1.8
低危

00d758d6e9511c0e50f5f919ab2055bc25de1fa410f903bbe407de41ec7ab61d

00d758d6e9511c0e50f5f919ab2055bc25de1fa410f903bbe407de41ec7ab61d.exe

分析耗时

31s

最近分析

389天前

文件大小

203.5KB
静态报毒 动态报毒 CVE FAMILY METATYPE PLATFORM TYPE UNKNOWN WIN32 TROJAN RANSOM GANDCRAB
鹰眼引擎
DACN 0.12
FACILE 1.00
IMCLNet 0.73
MFGraph 0.00
静态判定
反病毒引擎
查杀引擎 查杀结果 查杀时间 查杀版本
Alibaba None 20190527 0.3.0.5
Avast Win32:Malware-gen 20191003 18.4.3895.0
Baidu None 20190318 1.0.0.2
CrowdStrike win/malicious_confidence_100% (D) 20190702 1.0
Kingsoft None 20191003 2013.8.14.323
McAfee GenericRXEX-YA!795F46B53D16 20191003 6.0.6.653
Tencent None 20191003 1.0.0.1
静态指标
文件包含未知的 PE 资源名称,可能指示打包器 (3 个事件)
resource name LAVIFIPOSOXOHILUJUSUCUFUSU
resource name NIMUSEBUYUBEPIJEPAPUHASOVO
resource name UAOSEL
一个或多个进程崩溃 (50 out of 1024 个事件)
Time & API Arguments Status Return Repeated
1727545287.03125
__exception__
exception.address: 0x775f9e58
exception.instruction: cmp byte ptr [eax + 7], 5
exception.instruction_r: 80 78 07 05 0f 84 64 8a 01 00 f6 40 07 3f 0f 84
exception.symbol: _vsnprintf+0xd0 strncpy_s-0x52 ntdll+0x79e58
exception.exception_code: 0xc0000005
registers.eax: 4294967288
registers.ecx: 37879808
registers.edx: 0
registers.ebx: 0
registers.esp: 1635776
registers.ebp: 1635820
registers.esi: 0
registers.edi: 37879808
stacktrace:
_vsnprintf+0xa9 strncpy_s-0x79 ntdll+0x79e31 @ 0x775f9e31
GetProfileStringW+0x5b74 EnumResourceNamesW-0x40041 kernel32+0x43120 @ 0x76f13120
00d758d6e9511c0e50f5f919ab2055bc25de1fa410f903bbe407de41ec7ab61d+0x1249 @ 0x401249
00d758d6e9511c0e50f5f919ab2055bc25de1fa410f903bbe407de41ec7ab61d+0x2b93 @ 0x402b93
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

success 0 0
1727545287.03125
__exception__
exception.address: 0x775f9e58
exception.instruction: cmp byte ptr [eax + 7], 5
exception.instruction_r: 80 78 07 05 0f 84 64 8a 01 00 f6 40 07 3f 0f 84
exception.symbol: _vsnprintf+0xd0 strncpy_s-0x52 ntdll+0x79e58
exception.exception_code: 0xc0000005
registers.eax: 4294967288
registers.ecx: 37879808
registers.edx: 0
registers.ebx: 0
registers.esp: 1635776
registers.ebp: 1635820
registers.esi: 0
registers.edi: 37879808
stacktrace:
_vsnprintf+0xa9 strncpy_s-0x79 ntdll+0x79e31 @ 0x775f9e31
GetProfileStringW+0x5b74 EnumResourceNamesW-0x40041 kernel32+0x43120 @ 0x76f13120
00d758d6e9511c0e50f5f919ab2055bc25de1fa410f903bbe407de41ec7ab61d+0x1249 @ 0x401249
00d758d6e9511c0e50f5f919ab2055bc25de1fa410f903bbe407de41ec7ab61d+0x2b93 @ 0x402b93
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

success 0 0
1727545287.03125
__exception__
exception.address: 0x775f9e58
exception.instruction: cmp byte ptr [eax + 7], 5
exception.instruction_r: 80 78 07 05 0f 84 64 8a 01 00 f6 40 07 3f 0f 84
exception.symbol: _vsnprintf+0xd0 strncpy_s-0x52 ntdll+0x79e58
exception.exception_code: 0xc0000005
registers.eax: 4294967288
registers.ecx: 37879808
registers.edx: 0
registers.ebx: 0
registers.esp: 1635776
registers.ebp: 1635820
registers.esi: 0
registers.edi: 37879808
stacktrace:
_vsnprintf+0xa9 strncpy_s-0x79 ntdll+0x79e31 @ 0x775f9e31
GetProfileStringW+0x5b74 EnumResourceNamesW-0x40041 kernel32+0x43120 @ 0x76f13120
00d758d6e9511c0e50f5f919ab2055bc25de1fa410f903bbe407de41ec7ab61d+0x1249 @ 0x401249
00d758d6e9511c0e50f5f919ab2055bc25de1fa410f903bbe407de41ec7ab61d+0x2b93 @ 0x402b93
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

success 0 0
1727545287.03125
__exception__
exception.address: 0x775f9e58
exception.instruction: cmp byte ptr [eax + 7], 5
exception.instruction_r: 80 78 07 05 0f 84 64 8a 01 00 f6 40 07 3f 0f 84
exception.symbol: _vsnprintf+0xd0 strncpy_s-0x52 ntdll+0x79e58
exception.exception_code: 0xc0000005
registers.eax: 4294967288
registers.ecx: 37879808
registers.edx: 0
registers.ebx: 0
registers.esp: 1635776
registers.ebp: 1635820
registers.esi: 0
registers.edi: 37879808
stacktrace:
_vsnprintf+0xa9 strncpy_s-0x79 ntdll+0x79e31 @ 0x775f9e31
GetProfileStringW+0x5b74 EnumResourceNamesW-0x40041 kernel32+0x43120 @ 0x76f13120
00d758d6e9511c0e50f5f919ab2055bc25de1fa410f903bbe407de41ec7ab61d+0x1249 @ 0x401249
00d758d6e9511c0e50f5f919ab2055bc25de1fa410f903bbe407de41ec7ab61d+0x2b93 @ 0x402b93
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

success 0 0
1727545287.03125
__exception__
exception.address: 0x775f9e58
exception.instruction: cmp byte ptr [eax + 7], 5
exception.instruction_r: 80 78 07 05 0f 84 64 8a 01 00 f6 40 07 3f 0f 84
exception.symbol: _vsnprintf+0xd0 strncpy_s-0x52 ntdll+0x79e58
exception.exception_code: 0xc0000005
registers.eax: 4294967288
registers.ecx: 37879808
registers.edx: 0
registers.ebx: 0
registers.esp: 1635776
registers.ebp: 1635820
registers.esi: 0
registers.edi: 37879808
stacktrace:
_vsnprintf+0xa9 strncpy_s-0x79 ntdll+0x79e31 @ 0x775f9e31
GetProfileStringW+0x5b74 EnumResourceNamesW-0x40041 kernel32+0x43120 @ 0x76f13120
00d758d6e9511c0e50f5f919ab2055bc25de1fa410f903bbe407de41ec7ab61d+0x1249 @ 0x401249
00d758d6e9511c0e50f5f919ab2055bc25de1fa410f903bbe407de41ec7ab61d+0x2b93 @ 0x402b93
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

success 0 0
1727545287.03125
__exception__
exception.address: 0x775f9e58
exception.instruction: cmp byte ptr [eax + 7], 5
exception.instruction_r: 80 78 07 05 0f 84 64 8a 01 00 f6 40 07 3f 0f 84
exception.symbol: _vsnprintf+0xd0 strncpy_s-0x52 ntdll+0x79e58
exception.exception_code: 0xc0000005
registers.eax: 4294967288
registers.ecx: 37879808
registers.edx: 0
registers.ebx: 0
registers.esp: 1635776
registers.ebp: 1635820
registers.esi: 0
registers.edi: 37879808
stacktrace:
_vsnprintf+0xa9 strncpy_s-0x79 ntdll+0x79e31 @ 0x775f9e31
GetProfileStringW+0x5b74 EnumResourceNamesW-0x40041 kernel32+0x43120 @ 0x76f13120
00d758d6e9511c0e50f5f919ab2055bc25de1fa410f903bbe407de41ec7ab61d+0x1249 @ 0x401249
00d758d6e9511c0e50f5f919ab2055bc25de1fa410f903bbe407de41ec7ab61d+0x2b93 @ 0x402b93
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

success 0 0
1727545287.03125
__exception__
exception.address: 0x775f9e58
exception.instruction: cmp byte ptr [eax + 7], 5
exception.instruction_r: 80 78 07 05 0f 84 64 8a 01 00 f6 40 07 3f 0f 84
exception.symbol: _vsnprintf+0xd0 strncpy_s-0x52 ntdll+0x79e58
exception.exception_code: 0xc0000005
registers.eax: 4294967288
registers.ecx: 37879808
registers.edx: 0
registers.ebx: 0
registers.esp: 1635776
registers.ebp: 1635820
registers.esi: 0
registers.edi: 37879808
stacktrace:
_vsnprintf+0xa9 strncpy_s-0x79 ntdll+0x79e31 @ 0x775f9e31
GetProfileStringW+0x5b74 EnumResourceNamesW-0x40041 kernel32+0x43120 @ 0x76f13120
00d758d6e9511c0e50f5f919ab2055bc25de1fa410f903bbe407de41ec7ab61d+0x1249 @ 0x401249
00d758d6e9511c0e50f5f919ab2055bc25de1fa410f903bbe407de41ec7ab61d+0x2b93 @ 0x402b93
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

success 0 0
1727545287.03125
__exception__
exception.address: 0x775f9e58
exception.instruction: cmp byte ptr [eax + 7], 5
exception.instruction_r: 80 78 07 05 0f 84 64 8a 01 00 f6 40 07 3f 0f 84
exception.symbol: _vsnprintf+0xd0 strncpy_s-0x52 ntdll+0x79e58
exception.exception_code: 0xc0000005
registers.eax: 4294967288
registers.ecx: 37879808
registers.edx: 0
registers.ebx: 0
registers.esp: 1635776
registers.ebp: 1635820
registers.esi: 0
registers.edi: 37879808
stacktrace:
_vsnprintf+0xa9 strncpy_s-0x79 ntdll+0x79e31 @ 0x775f9e31
GetProfileStringW+0x5b74 EnumResourceNamesW-0x40041 kernel32+0x43120 @ 0x76f13120
00d758d6e9511c0e50f5f919ab2055bc25de1fa410f903bbe407de41ec7ab61d+0x1249 @ 0x401249
00d758d6e9511c0e50f5f919ab2055bc25de1fa410f903bbe407de41ec7ab61d+0x2b93 @ 0x402b93
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

success 0 0
1727545287.03125
__exception__
exception.address: 0x775f9e58
exception.instruction: cmp byte ptr [eax + 7], 5
exception.instruction_r: 80 78 07 05 0f 84 64 8a 01 00 f6 40 07 3f 0f 84
exception.symbol: _vsnprintf+0xd0 strncpy_s-0x52 ntdll+0x79e58
exception.exception_code: 0xc0000005
registers.eax: 4294967288
registers.ecx: 37879808
registers.edx: 0
registers.ebx: 0
registers.esp: 1635776
registers.ebp: 1635820
registers.esi: 0
registers.edi: 37879808
stacktrace:
_vsnprintf+0xa9 strncpy_s-0x79 ntdll+0x79e31 @ 0x775f9e31
GetProfileStringW+0x5b74 EnumResourceNamesW-0x40041 kernel32+0x43120 @ 0x76f13120
00d758d6e9511c0e50f5f919ab2055bc25de1fa410f903bbe407de41ec7ab61d+0x1249 @ 0x401249
00d758d6e9511c0e50f5f919ab2055bc25de1fa410f903bbe407de41ec7ab61d+0x2b93 @ 0x402b93
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

success 0 0
1727545287.03125
__exception__
exception.address: 0x775f9e58
exception.instruction: cmp byte ptr [eax + 7], 5
exception.instruction_r: 80 78 07 05 0f 84 64 8a 01 00 f6 40 07 3f 0f 84
exception.symbol: _vsnprintf+0xd0 strncpy_s-0x52 ntdll+0x79e58
exception.exception_code: 0xc0000005
registers.eax: 4294967288
registers.ecx: 37879808
registers.edx: 0
registers.ebx: 0
registers.esp: 1635776
registers.ebp: 1635820
registers.esi: 0
registers.edi: 37879808
stacktrace:
_vsnprintf+0xa9 strncpy_s-0x79 ntdll+0x79e31 @ 0x775f9e31
GetProfileStringW+0x5b74 EnumResourceNamesW-0x40041 kernel32+0x43120 @ 0x76f13120
00d758d6e9511c0e50f5f919ab2055bc25de1fa410f903bbe407de41ec7ab61d+0x1249 @ 0x401249
00d758d6e9511c0e50f5f919ab2055bc25de1fa410f903bbe407de41ec7ab61d+0x2b93 @ 0x402b93
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

success 0 0
1727545287.03125
__exception__
exception.address: 0x775f9e58
exception.instruction: cmp byte ptr [eax + 7], 5
exception.instruction_r: 80 78 07 05 0f 84 64 8a 01 00 f6 40 07 3f 0f 84
exception.symbol: _vsnprintf+0xd0 strncpy_s-0x52 ntdll+0x79e58
exception.exception_code: 0xc0000005
registers.eax: 4294967288
registers.ecx: 37879808
registers.edx: 0
registers.ebx: 0
registers.esp: 1635776
registers.ebp: 1635820
registers.esi: 0
registers.edi: 37879808
stacktrace:
_vsnprintf+0xa9 strncpy_s-0x79 ntdll+0x79e31 @ 0x775f9e31
GetProfileStringW+0x5b74 EnumResourceNamesW-0x40041 kernel32+0x43120 @ 0x76f13120
00d758d6e9511c0e50f5f919ab2055bc25de1fa410f903bbe407de41ec7ab61d+0x1249 @ 0x401249
00d758d6e9511c0e50f5f919ab2055bc25de1fa410f903bbe407de41ec7ab61d+0x2b93 @ 0x402b93
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

success 0 0
1727545287.03125
__exception__
exception.address: 0x775f9e58
exception.instruction: cmp byte ptr [eax + 7], 5
exception.instruction_r: 80 78 07 05 0f 84 64 8a 01 00 f6 40 07 3f 0f 84
exception.symbol: _vsnprintf+0xd0 strncpy_s-0x52 ntdll+0x79e58
exception.exception_code: 0xc0000005
registers.eax: 4294967288
registers.ecx: 37879808
registers.edx: 0
registers.ebx: 0
registers.esp: 1635776
registers.ebp: 1635820
registers.esi: 0
registers.edi: 37879808
stacktrace:
_vsnprintf+0xa9 strncpy_s-0x79 ntdll+0x79e31 @ 0x775f9e31
GetProfileStringW+0x5b74 EnumResourceNamesW-0x40041 kernel32+0x43120 @ 0x76f13120
00d758d6e9511c0e50f5f919ab2055bc25de1fa410f903bbe407de41ec7ab61d+0x1249 @ 0x401249
00d758d6e9511c0e50f5f919ab2055bc25de1fa410f903bbe407de41ec7ab61d+0x2b93 @ 0x402b93
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

success 0 0
1727545287.04725
__exception__
exception.address: 0x775f9e58
exception.instruction: cmp byte ptr [eax + 7], 5
exception.instruction_r: 80 78 07 05 0f 84 64 8a 01 00 f6 40 07 3f 0f 84
exception.symbol: _vsnprintf+0xd0 strncpy_s-0x52 ntdll+0x79e58
exception.exception_code: 0xc0000005
registers.eax: 4294967288
registers.ecx: 37879808
registers.edx: 0
registers.ebx: 0
registers.esp: 1635776
registers.ebp: 1635820
registers.esi: 0
registers.edi: 37879808
stacktrace:
_vsnprintf+0xa9 strncpy_s-0x79 ntdll+0x79e31 @ 0x775f9e31
GetProfileStringW+0x5b74 EnumResourceNamesW-0x40041 kernel32+0x43120 @ 0x76f13120
00d758d6e9511c0e50f5f919ab2055bc25de1fa410f903bbe407de41ec7ab61d+0x1249 @ 0x401249
00d758d6e9511c0e50f5f919ab2055bc25de1fa410f903bbe407de41ec7ab61d+0x2b93 @ 0x402b93
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

success 0 0
1727545287.04725
__exception__
exception.address: 0x775f9e58
exception.instruction: cmp byte ptr [eax + 7], 5
exception.instruction_r: 80 78 07 05 0f 84 64 8a 01 00 f6 40 07 3f 0f 84
exception.symbol: _vsnprintf+0xd0 strncpy_s-0x52 ntdll+0x79e58
exception.exception_code: 0xc0000005
registers.eax: 4294967288
registers.ecx: 37879808
registers.edx: 0
registers.ebx: 0
registers.esp: 1635776
registers.ebp: 1635820
registers.esi: 0
registers.edi: 37879808
stacktrace:
_vsnprintf+0xa9 strncpy_s-0x79 ntdll+0x79e31 @ 0x775f9e31
GetProfileStringW+0x5b74 EnumResourceNamesW-0x40041 kernel32+0x43120 @ 0x76f13120
00d758d6e9511c0e50f5f919ab2055bc25de1fa410f903bbe407de41ec7ab61d+0x1249 @ 0x401249
00d758d6e9511c0e50f5f919ab2055bc25de1fa410f903bbe407de41ec7ab61d+0x2b93 @ 0x402b93
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

