType||11===this.nodeType||9===this.nodeType){var b=xb(this,a);b.insertBefore(a,b.firstChild)}})},before:function(){return this.domManip(arguments,function(a){this.parentNode&&this.parentNode.insertBefore(a,this)})},after:function(){return this.domManip(arguments,function(a){this.parentNode&&this.parentNode.insertBefore(a,this.nextSibling)})},remove:function(a,b){for(var c,d=a?n.filter(a,this):this,e=0;null!=(c=d[e]);e  )b||1!==c.nodeType||n.cleanData(vb(c)),c.parentNode&&(b&&n.contains(c.ownerDocument,c)&&Ab(vb(c,"script")),c.parentNode.removeChild(c));return this},empty:function(){for(var a,b=0;null!=(a=this[b]);b  ){1===a.nodeType&&n.cleanData(vb(a,!1));while(a.firstChild)a.removeChild(a.firstChild);a.options&&n.nodeName(a,"select")&&(a.options.length=0)}return this},clone:function(a,b){return a=null==a?!1:a,b=null==b?a:b,this.map(function(){return n.clone(this,a,b)})},html:function(a){return W(this,function(a){var b=this[0]||{},c=0,d=this.length;if(void 0===a)return 1===b.nodeType?b.innerHTML.replace(gb,""):void 0;if(!("string"!=typeof a||nb.test(a)||!l.htmlSerialize&&hb.test(a)||!l.leadingWhitespace&&ib.test(a)||sb[(kb.exec(a)||["",""])[1].toLowerCase()])){a=a.replace(jb,"<$1></$2>");try{for(;d>c;c  )b=this[c]||{},1===b.nodeType&&(n.cleanData(vb(b,!1)),b.innerHTML=a);b=0}catch(e){}}b&&this.empty().append(a)},null,a,arguments.length)},replaceWith:function(){var a=arguments[0];return this.domManip(arguments,function(b){a=this.parentNode,n.cleanData(vb(this)),a&&a.replaceChild(b,this)}),a&&(a.length||a.nodeType)?this:this.remove()},detach:function(a){return this.remove(a,!0)},domManip:function(a,b){a=e.apply([],a);var c,d,f,g,h,i,j=0,k=this.length,m=this,o=k-1,p=a[0],q=n.isFunction(p);if(q||k>1&&"string"==typeof p&&!l.checkClone&&ob.test(p))return this.each(function(c){var d=m.eq(c);q&&(a[0]=p.call(this,c,d.html())),d.domManip(a,b)});if(k&&(i=n.buildFragment(a,this[0].ownerDocument,!1,this),c=i.firstChild,1===i.childNodes.length&&(i=c),c)){for(g=n.map(vb(i,"script"),yb),f=g.length;k>j;j  )d=i,j!==o&&(d=n.clone(d,!0,!0),f&&n.merge(g,vb(d,"script"))),b.call(this[j],d,j);if(f)for(h=g[g.length-1].ownerDocument,n.map(g,zb),j=0;f>j;j  )d=g[j],pb.test(d.type||"")&&!n._data(d,"globalEval")&&n.contains(h,d)&&(d.src?n._evalUrl&&n._evalUrl(d.src):n.globalEval((d.text||d.textContent||d.innerHTML||"").replace(rb,"")));i=c=null}return this}}),n.each({appendTo:"append",prependTo:"prepend",insertBefore:"before",insertAfter:"after",replaceAll:"replaceWith"},function(a,b){n.fn[a]=function(a){for(var c,d=0,e=[],g=n(a),h=g.length-1;h>=d;d  )c=d===h?this:this.clone(!0),n(g[d])[b](c),f.apply(e,c.get());return this.pushStack(e)}});var Db,Eb={};function Fb(b,c){var d=n(c.createElement(b)).appendTo(c.body),e=a.getDefaultComputedStyle?a.getDefaultComputedStyle(d[0]).display:n.css(d[0],"display");return d.detach(),e}function Gb(a){var b=z,c=Eb[a];return c||(c=Fb(a,b),"none"!==c&&c||(Db=(Db||n("<iframe frameborder='0' width='0' height='0'/>")).appendTo(b.documentElement),b=(Db[0].contentWindow||Db[0].contentDocument).document,b.write(),b.close(),c=Fb(a,b),Db.detach()),Eb[a]=c),c}!function(){var a,b,c=z.createElement("div"),d="-webkit-box-sizing:content-box;-moz-box-sizing:content-box;box-sizing:content-box;display:block;padding:0;margin:0;border:0";c.innerHTML=" <link/><table></table><a href='/a'>a</a><input type='checkbox'/>",a=c.getElementsByTagName("a")[0],a.style.cssText="float:left;opacity:.5",l.opacity=/^0.5/.test(a.style.opacity),l.cssFloat=!!a.style.cssFloat,c.style.backgroundClip="content-box",c.cloneNode(!0).style.backgroundClip="",l.clearCloneStyle="content-box"===c.style.backgroundClip,a=c=null,l.shrinkWrapBlocks=function(){var a,c,e,f;if(null==b){if(a=z.getElementsByTagName("body")[0],!a)return;f="border:0;width:0;height:0;position:absolute;top:0;left:-9999px",c=z.createElement("div"),e=z.createElement("div"),a.appendChild(c).appendChild(e),b=!1,typeof e.style.zoom!==L&&(e.style.cssText=d ";width:1px;padding:1px;zoom:1",e.innerHTML="<div></div>",e.firstChild.style.width="5px",b=3!==e.offsetWidth),a.removeChild(c),a=c=e=null}return b}}();var Hb=/^margin/,Ib=new RegExp("^(" T ")(?!px)[a-z%] $","i"),Jb,Kb,Lb=/^(top|right|bottom|left)$/;a.getComputedStyle?(Jb=function(a){return a.ownerDocument.defaultView.getComputedStyle(a,null)},Kb=function(a,b,c){var d,e,f,g,h=a.style;return c=c||Jb(a),g=c?c.getPropertyValue(b)||c[b]:void 0,c&&(""!==g||n.contains(a.ownerDocument,a)||(g=n.style(a,b)),Ib.test(g)&&Hb.test(b)&&(d=h.width,e=h.minWidth,f=h.maxWidth,h.minWidth=h.maxWidth=h.width=g,g=c.width,h.width=d,h.minWidth=e,h.maxWidth=f)),void 0===g?g:g ""}):z.documentElement.currentStyle&&(Jb=function(a){return a.currentStyle},Kb=function(a,b,c){var d,e,f,g,h=a.style;return c=c||Jb(a),g=c?c[b]:void 0,null==g&&h&&h[b]&&(g=h[b]),Ib.test(g)&&!Lb.test(b)&&(d=h.left,e=a.runtimeStyle,f=e&&e.left,f&&(e.left=a.currentStyle.left),h.left="fontSize"===b?"1em":g,g=h.pixelLeft "px",h.left=d,f&&(e.left=f)),void 0===g?g:g ""||"auto"});function Mb(a,b){return{get:function(){var c=a();if(null!=c)return c?void delete this.get:(this.get=b).apply(this,arguments)}}}!function(){var b,c,d,e,f,g,h=z.createElement("div"),i="border:0;width:0;height:0;position:absolute;top:0;left:-9999px",j="-webkit-box-sizing:content-box;-moz-box-sizing:content-box;box-sizing:content-box;display:block;padding:0;margin:0;border:0";h.innerHTML=" <link/><table></table><a href='/a'>a</a><input type='checkbox'/>",b=h.getElementsByTagName("a")[0],b.style.cssText="float:left;opacity:.5",l.opacity=/^0.5/.test(b.style.opacity),l.cssFloat=!!b.style.cssFloat,h.style.backgroundClip="content-box",h.cloneNode(!0).style.backgroundClip="",l.clearCloneStyle="content-box"===h.style.backgroundClip,b=h=null,n.extend(l,{reliableHiddenOffsets:function(){if(null!=c)return c;var a,b,d,e=z.createElement("div"),f=z.getElementsByTagName("body")[0];if(f)return e.setAttribute("className","t"),e.innerHTML=" <link/><table></table><a href='/a'>a</a><input type='checkbox'/>",a=z.createElement("div"),a.style.cssText=i,f.appendChild(a).appendChild(e),e.innerHTML="<table><tr><td></td><td>t</td></tr></table>",b=e.getElementsByTagName("td"),b[0].style.cssText="padding:0;margin:0;border:0;display:none",d=0===b[0].offsetHeight,b[0].style.display="",b[1].style.display="none",c=d&&0===b[0].offsetHeight,f.removeChild(a),e=f=null,c},boxSizing:function(){return null==d&&k(),d},boxSizingReliable:function(){return null==e&&k(),e},pixelPosition:function(){return null==f&&k(),f},reliableMarginRight:function(){var b,c,d,e;if(null==g&&a.getComputedStyle){if(b=z.getElementsByTagName("body")[0],!b)return;c=z.createElement("div"),d=z.createElement("div"),c.style.cssText=i,b.appendChild(c).appendChild(d),e=d.appendChild(z.createElement("div")),e.style.cssText=d.style.cssText=j,e.style.marginRight=e.style.width="0",d.style.width="1px",g=!parseFloat((a.getComputedStyle(e,null)||{}).marginRight),b.removeChild(c)}return g}});function k(){var b,c,h=z.getElementsByTagName("body")[0];h&&(b=z.createElement("div"),c=z.createElement("div"),b.style.cssText=i,h.appendChild(b).appendChild(c),c.style.cssText="-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-sizing:border-box;position:absolute;display:block;padding:1px;border:1px;width:4px;margin-top:1%;top:1%",n.swap(h,null!=h.style.zoom?{zoom:1}:{},function(){d=4===c.offsetWidth}),e=!0,f=!1,g=!0,a.getComputedStyle&&(f="1%"!==(a.getComputedStyle(c,null)||{}).top,e="4px"===(a.getComputedStyle(c,null)||{width:"4px"}).width),h.removeChild(b),c=h=null)}}(),n.swap=function(a,b,c,d){var e,f,g={};for(f in b)g[f]=a.style[f],a.style[f]=b[f];e=c.apply(a,d||[]);for(f in b)a.style[f]=g[f];return e};var Nb=/alpha\([^)]*\)/i,Ob=/opacity\s*=\s*([^)]*)/,Pb=/^(none|table(?!-c[ea]). )/,Qb=new RegExp("^(" T ")(.*)$","i"),Rb=new RegExp("^([ -])=(" T ")","i"),Sb={position:"absolute",visibility:"hidden",display:"block"},Tb={letterSpacing:0,fontWeight:400},Ub=["Webkit","O","Moz","ms"];function Vb(a,b){if(b in a)return b;var c=b.charAt(0).toUpperCase() b.slice(1),d=b,e=Ub.length;while(e--)if(b=Ub[e] c,b in a)return b;return d}function Wb(a,b){for(var c,d,e,f=[],g=0,h=a.length;h>g;g  )d=a[g],d.style&&(f[g]=n._data(d,"olddisplay"),c=d.style.display,b?(f[g]||"none"!==c||(d.style.display=""),""===d.style.display&&V(d)&&(f[g]=n._data(d,"olddisplay",Gb(d.nodeName)))):f[g]||(e=V(d),(c&&"none"!==c||!e)&&n._data(d,"olddisplay",e?c:n.css(d,"display"))));for(g=0;h>g;g  )d=a[g],d.style&&(b&&"none"!==d.style.display&&""!==d.style.display||(d.style.display=b?f[g]||"":"none"));return a}function Xb(a,b,c){var d=Qb.exec(b);return d?Math.max(0,d[1]-(c||0)) (d[2]||"px"):b}function Yb(a,b,c,d,e){for(var f=c===(d?"border":"content")?4:"width"===b?1:0,g=0;4>f;f =2)"margin"===c&&(g =n.css(a,c U[f],!0,e)),d?("content"===c&&(g-=n.css(a,"padding" U[f],!0,e)),"margin"!==c&&(g-=n.css(a,"border" U[f] "Width",!0,e))):(g =n.css(a,"padding" U[f],!0,e),"padding"!==c&&(g =n.css(a,"border" U[f] "Width",!0,e)));return g}function Zb(a,b,c){var d=!0,e="width"===b?a.offsetWidth:a.offsetHeight,f=Jb(a),g=l.boxSizing()&&"border-box"===n.css(a,"boxSizing",!1,f);if(0>=e||null==e){if(e=Kb(a,b,f),(0>e||null==e)&&(e=a.style[b]),Ib.test(e))return e;d=g&&(l.boxSizingReliable()||e===a.style[b]),e=parseFloat(e)||0}return e Yb(a,b,c||(g?"border":"content"),d,f) "px"}n.extend({cssHooks:{opacity:{get:function(a,b){if(b){var c=Kb(a,"opacity");return""===c?"1":c}}}},cssNumber:{columnCount:!0,fillOpacity:!0,fontWeight:!0,lineHeight:!0,opacity:!0,order:!0,orphans:!0,widows:!0,zIndex:!0,zoom:!0},cssProps:{"float":l.cssFloat?"cssFloat":"styleFloat"},style:function(a,b,c,d){if(a&&3!==a.nodeType&&8!==a.nodeType&&a.style){var e,f,g,h=n.camelCase(b),i=a.style;if(b=n.cssProps[h]||(n.cssProps[h]=Vb(i,h)),g=n.cssHooks[b]||n.cssHooks[h],void 0===c)return g&&"get"in g&&void 0!==(e=g.get(a,!1,d))?e:i[b];if(f=typeof c,"string"===f&&(e=Rb.exec(c))&&(c=(e[1] 1)*e[2] parseFloat(n.css(a,b)),f="number"),null!=c&&c===c&&("number"!==f||n.cssNumber[h]||(c ="px"),l.clearCloneStyle||""!==c||0!==b.indexOf("background")||(i[b]="inherit"),!(g&&"set"in g&&void 0===(c=g.set(a,c,d)))))try{i[b]="",i[b]=c}catch(j){}}},css:function(a,b,c,d){var e,f,g,h=n.camelCase(b);return b=n.cssProps[h]||(n.cssProps[h]=Vb(a.style,h)),g=n.cssHooks[b]||n.cssHooks[h],g&&"get"in g&&(f=g.get(a,!0,c)),void 0===f&&(f=Kb(a,b,d)),"normal"===f&&b in Tb&&(f=Tb[b]),""===c||c?(e=parseFloat(f),c===!0||n.isNumeric(e)?e||0:f):f}}),n.each(["height","width"],function(a,b){n.cssHooks[b]={get:function(a,c,d){return c?0===a.offsetWidth&&Pb.test(n.css(a,"display"))?n.swap(a,Sb,function(){return Zb(a,b,d)}):Zb(a,b,d):void 0},set:function(a,c,d){var e=d&&Jb(a);return Xb(a,c,d?Yb(a,b,d,l.boxSizing()&&"border-box"===n.css(a,"boxSizing",!1,e),e):0)}}}),l.opacity||(n.cssHooks.opacity={get:function(a,b){return Ob.test((b&&a.currentStyle?a.currentStyle.filter:a.style.filter)||"")?.01*parseFloat(RegExp.$1) "":b?"1":""},set:function(a,b){var c=a.style,d=a.currentStyle,e=n.isNumeric(b)?"alpha(opacity=" 100*b ")":"",f=d&&d.filter||c.filter||"";c.zoom=1,(b>=1||""===b)&&""===n.trim(f.replace(Nb,""))&&c.removeAttribute&&(c.removeAttribute("filter"),""===b||d&&!d.filter)||(c.filter=Nb.test(f)?f.replace(Nb,e):f " " e)}}),n.cssHooks.marginRight=Mb(l.reliableMarginRight,function(a,b){return b?n.swap(a,{display:"inline-block"},Kb,[a,"marginRight"]):void 0}),n.each({margin:"",padding:"",border:"Width"},function(a,b){n.cssHooks[a b]={expand:function(c){for(var d=0,e={},f="string"==typeof c?c.split(" "):[c];4>d;d  )e[a U[d] b]=f[d]||f[d-2]||f[0];return e}},Hb.test(a)||(n.cssHooks[a b].set=Xb)}),n.fn.extend({css:function(a,b){return W(this,function(a,b,c){var d,e,f={},g=0;if(n.isArray(b)){for(d=Jb(a),e=b.length;e>g;g  )f[b[g]]=n.css(a,b[g],!1,d);return f}return void 0!==c?n.style(a,b,c):n.css(a,b)

