1.3
低危

26e92e4f2e901676dd1aa6eb47f89ee81a2f1814fd12d5d9a7c61883b33a9e84

26e92e4f2e901676dd1aa6eb47f89ee81a2f1814fd12d5d9a7c61883b33a9e84.exe

分析耗时

196s

最近分析

360天前

文件大小

219.9KB
静态报毒 动态报毒 CVE FAMILY METATYPE PLATFORM TYPE UNKNOWN WIN32 TROJAN RANSOM IPUP
鹰眼引擎
DACN 0.12
FACILE 1.00
IMCLNet 0.62
MFGraph 0.00
静态判定
反病毒引擎
查杀引擎 查杀结果 查杀时间 查杀版本
Alibaba None 20190527 0.3.0.5
Avast Win32:Kryptik-MSQ [Trj] 20200305 18.4.3895.0
Baidu Win32.Trojan.Kryptik.ac 20190318 1.0.0.2
CrowdStrike win/malicious_confidence_100% (D) 20190702 1.0
Kingsoft None 20200305 2013.8.14.323
McAfee Trojan-FCWH!4EC1194EECBF 20200304 6.0.6.653
Tencent Trojan.Win32.Agent.afi 20200305 1.0.0.1
静态指标
行为判定
动态指标
在 PE 资源中识别到外语 (1 个事件)
name RT_VERSION language LANG_RUSSIAN filetype None sublanguage SUBLANG_RUSSIAN offset 0x00039058 size 0x000001e8
该二进制文件可能包含加密或压缩数据,表明使用了打包工具 (2 个事件)
section {'name': '.text', 'virtual_address': '0x00001000', 'virtual_size': '0x00033fe8', 'size_of_data': '0x00034000', 'entropy': 6.937426689305808} entropy 6.937426689305808 description 发现高熵的节
entropy 0.9519450800915332 description 此PE文件的整体熵值较高
网络通信
与未执行 DNS 查询的主机进行通信 (1 个事件)
host 114.114.114.114
文件已被 VirusTotal 上 61 个反病毒引擎识别为恶意 (50 out of 61 个事件)
ALYac Gen:Variant.Ulise.8021
APEX Malicious
AVG Win32:Kryptik-MSQ [Trj]
Acronis suspicious
Ad-Aware Gen:Variant.Ulise.8021
AhnLab-V3 Backdoor/Win32.ZAccess.R80805
Antiy-AVL Trojan/Win32.ShipUp.ebpa
Arcabit Trojan.Ulise.D1F55
Avast Win32:Kryptik-MSQ [Trj]
Avira TR/Kryptik.oenzy
Baidu Win32.Trojan.Kryptik.ac
BitDefender Gen:Variant.Ulise.8021
BitDefenderTheta AI:Packer.98446A4F1F
Bkav HW32.Packed.
CAT-QuickHeal TrojanDropper.Gepys.A
CMC Trojan.Win32.ShipUp!O
ClamAV Win.Packed.Shipup-6840507-0
Comodo TrojWare.Win32.Kryptik.BIWI@51iu3y
CrowdStrike win/malicious_confidence_100% (D)
Cybereason malicious.eecbf1
Cylance Unsafe
Cyren W32/A-1634efe7!Eldorado
DrWeb Trojan.Mods.1
ESET-NOD32 a variant of Win32/Kryptik.BIKE
Emsisoft Gen:Variant.Ulise.8021 (B)
Endgame malicious (high confidence)
F-Prot W32/A-1634efe7!Eldorado
F-Secure Trojan.TR/Kryptik.oenzy
FireEye Generic.mg.4ec1194eecbf1392
Fortinet W32/Kryptik.BJBC!tr
GData Gen:Variant.Ulise.8021
Ikarus Win32.Kryptik
Invincea heuristic
Jiangmin Trojan/ShipUp.vk
K7AntiVirus Trojan ( 0040fa341 )
K7GW Trojan ( 0040fa341 )
Kaspersky HEUR:Trojan.Win32.Generic
MAX malware (ai score=87)
Malwarebytes Trojan.Gepys
MaxSecure Trojan.ShipUp.gen
McAfee Trojan-FCWH!4EC1194EECBF
McAfee-GW-Edition BehavesLike.Win32.ZeroAccess.dh
MicroWorld-eScan Gen:Variant.Ulise.8021
Microsoft TrojanDropper:Win32/Gepys.A
NANO-Antivirus Trojan.Win32.ShipUp.cqkxsc
Panda Trj/Genetic.gen
Qihoo-360 HEUR/QVM20.1.AD05.Malware.Gen
Rising Trojan.Kryptik!1.A949 (CLASSIC)
SUPERAntiSpyware Trojan.Agent/Gen-FakeMS
Sangfor Malware
可视化分析
二进制图像
数据导入图像 288x288
数据导入图像 224x224
数据导入图像 192x192
数据导入图像 160x160
数据导入图像 128x128
数据导入图像 96x96
数据导入图像 64x64
数据导入图像 32x32
运行截图
暂无运行截图 该样本运行过程中未生成截图

👋 欢迎使用 ChatHawk

我是您的恶意软件分析助手,可以帮您分析和解读恶意软件报告。请随时向我提问!

🔍 主要威胁分析
⚡ 行为特征
🛡️ 防护建议
🔧 技术手段
🎯 检测方法
🤖

PE Compile Time

2013-08-20 12:53:02

PE Imphash

c3c2b4ccfef5b46f908b991e2cd862b7

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x00033fe8 0x00034000 6.937426689305808
.rdata 0x00035000 0x00000004 0x00000200 0.0
.data 0x00036000 0x00002058 0x00001e00 5.4984596204173055
.rsrc 0x00039000 0x00000240 0x00000400 2.442234167436321
.reloc 0x0003a000 0x00020548 0x00000600 5.934342554746971

Resources

Name Offset Size Language Sub-language File type
RT_VERSION 0x00039058 0x000001e8 LANG_RUSSIAN SUBLANG_RUSSIAN None

Imports

Library KERNEL32.dll:
0x436894 ExitProcess
0x436898 GetSystemTime
0x43689c CreateThread
0x4368a4 SetEvent
0x4368a8 GetProcessHeap
0x4368ac HeapFree
0x4368b0 GetUserDefaultLCID
0x4368b4 RaiseException
0x4368c0 CloseHandle
0x4368c4 LoadResource
0x4368c8 LockResource
0x4368cc GetThreadLocale
0x4368d0 FreeLibrary
0x4368d4 GetSystemInfo
0x4368d8 QueryDosDeviceW
0x4368dc QueryDosDeviceA
0x4368e0 lstrlenA
0x4368e4 GetSystemDirectoryW
0x4368e8 GetSystemDirectoryA
0x4368ec UnmapViewOfFile
0x4368f0 GetDriveTypeA
0x4368f4 GetDateFormatW
0x4368f8 CreateMutexW
0x4368fc CreateMutexA
0x436900 CompareStringW
0x436904 GetShortPathNameA
0x43690c GlobalLock
0x436910 GlobalSize
0x436914 GlobalAlloc
0x436918 GlobalUnlock
0x43691c GlobalFree
0x436920 GetLocaleInfoA
0x436924 CreateFileMappingW
0x436928 CreateFileMappingA
0x43692c GetVersionExW
0x436930 SetFileAttributesW
0x436934 SetFileAttributesA
0x436938 IsBadWritePtr
0x43693c lstrcmpiW
0x436940 lstrcmpiA
0x436944 LoadLibraryExW
0x436948 LoadLibraryExA
0x43694c LoadLibraryW
0x436950 LoadLibraryA
0x436954 LCMapStringW
0x436958 LCMapStringA
0x436960 GetTempPathA
0x436964 GetTempFileNameW
0x436968 GetTempFileNameA
0x436974 lstrcpynW
0x436978 GetModuleHandleW
0x43697c GetModuleFileNameW
0x436980 GetModuleFileNameA
0x436988 GetLocalTime
0x43698c MapViewOfFile
0x436990 GetFileType
0x436994 SetFilePointer
0x436998 SetEndOfFile
0x43699c GetFileSize
0x4369a0 ReadFile
0x4369a4 WriteFile
0x4369a8 FlushFileBuffers
0x4369ac WaitForSingleObject
0x4369b0 CompareFileTime
0x4369b4 SetThreadPriority
0x4369b8 Sleep
0x4369bc GetLongPathNameA
0x4369c0 GetLongPathNameW
0x4369c4 ReleaseMutex
0x4369c8 InterlockedExchange
0x4369cc GetStartupInfoW
0x4369d0 GetModuleHandleA
0x4369dc GetCurrentProcess
0x4369e0 TerminateProcess
0x4369e8 GetCurrentProcessId
0x4369ec GetCurrentThreadId
0x4369f0 GetTickCount
0x4369f8 FindClose
0x4369fc IsValidLocale
0x436a00 SetErrorMode
0x436a08 lstrcatA
0x436a0c lstrcpyA
0x436a10 GetACP
0x436a14 DebugBreak
0x436a1c GetExitCodeThread
0x436a20 DeviceIoControl
0x436a24 GetVersion
0x436a28 HeapAlloc
0x436a2c GetDriveTypeW
0x436a30 GetDateFormatA
0x436a44 WideCharToMultiByte
0x436a48 MultiByteToWideChar
0x436a4c GetVersionExA
0x436a50 lstrlenW
0x436a54 GetLastError
0x436a5c GetProcAddress
0x436a60 SetLastError
0x436a64 CopyFileA
0x436a68 CopyFileW
0x436a6c CompareStringA
0x436a70 CreateDirectoryA
0x436a74 CreateDirectoryW
0x436a78 CreateEventA
0x436a7c CreateEventW
0x436a80 CreateFileA
0x436a84 CreateFileW
0x436a88 DeleteFileA
0x436a8c DeleteFileW
0x436a90 FindFirstFileA
0x436a94 FindFirstFileW
0x436a98 FindNextFileA
0x436a9c FindNextFileW
0x436aa0 FindResourceA
0x436aa4 FindResourceW
0x436aa8 LocalFree
0x436aac LocalAlloc
0x436ab0 GetFileAttributesA
0x436ab4 GetFileAttributesW
0x436ac0 GetFullPathNameA
0x436ac4 GetFullPathNameW
0x436ac8 GetStartupInfoA
0x436acc GetCommandLineA
0x436ad0 GetStdHandle
0x436ae0 VirtualAlloc
0x436ae4 GetCurrentThread
0x436ae8 GetOEMCP
Library USER32.dll:
0x436af0 BeginPaint
0x436af4 GetClientRect
0x436af8 EndPaint
0x436afc PostQuitMessage
0x436b00 DefWindowProcA
0x436b04 LoadCursorA
Library GDI32.dll:
0x436b0c PlayEnhMetaFile
0x436b10 DeleteEnhMetaFile
Library msvcrt.dll:
0x436b18 _c_exit
0x436b1c __CxxFrameHandler
0x436b20 iswcntrl
0x436b24 isxdigit
0x436b28 towlower
0x436b2c towupper
0x436b30 wcsncmp
0x436b34 wcslen
0x436b38 memmove
0x436b3c wcsrchr
0x436b40 wcsspn
0x436b44 iswspace
0x436b48 iswascii
0x436b4c wcspbrk
0x436b50 wcschr
0x436b54 wcsstr
0x436b58 _wcsnicmp
0x436b5c _wtol
0x436b60 _vsnwprintf
0x436b64 _wcsicmp
0x436b68 _CIpow
0x436b6c _purecall
0x436b70 swscanf
0x436b74 _ftol
0x436b78 iswdigit
0x436b7c _wtoi
0x436b80 iswalnum
0x436b84 _wtoi64
0x436b88 _controlfp
0x436b8c wcstoul
0x436b90 floor
0x436b94 memcmp
0x436b98 atoi
0x436b9c memset
0x436ba0 _snwprintf
0x436ba4 wcsncpy
0x436ba8 wcscpy
0x436bac memcpy
0x436bb0 free
0x436bb4 strchr
0x436bb8 _exit
0x436bbc _XcptFilter
0x436bc0 _cexit
0x436bc4 exit
0x436bc8 _wcmdln
0x436bcc __wgetmainargs
0x436bd0 _initterm
0x436bd4 __setusermatherr
0x436bd8 _adjust_fdiv
0x436bdc isdigit
0x436be0 ceil
0x436be4 _vsnprintf
0x436be8 _strnicmp
0x436bec malloc
0x436bf0 wcscat
0x436bf4 rand
0x436bf8 realloc
0x436bfc toupper
0x436c00 isspace
0x436c04 atol
0x436c08 swprintf
0x436c0c _stricmp
0x436c10 strncpy
0x436c14 wcscspn
0x436c18 _wcsupr
0x436c1c wcstombs
0x436c20 bsearch
0x436c24 _ultow
0x436c28 _onexit
0x436c2c __dllonexit
0x436c30 _except_handler3
0x436c34 __set_app_type
0x436c38 __p__fmode
0x436c3c __p__commode
0x436c40 abs
0x436c44 qsort
0x436c48 wcscmp
0x436c4c srand
0x436c50 _beginthreadex
Library ADVAPI32.dll:
0x436c58 SetFileSecurityW
0x436c5c GetFileSecurityW
0x436c60 RegCloseKey
0x436c64 RegQueryValueExW
0x436c68 RegQueryValueExA
0x436c6c RegSetValueExW
0x436c70 RegSetValueExA
0x436c74 RegQueryInfoKeyW
0x436c78 RegQueryInfoKeyA
0x436c7c RegOpenKeyExW
0x436c80 RegOpenKeyExA
0x436c84 RegEnumValueW
0x436c88 RegEnumValueA
0x436c8c RegEnumKeyA
0x436c90 RegCreateKeyExW
0x436c94 RegCreateKeyExA
0x436c98 GetUserNameA
0x436c9c RegOpenKeyW

