1.9
低危
60 个模型检测该样本为恶意！
重新分析
更多

002df9dd21ba5802e95a26708ea3c2df0ea6cc354c31b438efc92454ed0e19e4

002df9dd21ba5802e95a26708ea3c2df0ea6cc354c31b438efc92454ed0e19e4.exe

分析耗时

71s

最近分析

384天前

文件大小

592.0KB
静态报毒 动态报毒 CVE FAMILY METATYPE PLATFORM TYPE UNKNOWN WIN32 TROJAN WORM MIRA
鹰眼引擎
DACN 0.14
FACILE 1.00
IMCLNet 0.77
MFGraph 0.00
静态判定
反病毒引擎
查杀引擎 查杀结果 查杀时间 查杀版本
Alibaba None 20190527 0.3.0.5
Avast Win32:Malware-gen 20191218 18.4.3895.0
Baidu Win32.Worm.Mira.c 20190318 1.0.0.2
CrowdStrike win/malicious_confidence_100% (D) 20190702 1.0
Kingsoft None 20191218 2013.8.14.323
McAfee W32/Worm-GAT!59B119C0F8B0 20191218 6.0.6.653
Tencent Worm.Win32.Mira.a 20191218 1.0.0.1
静态指标
检查系统中的内存量，这可以用于检测可用内存较少的虚拟机 (1 个事件)
Time & API Arguments Status Return Repeated
1727545270.813125
GlobalMemoryStatusEx
success 1 0
行为判定
动态指标
在文件系统上创建可执行文件 (24 个事件)
file c:\install.exe .exe
file c:\VC_RED.MSI .exe
file c:\Documents and Settings .exe
file c:\ProgramData .exe
file C:\ProgramData\daiqt.exe
file c:\System Volume Information .exe
file c:\Recovery .exe
file c:\$Recycle.Bin .exe
file c:\vcredist.bmp .exe
file c:\Windows .exe
file c:\VC_RED.cab .exe
file c:\pagefile.sys .exe
file c:\Program Files .exe
file c:\install.res.2052.dll .exe
file c:\Program Files (x86) .exe
file c:\360Downloads .exe
file c:\Python27 .exe
file c:\install.ini .exe
file c:\PerfLogs .exe
file c:\eula.2052.txt .exe
file c:\gcoxh .exe
file c:\dmtisnufg .exe
file c:\globdata.ini .exe
file c:\Users .exe
创建隐藏或系统文件 (25 个事件)
Time & API Arguments Status Return Repeated
1727545270.828125
SetFileAttributesW
file_attributes: 2 (FILE_ATTRIBUTE_HIDDEN)
filepath: C:\ProgramData\daiqt.exe
filepath_r: C:\ProgramData\daiqt.exe
success 1 0
1727545271.688125
SetFileAttributesW
file_attributes: 2 (FILE_ATTRIBUTE_HIDDEN)
filepath: C:\ProgramData\Saaaalamm\Mira.h
filepath_r: C:\ProgramData\Saaaalamm\Mira.h
success 1 0
1727545272.10925
SetFileAttributesW
file_attributes: 2 (FILE_ATTRIBUTE_HIDDEN)
filepath: c:\$Recycle.Bin
filepath_r: c:\$Recycle.Bin
success 1 0
1727545272.68825
SetFileAttributesW
file_attributes: 2 (FILE_ATTRIBUTE_HIDDEN)
filepath: c:\360Downloads
filepath_r: c:\360Downloads
success 1 0
1727545273.28125
SetFileAttributesW
file_attributes: 2 (FILE_ATTRIBUTE_HIDDEN)
filepath: c:\dmtisnufg
filepath_r: c:\dmtisnufg
success 1 0
1727545273.87525
SetFileAttributesW
file_attributes: 2 (FILE_ATTRIBUTE_HIDDEN)
filepath: c:\Documents and Settings
filepath_r: c:\Documents and Settings
success 1 0
1727545274.46925
SetFileAttributesW
file_attributes: 2 (FILE_ATTRIBUTE_HIDDEN)
filepath: c:\eula.2052.txt
filepath_r: c:\eula.2052.txt
success 1 0
1727545275.25025
SetFileAttributesW
file_attributes: 2 (FILE_ATTRIBUTE_HIDDEN)
filepath: c:\gcoxh
filepath_r: c:\gcoxh
success 1 0
1727545275.96925
SetFileAttributesW
file_attributes: 2 (FILE_ATTRIBUTE_HIDDEN)
filepath: c:\globdata.ini
filepath_r: c:\globdata.ini
success 1 0
1727545276.67225
SetFileAttributesW
file_attributes: 2 (FILE_ATTRIBUTE_HIDDEN)
filepath: c:\install.exe
filepath_r: c:\install.exe
success 1 0
1727545277.39125
SetFileAttributesW
file_attributes: 2 (FILE_ATTRIBUTE_HIDDEN)
filepath: c:\install.ini
filepath_r: c:\install.ini
success 1 0
1727545278.14125
SetFileAttributesW
file_attributes: 2 (FILE_ATTRIBUTE_HIDDEN)
filepath: c:\install.res.2052.dll
filepath_r: c:\install.res.2052.dll
success 1 0
1727545278.82825
SetFileAttributesW
file_attributes: 2 (FILE_ATTRIBUTE_HIDDEN)
filepath: c:\pagefile.sys
filepath_r: c:\pagefile.sys
failed 0 0
1727545279.56325
SetFileAttributesW
file_attributes: 2 (FILE_ATTRIBUTE_HIDDEN)
filepath: c:\PerfLogs
filepath_r: c:\PerfLogs
success 1 0
1727545280.28125
SetFileAttributesW
file_attributes: 2 (FILE_ATTRIBUTE_HIDDEN)
filepath: c:\Program Files
filepath_r: c:\Program Files
success 1 0
1727545281.00025
SetFileAttributesW
file_attributes: 2 (FILE_ATTRIBUTE_HIDDEN)
filepath: c:\Program Files (x86)
filepath_r: c:\Program Files (x86)
success 1 0
1727545281.73425
SetFileAttributesW
file_attributes: 2 (FILE_ATTRIBUTE_HIDDEN)
filepath: c:\ProgramData
filepath_r: c:\ProgramData
success 1 0
1727545282.50025
SetFileAttributesW
file_attributes: 2 (FILE_ATTRIBUTE_HIDDEN)
filepath: c:\Python27
filepath_r: c:\Python27
success 1 0
1727545283.23425
SetFileAttributesW
file_attributes: 2 (FILE_ATTRIBUTE_HIDDEN)
filepath: c:\Recovery
filepath_r: c:\Recovery
success 1 0
1727545284.00025
SetFileAttributesW
file_attributes: 2 (FILE_ATTRIBUTE_HIDDEN)
filepath: c:\System Volume Information
filepath_r: c:\System Volume Information
failed 0 0
1727545284.78125
SetFileAttributesW
file_attributes: 2 (FILE_ATTRIBUTE_HIDDEN)
filepath: c:\Users
filepath_r: c:\Users
success 1 0
1727545285.50025
SetFileAttributesW
file_attributes: 2 (FILE_ATTRIBUTE_HIDDEN)
filepath: c:\vcredist.bmp
filepath_r: c:\vcredist.bmp
success 1 0
1727545286.20325
SetFileAttributesW
file_attributes: 2 (FILE_ATTRIBUTE_HIDDEN)
filepath: c:\VC_RED.cab
filepath_r: c:\VC_RED.cab
success 1 0
1727545286.89125
SetFileAttributesW
file_attributes: 2 (FILE_ATTRIBUTE_HIDDEN)
filepath: c:\VC_RED.MSI
filepath_r: c:\VC_RED.MSI
success 1 0
1727545287.64125
SetFileAttributesW
file_attributes: 2 (FILE_ATTRIBUTE_HIDDEN)
filepath: c:\Windows
filepath_r: c:\Windows
success 1 0
投放一个二进制文件并执行它 (1 个事件)
file C:\ProgramData\daiqt.exe
网络通信
与未执行 DNS 查询的主机进行通信 (1 个事件)
host 114.114.114.114
在 Windows 启动时自我安装以实现自动运行 (1 个事件)
reg_key HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\Microsoftﾮ Windowsﾮ Operating System reg_value C:\ProgramData\daiqt.exe
文件已被 VirusTotal 上 60 个反病毒引擎识别为恶意 (50 out of 60 个事件)
ALYac Trojan.GenericKD.40578669
APEX Malicious
AVG Win32:Malware-gen
Acronis suspicious
Ad-Aware Trojan.GenericKD.40578669
AhnLab-V3 Trojan/Win32.Agent.R111396
Antiy-AVL Trojan/Win32.Agent.icgh
Arcabit Trojan.Generic.D26B2E6D
Avast Win32:Malware-gen
Avira TR/Zusy.BQ
Baidu Win32.Worm.Mira.c
BitDefender Trojan.GenericKD.40578669
Bkav W32.FamVT.MiraVM.Worm
ClamAV Win.Trojan.Agent-1388655
Comodo Worm.Win32.Mira.AA@59ticr
CrowdStrike win/malicious_confidence_100% (D)
Cybereason malicious.0f8b08
Cylance Unsafe
Cyren W32/TrojanP.B
DrWeb Win32.HLLO.Siggen.5
ESET-NOD32 Win32/Mira.A
Emsisoft Trojan.GenericKD.40578669 (B)
Endgame malicious (high confidence)
F-Prot W32/TrojanP.B
F-Secure Trojan.TR/Zusy.BQ
FireEye Generic.mg.59b119c0f8b08f21
Fortinet W32/Mira.9C5!tr
GData Win32.Worm.Mira.D
Ikarus Trojan.Win32.Heur
Invincea heuristic
Jiangmin Trojan/Agent.iezf
K7AntiVirus Trojan ( 0040f8a71 )
K7GW Trojan ( 004993691 )
Kaspersky Trojan.Win32.Agent.icgh
MAX malware (ai score=82)
Malwarebytes Worm.Mira
MaxSecure Trojan.Agent.icgh
McAfee W32/Worm-GAT!59B119C0F8B0
McAfee-GW-Edition BehavesLike.Win32.Worm.hh
MicroWorld-eScan Trojan.GenericKD.40578669
Microsoft Worm:Win32/Mira!rfn
NANO-Antivirus Trojan.Win32.Zusy.ethqlz
Panda W32/Milam.A.worm
Qihoo-360 Worm.Win32.Mira.A
Rising Worm.Mira!1.A270 (CLASSIC)
Sangfor Malware
SentinelOne DFI - Malicious PE
Sophos W32/Mira-B
Symantec W32.SillyFDC
Tencent Worm.Win32.Mira.a
可视化分析
二进制图像
数据导入图像 288x288
数据导入图像 224x224
数据导入图像 192x192
数据导入图像 160x160
数据导入图像 128x128
数据导入图像 96x96
数据导入图像 64x64
数据导入图像 32x32
运行截图
暂无运行截图 该样本运行过程中未生成截图

👋 欢迎使用 ChatHawk

我是您的恶意软件分析助手，可以帮您分析和解读恶意软件报告。请随时向我提问！

🔍 主要威胁分析
⚡ 行为特征
🛡️ 防护建议
🔧 技术手段
🎯 检测方法
🤖

PE Compile Time

2014-02-27 14:41:59

PE Imphash

dbf687d6aa2a6cafe4349f7b0821a792

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x0003be78 0x0003c000 5.664379453545373
.data 0x0003d000 0x00000260 0x00000400 0.705049269986258
.rdata 0x0003e000 0x000024a8 0x00002600 5.008530245268908
.bss 0x00041000 0x00004890 0x00000000 0.0
.idata 0x00046000 0x000008a4 0x00000a00 4.294939157790109
.rsrc 0x00047000 0x000067b8 0x00006800 6.082464146712931

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x0004cfec 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_US None
RT_ICON 0x0004cfec 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_US None
RT_ICON 0x0004cfec 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_US None
RT_ICON 0x0004cfec 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_US None
RT_ICON 0x0004cfec 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_US None
RT_ICON 0x0004cfec 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_US None
RT_ICON 0x0004cfec 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_US None
RT_ICON 0x0004cfec 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_US None
RT_ICON 0x0004cfec 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_US None
RT_GROUP_ICON 0x0004d454 0x00000084 LANG_ENGLISH SUBLANG_ENGLISH_US None
RT_VERSION 0x0004d4d8 0x000002e0 LANG_ENGLISH SUBLANG_ENGLISH_US None