success 0 0
1727545287.04725
__exception__
exception.address: 0x775f9e58
exception.instruction: cmp byte ptr [eax + 7], 5
exception.instruction_r: 80 78 07 05 0f 84 64 8a 01 00 f6 40 07 3f 0f 84
exception.symbol: _vsnprintf+0xd0 strncpy_s-0x52 ntdll+0x79e58
exception.exception_code: 0xc0000005
registers.eax: 4294967288
registers.ecx: 37879808
registers.edx: 0
registers.ebx: 0
registers.esp: 1635776
registers.ebp: 1635820
registers.esi: 0
registers.edi: 37879808
stacktrace:
_vsnprintf+0xa9 strncpy_s-0x79 ntdll+0x79e31 @ 0x775f9e31
GetProfileStringW+0x5b74 EnumResourceNamesW-0x40041 kernel32+0x43120 @ 0x76f13120
00d758d6e9511c0e50f5f919ab2055bc25de1fa410f903bbe407de41ec7ab61d+0x1249 @ 0x401249
00d758d6e9511c0e50f5f919ab2055bc25de1fa410f903bbe407de41ec7ab61d+0x2b93 @ 0x402b93
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

success 0 0
1727545287.04725
__exception__
exception.address: 0x775f9e58
exception.instruction: cmp byte ptr [eax + 7], 5
exception.instruction_r: 80 78 07 05 0f 84 64 8a 01 00 f6 40 07 3f 0f 84
exception.symbol: _vsnprintf+0xd0 strncpy_s-0x52 ntdll+0x79e58
exception.exception_code: 0xc0000005
registers.eax: 4294967288
registers.ecx: 37879808
registers.edx: 0
registers.ebx: 0
registers.esp: 1635776
registers.ebp: 1635820
registers.esi: 0
registers.edi: 37879808
stacktrace:
_vsnprintf+0xa9 strncpy_s-0x79 ntdll+0x79e31 @ 0x775f9e31
GetProfileStringW+0x5b74 EnumResourceNamesW-0x40041 kernel32+0x43120 @ 0x76f13120
00d758d6e9511c0e50f5f919ab2055bc25de1fa410f903bbe407de41ec7ab61d+0x1249 @ 0x401249
00d758d6e9511c0e50f5f919ab2055bc25de1fa410f903bbe407de41ec7ab61d+0x2b93 @ 0x402b93
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

success 0 0
1727545287.04725
__exception__
exception.address: 0x775f9e58
exception.instruction: cmp byte ptr [eax + 7], 5
exception.instruction_r: 80 78 07 05 0f 84 64 8a 01 00 f6 40 07 3f 0f 84
exception.symbol: _vsnprintf+0xd0 strncpy_s-0x52 ntdll+0x79e58
exception.exception_code: 0xc0000005
registers.eax: 4294967288
registers.ecx: 37879808
registers.edx: 0
registers.ebx: 0
registers.esp: 1635776
registers.ebp: 1635820
registers.esi: 0
registers.edi: 37879808
stacktrace:
_vsnprintf+0xa9 strncpy_s-0x79 ntdll+0x79e31 @ 0x775f9e31
GetProfileStringW+0x5b74 EnumResourceNamesW-0x40041 kernel32+0x43120 @ 0x76f13120
00d758d6e9511c0e50f5f919ab2055bc25de1fa410f903bbe407de41ec7ab61d+0x1249 @ 0x401249
00d758d6e9511c0e50f5f919ab2055bc25de1fa410f903bbe407de41ec7ab61d+0x2b93 @ 0x402b93
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

success 0 0
1727545287.04725
__exception__
exception.address: 0x775f9e58
exception.instruction: cmp byte ptr [eax + 7], 5
exception.instruction_r: 80 78 07 05 0f 84 64 8a 01 00 f6 40 07 3f 0f 84
exception.symbol: _vsnprintf+0xd0 strncpy_s-0x52 ntdll+0x79e58
exception.exception_code: 0xc0000005
registers.eax: 4294967288
registers.ecx: 37879808
registers.edx: 0
registers.ebx: 0
registers.esp: 1635776
registers.ebp: 1635820
registers.esi: 0
registers.edi: 37879808
stacktrace:
_vsnprintf+0xa9 strncpy_s-0x79 ntdll+0x79e31 @ 0x775f9e31
GetProfileStringW+0x5b74 EnumResourceNamesW-0x40041 kernel32+0x43120 @ 0x76f13120
00d758d6e9511c0e50f5f919ab2055bc25de1fa410f903bbe407de41ec7ab61d+0x1249 @ 0x401249
00d758d6e9511c0e50f5f919ab2055bc25de1fa410f903bbe407de41ec7ab61d+0x2b93 @ 0x402b93
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

success 0 0
1727545287.04725
__exception__
exception.address: 0x775f9e58
exception.instruction: cmp byte ptr [eax + 7], 5
exception.instruction_r: 80 78 07 05 0f 84 64 8a 01 00 f6 40 07 3f 0f 84
exception.symbol: _vsnprintf+0xd0 strncpy_s-0x52 ntdll+0x79e58
exception.exception_code: 0xc0000005
registers.eax: 4294967288
registers.ecx: 37879808
registers.edx: 0
registers.ebx: 0
registers.esp: 1635776
registers.ebp: 1635820
registers.esi: 0
registers.edi: 37879808
stacktrace:
_vsnprintf+0xa9 strncpy_s-0x79 ntdll+0x79e31 @ 0x775f9e31
GetProfileStringW+0x5b74 EnumResourceNamesW-0x40041 kernel32+0x43120 @ 0x76f13120
00d758d6e9511c0e50f5f919ab2055bc25de1fa410f903bbe407de41ec7ab61d+0x1249 @ 0x401249
00d758d6e9511c0e50f5f919ab2055bc25de1fa410f903bbe407de41ec7ab61d+0x2b93 @ 0x402b93
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

success 0 0
1727545287.04725
__exception__
exception.address: 0x775f9e58
exception.instruction: cmp byte ptr [eax + 7], 5
exception.instruction_r: 80 78 07 05 0f 84 64 8a 01 00 f6 40 07 3f 0f 84
exception.symbol: _vsnprintf+0xd0 strncpy_s-0x52 ntdll+0x79e58
exception.exception_code: 0xc0000005
registers.eax: 4294967288
registers.ecx: 37879808
registers.edx: 0
registers.ebx: 0
registers.esp: 1635776
registers.ebp: 1635820
registers.esi: 0
registers.edi: 37879808
stacktrace:
_vsnprintf+0xa9 strncpy_s-0x79 ntdll+0x79e31 @ 0x775f9e31
GetProfileStringW+0x5b74 EnumResourceNamesW-0x40041 kernel32+0x43120 @ 0x76f13120
00d758d6e9511c0e50f5f919ab2055bc25de1fa410f903bbe407de41ec7ab61d+0x1249 @ 0x401249
00d758d6e9511c0e50f5f919ab2055bc25de1fa410f903bbe407de41ec7ab61d+0x2b93 @ 0x402b93
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

success 0 0
1727545287.04725
__exception__
exception.address: 0x775f9e58
exception.instruction: cmp byte ptr [eax + 7], 5
exception.instruction_r: 80 78 07 05 0f 84 64 8a 01 00 f6 40 07 3f 0f 84
exception.symbol: _vsnprintf+0xd0 strncpy_s-0x52 ntdll+0x79e58
exception.exception_code: 0xc0000005
registers.eax: 4294967288
registers.ecx: 37879808
registers.edx: 0
registers.ebx: 0
registers.esp: 1635776
registers.ebp: 1635820
registers.esi: 0
registers.edi: 37879808
stacktrace:
_vsnprintf+0xa9 strncpy_s-0x79 ntdll+0x79e31 @ 0x775f9e31
GetProfileStringW+0x5b74 EnumResourceNamesW-0x40041 kernel32+0x43120 @ 0x76f13120
00d758d6e9511c0e50f5f919ab2055bc25de1fa410f903bbe407de41ec7ab61d+0x1249 @ 0x401249
00d758d6e9511c0e50f5f919ab2055bc25de1fa410f903bbe407de41ec7ab61d+0x2b93 @ 0x402b93
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

success 0 0
1727545287.04725
__exception__
exception.address: 0x775f9e58
exception.instruction: cmp byte ptr [eax + 7], 5
exception.instruction_r: 80 78 07 05 0f 84 64 8a 01 00 f6 40 07 3f 0f 84
exception.symbol: _vsnprintf+0xd0 strncpy_s-0x52 ntdll+0x79e58
exception.exception_code: 0xc0000005
registers.eax: 4294967288
registers.ecx: 37879808
registers.edx: 0
registers.ebx: 0
registers.esp: 1635776
registers.ebp: 1635820
registers.esi: 0
registers.edi: 37879808
stacktrace:
_vsnprintf+0xa9 strncpy_s-0x79 ntdll+0x79e31 @ 0x775f9e31
GetProfileStringW+0x5b74 EnumResourceNamesW-0x40041 kernel32+0x43120 @ 0x76f13120
00d758d6e9511c0e50f5f919ab2055bc25de1fa410f903bbe407de41ec7ab61d+0x1249 @ 0x401249
00d758d6e9511c0e50f5f919ab2055bc25de1fa410f903bbe407de41ec7ab61d+0x2b93 @ 0x402b93
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

success 0 0
1727545287.04725
__exception__
exception.address: 0x775f9e58
exception.instruction: cmp byte ptr [eax + 7], 5
exception.instruction_r: 80 78 07 05 0f 84 64 8a 01 00 f6 40 07 3f 0f 84
exception.symbol: _vsnprintf+0xd0 strncpy_s-0x52 ntdll+0x79e58
exception.exception_code: 0xc0000005
registers.eax: 4294967288
registers.ecx: 37879808
registers.edx: 0
registers.ebx: 0
registers.esp: 1635776
registers.ebp: 1635820
registers.esi: 0
registers.edi: 37879808
stacktrace:
_vsnprintf+0xa9 strncpy_s-0x79 ntdll+0x79e31 @ 0x775f9e31
GetProfileStringW+0x5b74 EnumResourceNamesW-0x40041 kernel32+0x43120 @ 0x76f13120
00d758d6e9511c0e50f5f919ab2055bc25de1fa410f903bbe407de41ec7ab61d+0x1249 @ 0x401249
00d758d6e9511c0e50f5f919ab2055bc25de1fa410f903bbe407de41ec7ab61d+0x2b93 @ 0x402b93
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

success 0 0
1727545287.04725
__exception__
exception.address: 0x775f9e58
exception.instruction: cmp byte ptr [eax + 7], 5
exception.instruction_r: 80 78 07 05 0f 84 64 8a 01 00 f6 40 07 3f 0f 84
exception.symbol: _vsnprintf+0xd0 strncpy_s-0x52 ntdll+0x79e58
exception.exception_code: 0xc0000005
registers.eax: 4294967288
registers.ecx: 37879808
registers.edx: 0
registers.ebx: 0
registers.esp: 1635776
registers.ebp: 1635820
registers.esi: 0
registers.edi: 37879808
stacktrace:
_vsnprintf+0xa9 strncpy_s-0x79 ntdll+0x79e31 @ 0x775f9e31
GetProfileStringW+0x5b74 EnumResourceNamesW-0x40041 kernel32+0x43120 @ 0x76f13120
00d758d6e9511c0e50f5f919ab2055bc25de1fa410f903bbe407de41ec7ab61d+0x1249 @ 0x401249
00d758d6e9511c0e50f5f919ab2055bc25de1fa410f903bbe407de41ec7ab61d+0x2b93 @ 0x402b93
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

success 0 0
1727545287.04725
__exception__
exception.address: 0x775f9e58
exception.instruction: cmp byte ptr [eax + 7], 5
exception.instruction_r: 80 78 07 05 0f 84 64 8a 01 00 f6 40 07 3f 0f 84
exception.symbol: _vsnprintf+0xd0 strncpy_s-0x52 ntdll+0x79e58
exception.exception_code: 0xc0000005
registers.eax: 4294967288
registers.ecx: 37879808
registers.edx: 0
registers.ebx: 0
registers.esp: 1635776
registers.ebp: 1635820
registers.esi: 0
registers.edi: 37879808
stacktrace:
_vsnprintf+0xa9 strncpy_s-0x79 ntdll+0x79e31 @ 0x775f9e31
GetProfileStringW+0x5b74 EnumResourceNamesW-0x40041 kernel32+0x43120 @ 0x76f13120
00d758d6e9511c0e50f5f919ab2055bc25de1fa410f903bbe407de41ec7ab61d+0x1249 @ 0x401249
00d758d6e9511c0e50f5f919ab2055bc25de1fa410f903bbe407de41ec7ab61d+0x2b93 @ 0x402b93
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

success 0 0
1727545287.04725
__exception__
exception.address: 0x775f9e58
exception.instruction: cmp byte ptr [eax + 7], 5
exception.instruction_r: 80 78 07 05 0f 84 64 8a 01 00 f6 40 07 3f 0f 84
exception.symbol: _vsnprintf+0xd0 strncpy_s-0x52 ntdll+0x79e58
exception.exception_code: 0xc0000005
registers.eax: 4294967288
registers.ecx: 37879808
registers.edx: 0
registers.ebx: 0
registers.esp: 1635776
registers.ebp: 1635820
registers.esi: 0
registers.edi: 37879808
stacktrace:
_vsnprintf+0xa9 strncpy_s-0x79 ntdll+0x79e31 @ 0x775f9e31
GetProfileStringW+0x5b74 EnumResourceNamesW-0x40041 kernel32+0x43120 @ 0x76f13120
00d758d6e9511c0e50f5f919ab2055bc25de1fa410f903bbe407de41ec7ab61d+0x1249 @ 0x401249
00d758d6e9511c0e50f5f919ab2055bc25de1fa410f903bbe407de41ec7ab61d+0x2b93 @ 0x402b93
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

success 0 0
1727545287.04725
__exception__
exception.address: 0x775f9e58
exception.instruction: cmp byte ptr [eax + 7], 5
exception.instruction_r: 80 78 07 05 0f 84 64 8a 01 00 f6 40 07 3f 0f 84
exception.symbol: _vsnprintf+0xd0 strncpy_s-0x52 ntdll+0x79e58
exception.exception_code: 0xc0000005
registers.eax: 4294967288
registers.ecx: 37879808
registers.edx: 0
registers.ebx: 0
registers.esp: 1635776
registers.ebp: 1635820
registers.esi: 0
registers.edi: 37879808
stacktrace:
_vsnprintf+0xa9 strncpy_s-0x79 ntdll+0x79e31 @ 0x775f9e31
GetProfileStringW+0x5b74 EnumResourceNamesW-0x40041 kernel32+0x43120 @ 0x76f13120
00d758d6e9511c0e50f5f919ab2055bc25de1fa410f903bbe407de41ec7ab61d+0x1249 @ 0x401249
00d758d6e9511c0e50f5f919ab2055bc25de1fa410f903bbe407de41ec7ab61d+0x2b93 @ 0x402b93
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

success 0 0
1727545287.04725
__exception__
exception.address: 0x775f9e58
exception.instruction: cmp byte ptr [eax + 7], 5
exception.instruction_r: 80 78 07 05 0f 84 64 8a 01 00 f6 40 07 3f 0f 84
exception.symbol: _vsnprintf+0xd0 strncpy_s-0x52 ntdll+0x79e58
exception.exception_code: 0xc0000005
registers.eax: 4294967288
registers.ecx: 37879808
registers.edx: 0
registers.ebx: 0
registers.esp: 1635776
registers.ebp: 1635820
registers.esi: 0
registers.edi: 37879808
stacktrace:
_vsnprintf+0xa9 strncpy_s-0x79 ntdll+0x79e31 @ 0x775f9e31
GetProfileStringW+0x5b74 EnumResourceNamesW-0x40041 kernel32+0x43120 @ 0x76f13120
00d758d6e9511c0e50f5f919ab2055bc25de1fa410f903bbe407de41ec7ab61d+0x1249 @ 0x401249
00d758d6e9511c0e50f5f919ab2055bc25de1fa410f903bbe407de41ec7ab61d+0x2b93 @ 0x402b93
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

success 0 0
1727545287.04725
__exception__
exception.address: 0x775f9e58
exception.instruction: cmp byte ptr [eax + 7], 5
exception.instruction_r: 80 78 07 05 0f 84 64 8a 01 00 f6 40 07 3f 0f 84
exception.symbol: _vsnprintf+0xd0 strncpy_s-0x52 ntdll+0x79e58
exception.exception_code: 0xc0000005
registers.eax: 4294967288
registers.ecx: 37879808
registers.edx: 0
registers.ebx: 0
registers.esp: 1635776
registers.ebp: 1635820
registers.esi: 0
registers.edi: 37879808
stacktrace:
_vsnprintf+0xa9 strncpy_s-0x79 ntdll+0x79e31 @ 0x775f9e31
GetProfileStringW+0x5b74 EnumResourceNamesW-0x40041 kernel32+0x43120 @ 0x76f13120
00d758d6e9511c0e50f5f919ab2055bc25de1fa410f903bbe407de41ec7ab61d+0x1249 @ 0x401249
00d758d6e9511c0e50f5f919ab2055bc25de1fa410f903bbe407de41ec7ab61d+0x2b93 @ 0x402b93
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

