Static | ZeroBOX

PE Compile Time

2019-05-14 15:53:05

PE Imphash

fc751f775e55aacb1c0c763364369f41

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x000933e5 0x00093400 6.50653108221
.rdata 0x00095000 0x0004effc 0x0004f000 4.15141285701
.data 0x000e4000 0x00009818 0x00006a00 2.80394897545
.pdata 0x000ee000 0x000050b8 0x00005200 5.81307726989
.rsrc 0x000f4000 0x00004160 0x00004200 6.57651655163
.reloc 0x000f9000 0x0000255a 0x00002600 3.96178927559

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x000f7aa0 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_US GLS_BINARY_LSB_FIRST
RT_ICON 0x000f7aa0 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_US GLS_BINARY_LSB_FIRST
RT_ICON 0x000f7aa0 0x00000468 LANG_ENGLISH SUBLANG_ENGLISH_US GLS_BINARY_LSB_FIRST
RT_GROUP_ICON 0x000f7f08 0x00000030 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_VERSION 0x000f4190 0x000002c0 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_MANIFEST 0x000f7f38 0x00000224 LANG_ENGLISH SUBLANG_ENGLISH_US XML 1.0 document, UTF-8 Unicode (with BOM) text, with very long lines, with CRLF line terminators

Imports

Library ADVAPI32.dll:
0x140095000 CryptSetHashParam
0x140095008 CryptGetHashParam
0x140095010 CryptExportKey
0x140095018 CryptAcquireContextW
0x140095020 CryptSetKeyParam
0x140095028 CryptGetKeyParam
0x140095030 CryptReleaseContext
0x140095038 CryptDuplicateKey
0x140095040 CryptAcquireContextA
0x140095048 CryptGetProvParam
0x140095050 CryptImportKey
0x140095058 SystemFunction007
0x140095060 CryptEncrypt
0x140095068 CryptCreateHash
0x140095070 CryptGenKey
0x140095078 CryptDestroyKey
0x140095080 CryptDecrypt
0x140095088 CryptDestroyHash
0x140095090 CryptHashData
0x140095098 CopySid
0x1400950a0 GetLengthSid
0x1400950b0 LsaOpenPolicy
0x1400950b8 LsaClose
0x1400950c0 CreateWellKnownSid
0x1400950c8 CreateProcessWithLogonW
0x1400950d0 CreateProcessAsUserW
0x1400950d8 RegQueryValueExW
0x1400950e0 RegQueryInfoKeyW
0x1400950e8 RegEnumValueW
0x1400950f0 RegOpenKeyExW
0x1400950f8 RegEnumKeyExW
0x140095100 RegCloseKey
0x140095108 RegSetValueExW
0x140095110 SystemFunction032
0x140095118 ConvertSidToStringSidW
0x140095120 CreateServiceW
0x140095128 CloseServiceHandle
0x140095130 DeleteService
0x140095138 OpenSCManagerW
0x140095140 SetServiceObjectSecurity
0x140095148 OpenServiceW
0x140095150 BuildSecurityDescriptorW
0x140095160 StartServiceW
0x140095168 AllocateAndInitializeSid
0x140095170 QueryServiceStatusEx
0x140095178 FreeSid
0x140095180 ControlService
0x140095188 IsTextUnicode
0x140095190 OpenProcessToken
0x140095198 GetTokenInformation
0x1400951a0 LookupAccountNameW
0x1400951a8 LookupAccountSidW
0x1400951b0 DuplicateTokenEx
0x1400951b8 CheckTokenMembership
0x1400951c0 CryptEnumProvidersW
0x1400951c8 ConvertStringSidToSidW
0x1400951d0 LsaFreeMemory
0x1400951d8 SetThreadToken
0x1400951e0 CryptSetProvParam
0x1400951e8 CryptEnumProviderTypesW
0x1400951f0 SystemFunction006
0x1400951f8 CryptGetUserKey
0x140095200 OpenEventLogW
0x140095210 ClearEventLogW
0x140095218 SystemFunction001
0x140095220 CryptDeriveKey
0x140095228 SystemFunction005
0x140095238 CryptSignHashW
0x140095240 LsaOpenSecret
0x140095248 LsaQuerySecret
0x140095250 SystemFunction013
0x140095258 LsaRetrievePrivateData
0x140095268 LookupPrivilegeValueW
0x140095278 SetServiceStatus
0x140095288 IsValidSid
0x140095290 LookupPrivilegeNameW
0x140095298 OpenThreadToken
0x1400952a0 CredFree
0x1400952a8 CredEnumerateW
0x1400952b0 GetSidSubAuthority
0x1400952b8 GetSidSubAuthorityCount
0x1400952c0 SystemFunction025
0x1400952d0 SystemFunction024
Library Cabinet.dll:
0x140095390 None
0x140095398 None
0x1400953a0 None
0x1400953a8 None
Library CRYPT32.dll:
0x1400952e0 CertGetNameStringW
0x1400952e8 CryptEncodeObject
0x1400952f0 CertEnumSystemStore
0x140095310 CertOpenStore
0x140095320 CertCloseStore
0x140095330 PFXExportCertStoreEx
0x140095338 CryptUnprotectData
0x140095340 CryptBinaryToStringW
0x140095348 CryptStringToBinaryW
0x140095350 CryptProtectData
0x140095358 CryptExportPublicKeyInfo
0x140095368 CertNameToStrW
Library cryptdll.dll:
0x140095f40 CDLocateCSystem
0x140095f48 MD5Update
0x140095f50 MD5Final
0x140095f58 CDGenerateRandomBits
0x140095f60 CDLocateCheckSum
0x140095f68 MD5Init
Library FLTLIB.DLL:
0x1400953b8 FilterFindFirst
0x1400953c0 FilterFindNext
Library NETAPI32.dll:
0x140095968 DsGetDcNameW
0x140095970 NetRemoteTOD
0x140095978 NetSessionEnum
0x140095980 NetServerGetInfo
0x140095988 NetWkstaUserEnum
0x140095990 NetStatisticsGet
0x140095998 NetShareEnum
0x1400959a0 NetApiBufferFree
Library ole32.dll:
0x1400960e8 CoInitializeEx
0x1400960f0 CoUninitialize
0x1400960f8 CoCreateInstance
Library OLEAUT32.dll:
0x1400959b0 SysFreeString
0x1400959b8 VariantInit
0x1400959c0 SysAllocString
Library RPCRT4.dll:
0x1400959d0 RpcBindingVectorFree
0x1400959d8 UuidToStringW
0x1400959e0 RpcServerUseProtseqEpW
0x1400959e8 NdrServerCall2
0x1400959f0 NdrClientCall2
0x1400959f8 UuidCreate
0x140095a00 RpcEpResolveBinding
0x140095a08 RpcMgmtEpEltInqDone
0x140095a10 RpcMgmtEpEltInqNextW
0x140095a18 RpcMgmtEpEltInqBegin
0x140095a28 RpcEpUnregister
0x140095a38 RpcStringBindingComposeW
0x140095a48 RpcBindingSetAuthInfoExW
0x140095a50 RpcBindingInqAuthClientW
0x140095a58 RpcBindingSetOption
0x140095a60 RpcImpersonateClient
0x140095a68 RpcBindingFree
0x140095a70 RpcStringFreeW
0x140095a78 RpcRevertToSelf
0x140095a88 MesHandleFree
0x140095a98 NdrMesTypeDecode2
0x140095aa0 NdrMesTypeAlignSize2
0x140095aa8 NdrMesTypeFree2
0x140095ab0 NdrMesTypeEncode2
0x140095ab8 RpcServerUnregisterIfEx
0x140095ac8 RpcServerInqBindings
0x140095ad0 RpcServerListen
0x140095ad8 RpcMgmtWaitServerListen
0x140095ae0 RpcEpRegisterW
0x140095af8 RpcServerRegisterIf2
Library SHLWAPI.dll:
0x140095c00 PathCombineW
0x140095c08 PathIsDirectoryW
0x140095c10 PathCanonicalizeW
0x140095c18 PathIsRelativeW
0x140095c20 PathFindFileNameW
Library SAMLIB.dll:
0x140095b10 SamGetMembersInGroup
0x140095b18 SamGetGroupsForUser
0x140095b20 SamOpenUser
0x140095b30 SamiChangePasswordUser
0x140095b38 SamSetInformationUser
0x140095b40 SamConnect
0x140095b48 SamOpenDomain
0x140095b50 SamLookupIdsInDomain
0x140095b58 SamLookupNamesInDomain
0x140095b68 SamRidToSid
0x140095b70 SamGetMembersInAlias
0x140095b80 SamGetAliasMembership
0x140095b88 SamOpenGroup
0x140095b90 SamOpenAlias
0x140095ba0 SamFreeMemory
0x140095bb0 SamCloseHandle
0x140095bb8 SamQueryInformationUser
Library Secur32.dll:
0x140095c38 DeleteSecurityContext
0x140095c40 FreeContextBuffer
0x140095c50 LsaConnectUntrusted
0x140095c58 LsaFreeReturnBuffer
0x140095c60 FreeCredentialsHandle
0x140095c78 QueryContextAttributesW
Library SHELL32.dll:
0x140095bf0 CommandLineToArgvW
Library USER32.dll:
0x140095ca0 SetClipboardViewer
0x140095ca8 DefWindowProcW
0x140095cb0 DispatchMessageW
0x140095cb8 GetKeyboardLayout
0x140095cc0 IsCharAlphaNumericW
0x140095cc8 EnumClipboardFormats
0x140095cd0 SendMessageW
0x140095cd8 OpenClipboard
0x140095ce0 CreateWindowExW
0x140095ce8 ChangeClipboardChain
0x140095cf0 GetClipboardData
0x140095cf8 RegisterClassExW
0x140095d00 TranslateMessage
0x140095d08 PostMessageW
0x140095d10 DestroyWindow
0x140095d18 CloseClipboard
0x140095d20 GetMessageW
0x140095d28 UnregisterClassW
Library USERENV.dll:
0x140095d38 DestroyEnvironmentBlock
