Sample details: 1427edd87fa9e2b22471a7e0d7756954 --

Hashes
MD5: 1427edd87fa9e2b22471a7e0d7756954
SHA1: 55186cfb35ca55a1a47149aa8c5af95b98e1c5d3
SHA256: 3f59c3773d0e0610526e82b816e0158c1d3d4ccdd908af6845080e1ab9cf3fd4
SSDEEP: 12288:IVgg1GjyOtAgzhTg7utupd5vPP6aCLdOOxOUycvmKp+dkOFHNqSkEAk8H:IVgeeTziutup7XPPsOUycv5p+5HESrA1
Details
File Type: PE32
Yara Hits
YRP/IsPE32 | YRP/IsWindowsGUI | YRP/IsPacked | YRP/IsBeyondImageSize | YRP/domain | YRP/contentis_base64 | YRP/anti_dbg | YRP/network_tcp_socket | YRP/screenshot | YRP/win_mutex | YRP/win_registry | YRP/win_token | YRP/win_files_operation | YRP/Str_Win32_Winsock2_Library | YRP/Str_Win32_Wininet_Library | YRP/Str_Win32_Internet_API |
Source
http://216.170.126.99/4.exe
Strings
		!This program cannot be run in DOS mode.
`.rdata
@.data
PQQQSVW
tRj2j2j
tRj2j2j
tRj2j2j
tRj2j2j
tRj2j2j
tRj2j2j
tRj2j2j
tRj2j2j
tRj2j2j
tRj2j2j
tRj2j2j
tRj2j2j
tRj2j2j
tRj2j2j
tRj2j2j
tRj2j2j
tRj2j2j
tRj2j2j
tRj2j2j
tRj2j2j
tRj2j2j
tRj2j2j
tRj2j2j
tRj2j2j
tRj2j2j
tRj2j2j
tRj2j2j
tRj2j2j
tRj2j2j
tRj2j2j
PQQSVW
YYPhdF
YYPh|F
u>j@hDH
QQSVWd
f-00f=
PP9E u
PPPPPPPP
jA[jZZ+
uPVWh]
~pjCXf
tyPVj@W
_tcPVj@
u#j,Xf;
>Cu/f9F
Genuu_
ineIuV
nteluM3
tfHtWHtHHt/
j@j _W
h} j@W
<at-<rt"<wt
URPQQh
HHtVHHt
<itx<o
,SVWj0X
Wj0XPV
< t8<	t4
RVSQSWV
SVWjA_jZ+
uBjAYjZ+
t VV9u
<0|o<9
G Pj*S
G$Pj+S
G(Pj,S
G,Pj-S
G0Pj.S
G4Pj/S
G8PjDS
G<PjES
G@PjFS
GDPjGS
GHPjHS
GLPjIS
GPPjJS
GTPjKS
GXPjLS
G\PjMS
G`PjNS
GdPjOS
GhPj8S
GlPj9S
GpPj:S
GtPj;S
GxPj<S
G|Pj=S
Yu2Vj@h
v	N+D$
~';_t|%3
;t$,v-
UQPXY]Y[
f-00f=
v	N+D$
tHHt*Ht#
SVjA[jZ^+
jAZjZ^+
Ht+Ht$Ht
+t"HHt
uHjAXf;
hbad locale name
hgeneric
unknown error
hiostream
iostream stream error
hsystem
hios_base::badbit set
ios_base::failbit set
ios_base::eofbit set
hDrivers
Cannot receive HDC
abcdefghijklmnopqrstuvwxyz
SessionInfo\%08x%08x
PrintDlgBox
PORTER
winsta0\default
memcpy
%02d/%02d/%04d, %02d:%02d:%02d
hstring too long
invalid string position
invalid map/set<T> iterator
bad cast
map/set<T> too long
hbad allocation
permission denied
file exists
no such device
filename too long
device or resource busy
io error
directory not empty
invalid argument
no space on device
no such file or directory
function not supported
no lock available
not enough memory
resource unavailable try again
cross device link
operation canceled
too many files open
permission_denied
address_in_use
address_not_available
address_family_not_supported
connection_already_in_progress
bad_file_descriptor
connection_aborted
connection_refused
connection_reset
destination_address_required
bad_address
host_unreachable
operation_in_progress
interrupted
invalid_argument
already_connected
too_many_files_open
message_size
filename_too_long
network_down
network_reset
network_unreachable
no_buffer_space