success 0 0
1727545287.04725
__exception__
exception.address: 0x775f9e58
exception.instruction: cmp byte ptr [eax + 7], 5
exception.instruction_r: 80 78 07 05 0f 84 64 8a 01 00 f6 40 07 3f 0f 84
exception.symbol: _vsnprintf+0xd0 strncpy_s-0x52 ntdll+0x79e58
exception.exception_code: 0xc0000005
registers.eax: 4294967288
registers.ecx: 37879808
registers.edx: 0
registers.ebx: 0
registers.esp: 1635776
registers.ebp: 1635820
registers.esi: 0
registers.edi: 37879808
stacktrace:
_vsnprintf+0xa9 strncpy_s-0x79 ntdll+0x79e31 @ 0x775f9e31
GetProfileStringW+0x5b74 EnumResourceNamesW-0x40041 kernel32+0x43120 @ 0x76f13120
00d758d6e9511c0e50f5f919ab2055bc25de1fa410f903bbe407de41ec7ab61d+0x1249 @ 0x401249
00d758d6e9511c0e50f5f919ab2055bc25de1fa410f903bbe407de41ec7ab61d+0x2b93 @ 0x402b93
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

success 0 0
1727545287.06325
__exception__
exception.address: 0x775f9e58
exception.instruction: cmp byte ptr [eax + 7], 5
exception.instruction_r: 80 78 07 05 0f 84 64 8a 01 00 f6 40 07 3f 0f 84
exception.symbol: _vsnprintf+0xd0 strncpy_s-0x52 ntdll+0x79e58
exception.exception_code: 0xc0000005
registers.eax: 4294967288
registers.ecx: 37879808
registers.edx: 0
registers.ebx: 0
registers.esp: 1635776
registers.ebp: 1635820
registers.esi: 0
registers.edi: 37879808
stacktrace:
_vsnprintf+0xa9 strncpy_s-0x79 ntdll+0x79e31 @ 0x775f9e31
GetProfileStringW+0x5b74 EnumResourceNamesW-0x40041 kernel32+0x43120 @ 0x76f13120
00d758d6e9511c0e50f5f919ab2055bc25de1fa410f903bbe407de41ec7ab61d+0x1249 @ 0x401249
00d758d6e9511c0e50f5f919ab2055bc25de1fa410f903bbe407de41ec7ab61d+0x2b93 @ 0x402b93
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

success 0 0
1727545287.06325
__exception__
exception.address: 0x775f9e58
exception.instruction: cmp byte ptr [eax + 7], 5
exception.instruction_r: 80 78 07 05 0f 84 64 8a 01 00 f6 40 07 3f 0f 84
exception.symbol: _vsnprintf+0xd0 strncpy_s-0x52 ntdll+0x79e58
exception.exception_code: 0xc0000005
registers.eax: 4294967288
registers.ecx: 37879808
registers.edx: 0
registers.ebx: 0
registers.esp: 1635776
registers.ebp: 1635820
registers.esi: 0
registers.edi: 37879808
stacktrace:
_vsnprintf+0xa9 strncpy_s-0x79 ntdll+0x79e31 @ 0x775f9e31
GetProfileStringW+0x5b74 EnumResourceNamesW-0x40041 kernel32+0x43120 @ 0x76f13120
00d758d6e9511c0e50f5f919ab2055bc25de1fa410f903bbe407de41ec7ab61d+0x1249 @ 0x401249
00d758d6e9511c0e50f5f919ab2055bc25de1fa410f903bbe407de41ec7ab61d+0x2b93 @ 0x402b93
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

success 0 0
1727545287.06325
__exception__
exception.address: 0x775f9e58
exception.instruction: cmp byte ptr [eax + 7], 5
exception.instruction_r: 80 78 07 05 0f 84 64 8a 01 00 f6 40 07 3f 0f 84
exception.symbol: _vsnprintf+0xd0 strncpy_s-0x52 ntdll+0x79e58
exception.exception_code: 0xc0000005
registers.eax: 4294967288
registers.ecx: 37879808
registers.edx: 0
registers.ebx: 0
registers.esp: 1635776
registers.ebp: 1635820
registers.esi: 0
registers.edi: 37879808
stacktrace:
_vsnprintf+0xa9 strncpy_s-0x79 ntdll+0x79e31 @ 0x775f9e31
GetProfileStringW+0x5b74 EnumResourceNamesW-0x40041 kernel32+0x43120 @ 0x76f13120
00d758d6e9511c0e50f5f919ab2055bc25de1fa410f903bbe407de41ec7ab61d+0x1249 @ 0x401249
00d758d6e9511c0e50f5f919ab2055bc25de1fa410f903bbe407de41ec7ab61d+0x2b93 @ 0x402b93
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

success 0 0
1727545287.06325
__exception__
exception.address: 0x775f9e58
exception.instruction: cmp byte ptr [eax + 7], 5
exception.instruction_r: 80 78 07 05 0f 84 64 8a 01 00 f6 40 07 3f 0f 84
exception.symbol: _vsnprintf+0xd0 strncpy_s-0x52 ntdll+0x79e58
exception.exception_code: 0xc0000005
registers.eax: 4294967288
registers.ecx: 37879808
registers.edx: 0
registers.ebx: 0
registers.esp: 1635776
registers.ebp: 1635820
registers.esi: 0
registers.edi: 37879808
stacktrace:
_vsnprintf+0xa9 strncpy_s-0x79 ntdll+0x79e31 @ 0x775f9e31
GetProfileStringW+0x5b74 EnumResourceNamesW-0x40041 kernel32+0x43120 @ 0x76f13120
00d758d6e9511c0e50f5f919ab2055bc25de1fa410f903bbe407de41ec7ab61d+0x1249 @ 0x401249
00d758d6e9511c0e50f5f919ab2055bc25de1fa410f903bbe407de41ec7ab61d+0x2b93 @ 0x402b93
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

success 0 0
1727545287.06325
__exception__
exception.address: 0x775f9e58
exception.instruction: cmp byte ptr [eax + 7], 5
exception.instruction_r: 80 78 07 05 0f 84 64 8a 01 00 f6 40 07 3f 0f 84
exception.symbol: _vsnprintf+0xd0 strncpy_s-0x52 ntdll+0x79e58
exception.exception_code: 0xc0000005
registers.eax: 4294967288
registers.ecx: 37879808
registers.edx: 0
registers.ebx: 0
registers.esp: 1635776
registers.ebp: 1635820
registers.esi: 0
registers.edi: 37879808
stacktrace:
_vsnprintf+0xa9 strncpy_s-0x79 ntdll+0x79e31 @ 0x775f9e31
GetProfileStringW+0x5b74 EnumResourceNamesW-0x40041 kernel32+0x43120 @ 0x76f13120
00d758d6e9511c0e50f5f919ab2055bc25de1fa410f903bbe407de41ec7ab61d+0x1249 @ 0x401249
00d758d6e9511c0e50f5f919ab2055bc25de1fa410f903bbe407de41ec7ab61d+0x2b93 @ 0x402b93
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

success 0 0
1727545287.06325
__exception__
exception.address: 0x775f9e58
exception.instruction: cmp byte ptr [eax + 7], 5
exception.instruction_r: 80 78 07 05 0f 84 64 8a 01 00 f6 40 07 3f 0f 84
exception.symbol: _vsnprintf+0xd0 strncpy_s-0x52 ntdll+0x79e58
exception.exception_code: 0xc0000005
registers.eax: 4294967288
registers.ecx: 37879808
registers.edx: 0
registers.ebx: 0
registers.esp: 1635776
registers.ebp: 1635820
registers.esi: 0
registers.edi: 37879808
stacktrace:
_vsnprintf+0xa9 strncpy_s-0x79 ntdll+0x79e31 @ 0x775f9e31
GetProfileStringW+0x5b74 EnumResourceNamesW-0x40041 kernel32+0x43120 @ 0x76f13120
00d758d6e9511c0e50f5f919ab2055bc25de1fa410f903bbe407de41ec7ab61d+0x1249 @ 0x401249
00d758d6e9511c0e50f5f919ab2055bc25de1fa410f903bbe407de41ec7ab61d+0x2b93 @ 0x402b93
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

success 0 0
1727545287.06325
__exception__
exception.address: 0x775f9e58
exception.instruction: cmp byte ptr [eax + 7], 5
exception.instruction_r: 80 78 07 05 0f 84 64 8a 01 00 f6 40 07 3f 0f 84
exception.symbol: _vsnprintf+0xd0 strncpy_s-0x52 ntdll+0x79e58
exception.exception_code: 0xc0000005
registers.eax: 4294967288
registers.ecx: 37879808
registers.edx: 0
registers.ebx: 0
registers.esp: 1635776
registers.ebp: 1635820
registers.esi: 0
registers.edi: 37879808
stacktrace:
_vsnprintf+0xa9 strncpy_s-0x79 ntdll+0x79e31 @ 0x775f9e31
GetProfileStringW+0x5b74 EnumResourceNamesW-0x40041 kernel32+0x43120 @ 0x76f13120
00d758d6e9511c0e50f5f919ab2055bc25de1fa410f903bbe407de41ec7ab61d+0x1249 @ 0x401249
00d758d6e9511c0e50f5f919ab2055bc25de1fa410f903bbe407de41ec7ab61d+0x2b93 @ 0x402b93
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

success 0 0
1727545287.06325
__exception__
exception.address: 0x775f9e58
exception.instruction: cmp byte ptr [eax + 7], 5
exception.instruction_r: 80 78 07 05 0f 84 64 8a 01 00 f6 40 07 3f 0f 84
exception.symbol: _vsnprintf+0xd0 strncpy_s-0x52 ntdll+0x79e58
exception.exception_code: 0xc0000005
registers.eax: 4294967288
registers.ecx: 37879808
registers.edx: 0
registers.ebx: 0
registers.esp: 1635776
registers.ebp: 1635820
registers.esi: 0
registers.edi: 37879808
stacktrace:
_vsnprintf+0xa9 strncpy_s-0x79 ntdll+0x79e31 @ 0x775f9e31
GetProfileStringW+0x5b74 EnumResourceNamesW-0x40041 kernel32+0x43120 @ 0x76f13120
00d758d6e9511c0e50f5f919ab2055bc25de1fa410f903bbe407de41ec7ab61d+0x1249 @ 0x401249
00d758d6e9511c0e50f5f919ab2055bc25de1fa410f903bbe407de41ec7ab61d+0x2b93 @ 0x402b93
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

success 0 0
1727545287.06325
__exception__
exception.address: 0x775f9e58
exception.instruction: cmp byte ptr [eax + 7], 5
exception.instruction_r: 80 78 07 05 0f 84 64 8a 01 00 f6 40 07 3f 0f 84
exception.symbol: _vsnprintf+0xd0 strncpy_s-0x52 ntdll+0x79e58
exception.exception_code: 0xc0000005
registers.eax: 4294967288
registers.ecx: 37879808
registers.edx: 0
registers.ebx: 0
registers.esp: 1635776
registers.ebp: 1635820
registers.esi: 0
registers.edi: 37879808
stacktrace:
_vsnprintf+0xa9 strncpy_s-0x79 ntdll+0x79e31 @ 0x775f9e31
GetProfileStringW+0x5b74 EnumResourceNamesW-0x40041 kernel32+0x43120 @ 0x76f13120
00d758d6e9511c0e50f5f919ab2055bc25de1fa410f903bbe407de41ec7ab61d+0x1249 @ 0x401249
00d758d6e9511c0e50f5f919ab2055bc25de1fa410f903bbe407de41ec7ab61d+0x2b93 @ 0x402b93
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

success 0 0
1727545287.06325
__exception__
exception.address: 0x775f9e58
exception.instruction: cmp byte ptr [eax + 7], 5
exception.instruction_r: 80 78 07 05 0f 84 64 8a 01 00 f6 40 07 3f 0f 84
exception.symbol: _vsnprintf+0xd0 strncpy_s-0x52 ntdll+0x79e58
exception.exception_code: 0xc0000005
registers.eax: 4294967288
registers.ecx: 37879808
registers.edx: 0
registers.ebx: 0
registers.esp: 1635776
registers.ebp: 1635820
registers.esi: 0
registers.edi: 37879808
stacktrace:
_vsnprintf+0xa9 strncpy_s-0x79 ntdll+0x79e31 @ 0x775f9e31
GetProfileStringW+0x5b74 EnumResourceNamesW-0x40041 kernel32+0x43120 @ 0x76f13120
00d758d6e9511c0e50f5f919ab2055bc25de1fa410f903bbe407de41ec7ab61d+0x1249 @ 0x401249
00d758d6e9511c0e50f5f919ab2055bc25de1fa410f903bbe407de41ec7ab61d+0x2b93 @ 0x402b93
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

success 0 0
1727545287.06325
__exception__
exception.address: 0x775f9e58
exception.instruction: cmp byte ptr [eax + 7], 5
exception.instruction_r: 80 78 07 05 0f 84 64 8a 01 00 f6 40 07 3f 0f 84
exception.symbol: _vsnprintf+0xd0 strncpy_s-0x52 ntdll+0x79e58
exception.exception_code: 0xc0000005
registers.eax: 4294967288
registers.ecx: 37879808
registers.edx: 0
registers.ebx: 0
registers.esp: 1635776
registers.ebp: 1635820
registers.esi: 0
registers.edi: 37879808
stacktrace:
_vsnprintf+0xa9 strncpy_s-0x79 ntdll+0x79e31 @ 0x775f9e31
GetProfileStringW+0x5b74 EnumResourceNamesW-0x40041 kernel32+0x43120 @ 0x76f13120
00d758d6e9511c0e50f5f919ab2055bc25de1fa410f903bbe407de41ec7ab61d+0x1249 @ 0x401249
00d758d6e9511c0e50f5f919ab2055bc25de1fa410f903bbe407de41ec7ab61d+0x2b93 @ 0x402b93
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

success 0 0
1727545287.06325
__exception__
exception.address: 0x775f9e58
exception.instruction: cmp byte ptr [eax + 7], 5
exception.instruction_r: 80 78 07 05 0f 84 64 8a 01 00 f6 40 07 3f 0f 84
exception.symbol: _vsnprintf+0xd0 strncpy_s-0x52 ntdll+0x79e58
exception.exception_code: 0xc0000005
registers.eax: 4294967288
registers.ecx: 37879808
registers.edx: 0
registers.ebx: 0
registers.esp: 1635776
registers.ebp: 1635820
registers.esi: 0
registers.edi: 37879808
stacktrace:
_vsnprintf+0xa9 strncpy_s-0x79 ntdll+0x79e31 @ 0x775f9e31
GetProfileStringW+0x5b74 EnumResourceNamesW-0x40041 kernel32+0x43120 @ 0x76f13120
00d758d6e9511c0e50f5f919ab2055bc25de1fa410f903bbe407de41ec7ab61d+0x1249 @ 0x401249
00d758d6e9511c0e50f5f919ab2055bc25de1fa410f903bbe407de41ec7ab61d+0x2b93 @ 0x402b93
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

success 0 0
1727545287.06325
__exception__
exception.address: 0x775f9e58
exception.instruction: cmp byte ptr [eax + 7], 5
exception.instruction_r: 80 78 07 05 0f 84 64 8a 01 00 f6 40 07 3f 0f 84
exception.symbol: _vsnprintf+0xd0 strncpy_s-0x52 ntdll+0x79e58
exception.exception_code: 0xc0000005
registers.eax: 4294967288
registers.ecx: 37879808
registers.edx: 0
registers.ebx: 0
registers.esp: 1635776
registers.ebp: 1635820
registers.esi: 0
registers.edi: 37879808
stacktrace:
_vsnprintf+0xa9 strncpy_s-0x79 ntdll+0x79e31 @ 0x775f9e31
GetProfileStringW+0x5b74 EnumResourceNamesW-0x40041 kernel32+0x43120 @ 0x76f13120
00d758d6e9511c0e50f5f919ab2055bc25de1fa410f903bbe407de41ec7ab61d+0x1249 @ 0x401249
00d758d6e9511c0e50f5f919ab2055bc25de1fa410f903bbe407de41ec7ab61d+0x2b93 @ 0x402b93
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

success 0 0
1727545287.06325
__exception__
exception.address: 0x775f9e58
exception.instruction: cmp byte ptr [eax + 7], 5
exception.instruction_r: 80 78 07 05 0f 84 64 8a 01 00 f6 40 07 3f 0f 84
exception.symbol: _vsnprintf+0xd0 strncpy_s-0x52 ntdll+0x79e58
exception.exception_code: 0xc0000005
registers.eax: 4294967288
registers.ecx: 37879808
registers.edx: 0
registers.ebx: 0
registers.esp: 1635776
registers.ebp: 1635820
registers.esi: 0
registers.edi: 37879808
stacktrace:
_vsnprintf+0xa9 strncpy_s-0x79 ntdll+0x79e31 @ 0x775f9e31
GetProfileStringW+0x5b74 EnumResourceNamesW-0x40041 kernel32+0x43120 @ 0x76f13120
00d758d6e9511c0e50f5f919ab2055bc25de1fa410f903bbe407de41ec7ab61d+0x1249 @ 0x401249
00d758d6e9511c0e50f5f919ab2055bc25de1fa410f903bbe407de41ec7ab61d+0x2b93 @ 0x402b93
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

success 0 0
1727545287.06325
__exception__
exception.address: 0x775f9e58
exception.instruction: cmp byte ptr [eax + 7], 5
exception.instruction_r: 80 78 07 05 0f 84 64 8a 01 00 f6 40 07 3f 0f 84
exception.symbol: _vsnprintf+0xd0 strncpy_s-0x52 ntdll+0x79e58
exception.exception_code: 0xc0000005
registers.eax: 4294967288
registers.ecx: 37879808
registers.edx: 0
registers.ebx: 0
registers.esp: 1635776
registers.ebp: 1635820
registers.esi: 0
registers.edi: 37879808
stacktrace:
_vsnprintf+0xa9 strncpy_s-0x79 ntdll+0x79e31 @ 0x775f9e31
GetProfileStringW+0x5b74 EnumResourceNamesW-0x40041 kernel32+0x43120 @ 0x76f13120
00d758d6e9511c0e50f5f919ab2055bc25de1fa410f903bbe407de41ec7ab61d+0x1249 @ 0x401249
00d758d6e9511c0e50f5f919ab2055bc25de1fa410f903bbe407de41ec7ab61d+0x2b93 @ 0x402b93
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