0x140095d40 CreateEnvironmentBlock
Library VERSION.dll:
0x140095d50 GetFileVersionInfoW
0x140095d58 VerQueryValueW
0x140095d60 GetFileVersionInfoSizeW
Library HID.DLL:
0x1400953d0 HidD_GetPreparsedData
0x1400953d8 HidD_FreePreparsedData
0x1400953e0 HidP_GetCaps
0x1400953e8 HidD_GetFeature
0x1400953f0 HidD_GetAttributes
0x1400953f8 HidD_GetHidGuid
0x140095400 HidD_SetFeature
Library SETUPAPI.dll:
0x140095be0 SetupDiGetClassDevsW
Library WinSCard.dll:
0x140095ec0 SCardControl
0x140095ec8 SCardConnectW
0x140095ed0 SCardTransmit
0x140095ed8 SCardDisconnect
0x140095ee0 SCardGetAttrib
0x140095ee8 SCardEstablishContext
0x140095ef0 SCardFreeMemory
0x140095ef8 SCardListReadersW
0x140095f00 SCardReleaseContext
0x140095f08 SCardListCardsW
Library WINSTA.dll:
0x140095d70 WinStationCloseServer
0x140095d78 WinStationEnumerateW
0x140095d80 WinStationOpenServerW
0x140095d88 WinStationFreeMemory
0x140095d90 WinStationConnectW
Library WLDAP32.dll:
0x140095da8 None
0x140095db0 None
0x140095db8 None
0x140095dc0 None
0x140095dc8 None
0x140095dd0 None
0x140095dd8 None
0x140095de0 None
0x140095de8 None
0x140095df0 None
0x140095df8 None
0x140095e00 None
0x140095e08 None
0x140095e10 None
0x140095e18 None
0x140095e20 None
0x140095e28 None
0x140095e30 None
0x140095e38 None
0x140095e40 None
0x140095e48 None
0x140095e50 None
0x140095e58 None
0x140095e60 None
0x140095e68 None
0x140095e70 None
0x140095e78 None
0x140095e80 None
0x140095e88 None
0x140095e90 None
0x140095e98 None
0x140095ea0 None
0x140095ea8 None
0x140095eb0 None
Library advapi32.dll:
0x140095f20 A_SHAUpdate
0x140095f28 A_SHAFinal
0x140095f30 A_SHAInit
Library msasn1.dll:
0x140095f78 ASN1_CloseEncoder
0x140095f80 ASN1_CreateDecoder
0x140095f88 ASN1BERDotVal2Eoid
0x140095f90 ASN1_CloseDecoder
0x140095f98 ASN1_CreateModule
0x140095fa0 ASN1_FreeEncoded
0x140095fa8 ASN1_CloseModule
0x140095fb0 ASN1_CreateEncoder
Library ntdll.dll:
0x140095fe0 RtlGetCurrentPeb
0x140095ff8 NtQueryObject
0x140096000 RtlEqualUnicodeString
0x140096008 RtlInitUnicodeString
0x140096010 RtlFreeUnicodeString
0x140096018 RtlDowncaseUnicodeString
0x140096020 RtlFreeAnsiString
0x140096030 RtlCreateUserThread
0x140096038 RtlGUIDFromString
0x140096040 RtlStringFromGUID
0x140096048 NtCompareTokens
0x140096050 RtlGetNtVersionNumbers
0x140096058 RtlEqualString
0x140096060 RtlUpcaseUnicodeString
0x140096078 RtlFreeOemString
0x140096088 NtResumeProcess
0x140096090 RtlAdjustPrivilege
0x140096098 NtSuspendProcess
0x1400960a0 NtTerminateProcess
0x1400960c0 RtlIpv4AddressToStringW
0x1400960c8 RtlIpv6AddressToStringW
0x1400960d0 RtlCompressBuffer
0x1400960d8 NtQuerySystemInformation
Library netapi32.dll:
0x140095fc8 I_NetServerReqChallenge
0x140095fd0 I_NetServerAuthenticate2
Library KERNEL32.dll:
0x140095410 SetFilePointerEx
0x140095418 FreeEnvironmentStringsW
0x140095420 TlsFree
0x140095428 TlsSetValue
0x140095430 TlsGetValue
0x140095438 TlsAlloc
0x140095440 TerminateProcess
0x140095450 UnhandledExceptionFilter
0x140095458 RtlVirtualUnwind
0x140095460 RtlLookupFunctionEntry
0x140095468 RtlCaptureContext
0x140095470 GetStringTypeW
0x140095478 GetModuleFileNameW
0x140095480 GetStartupInfoW
0x140095488 GetFileType
0x140095490 SetStdHandle
0x140095498 GetConsoleMode
0x1400954a0 GetConsoleCP
0x1400954b0 RtlUnwindEx
0x1400954b8 GetCurrentThreadId
0x1400954c0 GetCPInfo
0x1400954c8 GetOEMCP
0x1400954d0 GetACP
0x1400954d8 IsValidCodePage
0x1400954e8 IsDebuggerPresent
0x1400954f0 GetCommandLineW
0x1400954f8 GetModuleHandleExW
0x140095500 LoadLibraryExW
0x140095508 DecodePointer
0x140095510 EncodePointer
0x140095518 LoadLibraryExA
0x140095520 GetProcessId
0x140095528 GetComputerNameW
0x140095530 ProcessIdToSessionId
0x140095538 GetCurrentThread
0x140095540 SetCurrentDirectoryW
0x140095558 GetStdHandle
0x140095560 GetTimeZoneInformation
0x140095568 SetConsoleCursorPosition
0x140095570 GetSystemDirectoryW
0x140095578 CreateEventW
0x140095580 SetEvent
0x140095588 CreatePipe
0x140095590 SetHandleInformation
0x140095598 GetModuleHandleW
0x1400955a0 GlobalSize
0x1400955a8 GetProcAddress
0x1400955b0 LoadLibraryW
0x1400955b8 FreeLibrary
0x1400955c0 lstrlenA
0x1400955c8 SetConsoleTitleW
0x1400955d0 SetConsoleCtrlHandler
0x1400955d8 RaiseException
0x1400955e0 ExitProcess
0x1400955e8 AreFileApisANSI
0x1400955f0 GetSystemTime
0x1400955f8 GetCurrentProcessId
0x140095600 DeleteFileW
0x140095608 GetVersionExA
0x140095610 OutputDebugStringA
0x140095618 DeleteCriticalSection
0x140095620 GetFileAttributesExW
0x140095628 GetSystemInfo
0x140095630 GetDiskFreeSpaceA
0x140095638 CreateFileMappingA
0x140095640 GetDiskFreeSpaceW
0x140095648 EnterCriticalSection
0x140095650 LockFileEx
0x140095658 HeapSize
0x140095660 GetTempPathW
0x140095668 MultiByteToWideChar
0x140095670 HeapValidate
0x140095678 HeapCreate
0x140095680 GetFileAttributesA
0x140095688 LeaveCriticalSection
0x140095690 HeapDestroy
0x140095698 GetVersionExW
0x1400956a0 FormatMessageW
0x1400956b0 FormatMessageA
0x1400956b8 GetProcessHeap
0x1400956c0 UnlockFileEx
0x1400956c8 GetTickCount
0x1400956d0 OutputDebugStringW
0x1400956d8 WaitForSingleObjectEx
0x1400956e0 LockFile
0x1400956e8 FlushViewOfFile
0x1400956f0 UnlockFile
0x1400956f8 HeapFree
0x140095700 QueryPerformanceCounter
0x140095708 HeapAlloc
0x140095710 SetEndOfFile
0x140095718 TryEnterCriticalSection
0x140095720 HeapCompact
0x140095728 CreateMutexW
0x140095730 GetFileSize
0x140095738 HeapReAlloc
0x140095740 GetFullPathNameA
0x140095748 GetFullPathNameW
0x140095750 GetTimeFormatW
0x140095758 WideCharToMultiByte
0x140095760 GetSystemTimeAsFileTime
0x140095768 SystemTimeToFileTime
0x140095770 GetDateFormatW
0x140095778 lstrlenW
0x140095780 PurgeComm
0x140095788 ClearCommError
0x140095790 CreateRemoteThread
0x140095798 WaitForSingleObject
0x1400957a0 SetLastError
0x1400957a8 CreateProcessW
0x1400957b0 SetConsoleOutputCP
0x1400957b8 GetConsoleOutputCP
0x1400957c0 CompareStringW
0x1400957c8 LCMapStringW
0x1400957d0 WriteConsoleW
0x1400957d8 ReadConsoleW
0x1400957e0 SetEnvironmentVariableA
0x1400957e8 GetEnvironmentStringsW
0x1400957f0 CreateFileMappingW
0x1400957f8 UnmapViewOfFile
0x140095800 MapViewOfFile
0x140095808 WriteProcessMemory
0x140095810 VirtualProtect
0x140095818 VirtualAllocEx
0x140095820 VirtualProtectEx
0x140095828 VirtualAlloc
0x140095830 ReadProcessMemory
0x140095838 VirtualFreeEx
0x140095840 VirtualQueryEx
0x140095848 VirtualFree
0x140095850 VirtualQuery
0x140095858 GetComputerNameExW
0x140095860 DeviceIoControl
0x140095868 DuplicateHandle
0x140095870 OpenProcess
0x140095878 GetCurrentProcess
0x140095888 FindNextFileW
0x140095890 FindClose
0x140095898 GetCurrentDirectoryW
0x1400958a0 GetFileSizeEx
0x1400958a8 FlushFileBuffers
0x1400958b0 GetFileAttributesW
0x1400958b8 FindFirstFileW
0x1400958c0 DeleteFileA
0x1400958c8 GetTempPathA
0x1400958d8 FileTimeToLocalFileTime
0x1400958e0 GetCurrentDirectoryA
0x1400958e8 GetTempFileNameA
0x1400958f0 SetFilePointer
0x1400958f8 CreateFileA
0x140095900 FileTimeToDosDateTime
0x140095908 CreateThread
0x140095910 LocalFree
0x140095918 CloseHandle
0x140095920 LocalAlloc
0x140095928 GetLastError
0x140095930 CreateFileW
0x140095938 ReadFile
0x140095940 Sleep
0x140095948 TerminateThread
0x140095950 WriteFile
0x140095958 FileTimeToSystemTime

!This program cannot be run in DOS mode.
