3.1
中危

cce4653ac945ff41ff8d61e28609324944b63edad7cf78f3cb4753d76afdc825

cce4653ac945ff41ff8d61e28609324944b63edad7cf78f3cb4753d76afdc825.exe

分析耗时

70s

最近分析

394天前

文件大小

325.5KB
静态报毒 动态报毒 CVE FAMILY METATYPE PLATFORM TYPE UNKNOWN WIN32 TROJAN RANSOM GANDCRAB
鹰眼引擎
DACN 0.14
FACILE 1.00
IMCLNet 0.82
MFGraph 0.00
静态判定
反病毒引擎
查杀引擎 查杀结果 查杀时间 查杀版本
Alibaba Malware:Win32/km_2ce91.None 20190527 0.3.0.5
Avast Win32:Evo-gen [Trj] 20230717 22.11.7701.0
Baidu None 20190318 1.0.0.2
CrowdStrike win/malicious_confidence_100% (W) 20220812 1.0
McAfee GenericRXFP-FJ!2C9589B46E09 20230717 6.0.6.653
Tencent Trojan.Win32.Gandcrab.k 20230717 1.0.0.1
静态指标
查询计算机名称 (1 个事件)
Time & API Arguments Status Return Repeated
1727110797.37475
GetComputerNameW
computer_name: TU-PC
success 1 0
检查进程是否被调试器调试 (1 个事件)
Time & API Arguments Status Return Repeated
1727110794.84375
IsDebuggerPresent
failed 0 0
使用Windows API生成加密密钥 (3 个事件)
Time & API Arguments Status Return Repeated
1727110797.37475
CryptGenKey
provider_handle: 0x0401b458
algorithm_identifier: 0x0000a400 (CALG_RSA_KEYX)
flags: 134217729
crypto_handle: 0x0402c330
success 1 0
1727110797.37475
CryptExportKey
crypto_handle: 0x0402c330
crypto_export_handle: 0x00000000
blob_type: 6
flags: 0
buffer: ¤RSA1ßî.íU+Õº^֍Ž3Öpí 9a ±*$%¶îzo;6ü¡m\ÀÊùn±uù€w4X ÃŒ«Ð>›3lÏRÐóÛi½Pº”¢‚Ê€4ÜXU¥;<üïÎ ÅÌèL]$‚Å2ö ~ÑÕÍ7Ž ē°Ð1Y/ë@c¿­æØ‡û¯Ø8²àÓf|Çy€Òâ§ÔD¦¾“[”IÖØö±«Í89Z¡ ³"óýXªø§jó|WË0_èúبϨeb^"ǪýÓ;‡•±X½:ªcu2ö’Ñ2!MU®Ðå•én –{­ßéz¸çfª¼¨%´›Aҏ
success 1 0
1727110797.37475
CryptExportKey
crypto_handle: 0x0402c330
crypto_export_handle: 0x00000000
blob_type: 7
flags: 0
buffer: ¤RSA2ßî.íU+Õº^֍Ž3Öpí 9a ±*$%¶îzo;6ü¡m\ÀÊùn±uù€w4X ÃŒ«Ð>›3lÏRÐóÛi½Pº”¢‚Ê€4ÜXU¥;<üïÎ ÅÌèL]$‚Å2ö ~ÑÕÍ7Ž ē°Ð1Y/ë@c¿­æØ‡û¯Ø8²àÓf|Çy€Òâ§ÔD¦¾“[”IÖØö±«Í89Z¡ ³"óýXªø§jó|WË0_èúبϨeb^"ǪýÓ;‡•±X½:ªcu2ö’Ñ2!MU®Ðå•én –{­ßéz¸çfª¼¨%´›Aҏ¶‚&S^Ú#Nðmðö²²zŒôðA½» _Ôñ3$!yô됋ŠvôS ð“ж+†?.?ðÆÍÝ «nØýI¤œn%9՛]Ÿ÷1ùW&|O`J–ð)«N[-C4j²ï=æ‘Å3;Ö7ß4LKŸÂßd:%¯ À¾Nñå'”¥Mè3™‡œÑ\ïÆQY’»‚gw¹ŒôÅQ°D5— G,µ£T«f‹ä¦‚ÈAwðxy`€tKE $9Gó=¦-X9@ñ˜rc¶š?æñ˜?:':ÊD¨cô“Rʐ|Á%`Ué9•êĔ"<¨”-½‚.Á)(‘&µÆˆøY³“®Ï±ô×ÿæÄ‚Fû¬«sOîCÀ}S&R]OŸN€=PzM˜:ºTƒƒ˜S¯áÄ8ñ<‰I\&]H÷Ú)t›[YkŽ!oO($’ã¡>–äm8ºø‰/åMMG–°ê3s¤¨,9 ½L²¾îÔ81a%È¿ùï3jKÂÎÒø²Vtp'©/1íGÑÖ©7\¤\¤Ò ü«¯ÂÖÃfÅïfûgPµÔ³í<¡Ä}cÉ*°–'5{·¹Â² %ÓD&Li:™995ÎG"îluC^ܟ°€}œcßM/Á<}^±£·phD„­@œDÍnyj†³#ä¹'‰!Îc>ûV4– ÄfH³`öÝ'{ç›éz»ºuT~¸,ãªÑN“4o\ [hD\¤ŒÇœ‘­‚´0æ™G勡MËM©(“æV«åì0Îò¶+QS^´Aò;–þB3#ÔǶ†‡ˆ<YÖQ¹ŠÁVžÈeà*(îOû‚è§kàÉW蕥ƒ`B°äd(b¨±IBl_†RPq#ŸÛ‰&—·–µZ6-½p’ÍŒõ`þàRšÞ#&¦Z—£ ŒÆËØê¼–SB–â¶EyYµõ*R'D0P”“á5úÃ2¢a« dºHFJvÖv^–±žgròb#à&Ó~à|>(éÊÅd"Ž3å%t!{OÁj¼ƒƒà¦ÍNٌÚÝå{–…bzxDlßx¤ö3ìéõOxÅìØ4ìfy¢êmº”âkN½ovÞX­³U{|½WŸOmòלÛ}j¤’†,ãâCªp
success 1 0
检查系统中的内存量,这可以用于检测可用内存较少的虚拟机 (5 个事件)
Time & API Arguments Status Return Repeated
1727110800.266125
GlobalMemoryStatusEx
success 1 0
1727110811.452625
GlobalMemoryStatusEx
success 1 0
1727110822.641125
GlobalMemoryStatusEx
success 1 0
1727110833.78075
GlobalMemoryStatusEx
success 1 0
1727110844.938
GlobalMemoryStatusEx
success 1 0
文件包含未知的 PE 资源名称,可能指示打包器 (1 个事件)
resource name XBJH
行为判定
动态指标
分配可读-可写-可执行内存(通常用于自解压) (20 个事件)
Time & API Arguments Status Return Repeated
1727110794.78075
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x00330000
region_size: 110592
allocation_type: 4096 (MEM_COMMIT)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 1612
success 0 0
1727110794.81275
NtProtectVirtualMemory
process_handle: 0xffffffff
base_address: 0x00400000
length: 180224
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 1612
success 0 0
1727110795.49975
NtProtectVirtualMemory
process_handle: 0xffffffff
base_address: 0x00414000
length: 81920
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 1612
success 0 0
1727110795.49975
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x00360000
region_size: 94208
allocation_type: 12288 (MEM_COMMIT|MEM_RESERVE)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 1612
success 0 0
1727110795.51575
NtProtectVirtualMemory
process_handle: 0xffffffff
base_address: 0x00414000
length: 81920
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 1612
success 0 0
1727110796.51575
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x00070000
region_size: 4096
allocation_type: 12288 (MEM_COMMIT|MEM_RESERVE)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 1612
success 0 0
1727110796.51575
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x000b0000
region_size: 4096
allocation_type: 12288 (MEM_COMMIT|MEM_RESERVE)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 1612
success 0 0
1727110796.59375
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x00100000
region_size: 4096
allocation_type: 12288 (MEM_COMMIT|MEM_RESERVE)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 1612
success 0 0
1727110796.59375
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x00130000
region_size: 4096
allocation_type: 12288 (MEM_COMMIT|MEM_RESERVE)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 1612
success 0 0
1727110796.65575
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x00160000
region_size: 4096
allocation_type: 12288 (MEM_COMMIT|MEM_RESERVE)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 1612
success 0 0
1727110796.67175
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x00160000
region_size: 4096
allocation_type: 12288 (MEM_COMMIT|MEM_RESERVE)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 1612
success 0 0
1727110796.67175
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x000d0000
region_size: 4096
allocation_type: 12288 (MEM_COMMIT|MEM_RESERVE)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 1612
success 0 0
1727110796.67175
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x000e0000
region_size: 4096
allocation_type: 12288 (MEM_COMMIT|MEM_RESERVE)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 1612
success 0 0
1727110797.40575
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x066b0000
region_size: 12288
allocation_type: 12288 (MEM_COMMIT|MEM_RESERVE)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 1612
success 0 0
1727110797.40575
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x066c0000
region_size: 12288
allocation_type: 12288 (MEM_COMMIT|MEM_RESERVE)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 1612
success 0 0
1727110800.07775
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x066b0000
region_size: 98304
allocation_type: 12288 (MEM_COMMIT|MEM_RESERVE)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 1612
success 0 0
1727110800.07775
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x059a0000
region_size: 4096
allocation_type: 12288 (MEM_COMMIT|MEM_RESERVE)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 1612
success 0 0
1727110800.07775
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x07610000
region_size: 4096
allocation_type: 12288 (MEM_COMMIT|MEM_RESERVE)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 1612
success 0 0
1727110800.07775
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x07610000
region_size: 36864
allocation_type: 12288 (MEM_COMMIT|MEM_RESERVE)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 1612
success 0 0
1727110800.07775
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x07630000
region_size: 8192
allocation_type: 12288 (MEM_COMMIT|MEM_RESERVE)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 1612
success 0 0
查询磁盘大小,可用于检测具有小固定大小或动态分配的虚拟机 (1 个事件)
Time & API Arguments Status Return Repeated
1727110797.39075
GetDiskFreeSpaceW
root_path: C:\
sectors_per_cluster: 8
bytes_per_sector: 512
number_of_free_clusters: 1782559
total_number_of_clusters: 8362495
success 1 0
在文件系统上创建可执行文件 (1 个事件)
file C:\Users\Administrator\AppData\Roaming\Microsoft\bbkrqr.exe
将可执行文件投放到用户的 AppData 文件夹 (1 个事件)
file C:\Users\Administrator\AppData\Roaming\Microsoft\bbkrqr.exe
检查适配器地址以检测虚拟网络接口 (2 个事件)
Time & API Arguments Status Return Repeated
1727110797.46875
GetAdaptersAddresses
family: 0
flags: 0
failed 111 0
1727110797.46875
GetAdaptersAddresses
family: 0
flags: 0
success 0 0
该二进制文件可能包含加密或压缩数据,表明使用了打包工具 (2 个事件)
section {'name': '.rsrc', 'virtual_address': '0x0376e000', 'virtual_size': '0x00028920', 'size_of_data': '0x00028a00', 'entropy': 7.653237621160525} entropy 7.653237621160525 description 发现高熵的节
entropy 0.5007704160246533 description 此PE文件的整体熵值较高
使用 Windows 工具进行基本 Windows 功能 (4 个事件)
cmdline nslookup carder.bit ns1.wowservers.ru
cmdline nslookup ransomware.bit ns2.wowservers.ru
cmdline nslookup ransomware.bit ns1.wowservers.ru
cmdline nslookup carder.bit ns2.wowservers.ru
网络通信
与未执行 DNS 查询的主机进行通信 (1 个事件)
host 114.114.114.114
在 Windows 启动时自我安装以实现自动运行 (1 个事件)
reg_key HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce\msjltlvwcqy reg_value "C:\Users\Administrator\AppData\Roaming\Microsoft\bbkrqr.exe"
文件已被 VirusTotal 上 65 个反病毒引擎识别为恶意 (50 out of 65 个事件)
ALYac Trojan.Ransom.GandCrab.Gen.2
APEX Malicious
AVG Win32:Evo-gen [Trj]
AhnLab-V3 Win-Trojan/Gandcrab.Exp
Alibaba Malware:Win32/km_2ce91.None
Antiy-AVL Trojan[Ransom]/Win32.GandCrypt
Arcabit Trojan.Ransom.GandCrab.Gen.2
Avast Win32:Evo-gen [Trj]
Avira TR/GandCrab.uzmzp
BitDefender Trojan.Ransom.GandCrab.Gen.2
BitDefenderTheta Gen:NN.ZexaF.36318.uuX@a0NfNxo
Bkav W32.AIDetectMalware
CAT-QuickHeal Trojan.Chapak.ZZ6
ClamAV Win.Packer.Crypter-6539596-1
CrowdStrike win/malicious_confidence_100% (W)
Cybereason malicious.46e091
Cylance unsafe
Cynet Malicious (score: 100)
Cyren W32/S-cab1c03c!Eldorado
DeepInstinct MALICIOUS
DrWeb Trojan.PWS.Siggen2.3664
ESET-NOD32 a variant of Win32/Kryptik.GHCB
Elastic malicious (high confidence)
Emsisoft Trojan.Ransom.GandCrab.Gen.2 (B)
F-Secure Trojan.TR/GandCrab.uzmzp
FireEye Generic.mg.2c9589b46e091ee4
Fortinet W32/Kryptik.GKJF!tr
GData Win32.Trojan.PSE.1CWYWV5
Google Detected
Gridinsoft Ransom.Win32.Gandcrab.bot!s1
Ikarus Trojan.Kryptik
Jiangmin Trojan.PSW.Coins.fs
K7AntiVirus Trojan ( 003e58dd1 )
K7GW Trojan ( 00532a3d1 )
Kaspersky HEUR:Trojan.Win32.Generic
Lionic Trojan.Win32.Generic.4!c
MAX malware (ai score=83)
Malwarebytes Generic.Malware.AI.DDS
MaxSecure Ransomeware.GandCrypt.Gen
McAfee GenericRXFP-FJ!2C9589B46E09
McAfee-GW-Edition BehavesLike.Win32.Generic.fh
MicroWorld-eScan Trojan.Ransom.GandCrab.Gen.2
Microsoft Trojan:Win32/Vindor!pz
NANO-Antivirus Trojan.Win32.Kryptik.fcptlj
Panda Trj/Genetic.gen
Rising Trojan.Kryptik!1.B2A4 (CLASSIC)
SUPERAntiSpyware Trojan.Agent/Gen-Kryptik
Sangfor Ransom.Win32.Save.a
SentinelOne Static AI - Malicious PE
Sophos Mal/Agent-AUL
可视化分析
二进制图像
数据导入图像 288x288
数据导入图像 224x224
数据导入图像 192x192
数据导入图像 160x160
数据导入图像 128x128
数据导入图像 96x96
数据导入图像 64x64
数据导入图像 32x32
运行截图
暂无运行截图 该样本运行过程中未生成截图

👋 欢迎使用 ChatHawk

我是您的恶意软件分析助手,可以帮您分析和解读恶意软件报告。请随时向我提问!

