Analysis Details
Category Package Started Completed Duration Logs
FILE generic 2026-06-28 22:55:54 2026-06-28 22:56:27 33s
Analysis Log
2026-06-28 14:55:58,077 [root] INFO: Date set to: 20260628T22:56:01, timeout set to: True
2026-06-28 22:56:01,393 [root] DEBUG: Starting analyzer from: C:\7d7wfxi0
2026-06-28 22:56:01,394 [root] DEBUG: Storing results at: C:\SZitfqj
2026-06-28 22:56:01,395 [root] DEBUG: Pipe server name: \\.\PIPE\VqluDZZAmn
2026-06-28 22:56:01,395 [root] DEBUG: Python path: C:\Users\Rajesh\AppData\Local\Programs\Python\Python314
2026-06-28 22:56:01,396 [root] INFO: analysis running as an admin
2026-06-28 22:56:01,396 [root] DEBUG: no analysis package configured, picking one for you
2026-06-28 22:56:03,817 [root] INFO: analysis package selected: "generic"
2026-06-28 22:56:03,817 [root] DEBUG: importing analysis package module: "modules.packages.generic"...
2026-06-28 22:56:03,828 [root] DEBUG: imported analysis package "generic"
2026-06-28 22:56:03,829 [root] DEBUG: initializing analysis package "generic"...
2026-06-28 22:56:03,829 [lib.common.common] INFO: no wrapping
2026-06-28 22:56:03,829 [lib.core.compound] INFO: C:\Users\Rajesh\AppData\Local\Temp already exists, skipping creation
2026-06-28 22:56:03,830 [root] DEBUG: New location of moved file: C:\Users\Rajesh\AppData\Local\Temp\6.png
2026-06-28 22:56:03,830 [root] INFO: Analyzer: Package modules.packages.generic does not specify a dll option
2026-06-28 22:56:03,830 [root] INFO: Analyzer: Package modules.packages.generic does not specify a dll_64 option
2026-06-28 22:56:03,831 [root] INFO: Analyzer: Package modules.packages.generic does not specify a loader option
2026-06-28 22:56:03,831 [root] INFO: Analyzer: Package modules.packages.generic does not specify a loader_64 option
2026-06-28 22:56:03,860 [root] DEBUG: Imported auxiliary module "modules.auxiliary.browser"
2026-06-28 22:56:03,878 [root] DEBUG: Imported auxiliary module "modules.auxiliary.digisig"
2026-06-28 22:56:03,939 [root] DEBUG: Imported auxiliary module "modules.auxiliary.disguise"
2026-06-28 22:56:03,977 [root] DEBUG: Imported auxiliary module "modules.auxiliary.human"
2026-06-28 22:56:03,989 [lib.api.screenshot] DEBUG: Importing 'PIL.ImageChops'
2026-06-28 22:56:03,989 [lib.api.screenshot] ERROR: No module named 'PIL'
2026-06-28 22:56:03,990 [root] DEBUG: Imported auxiliary module "modules.auxiliary.screenshots"
2026-06-28 22:56:03,993 [root] DEBUG: Imported auxiliary module "modules.auxiliary.tlsdump"
2026-06-28 22:56:03,994 [root] DEBUG: Initialized auxiliary module "Browser"
2026-06-28 22:56:03,995 [root] DEBUG: attempting to configure 'Browser' from data
2026-06-28 22:56:04,001 [root] DEBUG: module Browser does not support data configuration, ignoring
2026-06-28 22:56:04,002 [root] DEBUG: Trying to start auxiliary module "modules.auxiliary.browser"...
2026-06-28 22:56:04,006 [root] DEBUG: Started auxiliary module modules.auxiliary.browser
2026-06-28 22:56:04,007 [root] DEBUG: Initialized auxiliary module "DigiSig"
2026-06-28 22:56:04,007 [root] DEBUG: attempting to configure 'DigiSig' from data
2026-06-28 22:56:04,008 [root] DEBUG: module DigiSig does not support data configuration, ignoring
2026-06-28 22:56:04,008 [root] DEBUG: Trying to start auxiliary module "modules.auxiliary.digisig"...
2026-06-28 22:56:04,009 [modules.auxiliary.digisig] DEBUG: Checking for a digital signature
2026-06-28 22:56:04,409 [modules.auxiliary.digisig] DEBUG: File has an invalid signature
2026-06-28 22:56:04,409 [modules.auxiliary.digisig] INFO: Uploading signature results to aux/DigiSig.json
2026-06-28 22:56:04,417 [root] DEBUG: Started auxiliary module modules.auxiliary.digisig
2026-06-28 22:56:04,417 [root] DEBUG: Initialized auxiliary module "Disguise"
2026-06-28 22:56:04,418 [root] DEBUG: attempting to configure 'Disguise' from data
2026-06-28 22:56:04,418 [root] DEBUG: module Disguise does not support data configuration, ignoring
2026-06-28 22:56:04,419 [root] DEBUG: Trying to start auxiliary module "modules.auxiliary.disguise"...
2026-06-28 22:56:04,425 [modules.auxiliary.disguise] INFO: Launched background process notepad.exe hidden (PID: 4468)
2026-06-28 22:56:04,437 [modules.auxiliary.disguise] INFO: Disguising GUID to 1a1c3eed-927b-46ed-96f8-95fcd45ef564
2026-06-28 22:56:04,437 [root] DEBUG: Started auxiliary module modules.auxiliary.disguise
2026-06-28 22:56:04,438 [root] DEBUG: Initialized auxiliary module "Human"
2026-06-28 22:56:04,438 [root] DEBUG: attempting to configure 'Human' from data
2026-06-28 22:56:04,438 [root] DEBUG: module Human does not support data configuration, ignoring
2026-06-28 22:56:04,438 [root] DEBUG: Trying to start auxiliary module "modules.auxiliary.human"...
2026-06-28 22:56:04,441 [root] DEBUG: Started auxiliary module modules.auxiliary.human
2026-06-28 22:56:04,441 [root] DEBUG: Initialized auxiliary module "Screenshots"
2026-06-28 22:56:04,442 [root] DEBUG: attempting to configure 'Screenshots' from data
2026-06-28 22:56:04,442 [root] DEBUG: module Screenshots does not support data configuration, ignoring
2026-06-28 22:56:04,442 [root] DEBUG: Trying to start auxiliary module "modules.auxiliary.screenshots"...
2026-06-28 22:56:04,450 [modules.auxiliary.screenshots] WARNING: Python Image Library is not installed, screenshots are disabled
2026-06-28 22:56:04,450 [root] DEBUG: Started auxiliary module modules.auxiliary.screenshots
2026-06-28 22:56:04,451 [root] DEBUG: Initialized auxiliary module "TLSDumpMasterSecrets"
2026-06-28 22:56:04,452 [root] DEBUG: attempting to configure 'TLSDumpMasterSecrets' from data
2026-06-28 22:56:04,452 [root] DEBUG: module TLSDumpMasterSecrets does not support data configuration, ignoring
2026-06-28 22:56:04,453 [root] DEBUG: Trying to start auxiliary module "modules.auxiliary.tlsdump"...
2026-06-28 22:56:04,458 [modules.auxiliary.tlsdump] WARNING: Unable to find lsass.exe process
2026-06-28 22:56:04,459 [root] DEBUG: Started auxiliary module modules.auxiliary.tlsdump
2026-06-28 22:56:10,288 [root] INFO: Restarting WMI Service
2026-06-28 22:56:12,451 [root] DEBUG: package modules.packages.generic does not support configure, ignoring
2026-06-28 22:56:12,453 [root] WARNING: configuration error for package modules.packages.generic: error importing data.packages.generic: No module named 'data.packages'
2026-06-28 22:56:12,454 [lib.core.compound] INFO: C:\Users\Rajesh\AppData\Local\Temp already exists, skipping creation
2026-06-28 22:56:12,457 [lib.api.process] INFO: Successfully executed process from path "C:\Windows\system32\cmd.exe" with arguments "/c start /wait "" "C:\Users\Rajesh\AppData\Local\Temp\6.png"" with pid 2816
2026-06-28 22:56:12,755 [lib.api.process] INFO: Monitor config for process 2816: C:\7d7wfxi0\dll\2816.ini
2026-06-28 22:56:12,777 [lib.api.process] INFO: 64-bit DLL to inject is C:\7d7wfxi0\dll\uMqhHKoF.dll, loader C:\7d7wfxi0\bin\AAydvAme.exe
2026-06-28 22:56:12,817 [root] DEBUG: Loader: Injecting process 2816 (thread 2924) with C:\7d7wfxi0\dll\uMqhHKoF.dll.
2026-06-28 22:56:12,822 [root] DEBUG: InjectDllViaIAT: Successfully patched IAT.
2026-06-28 22:56:12,823 [root] DEBUG: Successfully injected DLL C:\7d7wfxi0\dll\uMqhHKoF.dll.
2026-06-28 22:56:12,827 [lib.api.process] INFO: Injected into 64-bit <Process 2816 cmd.exe>
2026-06-28 22:56:14,874 [lib.api.process] INFO: Successfully resumed process with pid 2816
2026-06-28 22:56:15,050 [root] DEBUG: 2816: Python path set to 'C:\Users\Rajesh\AppData\Local\Programs\Python\Python314'.
2026-06-28 22:56:15,062 [root] DEBUG: 2816: Disabling sleep skipping.
2026-06-28 22:56:15,063 [root] DEBUG: 2816: Dropped file limit defaulting to 100.
2026-06-28 22:56:15,097 [root] DEBUG: 2816: YaraInit: Compiled 44 rule files
2026-06-28 22:56:15,101 [root] DEBUG: 2816: YaraInit: Compiled rules saved to file C:\7d7wfxi0\data\yara\capemon.yac
2026-06-28 22:56:15,178 [root] DEBUG: 2816: RtlInsertInvertedFunctionTable 0x00007FF9AAA0090E, LdrpInvertedFunctionTableSRWLock 0x00007FF9AAB5B4F0
2026-06-28 22:56:15,179 [root] DEBUG: 2816: YaraScan: Scanning 0x00007FF79A450000, size 0x6630a
2026-06-28 22:56:15,188 [root] DEBUG: 2816: YaraScan hit: FindFixAndRun
2026-06-28 22:56:15,189 [root] DEBUG: 2816: Monitor initialised: 64-bit capemon loaded in process 2816 at 0x00007FF986450000, thread 2924, image base 0x00007FF79A450000, stack from 0x000000AD42C04000-0x000000AD42D00000
2026-06-28 22:56:15,190 [root] DEBUG: 2816: Commandline: "C:\Windows\system32\cmd.exe" /c start /wait "" "C:\Users\Rajesh\AppData\Local\Temp\6.png"
2026-06-28 22:56:15,223 [root] DEBUG: 2816: hook_api: LdrpCallInitRoutine export address 0x00007FF9AAA099BC obtained via GetFunctionAddress
2026-06-28 22:56:15,277 [root] WARNING: b'Unable to create trampoline for LockResource, hook type 2'
2026-06-28 22:56:15,278 [root] DEBUG: 2816: set_hooks: Unable to hook LockResource
2026-06-28 22:56:15,292 [root] DEBUG: 2816: Hooked 630 out of 631 functions
2026-06-28 22:56:15,297 [root] DEBUG: 2816: set_hooks_exe: Hooked FindFixAndRun at 0x00007FF79A45C620
2026-06-28 22:56:15,300 [root] DEBUG: 2816: Syscall hook installed, syscall logging level 1
2026-06-28 22:56:15,327 [root] DEBUG: 2816: RestoreHeaders: Restored original import table.
2026-06-28 22:56:15,328 [root] INFO: Loaded monitor into process with pid 2816
2026-06-28 22:56:15,331 [root] DEBUG: 2816: caller_dispatch: Added region at 0x00007FF79A450000 to tracked regions list (kernel32::SetUnhandledExceptionFilter returns to 0x00007FF79A4693C1, thread 2924).
2026-06-28 22:56:15,332 [root] DEBUG: 2816: YaraScan: Scanning 0x00007FF79A450000, size 0x6630a
2026-06-28 22:56:15,340 [root] DEBUG: 2816: ProcessImageBase: Main module image at 0x00007FF79A450000 unmodified (entropy change 0.000000e+00)
2026-06-28 22:56:15,361 [root] DEBUG: 2816: DLL loaded at 0x00007FF9A6030000: C:\Windows\SYSTEM32\kernel.appcore (0x12000 bytes).
2026-06-28 22:56:15,365 [root] DEBUG: 2816: DLL loaded at 0x00007FF9A8700000: C:\Windows\System32\bcryptPrimitives (0x83000 bytes).
2026-06-28 22:56:15,369 [root] DEBUG: 2816: DLL loaded at 0x00007FF9A5B50000: C:\Windows\system32\uxtheme (0x9e000 bytes).
2026-06-28 22:56:15,382 [root] DEBUG: 2816: DLL loaded at 0x00007FF994050000: C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.1110_none_60b5254171f9507e\comctl32 (0x29a000 bytes).
2026-06-28 22:56:15,385 [root] DEBUG: 2816: DLL loaded at 0x00007FF9A9D30000: C:\Windows\System32\SHCORE (0xad000 bytes).
2026-06-28 22:56:15,388 [root] DEBUG: 2816: DLL loaded at 0x00007FF9A7A90000: C:\Windows\system32\Wldp (0x2c000 bytes).
2026-06-28 22:56:15,389 [root] DEBUG: 2816: DLL loaded at 0x00007FF9A6230000: C:\Windows\SYSTEM32\windows.storage (0x790000 bytes).
2026-06-28 22:56:15,393 [root] DEBUG: 2816: DLL loaded at 0x00007FF9A2720000: C:\Windows\system32\PROPSYS (0xf6000 bytes).
2026-06-28 22:56:15,403 [root] DEBUG: 2816: DLL loaded at 0x00007FF9A9600000: C:\Windows\System32\clbcatq (0xa9000 bytes).
2026-06-28 22:56:15,446 [root] DEBUG: 2816: DLL loaded at 0x00007FF9A8050000: C:\Windows\system32\profapi (0x1f000 bytes).
2026-06-28 22:56:15,554 [root] DEBUG: 2816: DLL loaded at 0x00007FF9A8110000: C:\Windows\System32\CFGMGR32 (0x4e000 bytes).
2026-06-28 22:56:15,561 [root] DEBUG: 2816: DLL loaded at 0x00007FF993730000: C:\Windows\system32\edputil (0x24000 bytes).
2026-06-28 22:56:15,600 [root] DEBUG: 2816: DLL loaded at 0x00007FF9A1300000: C:\Windows\System32\Windows.StateRepositoryPS (0x146000 bytes).
2026-06-28 22:56:15,616 [root] DEBUG: 2816: DLL loaded at 0x00007FF9903B0000: C:\Windows\System32\Windows.UI.AppDefaults (0x4c000 bytes).
2026-06-28 22:56:15,686 [root] DEBUG: 2816: DLL loaded at 0x00007FF99F680000: C:\Windows\system32\iertutil (0x2b0000 bytes).
2026-06-28 22:56:15,687 [root] DEBUG: 2816: DLL loaded at 0x00007FF99F650000: C:\Windows\system32\srvcli (0x28000 bytes).
2026-06-28 22:56:15,689 [root] DEBUG: 2816: DLL loaded at 0x00007FF9A75F0000: C:\Windows\system32\netutils (0xc000 bytes).
2026-06-28 22:56:15,692 [root] DEBUG: 2816: DLL loaded at 0x00007FF99F930000: C:\Windows\system32\urlmon (0x1eb000 bytes).
2026-06-28 22:56:15,702 [root] DEBUG: 2816: DLL loaded at 0x00007FF9A7200000: C:\Windows\system32\msvcp110_win (0x8a000 bytes).
2026-06-28 22:56:15,703 [root] DEBUG: 2816: DLL loaded at 0x00007FF9A35E0000: C:\Windows\SYSTEM32\policymanager (0xa0000 bytes).
2026-06-28 22:56:15,740 [root] DEBUG: 2816: DLL loaded at 0x00007FF9A4DC0000: C:\Windows\System32\wintypes (0x154000 bytes).
2026-06-28 22:56:15,747 [root] DEBUG: 2816: DLL loaded at 0x00007FF9A5A30000: C:\Windows\SYSTEM32\apphelp (0x90000 bytes).
2026-06-28 22:56:15,755 [root] DEBUG: 2816: DLL loaded at 0x00007FF99CF00000: C:\Windows\system32\WindowsCodecs (0x1b4000 bytes).
2026-06-28 22:56:15,756 [root] DEBUG: 2816: DLL loaded at 0x00007FF998E30000: C:\Windows\system32\PhotoMetadataHandler (0x81000 bytes).
2026-06-28 22:56:15,816 [root] DEBUG: 2816: DLL loaded at 0x00007FF99E080000: C:\Windows\System32\Bcp47Langs (0x5c000 bytes).
2026-06-28 22:56:15,818 [root] DEBUG: 2816: DLL loaded at 0x00007FF9A6C60000: C:\Windows\System32\sppc (0x25000 bytes).
2026-06-28 22:56:15,819 [root] DEBUG: 2816: DLL loaded at 0x00007FF9A6C90000: C:\Windows\System32\SLC (0x29000 bytes).
2026-06-28 22:56:15,820 [root] DEBUG: 2816: DLL loaded at 0x00007FF9A7F80000: C:\Windows\System32\USERENV (0x2e000 bytes).
