1.1
低危
62 个模型检测该样本为恶意！
重新分析
更多

1824e843c0b86be8067be8bcb528b7575f90207feaf75a10c86341d1083e4982

1824e843c0b86be8067be8bcb528b7575f90207feaf75a10c86341d1083e4982.exe

分析耗时

193s

最近分析

366天前

文件大小

320.0KB
静态报毒 动态报毒 CVE FAMILY METATYPE PLATFORM TYPE UNKNOWN WIN32 TROJAN WORM MIRA
鹰眼引擎
DACN 0.12
FACILE 1.00
IMCLNet 0.89
MFGraph 0.00
静态判定
反病毒引擎
查杀引擎 查杀结果 查杀时间 查杀版本
Alibaba None 20190527 0.3.0.5
Avast Win32:Malware-gen 20200505 18.4.3895.0
Baidu Win32.Worm.Mira.c 20190318 1.0.0.2
CrowdStrike win/malicious_confidence_100% (D) 20190702 1.0
Kingsoft None 20200505 2013.8.14.323
McAfee Trojan-FMLZ!21DC4A70C370 20200505 6.0.6.653
Tencent Worm.Win32.Mira.a 20200505 1.0.0.1
静态指标
行为判定
动态指标
该二进制文件可能包含加密或压缩数据，表明使用了打包工具 (2 个事件)
section {'name': '.text', 'virtual_address': '0x00001000', 'virtual_size': '0x0004d000', 'size_of_data': '0x00010400', 'entropy': 7.991487848661886} entropy 7.991487848661886 description 发现高熵的节
entropy 0.6878306878306878 description 此PE文件的整体熵值较高
网络通信
与未执行 DNS 查询的主机进行通信 (1 个事件)
host 114.114.114.114
文件已被 VirusTotal 上 62 个反病毒引擎识别为恶意 (50 out of 62 个事件)
ALYac Trojan.GenericKD.32946279
APEX Malicious
AVG Win32:Malware-gen
Acronis suspicious
Ad-Aware Trojan.GenericKD.32946279
AhnLab-V3 Trojan/Win32.Fakon.R284219
Antiy-AVL Trojan/Win32.Agent
Arcabit Trojan.Generic.D1F6B867
Avast Win32:Malware-gen
Avira TR/Crypt.FKM.Gen
Baidu Win32.Worm.Mira.c
BitDefender Trojan.GenericKD.32946279
BitDefenderTheta Gen:NN.ZexaF.34108.ui3faewMXObi
Bkav W32.AIDetectVM.malware
CMC Trojan.Win32.Agent!O
ClamAV Win.Trojan.Mira-6136421-0
Comodo Worm.Win32.Mira.AB@8r6cl2
CrowdStrike win/malicious_confidence_100% (D)
Cybereason malicious.0c370a
Cylance Unsafe
Cyren W32/S-93599454!Eldorado
DrWeb Win32.HLLO.Siggen.5
ESET-NOD32 Win32/Mira.A
Emsisoft Trojan.GenericKD.32946279 (B)
Endgame malicious (high confidence)
F-Prot W32/S-93599454!Eldorado
F-Secure Trojan.TR/Crypt.FKM.Gen
FireEye Generic.mg.21dc4a70c370a5a5
Fortinet W32/Mira.G!worm
GData Trojan.GenericKD.32946279
Ikarus Trojan.Win32.Occamy
Invincea heuristic
Jiangmin Trojan.Agent.ccod
K7AntiVirus Trojan ( 0056560b1 )
K7GW Trojan ( 0056560b1 )
Kaspersky Trojan.Win32.Agent.icgh
MAX malware (ai score=86)
Malwarebytes Worm.Mira
MaxSecure Win.MxResIcn.Heur.Gen
McAfee Trojan-FMLZ!21DC4A70C370
McAfee-GW-Edition BehavesLike.Win32.Generic.fc
MicroWorld-eScan Trojan.GenericKD.32946279
Microsoft Worm:Win32/Mira
NANO-Antivirus Trojan.Win32.Zusy.ethqlz
Panda Trj/Genetic.gen
Qihoo-360 HEUR/QVM17.0.03FE.Malware.Gen
Rising Worm.Mira!1.A270 (RDMK:cmRtazpGztahnJuosi0+3LCyQEy9)
SUPERAntiSpyware Trojan.Agent/Gen-Dropper
Sangfor Malware
SentinelOne DFI - Malicious PE
可视化分析
二进制图像
数据导入图像 288x288
数据导入图像 224x224
数据导入图像 192x192
数据导入图像 160x160
数据导入图像 128x128
数据导入图像 96x96
数据导入图像 64x64
数据导入图像 32x32
运行截图
暂无运行截图 该样本运行过程中未生成截图

👋 欢迎使用 ChatHawk

我是您的恶意软件分析助手，可以帮您分析和解读恶意软件报告。请随时向我提问！

🔍 主要威胁分析
⚡ 行为特征
🛡️ 防护建议
🔧 技术手段
🎯 检测方法
🤖

PE Compile Time

2014-02-27 14:41:59

PE Imphash

09d0478591d4f788cb3e5ea416c25237

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x0004d000 0x00010400 7.991487848661886
.rsrc 0x0004e000 0x00008000 0x00007600 5.220430507998276

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x00053ff0 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_US None
RT_ICON 0x00053ff0 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_US None
RT_ICON 0x00053ff0 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_US None
RT_ICON 0x00053ff0 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_US None
RT_ICON 0x00053ff0 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_US None
RT_ICON 0x00053ff0 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_US None
RT_ICON 0x00053ff0 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_US None
RT_ICON 0x00053ff0 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_US None
RT_ICON 0x00053ff0 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_US None
RT_GROUP_ICON 0x00054458 0x00000084 LANG_ENGLISH SUBLANG_ENGLISH_US None
RT_VERSION 0x000544e0 0x000002e0 LANG_ENGLISH SUBLANG_ENGLISH_US None