🔍 主要威胁分析
⚡ 行为特征
🛡️ 防护建议
🔧 技术手段
🎯 检测方法
🤖

PE Compile Time

2018-05-25 02:23:35

PE Imphash

797ab842c0608da5bae820b393680135

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x000170a1 0x00017200 6.669068059368855
.rdata 0x00019000 0x00004e9c 0x00005000 4.9646015948214375
.data 0x0001e000 0x0374fed0 0x00002000 3.510807418219825
.rsrc 0x0376e000 0x00028920 0x00028a00 7.653237621160525
.reloc 0x03797000 0x0000a59c 0x0000a600 1.2333338323363345

Resources

Name Offset Size Language Sub-language File type
XBJH 0x0376e934 0x0001a719 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_BITMAP 0x0378db78 0x00004b28 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_BITMAP 0x0378db78 0x00004b28 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_ICON 0x037945f0 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_ICON 0x037945f0 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_ICON 0x037945f0 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x037968a4 0x0000004c LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x037968a4 0x0000004c LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x037968a4 0x0000004c LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x037968a4 0x0000004c LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x037968a4 0x0000004c LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x037968a4 0x0000004c LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x037968a4 0x0000004c LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x037968a4 0x0000004c LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x037968a4 0x0000004c LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x037968a4 0x0000004c LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x037968a4 0x0000004c LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x037968a4 0x0000004c LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x037968a4 0x0000004c LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x037968a4 0x0000004c LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x037968a4 0x0000004c LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x037968a4 0x0000004c LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x037968a4 0x0000004c LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x037968a4 0x0000004c LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x037968a4 0x0000004c LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x037968a4 0x0000004c LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x037968a4 0x0000004c LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x037968a4 0x0000004c LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x037968a4 0x0000004c LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x037968a4 0x0000004c LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x037968a4 0x0000004c LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x037968a4 0x0000004c LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x037968a4 0x0000004c LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x037968a4 0x0000004c LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x037968a4 0x0000004c LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x037968a4 0x0000004c LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x037968a4 0x0000004c LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x037968a4 0x0000004c LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x037968a4 0x0000004c LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x037968a4 0x0000004c LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x037968a4 0x0000004c LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x037968a4 0x0000004c LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x037968a4 0x0000004c LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x037968a4 0x0000004c LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x037968a4 0x0000004c LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_GROUP_ICON 0x037968f0 0x00000030 LANG_NEUTRAL SUBLANG_NEUTRAL None

Imports

Library KERNEL32.dll:
0x419000 AddConsoleAliasW
0x419004 LoadLibraryW
0x41900c PulseEvent
0x419010 VirtualAlloc
0x419014 GetTapePosition
0x419018 GetLastError
0x41901c lstrlenA
0x419020 CreateFileW
0x419024 ReadFile
0x419028 FlushFileBuffers
0x41902c WriteConsoleW
0x419030 SetStdHandle
0x419034 GetConsoleMode
0x419038 GetConsoleCP
0x41903c SetFilePointer
0x419040 IsValidLocale
0x419044 WideCharToMultiByte
0x419050 InterlockedExchange
0x419054 MultiByteToWideChar
0x419058 Sleep
0x41906c EncodePointer
0x419070 DecodePointer
0x419074 HeapFree
0x419078 RaiseException
0x41907c RtlUnwind
0x419080 GetCommandLineA
0x419084 HeapSetInformation
0x419088 GetStartupInfoW
0x41908c LCMapStringW
0x419090 GetCPInfo
0x419094 HeapAlloc
0x41909c HeapCreate
0x4190a0 TlsAlloc
0x4190a4 TlsGetValue
0x4190a8 TlsSetValue
0x4190ac TlsFree
0x4190b0 GetModuleHandleW
0x4190b4 SetLastError
0x4190b8 GetCurrentThreadId
0x4190bc GetProcAddress
0x4190c8 IsDebuggerPresent
0x4190cc TerminateProcess
0x4190d0 GetCurrentProcess
0x4190d4 SetHandleCount
0x4190d8 GetStdHandle
0x4190e0 GetFileType
0x4190e4 ExitProcess
0x4190e8 WriteFile
0x4190ec GetModuleFileNameW
0x4190f0 GetModuleFileNameA
0x419100 GetTickCount
0x419104 GetCurrentProcessId
0x41910c GetACP
0x419110 GetOEMCP
0x419114 IsValidCodePage
0x419118 GetStringTypeW
0x41911c GetLocaleInfoW
0x419120 HeapReAlloc
0x419124 HeapSize
0x419128 GetUserDefaultLCID
0x41912c GetLocaleInfoA
0x419130 EnumSystemLocalesA
0x419134 CloseHandle
Library USER32.dll:
0x41913c PostMessageW
0x419140 CreateCursor
0x419144 RemoveMenu
0x419148 SetMenuInfo
0x41914c DrawEdge
0x419154 GetLastInputInfo
0x419158 SetWindowsHookA
Library ole32.dll:

L!This
m cannot be run in DOS mode.
`.rdata
@.data
@.reloc
^]UQVWj
UQW9t;j
^_]UVV
;u_^[]
;u_^[]
+QPR'C
MQu}E|A
EPu}E|A
URu}E|A
SVW3WW~0~
~ ~$~(~,j
_^0^[]
~0_^[]UVW}
tMW;t<j
l_^EU[]
h_^EU[]
^SWy0
_[^_[^UQQ$
;ww+}A0
tpA$8tgA
t??}$t6|2
N(N0V,V4
#ASVW}
9GNu_^]UVF
SVWeuO=
^ ;u(E
]tv9urVj
~<9F$8N4E
8N 9F0
N09 F$
GKu_^E
t0M t%
[]Ujh0
SVWeuE
4uhuuaESPH
_^[]U(SW}
]t^9uZVj
P_^UVq2E
QSVWeE
_^[]E+@
A0SVW8j
4uhuuaESP
_^[]U(SW}
]t]9uYVj
Q+RV_^]
Q+RV_^]
4ueuu^SEP,uh
_^[]UjhP
SVWeuE
T1@UL18E
S]SPQEPMQ
Q+SV^[]
Q+SV^[]
RWCt[~
SjeWMfEe
E,j0PM=] )] u
M$j0QM#]$U,j0R+VMj0u
E$PM(M(+QS
RME$j0PSME(
t,~(+U
WQREPV5
QRPMQV
CPWQREPV,
j0RPMQV*
QRPMQV
j0QREPV
0)]0]0M
KQWRPMQVk
j0QREPVi
QRPMQV
)]0]0U
QSWRPMQV
j0QREPV
Z Z$U RU
RPQWVE
<+t%<-t!<0u
U ~C+M
;s7M ++@P<
WPQREPV
QREPV0
SQRPMQV-
RPQWVE
_^[]UHVW}
PEj@Pf&
PQWVA0_^]
PQWV0_^]
M QRPh
PMj@Q%
QRWV}4_^]
M QRPh
PMj@QB%
tAuQ|M
EPMQUjlRV#
RUPQVRHD_^[]
tAuQ|M
EPMQUjlRm!
RUPQVR_D_^[]
@VWPh8A
QRPWV0_^]
@u+PR_^]
VQRPMQSW
PQREPS
RPQVSE
@u+PQ]_^]
@u+PQ_^]
SVW3h`A
@u+=hu
VVVVVVV
X\hj MEuWE9uu
P_]=HA
3;unVM
u;uKj 5
DDDDDDDDDDDDDD
U]UWVu
r)$`\@
DDDDDDDDDDDDDD
$UQQSVWd5
SVWE3PPPuu
E_^[E]
UQSVW}
tJ2t#2t
B_[UV3PPPPPPPPU
YY]jXhA
S3VW;~E
@;u+H;}
39](SSu
]9]tWuu
};~Bj3X
3;t?uWuuu
t"SS9] u
EWYuEYe_^[M3
u(Eu$u u
PESP(n
~.8]t)E
WPEW@Ph
~U8]tPMM
3M_^3[D
YYu,9E
UQSV5pA
PuqYYu
;r>Pu[YYt/
3PuEEd
3PeuEEd
Y__^[]Q
USW339]
|^_[]SSSSSx7
.t|PVj@u
@sh_tcPE
k_^[]3PPPPP=USVu
]SSSSS5
vP0YFTt
FP~HZ3PPPPP4
uFP=LA
vPYFT;t
vTYFh^T^L^P^H_[
3PPPPP3
YP;s,Vh
@PVWXz
VVVVV3M_^3[=
SWphY-
S\PPPh
sHxPs%
PtYYltCHphD
Pd8P3F
d|-tt#
Yt1hlCHHYX
4sT|cL
Y3PPPPP./
uTlh=xxPtYt
VVVVV-
3xSSSh
;t\~Ht57xP
3M_^3[j
tAt2t$
YYF$;u
SSSSS)
t3@_^]
=RCCt=MOCt
=csmu*$
8csmu8x
t*9csmu"A
EPaYYEK!
>csmuB~
YYtaSV
YYt)SV
HtHu4j
=MOCt*=RCCt#u$u u
EPEPVu WoM
ESx;7|G;p
@u%u$u
E;Mr[_^
Yu\39~
EPEPuu W,M
EGE~rF
.u$}u ]uE
u$u uSu
tR99u2y
u$Vu u
Q 3@_^[]
USV3;u
G;r3_^[]
<t[<t?
tCf6f%
VWlCv8
}]r\SPlC
Fu^8Mt
E`p^[9M
E`p33PPPPPH
[SMQMQp
M_^3[V
E`p3[_^
o@PVSvE
E`p3_^[
^VMQMQp
_WMQMQp
tS]3K}-
et_EtZfu
VVVVVE
FGIuX^_]
3@]3]f
KuZUUSV5HA
3W;to=A
uVzY_^[]
t4V0;t(W8jYt
Fpt"~l
lVYYYEE
FlvlYE
RYYt:V5$A
PzYFHt
PlYF\=
~lt#WY;=
43_V5A
YYt0V5$A
VW_^]M
ffffffE
3PPPPP
U SW3j
3Y}]9]
;t5;|"Mx
EPSYYt
j@j ^VIYY3;u
;rSWf9M
1E3PeuEEEEd
Y__^[]Q
:|E_^[]E
9csmu)=
@SurPYA
Yt?\ttYt
/THdXYcsZk
(8<m3u
\dtWitRotMxtHXu
Ac9ht(lt
 LntJct
g~Git!n
d\tylH
lkddtflPT
0P|PCSP$
0P|PCSP$
lkddtfPlT
0P|PCSP$
e0P|PCSP$
\t_l-u,P
-0P|PCS
l+u/ddu
lkddtfPlT
0P|PCSP$*
F<-uqtm
]tfF:s
{:{s,{*
D@b+u.du
lxt_XtZLx
F@xGrtt
Lxt]LptT
Lxt/Lpt&
PYtqLou
P}YtKS
f>D[GDd<%u
GlD;uw
GD;u7tlu
?%uNDx
Ylu*4u
`p4[M_3^
8csmu*x
VVV7V|
YYuTVWhj@
3]j hxA
3PPPPPVx
@Y<v*Vx
^SSSSSyj
;tFtA3
M_^3[j
S^`N`H
j$Y~\d9
QY^`[_^]
VW39=|
t.t$<"u
t?VSPt
3Y[_^5
3PPPPP]
FA>\t>"u&
uUEPSS}
=?sJMsB
Y;t)UEP
3wf93t
f90uW=DA
VVV+V@PSVVE
YE;t*VVuPuSVV
E3E3;u
WPWPWv
M_3[<j
whu;5(A
8]tEMap<u
TM_^3[3j
}Mg}_hu
PY^hS=HA
EPQEPEj
ES3VW]9]
39] SSu
ES[EYe_^[M3
MRu$Eu
zuxVVu
ptXFVP1YYtHptSu
3YY;u!9tt
S}YM_^3[
NQSVP_
S}Y3WWWWW|}
S|Y3MW0u
t@VWYt
Pj1SEj
Pj2SEj
Pj3SEj
Pj4SEj
Pj5SEj
Pj6SEj
F Pj*SEj
F$Pj+Sj
F(Pj,SEj
F,Pj-SEj
F0Pj.SEj
F4Pj/SEj
Pj0SEj
F8PjDSEj
F<PjESEj
F@PjFSEj
FDPjGSEj
FHPjHSEj
FLPjISEj
FPPjJSEj
FTPjKSEj
FXPjLSEj
F\PjMSEj
F`PjNSEj
FdPjOSEj
FhPj8SEj
FlPj9SEj
FpPj:SEj
FtPj;SEj
FxPj<SEj
F|Pj=SEj
Pj>SEj
Pj?SEj
Pj@SEj
PjASEj
PjBSEj
PjCSEj
Pj(SEj
Pj)SEj
PjuEj
Pj uEj
Pj1SEj
Pj2SEj
Pj3SEj
Pj4SEj
Pj5SEj
Pj6SEj
Pj7SEj
Pj*SEj
Pj+SEj
Pj,SEj
Pj-SEj
Pj.SEj
Pj/SEj
Pj0SEj
PjDSEj
PjESEj
PjFSEj
PjGSEj
PjHSEj
PjISEj
PjJSEj
PjKSEj
PjLSEj
PjMSEj
PjNSEj
Pj8SEj
Pj9SEj
Pj:SEj
Pj;SEj
Pj<SEj
Pj=SEj
Pj>SEj
Pj?SEj
Pj@SEj
PjASEj
PjBSEj
PjCSEj
Pj(SEj
PjuESP
Pj uESP`
q6qv qv$qv(qv,qv0qv4qv
qv8qv<q@v@qvDqvH{qvLsqvPkqvTcqvX[qv\Sqv`KqvdCqvh;qvl3qvp+qvt#qvx
WGWgnYY
PmYF0;
PmYv4;5A
W3u}9~
-3YE;u
3FS3mu+mYYD
PokYF ;
P]kYF$;
PKkYF8;
P9kYF<;
P'kYF@;
PjYvL;5A
W3}u}9~
SzjY89~
SWjuOjY
C PjPVEj
C$PjQVEj
C*PjTVEj
C+PjUVEj
C,PjVVEj
C-PjWVEj
C.PjRVEj
C/PjSVEj
CHPjPVEj
CLPjQVEj
t$SShuzhurh
@4MC43@3
F$|3@_^
W8fYf~
S3VW9]
3_^[];t
B:t"Ou
U3S3@9]
|FVWt>E
YYt:hTA
t)EVQQ
r3@]3]
V3 AB<
M_3^f|
3);ut!}
0WVkY;_t3@^
t,PEP6O
Y3Yu0N
t<6Y;F
t/EP6M
M_^3[:z
@\EP67M
VP?YYt
M_3^zy
3PPPPPRj@Sh
t,j@C@Ph
3uP;Qtu
tP;Qtu
eP;Qtu
MP;Qtu
?P;Qtu
0P;Qtu
(P;Qtu
{P;Qtu
mP;Qtu
^P;Qtu
uP;Qtu
rustnM
tR:QuMPt<:Qu7Pt&:Qu!Pt
@FA;r3^[
+UV3PPPPPPPPU
Y+t"+t
+tY+uC
Uw\]Yp
u>OdMGd
uwdSUY
HWxtRHtCHt4Ht%HtFHHt
QP|xPEP2
YM_3^Z][UW}
RQMQVp
MLEP3SSSSWEPEP>
E`p3M_^3[X
M4LEP3SSSSWEPEP
E`p3M_^3[W
We@PWV>
PEP"YYEPj
V3PPPPP3WVU33D$
YY3^]SVWT$
URPQQhA
t;T$4t
;v.4v\
UVWS33333[_^]
33333USVWj
_^[]Ul$
USVWUj
P(RP$R
UPjh A
t:|$,t
;t$,v-4v
UQPXY]Y[
EU_^j
W34809}
;uN8N
4 3,9E
P4UM`8
DQP C@
,PVEP$
3+4H;M
(PVHP$
(PVHP$
r3VVhU
QH++PPVh
(P+P5P$
\,+48;E
pH0?DtHY1$
8+0[M_3^
MT;E9X
f;v6;t
Map_^[;t&;w Ej"^0
8]tE`py
<E`p0M
UQSVpDG
t4+t$HHt
ItUhtDlt
PfYYt"
HHtYHHt
2itmnt$o
t-RPSW
0@@If8
u'~! O1t
`pM_^3[9
W>+~,WPV
Y/V|Yt
Y}3u;5
tVPVtuYY3BU
4V}uYYE
B(;r3_^[]
1E3PEd
VuYPV;
uQVuYt0VuYt$WVu
@uoV-uYA
PIYYt}E
fMapZ1
E`p;39]
VWE*ee
3M_^3[K1
^0j_^]
ft'Ou"+
jPfDJXdf
^0Fi_^]
3;tuSu
t VV9u
e_^[M3-
;t_+^]
VSMYY1+W
E`p]Ex
tAMap8+
;t+3_^[
X 9} E
AP_^[]
;}"+]t
u'339\u
JBtj3Y+@M
}99}r"9U
JBjY+3B\M
3+BL1<
Jy3^jY+
u'339\u
JBtj3Y+@M
}99}r"9U
JBjY+3B\M
3+BL1<
Jy3^jY+
FWE}MuMMMMMMM9M$u
<+t"<-t
h<+t<-tk}
+t HHt
B:t,1<
+JMtHHt
B:}QMEO?
tEPuEP
}M]U3EE
3f;uAE
f;u!AC
u4}u+e
f;r#33f9EE
EAV#f}
W]EEE?E
S3PPPPPK3f9Ut
EfUu}M
3f;uGE
90t!uuE
EMuUm
HuMu9Et
u4}u+e
33f9EE
UUUUU3##
f;wK3EE9
}fEEEEEf}Z33f9u
Ea3f;u
f~7}x+EMe
EM}Um
H}Mu9Et
u4}u+e
f;r#33f9EE
ufEEEEEfu
~(E]Mm
0K;]sE;]s
EM_^3[
K;sE;s3f
SVW}f]3
S3VW;|[;
t6<0t0=A
u+9uv&
E`p3_[^
EAV6>Ye
jXEU;u
Ht%CT1
PYME;E
\3_[^j
SYUWVSM
S3VWEN@
tfM_^fH
WVQYtP
hoteribewivojohi kinoniwohelagobajirasu larulegafefojixejalugivocifawiza go letexirubodo xuyebudamozigo haxafazene %s %d %f
ios_base::eofbit set
ios_base::failbit set
ios_base::badbit set
invalid string position
string too long
bad locale name
bad cast
BMraB3G
generic
iostream
system
iostream stream error
Unknown exception
bad allocation
 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
LC_TIME
LC_NUMERIC
LC_MONETARY
LC_CTYPE
LC_COLLATE
LC_ALL
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
Visual C++ CRT: Not enough memory to complete call to strerror.
bad exception
HH:mm:ss
dddd, MMMM dd, yyyy
MM/dd/yy
December
November
October
September
August
February
January
Saturday
Friday
Thursday
Wednesday
Tuesday
Monday
Sunday
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
(null)
`h````
xpxxxx
CorExitProcess
united-states
united-kingdom
trinidad & tobago
south-korea
south-africa
south korea
south africa
slovak
puerto-rico
pr-china
pr china
new-zealand
hong-kong
holland
great britain
england
britain
america
swedish-finland
spanish-venezuela
spanish-uruguay
spanish-puerto rico
spanish-peru
spanish-paraguay
spanish-panama
spanish-nicaragua
spanish-modern
spanish-mexican
spanish-honduras
spanish-guatemala
spanish-el salvador
spanish-ecuador
spanish-dominican republic
spanish-costa rica
spanish-colombia
spanish-chile
spanish-bolivia
spanish-argentina
portuguese-brazilian
norwegian-nynorsk
norwegian-bokmal
norwegian
italian-swiss
irish-english
german-swiss
german-luxembourg
german-lichtenstein
german-austrian
french-swiss
french-luxembourg
french-canadian
french-belgian
english-usa
english-us
english-uk
english-trinidad y tobago
english-south africa
english-nz
english-jamaica
english-ire
english-caribbean
english-can
english-belize
english-aus
english-american
dutch-belgian
chinese-traditional
chinese-singapore
chinese-simplified
chinese-hongkong
chinese
canadian
belgian
australian
american-english
american english
american
Norwegian-Nynorsk
Illegal byte sequence
Directory not empty
Function not implemented
No locks available
Filename too long
Resource deadlock avoided
Result too large
Domain error
Broken pipe
Too many links
Read-only file system
Invalid seek
No space left on device
File too large
Inappropriate I/O control operation
Too many open files
Too many open files in system
Invalid argument
Is a directory
Not a directory
No such device
Improper link
File exists
Resource device
Unknown error
Bad address
Permission denied
Not enough space
Resource temporarily unavailable
No child processes
Bad file descriptor
Exec format error
Arg list too long
No such device or address
Input/output error
Interrupted function call
No such process
No such file or directory
Operation not permitted
No error
Complete Object Locator'
Class Hierarchy Descriptor'
Base Class Array'
Base Class Descriptor at (
Type Descriptor'
`local static thread guard'
`managed vector copy constructor iterator'
`vector vbase copy constructor iterator'
`vector copy constructor iterator'
`dynamic atexit destructor for '
`dynamic initializer for '
`eh vector vbase copy constructor iterator'
`eh vector copy constructor iterator'
`managed vector destructor iterator'
`managed vector constructor iterator'
`placement delete[] closure'
`placement delete closure'
`omni callsig'
delete[]
new[]
`local vftable constructor closure'
`local vftable'
`udt returning'
`copy constructor closure'
`eh vector vbase constructor iterator'
`eh vector destructor iterator'
`eh vector constructor iterator'
`virtual displacement map'
`vector vbase constructor iterator'
`vector destructor iterator'
`vector constructor iterator'
`scalar deleting destructor'
`default constructor closure'
`vector deleting destructor'
`vbase destructor'
`string'
`local static guard'
`typeof'
`vcall'
`vbtable'
`vftable'
operator
delete
__unaligned
__restrict
__ptr64
__eabi
__clrcall
__fastcall
__thiscall
__stdcall
__pascal
__cdecl
__based(
`h`hhh
xppwpp
GetProcessWindowStation
GetUserObjectInformationW
GetLastActivePopup
GetActiveWindow
MessageBoxW
_nextafter
_hypot
1#QNAN
1#SNAN
AddConsoleAliasW
LoadLibraryW
FindFirstVolumeMountPointW
PulseEvent
VirtualAlloc
GetTapePosition
GetLastError
lstrlenA
KERNEL32.dll
PostMessageW
SetWindowsHookA
GetLastInputInfo
GetWindowTextLengthA
DrawEdge
SetMenuInfo
RemoveMenu
CreateCursor
USER32.dll
CoReleaseMarshalData
ole32.dll
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
InterlockedExchange
MultiByteToWideChar
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
EncodePointer
DecodePointer
HeapFree
RaiseException
RtlUnwind
GetCommandLineA
HeapSetInformation
GetStartupInfoW
LCMapStringW
GetCPInfo
HeapAlloc
IsProcessorFeaturePresent
HeapCreate
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
SetLastError
GetCurrentThreadId
GetProcAddress
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
ExitProcess
WriteFile
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetACP
GetOEMCP
IsValidCodePage
GetStringTypeW
GetLocaleInfoW
HeapReAlloc
HeapSize
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
SetFilePointer
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleW
FlushFileBuffers
ReadFile
CreateFileW
CloseHandle
kkJ1\,
Or!?eHP
.?AVbad_alloc@std@@
.?AVexception@std@@
.?AVruntime_error@std@@
.?AVfacet@locale@std@@
.?AUctype_base@std@@
.?AVios_base@std@@
.?AV?$_Iosb@H@std@@
.?AV?$basic_ostream@DU?$char_traits@D@std@@@std@@
.?AV?$basic_ios@DU?$char_traits@D@std@@@std@@
.?AV?$basic_istream@DU?$char_traits@D@std@@@std@@
.?AV?$basic_iostream@DU?$char_traits@D@std@@@std@@
.?AV?$ctype@D@std@@
.?AVsystem_error@std@@
.?AVfailure@ios_base@std@@
.?AV?$basic_streambuf@DU?$char_traits@D@std@@@std@@
.?AV?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@
.?AV?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@
.?AV?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@
.?AVbad_cast@std@@
.?AV?$numpunct@D@std@@
.?AV_Locimp@locale@std@@
.?AVerror_category@std@@
.?AV_Generic_error_category@std@@
.?AV_Iostream_error_category@std@@
.?AV_System_error_category@std@@
.?AVlogic_error@std@@
.?AVlength_error@std@@
.?AVout_of_range@std@@
Copyright (c) 1992-2004 by P.J. Plauger, licensed by Dinkumware, Ltd. ALL RIGHTS RESERVED.
.?AVtype_info@@
.?AVbad_exception@std@@
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
Ix@oGAkU'9p|B
~QCv)/&D(
uuvHMXB
9;5SM]=];Z] T7aZ%]g']
?Zd;On
7?3=Bz
;1az?aUY~S|
D?$?9'
*?}d|FU>c{
zc%C1<!8G
u7.:3q
#2IZ9W
,%I-64OSk%Y
#CYp~HVcnB-JF
|xPKvbr
zDXkw?;Tq,X
ohQ@T]
#*5.v|
^oE:5^
Mvv=yK"XV
5zD.b$B
,_os1y"
.XypnDU91Nt
^9;$[>\
e>Zt:iw\[O
^! ae2
(P$,Pq<Je
;DH<PBe=W
@A<CYr`Nc'z
jMw[x>Z9$tAE8
>aj\J(
H{,S]%
HznLC&]EiHbw
_Bx_nW
jr0(H[
V$$UBg%x&h
z8Ogs)
M}%_f]
&+?1Bgrh
!_7 YU
a{SLd07tUY]KL
#v|B,}c
UDOe!Q
F/"Uejh=
_2yatG
{3c&|N
Ot#7jVQ3:
ke7Xt2$Z4
^,8~-+y
eNOP/5r
qw0Myut-
9!!yJ<3cxv
mzBCK0 4}
Kf8z+cm -KA
jiP/WY9
TY)e%h#
Q-fY{^a
,<)Aa}
+~nB-P
`Qi=86pda$?.kjcR+c
[4Et/~\C
;xO+^}
`! A
a^$X<Yp
q`A.BC
'{stR|
GMow:N2N.E)BwF7
&n_Sx}
_4\ut\8@
fC?;>Q _
>?aj'R}P'
%9Ji=>|?FX_&[
:3{tbiSh
ae2Z8Z
j]dWFMe
FPAUf#
YsM;s^vO
lN$0M\
O)1aJ!
qksMi
IN$2R6,M
~"F2A)
qC)}Kltt
{TH;S+
{Z#Ome\_[
ca%^=;X?lF
:G{BWvB#P
yBVehW~W9
G0r6i:
-<UUO4^
dLeHm4\IRq
8{AYo'|/T
eE&U>|]
w,~?0h
RTH'$G
rnneK;A5FF
&k}g?J<
whuHpWf:H
k|FB1)ee
E|bfriY
2r ]h
OJy! |_bze*
;eW7D">1
@NjkAd
=Gw"<Xzx
!W1NuHy
Ny&}"By*3I"
sp'8(u
, Qx8j:a?y
Q_T8PoTRRv
rxd&P:[.<
:[tk7c%gk
oFt?yOM
ICyl|;@
SH2/HO
DngMu%
pwHRx8~U
Z%$h( 1cCS%Z+
&Z7y;{
yahAMIl%b??E
7_=-=W&gJ7#
.q'kjE
jZ1@Yn3+wWep{%N*
"V\ W^#s
'e~_-t
ke}:TTaR|lu
JtPo8(
sk3~hyO-/
cq.Z6#ye&
t|OM5f
5<t'e\TW
p5K^wNE
t: fh{
D0uEs7
3[u/@-
>ISt%]pWl#i
E0Y-+p
DH*H p
[Yr4yLj&+
u=e j/
kM:09q
[Q\(f9
JE PHPd
2lR,[u
CYV;+h8
Muzu#/
eOMt2%$}&
G@3h|v
.l%hm9
mkN?\*m
T/VL9|:
u%K`cR'u
8piweuQ
=8P!H&S
t">/aCO-|
4=pZh|4(c'{
kR"dAJ
IPTh;foi2
|<d\f3
38g[Xdx
d7%F?.Y"
QcNV{EK
;X+kjS)
a0'.;b
Z[-<ThN}
BjD^QHI#
L/buN-Dfb8!LV
!KjOPrO*T
S\^|Ts
.}hD_ch4D
>7e`Xk
0Fy0YK
K%X1JQ
>59d$N
$1YN9|3q
KS&;i%+C6e}XR
PVkaZ?
dIH8mt
=4p[sEtNh
XX[ig+vGS}
eGWlke/
$B*Qq8o
YIK2"I6
62N|vJ*
LeZn?p
^V|s!`8q4
",sCu+_&~B!x
RTKlH*V2JfR
O>O=CE
y(Jz3p6
%Je)4`S_kFNg#{%gxC
'%GB7AI^q
-A&<js
jB-{30!S
s,A>;V
T;pMtm5Utb
I-"u;qGGs%kB
("E`|m
oyPZ7#
p;*W>b
}#}@#t
)EDMc%)pW^)}qV+n
2u[L{*'
ky4rqLO
_L%Jx(@
nb!Oal6u3s
m^Tp+aVp
jyT;^b|c9O{nO7..
,5&@ i/K
/S7#VZ
8'lbN}-}7v:
nr^5}N
1bZT)3:V`
lZ\lOZ;G
eR Jvu~
`$u:=}^\#Y`?;4
NQH/o6U(gJ:
(+\Fg`k
zWx&@O{o
'xh^f1)
UN628z06
w&q?a6Mh|~,tR
xfOM3?
%<.md+8
?YAzm.y
2NC:BB&
`Rv$Wgb
(#\MV)
ATpo@3s2
5cg:70{
YgZ_xQGTDWhNl{$!a8^
,tKNF
BFA[D5-)tm
PG"'G/v
LD[5D<
T# T.
z,zPa{)=
6B3ST{UDLj&c_$$
BM*E7qB
P$cr%<
9VS#J"!1EmH|q{w
EH_T/8/3tb,Qz
L'-+ N91n&AKE0!wQ?
8iZf*p\+kOK
m|CpWu2
1)Di?KJH
7aYN>~.SAtu
BqD5RbRG:*l
y--`3f
nr; 9hDSK
Nf2">v"lQ[[
nHewOE
]Dps6+(nIN|A!h(c%
sY6'EC{Q}
ZnN0To
6nIh6wnLk.'_d
.kwdFOpx`I
LNH/h+DzB?
*xYlHI
9Xm;Y3
btYG_B6Y
k#g=B,1n
Ms|iCO?
730P'*)#<
x9oF{P-
4YaU$(\o
NH?'<LE0m|f
Qz3+$
WPo+GWJ~Z:9Ffc}
Po\YM;4i|#~\tkt>g
b#!hJ9m?rCt
G2%F9Xe
qM2=!qB
24`v{]
ZJ:AY=y
(x"`IH
@&1g{gfZM
5>t~y^ga,
S\Sp3Z+K
-bAjgCYKC
ptYB6\1{y
K?xs^Kt8bng
'3y;}!
9H<n.61I>eL
Lcg\cy]Ih
l{FtYooOY
Mz!?Z2
K!KDzB
#=x9w@
9slN7M
ttM7_+m
6WFwq[ %8hRo(
GlJhel;|
I&4?tg0
Z8@1R?
<:1r@}=-{aT_
q6(*j,<
"<'xt(
R>I&)
zx[u#1o['
M'/nH=
I}j%|:< 2"c
!8)O(m0SK
A]7F8KQl0W6
~cwMYP
T$_V7,
LYVjNc
xqICS&z5p
sTSxS4
kVZo"~
<=`ZTN6@"&k
@'f4vY
gu6ASu
8WNz!6
#Ebi#P+):9
gT;.Z|=y_
1ATbEdRN;ua~ar't
To!eZqp)1iU
gOkDa2yp(
~`7R$*
I++=\OP.QDN(
z$?bz)=Gr
ACR,RxM
BJs5N-/#S\J
bz|,0bJFa
s8)X:~>
!UWC&ua
U?8-aa{
g3=<:rZz
?EDkZJ3kK
21Qh($% ?
drH;$o
'f"Eg
4zsU]nPd
A8,hICma
<vu5Db4,
{ZP4>:B
Dk&;{u^
fG@+p5V
c{qm]"
2!iJh-Pl6'
}Yp6%&t_
`0iH}
(Tc0+xsZ
pOwQX/
&h^U<B
G;H#)c;
`@)Svm/
v/!Vzhkx<
x;Jg>QNDl
;Jft6t{E7^
174f\24BO
DFEV?g`"c&uF
){ffA01
+&%X!juny
@DP_?XM|2I
|v!)nkho|
cpR~p94{
nUe~[8f7Ca
O}@GaeW`oq!Xr`fA s
aa4""X
yy(;("
"f->cJy[
`>._9'1<z
=ew1']
53~aJsc
Bv(8huwn+
"Y<T!t
)|/1#h=P%k?@`H#g
[p<iz+(W|*e
)obiXq{
K* dJ[LQwZ
`IUB@!
R@Rqeu{c
~sq>o0_
6#`4U;
G1`W@/Um
E5-iJ
Zl=wt
~)hxui
v"?g[z!7r%a
eJH=sP
}t0J\@W
r#,!$"vS,Mz55'
b)W4\w$8
~j0n-paLI
83d'B-
~r),._OM
<w5,{:!:.x+5
@,z|G%w
xX0+?~b>h4W"N*Eu'RW
em]Pq?jPr
,ZQS87GH
@l="%Zv|
)nPswU9CHsinUyS
Vvg6J{f
N-aBgJ6
"hDbM+
cKW]e
#|w!`&_e
VR+5+AB0!A58d4
?]^Q/`
#7Vmv$
VhxF"S)
mhn;{8 7<h
zhFA0C
u pstrMx\
DVT_IK$H
v|%I}l}
T(=UO?P9
HK&~b'iFo4Yy
#|Fg[m'
*|6|?]68
k$d]E[q>wmt4=~-$v
.&?GK7
N?|0L:`
5{df"*lB
s`>ru]
%$"?GG,#W
)Er {'
~w7]$9a
.zi#Go
=>,4PTLr
47!w^^)
N!Y;o#"_
g?)us$
C.(\%:U/-]"]C5
d0Gngt
C2Ae&@V
1oN."94|3
SC c+fFX
g0K{AWI%2
?nha@I
DZusToe^@
)u"LDe
&`qJOw
$o$,`3q
&\LDy;D
Mx(m{i.U3;@G6TuuJ
x<G,c\Yb_0C
}&3[G%>>u
Drf;\v
eTT.X4JH
+Ua\jQ
#x1<Zp
6vY8ZDF_
v?~$vxya
3*b+fX+4
IepV\f`w
}{3B:sr
BuWrG0?W
h&Zf"F
+,z(>q}M!I_>:yyGu1
{Atf%&!T
}AQ2TB!
%abNIp
Z0p^>m
Arul#y@ QP
WZ@ds#Cn0'yU
@!($&:}
C8f7RL9
VGo&rSQR
=B6uR@
s@["iw90
.TbrXn
`x9P!Lcc
8m^mu)t
*2c W9l>
'|.*ZY
GJ^yIRr
rZ|~2#m>D
{`i{Mml0,T],X
:ndF!l
^gn-9cpz!>
>:!17})
i",td!
NG!]x(N
}a4_5~eGFH
4/T%[>
:31h'q`@}8
}BdSbU:U
)@_[o:
iux*RG}f
M]_E`l
ph_#zl
MFNL/u
nM&h~@V>wD!f@K
2%&.>)C
cij8 C
2^RR7?
_{Q.$o(X}'
}Debb@
6wL*~a+
6(J@b7
_Ok,ujM^d
g,y}Im
>Zraeqf
Z3=g16~rw$P;&(
Ihn\N\l#
*6nC,}gz\oQ
SFwki:;O~
RYXr=4s
:;FG.I
l.bns`f$Xt)g
!5zMk &zV_
cqsK,-~l0u
c[q@~=_ x
xFvVY
Rmtr@8k>U
kVpIT@0@*
g%T2D`
km5TO~F
Hy!;QY
`qI;+7
oyfs>;?
L$I7I2p
M@b{g}
?hwW:C
m[F#4mr=;a26
\ii4+DXl
|7+Mg_$C1[~hj
%JO,=9#u
=fld=
MHs[|`.W
AyXM1ITO
gY}J$cu
sB8KR}g5,
kMb+\w:
M_0@V6
).9$dU
&s/fR_k^dLG9
xwQBay(?]
Q#rZVm/F,KM
ds?8(,
}owEU5#[
J_=p6^a
'F5rKaSm*
Yxa,4";vM
:[^Wn%i"H@k;fS
mdHVB,y9f
~-S| }
S6Om8h.KdIy`
haIIU`~ z#0z
=nj'g]N
zqsp;CX[x`
`1d)"g
HcCXsuka
.80;og
D&/vFCcje
$a:7Lz&
f#HxgF
6)l(#R%[x76
dJ`=<p
-(kHU$
+t?w/$m-'lI
j3B\/?`
%"\\y?gH
V(;KR?O
UN$+w+|
i.1ib*+
w@Q/\<FN;b
-'.88y
$\"(=sVpoac
800<Q
!0@YY@q
{(9P[
{C-Gtzh'&%I
O}`n6 *BH-z
`/3|GUy+B'
K|6#?>TOk
g|=uU5rv
SKX$S+:OQ
oa,.Wz^Z
AkOqO0N#B3
VMDOCzu1
O'rYwb
7.xg2c
e(;E^`"lW
|(mAugBZo7H:
<(;NWbL<N
%7MT,Jd=Pm[pe
}XVY(bQL
C !M4|Q
b3L#^.$
{Y b7XaXx
apiin:$(x:]MM$
('kL)x2.{gMF
>h(>[22\s
T`yU6t
79*zQnu
$y<bNE"QaOY
VU4!%
QmCi_W#kq
qo`M:9
,hdgkn0r,tFg4$0
/(6F.$uKhE=d
$5OyKUXPc
fw*Xpfq
q:G<Syr! O.
vKr#`5
ai*I[j
X|iLu5
9(>(Mp
C!hatVB`K
Db-ID+2O1S?}zP\
mVCDz;v3d
~GDw<R*
.hJCvpNp
2QsRGD
D;4:ZNs$?Q
bi`mYyt
N,+eN}
5?T uTY
JCELnlrV\@yFC"QbCJ
q,D>d9
9c 1M^Ee
\b0|W-tW+
*F@{Cd
wgI_M*R
bk6&<wX
#8[Xamf
KIsr*H
0`%}]ZE;[-
$Ma(h@tA=!rs
G7M$1N
9_KFPiK,d-Z60
Hr{\.fe
Dsk9'0
4\zo%W
s?y^yf
i]>Dk8TRF
ZA]-k^dU
bSragz$=
`iKl)UO3mM
oY~\7.
|(,IA@d?A\{o
>r2\ V
#=J\~vG|f5KY
?-(Yi,
8`=Q+H"WLi9f
3^F) E7WZ
2ks5FY
7F1"jp
~[J-I0G'.(=B+
X9v:yq:eM,
jE=eAT
lI g\S.}~_
3f0A2>
a#hk|7-'_f
`Y,uc(
}]l^EI
_}12Z)AIqzfQ/
c(w7%396pD?
ceK*{:*E
b9qf)P
6FXpC)
}>wSVb
)bW5Z9
kmm>S%
"^%bBB@J$-K)u{i
>z6>y+
xVv40&
'1@nXbQ
T}q8eGFmq#'&/$A@2A
n['?MATH
j)-g4kK
<5-M4Ov{J\
xego[iIbG0
HOKZM|
8*orc*
qE8bK"X
15}9"0BJY
I#=(~Z Kp
I%V#N{C8d
Ut8"qC
y|%FhL
uJAmRk
&d`?8%
K Qb(M`<
Y:|C9pus@O_l
3bH]*%9W+
Py,9i(w;^;-Jh^<y
vj9R!7s>
V~qg%@
C~fIFV*5uQ;]2=
u|muFHk
dO<6,w
J:8x%']
e#96~O
{<n*CwRdkrQ|1}
r#,LGM
uTnR2SvSHH
#U)|k1@
a~\nRi
C?Px:uC7`
*v+`Dr;t
D6xr\?Wf
KYB12F
y#?z;a?ax7
?9{wi|
bmhE1EfXW
V!NP/kp
%FGtl@
nB#~)j$f
%*{p{J|35LM
J]j#?]?
Fht~|(H
B5x{)K
aLqmr>@O?5
#nU#Xq4\
"D,,'5
g53SS/yD-
cSQ@n5^#@/)D
Z}WAc?;Sg_W
h+"$:E&f
r2Z'/SY3%
^>(#=>
(oykO
8%(4`|
;Wc8}e5P6ZQ4AyMj `2){vD
u>a3[;.:)9K.
cpA{~#MD
kb1;"
(=\8f9
^YsXop]g7HL
}""q}sEf
}tzQb!~
&Jx#@r
X>nMdI^
+R]G}!
C%Fo]n
q'A:^gmkV.
KB)VFsj
Rc"/MXP
u^C^KRX]^
;Owdhr9s-W
$!ywI"6
Q^)}5~|
O$.m?MJ
?g9di4)U+
zb"6Kn\
\O0y,.;);
LA)D[*
CJH7J\\
RzvKjw
5_hDe<
i^m4RX
>Ez8]YNWN
d_"9P&k9>7
A!12y"w#Sd
Yow)jGic
h5n4Ks_
W3@R`x
gF\?I.Y
]4ES.c
}9,/`k
!TV`l#Ps?iSfTJ
r|a>u#Z6c
lNEE{K
ir.ni)('
RBvi?rW
(E2\'K
8%Hq6)rL
!<rHSO
}:H-g[y2(
q<t;0!d{
w^bbB+)'
\.wn4k>);A
lA\i&Q
MOiQB?f/
O+o~Oo
u,){~_
OPx<p1Y
YtEm]z
~n:LvLGxYf
2#@C=a{X
%6V/}Ruf
!h}Bl:gLtxZ/yoV
p*..r*OUr
3@sPad
6C:'?}hn
&01x 7
Q<7|c\QJ2
u6vss2|~n
qrY_>'Z
SRS(c5
D,fv** ;
Cb">+%M#
Lk2{5N1]#m
P97zn0
sm/w`.
3jJtU C
IYh,rS90K2^F);L
C8F,5d
EuZnJ
t<e-Q-`5
#[w,@z
AUgmsp
yy#^@ip]
9;\-^
%Y/K{E
=FItMpR
2-n``%
bf3j?F0
QyYFQ(Eht
wZJm>O
e4 9XM2/~}T^J<
yU[1qm
8g:c?'
'~=DN!>/
8*"(@lS9W
?z6UfH}
jfkG/w
`8tBPm
@uC0OTUh
q<<N>aN{
uM)"S
Vjt.Lr
@fr\Bzrh+
P\AOb2F
r5ov4*
5jcO#'B/ENRQQR
3L mhL`W]
_4::YoY
O+D)#D%
,&sFp1;oS1\
@T+(5a
XTkI&W;
cIU50
tb;uwtleA%
K@=eQrVWLr
+v"%a$
RKzq5=
`wyjuK[
b__3*X
AkqVna
g)00,F*
\O$}'>
ow;0LBK5
Dp<7Wp
}(naxCIv
mz|zRUj
FU?R3aT
)kLd!e,*Q
&,l|Qk
{)?_py/`F
O$3iB1E7
M.?i5ghKZ8
]X'APf4
xPZ`zE
g\-RL]i
~L:9C`"[sTFd
Y(.R2C
k=A1k4
K*=-:;
Bx(R$q
]/4Qzy@2[
+5+AqV
Vc{WD[V
kb2\_Yf
P=Rqp
QZ'!&F)pog^5o
ZE{7mg<<{
H)#-B'i%
*aAx*>
b>G7L
~?W,\)+
#|S%u$
>;r6!=a4gn-1
8|-Uj
:)qPsqV{MY
@;hpE ae
pnwv)S
R.SQ6g&
7k{(Y(>
8=77w~;
`U|8%Ii
^J)#P-3Y
F$srJqeb1/CK
"'cOBk
LOJFP xg
s9%LF?
hIrPNsE
u@".D#
8Dwls=p2
<z}QANOn<h
$oa^yZD_y$>]^WT//-A
C$uc[sX,
RUuT(e)sU7Cg(
|c5J6L9*
4ru0'U
tn@-6&
syG}MUh
&edm^`
z7efT,qh
WdGE[]
4U<=JD
S)hI*(C1R
TZo5z1t{nD '
Gke;L+
+lW'|'
Zpj),*"gc0
k}] g3G/
cWMl_H
M}\.zIy
>;7W.Z
^>c$wqKcz
TKj!c`
Oh;o~B
r>'sf,r
-T}-_'
E%_=YsU
SH%]_{9
ZGb<2F
$7'+cmd
xzn,K{?
t8Qz0
Xq*g'an
I}D)vEQVq
uA^KD"D{"
-f&ImaAk
aIjWV|
iUF9c/
dsyPQaz@R Tv{f
4$M:lfXD
S/eYx<\g]zo.4D"g
P\Z$4iq
RzMd0|
4#g"S(L@!
\o$`0~2G/j$
E[{jJri
H`+Tp"SuC;k?wUK
=b\tGb!-Vyo$T
JGwNNyM=
Hyq9/'7y#EW
TmTjgf2 ,
xF-Lcs/`9
ZO~-It=
A{ShoyuE
C$PO<KJ_
<M<\W^
\q,?z8
0vg>C^RhF/YW
O.u=nr
;;wKP\
l5l`(^2o'`
P\'Y,oim
dDnRFbY<@
]K';nd|
YpP0m.mZ
lZO2E%
~G%]Nr[
3}&,/Oi
3]l>isM
9*D|6Nq
x.nu^E9
Y;iJWP
h:53j%r77M!$eFQ'
N)3TxMP
G:}bj#
2j0|^j
"qvSuk]
i'!Q<.8h[
Ut^0G)r5
Gi~`cF"+CV
mw6AnlSa
\\.M!i=
B'^;V+Q]%u
ySQJ}p%Q
kmLtKX
[dx)a~Nk5^
p8b\R!/R
UAb+XNC3y
P"t)HAj`
&LT$|jE
!+*9)jMX4m
yt|q7E
aYpoR}K
.4C1t7*<GQ@
+4Iyy{uJB~
v_eesL
*s[{m;'9>W[S4mT)~%
LG:l"f8KpIz
V~X-'h{d<oP:bZ
|D)a@;y-
FaI2og,B
b[Be)*
oRR&Zu
csHUb1A
O~L]T#n-`S
OA%PR7
`w@+d,S
XH|PH2a-
rfsa=,6
}/t!v>|
S3ij<#IFm;
O0o#O<`"
=PB:9aT
%.cC`]
~'_`_AG
No\H}`A.)a|\R
&<W!W;"
dg<NUPV7vXy<
J.yLdT'uJy(t
4yQ].5
{oBs'rrdm\
'o7jmH
\gD:^}
!rWOJbH(@J
cTgk=SG
8s/Z:vl
;J1%j
~),%>1u,
Y!9O!~
#!=#)#?1O
B$hqGmX
(Hf'B6R
uwa4|cVmVF}2"k
m>bj8>P8
ocPZ'\7
]6T]7U2y>D
Kq'JR+f
.7+3m>q
L%T}G6/9
T`6IJ6{EA
a`|Ur/rU3E~
L,X9B,G
DcJme.h(VUz9F<UG
2dPhj<+
-V&%*yMIL>
4(n,U.S
ws/kTK^
oW%")Cec
`Q\U%QB
;=2GbqpW
OHJ~~e
{v />c7$
T-SEmD
N(#75f{'w
4bI+.'bm
3=ETW8Pz8_g
cu29j>
'3jB`W
j>lU[g?
-+5P'L&&
.N>g~%A'
'Zos$(9NeiW,XM&
=r]X4i;5$LIF
1a*L-$
W U:].
7z>7k1yB1k
r{Nn83kO`yxV
im,Yz:<
jp1FD,
PjF^ "H
xoC#"f
j,~87K
.:guRj7
-$@$6ax
R,EQP&{
#~>Bhb
<?W"Y
DQ<lCR|UR^{@/0Ex+
gC,C=u@
<:27x!D
(j/MZJF>
@D&rZwEFb#
spm38/Z
@b8}IV3n
\l6^Z
J@^@zRE
^h\TOYf-
z~KChB}X=
"\GkYi
&G\&fB
TlB{F>i
#=S0T4@
4jO5O;Q$4Zi^v}8kR
Lm;0=e}
VVJAT5T|]B;=*!
IFsSc
f*gUgkn<%
[^XCNa,IkP
+ \:/AI07
t6{Z3vy
{[02IS0
CyrIq^PCg}*
adhtf)5VN:: M
"71f{}3j\
(Y5LH^iJ UP
, SzSN
T[;[887j
hLu^>p
)`?BPN4
LSc,B0k/95
YXZFCs=
.\AiKm&g
?5IMR+
fN<hkV3
9*5k@asFI
KtsCc""j*r
<b!0na$@T
/k(Ua#
*fq7f_
N5 tw1xJc`p
HoCh9\
LL,H+-h
rDM\~H
~vzY.84~<p[c
'aDRb_>
3k_#7Ld
zaU/5"W3
Vs;kMRp
d1W!*d\
{zj5#:
EA&uJ^KR
Z]?T[ZrU
AsxGrS
t_'N_@Nv'{5^8
$5u./k
PH[oG4}
=jC9We"}l
WF}jB}:_
BLqx)#
s]ic+S
6[~yZj_jB&(
ugP;u!38D~
Y]r#-wk^#
#v6$nIh
V20#2a
{ay$V*
+!&'-H
&[|{fsB]~
aRtBhq(Db
<f3WhFavNGfyBy
_D'mqkI-
&\F?FG
+nTQtQnt
BpeRAwym'mQ
kx<]4
g)k7A90q&jYb
\jY27xgUYrEb
,+`z_W
?pCWo4?@6Q(v~R
:]kN3Us"t
+l,#0G*9[
B?"^qQ
a\Q:7=Lgn}
Fq?}eR]
n=ll~54:!F^9w4
( s;!B
XK;1D0
P#%C#\rKIA`})+
63}bmZL
P OiiU.
.*e~{{]
d2q00z
rE)HV@
KJ`W9n4.CI
]W%FNDZ
H|uHpaS
2dXS<=
{F|?\n9
;`?wtH=[F\qBDT
1kI&;V\
ii,?1x^lrDb{
VP,PIG,CXNo
hbX-?j
"?#g~Kx)yO1
~gpw-AYES
-DAi%YP
*kB8g5ePN(
=Gg]I=
o$m:. X]>}K/S>I`
@&HMAe-F5
{Y:'.Dv{
+"CmYbe
`sk^|i
p\*DJt
pO}$[B:U,@!8
-AHM;xea
4F.k{r[{UZ
?ztMH[Wc
9p50+{(a
B]#h6:
dagTWqs|z
o\~^@6pu[gZ.+2QVYC.3)g<e
7}qMxCO
V~.!A&~
ysJ8CPz6
5o"Yw-
v<7yG=>|&
z|#YV_L
5-(&%C
VgXZ'o
2R^Mt6!^
tn,j +
*(eul: N0m5v@+
^r?`a=
WFTiE7qUXsH
'txBu8c
eTkb::~P f
,"{4H
K8a/cKEqE
T_4tq4
g=%B<v
+%?a~l
K#f}?K1))
Iw_OuC?S;2
v&x<d8
1wN7"X
N&MO+%
u3,N6@E3@h8
IV _Ebfh:}
JGCz4s5w2DKI~
Dp?w9(o6o
t~VhTW54R
+!N{NM"o
=<71r8i
.t7iuVX
bHWn4(6t |S
&/S"Mn
DICKK"
:6QqVvV
@/:8y[
JFp,~A
MpCC1^]q
Q0kN1$hJa
*HX+u,<|
8X'hRrdO
Q|X7,M
TghyBH>
rHl8-7K
]I'-IV
F:{?:>xoyyGG;yjLQYlanc
9SsI* @%rfMk>%
,NG<08
I$=l+o:he
5Sh|iNFjHc$
6-{~?Y&=?O
NEGkEu6
Z:an5IH.mLcb
GRnkx9|
0CUkD2
tO^\b!
M7@EOG&;.U
O:AVd>
\DuS/Z
&."Ugd
"DMPTB
r]$e*]'
kTmpo?<
)v7hj$&
NOr8Lv;U
7z_C_#
r^=x/T
)-qi&\M
EKn {-Ux
_68)]34f,'32
*zreiW
&1fH?X
xxlJ'_
&@a49xXR@+p
w?;r`o
Xiu]VoN@"
Q"rlU1
m_pfw/Ot(02pK
{'pZ/|
~cE'Uuk> G
C:83u+a
duMpev[
+q?aMG(mkuV#J4
q0.Il72
_-E-8V
O,^'%0;GO
C)+`%~
dLe&+y1
\simJ8
CC:>[@V]W{
1-36&>w!
{M7bH0/ Y
3=PL~|vy
wpO;5f{E
r]mk?4C
"sT*?_;2LCy2
Ko(G0ZL[q
XP2u8X
Hn}f*R#
&gPWM4,l${AH(`cI^I;:*
Tr@m7N L|(s
aBdP1WTQVMP
u4NN7)
Ete6N-h)E
A211H?S
UJtD,:=7&wt iB$?5a
L$p+c4My-
7P/*RU'
yg4-Da,
Yitr,CL7F
Fa/0hCO
T]>Q%`A
GzVa~d!
9DwY`V
/d^/yKhQ^
|<.D$ *d?RT
rSWtze
vr[H@a!')_iYFsco
FRfqT;4
v3y;LUoyyvi?
WLG!UO6t$N
js9aoYV
|?AHEIt
ek~i55l/`nX=Fb|
tsynGDO|P
nu*4}I+Edg
!C^UUp
'*rRi#F
c.5kc_
.Kr?VM
5\C+gXAbKll[[
$B[RWd`x TXn&
nSf8nU7vaS[
LMGf!zZ%
v(4SRHS0tVHxo5
Ug|z7sQ
*g(aO;
#YoTYB
K5HUpF.v
0a,$Br}xl
R.+$[7o
4Va @'
pXNpr$>g^
jtu'xN*
3A8czv
?<2;~G!b?
_.,j{A
s^$z#<8}6A'}
'Fj_Ay
DRbekTDM2
Vy^,`E[?,<eD
C}UBu'
SBGg:4
G"]fZ!
%Je16%Y Pq
Lnzyrj.
Cgo"GI
W{7kL[
y\B|9#E
>XgK6wQ\a
T_=((+
]Wov'a
hhV)Ws
3/]J"A{X$]
ebYt<&3,p
TG51|^x(
YtM.M~fp7ye
/Z4Ayl]R
/Rp|*us/Wz
n/#`Wot
4s>xHTrhfu
-iE0mfSW?
$:0\7v!$a%
FG8sy[(6
}IRZC/MK`
5s/W~P
lWA!d_
U8<Oj5V~
%K_*`2VW2c
PTFsJB
@4CKm*Mu$
h}>M5t(P
wCWN<.=q
#!k[0A6Y
:*O4V\
\vLeE%C2T!\
.&.\`}
Nfo~c1
w")Epv
K0z>Nl
l}PJpGmj
=<}|4[
/_(zL'g{
1WoA@EY}K5i
8cw|g]y
bA!mX/
_;1!;*}
gUY wx
(]9vn=~
\"m-4(@
,Yql`.GH)#uY
YbR`n!B+
ib0I1&
B9ePT\
lWrW+H:j
EZlO~dBT
@q9o'<CcXo
KYmyTK
otw2W`
uhV{Z-m_
cK\5\D'
O<)NGP
eyoF)peRl'U
lLZ$:j?%e
RNe}sIMf} '2;PM
sw*feI
!uVO<v
q[k""XH<3u
+4*kJy
~9vXHPFX+gqKEB
(1}+dh
Si@U`-
~ihWVb
$4:*8)
@O/Z@d
)S_Li{
mCv}5Aq3$?-[/
dFZN-V
<<aK>N},#
c /hd1m\`
aq@F)Sbi
C0N5i:xm
[oIPz%eL)-w
2Pr.!yW
\{~t%y
6a;p#-PgQj
@iSC<7
F5o](qvR
=-,i>MY9
G$K&%M
`^G3De
5qj|w4bd8
[~TPyT$~zb!`
#nVMo\k
rv=G8dS
_#%aMq5
&jfm9x!
nQ?/nc
SCq|?GGP
D[iP@Q
4tw]sO
XAvS!s
LS0?}G%ut>myfF(<5
z+[?Sk
!w#kx
=be@u*
4uR(LO
PSIq.+SXI
416z!P
Dw2+uw
bqwhbL
O1ca8_mF|
(pVS(^BF
b 5n_7E
TW<N<n
2X6*sYl
PjHke:0
}B^2(vN
^\v6Qe%
_J9SsVG
zP8MC_$
m[r7?;
iAVA^\o
Hwh%'82%
Z(XCZq
5FWCuL@4#/Lg
&,ww0l}
_p}_>RgE4/6
y'am^{7J
I{HW(F1
8P&<%ZF
B&8KM5=(wjP
qZ;5jN
]SK#>3Dh
E_BE{3 QS
-5V#h@(I
+cGN}n(/Oju
yVf52z@x[
H.{<M9
,pTc#wg
|PZ+`CdodZ~C
3`0$cUa
a6^vl'
}Z8na$rg(lbW
C{9+0[`:`TWpi
^GoDeD+[v.Kwvh
w i=S1
h/^PI(N
^YP-<8/k
jr9HR/
w{$M;A$
?qGrD-d
{iC /:X(IMT
`KoB]7*q+-8_
udb_Odj~
"4yuZ
(|cvsL
%p++J.f
5VLwM
R=vRLL 8_O
F}vVx&
!G*?n&j
r*N7@%^}/:'E
./@t.R
gE'mWd_
u2 l>qBX|
]llw~>maB#
Tl#Tmai
OV7Y\5dIBu"
AHiX<U
SkI!]Chi
q`>28]f
]SU;`Bu
bM}4!'u1S7#
@-Ur21v
k!K NN
&WM$/:
L;6m>7`>8
q4H%PH
-i1*nb
SgtGh}X
!Al$am
""}K;$|6
@PtWvC
Q/`;}1'
})}YZ#^Lzh4
j4HYl*G-
g9xYspd
Rg 4$x
cJlh!d)%-KGU{
p]}|b31qtHJNk!(
,^M'LB*
wY<bWt<$
spmik7-3w\Jv6l'brR&
3<)A`R
c?\hXMtD
6k`*&8j
7o8@HO7
)$ev9WvIQV
I2aFJW$|
6ls/o`S
^_U4|[-yB
|(0IW^gQlRllsyf
qZdTU$
R)vJ=gdo>0
29) )N
w,aYxA
7N4cm17MCt
m*I*%LV'
q_1ho"C
_:ODr.
R#{H$1E`
]hh*,p~E
cG#BA:)
x3E:KK
"\C_RV#^$NuWE.T
{m>E'ZM
<4j,}g
k80%8SMwWn
<r4w$x<9wlfcDJDvr\
(`OSp2&
g7b6_sTU`
c?6qPz6
9F.JWoS
dH=5c\p
xxQon*
a:%6{=
*c#S^6
k]!xCH_
Mj$xkP]
gfM~qMB
QOd|9K
k^1%uDry
0u*/S&H L
1s.dikrF#}r7
\{O%Tk
\b/|L(1
~hBb;lSLnW#M[z87Dg b?+d~IEsD
U7eR/K
kit?SNBJ
f3ix&IuZRZ
3St9q929rpEPpvk
<Qak/`g
+\!;.Rl
}~s\}{
5uKbkpL
G^&^MSI^G
(-=hc=
kW.v@)
QlQW/sgvD;O%
8NI4O^
,k`k( tY
9#Mp?m&
7eZ?.[H
2cigDp5xt7
$ |^/0
e{p gFP4O
Q@&nl ;$X
DGUg39`Yh
>{cB8/
dd:X{}-qu\
gb1 WCB
Kejs/#
;s__FV3
dBz@{DoQK_x
LCp(r0
UlqIjq
&;#HY;
s>~[UL:_aG\
?+$ .,
^aa:Wv
g4%@XK
iM;|<2
hBJSuQ,>.8W>g\3h?m[
''L`0nI
dk$B3N
9*)PXn
9HIbka9p
&GSt?j%
S=f3jK
b;?-\v1(
>6ad@ef
y^JQ?0-|;"Fk
hDww-GA
eTA<O%9WwkcZ
$?UD>h5k(vOF
]q@[HSI
Hd@"%l*
nrh>]h;Vn
jdyJn
tQQNMZZ
Endc .i/
g.+]9XI
x=kKB0BVrL.
olYf1-4
4weOv2
',UfI(\4%D
$ /D?F6
Q|0:l:
ozC$u\
wt4'J$+Z'^
Q.\.D8
K8S~-m}
NDHL/o
o)d$YDc0$Q
0=w?)Jr
nD0@5%M*#4Ptp
L_V*P
25iN&1}k6
E iqaw
:jk`/P
rZMNx6c^E
Y4T3U%#
o]_A(XY`
J"VJfdC
a^l[97ep<v
T-%{}n/3y'
]ocuWE/$!6
4Cthme*f5.
&*e,`QG
3Q2-`*
53-JaQWIOx
T#gNFVbs7!
Onf9i5Z:Ah
jmEb>g
OV9VN|tQTQ\W08s(U
o;`oWW
$qTYZw!ln"`Z
[%V&+H+
Y?s(|w
6zKO[&
3^qmr#A!
(=Ef>.&X
1u!"vO
`PF@#pZ8P5re
8VDOvtw1sl
mvXF0WO
;yvq1G
cX3=!x56&B
.)c8@\
z#}a63lv
z+d3;<QW6$
Pm{((x
%77]\a
yo'~e1
1/C9B(afwhk
(6OlQ#co]
b/+xz*KmbF_fSqIhQK/zO
%}wHbS[aa
.!5dou
Hy4Cbr
|$mCj6P
4vA/(N^Ug]
V+RhB\e
$IrrI?-u
z#/JSa
DKXz;]hO
%"V8sm
|OlX<K|)9gBD
f.XpRb
<]"&roxH7
wfxLqn_2
uS'?dC
aEUC)mw
Ojj^A_mri\w
o!>U/TNNgx}K)]s.^^E-w
XBaSXm
||"kuX_$BzSB.f1-!
(nf;-)k_]^|m$
$.g0>OL5.
GcGFU-]%2
Rij.Kg&d&]U
*A#;3%$
/vp42!SD
n(d/6/
-,N)Nx
105fL<r6
:OXPDNYW
-Eg?K
`?Dc)D*
FNT$GSAx
cHy&:5Uf/jorUQAqK3>
QGh+8#(
F^i0N6
|_\[A1
Lx8IOH
Y"|/nI2Fz*]9%
TwTQWK
2a;Mp
/POpGH
_ht_eaqf
Ju?o&sVccQno
l_w?b}
C\O@74/WN+
6\yP3
{=kb$=^ok6UDC^!G
I|01 }
.PcNc@g
.GR)Nv
~.ibovu4
<3K(jj
V*":;(j
R|DE%$Q4q
/4kssi$
A\_3e{m~;
7}o>)_
54EjyNS.(e
7N1K`!J~XnXEGmDa+O
.c__I9
>F83wz
z?IDkx qx
=!@Cc;k<u
`\\%m_I}5
K:h`(#l-
!wyyHb42NMY>>&
1/vw'
~-&9}\
_BRk<Uh
Qwh]Tj
{4'?7z+
TH(qQ(
e~Sf$>`
G:OJZ?H
?r~{M"
rWo,vMd8g
]Zmb#|
sq+-E)4
phSFxr
OltO(E |`Sf
]~MbYZ
~J/@6ZUPBlOiZ|t+Xh=-
w3t$y/%
fn`CEk
PBlmO%
rDl8Ce(JNx:
F^IRa{Q
\/)^<QW
919Hn;+qJ
A"GFnnz&CQ
#Mr#+\jc
u9@E*Af
89llN.x
Sek#|J
mh/fTJ\bU
;T~%e>VU6
SzyD0F}39
6+IC@y
es2>4-[h
33ot@tRW
kdpV{0}xx
q2\>jw?
Ug/s7wF8
hPk`.(5
sQ&7NX9?7/b?)
L/X|L`("
[NW*hr
$Av&E$)zb
-c6V2#2
mrcQG<3p\P
>F$0>
.dVa]l
gDnG=[
vsY%%Ho%,?6w!{
L<=vX$xpN|LR
I(~g5!K
-UOoP_x
y)1:,m
{Lk,sFk
p4v'\B
?`(q[C{66oV
u'?tg[uF^8
!B"Rhk6$+qJ+55eC<g
#~1pO53)'P
T)^~!T
p/!S:|
"4_=XEY
(JO(=2t+ n7Aym$
x6@gLa>@9|1P
2c;$B1H
URU*Dp38*
rzH9SK
APJ#{Z!1
k9e4qQ"
9`apZq?+vG
<|_Wlqt
/#{h,/
LY@U *
|i_pgEZ2pZjMoo
&mWPq'|l*
u%eHrsC
snmv*y
o-;5-q
^}W|OLz
/@l0N2
c1E!{tpl
+vtoF2(JDL(}
3M"&2~~$E{K(@
7,L-ov3nwJh<1
yA.,UHzjk
3nPS~UE*
_&rVA]
sPjS4QW0\
=kh1p..0
;*;91a,hP~
_G4kby
P#^uEM
KnjDd|{l
\77dAB:d
YtE,Y?T
1+"{Rnn]
3V-cw +D_Zg3SnOhn
lm>t!E)k-L(u
kOxfL+
fs|4Bu>`w
kTrKmNIN
fjy<2t
hCDpoC3m)
I/W#Qu^/]f
3t=P8FW~Z{Y
J*+%!s
=*99(SX
{>c@a`''dv~:bg^7
Oxf@F^
^F.G|4
'{:A3QA
Q_k$+AM
A`w>
Pa*!l4
c.}~*i
r(Oc>+
.c Ee:HkaF
Vu@Rai
)e[3r_Ib j
(S/<|0
*`hJ^"Z
/%7xMSZ+0-}
Ao&jnY#0(;';s
#8F/YS^=_ s
enEm1'
O$s~w`D
O|p}#iI
n-%K}OFB
uko-Dz{
,i}O/IN
W',;wl-
L~H9Q^6Z
iuc<>Um~
j:Tksrv#?,iK}
2C+Q+k
;kqdr+8>nxRSH
<S]rrMSIA
Kq/+dgq:}
Pibk>]
Ir_|X_
sfNRhh\p%
`rk*3z
[~*0|Y;^#<U`
4!9=;b
a?WCXy2'
9@Sn0gt|
|&6sZ<!qh
'?[84C_GL
7YX .
&T<A03z8
(6:v y
B HCH}d&`CUW
l5AT~L
Iix;C5k
)iZ-:7-'
Gu?To`
B$N5]'
:ayC]L
&*n;c2
'<;{5bWd
~W[{wds5-#o
H6|[CmI?
Qy/Nx>LoXxN_bf`jAu
3P_fWtTB#
+CW_53
4,iTX%U
lgthWlyd"
R<:LA0u<
3rbxC!
2m~#&,
~7Me2euSZ
%n;)j|^
yGoYO{*lBRulR!
}gi}GE
?Zyp_Nm
tQD'kBX7#U
MJ=Y[}_LaCr
2;c1su6g
?2Do0#e
L^%Un"
>[,y!i
ea?o&.rZ@K^Ba[
?A`H{"mB
L@^<&u@p"Sl5-a
wbH:.%V$P;
<lDqdjGnM'!U$c%
P%4@_*x
|&_wBE
26^n' g
+;55p0Z;6
H#iemTdx{
)Bf#UZ
72Qe_-k
_+WyTYK
*C+o:8
lFQ.;s)\
*s3s/|
=MqA&*zA
<Pb|Aq
Ek~p5'#
()[R6VmI
f}PKok%w
Mg^\'~w
b5ET]{5M
]8L-%pScZ
A8=5HBj&Q
d"vMrT\b
B\rrxEP6Cxuu%
e^pfn\
H2W!IuE
]Jj)2O,A?Gm
H-JC/"(jmF
))tAyddaY97
-3??L-(
Qwru2?xk`z
Q mjM6^S
e9_,4\Y3s
ck:{nj
sieNbw
vnC9F?
1/a,+;G
!:*r{lrQsQ[v
+A*C+1
*fs=CQ1OXt
TI"nbI22
jJ??}Ni@q!
^aQ5?]on GSlz>b`
}.bD-c-
I'[E"9" ;`F
7#;By[
)r^dNi*y-dk>[\:
7Vud0H
^;i^oD
vu0oNmd
](FQ%VRG
[0<-k$Q
Eqqs$.\&1
Jk*D0gi
=io|UaQ"
2j&f~dB
%Ri[W~Udl
H'QC8YS
er.v0@w
Q?^sM0B
aC8Asf5
vp6Dl/']KBd
m1Na+`mLmQ
M5KA7Sk^
;7kNc'
)&{t$F
EH`a$wMFI<
Ng@f{3<Y
'a`Lx
[CAp/y4
Ww.LdZu
DIRx<R
^@Az5lR2I
zT;RN2
)eZFJw
/Z<R^Z
M?2_<|Xjs
ZaJT(b#tS#<
)?.-"vGa^
}?4#an
R[kEqE3y
<U"g#!
l!J:m%
Ef16 9v5
P9Bv6(j[Xp&W$.'q
nk_\9JB|9M-se+xk
>cz:vt2
5Eyw4y
=0Lb+?C)
|T$zS.w
K)("&fA4
1GZ#(SJ
(O/@K$\
RT6N)j
.Jbj8/>bC}
I{E@Dqw-lf3
@_`,|b
"SOf08
+Iui8t_}@2832^h0n/
`$X9w3MI
</@nGM
6B.(DSg~
c*{jl1S
L`VRHv<Fb}b
v:Q+lvEs{d{
+S>7kdhz<gZ
g%'PFle\ O:
<~FwN:
7)7lhP]&mQG
aFWXd@$tu
e(M[bq
(2t-x+
]OQX|%~:p@P}
YBUC}$
.60DVU@1!
Nt4pAh
(T1~Oij3]RN 3^96'
@0x${m\L^.\ZH%0oN
3wr2~3_=2
&xhKpE|0b+^:6{q
mOtWiL
&xx@k?X$
2Dh {+
?#< r(?
8#O(/7
&V+wkeL
*W68-\<
qFo3W?
tM6S.0{QPX
NEUW<(i
S@LJ<c
0{O~@Avi
M^2w%yqwd
xC?Ul#4vJEPB
ivP3;{
%4]+",!d
8A8A8A8A8A8A8A8A8A8A
8A8A8A8A8A8A8A8A8A
8A8A8A8A8A8A8A8A8A
8A8A8A8A8A8A8ADDD8A8A8A8A8A8A8A8A8A8A8A8A
8A8A8A8A8A8A8A8A8A
8A8A8A
8A8A8A8A8A8A8A8A8A8A8A8ADDD8A8A8A8A8A8A8A8A8A8A8A8A
8A8A8A8A8A8A8A8A
8A8A8A8A8A8A8A8A8A8A8A8A
8A8A8A8A8A8A8A8A8A8A8A8A
DD8A8A8A8A8A8A8A8A8A8A8A8A
8A8A8A8A8A8A8A8A$$$8A
8A8A8A8A8A8A8A8A8A8A8A8A
8A8A8A8A8A8A8A8A8A8A8A8A
8A8A8A8A8A8A8A8A
8A8A8A8A8A8A8A8A8A8A8A$$
8A8A8A8A8A8A8A8A8A8A8A8A
8A8A8A8A8A8A
8A8A8A8A8A
8A8A8A8A8A8A8A8A8A8A8A8A
8A8A8A8A8A8A8A8A8A8A8A8A
$$$8A8A8A8A8A8A8A8A8A
&&&8A8A8A8A8A8A
8A8A8A8A8A8A8A8A8A8A8A8A
8A8A8A8A8A8A8A8A8A8A8A8A
J8A8A8A8A8A8A
8A8A8A8A8A8A8A8A8A8A8A8A
J8A8A8A8A8A8A
8A8A8A8A
&&&&&&&&
&&&&&&&&
&&&&&&&&&
&&&&&&&&
&&&&&&&&&
&&&&&&&&&
jjjjjjjju
KKKKKKKKKu
KKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKK
KKKKKKKK>g>gV>g>g>gRRRRRkkkkkkk
jjjjjjjju
KKKKKKKKKu
#KKKKKKKKKKKKKKKKKKKKKKKK
KKKKKKKKK>gVVV>g>gKRRRRKKkkkk@@
jjjjjjjju
%KKKKKKKu
#KKKKKKKKKKKKKKKKKKKKKKz
KKKKKKKKKKVVV>g>gKRRRRRKKkkk@@@
jjjjjjju
%KKKKKKu
#KKKKu
KKKKKKKKKKKKKKK
KKKKKKKKKKVVV>g>gKKRRRRKKKKk@@@@
%KKKKu
KKKKKKKKK
KKKKKKKKKKVVKKKKKKKRRKKKK@@@@w
KKKKKKu
%KKKKu
KKKKKKKV>gKKKKKKKKKKKKKKK@w
KKKKKKKKKK
KWSdWSdWSdWSdWSdWSdWSdVV>gKKKKKKkKKKKKw
KKKKKKKKKKK
WSdWSdWSdWSdWSdWSdWSdWSdWSdWSdWSd>gKKWSdWSdWSdkkw
WSdWSdw
KKKKKKKKKKKK
WSdWSdWSdWSdWSdWSdWSdWSdWSdWSdWSdKKKWSdWSdWSdw
WSdWSdWSdWSdWSdWSdWSdWSdWSdWSdw
K1bKKKKKKKKKK
%KKKKKKu
KKKKKK
sssssVKKWSdWSdKKw
WSdWSdWSdw
WSdWSdWSdWSdWSdWSdWSdWSdWSdWSdw
KK1bKKKKKKKKKK
%KKKKKKK____KKKKK
ssVsKKKKw
WSdWSdWSdWSdWSdWSdWSdWSdw
KKKKKKKjjjKKKK
%KKKKK_______KKKKKu
KKK1bjjjjjjKKKK
%KKK________KKxxKKxxu
KKjjjjjjjjjK
%KKKK__________KxxKKKKKK
KKKjjjjjjjjKKKKKK_____LLL___KKKKKKKK
KKKjjjjjjjjKKxx_____LLLLL___KKKKKKK
ssKKKKK
KKKjjjjjjjjxxKKx____LLLLLL____KKKKKK
ssssssssssK
KKKjjjjjjjjjxxK___LLLLLLL____KKKKKK
02ssssssssssssss
xxKKjjjjjjjjK__LLLLLLL_____KKKKKK
02sssssssssssssssss
jjjjKK1b_LLLLLLL______KKKKKK
02@@@@sssssssssssssss
KKKLLLLLLL______KKKKKK
02@@@@@@
ssssssssssss
KKKLLLLLLL_______KKKKKK
02@@@@@@@K
sssssssss
KKKLLLLLLL________K
%KKKK
02@@@@@@@@KK
ssssss
KLLLLLLL_________K
@@@@@@@@KK
KKKKKLLLLLLL__________
@@@@@@@@KKK
KKKLLLLLLL____owowow____KK
02KKKK@@@@@@@@KKKK
E2LLLLLLL_____jowowowow__
02KKKKK@@@@@@@KKKKKKKKKKKKKKKKKKKKK
LLLLLLdx___jjjj_owowowow
KKKK@@@@@@@KKKKKKKKKKKKKKKKKKKKKKK
LLLLKE2jjjjjjjjj_owowowow
KKK@@@@@@@KKKKKKKKKKKKKKKKKKKKKKK
LLKKKdxE2jjjjjjjj_dxowowowowow
KKKKKK
KKK@@@@@@@KKKKKKKKKKKKKKKKKKKKKKKK
KKKKKdxdxjjjjjjjjdxdxdxowowowowow
KKKKKK
02>g>gk!
kK@@@@@@@KKKKKKKKKKKKKKKKKKKKKKKK
KKKKKKdxjjjjjjjjjdxdxdxowowowow
$>g>gkkk!
kk@@@@@@@KKKKKKKKKKKKKKKKKKKKKKKKK
KKKKKKdxdxjjjjjjjjE2dx
$$>gkkkkkk@@@@@@@KKKKKKKKKKKKKKKKKKKKKKKKK
KKKKKKKKjjjjjjjjdx
;s;s;s
02KKKKK
$kk$kkk@@@@@@@KKKKKKKKKKKKKKKKKKKKKKKKKK
KKKKKKKKjjjjjjdx
owowowow
;s;s;s;s;s;s;s;s
02KKK>gKKK
;^k$$$@@@@@@@@KKKKKKKKKKKKKKKKKKKKKKKKKK
KKKKKKKKjjjdxdxdx
owowow
;s;s;s;s;s;s;s;s;s;s;s;s
KKK>g>g>gK
kk$@@@@@@@@KKKKKKKKKKKKKKKKKKKKKKKKKK
KKKKKKKKKKKKK
ow;s;s;s;s;s;s;s;s;s;s;s;s;s;s;s;s
;^>g>g>g>g!
;^k@@@@@@@@KKKKKKKKKKKKKKKKKKKKKK
KKKKKKKKKKKK
;s;s;s;sowow;s;s;s;s;s;s;s;s;s;s;s;s;s;s
;^>g>g>g!
;^@@@@@@@@$$KKKKKKKKKKKKKKKKKKK
hhhhhh
KKKKKKKKK
02;s;sowowowow;s;s;s;s;s;s;s;s;s;s;s;s;s
;^>g>g!
@@@@@@@$$KK
=KKKKKKKKKKKKKKK
hhhhhhh
KKKKKKKKK
02owow;s;s;s;s;s;s;s;s;s;s;s;s;s;s
@@@@@KKKKK
=KKKKKKKKKKKKKK
hhhhhhhhh
KKKKKKKK
02dx;s;sow;s;s;s;s;s;s;s;s;s;sK
@@@@KKKKKK
=KK$KKKKKKKKKK
hhhhhhhhhh
KKKKKKK
02dx1bdxdxowowow;s;s;s;s;s;s;s;sKKKK!
;s;s;s;s;s@KK4l4l4l4l4l4l4l4l4l4l$$KKKKKKK
hhhhhhhhhhK
KKKKKK
dxdxdxdxowowowowow
%;s;s;s;s;s;s>gKKK!
;s;s;s;s;s;s;s;sK4l4l4l4l4l4l4l4l4l4l4l4l4l4l4l4l4lK
hhhhhhhhhhKKK
jjjjjjj
dxdxdxdxdxdxdxowowowow
%dx>g;s;s;sE2KKKK@@
;s;s;s;s;s;s;sKK4l4l4l4l4l4l4l4l4l4l4l4l4l4l4l4l4l4l4l4l4l
hhhhhhhhhhKKKK
jjjjjjjj
02KKKKdxdxdxdxdxdxdx1bdxowowowowowdx>g>g>gKE2KK@@@
;s;s;s;s;s;s;sKK4l4l4l4l4l4l4l4l4l4l4l4l4l4l4l4l4l4l4l4l4lhhhhhhhhhh4lKKKK
jjjjjjjjj
02KKKKKKKKdxdxdxdxdxdx1bdxowowowowow>g>gKKKK@@@
;s;s;s;s;s;s;s;sKK4l4l4l4l4l4l4l4l4l4l4l4l4l4l4l4l4l4l4lhhhhhhhhhh4l4l4l4l4l4l4l
jjjjjjjj
KKKKKKKKdxdxdxdxdxdxdx
%owowowow>gKKKK@@@@
;s;s;s;s;s;s;sKKK
4l4l4l4l4l4l4l4l4l4l4l4l4l4l4l4lhhhhhhhhh4l4l4l4l4l4l4l?
jjjjjjjj
KKKKKKKKKdxdxdxdxdxdx
%jjK@@@@@@@@E2;s;s;s;sKKKKKK
;s;s;s;s
=4l4l4l4l4l4l4l4l4lhhhhhhhh?????????
jjjjjjjj
KKKKKKKKKKdxdxdxdx1b
:@@@@KKKKE2;sKKKKKKK
???????????????hhhhhh???????????
02jjjjjjjj
KKKKKKKKKKKK>gdxdxdx1b
:owowowow@@@
??????????????????????????????hhhhh????????????
KKKjjj
KKKKKKKKKKKKK>g>g>g>gK
%??owowow???????????????????????????????????????????????????
KKKKKK
KKKKKKKKKKKKK>g>g>gKK
?????????????????????????????????????????????????????????
KKKKKK
KKKKKKKKKKKKKKKKKK
????owowow??????????????????????????????????????????????
KKKKKKK
KKKKKKKKKKKKKKKKKKKUO
????owowowow???????????????????????????????????????????KK
W6W6W6W6W6W6W6W6
KKKKKKKKKKKKKKKKKKKUO
?????owowow?????????????????????????????;s;s;sKKKKKKKKKKKKKK
W6W6W6W6W6W6W6W6
W6W6W6W6W6W6W6W6W6W6W6W6W6W6W6W6W6W6UO
???????????????????????
KKKKKKKKE2KE2K
;s;s;s;sKKKKKKKKKKK
W6W6W6W6W6W6W6W6
W6W6W6W6W6W6W6W6W6W6W6W6W6W6W6W6W6UO
????????W6KKKowowowKK
KKKKKKK
=KKKE2E2K
mKKKKKK
KKKKKK
KW6W6W6jjW6W6W6W6W6W6W6W6W6W6W6UO
@@@W6W6W6W6W6W6W6W6KKowowowowKKKK
mKKKKKK
mKKKKKK
KKKKKKKKKK
KjjjjjjKKKKKKKKUO
K@@@KKKKKKKKKKKKowowKK
=KKKKK
mKKKKKK
KKKKKKKKKK
jjjjjjjjjKKKKKUO
KKKKKKKKKKKKK
mKKKKKK
mKKKKKK
mE2KKKKK
KKKKKKKKKKKK
KKjjjjjjjjKKKKKUO
mKKKKKK
mKKKKK
mKKKKKK
mKKE2KKK
mKKKKKKKKKKKKKKKKKKKjjjjjjjj
mKKKUO
mKKKKKK
mKKKKKKK
mKKKE2E2KKKKKKKKKKKKKKKKKKKKjjjjjjjjUO
KKKKKK
mKKKKKK
=KKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKjjjjjjUO
mKKKKKK
mKKKKK
=KKKKKKKKKKKKKKKKKKK(
CCCHHHzzz((
{{{''']]]
CCCHHHzzz(((b
{{{''']]]
qCqHHHzzz((
'''fff
fffi>>>
~~~PPPhhh***
~~~PPPhhh***
~~~PPPhhh***
mmmooo000l
lSSSrrr}}}^^^nnn
mmmooo000
SSSrrr}}}^^^nnn
'mmmooow00l
lSSSrrr}}}
KKKjjjJJJRRR///
jjJJJR///
KKKjjjJJJRRR///
iiiAAA/
iiA]A/
iii]A]/
AAApppYYY888333
AAApppYYY888333
AAApppYYY888333
777qqq```
""!!!... 222
;;;kkk777qqq```
"""!!!... 222
;;;kkk?77qqq``
"!!!... 222
;;;kkk
!!!NNNwww
E###:::OO
sssEEE
E###:::OOObbbsss[[EE
E###:::
OOObbbsssuuu[[[[
uuu5[[[
,,,ttt
QQQuuu[[[
,,,ttt
VVI999
VVI999
aaa@@@uuu
VVI999
aaa@@@
BBB+++xxx
IBB+++xxx
+++xxx
ZZZ<<<TTTDDD|||444___
ZZZ<<<TTMDDD|||444___
ZZZ<<<TTTDDD|||444___
vvvnn/
111555
vvvnnn
111555
111555
UUUgggLLLyyyeeeG
UUUgggLLLyyyeee
UUUgggLLLyyyeee
:}}9lj#lj%
gMeeMif/c4/c1/c52f8
=ml%mp&
hiOjiRii4d06a3*`2._5
^ik3ik4
w~IktHhp5[50[49V77V9
_kh3jk2
X~dby~w
HjpJis3]64]66V77Y8
~\V-dX,bE&UD$O
VoV,\5+\5.^4/\2~
\W0dU*`F#SB(S
vs~p}n
YiX2`:,Y70\/-X5~
~~42R2gN4cE_E
bL#YD#[A=gBAiR~X
~]M]L.Z0,].0[>-^<
~~3~0P3dQ1eD bBcH
ZI"YA?i>;iXU
]L]K+Z/,_.-\=-\<~~
Des@er= Y=]>&^E"[dK^fI[
3\2._52S:4R85`:0^:
AcsBdq?!X@Z@&^B$Z'fLY
1c33`50R90S70^92\:t
wBnB~k?m@
pP:NP7OfFafF^~Z~\
~^&y~~z
$$3V94T:*X9)]=,b8-a9w
nBn=p>lO9OP9OgDaeDa~
&#1U96Y8)]<)Y;,_5(^6
gn(ji(tk1om.gp+fp-
iS[iQ^
:b78c60b/)f1+Z<*]7x
ih'kl(vl.rn.eq'ht&
jOYjQZ~
6b67b11f/0a2,]:*X=
v~u~gv2gu1si$qo&{^~y^~~
>"c@bF!\E
2V65]:1b>4fA2`/4_3
hx+fu/sl'sm+
{kzj> b?\F!\D\
3Y:3Y72c>4d:3b04]2
Rqp0no,
I.aD(cF
eG$fE&_C&]N>MM:P
-T:0Y:,[52\:1X32Y5
Ppo2rm0
F'bF'dI!fC
gD*cF&cP=LP=O
-X<.W<-`70_;0[70Y7
>&UA"WK6XO6U
~+XA)[@-_;-b5-[25U.
~~@X= \L;VI5Y~`~^
+]A)ZC)a7-`50W//Z0
7N88R<(Y>)Y>3b32]4
7O;9M:)W>)U?2a6$
M~L?%_@&]D+YC,U-X53V5
K<%`?']D/UE/T0Z5.\9
~E%_E$_E ]I"ZF)ZA&].U93Y9
E"_E&`G \B ^C+\C&[0V9/V6
a3}F"XBYA3M@4N6b;6^7
uu85wt
ua9f:|D"]E X=2K@.L1a86a7~
5]44_30Y85[;8d;7d6
{~1^53\55_;3X93_85a7
|e~7Z72]9-T82Y83XD5ZB
zk7W96Y:3V92T81TB4[E
Sfi1`/-_4
bvEjn7Y65T9}
to}oX.[3.[2
2B#aH#[=@gV
M,Z,/]<
!Dcu?#VA'[iK\
~3_02W72`7xA~j@jK;OeB]Y
1\:.`5x
gj'tn3cq'
6d1$]<
tit,pm'
0Y=3_.
G-dEfE%aN>O
;#YH7V
*[A/`4.W.
~8N7)V>6a:
ND#a?/U.U8
E%_D"\C*Z/U5
ub?}F"[A3N5c;~
u~/_31]>:^8
tyk3[75X:2WE
00)1a111111A23344>4O4n4x444444
9H9N9::s;y;;;
<"<<<#=*=c=j=====(>>>>l?
0f11112223&778888888
:@:n:x:::::V;;;;
<B=H=]=e=k=p=====>>>>
(0B000112222222
323v3+55T:[:=
>z>>???
0=0111"2
366666666
7q7777
8Z8_8e8k8p8v8888888888
9-93989P9a9g9m9{9999=;E;O;_;k;q;{;;;;;
<C<N<_<k<s<y<<<<
>&>>>N>t>>>>>
00;2a2l22222
3 3G3R3n3~3333333333333
4%4*40444:4>4D4H4N4R4W4]4a4g4k4q4u4{4
444655555
66666666
7)7O7m7t7x7|77777777777R8]8x8
888888
9 9$9(9,9v9|99999993:9:>:F:V:`:f:z:::
;L;d;k;s;x;|;;;;;;;;
<Z<`<d<h<l<<<<<
=-=W============
>>>>>P?
0!0&022Z44444c555555555
6Z6_6i66j7r7777
<x<<<=7??
0'0R0Z0x000000
1F1O1[111111
2"2X2_2g22222
3!383333=4g4s44546666
7"7^7y7778889Y:]<<<'====
>;>r>z>?
B0V0000000)1X1^1m111222
6T67o9<<<<>
111122:3J3V3h3x33607v7<=.?4?:????
22?333*44
55555'6.6:6@6L6R6[6a6j6v6|66666666666 7`7f7777777j88888 9&9<9A9I9O9V9\9c9i9q9x9}99999999999999999
:,:1:7:@:`:f:~:::::
;";';;;w<<<<<<<
>!>??????
0*060C0g0y000000
2!262}22222
3<3N3|33333R4,545L5g556
7)7O7:>@>
666666
77777777777
8 8:8E8M8]8c8t888888
909999>:V:`:{:::::::
;;;;;%=2=;=~====
>%>6>A>
0 0%0+00000-191H1M1n1s11111111
2"2222Q4b4444444
565@5S5w5555f666;7Z7777
8#8+8B8[8w88888888
99::';u;@<<<
=%======>>>>>>>>>>>>>>
?%?.?3?9?C?L?W?c?h?x?}?????
2;;;;;;;/<`=g=o=w=
> >2>D>V>h>z>>>>>>> ?
2`2g2q22222222
3'3K33335555
666I777[99R:[::::4;~;;;;
z1~1111111111111111111111111111111
333333
4a4f44444444,555;55P66l778
,0l000U1o1x1111
2'2c22
3}3 4@405Y55 7788
:@:h::J;m;
>>>>D?\??
5N5z55x799999999999
:):.:<:
;:;E;h;;<<<<<<
1 1%161>1D1N1T1^1d1n1w11111111
4#4445608:
<!<7<M<U<<==
>1>>>L>|>>,?
0(001R2X222
3333}4q5y5*6
777J8P8^88
9K99<<?????
1!1>111;i=|===
>/>H>d>>>>>
666M7Z7/8988
9I9q9T=Z=_=e=v=====
?!?1?A?Q?t????????
0#0/0;0E0O0Z0^0e0i0p0t0z00000
l1p1t1x1|111111111111
3 3$3(3,3034383<3@3D3H3L3P3T3X3\3`3d3h3l3p3t3x3|33333333333333
4 4$4(4,4044484<4@4D4H4L4P4T4X4\4`4d4h4l4p4t4444444444P5T5\5`5d5h5l5p5t5555555555555555555555
6 6$6(6,6064686P6T6X6\6`6>>>>>>>
0004080<0@0D0H0L0P0T0X0\0`0d0h0l0d=l=t=|=================
4444444444444444
5 5(50585@5H5P5X5`5h5p5x55555555555555555
6 6(60686@6H6P6X6`6h6p6x66666666666666666
7 7(70787
x0|000000000000000000000000000000000
1 1$1(1,1014181<1@1D1H1L1P1T1X1\1`1d1h1l1p1t1x1|11111111111111111111111111111111
4 4$4<4@4P4T4X4`4x4|44444444444
5 5(5@5P5T5X5`5x5555555555555
6$6(686<6@6D6H6P6h6l666666666666
7 7$7(7,747L7\7`7p7t7x7|7777777777777777
8 80848D8H8L8P8X8p888888888888888
9 9094989@9X9h9l9|9999999999999999999
: :$:4:8:<:D:\:l:p::::::::::::
;$;<;L;P;`;d;h;p;;;;;;;;;;;;;
<$<4<8<H<L<P<T<\<t<<<<<<<<<<<<<<
=$=4=8=H=L=T=l=|=======
> >4><>P>X>`>h>l>p>t>|>>>>>>>>
?(?0?8?<?L?\??????????
040@0H0h000000000
1,141<1D1H1L1T1h1p1x111111111
2 2,2H2T2`2222222222 3(3,3D3H3d3h3p3x3333333
4(444L4P4l4p44444
505P5p55555555
686X6x6
444P4p44444$5\5555
646p66
7h77777
8H8t8x8|88888888h9999999999999999999999`;p;;;;;;;;;;;;;;;;;;;;;
< <$<(<,<0<4<8<<<@<D<H<L<P<T<X<\<`<d<h<l<p<t<x<|<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<
= =$=(=,=0=4=8=======
> >0>4>8>@>
(5P7T7X7\7`7d7h7l7p7t7x7|777777777777777777777777777777777$8,848<8D8L8T8\8d8l8t8|88888888888888888
MTU7MTU=
fkernel32.dll
De vidizahokaledeticegodace gudohakomoje wehogidipokafusu cojaxifogujeyitabe
((((( H
h(((( H
H
@AA@AA
HH:mm:ss
dddd, MMMM dd, yyyy
MM/dd/yy
December
November
October
September
August
February
January
Saturday
Friday
Thursday
Wednesday
Tuesday
Monday
Sunday
nKERNEL32.DLL
(null)
mscoree.dll
runtime error
TLOSS error
SING error
DOMAIN error
- Attempt to use MSIL code from this assembly during native code initialization
This indicates a bug in your application. It is most likely the result of calling an MSIL-compiled (/clr) function from a native constructor or from DllMain.
- not enough space for locale information
- Attempt to initialize the CRT more than once.
This indicates a bug in your application.
- CRT not initialized
- unable to initialize heap
- not enough space for lowio initialization
- not enough space for stdio initialization
- pure virtual function call
- not enough space for _onexit/atexit table
- unable to open console device
- unexpected heap error
- unexpected multithread lock error
- not enough space for thread data
- abort() has been called
- not enough space for environment
- not enough space for arguments
- floating point support not loaded
AMicrosoft Visual C++ Runtime Library
<program name unknown>
Runtime Error!
Program:
AAAAAAAAA
AAAAAAAAAAAAAAAAAA
WUSER32.DLL
CONOUT$
AAAAAA
AAAAAAAAAAA
AAAAAAAA
AAAAAA
Zesafacanema
)Pewu rixazo na nota lefebu hafucayepecaxu
Nefe geci panoluyi
TWiwayepaxo liwuropiye nazizofoconale seyimu cayedupoxiyo nicemibehahase pawudehukusi
XFugo rakojato buyukoxu hiru renagepuxa kenihifezace silotamo moxihulonexeso damerureladu
7Rojudewo cekodikicisupi zipi karebe givinenasa bugakukuMBofosero gatidife vicezakowuke wofe ja vehebajigivi hazifuyacizogi zanugipaya
Ficavereni
7Cotuwijaha roraju cozi bubajocejedama caviyeyojele fuwa
JYicayane moyicehi jetudexi cawomu tegafefopiwo zemogigaxuja zajiyanivoxazo
RMoyevetizababa gewoxodoce sapajaye yazedexisudoyo muho sade gumofipa sicajoco weno
XHebetaje da raguluyo dawohuracure maxojosewumaja mepozo teramexizosi makelu xepuvemiraze
XTokihonize zigesojevilo hamocugorozota hu jamijuruku ki yipucajetutolo rube womapebokazu
6Nivasowomaza jiteza puvayi to lohureje vutusibe bicixi
Zikafupode cigosaseti
CCucipiwetewava salogejuxosi dijoharuxayogo rayo cicenehozo golehejo
Mibatiyupi haloxudelihe
4Cehalisozaze lopugu yewotu nedobeduhi xotiwirozacoye
Cuzo daneco lolarumali
%Bomiwaroti jaxosuhe voyecamibezive hu
Da daga rateriso vuhihi
)Jojinupucayi ruredopofo xobanijo dirivufe
Dipececidujuci yexawekozari
Padocatuzumuru yajehu
+Nekatixeba le wufevujokago mi hacice yeyeva
LRerojufebusuyi yofakitawevile retixahawe ralu zujicehowodizo duremefu lebiti
ZLuju sucufususabo henihide yadizerulevi yahu dejita fepijiwageku wizumedeloci fucavoxilitu
Kejekayi lakadolipoweli
6Kaza haviwe xepeniwanegi kicudosoyihuru yadeyafipihaja
eHokenonohu wumipute dimabozodese yilemejevuxoti pufiteyiya pelitaya zukesi javo bohisabiyo hoxucojanu
mDiyojeyuxami lodedone ku tiguyilo yojimidetavugo sugugo zebejegikive joxegafuvemida xazikelize doxirivixavizo
1Yuhurenosuxipa menuponagaro zukafotovi bibozuvema
8Yuzutedora juxe jilizuyowijufe bodoyilubu licokibageguzo
KJixafupacelunu yifunogacebo racoyenusalu wahozepumo juhogoru nufigunatoduho
%Toxiwuca tojosutu yadolezo siwayuhumu8Vewanavetogisa dayarojohefa jagomatecawija taze puredune
Leba xu
Culico yamiyobewi jayerosoro
$Vabu jupexoyixu ha piko sihemukuxabi
KDuninexawuvo fapexawi xusukazere raco sugobalixiwezo pizusu mokotu cawozibi
!Yijomo cugagahu fisenogi fakekuho
3Kugikijabesogu tuyozukonipi howusocegutosi xuxacojo
OSumatevakuvoko gumiwubotahutu coza mevijiharabeme bopobo zeharupuyucite fu vuku
NVuzawujukigisu nudoxefese pexujerivugela vome juca lowoxu wuyelepenadara ju ho
Dusawericeci za xafixoba
Puhuguwuje
FFozoberifezida wazu geniyo kulu yese puhezimo safodidusepe jacuda gemu
Migesaku kixoyefe pu
OYayehacubenegi jugudanepi kotigodimuwu socudiwuzemike vasohirovaco pisagibepisa
8Lilibo bixayoga ciku yileto zoyihebezo buwu ciwudocadufe
CLerineka batigiso jerojezotolu pasisu limurime jozu zuyu wakocapava"Xadate bicofutiwe fo gu cubohexuvi
Xudizerafa
Fodagoluhi
gFulecuzidato bojose yatuta lasuyidofedapo buwo nayarutape rarupixoyowa hulepokikuwu cetumagi kezacacudi
=Sazobilono ziwovazefa bofa visefuno tudovozawesoji me tasu ji
IWahujecu getutunivile raluwafujojo xaruku lu razapunekucedo lapedu bojire
+Yidediyejuyiwa dutoxaze payuwene sihuhosice
VBonorexokene vekivubakive kesaxuluci va vuhufirazepibo migifuzihu hi kebazu kilajatovi
Nici duladipi bawe sacavawicewe
YXecufa zukofatepaxu docagigiyove kesodoxo feza vuyubokejuni kudihube kopuka folo zepiyiwa
CVa fa lomiseyicuwa titakone yepijosudota kupovetemulavi fi posoxohi
Maxusunu ta vecehenube

Process Tree


cce4653ac945ff41ff8d61e28609324944b63edad7cf78f3cb4753d76afdc825.exe, PID: 1612, Parent PID: 2244

default registry file network process services synchronisation iexplore office pdf

nslookup.exe, PID: 3052, Parent PID: 1612

default registry file network process services synchronisation iexplore office pdf

nslookup.exe, PID: 2440, Parent PID: 1612

default registry file network process services synchronisation iexplore office pdf

nslookup.exe, PID: 1472, Parent PID: 1612

default registry file network process services synchronisation iexplore office pdf

nslookup.exe, PID: 1592, Parent PID: 1612

default registry file network process services synchronisation iexplore office pdf

nslookup.exe, PID: 2368, Parent PID: 1612

default registry file network process services synchronisation iexplore office pdf

TCP

No TCP connections recorded.

UDP

Source Source Port Destination Destination Port
192.168.56.101 53179 224.0.0.252 5355
192.168.56.101 49642 224.0.0.252 5355
192.168.56.101 137 192.168.56.255 137
192.168.56.101 61714 114.114.114.114 53
192.168.56.101 58485 224.0.0.252 5355
192.168.56.101 57665 114.114.114.114 53
192.168.56.101 51758 114.114.114.114 53
192.168.56.101 52215 114.114.114.114 53
192.168.56.101 52216 107.178.223.183 ns2.wowservers.ru 53
192.168.56.101 138 192.168.56.255 138
192.168.56.101 52217 107.178.223.183 ns2.wowservers.ru 53
192.168.56.101 52218 107.178.223.183 ns2.wowservers.ru 53
192.168.56.101 52219 107.178.223.183 ns2.wowservers.ru 53
192.168.56.101 52220 107.178.223.183 ns2.wowservers.ru 53
192.168.56.101 62361 114.114.114.114 53
192.168.56.101 62362 104.155.138.21 ns2.wowservers.ru 53
192.168.56.101 62363 104.155.138.21 ns2.wowservers.ru 53
192.168.56.101 62364 104.155.138.21 ns2.wowservers.ru 53
192.168.56.101 62365 104.155.138.21 ns2.wowservers.ru 53
192.168.56.101 62366 104.155.138.21 ns2.wowservers.ru 53
192.168.56.101 62367 104.155.138.21 ns2.wowservers.ru 53
192.168.56.101 62368 104.155.138.21 ns2.wowservers.ru 53
192.168.56.101 62369 104.155.138.21 ns2.wowservers.ru 53
192.168.56.101 62370 104.155.138.21 ns2.wowservers.ru 53
192.168.56.101 62371 104.155.138.21 ns2.wowservers.ru 53
192.168.56.101 62372 107.178.223.183 ns2.wowservers.ru 53
192.168.56.101 62373 107.178.223.183 ns2.wowservers.ru 53
192.168.56.101 62374 107.178.223.183 ns2.wowservers.ru 53
192.168.56.101 62375 107.178.223.183 ns2.wowservers.ru 53
192.168.56.101 62376 107.178.223.183 ns2.wowservers.ru 53
192.168.56.101 62377 107.178.223.183 ns2.wowservers.ru 53
192.168.56.101 62378 107.178.223.183 ns2.wowservers.ru 53
192.168.56.101 62379 107.178.223.183 ns2.wowservers.ru 53
192.168.56.101 62380 107.178.223.183 ns2.wowservers.ru 53
192.168.56.101 62381 107.178.223.183 ns2.wowservers.ru 53

HTTP & HTTPS Requests

No HTTP requests performed.

ICMP traffic

No ICMP traffic performed.

IRC traffic

No IRC requests performed.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

Snort Alerts

No Snort Alerts

Name b479004be95142e0_bbkrqr.exe
Filepath C:\Users\Administrator\AppData\Roaming\Microsoft\bbkrqr.exe
Size 325.5KB
Processes 1612 (cce4653ac945ff41ff8d61e28609324944b63edad7cf78f3cb4753d76afdc825.exe)
Type PE32 executable (GUI) Intel 80386, for MS Windows
MD5 ba3828e2d4842b4d51cca61da12a6a0e
SHA1 0ebe4ee92cb60080a79bb66f75412307b4926a76
SHA256 b479004be95142e0aa70f1b186c5b761e2013d7cbc0bafefb4ca08f3968b1941
CRC32 83F5507B
ssdeep None
Yara None matched
VirusTotal Search for analysis
Sorry! No dropped buffers.