3.6
中危
DACN
0.14
FACILE
1.00
IMCLNet
0.78
MFGraph
0.00
反病毒引擎
| 查杀引擎 | 查杀结果 | 查杀时间 | 查杀版本 |
|---|---|---|---|
| Alibaba | None | 20190527 | 0.3.0.5 |
| Avast | Win32:Malware-gen | 20190924 | 18.4.3895.0 |
| Baidu | None | 20190318 | 1.0.0.2 |
| CrowdStrike | win/malicious_confidence_100% (D) | 20190702 | 1.0 |
| Kingsoft | None | 20190924 | 2013.8.14.323 |
| McAfee | Packed-FGQ!0934506BB897 | 20190924 | 6.0.6.653 |
| Tencent | None | 20190924 | 1.0.0.1 |
静态指标
查询计算机名称
(1 个事件)
| Time & API | Arguments | Status | Return | Repeated |
|---|---|---|---|---|
|
1727545311.312875 GetComputerNameW |
computer_name:
TU-PC
|
success | 1 | 0 |
检查进程是否被调试器调试
(1 个事件)
使用Windows API生成加密密钥
(3 个事件)
检查系统中的内存量，这可以用于检测可用内存较少的虚拟机
(10 个事件)
可执行文件包含未知的 PE 段名称，可能指示打包器（可能是误报）
(1 个事件)
| section | .gfids |
文件包含未知的 PE 资源名称，可能指示打包器
(1 个事件)
| resource name | OXQXCJQ |
动态指标
解析可疑的顶级域名（TLD）
(2 个事件)
| domain | ns1.wowservers.ru | description | 俄罗斯联邦域名 TLD | ||||||
| domain | ns2.wowservers.ru | description | 俄罗斯联邦域名 TLD | ||||||
分配可读-可写-可执行内存（通常用于自解压）
(20 个事件)
查询磁盘大小，可用于检测具有小固定大小或动态分配的虚拟机
(1 个事件)
在文件系统上创建可执行文件
(1 个事件)
| file | C:\Users\Administrator\AppData\Roaming\Microsoft\weymkp.exe |
将可执行文件投放到用户的 AppData 文件夹
(1 个事件)
| file | C:\Users\Administrator\AppData\Roaming\Microsoft\weymkp.exe |
搜索运行中的进程，可能用于识别沙箱规避、代码注入或内存转储的进程
(33 个事件)
检查适配器地址以检测虚拟网络接口
(2 个事件)
| Time & API | Arguments | Status | Return | Repeated |
|---|---|---|---|---|
|
1727545311.593875 GetAdaptersAddresses |
family:
0
flags: 0 |
failed | 111 | 0 |
|
1727545311.593875 GetAdaptersAddresses |
family:
0
flags: 0 |
success | 0 | 0 |
该二进制文件可能包含加密或压缩数据，表明使用了打包工具
(2 个事件)
| section | {'name': '.rsrc', 'virtual_address': '0x0003a000', 'virtual_size': '0x0002207c', 'size_of_data': '0x00022200', 'entropy': 7.913362816013113} | entropy | 7.913362816013113 | description | 发现高熵的节 | |||||||||
| entropy | 0.42589703588143524 | description | 此PE文件的整体熵值较高 | |||||||||||
使用 Windows 工具进行基本 Windows 功能
(4 个事件)
| cmdline | nslookup carder.bit ns2.wowservers.ru |
| cmdline | nslookup carder.bit ns1.wowservers.ru |
| cmdline | nslookup ransomware.bit ns2.wowservers.ru |
| cmdline | nslookup ransomware.bit ns1.wowservers.ru |
网络通信
与未执行 DNS 查询的主机进行通信
(1 个事件)
| host | 114.114.114.114 | |||
在 Windows 启动时自我安装以实现自动运行
(1 个事件)
| reg_key | HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce\txslfoorras | reg_value | "C:\Users\Administrator\AppData\Roaming\Microsoft\weymkp.exe" | ||||||
文件已被 VirusTotal 上 56 个反病毒引擎识别为恶意
(50 out of 56 个事件)
| ALYac | Trojan.GenericKDZ.44416 |
| APEX | Malicious |
| AVG | Win32:Malware-gen |
| Acronis | suspicious |
| Ad-Aware | Trojan.GenericKDZ.44416 |
| AhnLab-V3 | Win-Trojan/Gandcrab02.Exp |
| Antiy-AVL | Trojan[Ransom]/Win32.GandCrypt |
| Arcabit | Trojan.Generic.DAD80 |
| Avast | Win32:Malware-gen |
| Avira | TR/Dropper.Gen |
| BitDefender | Trojan.GenericKDZ.44416 |
| CAT-QuickHeal | Trojan.Cloxer.A06 |
| ClamAV | Win.Packed.Generickdz-6726609-0 |
| Comodo | TrojWare.Win32.PSW.Coins.GH@7ohrdk |
| CrowdStrike | win/malicious_confidence_100% (D) |
| Cybereason | malicious.bb897d |
| Cylance | Unsafe |
| Cyren | W32/S-468a6143!Eldorado |
| DrWeb | Trojan.Encoder.24384 |
| ESET-NOD32 | a variant of Win32/Kryptik.GHKK |
| Emsisoft | Trojan.GenericKDZ.44416 (B) |
| Endgame | malicious (high confidence) |
| F-Prot | W32/S-468a6143!Eldorado |
| F-Secure | Trojan.TR/Dropper.Gen |
| FireEye | Generic.mg.0934506bb897de4d |
| Fortinet | W32/GenKryptik.CNAR!tr |
| GData | Trojan.GenericKDZ.44416 |
| Ikarus | Ransom.Win32.GandCrab |
| Invincea | heuristic |
| Jiangmin | Trojan.GandCrypt.ge |
| K7AntiVirus | Trojan ( 005338861 ) |
| K7GW | Trojan ( 005338861 ) |
| Kaspersky | HEUR:Trojan.Win32.Generic |
| MAX | malware (ai score=84) |
| Malwarebytes | Trojan.MalPack.GS |
| McAfee | Packed-FGQ!0934506BB897 |
| McAfee-GW-Edition | BehavesLike.Win32.Generic.fc |
| MicroWorld-eScan | Trojan.GenericKDZ.44416 |
| Microsoft | Ransom:Win32/GandCrab.BG |
| NANO-Antivirus | Trojan.Win32.Encoder.fdpoxe |
| Panda | Trj/Genetic.gen |
| Qihoo-360 | HEUR/QVM10.1.1AB9.Malware.Gen |
| Rising | Trojan.Kryptik!1.B2B7 (CLASSIC) |
| SUPERAntiSpyware | Ransom.GandCrab/Variant |
| SentinelOne | DFI - Malicious PE |
| Sophos | Mal/Agent-AUL |
| Symantec | Packed.Generic.525 |
| TACHYON | Ransom/W32.GandCrab |
| TrendMicro | Ransom.Win32.GANDCRAB.SMLV2.hp |
| TrendMicro-HouseCall | Ransom.Win32.GANDCRAB.SMLV2.hp |
二进制图像
288x288
224x224
192x192
160x160
128x128
96x96
64x64
32x32
运行截图
暂无运行截图
该样本运行过程中未生成截图
PE Compile Time
2018-06-04 16:46:25
PE Imphash
9e85bc8cd0863f7512a06d6eb4c79827
Sections
| Name | Virtual Address | Virtual Size | Size of Raw Data | Entropy |
|---|---|---|---|---|
| .text | 0x00001000 | 0x0001c2bf | 0x0001c400 | 6.659756701632538 |
| .rdata | 0x0001e000 | 0x0000e218 | 0x0000e400 | 5.537584409236205 |
| .data | 0x0002d000 | 0x0000af44 | 0x00001200 | 3.074930222084059 |
| .gfids | 0x00038000 | 0x00001224 | 0x00000600 | 1.6028896960941013 |
| .rsrc | 0x0003a000 | 0x0002207c | 0x00022200 | 7.913362816013113 |
| .reloc | 0x0005d000 | 0x00001ee8 | 0x00002000 | 5.95017831518195 |
Resources
| Name | Offset | Size | Language | Sub-language | File type |
|---|---|---|---|---|---|
| OXQXCJQ | 0x0003a1e8 | 0x0001a78a | LANG_NEUTRAL | SUBLANG_NEUTRAL | None |
| RT_BITMAP | 0x0005829c | 0x00003838 | LANG_NEUTRAL | SUBLANG_NEUTRAL | None |
| RT_BITMAP | 0x0005829c | 0x00003838 | LANG_NEUTRAL | SUBLANG_NEUTRAL | None |
| RT_DIALOG | 0x0005bad4 | 0x000000f4 | LANG_NEUTRAL | SUBLANG_NEUTRAL | None |
| RT_STRING | 0x0005bf6c | 0x000000ce | LANG_NEUTRAL | SUBLANG_NEUTRAL | None |
| RT_STRING | 0x0005bf6c | 0x000000ce | LANG_NEUTRAL | SUBLANG_NEUTRAL | None |
| RT_ACCELERATOR | 0x0005c03c | 0x00000040 | LANG_NEUTRAL | SUBLANG_NEUTRAL | None |
Imports
Library KERNEL32.dll:
• 0x41e000 GetConsoleOutputCP
• 0x41e004 DeviceIoControl
• 0x41e008 VirtualAlloc
• 0x41e00c GetTempPathW
• 0x41e010 GetLastError
• 0x41e014 FileTimeToSystemTime
• 0x41e018 SetFileShortNameA
• 0x41e01c FindAtomA
• 0x41e020 GetProcAddress
• 0x41e024 CreateMailslotW
• 0x41e028 GetTickCount
• 0x41e02c HeapSize
• 0x41e030 WriteConsoleW
• 0x41e034 SetFilePointerEx
• 0x41e038 LoadLibraryW
• 0x41e03c GetSystemTimeAdjustment
• 0x41e040 SetStdHandle
• 0x41e044 WideCharToMultiByte
• 0x41e048 EnterCriticalSection
• 0x41e04c LeaveCriticalSection
• 0x41e050 DeleteCriticalSection
• 0x41e054 EncodePointer
• 0x41e058 DecodePointer
• 0x41e05c MultiByteToWideChar
• 0x41e060 SetLastError
• 0x41e064 InitializeCriticalSectionAndSpinCount
• 0x41e068 CreateEventW
• 0x41e06c TlsAlloc
• 0x41e070 TlsGetValue
• 0x41e074 TlsSetValue
• 0x41e078 TlsFree
• 0x41e07c GetSystemTimeAsFileTime
• 0x41e080 GetModuleHandleW
• 0x41e084 LCMapStringW
• 0x41e088 GetLocaleInfoW
• 0x41e08c GetStringTypeW
• 0x41e090 GetCPInfo
• 0x41e094 CloseHandle
• 0x41e098 SetEvent
• 0x41e09c ResetEvent
• 0x41e0a0 WaitForSingleObjectEx
• 0x41e0a4 UnhandledExceptionFilter
• 0x41e0a8 SetUnhandledExceptionFilter
• 0x41e0ac GetCurrentProcess
• 0x41e0b0 TerminateProcess
• 0x41e0b4 IsProcessorFeaturePresent
• 0x41e0b8 IsDebuggerPresent
• 0x41e0bc GetStartupInfoW
• 0x41e0c0 QueryPerformanceCounter
• 0x41e0c4 GetCurrentProcessId
• 0x41e0c8 GetCurrentThreadId
• 0x41e0cc InitializeSListHead
• 0x41e0d0 RtlUnwind
• 0x41e0d4 RaiseException
• 0x41e0d8 FreeLibrary
• 0x41e0dc LoadLibraryExW
• 0x41e0e0 ExitProcess
• 0x41e0e4 GetModuleHandleExW
• 0x41e0e8 HeapAlloc
• 0x41e0ec HeapReAlloc
• 0x41e0f0 HeapFree
• 0x41e0f4 GetModuleFileNameA
• 0x41e0f8 GetStdHandle
• 0x41e0fc WriteFile
• 0x41e100 GetACP
• 0x41e104 IsValidLocale
• 0x41e108 GetUserDefaultLCID
• 0x41e10c EnumSystemLocalesW
• 0x41e110 FlushFileBuffers
• 0x41e114 GetConsoleCP
• 0x41e118 GetConsoleMode
• 0x41e11c GetFileType
• 0x41e120 GetProcessHeap
• 0x41e124 FindClose
• 0x41e128 FindFirstFileExA
• 0x41e12c FindNextFileA
• 0x41e130 IsValidCodePage
• 0x41e134 GetOEMCP
• 0x41e138 GetCommandLineA
• 0x41e13c GetCommandLineW
• 0x41e140 GetEnvironmentStringsW
• 0x41e144 FreeEnvironmentStringsW
• 0x41e148 CreateFileW
L!This
m cannot be run in DOS mode.
`.rdata
@.data
.gfids
@.rsrc
@.reloc
A#;vPG
uH;s+
fF ^$^(^,^09E
Y3~,9~$t
U,EVWP?:
FCYY;u]_^[
FCYY;u]_^[
SVWMP9
CEP<Sj
VWEP|j
t!MPhB
QQU-TB
y_^]YYU
VVVVVVVV
YM3_^3[ :
V3jPt$
;w{G,+L$
D$4t1|-
G0+L$4
SUVWK
tx)trD$
;0v2L$
Wt ~ ?
AD1^j(A
UVW|$(
L$$SB
St$(t$ K
t/L$(CT$
ID$([_^]
UVW|$(
t5T$$L$(
KD$([_^]
YY^VqFhP
j@PPD$$Pu
0_^[3,
C|$$QQ
D$LjLPt$(
PVW|$P
L$<t$,
CL$<PQu
L$D_^3+
C|$$QQ
PVWJ|$P
L$<t$,
CL$<PQu
L$D_^3A*
PD$$j@PPD$0Pu
4_^[3)
PD$$j@P7PD$0Pu
4_^[3K)
PD$ j@PPD$,Pu
0_^[3(
PD$ j@PGPD$,Pu
0_^[3[(
D$4PL$
@t,Vt$
Vt$(t$8
L$L_^[3&
G;v_,9tOj
G G$G,G(G0YYO
W8W<_^
U S]$D$
PSL$,D$<D$,
tG~CL$
+;s#t$
CD$@Pq
D$81Pu
CD$(Pu
j03&|$8
CD$(Pu
CD$$)|$
PRQD$$U
L$,oL$T_^[3*
_^UTpB
D$PM$E
$S] \$
D$,j.XfD$
D$ D$ PSt
L$4D$DD$4q|$@
L$ A0H
D\$$t$D|$X
+;s#t$
\$ D$<D$
CD$HPq
D$41Pu
CD$0Pu
03&|$@
CD$0Pu
CD$,)|$
PRQD$ U
!0L$Dj
L$4L$\_^[3f
;vqU,9t`j
S3VWSS_0_
_ _$_(_,Yj
w0O8_<N
j R G@9_8u
EP@YYt'u
X_]U8e
X_]jdA
EPWhpB
EPWhxB
+I+IC+I
Y^]USW}
u+FVW~
YY]UQj
^_]UQj
USW{,t
YY^]VWj
[_^]USVu
[_^]Uu
339E$WWVu
tFVSuuu
t,WW9}
WWVSWu
e_^[M3E
Y]VhpB
3^UV5pB
3@^]USVW3
_^[]U}
]3]UV5B
t"3PPPu
^]UQVu
jA[jZZ+U
_+[^];
t7t3t/%B
Y_^3[j
t!>td,
u$V5pB
Vu15pB
(;u3^]
t*u&hB
+PQiYYt'x$
|YYE=M
Y__^[]QPd5
SVW(pB
3PuEEd
SVW(pB
3PeuEEd
|xffftfpflfhE
@jPEVP{"
^[]UDjDEj
8csmu%x
VFYY^]
MEineIE5ntel
EEEEE|2j
3[]3@39
+SVWpB
1E3PeuEEEEd
Y__^[]QU
ME3M3M3;u
;r_^[SVB
;r_^[QL$
Au+SVY
^]WVt$
on0v00f
on0v00f
on0v00f
u r#
Ju t0
E[]UQSVu
UQQSVWd5
p$^]UVS3
u3@]3]UQSE
k 3@[]U
SVWE3PPPuu
E_^[E]WVt$
on0v00f
on0v00f
on0v00f
u r#
Ju t0
t{8csmusx
EP"YYE+
3@EEu u
~"];D;
?csmuP
u,Vu$6u
WP*_]UE
8csmu6x
3AH ]3]UDS]
>csmu+~
ME>csm
MQMQPu WU
EM~.Uu
u u0uWu
uSV,UMEB
YYuLK&
u(u$u PWu
VNYYMhDB
t1?MOCt)?RCCt!u$u Su
;F|c;F
u$Nu Qj
M;r^[_]~
EME~;F
;7|2_^[]
W_EE3@
PQiYYPVu
8csmu!!