Imports

Library kernel32.dll:
• 0x4547d0 LoadLibraryA
• 0x4547d4 GetProcAddress
• 0x4547d8 VirtualAlloc
• 0x4547dc VirtualFree
L!This program cannot be run in DOS mode.
PEC2^O
h'u=T<
WqVQdD
4k/CVL
+/?nml
uF2&'nL)e:"
Q?QqJ[lP
y}WGL|^
C8yX7]Q}e|
#;yzh !P
^]#hsb
O93q4BFn\l'&
k{@|2TE
PECompact2
8e=W)+
j}bSkJ
ni6e>_3bWjg
Id@&=
:(^Fo'n
`gH!<?q
/WqbJPas
L)sy4~5
kHY~aK@9zLJ
$5fF/*7
#VHopf
+Ln2l3Ud
l}Mk@aA}O
3i?k(v
+yu3Qk*Of!
RGjh_{_
?G1Yt%
VXPaXpZ,
8m$mcJ;
Q5osDm=J0
[x7)"z`
Il,>}n
?@_>D@
XOdW,g|<
e3p|!-7
C&A"vCo
_^D34ADj
aW~H\C2
wP@|b2oN;$
#v:$-v5
(~Q):LsBC^Zx)9<ci!>_
W4>]vomzfQJk
.yY1<b
\-}.7=
3W~T/`+fx
M*M[>2#B)XyN%D
Ty.-@1)G
L*_W`J/
D~Pl(h\
et\#Tn0
b{0PWc$=0
OpALJf?
KZ=(9|[B:Rqq
!oaJ-,
>}Ph,
*WoWLNEh
Cn.K}&+
F\~pB}"
:_)]+P
<n8-K(
jjk^</Y
n&)~LLiXC<"
>>iH2_
s]/r.bY
rFuETv6omD
jU3gE$V
!=$m=J3e-
f$ASK>
0]ResR;**d_N|t
&V~OZ364
>FS'/79
-N,_]z
si4|6&Fl;
bnZly{s1x7?
OLlvU![a
* WU42
PRi(i+[hYdLcT
>v^^r'AD:
!YyM7
}DdUEU WN4@
VhbaQkr
-~D\-5 w
-.n3XqF!D
e/h3-(
HC~E#i
2vXw9(
3P5PRCb
{&1qxvkb
Qq.Zb0
f`,QOY
m0)C#I
2rh9q,LQ.ff~];
GP3~tV
.&`N""
W4sU'e=
I:,yi*.m
K%g?xzn
E?gqiT
?g3KCWt7'S:v&
oY7|X)g0
)r\>2NL
6_EipaN
8&q71,
.>C'flms
e%=a(z!
C&ozLD
92p7s@DD
I<P<<F27
T<)l?a
WH[N&:VW$
"D+W;u
D$Bg<#=g
Nb< %t"
Tt(x&9
HvQ-:q*j||
J",VK
T~C>$*1f@,0J97h=
kq/9NY
w<#J.1
JWzY!Gp.*
8,"3E
/18-/.o
VDe)jgaG0X
hEJNQdf~
]E2hKL`nz?,Nu
? zb%v
t^J@ry
n$W -s
04Q7dgUXu
k0+g/,l
3L;Y>wczah
[1hF:-/
u#q=FGc
Wi=<)J&"
3i'jD@"
K3+5E)AI
7LW"V^z7TO%
B9uh;8E
"R;=Qt
(35=8U[o
-.(5i"{
""_B0K
x5w5Q
,p?b@>d^Zb
95Hlmg
_X.)&ZDj-
g?)QQd)e@
#r\oTk
c%GDnf
jjcpV#`
4Ww-nB"
zSW?`B90>
] 6oM."f
Wu9=/|
h8/P?t&R*
uMfW7!lIjw8OI
iP}Iy[g89y
n<Kh*Km{5l4Ovz
6Pl$8J<C!U~Y
oON57[3fwf\3
~.)C<owbu
VUdr3OZS
g!uOk8
!w!(H{tJ
E=JYjc
Ph}rd"
2I\]VZ1){c
oXzYN*
fm;3Ekh
hCdGuyL
_;@_Sh
x,58R,G,
%)i?"7>
e<c]\Ut -
&/X9PPvz
+QXKG2x7
/gZqx6
#oZ(o7p_`o
Ej&{X8.sJ4w
!1fK:lV43^I
,;f%vFO
FsdAk"+lh+c
/.B7Jb^G
Z*e+?r
[xf 3)
era7n@
D1B,)gJa
d67W;b&1
(w_heGG|cu
)dZ(nH_!F"5o
C5|}k$
vW5|d"
PC#Ajo|[:
%C'4mY4D
.ze,}s
"!T+NN dNbAuY
Gykv-j
uyQbh*o}
:@w\bp
sy~G?O@!
UQ"[ps
>|K0{~m?
Eku9XZjZ
A/h+@J
(Ivyi0
8Re;0C>
*\C"wzV
1YEW#X[ch
Mi8}oh
zJpkj"JN
i2#fS~
?dfvh_l
C'r=99;Ou@
!u$%iCP
2-+8cx
t>^h5P>#1
Q[Hg=6
.l3]7Up
DN>!M^%
|nw!RF
Ltfeo9
Mf]t;_
-E3LEzi
owG\%f0
~Ocu`G1O7;T>P(
UPXYQ#
/62(m[+Vitsw
(S(hK5kXd
+ )(,A9
};|#|;$VWLr
Lgi~hc4V
XaD0~B
o7_Qz>
x<BX@a*&LVF3qd
i.K@1MaDQ'W0K$9!(TAZJ_H9
[U@O~\dd
jh}34AlJ2O0@
;} d&?/m
[wY(i6\
&yQjBXh4x6
vTr^'r?bY{
ZxY~:
.'D@fO
cnTkMyB8=
O:@uoau-
C!kv%54e
Pt 'SPM*e
204Ab)eet\W
Fj(`2}
uH"A^d
A|2ltkc3ty
,eP7n]yB0le
:j8D6*K
,`IICW
0wV@[-`ga
Bo~D\>l
u{~r9%kGI
m/=jV>F7cB00
M%e0j-"^
_sm<tx
7t;Cpa
jP:/eZvy(J
KV+b}V
](.LSA5XWZK53"
#d}F$D~u
Ohm%>WTobSSe
GskPTxDA)
S2hGOI{^*
|;FolF35{
JNjHp"j
sLn:*~
VYqJ=_
HmC_NOd'
['% ,=
lkMNC$tWM
}C?9M9,
p9R?P;s?i
^l#ex9)
S&<6e
Azz(Nf|G
Cyd7(KXfU
)pXh(-6{0l{}A
h@=^u.9
J;)a.'<sWxc
5qImSgJ
YTcdmO3s
7..)<>`"rzq
DQ<y<u
=&/g_5Wyl"B2eLqgyWh
!g$yY\
(+elO-U
f%~!A4_GN"t|a
OIS5;ip/
5;*e58Q
C{czl"
pes9}7P
'ztL>
)7 3x5
JA!OfCp$)G/
,BkgIy
25BfFx,
g(7UWD
WrSt\HWk
de=`FlU
gGvII4$o0ceQ
T }l0m4=
S.a??;
Cf{7)!B
03~Pk%T-
"?i99X[:
$zfgJX
=:I||]L
26z21*l1
D:e<KFD
_B\Bh=G
aX{Wzkptd~pAg
Dr@9*rD
D35l~[9_"pyA(
_Kf!CsvX
U_U;g{?
Bl34.e
ygT$5R[
?cjC=7
%2$Yea
)DLEx}:
^-labj:p .
sgNAxQz,B
+3~[@W
`.i&.^m[
g$E/$c
A2&dHD<
w$9u,Xl
XSas,H
SU#SsRFa
j.x@R.SC`V
oX~;%m5>,
IdpfAPF//74~RL
E}$<2'
gjdEZv
NbCFI'
}icXpxQ
5.:nig*1v
{G=7D[>!<k[cv-;4
`OrdtR(D
B:Gngl\&
@{d]@#q4%j
N~"sH;^[LR
Z4?D19L+J
!qw\FZiG
30b|zKc
aE%HOCP]'
, ns17={?
[oR7H}0N
XDX&MJo
?JZ/8|f
s&mXMa:=
L=7L#"
PI+n5}+$
)(@-QBGe?
TKd?V*Lt
0AE"H&
c'J6E>
J##C!y
r?ci4U
:0=OG;U1@QeD
jm{)5/;6:
QOqJlEmi
U{%58[7Y>
B*Qx::
eul:lyo
#z~|r[S
A|U0lp
_||)<L
GVTTl[k~
$,.*c5
Gb(j]z(ty,
n1Um}"7
3&nG`&0
teYaxk<dJvxtng
K<y'2c%:
u-I\o,}O(J`O
gyUZDKW/tBZ)j
REcmAcvK
EVgnkn
u4D[.P#eFN
!UWW7C
:+'s@)ud
a_Qkzi
qL+>(WS
B}O*Gi}}M%]<W(Mp+s
dqWaT0
'![v(Yn
$F,~@pAu<j7q
BG#JKDHvr$
]o6pE}z,
I}:>rpM
jYD!yW
8O8Lc(\
hHl4?!U:d!Gl$
fe(IrF{
sXr@dP>
\Nl{nFa")-OG[l$
G44O-B#jvd
#jE-27z~#T
G;{+$ChOP
]99aZJV[-en
XVa/2R
_&;0MM
Kp@#5,$
S}3wuF
Nc@YlC
"IN3/h
4aZ?Icp5p@+=|&
=#~}LF=\+
Hv,g2(Uw
:?uSS;n
3v:/|
iny.z;YL
bOH%n0
1zr;$iL i)4
?:;S:nC?
@}VDFKQP
>gE9d8
T29\>i
&!nQ&t
=`RJ=*
FV2r"PAW
SudK.cWWWvB0R5J?n}
E&43.NP6#
c$t`K'N
tE(`&^NR;
x;7.Hz/**
ok.PKE-yC
+0c|Ubm3/P!uN5
|7S?V(
`MPtXd
nv?Bpd=
Y. {_:A|P
#$)rW}iu5e
=0g\r2UX
Fq0A2>(
{GB#\'s
0Bjs1A1
!;;En27a<8
u'b^Vy1Y{
&_du<]C
Y4jvBXw
n' M>I'{N"%Bjv][qD
3\In8FZYs
/|=Nn)%#
P.{'R84
I5hTtk}]
YwnBQsBGZd
>+:%fe
pBP4IN@*HhP
7$M5S=
{]Fmqt
\:wb&W1bH
,nOS^g>;
WD)xd'x4
'Q_reY\`IEY
0v59>V
DKuxmU
q9O"6*u}Kpn:{}/
{#ytaY
VR#if'
q !/>I#\
/AfU-H:>
z-\[/A]x
J42;qVa
DjrA+ +cfk@=(
E:TsTC\x8
H=Pz o(-u
H{7Vwh
/{ve94w*Y
M2/$SN
i5v[,t
?KwO&OetH7
)$X/'RJ7^:
1f{]3M
w@th%9
5ps)]MfV
>#2\D{45+
D=pbD^
x7:2fr#
w47):{6gEk
qxxw<r
QA'/eSD[g9Rmw
VBkI-{.^r
T0C]4TF%LPm
5_?/Mm5M^}&
{f"il\
w(27mk/ =
UM88Xwo
}LM/=u?c'jH;9)
X2h'^jsS~
C&A<`f;U4
0<~cR9:JHR+I"U-
<2m0<+y)
o>u$,lU
NUa,oS:ihH
c=tdV O
=U}=TxZ
sI#AP0
!gQ8?K
5\;*$~T2
1;u cmIV)
?b?JOkr1E
YuyoK,
{@M?ji
TC?-\%U
B3GSTe
N:xF.?
)4s0nL{
%;VTfQlJ
(n=h',e3(
0gJE@y(
I6D@PYP>)(]
ljM~oM]
RGh&0%
D*bI2N7l8f8Yv!
-B-k`H-
<]hPfN}s*
Qi]E}Ig
Zo:O0R4
Ugv&'|\)
c~pIqtU
u(_/y~G]#le
JJk9IEB
4MCV;U
~PtIaZ
}Z,H:WosW&H
MzFw6lO{-xXt
!zA^+ScoQe
6b$ug-
&dMpvbZi
]`9S,fL{VW
;,$]jV 2=,DhoTK:J
E3=TzF`^
Lr}{aA
z#<;Mc
3 g3<5ih
~9/uzc\
YlHkxq_
W@`Vq-
@NZl"``c
TEd/Zx\@
<0$^hW/}I
dB1{zl
:M(?(7H`
