3.3
中危

0b4ec52bba9dc734611d6d8097046eeb1d2a03753d77d2ccf2b684f1b9c1279a

0b4ec52bba9dc734611d6d8097046eeb1d2a03753d77d2ccf2b684f1b9c1279a.exe

分析耗时

133s

最近分析

373天前

文件大小

244.5KB
静态报毒 动态报毒 CVE FAMILY METATYPE PLATFORM TYPE UNKNOWN WIN32 TROJAN RANSOM GANDCRAB
鹰眼引擎
DACN 0.14
FACILE 1.00
IMCLNet 0.76
MFGraph 0.00
静态判定
反病毒引擎
查杀引擎 查杀结果 查杀时间 查杀版本
Alibaba None 20190527 0.3.0.5
Avast Win32:Malware-gen 20200607 18.4.3895.0
Baidu None 20190318 1.0.0.2
CrowdStrike win/malicious_confidence_100% (D) 20190702 1.0
Kingsoft None 20200607 2013.8.14.323
McAfee Trojan-FPOH!296F457947CA 20200607 6.0.6.653
Tencent Trojan.Win32.Gandcrab.j 20200607 1.0.0.1
静态指标
查询计算机名称 (1 个事件)
Time & API Arguments Status Return Repeated
1727545339.5
GetComputerNameW
computer_name: TU-PC
success 1 0
检查进程是否被调试器调试 (1 个事件)
Time & API Arguments Status Return Repeated
1727545335.718
IsDebuggerPresent
failed 0 0
使用Windows API生成加密密钥 (3 个事件)
Time & API Arguments Status Return Repeated
1727545339.484
CryptGenKey
provider_handle: 0x00d37578
algorithm_identifier: 0x0000a400 (CALG_RSA_KEYX)
flags: 134217729
crypto_handle: 0x00d3de30
success 1 0
1727545339.484
CryptExportKey
crypto_handle: 0x00d3de30
crypto_export_handle: 0x00000000
blob_type: 6
flags: 0
buffer: ¤RSA1Û+N»X¼“mzà½}ŽGFV¶:8dzóf|Yt]AõÎw@;җè sÒ7çîgê`c~ÐaÙdvÄ#ñ í-Ô\uF†Éwå¿”/ä¾L벦¾œV’ÞLŒŒûa°ÆÔÐ̕€ƒ»&A9Œ!êähç$¹ÈéÂ=  óQt:sÎÃUÙð<ÃW0Ô7Õqåe­­Bî<$pcÍéºõ€gå $qhÕö¿]HPV©é ¾¤Œâùaõ(nÅùÐ ’i•´Ê݉t@û„‰ßœ"}x¸z§–¥÷hbà§½~–ڐäöµMdvM¡edz˜ò&Ûç¿N²Ëªb€ç ×
success 1 0
1727545339.484
CryptExportKey
crypto_handle: 0x00d3de30
crypto_export_handle: 0x00000000
blob_type: 7
flags: 0
buffer: ¤RSA2Û+N»X¼“mzà½}ŽGFV¶:8dzóf|Yt]AõÎw@;җè sÒ7çîgê`c~ÐaÙdvÄ#ñ í-Ô\uF†Éwå¿”/ä¾L벦¾œV’ÞLŒŒûa°ÆÔÐ̕€ƒ»&A9Œ!êähç$¹ÈéÂ=  óQt:sÎÃUÙð<ÃW0Ô7Õqåe­­Bî<$pcÍéºõ€gå $qhÕö¿]HPV©é ¾¤Œâùaõ(nÅùÐ ’i•´Ê݉t@û„‰ßœ"}x¸z§–¥÷hbà§½~–ڐäöµMdvM¡edz˜ò&Ûç¿N²Ëªb€ç ×õ”ó¨ã\KÜP%¹a‹²K©’q§çË=®nC¢Æj™ ‚ÖžáƹmiQ&&î.e¼l*£éQx bÿç´>¥L öà!kߥ{»³9‘ ¤—`­G·Ì®,¢· XpÇÑ$å§Þu@¾aëšî>‚ºs¨sëgÂ(Hް2ó»SZ<)qZ[׆üŒ‡¡î[£)Vš_RI¸0Ë\í2°>„I5>=÷ éuÊýðÄý…@ožló,ژžC‡6®cn¦¿ªÇ^¿>ÌAL €éÂ9»B=Èæ5ìSéB•«âƪ~0…•êgxÇÍyŸ5{ã‘ͯË|âü«ŒP^k®n6«[Nc´ë[¤Ó ߎ›ÍP2 zÄv»g½Uk*ìI¢K¥ö³%QȩȷLž3˜•ijÕoa C80d™ðbY€¾Àÿ²ŠŠá" DCG+²¸ôéقÓ[ȊކG¥‘tìåٛz~€Ã1+ÖW¡Ã*})ÌÁƒKõÑ:;¡µðM|8>L™˜Âª +dü˜©,[•_3MÆ,šD¥1´`¸_jµ'\úol7n‹Z8QÌKpâHâêF¾ ã÷oôQ!µ*]úÞ¶ êë˜Wž×Ñ۔#çÓóÏw?ûˆ h)P´xøÖN*°ÉüNáIoQó%¥wD¬ey±²HF֞,yVBï­Þm÷âC‚ÜÌ»ë˜Þ EžÅtê*fé•UKv5çÓä0`-Fj܎0Ä’òª“®AÓig€¶Ëd{îM×øÌ›¢q:»<jjÖ/›Ûd“’ÿnàдÚu'W! ¹h0\p‚iH&àá©Àú¢¨†éUÁð¹8M«‚EûÀ¥œ“¦ó¬ v^ØNüƒâèqP‚¶~=¸-§ží9¥÷ À ‡‹ÁÁ8;̆RÙ|!°pB(X{Cƒó;žƒyFÁ<†8䢾qíž:ÈÌwnÀS‚ÿ•Øq{ˆÖ{ëç-hª<¸pÑ£ŠÈZQ £úqS’0y¼š`o¿<¤ôàÌÁªZ¡pP¬c(B÷‡È1±ü§*]svPœ¶ÑÓÍo´ªÆ{Â+öDJíàInŽø—_¦®8dÚx<-Q>É^'²å极³£‘ß/|Ežc‘D…îûýŽš¡
success 1 0
检查系统中的内存量,这可以用于检测可用内存较少的虚拟机 (11 个事件)
Time & API Arguments Status Return Repeated
1727545330.781
GlobalMemoryStatusEx
success 1 0
1727545342.733875
GlobalMemoryStatusEx
success 1 0
1727545354.06275
GlobalMemoryStatusEx
success 1 0
1727545365.389875
GlobalMemoryStatusEx
success 1 0
1727545376.703375
GlobalMemoryStatusEx
success 1 0
1727545388.00025
GlobalMemoryStatusEx
success 1 0
1727545399.312125
GlobalMemoryStatusEx
success 1 0
1727545410.593
GlobalMemoryStatusEx
success 1 0
1727545421.9065
GlobalMemoryStatusEx
success 1 0
1727545433.218
GlobalMemoryStatusEx
success 1 0
1727545444.530875
GlobalMemoryStatusEx
success 1 0
文件包含未知的 PE 资源名称,可能指示打包器 (5 个事件)
resource name AFX_DIALOG_LAYOUT
resource name BUPUYOBUMETELAWEFIBUDIWU
resource name FONW
resource name NEGIJUGUDANEPIKOTI
resource name TOZOYIHE
行为判定
动态指标
分配可读-可写-可执行内存(通常用于自解压) (20 个事件)
Time & API Arguments Status Return Repeated
1727545330.75
NtProtectVirtualMemory
process_handle: 0xffffffff
base_address: 0x00d1c000
length: 110592
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 2400
success 0 0
1727545335.5
NtProtectVirtualMemory
process_handle: 0xffffffff
base_address: 0x00400000
length: 180224
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 2400
success 0 0
1727545337.14
NtProtectVirtualMemory
process_handle: 0xffffffff
base_address: 0x00414000
length: 81920
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 2400
success 0 0
1727545337.14
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x023b0000
region_size: 94208
allocation_type: 12288 (MEM_COMMIT|MEM_RESERVE)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 2400
success 0 0
1727545337.172
NtProtectVirtualMemory
process_handle: 0xffffffff
base_address: 0x00414000
length: 81920
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 2400
success 0 0
1727545338.172
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x00070000
region_size: 4096
allocation_type: 12288 (MEM_COMMIT|MEM_RESERVE)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 2400
success 0 0
1727545338.172
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x000b0000
region_size: 4096
allocation_type: 12288 (MEM_COMMIT|MEM_RESERVE)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 2400
success 0 0
1727545338.375
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x00100000
region_size: 4096
allocation_type: 12288 (MEM_COMMIT|MEM_RESERVE)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 2400
success 0 0
1727545338.375
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x00130000
region_size: 4096
allocation_type: 12288 (MEM_COMMIT|MEM_RESERVE)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 2400
success 0 0
1727545338.5
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x00160000
region_size: 4096
allocation_type: 12288 (MEM_COMMIT|MEM_RESERVE)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 2400
success 0 0
1727545338.5
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x00160000
region_size: 4096
allocation_type: 12288 (MEM_COMMIT|MEM_RESERVE)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 2400
success 0 0
1727545338.515
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x000d0000
region_size: 4096
allocation_type: 12288 (MEM_COMMIT|MEM_RESERVE)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 2400
success 0 0
1727545338.515
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x000e0000
region_size: 4096
allocation_type: 12288 (MEM_COMMIT|MEM_RESERVE)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 2400
success 0 0
1727545339.578
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x029b0000
region_size: 12288
allocation_type: 12288 (MEM_COMMIT|MEM_RESERVE)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 2400
success 0 0
1727545339.578
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x03670000
region_size: 12288
allocation_type: 12288 (MEM_COMMIT|MEM_RESERVE)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 2400
success 0 0
1727545342.422
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x04440000
region_size: 98304
allocation_type: 12288 (MEM_COMMIT|MEM_RESERVE)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 2400
success 0 0
1727545342.422
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x02710000
region_size: 4096
allocation_type: 12288 (MEM_COMMIT|MEM_RESERVE)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 2400
success 0 0
1727545342.422
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x029b0000
region_size: 4096
allocation_type: 12288 (MEM_COMMIT|MEM_RESERVE)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 2400
success 0 0
1727545342.422
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x029b0000
region_size: 36864
allocation_type: 12288 (MEM_COMMIT|MEM_RESERVE)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 2400
success 0 0
1727545342.422
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x04460000
region_size: 8192
allocation_type: 12288 (MEM_COMMIT|MEM_RESERVE)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 2400
success 0 0
查询磁盘大小,可用于检测具有小固定大小或动态分配的虚拟机 (1 个事件)
Time & API Arguments Status Return Repeated
1727545339.515
GetDiskFreeSpaceW
root_path: C:\
sectors_per_cluster: 8
bytes_per_sector: 512
number_of_free_clusters: 1781952
total_number_of_clusters: 8362495
success 1 0
在文件系统上创建可执行文件 (1 个事件)
file C:\Users\Administrator\AppData\Roaming\Microsoft\dixlwa.exe
将可执行文件投放到用户的 AppData 文件夹 (1 个事件)
file C:\Users\Administrator\AppData\Roaming\Microsoft\dixlwa.exe
搜索运行中的进程,可能用于识别沙箱规避、代码注入或内存转储的进程 (2 个事件)
检查适配器地址以检测虚拟网络接口 (2 个事件)
Time & API Arguments Status Return Repeated
1727545339.781
GetAdaptersAddresses
family: 0
flags: 0
failed 111 0
1727545339.797
GetAdaptersAddresses
family: 0
flags: 0
success 0 0
该二进制文件可能包含加密或压缩数据,表明使用了打包工具 (2 个事件)
section {'name': '.rsrc', 'virtual_address': '0x0071d000', 'virtual_size': '0x000276ac', 'size_of_data': '0x00027800', 'entropy': 7.618796127276834} entropy 7.618796127276834 description 发现高熵的节
entropy 0.648870636550308 description 此PE文件的整体熵值较高
使用 Windows 工具进行基本 Windows 功能 (4 个事件)
cmdline nslookup carder.bit ns2.wowservers.ru
cmdline nslookup ransomware.bit ns2.wowservers.ru
cmdline nslookup ransomware.bit ns1.wowservers.ru
cmdline nslookup carder.bit ns1.wowservers.ru
网络通信
与未执行 DNS 查询的主机进行通信 (2 个事件)
host 114.114.114.114
host 8.8.8.8
在 Windows 启动时自我安装以实现自动运行 (2 个事件)
reg_key HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce\zsomqypmayc reg_value "C:\Users\Administrator\AppData\Roaming\Microsoft\dixlwa.exe"
file C:\Windows\win.ini
文件已被 VirusTotal 上 59 个反病毒引擎识别为恶意 (50 out of 59 个事件)
ALYac Trojan.Ransom.GandCrab.Gen.2
APEX Malicious
AVG Win32:Malware-gen
Acronis suspicious
Ad-Aware Trojan.Ransom.GandCrab.Gen.2
AhnLab-V3 Win-Trojan/Gandcrab.Exp
Antiy-AVL Trojan/Win32.SGeneric
Arcabit Trojan.Ransom.GandCrab.Gen.2
Avast Win32:Malware-gen
Avira TR/Ransom.ssaxe
BitDefender Trojan.Ransom.GandCrab.Gen.2
BitDefenderTheta Gen:NN.ZexaF.34126.pu1@ayMPbcfi
CAT-QuickHeal Trojan.Cloxer.A06
ClamAV Win.Dropper.Gandcrab-6535271-0
Comodo TrojWare.Win32.Magniber.GH@7mr2pk
CrowdStrike win/malicious_confidence_100% (D)
Cybereason malicious.947caf
Cyren W32/Trojan.RHRV-1350
DrWeb Trojan.Encoder.24384
ESET-NOD32 Win32/Filecoder.GandCrab.B
Emsisoft Trojan.Ransom.GandCrab.Gen.2 (B)
Endgame malicious (high confidence)
F-Prot W32/Trojan3.AMJF
F-Secure Trojan.TR/Ransom.ssaxe
FireEye Generic.mg.296f457947caf036
Fortinet W32/GenKryptik.DQHN!tr
GData Trojan.Ransom.GandCrab.Gen.2
Ikarus Trojan.Kryptik
Invincea heuristic
Jiangmin Trojan.PSW.Coins.by
K7AntiVirus Trojan ( 003e58dd1 )
K7GW Trojan ( 655333331 )
Kaspersky Exploit.Win32.CVE-2016-7255.as
MAX malware (ai score=80)
Malwarebytes Trojan.MalPack
McAfee Trojan-FPOH!296F457947CA
MicroWorld-eScan Trojan.Ransom.GandCrab.Gen.2
Microsoft Ransom:Win32/Gandcrab.SF!MTB
NANO-Antivirus Trojan.Win32.Encoder.fawrtk
Qihoo-360 HEUR/QVM10.1.BD4C.Malware.Gen
Rising Exploit.CVE-2016-7255!8.E8FF (TFE:dGZlOgW643icJrtJdQ)
SUPERAntiSpyware Trojan.Agent/Gen-Malagent
Sangfor Malware
SentinelOne DFI - Malicious PE
Sophos Mal/Agent-AUL
Symantec Packed.Generic.525
TACHYON Ransom/W32.GandCrab
Tencent Trojan.Win32.Gandcrab.j
Trapmine malicious.high.ml.score
TrendMicro Ransom.Win32.GANDCRAB.SMLA.hp
可视化分析
二进制图像
数据导入图像 288x288
数据导入图像 224x224
数据导入图像 192x192
数据导入图像 160x160
数据导入图像 128x128
数据导入图像 96x96
数据导入图像 64x64
数据导入图像 32x32
运行截图
暂无运行截图 该样本运行过程中未生成截图

👋 欢迎使用 ChatHawk

我是您的恶意软件分析助手,可以帮您分析和解读恶意软件报告。请随时向我提问!