no_protocol_option
not_connected
not_a_socket
operation_not_supported
protocol_not_supported
wrong_protocol_type
timed_out
operation_would_block
address family not supported
address in use
address not available
already connected
argument list too long
argument out of domain
bad address
bad file descriptor
bad message
broken pipe
connection aborted
connection already in progress
connection refused
connection reset
destination address required
executable format error
file too large
host unreachable
identifier removed
illegal byte sequence
inappropriate io control operation
invalid seek
is a directory
message size
network down
network reset
network unreachable
no buffer space
no child process
no link
no message available
no message
no protocol option
no stream resources
no such device or address
no such process
not a directory
not a socket
not a stream
not connected
not supported
operation in progress
operation not permitted
operation not supported
operation would block
owner dead
protocol error
protocol not supported
read only file system
resource deadlock would occur
result out of range
state not recoverable
stream timeout
text file busy
timed out
too many files open in system
too many links
too many symbolic link levels
value too large
wrong protocol type
0123456789abcdefghijklmnopqrstuvwxyz
0123456789abcdefghijklmnopqrstuvwxyz
0123456789abcdefABCDEF
hUnknown exception
?ZEM-'^
?{yK+;
?765@Z
?e')lW
UUUUUU
?333333
?333333
?UUUUUU
?$rxxx
?uZEeu
?uZEeu
?UUUUUU
?UUUUUU
?5Wg4p
"B <1=
hbad exception
 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
InitializeCriticalSectionEx
CreateSemaphoreExW
SetThreadStackGuarantee
CreateThreadpoolTimer
SetThreadpoolTimer
WaitForThreadpoolTimerCallbacks
CloseThreadpoolTimer
CreateThreadpoolWait
SetThreadpoolWait
CloseThreadpoolWait
FlushProcessWriteBuffers
FreeLibraryWhenCallbackReturns
GetCurrentProcessorNumber
GetLogicalProcessorInformation
CreateSymbolicLinkW
SetDefaultDllDirectories
EnumSystemLocalesEx
CompareStringEx
GetDateFormatEx
GetLocaleInfoEx
GetTimeFormatEx
GetUserDefaultLocaleName
IsValidLocaleName
LCMapStringEx
GetCurrentPackageId
CorExitProcess
Sunday
Monday
Tuesday
Wednesday
Thursday
Friday
Saturday
January
February
August
September
October
November
December
MM/dd/yy
dddd, MMMM dd, yyyy
HH:mm:ss
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
UTF-16LE
UNICODE
(null)
`h````
xpxxxx
_hypot
_nextafter
SunMonTueWedThuFriSat
JanFebMarAprMayJunJulAugSepOctNovDec
MessageBoxW
GetActiveWindow
GetLastActivePopup
GetUserObjectInformationW
GetProcessWindowStation
`h`hhh
xppwpp
?ZEM-'^
?{yK+;
?765@Z
?e')lW
UUUUUU
?333333
?333333
?UUUUUU
?$rxxx
?uZEeu
?uZEeu
?UUUUUU
?UUUUUU
?5Wg4p
"B <1=
h__based(
__cdecl
__pascal
__stdcall
__thiscall
__fastcall
__clrcall
__eabi
__ptr64
__restrict
__unaligned
restrict(