},a,b,arguments.length>1)},show:function(){return Wb(this,!0)},hide:function(){return Wb(this)},toggle:function(a){return"boolean"==typeof a?a?this.show():this.hide():this.each(function(){V(this)?n(this).show():n(this).hide()})}});function $b(a,b,c,d,e){return new $b.prototype.init(a,b,c,d,e)}n.Tween=$b,$b.prototype={constructor:$b,init:function(a,b,c,d,e,f){this.elem=a,this.prop=c,this.easing=e||"swing",this.options=b,this.start=this.now=this.cur(),this.end=d,this.unit=f||(n.cssNumber[c]?"":"px")},cur:function(){var a=$b.propHooks[this.prop];return a&&a.get?a.get(this):$b.propHooks._default.get(this)},run:function(a){var b,c=$b.propHooks[this.prop];return this.pos=b=this.options.duration?n.easing[this.easing](a,this.options.duration*a,0,1,this.options.duration):a,this.now=(this.end-this.start)*b this.start,this.options.step&&this.options.step.call(this.elem,this.now,this),c&&c.set?c.set(this):$b.propHooks._default.set(this),this}},$b.prototype.init.prototype=$b.prototype,$b.propHooks={_default:{get:function(a){var b;return null==a.elem[a.prop]||a.elem.style&&null!=a.elem.style[a.prop]?(b=n.css(a.elem,a.prop,""),b&&"auto"!==b?b:0):a.elem[a.prop]},set:function(a){n.fx.step[a.prop]?n.fx.step[a.prop](a):a.elem.style&&(null!=a.elem.style[n.cssProps[a.prop]]||n.cssHooks[a.prop])?n.style(a.elem,a.prop,a.now a.unit):a.elem[a.prop]=a.now}}},$b.propHooks.scrollTop=$b.propHooks.scrollLeft={set:function(a){a.elem.nodeType&&a.elem.parentNode&&(a.elem[a.prop]=a.now)}},n.easing={linear:function(a){return a},swing:function(a){return.5-Math.cos(a*Math.PI)/2}},n.fx=$b.prototype.init,n.fx.step={};var _b,ac,bc=/^(?:toggle|show|hide)$/,cc=new RegExp("^(?:([ -])=|)(" T ")([a-z%]*)$","i"),dc=/queueHooks$/,ec=[jc],fc={"*":[function(a,b){var c=this.createTween(a,b),d=c.cur(),e=cc.exec(b),f=e&&e[3]||(n.cssNumber[a]?"":"px"),g=(n.cssNumber[a]||"px"!==f&& d)&&cc.exec(n.css(c.elem,a)),h=1,i=20;if(g&&g[3]!==f){f=f||g[3],e=e||[],g= d||1;do h=h||".5",g/=h,n.style(c.elem,a,g f);while(h!==(h=c.cur()/d)&&1!==h&&--i)}return e&&(g=c.start= g|| d||0,c.unit=f,c.end=e[1]?g (e[1] 1)*e[2]: e[2]),c}]};function gc(){return setTimeout(function(){_b=void 0}),_b=n.now()}function hc(a,b){var c,d={height:a},e=0;for(b=b?1:0;4>e;e =2-b)c=U[e],d["margin" c]=d["padding" c]=a;return b&&(d.opacity=d.width=a),d}function ic(a,b,c){for(var d,e=(fc[b]||[]).concat(fc["*"]),f=0,g=e.length;g>f;f  )if(d=e[f].call(c,b,a))return d}function jc(a,b,c){var d,e,f,g,h,i,j,k,m=this,o={},p=a.style,q=a.nodeType&&V(a),r=n._data(a,"fxshow");c.queue||(h=n._queueHooks(a,"fx"),null==h.unqueued&&(h.unqueued=0,i=h.empty.fire,h.empty.fire=function(){h.unqueued||i()}),h.unqueued  ,m.always(function(){m.always(function(){h.unqueued--,n.queue(a,"fx").length||h.empty.fire()})})),1===a.nodeType&&("height"in b||"width"in b)&&(c.overflow=[p.overflow,p.overflowX,p.overflowY],j=n.css(a,"display"),k=Gb(a.nodeName),"none"===j&&(j=k),"inline"===j&&"none"===n.css(a,"float")&&(l.inlineBlockNeedsLayout&&"inline"!==k?p.zoom=1:p.display="inline-block")),c.overflow&&(p.overflow="hidden",l.shrinkWrapBlocks()||m.always(function(){p.overflow=c.overflow[0],p.overflowX=c.overflow[1],p.overflowY=c.overflow[2]}));for(d in b)if(e=b[d],bc.exec(e)){if(delete b[d],f=f||"toggle"===e,e===(q?"hide":"show")){if("show"!==e||!r||void 0===r[d])continue;q=!0}o[d]=r&&r[d]||n.style(a,d)}if(!n.isEmptyObject(o)){r?"hidden"in r&&(q=r.hidden):r=n._data(a,"fxshow",{}),f&&(r.hidden=!q),q?n(a).show():m.done(function(){n(a).hide()}),m.done(function(){var b;n._removeData(a,"fxshow");for(b in o)n.style(a,b,o[b])});for(d in o)g=ic(q?r[d]:0,d,m),d in r||(r[d]=g.start,q&&(g.end=g.start,g.start="width"===d||"height"===d?1:0))}}function kc(a,b){var c,d,e,f,g;for(c in a)if(d=n.camelCase(c),e=b[d],f=a[c],n.isArray(f)&&(e=f[1],f=a[c]=f[0]),c!==d&&(a[d]=f,delete a[c]),g=n.cssHooks[d],g&&"expand"in g){f=g.expand(f),delete a[d];for(c in f)c in a||(a[c]=f[c],b[c]=e)}else b[d]=e}function lc(a,b,c){var d,e,f=0,g=ec.length,h=n.Deferred().always(function(){delete i.elem}),i=function(){if(e)return!1;for(var b=_b||gc(),c=Math.max(0,j.startTime j.duration-b),d=c/j.duration||0,f=1-d,g=0,i=j.tweens.length;i>g;g  )j.tweens[g].run(f);return h.notifyWith(a,[j,f,c]),1>f&&i?c:(h.resolveWith(a,[j]),!1)},j=h.promise({elem:a,props:n.extend({},b),opts:n.extend(!0,{specialEasing:{}},c),originalProperties:b,originalOptions:c,startTime:_b||gc(),duration:c.duration,tweens:[],createTween:function(b,c){var d=n.Tween(a,j.opts,b,c,j.opts.specialEasing[b]||j.opts.easing);return j.tweens.push(d),d},stop:function(b){var c=0,d=b?j.tweens.length:0;if(e)return this;for(e=!0;d>c;c  )j.tweens[c].run(1);return b?h.resolveWith(a,[j,b]):h.rejectWith(a,[j,b]),this}}),k=j.props;for(kc(k,j.opts.specialEasing);g>f;f  )if(d=ec[f].call(j,a,k,j.opts))return d;return n.map(k,ic,j),n.isFunction(j.opts.start)&&j.opts.start.call(a,j),n.fx.timer(n.extend(i,{elem:a,anim:j,queue:j.opts.queue})),j.progress(j.opts.progress).done(j.opts.done,j.opts.complete).fail(j.opts.fail).always(j.opts.always)}n.Animation=n.extend(lc,{tweener:function(a,b){n.isFunction(a)?(b=a,a=["*"]):a=a.split(" ");for(var c,d=0,e=a.length;e>d;d  )c=a[d],fc[c]=fc[c]||[],fc[c].unshift(b)},prefilter:function(a,b){b?ec.unshift(a):ec.push(a)}}),n.speed=function(a,b,c){var d=a&&"object"==typeof a?n.extend({},a):{complete:c||!c&&b||n.isFunction(a)&&a,duration:a,easing:c&&b||b&&!n.isFunction(b)&&b};return d.duration=n.fx.off?0:"number"==typeof d.duration?d.duration:d.duration in n.fx.speeds?n.fx.speeds[d.duration]:n.fx.speeds._default,(null==d.queue||d.queue===!0)&&(d.queue="fx"),d.old=d.complete,d.complete=function(){n.isFunction(d.old)&&d.old.call(this),d.queue&&n.dequeue(this,d.queue)},d},n.fn.extend({fadeTo:function(a,b,c,d){return this.filter(V).css("opacity",0).show().end().animate({opacity:b},a,c,d)},animate:function(a,b,c,d){var e=n.isEmptyObject(a),f=n.speed(b,c,d),g=function(){var b=lc(this,n.extend({},a),f);(e||n._data(this,"finish"))&&b.stop(!0)};return g.finish=g,e||f.queue===!1?this.each(g):this.queue(f.queue,g)},stop:function(a,b,c){var d=function(a){var b=a.stop;delete a.stop,b(c)};return"string"!=typeof a&&(c=b,b=a,a=void 0),b&&a!==!1&&this.queue(a||"fx",[]),this.each(function(){var b=!0,e=null!=a&&a "queueHooks",f=n.timers,g=n._data(this);if(e)g[e]&&g[e].stop&&d(g[e]);else for(e in g)g[e]&&g[e].stop&&dc.test(e)&&d(g[e]);for(e=f.length;e--;)f[e].elem!==this||null!=a&&f[e].queue!==a||(f[e].anim.stop(c),b=!1,f.splice(e,1));(b||!c)&&n.dequeue(this,a)})},finish:function(a){return a!==!1&&(a=a||"fx"),this.each(function(){var b,c=n._data(this),d=c[a "queue"],e=c[a "queueHooks"],f=n.timers,g=d?d.length:0;for(c.finish=!0,n.queue(this,a,[]),e&&e.stop&&e.stop.call(this,!0),b=f.length;b--;)f[b].elem===this&&f[b].queue===a&&(f[b].anim.stop(!0),f.splice(b,1));for(b=0;g>b;b  )d[b]&&d[b].finish&&d[b].finish.call(this);delete c.finish})}}),n.each(["toggle","show","hide"],function(a,b){var c=n.fn[b];n.fn[b]=function(a,d,e){return null==a||"boolean"==typeof a?c.apply(this,arguments):this.animate(hc(b,!0),a,d,e)}}),n.each({slideDown:hc("show"),slideUp:hc("hide"),slideToggle:hc("toggle"),fadeIn:{opacity:"show"},fadeOut:{opacity:"hide"},fadeToggle:{opacity:"toggle"}},function(a,b){n.fn[a]=function(a,c,d){return this.animate(b,a,c,d)}}),n.timers=[],n.fx.tick=function(){var a,b=n.timers,c=0;for(_b=n.now();c<b.length;c  )a=b[c],a()||b[c]!==a||b.splice(c--,1);b.length||n.fx.stop(),_b=void 0},n.fx.timer=function(a){n.timers.push(a),a()?n.fx.start():n.timers.pop()},n.fx.interval=13,n.fx.start=function(){ac||(ac=setInterval(n.fx.tick,n.fx.interval))},n.fx.stop=function(){clearInterval(ac),ac=null},n.fx.speeds={slow:600,fast:200,_default:400},n.fn.delay=function(a,b){return a=n.fx?n.fx.speeds[a]||a:a,b=b||"fx",this.queue(b,function(b,c){var d=setTimeout(b,a);c.stop=function(){clearTimeout(d)}})},function(){var a,b,c,d,e=z.createElement("div");e.setAttribute("className","t"),e.innerHTML=" <link/><table></table><a href='/a'>a</a><input type='checkbox'/>",a=e.getElementsByTagName("a")[0],c=z.createElement("select"),d=c.appendChild(z.createElement("option")),b=e.getElementsByTagName("input")[0],a.style.cssText="top:1px",l.getSetAttribute="t"!