2026-06-28 22:56:15,821 [root] DEBUG: 2816: DLL loaded at 0x00007FF9971F0000: C:\Windows\System32\appresolver (0x90000 bytes).
2026-06-28 22:56:15,838 [root] DEBUG: 2816: DLL loaded at 0x00007FF99D480000: C:\Windows\System32\OneCoreCommonProxyStub (0x7d000 bytes).
2026-06-28 22:56:15,865 [root] DEBUG: 2816: DLL loaded at 0x00007FF99EEA0000: C:\Windows\System32\OneCoreUAPCommonProxyStub (0x798000 bytes).
2026-06-28 22:56:15,892 [lib.api.process] INFO: Monitor config for process 756: C:\7d7wfxi0\dll\756.ini
2026-06-28 22:56:15,895 [root] INFO: Analysis timeout hit, terminating analysis
2026-06-28 22:56:15,896 [lib.api.process] INFO: Terminate event set for process 2816
2026-06-28 22:56:15,896 [root] DEBUG: 2816: Terminate Event: Attempting to dump process 2816
2026-06-28 22:56:15,898 [root] DEBUG: 2816: VerifyCodeSection: Executable code does not match, 0xb620 of 0x30ef9 matching
2026-06-28 22:56:15,899 [root] DEBUG: 2816: DoProcessDump: Code modification detected, dumping Imagebase at 0x00007FF79A450000.
2026-06-28 22:56:15,900 [root] DEBUG: 2816: DumpImageInCurrentProcess: Attempting to dump virtual PE image.
2026-06-28 22:56:15,901 [root] DEBUG: 2816: DumpProcess: Instantiating PeParser with address: 0x00007FF79A450000.
2026-06-28 22:56:15,902 [lib.api.process] INFO: 64-bit DLL to inject is C:\7d7wfxi0\dll\uMqhHKoF.dll, loader C:\7d7wfxi0\bin\AAydvAme.exe
2026-06-28 22:56:15,902 [root] DEBUG: 2816: DumpProcess: Module entry point VA is 0x00007FF79A468F50.
2026-06-28 22:56:15,913 [root] DEBUG: Loader: Injecting process 756 with C:\7d7wfxi0\dll\uMqhHKoF.dll.
2026-06-28 22:56:15,919 [root] DEBUG: 756: Python path set to 'C:\Users\Rajesh\AppData\Local\Programs\Python\Python314'.
2026-06-28 22:56:15,919 [root] DEBUG: 756: Disabling sleep skipping.
2026-06-28 22:56:15,924 [lib.common.results] INFO: Uploading file C:\SZitfqj\CAPE\2816_373101556529162026 to procdump\6fb91dcc875b2e76f71fbd2760901b58ebcaefa1646aecea2be17492995da1b9; Size is 401920; Max size: 100000000
2026-06-28 22:56:15,924 [root] DEBUG: 756: Dropped file limit defaulting to 100.
2026-06-28 22:56:15,931 [root] DEBUG: 2816: DumpProcess: Module image dump success - dump size 0x62200.
2026-06-28 22:56:15,934 [root] DEBUG: 756: Services hook set enabled
2026-06-28 22:56:15,939 [root] DEBUG: 756: YaraInit: Compiled rules loaded from existing file C:\7d7wfxi0\data\yara\capemon.yac
2026-06-28 22:56:15,944 [root] DEBUG: 2816: Terminate Event: Shutdown complete for process 2816 but failed to inform analyzer.
2026-06-28 22:56:15,958 [root] DEBUG: 756: RtlInsertInvertedFunctionTable 0x00007FF9AAA0090E, LdrpInvertedFunctionTableSRWLock 0x00007FF9AAB5B4F0
2026-06-28 22:56:15,959 [root] DEBUG: 756: Monitor initialised: 64-bit capemon loaded in process 756 at 0x00007FF986450000, thread 4180, image base 0x00007FF69D480000, stack from 0x00000036AC3F4000-0x00000036AC400000
2026-06-28 22:56:15,960 [root] DEBUG: 756: Commandline: C:\Windows\system32\svchost.exe -k DcomLaunch -p
2026-06-28 22:56:15,978 [root] DEBUG: 756: Hooked 69 out of 69 functions
2026-06-28 22:56:15,980 [root] INFO: Loaded monitor into process with pid 756
2026-06-28 22:56:15,982 [root] DEBUG: InjectDllViaThread: Successfully injected Dll into process via RtlCreateUserThread.
2026-06-28 22:56:15,983 [root] DEBUG: Successfully injected DLL C:\7d7wfxi0\dll\uMqhHKoF.dll.
2026-06-28 22:56:15,985 [lib.api.process] INFO: Injected into 64-bit <Process 756 svchost.exe>
2026-06-28 22:56:18,009 [root] DEBUG: 2816: CreateProcessHandler: Injection info set for new process 972: C:\Windows\system32\mspaint.exe, ImageBase: 0x00007FF700FE0000
2026-06-28 22:56:18,022 [root] DEBUG: 2816: DLL loaded at 0x00007FF998030000: C:\Windows\system32\MPR (0x1d000 bytes).
2026-06-28 22:56:18,025 [root] DEBUG: 2816: DLL loaded at 0x00007FF9A31D0000: C:\Windows\SYSTEM32\pcacli (0x16000 bytes).
2026-06-28 22:56:20,907 [lib.api.process] INFO: Termination confirmed for process 2816
2026-06-28 22:56:20,909 [root] INFO: Terminate event set for process 2816
2026-06-28 22:56:20,910 [lib.api.process] INFO: Terminate event set for process 756
2026-06-28 22:56:20,911 [root] DEBUG: 756: Terminate Event: Attempting to dump process 756
2026-06-28 22:56:20,913 [root] DEBUG: 756: DoProcessDump: Skipping process dump as code is identical on disk.
2026-06-28 22:56:20,921 [lib.api.process] INFO: Termination confirmed for process 756
2026-06-28 22:56:20,922 [root] INFO: Terminate event set for process 756
2026-06-28 22:56:20,922 [root] DEBUG: 756: Terminate Event: monitor shutdown complete for process 756
2026-06-28 22:56:20,922 [root] INFO: Created shutdown mutex
2026-06-28 22:56:21,935 [root] INFO: Shutting down package
2026-06-28 22:56:21,936 [root] INFO: Stopping auxiliary modules
2026-06-28 22:56:21,937 [root] INFO: Stopping auxiliary module: Browser
2026-06-28 22:56:21,937 [root] INFO: Stopping auxiliary module: Human
2026-06-28 22:56:22,374 [root] INFO: Stopping auxiliary module: Screenshots
2026-06-28 22:56:22,374 [root] INFO: Finishing auxiliary modules
2026-06-28 22:56:22,375 [root] INFO: Shutting down pipe server and dumping dropped files
2026-06-28 22:56:22,375 [root] WARNING: Folder at path "C:\SZitfqj\debugger" does not exist, skipping
2026-06-28 22:56:22,376 [root] WARNING: Folder at path "C:\SZitfqj\tlsdump" does not exist, skipping
2026-06-28 22:56:22,377 [root] INFO: Analysis completed
Process Log

        
Pre-Script Log

        
During-Script Log

        
Machine Information
Name Label Manager Started On Shutdown On Route
win10 win10 KVM 2026-06-28 22:55:54 2026-06-28 22:56:27 none
File Details
File Information
File Name
6.png
File Type PNG image data, 2560 x 1600, 8-bit/color RGB, non-interlaced
File Size 1552250 bytes
MD5 9e81bb1ab8466c55fa09c706141b36e5
SHA1 0780fb3148a16e064d24c0699a3b6374152b20e6
SHA256 310cd73e20a482841fcd0a6d5b8082d24526ffa1c790299ec51912dcd5757472 VT MWDB Bazaar
SHA3-384 e160abea220afde937d6a68ee327adca5a55693b262cc1b8ec6c9a31927558e68a6ae0e1d1f840f20a270ca6b6428dac
CRC32 E6DE1097
TLSH T1A675336A62C31A7F1984479FAB81FE917C9F3AA3C2AC45436C73F97B01C413192C89B5
Ssdeep 24576:OxjHnkOn/cGByX1mpHXFZVKBycvbjf4mZRC34gfhJ7fyN83wwm5h2bLmjTHWy1nK:2jEOA1mdhKBz+4g35mv3t1ntT0lL
Strings
x<v,y
8J9|T
1<MSdr
eL^s>
0Hv-z
v2%3#
L,&0p
01, @
{vQiA
e=w3B
ZWd>@
?,^7z(
%'U%U
iz&1KXhXzn
E<2Z5
p!`L{
E>E$"
jj$F&d9ubf
cNu|9
QS#")"
X.w.]
B\23sY
6oHgd
\=wc4yCH
;CQafoR,R9
o|c0;
Kq56TQ
~$DBh
!_gQU
yd2Wo
C"_N+v]
u%")?
Lt_8v
q$iB*
D|FP)
IDATg
K/nf~
\K1-9
/!R61~
ey3WUu
#&c490
W'~(*
f!Wbt'QD
eYVb(
Y.X71
`WZ]S
>ZY+X
LyA{v
/!.LF
Zm{J>
WQu_$F^
Jo00X`
~>_ h
6w.W5
CZk^s
RUMXRz,D
K@x-K/
?USSmz
?2f*^6X;
R"I$(
"SU2%+:
2\Ay\bx
:yGL'
T*q><
O{d;^
Zj-f[
O>3W/
&%J]D+6"
N?OJ^$m
c(Sva
^k6?W
~g"">V
VD"b5
gk9E*TE
O8Vt:?:
rc][!
RT$Je
saf&E
eUfPU3
Zk=*}
q|zz2
]"rHV
6r/+
&v>2,
%-{8l+}
G9}7j
3HqzC
lp#bn
l)eHK
*<J_G
HyYDF/
)O)ia
Vn]<=
]J!]N
G<Xwm
mSXqP
_r8o(
=UuOYL
b_"%o
xt;Nb
'[&fJy
eMuG[
V3&#"ZH
DHY=%
W8'z8
0LPb%
W0LkM
."jYe
><<Tr
9Wj&eycU
IKo$Qb
UM21cQ
J(k|z
sAk$x7+
Ll^98xU
gy ,c
R#--]
E|a$y
kq7kM
y,*?M i>
[z(`0
_;/^\
b@a9:4
C`QXl
mWWWV
4MsdM
dhfMX
M|-"Q
Yy'Ji
XTEQ6M
~`{|@
d"1*F
x6!Ka
^\cye:
c4">0
cMS?A
/#)wGM`F;
Qp(mI$
=ke K
luVCU
YU3S}
Xc)N%d
jM&E,
oiXwJ)
X"Be]
S@Mny
Qkir0
^C_h\
h`-lk
HD(T%
!#dV[
gff2K
snC{P
chK%l
E}i1<
a1Ep3
I#DdE!@[
iEf>1
}=jzIT
VaSG%
kGb8m
Jy}}UU'
(wZOG3
FL[eG@
vFUNYc
DHXjO
=SuWq
jPSxp
,iuGmY
pt6Cv-k
oa" y
~RJ92jL
" nlC]
TB2{3O
;$>m:
LrY8W
RTDrn
)u)8-~
fI+UK
>:^__%
bY\/m
eYJqT
nP}3
s61Voh
6h$b{K
nbcDtY
n{{{ Q1
DeQ>y
L^/rG
ah 4;
%G)T)sd`
<uP9L
5q?>>v
1LktX
r)%Kr
"PF!=
6/6;$UJ
#121+
IpCla
nW---
\;E?OO
#'rnt
b:|,a
8f"rN2
p80."
Hf|www8
"LLFF
YnLEDL
d*)Wm:
g5US#K9
(ct-\
,Rctp
*UE^a
QUUaX
gv]p=e^
>;n)9"
ZFP0~o
RIIHH
O[kqV
/M/x|
P;`SjL
YLE[d
nhriI
iTMLqM
|RkUi
oEV^c.
N'(ui
7`Ykm
E1fF"
NTx}e9
GHN+N
@D4<<
jXHFN
]GjwNv
o[o-(
lCJ\xf
y hec
\QM>#
Hy.T5
aQ&"J
$|E^V
P|6TK
`#qju
8wgbXc
F,8G)H
XYf.0n0}
(P)y&
8SvhD
N;}jj
Rx kmv
?<<@n
$"GFq
2|OJRys
;?h=k'4
+#%rF
D^pZ1
Py1wq
LA/[w
@C%PF7&B
w60OuX
'faZA
&Hf1Y
ZR-"f^>
WOgmf
joG_On
H~D0=
m CoQ
07h#N
heH;*
Nu`*m
2r79>}8
p8DNjl
S.*ef
.,DFF
><<<??
u%"O#
AT5wj
{(oX[
IqXj>M
(:B_F
yDR>,
$[2-6
=ri~{Qe
H<A8_
^)]JC
<Jwz+
I)r}3
!bdDb
}7_sq
7Kde]
2WkTrNB
$KoRZz
c{(G/>
t87p
I''36
^UBvY=x
63O0j
&Nv&{
!SeY6
1n'w-pD!
x;N5%
z |NA
VN*8?
?l}(mu
iRU+o
L9i3%
j)TK-FF
)ETe+
0iO<!
a 6!&S#&
[bx,o
z_o6K
(KH)E
5idiFk@
0SA\75s
}<W^Hs
is~2R
&Vb`xa%c
uwF2`
x}}Ez^J
/z3uR
R^^^^^^
$"2Ni
w9L7p
Sl7um
g>,]5
{KEDMt
0"2S4*
$^1[6
dXZ4r
5dPD"
s48dP2
,;wqe
BYDEb
DEtxv
-thiPq
%{zz:
^[vm\ybBz
y.DUR(
Fd]W"#V3
1`?O'
ndg%"
:enXyMa
_\*=t
r$Un/
`Zl=,
dyJ9oJn
d2&#OiK
~Hkkkkk
f~zz*
!^[@&F
Z+<bY
*Eg)%
so>7J+5l
2.22]
?FGLx
dXrbf
Z$m33GB%
}C4zz~B$
f_,;K
SVCbF
=_i41:
dnxC)V
XWKs<
A>FMD$u
bc=43
7B.G`
6w 3"
oAg 3
/2'Y:
Kh)30
a$`,@
d7Mc^
@E\)Y
u3'UU
}B,!H
co@PL"
B4!)3
+eB^)/
FW#C8$
uCfL3
i#"MUs
NL8TT
<#fi
+"~zz
C&a!&&
'"_Pf
YzG>t
YzOj]
8A[0;)
|Kxo^^E
xlW](%=
kPDtX#
A|']J
G@\&+
{n.it
vXu7A
l^Ot**
yV!Z?
fgY6{
zeXwJ
V.z3D
rfUR%
JPU].
'<;>o
"CTu_C
Z?OjW
:yv4M6VK
>_"Rk-S
6z?Z|
:5}W6
9k%&-E
g7lCQ
8A;Iq1
rC<4.'h9
um(kF
.Ck"b
T<qiGUD
[0~dl
g|d)%"
"3u]4
FNLwd
U!Mwv
Q"2`8p
;X+^I
$"@Zp
Q*iEJjw
'(+3j2K
B&,vy
21yt7Y)
NxM{^
4}q)\Jq/
c<Bk?;
VYyQt
G+RJ$
G5uA|
XJJ~g
IEDL-
tSE9'
w$~ok
Qmw;u
Xez#M
w?`KhwgVt
WQa+[uu
yukV#
Vk,`o
@t@tC
C~xxpQ
KW<F_)
aYNa-C
{R>W=
+PUQN
~l[d&b
D2j?]
j]m=lb+
pVm8{&bJ
VW9?o
vD$@Z
p8D.6
6~XD}Px
sk-T\B"f
aB!dD
~Rrda
H]+"fR
B'i<s<
b9j:h
C`6n&C
afN9[
@G*oI
dP`^f
G/af0
E;N9)
F2WG%
Y^z3;
;~^}NyY
B:q1T
Lgd:E
h[kRET
p>>E7c
?TQJ
\!@Yz
wJ']z~
DLy[W
.y3N>
wEp#J
DTJ5#
cvC3L
4cQj#0^
IUUu8
x\@t5
Q?==%
a)%w/
|63$D
wOzng
cG4_B
ri5&&
SQd0J
AP~mk
V<,e\
N2*lD
iIB9qba
WY_}0
rm}]p2
o?\/.X
e)[*{Vy
\uN9e
r@!p?
^{D_f!B
v{&b-D
%c&pF
Zk=wj
Og-"^
s)FNu
^b__T
A@WGu^z`h
Ll6ob
U_fJ>
Qs_FG<O
3E^Rf
sEPrL
":>:z
bg.+uR
(G?vbo
,"EML
Z.D*9
f!S@*
?-<l)
/~1}4
}}k?K
^3{*uY
\g8!F
z-P]=
o0)<;
M\_)*
nWp )Gz=11!
`*GSG
'W(Py,
KJi>M
2m&F,
[)&[H
COBKh
p8<>>
"b@Q1 0U
?oT=MY
xLRfl
N3C2d-O
KH0g:
&?ru/Y
Z\Pk.
zyX-qR
_#'Gt4
"lK7/
_s_.|%U"
2h/G,2
B^no*
*J)5^d
1`TF)
JE$B[
?</h$0m
UUqpW
5PXr:
s\P[[
ou#{(
)=#Mu7x
2[Q ^
sM$UU
|~F6(P
=o7gJ
U>:2P3
/.U|2
8K^uu
}(&r.