L!This program cannot be run in DOS mode.
`.rdata
@.data
@.reloc
TWPa@A7Qe@#
eQt>OA?Lc
FNa#Je
QtOPWe#
WMVlBnFA
Faeiwb
`WFjFP|Mtn#
DJtnJl6#
PLs6Bn/F
TWT.SP2KA
TWPa@A7Qe@#
OBdGAr2ZE+#
T;T #Hg!2K 1Jn$
bUuNn3]iS3>Id
21-2(3
>4V~(W>
HVC}dkD
BV[\P'
TDt`+~[C
$J(kdG8
Pjddt.
AoTU@zJ
uQ8,+um
@ *#Wa
s @X tu\r
O-G%_X
+%36O/T
!jN[Bp
9Ef3i"xkf3{'xR
OjzaDoU
@B'v#c
~0a<:~
S9k~+x9$L^(9$p8
#b?)|PgGdSt\
uQdh2)
mNNMFM8#Pb
jdoif9rNF
pzq_T@*piI
^jNGt`Ad
cTj|VbD
zYH`9zY
6|#d:\ft@^taF
bD(!p<
~y;j799vd
rtRIRIRBDjIA
:p,DJHAjq|S
E#fs=*#
uPCg[tTC
yOwhZt
RcX&XZh
FR+`PxbZt
3xfb<
b:xVbB f
tc~8Ur
t@\pdNXtD0<pt.$0Gj
PgujV$_/
Ov{aRS
<AsHfJ
uXVz5r/DFbU2S3$F
L+mz#|X$
lS^|\TddF
\4Dt&vZ
_bXvG]+t'p,Ksp|
a]x>3Pm,#
}FHIo@`
H=R&}u
uXNz1)j}Q,V
I$\&p.Y
Xvt~HGtb
bqfhn,rsVnyZ
qu4D-a{
U A/e1 5$TrQ4n=k
RdaCjt[8
dkp^g.LQx<|aD1
RW<s@{
AsPwfZ~J#m##
XdV@LK
s5`@4`rn
i(~rile,r.+
\r,rFs1e9$
*z^1si3# G^U@*si}$
c/RpS
_\p@XRN
@D?G,}5
:$A'`_
6$t~?T*6X
p*j^1t&
+6L%j)u\n
xu|;$jj<&j:<%h:#@b
uS1Z>$V
'3Yl`p
NEjW{0
+v<%jP
y,Bp819$b@{N
U1R?$S
*#7T@u1
s'3NZl
XWGK2C
d,1@:$O
QfoQvh`
K0:$h`
opj^5%
&xXEZeNE9{G
xJ;9xV
u<9v>Fb
5jP9v:
eA$Y*V
AjD1P:6$h}`
jrytmB
s'3Zd$[Xe
S,V7A>+
3]7b:xW
cJS`!QbVr^$$U
6$V,t_
U@jRh$
4fy%t,:"3
}P1@+7$#
UtG+PGu
|T%(x'
.$pW`H
3S=$*#IdU
P"#@7P1?:$
qbpaHI
pU1L+7$T@|t
T@j|toQ
Ru uB1
>HVE/3'S%0
ij6$cS
LCry>j4C
]ry3rYA'QaF
QEZGU@z|Y
,]P:!j
D@g);1Nk$A}p
tP*&tp#
~L|7$+(t
TFLiW;=
#etS`y
j#*c'tMPG
qs .)jP
PI,l>/#P
#j*m#]G(UXDpR
jucbd#
juCbd#
*u#bd#
va:_^;$u]PB
(dO/mjP&
$GGT#jMtt@JtA'
/QW1'/
}`e',fA4y
U-,zAc
a%B[r
x2o9V5
,aJZV~UF
S}hy,nr+
;CA5 #b`S
}0a2?X,#Yc{
c1z<$;
&fSP&f
$c15$eB
^yFrW3
S*<SM<XN$
L$$zN$
2'x$joP
Q1?:$lW&
xaEf|D9
9atw~[Nxq/Q
?PupSt(-t>
`[[i(`
cwKx,DU:e
w:$v:#
,Pvdx
Pl*d/,.YF
rZ(T'$
A*\RhMpE^[mU
#Y1M\#
gHYjPCCQ'E
BPs*:k'"ls
J":?-3
Ju":?1-3
AVIS}$)
$IsbP@
sbE2_)
h=$t~~
adR*KK#YB%
M :$5c
0:$jP8
@}"6T)
E>P}E^a\9
sR'WEE'
C$7V?s
M<V>??
Js$$y
l%+bM
195$jl
saiF(~
/ U'!g
n5UrqN%
v3:#s:$
o:+XqYdn
&7j&$=
[DIPzbu
yi1:$v;
*T65ob=
F@:Nz=
:j,~@mL#FySuz
0P:8FH
7},.V>|
}T+|y.%
:s_vT@*
%xb'>_
n|=0P7FH
ew?=k$v1Dwf
hlV $
>~'ZT@*#B~1j6$w^
P;.|$.
+/Bbw}czQ$
|Y?P/{&PG
Erm&3:y[#jZrK
:|Yjr_T@:
nm9$< j
3Djqc'
*7$JuyK,
8eMauyM*
S1w#j'
NpZ=I>N
+5>$Z*
o;P"*E
Kc;!3S
[]]^PM#
Q&O>oGt
CyVE@ZfCmsjp
Uq$]A`
qrCoap,jWA
7/Q#"x
uV}N|uG
:E:|u7
&(h]P1
+hNKj3X
LudDEe/
D'Vh(q1
yqb,(s"Q
0H`B!tjQ({;
.r%NSI
ETVDFTVDFTVDF~T~H
}]ThdL#byOst#ry6Vct#s&
2$st#sn.
pb4&ry
dt\^5#
l,d2$b?'
0<&#nc
$s@ztm
;&#;nc
B$*xqbqrT
#lP&9`Pn#9Pwr9$
PqT@Ra
>s#jr&Pe
ztyKHk/v!
cp}^Xl_NX>zSE
\`t,nSag
bGeu}s!
pK}.tA`
W jYwO
z]iP/hc
y>d\pQu
4'IaHP75I
hn'jHZ^E#cH^'
9C>Ed-w_'
=mam4rC
v]SMG
d=7,r\bfTp1@1$
#:+e#9e
vf|pkWysjkND
)v\pLrLr|hvK
i'oIkWwzsh#
m*V" gL_"
<wunB[Zzhqgy~
[T*h[`gJy$lvQ('mWdPl1-$dW*h-)
Pmk^a!
_;UPl}*lqbaF'
aOkhs')h8s(8
#h%uFwlp8.b
+-B)zlF6^
~B+d'[
! HAN\Ec
P=bdjFl dT
<j~S#mN#
#iW$M$
*WIh+?R
uiM>()
q3zz@_;
$uzwQ1l}
P4~EE] R
E$v:|c9QK
l>Yqz_s
m%$&Klb
'`!:,xsAbc3
:Z(na?@:9)E
s|@e1x#
lsx5\m
o"S;p<9OO)y
^KWQ'u!wDEyJ
dkn'vg^Q
:97$b\
;n`@cT#Vveo`
:z^QUQ
#H4|~Y
cOcGc_
RCB2d
kdWBYL
d-_jK_D
Nz!!q#
D:0XJ9
t-|*Kh
S\qU6}
gV%,},jO4vrY NM7Ee F
Rr5G|-eoR]MWQ?]
\-$A[*
lUUphqR_|[FTt
I9JW*FA
eZ>w*.^
#NJFZ3\?m
BVaGsHXxpN+p1
y1,\2F-P%tg1]zR
,'H|A X
wv#Wvv'gvv
{#k${t'{\zdw+k4zT/;,zD3+Dz4
;&_$Xza^
XNGSWWgRWO7RWg'RW[_7RW[7'RW{/QW{GQW
lQlW;lQ\W;lQLW,Q<W$`_V<_SVH_CbW
^SbW-Wi
bW7#HCWy
k4j3c'
X3j]*'
$:TJOA
b?[S*'
b\tS$&%
#X~6^S
hSjK7#HWS9
'V{F\\PnUwZ
cZF$y# t
&PFiZFK$'t
%PFiZF
Cb3aO~M
?[X$ZX
4]? IWO
r|vr:rT3
:@fjX($
,=:N%E)#6t#
c^}JMc
<<LO$FI-9!`
DbVKX<y
JJqbv+l[J
'LQ3~TsLn6
iQSL87
52/`V}x?u`
W P)SGgV@P
cR6BHNHz?
vQ$#>,
gt|'jFP
Yy[LdA#
yK@+{RCt
:q-tJc
5#k>/tP"xY
xwWkOkGL7[
65589<?)
###/#}#
##c##%#1}#C#G}##
#####s#
qVKsc!bv 6's
sc#b.DV*7n<d`':m
XsFdqD3dlm
`sqsshun
#9\"(T"%t@TqU
&NPrDy#
v@sVU\
SIdK}Id}
jxn|rFZ^B6JNR
C!>%:)V-15D9H
=<ca>e:iVmrqnujyf]
a~ezim|pth~LwA{E|
y]tgQxkUloIpsmdqWahu[e\y_
`mcTaGXKLOPS
<Y?9@MC
0]3-$1
iwe{ah]\y`huDlq8pm,tI0XE4\AH`=<d@HKOS)7%;!(@
?<eC8aGTmK~PiOLuSHqW
AVEZInM
Yx}tX\PTHL@pDlxh|drqfuji~m`PdL
)U0-%1
6mmso\wsFS
OccOm~Dr
/CS*CS
.kjjjXbaaazaaa#
gg^g\g0h
h^h<hff g
&CAFt6Nl.%
Uiai/R
jo%Ke9Ke1Je
XBt9Ke9]e
TPWjuG|jp
NraMpaV1
a'v i
@V}so{dzRGDHL
9%&rf\e@?cUV4V:V#
mOCuHagir
DdUiDr
goKdcIGe
DnDtFc
.be#Fg
UNs1Kc]zsqDe
ULaY@o}\'
OLawPJr|PW
!RnNsgQCgPsVt
CAFt.Nn7TE+
Od2zWCo
^lZSrrp
e7#e'!
$spzsikr
%st\r\7vPLRr
9lnCLaN]e
Jfoy@alnyDnY#
~fogLnLa]ec
lnLan]e)Fu8OyJlW
KuIAf;'
Ezr)Aa5wr/zs
LzteUrrKPxDet'
@hrzlv
xpFPtjHBFj?TeA&
{tfIHa%GLe7
Xc.<p*i+>*f9_
_n"]k=rl f
^ShB]^l
^F_eKggP
{znqt]p
O_dw_dzhyia`
L_yWG^
Ml$L:?J7FlK
