SmartHawk

0.9

低危

64 个模型检测该样本为恶意！

重新分析

下载样本

1070af8e8d492631c98f2a88b129c7e9b0501458b703f22fe7355e218069164a

1070af8e8d492631c98f2a88b129c7e9b0501458b703f22fe7355e218069164a.exe

分析耗时

193s

引擎	描述	特征	威胁分数	可能家族	检测耗时
DACN	基于动态分析和胶囊网络的可视化恶意软件检测	API调用、DLL以及注册表的修改情况	0.12	Unknown	0.06s
FACILE	利用改进的层次胶囊网络对二进制恶意软件图像进行识别分类	二进制图像映射为的灰度图像	1.00	Unknown	0.03s
IMCLNet	轻量化深度卷积网络模型实现恶意软件家族检测	原始二进制映射而成的可视化图像	0.78	Unknown	0.22s
MFGraph	利用静态特征构建图网络以检测恶意软件	原始二进制PE文件的静态特征节点	0.00	Unknown	0.00s

查杀引擎	查杀结果	查杀时间	查杀版本
Alibaba	Worm:Win32/Botgor.bb8e5f20	20190527	0.3.0.5
Avast	Win32:Agent-ADAU [Trj]	20200312	18.4.3895.0
Baidu	None	20190318	1.0.0.2
CrowdStrike	win/malicious_confidence_100% (W)	20190702	1.0
Kingsoft	None	20200312	2013.8.14.323
McAfee	BackDoor-DSE.b	20200312	6.0.6.653
Tencent	Malware.Win32.Gencirc.10b0cd6f	20200312	1.0.0.1

👋 欢迎使用 ChatHawk

我是您的恶意软件分析助手，可以帮您分析和解读恶意软件报告。请随时向我提问！

🔍 主要威胁分析

⚡ 行为特征

🛡️ 防护建议

🔧 技术手段

🎯 检测方法

🤖

Static Analysis
Strings

PE Compile Time

2008-08-29 21:01:43

PE Imphash

79b96456f9efc94c33ade5e8ec421b2f

Sections

Name	Virtual Address	Virtual Size	Size of Raw Data	Entropy
.text	0x00001000	0x0000b072	0x0000b200	5.892078102556935
.rsrc	0x0000d000	0x00010d20	0x00010e00	6.540871181433465

Resources

Name	Offset	Size	Language	Sub-language	File type
RT_ICON	0x00014a98	0x00000468	LANG_ENGLISH	SUBLANG_ENGLISH_UK	None
RT_ICON	0x00014a98	0x00000468	LANG_ENGLISH	SUBLANG_ENGLISH_UK	None
RT_ICON	0x00014a98	0x00000468	LANG_ENGLISH	SUBLANG_ENGLISH_UK	None
RT_ICON	0x00014a98	0x00000468	LANG_ENGLISH	SUBLANG_ENGLISH_UK	None
RT_RCDATA	0x00014f00	0x00008800	LANG_NEUTRAL	SUBLANG_DEFAULT	None
RT_GROUP_ICON	0x0001d700	0x0000003e	LANG_ENGLISH	SUBLANG_ENGLISH_UK	None
RT_VERSION	0x0001d740	0x00000360	LANG_ENGLISH	SUBLANG_ENGLISH_UK	None
RT_MANIFEST	0x0001daa0	0x0000027e	LANG_ENGLISH	SUBLANG_ENGLISH_US	None

Imports

Library KERNEL32.dll:

• 0x401000 GetCurrentProcessId

• 0x401004 CloseHandle

• 0x401008 CreateFileA

• 0x40100c GetModuleFileNameA

• 0x401010 Sleep

• 0x401014 CreateThread

• 0x401018 SetLastError

• 0x40101c GetLastError

• 0x401020 TerminateProcess

• 0x401024 OpenProcess

• 0x401028 ReadFile

• 0x40102c GetFileSize

• 0x401030 WriteFile

• 0x401034 SetFilePointer

• 0x401038 SetFileAttributesA

• 0x40103c GetLocalTime

• 0x401040 ResumeThread

• 0x401044 SetThreadContext

• 0x401048 VirtualProtectEx

• 0x40104c WriteProcessMemory

• 0x401050 VirtualAllocEx

• 0x401054 IsBadReadPtr

• 0x401058 FreeLibrary

• 0x40105c GetProcAddress

• 0x401060 LoadLibraryA

• 0x401064 ReadProcessMemory

• 0x401068 GetThreadContext

• 0x40106c CreateProcessA

• 0x401070 GetCurrentDirectoryA

• 0x401074 GetWindowsDirectoryA

• 0x401078 MapViewOfFile

• 0x40107c OpenFileMappingA

• 0x401080 GetCommandLineA

• 0x401084 GetModuleHandleA

• 0x401088 GetTempFileNameA

• 0x40108c GetTempPathA

• 0x401090 DeleteFileA

• 0x401094 CopyFileA

• 0x401098 EndUpdateResourceA

• 0x40109c UpdateResourceA

• 0x4010a0 BeginUpdateResourceA

• 0x4010a4 GetProcessVersion

• 0x4010a8 lstrcmpiA

• 0x4010ac WideCharToMultiByte

• 0x4010b0 MultiByteToWideChar

Library USER32.dll:

• 0x40112c MessageBoxA

Library MSVCRT.dll:

• 0x4010d4 memcpy

• 0x4010d8 ??3@YAXPAX@Z

• 0x4010dc ftell

• 0x4010e0 fclose

• 0x4010e4 fread

• 0x4010e8 fseek

• 0x4010ec strcpy

• 0x4010f0 __CxxFrameHandler

• 0x4010f4 _wcsnicmp

• 0x4010f8 wcscpy

• 0x4010fc fwrite

• 0x401100 time

• 0x401104 memset

• 0x401108 strcat

• 0x40110c strlen

• 0x401110 ??2@YAPAXI@Z

• 0x401114 _strnicmp

• 0x401118 fopen

• 0x40111c wcslen

• 0x401120 _itoa

• 0x401124 _wcsicmp

Library MSVCP60.dll:

• 0x4010b8 ??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z

• 0x4010bc ??0_Lockit@std@@QAE@XZ

• 0x4010c0 ??1_Lockit@std@@QAE@XZ

• 0x4010c4 ??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBGABV?$allocator@G@1@@Z