~f:_X~ <
%N20[
???;Hy>
v'j?'
c#M9,I
9E 5k
%q(1S~
%rUuL
b~zg=
v`"kQ4
oN_m]
\___E
xB<G{dK
4-lIp
+I|6@k9
ARx2$O
~*Ez:
s kypD
|>y6Y_
o2<IFrF%
3K2e3
zW$ 1
wbsTI
kC;HR
36MJVo
bkHX5Ga
X6^&l
tBmK)
qx~DD
-7d.P
ieCA68O
Mc"VUly
["UGC
OVJ![
GVKFh
H,=[Y
]H4<S
d(_QD
/_fn>
$Id=]Uk5
%W?6C
bwC3h~*
l^ry>
iis0h
2/K-YSJ
rA9>-
AyV2Jg~v
63F$=3{
RBHj0D
!t@S"
vkDx0
%&/+t
$5c.f
_%Pd7
bu;v2
z'b=s<
t8fOx
pl$|3
h"*jb
lW~[_D
'B1[R
g"z}}
^T$UoN
7U5*H
%pw3S
4bnj![F1
F$`gu
%R5#U
YSNk5AX
LJuXM
w+j%WTi
|||(eh
Y7\&"
?==yFfk
OOOpt
IEQ<zt
ODs.p
oP^8p
0'63&%?
<8*3M)g
G`<>G
28~;hh
39\EZ
wKgd:Y
w!LGgCq
2TsU-KyD
h3YQlIy
Jw@Th
%%IZk]O
PCoPE
(cbK)y
zox;{
R)M\2
0$%s+3
,*%{(
mX!QP
z@oDS
+4k`j
A@Q]]w
Zk>6jR
>^\UK
CwNUf`g
qclW{;DZ
]f-%1
nb///
5/=[J
.Q^bg-l
nk^^y_k
N[Em4+
:/OeT0
|>k0/
I'rE|4a
X^Y@4y
wuJ,|
_m,DW9
"B@LGMU
7S1kn
*R@g-
Dzi#+
WJqi9
wkockx;
(bdV.
W;J>'
t7ne$
!eU]D
VpXjPq
UKk,Q
OC?a^|
44prQ
.TJ(W
rUcda
A4.J#
BVW$;
so.'Y
Q]8]+
;mb;Ca<
o[[[KK
Rkl)
|x8TJ
%tx)R
u`Wl8k?S
E$\Rb
(7&JC
#H9=T
-SMeJQ
A@]bk
PCu=|
J,b*6C
|"JPm
!_2yl
*Zk}i
?(U(1
<om)m\
ffb2cV
)"-R5
6|tVh
iT)e*
S)"ka
-MU*W
-~S2S
<(DlF
FvEuM-
RhN-m4e
qq$D';
<7[ka!
#zkY*O
6;}Xv
t.Z*;
73_sn:U2"
v>_>d/
na>(W
,0Fk7[{
`daia
93s608
?gY&0
m:bWh
d2AQSA^ZI
|>{H(
mD!Tc
ZJyxx
AD]UU
4bOOO
/0ktyK
p{:[q
L[Cg0
,kJ#L
~LZ.2
)2F[d
m`xa7
B@(L
Zk6;Z
Q?P:e
13S5N
G)puB
,#-.],
~:MyQ
rQdjw<
7M3*g
Ce#oU^
7Dl(Q
x2MH@
#;ndY
N#kf"&
%fc#6
('vu}5
dx&}x
zZ#@K
f</^$8
<@QS2c
s"onn
bN"k;
66QYv
2pszE
u#](sg9
h"3?==i
Rji.9Q
ij@xy
`H+=F
fMT::
Vhh|E
1q`&E
0,!7:
0DXz(C
i&qvb
9Dy*a
dSJh-
N?~aZ
VF+z8
Pq486L|
>>>"k1
SJHMZ
a3!f5
z"sf>
$bf^UWMT
\*Ry[
h?f+?
X?|yc
`6U}zz
JRkeBcO
b[c[#
O>8%
/Do-2
LK]Lh
y`7MD
f#e!a
tKWue
F-ajzJ
|55v{
D*]WGm
HP-q_
GfH5C
Cp! N
0Lvp#
T=u~Q
nUJ!z6
?Pm#:
[Z0Nr4
W?g2cF
5kD$,F
MZF9'#*f
|gGT'
K gD0o
=L"nIa;
5d3?!
\U4_L
^>~*k
B{Lz~(c
m]zL)
AB4^km,}
eVa'GM
f_!&v<.
dySE=
vh2!a7
{YKOV
h$QZ`L4
#Jp\5Z
4OOOm
\=tya
S2W<"od
mF t\
K]/X7|
,|hCD
<#`Xx
jpBI!
UW9G]-
0P*<
+Mi]>
,"2fm
g~J]Zi
1evyc
F,&GmI
vu6l7
F'F7k
2]30)
;F9c3
|7)N9
fg6n._=
}p>qg}
CHgW5
%{EZ:
@@4RVN)
s_ls_
__f,oE>
0xh=:
r!(g\o
>s;Wo
"EsE#
9+#_E
xGx-m
o\-?eq
SU%|%#
O?<3^
uHJQ_
nC*b5
eGy"XA
[A*0P
4+4BD
m3;wuu
-`t~Qs
y,Nc~
"NV9|uS
pPU(+*+
~4*[[<n
)36fP
G<??c
1_kAs
z k]?
}tn.N
")u2G=5^
lGnrH
k!be[
jUMD4
U77pu
N]<[*P"f
,,B/_
qcj"r
&kMMQ
"l2L$A`
;9,b)%\
NYDnkFXc
9\QJM)%
@/r<0
5{UUS
#kl.<e
fn='a
lj&9w
=s Uf
W^<e
iD<mZ
<{##E
^aK@r`
lru(t
B9|2N^|.GU
iES.B
Q1>,YS;
k831a
B7V~F
bJD5dy
E,JZd5
Ar%B_
-WWW>(R
of:KM
NR'I:
oxmLLe3
l*]q)ffUR-
!bJIZ^
Rzxx@P)
:'`'"
4%f?z
?zlC2s
}4EfOt
)-IDHL.)z
oJ)bX
ZK`~7
q\l&g\!pEJ
bQq0g
g(&%P
nE#B.K
NCTbU
;@=`,
Ap6D/
J%EJi
:gJ)}
ij"bV
^g"Nfqt=
\7sIU
n!UcRw#
(dE-^*|
-5XUMsP"R3
6MS%X
v(!0k0
S2S&3a
S1Yp_
Xi3s]
OOOq(
r>D*4
RJ{8
v]Mb6
ONNTP
4VrlV/
'?m$vV
J*"**
{LD)e
L)g/d
b^m{_
O?*v_
><<8l
R*D&o\
P!s^M("0O'
Bwo\x
\{#=;U?
>]___
"b(,3;B5
H/G]3"
Oey12{
%[J{/,
TQU!5s
XQD"<7
YRUcp
Kt|l]
4MOOsk
][7lq
CFD5m
9]x*|
,R<a@
<d1:(P*
SJZ@DPm
}K0n9
3DrF{
9.R%2F
e[pVH
8jr?s
./N|<
5Nz<X{@
?Mt6f
"#y7H
I]zc+
\/^^M>A
G"Jzm
J\|]W7
{;]x5H%
/tY"E34
}#xqq
0<<<DJd
a"$p_
<s~ew
Bvph!O#
=U}zz:
TEVi9a
)VIho
F13s-
wj6?
F!d}/
1b`"w8
VSJ}?W
k$V*"J
Ukx~S
T`|xC
4~"'?
(8o%>I7l
"J)US
P^>EU\Q
ZIMDR
U+fFn
`?,_.
+vh,w
Tlc%O
34D=
]"B%T,
i&XJv
Elg|v0YN
ZUUeqh#O
JF*`5wG
HJ)KY
8xR.E
I_9y-B[.
q#k',jp
4w$g{
.LNd9
215xsDj
*ww$R.
][y@U
ESJVH
e|Z3L
3;@d`
bF]MAI[
#vs#%3F
%EYe:
PK8Il0x
g^&Ln-
dy[QR
I&LVx
S77uC
RV%!b&
euNmv
{C?zRn
Jb 'X
_Nm?+
@ 2o7
2zf`h
Fkj}-A'
VK;O-,dQ
sOY@eN)%
uWt+F
YiK1]
*yDv3
z<F={
\l,"B
`LWXJS]U
&wDU25
U5#2##
0K|)w2
Z$+b@
("W'A
+{G<k:
gdvDd%
Er8U/
a7@""
(=(C=
i_YD\C
fEQ!*
u-b+L
by+*+
a7SF?
+e"S2Q
4]l.i
lVSb"
d:0a
b_<gu
2RCdq
cEUUe
+3C)_
Ak[xW"
5)N'@
j*&&IU
UG8P!a
+(hA{G]
?trrb
d+;fP
#P'"l
9i&"ma6
*{9-%
o'1!]
6MS@zy@%e
rP!0B
Y3Of&
8JaSq
nrU*n
0<vE:
sT"<7
xHOO2
$Q(mcv
%/hf<`
bqyBD
qk{HR
d5{8MSb
X5aj1
-E2|z@
8DhU=:
CA0l1y
fcMUI
#gC)h}
PResa
-X)lRJ
YTRJ&U,
(`j*R
a@Z4e
RVe2"+}uc =
g;4QP
YyKKti
ZZl&x
g;:g}
Y9gZX$
cDD1,j
Y2jEn
Z0J17G
Vm'3+
`f t9
bl%e[
iRO.ce
C H""
}3o88
~Uquuq
m///U
[S6-RK
8n&l\
rNOCk*
"*=K1
%:qS/i
IM)y*
FMV#7:
<GIefM
xvxLD
U62sJ
+;6G
EK6eU
tVBR|=
{,SoO
r@|}(
].)"
\rp#"2e
haHzmc
"B=SVg
X~)h}E
-V{D}
1YP+n_i
z*g2@
JF}p>
# BXr
hE7Q^
HD777
Qt}w&
2s_17
sP*Px
(eL7S
2gi~|
1y+9y|
Lh1|+
5 dU=
3X5Jk
n?c+|g
2ok'"
4MEDr
|vx]kl
]QU3c12
9EV[^
1;E:_
|J)a
VrxTU
3{+y,/U
VfcV"eI
uE^K|
SO=%f
{aoE'
LU(?'w
KFm>R
#Ex4|
sQ)QMPa_
)yQ:pQ
9OV35E
)rm23Pz
ahv{pk
U:O4@6
\E7+n
Pb'C+
x^DnX!1
|>?<<
&H=57
IwuC|
)<A]%
~X6h4T
yyyy<
JougF
5%US@H
# pod
"/dls
tn|b^}
g1z0<
Y64{v
_Mn_)l
(zind
/!;V7
}gFdg
u-&W'N
A-C44
%1SJ$
=Lp1[[
%4q0BM
LDm5qeF
REDE`
)Qeb@
~#rsOs
IDOOO
!gEkC
epNTt
yH.Xu]u
IURHF
|wTK[x+
i.1ezu
sRU&n
tC:TU
)LK)UV
"PO^k
83???
x _www6
]1{N>M
3\%)i
J Ohj|
)YzM{
#,iz<
ESiWu*
NXojT
[`CgG
"3olUw~
TZ-)>k
;O)%P
S7B~=
DdJJ*<
Q}~~NY
w_Cw}
<p_B2
"DcF4
LMPmi
."FIA
;stkf^.-+
xT}1T&
ZNISe
XJ-|45f$
^*m^[.
w|]:pJ
iFAVK9
j(@ff
>MFYI
(?|(E
$(D B
B)(Yn<
*p!0+
kt1?i
T%g?Z
u]#(0
vDUz;
FCPfl
+DPJ)
S)ETW
%=>o.
}RK_>-
`x(Gw
i]:"y
4<X{I
-J)yT
3OA,%
-2CLZW
OxlYPS
X6\B81L
:K$s;
s4DD>y
NOOO]
sNZK^v*O5
a^]\-
y/DM2
i"3q$
|vG=#
k)[?l^
yHy.0R
biHtE^
{WK&K
R,+X!"
g*Y0`
c2H-U
V]wj
&Uu)&
X<9Nn
dk8,e
!3vDC' ,
"S1E8&
&*UD!
?J<qU&W
?3UZ;
PGO@N?
M7E?7M
;JMc^
C}*Q0
rk8m4
9yETTDMBDLM#
+Hlya
J)Vga`0
HDt[X
$]"!o
S/HjfL
>8}2g^R
*74)T
8GDDZ
IDv68.
e=r6n
rQ%DD
u@`[j5
O)Y@D$p
nSTYD
6rNoR|E
@D<D<
[{H5{
BgRJB
uPE 1
101d*
/\>$5
TGbqk`
f&,IRa%"q
z XdA
B.XlH
?3;_d
9eQ7_$
F*Q;C
je)[!}
]3#U-u
#Lz3k
X#xNkL
vi!En
m_E8/
EDvO;FQ
lJ8.w"
'fiVi
S)P@>q
f#t<{
gA_yV
"mYhDan
f"22t
V>)RJ
%"2j}
R'lPpW
CjYE,
=q#IH
K+%7[
Xk;.)Q
Rh4cSmFt_P
sX?`'d
axyyI
t:UJ.
!2V555&
?%{V+f^
2IUr>
(S*t7_
\,6Wv
\DE]|
H(^>pb6l
+(\k-
cM16Pk<1j]
hr`X"
)eTl"
#p$C;
0& f$
BH9XjM>
YZLAU
oOCoLU
X$s~yy
e1Psk
,,wI:
C^] j
cs( Y
)f6U">X
zB9Q=
1vqQ1qw
#qYJCD
Dw>Y.l?
0ER*7
A^Kq_
d3o50
-{OJ)
o!o {u
zH.="""
~o_nN9
6SX,3
b""*ZE
Ap"6P
S7e#!!
27S7s&R
Xalh`
n)bvT>1
^GYF-
p)[:
P?@JH`
p82s|
=8t4MG
vv3sg
UtWrf9
gy]!:
=)MBp
_!gSp
txc$S
=Qy;Y
!IPkxb
/// .
/f~yyq
mq]W'5
7XeUi
PMOS'
Xg33A
OA#;C
O[fgE
!Q|,\
r[IV/Oj
<>aDF
PX2~9T
8YUW#Jm
$ID_q
+%TD@
Fkih\
l6CiO3[
G8[&x
,Chom
'n@5Q
!IlN|
CM)Q*
qY*6zr
:~/zeD
BJ`0HI,Y
3a z0
fA>f'@>
*jGE:
oTQwG
efE#^Qm
JHDLL
Z`f9g
..EM|
+F_,Un
:NuOOOmm
)fbNksg
_L]OV
+nz:\
#WP.L
Q'XD2
cjRU5-
k|`WC`
DYbcEJz
MU=8
/h1Re
0Vt|Y
;9h 1
87MW]
ZS`S;
M+^ [
T[[[4
xEjFF
6M3tE$
APS:G
X]^;~
4]UYQ`/
D.-Ds
^Tu(#
3p>l1Tf
*FizL
D|~-U
YFb**
\L&u.
%%_Jn
_y};D
^3vn^
&F^r:
Xo369
_I~I\
g3Xv`+
'Q7,5
z}n7!"
ln>M"
eiHY{
Q2=Lh
nY(WiTQ
2\Mr@d
YUu1C#1
BhTfaiUU
x4!Njo
)AUp0E
=~."C
fldT2
wr'N/
nn G@
9M)yP
85Z'W
F&P[p
="zCzd3
0>EDx
Ayt;Kf
U5tAK
[K*b^
qx8_#,l
013# :
TTUR)
,094>
uSqy#
Kvi3%J
\O?B->
NMAL!LG
)Ts56
j<Kj~L3
0BMKJ[
%R5Hlz
IuMtMl,R<
<Ehe/
.|Qno
V2HDD
4MS%Uh
G8RYy4
t;Ix?
:+$eCV
xva6h
F*9g60[
,FCL@
c&W_r
Q1_bGD"
I5s[X
FP-Ej
?\)oD
3zaKU
qff6G
.[;l}
tvX`(
}\Iw'
KUEJ[
@I Qr
`j3/]Z
wqGm#
{d466
<>-gQS
fVj].
>lPC"R
93rkc
`<>>B
WIMz_/
SlHHK
x9=%b"a.
~gUJ@
vnC8n
ISbg4
Q$+:cT
,"<Gld3
sP7KO
E#c:}
ld`ZK
8Coy
-d{5-f6
8>==ik
$cvKVw
gCn,(6`
X.W@k
F#"m3
-"VqWj@
3/75a
tf!$(
[cjS
+x:-F#-A
IEJI@
8-d$K
#MYK1
y"x\B
vEXHgJ
EEdw7wQ
W]3c.fv
(PkmK#
_("^e
oqV@h
j30p.
iccc>
y>`8S
.G9444
d&a)ff
H8tXw
Dcnga
^7V"2Q"
aDW.+
qAbOr
ObA39-A{
-2)sN)
EDS}]R
U)+O,
-8hJ#
0) R/
Tk!#<
7=04n
\\B&`
[Hh-"
KleP]M
CD"%/Z
_<^GZ{
.t "D
{)ypr
)WN8a9#$K
cu`p)
kI,'P(
Ey1x#
=>>"=Z
bUB>f
$D&$dJ&f
h\DTMUT
i>sS;
z, HUK
b9'1-
j#U*1
9r8KS*
hXhRXO
}sCa6
1(a%l}
|&U%Yc
IU{S8
B^L|Xa
=':KIJjX
z9A&#
9uW3*
g&%26
YXK5p
OD5Z#
]vyIr
%evB?