🔍 主要威胁分析
⚡ 行为特征
🛡️ 防护建议
🔧 技术手段
🎯 检测方法
🤖

PE Compile Time

2018-04-29 15:33:21

PE Imphash

d1dd6793e073e1336544ec23582ec2cb

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x0000ad53 0x0000ae00 6.557881084928881
.rdata 0x0000c000 0x00002f8c 0x00003000 5.311355540924927
.data 0x0000f000 0x0070d16c 0x00001800 1.8688493454141488
.rsrc 0x0071d000 0x000276ac 0x00027800 7.618796127276834
.reloc 0x00745000 0x00005e1c 0x00006000 1.2556867819953312

Resources

Name Offset Size Language Sub-language File type
AFX_DIALOG_LAYOUT 0x0071d9a8 0x00000002 LANG_ENGLISH SUBLANG_ENGLISH_US None
BUPUYOBUMETELAWEFIBUDIWU 0x0071d9ac 0x00000e79 LANG_NEUTRAL SUBLANG_NEUTRAL None
FONW 0x0071e828 0x0001a73b LANG_NEUTRAL SUBLANG_NEUTRAL None
NEGIJUGUDANEPIKOTI 0x00738f64 0x0000030a LANG_NEUTRAL SUBLANG_NEUTRAL None
TOZOYIHE 0x00739270 0x00000144 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_BITMAP 0x007393b4 0x00003928 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_ICON 0x00743034 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_ICON 0x00743034 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_ICON 0x00743034 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_ICON 0x00743034 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_ICON 0x00743034 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_ICON 0x00743034 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_ICON 0x00743034 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_ICON 0x00743034 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_DIALOG 0x0074349c 0x00000128 LANG_ENGLISH SUBLANG_ENGLISH_US None
RT_STRING 0x00744304 0x00000028 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x00744304 0x00000028 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x00744304 0x00000028 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x00744304 0x00000028 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x00744304 0x00000028 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x00744304 0x00000028 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x00744304 0x00000028 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x00744304 0x00000028 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x00744304 0x00000028 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x00744304 0x00000028 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x00744304 0x00000028 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x00744304 0x00000028 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x00744304 0x00000028 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x00744304 0x00000028 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x00744304 0x00000028 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x00744304 0x00000028 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x00744304 0x00000028 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x00744304 0x00000028 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x00744304 0x00000028 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x00744304 0x00000028 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x00744304 0x00000028 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x00744304 0x00000028 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_ACCELERATOR 0x00744424 0x00000030 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_ACCELERATOR 0x00744424 0x00000030 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_ACCELERATOR 0x00744424 0x00000030 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_GROUP_ICON 0x00744454 0x00000076 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_VERSION 0x007444cc 0x000001e0 LANG_NEUTRAL SUBLANG_NEUTRAL None

Imports

Library KERNEL32.dll:
0x40c008 SetConsoleMode
0x40c00c SetFileShortNameW
0x40c014 GetModuleFileNameA
0x40c018 SetCommBreak
0x40c01c VirtualProtect
0x40c024 GetThreadContext
0x40c028 GetConsoleCP
0x40c02c FlushViewOfFile
0x40c030 FlushFileBuffers
0x40c034 GlobalAlloc
0x40c03c GetLastError
0x40c040 GetConsoleOutputCP
0x40c044 CreateMailslotW
0x40c048 lstrlenW
0x40c04c CloseHandle
0x40c050 CreateFileA
0x40c054 LCMapStringW
0x40c058 GetTempPathA
0x40c060 RaiseException
0x40c064 RtlUnwind
0x40c068 GetCommandLineA
0x40c06c GetStartupInfoA
0x40c070 HeapAlloc
0x40c074 HeapFree
0x40c078 TerminateProcess
0x40c07c GetCurrentProcess
0x40c088 IsDebuggerPresent
0x40c08c GetModuleHandleW
0x40c090 GetProcAddress
0x40c094 TlsGetValue
0x40c098 TlsAlloc
0x40c09c TlsSetValue
0x40c0a0 TlsFree
0x40c0a8 SetLastError
0x40c0ac GetCurrentThreadId
0x40c0b4 WriteFile
0x40c0b8 WideCharToMultiByte
0x40c0bc GetConsoleMode
0x40c0cc Sleep
0x40c0d0 ExitProcess
0x40c0d4 GetStdHandle
0x40c0e8 SetHandleCount
0x40c0ec GetFileType
0x40c0f0 HeapCreate
0x40c0f4 VirtualFree
0x40c0fc GetTickCount
0x40c100 GetCurrentProcessId
0x40c108 VirtualAlloc
0x40c10c HeapReAlloc
0x40c110 HeapSize
0x40c114 GetCPInfo
0x40c118 GetACP
0x40c11c GetOEMCP
0x40c120 IsValidCodePage
0x40c124 WriteConsoleA
0x40c128 WriteConsoleW
0x40c12c MultiByteToWideChar
0x40c130 SetFilePointer
0x40c134 SetStdHandle
0x40c13c LoadLibraryA
0x40c140 GetLocaleInfoA
0x40c144 GetStringTypeA
0x40c148 GetStringTypeW
0x40c14c LCMapStringA
Library USER32.dll:
0x40c154 GetMenuInfo
0x40c158 RemovePropW
0x40c15c AppendMenuW
0x40c160 LoadAcceleratorsA
0x40c164 GetMenuStringA
0x40c168 SetPropA
Library GDI32.dll:
0x40c000 SetICMProfileW

