Static | ZeroBOX

PE Compile Time

2016-09-20 19:34:10

PE Imphash

3ca94f885beaa1f663e92508583ab6a3

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x00015736 0x00015800 6.69289319218
.rdata 0x00017000 0x00007941 0x00007a00 6.79011790669
.data 0x0001f000 0x00003120 0x00001600 3.35743227374
.classic 0x00023000 0x00003765 0x00003800 5.50879353196
.std 0x00027000 0x00004651 0x00004800 3.34901245871
.shat 0x0002c000 0x000000de 0x00000200 3.49215532796
.pointer 0x0002d000 0x00000fa5 0x00001000 7.43019480439
.rsrc 0x0002e000 0x0000534c 0x00005400 7.07890889298
.reloc 0x00034000 0x000024d2 0x00002600 4.21813917978

Resources

Name Offset Size Language Sub-language File type
PNG 0x0002e2e8 0x000039ed LANG_ENGLISH SUBLANG_ENGLISH_US PNG image data, 360 x 150, 8-bit/color RGBA, non-interlaced
RT_CURSOR 0x00032ab8 0x00000134 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_CURSOR 0x00032ab8 0x00000134 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_CURSOR 0x00032ab8 0x00000134 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_MENU 0x00032bec 0x0000005c LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_STRING 0x00032fe0 0x000000cc LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_STRING 0x00032fe0 0x000000cc LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_STRING 0x00032fe0 0x000000cc LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_GROUP_CURSOR 0x000330d4 0x00000014 LANG_ENGLISH SUBLANG_ENGLISH_US Lotus unknown worksheet or configuration, revision 0x1
RT_GROUP_CURSOR 0x000330d4 0x00000014 LANG_ENGLISH SUBLANG_ENGLISH_US Lotus unknown worksheet or configuration, revision 0x1
RT_GROUP_CURSOR 0x000330d4 0x00000014 LANG_ENGLISH SUBLANG_ENGLISH_US Lotus unknown worksheet or configuration, revision 0x1
RT_MANIFEST 0x000330e8 0x00000264 LANG_ENGLISH SUBLANG_ENGLISH_US XML 1.0 document, ASCII text, with CRLF line terminators

Imports

Library KERNEL32.dll:
0x417040 GetStartupInfoA
0x417044 GetLastError
0x417048 GetProcAddress
0x41704c LoadLibraryA
0x417054 LockResource
0x41705c GetModuleFileNameA
0x417064 GetModuleHandleA
0x417068 CloseHandle
0x41706c GetCurrentProcessId
0x417070 OpenFileMappingA
0x417074 CreateFileA
0x417078 FlushFileBuffers
0x41707c GetStringTypeW
0x417080 GetStringTypeA
0x417084 LCMapStringW
0x417088 LCMapStringA
0x41708c WriteConsoleW
0x417090 GetConsoleOutputCP
0x417094 WriteConsoleA
0x417098 SetStdHandle
0x41709c InterlockedExchange
0x4170a0 HeapSize
0x4170a4 IsValidCodePage
0x4170a8 GetOEMCP
0x4170ac GetACP
0x4170b0 GetCPInfo
0x4170b4 GetConsoleMode
0x4170b8 GetConsoleCP
0x4170bc GetProcessHeap
0x4170cc WideCharToMultiByte
0x4170e0 GetFileType
0x4170e4 SetHandleCount
0x4170ec GetCurrentThreadId
0x4170f0 SetLastError
0x4170f8 TlsFree
0x4170fc TlsSetValue
0x417100 TlsAlloc
0x417104 TlsGetValue
0x417108 GetStdHandle
0x41710c WriteFile
0x417110 HeapCreate
0x417114 SetConsoleTitleA
0x417118 MultiByteToWideChar
0x41711c CreateEventA
0x417120 SizeofResource
0x417124 Sleep
0x417128 FindResourceExA
0x41712c FormatMessageA
0x417130 EnumResourceTypesA
0x417134 GetLocaleInfoA
0x417138 GetConsoleTitleA
0x41713c HeapReAlloc
0x417140 VirtualAlloc
0x417144 VirtualFree
0x417154 RtlUnwind
0x417158 RaiseException
0x41715c GetCommandLineA
0x417160 ExitProcess
0x417164 GetModuleHandleW
0x417168 IsDebuggerPresent
0x417174 GetCurrentProcess
0x417178 TerminateProcess
0x41717c WaitForSingleObject
0x417180 GetTickCount
0x417184 HeapFree
0x417188 UpdateResourceA
0x41718c HeapAlloc
0x417190 LoadResource
0x417194 UnmapViewOfFile
0x417198 MapViewOfFile
0x41719c SetFilePointer
0x4171a0 FreeResource
Library USER32.dll:
0x41722c GetDlgItemTextA
0x417230 SetClipboardViewer
0x417234 RegisterClassA
0x417238 DispatchMessageW
0x41723c FindWindowA
0x417240 LoadCursorA
0x417244 DeleteMenu
0x417248 DefWindowProcA
0x41724c SetWindowTextA
0x417250 GetSystemMetrics
0x417258 DispatchMessageA
0x41725c CreateWindowExW
0x417260 IsDlgButtonChecked
0x417264 ShowWindow
0x417268 GetCursorPos
0x41726c GetDlgItem
0x417274 CreateWindowExA
0x417278 EndPaint
0x41727c GetMessageA
0x417280 GetSystemMenu
0x417284 GetWindowRect
0x417288 GetMessageW
0x41728c PostQuitMessage
0x417290 SetForegroundWindow
0x417294 InvalidateRect
0x417298 LoadIconA
0x41729c wsprintfA
0x4172a0 GetClientRect
0x4172a4 CreateMenu
0x4172a8 SetFocus
0x4172ac SendMessageA
0x4172b0 BeginPaint
0x4172b4 GetDC
0x4172b8 TranslateMessage
0x4172bc SetWindowPos
Library GDI32.dll:
0x417030 CreateFontIndirectA
0x417034 DeleteObject
0x417038 SetTextColor
Library COMDLG32.dll:
0x417028 FindTextW
Library SHELL32.dll:
0x417210 SHBindToParent
0x417214 SHParseDisplayName
Library ole32.dll:
0x4172d8 CoInitializeEx
0x4172dc StgOpenStorage
0x4172e0 WriteClassStg
0x4172e4 StgCreateDocfile
0x4172e8 ReadClassStg
Library OLEAUT32.dll:
0x4171bc SysAllocString
0x4171c0 SysStringLen
0x4171c4 VariantInit
0x4171c8 LoadTypeLib
0x4171cc RegisterTypeLib
0x4171d0 CreateStdDispatch
0x4171d4 LoadRegTypeLib
0x4171d8 SysFreeString
0x4171dc VariantClear
0x4171e0 RevokeActiveObject
Library WS2_32.dll:
0x4172c4 htons
0x4172c8 bind
0x4172cc listen
0x4172d0 WSAStartup
Library MSVFW32.dll:
0x4171a8 ICInfo
0x4171ac ICSendMessage
0x4171b0 ICOpen
0x4171b4 ICClose
Library AVIFIL32.dll:
0x417000 AVIFileRelease
0x417004 AVIFileInfoA
0x41700c AVIFileInit
0x417010 AVIFileGetStream
0x417014 AVIStreamInfoA
0x417018 AVIFileOpenA
Library SHLWAPI.dll:
0x41721c PathFindExtensionA
0x417220 PathFindFileNameA
0x417224 StrChrA
Library COMCTL32.dll:
Library RPCRT4.dll:
0x417200 RpcStringFreeA
0x417204 UuidToStringA
0x417208 UuidCreate
Library OPENGL32.dll:
0x4171e8 glLoadIdentity
0x4171ec glClear
0x4171f0 glTexCoord2f
0x4171f4 glBegin
0x4171f8 glVertex3f

Exports

Ordinal Address Name
1 0x401210 Take
!This program cannot be run in DOS mode.
