1.6
低危
该样本未表现出任何异常！
重新分析
更多

0e28aa67299697df8f4ac65ac1b9328aeead8de84d0e140f8981d022cd271738

0e28aa67299697df8f4ac65ac1b9328aeead8de84d0e140f8981d022cd271738.exe

分析耗时

134s

最近分析

379天前

文件大小

595.4KB
静态报毒 动态报毒 UNKNOWN
鹰眼引擎
DACN 0.14
FACILE 1.00
IMCLNet 0.77
MFGraph 0.00
静态判定
反病毒引擎
未检测 暂无反病毒引擎检测结果
行为判定
动态指标
在文件系统上创建可执行文件 (24 个事件)
file c:\install.exe .exe
file c:\Users .exe
file c:\globdata.ini .exe
file c:\360Downloads .exe
file c:\ProgramData .exe
file c:\VC_RED.cab .exe
file c:\Windows .exe
file c:\vcredist.bmp .exe
file c:\vqbgtigjo .exe
file c:\Program Files .exe
file c:\PerfLogs .exe
file c:\System Volume Information .exe
file C:\ProgramData\wvcpo.exe
file c:\pagefile.sys .exe
file c:\Program Files (x86) .exe
file c:\eula.2052.txt .exe
file c:\Python27 .exe
file c:\install.res.2052.dll .exe
file c:\VC_RED.MSI .exe
file c:\gcoxh .exe
file c:\Documents and Settings .exe
file c:\$Recycle.Bin .exe
file c:\install.ini .exe
file c:\Recovery .exe
创建隐藏或系统文件 (25 个事件)
Time & API Arguments Status Return Repeated
1727545344.687625
SetFileAttributesW
file_attributes: 2 (FILE_ATTRIBUTE_HIDDEN)
filepath: C:\ProgramData\wvcpo.exe
filepath_r: C:\ProgramData\wvcpo.exe
success 1 0
1727545347.671625
SetFileAttributesW
file_attributes: 2 (FILE_ATTRIBUTE_HIDDEN)
filepath: C:\ProgramData\Saaaalamm\Mira.h
filepath_r: C:\ProgramData\Saaaalamm\Mira.h
success 1 0
1727545349.156125
SetFileAttributesW
file_attributes: 2 (FILE_ATTRIBUTE_HIDDEN)
filepath: c:\$Recycle.Bin
filepath_r: c:\$Recycle.Bin
success 1 0
1727545351.703125
SetFileAttributesW
file_attributes: 2 (FILE_ATTRIBUTE_HIDDEN)
filepath: c:\360Downloads
filepath_r: c:\360Downloads
success 1 0
1727545354.328125
SetFileAttributesW
file_attributes: 2 (FILE_ATTRIBUTE_HIDDEN)
filepath: c:\Documents and Settings
filepath_r: c:\Documents and Settings
success 1 0
1727545356.594125
SetFileAttributesW
file_attributes: 2 (FILE_ATTRIBUTE_HIDDEN)
filepath: c:\eula.2052.txt
filepath_r: c:\eula.2052.txt
success 1 0
1727545358.360125
SetFileAttributesW
file_attributes: 2 (FILE_ATTRIBUTE_HIDDEN)
filepath: c:\gcoxh
filepath_r: c:\gcoxh
success 1 0
1727545360.844125
SetFileAttributesW
file_attributes: 2 (FILE_ATTRIBUTE_HIDDEN)
filepath: c:\globdata.ini
filepath_r: c:\globdata.ini
success 1 0
1727545363.110125
SetFileAttributesW
file_attributes: 2 (FILE_ATTRIBUTE_HIDDEN)
filepath: c:\install.exe
filepath_r: c:\install.exe
success 1 0
1727545365.563125
SetFileAttributesW
file_attributes: 2 (FILE_ATTRIBUTE_HIDDEN)
filepath: c:\install.ini
filepath_r: c:\install.ini
success 1 0
1727545367.938125
SetFileAttributesW
file_attributes: 2 (FILE_ATTRIBUTE_HIDDEN)
filepath: c:\install.res.2052.dll
filepath_r: c:\install.res.2052.dll
success 1 0
1727545370.063125
SetFileAttributesW
file_attributes: 2 (FILE_ATTRIBUTE_HIDDEN)
filepath: c:\pagefile.sys
filepath_r: c:\pagefile.sys
failed 0 0
1727545372.406125
SetFileAttributesW
file_attributes: 2 (FILE_ATTRIBUTE_HIDDEN)
filepath: c:\PerfLogs
filepath_r: c:\PerfLogs
success 1 0
1727545374.797125
SetFileAttributesW
file_attributes: 2 (FILE_ATTRIBUTE_HIDDEN)
filepath: c:\Program Files
filepath_r: c:\Program Files
success 1 0
1727545377.063125
SetFileAttributesW
file_attributes: 2 (FILE_ATTRIBUTE_HIDDEN)
filepath: c:\Program Files (x86)
filepath_r: c:\Program Files (x86)
success 1 0
1727545379.297125
SetFileAttributesW
file_attributes: 2 (FILE_ATTRIBUTE_HIDDEN)
filepath: c:\ProgramData
filepath_r: c:\ProgramData
success 1 0
1727545381.688125
SetFileAttributesW
file_attributes: 2 (FILE_ATTRIBUTE_HIDDEN)
filepath: c:\Python27
filepath_r: c:\Python27
success 1 0
1727545383.828125
SetFileAttributesW
file_attributes: 2 (FILE_ATTRIBUTE_HIDDEN)
filepath: c:\Recovery
filepath_r: c:\Recovery
success 1 0
1727545386.203125
SetFileAttributesW
file_attributes: 2 (FILE_ATTRIBUTE_HIDDEN)
filepath: c:\System Volume Information
filepath_r: c:\System Volume Information
failed 0 0
1727545388.875125
SetFileAttributesW
file_attributes: 2 (FILE_ATTRIBUTE_HIDDEN)
filepath: c:\Users
filepath_r: c:\Users
success 1 0
1727545391.438125
SetFileAttributesW
file_attributes: 2 (FILE_ATTRIBUTE_HIDDEN)
filepath: c:\vcredist.bmp
filepath_r: c:\vcredist.bmp
success 1 0
1727545394.031125
SetFileAttributesW
file_attributes: 2 (FILE_ATTRIBUTE_HIDDEN)
filepath: c:\VC_RED.cab
filepath_r: c:\VC_RED.cab
success 1 0
1727545396.594125
SetFileAttributesW
file_attributes: 2 (FILE_ATTRIBUTE_HIDDEN)
filepath: c:\VC_RED.MSI
filepath_r: c:\VC_RED.MSI
success 1 0
1727545399.000125
SetFileAttributesW
file_attributes: 2 (FILE_ATTRIBUTE_HIDDEN)
filepath: c:\vqbgtigjo
filepath_r: c:\vqbgtigjo
success 1 0
1727545401.750125
SetFileAttributesW
file_attributes: 2 (FILE_ATTRIBUTE_HIDDEN)
filepath: c:\Windows
filepath_r: c:\Windows
success 1 0
投放一个二进制文件并执行它 (1 个事件)
file C:\ProgramData\wvcpo.exe
该二进制文件可能包含加密或压缩数据，表明使用了打包工具 (1 个事件)
section {'name': '.rsrc', 'virtual_address': '0x00047000', 'virtual_size': '0x00007000', 'size_of_data': '0x00006800', 'entropy': 6.9563045786712} entropy 6.9563045786712 description 发现高熵的节
网络通信
与未执行 DNS 查询的主机进行通信 (1 个事件)
host 114.114.114.114
在 Windows 启动时自我安装以实现自动运行 (1 个事件)
reg_key HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\Microsoftﾮ Windowsﾮ Operating System reg_value C:\ProgramData\wvcpo.exe
可视化分析
二进制图像
数据导入图像 288x288
数据导入图像 224x224
数据导入图像 192x192
数据导入图像 160x160
数据导入图像 128x128
数据导入图像 96x96
数据导入图像 64x64
数据导入图像 32x32
运行截图
暂无运行截图 该样本运行过程中未生成截图

👋 欢迎使用 ChatHawk

我是您的恶意软件分析助手，可以帮您分析和解读恶意软件报告。请随时向我提问！

🔍 主要威胁分析
⚡ 行为特征
🛡️ 防护建议
🔧 技术手段
🎯 检测方法
🤖

PE Compile Time

2014-02-27 14:41:59

PE Imphash

dbf687d6aa2a6cafe4349f7b0821a792

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x0003c000 0x0003c000 6.080451775497244
.data 0x0003d000 0x00001000 0x00000200 1.219839492304036
.rdata 0x0003e000 0x00003000 0x00002600 5.008530245268908
.bss 0x00041000 0x00005000 0x00000000 0.0
.idata 0x00046000 0x00001000 0x00000a00 4.294939157790109
.rsrc 0x00047000 0x00007000 0x00006800 6.9563045786712
.NewSec 0x0004e000 0x00001000 0x00000000 0.0

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x0004cfec 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_US None
RT_ICON 0x0004cfec 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_US None
RT_ICON 0x0004cfec 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_US None
RT_ICON 0x0004cfec 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_US None
RT_ICON 0x0004cfec 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_US None
RT_ICON 0x0004cfec 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_US None
RT_ICON 0x0004cfec 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_US None
RT_ICON 0x0004cfec 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_US None
RT_ICON 0x0004cfec 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_US None
RT_GROUP_ICON 0x0004d454 0x00000084 LANG_ENGLISH SUBLANG_ENGLISH_US None
RT_VERSION 0x0004d4d8 0x000002e0 LANG_ENGLISH SUBLANG_ENGLISH_US None

Imports

Library KERNEL32.dll:
• 0x4461b8 AddAtomA
• 0x4461bc CreateDirectoryA
• 0x4461c0 CreateProcessA
• 0x4461c4 CreateSemaphoreA
• 0x4461c8 DeleteFileA
• 0x4461cc ExitProcess
• 0x4461d0 FindAtomA
• 0x4461d4 GetAtomNameA
• 0x4461d8 GetCommandLineA
• 0x4461dc GetLastError
• 0x4461e0 GetModuleFileNameA
• 0x4461e4 GetModuleHandleA
• 0x4461e8 GetStartupInfoA
• 0x4461f4 ReleaseSemaphore
• 0x4461f8 SetFileAttributesA
• 0x4461fc SetLastError
• 0x446204 Sleep
• 0x446208 TlsAlloc
• 0x44620c TlsFree
• 0x446210 TlsGetValue
• 0x446214 TlsSetValue
• 0x446218 WaitForSingleObject
Library msvcrt.dll:
• 0x446224 _fdopen
• 0x446228 _read
• 0x44622c _strdup
• 0x446230 _write
Library msvcrt.dll:
• 0x44623c __getmainargs
• 0x446240 __mb_cur_max
• 0x446244 __p__environ
• 0x446248 __p__fmode
• 0x44624c __set_app_type
• 0x446250 _assert
• 0x446254 _cexit
• 0x446258 _ctype
• 0x44625c _errno
• 0x446260 _fstati64
• 0x446264 _iob
• 0x446268 _isctype
• 0x44626c _lseeki64
• 0x446270 _onexit
• 0x446274 _pctype
• 0x446278 _setmode
• 0x44627c _strnicmp
• 0x446280 _vsnprintf
• 0x446284 abort
• 0x446288 atexit
• 0x44628c fclose
• 0x446290 fflush
• 0x446294 fopen
• 0x446298 fprintf
• 0x44629c free
• 0x4462a0 localeconv
• 0x4462a4 malloc
• 0x4462a8 memchr
• 0x4462ac memcpy
• 0x4462b0 memmove
• 0x4462b4 memset
• 0x4462b8 rand
• 0x4462bc setlocale
• 0x4462c0 setvbuf
• 0x4462c4 signal
• 0x4462c8 srand
• 0x4462cc strcat
• 0x4462d0 strcmp
• 0x4462d4 strcoll
• 0x4462d8 strcpy
• 0x4462dc strftime
• 0x4462e0 strlen
• 0x4462e4 strtod
• 0x4462e8 strxfrm
• 0x4462ec time
Library SHELL32.DLL:
• 0x4462f8 SHGetFolderPathA
• 0x4462fc ShellExecuteA
L!This program cannot be run in DOS mode.
.rdata
.idata
.NewSec
E;Es9}
<t6p t<~@tO
x7EZ[^_]
UW1V1S
eEEE$@
++CCUNG
pP EtB(dB$
R \tp@$
hUhU`hu
llU6hU(Et
E!t#XtEXM~t
$]u}E$@
UpPl1|pl
;u ]]$}}
4$Yt8M
]1u}];] tIF
UWVS|U$E
E|[^_]
1|[^_]
UWVSL}
$DtbEN
UEXEE]u}E
++C B4CUNGB
t-S4C0
UEhEE]u}E
E]u}]E
UEhEE]u}E
tB1u2=C
UEXEE]u}E
80S4C0
t(S4C0
x9JtD|IS
]uEEEE
]uEEEE
]uEEEE
UUWVSLE
$UE@M@
$IMEQh$9t
$YMEQh$9t
$iMEQh$9t
]u}EEUE
Pht%$9t
UE]PhXdE
$]u}E$@
|u9EEP@
$]u}E$@
tuHxEE
$]u}E$@
tuHxEE
$]u}E$@
tuHxEE
$]u}E$@
tuHxEE
$]u}E$@
tuHxEE
$]u}E$@
tuHxEE
$]u}E$@
tuHxEE
$]u}E$@
tuHxEE
$]u}E$@
tuHxEE
UUWVS\E
EuSEUE9B
Et1@t@
UEXEE]
Et1@t@
UUWVS\E
EEUEn@
EuSEUE9B
UMWVSlE
UMWVSlE
UUWVS|E
@;Er]E[
@;ErEU]H
]xEEEt
$u}E$@
oUUWVSlUE
UUWVSlUE
9t1]u}]
[^_]UU
[^_]UXeE
$B4$Z]u]U
UEXEE]u}E
Eu!PRD
u9Et4+_
9}]t7q^
8"t-EE
$u}E$@
$u}E$@
$u}E$@
]uEEEE
]uEEEE
$u}E$@
$u}E$@
$u}E$@
]uEEEE
]uEEEE
$u}E$@
$u}E$@
$u}E$@
]uEEEE
]uEEEE
]uEEEE
]uEEEE
]uEEEE
]uEEEE
]uEEEE
]uEEEE
]uEEEE
]uEEEE
]uEEEE
e[^_]EAAAA
uEAAAAEAAAAE
EAAAAEAAAAE
EAAAAEAAAAE
EAAAAE
S C0C,
t(C,1D$
S0x]u]
t3[4u$&
t$B0x=B0uVB(
z(]u}]
H0x4P0uMX(]
[^_]o2
UWVS,PXD
]t"x0xFp0u X(EP J
UWVS,@
tLEtt$
tEp0x^X0uw@(UEEE
]tAH0xFP0u
X(EP J
X(EP J
H0us@(EUE
x0uaX(EP J
<$&]u}]
taH0xkP0uu@(
e[^_]PXD
H0yAPXD
EUM]Uu
M9MvuMEU]Eu}U]
EuaE9E
UEEEU]u}]
Mu,9vZ
1E]E}Uu]
W11V1S
tplhl$
D$'\ t&
ME1UfE
:|,1\$ \$0
t$$t$4|$(|$
\$ t$$|$(,
D$,L$(D$
T$$D$ L$
T$DfD$B
\$0fD$0
|T f|T`B
UWVS|$
t$@\$@L$B
;f9yD$
|[^_]fD$
\$ fD$
~t$`1L$@
tfxJ\$
[^_]uUt$
~ML$$t$$
~;D$$p
~PL$$q
[^_]Ov
1D[^_]
|$lOD$
~D[^_]
D[^_]fD$&
tH1|$(M
Ky\$\u=L$
|$\T$`
UWVSd\$xl$|
2L$:zQ
1d[^_]
1D$8L$
HyfD$8xfD$
UWVSLt$`l$d
:L$"ZQ
L[^_]1
HyT$ \$
LS[^_]
Iy%LbD
t,K9w4
0^t&K9w.
B9w[][]
;Ew,t&
Bt$H9v
9pr(t$
EZ;]]r
u39~rdF]
E9]EEr
9rrTB]
u)]u}]
9rrdB]
E@E9]EEr
9prw;M
DF;gUS
$]u}E$@
$]u}E$@
$]u}E$@
$]u}E$@
$]u}E$@
$]u}E$@
$]u}E$@
$]u}E$@
t>BtmEM
$rE]u}]
$UEP&A
]UUWVS
T$E|UD$
D$|UD$
eOEElD$
$SEJEEE
$@$EVE
rUMWVS
$EJEEE
$@$EFE
pUMWVS
$EJEEE
$@$EVE
rUMWVS
e|EElD$
$EJEEE
$@$ECE
nUMWVS,
enEElD$
11dE1X
'x $t&
cUMWVS,
e_EElD$
dE1X1\
$9\rpw
eUMWVS
$@$Eek
]EUu}]
UWVS<U
EMu`EED$
]UU EEE
$Uu}E$@
$:EUEEU
$8EU]u}]
UU EEE
$U]uE$@
$?7EU]u}]
]UU EEE
$Uu}E$@
$EU/EEU
$5EU]u}]
$;U(E$U
uM }u$}
UWVSLE
EUe[^_]
7UWVSLU
EUe[^_]
DUWVSLE
0P&M U
EUe[^_]
>UWVSLU
U N 1%D$
EUe[^_]
E$]U u]
E <$D$
@1vE D$
a0L$/4
@-6m D$
]U M$}>D$
W ]u}]
(]] uu
$WEEUs
AE]EUu}E
$YotuH
$]u}E$@
$;"UExE
$]u}E$@
$!UExE
$]u}E$@
UWVS<E
1t+u+t
$P$WUWVS<E
1t+u+t
<[^_]#
$P$WUW1VS
$P$US$M
E0EE,l
;E |qgfff
M(9Mt\EU
$P$UWVS|E
U ElUE
EET$$U
1t+u+t
|[^_]S<1u
Bu+E1E
UWVS,E,EE(l
C;]$s!U
CG;]$r
$X?E(UM
$<?E9Ur
U2Cu9rE
e[^_]E
<$MEMP
EET$$U
BdEBhEBlEBpE
1t6u6t
9u{tEC
,A<8w4
D$ E$T$$
D$ ,T$$U
|,U$HB
T$ 4E$
BHEBLEBPEBTE
E$T$(L$$D$
Bd8Bh<Bl@BpDBtHBxLB|P
B,EB0EB4EB8EB<EB@EBDE5
FJ8tJU
$%\$ ~
c%\$ (
$P$US$M
UWVS<E
$3;]$tb
tO%tv}
C;]$uE
%uC;]$tE
u!C;]$tM
R4UVS ]
^]kTU(
UMWVS|
MU E$@
e?E]l]
hxUxBl@
||8\A
\|@@B4E1<<
$E,|B
80tp@U
)UMWVS|
MU E$@
rxUxBl@
||8\A
\|@@B4E1<<
80tp@U
D$ E$T$
D$ E$T$
U M$$@
|htL$/p
x|e[^_]
$hp)dL$
UU EE$U
U8uE u
]U$M(}>D$
4$L$ D$
U t,t$
]u}]UWVS
$nXlD$
HlL$+@Ep1D$
@L$+<P0
T$+@Bl
kUWVS<
eE|lp<$yl
Od|dBl@
0L$'D,
0C,<$D$
EUEEUE
&{TPLB
ChtB4E
J$Z(@@<
X<$BuEX
$xUWVS<
eE|lp<$ll
Bd|dBl@
0L$'D,
0C,<$D$
EUEEUE
&nTPLB
ChtB4E
J$Z(@@<
X<$BuEX
$xUUWVS\E
$>\[^_]
UMWVSLE
$yL[^_]
U]Mu}EU
U]Mu}EU
$R]u}]
uEE}UM
UMWVSlE
t ]u$E
El[^_]
$bEl[^_]
]MEEUEIB
$E|[^_]
E|[^_]
EEUu}E
t&]u*E
EEU]}E
t&}u*E
$4E]u}]
$E]u}]
UU]EEu}E
E@t']u+E
$2E]u}]
EEU]}E
$nE]u}]E
EEUu}E$@
$D~E]u}]
UU]EEu}E$@
$B}E]u}]
$m|E]u}]
$]}E$@
EEUu}E
B@t2]u6t&
$yE]u}]
$yE]u}]
UMWVSlE
$wEl[^_]
$s.UWVS
UMWVS|E
$NrE|[^_]
rE|[^_]
}EEEEUE
@@t.}u2&
pE]u}]
$oE]u}]
$%nE\[^_]
$mE\[^_]
$rl]u}]
$$k]u}]
U}1EEU]uE
iE]u}]
$hE]u}]
UUWVS|E
$8gE|[^_]
$fE|[^_]
UUWVS|E
$heE|[^_]
$dE|[^_]
KUUWVS|E
$cE|[^_]
$"cE|[^_]
{UUWV1S|E
$aE|[^_]
$RaE|[^_]
UUWV1S|E
$_E|[^_]
$_E|[^_]
UUWV1S
UUWVS|E
$(\E|[^_]
$[E|[^_]
UUWV1S|E
$XZE|[^_]
$YE|[^_]
;UUWVS|E
$XE|[^_]
XE|[^_]
kUUWV1S
mUUWVS|E
$TE|[^_]
$BTE|[^_]
UUWV1S|E
$RE|[^_]
$rRE|[^_]
UUWVS|E
QE|[^_]
$PE|[^_]
UWVS|E
e1OEUE
$OE|[^_]
U]UEEu}E
$ME]u}]
ME]u}]E
EEUu}E$@
$NLE]u}]
$dKE]u}]
UU]EEu}E$@
$bJE]u}]
$IE]u}]
$]}E$@
$u}E$@
$8GE]u}]
$B]u}]
$kA]u}]
e5?EED$
}U|BtBu
#UUWVS|E
$<E|[^_]
6PxBtBu
]M|BtBu
eE4EED$
J|BtBu
e0E|D$
EpBtBu
eE-EED$
C|BtBu
]UUWVS
e"*E|E
3UUWVS
eu&EED$
<|BtBu
@))9rZt$
]]UXeE
]uEEEE}E
E]u}]E
$E+vUE
UU]EEu}E
UEWVSlE
El[^_]=
\dE|EiC
4$)1D$
9PrWp1|$
9BraR1_U\$
$K]u}]
9JrfzU
X?)9rY|$
9s3Bt$
)9snu~B
$u}E$@
UuL C
UjU(]E
u0F)9w
EJ?))9rRt$
8D]u}]
?J)9r[|$
?]9EUUrwU
X9s?))9rtt$
]u}]9st$
]]U(uU
<$E)(>U
UEEMEB
$I:EEE
$69E\E
A?));U
$u}E$@
$aUUWVS|E
$|[^_]
EE]u}E$@
$@]u}]
$u}E$@
9BUr~Uu
EHjU(}}
EE]u}E$@
$0]u}]
$u}E$@
9BUr~Uu
E8jU(}}
$]u}E$@
$]u}]E
$]u}E$@
$J]u}]E
}~UXeE
$cUXeE
U]uEEU
$@]u}]
$#UXeE
$cUXeE
$A]u}]
$~]u}]
$#UXeE
$cUXeE
U]uEEU
$>]u}]
$#UXeE
$bUheE
$sUXeE
$L]u}]
$c]u}]
$AUXeE
$(XUXeE
$(hUXeE
tD~@Q@
c_UWVS<E
7E|$/M
$UE19u
C@uaC@
C\u'C\
$#uOEE
$E]u}]
P0P@@J
@4A8A<u
$4UB@BI
;EE0AtM
$E.UMWVS
tlUEPXE
$e[^_]
$E,E3WqMEAX
$e[^_]
EpXX\
CdpueUpB\B
B4B8B<E
U]uEE}E
$E]u}]
${E]u}]
$EL*U(uu
EE]u}]
]9ttuF
U;:|CF
;9t19~!)tQC|$
P1SBF0
ChCdC@C
YLQ@9A
ALIPCT
$E>$BX
U9EXXPd
#t{]{T
$P$t:E
U]uEE}E
$:tfEU]@
$PE]CX
$E]u}]
E:IaUX}}
]u}]GT
_h1Wd)9]
G<~?O\U)
u6whO\U
F?E)\$
GhMW\)9EEr
GdeEGX
$\gGd\$
$AUUWVS\E
$\[^_]
UUWVS\E
$u\[^_]
]uEEEE
$R]u}]
]uEEEE
$1UXeE
]uEEEE
UUWVSlUE
e6EMxM
EUxBx8
UUWVS\UE
EUxBx8
hUMWVSlME
M6UMWVS\E
eR]UMC
EMUE]A
qUUWVS\E
EUxBx8
_UUWVS\E
EUxBx8
_UMWVS\E
EMUE]A
$4\[^_]
$RE]u}]
UUW1VS\E
$$UEMBt
$\[^_]
$OUUWV1S\UE
eDEMtM
$"UEMBt
$t\[^_]
UMWVS\E
$\[^_]
$yUMWVS\E
$YUXeE
EUtBt8
$1UXeE
EUtBt8
$RE]u}]
UUW1VS\E
$\[^_]
$WUUW1VS\E
eVEMpM
$UMWVS\E
$%\[^_]
UMWVS\E
EUpBp8
EUpBp8
$xUXeE
$"]u}]
$8p1D$
$"]u}]
$8o1D$
"EUE1}
*UqUheE
$.]u}]
$(UqUheE
]uEEEE
]uEEEE
$']u}]
]uEEEE
$g]u}]
]EEEEU
$]EUD$
$]YUheE
REUE1}
$:\EUD$
$m\YUS
[[]}OU
pl&$hd
$|e[^_]
$X)TL$
Nld)hL$
UUWVS\E
esEUE1}
t\[^_]
$K1UD$
$KZUUWVS\E
eXrEUE1}
$r\[^_]
$nJZUS
X[]}=U
UUWVS\E
epEUE1}
q\[^_]
HE1Ut$
$HZUUWVS\E
eHoEUE1}
$o\[^_]
1G1UD$
$^GZUS
X[]m:U
$'utJ$
p`1(@=
ie[^_]
$rld)hL$
$gktJ$
p`1(@=
$T_e[^_]
$hld)hL$
$69cU1
X[]}&U
Y[]-&U
$U]u}]
$`[UXeE
$ZUXeE
$ZT]u}]
$S]u}]
$SYUXeE
]uEEEE
$R]u}]
$XUXeE
]uEEEE
$:R]u}]
$WUXeE
]uEEEE
$Q]u}]
$O]u}]
$#UUXeE
$N]u}]
$sTUXeE
$ N]u}]
$SUXeE
$pM]u}]
]uEEEE
$L]u}]
$SRUXeE
]uEEEE
$K]u}]
$QUXeE
]uEEEE
$JK]u}]
$PUXeE
$J]u}]
$=PUXeE
$I]u}]
${OUXeE
$NUXeE
$WH]u}]
$MUXeE
$G]u}]
$;MUXeE
$F]u}]
UMWVS\E
$WC\[^_]
CtSt]u]
?XCtCu
CtSt]u]
$u}E$@
$&EUD$
E@xEtP
UWVSLE
$wllD$
$TCtCu
].UXeE
$~E1@t
$F=]u}]
u1EEEE}1
^H[^_]E
[H^_]E
-UWVS(E
C9u([^_]
4$ [^]
UUWVS|E
$2E|[^_]
$d2E|[^_]
UEXEE]u}E
$-1E]u}]
UEXEE]u}E
$m0E]u}]
UEXEE]u}E
$/E]u}]
$E]5t&
$EYUEXEE]u}E
$.E]u}]
UEXEE]u}E
$-.E]u}]
UEXEE]u}E
$m-E]u}]
UEXEE]u}E
$,E]u}]
$E]2t&
$EYUEXEE]u}E
$+E]u}]
UEXEE]u}E
$-+E]u}]
UEXEE]u}E
$m*E]u}]
UEXEE]u}E
$)E]u}]
$E]/t&
$EYUEXEE]u}E
$(E]u}]
UEXEE]u}E
$-(E]u}]
e}#EME
$MAX9EE~wE
k-MT$+Uyu
#Ee[^_]
8UBtBu
$e7 EME
.*MT$+Uyu
6UBtBu
$Ee[^_]=uE
$]uE$@
$E."EU
$]u}E$@
$E*!EU
$u}E$@
||EH;E
En}t uu$E
UM4$L$
UU]EEu}E
\Mira.h
Saaaalamm
basic_filebuf::xsgetn error reading the file
basic_filebuf::_M_convert_to_external conversion error
basic_filebuf::underflow codecvt::max_length() is not valid
basic_filebuf::underflow incomplete character in file
basic_filebuf::underflow error reading the file
basic_filebuf::underflow invalid byte sequence in file
basic_ios::clear
basic_string::at
basic_string::copy
basic_string::compare
basic_string::_S_create
basic_string::reserve
basic_string::erase
basic_string::assign
basic_string::append
basic_string::_M_replace_aux
basic_string::replace
basic_string::insert
basic_string::resize
basic_string::_S_construct NULL not valid
basic_string::basic_string
basic_string::substr
ios_base::_M_grow_words is not valid
ios_base::_M_grow_words allocation failed
locale::_S_normalize_category category not found
locale::_Impl::_M_replace_facet
basic_string::_M_replace_aux
%H:%M:%S
%m/%d/%y
basic_string::_M_replace_aux
basic_string::erase
pure virtual method called
LC_CTYPE
LC_NUMERIC
LC_TIME
LC_COLLATE
LC_MONETARY
LC_MESSAGES
locale::facet::_S_create_c_locale name not valid
-+xX0123456789abcdef0123456789ABCDEF
-+xX0123456789abcdefABCDEF
-0123456789
%m/%d/%y
August
September
October
November
December
%H:%M:%S
Sunday
Monday
Tuesday
Wednesday
Thursday
Friday
Saturday
January
February
c:/mnt/samo/mingw/msys/mthr_stub.c
-LIBGCCW32-EH-2-SJLJ-GTHR-MINGW32
w32_sharedptr->size == sizeof(W32_EH_SHARED)
%s:%u: failed assertion `%s'
../../gcc/gcc/config/i386/w32-shared-ptr.c
GetAtomNameA (atom, s, sizeof(s)) != 0
R`%uM]=];Z
uuvHMe
Ix@ p+
N10__cxxabiv117__class_type_infoE
N10__cxxabiv120__si_class_type_infoE
N10__cxxabiv121__vmi_class_type_infoE
NSt6locale5facetE
NSt8ios_base7failureE
St10bad_typeid
St10ctype_base
St10money_base
St10moneypunctIcLb0EE
St10moneypunctIcLb1EE
St11__timepunctIcE
St11logic_error
St11range_error
St12codecvt_base
St12ctype_bynameIcE
St12domain_error
St12length_error
St12out_of_range
St13bad_exception
St13basic_filebufIcSt11char_traitsIcEE
St13basic_fstreamIcSt11char_traitsIcEE
St13messages_base
St13runtime_error
St14basic_ifstreamIcSt11char_traitsIcEE
St14basic_ofstreamIcSt11char_traitsIcEE
St14codecvt_bynameIcciE
St14collate_bynameIcE
St14overflow_error
St15basic_streambufIcSt11char_traitsIcEE
St15messages_bynameIcE
St15numpunct_bynameIcE
St15time_get_bynameIcSt19istreambuf_iteratorIcSt11char_traitsIcEEE
St15time_put_bynameIcSt19ostreambuf_iteratorIcSt11char_traitsIcEEE
St15underflow_error
St16__numpunct_cacheIcE
St16invalid_argument
St17__timepunct_cacheIcE
St17moneypunct_bynameIcLb0EE
St17moneypunct_bynameIcLb1EE
St18__moneypunct_cacheIcLb0EE
St18__moneypunct_cacheIcLb1EE
St21__ctype_abstract_baseIcE
St23__codecvt_abstract_baseIcciE
St5ctypeIcE
St7codecvtIcciE
St7collateIcE
St7num_getIcSt19istreambuf_iteratorIcSt11char_traitsIcEEE
St7num_putIcSt19ostreambuf_iteratorIcSt11char_traitsIcEEE
St8bad_cast
St8ios_base
St8messagesIcE
St8numpunctIcE
St8time_getIcSt19istreambuf_iteratorIcSt11char_traitsIcEEE
St8time_putIcSt19ostreambuf_iteratorIcSt11char_traitsIcEEE
St9bad_alloc
St9basic_iosIcSt11char_traitsIcEE
St9exception
St9money_getIcSt19istreambuf_iteratorIcSt11char_traitsIcEEE
St9money_putIcSt19ostreambuf_iteratorIcSt11char_traitsIcEEE
St9time_base
St9type_info
AddAtomA
CreateDirectoryA
CreateProcessA
CreateSemaphoreA
DeleteFileA
ExitProcess
FindAtomA
GetAtomNameA
GetCommandLineA
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetStartupInfoA
InterlockedDecrement
InterlockedIncrement
ReleaseSemaphore
SetFileAttributesA
SetLastError
SetUnhandledExceptionFilter
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
WaitForSingleObject
_fdopen
_strdup
_write
__getmainargs
__mb_cur_max
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_ctype
_errno
_fstati64
_isctype
_lseeki64
_onexit
_pctype
_setmode
_strnicmp
_vsnprintf
atexit
fclose
fflush
fprintf
localeconv
malloc
memchr
memcpy
memmove
memset
setlocale
setvbuf
signal
strcat
strcmp
strcoll
strcpy
strftime
strlen
strtod
strxfrm
SHGetFolderPathA
ShellExecuteA
KERNEL32.dll
msvcrt.dll
msvcrt.dll
SHELL32.DLL
;NaHaJa? BC>?
????????MJ?By`F
e?bJ?R??
??C@C??
zA?????O???????????????????????????????m
$Q??R????
?n??V???
g?~??Z???
??????lm
??????
l????????????????????????????????????????????????????????????????????????????????????????????????????????????????
L?Wc?P53
P iUG>^K>5
5+R?#?N
l[Wc?`UG?
Wc?G?K>5(>y<
uz9Wc?v*?
CvBe?W7?F
5Wvnd?
5Cx77TB
u/+Wc?8
u/+Wc?8
5Cx)G5
GyVs?7
&yruw4}b}Yo
H>>xaV9v>
sF>?v@
H>>x]7:>
d=?'#8>
KUG?UC?U@,'U?
?@28bD?
>I?\?:s>?U
1?@^mV
>Wc?Wc?vVNB
CUG?UC?
$>5Cx27>
@UG?UC?
$>5Cxa17>
$>5CW1w@'>
cvF?OS
>?xIa7
Cw>5$z
1sx5OH
>5s?s?s?sC?xM2/+Wc.
cv2?Wc0
cvAWc?
cvA{K
`4sx-5
>QGOp+>of
13K>%I
A#Kt>%M
:#t>7n>
%:^m9P
;?+h/?
>?x!K9
>>v&c?
L?'yz?
5Q VF>
mGy>wNM/
YjCx'/8N? R
L?N=f7ba7
s>qW7?
>KV1?T
R9Vx:1
UD>#>
% >5y=7
q(>UD>'q?UDA'?
cUD>'?
%>5SxYs&?x
5Wn?ULS
lWc?vv?Nly
cvf?xQs
5CxuMu
5CxUMu
L?P5$S<
D?P5$S<
5Cxe<u
u7O@Fl
q55{x;0
>WK?w>
OT79^5F520
7RG0D?
A@15%lp`
/:*VX@
?56y<<P7ZCwb>
5:y,=/d@N
l?U?s?y<Ny<<
OH?WK?U
cx->0H?
d55Sx>0H?1S
/{5`/*
l?7W#?
'>/r\?
?WC?H?y><D?
5+S/d@Y
5CxU>u
5Cx5>u
'9?v{?
5Cxy=<D?
u/+Wc?vK?YoD?
P!Y-?1_
Y!Up@'
D??apm _
>Wc?Up@'.?w>Wc?Up@'.?w>
b?S/Z7V
P!FF>cl`
?v&I?{
?vH?{AS/Z7V
1$lNDPO
N@Fl^p?WS<
sjDwW#?
cUp>'%?
sjTwW#n?
sR>x}%<p
*\Wcfp?Up@'qZ?
?Up@>^
lmy!>sC?x-
b _Up@'->v>H?O
?WC?w<>[
sjdwW#?
yVsR?x56/
cUp>'t>
Y1%lNDPo
sj|wW#?v
cUp>'?
cUp?'?Up>H5Cxe
sjwW#~?vB5?
cUp@'E?
?Up>H5Cx
sjwW#N?vr4?
cUp@'u?
cUp>'M?
?Up>H5Cx
cUp@'?
sjxW#?v3?l
cUp@'?
sjxW#?v"2?l
sR?x[7J
?Up>H5Cx
sjxW#N?vb1?l
sR?x=Z7J
?Up>H5Cx
?WW?U?
?WW?U?
b?S/R7V
sjxW#~?vb.?
>Up@L5Kx>7J
hN5Cx)[9N
5Fx[sR>
sjxW#n?vr-?
>Up@L5Kx
hN5Cx9Z9N
')>Up@L5Kx
hN5CxIY7J
d'?Up>H5Cx
uz7Wc?vJ
?U\GH/
?7FW[?
ysA?WC?
XpW{H7
hP5Cx7J
5+S7FW_?w>Wc
?Up>'I?ws>
t8 ]Up?'
45Jy3=5SxIHs
u/+Wc?v>W
u/+Wc?vN>W
u/+Wc?v
u/+Wc?v
5Wn?ULZ
sC?xU'5
5Wn?ULZ
sC?xU&5
AH55Sx5
5Wn?ULZ
cxsC?x%5
AH55Sx
5Wn?ULZ
cx!sC?x
AH55Sx
5Wn?ULZ
cxsC?xu!5
AH55SxU
5Wn?ULZ
sC?x 5
AH55Sx
5Wn?ULZ
cxAsC?x5
AH55Sx
5Wn?ULZ
cxsC?x
AH55Sxu
5Wn?ULZ
AH55Sx
5Wn?UL
cxasC?xU
cvRAy>s
AH55Sx5
H?55SW
sR>xI|
cUp>')T>
cUp>'iS>
?{?ycg@*ZK?
I?{jD?
?WS<D?
hPsjxW#.?
D?>8/6#f
l<!\L7>G
CUp@>^y"><>
sR?x{N
CUpB>^y
cUp>'P>
'j>UpC'k>w>
cUpD'O>
cUp>'uN>
'=?y8]
cUp>'N>
T?;KD?
P5K>5C
sjyW#1?
']?y8]
cUp>'M>
T?[KD?
hP5nW#?
D?>8/6#f
l<!\L7>G
sR?xYv
CUp@>^y"><>
sR?x!vN
CUpB>^y
T?+c(>
sR>xa|
cUp>'AJ>
'9d>UpC'=e>w>
?`L7BG
n5CxIks:?
?XL7:G
"2UT?H76
T?f@N55Cxas
'U>Up@'y[>UpA?
(6>UpC@5Cx<
?`L7BG
n5Cxis:?
?XL7:G
"2UT?H76
T?k@N55Cxq
>Up@'Y>UpA?
/(6>UpC@5Cx5<
T?7N?5/
sR?J>/
=<P5Cx
@5Cxe5:
`sR?QA
085Cxe
'i\>UpA'm]>w
sR>xQN
N5CxumN
'\>UpC']>y[72
cUp>'B>
T?c[*2
<5CxcsR?xE
|8?7Wn?Ul
5Zxs&?
!?UTA$g@
?U8@ 5
s>UTA?
cy]s6?I>/'
Ah55Sxz
Wf]?UT
)N1*h9
?k>v55Cxh1
u24>'ngPj
hP5CW#
?5@Ps?WC^?U
KP55sR?x`sR?
55KxE3sC
H?5sR?x
?lp`34
55KxE2sR?H
'>UpDLk@
pNF?P51L
H?5TB?bO_
pN?P51
?FJ?OK
5Cx9/d@pb?F
~?P5|?
K?5L?G`
?F?O4S
H'e?UpH,f
'~>Ukp
Wcr?v>>
sCxA,7J
{L7W^?
/> QUp>H5Cx5sR>
T?m*OWc?yysC
P FWS<
u/+xa>u?Q
U?s6?x>sf0
s6?xy92
s6>x-<
cUTA'?yg5KW
cUTD'0>
U?s6?xi<sf0
?yg5KW
hP5CW#Q"?
?5@Ps?WC^?U
KP55sR?xiSsR?
55Kx'sC
I?5sR?xIsR?H
L55Cx&rD
?H?7J3
sR?xIssR?
55Kx&sR?H?k
L555Cx%sR?J
'5v>UpDLd@?F
d@p`3`
N?5\J?I
cWc?UpC'?UpH4d[
T?d@LOW
T?d@?1
't>Pe@?1h
pNr?PO'
~?P5|~?5t?5\?k5L?Y5T?bO
H?5T?b5d
cvj>Wcf?
oL7W?UOp
Wcr?v>
sCx7J
P5Cx!}/
*wWc?ypsC
|h?g>$7Wn?U<\
E5SO?5
>xN1=7
>xM1<7
u/+Wc.?v?Yo
oFS<D?
ES cV57~
5Cx]5E
5Cx]5E
5Cxa>5C
(cx1/7
Sv>r5/
5[xa>sB?
5[x};0
nr5[x>55
pix5<5CI?
tsJ?mc
{KP7?y(<
zoS/Z7V
sR>x)y5CW
L?NDw{iE
,y `Fz
</D~q?
T/DVq?
x/Tzq?
`/Tbq?
u/+Wc>?v>
sB.?%l
>{@P5$
sB.?%l
?!v">{@P5$
sB.?%l
?!vr>{@P5$
sB.?%l
L?NL7F
L?NL7F
5nW#.2?v?
cUp@'?
b?SsR?
hH5SxQ
b?SsR?
hH5Sxq
5nW#4?v?
cUp@'?
9vWC?U
K~mAS<
sj~W#6?
D?P5Cxj7J
sR>xo<
sR>x}sC?x
s?.?G`U
?vnA> <
cv?Wc?
?W?|57
5sC?x5{xe7
5+SsC?
V5'a?U?9z
5+SsC?l
CU?'E?v
?W?t57
b?p/G{s
Wb?Ut;8
cvA{KS7:
b?Ut09
Hh55Sx
/" QUT>(5Sxis6>
b?Ut0:
Hh55Sx
/" QUT>(5Sxhs6>
sj%~W#N=?vb?
sj+~W#>?v?
hN5CxYj9N
W2b?Ut>
cvvA{KS7:
WBb?Ut?
Hh55SxD
/" QUT>(5Sx
WRb?Ut@
Hh55SxC
/" QUT>(5Sx
sja~W#C?v?
hN5Cxe9N
sjg~W#~C?v2?
hN5Cxe9N
Wnb?UtD
cvA{KS7:
W~b?UtE
Hh55Sx?
L$5Cx/" QUT>(5Sx)^s6>
Wc?UtF
Hh55Sx>
L$5Cx/" QUT>(5Sx)]s6>
W#I?v?
hN5Cx_9N
W#J?v"?
hN5Cx_9N
0Wg?U?
?W[?U?
?Wk?T?
0Wg?U?
?W[?U?
?Wk?T?
D?SsR?
W#~M?vB?
D?SsR?
W#BN?v?
SlP5Cx5Q7
zoSsR?
dL5Cx=
D?SsR?
dL5Cxq
W#P?v?
D?SsR?
W#Q?v2?
iP5CxO7
zoSsR?
P#?TmYs
y7WS??U
sCFxI5
>VcVdWC?UP
W#nR?vR?
D?SsR?
W#.S?v?
D?SsR?
dL5CxQ
fP5CxK7
zoSsR?
dL5CxsR>
lN#PN|
"Wc#?U
/Ws4?U
QWcV?v
?W[?U?
?Wk?U?
?W{?U?
h?5N?T
o85Cx/+
yK?ND,8@
H$lH^8xWc?v?
u/+1,
Wc[?v:>
Wc[?v>
Glz596
?H?I?/+
l{@W$M
Cvr?H;
05F10:
@5N18:
1?;s`I?sx
uz7\N?
5+S<'>
<'>/P
<P5$S55
P5$S55
L?P5$S55
L?P5$S55
L?P5$S55
z'}>/P
GqN?yb7
~aAb/:A
cK?57F
<'>/P
7|57v>{]'
D?'i>/P
?w>xq3M
cWc?`u
yO/HO(Q/H
N"P15$nH^8?
5Cxq/+
lx{m>dW@*E
L?P5$uz7W>
[z7H?u
~z1$n5
Ssn?W#?
|5+Sl//
'lxhP|
\7fZl5f
qbbcND|
tbbcHTb^
vnp7Zctx7z
xaI?N!/#nH^8@u*<
?Q5rbv
/F'avt
)F'ast
xaI?N!+#nH^87u*3
c6iy>7rI?
%Fazt
cv?xug<
T@5[xIj/+
!A5Sxg1
@A5sxg,?0
?WKpN{'?U?yi
A5Cx9f1
:c$?y>W
?{v'?U?w
L?z5755vj?W?i
cvv?J>
TQxds??
TQxds??
Svn?W?i0
5Cxcd>>
v?WUo'
<Y5$~pN>
Y?5U0?pilC
>I?9VW
pN{@`8
a+>y</
>J?dC#
>w >J?5
>(N>W7V
5>K?5Bl<VbTA
I?{@`8
'5?l?;
?yg<,9
aNLa9{D
k?8gE<50
l?y<@`8
cI?xB50PVbTA
vF?Wa(
@g@85:{@i
855sxq@7
Ii0`(>K>5
cI?5759
<z97577555Cx[/
A+?5AG=+?
iWAeCP<
NE/*5A
S51G"I
*_s@9I?
D?NE|@5@7@A
D?NE|h5@7@A
V})6 E
lONEP%
V*P?574?O?5/
D?BP?i>
oWc?y/*
lwcRGtN=]/-c
G@V5BOx
b?NE|h5@7@A
L?NE|h5B7@A
WI?cxGO/
cc5dAD?
pK?55/
(c*b9?
~N=XO|
cK?<NE|@5@7@A
WK:?G?
OpHQ5X
V})6 E
lONEP%
CkjENE5
OpHQ5X
:rwl?y
FpHQQG
7/|NEh5I?
V})6 E
lONEP%
PfG/+K?5gC
i759W?s?
&@15.mp`
CP/&(cO?55
V})6 E
lONEP%
@15.opW
OPkE*~
lwNEP$fG
V})6 E
lONEP%
cs?w>-9
NE/.5Y
<NE/.5q
c1>GNEj
*.yd@
K?$Ak5)
,?fCD?
cJ?955555Kx67
?WIkpW
,?fCU?
pNy<dB
{tU?G?
(>W?I?/
?H?s?/%4wa>
CPgENE
V})6 E
lONEP%
*2w>H?55
b?z7751GI+?
b?NE/*5q
G?sCNE99
k?NE/*5i
>>Y<NE/
>y?=5(G
>G?{NE
uty>50G"I
>Wcpc@
>(>W?I?/
%0w2>sAeDP
<??>$
<??> <??>
<??>X
<??> <??> <??> <??> <??> <??> <??>d
<??> <??>
<??> <??>|
<??> <??> <??><
<??>p
<??>l
<??> <??>L
<??>,
<??>t
<??> <??> <??> <??> <??>
<??>x
<??>0
<??>8
<??>4
<??>@
<??>H
<??>\
<??>`
<??>|
<??>x
<??> <??
5Cx5:1
D?x"jN]
u7nC <
5Cx581
lN-PNS<
x7Ryb59C
u77?Q <
u77?Q <
u77?Q <
S9~{a|/
u77?Q <
5Cx115z
xWRN PPnNLR1
g7nu24>'ngPj
Q"lN%R
x9slORN PPnNLR1
SsC$x}
u77?Q <
5CgWS<
5CcWS<
\'Ah57
5CGWjQ <
5CKWjQ <
Wa?Ut_
Wa?Ut
\W?h57
5CgWS<
5CcWS<
5CGWjQ <
5CKWjQ <
W`?Ut?
\7:h57
?vV>Wcr?Up>'
PA?U\?
?sR?xr
7JVdWC?UP
UpB'>UpA<5Kx@<
'Q>FlL9N
sR>x=?<
|X?7Wn?UL
'YB?U4AX57
% >5>Z5>
>7>$nx
cv~a@W
$>5Cx%
'UE?U4>h5Cxa7>
U4BH5Cx-s
'E?U,?*HW
'E?U4>h5Cxs
/v"Y>W
'C?UD?h5Cx7
cUD>'!8>
>o <P5$
x'M0>UT>,/
/ND/70
/VND/7
>W?$, HN
>H>sA?
>H?y=7"
>s>y=0
h=f@`0
/'ND/7
`1r9H>5
>F>W?1
>WC>w>
>T3@w>
9_>U?7
P]>H?yq=7
>#>V1@
?yu97>
'1.?F9p
8?d@h5
K>yB:7A
s6>|(d>
cUT>>^y77A
>WC>w>
qWUT?<5
'->U4O(
Wc?UT@'>UT@?
s6?|Oy
s6?|Oy77&
?yq47A
cUT@>^y=7A
s6>|Oy
x'}">UT>,/
/|ND/7
/&ND/7
>W?$, HN
>W?d>`0
>H?y=7>U
D?N1B?
oAf?,^)
/qND/7
ANLP57
>W?d>`0(
?y;:7"
WK?wN>WO>wB>
>WC>wN>
>T3@wl>
`1d>#>
ANLP57
9[>U?7
P]>H?yq=7
>#>V1@
'A ?F9p
8?d@h5
K>y:7A
s6>|(>
cUT>>^y\67A
0s#>WC>w7>
cvRE@W
?y!>7&
s6?xTs6?H?9f
Cv*:@b>
gUT@>^
gUT@>^
`1(?wo>
cUT@>^y=7A
s6?|(i>
gUT>>^
>UT>,/
/ND/70
/VND/7
>W?$, HN
>H>sA?
>H?y=7"
>s>y=0
h=f@`0
/'ND/7
`1r9H>5
>F>W?1
>WC>w>
>T3@w>
9_>U?7
P]>H?yq=7
>#>V1@
?yu97>
8?d@h5
K>yB:7A
s6>|(d>
cUT>>^y77A
>WC>w>
qWUT?<5
Wc?UT@'>UT@pNJ?57
h5Kx90
s6?|Oy
s6?|Oy77&
?yq47A
cUT@>^y=7A
s6>|Oy
>UT>,/
/iND/7
>W?$, HN
>H>sA?
>H?y=7"
>s>y=0
h=f@`0
/BND/7
`19H>5
sA?w>WK?w>
>WC>w>
>#>V1@
gUT>>^
9_>U?7
P]>H?yq=7
9W0Jh7
1c#>1<
Wc?UT@'9>UT@?57
s6?x:s6?H?9f
@b>7f
8?k_h55Kxe
>5Sx9s
?y >7&
s6?x18s6?H?9f
>U?N"R
cUT@>^y87A
s6?|($>
cUT@>^y67A
s6?|(x>
cUT@>^y97A
s6?|(>
bw>F?y=7A
s6>|(.>
cUT>>^y
s6>|(J>
gUT>>^
>s@?w:>
x'>UT>,/
/VND/7
>W?$, HN
>W?d>`0
>H?y=7>U
D?N1B?
k?V1?P>
ANLP57
>H>s@?
>WC>w.>
1#t>QO
Q<f@()>
`1ld>#>
ANLP57
>H>s@?
-=n>?O
1dN=S9[
F9ezK>
YN1g?w>
'a?F9p
8?d@h5
s6>|(d>
cUT>>^y,57A
s6>|(>UT@?
0#>WC>w
?y!>7&
)s6?l?
>U?N"R
_45Cx7~>
cUT@>^y.87A
s6?|(>
cUT@>^y47A
s6?|(,>
cUT@>^yE87A
s6?|(>
bw>F?y=7A
s6>|(>
cUT>>^y17A
gUT>>^
x'>UT>,/
ND/70d
>W?$, HN
>H>sA?
>H?y=7"
>s>y=0
h=f@`0
w$,"?T
/DND/7
ANLP57
>H>s@?
i#N=W9[
-N13?wz>
gUT>>^
m(j>U>
`1rd>#>
ANLP57
>H>s@?
-=n>?O
1dN=S9[
F9ezK>
YN1g?w>
?y587>
'A?F9p
8?d@h5
>yW97A
s6>|($>
cUT>>^yn57A
s6>|(>UT@?
>WC>wF>
qWUT?<5
'>U4O(
Wc?UT@'k>UT@?57
/?ND/7
P,>0V`1VN
(/Hy=7A
cUT@>^y87A
cUT@>^y47A
s6?|(!>
cUT@>^y
=d@(m>
cUT>>^y
s6>|(>
cUT>>^y617A
s6>|Oy37>U?
/7ND/7
>W?$, HN
?`/7.k
8>7>M?
#>H>sA?
Pt>H?y<<
>WC>w>
/&ND/7
#>W?D?
$, OF9w
0}N0A 7Tq?X4
555Cx1
GAs?H>7
ND0(7A
4E,>1h7
Wc?UT@'`>UT@?
w>WO>w>
Kk559f
@Y5>w >b
8?d@(57
>555Sx7&
/KND/7
>U?N"P
$1bK>!
? ^j@R
N|NLxP0
K>7&ln/
>K?555Cx
%=5SxsCW
8s>y<7A
s6?|(>
cUT@>^yT57A
cUT>>^yS27A
>H?y'<7A
s6?|Oy77A
s6>|('>
gUT>>^
s6?H?9f
Cv:@b>
/GND/7
/82+x/H
cv8>V"
Wrp<WH> f
N"Sd>`
NjS|N"
@s?u(Q>
W@,p H
?N"Sd>`
NjS|N"
KNU`rW
y<7rV@w>
5Kcw*>
W-a?Ut,
>UT>h5Sx~s6?H?59f
zoSs6?
zoSs6?
W3a?Ut#.
'>UT>h5Sx-{s6?H?59f
zoSs6?
cv~9>Yo
cvG>Yo
cvU>Yo
cvp>Yo
555CohN?
/~xu59v
xG6h@(Y>T
/k59657
555CohA?
/~x!s59v
`5555Sx55v
/~xq59v
a6gyw=rr}
n5g55S
cxuJ7vy
AP4E>F
%\=55Cx
cx45V>
/~xn9/ ~
L=52>F[
m?7:>Nl
sV[y=9
L=97:>
CX>y<9
>vvc=m_
x=599f
>y<rR>yp<<
AP4E>F
%\=55Cx5:>
9NLS9f
(cK?5/&~
cv>xq5^>
/~x}i9/ ~
L=52>F[
m?7:>Nl
sV[y=9
L=97:>
CX>y<9
p'>v6_=k
x=599f
>y<rR>yp<<
cxf1h7j
p555_5{
> <Y5$
5CxA1u
'i|>WS<
u77?Q <
>o <P5$S<
W{`?UtH
Wu`?Ut/H
Wo`?UtI
5CGWjQ <
5CKWjQ <
D?N"Sd>`
/ND/70
u?7H>1
L?NDh4
,NLQ9`5z
s?~wr>
C$lGP0m
/ND/70DD?
k?N"Sd>`
/VND/70
R`1?w>
(i>U?(
<P5$S<
XTx?_7W'?y<
<`H> f
N"Sd>`
O9`57?rz
'bs?yU=7'U
D?N1M?
cH?59R
D?N"Sd>`
/ND/70
L?@B/iH> j
D?N"Sd>`
C?s?D?
A?5!j`piWK?wj>WS?w>WK?w
L?>Ds>yM=<N1w?w>
<N"Sd>`
<7C(b?
D?N"Sd>`
/rND/7
`jsH> b
D?N"Sd>`
/cND/7
L?`1d>l1
>ls?y=0
+;f@`0D?
/iND/71
?uwP>WO>w>
>WK?w>
b?>ls>y=0
U=f@(->
cOyn=7A
D7+H5Cxx5
FH>56js
D?N"Sd>`
/{ND/70
85SxYv52
L?N"Sd>`
/tND/7
3?s?D?
/?5!fU
7yM<7)
V5Aw&>
5ScwQ>
N"Sd>`
gFVFND
Cwf>x7[,
WK?FOb
lNL`!b
WK?b(>
5555Kx
cyBdA#>K?57
?ND`71@#>
=]NDh@
>55V[~*
?#QFU0i
yr7EGJ6
>55V[~*
?#QFU0i
5555s[
cH?5dz
cH?5d@
%=5dV?
>55V[~*
?#QFU0i
yr7EHI6
5555s[
5Scwj>
cH?5d_o
cxe&5H>5
?N"Sd>`
%=55gz
>55V[~*
?#QFU0i
yr7EG?
>55V[~*
?#QFU0i
yr7EH?
cy*55[H?ef
_w>H?5dW
5ScwC>
NLQ55{_
4jbJFND
l55m57
cv`=Wcr?
n5^>P,R?N
t>1eND
%|=7Z>
-=5j>vv>
?#QFU0iv>
yr7EH?
g>V1&?
=4t>wX>x
lN"PNS<
?#QFR0i>
p_NlNLP
s><}W?
h'=q>UD>
CUDA'v?T
cUDA'}?UD@?
?va=VPVQWo?U?
?WW?U?
?Wg?U?
P#>J?5>
'?UD?h5Cx/7>
9NLP7jQ`?
>U?N"P
GOxN0X,w
<=5">v?W
>UD?'E
>5Ky97>
CUDD>^W
7F>U?55
L?+T>j
-`=sB?
N~K{>U?
/qND/7
/GND/7
+h>W?D?
n>ya=7z>U
/TND/7
?97P$1R>
>U?N"P
>U?NK?57
>7Tq?X7V
'j?F9BX7
|>W?d>`0(>
>7jS|N
%x=s>yU90
D?+>WC>w>
QK>e>T
>(Y>UDC
5CxIN1x?w>
(>^jnN
>-p=N_
>UD@pN?59V
$3.#<>u
R57:>k555KW
cUD@>^y::7A
s&?|(V>
cUD@>^yk9s>y657A
s&?|(^>
cUD@>^y47A
s&?|(>UD@X5[xe
(?G<(^
cUD@>^y07A
cUD@>^y57A
s&?|(>
cUD@>^y
s&?|Oy77A
s&?|(}>
cUD@>^y3r
N1|(>>Up
cUD@>^y=+7A
s&?|(>
gUD@>^
cUD@>^y8+7A
s&?|(}>
cUD@>^y,7A
s&?|(+|>
cUD@>^y:7A
s&?|Oy=<
s>\}W.?
h'Z>UD>
CUDA'%^?T
e?UD@?
?vNI=VPVQWo?U?
?WW?U?
?Wg?U?
P#>J?5>
(?3*+>
h?UD?h5Cx
9NLP7jQ`?
>U?N"P
GOxN0X,w
<=5">vZ
'>UD?'
>5Ky97>
CUDD>^W
7F>U?55
L?+T>j
-`=sB?
N~K{>U?
/qND/7
/GND/7
+h>W?D?
n>ya=7z>U
/TND/7
?97P$1R>
>U?N"P
>U?NK?57
>7Tq?X7V
'AR?F9BX7
|>W?d>`0(>
>7jS|N
%x=s>yU90
D?+>WC>w>
QK>e>T
>(Y>UDC
IN1x?w>
(>^jnN
h5Cx%#
>-p=N_
>UD@pN?59V
$3.#<>u
R57:>k555KW
?v"h?y00
cUD@>^y::7A
s&?|(V>
cUD@>^yk9s>y657A
s&?|(^>
cUD@>^y47A
s&?|(>UD@X5[x
cUD@>^y07A
cUD@>^y57A
s&?|(>
cUD@>^y
s&?|Oy77A
s&?|(}>
cUD@>^y3r
N1|(>>Up
cUD@>^y=+7A
s&?|(>
gUD@>^
cUD@>^y8+7A
s&?|(}>
cUD@>^y,7A
s&?|(+|>
cUD@>^y:7A
s&?|Oy=<
%p=5Cx
%0=9fO?57
<=57">
H=57&>
L=555K
Pn+H#>
=55SJ?7
T='.h5CH>56>vl?
ET=Z(>
=57v(o>
x'=>UT>h5Sx,
:?UT@#
,55Sx"5
>vri?W
NLP55{
NLP55{
%d=555S
'Aq>w>
'>5CW?
h'6>UD>K
9NDw05
jJFNET
%>58+>
'-:?FAj
>`5s&?xY
>M>5>"l_
?UD@X9f
cv6=?1CK>*
>X5n>/
s&?x%ns&?
cX555Kx}
/n>0lCp>
h)?UDA
5f>vN=
?W[?U?
?Wk?T?
>55Cx5w7>F?
'@?UD?h5Cx
*p!1UD>
UDD')>US
(?W(W>
s&?xqjs&?
PC>N1X7z>-=557v>
s&?xis&?
>UDCK>
1_#>9_
s&?xhs&?+>
iSh555Cx9
h55Cy7s&?
ND%>7f
(?7~>L?
cX555Kxq+
M=4[y7
>N1X7r>
>FAX7v>
(>FIX4Ww`>b
'>5CW?
h')>UD>K
9NDw05
jJFNET
%>5++>
'--?FAj
>`5s&?xY
>M>5>"l_
?UD@X9f
cv60?1CK>*
>h5n>/
s&?x%as&?
h)?UDA
5f>vA=
?W[?U?
?Wk?T?
>55Cxt7>F?
'3?UD?h5Cx
*p!1UD>
UDD')>US
(?W(W>
s&?xq]s&?
kC>N1X7z>-=557v>
s&?x\s&?
>UDCK>
1_#>9_
s&?x[s&?+>
iSh555Cx9
h55Cy7s&?
ND%>7f
(?7~>Y5g@X555Kxq
M=4[y7
>N1X7r>
>FAX7v>
(>FIX4Ww`>b
tNs?WKF?
cv>= <
lp`WKF?
?T!?U$?
L5CWC?
sj vW#~?v5=
X/WC?U
sR>xYD7J
vW#N?v4=
X/WC?U
sR>xC9N
sR>x=T,Mu?F
<7FV?
5sR>xI9N
gUpA>^
T?,5CW
?vZ< <
cUp>'Y?
/yND55
L?0/.0
`NLX7W
@4IFm>
/IND5&
cUpA>^ye=O
sUpA>^y|=72
cUpA>^
T?$5[W
?vr< <
5Cx7FWC?U`?
5sR>x9N
QwS/R7V
sR?xu27>
cUp>'%
(>Up@'|>
5CxsB>
Q~S/R7V
sR?x07:
cUp>'U
(>Up@'z>
*ND5B f
P5Cx7B
?`S/R7V
T>c~(>Up@'Ax>
sjuW#?v'=
sR>xJ,M
?U`?H7A
L?P5Cx7F
sR?x-sR>
>Up@'w>
sR>x5H,M yU\?H7A
WUpA>^ hU`?
sR?xQ,7:
>v<y>sR?x]$<
5Wn?UL
d>I>W>
|h7JW>
$3/!PU4>'{>w
?v^< <
s>PtW?
>U8? 7A
5Cx1'7
s&>x!(
gGXk@p
b?$5Cx17
?v:< <
5Cx7FWC?
sR>xA,M U`?H7A
L?P5Cx
5sR>xiv9N
T?t@5SW
3/!PUp>'v>w>W
sR>x@,M-?
|H@5CW
gUpA>^
t4 ]Up?'t>Up>45Cxq72
>vJ<y>sR?x
5Cxg7V
c'q>w> <
5Cx)f7V
7>I?9MWC?UT?
sR>x-;,M
5*:g07
'6>07>
sR?|(>
T>+mD?
< x07@
{Dz4!Y
5yq=/6S/R7V
=sR?x)
?vv< <
?555CW
D?P5Cx!7F
5sR>xl9N
sR?|(>
3Z/!PUp>')l>w>W
lP:D7@
_UpA>^
85CxA76
Is>?{\
cUp>'>
>vN<y>sR?x
`L/WGF?
?bT ?T!?U$?
D?SsR>
s?WGF?
T>7P5Cx
5sN>xe/,I*?UP?07A
>UX>@_
UT?05>
oUlA>^
P?3q(>
CUl>'?
<y>sN?x5
LLsfvW
5sN>x-,I*?UP?07A
>UX>@_
UT?05>
GUlA>^
DW?vB~<
P?cp(>
c5sN>xb9J
>Ul@'IZ>
LLsf0uW
5sN>x,,I*?UP?07A
>UX>@_
UT?05>
gUlA>^
DW?vr|<
c5sN>x
>Ul@'yX>
5sN>x*,I*?UP?07A
kUlA>^
DW?v{<
cj5sN>x9^9J
>Ul@'W>
5sN>x%(,I*?UP?07A
cUlA>^
DW?vy<
cj5sN>xi\9J
>Ul@'U>
sfvWn
HK5CW>
)?/272
75KW>j5oL5Cx
D?S/N7R
(>UlA'
$3/!PUl>'MZ>w>W?vo< <
LLsfvW1
5sN>xU$,I*?UP?07A
>UX>@_
UT?05>
SUlA>^
P?#f(>
c5sN>xX9J
5sN>x",I*?UP?07A
KUlA>^
DW?v2s<
P?Se(>
cj5sN>xW9J
>Ul@'9O>
LLsfpuW
5sN>x!,I*?UP?07A
>UX>@_
UT?05>
WUlA>^
DW?vbq<
c5sN>xU9J
>Ul@'iM>
HK5CW>
)?/272
75KW>j5L5Cx7*
D?S/N7R
>75Ow>W?v
<yz=7"
W>vo<y>sN?x<
LLsfvW
,I*?UP?07A
>UX>@_
UT?05>
OUlA>^
DW?vn<
c5sN>x)Q9J
>Ul@'J>
,I*?UP?07A
[UlA>^
DW?vl<
cj5sN>xYO9J
>Ul@'H>
LLsfPuWA
5sN>xE
,I*?UP?07A
>UX>@_
UT?05>
_UlA>^
DW?vj<
c5sN>xM9J
>Ul@'F>
5ZxMs6>
45Cx7.
NDP55K
sUTA>^y=7"
?v~g<yf=JN
WUT?>^
?v`< <
tD Up?'aJ>
sR>xM<L7A
T>P5Cx97J
5+SsF?y
>vf<y>sR?x<
5Wn?ULU
d>I>W>
|h7JW>
CU4>'-?
$3/!PU4>'H>w
?v~\< <
>U8? 7A
gOXk@p
b?$5CxQ7
s&?x!s&>
?vZY< <
h5Cxe@,f!j
WUT>>^
$3/!UTB'
C>wC>x0
X5+(>UT@'I;>
B5Kx67ByL<
5+yA5KxM57ByL<
pSo'B>
5+yE@7
sjsW#$?v.=W
T?5P5Cx|7
`L/WCF?
cv2= <
?bT ?T!?U$?
$3Up@@
qKUp>X5CxE<
'G>WS<
5ZxQxs6>
5SK?5s6?x)7
s6?|$,"5
cUTBHf
45Cxx7
D?'I<>
Cv6?{@
8?H(L>UT@'!3>
L45CW>W?Ut
Cv?y><
3Z/!UTB'y8>w&>x
X5(>UT@'1>
s6?|$,"5
cUTBH~
45Cxs7
KUT?'
8?[4(T>v2R<
8?C(K>UT@'.>
5Zx1ps6>
5SK?5s6?x
s6?|$,"5
cUTBH~
45Cxp7
D?')4>
8?@(L>UT@'
5Zxams6>
5SK?5s6?x97
_UTA>^
45Cxm7
D?'I1>
Cv6?{@
8?=(<>UT@'!(>
K6!C6 L
OUTA>^
?5|l7O
45Cxi7
KUT?'9,>
!UT>#>
8?9(>UT@'
5Zxafs6>
5SK?5s6?x97
s6?|$,"5
cUTBH~
D?'Y*>
CvF?{@
8?6(L>UT@'1!>
45Cxc7
A<y=;#N
WUT?>^!
'uu?w>
8?2(>UT@'1
5Zx_s6>
5SK?5s6?xi{7
45Cx1_7
Cvv?{@
/(L>UT@'a
cxME59
'm>WS<
'=>WS<
cx=_/:
dP5CxX7F
5+SsR?
'}>yL/
cUp>')
u7WG>S<
u7WG?S<
hP5CxV7J
zo^O?/
cUp@']{>y
cUp>'>
T92Wn?Ul
s6>xVSs6>
Cvj?Yo
cxX7BU
3P5555[xW/>
5+S55sxT7zP7U
5+SsCx
P+Cgr
W[?UdQ
$5CxIL7
s&>xRs&?
'q>w>W
0h55Sx2s
s&?xq<
G555[x
''>yH<
KP555{xO/=
KP555{xN/=0
5+SsCx
/Y555CxEJ/=0
>Wc?vB=<
/Y555CxJ/=
GN.c5[
G[555SxuA7
c5zJ>4
5555sxIF/!
|X?7Wn?
@DsFP~
Gh55Sxx7
yK=<S7&
cv"=y>e>v55CW
>5[x"M>
5Cx]:u
5555{x@/
5555{x)@/!
cxQ"5*
Dh55Sx1
L45CW[?Utcf
cv^={9Ss6>
Z7v(55
(x>UT@>
5[xp9S
u/+Vc7
5g5AWS<
u/+Wc?
W~Z?UT
<5Cx57
cU4A'o>
W[?Udi
s&?|h55sf
D?Ss&>
cR7Vc1
c5AWS<
u/+Vc7
;c5AWS<
u/+Vc7
d5AWS<
u/+Vc7
d5AWS<
5[xl9S
u/+Vc7
5c5AWS<b5$
<5Cx17
cU4A'k>
W[?Ud/m
s&?|h55cb
D?Ss&>
cR7Vc1
_5AWS<
u/+Vc7
+_5AWS<
u/+Vc7
{`5AWS<
u/+Vc7
`5AWS<
W[?UtEp
5+Ss6?K>/'
qWUT><5Cx3<
W[?Utp
5+Ss6?N>/'
qWUT><5Cx3<
5+SsCx
sjFzW#u?v"<l
T?cP5Cx+7
hH5SxsR>
sjRzW#^u?vb<l
5+S<SsR?
hH5Sx!sR>
sj:zW#
cUp@'yc>
hH5SxasR>
sj@zW#w?v<l
T?kaP5Cx(7
hH5SxsR>
sjLzW#x?v"<l
5+S<SsR?
sj4zW#^x?vb<l
cUp@'9a>
hH5Sx!sR>
sjjzW#
T?K`P5Cx]&7
hH5SxasR>
sjvzW#z?v<l
5+S<SsR?
hH5SxsR>
sj^zW#{?v"<l
sjdzW#^{?vb<l
hH5Sx!sR>
sjpzW#
5+S<SsR?
hH5SxasR>
sjXzW#}?v<l
cUp@'^>
hH5SxsR>
sj{W#~?v"<l
cvb< <
'i>Up@
cx%[7J
b?SsR?
sj{W#P
qKUp?X7J
>Up>H5Cx&<
sj{W#?v<l
b?SsR?
hH5CxsR>
sj{W#?v
qKUp?X7J
>Up>H5Cx]#<
5nW#?vB<
sR?xI7J
F>Up>L5Cx
b?SsR?
hH5CxsR>
5nW#?v2<
sR?x97J
'E>Up>L5Cx9N
5+S<SsR?
hH5CxsR>
5nW#?v2<
sR?x97J
'D>Up>L5Cx9N
5+S<SsR?
hH5CxsR>
u778N#RTO%o`
?s?WW?
%l5f1ND
O>55ss
A>wf>x
pN!#$l
'c>U8? s&?
L?$5Cx
s&>xks&>
?wj> <
I>55Ss
5nW#N?vb}<W?
cUpB'+>
P!CTc@
|X?7Wn?
'`>T7@U0?
|ph|N#7
cUD>'>UD>'1>w
s&>xq44
9s?WO?
<yW<s&>x)
cv"={/
N#P5b`5
?7WO?U?5
@(u>v<y>/:
?s?Vy=sCx`ND7
55Cx!C7y
555CxE
WT@y-s?WO?U?
_ h7fW?
7WO?U?
092WNU?Utw
SU>s>WG?%
LN5Cxe
}?,)U?
//?UT>
PS/>7:
5*yI=5CW
[UT>>^
cUT@'!
D?S/>7:
s6>x[<
?s?y><
cI?5e>
cvm<W>
N#P5b`5
l/70y7o
>sCx-7y>,q
@U?s?WW?
hfy/=557
cvR<y==s?WO?U?(>
w0>x~%7O
>Wc?v<y;
d5Cx=5
?s?WS?U?
Ls?6?U?
UpBN5Cx7JWo?U?
Wc?UpA'q>
sR?x|7B
L?P5Cx/
>g@(>UpAH5Kx5Q<
?s?WS?U?
Ls?6?U?
UpBN5CxA7JWo?U?
Wc?UpA'1>
sR?xEz7B
L?P5Cx/
>g@(>UpAH5KxO<
5Cx$sR?
'A>Up>H5Cx
5Cx#sR?
>Up>H5CxM<
sjrW#?v2a<
5Cx-"sR?
>Up>H5Cx<
5Cxi1
>FlL9N
sR>xa<
sR>x]K<
n?ksjyr
'v6_<W
?T!?U$?
5CWC?/
sR?x}5sR?
sR?xmsR>
n?ksjAr
|WG?U$S
>UpB@7F
<5CWC?
cv"b<W
hN5Cx8Mc
xo=H7F
sR?x5176
?5SxE7
sR?x3Mc
sR>x!f7J
cUp?'u>Up>H5KxQ
sR>xAd9N
cUp?'>Up>H5Kx
cUp>'=>
'1>FlL9N
sR?x_sR>
oS/R7V
3Up@@h
D55Cx%
b?S/R7V
L5CWC?
$3Up@@
L5CWC?
T>5Cxu
5nW#?vRJ<
T>L5Cxe9N
5+S<S/R7V
cUp?'q>Up>H5KxM
5nW#?v2I<
T>sP5Cx
zoS/R7V
cUp?']>Up>H5Kx9
zoS/R7V
cUp>'12>
'1>FlL9N
sR>x!<
cUpA'}m>Up@D7F
b?S/R7V
sR?xUsR>
'vVD<W
cUpA'l>Up@D7F
sR?xUSsR>
?Z5Sx9N
t@ TUp?L/
cvH< <
5nW#V?vA<
cUp>')>
zoS/R7V
5nW#^?v?<
?v>1 J
>vE< <
qKUp?X5B
'>Up>D5Cx
qKUp?X5B
'>Up>D5Cx
5CxeEu
sj|{W#?v";<
5+S<S7R
T?GD5SW
sjr{W#.?v:<
CUpB'i>
5+S<S7R
cv>< <
sj{W#4?v7<
qKUp?X5B
'->Up>D5Cx
sj{W#?v7<
qKUp?X5B
'm>Up>D5Cx)
<P5$S<
TS7RFm
)[Fx7P
cvj7< <
>o <P5$S<
cvf<Yo
srx)sR>
qKUp?X5B
?Up>D5Cx-
srx)sR>
qKUp?X5B
?Up>D5Cx-
sj{W#N?v,<
cUpA'Y
D?S/R7V
>Up>@5Sx
>yjsR?
sj{W#?vR*<
D?S/R7V
>Up>@5Sxy
'>yjsR?
5CxuQu
5CxUQu
N#R5WW
N#R5WW
L>-+J?
Mt=5.>Fp
55SJ>7
#8>|h7.>
56>v7>
T=Jhk@
0>lh/+
>FP0if>
QI>56>v^;y#:/
56>v3>
g>+8>xu9f
cP56>v3>
GvZ<y<7>
?VOWS?U?
?VcVdV
?VOWS?U?
?VcVdV
}5[xeG
S5Cx|5[xG
N#R5up`W
?WO?U?
?W_?U?
?Wo?U?
?Y5"?b5&?Y5*?b5.?Y52?b56?Y5:?b5>?Y5B?b5F?Ys
N#R5~pWW
?WO?U?
?W_?U?
?Wo?U?
?b5"?Y5&?b5*?Y5.?b52?Y56?b5:?Y5>?b5B?Y5F?bs
5Cx5Cu
?N#P5l
cUpA'y>
oS/R7V
'>Up>@5Sx
cUpA')>
oS/R7V
'Y>Up>@5SxsR?
cx]7JuH555Sx9J
?N#P5l
cUpA'>
oS/R7V
'I>Up>@5Sx
cx7JH555Sx
cUpA'9>
oS/R7V
'>Up>@5SxusR?
L>-+:?
Mt=5.>Fp
55SJ>7
#8>|h7.>
56>vj#>
C7&>L>
#8>xE7
0>lh/+
cH?56>vT<
9fK>5C
=55SJ>7
T=;s(>
D?S76>
ET=h5Cl
'i+>w$>
N#R5W?
?VOVPVQWS?U?
?Wc?U?
?Ws?T?S<
N#R5W?
?VOVPVQWS?U?
?Wc?U?
?Ws?T?S<
L>-+:?
Mt=5.>Fp
55SJ>7
#8>|h7.>
C7&>L>
0>lh/+
cH?56>vJ<
9fK>5C
=55SJ>7
T={j(>
D?S76>
'">w$>
'!>y%9f
N#R5WO
?VOVPVQWS?U?
?Wc?U?
?Ws?T?S<
N#R5WO
?VOVPVQWS?U?
?Wc?U?
?Ws?T?S<
5Cx%)u
r\?/90CpW
|=y?P0
?#QFR0iv>
yr7BH?
cNLP5b>F[w[>
?#QFR0iv>
yr7BG?
cNLP5^>
k>HKp>
>P, N?
ND4EF@
SF@w> <
sjZ{W#
sjN{W#N
sR?x=#7J
hH5Sx1#sR>
sjT{W#
cUp@'>
sjH{W#
sR?x"7J
hH5Sx"sR>
sjl{W#n
cUp@'U>Up>L5CxQ!7J
sjf{W#!
cUp@'>Up>L5Cx 9N
sj`{W#
>Up>L5Cx 9N
hH5SxA
sj*{W#
>Up>L5Cx
sj${W#a
cUp@'U>Up>L5CxQ
cUp@'>Up>L5Cx
qKUp?X7J
'j>Up>H5CxY<
zoSsR?
sj{W#E
CksA?U
sR?xMr9N
qKUp?X7J
']g>Up>H5Cx
sj{W#?v<l
T?_P5Cx7
zoSsR?
sj{W#?v2<l
CYsA?U
cv<Wc>?UpB'
Wcr?UpA'q>
?Wcr?Up>'q>
sR?xe7F
sR>x!5:
=N0?w@>
o=g@(G>Up>'}O>w
>K?oLs
?y=7J~
'>T ?P15T!?$l
sVBxy7.
s6?|,7"
=Vy>5[H?5c
d7yj=<
L5Cx:9N
cv._;W
?T ?T!?U$?
sjKvW#U*?v<W
L5Cx89N
?T ?T!?U$?
N#R5W
N#R5W
N#R5W7
N#R5W7
x9C lhOb
cxA}7J?
h/S<CO~ND
jAQ|4B{Lb5$/+
cWc?vf
cxQsC?H:
5Cx555
cxsC?I:
SsC?xe15
L4sN$tW
cUT@'>
CUT>'>
gUT>>^
5Cx5[j
Ty?<P5$
5Cx- u
sj|W#65?
L?<P5CxIj7J
sR>xp<
sj(|W#6?
L?<P5Cxi7J
sR>x9o<
sR>x5<
sj|W#7?
L?<P5Cxi7J
sR>xyn<
sR>xu<
sj|W#v7?
L?<P5Cx
sR>xn<
sj|W#68?
L?<P5CxIg7J
sR>xm<
sj|W#9?
L?<P5Cxf7J
sR>x9l<
sR>x5<
sj|W#:?
L?<P5Cxf7J
sR>xyk<
sR>xu<
sjX|W#v:?
L?<P5Cx
sR>xk<
sj|W#6;?
L?<P5CxId7J
sR>xj<
sjH|W#<?
L?<P5Cxc7J
sR>x9i<
sR>x5<
sj8|W#=?
L?<P5Cxc7J
sR>xyh<
sR>xu<
|W#v=?
L?<P5Cx
sR>xh<
|W#6>?
L?<P5CxIa7J
sR>xg<
u/+Wcr?
u/+Wcr?
u/+Wcr?
u/+Wc?
u/+Wcr?
u/+Wcr?
u/+Wcr?
u/+Wcr?
u/+Wcr?
u/+Wcr?
u/+Wcr?
u/+Wcr?
u/+Wcr?
lxa7C,
5Zx\s6>
@NL (57
oUTA>^
cx! 7.
45Cx)\7.
cUTBV5Go*<
D?'1 >
KUT?'->
(=>vb;;
x'5>UT>,9f
0[,7AU<@
?Z5Sxm
45CxY7*
>s6?xM
W[?UtH
?55Cx=Z7*
yds6?N>/'
W[?UtI
'i>UTA
sVfhxS7
'0>UTApW
cUT>'>
<h55Sx9
,92W*X?Ut
\5Cx-Qs&?
G%(> W
8>c45Cx%P7*
s6?|(>UT@'
cUp>'M.>
b?P5CxO7F
T>aP5CxiN7F
sR?|Oy
T>@5Cx7F
7w2/= <
7w0= <
Cw/= <
Cw0= <
CwT= <
CwT= <
Cw*}= <
Cw"> <
Cw#> <
?>?>?@>?A>C@?>C@?>A+??>A+??>A+??>A+??>A+??>A+??>A+??>ED?
+??>C@
?A>?A>A+??>C@
?K???K???K???C?C?C?C?C?C?G??G??C?C?C?C?I??>???C?C?C?C?>?@>C@?>C@?>C@?>C@?>E@??>E@??>E@??>E@??>E@??>E@??>E@??>E@??>E@??>E@??>E@??>E@??>E@??>?@>C@?>?>EB?
?>C@?>C@?>C@?>C@?>C@?>C@?>C@?>C@?>C@?>C@?>C@?>C@?>C@?>C@?>C@?>C@?>C@?>C@?>C@?>C@?>C@?>C@?>C@?>C@?>C@?>C@?>C@?>C@?>C@?>?>?>?>E@+??A>?A>?C?>A+??A>A+??>C?+?>C?+?>E??
?A>?A>?C?C?C?M???>?A>??>A??>A+??>A+??>A+??>A+??>A+??>?>?@>?@>?@>?>CB+???A>?A>A+??>C@?>?>?A>?A>?A>?A>?A>?A>?A>?A>?A>C@
+?>IDD?
+??>EB+?
+?>IDD?
+??>GB@+??>GB@+??>MBB??
??C?>I?B+?
?>QBBBB+?
?>IFH+?
?>IFH+?
?>QBBBB+?
?>OD???
@>?@>?@>?@>?@>?@>?@>?>?>?>?>?@>?@>?@>?>?>?@>?@>?@>?@>?@>?@>?@>?@>?@>?@>?@>?@>?@>?@@>?A@>?@>A+??>A+??>A+??>A+??>A+??>A+??>A+??>A+??>A+??>A+??>A+??>A+??>A+??G??A>?A>?A>?A>?A>?A>??>G@D
+??I??>???E?>?A>?A>?A>?A>?A>K?@D
+??>K?@D
+??A>?>K?@D
+??>K?@D
+??E?>?@>?>A+?
?A>?>A+?
?A>?>A+?
?>?@>?@>?@>?@>???????????????????????????????????????@???????????????????????????????????????
???????>??>?>?@????>?>
?????O
??>????
????>?>????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????
?????????????????_$
GA@?_OGCA@?CA@C
??????
_OGCA@_GAC@@?
?E~_OGCA@?
$?????
????VCA_G?
?????????????
osw?$rv
h_??????????
?????W*C_
!WZV=M4>LXq3k
8+8To8(
Pc_~-a8Y
+??OuZ
*???V???.
?????;?>?@?@K?
??????C?
???????
???????
???????
???????
??????
???????
???????
??????
??????
??????
??????
??????
??????
???????
???????
????????
???????
??????
??????g
??????s
??????
??????C?
???????
?????w
???????
???????
??????
????????/
???????;
??????
??????
?????7
????????w
???????
????????????????????????????????????????????????????????#
??????
???m?SSSSSSSSSSSSSSSSSSSSSSSSm
{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{{
????????????????????????????????????????m
????C?@B?????]?@B?
???e???
????????
???G????
?_?????
??H@???
????????
????????
????? ?_??????
UB?J?????S?
BB?n?z?_?,"@B???A?H"@A
? ??W???
???E??????aB?U????
???KB????
?,??Q??????
??GA????
???L?????,?@?_??????Z??_? @B???_?`@B?? ?_?
O@B?C?
?_?0@A???_m
@B????m AB????m
?_CB????m
?????_
C@B????m
???B?BB???B?
BB???B?
BB???B?+BB???B?^wBB???B?
BB???B?
BB???B?
BB???B?.BB???B?aBB???B?
BB???B?
BB???B?BB???B?0[BB???B?f
???B?_BB???B?
BB???B?2/BB???B?du@B???A?u@A?????
???A?)u@A??@?
G?????@_?
@B???A?
@A??A?CH????
?A_?/{@B
???A?/{@A?w?0@?J??????0@_?O@B/???A?
O@A?W?@@?J??????@@_?uO@B/???A?O@A?7? @?J?????p? @_?S
@B/???A?
?A?~H????g?A_?eOz@Bf???A?Oz@A?E?pB?
M????y?pB_?W
@BO???A?
B?L??????
???A?Y@A??
A?BE????
???A?<
?B?sO?????B_?
/@B???A?!/@A??pA?Q?????pA_?
@A??0B?vR?????0B_??@Ba???A?
?@A?Q?pB?
[?????pB_?c
@BD???A?
?B?OQ????L?B_?+_@B???A?`_@A??B?
?B_?@B???A?*@A??
B?RP?????
@Bm???A?
@A?u?B?*\?????B_?@B;???A?@A?;?B?R????p?B_?O?@B???A??@A?
?B?R????:?B_?
o@B???A?No@A??
B?A????
???A?0@A??pB?K????
?pB_?@B
???A?4@A??@B?
???A?;
@A??PB?A????
@B1???A?3
@A??`B?J????
B@B???A?>B@A??4`B?Q@????
?4`B_?
B@B???A?(
B@A??t`B?Q@?????t`B_?
B@B???A?
B@A??`B?Q@?????`B_?A@B???A?A@A?y?
_B?I@?????
_B_?o@B
o@A?u?
B?A?????
@A??`A?
A?????`A_?
w@BL???A?#w@A??
_v@B???A?H_v@A??@A?H????6?@A_?;_u@B
???A?|_u@A?
?`A?u@????X?`A_?Q
|@B!???A?
?@???????
?P???????
??????????aB?
???????
???GA????
?x??gE????)?
??WB????7?0??B?????E?2A?H?????\?2A_??????n?2A?]??????2A_?o
@B???A?o
?UB?@????b?UB_?Z6@B???A?6@A?B?
TB?Y??????
6@B???A?
6@A?j?TB?T??????TB_?6@B???A?6@A??
0A?B?????
@B???A?d
@A??01A?lC?????01A_?
@B???A?
@A??2A?Y?????
@B???A?
@A?|?`0A?
F?????`0A_?
@B???A?
? .A?A????!? .A_?
@BL???A?
@A?v?&A?!K?????&A_?Z
???A?n
@A??0-A?A?????0-A_??
@B???A?
@A?*?NB?[T????h?NB_?PW0@B???A?W0@A?
?QB?H@????V?QB_?>3@BW???A?z3@A?
?QB?O@????>?QB_?$w6@B???A?`w6@A??+A?DO?????+A_?
@B???A?
Q?????
2A_?J@Bm???A?Z@A?? :A?
Q????? :A_?
"@B???A?
"@A??KA?
Q?????KA_?)@B=???A?
)@A?"?@7A?
Q????2?@7A_?
&@B]???A?&@A?X?0@A?H@????h?0@A_?")@B???A?2)@A??@@A?
Q?????@@A_?X"@B
???A?h"@A??GA?zA?????GA_?
@A??h@B?X@??????h@B_?*"@B
???A?k"@A??`B?Q@????
?`B_?cB@B???A?cB@A?N?@B?H@?????@B_?|
@B???A?
@A??.A?A????
?@???????
?P???????
??????????cB?????
m??P???GA????^?8??gE????l?
??WB????z?,??B??????0
A?H??????0
A_???????`
A?]??????`
@B???A?
@A?W?P??J?????m?P?_?-
C@@B???A?{
?^B?Y?????e?^B_?_
@@B???A?
@@A?=?^B?T??????^B_?
@@B???A?
@@A?]?0
A?B????m?0
@B???A?7
A?sC?????
@B???A?m
A?`??????
@B???A?
F?????
@B???A?}
@A?? >B?
? >B_?
;@Bm???A?G
;@A??YB?H@????
;@B???A?6
;@B???A?*
YB?H@?????
@B???A?
@A?W?A?K????{?A_?I
@Br???A?f
@A??0A?L?????0A_?
@Bc???A?
?A?K????2?A_?
@A?c?pA?
K????y?pA_?9
???A?R
@A??A?A?????A_?
?A?A????
@BU???A?
@A?K?PA?
L????]?PA_?
???A?Q
M?????
/@BU???A?
M????"?
@BU???A?
@A?K?0 A?
M????\?0 A_?
@BU???A?(
M?????
@BU???A?b
M?????
@B???A?
?@B???A?
?@A?3?
M????D?
@B.???A?:
@A??A?~A?????A_?
@B6???A?
A?L????i?
#@@B???A?w
?T_B?Q@????)?T_B_?
#A@B???A?
#A@A?g?`??J??????`?_?C
@B???A?]
?@???????
?P???????
??????????
dB?G????
????@??OB?????
??KB????
???a?????J???GA????a???K?????x?,??gE???????gE???????[F???????{H???????_C?????(??B??????@?J?????
?@_??????;?
@?T?????k?
_l@B???A?w
_l@A??0B?tA????7?0B_?#
@B???A?h
@A??@-B?Z@????B?@-B_?5
j@B???A?h
j@A??p@?Q?????
i@B???A?'
i@A?? -B?W@????? -B_?
@B???A?
7B?XA?????
@B???A?
@A?;?@?J?????m?@_?I
@B???A?|
2B?h@????G?
???A?l
@A??P5B?A????
?P5B_?
G#@B???A?
G#@A??
D?????
@BK???A?e
@A??A?
N?????A_?
@A??A?
k@A?y? A?U????? A_?
@B???A?
@A?O?`4B?#I?????`4B_?
@Bt???A?
@A?e?1B?N?????1B_?
@B???A?
_B?Q@????_?
A@B???A?9
A@A??_B?I@?????_B_?q
A@B???A?
A@A??@@?
???A?A
@A??0B?@????
?0B_?oj@B
oj@A?? 0B?A????? 0B_?
i@B???A?
?0@?J?????
Oj@B???A?
?@???????
?P???????
????????
???P??????
fB?????
???O?????
??@?????
??C?????
??C?????
?@@?I?????
?@@_??????
?hA?L?????
O@B???A?
?0@?I?????f
?0@_?)
@B???A?@
?@?p@????
@B???A?
?@PA?b@????G
?@PA_?7
2@B???A?~
? @?I?????&
@B???A?
?@?L?????m
@B???A?E
?@@?T?????
?@@_?}
@B???A?
?@?~A????
@B???A?
?0@?I?????H
O@B???A?
?@??????
@B???A?m
?@?qA????
?@B???A?
? @?i@????8
?P@??????
?P@_?M
@B???A?o
?@?qA????
@B???A?
?P??i@????t
?P?_??
???A?_
???O@????
@B???A?
?@?qA????n
/@B???A?`
?P@?i@????
?@?v?????y
@B???A?_
@BS???A?
?`@?@????H
@B ???A?&
@?A????
@B???A?
?NA?L?????e
?NA_?5
Z@B???A?E
?P|A?P@????
?P|A_?k
@B???A?
?@?U?????
?X@B???A?
?X@A?'
?zA?[J????:
Z@B???A?
? |A?f@????
? |A_?M
W@B???A?c
?pyA?e@????
?pyA_?
Oa@B???A?
K????#
?0qA_?
_@B;???A?
H????_
T@B???A?3
?YA?@????
O;@A?u
?`~A?uA????
?`~A_?C
???A?]
a@B???A?
?[A?)D????'
8@B???A?&
?$UB?pM????
?$UB_??b@B???A??b@A?C
D????~
?bA_?cR@B???A?|R@A?
?@aA?B????
?@aA_?
G@By???A?
A?@????
A_?CV@B???A?[V@A?
?dWB?N????
?dWB_?Ob@B???A?Ob@A?K
?fA?gG????a
?fA_?!
H@B???A?6
?cA?qA????
?cA_?qF@B???A?F@A?
?pXA?g@????
?pXA_?oJ@B???A?oJ@A?9
?@RA?B????J
?@RA_?
?SA?u@????
?SA_??H@B???A?TH@A?
?@XA?o@????
?@XA_?9@B
???A?9@A?
?NA?B????b
?NA_?u9@BW???A?9@A?
?p|A?j@????-
?p|A_?
???A?_/1@A?
?yA?j@????
_@B???A?
?xA?B????
?xA_?E_^@B
???A?a_^@A?
?wA?,H????
?wA_?@B???A?@A?
?{A?,H????,
?{A_?1@B
???A?11@A?
?yA?j@????
?yA_?O_@B???A?O_@A?9
?uA?A????R
???A?.[@A?
?0uA?n@????
?0uA_?qJ@B
???A?J@A?U
?jA?@????
?jA_??K@B
???A??K@A?W
?piA?@????
?piA_?J@B???A?J@A?S
? iA?@????
? iA_?
???A?M@A?
?pA?B????
Q@B???A?
?@yA?n@????
?@yA_?C
@B???A?
?SA?YA????6
5@BE???A?$
@?A????
???A?@A?
A????<
@B???A?)
?@??????
Z@B???A?
?iA?y@????
?iA_?o
M@B???A?
M@A??cA?
?cA_?
OG@B???A?
OG@A?O?
jA?'D?????
?@B???A?
?@A? ?QA?
?QA_?
_4@A?s ?ZA?jA???? ?ZA_?K
O=@Bj???A?c
O=@A?!?`UA?A????!?`UA_?
;@B???A?
;@A?-!?p\A?
D????C!?p\A_?
B@BW???A?
B@A?{!?@]A?jA????"?@]A_?S
/@@B???A?k
/@@A?"?`TA?<J????"?`TA_?
0@A?U"?NA?L?????{"?NA_?K
6@B???A?l
6@A?#?@TA?N?????#?@TA_?
6@B???A?
6@A?[#?
SA?B????#?
6@B???A?n
6@A?$?VA?|H????$?VA_?
/@B???A?
/@A?U$?
PA?I@????q$?
@B???A?Y
@?O?????%?
2@B???A?
2@A?5%?QA?b@????W%?QA_?#
???A??
_0@A?&?
@?M?????&?
@B???A?
?@???????
?P???????
????????
????????\fB?????
&???_F????!&?4??GA????9&?
??kI????f&?p??L?????~&?H??SC????'???KB????'?P??kI????'???K?????'???SC????
'?4??KB????''?4??N?????A'???KB????n'?<??a?????(???KB????(?|??d?????(???kI????,(?
??KB????](???e?????(?p?_??????)??_?g
O@A?)??_?
@A?")?P?_?
o@A?])??_?1
*?0?_?
@A?j*??_?D
O@A?+??_?
@A?+??_?r
@A?",??_?1
?@A?-?
@A?.?0?_?
_@A?/??_?
@A?0?@?_?Z
?P???????
????????
m??0?P??SC????0?
??SC????0?
?_??????
@A?=0?P?_?
@A?q0??_?9
???G???
?P???????
????????
m??1??_?r
@A?1?0?_?
1?`?_?
???!J???
?P???????
??????????
gB?O????
#m???A1??_??????1??_?C
???WM???
?P???????
????????
m???2????b
oCB?2?
o@B?????
?P??G????
??????$gB?\????
??E2????
CB?b2?`???!
@B?????9
?@B?3??_?h
AB?3??_m
AB????m
CB?????_I@B????m
???M???
?p???????
??????????dgB?L????
?-3???
N????a3?`??GA????4???h?????4?B?[A????4?B_??????04?B?[A????f4?B_?F
@B???A?|
@A?5?B?
H????E5?B_?6
@B???A?v
6?B??????c6?B_?n
@A?n7?@B?M?????8?@B_?
@B???A?
@A?V8?B??????9?B_?v
@B???A?
@A?:9?
B??????x9?
@B???A?
@A?$:?B?s?????^:?B_?B
@B???A?
;?PB?A????>;?PB_?
???A?T
@A?<? B?Y?????
<? B_?
O@B???A?;
O@A?=?@B?V?????=?@B_?
???A? 
@A?>?`B?A????>?`B_?
@B???A?
@A?>?@=B?
???????@=B_?!_
@A?@?B?I?????@?B_?"O
@B???A?"O
@A?~@?`@?J?????A?`@_?#?@B???A?#?@A?^A?B?I?????B?B_?$@B???A?$@A?FB? B?
@????B? B_?j%
@B???A?%
@A?2C?@B?t?????lC?@B_?P&
@B???A?&
D?B?_?????JD?B_?.&/
@B???A?i'/
@A?E?B?F?????.E?B_?
'/@B???A?Q(/@A?F?P@?J?????
F?P@_?(
@B???A?/(
@A?G?pB?]?????
G?pB_?
@B???A?g*
H?B?G?????MH?B_?4*?
@B???A?x+?
I?@?e@????DI?@_m
@B????m AB????m
CB?????_#I@B????m
BB???B?E,
BB???B?`,
BB???B?{,
BB???B?,BB???B?,
BB???B?,cBB???B?
,wBB???B?(,BB???B?E-BB???B?q-
@A?????-?
@A?!K??_?
@A?vK??_?N.
L??_?.o
@A?6L??_?.
@A?jL?
B?XA????M?
B_?//@B???A?//@A?HM??_m
???m AB????m
CB????m
GC@B?????_+I@B????m
BB???B?1/O
@A?????E0
@A?N??_?m0o
@A?N??_?0
N??_?0
@A?WN??_?.0O
@A?O??_m
???m AB????m
CB????m
BB?????_WJ@B
??~1BB???B?1BB???B?1GBB???B?1BB???B?1
BB???B?
1BB???B?81gBB???B?W2
BB???B?u2GBB???B?2WBB???B?2WBB???B?2gBB???B?2'BB???B?
2BB???B?
BB???B?:2KBB???B?U3WBB???B?p3BB???B?3BB???B?3BB???B?3BB???B?3_BB???B?
3BB???B? 3BB???B?@4wBB???B?\4BB???B?x4
BB???B?4BB???B?4/BB???B?4
@A?????4
@A?MR?P?_?
@A?R?A?cB????S?A_?g5
@B???A?5
A?cB????
t@B???A?5
t@A?eS?
A?cB????S?
@B???A?i6
B?cB????T?
@A?0T??_?
@A?sT?
?_?@7_
@A?U?P?_?
@A?U??_?7
@A?1U??_?7
@B???A?7
@A?U?`B?XA????V?`B_?v8s@B???A?8s@A?V?A?XA????
V?A_?8t@B???A?
8t@A?jV?
B?XA????V?
B_?X9t@B???A?v9t@A
????????
? ?????????hB?????
???W???OB????W?0
@A?.W?
@A?qW?
?_?J:o
@A?,X?
@A?VX?0
?_?":_
@A?Y?`
?_?y;@A?
?_?;@A?UY?
@A?}Y?p?_?A<
?_?q<@A
???O????
? ??O????
E?????dhB?X????
??Z???OB????Z???KB????
Z???W?????AZ???OB????jZ???KB????[?|??]?????[???OB????[???KB????
[???]?????7[???OB????[[???KB????
[? ??X?????\?`"?_?v>
#?_?>O
\?0&?_?>
@A?5\?p2?_?
>_@A?|\?#?_m
$_@Bd????m ?AB????m
CB????m
KC@B????m
BB?????_/K@B-????m
m??J??
@B?????}?
@B?]?P3?_??
@A?N]?4?_?1?
@A?^?5?_?@
@A?^?5?_?@
@A?8^?p5?_?
@A?_?6?_?_A?
@A?_?7?_?A
@A?+_?
6?_?A?
@A?m_?06?_m
@B????m ?AB????m
CB????m
@A????m
@B????m ?AB????m
CB????m
????????
?@????????? jB?Q@???
@8?_?????
?@8??V@???
????????
?@???????
??_???@?????`???@?????`?
??@?????
`???@?????3`?H??G?????P`?`??G?????n`?p??G?????a?x??G?????
a?@??G?????$a?X??G?????ma?P??G?????b?h??G?????b???G?????b???G?????jb?8??G?????b?0??G?????c???C?????c???C?????c???C?????3c?
??C?????{c???C?????d???C?????d???C?????)d???C?????Ed?
??C?????d?
??C?????e???C?????e???C?????
e???oJ????<e???KB????[e???S?????ze?8??_C????f?
??K?????f?@??GA????f?D??N?????f???cG????f???KB????
f???N?????*f???[E????Cf?d??KB????\f?8??M?????uf?P??OB????g???KB????g???R?????g?
??sK????g?p??_C????
g?|??U?????2g?H??GA????Lg?T??N?????fg???sK????g?P??_C????h?d??U?????h?p??[E????h???_C????h???N?????
??GA????4h???Q?????Qh?
??sK????yh?
??KB????i?<??\?????i?H??sK????i?
??KB????
i?\??\?????Ai?h??WD????i?
??KB????j???{?????
j???WD????]j? ??KB????k? ??{?????k? ??cG????
k?t??KB????/k?
??V?????Qk???{M????l?p??KB????l?H??y????? l?
??oJ????el?|??KB????m???y?????m?
??SC????5m???KB????{m?@??z?????n???SC????
n???KB????]n?|???????o???gH????o?
??_C????7o?
??z?????}o?,??GA????p?`??L?????p?`??gH????p???KB????Ip?
???????q?
??[E????q?h??KB????q???V?????q?H??kI???? q?<??KB????Cq?h??W?????fq???[E????q?H??KB????r???U?????r???
N????r???_C????
r???\??????`8?_??????Ar?
A?H????dr?
A_?1T?d@BM???A?TU?d@A?s?PA?H????
s?PA_?Ub@BM???A?0Ub@A?t?
A?H????t?
c@BM???A?V
c@A?St?p@?U?????t?p@_?_W@B???A?W@A?
u?@@?d?????8u?@@_?
W?@B???A?<W?@A?v?@?d?????v?@_?X_@B???A?X_@A?qv?`@?M?????w?`@_?yY@B???A?Y@A?!w?P@?R?????Ow?P@_?'Yj@BM???A?JZj@A?x?
A?H????x?
i@BM???A?Z
i@A?wx?A?H????y?A_?[?j@BM???A?[?j@A??y?PA?H????gy?PA_?9[?@B???A?j\?@A?z?0@?U?????
z?0@_?\
@B???A?
@A?{?@?d?????{?@_?]@B???A?]@A?K{?
@?d?????|{?
@_?W^/@B???A?^/@A?
|?@?R?????/|?@_?
^@B???A?5^@A?}?@
B?@????}?@
???A?_o
@A?Q}?
F????|}?
???A?|`
B_?`@B
B?@????
B_?aO@B
???A?aO@A?7
F????b
B_?7a/@B
???A?bb/@A?
?B?O????
?B_?b?@B
b?@A??
B?XA?????
@B???A?c
@A?!?0
B?bB????K?0
???A?Ld
B?O?????
@B???A?d?
@A?i?p
B?XA?????p
@B???A?e
?p7B?Y@????P?p7B_?Cf
@B???A?f
@A?!?A???????A_?g
@B???A?g
?8B?XA????&?8B_?
@B???A?bio
@A??8B?bB????@?8B_?3i
@B???A?|j
8B?Y@????Z?
8B_?Mk?@B???A?k?@A?S?@A???????@A_?l?
@B???A?
@A??p8B?XA?????p8B_?m
@B???A? m
+B_?no
@BD???A?no
H????O?)B_?-n
@BC???A?ao
@A??@*B?
H?????@*B_?o
@BE???A?o
@A?O?@W@?U?????y?@W@_?Mp
9@B???A?wp
9@A??X@?d?????
?X@_?p
:@B???A?
:@A?s?
X@?d??????
X@_?gq
@B???A?q
@A??B?@????"?B_?q
@B???A?
@A??B?E?????B_?{r
???A?r
?B?O????8?B_?
???A?0r?
@A??B?XA????
@B???A?s
@A?)?0B?bB????M?0B_?
@B???A?bt
!B?Y@????<?
!B_?-t
???A?u
@A?U?3@??????
?3@_?v
???A?Iw
?@2@??????q?@2@_?x
???A?x
@A??3@???????3@_?7y
???A?z
@A?_?2@??????
?2@_?{
???A?S|
?2@??????{?2@_?}_
@A??"B?XA????
?"B_?~
@B???A?<~
?@!B?bB????
?@!B_?
@B???A?N
@A??"B?Y@????(?"B_?
???A?s1@A?
?P@?{?????s?P@_?w2@B
2@A?w?@P@??????
?@P@_?
???A?/?3@A?
? O@?{?????/? O@_?3
1@B???A?
1@A?3?O@?{??????O@_?/'@B'???A?/'@A???@?
??@_?)3@B???A?3@A?7?@"B?XA????~?@"B_?o
@B???A?
@A?I?"B?bB?????"B_?o@BO???A?o@A?
?A?I????-?A_?/m@BN???A?0/m@A??
A?I?????
n@B}???A?n@A?g?
A?,K?????
A_?[O@B???A?O@A?
?@?X?????@?@_?
@B???A?U
?@?D?????
@B???A?
@A??@?v?????@@_?@B
???A?@A?A@ @??????m@ @_?C
???A?|
A?<K????!@
q@B???A?
q@A?w@A?LL????@A_?aO
???A?O
@A?@ B?@????@ B_?
@B???A?
@A?@PB?XA????@PB_?}?
@B???A?
@A?Y@p,B?Y@????@p,B_?g@B
???A?g@A?@
-B?XA????@
@B???A?#
@A?@-B?bB????@-B_?
@B???A?D
@A?@PB?Y@????6@PB_?3
@B???A?
@A?@B?XA????o@B_?i?
@B???A??
@A?U@,B?Y@????@,B_?o
@B???A?
@A?k@0X@?M?????@0X@_?d@B
???A?1d@A?@@??????i@@_?@@B
@_@??????E@_@_?k?e@B
?e@A?@P,B?XA????@P,B_?
@B???A?%
,B?bB????
@B???A?Fo
@A?@B?Y@????8@B_?5
@B???A?
B?XA????q@
@B???A?
@A?W@p$B?
H????s@p$B_?9
@B=???A?U
@A?@$B?
H????@$B_?
@B=???A?
U@?M?????e@
U@_?=7@B???A?n7@A?@U@??????
7@B???A?
7@A?m@'B?
I????@'B_?O
@B@???A?k
@A?@ %B?J????@ %B_??7@B???A?
?7@A?e@U@?Y@????@U@_?s
@B???A?
@ B?>L????4@ B_?
@B???A?)
@A?@PB?XA????@PB_?
@B???A?
@A?@A?XA????@@A_?
/s@B???A?,/s@A?@PA?bB????@PA_?O@B???A?O@A?!@B?>L????I@B_?
@B???A?@@A?@B?XA????@B_?O@B???A?
O@A?;@0
H????V@0
@B=???A?6
H????@
B_?@B@???A?@A?
@`@?M?????4@`@_?
???A?4O@A?@P@?M?????@P@_?
@B@???A?
I????8@ B_?
@BM???A?
@B?P????@B_?u@B???A?@A?
I????0@pB_?_
@BC???A? _
@A?@B?J????@B_?
???A?-@A?5@hKB?
B????h@hKB_?E.@B
???A?.@A?O@LB?
B????@LB_?
/@A?@(MB?
B????&@(MB_?1/@B
???A?/@A?=@MB?
B????@MB_?.@B
.@A?[@(BB?H????@(BB_?a%@BO???A?%@A?
@DB?H????A@DB_?
W)@BO???A?LW)@A?@(EB?H????%@(EB_?+
&@BO???A?
&@A?/@AB?H????g@AB_?IW,@BO???A?W,@A?Q@IB?H????@IB_?
#@BO???A?
#@A?m@(HB?H????@(HB_?
)@BO???A?.
)@A?@FB?H????
@B???A?_
@A?@:B?A????@:B_?
@B???A?
B?N`????@p
@B???A?
@A?g@_@?
@????@_@_?
@A?S@`J@?rO????@`J@_?
e@B???A?@e@A?@
9?_?/??A?M??_?
@B???A?
B?XA????@`
B_?@B???A?@A?&@
@?T????S@
@B'???A?[
@A?@PU@?D?????@PU@_?7@B???A?7@A?x@f@?
D????@f@_?$
R@A?~@
[@?t@????@
ON@BG???A?
ON@A?f@a@?|F????@a@_?
:@B???A?
:@A?J@Z@?C????@Z@_?
?A@B???A?>
?A@A?@KB?
g@B???A?^
@ B?bB????4@ B_?
???A?s
(@A?.@
D@?E????@
$@B,???A?
$@A?@A@?E????@@A@_?V
!@B&???A?
!@A?z@
B?D????@
3@B???A?
3@A?@PS@?|@????
@PS@_?
???A?w
5@A? @PT@?}@????}@PT@_?
6@A?@T@?v@????@T@_?
???A?K
?6@A?@R@?C????Q@R@_?X
?@B???A?
?@A?@`
@?a[????'@`
@B[???A?
@A?@@?
Y????!@@_?L
@Bv???A?
@A?@@?$Y????
?@Bw???A?
@????@ 4@_?
@A?@9@?L????A@9@_?\
@A?@@>@?@????@@>@_?
???A? @A?D@P=@?@????@P=@_?
???A?A
@>@?@????o
@5@?0A????)
@5@_?D
???A?x
F????!
8@B%???A?
@`U@_?
?:@B???A?
?:@A?0
@W@?N?????]
@W@_?4
@B ???A?g
@ A?;????T
@ A_?l
A?A????
/@B#???A?d
/@BC???A?
???A?1
@@?M?????
o@B???A?
@@?M?????
@B%???A?
F????h
@@_?F@B%???A?x@A?
F????%
@@_?@B???A?2@A?
@?N?????
@_??@B???A??@A?r
@@?M?????
@B???A?
F????b
@@_?@?@B%???A?t?@A?
F????&
o@B%???A?1o@A?
@0@?N?????
@0@_?@B???A?@A?r
@ @?k@????
@ @_?p@B???A?@A?
@@?k@????*
@@_?@B???A?
?`8??W???
????????
?@???????
?aB?C@?????4jB?
@(??oJ????
@:?_??????
/@A?f
@`>?_?)!@A?
@0@?_?K??A?
@?_???A?n
@?_?b@A?
????m ?AB????m
CB????m
SC@B????m
BB?????_
P@B????m
m??"@A?????
????????
?P???????
@A?_??????
$#@B????m ?AB????m
CB????m
A??AM???
????????
?P?????????nB?Q@???
@ B?_?????
? B??hB???
????????
?P???????
?`??[????
???$@A?????%@A?[
@D?_??_'@A?
E?_?'@A
????????
?P???????
@(??SC????2
@ E?_??????N
@@E?_?
????m ?AB????m
CB????m
BB????m
BB???B?W_BB???B?t_(@A?????o(@A?
@I?_?6,@A?
@`J?_?t?-@A?
@K?_?-@A?
@ K?_?-@A?O
@PL?_?
@PN?_?I1@A?
@P?_?2@A?
P?_?2@A?%
@pP?_?O3@A?e
@Q?_?03@A?S??_?v9??A?S??_?;8??A?
8??A?LS??_?8??A?S??_?8??A?T??_?[8??A?T??_?7??A
?F?????
????????
?`?????????nB?????
@??SC????
@0Q?_??????
@@Q?_?4@A?
@@S?_?6@A?Q
$3@B4?
???m ?AB????m
CB?????_P@B
$8@B????m ?AB????m
@???8@A?????L8@A?
W?_?:@A?/
@Y?_?_<@A?k
@Z?_?8=@A?
$8@Bq?
???m ?AB????m
CB????m
BB?????_oQ@B????m
?@A?????
?]??f???
????????
????????
?@??K??????oB?Q????
@0`?_?????
???P???
????????
@a?_??????@
????m AB????m
CB????m
=?@???~
C@A????m
$C@B????m AB????m
CB????m
C@A?????
?Pa??v???
????????
????????
???/????
????d@<B?
H???? @<B_?????? @=B?
H???? @=B_m
$G@B????m AB????m
CB????m
BB????m
$G@B????m AB????m
CB????m
$G@B????m AB????m
CB????m
$G@B????m AB????m
CB????m
e??WE???
???????
????????
m??& @0f?_?????
?0f??gB???
???????
????????
`f?_??????A @`f?_m
H@B????m AB????m
CB????m
$H@B????m AB????m
CB????m
H@A?????
?pf??E???
???????
???????
???d????
???| @
???AB? @g?_??????!@
?g??CP???
??C@???
??O????
?p???^
?h???????
? ???????
??A?????!@
J@B?????
!@ ???
AB?+!@0???
AB?C!@i?_m
$J@Bu????m
AB????m
CB????m
BBS?????
M@B?????
M@B?~!@l?_?D
oO@A?"@`m?_?l
/O@A?"@n?_?
_P@A?"@n?_?
"@n?_?
P@A?R"@
P@A?"@0n?_?P
oQ@A?#@Pp?_?
S@A?#@s?_?
V@A?+#@0u?_?
?k?????
?0???????
?@???????
?0v??l????
?0???????
?@????????W#@y?_?!
X@A?#@0x?_?V
Z@A?$@x?_?
Y@A?$@@w?_?
Y@A?/$@v?_m
????m
AB????m
CB?????
[@A????m
$[@Bc????m
AB????m
CB?????
o]@A????m
$o]@B????m
AB????m
CB?????
^@A????m
$^@B????m
AB????m
CB????m
$_@B????m
AB????m
CB?????
_@A????m
????m
AB????m
CB????m
?~??m
?~??m
$`@B????m
AB????m
CB????m
gDB????m
DB????m
3DB????m
$`@B????m
AB????m
CB????m
GDB????m
DB????m
DB????m
`@A????
b@A?m$@P?_?&
?~??rb???
?0???????
?@???????
BB?$@ ?_?????
$e@BR????m
AB????m
CB????m
BBZ????m
n@A????m
$n@B????m
AB????m
CB????m
n@A????
! ?_ @A
{@A?%@`?_?\
? ??????
?0???????
?@???????
? ??m
?@??m
?`??m
? ??m
?@??m
?`??m
?p??m
?0??m
@B????m
AB????m
CB????m
{DB????m
DB????m
KDB????m
@B????m
AB????m
CB????m
DB????m
DB????m
DB????m
?P??m
?p??m
?0??m
?P??m
?p??m
$o@B????m
AB????m
CB????m
SDB????m
7DB????m
DB????m
$o@B????m
AB????m
CB????m
/DB????m
DB????m
DB????m
????????
?0???????
?@???????
c??SB???
ct??C????
??C????
????????
?0???????
?@???????
??C????
??C????
ct??L????
$@B????m
AB????m
CB????m
DB????m
DB????m
DB????m
$@B????m
AB????m
CB????m
DB????m
DB????m
DB????m
@B????m
$@B????m
AB????m
CB????m
WC@B?????y
oBA?%@|???
BA?z%@??
DA?&@$???
BA?&@@???
BA?$&@???
BA?[&@???'
wDA?&@???U
BA?'@???
?AA? '@aB??
BA?I'@,???)
BA?(@???
BA?:(@
BA?)@ ???
BA?g)@???8
CAA?*@??%?
AA?*@@???
DA?x*@H???f
BA?+@???
?@A?6+@???
BA?W+@???
DA?+@???B
@A?,@`???
BA?5,@8???
BA?X,@???
BA?-@_??
C>A?-@???
?@A?#-@P???
BA?R-@
?AA?.@???Y
OBA?.@d???
?@A?.@???
.@4???
?@A?;.@???
?DA?l.@???3
DA?/@p???
GDA?/@ ??
_@A?8/@
DA?[/@???J
?BA?0@???
@A?0@0???
+BA?,0@
BA?j0@???4
AA?1@T???
AA?z1@???G
@A?2@P???v
2@t???
7BA?C2@???
BA?w2@H???6
/AA?3@???
?@A?$3@???
'BA?E3@
gBA?3@
BA?4@???u
BA?4@x???
[BA?M4@
OBA?5@??
BA?5@$???
sAA?O5@|???
CA?5@,???G
BA?6@???r
GBA?6@???
WDA?6@?_?
BA?B6@???
?BA?k6@(???3
DA?7@???n
_`@A?7@??
@A?7@???
@A?97@h???
BA?8@???
?@A?#8@
BA?F8@???
SDA?i8@p??
?>A?8@
sBA?9@???
#BA?9@???
9@0???
BA?O9@
BA?9@
/AA?:@???
>A?:@???
DA?4:@
BA?`:@
BA?;@???~
}C,<U=T
CCCCCCCCCCCCCC
AAAAAAAAAAAAAAAAAAAAA
AAAAAAAAA
AAAAAAAAAAAA
AAAAAA
CCCCCC
CCCCCC
??????????

Process Tree

0e28aa67299697df8f4ac65ac1b9328aeead8de84d0e140f8981d022cd271738.exe, PID: 3012, Parent PID: 2236

default registry file network process services synchronisation iexplore office pdf

wvcpo.exe, PID: 1260, Parent PID: 3012

default registry file network process services synchronisation iexplore office pdf

DNS

Name Response Post-Analysis Lookup
dns.msftncsi.com A 131.107.255.255 131.107.255.255
dns.msftncsi.com AAAA fd3e:4f5a:5b81::1 131.107.255.255

TCP

No TCP connections recorded.

UDP

Source Source Port Destination Destination Port
192.168.56.101 53179 224.0.0.252 5355
192.168.56.101 49642 224.0.0.252 5355
192.168.56.101 137 192.168.56.255 137
192.168.56.101 61714 114.114.114.114 53
192.168.56.101 56933 114.114.114.114 53
192.168.56.101 138 192.168.56.255 138

HTTP & HTTPS Requests

No HTTP requests performed.

ICMP traffic

No ICMP traffic performed.

IRC traffic

No IRC requests performed.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

Snort Alerts

No Snort Alerts

Name ac52c59a55354012_users .exe
Filepath C:\Users .exe
Size 595.4KB
Processes 1260 (wvcpo.exe)
Type PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
MD5 2b8c2ee1a786476c4c61069e1878dc74
SHA1 db6caf4b9a313d626c8412ea646dc57f3fabca64
SHA256 ac52c59a5535401248030a4f8ff18fbf3d8df1f1654b3fd49c7fa21e6fd4dc7f
CRC32 51EA9D66
ssdeep None
Yara None matched
VirusTotal Search for analysis
Name 26585cac475191dc_programdata .exe
Filepath C:\ProgramData .exe
Size 595.4KB
Processes 1260 (wvcpo.exe)
Type PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
MD5 1d0e9fa433db35c1d71a1d69beadd131
SHA1 44e763f47a3e0df0c7ebbd0c78898a24f552ae5a
SHA256 26585cac475191dca88e330849df9a177f36bd63805126a0d0ccbe00996322d6
CRC32 E3982086
ssdeep None
Yara None matched
VirusTotal Search for analysis
Name 5006d88a48aa6e5e_program files .exe
Filepath C:\Program Files .exe
Size 595.4KB
Processes 1260 (wvcpo.exe)
Type PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
MD5 1be68f7f71544a2cdae0d67b0f0ed4e6
SHA1 5da646812649187f8cf34d06734c7a2dffd710fa
SHA256 5006d88a48aa6e5e02958f2d39a452ef82d85cd58af5e7e6b729f144e9a17b51
CRC32 EB1AB087
ssdeep None
Yara None matched
VirusTotal Search for analysis
Name 054252b3973a4f7f_360downloads .exe
Filepath C:\360Downloads .exe
Size 595.4KB
Processes 1260 (wvcpo.exe)
Type PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
MD5 ac9054e5f54748c2d44e3d92ebfa884b
SHA1 7bca0e5decb7e2cc81798a8aa862295646f01fc2
SHA256 054252b3973a4f7fa398cef1282674e7f38fa1a31669cb914d2637ba6c3b945b
CRC32 1ADED781
ssdeep None
Yara None matched
VirusTotal Search for analysis
Name fde6180866fab2ef_windows .exe
Filepath C:\Windows .exe
Size 595.4KB
Processes 1260 (wvcpo.exe)
Type PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
MD5 2fdfd4af1d84889f568d26d14fd3ee93
SHA1 c5dc9239f5d9476058e24692c6a13a7b35a80bb0
SHA256 fde6180866fab2efb81d6401c590daaa94854fc14a83c33d7c185cd4264a27b4
CRC32 91D80C91
ssdeep None
Yara None matched
VirusTotal Search for analysis
Name c6bf2d32355b64d8_wvcpo.exe
Filepath C:\ProgramData\wvcpo.exe
Size 339.4KB
Processes 3012 (0e28aa67299697df8f4ac65ac1b9328aeead8de84d0e140f8981d022cd271738.exe)
Type PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
MD5 a3c65f0f315134acd9c5f176775b836e
SHA1 0e7c08e5716ec4ce2ef71f387ffa670c486cf0fb
SHA256 c6bf2d32355b64d8a38f02c826009d5de0d343a4257002ed8f24e9fca1be99a1
CRC32 D5D1E08F
ssdeep None
Yara None matched
VirusTotal Search for analysis
Name 753bfc3fb93c05aa_recovery .exe
Filepath C:\Recovery .exe
Size 595.4KB
Processes 1260 (wvcpo.exe)
Type PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
MD5 5a2b3168aa144b8d14cde4a6d4e689a5
SHA1 5dee5cc48459ac2164161a97e1416d35011ae764
SHA256 753bfc3fb93c05aaa058c6e2dc47e8c0a7a9c0550b15fa00f45bd914baf6ea97
CRC32 6E20E230
ssdeep None
Yara None matched
VirusTotal Search for analysis
Name 0257f1048ca51a43_install.exe .exe
Filepath C:\install.exe .exe
Size 595.4KB
Processes 1260 (wvcpo.exe)
Type PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
MD5 c6a6efdaeef73c7183d33dd697072995
SHA1 b3f200162662a4470dfb5c8745b574ac8f5b3093
SHA256 0257f1048ca51a433760fa84c105be41666d231d34e303b308ef6f2571e95907
CRC32 5A01EF0D
ssdeep None
Yara None matched
VirusTotal Search for analysis
Name e3b0c44298fc1c14_Miras
Size 0.0B
Type empty
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
CRC32 00000000
ssdeep None
Yara None matched
VirusTotal Search for analysis
Name 5da2e178bbc814fe_documents and settings .exe
Filepath C:\Documents and Settings .exe
Size 595.4KB
Processes 1260 (wvcpo.exe)
Type PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
MD5 1b88278ac66b8420e9f62c268b5bba3f
SHA1 25c53727474d6e292e679582d669930b31c1f559
SHA256 5da2e178bbc814fe2e2b8c907c2f4a12212d1a3328d170b6270ed996b9b3bf5d
CRC32 CE8A113D
ssdeep None
Yara None matched
VirusTotal Search for analysis
Name 618107b4ddbfc08a_program files (x86) .exe
Filepath C:\Program Files (x86) .exe
Size 595.4KB
Processes 1260 (wvcpo.exe)
Type PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
MD5 84e5f4ebd340f5ff02c1bf82cb59a8f9
SHA1 72b5dcf3fce0c4ab8ed7ff582600502162fc8694
SHA256 618107b4ddbfc08acb5dc6c332097748438dfbb5479658c942f3043e846829c7
CRC32 CC09D5C0
ssdeep None
Yara None matched
VirusTotal Search for analysis
Name 803d38cecba2a54a_perflogs .exe
Filepath C:\PerfLogs .exe
Size 595.4KB
Processes 1260 (wvcpo.exe)
Type PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
MD5 bc2afabdc313104b2190b16639fca32a
SHA1 8c2949914e239b03f238b7d40774e819d32be8c6
SHA256 803d38cecba2a54a3b1da58cc7765514bf6c3939dbcbd11443b7e669f12af86a
CRC32 CCD5A109
ssdeep None
Yara None matched
VirusTotal Search for analysis
Name efaed8490037a479_vqbgtigjo .exe
Filepath C:\vqbgtigjo .exe
Size 595.4KB
Processes 1260 (wvcpo.exe)
Type PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
MD5 9022c9115556080b7f9a57623304db65
SHA1 d46c33df2ee9674b45da4e2b33588877a0a1eaae
SHA256 efaed8490037a479abaa05c416944f1914f23497a285183e413dbe3f788c9ae1
CRC32 7A4F28C6
ssdeep None
Yara None matched
VirusTotal Search for analysis
Name 7bbfc49beb7cee08_eula.2052.txt .exe
Filepath C:\eula.2052.txt .exe
Size 595.4KB
Processes 1260 (wvcpo.exe)
Type PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
MD5 e8ab3671ac570cc12fc6b5967e76075a
SHA1 bec3e521039f3a6a825db0656292447bc5ec0078
SHA256 7bbfc49beb7cee0851655c5fd8a563eaaffa549e50f1593379901384a1ca2a85
CRC32 CC7D1DF5
ssdeep None
Yara None matched
VirusTotal Search for analysis
Name 6737d4915cdc157e_install.res.2052.dll .exe
Filepath C:\install.res.2052.dll .exe
Size 595.4KB
Processes 1260 (wvcpo.exe)
Type PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
MD5 235b8790b0c8c0b1601307b24c8b1c8f
SHA1 915279827022bcf6077291f9d7f27ca5742139d2
SHA256 6737d4915cdc157efe18ab3eb977477f88686ec42d4f435dcc68cacef42ff1ac
CRC32 444E4FD1
ssdeep None
Yara None matched
VirusTotal Search for analysis
Name 96264dae49e7b9d8_install.ini .exe
Filepath C:\install.ini .exe
Size 595.4KB
Processes 1260 (wvcpo.exe)
Type PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
MD5 facb6293b4edfd6d1d151cccbad8613e
SHA1 3025122f938981b9d9c95d239fd86c26f7c9cd6a
SHA256 96264dae49e7b9d8b914fd1a180303f42f11eef23e08d234649a0c07612063d3
CRC32 90F2F759
ssdeep None
Yara None matched
VirusTotal Search for analysis
Name 2339be54d5b0f30e_mira.h
Filepath C:\ProgramData\Saaaalamm\Mira.h
Size 256.0KB
Processes 3012 (0e28aa67299697df8f4ac65ac1b9328aeead8de84d0e140f8981d022cd271738.exe) 1260 (wvcpo.exe)
Type PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
MD5 d0c5153dd3179457a38cef5a926a9a90
SHA1 90e4827519e563ae67d1ffd74e202ef728c36496
SHA256 2339be54d5b0f30ed1294fbf4fdb87d8945fedad02f7bca1d44981b8d457a5ba
CRC32 9F872B63
ssdeep None
Yara None matched
VirusTotal Search for analysis
Name 9f1360b001ca30bd_python27 .exe
Filepath C:\Python27 .exe
Size 595.4KB
Processes 1260 (wvcpo.exe)
Type PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
MD5 498821275edeeea1ba182b0fa98637d6
SHA1 8433be2b14b0ed16a37486f22f71be7fdd0d7633
SHA256 9f1360b001ca30bd93609811d26477205d76cf01eaed93c7f3a4a7fde8e5a543
CRC32 51BB2C35
ssdeep None
Yara None matched
VirusTotal Search for analysis
Name 2aa9cb1877b5143b_globdata.ini .exe
Filepath C:\globdata.ini .exe
Size 595.4KB
Processes 1260 (wvcpo.exe)
Type PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
MD5 2473e7ad50d04f70fb98879f42338ba2
SHA1 ab7f347c7dcd34d23baa528c2502833431734cf0
SHA256 2aa9cb1877b5143bf21367245065d56d55c012b2ab4a12b0e7585de50c182d1e
CRC32 6D999E7E
ssdeep None
Yara None matched
VirusTotal Search for analysis
Name e5a62d75a02f58fb_vcredist.bmp .exe
Filepath C:\vcredist.bmp .exe
Size 595.4KB
Processes 1260 (wvcpo.exe)
Type PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
MD5 de79944ce8448d805d9b13a3f859a379
SHA1 acf4cc172a9220330fdbc34c7dc64fec9673b337
SHA256 e5a62d75a02f58fb247f76b24a8ab6fc811ee1d01b687f5f9046e60bfa6cede5
CRC32 3C28129E
ssdeep None
Yara None matched
VirusTotal Search for analysis
Name 82ec3ee277419a91_vc_red.msi .exe
Filepath C:\VC_RED.MSI .exe
Size 595.4KB
Processes 1260 (wvcpo.exe)
Type PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
MD5 90f72bd36c17b05cb1f413df732f102d
SHA1 cc5e2c621eff31e67d1b5e6e9af7bf7fc44e37e9
SHA256 82ec3ee277419a919d38fad5d0a68a9fa55acfb6dc443dd39e5bb0874cfb284c
CRC32 34FAEEA4
ssdeep None
Yara None matched
VirusTotal Search for analysis
Name 61792ac455f88fe2_pagefile.sys .exe
Filepath C:\pagefile.sys .exe
Size 595.4KB
Processes 1260 (wvcpo.exe)
Type PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
MD5 8e28a805025b4b962e9331f56e07af63
SHA1 d8119572367de55ff33972b2c4bbe8cb0718fa65
SHA256 61792ac455f88fe257f38d01b78d8643ee828103ff0cd539b1c524c42189b4af
CRC32 00136D13
ssdeep None
Yara None matched
VirusTotal Search for analysis
Name 42a3ae17bdb28926_vc_red.cab .exe
Filepath C:\VC_RED.cab .exe
Size 595.4KB
Processes 1260 (wvcpo.exe)
Type PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
MD5 20cccd34a50a8300637d5403465c87fb
SHA1 1f22e6803d6a865cc7921bc02e12013f5a5d3f03
SHA256 42a3ae17bdb28926ca2614981c36b50124e57fa3acb6ef72b24b3d1186859a09
CRC32 56690F0E
ssdeep None
Yara None matched
VirusTotal Search for analysis
Name b2d99edfd7146ec1_system volume information .exe
Filepath C:\System Volume Information .exe
Size 595.4KB
Processes 1260 (wvcpo.exe)
Type PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
MD5 c95e11952be731bcbc3f12fe34d60767
SHA1 d6c80fd79894415477b01b9e1edc6d1d7f1202bb
SHA256 b2d99edfd7146ec1ca11c0f9559c7a7204333d2799d7755ae3f38d29b0f1a346
CRC32 9315C899
ssdeep None
Yara None matched
VirusTotal Search for analysis
Name cd7a0311ac973961_$recycle.bin .exe
Filepath C:\$Recycle.Bin .exe
Size 595.4KB
Processes 1260 (wvcpo.exe) 3012 (0e28aa67299697df8f4ac65ac1b9328aeead8de84d0e140f8981d022cd271738.exe)
Type PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
MD5 30ef277b8bb868fb0030be3b19790752
SHA1 fb5048ff5e61504d1619cd486fb6e26495f30dc4
SHA256 cd7a0311ac97396138cfb80879e3d3bea4a0efe9497d8d7e696463e571ed5ae5
CRC32 CAC385B0
ssdeep None
Yara None matched
VirusTotal Search for analysis
Name 8de313daf5b85df5_gcoxh .exe
Filepath C:\gcoxh .exe
Size 595.4KB
Processes 1260 (wvcpo.exe)
Type PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
MD5 aca3da644ddb71c759f2aebaf95ddefe
SHA1 e693463583f0c047093513d89cef0975d857e676
SHA256 8de313daf5b85df5982e002fdc607b75d41ed2f84b20a16a22b76196f0853039
CRC32 8262944D
ssdeep None
Yara None matched
VirusTotal Search for analysis
Sorry! No dropped buffers.