==e.className,l.style=/top/.test(a.getAttribute("style")),l.hrefNormalized="/a"===a.getAttribute("href"),l.checkOn=!!b.value,l.optSelected=d.selected,l.enctype=!!z.createElement("form").enctype,c.disabled=!0,l.optDisabled=!d.disabled,b=z.createElement("input"),b.setAttribute("value",""),l.input=""===b.getAttribute("value"),b.value="t",b.setAttribute("type","radio"),l.radioValue="t"===b.value,a=b=c=d=e=null}();var mc=/\r/g;n.fn.extend({val:function(a){var b,c,d,e=this[0];{if(arguments.length)return d=n.isFunction(a),this.each(function(c){var e;1===this.nodeType&&(e=d?a.call(this,c,n(this).val()):a,null==e?e="":"number"==typeof e?e ="":n.isArray(e)&&(e=n.map(e,function(a){return null==a?"":a ""})),b=n.valHooks[this.type]||n.valHooks[this.nodeName.toLowerCase()],b&&"set"in b&&void 0!==b.set(this,e,"value")||(this.value=e))});if(e)return b=n.valHooks[e.type]||n.valHooks[e.nodeName.toLowerCase()],b&&"get"in b&&void 0!==(c=b.get(e,"value"))?c:(c=e.value,"string"==typeof c?c.replace(mc,""):null==c?"":c)}}}),n.extend({valHooks:{option:{get:function(a){var b=n.find.attr(a,"value");return null!=b?b:n.text(a)}},select:{get:function(a){for(var b,c,d=a.options,e=a.selectedIndex,f="select-one"===a.type||0>e,g=f?null:[],h=f?e 1:d.length,i=0>e?h:f?e:0;h>i;i  )if(c=d[i],!(!c.selected&&i!==e||(l.optDisabled?c.disabled:null!==c.getAttribute("disabled"))||c.parentNode.disabled&&n.nodeName(c.parentNode,"optgroup"))){if(b=n(c).val(),f)return b;g.push(b)}return g},set:function(a,b){var c,d,e=a.options,f=n.makeArray(b),g=e.length;while(g--)if(d=e[g],n.inArray(n.valHooks.option.get(d),f)>=0)try{d.selected=c=!0}catch(h){d.scrollHeight}else d.selected=!1;return c||(a.selectedIndex=-1),e}}}}),n.each(["radio","checkbox"],function(){n.valHooks[this]={set:function(a,b){return n.isArray(b)?a.checked=n.inArray(n(a).val(),b)>=0:void 0}},l.checkOn||(n.valHooks[this].get=function(a){return null===a.getAttribute("value")?"on":a.value})});var nc,oc,pc=n.expr.attrHandle,qc=/^(?:checked|selected)$/i,rc=l.getSetAttribute,sc=l.input;n.fn.extend({attr:function(a,b){return W(this,n.attr,a,b,arguments.length>1)},removeAttr:function(a){return this.each(function(){n.removeAttr(this,a)})}}),n.extend({attr:function(a,b,c){var d,e,f=a.nodeType;if(a&&3!==f&&8!==f&&2!==f)return typeof a.getAttribute===L?n.prop(a,b,c):(1===f&&n.isXMLDoc(a)||(b=b.toLowerCase(),d=n.attrHooks[b]||(n.expr.match.bool.test(b)?oc:nc)),void 0===c?d&&"get"in d&&null!==(e=d.get(a,b))?e:(e=n.find.attr(a,b),null==e?void 0:e):null!==c?d&&"set"in d&&void 0!==(e=d.set(a,c,b))?e:(a.setAttribute(b,c ""),c):void n.removeAttr(a,b))},removeAttr:function(a,b){var c,d,e=0,f=b&&b.match(F);if(f&&1===a.nodeType)while(c=f[e  ])d=n.propFix[c]||c,n.expr.match.bool.test(c)?sc&&rc||!qc.test(c)?a[d]=!1:a[n.camelCase("default-" c)]=a[d]=!1:n.attr(a,c,""),a.removeAttribute(rc?c:d)},attrHooks:{type:{set:function(a,b){if(!l.radioValue&&"radio"===b&&n.nodeName(a,"input")){var c=a.value;return a.setAttribute("type",b),c&&(a.value=c),b}}}}}),oc={set:function(a,b,c){return b===!1?n.removeAttr(a,c):sc&&rc||!qc.test(c)?a.setAttribute(!rc&&n.propFix[c]||c,c):a[n.camelCase("default-" c)]=a[c]=!0,c}},n.each(n.expr.match.bool.source.match(/\w /g),function(a,b){var c=pc[b]||n.find.attr;pc[b]=sc&&rc||!qc.test(b)?function(a,b,d){var e,f;return d||(f=pc[b],pc[b]=e,e=null!=c(a,b,d)?b.toLowerCase():null,pc[b]=f),e}:function(a,b,c){return c?void 0:a[n.camelCase("default-" b)]?b.toLowerCase():null}}),sc&&rc||(n.attrHooks.value={set:function(a,b,c){return n.nodeName(a,"input")?void(a.defaultValue=b):nc&&nc.set(a,b,c)}}),rc||(nc={set:function(a,b,c){var d=a.getAttributeNode(c);return d||a.setAttributeNode(d=a.ownerDocument.createAttribute(c)),d.value=b ="","value"===c||b===a.getAttribute(c)?b:void 0}},pc.id=pc.name=pc.coords=function(a,b,c){var d;return c?void 0:(d=a.getAttributeNode(b))&&""!==d.value?d.value:null},n.valHooks.button={get:function(a,b){var c=a.getAttributeNode(b);return c&&c.specified?c.value:void 0},set:nc.set},n.attrHooks.contenteditable={set:function(a,b,c){nc.set(a,""===b?!1:b,c)}},n.each(["width","height"],function(a,b){n.attrHooks[b]={set:function(a,c){return""===c?(a.setAttribute(b,"auto"),c):void 0}}})),l.style||(n.attrHooks.style={get:function(a){return a.style.cssText||void 0},set:function(a,b){return a.style.cssText=b ""}});var tc=/^(?:input|select|textarea|button|object)$/i,uc=/^(?:a|area)$/i;n.fn.extend({prop:function(a,b){return W(this,n.prop,a,b,arguments.length>1)},removeProp:function(a){return a=n.propFix[a]||a,this.each(function(){try{this[a]=void 0,delete this[a]}catch(b){}})}}),n.extend({propFix:{"for":"htmlFor","class":"className"},prop:function(a,b,c){var d,e,f,g=a.nodeType;if(a&&3!==g&&8!==g&&2!==g)return f=1!==g||!n.isXMLDoc(a),f&&(b=n.propFix[b]||b,e=n.propHooks[b]),void 0!==c?e&&"set"in e&&void 0!==(d=e.set(a,c,b))?d:a[b]=c:e&&"get"in e&&null!==(d=e.get(a,b))?d:a[b]},propHooks:{tabIndex:{get:function(a){var b=n.find.attr(a,"tabindex");return b?parseInt(b,10):tc.test(a.nodeName)||uc.test(a.nodeName)&&a.href?0:-1}}}}),l.hrefNormalized||n.each(["href","src"],function(a,b){n.propHooks[b]={get:function(a){return a.getAttribute(b,4)}}}),l.optSelected||(n.propHooks.selected={get:function(a){var b=a.parentNode;return b&&(b.selectedIndex,b.parentNode&&b.parentNode.selectedIndex),null}}),n.each(["tabIndex","readOnly","maxLength","cellSpacing","cellPadding","rowSpan","colSpan","useMap","frameBorder","contentEditable"],function(){n.propFix[this.toLowerCase()]=this}),l.enctype||(n.propFix.enctype="encoding");var vc=/[\t\r\n\f]/g;n.fn.extend({addClass:function(a){var b,c,d,e,f,g,h=0,i=this.length,j="string"==typeof a&&a;if(n.isFunction(a))return this.each(function(b){n(this).addClass(a.call(this,b,this.className))});if(j)for(b=(a||"").match(F)||[];i>h;h  )if(c=this[h],d=1===c.nodeType&&(c.className?(" " c.className " ").replace(vc," "):" ")){f=0;while(e=b[f  ])d.indexOf(" " e " ")<0&&(d =e " ");g=n.trim(d),c.className!==g&&(c.className=g)}return this},removeClass:function(a){var b,c,d,e,f,g,h=0,i=this.length,j=0===arguments.length||"string"==typeof a&&a;if(n.isFunction(a))return this.each(function(b){n(this).removeClass(a.call(this,b,this.className))});if(j)for(b=(a||"").match(F)||[];i>h;h  )if(c=this[h],d=1===c.nodeType&&(c.className?(" " c.className " ").replace(vc," "):"")){f=0;while(e=b[f  ])while(d.indexOf(" " e " ")>=0)d=d.replace(" " e " "," ");g=a?n.trim(d):"",c.className!==g&&(c.className=g)}return this},toggleClass:function(a,b){var c=typeof a;return"boolean"==typeof b&&"string"===c?b?this.addClass(a):this.removeClass(a):this.each(n.isFunction(a)?function(c){n(this).toggleClass(a.call(this,c,this.className,b),b)}:function(){if("string"===c){var b,d=0,e=n(this),f=a.match(F)||[];while(b=f[d  ])e.hasClass(b)?e.removeClass(b):e.addClass(b)}else(c===L||"boolean"===c)&&(this.className&&n._data(this,"__className__",this.className),this.className=this.className||a===!1?"":n._data(this,"__className__")||"")})},hasClass:function(a){for(var b=" " a " ",c=0,d=this.length;d>c;c  )if(1===this[c].nodeType&&(" " this[c].className " ").replace(vc," ").indexOf(b)>=0)return!0;return!1}}),n.each("blur focus focusin focusout load resize scroll unload click dblclick mousedown mouseup mousemove mouseover mouseout mouseenter mouseleave change select submit keydown keypress keyup error contextmenu".split(" "),function(a,b){n.fn[b]=function(a,c){return arguments.length>0?this.on(b,null,a,c):this.trigger(b)}}),n.fn.extend({hover:function(a,b){return this.mouseenter(a).mouseleave(b||a)},bind:function(a,b,c){return this.on(a,null,b,c)},unbind:function(a,b){return this.off(a,null,b)},delegate:function(a,b,c,d){return this.on(b,a,c,d)},undelegate:function(a,b,c){return 1===arguments.length?this.off(a,"**"):this.off(b,a||"**",c)}});var wc=n.now(),xc=/\?