1.5
低危
DACN
0.12
FACILE
1.00
IMCLNet
0.92
MFGraph
0.00
反病毒引擎
| 查杀引擎 | 查杀结果 | 查杀时间 | 查杀版本 |
|---|---|---|---|
| Alibaba | None | 20190527 | 0.3.0.5 |
| Avast | Win32:Gepys-E [Trj] | 20200131 | 18.4.3895.0 |
| Baidu | Win32.Trojan.Agent.eq | 20190318 | 1.0.0.2 |
| CrowdStrike | win/malicious_confidence_100% (D) | 20190702 | 1.0 |
| Kingsoft | None | 20200131 | 2013.8.14.323 |
| McAfee | Generic-FAGO!E70A50677055 | 20200131 | 6.0.6.653 |
| Tencent | Malware.Win32.Gencirc.10b0cc83 | 20200131 | 1.0.0.1 |
静态指标
可执行文件包含未知的 PE 段名称，可能指示打包器（可能是误报）
(3 个事件)
| section | .rdata6 |
| section | .rdata3 |
| section | .rdata2 |
文件包含未知的 PE 资源名称，可能指示打包器
(1 个事件)
| resource name | None |
动态指标
在 PE 资源中识别到外语
(2 个事件)
| name | RT_VERSION | language | LANG_RUSSIAN | filetype | None | sublanguage | SUBLANG_RUSSIAN | offset | 0x0003c0a0 | size | 0x00000188 | ||||||||||||||||||
| name | None | language | LANG_RUSSIAN | filetype | None | sublanguage | SUBLANG_RUSSIAN | offset | 0x0003c228 | size | 0x0000000b | ||||||||||||||||||
该二进制文件可能包含加密或压缩数据，表明使用了打包工具
(2 个事件)
| section | {'name': '.rdata', 'virtual_address': '0x0000c000', 'virtual_size': '0x0002b030', 'size_of_data': '0x0002b200', 'entropy': 7.432979480584559} | entropy | 7.432979480584559 | description | 发现高熵的节 | |||||||||
| entropy | 0.7894736842105263 | description | 此PE文件的整体熵值较高 | |||||||||||
网络通信
与未执行 DNS 查询的主机进行通信
(2 个事件)
| host | 114.114.114.114 | |||
| host | 8.8.8.8 | |||
文件已被 VirusTotal 上 62 个反病毒引擎识别为恶意
(50 out of 62 个事件)
| ALYac | Trojan.Lethic.Gen.11 |
| APEX | Malicious |
| AVG | Win32:Gepys-E [Trj] |
| Acronis | suspicious |
| Ad-Aware | Trojan.Lethic.Gen.11 |
| AhnLab-V3 | Trojan/Win32.Shipup.R61194 |
| Arcabit | Trojan.Lethic.Gen.11 |
| Avast | Win32:Gepys-E [Trj] |
| Avira | HEUR/AGEN.1026727 |
| Baidu | Win32.Trojan.Agent.eq |
| BitDefender | Trojan.Lethic.Gen.11 |
| CAT-QuickHeal | TrojanPWS.Zbot.Y |
| CMC | Trojan.Win32.ShipUp!O |
| ClamAV | Win.Trojan.Redirect-6055402-0 |
| Comodo | TrojWare.Win32.Kryptik.AYQE@4wlbfl |
| CrowdStrike | win/malicious_confidence_100% (D) |
| Cybereason | malicious.77055d |
| Cylance | Unsafe |
| Cyren | W32/Zbot.JC.gen!Eldorado |
| DrWeb | Trojan.Redirect.140 |
| ESET-NOD32 | a variant of Win32/Kryptik.AYMY |
| Emsisoft | Trojan.Lethic.Gen.11 (B) |
| Endgame | malicious (high confidence) |
| F-Prot | W32/Zbot.JC.gen!Eldorado |
| F-Secure | Heuristic.HEUR/AGEN.1026727 |
| FireEye | Generic.mg.e70a50677055d4f6 |
| Fortinet | W32/Kryptik.AYUW!tr |
| GData | Trojan.Lethic.Gen.11 |
| Ikarus | Trojan.Win32.ShipUp |
| Invincea | heuristic |
| Jiangmin | Trojan/Generic.avpsx |
| K7AntiVirus | Trojan ( 004cf6b81 ) |
| K7GW | Trojan ( 004cf6b81 ) |
| Kaspersky | Trojan.Win32.ShipUp.deon |
| MAX | malware (ai score=80) |
| Malwarebytes | Trojan.Dropper |
| MaxSecure | Trojan.Malware.300983.susgen |
| McAfee | Generic-FAGO!E70A50677055 |
| McAfee-GW-Edition | BehavesLike.Win32.PWSZbot.dh |
| MicroWorld-eScan | Trojan.Lethic.Gen.11 |
| Microsoft | TrojanDropper:Win32/Gepys.A |
| NANO-Antivirus | Trojan.Win32.Redirect.brpspk |
| Panda | Trj/Hexas.HEU |
| Qihoo-360 | HEUR/QVM19.1.EDBF.Malware.Gen |
| Rising | Dropper.Gepys!8.15D (TFE:dGZlOgU2Zo66a3X8iQ) |
| SUPERAntiSpyware | Trojan.Agent/Gen-Kryptik |
| Sangfor | Malware |
| SentinelOne | DFI - Malicious PE |
| Sophos | Troj/Gyepis-A |
| TACHYON | Trojan/W32.Shipup.256119 |
二进制图像
288x288
224x224
192x192
160x160
128x128
96x96
64x64
32x32
运行截图
暂无运行截图
该样本运行过程中未生成截图
PE Compile Time
2013-04-10 20:28:20
PE Imphash
021e88aa63bed63995eccbbbfe0f7cdf
Sections
| Name | Virtual Address | Virtual Size | Size of Raw Data | Entropy |
|---|---|---|---|---|
| .text | 0x00001000 | 0x00000bdf | 0x00000c00 | 5.595788030652354 |
| .text | 0x00002000 | 0x00009c8c | 0x00009e00 | 0.09802137657953752 |
| .rdata | 0x0000c000 | 0x0002b030 | 0x0002b200 | 7.432979480584559 |
| .data | 0x00038000 | 0x000000d8 | 0x00000200 | 1.6777393548929629 |
| .rdata6 | 0x00039000 | 0x00000326 | 0x00000400 | 2.5663952748475447 |
| .rdata3 | 0x0003a000 | 0x00000064 | 0x00000200 | 0.712453444966878 |
| .rdata2 | 0x0003b000 | 0x00000064 | 0x00000200 | 0.712453444966878 |
| .rsrc | 0x0003c000 | 0x0001e238 | 0x00000400 | 2.1237746236942723 |
Resources
| Name | Offset | Size | Language | Sub-language | File type |
|---|---|---|---|---|---|
| RT_VERSION | 0x0003c0a0 | 0x00000188 | LANG_RUSSIAN | SUBLANG_RUSSIAN | None |
| None | 0x0003c228 | 0x0000000b | LANG_RUSSIAN | SUBLANG_RUSSIAN | None |
Imports
Library KERNEL32.dll:
• 0x40c008 lstrcatA
• 0x40c00c VirtualAlloc
• 0x40c010 ReadFile
• 0x40c014 GetSystemDirectoryA
• 0x40c018 CreateFileA
Library ADVAPI32.dll:
• 0x40c000 RegOpenKeyA
Library msvcrt.dll:
• 0x40c030 _XcptFilter
• 0x40c034 __getmainargs
• 0x40c038 __p__commode
• 0x40c03c __p__fmode
• 0x40c040 __set_app_type
• 0x40c044 __setusermatherr
• 0x40c048 _acmdln
• 0x40c04c _adjust_fdiv
• 0x40c050 _c_exit
• 0x40c054 _cexit
• 0x40c058 _controlfp
• 0x40c05c _except_handler3
• 0x40c060 _exit
• 0x40c064 _initterm
• 0x40c068 _wcsicmp
• 0x40c06c exit
• 0x40c070 mbstowcs
• 0x40c074 wcslen
• 0x40c078 wcsstr
L!This program cannot be run in DOS mode.
