1.5
低危
DACN
0.12
FACILE
1.00
IMCLNet
0.78
MFGraph
0.00
反病毒引擎
| 查杀引擎 | 查杀结果 | 查杀时间 | 查杀版本 |
|---|---|---|---|
| Alibaba | None | 20190527 | 0.3.0.5 |
| Avast | Win32:Kryptik-MRR [Trj] | 20200511 | 18.4.3895.0 |
| Baidu | Win32.Trojan.Kryptik.ac | 20190318 | 1.0.0.2 |
| CrowdStrike | win/malicious_confidence_100% (D) | 20190702 | 1.0 |
| Kingsoft | None | 20200511 | 2013.8.14.323 |
| McAfee | Packed-AM!FE35BADA44F7 | 20200511 | 6.0.6.653 |
| Tencent | Malware.Win32.Gencirc.10b49656 | 20200511 | 1.0.0.1 |
静态指标
可执行文件包含未知的 PE 段名称，可能指示打包器（可能是误报）
(2 个事件)
| section | .text5 |
| section | .text4 |
文件包含未知的 PE 资源名称，可能指示打包器
(1 个事件)
| resource name | None |
动态指标
在 PE 资源中识别到外语
(3 个事件)
| name | RT_VERSION | language | LANG_RUSSIAN | filetype | None | sublanguage | SUBLANG_RUSSIAN | offset | 0x0002f0d0 | size | 0x00000188 | ||||||||||||||||||
| name | None | language | LANG_RUSSIAN | filetype | None | sublanguage | SUBLANG_RUSSIAN | offset | 0x0002f780 | size | 0x0000000b | ||||||||||||||||||
| name | None | language | LANG_RUSSIAN | filetype | None | sublanguage | SUBLANG_RUSSIAN | offset | 0x0002f780 | size | 0x0000000b | ||||||||||||||||||
该二进制文件可能包含加密或压缩数据，表明使用了打包工具
(2 个事件)
| section | {'name': '.text4', 'virtual_address': '0x00002000', 'virtual_size': '0x000293a1', 'size_of_data': '0x00029400', 'entropy': 7.762396688045698} | entropy | 7.762396688045698 | description | 发现高熵的节 | |||||||||
| entropy | 0.9295774647887324 | description | 此PE文件的整体熵值较高 | |||||||||||
网络通信
与未执行 DNS 查询的主机进行通信
(1 个事件)
| host | 114.114.114.114 | |||
文件已被 VirusTotal 上 62 个反病毒引擎识别为恶意
(50 out of 62 个事件)
| ALYac | Trojan.Lethic.Gen.11 |
| APEX | Malicious |
| AVG | Win32:Kryptik-MRR [Trj] |
| Acronis | suspicious |
| Ad-Aware | Trojan.Lethic.Gen.11 |
| AhnLab-V3 | Trojan/Win32.Zbot.R64039 |
| Antiy-AVL | Trojan/Win32.ShipUp |
| Arcabit | Trojan.Lethic.Gen.11 |
| Avast | Win32:Kryptik-MRR [Trj] |
| Avira | TR/Dropper.Gen |
| Baidu | Win32.Trojan.Kryptik.ac |
| BitDefender | Trojan.Lethic.Gen.11 |
| BitDefenderTheta | Gen:NN.ZexaF.34108.ly1@aOZa9kdc |
| Bkav | HW32.Packed. |
| CAT-QuickHeal | TrojanDropper.Gepys.A |
| CMC | Trojan.Win32.ShipUp!O |
| ClamAV | Win.Packed.Shipup-6718719-0 |
| Comodo | TrojWare.Win32.Kryptik.BHWB@50ugd2 |
| CrowdStrike | win/malicious_confidence_100% (D) |
| Cybereason | malicious.a44f7a |
| Cylance | Unsafe |
| Cyren | W32/Trojan.QUPD-0811 |
| DrWeb | Trojan.Mods.1 |
| ESET-NOD32 | a variant of Win32/Kryptik.BIDA |
| Emsisoft | Trojan.Lethic.Gen.11 (B) |
| Endgame | malicious (high confidence) |
| F-Prot | W32/Trojan3.ANMQ |
| F-Secure | Trojan.TR/Dropper.Gen |
| FireEye | Generic.mg.fe35bada44f7a54b |
| Fortinet | W32/Kryptik.BJBC!tr |
| GData | Trojan.Lethic.Gen.11 |
| Ikarus | Trojan.Win32.ShipUp |
| Invincea | heuristic |
| Jiangmin | Trojan/ShipUp.uv |
| K7AntiVirus | Trojan ( 0040fa341 ) |
| K7GW | Trojan ( 0040fa341 ) |
| Kaspersky | Trojan.Win32.ShipUp.ebhf |
| MAX | malware (ai score=82) |
| Malwarebytes | Trojan.Dropper |
| MaxSecure | Trojan.ShipUp.gen |
| McAfee | Packed-AM!FE35BADA44F7 |
| McAfee-GW-Edition | BehavesLike.Win32.PWSZbot.cc |
| MicroWorld-eScan | Trojan.Lethic.Gen.11 |
| Microsoft | TrojanDropper:Win32/Gepys.A |
| NANO-Antivirus | Trojan.Win32.ShipUp.crvlvt |
| Panda | Trj/Genetic.gen |
| Qihoo-360 | HEUR/QVM19.1.25C8.Malware.Gen |
| Rising | Dropper.Generic!8.35E (TFE:dGZlOgGRvRtY86btIQ) |
| Sangfor | Malware |
| SentinelOne | DFI - Malicious PE |
二进制图像
288x288
224x224
192x192
160x160
128x128
96x96
64x64
32x32
运行截图
暂无运行截图
该样本运行过程中未生成截图
PE Compile Time
2013-08-15 12:44:25
PE Imphash
e8fb032ef57fab39da4fb174de884d84
Sections
| Name | Virtual Address | Virtual Size | Size of Raw Data | Entropy |
|---|---|---|---|---|
| .text5 | 0x00001000 | 0x00000004 | 0x00000200 | 0.0 |
| .text4 | 0x00002000 | 0x000293a1 | 0x00029400 | 7.762396688045698 |
| .text | 0x0002c000 | 0x00000cc0 | 0x00000e00 | 5.2393993222207165 |
| .data | 0x0002d000 | 0x00001694 | 0x00001400 | 5.411093277306664 |
| .rsrc | 0x0002f000 | 0x0000078c | 0x00000800 | 2.8660343476570223 |
| .reloc | 0x00030000 | 0x0002a418 | 0x00000600 | 5.136870700129424 |
Resources
| Name | Offset | Size | Language | Sub-language | File type |
|---|---|---|---|---|---|
| RT_VERSION | 0x0002f0d0 | 0x00000188 | LANG_RUSSIAN | SUBLANG_RUSSIAN | None |
| None | 0x0002f780 | 0x0000000b | LANG_RUSSIAN | SUBLANG_RUSSIAN | None |
| None | 0x0002f780 | 0x0000000b | LANG_RUSSIAN | SUBLANG_RUSSIAN | None |
Imports
Library KERNEL32.dll:
• 0x42d410 GetComputerNameA
• 0x42d414 IsDBCSLeadByte
• 0x42d418 HeapDestroy
• 0x42d41c GetModuleFileNameA
• 0x42d420 LeaveCriticalSection
• 0x42d424 EnterCriticalSection
• 0x42d428 OpenEventA
• 0x42d42c GetVersionExA
• 0x42d430 LocalAlloc
• 0x42d434 GlobalUnlock
• 0x42d438 GlobalLock
• 0x42d43c GlobalAlloc
• 0x42d440 SizeofResource
• 0x42d444 LoadResource
• 0x42d448 FindResourceA
• 0x42d44c LoadLibraryExA
• 0x42d450 GetShortPathNameA
• 0x42d454 FlushInstructionCache
• 0x42d458 GetCurrentProcess
• 0x42d45c GetCurrentThreadId
• 0x42d460 SetLastError
• 0x42d464 GetTimeFormatA
• 0x42d468 GetDateFormatA
• 0x42d46c FormatMessageA
• 0x42d470 CompareFileTime
• 0x42d474 SystemTimeToFileTime
• 0x42d478 CreateMutexA
• 0x42d47c ReleaseMutex
• 0x42d480 ResumeThread
• 0x42d484 FindClose
• 0x42d488 FindFirstFileA
• 0x42d48c TerminateThread
• 0x42d490 GetCurrentProcessId
• 0x42d494 LockResource
• 0x42d498 FindNextFileA
• 0x42d49c GetPrivateProfileStringA
• 0x42d4a0 GetPrivateProfileIntA
• 0x42d4a4 WritePrivateProfileStringA
• 0x42d4a8 DuplicateHandle
• 0x42d4ac GetStartupInfoA
• 0x42d4b0 GlobalFree
• 0x42d4b4 GlobalHandle
• 0x42d4b8 LocalReAlloc
• 0x42d4bc QueryPerformanceCounter
• 0x42d4c0 GetSystemTimeAsFileTime
• 0x42d4c4 TerminateProcess
• 0x42d4c8 UnhandledExceptionFilter
• 0x42d4cc SetUnhandledExceptionFilter
• 0x42d4d0 HeapFree
• 0x42d4d4 GetProcessHeap
• 0x42d4d8 HeapAlloc