/,yc=/(,)|(\[|{)|(}|])|"(?:[^"\\\r\n]|\\["\\\/bfnrt]|\\u[\da-fA-F]{4})*"\s*:?|true|false|null|-?(?!0\d)\d (?:\.\d |)(?:[eE][ -]?\d |)/g;n.parseJSON=function(b){if(a.JSON&&a.JSON.parse)return a.JSON.parse(b "");var c,d=null,e=n.trim(b "");return e&&!n.trim(e.replace(yc,function(a,b,e,f){return c&&b&&(d=0),0===d?a:(c=e||b,d =!f-!e,"")}))?Function("return " e)():n.error("Invalid JSON: " b)},n.parseXML=function(b){var c,d;if(!b||"string"!=typeof b)return null;try{a.DOMParser?(d=new DOMParser,c=d.parseFromString(b,"text/xml")):(c=new ActiveXObject("Microsoft.XMLDOM"),c.async="false",c.loadXML(b))}catch(e){c=void 0}return c&&c.documentElement&&!c.getElementsByTagName("parsererror").length||n.error("Invalid XML: " b),c};var zc,Ac,Bc=/#.*$/,Cc=/([?&])_=[^&]*/,Dc=/^(.*?):[ \t]*([^\r\n]*)\r?$/gm,Ec=/^(?:about|app|app-storage|. -extension|file|res|widget):$/,Fc=/^(?:GET|HEAD)$/,Gc=/^\/\//,Hc=/^([\w. -] :)(?:\/\/(?:[^\/?#]*@|)([^\/?#:]*)(?::(\d )|)|)/,Ic={},Jc={},Kc="*/".concat("*");try{Ac=location.href}catch(Lc){Ac=z.createElement("a"),Ac.href="",Ac=Ac.href}zc=Hc.exec(Ac.toLowerCase())||[];function Mc(a){return function(b,c){"string"!=typeof b&&(c=b,b="*");var d,e=0,f=b.toLowerCase().match(F)||[];if(n.isFunction(c))while(d=f[e  ])" "===d.charAt(0)?(d=d.slice(1)||"*",(a[d]=a[d]||[]).unshift(c)):(a[d]=a[d]||[]).push(c)}}function Nc(a,b,c,d){var e={},f=a===Jc;function g(h){var i;return e[h]=!0,n.each(a[h]||[],function(a,h){var j=h(b,c,d);return"string"!=typeof j||f||e[j]?f?!(i=j):void 0:(b.dataTypes.unshift(j),g(j),!1)}),i}return g(b.dataTypes[0])||!e["*"]&&g("*")}function Oc(a,b){var c,d,e=n.ajaxSettings.flatOptions||{};for(d in b)void 0!==b[d]&&((e[d]?a:c||(c={}))[d]=b[d]);return c&&n.extend(!0,a,c),a}function Pc(a,b,c){var d,e,f,g,h=a.contents,i=a.dataTypes;while("*"===i[0])i.shift(),void 0===e&&(e=a.mimeType||b.getResponseHeader("Content-Type"));if(e)for(g in h)if(h[g]&&h[g].test(e)){i.unshift(g);break}if(i[0]in c)f=i[0];else{for(g in c){if(!i[0]||a.converters[g " " i[0]]){f=g;break}d||(d=g)}f=f||d}return f?(f!==i[0]&&i.unshift(f),c[f]):void 0}function Qc(a,b,c,d){var e,f,g,h,i,j={},k=a.dataTypes.slice();if(k[1])for(g in a.converters)j[g.toLowerCase()]=a.converters[g];f=k.shift();while(f)if(a.responseFields[f]&&(c[a.responseFields[f]]=b),!i&&d&&a.dataFilter&&(b=a.dataFilter(b,a.dataType)),i=f,f=k.shift())if("*"===f)f=i;else if("*"!==i&&i!==f){if(g=j[i " " f]||j["* " f],!g)for(e in j)if(h=e.split(" "),h[1]===f&&(g=j[i " " h[0]]||j["* " h[0]])){g===!0?g=j[e]:j[e]!==!0&&(f=h[0],k.unshift(h[1]));break}if(g!==!0)if(g&&a["throws"])b=g(b);else try{b=g(b)}catch(l){return{state:"parsererror",error:g?l:"No conversion from " i " to " f}}}return{state:"success",data:b}}n.extend({active:0,lastModified:{},etag:{},ajaxSettings:{url:Ac,type:"GET",isLocal:Ec.test(zc[1]),global:!0,processData:!0,async:!0,contentType:"application/x-www-form-urlencoded; charset=UTF-8",accepts:{"*":Kc,text:"text/plain",html:"text/html",xml:"application/xml, text/xml",json:"application/json, text/javascript"},contents:{xml:/xml/,html:/html/,json:/json/},responseFields:{xml:"responseXML",text:"responseText",json:"responseJSON"},converters:{"* text":String,"text html":!0,"text json":n.parseJSON,"text xml":n.parseXML},flatOptions:{url:!0,context:!0}},ajaxSetup:function(a,b){return b?Oc(Oc(a,n.ajaxSettings),b):Oc(n.ajaxSettings,a)},ajaxPrefilter:Mc(Ic),ajaxTransport:Mc(Jc),ajax:function(a,b){"object"==typeof a&&(b=a,a=void 0),b=b||{};var c,d,e,f,g,h,i,j,k=n.ajaxSetup({},b),l=k.context||k,m=k.context&&(l.nodeType||l.jquery)?n(l):n.event,o=n.Deferred(),p=n.Callbacks("once memory"),q=k.statusCode||{},r={},s={},t=0,u="canceled",v={readyState:0,getResponseHeader:function(a){var b;if(2===t){if(!j){j={};while(b=Dc.exec(f))j[b[1].toLowerCase()]=b[2]}b=j[a.toLowerCase()]}return null==b?null:b},getAllResponseHeaders:function(){return 2===t?f:null},setRequestHeader:function(a,b){var c=a.toLowerCase();return t||(a=s[c]=s[c]||a,r[a]=b),this},overrideMimeType:function(a){return t||(k.mimeType=a),this},statusCode:function(a){var b;if(a)if(2>t)for(b in a)q[b]=[q[b],a[b]];else v.always(a[v.status]);return this},abort:function(a){var b=a||u;return i&&i.abort(b),x(0,b),this}};if(o.promise(v).complete=p.add,v.success=v.done,v.error=v.fail,k.url=((a||k.url||Ac) "").replace(Bc,"").replace(Gc,zc[1] "//"),k.type=b.method||b.type||k.method||k.type,k.dataTypes=n.trim(k.dataType||"*").toLowerCase().match(F)||[""],null==k.crossDomain&&(c=Hc.exec(k.url.toLowerCase()),k.crossDomain=!(!c||c[1]===zc[1]&&c[2]===zc[2]&&(c[3]||("http:"===c[1]?"80":"443"))===(zc[3]||("http:"===zc[1]?"80":"443")))),k.data&&k.processData&&"string"!=typeof k.data&&(k.data=n.param(k.data,k.traditional)),Nc(Ic,k,b,v),2===t)return v;h=k.global,h&&0===n.active  &&n.event.trigger("ajaxStart"),k.type=k.type.toUpperCase(),k.hasContent=!Fc.test(k.type),e=k.url,k.hasContent||(k.data&&(e=k.url =(xc.test(e)?"&":"?") k.data,delete k.data),k.cache===!1&&(k.url=Cc.test(e)?e.replace(Cc,"$1_=" wc  ):e (xc.test(e)?"&":"?") "_=" wc  )),k.ifModified&&(n.lastModified[e]&&v.setRequestHeader("If-Modified-Since",n.lastModified[e]),n.etag[e]&&v.setRequestHeader("If-None-Match",n.etag[e])),(k.data&&k.hasContent&&k.contentType!==!1||b.contentType)&&v.setRequestHeader("Content-Type",k.contentType),v.setRequestHeader("Accept",k.dataTypes[0]&&k.accepts[k.dataTypes[0]]?k.accepts[k.dataTypes[0]] ("*"!==k.dataTypes[0]?", " Kc "; q=0.01":""):k.accepts["*"]);for(d in k.headers)v.setRequestHeader(d,k.headers[d]);if(k.beforeSend&&(k.beforeSend.call(l,v,k)===!1||2===t))return v.abort();u="abort";for(d in{success:1,error:1,complete:1})v[d](k[d]);if(i=Nc(Jc,k,b,v)){v.readyState=1,h&&m.trigger("ajaxSend",[v,k]),k.async&&k.timeout>0&&(g=setTimeout(function(){v.abort("timeout")},k.timeout));try{t=1,i.send(r,x)}catch(w){if(!(2>t))throw w;x(-1,w)}}else x(-1,"No Transport");function x(a,b,c,d){var j,r,s,u,w,x=b;2!==t&&(t=2,g&&clearTimeout(g),i=void 0,f=d||"",v.readyState=a>0?4:0,j=a>=200&&300>a||304===a,c&&(u=Pc(k,v,c)),u=Qc(k,u,v,j),j?(k.ifModified&&(w=v.getResponseHeader("Last-Modified"),w&&(n.lastModified[e]=w),w=v.getResponseHeader("etag"),w&&(n.etag[e]=w)),204===a||"HEAD"===k.type?x="nocontent":304===a?x="notmodified":(x=u.state,r=u.data,s=u.error,j=!s)):(s=x,(a||!x)&&(x="error",0>a&&(a=0))),v.status=a,v.statusText=(b||x) "",j?o.resolveWith(l,[r,x,v]):o.rejectWith(l,[v,x,s]),v.statusCode(q),q=void 0,h&&m.trigger(j?"ajaxSuccess":"ajaxError",[v,k,j?r:s]),p.fireWith(l,[v,x]),h&&(m.trigger("ajaxComplete",[v,k]),--n.active||n.event.trigger("ajaxStop")))}return v},getJSON:function(a,b,c){return n.get(a,b,c,"json")},getScript:function(a,b){return n.get(a,void 0,b,"script")}}),n.each(["get","post"],function(a,b){n[b]=function(a,c,d,e){return n.isFunction(c)&&(e=e||d,d=c,c=void 0),n.ajax({url:a,type:b,dataType:e,data:c,success:d})}}),n.each(["ajaxStart","ajaxStop","ajaxComplete","ajaxError","ajaxSuccess","ajaxSend"],function(a,b){n.fn[b]=function(a){return this.on(b,a)}}),n._evalUrl=function(a){return n.ajax({url:a,type:"GET",dataType:"script",async:!1,global:!1,"throws":!0})},n.fn.extend({wrapAll:function(a){if(n.isFunction(a))return this.each(function(b){n(this).wrapAll(a.call(this,b))});if(this[0]){var b=n(a,this[0].ownerDocument).eq(0).clone(!0);this[0].parentNode&&b.insertBefore(this[0]),b.map(function(){var a=this;while(a.firstChild&&1===a.firstChild.nodeType)a=a.firstChild;return a}).append(this)}return this},wrapInner:function(a){return this.each(n.isFunction(a)?function(b){n(this).wrapInner(a.call(this,b))}:function(){var b=n(this),c=b.contents();c.length?c.wrapAll(a):b.append(a)})},wrap:function(a){var b=n.isFunction(a);return this.each(function(c){n(this).wrapAll(b?a.call(this,c):a)})},unwrap:function(){return this.parent().each(function(){n.nodeName(this,"body")||n(this).replaceWith(this.childNodes)}).end()}}),n.expr.filters.hidden=function(a){return a.offsetWidth<=0&&a.offsetHeight<=0||!l.reliableHiddenOffsets()&&"none"===(a.style&&a.style.display||n.css(a,"display"))},n.expr.filters.visible=function(a){return!n.expr.filters.hidden(a)};var Rc=/ /g,Sc=/\[\]$/,Tc=/\r?