9p u":csmt
t]:csmu9z
E$Pu u
R 3@_^[]UU
3@_^[]2
tJ2t#2t
B_[US]
3;tit
j Y+3;3_^[]US]
^_[]UVh
^]^]%lA
V 3j Y+
8_^]CU
Mxf~UE
8csmu7=
E_^[]hpB
j Y+33
3BVj(j
VW_^]M
2_^V5B
^SVWT$
URPQQh
t;T$4t
;v.4v\
UVWS33333[_^]
33333USVWj
_^[]Ul$
USVWUj
P(RP$R
t:|$,t
;t$,v-4v
UQPXY]Y[
j Y+33
j Y+33
~0WPQn
Y.V~Yt
YYu3^]j
u;tt>}
WIYt!E
YUV3PPPPPPPPU
uo;u*x);v%[
;uj^L
USVWN@
F4+~8@_F4^[]
UQQSVWN@
ARSF(*
F4+~8@_F4^[]
A A$A(fA0A8A<@
uI90t8
UQSVMWj
EN(^$^0^ ^,^<8
f<Pt8F
ItOLt>Tt-h
<Xu]A,
Klt*tt
UQSV3C3
Mt?g~1it
V 3WfEE
E N1xt
t'D=0Xt
^$+^8+
X]3@]j
UQQVWN
F(~@S]
PPESPMq
v4YYF1<gt
v4YYF48-u
N @@F4V4
PPF8SPzb
USVv,FY
HPXF F
@?H3;F F
~(X^4u
ESVW~<
t]F8~V~43
EPEP$_
u&9Et!v
_^3[)]
UQQVW}
HLMMQPb
YY^Dz8QQ
0ffffffE
3PPPPPy
V3VVVVVf
YYtVWh
3EWWPtv
tU"tPj
YYt/ju
Y_^]WWWWWtj
]EPSWSSEPXx
EMQjWuP3W
HLMMQP
f;u+SY
3PPPPP
HLMMQPY
HLMMQPY
HLMMQPY
~+8]t&M
~@8]t;M
t'@-rA
3^_]?-
_33[]VpAu
}tDEF@E4d$
^_33[]
t)EMMe
]]EEwPr
uM4;r)w
;Ev"E]
M33tUE
Eu]M3;wGr
9}s@t5u
u]UEHEu3U
P<$f<$
sKEPS!
3fEEEx
3]AEfEUEEj
^0^]W+
A;u+;uZ
A;u+_^]
q3U;Mt
q3U;Mt
;Uu+;uf
;u+_^]
3M3^x]j
_[M3^v]
E}PE}PWWS
_81EPEPE
PY}VY_[^]
F@>\t>"u1
qYVjY_^
UQQSVW}
PDYYtm]R
YYt0WuVp
Y_^[]3PPPPP
YuViY_^]
;uM_3^Jr]
P^Y]h@
MEEEPu
MEEEPu
}]j Y+33
j Y;EtMME
_3^M3[o]
} j Y+3
j Y+33
Vj 3Y+35pB
YYhx0B
YM3^-l]
t*t <"u
G;uM_^3[ik]
u3M_3^$k]
MEEEPu
Wf83Af;:u
uFpLhLB
3]SjUu
3PPPPP3TB
_^]VVVVV
UQQSVW}
j.Yf;u-F
MMj,Zu
j.Yf;tyPVj@W:
@sh_tcPVj@
f;uCPVj
u#j,Xf;
EW3PPPPP
_^[]SSSSS
3M_^3[e]1
jUHh(Hl r
f>Cu43f9~
3PPPPPV
US3V9]
|_^[]SSSSSK
EEPEPEPE]
F00Eh1B
M!EEE0h1B
v(YF$t
v$qYf$
^(F _^[]SRYN(t
v(7YF$t
v$ Y3F$F
F(F F@3PPPPP2
f;4u+;t
D4s3f9
PjUHPh
f8f;98u3f8
t,PVWn
WYM_^3[P]]
g3PPPPPM
,@PjUHPh
3M_^3[\]
f;18u5f8
f;Du+A
<F 4F$@G
u9t(t$
8L(DPPPPP
^0P^]W+
t0;s,E
AuVSYYt(#
SWnt#E
YYu38]
j:Xf;s
u0jAXf;w
jZXf;v
j:Xf;s
u0jAXf;w
jZXf;v
j Y+33
MEEEPu
EPX]h6B
3;tit
j Y+3;3_^[]
MYYM3^JL]
M3^HK]
M3^YI]
EVh47B
EVh,7B
t'u(u$u u
M3^gH]$
EVhP7B
2^M3PG]
MEEEPu
Kx7;5PB
EEPVYY
MQPEPu
E9Erf}
M_^3[8D]
Yf;u(F
M_^3[vB]
M_^3[A]
M;rSShU
QP+PPSh
M_^3[[@]j
VYt9t"
uEWVPuEWVPuEWVP
3QMMMMQuWP
0<PsY3}
+E[M_3^d=]
MEEEPu
Sx7;5PB
EEPV}YY
YY;tWaU
3^[]Wu
MuQVWSj
hj"^0IlUj
MEEEPu
MEEEPu
MEEEPu
MEEEPu
PtY8W5B
SY+W5B
_^[h!A
#W;uC;u?
U0SVW}
dj"_8E
uR;uNSu$SWu
38] j0
j0XEM~S
OMEfyfxW
v6j0F[
Wj0XPVr]
Pu$u Vu
_^]Su$M
-jd_;|
33PPPPP
Wj0VWY
+MQWPVp
|*;}&t
FuFu(Ej
Pu$u Wu
S _^[]
XM3[Q*]
A3PPPPP
UQQVW}
EYt"uSWu
u,Puu u
Ueu,t6
CE;u_^[]
YYM_3^
3GY3Au
fEE;}++
u(EE$uE&
t&UAMu
SW+QPEj
Fu+(VVVu
0:@t,;v!}
jP^3fLGM
V3EuW}
+CEPVSQSWVr
EPVSQjWVr
Y]SVQMQj
E@GE;|E
fu0MQVVVjWVp
E@t5;v'}
EAEfEEj
EPQEPEj
MqE3WWu
#P7Yt?
e_^[M3
tAP|PQ3no
P YYt*tVu
YYttVu
M_^3[`
]WWWWWd
339E WWu
#PnYtE
t4SWVx@
e_^[M38
}$39E(j
}3PPPPPWSu
3QQQPu
#P_YtI
3PP9E u:PPVWPu$
e_^[M3,
Mku(Eu$u u
MEEEPu
j Y+33
H$fE3fEEPj
ff#f;u3E
t*f u!f t
ZmZ,$Z
$'YYuJE
tSVWjA_jZ+[
uBjAYjZ+Z
ft:f;t3
tVEfE*?P6M^
Au+MCE
_[^]3PPPPPJc
vY^[_]3PPPPPb
WWWPWS
u-PWWS
M_^3[]
u7tY_^
#tY[_^
MEEEPu
A;rM_^3[\]
wYMEIH;A
3SSVWh
WoY_^[]
E3HHEP
uEEEPj
wHuhej
[YuwHu;5hB
C9]vQ}
kE0E`B
uVY3_M^3[]
W3f9:t!V
f9:u^B
3tVVYWWWW+SVWW
Et4PbYt
3PPuWSVPP
VSbYYt
;u2[^M3_]
^0?V_^[]
^0U^]S+Wu
3jPfTAX3f
J_j"zU](UQQSWj0j@(X3
;t>Vw Sh
}^ShY_[]
0;uVuhY_[^]j
^0LTA3uj
| 94PB
Wxg;5PB
P,fYF ;
PeYF<;
PeYF@;
PeYFD;
PeYFH;
PeYFL;
3VWM]M9
VdEPdY
E PjPWEj
E$PjQWEj
E*PjTWEj
E+PjUWEj
E,PjVWEj
E-PjWWEj
E.PjRWEj
E/PjSWEj
EHPjPWEj
ELPjQWEj
t)]S@SbEPbEPb
u"<;uF
bs|aYYEC|3
PaYF0;
PaYF4;
PwaY^]
3VW]E9
3FjPVuLPEYYu
W3Wu`YYu
u`3Y@F
WWu`YY
t%uXMYu'`MQ
`EYYuU
<0|o<9
u}uM3@
_YYEC|3
_^[]<;uF
Y;u_^[]
WVuE4tYM
j8^huEE
Pj(WEj
Pj)WEj
Pj(WEj
Pj)WEj
Pj WEj
Pj WEj
Pj WEj
WVbYYu
VVk[Y3@%j
3SVWf9
u_+^[]
3SVWf9
u3_^[]
teF|t^8
YYv|zY
PX3XYYE
EuVXY_^[]
VVQXYY^]
-V0YtW
tWY3_^]
_M3^]WWWWWB
f;Eu+3
Z|j@PNd
S|PvT$3
j@|PF`
|PvPYYu:NX
u^9^\t/v\|PvP<
f;uyFX
|PvPYY
VX9^`tT
f;xu+A
3PPPPP
9^\t|NPY
f;xu+;N\u\WV
Yu$^P3
f;uvP+lY;t\NX
f;xuY3
f;xu*FX
[M_3^p]
SSSSSr>
PvP>YYu6S3
SSSSS=
f:f;>u
f:f;>u
@M3^p]
3WB3xNStH
UQQSVW
u2Vj@hxIB
f;Eu+A
tJj_SF
3_^[]3PPPPPA:
PsTYYu
M_^3[]
USVW]3j
f;u+3}
PsPYYu
u+;K\u w
PsPYYuh
9C\tKPA
3339C`u99C\t4
PsP@YYu W3SVb
M_^3[]
PsPYYu
9C`u5Wj
PsPaYYu
M_^3[]
f:f;>u
f:f;>u
t)E5QvY,j
r3@]3]
30;ut(}
fuwP+Y;t3@_^]
;~2_^[]
WHPhLB
uHPhxIB
3M_^3[]3EP
Puyt^WjU
Puyj@Sh
_=fM3?t2
YfEm}fE3
PDPE"YY
jA_M4TB
jUSAYY~
3_^[]3PPPPPG*
d1(_^]
^u;58B
4?<Y<B
3j X+V
P,P0SP4
XA\PP`SP\4
3@ j Y+
P,P0SP2
P3@ 5G
ti0<;s
Pk3 @5C
PP`SP/
P\P`SP.
@A;ut4s
PP`SP},
u]3\P:3\PP`SP
P,P0SP#*
F;uR;,
@A;ut4s
PP0SPA(
,ssN0,e3P,P0SP}'
3P,P0SP>'
,tw330j
0,&3P,P0SP&
\P,P|!YYj
`\B3P\P`SP
0,&3P,P0SP$%
\P,P YYj
_+30;r
]3PPPPP
^]S+Wu
UQQ3!EfE}=B
EVPu(Y
UQQ33fEM}=B
U SVW3}}}}}}}u
U SVW3}}}}}}}u
M_3^T]
PQW|PEPrz
6P}YM_3^L][
;w_^M3[
_^M3,]
;r^;t3
++;|9;s
T[M_3^]UV3PPPPPPPPU
;r3_^[]
tSVjA[jZ^+
SV3W9u
+jAZjZ^u
tEft@f;t9EP
_^[]3PPj
PUxYu3]
R<$tLD$
$f;u7FoHYY
VSoEYY
^[]UWVSM
3SVWH<
B(;r3_^[]Ujh0B
1E3PEd
Y_^[]UE
+SVWpB
EPeuEEEEd
33WVU33D$
#3+#I#[
B:t6t:t't
B^_[SQQ
bad allocation
identifier removed
illegal byte sequence
inappropriate io control operation
interrupted
invalid argument
invalid seek
io error
is a directory
message size
network down
network reset
network unreachable
no buffer space
no child process
no link
no lock available
no message available
no message
no protocol option
no space on device
no stream resources
no such device or address
no such device
no such file or directory
no such process
not a directory
not a socket
not a stream
not connected
not enough memory
not supported
operation canceled
operation in progress
operation not permitted
operation not supported
operation would block
owner dead
permission denied
protocol error
protocol not supported
read only file system
resource deadlock would occur
resource unavailable try again
result out of range
state not recoverable
stream timeout
text file busy
timed out
too many files open in system
too many files open
too many links
too many symbolic link levels
value too large
wrong protocol type
address family not supported
address in use
address not available
already connected
argument list too long
argument out of domain
bad address
bad file descriptor
bad message
broken pipe
connection aborted
connection already in progress
connection refused
connection reset
cross device link
destination address required
device or resource busy
directory not empty
executable format error
file exists
file too large
filename too long
function not supported
host unreachable
unknown error
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
InitializeCriticalSectionEx
InitOnceExecuteOnce
CreateEventExW
CreateSemaphoreW
CreateSemaphoreExW
CreateThreadpoolTimer
SetThreadpoolTimer
WaitForThreadpoolTimerCallbacks
CloseThreadpoolTimer
CreateThreadpoolWait
SetThreadpoolWait
CloseThreadpoolWait
FlushProcessWriteBuffers
FreeLibraryWhenCallbackReturns
GetCurrentProcessorNumber
CreateSymbolicLinkW
GetCurrentPackageId
GetTickCount64
GetFileInformationByHandleEx
SetFileInformationByHandle
GetSystemTimePreciseAsFileTime
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableCS
InitializeSRWLock
AcquireSRWLockExclusive
TryAcquireSRWLockExclusive
ReleaseSRWLockExclusive
SleepConditionVariableSRW
CreateThreadpoolWork
SubmitThreadpoolWork
CloseThreadpoolWork
CompareStringEx
GetLocaleInfoEx
LCMapStringEx
0123456789abcdefghijklmnopqrstuvwxyz
0123456789abcdefghijklmnopqrstuvwxyz
bad array new length
bad exception
__based(
__cdecl
__pascal
__stdcall
__thiscall
__fastcall
__vectorcall
__clrcall
__eabi
__ptr64
__restrict
__unaligned
restrict(
delete
operator
`vftable'
`vbtable'
`vcall'
`typeof'
`local static guard'
`string'
`vbase destructor'
`vector deleting destructor'
`default constructor closure'
`scalar deleting destructor'
`vector constructor iterator'
`vector destructor iterator'
`vector vbase constructor iterator'
`virtual displacement map'
`eh vector constructor iterator'
`eh vector destructor iterator'
`eh vector vbase constructor iterator'
`copy constructor closure'
`udt returning'
`local vftable'
`local vftable constructor closure'
new[]
delete[]
`omni callsig'
`placement delete closure'
`placement delete[] closure'
`managed vector constructor iterator'
`managed vector destructor iterator'
`eh vector copy constructor iterator'
`eh vector vbase copy constructor iterator'
`dynamic initializer for '
`dynamic atexit destructor for '
`vector copy constructor iterator'
`vector vbase copy constructor iterator'
`managed vector copy constructor iterator'
`local static thread guard'
operator ""
Type Descriptor'
Base Class Descriptor at (
Base Class Array'
Class Hierarchy Descriptor'
Complete Object Locator'
CorExitProcess
`h`hhh
xwpwpp
(null)
!"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
%{pk >_
EZ%qVJ
d8L2WBJa"=
[aOni*{
+4/'Pcq
)[f.;}eSw S
gV :6
ipev &g
f) }m?