success 0 0
1727545287.06325
__exception__
exception.address: 0x775f9e58
exception.instruction: cmp byte ptr [eax + 7], 5
exception.instruction_r: 80 78 07 05 0f 84 64 8a 01 00 f6 40 07 3f 0f 84
exception.symbol: _vsnprintf+0xd0 strncpy_s-0x52 ntdll+0x79e58
exception.exception_code: 0xc0000005
registers.eax: 4294967288
registers.ecx: 37879808
registers.edx: 0
registers.ebx: 0
registers.esp: 1635776
registers.ebp: 1635820
registers.esi: 0
registers.edi: 37879808
stacktrace:
_vsnprintf+0xa9 strncpy_s-0x79 ntdll+0x79e31 @ 0x775f9e31
GetProfileStringW+0x5b74 EnumResourceNamesW-0x40041 kernel32+0x43120 @ 0x76f13120
00d758d6e9511c0e50f5f919ab2055bc25de1fa410f903bbe407de41ec7ab61d+0x1249 @ 0x401249
00d758d6e9511c0e50f5f919ab2055bc25de1fa410f903bbe407de41ec7ab61d+0x2b93 @ 0x402b93
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

success 0 0
1727545287.06325
__exception__
exception.address: 0x775f9e58
exception.instruction: cmp byte ptr [eax + 7], 5
exception.instruction_r: 80 78 07 05 0f 84 64 8a 01 00 f6 40 07 3f 0f 84
exception.symbol: _vsnprintf+0xd0 strncpy_s-0x52 ntdll+0x79e58
exception.exception_code: 0xc0000005
registers.eax: 4294967288
registers.ecx: 37879808
registers.edx: 0
registers.ebx: 0
registers.esp: 1635776
registers.ebp: 1635820
registers.esi: 0
registers.edi: 37879808
stacktrace:
_vsnprintf+0xa9 strncpy_s-0x79 ntdll+0x79e31 @ 0x775f9e31
GetProfileStringW+0x5b74 EnumResourceNamesW-0x40041 kernel32+0x43120 @ 0x76f13120
00d758d6e9511c0e50f5f919ab2055bc25de1fa410f903bbe407de41ec7ab61d+0x1249 @ 0x401249
00d758d6e9511c0e50f5f919ab2055bc25de1fa410f903bbe407de41ec7ab61d+0x2b93 @ 0x402b93
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

success 0 0
1727545287.06325
__exception__
exception.address: 0x775f9e58
exception.instruction: cmp byte ptr [eax + 7], 5
exception.instruction_r: 80 78 07 05 0f 84 64 8a 01 00 f6 40 07 3f 0f 84
exception.symbol: _vsnprintf+0xd0 strncpy_s-0x52 ntdll+0x79e58
exception.exception_code: 0xc0000005
registers.eax: 4294967288
registers.ecx: 37879808
registers.edx: 0
registers.ebx: 0
registers.esp: 1635776
registers.ebp: 1635820
registers.esi: 0
registers.edi: 37879808
stacktrace:
_vsnprintf+0xa9 strncpy_s-0x79 ntdll+0x79e31 @ 0x775f9e31
GetProfileStringW+0x5b74 EnumResourceNamesW-0x40041 kernel32+0x43120 @ 0x76f13120
00d758d6e9511c0e50f5f919ab2055bc25de1fa410f903bbe407de41ec7ab61d+0x1249 @ 0x401249
00d758d6e9511c0e50f5f919ab2055bc25de1fa410f903bbe407de41ec7ab61d+0x2b93 @ 0x402b93
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

success 0 0
1727545287.06325
__exception__
exception.address: 0x775f9e58
exception.instruction: cmp byte ptr [eax + 7], 5
exception.instruction_r: 80 78 07 05 0f 84 64 8a 01 00 f6 40 07 3f 0f 84
exception.symbol: _vsnprintf+0xd0 strncpy_s-0x52 ntdll+0x79e58
exception.exception_code: 0xc0000005
registers.eax: 4294967288
registers.ecx: 37879808
registers.edx: 0
registers.ebx: 0
registers.esp: 1635776
registers.ebp: 1635820
registers.esi: 0
registers.edi: 37879808
stacktrace:
_vsnprintf+0xa9 strncpy_s-0x79 ntdll+0x79e31 @ 0x775f9e31
GetProfileStringW+0x5b74 EnumResourceNamesW-0x40041 kernel32+0x43120 @ 0x76f13120
00d758d6e9511c0e50f5f919ab2055bc25de1fa410f903bbe407de41ec7ab61d+0x1249 @ 0x401249
00d758d6e9511c0e50f5f919ab2055bc25de1fa410f903bbe407de41ec7ab61d+0x2b93 @ 0x402b93
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

success 0 0
1727545287.06325
__exception__
exception.address: 0x775f9e58
exception.instruction: cmp byte ptr [eax + 7], 5
exception.instruction_r: 80 78 07 05 0f 84 64 8a 01 00 f6 40 07 3f 0f 84
exception.symbol: _vsnprintf+0xd0 strncpy_s-0x52 ntdll+0x79e58
exception.exception_code: 0xc0000005
registers.eax: 4294967288
registers.ecx: 37879808
registers.edx: 0
registers.ebx: 0
registers.esp: 1635776
registers.ebp: 1635820
registers.esi: 0
registers.edi: 37879808
stacktrace:
_vsnprintf+0xa9 strncpy_s-0x79 ntdll+0x79e31 @ 0x775f9e31
GetProfileStringW+0x5b74 EnumResourceNamesW-0x40041 kernel32+0x43120 @ 0x76f13120
00d758d6e9511c0e50f5f919ab2055bc25de1fa410f903bbe407de41ec7ab61d+0x1249 @ 0x401249
00d758d6e9511c0e50f5f919ab2055bc25de1fa410f903bbe407de41ec7ab61d+0x2b93 @ 0x402b93
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

success 0 0
行为判定
动态指标
分配可读-可写-可执行内存(通常用于自解压) (1 个事件)
Time & API Arguments Status Return Repeated
1727545280.21925
NtProtectVirtualMemory
process_handle: 0xffffffff
base_address: 0x0244f000
length: 106496
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 600
success 0 0
该二进制文件可能包含加密或压缩数据,表明使用了打包工具 (2 个事件)
section {'name': '.rsrc', 'virtual_address': '0x01ebc000', 'virtual_size': '0x0001c9c4', 'size_of_data': '0x0001ca00', 'entropy': 7.860666048319157} entropy 7.860666048319157 description 发现高熵的节
entropy 0.5654320987654321 description 此PE文件的整体熵值较高
网络通信
与未执行 DNS 查询的主机进行通信 (1 个事件)
host 114.114.114.114
尝试解除Cuckoo监控的Windows函数的钩子 (1 个事件)
Time & API Arguments Status Return Repeated
1727545287.60925
__anomaly__
tid: 2660
subcategory: exception
function_name:
message: Encountered 1025 exceptions, quitting.
success 0 0
文件已被 VirusTotal 上 58 个反病毒引擎识别为恶意 (50 out of 58 个事件)
ALYac Trojan.GenericKDZ.43558
APEX Malicious
AVG Win32:Malware-gen
Acronis suspicious
Ad-Aware Trojan.GenericKDZ.43558
AhnLab-V3 Win-Trojan/Gandcrab.Exp
Antiy-AVL Trojan/Win32.TSGeneric
Arcabit Trojan.Generic.DAA26
Avast Win32:Malware-gen
Avira TR/Crypt.XPACK.neaon
BitDefender Trojan.GenericKDZ.43558
CAT-QuickHeal Trojan.Chapak.ZZ5
ClamAV Win.Packed.Gandcrab-6552923-4
Comodo TrojWare.Win32.Chapak.BD@7m1jh2
CrowdStrike win/malicious_confidence_100% (D)
Cybereason malicious.53d166
Cylance Unsafe
Cyren W32/S-1f5dd279!Eldorado
DrWeb Trojan.PWS.Banker1.27530
ESET-NOD32 Win32/Filecoder.GandCrab.B
Emsisoft Trojan.GenericKDZ.43558 (B)
Endgame malicious (high confidence)
F-Prot W32/S-1f5dd279!Eldorado
F-Secure Trojan.TR/Crypt.XPACK.neaon
FireEye Generic.mg.795f46b53d16682c
Fortinet W32/Kryptik.GVPW!tr
GData Trojan.GenericKDZ.43558
Ikarus Trojan-Ransom.GandCrab
Invincea heuristic
Jiangmin Trojan.PSW.Coins.e
K7AntiVirus Trojan ( 003e58dd1 )
K7GW Trojan ( 655333331 )
Kaspersky HEUR:Trojan.Win32.Generic
MAX malware (ai score=82)
Malwarebytes Trojan.Bunitu
McAfee GenericRXEX-YA!795F46B53D16
McAfee-GW-Edition BehavesLike.Win32.Generic.dh
MicroWorld-eScan Trojan.GenericKDZ.43558
Microsoft Trojan:Win32/Gandcrab!rfn
NANO-Antivirus Trojan.Win32.Gozi.faictu
Panda Trj/Genetic.gen
Qihoo-360 HEUR/QVM10.1.4DA1.Malware.Gen
Rising Trojan.Kryptik!8.8 (TFE:5:1Q7mJBFe8OT)
SUPERAntiSpyware Trojan.Agent/Gen-Kryptik
SentinelOne DFI - Malicious PE
Sophos Mal/Agent-AUL
Symantec Packed.Generic.525
TACHYON Ransom/W32.GandCrab
Trapmine malicious.high.ml.score
TrendMicro Ransom_GANDCRAB.SMD3
可视化分析
二进制图像
数据导入图像 288x288
数据导入图像 224x224
数据导入图像 192x192
数据导入图像 160x160
数据导入图像 128x128
数据导入图像 96x96
数据导入图像 64x64
数据导入图像 32x32
运行截图
暂无运行截图 该样本运行过程中未生成截图

👋 欢迎使用 ChatHawk

我是您的恶意软件分析助手,可以帮您分析和解读恶意软件报告。请随时向我提问!

🔍 主要威胁分析
⚡ 行为特征
🛡️ 防护建议
🔧 技术手段
🎯 检测方法
🤖

PE Compile Time

2018-04-16 22:26:57

PE Imphash

f58d7780a987fa064f39647f248f6acf

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x00008ff1 0x00009000 6.578829431393439
.rdata 0x0000a000 0x00003d2a 0x00003e00 4.876135363335656
.data 0x0000e000 0x01ead350 0x00001600 2.0839590025995793
.rsrc 0x01ebc000 0x0001c9c4 0x0001ca00 7.860666048319157
.reloc 0x01ed9000 0x00007b54 0x00007c00 0.9625783410225125

Resources

Name Offset Size Language Sub-language File type
LAVIFIPOSOXOHILUJUSUCUFUSU 0x01ebc77c 0x00000f89 LANG_NEUTRAL SUBLANG_NEUTRAL None
NIMUSEBUYUBEPIJEPAPUHASOVO 0x01ebd708 0x00000c10 LANG_NEUTRAL SUBLANG_NEUTRAL None
UAOSEL 0x01ebe318 0x00018afb LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_ICON 0x01ed737c 0x00000568 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_ICON 0x01ed737c 0x00000568 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x01ed8944 0x00000058 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x01ed8944 0x00000058 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x01ed8944 0x00000058 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x01ed8944 0x00000058 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x01ed8944 0x00000058 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x01ed8944 0x00000058 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x01ed8944 0x00000058 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x01ed8944 0x00000058 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x01ed8944 0x00000058 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x01ed8944 0x00000058 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x01ed8944 0x00000058 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x01ed8944 0x00000058 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x01ed8944 0x00000058 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x01ed8944 0x00000058 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x01ed8944 0x00000058 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x01ed8944 0x00000058 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x01ed8944 0x00000058 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x01ed8944 0x00000058 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x01ed8944 0x00000058 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x01ed8944 0x00000058 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x01ed8944 0x00000058 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x01ed8944 0x00000058 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x01ed8944 0x00000058 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x01ed8944 0x00000058 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x01ed8944 0x00000058 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x01ed8944 0x00000058 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x01ed8944 0x00000058 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_GROUP_ICON 0x01ed89b0 0x00000014 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_GROUP_ICON 0x01ed89b0 0x00000014 LANG_NEUTRAL SUBLANG_NEUTRAL None

Imports

Library KERNEL32.dll:
0x40a034 SetEvent
0x40a038 DefineDosDeviceW
0x40a03c DefineDosDeviceA
0x40a044 DebugBreakProcess
0x40a04c DeactivateActCtx
0x40a050 CreateTimerQueue
0x40a054 CreateTapePartition
0x40a058 CreateSemaphoreW
0x40a05c CreateSemaphoreA
0x40a060 DeviceIoControl
0x40a064 LoadLibraryW
0x40a070 DeleteTimerQueueEx
0x40a074 DeleteTimerQueue
0x40a078 DeleteFileW
0x40a07c DeleteFileA
0x40a080 GetLocalTime
0x40a084 lstrlenW
0x40a088 GetProcAddress
0x40a08c SleepEx
0x40a090 OpenProcess
0x40a094 VirtualProtect
0x40a098 TlsGetValue
0x40a0a4 GetConsoleWindow
0x40a0a8 GlobalFlags
0x40a0ac WriteConsoleOutputW
0x40a0b0 SetCommMask
0x40a0b8 GetVersionExA
0x40a0bc CreateFileW
0x40a0c0 SetFilePointer
0x40a0c4 WriteConsoleW
0x40a0c8 GetStringTypeW
0x40a0cc MultiByteToWideChar
0x40a0d0 LCMapStringW
0x40a0d4 RaiseException
0x40a0d8 RtlUnwind
0x40a0dc GetCommandLineA
0x40a0e0 HeapSetInformation
0x40a0e4 GetStartupInfoW
0x40a0e8 HeapAlloc
0x40a0ec GetLastError
0x40a0f0 HeapFree
0x40a0f8 EncodePointer
0x40a0fc DecodePointer
0x40a100 TlsAlloc
0x40a104 TlsSetValue
0x40a108 TlsFree
0x40a110 GetModuleHandleW
0x40a114 SetLastError
0x40a118 GetCurrentThreadId
0x40a120 CloseHandle
0x40a12c IsDebuggerPresent
0x40a130 TerminateProcess
0x40a134 GetCurrentProcess
0x40a140 ExitProcess
0x40a144 WriteFile
0x40a148 GetStdHandle
0x40a14c GetModuleFileNameW
0x40a150 GetModuleFileNameA
0x40a158 WideCharToMultiByte
0x40a160 SetHandleCount
0x40a168 GetFileType
0x40a170 HeapCreate
0x40a178 GetTickCount
0x40a17c GetCurrentProcessId
0x40a184 Sleep
0x40a188 HeapSize
0x40a18c GetCPInfo
0x40a190 GetACP
0x40a194 GetOEMCP
0x40a198 IsValidCodePage
0x40a19c SetStdHandle
0x40a1a0 GetConsoleCP
0x40a1a4 GetConsoleMode
0x40a1a8 FlushFileBuffers
0x40a1ac HeapReAlloc
Library USER32.dll:
0x40a1b4 UnregisterClassW
0x40a1b8 SetPropW
Library GDI32.dll:
0x40a008 PlayEnhMetaFile
0x40a00c SetTextColor
0x40a014 ScaleWindowExtEx
0x40a018 ExtTextOutW
0x40a01c EndPage
0x40a020 DeleteColorSpace
0x40a024 OffsetClipRgn
0x40a028 GetBitmapBits
Library ADVAPI32.dll:
0x40a000 ReportEventW
Library ole32.dll:
0x40a1c0 CoGetObject
0x40a1cc CLSIDFromString

L!This 10m cannot be run in DOS mode.
tRichH
`.rdata
@.data
@.reloc
SV3W30u
EPEPVh
sG3fE}ffE}fEPuEuPV
sUhx@
V038T$
+SV:@W|$
SSSSSSSSS
EPEPSPSSSS
} EPShP@
EPSSSSS
F;5TJ%
EPSSSSEPS
EPu5TJ%
EPSSSS
DDDDDDDDDDDDDD
^_UWVu
DDDDDDDDDDDDDD
YWM6h@
$UQQSVWd5
SVWE3PPPuu
E_^[E]
UQSVW}
YY]jXhh@
woVW=+
tAt2t$
FGIuX^_]
UQSV5@
;r>Pu;
t3@_^]
=RCCt=MOCt
=csmu*
8csmu8x
t*9csmu"A
EPYYE"
>csmuB~
YYtaSV5
_YYPV4
YYt)SVY5
HtHu4j
=MOCt*=RCCt#u$u u
EPEPVu WM
ESx;7|G;p
@u%u$u
E;Mr[_^
Yu\39~
EPEPuu WM
EGE~rF
.u$}u ]uE
u$u uSu
tR99u2y
u$Vu u
Q 3@_^[];
YYt:V5@
PeYF,t
PWYF4t
PIYF<t
P;YF@t
P-YFDt
PYFHt
YF\=p@
~lt#W-
43_V5@
YYt0V5@
eE}hB@
VW_^]M
W>+~,WPVuYP<
Y/V|Yt
Y}3u;5@+
YY3BU8+
ffffffE
3PPPPP
1E3PeuEEEEd
Y__^[]Q
:=E_^[]E
9csmu)=x@
YYt|< ;u
,@;u`3@
uNSW<x+
UQSVxG
@u^VY@
ItUhtDlt
HHtXHHt
4itqnt(o
t-RPSWL2
0@?If90t
;u+(;u
u'~! OFt
`pM_^3[
8csmu*x
YYuTVWhng@
3]j h@
3PPPPPV0
@Y<v*V0
^SSSSSyj
;tFtA3
M_^3[j
S^`N`H
j$Y~\d9
QY^`[_^]
VW39=,+
t.t$<"u
S3VU>=YX
t?VSP4
3Y[_^5+
3PPPPP
FA>\t>"u&
uUEPSS}
=?sJMsB
Y;t)UEP
3wf93t
f90uW=X@
VVV+V@PSVVE
YE;t*VVuPuSVV
j@j ^Vv
H3H/5 +
;rSWf9M
E3E3;u
F$|3@_^
^]SVWT$
URPQQhj@
t;T$4t
;v.4v\
UVWS33333[_^]
33333USVWj
_^[]Ul$
YYu,9E
3PeuEEd
3W;to=
P^Y9_t
uV8Y_^[]
t4V0;t(W8jYt
Fpt"~l
lVYYYEE
WPWPWv
whu;5@
8]tEMap<u
TM_^3[j
iM}_hu
KY%u @
USVWUj
P(RP$R
UPjhPx@
t:|$,t
;t$,v-4v
UQPXY]Y[
S3VW;|[;
t6<0t0=@
W34809}
;u_8E
4 3,9E
P4UM`8
DQP C@
,PVEP$
3+4H;M
(PVHP$
(PVHP$
r3VVhU
QH++PPVh
(P+P5P$
\,+48;E
8+0[M_3^
_};=@+
B(;r3_^[]
1E3PEd
f;v6;t
Map_^[;t&;w j"^0
8]tE`py
<E`p0M
YY]VD$
Y+t"+t
+tY+uCP}
Uw\]Yp
u>OdMGd
uwdSUY
Eu}hX@
3M_^3[
^08_^]
ft'Ou"+
jPfDJXdf
eY3MW0u
v(~v,vv0nv4fv
^v8Vv<N@v@CvD;vH3vL+vP#vT
vdvhvlvpvt
P&YF0;
Yv4;5<@
PpYF8;
P^YF<;
PLYF@;
P:YFD;
P(YFH;
YvL;5T@
S3VW;~E
@;u+H;}
39](SSu
]9]tWuu
};~Bj3X
3;t?uWuuu
t"SS9] u
EYe_^[M3
u(Eu$u u
ES3VW]9]
39] SSu
ESEYe_^[M3l
PYYt}E
E`p;39]
WVEnY;u
EU_^j
UV3PPPPPPPPU
$s ^UV3PPPPPPPPU
$sF ^UWVSM
donekutiguyilo
yojimide tavugosugugo zebejegikivejoxegafuve mida xazikelizedoxirivixavizozesafa canemaficave renixadatebicofuti wefogucubohexuvi yicayanemoyi cehijetudexicawomutegafefopiwoze
mogigaxujazajiyanivoxazowiwaye paxoliwuropiyenazizo
culicoyamiyobewija yerosororero
katixebalewu
juyiwadutoxazepayu wenesi huhosicefulecuzidatobojoseyatu talasuyidofedapobuwonayaru vu
botahutucozamevijiharabemebopobo zeharupuyucitefu vukuyidediye
guwujejixafupa celunuyifuno gaceboracoyenusa
invalid string position
string too long
Unknown exception
bad allocation
bad exception
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
(null)
`h````
xpxxxx
CorExitProcess
Complete Object Locator'
Class Hierarchy Descriptor'
Base Class Array'
Base Class Descriptor at (
Type Descriptor'
`local static thread guard'
`managed vector copy constructor iterator'
`vector vbase copy constructor iterator'
`vector copy constructor iterator'
`dynamic atexit destructor for '
`dynamic initializer for '
`eh vector vbase copy constructor iterator'
`eh vector copy constructor iterator'
`managed vector destructor iterator'
`managed vector constructor iterator'
`placement delete[] closure'
`placement delete closure'
`omni callsig'
delete[]
new[]
`local vftable constructor closure'
`local vftable'
`udt returning'
`copy constructor closure'
`eh vector vbase constructor iterator'
`eh vector destructor iterator'
`eh vector constructor iterator'
`virtual displacement map'
`vector vbase constructor iterator'
`vector destructor iterator'
`vector constructor iterator'
`scalar deleting destructor'
`default constructor closure'
`vector deleting destructor'
`vbase destructor'
`string'
`local static guard'
`typeof'
`vcall'
`vbtable'
`vftable'
operator
delete
__unaligned
__restrict
__ptr64
__eabi
__clrcall
__fastcall
__thiscall
__stdcall
__pascal
__cdecl
__based(
HH:mm:ss
dddd, MMMM dd, yyyy
MM/dd/yy
December
November
October
September
August
February
January
Saturday
Friday
Thursday
Wednesday
Tuesday
Monday
Sunday
`h`hhh
xppwpp
GetProcessWindowStation
GetUserObjectInformationW
GetLastActivePopup
GetActiveWindow
MessageBoxW
 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
GetVersionExA
WriteConsoleOutputW
SetCommMask
GlobalFlags
GetConsoleWindow
SetEnvironmentVariableW
WritePrivateProfileStructW
TlsGetValue
VirtualProtect
OpenProcess
SleepEx
GetProcAddress
LoadLibraryW
SetEvent
DefineDosDeviceW
DefineDosDeviceA
DebugSetProcessKillOnExit
DebugBreakProcess
DebugActiveProcessStop
DeactivateActCtx
CreateTimerQueue
CreateTapePartition
CreateSemaphoreW
CreateSemaphoreA
DeviceIoControl
DeleteVolumeMountPointW
DeleteVolumeMountPointA
DeleteTimerQueueTimer
DeleteTimerQueueEx
DeleteTimerQueue
DeleteFileW
DeleteFileA
GetLocalTime
lstrlenW
KERNEL32.dll
SetPropW
UnregisterClassW
USER32.dll
GetBitmapBits
OffsetClipRgn
DeleteColorSpace
EndPage
ExtTextOutW
ScaleWindowExtEx
GetTextExtentPoint32A
SetTextColor
PlayEnhMetaFile
ModifyWorldTransform
GDI32.dll
ReportEventW
ADVAPI32.dll
CoGetObject
CLSIDFromString
CreateOleAdviseHolder
OleCreateStaticFromData
CreatePointerMoniker
ole32.dll
RaiseException
RtlUnwind
GetCommandLineA
HeapSetInformation
GetStartupInfoW
HeapAlloc
GetLastError
HeapFree
IsProcessorFeaturePresent
EncodePointer
DecodePointer
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
GetModuleHandleW
SetLastError
GetCurrentThreadId
InterlockedDecrement
CloseHandle
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
EnterCriticalSection
LeaveCriticalSection
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapSize
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
HeapReAlloc
LCMapStringW
MultiByteToWideChar
GetStringTypeW
WriteConsoleW
SetFilePointer
CreateFileW
.?AVbad_alloc@std@@
.?AVexception@std@@
.?AVlogic_error@std@@
.?AVlength_error@std@@
.?AVout_of_range@std@@
.?AVtype_info@@
.?AVbad_exception@std@@
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
Coxuvazegesu. Cidulasa. Bahoho me. Gevulaheloye hozo. Jiki lovaxa ruju. Furodehuhamove toketumo difejigefaso zamoluyugihepi pigudisirabu. Zogasojiso rizosexa. Boneramuyoke zaniboruki kekimuxurupovo juro tavugoyiyiyu. Gosekado hajedumiyabeda seyeruxiyehoxi decekajegexo zayagopegiyutu. Suwofoboli. Kuhubujo jukalo lijogagulucu ruke yuroyupoheve. Livudu. Biyuyinaxode yadosa wewecarixa. Gevirehu husezoyifu wu pivizimaja. Kacanaluhibu zolufaforafodu jugi foyunicekinobe mi. Toku wacitixa haluxulu gezelokaxe famolaliye. Vexefaki wobe koyetepeze sokaxovo. Vaho. Teribewi vojohikino niwohelagobaji. Rasu larulegafe. Fojixeja lugivoci fawizale te xi. Rubo. Doxuyebudamo. Zigoha. Xafaze nevidi zahokaledeti cegodace gudohakomoje. Wehogidipokafu sucojaxifogu jeyita. Bemoje yuzebazobupu yobume. Telawefi budiwuzahi beliga cakujakacoza zusu. Sezebonulise tu sidafohixeka hotiyiwifuvuda monixuxaho. Toguboxisito fijivahimada xucohe cavu liladoxunapibi. Fuzidagososepu dahemelibuze vahilipezipa. Xurotocomupe koferidi marijoya neyevetuwipu febedopi. Yocomujiyezejo. Susuti. Mevumaviza sehapezo fogijuxonuco sego gilibobixa. Yogacikuyileto zoyihebezobuwu. Ciwudoca duferojudewoce kodikici su. Pizipi karebegivi nenasabugakuku cehaliso zazelopuguyewo. Tunedobeduhixo. Tiwiro zacoyemiba tiyupihaloxude lihebomiwaroti. Jaxosu hevoyecamibezi vehudu. Ninexawu vofapexawi xusukazerera co. Sugobalixiwe zopi zusumokotuca wozibiyu. Hurenosuxipa menupo nagarozukafoto vibibozuvema. Yuzu tedo rajuxejilizuyo. Wi jufebodoyilubu lico. Kibagegu zove wanavetogi sada. Yaro johefa jagoma tecawija. Tazepu reduneyijomo. Cugaga hufi senogi. Fakekuhonivaso womazajite zapuvayitolo hu. Rejevutusibebi ci xidusa. Werice cizaxafixoba. Moyevetiza babage woxodocesapa jayeyazedexisu. Doyomuho sa degumofipasi. Ca jocowenodipe ce. Ciduju ciyexawekozari xecufazukofate. Paxu doca gigiyovekeso doxofeza. Vuyubokeju nikudihube kopuka folozepiyiwa yayehacubene. Gijuguda. Nepikotigodi. Muwu socudiwuzemi kevaso hirovacopisagi bepisa. Toxiwuca. Tojosutuya dolezosi wayuhumunicidu. Ladi. Pibawesa cavawice weco tuwijaharora jucozibubajo. Cejedamaca viyeyo jele fuwahokenono huwumipu. Tedima bo. Zodeseyile meje vuxotipufite yiyapeli. Tayazu kesijavo bohisabiyo hoxucojanukaza. Haviwexepeniwa. Negikicudosoyi huru. Yadeyafipi. Hajabo norexoke neveki vubakive kesaxuluciva. Vuhufira. Zepibomigifuzi huhike bazuki lajatovita co. Fugorakoja tobuyuko xuhirurenage puxakenihifeza cesilo. Tamomoxihulone xeso damerureladu padocatuzumuru. Yajehuzika. Fupode cigosase tidiyoje yuxamilode. Done. Kutiguyiloyoji. Mide. Tavugosugugo zebejegi kivejo xegafu. Vemidaxazikeli zedoxirivixavi zozesafacane maficave renixadatebi. Cofutiwe fogucu. Bo hexuvi yica yanemoyi. Cehijetudexica womutega fefo. Piwozemo gi gaxujazaji yanivoxazo wiwa. Yepaxoliwu ropiye nazizofoco naleseyimucaye dupoxiyoni. Cemibehaha sepawude. Hukusidadagara teri. Sovuhi hicu li coya. Miyobewi jayero soro reroju febu. Suyiyofakitawe vilereti xaha weraluzujiceho wodizo. Duremefu lebiti nekatixe. Ba lewufevu jokagomihacice yeyevaxu di. Zerafasumate vakuvokogumiwu botahutucozame vijiharabemebo pobozeharupu. Yuci tefuvukuyide diyeju yiwadu. Toxaze payu wenesihu ho sice. Fulecuzidato bojose yatutalasu yidofedapobuwo nayaruta. Pera ru pixoyo. Wahulepoki kuwucetu magikezacacudi. Cuzodanecolola rumali vuza. Wujukigi su nudoxe fesepexuje rivugelavo. Meju calowoxuwuye lepena darajuho jo. Jinupuca yiruredo pofoxo. Banijodirivu femaxusunu tavecehenubepu hugu wujejixafupace. Lunuyifunogace boracoyenu saluwahoze. Pumoju hogorunufiguna. Toduho keje kayi lakadolipoweli. Lebaxupewuri xazonanotale. Febuhafuca yepecaxubo foserogati difevicezako. Wukewofe. Javehebajigivi hazifuyacizo. Gizanugipa yacu cipiwete wava salogejuxosidi. Joharu xayogora yocicene hozogolehe josa. Zobilo noziwovazefa bofavisefuno. Tudo vozaweso. Jimetasuji nefegecipa noluyi fozoberi fezidawazu. Geniyokuluyese. Puhezimo. Safodidusepeja cuda. Gemuva falomi seyi. Cuwatitako ne. Yepijo sudo
Merureladupado catu zumu ruyajehuzi. Kafupo deci. Gosasetidiyoje yuxamilo dedonekutiguyi. Loyoji mideta vugosugu gozebe jegikivejoxega. Fuve midaxazi kelizedoxirivi xavi. Zozesa facane maficaverenixa datebico. Fu tiwefogucubohe xuviyicayane moyicehijetu. Dexicawomutega fefopi. Wozemogigaxuja zajiyanivoxa zowiwayepa xoliwuropiye. Nazizofoco naleseyimucaye dupoxi yonicemibehaha sepawudehukusi. Dadagarateri sovuhi hiculicoyamiyo bewijayeroso rorerojufebu. Suyiyofakita wevilere tixa. Ha. Wera. Luzujicehowo di zodure me. Fulebitinekati xebalewufe. Vujokagomihaci. Ceyeyevaxudize rafasu mate vakuvo kogu. Miwubota hu tucozameviji harabeme. Bopobozeharu puyucite fuvukuyidediye juyi. Wadutoxa zepayuwenesi huhosicefu lecuzidatobo. Jose yatutalasuyi dofeda pobu wona. Yarutapera rupixoyowa hulepokikuwu cetumagike zacacu. Dicuzodanecolo larumalivu zawujukigi. Sunudo xefesepe. Xuje rivu. Gelavomeju calo woxuwuye lepenadarajuho. Jojinu. Pucayi ruredopofo xoba nijodirivufema xusunutave. Cehenubepu huguwujejixafu pace. Lu nuyifunogacebo raco. Yenusa luwahoze. Pu moju hogoru. Nufigunatodu hokejekayila kadolipoweli lebaxupewurixa zona. Notalefe buhafucayepeca xubo fose. Rogatidifevice. Zakowuke wo fejavehebaji. Givihazifuya cizo gizanugipaya cuci. Piwetewavasalo gejuxosidijo haruxayogo rayocice. Nehozogolehejo sa. Zobi lonoziwo. Vazefabo favisefunotudo vozaweso. Jimetasujine fegecipano luyifo zoberi. Fezidawazuge niyokuluyesepu hezimosa fodidu sepejacudage. Muvafalomi seyicuwatita. Koneyepijosudo takupovete mulavifipo. Soxohi lujusucufu. Susabohenihi deyadizerule viyahudejita fepiji wa. Gekuwi. Zumede locifucavoxi li tuva bujupexoyixuha. Pi kosihemuku xabi kugikijabeso. Gutu yozukoni pihowusocegu tosixuxa. Cojofodagolu hitokiho nizezigesojevi lohamocugoro. Zotahujami jurukuki yipuca. Je tuto lorubewomape. Bokazumigesa kukixo. Yefepuwahu. Jecuge tutunivileralu wafujojoxa. Ruku lurazapuneku cedolape dubojirehe betajedara. Guluyodawo huracuremaxojo. Sewuma jamepozote ra. Mexizosima. Keluxepuvemi razelerineka. Bati. Gisojero jezotolupasisu li. Muri mejozuzuyu. Wa. Kocapa vayifirebigu heyi hemesujukeyupo cunucipojafiya. Yamapino nebaza. Hinojagoho xogamekixituno. Dolekoxosizeve. Ke cecudixe tixakehereseye taso. Horabenusereva takenevagume gedagupegalehe. Ruwagobukirede xuvuwa jeyowu jovutuzudi. Posuxezo yirudipufo. Picive hopo. Wegigore riveke karisa ruginilevusu bo. Naxiwiyo. Vizice sehi. Zujiza yonizi nukisi hinitufato. Tovohewimipuzi. Govujozi luwibaduyo. Xitijigude. Suhanudiwutogo gidife gori. Biwixelozo povu zevokubomu navepoxarozuhi furajodaci. Rarici vuposami. Zezahomasowaku zukakupikikumu. Jagubolagijona va. Jigoyu poridukaferaho domafemirocida. Rejaxuladawimi. Duvitanamiro gifu noha. Buzo novitekicole. Seni. Mupezumotibo. Pinece saxikulate butohutejijobo dugore kosorecusotuba. Tariki. Ya ha. Vixuri fizakixuhi katipucaxege cavapuba. Xa. Xihibofe xemedapi po sije pafinara. Dolo numuwiwi to wepore. Jezalefewu xamu xetajovowota xayulawu zejuvi. Nehisiviho hicefoga vohazobugu kuwutikefevasu kenahewehove. Mariwiku jinucewuzazalu davakofafahofe. Cuzaloci n!
y8VD(_
U<%;j/dlbo
+<=PEX
C$iPh|
4Ni6KaP
[2yXil
8f97Uu
$b3w<V!pq
IFd&X::d=
\=Z;d\
eu35p$&cc
=Y:?Q%rcw
S~^e<$0) 3
o&sE%_
GU;"32
@~ozmb"{yW
QWJ&N7?]
Npk=XP
<+Cn%
AnoFcA
mu5[$C
v2"hf:>
k'kL7S
B(Px0vP
,v,(%>.Xu2X~
IA!?RROy
2b|'Pz
vLzg=ynJfa
H2A:NbU;
!{1N.y
7{_/vzXL 2I
p<xk~(EEw
x\7|kI>
)3Vk&#~},r
z-YpD<1
.]:<y}Gx)Q9U$[
qfIat
fqRTpQH
;5G@Bx~
RQwxVZ
P==<#6c3,
r_.Bd^
b>Y8[xL^M
pxxQX:%k
Fuw]~v
gNz:l
j 5Vr]#I:
XD+3piCEw <Dan]d
+v~: |U?
W:Q+"lT
+0*vAb
)}qj9S
DYU:p:|
|DiebB@
3oF"L%~u
/D9j^UED
UqV^xZ}
S1Tl&qhl^|D
BGMfX$@wgP
\,9^U;0y3?
B)h&E
>U6ZG\ca*
g>HFA^bU]j
7<vh#j
""X|LmLrH
,&X-Po*;(~
c3TDk=
2nWe=jc
qPy(#M
(|U,{n#
CJL>@hJ
D3OP=\
(&+xg_T}dJ4
IUKi{tv
8+KmskdM
*ErOb\AU7Yc
52iGXek
t,N"4(P
T~)[e^Y
< f-*r&ej
~qn4F~i
0cguQN
1wWpva`e
#J4c,-R
y?`b>/
}js2?a>`sb
q@.&+a\ECL/d&
}X%\W!-
'fKV0*lj
;S>hU\O7@
Qv$Gvp_`'"D
D9WKc71(~-r
;uUrwcE/_qb>)bEl|{9%Z
\L)u\O;DB
0!10[Db
k+g$CLCS.
s$^L7=
+r GOFxg1:
M@*J*l
Zf[OEY:8I
>4!EpOdcs
TT?dzsZuH
5Yb6pw
h'3EC^XC-
2-.xeH=
Lc@{A}lmDAaxk(
NL/W1d
$0sMQ\u
!zEx#T
CYk,[_`V
NY?LD`RjGa?GG
lkz`@G"0/x"P<e2dq
Tz+EjJ
AFLFp9
\X$X$k
9/y^x.
Fj Q\J#
udGAFu
l7*?4gZzp;
;}m<_`
e$ey6Os(yj=
G9i/^R&'
$Rg6RCVA/
YZt:%xV"
Bk,l,J(A
!{Xxana
F|%=u,Y'
}ZL16}X
F>b+c$i>Z
~xv?e|
(jJ`k[
pfmcgq,P/Xf
p%7rz$
hdNRJP~{
V1U^b8&KXV
afv=E1BM
P?K~KfvC
\"/k@Vx!
. \i5a[Fx
pnhzL>
#Hof;J<}f||w?;
]Lv;#V@4Y&Pm+5:<
i:.sJt
S\SbfL
!Mr\1^QQ
kN_V(_Gqd
q)@SdC\g\
Crk*Y(
U;iM'
|(wu?u
Ob#%6H/
Jxob!GHv7
F;O;rcbF|u
Kx9}ICL
7">tM Mz
qgc;K6
>30Ra:
f^/\q~"zSZ
SH^U-}
WD)pZ"
<sjW4SQ
|4EdU\
IAUuQCGu
ye4##mM
VmR8'R~y
C0Jw6/N
z 9&)>xB_-
`_$L-=
\BykQ_JNwN
L*6/m<%C}
qI1qF_
4!@T8{U<
d'x0@F h1j
dF?s0Awe<=xJ=
,9:/M
d\DRG<
J~E*X&v
)qy>(
Mz-8r1
[WA ,C%k
-R?i!T1'1
jV}gcBOzj
LZH>R=#]N ]PP)n
6PT,+`>
NyvyzJ3Of
B^`xeqU
N\LMB;<$C
|h4yGt.}
spt^L"3\kl
"tf1s#V1<H(uU|)Q$'
W(~9fz8cJPo
YL_7xi";
1EPDy\
7%.+#
O|<,#;&
\1Z9Y7z
n,d$cX
O)1oP1y
xL`JJ40HV:[n2
J@4)3=
a-IT&*
/I`?#-55NL
R-$87z9B
]7Pn2^\
4ze$V`
{UnoaV
.eUF[e
=3;#C!^g
&Knr+Pse?<N
C"9.os/
+en8vv
D|W3'>|Gu`
&V\|@<)n1Sw0f
}z6^!+C
-.95?U%
AQj*SQ
|\<sH9 j
x?Tp"
az]HuV1
v1l{;[1M"Cb$?,g+
f\aK:mdk(
*2,+CLp6
2Q\FbA"s
^<@O+m
v^tQ5M
vm>sG+
F5\@%K
TNl6dh1+
_W2)/,57D
11TX'okYq@@
,2uvjcv
M{L0sZk^
3@h_|f
0EPr$?I[\aP8L>M
4jp XPfZ
*495(Z
rO 2~{0&
l_h(Fe
9[j-zqZHw(Hn<wBT +~
;5z\SA3K{^
(1`)M2
E@BISf_
Iu9eKI{ukqG@
8^T$=5
bzbBrJ
Hn4Zs6V
EP]4gzJt
jO@l2]\
@\C_{6
:{(:}|
@WP$!}.
|q*jaf~
N^9}jo
]&^ny).{
>U'"K,
hYrdGE
]"40'f?d
}:93cy
"&yqiRQNT
KM1.kR0no$c
2lun4Sq*;EU-i:
DmEnb5sx*{ny7
[hEG$Gk6\1
AixxY$E
W!T*DBUo
uu18l\
\PsL3gJ
c`L9[8n
Kr)opl<P
`7M'0?
Z_k#NP
.w;n87&
?&-<;)
<(kk/eI
(,-#8MJ;f
MU?0]M~
nW_kc.
i)~?h7P\"+UF?
V5~Q\Q5
&c7/)d
;`5y|YQb
}L08m'^q\!{
`4&Aq
!6|cEBK
*h{Q$z;43d
?BOrngY\
_`dsT[J-pmY
."f.b#
6^%bx2
0}(C[G
.G3tUZ`},
_661-gaH85<O
,@Uq!/T
Z]/st"u|(!N
#3,vvP,
'v'DbO!8
U6Uz3v
}0,kig
LW`?OY+
VgM`:znu9)6l>
g$,k6eD
XN*Rs>E
w*%>?_3;]
7&[{L285K&
y9O>d%
L,a+`ex
+('lmqVe=(
<^nw7Y
w;CbD)P)O
~/|6rdTr
6 k.;c
LS~[*4
uVit|x!"1/?:)
cEJok1!
d9d$grM "&,w
YLHB 8{rB
8+45RL(
p)V56B
OZ2g.WK7/
cLiLg;+*L
NOl+*h
uu<AZ1
nV2qw5
Pe{Zmnz
gp3+A|
4"II8
A81,dyz
y;^wQI|k1/|
U^f\+!r
la=mfxM1F
<[('V6
c_5ZvmV
Q"_sbRsOYG6F
gs;s&D
z`rG@p
({}Xq:xG]B
i;x69M~; ]G
Xx") Z
gOIK9Y
$CmD6F
#+i[$L4pc:@s
A|$Jum|seI
&#%>'D
rN?WOsA=ls"
BB3kZWAJ
f|JizA
'gs\I@V;
zxUo'&
r0<Yi(
`r-kpr
E>)_Ty6
4]Y9;
PsT=2/~U
fm'.SW< U4Wc
=8|;2O&`l/
bM(u#BI]`2^e4<
6!ZEf*:
j$r"6$
U?Dtsx-fpL
!NPMjd
~y2,IX
/."}*Q
x.g(%S|?<U8Fu''S
>=T*m,rh;3
8/[-HCj
iHkvAv!]JH
`N9<Ggk&'yxf
Z+U+W^ba
`3e^D^
B]mPod#N
s+!K.5+
[JfY>?7L
NLf_:Y$1~
{B?4O>
z|&D74`XVI2d4:K=8v.v/
'0 [@6Vi'
ajPwx$
!)&pky
Rim{j X3az
w4=Clp C,2K
0gY6r0
o<h\Ek
D#:M6xpx
GSZc'vfB7
y?)rH\NZ
}6M=FT^ePT
![JY'[3tRvsrwLTg
IF?xnZ_>
PR1mB3?
?~BR'"&<G
3XFNCM>
D,1J"m,
0+/F$pe<+m}Y
=L(}<F'kRp
kr(^tp
^Rkf4s[
j=`e@65G
Q'T)kh
l-Jgm<
,#Nsj^
s#(njd =0\J"
A4B3JI
!LB0\Me+]
RKe+4=|
`,r4lHX'y&O
t'd2?P&>akC
eD`,R9
VUf0gGW7k
4_z\z1
6SaFF@6L+!~
I]_l.Vd
SnVTvgMm
yk$U7t1
hRP4zWE-aU7w
*;'[`F
%%EF:w=4_
I)\Au^kc"
9qQ~>0&N
[?o{*CR8/g
W\u:jr@W
L#WLJ,1c
3dOz)g
=cgH"H4
HD:qTe
cn#_<!
,!e9`S
i\uZAZ)lh
kX6825
sq}%SW3+:
l}gDG*/
|#=!.X?
wtblfuB
Ea^FB%k-P8)QkM
8q'>o
g8@Z()K&
h Beh{(
5Ah%qx
@ 6+to'
'G sa`
[Ha)T?z@|
at`3q2or<q
PM&eCcr
zi6l)
K^+kDd
!L}rPO
=%b12ib&
Q;,R*HI1A@k
V94X!g+=aN
ix~S3rA2_)
3b|6yFdP3b
`9e+_Qw
HFx5u[w[wf
$50M/|gnTDaw`1
a#63Q9B
%k*{Ht
BaX$&TzP
ID#-xO
{No!P8
~:F)sF
c Y&2[]JJ
,%$Gi[jGV<L
RN&'AY
<h:iHm&w
RiCY*/
47ApK)4s
pcKh%EdE8s}
n`m[I,=
|H)]zb\!&[
?t^;j m-r1
xvri0tD~,
P>/i7u
cQWiVd$H
6Yw:ny
7P})|.2]
?Xz9()S7CcGd-*
/5XM@Wgr
:>w%p
P>ce+'/
R9_Kv"N
Mu_S|h
/Vv_%%
c?|#VDh!%}PrtS02
N7l(i_
kqaGEy
N:x!"i7
Gu[)HIE
37:+Co!
yYi3iKim
!tqK~&Wl*)
~Aq)*up{^XAP
/^g1;+
AF{}:J6
`M<M3i
>&Oh.i>a
3!.uLi
NG[Z,C
bmxV({
"(F=?.w
7qi$N-
jT>RAE
9i%uMB{`JS
5+/WYXPTj
Jd@zS+
o_ |y0}
uvIZF/u)>
e]yYW(=Be
Phx~nbJRMP
&z~E$la7q
$+Ui0Z
q/f|ikR
Ly]-QU
&fE"u
^AOkjZ
73#*Hg6?
[8VgYGr;3;R]@
Go2_q&GdZ#6
\Jhc%1yG
x$E%N
VW0${0&K1
m!p'j RM
jIm:gGb)?<
AL8f1s2le^
ZXbW|mU
g)(Ayf7.
04ks8J
;Zz&T(I
@i2N@c\=b
^m9WS^v= 7uS^_9
}3`Z+`y7
n"|[i>,
9l|vF
4y9[vQG{
:LYdKBA
rWf/;**;Cr0
;V&NzYk(TS+um
=^7[\V
;=]e;_
}/iG}8
~]c8hY})ovLYZz
(9h`wL3O(}<I
/`p%# /
:%H3t'|Lp
:}=J&="
"_mRwZ<
=)<'Wt5
eO:F%rF
EM\]o7hq_jQ%
'Zq=mvat|BDyU"$
GF#v>p-
)dcS>0
{AY5JD
\FA;=+l
EYtS&J
PiJ[>6
it;fg
)Dc4mM6,ggTW3
}M'QlF
'qAe,sO[
VD!wO_PC~l5hM0u
8^QMOHY
x|jzI9a;o
9,B27p
?@vF+C>Q#
?ktql?"l
oEqF/^d
]F<4~~wgzaE
2xP&"Li
6s_sk<
XqF')HA=d
dAj/X`
Qg<si3
j"_7Qvj9]
^`l&dY
gcc9~Y<d\5OIV)
?Q,)>C2@C>--P
k8,/m8
[vqKG?w
X1C5{
>>_?xu
,8?`PSXnf73
D3umAE&Yko<
.SbeR}G6}(
EUQE/G
f*#h[-UPc P!p@g
Kjj!-\
S0Xb0C
<*bK|pf
u@W~8r;ZQ
<#m\{^
uCZ.Ksg
n{y]oFF}+'
O8|l8<
IEU<Gw
3v8M!o:
lj!T|~@
C.weRzL=N$;s IqK,9[\8fX0
`9`V,K>Z
{!;!J+\
J]y9*?/
&/Y$)F
9'~g{dk3
gKH<(QxY
-x4F4z
!#QS\Yx
'dm>5bW$K
[bsIiy
sH/C:ujBNm3y<h
:D)|Y5
&Fgv\-
]cyME"
c5+4EZ5z\
KvQ*,&
f*\2$Fa
-*opVQ
2?zO=R+)90Jb`bGtM^5a
@4#p#5yx3)c7
T(LYAT
mBkXLZef
IDsZ%>H,
dKUd9^
I00#B7%a`mKkr0@0
4Z94Ip--&
ht!r;5
yy>ZD*
tACeCYmG9
k?Lx*<ML
6+q$}>a
Aa_7 Kwt
AksdoG
By>!GPRr
7jMey{
?17J4a
0N/*Fi!t4C
85\0A`Ibh7
~V?e3=]
mpvl[TY
P]$DGfM6Uk
sn)2?G
Dr>)zRt]P.
gX{p<?@
vYCwow
{G&Z$hqk/Kk
s1aj/SR%?[
y}OjS3Y5
8;^48P
R[;muq<
,@w\-M
hjB-ne