`.rdata
@.data
.pdata
@.rsrc
@.reloc
UWATAVAWH
A_A^A\_]
D$@kiwiH
USVWATAUAVAWH
A_A^A]A\_^[]
tPH9{xtJE3
WATAUAVAWH
A_A^A]A\_
L$ SVWH
x ATAVAWH
A_A^A\
WATAUAVAWH
A_A^A]A\_
WATAUAVAWH
A_A^A]A\_
KDBME3
KSSME9Y
WAVAWH
A_A^_
9{<vHH
ATAVAWH
@A_A^A\
|$ UAVAWH
x ATAVAWH
0A_A^A\
ATAVAWH
A_A^A\
!u(!t$
M !t$ L
M !t$ L
M !t$ L
M !t$ L
UVWATAUAVAWH
D!t$ L
pA_A^A]A\_^]
|$ UATAUAVAWH
A_A^A]A\]
t$ WATAUAVAWH
A_A^A]A\_
UVWATAUAVAWH
PA_A^A]A\_^]
WAVAWH
WATAUAVAWH
D$(!l$
A_A^A]A\_
UAVAWH
Y H!;H
WAVAWH
0A_A^_
x ATAVAWH
A_A^A\
x ATAVAWH
0A_A^A\
UVWATAUAVAWH
A_A^A]A\_^]
UATAUAVAWH
A_A^A]A\]
UVWATAUAVAWH
pA_A^A]A\_^]
SUVWATAUAVAWH
hA_A^A]A\_^][
WATAUAVAWH
A_A^A]A\_
USVWATAUAVAWH
xA_A^A]A\_^[]
UATAUAVAWH
A_A^A]A\]
UVWATAUAVAWH
tiD9},H
`A_A^A]A\_^]
WAVAWH
@A_A^_
H!\$0!\$(E3
tW9\$DuQH
H!\$ L
l$ VWAVH
WATAUAVAWH
H!t$8H
A_A^A]A\_
WATAUAVAWH
A_A^A]A\_
x ATAVAWH
A_A^A\
WATAUAVAWH
A_A^A]A\_
WAVAWH
@A_A^_
H!|$(!|$ D
tDH!|$
9MDMPu
WATAUAVAWH
0A_A^A]A\_
x ATAVAWH
A_A^A\
H UVWH
UWAUAVAWH
A_A^A]_]
UWATAVAWH
tjL!t$@
D!t$8L!t$0D
A_A^A\_]
UWATAVAWH
A_A^A\_]
x UATAUAVAWH
D$HD96
A_A^A]A\]
UVWAVAWH
PA_A^_^]
UWATAVAWH
x%D9u@uH
A_A^A\_]
K@fD9H
VWATAVAWH
A_A^A\_^
D$HH!l$@H!l$8D
t$(H!l$
D$HH!l$@H!l$8D
|$0!l$(H!l$ L
D$@H!l$8H!l$0E3
|$(!l$
UVWATAUAVAWH
A_A^A]A\_^]
USVWATAUAVAWH
A_A^A]A\_^[]
UAVAWH
USVWATAUAVAWH
A_A^A]A\_^[]
9regfuJ9Y
9hbinu6H
L$ UVWH
WATAUAVAWH
A_A^A]A\_
t#IcR4D
WATAUAVAWH
A_A^A]A\_
D;D$p
x ATAVAWH
@A_A^A\
WATAUAVAWH
t8A96A
A_A^A]A\_
WAVAWH
x UATAUAVAWH
A_A^A]A\]
WAVAWH
H9l$ toA
0A_A^_
UWATAVAWH
H!t$ L
H!t$ L
A_A^A\_]
USVWATAUAVAWH
A_A^A]A\_^[]
AUAVAWH
A_A^A]
ATAVAWH
A_A^A\
WAVAWH
!\$(H!\$ E3
WATAUAVAWH
H!\$PH
A_A^A]A\_
WATAUAVAWH
t$DL!l$PM!k
!D$@!D$`I
|$XD;|$`sgE
A_A^A]A\_
\$@I![
UVWATAUAVAWH
A_A^A]A\_^]
H WATAUAVAWH
A_A^A]A\_
x ATAVAWH
@A_A^A\
UWATAVAWH
H!u@H!u
A_A^A\_]
x ATAVAWH
H!t$`H!t$XH!t$PH!t$HH!t$@L
A_A^A\
WAVAWH
A_A^_
WATAUAVAWH
A_A^A]A\_
WATAUAVAWH
fD9$Zu
A_A^A]A\_
H!:H!x
t3H!|$0H!|$(D
K SUVWH
UVWATAUAVAWH
MXL+uP
`A_A^A]A\_^]
x ATAVAWH
H!|$ E3
0A_A^A\
!t$@A!s I
!t$@A!s I
UAVAWH
VWATAVAWH
!\$(!\$ D
!t$(!t$ D
A_A^A\_^
@USVWAVH
0A^_^[]
8AUu!8AVu
UVWATAUAVAWH
D$0IcP
D$0IcP
D$0IcP
D$0IcP
D$0IcP
D$0IcP
A_A^A]A\_^]
H USWH
H9\$0t
L$ SWH
H SVWH
x ATAVAWIc
|$8A_A^A\
T$XH9_
uVH!\$0!\$(H!