• 0x4010c8 ??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ

• 0x4010cc ?c_str@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEPBGXZ

L!This program cannot be run in DOS mode.
;7$97O3767
$7O!717Rich7
FATAL ERROR
Cannot execute program! Application will be terminated
   [INFO] 
     [OK] 
[WARNING] 
  [ERROR] 
C:\MyRep.dat
C:\MyRep.dat
!CreateProcess()
ntdll.dll
ZwUnmapViewOfSection
IsBadReadPtr()
\system\
datafile1
datafile1
 -cure
 -offset=
 -rcline=
bot1.exe
cannot find RCData
bot1.exe
KillProcess(GetCurrentProcessId()) fails
RunMainEXE() fails
EXE_VERSION > VERSION
Cannot kill that process
FROM LOADER
_GetRsrcDataA()
BeginUpdateResource()
UpdateResource()
EndUpdateResource()
!CreateProcess()
Cannot copy current file to main dir
"MAIN_EXE"
EEy7E 
MQPREH4QUR
EHTQUREPMQ
MEEMQ<EL
UEH<MU3fB
U3fB@PM
EM3fQ29U}QE
MfUfUEH
dfUfhXH
EPMQjU
EUUEPLu
EUUEPMQjU
EEEMQURjE
PMQURE
UUEP1t
E]U@VW}
9EtMQM%
MQMDB(
_^]U$E
EUUEPMQjU
EEEMQURjE
REPMQU
MMURVp
fEMDd*
9Et0URM%
9Et!UEJ
`]Ujh@
P0QREP
MQURP[
MQREPZ
PURM{%
PEPMQM
EPMQM#
t7EPM#
PMQURM
PEPMQM
9EsxMQM
9Es+UREPM
EMQURM
9Es9EPMQURM
UlDE]Ujh=@
^]Ujhw@
EMUEfE
EPMQURM
UEPMQURM
tpxt|x|f
EPMQURM
hEPMQURM
L@TDXH\L`j
, ,$0(4,8f
DPHQURM
$DPHQURM
PHQURM
PHQURM
3fB29E
3fQ29U
3]UQMM!
EE]UQMM
@]UQMM
EE]UQME
]UQME@
]UQME@
]UQMMM
UQMMPMPM
EMPURM
UEMQURM|
t<EPMjPM
MQM|PM
EPMEMQU
QMxUEJ
]UQME@
tgMMUR
QUREPMQM:
dURMPMG
QUREPMQM
QUREPMQME
RMbEPG
]Ujh:@
]UQMEH
]UQMEH
EE]UQM
EE]UQM
]UjhZ@
PMEMQ7
E]UQMM
E]UQMEM
_^]UVWE
]U]UVW
_^]UVWE
]Ujh!@
]UjhA@
UQMM!E
M;wUMQ
SPEPMFM
EPMLMA
M;wUMQ
CPEPMM
]UtVWE
_^]UQVWE
_^]U3]UjhY@
]U VWE
uUR $E
_^]U VWE(PM
tdMDQM(w{%
U(U/EDPM
UEEMMUUu
M/UDRM(z%
M(MUUEEMMu
GetCurrentProcessId
CloseHandle
CreateFileA
GetModuleFileNameA
CreateThread
SetLastError
GetLastError
TerminateProcess
OpenProcess
ReadFile
GetFileSize
WriteFile
SetFilePointer
SetFileAttributesA
GetLocalTime
ResumeThread
SetThreadContext
VirtualProtectEx
WriteProcessMemory
VirtualAllocEx
IsBadReadPtr
FreeLibrary
GetProcAddress
LoadLibraryA
ReadProcessMemory
GetThreadContext
CreateProcessA
GetCurrentDirectoryA
GetWindowsDirectoryA
MapViewOfFile
OpenFileMappingA
GetCommandLineA
GetModuleHandleA
GetTempFileNameA
GetTempPathA
DeleteFileA
CopyFileA
EndUpdateResourceA
UpdateResourceA
BeginUpdateResourceA
GetProcessVersion
lstrcmpiA
WideCharToMultiByte
MultiByteToWideChar
KERNEL32.dll
MessageBoxA
USER32.dll
??2@YAPAXI@Z
strlen
strcat
memset
strcpy
memcpy
??3@YAXPAX@Z
fclose
__CxxFrameHandler
wcslen
wcscpy
fwrite
MSVCRT.dll
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBGABV?$allocator@G@1@@Z
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@XZ
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
?c_str@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEPBGXZ
MSVCP60.dll
_wcsicmp
_strnicmp
_wcsnicmp
m>&K$P$
~pnIo2
}D$V=pA
D {AwUx7
|k?T$B
SSS$i@}mHl0
|UZ)SSST sF
a_/SSSR
ie7T SSR
`mjigfdcd
mk?V#S
Xspnmkjhgedch
L$lIjv
{mqFX&SSST zNwutrqonlkihfedcn
^8yXhnitK[*SSSR
v{zxwusrpomljigfecdqzSlI
Q*kG{Y`auM^.S SSR
~|{yxvtsqpnmkjhgedcf
H ]8nJwR{VsK`1T!SSS
~|zywvtrqpnkkihfedbj
R+b;kEqJoFa3U#SSST!
}{zxwui
rhigfecbn
H V.`8f>i>`3V$SSSR
kjhgfdccp~Xf?
M#V,\2a5^0V%SSSR
nlkihfedbepuLkH
L!S'X,Y+V$SRSR
spomljigfecbh
mlAsUzZ
P"T%T"RR
SST!
~vusqpnmkjhgedcal
fb5a7{
~|zywvtrqonlkihgedbc{
}{zxwutrpomljighu}
~}{yxvusqpnmo{
~|zywvtrv
vJ2{\V(
F$oNI!
n`0SR
Y&wKqIvz\R%
xg:T R
zoCU"SSk;
gkihfde
wuLX&RR
btqomkigech~W}a
R+uTkmxP[*SS
[{xvtrpnljhfdd
Gc>yW^wO^.SSU"~P
~|zxvtromkjhfde
S,iCsNqI`1T R
}{ywuskzy
figecg
HY1e=i?_1U"SR
{jhfdci
L"W-^2\-U"RR
mlihfdbkzR|`
KS&V'T"RSV"
sqomkigecd
iuNoLvQ
|{yvtrpnljhfdcf
~|zxvtrpmljisy
~{ywusqr{~w
k?Ow\
vLT!X&yLc|Tw`D
}VW%T!tG
nKn}W\*R
ovspmjgd
W1vRvO^/Sc2
{xurolifd
^7i@^/S [(
K!Y-Z*S U!
}mjgdf
zurolifc
~zwtqnlrwv
uB#v_S
e<a1~P
grQ8d1
{uvwY]E
XC^'`;fLlo#]XxO
=&'CeW
"$1Lh/
SU<Gxd
DbEY0|
FJ&l/!]XxO
5$Y$5c]XxO
MSh+Z]XxO
M_gNWk
EZN}YPR~
q->wT0?
SxpJ|G>8ig(#Q
W_+W[IS
*M5P1
s_7GX60kp
Q3|~$L
l,%'g%Al
F-q_Js
sr3&]C
5N\H(EjB^2
?:f^_e
F#G7+Y9
7@aJ%+Z4
fMrcdk
Fep5X5"
tOo%b*T8
\6y:U2
clI\</t
{|6`WY
7u}:;$e
srz7v8n
,lN&g|
{Vi1$Uh
qQK=`fdd
;"BBrR!
.L)8jN
k&iz~3IN
*,7ICli`
o&nZ)*
L,v0_RV
g(-'V*Y+3%/j3
|m_(#f
Q2(!}]6r
g}=\'YY
XS?Crj
::/]- *
7zIy@S)_7`
0UW{WG)
h3`wqH
y&_hn6Q
B]#{5lj
Z+<0 E>
'{QZ]@OH%78@D
ffy<D7]HU
dx9Zn
$F"/9w%DG
gI}Tipi<zc
}NY+h.3
Ie)r^E=_)
}:!h;Ej
.MW8hk
rFO:TxY
+~+H,&
dh5l22
6:tYedA8qO
U-f+?yOR
3LSGur
AY=*jLBz
?pB=/wCv-nd</
dM>S=?a
Xf(;L
LLL.[_
'6ml4[tm
pL\I{cC~nOJ
w\3kLE
2)|H@\
Hsl($E
,@hO3J~.J&<:'
Y%dJtI
Nl G4_?
Q`?{&"J
#Q.og(EK e
BB#,'3
_WpE`4
d7RFwY
&c,r-+
5;|&3p7Ikr
zdH>,p9{*l
#w:x^9@o}es
HX'2:`$
d{y92u3*
]#0%DcU
XJS?}^<?
Ou\T%\
5:9 g7*G8\b
270}iD
(oQHHN!db=*G
*. [M)SiRFe
_IYufo~
^IN_.Ib
w2]eE5
&r[vQ4^
u>`cC65K
GmLON\&gJaB
'scV:5
+EUr/}r
%)[.$):W;/
y_"/6Js!*`fuQ
"kF7Afc
^|C 'AA
 _HmVgx
gK2E#3`\XnkIPw{
%D_/o>O,AaRw
 8|7#ss
,$&;S/
}yNu7d5+mDA`;u.D^ZB6aOF
f&D"#K
>\=r=N
],jUwF\)KnAt^#Tsx
Q|k2~>n:uk7[4
Chtou8fk
|N4.?ChSpC
Go|nI_"
_ILtrv,x
/"OH5S