W*6D6D6D6)W6D?6D6E6Dd
6D6D6Dd
6DRich6D
`.text
.rdata
@.data
.rdata6
@.rdata3
@.rdata2
@.rsrc
]U]U@E
]U]UQE
]UQEPh
lUR\Ph
skRpP=
3_^[]U
etPocAdres
oadibrryEA
oadibrryEW
etMduljHancleA
Drea[eFikeA
cstrdatA
ndo0sDi
ect(ryA
@etMdulHanleW
ctPmcAdreq
SmadKgbrfryEo?
lcrnbl32dll
2qvc5t.d#l
grt_lAloc
nmaVieMfFle
grt_lP
capllod
lcrnjl32dll
@ctPUmceTqHe&p
w jguh din`#bb
mnJSjdb
8.fafafaaa48a
afa$`fa4`fa
W7qidDOkVh^d
o0,Hf|Hg
@~R,xCf]]Gl"W
o[r?_a]+t
9=tJ4q@BgP.O0
9kjl^E(9m
s1QW9Uq@O#r
3i9 Vh$
rq{{i{x
XurT`P
+QMN6-k)~
EcqriN1]ik*afq
dy0!`s
s1Qb>B{
R 0LGVYX%z
@~$BDw
QQk@()I-j
rGjOU4X8D
pUvp@iM
3)Sx3WSnt
s)k`q`qVD
`R}':v
I|V{+V`A
@zW\NKcYc
foCucN|cF
aXl`P@z
a8||`0
a>{7?|Pc\cf
#F,d>0M7bzVm+8
pXtya;=9
q){9 E
gtYR;PR[PRDRA
<RAzj.i|YS
r6Ph'aD
S5r~t@
aRZPWx
xlo^xy3W;x
lFxx6xdW&x
@xFBB=
)/`NS7t~U
}d\d[N}D
$Sc2bwV+
)xQ(5Q
u+'WqF
)WRPQQj_T
WS@^*_n
s|^5Wu/b
q2?V3b
h@@R`Z
V3dxNP
P/5d`B
1b`\4G
uRtV~.Pbb
Ql0OvQ4
pT{fsa
_\@2Qn
@ijijih
jC}\%5
^^ERM=i
2^,N@tJ
3BaHj/
lL6}1;3V
Qlp6P@
cp@nxu++
0sC2W6#W
^#_l*V
3_H46S@zs
-0z\+({hHwoDr@YDC
_tqHXMC
lIfumRh^D
4\H|E3`A
av,;aV
e>h/6P
Q<@vZ;AASb&
b]DAp>{Mkf%3Rr
3K`@$bA
vz%? P
G'b7k8
s"b/y4V/
3ubV^p-q
yMSjcXt|Lb`Q
.TO@jyL
q@GL$b
aVYNtDz
)\tnN+NQ
w-PV?2
&@}GcjC
3]UphA
]U|U{u
OShx@*
.7G4~&
2wQucD
^E0q@}}
,<@/@jq2T*}9G
QRz%NS
6u{nRV
@Yt<vtF%
g.+mMW
QSvy`SjSK
@UiW {,
R`p }{
X<uFd]<uFd <uFd"
O=nuwFd
>=nuWFd
<.u7Fd
9d-^01d`
R?{^'>
&j{Il,4
MUnPPPA
,1f]!u*}
f:fY th
[3m%o68X
~2Ng9-F!>6
6#u 7k
FJr2wUO7S
Xk3"D
IYh0-Jr
VxK;:5t
7[^SVW
7D52a2z
{M-(,M
l+=r0]
]^t%t3
U?@06A,
D[YM1D
m;@FxMq?ex)
wB0x}/H
Ex(KF`
|1@O^*P)
w{e]vh
pnE`V>
7l`1Xa8^C
@*Gia9BYJCW
t*-w7@A-
YrNH)x
%}FE{)
@|G6o[|G6+>G
W$TDh+C
79Y?p)
mZZN<@5u@$
7S|EEu
@ctdn-M
]f;lS U
mir>87=
d1oE.H
G5_LDj
$?@r-7@%`
Vd`@[>l
0@g^o3
ojhwd9oh^suV4~
m%X;C"
d@&3d*
0G3}+r;|z|MD*
#dzT}+
Tkw8ti
;O|MFd
|@$V bZyyBID0y7
bHa)LK
<<ysy$%DH+yh3b
'@Cw,y,
fu"lHb|
wcp@Vw
pG)0Cd
-(CP3Po[X
u~I;D(Dv0~H-
(((u60
0+*~mcG
jCb2t-VrPp)1D
-/bzG]z\H
C>r`u"l
YY5sVp@
u(|E+^A
Z&C;SKbyz`8
l+z#*5
b:y=zBq;
eFDE8|
][5b]jK
\*FbdDvjpca
+r@dC|C
M07|-<
l|)-53<
0*$-{5{
5CR0'%_XQ?
A+'iytqM
GtTs"A
EBt7Tj
uuQv\o
304,'.J
MwLuzCffj}i
7hyX~rE\\dZ
()&Ori"bS)
YuUGf`
S[%={Xo~a
z] Y`-~|UrE*
vL\eTZVuS
V_||hsz?9lOB{Yb\DzU
.Z)qhQq-
7{z0YXgk
Ib}7?=\
zUbVyu}
yu(A__>
r(#.F?
NGiIJRAhB
bF]Asb~
rG]6AcJ~
JAd0\8^
Cu$l@?aI
pgbVPKtT}wk
PiI??????i?V?
*(sUb'Ur^p
AtTsr@
_B\%TW}v
iytLcOO
vY^H_|^S
[cio`-
*D,-({
+.f`XoK
)X_:\%TZV}xtD
#s4/;qu'W
moGWFws!a
xp[uuA#0mNEAl@6,m.
8XIkC!xy
H@E,oV\
:&ynlf
iOWcaOjK
RiBMV+aMVqRO
aOOWaOh^
k-{ d0y\>
F+{$hP3
gf[c^h
b(}7[H
h{/[ ^
v,xul-Cgs
^P gY*
gUb/{ER{'9kb
'0BzgwwtXdHdbltjp'w[tddT@
<7c(~l
}>uK)u{
ctnYf5
a:]t6a6*
`FB`>lv`6a
Y`\i_p`r
^;=mT
3G*OCP;PS
^OM'SC^
vD|HwH-W[
3TRUWt
|fJOs5
l4rZY2G
##4t.CC
XNXDxWG9X
`)h#4PXDW3q
n=ItZWC
AuW`h6
XB^11Dn
g\DUU;}
ROk4nVYjMXr
gV5uLoGg
9lZU^hg_TbTX
9l"[U.h
~#f#?m99
F1e?On
gRv`#SvPRv{@
Sv0SRv cRv
_#%_']^r+5^/-^3E^
_Q^Ph^QN
h^pQjGQhQCRXQhI
Q_@QP?8QP?QP
XS6QLhCO@hSO-KOi
X77O_0
AP_M&N
X:MW\BM
PobXq~F{N
t[t JY:
9\WaJNu/$
9\[aJ>u'
!TeI0jK
3@>]DJu4:\
;"8N0{
8]FRcT
YF F|EK57!\?
nEUb?C
,SEuK
<2kDV\W
=CPotr
\hB PB5A
B0BjH?HjC0G;5S
$2q(*=bd
V!][]5d
kVPPF[\YE
Pex/)&@G
PdRaBF)
#l+]@C
S?N???)
ylDkDq1s[bZP<
~{yKFZ<IL
`prFLWd
prGUad
s%bFV1nf`@mRsfqP5ddkmilfnqb
CxsFvh9tn7
'"d<%q
csul``y^prhd{ltr-z`y.`cnCsca7"qdsdx
ah{trc{d|m
zvb~Z/
7!dC%`?)
\K-X159=WadCe`?i\KmXgq4su0oyL[]Hwa$e
a|x]|yt
mId`EhdA\X=`\T5QX1UL-IP)M)D@%HD!<8
@<9405841,(-0,
av]zynurqfmjI^EbAV=ZTNPR<F8J)D>%@B!6
p21\&-X*
!#B"%'F&)+)-//1335779;z;=?.>AC"BEG&FIKIMOMQSQUWQYL]]@yADeEHaI<mM
d`\X0hU4tQ8pM,|I D@<
95-5111-%-))
a6,|P2?V:o860Y|Fv
JGC[0xGcGI`rC
H;B:sy
}[ZF6:OF#
n^nn^^..
k`TXJP:HZ@
JT(Jq_xph
CLct#kl:
GjMocneIne9meX
etIneTxe
OesFll$
cuW]RGsOp
iWagUax
@ ap'vc
@cOjkSft
Cc`;cl+c
='tP-]e
Aews}kTcAzglgmL
&tC\ne?PrVcs:d
qcagDig]tZwW_
gtS]nt+th
_tCgmaXLi
?RN+@32PXll^
"kadgriaW
Lo`AcWle|ctolmW
GeZ?es}cgeY
JnanhatCccher
nan_atEe4ag"
is7nc/]s
gamrvuW,
R>ksDvCHusAQ
^Tlh>Oi#g
EgS&rf8
C]PfhP{hM
fMTg?p
e:pk@p[:s]
RQ,R2_[d
f]OgfKK;xv
']S Na7[EQ
ReEdo'Ie[
lUzrN[Wf
]Q\ry7duLxW?D PIv&dE
f;x6QH
]Indiaczex
Conea_Indan_
diadze^
diadzeScu
ol12.hl
YHEAP32
VSap6_tN\ou
GbOtfnuWdf0
]r"da3Rr0]s
]tDpr{nPr`ev
dh{^l}=xDttBfF=pe
_tClaEhe
>o-_em
@]S5cB#\^4o
dK&bg"K
[d[db]i
[]W\!e\Ui
L;n7no
eceXMt+bg]
Mel_nH[C bt
>#di=rgcMegobdgnkn]
&lF@[TP[
CegtemjitYalMgct]n
Dn}]de]ingr
+Sl;llY
iSlEet[lu
PsShVawe
'bteOocXdI
greXnt^
}gtL8utKvo
>8ut+vo
gdCdrjfnS
!gaWte&e
Q:tyWtf0]a
)eC `t"
9ea|Cr
YcSeuZo
[EYU[aEUcU[^
-ad%[rHvW
&gsC9;af
.g[A*T
He@B=S
Nsb#YD
Zc[r`swBw
8eHRe(\oJ
0PrFcs:rF
5D;a5tr
?\tFgtX]W cC+r
Ee5tr*eTcW
nn_^on^^/.