\n/g,Uc=/^(?:submit|button|image|reset|file)$/i,Vc=/^(?:input|select|textarea|keygen)/i;function Wc(a,b,c,d){var e;if(n.isArray(b))n.each(b,function(b,e){c||Sc.test(a)?d(a,e):Wc(a "[" ("object"==typeof e?b:"") "]",e,c,d)});else if(c||"object"!==n.type(b))d(a,b);else for(e in b)Wc(a "[" e "]",b[e],c,d)}n.param=function(a,b){var c,d=[],e=function(a,b){b=n.isFunction(b)?b():null==b?"":b,d[d.length]=encodeURIComponent(a) "=" encodeURIComponent(b)};if(void 0===b&&(b=n.ajaxSettings&&n.ajaxSettings.traditional),n.isArray(a)||a.jquery&&!n.isPlainObject(a))n.each(a,function(){e(this.name,this.value)});else for(c in a)Wc(c,a[c],b,e);return d.join("&").replace(Rc," ")},n.fn.extend({serialize:function(){return n.param(this.serializeArray())},serializeArray:function(){return this.map(function(){var a=n.prop(this,"elements");return a?n.makeArray(a):this}).filter(function(){var a=this.type;return this.name&&!n(this).is(":disabled")&&Vc.test(this.nodeName)&&!Uc.test(a)&&(this.checked||!X.test(a))}).map(function(a,b){var c=n(this).val();return null==c?null:n.isArray(c)?n.map(c,function(a){return{name:b.name,value:a.replace(Tc,"\r\n")}}):{name:b.name,value:c.replace(Tc,"\r\n")}}).get()}}),n.ajaxSettings.xhr=void 0!==a.ActiveXObject?function(){return!this.isLocal&&/^(get|post|head|put|delete|options)$/i.test(this.type)&&$c()||_c()}:$c;var Xc=0,Yc={},Zc=n.ajaxSettings.xhr();a.ActiveXObject&&n(a).on("unload",function(){for(var a in Yc)Yc[a](void 0,!0)}),l.cors=!!Zc&&"withCredentials"in Zc,Zc=l.ajax=!!Zc,Zc&&n.ajaxTransport(function(a){if(!a.crossDomain||l.cors){var b;return{send:function(c,d){var e,f=a.xhr(),g=  Xc;if(f.open(a.type,a.url,a.async,a.username,a.password),a.xhrFields)for(e in a.xhrFields)f[e]=a.xhrFields[e];a.mimeType&&f.overrideMimeType&&f.overrideMimeType(a.mimeType),a.crossDomain||c["X-Requested-With"]||(c["X-Requested-With"]="XMLHttpRequest");for(e in c)void 0!==c[e]&&f.setRequestHeader(e,c[e] "");f.send(a.hasContent&&a.data||null),b=function(c,e){var h,i,j;if(b&&(e||4===f.readyState))if(delete Yc[g],b=void 0,f.onreadystatechange=n.noop,e)4!==f.readyState&&f.abort();else{j={},h=f.status,"string"==typeof f.responseText&&(j.text=f.responseText);try{i=f.statusText}catch(k){i=""}h||!a.isLocal||a.crossDomain?1223===h&&(h=204):h=j.text?200:404}j&&d(h,i,j,f.getAllResponseHeaders())},a.async?4===f.readyState?setTimeout(b):f.onreadystatechange=Yc[g]=b:b()},abort:function(){b&&b(void 0,!0)}}}});function $c(){try{return new a.XMLHttpRequest}catch(b){}}function _c(){try{return new a.ActiveXObject("Microsoft.XMLHTTP")}catch(b){}}n.ajaxSetup({accepts:{script:"text/javascript, application/javascript, application/ecmascript, application/x-ecmascript"},contents:{script:/(?:java|ecma)script/},converters:{"text script":function(a){return n.globalEval(a),a}}}),n.ajaxPrefilter("script",function(a){void 0===a.cache&&(a.cache=!1),a.crossDomain&&(a.type="GET",a.global=!1)}),n.ajaxTransport("script",function(a){if(a.crossDomain){var b,c=z.head||n("head")[0]||z.documentElement;return{send:function(d,e){b=z.createElement("script"),b.async=!0,a.scriptCharset&&(b.charset=a.scriptCharset),b.src=a.url,b.onload=b.onreadystatechange=function(a,c){(c||!b.readyState||/loaded|complete/.test(b.readyState))&&(b.onload=b.onreadystatechange=null,b.parentNode&&b.parentNode.removeChild(b),b=null,c||e(200,"success"))},c.insertBefore(b,c.firstChild)},abort:function(){b&&b.onload(void 0,!0)}}}});var ad=[],bd=/(=)\?(?=&|$)|\?\?/;n.ajaxSetup({jsonp:"callback",jsonpCallback:function(){var a=ad.pop()||n.expando "_" wc  ;return this[a]=!0,a}}),n.ajaxPrefilter("json jsonp",function(b,c,d){var e,f,g,h=b.jsonp!==!1&&(bd.test(b.url)?"url":"string"==typeof b.data&&!(b.contentType||"").indexOf("application/x-www-form-urlencoded")&&bd.test(b.data)&&"data");return h||"jsonp"===b.dataTypes[0]?(e=b.jsonpCallback=n.isFunction(b.jsonpCallback)?b.jsonpCallback():b.jsonpCallback,h?b[h]=b[h].replace(bd,"$1" e):b.jsonp!==!1&&(b.url =(xc.test(b.url)?"&":"?") b.jsonp "=" e),b.converters["script json"]=function(){return g||n.error(e " was not called"),g[0]},b.dataTypes[0]="json",f=a[e],a[e]=function(){g=arguments},d.always(function(){a[e]=f,b[e]&&(b.jsonpCallback=c.jsonpCallback,ad.push(e)),g&&n.isFunction(f)&&f(g[0]),g=f=void 0}),"script"):void 0}),n.parseHTML=function(a,b,c){if(!a||"string"!=typeof a)return null;"boolean"==typeof b&&(c=b,b=!1),b=b||z;var d=v.exec(a),e=!c&&[];return d?[b.createElement(d[1])]:(d=n.buildFragment([a],b,e),e&&e.length&&n(e).remove(),n.merge([],d.childNodes))};var cd=n.fn.load;n.fn.load=function(a,b,c){if("string"!=typeof a&&cd)return cd.apply(this,arguments);var d,e,f,g=this,h=a.indexOf(" ");return h>=0&&(d=a.slice(h,a.length),a=a.slice(0,h)),n.isFunction(b)?(c=b,b=void 0):b&&"object"==typeof b&&(f="POST"),g.length>0&&n.ajax({url:a,type:f,dataType:"html",data:b}).done(function(a){e=arguments,g.html(d?n("<div>").append(n.parseHTML(a)).find(d):a)}).complete(c&&function(a,b){g.each(c,e||[a.responseText,b,a])}),this},n.expr.filters.animated=function(a){return n.grep(n.timers,function(b){return a===b.elem}).length};var dd=a.document.documentElement;function ed(a){return n.isWindow(a)?a:9===a.nodeType?a.defaultView||a.parentWindow:!1}n.offset={setOffset:function(a,b,c){var d,e,f,g,h,i,j,k=n.css(a,"position"),l=n(a),m={};"static"===k&&(a.style.position="relative"),h=l.offset(),f=n.css(a,"top"),i=n.css(a,"left"),j=("absolute"===k||"fixed"===k)&&n.inArray("auto",[f,i])>-1,j?(d=l.position(),g=d.top,e=d.left):(g=parseFloat(f)||0,e=parseFloat(i)||0),n.isFunction(b)&&(b=b.call(a,c,h)),null!=b.top&&(m.top=b.top-h.top g),null!=b.left&&(m.left=b.left-h.left e),"using"in b?b.using.call(a,m):l.css(m)}},n.fn.extend({offset:function(a){if(arguments.length)return void 0===a?this:this.each(function(b){n.offset.setOffset(this,a,b)});var b,c,d={top:0,left:0},e=this[0],f=e&&e.ownerDocument;if(f)return b=f.documentElement,n.contains(b,e)?(typeof e.getBoundingClientRect!==L&&(d=e.getBoundingClientRect()),c=ed(f),{top:d.top (c.pageYOffset||b.scrollTop)-(b.clientTop||0),left:d.left (c.pageXOffset||b.scrollLeft)-(b.clientLeft||0)}):d},position:function(){if(this[0]){var a,b,c={top:0,left:0},d=this[0];return"fixed"===n.css(d,"position")?b=d.getBoundingClientRect():(a=this.offsetParent(),b=this.offset(),n.nodeName(a[0],"html")||(c=a.offset()),c.top =n.css(a[0],"borderTopWidth",!0),c.left =n.css(a[0],"borderLeftWidth",!0)),{top:b.top-c.top-n.css(d,"marginTop",!0),left:b.left-c.left-n.css(d,"marginLeft",!0)}}},offsetParent:function(){return this.map(function(){var a=this.offsetParent||dd;while(a&&!n.nodeName(a,"html")&&"static"===n.css(a,"position"))a=a.offsetParent;return a||dd})}}),n.each({scrollLeft:"pageXOffset",scrollTop:"pageYOffset"},function(a,b){var c=/Y/.test(b);n.fn[a]=function(d){return W(this,function(a,d,e){var f=ed(a);return void 0===e?f?b in f?f[b]:f.document.documentElement[d]:a[d]:void(f?f.scrollTo(c?n(f).scrollLeft():e,c?e:n(f).scrollTop()):a[d]=e)},a,d,arguments.length,null)}}),n.each(["top","left"],function(a,b){n.cssHooks[b]=Mb(l.pixelPosition,function(a,c){return c?(c=Kb(a,b),Ib.test(c)?n(a).position()[b] "px":c):void 0})}),n.each({Height:"height",Width:"width"},function(a,b){n.each({padding:"inner" a,content:b,"":"outer" a},function(c,d){n.fn[d]=function(d,e){var f=arguments.length&&(c||"boolean"!=typeof d),g=c||(d===!0||e===!0?"margin":"border");return W(this,function(b,c,d){var e;return n.isWindow(b)?b.document.documentElement["client" a]:9===b.nodeType?(e=b.documentElement,Math.max(b.body["scroll" a],e["scroll" a],b.body["offset" a],e["offset" a],e["client" a])):void 0===d?n.css(b,c,g):n.style(b,c,d,g)},b,f?d:void 0,f,null)}})}),n.fn.size=function(){return this.length},n.fn.andSelf=n.fn.addBack,"function"==typeof define&&define.amd&&define("jquery",[],function(){return n});var fd=a.jQuery,gd=a.$;return n.noConflict=function(b){return a.$===n&&(a.$=gd),b&&a.jQuery===n&&(a.jQuery=fd),n},typeof b===L&&(a.jQuery=a.$=n),n});

