1.5
低危
DACN
0.12
FACILE
1.00
IMCLNet
0.92
MFGraph
0.00
反病毒引擎
| 查杀引擎 | 查杀结果 | 查杀时间 | 查杀版本 |
|---|---|---|---|
| Alibaba | None | 20190527 | 0.3.0.5 |
| Avast | Win32:Gepys-E [Trj] | 20200116 | 18.4.3895.0 |
| Baidu | Win32.Trojan.Agent.eq | 20190318 | 1.0.0.2 |
| CrowdStrike | win/malicious_confidence_100% (D) | 20190702 | 1.0 |
| Kingsoft | None | 20200116 | 2013.8.14.323 |
| McAfee | Generic-FAGO!CC22CA96DEB9 | 20200116 | 6.0.6.653 |
| Tencent | Malware.Win32.Gencirc.10b44c6d | 20200116 | 1.0.0.1 |
静态指标
可执行文件包含未知的 PE 段名称，可能指示打包器（可能是误报）
(5 个事件)
| section | .rdata6 |
| section | .rdata5 |
| section | .rdata4 |
| section | .rdata3 |
| section | .rdata2 |
文件包含未知的 PE 资源名称，可能指示打包器
(1 个事件)
| resource name | None |
动态指标
在 PE 资源中识别到外语
(2 个事件)
| name | RT_VERSION | language | LANG_RUSSIAN | filetype | None | sublanguage | SUBLANG_RUSSIAN | offset | 0x0003e0a0 | size | 0x00000188 | ||||||||||||||||||
| name | None | language | LANG_RUSSIAN | filetype | None | sublanguage | SUBLANG_RUSSIAN | offset | 0x0003e228 | size | 0x0000000b | ||||||||||||||||||
该二进制文件可能包含加密或压缩数据，表明使用了打包工具
(2 个事件)
| section | {'name': '.rdata', 'virtual_address': '0x0000c000', 'virtual_size': '0x0002b24a', 'size_of_data': '0x0002b400', 'entropy': 7.571638478965566} | entropy | 7.571638478965566 | description | 发现高熵的节 | |||||||||
| entropy | 0.7863636363636364 | description | 此PE文件的整体熵值较高 | |||||||||||
网络通信
与未执行 DNS 查询的主机进行通信
(2 个事件)
| host | 114.114.114.114 | |||
| host | 8.8.8.8 | |||
文件已被 VirusTotal 上 61 个反病毒引擎识别为恶意
(50 out of 61 个事件)
| ALYac | Trojan.Lethic.Gen.11 |
| APEX | Malicious |
| AVG | Win32:Gepys-E [Trj] |
| Acronis | suspicious |
| Ad-Aware | Trojan.Lethic.Gen.11 |
| AhnLab-V3 | Trojan/Win32.Shipup.R61194 |
| Antiy-AVL | Trojan/Win32.ShipUp |
| Arcabit | Trojan.Lethic.Gen.11 |
| Avast | Win32:Gepys-E [Trj] |
| Avira | TR/Crypt.XPACK.Gen |
| Baidu | Win32.Trojan.Agent.eq |
| BitDefender | Trojan.Lethic.Gen.11 |
| BitDefenderTheta | Gen:NN.ZexaF.34082.qO3@aaJL92fc |
| CAT-QuickHeal | TrojanPWS.Zbot.Y |
| ClamAV | Win.Trojan.Redirect-6055402-0 |
| Comodo | TrojWare.Win32.Kryptik.AYQE@4wlbfl |
| CrowdStrike | win/malicious_confidence_100% (D) |
| Cybereason | malicious.6deb9d |
| Cylance | Unsafe |
| Cyren | W32/Zbot.JC.gen!Eldorado |
| DrWeb | Trojan.Redirect.140 |
| ESET-NOD32 | a variant of Win32/Kryptik.AYQE |
| Emsisoft | Trojan.Lethic.Gen.11 (B) |
| Endgame | malicious (high confidence) |
| F-Prot | W32/Zbot.JC.gen!Eldorado |
| F-Secure | Trojan.TR/Crypt.XPACK.Gen |
| FireEye | Generic.mg.cc22ca96deb9d1e0 |
| Fortinet | W32/Kryptik.AYUW!tr |
| GData | Trojan.Lethic.Gen.11 |
| Ikarus | Trojan-Dropper.Win32.Gepys |
| Invincea | heuristic |
| Jiangmin | Trojan/ShipUp.jr |
| K7AntiVirus | Trojan ( 004cf6b81 ) |
| K7GW | Trojan ( 004cf6b81 ) |
| Kaspersky | HEUR:Trojan.Win32.Generic |
| MAX | malware (ai score=84) |
| Malwarebytes | Trojan.Dropper |
| MaxSecure | Trojan.Malware.300983.susgen |
| McAfee | Generic-FAGO!CC22CA96DEB9 |
| McAfee-GW-Edition | BehavesLike.Win32.PWSZbot.dh |
| MicroWorld-eScan | Trojan.Lethic.Gen.11 |
| Microsoft | TrojanDropper:Win32/Gepys.A |
| NANO-Antivirus | Trojan.Win32.ShipUp.crgjdf |
| Panda | Trj/Hexas.HEU |
| Qihoo-360 | HEUR/QVM19.1.995D.Malware.Gen |
| Rising | Dropper.Gepys!8.15D (TFE:dGZlOgHQTzgPvu/ndQ) |
| SUPERAntiSpyware | Trojan.Agent/Gen-Kryptik |
| Sangfor | Malware |
| SentinelOne | DFI - Malicious PE |
| Sophos | Troj/Gyepis-A |
二进制图像
288x288
224x224
192x192
160x160
128x128
96x96
64x64
32x32
运行截图
暂无运行截图
该样本运行过程中未生成截图
PE Compile Time
2013-04-12 13:03:39
PE Imphash
ad85ba03261e99bff7a2e6e105980f2a
Sections
| Name | Virtual Address | Virtual Size | Size of Raw Data | Entropy |
|---|---|---|---|---|
| .text | 0x00001000 | 0x00000b7f | 0x00000c00 | 5.511839699727105 |
| .text | 0x00002000 | 0x00009c8c | 0x00009e00 | 0.09802137657953752 |
| .rdata | 0x0000c000 | 0x0002b24a | 0x0002b400 | 7.571638478965566 |
| .data | 0x00038000 | 0x000000d8 | 0x00000200 | 1.6250737097904584 |
| .rdata6 | 0x00039000 | 0x00000328 | 0x00000400 | 3.5047036740290105 |
| .rdata5 | 0x0003a000 | 0x00000064 | 0x00000200 | 0.712453444966878 |
| .rdata4 | 0x0003b000 | 0x00000064 | 0x00000200 | 0.712453444966878 |
| .rdata3 | 0x0003c000 | 0x00000064 | 0x00000200 | 0.712453444966878 |
| .rdata2 | 0x0003d000 | 0x00000064 | 0x00000200 | 0.712453444966878 |
| .rsrc | 0x0003e000 | 0x0001c238 | 0x00000400 | 2.1257277486942723 |
Resources
| Name | Offset | Size | Language | Sub-language | File type |
|---|---|---|---|---|---|
| RT_VERSION | 0x0003e0a0 | 0x00000188 | LANG_RUSSIAN | SUBLANG_RUSSIAN | None |
| None | 0x0003e228 | 0x0000000b | LANG_RUSSIAN | SUBLANG_RUSSIAN | None |
Imports
Library KERNEL32.dll:
• 0x40c008 lstrcatA
• 0x40c00c VirtualAlloc
• 0x40c010 ReadFile
• 0x40c014 GetSystemDirectoryA
• 0x40c018 CreateFileA
Library ADVAPI32.dll:
• 0x40c000 RegOpenKeyA
Library msvcrt.dll:
• 0x40c030 _XcptFilter
• 0x40c034 __getmainargs
• 0x40c038 __p__commode
• 0x40c03c __p__fmode
• 0x40c040 __set_app_type
• 0x40c044 __setusermatherr
• 0x40c048 _acmdln
• 0x40c04c _adjust_fdiv
• 0x40c050 _c_exit
• 0x40c054 _cexit
• 0x40c058 _controlfp
• 0x40c05c _except_handler3
• 0x40c060 _exit
• 0x40c064 _initterm
• 0x40c068 _wcsicmp
• 0x40c06c exit
• 0x40c070 mbstowcs
• 0x40c074 wcslen
• 0x40c078 wcsstr
L!This program cannot be run in DOS mode.
W*6D6D6D6)W6D?6D6E6Dd
6D6D6Dd
6DRich6D
`.text
.rdata
@.data
.rdata6
@.rdata5
@.rdata4
@.rdata3
@.rdata2
@.rsrc
]U]U@E
]U]UQE
]UQEPh
lUR\Ph
snRpPM
skRpPu
3_^[]U
IFPtQAj@eU2
BSd:Pr'KE>2
BSd:Pr'KE
GlSnWA
FWVoviQtKA
FMqGlcSnjWW
X@ts^Ar]c
;_aV[e9TF/W
X@t3^P
>SpG^o2
bDu_n&wxS&
}' <'9&
$V}9W}X
YVQldnD
SVyMB6
W+uFPXi
7)a2>$
656aHuzd
PIf/^y
G#z4X=
Y)jK}Tp
Sf&4m?}sn51]
O#|\aQC
7HEMEh
c'RAZ:
B9^d+]2
2b*)ZGRdF4b\bQBrM
X;X3X-2
p_dJcB@/
Qa~TQBC
||sxt1S
c||X-+B@bz
~z{`N`
|2d \
;O9,ad'c
2rsabb
bP}36MtA
[J`Lt2
h"R{R6~0~Lh
xtLaUx+4U^oI
2z^V\%
Prlbjx2J,
l5P/1,P
=m_2^Na
SrFJ41
&KV4b8
JN"`2CXb">V:.bV|"
:PLvTR
`t?~-bb
bSf]T:rbVpTy?