• 0x42d4dc VirtualFree
• 0x42d4e0 VirtualAlloc
• 0x42d4e4 OpenProcess
• 0x42d4e8 GetSystemDirectoryA
• 0x42d4ec CreateProcessA
• 0x42d4f0 GetModuleHandleA
• 0x42d4f4 InterlockedIncrement
• 0x42d4f8 DeleteCriticalSection
• 0x42d4fc InitializeCriticalSection
• 0x42d500 WideCharToMultiByte
• 0x42d504 GetUserDefaultLCID
• 0x42d508 GetSystemDefaultLCID
• 0x42d50c FileTimeToSystemTime
• 0x42d510 lstrcatA
• 0x42d514 CompareStringA
• 0x42d518 GetLastError
• 0x42d51c GetModuleHandleW
• 0x42d520 CloseHandle
• 0x42d524 CreateFileW
• 0x42d528 GetFileAttributesW
• 0x42d52c lstrlenW
• 0x42d530 GetProcAddress
• 0x42d534 CreateProcessW
• 0x42d538 LoadLibraryW
• 0x42d53c GetModuleFileNameW
• 0x42d540 OutputDebugStringA
• 0x42d544 GetPrivateProfileIntW
• 0x42d548 SetCurrentDirectoryW
• 0x42d54c GetWindowsDirectoryW
• 0x42d550 GetCurrentDirectoryW
• 0x42d554 LocalFree
• 0x42d558 LoadLibraryA
• 0x42d55c FreeLibrary
• 0x42d560 RemoveDirectoryW
• 0x42d564 FindNextFileW
• 0x42d568 DeleteFileW
• 0x42d56c SetFileAttributesW
• 0x42d570 FindFirstFileW
• 0x42d574 SetErrorMode
• 0x42d578 GetCommandLineW
• 0x42d57c ExitProcess
• 0x42d580 CreateFileMappingW
• 0x42d584 InterlockedDecrement
• 0x42d588 FormatMessageW
• 0x42d58c MulDiv
• 0x42d590 GetVersionExW
• 0x42d594 GetExitCodeThread
• 0x42d598 GetTickCount
• 0x42d59c GetSystemDirectoryW
• 0x42d5a0 lstrcatW
• 0x42d5a4 SearchPathW
• 0x42d5a8 GetPrivateProfileStringW
• 0x42d5ac lstrcmpiW
• 0x42d5b0 lstrcpyW
• 0x42d5b4 lstrcpynW
• 0x42d5b8 GetACP
• 0x42d5bc GetCurrentThread
• 0x42d5c0 GetOEMCP
Library USER32.dll:
• 0x42d5c8 LoadCursorA
Library msvcrt.dll:
• 0x42d5d0 _controlfp
• 0x42d5d4 _except_handler3
• 0x42d5d8 __set_app_type
• 0x42d5dc __p__fmode
• 0x42d5e0 __p__commode
• 0x42d5e4 __setusermatherr
• 0x42d5e8 _initterm
• 0x42d5ec __getmainargs
• 0x42d5f0 _acmdln
• 0x42d5f4 exit
• 0x42d5f8 _cexit
• 0x42d5fc _XcptFilter
• 0x42d600 _exit
• 0x42d604 _c_exit
• 0x42d608 malloc
• 0x42d60c realloc
• 0x42d610 free
• 0x42d614 memmove
• 0x42d618 _purecall
• 0x42d61c _adjust_fdiv
• 0x42d620 swscanf
• 0x42d624 _vsnwprintf
• 0x42d628 _wmakepath
• 0x42d62c _wsplitpath
• 0x42d630 _wtoi
• 0x42d634 setlocale
Library ADVAPI32.dll:
• 0x42d63c CryptDestroyHash
• 0x42d640 CryptReleaseContext
• 0x42d644 CryptAcquireContextA
• 0x42d648 RegCreateKeyA
• 0x42d64c RegQueryValueExA
• 0x42d650 OpenProcessToken
• 0x42d654 LookupPrivilegeValueA
• 0x42d658 AdjustTokenPrivileges
• 0x42d65c ChangeServiceConfigA
• 0x42d660 RegFlushKey
• 0x42d664 CloseServiceHandle
• 0x42d668 RegEnumKeyExA
• 0x42d66c OpenSCManagerA
• 0x42d670 OpenServiceA
• 0x42d674 QueryServiceStatus
• 0x42d678 StartServiceA
• 0x42d67c ControlService
• 0x42d680 RegEnumValueA
• 0x42d684 RegQueryInfoKeyA
• 0x42d688 RegOpenKeyA
• 0x42d68c RegSetValueExA
• 0x42d690 CryptCreateHash
• 0x42d694 CryptHashData
• 0x42d698 CryptGetHashParam
• 0x42d69c RegDeleteKeyA
• 0x42d6a0 RegDeleteValueA
• 0x42d6a4 RegCloseKey
• 0x42d6a8 RegCreateKeyExA
• 0x42d6ac RegOpenKeyExA
• 0x42d6b0 LookupPrivilegeValueW
• 0x42d6b4 RegCreateKeyW
• 0x42d6b8 RegCreateKeyExW
• 0x42d6bc RegSetValueExW
• 0x42d6c0 RegOpenKeyExW
• 0x42d6c4 RegQueryValueW
• 0x42d6c8 RegDeleteValueW
• 0x42d6cc RegQueryValueExW
• 0x42d6d0 RegOpenKeyW
L!This program cannot be run in DOS mode.
.text5
`.text4
`.text
`.data
@.reloc
TWPa@A7Qe@#
eQt>OA?Lc
FNa#Je
QtOPWe#
WMVlBnFA
Faeiwb
`WFjFP|Mtn#
DJtnJl6#
PLs6Bn/F
TWT.SP2KA
TWPa@A7Qe@#
OBdGAr2ZE+#
T;T #Hg!2K 1Jn$
bUuNn3]iS3>Id
21-2(3
>4V~(W>
HVC}dkD
BV[\P'
TDt`+~[C
$J(kdG8
Pjddt.
AoTU@zJ
uQ8,+um
@ *#Wa
s @X tu\r
O-G%_X
+%36O/T
!jN[Bp
9Ef3i"xkf3{'xR
OjzaDoU
@B 'v#c
~0a<:~
S9k~+x9$L^(9$p8
#b?)|PgGdSt\
uQdh2)
mNNMFM8#Pb
jdoif9rNF
pzq_T@*piI
^jNGt`Ad
cTj|VbD
zYH`9zY
6|#d:\ft@^taF
bD(!p<
~y;j799vd
rtRIRIRBDjIA
:p,DJHAjq|S
E#fs=*#
uPCg[tTC
yOwhZt
RcX&XZh
FR+`PxbZt
3 xfb<
b:xVbB f
tc~8Ur
t@\pdNXtD0<pt.$0Gj
PgujV$_/
Ov{aRS
<AsHfJ
uXVz5r/DFbU2S3$F
L+mz#|X$
lS^|\TddF
\4Dt&vZ
_bXvG]+t'p,Ksp|
a]x>3Pm,#
}FHIo@`
H=R&}u
uXNz1)j}Q,V
I$\&p.Y
Xvt~HGtb
bqfhn,rsVnyZ
qu4D-a{
U A/e1 5$TrQ4n=k
R daCjt[8
dkp^g.LQx<|aD1
RW<s@{
AsPwfZ~J#m##
XdV@LK
s5`@4`rn
i(~rile,r.+
\r,rFs1e9$
*z^1si3# G^U@*si}$
c/R pS
_\p@XRN
@D?G,}5
:$A'`_
6$t~?T*6X
p*j^1t&
+6L%j)u\n
xu|;$jj<&j:<%h:#@b
uS1Z>$V
'3Yl`p
NEjW{0
+v<%jP
y,Bp819$b@{N
U1R?$S
*#7T@u1
s'3NZl
XWGK2C
d,1@:$O
QfoQvh`
K0:$h`
opj^5%
&xXEZeNE9{G
xJ;9xV
u<9v> Fb
5jP9v:
eA$Y*V
AjD1P:6$h}`
jrytmB
s'3Zd$[Xe
S,V7A>+
3]7b:xW
cJS`!QbVr^$$U
6$V,t_
U@jRh$
4fy%t,:"3
}P1@+7$#
UtG+PGu
|T%(x'
.$pW`H
3S=$*#IdU
P"#@7 P1?:$
qbpaHI
pU1L+7$T@|t
T@j|toQ
Ru uB1
>HVE/3'S%0
ij6$cS
LCry>j4C
]ry3rYA'QaF
QEZGU@z|Y
,]P:!j
D@g);1Nk$A}p
tP*&tp#
~L|7$+(t
TFLiW;=
#etS`y
j#*c'tMPG
qs .)jP
PI,l>/#P
#j*m#]G(UXDpR
jucbd#
juCbd#
*u#bd#
va:_^;$u]PB
(dO/mjP&
$GGT#jMtt@JtA'
/QW1'/
}`e',fA4y
U-,zAc
a%B [r
x2o9V5
,aJZV~UF
S}hy,nr+
;CA5 #b`S
}0a2?X,#Yc{
c1z<$;
&fSP&f
$c15$eB
^yFrW3
S*<SM<XN$
L$$zN$
2'x$joP
Q1?:$lW&
xaEf|D9
9atw~[Nxq /Q
?PupSt(-t>
`[[i(`
cw Kx,DU:e
w:$v:#
,Pvdx
Pl*d/,.YF
rZ(T'$
A*\RhMpE^[mU
#Y1M\#
gHYjPCCQ'E
BPs*:k'"ls
J":?-3
Ju":?1-3
AVIS}$)
$IsbP@
sbE2_)
h=$t~~
adR*KK#YB%
M :$5c
0:$jP8
@}"6T)
E>P}E^a\9
sR'WEE'
C$7V?s
M<V>??
Js$$ y
l%+bM
195$jl
saiF(~
/ U'!g
n5U rqN%
v3:#s:$
o:+XqYdn
&7j&$=
[DIPzbu
yi1:$v;
*T65ob=
F@:Nz=
:j,~@mL#FySuz
0P:8FH
7},.V>|
}T+|y.%
:s_vT@*
%xb'>_
n|=0P7FH
ew?=k$v1Dwf
hlV $
>~'ZT@*#B~1j6$w^
P;.|$.
+/Bbw}czQ$
|Y?P/{&PG
Erm&3:y[# jZrK
:|Yjr_T@:
nm9$< j
3Djqc'
*7$JuyK,
8eMauyM*
S1w#j'
NpZ=I>N
+5>$Z*
o;P"*E
Kc;!3S
[]]^PM#
Q&O>oGt
CyVE@ZfCmsjp
Uq$]A`
qrCoap,jWA
7/Q#"x
uV}N|uG
:E:|u7
&(h ]P1
+hNKj3X
LudDEe/
D'Vh(q1
yqb,(s"Q
0H`B!tjQ({;
.r%NSI
ETVDFTVDFTVDF~T~H
}]ThdL#byOst#ry6Vct#s&
2$st#sn.
pb4&ry
dt\^5#
l,d2$b?'
0<&#nc
$s@ztm
;&#;nc
B$*xqbqrT
#lP&9`Pn#9Pwr9$
PqT@Ra
>s#jr&Pe
ztyKHk/v!
cp}^Xl_NX>zSE
\`t,nSag
bGeu}s!
pK}.tA`
W j YwO
z]iP/hc
y>d\pQu
4'IaHP75I
hn'jHZ^E#cH^'
9C>Ed-w_'
=mam4rC
v]SMG
d=7,r\bfTp1@1$
#:+e#9e
vf|pkWysjkND
)v\pLrLr|hvK
i'oIkWwzsh#
m*V" gL_"
<wunB[Zzhqgy~
[T*h[`gJy$lvQ('mW dPl1-$dW*h-)
Pmk^a!