L!This [(&dm cannot be run in DOS mode.
`.rdata
@.data
@.reloc
_^]U8SV3W]7;t7j.ESP]d
E_^[VWL$
uKVVVh(@
P3[_^]
V@_^[]
+WV>:j
@u+Pt$
EPMPh@
Wt1t'PV
^0WWWWW"
VW3;tG9}
^0WWWWW
YVMh(@
$UQQSVWd5
SVWE3PPPuu
E_^[E]
UQSVW}
W>+~,WPVl/
Y/V|Yt
Y}3u;5`
YY3BUX
YY]jXh`@
tAt2t$
3PuEEd
3PeuEEd
Y__^[]Q
S3VW;t
^0SSSSS
3_^[]j
DDDDDDDDDDDDDD
,ffffffE
Y0^]UWVu
DDDDDDDDDDDDDD
3SEEESX5
PZ+tQ3
UQSVW5H
;r@Pu\N
QR$YYt
t3@_^]
=csmu+
8csmu8x
t*9csmu"A
>csmuB~
YYtaSVXH
_YYPVd
YYt)SV H
HtHu4j
t+>MOCt#u$u u
EPEPVu W
;Es[S;7|G;w
@u"u$u
;Er[_^
YuO39~
dYYh$@
EPEPuu W
(u$]u E
)u$u uSu
tR99u2y
u$Vu u
Q 3@_^[]
YYt:V5@
PYF\=@
~lt#W?
YYt4V5@
eE}heI@
VW_^]M
V34809u
;u'0VVVVV
u&\30@VVVVV
9@l39H
P4UM`8
<PVEP(
r3VVhU
QH++PPVh
,P+P5P(
\D+48;E
;0?@?Y1(
8+0_[M3^
F$|3@_^
|_3^=$
;r=@@
1E3PeuEEEEd
Y__^[]Q
:E_^[]E
9csmu)=
YYt|A ;u
1@;u`3@
P~CC>Yu
ItWhtFlt
f6uf~
f3uf~
3F tBP
itqnt(o
CYYYfgu
YYY>-u
jj0XfQfE
t-RPSW{8
3PPPPP2
`pM_^3[m
8csmu*x
YYuBhct@
VV;V\.
V"hYi@
VW33};
VVVVVM
3PPPPP
V\@Y<v8VO;
3VVVVV
VVVVV}
;t$tj
EYF`[_^
VW39=L
t.t$<"u
SBV1C>=Yt1j
tNVSP'
3PPPPP
3Y[_^5
FA>\t>"u&
uUEPSS}
=?sJMsB
Y;t)UEP
W33;u.
SSS+S@PWSSE
YE;t!SSuPuWSS
u2Y]]W
u+@PE&
_^[jThx@
Ej@j ^V
;rE9=(
E3E3;u
MOI;|9M
SI VW}
HD9#U#
MLD3#u
]#\D\D
_^[SVWT$
URPQQh@
t;T$4t
;v.4v\
UVWS33333[_^]
33333USVWj
_^[]Ul$
Iuu}]U
+EPRQL
YYu,9E
Y}SBYE;t
3W;to=
7;YY~PE
uVY_^[]
t7t3V0;t(W8Yt
VYY^3j
Fpt"~l
WPWPWv
8]tEMap<u
Zf1Af0A@@JuL
@;vFF~
XM_^3[
PSY^hS=@
Y%u h@
ffffffu
USVWUj
P(RP$R
t:|$,t
;t$,v-4v
UQPXY]Y[
tVURPEPQ
E`p:39]
3]V3;|
EU_^j
WWWWWC
S3;VW|[;
t58t0=@
]V3;|";
u$C0)VVVVV
B(;r3_^[]
1E3PEd
Yt.V|Yt"Vp
V?Yt.V3Yt"V'
]39}~0N
YYtG;}|fE
YYM_^3[
.Yj h@
Y+t"+t
+td+uD
3PPPPP7
PjEY3}
u@OdMGd
uwdSUY
YYt,t(
;t0PFYt%
S3VW;t
^0SSSSSb
3_^[];t
^0SSSSS
3;v.jX3;E
WWWWW)
Y}S]YE;
wIVSP?
YE;t'CH;r
9}uH;u
E;t CH;r
YtvVpY
uv8mv<e@v@ZvDRvHJvLBvP:vT2vX*v\"v`
vpvtvxv|@
PpY]UV3PPPPPPPPU
SV3W;u:EP3FVh@
39] SSu
EShEYu39]
e_^[M3]}
M9u$Mu u
MapUV3PPPPPPPPU
ESV3W9
u8SS3GWh@
39]$SSu
;~Ej3X
P>|Y;t
3;tAuVWuu
t"SS9]
P({Y;t
3;tuSWo
PWu u'
u[{YE;t
e_^[M3(y
u(Mu$u u
Map3PPj
%WWWWW
t7VysV
WWWWW*
ENV"Y}V*YEE
u,2 ;t
^SSSSS0|
f;v6;t
Map_^[;t2;w,|j"^SSSSS0<|
_WSV;i
0;u,{WWWWW
u+9uv&
E`p3[_^
EP<YM3hp
uToYF;~[
-WWuuj
6PWu<e
WWWWVuWu
YYE;t+WWVPVuWu
uHYEe_^[M3n
WVYtP@
r!v8vv
WWWWWu
EPQEPEj
Map[UWVSM
B:t6t:t't
B^_[%d@
ebMHZT$
BbM^T$
bad allocation
Xejili zuyo wi jufebodoyi
Vibibozuve mayu
Xoti wiro zacoyemibati yupihalo
Yiletozo yihebezobuwuci wudo cadufero
sdiofjbngaiuysdgfbiuqyvfuyagsdvfiygasdvfuyiavdg
bad allocation
string too long
invalid string position
Unknown exception
bad exception
EncodePointer
DecodePointer
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
CorExitProcess
runtime error
TLOSS error
SING error
DOMAIN error
An application has made an attempt to load the C runtime library incorrectly.
Please contact the application's support team for more information.
- Attempt to use MSIL code from this assembly during native code initialization
This indicates a bug in your application. It is most likely the result of calling an MSIL-compiled (/clr) function from a native constructor or from DllMain.
- not enough space for locale information
- Attempt to initialize the CRT more than once.
This indicates a bug in your application.
- CRT not initialized
- unable to initialize heap
- not enough space for lowio initialization
- not enough space for stdio initialization
- pure virtual function call
- not enough space for _onexit/atexit table
- unable to open console device
- unexpected heap error
- unexpected multithread lock error
- not enough space for thread data
This application has requested the Runtime to terminate it in an unusual way.
Please contact the application's support team for more information.
- not enough space for environment
- not enough space for arguments
- floating point support not loaded
Microsoft Visual C++ Runtime Library
<program name unknown>
Runtime Error!
Program:
Complete Object Locator'
Class Hierarchy Descriptor'
Base Class Array'
Base Class Descriptor at (
Type Descriptor'
`local static thread guard'
`managed vector copy constructor iterator'
`vector vbase copy constructor iterator'
`vector copy constructor iterator'
`dynamic atexit destructor for '
`dynamic initializer for '
`eh vector vbase copy constructor iterator'
`eh vector copy constructor iterator'
`managed vector destructor iterator'
`managed vector constructor iterator'
`placement delete[] closure'
`placement delete closure'
`omni callsig'
delete[]
new[]
`local vftable constructor closure'
`local vftable'
`udt returning'
`copy constructor closure'
`eh vector vbase constructor iterator'
`eh vector destructor iterator'
`eh vector constructor iterator'
`virtual displacement map'
`vector vbase constructor iterator'
`vector destructor iterator'
`vector constructor iterator'
`scalar deleting destructor'
`default constructor closure'
`vector deleting destructor'
`vbase destructor'
`string'
`local static guard'
`typeof'
`vcall'
`vbtable'
`vftable'
operator
delete
__unaligned
__restrict
__ptr64
__clrcall
__fastcall
__thiscall
__stdcall
__pascal
__cdecl
__based(
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
(null)
`h````
xpxxxx
GetProcessWindowStation
GetUserObjectInformationA
GetLastActivePopup
GetActiveWindow
MessageBoxA
USER32.DLL
 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
HH:mm:ss
dddd, MMMM dd, yyyy
MM/dd/yy
December
November
October
September
August
February
January
Saturday
Friday
Thursday
Wednesday
Tuesday
Monday
Sunday
CONOUT$
`h`hhh
xppwpp
SunMonTueWedThuFriSat
JanFebMarAprMayJunJulAugSepOctNovDec
DosDateTimeToFileTime
WriteProfileSectionA
SetConsoleMode
SetFileShortNameW
SetDefaultCommConfigA
GetModuleFileNameA
SetCommBreak
VirtualProtect
FileTimeToSystemTime
GetThreadContext
GetConsoleCP
FlushViewOfFile
FlushFileBuffers
GlobalAlloc
GetTempPathA
GetLastError
GetConsoleOutputCP
CreateMailslotW
lstrlenW
KERNEL32.dll
GetMenuStringA
LoadAcceleratorsA
AppendMenuW
RemovePropW
GetMenuInfo
SetPropA
USER32.dll
SetICMProfileW
GDI32.dll
RaiseException
RtlUnwind
GetCommandLineA
GetStartupInfoA
HeapAlloc
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleW
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
WriteFile
WideCharToMultiByte
GetConsoleMode
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
ExitProcess
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
VirtualAlloc
HeapReAlloc
HeapSize
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
WriteConsoleA
WriteConsoleW
MultiByteToWideChar
SetFilePointer
SetStdHandle
InitializeCriticalSectionAndSpinCount
LoadLibraryA
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
CreateFileA
CloseHandle
O%lez85_n5
.?AVbad_alloc@std@@
.?AVexception@std@@
.?AVlogic_error@std@@
.?AVlength_error@std@@
.?AVout_of_range@std@@
.?AVtype_info@@
.?AVbad_exception@std@@
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
Ficavere nixadatebico. Futiwefogu cubohexu viyicayane moyicehijetude xica. Womu tegafefopiwo zemogiga xujazajiya ni. Voxa zowiwayepa xoliwuropiyena zizofoconale. Se yimucayedu poxiyonicemi behaha sepawudehu. Kusi. Dadagarateriso. Vuhihicu licoyamiyobewi jayero so rorerojufebu. Su yiyofakitawevi leretixaha weraluzujice. Howodizodureme. Fulebi tinekatixebale wufevujokagomi haci. Ceyeyevaxudi zerafasu matevaku vokogumiwu. Bota. Hutucozamevi. Jiharabe mebopo. Bozeharupu yucitefu vukuyidediye ju. Yiwadutoxaze payuwene. Sihuhosicefu lecu zidato bojoseyatuta. Lasuyido fedapobu. Wonayaruta perarupi. Xoyowa hule. Poki. Kuwucetumagike zacacudicuzoda necololarumali vuzawujukigisu nudo. Xefese pexujeri vugelavome jucalowo xuwuyelepena. Daraju hojo jinupu cayi. Ruredopofoxo banijodirivufe. Maxu sunutavecehe. Nube puhu guwu jejixafupacelu nu. Yifunoga ceboracoyenu saluwahoze pumojuhogo. Runufigu natoduho kejekayilakado. Lipowelile baxupewurixa zo nanotalefe. Buhafuca. Yepecaxubo foseroga. Tidifevice za. Kowukewofe. Javeheba. Jigivi hazifuyaci zogizanugi. Payacu cipiwetewava saloge. Juxosi. Dijoharu xayogora yoci. Cenehozogo. Lehejosazobilo. Noziwovazefa bofavisefuno. Tudovozawesoji. Metasu jine fegecipano luyifozobe rifezidawazu. Geniyoku luyesepu hezimosafodi. Dusepejacu da gemuva falomiseyicuwa titakoneye. Pijosudotakupo. Vete mulavifiposoxo. Hilujusu cufususabohe nihideyadi zerule viyahu. Dejitafepi jiwagekuwizume delo cifucavoxi litu. Vabujupe xoyi. Xuhapi. Ko. Sihemukuxabi kugikijabesogu tuyozukonipiho wuso ceguto. Sixuxaco jofodagoluhi to kihonize. Zigesoje vilohamocu gorozotahuja miju. Rukukiyipu cajetutoloru bewomape bokazumigesaku. Kixoyefepu wahuje. Cu getutu. Nivile. Ralu. Wafujo joxaruku lurazapunekuce. Dolapedubojire. Hebetaje