1.1
低危
DACN
0.12
FACILE
1.00
IMCLNet
0.74
MFGraph
0.00
反病毒引擎
| 查杀引擎 | 查杀结果 | 查杀时间 | 查杀版本 |
|---|---|---|---|
| Alibaba | None | 20190527 | 0.3.0.5 |
| Baidu | Win32.Trojan.Otfrem.b | 20190318 | 1.0.0.2 |
| CrowdStrike | win/malicious_confidence_100% (W) | 20190702 | 1.0 |
| Kingsoft | None | 20200123 | 2013.8.14.323 |
| McAfee | Generic VB.b | 20200123 | 6.0.6.653 |
| Tencent | Trojan.Win32.FakeFolder.pb | 20200123 | 1.0.0.1 |
静态指标
动态指标
该二进制文件可能包含加密或压缩数据，表明使用了打包工具
(1 个事件)
| section | {'name': '.rsrc', 'virtual_address': '0x00023000', 'virtual_size': '0x00002000', 'size_of_data': '0x00002000', 'entropy': 7.6431626111010775} | entropy | 7.6431626111010775 | description | 发现高熵的节 | |||||||||
网络通信
与未执行 DNS 查询的主机进行通信
(1 个事件)
| host | 114.114.114.114 | |||
文件已被 VirusTotal 上 57 个反病毒引擎识别为恶意
(50 out of 57 个事件)
| ALYac | Trojan.GenericKD.31921398 |
| APEX | Malicious |
| AVG | Win32:Malware-gen |
| Acronis | suspicious |
| Ad-Aware | Trojan.GenericKD.31921398 |
| AhnLab-V3 | Trojan/Win32.Lunam.R261674 |
| Antiy-AVL | Trojan/Win32.Lunam.a |
| Arcabit | Trojan.Generic.D1E714F6 |
| Avira | TR/Patched.Ren.Gen |
| Baidu | Win32.Trojan.Otfrem.b |
| BitDefender | Trojan.GenericKD.31921398 |
| CMC | Trojan.Win32.Lunam!O |
| ClamAV | Win.Malware.Lunam-6749633-0 |
| Comodo | TrojWare.Win32.Spy.Agent.1396070@1qn3u3 |
| CrowdStrike | win/malicious_confidence_100% (W) |
| Cybereason | malicious.7c8c63 |
| Cylance | Unsafe |
| Cyren | W32/Trojan.NEIG-3448 |
| DrWeb | Trojan.PWS.Banker1.30100 |
| ESET-NOD32 | Win32/Otfrem.A |
| Emsisoft | Trojan.GenericKD.31921398 (B) |
| Endgame | malicious (high confidence) |
| F-Prot | W32/Trojan3.ANVL |
| F-Secure | Trojan.TR/Patched.Ren.Gen |
| FireEye | Generic.mg.c9a32187c8c632d4 |
| Fortinet | W32/Lunam.A!tr |
| GData | Trojan.GenericKD.31921398 |
| Ikarus | Trojan.Win32.Agent |
| Invincea | heuristic |
| Jiangmin | Trojan/Lunam.b |
| K7AntiVirus | Trojan ( 0054dc901 ) |
| K7GW | Trojan ( 0029f2001 ) |
| Kaspersky | Trojan.Win32.Lunam.a |
| MAX | malware (ai score=89) |
| Malwarebytes | Trojan.Dropper.VB |
| MaxSecure | Win.MxResIcn.Heur.Gen |
| McAfee | Generic VB.b |
| McAfee-GW-Edition | BehavesLike.Win32.Swisyn.fh |
| MicroWorld-eScan | Trojan.GenericKD.31921398 |
| Microsoft | Trojan:Win32/Lunam |
| NANO-Antivirus | Trojan.Win32.VB.mjwir |
| Panda | Trj/Lunam.A |
| Qihoo-360 | Worm.Win32.FakeFolder.CU |
| Rising | Trojan.Lunam!1.B819 (CLASSIC) |
| SUPERAntiSpyware | Trojan.Agent/Gen-Lunam |
| Sangfor | Malware |
| SentinelOne | DFI - Malicious PE |
| Sophos | Mal/SillyFDC-K |
| Symantec | W32.SillyFDC.BCR |
| Tencent | Trojan.Win32.FakeFolder.pb |
二进制图像
288x288
224x224
192x192
160x160
128x128
96x96
64x64
32x32
运行截图
暂无运行截图
该样本运行过程中未生成截图
PE Compile Time
2008-11-16 11:29:47
PE Imphash
6d5d84d2f024a2d1307b9d8c6b474103
Sections
| Name | Virtual Address | Virtual Size | Size of Raw Data | Entropy |
|---|---|---|---|---|
| .text | 0x00001000 | 0x00022000 | 0x00022000 | 5.08219649803148 |
| .rsrc | 0x00023000 | 0x00002000 | 0x00002000 | 7.6431626111010775 |
Resources
| Name | Offset | Size | Language | Sub-language | File type |
|---|---|---|---|---|---|
| RT_ICON | 0x00022308 | 0x00000468 | LANG_NEUTRAL | SUBLANG_NEUTRAL | None |
| RT_ICON | 0x00022308 | 0x00000468 | LANG_NEUTRAL | SUBLANG_NEUTRAL | None |
| RT_ICON | 0x00022308 | 0x00000468 | LANG_NEUTRAL | SUBLANG_NEUTRAL | None |
| RT_ICON | 0x00022308 | 0x00000468 | LANG_NEUTRAL | SUBLANG_NEUTRAL | None |
| RT_ICON | 0x00022308 | 0x00000468 | LANG_NEUTRAL | SUBLANG_NEUTRAL | None |
| RT_ICON | 0x00022308 | 0x00000468 | LANG_NEUTRAL | SUBLANG_NEUTRAL | None |
| RT_GROUP_ICON | 0x00022770 | 0x0000005a | LANG_NEUTRAL | SUBLANG_NEUTRAL | None |
| RT_VERSION | 0x000227d0 | 0x00000264 | LANG_ENGLISH | SUBLANG_ENGLISH_US | None |
Imports
Library MSVBVM60.DLL:
• 0x401000 __vbaVarSub
• 0x401004 _CIcos
• 0x401008 _adj_fptan
• 0x40100c __vbaVarMove
• 0x401010 __vbaFreeVar
• 0x401014 __vbaLenBstr
• 0x401018 __vbaStrVarMove
• 0x40101c __vbaPut3
• 0x401020 __vbaFreeVarList
• 0x401024 __vbaEnd
• 0x401028 _adj_fdiv_m64
• 0x40102c __vbaNextEachVar
• 0x401030 __vbaFreeObjList
• 0x401034 None
• 0x401038 _adj_fprem1
• 0x40103c __vbaStrCat
• 0x401040 __vbaVarCmpNe
• 0x401044 __vbaSetSystemError
• 0x401048 __vbaHresultCheckObj
• 0x40104c _adj_fdiv_m32
• 0x401050 __vbaVarForInit
• 0x401054 None
• 0x401058 __vbaOnError
• 0x40105c __vbaObjSet
• 0x401060 _adj_fdiv_m16i
• 0x401064 __vbaObjSetAddref
• 0x401068 _adj_fdivr_m16i
• 0x40106c None
• 0x401070 None
• 0x401074 __vbaVargVar
• 0x401078 __vbaBoolVarNull
• 0x40107c _CIsin
• 0x401080 None
• 0x401084 __vbaVarZero
• 0x401088 None
• 0x40108c __vbaChkstk
• 0x401090 __vbaFileClose
• 0x401094 None
• 0x401098 EVENT_SINK_AddRef
• 0x40109c None
• 0x4010a0 __vbaGet3
• 0x4010a4 __vbaStrCmp
• 0x4010a8 __vbaVarTstEq
• 0x4010ac __vbaI2I4
• 0x4010b0 __vbaObjVar
• 0x4010b4 DllFunctionCall
• 0x4010b8 __vbaVarOr
• 0x4010bc _adj_fpatan
• 0x4010c0 __vbaR4Var
• 0x4010c4 __vbaLateIdCallLd
• 0x4010c8 EVENT_SINK_Release
• 0x4010cc None
• 0x4010d0 _CIsqrt
• 0x4010d4 __vbaVarAnd
• 0x4010d8 EVENT_SINK_QueryInterface
• 0x4010dc __vbaExceptHandler
• 0x4010e0 __vbaPrintFile
• 0x4010e4 __vbaStrToUnicode
• 0x4010e8 _adj_fprem
• 0x4010ec _adj_fdivr_m64
• 0x4010f0 None
• 0x4010f4 None
• 0x4010f8 __vbaFPException
• 0x4010fc __vbaInStrVar
• 0x401100 __vbaStrVarVal
• 0x401104 __vbaVarCat
• 0x401108 None
• 0x40110c _CIlog
• 0x401110 __vbaErrorOverflow
• 0x401114 __vbaFileOpen
• 0x401118 None
• 0x40111c __vbaVarLateMemCallLdRf
• 0x401120 __vbaNew2
• 0x401124 _adj_fdiv_m32i
• 0x401128 _adj_fdivr_m32i
• 0x40112c __vbaStrCopy
• 0x401130 __vbaFreeStrList
• 0x401134 _adj_fdivr_m32
• 0x401138 _adj_fdiv_r
• 0x40113c None
• 0x401140 __vbaVarSetVar
• 0x401144 __vbaI4Var
• 0x401148 __vbaVarCmpEq
• 0x40114c __vbaLateMemCall
• 0x401150 __vbaVarAdd
• 0x401154 __vbaVarDup
• 0x401158 __vbaStrToAnsi
• 0x40115c None
• 0x401160 __vbaFpI4
• 0x401164 __vbaVarLateMemCallLd
• 0x401168 None
• 0x40116c _CIatan
• 0x401170 __vbaStrMove
• 0x401174 __vbaStrVarCopy
• 0x401178 __vbaForEachVar
• 0x40117c _allmul
• 0x401180 _CItan
• 0x401184 None
• 0x401188 __vbaAryUnlock
• 0x40118c __vbaVarForNext
• 0x401190 _CIexp
• 0x401194 __vbaFreeStr
• 0x401198 __vbaFreeObj
• 0x40119c None
L!This program cannot be run in DOS mode.