_;UPl}*lqbaF'
aOkhs' )h8s(8
#h%uFwlp8.b
+-B)zlF6^
~B+d'[
! HAN\Ec
P=bdjFl dT
<j~S#mN#
#iW$M$
*WIh+?R
uiM>()
q3zz@_;
$uzwQ1l}
P4~EE] R
E$v:|c9QK
l>Yqz_s
m%$&Klb
'`!:,xsAbc3
:Z(na?@:9)E
s|@e1x#
lsx5\m
o"S;p<9OO)y
^KWQ'u!wDEyJ
dkn'vg^Q
:97$b\
;n`@cT#Vveo`
:z^QUQ
#H4|~Y
cOcGc_
RCB2d
kdWBYL
d-_jK_D
Nz!!q#
D:0XJ9
t-|*Kh
S\qU6}
gV%,},jO4vrY NM7Ee F
Rr5G|-eoR]MWQ?]
\-$A[*
lUUphqR_|[FTt
I9JW*FA
eZ>w*.^
#NJFZ3\?m
BVaGsHXxpN+p1
y1,\2F-P%tg1]zR
,'H|A X
wv#Wvv'gvv
{#k${t'{\zdw+k4zT/;,zD3+Dz4
;&_$Xza^
XNGSWWgRWO7RWg'RW[_7RW[7'RW{/QW{GQW
lQlW;lQ\W;lQLW,Q<W$`_V<_SVH_CbW
^SbW-Wi
bW7#HCWy
k4j3c'
X3j]*'
$:TJOA
b?[S*'
b\tS$&%
#X~6^S
hSjK7#HWS9
'V{F\\PnUwZ
cZF $y# t
&PFiZFK$'t
%PFiZF
Cb3aO~M
?[X$ZX
4]? IWO
r|vr:rT3
:@fjX($
,=:N%E)#6t#
c^}JMc
<<LO$FI-9!`
DbVKX<y
JJqbv+l[J
'LQ3~TsLn6
iQSL87
52/`V}x?u`
W P)SGg V@P
cR6BHNH z?
vQ$#>,
gt|'jFP
Yy[LdA#
yK@+{RCt
:q-tJc
5#k>/tP"xY
xwWkOkGL7[
65589<?)
###/#}#
##c##%#1}#C#G}##
#####s#
qVKsc!bv 6's
sc#b.DV*7n<d`':m
XsFdqD3dlm
`sqsshun
#9\"(T"%t@TqU
&NPrDy#
v@sVU\
SIdK}Id}
jxn|rFZ^B6JNR
C!>%:)V-15D9H
=<ca>e:iVmrqnujyf]
a~ezim|pth~LwA{E|
y]tgQxkUloIpsmdqWahu[e\y_
`mcTaGXKLOPS
<Y?9@MC
0]3-$1
iwe{ah]\y`huDlq8pm,tI0XE4\AH`=<d@HKOS)7%;!(@
?<eC8aGTmK~PiOLuSHqW
AVEZInM
Yx}tX\PTHL@pDlxh|drqfuji~m`PdL
)U0-%1
6mmso\wsFS
OccOm~Dr
/CS*CS
.kjjjXbaaazaaa#
gg^g\g0h
h^h<hff g
&CAFt6Nl. %
Ui ai/ R
jo%Ke9Ke1Je
XBt9Ke9]e
TPWjuG|jp
NraMpaV1
a 'v i
@V}so{dzRGDHL
9%&rf\e@?cUV4V:V#
mOCuHagir
DdUiDr
goKdcIGe
DnDt Fc
.be#Fg
UNs1Kc]zsqDe
ULaY@o}\'
OLawPJr|PW
!RnNsgQCgPsVt
CAFt.Nn7TE+
Od2zWCo
^lZSrrp
e7#e'!
$spzsikr
%st\r\7vPLRr
9lnCLaN]e
Jfoy@alnyDnY#
~fogLnLa]ec
lnLan]e)Fu8OyJlW
KuIAf;'
Ezr)Aa5wr/zs
LzteUrrKPxDet'
@hrzlv
xpFPtjHBFj?TeA&
{tfIHa%GLe7
Xc.<p*i+>*f9_
_n"]k=rl f
^ShB]^l
^F_eKggP
{znqt]p
O_dw_dzhyia`
L_yWG^
Ml$L:?J7FlK
%bPeM<VaGdKAaKOh@`aJqmJ]
$&jnb@3]pP?]$
_eFaPeoMtS_El`Gt
[Mn~bV
oli>HlE`$
-oliDAt|^HuO
WWS_orafrA
olyAVe
XPexWKca@I_VegbJtV
BQtNSRoA&
Ct_BQtN3Ro!&
QPyPfyaACDt&9
Aa_rz}croepo~o}&
Dtv~Eacq[0[aU.Yq[,d
hbbD]S\
Zw_[rh`Nowj8wv#
BA`IMcj#
BAH?HA(3fKJ
&0 JVF0_W:<hb
''5FEmV
]'ePrPds^g
=AmV\p^s
T<@4L,4$
($L D<
dSdSdS$dSdSdS#9$m9$Y9$E9$I9$m9$Y9$9$9$D
9$9$9$w:$o:$w:$o:$w:$o:$w:$
6:$-.:$1:$1:$1:$m1:$
4@3@3@3 3 3 3
&aKeGiJmvqru~y&
&AQbEUnIIO^43BH7FL;:@
4@3 3 3 3 3
dZ`VlRh}OTkPg\y
DQ;@U7LI3H]/4aK0eG<Y
LLLLLLVZVZ@HP@PHP@PHP@Pt
nU#{M/wP
1ud;#`WH
.*Iz c
BtfVv8Wl)*2%
^7_QGQ
uphFLJj%
W9j2fo
6GV=_&h?
L6&MS;
R9.e#H~73t~lT<t
3 lH`]0R
|^1ctN+2
B tgbHkA,
<_>NAg(D
Qo2fME8
w"0qDqI
]:+L61u$
Ufk(CCv#z%q
Crn>Hm%p5Jm
*]yQ5~
#4eNA6;1p1
V9I5qw
$M0]N5
f*+T8r9
/V8zL?
AC]&F]
j re~{q4<
~V:|j]$0A
n7tzYh
fpdH$gV|
@~/U=]1 rf,p]
W;o~q>qBn2istPg($8
x=IL1gTC
%X]#m6<
r{N{vJ
S'lf2t/
IH/BetN
vrE@P7
C$ozW/83
#sh\+>/
Rr{Rvq"|-
QfPWy6/
vHJ~HN)Xct!V8Jd!3gZ
:zL{EF-#&dWYZK
l=7?8.+
Kew(eLF9(0m=u
~UXl\3B
?0hL#~
0W^v:4 X8/YJ
`"ud2+z`
r~s#Mi]9
Wo@87w'
&~+'^:g8
TyQ6,D
@z7f4IB
O$"{312
Z_c[ja
O"uuf$
6v$|o:
Vd\-r>P-+!VON72
.1^B+?,ksB
I$l>XPcKN<=;>?
-QBn]p<_=0d%r%
C;>9RoGLpqO'W
^a3Thl_
_7z"L1=);) myA=
7T10MTY
AKC6u5
,<lsB**[T_9
wB}/ BsUHxRn;61.
US73d40v
TdU3|pse
746K2Y
)?4c5|
wsrvfv
=]$p%?
7!Tq'~
~}~)(.D.<5Ad
%C+.>}
mwKem/y
b++WCy
I[2 Sl.m2g^ogB
H3ygR{
aK8Y}x
w'qf*s
ox1`O7
73b6YY=
ajc~UHX1G
.4&EL<
2xCYjtTo
heK]rnG
XmfJI8yTn
V6TK1TO.feyS
_lDH4P
jIIUo;
0uWI7Y
T=D=!Un
`sd3&w
ngVI7vj
H.[SYn@
iujf"V6N
fLRSfh
P>]hS-F pP}f3
7c\9JZ
Fe%Jsi
y z_DU}74<j~c#
Su&KR>j#
%Oq\-#
};@{%o~4IfB$
P'kb@DY;fSd
d}~FQ@
#i3Nvl7cJ
u`xTdE
G|4#32Q
XQc)-~p>_MU
|E,Pah7
yG+LgBX
r-3T7GNqF
$G![f8d
mW!86h19
$OH[s\f9
_cf){:%eRhF
EX6pC1$
)$(%N-9bG
aU%:L2
)W28(wl
_~"[%*CK7/
A$lDcW@
\7N\C^a 0
MNB p|
7Q= (,a6Du''
H(ehb]Y\
P?rMfF(6"!*)u
Wsezu9
k+s+9 J
P!,4Ytssc
)n)x~5b(
\!r0J@NY')tr4
L|KR\S1uvs
d_&1i"
h5v5_K3q
&^atn$$
hEyLPriE
cI$re,
U_7Mdn
(-f<0{rG
Ds4KeK
#;C&j:
[ 8 l].HMnAe
H8B|*G
Fp^geO#d/I
q,/,+b<
u'0fCcLs
ewMB,R<D\
xsvx3QYdu
;pOK+>
\]^8KG
6(OS8EU?
k`-BNl
d#5/^4W
]V$/1s
Ey[H} SXDW
"Np "a@
?>cf7I
@XC#a#
N)\YRT]Q
`CF._t(Z8
z!C?)8@}M.
'_oA;D
$j>T58I
jBC1p r7BQG
?64&38
FQ~&1w
_r{vb"
&_W|:8
W8BZ,+<I
H3d~g/N#
p8 V!Q
<RkSU`0Sl$0K,
7w/-Pc
e}^0vt+kP
NC<-$=?&&
z0.'b8
ykGI+b
|8&"dXS4
E0< (tt
Dw!`boA^f
JzBq$qiXrs(
)g?Wl\
EeT>VRG
L@'gMMuwr
/37>XBG
~~lL"$
gmwL.D
`Pin.Pc
kAH-TyCv
uJ@:k^|g2
lH\u4r<
g2LC@pcV
&j*'Q;m5_
,=)~^
6QqAW|N~E
R=$1L$=i7{
aj"!A
I:`%oy!Tuixe`@S[Ph
B\Ni,`
P"k,hFs
4h ]Yk6}G
!I+EX#H
h,2#4R'
V36m5&o<X
0_PBI-
>z^MeI0
7N#XJMxZ
BIsR8!