{QZ[$a%
)_P:i
9XVQ~)
2 vGr%_.
ww6kX/N
W+/K[
Fcu:_
><<Dx
KK)*]
Qd-sN
*a0(=^
1Dd@~
^Hfx;
0vn^L|8-
bVq|.
DL;3{^+K
$U}zzB
<Um>Hzp
|}{?bs}
}]9Jf
5Z566
kk-;58
) #{D
bq3G6cTQ*
2B?H
*~F_S
Lj[~H
RZ'K)
R[4V#
5]k1y
!*T@q
C20s)
&T)K3B~
P#(/`
+0Zmf
IO59zU
+xc+i\`
lk~X+
6>Uu`wk>y
m2+d\S
wrbfI
>b@]h
CD0VV<h!FG[
|~zzz
AKl@^
q1Hi+7
<t5RJ
EUIWp
u8S5Y
=/O.Z
;vWhu
f^:q]
&N"+Ig
>S+zX
8~:ov
?M.<Ay
:{3:"
4'D(9tw<
UX2K~
k=}3u
%oSHnHP
ununC
\VVv5
eR,uS`*(b
70|c3
F;$F)
Rroo8
B!us
N!XGqbl
Q;|l?|l]
:.;jr]C
@`>nz
nqQUok
TUGC=
~wRTJ
Dg6"S)
iueZ:k
+zGkM{k
dxg*]
a*.sx
yq)M.
K)VJ>s
lO'8E
PMbn0
0US6J
YaXd{
Q51+p
y@MMX
D75A2
|L(Jx*9
x<=N~~~N
w3HlB7W
H)EKa
[kmvl){
K)Q[:
/GM;JVB
1zvj_
:HQ17
:W6xi
://5^]oDj
Cy46oE
TE%*)
"">qPU
]L;+r
"fS.Z
xmGZ,
n=7k#=
Ae*U-
-y7|<
mn0+s
vD-K}
S ]8#[
$b1b%^
$"///l
3P\k=<<
-e=p,)
ZJ@&x
W(|Do
H\LQBUm0
*zQG;
0<??K
eF>x*
-?k\g6+
o3I33
o_]'Z6U
:B9mU
xF>Q42>
] a?`
v={jO
Zl*Y9
t] ]]
J)*=q
r)9Of3
+gaO7
F$,F^
qL9#O
JU[CJl
1pawbH
iE$M$)
/QnRo?S@*D
//Dp9=K)
&%"21c
Q0jVX\w
)O,&8
{5sHS
S6P}e\
!cC7Y
}N9JSYj
V)u*u2SI
~/yFU
LZS31
03/@#3
,=Q+.
tm)%:
;P'"d
0!ykdR
MMl-M
p3S3UI
N0Eu8
@C$dx]
"2{af
$Z3m]9G
;S?LSk
Fk`u'
zu8|J
&LN&
:%,UEDY
b2:+wU
8\TUT
s)*"nx
XD|W[
Byn%#
\FWQO
f\l>1
VaE-6
D.D=@
a1fR+)3
zW|;4
:v$(=^
=vtxD
,VkVF
~/"OOO
]UTsj
/W-y>
<u9LwJi
1"ElP
c$UIO
]tK)C
|ZWf.Ve
8/S[H
4MFXt
{,M@jc
K@cm*eY
`>Qh/&
8XTKe6
AQdJE
$RH "
T$uo|s8
$]mlm
'g/{uMD
elsk?
/%>G~c0
YHke1)$2
-ZB5u
p/2X`
$cmookI3
9id"5
N:wNs
]RgM0
hflp_
89T<lU
w=K[H
0,nqLvo-9
l)B*''
q!|r=>>Z
gs=Nl
T]]$%q
`*Q&K
t{n7@c
?}z~z
TpWU-_
Bh/XDtA
:^Y!i
N*\T-
v."bk
9%JK>ZRUQ
e:)<~3
k62^~
RXd43
sk6%R
/]%#Oq
Z[zWHW%
X2x3:ED
[UTC-
"af@JY0$?
mTkaV
Q(07Q
yf]3sV
mA([fA#
R~jw;
2yq)N>E
V*$"1
~[/4)
^ZNTL
ID4P1,%;j
#%w^;
]tQSS
TovRk
A8b)T
lKrx^U#
M+:ytDZg
(VfVx
;%AG`
Gao[h
OUk]S
dxlII
w5par
=/4Qzm!
`OOO=%
NV_XR
N~)8
OIqR}
~r*a(
AD;<FD
"\&32
IMmTJS
\.e{J)>
QK0n5S
ISzzz
<Um>@
Z|?lj
H\dYS
a2nyZ
c9"<M
=bq8`
;JD&)
0>>>"c
=-}\d
@>ZKA
cT`Ue
=<<\.
j,.`6
,"EUe
YUTUb
thLnL
Fv44Gps
b%r[#Q
e|N;
addD8w*
j:`Q}P
'#JwLR
0xT06u6
SJR[<
,k4jQ86
%PJqh
D1^Mk
'`3E|
|>[C,2
j-"cjP.
_)/MV`
306Mk
[~AR*
+lJq2
9T+t@<
1_}.k\
c52TU
5ws_~q
O^>.P
#5d+i
swWeO
9UDj]
12+0^F
:oPs6
r>fJ|
D/.fF8wp
xf2MS
1wwLU
]d.]F
&o]->
s|g{a
yMBxe2
;;!V}
@>ft=Z[
x.O^
Okf80
;9:Bas
zA)%I
I]+_3
i9kle
FPs>(
*l!}/
:R8e08
y]lvB6o
P4BN+
t:{k9dr=
p!L:S
Z[^^ND
\.iDd
`]`(K.V
<G8in[
*H\s|
P(vt .F
bFJ`FS
:j*TU.Q
m:!/G
R=/B0j
[q[HD
lB)g#
uM$hh
5deVe
!Zj3o
jC_+;
pgusX1
XJgGU1
!5u3@l
RUO4KD
t1qpF
H$OeJ
;Xi\<
WUD6;
g1sJ+
#lP1k
akEYg
W&qhU
kT\fu
jg9Bff
QmopX
Y]"!(1
t8x#S
W_uo]
(5?9N)
OJ .`
7*4"R;T~P
q[";/l
fG[tSUS
V7\,^
rd'{<
]H[kt|
[#VV&^
20ID///
LynUkS
3<qiw
y*cYBg
h3:UQ}
;f~zQbwv
_|RRJ
twED>
eS#T1:N8yF9
FU.^KW1iqkP)
TGdo>
VZSiM
S\MVUx
o j{W
c!#`5S}~-q3
[zoCN
6z<h&
{/SE!
-AV`K
}yDnU
,Kk-:
iza03
}K)u]
se"/n
d.BtVc
0AuK)
:2>>h
J Q!b%*
jq?:a
HJRNk
rt*oH
4r6?>>
"z3Ul|
MDZ]5.I
EGvQN
qP`K~\
fwE3i
{vn3C%`
Q>]~6
+(O~}
en5US
;#/gL~
*ddxv
e{AJ
?+pKi
`@2=c
~#30S
%`6nl
2OeYDT
1/kT[
H!"e53&f#K
X\[7&
e"S3Sr
e!m U
AEZ}PD
dz_b;
h13"iS
<6m=C
NDJ$F6
bfb^D
|_p9Z?
v/W#F
=hlK2B
S6I|N+
w\+>[
Bav,p
A+ZEQ
aw3fFY
.yX.fm
YD$ 1
Gw2q[
<Eyw$
@{HXU
zw71iw
`2,30TiWR
NwfEZP
BUTYC
q,f5PUh
!%Dff
lTfJ1~
Q~[F{;8A
K17g0
\)*Tx
tXw.&
Z#U+KUu
v6Mcu
6c*!n6.I
wlRa]
6Gfo@k
a:c~;
pD_==m
ad3T&
?05}E2
/dNv6
D@(~(+
-IDAT
9r]bK
nvPp\
a(m{8
:-x+]
uLH?G
gl-vk
^,_#?oh
*RZE6
E:q3{D
xk@ @
"f*("^
C[40/
1b$Gp5s5
4{l+!g
0(gF#
%~?==[
>%qO
,@a$",K
vfUBW+
'q *!7>
~5X*MSD
)c{P&@
"2_f":Mg
~,l>m
ikkkkk[
L)(YD
gvWo_
HY%]$\G
K!~||4
U?AsN)
"Gq'F
\!U]\
>%KRU
e"7u^
6I=$Q
N'f6<8
-$"wy
KbR#2
jJgK'
l3Ecq
NETUT=
s/ `.n
9gLU5fo
qg>y0
UL$,<
i5BDD
q7z[R
AK=<C
qNRj)
mIF"["B*
z@RJfkt
Q5u5+
8x]va@8
(3sTZ
6M92e
n6@@
rxbC<a
WUEHSX^
=BaS
*h<^5
%@D"E
%;fwr
&ZIG(
Aa?kg
L,%5Qg
yi%dL T
8B)Hw{
d*3"@
/-w`u
I\xww
fKBlb}
h8Zq$|O
cd~(I
l\2aa
V9DMYN5,
'e%jDl
*fjfmTSq
fh#\r
rZ25F
hyb}v
:(L.jyP
80nwoQ
mJ8(o
ITjASU
]Fkl=0
Ve^Eo&"w
3l$>U
0dS:+
5dk0*
`u*r4
'%^sb
bRj]jo
,CDr`P
nQ1MmZ
<G!w@
QU5Y'
!Rfr`
FCki4
|ffGY
0Ja)PEkb
hk,%z`4z
#,)<uv
Sl7q6
Xm'3@
,CWE,
www:v
lxS(Ml
itskDdB
*jn*f
b}~w{
HtL#@
Vo?==e-XtL+
~]%t
zF"/CI'
1'f%ba3r
S,OfL
\dAjU
6R*Zq%g
F]0&F
:D=W6
P33CecU
CiZdbM
h1,m$
Y7 %g&
09+R^kU
:ju{u~_*
3F#;>|
(?X1
JUY)!
RUG(#E.
d6p>.
R(lW)Qv
i^V m
Fi:_9
_Ukz*
'q#~mq
Qhk"R
"]44o
Dt8<yv^
^?%\Gp1w
s]0}l
M{hbU%Y jx]JIk13
,6y"i
{;{B$
#XT(40G
>P]VY
>>r)/^
aNh2B6
93OSu
&.'6g)
"5K3.H
R6@]nQy
Qh.ryQ
6/2{S
Oj)9/
M.,%S
$O?'0
W)0j(
l(`yD
J~DW7Zv
:73+203
r>;an|
p8<>>z
_4u7l
AS\kY
}g]Sj
Owm|@*
S)Eu$G(
Ha)DL
[&V]8
c9'gH2
ETeq#sw
Nzr0;#
nnnJ)j-
t,IK,
m=9pT[u
UJ.]'*ufbv*
PYJQx<t
"!a'
y3QR5
>Ln-D4
x<:z=MSe
z_-<$
%SAN_
EiCIc
&:L[[_
C>Sa&A
J///!
RH"B3
0{0#B
1q%dB
zzbw-9'
S,x(9Rv
}v!{:'
WX,`u1
*({fB
<m\d"N
LDOOOD
h_-^&k
@N(xv
95FEp
_U54#P
?f o%
bO)ym`^e
Ca#_J
<D3u$
SQ{0*
Q_IEL|
,CtNUJc
vDDM]
e'zem8
iJ<nh^
BTJ-\
iy34C
H-M#?r%
Drl5B
C6E_^
///hK
g=u|WD
pE]sUa
xkm"B
.\=us3jpZ
!qFY(
j~>)"
qi%xK%[
|cZDS
uj}2M
O$kF.T
lD+PA
4=<<p
U<wrh)g?
LD=4_<w
~'6o;
UU]@/u]+
S16f1B
SSf&]E
KDJfZ
%V:mw
~m7CD
-?@>(
R<K\'
_W)."MDM
f^nt@C
bN[3U
%QUBU
)*(#W
0&W=l
6S*bH
GoTyq
VRJyw
S@szN
z(pkT+
1L dp2
PSY'46hi
P,z*6
t#Y~Zk
%`]U"
U/F-LXl
yS{s=
v=y~~
W^{_!3
|zzb`
k)yQF
U<s8<
cLyc?
F&H:H
HT":E8
}.avUUI
AJ^%#
>""w}
Kmo^_)%O
}6@Rr
!F[,
Eo06n
Jx[)k.b
<==5MS
Uf[cPk
XzW?A
,DRke
hfKyi?M
uvNp4
Dt:UJ
Jk%@DF
"h@X!53
;zM`q. .F
pJdT&
yXE8Bv>
f9?xE
OG)\8
h~mCk
hsaY$
jBRP(
QRQ-\
NF`Hx
N+2]3
"N_C|
LLK;U
K#9>N
5mTTQ$bu
fYMtb
M&xRUK
shWCY
hMzd!
*BJjfH
B6NgqM
Qftp_
Qp{b3
)pX"2
t;d0:
daD^T:
mQ8Q-
e?R+o:
HkJ9[
x<>??;L
ECHSD,u
r"g10
{wQi6
7Hc{/
,'.~N
/7~km
[[WimdcREk
M3s9w>
`w\x||t
r6Bx7
!$<MSD
Z/kMe&#
q45tG
jok*u
(LW,3
rIeJ=
pnNc#
4b!KR
Iw%#X
)i?]'
dILV#k
Rku*N
}+O7b
URTTmt
YJ.u8
W(ZW3
|4#AY9
2SJt<
u]oiE
3+1^1
VVU{s
}-+l@l
-2IG=w
WSZr]
.%~{j
OOO^H
_,'st
P!2bUc&
`9%"M1m
bz)iT
'U}}}]_>
]vhPU
}QT$Z>
r~x;v
TV"oF
Blv<h!
/+aE-k$
^y|)n
oDkdo
S?/RC
9vYV'
5+O.lc
#"2U3
)XP`#
ci+7F
@m}^.
ugH?m1
qJg (
M\,BB_
p9QGAG
B)|1*Fb|{
#!9.F$
U6^pe\WU
@5c6)
!4kDt
jTclw;
: )9i
"U]y}
dV8XqlU~
U\fky
YW0;SVv
d&bjYLET
"H#i4N
o*RC0
f;PU[
{UU9h
osO+z
Pi:Q-K
XMcef
y\_#Y:zm$r
R vu=3
cfbYD
VAfv>
_fU+d
U(v}c
#K)}B;5
u]V["^
J[[ny
!g"Mum
rL_N'
QDbTvv
q%>pd$<
Zg)f+
hkTog
R|$CGBO
(|~5@
8K/Z>
RJ\Eku
C*|HP2
VA5}3
AujfVDX
@zWBJ]
ClX4N\{
?0Y^Q
l4("i
\'DU4
w$"Es
bdgxX
Digt@
-.&TO7(
|cPWc
2MwYM
0(LUm
7%tHt
!"M!JD
WTkaf
=m3"G
kqv#K
E"Q[m5
eiq0:
*va[
|i;\6s
g^8}^/W
X=a4:
yo|#9
fVKU2
Mbf5+eX4
zDkf6M
2#M53
mE,YQ3{b
*Cg2$>.
#rl@D
[NQ#@"1;
%jEwQP\
5aD,'
.5'9FTX
{ M{{{^{
rMSZ]
hH4<&
<jD"T
`c)b:y
CLJ)U
?9#u|
,QG5"
('K2A
:M)zw
8yU53
iDj*A;1
t_94r
Xu 9Q07
FC!(%,
+/N|?
E*e>(
~pY<kk
hmlmynk
E*~P@3
>>>ZF
<j#uF
K<@H"
\^8T5Uq
PP#&z
^[[[S
j9;QWQ
y?Ah5:5
2:hyP
f43lb7
6E=.~V
~ZmMj
rZJQ]
2VWJ9
@nYm`2
d-'{v
f6"K8=
i"M%c
<1:u*[y
(^~XI
}s}W}
{RJIW<F
.Z=4q
FQ=wY
7Ur-[x9eU
z,?Npz
\.~fk
+V,k3
~>_RU&?3Z
[;[NU5Zk
C2[aZd
Trp$T
sBGt[
dKAw@h
>}"RO
Y1eHu
t";uh
YoAl=
5+SaK
u]k]]^L
F.93O
t]P[RZ
"OL%V
5VFcG
gkW)% I,
nRDj!
GM[v~
u?`*2
hKe:A
`ljFl,BL
\U9Il
r?<=g\
wx,Qd
<2bCUY
Hdu;$
wuq?|
}EsMMm
2Sus@
>AKD<
?P ou
8rF8r7
QzCvt
M0jK_
D`h2:
gXi'5
#Imx.F
]Y*^l
2D-^W
LBD7`
K)DIV`d>O
zU*88S
3:B|_
-pR]9n
+<Hu\
uj>X]
OOOX5|`3
u ;Ni
4y?>}
\Hs2dXQ
Q>ys_
Pg,U%
EWra/?O(
G2bXh
9[Q!R
Qk1tU
q3AlLazm.)
uPqD.