PEC2^O
ProjShell32
Using shell32.dll functions
irOu@EEf9
TmrDestroy
TmrPayload
Command3
Command3
Command2
Command2
Command1
Command1
VB5! *
Shell32Functions
Using Shell32.dll
ProjShell32
!fOfOfOzC0@
G:7$C3
ProjShell32
Module1
FormShowDos
Module2
modComputerName
rOu@EEf9
EABHf{KeE
+3qC:\Program Files\Microsoft Visual Studio\VB98\VB6.OLB
TmrPayload
VBA6.DLL
Command1
Command2
Command3
TmrDestroy
user32
GetForegroundWindow
SetWindowTextA
GetWindowTextA
kernel32
lstrcpyA
SetWindowPos
FindWindowA
PostMessageA
Gadis_Noya
Gadis_A_Noya
Gadis_B_Noya
Gadis_C_Noya
Gadis_D_Noya
Gadis_E_Noya
Gadis_F_Noya
Gadis_G_Noya
Gadis_H_Noya
Gadis_I_Noya
+3q"=h
+3qyO3f
GetComputerNameA
[,JAF'
e/<C@[d
d,qJ`mN3f
Picture1
BitBlt
GetDesktopWindow
ReleaseDC
__vbaVarTstEq
__vbaStrCmp
__vbaStrToUnicode
__vbaStrToAnsi
__vbaSetSystemError
__vbaStrVarMove
__vbaVarCmpNe
__vbaVarAnd
__vbaBoolVarNull
__vbaLateIdCallLd
__vbaEnd
__vbaVarSub
__vbaVarForNext
__vbaVarAdd
__vbaVarDup
__vbaI4Var
__vbaStrMove
__vbaVarMove
__vbaLenBstr
__vbaVarForInit
__vbaVarLateMemCallLd
__vbaObjVar
__vbaVarSetVar
__vbaFreeVar
__vbaFreeVarList
__vbaFreeObjList
__vbaFreeStrList
__vbaVarCat
__vbaStrVarVal
__vbaObjSet
__vbaFreeObj
__vbaFreeStr
__vbaStrCat
__vbaNew2
__vbaObjSetAddref
__vbaHresultCheckObj
__vbaOnError
__vbaPrintFile
__vbaR4Var
__vbaVarCmpEq
__vbaVarOr
__vbaVarZero
__vbaAryUnlock
__vbaNextEachVar
__vbaFileClose
__vbaVarLateMemCallLdRf
__vbaForEachVar
__vbaVargVar
__vbaErrorOverflow
__vbaPut3
__vbaGet3
__vbaFileOpen
__vbaFpI4
__vbaI2I4
__vbaLateMemCall
__vbaStrVarCopy
__vbaInStrVar
__vbaStrCopy
[,JAF'
FormShowDos
Courier NewD
Picture1
MS Sans Serif;
Using shell32.dll functions
}SVWeE
} jXh0@
}#j(hp5@
}#j,h5@
}#j(h5@
}#j,h5@
}#j$h5@
}#jTh5@
}#jHh5@
}#j h5@
MQ8REP
MQUREPMQUREPMQURj
$EPMQj
HRXPhQxREPMQURj
rMQUREPMQUREPMQURj
$EPMQj
HRXPhQxREPMQURj
4SVWeE
F4~43;
j0hp5@
}#jPh6@
PtQREP
QTRdPMQ
TPdQUR
R4PDQUR
4QDREP
}#jhh6@
}#j|h6@
}#jXh6@
}#jXh6@
TRdPQRj
}#j4hp5@
4RDPTQdRtPQRj
4PDQTRdPtQRPQRPj
SVWeE8
uuuuuuutdTD4$
<D4R$PQ
TdRtPQj
UDtRPQ
EMPtQR
U|ttLPDj
=EMPQj
TdRtPQj
SVWeEH
uuuu|ld\XTD4$
RPQRMPQ
$4RDPQj
E|PDQR
PQRPUQR
4MPQPD$RP
$4PDQRj
MUQDRP
FX\PQj
$4RDPQj
SVWeEX
uuuu|td\XTD4$
RPQRMPQ
$4RDPQj
EdPDQR
PQRPUQR
4MPQPD$RP
$4PDQRj
MUQDRP
FX\PQj
$4RDPQj
SVWeEh
uuuu|td\XTD4$
RPQRMPQ
$4RDPQj
EdPDQR
PQRPUQR
4MPQPD$RP
$4PDQRj
MUQDRP
FX\PQj
$4RDPQj
SVWeEx
uuuu|td\XTD4$
RPQRMPQ
$4RDPQj
EdPDQR
PQRPUQR
4MPQPD$RP
$4PDQRj
MUQDRP
FX\PQj
$4RDPQj
uuuu|td\XTD4$
RPQRMPQ
$4RDPQj
EdPDQR
PQRPUQR
4MPQPD$RP
$4PDQRj
MUQDRP
FX\PQj
$4RDPQj
uuuu|td\XTD4$
RPQRMPQ
$4RDPQj
EdPDQR
PQRPUQR
4MPQPD$RP
$4PDQRj
MUQDRP
FX\PQj
$4RDPQj
uuuu|td\XTD4$
RPQRMPQ
$4RDPQj
EdPDQR
PQRPUQR
4MPQPD$RP
$4PDQRj
MUQDRP
FX\PQj
$4RDPQj
uuuu|td\XTD4$
RPQRMPQ
$4RDPQj
EdPDQR
PQRPUQR
4MPQPD$RP
$4PDQRj
MUQDRP
FX\PQj
$4RDPQj
uuuuuuutdTD4$
<D4R$PQ
TdRtPQj
UDtRPQ
EMPtQR
U|ttLPDj
EPhh8@
=EMPQj
TdRtPQj
\SVWeE
} jPh6@
}#jXh6@
UREPMQUREPj
MQUREPMQURj
XSVWeE(
UREPQRPQ
Q(R8Pj
}#jPh6@
}#jXh6@
PQTR\PXQ`Rj
R(P8Qj
}#jPh6@
}#jXh6@
PRTP\QXR`Pj
Q(R8Pj
}#jPh6@
}#jXh6@
PQTR\PXQ`Rj
R(P8Qj
}#jPh6@
}#jXh6@
PRTP\QXR`Pj
Q(R8Pj
}#jPh6@
}#jXh6@
PQTR\PXQ`Rj
R(P8Qj
}#jPh6@
}#jXh6@
PRTP\QXR`Pj
Q(R8Pj
}#jPh6@
}#jXh6@
PQTR\PXQ`Rj
R(P8Qj
}#jPh6@
}#jXh6@
PRTP\QXR`Pj
Q(R8Pj
}#jPh6@
}#jXh6@
PQTR\PXQ`Rj
R(P8Qj
}#jPh6@
}#jXh6@
PRTP\QXR`Pj
Q(R8Pj
}#jPh6@
}#jXh6@
PQTR\PXQ`Rj
R(P8Qj
}#jPh6@
}#jXh6@
PRTP\QXR`Pj
Q(R8Pj
}#jPh6@
}#jXh6@
PQTR\PXQ`Rj
R(P8Qj
}#jPh6@
}#jXh6@
PRTP\QXR`Pj
Q(R8Pj
}#jPh6@
}#jXh6@
PQTR\PXQ`Rj
R(P8Qj
}#jPh6@
}#jXh6@
PRTP\QXR`Pj
MQRPQR
EPMQRPQR
URPQRP
PRTPXQ\R`Pj
Q(R8Pj
xREPMQpRlPtQ
PUREPMQj
UREPpQlRtP
PQRdPtQUR
dQtREP
QRPDQTREP
DRTPMQ
RPQ$R4PMQ
$P4QUR
QRPQREP
PR@P,Q
RPQRPMQ
PPpQ,R
PQRPQUR
pQUR,P
QRPQREP
RPQdRtPMQ
dPtQUR
PQRDPTQUR
DQTREP
QRP$Q4REP
$R4PMQ
PQRPQUR
QRPQREP
URpP,Q
QRPQRP
P$Q4RDPTQdRtPQRPQRPQR
Q$R4PDQTRdPtQj
_^[]QVt$
Vt&PX}
_fFX3^Y
EEEE|l\EPVE
QR|UF8QRPE
E\Pl^HQRSE
L|UQF8RP
\lR|PUQRj
}}}}thdTD4$
QP3f h
f9tY9=A
jPhtA@
jPhtA@
jPhtA@
jDhdA@
&dhQRj
mSVWeE
PxQhR0P@QUR
0Q@REP
RxPhQR
PxQhRPQUR
QxRhPQREP
RxPhQRPMQ
PxQhRpPQUR
QxRhPPQ`REP
PR`PMQ
RxPhQ0R@PMQ
0P@QUR
Q R0P@QPR`PpQRPQRPQRP
R P0Q@Rj
tSVWeE
MEPUQRE
;tvUEVPUE
UQREVPE
EMPUQRj
EEEE|l\L<,
xhXH8($
xhXHD4$
tdTD4$
PQRPUQR
$MPQP4
$P4QRj
QRPQERP
$UQRP4
$Q4RPj
RPQRMPQ
$R4PQj
PQdRtPUQR
$MPQP4
$P4QRj
dtQERP
QRDPTQERP
$UQRP4
$Q4RPj
hHR4PQ
DTRMPQ
RP$Q4RMPQ
$R4PQj
$4PUQR
<h4P$QR
$R4PQj
$UQRP4
$Q4RPj
RPQRMPQ
$R4PQj
PQRPUQR
$MPQP4
$P4QRj
QRPQERP
$UQRP4
$Q4RPj
x|R4PQ
RPQRMPQ
$R4PQj
8MP4QR
PQdRtPUQR
$MPQP4
$P4QRj
dtQERP
QRDPTQERP
$UQRP4
$Q4RPj
DTRMPQ
RP$Q4RMPQ
$R4PQj
$4PUQR
$MPQP4
$P4QRj
QRPQERP
$UQRP4
$Q4RPj
<PSh@@
(QSh@@
xRSh@@
8PSh@@
HEPSh@@
URSh@@
$P4QRj
R$P4QDRTPdQtRPQRPQRPQ
P$Q4RDPTQdRtPQRPQRPQj
MSVBVM60.DLL
__vbaVarSub
_CIcos
_adj_fptan
__vbaVarMove
__vbaFreeVar
__vbaLenBstr
__vbaStrVarMove
__vbaPut3
__vbaFreeVarList
__vbaEnd
_adj_fdiv_m64
__vbaNextEachVar
__vbaFreeObjList
_adj_fprem1
__vbaStrCat
__vbaVarCmpNe
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaVarForInit
__vbaOnError
__vbaObjSet
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
__vbaVargVar
__vbaBoolVarNull
_CIsin
__vbaVarZero
__vbaChkstk
__vbaFileClose
EVENT_SINK_AddRef
__vbaGet3
__vbaStrCmp
__vbaVarTstEq
__vbaI2I4
__vbaObjVar
DllFunctionCall
__vbaVarOr
_adj_fpatan
__vbaR4Var
__vbaLateIdCallLd
EVENT_SINK_Release
_CIsqrt
__vbaVarAnd
EVENT_SINK_QueryInterface
__vbaExceptHandler
__vbaPrintFile
__vbaStrToUnicode
_adj_fprem
_adj_fdivr_m64
__vbaFPException
__vbaInStrVar
__vbaStrVarVal
__vbaVarCat
_CIlog
__vbaErrorOverflow
__vbaFileOpen
__vbaVarLateMemCallLdRf
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
__vbaVarSetVar
__vbaI4Var
__vbaVarCmpEq
__vbaLateMemCall
__vbaVarAdd
__vbaVarDup
__vbaStrToAnsi
__vbaFpI4
__vbaVarLateMemCallLd
_CIatan
__vbaStrMove
__vbaStrVarCopy
__vbaForEachVar
_allmul
_CItan
__vbaAryUnlock
__vbaVarForNext
_CIexp
__vbaFreeStr
__vbaFreeObj
i>A4-$
fCtS5-'
ECyU80,
{jA4-$
EK-2P|
qL7-2\$
rQG--?YY!
rQG--YaD*
oF:6P}2
oXE--^
o`E:-3
1qqqqpY7-
,tttttttq\Z9*
(}vvvvvvvvvvvvumR2&
#}yyyyyyyyyyyyyyyrn)
"xVO4]
lWTUS?c~'
*$$$$$$$$
*%%%%%%%% *
*'''''''' *
*))))))))!*
*********"*
+++++++++&+
)(((((+++++
+****+
-kkeJ/
.nnnnnnnS8
/qqqqqqqqqqq\@$
tttttttttttttttfI3
wwwwwwwwwwwwwwwwwwwpS<
zzzzzzzzzzzzzzzzzzzzzzzz\E&
}}}}}}}}}}}}}}}}}}}}}}}}}}M
H((wf,
I33lfZ
KUUmfh
[~lR7#
Rqqqqq\G+
0uuuuuuuuugQ4
1zzzzzzzzzzzzzz\>
2}}}}}}}}}}}}}}}}}r
w)dgu6
Hg3&;wG
D9#?^}
!u}M9&
~!f nnnnnnnn:
$f&zzzzzzzzC
u0,,,,,,'#
11/15/2008
+TWH,2
kernel32.dll
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
m2_ KW7n
OQ?*CT!
8!5@|K
9w}iX=~L<,
Hq]C<.+
?C&i"p
;==$?K@]
v!pc}nw"J
d"qPw,
{ia0dVD
>z%voql
3hKt2?}
8 JQY'
-Y,'/>owL
!DV,8Jb
F3_Jg6
y$O=Vb
2qia_?upw
T\>FND
ModulqHan8
Virtopc>ken*32+
ZPY[z]8@
+>(/P"
H+SlM8!
{BtpyL(+
P/(#vjE#hM!"xV4
!J*YO*AW$^@f;M
D$4HSUVPg
6A|$ l
\8T<>#
v0`Zf#
9hD-*
9$$ ?|
;0xUeN
:@97oJ
+Pz%}T`oe<~Wq
405=QtL
vB*(3H%Iw]
Dd"B7\
(1XdS!a
N~0SvJQ
~}U?_(
90sk$M
sFpRph
cN,4+KQ07!'
A,R?B-
%# |"!
uD3Z~X0
fdb;u}
'nPPCN1tMs
!Z`;h2=2
dT)}&nAH+6J^|
@tKwFQ
B_^/b2
XY^WVi
PO:M9W
,QAj@Rw3:
]F:9Fu
g!{PWQSL}@
i7Xt|H,!