da raguluyodawo huracu. Remaxojosewuma jamepozoterame xizo. Simakeluxe pu vemirazelerine. Kabati gisojero jezotolupasisu limuri mejozuzu. Yuwakocapa. Vayifirebiguhe yihemesu jukeyupocunu. Cipojafiya yamapino neba zahinojago hoxogameki. Xitunodo lekoxosizeveke cecu. Dixetixa kehereseyeta. So horabe nuserevatakene vagumegeda. Gupe galeheruwagobu. Kire dexuvuwaje yowujovutuzu. Diposuxe zoyirudipufo piciveho powegigo. Re rivekekari. Sa ruginilevu subona. Xiwiyovizi cesehi zujizayonizi nukisihinitufa. Totovohewimipu zigovu jozilu wibaduyoxitiji gudesuhanu. Diwuto gogidife goribiwixelozo. Po vuze vokubomuna. Vepoxarozu hifurajodacira rici. Vupo sami zeza homasowaku zukakupi. Kikumuja. Gubolagijo nava jigoyuporiduka ferahodoma. Femiroci darejaxu lada wimiduvitana. Mirogifunohabu zonovite kicolese nimu. Pezumotibopi necesaxikula tebu tohute. Jijobo dugorekosore cuso tubatariki. Yahavi xurifizaki xuhikatipuca xegeca. Vapubaxa xihibo fexemeda piposije. Pafi naradolonumuwi witowepore jezalefewuxamu. Xetajovowo. Taxayu lawuzejuvine. Hisivihohi cefogavohazobu gu kuwutikefe. Vasuke nahewe hovema riwikujinucewu zazaludavakofa. Faho. Fecuzalocitote bosinimu se. Buyubepije papuhaso. Vocoxuvaze gesuci dulasabahoho megevula. Heloye hozojiki lovaxaruju furo de. Huha movetoketumo. Difejigefasoza mo. Luyugihepipigu disirabuzoga. Sojiso. Rizosexabo. Nera muyoke zaniborukikeki muxurupo vojurotavu. Goyiyiyugose kado hajedumiya. Bedaseyeru xiyeho. Xideceka jegexoza yagope. Giyutusuwofo. Bolikuhubujo juka lolijo ga gulucuruke. Yuro yupo heve livudubiyuyina. Xodeya dosaweweca rixagevi. Rehuhusezoyifu wupivizima jakacanaluhi. Buzolufafora fodujugifoyuni ceki nobemitoku. Wacitixahaluxu lugezelokaxe famola liyeve xefaki. Wobe koye tepezeso kaxovovahoteri bewivojohikino. Niwo. Helagoba jirasula rulegafefo jixe jalugivocifawi. Zaletexirubo doxuyebuda mozigohaxafa. Zenevidiza hokaledeticego. Dacegudohakomo je wehogidipoka fu sucojaxi. Fo gujeyitabe
;?t<J/
LRR@^7H=
9mV|/y
.I+~#!Z(=8
19M}o YtSvW}G
Xlb:3K:w
c0L$}C
=}n#5T
Y`Y?%6g`RTDtF
`*~`XatJD
"G73xTO
Cn"^3cQmh
&O=+%X23P WB\qo'<C773
hMU\7Pa)4g}l68i
idu^fGMDq
vE>Q7m
t_d,pi
v|P|Bw
RYtu&on'Af?
^q1nB'!9mbMPF^
#cK;sB
%_hMN
8#71T5
Z\.oE]Z
#rB@+_
>]%LX<OMIMK>6vO>ff0B^1(`E
$Ai(-8$S
ECO6_Nqee5f%m*Me
%7S mDp
\<JPbPGsFuZ:cj
!PNt+);6Xv
`O'`v.3Y
3IpIfy
40m*4frfK>F
"GE'>C#r
Qe}M/%
uDdJy*y
gKDb^Ch|$Lg
oDVMyFn
6Or_p3?#
gUL<GC
_?hgfD
lv.Jhe
AL;m[z1%
y{Y n/S
G v\#Z
J^YcAtT
L3Mwzb.
!cmv8&CC
-".^Pgnq|Cr
o~S2Z"
.XC*?2
hV-+gGRyq*6
JdFdTFMdb
9.8lzhHoPk
$h.bDz)52a
vrck'V
sG-h\^
/^\jq
|^b[{o
&KRv5]EU
`o4h2[omHDi}FF
Z?{!2/YiCya
^@Qx@|
S2|{f
RfW^|\na
eC"'^M1
2r*D@:~_nm
V%,yJe
Ok;_JjPC[<
)gma'vR;NZ
V}kL+*C
Bx]1)q GPR;,%Mmf?E~"
a=;XWc0
LkK|p=ik)q(e
eQ9EGfA w
<(AQkuo
% Gg3-xv
!!9@_
L@U jt[d
*u_j2le;>
g{Agl$
fD_r`(
^b-@9Wm
EE1_ehL
&`\^Q'8r7sm"(Cda
Y.Nha5[RU
P; k?Q7M:
jw*)@YZ1{IUp
)/6`Bt
sLx1#73O
u`u~@?nj
MZsD,>S;[
M@wjcO
v8Nojn]
za l5!%
bt%YF"
\dI:W5r:C
.#yhjJ=m
AI[SZ"p9
v#o/`<c
(vg'2RR
;J#9*AP<
|9C fl.
5T<f4:e',r
J}ZR+Hur
z/B ;k
?_ig*X
W-s|/G?
,Gts',>f"s(
Y*v'hux
!$LIe\
06wx-1
{:^]Gsl%
Q?;/+hJ~
4$.~IH"
:'ORtj]vhLv2!YF{b
-u5`YtQ
{a\uZ/K
;e7|a14YQ
K8L!k@<O'XBv2p
>jjA8[C
2,52dO
2dnHc0c;
usYY*.q.{3
n_<C.OjqVq{
.G<\|bWrf$Zve
ztb*R
q_S1K#k
O+D,2u$
mVzfX8
kaXz)5
v5w(T@4)#~5
^GCm0s2
R09[Kj9$:g
tEvn%1
Ezc5;bSo.jFj
D^;_PDN)|ZO
$,u2<eo7#
/^5N3[;uY
[Or$abC
~~zn(PV
\")XU0Nid
$C(Lh'
+)M)[X
[nS`M/2
&:\5!L.QyD
-6yX+
e2j77?!w
BCh*:O}~o
V2x'$ci
pnHPrP
&UZ;!+ih-c
UOobrIKz
z$/RKE$-g
f)_/9\&~
N8NmJkT
@O!7$SV
*_2Y"~d0
EzZ*rRt^
Y_yb-ia
o(jd^8J
x'5YA\-aWlbx0\z1S
7Z#I'p#Mgr,
dBW25t[
enGeP0
$;2uU
oc=QD|
R+>[t2A= <\
}&g&WM
I4?ZNg
mCHOT|
<$Ukr]YAB
BF8@)\
fPhlk}
S]YPW6
k&PZ0h4Q:
ZmN_|a1
**$}t<
^z3f8d
U_$E,$;Z
(I'6gy"u
AK%@O\i6
.OU?/y=
oI7ti6u
b!5AI%P
K?#{R|o>
@@{!b>rPky5
GCqR*5
p]v6SA0C+p
nnW)>LN](
H6KHEZ\%Uh
i4^Sc*/
'yRBVH
X"or?[
C.Fx_Uh
o|s3&]M
]mv?FI\ej"
L#(WLP
x/qzl0
GM!"bG
VZM^'Wz
S`q4F9J
Orl2\[
Q8w`Q1
+X[yNow
FQnu'O
!lTg:bpl
\m7~Lu
w/bR6.
5K;!:
7p^~&;p
|(SD*tXXK
PHue%w#iqb
6O(ao|OW
1lI?S{
=i@(:{mn
ty@p#=
b4L8Q<|XI'
Z.E4A32
PFbN?
5#mE]c{K
BeTXj<W
{{J_#%6vw
!OVfP,8
[G|v^s
S!`=3&
Jf_gr5
`lt!YnS
'#Gw0\
2Rc+3=
J?+[QES_<tZ
$w7TR)0g
O`DgE(`-,l#l
@fF-Uh
H@|YOJgs{gX
E@B@M2j
B^&WbQ
{Zu(nHGD{Y]~[wNH
AT]3j.
mP[W`(G,|ILy
}ia.M
T},aVz=<
&QvC4+q+
Tz:3%RW(A^`^#o
,@f|ZIXqv
>(gy#Z_GL.
>+x\bae4
WoiJC$
U@*jkW
%MS&{07I+CY5
y-t%$UNY)|
Dy=G"4<uYVXi
ympH=,mYPun<
SXoK%,
iZ)A::|A/T4
`Unqrfo!UCS
PhGz80:SMZ5> "%
jD ctc~
WUgaA9QK
L4+4wt>
qZ8P9l
|7^%['
YrK7y6
%#Els/(G
ogtwjSe$'Pq7x:F
DT.=%D{
sSv3xUM#9GG
(-rb&!y 2
h=8kMJet
e'1d &
agdx~(
.n+!p.lNCO2i
Hj/1H9yX"!
>=f[e$d
jR#*PXP
7^z>x@
eIiiM/
-y-6@$hg@^U
]pcoK.&
}Vj))| AX-1
e2et[*
]2vJM|0
E5$ J{&
C-fnlM
2DV!%R
!nmI!s$/#M
~Dl*Sn}{9
cX444
(f,ipz
Xl&uOM`1ca9~}L"
5TZxEwe62b
ho.' 1NQ2@
76<En(oY(
| >sKfC|L-5+
7zP#K}e=h:6gT5iX^1q
o#$d8yL@-n
skF95IyOBBu
4kk5c6t$
$|01fh
s:MX.
x?g`'%r}
}BPvE|{K'^
Uy=>K#V06;eZ?~ec
rS5?=R@X@
Jt}lVs
x)!<8[
aOCTyBn7
r#?p q
oz_Wus^M
d4dG:Y
3< ^6a{E
s5}=kL<
G"o<+g{
rA4,[Z
1)$*r@>[
r}A'M V
<RD`'%W
;!z/Nyu
M-RBJ`
z*A(S
]"-&sSF
3AAmC6
$>g>(x`wi
//D&o/I
8%3Y31vm
h+Zt[p
+~+SV,r1
aL#F2g
{~S`BMW?^
}:(@>DeN
s?&b)d$
"F($p)
k7?AU`lh[p/I0-#
rTHx[%]2r(
LB\ 21kV!
h)oHU')
qcOG0(v`
\tOWD0
#)x;NFf'
QD\+57m('e
XQWUU<
Z}*&E[
f0Opso
O_,s$?="x^}&
@\'*J=af
l|DX{0
V5.Rh J= \$to(
>7mRn`WEj>
e<A<Pmtmgu
^S$NIGY
EuGGDn]>
p<du$P>$
YxM!wd0(
"CWt?XqEgu8
+?\QuU2]+&#R%CR
e$v)X twoYI
+TmXfJ{
VI?G*j
1nWeDNqm-g
5(TH Q
E`Dz?{
..wE@a
#t|J,Ck
yX_cfsm
gZX=#Yy
0-,X*
Z0ka}m'{KF
(Da\A+"8,
}3]P4LS}
E<^X/kC
}34L{py
|6.2jZ
gV`iA]_%
y2tlpnNz|o
]HLD]k
D\Q8!S&
)*T@#t1J
o#LS=
vD-0z((MS
&O!_?&
_Pk@qpHBL
OQ$bl@OsO
5q9.tZ
S]1uyy
JZ OVp
Z.ScP(kly&|C$
G}byRM'
%Ngc_Tn
4#$3iT
&.tR[B
}Z'6#8xA
o\>ulIPW
vUYr4g
?s)2k2zp_h%
6~)]_r
~VpAspDSSWY,
(xb[{+o
m1ea7GP)
0vIZo5~
)]fLved*
EYU4ED
ZLf*pdT
LvhagznQ
I,b!JK<5
*\d;}7X={^-U2pm?~B
Nh`|5<
Xs0T}B
cFk3K:
eyQ/c{V
~1d=N)G5>:ys
B^abZ+&
vOd5hs[qAL
h$}B0,
)NMV`bE
shJa_>v
6-[s7W=
2vw[viDi
:jith2
;$x3#*HoX
u#\A&*w$&
b:2g:nz,mZY
9@>K5/$R1
y9U+,j/!u
>dG3}!Cv'Ryy=$
Ynh6fiM
qHn1G7<|
_Hsu]rA>
.M|a-"a
^_j2.^^[
[CUud07
H?wO[K
s*6#l"x
D{BO cqI
n7ycr5
YsT{HK
n?{oF~
>Kj@M ;E@
c3Yy*lgZ-
{?=?~2Ve*c
|,{(2*]}
mUESY[
{tD.5q
TjXEeStn`
KiDk@+*
+#mEO3
}ursF6
hG#ztML>I
.GU=W*
f;Ol,gpluUU
5^;PkrLQ:
S@dE8&Ul
%G2'Xv4
z]HW4<>YkA
NAL"-M]V,$W
=R`{#;U`?{
s#KjW<"
:""6:CZ\
Zak}{j
!7F"{=/t
%Mt880E}J/q5_
$u3|Z]
Wb4Jkz;Xn
{eDu$'t
Q&%X@3
Dq.53_
=<kOqI
|s(qI#}
/9CdBH:bt'p
!VHH=.^lb#Xzc
F%&:'lD
)v_p?Ocq
P_*.B1
;,[D/\S$
2<4YlS5
-lk#:~
M$3wh0
G5;+F4
C[o]7gU4zA
r?(Cnl
t|uyo`
s,i)7q
nt.#O'll
5&!=oA'P4e
Q4{<yq7l
Hnh,ZK
55$h*n
ZmP?sUH6P/
y=*!jx5
e(e-['#
rwK|6S
bw%&LLmnRNsvCW_;dd=;#
z ic^V,7]
nN<#Uk
>p>BGE
Im28PYI#NY-zy<c
&A@O{u
:9jWaF
N<}tGjsaHh'
Ls/W_S
['A@di*
ZEwa:B|K&~
?6c$`7H
#c]Bo@U#yG',H,5|/|Lm
}Iq-Oq"
ni%'dJ
G%[*-|c>1
oyYqc
1Sk~7R
B$XUK
"T3,LQK
/$;w/$*:
ffY^]QL*u
w+1)U*
c3-)4$;^\}
hCgj#"FSbDa
C|CLQF
FNMqSN;S
re.'5!ee
>nR_0\
_!hm2~D
g5^$%30hesV=5<&
Bhg-_ykn}b
`=12$|&
3@5&A!lw8F
x-U~ny
u8A:Pzw
KwY}dDk9|CZf
J/Io91;W|
Yz==T{AQZ
dc]]N?
z9B~AF
#\>&-@
g'pp!;<
oa7P!Wn<W:Bl^cmm.
T7l<PzNgj<U.
qO7bIhLN3N
p12i>}0gJWf.{s
|`U,>/
Z;7pw`
%XU:?n
F'Ggh.1XHXOp
bng WA
t#[?0Q
YNUIk)r<{`bj
$`pUPsZ]*+#
avB*k5
4gJ5;`V
%iHUS;O
+$~9;\55}c#!
S-!l?Y
7O`{fwobG
OtSNCI
?_(Hhm4
V:L.3XY
D;[[,fL[
wi9>S%\mZ!r18
qX";Q,*
w.9[%<i
IX+>rG>4Z54
a%?M;U
L.![Z7o^s
AZK24.2
@z2,@-
@u7wjh
6#RlFz9
J~;nh-f@mw|y?k1vCV$
in]M^[P|,Q'P^
8aDfC0A+r*
<4bs30
t=#IGMVP
2iZ1{N
m"c+V*%ii<M
sUN*u3
0}'U O
nK:4bo
}J#<~I
|Wk%uWH@WQ
c#-<`#J
cbjLZkYfL&$
qwq_T2y_
+f>+V&%
)=\;[b
zXBf!B2
i>R!XM~yJ1AD9e
_a`nx~+S
//)yM|X
)&z.P"b
V#H8O\
`'^:-bN
l#a*Gm+^}G
&}aoWcI
-`%M<gCnI3
BK-qji/bAR6
<44V3pJP
-",,oA
jAkpRZ9
g^?hv$z
\+q6/T6S
1xjiRo+
8VJxN(
ej8]=^b
,z7YkQ
q:0``'LUwuT6;
c=E>1i_cZg
8[;DX/
O4*BA1}2e
|6[h6\
6:OhQ{;DPse
I}Nn2?>*Mt
#w3TUVBu!F
,\CcVM7a|s
F)6:8 b,
c2crNj]O@"ps
'ZWSZRbX3_E:
V=y*UjG
G"&{Q5
9MEdqfd
Y~Z3VeJ8&<'{
hD@ihxvT4D
$01joo7C*,"A
E g_,!_y,ja~Wt]*#PD"6JTUyM8aul
H#"]hO&
u{g3GJ
<&dsKnR
|eWmyI
9/s^`,9;
uxtl<U}Z
S&V62]N
dS:Z {
$ba{t5JJ
=<C26d&h5
k=,R9C]/:$mY
|~1?+U
)x o7o
IGTCbTtn
9BF7lg
[E ]@fRr
UqH':W<^
Bjja^d
|]4l<.r)
rO#P,Kv\
;{w(*4WIS[0'CTZO
K[bkwq t+
oU[P\=sP
m;o6>e+Wb>A1
(Il?oP
m/SL--?ZOqKZPGz7 sp!
?bZBujNEPI?aR5\
HxEkHs,
l]W\.%l
S:13+RH*O
K<YPP3
.iC"iI8c
;c&_B7a
9%*-5s7
=CXb/E?
{7?.wz+WQ9
E^|^C=(
"nuh/9
XoVaL2$v
y&)T._K|
_h>)c^
VH~Ul`yUO;
L_=_Oi
bK[Fl`OA-$`U
:atBfr~OQ
;'xQ30
V<Ng o
9I(-^'yVZ
oFI5@r
jRPFZIO
EOc`;kU+\N\c
0:PfDcuI$m!
=&VjLC>
2g0KnIH
VL >RBP<
IMS0)Cm
$WBPYA3Aekk
J<G&'w_q
+1n7+{.
wi^*>E
+<Csy"Cn
!OKCr[K& aEs
/t6bDJZ7>e
{>mV!2=Y
,se_u9(Q/|
b"b4FB!x~
(p !{9
2,dCX{S<
67Y6#ui>Q
f)a#v:
y #Cr8
d}=-fk"sT
Z\AZ6b
#PMD([q
{w9?j@gU;8W2TV:sc
#k)2#u+
~'g2mTPNF 9
2hCY4y
dvr5MmJK
)Ww|W,
{aqC[d
(m_v#R~
cOCi21
&WH$qv
Wd_8?p~ez5/?Y
i\W8}?%GMBHTt{M@
#B}qpY