`.rdata
@.data
.classice7
.pointer
@.reloc
T$<RSh
T$pQRW
T$@;T$l~
D$pPPh4
9\$|vH
D$$+D$$
Shvids
Vhvids
Vhvids
vidcuj
vidcuj
vidcuj
Shvids
Shvids
L$$+L$$
vidcuj
vidcuj
Shvids
Shvids
Shvids
vidcuj
T$$+T$$
vidcuj
Whvids
vidcuj
vidcuj
vidcuj
vidcuj
vidcuj
D$$+D$$
vidcuj
Vhvids
vidcuj
vidcuj
vidcuj
vidcuj
vidcuj
D$$+D$$
vidcuj
u;QQQj
L$$RPQ
D$,PsA
D$(\sA
0WWWWW
0WWWWW
QQSVWd
0SSSSS
HHtXHHt
>If90t
t$hDzA
j@j ^V
f-00f=
>=Yt1j
HtHu4j
s[S;7|G;w
tR99u2
URPQQh
0SSSSS
0SSSSS
0A@@Ju
^SSSSS
j"^SSSSS
_VVVVV
^WWWWW
tRHtCHt4Ht%HtFHHt
;t$,v-
UQPXY]Y[
t"SS9]
PPPPPPPP
PPPPPPPP
0SSSSS
_VVVVV
t+WWVPV
<+t(<-t$:
+t HHt
string too long
invalid string position
Unknown exception
CorExitProcess
runtime error
TLOSS error
SING error
DOMAIN error
An application has made an attempt to load the C runtime library incorrectly.
Please contact the application's support team for more information.
- Attempt to use MSIL code from this assembly during native code initialization
This indicates a bug in your application. It is most likely the result of calling an MSIL-compiled (/clr) function from a native constructor or from DllMain.
- not enough space for locale information
- Attempt to initialize the CRT more than once.
This indicates a bug in your application.
- CRT not initialized
- unable to initialize heap
- not enough space for lowio initialization
- not enough space for stdio initialization
- pure virtual function call
- not enough space for _onexit/atexit table
- unable to open console device
- unexpected heap error
- unexpected multithread lock error
- not enough space for thread data
This application has requested the Runtime to terminate it in an unusual way.
Please contact the application's support team for more information.
- not enough space for environment
- not enough space for arguments
- floating point support not loaded
Microsoft Visual C++ Runtime Library
<program name unknown>
Runtime Error!
Program:
(null)
`h````
xpxxxx
EncodePointer
DecodePointer
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
?uZEeu
?uZEeu
?UUUUUU
?UUUUUU
bad exception
GetProcessWindowStation
GetUserObjectInformationA
GetLastActivePopup
GetActiveWindow
MessageBoxA
USER32.DLL
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
`h`hhh
xppwpp
Complete Object Locator'
Class Hierarchy Descriptor'
Base Class Array'
Base Class Descriptor at (
Type Descriptor'
`local static thread guard'
`managed vector copy constructor iterator'
`vector vbase copy constructor iterator'
`vector copy constructor iterator'
`dynamic atexit destructor for '
`dynamic initializer for '
`eh vector vbase copy constructor iterator'
`eh vector copy constructor iterator'
`managed vector destructor iterator'
`managed vector constructor iterator'
`placement delete[] closure'
`placement delete closure'
`omni callsig'
delete[]
new[]
`local vftable constructor closure'
`local vftable'
`udt returning'
`copy constructor closure'
`eh vector vbase constructor iterator'
`eh vector destructor iterator'
`eh vector constructor iterator'
`virtual displacement map'
`vector vbase constructor iterator'
`vector destructor iterator'
`vector constructor iterator'
`scalar deleting destructor'
`default constructor closure'
`vector deleting destructor'
`vbase destructor'
`string'
`local static guard'
`typeof'
`vcall'
`vbtable'
`vftable'
operator
delete
__unaligned
__restrict
__ptr64
__clrcall
__fastcall
__thiscall
__stdcall
__pascal
__cdecl
__based(
GAIsProcessorFeaturePresent
KERNEL32
 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
HH:mm:ss
dddd, MMMM dd, yyyy
MM/dd/yy
December
November
October
September
August
February
January
Saturday
Friday
Thursday
Wednesday
Tuesday
Monday
Sunday
_nextafter
_hypot
CONOUT$
SunMonTueWedThuFriSat
JanFebMarAprMayJunJulAugSepOctNovDec
1#QNAN
1#SNAN
bad allocation
&'()U)
h.'U!r)
+eW(b&
p.$y9
''0-T-
$9M|>%#<
7,_ #ia
) \"#Z+)
(!-"n(
)(!"]1*
~1$%['!
&w&#r'
)?!!v&D.
as."n)
'8) pH#D
u-&()%8
!%6'()p
4.#1%
2&*_$.
p6c\8
q!O"$k
&7()r!
&'(A 1"#N-&
x&'2#&
$%L'({r
$0$r8x
e!#l.#
#'r! {
k4%%D
%C$[(]2#^#'Q,
v?BiH B#
r&8{',bv,&r&< 0
" p$*u
"?uO$7
'3f),M
n;)-jd
&-9 U*
]!:#P-
#4i&7x
!!=#N&
"v$+:5
#b}''n
network
msctls_statusbar32
ID GUID
HeapCreate
kernel32.dll
msftedit.dll
CreateTextServices
No mouse installed.
Mouse installed.
Buttons not swapped.
Buttons swapped.