A|Q@,: Zha]oM9%
Nr'`Q6
vq"d4n
9l@L04+
pUWmsvb
{ u.Th}e<cdc
%sy5|lntba6id|SDqLG5d,al
uj'XGvMagB
wP=tfNfExitPL
}~ActNCO;b2!
n$zH[QY9
<$J0dkX2
`t$$|$(3
r+|$(|$
USQWVRW
ZPR3C
Z^_Y[]
3/12/2019 3/12/2019
\Photoshop 3.0
Print Info
Resolution
FX Global Lighting Angle
FX Global Altitude
Print Flags
Copyright Flag
Japanese Print Flags
Color Halftone Settings
Color Transfer Settings
Guides
URL overrides
Slices
ICC Untagged Flag
Layer ID Generator Base
New Windows Thumbnail
Rb34rC
UeuF'Vfv7GWgw
B#R3$brCS
dEU6teuFVfv'7GWgw
TI%)$IJI$RI$
u<GKXg
5hI>A<
^ :$b^
en47vw^sZ
Ac#Y~Ji
@+SVVw6\
$/IO&;_*_*
Version compatibility info
JPEG Quality
!Adobe
M'{Y.fn)m)(4M|^|!R;
sc=-O-0@j
V*R1d]wl~=)}c
JS&8vAOZb8Y
FihMon
ARkv!j)
f@SW!iG
Vw$=6Kc%{
4{}O.u4p
.W#\+ a>q(vT8
W<ocxh{
AGpLs-
%)O2;]^7T
[*M@*U<N6[
!4$-7sD
w-j0Pxig3^x
`@PPwSq
!T<Y7n-rH
%z"oLd
`UkM;<HT$/qi
XKuT:;
7`|1:Hf
90NK[$z`hUfE
;0M|qm
43xq\_oz]JD
BHer_|n,
H;}N$,pc
=Rd[K%HR>06rs
!<&?|2]
5[I7JBl
r6\:#>
q2"s6u+
JIFe-G
Mb9+oCCZQ
#.53Xh|v;u+
tMt^%~T[)i^kZt
eCj^}W<{
Uw)?VXdJ
O{aHFO
m}$K-~
#=#=g5
W]RJ3j7[
#6vIfuy*
k>Me fM
cE'n):
Z@X*c_$Q
N~1<hS9"`
W^z|==s|x
@&hX,l
<F<<"4T
c1!71t{c
3/16/2019 3/16/2019 13/16/2019 1
Photoshop 3.0
Resolution
FX Global Lighting Angle
FX Global Altitude
Print Flags
Copyright Flag
Japanese Print Flags
Color Halftone Settings
Color Transfer Settings
Guides
URL overrides
Slices
ICC Untagged Flag
Layer ID Generator Base
New Windows Thumbnail
Rb34rC
UeuF'Vfv7GWgw
B#R3$brCS
dEU6teuFVfv'7GWgw
I%$IJI$RI$I%)$IJI$Sf\
^NNKneN-c
]kZm?E/Tr b
Avcb\\ev
Z<3(d0&%W/
9AFWcwUrz
=?Tp[VcpM%OX=;\Gv l_;
eAk}ie
rDHK <
)$IJI$S{
8Kv~7}?F?
k:{ki1
7c{6"'cu
r+gqjT
US6\Hl
< &-,?ss
;?5$JF5$I)I$J
=_oEDT6R
kn,UY>
NSov]c*id
dhf,.s?3
O 8_=K~XdN
I-?qKk
O<1UUw4
*CPGoO}ayJ
6_3w 7
Ipi.k{
w??;cc
yRJ# 0
Version compatibility info
JPEG Quality
b$r%C4Scs5D'6
eufv7GWgw8HXhx)9IYiy*:JZjz
Rbr3$4C
'dtU7()
euFVfvGWgw8HXhx9IYiy*:JZjz
>@Aomw
SF%x4R
VLb;_9"'KQ~
UXa3H-
1?j;_)
ZhMG~0w
??:?e?l F?Z
qRJ:j_L
Wb]_tX.MS
gFOr]}%O4y{ZM
~C/E)y}
mZK\kpA
A5Nkja
<:P%n$
{#23t#
limiVmo
{Zg/W> V/:
gQ)?{g>\Fma%m
a2zK-g
_8uk+#
+u)#T*+
;.]N^(5}
;[H5g/*_UQ
I;VY+q$Z%6
8vr<Q
$ca> &'lt-*7
ty;[w2g
ZB=! !
]|3{e4`_
dlFZe<0YV<1
6U@xce]
w<1h<1
??5y>g.jyZ
Hc`=L2\&R?|sG0]^UP$1
Y&g#f\Yn]^whw7Zm&
D;M7Z}NCduv
]iz76Ed`T
B~rj>l
w(Zy*>#$3)
*)ieW}=/|}
#55YR^0
6ckN6ckN6
7]CijD
;7ABuzN
rL(]~^F
kHO?7o'
oh ?3WzI
D}O 4V\O
"3z?9}<1
<-}Lxc
6D<kmaO(5,
(XW7yg
`/+>vHd
m?'`eg~0
F_] Sw
._] SIc?+]
76?2>&?&;w?
^17p`*
&L&gOKqG>
7>-o5M1-$}V9OQ
oKUxxy_t{
s<vo2Oq7vS
MtM,WQ (;RbY#x
}&^G[b
"+DIef^
RD}`lURsI5
M..[wn14
e|gb2Z\
LG{C7tM/P5IGIdfnF8K
/sl=|MOPJ
;F[8(])A
FZa ,&6Rt{M;Ranm
[&B-cC
,; 0|1
#"h)~-wQcEPSy
p8L%#@G
0Y-l.C
:aX A^xdq
c}-iZ=i7
B'r_M$
*IM>;5nL+<"@Uk
`9n@V<_qZd2>O}
)-,rU:g,qVCk
CW%AS$
Tt8Wb^i{!Jy
=vLY@m
</>vk:G6
St+oF'
z.sl"Na
KW>r9FIPo
U$'tNX
Q%g'jI
*Gtj>++
>c%UWop
?V:NeNZDp
C /#v0
2~WO<0k
mF+#PQ
i5I&PY*wP
x^hzQAy
<hn4)tu,I
.\K)W42z
c=Y50Kx.$HUkV
BY%yeFL+R$5
\UXy_G[L%C4mc
"b3{.nrCj:f`X~ Q9
['D~k}/zFO?<
[~[ybv
nNl52d
1'J|\E
<iIz;&2^
!:S7-^
/Z}jMN{ *H[F
F{P!K+-
?S'1)>.u
oST F_
y$dIc/Gn
XU^nl/t
Ctk{{b,z
|$ $miSthQ_[\K;iWr*
=v?1{$HG~mP
F([qyK
-"[Xf.h
Z~X~SunTk:=-rdT
s7WZV8&#
=^~OS*R?1^-qoqAEgt
R&`4<-
m ^\]t
%W,X+A$R
<+Ecew<j
)g1]$M2<#y
<&x Es
TS,`SJWj-
JWjaw%)
v*UWtmc]/hG
3R}@"E*?g6zM>;CQ~.
='.|/fON[M*o
236skQ
5\;D|g
x &Y.tgqm%
5EAiFh
IRo#k~t!fmBM-
PX~C70
kVwZqjQ25
Wm}7R/!
6"UUxJ
;$73,n+"y
@ HJ\xOr?"b]
dK+CWb]
&L&gOKq
LUi7]?6
F;|?/6
'aUW_`dX!/
o-8P *+OQofju1XDX
0-5/4-Kk^>
jH,:sfpKO"[
.Kbotk=*
Tl$O@e#,we
"y-,bl
H5=3 %w_c
V{F`+U3J<
{9r^O<w3
zx)_1x37OK
u2W=)qo%iXy
[u-R *G
U. HTIf%aF`
RqWC47
=ko$hK
|[T+'"
!FP;fZ1\A
m21KujJ
?/|ef|&{>
i%9 LzG
Z]#G<45 /
tR 6q5k/f.E,j8o^H
ZIHZOD=H
OUdUTU
V/4/$gqH(Y*.R~_K
S/aHJ2
uQQ~]k
fq\"}Rh^8Y_
T%0tfS[[[%
*Imww:$wBo
bB5#4~XM
oC]_r(h
i<7vZ,W
><r1<W
9;'K9aq
ig5{<i
;z,bbKir3C<
rD J-cqe3w>eyBb
3[y@5
.c[[P,D^
vG?kR#
x{FU1Y
Novk{H^
z}ZC+F
Ey/m6khVv
c.wq<f
&L&gOKq
=?i0c8/D
|yj7jZE
=U\r<s)r
A;[\zN1I
}F+1jd<V9T i$FF
o1Y'xjM;o
1bIWIV9T:#`0#
1?3\Un*U
-`"r?XK>vg=#'}
&L&gOKqG>S
Q+Y4(;!v
p_-OQ+
F<~C^ 2
?x>eW?7
['D~a/_Q~yehv*U
&L&gOKqG>S
Wb]#F+{'[^
<5/?:<
|?my[4s\]^
Oxl9.bW$r
k.VSmq
w1<tq$
A!9%OO
%Z*m2E
`#aji@,
R.3Qub
#EVeYJ
I^C/q8h
-`"r?XK>vg=#'}
&L&gOKqG>S
7,!mnV`
gI/JU:I
,gV=Zy.$+E6h\
8m6$HTnF
Y}ug )F
?'-{^O3?
&L&gOKqG>S
&L&gOKqG>S
Wb]Aaj
EL+T|LpHDs$
qnD7SW7
-=Qmo5
40HA<s*1ZG
qnY#@H
X_0hzZf
*H*z~N<&
['D~k}/zFO?<
&L&gOKqG>S
fbTM<N
V@G3r;o8"F 2;q|N'q
uM2MO7
:Wb\_l1
t'sJNkd
@26S@y
=IC~Zy-M8L-/
IT%Vv
nMi8Bk
N`WmO"g"*A ecg@-l![{`
O5D`KWbv
['D~k}/zFO?<
&L&gOKq
WH\@Zy
(Cj/qyy ,
fxF`Lr!;
dK+CWb]
&L&gOKqG>U
WKYr}1P:]<c2|2Zy{FCG%lZjqn
/$D.u0
)8-("yUB)
du%X-9*Y
qrY$Z~
I'"ZD)z
-`"r?XK>vg=#'}
&L&gOKqG>U
-Vnl5xU\A
dK+CWb]
&L&gOKqG>U
-`"r?XK>vg=#'}
&L&gOKqG>U
-`"r?XK>vg=#'}
&L&gOKqG>U
-`"r?XK>vg=#'}
&L&gOKqG>Ryv
hul5tO3
dK+CWb]
M\vOKqG>[!
KkH&fnIv~
!"[HbUbrA,
V'Wd_1zqer
Ud0^[wlKydAP
o'>l4PA]
<7`Wk2b c?
-`"r?XK>vg=#'}
&L.l;Kk'o s.{Uy
}l\:d4\p~q
MH%VkV?'
8&A!O'"y
9pZ*~I
HCio/*
i=8T"w%nI*
t J.n!}vHmO
/o?t/ 'K
97P9*dY;
8.m/__7E
^Q(U&zY
74_JnQ.
Ef{U>? 1
i/g4g.+$
j2?Oua
*>h'sS U
&W~`~rjZl:
&rMi)vC
CXrQ}A4Z~c
.FQ<?70vgk
(pko\|
5ceT>N?|
M/|3y2
S;)&4eCf~|30>!5-K
_d-gK,fV
c(S<#j6
._5S>N
-6_V?n|O7x4
m7tk|[oc</qd
|qK~O.\
Flnfvv!A><8
[ymvimu5
pLxv?\|g
gpk#=I
x^'}|x
>R_Tk}^^f{?L .
==}GjKPP
x^*xErj
=KCt},
[h.3<dTPX
`_1N_*Dayn;?
shnmx-oDYr9f
V$9St_Q
~,/HYlak
$ey8(oRO
:`&Q&b
zo:u`L
7A6~,f8!
9foP7f6x
7dqc;w
l Qpo`k'kn
dcA}[K
MmeiQ-v6,
F~|<!Qz&G
.\\xoGyK
K-:w(2p
n?vyL.eO
<XW`j0D !Ua
9?2c&.(]-{H#O|]
B>;|k*[
~'epEU{_ rj%(z8vGk?-
];dGeVJ
(K$EE'
dM>x"A#Le
M35 :,5
pM!<is$
JN%Ar`
xcHzOAAMjKY
/Y+K3
ji8(-*
T}ST]B![;e +Z=KX9
/zP@)uq
jX6qcu%Iq(t#
Em-Er)42
6lWzy%cK7
<-:^;p
1r|/{B
0\^~?u
Ln]|?{GB'
> Bo, -
}*$z6D
RKw!?i>?
RKw!?i>?
RKw!?i>?
RKw!?i>?
RKw!?i>?
RKw!?i>?
UQS<?/
'%QT:u/
4id=Fa
y]XY[6lep~
C@:f'w
h)$vQ1ENni
^\m5[b{
0$7'#w]1
4kIHnlK]
R _sgi
&y&{KxK
.op+;s-c&S
|YeDx_
[C1[jpB.i4sAeP
@@ Le/OEy_6
,O9#z~O8/V[,S1:W-*q
E3O>3$r=0
T5Iff$
// Q>Ve&E62
RbU\QHag
85O"O[%xEEb~
\:V1C/
3/jF?Y6F5.0vokw
X^)?*n
IN,y<8 O|
=gy '}n
y '}n
y '}n
y '}n
y '}n
y '}n
1+|7v<>*
|(sU#<`x$
I^vShA4V
*y|\5~'rXbH+v
G]d{K9o
p#02lOS~zqLlw
$Ib0d 0
| V3/21/2019 3/22/2019 13/22/2019 1MZ
L!This program cannot be run in DOS mode.
