Sample details: 53a1c0df088760556b99b3b1d04dc24e --

Hashes
MD5: 53a1c0df088760556b99b3b1d04dc24e
SHA1: 2d5e8ce4fea9d118a1f9419ba646fb4b8205ccb3
SHA256: bcb82b71604610bf646be4fb8569b31e147b5b014079c814281e4ddf90429fb2
SSDEEP: 6144:visLBxc1Hd8N6cjYOBsKepwTDIE1uqsnuYf7gwPQ2NCtOVtz9:vtBxc1Hd8pSRrqm/f7gw
Details
File Type: PE32
Yara Hits
YRP/Str_Win32_Http_API | YRP/contentis_base64 | YRP/domain | YRP/IP | YRP/IsPE32 | YRP/IsNET_EXE | YRP/IsWindowsGUI | YRP/IsPacked | YRP/IsBeyondImageSize | YRP/HasRichSignature | YRP/anti_dbg | YRP/screenshot | YRP/TEAN | YRP/android_meterpreter |
Source
http://185.198.58.43/col.exe
http://185.198.58.43/col.exe
Strings
		!This program cannot be run in DOS mode.
`.rdata
@.data
@.reloc
JJ csm
bad allocation
bad allocation
kisufufipewohu vohu guragoxokihahunovuheluhu yalotigefodolehutise
gutalodonemuputixiwu
bulodufawusohagupu
kofivizehamoculagamuvozobareso
xici hiha nenisuzuyurewerudofuze.txt
Kernel32.dll
GlobalAlloc
VirtualProtect
vector<T> too long
v2.0.50727
#Strings
i	n	t	}	
<Module>
_GET_FILEEX_INFO_LEVELS
LanguageSupport
<CrtImplementationDetails>
gcroot<System::String ^>
HINSTANCE__
tagMSG
HWND__
$ArrayType$$$BY00Q6MPBXXZ
<CppImplementationDetails>
tagRECT
Progress
$ArrayType$$$BY0A@P6AXXZ
_SECURITY_ATTRIBUTES
$ArrayType$$$BY0A@P6AHXZ
__enative_startup_state
TriBool
_EXCEPTION_POINTERS
$ArrayType$$$BY0P@$$CBD
$ArrayType$$$BY0BF@$$CBD
bad_alloc
_Aux_cont
_Container_base_aux
logic_error
basic_string<char,std::char_traits<char>,std::allocator<char> >
length_error
_Fac_node
_s__RTTICompleteObjectLocator
$_s__RTTIBaseClassArray$_extraBytes_12
$_TypeDescriptor$_extraBytes_23
_s__ThrowInfo
_s__RTTIClassHierarchyDescriptor
$ArrayType$$$BY01Q6AXXZ
_s__RTTIBaseClassDescriptor2
$ArrayType$$$BY02Q6AXXZ
$_s__RTTIBaseClassArray$_extraBytes_8
$_s__RTTIBaseClassArray$_extraBytes_4
$_TypeDescriptor$_extraBytes_22
_s__CatchableType
$_TypeDescriptor$_extraBytes_20
$_s__CatchableTypeArray$_extraBytes_8
$_s__CatchableTypeArray$_extraBytes_12
exception
ThisModule
$ArrayType$$$BY0BP@$$CBD
$ArrayType$$$BY0EC@$$CBD
$ArrayType$$$BY0BD@$$CBD
$ArrayType$$$BY0BL@$$CB_W
$ArrayType$$$BY0BB@$$CB_W
$ArrayType$$$BY0CK@$$CB_W
$ArrayType$$$BY0DF@$$CB_W
$ArrayType$$$BY0BH@$$CB_W
$ArrayType$$$BY0CD@$$CB_W
$ArrayType$$$BY0DJ@$$CB_W
$ArrayType$$$BY0CF@$$CBD
$ArrayType$$$BY0N@$$CBD
$ArrayType$$$BY0M@$$CBD
_Scalar_ptr_iterator_tag
vector<unsigned long,std::allocator<unsigned long> >
allocator<unsigned long>
_Vector_val<unsigned long,std::allocator<unsigned long> >
_Container_base_aux_alloc_real<std::allocator<unsigned long> >
allocator<std::_Aux_cont>
tagPOINT
_SYSTEMTIME
HDROP__
$ArrayType$$$BY0MI@_W
$ArrayType$$$BY01K
HKEY__
_FILETIME
HRSRC__
$ArrayType$$$BY0EAA@D
mscorlib
Microsoft.VisualC
CallConvStdcall
System.Runtime.CompilerServices
CallConvCdecl