Speed: %d
Threshold (x,y): %d,%d
OpenGL
0x%08x (%d)
eventchange
vector<T> too long
UNhTw5Y
FreeResource
MapViewOfFile
UnmapViewOfFile
LoadResource
HeapAlloc
UpdateResourceA
HeapFree
WaitForSingleObject
GetTickCount
GetProcessHeap
GetConsoleTitleA
FormatMessageA
EnumResourceTypesA
FindResourceExA
SizeofResource
CreateEventA
MultiByteToWideChar
SetConsoleTitleA
InterlockedExchange
GetStartupInfoA
GetLastError
GetProcAddress
LoadLibraryA
SetConsoleCtrlHandler
LockResource
PostQueuedCompletionStatus
GetModuleFileNameA
CreateIoCompletionPort
GetModuleHandleA
CloseHandle
GetCurrentProcessId
OpenFileMappingA
KERNEL32.dll
DispatchMessageW
RegisterClassA
SetClipboardViewer
GetDlgItemTextA
LoadCursorA
FindWindowA
SetWindowTextA
GetSystemMetrics
SystemParametersInfoA
DispatchMessageA
CreateWindowExW
IsDlgButtonChecked
ShowWindow
GetCursorPos
SetWindowPos
DefWindowProcA
GetDlgItem
ChangeClipboardChain
CreateWindowExA
InvalidateRect
TranslateMessage
BeginPaint
SendMessageA
SetFocus
CreateMenu
GetClientRect
wsprintfA
LoadIconA
DeleteMenu
SetForegroundWindow
PostQuitMessage
GetMessageW
GetWindowRect
GetSystemMenu
GetMessageA
EndPaint
USER32.dll
DeleteObject
CreateFontIndirectA
SetTextColor
GDI32.dll
FindTextW
COMDLG32.dll
SHParseDisplayName
SHBindToParent
SHELL32.dll
CreateStreamOnHGlobal
ReadClassStg
StgCreateDocfile
WriteClassStg
StgOpenStorage
CoInitializeEx
CoUnmarshalInterface
ole32.dll
OLEAUT32.dll
WS2_32.dll
ICInfo
ICSendMessage
AVIFileRelease
AVIFileOpenA
AVIFileInfoA
AVIStreamOpenFromFileA
AVIFileInit
AVIFileGetStream
ICOpen
ICClose
AVIStreamInfoA
MSVFW32.dll
AVIFIL32.dll
PathFindExtensionA
PathFindFileNameA
StrChrA
SHLWAPI.dll
InitCommonControlsEx
COMCTL32.dll
UuidToStringA
UuidCreate
RpcStringFreeA
RPCRT4.dll
glClear
glTexCoord2f
glBegin
glVertex3f
glLoadIdentity
OPENGL32.dll
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleW
ExitProcess
GetCommandLineA
RaiseException
RtlUnwind
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualFree
VirtualAlloc
HeapReAlloc
HeapCreate
WriteFile
GetStdHandle
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
SetHandleCount
GetFileType
InitializeCriticalSectionAndSpinCount
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetSystemTimeAsFileTime
SetFilePointer
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
GetLocaleInfoA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
FlushFileBuffers
CreateFileA
train.exe
.?AVout_of_range@std@@
.?AVtype_info@@
.?AVbad_exception@std@@
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
.?AVexception@std@@
.?AVlogic_error@std@@
.?AVlength_error@std@@
.?AVbad_alloc@std@@
P6WUrRBBNBBBBFBBBB,,;BBOdBBBBBBBBBRBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBdBBBBB7evd7BwBmMJadAWN3kUDks`zAt`n:m`nEwJDMkan6ug@AjYPAzgT7dbT7dQF:WJD2uYDVvGR3HIBBBBBBBBBARQRBBWBFJBMBL7U`BBBBBBBBBBLBBGtNOBRJYB@dBBBAFBBBB@BBBtARBBBBRBBBBRBBBBBABBBBRBBBBBdBBABBBBBFBBBBFBBBBBBBBBB@tBBBBABBBPGBABBJBBBBBB@BBBABBBBBBFBBBFBBBBBBBBABBBBBBBBBBBBBBBBAtBBAR@RBBBHBBBLBABBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBFhBBBDBBBBBBBBBBBBBBB
BBBBBBBBBBGt`RBBVBFBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB@63Y[k3BBBBI@`BBBBRBBBBHBBBBBRBBBBBBBBBBBBBBBBBBDBBVDBvYDE3ZRBBBGBBBBBBRBBBBBJBBBBpBBBBBBBBBBBBBBBBBBABBGGBOmIhZ[QkBBGJ@BBBBEBBBBBHBBBBOdBBBBBBBBBBBBBBBBBBRBAdR@6j`0NBBBBBBBdBBBAdBBBBBBBBBBBBBBBBBBBBBBBBBBBBBJBB`NBvbTQkgDFBBEBIBBBB`BBBBBlBBBB7BBBBBBBBBBBBBBBBBBABBGGBOhMPUBBBBBB3BBBBBJBBBBB@BBBBRdBBBBBBBBBBBBBBBBBBRBBtt@63aKNBBBBBJBBBBB@RBBBBBdBBBFRBBBBBBBBBBBBBBBBBBFBBNNBv`mMzZtBBBLBABBBBlBBB