PEC2^O
mbTpEN
:EWB(CO!
P\_!"%
hDB;e@~o
u|KrA/
b^UbUA
#Dzsb2dp&d
I81,xN6`
@Kk\;>d_y
%WzztE+`i[gV[bf1=9
D;kbr7?WY|
Z(PQ.KWUd
IWa+VW
t_%f]l.k+
b7/+Kv=Qg
E\!yP^U,agOPB`
ie}>u!
{xzGG3v0c\>AtUVY
q|^pXK
#il;C2
ktbQo!TZ
.,.Mh!Y!h'.*
q'e1_?m("
Xd'Ziay
n-C/ T
0#ZWT|@KJ
eDtlk1
Vh0y&]!
?j|829J
xT+8v(
$J }ji0
fU^ma2yUf
pnxv=k
CK?K~9f\(%{
H<nO0.g
(b$a,kz"`Hn#[<ms& Q%
A^1.Q>-b
5#IK3&X!%V\q
ixz"SYOY
J^Mf zNun
Ik^-tHS*
[9h?vnqd
J7Vng0
J#H#{]`$RXBPJ
N$Le=F
=8wv-3
s#*Za&DZ9
v?L$4P
v|jhXQ]N'
mGd/VD)=1B
3|P)ST
atgZCU+g
+d0J1I
18pO^l>p3
m'@e'05
LgThHL
D#f{O(J`d"rF
J7urt`Rj
3$+cC9W
yywWm;
Jjex|s
X!#uoK12#
"s@K\}C
?R{,hUUu ikHc
PECompact2
\ugWPw
H%caAp
6m8Nme!6
VR^]RIK5
vdQ_w\|H
y9e!w)n
]oRln uJ
=%8T"mXgbslcoF
$E,+hu
s@B?hqa`
#^|G(!8
x` T"@h
Ozi FzR7
zL)cOx
ba&tqa
J`/O`0
.E]=NQjKnw
1.19_p
vS}pT<*bgN_
WGc.5mIr@`^
/M8@tCL=ge
H:aP%w9iWPs0.,q
2\.vghK>-(au
"hA=1M-
r9W;>-
gigov
0~P<!Az$
#]_E{3o
4{h.6DsN!
+QRKK?t
^**5! <Vg
NZ_R t
s0BRK3.[q#I
gKO3lToa
wW-E&@&A^t&
HEC+X[:
?EXN\GO(?
%OIpMEG
e+.;:?
Y;zVpN
Z'K20Vxq
?%Mh2^G
lXV!QOA,ex
pS@hv;
i'h8Q]g
tM;k/&i
bKz5Bg3
c14=pxh
Y,9}'r=[39dUM{RZ_
QN.KEnB[r
.nyULT6
xl$T&0C6
q]}N:)
Ag7F%TQf|U`
#h7HlV/M
PG3ilpeGA~oLIC,
}r/h{bG~
MCPTl+mj
oD u{VuLR.%
9iXS7b
^#w0N8
QqKrx[1T|>*
+NW{(h
I~+aXHt
uTpNMC
XC6mD.g
a`v\.$J,s[
u<-@pc}]
phusCJH]
o!w-BTy&
i*V&S9
Jtt]{JQ
E*wmc3e(jbtgh(
v-9q[3$uZU
HdOM1x&
8WiNW@
e87@46]
}D~+eLuOf
nAr8ei#v
~K(rAN
(rU)E'
TU?Ho9oJ
b'c4;|
p ~>\\c@WCG{
t[1It/Tl"x
mNP_nw_WUZ
Q;G9%2|v13
;Li[@cc+
bYV/LT
DU=m?M!]
+@@L4~Ru4
ycr1FJP
/d._]aU IU>2|
/wQ)bAvRw;
*cV!^vgFcu*o
8.t__g
_P}`\nJ
))_c,dQ
'/ZMtQ
krgkLpf
'WC,oj /9
0psH W
'"[<VGs`
,G^`h,x
Gyp.`[
Ilv6Lgqm`x~Z
}oo\sRapWTz
'uwTH"
X8`,fw-
Zj{I# AJ
3G>51D8GvkR
<1V\%H
b.l} 2#,cczg%V
Y_eza^.\/CVj8tg
UsKjSS
nB^ur8E k
.QTcR
w!T4)9tZBlc<,
x,aajYE
[*V^|B)u?
XycA )%
4R5w1g
%!'Y'(
:pBj SqP
PJ2%b6
t6w6Gux
38pq" E
hJVulHWsL<-l_
ht=+?l}3@rrP
} 3;+9
HtU*pM<(
Z\YLGA
t9*YKw
yGMa.%
%J= i:
O"os7?
1xtD/g
j:<^$V%e
mh>iFMk/[o
{CQ0*1w9
4Wr7%x{
<)~@mWV
`Z_IDJAtY<i-i
6t<rzt5<`[5L
E;7]A7JKd|JI
li3@kg
WeN)bJ
>3gJF%Lj
B^L<J#%G*6=lf
Tn#qn)r.0
wX8OZm?
CWsi0>
2NbXy4Ro71!6E
'QXqE6
Tmd7 E!
3q4.p=[);"r
H,u"[
ZPv,@J5!-
?zw! .RrM+<
wQkMS&P'P1
YR|7^RVM0iqC
\bw>_|{
WwbfwBL_m
~(N'5&/q{'9
\~c!{MF z|@m!Qk>C&
L83C^(%=
rN4RE^5wH]
z:wy@NaW:c5Si2h
<9Aj?Q)d77(+
^qyc;03Zet
$ngg b
9i'eZU$!w
M!@/ce8
zr:S;2__Qx9p=`
a"DJe&dS3$)*
f%o9q\
hm1\GY
WO4O0k
)f/q0fP=
e7NhV7xU
+5C9&I
@sEuQr
+w5kV%5
0dV+ghQl0^/
>fBX&D
C.V7zyic,
8/5$DJ~A {D=:D
gb@U+-
TC2F-a=GP
v%ezB&j1Li
!-Ci ~0
)ttg=y|
_ATRPx2
y&Fyuv~^r
bk'+$#*7^'Lz
!rZaz&
^Hmyqk
Ipx &(
4Pxt.$
FHg^BL8YoR
l)"]%l#
/x*_UL'2
NLy`dsf2GK*a,
|i_w<Y[
_H#|Dc
s2xy{`
w"g]P<
0;mfh})b
7CUq]CMC
jV9z)]Jl?
C@EP7$1
f@U2|*lc
Gm18xu
]yJT_}
{pY."h=U
`ZHL~`
1w.7BgpY
Zdp/Rn>
>?i/Ow
apH gV1+PrLd
!i6d@G[
#>BOIr1:%
r>r+HE
wsIAwh<e
/G n6g1.gUij4H^m2
nITgLTmnvt:9
Y0Kb.Pp/8XiQF>+lp
O0jw%#-
Kl$;.jB%
9`R#IA,n
Texk`%
P#qd\lKB
<*sfk;k
.v^Z[$
qz{W(g8i!D7;uM
tVxNg\
Cb(3>
HVpag]Sn?lQ
YEB~0sqq[
:t_]BJ
skX#r[yzum&wL
p5v{9Fo
Yc>#~^q9?
bkGV-}:
r#hKgb\;
<|Kr9%|
m :Cs^W?+6 g{EA23!
aEP0oh3QzLY
H/0\.]
6R]qW>EK
#0 1XiY
@?j&Y($/
0i2nyK\bF
L@8|V,
f.%tS-
iLOls;:
+A'QZ`
wxG]Aa
3yXOq6q;?91q
AVrLMq[+zMOy#w`
vSA'? T
\IT`mN[Q
~,b #*2r
|syW)wH8
A(dXS|
bsl(&o
PmeCv7KjZ:`\}OX
XmO+4V 3UNXko,z0dU*D
IU+NdafDum
S"y"Zh
w{5 pLy
&/LbxVnE{b4
]<l)$E
(j.LF1
'r;W8}
~T$ivBr
:2&< *&Qe,wj7
;@p"Wy)
d?[xn-#|7m0
kd#a`/
ngN`\DO
h2PswM
/}'_$T
O3|yRG
6%6EDS D
f8'F~=8J6=
GvE2Hl+*@A3O'
80sNSor
vda{& f
cjk_T}+j
q#Kc#i^?,
N#>f\xZ-b
rI2"T?m.FS
~![V&8
tvVEUa7d
{M}Ueg
Pv\o(a8E/,3Ky
9ulAnG)n}
s4jCT?!1|
[KLm1&QOkOq
fU8D8*
!1o?|j7* +`5
0=_l,G_L
^dmI^yp`lP%#%
1puvv\
G-QJD@
FAt_;$<o
`dyv'8
S+#NXV
z~E<z/
!1Na>Jq}
~z\qyE
FE8UZ1&&
@+7cs`
E?x]='
ZaOrF~
gYUFwbZlr
q[%FQx
eIS}<[g!
(2,u73
7oFNLqd
g5UVuZ~
:Ig{8m
QD(QI%C'P
-BT=Cg~\
Eh(qB
%&;FX%
2dE~ 4^9
{BQd!,r
uVKc1hg
~R0h[b
+Roj?k3eZ
fU,;j}k~
Qx0d.'
3qwIDblZ%
Nm-Z w
p,tUVv
d2:@nPmD036[l
:12DT*p,Wdyv$e
Jsieoc_
c\Ru~=
=!W+BP
+}eDR.Ml:'X
F={P4{a
:D\r8yA
70L92AoU
$\{gI{
_>/~07
Cu"$i{xE~9P@km7"
chcYp+/'
VvS]D!@.8o5V4+
nU# 6~
uHO>M?C
8N9t=,7
>zLC9[uO
92V'>h1BuZ/%j
bS. *KDg)t0
O7B[(N
U(l'?XsS\/u$Ii
J__B@y
+TWH,2
kernel32.dll
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
m2_ KW7n
OQ?*CT!
8!5@|K
9w}iX=~L<,
Hq]C<.+
?C&i"p
;==$?K@]
v!pc}nw"J
d"qPw,
{ia0dVD
>z%voql
3hKt2?}
8 JQY'
-Y,'/>owL
!DV,8Jb
F3_Jg6
y$O=Vb
2qia_?upw
T\>FND
ModulqHan8
Virtopc>ken*32+
ZPY[z]8@
+>(/P"
H+SlM8!
{BtpyL(+
P/(#vjE#hM!"xV4
!J*YO*AW$^@f;M
D$4HSUVPg
6A|$ l
\8T<>#
v0`Zf#
9hD-*
9$$ ?|
;0xUeN
:@97oJ
+Pz%}T`oe<~Wq
405=QtL
vB*(3H%Iw]
Dd"B7\
(1XdS!a
N~0SvJQ
~}U?_(
90sk$M
sFpRph
cN,4+KQ07!'
A,R?B-
%# |"!
uD3Z~X0
fdb;u}
'nPPCN1tMs
!Z`;h2=2
dT)}&nAH+6J^|
@tKwFQ
B_^/b2
XY^WVi
PO:M9W
,QAj@Rw3:
]F:9Fu
g!{PWQSL}@
i7Xt|H,!
