3.3
中危
DACN
0.14
FACILE
1.00
IMCLNet
0.75
MFGraph
0.00
反病毒引擎
| 查杀引擎 | 查杀结果 | 查杀时间 | 查杀版本 |
|---|---|---|---|
| Alibaba | None | 20190527 | 0.3.0.5 |
| Avast | Win32:CrypterX-gen [Trj] | 20200217 | 18.4.3895.0 |
| Baidu | None | 20190318 | 1.0.0.2 |
| CrowdStrike | win/malicious_confidence_100% (D) | 20190702 | 1.0 |
| Kingsoft | None | 20200218 | 2013.8.14.323 |
| McAfee | Trojan-FPST!F74023595D4B | 20200217 | 6.0.6.653 |
| Tencent | Trojan.Win32.Kryptik.ghxg | 20200218 | 1.0.0.1 |
静态指标
查询计算机名称
(1 个事件)
| Time & API | Arguments | Status | Return | Repeated |
|---|---|---|---|---|
|
1727545350.827875 GetComputerNameW |
computer_name:
TU-PC
|
success | 1 | 0 |
检查进程是否被调试器调试
(1 个事件)
使用Windows API生成加密密钥
(3 个事件)
检查系统中的内存量，这可以用于检测可用内存较少的虚拟机
(9 个事件)
文件包含未知的 PE 资源名称，可能指示打包器
(6 个事件)
| resource name | DAMERURELADUPADOCATU |
| resource name | DJOPCETOOH |
| resource name | TUTALASUYIDOFEDAPOBUWONAYARU |
| resource name | VICEZAKOWUKEWOFEJAVE |
| resource name | XABIKUGIKIJABESOGUTUYOZUKONI |
| resource name | YIYAPELITAYAZUKE |
动态指标
分配可读-可写-可执行内存（通常用于自解压）
(20 个事件)
查询磁盘大小，可用于检测具有小固定大小或动态分配的虚拟机
(1 个事件)
在文件系统上创建可执行文件
(1 个事件)
| file | C:\Users\Administrator\AppData\Roaming\Microsoft\zvlwkp.exe |
将可执行文件投放到用户的 AppData 文件夹
(1 个事件)
| file | C:\Users\Administrator\AppData\Roaming\Microsoft\zvlwkp.exe |
搜索运行中的进程，可能用于识别沙箱规避、代码注入或内存转储的进程
(1 个事件)
| Time & API | Arguments | Status | Return | Repeated |
|---|---|---|---|---|
|
1727545350.281875 Process32NextW |
snapshot_handle:
0x000000e4
process_name: taskhost.exe process_identifier: 2320 |
success | 1 | 0 |
检查适配器地址以检测虚拟网络接口
(2 个事件)
| Time & API | Arguments | Status | Return | Repeated |
|---|---|---|---|---|
|
1727545351.062875 GetAdaptersAddresses |
family:
0
flags: 0 |
failed | 111 | 0 |
|
1727545351.062875 GetAdaptersAddresses |
family:
0
flags: 0 |
success | 0 | 0 |
该二进制文件可能包含加密或压缩数据，表明使用了打包工具
(2 个事件)
| section | {'name': '.rsrc', 'virtual_address': '0x00017000', 'virtual_size': '0x0002232c', 'size_of_data': '0x00022400', 'entropy': 7.772243510701883} | entropy | 7.772243510701883 | description | 发现高熵的节 | |||||||||
| entropy | 0.631336405529954 | description | 此PE文件的整体熵值较高 | |||||||||||
使用 Windows 工具进行基本 Windows 功能
(4 个事件)
| cmdline | nslookup carder.bit ns2.wowservers.ru |
| cmdline | nslookup ransomware.bit ns2.wowservers.ru |
| cmdline | nslookup ransomware.bit ns1.wowservers.ru |
| cmdline | nslookup carder.bit ns1.wowservers.ru |
网络通信
与未执行 DNS 查询的主机进行通信
(2 个事件)
| host | 114.114.114.114 | |||
| host | 8.8.8.8 | |||
在 Windows 启动时自我安装以实现自动运行
(1 个事件)
| reg_key | HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce\mvtgiqsilin | reg_value | "C:\Users\Administrator\AppData\Roaming\Microsoft\zvlwkp.exe" | ||||||
文件已被 VirusTotal 上 62 个反病毒引擎识别为恶意
(50 out of 62 个事件)
| ALYac | Trojan.GenericKDZ.44869 |
| APEX | Malicious |
| AVG | Win32:CrypterX-gen [Trj] |
| Acronis | suspicious |
| Ad-Aware | Trojan.GenericKDZ.44869 |
| AhnLab-V3 | Win-Trojan/Gandcrab02.Exp |
| Antiy-AVL | Trojan[Ransom]/Win32.GandCrypt |
| Arcabit | Trojan.Generic.DAF45 |
| Avast | Win32:CrypterX-gen [Trj] |
| Avira | HEUR/AGEN.1038194 |
| BitDefender | Trojan.GenericKDZ.44869 |
| BitDefenderTheta | AI:Packer.7E1C8C4C21 |
| Bkav | W32.AIDetectVM.malware |
| CAT-QuickHeal | Trojan.Chapak.ZZ5 |
| ClamAV | Win.Malware.Generickdz-6736537-0 |
| Comodo | TrojWare.Win32.Chapak.FS@7prmd9 |
| CrowdStrike | win/malicious_confidence_100% (D) |
| Cybereason | malicious.95d4b7 |
| Cylance | Unsafe |
| Cyren | W32/S-d30c8921!Eldorado |
| DrWeb | Trojan.Encoder.24384 |
| ESET-NOD32 | a variant of Win32/Kryptik.GHXG |
| Emsisoft | Trojan.GenericKDZ.44869 (B) |
| Endgame | malicious (high confidence) |
| F-Prot | W32/S-d30c8921!Eldorado |
| F-Secure | Heuristic.HEUR/AGEN.1038194 |
| FireEye | Generic.mg.f74023595d4b7a78 |
| Fortinet | W32/GenKryptik.CNAR!tr |
| GData | Trojan.GenericKDZ.44869 |
| Ikarus | Trojan-Ransom.GandCrab |
| Invincea | heuristic |
| Jiangmin | Trojan.PSW.Coins.no |
| K7AntiVirus | Trojan ( 0054a0951 ) |
| K7GW | Trojan ( 0054a0951 ) |
| Kaspersky | HEUR:Trojan.Win32.Generic |
| MAX | malware (ai score=83) |
| Malwarebytes | Trojan.MalPack |
| MaxSecure | Ransomeware.CRAB.gen |
| McAfee | Trojan-FPST!F74023595D4B |
| McAfee-GW-Edition | BehavesLike.Win32.Generic.dc |
| MicroWorld-eScan | Trojan.GenericKDZ.44869 |
| Microsoft | VirTool:Win32/CeeInject.AFR!bit |
| NANO-Antivirus | Trojan.Win32.Encoder.fefxnj |
| Panda | Trj/Genetic.gen |
| Qihoo-360 | HEUR/QVM10.1.5301.Malware.Gen |
| Rising | Trojan.Kryptik!8.8 (RDMK:cmRtazoTzrrHjWrEHAzrzFFWKteq) |
| SUPERAntiSpyware | Ransom.GandCrab/Variant |
| Sangfor | Malware |
| SentinelOne | DFI - Malicious PE |
| Sophos | Mal/Agent-AUL |
二进制图像
288x288
224x224
192x192
160x160
128x128
96x96
64x64
32x32
运行截图
暂无运行截图
该样本运行过程中未生成截图
PE Compile Time
2018-06-18 23:57:20
PE Imphash
28222e45257ff1d4bebaa167561d9478
Sections
| Name | Virtual Address | Virtual Size | Size of Raw Data | Entropy |
|---|---|---|---|---|
| .text | 0x00001000 | 0x0000ba41 | 0x0000bc00 | 6.689508023263525 |
| .rdata | 0x0000d000 | 0x00004fee | 0x00005000 | 6.069893551782973 |
| .data | 0x00012000 | 0x00004460 | 0x00001600 | 3.6874676621019007 |
| .rsrc | 0x00017000 | 0x0002232c | 0x00022400 | 7.772243510701883 |
| .reloc | 0x0003a000 | 0x00001c80 | 0x00001e00 | 3.5613915922132584 |
Resources
| Name | Offset | Size | Language | Sub-language | File type |
|---|---|---|---|---|---|
| DAMERURELADUPADOCATU | 0x00017518 | 0x00000100 | LANG_NEUTRAL | SUBLANG_NEUTRAL | None |
| DJOPCETOOH | 0x00017618 | 0x0001a985 | LANG_ENGLISH | SUBLANG_ENGLISH_US | None |
| TUTALASUYIDOFEDAPOBUWONAYARU | 0x00031fa0 | 0x000002d4 | LANG_NEUTRAL | SUBLANG_NEUTRAL | None |
| VICEZAKOWUKEWOFEJAVE | 0x00032274 | 0x00000163 | LANG_NEUTRAL | SUBLANG_NEUTRAL | None |
| XABIKUGIKIJABESOGUTUYOZUKONI | 0x000323d8 | 0x0000019d | LANG_NEUTRAL | SUBLANG_NEUTRAL | None |
| YIYAPELITAYAZUKE | 0x00032578 | 0x00000070 | LANG_NEUTRAL | SUBLANG_NEUTRAL | None |
| RT_CURSOR | 0x000325e8 | 0x00000134 | LANG_ENGLISH | SUBLANG_ENGLISH_UK | None |
| RT_BITMAP | 0x0003271c | 0x00000aa0 | LANG_NEUTRAL | SUBLANG_NEUTRAL | None |
| RT_ICON | 0x0003808c | 0x000010a8 | LANG_NEUTRAL | SUBLANG_NEUTRAL | None |
| RT_ICON | 0x0003808c | 0x000010a8 | LANG_NEUTRAL | SUBLANG_NEUTRAL | None |
| RT_ICON | 0x0003808c | 0x000010a8 | LANG_NEUTRAL | SUBLANG_NEUTRAL | None |
| RT_DIALOG | 0x00039134 | 0x0000009c | LANG_ENGLISH | SUBLANG_ENGLISH_UK | None |
| RT_GROUP_CURSOR | 0x000391d0 | 0x00000014 | LANG_ENGLISH | SUBLANG_ENGLISH_UK | None |
| RT_GROUP_ICON | 0x000391e4 | 0x00000030 | LANG_NEUTRAL | SUBLANG_NEUTRAL | None |
| RT_VERSION | 0x00039214 | 0x00000118 | LANG_ITALIAN | SUBLANG_ITALIAN | None |
Imports
Library KERNEL32.dll:
• 0x40d000 GetNativeSystemInfo
• 0x40d004 FindCloseChangeNotification
• 0x40d008 GetTickCount
• 0x40d00c LoadLibraryW
• 0x40d010 GetSystemTimeAdjustment
• 0x40d014 TerminateProcess
• 0x40d018 GetMailslotInfo
• 0x40d01c FillConsoleOutputCharacterW
• 0x40d020 GetLastError
• 0x40d024 GetCurrentDirectoryW
• 0x40d028 SetLastError
• 0x40d02c GetProcAddress
• 0x40d030 VirtualAlloc
• 0x40d034 FindAtomA
• 0x40d038 GetProcessShutdownParameters
• 0x40d03c FindAtomW
• 0x40d040 IsValidCodePage
• 0x40d044 GetOEMCP
• 0x40d048 GetACP
• 0x40d04c HeapSize
• 0x40d050 GetSystemTimeAsFileTime
• 0x40d054 GetCurrentProcessId
• 0x40d058 QueryPerformanceCounter
• 0x40d05c GetFileType
• 0x40d060 WideCharToMultiByte
• 0x40d064 InterlockedIncrement
• 0x40d068 InterlockedDecrement
• 0x40d06c InterlockedExchange
• 0x40d070 MultiByteToWideChar
• 0x40d074 GetStringTypeW
• 0x40d078 EncodePointer
• 0x40d07c DecodePointer
• 0x40d080 Sleep
• 0x40d084 InitializeCriticalSection
• 0x40d088 DeleteCriticalSection
• 0x40d08c EnterCriticalSection
• 0x40d090 LeaveCriticalSection
• 0x40d094 HeapFree
• 0x40d098 HeapReAlloc
• 0x40d09c GetModuleHandleW
• 0x40d0a0 ExitProcess
• 0x40d0a4 GetCommandLineA
• 0x40d0a8 HeapSetInformation
• 0x40d0ac GetStartupInfoW
• 0x40d0b0 GetCPInfo
• 0x40d0b4 RaiseException
• 0x40d0b8 RtlUnwind
• 0x40d0bc HeapAlloc
• 0x40d0c0 LCMapStringW
• 0x40d0c4 GetCurrentProcess
• 0x40d0c8 UnhandledExceptionFilter
• 0x40d0cc SetUnhandledExceptionFilter
• 0x40d0d0 IsDebuggerPresent
• 0x40d0d4 IsProcessorFeaturePresent
• 0x40d0d8 HeapCreate
• 0x40d0dc TlsAlloc
• 0x40d0e0 TlsGetValue
• 0x40d0e4 TlsSetValue
• 0x40d0e8 TlsFree
• 0x40d0ec GetCurrentThreadId
• 0x40d0f0 InitializeCriticalSectionAndSpinCount
• 0x40d0f4 WriteFile
• 0x40d0f8 GetStdHandle
• 0x40d0fc GetModuleFileNameW
• 0x40d100 GetModuleFileNameA
• 0x40d104 FreeEnvironmentStringsW
• 0x40d108 GetEnvironmentStringsW
• 0x40d10c SetHandleCount
Library USER32.dll:
• 0x40d124 EndPaint
• 0x40d128 GetNextDlgGroupItem
• 0x40d12c GetAltTabInfoW
• 0x40d130 ValidateRect
L!This 6
m cannot be run in DOS mode.