BBJBBBADBBBBBBBBBBBBBBBBBBABBGGBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB
@2BBBBBBBBBBBBBBBBBBBBBSSGiaRnBBBBBJ1;ItBBBB@G4At{tDbASRBBRBAMTp`EiDgBBBFBBBGKAZkmRBBABBBB{tTFY3BBBRBBBN`E5DMBBBFBBBA3bHNJZFBBlYkmRB@EtKQH{tRhBdBBBLj1KBBB{tRh,,,,,(j@GtBBj{TlY3BBl(AmRB@i6DgBBHDh`hBBjQGlUdtBBJN:DFABBBE3aWKBd;R`t713IdBBBBGKA@RABBBB5Dt`BBGqwDbRj{V;BFBBdalBBFBBVFVBBJ1HBBABBKTBG4gQDDbA(dpAgG:ndelOBd(Ebu,,,7L6kBBBBB7Sko0,,,(OhedBBBB{tJ[PG6[B5Vu,,,(MgdGKA@QtK3BB5ERLBBB{tJSFKNLGf[RLG7Zp,,,,j7mlBBBBN`@EzR(UtLhb,,,,Ys@G4@zkdDgBBNgFIABBZFBB1
{3Rh@AQdRBGKQ@RFDDABBN`FIA{dRB@iBDABBHKhZ3BBjVRhGLj1DtBBl{AdRB@G{@yGiaZBBBBBiatmBBBBBEV{tOhQBBBBjfU[Ul2UsELI27SpeSLqpGGlJklBB@mFiVRhD7Sd;N`ByNyNyNgBANyNyNyKRBiNyNyN{3BNyNyNyNgBFNyNyNyKRAWNyNyN{3BZyNyNyNgBKNyNyNzG6S@OMYkmRB@E:d(EdRJBBDPkDBBBBGK1j2dFjy2V`hBB5{R61B(FAtJBBN`FILdGBBG,27SpAJmt;B({KfkmRB@EtK[flf{mRBB{17S7BR(F;BFBBHKpY3BBk`BSkFB@BBGKARQdRBBABBBBlf{mRB@G(BFSkLVABB@E1t(FBtJBBHKJV3BBk`A3KNgFIBdBBBBB{3RhABJBBBGKA@RBBBBB,:@G4BylER;BBN`FIDBh
@ RBG,EUAzRB@G4BPiqDgBBN`FIBBRRBGloAlBBLdeGRBBlYkzRBGKAg{mRBBBBFBBjt@EtKQLN`mqE711BBBBBJWPgGvG7RE3H4hABBBBd;BAG4ZRdSldevfIz7SyBZG5Jd:Fz(uli[ZBiatmBBBBBJWPgBvGtBFSwk@B(jA(;bSZY3BBj{1ZY3BBkgw3ER(0UgW1QgBAvBlBBBBSQ`HiBFABBHF`ZFBBjVTRj`bMAJVFBBBBjVTNjRRh5GhYBB@E:loEoJp:DDABBB(LQBFBBGKaje5OAI5IA@Wl7QdBBJ27BZh;ILdLDRBBj31VjRPYjtzfd;NAj[th@JhFIJoNIBWl5kdBBGwghK[Ij3TNd(dFj0TV{tRDBBBBBJh2DDABBLi5@BBBlZkzRB@OEQQdRB@IFHFVZFBBjVRh@HFZZFBBjVRhAHF`ZFBBjRRh5D7Y
$ NBB@OGRkdRB@iGDABBJ[IG7P1BBBBj{VFZFBBkgI2@vi;DBBBlR{dRB@MYeQa[o:gt5KpY3BBvtFBBB@G(BFSkQG(,,,KA@ReBBBB5MdZBB@k4DgBBJS7BR(ED,4,,;gFIBRJdFBB{tRhBJABBLjnDBBBkguKAf{mRBB@BBBBG7[:,e,,k{0lY3BB5eO:,,(RjQRh,{Vt`hBBd(tF5T4:,,,KAf{mRBBABBBB{3RhAAjBRBGKA@RNdFBB5EhZBBGss,0,,yKB5ea(,,(IA@WlKQdBBJ11BBBBBJ1;ItBBBB@G4ByKAYkmRBBABBBB5A7JBB@G{Byssuy,,711BBBBBJSpGN`EnDgBBBBBBBGl,d`BBJSFGLnD,S,,hI@RhI@RUZmod(tZlP{BRB@EtKR;{tRhBEABBS;UIKIBBJSpAJ[BvdBBBBA3EpgFIBRLVFBBa
jRRh,{Vl`hBBd(tJj`HE3mRI{tRhOFABBS,P{tRhZAUBBLj6AdBBz`LMw@ZBBBBBUZmo[`LRhI@RhI@RhI@RhEgTNgIWdftdBRBBj7RhNBFBBJv;IGRABBBSwy@I(1bRG4YNVBHG;RjJWARTd;JAd,lJgf{nkeY3I1Z4fAI3O72L,72RJB(0zTuIGl2N@@Gq@7m[d;JLYiob;mRUL`s2;WKad`RdBRBBjgka[o,Gi[dPb,ZLj2`DiUtzFdKGlPAdRB@EtKRNjRRh,{VR`hBBd(tFj6RhLBFBBJ[PgPfGetJAgGvkJDABBJ[BgObIA@W,EVkzRB@G4BPI1JKFJBFBBEwf[;LGu@R7BRBBB[[Uj3`@k`A2ypgKBdFBBBGqA;gKBdBBBB@MQ@RTi[RhKpgFIBdJBBBBjVRhAJh3ILiSBBBBj3`HH3`DjUth@Jo`IBPI
PM@PIQ@RN5@VABBGqkl21BEU[UoLG4AtSw0RhMJwFIGGKQ@RJBRBBBJhFIJo3IBWluS4,,7[BgKrIt7hFIS;UfKIBBJmKd(tF,{Vp`hBBiVt,BpgFIBRJBBBBjRRhjVth@S;URKIBBJSpGJ[Bj`U3JJ[,ekt{tJ21BJ1;ItBBBBBSwdtGYloNQR@GtBF6{0[tj3RhNNgFIBdBBBBBj[RhAJhFILkJ,u,,d;R`jfka[o:gtyKw5,HRhI@RhI@RhI@RUU`{tEYWj2thEJwpIAknhJdFB7SBBW3BBRBBgeSDdtBABBBB{lNABRBBBGKINebRj`dSwitOneg;IAzI(BIFERBA{lmtG4aBG4ZVB7dV@7SABZm5dehBBRBBjARGggEa[o:gt711BBBBBJ1,BBBBBEU[UoLG4BPOU@Rhj0RhKJwFIAjOe@RdkgHMOAY(U1bR
aG4bJBBFBBJSDBZSKBZ2QBZjRBBFBBB(13d(1GA@IztHZBRFBBJkNIBLJnBFABBBSwwpSwdtZjBtRG4YNIBLJGAd@GABSwphSwkRJNoa,jEe,LeU2r7SFAEwf[20GhI@R{t[BZ3BBBRBBBOl@BBBBN`GqAt(1hDARRB@G;djGtBDJhE:dRBB:[tNBBK[n;;LRd(t`j`DktDMBBJ[BgR[lue,,,t(0t`gFIBdABBBB{tRhZDABBJoFIBWl7uy,,7SFKNLMw@ZBBBBBiatmBBBBBJSpKJmAl`AiRB@EtKVE5K0,,,;Sw;KKQ@RJBBBBBN`FIDAdRB@IQ@RF5HO;,,(G{AyGiaRnBBBBBJ1;ItBBBBAUU2YWdf{;BdBBi[thbNgFIBtBBBBB{3Rh@BBBBBGKQ@RFDdBBBN`FIBBBBB@Ie@RR,{Vh`3BBd(tVk`BSjL7BM