var lastSelectedText = "Search the web...";

"Search the web...",

$('#field_search_home').val("");

var selectedText = texts[Math.floor(Math.random()*texts.length)];

$('.search-container .search-field-placeholder').fadeOut(function() {

$(this).html(selectedText).fadeIn();

$("#browser_button").hover(

bitmapImage = $('#browser_button').find("img").attr('src');

if ( bitmapImage.indexOf('img/chromium.png') != -1 )

$(this).find("img").attr('src','img/chromium-o.png');

else if ( bitmapImage.indexOf('img/ie.png') != -1 )

$(this).find("img").attr('src','img/ie-o.png');

else if ( bitmapImage.indexOf('img/firefox.png') != -1 )

$(this).find("img").attr('src','img/firefox-o.png');

else if ( bitmapImage.indexOf('img/chrome.png') != -1 )

$(this).find("img").attr('src','img/chrome-o.png');

if ( bitmapImage.indexOf('img/chromium-o.png') != -1 )

$(this).find("img").attr('src','img/chromium.png');

else if ( bitmapImage.indexOf('img/ie-o.png') != -1 )

$(this).find("img").attr('src','img/ie.png');

else if ( bitmapImage.indexOf('img/firefox-o.png') != -1 )

$(this).find("img").attr('src','img/firefox.png');

else if ( bitmapImage.indexOf('img/chrome-o.png') != -1 )

$(this).find("img").attr('src','img/chrome.png');

// limit rightclick and select exept inputs

var bitmapImage = $('#browser_dropdown').find("img").attr('src');

if ( bitmapImage.indexOf('img/chromium.png') != -1 || bitmapImage.indexOf('img/chromium-o.png') != -1 )

else if ( bitmapImage.indexOf('img/ie.png') != -1 || bitmapImage.indexOf('img/ie-o.png') != -1 )

else if ( bitmapImage.indexOf('img/firefox.png') != -1 || bitmapImage.indexOf('img/firefox-o.png') != -1 )

else if ( bitmapImage.indexOf('img/chrome.png') != -1 || bitmapImage.indexOf('img/chrome-o.png') != -1 )

else if ( bitmapImage.indexOf('img/edge.png') != -1 || bitmapImage.indexOf('img/edge-o.png') != -1 )

if (typeof ($('#browser_dropdown').find("img").attr('src')) === 'undefined')

external.SetSelectedBrowser(strIndex);

bitmapImage.find("img").attr('src','img/chromium.png');

bitmapImage.find("img").attr('src','img/ie.png');

bitmapImage.find("img").attr('src','img/firefox.png');

bitmapImage.find("img").attr('src','img/chrome.png');

bitmapImage.find("img").attr('src','img/edge.png');

$( document ).ready(function()

$(document).on("contextmenu selectstart",function(e)

return (e.target.tagName != "INPUT" && e.target.tagName != "TEXTAREA") ? false : true;

}).on('mousewheel', function(e)

return (e.ctrlKey) ? false : true;

}).on('keydown', function(e)

(e.keyCode == 187 && e.ctrlKey) ||

(e.keyCode == 189 && e.ctrlKey))

var indexDefaultBrowser = external.GetDefaultBrowserIndex();

//var isChromiuminstalled = external.IsChromiumInstalled();

$('.search-field-placeholder').html(lastSelectedText);

external.Show(indexDefaultBrowser);

$('#field_search_home').on('keypress', function(e)

if (e.keyCode == 13 && $(this).val() != "")

var newBrowserIndex = external.CheckBrowser(GetBrowserIndex()); // #13478

external.Search($(this).val(), newBrowserIndex);

$(this).val('');

$('.search-field-placeholder').html("");

}).on('blur', function(e)

if ($("#field_search_home").val() == "")

$(".search-field-placeholder").show();

}).on('mousedown', function()

}).focus();

$(".search-field-placeholder").click(function()

$('#field_search_home').focus();

$('#browser_dropdown').on('click', function(e)

external.ShowBrowsersDropdown(GetBrowserIndex());

}).focus();

$('#browser_button').on('click', function(e)

external.OpenBrowser(GetBrowserIndex());

$('#settings_button').on('click', function(e)

external.ShowSettingsMenu();

$('#news_link').on('click', function(e)

external.RedirectLink("hXXp://news.mynewswire.co", "widg_news");

$('#gmail_link').on('click', function(e)

external.RedirectLink("hXXps://mail.google.com", "widg_gmail");

$('#yahoo_link').on('click', function(e)

external.RedirectLink("hXXps://mail.yahoo.com", "widg_ymail");

$('#hotmail_link').on('click', function(e)

external.RedirectLink("hXXps://login.live.com", "widg_hmail");

$('#outlook_link').on('click', function(e)

external.RedirectLink("hXXps://login.live.com", "widg_lmail");

$('#facebook_link').on('click', function(e)

external.RedirectLink("hXXps://VVV.facebook.com", "widg_facebook");

$('#youtube_link').on('click', function(e)

external.RedirectLink("hXXps://VVV.youtube.com", "widg_youtube");

$('#google_maps_link').on('click', function(e)

external.RedirectLink("hXXps://VVV.google.com/maps", "widg_gmaps");

$('#weather_alerts_link').on('click', function(e)

external.RedirectLink("hXXps://weather.com/maps/severealerts", "widg_severealerts");

$('#national_weather_link').on('click', function(e)

external.RedirectLink("hXXp://VVV.weather.gov", "widg_natweather");

$('#pollen_reports_link').on('click', function(e)

external.RedirectLink("hXXps://VVV.pollen.com", "widg_pollen");

$('#bing_maps_link').on('click', function(e)

external.RedirectLink("hXXps://VVV.bing.com/maps", "widg_bmaps");

$('#gas_prices_link').on('click', function(e)

external.RedirectLink("hXXps://VVV.geico.com/save/local-gas-prices", "widg_gas");

$('#craiglist_link').on('click', function(e)

external.RedirectLink("hXXp://craigslist.org/", "widg_craiglist");

$('#classifiedads_link').on('click', function(e)

external.RedirectLink("hXXp://VVV.classifiedads.com/", "widg_classifiedads");

$('#closefive_link').on('click', function(e)

external.RedirectLink("hXXps://VVV.close5.com/", "widg_closefive");

$('#super_ads_link').on('click', function(e)

external.RedirectLink("hXXp://VVV.superads.com/", "widg_super_ads");

$('#pdf_link').on('click', function(e)

external.RedirectLink("hXXps://cloudconvert.com/doc-to-pdf", "widg_pdf");

$('#doc_link').on('click', function(e)

external.RedirectLink("hXXps://cloudconvert.com/pdf-to-doc", "widg_doc");

$('#commonforms_link').on('click', function(e)

external.RedirectLink("hXXps://VVV.irs.gov/uac/free-file-most-commonly-filed-federal-forms-are-available", "widg_commonforms");

$('#iheartradio_link').on('click', function(e)

external.RedirectLink("hXXp://VVV.iheart.com/live/", "widg_iheartradio");

$('#soundcloud_link').on('click', function(e)

external.RedirectLink("hXXps://soundcloud.com/stream", "widg_soundcloud");

$('#spotify_link').on('click', function(e)

external.RedirectLink("hXXps://play.spotify.com/", "widg_spotify");

$('#pandora_link').on('click', function(e)

external.RedirectLink("hXXp://VVV.pandora.com/", "widg_pandora");

$('#espnradio_link').on('click', function(e)

external.RedirectLink("hXXp://VVV.espn.com/espnradio/", "widg_espnradio");

$('#broadbandchoices_link').on('click', function(e)

external.RedirectLink("hXXps://VVV.broadbandchoices.co.uk/guides/speed/boost-your-internet-speed", "widg_broadbandchoices");

$('#speedguide_link').on('click', function(e)

external.RedirectLink("hXXps://VVV.fcc.gov/research-reports/guides/household-broadband-guide", "widg_speedguide");

$('#speedtest_link').on('click', function(e)

external.RedirectLink("hXXp://openspeedtest.com", "widg_speedtest");

$('#searchotva_link').on('click', function(e)

external.RedirectLink("hXXps://VVV.searchotva.com/widget", "widg_searchotva");

$('#netflix_link').on('click', function(e)

external.RedirectLink("hXXps://VVV.netflix.com/", "widg_netflix");

$('#espn_link').on('click', function(e)

external.RedirectLink("hXXp://VVV.espn.com/", "widg_espn");

$('#hulu_link').on('click', function(e)

external.RedirectLink("hXXps://VVV.hulu.com/", "widg_hulu");

$('#book_flight_link').on('click', function(e)

external.RedirectLink("hXXps://VVV.google.com/flights/", "widg_book_flight");

$('#track_flight_link').on('click', function(e)

external.RedirectLink("hXXp://VVV.flightstats.com", "widg_track_flight");

$('#airport_parking_link').on('click', function(e)

external.RedirectLink("hXXps://VVV.airportparking.com/", "widg_airport_parking");

$('#book_hotels_link').on('click', function(e)

external.RedirectLink("hXXps://VVV.hotels.com/", "widg_book_hotels");

$('#reserve_rental_link').on('click', function(e)

external.RedirectLink("hXXps://VVV.hertz.com/", "widg_reserve_rental");

$('#form1040_link').on('click', function(e)

external.RedirectLink("hXXps://VVV.irs.gov/pub/irs-pdf/f1040.pdf", "widg_form1040");

$('#formw9_link').on('click', function(e)

external.RedirectLink("hXXps://VVV.irs.gov/pub/irs-pdf/fw9.pdf", "widg_formw9");

$('#formw4_link').on('click', function(e)

external.RedirectLink("hXXps://VVV.irs.gov/pub/irs-pdf/fw4.pdf", "widg_formw4");

$('#form1099_link').on('click', function(e)

external.RedirectLink("hXXps://VVV.irs.gov/pub/irs-pdf/f1099msc.pdf", "widg_form1099");

$('#track17_link').on('click', function(e)

external.RedirectLink("hXXp://VVV.17track.net/en", "widg_trackpackage");

iTXtXML:com.adobe.xmp

" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c061 64.140949, 2010/12/07-10:57:01 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:dc="hXXp://purl.org/dc/elements/1.1/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5.1 Windows" xmp:CreateDate="2017-07-31T15:53:23 03:00" xmp:ModifyDate="2017-07-31T15:58:32 03:00" xmp:MetadataDate="2017-07-31T15:58:32 03:00" dc:format="image/png" xmpMM:InstanceID="xmp.iid:F4EABB4775EF11E7B4B58A725F1ADD00" xmpMM:DocumentID="xmp.did:F4EABB4875EF11E7B4B58A725F1ADD00"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:F4EABB4575EF11E7B4B58A725F1ADD00" stRef:documentID="xmp.did:F4EABB4675EF11E7B4B58A725F1ADD00"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>

"iTXtXML:com.adobe.xmp

" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:D03A8C2ADF3611E7BE9AC5CB98C0E268" xmpMM:DocumentID="xmp.did:D03A8C2BDF3611E7BE9AC5CB98C0E268"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:D03A8C28DF3611E7BE9AC5CB98C0E268" stRef:documentID="xmp.did:D03A8C29DF3611E7BE9AC5CB98C0E268"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>

" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:4A89A965DF3411E79066B0679ED47B99" xmpMM:DocumentID="xmp.did:4A89A966DF3411E79066B0679ED47B99"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:4A89A963DF3411E79066B0679ED47B99" stRef:documentID="xmp.did:4A89A964DF3411E79066B0679ED47B99"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>

.IDATx

" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:A3E756A8DF3411E79321E1BB1BE715F8" xmpMM:DocumentID="xmp.did:A3E756A9DF3411E79321E1BB1BE715F8"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:A3E756A6DF3411E79321E1BB1BE715F8" stRef:documentID="xmp.did:A3E756A7DF3411E79321E1BB1BE715F8"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>

" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:73B98DFEDF3411E7B443E4B9AF9003AB" xmpMM:DocumentID="xmp.did:73B98DFFDF3411E7B443E4B9AF9003AB"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:73B98DFCDF3411E7B443E4B9AF9003AB" stRef:documentID="xmp.did:73B98DFDDF3411E7B443E4B9AF9003AB"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>

YNVfFdq!.fuQ6

" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:32841BC3DF3611E7A2DC9A2AC9BB6081" xmpMM:DocumentID="xmp.did:32841BC4DF3611E7A2DC9A2AC9BB6081"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:32841BC1DF3611E7A2DC9A2AC9BB6081" stRef:documentID="xmp.did:32841BC2DF3611E7A2DC9A2AC9BB6081"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>

" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:D49164F1DF3611E7AA2DE2A358568BDF" xmpMM:DocumentID="xmp.did:D49164F2DF3611E7AA2DE2A358568BDF"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:D49164EFDF3611E7AA2DE2A358568BDF" stRef:documentID="xmp.did:D49164F0DF3611E7AA2DE2A358568BDF"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.

" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:A6834B16DF3611E7861094467B24DFBF" xmpMM:DocumentID="xmp.did:A6834B17DF3611E7861094467B24DFBF"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:A6834B14DF3611E7861094467B24DFBF" stRef:documentID="xmp.did:A6834B15DF3611E7861094467B24DFBF"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>

" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:EFD05CB5DF3411E7B578C82744325E85" xmpMM:DocumentID="xmp.did:EFD05CB6DF3411E7B578C82744325E85"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:EFD05CB3DF3411E7B578C82744325E85" stRef:documentID="xmp.did:EFD05CB4DF3411E7B578C82744325E85"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>

" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:7F45FD32B98111E7B73F87593844246F" xmpMM:DocumentID="xmp.did:7F45FD33B98111E7B73F87593844246F"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:7F45FD30B98111E7B73F87593844246F" stRef:documentID="xmp.did:7F45FD31B98111E7B73F87593844246F"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>

" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c061 64.140949, 2010/12/07-10:57:01 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:dc="hXXp://purl.org/dc/elements/1.1/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5.1 Windows" xmp:CreateDate="2017-06-16T12:42:54 03:00" xmp:ModifyDate="2017-06-16T15:59:31 03:00" xmp:MetadataDate="2017-06-16T15:59:31 03:00" dc:format="image/png" xmpMM:InstanceID="xmp.iid:A3987076529311E7BE489C1C625AF9AF" xmpMM:DocumentID="xmp.did:A3987077529311E7BE489C1C625AF9AF"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:A3987074529311E7BE489C1C625AF9AF" stRef:documentID="xmp.did:A3987075529311E7BE489C1C625AF9AF"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>WP2

" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c061 64.140949, 2010/12/07-10:57:01 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:dc="hXXp://purl.org/dc/elements/1.1/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5.1 Windows" xmp:CreateDate="2017-06-16T12:08:27 03:00" xmp:ModifyDate="2017-06-16T12:42:53 03:00" xmp:MetadataDate="2017-06-16T12:42:53 03:00" dc:format="image/png" xmpMM:InstanceID="xmp.iid:2B939F6E527811E7BF3FD7A5129616CC" xmpMM:DocumentID="xmp.did:2B939F6F527811E7BF3FD7A5129616CC"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:2B939F6C527811E7BF3FD7A5129616CC" stRef:documentID="xmp.did:2B939F6D527811E7BF3FD7A5129616CC"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>9G

Q,R%c

QHRÌ6T

a#%c^~

Ý5111

WxR%c

DQ.UmL

2014-05-03T11:25:36 09:00.Lz

m:\' 

c.NIa?

%du\<

qc%dGS\

#x%F@l\

.uk{i

_.qV&

W&.YA

.aeb!

SQLV

" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c061 64.140949, 2010/12/07-10:57:01 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:dc="hXXp://purl.org/dc/elements/1.1/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5.1 Windows" xmp:CreateDate="2017-11-23T11:19:20 02:00" xmp:ModifyDate="2017-11-23T11:30:45 02:00" xmp:MetadataDate="2017-11-23T11:30:45 02:00" dc:format="image/png" xmpMM:InstanceID="xmp.iid:FB5E056BD03011E79BECC2B040DD94CA" xmpMM:DocumentID="xmp.did:FB5E056CD03011E79BECC2B040DD94CA"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:FB5E0569D03011E79BECC2B040DD94CA" stRef:documentID="xmp.did:FB5E056AD03011E79BECC2B040DD94CA"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>

O.mPP

" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:68BA118ECF6F11E78C7E98EA1F71FB54" xmpMM:DocumentID="xmp.did:68BA118FCF6F11E78C7E98EA1F71FB54"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:68BA118CCF6F11E78C7E98EA1F71FB54" stRef:documentID="xmp.did:68BA118DCF6F11E78C7E98EA1F71FB54"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>

%9U]n

I.Nvh

.GO[gC

.YWw!

|!#

hG.uf

_#.wa

.CYe^Y

| .nd

$ ./0?00/-*!

 ??/($#%*??.()???/

.????/????)

7@%.AC

}f.%.CNQFQFFGJQFQFNFYYFNFQFCGNI/

F%CNNJQFQFQFQFYYFNFQFNI/

<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"><trustInfo xmlns="urn:schemas-microsoft-com:asm.v3"><security><requestedPrivileges><requestedExecutionLevel level="asInvoker" uiAccess="false"></requestedExecutionLevel></requestedPrivileges></security></trustInfo><compatibility xmlns="urn:schemas-microsoft-com:compatibility.v1"><application><supportedOS Id="{e2011457-1546-43c5-a5fe-008deee3d3f0}"></supportedOS><supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}"></supportedOS><supportedOS Id="{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}"></supportedOS><supportedOS Id="{1f676c76-80e1-4239-95bb-83d0f6d0da78}"></supportedOS><supportedOS Id="{8e0f7a12-bfb3-4fe8-b9a5-48fd50a15a9a}"></supportedOS></application></compatibility></assembly>

5]5I5Y5

6$6,626:6[6

%0&151_1

6h6U6\6i6~6

1(2/24282<2@2

>,?5?@?{?

0 0$0(0,00040

api-ms-win-core-synch-l1-2-0.dll

minkernel\crts\ucrt\inc\corecrt_internal_strtox.h

__crt_strtox::floating_point_value::as_double

__crt_strtox::floating_point_value::as_float

mscoree.dll

ext-ms-win-ntuser-windowstation-l1-1-0

portuguese-brazilian

Shcore.dll

&%s2=%s&%s3=%s&%s4=%s&%s5=%s&%s6=%s

&%s3=%s&%s4=%s&%s5=%s&%s6=%s

&%s2=%s&%s3=%s&%s4=%s&%s5=%s&%s6=selector

&%s3=%s&%s4=%s&%s5=%s&%s6=selector

&%s1=%s%s

&%s1=%s

hXXp://results.%s/s?uid=%s&uc=%s&source=searchbar&i_id=%s_&ap=appfocus&query=%s

&redir=%s&value=yhs_search&%s3=%s&%s4=%s&%s5=%s&%s9=%s

&%s2=%s&%s3=%s&%s4=%s&%s5=%s&%s6=sb

&%s3=%s&%s4=%s&%s5=%s&%s6=sb

do/event?value=%s

&distSubId2=%s&distSubId3=%s&distSubId4=%s&distSubId5=%s&distSubId6=sb

&distSubId3=%s&distSubId4=%s&distSubId5=%s&distSubId6=sb

?redir=%s&

hXXp://info.%s/home/terms?uid=%s&uc=%s&source=searchbar&i_id=%s_&ap=appfocus1

hXXp://results.%s/s?uid=%s&uc=%s&source=searchbar&i_id=%s_&ap=appfocus1

&distSubId2=%s&distSubId3=%s&distSubId4=%s&distSubId5=%s

&distSubId3=%s&distSubId4=%s&distSubId5=%s

&distSubId2=%s&distSubId3=%s&distSubId4=%s&distSubId5=%s&distSubId6=update

&distSubId3=%s&distSubId4=%s&distSubId5=%s&distSubId6=update

HTTP/1.1

Microsoft Windows NT

Microsoft Windows 2000

Microsoft Windows XP SP1

Microsoft Windows XP SP2

Microsoft Windows XP

Microsoft Windows Vista

Microsoft Windows Vista or higher

Microsoft Windows 95

Microsoft Windows 98

Microsoft Windows Me

kernel32.dll

\\.\pipe\p{82DD527A-77D0-4e7e-B738-72D0622268AF}

Advapi32.dll

HKEY_CLASSES_ROOT

HKEY_CURRENT_USER

HKEY_LOCAL_MACHINE

HKEY_USERS

HKEY_PERFORMANCE_DATA

HKEY_DYN_DATA

HKEY_CURRENT_CONFIG

Software\Microsoft\Windows\CurrentVersion\Uninstall\

TlJbSUpcT1hBUHJndHFxfEFQcmd0cXF8PVt0b3h7cmU=

Mozilla\Firefox\

explorer.exe

\StringFileInfo\xx\%s

value=%s

C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\SearchBar.exe

MAIN.HTML

MAIN_EMAIL.HTML

MAIN_MAP.HTML

MAIN_WEATHER.HTML

MAIN_CLASSIFIEDS.HTML

MAIN_CONVERTER.HTML

MAIN_FLIGHTS.HTML

MAIN_FORMS.HTML

MAIN_PACKAGES.HTML

MAIN_RADIO.HTML

MAIN_SPEEDTEST.HTML

MAIN_TV.HTML

AB2_MAIN.HTML

AB2_MAIN_EMAIL.HTML

AB2_MAIN_MAP.HTML

AB2_MAIN_WEATHER.HTML

AB2_MAIN_CLASSIFIEDS.HTML

AB2_MAIN_CONVERTER.HTML

AB2_MAIN_FLIGHTS.HTML

AB2_MAIN_FORMS.HTML

AB2_MAIN_PACKAGES.HTML

AB2_MAIN_RADIO.HTML

AB2_MAIN_SPEEDTEST.HTML

AB2_MAIN_TV.HTML

JQUERY_MIN.JS

MAIN.JS

CHROMIUM.PNG

IE.PNG

FIREFOX.PNG

CHROME.PNG

EDGE.PNG

CHROMIUM-O.PNG

IE-O.PNG

FIREFOX-O.PNG

CHROME-O.PNG

SETTINGS.PNG

CHROME.BMP

FIREFOX.BMP

IE.BMP

CHROMIUM.BMP

EDGE.BMP

DOWN-ARROW.PNG

SEARCH-ICON.PNG

FC5.PNG

FC6.PNG

SPRITE_EMAIL_V6.PNG

SPRITE_MAPS_V3.PNG

SPRITE_WEATHER_V3.PNG

SPRITE_CLASSIFIEDS_V2.PNG

SPRITE_FILECONVERTER_V3.PNG

SPRITE_FORMS_V3.PNG

SPRITE_PACKAGES_V1.PNG

SPRITE_RADIO_V2.PNG

SPRITE_SPEEDTEST_V1.PNG

SPRITE_TELEVISION_V1.PNG

1.32.0.2

1,32,0,2

IEXPLORE.EXE_2580:

.text

`.data

.rsrc

@.reloc

>.uzf

.us;}

IEFRAME.dll

MLANG.dll

iertutil.dll

urlmon.dll

ole32.dll

SHELL32.dll

SHLWAPI.dll

msvcrt.dll

USER32.dll

KERNEL32.dll

ADVAPI32.dll

RegOpenKeyExW

RegCloseKey

GetWindowsDirectoryW

_amsg_exit

_wcmdln

UrlApplySchemeW

PathIsURLW

UrlCanonicalizeW

UrlCreateFromPathW

iexplore.pdb

KEYW

KEYWh

KEYWD

.ENNNG.

a.ry.v

l.igM4

?1%SGf

xh.JW^

.97777"7" " " !