?[|^5/^5/^5/(/^5/(/^5/(/^5/&/^5/^4/^5/Ua
^5/(/^5/
}^5/Rich^5/
`.rdata
@.data
@.reloc
|^_h(!A
|_^[hC
DDDDDDDDDDDDDD
Y3MW0u
YYuTVWhB@
;r=\TA
3]j hp
th5PTA
YY]jXh
395HTA
tAt2t$
DDDDDDDDDDDDDD
$UQQSVWd5
SVWE3PPPuu
E_^[E]
UQSVW}
SVW(<#A
3PuEEd
SVW(<#A
3PeuEEd
Y__^[]Q
YYF$;u
v$PWV2
SSSSSv
UQSV5|@
woVW=7A
)0"0_^
S3VW;~ E
@;u+H;}
39](SSu
]9]tWuu
};~Bj3X
3;t?uWuuu
t"SS9] u
EWYuEYe_^[M3%
u(Eu$u u
YYu,9E
FGIuX^_]
CFhp(A
YYt:V5H#A
Y;=('A
43_V5,@
YYt0V5H#A
3@]3]j
F$|3@_^
eE}hE>@
3]5T9A
Y+t"+t
+tY+uC}
Uw\]Yp
u>OdMGd
u wdSUY
ffffffE
3PPPPP
VW3p$A
B(;r3_^[]
SVW<#A
1E3PEd
Y_^[]hD@
+SVW<#A
1E3PeuEEEEd
Y__^[]Q
:uE_^[]E
9csmu)=
3PPPPPV-
@Y<v*V-
^SSSSSyj
;tFtA3
M_^3[j
Yu =!A
8csmu*x
S^`N`H
j$Y~\d9
QY^`[_^]
VW39=XTA
t.t$<"u
GWOYY=d4A
S3V>=YX
3Y[_^5d4A
3PPPPP
FA>\t>"u&
uUEPSS}
=?sJMsB
;r6PTY;t)UEP
3wf93t
f90uW=`@
VVV+V@PSVVE
E;t8PYE;t*VVuPuSVV
j@j ^VYY3;u
H3H/5@SA
;rSWf9M
E3E3;u
UQQ<#A
ES3VW]9]
39] SSu
ESEYe_^[M3
Mxu$Eu
USV5d@
3W;to=
jYY~PE
PEY9_t
uV Y_^[]
t4V0;t(W8jYt
Fpt"~l
lVYYYEE
QRSYYt
t3@_^]
=RCCt =MOCt
=csmu*
8csmu8x
t*9csmu"A
>csmuB~
YYtaSV$
YYt)SV
Ht Hu4j
=MOCt*=RCCt#u$u u
EPEPVu WM
ESx;7|G;p
@u%u$u
E;Mr[_^
Yu\39 ~
EPEPuu WM
EGE~rF
.u$}u ]uE
u$u uSu
tR99u2y
u$Vu u
Q 3@_^[]U
VW_^]M
v,~v0vv4nv
fv8^v<V@v@KvDCvH;vL3vP+vT#vX
vhvlvpvtvx
P.YF0;
Yv4;5L(A
PxYF8;
PfYF<;
PTYF@;
PBYFD;
P0YFH;
YvL;5d(A
WPWPWv
M_3[7j
whu;5,A
8]tEMap<u
TM_^3[.j
Fh=p(A
PLY^hS=d@
Y%u p(A
3UV3PPPPPPPPU
UV3PPPPPPPPU
$sF ^QL$
EPQEPEj
Map[VD$
URPQQhq@
t;T$4t
;v.4v\
UVWS33333[_^]
33333USVWj
_^[]Ul$
3M_^3[
^0l_^]
ft'Ou"+
jPfDJXdf
3]USVWUj
P(RP$R
UPjhv@
t:|$,t
;t$,v-4v
UQPXY]Y[
KuZUQL$
RQMQVp
YY]UWVSM
U33@V3VVV
ESV33W9]
M_^3[%
D$hSV3W\$
u3D$0PD$@PD$,P
D$8PD$0PD$0PD$@PS
u;;u1h(@
\$$D$$
!HD$ \%l$
)L$t_^[33
R<$tmf<$
Fu^8Mt
3;u"~j
E`p^[9M
Cj"W8M
E`p33PPPPP"
[SMQMQp
M_^3[(
E`p3[_^
x@PVS/E
E`p3_^[
^VMQMQp
_WMQMQp
tS]3K}-
et_EtZfu
VVVVVB^j
t*f u!f t
ZmZ,$Z
U(3EE9
tWItHIt9It
EYY" uES
MMEP3SSSSWEPEP
E`p3M_^3[^~
EP3SSSSWEPEP2
E`p3M_^3[}
@PWVZ~
PEP"YYEPj
^3[{3PPPPPWVU33D$
HWxtRHtCHt4Ht%HtFHHt
QP|xPEP(
X 9} E
AP _^[]
;}"+]t
|3Et^E
EE EE$h
/$]D~h
u+t's C
Vf#^f;u
u'339\u
JBtj 3Y+@M
}99}r"9U
Jy5L/A
JBj Y+3B\M
3+BL1<
Jy3^j Y+
M_3[?j
u'339\u
JBtj 3Y+@M
}99}r"9U
Jy5d/A
JBj Y+3B\M
3+BL1<
Jy3^j Y+
FWE}MuMMMMMMM9M$u
<+t"<-t
h<+t<-tk}
+t HHt
B:t,1<
+JMtHHt
B:}QMEO?
tEPuEP
}M]U3EE
3f;u AE
f;u!AC
u4}u+e
f;r#33f9EE
[M_3^E^
EAV#f}
W]EEE?E
S3PPPPPg3f9Ut
EfUu}M
3f;u GE
90t!uuE
EMuUm
HuMu9Et
u4}u+e
33f9EE
UUUUU3##
f;wK3EE9
}fEEEEEf}Z33f9u
Ea3f;u
f~7}x+EMe
EM}Um
H}Mu9Et
u4}u+e
f;r#33f9EE
ufEEEEEfu
~(E]Mm
0K;]sE;]s
EM_^3[WU
K;sE;s3f
SVW}f]3
395@TA
S3VWEN@
tfM_^fH
generic
iostream
system
iostream stream error
Unknown exception
CorExitProcess
bad allocation
Visual C++ CRT: Not enough memory to complete call to strerror.
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
HH:mm:ss
dddd, MMMM dd, yyyy
MM/dd/yy
December
November
October
September
August
February
January
Saturday
Friday
Thursday
Wednesday
Tuesday
Monday
Sunday
bad exception
Illegal byte sequence
Directory not empty
Function not implemented
No locks available
Filename too long
Resource deadlock avoided
Result too large
Domain error
Broken pipe
Too many links
Read-only file system
Invalid seek
No space left on device
File too large
Inappropriate I/O control operation
Too many open files
Too many open files in system
Invalid argument
Is a directory
Not a directory
No such device
Improper link
File exists
Resource device
Unknown error
Bad address
Permission denied
Not enough space
Resource temporarily unavailable
No child processes
Bad file descriptor
Exec format error
Arg list too long
No such device or address
Input/output error
Interrupted function call
No such process
No such file or directory
Operation not permitted
No error
Complete Object Locator'
Class Hierarchy Descriptor'
Base Class Array'
Base Class Descriptor at (
Type Descriptor'
`local static thread guard'
`managed vector copy constructor iterator'
`vector vbase copy constructor iterator'
`vector copy constructor iterator'
`dynamic atexit destructor for '
`dynamic initializer for '
`eh vector vbase copy constructor iterator'
`eh vector copy constructor iterator'
`managed vector destructor iterator'
`managed vector constructor iterator'
`placement delete[] closure'
`placement delete closure'
`omni callsig'
delete[]
new[]
`local vftable constructor closure'
`local vftable'
`udt returning'
`copy constructor closure'
`eh vector vbase constructor iterator'
`eh vector destructor iterator'
`eh vector constructor iterator'
`virtual displacement map'
`vector vbase constructor iterator'
`vector destructor iterator'
`vector constructor iterator'
`scalar deleting destructor'
`default constructor closure'
`vector deleting destructor'
`vbase destructor'
`string'
`local static guard'
`typeof'
`vcall'
`vbtable'
`vftable'
operator
delete
__unaligned
__restrict
__ptr64
__eabi
__clrcall
__fastcall
__thiscall
__stdcall
__pascal
__cdecl
__based(
GetProcessWindowStation
GetUserObjectInformationW
GetLastActivePopup
GetActiveWindow
MessageBoxW
M,"J&_Bb":~p1
VirtualProtect
invalid string position
string too long
nu?cv5
8Ud?|}}?<
?)0>B<
sl?ecb~q<
oX?F.K;<
4lkQg?;+U<
:@Xh?,n@4`<
G^*?m(<<
+?NibzP<
l? %X<
Y?]@_}<
En?T(+<
'?ju!4<
qw?_W<
w*I?n'$<
R*?)R<
H?Zxgf<
a?_"C<
]hNp?b
4{#s?Ug
*Ow5?.@<
W?W0e)<
J]?V:e:<
b;SO?4Td
U?\z#<
aX;[?Y']<
|a?B<$<
?+XUG<
._p?1S<
'4?/t><
&?5SmT4<
@ic?%[9
3?*+xi(<
?{!mB<
2?cMyoG
Vsw?8K
l?e/?B6!F
u0wu?M
G"zI?$}Tw5<
e?M]-e<
) ]?h<
'7?y]h
=e?:Q]D\<
?FnHAY<
)RQ?{<
dN{?c1
=.q?+`
iQi?v7
?ZEM-'^
!?:Zn=
eP5?+}ZI
Dwb?(,x
Q/?qq)=
o\l?)T&=
?|6??#DZ9?
?/.?>6)}?, ,
?x%q? ?/xbJ?
?(Z ?t?{}2F??_2
?>T^?u
?;E<?fSOs?JQ?zL?
?{yK+;?
h?F?-(?n?@F
J?CSi?
?89l!?f
:?1(>?
2:@?>?@@?"Ir?64?
?765@Z?&+-?w'?
Q?Gpt?2&?X9
?Mj$?3?s
?I@ |?P
?}>v?H|As?#
F)Z?2V
V?f\S?B?}
4P?VL?{
uB?1<>?(b;?
7?]o-4?
\%?f,!?
?a?9y?9
9R?%R?F
?@_o?7
?D<xZu?`\@j?)]Gq`?
LcU?JupJ?CY??
?#em? -F
R?VDD?oWsg6?UJ
?1_?$*2
)?V?l$G~
?+6?tF4
,~?"n?
L?l6;?6**?|59
?HK?s7
?I-?$z?9\?>|.~?
-W?^\sY0?:Rp7
?mbzA?G4's?Iy
C\2?Ou
M?nw?KK'F?l
?}6lw?