 delete
operator
`vftable'
`vbtable'
`vcall'
`typeof'
`local static guard'
`string'
`vbase destructor'
`vector deleting destructor'
`default constructor closure'
`scalar deleting destructor'
`vector constructor iterator'
`vector destructor iterator'
`vector vbase constructor iterator'
`virtual displacement map'
`eh vector constructor iterator'
`eh vector destructor iterator'
`eh vector vbase constructor iterator'
`copy constructor closure'
`udt returning'
`local vftable'
`local vftable constructor closure'
 new[]
 delete[]
`omni callsig'
`placement delete closure'
`placement delete[] closure'
`managed vector constructor iterator'
`managed vector destructor iterator'
`eh vector copy constructor iterator'
`eh vector vbase copy constructor iterator'
`dynamic initializer for '
`dynamic atexit destructor for '
`vector copy constructor iterator'
`vector vbase copy constructor iterator'
`managed vector copy constructor iterator'
`local static thread guard'
 Type Descriptor'
 Base Class Descriptor at (
 Base Class Array'
 Class Hierarchy Descriptor'
 Complete Object Locator'
CreateFile2
1#SNAN
1#QNAN
GetProcAddress
GlobalAlloc
GlobalFree
LocalAlloc
LocalFree
VirtualAlloc
HeapCreate
HeapAlloc
GetCurrentProcess
GetLastError
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
WaitForSingleObject
LoadResource
FindClose
CloseHandle
GetLocalTime
SetTimeZoneInformation
CreateMutexA
OpenMutexA
GetModuleHandleA
FindResourceA
GetDiskFreeSpaceW
CreateDirectoryW
CreateFileA
GetFileAttributesW
FindFirstFileA
FindNextFileA
GetVersionExA
WTSGetActiveConsoleSessionId
KERNEL32.dll
SendMessageA
DefWindowProcA
PostQuitMessage
RegisterClassA
DestroyWindow
SetWindowPos
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
BringWindowToTop
CreateDialogParamA
CreateDialogIndirectParamA
SetDlgItemTextA
GetSystemMenu
EnableMenuItem
InsertMenuItemA
DrawTextW
UpdateWindow
SetActiveWindow
SwitchToThisWindow
SetForegroundWindow
BeginPaint
EndPaint
InvalidateRect
RedrawWindow
SetWindowTextA
GetClientRect
MessageBoxA
MessageBoxW
ClipCursor
GetClipCursor
ChildWindowFromPointEx
GetSysColorBrush
FillRect
SetRect
GetDesktopWindow
EnumWindows
GetWindow
LoadCursorA
LoadImageA
USER32.dll
BitBlt
CombineRgn
CreateBitmap
CreateCompatibleDC
CreateFontW
CreateRectRgnIndirect
DeleteDC
DeleteObject
FillRgn
GetStockObject
GetViewportExtEx
GetViewportOrgEx
SelectObject
SetTextColor
GetTextMetricsA
GetObjectA
TextOutA
GetTextFaceA
GDI32.dll
GetOpenFileNameA
COMDLG32.dll
OpenProcessToken
GetTokenInformation
AllocateAndInitializeSid
FreeSid
GetLengthSid
InitializeAcl
AddAccessAllowedAce
InitializeSecurityDescriptor
GetSecurityDescriptorLength
SetSecurityDescriptorDacl
MakeSelfRelativeSD
SetFileSecurityA