*j74"
]z!*|g
]'aE!U
A RRU&FVC&t$FV
(jpkE
*<JF_
,^?D~2
;,I\*
?&fj~
u3.W_4n
t1.$?
GQE[z.$
2WkH3
|1"+T3
y+Vdj
]Eoah
M)=??3
^N5y{
mP%R77%
V&^)X
Q;>==<>F`g
l#O&Sw
<<<p?;9A#|T
"IB40qf6<8
oWlrK
<{<jG
kkmy{e
Zlie[;k
%_5nV
, UQ'
!`BaxK
n'! &
(t*5x
)-vod_o
4j[V:
AtHDCJ
MBVyD
TTRPO
Jx6N#p
4Na=X
0H^l(Ps
Y:_^z
^D w|.G
k]kB#
].KNH
m+~)BS
~D^f0
[ 6mp~G5
:MS^Z
]\D>C^
X),7k
dk///Rp/
G=*w]
H)t~d
hEdB;
dkp8x$
UT-Y+<
zcpMG|y]Sg
}iMDZ
au=+D
b:QQc
~;MEa}
z"3{2
v?]-9
_^jE$
uWkU-"Z
}^DDF
vREtZ
@E\T.
C:;M4eI
BozsDV
yy92S
2"Of:
8><<L
S9UWE
_9)}k
H<`BJ0'T
DrAO_
w6y'@
,yG"OO
l#wy>
)q"&w
$Mx=:
eoB?}
)oq6z:
o_^^,
VlMT%
[g\52
qqN]O{
9'p@h
HKD@G
eMMx3=
)=u+&*
2VKd~
`h,D;Re
lwmE)
%U%3|
CFe6^
bq3sJ
k&&j*
3==-\
`acav`
\G(+f
Z6"b%f
Z+<pSUu
qq#J)
5pYTuu)}
Br{EGM
|/m*#"
%"TBUU"\
VE%[!#
$jbTJ
9TU(i*
5J'tuD
-ChoM
L#"6#s
mTAu.
!@cK6O
F$}A!d1
|QpQ(
)sc+v(\
B/1G1X
++l`m
N'3;f
pR2!C
8%/Od)AAK
btkU]%
/,SM)
H16Mszz
'C"a,J
OlFfjJLlJ
p0q,1
4vB"T
*9GwX
V9!59
>>}Y<
kSrv|
b''!w
y:LQH)
DbDTj-
jamT2k
g`^&=9
cp;&5H
~8IFxf
%pMUUqq
HFHL(
iC_kL
Z<j`D
mD`vX
WeY6_)
*E/xs={v
("OOOb
PT$/)
)Ne<O
90:3$CY-%H
W^8V
9+i\-
L{;A4Q]
zE<X|
Yhr57
7Z{V
clxPO
`$%\g
}.UU5
z)f*j":E
xU/RJ
8I fJ
z{@DeG
<J9dA
u4ZUOww
Z{}}u(
C oc!
7FqP{
dL4UMk
[9<z!v
Ij s>
uL\F`
ZCk+*`
L1[Xaw
]k=~{)
3&+$'
&'=k<
EaeK
"F8o<
t&Bl@5
)]Jyxx8
ORtQ"V
,UkEL
."~f6
2djjN*
^/[*z
QIV~V
61D3v
*b[@[
{7_b&Ze
qFM s
=c;KX,\7/
LDDUT
gUEEa
c.sb&
\aWx|B
^+ma,z
EUTtIj
dHomAE
yM_f)
tn WF
h%5#Ky
4=~:B-3
aC| ,
0[Dyz
%|EDR
ZK7v^
eh@K)
-tVCU?7
\{*.k
iSIOz>
X*y!0
Q52%V
`JI*U
+'\ywU
Kq""m
s""6rS8K
=shE5
V5e(t
k8n&\Zu
I7-\Yi
WE%b#
+HddY7<
paW*m
d(gEs7
qV_[?
x<\PNP&Y
?XnNh~Ev!t
R(`<@lq6
Dmg18
(!4@L
@%9$Z.b
XJ!1DM
_^^$b<
gnm@A
.E35:
3"8]z<
tHT[Z
3{_&=
IDATd
}76^k
!*,K]Lp
$,pz6
AbC'r
a>?;j
_[tx]
0s)E8
a:@s`
{~j<Mr
X ]"A
%d/t}
_>]Zk
CJtTm
CO0Yn
e9<<h
Hz%jzX
3~xxp
uTOD<
9nrmr
9DRXu
J=a-ub
!ET3Y
UUJil`m
fql!O
j4b4EDw4
|[<S
[kOOO!
|kJDJ
X,Y"f1
4MOOO
TTL,k
LSaf)
3R4w;
phxzzb
]WRDF
'waJA
Be&x"*en
|{K.n
:dHeL
-D:A#
J.]Uc
a@(-T
RH{$d
>XsK=
|!BAoU
%{nln
Gia*'"O#aD
wa5!v
T;``W
y"M\U]
>gB ?#
IAD#PRZ2
inM[Sf*
5yzz2
[@9YK(]
$[$Ox
z]tKe
Ah{Y@|\|
_~2GC6})
lu~?\
kAG_tp
j2Muc){
X{yVm
\*TUJ
@a@/)
XZ<sM
ooh/l
HT>zu
T(ehW*e
rNO>:
h176,"
S%lUD
Hd)%r
ijMDr
QShGe
t:!_r)
IK)(an
xy|[2
kQ|=<<K
\.Q3:
q4KF,
1d8y%ber
zO+MB~
^:#j2_
e*Tm+
HhOXYURU
)+K(h
lw,P9
<,<%XTD
mjq<WU#
koDdB~c
Dx% F
3Sj2`?
h%GyW,
8;J~sva
7u]M&L
Q2&jx0
,&$L\
6i9/1
}ol>By
$bI)9
o@_N
]>?&"
C>)yn~
F0wkM
Av1wR
v;?sC
3#3&e
"4s^2
j:M3"
A75#<
i:?<<
[fHV},
Fbb6b
EGc%B
WYEjd5
w_[7%BRB
^yjCX
,9irtb
@T,P=
KU!)e+
9<CJeB
gD@g&
9R(GD
<F_Um
:6]ED
suC9=
Vb-7 6
];\=!
sVDsD
F<`3u
"?3r3FW
mw0RN
SJG66
!8'S""
tz@pZ
Sl7 c
-@;u`
1gsrAg
Lyin3n
_"@@^Z[
f*"JK
AcK9K"sq
,SJ9KU
bsw\5zh^
,?Z5>BUT
7:3{mT
Y+Yc84!\
zf(13
ea5#56
]>tK9b
'6"a6R+
MkPt#
%Dv,*"p
613OP
sSUMk5
B?F{FLo
$CRP+
F>EDjU
aTB/`/F
zq)j*^
%$<i|
#BC"B#
+*Z}{"B%W
45p q
{+u8$z
AvB-n
,xx7K
RJaab
y-b-W
i-!FXPJ
<?>>F
q\8k3:j
zkx8O3U&l
b^`|&
BV3R66
* @#e!
;pxanm a
YaS.E
%AV^,
`rVxX$
>yUU(y
PCRJ^&
ON'Q-y
R*"H)
t=.Iq
)Y-d6
/^ti/o/
$0j\!:
>:m.t
8c:fv
W''EQ
(GU#U
$doqh
d-'W/f
Epmhz
Rlu&ps,F$
"T{;c
'~fU]
->:O-Yo
\.bnss
NR@_%
3<K.8
jW,$2
k-`)uT
f|}?sK
v3X5mV
33KNe
Evh6z
LWAMP
o\KMzo
2,qm#8
Fm>5)4
g_X!O
H33;s80
<M'`oa&Y
1g3R3b+
QjUE,
Z3"33O
,@?={
0;RP"
g]%u7
h6AD,M
#B1X\l
]89>;
>R:Mb
<,#J1e:
kl#C{M
XL,r*
L""$26
EK1fr
ZljnM
TVMiN
X],g!
"bjjbV
2o0/|
bQZ5h
JJ,"
Ym!Cpn
>[#wD
-*,<p
0~21
Amr]Hl
b"{lU
oQPKm
|rr"A
!PU>2
bE>GA
|>cug
lT2GZ
07U;}6
=T33Q
)KhSI
uh{h9
u<kgmk
RSRuP
tsT7X
csNaiIC
J)777
Zmdn`
/OOJ)
^jpYB
|^bwR
BJdbt
p%33JHX
uLbr,
43k[x
0-; -
UUemQ
xPpx8
a`|'"
e!&!-
5EFYYf*
B4jE7Z}
*aARU
\4XnVGYl
4y8)``
z'ze|u
2].OOk-
{9Q9g
.PelC
iKUDd
~kCc?8
[4SdT.
Wcr5jZ
a-g`l3
(+5O4J' o|
[c]ZV
@Rke&
+~u$;
/_b(-
BI)!&
ru/KG
m2.FW
32]1{
>!Y=D5f
EVR+ff%
6/Es2:n
.~xZ?
mt7`u
r;CUDDU
TUkM9
eYr^z$
d\f-s[v
@a[b'
Tmy4}
O"R&1R.
`<3K-
B1s!9O
UB~G2
=P3%dE.U
sNwWe
A)EorH
Wc*FC
&CoiO
l1~dn
+r`g:
@)T+3
>IU[y
YduoPB
aE+:8
!I-bk
?>mOk
X`e@a
5MZGrPUKw
tB po
f^xQ6
Z4/B>.
k':;tRG
* fT3
CD>_j
#=iU7
{g5&3
zQC?3
Xd9Smt
&sO-3
IHTrc
#J)y/
ADr?`
Db2^8
8}U<50S
\o?L=
E(t~C5DB,]rl
2>cqY
\OK%^
;!$"H
HS\\
A|l,&
M'BPQ
z)-"u
~A:T5/
T,thdQ
n fU5;R
O{FR`Y
q!Ryyt
n{hn]
Nglr,s
m8UPl
i{B[F
bc!Pb
KfE5K
YJ9gU
Jf>jxq
2")"I
#F|oE
&"+fOi
82*Q[
gRMFj
\T1^Ng
7'$aI
La{ssS
=g2[W&
_GJrd
UHY,Q
xOV|e
%331[
cI7"u
F>1ju
s><=y
q|~~V
:\?;P6!a
RYJu-
^'}[4
Us4}8
tf\nC
+ETSZ
4P?%q
hp|M{
X^n78{X
=`o5u
G@'3H
t,p_r
PUN,%
H^6@^ag}p}
9#Vt)
\NMi\
GzQ\o
Z.X^ @
;r<9'
.,b~n
b<l&T
Km@&{P
YUGJY
i`l_b
GLDEQ
Dri@2HA
^ Fhn
35WQ1
0x6t7)
:oZ|/
{E\\PDM
.pWU5
#VlSX
O1J,:
XrX'4
4mDNs
f<y,,
h(|l&
2L-LLTu
0YJq_
LWDl<9
{EgxT
lZVa)
8-y1)Va
~2t-C
kSarmZ
-@eu2
]zy|<
ZU+)s
D(%VMHu
rqK^.
Xf"S#
4]_=pJ
}Yj w
L"JlB&L
LB\hW
2O"TYb
9,E66
f~HD,g
0j07BCk
6?=qJ9
{%"<XM~~
>O``)
%!R##C
m%dw>
gz3rP
Qq/u3ULW
96Mc)Y
k]]]Z
GYIU81+
+EdPp[`
)d?Q(
2TjG d
7{Eax
EJeVU
7N*9A
2!7re
\#Y("V6
<tPz_D
Y)_i}
Y[s]'3
jJ"ZJ9
P{CQa
G>J8R
6NidgFL\
]9?x'
gf6}r
RNft>8
<!Cb:
(O=oT
s0c4MS
\kE]X
nnnPo
Lg]Ji:
KCD`K]k
V=jf,
,eyHJ
ky't)&
wUUUC
oeTB=
^Q1YG
~q<V)
:@_RJ
?3S32
R:qN')
WeoVD
6Pj3LWW
Fvh!S
!u).j
@mldG
Qs$1x
/Vs,GDR
b_!d#
Epp-O:
uY9mo
TDUT%
t$:s^H
Wh}0S
5"B)&
520R_
cyRh.K6
F+$cT
X)?bK
/hZk=
5tSRLX)0
iBeU=
OskM*8L
,pX^#
LK#J3E
, (OF
Lee+y
<!Ua4
los4M.
q6(r41
'x0S/
e[pIw
$z[>(
l[Brb6"
7!=iF
D4MS"
W[<Sm+
7(`%N
"QhxaP
V352f
}^>R_
|FMk%
9Gdbi
6DtDL
hX>Qh
zc9~~
>>>J[
?rDkW$
a4>."
oh|hU
/GDRZ
d29<<
)Kx'/4
w'}%N`RDD
|a423g
w]tnpS;
q.<V-D
ZG,[R<0>
y- ,U
#t{D6
d.a/s:
X37[l
T?{:_ 4X
455U5UZW5
'p[.i
7QYZNj
m!lOK5cNUHu2
\<O!\
Z{?Ed
3q[MI
}_&j[
=Tr$i
D=91i7n
2^ d(
n_=rl
8fDBF
}FDDCP
}?:U$K
'6SJU
8^96=
!iQe
$('!VUe
Pu-G+
lb~[J
XUUzhs
!hWMP<|
L%"4I
X.**)"
pN-yp
^N/Z0!
u""6*
#a8sZ
7ulLsF
Ezv6,
"-k80
$mY.{
D-x}*o
1;NykC
3le."Y
x)%XWu
e/vK{
LYr+.
Gx91`Z
F`6PU
bBL0;
y?=!w
$IU{I
g61eM#S
lw-<Oj~u
C+<2ffE2
0-l ^
Lf3v0
D9"Z:
t:M"r8d
@DN^u
2/_d{kU>
?au=i
j.Icv8
lIhif
`)/4,
IjrkD5w_pL"
"#5"t%
GUm1J
H2?MS
T`HN_
`^]wd
"<\CIl,
{t'3{
h3^uy
MMwR.
"&ELEM%i
duEK)
gU=FB
+"OOO
b}Y61
hT2Fk
rm^|C7
=]kvj
n6U1r
<N}{Q
;)CL9
w&~O6Z
L-9R7
PiX(4
oMW3p0
\_}""VWk
CL$t;bU
I)Os`
taff_18y
N"-"l
"R/"sR
w? U5
#bk+M
`{>k<
(RQ1o
H6,"G
#iR R
|wvcs
&&BkX
A#c-"
d%ds
8iH"-C
Hbkuw
`Dl93UF
vfR)23
5r>;y
9ziV:X
om3z
=<$EF]s
D$$b\
H"g"2
RCJ$dF
qBa{i'%b
n{{>gy
,_o3%
e}_^^
|+Z[s
dfefb
y4[R3"Om
HU-w5
|>^e7 Z
3zY?;*
\#'[;
eIcWH
@n!$B
[""6M
3KRAb
'S4C3sJ
E|~bJ
UJ9g1)
gu.]'
;^;T]
QSp+H
JQ3Ni
4r",=
2c!Ei
\.nzp
%{lpy
Pb6"f
Lj-Vu-a
)w(4t
vr5(!
R2`c)9
}DkEt.
ZU3qt
e^8lmFz
zoZx(
v*<gh
<>o=]
aFS#bmI
c&C 1"+
zom-U
SJyzz
PaUU1D
0jcJJ
x ".R
btM{K
ik7i)5
.=D\f
MZ`jO2@
*kJJi
VLM
!..@qw
ijfnV
RyaMv
JEk^I
K)q*E
qkB<Alv
mv(%@
Z~2RV
pQl<n
a+9F_D
hX{%=E
!hY/X
x<z1]3
jZw*l
x?&"^L
SJu^|
;ADj-
iVJN^e
@]T^I
Q"2!1
z9<iH
e$7 '
J)-:
"_5Q+3
C,DJ,
2kba[8
aa`0 "
Z___3
t*.%)
#P>Od
nDv0E
Q(sCZ
BG M@
p8`.42
ca#U%V
2*CIz
Wii"X
>*OGd!J
F_`V@
ok-KE
9q3l#
/Xhyu
{ZoB6.
^$xVa
;oG."
X/t[Y8
mfjC+
kfJH?
M!^!6
.g%dt2
2}A\0
DH(xW
</PUM
UZv;m
v,e4".