Nc4kDT]"
d:PI}=12
s6T*GP"' >2rT"Q!P+N
rTiUay.sQpK
4QFwSK~?2m22
vdVGVL>l>X
FZ$Q&X\
{>[Pil
YP:r3b&e2
&22|C@
^IIfV=CWd
l2tx~Z=6=6
1c_|r)%Oero2
ci2j/0j/3h 2@W
fD13{zUN
pSjum00
2G~FB^
O=v)0jE
Z$`Kx2
2C@du
W9#6^}_
fE13K|z*
OB^.#6
sfj6G*`h
iE1QxV
nOE|s@KP9]i
2v<d#j
`2s2P2<=V0j
f513|r$N~s
Wv(xB387WxB40;7
=rJF!v6FbCc^C
2jtFob`M3
bJC@/d~$
/1s1031
WP~ '@
tm+Emc
Q*R}ir3(]A1
#FE<_[ 1)
Ei{no
91f,B
W<cFR{
2@"6E&
29B@ZtZq/bz=B@_Ztj G
o gC G
;2Y\:42
8;nV}_93F>F
=hZg+R
/2j2;2
L6To}`j
D;EOeC@_ZOr
EOP2_0oXw
6:]E7j
A[gvyg
R/,$N.3p
F0_2b_
4PaSUy9j1=V0
P?8iT6
c3bfd O>jE
G+;l;Q4E
2j;m2H)?@6SpG<
ouVud2
/u6ud2
=0F?7
M=^J^sXz
cAV2J5~G3+c
?dJIzjE
32^GA2jM
@G;oTV
53Na[Vf
L^ZO/:S
W(6D#W
tJ?AdUW+
I1r\av
5jhlJyr
;6 52bU5$^,%,b
hNv'!X
H"m[&_
73$fV@
1fG|cS7%
3p$h^l(eWw$
pF.@\xV#
zC!2@%J
cFH+FX<=Y$
\Y$s3 6)*82r^)
2M]W3jZG
?P`2q/J
wt][LN^q
2;EXsm6
4EiLsQ;.<(
TMFC'|3
^V zEhH
pE[}Xs
&YO.C6s0P
BEQ=:nE5YQ
As@&-3r
#AIF_3)bA2<QuG5
2PuE'H)
*aLs~F
K>2Y70
iTbdhgr
rV]!237jm"j
4{`Vp87o
_E;vIb
^=:]7r
ft0W}EEz0
7lG<bX&9
Qv\$?{47IcrP
?!rqP}|%;
N o4zG
e::Xd{sd
~ySIEkb_\M
/0r/Zi$
h*A6 eb(
/LjSWK[23WF
8nvG+w;<
0KiU\)eY)UhME
0Eb-8}QHzKxq fs
A} |_~D
D0;D0jD/p
cDw@Q,;bbbX
bJTC@/1v}?;I2
%u/W$t
IQfyxy
0Ef7QH
c Ue P]:(^3v
lVF3:*
8Z(`E1~
1_oa^1
Y(`I+6_
xC@ 2c&_
Ir[}|o.
3c~Kx;~
(b0}MIt
/7bb_tzs3
iY*G/^c1P2C@7u/
EgO13
y6jOP\
iYHe:C@/7k
YMEr20
.rnpygk
31{du0'@
<Ldu0A
Q;Wz;Q8\
?".:r*/AG]
bj_*{7
3*ts$v
3?_\i;
Lj92x8-egv_\M
vl[Inp
0t,1GLH
t*u1Y#_0
0]{t:+GAP:#
QDES|Yp|
\tVV~~8b)bj
u#\+5gw
L}{]KvM7~u
w1O;I2R
WZSC(UjV
Y~$j|F
?S7%kT1
fr6UvV;jBT
};Zu25
A9Os1_?8
&$vu0((V
\:HUaV
!RjF(xl
5I`k+t_
~*0NFI
P{CASQ{CASQ{CASQ{C_
JA}Aq92bl:sb4rl6Ccb4s
gv9~$3sb4s[
fu}"1rFl
da\q^ 2
l*s~$3bU0
%Z1#ht
$b@_bz
G_D7$PFI
@BP{RF
6==El@
3*fb*erWC
fuC@Tc
2_1Pp2;2
o^t\|*6
Vj^=y_;BO;
Z=YTpW
I,o3vY
ft,G*E
6tZ)QIpDu
O]O<IE
~p`UJFXG
,*d\f+A&52
xeeia2
0Z|Wb\
=t5 RYz}5
`U[kxmhg\
[V-h_W
[=h[vg?_3i
Pj*fbVvU'2lJ
{hfR0=hs
H4o2u3]{p
}EUU%z
0Rg5U3UG8td
~F2m;2x!
;WL<?t
do\@v;F
2u_UFi
r#\RKR
aSs_AaQ
P\u>Y$
:?s1bQ>LSmV
29/@| 7Kw ;Kw| ?fKw
,^fTb6
3oQvj1
e)XO,)m
x\Bs0u\S0l/:70
|T'\p^zQpn
3bI6D4
*nU5CV\PUw
_L<peFfW`h
k^DDUs
^4ieiY1t:HtR0tJ#
kQuUYI
q(}}>}D
4|D}|(A
n8X_5q}
3wZ|ju
o]M+I)F
:Q:eoV}:X9lX4cQeY
EYMM 0o7F
)]?B?X
2Ay=;V
Ubhd_iyQTai
]9[W;F
PK>b;.;
2;[3K"\x
7xvGfX0oep+e1
1tR$X\E
k nkq5#^kaE'nzmQU+^mAe/.m13
v}=^uYGFuupRum Ru0RuL} RuL0RulQuliQyu
i5QYu,i-QIu,)EQ9u)=Q)u35}t9}St|CWu
|SWu-ui
X#/#_2
h/b|x97
\aq3p1
2=X6Kq
72=Bq9
o?G @3
nixY}";
\EwUY|
11POKMFi3D0t
5htwY}6:
0PbQKMF
V$am~H
6K8]W{
TuF[thK9
hhfb\:lyh
2jF"~Abfn
id3U~QBL
2u|VxmA(uu
&A,S, F
_,u3 wu+
d}v/qt/u0mK
{y7P,uipV5n
q/cqupq
feC[nf BS
Vt!BfYH
<sxc\A6M2
rRk>jdG
{n[nd42
yZ@-<n
V`B.|:6|
WRzPBs
}222/t2}|2
t2v22p2
22c2x2%p21x2Cp2G22
2y2222sy2
qCMs67bc6 0s
ASRdfa;cW
rGne30
sVAb+"V
dmmlnn0
SsQhWn
29I@(A@%aUT@
y@u{Sy2
pGr^Sy2
P{PnePa2
kWsCwK
q^d>_k^d_
_^kZg3O;7
p-15519-=)a
ipmTqHuLy
]daXe\imiwesao}kY]VYR||enxaJtMFxIBlU^pQzdd}vh`yr\\
`XTmXiLuPq
<<%.@8!
:$$=6( 93
*51i]eYaMf]Iby5Nu1Jq
RI%~E!zA-=)miuq)
vGrzKkn~O
jbSsffW
]dAxE|IPMQQUUYYm}a
M}IEA]YUeQim]iTfHbL~`z
:%$:6!(62
-!OmfoI
",PrV2p
.@ =>yU
qX5R.[31
)+)*<ow
lcVmz{Qr
YEQI50
%8CF;CF
W"f"x"
":y"4q"Zi"a"Y"
I"dA"9"
"*!3/!3!
~!{~!So!Io!
!sx!/x!M!;o!n!
!!ay!#u!
!%!At!
H=DCCCCCC2
IMM[MIM%NM[J)JLL
/C4Ot#Wl+6%
Bo~aBe
AEWo`Gi{p
;caHeaC$
UX?}ff^qzG^Q]L
2&go\PU?6@V!?:C2
XFC`]aq}~ic
d`N1|^l
Qd|@i1c
~o>qcL}^eFoc
\c?msSSe20
w[aj<Wohz0
I[abF]rUEW
4RkWsRDC2EsCa
6C4Ot+Wn"AE
FdkWRo
PohqGhe
^iKSgcp
1fezf|^
0fa\gI7cELGc
v KyVE.2
,yn6Ya;Her2
?oo\Uas|yn\QnL|2
YnYa{Her
ynYa[He
-Fy[lB
ct4\uKVfY0
Omr+Va `r%ms
JmtoBrk_\PtReu/
pVhg_llca
xeFt_TF/Be4
ktS^a0Ze"Nc+)p ;>-_
_4])r6f
{oqa{pu
Jdbd_miTu
H2L/\73[
0FYn@qOQUq[JVU\d\]
2&/t@&
veSFeYtF}Ql
flL^l0~2
fl\Uty^u:
{?SJdaSU
zFem[ctVI}@eR\t?