CreateProcessAsUserA
CheckTokenMembership
RegCloseKey
RegCreateKeyExA
RegDeleteValueA
RegEnumValueA
RegOpenKeyExA
CryptAcquireContextA
ChangeServiceConfigA
CloseServiceHandle
OpenSCManagerA
OpenServiceA
QueryServiceConfigA
QueryServiceConfig2A
RegisterServiceCtrlHandlerA
SetServiceStatus
SetEntriesInAclW
ADVAPI32.dll
OLEAUT32.dll
InternetCloseHandle
WININET.dll
WSAIoctl
WS2_32.dll
msi.dll
COMCTL32.dll
PdhCollectQueryData
pdh.dll
WTSQueryUserToken
WTSAPI32.dll
AuthzCachedAccessCheck
AuthzFreeAuditEvent
AUTHZ.dll
InterlockedIncrement
InterlockedDecrement
DeleteCriticalSection
EncodePointer
DecodePointer
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW
IsDebuggerPresent
IsProcessorFeaturePresent
HeapFree
GetConsoleMode
ReadConsoleInputA
SetConsoleMode
RaiseException
RtlUnwind
GetCommandLineA
InitializeCriticalSectionAndSpinCount
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetStdHandle
WriteFile
GetModuleFileNameW
ExitProcess
GetModuleHandleExW
AreFileApisANSI
HeapSize
IsValidCodePage
GetACP
GetOEMCP
GetCurrentThreadId
GetProcessHeap
FlushFileBuffers
GetConsoleCP
GetFileType
ReadFile
SetFilePointerEx
CreateFileW
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
HeapReAlloc
SetFilePointer
OutputDebugStringW
LoadLibraryExW
LoadLibraryW
SetStdHandle
WriteConsoleW
ReadConsoleW
SetEndOfFile
8%@G)#
8%BG)3
8%@G)#
<%BG)3
.?AVruntime_error@std@@
.?AVexception@std@@
.?AVfailure@ios_base@std@@
.?AVsystem_error@std@@
.?AVbad_cast@std@@
.?AVios_base@std@@
.?AV?$_Iosb@H@std@@
.?AV?$basic_ios@DU?$char_traits@D@std@@@std@@
.?AV?$basic_streambuf@DU?$char_traits@D@std@@@std@@
.?AV?$basic_istream@DU?$char_traits@D@std@@@std@@
.?AV?$basic_filebuf@DU?$char_traits@D@std@@@std@@
.?AV?$basic_ifstream@DU?$char_traits@D@std@@@std@@
.?AV_Facet_base@std@@
.?AVfacet@locale@std@@
.?AVcodecvt_base@std@@
.?AUctype_base@std@@
.?AV?$ctype@D@std@@
.?AVerror_category@std@@
.?AV_Generic_error_category@std@@
.?AV_Iostream_error_category@std@@
.?AV_System_error_category@std@@
.?AV?$codecvt@DDH@std@@
.?AVbad_alloc@std@@
.?AVlogic_error@std@@
.?AVlength_error@std@@
.?AVout_of_range@std@@
.?AV_Locimp@locale@std@@
Copyright (c) 1992-2004 by P.J. Plauger, licensed by Dinkumware, Ltd. ALL RIGHTS RESERVED.
.?AVtype_info@@
.?AVbad_exception@std@@
                          
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
                          
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
!R[S'8
	oP'*?
d>tyYD~K;
#jgOy9
TldUY}D
$yo	H'
AjQwW$p
:d<,/I
72FoP_
DOYp?6
7I<*|\[,
z'n<Z}Yb:
Ip?FGq
W3!PkY
;T\$wgH2
KLzDC{_`
71HL0Z
a,lk9{
@U;s]7
 wDIb(
/T#_|R
kSmo,(*
dtDD,T'
z\85c+o
 ldTtQ
D_),Ot
S|4$ly
sG|7xH
|TiX+!
QC|1[oy4sd
t/b+op
]GLSQ4
YTSacu<t
 tgjSW9
jr;3GH
g'XRwd
h/'g!t
X]Y(g9@{
Y0*#[q
k:oq"z
/xYhz#
zdILo?