l(.B+@
Eh!0a=
e/*x%H19
Z +LdfB0Y^
VIw,r?}4
hRhSL0kfIY
^kFu-t4Ei;vL
GMo^yrR5j
Gvnm5icc@tWV!'qL[
_f9U[KX
:;pIv7
H5$?QeU1NW
<=VGm
MaGHLb
PW"*8*6u
3~!UPY
sgD[qq
y4oUHW
e~JQZO
/:2$Sx
/xl mNJ}{aj^2
\oZBJ~
0x%W5>n_&-daE.8/
yd/|PrA`
Bq3`\.J@|-
~.iYfrIJ1h
x:666F/:#Z
:Iibbkub;2
f7E0,'fIQ
@XmY8oU58
=u@ZXsd
t@a+5x.
K.,5VDnMX
jE<of+3T
Se0"XSXFF
7m.Oc|J
:17[>9@'JagzdW
&jj1c?yO\6 &
@>gyuFB
a_{`YFK#s)"
~#}\Eg<]
I/0:kj
jf#<h%
d2T=Qa0iJ
Ner[FG
d/Nay#yp
8|Ub Oq==0
;:fSa'W=
`V8EL~0Y5eu
!? ff-
*'uCd/
.)atZH-
ol9i7e
YNYTK0
usxdZ|va`
;W=A`%
9THebba-B
5U'|(e
ZlYgB1
p#MqrxOF$
8*bpsh
{x\s.X
~Q7FC{
iP;m1"On
b{+S*W/V
|J7k`tv
BhI tM
92A{%`
ucUR!8pQ(
Dk|2l_6NUa
B"5R40*mcw;
[igKZsAq&Ii>
!8iH%wS
Y?dzBD1G2D
!C!$^Kw
?kl{l:b9
9vWnl-
dfZ|GBf
7$}\^1q
`1GFBj2$
CbGjs&RK!v/
\>DO.7q_70"~j8"bJknE
Hg"Pa{{8w
@n{2a2~
>OiGzv
FauzOWQ
)W4<egL{~*
;N<[[7
]_'B}42
!s.fxO(9
XVzT2'hC]MU}4#
+[Q0;?Z
WJuz%3
OBLS2Y
mKQZjh
!\jW6)v#i#_
#vSj$%`+
{'`-7n(Wn$
aH0m8 $]
v*#ei
sx0'+w
DnF)"m
v6QgV[
}3NVhm.
y:T*#J
p8eCr)V
FbDkz45eE&f
6l$Q7jT
uN>6ABc:q
''IQi}dT?
e@icDU@3ag"v
jt1Ka<%={)#,.Gz
J`/2T4j%}@
zZY5DP
]%"k-L}$j
O!wu.O`
zT&:..Y@yip4
u1"c|gh
(cV(;y
y!BL]ihZ\BR
taRE6
T:7*Ct5hV
(<YKDLW
Gz55sxZ
UFHQ^m ,
s|N}_373
ufS_71
='\F{Ph{
uW0)9%
|i90C
trL+I\FQw J
ag9u$z~U
e5KJ"no
XC5@;cdt{
.-)<ZJ
= >vF)
$T<i/TTdV7
$[c`9Xf6
v|-A*a
%'l}>a@8
wCawBff
At-x"'
D;l+STJ,
q@J;q%E
:V*<MV
3DNG,Wd
!`|l(__^
6Y\(a";kN
UY'4"wJ^ag)
<(_N)Wa(Xx
ev5%6%
XF//[k`YkBJm'
*#Jh>p
2Q$%#L
6<.OA2^uF+
"Q|Dew
Cyk=H8PJ
QT>E#[
dt*2-]`u
`$N(Jvj#L
,O"QxK\wi
^;.x]Z]
C9V[l*VBlg
"d_2!6
49>JLN
GkjY}X3xj}=Hg;'yh
_v$5_}B5
M}P$gmoRn)<0-5sMmrCG
+zq7ALR
K!tq-A%K3
Fv&clH=/Z
1_f]7)+
EKLW'3
;Bh1dZA
w%j5S(
>`o-TWez/
pW}S{`6ZCUV
HzW{ ;
fl$xmtT
'kGt&3
p63){H[
l|e*$O;gH)
OnqS,\F^
lD|2kdz
Xt{0t+Y
DCMr+8+4+cE/7z;a-
PIm=~E
qy5k6,
&;GfQ5L//%|4
@D8Os|
)S\qOqW$1
#}n%L/n\Pe
Vv_O(7
#oS_HYx~
g !nWbi
%/6ORE
F"6+Pm
<HW*RJ7EQ!
k8EW{5pw
L|!OF|
IEM4Wbp2
??dK)o
dfK370
+Mf/|?*g_U
J*`Q_d
GO6WVA
=!e8W"|#
Qk}L9ey/e
_Mqz$S&
aL`-Pz
6$g*1^,&
u=YIc"(<s:dBhY
B81\T8
Lu,eyV&IEv
C*$^5Iy]U
T:d^1"N=1rRX
U6lg%
ibGOY5
8)6^8Zr3#
+A-k_LJ
07NheK
#_EKe9Z
d^--b)\q@[8)+fH
o'UV5tW
wG+''z"_,HTHw/
Y8z +m
x_kd{R-
[dS{M$,Xxo7Q7
/:7+.rK`
D<4u$iZqX<[3h3
V:1s>V
CDNQ-
r?8i]/2\r]{
7:(\_
8>%k~ FHd
[\@X8K
{s6>Og
#`B-X$yE
_zpjp)oD
}0QdpO
bT,8")XP
Hu"N=JH$:
]ggh.|:]
vN0_Sz(Ms8
LsQJjge
+CEV0MMD
99 @0]#UsL'
:O1OTy
JoOX3.zL!B{2T
Cb\,w
dSTEqG
[@_ `{ v
'VB*C&4R8~u04
6+Y53D
xOJJ*^C^
loE21h^MQ\@m8
'w+BIPe?
5X;6;9w'
Uq0}Tg
x$QL^E
M&9wm{(<_r
e{%)<;
Kp]9S~`
3D%\_K
)K_9~6.\
|Mb4(h
9bUGi7Y
?HnkytWV4
VMsTeKY$
bID?>L
&j&~1c{VU
lA{+b:]}<x
^m"m%#/v7(
E.sgdL
?0H -J55c
,ifC,9X&5tg>}uJe
(Yk>j_
Pk7m%>
R I`}Y
PH3o1O369I
6W1S[-xwk9uC
gjr;\w>
EmhdE5l
XsV7%w
/W8][E
!P1?[)l
8l2##i
]B^>[$
9=#CP%
%_1x/i
2\b|OE=~^Ne}YNgw
7sT[L{S(t&+
]'Jyzv
?@|BLv
?}y9-Z]
1.j%\U
ld"SQ&
[2vq~QY
WI]6/] MT+-
JG&+e<x4
J6-MoR)W-;nBInPM{"34h
"xWsj|@ECu
~x`z0!
by0p~R
K<%b^rs [=W+4|U3
C.+{22
&}iu8NI
s]!3dHkjpXqtVUWE$%r}ria~x4G<
>'KDAZRNg)/al4-m
Uv;$vt-kG!PK@( iZ
sYVO}?
;x#bV_/=J
\$gXT%D
ZC5/dY
7AAr/20
ZjN3(jc
)z'0aw,^yA
jZiQ Dm4
OOSo=v
UqItrqP)
6!!^yCI7`
XIs\7F}DeO
:H4X.B@pv1
PK~[u(W
[KZ"]cX
U+wwy?
Af5L0d?i
B+C6S*0W3
g :f0FWYv
*9VZR%
q0//NY?
Le8E6r
*bS0?C
%Z*^F1F6Iy/
Fz-!} FKX
jvG~]]
y8cnx>
-GB^i7?6Z,Caw
?<(QGH['^
oFB)Rr:
ARK|z-
,OBQs-
q@\LdaYIR
uqMT|1j!
f_9lO+
([,l,iCg#^3Gx9
-J{`\GD
O!25K_
U-cF1A>
S7hk
m[|hl.[(.=
'!rh]]b
[WY%N$f
dj%0Mn
Z`[m8Lc
?PY-IAk^s)hjF4aQo%_/B
^}iel9xv%B)}8
F7@$z%o
}F?;/&
mhw#st!
e!?)mY
'K9l4$
TiYy9^?
G\DgkX0TjBgc~{
[FP!$c^
eU_D]_5;2
O&[,ySr_
Ku?H{YS
UYdD: @aZh{,(
&ohX^!
>v!N&q;#
CpsI|sZVn
COF~.WF8Ji
K=ec[8T
*{PP#Y
rZht\`
>FworixJZ
:[yAs&W
i%73{>[lx(y4
v;M.X
n- ;hf
^Z4]@-\
4H&wZ*}8
`" 5GNJ<s
{ad97x
<|K??lJ
;G8we4[6
GVn^tEA;)of
+{<c["CQwDd_;@
h*m^&3Hh
W1Dxkn,
N<[[s/m
-o#@b(a2
bLz2oOa{
ZX^XO9
Kap_O(WR
5MlG\0
2w"9H"
;Z8H-j
n(FAyk.3
#9vyl;lR@)
d<A`qh
C)u!H={jn1
tY1k)
?<d$3%
zk38A)
Py%dA.
5!6=yNm
?jh<u%}"^U@U
H49KrE
.9 o]ZD
#%/3Uk#
#%O[!Y]
g.%pMg*V
u??!Y;+
35d-r@0FJq)
%>)Y^hyBEZ'pT23
,x_J91eE
cU/Y8.q2po
)C{KN_e1
.G7"T#F@>9$
a>gf&Os
"ddW*p>Y5<
]=)P^s
]oxX>-MU%
P-@F7o
R|{HiC6
jOqaXF
$d_4Wanb\&g[%*>=LnD5
\1eG"U
vlg.E.
_$$]&C
iB'T!g_
C[6IjZ
AnWk|G6
tMp(:[(jaU
]{;'":^
e9=f(_#n
D)6g7 Ne
$}Bs:tTL,5H2$72%0'Y
si6bE:UBb^sx
0V0|8 <
#dtcZ@ev
cd;Hz]bw
1ndqvwcffr;*y&:
D.Z|P9
N"K$=W
75I:Eek'(s{qy#=il{_
v-DPTU =
Xj10J+d,
)\d<k&3Y?
Gk:!FK
"\S:a;
cqME1)<
1P<k<:p
6~xfZhDZ
&ta[:On
"61u^ J\dg~^]bg}#`3
(Q:NZ"9b!
t#;"u(u
.(rTOdrO<4H1
)1^\m|j3^J
'KsEWRUM
s~-2F*33~
MRjt9#>
'uYgr+[M
wN= BX
/1p)g<
PGn$~~<J
cK!aC~7s3,R
x}~"I?
jPK<AC+Z
YoDGV$2_WZm^
iCk ^*$3b+zOCm;&[P
72l/$/+ j~t$b
K5>A-L{K'
0Y%sLpQ,"N\I>
u1!rPP
/EWvHcKR
;iF+]0B
;R.][;<
f%tX/4PFBK+
&O^wGnsr
J)={04O?4
mS;8~m
&-vRq30Hf
83lYf/\
|M&RvW5?>`@
NLoriW
q/YOc/3C
/f,WUV`L
-NgN>u]@h
};$A^q
xhVy9|F
)`l?:v
LgN:xJLc m
A<7KnAr/
aGbY8Z"
%/02xd?W
|'D^vfr+
\|tzz(`|n
H:=OC?dq
8;PuaT|
Wf$I/I,)V:=?<
pF't\G
&:b"e
}.!h*y`Ik[
<MRFwTa
(HNEbhnE
6!$BY,fKW
%$H(IR{4
UaR1ID
="c<H
#]'^6 v
r&D({S#W
C8=kbR(sS
G7o(Q)8T
;0P(NKyuH4
zx*b'#i/,
=/BJWCM(}
m48!oh
JR1$7A
kx\]8}
lM+9q4ju
bvaNI{
0>`rHD/c)>WkEuT\k/
Lf]nUxH>'yM$
Ah~Hu^V
)LvY})MJ[
31VQ9*\
vlWbrHi 3
eP[{R
$g3aVc>]/
:R$/d)m6
<&n= /
9'Znth'C%
bVIk<*do
f4gMawm
*R!EX(0^NEP]
n?(yL
m{l^i3=P
5>4X0#
Jov@a9'
;;?^9VIw2v-2
}2SO\cmblRw
No,{eo
{oHUE1
,=!}jO
T;$#~HjaAC
B<\pCB:
ph>ZA@2Br)(Us/{o7#CG
9UlpV&D. r
&eH3FjcH
Fz"PH
#,NDe8
W+z)k3|Ti(
k3ZI!BV`mPD4
/4p*@8z-xW`W
+kcKw%
aYw9dx@Y
w<ueo5[
2T_?T
!f6|mT
B 0k] Pk
D! Cks,G*\Fi
o$52-}F
(wHic H
WUx*i7}uR3gR
L1.[[<
Y$t43m
]-Z?.iR
Pw+7AK
$&k{CP
Ix0SB6
JB[RO?L
n;I>wi
-!A!409PY:JQ
N;:R(r,}z
t+{}sHO}XL"
=&'0[b
5"_|P>
@ q6px~T*
{<'Y>
V_n,zwF4$7
,sWEH.
n:Bm~|GG
*M *x!x;
2yK4TB*d
[BMJ,c_
\\TR7h!
X=R=j
qIy6X_+
WVU@$q
wXTpS,yWk`
~5@SY=5/*n
xS?P_)!?
vZu3_=
U#lQ7f
>3Isu=X
P~P9w*aGS"
#`/P4}X|rtu,1a1]%
[VAKOT
v31kR\'~
SiB6ofN&I
|\SpP|
"J%`.w
[5k`H3
'+LO@H"
L{R>@TuOc
v<o\RCY
EmVcYs\
{b/e]x
!5 mU;C"o8
h)O^<NYv>
-KGA~d
A9:P/Y
@icTf5{Qsq
F4y3aDG
%cS.65='@m,
5p,/5<Gv
OFm#uP
DKx(}Yn"-
%*!PR:
OC'Sh?H
Ob&&$Vc
-hmBn]
D?%ab%]lubIB,dq
ZM8%y=
6`[if'
yLKsWXZPI
f_{W\I
/#v{x)/8+&f
4@&\)N1J
`3ls?Cgp/?U>7
Grt=;$
@ +xW\
Wpp^0W<
w[]EA2
OSgH8i)CWl0
x%o&9t9
+@;b$<?
+DdY:)zF
G_\D'f
+(Gi3>Z
k{'UrI7
vjn+Z8z^
L%tiN'&jur
TwU|=Qn
-z@ &
>y+f7e
=J_[A7v. uA
<%a6Vh,e
PK-Ch
+?0lhXtK
(*PFI_
#bZ$DG\
^*Lvhwx
b]uyT'0
RN>HcqW
^4J@MUG
<31SG3AGO@
^uXKn"
!sr: [>s)
IWhPC%05
xA8H"$-
%kBJ6wU*
4G9W{L
Nzr[^P:
2|,S6R
tW21H&$C-
Z2!$Fb9
Bc'w|(lOds](
be}|]kd
t{T0jz
*RO:sU
Vk~l^P
)m3b!4G
!Y;oDPb
+*wrY0mnb
q;KkM/X1z5
*(Yq^:
X(U]h5T6'
#K1s1;bN
f Xa'd
dg&890C
EJfKdL
f.+9|l1-CSlL6r
UD,h\2
TWai^&
juL_i@.b2.yCH-s&^8D?U84
9O|zs%w=?qz
5cWKZ6
N,:]K
?<vVxTj6
e_nBNc
:ja2=])Owx
&u4QEho5[>x
G&f:gIvPy0P3
A~xb n*qt
N)>ZI8>
9vB*)w
&J1z/D!
~7^#wej`4k={2AFJNH3~$_>
Kq% 8f@
7/a!'P?-
%#R{k~4"
%VZ`@Ye]E
t;2{J5
?VBBPG.iaX^
03Mr*`~7
#5q_0K(
y-ymIr1axXg>h5[IHB
et{W,]S
vXYLH:]
pLU+1P
;p]k`
ZhC]A
u,\W$njo8b@.(ID^u!1^
GRl'u0"615tit*"
CX&(5[UV'U
tXH4vpUT%
oMRx]Xk>u3p-
28Xqx]#!
MmejV}
J&4PxM
~MAoL_O
dH5GDlsS|ElIdO>
1Um]\9Z:
fF!:jW#
mISCQ|
QCKp}**IMpm
`?G-y'@7
ZF-_Y0q
{Y&t0L8
^Z74V
"`n^i<9bZrer
"~|%{{
}vv_
V0tsA/W3BLPP;85JOR
.ui`Y!
7/<oZpp@sf
Ot4E1'p{
o~d@i8]c.{if
}'ahE;C"
d6zFi
L)UG^f
,)nQU{!G?RNG
JJFz3W
^re;x!wPi\
JAe`TQE
`=OsR9
"2"7GN
;3ruP"
QSR(l"Y}Pl#B
F|F?P&03W.|;k$Ys
k3hL+'
=WB-PR@n:
2RKmmEKiCh|k
9'Ri8l1
A5rWba#E
G_PUK.j>bKk/
h@52:R[N
O&=anx
eU'HZ4|e
zhO3qx
is{Y7)1MlZJP[b0i!^LyO
Oa">wN<r
2KRKp(Mi
&6Psc_#zB
CVN2{'!p
/$#E-q\
XDOth9}
JD,1P:o~,?JlE&{
I]1#Y4ANk{
mO`+UF
qI :,jX
C9\t3l
&z$[Sl
M\gNTBZC
Vt>s^h
1|>ehIp9F
St70=jc
+%(tA'
p[pXI`r^MR
2H]$!JAY@I
^$frgKlI"
y*Ar'
@k7^U~DK
?uz.(IcA
^>{:{i{k
;Cl@mV#!
wM_M)4KV
5~`R?,X?
R5ccBx
z,fk:?D%
&5@=Jq
,us.}y
ho+<,^[Zy
}d#Ce2gvp
H=uY4u{]PSdrH^}3
rq?WxF;jLJ4i
?"x;wu
4"[JkBc*P:PBx@l$R1
nT+]n\:
mH]%=c&
U+""+NCZ
*'GCWv
F=Ev/NBCuD
^pu.M^
<)xD7^z
;:dLU\I-
L|eR}7
VRG>@{^R
^lI<:Xu
-=oaDo"U
+tj&-JZ}
_O$04@0b
#keC9Ri8O
GDQ6R
'@6wRn}e9h
1(hee&L
-ZhRn%0:`
kv>dOB
hW#yfg5f
&rwy/K
^h4"0F
[5p[CA.Zy
f#vcR^e
wADA>a^`
nN0OREqHAX
ZFHWZh
_'3_|}NI>
s5i`Wv_
ql3Xw;$|
jwlg:I
X,i*&y
d'Lw^|
|h1IUoK>2X]
~auzYu[):[~?}4oi
7gd18:>
(<T1m0]G
7_9OGuWB)xh#T:\
kfM'_TW^3!aO
I:~FMFOa
)7<G@:(c{d
Z6QsF
d)7CyDTD%tFI^HD|O\z&mFg}
>ew}3 d@?Z2
ET`^Fza
w!cs.mJW^RS5Q
g#@v5`t9
1]SZ5F
|0i`?+#
bYz*4'&=n+0C#
xAM5o7
ml[NI|
e=LW?DGg
G- #Jt\
H)||@O8
cP{4%
d-Y9;YQ(l7M
LiA$/g_&k
xYA "H
|pX:Co
m46$Mg5!x
{$'UI
9a"uK0
~7 $OlB17S5
1]8C5.>r-K/
Zs +3l#bp?
4+LLi(=e
bSg8Q39stJr8
c/U0rc)Lo?
wa[MY+
i8hQEw*e'dLxSk4Z
4K]'F.;FZ<odcf;)^U
0vbU\7
Sb){<v#y8~s
pA~'-e
-; WFrj,
X~i3kBP9A_
Nw:wJCh8}F<HwK<
0CH3Z'zPk
LhLE\L[8p
\CzBtZ
..f$dC
m:kl!$J0
t09K'*
0b,R~G
q_7`dvI
!G8wV.
xL;X$~xPun
WNw9eRly
M^J^:cW""
}0f&$d
&|"fAT;t
~s]{A&
Fs<!JG
l:ja+H$)
e6G11HbBE2NNd
4?:~!*
ppkTM>6^
&A2hl+U,
n3V<fJ
-7df>Ws
'J:Q%VA
oz) {=
x0ueU
,',wG
ic^vj3
\%WRG_
F$r J$o
%2C[PCYL
pHdOkc
K!h)h$i
lX\C|z
BlS9au
C/=mukgJ_0=
VVz9\<-
cC8HpB&
al ?aao'%
%B4/`wR[qTP;kr
s<B,^nN
qP8{?HQANt=H\^*
2uTNoS
,"%:bM'=5o
^y:"Bbqh(R
}\3:k2A88x
-XX+tS
gRqXYNSGoae9
#_'I2YP
gNSGY
x%d-BKf<OMl$
C!zT=Rf($
fiI vm
ma\nR6
n/B ?Sp=
v%<N0g
!bGYy:dWqSGS
_pcntyG
W+_.f(t
?+ o6IfYiD
&2^Vw2h
P^@N\Zd!rPA
YIv<2=
d8WX[N8
dpbhsr~
Za?TBGco9f
j$N4%k
uo{]VC
=}a<U8*
ek3$k$
e AADGf#>^
/MiRJo-e
ZGR-uq3
F6J_e"
A(xhs"uk"
q]KUe$
>g]0;!5sz5h^gH
@_ ?`Wb
(CswoVI
fdR,wP
31sT~B
!}}~hx?z{
(PM@H^X
=>jVb
cxKnqI
fw=G|&
%4z|v3m
;]k\Vy=#l
;QP&2\_b{Y
QuQHqS_<
xfWZY|!6#)uBf
CqB>^X:Vd /TmJ
git$BvsemMWqL,D1\
K,7ZQdW$
+g.<Hf
"_s]6D
w"E\G}n
o*/'%[z
jnl1cX:
[m_Bxi-b2
)` @Z]JQg
HuwAYzlG
]xg8NA!270?F1O#`
qwz6v_*g
<|UdB4.
fL6CEbe
CskR~8W
TQJD']R
*(3ZK96D4
T8gbj+5}
=-#q^U
3KrQ8nvy
tMcL}BYx$
HX@Cw=4D
H}*i=+q
$aK.+A
Oi!\F4
/Fi]B|/
>GF;fGokK&p
\l<~y(A
Q:)M@hT8|
zy`c]@]7
K~VlE\e'4Ii
*75v+`%U>E
<:X3c](O4
_xX`Nl0
r"?!jI
.WA*DA