BBGKA@RBBBBBNgv(UoUUUfdGFtBBuV,p{F5IA@WlKkNBBLd{FtBBj`K04lmJtedeH`HMAEJstZSABZS6Bd(F4RBBBJS6Bt(FwBBBBJS6B[Vk5BJWBB@Iteewj`iA(A,A(dNstnuPDjmQd;EkjJwBZFBBd;NAd,pEgbjMw@QpBRBBvBRBBB@4AdBBBLjt,u,,{3RhGFAdRB@Ie@RJjVRhAJh3ILjdFdBBvBFBBBGliu4,,;gFIABBBBBB{3RhGBBBBB@Ig@RJjVRhAN`FIBBBBBGlPdFBBJSpEJ[BG7Q,BBBBd(pAg`H7ABBBBLjR,u,,d`Q;BdBBN`Aa[o:gtdRBhLkWFdBBvngnYnbIteerj`iA(A,A(dJstl3FhdKBH`DGtW@Jj3AdRBGsQe,,,721BLdiFdBBj`K04ZmJtedetelGH`Iq3kls3ZSARZjORDAB
4!f$x3e
BLh`,,,,i[ZBiatmBBBBBJ2`I@z6GtBBBJpwJKIBBJme;5vOSPkyRBGqGs@Mg@ZB,:V:{tRBBKUR{3RhOGtBBBGKQ@RtRBRBBNgFIGRBBBBB{3RhLBBBBB@Ig@R;{3RhRBBBBBGKQ@QFBBBBBNgFIFdBBBBB{3RhWBBBBB@IK@W,27SpAJ[BgHfOQ@QhjRRh,{VB`hBBd(tF5ei(,,:nhEYWd(tFj3RhEJw`IAB6t72tB[3Dje@I0lmG5FhQBBBs;6nG{BW0(2vMAGIft6@RhS;oLKMBBI@RYsAnhDbRYsAWd(tllfQmRB@IA@WletRBBJS7,7oFIAdSkJJBBBGKA@RJBBBB5KZQBB@k6DgBBJhFILkYABBBjVRhDHKdY3BBjRRh5FdFBB@IQ@R`iVRhKJoFIBjMQ@RZjVRhAJwFIG@IA@Wl`AFBBJmGj3RhDJhFh
ILdrABBBl(QmRB@OQ@R`jRRh5AhFBBGKA@RJBBBBl(AmRBGlBAFBBJSFHJmZT;LRj3RhNJhFIS;UwKIBBJSFHEuGiaRnBBBBBJ1;ItBBBB@G4AzOQ@RdjRRh5GK,,,(EtB(VtJSFKB(1tSeZt6@RhHFFRFBBjt@EtKRed(tNYsG,3HFFRFBBiUBFj3BFjQVFRFBBk`A25ZSFGSSGi[RnBELG4AjOKQB0RB@G(,:3JZ[agBy,EI3RM3BBd(pAgeWKA@RtKFBB5J[,,,(G{AkatyKa5tHIt72GBZpVkQB0RB@E3m[t5;nMgd@Mu@`BBBBBlfAiRB@EtKRK;;LRi[RnBN`E7DMBBBFBBBGqoI@RhI@kiKIBBS,dhI@RhI@RhI@RN`GGhI@RhI@RhI@RhI@RhEU[UoLG4@zkIFABBNgFIABBBBBB{3RhEBBBBBB:WvYB
v0RS::@iHFABBJSFOEwf[20GiVRhFJhFIS;UMKIBBJSpAJw`IABy[@RV,{VZ`hBBj`[,EQ{zRB@I{,;USKIBBJmDiVRhDJhFIS;UWKIBBJSpAGM`IAdy[@R`Nfp{0yK(de6L6h@4gAjI;SeRjWVhRFBBlzkBRB@G{@{a[o:gt6@7pAn,QO6S6h@45(@Mg@ZBUZmod(tl{tVBY3BB@RRBtJwEAJ2UAN`EADgBBBFBBBGKA@RBBBBBjQ[FYFBBl4khRB@iGDgBBJwE@HLpYFBBlPQBRB@IQe@kHFABBJoE:S;UVKIBBJSpAN`FINAWRBG,ETAzRB@G4BW,EQQzRBGKQ@RF@RRBtJhFIS;UTKIBBJSp@Lj6GdBBhI@RhI@RhI@Rd(t`j3RhIJ[BgATG(BM3FOdABBBBd;R`tdtBhJ23Id@OU@RljVRhAJwFI@@IU@RJ
'jRRh5@dIBB@7BRBBBJSFKNJNBJ11BBBBBJ1;ItBBBBAWd(tZdy3VRFBBBlwFI@Q3@p`EEFABBBJBBB@G(BI3FZS7B[R4d;RZvBFBBBAatdtBvy@BRB@A(y@BRBA361bRjtLEtKR@,:@GttPA(y@BRBA24ZSFDOdABBBBT;JNBI@OQ@Rl{3RhABFBBB@IQ@RJj3RhJJhFILjV@BBB55gnhGKBt6@RhI@RhI@RhI@RhI@G4GzkoDgBBM2FIFigQ@QRk`GgQ@QZg@mYzlwVIFGg[@RZ0UthJJoVIA@OU@QF0UthHJoVIAPMU@RRjQRh,:GqAw0Z0gig1JSFSNLRi[RnBJwFIBPioDgBBLnjGRBBYs@G4Gz6yEMBBJwFIF@OFJSrBZS5A[`KjtzU5EQBBM2BDM2`I@GgRAGg[@RZ0VBJ0UthFJwBAJoNIBiKQ@RF0EMB
{BJoFIBzkqKIBBJSBRJhFILiyGBBBN`@G{GyGhI@RhIGa7;LRhI@RhI@RhI@RhI@Rj3RhANLMg@ZBiatmBBBBBJwFIBWGhI@RhI@RhI@RhIAWd(tZlb{zRBGKQ@RJDtBBBNgFIBRABBBBiUthIN`FIBAURB@GtF@IQ@RN5DBNBB@OQ@RdjUth@JoFIBPkqKIBBJSBRJhFILih@tBB5J;NBBGqGY@RhI@RhI@RhI@RhIA[UoLG4G@OMbAmRB@E:d(L1RBBBJp:sDgBBGKaiU`FhJpHL`E0Glw5ABMS@GmJG7HzBBBBd;NAd;JNLeM27lhFIJmG5LdJBB@EtJmKG7WZBBBBiQ{1jyThY3BBtfN@Bg5IQdiKAdBBBBGltdhBBBMKGJoDAJ2FIAWKQ@RJKBBBBJoFIBPksDgBBJwFDBPIA@W,E[AzRB@G4BzEtKQwj3Rh
gHJ2R,JSj(0R1d(kBd(@,g@5OQ@RdB{1hY3BB{3Rh@FBBBB@IQ@RFj3RhEJo`IBzIA@W,ET{zRB@G4A@EtKRUdtTdY3BBBZSFNEwf[;N{:voH,,,,,{Vd`hBB{tRh`EUBBJoFIBWlou4,,5DhY3BBj3RZAJoFIBjOQtiKA@R;UVBBjVRhALk1,u,,jUthAN`FIA{URBGlYu4,,711BBBBBHD`Y3BBk`A3A;LMwdBBBBAUjfU[UoLG4FyKAY{mRBBABBBB5AdJBB@MAF@MAJVfBBBBd(Gt5LZIBBGKAbAmRBBBBBBBH`PMQ@Red(Gtl5QmRB@7zEkBB@0JTFBBd,dKG75aBBBBd,dOG76UBRBBl`kZRB@EtB(EiRBBBHKNTFBBk`BSkZBBBB@OSgAZRB@42EkBBJ[,G7RwBRBBv;kZRB@ORtjG(BFSkepABB@GttzA