W(|saX
!R/o4	M
$/ C{2
svD|`=
`7TkA{s
hW\,,\7
 R;c=7
'/;DJL'
c|b$vd
>tcCA2
%'|yo3
pXGaLl
1'iOpu
dv|J3M
2Ti :3
SGd4P#,
2mU|zjW
TX#Tc<t|
Cc$<Mu^
V!0$o,
1D,K+#
'T=9HL
Vld,KX9
#,)1l-\
qsL=:dld
(9WQ4=
obwJ@Ul
r</068
)pD>~:c
d<G6Ti
MDLA\Pi
+4#c(r
o65U/dEL
&kwTx]l
OQG(OPT
gXOP\w
-/$o-e/4
_!pZOY
I4c&xoq
dQ	Tlg
Wx/`x'j#
!PSiTm4L
%V"dSX
Xal@_C
o4<GHX
;md<;o
OY9$n,
,yB	C/$E
SWl\n;3;
&^T#a$
<=Jel4*
$Lo4<t
Idsq4;
S1k/``
c+_P }
tD'z3<
y/@/)8G
o$U1H}
8o^-P(
i\/+g"$
tPsU\M
t<AsaD/
#'4C2e,'
k)XSS0
+optl8g
Ag_=XE
oawX-W
x_|	-,$o 
poaX	3
,2%#k/
1xG?Ah8
QQ$-9@C1
38r/*L7
OV_T87
di/	sM{
$d_ld,s
Y~,?9H
pse48+3|R
k)l4*v#
wzsg1t
,${\/~"
O`GWI$
w}3C{0
WQ$-4x
L|$8+4
Pn_k)<
@@k)|c!H
/T'?|?w
 "kcWX
9A#c<t
O<}k\$
\/+AgO
{_P J7VC
,P90	D(/Gd
e$,}gP
OTLk,(
)c=z\`z
 4+"_QW
OL" 1;E?
a4+Z`>V
]Q+2%o,
|4yts0
L^CW)$rx=
+op@_!hJ7
xgd9D9+
UWe<t|
s'DG(C
icW(xG
D{;Snv
C1l>*G
'^OL|"
h94xDA
PalP4K	
n(?PU\/
/ZdX.#
837LR4p
D$<D#,N
$X,w<lE
4qLa w
+_PTa,
P3.9 l
gX?@<G
AxoF%a,
a/	lDi;
'ytR(5
Xd4HYS[
A\o>$s
lOqb+_`lw
@31D,M]
Gd!X`G
0'8D/RW9</	
(c=l"d
:cW(tc*'
*(!~$[
LDLDLd
T\$|4<
Tldld,$|
Kix}#<
WQw X==@
4.R[S'
8\gw$b`
_(@`}H 
'F4$ld<
X0_`pi
LCZht|D
olaGx}
@5AL)8
tL{IP+
Udld<I
Tk$,Q?
3;c&|D
W<!.@6
C{g8Wyo
6F%Fr{#
$E]<c-
Z3kSlu>	{
'g&p[aV
q'JCY8@8
qL`(w,D
&~MB{}
FC{5!l
$|DD?W
/$il{^\
S)4<#<Llt<3
S,/<{iT}#l
<{ypNs
#<OL{y
]6#[_$
;3Wud;
84 ${s
nkHCFM
R>d|99
OlT@<4]lZC\k
@J#<O	
k'??(`
ov|A_}'Q~
7l;ls<[\
T\8|4<
5,HK3/<
	_0q'1|
A$|Qhc+
5=H=l\
|@yOY8
R[/`dw
wt8A\P
KOPTN|\|
X,gDC3
;sMWW<
74hd$f
hKL}]C{
8K	TSo
+_`dZW
4L`(tDS]r-\
a$!lP#7
7Tl!GLG
,$,?)H
B>4\3^
o/dG/?
J_T**?
(Tc;E.
t{)`ga
%l .)L
E]Y8C{s
]JUl4O)|K
z_	$C{#r
o(u+Wa
i\2kSW
m%X.4<
^<=1tB
/)<g!H
g>8}18
ca<7,U
EW!HYS
9Xy#[SU
_c+g7p
W1493;
#FW)DI3
C})Dq{
l4wyDG
lg'(/x
=AP1kc
+g4|})
Tl@hOA
;3GH\gD
+t]"4<
kc]<h7
t7	DBe
cQt\c9
,wAH0k
#kl<	3%`
ld5wBs
/q(0;c
Sa?d|4
p{#F'~H;
C{4:=sL+
_Y  kS
 _S[w5E
07;sbWD
NTma`7;s
p=wy|w
WLdFd|@
Lj~3;O
TlIKkl
z7oh^<
5j#dB3;cW(h
%<$TdH
K?@@wN
_qgX/b
=7i?aG
9@WGP-
nn\~,K
$drN9sMW
o<,$,$
L9cW(l
H>|43'
=@\Q71
y`'LUY
sD(!lA1
uy?awh
y8Dh\6
D4A	X^
g9o@/)<
?Ilf+d
n;s]4~ [S
K,?	(g
,+dC7X
,/k$~0
GW9 1g06
EOLKUC{
LqE3;O
wl/i$OC
QP#dr+
g|wN6<
fl,;Nc+o
i4K3GXl
QG	o@%
e,$whG
pQc+_PPoT!