|\pZe:
M_>(q18sZ
57fjGwH;
)l/3Bt
V$Q`xktc%
lo#!7rD@N
=5qf?A
.9_/Wc
6c>m_s
y}jB2s0*24L
Us|S)e~ F&q;
Bt?'ut
6[d$x6Rivg
8G4dN]
Z@ ^)"9U7E
[tO2&o
F?yt}AY/
J8"k\fHYco
V.p'yZV&L(/s]o~ig.
~NSOZU:{)!z3Q
`B]?eq7L5
GHB9/gsF/x
LhuVO<
&Gm+?+%
7B)2n-1kYSIrY
9=W'y7
IQlWK1(w
x"%&bKO{^
vuv'OM
{4Fk5=
9yYhl
&MMH)rKvVQ9
FOO)F"
(u0Ug/
0Z7rv3%
`WmlnsEA$
Jy&-8/(AVJw)n
`(o#|v9
Uh*]]S
PoqVy~9:'
78+}kk
htq\:r!
6%P3ZN
Z5'L;W5rmbb|[
JF?(R6
oP?:!(h
j%:i;%
2}L<w`^$# b=
v+d:*SY=wf)
a!B?Md24cOVn
iC^eej2[
VypcsI_=
Vhhfqd3
5LHHC?
ghAG(/
n\"=0x7sQm
[+%OY`
vH lF\z{^PhgL
n$9}[=
xh4*QV,[
'`0<6i(>
:WVj/1k'(S#io97
1!k)u?0//
C'qyQ}!V,
:\/,Wm\x^
& &s5pm
X7fr{s
XW/>P/
p" |(Y.B(q
PXTqo}PN
0IbVpg
)0Wsp<$~g%DP
$QLTm{
:1n9r/e7
k b<YpNx8
b-f8A+x
HLgE%>
k@4Apf
9/b- m9Q1E
NkRt,|MNt)\X
U{5rh[2A
NsBN'H=hDK(o
sPl|yITl
;tIGSu
c>sx3I[WSW{IZ}^
G~i/:?x
[i!n^6T
6=~?D#T
**%BH<
9QL-3|
lkUX2?wV(M
YH=)Ynp[Kj
$e&&7B
! EFN:4#
cHm|Y8
'!`rQ{n'*[T
=i^J;2
AZY9NPK
7\zb`OD1@
>2liZr
6Ya.r}
0vcUocxOX[.
^JA.By
}uXS^)-
-2^}`vz<wsu
p_3&9m-]
VL?EcF4
IR"D27
R+Vt8w
fd36c&c
Bvbgt*^puQ5jA'
.V{`jx
O``-x/
wJqwwMr
5|NEyO%
-/b"g=.
dx|C5_'
8/G_pp
A[fOYy
G&) X11
4{6<<t'
&gYp?^?V
q{]gFfDP^X4XDJ
*-=R>ApYj
Q}^Sw!=@
~`'2Opw%V&1
!l+G\Zn
vu|[`>@v25
b5h}>DH=}Mi\
;t~Djl
5bki1j%Ab0
8-`?b,v
",!HNdBJ
zR {f7#?
UbO]D9@R,
Xo9JV9Y },`
%){:>V#
 seZ;8
G6Y(ihC
Kf6\,N
KKDEmT+F45.
\^)$a8
oT0uuT!Evm
`_NS(X3
`3>C}z|7
.`ll)~
/]VD^X[
]k8^'2-
,kSH]kQI$'l|Gk]7bQ
NnU]+-.L
89_j][),o
9Mm4>t
[Tw8m|gF
m!A.S1B
>M#WZ+dW
h\nezu>\`g
`%'"l:
5ab^`{
=^O3|g}"ZFs
`/NV<%
2@8<_}S8O?
MTk;`,
`?<(u}'NW!L
9'ul_@r
6CSyk7t
y`V`gN
P=tPil8
HK-[r_
W[V0%%Xc
0,uBeoI
"X9?9Nf
{jwxM_4
iST>\q\
]De9#*rj
NneX-+cYO
E% L]4$OyVM
UV,mdoOF
a^_&J.
P8zTM\
6WOj<]/Y
<Ll}-hSV
Oo+j[F^
%mQ|nwQ+E6rn
T3;}60cY
l79o<Y
bTj5Br
sbX@5NiT
"9Z8-<%
({aTb_
Sh[f%l6
nN0``m
u%=~X/k6
%aE#]|
Tt}R1rZp;dq
^GO}kbY}]iGeDfk/a
38{e%pR
3CUZDs
zYxK3|;e
9@*,3RK_
nn\su&
tkZr`i
7\XSWSEg
yA*FJHA>.:
RSt`q8
oqasm-fP>X
:ehHM0@\u<
/l E .Y
=Y4>n>ksz
}b%Dv~
.8D!,fv?M+a`K
P]["S`)h*
Wc`fGq<|
i2!8u6b,im5dX
>COpH,@CFL
j5X'c_
GwIYv<
el$X;vK
.MKYQ9
0Na^Z/KP@
7 <6PRN
H6#CV@
(EH,sX
|K"!6n8
N~t~?>SB/
J:t;rJn8z
&X8~)j
VMEQ;q2
OMJJj*XU
Sx(s~$
Gi+r]2Hti
y+j>lz
Ak=9M]@OX
:8o%0i!ULs'Y'K
H8>lZg<QgLa34
xfjUU'W
El+P?'
,6?|v/F
_=fj,`7
$'3C[L&=]U-i
k\_)(1g
E}a^el
l6pIs]'
F~^u-}fe
^Jf:5 4i0!iD
o4vnQM?F^2
/=gx)^"\Dt
CBd9m8DU
Rl0Imv9$
7|;-{{kw"
Ze1Q*Ld
[!N`@|y
h*->Dp
uTqh:%
c?!Q@&5
7Wl2`+ Q8
DG]X=F
5l9C%:X:s
;1HMenh~,u8\
K+Q|t2.]<
@)Y%Me1,
H)e)~
a=il\9O3b
!vfZ\2[
xp&&6f
r%MpQzI_q>
2weWsS
.Hmvi=
j*zpaD{
^e#?|WB00
E0/C(\L8{
%1%5N'>jM:
3lkN?6#
%%/cir
%d7_u'LN
P7Fm,|lj
HB4>=M 
z"?C%1
1r3+6_2
8Kc%)ti"
YO|PJ%p
_|1PB5.
sDc|g5~Bh
F9|EQ1
$G\=S]=
jX `ta
(0A)=.
{vz?==
hb{aQDa.
F\fKx`B
t'+rF:[n
Dt=%\#
 oP0VCat 
Ry`2wKP
 i.RP~
sdsru'
Z]:/l,?pTQb[u5)7Z
ZNmOg-F%
vtj?Hn@
9-1_~dHzAF\04T1tQvO
qV8~2o
q6K:kb03*
/R9='cv"
5r4EiW
eMSZJ4
%:^h>jxinxCN
u\Y=3(
y{3]RN
\ m'kZ/~
mAcT*#;@Z
<mT.O*d"8i<u
OyUJa,
14;bq8sQ
:}=2 @"
vK.J%._Ux
?O;XCIj|F
y4(s}Lh
ii@)2b
Lrf3''~:^9|
u0H1{}
SaI4M:
t0m2n<
)/&S-i`
An6^[E=
$>Z.?;2~
]"4}ez$.
C4q.JNHi
^8sjl=]@<lT
~61R&'(
_E1cmoq$~jcl
W^D4+xo$yx/
:78yC$/&a|DN
cK.4B38L'
OeX9 S
r`7{QbFjC4B?O
1gbG&}6K:}
tc*d#y
`nz[nq!
6J:@(x*'
G%,\GQ
* wA;N\_Z
K8+|I}Pgj0
XHG~f3^[Mg6lF
K1YS1A]
q|+[*B
xXG`._
kS~A)(_8
W((<"njN
BO%N>Q:d{
#pU2agC
wlAA|NO
$$#&V\
(s*!Et66&
A3:I2v_0
#ty<E@.kM
nq1]cg!
K9x^*[dDwS
Im^Q'6
DH 9|-
tsE]!e_
9lwQ<w>o
"DXh3ZM,
>A;mD"b\;
-DGa^O
A%yj*l#ji
~@z@aebcrC!<ea
-1Z{l"
'5D!mY
{XJ$Gm{j3
.5::[#m=c<
v(,9GV
Zrcig-{c+
?+0[:F(
Z5H*MZ
15o(]a3Xu"(7i&xJ
v)N5"z]`fX@N
hu3e.AVYh.T
"0~=MC6tI'z$=^;
S0!o#??
QBT.y3
N#Bb3*5%:N&
.V;PQ}qFkp;mwz:s5l
diPqzTU8TZ2Iv
Z~7{my
1v~Mz#
!#Uv$V
]U<hR[d
I,RgWGZ
";ZpcNxic
cSW"DjKq{
2ViJ~o
BI8DwF5w
]['`Sh3? 
wVRI*g{
Nat/yoR5
[5bp)v=
/QY]%bT}Brm.`d
5T"h:; 6
VMs%XFPOE
*/+d;|&VZg1<pw
qnV@m,ggIG/h"6q
lKNv6(9y:
GF^kK7
I*Z>e<k3&\
e&YVF;On
(9kJ|65
s:w@24y9
qWA%#[
MdlfP+
\V>OUR
!IyEL-
Q>'=!Ag+<
C_ch0U
:0uRUn{+n]Y"!g
H{GAb7
||72MTo
#Nzc(\9<
BbPx[kz<
$C0S K
7l[MDG
q--7EcH
wSWl-w
CMMZQ[
 MP+,_
fy3GjSm)d .0f|&
}>L9yP
~+khws95
v}K)4EU
_\d]jJ74}
t_n$mBu
+14!|t{+
p}T}B5)<
a<_>@sU".)(D
n]fHHJ
Khae?X;$QR
:y-FEY^LK3
:e\5$Mr
k7~Cg
W)y;Ou)
AXi2{<
/+Z9il|-_L4X4WE2,y\3T{`E}}8;
iCTi%=qS8n&
$>!%es!TA`
*Oj0zrN
3W"GO>N:J
m(SvodG
DD%el8"Bd
APC#"<6
Cv+pM; c
UO5esI
;&H!(}f4
2<tXuI9i\46nX^dM
K K'H'@
?)=qInI
n("JfB
<VW"%\BVb
e^lV9y0
cCMc;VYy
E8=<`L
yp.bc_
?(1Y?-m4[
AW~jm$8
tIyb+SZJ
ww?{62KR
n6 1M,v)
qw"rlK;
JD#(qZQ|
je<{0w
LI!|XT
SE84AsT5
"zOUbty|/Y3&wOx
76Px-t@@R-+x
hQC]fv
Z%UzEY %Vio>
\jLTICfYz
M= X)}
$.}"m]
?`8ZW'.JzL&=p,
Wy${'^
;7}uIC
8B[DzP
C1+X1aDzP
".%U@X)!
2;X^hb<\f}W
'x/W9aJ?BBZHxy
1M\IwK1n%%y=
XF'L0r]XxO
%oe[~]XxO
MlTnJw/Q]XxO
|xw]XxO
oYv]XxO
M/&8]]XxO
++A<]XxO
- ;1[]XxO
Zu{]XxO
(#MFvM
!0nU=ky
 TPc 2
*YMY]G
;GA3XH}y"ztT3
nM)G"w
7ZA+ExQ+
%%H'mq
y:S=P-/:O`{MiMVXwj
|)dq=LK
<?xml version='1.0' encoding='UTF-8' standalone='yes'?>
<assembly xmlns='urn:schemas-microsoft-com:asm.v1' manifestVersion='1.0'>
  <trustInfo xmlns="urn:schemas-microsoft-com:asm.v3">
    <security>