-2l!R:pn
+!J{W
7S4af
X,y%w
%hdz63
bP_69
"b-Hpxvs
{`g7i
/ll#(
6O"*t
ppDog
bV4wo
3 ub"
i=g=|
hUXNn
8O%m>
c^BNJ
-q&;c_
=nh0[=K$
TrHbu
W*Df+
wz=my
D@"ek
O[(81}@
A),7,c
4b]Z'
@.S)S7
=4Mc}rx
+SJTW
'uD&P
&UdjR
l\^K2
di yVo&
9"_sd
eG%qJ
D R&c
XFw"*
h`TOF
"'&aP
f^RJE
2XS2E-sr
.K{NY
(rGkh
3NDDjZ$
P$^ki
?/!a,
dGKZ*
V*EKqj
GX>Bq
\X`Q*
6F^hY
PKXwj
EEMbb
[+|E^
lQ2S)K
ASlR<U
x>aE$
"dEawf
u!x;-
_WIkDY
XGs-`i
3cB&z
k_Q~^
"REwX
0N&@#
|X#g8
^$!wX
hz[~v
mjkAd
`Z<Yo
5:=wnF
mHi*L
lE]D]
Q^w*w0
*vQ[[K2
-H+LJ{~d
IDATD
p;?la
Ek^E#
~NKQF
>)`I*
TKuc-
ez^pN
q|||4
:cRZ+
FnjW)qJ
*(?(H.
0z=*8
ct9'35K!T"
&3 kT
~0N'x#}
D<.BC
+|xMw
wjShJ
y'Ra&
\^~q>o
.R<pKq t
3~Nap
^,*1!
F0e?d
K8^$9
)"OOO
u%rE33
f4kaf&!6S6*L
gKk)l;kx
"RT[&
L22AG
onnXs
lPG:qR
hq=$k
'_<7x
<V2H2
]OlI!
t:Msq
8VB(O
f.c`xv
%fb+X7
66h^S?
/a`1wv
$BlB)
r[+oj
\Ai0Ni
h5UY4
%2r[[
IDFH'
UKb7[
/lf*FLL"l,
4M.ns
2,*"UUY
p(yz<
wXuD}
t!bon
dzF!l$
W`&,*
O@(fu
nnnTu
/=kb4
{H>=O
%K^w-
C **.
L{8 :
$B ,E
# &4Ap
lV,&X
ci>Im
s<HizDc9
r|E+:AT
PT,hv
NM|R|
t@AUC
-S^V0
"5X%#:q
z&Se4e
_iQ5D
\lbQU
"=nAh
!b$(D
D%oC.
iNa!X
7vv'O?B<;.
>B?1$
~S_ogh
[_RgE
iTWe0
JD* 5k
RCl:;
K[&w=)
uu]k)
kf1v/
/0#"J7
(l6,`
V$2B!
;a^yib/BZ
j\ESJm
O+N>X
a'1),iR
X<JXE
)oXHV
,9g#M
H`N50
X8UZ{
jg5GJ
@K7y-
%M#C-
^s}Mg_$
Z{^&6
X@,}<
MJ7A8
MsfpH
v5ZVR
-pb33k[
+ED!3li
qL)=<<
*/)X.
G'm>1
<5oID
?!Rb!
tnQ:K$
@{Z&"bzZ
*21WS
vNE(F
S3p/4FUO
D"YXZ
_"tE$#
E R="Ez
iY2SHA1cci
fWv}h
<~xxp
?l8?K
(0S y
Kcfge
GDmL{An
J)3P:@2
`}aBo
+e&!rw;(g
_pZ;Y
x(FTM
'3Cl=
afl\J
<&JG\"u
@;0ep
TcRUcb%%
TC[cF
c>I<c
!7vo5RScf
F<wLn
ir;&a
byoMT
)!nR#r
`tj"}
v{ai^
hQEUU
VV4\9
v2""[X
te2>#'?+
f3]5z
+Ovg_
5afa2Rc&
z|!BZa
%WU=r
+2Xh|.
z$X!v
]Z$SUU
.:p4W?m
H.R-J
}^rY!
COyul
1t&0\
+~A?h
.3R"u<Yp%
Ef&-S
U5tW{
5 $"WH
n"Ro2S
$Q0%x0
6]."2
2j]y>
1""62
4"aO71
R|_~[
f(#AYJ
AUES*
@X"lz
XO~Og
i@J#y6
WiWA"
DTcjR
Bf"I$
t1%%cf
u}uk~^
s/@Go
v\`^=
i[kwwwa/
d]538
L\'!.f,z%"
ffJ>FQ
z_^^8
c`)t23
so#L+9
8h=3GO
3NFOFJg
5R2;=
R9gQ=
sF*`o
8ZHUk
q?y~~vS
"VEe%
%m0<yg
<kS2b
KruV@
bf.Mrj
'?S"=o
+&.E/
eUUk&
s~xxp
s#O:Z
6xbkV
|REMSLn)
\yF$
OOOqh&X
xUM/6
}U.nXX
?L8vch
=l0]-?
Xu!Z]3
,Rjb6u-,e)
_c"f+&
L4:[OQ2
D}fxW
&"IEL
yH~;R
33Jm.
WROqlb
50lt7
`<bSi
HF+[k
N")1*O
*"QC
u]7F&>
31KQh*i
E:[3s
1N^k@
;Z1Ir
qw[gN
[!xXU=G7bR
.TyZ(Z
@Gm4E
#LU"<
P)$B<
._P($
`0KiS
wmMju
]3d45
[[*\/$
eUV2}2Z
hO.7i
Rr><=
cJK`^k
`D/SS
o~R3RC
rqw^Z
w2L|{
'>E^^
SXGZfO
DdYiT
N+F&,
fsk8L
sPCYE
Zse;A
nXKs|)
).y%f
8gaZ>
v8/wz
Y -Dd
sU0M;]
27rKG[
Q3#R"
t9?K}
n*jVL
z8~;F
SA&'h
Z@1~j
T,t3Y
-5)ef
-}37V
5X9DD
y.iwUgBLf<^_
9^N>%
GA\iX
]4fg8"
nN)%UQ
La8hJw
-csQ<X
:BPb&
G3;??
beF)F
(,KFI,
o,[1>
W)##"
Rrix-
?YLT]W
^f~}}
e!Fnm
91Q"a
i.DB$T
iH*&K`/
*5rp`
@s\%-
AGF:94
Yd%wJ
zZrD^
V}0F)*
\dPvn-
;F~@A
fyzz*
RRtPU2#
@K'E
1>??[
%)~Db
Q 5">A
r1LMH
QFO0<$
zD~H9#
xSm^C
amka&
!I#3'
VKD_)
13h-(
u8PDTy
//'<.
jR}Uk
:Zq:-
1kqnya
I9BBM
+#~~6
j%W 2t
tv8sE}
e.4G3V%|J
\GbHC
[|8R`r
#)4sN
DU}nP
+&TLX"*
>";9T:
~4VD,
N;xlFP
~Z[Fp
*9H#0
~n "+&)e
/"9;4Q
Fp,!<
WVwyE
jJI8n(Y
2s]Um\
>%\SD
`E$J|
\xne^
1`s~D
Zln"R
{~~~zzj
||]z;?
(DPVCt
wLlYM
D4H6~-t
4\GDV
1Fw({
boEIT
V<`-!M
|T/"W;5
R%vH?/
Z0v?u
tXUu|
&-r*5
bdLfL
tE-;[
E/Wy~_
?V~#-
__sX65\
lXik:
|N)!X
Hw<:~
3f"@b
03a[5o
@[\La
{VZFgc
"]JD,
?q+[[T
:LZmE
()[j-
3WW^m
-hK'D
Iy5"5%c{
)"52^
`X8^%
x8-Fy}
N`9la
PN`#_
tN1meP
*k4[`
(Ue3t
-5v1X
E8'!@
xJP}
*rWw/
pUuDT
9tUh}_
-oUeB
+owwv
9tZJi}
b73-k
F7m,(
Z`n,zH?
,`1B'
fl3I"R
uqQL"
v~}YWU
]DB!-
/?%+._
%":nT
a"jM4
2+r8|
1S9~p
Ixltk
x}c*en
qgW!`
QL0MSJ9g
"$j|
In)!x
Ae5}|
AEnQ[l
urC's
a"NI,
!o)$l
6R";S
<b}$Yx
l-+R#
NN2%q
S"bA.yWE^
hJI)H
3q>@U
@:\6tF
V"21fd
VbF=J
##Pqj
nD946Huc
|(*:!
\L%3$
23djE
i1r3,
pCDJ K
i2=<};QD
mzJvM
h)AYx
c]PtT
&^U<l
@&~xx
"^VZS
I!Pp\`
^q:0(
kUJ]
aYx"V
,LR+"21
.J5#nrV
/YhhB
=Bl1G'
%v2r`
cv|[!
93g3>Os
>mIUS'JR
s@]sb
>/<C^
TFnRsf9
ppAL$
Cx~!6
g<zn=
~U5m
Q0Iyc
bHE8#
<sXO734
xHF!J)
lW r1
iLAD1m
Q<7"~
inEJ)
IO;0Q-
MEx_`
1:lO(s)\k-u2h
I}]Q5
j+{_9
e][@\
QBlV>
aBfv'f
S-rxC
^m)9-
A)VUQ
C)"~|H
HYurg_K]
JNVHD
zO~8{*ID
hif)~<
yV=}8
YPFV"U
C8}}X;
Q$6/l
*<*Z<
6fi~E
Hd(sH
&>S$4E$s
T5TL-
?B]Pi
Gg3et
g1;=<
0X`Qn
Y}cAJ
Gqk9w%
msARP
lMC1U
vow/7
S",B-
MRK*\
nFJ$"
4MOOOV
;{YMI
iW(QKnb
FetP`
Pa45cW
bIWUSZ
22i1+e
Xd%l>
8FPC t
"e.DJ
VCDR`xADh
(PtP#3
b;SJR
uyut=
Y.S_Z
a3P"K-RK
1}&G
."6l(
z*3r25
cec[?G(
&6u]r
xp9@j
@gsPr
^ba{{
?PI`f
)%J)Q
VUOd*
UHu~~
sDI}f
2UDj-
rb)S%e6
qLM)E
U_nR,
t+??S
mnl;8h
V*RJ|Ep
I,"Y2
7Xop]W-
{=m6$
tHYU/
DVuO]-L
0Aj+f
O}Z`w
eYJlc
T_|7}4
rhb]lm
N'4wXWU
}||$'
|c^fv
T..E(j
y0!B3
K(CDB
1R!(Qv
C>ZhQ
7io%G
&&U*3
0S)JD
eY</1
K)E[g
i ?c8
xe9[Z
RQGF+>_
cb62b
uvaW`
[*kJCbv`H
yVMx"FQ
V>|xw_
S&3"a
fLBU{gJ)
tMu4vu
lUD4).
#E0Gd
0y)hU
U\hfH
x<>??GDV-5
\8j+3W
%QJ9<
C@ )^
jAG)eZ
!_Jx,
-J):7
'vJ|f
`fF#6
bZgf66
=cl9g
|Kn~x{;
JJB,av
;j{!I
}%3cZ
hU+E"v
)1"K[
d?MvQ
$F$?(40
9TE,"
np7Ewdb
WMKB>Q
0sR1*
<x"fQS
r^SU3[
d2DD bU
xG#`l
HP!m7B^
EY>|l
Lf\J~
{?,Zg"
Xdu63
.SbjA
a2fbS
:4m6;
BohGt
^Aq1'
QDRJm
+:k8.3/
%WZ\1
;wZuD
>>?KX\m[F
,',ZKy
B,3<)=
js8`q>
P*%$*
6knxq
b.TC1
9wK)7
(@:k:
zT>?<
_+ZCd
}SJ,ffu
T2)BD
yVb*\
opumPg
s\kH$
\2s.Lg
(BQT0
#8+>/
%<,PE
qkBJj)=
INDzkP
HiP)%=
6489
,0N$l
*VnTc\
RlM`Q`
F[V&]
mJ^/^
;^bfBU
AN{EQ
tlH&s
Dx73x@J
?=Dyn
L6[o`o
eICS-
.YFZH
k82sFiy
2|Fjg
XO[kS
^1}rJq2
+%w8L
~jHw]k
K5-d^
d"1@H
v[6#v
,ETab
/J>l,
1fT'$
`<j L
|}[>~4
)6[`B
mFY\_
a^|!*)]q
jMLLdiZ
/G#|w
+V\T1
]N'M\
`5LA~
00`&"
o;d/?
CL2n[
}bEo$J }
e|lngI_
p'u.8
,<P:/
0V"ic
G{rt\
rM `p05Q
"2X($QUO
BeTwTJap
lot&n
,KJCN
/a{j5
)d^0@
RbQ@e`
4y|P;
g3r$6v
dUVeUfV
Zn~ZS
2Pcooo
0j5Ju
iMOVhm
_odFZ
cKy5*
(__/\::
?M3 1o
-fof`
eR!(f
Z+jcc
x\jZC
bL""#ca
\UE]U
}#b]NjD
G@TD|s
v+f&-3#
"ImuE
}$a~?r
gTD[D
*l3,cu49
fPkM9#R4
o\^yt
~yy9~
Ed*S^
\_>3q
m78>\
rGb]s
8m\.R(,
F$=oj
f-^B!
MD=:A5]
^yKtx:
N(csR
<?==yt
89(@X
q@\"o
nb To
=+:+11x
><<4M
GdZC|
0$NeEF
p AGvv
Jqz .
'qC<>?
JI&pjB
e7"\x
IT"k(
AZkml>
f,`@k
>}z{{
usDp=
6#kkB}
D `D4
)NIM
0iaE6
*C.#[VN
RJg;X$
usm_b|
-B%,z
\ef)u
^fp<R
OVJ+1
u|"r4
L\8IJ)
[k///
*5nVk
g$i4F2JI
O8py\F`
.L[oM
=#8=n
f9gJ4
oh}Sfx
[,uM1
4`;\b
eYU{k
jMF\i
n!c+W
xJ>{1Z
\-Boo
jpWJZj
if6>2
M~<T6
^$Hlj
TUTBX
# 4L@
R(x4;
q4{}$
Hv_uB,*k
6z+}/;
[sqfZ
@On6*
(TQUO
\>7#z
nfidJ
YB4s{/f.
53'(e
9ypmm
=ch8F
v4YR6
'\)RD
+sk2;
WG Tg/
PW8SD
PBo62
J74<B
FgUmMU
CK)OOO///
(?a6cr
:,JDf
ll/0S
TUU"d
t?*!g
P`u3o7WA>m
i'w|-7
[eS.U
1%2ri"f"&
m|^6K
P7P"ma
F'32E
%@aSn
3SCDJ
t>;i/
=~ M(W
q!T$#&
'L7R)
@a&vw
dabRR
VWuhuD
*V/{N+
p5kj<4)y
&j:\Q
C'ZVN
leFn`
[\9"F
H8lzfKR
#;9mM
ZUSiK
2p<9hf
3{:\ R
h{hV+
8G}QP
r#(77
gsV[c
W3sHxc
9EZ`E
Dvv"ED
lH#/:d
I,yfbi?
H-%r?
`_^73
,{S>5
y,pm/^x1
m}RX: Zk
E::2q<;x
<CD)e
"Anca4`
|:UUv
4e(S~f
E|]W@
%qDd<-
3g*JjT
gjiAD
w"SO`
$=b*W1
vUU1F
)PXfVi|
6Ot[J
8Q`+L
nA},A
t}lal
@ZkZd]}
?Lt%V
G46Fc
P2`cfK\
PUUf:
/00ch
LxCMD6
$===)
.\mSP
blEX$,
laKyJ
Fg]fr)
-dW7u
`WB>/!c
YQ=9h
dT<Q_\5
$odECU
jrcN
z_yizZ\
Ef DD
wwwwtt
EdQU!
TUbzzz
z#nV]
"Lj1|
O}ezM
J{N2?"
k;('W
T'"a6
}Rn^WU#S
@,1Sry
X"c|:g
!4wg{C[o
b!&6S
?KhIQ
<#b67h
sTzj!,
'WSl]
{Fxd_
q>?1+
65imT]2G.
B@ee3
!-NX/.:V7|
Bf%OQ
.K}W:
B[th^R
|X(r|
jkx[d
o/%%I
I1UPg9
29<@2
mck_%?
Y)N8_^
0d<U"
dvQzp
6P.~*
q?d)S
M3\K!6|7
19%L{
4mUW-
!$.^jQ
T+/[@
+*VHs
Uk%J}
[OMwn
Sibf]
#E*AA
\;PRk-
PcH2Qv
o9/)pS
&@#4|
71t'"
%-x@eo{
Uu:_$+
zZS,V
BDVVvv
SWU?}
/ZWJ!
`L%L.g
^Cf0q
U?^J
Ud*ZP
47IUUM6Fm
rgO|^
7Ep-$
I}J@56)~m
bf'J,p
OC1SH
S)qD}
r}k^K
/X[)7*N-\}.R
@WY"P
y%!Eg
FZ0&N
KEUU;
T@p|?
Qrt0Z
e1y7]
}J<\3
9{ldw-4
^me>e
W}_1+S
1YOL/D
~Iup;
bfUgUE
?{}uV
vz~nw;
g^&eF
NUM)M
/]||y
gf|++
4U3)e
mk<|@
#ZSec
6k\jt@
Me1;F
t:a1*
\zXDE/
z~uu<
JUIU,
u7"h+wgE
(*b&*
ly9P:R
wWaE{8
$2<kj
yh{IDu
<TuFLc
}U<i0
BSEl1
L$$D$d
[{Nw
n1Ryv
!HBx'p2T]
?,,RN
E7B"Qz
K )kN
yhqg/
&ir||D\;W
m&L 1@\
afwwwNxj<(29+
Rff8:
V%K5L
B$b,\L
RJ)ue
Teh+Bc!
1:Abh
EdK`RU
.]W2Kh
IDAT!