(;kZRBAyPZpWj3pFj7JBBFBBiaFBBFBBjV[FG4YG@JS7FB(F@dFBBJS7JB(FkRFBBJS7@B(FWRFBBJoFIBWKA@WNUVBB5Da:,,(MwdBBBB@MYeQa[o:gt4uJTFBBdeuJTFBB`(vO`tPOF7SG@BLTBBABBJ1DBBABBJoUyLjS,e,,j3[NdeuJTFBBjZZBBFBB`wLklDgBBGKak`A,Gvv{hJSGBWpglDgBBK1oiW{albQmRB@MMO3BBBBBBe@OFJ[PgM5MW`yKQ@RJKBBBBJoNIBPORBPIA@W,E[AzRB@G4BzEtB(F5dBBBJ2EzJoFIBzksDgBBJpFvJoFIBjOQgjIQ@RFj3[NjRRh,{Up`hBBd(tR5714zEkBBJpykeZSkWu,,,(OPtPEzR(Ft,4,,(hq,,,,G4fABBABBJoMtJmKd`;BBS,,YlL6BBABBBBSPNfO
ae`RwBBABB@mRB`fI;Jo:yLjq,S,,G4gEyJwMtDbIdRBBRB@GttzA(;kZRBBSdl[(,,,s@,,,,t(1Alw:{JmAd`hB,,,,dG7BG3iAORBBRBBs3BKKje@Ie`ylZuy,,t(1Q`zJAvv:jtbOe`RwBBABB@pGB`fI;Jo:yLk@,S,,jW4qlZpMsDgBBBK{j3FFjVRh@JwA@JwB@N`FIG{URB@IQ@RF5Om4,,(IQ@RF{tRhnEUBBLjs(,,,hI@RhI@RhI@RUZmoV7SpEJwg@JpGjtB:hRBBtKgOSZ3BBNBSd4BBBBB:ARBBtB(E1RBBBNgFIBRBBBBB{tRh@tBBBLiQAtBBd,dAG7RZBRBBk`A3O``FIBpBBBG,3LwijebMu@`BBBBBSYRBBNA3HW1TBBGBG7PgBBBBSYNBBNA3U5DpY3BBk`A3SZog@Jwg,Nm,7I@Mg@ZB
L&{3RhABBBBBGKA@RJBBBB5DtKBB@G(BFSkMNBBB@EtKWJ{tRh@BBBBS,RvS,,,,(O[eyItdRBi[ZBiatmBBBBBNgFIBRBBBBB{tRh@BBBBLdpAtBBd,dAg`WKQ@RFBRBBBN`FIBdBBBGlFt`BBLkv(u,,54Z:KRBBtB(Ebu,,,;gFIBRBBBBB{tRhABBBBLiwAdBBd,dAgAjEtB(FPe,,,;`FIBRBBBG,3Lo;,,,,YsGKQ@RFBRBBBN`FIBRBBBGluBZBBLok,,,,iaRnBBBBBNgFIBRABBBB{tRh@tBBBLj`AdBB5VK,,,(Mw@ZBBBBB{3RhABFBBBGKA@RJBBBB5KtDBBGsJe,,,6@RhI@RhIAUU2YWd(t`{tRhvDgBBS;UFKIBBJpgpDgBBJSpAJpw[KIBBJp:JKIBBJ[ag@jMgd@OB7hFIS,Ud(tFj`a,27[B<
gRzE:mRJj3NFjWRh,:@OTtjE10[a{tRhvDgBBS;UPKIBBJSpAJSFKEwf[20Gi[ZBlaQmRB@EtKVKt711BBBBBELG4AiKQ@RFGBBBBN`FIBFBBBGlRBZBBJ[Bj`M3RlwFI@GKA@P7Y3BBjRLOQ@RhjVNF,{VR`hBBlaAmRB@G4BPIKaAmRBGKA@P7Y3BBjVNJ,{UJ`hBBN`@G4BPG{Akat4i,,,,,5,PI:l1;ItBBBBAWd(tZlaQmRB@O[@Rdk`A2G7SFDGKBT;LRiaRnBBBBBN`FIOkmRBG,EQAzRB@OEaAmRB@G4BPE3mR[jtJ61KVH535O@GmYg@jItlw@@J[BgeKKA@P7Y3BB,{UJ`hBBd(tFd;RZN`Aat6@Mw@ZBBBBBj3dJjVlJjRRh5GlEBBGKA@P7Y3BB,{UJ`hBBd(tF5:DI3JwP@JhUpDgBBLuYi[ZB
,V7SpDJwFI@PG(BFSkK;BBBAzKZS7B0VMlaQmRB@EtB(EmRBBBJSFDOdABBBBT;LRlaQmRB@EtB(EhtBBBHD3Y3BBd,dAgg5kpDgBBJ[BgADOTBjIA@WluRRBBJ[ajgk24;`EpDgBBBBBBBGKAaQmRBBBBBBB{tRhvDgBBS;U@KIBBJSpALvfjebMu@`BBBBBlaQmRB@EtKR[{tT3Y3BBBRBBBJSFDOdABBBBT;LMgdGKA@P7Y3BB,{UF`hBBd(tF5:elre0,,(oY,,,,i[RnBLja,e,,5TS,,,(RhI@RhIBGRGzALEAEBBA3AWKBt1bRYlE7DBpAG6WBG4aBt721BJwFIBQndWkMTmREN`GGYsGqyl13IdBBBB@Mu@`BBBBBUoLOU@RNj2thFBMPSB(0`dZSw3JVkebMQBJZgAp{zY@OVBt61m`KB2BJLgMzGJSA
$BZSBHGm{gfd{tEwft721BEU[UoN{:lSpKJw;IG@IS@WlPtNBBJS7@K`OYlF:BBABBF2bgBvG{AzI;Ewf[20GhOdBBFBB5Fa,,,(EtKWmlWtBRB@MhBBBRBBSw7BVBFBBG4grAl2`BkjE4[VL5;gnhJSDBZSGHGmvg@aKQ@RJ@BBBBJo;IBPIK@Wl1dJBBJ[Bgg5G{AzI0lmtT26e[`MnhJSFKGK1T7mt[o:gt723IdAWNgvG4BkndW3BBFBBWUs3G7SF@JmZT;LRiaRnBBBBBOdBBFBB5Oa(,,(EtKWij3RhFN`FIBBBRBBwBBABBJoFIBWl1e4,,7SF@JmGjgkatyKBYlF:BBABBF2bgBSyt6@7BBABBLk1,u,,k`A345F;BFBBG4fBAdABBNLRi[RnBEZ{:nbASRBBRBAMToLO[@RNgB1I;Ewft6@Mw@ZBBBBB
vBBBRBGlMu4,,7[BgLTkSBABBJ1JBBABBB(0dARBRB@MUBFZG4gIAl[IgN`{tDbR:hJmJKRKkgw3ElSqBZSBBZS@HGmJgfh{:lmtT24GYs@I2lmtT24GjebMu@`BBBBBVyKaYlF:BBABBF2bgBPI1EuGvBBBRBGl{S0,,7[BvBBBRBBSQgjI1EuGiaZBBBBBN`AndW3BBFBBWUs3B;MnhJSp@OdBBFBB5IS:,,(EtKRoj3RhGN`FIBBBRBBwBBABBJoFIBWlwu0,,7[BgAHOR@W03NKlK7SF@NLMwdBBBBB{tLuziaZBBBBBia;BBBBBU2Z{,2LG4BkndW3BBFBBWUrOg@RZgBnG{BjI(Ewf[;L7BBABBLdn,e,,k`A35bF;BFBBj6jBBFBBkgw31lo`IBWKA@RBBFBB5FS:,,(EtKWDd`NBBFBBjgs2@(v5i[ZBw
Gd(7Ad;JVj3lFk`o2A7w@GJ[BgAzE:m,lj0lNd;RJT25A{tBBRB@I(E,GiaZBBBBBd;RJNe(I(Ewf[;LRhI@RhEERSRBRBB@MW@RN`kTA5RBRBB@G@RBwBABBBG3BFBBBg(pstZNIBEkYt6@RYsAnhJSpEJwFIAjOU@R`j`Fs3WmJ`kHIG@WKQ@RFBBBBBM;pIJSFENNstpgFIBRBBBBBjQRh0zthd;RV1fGGhI@RhIG,IQQyRB@RhS;oFKMBBI@R,zVN`3BBhIG,IRkyRB@RhS;oAKMBBI@R,zVB`3BBhIG,Ie{zRB@RhS;o(KIBBI@R,z[3`hBBhIG,IeAzRB@RhS;o4KIBBI@R,z[l`hBBhIG,IfQzRB@RhS;o7KIBBI@R,z[``hBBhIG,IgkzRB@RhS;o2KIBBI@R,z[R`hBBhIG,I`{zRB@RhS;ozKIBBI@R;