      <requestedPrivileges>
        <requestedExecutionLevel level='asInvoker' uiAccess='false' />
      </requestedPrivileges>
    </security>
  </trustInfo>
  <dependency>
    <dependentAssembly>
      <assemblyIdentity type='win32' name='Microsoft.Windows.Common-Controls' version='6.0.0.0' language='*' processorArchitecture='*' publicKeyToken='6595b64144ccf1df' />
    </dependentAssembly>
  </dependency>
</assembly>
PAPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGly
XC^'`;fLlo#]XxO
=&'CeW
"$1Lh/
59Ye6u
I7"Ai9
YcQi]M 
`I]XxO
y#RjzT
h0`~1YP
FJ&l/!]XxO
l}cYO]XxO
a~u]XxO
M'#K]XxO
Mn[f|A
\~]XxO
dIN+d[
L6 Ml]XxO
w{k^Q:5
d10]XxO
waK'eNn8
.zL+I89^S
^}3i~
^KI`hi> 
 0}^-wPR_u
y0j|M.
Xo.Ba:
[d&FUhtR
t#36&|%.$
k]46]nw
a24{u<ff_
`zR4u_
/mX6T[[
--$N'.
T9Yi<N{2/}5
Tum_tb
c6nmpz/
xZ?Q\]\
0F%@b7;
P/2.ax
`%/;@S
KF?EtBDN1
|2t?4o/
#:Qvp~
*gTBhm
Y/P-s7t 
srx\$-2d
S#^dbab]
g:y1rY,1
O;6K@fuyT
6nh9):lV_
*o(e0.]Jv7A
s,@'-S"A
4G$5hvl
kES;JHAxpFvr
 2)&Ifg
|<8A'L;LwH
Uy}Iz+_(Q3Ku/
W|0J]0
|<8A'L;LTUZ0jFh}V;
Mu$W>$X9rKn
|/kHxCHv
-z}=zpV"dNX
6U9_Pp`F4Bu
'6YOvcuu
],zdt*;-By
|p of2
W;q]p~
^Eg%Rn
dR'{u0A+r:
Tfonz({
,"V>'6So
t&L#BL
#q(":d
ME$<Dg*3|Tl'd;
9_B"r)Y
fL%:[nV 3
^T:n(_N
-K:MTAr v/
UY2kbq
E5c.-Y8wN\|x
SOCv%i*
Xf?![[
FXGreI=
j>y/)D39w
RA{kajnL
$^l^[P
n"0_znG4 ERQ+s
Wjl-C.)K%
&tyF&< Tr:=
6*>lJR$`
vWBGBW
ZHDS#U5
eaMXY>
]$d\9qBv0
(o5rcY;7)T
#|&0@&38N}
:"w?L%
=dO{Bi
$a}J_7qQS
]1ru}f
},Vse*
(Z1%`1[7
t{IWhvSA
UlnlId*W:qg
rxUOp8:`f
@JI)0)e
!&3:ko
C&@!{nw&
HF.9{h
,Muq!KF
&J0sb&Jd
D!y,gxa
HzXf@B
D}` t$8
(Fo^Pa
XfZttrL=J?"q:{
)J(+l/<bIX
q.9Ur+
Roupnh
%#Glc,iyY{T
D+<893Y/
Ayv\e/#"
"3*NW>"N8
):F`8RN
):FW).l
NiOe+$
rZOLy"N8GID!
NrXoHt
)4_Ge/#|+!3e][
P"N85G
8FC$-_|
g_$H%gR
2J"(px
N>4[0UrJ1u$"
)<F;a3
rm-x~>
;M49WnTF
E4iV'E2
D,W*.!R&W-j
z1nG[uF(h 
4qH_5O(
qNmnJ8t
oI$rq0NP
tJL!L`
YfKG/K)zOh8
*[-&[ |
8#4xG[
^")LxN
C-N:on+Y=z
/kQ>{%%6F
Rh\,y3$Sq
2d53-5GBvC)y_tIW,Xm3U,rrZ'UEK4w
C?l<[&2w:
Q)J9#gWfGz
UAenfr6
^Vlb[`/2a,
D/_ts
da4"66
ghw\J$8
SW5"yu
2"0A+F)X
C-& $9
Q;jkQ?
;Jz(F&9Vp
3Z.&X 
,viXKTm 
,viXK9
U|<{Y,{|mt
p\\,J/
PJ C_4
EEwcz!V'
WlC(HExb1.98
3cegf?
j8qi9}Sma
]g)w$glIKb<3
z<Z1U1g8|
p2fB>x_p
dwwrub\_
+7!Uz/r/U
IvH'}:
_8$\`vE1]TaEF
ysc2&:VAtO
e('/$uh
-\"Q3PR&4
)I1/4+*
P<@FH9(8
i>y/[Q
!}"0}-<&iF
.xm^Lu
2l,Ao*`QW
6`#|Js
#tVHso
1:%RQ=+
UK$vqU
xAlC!8
u(-$|Fd/L
g=zDsHV
pM(YkIzYQ
h6LKu% &
AzRsl+
.10gq0Y+
vzHZ3M]
m[eqeK&,
!n2N`S
ZO}<~R@[?
D.xFAXR]E
aD/{J{Iy</_o+8co
c5'i'|[
]AHhz~
F0dJw6J[
V<-Ffs
C P?}d
70Z3awQ
(1,kP'
KcqH;[W
!F$qkxScxBjK(q,c"i
xjh#YO6vo
HW26B6'
<9Hwpc
2q!rC7
ERI7Twpq:
o5x!-JV
Eth_@0Gmu
?TPd"ee>@qlfMQ1
G2YvtpLiJ?l`F
RCAGos[P
.2E{LNFx 
r:x]x
[:e-i]s>8Q;;
9cKnd[=
+=Cx\#
{FS^4K
)PYJLv^m]M
LKS@)E
9_e(CKiNhv=,a
[,'*G9h
py&e6qcG
4HI<hV<
Jk:kxt1
3h$R?&aK|{3
v`J<o
EMl'bo
h`4U~g
:iPfmCF
rT2,Em&[~
:w-#e:
</_o+8co
eNE;Ye~
LDVoL.+/c
+[b]13Ip"+3
&{#in}/X
B[#4!0=q.
!jyHmPPo
}ngCBg&
Eduv:dH
9o#|8l
|R;R0;q4\?jwNr+
Fa$~Ke
jC4ifG
(Be3PS>jaW# 
cKW,NOf
Q5^'wO?
|Zjz+ce
^j#*E"^^Y ?i
w%=g6+yb?
i"gB72SGo"'
4_%"^jTKd2
96cm,tT
0\tp@U
b~V[\EU
"C<&U[
o-p_#>
~iLXIrX
zoE{J3
 |;xUfH
D4QZt
Vg=Y7x;
 V2P}T
EhheQ3
a`GOW
K3G[c 7;p
>-3hC?(t$3
\ttro@8d
uHI}p*[
al95f:=8=&JTE;
VU}3OUS@]"MdR
Em'}8\ 
^?dRpJ
bhKe0j7]X
5\68i
g?2f(|wk+$
5De.h^Hc]K&Rx
>b0-?V
<_.XSB=>
zD6E/C549
Ii'!NTt
8I7C4dB-`>d
R=e<cn9O'
SPsw)6
<Z0p8%\5VTj
*p9.dS)9U
788'SLJ|]/@h7?
 16Pp.
=$(S;8C^Y"%.j:*:!Mdh
mLNW?b^; wf5M~0
iYUR?!n|CH
V8?1DC*c|R,>9
z/J{%{$+(v
APP;=5
d9=B/7
Bt5A_D=
h#=D 7
$*F)^CP]-"
6YyS,E`.
vyb)X0
lg=#]
rK!06D'W1f
/6\rGI
F 6->Ho\ZL
2Q@?bL,
9&{5R]MqNfBJ
SoAc'D
MdfdE!Y
uS`yN})
tYlWwQ
)1_18-xT
i7x9SX
ML.PShT
S6!C<T~TSkh
*8nh'dyis
-R}L,9HCo(l/
V2L\4:6
.{RteN&!Uv
!(kHN}q
2^$mqG-uwh
/AW^Ce~wq}
HeHa/(
~lYD^?b~Ck,!pt
Wn|8x;%
}9Q?r8
o}ApN
:&cvfSpGAe
wJCf1q
xge1p?&J
AosG:e
tv`#Y4
:LUvdd
2A(_IItkW$2
=r626wN
];)[u5\sk7Qq
j?51I>":"Vq,
iIB(99
tzS_p~KiD&"_
<Wbo xWw9n
zp'og=;cp\+|
5Q,C5pA[
&Hj} /:)5
;jj;{O
@/~Ga3n]
?%d+@ul+0
k+e'W)?Jkh
7YGALV
(,1{7/
c%{mv<c&<@xu
PSa,\s
Xo&!}^^
a?wui&Q
>0re M
b;~-'Ups
>x}JhO+
;o%Mh
B3"y3Cb3d0ZU
~FWUp7:
2:,`lW%
/Xn QVQ
o}eJs 
VFr85UYa#S
7j_K@kyZ@DZZnzJ
1m*iD`QI
i">@IX
CUoK92_AgR]
.\`NCfZW%ZOi)HZQc/5WL2
.n<d:b
&(BiB/Fy}
c$~Y"V
^w6P+SMs.g<(n
,=-v.e1
"=6Dg8N""X
\h5+Zr_"
cX_,m|T
|8yh5+Zr_"
=e`{y##
GY%OYz
_STUJhP
qpC)d9F#
@68TY$@
,sNxWZk
tjp:_C"
Y]GRMf$
y16~,^y
[%_E*"JCK;
,}XFcz
t$sPT4
Cu/U<v$I:
,Kd7rD
ABx#2D
DM={P??)W
T%WQP?^}
"]mn"U
OnH=El7
U"l`tC?=
KK]:T8
vng&8`(
16CSn8rX
e82{tO
|(pw}_Il
)<S#OU,WKV;D
bp0K-Si `={dF
lx*@2v
n/6Uj'H
$DCQkmBymp]5^
H}SW43
_/uSp~
i<N+4X
R;(iT$=;
U5W@a'
{CkgoUT
b,aVIY^SEa+*s
M:at<3&_1
TsSNU6Ya
gxU4Hp
vAS*V.~{4
nE6t>[}
C0;CET
VU>oR9&
FOAVVDxu
r[2P|"
^fLJh1ia
Fgj"lP
:'n"asoz
x{KSKz[=3 zX`
kwvh[S}
NG 'hS
hObC_I
.on)'f+JMN1x
a>g'uR;J/G
7%$Xb"\pKi>Ev;
9hth$1=
*Q/e,Y
JZ=|VP
gSgF^-Kpa
8K.JyT2
Y:4MB^q?^`n.Cp<`tOp
Z"*&O4RC
!*'><5
h{Fc'0
e<||S.//e
+2(]x=gP
F\\OWn
[sML=A~E$V
e*r2'\
%]N\a
]AMbk{7
yFIOQV@Rb4
9?jI1z
m=0`3a
Taz'?l
"]Gp9'|
<,@bb>I
_]yTP?H4
fHc?'s
<P|u-a
o? XWP(63r*
[eFW{sJaGi9
SD_Ek,,
M0i0Vu
41R[T
RUA!{7UwU [U_+*7
J]A#x"ki