EtKDo4
StJEtKDo
PtRoSdUrSn
SaAFe.U
f6Q Fy'FfPma
!UCORtp09
AUap`wr_iicgigeehoh
8RtcgE4e[%}uU+
Zby[g`;wowc2
UUYc/2
UH:U(&[J
@F%y?:)t
U@zfuwc
=A1951)
dFdFdF1dF
d22m2Y2E2I2m2Y2221
22j2b2j2b2j2b2j2b2
#2-+2$2$2$2m$2
/aZe^i-\m
`q%du)hy|/
/AD6tE@:xIL
OK3773;_
dx`tllqhhmTtPp\\
DD@@LLHH4T0
YYYYYYVxVxUE]EUE]EUE]EUEa
v L2h}]H
yi`8(s
U`z!_@.B:
DDTQWTTM
L=T)MZ
Kk$;03QpY>
2<aWm6B
"%=]*9i
()J0>3]
.BHF% ?kE7 X55U&/
2tP\bj{QQ
yq)_r"
DynM@Jw/nons
8T^5l7xF=^w
T@BvPxA
:<*V*6
D!djz=
_3-bekAyi&eDta'
'pU)d` *
\eDDC>"C
U1^3jF
S^td"C;
rY:#`
/P QZb
^(/YUjX
f=?#QZj7w#
bNB>o;S>c_ W_ZJ
<AQ~SNr_&\ZnfHGT
C4ctAOcJ
5?gle{
A$fnw|
:P+&8m
!'wlHd
Q. U'td-md
1Ywn!xT(\aE
T_$Y8h
9eJ+>7wLO
`'{-6"mV
wN{u$2
4'Lr9\
j*hQ}]d/*,4&
|[,vR<9*
[\9vj
?*)kT;g|U
fg%:;7xbr
*E]OtVD@p>`5JA
[Kx~{5
EJ^q1f
`dj"<I%XI.a^qA8.?
7x26X.
@(u+YO-|XUrO
UmQuJ=2= g)
OTmcUq
L8}=(NDsq
%uuPmd<f/e
-OaR,P10qmG
6.p~m*
og/6"{7
1qHA2JVgV{[
D;lQ8\
+Vr9%Z3JpULInY
}x<BB1S
^zN}#S
5mC~nM
~Z!G?C0
#[Ou#+R
h,^ A%vDCqLr
o<WVK&YST1
"aZhMs
| qZuwh
!~v ^$=t?MB
b*>QY91>l$65
9{OnWEv
6X.}[Ep)<\
B|%z|`
3=C&c3|B
_rFp`4;^>M}N
2{MbMEo8uw0(L0
dQ{SftJYrc
ti7[4{8
H XV7v?
kUZiL(oJ
t|n9>cN
p2lI1?
Gu^P><
cY:=dU`q
{rSL|B
f$PKrf*"o
Lr%f7`
xLSaofCR<X9#
4~E=a&cN
m]APhW-
CD6sDN&spr#i;
9(Ud3a}
xUEW<&Y
D#@ z"
QpZ=H@
t>?C;Y
9O~hE=
!4EE"1A/4
]:*p[r:
m7t"K"W
R9/mVC
f(3M\|bp
DHusMsiiO-D
yl9h-% 2m|]i
|OJ-5&Y/x5T8/?J
7fytcR(
C[e+>W*
8 HF_Jh
AQL!~O:
E-30$ZH
q$,6`p:&{
_=%Ysi,2Qcw's=
L;wOHhESf
!Zb#<k
093yf&
A~F}=b
6DZPiM/3BEU
U$ECx%b#V
K/w=Kc?0
pC4Bhf2
?o7Jl$Q5w
P v_0@X{f^
8)]8[l
ar6*C3EA~ bp$H
a%4_,5wx_H
2RBI|{-@84GP
d|a6'_
7KUz!?y
6*Uy'b
tQgIG~ea
NhVa<;'p
mPtqJ8Vbd~I
b,7pDN/`Z-l9N~$
F*}# [R-
_FkNY)
]adPL8p
5hE<iL-LQ5|~7NG6G
24%`*z:
1T+G`Hi
w7,3'k'S
akH^+=T4
dOy-.@
F_}@j4
vNbu|A]
=B*g[P*
+&22[5s
8(s{*7C
hs!u6C+0z
D*)O6/6g7
J?Q4id
]c\?Pfq
hGcr"b
wwjRXe
|z-=3"UG
<y_wteW
~3E_MrTW
J\F 7:'C,Z
E+Kdr{2s
@3mFZSP\
.={ay=Hn<S
[muk.-
m~nM~u
17Ww'R^~a@h9Fr
4oz@w^^w
K=U621
n'ceR=7O;&sj15
+,/hlN k;/k+m
_.j!E@
k+SE-:Q
3mA<u>3_
DMvd->8`Z0S
eP+I@l
<I~CJoNx/kx}<G=
<G[2is
5S) 3.G5q4<
blTMW0X
mpKO=Ja
Sp0tv{G
cwVv^1g
F@Cryu\
x&wrp-
SD*Tl+
jKaf\>
*[Vz-r\
jZ9jNK
zZ'w(Ev
.4^=5a]Jd
3Lv4Zf
<&9wni^i
oWaIe2A
&ALX>;
^i6D\X/!I*[APEdU
d,(3q4
h-KE^K-I1
a*?Bc"
,^G9~R;
U)8%!V
xG;>k:
-Y=&vRTi
y~zSM63\+X
`xkBMXW2U3i3
#Ge])rp
pj=[0tw#x
>7SUF
+j_ljG
Kj9r(!
&n|m^xK\{1k
TJrFO1:
maf<?*NzI"K_vF
elS,H|@mof:O,%(
YPyhOG
r <!No#s
1da&f&:%
mun^(vUh
FOi0{q?,q)7
YR^zu.vRju(X*d
RS*eC_&V
t}Hnn,Z
X~"yPZe
/+oduWLcs
sV{2>:p
7b>wG4
%9R4Za[@3y|L&&0~
d&+^2zxwR
UWw$K|
Z0[?Sb6:k
y2KpaL];EJ7~Z[
5@ 16xj *
F3nGU!e&
>eA9rI7jk
QSzYxO[
4Xc;tK
SWrCKk#p `
?_5/BR8
.E5(tKF; v*_Y
RY3)J@
}`oG_N j$So(slo
B_#i4nI6a;oN```y
!E5?y{v"
lT$P"$L'fE/8I-Zm
YOP-#j4s)
ftBs)s25CY,+
aS)tSde
"drXAQ
@[o??OFsq
7!!<G1
$Dm5rUqy:J@cR
R!QyG-u<;|s
JbCy'qNr
!Q_PY]
=')Sa`@;'bou
Rn9fvd9'e
(\{zZ>HaJ
o3jbLie'
1[)/.4
)nvp=u
mQ=oz(n
B:A0HN$q&~MP
,^/)pL
*Q@yW?
McC|K@I
?sxy$@EF^Kt(
&-kYo.4o
n!~^~nB
m:n@I_J
(=JS-m
'"+:0e@*B
jf@r'.
H.4%dL
EvCCs;
8IC^\
ts{j,v
")OOqpp,
FO}7*],g
~|NHVg
YQ=Hkw
wFSZGu@
]2=|]w<
Txl$q1v,
[;vDC)
l2P_Db
uLt,4`DvJ x
`]3I >
lbl"SjR
IorzXB
&Rs!Aeo
,Ta2sk,]GK_F
DZs5+22
,l)q%%Lh!
XrO"Ve
v-=Mqo3rPO6e$
" !cYm!Qv9EfkL{N"Q
=u|Z58y7(,
>QK,\|R
0WKymkx
Y#SQ#:"*$w#
\J}%K_e:h
VWN@us:+RxD
-"oi<x
ip+`;2UH0
O[M"pL2Oy6(?
9b/w$**KI(27BZ
`WG*UD
-U5npq
>C1k6w
ysfO{t
`ua{>-eP
|rjl*O)
P v!{u1@Zh\
'GNxz-
EC4L]n\e
4`TIGX
M_^k!z"=y6D
TH2tdM1V<I
hmiUsjZT
tn\00B
kcC(4,
' <@PH
)ibI Wk
{"~NXm'
&A|CV=EiD34
L1C5MCT7j$l;s
2~z2'mJx6
iH{MI<Epo}
g5N:Dr.B7m
YcN/O,P3VMENex^p
rU-/'
cdQy}q )6q
454Z"RW(_`W9
RBV%Zs`95.
?u:w$Iv
SU^'tU
>$%@2#6 5"
+sct\rb^
jD%!e"yBU
F6[c0sYHS>
#guZ}S"`R
UU^$y[S
)(.Mc0
7dVBG>^
AW8~Z\dU
i&R2,2!{
@l%RO#Uy
* LX@2#.E^
96BNwB#c\ ^=?WBL/_5
6{~4~_
b2Qe0k
e&b*RB
0ec/CGj
g+27\t
nRl`7*N&i
`0Je`x@l
Pd: VS[
vH/9?-
ty5S
pH8MyIOY
sx-xl'0?&
mk=J<!vm
2Q:E<M>_0
#r5XN\r*o
\0Iv}5
lcGy$'Gba9
bsocGC%6
xO`.D~6
*-xi0sr
B4s.z;-\l
%"e{>Fi
hWNS\rzx.
zntA_/+
A9dAuF
1sQ,C)lK'4M
.6MvT6l{-x3V
U[RE*bKm
QKEPzj_
m(tFWuj
xCay<X
y7v]L*O/
KV%/GUBx
m,8 YoTeR
/*~z;yiAw
|[`n3j
=<spag
PIlJ1|
+opRL7
o]Vj(&Q
AZA=IG3
b\tVSMzN8z
UO=)U!;^Q
etExWA5G(
]YyJx
~,%rig(
ZR!I/2o
@R|rz?u
%K oaq
A/.W#zFv
gx[s|xl"cR^'
k;BXYf
p.< 2e
Z+nX+?;k4uw6VEC!Zl
)v~NJU8
4m-nW[H
n|2p^r3/'o
7EWwZfVrp$nC
2?F1'p
p^L+@i
9'%7DA
@6c}$%-E)
z!A(hV/L]u6p
SkHIh2f
wEad'x
)Z8^3t
#j>L=E
daG2,C^2{
Se\rJ.