%bPeM<VaGdKAaKOh@`aJqmJ]
$&jnb@3]pP?]$
_eFaPeoMtS_El`Gt
[Mn~bV
oli>HlE`$
-oliDAt|^HuO
WWS_orafrA
olyAVe
XPexWKca@I_VegbJtV
BQtNSRoA&
Ct_BQtN3Ro!&
QPyPfyaACDt&9
Aa_rz}croepo~o}&
Dtv~Eacq[0[aU.Yq[,d
hbbD]S\
Zw_[rh`Nowj8wv#
BA`IMcj#
BAH?HA(3fKJ
&0 JVF0_W:<hb
''5FEmV
]'ePrPds^g
=AmV\p^s
T<@4L,4$
($L D<
dSdSdS$dSdSdS#9$m9$Y9$E9$I9$m9$Y9$9$9$D
9$9$9$w:$o:$w:$o:$w:$o:$w:$
6:$-.:$1:$1:$1:$m1:$
4@3@3@3 3 3 3
&aKeGiJmvqru~y&
&AQbEUnIIO^43BH7FL;:@
4@3 3 3 3 3
dZ`VlRh}OTkPg\y
DQ;@U7LI3H]/4aK0eG<Y
LLLLLLVZVZ@HP@PHP@PHP@Pt
@9T~lj q
%3J&/s
_"&vey0
b-+AUC=
q~N1Y
L+r9),9W}h#`y
9pk6"v
7>yhQ6M\L
IS`oTQ
@|N$lfZ.@pa;;$
iDL%RI~OY
~\R%u2
cGE;r5L
%E&'d*Tv|7v
,!'i;L
>8\u9xJ{33MO9$B(B
Xs{\a-L1
BGg1,Cs
[&ap=H{0b.lq'ymj/
#FR4rF$CLBH
q%*Xo;6+
*Pb^I;6*f\Q
oX[7<r_:F
sy)PqT6L
;4`uKu
_~;#|BL~h
Dsq;zD
)/x8*F
M8WK6W
GJRX6R
GxGnDk0LM/&j
DUl6.0,
R'`j?CByy
p8ZBq}
@CIsn2
B0}i_g
k9f/[9i
);2f{8:X
95a>B9h#q)=>a
+9!OlJA
@O1,*T
;yE2]lH
&bc)0C
OpqNvC
qRD$(a73
,TO">K<9
l*6EFI
_3=_w/j
x*$DzU_
ILVUJ3 &MM
LOz@Zc-
=MgdEK^>@J\^jVgi!7
PA\V&"Zy
T`/'Ee
oU9?O<
VUoI.P
+ORVv'K.jg
Fgl,""?m
 `o%w
9k 8Ax
$]x?:;[)
VDXrw4[d
tC]/28
>^,-2Vu9J
{(hjmvK$
]C(`&D
`e#4CD[GjP_CES)(I@i26<
5}%sGeJUp6l
/IA}A*
^a,V #
gScDprO
Q&;*o4\
2XrJ!ux
;[1jb<
u/f_>Z?
B}?Cdhl
%fu={-c
4?:T_|
m/VK#D
A;J(_"@fdh
F@^vb_
O4\?nR$/+Z
,]:8{#Sv
KWIWdeN
DI7jF}ENw
~L2t@)
anfr#:
+D>bA=&Y
J{(8vIx'Q
tN[rHwA
`>%;13
HsL6tb,
,>:6'u
/PsBR3==;h
G}x%U%fr
FnyMHE
&tQQ'C'l
7H\2U6
+4wKw9y
@d;:P>
[G$S|[(qw5~\>
oVZC2|QI
9ir-cA
'V>GA/Y74'
AelsMo
h8c$\qed%Xs^r#$,Bu}
y\rV~-
_c~*(Z-;TO6$
qc]{V[
$@wwCfrd%T
'd}^=Hbyi
OqB/F
\v4j/~
~>{6:;Ap%
M@:]"%,)zys7
P%Zyxc
sa46\f=[Ti|"Pk:'}
EeTf..
`a?~N*@
=W\N]H
eTi&vb{/W^:
$w]_DK
hGoF\55
Xls/M7b(HQ
Ne}Af'$
|*7U3Zw W
8O5Fv^~l
'wli^{sZ2M
qt7*8"'*yd
^q_P`g
BcJ2[~u
vxg>Bcmdv
6K#{G?Y
\m8,}\^\z<?
p)PhUm
cZ>fu
-S&}4[
_*u~7r
4>LU~F?K=+\"
L,G\5ga r
9MF&>Z
0Dly45gY
Up^N*T
kvOa=c24
niY;)Rn
*#er9Y
)3RAjzLui
#v]-+^[e
odKCdJ5u%
ux6+<VPg+E
S:kbY3fz``.
_`,%Hx
,Pkm$9
gn6I{%u6
$)|?!Xz
,MU!HkG,D
"^trT^a-&a
@5(NMC_
CvbJJ<I?
E>IB34HZ94M
vZ|r0OvQ{{+
:;Do|TiLg0
"&/%?PV
R{o_1@=9z s
\bQw0{5Q.
/WLB?n\
K13_xjC!A}
#G/D|1[nx
3L^CqxX&
68;LZB
!{L>e3
t_SV&x
eFvU6$
t&,2t]k{Ic\aNJ
)TW#|h>WJ\
]>>0~Sl5:)G
mYMlF2
l8L%o?[5i
2^'v|[
T^eK6gth;lgamq
h%_g(Y9%
jp1ey)
3MqF\yn
]ezKJ]_
PNmOc7
aLTIKD>bh5]NA
JUDvr5
)@IfP4@>2'7
1P*{pvW-
>7T=W?-
p{-k<E
jtZiGX^
]nj#C/
<#KDJ=EL
L~L~m]
mS1HymB
6+hJDQ5@
,;!R2~s
$pYBzM
<'gx:8_
UQ%#p.
zc3{K(9mQhR8
&v@B/*k>
s=fXyba
yI}ocU
c}jJIg=qx}=.,dM
cB7AZ<
D7:68#y
;gD/G%eA~yj
eRIUg.o
uQ),x`;<kM|:=
#g/fXP=-Ti
)1&iU6M0=
KQ:;7EysJ
dws![P
Xn+" )
P}6Sj-C_D:_I5
(7SN1a3!
U@-eI2
=x8"B)b
T=I}|FYK
K%u`sf
N`S8hzFpO
j$McBSL]i6Z9
J=2kW;Q
@!]/51.)W)mZ`
^n7;{?
j#nb Q
!gVD=1
-o9*mxs.
/zp7I2ni
$YQeio
_6_vNzNYRS/J
<z3&Gu
}VSfC<Bo&1S4ryK
uNA^*e_8'WIBQrDfs
s'l3)3
&I2Pu-?5Y1yb1
V*2YMg
^!fM ;-an
tNwt~mY
IR,d)a
NFVkz^Q
Cm-|Etid-
~/^n3>
LB>:olfPg(_eW!p_)T
Me\2c@#JVD+2`iz:
a+?B?mUoy6;_.
~H[cH/
ms8E&U
BcH9S(<0[W
I;3W;0
MK8~m{>
ewy%glK3R
h[H|51
<*zjkl7Q3/
Z,3E]4
iNV2eD@
$m9V8]ON|JI
n<ses\x
yV}$,<
<c=L]mX8469?
4H^U`j
\359Q]l
;:A8S)~6
._:7;l5WB>[ x$6ZI
Ryz@`n&
p t2u8$K;
~h0#=(
v7r }I
:@[6Wvc8
NJ|XQ]MKJ
hUz8|f
m2^eKo
tT$;Rs&
,daI'4 1.>
)#95A:F
2tzFt*U
mM?fr4
bg^~i)
N..0PZJ
AY3apoj
lHyTX
o]rM3{#
vJ:mQ)Y
tnO8V{td%t
0w?mE0`:xS{
4.2jhQ=N"
p=*<<Q3
lOj3#Xi+W
hd 'UM
\85v2o
I?3_I]
Eh@GG(
(sU%y-
MUO1(Knnt%(f
.h[$Qq
y@6[3c
wFwuzTPG{X S)=vo"e|
o2tR0zu|u
Au|]%KH
*fJ,\M0Z
tS.qi[S3
^frT)p
7q'UHWkZuhB
\=bgWg
kUpc/g#
p`whr,Nmd{v-
F5O#mEec)7
dbE.i^L*h/
{1DtBY&vb
#4:GSer=Sy}C_.Im
7us?.OHW8
JT7N|s9(
X([8g>%M
bYLrtP'P
yK^4w]Y
`Hvd0qP0d
_&x2vH
$jx>=$
mpg4#=65f
sM79n|P
VIKcS'
K&6y9Xf9i(m;>
+[t=Hv
I*z?d(
+Y2Z|~o$5"m
qXX5-g
m*NR]}t?_;`i;
0"YgGg
>]{"W,
JkN=D[
l5O`ie&r#
Z/6^Cc$
_Avv6;
~i{,)'}j
8$M&c-Ee
-D]r^W6T>_
Vs5AoxV)W)A&`h%$%
zw'<xzJ
N~6Q{@
-&(D-]XmB
)VLyf:f
|=HvUA9
3UT&uUD
*AR!p3?
_6#z|.
Le[:hP
D|5u#3K
k\{U3e
G%VsnA``pmWf
2-OluJ
cI*"<H
5HuWD#Q\(;X\#
& cLk<
kTJ#A)
CiV=Ba
kL46o:80Qy@
,f\knA
.\ING@'Yt
X;9Lvnums
J0*27za
jtfsqnA8[
Jbn;^j-7Jr
^mt`V+
dc+flE
oU vxc5W=trep^3
P=7u(QYTP
9B*l"h2=:
6n{eMN
oKs}:)_]
^U_/1n
[HxPH&-aau
f#l,W7|b_rr;)>vT
~'o>.@
JNGQgS9#-jDqM0~
R;)&n~A
I51ftv
>qKj2-
OEm,.D:|SF
ceJ^]t
t>me/-6
)dnR$|g
m";Z}j2x;x0
oMwC+S
O#iA$#o
DS/(Z3P
XEm"ET W2s
#o<k\:Oj
vre-CI1
JczE$tN^F-)
mb`QtkIE@lM
"#&ro!}
+Tk''#)v(R
!W@{{qQ1J
A9l^/w]Y
pDWTF[W
uBMttV
S#QhY*r
oHtY!u#
n1UYeGP]
@{*x4Z'[[}
'/ZU(P8
xD)GD
A_dwzU{VlaR
O`qhS:v.&
?\ifL[7
l"+<41
tl,Gd6
DS&#}ytM
V>E'_R-:| "x.E
}z2(9T
'fA0DV
z$`?Mxb
(0Q/&</5
v[5H\7i1E7:>S
*_Z``d`E{y mSIq
5>l9GT
Sa2'MEZ9