@H!\$0!\$(H!\$@H
D8D$@t
!D$ E3
UVWAVAWH
L;IH}NH
`A_A^_^]
\$ UVWAVAWH
PA_A^_^]
WATAUAVAWH
0A_A^A]A\_
x'H;KXt!9{4u
KXH9{H~
/H9CH|
WATAUAVAWH
0A_A^A]A\_
USVWATAUAVAWH
A_A^A]A\_^[]
WAVAWH
x AUAVAWH
0A_A^A]
;C ~SH
t$f9j.t
q89y(v
B(9A(s
D9K0v6H
9y0vgH
WAVAWH
s#;K s
;{0r#H
L9{@uHD9{,u
A_A^_
f9y0u1H
@8yUuG
L9L$ t'H
UVWATAVH
A^A\_^]
UVWAVAWH
A_A^_^]
WAVAWH
A_A^_
H;{ht.H
S`H9T$H~
KHH91t
9s0t@@8s
VWATAVAWH
u<L9c`
H9l$P~
S 9S(v
KHL9!t
A_A^A\_^
UVWATAUAVAWH
0A_A^A]A\_^]
UVWATAUAVAWH
taH!l$ A
9D$ptzH
0A_A^A]A\_^]
s WAVAWH
A_A^_
@USVWATAUAVAWH
m`M!'H
u2D8>A
HA_A^A]A\_^[]
UVWATAUAVAWH
s*H9.}%A
u*D;s<s$H
0A_A^A]A\_^]
t$ WAVAWH
9y uYH
tAH!|$@3
IHH99t
A_A^_
WAVAWH
A_A^_
I9(u,D
H!l$ A
C,;C s9H
SUVWATAUAVAWH
D8?t:H
HA_A^A]A\_^][
@USVWATAVAWH
9]@uBE
0A_A^A\_^[]
t$ UWAVH
CPL90utH
uWD9u(tQL
KPL91tED8s
D9u v%H
UATAUAVAWH
9_ r|E
0A_A^A]A\]
t$ WAVAWH
u;D9{ t5H
0A_A^_
WAVAWH
A_A^_
u ;n$w
C(9F s
UVWATAUAVAWH
;i(t:H
A_A^A]A\_^]
A(9B r
C D;C(v+3
x ATAVAWH
A_A^A\
x ATAVAWH
A_A^A\
@8qX|*H
K8@8sYu=
C8!t$ L
VWATAVAWH
A_A^A\_^
@SUVWATAUAVAWH
H;L$(H
8A_A^A]A\_^][
WAVAWH
A_A^_
VWAUAVAWH
A_A^A]_^
t$ WATAUAVAWH
A_A^A]A\_
UVWATAUAVAWH
\$`tvD8c
A_A^A]A\_^]
x ATAVAWH
l$HfA+
A_A^A\
t$ WAVAWH
A_A^_
t$ WATAUAVAWH
KHL9!t
HHL9!t
L9`@uSH
A_A^A]A\_
t$ WAVAWH
A;>t?H
A_A^_
C0*C4f
WAVAWH
G$9_<u
9O<t1H
A_A^_
L$@8KX|6H
@8kX|&H
t$ WATAUAVAWH
B4I+WPL
D;~L~,H
l$pHcL$
A_A^A]A\_
@8*t~H9k`
u&8CVu
UVWATAUAVAWH
t5D8iYt/L9A u
tGpD8m
tGpE8n
PA_A^A]A\_^]
DCpf;B
f9DSps
DApfA;@
CXf9|Cpt
UVWATAUAVAWH
0A_A^A]A\_^]
UVWATAUAVAWH
H9~Xu'D
A_A^A]A\_^]
l$ VWAVH
OpfD9q.t
UVWATAUAVAWH
@A_A^A]A\_^]
x AUAVAWH
A_A^A]
VWATAVAWH
A_A^A\_^
SUVWATAUAVAWH
H+D$xH;
(A_A^A]A\_^][
L$ UVWATAUAVAWH
0A_A^A]A\_^]
SUVWATAUAVAWH
fC94/u
H;T$Hs
XA_A^A]A\_^][
WAVAWH
A_A^_
UVWATAUAVAWH
LcL$\E3
uSE8T$
D$@L+`PL
!t$ Hc
LcD$PH
BHcL$PA
HcL$DA
t$@D9|
L$TD9|
D$P+T$`A
HcL$DL;
u1HcT$DA;
\$\L;m
L$Lf+L
HcD$DH
HcD$DI
Hct$LI
A_A^A]A\_^]
\$ UVWATAUAVAWH
0A_A^A]A\_^]
|$ UATAUAVAWH
A_A^A]A\]
@USVWATAUAVAWH
XA_A^A]A\_^[]
t$4f;C
UVWATAUAVAWH
A(Mcb0L
2IcA0A
0A_A^A]A\_^]
H WATAUAVAWH
A_A^A]A\_
WAVAWH
0A_A^_
ZXD+Y(H
K(D+[(A;
t,HcE0HcV
WAVAWH
0A_A^_
A0LcY<A
A9x(~
SUVWATAUAVAWH
L9Sht-
(A_A^A]A\_^][
9q@~+3
UVWATAUAVAWH
;o(}UH
;w(}2H
;w(}"H
@A_A^A]A\_^]
WATAUAVAWH
9s(~IE3
A_A^A]A\_
x ATAVAWH
Mc~dMk
Q@8~Ut
A_A^A\
UVWATAUAVAWH
A_A^A]A\_^]
h UAVAWH
USVWATAUAVAWH
xA_A^A]A\_^[]
D;eXs+A
}!D;mHw
t$ WAVAWH
u#fD9{
A_A^_
x UAVAWH
t$ WATAUAVAWH
fD;ox}!H
A_A^A]A\_
WATAUAVAWH
A_A^A]A\_
USVWATAUAVAWH
F IcL$
tzA8FSt
F IcL$
t`A;\$
GHIcT$
uJ@8q[tDA
9Y(~5H
t$Xu$I
G`IcL$
tIcD$
$G<C|9
t$Xt/IcL$
HcAlL;
E2IcD$
D8.uO3
T$PE9D$
G`Ict$
t$pD83u3D8s
L$X;Al
A9V }GE3
T$P8C)tM9C$t#H
ApE9l$
T$hMcd$
G`IcL$
H9S`u3
C`H9S`u
L9s`u3
C`L9s`u
G`IcL$
8HXt!H
O`IcT$
G`Ic\$
~ Hc@lH;
EJIcD$
G`IcL$
G`IcL$
G`IcL$
D8hVt#H
<$~u-I
G`IcL$
8C)tZ9C$t)H
\$@A9D$
*H+L$`H
G|Ict$
w(A9\$
L+d$`H
H+t$`M
A_A^A]A\_^[]
G HcT$@H
H!t$0H9
WATAUAVAWH
0A_A^A]A\_
WAVAWH
H(fD9y
0A_A^_
x AUAVAWH
A_A^A]
h VWAVH
p WATAUAVAWH
H9\$Pt5H
tlI9\$
A_A^A]A\_
x ATAVAWH
A_A^A\
t$ WATAUAVAWH
gfffffffH9]
0A_A^A]A\_
t$ WAVAWH
t=L9{@t
C8Hc{PA
A_A^_
s WAVAWH
LcL$8HcH
L$xH;L$8
UVWATAUAVAWH
PH;l$x|
A_A^A]A\_^]
WATAUAVAWH
A_A^A]A\_
\$ UVWATAUAVAWH
HcV8E3
0A_A^A]A\_^]
VWAUAVAWH
8^Xt!H
A_A^A]_^
WATAUAVAWH
A_A^A]A\_
@USVWATAUAVAWH
A_A^A]A\_^[]
WATAUAVAWH
A_A^A]A\_
SUVWATAUAVAWH
xLca(A
D$HI9FP
L;d$p|
E0 u+H
A_A^A]A\_^][
fD9S0|%H
USVWATAUAVAWH
O0@A9^Pu
A_A^A]A\_^[]
83u:Hc*M
WAVAWH
UVWATAUAVAWH
T$0A;Jt~
PA_A^A]A\_^]
UVWATAUAVAWH
D8XUueA
~:fD9^ t(D
PA_A^A]A\_^]
UVWATAUAVAWH
A8\$Ut
o K9\%0
ulA8\$UueI
A_A^A]A\_^]
WAVAWH
0A_A^_
@xD9G(~
@xD9C(~
t$ WATAUAVAWH
D9wPu
A_A^A]A\_
HcL$,L
WATAUAVAWH
te@8iUu_
A_A^A]A\_
A9.~tH
u?8SUu}
A(9B,t
A6<dtB<
fD9A0|
u:fA9A0}
uKHcC<H
UVWATAUAVAWH
@A_A^A]A\_^]
C0f9G0u
VATAUAVAWH
C69A u
A;/}(I
Hcl$`L
LcT$`H
C,A9@,u
C0fA9@0t
0A_A^A]A\^
` AUAVAWH
A;n(|
D9kPu0E8nUu*L9
0A_A^A]
H SUVWATAVAWH
A_A^A\_^][
t$ WAVAWH
A_A^_
VWATAVAWH
A_A^A\_^
WATAUAVAWH
9A(~oD
D;{(|
A_A^A]A\_
9y(~ 3
fD;w>}6H
t$ WATAUAVAWH
0A_A^A]A\_
WATAUAVAWH
u88SUt&3
A_A^A]A\_
SUVWATAUAVAWH
u>D!|$H
hA_A^A]A\_^][
A80t#E
UVWATAUAVAWH
?Hc\$xLc
0A_A^A]A\_^]