CallConvThiscall
IsVolatile
DebugInfoInPDBAttribute
MiscellaneousBitsAttribute
NativeCppClassAttribute
System
IsConst
UnsafeValueTypeAttribute
ValueType
Exception
Object
DecoratedNameAttribute
IsImplicitlyDereferenced
IsLong
DebuggerStepThroughAttribute
System.Diagnostics
ReliabilityContractAttribute
System.Runtime.ConstrainedExecution
Consistency
EventArgs
PrePrepareMethodAttribute
EventHandler
FixedAddressValueTypeAttribute
CLSCompliantAttribute
GCHandle
System.Runtime.InteropServices
IntPtr
AppDomain
RuntimeHelpers
Interlocked
System.Threading
SecurityAction
System.Security.Permissions
SecurityPermissionAttribute
AssemblyAttributesGoHereSM
Marshal
IsSignUnspecifiedByte
OutOfMemoryException
IsBoxed
ModuleHandle
RuntimeMethodHandle
RuntimeTypeHandle
Module
System.Reflection
IsCopyConstructed
SuppressUnmanagedCodeSecurityAttribute
System.Security
<CrtImplementationDetails>.NativeDll.IsSafeForManagedCode
<CrtImplementationDetails>.DefaultDomain.DoNothing
cookie
<CrtImplementationDetails>.DefaultDomain.HasPerProcess
<CrtImplementationDetails>.DefaultDomain.HasNative
<CrtImplementationDetails>.DefaultDomain.NeedsInitialization
<CrtImplementationDetails>.DefaultDomain.Initialize
?A0x250abb45.??__E?Initialized@CurrentDomain@<CrtImplementationDetails>@@$$Q2HA@@YMXXZ
?A0x250abb45.??__E?Uninitialized@CurrentDomain@<CrtImplementationDetails>@@$$Q2HA@@YMXXZ
?A0x250abb45.??__E?IsDefaultDomain@CurrentDomain@<CrtImplementationDetails>@@$$Q2_NA@@YMXXZ
?A0x250abb45.??__E?InitializedVtables@CurrentDomain@<CrtImplementationDetails>@@$$Q2W4State@Progress@2@A@@YMXXZ
?A0x250abb45.??__E?InitializedNative@CurrentDomain@<CrtImplementationDetails>@@$$Q2W4State@Progress@2@A@@YMXXZ
?A0x250abb45.??__E?InitializedPerProcess@CurrentDomain@<CrtImplementationDetails>@@$$Q2W4State@Progress@2@A@@YMXXZ
?A0x250abb45.??__E?InitializedPerAppDomain@CurrentDomain@<CrtImplementationDetails>@@$$Q2W4State@Progress@2@A@@YMXXZ
<CrtImplementationDetails>.LanguageSupport.InitializeVtables
<CrtImplementationDetails>.LanguageSupport.InitializeDefaultAppDomain
<CrtImplementationDetails>.LanguageSupport.InitializeNative
<CrtImplementationDetails>.LanguageSupport.InitializePerProcess
<CrtImplementationDetails>.LanguageSupport.InitializePerAppDomain
<CrtImplementationDetails>.LanguageSupport.InitializeUninitializer
<CrtImplementationDetails>.LanguageSupport._Initialize
<CrtImplementationDetails>.LanguageSupport.UninitializeAppDomain
<CrtImplementationDetails>.LanguageSupport._UninitializeDefaultDomain
<CrtImplementationDetails>.LanguageSupport.UninitializeDefaultDomain
<CrtImplementationDetails>.LanguageSupport.DomainUnload
source
arguments
<CrtImplementationDetails>.LanguageSupport.Cleanup
innerException
<CrtImplementationDetails>.LanguageSupport.Initialize
.cctor
<CrtImplementationDetails>.LanguageSupport.{ctor}
<CrtImplementationDetails>.LanguageSupport.{dtor}
gcroot<System::String ^>.{ctor}
gcroot<System::String ^>.{dtor}
gcroot<System::String ^>.=
gcroot<System::String ^>..P$AAVString@System@@
__ehvec_dtor
?A0x644ad69d.ArrayUnwindFilter
pExPtrs
__ArrayUnwind
std.bad_alloc.{dtor}
std.bad_alloc.__vecDelDtor
std.logic_error.{dtor}
std.logic_error.what
std.logic_error.__vecDelDtor
std.logic_error.{ctor}
std.bad_alloc.{ctor}
<CrtImplementationDetails>.AtExitLock._handle
<CrtImplementationDetails>.AtExitLock._lock_Set
<CrtImplementationDetails>.AtExitLock._lock_Get
<CrtImplementationDetails>.AtExitLock._lock_Destruct
<CrtImplementationDetails>.AtExitLock.IsInitialized
<CrtImplementationDetails>.AtExitLock.AddRef
?A0x11773762.__alloc_global_lock
?A0x11773762.__dealloc_global_lock
_exit_callback
_initatexit_m
_initatexit_app_domain
_app_exit_callback
_initterm_e
pfbegin
_initterm
<CrtImplementationDetails>.ThisModule.Handle
_initterm_m
<CrtImplementationDetails>.ThisModule.ResolveMethod<void const * __clrcall(void)>
methodToken
___CxxCallUnwindDtor
std._Aux_cont.{ctor}
_Pcont
std._Container_base_aux.{ctor}
std._Container_base_aux.{dtor}
_Message
__unnamed000
_Where
delete
std.length_error.{ctor}
std.length_error.{dtor}
std.length_error.__vecDelDtor
tea_decrypt
tea_decryptBlock_adfgsdfhgdfg
dummy_asdijfgnijnfiasjd
mytcslen
mytcscpy
mytcsstr_dsfdfgtgtrgtrg
foobar
runWithLoader_ewfererververv
payloadBuf
DandR_sadfais
std.vector<unsigned long,std::allocator<unsigned long> >.{ctor}
std.vector<unsigned long,std::allocator<unsigned long> >.{dtor}
std._Vector_val<unsigned long,std::allocator<unsigned long> >.{dtor}
std.vector<unsigned long,std::allocator<unsigned long> >._Buy
_Capacity
std.vector<unsigned long,std::allocator<unsigned long> >._Tidy
std._Vector_val<unsigned long,std::allocator<unsigned long> >.{ctor}
std._Container_base_aux_alloc_real<std::allocator<unsigned long> >.{dtor}
std.allocator<unsigned long>.{ctor}
std.vector<unsigned long,std::allocator<unsigned long> >.max_size
std.vector<unsigned long,std::allocator<unsigned long> >._Destroy
_First
std.vector<unsigned long,std::allocator<unsigned long> >._Xlen
std._Container_base_aux_alloc_real<std::allocator<unsigned long> >.{ctor}
std.allocator<unsigned long>.deallocate
__unnamed001
std.allocator<unsigned long>.allocate
_Count
std.allocator<std::_Aux_cont>.deallocate
std.allocator<unsigned long>.max_size
std.allocator<std::_Aux_cont>.allocate
std._Destroy_range<class std::allocator<unsigned long> >
std.allocator<std::_Aux_cont>.{ctor}<unsigned long>
std._Allocate<unsigned long>
std._Allocate<class std::_Aux_cont>
std._Ptr_cat<unsigned long *,unsigned long *>
__unnamed003
_getFiberPtrId
_amsg_exit
__security_init_cookie
<CrtImplementationDetails>.ThrowModuleLoadException
<CrtImplementationDetails>.DoDllLanguageSupportValidation
<CrtImplementationDetails>.ThrowNestedModuleLoadException
<CrtImplementationDetails>.RegisterModuleUninitializer
<CrtImplementationDetails>.DoCallBackInDefaultDomain
_cexit
terminate
std.basic_string<char,std::char_traits<char>,std::allocator<char> >.{ctor}
std.basic_string<char,std::char_traits<char>,std::allocator<char> >.{dtor}
std.basic_string<char,std::char_traits<char>,std::allocator<char> >.c_str
delete[]
std.exception.{ctor}
std.exception.{dtor}
_encode_pointer
_decode_pointer
_encoded_null
__FrameUnwindFilter
CloseFigure
ClientToScreen
WinHttpCheckPlatform
GetSystemTime
strcat
BitBlt
SetProcessShutdownParameters
DragQueryPoint
_CxxThrowException
StretchBlt
LoadLibraryA
GetProcessVersion
WinHttpOpenRequest
GetFirmwareEnvironmentVariableW
WinHttpOpen
GetProcAddress
GetLastError
SetWindowContextHelpId
CreateFileW
printf
GetFileAttributesA
FatalAppExitW
RegQueryInfoKeyW
FindResourceExA
WinHttpConnect
GetDesktopWindow
GetTickCount
strcpy
malloc
AdjustWindowRectEx
std.exception.what
GetPrivateProfileSectionNamesW
?A0x250abb45.__xc_mp_z
?Uninitialized@CurrentDomain@<CrtImplementationDetails>@@$$Q2HA
?A0x250abb45.?Uninitialized$initializer$@CurrentDomain@<CrtImplementationDetails>@@$$Q2P6MXXZA
?A0x250abb45.__xi_vt_a
?InitializedPerAppDomain@CurrentDomain@<CrtImplementationDetails>@@$$Q2W4State@Progress@2@A
?A0x250abb45.?InitializedPerAppDomain$initializer$@CurrentDomain@<CrtImplementationDetails>@@$$Q2P6MXXZA
?IsDefaultDomain@CurrentDomain@<CrtImplementationDetails>@@$$Q2_NA
?A0x250abb45.?IsDefaultDomain$initializer$@CurrentDomain@<CrtImplementationDetails>@@$$Q2P6MXXZA
?A0x250abb45.__xc_ma_a
?InitializedNative@CurrentDomain@<CrtImplementationDetails>@@$$Q2W4State@Progress@2@A
?A0x250abb45.?InitializedNative$initializer$@CurrentDomain@<CrtImplementationDetails>@@$$Q2P6MXXZA
?Initialized@CurrentDomain@<CrtImplementationDetails>@@$$Q2HA
?A0x250abb45.?Initialized$initializer$@CurrentDomain@<CrtImplementationDetails>@@$$Q2P6MXXZA
?A0x250abb45.__xc_ma_z
?InitializedVtables@CurrentDomain@<CrtImplementationDetails>@@$$Q2W4State@Progress@2@A
?A0x250abb45.?InitializedVtables$initializer$@CurrentDomain@<CrtImplementationDetails>@@$$Q2P6MXXZA
?A0x250abb45.__xi_vt_z
?InitializedPerProcess@CurrentDomain@<CrtImplementationDetails>@@$$Q2W4State@Progress@2@A
?A0x250abb45.?InitializedPerProcess$initializer$@CurrentDomain@<CrtImplementationDetails>@@$$Q2P6MXXZA
?InitializedPerProcess@DefaultDomain@<CrtImplementationDetails>@@2_NA
?Entered@DefaultDomain@<CrtImplementationDetails>@@2_NA
?InitializedNative@DefaultDomain@<CrtImplementationDetails>@@2_NA
?Count@AllDomains@<CrtImplementationDetails>@@2HA
?hasNative@DefaultDomain@<CrtImplementationDetails>@@0W4State@TriBool@2@A
?hasPerProcess@DefaultDomain@<CrtImplementationDetails>@@0W4State@TriBool@2@A
?InitializedNativeFromCCTOR@DefaultDomain@<CrtImplementationDetails>@@2_NA
?A0x250abb45.__xc_mp_a
__unep@?DoNothing@DefaultDomain@<CrtImplementationDetails>@@$$FCGJPAX@Z
__unep@?_UninitializeDefaultDomain@LanguageSupport@<CrtImplementationDetails>@@$$FCGJPAX@Z
??_C@_0P@GHFPNOJB@bad?5allocation?$AA@
??_7bad_alloc@std@@6B@
??_R1A@?0A@EA@exception@std@@8
??_R1A@?0A@EA@logic_error@std@@8
??_R0?AVexception@std@@@8
??_R2bad_alloc@std@@8
??_R1A@?0A@EA@bad_alloc@std@@8
??_7logic_error@std@@6B@
??_R3bad_alloc@std@@8
??_R0?AVbad_alloc@std@@@8
??_R4logic_error@std@@6B@
??_R2exception@std@@8
??_R3exception@std@@8
??_R2logic_error@std@@8
??_R3logic_error@std@@8
??_R0?AVlogic_error@std@@@8
??_R4bad_alloc@std@@6B@
std.?A0x9e79dd2a._bad_alloc_Message
std.?A0x9e79dd2a._Fac_head
__exit_list_size_app_domain
__onexitbegin_app_domain
?A0x11773762.__exit_list_size
__onexitend_app_domain
?A0x11773762.__onexitbegin_m
?A0x11773762.__onexitend_m
?_lock@AtExitLock@<CrtImplementationDetails>@@$$Q0PAXA
?_ref_count@AtExitLock@<CrtImplementationDetails>@@$$Q0HA
?A0xcdd3003f.unnamed-global-0
?A0xcdd3003f.unnamed-global-1
?A0xcdd3003f.unnamed-global-2
?A0xcdd3003f.unnamed-global-3
?A0xcdd3003f.unnamed-global-4
?A0xcdd3003f.unnamed-global-5
?A0xcdd3003f.unnamed-global-6
?A0xcdd3003f.unnamed-global-7
?A0xcdd3003f.unnamed-global-8
?A0xcdd3003f.unnamed-global-9
?A0xcdd3003f.unnamed-global-10
?A0xcdd3003f.unnamed-global-11
?A0xcdd3003f.unnamed-global-12
?A0xcdd3003f.unnamed-global-13
?A0xcdd3003f.unnamed-global-14
?A0xcdd3003f.unnamed-global-15
?A0xcdd3003f.unnamed-global-16
?A0xcdd3003f.unnamed-global-17
??_C@_0BD@OLBABOEK@vector?$DMT?$DO?5too?5long?$AA@
_TI3?AVlength_error@std@@
wndCnt
??_R2length_error@std@@8
_CT??_R0?AVlength_error@std@@@8??0length_error@std@@$$FQAE@ABV01@@Z40
_CT??_R0?AVlogic_error@std@@@8??0logic_error@std@@$$FQAE@ABV01@@Z40
??_R4length_error@std@@6B@
??_7length_error@std@@6B@
??_R0?AVlength_error@std@@@8
_CTA2?AVbad_alloc@std@@
_CTA3?AVlength_error@std@@
??_R3length_error@std@@8
_TI2?AVbad_alloc@std@@
_CT??_R0?AVexception@std@@@8??0exception@std@@$$FQAE@ABV01@@Z12
??_R1A@?0A@EA@length_error@std@@8
std.?A0xcdd3003f._bad_alloc_Message
_CT??_R0?AVbad_alloc@std@@@8??0bad_alloc@std@@$$FQAE@ABV01@@Z12
payloadSize
__xc_z
__native_vcclrit_reason
__xc_a
__xi_a
__native_startup_state
__xi_z
__native_startup_lock
__native_dllmain_reason
??_7type_info@@6B@
value__
<MarshalCopy>
op_Explicit
ToPointer
KeepAlive
IsDefaultAppDomain
get_CurrentDomain
PrepareConstrainedRegions
get_Target
set_Target
Increment
Decrement
Exchange
CompareExchange
GetExceptionPointers
FromIntPtr
ToIntPtr
AllocHGlobal
FreeHGlobal
GetTypeFromHandle
get_Module
GetFunctionPointer
ResolveMethodHandle
get_ModuleHandle
_stub.exe
&/?j(j
 E	 ) )
 E	 E	
 E	 E	 
 E	 E	
8 E	 E	
 E	 E	
	 E	 E	 E	 E	 E	 E	 E	 E	 E		
 E	 E	
 E	 E	
 E	 E	
	 E	 E	 E	 E		
SkipVerification
System.Security.Permissions.SecurityPermissionAttribute, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
SkipVerification
??0exception@std@@QAE@ABV01@@Z
?what@exception@std@@UBEPBDXZ
MSVCR90.dll
??3@YAXPAX@Z
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
_crt_debugger_hook
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
KERNEL32.dll
GetPrivateProfileSectionNamesW
GetTickCount
FindResourceExA
FatalAppExitW
GetFileAttributesA
CreateFileW
GetLastError
GetProcAddress
GetFirmwareEnvironmentVariableW
GetProcessVersion
LoadLibraryA
SetProcessShutdownParameters
GetSystemTime
AdjustWindowRectEx
GetDesktopWindow
SetWindowContextHelpId
ClientToScreen
USER32.dll
StretchBlt
BitBlt
CloseFigure
GDI32.dll
RegQueryInfoKeyW
ADVAPI32.dll
DragQueryPoint
SHELL32.dll
WinHttpConnect
WinHttpOpen
WinHttpOpenRequest
WinHttpCheckPlatform
WINHTTP.dll
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
MSVCP90.dll
??1exception@std@@UAE@XZ
??0exception@std@@QAE@XZ
??0exception@std@@QAE@ABQBD@Z
malloc
strcpy
printf
??_V@YAXPAX@Z
_CxxThrowException
strcat
??2@YAPAXI@Z
_cexit
_amsg_exit
_encode_pointer
_decode_pointer
_encoded_null
__FrameUnwindFilter
?DoCallBackInDefaultDomain@<CrtImplementationDetails>@@YAXP6GJPAX@Z0@Z
?ThrowNestedModuleLoadException@<CrtImplementationDetails>@@YAXP$AAVException@System@@0@Z
?ThrowModuleLoadException@<CrtImplementationDetails>@@YAXP$AAVString@System@@@Z
?RegisterModuleUninitializer@<CrtImplementationDetails>@@YAXP$AAVEventHandler@System@@@Z
?DoDllLanguageSupportValidation@<CrtImplementationDetails>@@YAXXZ
?ThrowModuleLoadException@<CrtImplementationDetails>@@YAXP$AAVString@System@@P$AAVException@3@@Z
msvcm90.dll
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
_CorExeMain
mscoree.dll
.?AVtype_info@@
.?AVexception@std@@
.?AVlogic_error@std@@
.?AVlength_error@std@@
.?AVbad_alloc@std@@
wCc. =$
T$|ts)d
{@(iXZ
WoB]]z
fKkdTt
B+EC[Y
+!<-q&
c u1T$
ky]b{dJ
&o =%-
38X/;W
C%}r`"sfX
	~PRz=
jOVY<I+
<!tJhuae
9@t-vs
Mq:1Yz
-M(wX(
^Yl_oT
8OC*q0
R@i4(<
t?x\?6
wZYV1X
q0)EP,
sa9-~s
XP59-\
.vD=kK
:%Zz%7
WwPeZ4
bYlu4.&
l=%AXeh
=]},_j$t
?$,F4:
B8ww?v
%OnNd6
|X.+RA
c"{\@o
)q0OzEG
[%Q,.F
kE`?da9)*
kE`?Wn
kE`?YL
kE`?LQ
mQ33KG
kE`?tMn
HaVsfe@
kE`?9Ijo
?$,F4:
%>^rs:[
H"uo A
kE`?B\
uNQ."V>X
_jdD%R
Ozt)5A5N
Dz[=eT
qz}\jJ_
m}A!/Y
X\M-+4u
d0H_oc(
j,mxH=
X.n(&N
{clghT
hCIbCG
9|kIe>2
kE`?+/
P&Lu,vP
jnWarn
=wwr<R
kE`?9Ijo
`rthV'
B@aKg?
d-]'~>
0H_oc(
kE`?1r
	&Lu,vP
vvB1&RH
X.n(&Nu_C.
;G_@#M
fnVrH8
+X``1L
kE`?+/
kE`?9Ijo
kE`?LQ
/07&N>
"]9<|9
mp;KbQ
0H_oc(
d-]'~>
k{9t3YAi
=Hv;e7
kE`?+/
0H_oc(
kE`?LQ
kE`?9Ijo
V!AEBV
U".ro-|
NaT#>a
kE`?da9)*
t(/!=r
kE`?9Ijo
G kbyE
kE`?da9)*
~qZNDax
YTyJ?^sF
0H_oc(
kE`?9Ijo
!1d&%]
&Lu,vP
_"lQ]#[[
5K.`A=
kE`?>@a
<wo8D_5|
0H_oc(
H$uY=f Wn.
A@#|cT
`k:W6"
}W)DpqM
kbF018
mk_~]|
K6jMg{
:	Q,#9
D$a7G52
B`AD!kW
W+wj$n{w
}C<]cV
)_+g~Uf.	9
	yZN{P<c
	__/ST
pT.m!&
[A%8GJ
7:4W.|
<zBU-z
5TAl=	
17Y4!jF
f	|w!t
oryIG	
[(i@h;6
!4ru`R
L(ldJ"P
hc	+/F$N
kQ#U~N
	tss|[
6s) 3 t
GWQe>m
Ay:w=S
?[ d(Z
3(3+rtoc
gYb"x/
kq(MFz
RjEju)
":\oJH
ZQ M}?H
orfKFq
+r9d#}
C7tsyw:f.
-2!fYwW
=:YD8Mm
{i{/b#
_4={%3
\p+}(dP
3>PIe$
xGT_je
]]x%#q	
}\d\oJH
YC1W,h
une#;P
une#;P
une#;P
	(#Zp8
YC1W,h
bl"'U.y
|o-KDpf
(-FqiIcP
Bk1.r1
Y^Bk[7
WTR!yx
D$Pd{|
c]uyF6
9s\4tK
#x1+3\
-iIp/j
.b5&4RKm
A'0%`I
dN~WLb
!lhZ;;
Uj-=_e
og^ ~b
Vq%!2?Q!
ZiWI@V
]3c@|A<\
z5bqW3
=*p)gl
	E|5Be[
w@"=}z
XZmqA-
6O?OvS
?M\-&}
Yn<~Fi
:F"{c"4
QE1z=a
z9+8'#
?6nb[v
`*!H&|&;
]ds-H,
@E,9lq
bfk)kjG
G	L19{
:+0-NT|
A`~NJy
aAvz>*p
Se1/p,<J2
SR)%Ilr
Wr	y_-
7z6)	O.
uz	^Ga
x#o	e.Irw
&`)3%?(Y
T24o}*<HP
YQ?}wL
kpITH\
yVHYTt
c:e6k1
s%`;=O
`^x9fm
1O3>Y/
OX-~~i
\=*	cl
/5cKM`C
`m`V')
nV1T_r
A	%i"'A
*Gbe}Qj
S.^yg!b9
VRLswuKAt
]Z&-.|6;7
G>:8%8
R]'j[9
2WHgAQM
2p\$e\
%T6<pc
IAvJYC
I"\*!<3
Gn"Q4q
7rV pU
7rV pU
qXnC&&\q(C
	\*:c!
W(`,gO
v5V>vq
F	K&Koq
s0p|?~
Cqq|T]
xJGq~m
,E*8S/
|e|T99|$W
puzozewumetubuyoribehedopepizidezojazejedejolemetahodenemayikusupukovufasulupidoputemusojabokobeyubesihisavivodunuvudakuzuselosumadufowuvopicogatemerezumurevihosanabaresezatufobefozupibukafafagogedijadaxacogaxuxebogajesaledotubewofukobalokafojopijogifezelo(
72l72l72l
}"i}"i}"i
}"i}"in
}"i}"in
*EP*EP
}"i}"in
*EP*EP
}"i}"in
*EP*EP
}"i}"in
*EP*EP
*EP*EP 
)ht)ht)ht5
j)ht)ht
)ht)ht)ht)ht5
)ht)ht)ht)ht)ht)ht)ht5
)ht)ht)ht)ht)ht)ht)ht)ht)ht)ht5
Z)ht)ht)ht)ht)ht)ht)ht)ht)ht)ht)ht
Z)ht)ht)ht)ht
)ht)ht)ht)ht)ht
)ht)ht)ht)ht)ht)ht
)ht)ht)ht)ht)ht
TqtHqtHqtHqtHqtH5
)ht)ht/
)ht)ht)ht
)ht)ht)ht5
9qtHqtHqtHqtHqtH
)ht)ht)ht)ht)ht)ht)ht)ht5
9qtHqtHqtHqtHqtHqtH
)ht)ht)ht)ht)ht)ht)ht)ht)ht5
TqtHqtHqtHqtHqtHqtHqtHqtH
)ht)ht)ht)ht)ht)ht)ht)ht0l
9qtHqtHqtHqtHqtHqtH
)ht)ht)ht)ht)ht)ht)ht)ht)ht)ht5
TqtHqtHqtH
)ht)ht)ht)ht0l
)ht)ht)ht)ht)ht)ht5
)ht)ht)ht)ht)ht)ht)ht)ht)ht5
qtHqtHC
)ht)ht)ht)ht)ht)ht)ht)ht5
qtHqtHC
)ht)ht)ht)ht)ht)ht)ht)ht)ht5
T)ht)ht)ht)ht)ht)ht)ht)ht5
)ht)ht)ht)ht)ht)ht)ht5
T)ht)ht)ht)ht5
T)ht)ht5
KM%CM%Cn5
`M%Cn5
r2M%C,
r2M%C,
r2M%C,
r2M%C,
r2M%C,
r2M%C,
r2M%C,
r2M%C,
&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&
xxxxxxxxxxxxxxxxxxxxxxxxxxx
x	x	x			x								
xx	x	x	x				x						
xx	x	x	x	x											
x	x	x	x		x	x		x						
xxx	x	x	x				x									
xxxxx	x	xx	x			x								
x	x	xx	x	x			x												
xxxx	xx	x	x	x	x	x	x				
xxx	xx	xx	xx	x													
xxxxxxx	xx	x	x	x	x										
xxxxx	xx	x	x	x	x			x	x							
xxxxxxxxxx	x	x	x	x								
xxxxxx	x	xx	x	x			x	x		x					
xxxxxxxxx	xx	x	x	x			x
								
xxxxxxxxx	x	x	x		x			x								
xxxxx	xxxxx	x	x	x	x											x
xxxxxx	x	xx	x	x			x	x	x				
xxxxxxxxx	xxx	xx												
xxxxxxxxx	x	x	x	x	x		x					x
xxxxxx	xx	xx	x	x	x	x						
xxxxxxxxx	x	x	x		x			x			
xxxxx	xxxx	x	x		x	x				
xxxxxx	x	xx	xx		x		x		
xxxxxxxx	xx	x	x		x			
7}}}}}}}}
UUU```
""""""
qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqv
vqqqqq
vnnnnnnnnnnnnnnnnnnnnnnnn
hhhhhhhhh
Vqqqqq
**PPPPPPPPPPhqqqqq
$qqqqq
$qqqqq
11		eeii
$qqqqq
**APPPPP
qqqqqqhhhhhhhhhhhhhhhhhhhhhhhhhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq
YYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYY!!!!!!!!!!!!!!!!!!YYYYY!
XXXXXXXXXX!YYYY!
X!YYYY!
XXXXXX
!YYYY!
X!YYYY!/
X!YYYY!//
X!YYYY!///
X!YYYY!////
XXXXXX
!YYYY!/////
XX!YYYY!//////
X!YYYY!////////
XXXXXXX!YYYY!/////////
!YYYY!SSSSSSSS
eeeeeeee5e=eYYYYw
IIIIIIwYYYYw
IIIIIIuYYYY
YYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYY
iiiiii
iiiiii
,,,,,,,,,,,,,,
,,,,,,,,,,,,
gGmt;u
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
  <trustInfo xmlns="urn:schemas-microsoft-com:asm.v3">
    <security>
      <requestedPrivileges>
        <requestedExecutionLevel level="asInvoker" uiAccess="false"></requestedExecutionLevel>
      </requestedPrivileges>
    </security>
  </trustInfo>
  <dependency>
    <dependentAssembly>
      <assemblyIdentity type="win32" name="Microsoft.VC90.CRT" version="9.0.21022.8" processorArchitecture="x86" publicKeyToken="1fc8b3b9a1e18e3b"></assemblyIdentity>
    </dependentAssembly>
  </dependency>
</assembly>
<&<2<;<@<F<P<Y<d<p<u<
;(;4;@;L;X;d;p;|;
<$<0<<<H<T<`<l<x<
=&=6=B=N=Z=f=r=~=
P1T1d1h1p1
2$24282H2L2P2X2p2
3(303D3L3P3T3\3d3l3
0004080<0@0D0H0T0X0`0|0