=h5Hs;(/
>j+K^
J"z7jC#@HB)
xfS#oY
8c$G%fddS?C
&XW9[V
/iJS>)w}
p9cuA`S
9in%{E;
|4PX9GQ
ZWPXQ
QbH8i(
1t~ r|
@7Q6h*#
=[S8][PdRT>)KvU
`bW(]R
Eoyx9ht%
BDi9BnJ<"$qir
"B#^^=
6PJy)3/
kq~PTtq?g
;Fdn`{L
hNQ2M~#7
KOq:/K
<-6<rE
EA"/"d
m?>OpM
RUqdC_[$
.;_w.w
2lY@BW
Hsc$Qc
.j9?1Q
)BR!)`o'
%P17d{
cFkcp-
V'4 |$
$ >TVa
s@4Gs()1K
_1!?^q
kUodq}
>s8GIn-wfK
bp:NX[W
vg/_|S3u
L$88}=2
f1>5qI%
B}~EXF<h-O
0Vm|)
<LSG,&98peVB
+>lfxH
L)CTQ@
mdO4*2c2
/$; ;d
l`8S)G:FsE|
E{1_1|.D7)
4\-jyK_
5m\h3Z%ui(#
.iP2y0rm^f
=2"h>4{9qCi
V|auuuw2
qIB7Hx
oI}CVR!
GEcOm^Y0B
+??`pn
I~M(e4
M5fJ:T%
Vj++&=Bx-o|4ohX+
]cy(:AI8zq
VU7,|k
|vW.=k
>BwjA6
Z'GWbRo|j'
aF{}L&
^~$L@(F+
iI%='#2
@@BU`a'~
)5qX<j,qe1c}
sN&DDD
+z6W\?^
=^nq}0w|
SV'v2QV
g lD{2e
/s%(sn
pWl8#l(-p
_:;M-k
beLclR
ORtZ@9
mUEp?P
a/'_H0CY
W,JT@Dltp
[q8-!25#,Z
T'+'29@f4&yE
DALx
q$ONW' *d-3
&(5/@X#p
IX%~^$xX$gQmO,
1sbn1!=26
oEx{S_
aCU_mb
8|L^|R_\NB_
dwU6,
-~"6.`Kc
h!=nd&
*/4B7$x!
#CVtX<(p9):(
J,F')X
/J&hp9[
*~@6O'
Ofr2#(
cnqOe
I+3MOe[^
m`Lwv5
TcihiICr
.fY[xcA~G
R:B%r@x`A]>
R6K 3b}
L0(.g%%s
u#(%RuPO\[I
<TH\FTCF~$G8(A
3X&@Th.O
,.`iqEb9
Nkr)1|7
[6l'DC
j0tUFj
W=Q`$>h
ab_k{f@
fli<`6>R&Y9
~;BE-V
I.CJ)[u.
-\nv/cMHSM
G#0o$@;Q
"gKEl5z4
t!g-fTfJ
|:?-?;
(E4mU<*|)
VxP@`j'4!zf
hGR4Ud
mMhkg
NopT]M
!nPmX_LE"
|Ww79%'g
C^K@&xu+
a3WR'/
?D\ioLRH^
C0G$HX
KUPczp
Varmy?=
6+?jI@{^x
S%y5*(r
8J2eEIsVM_
b#hZn=,
R+*-jnN
?*z{4k
~%(Hi[
B_PXiV+0#
E+_>n|X1p
R~ZJMJqB{R
Ppd9.>
v7L?G9x\;i&x
D {2j\8z_>~yYD
k3>=dM#
uO)1-1@aR|dv
Ef2HZ1#S(5
jp{pN&
e.K1B2f2/CIzzW
ZgGB!=Ix
**h+E`T4 ;6u
O~Zi>g
sFw+!-$mUV6cX
e_oJ@I
JCTQd@Tf_
T9=$JI \
hLSR)=
sCGzz2o
cBQy*DX4ZO'Y
#G|4qJ
fLvX-V ii!.
;J&8K"
cy5eXj$k1K`
hLHn;n77R
dj|4A4I
7cX4dw8
\n\mp`K
^D@f59n
=I-C~o@
C}Ichc
V>Z<wz%ycavxva
]!x1a~l%XR
DseZdj2
:f6%fp
f2&'*i>~P=AY
bm4/dh
a,5TBe
pL(9BK?up[s
}2gRdU
y0lc#T
ttc\gc
ol_xLc
)s<(kIX
\}`_]}X
zAeXB6?
QFdP`)d(
L4s[*@l
{X$hvJj
&y:Z[dT
46yICZ
$QcK'D
V#CL,Z!c
%%,:faAE
<x#OC4
|;)5{r
{75)YLNb
iX5(ZBh?*
G)lyM1X<6uQ
A-Qe`(
\U7"Y`n8akjDKwfte
`EbOvJ`Z}%x%P2
fI0%R4
>Rj( C
XE>0rp(M
c']^LAwt+p#{94%{w
FcEpF!+
~4 H~zwCG, Dg
[6Q:EY#1F
~+uV='>o
\=/(Y9n4
{V75}[
HACLJpbID
g@uaB:
TrERXD<{
z@W aP+s'
7?L:jQTu
O5*wJ]Ng
E))LsvfI&)qr&
\7BJEmr"_
'mTWw`3
P|rDx/
mjgF]
Ry"_MOJ
/?&9mVS<
o&]S|(h
3Nk]^`l
inpFHv*
.E$@ q
.-tfyu0
@|o1MSd>3Y
P+eRn}U
hI/03q*Rj1+
WAor{3
.AEY{
PIZ<1D^Q,
;ruwkx
y69* ($2fAkn[7
1\zN]qMh
C-kXz)T
m5o^Z3
GB"Fq*
+D:Dmf\$mr/
YplzZ&:
+AK5-v(Z/hvs4BrX]iY
e5N2X7
=Zk(O"O?{l
[/$&@U!9vx(
GlubGD
W!]a=c
Jw*ALLw:
m:gizB9z
G)a8(+f
/Sw]_[h
nW":>o!
B>I|`5x1=
Yo2=qz
SthEYew7r
[?5+R>p
+\0-,/Sd
_Lq8G;0L
i]yy!te
HL8[c8
;:cjr{{
w{:L5JB^
Esc<iF
L/1S!#@tO
JDSdWiPu|
ng(d=[
9D{_Zw-
)HvY4,
Y#$)2F7j^
k]n%\"Y
rt3>p&
82Ra[H!
m`dUOggzS
A}&S4xWID-
S{nnmT@
\wi9c:
N5y'jor
-9a:YC
Q(/~-)
a<;l1-9yQ
)>vZ3g
u#gFz=
Bp7A7Q/T
lK."wv|:hU
Zas}QdzNn
g#.FE2
[B)jdLZ
<n;dB.
dT%K/7
heeu%*Q
q@oZ~o
`$N(8lYL
r^|IQ*za
qe]1v7
2,dHAk+_S
tTiV&^
4#hE/KS
bz_]X)]!9TdrjsZEsj\
XD5f'V
!+C$b__
Z`H\,]B
L{LYEo@;p$
*.< Ec
o:D{|:1
;SV'$fV
^M]@C?)
$UXYU{#:
'|PN8N|
"DNU*[U
~;%f:oy>=f<b
ibz6F$#r
p(R}Cuz`R
KI/0:@V
yh]m&Ct0
aW!<&)
Vh^W{
{QMq+q
Ip[HM%
7z [F Q6
Sf%$n3k@saJz
W^9]HaEq.0 | qr5
z6Qng:
u:vlJ>G
29-4.u
GD~/|S
C=b%%;kD
%O.@g^
m9=(\nzGFKfQHU,k1/
$&j#HC:m
}oz~qQ'
j9czt:x
Kj]7IV}U
^)d}gc
bGO;wc9
x/qK"`2
:04 Y;WqA)
Zo%U^
AU<ZJZ"
/G=bt'
2vXgtx~[
~]JJOF=tXxD\
V,+<czE
9j ceQ
# j;=sk{`l
QckwW
[>K<'j&
{787]4$a
bG=_zy
l.N:ZHSk
t\6$}r/L+
NiE)WRkf]'=mOVlorU2
P3tq!Z`
9fj77j
}5[uANy/
KiTi[*
TT=M}L-.F
,jNUG5-
lWF'1P
na5FCH
q*=,Z19|NTW-
nfArdI
li'?i(j
Xvkf.I &/TO
W/]yI@vYIc
x13AC.
.Gg%;z
~]`zLh
|b'?s_"
{I$<lS
Mf]n[-U/#.mJPi
0S<4\$
Z3XM_Wk{
mzvHz
VVeb<9?5w
8G<xm&-*
r"cPk\Y@l!g
_98h_6
a,`7J^1
WF#QK?
XzuU=lS
>=?s -
E;@[n?0CI:!
JiMTg$\l)7[
ktMvGs
E!Oq`lW"`
ON"ULxV
fq3jh
@sT',hN
o8u{M|g
\p^G}
g<evqJ*`
|%P~oNaF
%)rO.CO&9
|,WKWiTt
G$*!Pj
21c'?,oa~o
L`#8XY
QduIu@x
*I)D8@&1A<
2Z?*n:'
,C54@F
pv]7p[%zo
5>ur_&\:
ICL>Pq
DBh6ksk
_"nLs2.,
_H8C7~
|(>Kw't
Rr$6PjDA)
(a!y<5y9I~F.*ML<X
T(s3l)cX
vu#4WA
T+0vv+Y
{u?~4 W!~l}
<cdi&`~G)0 q
)PumN/&r
s:,Kutu
p0L[c%
O|08e>
sCf@I[]&.
gAN7\%3dkyqX^N
5gl|fBz
/\W4wy$
V*Tq&*
)eHB@"
>x[H A
b12ty<
V5z,9%AO[W
tOn](&4J7
R}rs\0
VZ;%Kr
F?@!,+NU+-!
yufe"Lk,6
GK2zn"
N&Ru2GSL
v`{;ZV
)0&0uF/
k\tFP0.Q
U$h@K|J/+K8
KaoK]$
Lm`#>o%
VXIY4Gm
~*=;TJ
4>H;RN*OsH;L6A@Xg
@c9`<\|
X\tHTka
QFn2JoT##Z]D
qo~+:o]
^w0v%[2 ;
yRZw^f2
5L$kte
>4zmH$@i
-.A#o6
h`(v/m!}
~._s
S.aT$B(*
zwfl|4
C 4J.#o{
xVnWX6#
9s0#B#QGO
'XZ\b)#%
]fR={QYg
W*=c=W=VcB
Ip5MTduM
<>WSm@
3{\{bm
3U9;Pd=
^Uw>o_
n<xdo'~=o_F
:F%5$icM
~az|bK
/{kH~U~h
WH=GMTk
kX^DNqE
{=$5#u16
_M/jkj
zk`zB2mY