=Tdfv
l'b1sn
lwWW$
?zb X6
GmW XD
7|Evj
j,XC%
uu*QQ
!dg[2x
nh&"^
mll@Y
Jmp5%
1+s%"V
r &Jx0
c[_0n
EI6g0
HMj!=
\. :#
/%I?RK)R
0y;Bl
gh0~:
?j)Xw
30'%N
"/qet
AfaIw2
^6@KB
,jXr$
Gn3#@[
;kHrl
qWB|~90)==
E+&*By
,ff*e
0Q|04
1[\({
;PT{x
I*>RD2
!'X"{0-
@afNy
rI6Yy"
,xWs>
C"Bf`+
OzEF,
KjYnU
,p^;Z
("mY@t:
w}?w7N
gEF`!
H?{.e2
&(t'G
03+kl=,0
Q;3+S
+/;*ck
5/UR~Z
2aU i
]f?8.
zXcQQc
)tDdh
dlw v
ZkgJ!
;AK]R
YaF%`1
nr"6)
DDTJ.sfDq
C===MUz
/Gr0Np
{l&(I
kyzzR
8"2R#-
M1OXD
>6j5*O %k
3-PhT
7Bogj6
hW&vF
XUUjz
7kn0w
(BWbA
TcPCZb
xa S]3
]G4v62
0IS)P
7_[T[
YUUp|9
z5F 3
N )'6
lXyb'Q
^ifR@S
<Oww9
/%:^o3N^
b[cb;=
qz`{-
ZJ!*0
Zk//+
h[7&j?
wK?|'
@WHCk
1+A~p
fDd,>
lq0_q
\G677
c!4q4
jVfge
]uTy:
V'C[J
"b4w1R
b;_hZ3
-_y ?
=B8f"
z`Q:q
{|3O1~aT
b001K
(0zz;
v}YM=(7
!`Pe{
\Z|Ek
^k-eT
L>AOl
/^*_x
u/>G0
_uviFe
Mld<*}
3##&fc
q@d6f4:
~pn7>
Zwk<@,
.u_U%O
.O-A/
(ClPd
>wyub
m@sNqCw
T>yAc
Krg03
R&fK3w-
44^3w/
5jI~c
d~MOW
DY{(XT7gw
3N!uS
nXU)6
xuq=a
CK1@@
iOJGEz
____YY
He,"CD
-woq?
=u$|/6
n@f;S
r5puJe
:$>CJ)
h"qkp
~*"f9[
Y-A43
`H1.2[Br
o/u,"
OOO|]c
EB5DRt
_1\EEz
+XO1"7
-GAE4
=1+24
Jc*!i
Eff ^~
~wwGf
D$hcb
~mk'k
~] Uwg5#
bTUUSJ
Szgp#mD
NOO)p
|)?g)E
/pSCm
=<<x@
UGlvt9
>SsQUsY@_
]8HlFj
hB%Kq
`Bzr7
C<slPnu
Usui!
9O*]z
=D6Gj
Z&-{/
4I`6
@$z2^h
.Oc9_l
^Xg_\
;$P!RQ
&QUiXi
j]obq
mONNT)
q.$Rx.<{G
i|f-_
!@vd3
Ma[a(
%/?|S
LeI,|
&ZAXV
aGFV]c
EEiGw
C)K6l
#)=#6A
se)1:
2{_DZ>(
=S""k
HX3eVk#
|>?>>
Hz4]W
78\`D
oP`fr
h:y{9'
IDATp
F?W;]
+40!*
NT9j_e
@eDd>
Y7eE_Vp
=gH5E
j0U[z
F!j6/P
K5#lL6l
_JQ_9
7D*"u]k.e;`c
<<O{4p
N%t33+
dQ5UQ
C~ea6
@F7)J
4B( hP
?93;F
LSQ]Y
Yk1ScA
_k>?d
'~Z0F
eKOUU
r/(a~
K,Iwsgr
bOF[#X
v5@8(T
q'~"S
ZeXQ#
)>.];
-fz<2
&af)%
j!3OS'_
}9uX
Q}l( <
wcac^Z
|Q["6e
p<B-h
&b>Ep
Da1FwJ
4SVg_
!_w)3
4LaV+
uh)~z
Q~{^N
K|Ku]7
TlJim
l6%j0
B`fy-=
t*Ms8
q4+"Rj
\`zAz
xxZV&
4MYSm
Iq@*Lt
Zn7QQ
a(Q6O
zh X4P
,"QJM)K
]J9aT%
>vQ@a
@J)e&
KUU|i
bt:mc
b#]nL
SNyG>
odRD(
LZ)"p
(OvSd
= UkO
FmN`0
x]<K2a
}#oo0
`Um`4|
"efn<
.?[em
}'7GSL
5oi'
IYs6S
Kn?E_}
X#x7lxSE
dTKD^
_%@GyO
jmo|_
n,W%D[4
QCC[!p4
D_U!+
DDxtw
)kE=:
#l)h_
c>oPh
D|_J)
~"R3Y(P
8}o@Ua%
,:]ucT
P|K(8
mM)!q
q6!wx
<8ph-
pefN#{
Ja3Qi
ccw:@h"
xrc)H
fgfDx
{DDw15Q1
`5TD v
Z3]M5XD
mRb)!
BEB\"
r@yry
5-QwP
ha|4)
!v(Y|
o*`[E
_DWZ"
H0Yw]
TTK1fN
ZHcD`
x<b\
<X"/2Q
o7;4rV
"Hjp[D
?`\VU
aRwDjL
2]p*%
K4fQ%b
s=/Ds*q
cc%zK
kE+:&
Y"zxxh
)/bC$
kakRj
vclolb
Jeg(p
wr$d/
VfVrF
](dh~hf
5R}zF
YgB-#
Hn[vr
&r1o|
b"c^%
e0;FK
EqeMe
N3,jH
k9c>7_YP
F9XWU
nu8k}
~'+9z
Zjr<3'
QM1`/
*QyH/
3_k=l
E9@nYe
qP91;
7#^VA
c}R!_
+pMf:
X<043+
)mX)8
DZl,=
]JYC6S
)C/sx
l? $m
_tG^JV
S`IK)
UQ#:G
tL%"b
%h+Fe
_DfYC
(h;}=
Hjh,'
9{.[?
(l'PZ
d>",^V8)
6>yh2
{rWG=p
1of64
9:Dug
+-]la
;l!fo
M}4+S
veT1`6OT{o=u|
%`:[s
UO}v?<<Do
HD|J?3A
`z\YJ
V+EFC
,avmc<
n)4Z+
i*9w}
ZMSDuE
hrJI;I)
kowA2p
bbntb
V@W@O
s:~2e
BZHR-
OQ@8Q
/bumz
bM?Lnc
%~Ayy
N=v`Ri
zB_3"
3^(S1;
D:r.D
lfOOO
U55gN
X`p53Y.
3eFkPRJ`bVb!
)0LADd
43faJ
DDd}]
!URn^;Uk-
RXd8j
$S/CkH<
>$0+B{
`'sd/
O=%"7
#wQ(&r
DDlXt
NO'g(
S@9.R
g?!GEg
1UG|W
yuu%"]
])%jm
emLyk^
nlC_v-
1]U@s
2w2w<%
SJTi"*e
>;(HQB
,[6WT
|jun<9
63Y4}P
u03rvzF
r?'a2
S58i!
06#Rcf
m\7p$
cq=LX
`8u *C
;73'g
pX`$x#
klDbL
"Kr(EE!A4
iJiHm
'22++~
{vGaWq
{[HH8
;L%;v
{7e3SS
@*(yG
L"jDD
*-5Fk
P'S9K^6
6A|~^
k[<>Y
a%8CT
k|/Z\u
KAz^3+e
F%klk
qXS"kaHk
]'BLF
Le;54SC_
_bGHJ
m^9gJ
=|.<e
T@zlUffN
1`wCf
-OB#u
t$$&&
RuV+F
+]`Pp
7Br}0
qdfGb
ZkDv2
b@b+Z<
<\kET
D*mj&oa
IU_^^D
IXltj
vz_z7;
2I)y$
?m*}8?
QC%kQ
3@O=Lb1
-UL"+
v.mngH
7sx;}
\SQXX-
C[m(W
-vJKVvV
@&r$F
)7V:N
lNi9&
E,rV'
eAO)UJ
471tM
v+~PC
dE2<a
@22ik
7R3Gk
;;|:
AtM/B
mn]KL
ld7[g
mx?INV
#U*"~
4EL|Ji<
Z& }O
{>EFJ
y9=F5KT3
"bjSG
)X+jeU
n-G6|
h:i9z
]sz_V
L&vFP
T+iQ @
ox]3(
]hVe^m
[]hbq
)LY&p
:k,xpC
/J)\-v
{SH_zf
wL\)E
*IW.T
A1.87fE
WmH/$
sWctN
8BPk-=N
iVI<t
rXm$%
RuPd}
Vko~S
HUU"v<
."*ku^wW
10gp\
:."h2
y[[SF
8_/&jy[
ir1k6 H
+5:ic/~L=|
1+; _
V[zZ[
&Zd&B}
5OOO///9
4Y}\o
4O^3a
H,{6T
G.?2=1
\o"b9
:tH$*o
Z*+lT
`6#bh
Qcx9%:r
iUUuU
'kXQ)P
5%`*^[7
!"OOO`
L2N)e
D"%MPO
!V|:l
K#bW#
r#vBy
l1xfQ
j6(S5U
tB9#%
"Eo3j
Wy[K)
|#}"{
R*IB!
[)I@<
fVK!-
e>}"{{{>
36#2V
yh\2c"
mt{-9l
#e_^v
H5?CI
Eq/p/
{c9K8a?
y&z1OkyH-
fUu @]H
g%?W%
@SV|
[/xo}
cb3fU!"S2n
/0wk|
3[J~Y
5(vww
~@IEE
NjJL,pJ0f
?vx%<
^)`( o
z(mek
_I;'$e?&S
(gVcd)
5c(t/
wlu'{
oE[<_
8<dHV
l4}DU
v_>s*W
6l .T
|e{%}~w{
7xp<`u
TWeeFFDf
YpP\[Jp
'JTIgE
\.;rA7
T7)0[
@\y4R"
pGSm">
O(/V(,
s^r+zgE$2_
6cFGK
fV( 3
hbFp9
/3?>>
_K)"|<
FJO'D
xW6t,
y~xx@
X$X{#
/]Jj"&%
M{"XDd
WBjqrJU
U'S#?
g d6!
.U5"%J`
|c1!R9
)g9+u
ddN(w\
lf1d$0
62bh(
pm{XZ@
Kt1b:4
n`d0dsX
N'7Qc
ZJi}'
_K"jW
XalPQ
y(lVo
rPCy-"A
Qh,4U
[TX?SU
!;K5boB
6MN$;
:L)yZ#
o7e#c*
({0aK
p3Zxoj
@A#Op
*y[,U
RkEach
`s|`E
)Nh'e
X>F1|<
([L<G
Mlq#[_
Eooii
Dk|i|
Z}D6jT
j#{9w
?XMOg
]2)&s
NUB=1
rNC(0
z,lFdH
}024\
v6Z#B
(pM']}A
d6;bM1
K~wU%fa
)Q5S"
+nGii
AwJQ9s
cN_NO
s&R361V61fQ"")
C2}1Y
.W9go
KkmY.
#J8t!
Vpk7*
Q^Tt}
x-P(U
:PG^;
I`R0[\j
LWE1k7
e9BM)Do
]RyeM
v4_|/
&3fe3#1
34EHn
7 CEz!ri
P$((M*
Faf}Z
ZkQ58
F1`U]
'!8z~
||'&3iw-"7V
]/I4k
6!EFhhq
fZf3;
aG#`L
|>7g~/N
*BG" ]
_EDSmx
M+5,Q\
<>>zth
IDATx
Z2wOo
T`)S>H
Jp5w(
\.![1{w
=`X/R
o,:UE
dA)!g2S
L03P7
ov<3+
H@F y`TUM
dol`K
@Rf|I
bg*gG
gq?<?
*|O66
z)%gc
5@l*3`
xFw>#
#F9gGj
vnkQ]
E#chJ
OUES"
AiR"R
)S"!2#a
48T#j}
AZgCi
.^r9C
U#f>s
8<NgQ
#bC:M_
Mopss
'G2^4;*RU
VM[hg
a?yP'
DDV=n
pO1mfQ6
\;WO)
K~>z}
%,?[i3
$"}0
CUWf>
f7lp?$,
^|o)I
p8<==
{mo`i
KV#us
!8Sz(
~-o `
TEEL<
5VhIR
l`j._U
'\{OU
kv{W5
kg*D ^)
x<F"XFSb
5IR?F
k/b(5
BTYn56
mZ$l~ T
t,$@ZS
rxzB|
%F;d#
RJwww
3vTTM
2~_O2
6.d;q
dM4+"
ReR{\a
8c<ak
<Tz.L
5P>)-]
:O"|vV
kSZBh$8
uI8GDX
J)LVT
|)\#=
GnPFn
g1w 96
J1)}X
A>nh/
-YUTm
T@J<pR
Z#t`w5
pS5.T
R**PkE)O
Y/'r|
Pb"fR
5nc8]
EP(g8"
p(73+
t|xXA>
+yw 3!
)e*F4
EU-LD
edaM>
Dk<b0
Yb@b`
$J)f3
q`u34CO.2
^i{+i
b,xP<
hCb$'f
88d`f^
L<9ID<
gt_(X
K\[lOh
'oTU-ee
Z@cSi
\(+u=
ZKD_2b
+n`{
js@T|
RJOOO
'f|c3L
f>Mb:h
-"s=,
?)~A
hM>w7
9m1u\
r_THs
eY"bQ
LE,?,
z4]k=b
PJQ[#
"@_no
Itn&/m#
wCF(-
O6X/'
Z+{Gd8
>^Q.vt
l3!]9
`]YUf$8^
sHJy)
kfPpR
>X0Q(
vtS{Z\
g3+Q8<
RSJef
lAg$<
cf'pG]
`gNUU
~+[M~8
4xQvtu
*Q%XE
}dTDb\
"Uk]DU
J\#x{
\;nt#i
S)k7/G9
GXd)%j
q~J<(7
?ErUS
5H00b
o|QajVg
ZK)y^
e"R.S)
7bx|1
9")1:
(j3w!
}Rc{r
4AD],
Ew(!O
o\@S8!E
rJIGupG
[g(KF3V
g?]~~
C@}|0"S
bv$X"z>
'4tsLgt@
RLg+sw
R6;dG
gsg-H
-5oJp>
UfV{6
U5Rgs
kPkMT
rxOih
cF5+P
4q7_aa%
%?s/?W
./2@."rQ
]1:>??
Vk]mz;j
[dfVU
}D{FS
yx7w{7
m=v%x
<_f&&
^T'F7
c>x7}
UW!%yP]3e
!:wK5g
qw,@d
W1;><
qI@x<
[Kmn&m
DTK)"
3{zzJ
w.#jE
`"q,F
VF///
/J!ue
rUURR
efB&$f
#yd*Ce
_/ymg
KZ!``
9/^ W
_^^X\
,(h?f_
c"l.`m<c
:0iOP}:
=_uPh
BTM*E
Ng^SG
DKg%Ov
S7.;<
h`{!|
QvAhK
2`ZQR
=7>]7%T
ZW LD
[`#E8
)n_mR
a?3BG
7y,yW
z~~n4
Nrphe
v~6(E
@UV0C
YR4Y7I
\UU'''p\
r[KT; ~u'
FT{Rg
:!6NK
o#kal
.(407
'LWGr
8(=YG
3KfJg!
{7n&"7
k}>[G
zwu R8^
]vy9"t!
cNI|9
Y&fDm
f{v}c
:,V.C
VHh/a
K;EVg)e
ADTz
5D{aW%
W=%r/
s?LSC
F&U+U]UUQY
ev%L?n(
vkf777
2+r!.
Hv(H,"!HR
MD<v1
\.FKs
~Oar9c
<G)%/
t)U3!
1q"2t
(mw'~
i2;7c
JDFe"
T"anF|
+FG&
0bWQ7
$"V#=
Nb)r.[
48'(0's?
QcXEE
! |[SUi
Kxh)e
t?1i^7
UmMoq
]?-b*
EC-Z8
p8xVa
Q1ZV-
T/*v8
z%"#&#RS3
>/P'%
///RJ
#XQCO
'-%Zk
w1^~w
RdpER
iv:2|
U(Ycr
vkSff
"#ASZ
V0c]3
X5m;2g
bl7 "
[!"QC
XtKD{'
4efa6"S#
ng0pO
I)9Z`}
:-jRRJ
l;E2Pdu
p-X~7
Hnv}PS
2 zN1U
6 w*x
<|-+b
wzlD<
68Ui"
ik8_l
VNeny
`3x<h
d:hg!
xJg^d
j1?y\
Q6p/@
ES2[jH4
BWB&u&
\Q[3a
s>Mtx
p3c&z
F^!",U
4/nYD
Wi$.^
JdS_GJ
7q*BNKu
eGYxd
h[eGWR*c
G!\3E$
*;U:ums
FFI|b
x<b:<
1s:dN
@nn .
8&1h.
~j^!y
]Wa,9
XZhRJi>?
