1.2
低危
DACN
0.12
FACILE
1.00
IMCLNet
0.74
MFGraph
0.00
反病毒引擎
| 查杀引擎 | 查杀结果 | 查杀时间 | 查杀版本 |
|---|---|---|---|
| Alibaba | None | 20190527 | 0.3.0.5 |
| Avast | Win32:Malware-gen | 20200116 | 18.4.3895.0 |
| Baidu | Win32.Worm.Agent.bg | 20190318 | 1.0.0.2 |
| CrowdStrike | win/malicious_confidence_100% (D) | 20190702 | 1.0 |
| Kingsoft | None | 20200116 | 2013.8.14.323 |
| McAfee | Generic-FAEY!BB168F9A5EEA | 20200116 | 6.0.6.653 |
| Tencent | Malware.Win32.Gencirc.10b7a171 | 20200116 | 1.0.0.1 |
静态指标
此可执行文件具有 PDB 路径
(1 个事件)
| pdb_path | f:\workplace\c++\hannibal\release\hannibal.pdb |
动态指标
该二进制文件可能包含加密或压缩数据，表明使用了打包工具
(2 个事件)
| section | {'name': '.data', 'virtual_address': '0x00011000', 'virtual_size': '0x00024a5c', 'size_of_data': '0x00023000', 'entropy': 7.882593823103492} | entropy | 7.882593823103492 | description | 发现高熵的节 | |||||||||
| entropy | 0.6481481481481481 | description | 此PE文件的整体熵值较高 | |||||||||||
网络通信
与未执行 DNS 查询的主机进行通信
(1 个事件)
| host | 114.114.114.114 | |||
文件已被 VirusTotal 上 54 个反病毒引擎识别为恶意
(50 out of 54 个事件)
| ALYac | Worm.Generic.388260 |
| APEX | Malicious |
| AVG | Win32:Malware-gen |
| Acronis | suspicious |
| Ad-Aware | Worm.Generic.388260 |
| AhnLab-V3 | Trojan/Win32.ADH.R47876 |
| Antiy-AVL | Trojan/Win32.Cosmu |
| Arcabit | Worm.Generic.D5ECA4 |
| Avast | Win32:Malware-gen |
| Avira | WORM/Agent.2170901 |
| Baidu | Win32.Worm.Agent.bg |
| BitDefender | Worm.Generic.388260 |
| CAT-QuickHeal | Trojan.Cosmu |
| CMC | Trojan.Win32.Cosmu!O |
| Comodo | Worm.Win32.Agent.NLPA@4t56ql |
| CrowdStrike | win/malicious_confidence_100% (D) |
| Cybereason | malicious.a5eea7 |
| Cylance | Unsafe |
| Cyren | W32/Agent.QP.gen!Eldorado |
| DrWeb | Trojan.MulDrop4.6750 |
| Emsisoft | Worm.Generic.388260 (B) |
| Endgame | malicious (high confidence) |
| F-Prot | W32/Agent.QP.gen!Eldorado |
| F-Secure | Worm.WORM/Agent.2170901 |
| FireEye | Worm.Generic.388260 |
| Fortinet | W32/Naglov.OA!tr |
| Ikarus | Worm.Agent |
| Invincea | heuristic |
| Jiangmin | Worm/Generic.abjq |
| K7AntiVirus | Trojan ( 004e70eb1 ) |
| K7GW | Trojan ( 004e70eb1 ) |
| Kaspersky | Trojan.Win32.Cosmu.dnej |
| MAX | malware (ai score=86) |
| MaxSecure | Trojan.Malware.10723077.susgen |
| McAfee | Generic-FAEY!BB168F9A5EEA |
| McAfee-GW-Edition | BehavesLike.Win32.Virut.dh |
| MicroWorld-eScan | Worm.Generic.388260 |
| NANO-Antivirus | Trojan.Win32.Agetn2.bbdyxx |
| Panda | Generic Malware |
| Qihoo-360 | HEUR/QVM09.0.995D.Malware.Gen |
| Rising | Worm.Agent!1.B398 (RDMK:cmRtazr4FxJ++KoC7fL7ebDBO0Mf) |
| SentinelOne | DFI - Malicious PE |
| Tencent | Malware.Win32.Gencirc.10b7a171 |
| TotalDefense | Win32/Tnega.eXVafcC |
| Trapmine | malicious.high.ml.score |
| TrendMicro | Trojan.Win32.CABREN.SM |
| TrendMicro-HouseCall | Trojan.Win32.CABREN.SM |
| VIPRE | Worm.Win32.Renamer.i (v) |
| Webroot | W32.Malware.Gen |
| Yandex | Trojan.Cosmu!+Sfbu2XNEAA |
二进制图像
288x288
224x224
192x192
160x160
128x128
96x96
64x64
32x32
运行截图
暂无运行截图
该样本运行过程中未生成截图
PE Compile Time
2008-09-27 12:51:42
PDB Path
f:\workplace\c++\hannibal\release\hannibal.pdb
PE Imphash
5aa33c577ffd8431ff254de85dee5e7b
Sections
| Name | Virtual Address | Virtual Size | Size of Raw Data | Entropy |
|---|---|---|---|---|
| .text | 0x00001000 | 0x0000c6f8 | 0x0000d000 | 6.508536501115457 |
| .rdata | 0x0000e000 | 0x00002b0c | 0x00003000 | 5.185619472145793 |
| .data | 0x00011000 | 0x00024a5c | 0x00023000 | 7.882593823103492 |
| .rsrc | 0x00036000 | 0x00002e30 | 0x00003000 | 5.75705846592885 |
Resources
| Name | Offset | Size | Language | Sub-language | File type |
|---|---|---|---|---|---|
| RT_ICON | 0x000384a0 | 0x00000468 | LANG_NEUTRAL | SUBLANG_NEUTRAL | None |
| RT_ICON | 0x000384a0 | 0x00000468 | LANG_NEUTRAL | SUBLANG_NEUTRAL | None |
| RT_ICON | 0x000384a0 | 0x00000468 | LANG_NEUTRAL | SUBLANG_NEUTRAL | None |
| RT_ICON | 0x000384a0 | 0x00000468 | LANG_NEUTRAL | SUBLANG_NEUTRAL | None |
| RT_ICON | 0x000384a0 | 0x00000468 | LANG_NEUTRAL | SUBLANG_NEUTRAL | None |
| RT_ICON | 0x000384a0 | 0x00000468 | LANG_NEUTRAL | SUBLANG_NEUTRAL | None |
| RT_GROUP_ICON | 0x00038908 | 0x0000005a | LANG_NEUTRAL | SUBLANG_NEUTRAL | None |
| RT_VERSION | 0x00038964 | 0x000004cc | LANG_NEUTRAL | SUBLANG_NEUTRAL | None |
Imports
Library KERNEL32.dll:
• 0x40e000 CreateFileA
• 0x40e004 GetFileSize
• 0x40e008 FindResourceA
• 0x40e00c SetFilePointer
• 0x40e010 FreeLibrary
• 0x40e014 LoadResource
• 0x40e018 UpdateResourceA
• 0x40e01c SetFileTime
• 0x40e020 WriteFile
• 0x40e024 GetDriveTypeA
• 0x40e028 SizeofResource
• 0x40e02c GetFileAttributesA
• 0x40e030 ReadFile
• 0x40e034 MultiByteToWideChar
• 0x40e038 FindFirstFileA
• 0x40e03c GetLastError
• 0x40e040 CopyFileA
• 0x40e044 SetFileAttributesA
• 0x40e048 FindClose
• 0x40e04c LockResource
• 0x40e050 BeginUpdateResourceA
• 0x40e054 GetModuleFileNameA
• 0x40e058 FindNextFileA
• 0x40e05c LoadLibraryExA
• 0x40e060 EnumResourceNamesA
• 0x40e064 GetFileTime
• 0x40e068 EndUpdateResourceA
• 0x40e06c WinExec
• 0x40e070 CloseHandle
• 0x40e074 DeleteFileA
• 0x40e078 CompareStringW
• 0x40e07c CompareStringA
• 0x40e080 FlushFileBuffers
• 0x40e084 GetTimeFormatA
• 0x40e088 GetDateFormatA
• 0x40e08c GetSystemTimeAsFileTime
• 0x40e090 GetCommandLineA
• 0x40e094 HeapFree
• 0x40e098 GetVersionExA
• 0x40e09c HeapAlloc
• 0x40e0a0 GetProcessHeap
• 0x40e0a4 GetStartupInfoA
• 0x40e0a8 TerminateProcess
• 0x40e0ac GetCurrentProcess
• 0x40e0b0 UnhandledExceptionFilter
• 0x40e0b4 SetUnhandledExceptionFilter
• 0x40e0b8 IsDebuggerPresent
• 0x40e0bc GetProcAddress
• 0x40e0c0 GetModuleHandleA
• 0x40e0c4 TlsGetValue
• 0x40e0c8 TlsAlloc
• 0x40e0cc TlsSetValue
• 0x40e0d0 TlsFree
• 0x40e0d4 InterlockedIncrement
• 0x40e0d8 SetLastError
• 0x40e0dc GetCurrentThreadId
• 0x40e0e0 InterlockedDecrement
• 0x40e0e4 GetCPInfo
• 0x40e0e8 GetACP
• 0x40e0ec GetOEMCP
• 0x40e0f0 Sleep
• 0x40e0f4 WideCharToMultiByte
• 0x40e0f8 GetTimeZoneInformation
• 0x40e0fc RaiseException
• 0x40e100 ExitProcess
• 0x40e104 GetStdHandle
• 0x40e108 FreeEnvironmentStringsA
• 0x40e10c GetEnvironmentStrings
• 0x40e110 FreeEnvironmentStringsW
• 0x40e114 GetEnvironmentStringsW
• 0x40e118 SetHandleCount
• 0x40e11c GetFileType
• 0x40e120 DeleteCriticalSection
• 0x40e124 HeapDestroy
• 0x40e128 HeapCreate
• 0x40e12c VirtualFree
• 0x40e130 QueryPerformanceCounter
• 0x40e134 GetTickCount
• 0x40e138 GetCurrentProcessId
• 0x40e13c GetConsoleCP
• 0x40e140 GetConsoleMode
• 0x40e144 EnterCriticalSection
• 0x40e148 LeaveCriticalSection
• 0x40e14c LCMapStringA
• 0x40e150 LCMapStringW
• 0x40e154 GetStringTypeA
• 0x40e158 GetStringTypeW
• 0x40e15c GetLocaleInfoA
• 0x40e160 VirtualAlloc
• 0x40e164 HeapReAlloc
• 0x40e168 HeapSize
• 0x40e16c LoadLibraryA
• 0x40e170 InitializeCriticalSection
• 0x40e174 RtlUnwind
• 0x40e178 SetStdHandle
• 0x40e17c WriteConsoleA
• 0x40e180 GetConsoleOutputCP
• 0x40e184 WriteConsoleW
• 0x40e188 SetEnvironmentVariableA
L!This program cannot be run in D0S mode.