WATAUAVAWH
fD;s^sML
fD;m>}KL
A_A^A]A\_
UVWATAUAVAWH
fD9v<}
pA_A^A]A\_^]
WAVAWH
0A_A^_
WAVAWH
A_A^_
UVWATAUAVAWH
PA_A^A]A\_^]
UVWATAUAVAWH
@PH9A8t
GF tEM
L9WPu2E3
G8"L$@H
fE;U^swI
G^f9C^uh
Gb8Cbt,A
H9UwtSH
L9U_tWE
t'L9Q(t
A_A^A]A\_^]
D$(f;q^r
WAVAWH
0A_A^_
HcT$HH
9^(~83
UATAUAVAWH
fA;X^smH
A_A^A]A\]
x ATAVAWH
A_A^A\
WAVAWH
A_A^_
p WAVAWH
A_A^_
x ATAVAWH
A_A^A\
UVWATAUAVAWH
A_A^A]A\_^]
CrH!{h
:@8spu4H
USVWATAUAVAWH
\$l9YP
D$F u'
LcD$dHc
D$dHcE
F`!\$ E3
twHcD$dH
D$pD!L$ A
D!|$ A
A_A^A]A\_^[]
x ATAUAWH
0A_A]A\
VWATAUAVH
A^A]A\_^
UVWATAUAVAWH
0A_A^A]A\_^]
t$ WATAUAVAWH
A_A^A]A\_
WATAUAVAWH
A_A^A]A\_
UAVAWH
WATAUAVAWH
H(HcIlH
0A_A^A]A\_
@(Ic@lH;
@(HcHd
@(HcHh
}08tRH
VWATAVAWH
0A_A^A\_^
HcA I
WAVAWH
0A_A^_
A(Lc@lI
UVWATAUAVAWH
D$8+D$0H
D$8HcQlH;
`A_A^A]A\_^]
UVWATAUAVAWH
@A_A^A]A\_^]
tBHcF A
f;k`suL
WAVAWH
0A_A^_
USVWATAUAVAWH
t$I9HHu
D$`t)H
A_A^A]A\_^[]
D$p8KUt
HcT$pA
SUVWATAUAVAWH
fE9}<|$I
D8\$au
L9SHt6D
D$xfD;S`
t6L9SHD
D8\$`t H9\$pu
EF ulD
TH;\$p
A_A^A]A\_^][
VWATAVAWH
0A_A^A\_^
UVWATAUAVAWH
0A_A^A]A\_^]
UVWATAUAVAWH
D!nDL9
`A_A^A]A\_^]
VWATAVAWH
A_A^A\_^
t$ WAVAWH
UVWATAUAVAWH
C$D9c<u
D9htuT
pA_A^A]A\_^]
WAVAWH
;{(};H
A_A^_
t'LcI(A
L$ UVWATAUAVAWH
;wp~1L
E$D9u<u
\$(E;u(
@A_A^A]A\_^]
WATAUAVAWH
A_A^A]A\_
x ATAVAWH
C`D8gUt
A_A^A\
UVWATAUAVAWH
PA_A^A]A\_^]
WAVAWH
A_A^_
UVWATAUAVAWH
L$XA;F
`A_A^A]A\_^]
L$ SUVWATAUAVAWH
8A_A^A]A\_^][
WAVAWH
0A_A^_
SUVWATAUAVAWH
hA_A^A]A\_^][
Hc\$\H
WAVAWH
A_A^_
WATAUAVAWH
A_A^A]A\_
SUVWATAUAVAWH
hA_A^A]A\_^][
KL9RPtE
WATAUAVAWH
0A_A^A]A\_
SUVWATAUAVAWH
D8fUt8Ic
XA_A^A]A\_^][
UVWATAUAVAWH
`A_A^A]A\_^]
t$ WAVAWH
0A_A^_
WATAUAVAWH
tJLc&3
fA9F@v
0A_A^A]A\_
@SUVWATAUAVAWH
C@ utH
H9K uCH9K
D$HE8EU
H9D$xu
H9D$xt
A_A^A]A\_^][
WAVAWH
0A_A^_
9j8~LH
@SUVWATAUAVAWH
A9n,~H
[ A;n,|
HA_A^A]A\_^][
USVWATAUAVAWH
l$`A8}U
D$`@8xU
@0fA;F
L9q tH
D9~iD
tSD9 uNH
A_A^A]A\_^[]
SUVWATAUAVAWH
t$tD9qPuUD8uUuO
fE;w>}"H
A_A^A]A\_^][
uQL9qHuKI;
9L$|t#
D9L$|tAH
9T$|taHc
8L$`t6D
fA;O>}sD
8L$`u%M
8D$at@E3
9\$|u9I
D;l$x}
SUVWATAUAVAWH
XA_A^A]A\_^][
C4 t|E3
USVWATAUAVAWH
A8v,v)B
IcD$<H
fA9r.v
CF uvH
f;s^s{L
A96txA
A_A^A]A\_^[]
WATAUAVAWH
L9kPtLA
fD;k^sBI
A_A^A]A\_
UVWATAUAVAWH
D$X@8pU
pA_A^A]A\_^]
@83u&H
L$HxNH
t6fE9B
txfE9B
WATAUAVAWH
K,A9)u
C,9A,un
CXf9A0ud
A_A^A]A\_
UVWATAUAVAWH
fD9@0u-
L$x9H,u$H
0A_A^A]A\_^]
@8j;v2H
t!fD9Z.u
WAVAWH
uKE8~Ut
A_A^_
t$ WAVAWH
A_A^_
L$`D8IUt
@fB+L@
USVWATAUAVAWH
d$$D9
u@D9@,u:
f;C^sSD
FF u1M
FDf9C\}zH
upD9%v
M9epu L
A_A^A]A\_^[]
t$HH;t$0
D9T$$tRD
SUVWATAUAVAWH
t[f9S0|UH
C^@8{bA
}0fA9}.u)I
D$H9A,uw
D$:9D$L}
@8l$8t
T$12T$9:T
D2D$1D
A_A^A]A\_^][
SUVWATAUAVAWH
\$hA8XU
f9_2fD
L$@fA;
fD;T$B}
G4tefD
w4u^D8_:uXfD9
A_A^A]A\_^][
UVWATAUAVAWH
L9WHuyf
fD;W^sLA
0A_A^A]A\_^]
UVWATAUAVAWH
t$0t9L
F4 u+H
t$0H9~
H&@8~8t
@8~8uB
f9C>}7
CF u1H
@8~8t2K
F<A8}UuHE
A_A^A]A\_^]
\$ UVWATAUAVAWH
|((trH
GF LcJ
0A_A^A]A\_^]
USVWATAUAVAWH
A9F(~AE3
fD9w<}
F LcUw
ChL9sHtWI
$D9p|~#;H|~
@xD9G(
A_A^A]A\_^[]
WAVAWH
tDD97|?
x AVLc
SUVWATAUAVAWH
uy@8oUusA
uH@8oUuB
etKH9k
XA_A^A]A\_^][
x ATAVAWH
A_A^A\
9K(~!H
9O(~%H
9w(~53
x AUAVAWH
9y(~63
A_A^A]
t$ WATAUAVAWH
A_A^A]A\_
SUVWATAUAVAWH
=uXE8d3
#tQ8\8
8A_A^A]A\_^][
SUVWATAVAWH
PA_A^A\_^][
UVWATAUAVAWH
0A_A^A]A\_^]
@USVWAWH
A__^[]
UVWAVAWH
A_A^_^]
UATAUAVAWH
{@fD9k
A_A^A]A\]
H9{@tAH9{Ht;H9{Pt5H9{Xt/H9{`t)H9{ht#H9{pt
|$ UAVAWH
UWATAUAVH
fD94_u
fD94Cu
fD94Gu
A^A]A\_]
` UAVAWH
D9d$8tmL9d$@tfH
D9d$HtmL9d$Pt
D9d$HtSL9d$PtLH
UVWATAUAVAWH
fD9<Au
fD9<xu
A_A^A]A\_^]
UVWATAUAVAWH
H!t$ L
A_A^A]A\_^]
UVWATAUAVAWH
fD9$Au
D9{ v=H
fE9<Au
A_A^A]A\_^]
UVWATAUAVAWH
L!l$ L
A_A^A]A\_^]
VWATAVAWH
fF9$pu
A_A^A\_^
WAVAWH
0A_A^_
x ATAVAWH
A_A^A\
t$ UWAVH
USVWATAUAVAWH
xA_A^A]A\_^[]
UVWATAUAVAWH
A_A^A]A\_^]
UVWATAUAVAWH
>RSA2u
>RSA2u
pA_A^A]A\_^]
|$ UATAUAVAWH
A_A^A]A\]
UVWAVAWH
A_A^_^]
UAVAWH
L!t$ L
c UAVAWH
SVWATAUAVAWH
D$HRSA2
A_A^A]A\_^[
USVWATAUAVH
fE9$^u
pA^A]A\_^[]
UVWATAUAVAWH
fE9<^u
`A_A^A]A\_^]
@SUVWAVH
0A^_^][
UVWAVAWH
pA_A^_^]
UVWATAUAVAWH
L!t$ E3
kL!t$ L
FL!t$ L
!L!t$ L
D9d$8t
D9d$<tfH
A_A^A]A\_^]
UVWATAUAVAWH
A_A^A]A\_^]
WAVAWH
0A_A^_
UVWATAUAVAWH
A_A^A]A\_^]
UVWATAUAVAWH
PA_A^A]A\_^]
WAVAWH
A_A^_
UVWATAUAVAWH
@A_A^A]A\_^]
WAVAWH
A_A^_
USVWATAUAVAWH
A_A^A]A\_^[]
UVWATAUAVAWH
0A_A^A]A\_^]
H!l$@H
UVWAVAWH
H!l$PH
A_A^_^]
UVWATAUH
PA]A\_^]
h VWAUAVAWH
A_A^A]_^
tmf9}(
UWATAUAVH
A^A]A\_]
UVWAVAWH
A_A^_^]
VWATAUAWH
A_A]A\_^
USVWATAUAVAWH
fD9<yu
fD9<^u
XA_A^A]A\_^[]
UVWATAUAVAWH
PA_A^A]A\_^]
H9L$Ht^H
{ ATAVAWH
!|$d!|$h!|$lH
D$(H!|$ E3
A_A^A\
WATAUAVAWH
A_A^A]A\_
WATAUAVAWH
fD9,Au
fE9,Ou
fE9,Iu
fD9,Nu
A_A^A]A\_
x ATAVAWH
fD9$Ku
fE9$Gu
0A_A^A\
A!8I!x
T$`9\$Xv H
L$ USWH
E09](v.I
x ATAVAWH
D$8H!|$0D
A_A^A\
WAVAWH
0A_A^_
UVWATAUAVAWH
fD94Fu
A_A^A]A\_^]
UWATAVAWH
A_A^A\_]
SVWATAUAVAWH
A_A^A]A\_^[
WATAUAVAWH
A_A^A]A\_
` UAVAWH
WATAUAVAWH
fA94Yu
A_A^A]A\_
UVWATAUAVAWH
PA_A^A]A\_^]
H UATAUAVAWH
t%D9}HH
A_A^A]A\]
p WATAUAVAWH
fD9$Fu
A_A^A]A\_
UVWATAUAVAWH
fD94Yu
A_A^A]A\_^]
UWATAVAWH
fE9$Gu
A_A^A\_]
UVWAVAWH
`A_A^_^]
SVWATAUAVAWH
H9\$XA
A_A^A]A\_^[
UAVAWH
WAVAWH
txH!|$PH!|$HH!|$@H
T$pH!|$0H!|$(L
T$xH!|$0H
UWATAVAWH
L!d$PL!d$HL!d$@H
A_A^A\_]
L$ UVWAVAWH
A_A^_^]
UWATAVAWH
H!t$0H
A_A^A\_]
UVWATAUAVAWH
A_A^A]A\_^]
` UAVAWH
H UATAUAVAWH
A_A^A]A\]
|$ UAVAWH
D!}(L!}
D$(L!|$ E3
H!|$0H
D$(!|$ D
UVWATAUAVAWH
A_A^A]A\_^]
f9wdt
f9w\t&
WAVAWH
A_A^_
WAVAWH
A_A^_
|$ UATAUAVAWH
A_A^A]A\]
L$XL9q@t
L$PL9t
WATAUAVAWH
A_A^A]A\_
` UAVAWH
UWATAVAWH
D$@-\|/
D$D-\|/D
fD9<Au
A_A^A\_]
fD94Gu
UVWAVAWH
fE9<Fu
fD9<Fu
A_A^_^]
UVWATAUAVAWH
A_A^A]A\_^]
AAAAAAAA
DDDDDDDD
EEEEEEEE
CCCCCCCC
FFFFFFFF
MMMMMMMM
LLLLLLLL
LLLLLLLL
LLLLLLLL
GGGGGGGG
JJJJJJJJ
LLLLLLLL
KKKKKKKK
BBBBBBBB
BBBBBBBB
BBBBBBBB
USVWATAUAVAWH
L$ fE;
A_A^A]A\_^[]
UWATAVAWH
!|$HH!}
D$@H!|$8H!|$0H!|$(!|$ L
H!|$@H
]gH!|$0!|$(H
A_A^A\_]
D$Pmimi
D$Tlsa.
D$Xlog
AAAAAAAA
BBBBBBBB
CCCCCCCC
DDDDDDDD
L$hHcC(LcC,H
D$hLcC,H
JJJJJJJJ
CCCCCCCC
LLLLLLLL
CCCCCCCC
LLLLLLLL
KKKKKKKK
KKKKKKKK
KKKKKKKK
JJJJJJJJ
LLLLLLLL
DDDDDDDD
DDDDDDDD
LLLLLLLL
KKKKKKKK
UVWAUAWH
H!t$ L
A_A]_^]
AAAAAAAA
BBBBBBBB
t$ WATAUAVAWH
A_A^A]A\_
UVWATAUAVAWH
9]wvjH
9]gvlH
9]gvkH
A_A^A]A\_^]
@USVWATAVAWH
9}gveH
A_A^A\_^[]
UVWAVAWH
9]0v H
A_A^_^]
UVWAVAWH
fD9<Bu
PA_A^_^]
UVWAVAWH
PA_A^_^]
9;tD9~
H!t$h3
H!D$`H
D$HH!t$@H
UVATAVAWH
A_A^A\^]
tdL9t$ht]
UWATAVAWH
A_A^A\_]
WATAUAVAWH
0A_A^A]A\_
fD94Ft(
H!D$HH
D$0H!\$(H!\$
H!\$PH
D$H!\$@
D$0!\$(H!\$ E3
D$(H!\$ E3
WATAVH
UVWATAUAVAWH
@A_A^A]A\_^]
tKHcM
tYHcM
M8H!]0H!]
H!\$ H
M8H!\$ L
UVWAVAWH
@A_A^_^]
t$0!\$(L
WAVAWH
UVWATAUAVAWH
H!D$0H
A_A^A]A\_^]
fD94Yu
UWATAVAWH
A_A^A\_]
UVWAVAWH
A_A^_^]
UVWATAVH
H!t$ D
A^A\_^]
UVWATAUAVAWH
D9k<v,H
D9kDv,H
pA_A^A]A\_^]
t$ UWAVH
O H!\$ H
D$(H!\$ E3
USVATAUAVAWH
EZHH9J@H
EB@H9J
A_A^A]A\^[]
UWAUAVAWH
D$8!up
D$ HcMpH
A_A^A]_]
` UAVAWH
WATAUAVAWH
A_A^A]A\_
UWAUAVAWH
D93v0H
0A_A^A]_]
UVWATAUAVAWH
0A_A^A]A\_^]
UAVAWH
WAVAWH
D9sDvDK
A_A^_
WAVAWH
A_A^_
9kDvFH
WATAUAVAWH
A_A^A]A\_
WAVAWH
A_A^_
WAVAWH
A_A^_
UWATAVAWH
A_A^A\_]
WAVAWH
A_A^_
@USVWATAVAWH
pA_A^A\_^[]
UVWATAUAVAWH
PA_A^A]A\_^]
t$ UWAVH
USVWATAVAWH
PA_A^A\_^[]
UVWATAUAVAWH
PA_A^A]A\_^]
{J}u_H
x ATAVAWH
A_A^A\
H SUVWATAUAVAWH
ppf;Xn
8A_A^A]A\_^][
x ATAVAWH
A_A^A\
UVWATAUAVAWH
fD9,Au
fD9,xu
A_A^A]A\_^]
USATAUAWH
PA_A]A\[]
9w8vH
@USVWATAUAVAWH
D$0D!l$(H
A_A^A]A\_^[]
WATAUAVAWH
h0E9n4u
fE9n8u
fE9n:u
E9n@t)
A_A^A]A\_
UATAUAVAWH
A_A^A]A\]
WATAUAVAWH
A_A^A]A\_
UVWATAUAVAWH
A_A^A]A\_^]
UAVAWH
USVWAVH
D$0D!t$(L!t$
D$0D!t$(L!t$ E
A^_^[]
UVWATAUAVAWH
A96uIH
A_A^A]A\_^]
WAVAWH
A_A^_
` UAVAWH
V 9Z4t
9_tvmH
t=HcD$@D
tJHcC,L
t&HcK0L
VWATAVAWH
|$\RUUU
A_A^A\_^
|$ ATAVAWH
@A_A^A\
UWATAVAWH
A_A^A\_]
D$HH;L$PtTH
D$@H;D$Pu
UVWATAVH
fD9$Au
fD9$Au
fD9$qu
L9d$hu
L9d$xu
L9d$pu
A^A\_^]
UVWATAUAVAWH
H!}XH!}@E3
D8,8t>I
HcK E3
D8$8tH
HcK$E3
HcK(E3
@A_A^A]A\_^]
t9HcC,H
t9HcC0H
UAVAWH
@A_A^]
UAVAWH
9wDuGH!t$8H!t$0H
H!t$(H
WAVAWH
@A_A^_
` UAVAWH
JcT hH
JcL xH
UVWATAUAVAWH
JcL)hL
A_A^A]A\_^]
UVWATAUAVAWH
`A_A^A]A\_^]
WAVAWH
IcT(HH
HcD)LH
HcD(PH
HcD( H
HcD((H
HcD($H
HcD(,H
HcD(8H
HcD(4H
D$HuGH
uGH!|$8H!|$0H!|$(H
@USVWATAUAVAWH
t'HcG<
H;|80u
xA_A^A]A\_^[]
@8l$8t
WAVAWH
A_A^_
AUAVAWH
0A_A^A]
WAVAWH
fD9>u"
0A_A^_
UAVAWH
|$ ATAVAWH
A_A^A\
WAVAWH
A_A^_
VWATAVAWH
A_A^A\_^
D8t$8t
fA;8utI
fA;0t)fA98t
fffffff
WATAUAVAWH
D$@!\$(H!\$
A_A^A]A\_
UVWATAUAVAWH
A_A^A]A\_^]
WATAUAVAWH
@A_A^A]A\_
UVWATAUAVAWH
@A_A^A]A\_^]
UAVAWH
UVWATAUAVAWH
D$DD9T$\
|$h+t$D+
A_A^A]A\_^]
WAVAWH
A_A^_
Genuua
ineIuY
nteluQ3
l$ VWATAVAWH
T$&@8t$&t9@8r
A81t@@8r
A_A^A\_^
UVWATAUAVAWH
9D$LupE
A_A^A]A\_^]
WAVAWH
A_A^_
UVWATAUAVAWH
9D$XupE
A_A^A]A\_^]
WATAUAVAWH
A_A^A]A\_
WAVAWH
A_A^_
VWATAVAWH
A_A^A\_^
\$ UVWATAUAVAWH
!|$HHc
|$HD9l$X
HcD$LH;
HcD$LH;
H!|$ L
A_A^A]A\_^]
t$ WATAUAVAWH
0A_A^A]A\_
` AUAVAWH
0A_A^A]
` AUAVAWH
t$8Hc0I
\$0D9=
A_A^A]
UVWATAUAVAWH
T$xfE;"
t$HfD;
T$xfA;
T$Du}E
|$@9L$Xt
D9\$Xt
D8\$4uiM
t$HfD;
\$`9D$Xt
D8\$Lt
D8l$5t
fD9#u1
\$hD9M
A_A^A]A\_^]
t$ WAVAWH
x ATAVAWH
@A_A^A\
9\$(tlM
@UVWATAUAVAWH
e0A_A^A]A\_^]
UATAUAVAWH
A_A^A]A\]
LcA<E3
ATAVAWH
A_A^A\
VWATAVAWH
0A_A^A\_^
UVWATAUAVAWH
|$hD9L$H@
D9L$Ht
D9L$Ht
D$<D9L$Ht
)T$4A;
d$4D9L$t
D9L$Ht
t$dD9L$Ht
t$dD8L$@t
D8L$0u
D9L$tt
t$XD8L$8t
A_A^A]A\_^]
Hct$PH
seHcD$XH
fD9!u:A
fD93tSH
CfD93u
H3E H3E
VWATAVAWH
A_A^A\_^
UVWATAUAVAWH
D$DD9T$\
|$h+t$D+
A_A^A]A\_^]
@UATAUAVAWH
!t$(H!t$ I
A_A^A]A\]
@UATAUAVAWH
A_A^A]A\]
l$ VWAVH
r9\$ ~>L
D82u&H
D8t$Ht
UVWATAUAVAWH
A_A^A]A\_^]
l$ VWAUAVAWH
L$$fA;
u$HcG$H;
t5f9(t
A_A^A]_^
\$ UVWATAUAVAWH
A_A^A]A\_^]
@SUVWATAVAWH
tcH95.
PA_A^A\_^][
SVWATAUAVAWH
PA_A^A]A\_^[
x ATAVAWH
D8&t4H
D8d$Ht
A_A^A\
ATAVAWH
D8d$8t
@A_A^A\
x AUAVAWH
A_A^A]
WATAUAVAWH
A_A^A]A\_
USVWATAUAVAWH
8UXt#D
XA_A^A]A\_^[]
UVWATAUAVAWH
t8L9%k
0A_A^A]A\_^]
D9d$xttH
@USVWATAUAVAWH
eHA_A^A]A\_^[]
@8t$8t
WATAUAVAWH
gfffffffH
D8L$Ht
A_A^A]A\_
x AUAVAWH
A_A^A]
@SUVWH
@SUVWH
@SUVWAVH
A^_^][
@USVWH
|$ UATAUAVAWH
A_A^A]A\]
|$ UATAUAVAWH
A_A^A]A\]
UVWATAUAVAWH
A_A^A]A\_^]
UVWATAUAVAWH
A_A^A]A\_^]
x AUAVAWH
A_A^A]
bcrypt.dll
>`ncrypt.dll
SystemFunction036
CorExitProcess
(null)
`h````
xpxxxx
Sunday
Monday
Tuesday
Wednesday
Thursday
Friday
Saturday
January
February
August
September
October
November
December
MM/dd/yy
dddd, MMMM dd, yyyy
HH:mm:ss
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
InitializeCriticalSectionEx
CreateSemaphoreExW
SetThreadStackGuarantee
CreateThreadpoolTimer
SetThreadpoolTimer
WaitForThreadpoolTimerCallbacks
CloseThreadpoolTimer
CreateThreadpoolWait
SetThreadpoolWait
CloseThreadpoolWait
FlushProcessWriteBuffers
FreeLibraryWhenCallbackReturns
GetCurrentProcessorNumber
GetLogicalProcessorInformation
CreateSymbolicLinkW
SetDefaultDllDirectories
EnumSystemLocalesEx
CompareStringEx
GetDateFormatEx
GetLocaleInfoEx
GetTimeFormatEx
GetUserDefaultLocaleName
IsValidLocaleName
LCMapStringEx
GetCurrentPackageId
`h`hhh
xppwpp
 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
MessageBoxW
GetActiveWindow
GetLastActivePopup
GetUserObjectInformationW
GetProcessWindowStation
SunMonTueWedThuFriSat
JanFebMarAprMayJunJulAugSepOctNovDec
%04hu%02hu%02hu%02hu%02hu%02huZ
6666666
SQLite format 3
naturaleftouterightfullinnercross
 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
3333333333333333333333333333333333333333333333
CONSTRAINTOFFSETABLEFTHENDESCAPELSELECTRANSACTIONATURALLIKEYSAVEPOINTEMPORARYWITHOUTERELEASEXCLUSIVEXISTSBEGINDEXEDELETEBETWEENOTNULLIMITCASECOLLATECREATECURRENT_DATEGROUPDATEIGNORECURSIVEIMMEDIATEJOINNEREGEXPRIMARYMATCHECKVALUESWHENWHEREPLACEABORTANDEFAULTASCOMMITCONFLICTCROSSCURRENT_TIMESTAMPDEFERREDISTINCTDROPFAILFROMFULLGLOBYHAVINGIFINSERTISNULLORDERIGHTROLLBACKUNIQUEUSING
&&&&&&&&&&
BINARY
3.13.0
 !!""##$$%%&&''(())**++,,--..//00112233445566778899
 !"#$%
'()*+,-./0133
 !"#$%
'()*+,-./01+,-./019
 !"#$%
'()*+,-./01f
 !"#$%P'()*+,-./01
 !"#$%j'()*+,-./01
 !"#$%
'()*+,-./01
 !"#$%
'()*+,-./01
 !"#$%B'()*+,-./01
 !"#$%
'()*+,-./01
 !"#$%
'()*+,-./01
 !"#$%n'()*+,-./01
 !"#$%3'()*+,-./01
 !"#$%
'()*+,-./01
fghijkl+,-
34s234+,
|+,2343
234"#$%&'()*+,-./01'()*+,-./01
de01h{
b3dedbhde
"#$%d'()*+,-./01
onoffalseyestruextrafull
;98:0123456789ABCDEF
thstndrd
******""""""""""""""""""""
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@0123456789ABCDEF0123456789abcdef
RUUU8a
NTPASSWORD
0123456789012345678901234567890123456789
!@#$%^&*()qwertyUIOPAzxcvbnmQQQQQQQQQQQQ)(*@&%
NTPASSWORDHISTORY
LMPASSWORDHISTORY
LMPASSWORD
012345678.F? !!
CABINET
%s_%02d.cab
No error
Failure opening file to be stored in cabinet
Failure reading file to be stored in cabinet
Insufficient memory in FCI
Could not create a temporary file
Unknown compression type
Could not create cabinet file
Client requested abort
Failure compressing data
Unknown error
1.2.840.113556.1.4.90
1.2.840.113556.1.4.94
1.2.840.113556.1.4.55
1.2.840.113556.1.4.160
1.2.840.113556.1.4.125
1.2.840.113556.1.4.129
1.2.840.113556.1.4.135
1.2.840.113556.1.4.27
%H:%M:%S
current_time
%Y-%m-%d
current_date
%Y-%m-%d %H:%M:%S
current_timestamp
failed to allocate %u bytes of memory
failed memory resize %u to %u bytes
(NULL)
922337203685477580
API call with %s database connection pointer
unopened
invalid
AreFileApisANSI
CharLowerW
CharUpperW
CloseHandle
CreateFileA
CreateFileW
CreateFileMappingA
CreateFileMappingW
CreateMutexW
DeleteFileA
DeleteFileW
FileTimeToLocalFileTime
FileTimeToSystemTime
FlushFileBuffers
FormatMessageA
FormatMessageW
FreeLibrary
GetCurrentProcessId
GetDiskFreeSpaceA
GetDiskFreeSpaceW
GetFileAttributesA
GetFileAttributesW
GetFileAttributesExW
GetFileSize
GetFullPathNameA
GetFullPathNameW
GetLastError
GetProcAddressA
GetSystemInfo
GetSystemTime
GetSystemTimeAsFileTime
GetTempPathA
GetTempPathW
GetTickCount
GetVersionExA
GetVersionExW
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
HeapSize
HeapValidate
HeapCompact
LoadLibraryA
LoadLibraryW
LocalFree
LockFile
LockFileEx
MapViewOfFile
MultiByteToWideChar
QueryPerformanceCounter
ReadFile
SetEndOfFile
SetFilePointer
SystemTimeToFileTime
UnlockFile
UnlockFileEx
UnmapViewOfFile
WideCharToMultiByte
WriteFile
CreateEventExW
WaitForSingleObject
WaitForSingleObjectEx
SetFilePointerEx
GetFileInformationByHandleEx
MapViewOfFileFromApp
CreateFile2
LoadPackagedLibrary
GetTickCount64
GetNativeSystemInfo
OutputDebugStringA
OutputDebugStringW
GetProcessHeap
CreateFileMappingFromApp
InterlockedCompareExchange
UuidCreate
UuidCreateSequential
FlushViewOfFile
OsError 0x%lx (%lu)
os_win.c:%d: (%lu) %s(%s) - %s
delayed %dms for lock/sharing conflict at line %d
winSeekFile
winClose
winRead
winWrite1
winWrite2
winTruncate1
winTruncate2
winSync1
winSync2
winFileSize
winUnlockReadLock
winUnlock
winUnmapfile1
winUnmapfile2
winMapfile1
winMapfile2
etilqs_
winGetTempname1
winGetTempname2
winGetTempname3
winGetTempname4
winGetTempname5
winOpen
winDelete
winAccess
%s%c%s
winFullPathname1
winFullPathname2
winFullPathname3
winFullPathname4
win32-longpath
recovered %d pages from %s
-journal
nolock
immutable
out of memory
%!.15g
%s-mjXXXXXX9XXz
MJ delete: %s
MJ collide: %s
-mj%06X9%02X
API called with finalized prepared statement
API called with NULL prepared statement
string or blob too big
unable to use function %s in the requested context
bind on a busy prepared statement: [%s]
NOT NULL
UNIQUE
FOREIGN KEY
%s constraint failed
%z: %s
abort at %d in [%s]: %s
cannot open savepoint - SQL statements in progress
no such savepoint: %s
cannot release savepoint - SQL statements in progress
cannot commit transaction - SQL statements in progress
cannot start a transaction within a transaction
cannot rollback - no transaction is active
cannot commit - no transaction is active
database schema has changed
sqlite_master
SELECT name, rootpage, sql FROM '%q'.%s WHERE %s ORDER BY rowid
statement aborts at %d: [%s] %s
misuse of aliased aggregate %s
no such column
ambiguous column name
%s: %s.%s.%s
%s: %s.%s
%s: %s
partial index WHERE clauses
index expressions
%s prohibited in %s
the "." operator
functions
second argument to likelihood() must be a constant between 0.0 and 1.0
non-deterministic functions
misuse of aggregate function %.*s()
no such function: %.*s
wrong number of arguments to function %.*s()
subqueries
parameters
%r %s BY term out of range - should be between 1 and %d
too many terms in ORDER BY clause
%r ORDER BY term does not match any column in the result set
too many terms in %s BY clause
a GROUP BY clause is required before HAVING
aggregate functions are not allowed in the GROUP BY clause
Expression tree is too large (maximum depth %d)
variable number must be between ?1 and ?%d
too many SQL variables
too many columns in %s
_ROWID_
oversized integer: %s%s
misuse of aggregate: %s()
unknown function: %s()
%s %T cannot reference objects in database %s
no such table
corrupt database
unknown database %T
sqlite_
object name reserved for internal use: %s
table %T already exists
there is already an index named %s
too many columns on %s
duplicate column name: %s
default value of column [%s] is not constant
table "%s" has more than one primary key
INTEGER
CREATE TABLE
AUTOINCREMENT not allowed on WITHOUT ROWID tables
PRIMARY KEY missing on table %s
CREATE %s %.*s
UPDATE %Q.%s SET type='%s', name=%Q, tbl_name=%Q, rootpage=#%d, sql=%Q WHERE rowid=#%d
tbl_name='%q' AND type!='trigger'
sqlite_stat%d
DELETE FROM %Q.%s WHERE %s=%Q
DELETE FROM %Q.%s WHERE tbl_name=%Q and type!='trigger'
sqlite_stat
table %s may not be dropped
cannot create a TEMP index on non-TEMP table "%s"
altertab_
table %s may not be indexed
there is already a table named %s
index %s already exists
sqlite_autoindex_%s_%d
expressions prohibited in PRIMARY KEY and UNIQUE constraints
conflicting ON CONFLICT clauses specified
UNIQUE
CREATE%s INDEX %.*s
INSERT INTO %Q.%s VALUES('index',%Q,%Q,#%d,%Q);
name='%q' AND type='index'
no such index: %S
index associated with UNIQUE or PRIMARY KEY constraint cannot be dropped
DELETE FROM %Q.%s WHERE name=%Q AND type='index'
a JOIN clause is required before %s
index '%q'
%s.rowid
duplicate WITH table name: %s
no such collation sequence: %s
table %s may not be modified
rows deleted
integer
integer overflow
LIKE or GLOB pattern too complex
ESCAPE expression must be a single character
%!.20e
unlikely
likelihood
likely
typeof
length
printf
unicode
ifnull
random
Antivirus Signature
Bkav Clean
Lionic Trojan.Win32.Mimikatz.4!c
tehtris Clean
ClamAV Win.Trojan.Agent-7039752-0
CMC Clean
CAT-QuickHeal Clean
Skyhigh HTool-MimiKatz!297B896DBF8D
ALYac Trojan.GenericKD.73119377
Cylance Unsafe
Zillya Tool.Mimikatz.Win64.659
Sangfor Trojan.Win32.Save.a
K7AntiVirus Trojan ( 004f7d031 )
Alibaba TrojanPSW:Win64/Mimikatz.839c9dd9
K7GW Trojan ( 004f7d031 )
Cybereason malicious.dbf8d6
Baidu Clean
VirIT HackTool.Win64.Agent.GVK
Paloalto generic.ml
Symantec Hacktool.Mimikatz
Elastic Windows.Hacktool.Mimikatz
ESET-NOD32 a variant of Win64/Riskware.Mimikatz.D
APEX Malicious
Avast Win64:HacktoolX-gen [Trj]
Cynet Malicious (score: 100)
Kaspersky HEUR:Trojan.Win32.Generic
BitDefender Trojan.GenericKD.73119377
NANO-Antivirus Trojan.Win64.MimiKatz.fsqypd
ViRobot Clean
MicroWorld-eScan Trojan.GenericKD.73119377
Tencent Malware.Win32.Gencirc.10bc753f
TACHYON Clean
Sophos ATK/Mimikatz-AT
F-Secure Trojan.TR/AD.Mimikatz.enmvc
DrWeb Clean
VIPRE Trojan.GenericKD.73119377
TrendMicro HackTool.Win64.MIMIKATZ.ENQ
McAfeeD ti!B294F94C469F
Trapmine suspicious.low.ml.score
FireEye Generic.mg.297b896dbf8d619c
Emsisoft Trojan.GenericKD.73119377 (B)
SentinelOne Static AI - Malicious PE
GData Trojan.GenericKD.73119377
Jiangmin Trojan.PSW.Mimikatz.ayl
Webroot W32.Malware.gen
Varist W64/S-0b38a7ac!Eldorado
Avira TR/AD.Mimikatz.enmvc
Antiy-AVL Trojan[PSW]/Win64.Mimikatz
Kingsoft Win32.Trojan.Generic.a
Gridinsoft Risk.Win64.Gen.dd!i
Xcitium Malware@#1dv5fdc454e9l
Arcabit Trojan.Generic.D45BB691
SUPERAntiSpyware Trojan.Agent/Gen-Mimikatz
ZoneAlarm HEUR:Trojan.Win32.Generic
Microsoft HackTool:Win32/Mimikatz.D
Google Detected
AhnLab-V3 Trojan/Win64.RL_Mimikatz.R280777
Acronis Clean
McAfee HTool-MimiKatz!297B896DBF8D
MAX malware (ai score=94)
VBA32 TrojanPSW.Win64.Mimikatz
Malwarebytes Mimikatz.Spyware.Stealer.DDS
Panda HackingTool/Mimikatz
Zoner Clean
TrendMicro-HouseCall HackTool.Win64.MIMIKATZ.ENQ
Rising HackTool.Mimikatz!1.B8DF (CLASSIC)
Yandex Trojan.GenAsa!0zUlI9zfsvk
Ikarus HackTool.Mimikatz
MaxSecure Win.MxResIcn.Heur.Gen
Fortinet Riskware/NetWalker
BitDefenderTheta Clean
AVG Win64:HacktoolX-gen [Trj]
DeepInstinct MALICIOUS
CrowdStrike win/malicious_confidence_100% (W)
alibabacloud HackTool:Win/mimikatz
No IRMA results available.