:@O?owM&
juvD,GA
~ $s%r
@b;zO]3AOmm
- G 8NhU]i<
@;*xh2k
zKG-wn@
-Ciu+-,W
Ly;-"m^8{
yrvxyN
\lo};obwQ4Y+X<XF"
|WYu&Sgw
E]B.4o?nz(wKgg;
H[=J6RMq!
;<(wXC=sF|bt
P,=87Msgm
Ob{!@f
wdq=v/
3v2!L.2
@@w,=q/
ycg6fvPb
ut^6n16B(
.=k=yICyJ"p
BncW[5
^<V7w8=O
oi^,dH9
H'W&|.
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
EnumSystemLocalesEx
GetUserDefaultLocaleName
IsValidLocaleName
LCIDToLocaleName
LocaleNameToLCID
NAN(SNAN)
nan(snan)
NAN(IND)
nan(ind)
Sunday
Monday
Tuesday
Wednesday
Thursday
Friday
Saturday
January
February
August
September
October
November
December
MM/dd/yy
dddd, MMMM dd, yyyy
HH:mm:ss
_hypot
_nextafter
k?wNo?
1#QNAN
1#SNAN
?p9t^<=
Ohe??0=
?X&eBE=
rr?\3#.J=
3:?LtmYE=
@'z+?"e
tLVv?p$M=
`dH?h6_~(=
YL?wJQ\C=
0?e37.=
`I?)-W0=
D?7Tf(G=
C?]u<=
g?Z}=\uI=
s~Q?g:"(N=
q?n1%=
`X:?q.W =
/?1w<=
>'eH?`
pt4z?
l?i.Eg<
Ht=c?Az
h<?z)t
n]vQ<)8
|)P!?Ua0
`7E?'a
MkK?* b<=
|S?KT'K=
p^BY?E&=
Eb2]A=
c?e2a1=
0h?[2ieO=
E`q?}e
r?}~:fE=
PSs?&A=
t?,&8=
u?^p?o40=
v?+#GYM=
z?d,G B=
|?w31!=
y1~?|"
4/?*K_<*=
?wYV%A+=
.?x +s7E=
8#o?efE=
',?7X#=
BC?'2x
GQve$l
dw)tv#
fqsg~7(
t]rLvO
#D5pO/3N
hk<@8K
gmg1&3
X]La6M
PZXm4I@
Ai0TWq
@VNQ?|G
`7O84
fXLzB7C
Ip4"%H
@%OAA9"I
x<u*6"d
@O1O(;>
>(i&I=
>Qyu3=
>B NC=
>!ls1=
?UtQ$=
?PiB{^C=
?Gv72=
?qlm+=
?!.j7/=
?5O d%
?*Hga2=
?gC i8=
?|I7Z#/=
?>,'1D=
?1z@J=
?g)([|X>=
?|[{~*L=
?{mu!K=
?{7!O=
?=u <=
?IT$7QN=
?4%@@=
~U` ?K
W ?FPn;M=
.h ?5m3=
2 !?y$
.5!?]uE:=
"6!?l#
"?!y##<
98"? xyF=
:h"?bC
="?2w}
? #?'A=
@H#?43
Ax#?uN}*
C#?)r7Yr7=
F0$?3=1Z1=
H`$?h|
K$?{<9=
%?uYPwH=
Px%?y F.=
-Q%?\9
R%?29Zd@=
&?~YK|
sU0&?W
VX&?RIG=
?Wdy>c*GP
)a<aw>,?]
Y?eus<)kp?&<
E?Ka<>?5a1
aJ.<Gr+?qO
<2?R{'
f?{NkQ[
Q-B?6/Q
j@<{Q}<r?u
uo[?hI{L[<\
.5Sh1?<d
<}I ?~<8bunz8?r
~<?OQ?U<|eEk?@3<c
?:L ?U
<V/>?#E
?1j<1Lp!?|
<?Y6!'<_V?(FN\\
:7q?B:f
-?)]7"4
i^P1?y_
Aj?vdK<<?bs<*?Vb
?3xj<,v?WY
ivOV+4?<
Q?h'6Go?
L2<FY&?i
U:~$?@~ 4FC?2u<H%"U8b?3
sLU?d>D8`<;
e<?<h:kQ}?
<t_u ?zGntH??;el
gBV_?m1WY$?]Oi?,
<bN6?~y
*B?&KV<D
2?2^p6w
?#%X.y
77?~_g
RDZ?9|KvPN
?qF||<##
c?nLx$x<e]{f
]IY3-J0?6}\0<]%>
U?An/X0
<yUk?1
k?l4Z?]4
0^b:YrY?mqG^v
?:T~OXuJ
[?rk?R
7E<KW.g?<HM<
m?D\Hq<i ?I
/?wq{H
<_{3?[K
z'?.P?
<k7+%?C
<@En[vP?-
SH<q+?yetb<C
A.lzZ?
@-32? Dz
Jwk?zn
@$"3?5Wg4p6=
T?Nv$^
St)?4K
$?QhBC .=
(lX ?T@b ==
f??# =
G ? $l
?sdLi==
p|?rx"#2=
p ?h}s"=
%S#[k =
!V1?}a2=
q?20J5=
/@?"B <1=
z?\-!y!=
X0z?~b>==
Cq?y7i9+=
?Unknown exception
bad cast
bad locale name
iostream
iostream stream error
ios_base::badbit set
ios_base::failbit set
ios_base::eofbit set
miwarotijaxosuhevoyecamibe
LocalAlloc
VirtualProtect
sumokotucawozibiyuhu renosuxipamenuponagarozu kafotovi bibozuvemayuzutedorajuxe
string too long
invalid string position
.text$di
.text$mn
.text$x
.text$yd
.idata$5
.00cfg
.CRT$XCA
.CRT$XCAA
.CRT$XCC
.CRT$XCL
.CRT$XCZ
.CRT$XIA
.CRT$XIAA
.CRT$XIAC
.CRT$XIC
.CRT$XIZ
.CRT$XLA
.CRT$XLZ
.CRT$XPA
.CRT$XPX
.CRT$XPXA
.CRT$XPZ
.CRT$XTA
.CRT$XTZ
.rdata
.rdata$T
.rdata$r
.rdata$sxdata
.rdata$zzzdbg
.rtc$IAA
.rtc$IZZ
.rtc$TAA
.rtc$TZZ
.xdata$x
.idata$2
.idata$3
.idata$4
.idata$6
.data$r
.gfids$x
.gfids$y
.tls$ZZZ
.rsrc$01
.rsrc$02
GetSystemTimeAdjustment
SetFileShortNameA
GetConsoleOutputCP
DeviceIoControl
VirtualAlloc
GetTempPathW
GetLastError
FileTimeToSystemTime
LoadLibraryW
FindAtomA
GetProcAddress
CreateMailslotW
GetTickCount
KERNEL32.dll
GetMenuStringW
SetPropA
USER32.dll
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
EncodePointer
DecodePointer
MultiByteToWideChar
SetLastError
InitializeCriticalSectionAndSpinCount
CreateEventW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetModuleHandleW
LCMapStringW
GetLocaleInfoW
GetStringTypeW
GetCPInfo
CloseHandle
SetEvent
ResetEvent
WaitForSingleObjectEx
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
InitializeSListHead
RtlUnwind
RaiseException
FreeLibrary
LoadLibraryExW
ExitProcess
GetModuleHandleExW
HeapAlloc
HeapReAlloc
HeapFree
GetModuleFileNameA
GetStdHandle
WriteFile
GetACP
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
FlushFileBuffers
GetConsoleCP
GetConsoleMode
GetFileType
GetProcessHeap
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
SetFilePointerEx
WriteConsoleW
HeapSize
CreateFileW
Copyright (c) by P.J. Plauger, licensed by Dinkumware, Ltd. ALL RIGHTS RESERVED.
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
.?AV_Locimp@locale@std@@
.?AVbad_alloc@std@@
.?AVlogic_error@std@@
.?AVlength_error@std@@
.?AVout_of_range@std@@
.?AVtype_info@@
.?AVbad_array_new_length@std@@
.?AVbad_exception@std@@
.?AV?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@
.?AVfailure@ios_base@std@@
.?AVruntime_error@std@@
.?AV?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@
.?AVios_base@std@@
.?AVerror_category@std@@
.?AV?$ctype@D@std@@
.?AVsystem_error@std@@
.?AV?$basic_iostream@DU?$char_traits@D@std@@@std@@
.?AV_Facet_base@std@@
.?AV_Generic_error_category@std@@
.?AU_Crt_new_delete@std@@
.?AV?$_Iosb@H@std@@
.?AV?$numpunct@D@std@@
.?AV?$basic_streambuf@DU?$char_traits@D@std@@@std@@
.?AV_Iostream_error_category@std@@
.?AVbad_cast@std@@
.?AUctype_base@std@@
.?AV?$basic_istream@DU?$char_traits@D@std@@@std@@
.?AV?$basic_ios@DU?$char_traits@D@std@@@std@@
.?AVfacet@locale@std@@
.?AV?$basic_ostream@DU?$char_traits@D@std@@@std@@
.?AV_System_error@std@@
.?AVexception@std@@
.?AV?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@
g|\69^}$
EJp3;\fK4S<5OYfo
)Aa&<H
i%B 47e~
$A|iLg
+Miv|;
b8CF@s
>R^,i
BcSoypf*,.
2W7tX(
5r^i:LL+bR
ymV*VXmK
vUz$mETTnF~@5H
.7J81Ib/_C
fg")s=
/j0amS)|$Uqe^;
[CMWd[
'Qz]4cbU
>8`o!E;]=
bF<{Zh
jFII4E
Q+A#y,
%<2HKF
Il=UEi{
[JY2'!Ptq
re$%?:![
SSw+yL9
g]2p88
F}}ACx
`Eedlcg>{
r].jvm!X&u
H"D-vSkI
NU|X3>8)R
hE[on
pv[rUL1
#1LUJw
GC3DjDP,~
LEawPT
.J_<7Tn.E2
0 Hn@!A+fM26^B7O}7
;GDC>rC5Wy/
:23L*V
x@z-3zd
8fiC 6;:4H^*n
D2VXLZ/LlAvv
PU%@g'
;WmshzYxm=&!j:R
-."@e4"2v+#B
lLoa?F0y+P.wOs%}H6@c1hj,!
5(yo@HK}ZaX>
-,pTa1'
tdYx )&A
w^)W"`DCO=
3A&<uD
YQoLdYV
Z=TT .w{
tG)d!UAWF
KGR4K6
gWE$7znzgz
o915 "W*
Y`"V[e
4Kt>uX]
OI4285]!
\@*NG/9
[LVq"qrFpfK
h@ mVP:A%
o#idIR
nbLIn{5
%sB!dd&
>~Ta=y
/M|f,{H#4\+
cK<qu#
fuzpjw@
LH@b[~k[n
]*oh H
;!pjmo.`
3t/D!zql
_'_xx2K47
oG#/Bc!
*W'9~k`|AB
;^.Z 0.
zk!iA,Uli
mOjkcyp_5
$ XTk&.j
>I(;P|aG
1zocKZsnF
U.$7bt;
Q`S\(-55Q
fhE]Z%kPpK!B7#8
[tATH|*j
+9A8 lb:
(lHnRL
|-1kwOFK
="~QSJO'$
@#-Oj< O
Z9>Hv|L:
mL==+V
^q{UU'@)NiK0
ZX|n@C*?K
)Ts2U&,
d'o?"Ze)Q`
~.f\Q*
ogQn5-9 '
[T<)Z&
NcN+:V`a
jbj#N_x
@cD(YRpc
4iD{.
PNIqe'
'*L<N#Y4~K
|xaJ<t
[11.IbiB?9.5|bO
3o\'@3sn
0Z3:[I:\]>s
naX:I{={/#
#~4hc)c)DE
-p1dHb<0
HFHc90W]
H2[8sj
*W?CQ)N4d
U(SrHuS-x
H w3/S
T^[+Ho%
$_d" 2
k{YGebQu
0nkOki
uL\hm:G
uhLeizd
km:L%gC F"ox
,&~IOIP
,iv5\.W
}3owWsN6
9'b8&_PC\
"~e{cJP~7y
0j(v E+
c<~bHI>
gD_V0-%)u8q+I5H1bp\1
1/6g'5 y0
n!,\GfslcK ~>?+_
dG<keDJ6UHsct'{;/
odX-Fl5Z
Z0XLG>
lHRf0QWSoxF
0+C_88II
<'%r_= G3(
T>7a+eG
!uQfI6ko$~;>C
.Q\S%.M
+W.gd5f)u"lm. (V
yGRqpa"BhF)^r
s\o.mG
UE![zG
^4H5Blob
45'fK,0
3u@oT}!+0
w^xLP-96SVfS
fb-]#)WaB
zjr~_Bs88
|=I*:oU
2zVYJ=Wa
Iv>o!a2u
eOcI7S`%I
\=1;v^
y|{@V-m
!tBN.WwqY(
8FCVLL_)1w}{G
s'+8fvs/~
7KJTEe`e{t})~6$aFb
6$B/gBwQ6kZv
KuOD&A
t;"?;Z
%iL"f "LN
q[]b@k/!2mYp
FBI@[u<T
i314sF
64EwrYw-#
\Hr*lo^~(+E
A&{"5*g"c
^_1;&<D%p
*6g<Tx<=
dwM}Fr
Z_Ce p
&k^?DsiRM
hx~Ju^1/{pvd@pgb,5
$MBinUc}
qP$Ju]
?oRpE3?9li
e,S\Ru
m`Co+CB
53CS(O
Az P6,816]P"kT}&
@MI<l$
"uE0D%I
XN%2|<
v>#WT`85
x9:VjF
[>gJ:'
xHA`"]e3
^|'`<}x/!
oqMKk;hPs>
osp^9(
2<=RLy
5Mj{+CG>X?8?
u3a,H|5p61
[^O#XukMc%C5Q
\f8f<P3
\EAGNU!<F
P~~/x>3lb#
@ST!zY
EG~Lp>C
sNf[(/
*ztJJNx
dCV) U*
=xsw6I
*epyF8
<A}f0b
lv^ZU$
oH[Rfu
7AC`)m
0R;l(BwM
!7]1vJia)=WU1o?>:
`(kbx]ozM
x]O}MH]!
X*WM{T
,H+Ud^
}hY^Q@$-`
=a}fks)[:Bz
`KVpp32
OW2N0)wFH
W&3u4^=
MH!Pgd
w4"~bK
Db>;{O
?C.7+OAn
mrO<</v>5
-Jm4rM@L
&#mk;+1wadH
]^Er4@K}
eCQLg K*
[Zrd%O
Q}>I'>
3G3MwY~Q
7tQJbd
P2D[GTbEoaC1
v*d`;9
>RQN=o&
w6C/Fv
_?1$hs
Jd4Vd8U_b
Ru %Lr
o,~<ymK
9*+wm/Cw
OvG{cb
{HtAj\
lYKO_>m(
Qe UoHq
S \UVy'77v
3p{5`G
BAD/X?H&?}ed
M2"K5d:+n;
xO73(G
@Tq}7cAM0
Y6xIxz22'}&K*
3jftql[&bW"R
Oj4'T2
~: JG=hXg}
t;eN#C
l#g{(2
+^#_H(;
v[A'AU
f)CSrNvcJ~
eFY'NE
aCTSkCz
[+Nt#n
k}TN7He
i7?vbMI/PuE(
yi?lOJ
e:%"LXY[ f
ffK5HPt:
\:rHg.