>MZ&0uJ)y'0t,^%
8?nI08ZD~
Sb|1[d
~v:3E%A
8BGq*N!;7n
wAU@ON;8
TWq{y!)
I$3=S<_
1guJ?LI
<pjf]4
/^(xSRq
0uF7V2
$%aBi6%
{u[>(3}}{^ru
LMw}]*'t=gI
mR!Jb.m
]QxjNs
f/b8<`=
T7Gv&@QD
.Igphw
2_"|X
g6WE<5v!
u_+8gl@o
WM):_7
j1;Qeh$kNB
K!{[nB@J
;[Fa]oCt
\gy.,:
w5'$O%
DB_{W#,;
e8K*.32
Joc[J
<PpgySZc|4
.F:[@|
"7M}jZukD
'DhU%_
h N\E{
z_k6L,KHNLPJa:G\-\-7
|Vg#ZC
9<(x9P7T_.!
RC~Y@[rNd
Zi9RYqIk9FrZM
R$MSSOF
vx}AC~j
i@1.*C
eY/vCU
8JanDD|q
9WD?wCVF
+\UR3yfc
+7@n{k
_?#G7^WXOE3zL
T^+Vz5a
Be9dTjJ
x\[vMI
\0D>2I
(;~2~fsSV[s>A.TE
FY`\vq}z
R<Lei4
>s2PpZG8c
n5jDEzQP
&b7AXc=J
.-QYhh)"^n6e$
ONh^bZ
xB6d,OldZ$
s/D.OsQ]`J9.}W[
l7NLouSh:9
UG2LEoNG 
rw^l`Cd
\%R11+
DSMM'
a;FUJ[6_|{
XDG}uA
M)Z/=J9'
XUHv4f
|$)Crq8aS
KYDe)r*
RCi"HY
2)2.*f
=fWgeUq
y5\Uml
0GXP'5
vj\F_[
oY"<8qK
)R|BByR8
CsCxpM')
A[N\fp|y
2f0dl$
UmJP"0| I
\/;s+(
x7.u9*.D-NJ7fat
X)qE?bV"
j{v)hRL],
]#>Aj=i
wLKd/S@j
3we%uNB
aKUwZ#-
MBQ*l}GM:
_.oZbD|A
U548D_Pm9
cB"ac"
rA1Z*&T
=Dp.,-]}
zXRs{I:
j9\?/qksKY
kGMD1U~\
6ibum<h\Iq
8v\veI
o]N 7_n%
_(/Pi@
-V*NCJ84:IJZ
3!`X2r
Q@PLha
_RU:2[
Es{'e5
G8~;SMCWO
tY~.(qsm
p8TO3O
niU9#K/6
77mDP4~d=yXWF
]Xci|[
2zUnc;ulq8}G
/rXCt;BX
K(D^"On
[ACN<3v
+Y).5t
_id7NtpZ:9
y9F:)Y0
hA!ArP
,]sJL|
@qqM|~!D~>
%6PVP -62Y
Qr`XB!xA1>
E{BBCj
#[]ViA&?q4+
W Vy,n@){
pCm!,9
^Wo[U;.
EZMSL1
"y$}u(-6bt
|;g^[@4y{m
;p0f=p?b
c0oNiER R
KUZrYZ
.&wx>,~
\Vz)DC ;.<,
R{\@+!f"4fT
JE<nwmXvsw1a
*_6Q65l#tOD0
meQx^]_`oo&f
7!40v~"
k=:qY4
#< #o6kt4HO;\pFWcb[G
?c|YC
L7G?MJ
c!>&l1
9|_:4Pp
rij:MF#
YS9Q)A
6_5loE+x#
I&>O0*}9J
)TJ-.:
P^7=u'5
YL%u3O(
3Q:D}h+sT`<(
L/b4Ig%
Z 6a.]Sq{yZe`
`V^{SL4
3KStg;J
xSB*%El$
oZ{-OGSAb=>F4TlZLf3
KnfnT-/
kz&od$qCvJt_j.eA
gI|z,\
l?d(8%O
%'yl# Z
%.!{7UwU [U2
aKt\v}n6f~+
<pF"y`+
c`T{:99>mi
Y-#Tzr
iuqyfkf;mG"PER"
{T##6T#
|AWDYJd|L:TX9IP
,N3au(#:E:
NWb]M0!e
|th#Po1
cnB9AO^G],d4t+D 
~/\B.9!=?t
`Or#Bi
!FyY8{
`&e|E"
*JVC\a
&(BiB/Fy}
c$~Y"V
^w6P+SMs.g<(n
,=-v.e1
"=6Dg8N""X
\h5+Zr_"
cX_,m|T
|8yh5+Zr_"
=e`{y##
GY%OYz
_STUJhP
Ckh@=/
,sNxWZk
w>)btv<Lgg
[u5vGf$
y16~,^y
[%_E*"J
,}XFcz
t$sPT4
r&QwXx
O_#1]c?
 Id|o@
Cu/U<vGt2
,Kd7rD
ABx#2D
P~7mn"U
OnH=El7
U"l`tC?=
KK]:T8
vng&8`(
16CSn8rX
e82{tO
u]]##MkN=
Pxtp6A_
jO]V0}S
Zoz=z
s'KPsH
3hG<``v
xT{va^(
jD&1[jF%
rzM-)B
*qagk4
r&g84aj
i%@N<tF~
}x_XqQt
H}hrfH}
Dg%w: u&
\I>FH}sV8LP
F25K-\2
RY*vm:&x
:skpsRH7
>|Rl+QWN:on+
JEtDTSRSXO
Cs\R839
_H/P@
3!&|R=
8IP('7=
7[ne[0"/
?nty*Qxsio]^LW
-NL-f8 z
e(RF{o
PfJ'gWz:8W,!
mt.`fa
l_yy_<
05fi}TG
{rem[m
roRR<%_}D)b
]%_:m?
|-#6-x
K)EIc${\s
oa-"}X
d$RGfF
pCg~vn
{nTb;R{
S5EPLWh$
`J:poJD
j[])S0>??
W%uhm_@U:O
{ D^F&hv[
)m7z:e[#;u[?o3
.sX6@B<
V7Nm[WC'N
-%tQ6
9xstu_'E,
tX;-Ce>\.J
LpiV@nWg@
}FaonM4>
+Wh{DdMO{{AExAQ
)*+% d
I^d:W"
0WfMuf8UX"|M[
m>k5x:
')jdFJ[&
AR@-A*
^U<+Y%MJik|]
YV9^HG
Vt5.[5*]QFT7%}
cFQ=f+
L1MO`|/p
$l][r$=
"| mfK<TN
w9c2h*4m
7U |5k2<-dBi9
EJ!$]9?HU
*9E/B
Y`+JWX[
u7qgR|
,vT5wRS
Pph&d5
1GzRU]NQ
k6dG4X
@N~>:6e
YHV-D!
'acZW+g
+)-B2^d*|g3V6
_g!;SCGO-
^XBA4D
cg2wjrX
M-9|W0utr
L<q(o,
;,B"g5
9HY`^mY@]$b(GZ`
!0v1m'?[xFB
q0"V8[9\k"
aq:SZB
 K"7V-:b
{`)T\~9sXQGwY% 
}mD/O?0
=f{L4TO!j
(\k#9)j:!P
x7m*nF.S0WtKK/W^Y
C:a0:7&
s?Pq&f
yo!n6Y1W+tZ
q=;^`g
mbR5NJ
Py;,0R+UN
$!W&1)*7>|3
p-yvzf\3
JjGk^;<
S$b@/?(?=
4I3K?fO
">LEW`?
[4x{cq
vZWDMBw
)xqW[L\
*gl>8D
W8JMZ[i`
R&}ya5Ap'
ymN,E~jz/
aS)j$:~i6G
kod.;F
:L>21,
%r24*Xfzz`FT4pl
\z=DplL!@
eZIj-
XD|/AD\;H
<cLA]Va$N
{^.!u*!V
9/Jkmy
e)J_ N>y?OGl4RY<1
ci_NhkH#qG
yi(#b7uO
(>$b*.V
FiiwZ#F
g:.gU3fZ;]R
AunQ=[~(n(
]@N}oO
j[tn!a
8IDbJi
vN'V)^
crLF'
nIO61>*(Cu:
|y-s;XEc
jl,W[>
%V,g<A
d)Q4|`U<OXzR@
nIO61>*(Cu:
Z~uOWw'=hfP16
"I)G/:-5,D(
ne?w g
W'97nOPU
-X9L)]0|=
cBICy%
;)x%ss+
Q;=W/Xxc<LB
,wwvrE}<
~#,;MR
Om@H_)P
!}NUd/_v='
t[#/8[F_~64
?v^bSh[
HSJqjCm!,
RYP2%p
Q4/"qvK|f
H3b/ E
"kb ]|X
7$ql:H{kgna
^l)70`
*>E8.-
jpt>qd"A$W~
:S#dD{
fk><f$]/hC9kjF3
'"3'=o0
/36Y=o
0t2jm~sL+8
K341^s8Y3tb
"N9i`aKwqLl
'!9dn7OX~*]XxO
G#_6&a
1Z^w[Nse;%$Bh
Q2l52[B_u_8NR
I/$UI!
;5S|!f`
fL!oFw
s,QH.]XxO
M,uRo\P
np4S&cE/K5oG9f\0
c1k{1s|%nN
TVBJ;II
ZZ7.35+9~upC4
} ^DO,
b`^Aj1
w&#`;
q2<FL<
301X\vXWm9
Yd*fV+z
\gJqhGwIOY
,Amvky
ClwuT/
^t4w>A
hfMc]RE
}G?V{?
"EGcJBnk
<&5)NK
 ^V&$`
1]E[>+N`#
Tq}3!4b-eaC
a[{:aN
sLe4gN2v
c=.|%ftb@P
j'k1tD-Vg
SLjWbQ
&DEVSfQn\mA
t.\fh5vx
yjlqwV>NJ
fvD0vT'
;No5t_Wu^
<7o&L}sM1t
}q%32O
R75`~N
h$fXw3]XxO
MX3X#bO
`wZ61k
,`wZ6P@{[]$`wZ6(;C.
5#ASJ
W{pgFF
$f~p}c4
l`m[slRSu
(Yt<|!
LN98A52kOYw7
S("`YpT3'
M8A52n/
{h9k{9705
!r(&9^[W
<8A52}5u&
{h9k{9705
!r(&9^[WV
,M6DVF
'8'?hE
{h9k{9705
!r(&9^[Wy
M*g+u"
%*PGZ'/-:
x>}5u&
;?AeN+
P#U~0?5
VoH18#V
MG)mJ)
{h9k{9705
!r(&9^[W
8>dEF,oAQ1ih;
MG)mJE
e+8M2;
|b:E>cH
{h9k{9705
!r(&9^[Wop 
F#Fa4>
{h9k{9705
!r(&9^[W 
MG)mJn/2
;?Aek&%
O02[V9EjBFV>
viO^e8
O02T3'
MP;6t::W_@q;
a^sRAVm
9/h_L4DS%{p",i'H
An|w/4:
LEP;6t:kOY
{h9k{9705
!r(&9^[W 
>s3va5]L>d;!zFEf
LEP;6t:p
;odyMrT)
9/h_L4DS%{p",i'H
An|w/4:
b\E&Lf
/D)c;
{{RZPD
fT5$5
CNj0Pt_
LEP;6t:)
au~=E)xTQ1ih;
:==r2f
}z?1Mu b9
'x\kY9i_e`FaYf
f-i_el\t?
gu#$$Em|
TkD[nX
&rgyc"
Uc~-GKDf#]XxO
IMp@MBgZ
XcrQZg6{nq
qW^+^[
86@)wkHvr
`yzwu ~
rX6d)s
E{6AEE84Z+Y3
cj8I5N6
)!um6+
e?aVn8t
3:EeDi
VP/AU?;
.gBf~:DsE7
yst=s~bg
'C>-S
 vYnvFs{IOv3|[
!|DPga@?9\
^oC3 -\w6=
_O.*CIY`\s\1}(
0%4?zq&rhR
h'WTIwq"a
U`;,&L&i"Am
%?>rhmPn%:Y]7L3
8uQs4bxMeJ`1n"}k}~
r~r$Pn*
A#c*.#7
pKN@fp<O}
Pnvyx3
>jSvs&kj
3|nSTb
f#wexiT
u(}9YZ
e,L#{M
H@M]t)
39em,GkC@
()$0o(
?B4uBl6WEO
=b'A`+
TjT,@g
Bpx!04
9+c9nu
`d0xaMCo
7,da;M-5
0S7oJayAoTU
q$Wm2>t&
IrLb~0(\~F
g+"${:
6PS}DOu]
744<vs
9F,CLOB31+jr+dA
g3PIr)TS.
CNk\I'T{r
5u/p1Z
srp0r4:= 6UW=eF`6&"
MVMPNs?gB
^7_}87|
#c:*8&]:9
I7}VzlC
~8jy-G\'r<YI
KN?eg ])A-1
SjLs59F$
x||XJ%
x,4p{e
_1\,[
`0.s.M
"vk xwn&?
^DT*n>d*ty
4$2+GFv{c_
zX[o+G
D7$[,0
6Cuqoj
]E[>+
(&LJ|Cr
+m*&Y$
B41_:B
gTLS{~o
RGs"RJyh
Fj]b_/
"'nLD9
UY6q0f|h
-qfWl4~Dv
tStGkiWK}
':,$%"
szoGu<
-FxnMM
|.XYZ3:z
@*B-xNEr>
3g&o'=.
?G-'N;FI=A_
>@6_u4JP~
RlbFwK
.Ul07L>
Jp$p-*,>Y
i_4m7|<Y yDwob(b
"%-sP\lr
?:>n(U"
\W!W-d
`>.;wBvm
@RhIp}~
mV30!-
d26^Z!Hu
@b5M#!1~LlCbs}~
mV3~%1yXT.
*Z2y#&0
/=Yvf!W-d
5_KI4JP~0g
Qg?\_F[iM$
5i@ m,o|e|+
&j2>9z
En 7/u*a&+uC9(0
55/qvq
=1$Sk>G[
|&XW7
og\8ONn
j#Z7ClK
2C[V?4
Jk_.j=
&@//&Kv
U8M0-2C
2hUP5]\J2.
D'0c{]o
@b\x*cI{]\J2.
l$\~Bj
;&8Z}Q
3+:](2R
g]E[>++bVO
8hmKQ,Hoe7h
j_B\A|4AL&
bhyNX(
3EVL*k[Z]
.fhQ!W-d
PI4`\mJa6
D@]`WI
X.?_?f
{C1Qmi<UA
|a+d_^)RQK
Bv!,85
_'%x9||XF
RL"X6N
$,$t}{
@1f}/MWg
]`WI?V
&zb"Yh!]
2Z; |x
(&uGFsUP
]`WIa=yr
=A3ESWhs
^e?m%K
,t!(m
#%]fS7
$L[Nwr 
kx?@,(
@2[EnAU
#Z&Du#Z1"lh
QgO:QI_
QgO<6BXCJI+&
[ yI+&
)D'@>W0Lx]ppy).
uh(gwNx@b7.<21'0
s>+-:eW
-S=_J"Z
YN>dn,
$7$`ZDbEG8
jbDxYhqVs|!W-d
|{sE|*
-S]XxO
0uK7[0uK7[0uK7[J
8 540uK7[6_
0uK7[j
0uK7[0uK7[0uK7[T
Uoe0uK7[
JGci^3r
0uK7[S
;t>;t>;t>;t>;t>0uK7[qf
=F0uK7[0uK7[0uK7[0uK7[0uK7[0uK7[0uK7[sGo
;t>;t>;t>;t>;t>;t>
;t>.T0zvoyl
MPi]HO)2.,z.F)Hd}
M(sdEf
 XKO`1r<
&W IGisx
~R`ZvX2
b8/s.voyl
MPi]HO)2.,z.F)Hd}
M(sdEf
 XKO`1r<
>1rIvoyl
MPi]HO)2.,z.F)Hd}
M(sdEf
 XKO`1r<
&W IGisx
~R`ZvX2
MPi]HO)2.,z.F)Hd}
M(sdEf
 XKO`1r<
cdg.P$>jwDm
 DY )7
+0yRp+[
*ne%;7\BvQ
?o`V^ 
eU5q\X
p1S(V#)Mw
;Ac[b4V)<G{fu
?1~2TFV6v"!M%w1
}6i@FUQA>?3gTlu_ <
hN{fX~
U{$FWM2H 
CKF1N+dp'e
{$FWM2H 
CKF1Ni$
CKF1Ni$
}SJ()f=
D@{/fk
FvA5J
7hB8Mb|
"1=!?3EI_K~
l[[US"C
d+-g4
d+-gI?qTQ0[R?ZM9i
]gOC2yU#
$q'(J6
Bo^a#N"
7cMMfcd
7cMMfc
}S/m;INd
W4pb,'
V)^j3)
*~2[8M6
h:P&$p4F@
ynwRRk%
CKF1Nw@
xQama{3}"
wdzjfn
tNx`D_/a*H
MtG]ODn
qf9?:Q]W=0
z/KKfc~
b{R3]XxO
MRz6#'OJh
 =po]XxO
_J}z/K]XxO
wsc]XxO
MVER\c]
/*[x4z0yT
f6pyax
-Y+WZwr
-Y+W ?
@""yRaO!x
-Y+Wex
[3]XxO
'Fz`(9Z~#(2#;]XxO
k9t)/E
G#_6&a
1Z^w[Nse;%$Bh
Q2l52[B_u_8NR
I/$UI!
;5S|!f`
fL!oFw
s,QH.}
q9Cz"<
_Jky.q''
9wz4J
X!0)%Z[
dVx+&(
LZ#9:7H_`Bm
M}O87xU
a"7d1z
}h__"fz
*Oh!K'
;`i@Eg]ml
,\X_QJ
P&CY%OR
d2S?_k3
B&+^\cbT
QDItV3y^VN
(W;.}*b~
0S.50AN`%jW=F8Vuv-$t
TLLL)k~=00C
y25<Qt
0\9(bB
zWwJ;IIrciEnqeZ
/3AI!]d$
s:h%FdL8
b&.^gV+
[_(Zv{^mz^8\
rmP<T+
|Qj2er#
 2V4BzmKW[2V4Bzm
k~9$)`?
Oj:wX-5=
n9s[l4e
7W]XxO
MPf,4!T(y!T(y
HO<7"]XxO
MPf,4!T(y!T(y
CpS(GM*GS)f
@G~/c#u/
y&w[8R
<7U0uo]XxO
7U0uo]XxO
8I($f>
XdCXZ:
[y;qoC.:ZQB+Txh}J
TD$4r +
?GGZo>Jq
\}4!SNA
hVMQpZR
e1(tp4
(Z`t*\1k
HySOpk.
c7bQOry
S|mVlo=
DR`Ou7
MztQ|]XxO
MztQ|]XxO
MztQ|]XxO
MztQ|]XxO
MztQ|]XxO
M5pq~Yrc4A]XxO
MKfc~Kfc~]XxO
MKfc~Kfc~]XxO
MKfc~Kfc~Kfc~]XxO
MKfc~]XxO
MKfc~Kfc~Kfc~]XxO
MKfc~Kfc~Kfc~]XxO
cy%l]XxO
_rs]XxO
8Z/Z:]XxO
WW]XxO
Pymn2|'
M[C`}U
2+]XxO
^5.N:,~
W3Y:3Z
]nqmdg
lfr4"?xW^
f=0I+2o%
*>xSWL]
ad~U(TW$
`b&B5~+f@@
43{n<mCW
MfDV|ef
/(sAHdyNV
b#L0UP5r~\UePzY@
Vc+[Ro53
%qe10.^S
*xMGce
GzgHfx}
c#dq.r{
fG$#@Y
u]y[1Ego
>f9]XxO
.'*Y]XxO
Y9~O+cuC]XxO
Y9~Orh]XxO
Y9~O"E|
fW]XxO
Y9~O!1]XxO
Q5]XxO
$d]XxO
>}]XxO
DF4JL7T
3?=+{A$VWJT
L\1:~^
0\B28xT#M,KOE
,[#qp&``
=Y9Os6
KcEMP"
8v;*N
!zFEcEMP"
";qfN]=`1
Td}rsmj82`{C
|!dK^
m9ismH
F1pC6]
ne4?"~XoV
L/i@ UI
\B]XxO
ED9I$/~$
Mh-F"KI1
2WY/~$
:\7{LS
2WY/~$
iaXyxD1]n@Vfn
Mhl@89<xY
1`)T>'E
eQ)]XxO
hC$2NZ0rfXaH
{[QWL!S2
_qK3L]XxO
J\s>Ph,<
6=2@dc#
i_qK3L]XxO
Gl672R
W]M/~$
KDhcj5
qF\`d,<
Mhl@89<xYZ
;zmFN]}^FPH.DUmoR}
('We*}o
2WY/~$
H_I!L
Z3~M\Z
>me`?4m>#eL}#T4W
fswWVfn
hC$2NZ0rfXR
\OYcVl})XEx
KE?[Y'
{6n&Z;:B
[;.B2W,
;sa7DGy&9
eQ)]XxO
<d2&}Uj
kj6?dXb/S
~SH:h_
#rhr:C9c
oA!}u-N
bxKX^/
#rhr:;.B2'^I^W
pCx}m0jfef}s
)SwCEP#a
#?4m>;.B2z7ERxu1EP
T:3L|2
|d&#y
.ipBmU
Y+SK?4m>?4m>$j~[
{N7m|T_
}*0hBnT!f [jeL~0
TjZ_Nbn_;=
DHVyHXD%
fAP[]XxO
u:;:A}
kj6[2>
$D(/.^:9
-R6wo
Rme`me`>m
!i@b~^Yij3@
724N)8x
]^G^NsG:Hy
@&Y^8{3g
sC/.^:
e\TW;s
1aIds#\
y*V=D/c9=
,EJ[td@
8@U>ZTbo}mNC. 
R/.^:TSC
v;Y~~X?%5
}0Wim:5
qF\`d5[
pD||>A
!D27#j~V
Kb(f0Q3
6+SwCEP#
}0W=;RT8
.,TGrgO
HzWk-j Mf
HLd NS
0Q3],k)pChf
{P4u+O>*
S/2RU6La
&d+.W0`['
/.^:W0VQ
Oh>'! 
g&>t0Q3_x
R0@7]XxO
~^Gkt
HA#w:4
9/.^:|
<&>tvW6jJXx4R}
qhS}-B2NFC
pa["}g
mmF0w_k,S5HKA/
0(b}(*
EC[)D||>A
6%-R@W6
7%]XxO
KR8/.^:F
JzbmJ8;=
-r-{TR
yr\)lv-9NlMza
Y/(?Kb(fr#<;h
{2&a:g(]XxO
E\=9['
u63+ZXUsTQ.
/.^:sB,0Q+}XE
Qz$dX>1/2p:}O&8
^Gko-Q
f,b1?Y
f@O)M.i3
@<K5+jkV8M
l~(_{=p%#
KZ2dq8_
u#yIPr-
7Q?4S@~`8
EKl?oxyhc-`8
AU;aCH
>G.*z0(RgR.a?
<&>t9*mr
"h-\2y%@6]XxO
{{jP|EvV
gh(WQp
)Z.1 anYS$
]Q?&}LP`a
;z&|Wt}8o6?y8
g=]XxO
NDJ@ME
?>{jP||
l4Z-U-/% vg:#27
f^y:Wa
ha3~0W'$|, :v`h3fR
'N46kMC
~=|]XxO
Xga{-|
z[6J1e
)%U`go(2bo
 gBg-Y=
Mipj9
G4.{AH;i.nVe
%#x_cH?j
9fGNtEJX&3sk
WJ2p:}mNT
p})dk>7[3:
Y|{co@
Vn@z W
7iK5+jkV8M
1"]VvuIdA<y"
xh]XxO
HGVL=n
#rhr:o
AU;aCH
UREiC@r%
]wl1,p
1k]XxO
MbaQ{}pN`jTS
}^e=1B37I
)Z.1 anYS$f
z5_8@r%5
wgD.fj>]XxO
MQM+!
k9V3MS
 `79=<T/b]
 M01a7DGyB
f^y.RL
4N{ anYS$
z?UXgk9V0Uh\^X]?pD1
;/t;0fU
*%N}A1Pc]0~_]*U&!)%9fGNtEJX&3sk
Ownz}XE
.[]XxO
+)w0s4
p})Qnf
Vn@z W
33#jl6`]XxO
/qcL`6
m6Gt]XxO
MgN/)>
mfo37Il
JySuOC
fX]XxO
MYZ]-4tY*k9V[]
|#HKMPb(=7y?*
k9VSgLX
{'"uEfEB@
L>[UDg
% 9]XxO
2-pA<x"7% 
b:NfT:NfT}
2yiC\`siC\`sI\
6/eboCH8
c=:H=bI
xX87!%)z
y-bkEpJ
7Valc~]XxO
_qK3L]XxO
_qK3L]XxO
=^}|1_&N;
x. S+U\
^+KT'V
*k])yf/~$
 UX:?/^u
;z<N(H
}3$]XxO
Mhl@;aM
Ff4#2|:!VrOWy
UH3Cm^
\by7c&e
`4M4#2{
7WMValc~]XxO
?@s^Zfp[e
k^HVOye0"U
2KudG.^L@
Valc~]XxO
3_yomc
D~m>Ey,i
wAWWF4
\,^e9R%oz
qa,bB2C+y/v/4g,1M
!nQ!s|kx
O9<GULa
}e))PI$LD;
]}%DT&
''fflGz"
1d! {w
.S5|uNv
hl@46OG
f%3zb7S).I
yM.zf_Et
sj?/y;+|T1~I
zcC6N2G
GD;/df9oMe
J_Czb{
v{p)vQ6
+^?s%r
^iCeeIV<foL
t$g]qNR
p[gZk>+r,`(
(Xsl{5
y["q|w0v
fSWA)`j
7OTR+s
RE`Xz$fC=
zjZ]XxO
rpP$$Il$`t
)y"mmDm
aVIl}(_
cJexp<dY
hp3]XxO
2p:}ZyJ
LGg-Y=
y^g=u|X
#ArHN:@
Ui>0'tT58I+
~u_4A Xg|
y!.Qgre1
P}K.ngI
k oz+Ia
ue9bvD
k't%r%WS
yI2#Z>:
]3LJ/3
7A:LQKNkT<rhOE*a
K1sa17
My#El,} /=Q^
\ anYS$
'N4L;vcsb
&BTtj]qN
&4t]XxO
A9Y$g}
l4i^(\"T
XKV\_KK_W&
m(pD?50y(3GDs
(|wm>R'*k QAMF7G&O\
'+N0tq
",3uuO
pm}zZiZ1
S\_]-"
~=V+TK]XxO
zcm6&<56V
i3MVe,0/
j @r%"
\(\<F]XxO
yG)'\vG
ainlkm
Y."&7h4
qI+k/y1)
Us]-*LXc
41UodZG,
:@Q&1D7
M>*wQA[
l8p}K
<6jwGv1
:fpekF%{<
+51lp)
, scLi#P_xf
:a$M4zL;{
8r@Ue2
U3_]XxO
P,|.It(
l8p.aPy@1Y
M6d7f(]
[Lm%m:]XxO
h[2bzlyM,]XxO
y;;0&_
y;;0&_
y;;0&_
y;;0&_
E'coKR]dP
N.BO.t
%"g2Lg?Ok:
y;;0&_
y;;0&_
y;;0&_
y;;0&_
y;;0&_
YQ;f]XxO
hy]XxO
f6)/mVv
x4DojSOYp|eD^v#ws
SA2KL'.
^>Nnn+z7ERxj
LGV>`NgwValc~]XxO
 y7NIz'zi
G$jqs0AAM,c 
3+[?4m>#eL}#x
_qK3L]XxO
Mhl@UBo4r
;.B2#eL}#Mn++
!zd/~$
O~dGUg
Y?W5K
0vva:: D
E3L,.jY
~mqU]]f[>
hle^R/X
SWe*}o
q'0A])
kC2JQ}
daO1B$^
2}$=rJ
{lCE17UW
SOkxru
FqW#(i9
b%]XxO
@E K-}S$]%
f!3v2yv>
M".p&#
5eqesZCnZi
69y!0hD
kD.00&wcU
YWQ[pS
{BbE"-}m>bXw7(,
8#.uvr{
|9(>yJ)Jo>
Kcj4C15R.Ibr
U7|~yu`},F
uu7b]XxO
~RS[oYVOEBJQ.8
8GFO,Z6(
7Q|V$|U#
/)]XxO
W"-#&
J~EKU.5
[%4X]XxO
tQ]XxO
#5<C]XxO
MjQ'E+\
=w]XxO
M2G*]XxO
LS`lmvZ+
JB/AZ.H
r"#]XxO
M_qK3L]XxO
_qK3L]XxO
&hy"~S/~$
&*x60g{"j
bpCV]XxO
2%Y9t'q
8e!'4.
UL>jlr;
j5`nhU]
HC@VW
KqJn?}d@IS*YI&!X#:W
pcG_E-]XxO
MDtJ?f&NDnCBt
OQZ<y^N/d]]XxO
}_In]XxO
HvR;Pyv}5
UAiQILx@
"SJ-:7&.#
_|7&H_^:r?(K
CquVz%r
Yev9Hc
{v>Rzu
r=,:tm
w~y+15y(qf
{c]bxbf
Xdg|#J.<
YKbYxY
lQydX>+
bzQGqT
Z/D-q}\.G"
r882gE
D,&;yP}
xhC3_+
 D)+dbb{(
E?5gy|=$xY
7FAI%C
Z"qoJ<K
6]cdct
)o_{hKHT
s+0CmTe9hzd
6=qA`I
3t9Wg&
kcOr[\
ByV2\Qq.
Go9}q%E!H'S
Ng$TI]k
?M='f<;.6/
'YHQG3
sY+5}!
0,Jx'?
Lud(qe<h
';.dV{
ED`t2?_>L
kz:WB_?H[q
t`^,3F`
F=LeOy
vry8$j
6Z@#"$
N0fq\t$F@jx
'<0URFfQ
xX>J:j^z
<^!i<1Dw
v-TN<
rFT}\0
BL(/5e*O;nu
c1m/Fkm?
o/@5[ kx)/
<5.?Ly
[wAPhC`n$
p:M4l07qF>
uG0{__3Y
_n8?QNbQ S0
:V+1M%C}
$)OU]Z'SDkBa9x
V1PwT x
,KnU(\9
.h5Xend9=
RSn'j(
qL7bpm}
#F/p+N
;~Kyqgp@um
`\V63&
(K:A!+I
o~+s=e5*
H_Zivg 
4eSb$sp,
p(2$%
Z8O\|#i
K.<]yv
psC3v+@*Ns
]~T`cv?(
Z`I\J6
UR )TjTb
Z2c^~m~
{5sA}2fY+Xjrvd'cu
}!J]f:
Sumpu:26;]
>U4V\[
=Y,O@O
:KeP" 
nD|$<fIg[zq
3m:dS'|\L5
T(H(e*O;nu
Rvl8)"_
|5]XxO
M.cd[)
2Y')R-
s1L5a\$,)t
Ari48WRCt#A+A
v3ScNh
w40"`Z<n}
NwHCRoiKC^
-V@}LhJ<PizRx
r~=1OBbQ)d.d&
Yd;/W*'i=
Bs_=%p
 HQmDWX
l=}U8iUZak*b/_.W+RW
TSiY(l
l$o$3;
k>_Pr^
2H"\<|
?GpIOz
)pqkuV1
)>!d;a
a^Y~_x4
wvLG;?G
ya<2;`s1S
c+}P0t
9&7u.azJ]R
60R!U'
W?tFstX
t>^_9Qu<Toi
L=eHzX]^A
+u<Toi
L=eHzX].
Y`E\,$z
wkX^<=k?
%R<4m0oS(Q
sT)l,q
.ciURWt
*h<5E=n"q
0;5p8
Z0q/4JSA1^
 UH?<:
c4p9//
bPg?;9KM1^
s1?LW6
^nOD`jL(Cz~Yn"
~+'/6
E~GDuD
L^Txqh-4dt[
*WnqFu
>B1~yI
82GrJW
$M?M3D1,>Z+>2
lED6oO
cMM!yU}1RR
n'4c$vB/
Y*k"<9v(x)_)W
&DLH_W
|8:z)w"$Lf
_k 9Lz_f.Q~ZE
g,,cFpx
{575]"T
1/.%$>PH
9AFu:&IC@e
8U,rLN;,cuD
C_<=^<
0<~hy<ESuoHi]
2&Ry'b/
,)[@hlL
_eR<"5
nXUv1.AO
qN]e)D
<;9TJT!|h
jrOn=x0{
 Qr%6m'
:AUwPSB@p!
-3rv#s#eT
Y`E1`7&Qsd^~FXUy-
f_z^{I'eLl%3[=S
`[5akKJy(
Nui16n9
qtO)7J)
(\E`'w"
!-c=fHc4p9
>5_}c2
14D0+|v
9XBP[<B&
yqoDAoI
b[JBjtK/
,"`k\GFh
vSO^e&X
uh4T,!O*_L(S,
j,UaDL[
-Uesrr
uGT i~J6+
J]-s@8Pt^}ci
:e0}6l
#<_--V@}Lb1<2#
hX@cP%C
,J$i*A
pr8l8^
NLYLM.
+e!+HgPa
raT:G
#GBT8;
EF}\1)
a)h4~Z yk0q/f?_o>cm
-hO16/b
)>!d;a
$pn.x(7
hX0hr^
w4r( X
H!j</;
<0Ec1\vrQ
]*b+*J
x}"'cX
sa#<D_5
ieg@%4
H^^[k=#?w)
DS_MK=NV
5,M.'r
jY0t?f+R
jz`G"bs%DQ
-V@}LhJ<PizRx
k0~rN\<
Kp|?YtFr5V,
IE+t88|0BPiz
PgA'K5\
`{NnI{B~N
,~&q,%@
YPkGi9
[ELTRCz
y|ZA|5=
RWXc68rX_
][c%SF|
bb^J>qu[FR$kq
lED6oO
cMM!yU{gQ
=k8#GjR
8{fHLd{v@
N&t;(k
&C//f.(
9mokZN,
m[){u?[
oCa<(_&
_O/+fL
R,: mKx
kxIk_9
2nkg&uja
*&em,+"7
K:]7ZS:7
XE%Q"FC6P]v5"
F?Bif{.
[`ieHlNf
jjjjjj
"MAIN_EXE"
VS_VERSION_INFO
StringFileInfo
080904b0
Comments
https://www.autoitscript.com/site/autoit/
CompanyName
AutoIt Team
FileDescription
AutoIt3Help viewer
FileVersion
1.0.0.8
InternalName
AutoIt3Help
LegalCopyright
2005-2015 J-Paul Mesnage & AutoIt Team
OriginalFilename
AutoIt3Help.exe
ProductName
AutoIt3Help
ProductVersion
1.0.0.8
VarFileInfo
Translation

Hosts

IP
114.114.114.114
8.8.8.8

DNS

Name	Response	Post-Analysis Lookup
dns.msftncsi.com	A 131.107.255.255	131.107.255.255
dns.msftncsi.com	AAAA fd3e:4f5a:5b81::1	131.107.255.255

TCP

No TCP connections recorded.

UDP

Source	Source Port	Destination	Destination Port
192.168.56.101	53179	224.0.0.252	5355
192.168.56.101	49642	224.0.0.252	5355
192.168.56.101	137	192.168.56.255	137
192.168.56.101	61714	114.114.114.114	53
192.168.56.101	61714	8.8.8.8	53
192.168.56.101	56933	8.8.8.8	53
192.168.56.101	138	192.168.56.255	138

HTTP & HTTPS Requests

No HTTP requests performed.

ICMP traffic

No ICMP traffic performed.

IRC traffic

No IRC requests performed.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

Snort Alerts

No Snort Alerts

Sorry! No dropped files.

Sorry! No dropped buffers.

ALYac	Win32.Backdoor.Agent.A
APEX	Malicious
AVG	Win32:Agent-ADAU [Trj]
Acronis	suspicious
Ad-Aware	Win32.Backdoor.Agent.A
AhnLab-V3	Worm/Win32.Burn.R34863
Alibaba	Worm:Win32/Botgor.bb8e5f20
Antiy-AVL	Worm/Win32.Burn
Arcabit	Win32.Backdoor.Agent.A
Avast	Win32:Agent-ADAU [Trj]
Avira	BDS/Agent.qva
BitDefender	Win32.Backdoor.Agent.A
BitDefenderTheta	AI:FileInfector.A44F3C4816
Bkav	W32.AIDetectVM.malware
CMC	Worm.Win32.Burn!O
ClamAV	Win.Trojan.Agent-103288
Comodo	Backdoor.Win32.Agent.~APQ@4ud5h
CrowdStrike	win/malicious_confidence_100% (W)
Cybereason	malicious.a89654
Cylance	Unsafe
Cyren	W32/Backdoor.UQUT-0945
DrWeb	BackDoor.Siggen.46270
ESET-NOD32	Win32/Agent.QVA
Emsisoft	Win32.Backdoor.Agent.A (B)
Endgame	malicious (high confidence)
F-Prot	W32/Backdoor2.CPJV
F-Secure	Backdoor.BDS/Agent.qva
FireEye	Generic.mg.26220dca89654606
Fortinet	W32/Botgor.A
GData	Win32.Backdoor.Agent.A
Ikarus	BehavesLike.Win32.ProcessHijack
Invincea	heuristic
Jiangmin	Backdoor/Agent.bfic
K7AntiVirus	Trojan ( 000569271 )
K7GW	Trojan ( 000569271 )
Kaspersky	Worm.Win32.Burn.b
MAX	malware (ai score=85)
Malwarebytes	Backdoor.Agent
McAfee	BackDoor-DSE.b
McAfee-GW-Edition	BehavesLike.Win32.Generic.dc
MicroWorld-eScan	Win32.Backdoor.Agent.A
Microsoft	Backdoor:Win32/Botgor.B
NANO-Antivirus	Trojan.Win32.Burn.wdwvx
Paloalto	generic.ml
Panda	W32/BotNet.K
Qihoo-360	Win32/Worm.54a
Rising	Backdoor.Botgor!1.BB3F (CLOUD)
Sangfor	Malware
SentinelOne	DFI - Malicious PE
Sophos	Troj/Bckdr-QVW

host	114.114.114.114
host	8.8.8.8