(.S4(X
gxH?F%g8
_s<-!w
_Vtv+Ki
tyfj$$|y
};4jn[|
'i4{TM
@Tk+@4
`,'h|a
ow!Ag9
-I#WQ\
_F,v|K
q{#=7'
ild<tw
$OLqzq
' |qlGD
?TDS%K
=DlDKC}
 Uld<G
{#'h<Gd)
pd^$xi
[/`t,>
:37)twjg,my
5|rEoo4
/jM($,
ptkb_Q
 ,}w|Y
&Hi%</
$VR`,}
<t<W$yW
OPLo\!
_l4I'_
_P }Ih
;u,Pap
B4g@K3
Y+a"($
]fg*pZl
KOZ=cf
GLLe1l7
i@?9h$
W|OId!.
a!lV[k
x4(H{s
tzP+#DF
kS/$1g0
hD6D;s
dld7axD
8pTld<
AT,;p#
@)Qr"u
=@`y#[
-<Dx+\PEt
zVK3Ot
s{s^U|
kS))dD
kcT<t|O
``ASL}
O2akZ%E
waDOYX
q7Ul4<O
_;cy??
#0-FLD/
XX!xAy
[|DeF!
+"_Gqq
H5P8M8
M]y(tR
p%a$^<
dH{s]o$51
47Yu5L
3;ce,$,sIpc
V|g(|!
@_)llO
n\GSwh
l<jeld7
;_gGxp
0V+d<p
SQ [	<
X'lOZo
t^!elma
jrgGtp
X)ww-R
HUMY@5
A A	X1
%k,$,R?
}I|U1@	
/75UDL
UE>|%L
gh8ui4.L
>e?.WF
Tac~$99
@_)$-<
aX|qTg
p_)l9D1
G^_-ah
k$o'Wt^mW
3W3k/`p
4L~pi[
E_4awA
GD<U9B{
$||3pw
.l'M k
;rYLDLO
CGdnJZ
iHO9`$
B{_`dod
8gl31hO
jV7^ 9
WX@g)d
,71,l;y^
Y(/I0BCPZ
+_PPo41
<$sqL~|
1IT)(v
_`xa|{	m
d'|	%uA
8$]qS,[
WXX_6e1
cQT^L;
~^lAyw
v6E	|WgO
G	@;-<(I
LEhC{_
Lc!0#dz
$4xkS'8
L1];iLk
{) SQt
,P(r9K\
D5sjd,/9h
,]hALD
Cw8$'r
DQ\!er3s
w6`;3s
[	D&Cc
7<u\vL
U7E{t>
@TxPhc=
nWGC9#'#<
48%,q|1
1'o,%F
n]~,N0
_|}Y4#
lW|}y8q
_[p0 '
-,\pwP[5
wq Lh`/
idC{s{
,X$Y1w
+#!DK3;
Att_3|
e(u|4L
LHsL.N
3kS$# 
g%(?I|
'!(J3;G
;e(R$|
eC1tZS
14z#[c[
`0ELGX\
o'0;OP
K	<$5b
S:cW(l
W18=/$W
#OK71p
!lH+wq
@eo"+?