G@G@G@G@G@tG@|G@dH@lH@TH@
a?M?I?E?
li-nm)Rq
OJ3.72;6
^^ $ N
d%]`!alkhgTSPO\
DC@?LKHG430
?gCgCgC
YQ ;V]CrG *8z$
iskwQGh
t9"7~]ju
x,\uF,;$]X8i.I
wP7<D!*$
1pc&=ipU
kghklHo*
)X@grS
2arMN_K`
/JP`5rX
Z7'x8sgEzn7l(iJv 3e
d-Kc@>
\ uhjq
r7*/z1sz
ao3cH1ns
*n?=:pLE4M9w9;
kW_d ZK
A{@;N<
n|b*39\<%
TTO#\>
LQnVl/g
2zf,7k]
"RY)ovZFm
28"\S#A
o~-tMma{
bK}z}~6
7l[!Jk
*D[^OF
Vr!wW/3
ym&D)^qR0
a}yj/z}[~
Z>[okg@}
H\RU(f
(K-7:XXQi
(.YVf<*B.I
+ad%#)
zXD`r#|>Q
_UZP8Y]
w,d@Jb%!w</6$yND5
m");hx9
9mLLpw
A9?oF9
qsFst|
J43n?oxM[x
I^U1Yx
jR6+[@
Z:UX7y
!FB4s'
^*z#x4e
_>Y^eL
D};Sz@_d<
K!{ ;uPqw!/3c
U#Fw^XR~&S{@
boM-Y@
9A*6$R
`)I*W!jH?EaMY
X*Y{iJ
"aw+SULxsO
Doae!8l
twz0[bm
@N cfOA1GS]M
#*bXK4.5!
2'fI&N
/AOCu^
=/d,mj6
r3pqzr`5;&=e
)akh16/
A#o!yDe
/Xz5 5Q
|7~9")!u}
.43QJ0Z_ 3 s4&Q
0c*Xazte
DReR<k_
RBkW<l9
@(~06\$0
Mi4x(;w2
K.n{qXEoQ
%VA"GZm(;
)I26&B
Xp(R|q,!}U
IGM?s9
u$JjMDlm
\vLZE N?q_
6gTxd:
H9y.M4
2uH^@5
J '3Rls
+;ln4R*L5F
fdf|!?NXm-
VPsLPM
c l!jhY9&z
NQ[KNTG
C<TeT '.)G
.dX(g-CM@Z
*"5dv%
/hk~Xf6 _F$-Ag
q"G!'\{
[c_*&r
68J ?I
=IE.1A:$
`iN,_[
&0t q=Aq
Ita'eR5fd
0KfH)0
Facp{6
]E6@7T$
m~|G`*
UUejP7^V
@=qA$r
?GQ8N [r
kZaZ]Y2V);
!fRUm_
i26bv]U
#>DaHFe,
2c.d^Y|mhp}X`
1/^C&~j
-:a4{*
3W5uErz*P
Yp\+H.%j
n:K`dpc
3HOgW`;
n.Um#D
"lf w2
@*:{,dNyCokXU
g@sBF2g|-
@0c`nq
_kLhLx
']uSR-
@z=pTn
r,R9&G
MA]odc
-|TJ*$z>.C
{|^"xo\?4ux
.)CV{FW7
=7%~vS
2K>}6=H^[
Wj,K4(pK
gsE$Xl
oQr'u?B
y4KeR`#
@ku_0-Q\ZNkRNsCn
zj7VJbh\
n%_SYd|_
LFpE>$cP
zQNnuLAd",
+Q5XVwQ~m>Xj
=r+XPwZ
"|DyE;N=
^5H9<LPSi5ZwV
hoIZtjq
r*qVNGm
`G_2'{ZED@4k
H Vr&Wo
3|b9oU
t6qT1N(|:C2y,
ZWTE[4&
rS>oyP
K=&$]U3>
#2l0t7r%
c[=][s
\[E9&8`e
px+}/B@
p~}wp[
:L<1!mijE
"ICAVk$Wh|
@+5DT3xe
*w_mKo0
bwa$VzsCF>]h%0
'H*~jT
VK(n`hi3bM+w
jA'O#K=hsr+W
,g=-~7` PA
$+%,=)9;mWX{x98QbjZa
TC`!QXq)q.65
aIHu)^3X
ppe3FH&g
p9zY<a
3VP_9S=,m
_thgPo
KXp`ZnE
" %)>)y>
*@mlkp3^n{hr
8wzj5v
CRcIHd,
bW$~V9
B\2]'W
=gk)04fP._T
X|Ib}N
%q4~v23sBk
+T:irW
\0gVDEsk^
-4<K8*
UBbkYhSp#Aht
4uZg#ZbI=nC
*)BHg,
u^k+II
-MK@<A[o_UhI3Qd@.G
EnrY75 }xJ
/eD;O]
UHy8`}
Oj"w#F'B;@
5_/aCTa
Rw&\p?K
m SC1.n49&/
EIqUe*
}yV`~wF5K.a`:
vk| $K
fb5;^6
_OJ03[oWwi-
d0~bo)
'!Nukp
l;Va0~>
s~37Wfr\zf
vrP{7A\
!R?KF_
sm2G|5Qp~CTG* :(2
WE@2/Xo]YiKN4
&7|3G>
l2x-^to
uEo<I7x
GI: ThL>e
$Q(-)yvF
hjF7s],63=
gH%:ovD
0|/mwt
2jxjP:h
8pH(Dwq!Saq
kK9<-cS
1#Q="J;=!
XQ]X{}
>, `=+?-PcjN~
zP*\z >
/SB" C+e9
W%;r-dw
)eAr|:(.>
Vn8I*(
bQw1lggl
UT7wQ{_{%<7
Vu^~_2p,h`\r
MS3jz|,
w-|W<AV*O45
64<t$ws
w+S}j4LN;(Z
ik.v(Ej'Ah5O75n
jw2POH
c#}Ar 'Q'R/1
7Y4@K5+zl.V|Gq_z
FmQo9aj ,
K^tOQL
G2r` /$
_cnQtT
306eV|
Ou8Lk7ZyladMhbkX>
b#uRQ/
sX@"Aj
`?M:9#m$
V"#M4Aa:1
u q\29
RR;+e|
uW`<ke
_F"Uk#
Y7WWZoJ@Fz
&iX\h5(,iKu`
0QxBPa
r^M9fk
2u.p#[7
vX8 4`
,"Bo1wF
@3Qq5ftv/8
#LK<_Ob
75.m#7
-w7/5(t/+
({w%O)
R_1>^_
K/fvm%@X#x*Q
)"-SZpbB?
Y0aWE0.
d"7:70ul
6/YEn(OUV&
2ad*CXe@uFDHMet
`gO<od
AqYOKVL
giqwX8B
qB#)*;ezQ
D:pp47
2XUM?A
W >/I_\
B.-=r6g
7kcZ6JVN<3==y*^O_
?SgjvP;gfKhZ5$
EgoJTQd{P
c03niA3
}\`9\"
tnv+8`'~VSg
wT_mvDU&B@X.Ew
4b&ZJ[
&:z\L@DCi
=Rm$s#1
1`%'ko&
N{7X\L#
Q%!nb+ ZQf D.