Me@$7TJ)?;`
Zc/- q
_`H|\7A-z8N%0MO9J?E&
dg'A"v
b|AGA rzbV<
=S%/{^
~6A{F9>
GfJ{ A5d
+ZqQ)@ ch
QON\]Kv^
^#VHqo0
JWJ*IJ6Y
uD(ZdS>"1N
ZJluLt
a+ap]O!
,!t|R:
U3 F_+
-W6sns!@
:MkAAv
y{5 q49>%]ay&
b2/V]fYl3
K54NX<B
=[mxphZ
C2}X= z>
J"k?X+
G>e7yBQ.#
/l^YB$anbv4K)-2f
XP1,K08LJO /
/o ?J+WC&f'
cI!Gatyb7
&\_2jle
v>OTW+3QJ^1
22=lbUv
Z,r)vEf
27q!^U89
2*f[63
=`%)Or/w
>%GzS{T_`0E
IDfoRI
*t?DM!igq
_z|}rv
kX?}4T{8
zS2e1V
W1#'f%
q\-)nq!JPR
N#n2iE {<
ql;nV)]*NL""}~Z
>?.N2W
OH:r{`t_
u}z^WZgVM5lZ6RJr$
PqP+lu
5yFWH4
]>v&MeK6
rN>Fk*
( z!1]@$
V=|pcy
gB*TZ^
$:tl1#
DHc4SQ8F[mfjz
BfF!$U
GLb;Bb2f9g
P^QzPnK
?$-4g=R
r(U,4k
v,E=,\
mlgNu2~kw0eWSI
T7tv&8o
yVi,|\
9[nxn]e{,
1H~{>2s.
2zOAJL][d;^iG4?
%Ur:p)
o",`A
m%oxn*[
G+<xI`
B +%0ie$[H
>'c`HbN
289eue
E%C@5vZ\9
@\=z'(
~`{[1NB~
IWK@Y6XVcp
8qv_1D
D`%$Sl w?Cd99d
m<VU 4Sa)h
IP2QW\
r=/l1_ T0B,~
waX[ab
p hu"8k
EEbJK
ZE*NN+
< I:BU
+9 `A[s
s@m{(/2YQM+
k7/_*pBx/4
3l7Af\Gw
cz/swaxe"MW
8RL]YpJ
S1;<0;3F4b
;=~#~Ap
ENPQ-Re
e=C| KJ2&XO
#@y5gUF:hDtO
3ia_xt
q" _wH
1<Ad*z
P//-'Lq2q
\\p $\
Cz-uBoalq
U*&Am:
6:L/o8
Qq L22T\v~"iw
"NpkLM FPjz
f|-zh
o$<>diK
J}ZW`O
Ya)a|v*%t
tTjU`{
l)lPx+w
}GDI/1My
OZMNw[Z[f5sH
;G{W?
G _-0!TO4E
MAlQ#q2A
;?A;Y R+C
v]iu|sJe>
J|YAuS$y
R~P-Mq`JI\c}
([Q<M|
WTa;g=#oi
Jvg{of=H-?C
2Py$m{
H'/OZZ*M'#N
%1-hq-KlRJCr
@MT<=A=<|
j'Bs^mA
c3&g?>qaG
p"0St;|
`rf!xc
?u:S|G)
1MNoDr
l)h{X9GJo$U
la`Wt$
'|+[!+]
#+e?X+K)QH
'U`l9"
i}5ogZ
Wb$s(^
e:N+/G
#2O4qR>(
<-q/!dJ
lDO}9a
EtxQ<`}!
UaLJIh[eu
xW/=wKcau
L&^Ym%
,"SNv?G*%P!Vv
=T4?OeN
8J<+6:
EXzwdQwV
F=z}M-j
m M:f+^
P>3Ys2
P1yUm:33'
LaI8rhA
3~/Z9*
"oE PqMU|F
B>&!5%
yZ>!_]
FKm7qzp.}d
?~Y)xw8 9<3<
f6K~#1{~mI)(S
j,P,]1'.
FHlrU{^
t/bl"&hSPaa
KQ@!70H
h(f._*2An!]><IV
p}bcHl
6WJ.|{1
%I*Dn
F5|kp&
@T5=\Qz
Hv9zPNKd
m Hr+3'bE
2C*bPyYF
=dPXCB$
Kb[u9,r
@Z{ltWn
+kP'u/
V|})`HnFM
gJk%8-0
bo=TS-M.
opEI{%
\4@QhPEV
Hs!r!|
IJcT<'-}u
h*-[P$`~mB
Om7ZS}
ScFTlh
q FX<&,
:~Kp2$;yr
?)>10&61G[
=%6UZ^H4
^+N'h`
<t"hRaY
cLi8aJHgZ
KCs2Mj
RFqEc13B
KMng#t{
p_i&(;
'Ji]N2!VFg
>U1Cu Di
y9uBst&E
K+/b&2,]B
Y$%t5`
2Re1E&][
P7YO=O2
T>Re?*.
|d$Ro{I
_dQ"&eb
\LLB?_&
>+~70aA
KQ-(hK
U[4ys4
OY9M-:x
^o.N4u^= ,*E
E`%/-Z
X9PW'd
8p; _!je"'lRB
?yE6YO>.5^-<Hs
$w;OOR
1~4'zh
yl!ryW
pC0Jb#6GJP^wR udTB~
; |*Z
@lWD5p4Dy3
vQB\kT6
{B-;U$"
C2*qgo
OS?&6D
S[aPaCrTJMy)k
}A[o3(q
Q=f{l% AOj[d
lPw-lfYp[ h/
09Glmz;<k
: :gjw
npr=tV%
vpy3=e`
:s]?`;
4TA`n<;2Xn
be0PKXV
?tZqa<G~
v{7MwX
R-pnN` e
k,v^NV
0nyl52
w'{i5Kv
bdgcY2}e
rBVQCJ
:xaJ|PJG
Zj78W${
8r:xk)1G9@
bFJ QZr%^5
,/|(+S C
^d*u-j
(6QH|nXdFj
5g#ZpCE
@OJYp_4rm`$
&~3@G$33V2#
>bdtiTg<
|`Zii{j
A%QweC :
A/) DE
yXX:hj
Wty<`W\pD
&mD7wP{YI
I'*. k
$QB>PrdS
tA>|XO
%"X#Y|X3iE`dE
`38v{C$h #riT~:~|$
0Se9#{YKID
~ {\mToX
@!)z=?-w
K@*6)1)aT_
(K\VS}
xb/6n2c9-J1
WWh>ll\G
2rFPwXx3gmZD0gO!
%(93$9
JVFLX8
Am"3{(-Y5KC*"OPN[8
i,izs'
O%q8lpVT_
Fbf}?v
+fckvb
*9NfFC1V8
;m S0.-
!a|P W2
G1N;vR=V=SO'Rq)Va-!5JId{@
$z]*3TJxn DP`kL
M\v?Mf
,-;<Ns
BM nV$U15
TKanP ux
.3`BJ~_jN
!Vjq /WIzy
*_g\NCEwLT|
}.4QyUX+,
qCx$9l!}}jO
3!7)"B`V
^)c)>4."
b<w5La3
/1%u{jc
pgCXMe`|
| Mes4MK
$ $@"c O4'k
\Ln]%5
#Hh9{%P
:qPT p5I
z=a*=OQ5
,]q[e`Jl
'Y 4O;
?3Vexi
33:3DPm/
a;]^=H>
f_3;yJj:
d;HB/7
)rLF|)5X"mv2
Acw5,?crz;
us.]f;V
<z~C"DcBH
Cl+cHQ
87w*0bp
rLA5.jU
F#RhN}G
L6xH({v)vF
.Culp\
_@X|[z
jLy9=
AG\ A[%`
]?PzZL
o!ncP)hJ{
1D!zY2
9@=?TB
#*\RlE@
+&*.7\X;N
m~(kjPP&<h
?:4`S->'x
}fk&/
v]c8{D
ff31G)w(
'eIo@63
+*EL nK
FIvL)h`Dv
P$0C53
0+K\@{|W
wl!(Piweh
K}be%I
?.fbwD
Ou0*[c
2tiU^J
xtO,I/j
Dl4:G.
G2p}MJDu
&[[Zn(
$o1gj(
'EHR/X_
{:Kgl[N_
Y#GU,,u
:E[K4?Jo }n%
l'a3F @D mL
}o$BtR.
n5^4w}M
cp<>r\[
o6T89<m
+4.0xp5u)>NjP
xZej0P
"^LKmW
].r*r}
:}/tehl(K2
K3<P-RW\yFp]|MM
N,,E>N
-m3K&rQ||
g1gk5<@C^e?6[
<#$#c&
9 _@W9sk"
{m|bK{
4=(xob
r>/u>>z
.d%&9)[
_K+DYF
NrqsEY+6[\
Zyl+Qu\X#Mh
StITPj>=^S%
1yE%m`
_ 6iWL=G%H%
_#;(]L4K=
h`n?g<Rjr~`{cWCL
ZDp}f6>,y@!D5!N
g{!9&x
{&,r3h
:3Qq6.0
Z;LD6u`
/DrvWG
HJsN2R
CKXhhQ
zeQC3Dyn
5#q/`b2^TT
JaSU0rC9
DH0iB
]<u_R1
x!u\AB
({}Zr`
%Pq}oh
vIq7_<oyZPl[K
ym^XaOd,R
5WS\E2WIMm1
>H9B1VM
jzl>v{
1VCW%*bQ
oowgum|A/jq[A"uK1wSP3
wWZ=^f1%mk*
Ky Uh7
3">Dd{E
@P[q,Dl`IXL
n55*(tyy\
2M4#TLb2
A/:!@0(^)Y2XI[
=l1 ${N
[+#9SiGU1QN
xXgQBy
E_*m%j'Ql
2J/ LP#w
I-9h)}\
z-`&|H
Q`4)`dSHV
J}}wcl,8
Gp&VRh
[{hW4Mzj
EDPU:']
2d 9@!