3.... )) 

8888888888888

8888888888

.lPV)

úW1

.ApX/

H.ZAf

ð[U

%s!FK

1YYYY1YY9GEAA=77YRNNNW:.VT1

888777777

Y.hilkRROMLK=C,

..(((($$

3...((((%

3....(.''$

3.2...((((%

33.2....(,'

55323222...

(%&'00443445?

00.,,,4(

000.,,9(

0020..9(

003200;(

(#'( (''''!'!

Microsoft.InternetExplorer.Default

user32.dll

Kernel32.DLL

xfire.exe

wlmail.exe

winamp.exe

waol.exe

sidebar.exe

psocdesigner.exe

np.exe

netscape.exe

netcaptor.exe

neoplanet.exe

msn.exe

mshtmpad.exe

mshta.exe

loader42.exe

infopath.exe

iexplore.exe

iepreview.exe

groove.exe

explorer.exe

dreamweaver.exe

contribute.exe

aol.exe

{28fb17e0-d393-439d-9a21-9474a070473a}

Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings

DShell32.dll

Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\iexplore.exe

Software\Microsoft\Active Setup\Installed Components\>{26923b43-4d38-484f-9b9e-de460746276c}

"%s" %s

Kernel32.dll

\AppPatch\sysmain.sdb

-extoff go.microsoft.com/fwlink/?LinkId=106323

-extoff go.microsoft.com/fwlink/?LinkId=106322

-extoff go.microsoft.com/fwlink/?LinkId=106320

kernel32.dll

{00000000-0000-0000-0000-000000000000}

\\?\Volume

shell:%s

Imaging_CreateWebPagePreview_Perftrack

Browseui_Tabs_Tearoff_BetweenWindows

Frame_URLEntered

Imaging_CreateWebPagePreview

WS_ExecuteQuery

Shdocvw_BaseBrowser_FireEvent_WindowStateChanged

IdleTask_Execution_Time

9.00.8112.16421 (WIN7_IE9_RTM.110308-0330)

IEXPLORE.EXE

Windows

9.00.8112.16421

IEXPLORE.EXE_1692:

.text

`.data

.rsrc

@.reloc

>.uzf

.us;}

IEFRAME.dll

MLANG.dll

iertutil.dll

urlmon.dll

ole32.dll

SHELL32.dll

SHLWAPI.dll

msvcrt.dll

USER32.dll

KERNEL32.dll

ADVAPI32.dll

RegOpenKeyExW

RegCloseKey

GetWindowsDirectoryW

_amsg_exit

_wcmdln

UrlApplySchemeW

PathIsURLW

UrlCanonicalizeW

UrlCreateFromPathW

iexplore.pdb

KEYW

KEYWh

KEYWD

.ENNNG.

a.ry.v

l.igM4

?1%SGf

xh.JW^

.97777"7" " " !

3.... )) 

8888888888888

8888888888

.lPV)

úW1

.ApX/

H.ZAf

ð[U

%s!FK

1YYYY1YY9GEAA=77YRNNNW:.VT1

888777777

Y.hilkRROMLK=C,

..(((($$

3...((((%

3....(.''$

3.2...((((%

33.2....(,'

55323222...

(%&'00443445?

00.,,,4(

000.,,9(

0020..9(

003200;(

(#'( (''''!'!

Microsoft.InternetExplorer.Default

user32.dll

Kernel32.DLL

xfire.exe

wlmail.exe

winamp.exe

waol.exe

sidebar.exe

psocdesigner.exe

np.exe

netscape.exe

netcaptor.exe

neoplanet.exe

msn.exe

mshtmpad.exe

mshta.exe

loader42.exe

infopath.exe

iexplore.exe

iepreview.exe

groove.exe

explorer.exe

dreamweaver.exe

contribute.exe

aol.exe

{28fb17e0-d393-439d-9a21-9474a070473a}

Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings

DShell32.dll

Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\iexplore.exe

Software\Microsoft\Active Setup\Installed Components\>{26923b43-4d38-484f-9b9e-de460746276c}

"%s" %s

Kernel32.dll

\AppPatch\sysmain.sdb

-extoff go.microsoft.com/fwlink/?LinkId=106323

-extoff go.microsoft.com/fwlink/?LinkId=106322

-extoff go.microsoft.com/fwlink/?LinkId=106320

kernel32.dll

{00000000-0000-0000-0000-000000000000}

\\?\Volume

shell:%s

Imaging_CreateWebPagePreview_Perftrack

Browseui_Tabs_Tearoff_BetweenWindows

Frame_URLEntered

Imaging_CreateWebPagePreview

WS_ExecuteQuery

Shdocvw_BaseBrowser_FireEvent_WindowStateChanged

IdleTask_Execution_Time

9.00.8112.16421 (WIN7_IE9_RTM.110308-0330)

IEXPLORE.EXE

Windows

9.00.8112.16421

Remove it with Ad-Aware

1. Click (here) to download and install Ad-Aware Free Antivirus.
2. Update the definition files.
3. Run a full scan of your computer.

Manual removal*

1. Terminate malicious process(es) (How to End a Process With the Task Manager):
   

   %original file name%.exe:2060
   setup.exe:568
   setup.exe:2444
   mini_installer.exe:3456
   chrome.exe:992

2. Delete the original not-a-virus file.
   
3. Delete or disinfect the following files created/modified by the not-a-virus:
   

   C:\Users\"%CurrentUserName%"\AppData\Local\Temp\{D9A923EC-4232-49BA-A281-4B2AAA4B0A93}\newtab.html (98 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4ZZNMJGQ\mini_installer[1].exe (2136472 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\Temp\~sbECC2.tmp (1 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\Temp\{D9A923EC-4232-49BA-A281-4B2AAA4B0A93}\img\icon48.png (196 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Uninstall.exe (9428 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsw5A24.tmp\npHelper.dll (13757 bytes)
   C:\Users\"%CurrentUserName%"\Desktop\Search the Web.lnk (1 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\Temp\{D9A923EC-4232-49BA-A281-4B2AAA4B0A93}\img\icon128.png (2600 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Application\57.0.2987.110\default_apps\BrowserIONewTab.chromeextension.crx (784 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsw5A23.tmp (49568 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsw5A24.tmp\master_preferences (2 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\Temp\{D9A923EC-4232-49BA-A281-4B2AAA4B0A93}\redirect.js (366 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Search the internet.lnk (1 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\Temp\{D9A923EC-4232-49BA-A281-4B2AAA4B0A93}\manifest.json (732 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsw5A24.tmp\StdUtils.dll (3718 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsw5A24.tmp\inetcw.dll (808 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Application\57.0.2987.110\default_apps\external_extensions.json (505 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\SearchBar.exe (34235 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsw5A24.tmp\System.dll (23 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsw5A24.tmp\mini_installer.exe (2273570 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\Temp\{D9A923EC-4232-49BA-A281-4B2AAA4B0A93}\img\icon16.png (680 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JYNOWECL\settings[1] (976 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8D93UTC3\chromium[1] (1 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4ZZNMJGQ\down-arrow[1] (1 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\25FDO7QC\main[1] (11 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JYNOWECL\main_email[1] (5 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4ZZNMJGQ\jquery_min[1] (96 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\25FDO7QC\search-icon[1] (1 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JYNOWECL\ie[1] (2 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8D93UTC3\Sprite_Email_V6[1] (15 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\User Data\Crashpad\settings.dat (40 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\BrowserIO.lnk (2 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\Locales\pt-BR.pak (274 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\Locales\ja.pak (334 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\Locales\sr.pak (419 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Application\SetupMetrics\E17B.tmp (15 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\Locales\ar.pak (382 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\natives_blob.bin (334 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\Locales\ru.pak (427 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\libegl.dll (79 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\Locales\kn.pak (625 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\Locales\zh-TW.pak (237 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\Locales\he.pak (326 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\chrome_200_percent.pak (815 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\Locales\nb.pak (256 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\Locales\hu.pak (297 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\chrome.7z (232676 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\Locales\gu.pak (543 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\Locales\am.pak (385 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\Locales\de.pak (279 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\Locales\sl.pak (269 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\Locales\el.pak (489 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\chrome.VisualElementsManifest.xml (410 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\chrome_child.dll (61472 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\Locales\fr.pak (301 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Application\chrome.exe (6704 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\Locales\lt.pak (286 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\Locales\pl.pak (278 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\libglesv2.dll (2 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\57.0.2987.110.manifest (252 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\Locales\mr.pak (550 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\Locales\en-GB.pak (233 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\VisualElements\smalllogo.png (17 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\eventlog_provider.dll (2 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\Locales\zh-CN.pak (236 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\Locales\ko.pak (285 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\Locales\et.pak (251 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\Locales\fil.pak (285 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\Locales\uk.pak (435 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Application\57.0.2987.110\Installer\setup.exe (7726 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\Locales\it.pak (276 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\Locales\hi.pak (552 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\Locales\bn.pak (578 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\d3dcompiler_47.dll (3 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\chrome_100_percent.pak (500 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\Locales\bg.pak (458 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\Locales\es-419.pak (281 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\VisualElements\logo.png (38 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Application\master_preferences (2 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\Locales\da.pak (258 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\chrome.exe (828 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\Locales\id.pak (250 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\BrowserIO.lnk (2 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\Locales\te.pak (610 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\Locales\sk.pak (291 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\Locales\sv.pak (258 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\Locales\ca.pak (284 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BrowserIO.lnk (2 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\Locales\es.pak (286 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\icudtl.dat (10 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\Locales\cs.pak (285 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\Locales\ta.pak (635 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\chrome_watcher.dll (458 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\chrome_elf.dll (431 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\Locales\pt-PT.pak (278 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\Locales\tr.pak (276 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\Locales\fa.pak (391 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\Locales\en-US.pak (232 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\Locales\ms.pak (257 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\chrome.dll (32673 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\resources.pak (833 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\Locales\fi.pak (265 bytes)
   C:\Users\"%CurrentUserName%"\Desktop\BrowserIO.lnk (2 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\Locales\ro.pak (285 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\Locales\nl.pak (270 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\Locales\lv.pak (287 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\snapshot_blob.bin (963 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\Locales\th.pak (532 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\Locales\hr.pak (268 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\Locales\sw.pak (261 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\Locales\ml.pak (684 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\Locales\vi.pak (311 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\Temp\source2444_6363\Chrome-bin\57.0.2987.110\Extensions\external_extensions.json (99 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\Temp\CR_A861A.tmp\CHROME.PACKED.7Z (33616 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\Temp\CR_A861A.tmp\setup.exe (17800 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\Temp\CR_A861A.tmp\SETUP.EX_ (443 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\User Data\EE93.tmp (5 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\Temp\{D9A923EC-4232-49BA-A281-4B2AAA4B0A93}.crx (772 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\Temp\scoped_dir992_26745\extension.zip (29834 bytes)
   C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\User Data\Default\Preferences (4 bytes)

4. Delete the following value(s) in the autorun key (How to Work with System Registry):
   

   [HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
   "SearchBar" = "C:\Users\"%CurrentUserName%"\AppData\Local\BrowserIO\SearchBar.exe"

5. Clean the Temporary Internet Files folder, which may contain infected files (How to clean Temporary Internet Files folder).
   
6. Reboot the computer.
   

*Manual removal may cause unexpected system behaviour and should be performed at your own risk.