xE':H/
^eSL~EQ-
LFXe1M
o-p*f
ps6<qBtk
7i=*fWbf
.I1*/Q>
CU<IYx
c#q3{WK<
P)#)xxNH6
}g[`"1e
5GTl_{L<$v
^JA+n2
c"EPxYU
IMrxMy_t
~+z=vGE
TKr=$eg
9_~eo/i
CTr;{#4y:Z
jcPS(34xk(
_}}xXJ
h)M\w=
h]|ELbe %|@O
;4WTf1
(3<UU%Bp;
=rj2I=OIKy9\C
l`AMzFF
<5)deL,G5
YT J%}94
*RnfA4\
KfrkV|T
,<OvD
uio>Y&&z@|yoa
r+/vO:Wk7!/,
j|HI=u
u}Z2;in
U7vaQK|P?;
3wbH)?l>1K
DRyGYZQ-#q
p)/}MM.C?!2o$k]d
gxBe&Y`
L:NUH:mxQ
\2.Vz-q
QP<>0s=u[V"lv
=09\79u
tyLvJ7fK
5(X7W0Q b#V$v
P(c,=DUY
-eh\:'
"c=^P|$
;k6o{PC2
r;&eHX7H^G
SX(#qaIEzRG
>M,ie_;?
sc9q!0%0.WV}x0
k^kl.EfJ?c
-4^B|)o
O#[Km@
Y.W\_:mB]9
klg(~c:n
kt],v"
wN;oS5G
'tu]kM+S
}E$MGdV
e'S}CGNH
vxGH$c73xJLx
-$4W1
H6*8|my bg
&g0HS:.
A/&n.N+5!,'n]uwE
b{t,Qp
~LXG#.H
&ygh?,N@
=d|U.~
jBC@qhZe
cG [2!66
_GE18<d7RHf
"}G^2j
2L/*et6.NrI
}~v]h /vp
Cv3m2hc
4(im)C{+U#$D
Q?sP\y>.
|eCD'#
M/c1{ZR
:n/9&['_V
W&b8cd
>&k])P
GUfNga
l{b;eg,1r|
r "d?6#T;b
{u&c2TAmT%!:l
QS~79[7:
A7, :
w4/:FL
n2D+tr,sL
-rp(,/zN2'
?'gN@n
7T"rRF[H
Nap-vaR-t
mq3^H/
US.aom`@qs
p8i[z1d /j-
bY1g!9D3~e5
j&B720
3NoWc=ORs0
E)uHZ-n
HIOQZW
B\F%;\
-HRR]q;78
x<F_]jp?d
T<[?MZ]e0=
mXGkU_
azE.z1
T7K1z@0
"xgXR~O"cX/wty
I:bs(:Su#J
_9Tjn4M
$21?RhA{-y{
.jj>ESC
}=-1[9mFw\
1m4E%ziBAx5W,
_)XW+#
4bnY]g#i
&SA^sCJ
Y,jW06R;L]
~ pw(5.
eoN>z]
>~G4!c
T_@QfWkSS
u$Y4ERZ
Ui'5I
E71(=JTJBx
_J AL3_/
t[T:||pgp^6"
@rZ $|
Z?!4]5
iy'm:J
?5<JIO
t[p47#
Rc6s=!lf
Jf0p^D:mcm0
jq^I 6
2nydGQ]&
6X;ZR#
'LWz19
,Ag)3]kp
^xVEfXi
Ns}{i9+]n
t<(dD2nD
k}XonA
02e`%l
(@_"M
%PB5122
@h:eQslU
M:#;2JiJ3$
[E&oh/sw`-
!{}MeH]
s`8mFP3
pY?EEsB^
u7Ertv
Dy}JzM
Tv,A,Uz%
_5_1^Z#V
g_HvH)x
\&~AZj%}
eY#?=qb$L1
KKp#TM
BW_7:T
/iI16w9
:%N|1KB
fv=CC]e
TfW-<){
^#oYe}+ze
i4aK^a}+~0
E^27b>;
vvYeoZ
x$:yrkEK7
MKX*T>
NRRWPvTD
&~.OHZ
28(kLnz<#$H
qA}4o>?G?W?
6<w#fq
ff:B5OI:F
E]"6?jj
R~S_#L3:
r[-lm|p*G4~BCjHM61
iRVblL
vmV'I*
1<4+@i5h
H:1 v&z
KE|[_6(l=
q4F (z/LO
`<1g.#
!'sxe$i1]L
EF_vK^7'8u
v)MY/kUI+KgG
af-+|{z vb
#(NVNRl(
og7KD~a-"={
-'qht
x27O]9
s2$V(8
6cQ[?^p]o.Io&Z%'~
Qc[jN6d
iSAu`9
|fy1#DzaTYFl
zLa@CCutlrRa
t1@ KE?M
^0fm*P?-
hSGaX<
OyQZ#Z}~`B
~:H/E0Co8
eDm@"B
z,=A42PH
vyj'ky
{#'-\BLD'
Nxg?ay
UH_fbO
WH9cuZak
Vqic}2
hO5zlj
4>q)5fO
g_HVjxF*y\c
3f>7jb}"
9l%GxO
GuBP}!M
)b%::U5m9pR&)
s;Z-hz
ZB)P:?#"E6Ti
:Mx{OA
X`j[>R
7SO7 sfHyaE:[v4
(>d~9Jo5
McP;A%
#rXDX'
F.Ng<]|CRC)p
H@",;=
cKgP>ot>gvA96YQ
I(%&c|I/h"7!9>
Q#\q(SA
qzM{I*gvS
~~FH4*V
X6g%TY9-.'|<bj
O@I2B"
Bako+'
#u(Tu{
l]7_+lk}eS<0
YibsFT}
DuJ?MH.2
rg?bOx6^
AW[#/Z{P~"
bT*gI$}
cc5lP`
l,&vA\h'OLga
JcSB<EzR
"<Vj8gs
_cNrc6![
LF4_n+^vn
QcWD&Kw[={s`/-YDh3Q
uadmz!
Ke!w/Z,[
~)|cKRMV2:Ob
5#`G9f$
'6K.t
*U04q#R5GV
X/X*hB{Z`
sVl462dG#OXG
56*)QCq
&ww3z4$>N}%
.xX12R6Ij
C?kI!Io-+$pG
"CbQ(lfK$o3!
Px;'&Y
0;}&iG
@]!#L&pDY04i;j 1WzYbYFwVQg>+
fekfWh+V
-\'#\:1yS`V|
b>5->}
E #rulUN
o n^h&b
6"qmck
'-]$ly
VUNeO8
Pimnf$L
V\#;X-l
oz}zb<
#GThZ#
y,tLI0
8,&:uT
U^ER9(y+
3`8|
w^H5HC
>h`,gl6
Y"Arp>Ou
`MnbvI
$&U5fd$!
)B$Yh
M `wda "
};,:S"zszr
,*We1~BrE+$+
lZ^eYM
36L|*:e
VF1C$9:w
IgUV8vL/?
&[L;YmJ
'\>>KT1
4^pg"Dr1,tjz
19/ux+3
@,E@^X
l\heeKb:J5
#fh|oK:8
:dVx(1}mj\5MH
LU.8 y
[*g^[=k#^(5-
N&d.t=3^
prD1wuB
M;=ImKUCCd
Rxp\'5
-95LKecW3ax
+]Y&vs6Q&{:
;]h"0$4
NZ-,((Kf?F+f
z+!MAIL
fI!J&d?n
m$Z@oy9?p
vH92$i
-}xu"J]|6qe-
<K}-x"=h
74p(
U-_SNa
5QzK`[J
1-'`]M
Vs>*!d{
kT-~)1\n
! qL9%
WKqE|K3K;*sy
Z[[5|sM{DI
9moW_
P.vv4i)
/P`#8
^67/md(U\8l-Fd
wHd7|=9q
t<UkL_gA3f2u"ye9
'B]R7Qr,
zN87q6-K,'
IVC ,4\yx=
+`l`zQjk
Z?JvKkA-V
,<]rm1Z[0,bW}
m=iFH?_z
\S{qx_
C>"5!w
M8vY{+69
GZ)&32
h6~k)CjtTfem
z![TF
e$ru<i6c*qo+Z
pCl'ef<
ac/6g/$7"D-,l$j
e,o/trp
{Ch"dyN9CF@z
t.1m3dke|
zfX{!^7O~&dypC+
&Uh2})
f,2tunv
wGN&jn$
:/,o]]|_pH
0=1r%GO>-y
-kL*mm
B7K3d$I
B0QOt_h7g
?:eK0MRN^
p"hs*q
R6)_Df9
$85E <rm
"^@rHDy3
JI^FN]ua2
x1.LU#Ws
Py=jIK
|=7s.S*@Y]
/-uN{Nr
Qq_[@!l.O[s-
ooy6$-{L9:W
*+$LG2
)s0An2+i=bi
u[=o}^a
eR^uG:
j?4X._
i{?(3P_p|{W,Q
$D 8g#bUd5dI
,|djl
@f|r]|P
bH5!%
;B`<#[
ed.\7l
!nkW[
+eXRZoA
t,+i-9
^k*xh/
r/{Tg.*H
zES{=$~\n+R%z
G&*=Ek
0&_%NX
1McGNU2
;9}m9$p`
^<C#luLB0
o<rT3Z1
(o|_>6%
u<nH%Z
kU#xj3Q3y,.KW&#kG
v1#WxAtTZs
/K|d>rNu,isr[
6{ND*@C0\
batT^9Qe[@8_^
Jv"Zb&
<p.%I|*w? b3b)0#4./wYC~K4M3v
vZ&}zQ:;
U',\aFT6#uemW
,7=9l}
u08*xs
BDx#{Ebbm
}brbj.c?=6
;!YFv8
{-nL*R$
YzG-\m3^}n
(MTx(8[
I p$c;MlJV
1Mj{qEQL
>;c4g<{o]c&
%lbjjn
\Bn7/l5w{
BOt"cOWD
X^In5;
=VD#a+j#YV#
o#f{#5A$
$f#bU#O#t#dr#I#8m#3s#
[#Cq#}
#p#we##O7#f#r
Ww}B$V?v?^/'i0"
[]07###
;#T\#4
\#?##~#
$yR#>#J#p#qR#^##
Q#U###
#)dTq"
<PTGfb
T T#ee+T
\uM<OLiN,c\LL"h
%|dL/Sr%
2 PRR#mbBd3
P2TbMb#ES2
P5bmSeS2!PrUbbM
PR5bBy
a"!rP2aRa"
[w}ZC!C
w}NpQ@
wA@Pw>>
[w}rwM
",|(<ud@8
"3<;x$
CdU\kdy
$(\ce\g
zcU[kcE
#?j#?z##?z7