z<1m|H!P"
{.5J}0R
r*;Qslt3b<1
vuE|kKRox@
%1R.u{VH
"Lv}9?
gWQmQ,d
[xjfb#O
XjD9{O<BUK3
jeKLt7p
Dd$u} f
^~4Y.!
JR_&8>
p0},?T5!bp
TcL|02]"'>Y:PR
a_F]cd
8,r@HO
g]L<W
$BQF&2DYmN]V<
or)0mQ&C
@l2,W2X'|}Z@(*0K
6bf(DrP
F\`97m
JDua"Ah
Ex%6Y!e
`w$fZe
<R92^qc~
0wI~CyUkz
Mf=k8e
\NC"x#s+PI
~8 idM
`VAX`w`>{
cw}-]cL
:%_w+ZJM
u2 x)!WT
-saVS(>\
]%,\!Q
`<!6eAl
7M*{=!u
@7!Vv4#
+8]pA{
2K Df'mm
A.O$$$Yk
2/\p9{;t7
i;$bjK*
\'I7t15
jm++&N
)7[2,.
Xi{I&oW]$8z
S)C?H
O3Tu@o7o99W
diwTRRF;
B;8-yP
>*a':+
U%!#yQz
bj48\iD.I
I"!brsA{kl
^s/#iM
P?8ac8Mi YPddh5iL
EpUe.v
`>#Q_ qrO&
#g?gH9
1-`]GV
Kcupp\
E1x.a9
fr@/ABz
?&A|yL
#gkwj.u3\
LU9ZS2
JOttXLk:%IM
hB`'[-'
:gQmn d
/9kmIcv<
m}m+$=^H[(%fA0
O8pIe
xr>x?aM
g<Wmy'
:5c)(,?@
s%xx`'F
yj^{ia&
hC.tc%8y
IX,7ybE@
+,#bs!eA
q3h.\S@NpvO$n(
ialkG=!eTYK
rr[#Af
<.aGp]%FS{]$h^
.8[/g:
Y 2tVj"
< US/"%
$FzsA^lhfB
d88FclD
h<SOYU
e]Y, r(!?u{+T_j(f
E[;YM\r>.1p
uLBbr$d
~6 6r0d
(a7WLep~u
M& D<{NH
EGpK6i68
-&,Ak#
N3F@0-t4
dB5FHdcZ1+[
[)<QWk
']8r32.
C)LhG![
($1Z+V_i$-52uTg2k:
KG+5@p;`6<
wN.df0
!U7/xJ%w
c(hRq[
faynD\UILM",m
lK*pRxA$I
+^T%zi=y
GClAs%]r
E]e5{Eb3
]<[8hj&id
$ [R%['
<01Wul@(R]pd
x5rnF~6
N7lbl'
[{8f%x
;l4?t%
IBo|H##
qPyWDh\-
hz,8e.6r_
\C@p9\N^
l?{7N`8^J5
Y9].Ch
mE(c[g
YW#'s)G-qR
|hd_5Ue7h
`YL(Rmlp
+0p!Q,X
\mSt'*A
Gze$00mwQ\
U<A9v
'!Nr=D
Xm]Bv7#
mvIdaM:>L
!N3U$ ~
s@McDXE
5vyo-a+8yfH]IMm|
&+C'eXfS+
1/#cZN?hCR{(\$Z
wi_g.}vDzv+L
Wz#v:ri2n
-(<>m7J(
jw^OHHVNPU
WG4A a{%
vX\prua}jTn&
(b"@Y+
(~4u8f
e1?h4%
)Ed[q&#S_Lzwi\;S
`lXSU,~
M#TA%X~z>
62Q}zt[A-N
&uTB+M\
EzBxo=!
SX(Y xCQ#n
x?P Pn
j+7>F:fE%*K
x;ApwL
.M*n$(
lE,J2W
c,#lTJ*' ?$k
yd1Fx0?.k5j]v+
t#@ssk{
%ja.#cYyb
Rq-!,QpP7#d9WiK.s4
_)/:
){eW;@Xe4k.&I&
&<g7h5>>2.
5#/|U@`
`M]HLDb
Y@$23GI}H>
ld{i^E~`d
.j9m}k$8H(P
zfYB(De
dbaiLg/QXIX6\(
r`ui*hw
[0>}.5
b0`rr:e
8jQAlVlTeM bs
g|i:C|'O.
D}C4DNX^!
);mhPkD-,~K.`IU<
GT#ps\
r$BYfo5U/V1\.1a
g0!pT"d
xd{ee]
M]K7l\s
Ao~t8vsz
$gI?$14
[xZyRb4
(Co/ a~z1.
^DL-Vm-j
&{D <7I
]FIi,Xr|
0<Ach&uTI
ibr7Q-?`}G
&}@:)Z
)LUe'/
)jZXPf
LdSM"/m
F8R#?V
MMXN$5E
ynvZ.PJ>
!54?h-l\
tfN'Q$U/J tr
1kj=r
cXx<L>YPica
Vw?yV7$c:+Mf
ACqHo5
*!IAGw+41~
?2"%|Tu
SA7AV=~b
"fH(zLg'o$#
H$~ip{S6WR,1*;
\"^}"'
&BrYi#_B
Tj\zV)\)DQc'6Qa
M*m_qof
$ U[#Z4
~w/4#^2^}D:;JCSH
rh$([^g
:s8kE]X0B8
}<09EG$f
tP)R&U
`X/%vK
o]z>\lVf
tLKaN/u
]U@s #@l
=Rw(C P
EWHkJ?
gD;R.m
xumV>yp^2!
,s*Wp>DB
l+z\s`
PG*p]OG~
R;|('iSx
$Z]0} S
S9dx1#G
&0g<i
f,nXi^U
G,ZFvh_=A$v
4X=xfP
L[IJ`"!F<g=8
b?Iz5Ty*
30E/2:?'(c
{)i1f^.ld
#|E2a/O
0RQM+i!
V{wiDt
"H)Jm9W4m]
3U?i~)
,~;t5b_V
N1.Fa5oPi]
!^9C&\k[MD[
3[RbN9eY#{
!EF~\p_!~}
dt[w({
I8`8c]H
DghMVuE
7"RKPIq-
='k;jL
i[(2rnF
/F6^o:
YmQ/jF
hkUCEpoMW/0TGL
gdZBw?
/U|++rA
y76saJ
CaK5V(5
{X+ftY7+J,0K.
$gTS_0TVc/
8_<c>oBW?2KqE
[T~.(/R]M
A==^~f
$2Bu`w4?
HLi\gG
2["x>.b_W~
xqje-~Q'H&Q
qjYBWjM68
kM>*B6-l0H
=Vo_Zk=N
3~d^CTK
b^t#m7H
yV&B](A}Z
L04r_}
bb-xR%
NIk_x<t
KXA<KA7)l
{d7932#&
(QrcEoTm
P,g8C1qo}lc'p
Xa_;.Qi
QxMFH,\
pwI,2,Cg
TKXv]F{tZq\
x}&tMw$
cpfW=^*:
#:o4Z,Z$
]ab,_bf#0h=
8&"9\K
`G|gI&`@
*R]n~}
rISTp9
&/[}PI[k+10
SN42et
b2l`1KQX{^V
(Ijmh0O6Do'
[cT{{[+B
Y'HNj`
&uS1<9
\w[/KQ0
0!?w!d<^>0
1b8ZAbRtWrQF!4f
/!CC<a r7}
?r+8<L
G*Wr3IPF
lPD.PG$r
G[*E/$9
e~;un[]G;P%$L
jfX<!W
Rdd\E1SN2
q"5?5H
9^G AXI`j:
UVP6M-k
@i?={d
EsTvSdr-$/
pT~+@T
D5z^Bo
rR!ouR$=V&
Y#tiAd1?
Kh:MqT
w0nU6o
kZ$5\pp
[M1,.
lbMY2|
rke%d=?
^iH,fq]
N/5'6e
AE[z.UU! e%}
H{UtF5
%AZ5QD
O3RYDS>JM
2%PDDiJ
Fz.-z;su
ug;LLT6E-G7_.
FJ)l.3$8
%VdbO;&5:
$Q|:$nc
PRW%3LEB[i]q
so(IR4GNm|'
d`H)vQ
9kg5Tu%:
@e2FSoO}
#]\";-ux
I.H/;g?
$ZAS+$M+9
nA~JwyC?'
{-B!e5e
X="Y*_H
xkG{=L>'G
s?F#rD-HX
n@mkx9D
^P;1;=LkdU<
H5!@Od\250`(H@:
f;N*&,eE6n
6o@DnR
6XrX>w
-YhIq<\
-_(~/K
hu[oYSyirI-fUj8^v
bZSD5>y
,UU\TZ@/$
-"-q;4il
C06(~4ptkNv
Ye-<>N7_v<e7hL
pa&J:A
cLG`nh}da
Ru@WAq.WX?7
Efj2A94
\!hI`
K\[vw^kyR<
&u5rjA
u/zAb1qq
L;)J*ffP5
Q<\!^QBy_DwjNs
9 m=MIPj
rgYQ~1gd^Kl+
trW{mj:j x{w;
}b_^v"!`K|Sh
sR-kNk %H
N5`j&8&`
]]Qh-aS#s"Dbj
`{G;"\c
kMhu2M8Pcos1~-
|wNNq9
fu)eF;#
#q9SPn
+V.'2~?E>QzM
$$B $](.T
dNOe5CJ_
<+b}3[`
3e^tJ5f6
{?+[ph
q!K7m=+E
Q:41*g
Bu\?qK
ZmtyT^
%|d.x]
UkaFB],R
ybH81FvF<F
DeyVDKpzi
5"oleZhi"5@DL
X#Gci(4b
ZPA)B!/o
jC/j?-S:'(f
$sP8O&
}Y/qM]&
9 q!4@"WZF7
\<H1W=
un]&ANOx$?9
:*yL~,iV$Q
/w7\gh"K
WD}Oo20PD:(:k
:xV:p*bf2
Ts6&aIBs<
47kCm:
QzUSE3g
bB<C$\J
p65y}4Tf
hw}B }
9a9y@uS
MZ'GFb
:"fP)}~P
x@BNLHo/cf
j$AAY#
@Y$qm8Dg
6r|G1z$B!hVz
,g6];
<br<8d2#
ev(-B\
>9[fhX
pZj)3T:
_^O{pOxu
{c.Q^} l
$,AmNyEl
{6Z(Y*
M.tRtD|
|\<r\m
rO\Dpi
oxfZ<t-%;0tl|
9\<[-
y_4i#B{
4_4R#6
cY<~l~C.8
?J(yQ\P
|htG2k]^.
ozXNA}
-$3\yH>:
r9 ;Q=Sk
X{zwA\
J:[M=h
,u-$;-
bg7m$]48
HR).q
XQ_ZI8yE
2xqvsW
92QVO.
}M==xN/0Js
lVRw"+
=;DNZKm
Y8Kk#@Q
+b(/OH$
F&iTF}pLc=
tyI}*?
R3E)m&79u%
2u&]L}zltjsx
[N'1}mwA
avq&Pe
in;yYDT2<J]
!9p\C;i%
F.A08T
7RyB?Q[|a=BZ!k6-rh
Z/5pa7g!
yY[ bOlco
y\h^n`B&
/_axWX8t
y"U}FM4S?
/{\GL
/Tg<5ym
$dmtd2~U>?]
@UvZgf
HpbVa,_A
V`>qc-
d6jXRL
nEUQD\_
VF1Fr&'#I5SRG
1tQ&#j\MN
B2j?cex
}Kj14ev
]C&1!<
``Sb:`
qs[BXU;p}
r(f,[.&+x
% QtW?T
_DqJiL
ks@H&ah2
64oQ)V~o~
:"l;J_NO4
7J*B;=(
|(oFd^
Sc'!-OZN
!k2S3m9b8;'Qb
UH;676?
sgA+i($bz2(#<)c
J~=EQ%
]*?}4F
SL)K2wI(yT9
]WE3S-Ie~I_}(
11JA{j)
X7ym*3\w+.:y|"
srN(-NM;wT\Wp
++-J}N;be6M+
+KzV0(U}~
))R#G=TNUe
Q'n|WN
a 3I$w9h
D=m:z{yp.@V5$c
`#2oX/b
9>!i)6l2#Be
R=l9Xak?Ct)>x$
H;(7>>
[#R'i*
[O:w%/x
W<ThXT
jA!dk(cK2vZ\qWUy
_jbWH]4
mNj`A$r-c
:,pg|n'
:)x)-V.3
NDc])n1#
;[0.h`
tf@Hsz-?@W/(klX"
E(#(1I(mC({
k_(vcC
UW~sb0|
"5V'SqD
")S#:~M}H
PQ's\{
8h252e
uxIXLOCc
w3[h&q48
4U!:=@bmc4
5zV6EU
a\Xtj~
qLI0hf
#IS{$,
h[_s,w.]
6)3/QKWBq
,qsjx
Sq546SOG}+
92W^T:<b
E)Eaup
|J{N vH9[
E2C{Wu
f&$YnZ
<iGlA$#
{#YK=b
!_<zAA-D
EG^c3M
WIy[uL
B=cUoG'8Y
ig_9NC8K
#Xz9vr7
m`Ffo-"4KFX
0x5R[OF
FzuKO.
3)p&40
u)qqa_
;Syz7t
`)DR=02?5K
]Z,./M
c-Hj&i
\0lRSN
=:J#:$
g@^1H# vUF=4
s\HI;\=^0(l!9R`
-UB:tu-
qK;aJ|"E>s][{
xl}fQbNab~mDU s11
u6L_6`ovP"QB
co*A0B*=
3nJkou
j_I1AnB
U]"JyxB;Wdq
^;mfK\
zt|xpGd86
s~(h+%b
:}`ytV0
ih|o<b2c
2WY5u*
vLPpxJ#%I
hEW4w>V
X\hOAg
7MB?[[
@bh/`%
<fP84}
Ia7y_mCS
MYfEVj
)TA|zubi4v
25P+RD
r(.As8m
6/ ik)[!QP^X"x-A
^hM+/YAG-@
,9#-bX{D
~o,Fz"Ph>(8Lb-
iL`yy!~">H
A|@E3k{X
g"Q4W'
3c3\AqQb.
{$!k|>u`
ij=9PE
"DnJ$>b
q2<e<GV#
ftDhFrG
|Ai0Z_l
qQO:`c
nH^))Q"'P~3n
#aMWM4E\
2F<=P-
!j{wZx5Z'ScW"$4Nn
'j!~OO4F+hmv
bIVP$8&G
o1a[L+9`=`r
e.@1!=mrk7h
08y6nZ!gQ\LoXR
;M`@"K
Q;W6SJMQw9A
1%$R.-s*^D
.,Yax<t*
pp7S &
+3DORgBM
n67`-xtr%
grJ[}J'a
.OX(V%=3&c
Z(X7r/3
olXA%
<)CFbC?.
yDA)~QoM
J;yu!}
|G`@2p (l
mdP\k4
aCqTC^
"wqf!q?N;,I
!K0Dq.
r~,LknXQNT!yPj
s%&|jd^
V%0!/q
':o2>`
r!jEV|
EhbjC3W
F5R!2i
x<43P!
p|e*Jl
p1DR}:
JRpv5mHNS
JRL+%F
oeU$){%
,[*KF^
lM'9T8n
);eR|_qJ
c,|leXoO#[B0b1
^5;J=r]a)OuZ
4l@Z*=gjtF%3
@qXj?bG
nS#eUnC
rw{.PkV
cx;b^@
L)BoZJ
t}FX5>r
-v^?MM1X
#pyNt4Ru!M
sk^A%^f
m4]X)xt
WQC=F,
pps;Wjxn?`4n
U!`V\b;U*O8ti
]k-B Pc
[n9qe#
)0?W>l
5uu[tP
oX_rGN
W4F06;v)u
'\r[vAv
4cX"MA(
-#TT$CxX2#
Q,>D#B*B
*aBlpi
^j|oH#D!Mlc
X%l&X'=
&~7\*Y
T?ZNoi/no9
FSy%cwS
V.hip\
GJ9N.wn
2rD_{=
4:dn`Urqo
y%|-l+f
7(@&!~
OYRMM"2
DpQ?4t
Q3V|vou
.NYlI
83\B!hKQT[
eJr|*P
wH'aDzh_
*3_@Xq\
4A]x3iU$I
;33330
*7RTVVjrqmjr}
!/9?NGGaaq^^^m
+388<<a^^^^]^
#%88<Ca[]]]]]
#%''CCZ[^\\\]
#%'''<[[^^\\]
#%''<_a[^^^\^
#%''<<aa^^^^^
##''<_am^m^^m
"%%8D<aabm^^m
#-8<Iaammmmm
"#%89addammmr
$-8<Gdnmmmj
$-8GIdnnjrr
$-8GGhnsrr}
$-9Gdhnszz
$-9GGggs}s
+-9Ghgys
$1;GVvys
+/GSiiyy
+/?Tiv
jjuwxz.4DC\JJMU
'* KJJJ;t
99MJJBy
9KJJJ\
9#KMJJ\
=LMOO`
*1=R\QQc
*<=UUQ\h
*@@VU```g
2@CVVg`m
'2FCaccm
3F[Yam
%@74i%
(J@@=%
:TOJ7Q
Tccbk
Vcccl#
Vcccl),Fbb_:
Vccll7,bheb:
Vcj[S/dhhhbH
_VTTTPJJJBH
~s#MgR'Qj.(Vq
]vr Lhh(QjT/SiB3Sh'5Ti
Lit%Qla-TkM3Ti>5Sf85Qd(6Rf
Liz$Qli,UmU2VlD5Ti:5Rf55Qd1YD}h
Li|#Qmo+Un\Fsbcqy~xtvywvs^
~srrrr:oRdr}}xsqnlihglt
]{usrsrZagjlqqokhdb`__b
3zxvtsrHR]deddbcc_\ZZY]
~{ywvsGKQW\_``_`]ZYXX[
|zyv@FOVZ\^^__^\ZYXZ
~{y?EMTZ\^_`a^^\ZY[
|?FMTX\^`ab`^^\Z\
?FMTY\_accb`^^\_
?ELTY]_ccdbb`^^`
tELSX^acefdab``c
ELRX^acfhfcdccf
ELRY_cehiiffffp
FLTZ`dgiljiiij
FMTZ`ehkmljklo\
HNT[bfjlonmmpsf
HNU\chkoqqoprv
IPV]dinqstssuz
KQX_fkoruwuvx}
KRYaimqvxxxy|
MS[cioux{}|}
NT\elqw{~
OU]fmuy}
PW_gpv|
PX`iqx
QYalsz
QZemu}
%Jc_(Nf/)Sl
]tHc}(Nfg1QfL4Qd%5Th
u@{sV~:
Gc%Mgr.RhY4RfE5Qd:fQ
{uh*>FE
Gc7fVkv}woaONOf*>EP
usrrOZcebYXUOLKYn
<~vssBDOX\^]XQLKa
zwu?GS[][WTOMLct
|yCEMWYZZWSPOeu
~=EOX\^^[XUUkx
?GPY_bb`^[[q|
nHQZbfgeabbv
JS]djkjghilq|
KT_inpnmop[
MWckqttrvxs
OYdouzxy|
R[hsy}}}
D:9hN!
_]^`DKV^]\[[r
lwogDCNNNNP\
pwoDENNNN
uwEIRRNN
yGNV[VR`
}JT\f`[b
N[csmfc
Raizsme
kernel32.dll
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
l9F(MQ
UG9<6
;xUS*u
UF,IB+0D
ZzD%}T#`{+<WHE
B(W3F%;Iz
T:PBDT
rux@HavP~?
4_HJ$@
#F{@x<X
N,+WK$Q
t{PGTu:Wt
qAbR?-
Q$BEAVp~a
$*zlM@^|
t5;u*X0
`;2F=2 +uQ
Q$RVnR2*
}&nH+6D^ |H
@tKwFQ
!{@PWQS}
F"X?nk
tJ\!9NN"T
MAtfQ@,:Zha]oM9%
WA6\I^
'`QQdvPu@@.(
KMJ9l@4-oX
svb8Aplicaton 8erO
The3<cdl
%os5/l]ntPbza6idSDL:G
51d,al 3*uA32MagBoxpA{wPtf
?ExitPpLlChH
and?p=Opx
G=tMPl
|VirtAcMdC:O_3b!"
`t$$|$(3
r+|$(|$
USQWVRW
ZPR3C
Z^_Y[]
crt1.c
_atexit
__onexitp
crtstuff.c
main.cpp
.rdata
eh_personality.cc
.rdata
fstream-inst.cc
.rdata
ostream-inst.cc
istream-inst.cc
io-inst.cc
.rdata
string-inst.cc
.rdata
tinfo.cc
eh_exception.cc
eh_terminate.cc
eh_throw.cc
eh_alloc.cc
eh_globals.cc
eh_catch.cc
streambuf-inst.cc
codecvt.cc
.ctors
ios.cc
.rdata
functexcept.cc
locale.cc
.rdata
locale_init.cc
.ctors
.rdata
basic_file.cc
.rdata
del_opv.cc
__ZdaPv
new_opv.cc
__Znaj
del_op.cc
__ZdlPv
locale-inst.cc
NaHaJao
on\r<&-)9
'(@4,G#@
[[gE'[
oeozFLN
oC.s@oWB)Jn
nJbJbJbC
oloU{sHog
|nDoE#w
GoUs_(o]
nDo'n_
pJbCX1oJbJbC
{]wE'wp|Ep
n_Wz.=O
?n_WCI
zE/CW;m
nCW?mzG?On[$
?n[WGm
?vn[WGm
?n[HKo]
?&n_WCI
nXoU{{
no?o|V*
?Jn[Wm
n5?OnDU8
?:n[r_
?Jn[oU{s
?Jn[To_
?Jn[o82
noU{sn'
t;[sC2?n[EoG
oU{{GWn
?*n[t~o
o$_pVO
q.6/Ow
WQoCWk
oEWkPg
nRZU|o[
o`]pVO~?o
n[xq]GE/kGn[,[
Pi31oqE_wj
zG?Wn[,;
~>jo]$G
/RJbJb
7}U.wl
7}[<Ao[PZ[
Ao[PZ_
BUJs]_
`=~p%[gQbO
OU{16?
7tn]_Cz
{zG'{hm
nzEzJ_Eo
T?o][C
nE'w[C
6E'{p[{
]VO]_E
uC&{G'
kC2J_Eo
GXn]_C
_n_[Cw
#6~oVj
W~oE'(
GJnUy=7
OFn[Wq
oWOOJn
[(<o[L
oWX?Jn
~>oUqVp
ox|G?Fn]$
nC"OBn[
?JnSS+
1VXp~>eo]
nCFsC&wE
.?:n_dn[
O?*n.5?)n
>WO)]$
O*n_PnVOK
OBn_7E
nGHo*nW]C
GNnWXZRL
Wo=7jn
nC6jnwh
?FnUOC
oC'Ows
oGG6Zo
JbJbJbC
hnX2J_Eo
~X2J_Eo
~X2J_Eo
X}X2J_Eo
8}X2J_Eo
CJE'?.
oUSC}_
mX2J_Eo
hlX2J_Eo
HlX2J_Eo
lX2J_Eo
lX2J_Eo
[[gE//
o/A=Or0
rCFsC&wCn
E7bEO
1F~Z`0
oVnzGJ[C
8C)~Bdo]{G
[{~p2E
[3C'OfoF*
~>o]ES
sE3[$
oE'OW~?o]/E
7z'=?3w=OGn.
nG'v7EyUS
0}]/E
E'O~N%z_[{
egOWX~O
o=O?r8Uy
]/E?];C;
n~>n]/E
W~B#o]{G
nJbJbJb
snUr86
~N%z_[
z[wn]/E
%zl.C
USC}_C
[cE/.6
kC%[_}_
[CC&wE
_~?o]CEB=
~>(o__
ZUnVpV
o]sE'_6o
oC'o|wC'S|RqpB'^@ZQ
0}]CE$
]?CUou=
[]C&sE'[CCz
JbJbJbC
X2J_Eo
8nX2J_Eo
nX2J_Eo
gCO6oVVZS!
oC7wwgN
o(^o_Eo
TE[}_C
TE[}bJbJbJbC
[{HosCW5hoCW
[[gCGW
2[4*o[
ojJbJbC
s[cCG7VKNo
gEO/R.
hH2Wj6]+?
[+.6OON
2W~>Ano
Wpo)no
po>n_Eo
s[cCG7VK^o
oh,o."
z[| o]cEG7
n xnbJbJbJbC
/fO~p2?
gCO6oVZS
oC7ww7I
gEO/R6o0
KZ]UT{=O[nE
gCO6oVZS
oC7wwgH
F~Fdo3
f]=DoE
G~>o]'C
v]cEG7
n`U[?
nU{s[oWO
|LJbJbJbC