N<8gqS
Lhp9:s;-6 E;F
o?|{g%R2
jC?@J5p
J>k\`9^
<7v}4O
hVD HtjW
$k|8tH
xj7UPh
uofd07y
aZgt8Bl
6Sz+B<1q82
uiGZ=PjY
5W7Q:Bk1J!7SK
vzDKi<0+r
Q8@H#L
--O&BHL
UQo3"l{*
Zif _x
_uUG3o
p"xyJ(~
8`84Z*Ke%<^
|&7l"j1&
}4?j`4A
^v)77$+l\*a`&F`
1cRKuD
5nXI0L_
N%#f+r
!Ra!b6x
#+={KD(v
FAcA4F^
6_*~l"g
sm3uD;
OT3Jp@'U
RM|tIE<<
lvL]r9:
]G8CE*
kmI4!qY^4O
{n<#P~&(5I;M_^
lf~'umlM
,@T'c&J{
X>\]=C~
Z'rY.h
ql#EA}
[c)kb2
Dv(L pjo
2d@*jC-
/Gd\#H
#<Lp;vBZ=g
s#u#OP
ToUY(fTt
9knx%9o
u:8tBmkR/R
V".l|h$
&~dhji8/$
Hi>IWj
6eQ%.{U'^;
%uc"cJ
S;g=qYK6
uI^<'=>PNPOW~H
!Aij7TboBM0
[vHkmbY
n,jp^tl#
OY'y?,f&
YU,2#m
}=Ji5fpH(6ZLg
Sr%f3Wk}#0e2
2BsR'#1
{#)5^?Hd
5w<O"j
g\j9D]o*9^
Y+/cP>nqa4[E
N;-k7/T
Klj`AFM
&E\=1`
^jdLTq_<4
`UY|;'6;
qi!Y,P8n
s+5x;_w
dZJj$O
K{+uXG
EeBuxv
i&F1I3
'{+=)0=7.~i
MDcZdD
K_%|7@
MQ\x>Rke
XJI w'0
M|[{7,#Hwi%:&lZ
8M=rqpS\
t()4).
w1-xKf))~Sk
o&og91a~%
9n7KLj
A+[Yy.`Y
c/&W)fd_ n
EQc2Dv+/>+E5-
BdD[9HlC
LsMz99
~'id@ `
2%zM1f)'16Q
?kIPLe7a@mB
#)uwv!
| k,:PK
iB)tqWT4$
d$*hw7_;
4;ap#X#
>$EH?G^
RH1yY%
zDQijv
+t)k5A
BcdHWV`
&=%nUC
xM(a1=R[)
1oEH@""TU
z7T~#>qO!
,l`--Ml_*DP
s|~ui[j
z$k@XuoK|&B7v:nY`!
<VT!#@
2Iw7]6
R#;o^2>:0,U8q
<tP`v~
#aoMVw\\
#cRn_Z=tJX
4z9[0<!4sHD
\rsSgPj{3lVnt/>
1r`k0\"\
="^%Dkq^eVe
FRj2A3
{ZquRiK8r?_9^`,(7|YoHr[
)M;~VCUd
#FJ=@=
:U[J2
dE=wSE%
02qrIn
FD48\Y`|
CL$Th$mD
YExT@*C7
Q5/ ;E<2
%5c{_[xI~$O
39i~cRa
g[]H4N#NV:q\
]95z)\a
i '1g{f}
/`%+q
-221>JiC
W6Pb%
JCIWbG#
jmf%vZz
}x#w5dPi
%q[yc=
-4#*c>[
1fCex]p)U
2">=kY
pkguVrU*O
-&3)o
TU-JSP{c;m
f+o4L|
6o,lQ.C
/1:#U8."|2^#
jh<Mi&
s$K?B<
o-odQ^`
G\P@F}(
($J51Ag
!S#bU~K;
u!'{l(.
Zp1#T:7
I}E+RU_<
2L_~6I
4gk]g8/$r}bO
)q<T^2p
x$qM*e_
wEvYM2LM
Vi?)8'
18zW[-?+
V\=qDz#|T0|
6}tKOs14[
rmco s
IE6uc_sxq
4oSR4/_\d
#'Amf@
+}_k{sE*.'
c?PaVfM
Nno>UF#~
8$FjAKkJcU
&w~e<}WeK
D 33ax
AP28vmKC|PN)I
rEtYJ>R6x
KH}#!#xc
#HPUa7OahY
"h#.Jw`K@p1VL
.eTnp^ 9j
i8@h_18g
T9.UGO
UX43Rd*vv[`*EQ5_
!i#^nL
S*q3rk
2T6WfbH
fRaJ0K(S
j"OG8I|
"$2dY.
T {oF,L?Zfn
+Xc:O?d~
g)@GGTv
[KI*m`F
#u)BSaead,ytd
[W#kPr
.&$Kr'
#kCLha
.Xd x=k
<~eV\9pvPEGqP5
[<U1=`
w_^N< 4lU^O
mw[~.l
U9^#?Fd
gR~.hvwc
;"3-g&M~
b@,m)7~A<!lsht
{TXSW GPw5
sd(p(w}#
"b/f8Q
|e`p;M
MOxJLCO")x
E_;ZSKKn
?3AI5WY
c!tTq(
Ajm+2B
C+3j@^
!fZ!E_%0c
6fU~xmfhaY
)3zwXf.1
(MUZm2B+wv'
afd9Oea%9Pqj_v
(#k?P!@2
@BNA4p
Q%zN{O2yeS
'w,4w{
[31Nc3Uo
FA9%Uu3
_h|=CZ"@gd!|5u
)MH-f->
NaJKD+
s+<H)St
I**yR,:l`I>Of
JfTp]D[
)|l]j/3aL
H1s~kdS
!~2zaS
N31M:6.T
nhb$jH
{2 70@"#j(=
X?<]FwD_T
s1?r6d(=
uL/ZJ7
3TwbiB{"
suBN'c)I|R_5NcZ
+9QFe!
zFw'5h(bw6
5'AmX$hPJ
0*("T(5UC
-^zrTBgzG
K!p$TE
O^'00T
Ck$# b7
G=^y>4J#PH1!
Kp=0i0
D7p=4$0H& :9);n51?@:k5z87
Cv. d?
nRFZZJ5%~Bj
C9{8CZ%Wr
:)9Ij&85
2M\hz!
rV0~1gr
k; m{/-9
7E<stYC$
Y%ti4#3
xbx~/H
MZ[w)Hsp
jtxM|.i/NH<
6N'|.X
B:52T!
=T5DB,)E
p|}MGt'V"
ME76bH
:3gr):l0
#<[!XGm
=]QDC`
=6,N;}
w~-;+-GQ
lX`WKz
dD97l]e
*DBjs!_4T
qmf<(E
\PDe" `r
!T!&a=5[\/VK
*XwoY<Z,Par
!tk)L=
)h$=Mp%x
iv{UErE
LXfLDq+79
v>d<,l
L7B|DCzF
OIDN42Um^~P
\B^,=Zg2
:NUZD+(
f&Zlk09W4rA;qsg/E}/
dRl4}z
oG0Nca#"[noL*
x7~D*ok6Owq
(4|/,4wC`x
2)8NH&
]a|lkwf
t=7]vY
wEQ<t`Lo
Q0Dtl9:
1J|#iuv
/hqM8Z
{TnxM 4c9
I6Y$9{
_=R:P8.
!Ygc]v
x^H[^=s2nSVp3u
D4GJ9E
c"|%G%sHC(YH9
=s.aUr=CMg#
Pg3-Gu
:t {Gr
h;0wqvL
4f<B_;
WDnb16tD
&C8J&A+:
Es#A*U
C*t{tM
%U|eyg
#I}>E`s
.3{(Q$
1,I5l3HsaD
YvJ.*@0
0D!%bU
7Y,G=RF*
h -eyE`
F/nd;CZ
r{UQIG
(P,+c,u
QtDX]Iq}*"YiBy,JgiC
/dhlhsX"
F/V\LTl
"~mth4
4!<]Hz&X^Y4;""w
I$nUit.*-A''s;GO
n4-{sX
}K ;*utBxp0W?AB
N@2M5
T5F>\u
#W9he[\UE
6`2?VC
0;PEM+%Xs
DY48|e
arSc}^wf;!~
lUY]b<R
KM`2:]ot#}S%
u(+b~KwUMc '1
<? 'k_
b=14\iPhz_Ug4jq.
PlR9_^
`>w:_lM
|^BtYGv(t
}-Nl*!
`5k;5ewW`Xr`
tM#Jg|vYx
[jY5J$j[W#l
0Vn4{RM
hFtan(n,
D*?g]\
%)$NPI~e">
L`C7i@ b#*
6eAm`U_
l<s-+%`"T$[
Zy[}2~(l
a]`<ICh
Z\uz7z
H1P<Ie04Lz
vbAc>F$
{tJEo9t=
S(,0X';}A
T:'EFl8
c:GTCUR
=zTbcH}z>e\asu
ad7nm"=u0ov|G'A=8$<%%2(
b*~oI#cMF`QUFx
L54_N|[:f2>[2
c7pPg9DpE]Sfm
dj)vz7
0!x+X,1:pmr`
J0e_Kg>Mv]V_<j
A+F2,U
s&e!7b
TK&>}+7?2
HmN_BZ$
uwW48Ip'CIG$Hx
OIyBrR
pN5l'6pE)W
D~H5.o
w%;*AeR.e
JX3mPF
VZdg;I)EZA
N+74o\
`ZQ {bv8-qv(
c>u@~`|
k/kj]UQ
!ik>9u
3".UudfJ
|JkqGhs)p2AYo
Y%\8M=
@X.W%c8$
0ia4-U$[%,
/%B%V#
!sen G$
"W2tK\
ud c f
N.;^/le5E
3@8b&<H OwF$sNC
ttaAq_Lqz
fz6hVQ
/@\h1k
%ZF?\~v
+3i@d3v
N*<z36%'a{4A-+
hUPpR+k*
;s\BN]
7ySR+sZU
x=K[7d%
YPABy;
-^K5y0S$
LYJ*1h=U
MBeY)Ef~LS
:az%>k
Ig#xLI
@*MpUdh
5s),[m
9<^/JGa
5?RsC oqG
u/"q2'
_Jy/e{SP#|$eT
rYgu<\I
"N5{1__1
&gdKCQ~
C*/kGjgE
C1vvr4
'p$o;s
JdtCu@W>&
Fs(Z2~\\50g +~#}&Xpg
L{ge$
aW7MXgr7gl%,2w
SbpD33h%P
'J3+5c,$
X8*]..{
*DqTLTcJi
,>U]p(@b'E68gj
&^9:yCyY
!Gbl.(_v(V($+G7y2.
QW\?Pv;M!/tv5ar>
_jDwd[;xDZ"$
-k`!5i
f$ E4SHN
% O 1!wsX
i/%tbC
?X<s`gE<L7$5
:? N&^F)PN`{?
Jh5rXS
K`G|;Ak
?IiE}0
3E-5}|^YA)kO<
S$X>{NaiB
7%%w6Qg
tu!UX:
,7;o4;O<u
H!8~-~|ohi
dpM-LDq%}
F!r z5
E`&:z@xU\
eSM|iKF#,,K
;hhDPyd9}vPU]bXm
3KQ8&/VBj
Z}ph~Vv
g(o,Wi
dBm+ls)7
yBCG*:
\E%rICf
te%!A.j$
,p2w8V~E
PUc;`*
EW~RN@
}]IQ{;ofh
;HtT/k
o^Q.N
AU+x\ACp
}1|6g@w2hZt$
04.xzu*E
h%%CEj
inTFS(
>l#ji-
E_Rj1M
BXF0 SIKG0j-[IwP
='k$ q|
j6LLj-
*b)xCI
97 2T!
rMC*+5h<
cXz3h@gK)R1iQn`2
Z]ScB,
D18c+Sh*
$CfkO$A<!)
'slm,V
9XU2XL
J%?HLh
tm8A^Q;V
1*#?fb*
Mx<?]{$iI`}
r&Vv_Y
eam12LB
[as 72d
*\d`~v%9
SOLv&z
kYf!`6
?V0aKW>rNWe#p-q
EXiAn> +
LVXvkkV2o|0
Fyj)h+
AxtM7\~N
B-hP;GmM
kFC`1W]}a#
OU @qs
Gmx4^HS:/D
s{!ldt"
7RUf.4
Y qeEBBu
:5|]54
YE!B\*r
xE h\9/M
#P-}jb02U6 J}
:x%+QJhz;Q
U>7pFhn_}Z
BtnIql
\S+D:H'q
Awj95Q
;\#OI_,
`QxOoT
^`'6.?
8WAY|}x.LA
3?5| $q|'
N;`<;i
Odh}NT^/&r&$2(W
\KH R^]
u+2(?^@l7wB
0L_8}[=
S)tmhf
7!!`~fiI]D
R#F#r Q-M'
q0O[s,%B
si*3+e6AY
q>'to+`M
Vo"VRn
N[@V:020(L
BQ=a+6
a$c$bbQ"Y
N5HUMv
Q;6[C66Maf+a
5mKE<c,
k&]2]'A
|drD|JSkiT
[vN#A)S
t/1QuSkkLb
:T$6k~;'J
LtBi8I\rlvNP;$
=60sh
^iQWC7>H ^|$
n/b2;#Ipqn15U7;JT
W38c~-c
!Q\r+E)OX<%4lfi
p<!Wwej
_d8C._
c[T{-?A5
f',n_[
A[H^4w
+&u{u}Utw1 >I$sX&x{B~P!/=
q967j8
bGOnar
LxCoCK9Q
"s*D~5)
T/lG<`K
02.3gxo=:xF4~~(`|
8:bRT+]
5T;rM{1_/(q&
sNWd3x;
#HxxV_H
b~81%S
.k8EAKs1k
*^5H3<
aiT/uDE
pL%C[G;2
5p}0zir
C<UwhBxy
HIl&+]}
=>r_Vg
\o_`O}\\{
#7)Z?n
VR{tnBq#jw
.?q^|1=Y
j+{x+ZGd
$lLzF]a-
IXkF#9
@66,:|sh
bBi!X4&WV
A91?ddoa@
x6LE|K="
gD tfT
= Oj{e)
C[fT*dKmj
zAb*!n4C !g6S
Ydyx)+ip
qn.b*H%
mx:OzKUN1&
`K(W!p+
`5,+&7O5V
F7rjk~N|s
r|:?v&@v7
Sa =8(w
Z\7.wr-
mQQ0!R
ik+UWA
1}Pw3$
>W:iC.
~H@%PlIx6,
NUIi"q3j%awDj
+ B"[d
IUXajxi
ec|"wv*O[
)q@RqDr
":\GDm.:DmC~
0Y! ]Gm,k_
*%j`a&
DGC795.~m0E"
skjX".7
rC1Gz}]U~<6N
0{%YqJX\L+]
*{b(<#0
$J.3W'sOU#WT;X
dl=CK:
%rByFT
{o]nX6(r?)x4H
Yu_JpD
0_z3Tw
Y0tFB~-Wm
0"4ghVXr&^nKb
5[kWpq}k3e57R
q+pGlXl 6g,oUU
:%+rX&
MX]62ruV`D;
p^t53#I~6}B
H)-s&y#f
zYy$Gmao?
)? [y
&c}@*&
V?6m $0H
'_hY.$E=ej
nLi!$rU'
7zuC
T;@TxO
>'Rux;
)j`3-/ar
V^-&8x<
R<I9s]`/
^h8'[As5p|.EA
7q.:W
}XLh/%<
l')"uUr
I{dw4hp
.//!z0j
A}7Ex #$]
k#T_6Z#
{^N'<zyR
P:c;8X+
Hz#,?;
s"qntBf?tS
jPI=pXM3k
:Xkk1sr
BoopK=
)6PSpGF
O?_ _f
@y(4>iR(
!fAt{i
:2HbcYo:^X`
Rz^JwWdJb*
tgb8U-)rtP
)*RSG2
RzC}4&0}
a2#J8 ;
1VL}g1l
)x^fjv<
wQ9&GH n1N
mW)0Ws
DU=v$#KaN
8QJzC"~h
^?5n$^2+
K){6YN
#p~$@#s
g9C+T'*
y@Z.=d
{KT6Sh
!hc:T!hj
I>"pDu;
nUKNvP
*]I%\_
&7Wz#3iM,ag#$7*f0
_xg:}\
#x:V>jW
3)d/]3'l
>R;TNq'J)"eEq
>&=|JyEa
ku[.yObLm<p
*T_Wa%N^&c-}=_c
'Vc7~C9_
EK$n7mr
=DuD \*+Lr
rf~#xJQ7
o$DoJ<0
5 %fh1)
%GK\&l
fK3CF2$
<z']A+)w
gH1+^?>k8o?ykw
9.^Os9
!m7Hm^
.=3\mf
QDT/sw
uX~*M$4
@Y zS1lSzCF
|P`;U1I
o4Ft:`
H?m{sv`
`^~-Dp0
3*L! ,rf
fHKZ%$IwA^F;
aC.">'DK4p6?`<9@Np
EcBH&0Jp
4Wo ghDPxP
8,));` u`
0eg,UDta-a:
`|qbf!@-ja<
8*Za;N
mz^ekFHO
QD2l:^'nl
(Z|L+K
^Q}~SJLNNqYB
xSR0<:
(9-\r:$pg7+M(|
o4*>F*:WpS?Y 1&
R0Py2W
y)`<GSf
3V59/vs
BRT4F zKn
O*57%#(fO$GnM(
{[%:L].;g
'%C?_9$
O6[GNdn:
SUg== B[Cy
$#)D|,]
9N;9l&@9
BE[JMyC~+ld
61Q2s{
l jfh*^eCc3S
P!%%=@
[s-9(a' e?LutX
&r>I#z
M1v8t~
$i-|CM;PK/
h@I54PQ
&%z@Io
EN+27 /m
,u3x45H
z1$Om-dL(Y,7t;
k&GM>pUy
O9VGE RHO*5_
(WQpoBpo`Q2!
|| O;*g+#f9i
I2kf6eD
~^m*&6
F/:t-Y
K]sAh$
p~WCJ@J
*,T3Kj
,@6k{5]fv9Iv
(iBqfk8
yC3n,2x`h
*K]!k{|
"b-$3K
N{G\?N
^x=N*VR*t
l4#J`U_9G@
po ;BX
kdcH1"B_<ry
rU)BI+
}lADDiO$5$Q
p};y$;
J>7ab2
^QQe^:^n!9AROdn
J@~XpV
*z0b I
TI5o!Q|3C3
Z@7Sq6V#
sqLa*,
zApNX<
BVZ~,Zu%|;I
?>HJ(;
L<78hHGud<`0
d;b7\o,
^t|]yMu
9SW%x5
rUUM;Pka_,:K[
EZ\MVTj}
,T?lD7
Z8tb"$W
R$@nVI
ls{pyh:
ze'|SMz>'
b*qjqS=C
7>8xI{uo
j00tt!W
]Q`}RoS
DzR>E$+IB
nXU^~Z
`d,t:%
Iq:$RN
L-Peyr$*
Wo<8F7)
4b2t}r
BO7J>a
@D7 "*
$4YE(\C_
eCdBF#J0*
<9 "@U%
b@6$Nm!y
~AHBdN/v
&);ct,Ox
csi}KWt' '(E}
|UdeCfV_G_
nXx/lLLd
Zp~ZgV*MC.,#-+>
#?d980
L9HwAy[
,v"h.mD
~W*MPZ%U(
E=\PrmmN!
wldvp@K
|q)>KIz6YlP
/!A1K~E0&
P_&idu'
I#gy6DEfvIs2.
,#OV)%"
?=!0#{Y:3iI
+5N+'
OnnB_j2
n2B#SqJ;wl(m|&
"V~RTfn
5OvGt! Uvp
5\L0m3(
uEi|M8
{ep)du
E {\#v
D6d'<zR9(%Igo
Ee3$dyt&n_:F?x#rxH@Ko
QaH~$e9IT|")
_"$#|)
6/T?&O&Q~^R:
%/yd=8/"+=8n
"!_NzV)
]ATl6}fQDDjH
H)W.[SaFzWU
^s6_Kh:Ihz
QG<.Y
4g?)DbBXia#
lh<QQ)N.X
pFAFpX
XjiM%F
}D#e.?
:rur?iS?l/
n*#vE,
U/V0^w
l/<[i}Zf1
\Pf*si$
:uOP85gS($rr
$9XXDC$
bN )-InRDT>{7!u
=}Y+{ 5]!$%D
;&"*5J
s5L(N7c1*
&#<x|DsM
_QRZ6M2W
f#epIf.0|,
>IB +M
[mF{cEU|O#R2
5e8{[s
;,("Od,*Gs]w;
c_dCubp
]\mspg#r
7K!K<Ts
4g/U@Q
OU~jc?t4h
OJ6X|IYs3]
3nR?[E_BV
[GQ}a06V
0Lfzpd10
!o(u h
23XMAfFow
7-4TpKp|)+sXD
>?~b?T7lL;_+
?V%= !>.j
w?79uH|
]QsPsSaK
9PN08|
ISBwu#
@xlyo}|Od
N^e_]U
[{'s~2S
KA5;%F9
<hj\BTSxg<
|O)c 8
cLf9T",
;Oqp\+VA
H$EBO|*0(mA\[
M|_\?'
av>\~g
2pc2Bz
86%,r=N|
ZCH-Q*
!/,*sU9h|{p)
2}`1V$r
+lHYkT>YM
fA0VEFbh
SX-: /!~AV+
0/eK%w
,=0Ldy,=
'a9 t#
$|\SAS~"StT
EP/odKv
Y"RIuZm
Jznm&uD w
&&L,b{uN
<a1X5l
TE{}Xw
a=(*-YxxoQ
` Sp7s
n!H@ZWU
Xye@Qx$JN
jc?qn?|a
x9s]]$*5d
yyqQ4Q7~Hp
;t 4J1
1JMwqd
Q~n{TrE
vpK`-!
/B0,Zu
KQ=yII
DCt0?.n>Z
DFrX@pJv_Pp!<I
Nd:SgR
+Y,vp::#
_RXhK;
Dbnqrm
=V=mJ`
tFu&{l[s`.XP9
F|{cL0F:wi:+
qK*l\9
yr?r^E
d0kYP#
#O1|F,n
PmIo[9
[l&@c,jLhXn w
K'j\@6
q>hst+1
P'45;AL,1tel3fQ
JQDO-%
cJGl`Kw6 4L--n@zHe
M<Y#A" TW
3HwQq#Cn
df{H#S*n^6h@
-]8#^=#
Q H(62jtG[H
x%7Q:6HNf;D)
(PdKn#4ZV4
pqS_EPup>E6it@Q
dNZ9(,TA)
I38`,d
iXQ@~g
f#Xj^:
+`7*G4
>_<OAAI'f
r,g,O X
D}[: :
CQD1mG~_}^
~ovD%./
MYuNi%
mU,@;e
Z"pd,GoRmqj
th']#8
B0uG|~:grZ.t-dA~wt,]9
/X5Et[k
;e2\]0D
#rq#MzP
L_ub]Pi#E\$PQr
x-9D!F
HgCaM'l
4<u?i>
o}4z E
+Ce`%0
8.Q#Y*
yiN#0Ac@Erq}[$C
j*6wH(y
*PG>p-
v;'\Waxq
?s0T(J,j>}
]W_{sq%!,_x
wqP ^
%MOpkC
>mTY$
LTS-,66:
a71RoX]l4
^BvKY.|Lt
0V^>TrhDBLUlg`%
)-SHY)[Z
AR:]14
0-HDS|z;
i(, ):F
uuD,#%F_
BB>{PZx"H$"7=hn
p{6VV@}
PAjN8(A[S
5:DA!*/?
W]tf%by
$~(jg93!HR_ii4
QX8{mU
PI[4)DCeC
8V^ \yHPA(u
&tRs#U
C 1Eet
[qfe^3%
"CL=vm>^nW_s)
gHs,3_#
I4AC AqgJ_qh:U8
|X$,@F
=VD#a+j#YV#
o#f{#5A$
$f#bU#O#t#dr#I#8m#3s#
[#Cq#}
#p#we##O7#f#r
Ww}B$V?v?^/' i0"
[]07###
;#T\#4
\#?##~#
$yR#>#J#p#qR#^##
Q#U###
#)dTq"
<PTGfb
T T#ee+T
\uM<OLiN,c\LL"h
%|dL/Sr%
2 PRR#mbBd3
P2TbMb#ES2
P5bmSeS2!PrUbbM
PR5bBy
a"!rP2aRa"
[w}ZC!C
w}NpQ@
wA@Pw>>
[w}rwM
",|(<ud@8
"3<;x$
CdU\kdy
$(\ce\g
zcU[kcE
#?j#?z# #?z7
306/5;;)=&81
EK9~C5ASF$
Hc I`"KZ#
$"$0y#/w#5u#3p#
$<$>$@$?$?$0>$.<$3
)$Q!&$S '$
!a%ggf+g-g'g%iO
~v,i(i"YYHFJ>F6A.C&v
Ujm#O#@##v#q#p#|p#s#ur#no#u#######.##|###(~#*U#-Z#'I#/T#'
6jDDK$
Zc0jE-Zt
TXRy-Zk-Zkb
zWUQ.Z8^tb
v#&HnKt6
:#a&.$uD8%\i
1ro~FzF
#azEu( 1u
,nb|53YoWtS~?#
B*0cw6kjT}G
Y^#hwWGu[0@
B<?vS7
BlnHqd4Y
.d~H_L
:B<8JF]:
=}OczOMn#
u^pd4cu~$
$2#MR23
fq;PwZ&,;
;(f;}q
j0jcdi
$;XwiX
t8M{EMkEM[
EZMEzwEM
EeKE#2VBv C
GB6"rAr2b
U6ENwEzX
(qwOwE[w2
;(vOwB[ENwUS
#2PKBBZBBZBP~
#q2A2A2,Q2)
uz{j{X
7@/%' )
w#~#z~#aO~#S,
*$f}#^`~#V}#N}#F}#>,
]{zPz}z
|zz`zzzBztzdzDz\W<z$4z,,z
zzyzkzLz1zyWyyyy
z}#g)#
yxyy_y@y
Y#X=#g
#Y4$'$
zi#xj[#gjM#[?#[#K#K#d#
d#8nl1
I;TQvFBGG
bLmFgR. &v:
DkBmw)
_(e#l0)
q#hlsd5'
G;"B/D
myvGylQ d7y}xtZdF
]V`9]^/_Z
$_^^Y_^zt
a_0_it^!t^^i
x\`y_^oite^#h4
_|s_V]] X
kFM^Y_k
=] k"h
P3aRaN
Wh^X9][
frDcq@
oX]fY\_Y[
^.X]'Yy\#
\]]ik#
i#x2DJo<
iWGjW?YV
j^T":#
#0*nr#
#3#L#[#]#Q#<#"#
j#,n'gV
*:#*#o*#=:#
BNpVtld
b5}____[_X_0~_5_%_%_"c
_i_i_y_
^&3_%)_%)_#pH
S+L5C3-C3
c;*#H=<:*-p3=ACCpK<kzy
aD&Y<4
cacacac
cccng+
3H|hth
lhd\YZ\YJ\MV\tJ\SN@\SN \GF:\
qH>M[l4[l4[e[[q[A[w[4[4[
:~[#2c2c
uK=jb5:b=:b
,j2,jBU
>7^3bq*#
t)j#j#c:#1:#
n,Wx;b
Kr7|(t(l>d\<<r\
xM}n@h>
6TnT<I
3 @,P
iTToQTyTiTyGTH
PuS-S-ShS]YSkS#64L50K
0K%NQ&AO
rrlE])i0rr,BN *#O:#
6BdIds
d\sTLD
CZBP0PrPW_PLPccPa/P^+P8PZ4PH@PHP~P
QFPxP'gqP gqPtPP
P9P)P)!,
jct}l6~s^
LrRKiIMI
.BdI1C[#-A
-AE4^ (
feroti
tlgdg\QT
PlL)L0<LRLNL
Le)Lh6L\3L?9LX=Lb\LggLLt>{L5Lj5~LLgL_LLj5FL#IF^&
JQSEWDX
HlFVIb]E4WI0+2KBaz(]cCcCSCSC
s*#0:#
6:dI{jb
LKDOo=
t|IS|IIIH
PH0HS0HXZHXH`H.H4H
AHiHYH8:H
:VH#">2!7A,,<(
jI1K8ND
mfpn:~s
1V;:#H*#
.:dIGg
fElEfE
DEEE[EEfEmEgEOpE+
PWoDK]E*D\D+D
D#Y?u>
NPx@xxs;
0Q:*#e*#.:#
o|vYtl
\lsTmzLgxDY7
@YSA>A>AIATA=AX9A\5Aq2Au.Ai*wAm&sA
^[A2[DA.W@A
OHAr{A`inAHAC
OQ]APBIQ1S>XM;]I/!%$!(
/4307,;(
9/ ,x]2;:#0:#
]]]W5Z6V7b(^|mtiludq\}TvLwD
v<:9)P$
#c|=.=~G=+z=0F=KI=UM=vQ=iV=Z=\=Z
=yUf=rRa=uXf=g\_=z]D=t!==$:=G=
8$wf<g
UJhIIr]I]AHNFG
CB"'AmcZQKELE^C+C
w6`:#y*#3*#
44^#.*l
Yy++$+!FM
,$8(P$
tix_|e
d4s=JRFo:r:S}i
?AOn9#
# # # #
>:#*#*#v#[#C#/#!#
2K2U2-33#5N
5|uYI#
###p#U#=#9
;i`V11
*#|*#<:#
t=lHd\RX9:#VO"
I'j[h$>D
~.7d.5`.5`.%`.%`.
@X.7Ya./Ya.
Ya..8 .1/'.
.#50$31$
180-.%.
^Ox?\dx8
44^Vt}c
eC8~ML
DCC(x(x
SEQLlD
m4bKD+/6!+1, +
N*N*L*UQ*NV*O;*A8*J=*d*
*W*W*W*Wy*as*
*u*j*j**~y*%X9*%X9*#
,0@/0;0B-
L61AAmY3OE
#tz#"z#
aEUDi<
`irs|i
~|itil
NA'76Y'
O'W)'W9'W9'a3'
Vvl|&K&K&K&K&.&'&
G&#B-E-
,v,x+c
Cic%;1
DMR[fo5:SP\
lz7d7\7T7L^DS~<[~4VO,
UDiZ#,#$#$#,y#3x#
e#^K_#YPa#[Sa#D5@#M8@#;C#>B#]U##p/#p'#
p"p"p""o"
"1"1"1"7A#
NNJJZZ7c#g#
\9T7L=D;<
__AD&1
E ;E 2gU =B
3:E ,%2
('"& , *&
1^h)h)h)h)0JYp'`'`.(P&(
lh)h)h)h)h)
zK\dU)7N*/F*[@
$Q-&I %Q$(Y (q&i)((
WmHw\,
I0>C.4-,:?*nkv
qgp7 2
'}K<i&\
tT^~mo
\alvkdHm\ZT
xLhD)i<)i4WS,2B
Rn@:#*#0*#
|<7tl9l{<dv
<k4qr,kl$un
yJK|t}
uusiK}
#'Q=!6
8QF>]@G=R3P1F
7^uXB~P
pwlr^J
fpzpuroe#$
~~wO=C=
PINZD#z#0z#
WT}TaJ
TaR_|`tqlwdA\DTDLxDE<w4y,\m
uY}cKpXP^BNTLLZ>JX`XPh`D\\I/gL4d
8^?RB"2 0X>
9kS Q}
\LID|<v4x,B$sD
|9*tI*lI*d
mB`tD#lL#dT#\qTE^LND<y4,
J<-K5+@
}nQaONOKJDCSC=8s4q)$\(3!
lL_SGU9e/nUdD?QT
:5/n1@+J&<)&#X
z#z#1j#
Pc?^x^^Xc
|tld\TLD<z4,$
2.55`i|ci{a;5
,.$@'R z&$PDN
)&$n.agqfGD5i
/Rv}r7!9CQ
/C9xXt^l$wldD\GT1L1D:-
$.<@ R'z
:bBH^JB
{ze]/ $
drZP\NU
[S]D9<i
AA_!j#
lLr$\CTIL9D9<
;K6HN9HVS;[~JP;K=U=M
t4>3M8-[6+U0T"$)
00^23lE8aH3lx3lBc4mp-^p-^
B$qs$y$L]$f~$
g|GwEGzx3)Kge
#&$D$8$E$$
$$$$L$q`$
$}$$$}$k$~]$
$T|$v$ ~$ m$>$
$3S$9$>$qX$uc$
7XP;V187Gvp%H
wNdY|_
z$i#O$iy$
,\{x[Yx[
cUcT@s
-Uc6Uc.
a`c$?gO
5gVfORf[Ya
j# z# z#?j#
z#?#?#
$.!$- $;%$
$9$59$=$A$D$)$,$.$
pzlUiZcOUSBAqhb
^YI#m$u$
$i$m$f$p$m}$fv${o$\Y$b$$$O$P$Ep$?q$
e`,ju(mom
v@xVvc
D@X"+OQrHVr
*#a[H1FY.
{wC`uSa$
#a}3se
5d!Iw`iQZA
"%\f/55
rm\zUzEC
A/nPs?yPxj}d
[<|EQ~g@tfPr{Oc
XtD~Pc
I`r`vn#
D\huFyHF<ePmq#
#a?dmDO,DUdj#
*#c*Ndt}
HKEkDk
#_Hk^h\
C 7[m#
^h\CkLbKwr#
#ev>Een'avdv
~]*O8^,`.
`d2]S_
K'qrq4
(s< x8
rU@r|}
8ad# aMHO^
qGO>VGOr
+b5bGOGGO9
+25^KFO{yN+5arNKbY
Op5 qrf5
'Oq%5Tara4
'1Oar%5S
'Oqqe5Swj#
['Swq5SwuE
x'sCkxHXsChp
P[sP"0
#rUHyE;yU
rvHv;InAu<
MO~LOvLO^Jr$!4!V
KO>*KO6*KO>
KKO;K%!4
K"w><<w
Q>== =4
kX{X{X
"#[Xx+Xx+X
Nxx{h nhmX
$x?$w$
J$J\$&
$$&$_$
$A$##[#3F#K#3
#@#]$ej$R]
}$xj$w}
$]A$e#
"${75$
+%/6#5
=H$:+:
t#/\*$
xNo~ovyH
9ph|tl
!AxbW>L
1X!!!i:#:#AoU
!(7S'S7S7S)| !
|:t{Vlydy\dT-L:DG<bM4cU,
n\x{p{
m<elc_gM5_Z5-%
L\D\vlKK
6!ubbRR
Xccvc6
|2uh.~d
B`e>B#
#Z#d#b#U#;#
d)z#j#j#k
:#T:#=*#)*#
K|Gtl1pd2{d]>o#_%
{b)j"`"`c
4C^_uydg_Yigjq
#%K6m7W
A`Iw3^^NZ
4x,W$C
kDJmqH
dx[s`mAO>RFL?,_6
#%K6mCtd
5zEm{Rcq\HLP<
2d"d"1w
,'w:9i|*9itClPdJ\`TiLgDO<;4%,
PNllvy
KbheZK@G]C>enfH @
HfddGr@H
8BBktUHJE"DfZqECQQ____`_`_FD|f
lCdF\6T
$L5cV'
@2WMJ]~}fxcj
h^Tum=@?
.:`I1NMVjMe]SAh..c?(!
o_zj ?
l;wdG\>TmvLCpDXk<&4$,
2JDnlj`6\jUUMUoy}coyDR$5T=2G
#%K;m|ehy
uFyjNSRvG
NWWPQPRR;k.#H#
CTflZdZ\MTxLBQD}:}y>}u"}Wn9}j5}f1}T|
|Z|?|H|`}
50SC|z\|zd|vx|$
iAX5\9@
?#;'7+3//3+7LDg#G#
KadE\kT
Inmycpy
yaBy/Cy(Cy`Cye8y
#y "y.F%y%BxLNxBJ
yYVxXRx^x]x\x
>H7hhmbm}n~k@lDlSlIalCekNbl
nq$2pl
_Uw8_#y#3
d\`T1aL.bDh<l4p,s$w
?SLrQsyxBv
usuamu
MuFAuVO!ud[ uzW
utt`TW;Itut[0$
!O_$R^.lK1W.\!G
# # Z# Z#
#+#?#Oz#Zz#Wj#Hj#6z##z#
LFm\;mGPmBm$J0/"
1z#z#j#pj#U
1N[jWgjW_jwGjl8jp.jq'ju
jZiai}i8?e)%S)(/7
~i}iZifi~i$W
6<BO4bO<bOUCnF(e"'f#Fp*1pe,ccb!o0e
!!1uB3v03>
uTrLrDr<NG4@M,}$E
kklfflfwzffvfnfff
eKeeKeeKe
Kepne^he/Ye$*2lm/c_aNaAhHgbgUnd
|V"V"V
RR_U~jhaNdrKp-i
d~d\[TL
jbJbcJb
Jbonb^eb<XbQabOdbnGbuJblMbRO
abyR^bH5fbF8_bM;<bw:b
b2&b2>b"6b".b
pbLaNaNaNaNaNa6a$
hpb{PbRSmE>mw9lv$l
x*#*#/#
dq\fTgLlD
}^l^l^l^l^
^^^7^/^'^'_
^07^^J^
^e^X ^`
ucE8i~'gx gsBfjGfXMMLj3
Q4Q,Q$Q
U>*#}#'#
N?ML'%
tVsssrq1111>Q#
ZGN[U []
^Z`ZZZ\ZWVZQXZpZ=Z7Z3[@Z@Z@Z@}Z@uZJZlZ0WfZ8W^Z0WfZV^ZZ$xKxKXKXKXKAt0
@2K28Q8RF7U8S*RrR-R-Q5LN
{{FIaR;++;;7
An<W4Fw,
|thW9WgW1W_W)WWW!WOWVx5FWp5>WX6&WP6
xVeVYJVAV2Vu\V`WVsP|V$x9R
Mx'MaMif
l;elx%<
?|?t?l?d?\?T?L
iIJSJJS<SpPS
NSleS.Su2fSN3^S>GgSLdS@=SA5SBS
<1S-c3S6IS8?S:=SERe|Sc}R6RlRlRlRlRl
RlRlR$'L8Y1
#~C<cMsMsM
ka^CG^WFnLF
q|Btwl@d
eO2mO#6O#.O9`O
~}^POp5
OX6&OP6
OaNbN]N$tU
*<$:>8@) C5=358!/B';-5+
LZK[KhK-K+K4K:KHKgyKe{K
}K<KB\KdKKKK]KNKNKFK@KBKtKnKJ
<QADF,2F
@`LTK+
ufctnyps2udofq
`E##0#
t~}~|bt
TuHp~HzlH|HH
Rvph~G 2GGGG``nG)HG9'GG$
>RUWQ)9&:
gNrMD<
nr6O{x
lV}tqtl
ftllzd
<4,wc$S#
ATaDpQDxQ~DlerD
,KD./@DuDE|DVoDgiD
ECCCCCCCCpCtzCrtCdjC^pC*EC
4&VGNGFG
intrhf^b
Xy*#*#0#
jj|jtjl
j<h4f,q$o
{GyIekp@`in@jg@ler@+>A
~mQ?=?=
@=?=?^?_Z?]s?$
:\J5 H/Y<$
wz\|fnaq\t
L%:v|*`?/
@<@<%<
>=^<6<=<6<3<5</<Y0<-<'p<)n<"]<^_X<
\;<7VA<:S\<=Tc<8QN<
#'U(l<_>HH7Y
I}IHN!O1R
vlquvhMNz
?IY6j# z#
>S7GERTMW\
Vih|ttanlpdo\nT
uLgDf<i4
CS9`~8R8AC
EqHO8!n8k&M8
882hf8"h>8g68$&
P)xU(qS(g_'jV.cK.m@$
f&t_XrIO
^ToLpDf<x4xv,{$n
4?e5A<5J45@GG5BI?5zR&5O!5PU&5ZR
5PI4AL
5GL4HK4?L4AK4CI4\T4wS4yQ4O4Z4nY4o$4p#4
A#@*6 {En[S$Q
#FV#dT.bN.ZG-
T(~M(O7'=
>Z|t?l
]d;\COTN
D;j<k4],r$yt
shw{qW1{T1t"1 1
=\1O0h10Vw0|G0|G0{H0uJ0^=0@@0$bQ&Z>'
;,~8,O,=,:1C-3
8(4':3)2
,P,Y1^62O;1,)(-
1o^0pa@pa kk;;hbU\F9P:-
gK[}{Mtj-uj-dj-pq-^;-@?-BA-zR-W-VX-gJ-
P{-c%j-'j-~(e-
3G-w-249GuW-tA4-]yF-,,o-NR
1_,Z^$J|Uz
:P8hoaAc88
HfETfE[WF7[^4-4 #
UFsjyl3
lF=XIn@vh
kDsGiLcHkFo
7m[jLfOSVOFii
?SrSIdQJ jKnY
~j.n&.1'4
31 31m!d
c"qDbC
den.