-{@Lm:K2g
I1gPwUw
A(- Zw#9pE
*Me%[5O
r;]OZuI'u&l.G3#$`l)O?_x9
#:pi2]
N7C' {
\!$T={wAP
0z?$(0
\FCIc+
zA-RO[9">l0M)
"F|!M@JK3F@O0U/4.OYJb
G#|n,r
fAGAC>T'j
/z[t_+
Th;lOSISs
*;PqN17
rbQxe ;gZ vk|g
ya,9j,
~6.pzyz
Mi['k^
Qsv+)1s^jyN
IU}~OMw
Ge&(\>>
.r'3Ic9@XP8
cZ^MbkZc^
k^QYRF!Y9
^N:!ON%Odi=
B8N 2L
m_B6{x>4
17b"e=KD
DzFZ0h\ BF
I8}&B{
jR7!VA<
MCm]ye6P2E
gz%Ppn
@)rp0(
0BB7U2RK
`Y&{Pr"
q5P>)M
l5@/Dj
p@>/tKLx
f$nUVqRbn''G
4']R<9e
{5\#w8[
^'gj*)^
_y}8>W
=JM+yd*n%
^7hBZ\
3GD0wh4EPx[
^5g<9P)WhHv vk2V'~,4S0
0]]G01
b$F7#y*
00@]KA M1yP3
}SP1*f
6"|I+3cLz/
A|.tsx
K=bT1Y
&SNmm8-
w #V{`|
wUtuhU@{9
6C )k:CGG8.
h?y1hpUm}Me
y!#(0{
*sejo\b
\NPfzR
S&S?'T:
%),H]uZ_w w<rA
pS#+0b<f5%u
I`;J.L
#j:OJY
5O2lr}M%B=4'cL7
gP~(ExT
Dw ,!i
Eiq}^[
3-p&Y"w
}/aHYe
XKnEca[1u
^1_>J]
vP|~%cQs#Pj[
`Ju9OU
zU3 BH'}
;?}oT)
+?h9ph
`xc,3qp]
uezo.C
~&z]p:
htlhV?
SFvIc^
3e5&t4
t@jnVc
.{R~ty
j+F\@'l-Si Si&sVR)I
YHz,nCsFdm
%]w0"3
|5hA0lgx
3(0V>(RA@
w^%jUo&
DUjIaXz
iV@nl.4
*[s{\(
`=WnLkw0gd4V;md53)@
o[;Si-R](
85.+C4y!!
fLK9SQW;a2n
=='WR74(BUZ64|
*:FR P
@yZy!
7K2LZT
En39}_zZ
Ymv5: e
xe<N@ZRFr
TEiu)?vFZ
v$L&H{
9k'ISg.wjDOu
]*C|nn
R_{o,-,F.Z
>[^(j\b
! F5
hMlJS1[uu_
|L<uI3%m
m0tdmfKkzrQjF8;dx
NYX[po=
f,xOha
'a^]}r) ?em
)&e.fVxw
-h}oFT
UBydL XA"yZotg
dmik+qKk[T$uHf|AM
u_-c0oly
G+HA4li
xp.)8`
^I;ZEk\C\s'
2Vhry)"
_SE<L%*
Y<=t83
eRubSJ
8|Vs[>f
]sPO8u
/yD[>l
\YWd.y
@3rf/,Bj
oV>9D>
06Bne?MGW
a[=//.z WW
!z/|L'O
Q)9$^I&}I
bYKEXF(MwBU
j4-Xv/y,8
(.'egS
m;,"?A
U\p-Rx9.kX
3s"h6~U
'3'9,i
Cz(a`R%
j!&+pDGzUM
,! bK:6
-Oe.nG
X>^ iFdkx
NH Qs Bu_.ti
PyJE-@ge@{
xU%ylwX](N
RGz9uJ
3jwK%Z$]I
A;?`pXCug
J|He^/@`4GiKl2
#E#|sW3`
H`'!`Om
UQwZ'u!5
fZzy"~
-%,Ft gG\
Jp&*nP
KO4y~xV
xY0.YkW
,u0Wh@oqG
nNM7S$5)\N
r^!JccQ{WZ
X3HH4l9}
V?9U|e
z;hVxv
imOX'>|n44
\b]g'O
@{Nm|M>G
uE~=%Y
-V`Q(X
k1-+wz%`
KGDTbT
Qx-"x{+Q&
FN5/q1E}{
O%*ff,
f@o^wGYS e
"{v,gU,$#N!~qqoBD+-
_9S?U>[
|Q2{FL)P
3tS 8'`6K
S5vY1c
Hu]2T|cD!
O<dw:}"v
(zk>~@J
00mmjSCZ]
[];6~9
m(pDI`3Y,
\[ASIJ=
*"TYB&dleh$$z
Q:gn}H
RRD>+6$
<fHZ3\
N)hNLW!#<x\8b|+
tG +`x^o5I
>=M_VW/hf
i`rLC'}9d?wIU
|M--Poy"3
:WssSn9&
6BrfnN!
[F0Jm@=#$
HNcqp/Zbn
q}!cP_\(yxp`@ts
l+Cp"Qxu"P
kM)E({Te>
xuHp sR
$>D*SL
N1=No4K
B.\<!W\
iI.DOfk
W$D!~? D
y|pGw7>
HD9b98D!~]I^ng
o20+t^e
}g,M.I/,
6P\Wb"Kfd
o/f{g4]3K
#11H55A
Hb{OS~
<u:8F$y"7
V0Z/&h.
T?F&1V3iTUk
YT7@Ga
&qE8C.l
1K\^t78/
2V9*J_akH1}
xJNf2J*e_
EG&efD
})v=Sn
4<OVS9
S]9_uc%
C}Ve|` Al
)6THpe
=8A=cN
BEWhg;\4<
.$#~ep
Kh$=Ug"
]XZ0H?
:rZV&3$
4dY$]m
T=Q_e6
:Jn2.=
;qB Yj
Xx]/}eM)
)8a=Z
G\+%~>
NL`,2G
+4c]P,EBs
Ep$=`W [FqN5u=re
j=whG6~*-g(
w)r_k/7
.A]O}y
5FRZcNa
JOd#6N
M+Yh`l
/I ;Oh]2\
E=B>Rq^NpI
RA69]8
wcXCQN\}JPfx[)
5H-,dbOAp
oFyo|W6t!r,75I/l{
z@wYW< qsH
4mK% c[7
ikIA^=]
r @)mA
^/iw<DH &K
5A+etltY
.D\IJ6/m5@
ai>@|.
xcv2t=/
OZ]oy]R
0ad Ah7
-q^DIJ
s@+{Y7r/>6Q5
2gI3F{
XqyceU"XA
,o!&jwSt
NLbfJ)PD_
#8LG;o
_dd5]p
z3;&)i
(o6kN2
qvr)-U$LV
b6*k_=@el_.!'Z
qfZoa{
{Z,U0E
`G?ynT9
<~C!NF#
<Y39`#
'MEH +a4TUP*E
V=MB99i
7WNeG:~
dgM} =QV4`"
3#GP\:<*p
I6[BO}
%33=?\
{0U:r>sv
`U~+Mj
?8R8>#
/H=MO)1OQ
@V3A:?# ~R
UXh^D=d ?x
&g},5ad
f>D&_;
)QZ-SVI
GoY8H,
HCGK^D
T1E}Ea~
P:'R__
9vXa9O
@TL+$o9
3Z;.[k^P~.
F ;DH(n
m|.[)T
O)y/Pw
_3QFrg
Bvd`$0F
A@u ajs
OLYBAYhmZM!mA
RJmcvbT0@o
tE d.O
TYTlT9
#-+t,&o
_N>b)RjQ'-
B,w/tj{
dCIt&Zx
Mu#x^trC
M5'7 7PWo1
;3ck,?e uljFvblZ
{Usc.4jX.
A;EA'2H
`[YgOo@&
vx*&\p
Ga<9\'X$hz~:>
BGOP!e
Byn3>r#0
d*>!tl0@*Y!Ah
).#9&x;
1jc}5}X
liVN+O<z
"1<H2R\
~[H_T0
'>-7 YN%
"b?; Y8gs
$Np9?i$
+ETVgv
:2D:*wfbp}
V ?co5o
^/})u$1l
,?qyF,$
EKDXsPwL
bz6?=k
6Z^5}}FPA T
)Qf*xj3>m
.ntIW=\|n`
al4lkm
y$YW2&UR95`|Td!a
'2%HBR
g`v9eH?