Imports

Library KERNEL32.dll:
• 0x4461b8 AddAtomA
• 0x4461bc CreateDirectoryA
• 0x4461c0 CreateProcessA
• 0x4461c4 CreateSemaphoreA
• 0x4461c8 DeleteFileA
• 0x4461cc ExitProcess
• 0x4461d0 FindAtomA
• 0x4461d4 GetAtomNameA
• 0x4461d8 GetCommandLineA
• 0x4461dc GetLastError
• 0x4461e0 GetModuleFileNameA
• 0x4461e4 GetModuleHandleA
• 0x4461e8 GetStartupInfoA
• 0x4461f4 ReleaseSemaphore
• 0x4461f8 SetFileAttributesA
• 0x4461fc SetLastError
• 0x446204 Sleep
• 0x446208 TlsAlloc
• 0x44620c TlsFree
• 0x446210 TlsGetValue
• 0x446214 TlsSetValue
• 0x446218 WaitForSingleObject
Library msvcrt.dll:
• 0x446224 _fdopen
• 0x446228 _read
• 0x44622c _strdup
• 0x446230 _write
Library msvcrt.dll:
• 0x44623c __getmainargs
• 0x446240 __mb_cur_max
• 0x446244 __p__environ
• 0x446248 __p__fmode
• 0x44624c __set_app_type
• 0x446250 _assert
• 0x446254 _cexit
• 0x446258 _ctype
• 0x44625c _errno
• 0x446260 _fstati64
• 0x446264 _iob
• 0x446268 _isctype
• 0x44626c _lseeki64
• 0x446270 _onexit
• 0x446274 _pctype
• 0x446278 _setmode
• 0x44627c _strnicmp
• 0x446280 _vsnprintf
• 0x446284 abort
• 0x446288 atexit
• 0x44628c fclose
• 0x446290 fflush
• 0x446294 fopen
• 0x446298 fprintf
• 0x44629c free
• 0x4462a0 localeconv
• 0x4462a4 malloc
• 0x4462a8 memchr
• 0x4462ac memcpy
• 0x4462b0 memmove
• 0x4462b4 memset
• 0x4462b8 rand
• 0x4462bc setlocale
• 0x4462c0 setvbuf
• 0x4462c4 signal
• 0x4462c8 srand
• 0x4462cc strcat
• 0x4462d0 strcmp
• 0x4462d4 strcoll
• 0x4462d8 strcpy
• 0x4462dc strftime
• 0x4462e0 strlen
• 0x4462e4 strtod
• 0x4462e8 strxfrm
• 0x4462ec time
Library SHELL32.DLL:
• 0x4462f8 SHGetFolderPathA
• 0x4462fc ShellExecuteA
L!This program cannot be run in DOS mode.
.rdata
.idata
E;Es9}
<t6p t<~@tO
x7EZ[^_]
UW1V1S
eEEE$@
++CCUNG
pP EtB(dB$
R \tp@$
hUhU`hu
llU6hU(Et
E!t#XtEXM~t
$]u}E$@
UpPl1|pl
;u ]]$}}
4$Yt8M
]1u}];] tIF
UWVS|U$E
E|[^_]
1|[^_]
UWVSL}
$DtbEN
UEXEE]u}E
++C B4CUNGB
t-S4C0
UEhEE]u}E
E]u}]E
UEhEE]u}E
tB1u2=C
UEXEE]u}E
80S4C0
t(S4C0
x9JtD|IS
]uEEEE
]uEEEE
]uEEEE
UUWVSLE
$UE@M@
$IMEQh$9t
$YMEQh$9t
$iMEQh$9t
]u}EEUE
Pht%$9t
UE]PhXdE
$]u}E$@
|u9EEP@
$]u}E$@
tuHxEE
$]u}E$@
tuHxEE
$]u}E$@
tuHxEE
$]u}E$@
tuHxEE
$]u}E$@
tuHxEE
$]u}E$@
tuHxEE
$]u}E$@
tuHxEE
$]u}E$@
tuHxEE
$]u}E$@
tuHxEE
UUWVS\E
EuSEUE9B
Et1@t@
UEXEE]
Et1@t@
UUWVS\E
EEUEn@
EuSEUE9B
UMWVSlE
UMWVSlE
UUWVS|E
@;Er]E[
@;ErEU]H
]xEEEt
$u}E$@
oUUWVSlUE
UUWVSlUE
9t1]u}]
[^_]UU
[^_]UXeE
$B4$Z]u]U
UEXEE]u}E
Eu!PRD
u9Et4+_
9}]t7q^
8"t-EE
$u}E$@
$u}E$@
$u}E$@
]uEEEE
]uEEEE
$u}E$@
$u}E$@
$u}E$@
]uEEEE
]uEEEE
$u}E$@
$u}E$@
$u}E$@
]uEEEE
]uEEEE
]uEEEE
]uEEEE
]uEEEE
]uEEEE
]uEEEE
]uEEEE
]uEEEE
]uEEEE
]uEEEE
e[^_]EAAAA
uEAAAAEAAAAE
EAAAAEAAAAE
EAAAAEAAAAE
EAAAAE
S C0C,
t(C,1D$
S0x]u]
t3[4u$&
t$B0x=B0uVB(
z(]u}]
H0x4P0uMX(]
[^_]o2
UWVS,PXD
]t"x0xFp0u X(EP J
UWVS,@
tLEtt$
tEp0x^X0uw@(UEEE
]tAH0xFP0u
X(EP J
X(EP J
H0us@(EUE
x0uaX(EP J
<$&]u}]
taH0xkP0uu@(
e[^_]PXD
H0yAPXD
EUM]Uu
M9MvuMEU]Eu}U]
EuaE9E
UEEEU]u}]
Mu,9vZ
1E]E}Uu]
W11V1S
tplhl$
D$'\ t&
ME1UfE
:|,1\$ \$0
t$$t$4|$(|$
\$ t$$|$(,
D$,L$(D$
T$$D$ L$
T$DfD$B
\$0fD$0
|T f|T`B
UWVS|$
t$@\$@L$B
;f9yD$
|[^_]fD$
\$ fD$
~t$`1L$@
tfxJ\$
[^_]uUt$
~ML$$t$$
~;D$$p
~PL$$q
[^_]Ov
1D[^_]
|$lOD$
~D[^_]
D[^_]fD$&
tH1|$(M
Ky\$\u=L$
|$\T$`
UWVSd\$xl$|
2L$:zQ
1d[^_]
1D$8L$
HyfD$8xfD$
UWVSLt$`l$d
:L$"ZQ
L[^_]1
HyT$ \$
LS[^_]
Iy%LbD
t,K9w4
0^t&K9w.
B9w[][]
;Ew,t&
Bt$H9v
9pr(t$
EZ;]]r
u39~rdF]
E9]EEr
9rrTB]
u)]u}]
9rrdB]
E@E9]EEr
9prw;M
DF;gUS
$]u}E$@
$]u}E$@
$]u}E$@
$]u}E$@
$]u}E$@
$]u}E$@
$]u}E$@
$]u}E$@
t>BtmEM
$rE]u}]
$UEP&A
]UUWVS
T$E|UD$
D$|UD$
eOEElD$
$SEJEEE
$@$EVE
rUMWVS
$EJEEE
$@$EFE
pUMWVS
$EJEEE
$@$EVE
rUMWVS
e|EElD$
$EJEEE
$@$ECE
nUMWVS,
enEElD$
11dE1X
'x $t&
cUMWVS,
e_EElD$
dE1X1\
$9\rpw
eUMWVS
$@$Eek
]EUu}]
UWVS<U
EMu`EED$
]UU EEE
$Uu}E$@
$:EUEEU
$8EU]u}]
UU EEE
$U]uE$@
$?7EU]u}]
]UU EEE
$Uu}E$@
$EU/EEU
$5EU]u}]
$;U(E$U
uM }u$}
UWVSLE
EUe[^_]
7UWVSLU
EUe[^_]
DUWVSLE
0P&M U
EUe[^_]
>UWVSLU
U N 1%D$
EUe[^_]
E$]U u]
E <$D$
@1vE D$
a0L$/4
@-6m D$
]U M$}>D$
W ]u}]
(]] uu
$WEEUs
AE]EUu}E
$YotuH
$]u}E$@
$;"UExE
$]u}E$@
$!UExE
$]u}E$@
UWVS<E
1t+u+t
$P$WUWVS<E
1t+u+t
<[^_]#
$P$WUW1VS
$P$US$M
E0EE,l
;E |qgfff
M(9Mt\EU
$P$UWVS|E
U ElUE
EET$$U
1t+u+t
|[^_]S<1u
Bu+E1E
UWVS,E,EE(l
C;]$s!U
CG;]$r
$X?E(UM
$<?E9Ur
U2Cu9rE
e[^_]E
<$MEMP
EET$$U
BdEBhEBlEBpE
1t6u6t
9u{tEC
,A<8w4
D$ E$T$$
D$ ,T$$U
|,U$HB
T$ 4E$
BHEBLEBPEBTE
E$T$(L$$D$
Bd8Bh<Bl@BpDBtHBxLB|P
B,EB0EB4EB8EB<EB@EBDE5
FJ8tJU
$%\$ ~
c%\$ (
$P$US$M
UWVS<E
$3;]$tb
tO%tv}
C;]$uE
%uC;]$tE
u!C;]$tM
R4UVS ]
^]kTU(
UMWVS|
MU E$@
e?E]l]
hxUxBl@
||8\A
\|@@B4E1<<
$E,|B
80tp@U
)UMWVS|
MU E$@
rxUxBl@
||8\A
\|@@B4E1<<
80tp@U
D$ E$T$
D$ E$T$
U M$$@
|htL$/p
$xUUWVS\E
$>\[^_]
UMWVSLE
$yL[^_]
U]Mu}EU
U]Mu}EU
$R]u}]
uEE}UM
UMWVSlE
t ]u$E
El[^_]
$bEl[^_]
]MEEUEIB
$E|[^_]
E|[^_]
EEUu}E
t&]u*E
EEU]}E
t&}u*E
$4E]u}]
$E]u}]
UU]EEu}E
E@t']u+E
$2E]u}]
EEU]}E
$nE]u}]E
EEUu}E$@
$D~E]u}]
UU]EEu}E$@
$B}E]u}]
$m|E]u}]
$]}E$@
EEUu}E
B@t2]u6t&
$yE]u}]
$yE]u}]
UMWVSlE
$wEl[^_]
$dE|[^_]
KUUWVS|E
$cE|[^_]
$"cE|[^_]
{UUWV1S|E
$aE|[^_]
$RaE|[^_]
UUWV1S|E
$_E|[^_]
$_E|[^_]
UUWV1S
UUWVS|E
$(\E|[^_]
$[E|[^_]
UUWV1S|E
$XZE|[^_]
$YE|[^_]
;UUWVS|E
$XE|[^_]
XE|[^_]
kUUWV1S
mUUWVS|E
$TE|[^_]
$BTE|[^_]
UUWV1S|E
$RE|[^_]
$rRE|[^_]
UUWVS|E
QE|[^_]
$PE|[^_]
UWVS|E
e1OEUE
$OE|[^_]
U]UEEu}E
$ME]u}]
ME]u}]E
EEUu}E$@
$NLE]u}]
$dKE]u}]
UU]EEu}E$@
$bJE]u}]
$IE]u}]
$]}E$@
$u}E$@
$8GE]u}]
$B]u}]
$kA]u}]
e5?EED$
}U|BtBu
#UUWVS|E
$<E|[^_]
6PxBtBu
]M|BtBu
$]u}E$@
$]u}]E
$]u}E$@
$J]u}]E
}~UXeE
$cUXeE
U]uEEU
$@]u}]
$#UXeE
$cUXeE
$A]u}]
$~]u}]
$#UXeE
$cUXeE
U]uEEU
$>]u}]
$#UXeE
$bUheE
$sUXeE
$L]u}]
$c]u}]
$AUXeE
$(XUXeE
$(hUXeE
tD~@Q@
c_UWVS<E
7E|$/M
$UE19u
C@uaC@
C\u'C\
$#uOEE
$E]u}]
P0P@@J
@4A8A<u
$4UB@BI
;EE0AtM
$E.UMWVS
tlUEPXE
$e[^_]
$E,E3WqMEAX
$e[^_]
EpXX\
CdpueUpB\B
B4B8B<E
U]uEE}E
$E]u}]
${E]u}]
$EL*U(uu
EE]u}]
]9ttuF
U;:|CF
;9t19~!)tQC|$
P1SBF0
ChCdC@C
YLQ@9A
ALIPCT
$E>$BX
U9EXXPd
#t{]{T
$P$t:E
U]uEE}E
$:tfEU]@
$PE]CX
$E]u}]
E:IaUX}}
]u}]GT
_h1Wd)9]
G<~?O\U)
u6whO\U
F?E)\$
GhMW\)9EEr
GdeEGX
$\gGd\$
$AUUWVS\E
$\[^_]
UUWVS\E
$u\[^_]
]uEEEE
$R]u}]
]uEEEE
$1UXeE
]uEEEE
UUWVSlUE
e6EMxM
EUxBx8
UUWVS\UE
EUxBx8
hUMWVSlME
M6UMWVS\E
eR]UMC
EMUE]A
qUUWVS\E
EUxBx8
_UUWVS\E
EUxBx8
_UMWVS\E
EMUE]A
$4\[^_]
$RE]u}]
UUW1VS\E
$$UEMBt
$\[^_]
$OUUWV1S\UE
eDEMtM
$"UEMBt
$t\[^_]
UMWVS\E
$\[^_]
$yUMWVS\E
$YUXeE
EUtBt8
$1UXeE
EUtBt8
$RE]u}]
UUW1VS\E
$\[^_]
$WUUW1VS\E
eVEMpM
$UMWVS\E
$%\[^_]
UMWVS\E
EUpBp8
EUpBp8
$xUXeE
$"]u}]
$8p1D$
$"]u}]
$8o1D$
"EUE1}
*UqUheE
$.]u}]
$(UqUheE
]uEEEE
]uEEEE
$']u}]
]uEEEE
$g]u}]
]EEEEU
$]EUD$
$]YUheE
REUE1}
$:\EUD$
$m\YUS
[[]}OU
pl&$hd
$|e[^_]
$X)TL$
Nld)hL$
UUWVS\E
esEUE1}
t\[^_]
$K1UD$
$KZUUWVS\E
eXrEUE1}
$r\[^_]
$nJZUS
X[]}=U
UUWVS\E
epEUE1}
q\[^_]
HE1Ut$
$HZUUWVS\E
eHoEUE1}
$o\[^_]
1G1UD$
$^GZUS
X[]m:U
$'utJ$
p`1(@=
ie[^_]
$rld)hL$
$gktJ$
p`1(@=
$T_e[^_]
$hld)hL$
$69cU1
X[]}&U
Y[]-&U
$U]u}]
$`[UXeE
$ZUXeE
$ZT]u}]
$S]u}]
$SYUXeE
]uEEEE
$R]u}]
$XUXeE
]uEEEE
$:R]u}]
$WUXeE
]uEEEE
$Q]u}]
$O]u}]
$#UUXeE
$N]u}]
$sTUXeE
$ N]u}]
$SUXeE
$pM]u}]
]uEEEE
$L]u}]
$SRUXeE
]uEEEE
$K]u}]
$QUXeE
]uEEEE
$JK]u}]
$PUXeE
$J]u}]
$=PUXeE
$I]u}]
${OUXeE
$NUXeE
$WH]u}]
$MUXeE
$G]u}]
$;MUXeE
$F]u}]
UMWVS\E
$WC\[^_]
CtSt]u]
?XCtCu
CtSt]u]
$u}E$@
$&EUD$
E@xEtP
UWVSLE
$wllD$
$TCtCu
].UXeE
$~E1@t
$F=]u}]
u1EEEE}1
^H[^_]E
[H^_]E
-UWVS(E
C9u([^_]
4$ [^]
UUWVS|E
$2E|[^_]
$d2E|[^_]
UEXEE]u}E
$-1E]u}]
UEXEE]u}E
$m0E]u}]
UEXEE]u}E
$/E]u}]
$E]5t&
$EYUEXEE]u}E
$.E]u}]
UEXEE]u}E
$-.E]u}]
UEXEE]u}E
$m-E]u}]
UEXEE]u}E
$,E]u}]
$E]2t&
$EYUEXEE]u}E
$+E]u}]
UEXEE]u}E
$-+E]u}]
UEXEE]u}E
$m*E]u}]