D6~tiGvd
1d]v<1rHef6 >z^0g%*3y
u>DP#{_-
_ {1g_-
_-H^9P_ A{1_-H^
_I^Q_B{`_I^
H30Hq0HB0?IO0+F0E0yE0E
1FD1H3H3H3~D
BV4A4uA4A4A15vAr5B5/Fz6D6 D>7D7?
D4<':4,$\
AEBAd?
<8q<8T<8W<f9<F9<
9<7#=7.=7}=.8=2=]2\>64>3>}39? 5
?3I?%5?4?z,F#
.15.k2!02/2/2vHo4
Q^9G?PFX|>&
5;K+^+n
+4 V}@
`h#=YV
D4kE4E4BD
5\Dp5_D5C5PD(6*26
(6n+6)h7)X7[*7V180808
18/%9/59
96_9H7x9696;0;r,-<Z,a<
-L`H q#
,1,1&4:2:3:2:2:3:v3:3:2#;F23;
>2;(/<
2o<(W<F)<B)<
) ='<r'?=B(#
)2'2'#3
; C K S
{@@@i@
,(,,<,
>==FhSb
#]P=O=G=
Q+R'QsV
Q\ 6W>O>G>~
E{~i(;s
3u]6fu
QMr rb
)n=555Fu
td0+>+]P5O5G5tQL
vW6O6G6rd;
:W6O6G6r
pizo]P6G6nQL
y555Fo
nd0Mol
.O.G.t
uaM[tq
3St]P-W-O-G-fs
pi8kU+
bo1P#Rr
oQUI@iT#P
xO-G-n
`NRkt|
UCp>;RSFQNR
hB0(<$
fq'N"E`=
N"MhM+
xG_WOG
222222#
6-`6Z|6w
7g7Ut75Q7
8l8y8V88888R8
Uu|h4B
yttttttttttttttttttttt
software\classes\jjjerface\{0000061f-0000-0010-8000-00aa006d2ea4}\proxystubclsid
GetComputerNameA
IsDBCSLeadByte
HeapDestroy
GetModuleFileNameA
LeaveCriticalSection
EnterCriticalSection
OpenEventA
GetVersionExA
LocalAlloc
GlobalUnlock
GlobalLock
GlobalAlloc
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
GetShortPathNameA
FlushInstructionCache
GetCurrentProcess
GetCurrentThreadId
SetLastError
GetTimeFormatA
GetDateFormatA
FormatMessageA
CompareFileTime
SystemTimeToFileTime
CreateMutexA
ReleaseMutex
ResumeThread
FindClose
FindFirstFileA
TerminateThread
GetCurrentProcessId
LockResource
FindNextFileA
GetPrivateProfileStringA
GetPrivateProfileIntA
WritePrivateProfileStringA
DuplicateHandle
GetStartupInfoA
GlobalFree
GlobalHandle
LocalReAlloc
QueryPerformanceCounter
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
HeapFree
GetProcessHeap
HeapAlloc
VirtualFree
VirtualAlloc
OpenProcess
GetSystemDirectoryA
CreateProcessA
GetModuleHandleA
InterlockedIncrement
DeleteCriticalSection
InitializeCriticalSection
WideCharToMultiByte
GetUserDefaultLCID
GetSystemDefaultLCID
FileTimeToSystemTime
lstrcatA
CompareStringA
GetLastError
GetModuleHandleW
CloseHandle
CreateFileW
GetFileAttributesW
lstrlenW
GetProcAddress
CreateProcessW
LoadLibraryW
GetModuleFileNameW
OutputDebugStringA
GetPrivateProfileIntW
SetCurrentDirectoryW
GetWindowsDirectoryW
GetCurrentDirectoryW
LocalFree
LoadLibraryA
FreeLibrary
RemoveDirectoryW
FindNextFileW
DeleteFileW
SetFileAttributesW
FindFirstFileW
SetErrorMode
GetCommandLineW
ExitProcess
CreateFileMappingW
InterlockedDecrement
FormatMessageW
MulDiv
GetVersionExW
GetExitCodeThread
GetTickCount
GetSystemDirectoryW
lstrcatW
SearchPathW
GetPrivateProfileStringW
lstrcmpiW
lstrcpyW
lstrcpynW
GetACP
GetCurrentThread
GetOEMCP
KERNEL32.dll
LoadCursorA
USER32.dll
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
__setusermatherr
_initterm
__getmainargs
_acmdln
_cexit
_XcptFilter
_c_exit
malloc
realloc
memmove
_purecall
_adjust_fdiv
swscanf
_vsnwprintf
_wmakepath
_wsplitpath
setlocale
msvcrt.dll
CryptDestroyHash
CryptReleaseContext
CryptAcquireContextA
RegCreateKeyA
RegQueryValueExA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
ChangeServiceConfigA
RegFlushKey
CloseServiceHandle
RegEnumKeyExA
OpenSCManagerA
OpenServiceA
QueryServiceStatus
StartServiceA
ControlService
RegEnumValueA
RegQueryInfoKeyA
RegOpenKeyA
RegSetValueExA
CryptCreateHash
CryptHashData
CryptGetHashParam
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
LookupPrivilegeValueW
RegCreateKeyW
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
RegQueryValueW
RegDeleteValueW
RegQueryValueExW
RegOpenKeyW
ADVAPI32.dll
0 0$0(0,0004080<0@0D0H0L0P0T0X0\0`0d0h0l0p0t0x0|000000000000000000000000000000000
1 1$1(1,1014181<1@1D1H1L1P1T1X1\1`1d1h1l1p1t1x1|111111111111111111111111111111111
2 2$2(2,2024282<2@2D2H2L2P2T2X2\2`2d2h2l2p2t2x2|222222222222222222222222222222222
0,0<0I0S0X0u0y00000000
1 1)131=1G1Q1Z1g1s1}111111
2'212A2M2V2`2j2p2v2~22222222222222222
3'3-33393>3D3I3O3U3[3f3l3{3333333333333333
4 4%4,424@4F4L4Q4W4]4c4i4o4u4
44444444444444
5/5;55555
6/6%7,7788888888888888
9 9%9+91979=9C9I9O9U9[9a9g9m9s9y9
9999999999999999999999
:!:':-:3:9:?:E:K:Q:W:]:c:i:o:u:{:::::::::::::::::::::::
;#;);/;5;;;B;H;N;T;Z;`;f;l;r;x;~;;;;;;;;;;;;;;;;;;;;;;
< <&<,<2<8<><D<J<P<V<\<b<h<n<t<z<<<<<<<<<<<<
6{HK_r
"eh?\A(N`
uD=Gdi
M)mR|r
f$>0,j
f<4/3\
&0G^$QdUGIJo@'
mML!#_.(0#_l
kf=s.^&
E/zP-!C
B B B B B B B B B B B B
B B B B B B B B B B B B B
B B B B B B B B B B B B B B B B B B B B B B B B B B B B B B B B B
B B B B B B B B B B
B B B B B B
B B B B B B
B B B B B B B B B B B B B
c c c c c c
# # # # # # #
# # # # # # # # # # # #
# # # # # # # # # # # # # # # # #
I O D L D L I
@ U U - # #
F # @ # P # P # P # D # S
$ $ $ $ $ $ $ $ $ $ 3 3 3
F J J O r I J V
# J L G w #
# # # # # # # # # #
# # # # # # # # # # # # # #
# # # # # # # # # # # # # # # # #
d # # # # #
# # # # # # # # #
# # # # # #
# # # # # # #
# # # # # # #
# # # # # # # #
# # # # # # # # # # # # # # # #
y x n m k r q p o
U P N L Z [ Y w e c c ^ a \ j h i r p n
# # # # # # #
# # # # # #
# # # # # #
# # # # # #
# # # # # # # # # # # # #
# # # # # # # #
# # # # # # # # #
# # # # # #
# # # # # # # #
# # # # # # #
# # # # # #
# # # # # # #
! # # # # # # # # #
# # # # # #
# # # # # # #
# # # # # # # # # #
# # # # # # # # # # #
# # # # # # # # # #
# # # # # # # #
# # # # # # #
# # # # # # # # # #
# # # # # #
# # # # # # # # # #
4 4 4 4 4 4 4 4 4 4 4 4 4 4 4 4 4 4 4 4 4 4 4 4 4 4 4 4 4 4 4 4 4 4 4 4 4 4 4 4 4
V S _ V E R S I O N _ I N F O
S t r i n g F i l e I n f o
0 4 1 9 0 4 B 0
C o m p a n y N a m e
F i l e D e s c r i p t i o n
V a r F i l e I n f o
T r a n s l a t i o n
Hosts
| IP |
|---|
| 114.114.114.114 |
DNS
| Name | Response | Post-Analysis Lookup |
|---|---|---|
| dns.msftncsi.com | A 131.107.255.255 | 131.107.255.255 |
| dns.msftncsi.com | AAAA fd3e:4f5a:5b81::1 | 131.107.255.255 |
TCP
No TCP connections recorded.
UDP
| Source | Source Port | Destination | Destination Port |
|---|---|---|---|
| 192.168.56.101 | 53179 | 224.0.0.252 | 5355 |
| 192.168.56.101 | 49642 | 224.0.0.252 | 5355 |
| 192.168.56.101 | 137 | 192.168.56.255 | 137 |
| 192.168.56.101 | 61714 | 114.114.114.114 | 53 |
| 192.168.56.101 | 56933 | 114.114.114.114 | 53 |
| 192.168.56.101 | 138 | 192.168.56.255 | 138 |
HTTP & HTTPS Requests
No HTTP requests performed.
ICMP traffic
No ICMP traffic performed.
IRC traffic
No IRC requests performed.
Suricata Alerts
No Suricata Alerts
Suricata TLS
No Suricata TLS
Snort Alerts
No Snort Alerts
Sorry! No dropped files.
Sorry! No dropped buffers.