.n>BDq
vRYS'8
)lSA<>
6q ^G^
*;2?5=1
	d'~ M
a<GlUe1
xn?9lT)#
t+\c&7;
{	(_Q\4
K?@Toi
_qwh_PT'Z
N|n\N,N
v|4j," 
it9O*Mg
4MBdz_
tLMICw
SQ8[	T
g1<)x&7	
7tYR	N
|_6e2@
]sFLDf
^*cWX(F
|x_GG&
MUQ0kY
L^LYy8B
njc=Vtf
s{#~~+
l@';)\
z/,t*/
!0Cq[,
6!7;OPT
|d^Wkc=
g9o@/)8G
ytWA k.
`<8NIIq
kS[S73
A8/1xz@
h_d?Y,
|'cKB&
sq8|}uA
,$|1^.
Od<wxX
s]\l?w`
QW	oP'
^o--.T
otel4<p
,)3<S$
@'dt?o
\$g7pEL
2?qw)?
Q\|@n_
t|?$(I
{tZl1{
d8e,$e1x
[t&E^o
X4#jg]
4{=TJ<
 +c+*%
t	.3!h
d! loi,
A 2;3D
y|&+#!
dldWq6Ald,
I9cW(x
n\L\5L
h!md<3
bed,w8<5
SW [	H
*~ddR;q^
k,$,>F
P8/\'Z
AWx'at
?3GH\it9i
!V/1 w
4G,hoL
A4,Lq0
\$OfG	4
,OIp_Al
YP+Kw`
+op@"/A(
),ld<2
LZS[/`
n\a/74
j|5CAq&,
w)|*E_
WJ[?\z
|z+/LcC
83!`3T
-/p?	X
|ws{_`
OP ?1d/
at|qR#
ua)H%_
c9l|4L
J7XNhL
W!</,\
/67OdD
9x_a,7
@7ydOn
GL93$X
CHr+#kS1`
tJ3YDx
[okp7Qx!b
Ydk6XE
h?|\a+?	4
L{),SA
aHuO9(Ti
q7r'i`UWQ@
p0ku/1
qJckt<
@TalPs9,<u
)<@c|j
AZT*1:
6$|??0
Mu"<ts
Ob+_P M
Y{#'hd
iPuu(/
\{/ C1
hozfo,YX
8^3YGLh
t;Gtf^nd7$F
4LGc"Y?
$n;DZ|
,$,Ono
d1|:KT
q$\a\W
a$L@[0
WA<-?8
SNCw8$
.MItO}
SiX}4L
a<=e3;
#ax\oZk$
m4<U$r&
~LDLGa
cQ(b;D
70XHLL
L'>=<0/
W!0YS[DL
l[FU['
8,$,2,
awXunL
T%*dTB:.
?\iQU[
;s{s:,$
~	;72w
r@}o?v_aW
/<G1\6
I`tPFMCG
4LDLUL
CHqTld
W!P$d."
Td~ kc
<5f%[qq0O
WxoT	|
LLO\qg
%Pu$Tx
6%k'!t
A(D#AP
+&Ql4<,_/
T orLY
-#}E[S
{#`ldl
|+\$|6
R5$4u	C
oy0dhA
thklp%T
'qD,	k
dlX=sD4*
(|%L'L
$HA"<,
yIh4&%
FEmS/9T
k)dcaW
/{%kw<7
MQx%kG
CAdJ3;tT[
))(R[S
=3kY@!
|7R,9IP2k
,z#['!
e+t^O=c
=y'ld<
It![Sl
&jmc<	s
;o%k!a
L|"}:D
AX93;6W
ckY@$d
Dtp/MC
d_-#/)
'=c_Y$
Dt)?2|
dTX[=3
g,$,\g"e
IYt&'|4
L	L-L'
 \a|L<t
l+l',e|H
\e|P\U
CY%k'1@
!!iS'8 
[S%|4L
yIT4,2
T\|Wn5
u{#ad\
]>uh=s
*\`,\|
Ha+#-aLq
Y(Q!@l
(%Kld,
U+%k!1
5\M|h\v,Q
A,$,}E
4DX[b,wU
\1kS)+
`1kcnod,
j|4<Q<E\t
6Vl4<,
T\w|p\q
CA4y#k
(c+&`<
RMC		D
I3k&cld,L
h]L\xc;
<l<3k$
(pTld<
+]P$%,$
us<l ]
xc|9Y(c
q+dD,	
2;cnhA{t
3;c;|D
x|4<H<+\G
L	B\L-
3C\H&C
ldldldl4
(qz;s{
Tld<t|4ME
d<t|DL
,^|@JD
englel4
~e,O_E
u|4L%.