UEXEE]u}E
$)E]u}]
$E]/t&
$EYUEXEE]u}E
$(E]u}]
UEXEE]u}E
$-(E]u}]
e}#EME
$MAX9EE~wE
k-MT$+Uyu
#Ee[^_]
8UBtBu
$e7 EME
.*MT$+Uyu
6UBtBu
$Ee[^_]=uE
$]uE$@
$E."EU
$]u}E$@
$E*!EU
$u}E$@
||EH;E
En}t uu$E
UM4$L$
UU]EEu}E
\Mira.h
Saaaalamm
basic_filebuf::xsgetn error reading the file
basic_filebuf::_M_convert_to_external conversion error
basic_filebuf::underflow codecvt::max_length() is not valid
basic_filebuf::underflow incomplete character in file
basic_filebuf::underflow error reading the file
basic_filebuf::underflow invalid byte sequence in file
basic_ios::clear
basic_string::at
basic_string::copy
basic_string::compare
basic_string::_S_create
basic_string::reserve
basic_string::erase
basic_string::assign
basic_string::append
basic_string::_M_replace_aux
basic_string::replace
basic_string::insert
basic_string::resize
basic_string::_S_construct NULL not valid
basic_string::basic_string
basic_string::substr
ios_base::_M_grow_words is not valid
ios_base::_M_grow_words allocation failed
locale::_S_normalize_category category not found
locale::_Impl::_M_replace_facet
basic_string::_M_replace_aux
%H:%M:%S
%m/%d/%y
basic_string::_M_replace_aux
basic_string::erase
pure virtual method called
LC_CTYPE
LC_NUMERIC
LC_TIME
LC_COLLATE
LC_MONETARY
LC_MESSAGES
locale::facet::_S_create_c_locale name not valid
-+xX0123456789abcdef0123456789ABCDEF
-+xX0123456789abcdefABCDEF
-0123456789
%m/%d/%y
August
September
October
November
December
%H:%M:%S
Sunday
Monday
Tuesday
Wednesday
Thursday
Friday
Saturday
January
February
c:/mnt/samo/mingw/msys/mthr_stub.c
-LIBGCCW32-EH-2-SJLJ-GTHR-MINGW32
w32_sharedptr->size == sizeof(W32_EH_SHARED)
%s:%u: failed assertion `%s'
../../gcc/gcc/config/i386/w32-shared-ptr.c
GetAtomNameA (atom, s, sizeof(s)) != 0
R`%uM]=];Z
uuvHMe
Ix@ p+
N10__cxxabiv117__class_type_infoE
N10__cxxabiv120__si_class_type_infoE
N10__cxxabiv121__vmi_class_type_infoE
NSt6locale5facetE
NSt8ios_base7failureE
St10bad_typeid
St10ctype_base
St10money_base
St10moneypunctIcLb0EE
St10moneypunctIcLb1EE
St11__timepunctIcE
St11logic_error
St11range_error
St12codecvt_base
St12ctype_bynameIcE
St12domain_error
St12length_error
St12out_of_range
St13bad_exception
St13basic_filebufIcSt11char_traitsIcEE
St13basic_fstreamIcSt11char_traitsIcEE
St13messages_base
St13runtime_error
St14basic_ifstreamIcSt11char_traitsIcEE
St14basic_ofstreamIcSt11char_traitsIcEE
St14codecvt_bynameIcciE
St14collate_bynameIcE
St14overflow_error
St15basic_streambufIcSt11char_traitsIcEE
St15messages_bynameIcE
St15numpunct_bynameIcE
St15time_get_bynameIcSt19istreambuf_iteratorIcSt11char_traitsIcEEE
St15time_put_bynameIcSt19ostreambuf_iteratorIcSt11char_traitsIcEEE
St15underflow_error
St16__numpunct_cacheIcE
St16invalid_argument
St17__timepunct_cacheIcE
St17moneypunct_bynameIcLb0EE
St17moneypunct_bynameIcLb1EE
St18__moneypunct_cacheIcLb0EE
St18__moneypunct_cacheIcLb1EE
St21__ctype_abstract_baseIcE
St23__codecvt_abstract_baseIcciE
St5ctypeIcE
St7codecvtIcciE
St7collateIcE
St7num_getIcSt19istreambuf_iteratorIcSt11char_traitsIcEEE
St7num_putIcSt19ostreambuf_iteratorIcSt11char_traitsIcEEE
St8bad_cast
St8ios_base
St8messagesIcE
St8numpunctIcE
St8time_getIcSt19istreambuf_iteratorIcSt11char_traitsIcEEE
St8time_putIcSt19ostreambuf_iteratorIcSt11char_traitsIcEEE
St9bad_alloc
St9basic_iosIcSt11char_traitsIcEE
St9exception
St9money_getIcSt19istreambuf_iteratorIcSt11char_traitsIcEEE
St9money_putIcSt19ostreambuf_iteratorIcSt11char_traitsIcEEE
St9time_base
St9type_info
AddAtomA
CreateDirectoryA
CreateProcessA
CreateSemaphoreA
DeleteFileA
ExitProcess
FindAtomA
GetAtomNameA
GetCommandLineA
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetStartupInfoA
InterlockedDecrement
InterlockedIncrement
ReleaseSemaphore
SetFileAttributesA
SetLastError
SetUnhandledExceptionFilter
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
WaitForSingleObject
_fdopen
_strdup
_write
__getmainargs
__mb_cur_max
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_ctype
_errno
_fstati64
_isctype
_lseeki64
_onexit
_pctype
_setmode
_strnicmp
_vsnprintf
atexit
fclose
fflush
fprintf
localeconv
malloc
memchr
memcpy
memmove
memset
setlocale
setvbuf
signal
strcat
strcmp
strcoll
strcpy
strftime
strlen
strtod
strxfrm
SHGetFolderPathA
ShellExecuteA
KERNEL32.dll
msvcrt.dll
msvcrt.dll
SHELL32.DLL
;33330
*7RTVVjrqmjr}
!/9?NGGaaq^^^m
+388<<a^^^^]^
#%88<Ca[]]]]]
#%''CCZ[^\\\]
#%'''<[[^^\\]
#%''<_a[^^^\^
#%''<<aa^^^^^
##''<_am^m^^m
"%%8D<aabm^^m
#-8<Iaammmmm
"#%89addammmr
$-8<Gdnmmmj
$-8GIdnnjrr
$-8GGhnsrr}
$-9Gdhnszz
$-9GGggs}s
+-9Ghgys
$1;GVvys
+/GSiiyy
+/?Tiv
jjuwxz.4DC\JJMU
'* KJJJ;t
99MJJBy
9KJJJ\
9#KMJJ\
=LMOO`
*1=R\QQc
*<=UUQ\h
*@@VU```g
2@CVVg`m
'2FCaccm
3F[Yam
%@74i%
(J@@=%
:TOJ7Q
Tccbk
Vcccl#
Vcccl),Fbb_:
Vccll7,bheb:
Vcj[S/dhhhbH
_VTTTPJJJBH
~s#MgR'Qj.(Vq
]vr Lhh(QjT/SiB3Sh'5Ti
Lit%Qla-TkM3Ti>5Sf85Qd(6Rf
Liz$Qli,UmU2VlD5Ti:5Rf55Qd1YD}h
Li|#Qmo+Un\Fsbcqy~xtvywvs^
~srrrr:oRdr}}xsqnlihglt
]{usrsrZagjlqqokhdb`__b
3zxvtsrHR]deddbcc_\ZZY]
~{ywvsGKQW\_``_`]ZYXX[
|zyv@FOVZ\^^__^\ZYXZ
~{y?EMTZ\^_`a^^\ZY[
|?FMTX\^`ab`^^\Z\
?FMTY\_accb`^^\_
?ELTY]_ccdbb`^^`
tELSX^acefdab``c
ELRX^acfhfcdccf
ELRY_cehiiffffp
FLTZ`dgiljiiij
FMTZ`ehkmljklo\
HNT[bfjlonmmpsf
HNU\chkoqqoprv
IPV]dinqstssuz
KQX_fkoruwuvx}
KRYaimqvxxxy|
MS[cioux{}|}
NT\elqw{~
OU]fmuy}NaHaJaR
R8RRRRRRRRRRR
u[`ySM4r
RRRURRRRRRAVR^YRrRbRRRRR1VRRRRRRRRRRRRRRRRRRRRRRRRRRRRR5
RURURRRRR%
RRURURRRRS3"RRURURRRR
RVRRRRR
RS*"RR1VRURRRRSRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRJ7
|LTvLR
R@6:Z]
5vhXKDJS
R"~!VR;RJ
xRyRtJL_a
^ZV:yR4'
v{ RhLJLo
Q#J7i8
aI@J?~Q
JC~Q~N
K~QR{hU
v{|RGvR{
JVh`JD>!r
JVh`JD>G
;a"<RG
HJcATPNf
JVhtDL
Q6?fO7Q
JVhED>iP
R|QGvKRZ
XRoRwWp
bZ^RZZRZVRZR:4sR
|QR{UG
=2Gv3`
|QR{4ThX@J
QAZT`0Qk
sL|QBJ"
Lw{Q,TTza7B
|QR{l1T
JVh(^N|Q
|QR{Uk0XQ
|QR{Uk
wRRRJ7
DK>R69
wRRRJ7
|J>CQIRJ7
JVhL9RL
R9RyZ\
W<RCN
QD3i1N
Qhd+RheD
5ZYR:R
SJVhlL
:RZYS:R#J7
Lb y:yQ
@6ZIS(Q8Jf:
Q\CQIRJ7
R\CQIRJ7
:R\CQIRJ7
wRRRJ7
:\R\CQIRJ7
:<R\CQIRJ7
wRRRJ7
JJfh0F
:~Q\CQIRJ7
wRRRJ7
:l}Q\CQIRJ7
:L}Q\CQIRJ7
wRRRJ7
:}Q\CQIRJ7
:}Q\CQIRJ7
wRRRJ7
S:R6ZRD
sDJh{S
wRRRJ7
>Q8D7DK
RDC?jY
i;t}Q#
QJCiHP
LS8RSRZT;}Q6;}Q#
Z;JcFbTL
DPEp=v
LcPLRALU
c~Q 6RN
&T|QGR
wRRRJ7
:R\CQIRJ7
Q\CQIRJ7
Q\CQIRJ7
wRRRJ7
v{xURG
EHJVhlYbIRJ7
wRRRJ7
5xGR=n
wRRRJ7
&:{HSR
R8R2Ta[
5xGvS`
DRL/=(
v{HPRG
JOkdXD_
Q{QJ7
"sRZ}M
DRb4bn
@JKE?8JO
:dfQ#Pk
v{xMRhO
WRhHLOG
Qh rLO
WRhxLOG
QhPqNS
wRRRJ7
WRhLOG
WRh@pW
wRRRJ7
wRRRJ7
WRh@mW
wRRRJ7CQ#
Q#zYxL
rR#GRZRUDK
rR#GRZRUDK
JJVh<P
RkRIRJ7
JJVhLO
RkRIRJ7
JJVh\N
JKh$lW
RkRIRJ7
}@JVh|
l9aItL
}@JVh\
|J>CLJ"
),L[LV[
@UeF;8R
ZR=ZGvCt
S:R~"Q#
m:hRZITHNk
RZZ:<hQ
m:hRZIVHNk
RZZ:<gQ
RJfhLk
{JJVhF
QIRJ7
m:RZIVHNk
RZZ:fQ
RJfhXLk
QIRJ7
m:(RZIVHNk
RZZ:dQ
QIRJ7
m:RZIVHNk
:hRZZ:\bQ
RJfhXLk
{JJVhF
QIRJ7
m:RZIVHNk
:RZZ:aQ
RJfhLk
QIRJ7
m:HRZIVHNk
:(RZZ:
RJfhXLk
QIRJ7
m:RZIVHNk
:RZZ:|]Q
{JJVhF
QIRJ7
RZIVHNk
:RZZ:\Q
QIRJ7
m:hRZIVHNk
:HRZZ:<ZQ
RJfhLk
wRRRJ7
wRRRJ7
R~a|=m;R%NRk
R~E|T=Q
wRRRJ7
4Ry<LK
gJVh@;
S4@JVhLD
v{xRiQ
T:RP,LT
w`*hLK
DRJVhLO;Q
S4JVhp
@JVh(LO
&:{H&R
v{8R5
wRRRJ7
v{XR5
wRRRJ7
4Ry<LK
S4@JVh
JVh<NS
T:@RP,LT
R{lQiP
:0RZmR<J
J\.<L;
J;g@JVhD
R:8SQZ
0J^h4N
v{RiiP
:RZmR<L
v{xXRG
J;g@JVh
v{pRiiP
f<Lk,V
0JhxL;
$Jfkf$Jnh
DR"|QJ7
:RZYR L
ZIJJJfh,L
(RJVhTR
Dr~Q|~QGv
:R~?QIRJ7
RD>>RG
v{|TkXL
\sga%@UaQBF
8JJfh@U
{JJVh yF
J{hLO:RLG
RZDRB8?ZuR<+'G
Q4D+DG7
WR8RLO#
R60"#y
v{lQFrR@|S
R@$6##
RL?RJLO>f
: pQKR#
R@dFS#
R@dVS#
R@dzS#
R@-6"\#=
DRyS<dF
:nQZ*<zS
DRJ/hSWR
RZfu:(mQ
;Z=sGv
R~WQIRyTx
VZ:wQZ~
5xIZJs
RkIRJ7
RRZiW:
JVh$oL_
vZiS:`R e