VPvH]8d
%Sebe?(MTZp
yU^o*4{yA
@eS</uFlxwCsu
HR)hFf5
g`v#\i\h^(^}$)\
"gJz:g|I
mF90I5
\DK}PKp.
50rPs7(Q
i]5Ito=T.
7uKicbNQ;f(F
!d_v&r
.0qq{+5O
+!gip
SR2{(.FG"
v0R Xs^Y
x]T7K~
W}\$ 7Z$N
fK6*K"z
"]b1R/W;
S@(-4^0
A6n^4s
K5uF9P
J/pj(&s.GR7[
xgOjw1Eqco0T
q>2N|w^{r8
,GN3UeDc
Hc2Vaz#
2z\W)>Ri4:/bgt1v
&}2:^ao7Ist
G5P*<w
}B)eJ
].#4h\>
7kuwi@vS"j
'J1c}aN!Q
1(?j+I
:9`;{!*B;
<:PT~,?
Nuc.v\Z^
/7<`sP
=3GG`0A 4V[a
XoCAD:h
Vei)D]e
E9Z[}I
i>/(kOPP_@.
~.yCU/~=a@
-[RJ ;K>
A$ h5i
uy}+N;)IN~0:
r-B3.vE:\WS=ky;eR
@T=S@u
B%ui6I=gW1p(`me)Kj|
Smlh)#uV=
)~^6-Nl_
vFz9[(?
)UvM,sJ[ys$
'q3"!&Q
x0mj7@N;?iC
pf/9a[0
"[pWZUg
e]B04XhDCu
z[GyPRa"
Qas*MQ
4"hMn|
RBW'0;K
elnnz,1Z>
=&<B<*
EPb<S?KRO
/UoZ1-5O3;#TM1
4If!pB$.As%EkR8Ss)mI
SGWszP
G-=_~Gl
G3=cx0)n4
Gd2fQ.s
vIGbp<kUXtQ6[p
u=wb_`m^
n8}0@s
dQ]&Ema
hkiw!l^
qQF10Fy
{}%%>> fmh,M^g
l+iz+Y
^CeI8W
zoPwm=vSh
ZSN(MP#.Q]b_
L}<xWB
m6{:2Fr*<8x-aH
Y_)pGm%FQl
}+&[N#aYtW
}+[ViEdX
JtT)GdZ_l
i%Va}[
yHib*Ak
TCHeoH?G
$Pz1jm;yTUjOC~
cVV[r@ngb
wapS7C`
cHx<dn#HLv
Ct^|a3
i,*\.]5
v3l':;
-v1tX;}u=
OVDn^`Lp
\{Mu` 7QV
;SDSu_3
5 v8DwC
-yWR+^ssg
Cjzv>OJ
m wz4Sw-U
p<N^]^6
d#q7{Qw-O:J
2wm7-V
N6/`#}dd,g
a+U~'!
6>p4))
f4m#w
Lu"7}U"
A/h*C_/],:
^fMT>Ql
u>tuRT$W
f#%%f9
E@:2ObZBN
#.C"87%g}s
V`zK*Q
y^]#U:NjL}
4&syJj_l1
v)U#+a!qq8
V ML`acLR8uPj*QiKp^(VbQ
48~p[pZM5XGg
lZ-{MNk
UZyA-Rd
XCUSysVJqm[
=Bltc1S|
@P\{Wt|DWB
`].3![5
>ceu&#.
"FxP3zY*
CHi4_b
+8t_fI
d%V>46
mkCB]HzGc<
U4\yD*:W:|F
u]o3Tes*7cBhO_d3{g
5N#E66eH
#PtxoNM
Us!?}Ea*EVQ-L
.}Yd$}-+,4#475g_?m+\Z(v.a3
;.F{ZzO&;:@JM
nq(3{>,H
#mj- v
_?e_f/
Z~C$h4+i
aw^0}F`Q=?`hzB
G_PU(C7#
&qdX.E
ZItZd(
W'q2u7|
{ba4{V}
~BGpicy
!UE0.8h
MAS.>ed
K%g)k:
PAJiW=
[.rcBS>wTJ&d
}e\!B#
8j+q;}x
L^f:~5})
})>f#x]7d
X]w9_vQ9MF
JuY>}wyy|-0Q-}p\
4x%B/N%[>
oKR1SA
>ESidHGu1Ap~
;.o)5
7n"33:f
I@RbOdy
Pg,hfW7,
>\HkC6C1@v
Vz179c
=T~\NX!w
`eVPn^c!
)Ev>qm[
5%EkeT+
/~e2~h
H*ng}+
nG 23M{H^
+iN}dJY?"_{
<[^;Zf
Jel#TWv&'e
D9tAA5t
][u tzw,
N~#.S3Z
]K QmPN
gq\dbZ;,w~c
MIXN 6
R@txvNl2
.qac,mo
_O<Z+d
0@~!U
SLf :U=e
3UKG$pWM$f
ju&#hL
fw4vN-B
DH]oV Bfp>
f"4 EQ}C)TG
2h\z/U1
:/Wfgx@ei
loORW$xz
o-5-7KET
u-sK2\nrb|j
L[;^xVtHE/?
4PYU|p^
Z5!B~A_
q{%PN|V
{Tz*)>
"y{#Wn
s`j!L
xZ_Iz=<l.hGL
cr:r'Mg
|4FBT^uNN
CmssIMZr
(`aIqMa1
PV-q$tr)6Gk
$e%L/oG>&J[td,
BF}2-
"nvSqHJ
X`eR,JE99
kdl?DRHu%
?,7%oe)
6% Od,O
rS<npB&?\p"`zg
Z'd5?{
H{VKn<{wl<'
/%0Ef6C
e%hxAlPjZ
kg{`EaX
)IcJtOo U)
fl!FK li
JpAc:?C=Q_
GlMp_"Q{zrwBJm
tvXrMZv4
&W9ek[]
S,g2]qkS
;-="0]3nR
~'3<PRzF
7@"%(Fd
9Ps*b7j
M#vy%Z2Kc
!D]u.z
,a&:Cp+;
}>Qe^\
Keu}Ch:8.iD
a\:4@'r
.&i,+%
!,8o3V
aKgnP[B
@Z*:mlJVc
]=f^uA
KImbf,if
}AEu_-
a[Djh!?
OoD>*7AL|k
+{kfUI
K}Che s
Um`IkH[~Mws
L*{T#L
K8 6;"t%
K)h!8Yn#j
4GF~o
?TWT"$
HV:0$W0@1td
#(}Y70
#NdY`JhWxZ
FV'41fY`<
H{|^JASYLC/
p{+H7D
'_o*2+s
1)Jk`b?]
>sLAUZ
`?w`;]v2
gB}C!wew
V)opTO~
u]8]Jno3]Y
;4eczY7
&-u%3$@
<,f361VU#y
Z#MSb&
UpC]:C
3N]Ly:>
!hJi%bq6&6
(bgOsU
TE/Ly$Pu/
qfW>!3Bs=X*@H$Xl"
</G0D?p!qM+Wnn
=*afVkt[
KYq.a3A{H56>QvO&vJPE+pYh
O;nMI:nSv
sMr5:@v!W
IqRYnc
2~@1}1
~B%?0,
V'k=D9So
)4LVFu
W_}_B>
%;(T@A
th20^RU
|3eB3|x:Xe
k7V\(&aa"N&,
p@Pp>:
gCKFuW
AeKa6
S?*j*sq7~HEvj
rD(R8
.FXHX?
j}$m/MCo{a}dz
><;!+s
mc{gg9uJ7
W^.8+a)=oE!*
f%JXLm3+W
n|47_t
l<=L.Si~
KQM7#F)z
G.N~y~8
qz~#Ms5H&iCx
=\=I:}J
q+p`Sw
O{wVi5C3yL
rOH1_pF
bm"T6z.|
puqd~e'A8G,<2
K9":IyoN
@V;F#C9\_v0
d:@Zu**
u2RsGvC
Oq[5B)u
=2%(c#
d[0siA
Pwb&7wz'
Y-Fkd;
6q]Y|'Kq(
yvFW!m
3D-Qp_
[iGD*L|P
-iF(%@
}Q38x/
%:!z!0J ;L/
~")bU5
#LZ[3jJP!V
Zv5=3=qH
9 ?:__/W
wmk1)Tv
bGH0^k
HB/}`%@
bom lZ
4#1+f;/oF|d&(
pK'(1/LG
|/Wa8f
ttl2*I_T
h6opNEA~
jRLiH~03d
x';[QY
g$?Ga|Z
+A8C1
a+z@|'I90
an8ACK
9O4e=7h^
Rh#a5>cY
l3=EVo
@xHp4kT
0MusJ?U0$%hz
A]]E/a_msF*
Q=KEf a*+$@HM
=DF|gC
TZc%&ZC@y
,0UjD9
j<;p(O[
z'd?i]K
0=>G*#
%[WW'YU
mWhU"
&Z6c*}Tg?
Lb5\rFs
L()8)Fg<ql
~c0+GxPl#
yN#*\f!
W(8z8qC
34+}J~Z
CogF!65Xb=
S~C]uA
4ky_
JVcb3X
<Uo{hc1
!3xg[M
t'\!P\q^7p
2NJXoh9
3J8;m,T
w8s|BA
;W;+M|
eVC3dLc?eMT
:`'aN?j_D
V4X_&JoEB;
1dAKT2X6FUC
2``mE[5
}*dSaN
)XXL^XG
"a&x\Q
CHlYq(zw?
(w[h"}eN
+@e.iz,[
}#cJN\/
*h9v:J/1;93
^+ut8h
rT[-CF:xC
"7B}!FN=2
^W7@xR~
fnHr4~087
IAd2q
Slnc8$*fm
?B04NJw&
u"&_e5
IXW8P!
!.hHg%1G'.#w=
qK6Qbyo
3$X?RpPiO#G,x
Aplk^~$;,t
Tq*egbA
WFP(|d
~03VeY
Q^>S6G>qf
Z<TR0Z
YxSi$2
hF.X3{f_w
{,"%`.|
D<cSRhhd*
%"]L3V
C]i Wdf
h`p=.|I
J~YfEZU
"Jo0J|KE=
pL3@6?a(U
?8F6o[|r^e
]S-WZB5
Oh_^zs*[XaS
7$'&"[
Gat2*CV
Bn.mxV.
0yd?C
?/!;hjJS2B
TC+jh>
y398NmMW+
-LUlL^
rol.b}d
E d<'owUxljO
1[87v7
MC-3E?;K+AX
_h33:E?gx)KU0Ex
-s!I57t!
?+x6Z?
p<wVRNc
-5m@*|X_
*T!yXucKq
dPkorhH
K7da4Qi
/Gqy?xE"$
&2u&pX$}p
+<)]tmnNFcS
bujBLk]^6
yje900
.@T,/fOi%-
8t[miXd)8/D
l?MD:EE
">Xy/Q71
sU4?~b`$
bv(&n
DcvV@;;+i#*
/]'EVI
"Y8~g3\
/ut!\oas~=H8Q%"y$
QLwol1{
1$aY,)
HkrJ4T
h6s+P2$3SQ=o>(
~Oq|i3z{h=
|KopJXV{X
@VvX(d{a
s)1+QV
#CIF"cT8KJ
MwfW-=
t[xdEsH7
jz_Xbx
yb~>8@G`Q"`x
T"PBw/
}P+M%qH
/8+`r[yy>GeG|F
=gr7*]_
s-by$W4vc$
;xC|"kO'Y
6aN<,^!E
ke$etaF
c<3hE&kK
MtuCZR00J/dD
9oL:4>I$p
V&'zS:Id
GN@?>t/u\I$C v
"$~t4/n
%_84{Vt
%'8U26P
\de3g{}?>l
UlNUBit
(Yw"%#p,
;m2I&2y*r
lr'.g2
<9d>G$TD
Co#1ke{@}m>X*h
$WO%>@
z~Zbrd-<6fo(+
9RkwfOd9h
JMiyY3da
MRH$84
|l,H2S?p
;qvWR]
jIWe%{C
SpRJm5
X0LhO(nf
kGw2kH} a`
Z|&&WsKM6
n<)tZn
=#%&D3
oTsyr"J+
FTxPtz>ho_
JfdWar
]@T(Tk
[<@?sS>PV}
2ojFV7\M1f>yU
@l12bn!
\wGZJ5f{NH$DD{
(98##vo
F_B7<j
w?b%`.i
|&'2o,Lkf
s);ts0;{FNm
IBL0)b
yU 7V>Zl]TP
a*+%9*0
!ZK16a!X-H"*)V
.xP!$gp)
P}{i!ZC#S
l R{c$
Z+7)QJ:
aCFbzz=
5%k6Kj
-6\?:#@+a
8MBp<m
$:ff$|
eh:Ey6t/"
-:2z8Qu
r4xa$W=?5
1a9s?R
=~[iV_L5Q
(W_NrvaSP
/+b?*x
=s@"*2
C#j7P;PXV
x&5ef]}
ssak).]hV
*$PZn_Fz
g"Rs/Q
IEMCqF
)m6wY#A-
[sf>+?
Jvu8g<
IQi Np*
mp<5yCm\
-5Xb<
c*g^aMBx
beX<IM
@<=FKq%9"
?+r<VSE
U7ZN?$d\b
HnIZ{G;:
gN"JJa!
A&W^Ox%
H['h"egEG|y7Sd
|e)F6W
IZI?Z3
[{N+-6dF
'qbow<?N~{RQ*l?]diPEto
yS+u}HG
*"x#rj
.s'gHIa9N,
~1wXG/
:RwGdy7-
Qky=d$n3
y7>q03qv
x4gG|]*_8.V%^
LY?KQj
zz>Saa
zX)R.`A
Dwh^V|
|2x;_T
^MwIAwc
4tnAv2RH;
_R:5i$L
!1V,ljg
[-hEGn,Y-
E`Xy?%
bJf"R7W/c[
)5ejf,
Fmh,7@B
PJ&FOnJ
,- Kus|D5
6#;uPv,^J^F
r/-V"j
!iI-s0
"+oUQE
#SlszT
MWrL=6
>pR.8N1V=Q
0H:Ly\dTr)eMKARZ
#*7J%?
H1n7f<Af+<B.!e?\$
_RIM=t
EW;~!ap
~W^t>qz
w<aOGd
@&qgVsbe ]
levF;x
&ai~3qJ}
`PXHFk$R
9)\]tM%<j
2GV/'S
Dwla`!ef
1p'j{gv
VyLd/u9
'2c;lJHP
%!R&jY'?
zgV<<&n
@BR@51
kQWDPzQy>
t:vV@`C
kGGepyC:
BO$<vLrG/
9,%"RU
pF=6SYiMi=bu_Y
6sIN^**t<>
r@"o1Vx
L>%4N",cs
$GtleR@F
4IN3)M
u%V;uvU)
7h&~o\
5aaV=NN/k
Cm!=u^ @T
:t@^hr1pZ!)(
vm(j8c
*y([py
}Ap1";I-
k+l$Cl
p_zU0ywz
:`wkv)q($AF=G
ncFvv?NS
=3dP=Ys/rO
*ntWnix
VObkl`lN:SY:
iF?K.h'D
vIn_ GQ
OpKl5MO.
)%Br/)}]
d5n YF$$
a8<uHi2{
M,i.m*Z
Gt|%&Pb[P
2f]>cm>
k*m(f>Ds [m
RmxL\5;8
B9LxGZkd>
TMs t[
N,+!a8
eP(kg~pta)7HRk/
62-dMn[S(mxR
v"(\wyVEW#f
w0Hgop
T&!]8w/j86
MZ[#'0cI>D5~[c1c
wf\RfwJ
f1"}>Vm
Q0,7nI
.fM>uG
KM)"Za
43CZ#BW>R!D}
w52NYUP}q!
X#LY<$o
s!S(DG.
u6|"KnQ[ -{L
R5ech\h'E
YaqB8N I
bbQC*zk
Bt2HXf
fs%UC/Vw
k[I5;cD3o
u5THr
SPW2'b_|{2)
O,g8XoD
g;!z)y
AW46wH>A
nJN!]cx+Ew=
hF$s.6
KHE=;;$,
?9DAS(z
ic@*1
>E501YA
RCdbS/~7'Bk0xMA"
TErYt['
/l._,+n7HJo[4
OuLBP%
QiZRmL8
d3TB3v{b!
iPLo:EbjNuV }PDPd
gS,,O#
Vw:]9+z
V ,PRUc>
2~(wp{&9
F+TIri$
l'5@_|2[+:
gbF)-|HOz
tA6Hpn;$hQ
f6.</0%35
wvoF!RM
@Q#4i+k
nBqoHCP
cM/:yDE
s %o=g>Tb6MR96s*sR
c(J?(J3
dtTaD/~
!~"naJ(%YK
ur~ftiDTG"
?h]?t=\'
r7rERr
%Y}v4#!
>=)*S5K
7<7egz9-Sx5
z#*AIP~W
73j4%^X
tJf,yc
1VgUs!
|./,w
i(<qEV
p 9mk<]#
Ih5Q*J
`tIi&& nYm}
N|u"R7'
[DXd&$yr/
zv>h?x\b#+/
OERM41vUd+
1VrugFar
kVF$~
}tAxgfp
KI4Nw C$
+eJ4EXw
&@=RaD
)x,.W|N
_&Ja<r
l1E~r
/i7'vRe$j~"]P
RH7F XWQec&t
JYTSC|
I9C~i:
i,2k=\%
<U/vr'%a
|#HzpOv
LZ| ^'3w?
d'P8/Kw8
0z{@c=a
G+0Z9
t(]im(I
Sj%&#I;
i_XzXz$EVXtnt
_7xC. C
JA,g4baJx
RgO!.g*4?D
j<t<>z$X^:/&
AW+`' K
ZGyIBB
utRpY$
v!<ALo60PR
:Eb\;Eo
7<Kb<7cJ
cd}e'TeH
GDgOWpXI0[
e}T;r?M&ki
C!590fpP@+
H}+~9u?
qw`yvs
AM'h$U"
L0Wc.3
6Esb-e
^8>":tq{$b
~!w)jd
wws!I,
kXEQRb
>@p&+6J?>
g-\=qrDg
t?wY7)
4*p=f:
~!/o9'EoIV(/
\.W'\M
Jc(d(%E/!tO ?\
<lOQz*
O+R\MTC
\6Q-.?*Z
UDQy=$32
3r_B#,
S:qH"h|
ZxvRZi'0F
]ri57ezE_
^rs<[b
HCV$@N
?uY,<p
|Uh 2U
Kl>;}0XvR- d$PLRxyy9@s/|<cv
bS`zZG=
2M}(Cqtm
d:h^LA
EF=78#Xn%
38I*a.j
'^9i{3S
^}27h
uJvdXQ-
0S[bv!)2
M^Z;qxzv
%eyJ'6
s?%"qN`
gOQ#{U4
ty,$~&
u"2h(So=}3
Qd+sF021|lA
0Z{w=WD}t-|
.{-9 ;FMH
J3H:`.@
\"4{@vpa&-FD|
?Icb'Y
Y!..Z&vOO!
vRIqMc
bqs#6l#x~'`
:fxVj+xY
=D,TH:0
n`\&~
Z={`/jU`
G%-\.x(wL
GRI4bA
qQ!7mF
.5NnRsp6H%2][w*
{g"56C
m6f=vF,
p&|=e`J;
"(p`&3H
bHYYRK
)joBF`WZy
p@kFLc2
7Vs. Q1
$UP @X,
>sh:;}1<
IV"]}LD~
uuB1$<
jBg*xh q
*0,rs(e]XkL({}
+Hc,!
H:3e>m
Sx`m<Sp5+Q;
zR^9Uk-
pHK<HA K_
Hg$2o]?
1^4w"0/K
[U:RkFij l
qay`uq
b)gj)(h/R6j[d
v7Iv.]}
1nf_Q$^
W(#O%X?
IEl^2o
I@o1K>%
=MkL;[]g
fnKrU;Z=s?p
|/]ZJ,
mYUf!)/6M[>
Ie3Z+hpj
m4vR41
Fy8.p{l
wVJGa9Z(
DTxj08u
1DHK]P
l~eXH"1@
Gr3m:e
QI3`[/X&x
y~3HsM%X{h
2nK1x
E=4@`(
Lts.78
z{0.+n|
1lmkl(Iq
@#J[;FFOhXw%=F
+S2o\loKM
u@X'v<q
j.BE_|
l61vBN?
5>72MaUm
v/>.~|F<v[W
)5 OU:iL2/
pJKs%\b,#
ki>R^i
$Fi]Lbi
# 4sqM&c[PP|b|
Rvu!yVe
dsekH4!
jWZx@fNA
meh:J'&|'
Ha2|msa
i_Q0.3=%6
bH,\' "@
49qmdk`ea"?
*@-7g4UoK
Db=":=2zT{Qf7
"7'l.sv
|,cfw5WRp
GY2NOO
v|'m)Esw{V
L8+kKX
,4.R=\d
)D]fq=
I[pY*t
^zDQ&1X7LJ
9{xF4N_W:q
m;+Nu_,"
yY+"QO
JX5W;KRjb=)
~?,_eW
c Z;@|V
)v$#xAzY
M:KV("Wdi
*c8(@Ri
VQjw-<6
#mk?J
5c_2>}^<`:igSY
#.Knrrr
fe|"*bo
:,2fSo
J5B&^kE/
3i3,Kk
W-p?cZ-n"np
Lz.Xjf|wa
%P"Kfx!v~j
L(M?FE
TM@s!#IVh
\*R"|{
g.~TI[DvEv#
k8ajHzNo
h#r1Nj=3
+-IFlTj
>CIAIHx^
4t@_"1&9p
@ 67P0k
RmrVHC
%>S^T+^
[|BL:65nso)n
LxUtoAZ.|sl\!f
2t1h't3g
9<V.+LO.5uQ_
Hm!h"_?tij,xz>C[CbuZ
5&5 bN*Z}
XIj%2Ef
i>c?/Z
b73[s`
#k$*A#
!pOytB
obDMM%]
*I&B&_p
cZKQfYED0uhe
YolI-
hEM=)C
Qu=WpT
sT#=I0~
?#R,\{
lk:jzXM_{
)K; jh
`%#A[GTh,7}%
lcqb=LB2{UmWUz
T x`z7$s
5xD3`QI.
`W#*y(
NW]6_t
4MebdO
/Ar85_yb
7hzL9(6
eArrkSm9ZIg%e<.b
J)s2VdNH
JQ*@uS[
^TT[\ad
nh#Y'iQ
xPBMKn8
`Eez.-
Knr2Y2NuDp2X
6\Vr0!g
{-{7X0l)5gXU
}IvuZ>
.#o7x?iE
%&Ct<I
})^Z8+E
G2\VC.R
ne\b*2W|
m!(m_`_70pu|7A
.>&kp=
d$$h5W
)}#u3wIJ!S[Jr
0E*DX
9)lA1]Z
r<]c(A
Fr8zWno,\
?E*a,
{B=U;`
7}a~fz|o$=U
1np=*4_Wgf]
cl&2ek
y9wzDj\&hX+a)XY>O:1"/
e7|6Wq
Wj?KtI
wjD18Hn
jxM98%.
GI7<ygF
(eZH(3+h
X#U_%
au0S8~
@h!}RR
0N jC&T@
V~BD5B
X:gb<fq
`EHqyr]91
e-!`Hv
}5g+gn\:
/.|"KhdI
^;$&29
[4HNyZ4
JJS {WG8\
0lih]MHcW
?>p0f Q
U!)wbp%
eK'#$3
PDJzw5
*R->5hpJx
[MgT9J5Y
/572!OhH
?0/\eg*(2
4iq{L5j-}T[P
iE\t->X
miFoeiBn C
yhdS<.hUDKx
~=8mC
6W-]<ozL
u8A75B4x-B"
ZWvCk
UzOe"'=
9oS{ y<x.
n:l-@m1cs
F<&9(bBA`(
zBag\umR
{YVs~pj-Ic0
l\>{L?*}^
vgTe1!u
(Jtr+v
BY=8#0s
IQ\_0;_%
}f-kFUk
h%Hz!C{e
51"*egzlZGHF
HH8v'o
72,I)FU<8
Fa+[R0{
--Dfn#.
klMlhN'!K
nfQo(T?FB-y:MrG
pU*UazN\N
~d`vPk
9gzuq!b^&DQ<o#4YY
E?|0l5D)k
"&VZ_d
~6i[u(7?
X`%@b
@P$F,,XbU;
'>K#}v
$s`i*)y]hj<
e4Ce :0
(OcB0\
6<|5dD
l6>q7T?B|'0:
FqHiWWQ
B%w[xA{
]L;fsx
,{13(#Yf/#`$V
{k#RHZL
Dyh~~zr/
v]xecb|X
rzOYg<\Fz|\
MIH]bEX\}j*f+e
X;eM<2
K<V.<ef
]/@6d<
s"5L7"M
:93wvXu
|(rBa{
C"A3UX~:
pXI2qp,-T
iE8j/MDQ
KOf N\i?=@(&
gPC~ d'';ze/o_%yiFVtz|x
CV3^<U
e&P#dW
ZP{db4r
(E{HL{n
F=}IP%
y:rY^4T+
VLJuM+
VH%$bNxCyG
#M@Oyhx{
sgp"5M
kCa94F
IWpA#DR'CCn
lki2TC8/
.#*jqONPAB9<';\k
Cojl56k
TdL|fb2
Pw6|.>\K+PFNdY4
't["yig*
lm3/u5@[
}`4QKI-`>
zA4.E0#
*7I)Nx
4 [w9MD
*7LU4U
<l,X$tV
W{|dSJ1
nBw4k^3XO+}
E8n:j6"
}_X?Xf]
;AF?MW~v>Vv$$
Q6s}GeQK(:'8G
v#HB A@
nHe>;ET3
vut{wa,COt,sM
$gHm0
`wZ0,1
_ELc4[5
Sqj1W~=l1
skie$-$
_jW6dk
Kk]FSv.Vt
o:zyW.ko
_<X~Jk~O
xI&c[X
^a3mWT
yTxD\; b1V87J
Qt/%!j[
QV_;<Qf153M
"|I.-8
R([i<U~e
#K_O.`z'P
IQ{W\1
J Cy3"U?h#H
6xmXlkW
r+obH'3
{#NXT,O&wT
TsWpHs
(([FtT,{uS
Q(SZ:^Y
HjHm[Z$
Ip?=h@~
{|OjDbA,B2yu
Zcm{m5
e,*7j}@Mwd%;
>2MOy`M
wTtt=q:b
y0.,]tEBD%ZkW
{]BO*O..-
s7H\b+
8ojhr&
F5iy?6
fOYn5%E|~Kr,m
@w%b`D
MrCMVr-Q
;JI!1x7 6
0%!j>phQ!
B@zXz;'
\oD|o]
WEd`8EDNSj#V
+K6[y
iMVPq.
wSud%(l:
k]){1*I
#:z [_"A
Cx>C^\
"Yju7$Z
pNK[fH;39a
_f`CCM8``x'
dsG]O{
K{GkkoNc
:)p4NUu&M
['TK#X
.WCz*,Ngr
H<{_BouV
,h*`B5zk(^$
ua@61SqG
N$vBv,
Cf%1N4+
<:uJ{srJ/
F^)|y"J"WqBx
U}:qpM
Q:!%Ix
r-f35Ed
6xWZEooj/
|^waX1S7
B|8lOm%
$7n34Jw{kA
h<tB':")=5R%K
,=~Ir7<
h|Q%G4
"l,'_iU)
B@Om;Ch
2VW#FnN F
\=UeFTS
'Ru1Ef
aOBk/S>
F/NT%C
H+.*,6
] ELk04q
%:3ew<S
%~w@3e
l4AT@\vZ^$?Th
GC5 I8z
4pG9)g
AkL[9i<
2xCU,[
O8,B;)
f!gp~.-av>CO}y)~
"uSoC<Z
*Q=2t]
7%*Y8G
KyRm7sMNbh
AFt>jJl
ne)O%qgtS`Y
Yu4Jv'cPPS
=F!*B/=:m#/0ck?{?
dq#2\94/^K3Sh
'EY_cV:fbO
|xO2hL;c;+A
>,t7&Z`~
}W11yV!c
a+^H>r\,*
Y~`"<Pu
o'IUZ~>D
gGp9HG&R
0,e}oUNQG
D8OyEk
ya"~;_`?g15fXK
s#TBT2NuH
6?A7hXOXC
^cE^!_U &>q}
[7|!c;Z8d/B
Wl\#,AO
iln%n9('9
_n#JVmf
O1IiD;~SS'<
=y9D)c
N|Gr'i
"wd>=
T5gMgL
9&2As1|QV7)
cJRtVO'e:Ts
iE{H[/$A
%!,h*Q;c@+
%{YD0{
[;KYK
x98=U
9lCZiB F,t(uA]V
cL.[oIT.<Ry
#`tG-~'Q
M]HUw*
\zdnh#hIA
MOKTk
0wDA0XCLY
;o@[.-
~Yg=Rv
vp_wd \v
+.H!MQ
8|x&ai<
_nJ(J4QS
*uy;NL8ui
.%k3186
=6,l<Q,s
LUESMqpB
:y|Q`*
C!l`V{Ow
S:Vm<!
,q=~W0>3]
tM-zUAv)09
+q~PI~P3@
B@3puQ
cedd.^a
M'DP%r#p
B~F.)
o%cD{}0
//FrrH
QzqP6B4
ld#gd*0
=u]_@/mEk
{Mmy@y
Z9VAX"
J{Cp9Xn"
1DcYF]rnz
*py;yO-!]
5Ks>siYh&`
6=E`sPo,5*H
eSidLkc0
EWEnjc
y9p^5=wt\
&|cMJ
:ZI${whv
E3piInLZ$g+/
D3sg%
ydwo8rj
]HB{upN
@VODK<
Ey'P|^A
{O\b%H
`*xy@6O{
]V9G(XUP
wR/IVV
+:a4sMEE7=>u_\<^
ttR]K(5,
Bezobu wuciwu doca duferoju. De woceko diki cisupizipikare begivine. Nasabu gakuku. Cehali sozazelopu guyewotune dobeduhi xotiwiroza. Co yemibatiyupi haloxudeli. Hebomiwa roti jaxosuhe voyecami. Bezivehudu ninexawuvofape xawixusuka zereracosugoba lixi. Wezopi zusumoko tucawo zi. Biyuhure nosuxipamenu ponagaro. Zukafotovibi bozuvemayuzu tedorajuxejili. Zuyowijufe bodo yilubuli. Coki. Bageguzovewana vetogisa. Dayarojohe fajagoma. Tecawi jatazepuredune yi jo. Mocugaga hufisenogifake kuhonivasowo mazajiteza. Puvayito lohureje vutusi bebicixidu sawerice. Ciza xafixobamoyeve tiza babagewoxodoce sapajayeya. Zedexisudo yomuhosa degu mofipasicajoco wenodipececi. Dujuciye. Xawekoza rixecufazuko fatepaxudo. Cagigiyovekeso doxofezavuyubo keju. Nikudihubeko pukafolozepiyi wayayeha
Zahibeligaca kujakacozazusu seze bonulisetu sida. Fohixe kahotiyi wi. Fuvudamonixuxa ho toguboxi. Sitofi jivahimada xucohecavuli lado xunapi. Bifu zidagososepuda he melibuzevahili pezipaxu. Rotoco mupekoferi di. Marijoyaneyeve tuwipu febedo piyocomuji yeze. Josusutime vumavizaseha. Pezofogi. Juxonucose gogilibobixayo gacik(
/a/a/a/a/a/a/a/a/a/a/a/aIysIysIysIysIysIysIysIys/a
/a/a/a/a/a/a/a/a/a/a/aIysIysIysIysIysIysIysIys
/a/a/a/a/a/a/a/a/a/aIysIysIysIysIysIys
/a/a/a/a/a/a/a/a/a/a/a/aIysIysIysIysIys
/a/a/a/a/a/a/a/a/a/a/a/a/aIysIysIysIys
/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/aIysIys
/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/aIys
/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a
/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a
/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a
/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a
/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a
/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a
/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a
/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a
/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a
/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a
/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a
/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a
/a/a/a/a/a/a/a/a/a/a/a/aptptptpt/a/a/a/a
/a/a/a/a/a/a/a/a/a/a/a/aptptptptptptptptpt
/a/a/a/a/a/a/a/a/a/a/a/aptptptptptptptptpt
/a/a/a/a/a/a/a/a/a/a/a/aptptptptptptptptpt
/a/a/a/a/a/a/a/a/a/a/a/aptptptptptptptptpt
/a/a/a/a/a/a/a/a/a/a/a/aptptptptptptptptpt
/a/a/a/a/a/a/a/a/a/a/a/aptptptptptptptptpt
/a/a/a/a/a/a/a/a/a/a/a/aptptptptptptptptpt
~>`~>`~>`/a/a/a/a/a/a/a/a/aptptptptptptptptpt
~>`~>`~>`~>`~>`/a
YYY/a/a/aptptptptptptptptpt
~>`~>`~>`~>`~>`~>`~>`~>`Y/a/a/aptptptptptptptptpt
~>`~>`~>`~>`~>`~>`~>`~>`~>`~>`/a/aptptptptptptptpt5UR
~>`~>`~>`~>`~>`~>`~>`~>`~>`~>`~>`~>`ptptptptptptptpt5UR
~>`~>`~>`~>`~>`~>`~>`~>`~>`~>`~>`~>`ptptptptptptpt5UR5UR
~>`~>`~>`~>`~>`~>`~>`~>`~>`~>`~>`~>`ptptptptptptpt5UR5UR
~>`~>`~>`~>`~>`~>`~>`~>`~>`~>`~>`~>`ptptptptptpt5UR5UR5UR
/a~>`~>`~>`~>`~>`~>`~>`~>`~>`~>`~>`ptptptptpt5UR5UR5UR5UR
/a/a/a/a~>`~>`~>`~>`~>`~>`~>`~>`ptptptptpt5UR5UR5UR5UR
/a/a/a/a/a
Y~>`~>`~>`~>`~>`~>`ptptptpt5UR5UR5UR5UR5UR
YYY~>`~>`~>`~>`ptptptptptpt5UR5UR5UR
YYYY7G7G7Gptptptptptptpt5UR5UR
YYYY7G7G7Gptptptptptptptptpt
/a/a7G7G7G7Gptptptptptptptptptpt
/a/a7G7G7G7Gptpt5UR5URptptptptptpt
/a7G7G7G7Gpt5UR5UR5UR5URptptptptpt
/a7G7G7G7G5UR5UR5UR5UR5UR5URptptptpt
YYYY7G7G5UR5UR5UR5UR5UR5URptptptpt
YYYY7G7Gpt5UR5UR5UR5URptptptptpt
YYYY7G7Gptpt5UR5URptptptptptpt
YYYY7G7Gptptptptptptptptptpt
7G7G7G7G7G7G7G7G7Gptptptptptpt
7G7G5UR7G7G7G7G7G7G/a/a/a/a
7G7G5UR5UR5UR7G7G7G7G7G/a/a/a/a
7G5UR5UR5UR5UR5UR5UR7G7G/a/a/a/a/a
Y5UR5UR5UR5UR5UR5UR7G7G/a/a/a/a/a/a/a
Y5UR5UR5UR5UR5UR7G7G7G/a/a/a/a/a
7GYY5UR5UR5UR7G7G7G7G/a/a/a/a/a
7GYYYY5UR7G7G7G/a/a/a/a/a
x$/a/a
7G7G7G7G7G7G7G7G7G/a/a/a/a/a/a/a/a
7G7G7G7G7G7G7G7G7G/a/a/a/a/a
x$/a/a
5UR5UR7G7G7G7G7G7G7Gptptpt/a/a/a/a
x$/a/a
/a5UR5UR5UR5UR5UR7G7G7G7G7Gptptptptptptptptptpt
/a5UR5UR5UR5UR5UR5URYY
ptptptptptptptptptpt
5UR5UR5UR5UR5UR5URYYY
ptptptptptptptptptpt
5UR5UR5UR5UR5URYYYY
ptptptptptptptptptpt
5UR5UR5UR5UR5URYYYY
ptptptptptptptptptpt
5UR5UR5UR5UR
ptptptptptptptptptpt
5UR5UR5UR
ptptptptptptptptpt/a
5UR5UR5UR/a
ptptptptptptptptptpt/a
5UR5UR/a/a
YYYY/aptptptptptptptptptpt/a
5URB<7G7G7GYYYY/aptptptptptptptptptpt/a
5URB<7G7G7GYYYY7Gptptptptptptptptptpt/a
/a7G7G7G7GYYYY7Gptptptptptptptptptpt/a
/a7G7G7G7GYYYY7Gptptptptptptptptptpt/a
/a7G7G7G7G7G7G7G7G7Gptptptptptptptptptpt*
B<B<7G7G7G7G7G7G7G7Gptptptptptptptptptpt*
B<B<B<7G7G7G7G7G7G/aptptptptptptptptptpt*
B<B<B<7G7G7G7G7G7G/aptptptptptptptptptpt*
7G7G7G7G7GYYY7G
ptptptptptptptptptpt*
/a/a/a/a7GYYY7G
ptptptptptptptptptpt*
/a/a/a/a/a/a/a/a
ptptptptptptptptptpt*
/aB<B<B</a/a/a/a
ptptptptptptptptptpt*
/aB<B<B</a/a/a/a
ptptptptptptptptptpt*
/aB<B<B</a/a/a/a/a
ptptptptptptptptptpt*
/a/a/a/a/a/a/a/a/a
ptptptptptpt=
/a/a/a/a/a/a/a/a/a
ptptptptpt=
/a/a/a/a/a/a/a/a/a/aptptptptpt=
/a/aB<B<B</a/a/a/a/aptptptptpt=
7G7GB<B<B</a/a/a/a/aptptptptpt=
7G7GB<B<B<7G7G/a/a/aptptptpt=
7G7G7G7G7G7G/a/a/a/a/a/a/a/a
7G7G7G7G7G7G/a/a/a/a/a/a/a/a
7G7G7G7G7GB</a/a?:?:?:/a/a/a
7G7G7GB<B<B</a?:?:?:?:?:/a
7G7G7GB<B<B<?:?:?:?:?:?:?:/a/a/a*
7G7G7GB<B</a?:?:?:?:?:?:?:/a/a/a*
7G7G7G7G7G/a?:?:?:?:?:?:?:/a/a/a*
/a/a7G7G7G/a?:?:?:?:?:?:?:/a/a/a*
/a/a/a/a/a/aB<?:?:?:?:?:=
/a/act*
/a/a/a/aB<B<B<?:?:?:?:?:=
/a/a/a/aB<B<B<?:?:ptptpt=
/a/a/a/aB<B</a?:?:ptptpt=
/a/a/a/a/a/a/a?:?:ptptpt=
/a/a/a/a/a/a/a?:?:ptptptpt=
/a/a/a/a/a/aB<B<?:ptptptptptptptptptptoo
/a/a/a/a/aB<B<B<?:ptptptptptptptptptptoo
7G/a/a/a/aB<B<B<?:ptptptptptptptptptptoo
7G7G7G/a/aB</a?:?:ptptptptptptptptptptoo
7G7G/a/a/a/a/a?:?:pt=
ptptptptptptptoo
7G7G/a/a/a/a/a?:?:pt=
ptptptptoo
/a/a/a/a/a/a/aB<B<pt=
ptptptptoo
/a/a/a/a/a/aB<B<B<pt=
ptptptptoo
/a/a/a/a/a/aB<B<B<pt=
ptptptptoo
/a/a/a/a/a/aB<?:?:ptptpt=
ptptptptpt*
/a/a/a/a/a/a/a/a?:ptptptptptptptptptpt*
/a/a/a/a/a/a/a/a?:ptptptptptptptptptpt*
/a/a/a/a/a/a/aB<B<ptptptptptptptptptpt*
/a/a/a/a/a/a/aB<B<ptptptptptptptptptpt*
/a/a/a/a/a/a/aB<=
ptptptptptptptpt*
/a/a/a/a/a/actct=
ptptptptptpt*
/a/a/a/a/a/actct=
ptptptptpt*
/a/a/a/a/a/actct=
ptptptptpt*
/a/a/a/a/actct=
ptptptptptjjj
/a/a/a/a/actct=
ptptptptptptjjj
/a/a/a/actctct=
ptptptptptptjjj
/a/a/a/actctct=
ptptptptptptjjj
/a/a/a/a/actct=
ptptptptptptjjj
/a/a/a/a/a/a
ptptptptptptjjj
/a/a/a/a/a/a
ptptptptptptptjjj
/a/actctct/a
ptptptptptptptjjj
/a/actctct/a
ptptptptptjjj
/actctctct/a
/actctct/a
/actctct/a/a/a/a/a/a/a*
ctctct/a/a/a/a/a/a/aB<*
ctctct/a/a/a/a/a/a/a*
ctctct/a/a/a/a/a/a/a*
ctct/a/a/a/a/a/a/a/a*
ct/a/a/a
/a/a/a/a
/a?:?:*
/a/a/a/a
ptptptptB<w
jjjjjj
/a/a/a/a
ptptptptptptptptptjjj
/a/a/a/a
ptptptptptptptptptptjjj
/a/a/a/a/a/a/a/aptptptptptptptptptptjjj
/a/a/a/a/a/a/a/aptptptptptptptptptptjjj
/a/a/a/a/a/a/aptptptptptptptptptptjjjj
/a/a/a/a/a/a/aptptptptptptptptptptjjjj
/a/a/a/aptptptptptptptptptptjjjj
ptptptptptptptptptptjj
ptptptptptptptptptptw
ptptptptptptptptptptw
ptptptptptptptptptptw
/a/a/a
/aptptptptptptptptptptw
/a/a/a/a/a/a/aptptptptptptptptptptw
/a/a/a/a/a/a/aptptptptptptptptptptw
/a/a/a/a/a/a/aptptptptptptptptptptw
/a/a/a/a/a/a/aptptptptptptptptptptw
/a/a/a/a/aptptptptptptptptptptw
/a/aptptptptptptptptptptjjjj
/a/aptptptptptptptptptptjjjj
/a/aptptptptptptptptptptjjjj
/a/a/aptptptptptptptptptptjjjj
/a/a/aptptptptptptptptptptjjjj
/a/a/aptptptptptptptptptptjjjj
/a/a/aptptptptptptptptptptjjjj
/a/a/aptptptptptptptptptptjjjj
/a/a/a/aptptptptptptptptptptjj
/a/a/a/aptptptptptptptptptptB<?:/a/a
/a/a/a/aptptptptptptptptptpt?:?:/a/a
/a/a/a/aptptptptptptptptptpt?:?:/a/a
/a/a/a/aptptptptptptptptptpt?:?:/a/a
/a/a/a/a/aptptptptptptptptpt?:?:?:/a
/a/a/a/a/aptptptptptptptptpt
/a/a/a/a/a/a/a/aptptptptptptpt/a
/a/a/a/a/a/a/a/a/aptptptptpt/a/a
/a/a/a/a/a/a/a/a
/a/a/a
/a/a/a/a/a/a/a/a
/a/a/a
/a/a/a/a/a/a/a
/a/a/a/ajjjj
/a/a/a/a/a
/a/a/a/a/ajjjj
/a/a/a/a/a
/a?:?:?:?:jjjj
/a/a/a/a
/a/a?:?:?:?:jjjj
/a/a/a/a/a
/a/a/a?:?:?:?:jjjj
/a/a/a/a
/a/a/a?:?:?:?:?:jjj
/a/a/a
/a/a/a/a?:?:?:?:?:jjj
/a/a/a
/a/a/a/a?:?:?:?:?:?:?:j
/a/a/a/a/a?:?:?:?:?:?:?:
/a/a/a/a/a/a/a/a/a/a
/a/a/a/a/a/a/a/a/a/a/a/a/a/a
/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a
/a/a/a
/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a
/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a
/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a
/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a
/a/a/a/a/a/a/a/a/a/a/a/a/a/a?:?:?:?:?:?:?:
/a/a/a/a/a/a/a/a/a/a/a/a?:?:?:?:?:?:?:
/a/a/a/a/a/a/a/a/a/a/a/a?:?:?:?:?:?:?:
/a/a/a/a/a/a/a/a/a/a/a/a/a?:?:?:?:?:?:?:
/a/a/a/a/a/a/a/a/a/a/a/a/a?:?:?:?:?:?:?:
/a/a/a/a/a/a/a/a/a/a/a/a/a/a?:?:?:?:?:?:?:
/a/a/a/a/a/a/a/a/a/a/a/a/a/a?:?:?:?:?:?:?:
/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a
/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a
/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a
/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a
/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a
/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a
/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a
/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a?:?:?:?:?:?:
/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a?:?:?:?:?:?:
/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a?:?:?:?:?:
/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a?:?:?:/a
/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a
/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a
/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a
/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a
/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a
/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a
/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a
/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a
/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a
/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a
/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a
/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a
/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a
/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a
/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a
/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a
/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a
/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a/a
H::::H
::MM::
:CMhnnDnC:
hhhMnnDMC
nnnnDCH
hnnnnMsM:
~nnnnnnnn:
hnnnnnnno
nnnnnnnn
nnnnnnnno:
nnnnnnnn:
::::hnnnnnnM:
:ooCCM
nnnnnnno:
ECCCCCM
:hnnnnnnn5E
ooCCooCE
E55nnnnnn
555nnnn
:h55555nnn
:h5555555n
CC5555555
E~5C5C555555
n5C5555oE
ssssss
:sssss
:Mssssss
HCsssssss
Csssssss
ssssssC
Mssssss
H:ssssssCCs:H
::MM::
H::::H
2^^008
.2^000
322^00^m
s20...s
J...ss
..J...D
JJJJ.D
JJJ.sY
J^m2^mJ^0
PJJJJ22^0
PJ.32^^D
c+++++c
ccc++++G
+cccc++++
ccc+++c
ccccccg
lllDcc
llllg%
lllll,%
Glllllll
Glllllll
llllllll%
\\\\\\\\\\\\\\\\\\\\\
\\\\\\\\&
\\\\\&
&&wwww]]
S5S&&&www
EE]\\__
\\\\\&
\\\\\\\\
\\\\\\\\\\\\\\\\\\\\\
nqmZpppnppntpkmknnprponlkkjpplomnm~qnm[
qqkJnqoqpoomosmo~
~opnnonlslpnlppmJ
srmFnroponprl
sqqprnnsmqorJ
ppsqrlywv
z|zoqlpnnppr
qnp9oqqpqr
npjqlopon;
qmn^nonyw|
|yznrqlrnL
omq_poos{{
{xuqsolkrY
opo=momqwy
wuzpsmqps@
qkosvx
xwzonplpt
lnnkml
qooppr
kktLnmq
umrprnJ
lon|wx
zw{nso
nntMlrj
kpqnkqK
pkqqli
tmrnqq
kni\noo
~vrsonolknlosoimxxv
oqpqmr[
hjrrst
porkkiosojtmo-muk*nrkhonmnnohokmsn~
rnqrpu
pmnmps
rvwnsn
rmpsw~pmm
orlroni
rmnnstoopn
kpqjoh(
mqp(jkqolo
rnmopm0
mlo)rno
lonlmjvrql
nmpjqsn
xtwmqm
snrvxs
~onnnql
qmopkn
oppmtlpnpoommrpjnjn,onn,rlqikmtmkp~
pqlrqn~
omp\rqm
|w|sponnqoiklpmxx}
jopnsn[
onqoqp
pokmmk
mnmJntm
lqnqplO
lkn|zz
vzyrrs
kqnMnsp
jskrkqL
oonrnm
oklmoo
qmrxx{
xswqpmmqr
npm;ntlrzw
z}snmmmos6
qppYqmo}xv
t|uqpplqlY
qtkZtnqxzs
tyzmrpomk[
lno;jlmmop
nqqmqpkou;
qoonor{zy
z|ykqkqmnpgo
ltoMqiolmspro
pkpvpnnotkmkM
pmoJplsrmrnoontp
mttjromjjpkwoprK
pql[ooklsonmqlsnnpopkkpsrkkqqmqpmiprpX
,Rplowtu
sztjnr
lsoroorpkurt
}{qupA
}~prvB
{wswpv
onovqrmnssmrqot
Ulnpwus}
uqlmnnW*
uxxnvsmon
osokrp~
[c^J[ab\[Z[Z[`]][`_]\a\\[N
_X_jlm
lmmZZ^
`\]rss
xwz]]^
^_YKipj
qnl[[aG
st|Y^Y]\_
\]\]\^
\^``^\
\`[b^Y
\]ZY\\
_Z^\c_~{
`a[Luzv
kfkY\WL
~~~[_`
]^cytw
tsq_b]
^c[J[[\`^^bZ_[^_\ZZ[][a`ZI
0}00000000000000
1#1*181J1P1Y1_1k1r1z1
11111111111
2 2'2y2
22222222222
373E3L3Q3i3p3}33333333333
4,42484G4M4R4h4r444425=5U56668
909t999999
:*:;:E:b::::
<6<===->3>;>H>\>{>>
E2e2n3333
4H44W5|55555555%6*64667778888
9Q9b999
:#:9:Y:^:j;;;;;;;;;#<A<H<L<P<T<X<\<`<d<<<<<<&=1=L=S=X=\=`===========
>J>P>T>X>\>>>??????
0+0N0a000
1 1$1M1s11111111111
2v222222222-34383<3@3D3H3L3P3333334555*6C6l6q6666"7/7B7
809):r:
00023333
4$4K4Q4\4h4}444444444444
55%525<5C5[5j5q5~5555
6"6L6R6n666&7I7S777777
88&8,848;8@8H8Q8]8b8g8m8q8w8|88888888888888
9*909L9h99999\::u;;<<
>0o0000111222
3%3u3|3333333
4!4*4=4a44
5$5>5M5Z5f5v5}55555555
6.6a6p6y66666B7
8$8<8T888
99999:;;;>
43676;6?6C6G6K6O666666
7:77777777777
848@8H8X8m8888888
9999):A:L:p:y::::::
;@;S;k;};;;T<Z<s<y<(=5=>=====">->7>H>S>
00%0*000000000001111111
2!2'2Y2222
3*3C3333
4A4F4g4l44444444
5>5F5[5a5g5m5s5y55555555555555555
6!6&6,626H6O6\6a688888888
9,979=9C9H9Q9n9t9
999999999999999
:%:+:<::=>I>|>>>!?
111=1I233
4G4P4\444444>5D55R6|66
8'888t8899P9::
;%;3;<;F;z;;;;;;; <U<h<<<=====>I>\>n>>>>>>>>>>
?8?a?r????
11111111
22(232H2O2U2k22+3314^4444465e5N6^6y666
7;7W77777
8&8V8q8888888999999f::::;;;
<<<<<<
=a=f=======7>@>F>>>>
??$?<?B?Q?W?f?l?z???????
0)0111}22243:3F333
4q4w4444
5I5O5[55Y7k7}7777777
888888888
;!;Q;;
<<<i=:>>>>>>>?
1q2x23
7>7w77c8r8
9=9G9_9999:<<<
=6=A=E=J=
|1111111d3h3l333333333333333
0000000000000000000000
1 1$1(1,1014181<1@1D1H1L1P1T1X1\1`1d1h1l1p1t1x1|111111111111111111111111111111111
2 2$2===========
>4>D>H>\>`>p>t>x>>>>>>>>>>>>>
? ?8?H?L?\?`?p?t?|?????????
,040<0@0H0\0d0x000000
1(1H1L1P1X1l1t11111111111
282X2t2x2222222
3 3@3H3L3d3h3x3333333
4$4(40484@4D4L4`444444444
505P5p555555
606P6l6p666666
484T4X4x444444
56677`:l:t:|:::::::::::::::::
;t;;;;
<<<H<L<P<T<X<`<d<
011111111111111111111
2 2$2(2,2024282<2@2D2H2L2P2T2X2\2`2d2h2l2p2t2x2|22222222222222222233
Mzk7MjM0
Dikicisupizi pikarebe givinenasabu
Majakacanalu hibuzolufafora fodujugifoyunice
gVayito
Mofipasica jocowe nodi
KERNEL32.DLL
mscoree.dll
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@@@@@@@@
(null)
((((( H
h(((( H
H
@@@@@@@@@@@@@
@@@@@@@@@@@
ADDDDDDDDD
AFX_DIALOG_LAYOUT
BUPUYOBUMETELAWEFIBUDIWU
NEGIJUGUDANEPIKOTI
TOZOYIHE
MS Shell Dlg
TODO: layout OLE property page
sfghdfghdfgh
sdfgsdfg
DSilota momoxihulo nexeso dame rureladupa docatuzumuru yajehuzikafupo
&Do yilubulicoki bagegu zovewana vetogiCSadaya rojo hefajagoma tecawijataze pureduneyi jomo cugagahu fiseno
+Xosuhevoyecami bezive huduninexawuvo fapexa
Sagibepi sato xiwucatojo
Gifakekuhoni vasowoma
?Zajitezapu vayitolo hureje vutusibebici xi dusawe riceciza xafi
!Yehacube negiju gudanepikoti godi
Muwusocudiwu
Gewoxodoce
>Vuxotipufi teyiyapelita ya zukesijavobohi sabi yohoxuco januka
XSapaja yeyazedexi sudoyomuhosade gumofipasi cajocowenodi pececidujuci yexa wekozarixe cu
WFazu kofatepaxudoca gi gi yovekesodoxo fezavu yuboke junikudihube kopukafoloze piyiwaya
dCewecotuwija ha ro rajucozibubajo cejedamacaviye yojelefuwahoke nonohuwumipu tedimabozo deseyilemeje
Zemikevaso hirovaco pi
>Gikive joxega fuvemi daxazike lizedoxirivi xavizozesafa canema
FDecigosa se tidiyojeyu xamilodedoneku tiguyi loyojimidetavu gosugugoze
aFirazepi bomi gifuzi huhikebazu kilajato vitacofu gorakojatobuyu koxuhiru renagepuxa kenihifezace
PYuvabopu guyewotunedobe duhixotiwi rozacoyemibati yupiha loxudeli hebomiwarotija
Xobamo yeveti zababa
]Wixusukazerera cosugobalixi wezopizusumoko tucawozi biyuhurenosu xipamenuponaga rozuka fotovi
,Bibozuvemayu zute do rajuxejilizu yowijufebo
SZahaviwexepeni wanegikicudo soyihuru yadeyafipi hajabonorexoke neve kivubaki vekesa
Xu lucivavuhu
3Sutuya dolezosiwa yuhu municiduladipi ba wesacavawi
VS_VERSION_INFO
StringFileInfo
08804e0
FileVersion
InternalName
toalatspring.exe
LegalCopyright
Copyright (C) 2017, iwfnuvfun
ProductVersion
5.1.111.0
VarFileInfo
Translation

Process Tree


0b4ec52bba9dc734611d6d8097046eeb1d2a03753d77d2ccf2b684f1b9c1279a.exe, PID: 2400, Parent PID: 2948

default registry file network process services synchronisation iexplore office pdf

nslookup.exe, PID: 2444, Parent PID: 2400

default registry file network process services synchronisation iexplore office pdf

nslookup.exe, PID: 2452, Parent PID: 2400

default registry file network process services synchronisation iexplore office pdf

nslookup.exe, PID: 2804, Parent PID: 2400

default registry file network process services synchronisation iexplore office pdf

nslookup.exe, PID: 2460, Parent PID: 2400

default registry file network process services synchronisation iexplore office pdf

nslookup.exe, PID: 2068, Parent PID: 2400

default registry file network process services synchronisation iexplore office pdf

nslookup.exe, PID: 2496, Parent PID: 2400

default registry file network process services synchronisation iexplore office pdf

nslookup.exe, PID: 1632, Parent PID: 2400

default registry file network process services synchronisation iexplore office pdf

nslookup.exe, PID: 1676, Parent PID: 2400

default registry file network process services synchronisation iexplore office pdf

nslookup.exe, PID: 2796, Parent PID: 2400

default registry file network process services synchronisation iexplore office pdf

nslookup.exe, PID: 900, Parent PID: 2400

default registry file network process services synchronisation iexplore office pdf

TCP

No TCP connections recorded.

UDP

Source Source Port Destination Destination Port
192.168.56.101 53179 224.0.0.252 5355
192.168.56.101 49642 224.0.0.252 5355
192.168.56.101 137 192.168.56.255 137
192.168.56.101 61714 114.114.114.114 53
192.168.56.101 61714 8.8.8.8 53
192.168.56.101 56933 8.8.8.8 53
192.168.56.101 138 192.168.56.255 138
192.168.56.101 58485 114.114.114.114 53
192.168.56.101 58485 8.8.8.8 53
192.168.56.101 51758 224.0.0.252 5355
192.168.56.101 52215 114.114.114.114 53
192.168.56.101 62361 114.114.114.114 53
192.168.56.101 58985 114.114.114.114 53
192.168.56.101 58986 104.155.138.21 ns2.wowservers.ru 53
192.168.56.101 58987 104.155.138.21 ns2.wowservers.ru 53
192.168.56.101 58988 104.155.138.21 ns2.wowservers.ru 53
192.168.56.101 58989 104.155.138.21 ns2.wowservers.ru 53
192.168.56.101 58990 104.155.138.21 ns2.wowservers.ru 53
192.168.56.101 50075 114.114.114.114 53
192.168.56.101 50076 107.178.223.183 ns2.wowservers.ru 53
192.168.56.101 50077 107.178.223.183 ns2.wowservers.ru 53
192.168.56.101 50078 107.178.223.183 ns2.wowservers.ru 53
192.168.56.101 50079 107.178.223.183 ns2.wowservers.ru 53
192.168.56.101 50080 107.178.223.183 ns2.wowservers.ru 53
192.168.56.101 50081 107.178.223.183 ns2.wowservers.ru 53
192.168.56.101 50082 107.178.223.183 ns2.wowservers.ru 53
192.168.56.101 50083 107.178.223.183 ns2.wowservers.ru 53
192.168.56.101 50084 107.178.223.183 ns2.wowservers.ru 53
192.168.56.101 50085 107.178.223.183 ns2.wowservers.ru 53
192.168.56.101 50086 104.155.138.21 ns2.wowservers.ru 53
192.168.56.101 50087 104.155.138.21 ns2.wowservers.ru 53
192.168.56.101 50088 104.155.138.21 ns2.wowservers.ru 53
192.168.56.101 50089 104.155.138.21 ns2.wowservers.ru 53
192.168.56.101 50090 104.155.138.21 ns2.wowservers.ru 53
192.168.56.101 50091 104.155.138.21 ns2.wowservers.ru 53
192.168.56.101 50092 104.155.138.21 ns2.wowservers.ru 53
192.168.56.101 50093 104.155.138.21 ns2.wowservers.ru 53
192.168.56.101 50094 104.155.138.21 ns2.wowservers.ru 53
192.168.56.101 50095 104.155.138.21 ns2.wowservers.ru 53
192.168.56.101 50096 107.178.223.183 ns2.wowservers.ru 53
192.168.56.101 50097 107.178.223.183 ns2.wowservers.ru 53
192.168.56.101 50098 107.178.223.183 ns2.wowservers.ru 53
192.168.56.101 50099 107.178.223.183 ns2.wowservers.ru 53
192.168.56.101 50100 107.178.223.183 ns2.wowservers.ru 53
192.168.56.101 50101 107.178.223.183 ns2.wowservers.ru 53
192.168.56.101 50102 107.178.223.183 ns2.wowservers.ru 53
192.168.56.101 50103 107.178.223.183 ns2.wowservers.ru 53
192.168.56.101 50104 107.178.223.183 ns2.wowservers.ru 53
192.168.56.101 50105 107.178.223.183 ns2.wowservers.ru 53
192.168.56.101 50106 104.155.138.21 ns2.wowservers.ru 53
192.168.56.101 50107 104.155.138.21 ns2.wowservers.ru 53
192.168.56.101 50108 104.155.138.21 ns2.wowservers.ru 53
192.168.56.101 50109 104.155.138.21 ns2.wowservers.ru 53
192.168.56.101 50110 104.155.138.21 ns2.wowservers.ru 53
192.168.56.101 50111 104.155.138.21 ns2.wowservers.ru 53
192.168.56.101 50112 104.155.138.21 ns2.wowservers.ru 53
192.168.56.101 50113 104.155.138.21 ns2.wowservers.ru 53
192.168.56.101 50114 104.155.138.21 ns2.wowservers.ru 53
192.168.56.101 50115 104.155.138.21 ns2.wowservers.ru 53
192.168.56.101 50116 107.178.223.183 ns2.wowservers.ru 53
192.168.56.101 50117 107.178.223.183 ns2.wowservers.ru 53
192.168.56.101 50118 107.178.223.183 ns2.wowservers.ru 53

HTTP & HTTPS Requests

No HTTP requests performed.

ICMP traffic

No ICMP traffic performed.

IRC traffic

No IRC requests performed.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

Snort Alerts

No Snort Alerts

Name 554854c9f30c36dd_win.ini
Filepath C:\Windows\win.ini
Size 7.2KB
Processes 2400 (0b4ec52bba9dc734611d6d8097046eeb1d2a03753d77d2ccf2b684f1b9c1279a.exe)
Type Generic INItialization configuration [extensions]
MD5 c8b4d2a5becf98cf17b509817cbb10e5
SHA1 303cb650bef9aa47efa5037e57427e0e39c37680
SHA256 554854c9f30c36ddd71343e2ee8c6e3ad740740fbc1cde748944f95f7d695d7f
CRC32 CB360A50
ssdeep None
Yara None matched
VirusTotal Search for analysis
Name ae05a95c708dc5a3_dixlwa.exe
Filepath C:\Users\Administrator\AppData\Roaming\Microsoft\dixlwa.exe
Size 244.5KB
Processes 2400 (0b4ec52bba9dc734611d6d8097046eeb1d2a03753d77d2ccf2b684f1b9c1279a.exe)
Type PE32 executable (GUI) Intel 80386, for MS Windows
MD5 661e5487577db32805e91951c4bdbd75
SHA1 611a2b195d45947c947d819bebb39935e8f903ee
SHA256 ae05a95c708dc5a302ddd7bf472bf9ed2538de2316d273d938d4b5ab5a572236
CRC32 95E84DC4
ssdeep None
Yara None matched
VirusTotal Search for analysis
Sorry! No dropped buffers.