Z6E"2<
UFgLRtT
*CP4f`
162A*Id
h`| Os.*~H
`@}e%Q=qNL
(5_bu!
mZw'Sj
Bat`V$
;.lwba\
TX7C Z%
e4RR'f
F-)PEn='_C
EPWqSc
(!KC&<E1_;
bV !Q%>
dnIA1fqL
I'E{Q6
bSblo\|_
*t"<?Aum
;,Sav`
n?Fwhmy
#s8U}g
p 3#|
zqsczk
D7kP0qB
:goFXf
~;1=3T
/B|#38>j
M!4* wFV0
y@D`ePN\&-bKc
!mn2e^D
m.J:6^9
R}w@pOz
sybwi#Gt
N=(D<];R
LLOm-4
Hi!R98f
WQrB2B&3H3q
|T9KiF
Am,2aR-
k<)E</a
6Ujl\A;Sp;
zYJ#pc$}&
&Ni'Nc
.$|$DJ[HT/
]=iq<&\W
,$<Yr!+%\
pSt]W{%
dx#&tE |
QWHpb6Hz5{KE
C,1E^n2(@
A-$kN|<
LRrQ(:
iYS:5"i
-{]tWl
WSV%4eK,o
]vqd *
qqg:*Pm
IaAd7T
zU\Ko,U]A
_I8d";
"5hoBh&=
vY8EE*`f
l4k#i9zr
u^w#5d
HB:`k;
tDAZfiaU-d#8NI2CDr
,-kU!(Psm{
AZ`s8I
Ka-xeNJ
.^1=eW
(NZFV&
8n$N|a
Ld^2ZIoK
yCU2*aK'
^LD8`Z+1\MsQ_%S
*|m#jf;|(
LLo\W8m
"rf6'(
p FCSVcApz
dep]cm
rS_0Y3
x*0#tU}
#D"L|HT
]Vl?k/
j,~seRMjPrBNA
a)AYX~)
wg#h/])U
I@/sk"0
^\2enN<w
^loY.b~
Xlt{L5W+TUahBl]
|9otY\`#+_
dBsh[`,^GHR
55aw hC!O0@
^KOUM6
:2 WR^
*+-N{e[&_
;l//v_L
| vgT.
."jF%Igr
=Z%O|`=
yMhPkS%
^j(1ufa
E.k{\N6x
'a TeK
e6P=}INY
?"[wwE0=N
hq8Io/
iVmn:~h8Ex/ J
O57P|o
Ya/%:{sA x
Ads"Zq)
PYE5u
.?30Tj@:
cra);WVZ~7
?uCtX1[xs
w6uNp"u
+ K&6l}0P
xY]d "f9#m\_J~I|bsi{
+fs|a4;Y?M!JU
HWU}mSS9
7\6TSYU(1
`PD*L
@k*Uk/
FkQ;IyY
q_6B|MZNml`eQO6
7:`[R`B_
8k0SsX&
2om7)bC\
u:fR-^W=$
gXb}f:
m; !Vb?5
7ap mR0
(DuTzVomAr;
UmA3Z$wEVat9
=l\XkIs)Y;9NV0l
SK[5O-C
o`=@ Mf
>'g$2;,&,8{n
2)J'-1]
xW>U5J
0Hz.V?[
X1YS(3d
kANyfMH
yt^']}$Y&`De5ai
YjbaCb,l+
PS&|j/*
.N@CGmPq)"pe
;]]XB<l
~p,~^ZW
[/N^1#
3TtISBy+FJH<sd]R
/|"[$V
qB6GRj$
0 E?63VK<?J/
p[=+tI
:\d^(t
Fl`,G'(
*_9%r0
M<)WB|i/HuCz}
\03$V4
_]2~^j
Nn!pD[
-vC o$|Q.T6*
E{MhkR%}
kFAX*o}Nf';<-*.#
k?7b|Q{q6
.Y \Q$,%(
n^KEs'2
]-"{*o
{u. Q[
?jF2qHa~EC
yYjL6_
9t~[/ta
;T>pF_/2
5J"%Ts* %
go(HDOZhm{>
QaaAy$9k
Vs.-:zU
=YqA'e-tdiX#
.rw3.f
v#i=u^
}ZyF'+G;B<
8mGqpyT
W\ NPjjT
E!X~85Y
x3~&eJg*X!`XCK
iD"=k[I>
QB]d T:3
>j?x?J|
)8g4>J
%E\~SZOr
>\$)4BV
+R~WV\
(^18aWMOrg{
w9heze4
G*dP>#4Oy@6r2nyN9
@v6lhQ
qCrN22
32/A}Jh
B}^iyB
2poZK)pG
nYTi}n$8`,{
o?pg)/]
Ct31{;
XUumb9Sfm7-8
ySJ9s1
i^\1tGCT T*
7w[h}1I4
a2(iJpF
U0.=#?8^bT A[ZX3.^
4X^87a7,Vds
Uh}B}~M
-Axq2>+u
rvmx*B8NU^rv
e^nstZJRS
t+d> #I-
,0,5yD
&n0=S_I)
B_=F&N
V}Q&.H\
<'6p^9nSYC`5x
f+ IA)
H2B8=H|(c
Q62"[5g2;
T,Sa>y
xV$iJjLG_-fK
AwHfkd
%qTx4"
.z=cPj
pRSDAm8m
$pGLfCT
tbf;cAb]5>SA
e13mwd3
upqR'hXa
vbqXAoQ@v
)i+S|+8
Y;[dX<=K
\aRaOvV <
yo&S|L=uAixau
Ad6_;F#Q"
\%}a} "
-*%~P*{-ecO+
&dDD`MOV*J7
C8V&27`R
6[fK-R
't(.2Iyh0.C#Ob{y
wOW]nI>e
$_&v.W1
GpR7O/
e{BdtLy
ilhXP>'%
^\3X4m[
[$HYDTD
zYEEWl
*E<CJ:Dt
,~auaj
}km<[O
G:Q'w85c`
#m5> $)E9
nk 0(}
#2d?^r
)]-!e)h
&=*XSF
#Fv1tR
F$ujfW
yf.zU{M+
&Cpy)o"c
B\y![8g
iapLL7
Xs3kPCU9A
4]l^WZ
*ZZ 0<$Zu
)_:$D>P`es
^f +=ow@
MkLC,1
rkw8MOUU|
.MEIP'H
o^|[9A0 =
'Usw#7~#u
6.:LETJ
E SRe
p2!tS|
x">P];X
L5le62
^,PZ.j:8YA-
&frPM:n
187uPKf
eU,J,c{
_SxR7UtazT>w
jhExh*j1GG=27L
KjO%u7
CP##*X\
stX9=P:.4.
V5gXfG
g3nT`-RAt*.
5]Fgvj9|=!Z$
77s&N}(
[c*V]Pv]^Tg
@0eJ]]x6M82^ g
9t)%RdIXz
Z9GY9;#Ifi7~
l}#O5Ker
H,Xw`wswK.
u.x>^q{
pVIwa8
HmvC!-lG+b
HtW@c.E:4
$!;MZpkpp4 a
>TvV%v
XA@IDeB
!;eKZQ]~ed=[iM#
%qJ~y0
C[W"c!*I
:6 +0kf
yI]&'>
eC}o9c
w0Ch+2xPv
&)VNm'
^?e^PZq'u
/gR9|7
^$_buc
P<"L+9
JVX}&)-",
z-zrflyP:ry
Ln?DG0ct>
9&,F#Bq]Dmwk:2h
8s*Ree7
pgc4W "%_
v/gd!V:N3
ZrsAnGH
+u>Vm3r
`3=g*$_h l
@'H&#MF
z0#^H$
y.gA!,&x
6-l{%c
A;|<<;xvtd
/h( eO*
ing\`jr:5w<g>]wnyEp\
X$|Z3},]
gleLi E<1]51|a
:qxS"!{R
CBt]w$
.E`IXU9
o):cYsb)
=VfJP5"
eL+5Z
ce(8Y,
O#+7A-}G
Qyk_v)Ib?
+7CkgE+
+Wm7SJ6f<I:
jf-!`-K
n<=hsQT
,odIYD
sqVs$Q
"&IV+l
`?Rj?;f
-QhZY:pF(s
JKy+y7
\d 2t$
C6/LCF
:,n%q*Y
_a uuN5^Uy
k`s*@jU&
N#{-aI
ZW?| }
m*4N:*I
aXV_5t1
a8p/-#q/
^WGJFQi{g
w>>)og(g?.S
si1~.;Ra
^{b,G9/tpo?jjQOgUp
KfxEQ!f/!wO^_#5
_*pWq2>
=n[ZAhL
-'#m|"7
5"I%SB<
hlQku%
;X+e $pgh
"{N6X|/~'a:*
Av$tXk
eY:JG2m
+aC~E9
u~#=)p{
#oz]u0Qd
tlf>+>
)Le'AI
R|5%x$
[Z9Zd2L3^=
z.XzcF?
wyD@Pb
DYUx.Z
DYy ?c
q)UQ81"
kQXjk7
*~dCY?e
pG4+/'i_y
'p4@i
6X'+u)>k;
rftv~;
93>X.AbZ1:+pYdD;
df'Q1BN`W`K<GP
,#]Kr$v
ILfN.P,NR|L8
W;xi:X:CP
jGXK p
a;@1Va
uXROeU<HC(
1">rIq
rCC*?j|xOWJ
jSS*2N;WeIB
~Bf[}#5
q<5x125c.6
]B$Ypq
,T9I.)
1=ai~dc
''S%f^'
U>tmN@qPkT
u8|&z!
l8s:H%)
a|f$hh{<C
uww+q$
T(OnP8zr@ vn
U.5w|IWsVMRI['{G]
B&wy~u
!FQUP&X
B7flrEX(8`
?KsYp/OW
I@v=X:
P :6E;.
qr4"g
(xgn~O
vNjgtQMZ
=a3<[B
h]ljc<{
r>s]<}
, D|VX
Z[O=6Y$#7
7w[GjE1(
;m-3 b
urB^#mf W
7|+JGCeRV
>4uH61{x
Y@cJyuQz@g[g
jKvi|%N9t
%5(f?!
'@C@Jm
4ar_~^f
`Ws)T|*F
C}f.Q[6g
(Y%E[L
T j5ni0t
^?}IsfP
JcOnX<wC
>*?]EW7
Y+ox<@n"@o
+(8bSG.
@,= In
xT9[Qpd,eCV=
lI}SQ0
zX}u5#
rep|/_$$Mt
:dxI]1O
X9caUa/
+AmqxA3{|o(
#&~;|R@4
;o\R!DT
wi/zc^B
]mTtiz&@Ppwx
Yc%@$)4
Og~YXu
fQ2WB=~
.1~jYr
+hz=;/KM
BB4(O]._t$
D-^{Zm
yn[* m
MN<>@'
&?b'}NMMdlx
L"\)|oPk
z\@qDE
iwBWxL
SWag[@I,
>GcVUd
<n. cYxXQ&M28
Ddy%d.7oqV-'-
6<%ynL9t{=y[b(X~pLo
z)f:rm
\XUXg+,'
T9HjZWq
m;@l/|Q{FbAob
F7 23?\S<.M3T
)H{d6*
Zi8!IN&
A0MvZnloo
r>rXU|@z|-[zM
1~3PR$e
qQ#l}_4=
kgI^5KRt0dC
{[$_Q
08#UG7e
z!|Yb$
O9oWpr
Ltv6IN,
!yvK8Q
\IM(':`
Zqc4JvIY
txjBxJfq
v-qE>T Wo
={wj's}cuvi'hSL?
,t&%z5{B
|*wh-A
"^W.6F
*wLG[5V
^V|SG^,
X-2nVou[
,TS;?:r
=kt^Bs'+R
GUr#JOo
d `6(B,
su}!fyH-
+5f>rL
QjUs%2
5ez_CS{
cs/T=;WwQ5<%jcv63R
pa%@Og:E^c
/"L ~|_
F*Ek{CD
*.52d|a=M
qFS7/mu
Hr`(]Z} G+
h)QIAf1*
?,i/l\
|{f52 ~q
FEqI?'gc
=HXzYb,
+pGm.!
xhZ8y_
2[40YAI
*B3s+5Ka
J*AFIY"{
q[wUGpe2
a$^_9}SR
0~NhlSFPo69D
\7`T+]x!
tA^o[.Pf-.sEaW
1mT*?d1VN
Lt?lI:U
e.g-Q}5v
"K|3:P
mopG2]
k!MwF<D
_f&&O$ug"}p
C%^%H|
`B*!c(DiuD*XXB?wQD
Sh=>x5
S'B/$b4
A4aI6b
bFYG\aV
6Hwm =2(
FGmq+7
rrMV$CL
_NtU3b*
v'>()s}
8(E.z'h GL*<}{}|Q zd\]
@_cqq]
OoXGZb
2].,n]],
>-fZwis
uN6CEyXc
Dx}&VAK\zR|"zj`
N|OJZS
-\]'LR
YI]Xjkl
qX}8"I?
0TsCW]zEI
wLGp}g!8X|
>EYcM~
Qm"63VV
T?KC|*M%P%
K9\4Fz
;I/|le
;8TmFq
!eDr,0c"C
.Tr4H8h[4
3[.R;F
y?(Cff nal>
*moBTgt+\]*
AYlqFT#
#S&Ze6f|W(PtX5
(>>x_s?G]
"aQc<j
- |! jmG?
t@v^h>
G2L/ouB
pVaH nIxe
{5i{\\C'G0x
w6n^Z.'
nn~^~|
kh7ih7ih
o7NeRqXxR|:JM
s5[4eD}
CmIr?YQZ3XPd ZX
*v%m[(s
S83wR>i%}
<mGZ_b
2m :mc+\R\+)m
QM+5+6MN?6
6r VKrK
X $Z-8$&
XutRaXBT
t2AX9k1X|taX
w:twU<U<
w=w~==
\?UA\/Qy
e}b\|\^
h-kBj7Q,S
Q@\X]^ZuWoWkWmX
&.@&9.1
,&8sRf
QTwQT>
a41W'm`
y)RloOOU
n}(}{two
!f*?wbG
G4we)d
_'nRHV4
jV~RO_CK0|
hR`k'p'
](4,9GX
cb&c*&c
.GvM/GVaM
BF61Mxq
M(uqEa
FVSQM
EAE1HvG
SH6rCHrT
6qswwrwo
&qsws|
up6|_!
o?2?tO
|f}f}g
taWBB<ii
ipi.PaE
sRhuBuzT
"e/t]4uU
uM^uE;u=s5s
NFh>G"
p&h`XP2
yhxGry"jy
ttsYs6sz
AzsxWs
zPsWHs@s
8s0s(s
srrr>`W><f.
aw_fM;
IA6>229
nx_DeZ\
oo,]!]
^^babU0
Mu;^Pk
kZuPxr]
7 g7 ZwX
"1^))`/
j]P]F
g\z`Z^Xv
pX^kX}_cXVtxZ
t+X^#q
U`V^ptW3q
XqFTYqW8>mggg
{\[tryovV
vqujoTjrX
!&vh\1
WSXR[lrlq
SXlUJYmVCYbS<ZZq8p:l>m0k
MUNT=TRpVbcc,
8W?V.U
n2^K^Z.\.P
g"$n/y
'^(xP H @}8
*C};YmYmY]YY
Y YX59Y
{5K-K7
F:G:G:G:E@
g;>hY?`Y?XY?P
HW@W8"J0@(? ?
HepLLL
YUYUMUPUoNUoNUkFU(>9
/2bMlUH4RUH4ZUUTTe
sP2:T1fN2fN)N!N)N!N)Nk
c=X5X=X
$FF2$FFY+q$7~`>B\:>q
t16{@> $
ODh/`iXYPtdHrb@xQ8
W[2N<6JNM
d9hJMMM1NoMMMyMLQ
Q M-RM-:MhoMyYRMkNM5V5UoTmTU%G&I#"` Z(ZXBi
}$6 ZY><
n8@IiD
*X\PKH
28-0y9(2 >
_0J0<JN
J{_]JLJJ?c
9JE/0JB+;J82Jv4
JIIIsIj
%?Fctn6
~\LFH8vQ|rNrMiZPO
8@I;ww%e%e
`fXAPhSH~M@b8d0e(
KKu999G
H&F)aF
<VFRVFNBF5d0FA);FL62Fx3
F|= F>\ FKgE
FP>E5EF5EQEK%FC%F~
FF5EHzK^
PVGSoLWzKXtRl_QObNTEaId%28zScfNcfNSfNSfN
X0P0HY@P
8p[0j)(l/
0ZBo0RB|Z2BX,B`$B.NB4PB-ACBAA
:A1=A,:A!8!9,>(DWn.d
7KLD`}U\_$Y.c8+? :
bi2y7v2
l@[8d'0`+(. c6
>>2?'D9?,?/?w1?
!?J$?I'?K>sp
#{o=g=*^>~\ >+Y>2=X>lx1KE,B
e'bNdPf@
%GFbw55$
~`|BztK
^6=`9X&
S8;>?;>?;m
;Q.:M*:I&:%b:!^:
W:6S:*O:N{:Di:l
)]*B)1c&>!M
IY%gU!CQ
4J48F0LB,@>(Dz?-s
^EndmB~l^hl
@z>>QBIMQUYZ[Q
c6.37GD7
7Z6\6Z6V6Z6]U6NR6QX6K\6V]6P!6#%6k6
0h1r1]2N+^,Z-.&7
8"9mZ>(Kc,L',^d.+`.
>B#PHvr}
T $)A(
(3=s\J
7*5A<#*
(,KC,q+
+'/+(|1+** +
<.8K#!h>MZYB55uun/:
P?j0T(kT 4
N'\h;`
=\C\xs\ps\h
`-('~'#/o
/'14'0
~')&~'4.3.|)y+
$q$ExVd8:3
iwR\R\B\xB\pkbh]`xaXzP
`02\(2\
$)%~$: y$<#p$=NX$NS$LZ$qQR$rV5$s;5$e84$f=7$@#*#W
$W#W#a# _#Q#j
'E|nKKKKW.]$(*@*;=+BH,K,
6-q1-xT.
%\GG%s!
x"p#hD`MXxOP~MHR@78409(f r
~MM;N 3N ;N
6 (! W W W a .
~l KO K? K? K
?% 8G AO
AFz8*0**XBCY%K
<<<<Yf
|2: ***.
`e((5U~
{^nfks-U%U=U`rx'
,4,,X,$#
lO|~~~1~N.^^kr
-C?^f^
nn^^.'
4p^xCxCxxCpxChC`oeX`P
&p$V*\(f
nIJd`pj
`>B]soBU&
h4AmD\i.h.`.XSPdH$
84 0, (t 1
MMMx;p
'X1P5H0@D8H0<(E Y
7==bFw~h9P+`+`+
6>442:0nl
2,fEkGQI
h2i2iLS2"#
h/ =kCAHN
gd/nn^^nn^^..
jNpHfR;
ExUpfhg`XXPPYHQ@Q8O0M(
&;!kA?HM~\NC68BODB?Q<Q>g\@MR=HE3BG1<Q
#^||tt!
UHN@H8J0T(V jQ
ox>eptdh{a`
c\QZ1h
. (m.s,y2w0U64Y:'J;8IO
np;eh{Y`
P"H+@08e0{(p Y
\?UEWCDU
``\a[]\
ws_}MpJ^LTNZPXRPZD^IaLfd]K)
XNtpVd^{bwwjRWP]N[Da_e
jF"gH$1<05RNug
2C6C33}#}X
2^^zsvxRMx@pBhL`GX
H?@A8;06(
Y;UHfF
]6H1-O+AFGh
oakmG9C
-X<PKHr@
?:L=8A3f
@[^80( ]
Mvy\]c4+]oxseGQ
.7DirW
PPNUSP=b)0&e$2nX.%a#gSqHf6G+D5\
vh[:Cx,ph
` X%PKUL
//A\Xg
[l=>((
VzPuJutT_N)N"9$1
8>+^7HfH^
F EEEEKdHrBZPN
%47afo'
GxQp;h|`~XPH
('H?@G\
H]j >I#JE,IJ{1}P
>!;DHCHI;xJw;
P4;3B-D+*p"1:
nn^*B2
%HE#BEH&%Hx&%H7?%I*B*B+Cb[25nh
UM;HH4
MIJQQ@
VYZ75rT
wY/sr
LqLT}w
VSOsROwY
>~~>^>^
4Wy<Y|GS{
O{~`{~`P}Qb_]f_a
Vq)k-m0|vMx7r9:C<D
~3:*.=@ar
j2IhIh!
_T$^7$<Z
Q:eHcr}H6
\4X}H\
lA*`QAd
a~'+|Z
Qejxx^$yqz_
Y ;w5,
afPHjc~x\x}sd
;<P`5}`
aJhA1`
Jqd`U?3v
brm t0[m
gqq"=`
WN?hgwd<ae
afZNQ]
Zdf]SbZ
0z8z0q\
zy.y9y
q49NyYy9
qJ1s>1srNvYJ
b:1s1s v9J
4B1suy
Us%Low
r6 <pv
wZ1Z;1R8Q<
Zw1:t1a
.r}-sm-
-s~M-sv-s^
V-s>-s6-s>-s
^-s_-pu
<U;5;w
vnE;E;U;p
owu5wnw4
op%54nw5
"|R|R|
|<bw,bw
fs6sFuvvfsvs
n,vGo^RfTmHP<70$
n&N,gVGH>$F
lg/HK%
v0oOPg
WSmOiKG#}9v%j!^sMRoIF9-
Kvx;tHtIw
sXsHvIv
#,/IV*5$?
ooy% "GO
y<oZore8wJoZo2eX+y
N0( e"
uAhWNq$
e(}@y(u
"WWWWm
djWxrWpjWhRW`
yXPH@lx8rW0jW(
9oL888
L"gA`{`sp[Fe
`H`@l+F
L1eD)ev
u-b*b"R*R"
"YA-q.p
nY^c^anTn:^
(&I^C;
0M.X.N%P
24 gRy(T
jX_b_Zc>
%<Ic_>.
f(U$CG
pcYrnj
:w[#U'e'(
b8DI#)6T&T_
u"^db9Q4
~XeP[H[@V
wGDNeUQa
_Z_2iLk
%HK7L?
}FL D(Z
%O<INJtym
i_U;Q%E
Ixxp(+0+ +
iHIOYbdL@&
XJrPHn@n8t]0'X
l{dsl{f
@^@^krdSl;d3
%G<Iib
}=h6s6s}
sIrnR=9
CIt9I
1Kiwiiiiii%@D>O
%@KzM}y}Y}
}}}}}}}[}9W},B}Q
%GHr<Fp
rikcUO@LHD@ID9G2>D13I,(F(DB
)`CXFPbHN
hiiiiiiiii%C>D
wMkFbZ
%De`y`
zR]yly`y\yUyM
ySyYySyDy
1R[h\Wuy
H?I,}z
hiYiviiiiiii
CNJRvBv;i/xu}vyvuv{nvjvfevTWv/9vvuc
SuzuzuZ
SO.n2r
]!aUYMAX5L9P
9J4OXk
!qyp*5
62jEGa
>JxNp9Qh&Q`
EH'A@8|0Q
iWiiiiiii
54Pnrcr:
BhrhN`r^Jsr}VZr|RUr^Tr]]r\$r'VPr=yf
!I$]e<H
7EahBlb>l}:k~5n@1mD+mSmInCmNnknmxw$jl
ONh}Yp %"
3YYYYYA5K
D(E7>LHTO[Wcxgpcho`Vr]KPOH\@^8Z0#f(
I!+F#7eB/p*n"nEn=n.njnzOn@[nVW
nDc~nlynhpntcnN?mFn
D.`i1-
2 !C$B.g1
YYYYYYYY
^^nn^^
>NYVG5"
YYYYYYYwYx
ZY\YDYYYzYYYYYYYYuYTY2
g\fGf^f
"TP,G-zl*
UWrWn"%
a_xOpOh?`?XP
YYkYYYYYYYYYY.1QN
cWcWcwclcpcqcuco}cl|cllcZ^cE#cYb
K<KUlFe"d#j*jehgcag!Sj0Ld
{x #oKPd5beXs5Z5bJE
er:=!.b.
Kk9iYa`^xHpGhF`MXTPGH^@q8h0Ll(
_N_H&`[z
_K__AK__AKO_1KO_Tn
*VmkY_dXNIXA:SHLRbIRU:UdUfxTizoS
ll">3@uW!O)
giiiiii#A
?JY\?JQ\/J9\Sn
\ua[sd[RG[QJ[HM[nO[]R[l5[j8[i;[[[03[
[[[&$[h
[NZ[NR[N:[N2[N:[6:[
O3p3h3`3=N$W
SpW{XRMEMwNvN
*Z`uuo QtzDzY}`jeuua\n.n^^ggg!A
8@0?(
XloXloXl_Xl_X-W*
7Wf(W36WWXW`W`|W
UTYES~MxMsLjLgfH
dcWeho
07,T\e{
ph~z`wOXwOPwOHN@q8
>f`gggggggA
U36UGTUT]|T`}T[mT]lT^]T`[TZYT\OT{V5TuX3Tp!T=
TS@!T@
T@S@S@SSH&T
WSVS6S
xGbxGbXFbXFbXFbAI
#6@]9K2QXFcW8]V*iYrfY-jY-lX5aO8M
+~+/W:VxBWpdh8`9X-P*H.@18-0i^(}m ]
444L#Q
WP5Q\5PT5P|6Pt6PjP%Z
#|2Oe%P}J,PA P2
PQ\ODWOOPO
xHSHRUxUaHTiL_F^"ng
&c9e+/gzQn
sLmSD]S]S~T\'
@Amw+ 0
WWWWWWWWWW%A
M<LTPL:NLHeL.LQ2Lr3LbGLLL@LALL'<L
cL6L8L:YLELLAK?}K6lLlQLlYLlQLl9Ll1Ll9Ll1L
CEcATsJTsBTW[T[^U^TnT
Gww:s.v>y 'N
n^^nn^^WWW!A
3x5p>h@`:XlP
F|BHT5H|6Ht6zH1vHa
\Hb]H]hH
]*(y6z?=G
S0N3<P-:781 E:5G43>!8'=B-?<+IV
\Et[nc
Ap7h=`CXIP?HE@80(g X
XWWWWWWWWWWWWWWWA
6uE+uE\vEZ`E[oEhbE--E+/E4VE:@EHJEKDAD7D<>EBD0E%E*E Ey
E^DPDRD%E
<9D\O,fL
@LYLh]Ke"
61{8+ER
bhIe`k
dvsywmkZa.
xwp/h;_`6bXc'Pp,Hi5@:8A0(
ZATAVAXA&A
AD`@"*@
y12y9%p<RU
WQ)D@&CE
ypf$b$bNcM
c((''''''''''''''Ap
>TQ=\Q=He=!,=
/=!>a|
>K=&C= ==*?=$A=&C@=(EF=3=
=.=<'='=<<P<N<@<B<
//WUrGYtQ`yK
B`!]n/n^^nn^^..
d2FFFF!8Ba
Jk9Di9Fg9He9
#RM9=y9=q9=Y9=Q9^89C9ys8
x<r2m-X4R*T0W+!(
JYH <?SMmep
JA!tdd4
Ztv|~u?!m[PpVHX@R8U0P(dB l
b))))))))))))]A
@c6@[6%f62
5^-6616=.66563065
6-5'5)5"5B_5<a5/Z51\5
Q5.K51L5+F5%H5(EF5;~=5
'[OlG3_2H e
7#6*F0}R0H5)!d*1`
Oh9/`:\
X>XPYH
b@o85k0i(n p
zELPZRTSR
)D2$F2'A2)CG2D~:2n
iH1!1G&1
h1g1g1
1//x"q"g!j,c,m&$tRrIL>q@O
~vToc,z{
cxPZTjBSTJ{\ZWRYOxp<,L
>8f@),BY.*/?.A.J.dG
.^I.VR.O.tU.vRz.ySr.tIz.eLs.kL[.lKh.cL`.eKS._I;.xT2.[S:.]Q5.O
-?Q-$C5
d4b4Z32~2Oc1=P1
>9v|#c
]B:sG;Q=BF
GANPLVxWpTh
Pt)Hf#@n/8r'0(O L
+WT*P"* *
*zw_*XGY*XG1*WH)*QJ *B=
b4Z3.~\.O
J-=W-:T(C''24i2:g12s,rP
AR>.C-P8-Y(^(O',2-2IrX
r407(:.
J#$Z&<
mKfwXwPiH
QjN'QjN'@j>'Tq 'B;0'd?
'W&zX&KJ&=O&6P&?%&'&(&4
&6 &.3&w&
i?X@ku&PA&yyR&
Pk?LdjE
EGBDOG_GBHoEoE^FR^$4;
FVVo_o_V/& V/F &
h:VOK)
u5s0lL jgL^2))
Mti}hdI>qdf)
djsKO]l$smNj=xmnrZh{O`sPhcNjox,cP5aP)v
OhfroVKsjiAO<"o
N9orqoIgf
uO5sddmq,mamoa
^Zs^1
dLnDD<tpi|dId|<Hf ^
7k4d0Q4]4V
VWC-LB9DC 5W1
3C-B9C W1
CMBECVW4CMBECT
2^01s0,~0
-/1+`1
23#23-23-$4-648E48W48l48z4G8484M84?8
75k+V6
.7_95888
#wUXwmW
S2;p3Q2f3`:
8,8VcA87[*8
S"8L8=8L<8U,<9
515o6wx6Ca6QX6/6
}7\_p7
8;z27<!2U<
2p<%2{<1<1<1<:3<43
8=7x>6>6>6
?5+?6m?5?+6?-
.W0+1+G2*2G*2j*2AS4I^@
PqXQP7%
~1?nKn
8V<w?m|
:_:_:O|;bN`;->F;E>
T/T/i[30T
15050;40I4b1 1
1-;-h.
?4=25=T5=5>5>
6x26/6&1L7I1|707)8l)8f)8x)8
9+!9y+59+C9+\9f+9
<5E<(V<
{stkAkb
xC'p3Lh
<6s=<=
/H3@383q7u47I4
P4Iw5B
2;}3<g8=8d,f9-
):R):R):
;) ;n~
<(S<J2{<1<1<1
=J3#=2c=2."
12&3222
;CKtSt[tctkT
(D0L0L
]RyQY.cyq0
wE y;k3
LwMDwE
DwE-g:$Q7
"C5;5S5
,0?C4;43Rw#y>
33RwJO:PzB3
3S5uce
4UTJ:L
bC4;4S4
TBC4;4S4
NRPsTE
jPM3P*K
`BD?D)
jTDBPM
OUcOaC
K6<DwM-V<U
UMEG46T
AsDEPNOlBQQ
MTlB+>4
@S2S9M=
HVW]2Q ,?
MTMsMDWL6~
KEU DL;sO
ReadFile
CreateFileA
GetSystemDirectoryA
lstrcatA
VirtualAlloc
KERNEL32.dll
LoadIconA
RegisterClassExA
RegisterClassExW
USER32.dll
RegOpenKeyA
ADVAPI32.dll
_XcptFilter
__getmainargs
__p__commode
__p__fmode
__set_app_type
__setusermatherr
_acmdln
_adjust_fdiv
_c_exit
_cexit
_controlfp
_except_handler3
_initterm
_wcsicmp
mbstowcs
wcslen
wcsstr
msvcrt.dll
FFFTWARE\FFasses
yysid\{0afaced1-e828-11d1-9187-b532f1e9575d}\inprocserver32
\55222
121212+22p
??W??H??1?
00D0j00
001$2x3
33T323w364W45
5j565G5]535z5454545{6
66#66166O66g66{6
76&76)76:765N75e75{7
67575757575757575
8x8*898\8e8l8
9888888
9o719N7H9
&\ W[Mn
[y<;dW
[`Ar<m.
5LJB=%Ny
6M @Rm
p1.q gDg
Dppppp
abYiCc
tt`````````
`````````
4<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<>
```````
88888888888888888888
9NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN=
```````````````
|pppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppC
NNNNNNNNNWt
>>PJ ppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppp
`````l
[NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN WsuD
~mQ8EG
Iq/ J%sg3@
P.HP >
+w)j%dp+s)^?0e
q/7%&oZ
#nqNkm
r !^ctAO
3naCmo
4fPG95
%dQ(M(U
k/~YRP&`,**EP
Zv&=gM$
.d=xOHBv
<v74%'
9;K) e0
F[1er5~
c9is\Fc
-H-n4$Dz4&%
#EY!;lmC
t m N y 1 u ,
l s s m s
u q m U q h m
k E k d r - o l m @ o `
@ @ @ @ @ @ @ @ @
H e m e m e m e Q
j Y c V w D )
) ( ( ( ( ( (
= } } } } } }
v v T U U R
Q _ P ^ L I W U
$ B Z d b S 9
) = M Z U H 6 !
C m f p m f {
! Q q g T = '
, Y m ` H /
C g g g g g g g g g g g g g g g g g
V S _ V E R S I O N _ I N F O
S t r i n g F i l e I n f o
0 4 1 9 0 4 B 0
C o m p a n y N a m e
F i l e D e s c r i p t i o n
V a r F i l e I n f o
T r a n s l a t i o n
Hosts
| IP |
|---|
| 114.114.114.114 |
| 8.8.8.8 |
DNS
| Name | Response | Post-Analysis Lookup |
|---|---|---|
| dns.msftncsi.com | A 131.107.255.255 | 131.107.255.255 |
| dns.msftncsi.com | 131.107.255.255 |
TCP
No TCP connections recorded.
UDP
| Source | Source Port | Destination | Destination Port |
|---|---|---|---|
| 192.168.56.101 | 53179 | 224.0.0.252 | 5355 |
| 192.168.56.101 | 49642 | 224.0.0.252 | 5355 |
| 192.168.56.101 | 137 | 192.168.56.255 | 137 |
| 192.168.56.101 | 61714 | 114.114.114.114 | 53 |
| 192.168.56.101 | 61714 | 8.8.8.8 | 53 |
| 192.168.56.101 | 56933 | 8.8.8.8 | 53 |
| 192.168.56.101 | 138 | 192.168.56.255 | 138 |
| 192.168.56.101 | 58485 | 114.114.114.114 | 53 |
| 192.168.56.101 | 58485 | 8.8.8.8 | 53 |
HTTP & HTTPS Requests
No HTTP requests performed.
ICMP traffic
No ICMP traffic performed.
IRC traffic
No IRC requests performed.
Suricata Alerts
No Suricata Alerts
Suricata TLS
No Suricata TLS
Snort Alerts
No Snort Alerts
Sorry! No dropped files.
Sorry! No dropped buffers.