g/|.,z[F`hBBhIG,I`AzRB@RhS;ouKIBBI@R,zT7`hBBhIG,IaAzRB@RhS;orKIBBI@R,zTd`hBBhIG,IY{zRB@RhS;ooKIBBI@R,zTR`hBBhIG,IZQzRB@RhS;odKIBBI@RlgQmRBGGi[ZBiatmBBBBBJwFIBPKAgQmRBGGhI@RhI@MW@RFd(Wt,0K;UZmoU2YWVZKpnBJBBLkF4,,,{tRhBBBBBLiB,u,,jyUV`hBBj`SqGN`FIDRBBBG,2lSpAN`FIBBBBBGlmu4,,7o`IBPIA@WlPu4,,:1gdS0,,,JSOJTB,e,,d,dgepnMu`y(,,;{tOoKBBBBj{2h`hBBia[N,u,,;5uKk`y(,,;`BRBB{3RhGBNBBBGKQ@RJBdBBBN`FIBBBBBGKQ@RFBBBBBS,Wd(tR{3RhGBNBBBGKQ@RJBRBBBJhFIJoVIBW,37SpFNgF
LIBtGBBBB{3Rh@@BBBB@IA@PIU@RF,:N{zZSpFNfE3S4,,tZBBBGKkgW(,,;ABBBBYloM7JoFIBjIU@RN{3RhA@NBBB@IM@W,ETkzRB@G4A@EtKVLiT[tN`AYT26e[Z2k,NL7ARBBBGKa5MOs,,(IkYy:,,(7AdBBBLi@5e,,jZTd,e,,vB`BBBGlpvm,,7nEsS0,,4dJBBBB5HOs,,(Ikbi:,,(7@RBBBLjP5e,,jZTp,e,,iZ[J,e,,jaTB,e,,jg5Ik[y:,,(It7vFwYy:,,(IK@WDkaG:,,:G{lT{,e,,WNbEpu0,,2SDkaS:,,:IjVRh@J1EpS0,,;bEwS0,,3WDka[:,,:`{lT1,e,,IZoFIBWDkae:,,:y{lT7,e,,[NbEve0,,3mDkaq:,,:v{lT4,e,,`NbEuS0,,0ODka0:,,:u{lT(,e,,Z;bEu,0,
/|.,2SDk`G:,,:o{l[A,e,,`pbEtu0,,0aDk`S:,,:o{l[F,e,,`pbE{e0,,ySDk`a:,,;z{l[K,e,,BLj6,S,,iZTN,e,,{3RhGBFBBBGKQ@RJBBBBBJo`IBWKA@RBBB@BjVRhFS;U:KEBBJSpEJ[BG7PZBtBBd;ZAd,7EG7[6,u,,j4TB,e,,{3RhGBBBBBGKQ@RJBBBBBNgFIBRnBBBB{tRhBBBBBJpgIKMBBJo3IAG,37SpEJ[BG7iDBtBBj7U;,e,,jWRh{l[J,e,,[NbEze0,,0SDk`q:,,:i{l[O,e,,`JoFIBWDk`y:,,:j{l[M,e,,`pbEyu0,,1KDk`,:,,:h{l[R,e,,BLib(,,,jWRh,{Vt`3BBk`A[G7QiBtBBvBVBBBGlAvi,,4dDBBBB5Sym,,(7AtBBBLiz6,,,vBdBBBGl5Le,,4dIBBBB5M4mr$
,,(Ok[y:,,,KA@RFBRBBjVRhAS;ULKIBBJSlBUg[dOtEzS0,,2tSkZi:,,,DkB[J,e,,BNbEhS0,,z[DkYK:,,:y{lTP,e,,[NbEh,0,,1mDkYW:,,:m{lTU,e,,O`bEou0,,z[DkYe:,,:h{lTZ,e,,BNbEpS0,,1iDkaK:,,:3{lTz,e,,gNbEp,0,,0GDkaW:,,;5{lT2,e,,O;bEwu0,,z,Dkae:,,:s{lT7,e,,`NbEve0,,z0Dkaq:,,:k{lT4,e,,`NbEuS0,,1mDka0:,,;v{lT(,e,,Z;bEu,0,,1,Dk`G:,,:w{l[A,e,,O;bEtu0,,1qDk`S:,,:y{l[F,e,,a;bE{e0,,14Dk`a:,,;B,{V;`hBBjVRhGJvEeS0,,7h3IJoFIBjMkYG:,,(IQ@RF5D45,,(MkaG:,,,KQ@RRBBBBBNgFIBtBBBBBj[Rh@N`FIBBBBB@IQ@RF5Ays,,(G4APE
2tD 4+
wfgF{f`v
wjlmOfuf
Jmulhfq!
#vjB``fp
p>!ebopf
!=?,qfrv
fgSqjujo
?,pf`vq
vpwJmel
?,bppfna
qrttD%
))P"j[
l=U-b)
k7TK6!
L%$]*) t
s :.P$>
#Ex&<$
x`}J[x
yyHq0u
']a-X#*W.S*H&W"y=!
v4%-+x&
o+u%j#a1#h_
h,r~r
\2#$P"
]=g'g#6'
#` ;(n
$5['([ ]
#/!+!J$)$
#94%>
C&7"Z!N"
%$'m!p
m-s#]w.
m= *2rN'.
!g+'`*
"Z{( G
X.fZ' $x#S-
a%+F*:Z%1dp
)1!* p
*?K+:w
tEXtSoftware
Adobe ImageReadyq
9zIDATx
Ojt\w!z
SN9y1'
|h"hByp
gtaVG!IK
{kf#6.*
0`@LEK
ZE;JEcF
5c)vGD
jNbf?*X
s`C#+A
cG)w:h
$lK5j3$d[
h,pX,h
B_9<fE
U4S}4L
|E`1kN,Ph
Q>1n#Q'g
$TW)b7T
Hbu#oY
n}M"hB
#a:\Y3Er
'gayxL(gWy
J'c"hB
BM>m-m
-`?m"hBU
s;dM$]
(Dr+p#,
.?{2\u
Eq&hkm
n'e"hB
fJE[ZAk
|h?0|h
|||@@@
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIdentity
type="win32"
version="4.0.0.0"
name="Proglog"
publicKeyToken="5f87e45dc57c44dd"/>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v3">
<security>
<requestedPrivileges>
<requestedExecutionLevel
level="AsInvoker"
uiAccess="false"/>
</requestedPrivileges>
</security>
</trustInfo>
<!-- The values of elements and attributes are case-insensitive, except for the value of the type attribute. -->
</assembly>PADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADD
1I2s2y2
3$3-3G3l3
42484r4z4
55&5,5H5R5\5j5w5
7%707@7R7Y7~7
8"868@8T8`8f8r8
8/9;9A9N9]9r9y9
;+;1;7;I;e;s;
=0=Y=u=
=%>+>A>Q>
?&?.?g?
0$0P0Z0`0g0q0{0
0<1f1l1
2*282c2m2
3#3)3L3]3b3p3
4#4B4f4l4w4
6.6E6P6V6^6f6x6
=.=F=N=Y=a=f=u=
>Y?_?i?
0"0<0`0
20282C2K2Q2
3(393>3K3f3n3x3
56?6`6j6p6v6
77)7/7<7V7
9/959;9
:,:1:>:Y:a:k:s:
< =@=a=k=
>$>.>7>a>g>w>
?!?A?`?