A|Q@,: Zha]oM9%
Nr'`Q6
vq"d4n
9l@L04+
pUWmsvb
{ u.Th}e<cdc
%sy5|lntba6id|SDqLG5d,al
uj'XGvMagB
wP=tfNfExitPL
}~ActNCO;b2!
n$zH[QY9
<$J0dkX2
`t$$|$(3
r+|$(|$
USQWVRW
ZPR3C
Z^_Y[]
3/12/2019 3/12/2019
\Photoshop 3.0
Print Info
Resolution
FX Global Lighting Angle
FX Global Altitude
Print Flags
Copyright Flag
Japanese Print Flags
Color Halftone Settings
Color Transfer Settings
Guides
URL overrides
Slices
ICC Untagged Flag
Layer ID Generator Base
New Windows Thumbnail
Rb34rC
UeuF'Vfv7GWgw
B#R3$brCS
dEU6teuFVfv'7GWgw
TI%)$IJI$RI$
u<GKXg
5hI>A<
^ :$b^
en47vw^sZ
Ac#Y~Ji
@+SVVw6\
$/IO&;_*_*
Version compatibility info
JPEG Quality
!Adobe
M'{Y.fn)m)(4M|^|!R;
sc=-O-0@j
V*R1d]wl~=)}c
JS&8vAOZb8Y
FihMon
ARkv!j)
f@SW!iG
Vw$=6Kc%{
4{}O.u4p
.W#\+ a>q(vT8
W<ocxh{
AGpLs-
%)O2;]^7T
[*M@*U<N6[
!4$-7sD
w-j0Pxig3^x
`@PPwSq
!T<Y7n-rH
%z"oLd
`UkM;<HT$/qi
XKuT:;
7`|1:Hf
90NK[$z`hUfE
;0M|qm
43xq\_oz]JD
BHer_|n,
H;}N$,pc
=Rd[K%HR>06rs
!<&?|2]
5[I7JBl
r6\:#>
q2"s6u+
JIFe-G
Mb9+oCCZQ
#.53Xh|v;u+
tMt^%~T[)i^kZt
eCj^}W<{
Uw)?VXdJ
O{aHFO
m}$K-~
#=#=g5
W]RJ3j7[
#6vIfuy*
k>Me fM
cE'n):
Z@X*c_$Q
N~1<hS9"`
W^z|==s|x
@&hX,l
<F<<"4T
c1!71t{c
3/16/2019 3/16/2019 13/16/2019 1
Photoshop 3.0
Resolution
FX Global Lighting Angle
FX Global Altitude
Print Flags
Copyright Flag
Japanese Print Flags
Color Halftone Settings
Color Transfer Settings
Guides
URL overrides
Slices
ICC Untagged Flag
Layer ID Generator Base
New Windows Thumbnail
Rb34rC
UeuF'Vfv7GWgw
B#R3$brCS
dEU6teuFVfv'7GWgw
I%$IJI$RI$I%)$IJI$Sf\
^NNKneN-c
]kZm?E/Tr b
Avcb\\ev
Z<3(d0&%W/
9AFWcwUrz
=?Tp[VcpM%OX=;\Gv l_;
eAk}ie
rDHK <
)$IJI$S{
8Kv~7}?F?
k:{ki1
7c{6"'cu
r+gqjT
US6\Hl
< &-,?ss
;?5$JF5$I)I$J
=_oEDT6R
kn,UY>
NSov]c*id
dhf,.s?3
O 8_=K~XdN
I-?qKk
O<1UUw4
*CPGoO}ayJ
6_3w 7
Ipi.k{
w??;cc
yRJ# 0
Version compatibility info
JPEG Quality
b$r%C4Scs5D'6
eufv7GWgw8HXhx)9IYiy*:JZjz
Rbr3$4C
'dtU7()
euFVfvGWgw8HXhx9IYiy*:JZjz
>@Aomw
SF%x4R
VLb;_9"'KQ~
UXa3H-
1?j;_)
ZhMG~0w
??:?e?l F?Z
qRJ:j_L
Wb]_tX.MS
gFOr]}%O4y{ZM
~C/E)y}
mZK\kpA
A5Nkja
<:P%n$
{#23t#
limiVmo
{Zg/W> V/:
gQ)?{g>\Fma%m
a2zK-g
_8uk+#
+u)#T*+
;.]N^(5}
;[H5g/*_UQ
I;VY+q$Z%6
8vr<Q
$ca> &'lt-*7
ty;[w2g
ZB=! !
]|3{e4`_
dlFZe<0YV<1
6U@xce]
w<1h<1
??5y>g.jyZ
Hc`=L2\&R?|sG0]^UP$1
Y&g#f\Yn]^whw7Zm&
D;M7Z}NCduv
]iz76Ed`T
B~rj>l
w(Zy*>#$3)
*)ieW}=/|}
#55YR^0
6ckN6ckN6
7]CijD
;7ABuzN
rL(]~^F
kHO?7o'
oh ?3WzI
D}O 4V\O
"3z?9}<1
<-}Lxc
6D<kmaO(5,
(XW7yg
`/+>vHd
m?'`eg~0
F_] Sw
._] SIc?+]
76?2>&?&;w?
^17p`*
&L&gOKqG>
7>-o5M1-$}V9OQ
oKUxxy_t{
s<vo2Oq7vS
MtM,WQ (;RbY#x
}&^G[b
"+DIef^
RD}`lURsI5
M..[wn14
e|gb2Z\
LG{C7tM/P5IGIdfnF8K
/sl=|MOPJ
;F[8(])A
FZa ,&6Rt{M;Ranm
[&B-cC
,; 0|1
#"h)~-wQcEPSy
p8L%#@G
0Y-l.C
:aX A^xdq
c}-iZ=i7
B'r_M$
*IM>;5nL+<"@Uk
`9n@V<_qZd2>O}
)-,rU:g,qVCk
CW%AS$
Tt8Wb^i{!Jy
=vLY@m
</>vk:G6
St+oF'
z.sl"Na
KW>r9FIPo
U$'tNX
Q%g'jI
*Gtj>++
>c%UWop
?V:NeNZDp
C /#v0
2~WO<0k
mF+#PQ
i5I&PY*wP
x^hzQAy
<hn4)tu,I
.\K)W42z
c=Y50Kx.$HUkV
BY%yeFL+R$5
\UXy_G[L%C4mc
"b3{.nrCj:f`X~ Q9
['D~k}/zFO?<
[~[ybv
nNl52d
1'J|\E
<iIz;&2^
!:S7-^
/Z}jMN{ *H[F
F{P!K+-
?S'1)>.u
oST F_
y$dIc/Gn
XU^nl/t
Ctk{{b,z
|$ $miSthQ_[\K;iWr*
=v?1{$HG~mP
F([qyK
-"[Xf.h
Z~X~SunTk:=-rdT
s7WZV8&#
=^~OS*R?1^-qoqAEgt
R&`4<-
m ^\]t
%W,X+A$R
<+Ecew<j
)g1]$M2<#y
<&x Es
TS,`SJWj-
JWjaw%)
v*UWtmc]/hG
3R}@"E*?g6zM>;CQ~.
='.|/fON[M*o
236skQ
5\;D|g
x &Y.tgqm%
5EAiFh
IRo#k~t!fmBM-
PX~C70
kVwZqjQ25
Wm}7R/!
6"UUxJ
;$73,n+"y
@ HJ\xOr?"b]
dK+CWb]
&L&gOKq
LUi7]?6
F;|?/6
'aUW_`dX!/
o-8P *+OQofju1XDX
0-5/4-Kk^>
jH,:sfpKO"[
.Kbotk=*
Tl$O@e#,we
"y-,bl
H5=3 %w_c
V{F`+U3J<
{9r^O<w3
zx)_1x37OK
u2W=)qo%iXy
[u-R *G
U. HTIf%aF`
RqWC47
=ko$hK
|[T+'"
!FP;fZ1\A
m21KujJ
?/|ef|&{>
i%9 LzG
Z]#G<45 /
tR 6q5k/f.E,j8o^H
ZIHZOD=H
OUdUTU
V/4/$gqH(Y*.R~_K
S/aHJ2
uQQ~]k
fq\"}Rh^8Y_
T%0tfS[[[%
*Imww:$wBo
bB5#4~XM
oC]_r(h
i<7vZ,W
><r1<W
9;'K9aq
ig5{<i
;z,bbKir3C<
rD J-cqe3w>eyBb
3[y@5
.c[[P,D^
vG?kR#
x{FU1Y
Novk{H^
z}ZC+F
Ey/m6khVv
c.wq<f
&L&gOKq
=?i0c8/D
|yj7jZE
=U\r<s)r
A;[\zN1I
}F+1jd<V9T i$FF
o1Y'xjM;o
1bIWIV9T:#`0#
1?3\Un*U
-`"r?XK>vg=#'}
&L&gOKqG>S
Q+Y4(;!v
p_-OQ+
F<~C^ 2
?x>eW?7
['D~a/_Q~yehv*U
&L&gOKqG>S
Wb]#F+{'[^
<5/?:<
|?my[4s\]^
Oxl9.bW$r
k.VSmq
w1<tq$
A!9%OO
%Z*m2E
`#aji@,
R.3Qub
#EVeYJ
I^C/q8h
-`"r?XK>vg=#'}
&L&gOKqG>S
7,!mnV`
gI/JU:I
,gV=Zy.$+E6h\
8m6$HTnF
Y}ug )F
?'-{^O3?
&L&gOKqG>S
&L&gOKqG>S
Wb]Aaj
EL+T|LpHDs$
qnD7SW7
-=Qmo5
40HA<s*1ZG
qnY#@H
X_0hzZf
*H*z~N<&
['D~k}/zFO?<
&L&gOKqG>S
fbTM<N
V@G3r;o8"F 2;q|N'q
uM2MO7
:Wb\_l1
t'sJNkd
@26S@y
=IC~Zy-M8L-/
IT%Vv
nMi8Bk
N`WmO"g"*A ecg@-l![{`
O5D`KWbv
['D~k}/zFO?<
&L&gOKq
WH\@Zy
(Cj/qyy ,
fxF`Lr!;
dK+CWb]
&L&gOKqG>U
WKYr}1P:]<c2|2Zy{FCG%lZjqn
/$D.u0
)8-("yUB)
du%X-9*Y
qrY$Z~
I'"ZD)z
-`"r?XK>vg=#'}
&L&gOKqG>U
-Vnl5xU\A
dK+CWb]
&L&gOKqG>U
-`"r?XK>vg=#'}
&L&gOKqG>U
-`"r?XK>vg=#'}
&L&gOKqG>U
-`"r?XK>vg=#'}
&L&gOKqG>Ryv
hul5tO3
dK+CWb]
M\vOKqG>[!
KkH&fnIv~
!"[HbUbrA,
V'Wd_1zqer
Ud0^[wlKydAP
o'>l4PA]
<7`Wk2b c?
-`"r?XK>vg=#'}
&L.l;Kk'o s.{Uy
}l\:d4\p~q
MH%VkV?'
8&A!O'"y
9pZ*~I
HCio/*
i=8T"w%nI*
t J.n!}vHmO
/o?t/ 'K
97P9*dY;
8.m/__7E
^Q(U&zY
74_JnQ.
Ef{U>? 1
i/g4g.+$
j2?Oua
*>h'sS U
&W~`~rjZl:
&rMi)vC
CXrQ}A4Z~c
.FQ<?70vgk
(pko\|
5ceT>N?|
M/|3y2
S;)&4eCf~|30>!5-K
_d-gK,fV
c(S<#j6
._5S>N
-6_V?n|O7x4
m7tk|[oc</qd
|qK~O.\
Flnfvv!A><8
[ymvimu5
pLxv?\|g
gpk#=I
x^'}|x
>R_Tk}^^f{?L .
==}GjKPP
x^*xErj
=KCt},
[h.3<dTPX
`_1N_*Dayn;?
shnmx-oDYr9f
V$9St_Q
~,/HYlak
$ey8(oRO
:`&Q&b
zo:u`L
7A6~,f8!
9foP7f6x
7dqc;w
l Qpo`k'kn
dcA}[K
MmeiQ-v6,
F~|<!Qz&G
.\\xoGyK
K-:w(2p
n?vyL.eO
<XW`j0D !Ua
9?2c&.(]-{H#O|]
B>;|k*[
~'epEU{_ rj%(z8vGk?-
];dGeVJ
(K$EE'
dM>x"A#Le
M35 :,5
pM!<is$
JN%Ar`
xcHzOAAMjKY
/Y+K3
ji8(-*
T}ST]B![;e +Z=KX9
/zP@)uq
jX6qcu%Iq(t#
Em-Er)42
6lWzy%cK7
<-:^;p
1r|/{B
0\^~?u
Ln]|?{GB'
> Bo, -
}*$z6D
RKw!?i>?
RKw!?i>?
RKw!?i>?
RKw!?i>?
RKw!?i>?
RKw!?i>?
UQS<?/
'%QT:u/
4id=Fa
y]XY[6lep~
C@:f'w
h)$vQ1ENni
^\m5[b{
0$7'#w]1
4kIHnlK]
R _sgi
&y&{KxK
.op+;s-c&S
|YeDx_
[C1[jpB.i4sAeP
@@ Le/OEy_6
,O9#z~O8/V[,S1:W-*q
E3O>3$r=0
T5Iff$
// Q>Ve&E62
RbU\QHag
85O"O[%xEEb~
\:V1C/
3/jF?Y6F5.0vokw
X^)?*n
IN,y<8 O|
=gy '}n
y '}n
y '}n
y '}n
y '}n
y '}n
1+|7v<>*
|(sU#<`x$
I^vShA4V
*y|\5~'rXbH+v
G]d{K9o
p#02lOS~zqLlw
$Ib0d 0
| V3/21/2019 3/22/2019 1BM(
3
-+$- $9$$$
11 11+
7""/!$$$
1+1-$+
.$1-
1 % 9$$$
$ - 9$$$+
9! 1
"! $1
! .% +$$$
1+- 1$
-! %
1 % . +
.! /%9$-+
- 1 + $
1 9 $9$$
% 1$$
$$ !-
11% + % %1
-$$+
+ 1 %
-+- %
$- +-
$$ 11 + -1+ 1$
9$1 11
! !! % +
"0/.$$ + +
%
"!%
$$11 1%
1% 1 $
$+-+9
9$+%1
+ $%1
-$$1+
!% 11
1111-
0& 9
9+ 9$$9
1$-+ 1
! +1
$1 $+ $
!!!"! %
% %
!/&. !/
3 1$99
!/% 1
9$$$9$$
$!%-+
% 1 $
&""0"""!