8Evi+iZKMy
(sf]y3D&3'{
3O+Q=EkY
3{)Q!b=i
>/{LSs
NPs(+?
M+#^A|
(\~zRXO
lG@bsj^y
l*}WAf
9O|$y^
?z2 4q
i;5`CBMIp
B%h34(W
G-%BU'AFw
qs@&JY
m(|+?3e=T@?Z
e<(5~E[
>w<;.eMtn
")tPJny
-E^{]'dMs,v7.Y8
mh==En:
rWp6SevL0
BBC"r+.
8_C<>w*!
oDg3b
<l>KA)uP
|@I(%F
b^Kx0a SmzE
O1/"sFq}JK|>PyZ3mAk
d'S$l6
m}?N88s!
|hZ,q4y
xp[R1RRX
CqCD![aV+|7g
Ne!dp2
$=-5x2N
eHg+Vv`k
<@_+qI5
ZmA~t`y4l!o
9&6+no
&Da8!Zi,;
e"~~N_4d&2t%
gpzxe%|e<v
<2gfGU
=6~I^J
0*J6 sWV
'[Z:_%
Kk]T(k
?@nt?G9
Y'grSrv
7gz"~0!+
iP~pf5
?=N,tUaqA$!I
.-ivVe%
y#7 *{_'
PUX Xi[j7,
qC~OY6
IQ on}$L>
eVypZUECU
%3Ure=+'#>"
?xkV--.
_8lxQBFZ6Q+.:2
X0Q.x-
n/&E+{
:C;-_pah
kSDh{0
:PRmfoy
krw>MV{\
%*jS!pcYX
_69JW1=&p[R/=S
~@HpaBmV;
-KUfx4
x(n%,^J
{&V{pup)i
l5;]!1
u CKb~G
R{j(szXr3QfD
7R`-0]1+R
&{:{],
WgEG%z
[d2&[k
.gEey+C
%]SQZ>5
I)J(j%1z
jUZ/@G@
VV#z`dEej=t5Nb&
3r6FU;?K
,&<3}}7
q$<D2J^
@CNOqOu
P:^ff~
/OV/y <[I
1.j)CKbB8fq?I?w|
2xE%`T+\9
!9L?5Er
t 1jEnst
z^H6-T
WV^7K=nXe041
9Dsw&3
Dt8u+0ME
uyGhtyv
_<qR;Ia;;
cyZ\gw
chzhWfF
8]0VQ"W(?
A3eiZW,
%V`!W}
~1>p`y
~f4Emc'zs
[Fo^)S`C
,3Pa{Pqezub N
[MFG+IyT
SPYRdY
iYv+W=
sE|JB|Q
Yj+ P%0
"R>"BmG
g3zc/*+
zVXv+$
N&sAN)n'
9hNy5'
Xs\1{hKq/g,q
eD%B?(
-4 mdOS6
YREHY!zH
e?&#cF
zA?y`x
*[g'[b
dAOgoo
AC.)9$Z
2Fq3w\,
m wXxj
OAtH2
kl8v4MzIf
QHd4IyP
9a|QB|Bq
]<y~s|GU$|CDSwg
-mQPEV
%"% VT
UsxA0OZ;&Wnq!
t4h,Sz
^def %l:
Ec&&>#!
E&xSyH
zo2))a$
*7,g QPgH4SpzXE
{NFCa`
(?\)hBC-26
D!fyhf@
Q&F8vE
pfw%UsIg
Z6x)*sH*N@tz=)5+
$E(BTP7'j
xK$_.z7K
|7J_wNi (yj{*5-s
%imn(qX*5
dH>D/%
N|~<'I7N
6}x E_
?Svq(<
F>MUl+
wt~gfC%\P2!Y9
I^,:v2
.*":9N37$
'UIB`9
cF;l}%K1,
*m9:s5*xn{[>G
qc9jdr
D%SW|o
d5x<"}
R7et{_E7vUH#m{<
"L<~sZ.
USkN\
;a>Iwgn|,;K
IoAF6=WC
O~*7.
'Lr?%h
4e;7p@u(
#"Lf=/t
]>l}bQqzf
Ui,?1L
B 5,xJ@%J1Sdf!
EjtR#i
+# 25;)#(|
/0dM<Op+
/(,gZU
KBVnw+&
Gw~Ao ~Y
o`E>`&}!}
ff/_(i
}TZ{{\6
-Cv$ye
vEl5s. cv0
@_N<=
!9 O1xhK(
k~NuV3
nu!RoS?B<
Gr4_'O
|q9hzn]
'x"E6gY $}PByz
UlM Au!)M
=Q9BQ^
X.aqwlgF!
"w5ndc
9[xP4YNj
6-e|zyLcC4
iZ;f$,!2?
hmE6Qh
e~E$[q
cM:WSEz
0 5gCxa?nj
B+3M2FN
,%P`0Y=]-h43ftl&T
a32Dx6]JO=Yc
7psp,K+4
{n:&VP
<3hRreE
We &^E>Y
JBQKDME1/k)
RbiAo)`/?Vg
b<]x ]>EN@s
?<YGD|
E~?AedHM9)<buzR
BSb9!z+U{b{,tRTOf
X~;r^T
lX2Vf/kg{W^
>82co
WkNR<b
UY8XJFi
kB@%>+C
HX/^"/
Fa`pK
O_-3$al
`z}h9<%x
k<QlV
OHo!jX
SlJD\kiPP
7ZBvs2Yl
0JMS8H
nk{tNe%`+79aw#O
8SIiz\D+O
\U=kx?'@
FQ '>'k
H$SaF_)
jel_e_
0pm3;
ZBs`6s"u
021'Zxrz3*+
z,(+f4}s
#$|<qVJZ"
B?aH/q
AQ>L[Eg
O} GooB(
( Xa_>
z}|#jZQN
) W*Wx6U [lyW#B6
_^R2HC
FG(LP,E
Hm=SRK
=!~OZ)
>Oo?Y^BTXu0d
hfo$}sbOGQ~
bI/2 y#,O
4psA?2w
`L,+ E:~yQ
Hsrt!t
}K] uc
1PnSP%
kYl-88#
5lMmDPg|
Uj)+&Q?
K01>92RY
??RtO<
&1bFU~
JuSesu~<3FCcT=sxa
y/kr;xu/]$=>X
Aw2=rt
[u)q0pw
.'kno_
M}M,|Hs
WFiq1<
{!Qz2=j!
=l#Kgm^-o
j"+X4-89<
|K W!~h
tu$x|EZ_YAPjW_?\;7LUho
d7y,^!
k\H9p;NXLdL
K#k]& X
\7,HUcN`e
2q5*4(
,kyyL\(
Us@NO9BAx_gp
#^ffb-wk
v{"/[;
b_sUM/bR
0v"[LP#_O
r$ZE4l
@r62Nm!
Ov<w1l|`d
M*INe8kq7
ezJ&\e
/F8kIQ
0:1^OC+
\VDMfn
u^9kEN;
Syj6}H
y!P^Y.SD&!!lx&F^
|q4uTh8qi6eG
kb~0pHSC
jYO,IP
3awu^WX`
V(xmD }
?VN@8+6UN93f+AJ~"g&]
_C-!TFY!p,
`e=OS~?JJ
i<it>y_(g,DRD!v~I
K">@aN
niuVr:)
oVuA5
H{CU-l%B
J2ljf zl
:{jF#.9
C766:o
CP4qS3q:
dUd<Te
,V %~)K4
U jR{36
*YnX[,'=M{nJ5
=oi]P4J
A6'g#$z
pw=2ozxo
^85>e/
Q?zTtfp&
|7^O~=<
'jjx-3vU>j
bzt2!CIW:dW
5PBQ5PRk
5,2o u
d@s`a-ds
dD.J=Z
%:"N!M9
YY5-a\7E
xR-giXIB9
0Ya^M%
CGupc=!
jh6!GIqHv
U,IAsC
e:i_:GK
6>./!}^=
{7sDTi"^>5:34A=j
OaPI>@
=)7J'"QZQC?R
a4 2J]GX
3M+ Bh+\
;A=Rdg
b)_18oN{V1M n
6aML+"Jlj9(
+9KsP 3f
R4$7Ufz
9=Z/wQeE
1>&~k`;
"oa*BJyH5/Yi.A
Yd*&vlmX%Cwj
6kpJE-#
8b\KlE
D}]MM;%*
MyaX1v
!\iUH]N
{9'hrW]L
,#>fjt.qW~3p
4qMop7X
FhJFSQ;lc
K +sW3Fp3Y3:(ebA!
D5`KQ&
c/xe4w ]Y
eqbU,G-
xMdGy~
?xw\QW1x7y
Y4m6`:
WD)'s$
{jKQ{h
Vo~&-]
A5`[yJ[[
gt]$S*
ro9O|J_>MoM9v
v.p-ady
L5UEWk
gIq$Wr|
r(*-\1fe'RB1O&kwk!
V0xy=G \8~
m(mde.+
t$]uBl>`
`XU`%2-
71LHg1
K]kPQ{,
X)3f?>a
<uMjHlHI
OE;pu_
<f=@{MYj>6U
X9]hu>$yJ
%c'\ip
rUS{P~2?|
r+vW_)v9R6'
XhU'hpn
-;zq.|a
_jClY|YJ<
rd@'Hy?~
^xcIIsXfWfXA2g/|^~
Js+cGM\Fw&pEqdX
r`9/ |7g
\;S7G"2I
O0QgD>*
/Z?@Y$
.C~!GMAuf
aX+}(D
B>5v~j)h
Y9qw"@
]$~]sm
'M RH0
0 _ki%#
!:,G.MQ
G(RXC>
Zw1Fpwu0
:8t)$a"i
;}B#-b
P@3THh':k
N)GD/%
,_F\XSg9Bp3dQ
r_6a1<b
^wAPN*
-1i?Z[2
zaB8WQJd
j_o <gwJ]R{2yko;
?hK^at
Wb5F18Cg2
591k)5
vV 5VV
2Yt22fY2 #3
3bw2J2a2dg2I}28h23f2
2Cdd2}222pq2b2
2Ob2f2r2y2}2K2
2222u2q22
.2T24y2?e22~2
93y2>l2Ju2e2q~2;22
sI**Dw
ARaq2XBQ"
A2A820q#
A`XqPq#
03ARBy
TA2p3SA
wXTw82
=yf-~Mwn
=YF+uQ
2?o2?o2 2?X&
'&%#*
,) 390.
HV1IU3K?2<3E3H3913%[2*]2 _2&f2a2Z2
03-3C3=3
3&>32B3!F3
G3[*3T
gf:g<g6g4iO
c=\9L3L<=3[+W#P
MFD{|2O2@2j2c2d2e2|e2f2ug2nZ22222222.2|2i2w2u2([2*@2-
?2'<2/2'2/2
IV)L*'jdUeUm5
?(R}zc7c|X#
|c%LT-|t
Tth-|z-|zb
=_BUxs.|~
=e2&=nYjrR#
pxXST}j
Po{lol2
o2a }3
F'I}(B5
(?(Ay7
JZFt|dB`N#
=Q*%rwzLE}bV
6]Bu~]BUX"
=ZuK=7
=JK2hwWGWJ
SJ_H$4L
-/hH @S
xmc_m\n2
_eR%c`X5
Ej2i*3
2Fz>2#
3##93#
28d#"u0B
A)}xmx
M]x%y%)y
M^cM^c
cKMckbTM
[/bkdM
ct>c22Cdv
2#c03c
0?w0\I
9dU>w0Jw'%?w@B
^9T>w7J0?w@B
9T>wp%w(?`%J
;7M8*7p
5t9uF6
+f2r?d
)4#ANdBOdB?dA~(4
)>dc2$t#u'BcA
c^d34#5'Cc2c
W_Y_YI
Xjb22_2a
,3f2^2V2N
2F2>)26
N2T|22
2R2(F2
zSzezuz1MW)5!=
{2X2gC2
_2x_}2gO2N2>O2>E2.E2Qm2
28[1"+
*~@cSqV
]XTW2
MI!!m2
J/=%
+ jhchY1qhhNiaTKQFW
|^|H_|kt
a}!_t|0t|^
m~`\}^Zt0|2%
2m wy|fyVH{1XZF8xYZ
n|*q(/
zD"TFC4F?
yrW-xX,w[
yCX_XwwYvnYy
w Xmw6Ylv2
2m#D/-*
\yGOy?Lx
/xA3 2
s20/g2
232L2[2]2Q2<2"2
_2,k6gC
2o/2=/2
70Ne>GaIYIQIJA91
W}}}}}N}=}!~}$}4}4}
<'}\}l}l}
}4,}2e
*2H( J J(f&46
evnGoI\
w*o2CWWxWxW0
3gssrsrsr#
3r3r3rhm:
&>HKiyayYyQ%IY?zY?zMCze?zBN
dOMy}4y}4yPydydyPyfy4y4yzy;$
k9ky22q2q
`=/t5/t= t
a8_2/2c/21 2
qiaYQ9I5-<'z
t$/ ~O
^\lHQNOddk[r
6rkr)o
\rroDr\r\ryRrn
E#eq-q-qhqLYqkq26aj5%i
%i%;s&4u
NO]tPtPiL,
K~BtPtP
7t1/2O/2
IUA*9*1X)
C?Sn0ncnF_nLnrc
np/no+n8nK4nY@nHnkn
lnlnnWnin6gdn.gdnen
|c{3tXJ6
Zt8d|irGiikHk
+uI$JP
uD^bx@O4Q=Pm
YvQvI@A
~j)j!<jRjNj
djt)jy6jM3jN9jI=js\jvgdjje>^j5sj{5[jjvjnjj{53j2Ip^
OcSoWnXmllCkbwE!}I2>Tz
wcqcqSqSq
!.b/20/2
#uI^LWgo
$'*@O+
9Z1>OZ
amgB|gXg
f0fB0fIZfXf`f.f4f
AfLfLf):Sf
:Cf2"+!",
(%W|(nG*~
\Q$x* 2H 2
+uI2 EA
ehbRlH
COFl\f8
DcccJccwc|cvdc>pc
GotbZHc*b\b+bub2Y
>Ns7Pm9@9xQ
IGJLD;%s+ 2e/2./2
q^i\Ha
IFsAGz9Mx1{&
S_>_>_X_T_=_I9_M5_`2_d.n_x*b_|&f_
^>_#[1_ W5_
OM_c{q_qik_Y_aH
Jo]4nB,o1q>)wM.{I*
L'*/20 2
Gysqoi|axYdQ
g1d)9,r5
ci[.[G[:_[!F[ZI[DM[gQ[xV[Zz[\r[Zz[Vs[ZZ[hUS[cRT[dXS[v\:[k]1[e!8[
%/[Vx[
-2wp<m
@LhLOrHO]4NN3Q
WmuqZCKOLO^Q+Q
b q 2y 232
!"o#+,}H
ekiyumqo
JGWoxXgXAk
2 2 2 2
, 2 22v2[2C2/2!2
%!/9)RN*
PKPDnP<&QCB (
"65iY^I#
222p2U2=295
(/ 2|/2</2
S.@PWga
a,YgYQ
IpR=9/#C-3
z+'_yh
~L&dL$`L$`L4`L4`L
@ML&YTL
&K25%R3$R
K)x:zd~^83
+<)655
iOf]TT
GRRRNiNi$.35
@9}1})}!sK1I
NHNHLHDQH?VH>;HP8H[=HuTH
|HWHWHWlHWlHafH
Hd~HjHjHHH4X,H4X
N@*N;NBO
zg]#$4
o2to2"_2
ED1x)x!x
qxTbZx_
\r:a:a*a*ayq~ihxapxY
N4EM4E
NTE&6LED
:EW,EW,EW
Ea&EC6
CXlyDKDKDKDK
~Dr%xD
GqD2BOEO
NvNxIcHjH
na11Y6
/f`2C<169616.P
18GNS*
aY\&Q&I&A&
9`^1q)y!p>
UUiOA,zA$zA$rA,lA3]A
PAoKZAHPTAJS4AU55A\85A;6A~>
A]@AsA~p
Ap@p@p@~p@@^|@
@1@1@1@&4AV@
W@2$10
90410,/$
2?f_mj\wU
$@$@$@C
$Ymp??OO?
I(A&9,1*)
endndnnkP
=*Ew=#g@=8$
Ob=<<":0==%<
&<t%<2- F
./13fW
hKhKhKhK
J{pE`#F`
YhKhKhKhKhS,
>9b:9z59b19J39CN9[J9cF9<9$9&9 f9A9
r9v:r9n:Z9v:R9^\:968.88
92/N5E
z>zd@+7;,/+[5F
.Y-q,i+**
6JN06l54b
Ch\5EI5UIu5UIu5U7b5
U5,V5h4T5XHU52n(+**
avo{hXj
ywmtle
zpYPzQn|IKA.x9
5X2%r2&k2)^2 d26c2<Q22W2
?D2V[2\Y2+492 -1&/1,11
B1Tj1V\1r 1
c0'S('S '-$+
ceGTQ 2 202
&aJ(Y]-QX
q`V[Zm
KX.YR.x*/
_FF-+-
%-^-gX-"
-6'-=&-
-- 8-2'D !
@e=p3r1d
oWI7`A}gebign,};?
c}wakFdD^e55
EB"eXQUT__*.(*
G*I^*XU*^[*\*D*EJ*GD*AF*RK*kT*uZ*zc*zc*}bg*xeb*
`m*_l*_\**
{yb:8~6X~
ELu;|Uo2o20
EC e_l##
PFElrpl
ryrpqtniqa`YfQPIUAU9i1T)f!h
\h'bb'f'
W\&(M&
Z&)*&/T&eN
&!&38&20mK
`{}6ipMn^7pT9jZ[lXUvPM~DIzI*EL!B
M9X1m)g!i
Eki ;ao;Yo;Q
O#*^#!"kSa#
"|""z$"
0"`Nz"?g"R|"
#@#&#C
#Ez"z"
#3"#"XUrm]
9KNCFxzpj
m[B[i|
0%}2!2
|BzBa^2Yf2Qn2ISAT^9t1)[!
D B G
j1n6_:a8kb;
l[sTm;mihfa`_
pyrqGia
%+#5)/0)+31M876A:931gb
o2_21_2
ti^t:q
a~YQIA~91)!
",)+*2{-|4u5j
/6fXa|YilQIA91-
yE+N H61),2m#
Hrw&W2
IA91)!
>I;>HKHC;>dJEc;Nr=@
=H$=@$h
2}acyn\
ndmTo"
b4G38->+@B"1
%p2zEoHzxzpuv{epepTqXwi
2qf72y|42L
viVwXVmx|
2-2 2L|e2q2
"2T;2v22 {
E*C$-&Giz
{JFc@}
Ysg@YY}
212##A
>wVdV$V
>wdVV=?V
wdVTVU
:YlxN{x>
~qC~qT
~q[~tSs
~qTp[d
Uuq(UUq
tUq2ZmA#
@n0r0t#R
VlARzlMYT#5Bn0~
o2 o2 _2?_2
o2?2?2
:#<&7 . *2
(2.222
iH\M>HBUTdwu|
<<2h1`1
1i1mu1fu1pW1mh1fc1{Z1\1b111O1P1Ee1?d1
P~:j`{gM{gM
g5;x;hc
+J2QPHjxr:H2
U#v0:?G|z2
>Wd~9d
2ayV$
.naVvcFw2
DWwvwD|O
~V~N>5
g7GTJ\SCz0T
4 k=swPyV>xLkd
?~}MNtO>rYAc
FtTRX>c
HXOcS\`s2
k````n2
SIh`3ymX<Pfmd2
)rCd_2
@~>xNX+R
4_f}[FIV~
iz+XV>
MZz[FI3=^jD]wg4
k6acBh
B}s9.m
&Ty&kq
&&K&KMD
fdy&kq&
a8nA^S))<
qmA>CmAr*Y<b,#
bmARmA*9<2
KilAn*yK<,#T
r;ib)(Y
AR1SL#
ASPEwO2
EwSEw_
msa}xjFsavp
TCf~WS;WC
Shugh;ug`~cc<
2.|AjAj
kA~jAv<iA^?T2
iA> iA6
hAhB#A
.iA.i3#
>5w`^^wE
Ew_wHEwt_X
D`_4`1_n#
IFYFYF
4myFmF]F
{].nMmM
6RPLwX
V23x:3w
,3JI3&3
3n33&3
z3|333J33
3e3:3#32x2[2332Kx23252X3P3Re3n:3#3
x3xp3wXe3P:3X#3P2
*t=f+*/2
D~QR~!
1 LGzVrN}9
j$ jjchhiO5
>hhii
1] \ O O
YabHa1h4
a#/z*$6
xKokocy=
dAmW;j
Ft?t?Cl
/2 2AZH
D>Fre"u
]qi+aYIY[Q[IA 9+1
m,NlVlNlvl5J
X+p{cZRH"_O
LI:gSSC
2!"?U?
K 2L~D~v`l
#GubbRR
Z%uN!~
2Z2d2b2U2;2
Q<_2_2/2k/2T 2= 2)/2
+2<\qiea^Y
q>*#J2
^Z`\QRJ<\xjd
}fUCrG
<3__J?
~xx;|Y}l
{DJ^ynq~iadY:QeNd5z4@;E3[
pVEms~yzoF
2% zqtN
kPGYGQCvjfb
b6RFRF(q
&iaeYnQlI~AG9I1q)
NWMP?>52J
+PnSWOWfs
``IVwjhg
xdgDwyyyyUyUySbiw
rD#ci=a-YeQ`I
991)!(
HM?J[jS]V/]
[A`X85
zrp`xnfl
07!2H2
trgCH8?wzqtc]
CWoa,Y
wQXIQAKi9e_1v|)
l_`c\_U@M
@`\jV`\DG35`2e
wTnG ~
z|yGh[
u~hyLNwqRce
JmBursrpvp.I
#tIt_7 G @3k
CByYMQMIZAx9T>1
&S6zYzQi3
LAM5995
9Rx2G2
InQRIiA
4x#daav
n7 676o
!F2B[NUJFV
b}~@DS`ITCPNW
%!-*62J
si\'}7
J4@4bp2y23
I3nAm9t1
O:\tPnDr
mWoclhtUBV
2 2 O2 ?2
2+2?o2Oo2Z_2W_2Ho26o2#_2
d% R36
GEUy3J%*
@F(#9l}hU
o2_2_2p/2U
x~WRWZw2l
njv':)
k}Osk3qy
iy(N$~
W<WU6F-"
#3*$ec!
nmW7i%Q;mmmc
IaAEe9Me1Ee)X!Z
_nqh Y3*'m_N
firSI- `
}jWEOE
QXdI5LAN91)!F
J`nqe+X>a
@d~aGnbJu{MTEOTfR[W5SY8:Z;)h
%3%+5#5
pk{ERFE+w
L^lDb];,(
]Zd?S1KKKAg 22/2
UUSyrq+
eIwAv9
}|l|l|l|l|
|q|(| |8|
p| 7[|]|
|`{3^y
qs7pjRpMH_
bISdSdSdcq
y]x`x[x]x^x`xZx\xHVx>Xxpx=
x7x&y@x@x@px@hx@`x?x{x WSx'W[x WSxV;xx3x
K'Q-tFr8q*trt-t-s5jp
Z=(n)n)^)3FL?
MUYV&U
auu&WRu
WJu6WBu.W:utg53u_5
mtetFJtAt2tb\~toW{tdPyt3x,t
irJ m!
qNiNaNY
O9N1N)N!N
}\Jq]Jq<sq_Psq
Nuq{etq.Tqb2SqA3[qQGRqL1q@(qA q7q
<$q:c&q6,q8*q:pEpryqt}|p6plplplplplplplp32j8L
cgsgsg
i^BhnIh
ITeDF@2
1&u@s:
Pm%(m4#m4+m&Um
_qEm_5
m?6l1la
lbl]l3aw
'-+-V0L.
Ap7z5t3n
6i+i\iZi[ihi-i+i4i:iHixlir^i
hi<iBIiiiiiJiAiAiYiOiUqicoiauih
<DDl,o
/@rL~K
SHVR[W%U'SQQSO
~R2202
1pRy_q`iDa
Ahuf_{fmYfkWff
GX_hke0deeeo`ke
*=e&'2e3
2%Rx-U0W
hENg8M7D6<y6
ir:BKg@^^h|nbi
@aJY\Q
b_QsbgQ[b{egb
,.b!/5bbR|bIobx\b
Eaaaayaaajaeac_aeaasoaqea=0a
!Cm;mSm
`}"KdA
TNrP~JLD@7;}zf 2202
y{q{i{a
9z1|)u!w
YX[Vxke^oik^}gy^{eg^<+_
R]=]=]=]=]^]pO]Jsv]3_
zJ }H*{<
(ei@pStj
Lq2:c*UY
@Z@Z%Z
+[^Z6Z=Z6Z3Z5Z/ZF0Z-oZ'eZ)kZ"HZq_=Z
\.Z(VTZ-SIZ*T
VZ'Q;Z
~Y3Ni}
2'@*lV_
K}KHD!E1@
idV`c]
P<;)o2 o2
JHy|quiaa
CVo~VEV4%
0H:V!kV|&8V
V~V%h3V5h+Vg#V3H
EKx@FqFFgJEjCPc>PmUB
SHtZ6r<-
oA^9]1w)`g!Zi
R?0SA)SJ!SOG
SMRRJSR?IRNLRXLRWKRPLRNKRTIRKTRhSRfQRORZRaYR`$R_#
pRtQjR
L#F{wbEy[FBQ@FCAdAHbKHZ2G
AN~8NOL=L
buYldWOlT~Oc"
pO#VO,
YO@|NmONIwNkGNkGNlHNbJNq=NO@N3bDHZ;I
J=J:SC(U
F4E:F2O
JPJYTT^#TO
$q%n5n^N.^]W@
I3,E/(
:rjcjxwy
Y>QLI"
KjL[]ZajKbjKsjK_qKq;KO?KUAKmRKWtKIXtKxJuK
P^Kt%_K'OK(PK
32KwpK%"
XuBKcA!KJyJJJZKK$Gz3
1n,?o$?i}@mo__^
B}HnEAE>}F"y^!G424
fl&8@m
Y=McVn5eihSsR[c=Yo
>[f:eDVgYi
DrzfDIQs] \n<<&u=r|qOm>e
& *^s$#
mCd>c@q&b!
trliRXdj
dXX<$TH0
f# ;\^%v0;&l5
n j1Rn-Mo
n-Mo9En 4j1n-Mo
rnLoDn7jUn
@#xXm]JJ
2:P3v|
5\~xdURfa
/7?3eE}4'
m]2=<t
I"4^#4#47"
5Y"_5J"5="5E"76
0#(+ 3u
jACyS4
KS[ck4s,{
3WQ}:Sv@fVQ
k?4 h+
S<4Q2S^}
2/E^Uv
*sT^}3E
7F+/E
3En)q(
k(;s'Sn
2Q}R^D
MU/RUu
(Ss0:>:]E
Un^45@
SnV4&Tn
"Q6R}:P
72URQn
Sv;/DF}
?4QR^}
)C<U!'EfWv
}:4RP^Ji^
#3tVv}
7;'MRT;'
!Rn}"Q6R:Pq
T>}6Rv
:u Un6UnTn
MNT"#E>m
2Q. 9[
[<BRMU
q09;(DY
UZEfQ{4
}PlUx?D
M2P^gB
Q62Q}>dK
Mnb6|2hr
Mfc^=sbnbv
S84Ud^}
ReadFile
CreateFileA
GetSystemDirectoryA
lstrcatA
VirtualAlloc
KERNEL32.dll
LoadIconA
LoadIconW
LoadCursorW
USER32.dll
RegOpenKeyA
ADVAPI32.dll
_XcptFilter
__getmainargs
__p__commode
__p__fmode
__set_app_type
__setusermatherr
_acmdln
_adjust_fdiv
_c_exit
_cexit
_controlfp
_except_handler3
_initterm
_wcsicmp
mbstowcs
wcslen
wcsstr
msvcrt.dll
FFFTWARE\FFasses
yysid\{0afaced1-e828-11d1-9187-b532f1e9575d}\inprocserver32
\55222
z2z2z22
,0.v000
2/3#f3E3e4
5o5H5t5'5!5'6
61}6SU6WI66666
|7NW77I77
7j7I7L7S7P7t7c08
8n8^88N8(8/39
l[V};vMo!k
1d+wj|/jvpn
3qpf+#rHZ/Dm4r%A3
Po2yd+
{9 S+h
]o t:'
?Q48E@0
/EQYmix
/xL:"h'WeZ
k>.17a!X1oD?t
XeR?Zv)5
pkS$$9
um}0wf
T{9AX
XbVou$ie$
^$9K4l
+|C==/
`Mw+MQ7
\"]SvrK
2CvXfG`d{<
0/0ETa-2d
I#QG>>?<
>~r)^[
_vx2 z;
d^{hX-
Jc!0:5Z*6k
0hfUzt
z9e2LjU
]mw"'qqQF Q
q:a,n$czOp]5
Rau+<O
5cdBVC
!;eb?T
U7?_->~wyS
xtM/FW'JSfNN
JJVSLl
L`ENP+
J,Z)Ah
QvQRsym
P<NPG2-C9/HH
<Z;lX-3o?
+][QPB
YO^qr7@s-Z&&~h
c,\jcp
UOorKQ
61Z\ *Y
o\_U#^
-HgDk;r
''^Ox_
^T.1Rqf
T1ywh~G
d[jL=Ne6H.
-~e$=a{
e{&ak=/,
7Z*Fnm;sDM
l,`_'hNH&N wg |0
EciFn@ns
'TQPlzW
?9!@.4U\|
&zZ?4%
k1{gd\J
F:laTSIS
8oLegDNd
u)KNf=;AN
*N5OlFM
Y<T`oTmRY:OBo
yv$*fD
82}c<f`^>%Ws
Zq+/|Pa
hV#KZtq
XEniReK
?A,>0;RJ.b,027VTv=B
{s=#x?{h4<A@&~ \
c_T]q(
z01D$LG!X,8`d
jR>&#{s29
[+nX($yj
8t[h;=
Vd}Y0O%'
"%W4h[knGP/
)wqfDK=z
^_:PoY
NQ#P(bTD
%M5KuV'
~`SoJ@
HDb-+XRlhF*nP 0~N3*Ml
WffPrInpi
?KP1]fV4Xh1
j&[hunm(@
1RnQi`JeF<4
ozH2"GOkNoi
s]Mp%e
xC67I0
o*>%xD
?o?QUH
X>(rKd3
4W%l[)
XkX]K@{4,48
S.eoXT
FS9+~(O
{2>;~Y
;|,KB/Mmz%>@RX8f
wOwka$T7n/ u
AvxNIJj
iVY<l l
fn)cw.Fv
]eeu?*
/(3@Z'>
sg6rLh )p=6n<
30v+^mMr,
%Bvo!:
OKI|G+&U
sEG!rni0
/oM3%%
~<P4?Ry|
9PuJ2M
0$L4k%`
#?@"6w vFh
r 7plNIO
LaK3iR
Roh|"T
Y{>s8Z`i*:(
*C4HV-$P&ytY{_7
RNip?f4[Zs
!7~=`1*5
g:u[`y
2E 3U4
`8t6?
h*2}<+
c/PdHQ\
zmSxCw"y$&
+tMSpS
w%b))\
4E%"dIieEX
8bGmU.eu.
;i\Y)Nmy&M
R-%UsE7h#*T2
.}H2-
(U,V1T=O
%Fe+<)
Hve:nf\6
Xus<O-6;y
=%W:odt
Wb{RDy(
MD?y@GfR
03H4ua
Y=X$Eu.;?
mEra+jV
Q sNTnJ*N
C nxwdgVA
rJPh_1S
a7ua$N^8-d
IW86s9h
+^9F^L
3i#+v-
w/[,.aCZ m
52wGZuP'
4phZ O
USniaSf`>
z?@n)"
=4Ux1FzMYHWy
k[&J\^g\
cdhGiNk;*
segx`B>X
:gK~X
:<E5q1
J)Mh\ZM@U&
^$pC!z6
5=U.j{
2{<|L;:
ET'\,@>3}hT^x~{;
Ry\h>pB3C|f-5lc
ojFA-hK2?k32
QG#;7~6
oEvx+(%
$t&9cz
24)&'vrI<h
EMH6R"
SEll3IcoyL
)a:23swt
w#brSoDC
h~"|AN+nXq
iA\b9R
C'q<RK[*|
$$r81r
%;WMsi`'=/s
-QY&L%
8tam{<1
V%1=3EOC
,=9dRaN
{_GDKQ;D
T[Q;1Q
"&(=mx
#Sjs 5
TTH=pe
Y7f~bi&zf
#B.(EJ!Py
[d;/(V+W
|MMiR\VG
00000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
000000000000000000000000000000000000000000000000000000000K000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000
0000000
000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000?h23W4434445644444545566665666e6789::::::::::;:::;;4:<4444444:44:44:49:44:444444:44444:444444:44l4444444444:44444:4444444b4444454455644;
4444444444444444444444444444444454444444454444444444444545444444444444444444444;444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444;4444444444l44444444444444444444444444i44444444444444444444444444444444444444545545455545555656V44444444444444V444444444444444444444444444444\4544l44444444444444444444444444544444444:444444444444444444444484T44444444444444444444444444444444444444444744444444:4444444:44444444444444445444444444444444:444454555555654455545556758554555555565556644V4556655666V5'
ppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppxpppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppx
pppppp
~Wi\zw7-@K[i
QeZj /
E3,x;L
Iuzjd=KO\0I
r/H"An
]9F]$:
\{8 JZ2
M7^A.j/|
/~s7[X
O^l '[Zxx=g~eo
%:qONU:|3?[id
#}\Glag6S.pli
L@J"P9sWk
j%W=Q*
tqxcL~;
Alts:WvB")#
d8b1D"
2 2 2 2 2 2
2 2 2 2 2 2
2 2 2 2 2 2 2 2 2 2 2 2 2
2 2 2 2 2 2 2 2 2 2 2 2 2 2 2 2 2
\ F Q Y Q Y \
2 O 2 U 2 E 2 E
1 1 1 1 1 1 1 1 1 1 " " "
2 2 2 2 2 2 2 2 2 2
2 2 2 2 2 2 2 2
2 2 2 2 2 2 2 2 2 2 2 2 2 2 2 2 2
r 2 2 2 2 2
2 2 2 2 2 2 2 2
2 2 2 2 2 2 2
2 2 2 2 2 2
2 2 2 2 2 2
2 2 2 2 2 2 2 2
2 2 2 2 2 2
& % % y v h
2 2 2 2 2 2 2 2 2 2 2 2 2 2 2 2 2
` ^ a a 8 8 [ Z d g i ` c b
~ H J K P R
2 2 2 2 2 2
2 2 2 2 2 2
2 2 2 2 2 2
2 2 2 2 2 2 2 2 2 2 2 2 2
2 2 2 2 2 2 2 2
2 2 2 2 2 2 2 2
Y > ? ? ? D
= W b p I b
2 2 2 2 2 2 2
2 2 2 2 2 2
2 2 2 2 2 2
4 2 2 2 2 2 2
2 2 2 2 2 2
2 2 2 2 2 2 2
2 2 2 2 2 2 2 2 2 2
2 2 2 2 2 2 2 2 2 2 2
2 2 2 2 2 2 2 2 2
2 2 2 2 2 2 2 2
2 2 2 2 2 2
2 2 2 2 2 2 2 2 2 2
2 2 2 2 2 2 2 2 2 2 2
C g g g g g g g g g g g g g g g g g
V S _ V E R S I O N _ I N F O
S t r i n g F i l e I n f o
0 4 1 9 0 4 B 0
C o m p a n y N a m e
F i l e D e s c r i p t i o n
V a r F i l e I n f o
T r a n s l a t i o n
Hosts
| IP |
|---|
| 114.114.114.114 |
| 8.8.8.8 |
DNS
| Name | Response | Post-Analysis Lookup |
|---|---|---|
| dns.msftncsi.com | A 131.107.255.255 | 131.107.255.255 |
| dns.msftncsi.com | 131.107.255.255 |
TCP
No TCP connections recorded.
UDP
| Source | Source Port | Destination | Destination Port |
|---|---|---|---|
| 192.168.56.101 | 53179 | 224.0.0.252 | 5355 |
| 192.168.56.101 | 49642 | 224.0.0.252 | 5355 |
| 192.168.56.101 | 137 | 192.168.56.255 | 137 |
| 192.168.56.101 | 61714 | 114.114.114.114 | 53 |
| 192.168.56.101 | 61714 | 8.8.8.8 | 53 |
| 192.168.56.101 | 56933 | 8.8.8.8 | 53 |
| 192.168.56.101 | 138 | 192.168.56.255 | 138 |
| 192.168.56.101 | 58485 | 114.114.114.114 | 53 |
| 192.168.56.101 | 58485 | 8.8.8.8 | 53 |
HTTP & HTTPS Requests
No HTTP requests performed.
ICMP traffic
No ICMP traffic performed.
IRC traffic
No IRC requests performed.
Suricata Alerts
No Suricata Alerts
Suricata TLS
No Suricata TLS
Snort Alerts
No Snort Alerts
Sorry! No dropped files.
Sorry! No dropped buffers.