x5 6RN
RRZiW:P}QZ
!;RJJVhmb JT
vZiS:R e
x5 6RN
J{h4LO:RLG
RZDRB8?ZuR<+'G
Q4D+DG7
Y:0=QZ
:lgQYA
R@H6#n#=
JJfhh8
yr(d:dXQ6$8
R@H6P"n
WRh~WR
JJ^h,7
R8RQ6#8d
RIJ38RW
R@H6`!n#
R@dVS#
R@dfS#
RIdS#!
R@dS#1
"JVx#G
RLp#>RJLO;
LO8RJWR
RZju:`Q
v{WQGv
R:SQ~AV$k
R~^Jf8Q
(D>GvR
D:?RJJV
v{TTiO
8JJfhTr
wRRRJ7J(
CQIRJ7
aI@GRN
|J>CJV9R$
V{`3RkGRN
6NvJnh
5xJ7kk
RRJJJ0
6Z}R{T8Q%R,
#J7ihRQ#
BJp~LkIJ
Y4v 6RN
RCQ#J7
ZRJJVhN
ZRJJVh
ZRJJVh N
ZRJJVhpN
WJB VJ7
WJB VJ7
WRhYLO
@JVhdL
8JVh$Q
WRh(WLO
<JVh$J
RJ7CQ#
@6s4@!
Q#{mx8J
vGvR{Rh
VGvRRJ
V~VQIRJ7
5vhXJVh@VR9
V{$RhRR
5vGvR{$R
|J>CD]k
RJ\JVh
RzTx|D>
wRRRJ7
Q\CQIRJ7
Q\CQIRJ7
[|khwL3Gz
|J>C;R:Q
v{`>QJ7
[qlhvL3Gz
$JVh@wL
{JJVhHK
[qmhuL3Gz
$JVh@vL
{JJVhHJ
v{\LQG
JVh@>
|J>C;R>Q
v{9QJ7
$JVhqL
$JVhpL
{JJVhE
[wh lL3G
JVhP8
|J>C;R:Q
v{3QJ7
[xh kL3G
$JVhlL
{JJVh@
[yh jL3G
$JVhkL
{JJVh?
wRRRJ7
jQYRYRZR
:iQYRYRZR
8JVhtkQ
8JVhjQ
8JVhjQGRN
8JVh$iQ
8JVhdhQ
8JVhgQ#
V1htJG
8JVhfQ
T<LGZe
8JVh@dQ#
6[cCQIRJ7
[6UYtL
]Rzv# R:M
mR{+0R;M
RRJRIJ#RRJ'RIJ+RRJ/RIJ3RRJ7RIJ;RRJ?RIJCRRJGRIJKRRJOR
Q#ybxD>
ya'@AKU
kAK)IR
Q#zzxkIR
Q#J7nc
Q#{sx8
wRRRy|x9
R6;\CN
FZXe=P
wRRRJ7
FZXe=T
L$:RJJVQ8M
DbHbLbPbT
SVRh$F
RZRLg'
btLg'a
NCJJ{Q
r=Dh\Q#
@'kk:~QZS=}
LI3 6RN
wRRRJ7
vGvRQDJ
n Vhp_#
lSQ3k:zQ4@'koIRJ7
{a(BF"
:XtQ4@'
wRRRJ7
:tQ4@'kQ
lSLQ3kD:,sQ4@'i Q
wRRRJ7
R"\C_#
\V:uQ4@'
vU:R6Z
RkxGRN
:oQ\CN
v8QJJVR
@9w@JyS
XE|Qwc8RLc
LLkSaI
%}wcSaI
LJBLkwLJ(
c{r6.
PJkS[U
pUs\koS
IyYa'@$a*BF"
lUj\kfS
we,|QG
QYD%w;
RAJsww
dJ*wJ%fTwm
R{RGRnE7
TN~PS,
R={h$yRR@+{RG`Sk
R|Qh|yDJ1R
v{8R9Q
Q{RGR=]hxRR@
FJnhwJB
vhDwRR
=R5{@RGR
JVhwyQ
VhvRR
:4R SD2htD
=vh0vF
RZr0Q>RJ
Q6aQJNc
aJ@5R7
UMR>RJ
R kslZRG
+[/t_/l
{U7._/kRa
S~\JK@|X=]'
aJ@9_7
(JnhhWS9RGR
a'@ALU
Q6TkPQRHQ
aJ@9_7
S;Rj#]'
aJ@9_7
HJh[DJ
J"IJ{HJJJ
vhaBMR
v{ RiL
RhhT_zQ
a!nQGv
z b+Jn
5lKRSD
Rxc7Sc
jRa(BD=
RxS7{c
jRa(BD=
vJyXGRN
RaJ'SaJ
|D=AbH
|XIRxh7{c
jRa(BD@
$RJVDLW
Rxc7{c
jRa(BD;
T7Y'aJ
;~Q 6RN
/$ 6RN
@5;7aJHLD@p
~:xeH"
R#xc7Sc
jRa(BD@
'S=xvQ
aJ@9_7
R~3L-QRxc
S;RmRiT
SIkaJ'e[*_DQ
ZxJ~hM
RRkSe(
Rxc7Sc
;~Q 6RN
nxT aJ^D
Rx B8R
@REtZR
TN9R_#
~Q#GRN
wRRRxT
kySIRD
kySIRD
YAqCbR
wRRRRD
w,['nJR7
5xx aJxD
SyXIRTD
Q|QQIRxT
-7T'SF
-7T'SF
NJfh,D
:G|Q;}QKRD
DJ=[TzWU
BaJDAJl
AR{UZR
x aJPD
ZRx T
@RE+ZR
wRRRx}
zZ=xi7ZD
?A|QaJD
BaJD=J
#RRJ7iV
DkCQ#
DkCQ#
xJ>CQ#
[J+&5l
LCQ#J7
5j 6RN
D:CQ#J7
LCQ#J7
|J>BRZ
:Q~JQ#
|J>CQ#
\sga%@UaQBF
IRGv'r
5xGv'r
O$JVhX
|J>BR#
|J>BR#
M$JVh(
|J>BR#
DL$JVh
|J>BR#
K$JVh8
|J>BR#
|J>BR#
|J>BR#
$H$JVhh
|J>BR#
Q#J7CQ#
tRCRGvRZ
e J;8RJJ"
,JVhLS
RPWRhf
&:{iQG
:$Q#J7
+QZIU8JVh
AW,RC
ZIU8JVh
:5RZAS;
}:8#QZYUHL
JL9RJJJfhL
(QFTiP
DaIDJE
DhaIDJ
D=aIDJ(QGR
@O~QMR
aIDJ(QGRIRSPQR
QpDJ{D
DFaIDJ(QGR
JJVh,&
{S;X~Q
@hzQZIZ;\zQ
;R?RNk
v{]SiMK
v{,hSG
;R8RNk
zZiSQc
zZiSQc
(R"|yQ
QGR;XuQ
vZiSQciO
#JVhD:
DaIDJE
D~aIDJ
RL#a'G
wRRRSPQ
QL#HQ0Q
wRRRSPQBR
QpDJ{L
GR;"{Q
D@aIDJ(QGR
{S;X~Q
zQZIZ;
;R?RNk
v{OSiK
jZiR,J
aIDJ(QGR
W|RCLT
(R"|'Q
(R"|;Q
vZiSQciO
#JVhT,
DaIDJE
DhaIDJ
D=aIDJ(QGR
@O~QMR
aIDJ(QGRIRSPQR
QpDJ{D
DFaIDJ(QGR
{S;X~Q
@hzQZIZ;\zQ
(RySXJ
;R?RNk
v{lLSG
v{DASw
zZiSQc
zZiSQc
(R"|yQ
QGR;XuQ
vZiSQciO
DaIDJE
DPaIDJ(QGR
@O~QMR
DaIDJ(QGRIRSPQR
yQIaJ@J
DQaIDJ(QGR
{S;X~Q
QYHS|Q
RZiS:{QZiS
:LR|QG
jZiR,J
: QZIb;
DNaIDJ
QEieFiS
vZiSQciWK
vZiSQciH
vZiSQci0I
yS;r~Q
(R"|qQ
RL#a'G
wRRRSPQ
DIaIDJ(QGR
@8}QMRi\O
DaIDJ(QGR
RSPQpR
Lw~Q%P
QYHS|Q
@yQZIZ;yQ
(RySXJ
;R8RNk
jZiR,J
RZiS:jQZiSS:RJL
XJ^hD{
DhaIDJ
~QEieFiS
vZiSQciK
vZiSQci_G
vZiSQciH
yS;r~Q
aIDJE3
D}aIDJ(QGR
@O~QMR
DaIDJ(QGR
Jw~Q%P
QYHS|nQ
aIDJ(QGR
RSPQpR
Lw~Q%P
QYHS|Q
@(yQZIZ;
(RySXJ
;R8RNk
v{< SG
L$JVhp
vZiSQci=K
vZiSQci
vZiSQciTK
R|~QKRiP
F$YPRK
aIDJEt
2R 6RN
D~aIDJ(QGRIRSPQR
{S;o}Q#
wRRRSPQ
: RQ|<QG
^R|DQG
(R|rXJJfht
[JJJVhL+
RZiS:TOQZiS
RZiS:OQZiS(Q;RJ
jZiR,J
^~;yQZQ
vZiSQciI
vZiSQci
zZiSQc
RZiS:JQZiS
XJ^h4[
R6KRkf
(R"|:Q
fR 6RN
>4FuIR
RZR\iP
cUuiLP
jZiR,Nk
Q:RZiQ
jZiR,Nk
Q:TRZiQ
jZiR,Nk
DLaI|T
;RIY~3Q#J7
B@F$ a
PJJJLhJ
vh@bL{i.Q
vh`L{i2Q
LIyaI@L_
_L{i3Q
,CD#w;^~QY
JJJJ^h0GJ{
j>;k~Q@N
;~Q sp|
HHQi/P
JL3~Q
zpJJJhCJ[~Q|^Q8RJ;~Q|
j>;k~Q@N
;~Q sp<
HHQi/P
JL3~Q
JJJh@J[~Q|^Q>RJ
DCQ#J7
|J>CQ#
Q#J7D>
:hrQ\CQ#$
:(rQ\CQ#J7
v{QI#J7
v{QI#J7
Q#J7CQ#
t$JVhh
|J>BR#
,JVhln
|J>BR#
4$JVhxg
|J>BR#
,JVh,m
JVhXiJ8Q
WyS=cGR=KG
JVhhJ8Q
WyS=cGR=KG
J6cZRe
aQ@DJ'SJ
fR 6RN
RSnEDSFDeFI{D=yQ
'jJBTx
ZQh$ZR;<~Q
v;-~Q#
fR 6RN
RSnE$SF$
v Vpsp
DJE[-a
[aIn`JnK
RZRIR6.
fR 6RN
RSnESF
fR 6RN
RSnESF
.ZR;t~Q
@<~QMRi`P
mZJCh(
/TRGRN
fR 6RN
fR 6RN
_0QidP
w+6EpR
w+6EpR
vaQPF$
~QNR(Q
ekIRBLR
Z|kR8RL~Q
ekIRBLR
ekIRBLR
DaIDJF
6YZRaQX
ekIRBLR
v8RJyq
R|Q8RJys
wRRRw]6aI
V;!~Q#
Q#J7D>
Rwj~Q
Nw~Q6F)
gQIx~Q
|PLQi&P
Q#J7B>R
5;YT>VI
{8&Pk[#
@PRZYQ
XJnh,?L
+Rh?+R:RN[
^RYRZR
RZYRHJVhB+R
6YZR Q
DaIDJ
JJVhh4L[F
RyS0$Q
XJJVh4
QU6~QK
R`~PQ~Q
J[~QKR
aQPL[~Q>]BR
:YLG~QZRN
DoaIDJ
D9aIDJ0<QGR
@(~QMRiLP
dQU~~QK
D!aIDJ0dQGR
RJs~QK
DaIDJ
RLs~Q6
wRRRSP_QWR
DaIDJ PQGR
aIPLxV(a
LQGRyQ
RL~QRR
DwaIDJ0QGRIRSPQ ~Q
@(~QMRiLP
L_~QZQ
@{QMRiM
J[~Q|Q
L~QZRL
9bE*yQ
pQMRiA
@pQMRiB
vZYSQciM
;RzQZQ
vZYSQciF
vZYSQciF
:L.R|Q
0Q0QiK
z~9JfG
R{oRiA
vZYSQci
vZYSQciI
zZYSQc
vZYSQciE
vZYSQciF
vZYSQci?
vZYSQci^>
zZYSQc
@PRZYQ
XJnh'L
+Rh8'+R:RN[
^RYRZR
RZYRHJVhD*+R
6YZR Q
DaIDJ
RyS0$Q
XJJVh(
QU6~QK
R~PQ~Q
J[~QKR
aQPL[~Q>]BR
:YLG~QZRN
DoaIDJ
D9aIDJ0<QGR
@(~QMRiLP
dQU~~QK
D!aIDJ0dQGR
RJs~QK
DaIDJ
RLs~Q6
wRRRSP_QWR
DaIDJ PQGR
aIPLxV(a
LQGRyQ
RL~QRR
DwaIDJ0QGRIRSPQ ~Q
@(~QMRiLP
L_~QZQ
@{QMRiM
J[~Q|Q
L~QZRL
9bE*yQ
pQMRiA
@pQMRiB
vZYSQciM
;RzQZQ
vZYSQciF
vZYSQciF
0Q0QiK
z~9JfG
R{WRiA
vZYSQci
vZYSQciI
zZYSQc
vZYSQciE
vZYSQciF
vZYSQci?
vZYSQci^>
zZYSQc
I"~QK`
P(Qh88
~QZJ~Q
cE|k~Q
cL~QYT
JJV8RJ;~Q{haR
;~Q{`QiP
Z{xPiP
jZiR,Nk
|J>CQ#
R~Q{\uP
@spG~(Q
cE|[~Q
JL~QNR
(Q:RJV
JJfht3
v{<rRG
J"xDJCq
VZYT:@
R{HpRG
v@J;PQL
QHOHLF^
QZYS(`Q
v{PsRG
^ZR0\Q
QZYX:QYRYRZR
*RZYRHJVh
R{PkN0Q
RP+Rh\]
RZYS:XQZYS(|Q>RJ
~Q@JL{~Q
JJ7PlQ
RZYS:QZYS(xQ
;xQZYS
:X!R6^
;xQ>Fm
PQ(dQ!
JP4eZf
RLw~QvJ
JJp4PdQ
v{<eRG
J"xDJCq
VZYT:@
R{HcRG
v@J.PQL
QHOHLF^
QZYS(`Q
v{PfRG
^ZR0\Q
QZYX:QYRYRZR
*RZYRHJVh+R
R{PkN0Q
RP+Rh\P
RZYS:XQZYS(|Q>RJ
JJ*PlQ
RZYS:QZYS(xQ
;xQZYS
:(R|VQw
;xQ>Fm
Q(dQ!
Q#J7D>
d~@JfhH
Q#y\xD>
R6 L3kO
RPJ3iP
Q#y\xD>
;L~Q64Lc
DR4}#J7
Q{<OiP
5YZuX4F-
R:xnQZ
S:DeQ#J7
Jc8RJL[
RPLK9Q
RPL[9Q
9FzD6cZYQ
iQ|(QG
5pZYR:hQZYQ
TQciQ
~0JVh<7
DRLq}#
UkCXDWL[
\aISL{
QLi|QhD
\aISL{
QLi|QhDC
Q#y\xD>
CD;L;
DR8i}#
h~8NRG
aICJJ^
TQci#Q
~,JVhl-
DR|h}#
"hJVh$
AR5ZqR4LT
J"q0JV
l}4LT
xt}8LOF
RY6RZ9R
|J>CQ#
RyJ^hzNS
cZRCQ#
v{XOI#
cZRCQ#
DRTi}0JfG
FJD6cZ
:XUQ|QG
"P;JL3
R{tOiQ
\f} LT
v{H P;JL3
Q{0$PG
Q{`"PG
R{4OiQ
Q{<OiQ
ZiR0LT
R{dOiQ
Q{lOiQ
ZiR0LT
R:XCQZ
@R`f};a~Q
S:p;Q#
R{$OiQ
Q{,OiQ
R{TOiQ
Q{\~OiQ
PM} LT
(R@N};M~Q{}O
(R|G}#
S:h2Q#
Jc8RJL[
RPLK9Q
RPL[9Q
9FzD6cZYQ
:(6Q|(QG
5pZYR:
Q{vOkG
vhW{TuO
V{lSi0Q
|J>CQ#
J}8LOF
RY6RZ9R
R{dyOG
:8QZiQ
vZiTQc
:}R 6RN
FX6ZiQ
FJD6ZiU:+Q|GQh
(R"N\Lb
;Fx6 e
vZiU[[
vh\LLo
ZZiTQc
MW,RCN
R{gOiP
9}Sp\Lb
jZiRQc6
J: vR|QG
R{vOi~O
VZiT:Q
nZiTQc
:uR 6RN
3Fp6ZiQ
FJD6ZiU:#Q|GQh
(R"N\Lb
:HQZiQ
VZiT: Q
3Fp6ZiQ
FJD6ZiU: Q|EQh
(R"N\Lb
Q#J7ixUQ#
FJD6ZiU:
(R"H\Lb
R{lOiO
:HQZiQ
VZiT: Q
bZiTQc
:kR 6RN
3Fp6ZiQ
FJD6ZiU:
(R"N\Lb
R{$iOi
|`QJ7
fZiTQc
AaIE;+~Q
(R(};~Q{|VO
R{$eOiO
:xQZiQ
VZiT:PQ
RpJwIR
]J8v='
3Fp6ZiQ
FJD6ZiU:8
(R"N\Lb
R{TbOi
JbCQ#J7
JbCQ#J7
Q#y^ux
|J>CQ#
Q#y^ux
R{oOkj#
Q#y^ux
R{XnOkj#
Q#yRux
|J>CLU
Q#yRux
tJ>CJN
tJ>CQ#J7
P1R 6RN
_~)Ji(Q
,JVhDm
vh`kLXZQ
5xGvkr
R{4^Ok|#J7
JJVhRD
pJJJJhLiDM7n
JhPhDM+n
^@JJJh
JJVhRD
R{`[Oi<Q
|J>CJf
{JVh$3
{JJVh3
vZYT:XQ#
JnhcDQ+
|J>CVh
tJ>CVh
^@JJJh(bDP#
|J>CVh`
BZJf{q
R{SOk#J7
Jnhh^DQZ
|J>BR#
hI8pLT
JTCQ#J7
jQhXJJ
jQhXJJ
jQhXJJ
jQhXJJ
t*B'JJ
e<JVh R
JR#2eF
Q|QGvs
J+Rh8YLk
+Rh<VD
A;2~Q#
RDd}SPz
:hcQ|Q:Q
vZYT:HQQ
:D{Q\CQ#
R{HOk#
R{GOiQ
|J>CJkf
,JVh$R
{JJVh`
`Q|QJ7
;Z~Q#J7
|J>CVh
F{DB8T
vZYSSc
Q{8@Oi+Q
5xGv1s
F{DB8T
vZYSSc
Q{(<Oi+Q
5xGv1s
V}S Nk
U}S Nk
v{,QkvX;
NThSJ"
CJnh(
Q#J7i-
^@JJhPD
Zh:Q~AQ#
Z@JJfG
8JVhTA
8JVhT>
8JVhT;
b@JJfh
${}#J7
j}@JVh
i}@JVh<3
}8JfhD
:gQ#J7
b@JJfh'
v{D6OG
RJVh,k
Pg}@JVh1
8Jfh47
g}@JVh1
:DdQ#J7
}SJVh<
<}@JVh0
8J^ht5
}SJVh,
8J^ht4
}SJVh,
8J^ht3
6Q\CQ#
:|+Q\CQ#
:\+Q\CQ#
:;Q\CQ#
::Q\CQ#
:<:Q\CQ#
ZCQ#J7
QkgPQ5o
RZq>X4K`h%
ZYTSJVhT
"RHD>[cO
JVh R,
,}SF4@JVhD$
RZYT:Q
"RHD>[cV
E L/5a
};>}QZYQ
|J>CJVG
;u~QZR:
:GQZ]R L
QJ(TyaB^J'
:tQ#J7
V9RLe
}S'<LO
CL:RDJ
wSL(a(Bib
aIJwiP
R!aFR
};$~QZR
*RGvoq
JJJVhI
:hQ|fQ
|};|Q@F-
v{LHOi(Q
:$vQ|Q
&:{8|O
8LOGSJVht
:=Q#J7
8LOGSJVh
:4<Q#J7
8LOGSJVh
:t;Q#J7
&:{uOG
:DQ#J7
RZ9fSJ?
V:dvQZ
}SJVhM
}SJVhH
}SJVhG
\ZR<LO
~'bv<LO
\ZR<LO
~'bv<LO
h:}8LO
LGk8LK
&:{fOG
}Q#J7
u8JJfhDL
[Jt@JVh
}SJVhl>
&:{4cOG
u8JJfh
v{Q!%]
"h4}8LO
Bh42}8LO
\ZR<LO
:4$Q#J7
\ZR<LO
&:{\OG
sQ#J7
v{,Q!5]
h*}8LO
hd)}8LO
v{p[OJ7
v{TO|LO9RL
v{+OkrXWR
u<JVhZ
v{TO|LO9RL
v{*OkrXWR
u<JVhY
:lQ\CQ#
:LQ\CQ#
LOGRE9
DJ(JVG
0JJfh<
<LGGr,J"
R{ (OG
t!}<LO
LOGRE9
DJ(JVG
B0Jfh4
<LGGr,J"
R{4&OG
D%}#J7
R{t%OG
$}@JVhX
u8JVh`s
d}@JVh
u8JVhr
:Q\CQ#
Q#J7CQ#
|J>CQ#
Z_HT}h
_WJB V
QZRU#J7
QZRU#J7
Q\CLSM
SJJfhk
aICJJ^
fRZRSJ
fRZRSJ
v{tR|LO9RL
^[JJLK
OkrXWR
u<JVhDW
v{tR|LO9RL
^IJJLK
OkrXWR
u<JVhDW
:R\CQ#
:R\CQ#
RZRa(@
R8JVh0
RZRa(@J
R4JVhf
:Q\CQ#
:Q\CQ#
:\Q\CQ#
:<Q\CQ#
:Q\CQ#
:Q\CQ#
L3~QY%SZ~uH(Qh$p
QL3~Q@Nk
J;~QPLk
v QXD>
v8RJ;~Q{
;~QPbVt( Q
Qc8RD>
ZThSE@XAE
cE|k~Q
_L~QYT|bQ
JPA};x}Q
:d.Q|%Q
v{(Okk#
v{Ok{#
v{HOk{#
Z=R#<R
yR$Z=R
:Q\CQ#
R4JVh(U
&:{H-O
R4JVhT
R8JVh|
&:{8*O
R8JVh,
R4JVhQ
:4Q@LK
SZbuH(Qh]
QL3~Q@Nk
QL3~Q
JL9RJf
x;}XJV8Q
J;~Q{`6Q
QL3~Q@Nk
cE|k~Q
cL~QYT
&F V9Q
J;~Q{|NiM
;~Q{4Q
;~Q{`)O
Qc8RD>
v{Okb#
v{8Okb#
v{Okb#
SZfuH(Qh
QL3~Q@Nk
QL3~Q
JL9RJf
1}XJV8Q
J;~Q{-Q
QL3~Q@Nk
cE|k~Q
cL~QYT
&F V9Q
J;~Q{NiM
;~Q{ *Q
;~Q{ O
Qc8RD>
;~Q{X)QiL
v{xOkb#
v{Okb#
jQ\CQ#
:jQ\CQ#
gQB4CR
Ls~QrJ*
v{OFF-
aQBc~Q
>TE0P[Q
aIIXKRJo~Q|Q
Ls~Q>F9
nYSR`#
Lwwb|QFF-
<nEaQ6aQA
99RJJn
<}@JVh
:`Q\CQ#
:`Q\CQ#
:L_Q\CQ#
:,_Q\CQ#
DRt}@JVh
}8Jfh,
DR4}@JVh
}8Jfh)
:<UQ\CQ#
UQ\CQ#
:TQ\CQ#
:lTQ\CQ#
PS|4LC
vfR 6RN
@V~QNRizP
Z=R;~Q
ZZiSQc
df|XJVh&
UXD;L?
:xSQZiQ
ZEDJPJ_
v -SJl_|
v{$Oi{P
%;Q~Q#
Y5RZyf
Y5RZyf
:<1Q\CQ#
1Q\CQ#
:JQ\CQ#
:IQ\CQ#
:IQ\CQ#
:IQ\CQ#
>bRs5V
IyAU SSSaIV
>E?aIIU
~a(BF"
6bRs5\
ya(BF"
IY@JnJ
Y,UTnaIV
DkCJDL
{|*OJVhDM
V{ +O]
{*OJVhL
QQa'AE
N\CQ#y\xD>
aQ@Jt~
aQ\CQ#
Q#J7ip5
v{OGvb
S:NQZ}RU
v{OGvb
MQZ}RU
S:PLQZ}RU
v{@OGv
S:KQZ}RU
v{OGvb
S:KQZ}RU
v{OGvb
JQZ}RU
S:PIQZ}RU
:\Q#J7
v{@OGvb
S:HQZ}RU
:Q#J7
v{OGvb
S:HQZ}RU
:Q#J7
v{OGvb
GQZ}RU
S:PFQZ}RU
:\Q#J7
v{@OGvb
S:EQZ}RU
:Q#J7
v{OGvb
S:EQZ}RU
_S:H$Q
_S:H#Q
_S:H"Q
_S:H!Q
VJ7iRQ#
YSD2hy
FH6ZiQ
R{PNipP
$"|Sv\Lb
jZiRQc6
J:P_Q|QG
Q#J7iN
Qk_XL;
FJD6ZiU:
(R"Q\Lb
QZiS:4
|J>CJn8RJ~
|J>CQ#
~V;R;Q
JL+;RJJJVh
UXD;L?
{JJVh:
:zQ~EQ#
Q#J7iRQ#
Q#J7iRQ#
Q#J7iTQ#
Q#J7iTQ#
XJJ^hl
vZiUQci3P
vZiUQciP
AR5ZuR8LT
1FrD6cZ
R{L;NJ7
|J>CJn8RJ
|J>CQ#
UtJ|;~#
UtJ;~#
UtJd~#
UtJd~#
[S@RQR
QRRRQRRRQRRRQRQRQRQRQRQRQRRQRRQRQRQRQRQRRR
\RRQRQRQRQRR
TQRQRQRQRRRR
kSSU@R
kSSU@R
kSSUS@RRQRR
kUUUUS
kUUUUS
kSRRW@R@
RQRRQR
RRQRRR
\RRQRR
kRUR@R
kRUR@R
kRUR@R
kRUR@R
SRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRR""RRRRRRRR
QRRRRRR
Q@eRRRRRRR
RRRRRRRR
QRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRR0
RRRRRRRRRRRRRRRR
RRR" &
&/)*R" &
&r-" &
&r&RRRR"
RRRR"
*5(&7"
1&9R44
*5(&&R"
"*5("
RRRRRRRRRRRRRRRRR0R
RRRRRRR
RRRRRRRRbVSTV
rZTR0"(
"/r*RRRRRRRRRRRR0&
5r6RQ&X&_&f&m&J&0&
RRRRphXD<RRRRRR0!!RR#R
8}RXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXRRR
RRRRRY
bUSRR67
Rt}R0&"
-RRRRRRRRRRRR5
RRRRRRRRRRAQ
3<qy^M~k1iA
:T?'9O%
RRRRRR|Q
QRRRRRR--tQtQdDRRRRRRRR
PV V|Q|Q
RRRRRRRR@
QdDRRRRRRRR
RRRRRRRR--
QdDRRRRRRRR
RRRRRRH
RRR8RH
RRR0RH
RRRRRRRR$
RRRRRRR$
RRRRRRR
0"'6R%R*R0R5":%R55
&R50 &R501
5#R501
5#R5 &
507"R55
"$50/3
/R5"95
RRRRRRR5"
RRRRRRR5&
R5" 5.5)
RRRRRR5" 5.5)
RRRRRR507:&*505:&R57
RRRRRR5&
RRRRRRRR5*1
RRRRRRRR5/'
5$$5/*3
$&#R5
$&#R5
RRRRRRRR5:$5%5*5-&R5
$RR5%4
RR5%-R54*
RRRRRRRR5$
RRRRRR
RRRRRRp
RRRRRR
RRRRRR'
'R0w0v vRRR@
RRR--xQxQdDRRRRRRRR
PV V|Q|Q
RRRRRRR$
RRRR`~
R@q@pkRR
kRRp@bb
kRRPkRR@`RR0
lkkRRR
RRRRRRRR
Q dDRRRRRRR,
RRRRRR8
@zRRdP
p|}Pz{|RRRRRRRRp
0}pRRRRRRR|
gRRRRRR(
Pc0dbb
RRRRRH
RRRRRRT
`F0FZbcb@bc0cP`^
x@x0vRRRRRx
Pp|}Pz{|RRRRRRRR
0}pRRRRRRR
PjpjRR
RRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRR1VRRd8Vh2V
1VRR9V|2Vx1VRR9V3V2VRR:V3V\2VRR:V4VRRRRRR4V4V4VRR
4V$4V44VD4VP4V`4Vt4V5V5V5V5V5V5V
5V 5V85VH5Vh5Vp5V|5V6V6V6VRR6V6V6V6VRR6V6V
6V,6V@6VL6VX6Vd6Vp6V7V7V7V7V7V7V7V7V7V7V7V
7V(7V47V@7VH7VT7V\7Vl7Vx7V8V8V8V8V8V8V8V8V8V8V8V
8V$8V08V<8VRRD8VRR4V4V4VRR
4V$4V44VD4VP4V`4Vt4V5V5V5V5V5V5V
5V 5V85VH5Vh5Vp5V|5V6V6V6VRR6V6V6V6VRR6V6V
6V,6V@6VL6VX6Vd6Vp6V7V7V7V7V7V7V7V7V7V7V7V
7V(7V47V@7VH7VT7V\7Vl7Vx7V8V8V8V8V8V8V8V8V8V8V8V
8V$8V08V<8VRRD8VR
/R 0R&1:R4
R//0R0/3
5i#Rk$
R1&R&-
R1V1V1V
R1V1V1V1V1V1V1V1V1V1V1V1V1V1V1V1V1V1V1V1V1V1V1V1V
%R1V1V1V1V45-R1V1V1V1V1V1V1V1V1V1V1V1V1V1V1V1V1V1V1V1V1V1V1V1V1V1V1V1V1V1V1V1V1V1V1V1V1V1V1V1V1V1V1V1V1V1V1V1V1V45-R1V
RRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRR'RR~R
RRRRRRrRRRRRRRRrRrSTRRRr&ST
RSURRRR5RTURRRR4RRVURRRR-kP3
STRRRR
SURRRR5RTURRRR4RbVURRRR-P"
SURRRRR
RLRrR<SURRRTR
(RRR0<STRmRUURwRRRRRRUUr
SURRRR5RTU0RRRR4RbVURRRRRrzHSURRRR
"RUU2RRRR-P)
":RUURRRUR
UURRRUR
UURRRUR
UURRRUR
SURRRRR
RrRJBSURR@RrR
SURqR`RrRZrST5
R0RRFRRR%
R@RRRRRRR#
RRRRRRRR3"R@RR
_RRRRRvURrRRRR'RR~R
5RRR RR
aRRRRRRR^URRRR
R0RRyRRRRR5R
RRzXRRRRlRRRbVRRRRRRRzXRRRRR
RR^URRRR
RRRzRRRRR8R\RRzXRRRRoRRRbVRRRRRRRzXRRRRR RR^URRRR
RRzRRRRR;RRRzXRRRRqRRRzXRRRRR\RR
[RRRRRRRz\RRRR
[RRRRARRR^URRRRsRpRRyRRRRRR0TR
RRRRRR0TrRRRRRR&R`TR
RRRRRjR`TrR{BSURRRTRBSTR
R@TRyRRRRRVR@TrR_SURRRTRSTRRpTR
RRRRR5RpTrR9SURRRTRsSTRRURZRRRR
SURRRTRS
STRRURZRRRRRUrR
SURRRTR2
STRRPURZRRRRRPUrR
RSURRRTR)RSTRRTR(^RRRRRTrR
2SUORRRTR;2STRR0UR
_RRRRR0UrR
SU?RRRTR
URRRRR
SURRRTR
STRBRTR
URRRR}RTrRrSURRRTRrSTR&RpTR}\RRRRbRpTrRk2SU
RRRTR2STR
eRRRRLRUrRMSURRRTRSTRRUR#oRRRR
2SUARRRTRG2STRR0UR
YRRRRR0UrR
bSURRRTR
bSTRlRURZcRRRRRUrRSURRRRTR
STR6RURqdRRRRkRUrRm
SURRRTR
UR/YRRRR5R
UrR7BSUkRRRTRkBSTRRUR[RRRRRUrRSURRRTR2STRRURX[RRRRRUrR
SURRRTRSTRZRURi[RRRRRUrR
SURRRTR
STR*RUR
uRRRRqRUrR2SURRRTR
2STR<R@UR
TRRRRuR@UrR{
STR4R0UR
]RRRR|R0UrR
SURRRTR
STR,R0URgRRRRtR0UrR"SURRRTR
"STRBR
uURdSRRRR
uUrRGSURRRTR
GSTR,RDuURdSRRRRiRDuUrRs6GSURRRTR6GSTR
RuURdSRRRRRRuUrR[GSURRRTRGSTRRtUR\SRRRR5RtUrR;FSURRRTRtFSTRRUR
TRRRR RUrR7
SURRRTR
STRRUR
TRRRRARUrRY"SUQRRRTR"STR
[RRRRdR
TrR}~SU
~STRBRTR
TRRRRRTrR
SURRRTR
STR|RTR
RRRRRRTrR
"~SURRRTR
"~STRRTR
`RRRRRTr
SURRRR5
TURRRR4RrVURRRRRrHSUERRRR
"RUURRRR-UP4
jUURRRUR
:UURRRUR
UURRRURUURRRUR
SURRRTR
STRRRRR0
SURRRTRg
STRRGTRpRRRRRRGTrR
z<SURRRTR$z<STRRiURjRRRRRRiUrR
;SURRRTRT;STRRHiUR
RHiUrR,;SURRRTR{;STRR(iURgRRRRR9R(iUrRL
SURRRTR\
FTRlRRRRRR
SURRRTR
STRRPFTRuURRRRRPFTrRR
SURRRTR
RDTRP^RRRR9RDTrR>"
SU'RRRTRv"
STRR0>TR
\RRRRR0>TrR
SURRRTR
STR#Rp<TR
^RRRRGRp<TrR8R
SUbRRRTRUR
STRR09TR
^RRRRR09TrR
SURRRTR
STRRDTR
RDTrRz5SURRRTR*z5STRRcUR[SRRRRRcUrR8SURRRTR
eRRRRRfUrR
8SURRRTR
8STReRiURbSRRRRRiUrR
SURRRTR
cRRRR9RJTrR>
SUMRRRTRP
STRRRTR/dRRRRRRTrRx
!SUMRRRTR
!STRRUTRlSRRRRRUTrR
2SUMRRRTR
\TRdRRRR
SUURRRTR
STR-RYTRdRRRR=RYTrR
'SURRRTR*
'STRcR\TRbSRRRRsR\TrRP
'SU-RRRTR`
'STRRUTR
TRRRRRUTrR
.SURRRTR
.STRR7TR
bRRRRR7TrR
*'SURRRTR
*'STRkR
URRRRR
VGSURRRTR
RuURdSRRRR+RuUrR
J'SURRRTRR
J'STRR`RR]RRRRRR`RrR
SURRRTR
TRRRR,RBTr
SURRRR5
TURRRR4RrVURRRRRrzJSURRRR-P4
bUURRRUR
UURRRUR.
UURRRUR<
UURRRURJ
SURRRTRa
STRRRRRs
"SURRRTR
TRpRRRRR+R0
SURRRTR/
STRnRsURjRRRRRRsUrR
ESURRRTR'
RRRRRR
vESURRRTRN
vESTRRsURgRRRRR
RsUrR
SURRRTR/
STRhRP
TRsRRRRRxRP
RSURRRTRe
TR|URRRRR
SURRRTR
TR\^RRRR
bSU5RRRTRI
bSTRRP
\RRRRRP
%SUWRRRTR
%STRFR
nUR/cRRRRR
@SURRRTR
@STR:RnUR[SRRRRwRnUrR
CSTR.RnUR[SRRRRkRnUrRu
@SURRRTR
URRRR2Rp
SU<RRRTR=
TR4^RRRRR
SURRRTR
TR%_RRRRR0
SURRRTR
_RRRRER
2SU'RRRTR;
2STRzR
SURRRTR
SURRRTR
_RRRR-
SUERRRTR
SUGRRRTR
Rp$TrR
rSUERRRTR
`RRRR/
R@&TrR
SUERRRTR
`RRRRi
RP3TrRG
SUERRRTRX
SUERRRTR
(TRD_RRRR
SUERRRTR
R0TRE_RRRR
SUERRRTR
RTR_RRRR{
SURRRTR
TR_RRRR4
BSU6RRRTR+
RdsUrR
FSURRRTR
RdtURdSRRRRD
RdtUrR)
"SURRRTRB
SURRRR5
TURRRR4RrVURRRRRrKSURRRR-
UURRRUR
UURRRUR
RUURRRUR
VUURRRUR#
UURRRUR:
UURRRURL
UURRRUR^
BUURRRURl
UURRRURz
UURRRUR
UURRRUR
bqSURRRTR
bqSTRRRRR
qSURRRTR-
RSRfRRRRR
SURRRTR
R0IURdSRRRR
R0IUrR
SURRRTR
SReRRRRR
2nSURRRTR
2nSTR6
R@SRdRRRRRh
R@SrRg
SURRRTR
R LURkTRRRRO
R LUrRK
SURRRTRz
RLURuURRRR
RoSURRRTR/
REURcRRRRR
SURRRTR
SURRRTR
RVUR[RRRRRX
RVUrRM
SU2RRRTR]
R@TrRB
SUFRRRTRB
R TrRR
RRRTRR
SRRRR8
SURRRTRs
R TRNYRRRR
SUdRRRTRY"
RKUR6\RRRR
RKUrR'
SURRRTRd
R0GURM`RRRR
R0GUrR
FSURRRTR!FSTRb
R$tURdSRRRRz
R$tUrR_FSURRRTRtFSTR
RtUR\SRRRR
oSUHRRRTR
RPBUrR
SURRRTR
SRRRRW
SURRRTR
R0SR]RRRRRP
R0SrRWoSURRRTRoSTR
RSRdRRRRR
SURRRR5
TURRRR4RrVURRRR
"UURRRRRrMSURRRR-P5(
RTURRRURCUURRRURcUURRRURUURRRUR
SURRRTR
STRRRRRrOSURRRTRrOSTR
RSR_RRRRR,
SURRRTR(STRj
R@SRaRRRRR
R@SrRerSURRRTRrSTR
RSRmRRRRR
7SURRRTR
eTRuSRRRR
SURRRTR
RSRaRRRRR9
rSURRRTR/rSTRn
SR\RRRRR
SURRRTR
R0SRaRRRRR
R0SrRrSURRRTRrSTR
R SrRSURRRTR
RSR\RRRRR\
RSrR=SURRRTRUSTR
RPSR|SRRRR
RPSrRrSURRRTRrSTR
SURRRTR
TRRRRT
RPSrR9
SURRRTRO
R0SR|SRRRR
R0SrRRSURRRTRRSTR
R`SRbSRRRR)
SURRRTR6
RpRrRBSURRRTRBSTR
R@SR|SRRRR
SURRRTR0STR~
RpSR~RRRRR
SURRRTR
TRRRR(
BSURRRTR;BSTR
RSrR"SURRRTR
URRRRg
R0SrROSU
RRRTRkSTRR
RRgRRRRRR
b5SURRRTR'b5STRvR0TRcSRRRR R0TrRc
cSURRRTRs
cSTR RSRcRRRRR RSrRSURRRTRSTR RTRn]RRRR
RTrRbaSURRRTRbaSTR8 R
TRySRRRRP R
TrR5cSURRRTRMcSTR!RPTRxSRRRR!RPTrR2`SURRRTR2`STR!RTRsSRRRR!RTrRXSURRRTRXSTR$!RTR[RRRR4!RTrR
reSU+RRRTR!reSTRZ!R`TRQ`RRRRt!R`TrR[@SURRRTR@STR"RnTR
SRRRR2"RnTrR7"eSURRRTRI"eSTR#RuTR
VRRRR#RuTrRASUJRRRTRASTR#RPTR}TRRRR#RPTrRBBSUjRRRTRBBSTR,#RTkURE]RRRRg#RTkUrRo<SURRRTR<STR
$RTR[SRRRR%$RTrR
ISUFRRRTR@ISTR%R
TR[YRRRR%R
HSURRRTR
HSTR@%R
zTR;YRRRRW%R
zTrR;fSURRRTRKfSTR&R`TR
URRRR&R`TrR&>SURRRTR&>STR &RTR
URRRR0&RTrR
BMSURRRTR#BMSTRb&RP{TRrSRRRRw&RP{TrRYRJSURRRTRqRJSTR'R`yTR|SRRRR'R`yTrR2?SURRRTR2?STR
'R}TRoSRRRR
'R}TrR
9SURRRTR
9STRF'R
SRRRRV'R
TrR3r:SURRRTREr:STR(R{TR
SRRRR(R{TrRw
?SURRRTR
?STR(R
SRRRR(R
lTrRB5SURRRTR$B5STR)R`lTR
WRRRR)R`lTrR2cSURRRTR2cSTRZ)RpdTR
WRRRR*RpdTrR`SURRRTR`STR
*RTR}SRRRR9*RTrR%b_SURRRTRAb_STR+RTR
URRRR+RTrRr^SUmRRRTRr^STR+RSR
URRRR+RSrRbSUmRRRTRbSTR,+RdTR
WRRRRr+RdTrRR`SURRRTRR`STR,RTR}SRRRR
,RTrR\SURRRTR
\STRV,RTR
TRRRRo,RTrRU\SURRRTRo\STR-R}TR
SRRRR-R}TrR
QSURRRTRZ
QSTR.R~TR
.R~TrR
2PSURRRTR\
2PSTR/R }TR
/R }TrR
PSURRRTRV
PSTR0RTR
TRRRR0RTrR
bWSURRRTR
bWSTR$0RPTR
SRRRR?0RPTrR'
`SURRRTRA
`STR1R RRgRRRRR1R RrR
:SURRRTR
:STRF1RPhTR
[RRRRe1RPhTrRQ
SURRRTRv
STR2RSR
SRRRR2RSrR
STRH2RSR
SRRRRj2RSrRY
bSURRRTRr
bSTR3RPTR}SRRRR3RPTrR
PSURRRTRF
PSTR4R0TRojRRRR4R0TrR
4RzTRURRRR)4RzTrR
QSUhRRRTRP
QSTR5R`rTR^XRRRR5R`rTrR
8SUXRRRTR
8STR 5RgTR
TRRRRD5RgTrR5
bASURRRTRL
bASTR6RpTR,VRRRR6RpTrR
"<SURRRTR
"<STR6R0nTR
6R0nTrR
2CSUHRRRTR
2CSTRD6R`uTR
WRRRRZ6R`uTrR=
DSURRRTRT
DSTR7RpsTR
_RRRR7RpsTrR
";SU}RRRTR
URRRR&7RcTrR
R5SURRRTR=
R5STR8R iTR\SRRRR8R iTrR
;SURRRTR
8R@iTRaRRRRR,8R@iTrR
:SURRRTRB
:STR9R
iTR]RRRRR9R
=SURRRTR
9RpSR\RRRRR,9RpSrR
7SURRRTR3
7STRx9R
SReRRRRR:R
SURRRTR
STR:R`eTRuSRRRR
:R`eTrR
b8SURRRTR
b8STRd:RcTR
TRRRR;RcTrRi
SURRRTR
SR_RRRRR;R
SURRRR5
TURRRR4RrVURRRR
UURRRRRr
MSU7RRRR-
ZUURRRUR
UURRRUR
UURRRUR(
2UURRRUR@
UURRRURW
JUURRRURn
UURRRUR
UURRRUR
zUURRRUR
UURRRUR
UURRRUR
nUURRRUR0
UURRRUR]
zUURRRUR
>UURRRUR
RUURRRUR
UURRRUR
~UURRRURP
2STRRRRRe
BSTR>RRrR
STR>RRrR
STR>R RrR
STR)>RRrR
STRr>RRrRk
STR/?RPRrR,
BSTR@RRrR
STR@RRrR
STR4@R0RrRJ
rSTRAR0RrR
STRrARRrR
STR_BRRrR
STRJCRRrR
STR^DR@RrRX
STRERpRr
SU%RRRR5
TURRRR4RrVURRRR-P)$
UURRRUR
UURRRUR
STRRRRR
ER RrR
STRGER`RrR3
bSTRzERRr
SU@RRRR5
TURRRR4RrVURRRR-/P)
rSTRFR
STRFR0RrR
rSUbRRRR5
TURRRR4RrVURRRRRrNSURRRR-;P)
bSURRRRRI
STRGRPRr
bSURRRR5
TURRRR4RrVURRRR-MP)-$RRe
rVURGRRRR
VURGRRrRRRRRRGR@RRR
STRGR`Rr
SU"RRRR5
TURRRR4RrVU
RRRRRrNSURRRR-`P)04RR
VURBGR
"TURbGR`RrRRRRRRzGRRrRc
STRHRTRRR
RPRR^RRRR#
RRrRRRRRR4|URoRRRR'RR~R
)RRRHRRrR
SU8RRRR52TURRRR4R
VURRRRRr&NSURRRR-
UURRRUR#
"UURRRURW
nUURRRUR
SURRRTR
STRRRRR
SURRRTR(
STRJRURxURRRRJRUrR
SUVRRRTR
STRwJRUR`RRRRRKRUrR
SURRRTR%
STRLRUR
LRUrR0
SURRRTRl
STRMRURjRRRRR
SURRRTRS
STRNRUR`RRRRRNRUrR
SURRRTR:
STRORUR
RRRRRORUrR!
SURRRTR !
STRPR UR`RRRRRPR UrR"
SURRRTR
STR_PRUR
TRRRRQRUrR#
SURRRTR#
STRAQRSR]RRRRR|QRSrR$
SURRRTR$
STR'RRUR
TRRRRaRRUrRh%"
SURRRTR%"
URZRRRRR?SR
$SURRRRTR&
SRRRRQTRUrR\'
SURRRTR'
STRURUReRRRRR9URUrR@'"SURRRTRz("STRVRSR]RRRRR
VRSrR (
SURRRTR^)
STRWR`SR]RRRRR
WR`SrR
RRRTRE)
STRXR@UR\RRRRRXR@UrR*
SURRRTR.*
STRYR`UReRRRRRYR`UrR+
SURRRTR
STRoYRpUR|RRRRRZRpUrR,
SURRRTR,
STRWZRpSR]RRRRR[RpSrR-
SURRRTR-
STR7[RPURYRRRRRp[RPUrRv.2
SURRRTR.2
STRK\R@URpRRRRR]R@UrR/r
SURRRTR
STRu]RURWRRRRR^RUrR0rSURRRTR
R`RRRRRRR%
R`RRRRRRR#
RRRRRRRRRd|URXRRRR'RlR~R
RRRk^RXRR~\RRRR_RHRR^URRRR_R
RRbRRRRR_R
RRrVRRRR_RRRsRRRRR
_RRRZTRRRR1_RRRZTRRRRM_RRRcRRRRRi_RRRdRRRRR`RRR~\RRRR`R`RrRRRRRR`RRrR2r
STRB`RRrR82
STRaRRrR3
aRRrR3R
STR@aR@RrR,3
STRraRRrR\4rSURRRTR4rSTRbRp,URuURRRR
bRp,UrR
R`RRwRRR%
R`RRRRRRR#
RRVRRRR$
4RvURVSRRRRRl|UR|RRRR'RR~R
RRRR[bRPRRbURRRRrbRRrRRRRRRcR
STRcRRrR5r
STRocRRrRo6B
RRRsRRR%
R`RRSRRRR#
RRjRRRR3"RPRR\RRRRRR}UR
RRRR'R
RRdRRR^URRRRdR
RRhRRRRR
dRRR^URRRR dRRRfRRRRR?dR
RR^URRRR\dRRRdRRRRRydRRRfVRRRReRDRR^URRRReRRReRRRRReRRRfVRRRReRRR^URRRR
eRRRbRRRRR(eRhRRfVRRRRCeRRR^URRRR_eR
RRcRRRRR{eRRR^URRRRfRRRbRRRRRfRRRfVRRRRfRRR^URRRRfRRRcRRRRR
fRRRfVRRRR!fRRR^URRRRAfRRRgRRRRRafRRRfVRRRRgRRR^URRRRgRRRcRRRRRgRRRfVRRRRgRRR^URRRRgRpRR_RRRRR
RrRRRRRR#gR
STRVgR
RrRC9ySURRRTRa:ySTRhR
URvURRRRhR
UrR:ySURRRTR:ySTR
hRPTRvURRRR<hRPTrR':xSURRRTRD:xSTRiR URvURRRRiR UrR;
SURRRTR;
STRBiR`
RrR<RSTR
RrR<STR?jR
URkTRRRR`jR
UrRN<"
SURRRTRn="
STRkR TRkTRRRRkR TrR=RzSURRRTR=RzSTR#kR0TRkTRRRRAkR0TrR,=SURRRTRN=STRlRTRkTRRRRlRTr
RDRRR5BTURRRR4R
VURRRRRrOSURRRR-P0&RRR>UURRRUR>STR
RrR>STR:lR
RrR3>RSTRmR
RrR?STRmR
RrR?STR
RrR?STR.mR
?STRcmR"RrRR@"STRnR`$RrR@STR
nR(RrR
@rSTR[nR
RrR?@2STRoR
RrRlASTRoR,Rr
2SURURRR5BTURRRR4R
VURRRR
"2UU3RRRRRr&OSURRRR-*P0&*$RRAUURRRURAfUURRRURAUURRRUR
AJUURRRUR,AUURRRURUB>UURRRUR~BZUURRRURBUURRRURB^UURRRURBUURRRUR
B~UURRRURAB
UURRRUReC"
STRqR8RrRC
STRqR:RrRC
qRDRrRC2
SURTqR/RrR>Cr
R/RR&uRRR%
RRRRRRRR#
RRZRRRR$
4RvURVSRRR3"R RRfRRRRRp~UR
RRRR'RvR~R
**$RRrRHRrRRRRRRrRHRrRD
rR`HRrR
STRrrR@IRrRwE
STRsRJRrRE
sR0JRrRE2
STRRsRKRrRVFB
STRtRLRrRFb
STRtRLRrRF
STR:tRIRrR/F
RHRRQiRRR%
RRRRRRRR#
RRRRRRR3"RRRFRRR'RR~R
MRrRRRRR5
RMRR[SRRR%
RRRRRRRR#
RRRRRRR'RR~R
RRRR5RTURRRR4R
VURRRRRrQSURRRR-gP&1RR%
STRRRR
SURRRR5RTURRRR4R
VURRRR-P0&
4$RROFUURRRUR|GUURRRURGUURRRURGUURRRURG
TURRRUR
G"TURRRUR0G2TURRRURzH:TURRRURH
TURRRURH
TURRRUR/H
TURRRURxI*TURRRURIJTURRRURIBTURRRUR,ITURRRURQITURRRURvJnTURRRURJzTURRRURJTURRRURJTURRRUR=JjTURRRUR]KvTURRRURKrTURRRURK~TURRRUR
KTURRRURPKTURRRURLfTURRRURLbTURRRURLRUURRRURL~UURRRUR
LUURRRUR<LUURRRURSM
UURRRURjM
UURRRURM
UURRRURMRUURRRURM~UURRRURMUURRRURMjUURRRUR
M&UURRRUR
MUURRRUR7M
UURRRURUNRUURRRURsNVUURRRURN
UURRRURN2UURRRURN>UURRRURN
UURRRUR
UURRRUR(NUURRRURIN
UURRRURjO&UURRRURO2UURRRURO^UURRRUROUURRRURO
UURRRUROUURRRUR
UURRRUR;OUURRRURcPUURRRURP
UURRRURPUURRRURP
UURRRUR
P*UURRRURJP
UURRRURQUURRRURQBUURRRURQ
UURRRURfR
UURRRURR
UURRRURR6UURRRURR
UURRRUR
RUURRRURXS2UURRRURS
UURRRURS
UURRRUR'S>UURRRURlTJUURRRURT
UURRRURTUURRRUR=T
UURRRURUbUURRRURUNUURRRURU>UURRRURmVUURRRURVUURRRURV
UURRRUR?V
UURRRURWW"UURRRURoW"UURRRURWBUURRRUR
UURRRURYX
UURRRUR{X*UURRRURXUURRRURX
UURRRURXUURRRUR
X*UURRRUR(XJUURRRURIX
UURRRURjYBUURRRURYjUURRRURYUURRRURY~UURRRUR"SURRRRR
YkSU=RRRTR&YkSTRrRTR
[RRRRRTrRZ
iSU=RRRTRZ
iSTR0R
[RRRRqR
[jSU=RRRTR[jSTRRTR
[RRRR RTrR
[2SURRRTRF[2STRR
SRhRRRRR
SURRRTR\
STRNRSRwRRRRR}RSrRy]SURRRTR]STR
RSRwRRRRR5RSrR3]"SURRRTRb^"STRR`SReRRRRRR`SrR^
SURRRTR
STRhR@TR
[RRRRR@TrR{_mSU=RRRTR_mSTRRTR
[RRRR+RTrR9_RlSU=RRRTRz`RlSTRRTR
lSU=RRRTR)`
lSTRzRSRhRRRRRRSrRaSURRRTRaSTR4RPSRwRRRRR_RPSrRWbrSURRRTRbrSTR
RSRwRRRRR
bSURRRTR>bSTRRpSR`RRRRR
RpSrRcRSURRRTRcRSTRHR`SReRRRRRvR`SrRqd
SURRRTRd
STRR UR
RRRTR>dSTRR@!UR
YRRRRR@!UrReSU
RRRTReSTR4R*UR
SRRRR_R*UrRWfBSURRRTRfBSTR
R,UrRfSU
RRRTR$fSTRxRp*UR
[RRRRRp*UrRgSURRRTRgSTR
bRRRRKR
UrREgBSURRRTRohBSTR
URkTRRRRRP
UrRhSURRRTR
hSTR`R
bRRRRR
UrRibSURRRTRibSTR
URkTRRRR4R
UrR+i2SURRRTRUj2STRR0
URuURRRR
SURRRTR
STRR@LURlSRRRR
R@LUrRkRSURRRTRTlRSTRR TR
RRRRR`R TrRmSURRRTRmSTRZRMURkTRRRRRMUrRnRSURRRTR
nRSTRtR
MURlSRRRRR
MUrRoSURRRTR
oSTRRTR
RRRRRRTrR
SURRRTRuq
STRRNURkTRRRRGRNUrR]r2SURRRTRr2STR
R0MURuURRRRaR0MUrRws
SU4RRRTRs
[RRRRR>UrRsB
SU3RRRTR
STRnR0<UR
[RRRRR0<UrRt
SU5RRRTRt
[RRRR&R=UrR
>SURRRTR;t
>STRRPlSRhRRRRRRPlSrRub?SURRRTRub?STR RmSRwRRRRRDRmSrR5u?SURRRTRZv?STRR
SURRRTRvr
STR2RP
XRRRRWRP
UrRIvSURRRTRnwSTRR`
ZRRRRR`
SURRRTRw
bRRRRqR
UrRexB
SURRRTRxB
URkTRRRRRP
SURRRTR
6URlSRRRRR
SURRRTRy
STRnRFSR
SURRRTR{R
RRRRRR HSrR|
SURRRTR3|
RRRRR8RHSrRs~B
SURRRTR~B
STRxRISR
RRRRRRISrR!
SURRRTR
STR&R@FSR
RRRRRR@FSrR
SURRRTR=b
RRRRRCRFSrR
SURRRTR
STR6R`6URkTRRRR}R`6UrR
SURRRTR
STRHR7URlSRRRRR7UrRr
SURRRTR
STRZRdSR
RRRRRRdSrR
7SURRRTR57STRReSR
ReSrR9
7SURRRTR
RRRRRpRfSrR6SURRRTR6STRtRPdSR
RPdSrRb6SURRRTRQb6STR
TRRRR:RpZSrRkR&SU-RRRTR
R&STRjRfSR
SURRRTR@
7URkTRRRRR
SURRRTRR
\RRRRR TrR
rSU?RRRTR
rSTR8RpTR
\RRRRqRpTrRwpSU>RRRTRpSTR
R0TR?^RRRR7R0TrR)qSUmRRRTRNqSTRRSRkRRRRR
SURRRTR
SRkRRRRRR
SrRRSURRRTR
RSTR(RSRkRRRRRSRSrRKSURRRTRuSTRSSR
RRRRRSSrR
SURRRTR/
STRS0SR
RRRRRS0SrR
wSU}RRRTR
wSTR,STRO^RRRRLSTrR9uSURRRTRYuSTRS
SRRRRS
UrRSURRRTR
STR0S`
URkTRRRRVS`
SURRRTRo
STRSBURlSRRRR
SURRRTRc2
RRRRR5S
SURRRTR
SBURkTRRRRdSBUrRyr
SURRRTRr
STR2S`
URlSRRRRS`
SURRRTR
URkTRRRRS
SURRRTR1
URuURRRRS
SURRRTR_
STRSAURlSRRRR
SAUrR-?SURRRTR?STRS0SR
RRRRRrS0SrRiSURRRTR+iSTRS0sSR
RRRRRDS0sSrRbFSURRRTR
bFSTRSSR
RRRRR"SSrRe
SURRRTR
S AURkTRRRRfS AUrR{
SURRRTR
URlSRRRRS
SURRRTRb
STRvS
URkTRRRRS
SURRRTR3
URuURRRRS
SU-RRRTR52
8UR[RRRRS
SU-RRRTR
STRSP7UR[RRRR
SP7UrR<SURRRTR'<STR~S
jSR`RRRRRS
jSrR<SURRRTR
<STR S jSR`RRRRRAS jSrR/R
SU0RRRTRKR
STRS;UR
\RRRRS;UrR
SU=RRRTR
STRSjSR\RRRRR(SjSrR'b<SURRRTRYb<STRS
URQ_RRRRS
STRFS`
URkTRRRRjS`
SURRRTR
URuURRRRS
bySURRRTR
bySTRLSpTRkTRRRRmSpTrR[
xSURRRTR|
xSTRSURQ_RRRRSUrR
bSTR\SURkTRRRRSUrRs
SURRRTR
STRSURuURRRR
SU-RRRTR
STR\S2UR[RRRRwS2UrR_B
SU0RRRTR|B
[RRRRS
"SURRRTR"STRLSSR
RRRRRuSSrRk
SURRRTR
STRS@5UR
\RRRRS@5UrR
SU0RRRTRb
STR>S4UR
]RRRRYS4UrRAB
SURRRTRgB
cRRRRS
SU3RRRTR2
STR>SUR
\RRRRaSUrRQ
SU>RRRTRt
URRRRS
`UrR*2SURRRTR**2STRSaUR
URRRRSaUrR
j3SURRRTRpj3STRSXbUR
URRRRYSXbUrR4SURRRTR
4STRrSbUR
URRRRSbUrRj4SURRRTR_j4STRS
)SU?RRRTRK)STRSXUR
[RRRRSXUrR
j+SU?RRRTR
j+STR\S\UR
[RRRRS\UrR,SU?RRRTR
,STRlSXYUR
[RRRRSXYUrRj(SU?RRRTR)j(STRS_UR
[RRRRS_UrR
0SU?RRRTRq0STRSXVUR
[RRRR-SXVUrR//SU?RRRTR/STR
[RRRRoSX\UrR-SU?RRRTR
-STR$SNUR}RRRRR`SNUrRi!SURRRTR!STR
qRRRR@S@
UrRC2SURRRTR
URasRRRR S
UrR)FSU
RRRTRFSTRNS6SRDRRRRS6SrR
"1SURRRTR
SRESRRRRS
bRRrR4RRTR/S ,URuURRRRYS ,UrRP
"SURRRTRz
"STRS`SRsRRRRRS`SrR
SURRRTR
STRkSPSR
gRRRRSPSrR
<SURRRTR
S0jSRYRRRRR<S0jSrR:
MSU^RRRTR
MSTReSPSR
jRRRRSPSrR@
BSURRRTR
BSTR]SSR
YRRRRSSrR(
BHSURRRTR
BHSTRKS0mSR
VRRRRS0mSrR
bASURRRTR
bASTR)StSRYRRRRR
2SURRRTR
2STR;S SRWXRRRRS SrR
SURRRTR
bRRRRS
+SURRRTR\
+STRSPWSR
XRRRR]SPWSrR
(SURRRTR
S0TSrR<
SURRRTR
SRRRRL
S0fSrRx
:SURRRTR
;SURRRTR?
SRRRR"
;SURRRTR
r9SURRRTR
S'SRjnRRRR
S'SrRh
"SURRRTR
SUKRRRTR
SR8lRRRR
rSUeRRRTR
SSR9cRRRR
RRRTRH
_RRRRT
OSrR SURRRTR
SPPSrRL
%SURRRTR
$SURRRTRw
SRSrRb%SURRRTR1b%STR
SRRRR<
SRSrRz
SUqRRRTR
SXaUrRb>SU
RRRTRb>STR5
YRRRR]
SkSrRR"<SU
RRRTRz"<STR
SmSRaRRRRR
SmSrRB>SURRRTRB>STRu
SPPUrR
SU|RRRTR
TRNRRRR
SpTrRqSU
RRRTRTqSTR
RRRRSSrRSU
RRRTRESTR SpTR
_RRRRW SpTrRj2SURRRTRj2STR7!SX_UR
URRRRr!SX_UrRzrSURRRTRrSTR
"SSR`RRRRR6"SSrR4SURRRTRfSTR#S
YRRRR#S
SrRrSU
RRRTR*rSTR$S@SR
YRRRR$S@SrRSU
RRRTRSTR?$S@SRaRRRRRs$S@SrRt
SURRRTR
%SSR`RRRRR6%SSrR4bSURRRTRebSTR&SSR`RRRRR&SSrRSU
RRRTR$STR'SSR
YRRRR'SSrRSU
RRRTRSTRC'SSR
YRRRRr'SSrRnSURRRTRSTR(SSRaRRRRR3(SSrR4
SURRRTR^
STR)S@SR[RRRRR)S@SrRSURRRTRSTR=)S
SR[RRRRR^)S
"SURRRR5RTURRRR4R
VURRRR0
bHSURRRRRrQSU
RRRR-BP5
UURRRURcr!STRRRRR!STR*SORrRR"STR
*S0PRrR#STRB*SpRRrR("%STRj*S0TRrRP'SUR)SRrRRRTR
)SRrR0RRTR+S0RRrR$STR+SRRrRb$ST5
RRRRRRRR#
RRVRRRR$
4RvURVSRRR3"R0RRlRRRRRRURdRRRR'R{R~R
"$RR'+S0URrRRRRRRA+SVRr
'SU%RRRR5RTURRRR4R
VURRRR-XP5
RR5(STRRRRR](ST5
RVRRpRRRR%
RRRRRRRR#
RRRRRRR'RR~R
(SURRRR5RTURRRR4R
VURRRRRrUSURRRR-oP6$RRR
)STRRRR
)SURRRR5RTURRRR4R
VURRRR
""UURRRR-P}$RRUUR,S@WRrRRRRRR
+STR-SZRrR,STR-S
)SUGRRRR5RTURRRR4R
VURRRR
RRRR-P&"&$RR
UURRRUR,STRRRRR
,STRS-SPZRrR:B,ST5
RRRRRRRR#
RRVRRRR3"R
RRSRRRR'RR~R
&1$RRR}-SPRRfVRRRR.SRRfVRRRR.S[RrRRRRRR.S[RrR
.S\RrR
/STR=.S^RrR,
B0STRw.S _RrRh
"1STR/S`RrR
2STR/S`RrR
2STR'/S@`RrR
3STRW/S@bRrRA
5STR0SdRrRw
r7STR0SeRrR
7STR0S0eRrR
27STR50SfRrR'
8STRq0SfRrRa:RRTRlRRrR:RRTR|kRRrR:RRTRAkRRrR
kRRrRD:RRTRkRRrR|;RRTRkRRrR;RRTR`jRRr
RRR5RTURRRR4R"
VURRRRRrUSURRRR-
P0"3$RR_
UURRRUR
8STRRRRR
8STR1S0gRrR
:STR"1S0iRrR
R fRRRRR%
RRRRRRRR#
RRRRRRRRR`UR
RRRR'R
RkRRRRRRR%
RRRRRRRR#
RRRR'R(R~RR
RRRR`1SkRrRRRRRR2SkRrR
2S mRrR
@STR=2SoRrR-
BASTRy2S0pRrRi
RkRR3RRR%
RRRRRRRR#
RRRRRRR3"R RRSRRRRRRURvRRRR'R9R~R
R3SrRrRRRRRR3SsRrR
bFSTR%3SPtRr
DSURRRR5RTURRRR4R
VURRRR
UURRRRRrVSURRRR-
GSTRRRR
RRRR5RTURRRR4R
VURRRR
RRRR-"P05&3$RC
HSTRRRRRi
RRRRRRRR#
RRRRRRR'RZR~RR
RRRR4S
vRrRRRRR5
vRRuSRRR%
RRRRRRRR#
RRRRRRR'RgR~R&
.4RR4S@vRrRRRRRR!4SwRr
HSU8RRRR5TURRRR4R
VURRRR
"UUpRRRR-JPR
5SRRR&
RRRTRT
#STRRRRR}
R$SU,RRRTR
zRRRRRRR%
RRRRRRRR#
RRRRRRR3"RRRTRRRR'RR~R
zRRRRRRR%
RRRVRRRR#
RRRRRRR'RR~R
zRRRRRRR%
RRRRRRRR#
RRVRRRR'RR~R
zRRRRRRR%
RRRVRRRR#
RRRRRRR'RR~R
/RRR.R
LSURRRR5
TURRRR4R
VURRRR-uP4
MSTRRRR
MSURRRR5
TURRRR4R
VURRRR-P
5"MSTRRRRR
RP{RRYRRRR%
RRRRRRR#
RRRRRRR'RR~R
R`{RRRRRRR%
RRRRRRR#
RRVRRRR'RR~R
6RRR;5S`{RrRRRRRRP5S|Rr
2MSURRRR5
TURRRR4R
VURRRR
"UURRRR-P$
NSTRRRRR^
NSURRRR5
TURRRR4R
VURRRR-2PR6SRR
OSURRRR5
TURRRR4R
VURRRRR
UUR6S}RrRRRRRR6S}RrR
VUR(6S
R}RR7~RRR%
RRbRRRR#
RRrRRRR3"R
RRRRRO6SRrRRRRRR\6S RrR@
SSTR7SRrRp
"TSTR7SpRrR
RUSTR7SRrR
USTR7S
USTR#7SRrR
USTRZ7S
USUR8SRrR
WSUR8S0RrR
bZSTR8SRrR
\STR48SPRr
RSURRRR5TURRRR4R
VURRRR
#]SX0R=RR
]SURRRR5TURRRR4R
VURRRRR
R`STRb8SPRrRP
_STR9SRrR
r_STR9S`RrR
R RRRRRRR#
RRRRRRRR29S
RrRRRRR5
RR%RRRR%
R RRRRRRR#
RRRRRRRR=9SRrRRRRR5
RRRuRRRR%
R RRRRRRR#
RRRRRRRRH9SRrRRRRR5
R RRRRRRR#
RRRRRRR5
R@RRRRRRR%
R RRRRRRR#
RRRRRRRRR9S@RrRRRRR5
R RRRRRRR#
RRRRRRR5
RRR5TU#
RR"WU*"vRR"NWU*"vRR
R RR4R
VU*"vRR"WU*"vxRR"WU5
RRR5TU#
WU*"vRR"VWU*"vRR
R RR4R
VU*"vRR"WU*"v
RR"WU'RpR~R
&RRRR/
CCCCCCCCCCCCCC
AAAAAAAAAAAAAAAAAAAAA
AAAAAAAAA
AAAAAAAAAAAA
AAAAAA
CCCCCC
CCCCCC
?@FHIMZEMLLPQRQUXasyMYSY\Y]^o`gST[[\]^dreiclimilelrq}blinaququ~x_dcinoilhourvyz|ty~rvq}_^YZ]abeadkcvrvynaefiniilq}szpt}suvruy}yy{~
>BCSEINZTZQNSPUS\acbf]Y_WX[]Y\]YY^Wcjnehnbdqszv{bks}{|TZ]XYfbgjnkaov{sr{KMW[QUX^[`eafjnmut{bbeimzrq{y}pvvtrvy|y~
]CKEINDTEGLJ[NNRVV]RV\dahn`tNZ]Q^_agceidkox
r~yV[`finmppvr}mpusz}y}