&0+050J0P0
001B1s1
2"2=2M2S2c2{2
2I3O3Y3p3
6*626<6
8E8M8\8t8
;'<<<e<k<s<{<
0-0N0X0
3"3*373?3
4$444L4T4a4i4n4w4
6-6V6\6
7$818X8g8
889J9P9j9
:,:8:M:n:
;";H;[;c;v;
3$3h3u3
314<4`4_6l6
9+9K9U9r9
<(</<7<<<@<D<m<
=$=(=,=0=
>M>T>X>\>`>d>h>l>p>
5!5%5)5-5155595=5A5E5I5M5Q5U5Y5]5a5e5i5m5q5u5y5}5
6 6W6h6
9#9*9B9t9!:,:`:
>!>'>0>7>Y>
?.?9?S?_?g?w?
2/2<2l2r2z2
3"3-3~3
9-9P9c9
:[:a:r:
='=.=G=[=a=j=}=
=6>V>d>i>
1!141?1E1K1P1Y1v1|1
2-232D2
:#;(;6;S;
;*</<W<|<
=)=6=[>b>
0:1M1h1
7d9`;d;h;l;p;t;x;|;
<(<=<D<X<_<w<
=*=1=>=a=v=
>.>F>l>
0"0'0-01070<0B0G0V0l0w0|0
1&1,1F1U1b1n1~1
262i2x2
5 5$5M5s5
6-74787<7@7D7H7L7P7
:&:f:p:
>>@>E>j>(?-???]?q?w?
,070b0m0
2U3^3d3
4*4Z4t4
8+80868:8@8D8J8N8T8X8]8c8g8m8q8w8{8
=_>e>{>
01090U0b0u0=1c2\3
<X=^=d=j=p=v=}=
>#>)>/>E>L>l>u>
1%14191C1Q1
133:3@3
5w5+6K6;7d7
:%;;;|;
= >]>t>
20?0I0W0`0j0
4!4&454\4
6<7S7d7
98:Y:e:
<=*=M=
:$:T:H;
>"?(?y?
2"212?2G2T2r2|2
3T4f4s4
7=8G8_8f8p8x8
</<A<S<e<w<
=&>R>z>
<!=G>Y>k>
? ?'?9?U?r?
2K2_3U4]4
63797I7
<-=D=t=
03474;4?4C4G4K4O4S4W4[4_4l4G5_5n5
7$7(7-7
3$3(3@3D3H3L3P3T3X3\3`3d3h3l3
3(4,40444H4L4@;D;H;L;P;T;X;\;`;d;h;l;p;t;x;|;
< <$<(<,<0<4<8<<<@<D<H<L<P<T<X<\<`<d<h<l<p<t<x<|<
9,9<9@9P9T9d9h9p9
:$:4:8:H:L:P:X:p:
:D;L;T;`;
< <<<@<H<L<h<
=8=X=t=x=
> >$><>@>P>t>
?$?8?X?x?
0$0@0`0
1 1(1<1D1X1`1t1|1
2 242@2H2`2l2
3 3,3L3X3
0$0(00040L0X0
3$3,343<3D3L3T3\3d3l3t3|3
6 7$7x;p<
=<=H=L=P=T=X=`=d=
> >$>(>,>0>4>8><>@>P>X>\>`>d>h>l>p>t>x>|>
?$?,?4?<?D?L?T?\?d?l?t?|?
404P4p4
mscoree.dll
(null)
KERNEL32.DLL
((((( H
h(((( H
H
Dstream
ewindow title
Open In Browser
Copy URL In Clipboard
Windows
Windows Vista
Windows Server 2008
Windows 7
Windows Server 2008 R2
Windows 2000
Windows XP
Windows Server 2003
Windows Server 2003 R2
Windows Server 2012
Windows Server 2012 R2
Windows 8
Windows 8.1
Sunday
Monday
Tuesday
Wednesday
Thursday
Friday
Saturday
Invalid file name - %s The specified file was not found"%s (Version %d.%d, Build %d, %5:s):%s Service Pack %4:d (Version %1:d.%2:d, Build %3:d, %5:s)
32-bit Edition
64-bit Edition
January
February
August
September
October
November
December
Antivirus Signature
Bkav W32.AIDetect.malware1
Elastic malicious (high confidence)
MicroWorld-eScan Trojan.BrsecmonE.1
FireEye Generic.mg.b5113d839a4752d3
CAT-QuickHeal Clean
Qihoo-360 Clean
McAfee Generic.aky
Cylance Unsafe
VIPRE Trojan.Win32.Generic!BT
AegisLab Trojan.Win32.Yakes.4!c
Sangfor Trojan.Win32.Save.a
K7AntiVirus Trojan ( 0056ec631 )
BitDefender Trojan.BrsecmonE.1
K7GW Trojan ( 0056ec631 )
CrowdStrike win/malicious_confidence_100% (W)
Arcabit Trojan.BrsecmonE.1
BitDefenderTheta Gen:NN.ZexaF.34738.lKW@aK!iJjgi
Cyren Clean
Symantec ML.Attribute.HighConfidence
ESET-NOD32 a variant of Win32/Kryptik.FIKT
Baidu Clean
APEX Malicious
Paloalto Clean
ClamAV Win.Packer.MalwareCrypter-6620810-1
Kaspersky Trojan.Win32.Yakes.qvha
Alibaba Trojan:Win32/Yakes.153af6a8
NANO-Antivirus Trojan.Win32.Yakes.egrigb
ViRobot Clean
Rising Trojan.Generic@ML.90 (RDML:X7gWT3818k+RAZjw0WCKSQ)
Ad-Aware Trojan.BrsecmonE.1
Sophos Mal/Generic-S
Comodo Clean
F-Secure Clean
DrWeb Clean
Zillya Trojan.Yakes.Win32.59463
TrendMicro Mal_MiliCry-1c
McAfee-GW-Edition Generic.aky
CMC Clean
Emsisoft Trojan.BrsecmonE.1 (B)
SentinelOne Static AI - Malicious PE
Jiangmin Trojan.Yakes.rht
Webroot W32.Trojan.GenKD
Avira HEUR/AGEN.1127203
MAX malware (ai score=88)
Antiy-AVL Trojan/Generic.ASMalwS.1B5F8D3
Kingsoft Win32.Troj.GenericKD.v.(kcloud)
Gridinsoft Clean
Microsoft Trojan:Win32/Dynamer!ac
SUPERAntiSpyware Clean
ZoneAlarm Clean
GData Trojan.BrsecmonE.1
Cynet Malicious (score: 100)
AhnLab-V3 Trojan/Win32.Yakes.C1572696
Acronis Clean
VBA32 BScope.TrojanRansom.Encoder
TACHYON Trojan/W32.Yakes.194560.G
Malwarebytes MachineLearning/Anomalous.93%
Panda Trj/GdSda.A
Zoner Clean
TrendMicro-HouseCall Mal_MiliCry-1c
Tencent Win32.Trojan.Yakes.Pcrx
Yandex Trojan.GenAsa!Gn9tUCxmWMU
Ikarus Trojan.Win32.Crypt
eGambit Unsafe.AI_Score_99%
Fortinet W32/Yakes.QVHA!tr
AVG Win32:Malware-gen
Cybereason malicious.39a475
Avast Win32:Malware-gen
MaxSecure Clean
No IRMA results available.