CFC634wUFw1,
V_blW)Zx
b{[&>X".
/69{{s
W5[T^^|l7JF+
Y'%6g#
srg8h2,s{
>oK~Uv
p!tz/e!G~jto
wy0m{
llS+#yX%
'8h%z-|=9@=Cb)=@&$;Nw@ca;{7IR
n{5L!oKGk;
@5ZQNGU
2"c)/@.)HEWojq&=JpEe+\-
sf"~r/e&BVb
$0|c)"t
mFa3Hsi#H
I$c!/uTqT
0vPifygn
~q[LWl
G57y[s
7GS[!:
r);.cPNFlx`X
JxXV+K
L(#d)!tnx*
198M{
\)-Wq%.mR8
f!]1jN)
_m^GV{X
*,scuBC&D
=zLh{}
%=zYjE
0.k-mI078@05<1~n
J C+3'T
x@t7-qidqYNN.
Q=ciljE F"Ln:p[W
Oc0Sw)_
N8yb<WH
JW_siON[N
`+rrY(eH{L*}ad>
;NaCBW$_~5
Av}BLF&QX
?A~s*;)X]%V!t'-
Rc p_8nM
Y8s].ejf95^
%A9ay+ra
/W+Sr>G
0HK Qi%.O
vs"XB8UNR:3T`%r'
}Pd1i~wnk4u\9
74r|Mz
#mVV5h
fQ-|H4PD=
om0A,P1"Ya)
]_g='IM645:g_]
boY6jol4C" hy
V)C]SVUiShP
En{CJb#
d)t<Pr08
.48(P&
Nkx[Aw`ig|]K'7!5@
!y}69C
?,ZJ],s2:
hA"sz/
@p$C3`
u7bA=NZxO5
~Gc}Hf
NHuttGE
5sI*S-=g=-:$HtI
a]M4P
PiQMV"+<f!)q
I#AfH`;jk4$
!]q&i$
Mtx@if}kr
OP#\^S)
r~^6jOpin
z>R<eh
p$1*_|"oMM"
_[s$4c
R,EIY2
}A+z&"0
jAbAC!
D9)S[ej
{2P"t9j6T-zQ
\0fM"7
^i.#M'X[.N
h Rq9M
lY:ASQ
.'e%c"?SL@R^"d
U;yASs
H6bM;CQx`-D
c37PyV
'{M9#/3
{"DO P7E
#lNhr(g 3
t(8$wV
i?vVEz
q'TSNp
R#`!28d
E 2x^`%.
Nd-jkm
H.#R+U
cwL=g&hw
6jt%[L
"V9tWGq
"qF7;/~C
[Angcn3{!CU
Ilp^%=KUd[;UJ7s
wf>P\uq
1.}V@1et7s;
QUW[uXEo0A
#u:v(qfg
YUG@}x
~M_tK~/`^
\JaN^p
B;_ir&
rK_T%J
x]v[iW
)w*6XGS}
@U0&;P
oSl"31e
+sg^aa.o
NGY!E7Tc3L
xw@Jy8k_#
+Wz4B32w-)jh/>UR^`@d;,3K2Rw0#u`H,XU
zh$!zoF
z0C_Cx
+`,N#O
x13`MobO}J
j,eYa
XCV2+EX!
W7G@+o
6o&LDaz%CU p
F*p6:g
`Q-{8`d
38Kj/zM
g[VzoGbND
y.!<c9*]fr}Ox
M.%.i3
9PZ/b|O 6
%5f-hgX=C
LNUljLv
w7QP/W-*sLbvLA
$d8Qvg
Dfb$os$N'
ai01U[4]/,r[Ls
dyBv|q
t+<s%y
?YVHdg
N.6gr3|
mn_14G
}}jo21
{[C*TVR
Td7.d-sn.<"=i
BCOv@)R
(vjE`$#I(1Q
nR3"BG
(r%#5w6
Ay]w+y
8<%)7h
M|vL7zE
JAshsu'
xu\%XUU
#;zi=PS)hmD
bKhfhev
j=ipuP
YE9$Yu
Ca_+xO
};Z:9X
G<{Zi e>^
UnSc3<
wc:&`D-
[AST%h
L0 _26
EU-nzE
!ar_!{K
GaL!E&}b
`j^x/A\
vN^PZ&
djRS'
#[u831
tam%>Fn
*q|<;
2IIps\u
xWCXv r
{c=46[uS
07m:>5%
X&@[PXKL|"0
f)h}&NAlP
6;d1(\^@
k/_U^;v
.$oQnV46T
0D3I<k'
6r1s{%s3}H*
L]5O~Ny
<l~#Uf{?
7DX[op>KT
8J4h@
)7 )/=uq
sCKwP>
<ig C)/XU
[88E>f
5I7X&V
H\2&5kGfmwj
(+rQ"h;dqr
x([J\Ad
>bJE,^VG+!OmFSn
OJn*/K
by3UQC
76Ka!|E,
:Y9&RKo+Y{ 5
5e`Jhpk
um&)kc9)ZW
(=/#`D
KUK_)yoG66,
-Go_9-
WCLNqW}
zZhceW2:Vt
Q B?j0
(J.YM,9
Gy:i=S
KvtL(EK
'vuGZX"DQ
w&+A=pU5:{oP
!(qX^b,
^x54l}
@4~T{3
kpc\Cd
Q#<&T4\'
<4;}$4
lh+RI~3
*{PE&:
M8."QC0a,`{6?
~]Us0v+
{'1."f
5bJV$\
4y_gs-
k,Otco
%{f>t U
U92v@N8
bI]{&[b?c-\i/
~'L}I#vo
]3Xk>`=f@S
3&Zg FV~a
J]3B6G!?+
oB uG'f~}K$x
:7$&I0G)6il
"i4eCO$\i}rybR/
%]AAuPS4"=
;d#fB['
Js%UhMORq,2n);@
oi;>>Ud(/AJ`j
=}plL*
S8m}+9h@
gFG "$Pw
/;J0Y3+ rS%`
3u|C0\
h9monD|N
O(d02p*3(H
UX}H%?s
on+K5.
^?vRF3[@C;z
xi_i"={6_2X
!D[o`nsN
0eY,@$
xolVZXSY
\O4aS.dG
M$KJuM'Mo
MQ7*K2C
_vh9Gm
-o`Go)
><96d{*m
%x3A'h=y
Hcl&<nm#F;qV
RW4Q#c
H*p^5@\RqV,oe"e!Gq
?J)s`6;
n)ed#+D>
+<YZQ?|"r;\
LkVbnQ@>X[
Al^g{{{{
{{{!yP
2z)j`~
a4/N%H*
+<YZQ?|"r;\
LkVbnQ@>X[
Al^g{{{{
{{{!yP
2z)j`~
a4/N%H*
0?0O0U0k0q0w00000000000
1 1&1+12181K1Q1]1o1x11111111111111'2-2E2222
6 6C6t6}66666666666666
7&7+74797B7L7R7Z7a7h7o7t7y7777777777
8)8/8<8B8G8]88888888888888
90999N9T9Z9i9w9
9999999999
:#:(:.:W:}::::::k;;;E<X<<<*=\=t={========
> >j>p>t>x>|>>>
?=?g??????????
00000000
1)1O1m1t1x1|11111111111R2]2x2
222222
3 3$3(3,3v3|333333
4&4,4@4b44455588X8998:C:W:|::::::::::*;/;9;;a<<<<======?????
T0Y0b0q00000
1!1>1Q12@3944
>,>3>?>E>Q>W>`>f>o>{>>>>>>>>>>>>%?e?k???????
o00000%1+1A1F1N1T1[1a1h1n1v1}11111111111111111
2"21262<2E2e2k222222!3'3,3333
4+4]445
6$6G6666777&8-8:8@8}88888
9+989D9T9[9j9v9999999
:?:N:W:{::::";;
<7<<<<====>A?_????
0]3M455
8):-:1:5:9:=:A:E::::::::L;T;g;r;w;;;;;;;;;
<"<3<l<v<<<<<<====
>>:>B>H>V>>>>>>F?t?
000=1L1111111
2333333V4\4x4444
585>5h5555
6E6]6{6666
72787L7Q7r7w77777777
8<8D8T8[8e8w888888888
:!:,;l;u;;;;;
<X<^<|<<<<<<<
=$=+=3=;=C=O=X=]=c=m=v===========+>z>>
0000q11153F333333333
4$474[4444J5g556>666666
7&7?7[7d7j7s7x77777
8<888%9?9H9z9999
:@:Y:u::::
;,;;.<N<>=g==.?
2N2v22
3:3p3z333M4n4w44444555555^66777
8#9A9~::::::::!;&;`;e;l;q;x;};;;;;<<<<<<<<<
=#=)=3=<=G=L=U=_=j====???
000+111=1t11%575I5[5m55555555
6#656G6Y6k6667V88899
:#::9;;;;;%<M<=K>Q>V>\>m>??????
: :$:(:@:D:x:|:::
4$4,444<4D4L4T4\4d4l4t4|4444444;;;;;;;;;;;;;;;;;;
< <$<(<,<0<4<8<<<@<D<H<L<P<T<X<\<`<d<h<l<p<t<x<|<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<
= =$=(=,=0=4=8=<=@=
D:H:P:T:X:\:t:x::::::::::::
;0;@;D;T;X;\;`;h;;;;;;;;;;;;;;
<,<<<@<P<T<X<`<x<<<<<<<<
= =L=T=x==============
> >@>`>|>>>>>>>
?<?H?P?????????????
0 0,0H0T0l0p0000000
181X1x11111
5 5@5`555P7X799H;L;P;T;X;\;`;d;h;l;p;t;x;|;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
< <$<(<,<0<4<8<<<@<D<H<L<P<T<X<\<`<d<h<l<p<t<x<|<<<<<<<<<<<<
=(=8=H=l=x=|====
12222222222
3 3$3(3,383<3@3D3H3L3P3T3X3\3`3t3
MTU7MTU=
foconaleseyimucayedupoxiyoni cemibehahasepawudehukusidadaga raterisovuhihi
ojufebusuyiyofakitawevile retixahawera luzujice ya howodizoduremefulebitine
fevujokagomihaciceyeye fo vaxudizerafasumatevakuvo kogumiwu
wujukigisunudoxefesepexujerivu gelavomejucalowoxuwu yelepenadara juhojojinupucayiruredo pofoxobanijo
taperarupixoyowahulepokikuwuce tumagikezacacudicu zodanecolola rumalivuza
dirivufemaxusunuta vecehenubepuhu
kernel32.dll
luwahozepumojuhogorunufiguna ni toduhokeje kayilakado
lomiseyicuwa titakoneyepijosudotakupovete mula vifiposoxohi
sepejacudagemuvafa
tasujinefegeci panoluyifozoberi fezida wazugeniyokuluyesepuhezimo safodidu
leviyahudejitafepijiwagekuwizu re medelo
lujusucufususabohenihideyadizeru vu
KERNEL32.DLL
(null)
mscoree.dll
runtime error
TLOSS error
SING error
DOMAIN error
- Attempt to use MSIL code from this assembly during native code initialization
This indicates a bug in your application. It is most likely the result of calling an MSIL-compiled (/clr) function from a native constructor or from DllMain.
- not enough space for locale information
- Attempt to initialize the CRT more than once.
This indicates a bug in your application.
- CRT not initialized
- unable to initialize heap
- not enough space for lowio initialization
- not enough space for stdio initialization
- pure virtual function call
- not enough space for _onexit/atexit table
- unable to open console device
- unexpected heap error
- unexpected multithread lock error
- not enough space for thread data
- abort() has been called
- not enough space for environment
- not enough space for arguments
- floating point support not loaded
@Microsoft Visual C++ Runtime Library
<program name unknown>
Runtime Error!
Program:
@@@@@@@@@
@@@@@@@@@@@@@@@@
@@@@@@
HH:mm:ss
dddd, MMMM dd, yyyy
MM/dd/yy
December
November
October
September
August
February
January
Saturday
Friday
Thursday
Wednesday
Tuesday
Monday
Sunday
WUSER32.DLL
((((( H
h(((( H
H
CONOUT$
fzacesilo tamomo xihulonexesodamerureladupado
catuzumuru yajehuzika fupodecigosase tidiyojeyuxamilode
@@@@@@@@
@@@@@@@@
@@@@@@
@@@@@@@@@@
LAVIFIPOSOXOHILUJUSUCUFUSU
NIMUSEBUYUBEPIJEPAPUHASOVO
UAOSEL
JFixobamo yevetizababage woxodocesapa jayeyaze dexi sudoyomu hosadegumofipa
LDelihebomiwa rotijaxosu he voyecamibe zivehu duninexawu vofa pexa wixusukaze
\Wucatojosu tuyadolezo siwayuhumunici duladi pibawesaca vawice wecotuwija harora jucozibubajo
RTedimabozode seyileme je vuxotipufi teyiya pelita yazuke sijavobohisa biyohoxucoja
"Zahibeli gacakujakaco zazususezebo
-Ceje damaca viyeyojelefu waho kenonohuwu mipu
Lota momoxihu lonexesoda
eVahili pezipa xu rotocomupekofe ridimarijoyane yevetuwipufe bedopiyocomuji yezejosusuti mevu mavizase
-Tabemo jeyuze bazobupuyo bumetelawe fibudi wu
DBokale deticego dacegudo hakomojewehogi di po kafusu cojaxifoguje yi
CDosoyihuruya deyafipihaja bonorexo kenevekivuba kivekesaxulu civavu
FRedu neyi jomocugagahufi senogifa kekuhonivaso womazajitezapu vayitolo
(Hure jevutu sibebicixidusa weri cecizaxa
VYowi jufebo doyilubuli cokibagegu zovewanave togisadaya rojohefajago matecawijataze pu
.Kotucawozi biyuhu re nosuxipame nuponagarozuka
_Hapezofogiju xonu cosegogi libobi xayoga cikuyiletozo yihebezobuwuci wudocaduferoju dewoce kodi
JKesodoxofezavu yubo kejunikudi hubekopuka folozepiyiwa yaye hacu benegi ju
DGudane pikoti godimuwusocu diwuzemikevaso hirovaco pisagi bepisatoxi
Ye mibatiyu pihaloxu
GBazukilajatovi tacofugo rakojatobuyuko xuhirurenage puxake nihifezacesi
Kicisupizi
Reracosugo balixi wezopizu
Nukazahaviwexe pe niwanegikicu
OPikarebe givinena sa bugakukuceha lisoza zelopuguyewo tunedobedu hixotiwirozaco
PWifu vudamo nixuxahotogubo xisitofijivahi madaxuco heca vu liladoxu napibifuzida
Gososepu dahemelibuze
Hufirazepibo migifuzihuhike
)Foto vibi bozuvema yuzu te dorajuxejilizu
LSicajocoweno dipececidu juciyexawe kozarixe cufa zukofa tepaxudocagi gi yove
Nulisetu sidafohixeka hotiyi

Process Tree


00d758d6e9511c0e50f5f919ab2055bc25de1fa410f903bbe407de41ec7ab61d.exe, PID: 600, Parent PID: 920

default registry file network process services synchronisation iexplore office pdf

DNS

Name Response Post-Analysis Lookup
dns.msftncsi.com A 131.107.255.255 131.107.255.255
dns.msftncsi.com AAAA fd3e:4f5a:5b81::1 131.107.255.255

TCP

No TCP connections recorded.

UDP

Source Source Port Destination Destination Port
192.168.56.101 53179 224.0.0.252 5355
192.168.56.101 49642 224.0.0.252 5355
192.168.56.101 137 192.168.56.255 137
192.168.56.101 61714 114.114.114.114 53
192.168.56.101 56933 114.114.114.114 53
192.168.56.101 138 192.168.56.255 138

HTTP & HTTPS Requests

No HTTP requests performed.

ICMP traffic

No ICMP traffic performed.

IRC traffic

No IRC requests performed.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

Snort Alerts

No Snort Alerts

Sorry! No dropped files.
Sorry! No dropped buffers.