306/5;;)=&81
EK9~C5ASF$
Hc I`"KZ#
$"$0y#/w#5u#3p#
$<$>$@$?$?$0>$.<$3
)$Q!&$S '$
!a%ggf+g-g'g%iO
~v,i(i"YYHFJ>F6A.C&v
Ujm#O#@##v#q#p#|p#s#ur#no#u#######.##|###(~#*U#-Z#'I#/T#'
6jDDK$
Zc0jE-Zt
TXRy-Zk-Zkb
zWUQ.Z8^tb
v#&HnKt6
:#a&.$uD8%\i
1ro~FzF
#azEu(1u
,nb|53YoWtS~?#
B*0cw6kjT}G
Y^#hwWGu[0@
B<?vS7
BlnHqd4Y
.d~H_L
:B<8JF]:
=}OczOMn#
u^pd4cu~$
$2#MR23
fq;PwZ&,;
;(f;}q
j0jcdi
$;XwiX
t8M{EMkEM[
EZMEzwEM
EeKE#2VBv C
GB6"rAr2b
U6ENwEzX
(qwOwE[w2
;(vOwB[ENwUS
#2PKBBZBBZBP~
#q2A2A2,Q2)
uz{j{X
7@/%')
w#~#z~#aO~#S,
*$f}#^`~#V}#N}#F}#>,
]{zPz}z
|zz`zzzBztzdzDz\W<z$4z,,z
zzyzkzLz1zyWyyyy
z}#g)#
yxyy_y@y
Y#X=#g
#Y4$'$
zi#xj[#gjM#[?#[#K#K#d#
d#8nl1
I;TQvFBGG
bLmFgR. &v:
DkBmw)
_(e#l0)
q#hlsd5'
G;"B/D
myvGylQ d7y}xtZdF
]V`9]^/_Z
$_^^Y_^zt
a_0_it^!t^^i
x\`y_^oite^#h4
_|s_V]] X
kFM^Y_k
=] k"h
P3aRaN
Wh^X9][
frDcq@
oX]fY\_Y[
^.X]'Yy\#
\]]ik#
i#x2DJo<
iWGjW?YV
j^T":#
#0*nr#
#3#L#[#]#Q#<#"#
j#,n'gV
*:#*#o*#=:#
BNpVtld
b5}____[_X_0~_5_%_%_"c
_i_i_y_
^&3_%)_%)_#pH
S+L5C3-C3
c;*#H=<:*-p3=ACCpK<kzy
aD&Y<4
cacacac
cccng+
3H|hth
lhd\YZ\YJ\MV\tJ\SN@\SN \GF:\
qH>M[l4[l4[e[[q[A[w[4[4[
:~[#2c2c
uK=jb5:b=:b
,j2,jBU
>7^3bq*#
t)j#j#c:#1:#
n,Wx;b
Kr7|(t(l>d\<<r\
xM}n@h>
6TnT<I
3@,P
iTToQTyTiTyGTH
PuS-S-ShS]YSkS#64L50K
0K%NQ&AO
rrlE])i0rr,BN *#O:#
6BdIds
d\sTLD
CZBP0PrPW_PLPccPa/P^+P8PZ4PH@PHP~P
QFPxP'gqPgqPtPP
P9P)P)!,
jct}l6~s^
LrRKiIMI
.BdI1C[#-A
-AE4^(
feroti
tlgdg\QT
PlL)L0<LRLNL
Le)Lh6L\3L?9LX=Lb\LggLLt>{L5Lj5~LLgL_LLj5FL#IF^&
JQSEWDX
HlFVIb]E4WI0+2KBaz(]cCcCSCSC
s*#0:#
6:dI{jb
LKDOo=
t|IS|IIIH
PH0HS0HXZHXH`H.H4H
AHiHYH8:H
:VH#">2!7A,,<(
jI1K8ND
mfpn:~s
1V;:#H*#
.:dIGg
fElEfE
DEEE[EEfEmEgEOpE+
PWoDK]E*D\D+D
D#Y?u>
NPx@xxs;
0Q:*#e*#.:#
o|vYtl
\lsTmzLgxDY7
@YSA>A>AIATA=AX9A\5Aq2Au.Ai*wAm&sA
^[A2[DA.W@A
OHAr{A`inAHAC
OQ]APBIQ1S>XM;]I/!%$!(
/4307,;(
9/ ,x]2;:#0:#
]]]W5Z6V7b(^|mtiludq\}TvLwD
v<:9)P$
#c|=.=~G=+z=0F=KI=UM=vQ=iV=Z=\=Z
=yUf=rRa=uXf=g\_=z]D=t!==$:=G=
8$wf<g
UJhIIr]I]AHNFG
CB"'AmcZQKELE^C+C
w6`:#y*#3*#
44^#.*l
Yy++$+!FM
,$8(P$
tix_|e
d4s=JRFo:r:S}i
?AOn9#
####
>:#*#*#v#[#C#/#!#
2K2U2-33#5N
5|uYI#
###p#U#=#9
;i`V11
*#|*#<:#
t=lHd\RX9:#VO"
I'j[h$>D
~.7d.5`.5`.%`.%`.
@X.7Ya./Ya.
Ya..8 .1/'.
.#50$31$
180-.%.
^Ox?\dx8
44^Vt}c
eC8~ML
DCC(x(x
SEQLlD
m4bKD+/6!+1,+
N*N*L*UQ*NV*O;*A8*J=*d*
*W*W*W*Wy*as*
*u*j*j**~y*%X9*%X9*#
,0@/0;0B-
L61AAmY3OE
#tz#"z#
aEUDi<
`irs|i
~|itil
NA'76Y'
O'W)'W9'W9'a3'
Vvl|&K&K&K&K&.&'&
G&#B-E-
,v,x+c
Cic%;1
DMR[fo5:SP\
lz7d7\7T7L^DS~<[~4VO,
UDiZ#,#$#$#,y#3x#
e#^K_#YPa#[Sa#D5@#M8@#;C#>B#]U##p/#p'#
p"p"p""o"
"1"1"1"7A#
NNJJZZ7c#g#
\9T7L=D;<
__AD&1
E;E2gU=B
3:E,%2
('"& , *&
1^h)h)h)h)0JYp'`'`.(P&(
lh)h)h)h)h)
zK\dU)7N*/F*[@
$Q-&I %Q$(Y(q&i)((
WmHw\,
I0>C.4-,:?*nkv
qgp7 2
'}K<i&\
tT^~mo
\alvkdHm\ZT
xLhD)i<)i4WS,2B
Rn@:#*#0*#
|<7tl9l{<dv
<k4qr,kl$un
yJK|t}
uusiK}
#'Q=!6
8QF>]@G=R3P1F
7^uXB~P
pwlr^J
fpzpuroe#$
~~wO=C=
PINZD#z#0z#
WT}TaJ
TaR_|`tqlwdA\DTDLxDE<w4y,\m
uY}cKpXP^BNTLLZ>JX`XPh`D\\I/gL4d
8^?RB"20X>
9kSQ}
\LID|<v4x,B$sD
|9*tI*lI*d
mB`tD#lL#dT#\qTE^LND<y4,
J<-K5+@
}nQaONOKJDCSC=8s4q)$\(3!
lL_SGU9e/nUdD?QT
:5/n1@+J&<)&#X
z#z#1j#
Pc?^x^^Xc
|tld\TLD<z4,$
2.55`i|ci{a;5
,.$@'Rz&$PDN
)&$n.agqfGD5i
/Rv}r7!9CQ
/C9xXt^l$wldD\GT1L1D:-
$.<@R'z
:bBH^JB
{ze]/$
drZP\NU
[S]D9<i
AA_!j#
lLr$\CTIL9D9<
;K6HN9HVS;[~JP;K=U=M
t4>3M8-[6+U0T"$)
00^23lE8aH3lx3lBc4mp-^p-^
B$qs$y$L]$f~$
g|GwEGzx3)Kge
#&$D$8$E$$
$$$$L$q`$
$}$$$}$k$~]$
$T|$v$~$m$>$
$3S$9$>$qX$uc$
7XP;V187Gvp%H
wNdY|_
z$i#O$iy$
,\{x[Yx[
cUcT@s
-Uc6Uc.
a`c$?gO
5gVfORf[Ya
j#z#z#?j#
z#?#?#
$.!$-$;%$
$9$59$=$A$D$)$,$.$
pzlUiZcOUSBAqhb
^YI#m$u$
$i$m$f$p$m}$fv${o$\Y$b$$$O$P$Ep$?q$
e`,ju(mom
v@xVvc
D@X"+OQrHVr
*#a[H1FY.
{wC`uSa$
#a}3se
5d!Iw`iQZA
"%\f/55
rm\zUzEC
A/nPs?yPxj}d
[<|EQ~g@tfPr{Oc
XtD~Pc
I`r`vn#
D\huFyHF<ePmq#
#a?dmDO,DUdj#
*#c*Ndt}
HKEkDk
#_Hk^h\
C 7[m#
^h\CkLbKwr#
#ev>Een'avdv
~]*O8^,`.
`d2]S_
K'qrq4
(s<x8
rU@r|}
8ad#aMHO^
qGO>VGOr
+b5bGOGGO9
+25^KFO{yN+5arNKbY
Op5qrf5
'Oq%5Tara4
'1Oar%5S
'Oqqe5Swj#
['Swq5SwuE
x'sCkxHXsChp
P[sP"0
#rUHyE;yU
rvHv;InAu<
MO~LOvLO^Jr$!4!V
KO>*KO6*KO>
KKO;K%!4
K"w><<w
Q>===4
kX{X{X
"#[Xx+Xx+X
Nxx{hnhmX
$x?$w$
J$J\$&
$$&$_$
$A$##[#3F#K#3
#@#]$ej$R]
}$xj$w}
$]A$e#
"${75$
+%/6#5
=H$:+:
t#/\*$
xNo~ovyH
9ph|tl
!AxbW>L
1X!!!i:#:#AoU
!(7S'S7S7S)| !
|:t{Vlydy\dT-L:DG<bM4cU,
n\x{p{
m<elc_gM5_Z5-%
L\D\vlKK
6!ubbRR
Xccvc6
|2uh.~d
B`e>B#
#Z#d#b#U#;#
d)z#j#j#k
:#T:#=*#)*#
K|Gtl1pd2{d]>o#_%
{b)j"`"`c
4C^_uydg_Yigjq
#%K6m7W
A`Iw3^^NZ
4x,W$C
kDJmqH
dx[s`mAO>RFL?,_6
#%K6mCtd
5zEm{Rcq\HLP<
2d"d"1w
,'w:9i|*9itClPdJ\`TiLgDO<;4%,
PNllvy
KbheZK@G]C>enfH@