%~E\6^
\M%E\Vu
\$,$|4
dldl4<
@S,$|DL
*NDLGN
dlg<ut4
v|ADK	
lfZa,#u
qG&,CG
T\$|Nc
UX1}4<N
a,g|w|
l=l<,||\
l=l<l<ll
H?F\n}
|t,T\I
|Od<87
1_e.a~
	g#w>.
y)9)9)
_xOx5H
\].1d.	
Vnf.&.
#4zEEH
WozYk}91
s/$,Lo
@)g<;:
2% yT>
Uk2$?k
K,qrTO
LGs&(A
3Rzm0A
.}XA:- !
w#yl5n
4Km2Gt
*?dy&n;
dq5,4l5
[8d#4)
]+*l/)m
?dok0a
AQabp/4
-\p9fA
<<52]\g3HYI
1r$(ml
 	;_A]
0d$2{B
*#0,`i
%!;D"+<
f	4n;+
L7)0LF
=l*s L
tn1:qn
P\fi$5
*xu7(M
;Ha1dC
%*<73y
UHm3z&
l.{r;i
}BCsIC@
C>+"#l
uEJ\ m
@l,-2)4~
xiA_$1a
\FYgyv
OE@HI@
dc86ec;
0-&`a+
=r'|zs
Y`|K	p
b5xytu
).<q/$	*
ld<t|4LD
8cl2)C
3<ry#|
TCL($CL
uZA?6e
	W8}s:
\]j8xy
m0q,$|
R=fu5~
WCI\EOP
:1p8<U
<G.AMP
6}9ld<
4LDLDL
|d<6l.
n@f y 
o{ {K+B
qLk<f|<,
D?4 dLd^
dL',l,
lw<@\$|6
u_%,e[E
=6[fp&
?a$Lq<
u<%TUb
k"nbl"
1.QjR)
``@H`t
d,$,$,
s	$ld,
|$,dl$
4TfZ}P
1H}IxW
4g!,Gv
IxWA!vpD
[;c+o 8
,?1T]n
<teld?@
'/9l?Q
d7	DGA
g!H$d/
<4<t+s9
`}uLTLD
K'G'!8V
$d6	gd
ffffffffffffffffffffffffffffffffffffffffffff)~
33333333333333333333333333333333333333333333;
>&ffffffffffffffffffffffffffffffffffffffffffb
>&ffffffffffffffffffffffffffffffffffffffffffb
>&ffffffffffffffffffffffffffffffffffffffffffb
>""""""""""""""""""""""""""""""""""""""""""""
>""""""""""""""""""""""""""""""""""""""""""""
"""""""""""""""""""""""""""""""""""""""""")
"""""""""""""""""""""""""""""""""""""""""")
"""""""""""""""""""""""""""""""""""""""""")
"""""""""""""""""""""""""""""""""""""""""")
33333333333333333333333333333333333333333333;
ffffffffffffffffffffffffffffffffffffffffffff)~
6///r???
;(((q~~~
PA<?xml version='1.0' encoding='UTF-8' standalone='yes'?>
<assembly xmlns='urn:schemas-microsoft-com:asm.v1' manifestVersion='1.0'>
  <trustInfo xmlns="urn:schemas-microsoft-com:asm.v3">
    <security>
      <requestedPrivileges>
        <requestedExecutionLevel level='asInvoker' uiAccess='false' />
      </requestedPrivileges>
    </security>
  </trustInfo>
</assembly>
PADPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPAD