Warning! We are currently in recovery mode. The complete archive is not available.

Sample details: 5249f9138e69786c8968231c2f50bd68 --

Hashes
MD5: 5249f9138e69786c8968231c2f50bd68
SHA1: 015b95e5db62d69b4073c7b9c0fbdff7c31edcf3
SHA256: 6fff7e1d30dff40dcdff1a89cba7cf794b25f6bbcb6a2c2b718561a6349c389c
SSDEEP: 12288:3FWC+qz9QNreIkJf/LmgXmsXCh6QIUwzo47pVEhBn7WHYQ9FM:3AC+qz+5kJbmUmsXmwIbn6HYCFM
Details
File Type: PE32
Yara Hits
YRP/VC8_Microsoft_Corporation | YRP/Microsoft_Visual_Cpp_8 | YRP/IsPE32 | YRP/IsConsole | YRP/HasDebugData | YRP/HasRichSignature | YRP/maldoc_find_kernel32_base_method_1 | YRP/domain | YRP/IP | YRP/url | YRP/contentis_base64 | YRP/System_Tools | YRP/Misc_Suspicious_Strings | YRP/DebuggerCheck__QueryInfo | YRP/DebuggerException__SetConsoleCtrl | YRP/Check_OutputDebugStringA_iat | YRP/anti_dbg | YRP/inject_thread | YRP/create_service | YRP/cred_local | YRP/spreading_share | YRP/win_mutex | YRP/win_registry | YRP/win_token | YRP/win_files_operation | YRP/Big_Numbers0 | YRP/Big_Numbers1 | YRP/Advapi_Hash_API | YRP/MD5_API | YRP/Powerkatz_DLL_Generic | YRP/with_sqlite | FlorianRoth/Powerkatz_DLL_Generic |
Source
http://download234hkl.com/mimikatz.exe
Strings
		!This program cannot be run in DOS mode.
`.rdata
@.data
.gfids
@.rsrc
@.reloc
VWhkiwih
PPPFVh
tSWWWh
\SUVW3
D$HPVU
D$\VPU
od9oht
ol9opt
A@C^_]
9~ht29~dt-9~`t(
PQQSUh
v$SUhh
v4SUh<
vLSUhp
v$SUhp
QSUVWjTj@
PQQUSh
v,USh<
KSSMVW9i
s*j j@
9^8t>9^4v4
t%SUh\
t%SUh|
t$(WUV
!9|$,t
_^][YY
D$dj\P
T$XPj@
D$$PVVU
L$ WPU
l$09t$L
Bt$LVS
D$(PSSS
D$8PSSSW
L$DQPSSSW
\$(Sj@
QQUVWj
QSUVW3
QSUVWh
taVSVVj
v,SWhP
PQQSWh
v8SWh0
vdUWhH
Y_^][Y
t5j(j@
PQQWSh
PQQWSh
SUVWj$j@
vhSWhX
tejPj@
PQQSUh
v SUh,
v$SUhd
PQQSUh
SUVWj@j6P
D$|j\P
D$DPj@
L$$Uj@
ED$(PQ
D$$PSW
l$,VW3
9|$Ltx9|$Ptr
t$HPj@
L$(UPj
0SUVWh
D$$PWW
L$LPj@
QQSUV3
FYY;t$
l$ Pj@
f9*t,S
|$497v
9\$0u5
QQSUVWjHj@
v SWhh
_^][YY
90uz93t
90u8VVS
u?VVVV
tQVVVj
90t3VVVj
8MDMPu
LSUVWj	
9D$8rIw
;l$(rA9T$
D$8;D$4r
T$H;T$du
SUVWj	
9T$ rlw
9D$ w3r
9t$$s+
D$(+D$$
9T$ w]r
;D$Ts.
!\$ !\$(
@s j@Z
t$`Vh8
$SUVWjD[S3
t$hWWWUWW
t$hWWWUW
l$0B;V
+7FVj@
f9D$Xu
9regfu;9y
9hbinu(
uq9|$ 
qLt:;u
D$(9L$T
D$8UUUj
3UUUUU
@_^][Y
l$09\$4t
9\$(tj
u(9\$Ht3
uUPPh0
t4USh$
t/UUhd
Y_^][YY
j hH*K
FVSSSS
j hh*K
QQSVWj
D$PPSSSSSSSSj
;D$ }-
t$@uRj
L$\QPSVO
QQSUVW
T$(9|$
9t$4tYk
R9|$$uL;
YY_^][
_^][YY
QSUVW3
QSUVW3
QSUVW3
QSUVW3
QQSUV3
WWhh.I
_^][YY
l$(VW;U4
T$@;U4
D$@PSV
L$4QVP
=SVWQj
;V@u	;~D
~<9~$t%
;~0u	;^4
9F@v59F(u
3Wj	Y3
</t<<\t8
9^4u-9^(u	
tK9~,v3U
^,_^[YY
9w,v8S
9sh~&3
jeX_^][
OP9T$ |
[ ;~h|
9^,t68^
!nP!nT
!n<!n0
9D$4u5
;CXwq3
jeX_^][
9D$$ty
9l$(ts9l$(|
K@99tA
L$$QPR3
D$ 9l$4u#
9|$ u:
FD98u^
D$0YY;\$ 
D$,;D$0
@4;X$v
;D$$|6;L$$~
L$4_^f
D$4YY;D$ 
;\$ ~2
_^][YY
o,_^][
_^][YY
D$,;G8~*
u%8FBu
D$4;L$D
T$@;L$D| 
DFPf;B
DFPf;B
DAPf;F
@8^DtE
FDf9\FPt
_^][YY
T$(;|$,}	
;t$ rA;t$
l$,CG;|$(|
D$ ;D$
t$,UVP
L$4xO;
YY_^][
_^][YY
\$<v'j
Vf9,Vr
l$Lf9\}
T$dG;|$(
f9D$$u
5;t$4}
L$8@f+
t$Xf9^
l$(9NH
VW;U,v
t$0PVj
}uj [;
_^][YY
_^][YY
1F`_^][
GPko@(
YY_^][Y
59^Pt0
&#G8_^[
\$\UVW
L$$;L$
\$0+\$4
\$4+\$0
|$ j4Y
C`3E`%
f;CD}I3
_^][YY
(+l$Lj
$G<Cr:j
f3D$DY
f1D$@j
f3D$`Y
T$$F;t$D|
9L$4st!GP!GH
D$T;GDu
;|$(t	
Y;l$Dv
D$`PQQQ
|$0RS3
v,hL2I
v,+l$P
aa !"aa#$%&'()*+,-./01234567aa89:;<a=>?@AABBCDEFaGHIIJKLMNNOPQQRSSTUVWWaXaYZaa[aaa\]^_`QV
QQSUVW
_^][YY
C _^][Y
_^][YY
w$_^][
QQSUVW
VD_^][
@_^][Y
D$49A0
@*@u@3
D$H;;|
|$(h@4I
	G8	O<
	D;@	L;D
t$(ht5I
D$,WVQP
D$(hT6I
YY_^][
@f	D$T
D$,;D$
phh,7I
YY_^][
T$$@j0
f9A }%
YY_^][
D$ _^][Y
T$$Sj%V
j WPSj#V
L$@WSj
Xt4jdZ;
T$ YWP
L$(VPj,Z
C f;G 
@_^][YY
W,;*|z
E f;F t
@_^][Y
UUUjIZ
QQSUVW
f;G"}-
)_^][Y
PVPjpZ
SSSjmZ
C"@;Ed~
t$<SUU
D$0SPj3Z
Ef;n2s?
u7f;G"}1
F4_^][
D$@ t;
PPPjmZ
D$$@jgZ
t$4j`Z
t$ h4:I
L$4QRP
t$8j{Z
t$,VjgZ
t$ j5Z
t$$juZ
SSVjmZ
SSUjmZ
D$$8FE
D$`X;I
D$LPj3Z
9W(u!R
D$@_^[
YY_^][
\$,9^(t
f;F2sK
T$89ND
@* u)3
FLPQjMZ
t$`jYZ
t$8j|Z
t$XWj&Z
t$8j7Z
t$8jwZ
t$Pj<Z
u	9|$L
T$(QQP
t$`jUZ
t$8jsZ
th;|$4tb
L$ PRWj}Z
t,9w$t$
l$0f;,p
Xf9D$0uU
;L$ |/
;\$4u!
D$(Pj2
D$(Pj2
L$ +|$ 
SVWj Z
f;F4s\3
t$$j_Z
YY_^][
F9s ~6
t 9H0u
t$\j`Z
t$,jpZ
t$,jqZ
t$lhT@I
t$pht@I
t$,j^Z
t$$QjpZ
t$$PjR
L$<QjpZ
L$(f;G"
D$T;D$htej
D$Pt(3
D$4;D$D}
|$0;l$<
t$tj3Z
9F$t4P
T$<f;N4
9L$Ht/
t$4j`Z
G* uwj
t$(j!Z
f;A2sB
t$0j^Z
D$$Y;D$,t
L$D_^]
O"PQRj`Z
_^][YY
s,RjgZ
D$$!|$
t)hhNH
D$LHAI
GB9D$Dt/
Af	HN3
QQSUVW3
t};_`~/h,BI
^@8_Et
tChlBI
t$ h@BI
f;B"}o
t$,j]Z
D$H@Pj
t$4j`Z
t$8Uj 
t$\Uj!Z
PRVjRZ
D$\Vj`Z
t$PFPVj1Z
t$H@Pj|Z
L$D;l$T|
t$,Vj`Z
L$<t2j
t$ jlZ
t$$Qj6Z
t$DjpZ
t$DjqZ
t$(9.t
H;D$ |
<9r0t7
498t	B
A(_^][
UUUjEZ
QQSUVW
_^][YY
D$4(EI
D$(;t$P|
t$Qj3Z
t$<h,EI
T$T9D$D
s(9{,~2
L$,;O,
D$T9uD
|$0jBXf9C
t$$j`Z
t$|j{Z
VPRjlZ
t$|j5Z
t$|jvZ
t$pj]Z
t$p@Pj
t$<j@Z
t$pj@Z
@WWPjFZ
YYWWPj
D$T9ND
D$ ;D$$|
t$\PjMZ
D$\@jMZ
t$XjiZ
t$$j`Z
t$Xj|Z
FLQPQjJZ
D$0+D$p
ED$0Pj
t$Xj7Z
t$XjwZ
t$(j&Z
t$`j<Z
t$$j3Z
f;C"}X
t$4jRZ
t$(j&Z
t$$j3Z
SSPjmZ
GL#J(#B,
D$Dj4X
9t$ v"
PVSj^Z
F;t$ |
L$ PjSZ
AF;t$(
F$ tl9
YY_^][Y
@UPUjJ
wLVQQS
t$ j7Zj4Y
j"^j$X
j%Xj#Y
UVPjyZ
GLR@PQjJ
l$`f9D$\v
D$4UPUjMZ
L$Tf9i$}I
t$,j3Z
T$$9T$
T$tf;H2sD
t$,j^Z
t$(j&Z
B,#KH#CL
D$d9+t
D$hf	B
L$pUj0
F,#KH#CL
D$pf	F
T$TYYE
SL_^][
@_^][Y
f;F2s43
N$#L$$
f#D$(f
D$@f#D$(f
D$,	F$_^[
QQSUVW
t$$j!Z
@_^][Y
t$ 9>u
A f;FHu?
f9H |yB
f;F2sE
#M #E$
G(X	G$
L$Pf@f
f;F2sB3
F0f;A(
D$8;t$
L$0PPU
D$,;\$8
f9G |K
}2f9B*u,
E;l$x}$3
T$HUVW
L$(PWQ
D$pj0Y
\$D97u
D$df9G
;l$H|$
D$0f9D$,
D$|_^][
L$ WUj
#E8#U<
|$df	^$
T$@#D$`
jfY8^(t
8^(u;j@Xf9G"}2
W9r0t;
SRRj3Z
URRj3Z
D$$9D$
Y_^][Y
F8#F4^
u$VhTKI
D$ Y_^]
t1f9|$
t*f9|L
t$(Yf;
PQh0PI
t#h`PI
PQh0PI
t#h`PI
t h|PI
PQh0PI
t#h`PI
PQh0PI
PQh0PI
D$$PSS
PPh XI
PPh0XI
D$(PVW3
t$(Vh@YI
jLXPj@f
tSj{Yf
VPhTYI
VPhL\I
PVhp\I
VPh\_I
D$0VPhHTI
VPhL\I
VVh XI
YY9t$$t
Y9t$ t
t"h\dI
QSUVWh
u 9t$ tR
u 9t$ tK
unj$j@
UUh hI
UUhXhI
UUhxiI
?;T$ s
PVhPlI
YPhxmI
YPh8oI
YPhppI
WPh|UI
L$tWPh
O8h(xI
;RSA2Yu
O@hHyI
RSA2Yu
N<h${I
D$(PSS
D$ PSS
ElPj(Z
L$$SV3
SUVWjd3
Y9t$$t
Y9t$4tH
FYY;t$ r
DD$pPh
pSUVWjd3
SPhL\I
YYjdj@
f9D$$u
QQSUVW
_^][YY
@SUVWj
D$dQj@
u#j(j@
QQSUVW
QSVWh(
WWVh67D
j XjHY
D$$SRP
D$(PWj
L$(QPj
D$,PWj$
D$,PSj$
YY_^][
t$$USh
|$4f9/
D$,PVV
D$$YYP
t$$Phh
|$4f9/
D$\2QD
D$`EQD
D$dXQD
D$lkQD
YY9l$(t99l$,t3h
T$T9l$0t99l$4t
Y9l$0t"9l$4t
YY_^][
SPhL\I
D$|j P
QQSVWR
]_^[YY
tFVPSUh
t$ UVWj
_^][YY
D$DjlUP
s(YYh@
j\h(+K
t<VSj 
t+VSj 
D$DQSS
t2QSSS
GD;G@t
GD;G@t
T$$RVP
l$(9l$,
l$(;l$,
l$DUj@
D$$PS3
L$0SUVh
L$ SUVW3
L$0UPh
WUht5J
t$<h\6J
SWht5J
,SUVWj
0SUVW3
QPPPQPPQ
D$0h0:J
QVVVQP
D$DPQVV
L$$9L$(
D$,PVQ
L$$;L$(
PQh|@J
j/htnH
j)h(nH
D$HhLCJ
t&hdCJ
D$(PVUh
QUUUQP
D$@PQUU
D$@PVU
t$Lh,EJ
t$LhHEJ
YE;l$$
lSUVWj
D$HPQUUQUU
D$LPSQ
tXhXGJ
9t$@tS
l$LPj@
l$LPj@
D$$WWP
E<PWWW
D$xAAAA
t$(h0PJ
D$<Pjd
9|$<v-3
G;|$<r
\$(UVW
SSh`SJ
Y9n$txf9nDt
FdhlUJ
PQhDYJ
t$,UQh
9|$(tZh$[J
|SUVWj
YYh@^J
L$(UUh
D$$UPh
SSh$`J
SSh,`J
t$,hPeJ
t$(hleJ
SPhL_J
SShL_J
SUVWhx
Y9+v'h`
D$,PhlnH
D$,PhhoH
_^][YY
D$ -\|/
D$HPh4
D$PPh4
D$|PPj
T$0QWWWWQ
t$ hxlJ
D$ThmJ
D$XAAAA
D$dpmJ
D$hBBBB
D$t|mJ
D$hJJJJ
D$xKKKK
t$0Vh8
t"h,tJ
0VhHuJ
D$@AAAAh:
D$TBBBB
t$$h xJ
|$T9|$\
t$L9t$P
9t$Hv`
YYF;t$Hr
YYF;t$
YYF;t$
t$L;t$P
t$X;|$\
t$09t$8
9t$$v`
YYF;t$$r
\$4;t$8
l$09l$8
F;t$ r
\$4;l$8
PPPPQP3
90t?9w
[@YY;w
GYY;|$
j$hX+K
D$8PVV
D$ 9L$$VPV
t$8VVV
L$,UUhd
j8hx+K
VPhTYI
D$$PSU
$SUVW3
UVWPj8
j?XjLY
Pj XjRZ
Pj XjEZ
Pj XjDY
D$ Pj 
D$PPh0
D$PPhL
|$495t
\$89\$@
L$,9L$
9~,v13
 G;~,r
9~0v-3
 G;~0r
t$<;\$@
YY_^][
D$,95l
t$xUh8
D$ PUV
t$8UWVh
Y9\$dv
CYY;\$dr
DSUVW3
9T$ vI
*B;T$ r
YYF;t$8
D$$Pj	Z
xvSSh8
x[Sj h
D$0;L$4
D$,;D$4
D$(_^][
D$LPj8
D$$PSj
D$(YYf
tISQSS
L$xj Q
L$ ;L$$
\$4UVW
vDh`#K
SVWjdj@
u,RRRh
u0VVVh
;D$,u=
;D$0u4
URPQQh
;t$,v-
UQPXY]Y[
Tt1jhZ;
Tt1jhZ;
^$+^8+
t	j-Xf
t0jXXf
~$+~8+
t	j-Xf
t0jXXf
~$+~8+
F2jgYf;
SVWjA_jZ+
uBjAYjZ+
u0jAXf;
u0jAXf;
<xt"<Xt
<et	<pu
Nj)[f9
u-jAXf;
tr;},sm
W8^.u:
W8^0u:
W8^.u:
W8^0u:
rr	jrZ
rr	jrZ
u-jAXj
Tt.jh^;
SVjA[jZ^+
jAZjZ^
j"^f91j\^u8
j"^f9q
t/j=[f;
QSSSSj
Wj0XPV
QQSWj0j@
QQQWPQ
taj*Xf
VWj\^j:
WWWPWS
SSVWh 
f9:t!V
|VWj=S
}VWj=S
tl=(wK
PPPPPWS
PP9E u:PPVWP
>:uBFV
PPPPPPPP
mSjA[jZ^+
8jZZf;
D8(HXt:f
D8(Ht5F
v!j"X_^[
v	N+D$
v	N+D$
VC20XC00U
bcrypt.dll
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
ncrypt.dll
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
InitializeCriticalSectionEx
__based(
__cdecl
__pascal
__stdcall
__thiscall
__fastcall
__vectorcall
__clrcall
__eabi
__ptr64
__restrict
__unaligned
restrict(
 delete
operator
`vftable'
`vbtable'
`vcall'
`typeof'
`local static guard'
`string'
`vbase destructor'
`vector deleting destructor'
`default constructor closure'
`scalar deleting destructor'
`vector constructor iterator'
`vector destructor iterator'
`vector vbase constructor iterator'
`virtual displacement map'
`eh vector constructor iterator'
`eh vector destructor iterator'
`eh vector vbase constructor iterator'
`copy constructor closure'
`udt returning'
`local vftable'
`local vftable constructor closure'
 new[]
 delete[]
`omni callsig'
`placement delete closure'
`placement delete[] closure'
`managed vector constructor iterator'
`managed vector destructor iterator'
`eh vector copy constructor iterator'
`eh vector vbase copy constructor iterator'
`dynamic initializer for '
`dynamic atexit destructor for '
`vector copy constructor iterator'
`vector vbase copy constructor iterator'
`managed vector copy constructor iterator'
`local static thread guard'
operator "" 
 Type Descriptor'
 Base Class Descriptor at (
 Base Class Array'
 Class Hierarchy Descriptor'
 Complete Object Locator'
`h````
xpxxxx
`h`hhh
xwpwpp
(null)
[aOni*{
~ $s%r
@b;zO]
v2!L.2
IND)ind)S
CorExitProcess
NAN(SNAN)
nan(snan)
NAN(IND)
nan(ind)
Sunday
Monday
Tuesday
Wednesday
Thursday
Friday
Saturday
January
February
August
September
October
November
December
MM/dd/yy
dddd, MMMM dd, yyyy
HH:mm:ss
CompareStringEx
GetCurrentPackageId
GetDateFormatEx
GetTimeFormatEx
LCMapStringEx
LocaleNameToLCID
SystemFunction036
 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
1#QNAN
1#SNAN
?5Wg4p
"B <1=
_hypot
_nextafter
%04hu%02hu%02hu%02hu%02hu%02huZ
onoffalseyestruextrafull
0123456789ABCDEF0123456789abcdef
******""""""""""""""""""""
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@3.13.0
BINARY
  !!""##$$%%&&''(())**++,,--..//00112233445566778899
 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
0123456789ABCDEF
naturaleftouterightfullinnercross
thstndrd
&&					
	&&&&&&&&&&	
 !"#$%
'()*+,-./0133
 !"#$%
'()*+,-./01+,-./019
 !"#$%
'()*+,-./01f
 !"#$%P'()*+,-./01
 !"#$%j'()*+,-./01
 !"#$%
'()*+,-./01
 !"#$%
'()*+,-./01
 !"#$%B'()*+,-./01
 !"#$%
'()*+,-./01
 !"#$%
'()*+,-./01
 !"#$%n'()*+,-./01
 !"#$%3'()*+,-./01
 !"#$%
'()*+,-./01
fghijkl+,-
34s234+,
|+,2343
234"#$%&'()*+,-./01'()*+,-./01
de01h{
b3dedbhde
"#$%d'()*+,-./01
SQLite format 3
3333333333333333333333333333333333333333333333
abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789
CONSTRAINTOFFSETABLEFTHENDESCAPELSELECTRANSACTIONATURALLIKEYSAVEPOINTEMPORARYWITHOUTERELEASEXCLUSIVEXISTSBEGINDEXEDELETEBETWEENOTNULLIMITCASECOLLATECREATECURRENT_DATEGROUPDATEIGNORECURSIVEIMMEDIATEJOINNEREGEXPRIMARYMATCHECKVALUESWHENWHEREPLACEABORTANDEFAULTASCOMMITCONFLICTCROSSCURRENT_TIMESTAMPDEFERREDISTINCTDROPFAILFROMFULLGLOBYHAVINGIFINSERTISNULLORDERIGHTROLLBACKUNIQUEUSING
0123456789012345678901234567890123456789
!@#$%^&*()qwertyUIOPAzxcvbnmQQQQQQQQQQQQ)(*@&%
NTPASSWORD
LMPASSWORD
012345678.F? !!
1.2.840.113556.1.4.90
1.2.840.113556.1.4.94
1.2.840.113556.1.4.55
1.2.840.113556.1.4.160
1.2.840.113556.1.4.125
1.2.840.113556.1.4.129
1.2.840.113556.1.4.135
1.2.840.113556.1.4.27
%H:%M:%S
current_time
%Y-%m-%d
current_date
%Y-%m-%d %H:%M:%S
current_timestamp
failed to allocate %u bytes of memory
failed memory resize %u to %u bytes
(NULL)
922337203685477580
API call with %s database connection pointer
unopened
invalid
AreFileApisANSI
CharLowerW
CharUpperW
CloseHandle
CreateFileA
CreateFileW
CreateFileMappingA
CreateFileMappingW
CreateMutexW
DeleteFileA
DeleteFileW
FileTimeToLocalFileTime
FileTimeToSystemTime
FlushFileBuffers
FormatMessageA
FormatMessageW
FreeLibrary
GetCurrentProcessId
GetDiskFreeSpaceA
GetDiskFreeSpaceW
GetFileAttributesA
GetFileAttributesW
GetFileAttributesExW
GetFileSize
GetFullPathNameA
GetFullPathNameW
GetLastError
GetProcAddressA
GetSystemInfo
GetSystemTime
GetSystemTimeAsFileTime
GetTempPathA
GetTempPathW
GetTickCount
GetVersionExA
GetVersionExW
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
HeapSize
HeapValidate
HeapCompact
LoadLibraryA
LoadLibraryW
LocalFree
LockFile
LockFileEx
MapViewOfFile
MultiByteToWideChar
QueryPerformanceCounter
ReadFile
SetEndOfFile
SetFilePointer
SystemTimeToFileTime
UnlockFile
UnlockFileEx
UnmapViewOfFile
WideCharToMultiByte
WriteFile
CreateEventExW
WaitForSingleObject
WaitForSingleObjectEx
SetFilePointerEx
GetFileInformationByHandleEx
MapViewOfFileFromApp
CreateFile2
LoadPackagedLibrary
GetTickCount64
GetNativeSystemInfo
OutputDebugStringA
OutputDebugStringW
GetProcessHeap
CreateFileMappingFromApp
InterlockedCompareExchange
UuidCreate
UuidCreateSequential
FlushViewOfFile
OsError 0x%lx (%lu)
os_win.c:%d: (%lu) %s(%s) - %s
delayed %dms for lock/sharing conflict at line %d
winSeekFile
winClose
winRead
winWrite1
winWrite2
winTruncate1
winTruncate2
winSync1
winSync2
winFileSize
winUnlockReadLock
winUnlock
winUnmapfile1
winUnmapfile2
winMapfile1
winMapfile2
etilqs_
winGetTempname1
winGetTempname2
winGetTempname3
winGetTempname4
winGetTempname5
winOpen
winDelete
winAccess
%s%c%s
winFullPathname1
winFullPathname2
winFullPathname3
winFullPathname4
win32-longpath
recovered %d pages from %s
-journal
nolock
immutable
out of memory
%!.15g
%s-mjXXXXXX9XXz
MJ delete: %s
MJ collide: %s
-mj%06X9%02X
API called with finalized prepared statement
API called with NULL prepared statement
string or blob too big
unable to use function %s in the requested context
bind on a busy prepared statement: [%s]
NOT NULL
UNIQUE
FOREIGN KEY
%s constraint failed
%z: %s
abort at %d in [%s]: %s
cannot open savepoint - SQL statements in progress
no such savepoint: %s
cannot release savepoint - SQL statements in progress
cannot commit transaction - SQL statements in progress
cannot start a transaction within a transaction
cannot rollback - no transaction is active
cannot commit - no transaction is active
database schema has changed
sqlite_master
SELECT name, rootpage, sql FROM '%q'.%s WHERE %s ORDER BY rowid
statement aborts at %d: [%s] %s
misuse of aliased aggregate %s
no such column
ambiguous column name
%s: %s.%s.%s
%s: %s.%s
%s: %s
partial index WHERE clauses
index expressions
%s prohibited in %s
the "." operator
functions
second argument to likelihood() must be a constant between 0.0 and 1.0
non-deterministic functions
misuse of aggregate function %.*s()
no such function: %.*s
wrong number of arguments to function %.*s()
subqueries
parameters
%r %s BY term out of range - should be between 1 and %d
too many terms in ORDER BY clause
%r ORDER BY term does not match any column in the result set
too many terms in %s BY clause
a GROUP BY clause is required before HAVING
aggregate functions are not allowed in the GROUP BY clause
Expression tree is too large (maximum depth %d)
variable number must be between ?1 and ?%d
too many SQL variables
too many columns in %s
_ROWID_
oversized integer: %s%s
misuse of aggregate: %s()
unknown function: %s()
%s %T cannot reference objects in database %s
no such table
corrupt database
unknown database %T
sqlite_
object name reserved for internal use: %s
table %T already exists
there is already an index named %s
too many columns on %s
duplicate column name: %s
default value of column [%s] is not constant
table "%s" has more than one primary key
INTEGER
CREATE TABLE 
AUTOINCREMENT not allowed on WITHOUT ROWID tables
PRIMARY KEY missing on table %s
CREATE %s %.*s
UPDATE %Q.%s SET type='%s', name=%Q, tbl_name=%Q, rootpage=#%d, sql=%Q WHERE rowid=#%d
tbl_name='%q' AND type!='trigger'
sqlite_stat%d
DELETE FROM %Q.%s WHERE %s=%Q
DELETE FROM %Q.%s WHERE tbl_name=%Q and type!='trigger'
sqlite_stat
table %s may not be dropped
cannot create a TEMP index on non-TEMP table "%s"
altertab_
table %s may not be indexed
there is already a table named %s
index %s already exists
sqlite_autoindex_%s_%d
expressions prohibited in PRIMARY KEY and UNIQUE constraints
conflicting ON CONFLICT clauses specified
 UNIQUE
CREATE%s INDEX %.*s
INSERT INTO %Q.%s VALUES('index',%Q,%Q,#%d,%Q);
name='%q' AND type='index'
no such index: %S
index associated with UNIQUE or PRIMARY KEY constraint cannot be dropped
DELETE FROM %Q.%s WHERE name=%Q AND type='index'
a JOIN clause is required before %s
index '%q'
%s.rowid
duplicate WITH table name: %s
no such collation sequence: %s
table %s may not be modified
rows deleted
integer
integer overflow
LIKE or GLOB pattern too complex
ESCAPE expression must be a single character
%!.20e
unlikely
likelihood
likely
typeof
length
printf
unicode
ifnull
random
randomblob
nullif
sqlite_version
sqlite_source_id
sqlite_log
last_insert_rowid
changes
total_changes
replace
zeroblob
substr
group_concat
coalesce
table %S has no column named %s
table %S has %d columns but %d values were supplied
%d values for %d columns
rows inserted
automatic extension loading failed: %s
malformed database schema (%s)
%z - %s
create 
invalid rootpage
CREATE TABLE x(type text,name text,tbl_name text,rootpage integer,sql text)
attached databases must use the same text encoding as main database
unsupported file format
SELECT name, rootpage, sql FROM "%w".%s ORDER BY rowid
statement too long
unknown or unsupported join type: %T %T%s%T
RIGHT and FULL OUTER JOINs are not currently supported
a NATURAL join may not have an ON or USING clause
cannot have both ON and USING clauses in the same join
cannot join using column %s - column not present in both tables
UNION ALL
INTERSECT
EXCEPT
column%d
%.*z:%u
all VALUES must have the same number of terms
SELECTs to the left and right of %s do not have the same number of result columns
no such index: %s
'%s' is not a function
multiple references to recursive table: %s
circular reference: %s
table %s has %d values for %d columns
multiple recursive references: %s
recursive reference in a subquery: %s
too many references to "%s": max 65535
%s.%s.%s
no such table: %s
no tables specified
too many columns in result set
DISTINCT aggregates must have exactly one argument
no such column: %s
rows updated
BINARY
too many arguments on %s() - max %d
no query solution
at most %d tables in a join
too many terms in compound SELECT
syntax error after column name "%.*s"
parser stack overflow
unknown table option: %.*s
set list
near "%T": syntax error
too many arguments on function %T
unrecognized token: "%T"
2016-05-18 10:57:30 fc49f556e48970561d7ab6a2f24fdd7d9eb81ff2
unable to close due to unfinalized statements or unfinished backups
not an error
SQL logic error or missing database
access permission denied
callback requested query abort
database is locked
database table is locked
attempt to write a readonly database
interrupted
disk I/O error
database disk image is malformed
unknown operation
database or disk is full
unable to open database file
locking protocol
table contains no data
constraint failed
datatype mismatch
library routine called out of sequence
large file support is disabled
authorization denied
auxiliary database format error
bind or column index out of range
file is encrypted or is not a database
unknown error
abort due to ROLLBACK
unable to delete/modify user-function due to active statements
unable to delete/modify collation sequence due to active statements
localhost
invalid uri authority: %.*s
shared
private
memory
access
no such %s mode: %s
%s mode not allowed: %s
no such vfs: %s
NOCASE
%s at line %d of [%.10s]
database corruption
misuse
cannot open file
ncrypt.dll
bcrypt.dll
logins
select signon_realm, origin_url, username_value, password_value from logins
cookies
select host_key, path, name, creation_utc, expires_utc, encrypted_value from cookies order by host_key, path, name
select count(*) from sqlite_master where type='table' and name=?
Hj1diQ6kpUx7VC4m
6jnkd5J3ZdQDtrsu
xT5rZW5qVVbrvpuA
Kerberos
t{{t{i}t{i}t{
{t{{t{i}t{
t{{t{{{t{
}}}}}}
}t{{t{i}t{o}}}t{
t{{{t{i}t{
{{t{i}t{o}}}
{t{i}t{{
{t{i}t{o}}
CPExportKey
<root>
CardAcquireContext
mimikatz
1.3.6.1.4.1.311.20.2.3
2.5.29.17
2.5.29.15
2.5.29.37
2.5.29.14
2.5.29.35
2.5.29.31
2.5.29.19
1.2.840.113549.1.1.5
2.5.4.3
2.5.4.11
2.5.4.10
2.5.4.6
1.3.14.3.2.29
1.3.6.1.5.5.7.3.2
1.3.6.1.4.1.311.20.2.2
CPGenKey
CPDeriveKey
CPDestroyKey
CPSetKeyParam
CPGetKeyParam
CPImportKey
CPEncrypt
CPDecrypt
CPDuplicateKey
SamIConnect
SamrCloseHandle
SamIRetrievePrimaryCredentials
SamrOpenDomain
SamrOpenUser
SamrQueryInformationUser
SamIFree_SAMPR_USER_INFO_BUFFER
VirtualAlloc
memcpy
LocalAlloc
1.2.840.113556.1.4.1
1.2.840.113556.1.4.221
1.2.840.113556.1.4.656
1.2.840.113556.1.4.302
1.2.840.113556.1.4.8
1.2.840.113556.1.4.159
1.2.840.113556.1.4.96
1.2.840.113556.1.4.146
1.2.840.113556.1.4.609
1.2.840.113556.1.4.133
fwprintf
fclose
SystemParametersInfoW
NtQuerySystemInformationEx
VaultEnumerateItemTypes
VaultEnumerateVaults
VaultOpenVault
VaultGetInformation
VaultEnumerateItems
VaultCloseVault
VaultFree
VaultGetItem
LsaICancelNotification
LsaIRegisterNotification
Primary
CredentialKeys
.text$mn
.idata$5
.00cfg
.CRT$XCA
.CRT$XCAA
.CRT$XCZ
.CRT$XIA
.CRT$XIAA
.CRT$XIAC
.CRT$XIC
.CRT$XIZ
.CRT$XPA
.CRT$XPX
.CRT$XPXA
.CRT$XPZ
.CRT$XTA
.CRT$XTZ
.rdata
.rdata$zzzdbg
.rtc$IAA
.rtc$IZZ
.rtc$TAA
.rtc$TZZ
.xdata$x
.didat$2
.didat$3
.didat$4
.didat$6
.didat$7
.idata$2
.idata$3
.idata$4
.idata$6
.didat$5
.gfids$x
.gfids$y
.rsrc$01
.rsrc$02
BCryptFreeBuffer
BCryptEnumRegisteredProviders
BCryptEncrypt
BCryptDestroyKey
BCryptGetProperty
BCryptDecrypt
BCryptOpenAlgorithmProvider
BCryptCloseAlgorithmProvider
BCryptSetProperty
BCryptGenerateSymmetricKey
NCryptExportKey
NCryptImportKey
NCryptFreeBuffer
NCryptOpenStorageProvider
NCryptEnumKeys
NCryptOpenKey
NCryptGetProperty
NCryptFreeObject
NCryptSetProperty
CryptReleaseContext
CryptGenKey
CryptGetProvParam
CryptGetHashParam
CryptImportKey
CryptSetKeyParam
CryptDestroyHash
CryptSetHashParam
CryptHashData
CryptCreateHash
CryptExportKey
CryptDecrypt
SystemFunction007
CryptDuplicateKey
CryptEncrypt
CryptAcquireContextW
CryptGetKeyParam
CryptAcquireContextA
CryptDestroyKey
GetLengthSid
CopySid
LsaClose
LsaOpenPolicy
LsaQueryInformationPolicy
CreateWellKnownSid
CreateProcessAsUserW
CreateProcessWithLogonW
RegQueryValueExW
RegEnumValueW
RegOpenKeyExW
RegSetValueExW
RegEnumKeyExW
RegQueryInfoKeyW
RegCloseKey
SystemFunction032
ConvertSidToStringSidW
QueryServiceObjectSecurity
QueryServiceStatusEx
BuildSecurityDescriptorW
OpenServiceW
StartServiceW
FreeSid
ControlService
SetServiceObjectSecurity
DeleteService
AllocateAndInitializeSid
OpenSCManagerW
CloseServiceHandle
CreateServiceW
IsTextUnicode
GetTokenInformation
LookupAccountNameW
LookupAccountSidW
DuplicateTokenEx
CheckTokenMembership
OpenProcessToken
ConvertStringSidToSidW
LsaFreeMemory
SystemFunction006
CryptEnumProviderTypesW
CryptEnumProvidersW
CryptSetProvParam
CryptGetUserKey
OpenEventLogW
ClearEventLogW
GetNumberOfEventLogRecords
SystemFunction025
LsaRetrievePrivateData
LsaOpenSecret
LsaQueryTrustedDomainInfoByName
LsaQuerySecret
SystemFunction001
SystemFunction005
GetSidSubAuthority
SystemFunction013
GetSidSubAuthorityCount
LsaEnumerateTrustedDomainsEx
LookupPrivilegeValueW
StartServiceCtrlDispatcherW
RegisterServiceCtrlHandlerW
SetServiceStatus
IsValidSid
OpenThreadToken
SetThreadToken
LookupPrivilegeNameW
CredFree
CredEnumerateW
ADVAPI32.dll
CertAddEncodedCertificateToStore
CertFreeCertificateContext
CertCloseStore
PFXExportCertStoreEx
CertSetCertificateContextProperty
CertOpenStore
CryptUnprotectData
CryptBinaryToStringW
CryptStringToBinaryW
CryptProtectData
CryptAcquireCertificatePrivateKey
CryptExportPublicKeyInfo
CertEnumSystemStore
CertAddCertificateContextToStore
CryptSignAndEncodeCertificate
CertEnumCertificatesInStore
CertNameToStrW
CryptEncodeObject
CertFindCertificateInStore
CertGetNameStringW
CertGetCertificateContextProperty
CRYPT32.dll
CDLocateCheckSum
MD5Init
MD5Update
MD5Final
CDLocateCSystem
CDGenerateRandomBits
cryptdll.dll
DsGetDcNameW
NetApiBufferFree
NetWkstaUserEnum
NetShareEnum
NetStatisticsGet
NetSessionEnum
NetRemoteTOD
NetServerGetInfo
NETAPI32.dll
CoCreateInstance
CoUninitialize
CoInitializeEx
ole32.dll
OLEAUT32.dll
RpcBindingInqAuthClientW
RpcBindingSetOption
RpcBindingFromStringBindingW
RpcStringBindingComposeW
RpcBindingSetAuthInfoExW
RpcStringFreeW
MesHandleFree
RpcImpersonateClient
RpcRevertToSelf
MesEncodeIncrementalHandleCreate
MesDecodeIncrementalHandleCreate
RpcBindingFree
MesIncrementalHandleReset
NdrMesTypeEncode2
NdrMesTypeDecode2
NdrMesTypeFree2
NdrMesTypeAlignSize2
I_RpcBindingInqSecurityContext
NdrClientCall2
NdrServerCall2
UuidCreate
RpcBindingVectorFree
RpcMgmtEpEltInqBegin
RpcMgmtEpEltInqDone
RpcServerUseProtseqEpW
RpcServerUnregisterIfEx
RpcBindingToStringBindingW
RpcServerRegisterIf2
RpcMgmtEpEltInqNextW
RpcEpResolveBinding
RpcServerListen
RpcServerRegisterAuthInfoW
RpcEpUnregister
RpcEpRegisterW
RpcServerInqBindings
RpcMgmtStopServerListening
RPCRT4.dll
PathCombineW
PathCanonicalizeW
PathIsRelativeW
PathFindFileNameW
PathIsDirectoryW
SHLWAPI.dll
SamEnumerateUsersInDomain
SamLookupNamesInDomain
SamOpenDomain
SamEnumerateDomainsInSamServer
SamOpenUser
SamiChangePasswordUser
SamLookupIdsInDomain
SamConnect
SamCloseHandle
SamLookupDomainInSamServer
SamFreeMemory
SamQueryInformationUser
SamSetInformationUser
SamOpenGroup
SamEnumerateAliasesInDomain
SamRidToSid
SamOpenAlias
SamGetAliasMembership
SamEnumerateGroupsInDomain
SamGetMembersInGroup
SamGetMembersInAlias
SamGetGroupsForUser
SAMLIB.dll
FreeContextBuffer
QueryContextAttributesW
LsaConnectUntrusted
LsaDeregisterLogonProcess
LsaCallAuthenticationPackage
LsaLookupAuthenticationPackage
LsaFreeReturnBuffer
Secur32.dll
CommandLineToArgvW
SHELL32.dll
IsCharAlphaNumericW
GetKeyboardLayout
USER32.dll
DestroyEnvironmentBlock
CreateEnvironmentBlock
USERENV.dll
GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW
VERSION.dll
HidD_GetHidGuid
HidD_FreePreparsedData
HidD_GetPreparsedData
HidP_GetCaps
HidD_GetAttributes
HID.DLL
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInterfaces
SetupDiGetClassDevsW
SetupDiGetDeviceInterfaceDetailW
SETUPAPI.dll
SCardListReadersW
SCardGetCardTypeProviderNameW
SCardListCardsW
SCardReleaseContext
SCardEstablishContext
SCardDisconnect
SCardGetAttrib
SCardFreeMemory
SCardConnectW
WinSCard.dll
WinStationEnumerateW
WinStationConnectW
WinStationFreeMemory
WinStationCloseServer
WinStationQueryInformationW
WinStationOpenServerW
WINSTA.dll
WLDAP32.dll
A_SHAInit
A_SHAFinal
A_SHAUpdate
advapi32.dll
ASN1_CloseEncoder
ASN1BERDotVal2Eoid
ASN1_FreeEncoded
ASN1_CreateEncoder
ASN1_CloseModule
ASN1_CreateDecoder
ASN1_CloseDecoder
ASN1_CreateModule
msasn1.dll
RtlFreeAnsiString
RtlUnicodeStringToAnsiString
RtlFreeUnicodeString
RtlDowncaseUnicodeString
RtlEqualUnicodeString
RtlInitUnicodeString
NtQueryObject
RtlGetCompressionWorkSpaceSize
RtlCompressBuffer
NtQuerySystemInformation
NtQueryInformationProcess
RtlGetCurrentPeb
RtlCreateUserThread
RtlGUIDFromString
RtlStringFromGUID
NtCompareTokens
RtlGetNtVersionNumbers
RtlAppendUnicodeStringToString
RtlUpcaseUnicodeString
RtlAnsiStringToUnicodeString
RtlFreeOemString
RtlUpcaseUnicodeStringToOemString
NtResumeProcess
RtlAdjustPrivilege
NtTerminateProcess
NtSuspendProcess
NtSetSystemEnvironmentValueEx
NtQuerySystemEnvironmentValueEx
NtEnumerateSystemEnvironmentValuesEx
RtlIpv4AddressToStringW
RtlIpv6AddressToStringW
RtlEqualString
ntdll.dll
I_NetServerReqChallenge
I_NetServerAuthenticate2
I_NetServerTrustPasswordsGet
netapi32.dll
FileTimeToSystemTime
ReadFile
WriteFile
LocalAlloc
CreateFileW
GetLastError
TerminateThread
CloseHandle
CreateThread
LocalFree
FindFirstFileW
GetFileSizeEx
FindNextFileW
ExpandEnvironmentStringsW
FindClose
GetFileAttributesW
GetCurrentDirectoryW
FlushFileBuffers
GetCurrentProcess
DuplicateHandle
OpenProcess
DeviceIoControl
WriteProcessMemory
VirtualProtect
VirtualFree
VirtualAlloc
SetFilePointer
VirtualProtectEx
VirtualAllocEx
ReadProcessMemory
VirtualFreeEx
VirtualQuery
VirtualQueryEx
UnmapViewOfFile
CreateFileMappingW
MapViewOfFile
GetConsoleOutputCP
SetConsoleOutputCP
CreateProcessW
SetLastError
WaitForSingleObject
CreateRemoteThread
lstrlenW
FileTimeToLocalFileTime
GetTimeFormatW
WideCharToMultiByte
GetDateFormatW
AreFileApisANSI
TryEnterCriticalSection
HeapCreate
HeapFree
EnterCriticalSection
GetFullPathNameW
InterlockedCompareExchange
GetDiskFreeSpaceW
OutputDebugStringA
LockFile
LeaveCriticalSection
InitializeCriticalSection
GetFullPathNameA
SetEndOfFile
UnlockFileEx
GetTempPathW
CreateMutexW
GetVersionExW
HeapValidate
HeapSize
MultiByteToWideChar
GetTempPathA
FormatMessageW
GetDiskFreeSpaceA
GetFileAttributesA
GetFileAttributesExW
OutputDebugStringW
FlushViewOfFile
CreateFileA
WaitForSingleObjectEx
GetVersionExA
DeleteFileA
DeleteFileW
HeapReAlloc
GetSystemInfo
HeapAlloc
HeapCompact
HeapDestroy
UnlockFile
CreateFileMappingA
LockFileEx
GetFileSize
DeleteCriticalSection
GetCurrentProcessId
GetProcessHeap
SystemTimeToFileTime
GetSystemTimeAsFileTime
GetSystemTime
FormatMessageA
QueryPerformanceCounter
GetTickCount
SetConsoleCtrlHandler
RaiseException
ExitProcess
SetConsoleTitleW
lstrlenA
LoadLibraryW
GetProcAddress
FreeLibrary
GetModuleHandleW
SetHandleInformation
CreatePipe
CreateEventW
SetEvent
GetConsoleScreenBufferInfo
GetStdHandle
GetComputerNameExW
GetTimeZoneInformation
FillConsoleOutputCharacterW
SetCurrentDirectoryW
SetConsoleCursorPosition
IsWow64Process
GetCurrentThread
ProcessIdToSessionId
GetProcessId
LoadLibraryExA
GetCurrentThreadId
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
TerminateProcess
KERNEL32.dll
RtlUnwind
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
GetCommandLineA
GetCommandLineW
GetModuleFileNameW
GetModuleHandleExW
GetACP
GetFileType
CompareStringW
LCMapStringW
GetConsoleCP
GetConsoleMode
SetStdHandle
GetStringTypeW
FindFirstFileExW
IsValidCodePage
GetOEMCP
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
SetEnvironmentVariableW
SetFilePointerEx
WriteConsoleW
ReadConsoleW
DecodePointer
                          
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
                          
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"><trustInfo xmlns="urn:schemas-microsoft-com:asm.v3"><security><requestedPrivileges><requestedExecutionLevel level="asInvoker" uiAccess="false"></requestedExecutionLevel></requestedPrivileges></security></trustInfo><application xmlns="urn:schemas-microsoft-com:asm.v3"><windowsSettings><dpiAware xmlns="http://schemas.microsoft.com/SMI/2005/WindowsSettings">true</dpiAware></windowsSettings></application></assembly>
1)1.1J1Q1]1d1n1z1
22282B2Q2
353R3[3
3 4B4J4e4p4v4
5B5W5l5
6*7B7X7`7i7y7
;#;9;B;W;c;u;
<&<5<U<
> >&>;>d>
1(1?1Q1f1x1
363@3T3h3w3g4
5S6\6v6
61777l7~7
9%9L9Y9`9g9
9,:F:Z:d:
;B;K;d<
=%=.=5=?=E=
>,>E>i>s>}>
F0M0U0e0p0
2.2i2b3
3	4)484\4
646=6G6y6
7 7*7R7v7
9#9)9;9C9I9m9
;,;2;C;K;Q;a;s;
<"<D<O<Y<k<
=.===D=X=o={=
>O>_>k>q>
?2?@?K?~?
1 1=1L1a1u1
2 2/2X2^2k2q2
3%3I3S3b3}3
4*4E4Q4h4z4
828T8v8
:[:d:~:
;';:;L;f;x;
6)6:6q6w6
8!828E8K8S8Y8q8~8
;8;F;X;j;
<*<C<Z<w<
=	=!===C=c=z=
=;>\>b>t>
'090@0_0x0~0
121E1a1t1
262F2X2p2w2
5&585J5\5q5}5
5!676C6e6
8V8_8|8
919=9W9z9
:#:6:B:Y:
;,<<<J<o<u<
=4===_=
4=9^9e9
98:\:k:
;Z;:<t<y<
<V=^=d=l=r=
8	9F9f9
5*6c6q6z6
8+898O8]8c8
;%;,;U;[;a;g;m;
; <^<z<
=9=W=z=
>(>;>O>U>e>|>
?)???Q?V?_?|?
0$0I0S0h0
191N1V1j1
2&2>2N2V2m2
383X3a3
4 4*4/444>4H4M4R4\4r4{4
8P8a8h8
:,;1;e;q;
;V<`<o<v<}<
<,=:=F=r=
?Y?d?z?
*0/0M0j0p0v0
1$1.13181B1L1Q1V1`1j1o1t1~1
2&2,222U2[2a2
3!303A3G3`3z3
4#42484N4
505K5i5
6B6N6j6t6~6
7*7B7L7V7g7
9 9+9{9
9 :.:e:u:
;=;];j;{;
0'010B0Y0
1#1)1>1F1L1k1q1
2V2`2o2
4B4q4{4
4%5-565v5
7v749B9I9V9{9
9 :<:d:
;$;);1;9;F;S;`;r;x;
<$<D<W<]<o<}<
= =*=0=6=<=B=K=W=`=f=l=r=
>">0>v>
?#?/?@?Z?b?j?t?|?
0'040A0
1%131=1L1[1m1|1a6
11171B1H1N1T1Z1p1w1|1
3	4!4+4g4m4
3*3A3L3s3
5=5I5s5
5@6]6e6
717D7d7
;6;@;Y;
<!<7<Y<
^0e0s0}0A1O1
1;2E2R2
3Q3^3k3
3F4[4y4
5D5\5d5}5
7(7E7p8
;=;U;{;
<7=Y=g=
6#696A6F6X6a6h6
7#7/747=7C7K7P7]7j7
:+:?:J:O:T:]:j:r:y:
63'4@5H5D6
>(>/>O>
5,9d;p;
3 3g3k3o3s3w3{3
8+9=9A9E9I9M9Q9U9Y9]9a9e9i9
5'6,666^6r6x6
7!7%7)7-7175797=7A7E7I7M7Q7U7Y7]7a7e7i7m7q7u7y7}7
8!8%8)8-8185898=8A8E8I8M8Q8U8Y8]8a8e8i8m8q8u8y8
4d7L<n<
85:9:=:A:E:I:M:Q:U:Y:]:
8N9i<n<~<
8^:w:2;:;B;L;T;\;
0]1e1p3
\182E2N2x2
1*1A1T4q4
718?8Z9
:H;Y;'<L<
<	>s>{>
0?1r1w1>3Z3
6S=0>L>
4>6Z6+>x?
1"1+1;1T1t1}1
1=233r3z3
<)<1<B<
5:5A5H5O5U5
6T7#9/9
9u:;<,=
0X0j0{0
=%>@>Q>f>|>
>(>t>x>|>
? ?$?(?,?0?4?8?<?@?D?H?L?P?T?X?\?`?d?h?l?p?t?x?|?
0 0$0(0,0004080<0@0D0H0L0P0T0X0\0`0d0h0l0p0t0x0|0
1 1$1(1,1014181<1@1D1H1L1P1T1X1\1`1d1h1l1p1t1x1|1
3*3:3G3U3,5<5J5\5j5w5
6:6G6p6
:0:E:P:\:j:p:}:
;!;,;3;J;d;r;x;
<4<:<@<K<Y<^<j<|<
='=4=<=I=Q=^=k=
>#>'>+>/>3>7>;>?>C>G>K>O>S>W>[>_>c>
E1P2c2
:):4:t:
?%?B?H?P?l?q?v?|?
0!030B0J0
1B2P2Z2q2
3$3>3J3]3k3w3
4#53585O5t5
7*8;8\8k8{8
;H;Z;l;~;
<<<b<m<
=	=+=M=s=
>!>L>Y>q>
?%?K?j?
0.030?0K0f0r0
1!1L1Y1
3"3,343:3a3
5@5N5X5t5
:&:5:F:M:
<5=[=l=t=
=->G>z>
?5?L?_?r?
161i1w1
2?2K2T2
3"363B3Y3l3v3
7"7F7O7T7\7c7}7
8^8d8z8
9/9@9S9
:$:5:::Q:m:
;&;:;O;Z;z;
=T=e=t=|=
1$1<1[1i1p1
293?3L3r3
6!6'696^6
:K:j:v:
;8;`;f;s;
<)<M<]<p<
< =`=l=
>T>g>}>
050<0]0i0v0|0
1!1'1P1
2[3j3x3
3#4-4E4]4
6M6Y6m6
:(:J:n:
;M;S;j;
;:<[<p<
<5=N=e=
>?>i>u>
>3?l?v?
"090P0\0p0
071Y1f1l1z1
2(2A2M2t2
5Q6k6w6
7O7c7w7
8:9Q9b9
;5;l;t;z;
=$>3>}>
0;0Y0x0
2I2a2n2
3;3@3Y3
:):V:y:
;.;@;R;h;w;
<&<:<[<p<
=#=)=/=5=Z=`=f=l=r=x=
?+?H?b?
0.0E0\0v0
1"111F1P1z1
2(2?2V2h2
3)333X3_3
4$414]4b4
5$565C5m5{5
626Q6V6h6|6
8<8K8Z8n8y8~8
909<9X9w9
:+:@:L:]:p:
:!;';?;O;Y;d;j;
<'<<<Z<p<
=+=B=R=`=m=
?'?/?5?
0	1(1d1l1r1
222G2Z2y2
3!303F3\3i3
3#4-4I4`4
535`5l5x5
596d6j6}6
7"7I7j7
8C8H8R8
9+939C9O9v9
9 :-:N:S:s:~:
:	;$;+;4;E;O;];g;s;
<,<B<{<
< =7=A=N=]=q=
>:>_>|>
><?_?l?
0F0c0x0
031F1Y1l1
4,4G4^4l4
535U5|5
616D6M6r6
7U7b7s7
7:8L8d8}8
9@9`9x9
: :':-:I:a:
:%;3;I;U;[;k;s;y;
<2=E=V=a=
>5>b>q>
?4?D?X?
0&090D0
4)4L4h4
8@8S8[8a8y8
:3:Q:]:v:
;(;-;g;
<7<><G<f<
=>=U=m=v=
>(>?>S>f>
?$?*?8?@?F?V?^?d?u?
0$020:0J0T0a0n0
0)1C1T1j1p1
2.272D2J2Z2b2h2p2v2
4'4=4J4P4U4[4h4p4
6$6B6`6{6
969P9Y9j9p9
:%:+:3:9:\:b:o:
;P;f;|;
=%=U=r=}=
?'?8?K?\?
1*1D1Y1r1
3(343M3[3d3
3	4"4/494J4T4o4z4
626I6]6y6
6'7E7L7s7
8'999M9^9
96:C:M:V:|:
;&;7;h;
=#=)=h=
=T>i>x>
?+?<?O?w?
Q0Y0_0v0
0;1A1x1
2/3C3H3^3n3s3
4"474T4a4w4
5%6G6Y6r6x6
8-9:9T9Z9n9
:5:Q:]:
<*<=<a<
=*=?=[=
000M0g0x0
4Y4i4o4
6Q6_6v6
7!8(8`8
9"9:9Q9h9
;";3;;;A;R;];t;|;
;*<G<d<
=:=^=k=
=)>2>O>U>b>j>p>
>$?=?W?|?
050C0T0s0
161i1y1
242S2[2a2i2o2
3#333;3L3W3h3
4O4_4w4
5.5Y5n5
8<8M8\8h8
9.9R9c9r9~9
:":;:A:T:j:q:
;);5;;;c;z;
<*<A<X<s<
=B=^=s=
>>>V>u>
???[?s?{?
0%070>0C0L0Q0^0
1%1Q1p1
2&2>2Z2j2s2
3(373T3s3{3
3/474P4
4=5L5f5
6$6-6<6H6^6
:3:T:g:
;);B;h;
<+<<<\<}<
="=/=L=j=
=	>%>*><>P>c>w>
?*?>?N?]?e?o?
0/0J0f0w0
1>1g1m1
2&292U2[2t2
3!3.3k3
3J4O4l4u4
515<5L5a5v5
7X7n7t7
999C9]9
;";K;W;m;
<,<<<h<q<
=?=T=]=j=
?$?4?@?P?k?~?
0/0B0x0
1K1T1k1
2A2J2]2k2s2
3r9y9~9
<2<<<L<\<i<
>&>,>:>M>W>n?y?
0<0V0_0
0T1Z1v1
2#2)21272
4 4.4J4Z4b4v4
6%6/6K6c6r6
7O7[7e7|7
898I8Y8x8
9!9E9S9
:I:O:f:
:M;\;r;
<2<?<f<
=*=W=p=
>->I>v>
0)0=0M0j0z0
0'171c1
2$252=2r2
3 343E3a3q3
4*4V4v4
5&5;5g5
6!6L6h6
878>8G8[8j8r8
8;9O9r9
9	:':,:>:M:U:v:
;';-;4;
;J<V<_<l<
=0=L=e={=
>D>J>X>n>|>
?,?Y?n?x?
0'0G0Q0W0
243B3P3_3l3}3
344B4P4_4l4{4
6(6C6R6d6n6v6
7/7=7P7X7r7}7
8$8,848<8I8n8
8"9.9;9D9X9d9v9
:(:\:g:m:
;$;*;2;
<%<3<:<
=O=c=m=s=x=
>&>,><>F>W>^>g>{>
?)?F?O?W?t?
0(0-070L0Q0[0p0u0
1'161;1M1U1[1k1u1{1
2$2*232?2J2O2U2Z2f2k2t2
3.343i3
4&414G4M4W4
5!5/5A5V5k5
6*6o6~6
7%7C7q7
8;8N8j8~8
9*9:9B9H9U9
:':B:O:V:e:|:
:);7;<;Y;v;
<)<V<]<j<v<
=+=1=A=F=V=f=l=}=
>%>6>V>p>
?@?F?a?t?~?
0"070]0{0
1)1J1j1
1%2+2;2A2S2Y2k2q2~2
3!3>3G3T3d3l3
4'484Q4Z4m4u4}4
5 5'5-5E5O5[5o5v5
596E6\6q6
8 8+8u8
8.9Y9f9v9
<6<S<]<
>4>:>g>|>
?8?b?p?
0"0=0T0o0
1(1K1g1u1
2;2i2o2z2
3"3*30353<3B3G3N3T3Y3`3f3k3r3x3}3
454I4`4
5/5<5N5Z5m5{5
696>6^6j6
7&7N7b7
8$8,8C8
999_9{9
:,:=:E:Z:`:q:y:
:*;F;h;
<)<6<C<h<
>=>X>n>s>
>*?3?P?V?c?k?q?
20A0K0x0
0 1=1`1p1
2:3R3{3
4F4V4d4k4r4y4
6&6;6T6d6
7&7+717@7F7t7|7
8$8,878B8N8S8_8d8o8
8%9K9q9
:0:5:;:P:U:[:a:z:
; ;%;W;e;r;w;
<+<6<><]<b<
?+?7???e?k?q?
060V0a0u0
1,141<1A1\1~1
2$262A2F2M2V2\2m2t2
3&383w3
4&4T4Y4c4z4G5e5t5
7,777j7
808G8Y8d8
;F;N;Y;b;u;
=F=e=z=
>7>V>]>d>x>
?<?[?b?
050g0w0
1M1[1p1|1
2 2-272D2Q2^2
4/4Q4w4
5.5>5u5
6.656@6z6
8"8/8<8G8^8e8
8.989O9q9
>&>:>`>p>
0B0G0[0f0
161H1a1
2&2:2H2]2
4X4h4q4
5"5*5<5J5
637;7_7g7m7
8U8p8w8~8
;C;S;x;
<$<+<@<G<W<a<z<
=%=1=8=Q=[=g=n=z=
0$0[0n0z061e1m1s1
3!3Q3c3m3t3y3
474<4o4
5"636A6N6\6f6p6z6
7(7.747=7D7j7
798?8M8\8b8i8r8
9-9>9K9d9y9
97:a:l:
;);/;D;
<-<:<H<R<\<f<p<z<
020G0N0T0f0p0
1#1]1x1
1B2K2Q2
2-3L3V3g3u3
484=4b4q4
5%5+52595@5G5N5U5\5d5l5t5
7S7\7i7t7}7
8 8&8,82888>8D8J8P8V8\8b8h8n8t8z8
0+1014181<1
7(8Y8k8u8
9'9:9N9Z9
:&:4:V:f:k:p:
;!;Q;Y;^;n;x;
708M9b9
="=&=*=.=2=
=F>J>N>R>V>Z>^>b>
>f?j?n?r?v?z?~?
8e: =<=@=D=H=L=P=T=X=\=`=d=h=
;U=o=~=
>&><>I>W>e>p>
>Y?x?}?
>2>7><>
; ;$;(;,;0;4;8;<;@;
8*8^9t9
;J;U;Z=d=
0%1]1u1
323H3_3f3r3
4/4<4N4V4`4i4z4
525=5G5M5a5m5
6$6,6}6$7E7
:#:/:H:[:
<%=+={=i>s>
242g2z2
:+;2;g;x;
<"</<9<[<l<
94:k:}:
<$<)<F<N<
="=D=V=
> >+>0>5>P>Z>v>
>	?%?0?5?:?g?
0"0'0,0M0]0y0
141]1h1m1r1
2&242C2g2y2
4D4Y4j4
?E?O?j?
,040~1
2C2J2a2w2
343G3Q3r3
3*4@4{4
7(9J9i9G:
1&101o2
5A6m6v7
8#8?8]8g8x8}8
<?<D<O<c<n<
0=1H1U1f1t1|152
3%323y3
8"848F8g8y8
000]0o0
2$212H2
70>0E0L083?3
6"7n7}7
0A0I0n0v0
:F;X;j;
<-=G=T=
5H5T5l5
6Q7u7~8
969M9|9
:3:{:E;
0@1j1r1
5	6&666
7<8G8R8X8a8
>F?a?w?
<D<W<u<
<1>h>o>t>x>|>
? ?$?(?,?
1\2k2u2
3*313C3_3
3S4c4p4
: :$:(:,:0:4:8:<:@:D:H:L:P:T:X:\:`:d:h:l:p:t:x:|:
; ;$;(;,;0;4;8;<;@;D;H;L;P;T;X;\;`;d;h;l;p;t;x;|;
? ?$?(?,?4?8?<?@?D?H?L?P?\?d?h?l?p?t?
5 5$5(5,505<5@5D5H5L5P5T5X5\5`5d5h5l5p5t5x5|5
6 6$6(6,6064686<6
,4044484
5$5,545<5D5L5T5\5d5l5t5|5
6$6,646<6D6L6T6\6d6l6t6|6
7$7,747<7D7L7T7\7d7l7t7|7
8$8,848<8D8L8T8\8d8l8t8|8
9$9,949<9D9L9T9\9d9l9t9|9
:$:,:4:<:D:L:T:\:d:l:t:|:
;$;,;4;<;D;L;T;\;d;l;t;|;
6 6(60686@6H6P6X6`6h6p6x6
7 7(70787@7H7P7X7`7h7p7x7
8 8(80888@8H8P8X8`8h8p8x8
9 9(90989@9H9P9X9`9h9p9x9
: :(:0:8:@:H:P:X:`:h:p:x:
; ;(;0;8;@;H;P;X;`;h;p;x;
< <(<0<8<@<H<P<X<`<h<p<x<
\0d0l0t0|0
1$1,141<1
3(34383<3@3D3H3L3P3T3X3\3`3d3h3l3p3t3x3|3
4 4(40484@4H4P4X4`4h4p4x4
5 5(50585@5H5P5X5
8 8(80888@8H8P8X8`8d8h8l8p8t8x8|8
9 9(90989@9H9P9X9`9h9p9x9
: :(:0:8:@:H:P:X:`:h:p:x:
; ;(;0;8;@;H;P;X;`;h;p;x;
;<<X<\<`<d<x<
(0,00040H0h2l2p2t2
404H?L?P?T?h?
3 3$3(3,3034383<3@3D3H3
4181<1@1D1H1L1
7@9D9H9L9P9T9X9\9`9d9h9l9p9t9x9|9
: :$:(:,:0:4:8:@:D:H:L:P:T:X:\:`:d:h:l:p:t:x:|:
;0;4;8;<;@;D;H;L;P;T;X;\;`;d;h;l;p;t;x;|;
< <(<,<0<8<<<H<L<X<\<h<l<p<x<|<
=(=,=0=8=<=@=H=L=P=
> >$>T>X>\>`>d>h>p>
? ?$?(?,?0?4?8?<?@?D?l?p?t?x?|?
0 0$0(0,0004080<0@0H0L0T0X0\0`0d0h0l0p0t0x0|0
1 1$1(1,1014181@1D1L1P1X1\1d1h1l1x1
2 2$2(2,2024282<2@2D2H2L2P2T2X2\2`2d2h2l2p2t2x2|2
3 3$3(3,3034383<3@3D3H3L3P3T3X3\3`3d3h3l3p3t3x3|3
4 4$4(4,4044484<4@4D4H4L4P4T4X4\4`4
5 5$5(5,5054585<5@5D5H5L5P5T5X5\5`5d5h5l5p5t5x5|5
6 6$6(6,6064686<6@6D6H6L6P6T6X6\6`6d6h6l6p6t6x6|6
7 7$7(7,7@7X7p7
8$8H8L8P8T8X8\8`8d8h8l8p8t8x8|8
9 9$9(9,9094989<9@9D9H9L9P9T9X9\9`9d9h9l9p9t9x9|9
:<; ?$?(?,?
L:P:\:`:l:p:|:
; ;,;0;<;@;L;P;\;`;l;p;|;
< <@<`<l<
=0=P=p=
>0>P>p>
?0?P?p?
000P0l0p0
101@1P1`1p1
7(7,7074787<7@7D7H7L7X7\7`7d7h7l7p7t7
:(:,:0:4:8:<:@:D:H:P:`:h:p:x:
; ;(;,;4;8;@;D;L;P;X;\;d;p;|;
<$<0<4<<<@<H<L<T<X<`<d<l<p<x<|<
= =$=,=0=8=<=D=H=P=T=\=`=h=l=t=x=
>(>4>@>D>L>P>X>\>d>p>t>|>
0$080@0T0\0p0x0
1 1<1P1T1X1l1t1
20282L2T2h2p2
3,343H3P3d3l3
4(404D4L4`4h4|4
5$5(5,585@5H5T5\5d5p5x5
687@7t7|7
7(808d8l8
90:8:l:t:
: ;(;x;
;0<8<l<t<
>$?,?`?h?
80@0t0|0
6D6x6|6
607p7|7
:(:\:`:h:
<(=t=x=