AWR^7/o
c4GW~aF'8
}/;:D%
Xxc[|0zVs+"'
#'i/aLd`ll])q9;
)5lNOvJ|''
e.F=d{
D[IC+#
:CafC`fT
"{4*$79
|;m{9E3Z
D>>LfSo
^ip taYs!d(<:
94ok#w#
ehEx@~[ui6OS
_.z1$Vx+[x6n;
a0he"V7
^W\BsB37.[\
uvv^qts
qk.LK"
Ptof0D8t
#Y$bK1
{33,5~T]
yE/Qi5o
dLKVD"
J`cwDZ,Y
kf@l}srLs8[a0+_k
)/ \Kn
9gfxr%
QB|<;<O
p8Du.Kpp0
,>cM.gibB9Q(
ot*Z<o|:w%<2"
)fRCd
/IUh64$
f>GJVL
'b7/ap7-kkn
MQYp>,@
<@"!+|Qu]T_
cAH*QT3Dq
gA`+#7
UJg) @@
J5Bcl8~
?WyPu)
:$EcPK0
e+=L -
+]X,n%
#{7sa](2q-
%3?Q.h}
Vs|9\"kW
me dN{
[c%Yep
3y:dAn{q
M9y)cRYmO(73F6$Y
HQ.&e7GZ*M?>GUq
RAxV"YJY
jA8b7AQ^5
2yexnC#4&
_L2f4$
4r4=Yx
G694 t
$8"%pS
|F5K%S
^f8]2R
e|&iHR
@|-rOA9-
UjQa{-
*Vr; G6
"^y `;4y
Vpt84p
?V#-[LMcSse
wC<PEB
%rh;5\;Y^
971}FA
OYk!q`[
wFuq*vK
(;%< ;]%p6n"(
8:M%[5Xs
8B7m<ra
\h=gl4
p|aW^-#2
Zim*w@
n$s^{$4%lB.
~,G7X}{PUe5WkX
&!y]&5qBMh'
u`?+tX!K%
h[`Y"_$kR"V
pLMy@ ]NJS_K:&8
mnsg;3(l-
8LoBtW
N5}QlC
;x|yOdnT?JzbVdEtr<jv|Y8
aMTCTG0 /o
}V"K:PD
AO:\"1
vi'[GWJ2"BD3U
oHG"5Dn
qW"{SRc+\5RR
=(4\[&S@f')"
2xzIVy
YPR/3[
lqMoV9
ffjt\ytX
"4}>=+0
\ii{hn)
w:@IP@<FnleRT
BkID<:&
>1,'F4p
&]sEdiW
?Hvk>4
wnwwUSVg{p'V$"
mqisx/
>5 oZ~P
'EX ,Y&|vU+
I.O1\7
#g<x:t?R
'o}Pyd_K91T
?,jUc2pUxFZa;cS"
AG-nIHq
&95&z1`
-8./_u=Mww#]
]j,r7>t
:&1X8ip
FN7V%=5[s
pqh!GEH
kQ-L?m aS"aAx2{(o 9:B
9TIQcaK
G63.!DHRv$
3R0)|wE!hB{(%`
kS~yQ;s,2C%QVD(:}qq
=%vSq"f)NkfT
L5(,Ph,
SxX+g.s
Jc*"L7:
7W0;?^cO
"`'gfE4
ndVwV?B
mf\9.Moi
^t`S[eZ
&D~PGVN'00
SU6ZF#>[
A@;q11
*njMqa&
!AYX[04
#*~cY[Zq
G8LYhLjx"
L8^SDxD,
+z:t[L8
F7PnA(z
F:DGO|{
b8=saSzp
U:U2q
b:H>lw*'%
CjjzOT
?A<9'-
{74L^6fE^)5 _0
ei~jk:S?
%H=L,c,5C
1(Hw1$
2;R%U[6
^?H#VH
3zghP95!34%
)J|z`8
ugYaA!
eflf :;
()UTKK!A E
[Z0^Q'G
tgxw+5SS~
klLWLky
0}[?cZ
=?jpfa
lI/fIh#8
!8LbXl
#v7 &
tQ*vw*s
y8>FMJ?mb]-2
I0RHBvg
PiO,UR;RB_xXR
$=$tlzY
b'=?3f}9
(g(v^UfWzP+
q$7OF.
{xGJX=fzKIMgH
s]C+D,$
/jH}cL
B JG;giy+g7L
}.r( 2,
"5]"0TCKXj9y-Vy5)
N9!#.0.p\X
,":G\gFrV
lG*vw&
%1[03]x0$\^
a-+S"Fz6I
e?[<1jp
hSI%3y1WQ
ey:2wfYa
$wWL\t
KXfa-P
/v%dm0
C_- H
98mn:lr0pK
'DrY:Rc
8K3x''#nEY
+Km}#E
m*\&b^o 7.oDI"l9z+Fn6b(>(>
F[c)Oz
HivVG!:1f
oE+pJ%6
AYR5I{VVZs
t8f]l"
@\*y2p
,t?8hLh@-DYi{
:hjo)F:
s158oQ
Y7fbvm
y&zY9(%0t
.)EOc19ej.JqAh
Dq*J.Z1f1(CS
pL>yc]g |]
*jSQplx@9
"I>Q,Dl
U@BlD
#W_I{s
*Wh3ji
[**Jum
<.1KtwzN=eXb`@
cv(fb!]dn
&,G`f,
klN+/S
>x..K2
i[:=0ei
u9#wW4
c#2N/\=U(
kb~E6gs
5ts/ItU'
>FT?52.k`<n
Zv;AU~xFpwB)Hro}
[~_)*o%;
>PP^D*2
g&Z3(Mqo>
/y;h]8J
74;%$`
#/3;sz=!W
[RBscp
"Y]5y`.
S%_V_<
Qe|=-X;9x1Bie. vVM
k+!eC<+
=uBwIO {
vQ}~d
+q6crfd9
W}`o}L-n
OS1 18Oao`W1f QT
4?dPuI3 l|&
s>vja?
31WEws
}2ImdW!<u
;N2S"k
9; Nrp
L<}H{u? y!
aO^$O6
3O%]b}i$$
:0#_=-
z.&x}1Vh=)
LSoO<P
.$AXQ]<(;
6cYC|ZCf
Q8"y^o
?*E&{h
kUvYVb07
uAf!CM
n6ZGK#fA[
5[&\'W
b7eth!
[z]r`yP
@u4`\26V6dU
eTAG<kS uUJ
[h'65y
n$hKJp~Twm
us#cUQ
>|-25hlI
c&2VEy(p
($Y\VpB.,=nx
.$f;B$
fUhML):
2s ##hCyLpP60~
a0_@<J[+;+j
}Y`H-_vw
!q.e7/F2
vs<G)sN
p@CWS59(GU
+>z9;]G.v7AI
sg<uvh{
Dor33 Xct-Gg
. 2>\g2/"\G}Ef/C
ls>1%g
?F%vi2r:Dy|%]DK
*%t%Yi1EId1G_-f
w9`j!o
2NaK`O
'f.ZIz.
^K@n}nKjjmp
ODCrgR
w<Ol,nN{
A28XTfX"sa
:ZN*t$D
8*xFODkG6
B0ph4zmb
%V=z'=Nh
7!WI.[
so`" _BZ ?
Y+-bdt
l'>(0M<4
m|l#e~-
WvRln,
_q4Ou~
O4&^Q9rc
`pG1\w
su&iG!^
!,D9p>
H`@ZtDI
]OZMODY+
j0OZ&a
CcEh|@
E4<#p$
w_C,JESA+`n/rxk
3mN1Pi`,JP
!z)DfN~
mX.%^>
Qs&wmKNUx
G:QyS~J](
_+mb_h
&o+oW-m.ab
*Q}y*$
L\O,@[
rP#j|n+&
Zs}.< B
lYl{)II
_b%SP8'
j?DCgE
H043&|
52/%r9d
b%<>9(3ou
^]_EE$
2 h0uX#t
`MG/mjSL?3YLys
L#Br<~C
cb-|Slf
>bBm9r
I<j\*HaX
Q{\pcQ_N
(osR.;
hFTE x
jflc"[Q
.KrksU[M:t^
*fpgC!%{|ined
<~;uUu
eJd8*7
26&zUQ
uG)ncq%
iC2T{v
j#RrWn
Z r/frJs
*/gSrwP
/aFS\B
[QYjH;B n@(KCei
}#h*{+
F!+BTi*
)KjvF*M
1i-7,cfZF%
L+oA"[
Y`=Z6s
k 01A f
Sk+KA!4jk
gR2Zi5'r,
B\xl~h.2"jS8UVd
Y}sn\5
5cAzu;
l`Hkq{vw
>(0oss
R-)R+C+
t^_J*<
t:_&a~
MPtOVLX
IcGf]!:
%(:(Mw
BoF&eGJb
Ua]vw<{E
b6tL)r#2kz
n+@V(orZOA2
eO+a mDOY%)F_?p6
cCd:|:&
$$R/k?
TXy&T\J)=
Ip-:j{`
?T7X}M6bZ)9itl
!}xs25y804!P`'}K1
>`"Z6Q
n,:)cQw]$
a)7^ 5
I;bM{%
\<TerE/
}8@^nfJ
S3v;1dh
Us)IMzNb#:e
'*jQ0kj
sU(o*d
MGz6!YB:z
IKc`oly
h#8XC(M
Y]5fdi69&Y
`h]&h>,S>s
z?r1F\)
,/BPi.
<cAS-M,
R?kZZQ
mBBVQbdQ
WvGN U:vu
,h@O%<FH
r YiY@
}|7 syD
*e&;JN#2>
JkG[=E^
^+vy^8
YRUe*0DUD?du7
P ^>2
D d9u/y`M6(b
zzMmgO
fT]t'8Z
5<%_Gv26AN1
)n7c~Yi
ao!VQS#X$%`[f
}i#\!^?N
S6u[b,.FKa~
2-3[b[aX
ko"~8j!bGm_hWsox+;
g1GbQ-Oe
+B%N#55my
w@iDxnIis1~6
,b`M9<?
bAkjA]mZYUP)_
uAUuF *|l,
/Qne(a-vQ
kQ*N0]
C?\dH0Q
p}m[@0Qs5Z>
aD Q9"G
j-*hnpbH%Kjn G
PG;mQmwCr6If
;=M7U]
Ekh>%H<pwC
-c5T-Biz0
}%%l6wF1
afqZBOk{@
Qs>X\H
d1srJVmh}
@Uk\M\
C"h4fn$[8
KzKS1,
u Go_j/isrj
0"lo~7
71 {_I
CFU~(M
w\3mP>
g1XEdG@9Z
t5.~H|
K';P618(
9=^pfs
Y+lT\w`0w7xq5cRL|m
X:s,f I
5<N}<B{
[P q<E*
tg&+}JZ
4#|Y R<
@JB``cS"r
OTg;-bQ7d
q.#M~J
~%S^hgO|L__5
Xyt%s@
#xt;$cB
:e]%m0%
l8GIxa\T
F@TW)5wXX
+r$lQ'
p,B,g`~%gK$
`{i%372pYDz]PdAm4UOvxKsm77#e.O9N
c-Q:HVmh
t#o+G9
.k,{+9
%>z{Kx?X
ZP+G.ZX-24S5%lDJl\4Zi7y
(g^&P)C~
y,Ke&r
VGT`iE'^pW9B
nw|Q5k
~)M-dME^15
$[v-(ez8#T
*E4`\Joe
y+@}u:
S.M1[ocs+8L=
Oy4\;%
yu2\Hz,r`
+!bpil#y|%2
D=S2H8]nh>V
sWHdx}5YW^H<
A#9GfyAO
e?YSqdj&3
!*LFVO_
H|sx/"\
-E1QL6X#nH
/@P7ROE\
S1Qw&{|.<
rCw<J$u
c^d0'G
8QRv dGc\5p,
XzQ^qBl
d'"nzAy
_*~]FhL={|
sfTKDH_XrGK
9^0+ ^wJO
fjZ1+=
zSmUt4
EL oG]o>
TK4.r}/ax9-wI S
"S!XCX
AgdBf/*F@BP
5PX?#K~
DI[K-a9
=' ay
vT 31k
W7,Ex@
@ZX&OCtsR
2:[@)0 s'p
fs"6wj
wdX2Q[Nq
'6!5 yQ.a
GqV\zF
a;eZIz
#8U+`qc
H/`7/BGg
1vgo6}C
*E3yUYMa/M
rPA6"t:8^thMY)4
88PDQ4
gw#? ZaXJ
CCD57z
.pFUs{
]Dr5E+
3){{Ea8j
EU|h6h<V9
1v\$yE
{#E qA
:wr"Qr9qW<
6`]pdI
"5Dp7;XJo
<P\F&e&3
Q$eTA1,
X)4Jp]VEp
gJ$n4r
[0-:#_aO?$+
5A/rMH3dFE;
'6>I_/-0*/7
2PUM_1
}uKG]_
Sc!dg8mz24vM<Qu
g{oz^_\
%s49'xCbw\M
mZ)rVg0Z
@w\\Hd
noxXFto
@G@=Cf
gvme/>
*3fCSr
mB.3`1
#0jTNk
|2~XkRB
;$pV6u
l/*z i]^
M\FU#zER7Yi|
O97,P4s
ijM^a~4y5Uy
eA:5LY
W_o=M8
cc"6jM
z[\,gr5A
s0FX+U,
8OYB-[
S&8qN*
-&yI'"|V3R
%\vBQ\
3 .%l j
KbzAKyT%xz=
ml oL#
:z&, E
GOwPPxp
"/oOHH1j
m\[q
JztROi
{S^LA_X/YRclq^]*
=b/<i=u"L3IY3
?r=7rA
;c^`gbew
ACuW"BVO4-i~R
MAh_$P!
~_v{-ntxAH[W6|}.'v{jf
3XyxJLZN~MJR
M*P"dgD8E97'
rW}~Vjy}&
G5$k,l7qUaN
IV1QY}wPT{" eJ[)~,ugT
*fhoi;
Fa%ZQuvr
IRs7%`:
ov>px>(%@Y
Xm:eOO
ej"XVV`Kk
[)nQ!w
lL.F@)H
S27{N$
5Z+Y>FtTF
`Xq)*Xa6XeaCD
U-[hhGM
P<Ck$%
>L@&Pq
BuT/dt
*Ay]SOI
-:H#HNDF
GO:b)d
f[gm|~/
s;+lu22b
aYPfkO3
_mJHW[;4m
}Hpk?[5RRBFBBrD4
D'dy BjPrGzq0o|S;c
)<n8~aP
(Y{<9Mr-l{jL.q
-reJnx
~EIMYt6
Jz]S0b
,6Jq42R%
c&w&hkE
S;KDyC
_A<KU_aw(w
L;ntnW
w'^&*W/mp)_+
!u#B+B
IsDp4w
n:zc S2n
W(Co5]Bc
V10.8n
CIxZe{
Xp=4dqk
o)O*Y)A(z
F<&%^U>
d6bFHbIzD
2c@i8#u#9RN-w8
Ll{sCNx
t+uedg
UN3{Z(v
z^^pP;
x~.c0I(A?/7
459 {`B3vB{h
+Zd$cw .cN
:+)>8O
~f\$~aL
5`thNc
2S< q`3>>vW1
=&@wOHb
3-,fKO
CSfUEn
r^I7%t
GhK#\1&!l
xb.U) .
N#'6yr
Oj}.w 4^
FVx{)z
n@M&<PC
9mUs)*
ma{)Dh
ui3'*!-KBJ`G\08!!(
*dHe7a8|h~
AnGHnXuCbj
E*;<hoI"
gMOFKN
NIRa{)WIjiv
=As$DXC
YC}>0
n}7=cw/
Jg e^w
Z`-UiIZ}`
]F4"V
Y*n>6dY
c*+)&,
b \T=Z
GE?)@2
N%x[.K;/
gx_B-)
>v-L:]R(75-/`L
}pGl.>\
">Wxjnw
VxsN2LA
;R}#h$#2H1s
adK`D|JUu
v",R`M
ic\(xM[
;BBIOiXKcq,
O(=SIv
6q2CY[e^$.W
A&H=*;~V+W4%
v~)i:%<kmC
@B j\,
[ASlWGFO
jEOA(Ei
h@nf%]jZ#M7
pF&HI?
/l0@EU
N5D)S9ka5
r>x+6):
2|VpR7_&
*L)T\>2X
9{IJb{5.:-X
gyGg,7~\q!
=; 5dw-r
%ys0GEnn*]A
em}Ez~
HRDZ8RSe
Wv4-LFje%
e7`@*En
vHb2Tth
`J ;I;G
Al8h#phCW2)~C|5H0x0kP#AK&
IOm)h(*|U8
8-n2jfn*zfd?rPJ
XSv)_]ue.vj
Qe`on;X
Uc{Z[e
IU3Xf}
`Q"v1 65ZwOL
@|<]JZdJ|A4y'J<
r}m}wS_%*RBq
U%=x[xOn7h
}+:A%|l
\1FqJ/7
%AaFITs
Jkp#9}
cD #=0y3p
y)N PM
b${#3mb
AaK}dSC%lS
P\:a,!
>s sEi
Uj::=q,Vd
~&z2-\
WX\.'lk+
ypC4oC" n2
sELFgMRkA8
\';/F;5Pg&
F[9Vl{
n\o cp
p#;JE]_wUe<ig
OAO=nk>
1&+M,U50PRsW
[7}_0+
i5~fXG!p
e\+j$E
8Q4mH1&T0{S
[@)%xTGI3x/
+#;!p;i Y7!
vCwHM,gtK
:ok"B6
HBJ"N2; Q
KRe:JQ
F+0H{{z=A@R
&`G]*9
#[r9j~T{
YUSN3;w
<.. .%i%
Z(8TCHE {
@^_*|
%os^}#C
t:eUo0\g
[#g=:=
=+phh]
F3Ff[!v.
w(?VgE
"LkYef#gZ"tC<CG`i
c:w8<!^?/
O>}ltT
Y'8brqEIayb
1z-ZilKy5&
bG8&-!b
)?o1%xs-p$s
9!z:C-SY4Lp~-`W
"uSz<HvTL=Yblok
?m3sPw
iM&-"
V lmKD@
6? ,7T
J6h=B:
h5^?nW
ivZ3uf
$"9V!F
F-2SSsr7u
iasq3a(
El"Mmy
A DBybC
1y2u`y$o5
mQ<7*kTyL
5)0tF"j
s"3npF7
)H-_VqbNi
9=9\J1~5
YV41SPy cn,H
5gcP3_3
{%Z\\P
x/V"xop
IhFuaOLqx.pU
vCw67n
N M8G%5
T ^%FU/,Hl3'U_#
} M_o-D
!*RsI/;$
>S=@Cfm1
'dnc?4
+v`oR}tZ3Q-@
Ft_4Y^[*
"8GnOb!Z6~)^
8/0N"/
4%@KBVZ'1
}[m9"^s
uYB {$
\xc/AX
@bR\,;
Et~z*V
oTXZ8Jq
,&Om~~
EK.\{3
_DU\VnF
t[L0HJ
>\:&W2
UqD@9K)b
-u=OsJAl
3]!t&*m
ev(-^)oi L3
V1Q=:n(
"N;mG4UG
*sjP*]$^cN!
7 7I#g
SHw5Rl(ba
sa^ohKCgY
V7z{A\~2
\-?4ha)
!a*ACE`
(LM,}y7@YL
w.qt#|k={]h
]4\<vTAxV
eDUzQt
ZY-=.cN
O,r}Xs$>@
zAj/#%#,*k"^d
tAx8j($&
GQlL( -E
,`S6:0XX
}/>h%gF
^$q?!C
2j+:3[
Ic/Qv%f$
fq0'7|eK
I+I1%7-
e!o[VQ]
(U?j3<sg
*~]!H>
@Ac`_r}`
`' >=8xj',]
U\)+X}
ZEbr K
.%GyxN`'
-q v#Y
'uOf"gYOuL
DMB<}3Azj
+D?#<{
C/#'1p
+Vl='V)
L{#YYrO
P|?&TZ&=g
eB8 ,BcG
;9aAn\
lf0wkqzz
f-$G~O
s.luL>W3WaC #K>!*QY[
<Ty y7I Hx<a?
si O6XF
yC&4Sz
>3`YC}X6vA
y,.4NO;_6D$?O
)FXI_d
]PzmI5
<?f]Y?
Y-uNLk>
_a6XW E4
;n|>$ z&
>>G63-VE7
2{i,nm#Y@g;8S
~%O'P`/4H~JBEn5
~#h;S\}]uF"tv<
h11cF<
! ETWj!
)mr}aT
=$|5|j2m
Z@F{/*HR-P#4mn
@4TO)+R1
AA_A>^
>?Z)V4#W
"VouQjsJv]7j
~i_Zm>vn\
`[_<<@d
( F~f{]
dw~CZ,!k5R
R}\0\h0&wg
Z1*G#b
){RTS"C
t~6x\s`r_I7Q1'
`'r%@Q?4tP
!aVfH[
!~e=jr]b7
ml\"+J
e:kxF=@
"^=<7_or
i^<0X43)~uBO4
XQt%a4~
GEmJnJ
z-Hf6JEe
V"/&BNQ_P7:K
'0/\@H
@/VZ5M
LKn8y:%;
eYw[(*Bdu
OlgdE[7
&bu{[e.
q@H4o<Og 28sJFc"w
r/@L9WwF
EgFeHK
h[)y0IxN
4n<sHo1
]v~x*G9b:!sO
/%^TZ0{
r<c`q5nSR%e{b;*F
E|^2QBc?Reyuf
]Hpq6c [1L^
wO(Q?7W
0PX/t%&~:7
c}/jsG7 &"HoCh
lh6 :W(vR
h\)w^h
@Xu?_0@
*H(3g'N]j^{T
O45Op
1%Kj>;
[^{/\1@;]
'Y9N-Xh
m\\Q 8 *
H1?3nz
K2~<CQqj
?,M.0H"
s_7N)0t
T.I3uGI
pR_hm0N(U
]GAfA a^
gX}J,X
U!+%yw:
h_>{ 55
;k@t5v|
2[ka^P|
+h{>ck3Ohc:[
eZ@-"a
t%3y8If0
f}gApo
GRy~gK3>
o*<v`>
fK_L*0
%n~DibR
H*KnD6=@
{sjo~T3p7Z<cNu
VZ-9Q>8H<D)DuU
Kr}Za2
Z.@e6j
hqg24{h
<dLaDz
{T1Eqb?o89gd
2~iR6{'
0lPryLm.H
n*1aOynqZqO{(
<A&.;(
}M5jtn0
Y*(O:z
?e19rC
s@|1TW:y%
P08eZe&
qq%<J)|
Y]D&"k
j;hn]0(
_:VlNd
23GQ%l
= <knA
Q7o9QA+<!G
x>oCq o
2o3cKsB)
Z]_[y{
h`F5;1@4
q@?<Ov
Wtx6umd
*u[:`K>[
\%>%230#
(+y0kF
0XdSQCcPy
H8dTA^F*UF
nK;#gU5
-b{@):z!
*|#oQa
P0 @NvU/*
&xJ?CD
(t9A8~q3
D#^TQJF
]fLqUp0PBbT
$?pvUB
th|/.g9
k0pL|Y%IzMl
qjEaU9c "
I!T@z0,o\9{0/uQ`*Z
=+w0[~]].i|>
)Dbt&]e
!{$ySn
YY^]c%
<*5l]UC5
`WP]@tTF\>
iie#bS;J
;v.einenZz/
SP(*lApP
Jvd~RX
FWpgCU[w(brk<
j Ei}'
LQ)jcX
Q%R0B=
r"~|Gi/
8IEWo#
?zeIKv
\?Y%`G`QB"
G#mgw;C
%)J{P!|
|U 8E#
^-t;u2[Sg
Z'%{(A8>-]..yNsX
nJ5vupt
c;/e%qlr|l
1/$_ys
O?wnoP
aK"hp_<
zd'ZD~
nT$Nc"aS
J%qBH2~r4K
6g\dqT
~:E.zE1L6J
h7()l5lj
aQ03Ob4
9^us*&
.i[ _UZQ5
Kmn:uIJq6L
8mfdLho%
l*\2`ng
suT07<
AbkQ95
~jcZ) De(n`M|
{LK^DOay
w_7E0&Db
f i N[
*#Vxct&#u3Bf
D%\:@&<M
076Gen
a({Aj.jVs
RVq{y .~Y6&>
&`EO8$Z;B_kz^0H
]rE8wVeZ`:`D2
_%[N2setg
-",+*Sir
ejW}S-
k;(s3G}
jrov#WJql{9
KQLa/<
pQx>x{yu@M/p-L7xta
,Ssrgc
]w5 3hAZ
I5]lAX(]n
"V$=(%$
jAa](`
AB3|'Uyc)B/K|
,T{E+S&
ka$kC(
sxw6k)e
j)',Bf3py2c
D'#_M(d
$nQP{xUi:
7S vGo
+Dm3Y%Af?Y9L3\
wG?ayeAM**e/t
Y+OBu|[LQ
3${TX0>
"9A.a+
pl?t,9\N
:8F;&1mbr0o
<^7URrY
>O1y^0
WV*#N~&
O;kJ_:
.XovQQ
b`/gX-9t
V!JVgXA
CM{s,M
zX{WZ-
("7,%{
e{d$j>N
i,v5!ol,P\feJm
Paa L3
J;.}~'
f4I)\e
{]!#?&.qw
j{W_1w
o-7\&8jLJ
8Lj{_E)*o
aX.3Tm
2fB #W=='T
`iA`wcxPd
,Nkv}F
Q6mMOP%3)V
.c9;Nyc
kuAQ}$QjY0f
~\sg&/<}j`
KS*M^l
6]Md3'E3f_+"
\11i8kN
r)nY>v&]]
hwM~NG
8X^YSBuc
uE*Pr+/
6y.+O1
Cg*Pm)
OU#Q75,
)B+Yh~?8
%(Z]#{g
nq_@{sFRqj
5W;V1L
a`]B-$u
?+!uw_e`{*_M
vI=@zT
e`My-8k
(:v,bs~hoGtd*57
s4HxFQC
5[:Wtvr
zw(Ji{\ ~0
&=3}knM
"[cd/pE
[T(H&+
qz8]_L
4&PD:j}2
"Edo+t
G <k?;YA
3lKqsyFJs
9:$<Dq
7/OKsW,2
=?YkbW|~
L`A,rd
SUVmBh
@irZh7TW
A&>U6|Bsu^OpR
(Xl@B#M
1YVdf``
xi7=%udm
V(,yry6R+c='r[
*?Oui8?y
+m(5 YV,Y]
b:;~|+
!8v-xA&
bxj=nr)lS
ch?~{[
,xQ!sL
NC -= %
z0-[&*2{h
y*%}!P
6Bry*HW\>tOy)
bg{ylNF$
<~(l9@F4
mEi*I{
NOcVjg~
;Ca#h{D~
7cW;f+
@hHTXE
6 $3N-^
hlP\,>
J*BkY5u
:Da=H(wmH,Nhdj
v]_yL|
^qv6s:]0n:[H%-z4IE
+fS^zJ>=.,K<f
CP|XTLn
Tpp7E@
*`jb+Q&fY@0[QH
z@/"CfB0-w&!H
4}qZh_
xCVJY'
WpWIfmZh
vo%H!h
5 SjyC
-QzPyX+
[',/T9
=HTwauC
I]WQ#H
!qF\-At
RC7Yj,>V
NLx_a 6.
5;m '6
7y3d>%nv3B
vg2ky}Ojd
z;KF+r
>QT/Z&3
w*$%$dqtQw|
>@lq[M8
wc@~z;
UW@nUqU5
\.Zz2X
&9o3 .k M^
aaewZV331,!J
lTg'_V
hki;~.I-a
0@8~~|^4B
O-x {+5h{X"n
J!t:QW9k
}5(f?Aa
b$SgYq+Cu
X?fO){<;`0
CvK0Xr/
dk?7f*!
&*>=z!ila
_N/}|ji
q) ]>L
|o3f8#c
vy?m3W
r42Q2*Hg<7
gF{yCIW9g8
[s\ML8
t{UT@|
zyL*"Ha
$)2G80
L8-QJ\
#<\)iF
$Bj6 >
S9)k}fhj3
K@\dFqx;O
}j g2SyB)`GU
Z4QwGO
sbm3)e(Xy0[U:
Xg4Dz`Z
35"5XSDc,,
h7-a_f
W4<]}OX
>Q<9Kytb.>-&p
<|&V8h
t3DuR:5
,\pX,hCT}u
Xw:!F0
w"^lelSKM
(I-ba6x
G!Ug5`<f7
3CO?f0d
B"wBW!
kb8")Y1UK;s
Rg hg@hfC
~qq$ZYle
=3=>Y7}
TA%[ D<Z,Uw
XZ`EOb
)phdwA
|\aP|+
]S#!4p
L$btN8
O$zfYHX
3;f$S~uX
,B<->F$m4
MtFl /B#
gLByy"?IG!BHM
@|AP]F^McB
VJNV"'w&
Tk_yEZ
?vZ~'"/Pc+LiM+8*Z\
S\_4Y".pvY8g0
n>?lUz(EvGC
e FmxaZ4
+agJ:'#Ko1XU
QsnHviZ
K*UB&7rClq
Pd3:*O
z8FQ8i`[
'<=n8u}
)Z7#3\5txq]"4WDt0?
TzK9S {
=R8=}%!
M9sf4Y
=KnnJGwv
P/M4~Y ub
{AEC2U
xBQUXHf#JAG
[ MURa
zZ]iCX"Cb
xgVd-Pm|x.[(@#*<
?>Q)%g
ou+BHb<8Da_
3;rRR^
jG^J v
]OC65_
=.r38 Si
]!N4-~
Ja&rw}huhW9
`5'vKVs
c1q; [g'5I9\x
R9Y]len*'
1[*yEj
R#4)@r
<J;*&m
X(!ON,y^t
VKzC)kz=1
s:1P(k5
YbXE"8
D/@-O1
y()z-.!
$ar%>G
|$o,2xD
ZAdEXi.
^4$BY`
, qv,$6
Bw<fg&NY
b\H,7=h
Jf1J?c/ytop$R$\_Y+,-9/-?c~(}d
fBX,FlFM
n3x@$<UatUKZ
G"rCf@
/L:x.`k/e6V
FD#rU=)`!>2gg8oKlbj
RaT'1@4`0
j?nyUb^
Gh;2~mri#3
%D9Wr-MmTE.R@
SM)qnAq1y}Tdk
6.Qn=U(
{z#i~35
{.A/ UfUWQ/}
T:qNOA
@O4&!U9Cf!
pYNd>g
~cB~uBd
3dS?|A
6P0obD
{H}M%,~9A*YqW
PJ<xdEzW
/8Usfh
|{&dl
>:[VRP
mtrm>VjSg a[
SZaQ6X)I Ct2i3
ZoXW@j
^8MejS
IloX#*p
I+BH:Z~=
MKnJHxo&:
B2#G!3%MUl{"wUZ.
YsvBtf
(y$rY3`2cH
G]rg+$"
3oNW%*
~dG?UW`a%F.
e)Vmi;aW}v'qM=M~1
PA.rgmeW*
i7FI}5
Rh=\F wP
? sDReS4Nzf
,\hnZ_F{
\2*3I{
&+KEjmt?C&0
9#GHGc
'pr<hpr
<BmUSE
r_(Dmt ztHCP
4;gC(T
{pAy2wEf ?
uuieD5
/Yb4N'
E *FF*Q!
n[nm1r-C7
\;zS_T
F=<n'D~B
$ 4:f7
lYFExB
ea\*v1|-}y
}LBQ| qJ/
{]UjTy)}d-
NRu#=4(
tV*4$; z+
LSH`8-LZ
$s}}]JJm>
BmFu)g
<m.|WR
7*$[Kb!
('!vV,t1'G@Iw
wR]G+t
RB$B u%:
#[*E$'n9%@
3qb1Fe{l
ZJbfP |y7&2N
UGfwa<
^z>>U+N}2O)iX
;u\5<
gTLVXq~[
4=twIm;Z){cnM6
m:oYrZ}fhx
\>G?N8
EWyf@Ji|/t
')<8/M
7\VbU="I
QRf1Z%mYEeLW-
u4;;M5B T
1{@af]['b)0~
rLRS|75O
*O3(Oo
BBc3s6l`
UCLL;ExU.uFG3
hZ]R(jQ
vU 60/x
Y?^-N5!*
8i)/{ -
*B]ExZx
#XyN|\Oa
_\;9:i/G5N
Hi\6<B@
]K.1([
62C'Ws3s0%
KzAmp_Fi
r)Ah)v I@
Wx2bj]OHOmV:uKN2Oq
9 P,0k&
5/ Ho!"A
Dqwoh()Elje2y<[^)
~Tx2FA)MD]
jmcV9g}dD
U"CVf2qift_$;
<y2nMOTO[q"L
9xP;>=
Naw~Pf]$Dn5Z^z%}/?')G^
|?*75ll
Ez^"\kd
^aF+D; 7
0fvuW*
")cg-X(yM
GV%1*{V_m
XRS|&y S-
Es![7 <
~&=m]N
z~ &QQ
dME/d4UrL
T#Q#\rb]
fW 2~2*}v$
L"C=n-XZ>NJo8V
Y7'u.bZcO{
Fj,P`i
v};+l4d:gh>x>9
?4TO3_
r HuJ(}a
tvH{f}6I
Wx\u5z:wH%;
kIcq=+7
K1j,6oHu|t
L%4>=Cr
} PzX^.^o
G7NwE#,
QCS2d7J
h~2>-vsR
@[5 GPF
j=LF.NSG
c\tx0Fey;hc^
`z[LezDCv.0}
d~'=1>
!4-,!>Ls(1$z
J=GcoAu
5dMzLS~6* 4! z,~6.
e%*h@(I
{T%dYRiT
!VawRQXy"R
'U@'L}
C7WP~uXc
l8niFq{wV
Buo)Ck
h:]7t)azz
V~X&|j$c
(z$six
i1' 6g
p~$q@n
N9)(`X
` A>%<> 5`
T-vZ^4
T,FOAH F##
#&%9v1h&
_`)>|Qrt
o0>Gc6YO
"Ws0{2
c#|rjB~P?
_j+I]4
#t Z!wvM:
ZaDs`e
8!cnHDN!
-7X;CY
O6lCSP^
=Hz;,O]6
{Cru`:Rk
Ow:*#W44
TDQWPv
U>s"J9
0!!F<L9R5z
'<59Yi
0ckrflX
8r\XtU
pNvP8M*@:tZ9p*bW
gQ<&7L?ws
\q!j,x9t
_la|SI
-9/_ [,s
K.ty.p
kR1b|(&
+TDYO)
>yloOOE
5DM#<B|{
QA11n*f
>Y"s*X
T5ht/nfbz
O)yI4C6C
2yR .glJ3I
!v<m_v
^7$*)4-'W ty"Knr1D
r f>5u
e%|F4~VS,$`
oLnM}n`%BCX%Ni
kLz(!H@
'Krl,UEAI
v;^f(PU:m
Qpl[pN
0v)~Gt_h1g]G
c8BpE^ 1(
"P2c%G
`s`[CTf,fO%;
!'?0gO
;=lVsT
z@8Fnh
ovR=P`MF-
$.aSXe
+w )N7c
n==`"$yS)j$!*t<Y
&`+LB4Gc
=n?sK9
Z?Ke!RsC
jl!q 6
oOj1.K(dK
/YdH=dbXu#?
ds8,zf?mGH
r62>HTp
JF{P45bK
l)!7^X1"
v|Q8L5c
U`Q/x)B
B&$&V3~[!k-
E0/#[$>`
,Q)1VeqU_,*6
Tt@Ye[,w =I{
ZyJ ZQgf\
b9< gW
nDd99F
s0s=Y{
.)2+yDvS
1)Kn\yX
SH L8?3!
|<_?6e
U?7 wtv&
"pvF&-
e9:=R;/r^!w@C/
d\KVlsLoQK(/~KCgM
C8#&+zl$I
b%"XBN|
e]U6[IGg&_@3|
he| AAV
X{tjM?
T!M:urfAN
f(*[IaH
K:rs8ZLW0<=W3%
qx#^IC
.XLAZsg
"n6%q1K#
|n:W?za
`"V:S.
PPG%+{c
lb#>vj]SEW
,yO*Pb
tv=I9.k
(ky#,.-dZo
^bu:bp
|<QFn/}O
^x:TcbTzps2
d1 @Cc{qI^
n^BU<*Nf
R.@RA#I
8Ln,lUkx
s]\"Wh
gM1-4>
W!oQ[IX
C]0iXk
e'sL~) <
J0<SoxBo
*&\nsKw0S
Vbl@(hp
S 6&an
rpXQTk
o27Hs0s'
-CBx${gx8$d
#gP>vt')s#w
F^P`!a6p-REV
:@W^C F7
>'|%=q&
|kBqhOP#&s
PW*"7?+D"
U }}-Y
8tYC|\^Wt598Ehk>R0
n.L;o!
>nYn3$#p
q0.7xn
HZrI<2
VeLiMNwUY
I.<;ft
"h=7El^H!5u8
1MZ]D{Xv"y
<"kj;(n&
N4 ?(n(/y|z
E]##{^4(U
!'?*4
#6X!63
%P<t*%
K@8R;]w
?H&tEO)[
wyvL:(.u\x>
`|bT2$
#M"^3'!{,x]
I`U{~-aeZ{Qg
Y{(Q#
\c[f F
}h%9&D
]<gL2ocd
d+tTez
<UFf$U
tJZ hCK@B]
<\1]V}
BU YA8
cyU|;z
r"Z`JjP
g<fF~)PfoEuG\
9('z>H
DLCiL&NKJ^dG
Zcb)xp^5~
~\G'$[!
OGtpZ6D+
lcm#aL3IhFF0qtW>: N))P^c
+}xM4KC
(;o}h-ih|
=}Ss<a2
l p68L$'$g2
2ZovtW('b#
:diaF<D^|6
Ri"3#ui6L2nA\i
W93+!I{
p]F^~;34?n&
,XQ(rL
P*8|#)nfO
wj:\;c8
I:R$AE{l
*7=.I&=
!,m(\2r
<CU_`9<xW[<A
})(aoHUd
m<~.f`Ov#$
fz#1|H
\;}E%%C
=09\E5Sk
}xx)f5N_\
'z,cd/
~fX&eQ
{[*c6j
};4Omt
t^p7/X%|Ap
WbY9l^
C1Zv+slSBj!_A>V
kBc/qX
-t&yk~A
|9p0D[
Ks6Uy"'
-pcHo#
e4&S/.W)
jTMgFAMh)
i=z/fi&
y>K\pno
]\9JD`
kd#`HYL)d#
8&!#gT2|j
V<;E90kaqf4*
tBcLQP
P+?p)
)Y& 'x
rr/ if<BdS
|_' `g-kl
),?SlL9r(
]x9FLAa
(9WT<Bn1
E.(hT?sR
6AQpr0.
"o[%nI
/9desS.JeB_
vZ[n| 6TT@+2
i}oM4kXf
m8vn^\
|dbL=MR
^PS]zYWC 9S
<a-;xg
&J,ztN$
k`M[UBU
sd$U+7Y}
;TJ5?A
Q 7r*7FkNr|
3,J#$QB\tr:&n0
I y{E$i+
@[iS2@n
iZW>`N
kF2_@BAI
@e'b)!tl/z|-OjTCJ
}*zkJ:t
h ~B{(a
)x@nyIn J$AK
KR1/SV
,;t'00_z5MFNi%~3
7/;!G/S0
m?xgiN
$`~OC[KHrR:,
qL.l}u:s
pgpDXW
^U>O_9[v'm#
@JF4c @
nq71J2
5Vl*VC@8D("ibBN*DJ
QEk^]Bp<;
[PQOim
42Z),3*fI
+=mO!\aRF]N3G=,8 >I1$CZ}s
SsHNDv
Y<;KbhjzKcj=
t@FPPW1D\
WOh ,\dV'
|5zYr5aD
c!Z8>Q?
wm&%z&Sm
Y~]$ex
vL5h$>g
.p2lH5@pWy?c=
<%@.XCGrc
4^Xb`N
usIc%g
-Vz8t3
o>yz,+
)(<ic&
F/PrQ1 :!eq
@gEMQP
P(]_Icgk
7Y7^-iF&K q|
[x^Vp-3
d:IW}8
(U1:XyR
a}% cE!
A.f ':
lY`a8DO7
(wpQXZJ
OQsyhp
C.@Yaj
]EY,;H4
IZ`c"F
p2;nLvi
=)Tq\[
3wBuHz&G?V|:U)
5Ifg4Y66;iw<EI&
""eSuR
,`TMB*
y ?^I's}G
a*`&4"v
W!Bk!?RwO=a
'jCo\m
w+Df_- o
j?4I(L-%V'r
lh:824}
e=M)n==|
GH! $_:.S`
`{'m[/
\bFo9~F~
tdC y:i
h\9A%0\*g~
+}MHOB5S
B>'<3P
%p'b~^`V
&_F'~B)
,,,,,,,,,,,@z
,,,,,,,,,,@z
,,,,,,,,,
,,,,,,,,
,,,,,lllll
,,,,,lllll
,,,,llllll
,,,$llllll
,,$$llllll
,$$$llllll
$$$$llllll
$$$$llllll@z
$$$$llllll
$$$$llllll
$$$$llllll
$$$$llllll@z
$$$$llllll@z
$$$$llllll@z
$$$$llllll
$$$$llllll
$$$$llllll
$$$$llllll@z
$$$$llllll@z
$$$$llllll@z
$$$$llllll
QI$$$lSSlll
QI$$$lSSlll
QI$$$lSSlll@z
QI$$$lSSlll@z
QIQI$$lSSlll@z
QIQI$$lSSlll
QIQI$$lSSlll
lSSlll
gllSSlll
glSSlll
glSSlll
gllSSlll
lSSlll
YlSSlll
YlSSlll$$
YlSSlll$$
YlSSlll$$$
YlSSlll$$$
YlSSlll$$$
lSSlll$$$
llSSll$$$$$
llSSll$$$$$
llSSll$$$$$
llSSll$$$$$
llSSll$$$$
llSSll$$$
llSSllgg
lSSlllgg
\\\\\\
lSSlll@z
\\\\\\
GGGlSSlll
\\\\\\\
GGGlSSlll
\\\\\\\
GGGlSSlll
\\\\\\\
GGGlSSlll@z
\\\\\\\
GGGlSSlll@z
\\\\\\\
GGGGSSlllp
\\\\\\\
GGGGSSlllp
\\\\\\\
GGGGSSlll
\\\\\\\
GGGGSSlll
g\\\\\\\
GGGGSSlll
\\\\\\\\
GGGGSSlll
\\\\\\\\
GGGGSSlll
\\\\\\\\
GGGGSSlll
\\\\\\\\
GGGGSSlll
\\\\\\\\
GGGGSSlll
\\\\\\\\
GGGGSSlll
\\\\\\\\
GGGGSSlll
\\\\\\\\
GGGGSSlll
\\\\\\\\
GGGGSSlll
\\\\\\\\\
GGGGSSlll
\\\\\\\\\
GGGGSSlll
g\\\\\\\\\
GGGGSSlll
g\\\\\\\\\
GGGGSSGllgg\\\\\\\\\
GGGGSSGllgg\\\\\\\\\
GGGGSSGll
gg\\\\\\\\\
GGGGSGGll
gg\\\\\\\\\
GGGGGGGll
g\\\\\\\\\\
GGGGGGGll
\\\\\\\\\\
GGGGGGGGl
\\\\\\\\\\
GGGGGGGG
\\\\\\\\\\
GGGGGGGG
GGGGGGGG
GGGGGGGG
GGGGGGGG
sqfqfqfqfET
oGGGGGGGG
sqfqfqfqfET
oGGGGGGGG
qfqfqfqfET
oGGGGGGGG
CqfqfqfETET
GGGGGGGG
CqfqfqfETET
GGGGGGGG
qfqfqfETET
GGGGGGGGG
qfqfETETET
GGGGGGGG
\\\\\\\\qfqfET
GGGGGGGG
\\\\\\\\\\
GGGGGGGG
\\\\\\\\\\
GGGGGGGG
\\\\\\\\\\
}GGGGGGGG
\\\\\\\\\\
}GGGGGGGGG
\\\\\\\\
}lGGGGGGGG
\\\\\\\\ETET
}}lGGGGGGGG
\\\\\\\\ETET
lGGGGGGGG
\\\\\\\\ET
lGGGGGGGG
\\\\\\\\ET
lGGGGGGGGG
\\\\\\\ET
llGGGGGGGG
\\\\\\\
llGGGGGGGG
\\\\\\\
llGGGGGGGG
\\\\\\ET
llGGGGGGGG
\\\\\\
llGGGGGGGG
\\\\\\
llGGGGGGGGG
lllGGGGGGGG
lllGGGGGGGG
lllGGGGGGGG
lllGGGGGGGG
lllGGGGGGGG
llllGGGGGGGG
llllGGGGGGGG
llllGGGGGGGG
llllGGGGGGGG
\qfqfqfqfqfqf
llllGGGGGGGGqfqfqfqfqfqfqf
lllllGGGGGGGGGqfqfqfqfqfqf
llllllGGGGGGGGqfqfqfqfqfqf
llllllGGGGGGGGqfqfqfqfqfqf
llllllGGGGGGGGqfqfqfqfqfqf
llllllGGGGGGGGqfqfqfqfqfqf
GGGGGGGqfqfqfqfqfqf
GGGGGGGqf
GGGGGGGqf
GGGGGGqf
GGGGGGqf'N
GGGGGGqf'N'N
GGGGGGqf'N'N
GGGGGGG'N'N'N
GGGGGGG'N'N'N'N
GGGGGGG'N'N'N'N
GGGGGGG'N'N'N'N
GGGGGGG'N'N'N'N
GGGGGGGG'N'N'N
GGGGGGGG'N'N'N
GGGGGGGG'N'N
GGGGGGG'N'N
GGGGGGG'N
GGGGGGG
GGGGGGGG
GGGGGGGG
GGGGGGGG
GGGGGGGG
GGGGGGGG
GGGGGGGG
'NGGGGGGGG
'NGGGGGGGGqf
'NGGGGGGGGqf
-?IGGGGGGGGqf
-?IGGGGGGGGqf
-?IGGGGGGGGG
-?I-?IGGGGGGGG
!llllll'N
-?IGGGGGGGG
!llllll'N
-?IGGGGGGGG
llllll
GGGGGGGG
llllll}
GGGGGGGG
llllll}
GGGGGGGG
llllll}
GGGGGGG
llllll
GGGGGGG
lllllluuu
GGGGGGG
lllllluuu
GGGGGGG
lllllluuu
GGGGGGG
lllllluuu
GGGGGG
lllllluu
GGGGGG
lllllluu
GGGGGG
lllllluu
GGGGGG
lllllluu
GGGGGG
lllllluu
GGGGGG
llllll
qfGGGGG
llllll
qfGGGGG
llllll
qfGGGGG
llllll
qfGGGGG
llllll
qfGGGGG
llllll
qfGGGGG
llllll
qfqfGGGG
llllll
qfqfGGGG
llllll
qfqfGGGG
llllll
qfqfGGGG
llllll
llllll
llllll
llllll
llllll
llllll
llllll}}
llllll}}
llllll}}
llllll}}}
llllll}}}
qfqfqfm
llllll}}}qf
qfqfqfm
llllll}}}qf
qfqfqfm
llllll
qfqfqfm
llllll
qfqfqfm
qfqfqfm
qfqfqfm
qfqfqf
qfqfqf
qfqfqf
vcvc@z
vcvcvcvc@z
vcvcvcvc@z
vcvcvc@z
vcvc@z
vcvc@z
qfqfqf
qfqfqf
qfqfqfqf
qfqfqfqf
qfqfqfqf
qfqfqfqfqf
qfqfqfqfqf
qfqfqfqfqf
;OOOOOO}j
C`'`'`'`'`'`'`'`'`'`'`'`'`'`'`'`'`'`'`'`'`'`'`'`'`'`'`'`'`'`'?
-------
*------_V_V_V_Vo----xaH,ZH,Z--
C}j}j--KXJKXJKXJKXJKXJKXJKXJ>
^^^----qqOOOO,K,K,K,K,K------
_V_Vo---xaxaxaxa---
C----------KXJ.
KXJKXJKXJ>
^^^---qqOO|
,K,K,K,K,K------
_V--xaxaxaxaxaxa
;----------------.
KXJKXJ>
^^---qOO|
,K,K,K,K,K------
oxaxaxaxaxaxaxaxa
;-----------------.
KXJKXJ>
---qO|
,K,K,K,K,K_V
xaoxaxaxaxaxaxal?
------------------.
,K,K,K,K,K_V_V
Oxaoxaxaxaxaxaxal?l?l?
------------------.
,K,K,K,K,K_V_V_V
Oxaxaxaoxaxaxaxal?l?l?l?
----------
^^qqq|
,K,K,K,K,K_V_V_V_VOOxaxaxaxaxaxaOl?l?l?O
---------
^^^qq|
AdAdAd
,K,K,K,K,K_V_V_V_V_V_VOOxaoxaOOOOl?OO
--------
}j}jOO
^^^^*{qOAdAd
,K,K,K,K,K_V_Vxaxa_VOH,ZH,ZxaoOl?l?OOOOO
--------
KXJKXJKXJ}j}jOO^?
^^^^^*{
,K,K,K,K,KxaxaxaxaOH,ZH,ZH,Zo]!H]!H]!H]!H]!H]!H]!H]!H]!H]!H]!H
--------
KXJKXJKXJKXJ}j}j}j^^?
,K,K,K,KxaxaxaxaxaxaxaH,ZH,Z]!H]!H]!H]!H]!H]!H]!H]!H]!H]!H]!H]!H]!H]!H
&g&g&g^
KXJKXJKXJKXJ}j^^^^^^^^
,KxaxaxaxaxaxaxaH,ZH,Z]!Hol?l?OOOOOOOOO
&g&g&g&g&g^
KXJKXJKXJ^^^^^^^^
xaxaxaxaxaxaxaxaH,ZOl?OOOOOOOOOOO
&g&g&g&g&g^
KXJ^^^^^^^^
xaxaxaxaxaxaxaxaH,ZH,ZOl?l?l?oOOOOOOOO
&g&g&g&g&g&g^
^^^^^^^_V_V
xaxaxaxaxaxa?
H,ZH,Z
l?l?l?oOOOOOOOOOO
;&g&g&g&g&g^
^^^^_V_V?
xaxaxaxa?
l?OoOOOOOOOOOOOOOOOO
Q&g&g&g&g&g&g^
oOOOOOOOOOOOOOOOOO
&g&g&g&g&g
xaxaxaxaxa?
OOOOOOO
OOOOOOO
&g&g&g&g&g&g
OOOOOOO
&g&g&g&g&g
xaxaxa^
&g&g&g&g&g&g
QI1,I1,I1,
;xaxaxaxaxa^
&g&g&g&g&g
I1,I1,I1,I1,
;xaxaxaxaxa^
&g&g&g&g&g&g
I1,I1,I1,I1,
nInInInInInI
xaxaxaxaxa^
&g&g&g&g&g
I1,I1,I1,I1,I1,
nInInInInI
xaxaxaxa.
&g&g&g&g&g&g
I1,I1,nInInI
nInInInI
OOOOOOOOO
&g&g&g&g&g
nInInInInI
;xaxaxaxaxa
OOOOOOOOOOOOOO
&g&g&g&g&g&g
nInInInInI
;xaxaxaxaxaxa
KXJKXJ^
OOOOOOOOOOOOOO
Q&g&g&g&g&g
nInInInInInI
0xaxaxaxaxaxaxaxa
H,ZH,ZH,Z^^^
KXJKXJKXJKXJ?
OOOOO.].].].]OOOO
Q&g&g&g&g&g&g
nInInInInIOO
0xaxaxaxaxaxaxaxa
j_VH,ZH,ZH,ZOOOOOAd>
fOO.].].].].].].].].].].]
Q&g&g&g&g&g
fxaxaxaxaxaxaxa
fAdAd>
KXJKXJoKXJKXJ?
OOOOO.].].].].].].].].].].].].]&g&g&g&g&g&gnInI
I1,OOOxaxaxaxaxaxa
j_V_V_V_V
;OOOOAdAdAd>
KXJoKXJKXJKXJKXJ?
N}j}j}j}jOOOO.].].].].].].].].].].].].]&g&g&g&g&g&gnInInInI
I1,OOOxaxaxaxa
j_V_V_V_Vc1
;OOOAdAdAdOO>
KXJKXJoKXJKXJKXJ
}j}j}j}j
OOO.].].].].].].].].].].].]&g&g&g&g&g&gnInInInInI
j_V_V_V_Vc1c1c1
;OAdAd*{*{*{O>
OKXJKXJKXJKXJKXJ
}j}j}j}j}j
OOO.].].].].].].].].].].]&g&g&g&g&g&gnInInI
xaxaxaxa.]
_V_V_V_Vc1c1c1c1
;Ad*{*{*{(((
oKXJKXJKXJ
}j}j}j}j}j
OOO.].].].].].].].].]&g&g&g&g&g&g.].].].]
xaxaxaxaxaxa
_V_V_V_Vc1c1c1c1c1
;*{*{*{((
KXJKXJKXJ
}j}j}j}j}j?
OOOOOff.].].].].]&g&g&g&g&g&g.].].].]
xaxaxaxaxaxaxaxa
_V_V_Vc1c1^^^^^
KXJKXJKXJ>
KXJ}j}j}j}j}j?
OOOOOfffffff&g&g&g&g&g.].].].].]xaxaxaxaxaxaxaxa
_V_V_V.].].]^^^^^
KXJKXJKXJKXJ}j}j}j?
OOOOfffffff&g&g&g&g&g&g.].].].]xaxaxaxaxaxaxaxa
_V_V.].].].]^^^^^
KXJKXJKXJKXJKXJKXJ?
OOOOfffffff&g&g&g&g&g
OOxaxaxaxaxaxa
_V_V.].].].].]^^^^
*{*{*{
KXJKXJKXJKXJ?
OOOOffffff&g&g&g&g&g&g
OOOOxaxaxaxajjjjjjj_V^^^
KXJKXJ?
OOOOffffff&g&g&g&g&gxaxaO^
OOOOfffff&g&g&g&g&gxaxaxa
.].].].].]>
OOOOfffff&g&g&gxaxaxaxajj
.].].].].].]>
OOOOOfff&g&gxaxaxaxaxaxajjjj
.].].].].].]>
OOOOOfff&gxaxaxaxaxaxaxa
jjjjjj
.].].].].]>
OOOOOffxaxaxaxaxaxaxaxa
.].].].]>
OOOOOfxaxaxaxaxaxaxafOOOO
.].].]>
OOOOOfxaxaxaxaxa&gffOOOOOOOOOOOO
}p}p}p
^^^^^^^
OOOOOfxaxaxaxa&gfffOOOOOOOOOOO
}p}p}p}p
0^^^^^^^^}p
OOOOO&g&g&g&g&g&gffOOOOOOOOOOO
}p}p}p}p
0^^^^^^^^}p}pp8
OOOOO&g&g&g&g&gfffOOOOOOOOOO
}p}p}p}p}p
0^^^^^^^^}p
p8p8p8
0#0/0;0E0Q000
11X2e2o2+3?3q3w33"4555i6w666666666l77777
8\888888
9"9?9a9o9v9|9999999999999999
:):4:I:W:d:j:q:
; ;&;,;3;:;G;N;S;k;{;;;;;;;;
<-<i<p<<<<<<<<P=|=======B>H>
]0c000.33333444
5|777)8;8l8~88q999K:S:6;;;<<
01[22[3334
>>>>>??
262>2E2c2h2222222<3d3l3s333+4B4x444n5v5555555
6(6Q6_666666
777777
8 858:8g88
9p9x9~9999
:%:+:@:_:|:::::E;K;;;;>>>>
? ?%?:?W?h?n?t?{???
X0?11111111111111111
2 2%2+21262<2B2H2M2S2Y2_2d2j2p2v2{22222222222222222222222
3"3(3.33393?3E3J3P3V3\3a3g3m3s3x3~33333333333333333333333
4 4%4+40464<4B4G4M4S4Y4^4d4j4p4u4{444444444444444444444444
5"5(5-53595?5D5R5X5z5555
6K66666
7"7+7?7G7Z7f7u7z777777777777;8C8Z8`8f8q8y8888888888888
:0:C:O:_:p:::::::2;?;f;n;;; <I<<<<<<
???????????????
0!0-060;0A0K0U0e0u0000000000000
1 1(13181>1H1R1e1j11N2m2w22222
3*3B3H3X3333333u4~44444
5"5/5:5C5V5a5~5555
6E6M6^6d666666666
858C89(:/:4:8:<:@:::::::G=S=Y====
>w>z??
11113333333&4k4p4t4x4|46x7777Z9==??
r001Q4444p5;
=================
>!>%>)>->1>5>9>K>W>>>>>>
?#?1?S?c?h?m?????????
0B0N0S0X0000000001'2/2A22233E3J3Z3{333333
4$4?4P444
5"5U5a5x66
8,8B8X8o8v8888888&9-9?9H999999999;:M:S:g:G;f;k; <<=
22233455555555:::::::::::::0;e?
01?22333$464f4444
5(5U5\5g5u5|5555g6l77
8O9i9|9999:;
> >*>S>>>>V???
8S8q8888f::"<==
>->H>S>>??
'01070=000002
3"3H4`4444444444G555
6.66666C777n88888
919D9w99999999999999
: :':/:H:Z:f:n:::::
;@;g;;;; <'=_=======K>V>`>f>z>>>>~?
001(3I5O5a5l555657t7779;*<}<<<X=====
8 8:8d8k8q8x888888
9O9_9v9~999999
:':,:1:U:::::::::::
;4;?;D;I;d;n;;;;;;;;;;;
<1<M<X<]<b<<<<<<<<<
=!=&=+=F=]=y=========+>O>k>v>{>>>>>>>
?#?E?S?b???????
1"1R11162]2h2x22&3E3[3e333
4:4c444(5Q5m55$6U6q6666b77^888%999999999
:%:H:c:p:~:::::::;;
<H<R<m<==
0700~11
373H3c3o33333333
4+4<4Q4[4~44{9F<<<<<<<<<>>>
???Z????
1R2m222256
9>9999::
;X;<r===
>>????
011j2}33L4^444s5m66
7%777777
8 8,8C8
999999
:o::S;;;;;;
<!<7<@<K<S<q<}<<<<<T=====
>D>d>>~????
&0.0T0x00000[111
2&2q22
424u455556 7a77777!88
999:V:f:
<,<=<E<U<f<<
>|?????
0222g334
5 525D5`5~555555555
6$6.6;6E6U666
9?9`9e9p9999999
:7:n:::I;};;;!<&<,<1<z<<<<q====
090y0000000
1%1;1v1}111%272I2[2m2
22222222<3%6666
7"7^7#9*929:9B9<>>?
080g00
1=1112.33r6F7|7
9<99::p;y;;;k<t<<
2^2f222
3i3x33346]99/:O::::N;X;;;;;;
<2<H<U<Z<h<==
629':/:f:m:r=
0000445(6f6q6|66666
7)757H7g77777
8&8J88g::L;;+<X<<<"===?
0/1222
4}44444
5"5j55
6%6.66666666a7m77777
8*828O8_8k8z8e94:::::::::1<N<==v>?
2"2E2h2222222
\1d1h1l1p1t1x1111111111111111111111
2 2$2(2,2024282<2@2D2H2L288888
9$9,949<9D9L9T9\9d9l9t9|99999999999999999
:$:,:4:<:D:L:T:\:d:l:t:|:::::::::::::::::
;$;,;4;<;D;L=P=T=X=\=`=d=h=l=p=t=x=|========================
2$2,242<2D2L2T2\2d2l2t2|22222222222222222
3$3,343<3D3L3T3\3d3l3t3|33333333333333333
4$4,444<4D4L4T4\4d4l4t4|44444444444444444
5$5,545<5D5L5T5\5d5l5t5|55555555555555555
6$6,646<6D6L6T6\6d6l6t6|66666666666666666
7$7,747<7D7L7T7\7d7l7t7|77777777777777777
8$8,848<8D8L8T8\8d8l8t8|88888888888888888
9$9(90989@9H9P9X9`9h9p9x99999999999999999
: :(:0:8:@:H:P:X:`:h:p:x:::::::::::::::::
; ;(;0;8;@;H;P;X;`;h;p;x;;;;;;;;;;;;;;;;;
< <(<0<8<@<H<P<X<`<h<p<x<<<<<<<<<<<<<<<<<
= =(=0=8=@=H=P=X=`=h=p=x=================
> >(>0>8>@>H>P>X>`>h>p>x>>>>>>>>>>>>>>>>>
? ?(?0?8?@?H?P?X?`?h?p?x?????????????????
0 0(00080@0
22222222222,3034383
4 4$4(4,4044484<4@4D4H4L4P4T4X4\4`4d4h4l4p4t4x4|444444444444444444444444444444444
5 5$5(5,5054585<5@5D5H5L5P5T5X5\5`5d5h5l5p5t5x5|5555555
0 0$0(0,04080<0@0D0H0L0P0\0d0h0l0p0t0x00000000000000000111111
2 2$2(2,20242
; ;$;(;,;0;4;8;<;@;D;H;L;P;T;X;\;`;d;h;l;p;t;x;|;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
< <$<(<,<0<4<8<<<@<D<H<L<P<T<X<\<`<
=$=,=4=<=D=L=T=\=d=l=t=|===============Z?^?b?f?
0x999999999999
: :,:8:D:P:\:h:t::::::::::::
;(;4;@;L;X;d;p;|;;;;;;;;;;;
<$<0<<<H<T<`<l<x<<<<<<<<<<<
=$=0=<=H=T=`=l=x==========
>$>,>4><>D>L>T>\>d>l>t>|>>>>>>>>>>>>>>>>>
?$?,?4?<?D?L?T?\?d?l?t?|?????????????????