YYRichY
`.rdata
@.data
SUW=\@
;t\VUj
^_][QQS\$
SD$$PVWt$0j
|$$vX~
9D$$|3Wt$
_^3]@[YY
^3_@[]
^3_@[]
UQQSVW
ESVW5HC
3M_^3[
SVWMQPx@
tU|$E.u
D$DPSh@
EV3FCPEh@
CPD$ h@
D$ Ph@
#L$$D$
EV3FCPEh@
WD$ PVUS
SVWQPh@
3M_^3[
U S39]
;tVEEE
tAt2t$
u_^UQSV39U
@;r.;1s(NV
HHt4HHt
Ht`Ht,
teHtFHt&Hu:
3@_^[U$
f@fEfA
VWfEEPV
EtHuEPWEPV
UH;~ }
k3@e_^[M3
J<'tEu
c}fU E
:ty<%tAM
;tiF3>#u
@FPuEPEP
tOF9]w9]v
+}8]tiMap`M9]E
u-9]w(
E`p3^_[j
W3;}}}u
^WWWWW0
^WWWWW0
WWWWWp
WWWWWU
WWWWW:
MWj<RS77
Wj<uSi6
Wj<uS06
YY#^UQQEP
uu(9uu-
ItFht8lt
HHt@HHt
UM@9u]
itYnt o
EGEEPu
u}PuESP5
YYY}gu
YYY;-u
0@2If90t
@@;u+E ;u
]+]+]E
WSj0EI
EtQ~Mu
PEFPFH
WSj EDI
3PPPPP#}
]|ux}tf
f]pfElfehfmd
Y0^U S39]
u SSSSS
ySSSSS
t4;|"Mx
EPSYYt
HH_^[US39]
0;u,BWWWWW
u,9uv'E
E`p3[_^U39
YYt:V5
~lt#W)
<3_V5@
YYt4V5
ANu_^][U$d
8]tEMap<u
E`p[U
Zf1Af0A@@Ju
@;vFF~
M_^3[ j
Y^hS=@
3SUVt$
3;Wto=, A
;t^9(uZ
;tD9(u@
Y_^][SUVt$
P_^][Vt$
t7t3V0;t(W8Yt
VxY^3j
Fpt"~l
tu=,YC
S3;VWt
^0SSSSS:
3_^[VW3t$
_^VW3j
u_^VW3t$
YYu-9D$
u_^VW3t$
u_^UWVu
DDDDDDDDDDDDDD
]VVVVV
Y]EEPxY;t
SSSSS{
SSSSS`
SSSSSE
Yu;t|8
;t!PV.D
PYV@PYYpBC
VVY@P5pBC
EPSj?E0WhAC
EPSj?Ep
}8}8}8Eb
Vj@}7A
SSSSSP
>:u8FVYk<
<0}>:u
<0}9]t
jd[u l
3PPPPP
_^[UQVE3Pu
VVVVVp
f95XBC
$.VVVVVSRSSj
XVVVVVj
395tBC
Yu95tBC
;t_+^U
VW395FC
J8C8_^[]U4
^WWWWW0g
o@wSWh3
k<+^ >3[_^
WVS3D$
u j$BYFDu
FD^YSVD$
Wt1t'P
QSUVW5HZC
g;YYr|+
;r;Pt$
P<YHZC
3_^][YVj
3@3U E
X^95BC
6YYuTVWhyt@
;r=TZC
3F95BC
uG5HZC
3PPPPPk
Vs@<Yv8Vf;
3VVVVV(
;t%t j
]_^[Yj
*YYUQQVu
EYF`[_^VW39=LZC
t.t$<"u
u_^S39
GW;YY=BC
U@V:E>=Yt/j
3Y]_^[5BC
FA>\t>"u&
uUEPSS}
=?sJMsB
;r6P;Yt)UEP
_^[QQFC
SSS+S@PVSSD$4
;t2U;YD$
t#SSUPt$$VSS
u+@UV;Yu
_^][YYjTh@
Ej(j ^V;YY;
3FRj(j YYtM
;rF9=0YC
;r_^VW@
;r_^UQQVE3PuuYt
VVVVV|
VVVVVa
1E3PeuEEEEd
Y__^[]Q
S\$ UVs
L$ St^Dm
L$(9csmu*=(YC
t!h(YC
E3E3;u
EU_^j
WWWWWs
WWWWW2
;u'0VVVVV
30cVVVVV
s@l39H
FE3PPj
MQPuFEu
M3+ME;(
@@FF}f
++PPVh
GE+E;(
EEuV}39ut j
MVVVVV
^SSSSS0P
Map_^[;t.;w(Dj"^SSSSS0
8]tE`pu
0E`p$M
QPbYYu
uuo9uu-
PGYt6u9Yt(u+u
uuYt6uYt(uu
3MEEEE
ItFht8lt
PhYEYt
HHtAHHt
GEGEEPu
u}PuESP5
=YYY}gu
YYY;-u
C]StuM!s
RPSW309]~
0@3If8
@@u+E u
]+]+]E
EtQ~Mu
WSj E~
3PPPPP
EPQEPEj
F$|3@_^
Wu8SS3GWh@
39]$SSu
;~Ej3X
3;tAuVWuu
3;tuSWP
PWu u)
u5YE;t
e_^[M3oU
u(Mu$u u
MapUQQ
SV3;Wu:EP3FVh@
39] SSu
ESEYu39]
e_^[M3tU
u$Mu u
MapVt$
v$~v(vv,nv0fv4^v
Vv8Nv<F@v@;vD3vH+vL#vP
v`vdvhvlvp
G,^Vt$
Yv$;5P A
S3;VWt
^0SSSSS
3_^[UV3PPPPPPPPU
$s ^USVu
3_^[];t
^0SSSSSF
UV3PPPPPPPPU
$sF ^h@
_^UQQM
MOI;|9 M
3@_^[U
SI VW}
HD9#U#
MLD3#u
]#\D\D
3;v.jX3;E
]wi=,YC
;uL9=XHC
Y}SYE;
]5VqYE;t'CH;r
PSuYS{ESP
9}uH;u
E;t CH;r
t4VnYt vV^YX
V3;v)j3X;D$
Iuu}]U
+EPRQL
t6SpY%Pp;Yv
RQMQVp
Map^[QL$
Y}SYE;t
8csmu*x
Vt"5dHC
(;r3_^[j
RsYt=E
+PRYYt+@$
Y+t"+t
+td+uD}
3PPPPPk
u@OdMGd
u wdSUY
(3}5HC
Y;uSEPcY;t
EEU SVW39
EP:YYt
WP;YHC
u;tm95HC
Y;t%MQj
SSSSS'
^VVVVV
URPQQh@
t;T$4t
;v.4v\
UVWS33333[_^]
33333USVWj
_^[]Ul$
S3;VW|[;
t58t0=
V3;|";
u$[0AVVVVV
EV395t A
ug=t A
tVURPEPQ
E`p:39]
_};= YC
W>+~,WPVLYPL
Y}3u;5 YC
EPO_YM3
u2^YF;~[
w/B;t8
-WWuuj
t`][9}
WWWWVuWu
;YYEt+WWVPVuWu
um^YEe_^[M3a\U
u.&}SSSSS
v(|SSSSS
E`p`E9X
8]tDMap;E
;t+3_^[UWVu
DDDDDDDDDDDDDD
3SEEESX5
PZ+t Q3
xSSSSS
wSSSSS
Map^[j
UQQSV3W=BC
VVVVjPVV;
;YYEtCVVuPj7VV
t6EVPY
;u3_^[
uSY3@|$
]|ux}tf
f]pfElfehfmd
USVWUj
H3nTUh
P(RP$R
t:|$,t
;t$,v-4v
UQPXY]Y[
P^SVt$
tWWWWW
EYVRY}V.YEE
SSSSSr
YUWVSM
SVW39=HC
;~,EI8
3@;u9}
t{~Bj3X
3t1SWu
EWAPYu8PEY
S,W&YY
e_^[M3rMU
u.mSSSSS
mSSSSS
Map^[V5BC
S3;W]u
elSSSSS
lV0;utSj=V
;YYEtB;t>38X
;ut}+}uc;Y|R9
tN46&~9]Yu
;tUN9]
VJ@Y@P~;YYt\VVmJ@Y@PW}
SSSSSAi
}YEju|E
r!ti8Zi
WWWWWh
3=VWSHHFV
;YYt SVW{
3_^][U
3;u(:hSSSSS
E`p3tVu9^
E`p3^[j
B:t6t:t't
B^_[%t@
HH:mm:ss
dddd, MMMM dd, yyyy
MM/dd/yy
December
November
October
September
August
February
January
Saturday
Friday
Thursday
Wednesday
Tuesday
Monday
Sunday
bad allocation
(null)
`h````
xpxxxx
EncodePointer
KERNEL32.DLL
DecodePointer
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
SunMonTueWedThuFriSat
JanFebMarAprMayJunJulAugSepOctNovDec
Unknown exception
CorExitProcess
mscoree.dll
runtime error
TLOSS error
SING error
DOMAIN error
An application has made an attempt to load the C runtime library incorrectly.
Please contact the application's support team for more information.
- Attempt to use MSIL code from this assembly during native code initialization
This indicates a bug in your application. It is most likely the result of calling an MSIL-compiled (/clr) function from a native constructor or from DllMain.
- not enough space for locale information
- Attempt to initialize the CRT more than once.
This indicates a bug in your application.
- CRT not initialized
- unable to initialize heap
- not enough space for lowio initialization
- not enough space for stdio initialization
- pure virtual function call
- not enough space for _onexit/atexit table
- unable to open console device
- unexpected heap error
- unexpected multithread lock error
- not enough space for thread data
This application has requested the Runtime to terminate it in an unusual way.
Please contact the application's support team for more information.
- not enough space for environment
- not enough space for arguments
- floating point not loaded
Microsoft Visual C++ Runtime Library
<program name unknown>
Runtime Error!
Program:
`h`hhh
xppwpp
!"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
InitializeCriticalSectionAndSpinCount
kernel32.dll
GetProcessWindowStation
GetUserObjectInformationA
GetLastActivePopup
GetActiveWindow
MessageBoxA
USER32.DLL
Complete Object Locator'
Class Hierarchy Descriptor'
Base Class Array'
Base Class Descriptor at (
Type Descriptor'
`local static thread guard'
`managed vector copy constructor iterator'
`vector vbase copy constructor iterator'
`vector copy constructor iterator'
`dynamic atexit destructor for '
`dynamic initializer for '
`eh vector vbase copy constructor iterator'
`eh vector copy constructor iterator'
`managed vector destructor iterator'
`managed vector constructor iterator'
`placement delete[] closure'
`placement delete closure'
`omni callsig'
delete[]
new[]
`local vftable constructor closure'
`local vftable'
`udt returning'
`copy constructor closure'
`eh vector vbase constructor iterator'
`eh vector destructor iterator'
`eh vector constructor iterator'
`virtual displacement map'
`vector vbase constructor iterator'
`vector destructor iterator'
`vector constructor iterator'
`scalar deleting destructor'
`default constructor closure'
`vector deleting destructor'
`vbase destructor'
`string'
`local static guard'
`typeof'
`vcall'
`vbtable'
`vftable'
operator
delete
__unaligned
__restrict
__ptr64
__clrcall
__fastcall
__thiscall
__stdcall
__pascal
__cdecl
__based(
CONOUT$
%s.cab
%s%s.cab
Program Files
%swindows\
%sWallPapers.jpg
%sreadme.1xt
RSDS^5AJ
f:\workplace\c++\hannibal\release\hannibal.pdb
CreateFileA
GetFileSize
FindResourceA
SetFilePointer
FreeLibrary
LoadResource
UpdateResourceA
SetFileTime
WriteFile
GetDriveTypeA
SizeofResource
GetFileAttributesA
ReadFile
MultiByteToWideChar
FindFirstFileA
GetLastError
CopyFileA
SetFileAttributesA
FindClose
LockResource
BeginUpdateResourceA
GetModuleFileNameA
FindNextFileA
LoadLibraryExA
EnumResourceNamesA
GetFileTime
EndUpdateResourceA
WinExec
CloseHandle
DeleteFileA
KERNEL32.dll
CoCreateInstance
CoUninitialize
CoInitialize
ole32.dll
GetTimeFormatA
GetDateFormatA
GetSystemTimeAsFileTime
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetProcAddress
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetCPInfo
GetACP
GetOEMCP
WideCharToMultiByte
GetTimeZoneInformation
RaiseException
ExitProcess
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetConsoleCP
GetConsoleMode
EnterCriticalSection
LeaveCriticalSection
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
VirtualAlloc
HeapReAlloc
HeapSize
LoadLibraryA
InitializeCriticalSection
RtlUnwind
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
FlushFileBuffers
CompareStringA
CompareStringW
SetEnvironmentVariableA
.?AVbad_alloc@std@@
.?AVexception@std@@
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
.?AVtype_info@@
DSC-P150
ACD Systems Digital Imaging
2008:07:15 11:00:54
2006:10:12 01:05:52
2006:10:12 01:05:52
ACD Systems Digital Imaging
2008:07:15 11:00:54
%&'()*456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz
&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz
x{\R!R
_?QU}k*q*.{qK9
<fJQT$'j^
KmMw}ZXh$
*A 3)^}rsJ24$y
)|)KY1o=;Tf1;
`~o_jWQ$
v<@:4rI
IAO?