?$ f?e')lW?zD@
J?F<?Q'J`?xe_
?"Sr?xw
S/?yx|o?P6 d!?
T?!z? {
I^?A;?wC?JG7&?'
?,"Q?/
b?PV3 2?
p?Va"?
UUUUUU
333333m
.?333333?q
?UUUUUU?ON
?$rxxx??
Y ntan
_nextafter
_hypot
1#QNAN
1#SNAN
GetNativeSystemInfo
FindCloseChangeNotification
GetTickCount
LoadLibraryW
GetSystemTimeAdjustment
TerminateProcess
GetMailslotInfo
FillConsoleOutputCharacterW
GetLastError
GetCurrentDirectoryW
SetLastError
GetProcAddress
VirtualAlloc
FindAtomA
GetProcessShutdownParameters
FindAtomW
KERNEL32.dll
ValidateRect
GetAltTabInfoW
GetNextDlgGroupItem
EndPaint
USER32.dll
FindExecutableA
DragQueryFileW
ShellAboutA
SHELL32.dll
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
InterlockedExchange
MultiByteToWideChar
GetStringTypeW
EncodePointer
DecodePointer
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapFree
HeapReAlloc
GetModuleHandleW
ExitProcess
GetCommandLineA
HeapSetInformation
GetStartupInfoW
GetCPInfo
RaiseException
RtlUnwind
HeapAlloc
LCMapStringW
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
HeapCreate
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetCurrentThreadId
InitializeCriticalSectionAndSpinCount
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapSize
GetACP
GetOEMCP
IsValidCodePage
.?AVerror_category@std@@
.?AV_Generic_error_category@std@@
.?AV_Iostream_error_category@std@@
.?AV_System_error_category@std@@
.?AVlogic_error@std@@
.?AVlength_error@std@@
.?AVout_of_range@std@@
Copyright (c) 1992-2004 by P.J. Plauger, licensed by Dinkumware, Ltd. ALL RIGHTS RESERVED.
.?AVtype_info@@
.?AVbad_exception@std@@
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
.?AVexception@std@@
.?AVbad_alloc@std@@
I x@oGAkU'9p|B
~QCv)/&D(
uuvHMXB
9;5SM]=];Z] T7aZ%]g']
?Zd;On
7?3=Bz
;1az?aUY~S|
D?$?9'
*?}d|FU>c{
zc%C1<!8G
u7.:3q
#2IZ9W
,%I-64OSk%Y
Sijavo bohisa. Biyoho xucojanukaza havi wexepeni. Wa ne giki. Cudosoyihuruya deyafipihajabo norexo keneveki vubakivekesaxu. Lucivavu hufirazepibo migifuzi huhikeba. Zukila ja to vita. Cofugo rakojatobuyuko. Xuhiru renagepuxake nihi. Fezace silotamo moxihulK
N8gj.K
Qz%yj.1
SzO;|C%a}EJ~
!Q0/:).OnqR#
&r"-D %qU<
dPH(}!Ck
KYR #">
d,'Cym^r/b}S(z
g$37/{-
e%] yk
N27W0+
*ApjP8m,5"
!vC:Lw
c+tb{gf
v7lO3lM?
VrMxmg5].
><NuDL<u
s hsn0ZUv,yTz/a
x#Z\J0RR
B*oxTU
Yf5j9ox%"uM$8/A
h|H@CT
h>EGcE)(<}/&
$W:JgLZ
QD9cKl
gZ.kD[
V(Rupc
uA&Qp&P
nl7QD"
2b^***
Squ(,Z
A#>D)DZ@xD?)
3cJKAVq
zMS^i"^r9
|ld,[D,G
"A 4=*?
k?YcYD;.
LYnD/sF6\
EN_luO
GE^N'*Rq&
i@FhP:ZZm\^
b%`9VE-
1p%'8^}M 6
ZFO%U5$NZ!e
mJiC!i}(
,n8$FFc
-58.^5U(bY}OFq
xNQ~)
;'P?pul%K
VKLQ@GT
?8;E5V
?BtggJ!
"yuW5dM<
!?*oYB>i
HNUcUg
`a\,a_ pX
n/OZ6B
)R?/"7E)rtN
r]Bj#-8
%d4N8-L
=An !1
.>N@7U:Y/
|nS18I
|Vi7'[#
Eo#x\\h
npL{OJP@
<l&0_5(
PW_?KE
Lh8AZT
=bv.kU
Hx6/~CF3
zmL{qnZL
f)rfxM
Y]O_0<
}sV{Gbvg-Hm
!M}Y?R2o
2U@Y?Y(
BENE= l"7
&~ziw,
+W[7K`
7(Z,n#=J~esR*
5MpjRPM
<M7)de
?iac]yCFu
$^]V&=5o
7N=l'=zx(XB]|}
XZR&P{1
UpPP3@F+i7s
,?8s?(
f>4;.0<tYIgQs
.;Dl ?z-_KY
V4*+1Aad
YFnXWty
J0MZn.
0LImxWE[57$w
7C?~puo
'~V08HGbpx
({F6t)1
YgTr!x@WO8aXIgp=$
? vAMBL
=eYz6z`z
3<w D*3
D*(Kn(FUW
D->`tGR
]^$h}d9
Z"],TJj'9IJ
&$-m]j6#I4`
FjLOsL<V.#0v{
b<r5=pN
dz_:.H/
3#f_&I
/2jLEf
Q='{3'
`[S;C0
V[R"O3
fVPJkhn-|+Q0FK$
fH_G(Fkr
;a<_x?$~Z
R{W,GRS!D
vd7RHVs0~
y3%,#S4WeP,
*[Z8%#1(B40y
Y%?!(M
|a <z'
z1_q$t{0GvpgaxI
w3S)d7(U
uYvaIc
([80B!n=XW
.Fd\iY5~
o*97}%lCN'p
1Q9)(W
E_aE8>V
HRh4 NWi!v%-
+zHXief,
M[{kxVVB\t-
m_yzkD
eQ*lf^
0CN'|HZ
1bz?Bln
qXz7+'-cl
*9vQn33\zq
/c{=|&
@m1x;{9
__o GV
VfyMlu$S
s 4XSfw
/LfP&:
R3o~vxn
.Bk:<YZ%=YCcn
[U;;&v0N
QKNh}\3HE
t@Ml+t
EV7P`Apz34nLrv0\tA/s
$GEo6Mf T.t
~ F'8B-
mu_SpBUa'[
4wS(D5EP n
h'!`:MB
<R:=*n
xp3,\cD
=_nkd>J
hWTehug_
~r]tAdpp[<R$
=3;(MN3gQV
ClklNKlez
uOc.:k>
S)0yR>O*I
nxhYJ}
t?TA!H%
BYl9-j%BVR0Lq
RZodc1]
&tbx$F3u9[&H
srk5$%
8E!Nsh
d3f4D@\L,
D:9_(;9E/
c<%R>RBK
n(hhs-^R
O}YSrTv_
.17Ur;-
\)/qbk
+ Xh=.,Nx=}}
UVl%.{SI
veZyA]j
p{rQ$!n@7piJ
7\Yt<D
:;=6F?`(\KCN
_yydy40U
FVol"/
c;6A"Ipzn!
KX266K $
#Z'uG
kw@$"p:Ci
L6`vR:7n
+S~,lK7/
hz} U6
&2k M#
_/^nO<F3N
HvIqE%#
;Ww-.AJ60/6v=Uk\ne>
,;1>*5B|}(
m8ksLV
7CB33l{,jMTh3
!WiyO>v
iDWNbP
%wPk,u'+u<EK
gOW?/m
F,2W{`|5
WDu2v #Ko)Q(ApD0m"MWr2z=Nx
<I}H{z
4lB\"e
"I)U7UP"H>
i $949
BGURzO[
3e{#BeM &
K'%xlp
=y? 5x
HJ.rkNU,H:St}
:5`B`MyyL]^
@"LEv6
;sCb?mO
j{E=k?]
pxkP3/
;YqH4rm
eY\ci&
R7_HwE
H\v)%+r
oKEvK@W*GY
L06PK@9
xGvQ&\D
3;T/1K
Q*I:Reb
Axdd @-29
4`j\iC>
2\%-([$_\c+=
5C}bt5
"v94_>[6K
C=43;W
4_N3H5R
|_K%X]|
aq2 e~#'ku^/
Wtk\Uq
&:;du++
P`k'Kfv
;3U5.]
+P/3+$'Su
kx7-I42wJ4
i$4''<9I=7<B;PbW\
UR::+ulr${>
)=m|2#Tj;EX>
?E0CI|e^u
,yZu}i+]]F5h=
RvKc24opk3S!1Y
,NcoB"
8/7s`L
v/p!5tg
3s~3\W
hQLaJ^
wBp!>XN3K@
7E MVM
fqqcK&
woy$|}k^ 4F!'.W
I<5"0H3
?cF/1a2
2x URTR@'
m/XzDB4
7~C# aO
1@}]7M
'~Xy]qY
1u}ScsQ7__
)Yx20~S
E)v&9l
-~kW+h
sl6&iG$s
#GZyYl
<BD+y!
j@E4~Gf`
F'|Blr'f
1Me-x7
qXq7){lL\"+8@
0=|tW>
}!2ci^V
IM*+bn
nk9]5Iv&
O{j^CpGCb
-m%D5pY
{7j56C]^Mn~~:
O5|A>Gk%WFP!rJ
O_'Q *=9
,*Jc;MVq
Y&89:<
J\`X#AG~DC
gAC= S|t
+|*7G`+
+8JT,B
Y!W!Ad":
0{L?Qj
?6'B!B
fX@OcC
l_4%yg
$a@?u38A&
J]h<-P
'3,YN3nL
cO<(tV;
G~ANX+_T\
+G{x`C<
46o{|.
|cb=)cni~3
{k Q5&j
7@&IL)^6-
Z;M8{uW
rcD\`Fq
uk'U|sxm
~[F(=hq<
K`0 {E
bQr<U{
EhKQwU+L
V)w6h1UeE0
TnJ:N(
ZyWg@q
&|I0xX
:,gz7s
,^c`mP
d'am{K
BDi%9P
6aBfx\\f
T~*hHP
2n<_Lw.
*rrXt#vz3S0/
b]L":#
%264-_=80n
/C@[^%,9
]4ADy1:hf
jn#)1"
%zfv|: Ha
5 KQLr
W<*B)r
xShk5
KU=\by
HdLPYw^
+j-Qm:
l[tllVn903
wwnv4[lx&4%
EO%^xS
SDgD_>%
?io{O5
$j`a=Qz(
V;\$f!B(u
. ]3'm
e~>[tf T
my4+Y)zZ?
'Hf %7pK
^7Hv`gP} ]>
^,V/0%
#,<'Yn0s CP5M
mDi@g,jMT@-=
0TA6fyWc4 R
:j9x|[hw{
:=;`.
0jZoS=8H
?z/c]oUQgM~E;
%~;j^N
/\8 UvaDwJ
!R$^7w
{VLw3L<P
D#MCBG]
#j4gOA
ebLv-A(b.
F/N0W6'ar|N
"{iQHbem
aj,7[!4
idQ_ ^,
}G'-Rz&([
tw#[@FrM<V>.{aN
nvPC+wvgh
r?'J2+Oc
F;h$AjN |
"C^zUYk
1Sn8-g%b>J
)\8GIJ4
ZECj?6Y1Z{Xl
'yXTPCNOh6
iRm;'9m
/Ftp0(v [
(WJ cQ
iF6?e7N?
>OU,/,e]^
JdnEKJ
ywim~Y%/
S0 u'Y
P .g>B
a`7'k:G
*DB]ur
q>LT4]ygv
mW3^t-Q
IN.kl,DT
|SD*7WZPl G\:qIN$2
4sw(>y
_rV<mr<Z_r
;\tS`Vhb
(AaLuX
"Mjvbb I
Tt)}<[GAZ}X4i
i?qKP5uVTqOi\
E=KZ,tU
1;'rW}*
Y-zTJS[nxBBRTZ?H
%hfjW
!+^O1"=
b!SP)L~
yt1lGP
xOHU,O5$6H_NrH@1a
m\3)d3{cL
1+AaEbe
OxFwAg
=,5Ro>ORn?>|'/MC
Vvk5O:h!
`x$I_=r3
#8\9Os
Ka}P@a3
6);|_QW
d-8@}?
]MU{Qd#))#4
XcQp*_f0a<zpS
y3#W>'
A\-9RUz
4%Du]\b
f7e<>n.
NL1o)]w
Ps{+Xu-
KS0LdMN
Q}8.^K
xhvkVzQ-6.
|;V6kk@Rr1m
z\Jf9i
EpU*c}WI
O3Zi>hr'
`9(K&>f
,bI15IE"BC
@~3WSAQ[7+!g</#
X\Rb+/P
b|-E6NU3Y5*
+X#[>5
N7^+~c
kSI?3n?\2S
&TD5M>akOQ
(z3mAs
CcD_mx94"
#b8pJA?y
Om)uAC
[`v3!`$o=~D9UV9o+<
2"F0du
z.{\dW
?G%WM
a0jA0F
h r&J1`
AXB+/e
&QxU54y
o?tRIF
m8;Nj
HuePPhk
yflog<,,E{0,
'K/m)r
,kA6CsM)mc
vN^<k0h_
u=f=MEk}e
Tb:[k.]B
SRZX0,R9
3A?|wq:
kM,W^hWKm1
V5I3Uy:&
<R{G5F
EgCS_R|
|UvT6D3`U
6<YYJ:
zEBkst
-NychUsOPJR
eRs~OY
Wx'Xw99^z
.]XnIf\
H5<\w?fa<y
\to}PKk!
,Zndcuib
*YqL9d*&
v9fWm#R
f)p$Xjl$n-
#T<8}w2
\:_sk
zp$5 i
Nq!DS
)7Vht(
HeNj@c5
6=<:4d
lO~fO i
FQVkuB-K]#*#:\v$
Sp<Edi
rRv9>Q
juh8A%6q>J
`$aH)-
es0*iu
:L]Q3}'
^C,n7@
4B9 TZ75!
-Wk#0J/M.'
pRbE>e"RSzVp>
3l&!_*+/
C}"\DS
sk[9Y)4u
|tCoY>EpszvH0 (>E_
-rc3SLD
<4pVfQ
=~^o~7
]VC!x%
R;3oOwfhw>}
Vr6ppU3Qh
}8==]Bu3l
F6=xG"EK4~aQ
.6JB5j(Hqqmh
3o8wK_
-.T:7Eil_3L
83V(WZT
h:kN."! A#H
1:,7i>![a
Orwm3ES
$msP~Z
q!o_syi>aa
L!TjiL^&
O\JC3q
[.% -t,f
C!_}m,
u}iX`djGl
vcC>(q
{QxbUK:M6f
Dx*`X8Ij76}
p}=\n|#Hr;
ih'^f,
?h^C_dav4<6
j~?h?a
LZ3EZ{10&P
UZc((U
M|2!oG5
d*?6fXBx
m<~p[?G>i
@;Ip{B sm
FSE$XJX-
scw]6D
u_d7785H
$CmplK<S
Ru'`V*S
@1}a}x
S,./md"@@
C_APq
W/U"{& '
+tDMR*@R0#<.
}|0~@2q
\tXU+L/B
$}sWv%
+7l}cI~
0C2f=6/yu
S}Q}u<)[
gHwRw[
G*JT()p~
g\RoZ(
baT!$&
loypN~[tmw~$a5"
|a'nA8uCBT058
b:iCm1$/A
c*z3op^
?k8z9Tteln4N=
K]*|$*
dw>Q\zU
9)"Xq5
CIWAJ,-k~R
>0LB/l
|T0+q]=
PF,I|Iml
X'p+|i
Wlp=_O
<obWWP
+cmlr+
D2F:=S
VR_f1mZ/q<69D
S@|8dF+AsE
h/Ma,=#
*;xm+/T?E x
5\F@(W
8(UZv[#
0vDY2n--/$
@|eW$jZU4
[e1#U/;
hmGB>38
J0j<)_^W
I`qjOxg
vd9\lT[
[i$D E%;
]k[75sP
W%A?'oyOUn=L
&|wBy5j4xhOqk{
je+u$6{[B@
kHn_Y50u
<o^ew~Y
ste7o0
\OPH8pV
b{o+r!
H60"7=LY;.Md)|ip
ww4Skd'
!diMO(O
7=snm[>x
U5Wgg<
C"&n2%
6$)40iVbH=tSW
TDow)cSK
^` uG{Wd
kA+rjU
stG_\RyB'
(s8~+1XlJg
?_B]$L
"}h!Ed'qI}n :[,|Q7,L-muN0~:
X2t+CeZ
Q![kD$I2
u[L]l6
GRt$s[
(VL'~mg
>eBea$o+qX
Qa=/!N9
Gv AR/l{_
9[g -?
CmeVr?
P?Ma<4J
}4WX8#
.9YE%c$cS
(Kx&E4B
mG 9S{
HA%vHCH
W6,6-7}#Qn-
N,eg"1b
(;f032{
W*Wk|3
T#L~$ELP
']|7@9,YZk#
%VJZ@v2Q
60AeV$91FOTz[eM3MA
[\rO+t
+7V-=X:
(]ylcG
Nv?c==%g%u
iK53@3r-o
Q\^_`r<?rceE
l~n,87
v}s=~&je
/&|JTk
`(X+bj6
`.=*4J~u
8Gvw@\2b6
!w$P@H*
w]9k8ZJ
J1@uB 1'
@UFepy
P4&Z%WrSF b9
u3W-G %'
oY|{k5
3:8BTGX I)
T5\[do
<WsH)l&5
|r-;^2
=j'{9}~aa
Bfp(:>.e
>C_ ^w
Pb*RGR
uT@kD
#@ $kU
z:`>[k|lU
`#_aPoLn)
BA,{NkULs2#x'
|GfE,]Z|p
h=e"k.Nu<;S
kF\s.+
.y}jBc?gI{^WY7@'o4!
YAe?F]
Qs>^d6\)
G2leiy 1
E!&_uf3
G\KQm8>L
o6 QcL4!Hs
T\,cLwt!!
v=AVCg
re1!s%
##4qL-
Q+^a}GD
b~kNX3>Ri 0Y2.
$)ycn3
Jz{E ;
:&R/o!}
YgN=pSZ\
}B5_eWV
@:;l8@k7q[.'
97X=h>c5
%*FEU<n
O?2^g}@:
445fhqBXn>NH
{%)I21]#
G&E$ZPyW
+1$}~v|
.\0$}%
Xtju)(V
4M[.2%0|p
PgN _X@GZD0oM
tJA,Kpp}\=D!
V?xq2E[b
2fbX'eN7c(
,&]1,&
^ZZ~,@
+%V'#m]aC-
~\DdX2
23<KR<
l.<t4T
PgZ`-C
$#[gSa
4tk-kU
^B44Q<^
_'L~Mc7Q
3 &`5,
q__`xa\Z N@
&@e3Zj<2*\
u/{)s#|~
"lk l&C
'(+o<s
odyC&>z
7x!PhH|=}(y4N:
Nx.be7&qc
!F:dE7
m (1G_
@3Wh.YP
b]c7Oy-O[
aUq}MM
%HD!+0
izMasf6An!
U=m0s(P
rZ&elpfp^G'\
0A#M]l+
('1ANSFr%
=iwUGD
T0FF`u
]k;,RCH;)
WJ&_^sYx.
}`0AE.--
ENM}iy
>L~EE%@od
IE=iN(
c4X{`Mm,
I cr;^\bD i
q_uvU.h
ms}vMM
O^6NW1=
XkjDQiI
s,(Fl%
lDt 8sO|
C&\AY^m3d
8,@eI*
X?&V.1Q J`
4)Z_"
xT]Z]j V)
>LdSM Tc#!t<u%Z?(Z
[d v\Ap^|
nq1mU
i"C vL").%l5a2GTG8H
Z{ X.P
{iJA|:CP0
2qI`}T`3lR:v%B@gSaY]%J
7*c1Bxj
COG#z}
(x/|&3X%
9;!*XH<
ZYq`3-o?
zwE+
fJiiRlA]
e^^'U0m&f7
yae}&4S
v7H~O.>W
yd4&u8q8
a QxZ$
CchSx!a
X0O`lbT[J
y5B@dK
_o`L3W
{P/5+|
-P1qv0
?\a%#pd
7,]Uiu(:3k7T#RIEeE
PmL&<H+vhEHYG"d9q
=s#.x~;
nhS[WW
K`s+ 3f,>=
@e+wy(3R@
Q08F)g
'.Q_{g74.
$ckk~,c
N`G*N;-
v*<=PQ9r|
S K32L^
~R~/gmCqmU
532lGyQaV3`
|5)GG_
%9%*!Z
5sI_MxLCy&G
7p;x!{,C
@EJ{Hy}.U(
P<(:AZ
{<gb=/Lf6i
.L;fiT
B6>O Tn
XJ@$Q>
a024 k
bbPGOeC
lr9Zt<yzbs`!"b
'a3 0DH:7_;tLI
;[sy,OQ
SMaooI~"uUQWi;Mv<
2.=|NcV1
ssV':7w
/(u%E3)!zA
3x.[qM_
Ax/^xr aP!IY"x
k<t58!
VdZwCe&0
%Ckc9I}5}
.}>^WMhAm
P>xkH)a
yEYpxO[p
%.ro#ow
RV=1]*
BccyOw_-`?
efrv81[Mq *4DwA7h
%l{X%4mx7{'
NH<FgV(
@j =%_L
ib'm_z90A_
x) RHdZ
Nr#8M
dfAdN d
jn);Ys
gGo|X&M)
<"`&F,
j6_i8hH
pMO+1;c[Rgq
N6g4Z-
JJ|M&8xp
9cK`? 2KA
S /<Y,6
=4Fjv_
"~=Vlu(Z5$
d@G9{I.=-
G_QoJRdJ~@.
R5B;jx$'Am$L
B2OB4Y
wWT#p}
{~wa.0mj
+"tvxK*[U
>]l/":LiUWz_6"anV8
xa+*e ~xd
DX]j2j
5y}.;t
`i}xr ,
K=cOp%CjEX5h4(t
QEP&cZKhs8
\EaO-R6
@M)>bw
{EMq-xSw
;gQbkYS>qY*`eT9
16^BA~,
W!e<YAJdGw*&keI
<Fbyi!auN
uQ4?7M'B
4C9[r{r6
Fe O[ d)I
zh.#o$
_X2-k{^Jb,oY
4CYO'OK
7\]-+QzToa
v6&KL|
!=|&jEh],)W\
T;r5qC^Yy$u8yc
7`m,l9
@f=8s,J
K;\F{i"f+DJ
k%F=(zA
u!jW6mL>
L#c(6E1&
),=Q$3pN+
8`[N5<U
}XIHn$IGl
St6dE$g>w
s'y5)|\`
fNV=/>Ku
O3C7ejh\
/!>9u'Unp
fRR FsQa7
}wuGZ,/n'
"T|Uwqg
2"AiDnXl
3WS4vcyJb
'EfzbX5f
nA>8U<QhM
qiPob
BdrlY;{
FHiNEwR8<M!v
Hh&PL^
/gE`a<8 1
T=B2E&h3c
.r.G5s
1g8zogL
,5I[oa
}gMYB0O
){g:4]v,G!
6j+$\lg)^H$S
M%5"C7`a1sY
&9;# Rj
'lF[q}L]Tuz
+x@n6TS7Z\L
:@N00V
c>\|<VF
,`EFSi
q!4u9K
$0Z45$eR:.nd1{
t_O\.Q
7w$$ckyg-q|
`O#8;55%
{gp{c
ktq(HNR:FXn
P{mRc2
{~#Z=f
>{^gGG(fH4hH~
<<#"BlAM!)
8}+g{Mho
RbvKNV
c5@:N/eS
'AFe@S
7}o-iK\
k6g$@t
$>ikKK
@.5/-G/^bjuJ
H^5@Bb
+/ F47O*
F"@eMtW
@8htjB
D.dM,4aK[
e 8Q]?@:l-rhp7^X*%u6G
i4hCCp
m[<Knn
F7_Z!in^3|`R
YP_ H;#
5U=7(F?M,Wtjx
Wo!!B0ttoc~$3yYp U
(v,97Y^9673
~~}/,zhv
FZK;srB
\35!Q8
fBs_2{
9\`o4%lY
lr[-\zD
nDn?~2z
oXkNiw
8/+_x9]
OMa )Sp5
P\}]^p
-lN@222v
aMEMFIn4B&)Nt
= $7}w?
~b3n=7
wZHW~;=#
7iE23f
PqPoBZ
!_)eJ4
:}y>*I
K1KoofG
$odb2E}
LCnF\Z
Y,ji98SR
*@r|n^
):]lR|hx51d
^;`:s"
W`1XEhUTV,
KaUlrt'l_
*%Ie%e
%cF[(`
Dz!N4@D
iIKzWoJ
T&&~'KYw
s/T<)[Dx
Bwi#\(
5'xz:*<L\lc-
)otG>Ww
f#Df=EZ
u.;AW# za9L{Fs
s,%)G!4SVHVI
fMt3Ws
xAz7D?{
xW+cgJYuc
=8v_M
(PSd,fj
`jLDlAQut(
Y&v315m2+
ky|^>`O
'1]\t#i4
s5$oB3x
!H;[ufc
Q!F^e~
(YM:f^|4|73OK
QEH/?16k?
q[4%T]LJU%T
TyT2'#U
t+n`[og
v\hFN,['{i
[]xQ!1L
t/\`)$n
|m1Q.@ s>S
o !g6; ibnN$Vq*3jwD|zM
\d"4@`uyaX
nOn`f.^Im $
zQ/C\M
Ay?io>aj
8g`y{3L9fbQH;
06f&Z9d
x;FWmlL
-,ZhQ?G
vj+O9-Y
XEVKpW
d`6L:z
+@i?m?
/PW!?g
C.KyGOO
mr="Bk%
.w~|f0rT
*'SXMa#;W@44m2
+,(';k
`7l^GF
y!iCtq3Uv<
g`-1hb
=v s%MO';
I0(7@<WdYU}
WQ4:,0e
j-K_.G
>Xp8{e*F8!/`.gEB
J%BBw'^/NF((|Udu
3?o#0s#917
w"3@G_
|BcA9YY{&^Q[
&lyloU
BNC:U6NDK.
)2.F6v=8g,
w@3x}D
rF-h.S2
Y}iHA+
(T%>s0-
+avmxzdK#V
Q\$i*6R")L
9Gje b
C0BpJ9Nn>hE?uk7wU\R1mD
_Sy&[jw<
_P^m5!~Z
entlzjoF
##Gsyz
*ttWDa]z
>V=yuH_;0
Lzrc3K9
syO0()["3
ou)A+a=
xElhFu8]zI;_i
c'q|">
15C(JR
As#2>ihn5["
GoZ@^Y2DXb~O
p`%dEx8)1+D
a52Q=/c(r'VXSXJ)R
.;{nDZP8G
Z@l0}*{S#HOn\
Fb|*Hz
|zrnN3fwd]ts{6M&*m
>vp%mbk
6M{UP>MCrkFc
"WbK/~
SUXp<BI
!TKF2ig
SnVqm<
Z$nDO$
V@z|vN
D,@c"4&8g
rWKvxr
~+(Or^?
5AEx)&
,\,vgkQ
)Ch)f9TB[
fYdrxq_
= J'VD
f% )O|qxD
`2r~Pv'
]9@jg}b
o87 (|
\3c(|Ou
Zm><>f
hRulBDRh
6IQvmd2x
K>Ae:+a'
J-F3:o
{M6V{f,$X{L2
q*>X5=l
kcyd/JF
dz8+*F
n-)_0@(zx
nEXmk4
F~'{ K
7oh,~N
d2S2YsM^$=E
aS^$(FE
D/<e*(>
qO<k~Y
^/1ly;V?}
O+j1Jw
.I~Ur>/(f
,k|[B&
I`j0aW& u+R
IOLLly_U)
CJb{y[w
})>.>"
sU"-6QvdpY$>.CL
?!N/`-.
?l?0T$x
H)13>ta+*
W}G~A>
LYv04A!l
nX@"to
TV]wmi[
s8w2W@gi
jTFq1wkknb32"
x)m6P-oPr':;
@rZcpZs\x
'\}P:?Q1D2
vpPHnoq/
X9?He8y
9'<)+Q
yh&!JK
z`-\}s^
"9,N)qf
x<;6__z<
<#{H\m
g>IQR&'C;@v=%
S%gAwQGFQ|K
UBi~'#
-8ak|7
7CW2_zF`_R
!!5xV4o/M
'<wjW Ch
ze/y6l
SM<}\$fv
4?R5_PU
WM]m./R}[,\W
#Oa*ds
"]rCem
Qkxzw>
|NgL9/
m=O[XjH L?^
xMk>P)x
awh.);C$L
Bew`ru
D<_&Ibt
Oq(Qrp8
;m7=/;sI\R:
A5QkDYz2l B
`~&dPx
@&H4HVT(E~8
/Z)A^`=p
|r~O6S=*#_
!:G4)>TC
B5v%Ab}m$N3K
>VIqqf-:
Dae(=^
r?k'4K5
W"%_4>1>
9BK&~!8}q?@]!g
o ;]./+[
[w_J.1$
D'3Y=u
X$|j>ENf0(HA;6
M t$^IP4,26V~,j#
.C[}fel^
ZVGW]I
9|IK+j+s
y{7f6o 3p V7Q_-8
B}z~To
Y>(TfG*~xhF
@DUSQ'
<vEKJb{6
]km%cfxp{=
&Xu,2XRY\
-@3x\K-
SysEu<$oZ31V) m^^2C,:
jlw0M!?
=p\p1N%a?$k
ZR!gi'
rf:i4b9Qy
zAn?:HL>
P6[ls5GO:Hyklkt
9>q/z\
z?s>q]S$
fD;C*k)yE
>&9yiWF'&{PJ&Tv2
xoi]ks
w{R{@V/P&5
j5j6Hp$E5>
@fOfFU0<QC@f
6de<.(W
O0wfW: L
^in8AJ
T'$`A~:
S~(TTLe!
I2/s.b[
V~5BZolZ%
>41'oWKp.g=
U{>?fi
uLsgN3^Z
4+2 QI2os
n{%KeL\NW(rBpmdB[7<I/ZJ
`XoUi<Z[B1
^DMWa%
4BMDeT1
x5`73"*e. |p?
}RciFN,
9}zY[m$l`
/O]aMm
MireY=
UX4mT`v_L%c1
;13hC6
KD#Y6CTJt[qP
N )1";Axm
agRNBSQE
-Jjl`>_1P
d8 I:b
+Ophx-r
,|_I??d
.U4'M]GID=r
e0%G}p+K\e
E<]pCG
wC,-T8I>
OVyC6xxK
sT*fOPxRPW# V*
;JFJP8 oX7
bA:$Ox
6l#1IgCLu}MfHk~Ux
6I&z:bU
lf+ !x4/Zkm/U
:bX 19:?
ZJ3N'j
#l=<m0
F@/BPH;JW'
gp9mgA
VqB__{ck3
8RO@r?
Bw39x?
ZI/db&e
ns*s9G
Btic`"C
'*:PBil"(^G^i
\BvB${
\PDs]
LFuBQ'
+{p{7B
?7'JQO6}{
c |"6o-- :
M@p"[ d0nQ
PxL6T"6Ad
C:I[n)X7
O5w_/JP%$uP
6p7'4Q
*1"z)!
hC}mrml|V
cbnq3[y@o.\[
j$RAev
/3_VtFJ:/s
qBv'\l
Bvz7RJi
E|1%q"iuW
ZZ*0P
t`#fL!}
]QNE/#0-
8Q5YS-ZJ}
UeBC -1
1&'_~`c|UZJ
Or?T*!\
R~[?S$
;mR3K]N
LSY&F#
{su_>8A
LX&ET~(q
utN[ QMReZ\ Un8
Re:mwT]I.
B`=mm#h
"WS~ni
-Dfp6Ju U_]
g{y;VmREL!
\$fV.X
8<ccyQ+
I(>nzj`T
5|?5 0Iiu%5
msQff &Hk5
4Cw-1EuK
5VDeF]%
wc*;5l6V
j`}DIe
,EQyhQ6?
=XJ.ZM
t<@Sr$G"^Y
D)%/yy93
* v`6X
$/?-xM
dMA{}G4
703*j%M
(,95T*98
LgQ;*4
[|w6BTDu6*
LygQ_tY
A]7b hO
w)Q?@n
60WP}M?zVXC
x$3on[
"!B[<2K
(lVT{]0[W!
Er!V$4Epe#B>
)mo:Bn{wdp)T
8'J;eS&
^:%7V,F
`S"6Cu
X72F`x
YxvJNf3,
jRm%9a
ba7;:,VZx?#
bh2}JxbP.
Y;~`[\I%0T>
%<O1v;B
=^D4}TtO
2g1}*d
cP p2s2+,f@_b
b[@Em{@R
g@|HP9
X"W^2*
;847qk
FI2F`D\
:DaeaFM&1)lc$!HP
FY2T?P
_r7+kr
Cwvq}9&u@
f9s: 3kS6 qO;)R
KwGbyZf*BuTd
p%yFIaJCmp
vZ+T@v
<wE6LuxZqs$$
\.+ gcp~X
`kiqwN^[3
0*>"Ys
Sq'vBoGR
Y3|T8-d
I?<=4n
*rY`7 "
7.XY/v
5'S4dZ
F"h}jA
v=Q}Ft\B
O)?QG>
6YU(@E
'dCVDj:YWc
W^_>KKk!
PZ%YH0
o_U]I+'^
< k>x<3;}x."apri
$d@'`3
K ~1roJ|sqf4z!
4(?"?|
{UHh@c
8nAJi|e
2YKp/%-FD
M{x? 3
Xu`}+QYK
ZRK=I/@R
$4af<`_%C
u*X.D`ct
a5lP'[qypma_
8,jgxe
@n'T:1P6
F% M8l0Cb
DT4&4)2
3k_iD/]5J
<Dspu0*
}|N]+\;Kv)ft
tK4;##:CyI
z =aM&t6*
PWe`0H"faZ
#OacUf
6U`Hg"aan:xM
" ^Ezi:E3c
xl[kJ\46<
<^zVe8VGo_
S:y,xMm_T`N
AjdK- P elg
rOmE<8=~rNu
-i#]qo3zz
tG:NDw
rFr`Eix m'
`2_)nwC+d7
_?JMA>\X@,]xp~
l}uB4[ C9
ET@j`^W'
y< |dNBw
-Ak)13!g:z]'
9:>t={KINg;t[>
>*pa7Xh0 1!
JzG0$NY
I`LA9$
fpBIqwa
aa\3ih.$PY:As
UbMSNFqYbpV
@x623/
&,Gy-$4L|||,
>bcjq!7g"4lw%L*q
n). o0&o'
Q8ZRaTu5z
&8<CY8
$@-=7^_1
6Ae51Q
>Y"yQD
cdx '59
pKBo`m
0s]A a>%I
xT3f}=W
>y oJU=K
4# v 2
;~-N,?$]@&
FF1Dw1"
xmXQd%
{3$Y%\a`l
iYM #h&zCP!I
tS`B=)pA
8b(s&4AHyUD@lw?
o]G}B>
Lu&zyNGj2
!1b$u)]M8~3dU
8Dko2i"d
UAt$ :E
O~.g)|
R]*X(g:6
t5aQHR1}X
6d2,eO"6
xi/V{4U9L
+nQ_?34uC{=l
K 5.Ns~B
Eq;=fkTlR]7?'0F
3,7@PhFND
~qq 6ux
ZM?e)\d7=k
[ [VF/
65oD9[Oh?
$=cHy=
MYf3(cgZ
[{,Nos>Ww
H=}@L.{T6@&Ol'
<RKpDt<*
QO?lp?X
B.N;`^aw\EcX#S'd
\I7sEg6chk
gbZ%R;Ei
pz k*>?
ZSg6F!H`8"
h0+.^Ik1
UGJfTYz.f~=b]
`\9 pZm}d
ly(&3{;
q;F" TEU}
pmgTC4?uCs
,eX3l
N9lU")^9
PxyQ1s+0{
?P)x,`}
[g PU[
P)&^fY
('y'1u@vH
O;uOeZf
4GNj|wpPg|
D/Oc0<
ofQcpg
:H_Z*$8Ml"aV
PoX{d@L[cUY}NR]fO
S=m6HR :
8/62nt>
>BhON"`
!x _\w
c5Kh%T`Li
FJxmQ&
=un=!U
vZiTi^jLkp0
gY`zKzu
n/@w,l
q^R;])fKHLe}
aA#vpP
HR{P>2M1x9>*$#2n;}
r|<!T(1>
R6o<.GId
O=QH`"
/ci>OI
@ysC,r
\w?0|K,
fkec; 1
Ug|d?9^r
-;C!i'_e1'?s;3N 12
Y^tEpE
HmXUxT,
6?mICj9
XpUaT+
KK`?<{?Ar+H
XJ6jDy$fQM
AZm 3/BC)bp5
`tB]=w
)P{v4E
GghDjt
,Y;\_F_r T&^~Y
PhdWGi](
(P\EA@
$=c`.0>Jbu
2`dz/QZj{
M]BO`kB\
Z5F!#af
?XA81"X#We
hwhrt:4A
,38*'D%"& 0
%)M.'V-&
ZpN2|5?]jk-@W
jns+Ili
jp3Nt0:Nx*
,3?qz oSp
XM=RIX07
7o)XDasUw,K
Q~Vq_D
isP?@t,Dlc
v]&%e,
Q`?1C J}8
Px >5s
@`Bog7
ktD%pmU@zE
6&buN}@fI
B_}bq~, |
,nh;IqO
LD%D:b"
P3T6f,V
z_XN.q
pCnVUu
YvH']0;*SV
o_h+P5H
q)<H&/`]~w
vq_,~4c&0
K-z/AWl{~Tw-x
gx2A#X;#
f"rUT`k
picE]9
=fn@U\|Y0i<Pb:
A_cZb|d
9x$Td^
kO$:t7
qo( OzU
eGzWd@fj
O@+l=*dH
,(jF'`1
3r%USqc//B
YA96{xd
MP 0_2
AZTWE8K(b
9%S5&E0
V1=7oKfr
w6g|DaO
2D|h!Ej
_=BG0FS4<_1
t@qN[,k:~
X[DM`Q
0J1<JP(
f:"<`;
'oF'xL
#/CpM+
tQ: /6Ugm^}d
\/EVV6,.q.D~+#
wCq1e05<gv%
AoaGgeZ
EL"(u-7K
b|nbQZ
]w*hoo;
XiBOQ#
*Vo_j#
0(2*g_]Z~1:
k:s(w"
~i\oq0
0Ct~1 5M<c{WpFW?0(LM!i%W}yn
,\+}j<
yhLB?QAm^FP
" XN@'Mku9
w_J2`:
#i/+Gk?[gz
K](=@iR
o'^n!k))
gcY @tYnBj`=
nK9i hfc60
cG8f20
B/&c$iZ'
OeYGe D
s~FZ)8
|fF~<pMF
[[Bn 8ZyQDnp!0
%fF{{#
>z5uejoeFTk$FB
LPTEM!
?7,Dh2
{e Y(d7'
(Hi$9vzb
eC i]g
.ky{b'TZf.
3xk_V(
vb[ Js">(_
V?S^z#
(j^N`m
,yw%U[G
P5sbV?
@[ubF~R=w
7>OJ.)rax
,/%#=HQj
B=BHy|-9
u#j=\i
8MvMY?p
{Y-Ha%
L|;o*+X+^\0
$`zM}75WS
DEyQ-C
~ZYsOqk$]
1MO$<S
lTVym9
W`~-gmQgut
b=~Cd!daI
:^0/ C
U&TTw@
d=LgWd*
_tZG{&
%Dx=n]c
~7Rt-D6p
aeNYkK
(]o1GB
j` |33<48~
M5tKooUdh
n'L'_yC
tcMzN2
/(pYH1
s637_e"jlU"
=vqji:Ma~P5`]
UF'zlXk=N
r<n<Rr
uXB v(J
1ZAy;SB?i2
e8\Ve~\
VeUv$W[
G6pB?=S}+
qVJPg^Z
;P:O[^OLPlV
48$dU\>
:Wr6at'3o
: b2R!&p
y+u|wF#
jMk@ &
r|j6o{]
zfEJG_
&J,K/&R,
} 'Y5<jm
t3QQ1zQ|/+
_/^0\Sb
4rbU&Q-z*JT
myeele$
/?u7_\
v/njhhl
bKzfxII_@]r6
p@;6!-t
Nh-#(o(
t"AUH#1&7
7I!UIb[5
3 917F
v3;1+ze
!t1t!Z
b-`gI .f
Oyrqs*C
X'p,?FQsk
2(X?tVX[/m|
!^Li0{TV
]AKVk"8xKb?gT
s'[S^!'
VUh5B*Z
6mg-mx:*.><_
?YV|5$pDg-
uNLRZ$
/M!lsu
XzOoCN#
aBKE H_vZ
*,t$RE_
EvqD!S%t"Cq
D`J1\z=x
\vUu\Y'
`\aH&[$
5`uMf"
C{x\dze
RA$`Lc;fL(_
B*j>0NN~X
'Q`7tH
*.>-ma*[
[R'}0wj
&I\`WG`+)
LaW/+a
|#c:\y'VxFXg`%
o>xJ=n
pbgb?;
[{s=AD
(kK%|+*PS
-hkm%;*
$KRK8y
utbK:,_`]3,
9hDhm1*b
]L\gUU"PGWf
WW|a3LU<
Y*"}*YtXR
Hc[(rd
2*>koW)E
dy ,;Dk'Xv
A;B)1|
cz?;O"Qh
^ +9iL
VexoS.F
w61C>w
sVqR:,v
@:`Ok)
' uOAc7
)&%sLt
g-mO>e}O*Q#P+p
H @LbI
-Vj!qv$8!,
<N0!=
;f1]$vog
&r6u,c
S{~ .TY5'
GI#\VF%
aDi,?|-
p9C7[r
]!@G2X
1?VAeEm>|GeJZ
H?l(4l\
imm|y/tk]&h7F0_a
9`}#<Y
J]8q({
VR1o`%
xcqa,E
gL5LJyXhJP"
V8WFjCQW`
gh&D0GoO
J)cgVEq~
i_7/gu
k9Y|1J(^+6
{Bs|E\o
hO&9lY0
{G:gO2[n
e-yxe)RF?)RD<N9L
@<?,;MLR8gBN
8owE*^
m0b8tp
VUC>l[
H?Kk0IL{
w'_VZ?q?
\c d}Z
vi.-f CR
*mn#K^>}
5Q4N[gH)
]<$(p(}^
6v(^=3Y,
ysA3Zo
)!(6rfL
yg=m Un(
Y]Zp 8:\K
j (FGw
s{ZC:3
UbE{pv"
\e&hHoo
k'3JV6(
K{0;De
87mI&y
gm`@uHi\4YT
p@pwjHm
_RJ{(G
kP ^qqVj
Y}PJ{VKeGF
kn|UPPm
Pi+imP)Pr_$
1"Gt#\VrK4h
N].d\VrOp
@~99]<w
X)3-S]
_,*`-9RH
@Cv+L'
7e=l\e5O)
tNgrmC
l,0#M5j^N
5 {;h?[3
{deG#44
K;vX4Z=s
QB~2A+
Q#V^AP
$acOr%4
cu\a#YSkA
]{> wqSE
7a+z@hG
/we{Y?'`*G|Ub
*zqiWS
r?/s`iHdly,
QxjW(Wc
:A;h,opuZpb;baR
jtG5"a{c%T
qe-@kW
_1st3rx/F
=R+BG.,`
a|;Fr(Ivw
:mcQvt?<b8~ogrL-
4K[s;>AOoO;:W
l_lQX@"
}f(.UF!
Tn_clh'
|>i&gxHd
2+jL.=p$
IFQJ|6+
xtFy/W}7]n
1Rk On
kj zo-
JSb>q'
[qfqp"v
-j<XmKM!D<;GB921
h7*T#IO
tdO)~Y9:+
S.?Z~iV%-
9k>det
\7UH?`h
g[pKnC;
_$[SQ*h2
U!K AD+2H6
sUAg/V%8
Ww|:U9`q"
0::A#e%P
a".gRZ
T3sP@[W
vI^rxX1
2Ipmw.n>{i0
p*6o]4
sI6>v~
9"~AEm|TUMGa-Uz
vfgzXL
7>{(0?
wS;ODXbwi
4/zvtE_r
ub`*<7
xH(rwd
YP]6\W
.UM=P2m^&
cqsjUm.H
9"Z}qOCr_
XfH:UG
ElNkjl-(Rb
ON1X@td rZ
6)u(%L3
5r2fovM
%~s>86
0?AblL
{qCqN#i
B%5vz1
o{'m51/
r/S< !T
v"VH%!
VA`#/u#
r7X^/63C`
lJG-xmNJc
z Yqt.
Xoya2~)$
PWmT(zB
\7uy$pO9c,l
W=!(Ygfj
>va*>|v!
A,Zo_E&
&Aawv}
MV<][=
Wq_lMK
T=TGxr
HAFn'Yw
]lpYoW
Ylj[jT
I<sOhu!Y0&')
+is6X`
9 V5t_
#v>lNp
F%D5.L
A@NX<k]qe
=XGv6hH$E
;yr'#xR
^DV>di&Mb
N7H]I_O
:; 1#`
3h`U>G3[
hJQ}/ZNi&T8p
v:z3!i
#[p(S6
P"#P}l7
k2w1f<
K4Wh.N)j:
:fkWS(
2KF0 X;7
7gtRa"diTnw
R(H!}J
Cf2Xj"?C/;?%'
r3!Gy:#~ )
}XyWrZ
;c\iUTrr-lGW~
2?Bqp|nm
0V3%x_n
~#";-1(Kka
^l0v-{]
&Mp&7pT^
'HgqG*
o=8[)Q1
idBZpz8
WShs<"#
o_-v#s%+:
vG8[WW
:,e\Zx\)&
>h6x+3
_)9/a jheO
?!Ygc]
mDH,m`t1] )}
%O#k*[T
*mRaHXfr
VQ[.7`4mJ;C Ja+o
5{GgSnp?Z
P~P6}$ZHW
+Z,Rs(t
oW9SJd|oFtlv;5R
J%**]?
;1 fKM
R/]{3"
(ar(3L@`0
vh5yb8
1cU!VB.y5n0
Q+&y @Ff#;~
& &2)
X:#~T:
Po%(I=y@
`0jOH!"
^n094q
~w]cMr;"XBD;{
AsU|J^UnuvE~.
l g{W\|
^I=DX>!
CEDjE`
A.=05q pA0
. J]n*$iL
oPoI @v4s
J},]4A
$Vdm+3i
"aY %J[a%
3MQDJR~dK~
;I!|eH
q&4P]Nc
C&~%P@y
n)E/Pd
6j1P}cr*/
6HN22D
H`)e8dw4HEv<B
&rzu{?
6:rr&.590>O\
0c~J0Vs@kc
^w)]&o
0+%~u_@<}q
g+j1t\%[~v^x
/uINbDO2/
406ysZa3
(-@_4
A<,uht
uj\DazfbqP
#'e-L3R
mQ t t u2#& |
\H{T<MV1Jl
Cg;>@\7"
Z\\Dnd8fs
!.;q;kv
69UY5i\X
:7X*@3
=(U&bN&<*>ZBO
V#u}aN}w\*\o
T\xN^>ME
HfWOfI2:
G&>C!;aSDeqqZ|,9p:
dnBe%tV_
%k&;`)H6qF5y
/lL*w)
A]9>4/@
$tew{002Fb!
<b,7B"gx
F8DG.[
~:FSYj
'9g(]Imfo
X tP(>
,3>?zg
\w_R:*U"PD
EYh?)zk5
qQ'-C|
ufN+w+InQYd
@[d#JC~}?T=K*
)*#h}G
Wp},~^7%
V mdfg
;V~1tLo
39Wh i
,nq>[b`|
"-5NoJAc
)y :b=,SX
r47{^F9~VX]
H8*%'
-j\4?+<o
n!gm8?nz_
@A[{'9~f;3
7+};KB
}s1G*0
Lfg`Aj{R6SXe$
_J}0h;M
z=hq|y
W,?,bon\
Rug5.-
v'l$hG|*]|
1 7:!`E!
v9'3?iBucWyJ<4
}DpV%$
L_@8n_I
ifdV*J
WU!bED
zq^z[_
o[a@vI_N
hhgxVbf}Aq&
7 Euy@;
3N ET_
6I0(S0G>
1{/R3YV\
roPbTDP0
2i%0F6,gA
-9`SqME
t2mu' #^<y^
Rs DD`W
te-R($
`KF'6Fvh<)@e:Bl
*)_IfL
$o%YFKmN'
`^$~Sx
H/@4GbHT
#]&Bs<
SF;|qzvy?lS
>46KW1
[!<vk@
'?+yvYi
^LNwEqf
MF{HVb
DjL2Pw
<4Gg,X
#{GO{Q
;Y;pCRyyo
T2eEtvp"!