0$0,040<0D0L0T0\0d0l0t0|00000000000000000
1$1,141<1D1L1T1\1d1l1t1|11111111111111111
2$2,242<2D2L2T2\2d2l2t2|22222222222222222
3$3,343<3D3L3T3\3d3l3t3|33333333333333333
4$4,444<4D4L4T4\4d4l4t4|44444444444444444
5 5(50585@5H5P5X5`5h5p5x55555555555555555
6 6(60686@6H6P6X6`6h6p6x66666666666666666
7 7(70787@7H7P7X7`7h7p7x77777777777777777
8 8(80888@8H8P8X8`8h8p8x88888888888888888
9 9(90989@9H9P9X9`9h9p9x99999999999999999
@ @ @ @ @ @ @ @ @ @ @ @
z h - C H S
a z - A Z - L a t n
u z - U Z - L a t n
k o k - I N
s y r - S Y
d i v - M V
q u z - B O
s r - S P - L a t n
a z - A Z - C y r l
u z - U Z - C y r l
q u z - E C
s r - S P - C y r l
q u z - P E
s m j - N O
b s - B A - L a t n
s m j - S E
s r - B A - L a t n
s m a - N O
s r - B A - C y r l
s m a - S E
s m s - F I
s m n - F I
z h - C H T
a z - a z - c y r l
a z - a z - l a t n
b s - b a - l a t n
d i v - m v
k o k - i n
q u z - b o
q u z - e c
q u z - p e
s m a - n o
s m a - s e
s m j - n o
s m j - s e
s m n - f i
s m s - f i
s r - b a - c y r l
s r - b a - l a t n
s r - s p - c y r l
s r - s p - l a t n
s y r - s y
u z - u z - c y r l
u z - u z - l a t n
z h - c h s
z h - c h t
B a d v a p i 3 2
a p i - m s - w i n - c o r e - f i b e r s - l 1 - 1 - 1
a p i - m s - w i n - c o r e - s y n c h - l 1 - 2 - 0
k e r n e l 3 2
m s c o r e e . d l l
( n u l l )
( ( ( ( ( H
(
( ( ( ( ( H
A L C _ A L L
L C _ C O L L A T E
L C _ C T Y P E
L C _ M O N E T A R Y
L C _ N U M E R I C
L C _ T I M E
B a p i - m s - w i n - a p p m o d e l - r u n t i m e - l 1 - 1 - 1
a p i - m s - w i n - c o r e - d a t e t i m e - l 1 - 1 - 1
a p i - m s - w i n - c o r e - f i l e - l 2 - 1 - 1
a p i - m s - w i n - c o r e - l o c a l i z a t i o n - l 1 - 2 - 1
a p i - m s - w i n - c o r e - l o c a l i z a t i o n - o b s o l e t e - l 1 - 2 - 0
a p i - m s - w i n - c o r e - p r o c e s s t h r e a d s - l 1 - 1 - 2
a p i - m s - w i n - c o r e - s t r i n g - l 1 - 1 - 0
a p i - m s - w i n - c o r e - s y s i n f o - l 1 - 2 - 1
a p i - m s - w i n - c o r e - w i n r t - l 1 - 1 - 0
a p i - m s - w i n - c o r e - x s t a t e - l 2 - 1 - 0
a p i - m s - w i n - r t c o r e - n t u s e r - w i n d o w - l 1 - 1 - 0
a p i - m s - w i n - s e c u r i t y - s y s t e m f u n c t i o n s - l 1 - 1 - 0
e x t - m s - w i n - k e r n e l 3 2 - p a c k a g e - c u r r e n t - l 1 - 1 - 0
e x t - m s - w i n - n t u s e r - d i a l o g b o x - l 1 - 1 - 0
e x t - m s - w i n - n t u s e r - w i n d o w s t a t i o n - l 1 - 1 - 0
u s e r 3 2
S u n d a y
M o n d a y
T u e s d a y
W e d n e s d a y
T h u r s d a y
F r i d a y
S a t u r d a y
J a n u a r y
F e b r u a r y
A u g u s t
S e p t e m b e r
O c t o b e r
N o v e m b e r
D e c e m b e r
M M / d d / y y
d d d d , M M M M d d , y y y y
H H : m m : s s
B a m e r i c a n
a m e r i c a n e n g l i s h
a m e r i c a n - e n g l i s h
a u s t r a l i a n
b e l g i a n
c a n a d i a n
c h i n e s e
c h i n e s e - h o n g k o n g
c h i n e s e - s i m p l i f i e d
c h i n e s e - s i n g a p o r e
c h i n e s e - t r a d i t i o n a l
d u t c h - b e l g i a n
e n g l i s h - a m e r i c a n
e n g l i s h - a u s
e n g l i s h - b e l i z e
e n g l i s h - c a n
e n g l i s h - c a r i b b e a n
e n g l i s h - i r e
e n g l i s h - j a m a i c a
e n g l i s h - n z
e n g l i s h - s o u t h a f r i c a
e n g l i s h - t r i n i d a d y t o b a g o
e n g l i s h - u k
e n g l i s h - u s
e n g l i s h - u s a
f r e n c h - b e l g i a n
f r e n c h - c a n a d i a n
f r e n c h - l u x e m b o u r g
f r e n c h - s w i s s
g e r m a n - a u s t r i a n
g e r m a n - l i c h t e n s t e i n
g e r m a n - l u x e m b o u r g
g e r m a n - s w i s s
i r i s h - e n g l i s h
i t a l i a n - s w i s s
n o r w e g i a n
n o r w e g i a n - b o k m a l
n o r w e g i a n - n y n o r s k
p o r t u g u e s e - b r a z i l i a n
s p a n i s h - a r g e n t i n a
s p a n i s h - b o l i v i a
s p a n i s h - c h i l e
s p a n i s h - c o l o m b i a
s p a n i s h - c o s t a r i c a
s p a n i s h - d o m i n i c a n r e p u b l i c
s p a n i s h - e c u a d o r
s p a n i s h - e l s a l v a d o r
s p a n i s h - g u a t e m a l a
s p a n i s h - h o n d u r a s
s p a n i s h - m e x i c a n
s p a n i s h - m o d e r n
s p a n i s h - n i c a r a g u a
s p a n i s h - p a n a m a
s p a n i s h - p a r a g u a y
s p a n i s h - p e r u
s p a n i s h - p u e r t o r i c o
s p a n i s h - u r u g u a y
s p a n i s h - v e n e z u e l a
s w e d i s h - f i n l a n d
a m e r i c a
b r i t a i n
e n g l a n d
g r e a t b r i t a i n
h o l l a n d
h o n g - k o n g
n e w - z e a l a n d
p r c h i n a
p r - c h i n a
p u e r t o - r i c o
s l o v a k
s o u t h a f r i c a
s o u t h k o r e a
s o u t h - a f r i c a
s o u t h - k o r e a
t r i n i d a d & t o b a g o
u n i t e d - k i n g d o m
u n i t e d - s t a t e s
C O N O U T $
z i v e h u d u n i n e x a w u v o f a p e x a w i x u s u k a z e r e r a c o s u g o
k e r n e l 3 2 . d l l
B B B B B B B B B B
B B B B B B B B B
O X Q X C J Q
M S S h e l l D l g
d h g d f h s
d f g h d f g h
g h d f g h d f g
N D a f o h i x e k a h o t i y i w i f u v u d a m o n i x u x a h o t o g u b o x i s i t o f i j i v a h i m a d a x u c o h e c a v u l i
L a d o x u n a p i W B i f u z i d a g o s o s e p u d a h e m e l i b u z e v a h i l i p e z i p a x u r o t o c o m u p e k o f e r i d i m a r i j o y a n e y e v e t u w i Z P u f e b e d o p i y o c o m u j i y e z e j o s u s u t i m e v u m a v i z a s e h a p e z o f o g i j u x o n u c o s e g o g i l i b o b i x a y o g a c i k u _ Y i l e t o z o y i h e b e z o b u w u c i w u d o c a d u f e r o j u d e w o c e k o d i k i c i s u p i z i p i k a r e b e g i v i n e n a s a b u g a k u k u c e h a l i
S o z a z e l o 7 P u g u y e w o t u n e d o b e d u h i x o t i w i r o z a c o y e m i b a t i y u p i h a l o x u
D e l i h e b o m i w a r o t i j a x o s u
H e U V o y e c a m i b e z i v e h u d u n i n e x a w u v o f a p e x a w i x u s u k a z e r e r a c o s u g o b a l i x i w e z o p i z u s u m o k o t u
Process Tree
-
066231352366aca533e889682b40c0949e5420695c32ee01e908b84a4e9a54a7.exe (2336)
"C:\Users\Administrator\AppData\Local\Temp\066231352366aca533e889682b40c0949e5420695c32ee01e908b84a4e9a54a7.exe"
- nslookup.exe (1496) nslookup carder.bit ns2.wowservers.ru
- nslookup.exe (2080) nslookup carder.bit ns1.wowservers.ru
- nslookup.exe (1912) nslookup ransomware.bit ns2.wowservers.ru
- nslookup.exe (2020) nslookup ransomware.bit ns1.wowservers.ru
- nslookup.exe (2728) nslookup carder.bit ns2.wowservers.ru
- nslookup.exe (1156) nslookup carder.bit ns1.wowservers.ru
- nslookup.exe (2328) nslookup ransomware.bit ns2.wowservers.ru
- nslookup.exe (2652) nslookup ransomware.bit ns2.wowservers.ru
- nslookup.exe (312) nslookup carder.bit ns1.wowservers.ru
- nslookup.exe (2484) nslookup ransomware.bit ns1.wowservers.ru
066231352366aca533e889682b40c0949e5420695c32ee01e908b84a4e9a54a7.exe, PID: 2336, Parent PID: 3028
default registry file network process services synchronisation iexplore office pdf
nslookup.exe, PID: 1156, Parent PID: 2336
default registry file network process services synchronisation iexplore office pdf
nslookup.exe, PID: 2328, Parent PID: 2336
default registry file network process services synchronisation iexplore office pdf
nslookup.exe, PID: 1496, Parent PID: 2336
default registry file network process services synchronisation iexplore office pdf
nslookup.exe, PID: 2484, Parent PID: 2336
default registry file network process services synchronisation iexplore office pdf
nslookup.exe, PID: 312, Parent PID: 2336
default registry file network process services synchronisation iexplore office pdf
nslookup.exe, PID: 1912, Parent PID: 2336
default registry file network process services synchronisation iexplore office pdf
nslookup.exe, PID: 2728, Parent PID: 2336
default registry file network process services synchronisation iexplore office pdf
nslookup.exe, PID: 2020, Parent PID: 2336
default registry file network process services synchronisation iexplore office pdf
Hosts
| IP |
|---|
| 114.114.114.114 |
| 107.178.223.183 |
DNS
TCP
No TCP connections recorded.
UDP
| Source | Source Port | Destination | Destination Port |
|---|---|---|---|
| 192.168.56.101 | 53179 | 224.0.0.252 | 5355 |
| 192.168.56.101 | 49642 | 224.0.0.252 | 5355 |
| 192.168.56.101 | 137 | 192.168.56.255 | 137 |
| 192.168.56.101 | 61714 | 114.114.114.114 | 53 |
| 192.168.56.101 | 56933 | 114.114.114.114 | 53 |
| 192.168.56.101 | 138 | 192.168.56.255 | 138 |
| 192.168.56.101 | 57665 | 224.0.0.252 | 5355 |
| 192.168.56.101 | 51758 | 114.114.114.114 | 53 |
| 192.168.56.101 | 52215 | 114.114.114.114 | 53 |
| 192.168.56.101 | 52216 | 107.178.223.183 ns2.wowservers.ru | 53 |
| 192.168.56.101 | 52217 | 107.178.223.183 ns2.wowservers.ru | 53 |
| 192.168.56.101 | 52218 | 107.178.223.183 ns2.wowservers.ru | 53 |
| 192.168.56.101 | 52219 | 107.178.223.183 ns2.wowservers.ru | 53 |
| 192.168.56.101 | 52220 | 107.178.223.183 ns2.wowservers.ru | 53 |
| 192.168.56.101 | 62361 | 114.114.114.114 | 53 |
| 192.168.56.101 | 62362 | 107.178.223.183 ns2.wowservers.ru | 53 |
| 192.168.56.101 | 62363 | 107.178.223.183 ns2.wowservers.ru | 53 |
| 192.168.56.101 | 62364 | 107.178.223.183 ns2.wowservers.ru | 53 |
| 192.168.56.101 | 62365 | 107.178.223.183 ns2.wowservers.ru | 53 |
| 192.168.56.101 | 62366 | 107.178.223.183 ns2.wowservers.ru | 53 |
| 192.168.56.101 | 62367 | 107.178.223.183 ns2.wowservers.ru | 53 |
| 192.168.56.101 | 62368 | 107.178.223.183 ns2.wowservers.ru | 53 |
| 192.168.56.101 | 62369 | 107.178.223.183 ns2.wowservers.ru | 53 |
| 192.168.56.101 | 62370 | 107.178.223.183 ns2.wowservers.ru | 53 |
| 192.168.56.101 | 62371 | 107.178.223.183 ns2.wowservers.ru | 53 |
| 192.168.56.101 | 62372 | 107.178.223.183 ns2.wowservers.ru | 53 |
| 192.168.56.101 | 62373 | 107.178.223.183 ns2.wowservers.ru | 53 |
| 192.168.56.101 | 62374 | 107.178.223.183 ns2.wowservers.ru | 53 |
| 192.168.56.101 | 62375 | 107.178.223.183 ns2.wowservers.ru | 53 |
| 192.168.56.101 | 62376 | 107.178.223.183 ns2.wowservers.ru | 53 |
| 192.168.56.101 | 62377 | 107.178.223.183 ns2.wowservers.ru | 53 |
| 192.168.56.101 | 62378 | 107.178.223.183 ns2.wowservers.ru | 53 |
| 192.168.56.101 | 62379 | 107.178.223.183 ns2.wowservers.ru | 53 |
| 192.168.56.101 | 62380 | 107.178.223.183 ns2.wowservers.ru | 53 |
| 192.168.56.101 | 62381 | 107.178.223.183 ns2.wowservers.ru | 53 |
| 192.168.56.101 | 62382 | 107.178.223.183 ns2.wowservers.ru | 53 |
| 192.168.56.101 | 62383 | 107.178.223.183 ns2.wowservers.ru | 53 |
| 192.168.56.101 | 62384 | 107.178.223.183 ns2.wowservers.ru | 53 |
| 192.168.56.101 | 62385 | 107.178.223.183 ns2.wowservers.ru | 53 |
| 192.168.56.101 | 62386 | 107.178.223.183 ns2.wowservers.ru | 53 |
| 192.168.56.101 | 62387 | 107.178.223.183 ns2.wowservers.ru | 53 |
| 192.168.56.101 | 62388 | 107.178.223.183 ns2.wowservers.ru | 53 |
| 192.168.56.101 | 62389 | 107.178.223.183 ns2.wowservers.ru | 53 |
| 192.168.56.101 | 62390 | 107.178.223.183 ns2.wowservers.ru | 53 |
| 192.168.56.101 | 62391 | 107.178.223.183 ns2.wowservers.ru | 53 |
| 192.168.56.101 | 62392 | 107.178.223.183 ns2.wowservers.ru | 53 |
| 192.168.56.101 | 62393 | 107.178.223.183 ns2.wowservers.ru | 53 |
| 192.168.56.101 | 62394 | 107.178.223.183 ns2.wowservers.ru | 53 |
| 192.168.56.101 | 62395 | 107.178.223.183 ns2.wowservers.ru | 53 |
| 192.168.56.101 | 62396 | 107.178.223.183 ns2.wowservers.ru | 53 |
| 192.168.56.101 | 62397 | 107.178.223.183 ns2.wowservers.ru | 53 |
| 192.168.56.101 | 62398 | 107.178.223.183 ns2.wowservers.ru | 53 |
| 192.168.56.101 | 62399 | 107.178.223.183 ns2.wowservers.ru | 53 |
| 192.168.56.101 | 62400 | 107.178.223.183 ns2.wowservers.ru | 53 |
| 192.168.56.101 | 62401 | 107.178.223.183 ns2.wowservers.ru | 53 |
| 192.168.56.101 | 62402 | 107.178.223.183 ns2.wowservers.ru | 53 |
| 192.168.56.101 | 62403 | 107.178.223.183 ns2.wowservers.ru | 53 |
| 192.168.56.101 | 62404 | 107.178.223.183 ns2.wowservers.ru | 53 |
HTTP & HTTPS Requests
No HTTP requests performed.
ICMP traffic
No ICMP traffic performed.
IRC traffic
No IRC requests performed.
Suricata Alerts
No Suricata Alerts
Suricata TLS
No Suricata TLS
Snort Alerts
No Snort Alerts
| Name | fe37204fd16302a2_weymkp.exe |
|---|---|
| Filepath | C:\Users\Administrator\AppData\Roaming\Microsoft\weymkp.exe |
| Size | 321.5KB |
| Processes | 2336 (066231352366aca533e889682b40c0949e5420695c32ee01e908b84a4e9a54a7.exe) |
| Type | PE32 executable (GUI) Intel 80386, for MS Windows |
| MD5 | 2f6b3b9de9313dac41a3a5a88a804bd4 |
| SHA1 | 02e81b0424b24e8299c946536c6e1acd4655e1a2 |
| SHA256 | fe37204fd16302a2f25df5a7b471a403b605293230c93ac8039abc4b0c0796cf |
| CRC32 | EE351F91 |
| ssdeep | None |
| Yara | None matched |
| VirusTotal | Search for analysis |
Sorry! No dropped buffers.