$+$$-$
% 1 1- %
$$ ""3
$9$$-$$$
$1 +
+$$ $$
1 1%
1 1 1 + -$$
"0"!.
% +$$$
.$$+
$1 $9+
-+ $
"! 11$
1% %
%1$$+$ 1
% + 1
$% !!/1-$
$ +- 1$+1$
$1-$$ !
1!! + 1
% + 1 !
% +
9-$$-+ 9
$1$ % % %1
$$$+ $1
!!! %-
1!
+ $1% $
!!111
!!! +
91 ! +$$
-+ -
9$-$ $$$$
+ 1 % +
1 %1$
%/! 1 +
1 +
1 % 9
$$1 -1
1 !!
+ 1 +
1 1-1
$ 9 1 9
/! 1
+9-$-
!!%$ +
+ $1$9
! !!"" %
+ %!% +
$$
!!
+ +-
! -% %
!!/ 1
!! 1
% %!2
%
-
$ "! 1
$$$$9
$$$$11
119%
%
!!!!!!!
% 1%
11$$
$1$$+!$
!!!! !1
+/2
!!!!!
9$$'+
-1$$$9
$-1$$1
1+ 3-$
$ $$ $+1+
!2-+ $9
1+--+$
1 -+1
+ 1 -
$$ !""
9$$$9$
11+ %
!.1 $9
!! 1%
%%!!!
$$9 %
% %!!-
9$$1$$$9
!% +
+ % 1
!/!.
1$-%$
$$- +
+ 1-$
%-+1+$
$-1%1 $$
!!!!.1
!2!! 1
$$$-1
9+ 1
1 !-% 1%1
% 1+ %
+-
9%$$$$
1 1+
+ 1 +-$$
9 + 1
+-$ +
+ 9 $
1% %$ %1
!! !!
%$
$$9- $
$-$ %
-!"%!% %
-$1 9
!!!!$$
$1$1 11
1 % +-
!!&"/!
!-1 ."!2
$. ! $1
$
.. -
%
1 % + +
% %1%
!/!!!11
! +
.! $+
+
9+$ $-1
1+-$+$
2 %
91$ 1
$ $$1+
1$
$1 +-
$ % $
$$1$ 1
1 1 + 9
$$ !"""! $ %
+ - %%
$-+ $
$1 . 21%
1$. 1$
+ $$$
1 /!
!% 1 +
!2!! $
!-1
$+-1
.% $$
% 1 $
$1$$$-
!!/!
"!!!&!
%+ +-
+ 1
+$1 %
11% 1%
1 !!
-+ !!-
+$ 1+-$
+
+ % 1
-11!1%
.. 91+
% 9!1$ %1
1111+ +
-1 -$-$
1
!
1+%%.
-$ $%
!!%% 1
. 1$
$!"! +
-$$9$$
1
$$+ 1
". 1 $
+ ! +-$
% $
9 $$$1$+
!2!&
1 ! 1$
$-$9 1
$ !!
/! 1 1 1
%1% +
9$$ !"
$-1- 1
+-9% +
- !""
% +$
!!
+ 1-$$$!
$-% +
11 1 9
.+ 1
+ + 111
%+ 1
! 11 1
+1$1 -
1 +
+-$-$
$ 1-+%
1-+ %
1$+-0!/
+1$$$ +
11111
%! ! %
"! %+1$
1 1 +
!2 %-$1 1
% .
11 % . !
-1+$1+
!1
1% + !
"! 1 %
1 %
1 $11 1
!$-$$$
%+ !!
% $
%11$
9 + +1
+ $-$-
1+ +
9$$ - 11
$ +% 9
! !!
$
&!!
!3!
+ +%
$+$+ -
! !!
$+. %.% $
11%.
/! % !&
11
-% !! 9$
$ ! --$$
$ %
2! -
$9 % %
1$ %1 % .
$-$ 1
$- +$
$$ !% %
+ 1
% %!!"
1 !!!1
1 1.%1
!"%$$$11
+ 1 %
!. 11/
$
$+ +1 %
$-$ $
%1 !3"/ !!2
%1+
$
% 1$ $1-
$ $-% %
!! -
1 %1$1
1 % % + + %$
% %
9$$ $$$
$ 1 !%
1. 1%9$$
!"""!. + 1 .
% $-+
$$+! +
%1%9
0 +-+ +
!% 9
$!"! 9
$ $$
1 %! !!
$ !!"!// .
% + 1 % 1
!"" 12
+ $9$1
""! $
!3!!!.
$+--
1 !/"3
1
1-$9$$-+
1 !.- $$
+ $1.
""&"!9$
$ 9 11
+ +
$
% %1--$
! !- $
+ %1
$-+ %%-
+$+-$1
1 $-$$
$ 1 ! ! 9
$$
! !!/!
9$ + %
$-$ %
$$$1!"2
1$-+
$11 +$ %$+
. -$-
-$ !!/
1 +
% %
%
+ $-$$-
$ +
$-1 !
% %
1'$-$
$-9 +
9$+.6!. %
. !
-$ ""!+
+$$+ +$1 9
$$$$$$$ 1 1 %
% % $
$ .!!!
$ %+
$$9$$$
$$$$$-
%1%. +
! $$
! %- -
$$ $$1$
+ %
$$! !
$
+%1
1 1 $%+
1% -+$
-9$$9+
1 %$ +$+
$--1 +
! $$./!..
7 %
"!2/ $
+
1 % !&!
-$-$$$
$% 1%-
1 ./!$
$$1$
1 /
9 $++ + !
$-$11+-
+-$1!/1
+ 11 1
/"""0*
- !/!1
! %
1 % 1
+ -
$9$$$$
!! $ +1
1 1
$1+9$$
+$ +-
1% %
""- 9$
$$9 + 1
$+-1 % 1
1 1$$-
1 !.1
% 1 1
9$ $1$9
-$1-$1
-&""/-
!!!1
$ $1! +
+-$
1 +-+ + %
9$$$ 1
1 +--$
..1-$+
+-9+$9$%.!
$ + +-
+ -+$$
!!/ 1
!! -%
+ 1$$$
1$-$$$--
$ "! 1
!!-$+$
$$$9$$
119%
$1 $ %$
+ $-
!
--1 +% 1
11$$
/ $ $
+ 9
19 %1
-+-1.$
+
$1$$+!$
1+ 3-$
$$-+ %
$$ -
1 -+1
+ 1 -
%
$%. %-$$
$12 1 - 1
1 $$$%
!/"0/.
9$ 2"
$$$$$$$
% %!!-
--$ -$
-1+$$9$
1--$
9$- 9 9+-$$
9-!1$$
+ % 1
!! 1
+ --
1 !!.
9$$$$$
.1 1$$$
$1 % $
1 -$$+
+ 9$--
!!!!.1
!!!! 1 %
! % %
. 1+ %
+-
$$-+ -
1 !!
$$1$-9
91+ %
80007 +1+
+ 1 1 1
+ 9
% 1
!!2!- +
1% %$ 1 %-
!! !!
% +
1% $1
1$1 1
+
1
! 11
% 2!
"!&!!
$- -$$9
+$+ %11
- %1
11 1
1 +-$
! 2 1 $$$
%! $1
$ 1.
% !%!%
1 %
$ !! -+$
+ 1
9$-$$$1
..!. +-
!
-+$$1"!/
+1$$$%$-
%1$
1 + +
/ /!!"/!
&""!3!1
+1+1$
!!/!!!!
-$1 $1
+ !!
%$ +!!2!1
-1 1 . !
$$ 1 11 -1
$$ !"""!1$
+ + %9
$ +
1%%+ !
$ 1-$ 1
+9 1$1+
1 1+$
!2 %1
!2!!
! $19
- + +-
$$%&"/
$ 1 +1
$ 1 $1
$$$-$$
/% % !
! !/!!
1 1
+ !&
!!!./!
+9$ !32!00
1+ 1! +1
$1+$9$
$ 9$
1 !!
+ -1
- 1$
$- + +
%1-11
1 %
-$$+1-
1-$ $-+ 1 ! %1 1
1
1 +9$9+
$ 1
1+ . $9
1 %$
$$-$ %+
+1 % 1
1 %!
% 111
!!!!!
% % $
!2!& 1$
-1 1 %-11
1
! +
!!! + $
$9$ + $9-+
$ - %
$ 1 %
% -
% 1 %
! .
1+1 1$$$9
$ + !"
1 +$
1 $$ $-
/. 1 +
1 % -
%$$$
$+ +1$9
$%% 1$1
!% 1 1
! $$$+%
-$9$-$
1$-+ %1
% %1
% 9
"&""/ ..+
1 $1
+ 1 1
% + 9
111
1
$ !/1$$
% % % %
$$ $ 1 +
$$$+9$
+-$+ !
$1.&!
9+ -1$
-$++
!"":7!9
9 %
+ %%
$ $% +$ + 1
- %
9++1
+ +
! $ 91$$
+ +11$
% 1 +
0. .1./!
$ 1 +1
$1 !% +
+ + . 11-$-
1% 11+
+ 1 +
!!%
2 ! 1 $
1$ +-+
! ! $-$$$
+1
$-$ !2-
%11 11
!21%
$- 1
//!+-
$$$9-$9
1 % 1 +
% %!!!%
11 !1 -
$$$$$ $
+ 1 1%
) /& 1
% % + -
0"!%+ 1 % +
% %
% -+1
-1 +1$+
* 8 1 +$+
!!! !!
!. 1
1
- -$
!!!+
!!""!
1
/"/ %1
11 1 1
+ + 1!/!
$$-$ +
+-$$$9
+ $$9$9
11 + !
+- + + 1
9 $ $1+-9
/%+$$$+
$ . !
.
$3/25/2019 3/25/2019 3/26/2019 1
Adobe Photoshop 7.0
2003:05:30 10:58:19
#Photoshop 3.0
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>com.apple.print.PageFormat.PMHorizontalRes</key>
<dict>
<key>com.apple.print.ticket.creator</key>
<string>com.apple.printingmanager</string>
<key>com.apple.print.ticket.itemArray</key>
<array>
<dict>
<key>com.apple.print.PageFormat.PMHorizontalRes</key>
<real>72</real>
<key>com.apple.print.ticket.client</key>
<string>com.apple.printingmanager</string>
<key>com.apple.print.ticket.modDate</key>
<date>2003-05-30T17:56:11Z</date>
<key>com.apple.print.ticket.stateFlag</key>
<integer>0</integer>
</dict>
</array>
</dict>
<key>com.apple.print.PageFormat.PMOrientation</key>
<dict>
<key>com.apple.print.ticket.creator</key>
<string>com.apple.printingmanager</string>
<key>com.apple.print.ticket.itemArray</key>
<array>
<dict>
<key>com.apple.print.PageFormat.PMOrientation</key>
<integer>1</integer>
<key>com.apple.print.ticket.client</key>
<string>com.apple.printingmanager</string>
<key>com.apple.print.ticket.modDate</key>
<date>2003-05-30T17:56:11Z</date>
<key>com.apple.print.ticket.stateFlag</key>
<integer>0</integer>
</dict>
</array>
</dict>
<key>com.apple.print.PageFormat.PMScaling</key>
<dict>
<key>com.apple.print.ticket.creator</key>
<string>com.apple.printingmanager</string>
<key>com.apple.print.ticket.itemArray</key>
<array>
<dict>
<key>com.apple.print.PageFormat.PMScaling</key>
<real>1</real>
<key>com.apple.print.ticket.client</key>
<string>com.apple.printingmanager</string>
<key>com.apple.print.ticket.modDate</key>
<date>2003-05-30T17:56:11Z</date>
<key>com.apple.print.ticket.stateFlag</key>
<integer>0</integer>
</dict>
</array>
</dict>
<key>com.apple.print.PageFormat.PMVerticalRes</key>
<dict>
<key>com.apple.print.ticket.creator</key>
<string>com.apple.printingmanager</string>
<key>com.apple.print.ticket.itemArray</key>
<array>
<dict>
<key>com.apple.print.PageFormat.PMVerticalRes</key>
<real>72</real>
<key>com.apple.print.ticket.client</key>
<string>com.apple.printingmanager</string>
<key>com.apple.print.ticket.modDate</key>
<date>2003-05-30T17:56:11Z</date>
<key>com.apple.print.ticket.stateFlag</key>
<integer>0</integer>
</dict>
</array>
</dict>
<key>com.apple.print.PageFormat.PMVerticalScaling</key>
<dict>
<key>com.apple.print.ticket.creator</key>
<string>com.apple.printingmanager</string>
<key>com.apple.print.ticket.itemArray</key>
<array>
<dict>
<key>com.apple.print.PageFormat.PMVerticalScaling</key>
<real>1</real>
<key>com.apple.print.ticket.client</key>
<string>com.apple.printingmanager</string>
<key>com.apple.print.ticket.modDate</key>
<date>2003-05-30T17:56:11Z</date>
<key>com.apple.print.ticket.stateFlag</key>
<integer>0</integer>
</dict>
</array>
</dict>
<key>com.apple.print.subTicket.paper_info_ticket</key>
<dict>
<key>com.apple.print.PageFormat.PMAdjustedPageRect</key>
<dict>
<key>com.apple.print.ticket.creator</key>
<string>com.apple.printingmanager</string>
<key>com.apple.print.ticket.itemArray</key>
<array>
<dict>
<key>com.apple.print.PageFormat.PMAdjustedPageRect</key>
<array>
<real>0.0</real>
<real>0.0</real>
<real>734</real>
<real>576</real>
</array>
<key>com.apple.print.ticket.client</key>
<string>com.apple.printingmanager</string>
<key>com.apple.print.ticket.modDate</key>
<date>2003-05-30T17:56:11Z</date>
<key>com.apple.print.ticket.stateFlag</key>
<integer>0</integer>
</dict>
</array>
</dict>
<key>com.apple.print.PageFormat.PMAdjustedPaperRect</key>
<dict>
<key>com.apple.print.ticket.creator</key>
<string>com.apple.printingmanager</string>
<key>com.apple.print.ticket.itemArray</key>
<array>
<dict>
<key>com.apple.print.PageFormat.PMAdjustedPaperRect</key>
<array>
<real>-18</real>
<real>-18</real>
<real>774</real>
<real>594</real>
</array>
<key>com.apple.print.ticket.client</key>
<string>com.apple.printingmanager</string>
<key>com.apple.print.ticket.modDate</key>
<date>2003-05-30T17:56:11Z</date>
<key>com.apple.print.ticket.stateFlag</key>
<integer>0</integer>
</dict>
</array>
</dict>
<key>com.apple.print.PaperInfo.PMPaperName</key>
<dict>
<key>com.apple.print.ticket.creator</key>
<string>com.apple.print.pm.PostScript</string>
<key>com.apple.print.ticket.itemArray</key>
<array>
<dict>
<key>com.apple.print.PaperInfo.PMPaperName</key>
<string>na-letter</string>
<key>com.apple.print.ticket.client</key>
<string>com.apple.print.pm.PostScript</string>
<key>com.apple.print.ticket.modDate</key>
<date>2000-07-28T22:57:04Z</date>
<key>com.apple.print.ticket.stateFlag</key>
<integer>1</integer>
</dict>
</array>
</dict>
<key>com.apple.print.PaperInfo.PMUnadjustedPageRect</key>
<dict>
<key>com.apple.print.ticket.creator</key>
<string>com.apple.print.pm.PostScript</string>
<key>com.apple.print.ticket.itemArray</key>
<array>
<dict>
<key>com.apple.print.PaperInfo.PMUnadjustedPageRect</key>
<array>
<real>0.0</real>
<real>0.0</real>
<real>734</real>
<real>576</real>
</array>
<key>com.apple.print.ticket.client</key>
<string>com.apple.printingmanager</string>
<key>com.apple.print.ticket.modDate</key>
<date>2003-05-30T17:56:11Z</date>
<key>com.apple.print.ticket.stateFlag</key>
<integer>0</integer>
</dict>
</array>
</dict>
<key>com.apple.print.PaperInfo.PMUnadjustedPaperRect</key>
<dict>
<key>com.apple.print.ticket.creator</key>
<string>com.apple.print.pm.PostScript</string>
<key>com.apple.print.ticket.itemArray</key>
<array>
<dict>
<key>com.apple.print.PaperInfo.PMUnadjustedPaperRect</key>
<array>
<real>-18</real>
<real>-18</real>
<real>774</real>
<real>594</real>
</array>
<key>com.apple.print.ticket.client</key>
<string>com.apple.printingmanager</string>
<key>com.apple.print.ticket.modDate</key>
<date>2003-05-30T17:56:11Z</date>
<key>com.apple.print.ticket.stateFlag</key>
<integer>0</integer>
</dict>
</array>
</dict>
<key>com.apple.print.PaperInfo.ppd.PMPaperName</key>
<dict>
<key>com.apple.print.ticket.creator</key>
<string>com.apple.print.pm.PostScript</string>
<key>com.apple.print.ticket.itemArray</key>
<array>
<dict>
<key>com.apple.print.PaperInfo.ppd.PMPaperName</key>
<string>Letter</string>
<key>com.apple.print.ticket.client</key>
<string>com.apple.print.pm.PostScript</string>
<key>com.apple.print.ticket.modDate</key>
<date>2000-07-28T22:57:04Z</date>
<key>com.apple.print.ticket.stateFlag</key>
<integer>1</integer>
</dict>
</array>
</dict>
<key>com.apple.print.ticket.APIVersion</key>
<string>00.20</string>
<key>com.apple.print.ticket.privateLock</key>
<false/>
<key>com.apple.print.ticket.type</key>
<string>com.apple.print.PaperInfoTicket</string>
</dict>
<key>com.apple.print.ticket.APIVersion</key>
<string>00.20</string>
<key>com.apple.print.ticket.privateLock</key>
<false/>
<key>com.apple.print.ticket.type</key>
<string>com.apple.print.PageFormatTicket</string>
</dict>
</plist>
boundsObjc
Top long
Leftlong
Btomlong
Rghtlong
slicesVlLs
sliceIDlong
groupIDlong
originenum
ESliceOrigin
autoGenerated
Typeenum
ESliceType
boundsObjc
Top long
Leftlong
Btomlong
Rghtlong
urlTEXT
nullTEXT
MsgeTEXT
altTagTEXT
cellTextIsHTMLbool
cellTextTEXT
horzAlignenum
ESliceHorzAlign
default
vertAlignenum
ESliceVertAlign
default
bgColorTypeenum
ESliceBGColorType
topOutsetlong
leftOutsetlong
bottomOutsetlong
rightOutsetlong
Hhttp://ns.adobe.com/xap/1.0/
<?xpacket begin='
' id='W5M0MpCehiHzreSzNTczkc9d'?>
<?adobe-xap-filters esc="CR"?>
<x:xapmeta xmlns:x='adobe:ns:meta/' x:xaptk='XMP toolkit 2.8.2-33, framework 1.5'>
<rdf:RDF xmlns:rdf='http://www.w3.org/1999/02/22-rdf-syntax-ns#' xmlns:iX='http://ns.adobe.com/iX/1.0/'>
<rdf:Description about='uuid:a723a38e-941f-11d7-af4c-cdf1f7b7705f'
xmlns:xapMM='http://ns.adobe.com/xap/1.0/mm/'>
<xapMM:DocumentID>adobe:docid:photoshop:a723a38c-941f-11d7-af4c-cdf1f7b7705f</xapMM:DocumentID>
</rdf:Description>
</rdf:RDF>
</x:xapmeta>
<?xpacket end='w'?>
b%C&4r
5'S6DTsEF7Gc(UVW
dte)8fu*9:HIJXYZghijvwxyz
sFtUeuV7)
(GWf8vgwHXhx9IYiy*:JZjz
kv[7/n>9f(?
(3xno
9VdT5{+nE
9 c3X,~ /LUX*Z
}hk k1V{g\/mQL^/
}#[>~+
6ddiu+G1*EA
7,?J'O/|h
X5""DT_'
Nf#uCr>
n oy|pVs9^tYM m
OCz{x]m)&j}j!
78}V:c
1a:fQg
F0~-ROW
I&Zv/Gwg-OZ
&}IRu7m
\/bpvO
WX-\O.K
[/5ypR853p
'6K_ow
m]["H[
j6<b&\]$TLX
g>Juxw{6r/e$
OqS~}ipy#.sv+
+)a>&y
V8W_!G
j*%22C
b~OXu{S1Ga
Go"5>Nq
OO-]aju
{dk+w*
IKQQ3[*G
9gI1X&.ME
_PPc)Lu
Eee*K#A
R8q<|/
%\mRKT
ibH %6~
@g|Gb ?
PRomg:G[E-u
{rm>Ol~_
~@> tuOUcwN
:_ =Fzg
WUHKW ;W)SO
Fd{?k+l.u`p{zzVK
oEHQu_.
3/29/2019
Before the
Federal Communications Commission
Washington, D.C. 20554
In the Matter of
Central Telecom Long Distance, Inc.
Complaints Regarding
Unauthorized Change of
Subscribers Telecommunications Carrier
IC Nos. 11-S003102
11-S3134322
Adopted: May 8, 2013
Released: May 10, 2013
By the Deputy Chief, Consumer Policy Division, Consumer & Governmental Affairs Bureau:
In this Order, we consider the complaints
alleging that Central Telecom Long Distance, Inc., (Central Telecom) changed Complainants telecommunications service providers without obtaining authorization and verification from Complainants in violation of the Commissions rules.
We conclude that Central Telecoms actions did result in unauthorized changes in Complainants telecommunications service providers and we grant Complainants complaints.
In December 1998, the Commission released the Section 258 Order in which it adopted rules to implement Section 258 of the Communications Act of 1934 (Act), as amended by the Telecommunications Act of 1996 (1996 Act).
Section 258 prohibits the practice of slamming, the submission or execution of an unauthorized change in a subscribers selection of a provider of telephone exchange service or telephone toll service.
In the Section 258 Order, the Commission adopted aggressive new rules designed to take the profit out of slamming, broadened the scope of the slamming rules to encompass all carriers, and modified its existing requirements for the authorization and verification of preferred carrier changes. The rules require, among other things, that a carrier receive individual subscriber consent before a carrier change may occur.
Pursuant to Section 258, carriers are absolutely barred from changing a customer's preferred local or long distance carrier without first complying with one of the Commission's verification procedures.
Specifically, a carrier must: (1) obtain the subscriber's written or electronically signed authorization in a format that meets the requirements of
Section 64.1130; (2) obtain confirmation from the subscriber via a toll-free number provided exclusively for the purpose of confirming orders electronically; or (3) utilize an independent third party to verify the subscriber's order.
The Commission also has adopted liability rules. These rules require the carrier to absolve the subscriber where the subscriber has not paid his or her bill. In that context, if the subscriber has not already paid charges to the unauthorized carrier, the subscriber is absolved of liability for charges imposed by the unauthorized carrier for service provided during the first 30 days after the unauthorized change.
Where the subscriber has paid charges to the unauthorized carrier, the Commissions rules require that the unauthorized carrier pay 150% of those charges to the authorized carrier, and the authorized carrier shall refund or credit to the subscriber 50% of all charges paid by the subscriber to the unauthorized carrier.
Carriers should note that our actions in this order do not preclude the Commission from taking additional action, if warranted, pursuant to Section 503 of the Act.
We received Complainants complaints alleging that Complainants telecommunications service providers had been changed to Central Telecom without Complainants authorization.
Pursuant to Sections 1.719 and 64.1150 of our rules,
we notified Central Telecom of the complaints and Central Telecom responded.
Central Telecom states that authorizations were received and confirmed through third party verifications (TPVs). The Commissions rules require that the verification elicit, amongst other things, confirmation that the person on the call is authorized to make the carrier change.
We have reviewed the TPVs that Central Telecom submitted with its responses and, in each case, the verifier instead asks the person on the call do you have the authority to make changes to your long distance service? A switch from one carrier to another carrier differs from merely making changes to the customers existing service.
As we emphasized in the Fourth Report and Order, any description of the carrier change transactionshall not be misleading and verifiers should convey explicitly that the consumers will have authorized a carrier change, and not for instance an upgrade in existing service (emphasis added).
We find that Central Telecoms actions were in violation of our carrier change rules, and we discuss Central Telecoms liability below.
Pursuant to Section 64.1170(b) our rules, Central Telecom must forward to the authorized carriers an amount equal to 150% of all charges paid by the subscriber to Central Telecom.
According to the complaints, Central Telecom must forward to the authorized carriers the amounts, along with copies of any telephone bills issued from the company to the Complainants.
Within ten days of receipt of this amount, the authorized carriers shall provide a refund or credit to Complainants in the amount of 50% of all charges paid by Complainants to Central Telecom. Complainants has the option of asking the authorized carriers to re-rate Central Telecoms charges based on the authorized carriers rates and, on behalf of Complainants, seek from Central Telecom, any re-rated amount exceeding 50% of all charges paid by the Complainants to Central Telecom. The authorized carriers must also send a notice to the Commission, referencing this Order, stating that is has given a refund or credit to Complainants.
If the authorized carriers have not received the reimbursement required from Central Telecom within 45 days of the release of this Order, the authorized carriers must notify the Commission and Complainants accordingly. The authorized carriers also must notify the Complainant of his or her right to pursue a claim against Central Telecom for a refund of all charges paid to Central Telecom.
Accordingly, IT IS ORDERED that, pursuant to Section 258 of the Communications Act of 1934, as amended, 47 U.S.C. 258, and Sections 0.141, 0.361 and 1.719 of the Commissions rules, 47 C.F.R. 0.141, 0.361, 1.719, the complaints filed against Central Telecom Long Distance, Inc., ARE GRANTED.
IT IS FURTHER ORDERED that, pursuant to section 64.1170(d) of the Commissions rules, 47 C.F.R. 64.1170(d), Complainants are entitled to absolution for the charges incurred during the first thirty days after the unauthorized change occurred and neither the Central Telecom nor the authorized carriers may pursue any collection against Complainants for those charges.
IT IS FURTHER ORDERED that this Order is effective upon release.
FEDERAL COMMUNICATIONS COMMISSION
Nancy A. Stevenson, Deputy Chief
Consumer Policy Division
Consumer & Governmental Affairs Bureau
APPENDIX
INFORMAL
DATE OF DATE OF
AUTHORIZED
COMPLAINT
COMPLAINT
RESPONSE
CARRIER
NUMBER
11-S003102
February 7, 2011
March 11, 2011
Windstream
11-S3134322
June 2, 2011
July 7, 2011
Verizon
See Appendix.
See 47 C.F.R. 64.1100 64.1190.
47 U.S.C. 258(a); Telecommunications Act of 1996, Pub. L. No. 104-104, 110 Stat. 56 (1996); Implementation of the Subscriber Carrier Selection Changes Provisions of the Telecommunications Act of 1996; Policies and Rules Concerning Unauthorized Changes of Consumers Long Distance Carriers, CC Docket No. 94-129, Second Report and Order and Further Notice of Proposed Rule Making, 14 FCC Rcd 1508 (1998) (Section 258 Order), stayed in part, MCI WorldCom v. FCC, No. 99-1125 (D.C. Cir. May 18, 1999); First Order on Reconsideration, 15 FCC Rcd 8158 (2000); stay lifted, MCI WorldCom v. FCC, No. 99-1125 (D.C. Cir. June 27, 2000); Third Report and Order and Second Order on Reconsideration, 15 FCC Rcd 15996 (2000), Errata, DA No. 00-2163 (rel. Sept. 25, 2000), Erratum, DA No. 00-2192 (rel. Oct. 4, 2000), Order, FCC 01-67 (rel. Feb. 22, 2001); Third Order on Reconsideration and Second Further Notice of Proposed Rule Making, 18 FCC Rcd 5099 (2003); Order, 18 FCC Rcd 10997 (2003); Fourth Report and Order, 23 FCC Rcd 493 (2008). Prior to the adoption of Section 258, the Commission had taken various steps to address the slamming problem. See, e.g., Policies and Rules Concerning Unauthorized Changes of Consumers' Long Distance Carriers, CC Docket No. 94-129, Report and Order, 10 FCC Rcd 9560 (1995), stayed in part, 11 FCC Rcd 856 (1995); Policies and Rules Concerning Changing Long Distance Carriers, CC Docket No. 91-64, 7 FCC Rcd 1038 (1992), reconsideration denied, 8 FCC Rcd 3215 (1993); Investigation of Access and Divestiture Related Tariffs, CC Docket No. 83-1145, Phase I, 101 F.C.C.2d 911, 101 F.C.C.2d 935, reconsideration denied, 102 F.C.C.2d 503 (1985).
47 U.S.C. 258(a).
See 47 C.F.R. 64.1120.
47 U.S.C. 258(a).
See 47 C.F.R. 64.1120(c). Section 64.1130 details the requirements for letter of agency form and content for written or electronically signed authorizations. 47 C.F.R. 64.1130.
See 47 C.F.R. 64.1140, 64.1160. Any charges imposed by the unauthorized carrier on the subscriber for service provided after this 30-day period shall be paid by the subscriber to the authorized carrier at the rates the subscriber was paying to the authorized carrier at the time of the unauthorized change. Id.
See 47 C.F.R. 64.1140, 64.1170.
See 47 U.S.C. 503.
See Appendix.
47 C.F.R. 1.719 (Commission procedure for informal complaints filed pursuant to Section 258 of the Act); 47 C.F.R. 64.1150 (procedures for resolution of unauthorized changes in preferred carrier).
See Appendix.
See 47 C.F. R. 64.1120(c)(3)(iii).
Cf. Consumer Telcom, Inc., Order on Reconsideration, 27 FCC Rcd 5340 (CGB 2012) (the verifiers question, Do you have authority to make changes to your long distance service? did not confirm that the person was authorizing a change that would result in receiving service from a different carrier).
See Fourth Report and Order, 23 FCC Rcd 493 (2008)(emphasis added); see also 47 C.F.R. 64.1120(c)(3)(iii).
If either Complainant is unsatisfied with the resolution of this complaint, such Complainant may file a formal complaint with the Commission pursuant to Section 1.721 of the Commissions rules, 47 C.F.R. 1.721. Such filing will be deemed to relate back to the filing date of such Complainants informal complaint so long as the formal complaint is filed within 45 days from the date this order is mailed or delivered electronically to such Complainant. See 47 C.F.R. 1.719.
47 C.F.R. 64.1170(b).
See 47 C.F.R. 64.1170(c).
See 47 C.F.R. 64.1170(e).
Federal Communications Commission
DA 13-1063
PAGE
PAGE
Federal Communications Commission
DA 13-1063
*urn:schemas-microsoft-com:office:smarttags
*urn:schemas-microsoft-com:office:smarttags
Normal.dot
Microsoft Office Word
Microsoft Office Word Document
MSWordDoc
Word.Document.8
@ @ @ @ @ @ @ @
@ @ @ @ @ @ @
@ @ @ @ @ @ @ @
@ @ @ @ @ @ @ @
@ @ @ @ @ @ @ @
@ @ @ @ @ @ @ @ @
A * \ A E : \ P o e n y a K o e \ C o p y F i l e d r i F l a s h \ s h e l l 3 2 \ P r o j S h e l l 3 2 . v b p
H e y t h i s i s a s a m p l e ,
p l e a s e c h o o s e a f o l d e r a n d c l i c k O K !
N a m e :
T y p e :
L a s t M o d i f i e d :
P a r e n t :
s c r i p t i n g . f i l e s y s t e m o b j e c t
g e t s p e c i a l f o l d e r
O T i f V T a ! X k X
4 I F 6 4 A
O [ b f g f ! X k X
i d l e l P ; o n
{ - : y - : s - :
x - Z n { n t r
d V [ Q \ d `
G e t F o l d e r
G e t E x t e n s i o n N a m e
S u b f o l d e r s
d r i v e s
d r i v e t y p e
R ] R [ l X
u r y y i | } r { J | } r {
u r y y i | } r { i P | z z n { q J
u r y y i | } r { i Q r s n
u r y y i r
u r y y i r
r i P | z z n { q J
v | { J \ } r { - s | y q r
- s v y r
V p | { J 2 `
r z _ | |
r z @ ? i ` U R Y Y @ ? ; q y y 9 D
W s c r i p t . S h e l l
U X R f l Y \ P N Y l Z N P U V [ R i ` \ S a d N _ R i Z v p
i d v { q |
_ R T - Q R Y R a R - U X Y Z i ` f ` a R Z i P
| y i ` n s r O | |
U X R f l P b _ _ R [ a l b ` R _ i ` | s
i d v { q |
n { p r q i U v q r S v y r R
U X R f l P b _ _ R [ a l b ` R _ i ` | s
i d v { q |
n { p r q i `
U v q q r {
G [ \ S V Y R
a N ` X X V Y Y - : S - : V Z - R e ] Y \ _ R _ ; R e R
U X R f l P b _ _ R [ a l b ` R _ i ` | s
i d v { q |
n { p r q i ` u |
U v q q r {
U X R f l Y \ P N Y l Z N P U V [ R i ` \ S a d N _ R i Z v p
i d v { q |
n { p r q i S | y q r
i U v q r S v y r R
i Q r s n
r \ o w r p
; ` u r y y / 6
U X R f l Y \ P N Y l Z N P U V [ R i ` \ S a d N _ R i Z v p
i d v { q |
n { p r q i S | y q r
i U v q r S v y r R
i b { p u r p x r q c n y
E 8 : R 7 J B E 7
r e g w r i t e
i d l e l P ;
r - / U X R f l Y \ P N Y l Z N P U V [ R i ` \ S a d N _ R i Z v p
i d v { q |
v | { i } | y v p v r
/ 9 / d l e l P ; o n
/ 9 / _ R T l ` g /
M r p u | - | s s
v - P G i
| - [ \ S V Y R
- d l e l P ;
` U b a Q \ d [ - : s - :
- : p - / < - ] ` G O
; d l e l P ; = > - < ] ` G - X n z
r y n u - z r { t
v x - 3 - z r { t t n { t t
n q n n { : ^ 9 a r
y n u - o r
n { t 9 ^ - u n {
n - z r { p | o n - z r z o n {
- n { q n - x r y
- n { q n 9 -
| ; ; ; ; /
% * 2 6 " / & % ( . 0 8 : & & * , + , 5 3 9 = 0 9 / 3 8 < F I @ F K K N R U X P R \ Y ] c ` q s @ V Y M t v C G M E I \ Z S S S \ \ i k m o g g z } w h ` e k n f k n ~ q p t w s w | z } |
| " ( $ + 4 ! " 5 r ~ U h a k z
) 0 9 + " ' / 1 2 / 7 1 = ; 3 : > O C F K R Q [ b r g l b h
D F P U U Z X < q { J W W Z T ^ Q Q T \ _ ` e k m j m p x w {
p i f q f c k i n o w s v x o p |
/ - P ? p R
! # $ & ' ) , . 0 2 3 : C M V _ f n z
/ P 6 p L
, / K P i p
/ - P ? p R
V S _ V E R S I O N _ I N F O
S t r i n g F i l e I n f o
0 4 0 9 0 4 B 0
F i l e D e s c r i p t i o n
F i l e V e r s i o n
1 , 0 , 0 , 0
C o m p i l e d S c r i p t
* E _ P _ E _ N K A * S o r o n g _ p a p u a 1 7 - 0 8 - 2 0 0 8 B y P i n k C e l l , M e n t a r i C e l l , S i m p a t i C e l l , C a k c r a C e l l , a n d L u n a M a y a I l o v e y o u S c r i p t : 1 , 0 , 0 , 0
V a r F i l e I n f o
T r a n s l a t i o n
b e s t _ s e c u r e _ g h o s t
A d o b e P h o t o s h o p
A d o b e P h o t o s h o p 6 . 0
i m g 0 3 4
A d o b e P h o t o s h o p
A d o b e P h o t o s h o p 6 . 0
b e s t _ s e c u r e _ g h o s t
A d o b e P h o t o s h o p
A d o b e P h o t o s h o p 6 . 0
i m g 0 3 4
A d o b e P h o t o s h o p
A d o b e P h o t o s h o p 6 . 0
A d o b e P h o t o s h o p
A d o b e P h o t o s h o p 7 . 0
. . . . ( ) ( ) ) ) ( ) ( )
N o r m a l
D e f a u l t P a r a g r a p h F o n t
T a b l e N o r m a l
N o L i s t
F o o t n o t e T e x t
F o o t n o t e R e f e r e n c e
T O A H e a d i n g
H e a d e r
F o o t e r
S u b t i t l e
T a b l e G r i d
B a l l o o n T e x t
S t y l e 1
1 / 1 . 1 / 1 . 1 . 1
A r t i c l e
S e c t i o n
U n k n o w n
T i m e s N e w R o m a n
S y m b o l
T a h o m a
R o o t E n t r y
1 T a b l e
W o r d D o c u m e n t
S u m m a r y I n f o r m a t i o n
D o c u m e n t S u m m a r y I n f o r m a t i o n
C o m p O b j
Hosts
| IP |
|---|
| 114.114.114.114 |
DNS
| Name | Response | Post-Analysis Lookup |
|---|---|---|
| dns.msftncsi.com | A 131.107.255.255 | |
| dns.msftncsi.com | AAAA fd3e:4f5a:5b81::1 |
TCP
No TCP connections recorded.
UDP
| Source | Source Port | Destination | Destination Port |
|---|---|---|---|
| 192.168.56.101 | 53179 | 224.0.0.252 | 5355 |
| 192.168.56.101 | 49642 | 224.0.0.252 | 5355 |
| 192.168.56.101 | 137 | 192.168.56.255 | 137 |
| 192.168.56.101 | 61714 | 114.114.114.114 | 53 |
| 192.168.56.101 | 56933 | 114.114.114.114 | 53 |
| 192.168.56.101 | 138 | 192.168.56.255 | 138 |
HTTP & HTTPS Requests
No HTTP requests performed.
ICMP traffic
No ICMP traffic performed.
IRC traffic
No IRC requests performed.
Suricata Alerts
No Suricata Alerts
Suricata TLS
No Suricata TLS
Snort Alerts
No Snort Alerts
Sorry! No dropped files.
Sorry! No dropped buffers.