N0WVR*
o0Ef7!H;T
?Gy!y?M46
>YTE@#y%
F_0e6o'
4x?,:z))
>eZ *:I
: ~~HOV|9t,K
fn)}#z
v6KuAm
P3r^;! P
L+)!YE4R
3Qb1My{
X`_Rl7j
bqJGql
p|)a+Z^q,qE@FY3 X<
z2y#z6
f7Y En9*e(08
Zumuru yaje huzikafu pode cigosasetidiyo. Jeyuxamilodedo nekutiguyi. Loyojimi de tavu gosu gugozebeje. Gikivejoxega fuve midaxa zikelizedoxi. Rivixavi zozesafa canemafica. Vere nixadatebico. Futi wefogu. Cubohexuvi yicayanemo yicehijetu dexicawo. Mutegafefopi wozemogigaxuja zajiyani voxa. Zowiwaye. Paxoliwu ropiyenazi zofoconalese yimucayedu. Poxiyonicemibe hahasepawude hukusidadaga ra terisovuhihicu. Licoyami yobewijayeroso. Rorero jufebusuyiyo fakita wevile. Retixahawera. Luzujiceho wodizo duremefulebiti nekatixebale. Wufevu jokago mihaci ceyeyeva. Xudizera fasumate vaku. Voko gu miwubotahu. Tucozameviji. Harabemebo pobo zeharupu yucitefuvuku yidediyejuyiwa. Dutoxazepa. Yuwe. Nesihuho sicefu lecuzidato bojoseya. Taperarupixoyo wahu lepokiku wu. Cetumagike zacacudicuzoda necololarumali vuzawujukigisu. Nudoxefesepe xujerivugelavo mejuca lowo. Xuwu. Yelepe nadaraju hojojinupu cayiruredopo. Foxobanijodi rivufemaxusu nutavecehe nubepu hugu. Wujejixafu pacelunu yifunogacebo racoyenusalu wahoze. Pumojuhogoru nufi gunatoduhokeje. Kayilakadolipo. Welilebaxupe. Wuri xazo
Hebajigivihazi fuya cizogizanugipa. Yacu cipiwetewava. Sa logejuxosi dijo. Haru xa yogo rayociceneho. Zogolehejosa zobilo. Noziwovazefabo favise funotudovoza wesojimetasu jinefe. Gecipanoluyifo zobe rifezida. Wa zugeniyokuluye sepuhe zimo safodiduse. Pejacuda. Gemuvafa lomiseyi cuwati takoneyepijo. Sudota kupo vete mulavifiposoxo. Hi lujusucufususa boheni hideyadi. Zeruleviya hudeji tafepi jiwage kuwizu. Medel
Cotuwi jaharo rajucozibuba. Jocejeda macaviye. Yoje. Lefu. Wahokenono huwu mipu. Te dimabozodeseyi lemeje vuxoti
fKKKe*n
,,,,,,
,,,,,,
.i.i??
.i.i??
.i.i??
.i.i]]]
.i],,,
]]]]],,
??????
??????
??????
????????
???????
???????
????????
p??????? >
p??????? >:O
p???????}:O:O
????????}:O:O
???????:O:O}:O
???????:O:O:O
????????iiii
???????iiiii
???????iiiii
???????iiiii
????????iiiii
???????iiiiii
qx~s~~
zm~k~~
~x~~~~~
hw~~~~
i~s~k~
o~t~~~
~~~~~~~
~x~~~~
~~msg~tj
\s~x{~
~n~~y~
o~~qj~}
~~~~~~
~dYj~^~~
|~~~~~~~~
~w~qt~
~~~~~l~
~~~|~~
0<1G11o2
3|33m4
5K55555
616W6b6~666666666
777I7R7y77777777777
979z99999999
:/:M:T:X:\:`:d:h:l:p::::::2;=;X;_;d;h;l;;;;;;;;
<V<\<`<d<h<<<<C=I=U====
>">D>>>>>>>
?!?+?A?L?f?q?y??????
0*010\0
1 1$1,1<1F1L1`1x1111111111
2K2P2Z22
3:3]3h3n3J4|444444444
5$5(5,5054585<5@555555
6(6/64686<6]66666666666&7,707478777
8888Z;z;;;k<<<<<I=N=W=f======'>3>t>>>
0I001|22222
3W3`3l333333333
4#4*41494A4I4U4^4c4i4s4|4444444444B6G6Y6e666666
7&7,757A7G7O7U7a7g7t7~777777+818[8a8g8}88859X9b99999
:!:':.:4:<:C:H:P:Y:e:j:o:u:y:
::::::::::::::::
;+;1;I;k;x;~;;;;<<<<<<<
=0=D=J=S=f===
>>>H>>>>>>>>>>>
?1?7????????????
Q0Z0`000
2M2T2a2g22222222333333a4~445555>6\6o66666
7!7U7b7w777
8?8889
:X:g::::::
;<<<<<
=q=w===
>->S>Y>>>>>+?5?`?x?????
*0M0S0l000000000
1)11.2z22
3e3(4V444425`5s5A6b7[88@:;>
J12222S6e6w6666666
7-7?7Q7c7u777
8H8_899
:':1:?:H:R::::::::,;a;t;;
<J<<<M=Y=l=~========
>!>H>q>>
'1E1Q1\2222222222
3&3/3:3?3H3R3]3333555666u7779::
;!;*;4;<;K;P;`;n;};;;;;;;$<C<N<l<<<<<<<<<<<
= =%=0=N=S=`====
>!>'>+>1>5>:>@>D>J>N>T>X>^>b>>>E?W?????
030000033
4}9>:;;2<:<F<<<<<
>%>>>>>G?O?W?c?o???
111911
5&5>5F5L5S55556>6b6n6z666666
7#7,757>7G7S7_7k7t7}77777777777777
1|2222283A444G55777
8 8O8|8899:;%<+<<<<|===P>D?L??
2#21222
33^6u69999999999999:::
5'9B9]9g9s9
999999999999999
:$:/:3:8:
<1@1D1H1L1P1T1X1d1h1l1p1t1x11111111111111111111
2 2$2(2,20242\2`2d2h2l2p2t2x2|222222;;
444444444444
5$5,545<5D5L5
3 3$3(3,3034383<3@3D3H3L3P3T3X3\3`3d3h3l3p3t3x3|333333333333333333333333333333333
4 4$4(4,4044484<4@4D4H4L4P4T4X4\4`4d4h4l4p4t4x4l5
0 0$0<0@0P0T0\0t00000000000000
1 1014181<1D1\1l1p11111111111111
2 2$2(202H2X2\2l2p222222222222
3$3<3L3P3X3p333333
40484@4H4L4P4X4l4444444
585D5`55555555
6 6@6H6L6d6h6x6666666
7$7(70787@7D7L7`77777777777$848H8\8h8p888
0$0P0|0000000000
11034383p4t4x4|4444444444444
5 5$5(5,5054585<5@5D5H5L5P5T5X5\5`5d5h5l5p5t5x5|555555555555555555555555555555
6 6$6(6,6064686<6@6D6H666666
7 7$7(7,7P7T7X7\7`7d7h7l7p7t7x7|777777777777777777777777777777777
8 8$8(8,8084888<8H8L8P8T8X8\8`8d8h8<===
>$>,>4><>D>L>T>\>d>l>t>|>>>>>>>>>>>>>>>>>
MTU7MTU=
L!This program cannot be run in DOS mode.
i2h:2h:2h:2i:gh::1h::3h:)%:"h:)%:Ph:)%:
h::3h::*h::3h::3h:Rich2h:
`.data
@.reloc
otools\inc\nlg\private\inc\msfsa\faarray_cont_t.h
otools\inc\nlg\private\inc\msfsa\falextools_t.h
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
CorExitProcess
bad exception
HH:mm:ss
dddd, MMMM dd, yyyy
MM/dd/yy
December
November
October
September
August
February
January
Saturday
Friday
Thursday
Wednesday
Tuesday
Monday
Sunday
Unknown exception
GetProcessWindowStation
GetUserObjectInformationW
GetLastActivePopup
GetActiveWindow
MessageBoxW
!"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
nlg\lib\msfsa\faallocator.cpp
nlg\lib\msfsa\farsdfa_pack_triv.cpp
otools\inc\nlg\private\inc\msfsa\faarray_cont_2xresize_t.h
nlg\lib\msfsa\famultimap_pack.cpp
Internal error.
Object cannot be initialized.
Limit size has been exceeded.
Out of memory.
Object is not ready.
]ut5p?
W3+t#Hu7Vu
^3[UQE
V3WM0u
UVW39~
<|uCt7
t79V$t2h
M 3UE9J
MA3;~\U
E;}q}M
PE @PE
MPE+@PE
G;}|}]}$
F;}^U9]
z;~\;}T;]
Yt]U]U]
EVW3EP
m s c o r e e . d l l
( ( ( ( ( H
h ( ( ( ( H
H
A K E R N E L 3 2 . D L L
r u n t i m e e r r o r
T L O S S e r r o r
S I N G e r r o r
D O M A I N e r r o r
- A t t e m p t t o u s e M S I L c o d e f r o m t h i s a s s e m b l y d u r i n g n a t i v e c o d e i n i t i a l i z a t i o n
T h i s i n d i c a t e s a b u g i n y o u r a p p l i c a t i o n . I t i s m o s t l i k e l y t h e r e s u l t o f c a l l i n g a n M S I L - c o m p i l e d ( / c l r ) f u n c t i o n f r o m a n a t i v e c o n s t r u c t o r o r f r o m D l l M a i n .
- n o t e n o u g h s p a c e f o r l o c a l e i n f o r m a t i o n
- A t t e m p t t o i n i t i a l i z e t h e C R T m o r e t h a n o n c e .
T h i s i n d i c a t e s a b u g i n y o u r a p p l i c a t i o n .
- C R T n o t i n i t i a l i z e d
- u n a b l e t o i n i t i a l i z e h e a p
- n o t e n o u g h s p a c e f o r l o w i o i n i t i a l i z a t i o n
- n o t e n o u g h s p a c e f o r s t d i o i n i t i a l i z a t i o n
- p u r e v i r t u a l f u n c t i o n c a l l
- n o t e n o u g h s p a c e f o r _ o n e x i t / a t e x i t t a b l e
- u n a b l e t o o p e n c o n s o l e d e v i c e
- u n e x p e c t e d h e a p e r r o r
- u n e x p e c t e d m u l t i t h r e a d l o c k e r r o r
- n o t e n o u g h s p a c e f o r t h r e a d d a t a
- a b o r t ( ) h a s b e e n c a l l e d
- n o t e n o u g h s p a c e f o r e n v i r o n m e n t
- n o t e n o u g h s p a c e f o r a r g u m e n t s
- f l o a t i n g p o i n t s u p p o r t n o t l o a d e d
@ M i c r o s o f t V i s u a l C + + R u n t i m e L i b r a r y
< p r o g r a m n a m e u n k n o w n >
R u n t i m e E r r o r !
P r o g r a m :
H H : m m : s s
d d d d , M M M M d d , y y y y
M M / d d / y y
D e c e m b e r
N o v e m b e r
O c t o b e r
S e p t e m b e r
A u g u s t
F e b r u a r y
J a n u a r y
S a t u r d a y
F r i d a y
T h u r s d a y
W e d n e s d a y
T u e s d a y
M o n d a y
S u n d a y
@ @ @ @ @ @ @ @ @ @
@ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
@ @ @ @ @ @ @ @ @
W U S E R 3 2 . D L L
k e r n e l 3 2 . d l l
@ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
@ @ @ @ @ @ @ @
@ @ @ @ @ @ @ @ @ @ @ @ @ @
@ @ @ @ @ @ @
@ @ @ @ @ @ @ @
@ @ @ @ @ @
D A M E R U R E L A D U P A D O C A T U
D J O P C E T O O H
T U T A L A S U Y I D O F E D A P O B U W O N A Y A R U
V I C E Z A K O W U K E W O F E J A V E
X A B I K U G I K I J A B E S O G U T U Y O Z U K O N I
Y I Y A P E L I T A Y A Z U K E
D i a l o g
M S S h e l l D l g
C a n c e l
V S _ V E R S I O N _ I N F O
S t r i n g F i l e I n f o
0 8 0 9 0 4 b 0
P r o d u c t V e r s i o n
1 0 . 1 . 1 0 . 1 1
V a r F i l e I n f o
T r a n s l a t i o n
R E S O U R C E _ F A T O K E N I Z E R
K E R N E L 3 2 . D L L
s m s c o r e e . d l l
n r u n t i m e e r r o r
T L O S S e r r o r
S I N G e r r o r
D O M A I N e r r o r
- A t t e m p t t o u s e M S I L c o d e f r o m t h i s a s s e m b l y d u r i n g n a t i v e c o d e i n i t i a l i z a t i o n
T h i s i n d i c a t e s a b u g i n y o u r a p p l i c a t i o n . I t i s m o s t l i k e l y t h e r e s u l t o f c a l l i n g a n M S I L - c o m p i l e d ( / c l r ) f u n c t i o n f r o m a n a t i v e c o n s t r u c t o r o r f r o m D l l M a i n .
- n o t e n o u g h s p a c e f o r l o c a l e i n f o r m a t i o n
- A t t e m p t t o i n i t i a l i z e t h e C R T m o r e t h a n o n c e .
T h i s i n d i c a t e s a b u g i n y o u r a p p l i c a t i o n .
- C R T n o t i n i t i a l i z e d
- u n a b l e t o i n i t i a l i z e h e a p
- n o t e n o u g h s p a c e f o r l o w i o i n i t i a l i z a t i o n
- n o t e n o u g h s p a c e f o r s t d i o i n i t i a l i z a t i o n
- p u r e v i r t u a l f u n c t i o n c a l l
- n o t e n o u g h s p a c e f o r _ o n e x i t / a t e x i t t a b l e
- u n a b l e t o o p e n c o n s o l e d e v i c e
- u n e x p e c t e d h e a p e r r o r
- u n e x p e c t e d m u l t i t h r e a d l o c k e r r o r
- n o t e n o u g h s p a c e f o r t h r e a d d a t a
- a b o r t ( ) h a s b e e n c a l l e d
- n o t e n o u g h s p a c e f o r e n v i r o n m e n t
- n o t e n o u g h s p a c e f o r a r g u m e n t s
- f l o a t i n g p o i n t s u p p o r t n o t l o a d e d
M i c r o s o f t V i s u a l C + + R u n t i m e L i b r a r y
< p r o g r a m n a m e u n k n o w n >
R u n t i m e E r r o r !
P r o g r a m :
H H : m m : s s
d d d d , M M M M d d , y y y y
M M / d d / y y
D e c e m b e r
N o v e m b e r
O c t o b e r
S e p t e m b e r
A u g u s t
F e b r u a r y
J a n u a r y
S a t u r d a y
F r i d a y
T h u r s d a y
W e d n e s d a y
T u e s d a y
M o n d a y
S u n d a y
W U S E R 3 2 . D L L
( ( ( ( ( H
C O N O U T $
Process Tree
-
0bc5f28ce33aec6905e606c50864ef1ede106ea64ad3f849e0b888e55d57b822.exe (1856)
"C:\Users\Administrator\AppData\Local\Temp\0bc5f28ce33aec6905e606c50864ef1ede106ea64ad3f849e0b888e55d57b822.exe"
- nslookup.exe (736) nslookup carder.bit ns1.wowservers.ru
- nslookup.exe (2228) nslookup carder.bit ns1.wowservers.ru
- nslookup.exe (2448) nslookup ransomware.bit ns1.wowservers.ru
- nslookup.exe (1984) nslookup carder.bit ns2.wowservers.ru
- nslookup.exe (1828) nslookup carder.bit ns1.wowservers.ru
- nslookup.exe (504) nslookup ransomware.bit ns2.wowservers.ru
- nslookup.exe (1092) nslookup carder.bit ns2.wowservers.ru
- nslookup.exe (2552) nslookup ransomware.bit ns2.wowservers.ru
- nslookup.exe (2712) nslookup ransomware.bit ns1.wowservers.ru
0bc5f28ce33aec6905e606c50864ef1ede106ea64ad3f849e0b888e55d57b822.exe, PID: 1856, Parent PID: 1784
default registry file network process services synchronisation iexplore office pdf
nslookup.exe, PID: 2228, Parent PID: 1856
default registry file network process services synchronisation iexplore office pdf
nslookup.exe, PID: 2552, Parent PID: 1856
default registry file network process services synchronisation iexplore office pdf
nslookup.exe, PID: 1984, Parent PID: 1856
default registry file network process services synchronisation iexplore office pdf
nslookup.exe, PID: 2448, Parent PID: 1856
default registry file network process services synchronisation iexplore office pdf
nslookup.exe, PID: 1828, Parent PID: 1856
default registry file network process services synchronisation iexplore office pdf
nslookup.exe, PID: 504, Parent PID: 1856
default registry file network process services synchronisation iexplore office pdf
nslookup.exe, PID: 1092, Parent PID: 1856
default registry file network process services synchronisation iexplore office pdf
Hosts
| IP |
|---|
| 114.114.114.114 |
| 8.8.8.8 |
| 107.178.223.183 |
DNS
TCP
No TCP connections recorded.
UDP
| Source | Source Port | Destination | Destination Port |
|---|---|---|---|
| 192.168.56.101 | 53179 | 224.0.0.252 | 5355 |
| 192.168.56.101 | 49642 | 224.0.0.252 | 5355 |
| 192.168.56.101 | 137 | 192.168.56.255 | 137 |
| 192.168.56.101 | 61714 | 114.114.114.114 | 53 |
| 192.168.56.101 | 61714 | 8.8.8.8 | 53 |
| 192.168.56.101 | 56933 | 8.8.8.8 | 53 |
| 192.168.56.101 | 138 | 192.168.56.255 | 138 |
| 192.168.56.101 | 58485 | 114.114.114.114 | 53 |
| 192.168.56.101 | 58485 | 8.8.8.8 | 53 |
| 192.168.56.101 | 51758 | 224.0.0.252 | 5355 |
| 192.168.56.101 | 52215 | 114.114.114.114 | 53 |
| 192.168.56.101 | 52215 | 8.8.8.8 | 53 |
| 192.168.56.101 | 62361 | 114.114.114.114 | 53 |
| 192.168.56.101 | 62362 | 107.178.223.183 ns2.wowservers.ru | 53 |
| 192.168.56.101 | 62363 | 107.178.223.183 ns2.wowservers.ru | 53 |
| 192.168.56.101 | 62364 | 107.178.223.183 ns2.wowservers.ru | 53 |
| 192.168.56.101 | 62365 | 107.178.223.183 ns2.wowservers.ru | 53 |
| 192.168.56.101 | 62366 | 107.178.223.183 ns2.wowservers.ru | 53 |
| 192.168.56.101 | 58985 | 114.114.114.114 | 53 |
| 192.168.56.101 | 58986 | 107.178.223.183 ns2.wowservers.ru | 53 |
| 192.168.56.101 | 58987 | 107.178.223.183 ns2.wowservers.ru | 53 |
| 192.168.56.101 | 58988 | 107.178.223.183 ns2.wowservers.ru | 53 |
| 192.168.56.101 | 58989 | 107.178.223.183 ns2.wowservers.ru | 53 |
| 192.168.56.101 | 58990 | 107.178.223.183 ns2.wowservers.ru | 53 |
| 192.168.56.101 | 58991 | 107.178.223.183 ns2.wowservers.ru | 53 |
| 192.168.56.101 | 58992 | 107.178.223.183 ns2.wowservers.ru | 53 |
| 192.168.56.101 | 58993 | 107.178.223.183 ns2.wowservers.ru | 53 |
| 192.168.56.101 | 58994 | 107.178.223.183 ns2.wowservers.ru | 53 |
| 192.168.56.101 | 58995 | 107.178.223.183 ns2.wowservers.ru | 53 |
| 192.168.56.101 | 58996 | 107.178.223.183 ns2.wowservers.ru | 53 |
| 192.168.56.101 | 58997 | 107.178.223.183 ns2.wowservers.ru | 53 |
| 192.168.56.101 | 58998 | 107.178.223.183 ns2.wowservers.ru | 53 |
| 192.168.56.101 | 58999 | 107.178.223.183 ns2.wowservers.ru | 53 |
| 192.168.56.101 | 59000 | 107.178.223.183 ns2.wowservers.ru | 53 |
| 192.168.56.101 | 59001 | 107.178.223.183 ns2.wowservers.ru | 53 |
| 192.168.56.101 | 59002 | 107.178.223.183 ns2.wowservers.ru | 53 |
| 192.168.56.101 | 59003 | 107.178.223.183 ns2.wowservers.ru | 53 |
| 192.168.56.101 | 59004 | 107.178.223.183 ns2.wowservers.ru | 53 |
| 192.168.56.101 | 59005 | 107.178.223.183 ns2.wowservers.ru | 53 |
| 192.168.56.101 | 59006 | 107.178.223.183 ns2.wowservers.ru | 53 |
| 192.168.56.101 | 59007 | 107.178.223.183 ns2.wowservers.ru | 53 |
| 192.168.56.101 | 59008 | 107.178.223.183 ns2.wowservers.ru | 53 |
| 192.168.56.101 | 59009 | 107.178.223.183 ns2.wowservers.ru | 53 |
| 192.168.56.101 | 59010 | 107.178.223.183 ns2.wowservers.ru | 53 |
| 192.168.56.101 | 59011 | 107.178.223.183 ns2.wowservers.ru | 53 |
| 192.168.56.101 | 59012 | 107.178.223.183 ns2.wowservers.ru | 53 |
| 192.168.56.101 | 59013 | 107.178.223.183 ns2.wowservers.ru | 53 |
| 192.168.56.101 | 59014 | 107.178.223.183 ns2.wowservers.ru | 53 |
| 192.168.56.101 | 59015 | 107.178.223.183 ns2.wowservers.ru | 53 |
| 192.168.56.101 | 59016 | 107.178.223.183 ns2.wowservers.ru | 53 |
| 192.168.56.101 | 59017 | 107.178.223.183 ns2.wowservers.ru | 53 |
| 192.168.56.101 | 59018 | 107.178.223.183 ns2.wowservers.ru | 53 |
| 192.168.56.101 | 59019 | 107.178.223.183 ns2.wowservers.ru | 53 |
| 192.168.56.101 | 59020 | 107.178.223.183 ns2.wowservers.ru | 53 |
| 192.168.56.101 | 59021 | 107.178.223.183 ns2.wowservers.ru | 53 |
| 192.168.56.101 | 59022 | 107.178.223.183 ns2.wowservers.ru | 53 |
| 192.168.56.101 | 59023 | 107.178.223.183 ns2.wowservers.ru | 53 |
HTTP & HTTPS Requests
No HTTP requests performed.
ICMP traffic
No ICMP traffic performed.
IRC traffic
No IRC requests performed.
Suricata Alerts
No Suricata Alerts
Suricata TLS
No Suricata TLS
Snort Alerts
No Snort Alerts
| Name | 9ce65bb765b1c9d8_zvlwkp.exe |
|---|---|
| Filepath | C:\Users\Administrator\AppData\Roaming\Microsoft\zvlwkp.exe |
| Size | 247.3KB |
| Processes | 1856 (0bc5f28ce33aec6905e606c50864ef1ede106ea64ad3f849e0b888e55d57b822.exe) |
| Type | PE32 executable (GUI) Intel 80386, for MS Windows |
| MD5 | dda8f71ae0f4abee12793cd5e0ea4783 |
| SHA1 | bf80996c4eff3fa5d92766f7471fa6f65f9413c6 |
| SHA256 | 9ce65bb765b1c9d8344f2c5fe3facd94d906d2a983f6f82a192d86f9ef4d3756 |
| CRC32 | 8A395E84 |
| ssdeep | None |
| Yara | None matched |
| VirusTotal | Search for analysis |
Sorry! No dropped buffers.