gCO6oVZS
oC7wwgF
PW#[Vv
o]+E//
o]+E//
[[gCGW
WgoE//
/gO~pRJbJbC
o[t}_Eo
o[t}_Eo
o[t}_Eo
z[CO6oVZS
z[CO6oVZS
z[CO6oVZSz
gCO6oVZS=
W3oE'K
o]cEG7
W62['C6ow+
gCO6oV[S
o]cEG7
W62['C6owk
gCO6oV[S
z[soV~
gCO6oV[Sz
z[soV~
C2JbJbJbs
U{{EO1zr
gCO6oV[So
o]+VooC&sC
v]+E#z1.
o]cEG7
gCO6oV
o]+VooC
v]+E#z1.
o]cEG7
VooC.sC
v]+E#z1.
v[o_/C
W!SoE//
[{}UT{E
/&[CGW
WRoCFs
[2E[cE
o:OFoW{o
kC2E'C
E&WsEW
QWa~?o]'
v]cEG7
onUT{=OSpE
nE'7V~
E/G6oV~
oV6?cV~
JbJbJbJbC
({ot6[
[@wn_C
(Zotv[
o_7G'g
ONnG6Zn
zQ7ONn_'C
sCW4ocC
o_7G'g
oCW*oE
?Nn[twn]E
gOJn_c;
nUwsC&sC
[toWOS]$
o_7G'g
oCWQ)oE
?Nn[vn]E
gOJn_c;
nUwsCNsC
[oWOS]$
o_7G'g
?Nn[4tn]E
gOJn_c;
nUwsCFsC
[TqnVB
[4oWOS]$
o_7G'g
oCWQ$oE
?Nn[rn]E
gOJn_c;
nUwsC&sC
[oWOS]$
o_7G'g
oCW)oE
?Nn[qn]E
gOJn_c;
nUwsCNsC
[oWOS]$
o_7G'g
oCWQ(oE
?Nn[Ton]E
gOJn_c;
nUwsCFsC
[tqnVB
[ToWOS]$
o_7G'g
?Nn[mn]E
gOJn_c;
nUwsC&sC
[oWOS]$
o_7G'g
oCW&oE
gOJn_c;
nUwsCNsC
[4qnVB
oWOS]$
o_7G'g
oCW!oE
?Nn[tjn]E
gOJn_c;
nUwsCFsC
[toWOS]$
zJbJbC
s[cCG7VKo
W>oE//
[{}UT{=OSpE'W
WUnC6ow~
s[cCG7VKo
oHo_/C
W>oE//
[{}UT{=OSpE'W
WnC6ow;}
]wC2J[C
]wC2J[CJE
-}ozPu
/.X2ns#X2J[r[t}_Eo
KV[SZ:oC7ww#
]'Ez[#Wp
JGFoGo
WO~?o]+E*G
WO~?}o]+E
zF6zoz
77z_Eo
WO-_/C
12GH6o
WX~>Hn]+E
ot~?Wn]#E
~]7E'[
r[C/7VK
W8oE'G[
qE'K_/C
n[Xn]#C
s[cCG7VKo
z[Lo]cEG7
v[|n]+C
nC6owkw
gCO6oV
\S]=oC7wW6oE
z[lo]cEG7
v[n]+C
nC6oww
S@oC7www
]'Ez[#Wp
JGFoGo
WO~?o]+E"G
WO~?}o]+EBF6zoz
77z_Eo
WO-_/C
12GH6o
WO~>Hn]+E
~?Wn]#E
~]7E'[
<V3[WDo]+E
w1Vso3
s*o]+E7
^[UtC7`_/C
W-8oGH6oIp
j[$an]+C
[Wo]+E
w1Vso3
s\'o]+E7
^[UtC7`_/C
W5oGH6oNp
j[^n]+C
/V\oV~
/[o]+EGG
AC'+~?
E/GjVR
]C EGK
nE.6So
X~>{o]
ol~>_o]
WnE/#[E
?n[6ow
[[cE//
^[C'S6
'zF7jVO
sCW%/oE
pE/5]
]CW.oE
o[q]wE
[ q]wE
o[Dq=O
tXnmxm
?Nn]wE
GJnGGNn[Vb
[oWO]$
z.J_Eo
OFn[CG7VV
OFn]OJn
o=-KoCFsG
O*nF6ZoNn
kC2Cgn
7GGgGNn]cE
Xb`!/iQ|M1?
WNngz#/
O?>n]7G"O:nSo
O.n_'C
GouKoC
SXoC7wW#oEK)
pVos7o
(J7oGH6SoVs=
'q=OCt0VsB
o]+rB[
cUt:4o
5orRuG
5oC7W
OuS/27
3oCkUt3o[
5oru/C
sEK-oC
oeCsJCw8C{A]
63oA]R
o|n]+E#6T?Vsq$\
~]7E'[
n]'CWAtn
Z{5oVs.
o6zFJ_Eo
v.8_Vso_
DnX'8o}_C
^[o]cEG7
oP/nUn.
WrnJ_C
~7[oo]
^[4o]cEG7
o-nUn.
WIpnJ_C
S}doC7wW-
pVos7o
(J7oGH6SoVs=
'q=OCt0VsB
o]+xB[
hVUt:4oo
>4orB[
F4oCUtN4o
-4oCJC
5oC.wC
oC&wE'/w
.o]]+x[{
*oCFwC.sC
Ouk/2O
eCJC8].
v[pn4oE'K'
opn]+E#6TVsqO
4]3EW
g['C'?Uq.
nE'GwwP
);KoJn
2WX~?/os'
WEoEgnMw
oWO~O%z[
?Fn[\o]wG7
gFV%oGn
?JnVsr
oEgn.O&n]
WJnzMC'
n4"n]$
O2n_'C
sCWMoUn_C
Z2o@oRJbJbJb=
z'o}/G
[doUn/ww.
12J_Eo
zE/}_C
[{}_Eo
[_GFoGo
[[cE//e?
]XBoJ_C
[[gE//eCW
[hon.CZd_
[[cE//eCO7
[n[G'W
{C.wC&so'
ojCXa
oJbJbC
s[cCG7VKJo
nbJbJbJbC
@oJbJb
zpE8CH-
u:Ozo/
j2o@dn]wE
[t=2J[
VrZogO/?
oGUpHo
6o?p?
VrZogO/?
oGUpHo
6o?p?
VrZogO/?
oGUpHo
6o?p?
VrZogO/?
oGUpHo
6o?p?
U{{E//
U{{E//
SZtoo]+/
nJbJbJb6n
v[Rn_/C
[{}_Eo
o]7E'K
nJbJbJb6n
v[Qn_/C
W}oE//
[{}_Eo
o]7E'K
Svo4o]+/
nJbJbJb6n
v[Qn]+C
kC2=6o
r[Po_C
C2JbJbJbC
[[gE//
,Tn]gEG/RC
oJbJbJbC
gCO6oV&aSxoC7ww
v]cEG7
nd.V~
VoZos8q
o$nbJbJbJbto[t'o=
WfnJbJbC
[[cE//
gEO/R6oAC&s,o[
W6ohoo
FW%6o=
gEO/RzEJ_Eo
[[cE/7
.WQ5oC
o]cEG7
so[o[KCNs
Wq4ooo
s0o]KC
W4oE//
[{}_Eo
o[tk=6.
ENsCXqnJ_Eo
JbJb[
(X2J_Eo
X2J_Eo
/RJbJbJbC
^[CG7Vv/"o
/6]sG"
^[CG7Vv/2o
/6]sG"
W9oE//
^[CG7Vv/Bo
/6]sG"
W9oE//
nUwsC.sC
z[CO6oVgaSz
z[To]cEG7
z[CO6oVmaS*oo]+
z[o]cEG7
^[CG7Vv/^o
/6]sG"
^[CG7Vv/no
/6]sG"
nUwsCNsC
W%InJ_
^[CG7Vv/~o
/6]sG"
nUwsC&sC
W%HnJ_
z[CO6oVaSo$o]+g|
o]cEG7
z[CO6oVaSoto]+g|
z[$o]cEG7
3-2JbJbJbC
^[CG7Vv/o
/6*]sG"
^[CG7Vv/o
/6*]sG"
W5CnJ_
^[CG7Vv/o
/6*]sG"
nUwsC.sC
W5BnJ_
z[CO6oVbSo4o]+{
z[o]cEG7
z[CO6oVbSodo]+{
o]cEG7
JbJbJb[
[t}_Eo
z[CO6oV
bSoDo]+E"6ZWa]
WmoJ[C
z[CO6oV
bSoo]+E"6ZWa]
z[CO6oV
o]+E"6ZWa]
z[CO6oV
bS:oo]+E"6
z[CO6oV
bSo4o]+E"6
W]oJ[C
z[CO6oV bSoto]+E"6
WoJbJbJbJbC
B&U08Go
z[CO6oV&bSoo]+E"6
z[CO6oV,bSZo
o]+E"6
z[CO6oV2bS
o]+E"6
W9oJbJbJbJbC
oFo[Y=
.o[Y=
zs]JbJbJbC
8CPiWO~O%z_2J_Eo
o=-1JbJbJb
kEO6ow
oCFsCVs
J/Uv]cEG7
)$ouD[
(oCb#oI
)oCj3oJ
*oCZCoH
o8CboACZ#o8Cb'oACZ+o8Cb/oACZ3o8Cb7oACZ;o8Cb?oACZCo8CbGoACZKo
JbJbro[t=w{
[Wj.o~p
RgORxgQFp
zRxfQZ[
|RxfOxz
oF~q'g
'JbJbs[tZ_Eo
/RJbJbCjR
JbJbto[t'
JbJbJbC
JbJbJbn]
A/X2Go
o|n-}]w
2..no4
PJbJbJb[[tE
[3[b[7[f[;[j[?[n[C
o}VoV"[sVr
[bp[E#P
>oCWn0
oJbJbJbC
3-2GHn
WO~N%z[
/GEW_C
[WX]/
]k.WU
JJbJbJbW
1JbJbJb
|DoE/8
]T2JbJbJb
]2JbJbJbC
U{Ezy?
oC8?It
~NPRWaWX[
Uw.tGq
oJbJbJbC
[_G/{zzGH
nLnsOx
Z~|i0/
[[EzxGH]W
{UtCFfPC
JbJbJbW%
JbJbJb
z8oE/{zF
Gz?nsOz"tnsOz
WO~>o]
nGFoGo
Do#nTc0/
A[n.W
z8oE/{z
]E4nc0/
n]cEG7
[[RDoC
Z=(b0/
oX2JbJbJbC7=
z8oEGzF
.WOUt.
|W__cr
WXOd0/
}][=DoC
[nJbC
efQxz)
[WO]zGl.6o
[[gCGn
U{sC2GHC
[poU{s?
vE/zR'
Do=zFlw
oX2JbJbJbC
?JbJbC
[f[GGw
[WEG[[EO/
[OnzG'
oE'_/?E'k
gBEy~p_BEwxE[
WXE];E
JbJbJbC
GH[if[P6o
_eQxzl
BE[fwx]_
{u[U#/&1?
nJbJbJbC
~B|oWa~Beo[[?
[{}[6o8
[eQxzc
0Co~psq~po[iBV%
iI~NAG{~Q
nJbJbJbC
/[@oXJbJbn:
oWj~>oRoV7p
[UnVHp7
UPsGem
oCFsGq
UPsGbm
UPsGbm
oGFoGo
nACUq8
O~o-2Do{
oCFsEXq
oEhq/?
UPsGbm
o/Ln_C
F=oUn.
6onzQGH=
[on/Ceq
0R=oUn.
JbJbJb
nCG9n0
?.n.Nw
~>0ooE_nNr
oCFwC.soWO~>oe
%M9GC_
RzpzUYp [pzUxq
7gxoJnU
[gbe8Vv6En
]{CCOW
OzOFnFG.n],
OFn_? 76 ;6/GH
nGHn?*n]L
&zJ~qKpzKC/u
opzUYp [pzUxq
i#/:~N7b
%ZPZSL
Cz[ 'zGHpzUYp [pzUxq
opzUYp [pzUxq
&zJ~qKpzK U
[C87~>n_
o=|Pks
oklGo
wCFsCWM
fpU}{;
GGWO&n[
GWW&n[
G'WW&n[
US}bJbJbJb
mQo.Gu
o=3}8Voz
&UQq WO
mP~Z8Vp
&Uzq [|-2Go
~q&_p8
p$1=~p
02GFoGo
p$1=~p
02GFoGo
(^o]#^
~q1F`Yb
u;O{~q
CNwCF{C.Go
Fu WOF
r{ [m3Iq
p$1=~p
oJbJbJb~q
GGF]G.x
p$1=~p
foFy [
=~qFG.G
/.&F7E
w=~i&{_0Uzq{~q7w
oJbJbJb~q.
o~q&_p8
p$1=~p
oC/==Lo^{o
o WO|~q
mFUVw8
o.pzUYp [pzUxq
oGFoGo
~q1F`Yb
u;O{~q
}xvw [UPq;n
4W~BoU~8
O~BoF WaUWpN=
Sx}qw [UPq;nU~w=
o[~q1F`Yb
u;O{~q
o8VoCW
mQopOFkC
|W`F_s
~q1F`Yb
u;O{~q
oJbJbJb~q1F`Yb
u;O{~q
8Vo3n8
Wa~>9nm
_w [y S
9Qo [y
n9-2JbJbJb
hQoVPp
_q;Fn9
=OoG'~Bo8Vo
oJbJbJb~q
o Wa~?Too.=N
+Roo/}
hQoWm_C
QoWm.
+Ro8VO
0}[y_Eo
+Roo/}x
jQoVlpo
U02V^p
RoFSZn9
n_[LnR
.~O~pJ WjC.Vp
&UPq WO~?\o
&UPq WO~?ao
nG&CW%
~q1F`Yb
u;O{~q
mQo.AGH~q
~q(Svn9
oJbJbJb=
o oUOq
o-}_Eo
y_yZp6oFG
VQo [~q
=OoGNG'~Bo8Vs
_q;Fn9
~>oo.=N
12.~q
y_y['m6n"m
lQoV0oGu
o~q&UVq=_
mQo.Gu
RUSG%-
[A~AGniX(
`tn8VqHt
&Uzq [|
lJbJbJbn^
nJbJbC
O2JbJbJbC
O2JbJbJbC
/%JbC
/%JbC
~}bJbJbJbC
JgQ$/>
0}[Z~x
12JbJbJbC
8}bJbC-
~}bJbJbJbC
JGFoGo
JbJbC
8}bJbC-
/QsbJbC
~}bJbJbJbC
0}[b~x
12JbJbJbC
8}bJbC
GJbJbC
~}bJbJbJbC
8}bJbC
/RJbC
oE"pC
WO~Y%zJbJbJbC
[[gE//
]gC2JbJbC
o}bJbC
~}bJbJbJbC
IkGFoGo
/RJbJbC
8}bJbC
zFm]gEG/RJbJbJbC
oJbJbJbJbC
o}bJbC
o}bJbC
O2JbJbJbC
~}bJbJbJbC
O{5[[CUS{r
8}bJbC
JbJbJbC
o=2JbC
Y/QsbJbJbC
{lRp[g/
z9JbJbJbC
o}bJbC
oE"pC
OEO5~L
kC2JbJbC
Xb`!/iQ|M1?
s]cEG7
JbJbJbC
[[cE/7
-|WO[g
[{}_Eo
[[cE//
gEO/R6#aws
[[cE//
[g]cEG7
.6#aw
!~<Xo]_E[[E"
Y[[E'{
-|WO][
nJbJbJbC
DC}_Eo
-2JbJbJbJbC
n[t}bJbC
o}bJbC
JbJbJbC
JbJbJbC
U{soJbJbJbC
s[cCG7Vv/
nJbJbJbC
swM/}bJbJbC
U{soJbJbJbC
U{soJbJbJbC
s{M/}bJbJbC
s[cCG7Vv/
WnJbJbJbC
s[cCG7Vv/
nJbJbJbC
s[cCG7Vv/
W5nJbJbJbC
U{soJbJbJbC
JbJbJbC
JbJbJbC
U{soJbJbJbC
s[cCG7Vv/o
nJbJbJbC
swM/}bJbJbC
U{soJbJbJbC
U{soJbJbJbC
s{M/}bJbJbC
s[cCG7Vv/o
WunJbJbJbC
s[cCG7Vv/o
WnJbJbJbC
s[cCG7Vv/o
nJbJbJbC
U{soJbJbJbC2JbJbJbC
2JbJbC
2JbJbC
JbJbC
2JbJbC
]{E"<fo[<jo[sET+o
2JbJbC
JbJbC
2JbJbC
/RJbJbJbC
gCO6oV
V]cEG7
4]3E'W
f[h>n_Eo
f[Dn]?
pJbJbC
s[cCG7VK
z[7n]+E//
/JbC
/QsbJbJbC
/RJbC-2JbJbC
/RJbC-2JbJbC
sCWMlnCWn
nCW]nWn
nfQ?>n#/>
onJbJbC
/Uo_d<n
?Nn[]C
J[[&n[
[pp]CWn
nC&wE'(
sCW}zoE']$
WMznGH^
/QsbJbJbJbC
]{E/Z[~xP/
h-2JbJbJbJbC
GE/X1JbJbJbC
[3E'6o
C''VzS`7`
oC7[Wyrn
:Wa]s=
a7X~>oVO~?oWa
~=oEo=
?QnWa]s=
~=oEo=
gGOFno
F7Z~?o]{G
?BnWa~>eo]w
~=:oEw[wG
OBnnVq
/WKmIp
/VaW.n[
~>>o_C
~NWnGn
~=^oEo=
oGFoGo
nM/E_n
WnE'#4E
nnVO~?xnox
0YnnAG
nWa]s=
oGFoGo
nM/E_n
W%nE'#4E
Wa~>Pnm
/WdiVB
?n_GCNwC
sCW]po
oGg6wV
n]{GG>nWa]w
~=OoEw[w
oG'gz[
RUsE''e
o_[`On]'
?\nVa~?noxN
kJbC
[3E'6o
C''Vz_`7J
oC7[Wdn
:Wa]s=
a7W~>oVO~?oWa
~=oEo=
oE#@R
oJbJbJb
gGOJno
gGGFno
F7Z~?o]{GGBnWa
~=NoEw[wG?Bno
]C_nVb
noE'#4~?}o
nVRqIo
/W>p.
oGFoGo
WnE'#4E
UwuEgn
n]{GG
nWa~>|o]w
~=-oEw[w
nnVO~?(nox
nWa]s=
~=oEo=
oGFoGo
W5nE'#4E
Wa~>Pnm
?n_GCNwC
sCWmbo
oGg6wH
?>nWa]w
~=QoEw[w
RUsE#3~>go]GE
~>Sosl
gE6gVb
gOnZqE#
7Y~>o]
?nWa]s=
~=oEo=
uE'Vb
n]{E'?
n_GCgn
nJbJbJbC
[3E'6o
C''VzM`7 'oC7[WVn
:Wa]s=
a7X~>oVO~?oWa
~=oEo=
?QnWa]s=
~=oEo=
gGOFno
F7Z~?o]{G
?BnWa~>eo]w
~=:oEw[wG
OBnnVq
/WKmIp
/VaW.n[
~>>o_C
~NWnGn
~=^oEo=
oGFoGo
nM/E_n
nE'#4E
nnVO~?xnox
0YnnAG
nWa]s=
oGFoGo
nM/E_n
WenE'#4E
Wa~>Pnm
/WdiVB
oGg6w
n]{GG>nWa]w
~=OoEw[w
nCW1Sn
nC&{G'gw3:
RUsE''e
o_[`On]'
?\nVa~?noxN
kJbC
[3E'6o
C''VzY`7
5oC7[WIn
:Wa]s=
~=oEo=
a7X~>oVO~?oWa
?QnWa]s=
gGOFno
F7Z~?o]{G
?BnWa~>eo]w
~==oEw[wG
OBnnVq
/WKmIp
/VaW.n[
~>Ao_C
~NWnGn
~=yoEo=
oGFoGo
nM/E_n
nE'#4E
nnVO~?xnox
okBF/CWn
nWa]s=
oGFoGo
nM/E_n
W|nE'#4E
Wa~>Pnm
Wa~OWn
nCWnUAx
7Y~>n]
FWO~?n
nG'g6wo/
~p_neE
gOnZqCnx
G6nWX~>So]GE
gE6gVb
RUsE#3~>go]GE
~>Sosl
gE6gVb
gOnZqE#
7Y~>o]
E_n]{r
o~N/:n
~>oVa~?oVO]
nE_nVp
0@nbJbJbC
[3E'6o
C''VzG`7*DoC7[W;n
:Wa]s=
~=WoEo=
a7W~>oVO~?oWa
~=;oEo=
oE#@R
oJbJbJb
gGOJno
gGGFno
F7Z~?o]{GGBnWa
~=oEw[wG?Bno
]C_nVb
WYDoE'#4~?o
w*nUOs:O
nWa]s=
oGFoGo
W%qnE'#4E
n_{Cgn
Wa~>|o]w
~=*oEw[w
nDn[?ns
npn]En(?n]
_uEWn([WE
/W4lIp
?5nW[E
WQDnCWn
nGFoGo
?nWa]s=
~==oEo=
/Wlp.
oGFoGo
WnnE'#4E
n_{Cgn
~=oEw[wGG
nCnUAx
onWX~OWnz7:O
%G6n]GEgn
7Z~?n]{G
?>nWa]w
~=^oEw[w
RUsE#3~>go]GE
~>Sosl
gE6gVb
nZqE#
7Y~>o]
~=oEo=
o~N/:m
~>oVa~?oVO]
nEWnVo
05nbJbJbJbC
[3E'6o
C''VzA`7PSoC7[W,n
:Wa]s=
~=QoEo=
a7X~>oVO~?oWa
~=5oEo=
?QnWa]s=
~=oEo=
gGOFno
F7Z~?o]{G
?BnWa~>eo]w
~=oEw[wG
OBnnVq
/WKmIp
nWa]s=
oGFoGo
WanE'#4E
n_{Cgn
~=oEw[wGGnnVp
7C%G5n
nCgnUAx]
onWX~OWnz7E
?nWa]s=
~=CoEo=
/Wlp.
oGFoGo
W^nE'#4E
n_{Cgn
oEw[wGG
nCnUAx
onWX~OWnz7:O
/W$hVB
nCWm(o
%G6n]GEgn
O?6n:i
n]{GG>nWa]w
~=\oEw[w
nG'g6w
RUsE''e
{EgmVq
WinEW
AWxmGp
JbJbC
[3E'6o
C''Vze`7JcoC7[W
[?UIGn
~=goEo=
%UnVs~NA:O
AW6spV.s
~=oEo=
gGOFno
~=oEw[wGO>nnVq
okl.G>ns
nnVO~?no
AV;mU%
gGO*no
oGFoGo
nE'']cCWn
n?6n]{?o
Wa~>nxl.6gVb
~=oEw[wG6
ouo_GC.sCWm
oE_nMp
.jJC.wC
?6nWO~>
gE6gVb
gE6gVb
nZqE']cCWn
q]{Wn
o~NA:n
~>MoVO~?MoWa~?n]{r
~=loEo=
oE~x-1f
~=0oEo=
oE#~x-1Vhf
n\ZmhV
gE6gVb
gOnZqE#
?anbJbJbJbC
3-2JbJbC
3-2JbJbC
3-2JbJbC
3-2JbJbC
3-2JbJbC
3-2JbJbC
3-2JbJbC
3-2JbJbC
3-2JbJbC
3-2JbJbC
3-2JbJbC
gEEUo$=
]wC&wC
{[WCs
[[d2n[{E
nR]{CU
fOVj~>oVO~?oWa~?oR
r7~?o_Eo
xI~>co]W=
gG6o~N/>
%Un/+V
/R["|m
nJbJbJbJbC
CG7Vv/Yo
C'+WnC
nJbJbJbJbC
N[cCG6oVzk`7NqoPn
nG'gw;
C'+WnC
nJbJbJbJbC
CG7Vv/_o
C'+WYnC
nJbJbJbJbC
nRJbJbJbC
[@*nRJbJbJbC
[8nRJbJbJbC
[`EnRJbJbJbC
SnRJbJbJbC
[bnRJbJbJbC
oBz"JbC
CW9oE/wX'
nbJbJbC
U{E'~p/
_^B/fw:
s8p[WC
CWoE/wX+
O]{E'~Bo[
]GC's76
g~?o]OE's
oE/wX,
n?p=fZmUx
U{E'~p/
_^B/fw7
C.C&wC
_:QoW(o
~p$[[_C
s`p[P|h[Z]_E
W52nE'
eJbJbC
W9nJm[
~Go]$
rCFwC&{CNsCn
/:MoVPo
OGrn]D7
~p,.wc
z[QZon]
2~?uo]
oCNsCn
-zgm/GH>gm
Uo_n[_
OnUr_C
Wvn]D7
[Uv_.{C
oCWWmxM
oCW7mx
nSlJbJbJbC
nEW7mj[
n=~Go]$
rCFwC&{CNsCn
/:MoVPo
OGrn]D7
~p,.w#
z[QZon]
2~?uo]
-zgm/GH>gm
Uo_n[_
OnUr_C
Wvn]D7
WnxBmCW[m
[Uv_N{C
WoCWWmxM
nSlJbJbJbC
/RJbC
3-2JbC
/RJbC
kC2JbJbC
/RJbC
/RJbC
]gEG/RJbC
]gEG/RJbr
[{}bJbJbJbC=
/RJbC
]{C'k7
o|[RE_
kpHnb
daX2Jb
$aX2JbC
W5nJbJbC
WnJbJbC
o}bJbC
/QsbJbC
U{soJbJbJbJbC
JbJbC2JbJbJbC
s[cCG7Vv/o
WenJbJbJbC
s[cCG7Vv/o
WnJbJbJbC
s[cCG7Vv/o
W%nJbJbJbC
swM/}bJbJbC
s{M/}bJbJbC
U{soJbJbJbC
U{soJbJbJbC
U{soJbJbJbC
[SEm[R
sXWO~>o]wGG
]{C&E'
{-7%Un.
fQzVjVa[zF
w]{E'~
/RWgnE-X
nJbC
[SDDm[R
sXWO~>o]wGG
{-7%Un.
fQzVjVa[zF
w]{E'~
/RWMfnE-X
nJbC
o]{C.
fOVj~>oVO~?oWa~?oUrYXo
nGFoGo
|UsfOw|
fQzVj~>doVa~?do_
w]{E'~
%ZP~pV
o@n]_=
nJbJbJbC
3-2JbJb
JbJbC
3-2JbJbCx
/&[pimU
oJbJbJb
fOVj~>
o]'w~=o]{r
~=.oEo=
%ZP~pV
zM?VEo
8YCPg
yE{Np
1n][PX
)mJbJbJbC
z[R>]sX\p
XW~>o]'C
oE/SoWw
%UnWqV
j.~x5VLo
fQzVjVa[zF
w]{E'~N
/RW}]nE
fOVj~>oVO~?o_
%UnW&oV
n]{Hn]{pn]{E'C
nE'KUWsCx
sOoUo_
oJbJbJb
fOVj~>SoVO~?SoWa~?do]{r
~>xoZJ
_G'{__E
/j,]{?
fOVj~>6oVO~?6o_
~=n]OEl
~x5Vtp
~A@n!1
n]OE']C
fOVj~>3oVO~?3o_
o[~x2Wp
Wa~>o]w
y]{E'
nnVO~?xnox
/W8mIp
?W!unE'?}]**
Z_'E"<fo['ET'o
S<vo[7ET7o
c<o[GETGo
]wC&wC
k<^o[OETo
~x5V\o
fQzVjVa[zF~
w]{E'~^o-
.WSnE-
~=RoEo=
oGFoGo
fOVj~>oVO~?o_
.6nXm
qhn][QX/
lJbJbC
Vsq]wEO
n[R>]sXp
fOVj~>oVO~?oWa~?o
WO~?}o]
zM?V.o
%UnWypV
a.~x2V$p
~p~p%>p
|RfOw|F
~p~p%>p
nUsE'n]{r
g{EoVO~x
nE'.6nX
]{C&wC
G:n]wET#o
<o[ETKo
~p~?o{
?n[[n]
nUsE'X
]{C&wC
n]wE"On]
//>/JbJbJb>m
~?-n]w
~=$oEo=
-Wa~>\nZ
gG6o~NA>K
~x/:PoVp
]{C&wEgm
{tn_Eo
UO{nVO~?Anox
WnC.no
Zr][PX
3-2JbJbC
3-2JbJbC
3-2JbJbC
W]n/Fp
%EoVO~x
/d]{E'~
B-zWOZ#
W~>oZL:~O
mJbJbJbC=
3-}bC
On[$Cm
~>ZoS{
nJbJbJbC
zE/}bJbJbJbC
zE/}bJbJbJbC
*JbC
zE/}bJbJbJbC
~~x2GHH
3-2JbJbJbJbC
WO~N%zJbJbJbC
2JbC;p
~o--z02BVg
JbJbC
[E[cCG7
ZTbJbC
e[QCRJbJbJbC
O2JbJbJbC
[#E'6~o
Vj~`'oC7KWin
2&[CW!nC
?Jn]E_
?FnW~>o
/WLoVR
n_GCW%oEW
n_7ConU
n=O2no
O2n]{CX
oUtVtVR
WO~>o]{r
~=oEo=
o~NA:n
~>oVO~?oWa
~=oEo=
5?-n.n?
~>]o]7=JpY}
w>oE'W
6_7CFwC.sC
WX~>oM
OznG~x_n
nEg3m0
_GC.sC
~NW2mGn
~=ooEo=
nG~6jn
WqnE_n
CWWmGp
~=o_{r
WnM?E_Wm
_{C_Cm
oEoCmVr
oGFoGo
n?n]{r
~=oEo=
oGFoGo
?nWa]s=
~=oEo=
/W$mIp
~NWzmGn
~=oEo=
ACWomGn
~=oEo=
~p~?Co{
~>n_Eo
/WSs.
~=voEo=
o[WnE?E
~p~?o]
nWa~>nDm
o~NA:n
~>oVO~?oWa~?o]$
oEgmNp
6_7CFwC&sC
n]{G/WnWa~>n]w
~=oEw[w
|WO~N1/
~=|o_{r
WNnM/E_n
o_{Cgn
Wa~>o]w
~=oEw[w
~=1oEo=
oGFoGo
~NWnGn
~=oEo=
/W$mIp
nEg[mV
oAnVO~?
G>n[8m
ONn]CgWmx
{EgmVq
Q~>Po]
2~>o_{r
[nUnfQz
7d~?<n
z(C6jowwh
o_XWnE
o_{m.[E
[#E'6~o
Vj`'ZoC7KW
2&[CWinC
?Jn]E_
?FnW~>o
/WLoVR
n_GCWoEW
n_7ConU
[tp]EWn
n=O2no
6jowcV
O2n]{CX
oUtVtVR
WO~>o]{r
~=oEo=
o~NA:n
~>oVO~?oWa
~=oEo=
5?-n.n?
~>]o]7=JpY}
w>oE'W
6_7CFwC.sC
WX~>oM
OznG~x_n
nEg3m0
_GC.sC
~NW2mGn
~=ooEo=
nG~6jn
CWWmGp
~=o_{r
WnM?E_Wm
_{C_Cm
oEoCmVr
oGFoGo
n?n]{r
~=oEo=
oGFoGo
?nWa]s=
~=oEo=
/W$mIp
~NWzmGn
~=oEo=
ACWomGn
~=oEo=
~p~?Co{
~>n_Eo
/WSs.
~=voEo=
o[WnE?E
~p~?o]
nWa~>nDm
o~NA:n
~>oVO~?oWa~?o]$
oEgmNp
6_7CFwC&sC
n]{G/WnWa~>n]w
~=oEw[w
|WO~N1/
~=|o_{r
WNnM/E_n
o_{Cgn
Wa~>o]w
~=oEw[w
~=1oEo=
oGFoGo
~NWnGn
~=oEo=
/W$mIp
nEg[mV
oAnVO~?
ONn]CgWmx
{EgmVq
Q~>Po]
2~>o_{r
[mUnfQz
7d~?<n
z(C6jowP
o_XWnE
o_{m.[E
3-2JbJbJbJbC
3-2JbJbJbJbC
Ojn]CWm
nE'Gnn]
nGgww
?RnUp_C_m
nCWm/Go
nC&wEgm
oCW7mwWZ
/ROVn_Gx
[C7mwO
n=O~n_GC
7*oC7[W
ONn_GC
ONn_GC
"JbJbJbC
C&E'~p
/RJbJbJbC
]{C&wC
kC2JbJbJbJbC
gEO/R.~x
gEO/RC
nE~p'?1n
Gfn[9m]
[(m_Gr
oomwKn
/Uo_<Cm]$
nCWm/JbJbJb>Wm
nWmnGWm
sCWmnn]$
-?)n[]$
[omJbJbJbC
oC7KW)xn
wNnUVCn
&]{CWn
sBWO~>o]
nGgACgn
gOn]cCWn
oE_nJC.wx
o_GCF{C
sCWY|o
Gn]GBG
nWX~BFo],
6jow7i
nG/W/C
sl7oUL
~@joUL
_?nE6gVR
0}[6o/CWnVR
W6n]UOsCgn
~>doUtV&oVR
?*n[,l
?.nWO]L
gE6gVR
nZv^n]
~>Nn],
nW?n]7E
oEg{m/C
WInVnRLz
nE6gVR
nWO~>nM5
ng?n]GE_n
?nE6gVR
%WMn]7E
-?n]GEon
sC.wEn
oE_smeCFwEon
{C.s0oULS
W!nn[5^X
oC7KW)kn
wNnUVCn
&]{CWn
sBWO~>o]
nGgACgn
WtnEon
gOn]cCWn
oE_nJC.wx
o_GCF{C
sCWYoo
Gn]GBG
nWX~BFo],
6jow7\
nG/W/C
sl*oUL
~@joUL
W?nE6gVR
?nWO~?
0}[6o/CWnVR
W6n]UOsCgn
~>doUtV&oVR
?*n[,zl
?.nWO]L
gE6gVR
nZv^n]
~>Nn],
n_?n]7E
oEg{meCFwE_wm
WInVnRLz
nE6gVR
nW~>nM5
ng?n]GE_n
?nE6gVR
%WMn]7E
-?n]GEon
sC.wEn
oE_smnCNwEon
W!nn[5^X
vUP{CGw
5G6JoV6
{VZ{VoC
n[!mbJbJbC=/
O{roCU
3-}bJbJbJbC
m]'E'K
r]+EW
-2JbJbJbC
6oVbYS
m]+E'K
v[m_/CWA[nE//
[{}bJbJbC
6oVZYSz
m]+E'K
m]cEG7
v]]'E"
v[yE'G
WZnE//
[{}bJbJbJbr
~}bJbJbC
pE"p]C
o';~>)o]{
E'/ZH]
nJbJbJb
12E7[E
nE'3[E
lbJbJbr
V"Y]{C/o
r_/C'C6@
Wo:ONoVo
oE/C~x
Pn~>2o]'
nE'G]c
nGFoGo
o|lbC
r_/C'o/
gEO/R.
m]'E//
W~?Jn+[E
WQXnE'?w
nJbJbJbC
r_/C'o
o:ONo.
gEO/R.
m]#E//
WO~?Jn+[E
WVnE';w;
nJbJbJbC
n]cEG7
m]#E//
WmnJbC
gCO6oVXS'o
qEJiE$
r[s.Vn
oGFoGo
r]cEG7
n]CWmSnE
WnJbJbC
r_/C'o
n]'CFwC
qE*p]?
m]#E//
W-RnGH
qEBp[_
n]cEG7
n|lnV~
:_C'3/
[{}]{E,
ONn[C&s
gEO/R.
oTzl]$
orlbJbJbJbC
gCO6~oVjW'
qE*p[_
J]cEG7
oxl]C6jnw6
N[C/7Vf>o
n]CWMnE
o|olbJbJbC
r_/C'o/
r]cEG7
m]'E//
W5nE'G]c
omlbJbJbC
bG[7zU]?
n[QZ<UT{=OSpEW
^[rl]'E
nslnV~
oLJbJbC
{VXEBE/ws
12GHUoUS
0}][QZ=][RX
nbJbJbJbC
{VXEBE/ws
12GHUoUS
0}][QZ=][RX
nbJbJbJbr
~}bJbJbC
{U`p.~p
sE''wa
]{CWxn/
z[m]=
12=7sE/7Fn
]{E/?5
CnE'/[E
oelbJbC
r]cEG7
z[m]'E//
[{}[E2C
fF6owG
WenE'G]c
odlbJbJbC
:nECV
n:ONo.BVj
z]sC7wc!
f[hl]#E
nilnV~
oBJbJbJbC
v_/CG[CO6oVJWS
r[pl]'E
K5F6BoU/V2
z[m]cEG7
n[HmbJbC
kC2JbJbJbC
v]]'E"
=nJbJbJbC
o-2JbJbJbJbC
JbJbJbC
[]wG"6s
8}bJbC
o-2JbJbJbJbC
/PJbJbC
s['C}bC
s['C}bC
z[OC//VK*o
z[`m]'E//
[{}]{?
F=CsE
qEJp[_
r]cEG7
oel]C6nw?"
/VRXOMAoC7sw
[]E'C
/]3C'#/
nE/]c
nblnVz
;JbJbC
CoC7sw7
[]E'C
/]3C'!/
nE/]c
12E'w
WunJbJbJbC
/VrXOEoC7swg
[]E'C
/]3C'!/
nE/]c
12E'w
WnJbJbJbC
[6]wC'k6o
VY[]{C
[]E'C
/]3C'!/
nE/]c
12E'w
nJbJbJbC
[6]wC'k6o
VY[]{C
[]E'C
/]3C'!/
nE/]c
12E'w;
nJbJbJbC
KVYOJoC7sW=*nCFwE+
pE*6nVf
wC&E';r
WnE'+]
o RlbJbJbJbC
/VYO]LoC7sw
[]E'C
/]3C'!/
nE/]c
12E'wk
W5nJbJbJbC
[6]wC'k6o
VY[]{C
[]E'C
/]3C'!/
nE/]c
12E'w
WenJbJbJbC
/VXOPoC7swW
[]E'C
/]3C'!/
nE/]c
12E'w~
WnJbJbJbC
RoC7sW#nCFwE+
pE*6nVf
wC&E';r
WM(nGH
N[0Ql]
n RlnVz
ol*JbJbJbC
/VYOToC7sw
[]E'C
/]3C'!/
nE/]c
12E'wz
nJbJbJbC
[6]wC'k6o
VY[]{C
[]E'C
/]3C'!/
nE/]c
12E'w+x
WnJbJbJbC
/VXOmWoC7sw
[]E'C
/]3C'!/
nE/]c
12E'w[v
G6nwKw
W%nJbJbJbC
oE'/]c
s='pE
E,p|Gv
0}[WEn>
sUYpC&sHp+.
qEJjiEDVb
o0n_Eo
EDp|G6zn
J[m]~p
oJlImwv
oClbJbJbC
oE'K]c
o~>go[7
z[m]+E//
[{}UT{=OSpE
WnE'CV~
qEBp[_
v]cEG7
n[(Hl]+E
od!JbC
:_C'3/
>[m]E//
[{}]{E,
ONn[C&s
gEO/R.
otGl]$
o?lbJbJbJbC
gCO6~oVj
N[m]E//
qE*p[_
J]cEG7
oEl]C6jnw
N[C/7Vfo
G6jnwo
o<lbJbJbC
gCO6oVznV7bom
qE*IE$
E,p]?2
ELp|G6zn
WEnE'/]
Wu}nJbJbJbC
[[gE//
[{}_Eo
rJbJbJbC
[[gE//
[{}_Eo
rJbJbJbC
/RW5n>
oJbJbJbC
oJbJbJbC
kC2JbJbJbJbC
v_/CG[CO6oVVSfopm3
K5F6BoU/V2
n[tmbC
[{}bC
v]]'E"
[{}UT{
(JbJbC
}bJbC
V[PFl[w
[]wG"6
nJbJbJbC
}bJbC
/PJbJbC
s['C}bC
s['C}bC
5G?NnM.]E
sUYpC&sxo#.
o:l]CW
sUYpC&son6zow
WMunJbC
qE*nIE
2Wa~>7n]
n~?n]KE
sUYpC&son.
p|G6zn
CWynE'/]c
WsnJbJbJbC
67Vb,[;0m
E,p|Gv
sUYpC&s8o#.
W5xnEW
OFn[m]$
nt5lVOi]KE
pnJbJbJbC
E,p|Gv
sUYpC&sXo#.
op2l]CW
sUYpC&son6zowl
W-mnJbC
5G?Nn]E~x*
qEJZiEDVb
oJbJbJb
E,p|Gv
sUYpC&sxo#.
o/l]CW
sUYpC&s
on6zow
WMjnJbC
8}bJbC
oJbJbCXq
oJbJbC
67V26[;4m
'z#V]2
-?In[]$
#zFGJn
qEJ?Jn
E,p|Gv
sUYpC&s
nC&wEgn
WennEWn
O2n[,m]
sUYpC&s{on.6zowe
W-fnJbC
5G?NnM.]E
E,p|Gv
sUYpC&syo#.
o(l]CW
sUYpC&sxon6zow
W]cnJbC
hJbC&
?C'#b%f
zFoNn]]
E,p|Gv
/R.W5in>
sUYpC&s8vo#.H
]C.C&wC
gF6zowGO
EDp|G6zn
nCWAnEWn
oH$lmwkO
Wo8n[6zow
W]_nJbC
5G?Nn]
s8so_Eo
E,p|Gv
sUYpC&sro#.
o!l]CW
sUYpC&sron6zowC[
W\nJbC
]wC2JbC
]wC2JbC
sHo]ZbC
oCNwG*M[C
stm[]cEG7
JbJbJbrq[t
kC2JbJbrq[t
gEO/R6
ZcbJbrq[t
gEO/R6
ZcbJbrq[t}bJbC
[]{E'|]wC&wC
W(nJbJbJbC
[]{E'|]wC&wC
W(nJbJbJbC
[]{E'|]wC&wC
W'nJbJbJbC
[]{E'|]wC&wC
Wi'nJbJbJbt
]cEO/R.6bwa
~p'{ZvEG]
kE//RJbJbC
[[cE//
jFG]cEG7
[{}bJbC
[[gE//
s]gEG/R6awC^
]k{zGjGo
JbJbC
]PWVO]c
Y,}bJbJbC
[]wqFw
8}bJbC
[[gE//
]gEG/R(
[wE//x
6[9V-G[
r]cEG7
WUBnJbJbJbC
Jbrq[t}bJbC
6o9VuH[
v]cEG7
n<o[+G
gEO/Ro
AnJbC
]cC2C&wG
]cC2JbC
12RoHMQG
W=nJbC
[[gE//
nV:+Z&oC7
]G2n[?.n_
[hm]cEG7
JbJbC
]PWVO[_
AC&soRJbJbC
[{}bJbJbC
_EG/RJbJbC
[[gE//
.6gaw#W
]wC.sC
[[cE/7
[8oUp.C
[{}]6p]{C
]cEO/R
[{}bJbC
[[cE//
[_C.{C
kC2GH_C.wCNsE
oUp/a.~p
[{}bJbC
_/C.{C
[{}bJbC
gEO/R.[
U[~p'{ZrE/]
kEG/RJbJbC
]wC.sC
soUp.,
o[g,Us
gEO/R6{awOT
kC2C.6W
nEzC.6W
N[CG7Vf
]{=[P^
Y]wG'g0
F[E'_c;
J]cEG7
nUwsC.sC
6{awsQ
eCN{CFsCWyo=
WinCFw
nG).~p'{Z/
JbJbr
o]ZrEV
WinJbJbJbC
]{CG[[EG
W]cEG7
WYhnCF{
mG1.~p'{ZrE//
[{}bJbJbC
]{C.wC
~}bJbJbJbC
nJbJbJb]cEG7
E%ZE/]
gEO/R[
ICpm.W
nbJbC
8}bJbC
[oUp.;
[{}_Eo
wCFsCWa
S[~p'{ZuEG]
kE//R6bwK
nJbJbC
[[gE//
kC1JbJb
[WB'~1]_E
^CFsE'
W}cnJno l[
gEO/RJbJbC
]wC2JbC
XnJbC
E/@GC.{C
JbJbJbC
yCN{CFw
gEO/RJbJbJbC
E/@GC.{C
JbJbJbC
~}bJbC
JbJbJbC
E/@GC.{C
JbJbJbC
E/@GC.{C
JbJbJbC
1' ]C.wCNsC&{C
o=Op.K
[{}_Eo
~p'{ZvE/]
kEG/RJbJbC
3-2JbJbC
Vra[+C
r"~<Po]EO]cE
UFo!Va~?o]E
W?Nn]C&{E
]GGNn[Wp
[m].n_7C
o=OpV+o
[dmnHn
o`lWO~In_7C
@jX2JbJbJbJbC
ZbJbJbC
zG]cEG7
[{}_Eo
~p'ZuE/]
gEO/R6bw@
nJbJbC
gCO6oVzZ7RoDl]
Uw{"2S
K;Ok?_
nUwsC&sC
_c_C/+
WO~Hdo]
^[0lUS
WO~O$/>
pC.wCW=
[XmnVmC
WVnJbJbJbt
whn]wC
3-2JbJbJbJbC
[8}bJbJbC
>[cCG7VV
_GE'[C
PWVOSo
[{}UT=O
?NnUwsC
nC6Zows
N[CG7Vf%o
6jnw'9
]/[b]c
whfn]wC
gEO/R.6-bw9
qJbJbC
QX2JbJbJbJbC
qJbC
qJbC
qJbt
wdn]wC
3-2JbJbJbJbC
[8}bJbJbC
>[cCG7VV
_GE'[C
PWVOSo
[{}UT=O
?NnUwsC
nC6Zowc
N[CG7Vf+o
]/[b]c
wXbn]wC
gEO/R.6-bw5
qJbJbC
QX2JbJbJbJbC
qJbC
qJbC
qJbC
s[cCG7Vv/o
^[<~l]cEG7
[DRlWO]
cJbC
s[cCG7Vv/o
^[}l]cEG7
[QlWO]
cJbC
[[gE//
[{}bJbJbC
]{CWn=-2JbJbJbJbt
s@n]Z/
GE//RJbJbJbC
]PWVO]{Cp-2CW!nE
?}bJbJbC
]wC.sC
JbCXnJbJbC
|z0JbJbJbC
gCO6oV]S
gEO/R.
o]7E'K
gCO6oV]Soyl
z[@zl]cEG7
o]7E'K
[CO6oV|]SJoyl
z[sJ|V
o]7E'K
s[cCG6oV]S
wCNsC6ow
gEO/R.
o]7E'K
WMnJbC
gCO6oV]S
xl]cEG7
o]7E'K
WnJbC
gCO6oVv]Sovl
z[s/|V
o]7E'K
WnJbC
s[cCG6oV]SJovl
wCNsC6ow{
gEO/R.
o]7E'K
gCO6oV]S
z[ul]cEG7
o]7E'K
WMnJbC
gCO6oV]S
?@FHIMZEMLLPQRQUXasyMYSY\Y]^o`gST[[\]^dreiclimilelrq}blinaququ~x_dcinoilhourvyz|ty~rvq}_^YZ]abeadkcvrvynaefiniilq}szpt}suvruy}yy{~
>BCSEINZTZQNSPUS\acbf]Y_WX[]Y\]YY^Wcjnehnbdqszv{bks}{|TZ]XYfbgjnkaov{sr{KMW[QUX^[`eafjnmut{bbeimzrq{y}pvvtrvy|y~
]CKEINDTEGLJ[NNRVV]RV\dahn`tNZ]Q^_agceidkox
r~yV[`finmppvr}mpusz}y}
VS_VERSION_INFO
StringFileInfo
040904E4
CompanyName
Microsoft Corporation
FileVersion
1.0.0.155
FileDescription
Mira Malware
InternalName
LegalCopyright
Microsoft Corporation
LegalTrademarks
OriginalFilename
ProductName
Mira Malware
ProductVersion
1.0.0.155
VarFileInfo
Translation

DNS

Name Response Post-Analysis Lookup
dns.msftncsi.com A 131.107.255.255 131.107.255.255
dns.msftncsi.com AAAA fd3e:4f5a:5b81::1 131.107.255.255

TCP

No TCP connections recorded.

UDP

Source Source Port Destination Destination Port
192.168.56.101 53179 224.0.0.252 5355
192.168.56.101 49642 224.0.0.252 5355
192.168.56.101 137 192.168.56.255 137
192.168.56.101 61714 114.114.114.114 53
192.168.56.101 56933 114.114.114.114 53
192.168.56.101 138 192.168.56.255 138

HTTP & HTTPS Requests

No HTTP requests performed.

ICMP traffic

No ICMP traffic performed.

IRC traffic

No IRC requests performed.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

Snort Alerts

No Snort Alerts

Sorry! No dropped files.
Sorry! No dropped buffers.