$qEKVv
))R[Is)
K| FL)
ZUWIX#oLu],!%FX(
xM+T4@RR
[)z7<VEqq>
)E^}OFr
jyGc--*
}@qk3]
q2WlG'xV
'(Qhbq|w/
Rq"(X>0
Og1ceV4
n}!ih]sP
g_O*NnnK}
@d,5
{yA1`Q
WpJjVvO<(`
G=}{zfkn
ThaMkW
~%gtYZ-
#+|?6{o1
? V- 0X]
*(S|Z_]=}
Yv:0KoYp
u=p?Jzfq
v0r@5HL{.g\{MD9sZ
]5f8OI
]8]q0/
(eNR5dt
,~U<[^g
8%Rg-&It
`BO,)c
Tm'm33
={Vs=}k
QMAl>{r
|#p Ei7+#}
A>{OcM'?/4
MucESa7xNr:
og@2v3
)|6/o?9T.?0,
CLMj1eKnX/
R\K[v,P
jehOP2
}YZ5zg5f
;IG0+kZI&)l
Lpbj_w
,c[VF's3s<IqF
kRDoHy ^CwgWBV3Bq=sT
g#s#BX
6`^NAvv
;Ir_u%
~VM62o
\&^)-]
p}q rj*Ez~
<K(T`x0|y,%
kJaq]m,Y2W?pqL
S]b)^yr=Al
<{Nu<R
_d]K6%rn
q*y *Ks+0
6.s[;~_
w~B7m~
1BZT,rS
{zWN:E@!>|v
C;<;nXD\
9hsAV\WE~
:f/)wm$Z~]
@y!1VgH5)R6?
!http://ns.adobe.com/xap/1.0/
<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Public XMP Toolkit Core 3.5">
<rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">
<rdf:Description rdf:about=""
xmlns:xapMM="http://ns.adobe.com/xap/1.0/mm/">
<xapMM:DocumentID>adobe:docid:photoshop:e4a3f931-627e-11dc-ba81-9bfb3cc4cbdf</xapMM:DocumentID>
<xapMM:InstanceID>uuid:471bf83a-627f-11dc-ba81-9bfb3cc4cbdf</xapMM:InstanceID>
</rdf:Description>
<rdf:Description rdf:about=""
xmlns:dc="http://purl.org/dc/elements/1.1/">
<dc:description>
<rdf:Alt>
<rdf:li xml:lang="x-default"> </rdf:li>
</rdf:Alt>
</dc:description>
</rdf:Description>
<rdf:Description rdf:about=""
xmlns:tiff="http://ns.adobe.com/tiff/1.0/">
<tiff:Make>SONY</tiff:Make>
<tiff:Model>DSC-P150</tiff:Model>
<tiff:Orientation>1</tiff:Orientation>
<tiff:XResolution>72/1</tiff:XResolution>
<tiff:YResolution>72/1</tiff:YResolution>
<tiff:ResolutionUnit>2</tiff:ResolutionUnit>
<tiff:YCbCrPositioning>2</tiff:YCbCrPositioning>
</rdf:Description>
<rdf:Description rdf:about=""
xmlns:xap="http://ns.adobe.com/xap/1.0/">
<xap:CreatorTool>Adobe Photoshop 7.0</xap:CreatorTool>
<xap:ModifyDate>2007-09-13T21:59:30Z</xap:ModifyDate>
</rdf:Description>
<rdf:Description rdf:about=""
xmlns:exif="http://ns.adobe.com/exif/1.0/">
<exif:ExposureTime>10/80</exif:ExposureTime>
<exif:FNumber>28/10</exif:FNumber>
<exif:ExposureProgram>2</exif:ExposureProgram>
<exif:ISOSpeedRatings>
<rdf:Bag>
<rdf:li>320</rdf:li>
</rdf:Bag>
</exif:ISOSpeedRatings>
<exif:ComponentsConfiguration>
<rdf:Bag>
<rdf:li>1</rdf:li>
<rdf:li>2</rdf:li>
<rdf:li>3</rdf:li>
<rdf:li>0</rdf:li>
</rdf:Bag>
</exif:ComponentsConfiguration>
<exif:CompressedBitsPerPixel>8/1</exif:CompressedBitsPerPixel>
<exif:ExposureBiasValue>0/10</exif:ExposureBiasValue>
<exif:MaxApertureValue>48/16</exif:MaxApertureValue>
<exif:MeteringMode>5</exif:MeteringMode>
<exif:LightSource>0</exif:LightSource>
<exif:Flash rdf:parseType="Resource">
<exif:Fired>False</exif:Fired>
<exif:Return>0</exif:Return>
<exif:Mode>2</exif:Mode>
<exif:Function>False</exif:Function>
<exif:RedEyeMode>False</exif:RedEyeMode>
</exif:Flash>
<exif:FocalLength>79/10</exif:FocalLength>
<exif:ColorSpace>1</exif:ColorSpace>
<exif:PixelXDimension>1024</exif:PixelXDimension>
<exif:PixelYDimension>768</exif:PixelYDimension>
<exif:FileSource>3</exif:FileSource>
<exif:SceneType>1</exif:SceneType>
<exif:CustomRendered>0</exif:CustomRendered>
<exif:ExposureMode>0</exif:ExposureMode>
<exif:WhiteBalance>0</exif:WhiteBalance>
<exif:SceneCaptureType>0</exif:SceneCaptureType>
<exif:Contrast>0</exif:Contrast>
<exif:Saturation>0</exif:Saturation>
<exif:Sharpness>0</exif:Sharpness>
<exif:DateTimeOriginal>2006-10-12T01:05:52Z</exif:DateTimeOriginal>
<exif:DateTimeDigitized>2006-10-12T01:05:52Z</exif:DateTimeDigitized>
</rdf:Description>
</rdf:RDF>
</x:xmpmeta>
XICC_PROFILE
mntrRGB XYZ
acspMSFT
IEC sRGB
Copyright (c) 1998 Hewlett-Packard Company
sRGB IEC61966-2.1
sRGB IEC61966-2.1
IEC http://www.iec.ch
IEC http://www.iec.ch
.IEC 61966-2.1 Default RGB colour space - sRGB
.IEC 61966-2.1 Default RGB colour space - sRGB
,Reference Viewing Condition in IEC61966-2.1
,Reference Viewing Condition in IEC61966-2.1
W meas
CRT curv
> i
A l !
!H!u!!!"'"U"""#
#8#f###$ $M$|$$%
%8%h%%%&'&W&&&'
'I'z''(
(?(q(()
)8)k))*
*5*h**+
+6+i++,
,9,n,,-
-A-v--.
.L.../$/Z///050l001
1J1112*2c223
334+4e445
5M555676r667$7`778
99:6:t::;-;k;;<'<e<<="=a==> >`>>?!?a??@#@d@@A)AjAAB0BrBBC:C}CD
EUEEF"FgFFG5G{GH
IcIIJ7J}JK
KSKKL*LrLM
MJMMN%NnNO
OIOOP'PqPQ
QPQQR1R|RS
S_SSTBTTU(UuUV
V\VVWDWWX/X}XY
ZVZZ[E[[\5\\]']x]^
`W``aOaabIbbcCccd@dde=eef=ffg=ggh?hhiCiijHjjkOkklWlm
oxop+ppq:qqrKrs
tptu(uuv>vvwVwx
xnxy*yyzFz{
{c{|!||}A}~
zpg_XQKFA
?DINU\dlv
@Photoshop 3.0
$3b%4Dr
7h#` $
)ni O]
vo>@n,>
&;kol(
uGGhl,?%m
;'fjVs:GI'@oasp]
Qq{iL=
ezmI;ir+
xj*f)Y-8
*Ni#e
t:ew=W
Z^,OV7h
BuTVqvdh)
6R_%dY
P*;k:&|
bN>Iz@
\3)45@1
LFc_ R
i!xRwF0
$"YPMs
MhuX.@
[J_Z3M
u\|:( 2:?
UM$Ik"
wOxT"&L!
R 5! jp%
iZ=8$U[[6
T*t]bJq
=R1yw.$v
:]d.k}QRwv
23X+MT|ttO?e3Z%
2>9<wS
#! k I9Mh.
i;$H{C
LDan0~i
p"Cz+0
L@`8hM
lm`2{;
V;-wqu*
vTT\Z{2t^WQ3
@Ts&ZNYn
`zBlH\
WZ$` 5yXOcE'
OAt,m)2V;\@`o
NXx1qz
&HX#iM;vgZ
_plz*&
<9_t zH?T
8Q$3s=^H
(60B$$`
>-D47QiiG
$45Q^Q"
^F2VZ2`e{C uuqS5_\6Y S
U6G Kf}D $TI7JjM
0NK[q_
D\kbF<
QrjuJ\d41s;/-
"g"~Mvv
MYObqE
SaZkS%dA
IsA.Q:
._P+EX
@V<u%F)K4S"vQ8
Kh8 RP
??u "~)
'.qSK]E>h
4bq)0ZQ
@ C2H28
bZ0%;=
iEkuV^rh
a\>~_RRm<
Ip>MSZ3 x=BZi}:
NtE5*n`r{-V
N1WW!2
N1UF+R;/P6
Y^w{isu;-m'uA
q*x<g*A,"OmX7
^zib:Ku:
XI=(O^As
:.1-y*/n'
M}&s!OR
4qF\78p;}
27ffB=
O^=xav
>D"Iot
nC]N2$88
kAc>jW+T
Ko=daSFV(
BG<mt)
H"#5vUY57Q
+U)Rkgu
vGZ5,~!kq
NIsESZp_-t
u)48Sc
Om2@s<0
DFyHL
o&:!iL
q{KK}(
yHC8Fg
2bz@gL@9p
TKG&*a
V[j.sV
6u%]e+m}
:m#=dd
$[,SWI{j
qz/t+J
]N #(=Yw9z-/Y{l?
0>HqRr[5f
lp:=Tma
rXxdM2'9A$
$$=MLODx
p$4g\g
5pdf[m
L+E'jsKV
grLMG]'Sv
-+5rD>B2xK
De=*Sb:F`SGK\}y]P^=9
WI;I+9Y&
Ug)6$6)
.G_2G)D
8MAs`<
{{'`%S,k
s9Zt!TZ
pH2=T%l
;i;6Od
<(1s#z
DF;#p$
$.'*pX$h
VSm?a~e
V?- 6f
f]Jp.q
_`mfA4|J=$-S
1(O[&w1
u]kWRqn9o8[)f|2:
<$O^U5Q(c=
u*NX~DDD
QUk$p[
q j\G3t
f@"=S@
G`(7p! D
r{!3VepbxRm
w-lnL+ZG
fD./Xm
*YU8-Kh{cq\cZHI6Pfgt
goR$!a]F6y+&dYf
"=ACrV7
%^!51k
h)A_Pd*2*
m"cR0_
1)#$n-
Cy9LOR
B~H0x
B\e@g&GGD
eJNeF+)d:3
P-.lQ&+
(G5WQ79
&~J/y3c,[t
HOrmB?LOU*V
!<Kp(x
>-ies:0);
="^zwsx
Go`@t>R
3+^b.E:6
MTHJN1=N
vaJD8+
anZ^$8(WcMLa=
dIc+}Je;
],pDT09"g
HotOuc*UcZ:4
oa5ol`
1D4!0%X
iEd+F{jT
H"S}v2[C<(GeU/
J"#)2d
iU+TnHw`<>1
jn*CJ=
=3Tf[0
i RoKH<
sfmN_M
dO4&jE
31Ag{[
O5)yeJ
j;1*B][
uc) {E
_'G@7O0
N/<3V,8N*Z&
wS3<Q-9$,w
~jMo%#Op
y<&K'>H\\H 9&6
<n1).`g9
hRWFp#(&#
pO=Be|okveBn6[
G)T}"Hp
'X126(hw0
iu&Ycc#
p~r"a~S.$z
F3<}Kd
T qtF#?>= R
craX,6e
{*GUKrh
e@&B jeg
7; DGTNs\
N"dzNR
8i20UmJkZH<+d^KgU<.}`
&\JF:
6=e 5huV
UiHRZ
/gZ)Se'
V)Ki:)2H.*U%<
wOe*d5t
`l;hLm_k[D $
4S]dgI
c w*4crm6WJ[wO$9
8*uh<kiqw4(0K@
.Le= y@
/P~;}0
@E`mSqyq;>'|
:ERCUU |*
0Q2GT!a
;Fx;0F{
,Fp%]mQ
Ni.BWTffGOyIZ
@<JTz
22,@App
\O.s9D6
/'&a?t
(Re'}L{
B?H 00
x[*pW74
Ds .!T)i{
A!p=[3)
ed~(oI
v7V-k^7
8~Il;`
x8H6BL
FJm${w;[U
u:FH>
etW'c9#[
OtF.r7epa)E69
>Qf;)TD6
w`{*[$6e!'
U Bs`J{vP
\M1J Kp1;\=yq*
K;Rn/n0%
Y4I3Y}!P
/L]S`#
I ,; %I
Un0N}@
=Ka)k)
+/:sB
;l1;.dOD
K&-r8?e
=;T]J#
BtT6X"ZXvEan
-=8!mRX
rUKb|n(qQ
)kxHAn
D7L4 2
V|Sa?%smDKUg
?s( B8
z)`|Q=%
R~ vUvDfz)KF$
9V+E;z
vD{(T/[6&'fW
.?4:{Q
f:N;.>-
mA<c KC
'n'(SuRIs
[=S)=Q`
2H')sp;gkdi@|
=$J"@<&;$
Cr(T];Jj"
@2D;SkG1Y
mivrdU|h
J*^kky'
Hs<tNj#f
G7Or $
2$R.T+l
\OcvH D
14<0S@jqh[
qxwF6p3)
Zw2Uxsn2{
x"60Txc
Fy u&R
M,F}E8@8Ho(
~oTDz6
Z9#2lkG
WBtWDA
7i-=;)
Xm;c'6@e=
mH!6Q
0H-p{
d;2xPfA
8Ath=?d@a';a
QXQCC}AZhLo{[J
F\>\b3IR
z(Cf= $wLG
9V$u@N
Yk61:jIh
JO-dd+k,>U}]
r`9%NR
8:$0"b3*Y<
lnGN!K](
#w(v6n
0zG>\`;
q\ aq=R
idUTlw4~!V
NB7{hRT
O`\ph8*Mun;b91
Inw%&0
[4#I8Q
#nfe0&
l#&O*#En
:*|8\kr5G
_lp$8!#
'm-Eq@M@x'
$3<"tY
iJ_E( 4`
y;bUv6w
Lxs&!En
Od)O*[
K0;#qh
qE=cw@
ilmy)&9Hb%$`@$
c?9Qp;@
6TGV>,d[
#sv058
!MFl!OU
4$(-2t8*Tn$Z$
'"w@q
FJH`s~?hz$&G8
U%YIdeeU
UUFF4ql
%uim#4dX2
%68~PbB )
GYOycM;
@C@ N`
%":fNG*A
z0DcL=v
GMgd`Y
A r,DdniATo
}-9TbA
G&ToXYU?B:|;
xT=IlpC
/;`KPu6l
mta!Ry#x
`y~`9@
*r!(z1
odo%I<.F2^5[ & M
9EjNM7P9I
K-J,t6
^7T6fZ
6/p6ni
c7}@N#@6
)n-1J;
4ZE^_.-yN09i-n@z)
;Kz,}O0%N1%
Tb?bBikA2R-I@V
OHZzvjRE
f\C#wL{:Z6p
hqFzV8v
FexB%K2bfT
DGq2wlc`x-rG
BR#mCU#*
'UCcB2F0%E
*5kg(}
fA'p'#
CZr!JZ
{[/wbD4Kf\qd
![nX7|
ZfA-nU1.[
I!$pT!7
j>1E}E
H"cmlVnr}Kr8
pY^eFZ [
Sqg<jYZ
&+1``g
t*\FK[
Ico_6)?h3%
wRF:^aO
%'f#-U
2== .cXO5
Ww45ap`8
sDDTRGJ;
Ll&t/nl
l;D~?IN
O`ClOJ
8"'(' L'p%8
XX0rA^!F7HS9
_SmmqisENzN
5}3NmD0}B]
qchN V)_
kXM'GF
.>idHU
=;ZmE0
ip=zFnA
2VFeO6
O)iZ$Cajl
2eFUheB
1?4mr`'
dKZ1e-Z
BF*.C3((T
I RmH G
8 (kDc:DlZS
;$1@D@
TA$I!H
y@,~9
Vl`._OLn
CllJi],n*=v
!vn\8YSD
,X(s_ZmBRkm>Ei^"J
Knm #Q
uXOJ+qU
w4zuM{]Z
?eQ6;n
wgb,h4;qy
#H<^h4
?~=a-k-4B/pfrI_
.&eY|i-
^M:\G9sC\1Q8
Uh*^x2
<j3 c]F
SLliS{Z;
/}-fiF
Uu?t1Gt
x;;=CK
q|z{Q<D(Cx(
Fpr:2v
,OKYk{KX
s`(f\\VmXj6}j5`
TVYMTz?[h.
`F!y9lo
zLuK]K-\
Dv[yw^;/k[j6{V
*kVZGh
)MRO/hx
r<?b*V%>'^2?S
=UTc$%$
pUf-(zD64
Ol#u0jV{[N\
HsdVi<ZAi
NNqc#(M
7{H0qQ
^d[A-kPu'n
VHxuVm:m
H9d@th
n]pj;2yJo`[
rEW_s>y/<.UD
Hi;<d~4=O`p5
gg[>:O,%tQQ
=Ir'Ik^J
}=g$Ap
@4zz"Y(
\K$&*OR-
[_JiYH{
`DL4nkYj<npUUYX{H8#L
&[^&)D
'Zre4m
W(S9rNNZzUjIk{p
kpm(9g2D=
-8mFPjo
=v#T[MUTck
6e}`FO
W\ggl5jyv[{
kD{MH%
ms/4(VZC+
+N=$~>$b
h#swCT
,0,#J@peE
f!%tgeFO$uAL
L7`sdW
MHI\t*
ea-8ktUTl
sK--U)
i7d"M96$49i<mpTVhPO*SV
TLd@H6B
zSRth]
'cmW\2E1
n'%Zu7
2RSyNEZ
)1xJIZ#S
~!-NUu}
DOnxkD^tmy6{\
G.Oo]Nm?
i2NL<FSw
%MNV>-A
t27n&'
)*V4c^x/{
op u_+
Y:nAj3=y_o840
9u08@3
pWau&0j4goU|+[xY<?xi<
{/S;LFF
srg.c\
QSREM/
gNUaqvU8%g
>qxs1=
GIk*Ct'Y-fY}
"4(DS U
hRW#7TgM' S]RH"
!]]GTV
hhIiUSk
/5v=b(N?t
@|J{N\
SrqH/9G1s$ 1Q
2HCAq3-)X
^Osi4L_
1bo7UwD9
pZ1v\P1
)oay?u
bCe &8B
AUj=d=w4
`.U4<-*v^
6_g\pAJS$^F
W2R}08
Pq=\s{
ui7'h[Iz0TeZg;
`*Im{|t>orjq<H
hI^7KK O
e ]d}*XU
^I_U\&h+^)<]_E}4N~kkNF
-mwcPeMaGUP`
;(JZ*6'A
N'SDI*4KsUA
b{!L+Xcc
?~MK4Z
Tu@|=\q*m$
+=0_ 4
|CaIFlZ[
8Y2nl$q7
]N!I.mpj@w*
"o<1$?UY<
wqJ}f6ks\.pF
).HRvi
ui@m@L
[96taCU
Od_UV-
$pvL9U
bQVgB^
4)uJ+j5&
2LvzSS
+% GtP5+euG^\
:q]Kr/
oCmUvC
(X4o;9
?U=?ZskB_IN!~
\[\|lD_
\efs~y'jQ24
]}nyN51rkk5KO
-rH#cx:;Ex
{pn-4-{\
8]I:~Vw^
?z)'eWgs
|=)+ouoUm>Dw
vQc\Ocq{86M88VkFG9
lO*DO?
bF@04Eas*XSJ1k
AcQH%`HVCB
J77<1 P?
}E<{)7
uL$H{LH+X
gu6,9o5
(yyX9:zl]
xLElTRqs"z
^2z]=:w
i>#$H86
T]lc~\>2xQOqt
luR4Tv
ba,/eu?/7u
GLZ};XU
1W$.zwwb
P`3!_Cj^sX
ixVV4c)
u}t)3/cy!{6=gwg
u@m, zL
-Xff3>5
^^N>;xkm*t
+MKKb?]\\T
8AfEDJep;c28
5YRmWS
Uq.%[7HdZ
(6}G+i
6iIpSf
YUwmTN6
S_Ld!2.Cc
%`C-%7
Ul&@>`=~j
_K&# <lyE
l@sO)z
S2DrZ]Uo
^I\L</EFsy)>C
"uRGSq
UT5)s+%cB"
7k Ucl
~Tvb'3
)G4 ?oU
{B6G#uuJz:FQdq
CB#u:g
rIwV.Q.sEJw6c-`
Rp;Uc8IH
'mA>mOXyuYqn4EP23Q]eJUr|
c(p:Q'g}5{5
sKoE%i
u"R?/}n<AS(
Q[q5fW
'Qvll??zkw
T.+]OP
dvTq:cQHmF*P
Kr@!W'rI
rffiU1
S+23vW:hWcq
7irjTqa
+d)Z1Z
-qc=[ygR
nhvK4l]
N2y+hUOy7
N1W4P>J
c_Q7iap
e"qP3'E|
akmZrD4uV
U7X&0m;t(7(
Z)m(<.
;For2HY
F.LxoCu]
?<'o]Y-jv[
/~ x"?7,/f
mGXl4/
w+W+f59\
mac^*1)%Q
L^JT*K~mxMW
kYs9^GP^ko2'
gQ]jx
VkU7npK[P
:6ZZLJx;,t;&0
I{]7O+
MM?t+;/ ikGpFa~gOHfJu
uJvo>&4
u{']q{8
]>KqHakG
?B8CDt_
M+']][b7
P}) $"v
y&zt-Y
UZZ$TmB
9:H.YJfs
[dT4TZ";u
1 +i7@w
GF'FD)c0i
$*A3:v.
ZBCkFd0
?^ /|=3Pi0z
AReiPg1[lP6
zZ5c'`lU+V
W:IRJ)h]
E]hJAz
+w4U;wP
IwzfVz
.+)2vp
|]sgiu.gSc
M&3LuoIh
5pcIw>
S-{[poR
jUh[c^
N~KGuZk_
<GsRNL-4+6
na=x#[
bk-moO4H
h^)k5w] [U
nsWe,/
q/]Su:mnD~qCq*vq
x$*WHFI<N
Ejmw#2nuv
3[tsP&S0?
&G+-_*UvAG
X#:v&kN
R-Ncxj*qv2Nvz
0nwqPN
PZxo^U5"%
9N;&P?(
j&eP'T
)]zpF-
7G-gH&}
. @&S@)
e7z[uH`CE
OLkQ+U
ow1JamNw;
Fh\>kNg
7eu_ g$.mjs
ViXV1= BK
e;"0Eo9@
U32muY
I;wZ0RR*
jI48wUV
RUad2OsO
^Vuo.Ii
%W}290`t&U
7{Fn}jk[
*R&~9$
[VouD0<
74Qip;,-%F<}K
q,>aU*)Em
|LZ(+=
;{/ ^j:==?Tn74m#
lCvH@^AE2
zxKsw>]
h+'5K
wDd&i}$U4y;
Q$Jj]_~R
:5\][cnW\<d9t:o
~I4RZI
vS}r)Rk
\s67@\j
jgXp[Q!-
ISUbeufUn
Ct=Y.'
J@'@BL
KS69%t(
Lh_l}VVF1
Jqi`tQ+KDVs
M\Osx5Zg557_>&
^~$M}O1=>
Oz izeYP3I
}1~;Do=>
\2 p/v}V1
|i'(NO[;y%;S-l6
\eN}_?Va
"-uZ~t\
E^9ynmJ
Gezvs!Vi
dW1O&l},_ \?
xoZ4j4R
: qtRR]_#
~:}j4h8
~/xU)Y]
!EK}o=
1{^CE2Zr
YRSU5i0AG+
A5*8ny\q
/4i&^wrG,5TjD
!L_>1bPZ&+
D~B0v3
([sjCDk64Qfz}Q\
^vGcd}z
%{:3bc~zo}seVg2
#>Jhzm
aZW[yY
&eg-iP
Lup")m
3Rw2I8
P{DH+8r0uAh$((
1[lY~AJ
@=T?ROp.Nag
.1Q|{(VVJ\$
.h(p`"D
39<"#%
n#-E^/3{""7
#$?e}]m6}
wUu7=4&
r8>>/?8}/
sP.U[;a~
t;<^gUG S>*b-
W:s6&6O U&
)n*5*d
'+ ,IVJ+}
SNgjWZU
pK?%~$
TUx(2g
S\<e"> B:
7a'VM?=NG
nJT]9}
WcQrz'pM
pUQ!JW3p
'i\o.`T
0>k7w^K
L-LoxikPy
NrW1RQ_
V#IND%Tf'
^N;'4s~VP
ecsYS#-[R-S<
wu}bF=W
Myz4UiFK9Z
GNOIFm
[[RqZ4
zE [;UW
Z8Ee-/%<aE
'yy|8W
Kt_;&y9,
-/mmIN
6a.:/Nx{h-9K
I}U2t] N/
8WPp'{kB>#I..jLo s
Z_VXDc!*X:Tu{
R\sBpZX~z
/-vL@8_o"f7(
>}_MjZ
gCFqe~t7W\Sas
Jw;q0G\/xP4RE*TH
Li3_2XTc
I[_N*4[xBn(h-
v%d6opAqh
7\F3<W
r~IV'N
@JQg,
]R%_g+c+&5
pPe/XH
5GMzB[
4Z~e6m
}CWAaw
_5kLYi
89Qz0B+.NmF
Z3=TX[wd
MtA>@0
Ob@!.1&B@
Zr|}TM
Oos+GUAfo
sO BxRc}-
e4&t<9I5kj$
iW><mu
=6c>Ch^
VF5]I7<bomE?6Z[i>6
k!qE4)
-xxpwRij
@BWI U1Cf}
mF[FTi<rV==Z
-Os?-{QM
@ -~8x
S5)-U!OcQi' %
s3*5u[
_P{iu:m
R,m6-v%
tkJU*KAWjy_C
<%Lmh2
gSZE]Bj
^jwUk1
f7v"P$tsu*v
mAgI*F[_C=x]\Z
r|<qH^
gK&h;;99
B^vsPynea
F.e vm'E/7%cr
YZ{F{*{''wq%`~t
kZhV6\)AbzO
&@RZm2wG[
`'dHo&
?4f'?4\
qNI>"0
.LIi>Jq
cD/nfT
!Qa!~EJ{5vf2Tb=IMP
[="EjR zz*z
1?tgOAmn
}WwVp
E5kW>-Tvw g
m:$s}V;5
2-?:/+wh7
]V5Le2r
%MJ9TjkvrHKJ4r
$B&"1_p
=mA}v1]]o[
iW^;@=
^Wu8_}9?
uh6}F}
uQI|um
NQ4-|M
h0Sd;y]_
kPdD_=`?W
*~' FDu_
O5z{'!V
++$nx
GRUWE3
Z7uRu?M
8i],4[
Is^iGt\
s+!(6m5Lm7W
&r`*m*w+
wV) N Q
VmnEsWmiS5
Qi+Uh{
T`Qdq2g
d^fQ7'
u:uC6X
tRW"[Z[
I44)o-
! 8H:b
CXAi"9
VHBcq"
m %S&(#l
OrTEPy
"fB;;Jq
r~!cZcmkL
_RQI7kVgWu.
?i^?RX| HN/_fj~2Z>z}?]o
rB[Ow-rr8
>k~t|\Z?
/+_w5>=
#R{2_Hka %>
KU\7H,8Y,j5M
p^#JZS<0Td~
,4zE1G4:$
7_m)[2i57
RP^t^3
|&u;U:6
[+-m \8@RO
J>pQVc_3rrqQQR[4-
Ct&I/4>
uKQKYX~>
$&NasH+z
^:1tAJ^^
G OkF]t?MYTu^/RY]jiB*
($l;g<8
.tx[CVZ!]^
j\\9j_ush
iA%sV.gV5
W/the^T5
z?[RfK]'h\+
()-Io#V
D`rAd`s
?Tf"{kCjD
JaRX) ?
xFK^:N
^5ujv.
rSwx~y[
^~!~"[jmS\>zm
M_YRx'BG :?
7>$)^^[Ruo,s`
m!uMBmSiyZz
g9+'w:T*IGd
Iy^"qLGbt\
Ji>153?2W|
y2L_/ '3\
NcpxoiP
S|Tzfv;kb
%w<'[jo
-kkE5#wh
K!AyYYh
.|Ri9U+
rNuZcNH+).6
1~-miO
]SSk:%v)TU^
eZ9c8g
5_Alq[2"1
NiWnm|9sj&
cj>Hk?mlQNG8
m;i}WixIe
^o_iw.m?vd;aQ s9\M
ZhdN:/
VGK*n'u
m1Pn0v~dyk[ s)5[
%&9i^3"
kx.8Op
%siHuT92
xE:[0;
ITZ\mGTw8
s|Js|_OTL
rtmi'Lb
}Z1hMaqv
R#k<;=
S?SmWV
<{sZUJ
GDu/QZ
1N?wp\+<7
zeocXU8wGnZ*
WMI*4\
>ntv)Xx
0*[I7xLC))r
uzEFNnC
rcWO_{~K0
Iz $mo5*/k47E}Q^
];Z8|?jr
P&9)c%q[{m!-$;t@
h..8Z.jRm'zf5r
CQA[hnNel
myuJM<6Koi3D
z4SVqifV})C$c%9wfM4*{<s
x^6#Wf
<&-z;&Y
t\e6`H5@sDO
{/m:PSF:
.\xQ&`
|-5E9~bt
)afim
(Zk;3U
_'Q1 57
2#p#3HL
='8Y I
l;j e9
Kq-%T&
5ep 'nA%0
yf8zb}
" Oa;aIZ
L(yp#F%
06c;%5##fd
NakWYKyZQn$c
|"}] `|4
`.e*K[T-^W
z5+_M6
S0C${^cH;TWce`
tp5+%kI[cp)ifz
;g#_]i
RHC9N J+B
@6k>] exMLnlE%
;Ym:ti
zkWiyk&
|m'ZQox
^kOO?W4<+TVRmJX,ub
JUvj}cUzJqqeYDp!F\=C8_1
]U`i9RyKV
`-:so-s
#VUVV/
;-l/iTmAS`P;
c5e(Q;O
tWoUuK
<;k5U;]k4Z:
v{#kU\2j
]juRwVr
jx;R UWQ8TQOsqXj6et-ds.t>U7
p~,nQs+
Q$6Nee
a&~"B># 8i
}\ vA)rG
_eM*mh
>V6[4wJ
GgY ,>
f!Da6Y@
li]TYK]a8 7
?3T)]y:p
.mv>w;#\
x\.R];fG
]=q58tdirb
Y3&nVey
?C:XH6Wm:
!Y:cri
o+[K^#'o
Z.-}O)@
`@=Y(S +_hy4e<cFxW
6N*YP _
cBi*mcry=t\rV%
O(G<DH@
-u8G5&D{ 4
BCcn VV\
M%w%{n^KI5-
wnFk}BGf_x<,)
XU>ZN|\G
g[}N}{{%Us"VKzkKOS
|ghtYlWe
eIl"&z&P-@
L}JLT9d
Z0RBnvi42
r;y dw~
zP\I [t>}
14:SjD
}'iHiYh
k]?@xfZkkg
e8?j4%k
`q+~.v4
KqFTf!'frk
.3rQ,?
Z+ZukUX[
2j.\8Dk(y]xR
ONU\j~
;uf{Rq
/Gm]FM`
(4yff`
^J4=J<
q}OSeAB
r0}uvJZ^
Po1_u
0yjVYd: eeMtybB6^k
kLJ`Kk[
g4|m!=YNDdWqPUuFv`tV
vtP~;J;
GF?`t*sYRqmp$g 5U;kJ64/
v}r.zvUv%\Ej
]qRI-a
flu}_N0i
UZUZjnv\%
n,lpH!Zd_
)QN@ SO[
~H8`I[
kxCH#i2
1T6Fd`cOIT
JrKceCh
h YL1VH;T7O
SIj]e:t
w4Tv9KGu#z
cuiuoX>
$iV.|Ec
#o9=P;
OOtnW|uHt0\
_6,3NHs<AktZ
+<.<oL
Oxkwg}|}7
Ke'kfXZ
gcW .-Y
uPQJVFkD
fZtki| gf
oe<6osh
,-xO@6
rI{w<{
p;rB-fW" XZ11iWW
TLAySM(nJU
nAW}60q+,mRr.&hp
AN%U;j\fN
NUMG,c
%- no+mfL}
\Qcp7L"
0DR;]YoU
BTl[DS~*
Ktm^fxF2
$)f?_ja
qresjUR.QlgQkd
0B;MZH`H1"09QC:v)]hJN
i=08@a-
;@R%e?
^Iy:`7w
zn{@9*E
8RkazTyio
j$ak|/
[u``aVRW|
0O+YSGi*|
7 7z0
-xVFv8)>XKKO
JvVmVvl
J<&:hw>Q|sgO
Wz7R@Sp
7k~uN-
rH-| kMOKj
mB3";AY
4ZyGI2^%P\uG;O_*[7,la|
P9Y^)3+9
sY!4HIk M-.!Dpx@#
Zr:S|_2gJ
]5E79s
JWa,2z
+S5@}MUg
^63W(duEd4
V,r`T%kzm3TX;:4
Lz2M^2
}WKrSoOS=m,
F;6c@2Z~o;s
fg7:_N+M}G4z~K%
u%6:cvuRGR{
cpP}jbH vXb+p
4]:q|C*u|8)W
7<KSsT,
=546ZWwX0yZwY
TQ9\zh,32>
zq8P 8g
Vr`p"y
\`%${+.
ju9L;`
gEP%FJL
uC:{+:
Ieinpuj
mTCg2$+\o
*Nao$I-.
pOt]lNd
znDjcZ
Wt\-94=
[V4>a#x
%*]Oui-
]goD;4
5/,*VR
P;,{giC
>4P{3OqF` |/-
,<]woA8
^: KgW
zx\FkB
CKedtxF4
-(uG<S.l
Rvv/k]R
x1mQ4/
HDrs0sN+f\
f^09]=
"w<?GR{n}8
?8\:UE
WS{^Wah`4A
uiPJ^}
=VG=u<VO*T
U1RJ45!
1A e!>
*QL@, $
SvU?rnnVl=UdQ
R757s"
kLCLDK
7,c.]Opv~ -
\3-p$;
gV|S:m0H
Tm}l2]
~Y7nkk
W?:5@pq\];
Fn8uk%HJn
s.X>18V^
%%W)R56{
+,_B84>_j-BVvw>_
UM9`qA
7R^*7k^
h%M'gKK.
8+m/^*Z5
xM5C?u:gVE7
5&wf%xn7\1
4NofH1\6@
X}nzxdY
D`cl/!4:Sq&
]JXZLh.Ah\
[yJo7i
!yn-NK7|q
M.@U)2
v@w?E~Z
{Y^_c$nYHqi.
0WFfJQb
W~pyZ!
OS]z=.
<`7vv6W5-%
>$v_y{_
95hMjH7e-oU
N9mq-Cp
m-B*<L
f-wHAkz:"
'gq3k-w]p;n-Z^e(?G
lOw\KS
E!A_i7K?
]4qmUw2:
jL{)@lhT
/o<~ pk
]Zxq/9TN/n_'JJI
gVe:FpNE
/~Rxj*
}]/=IuWy
|]NkSivl
3xUu=6W
SO_qUyVrwq_F=m
PQQK@C
$OOuNsN
(_aTc Fv9$
Z\|A(<
80Or2=g(
c2LD 5EKK
jiUgb[:
:V "v?>:o+du->
umL}7v=
k9ein+V
ZT`2>EmJ
,p_1k>d.
r6Pu]niTs|a
xqzW5 Mj
kB*4Nki\f
}=d_m:\
sS_?O}G8y
Q+Z*5[Z\rRcy
MixpV{Re
Gv(Ma2`)b
)5pOeZ\
TqC} .yx!3\~H
[0']m0
d""gOO
]tn{K;/{+
y&gcrdS
:zMgVJp%e
KPh0osR$w673
{ CNH3
GSm`- NA
ysI|9"(x
RQ.W~6a+
& /'V}HGE$"wz%em
jSr]H2VU[m'
T\Q6x1p\
~Kg-^X!3=+
~)w]>Q
u%|Ws.vO
P)>w6jU
j''upM|K4
].RvR6QsK`J
k7+U^1ty'
:SB-ATw*
V*e#mk}T6>[l#
:SkdnPH)
V4<z/[S[
jf[QF+'==rx\Oj
;FEjLZ
tA `uh)X
88pA]3
kO{VZoQY
vY]ib-p2K8*
-ylAV]hw
k.VlE;4ds.m:ke
*:iy|
9N5^{_I\9ur
6PhS#wS44
s^]b8\b
u]D`.)
yMTLCAS}WFq3
Qm^edbAFgF0sN\j
?J:2vnhs0
MjRfeD
9z*===P
ZF:)T$phaf[X
TSEE].~}
pz+/?7|\Ts^V\]n~a
]LkUe!F
:QLycvQj
-6wI;G
m. ^bds
Zj/mY-J}u
}6^N|lx >$_]?=O/
fWg*og|
2=&W$I3$I
&I'+gR5Z28
U3&2SBsq[[N&v 0iK]
pc]JKu=,y6Z~r9^
JOe<G|kqnm|RyY='Dmo
]8"~K4+F
RxR_ vVA#I
.]&UUv
K$47G1
:LUf}.
P:LuCKq
OQ@rN;5[RKjw
lI$msC
zx%/[zU
BaqCi$K
Wr:SAR3
B[v?~E
;,KI7H
{_:Umu\
cw\M~ Wi
/LR):j
Qmw%[y67.
ezvmv9\
q~J=fVk}
oDmq<fY
OPH0I"
dYME@+
Y!gr{\&
VfW'erE
UAOTTgf
78I1C~
85#9yR@H83=%D`7
RB5gj"8
k lZYCq2cEY6U-9x
l[D&L*vO+cHEFds
O(oR`4WF
^\R/jiW
xz}mZ!HmZmv
x*_qk|
&&.E|4El]?>
i~(y}*
}`)1u=
U)h!R6P-
Q.5(`Jw
R*MF^;3Zv^#+k~?jR
s^>Pj#v?f|M
TY]T'=uA
U=dF//m
<f2T6|
zlmS/I"yjVaU@2
.09THh<eyY<V
JJw+UWk
XiNoKz]E
[1,;L]
UJWIjo
Z-gznx
RRK126]>
~&o;t<;r,
UGUWOM7<<md!j
dT)Q?>Dv09
Rp#x>6
D8+ynYxC@kH:o,d
IDGMoF
<M.B4!
}XUF+g1
BFi<BN2M
D44S}J
lK@G$Q
9Xcl)OACDL
ZrLZ"cU{
:%np&Vla
Q{QRPM-[5\Pm
!L0ePQ4Y#\
\p2mvi~'N
Zkuk{RK<Uwmv
SqM=n%}
X/4TRa
%&zL-L
-#aqhky-4rLVZ
*Xc)#VxPF
H;z{=lkT46
Vz+;vG
|Z|EIV<aMVS
nIO^Ou;,eR
Q)>yzv-9D87\
t^\}?eB'a
qg S[12<pe*i!"B"`'mOx-t
JKDW%h!}lWn
ZKT&0h
JG>1'bU(iE[Z
^[G:.}
qB:k;N
s=}T-mP%
E^JLz[}F
hAK[hjzKQw@
k9SE+Y8I
u+bSh,
+-:KfM.9l8J#X<K8t%f
aXu+5R
Tih~#`
;mnk]2&\~<W2
~B6a`{j?eV]
!+5m`B$"qRW
9D$6ZVtH
eb0dtWJsji
rjUm=WqyZ@<
"~Y7yy
%J! Q6u<)hZlyj
5!$ycmx_Zu
wqi?7`bE%^haS
o5[:~
,{Fi}'H>
OXUAJFp
a~Zi{Z]
RejWRI
^9J_;_DO'
{fLdk;\)em
.BdTF,AS
nN'-w^
jNJc-l
3*;=c0GW
,aZj(9$Zz
py^~t2-:oZ
:%Uv}5+
4""z@,6Q
Wu-6[sP7
cw@;+^2
+]9D^Z
{*jZZ19
cAf'_ZQk6C
&AqpS4
j$rjeQ\n
7{^>Rn+ybgP0sPI+J.>
CQgpzpZ
NOEL:36K*Q3\*;dwY
JRY8)Scv
t@3Q
+y;V-?hIf+
Z4Y]6^=@r
O-#T8pMl
iAw^=A-8c\>
zuI6"`
IuSDQs
ssQ4JO'
II!i&_LRZn
d`Zif*kSM
g;Mk5OTF
RO"1weuj
kbZe{g
U%K$d9L
9p\3mu|n
~K?N4N
]o3UF7y_Xj
{iQ) r
hn'q^:
Kq1)V5"rq
"u]-q<X2yT
OI[=L|
0GIj!S{
c2a^I}zWM
uJ/G9S
^%x\-k
c2bimfg
8JkKs3y7
mW?Pmj
d*k]b;f
Jh1[EZnu
u]3SdmfIndk
sX-<.co
eznQ`s]
5AnG<\2
csqlR7
m*vne;
isN]mJgk
[,eIk;g
Tr!;Ul
yZ6Z^k"{
u5tK*
8*zRld}
/Mpi)c S@Z!
)|<AYk
{uY^4J
.EV9F?W*
JQVoG<
Z=e|iTh5
OnasjZqKdTpzXk^
/Y;\^U
U|F)+"
sL&R}29|
l=I&:f
Uqf`D{
=t9|{G
!`4z*Z{|YV5
oQ"MJN'qT:)
m.]cVN 7
*sfIw*ZBI
N=?v/08
V.FzkMJ
'\069.v(Qy9&U
Kg)Xe$=o
knic[2B
pqq2[=w
.#*2@qMl@
Yp'Jz}O.
2OBjd
{.K=d+
D(Rua'U`R
+MFWK+
vAA VQMI
Kml51c
rRI-v/-
?dI|duU=vO*C2(
Lcbg(u'
OU+iq\
K)=iW`sO+u
<-pH.|Vi9
&xXK7:M.~'
e*w~ s
n6#.`x<
Z1V)wx
hf}mcG
=x2R&JO
}+uj!xo
tpT%J"?(Q9
Zi\aY.xU
7E;["8
r:*dyVZ
_%I32P
J.tEiuR,8
`.t'O$v4
q^A4Sv
*I_AlXBO4
~jJvB4q
/Cy!vt6
/=GG%t(WD>
CD9L>_~X0g
s@e6kO%
8<APFigRq
pYvstW=nnb
+W-2O#k
j7$I+11d./[N
W#kB7Vu}>LV
:sJ9=y
q9UB0=3
`Apq@\M`
[$e1_R1Y["
PGp?eE
;A-_A?n\
s }*CA
jXjVrTy]G
$cATAs
Lh4tJAd
2c<b6|EVZ'86
m:`nAp
7*VgkZ
UzU-Wm
j5Zv4F
J/ebp{HW"
JmmKsL
?2IN1Qt
V6!]Tc
rGU-Ti
4U~%CG_v-+
nW,t>Z(K$ES
,n d4?t
H`q'rO
mI%3{cT
Rye'=Ty3OD-nTFp0
2lkol-i; X=
ZiYBIhBIDYSD
|8CV"In
Ub##sU0&
6Ta\evGN
n]a (kwI
hRlhh.
tDeH;E
8M%#2A<uI
P2#'i07`q$23
-CYie@Dr;BSQ|2OfwB9
bW-%t^N7
]L%eNf
5?/mCJ..[.$?uNyU
wN93^J
^2h'pV
(E~l?2?q"G9]
`//J&+Ro
c+tM.o.J
R.|FKo`sH
6Uhp=fVxl-'Q
S;KFW6
%GlsfB
&F[3M&Z4hmn%P
\z+]hscq]w8Q5%}
Vo"fwh
Ob}\*{
%v)jsRm\p
6A\ynjB
9#!H9c]
52:CqJ
telIQ
0a,@rH$
vU{_!Rv
_Iv uvZ@
"S+zDV+
S5i6Xcq:)I
%d]kaS
Z$f-Fi;q
\WYO-S
R%<n`>jtmi
'pwukR7
+OS.!t
5)`sKFB:iYx
VUonIP
D#Q}t@~iV
+&"j6c
7m"wSp~
#QNN=oV
hQ($B -.
k=l8e2G
e,$GbA
[Ie7GX
'/De@5.c<<
\[j|-V\tg(R\-dD*
~BY+F.}dH.
yoLFUBC:
.9Z(')eD'-(
sfFL.69
Tv242{8m
\vs0ewLjq${
Nu5hkoCx
U:]s*gV
~h"9@8@
`l5*eh TU|I]
I)mqEc^
STSoi(
VgEUjym
eia.ESwAZ
yc4}W<)WhF
/>Uin|M^
,iykOQi
8x?yK9/}_VJi@1
$1*Z[]J~:u
FV[wgkY
ZTsjSAeRPG
vM:wYI
H!*lUV"Gg'
\VfVy~d@hOkI/i49
gQ*<EzntYiAf!
~t)tSQ+
iH-=FVmrbG
="LVI=A
Mr(}F0
'k+<S:
iefT<|eo_
-2wh}'n{
<M,> VFQ
P=-8+V-h;.]
!Y"&LvV9..w!
TkT {?kS
sDlH9XeNF[A=nF(fP3*9$*y
oYm$7r
uOZy[Nr*Mov_m$XDyfll<aojQ.a>9
"3z=t'U
OOh7"p.
).}73aN-t8
*+tz^R]
on^@Z&I&9U
sinR;S hq
j6w$EW4
EK)J:wT
$C<+Ps\
p9=T^A1<r
1%"D[R9d
p 0nh[u)
'{]'!i4e
5=?Kx*s
WV'*qqW2II
cW[yP+)w-Y
cT?"OcCL7
ff9ff:
:(idlg
*dp%gxeJ
]|eG*'Q
^XnfJ`#a
9-E>DDGyI
9sAJ'rr
/SP[J]
>yKvyg[{
QcI 65
2;?O9y
skiueceY
9mrR!P9jQ
Ying>l
lr/p'i&pz0pT"
Z4g&Bu[U<rT
X5qR-q'"
8exhvV
^!u:uM'K\
QsvR+kr
=KOtpT!k
9dDJBN1m
&OTqsAkv'
1#0>Iv
YXcV=5$
VHp.ycbMG7Sm\H
sOss<'MdLeV2
7BZ7w+
S2d !2{]$'J9Wu5
NC/J)=
aGh?P$H
1*r<IfB
Dy;jul
;#}6\h
[y.^Z*R
exGxZp
2_awM!N/+
hU,AB 0x_M
y?|2wrr\
QAs+u0_
gNBT]V
k[H&uZ4
O5!{mg=
1(5ZwKR
y?+\w 8
~ J{"z
GfZ:}sQ3*wzZ
yTbh[r
*B ) c(
>DDZFXa&
oD]]Sek3K
pw[av/QZGN
Z@`LB\3
$ZA?A6}}xN2Z
3,X)T9:Dq{u&n;
+!ZYlt@@
+jq.}S<t"cHW;
y>v*/{
+,eDi.3IZet{
YXYxc3?4
Ss$&p&$Zo-
AFU$q*
`a[M*fI
}HXSeMw
g?u:vi
E5_RB95m
!{9-I?ln
Uez9a'2~0k
M.-idR
JiN+6:
OQ[Ue-A*0A^
F\T^Or[isR
Q2vx/-Ohm
GY_{FMcya,2I
[4u7jvP
<J~U4Tk Ser
/Z{H64Bt
k 6uJvA$de"I
je)JG4WZ
D1$h?6#
i13NJ-
\YG$ 5V8+
g\cCzV
3~%W&XA0n9
B#L;$g
8Z?m~gz
Pm;^{)n ,<;
;,tYLA
Lc]M.S/
%_9FX{s
=DZ^w!
A]Z?m$g^' 9
*deG'J
0st1TNq(n-
)sC@wN,q#p
GwR9>)K.k/C
ZLDi}F
)`4Sc|
UVH,{aK
M-RhYS}
aUW*8XKtm
65*mrfMZidOGG2S}C=
HtJ:^sK
))QL'N^n*
4im*6PVW@" qZ
Rov)yY'
4BS+7>psL4E<;{yH)W>V
S:K]OI
0Q)8I?wq
uH x:%N\1}df
PsOyUKa
6w\+hMK
Ww:6mV
[A.oI'mjI#
~4ZkE}S
6cf?p73s
t,HbT-p.0zn
pZRqQ$8{"
DVi6g<+r
9r0A7dQY]
3H6tQxSw
RHTTbn5\8G*
:AWBu]c
wUT>x%
mkDk5;(?h
dc ]9Hd29%
X~$WwSC1
30'2(!
tzEWyX\=xWb
WPWFmi6Lf
Yh-:i'U
/0b~kqlSmF
Eg+M pq
7{Y.97
]+P5*0
-:NuKz
N.V4XN
:%VrnZmj
E 6$zJ
-u9.)"t*976C
2 `0A5NaI
x'[K54'k+
}*h*VaDz[!z
z...YFjO
_S-)VkP
G w#.
t@q8NZL%MsX%
I}3I [Ik{&C.K
N:\qdv%]/mwZ36
S x%k:{d>RWAn
0Tn:BT
V5tM?2qtVw
d5kV}2c>
].Ws2[
UL#SESb#
rP@DcM
p t;;{
'<T.$F
n|D{kD-y
dpQn[I{
fJ2o:t6]9
y]*3SG;
3m- FX!
75w4QVS
$JbieII^
u1B`[U@
PT-SOZ
YWqsD@
b.,CX8:*T
h5[+-h8
8to,mVj
]n$rW5bZ
8_ _GzQ
M{#sNGRw
9z^hK"c_yfzEP
;} y ,
-SwSlt-
\|U))j$
GU*QZdn
S}TtC(
eU$G)p
StNy<)(!7
T4Cn=\
UA2U=$
Os-4+678
eU[Y6J;
hx`!Jet9
R0&'(n3CT
I94;72
ABKK)ZvVm
sXwYh"
ZS"M3=
SW:(uk
frr+]^Q
U4=,Dg
/OuzZ+
Un#[OGs,dB
f[>60I.g
te9zh_Bm^
R]-<}EsZ
2p*.e
=ONknRwq]
qTP_8|.
,Kn_I$
'^ao|yc
w!V&EcVIA-I
c@&GN=
t(P`wD
2ZYavY-j
NK.% ](W
~^$e^1po
.2>zAS
dE}HQpnT
Q-/mJc0
)a4bax55=
s('QgLO'
y&YVm}#
4LwT+.LpwW!
I`I!Dn%'
xW1XN+M8FeoR%@
NF:2Ls
?]C`4nuJKL{
v~VBBz'
R}kAv;Z:
s"?t)W
~f-XSiR
iX8[n[F-R
k=8H@s
'z{YZ^
9`cR<y
4Kg4TeV
i.F+wV)
,4s/#7mk
,3N5<P
m:[JyqMi.?<
NV^>U98nBrO{C_
T^]NYQt
goURkEj
)Ft/"RHE0w{*|R;,ErLp
oc;RdimVGq!a{N;
v&JDa\
R[bZprf
Zopcv.A SOGgNEimJC.1$s4Xz
)>i4de
T2'M%e#
$Y`cvLB
`-?T I$
`K,),^
[25#y*
U^*qqW
^e)mc7o$T
iqh@Wi)
JONfj6mv
7vZ[Jj
mkf[/. fy
:8ZI;*bI
etVUicg/
|?Z[*0
Pvc'Y4UcWewKZ'
a#zZln"!}Bj
G~-F;)--t
d.hV*:DN8
T:IaBVV
k1ejxp%
H*_Dtu
]F=%'S
2//.JM2Kf
kB6Nus
rtUqzjT
mJ?]i^Y:M{L
u9+#Ii]\"Yjv
iNxO\_+
hkZ]NB
_-Z.GJZ|
ee=vmY
J86'!w
O \FiCtqMO
4 s~-8
),2_po=
T VZl+66g
D'C,ji
KowCq<Y?M
R8^V*qK
KEFU;G
B2A)AM
2tZk<uzt8.S,
W|,sE.;TL
yX[;-^K
Q#kc]m
]U"cc\
2I1[FN
M\/s#.%SR
Z~~!^$.w3iBA
_R,xY:3I?%
+o,}F6#Sk$aBIft{= V-KR]rOm0
f2~I6"u%
Lw:Z{y';uF)3y
F:Wsx_eF}1z}y{QC
xd~WkZ1
ATXE->yq
`lMtS1Rb*9*Fu)
[{-ASR}c
^}Re;.d7
NNv^dZM
j)m*Cz
4A.=K/
!{ezZ</J'oS
w^i8mJl
k -U"^[N|
-+\XTYc
-N}$#!x
i0PStS
vToTF\X.7K
n*SR{|0eWR<$f2![JU
#m/P:(l;CJH
)WTi7x,
]j_Ire
Q0$O{gx9Rim{
_?TxV{
SS*3#
<%$0`-h
=06I/=R;
RZD}VcMvzRZLnM
TUKZKC~K]*9+S)}
mnA4cH$
G"%dSs*Hh
5`[{DM@ln
L[}:^p>5Or[f"E
h8J?@ct
#So=GtM\avcMs-`t[TB)
~.>CvQ~>nU+Tc6dV,s-
[Im/4N
m.y3+K
mi6x1eY
*+}j7F
+^PHl5sT1XJz$sz5Wm
R*/^u\j
^/;}2v
R)+VR{
9 MPCK
TcomVT`20
j;!0ay_
PWTDJR"O=
)Um#aMh{jz9BjnO
2Q67p%I
1'n$tc G8pm*5X-e
\.2O]~b
nX|ntj
1rhO-6
_gZP}N
Knims +c
mkyN{b[T
xNiWzvVe?
Wzus p=
;}BrQz[o!\w72:?
q]j4R-kvf]yc(
hlFMp\BEFU _Ppl
}-p<GB(Ek
Pck;ys^%4khvf
1.!FVT5r
[Ko^Bp
+;k<PF
I]9*-v
a2TfIRG
+q?hihn
;5Hw%kub
75P{K}
GK/eoOk
v$j~c3N
WGJr>-
p8U^FNz
^wPa}oaP
KK_TshVjKv
EkH<GY1W
u)uk~v'
sRMs]&
`&bqP7
mFGx]z
s/qRFtI
QHxvxi
s;^Ui_cE7_Vy=
E=n=,S9
es"^P0O
PvJ$:`
`@$5d*
tzfTQ" un)QPDu
EoDfk{[
9YzZat
th_kkRH`*
JX\T6G
H+ErDj{qA|
]Mj*9m
;P{?/fz
et[=,Nj
$~>Hy;~q
@vlxE"
JMFEn[eL{
\h)Ho7
yUTrM!LWk{LU
@5e*/u@
h#w#*BX
] K'y5
r-7N.CZ
?e]Cn 8#6NHl`-.<
y];gp/ b*T
;}_Z6}CW3uJHNg5
J2IjP8M_
z|QZIm
R]+}Zm*
wqVP[s
B2].P8Wp 3`/
DJky]6.}
d 8;z?K
DH?[JckS
4-i<$;%N5;[Y
1=MeKFCx\n7*xM:
kQ[+vi+3R9?u
[j:qi{hX
c^ >#7- 4%
}r`/[r{
~g1yR'v:6ssPI
m3Li/(l
trN(;dD
/sN\}$
6K^x+>]R
<XFL&UR:#C
6V(^}~Alio
tcU}WCLA-x
)\P5<$
.*R4SRl
s\2xRLa?
sL[ppN2Y
m@[2bg
RW]#&ri
derVg&v
'pW&Vz\&
HwT`8Q2
1yUU 6
%)#\2e
HgqDJOv\TiOEi1
=#|1"}@
H5pT\CHMsHs9
LWEpA*
MBw|=3]
W,m*c@
=e2@&#y
<=[=<98Z^
U%,DamU
F>='NKu/)Tp<
^b%RJ,q
jF:Zkm
E|-u{Bmb
eQ?c`KoboE
$#J7-[R:'
9N$9/w
|W6_6Pk%x_
S^Q7)OeGdT7nct
$C$"%<$
:}!V9!P
ZCDL|Z
:~T*A9E
s?$GE+zW<
d6wg*F
i&K}]64g
p)cVAr5Sc
Z0o50?J
UwnWWk#e75p*@e+
EN9.i52
GN2qV'wRUM
>6Q&rJz
)`2mc(_/OPt_I
1Ocd?U2<Y%
]6!z`t+
G>)g*UW
MnK^}k5E@G^
0XjZyGUv
_;Vu.M
Uu]Fz$
hBcF[vu45`1
}pszFjUn
~~XZ+{
t7&50p>kk,n|&.U
Y$@"ay+J.
i}#Xk|SemhiyD|
DR>f1
]e&j*OK
5{#xQ4
2U *;5R
_vhtqM^<i
+F uW=
ml~!2:
3+RI81='
6F~ ViVpOC
)q$r8#RVA/a
;0xqD@2
(!mS22vH#
*^kFvC{*u*(qgWA
u:3%,&
iu3tG^`%Yk4t
sR@9a#
_N+E*%uBQ::-fs
mm*jTq
fk %YU5s
wZ~hVT49
wH@%VHI+
(!$GU*PRB
9*&]EZV]A
ZIU}TEn64
,6mkNVjg
:e4`*SIX<;$@3
!\nnsRsZ
sjg!tU
T8RJeq
m=^XyP/
#P*,ph0J
2tz[=+G9$Z
TZBJ*U
Y9aH/5
QpOS.s^74^L
%yL%[r.t
RpKh+V76
ppav>S
nr-+Qqn:
j?>EaP]
QgX0s%S;r_
.-'frMW&}
V*IU{I
kqI$|o
r;Tq\v~v\
N&7Nh0"pV&
2R,t}VbLleOp"'p
8LY^6}S-,iPn
.kRSha:@N+-^
K..zfR[42C
Y2j2Vt+Io
Bs]Nk6`zJp5tV6A0
nN"qlD
Nr|Dp;sJ
F\s``N3
'qZYTqt
]k4`t Tb\'
5"""Vkf
eT%Y%f`
&Uu'`jrHlV
vr\2p1-1
}is C\I.Do!Ga
C~rmlI i
KH#WJGmM;
J2HqeSs
JsYV,KR.$I.
.{|-IO
tqE:Ot
oI\PaP{f{'xf%-U
7UHse?hn[
}.-_gy'f
0c^(d;l}W
OT*)=V
]V;T)5
|4n*1~
=~77:">
)L..qwqQ
b_3PFK=
v5)d4$8
GEK[SJV0wZn{_/
m<5:l8F3*G
ul*UgP
K.S4xc^#9$
K^M&;<#i
U$j]Xu3,m&
eKSNWNQMZi2z
bLy],<e
{]RFLV
q^n*uqP}G
WS-. -
_O!60XZU
$4gttF{(
&I'Fp
@|:dDZOD
+"LOB<5]$~
IOUs_r2N9v
@}/fdpyL=
Q!F@M1
i;NBV-
S|Sh.[
'aX>/%mD
yby*)h
vl=(`d
C!Pi_@5W
J7:lUl~<
4>A;Hy~3m-3\id
bc5_C;
AK^}$L
.qqd#^
xLM*|.V-
U8:i?<J1y[_S_=C\`BL
KwRMJ
oaUlhW
]>+1s^8
'syN$IQ?%oEJ=F
88c;!
vSuqOcq:4l
{9lPtW^L
g63Eqp{'orWKEekv
v7?s*9
w:D6vHVP)
7mV72$pVme[VVD#
OxvA=LVN
hTyw _7
CI.}9V
#tsd5Vbh$
I)C35]
KI+-T"E|
KJ8is9JW
q%m?T=\
m.q*t'5C-jU
_&A}[&@M[
@myh8=B"
8p=B]n
t_mop+
O~B7*~
NOnGZtZ
P;w/EH_y
n-Nt#uSY
LWi6xpt< +E]J
c~hSe@
81mk`B\fFG0
+#)q/Z
W~3#YUX^]
X6xi_](
#a9UZOp
gJl0y$q1
6[K8Q}"
Yg$-av|+R
J+,rG5[
pwX}~z?l
8m&xZUism#+G;mjL%z
;p$ !
mG-&K@7
Px?/+M
WPsUik%=y<e/G4CI
9q`n}UGbOr;A
eZ&i?l`
#Oa`rxWn
!BC0 '-n
;P ]9=c!Ad
LV2[`=I-
]*u)8>iQ
mkQ 8P^:
(_I]wj3q
qt_Qey+
znx?%K^
'Jqbk-Y3}OL?_
t6R#&rF{h]6g1
1*{;Jn8
+r=:<z
8V5Ai85gf%y
jiwa)bp(W{
[iG^3u`
"X73ge
^*u wgn7K4{[N
qYVUXoFu
~ %?82KsV
ofc2=~BU
py%VHW:Z@~
iWTi@<+
XNW|cBky{(
8ayiNPTGFqY
Q=cmj}
c]JB[G?y+/
jy%e\./
IVuuwjQrBU[VCV1H<O
?uA2!x=$
NRRBZ14
z xC@
$O=BadJ
A*p)!3e6Uj..8NYie*^
iY,7$`=
F}oEC&
MHzk|wKq3eNZ*Ij<
_UdNBC
ol8z`)!s(v/&Ge
mvOEKX
8:rq`
dGPr,Z
\x?dPye)f_H&p{]
],|%,]VJ(N)
wFj@4RT-$-
cmZ[qcC{ai)C+vyY*_ds5^U3HW.]F&r2z.6:
[W''<i4
Z~KlX}sMFR5^@
O[O_oC-Tq S'
$T;#em4V(
JKt5)#.^
}@T{\StA
J$4KISP)Ci<&'29c|
+\I0M_"0h1Nv
SmVT 0~t4c]J/
^u;.n6akjKg
n,jiSk(:
.}J4NQ_Se[n]h5
#-w+VEV
^cWi3aaC
cpu;>/
>nYpy] .
SZ_?x9ej<<
u8VnAv
A)7LNA
0s@hsFc+?#WWgD[
,)lZ*S
v[*+HSka#Mx8!f~
]F*~PC_Tu,+pJ
i<IeC){
0Zu\$6V
N2@)2C;v
'AiHT8
pBX5Xfg$X
*?Mi5+1
y#N9AZs8$]M
hng%Nu97*
"=mH?u]
)]Ck'%
6k&q\|Tz:3M=bn
a}_-FLF<
c}+fmwK
j*} 6KJRk|?gy
sre%,m~]Th
u^CdH%l;Kd
*g:NkH!!
T=0d'7
@R}&Wfg\>l tp
W3/PptR
[o8sdtT(:x
7+UUr:z^
R*YU4:B0u7^Z2mqs>+
o/r+y,CcH>fyu
<rqt:E0 4P
=`D!AQlS
a9?ulf4C
g) B@
cD ndC
ikB)E7AK
Q$4]Zz
leH:@VzBQ6
CJT6"g<+j!EkrB
3H">/F
mt2OPD1'a%@8C#
,u<M$1E
K16ipp
6uSp@w
nt.m(7
p[g$n<B
sV86$)ti
]-Jb>srm
mS|w'ESZ
;q}or4
JS6jtJ
oKfOQYF<B^B7
M`849k%
TNe=(Tm
\|.#RR*
H:z*IB
1'|Akse!t0PmZzU
NUZjOZi
MkIsni
uJ?#Zq31
-8rgMa
h~mGZ@elgD 5{vi:]gn!gA
f~d^[[0
Uc+<A>sR1U
?uu(9!)F/S.
pz&hsEq
Z)ki4`
R]$rERy]=wpz(1@]']x(iq6<
gotb*KDPNII/r2$!h3HL
+u&R.A
eu:E.n`BP
ni j9QRWaUE@Gn
uT5hO
YVs*<N
y\"%CNM
8lP8MYM<
@EI0%Vu
*,LD.6L`SqI\T$
,M&eW-qBG@
WbdbhB
$beKK>%4Tah
MW6n4Q
-glk^l~@#.J~
kqKM]J\
n4u\psitt
Tsu5S4
`u0w+x
S|=q|m}N
Get_w6m#]
ZegAsqFH'3 y
YxTBX{
>Uqyl#
%LgFGu
`L6 v.;
m=.^|5( cj
9T3Qj9{/w|WkEYRm
'n9}D QkODdivn*o#dp
SEIxqe?3~%[VZJw:
x:M}U4j
3>VnRdM>%m
d@x 0$4
Q%\[eU
^E_ 3UM
_UDg(h8)n
wwwwwwwwwww
wwwwwwwwww
wwwwww
WPNNNLLUUTUTTWWSSaa|
3@?5>200;;--,,+82S|
)'&%4=//.+a|
)'774=//,S|
761=/9S
%61=9W
)'&%4=-W
)'&%4;T
{lm^sNkC
oQQQnkD
oMGIRw
VKRYYn
\KX]ffn
sXXY]fndNBBBBAAEA@?55>20u5c7ZeYfnddFFFkFJJJJPP~PPNcci7p]^p~UW
uzhh_t
jni[Zecba
#! /.+)(X
H56y`1
lE9I_\^PROMKL
Etu;Us
zs}kwfq`m\jXgVeT~dQ|cPzbOyaMw`Mt^Jw`L{
|}yyvvrropnnkkhjfgdd
vypskmdg_aY\TVzOQuJLnFFjABe=>a9:ef
~z~txnrildf^`X[SUzNOsIJmEEi@Ad<=ij
}x|rvnpgkbe\_WY~RTxMNrHImDDh?@jk
|w{rumpfjad\^VX}QRwLMqGHlCDll
{vzqtkneh`bZ\UW{PRuKLpFHno
z~tyorjmdf^aZ[SVzNPtJKpq
STxNOrs
zcjv@m@
WY}QStu
[&a1g<
wzqulo
[]UXww
ietv}k
y~txos{ttu
~y|swmqikce~~z8
V#R"U Fm!
}w{rulpgj~}
P!Q!{\!,n$
~~|}tr
P"Y(Wg,-s- m+
\>K(L V-c>kl>2}=&L8O
slF\1X/gGpuTNF>BCQSP_;z;P\OHZNBG1:.5N<w>j7
s{[sMpKf{S;NB?U?bEuC<D
]l[P_SLK@>56E<t}=o5
ppdDO)><<ZBwHO
_T{DT7I2I0Q3n6y>
y~qkCM,@5FPPwZe
D-Y8u@R
x{znK\2W4]Jfikon
=/dH[i
xwRl?qHzW
f~||th`
y\uYpz|
_bdX=V%G+{T~
^XPCz8`;c
spSHOjy
so}jweq_lYzaMt\HpWC
vzim^`
RUsHJh?Aa9:
vzjm]a
RTsHIi?@
uyimsHJxe
Z3M ]+6m/
z^6fCHD;Kl
zcAJ?>|I
\iC<4Y:
x:T7Wzg
PADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDING
@ I @ @ @ @ @
C ( n u l l )
( ( ( ( ( H
h ( ( ( ( H
H
@ @ @ @ @ @ @ @ @
@ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
@ @ @ @ @ @ @ @ @ @
@ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
# ( - 2 7 ; @ E J O T Y ^ c h m r w |
e \ S g x ) |
V S _ V E R S I O N _ I N F O
S t r i n g F i l e I n f o
0 0 0 0 0 4 E 4
C o m p a n y N a m e
M i c r o s o f t C o r p o r a t i o n
F i l e D e s c r i p t i o n
M i c r o s o f t A p p l i c a t i o n E r r o r R e p o r t i n g
F i l e V e r s i o n
1 4 . 0 . 4 7 5 0 . 1 0 0 0
I n t e r n a l N a m e
L e g a l C o p y r i g h t
2 0 1 0 M i c r o s o f t C o r p o r a t i o n . A l l r i g h t s r e s e r v e d .
L e g a l T r a d e m a r k s 1
M i c r o s o f t
i s a r e g i s t e r e d t r a d e m a r k o f M i c r o s o f t C o r p o r a t i o n .
L e g a l T r a d e m a r k s 2
W i n d o w s
i s a r e g i s t e r e d t r a d e m a r k o f M i c r o s o f t C o r p o r a t i o n .
O r i g i n a l F i l e n a m e
D W 2 0 . E x e
P r o d u c t N a m e
M i c r o s o f t A p p l i c a t i o n E r r o r R e p o r t i n g
P r o d u c t V e r s i o n
1 4 . 0 . 4 7 5 0 . 1 0 0 0
V a r F i l e I n f o
T r a n s l a t i o n
Hosts
| IP |
|---|
| 114.114.114.114 |
DNS
| Name | Response | Post-Analysis Lookup |
|---|---|---|
| dns.msftncsi.com | A 131.107.255.255 | 131.107.255.255 |
| dns.msftncsi.com | AAAA fd3e:4f5a:5b81::1 | 131.107.255.255 |
TCP
No TCP connections recorded.
UDP
| Source | Source Port | Destination | Destination Port |
|---|---|---|---|
| 192.168.56.101 | 53179 | 224.0.0.252 | 5355 |
| 192.168.56.101 | 49642 | 224.0.0.252 | 5355 |
| 192.168.56.101 | 137 | 192.168.56.255 | 137 |
| 192.168.56.101 | 61714 | 114.114.114.114 | 53 |
| 192.168.56.101 | 56933 | 114.114.114.114 | 53 |
| 192.168.56.101 | 138 | 192.168.56.255 | 138 |
HTTP & HTTPS Requests
No HTTP requests performed.
ICMP traffic
No ICMP traffic performed.
IRC traffic
No IRC requests performed.
Suricata Alerts
No Suricata Alerts
Suricata TLS
No Suricata TLS
Snort Alerts
No Snort Alerts
Sorry! No dropped files.
Sorry! No dropped buffers.