HfddGr@H
8BBktUHJE"DfZqECQQ____`_`_FD|f
lCdF\6T
$L5cV'
@2WMJ]~}fxcj
h^Tum=@?
.:`I1NMVjMe]SAh..c?(!
o_zj?
l;wdG\>TmvLCpDXk<&4$,
2JDnlj`6\jUUMUoy}coyDR$5T=2G
#%K;m|ehy
uFyjNSRvG
NWWPQPRR;k.#H#
CTflZdZ\MTxLBQD}:}y>}u"}Wn9}j5}f1}T|
|Z|?|H|`}
50SC|z\|zd|vx|$
iAX5\9@
?#;'7+3//3+7LDg#G#
KadE\kT
Inmycpy
yaBy/Cy(Cy`Cye8y
#y"y.F%y%BxLNxBJ
yYVxXRx^x]x\x
>H7hhmbm}n~k@lDlSlIalCekNbl
nq$2pl
_Uw8_#y#3
d\`T1aL.bDh<l4p,s$w
?SLrQsyxBv
usuamu
MuFAuVO!ud[ uzW
utt`TW;Itut[0$
!O_$R^.lK1W.\!G
##Z#Z#
#+#?#Oz#Zz#Wj#Hj#6z##z#
LFm\;mGPmBm$J0/"
1z#z#j#pj#U
1N[jWgjW_jwGjl8jp.jq'ju
jZiai}i8?e)%S)(/7
~i}iZifi~i$W
6<BO4bO<bOUCnF(e"'f#Fp*1pe,ccb!o0e
!!1uB3v03>
uTrLrDr<NG4@M,}$E
kklfflfwzffvfnfff
eKeeKeeKe
Kepne^he/Ye$*2lm/c_aNaAhHgbgUnd
|V"V"V
RR_U~jhaNdrKp-i 
d~d\[TL
jbJbcJb
Jbonb^eb<XbQabOdbnGbuJblMbRO
abyR^bH5fbF8_bM;<bw:b
b2&b2>b"6b".b
pbLaNaNaNaNaNa6a$
hpb{PbRSmE>mw9lv$l
x*#*#/#
dq\fTgLlD
}^l^l^l^l^
^^^7^/^'^'_
^07^^J^
^e^X ^`
ucE8i~'gx gsBfjGfXMMLj3
Q4Q,Q$Q
U>*#}#'#
N?ML'%
tVsssrq1111>Q#
ZGN[U []
^Z`ZZZ\ZWVZQXZpZ=Z7Z3[@Z@Z@Z@}Z@uZJZlZ0WfZ8W^Z0WfZV^ZZ$xKxKXKXKXKAt0
@2K28Q8RF7U8S*RrR-R-Q5LN
{{FIaR;++;;7
An<W4Fw,
|thW9WgW1W_W)WWW!WOWVx5FWp5>WX6&WP6
xVeVYJVAV2Vu\V`WVsP|V$x9R
Mx'MaMif
l;elx%<
?|?t?l?d?\?T?L
iIJSJJS<SpPS
NSleS.Su2fSN3^S>GgSLdS@=SA5SBS
<1S-c3S6IS8?S:=SERe|Sc}R6RlRlRlRlRl
RlRlR$'L8Y1
#~C<cMsMsM
ka^CG^WFnLF
q|Btwl@d
eO2mO#6O#.O9`O
~}^POp5
OX6&OP6
OaNbN]N$tU
*<$:>8@)C5=358!/B';-5+
LZK[KhK-K+K4K:KHKgyKe{K
}K<KB\KdKKKK]KNKNKFK@KBKtKnKJ
<QADF,2F
@`LTK+
ufctnyps2udofq
`E##0#
t~}~|bt
TuHp~HzlH|HH
Rvph~G2GGGG``nG)HG9'GG$
>RUWQ)9&:
gNrMD<
nr6O{x
lV}tqtl
ftllzd
<4,wc$S#
ATaDpQDxQ~DlerD
,KD./@DuDE|DVoDgiD
ECCCCCCCCpCtzCrtCdjC^pC*EC
4&VGNGFG
intrhf^b
Xy*#*#0#
jj|jtjl
j<h4f,q$o
{GyIekp@`in@jg@ler@+>A
~mQ?=?=
@=?=?^?_Z?]s?$
:\J5H/Y<$
wz\|fnaq\t
L%:v|*`?/
@<@<%<
>=^<6<=<6<3<5</<Y0<-<'p<)n<"]<^_X<
\;<7VA<:S\<=Tc<8QN<
#'U(l<_>HH7Y
I}IHN!O1R
vlquvhMNz
?IY6j# z#
>S7GERTMW\
Vih|ttanlpdo\nT
uLgDf<i4
CS9`~8R8AC
EqHO8!n8k&M8
882hf8"h>8g68$&
P)xU(qS(g_'jV.cK.m@$
f&t_XrIO
^ToLpDf<x4xv,{$n
4?e5A<5J45@GG5BI?5zR&5O!5PU&5ZR
5PI4AL
5GL4HK4?L4AK4CI4\T4wS4yQ4O4Z4nY4o$4p#4
A#@*6 {En[S$Q
#FV#dT.bN.ZG-
T(~M(O7'=
>Z|t?l
]d;\COTN
D;j<k4],r$yt
shw{qW1{T1t"11
=\1O0h10Vw0|G0|G0{H0uJ0^=0@@0$bQ&Z>'
;,~8,O,=,:1C-3
8(4':3)2
,P,Y1^62O;1,)(-
1o^0pa@pa kk;;hbU\F9P:-
gK[}{Mtj-uj-dj-pq-^;-@?-BA-zR-W-VX-gJ-
P{-c%j-'j-~(e-
3G-w-249GuW-tA4-]yF-,,o-NR
1_,Z^$J|Uz
:P8hoaAc88
HfETfE[WF7[^4-4 #
UFsjyl3
lF=XIn@vh
kDsGiLcHkFo
7m[jLfOSVOFii
?SrSIdQJ jKnY
~j.n&.1'4
3131m!d
c"qDbC
den.
D6~tiGvd
1d]v<1rHef6>z^0g%*3y
u>DP#{_-
_ {1g_-
_-H^9P_ A{1_-H^
_I^Q_B{`_I^
H30Hq0HB0?IO0+F0E0yE0E
1FD1H3H3H3~D
BV4A4uA4A4A15vAr5B5/Fz6D6D>7D7?
D4<':4,$\
AEBAd?
<8q<8T<8W<f9<F9<
9<7#=7.=7}=.8=2=]2\>64>3>}39? 5
?3I?%5?4?z,F#
.15.k2!02/2/2vHo4
Q^9G?PFX|>&
5;K+^+n
+4V}@
`h#=YV
D4kE4E4BD
5\Dp5_D5C5PD(6*26
(6n+6)h7)X7[*7V180808
18/%9/59
96_9H7x9696;0;r,-<Z,a<
-L`H q#
,1,1&4:2:3:2:2:3:v3:3:2#;F23;
>2;(/<
2o<(W<F)<B)<
)='<r'?=B(#
)2'2'#3
; C K S
{@@@i@
,(,,<,
>==FhSb
#]P=O=G=
Q+R'QsV
Q\6W>O>G>~
E{~i(;s
3u]6fu
QMr rb
)n=555Fu
td0+>+]P5O5G5tQL
vW6O6G6rd;
:W6O6G6r
pizo]P6G6nQL
y555Fo
nd0Mol
.O.G.t
uaM[tq
3St]P-W-O-G-fs
pi8kU+
bo1P#Rr
oQUI@iT#P
xO-G-n
`NRkt|
UCp>;RSFQNR
hB0(<$
fq'N"E`=
N"MhM+
xG_WOG
u#h,}C
Ut|hkGC
]U%H}C
222222#
6-`6Z|6w
7g7Ut75Q7
8l8y8V88888R8
yttttttttttttttttttttt
GetStockObject
ExitProcess
GetSystemTime
CreateThread
WaitForMultipleObjects
SetEvent
GetProcessHeap
HeapFree
GetUserDefaultLCID
RaiseException
InterlockedDecrement
InterlockedIncrement
CloseHandle
LoadResource
LockResource
GetThreadLocale
FreeLibrary
GetSystemInfo
QueryDosDeviceW
QueryDosDeviceA
lstrlenA
GetSystemDirectoryW
GetSystemDirectoryA
UnmapViewOfFile
GetDriveTypeA
GetDateFormatW
CreateMutexW
CreateMutexA
CompareStringW
GetShortPathNameA
GetWindowsDirectoryW
GlobalLock
GlobalSize
GlobalAlloc
GlobalUnlock
GlobalFree
GetLocaleInfoA
CreateFileMappingW
CreateFileMappingA
GetVersionExW
SetFileAttributesW
SetFileAttributesA
IsBadWritePtr
lstrcmpiW
lstrcmpiA
LoadLibraryExW
LoadLibraryExA
LoadLibraryW
LoadLibraryA
LCMapStringW
LCMapStringA
GetVolumeInformationW
GetTempPathA
GetTempFileNameW
GetTempFileNameA
GetPrivateProfileStringW
GetPrivateProfileStringA
lstrcpynW
GetModuleHandleW
GetModuleFileNameW
GetModuleFileNameA
SystemTimeToFileTime
GetLocalTime
MapViewOfFile
GetFileType
SetFilePointer
SetEndOfFile
GetFileSize
ReadFile
WriteFile
FlushFileBuffers
WaitForSingleObject
CompareFileTime
SetThreadPriority
GetLongPathNameA
GetLongPathNameW
ReleaseMutex
InterlockedExchange
GetStartupInfoW
GetModuleHandleA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
FindClose
IsValidLocale
SetErrorMode
FileTimeToSystemTime
lstrcatA
lstrcpyA
GetACP
DebugBreak
InterlockedCompareExchange
GetExitCodeThread
DeviceIoControl
GetVersion
HeapAlloc
GetDriveTypeW
GetDateFormatA
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
lstrlenW
GetLastError
GetWindowsDirectoryA
GetProcAddress
SetLastError
CopyFileA
CopyFileW
CompareStringA
CreateDirectoryA
CreateDirectoryW
CreateEventA
CreateEventW
CreateFileA
CreateFileW
DeleteFileA
DeleteFileW
FindFirstFileA
FindFirstFileW
FindNextFileA
FindNextFileW
FindResourceA
FindResourceW
LocalFree
LocalAlloc
GetFileAttributesA
GetFileAttributesW
GetFileAttributesExA
GetFileAttributesExW
GetFullPathNameA
GetFullPathNameW
GetStartupInfoA
GetCommandLineA
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
VirtualAlloc
GetCurrentThread
GetOEMCP
KERNEL32.dll
BeginPaint
GetClientRect
EndPaint
PostQuitMessage
DefWindowProcA
LoadCursorA
USER32.dll
PlayEnhMetaFile
DeleteEnhMetaFile
GDI32.dll
_c_exit
__CxxFrameHandler
iswcntrl
isxdigit
towlower
towupper
wcsncmp
wcslen
memmove
wcsrchr
wcsspn
iswspace
iswascii
wcspbrk
wcschr
wcsstr
_wcsnicmp
_vsnwprintf
_wcsicmp
_CIpow
_purecall
swscanf
iswdigit
iswalnum
_wtoi64
_controlfp
wcstoul
memcmp
memset
_snwprintf
wcsncpy
wcscpy
memcpy
strchr
_XcptFilter
_cexit
_wcmdln
__wgetmainargs
_initterm
__setusermatherr
_adjust_fdiv
isdigit
_vsnprintf
_strnicmp
malloc
wcscat
realloc
toupper
isspace
swprintf
_stricmp
strncpy
wcscspn
_wcsupr
wcstombs
bsearch
_ultow
_onexit
__dllonexit
_except_handler3
__set_app_type
__p__fmode
__p__commode
wcscmp
_beginthreadex
msvcrt.dll
SetFileSecurityW
GetFileSecurityW
RegCloseKey
RegQueryValueExW
RegQueryValueExA
RegSetValueExW
RegSetValueExA
RegQueryInfoKeyW
RegQueryInfoKeyA
RegOpenKeyExW
RegOpenKeyExA
RegEnumValueW
RegEnumValueA
RegEnumKeyA
RegCreateKeyExW
RegCreateKeyExA
GetUserNameA
RegOpenKeyW
ADVAPI32.dll
<$<(<,<0<4<8<<<@<D<H<L<P<T<X<\<`<d<h<l<p<t<x<|<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<
= =$=(=,=0=4=8=<=@=D=H=L=P=T=X=\=`=d=h=l=p=t=x=|=================================
> >$>(>,>0>4>8><>@>D>H>L>P>T>X>\>`>d>h>l>p>t>x>|>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
? ?$?(?,?0?4?8?<?@?D?H?L?P?T?X?\?`?d?h?l?p?t?x?|?????????????????????????????????
0K0\00000000
1&1,1<1I1S1X1u1y111111111
22)232=2G2Q2[2d2q2}2222222
3!3'313;3K3[3j3y333333333333333333
4$4+414@4F4L4R4W4]4b4h4n4t4
44444444444444
5,51585>5E5K5Y5_5e5j5p5v5|555555555555555
6!6%6H6R6666
7!7(7D7f7e8l88999
: :&:,:2:8:>:D:J:P:V:\:b:h:n:t:z:::::::::::::::::::::::
;";(;.;4;:;@;F;L;R;X;^;d;j;p;v;|;;;;;;;;;;;;;;;;;;;;;;
<$<*<0<6<<<B<H<N<T<Z<`<f<l<r<x<~<<<<<<<<<<<<<<<<<<<<<<
= =&=,=2=8=>=D=J=P=V=\=b=h=n=t=z=======================
>">(>.>4>:>@>F>L>R>X>^>d>j>p>v>|>>>>>>>>>>>>>>>>>>>>>>
?$?*?0?6?<?B?H?N?T?Z?`?f?l?r?x?~??????????????????
\tq'~Q!wwh
ol><[/
CgOOn&
_*%&bp!a
QB,hhh~
IMN7e38R
cccccc
#######
############
#################
IODLDLI
@UU-##
F#@#P#P#P#D#S
$$$$$$$$$$333
FJJOrIJV
#JLGw#
##########
##############
#################
d#####
#########
######
#######
#######
########
################
yxnmkrqpo
UPNLZ[Ywecc^a\jhirpn
#######
######
######
######
#############
########
#########
######
########
#######
######
#######
!#########
######
#######
##########
###########
##########
########
#######
##########
######
##########
Csoftware\classes\jjjerface\{00000626-0000-0010-8000-00aa006d2ea4}\proxystubclsid32
VS_VERSION_INFO
StringFileInfo
041904B0
CompanyName
FileDescription
FileVersion
5.1.2600.5512 (xpsp.080413-2108)
VarFileInfo
Translation

DNS

Name Response Post-Analysis Lookup
dns.msftncsi.com A 131.107.255.255 131.107.255.255
dns.msftncsi.com AAAA fd3e:4f5a:5b81::1 131.107.255.255

TCP

No TCP connections recorded.

UDP

Source Source Port Destination Destination Port
192.168.56.101 53179 224.0.0.252 5355
192.168.56.101 49642 224.0.0.252 5355
192.168.56.101 137 192.168.56.255 137
192.168.56.101 61714 114.114.114.114 53
192.168.56.101 56933 114.114.114.114 53
192.168.56.101 138 192.168.56.255 138

HTTP & HTTPS Requests

No HTTP requests performed.

ICMP traffic

No ICMP traffic performed.

IRC traffic

No IRC requests performed.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

Snort Alerts

No Snort Alerts

Sorry! No dropped files.
Sorry! No dropped buffers.