Process Tree

002df9dd21ba5802e95a26708ea3c2df0ea6cc354c31b438efc92454ed0e19e4.exe, PID: 1064, Parent PID: 2284

default registry file network process services synchronisation iexplore office pdf

daiqt.exe, PID: 628, Parent PID: 1064

default registry file network process services synchronisation iexplore office pdf

DNS

Name Response Post-Analysis Lookup
dns.msftncsi.com A 131.107.255.255 131.107.255.255
dns.msftncsi.com AAAA fd3e:4f5a:5b81::1 131.107.255.255

TCP

No TCP connections recorded.

UDP

Source Source Port Destination Destination Port
192.168.56.101 53179 224.0.0.252 5355
192.168.56.101 49642 224.0.0.252 5355
192.168.56.101 137 192.168.56.255 137
192.168.56.101 61714 114.114.114.114 53
192.168.56.101 56933 114.114.114.114 53
192.168.56.101 138 192.168.56.255 138

HTTP & HTTPS Requests

No HTTP requests performed.

ICMP traffic

No ICMP traffic performed.

IRC traffic

No IRC requests performed.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

Snort Alerts

No Snort Alerts

Name 8a28de18efcc1287_mira.h
Filepath C:\ProgramData\Saaaalamm\Mira.h
Size 270.0KB
Processes 1064 (002df9dd21ba5802e95a26708ea3c2df0ea6cc354c31b438efc92454ed0e19e4.exe) 628 (daiqt.exe)
Type PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
MD5 a17c5d4d029b25865e8d97986fd5aaa3
SHA1 65f8f61c554dc549c9612685f69abbb8ca49bdca
SHA256 8a28de18efcc12879c149c0690a1650c909d3f97b1ae0496df89fe9db1b7854c
CRC32 60D8968E
ssdeep None
Yara None matched
VirusTotal Search for analysis
Name f012902ecb28453b_programdata .exe
Filepath C:\ProgramData .exe
Size 592.0KB
Processes 628 (daiqt.exe)
Type PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
MD5 34f145b5a39772687ab3bdc6c01f6dfc
SHA1 50cd052d11eca5e2758d81986ea0b503305c787b
SHA256 f012902ecb28453b7c770cf686e5d811b9102d0da3a2e73ad6368756529f8917
CRC32 8210B149
ssdeep None
Yara None matched
VirusTotal Search for analysis
Name 3564d8533fca9025_perflogs .exe
Filepath C:\PerfLogs .exe
Size 592.0KB
Processes 628 (daiqt.exe)
Type PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
MD5 3b2123c144939892188fee167ed07d34
SHA1 4a75af218273dcbba10dcc787fedcde2163e8a14
SHA256 3564d8533fca9025a9d4b89ec24a5b5502231c40b0acd4c782d0a1cf3d9013de
CRC32 6B950937
ssdeep None
Yara None matched
VirusTotal Search for analysis
Name 649883ae89f03b04_windows .exe
Filepath C:\Windows .exe
Size 592.0KB
Processes 628 (daiqt.exe)
Type PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
MD5 38ab6b45d000f918276afdba566e45b6
SHA1 99c78a87e6bd58c91f83d324d399e8ca8f0d1953
SHA256 649883ae89f03b04bde860da66a14a44ef6e6ebc171c35a19b31fe99b802abb2
CRC32 898983BC
ssdeep None
Yara None matched
VirusTotal Search for analysis
Name b8f775102a1aca2e_daiqt.exe
Filepath C:\ProgramData\daiqt.exe
Size 322.0KB
Processes 1064 (002df9dd21ba5802e95a26708ea3c2df0ea6cc354c31b438efc92454ed0e19e4.exe)
Type PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
MD5 90eeb737cea954747d166a5492e6a452
SHA1 d9607c675759d2371413b9d7f582a08ada415efe
SHA256 b8f775102a1aca2e648f5179610cb6d1ac6d5fcaf648bb70482f2a4a1cce9938
CRC32 45C7B395
ssdeep None
Yara None matched
VirusTotal Search for analysis
Name ba93e6e6b8eaa1d0_install.exe .exe
Filepath C:\install.exe .exe
Size 592.0KB
Processes 628 (daiqt.exe)
Type PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
MD5 70dfeb4d25a7683be010539c12e318d2
SHA1 8b489aafbe45fdf16b6e475d427eb901a217f1c8
SHA256 ba93e6e6b8eaa1d08787b0f30af437c8a0677c37e78c1ddb6a49d0c41eba41ab
CRC32 C4715C75
ssdeep None
Yara None matched
VirusTotal Search for analysis
Name 969fc5d8811131d8_globdata.ini .exe
Filepath C:\globdata.ini .exe
Size 592.0KB
Processes 628 (daiqt.exe)
Type PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
MD5 8a23bb7a6531c369a423d1075bdaf501
SHA1 c82017b765b1191f7fabc26a2341c533141e0a24
SHA256 969fc5d8811131d81240a5021e8365a5adf96a6cb3a195b0b1eebe71f417e2f3
CRC32 17284ACA
ssdeep None
Yara None matched
VirusTotal Search for analysis
Name acdae997e4fece96_vcredist.bmp .exe
Filepath C:\vcredist.bmp .exe
Size 592.0KB
Processes 628 (daiqt.exe)
Type PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
MD5 a17581c6c2837b428970741a40bc875e
SHA1 6c572c8599b1cc9f3a385e3becfcc7353891344e
SHA256 acdae997e4fece96933cc7cc1433f2b87021045992100a81cb7b1c834591345e
CRC32 860425E8
ssdeep None
Yara None matched
VirusTotal Search for analysis
Name 0b75dfcbebe62778_vc_red.cab .exe
Filepath C:\VC_RED.cab .exe
Size 592.0KB
Processes 628 (daiqt.exe)
Type PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
MD5 41ae02efe873ecfcd8fb36f0a91f6545
SHA1 37ab4d72311fed0867dbe0bf55c86b8f84e6be98
SHA256 0b75dfcbebe62778ae004be04897a005be61cf116ffddecbeb1123b9b38c0c7a
CRC32 59BF636A
ssdeep None
Yara None matched
VirusTotal Search for analysis
Name 250decb2602fe7b5_system volume information .exe
Filepath C:\System Volume Information .exe
Size 592.0KB
Processes 628 (daiqt.exe)
Type PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
MD5 f53275cf37f6400eda505453ef149271
SHA1 29a0b12a674878b377cc69521d01977f1fd31559
SHA256 250decb2602fe7b570454b1b084dcfeb36c291f9eb91c82f614bdbf8c10c1525
CRC32 F8F33EC5
ssdeep None
Yara None matched
VirusTotal Search for analysis
Name 1068a8465e3d16c4_eula.2052.txt .exe
Filepath C:\eula.2052.txt .exe
Size 592.0KB
Processes 628 (daiqt.exe)
Type PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
MD5 58660d12c86584ed5ee9d51a3473d8fb
SHA1 1a40ea7f5847fbaa4ccd37ad8c015c61cd197ee6
SHA256 1068a8465e3d16c46695b815101d3b8d22fa4034123c6e9b57693b98baed8f91
CRC32 06CBB1FA
ssdeep None
Yara None matched
VirusTotal Search for analysis
Name a9b58c344dc93143_python27 .exe
Filepath C:\Python27 .exe
Size 592.0KB
Processes 628 (daiqt.exe)
Type PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
MD5 27a69702a7ff1a0359b8dd648ff5789a
SHA1 7213dc2739dafbdee82b65616f8476f8fb9d087e
SHA256 a9b58c344dc93143be70443fa2b11c3603e53c021d6bf39b459d819ba5dcf3dc
CRC32 2CFB4959
ssdeep None
Yara None matched
VirusTotal Search for analysis
Name 818663c432d79b54_$recycle.bin .exe
Filepath C:\$Recycle.Bin .exe
Size 592.0KB
Processes 628 (daiqt.exe) 1064 (002df9dd21ba5802e95a26708ea3c2df0ea6cc354c31b438efc92454ed0e19e4.exe)
Type PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
MD5 0d7bc263dfbc2bb03b487aefdbb0ea1d
SHA1 7dd851c304400f3f3c8c5d002e9ddac9ef33a1ef
SHA256 818663c432d79b54fe35ea9976910b60254ee61322919b8d636b544a3dc01278
CRC32 F3EE4C09
ssdeep None
Yara None matched
VirusTotal Search for analysis
Name 9db9f31acd66a46c_program files .exe
Filepath C:\Program Files .exe
Size 592.0KB
Processes 628 (daiqt.exe)
Type PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
MD5 1146e40c290ea6f09752cf87a73f2e4a
SHA1 0f8063a0959ec9b86a86e373330d238b8a9a19e3
SHA256 9db9f31acd66a46c330e8e4c7104aeea1525254f09a2a670a0aa656d5f984143
CRC32 6EED2CC2
ssdeep None
Yara None matched
VirusTotal Search for analysis
Name d07a9ee0dee8b736_documents and settings .exe
Filepath C:\Documents and Settings .exe
Size 592.0KB
Processes 628 (daiqt.exe)
Type PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
MD5 ff5dfc24c44abd9bb9dc893458a4759f
SHA1 0911a41af29250af7feb9f60fc01c49d1ba21668
SHA256 d07a9ee0dee8b7367418558c21841d60bf9771ed54803800cf303f8552833504
CRC32 57E38B7F
ssdeep None
Yara None matched
VirusTotal Search for analysis
Name 3243897de92c0c9f_program files (x86) .exe
Filepath C:\Program Files (x86) .exe
Size 592.0KB
Processes 628 (daiqt.exe)
Type PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
MD5 8426ab8ba58367c73f74937c512d16b5
SHA1 5782a92f70020f81bbbac2ebb6c7ce9e397fd028
SHA256 3243897de92c0c9f7527558cd7513792f84a8a4889315f1831c8842313aa6823
CRC32 5F9289C9
ssdeep None
Yara None matched
VirusTotal Search for analysis
Name 97ee034e7442efc0_users .exe
Filepath C:\Users .exe
Size 592.0KB
Processes 628 (daiqt.exe)
Type PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
MD5 ca7466fc31be2f84b2f41765e1ad87f4
SHA1 b478efff9b9d9e224b0d30ea0cc9d62d52459a96
SHA256 97ee034e7442efc039fbbcce5e09a4a432d2075c12e876bbcfe4198aa9ab6fd7
CRC32 2F16495A
ssdeep None
Yara None matched
VirusTotal Search for analysis
Name e3b0c44298fc1c14_Mirax
Size 0.0B
Type empty
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
CRC32 00000000
ssdeep None
Yara None matched
VirusTotal Search for analysis
Name 0ad542aeb48996c4_install.res.2052.dll .exe
Filepath C:\install.res.2052.dll .exe
Size 592.0KB
Processes 628 (daiqt.exe)
Type PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
MD5 39da81dfb5f39dd5a0ffe237a6cf50b7
SHA1 eac487858167ad7c2c87bd25d3b7d3151f06ee24
SHA256 0ad542aeb48996c460123496cd964336a73173a1dbe3e5cdec0d9dbc75d13169
CRC32 A08CBF9A
ssdeep None
Yara None matched
VirusTotal Search for analysis
Name 22e046c0eff62076_recovery .exe
Filepath C:\Recovery .exe
Size 592.0KB
Processes 628 (daiqt.exe)
Type PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
MD5 6a9753e63c7407d0fd8a075643966da0
SHA1 31ca4df80253ae568fa6b83667c9b5b8fe83d1ae
SHA256 22e046c0eff62076cd77f9d4ea754ab071884f574fc8229c068a8517ba213a0f
CRC32 DF048513
ssdeep None
Yara None matched
VirusTotal Search for analysis
Name b7dc6e73e7f4e81d_gcoxh .exe
Filepath C:\gcoxh .exe
Size 592.0KB
Processes 628 (daiqt.exe)
Type PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
MD5 725cbbd97b5b20785fa0845e8a1ff7c0
SHA1 b5c49c0fc22f4c8c0c2dd32f0f480ba70e2b5c00
SHA256 b7dc6e73e7f4e81d86019dd1d5dab539927c27f7a3ae679dc6700809e4d1ab6f
CRC32 169E4304
ssdeep None
Yara None matched
VirusTotal Search for analysis
Name d338852925602d4f_install.ini .exe
Filepath C:\install.ini .exe
Size 592.0KB
Processes 628 (daiqt.exe)
Type PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
MD5 5b0a63861a3c897b2046063c90ed238f
SHA1 1432fc5739bca6409c144228246d015b2bf0ebc8
SHA256 d338852925602d4ff35a942f5e2c47e3cfd727093f6831961d71d2713544dcfd
CRC32 29D9EF57
ssdeep None
Yara None matched
VirusTotal Search for analysis
Name f88484b0501890be_dmtisnufg .exe
Filepath C:\dmtisnufg .exe
Size 592.0KB
Processes 628 (daiqt.exe)
Type PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
MD5 1a12a5e39eda28d62fc2e41cb1853d17
SHA1 c3ddbd62a0fdc8df068631c6c91783767f48bc86
SHA256 f88484b0501890be101d1bc86e73725038760d5145d6e6c506884abf6e7f6544
CRC32 ED79EA1C
ssdeep None
Yara None matched
VirusTotal Search for analysis
Name 8cf590c2331904fa_vc_red.msi .exe
Filepath C:\VC_RED.MSI .exe
Size 592.0KB
Processes 628 (daiqt.exe)
Type PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
MD5 8c735ad364324de0e5273a850ec8b2c3
SHA1 b848f95277b84d5725ac83fe14aaddf5f7c2ad9a
SHA256 8cf590c2331904fa02ef75208705cc0a62e14aed32d6d4e7936427b33b0573a5
CRC32 243EB4CE
ssdeep None
Yara None matched
VirusTotal Search for analysis
Name ac984e7cb9825176_pagefile.sys .exe
Filepath C:\pagefile.sys .exe
Size 592.0KB
Processes 628 (daiqt.exe)
Type PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
MD5 da6e4eb3d8cb0b66720db46d3c0ed294
SHA1 9dc0f700de02d70a31d46cce6ec377edd7b11b41
SHA256 ac984e7cb98251767fea904d6001f97e3a02564c9a4b9f213f576fc26d84ed8b
CRC32 7914CEFE
ssdeep None
Yara None matched
VirusTotal Search for analysis
Name 51cfc9bf89df8859_360downloads .exe
Filepath C:\360Downloads .exe
Size 592.0KB
Processes 628 (daiqt.exe)
Type PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
MD5 f27a74b00af7cdc6409eea218f667339
SHA1 a021e4825537aa924c12e45297f0b8c4f71d5943
SHA256 51cfc9bf89df8859239d61fefe842cfde37f18b24094cea7cf3c4c5233ee4a18
CRC32 77DCB912
ssdeep None
Yara None matched
VirusTotal Search for analysis
Sorry! No dropped buffers.