5+/]:
J)\XU
hTUuqQw
Bk\~C
XaDXb\
N],ak5
>924|
;;5*Wa
5E4p>
a`?)}h
8!7x.C
^_=L@=
Qplqx
ygw4sl&
"$)U%
3k3"o
}Qt5nE
Zo///"
s~Hv].
U:v>?R
3JK[)
R+R-@
2~z}}
7rX]no
M5n4y
=~|{{{w{;
<{'yjYSi+
{GvrU
ZH)]N
'E"JL
bqn,e
~wVT>
;yh_D8
P0:M1x
-tbI3~
KJ))@
\["cVW
kWK"d
Cc9CJm
dW`?)
4X#/1
bnK"Q
It<Rsac
JemBf8y+
_0^0I)%
d-g2T
L`{)D,
.2CJy
u5Ms:
:1qO[4
kPbff
2gsM9
LO8{DQ
[26AD
/Fi!{
?Jyw'
oL}_D&
:`"|tYTU
@30Px
4<_6=z
DFbDF
}1fdFX
Ivq-,
B#RU1
=?>~G
Fa#dg
qB0!:
v<f\ B$Y?
\OxH)
8aAE:
9I6Sq
>+h5VQ
*0VN!
.,#1u
n=f&3
|><<
qQ+~d
a1%c"Qp
q^^&1b
C^sO?
%09&M
u;c0znT
g1{xx
Z{yyA
q9O<pr
sF=]3C
xO!W.
!UJP)
LPh3#]
M?kQ@wy
;EhoJ
6ED8~
+3+/n
Q2Bib)
U?wUrN
+D<M5`$U
<Mf9{
rkh O
,aq>w
c-E~f+A
3!VSV+
?@9@u
fE5mX
5$BEL
s/C e
9{,N@C
b!2cc
Q1f'dpds&
!u)%n@
KRhW3
q8qg5*
~V|}X
.My63N2
NmbJ]/
~][YE
<M<_gh7K
,L)Ed
6Qt,3
L8YJQ
SR0<LM
{pHPV"
eC\knn
t)8Gh
[7k@w
uqqQ/
gf///.
[B7zgJ/X
;FuwJ
,BpSvh"
OUQR`
:bE%-
%p\(d
?bX}37
se!fVCB
@VJ))RL#
BM{:n
K8N%P
@Z)?'
L0}%`Q
6JPZq(
"LV,u
e7bRW
[PewF{h*
p9{2*
89yD@0p
C^Nn_
ak)la
V94#8
tn=eZ
1^>~\
byT1^k
55-b*)
3RRcG_
~F6Dj=9;Co
N';"cf
z_Q7M
k]Vl!]
CL,a]U
h;SSU[
c0L.!F6
sQ".#(
qe*aUr
f{aRU
u]=54:
,"cNf6
R=G>X
,JD3x
e5S)hp.
p"MQe9`
=x)KuU2
SUUm^
uCme(V>
h4TK$
xM"-s
afKoe
jE_hj
o/63U
(hN)m
)LCs;
&N~XS
C]W6u
yzzrmt(
BEs"3
i C@=yZs
B(3iMKe+
iVccz
u]M\H5ew'
,"U, sR
B\[k"e
|i;R5
bU9NS
$bDS)&
l:T;3!t
gFyW4
X%6.`AA\
!LDye
RUS&"
,Y8`|
)<D;3
|e546|
l-EeY
xzzRI@
}u;~c*
9N&\UT
:4UDJa
>jt;8t
j22iOi
(4bXD
2"b5S
HQN$2`
(T&[N
A)!{
oq*s1y
h:HA=
|;{7<#7
FDZg"#
:xsCk
bFaIW
ZRJcr`
|{Q/K|q
dM)Id0
%>y0)
1b0Qu
F/xf%
!-.Wq
BlLNg
pb!"J
733{Q
2PI@B
E!EI/(
,"bzP
bmmM_
y'VWL
avj)3
A`cl&p
(if\+
kD<mo
qwg Py`
"K,#3
-cibn
A?t]'V
ZzVdew
CGUw_
]azt_
3!gM%
ST5f\P
mc<n:
hcZC2W3*
Z3f|(<
#'^ls
l_bn$q]
!Fd#W
u]k0K
U3{z|
78haF
*V~x@
@rl0NQP80
)FPJ 30
n R>M
0>M!k
KG=k-
DXT3W5
yvF8_n*
10#pEO
0nlC8
|BF8[M
xPBsla
3K)#X
=Q#G:
UUdou
p|b*CKdX
&YLM$hUM
[iK5C
?VZbN
zq=cN^E
ID`6H
f_f&a2
pvi{<c
hTB.s
-,c_Hk
|:qP>
YVK"E
/"bb>
?+P J
Sk$@Y[&N]
4nb!r
|>???
W%Kz|
b"1!i
U5)f]
C%,"W
%'.EK-:'2
*"ZgV!
4PMSL
SB&_+-
atv!'
qO?nFsx
=GX!T=E
#)s\1`G#
As/xJY$
TUmY.
?@5 p
1~&_<
E-4FQ
33C(u
JLS$3
\#E*dI)M+
FrX?|
(<1mrS3W
xTxuu
.k0cDZChUL
[%Ewwx
EF>>(!
qy6*U
Hbwnm*[
<>>6Jk
X2bwH
QRbF%0
z8x6c35C
133UN
@\!a+
J5"73#
TU(A7?u
(d4Et
pSld{;
ASc}l
*"QK?
9}&O:
d0m)e?
R:==y
(Zh]^e
EI&h m"
4[.{]
2sfPf
UB=A7%`
*RT#Uo\/
>6nPvk
w=$Tz'
v]i?4
jyy>A
~$gIJ
X#B:S
cD}H]
cNZoC
^+|cg
JpzC-H
5e#8M&
uzBD-a
Ag6R3
w!EDr
L3#3^
[ O@\J
U6KQq
JOJ!m
"2Lqm
1N5D.
c\?D=23
F2Z`f
l|[`@y
s!y^E
)K6@#
S}_6>
"j*}^
"DB$2
D9etu`
Vc P;
N'r`8
50cW:
y]hy<F
l"GG8
h/>s^k
8y>1F
>S(<s
%j<+AG
(mj_~
;W@`C3ID
'f8I-
J`*f&
p`kN:
:DZ/^
Kgc<:R
88"au=u
Qb+_DDT
j<r:h~
L^[I]\N
7YGVp
d>J]:
&GS]7
RN9%J
j`9pV
Be#c2%
7wwS-^c
S B@&47EmW
{Gk//_Zk
(o93{
#l}6]
kxgZo
FH0#4/
"R"r{
D&^3^
34COJ
A Lmw
MD$,l
J=-.3
R#6Fe
{n`(7
vS|zz
OU-I2
rsRGw
e}*)T
9h?SQ
t""&fe&f
3m0hz
71v62
|v<Ye:
ZHanh
!C^8n
-}n.13
LYg"r
@1'#U=
JI}Rd3$
.ph!tG#>
%D>E&
2vj"y
dN&tXo
8L!m'D
>(7?z
!'*lf
"b55e5e
%Uud~
;=OPl>
N!yOlPhK
:R-NhJ
,c? >
$,oav}>DP
N4ame
.wJjI
'LQWG
"4apN
x}0*\
3onn6$r
NU-;=
k6Sr8\
EUE7x*3]
% px5X
yieTw
'hfR\{9g
|>~h$
*"fUU9
2c12"
ud"O5J`PE
n]JI3CB
"dfrc
dDjjf
[UH(n
&c$gp
U5$zB
x3l8O
"t="<Sao
~d6U5
'\<X
jZem{]
HR]Nl
bFcT5
u 2XZ
UNJ</_
&qWPq
+\cj;D'
gNDPb
D'CWl
,PRfv
s vD+
J)UU%
H0[CT
{k0_D
!Q23a
[[(k
J)yHa
b*DJ*P
.9NIm
!OB;=
:y1/1
g@GZ"
MADz_RO[
Q93Z3$`
V]-X#
93Pdf#"
yKDh;
I$%cR&2RU63v`/
fbVDD
Zm1sa
IDATa
<tHog
&6eQy
nooooSJ?
4SBD=
Y;IWD
AD$'1
Qz@<76'
Yn7{P
O'v\*
mF8<k
9$.bs
,$Q5k
#MXYg
WWeu
jU\\U
7}uFDt
KD<==
VS2jJ
$ .J;b-jL"C
wfv(Q
8b(!I
$C-PA
8jQ+E
N,635c
RJIJE
wqY}4
gs-)k
y;u[0t
T~V*Q3
y'yjRj
hfOOOF
ZO$"f
z#Q<.
(Kksg|c
!.$YDT;~
{DQk:
=;5G8
$*z*5v
PeqN!.
UXF&C4
4CK.4
ePoGP
'Y4_)H
^czB]
#1*dd
LilfC
O8<0g
XvClmz
x|zyy
&,F&\
Twe|w
m5sub\
Es~0%h
Q(Uu *S
Sfl+F
1i2c`{
dr'`x
Rj)[X
#>r/*
YDK=?<X
"?^\w
B&dVTER
y)(`K
Hvz=(
XQqYev-
]^NX.
MnnFO9
SSGX]
):%<mD
e2+)7r
F?X =
"i.kc
lQWd`
9M4xg
!q*]`
wXvoP
gJ8S_
vXb]p,6E
qVVUU
lP"W}
IfV;8
ppqs*
8kjWj
i)%Su
3m.E4*
|F)Eu
Avr6F
A_^{'(
=MTk%
}{7^3
Ap@U_^^t
`Lq;X;
H)b%J
u^.6""
o$_aq]
sePE
gzat&Y
O.VTU
lx3{zz
dDoc0
zttq\
'}[@:
q3PE
ADjvww'D
3Qm])
I wzk#
QM"9h
#K&E^Y
OYb"#
6~5&_?g"
`UD(l
BJ-f)3
*V,"2
:C3$4]
V/Amb
PR2U#
0dpy7
<_0)FgqN
a"R#F
Ih*Iu
9PoSJ
nc^9I
resO\
p8 {4
i%e!^
+W^C}
aLO?v;
P<ojNw
{mk]4
*m){3
iy?UU
GVVuw=
{_<.t>
ExY:<
#@+,$
v`.|f
}{||t
&NLllb
k<6@_
RO <~($
O)Pe(
3hLTm
gJ#h8
M[T]E-T
[/6fK_
$^bG{i
VMcJ9
p?,O[Z
HeQ3C
d~nT5
yxwU|
ykK&U0V"
]ZkRg
P{S]T
|>><t
YhYs?
sN@;A
|kEw.q
{9CmN
y:lJ&
%jEg&v$N
""e"rFi&U3
%(5*$#8
<%f!ec
BJfjnc
<hQaG
?J0[D<
3schH
v8@U-
3ux"h8>
232wrb
)[ww0G
q^a6x+2s
7DKBwt
IDAT4]
Qd|z)G7
BUU<"7
x\]3A$a
mqk3#b
%|qOb
>|1bg
vIi!A
9A/>D
b/FXy;r
9v16/1
teTP.
1[`3C$
`:nX`k
,yJ_|
:SNS-~
Bq|>KX
}MFT^
]`}(M
:L3QMK2
wAtN~
:-J_/
USQ3SB
H/3sG
7O"x@jV
FeqWY
OKqokk
6@)jm
&F7MiNV
2'ZKT
%0-S^
Xc}E^
Y @ZCtky
30K[;
@/0?p
yTU+'
fXf,1
#Q|4-
X63M{
n\U$H
5iNv6
l8doM
8rX1wo
%QwgJ0
U)4/@
""JIjO
~nGR1?p
X`cvh
tqZK#
nJ(2D
<+g"f
9/"GUT
Yih-rl
[NKP\
YJaY$
k*hm=
AGWHd
.bV@t1
bf^g!
h(0TT
gk0}-
rq{Uku
fvX]Zc
#;/}S
X#fW2}1
Ap&NW
QJjT 4Z)
[BR)2
3{}}uk
-sS,W
"%031W33Qf
ZZ3"w
tYV!+lP
C/u]{
CctE8o
<e)yFp
nk$M!
<<<@u:
)($Hx~~
#48}{
B8==e
F4wnDe
$e.S%5#
sw$EV
j0^%0ZAt
50|t7
d O`>
4$A"k+
nt9[IQB
[{zzj
- Y=vx n
wym"W
8VDbz`w
Z3Ums
'-q0h
>OgwoM
Y1pSK
MyCe=N
O_HADIS,
uu#[*
H-'$r
4=<<hT
HhrYD"B,
DmrkO!
wM.(k%
ODB1{
fc^[niKc
.l<`\
tRu__
ll+;?
FEx1Qup
i,L5N
"!&#1"3V
}{1Hl
?w%2sT
5gfReO
>~;i{
'>R6B
]7DZf\
s(:E46
U%5*'
0$'):
<=A][
qDb(%u
Zk$%.
PR yx*
_^]v>
qW_Oz\`K
,u\KX
Ys^JM
}bG"A;
CS=].
)}v\8
'?Z|y
C,Y=|
)yOT\r
>n%;R
n+ gQL
,yX8,H,
>$VDXVI
73d#0
?IOxf
?{]7Y
&".r8
V&"0Uhb&f
D,|hc
c4QyMk
TS=K-z
zug~~z
RWr$%Ce
o{+zk
#/!G"
\2('W8
t]i'o
:BAfDl
1vho6
$+i&%NL
H-ED^
hLUH]j
SQeRj]
F#dV)
`kwVff
oqmqgD~^<
[%KO_Z
Z7bC>ES
.vjV4
5??my
3OAYJ
/So`\
j(?GN
Z*:Kz
U(x5'
RnZ>IVjf
'Pb3]
7OSJ`
&2V55
JR'GoQ
U[J#W
d@'-E
5bDvP
by~~63
29;6&
?2.<>
rf#P/
t=xwA8K"
yguD}
>9[zY
?9Ul3X
ZbCh|
-{koU
+&[Nf2
Ddhb#g
MKPch
#6Q%#Yf
:SHWc
"ID$yj
86oFXJ
~H)i2
"JA)e
1f}~7CGe
|'}34
fnw,RN
i^`F0
rH^2Zu4
ZB`"t2MJ
g4pSO
(fwMy
^/a"cS
}5L0Nyl
x->XF
v7pDD4
pa}jv
$ZJJQ
q55_:G
6WusUUs
E-LlWh|
;}MZf
^j;rR
5m ^pB
oL1N9
z^Dd]{
rG.l=
fmmWm
n[v=Wh
%JDUSo,ep
MZka|!
q\n(0
RNifv
<6bYG0[
(N`FJ8
DPX6<
B#:tSG
NA6af
@v-Zm^?
ilyx!
`N!m$
)$"lx8U4\
m(?x:_U
I~%KyG
Z(I6%OS^
rr<T6vt
}J)5M
F63!6#
[N9D>
Tv;/X
tC?wx
hSsD8
$beb5
ahUF1
P"2MS
<_S0G
C,Cwf
=U3)y\o
tWq8"
-3?<<
o^)nv|t8
Z9(u>
iQIW:
777/<~~s
EL"`B
U]___94yZI
}eko?o_?
VZ);'
eOQFy
!G]jT
aO0[S
pEft:
1:(.!'w<
iZ@^w-i
"lh{i
I:G*3Z
iSs1[O
UjMk5.
HMK%1v
^__a^
0@%\x%
TjW'o
Ev YD
v0,3s
7o$42
7x+9K
#->qbn
!s8q5B&
eBS6!
^__{J
MiC86z
tZ?.b/
0wvv`
`EdDJF
wDMy'
tl8%f
KE:hNP
8fIBLj
C:k(o
]|wIv{
!Yh-p
!&bSR#
r9=<D|
Dc:dnz
#Dq^s
#j%!_
)jMgT
!4@8i5
NZ!_!b1~
A6[7>
J(eJ%
\4%Gs6F
1"5=0r-Y
///tK
e7V:vZ
TJyxx
x|~~N^
^e6}(W
dB6JY
b/"
,w7[<0
Ll"Du[7/l
rm`b&N
Uu"p8
.M)tp
Y"llW%J;
bIQ9u
"9nO=V
f6gF_
q"2M7
B%cx#@
L4O4O
.)JG1a$
DH(T.E
lu{*/m
UCN`p,d
|:==?
QL%Bz
}2^Od;
m88aKH?
>+DaZH)
^ <)1%
Tyk!7
$]PgF~2aG
b6<<<
m2:JBL5
rxy;p
0H|.Y
!@MQ98
Y#p.S
N)"MpJ
-Wj)[
rk#MU
VWY*j
#D-@C
sUiAe
D$FJq
<9xys;
<wwQ~:
j%@=nV
Ru)j
~f2nxo
_N|58
>(nT8
4aV2V
rdXtY;C
B#b@P6
,$[Q%
s@+Qz
"RubS
$C0)P}
Ou^Y+8
I*8eUJ
t2/39
!8vEk
"{cCC
u]wss
)EDPT
=Aw<.
:K#Mkk
902 Nw
p;<p'\w
-UupO
[PU8u
sn:""
#?6Ti
0`3 C
REk7k
*L<40
PZgy=
]I__~>!W
x:^vev
{O5>5
xvstW
vU)xY5
m)*5UU
2Bxk0x
y13w&
eUM9
7P_ f>q>
DuYzG
P]s0k
+8*AM
GT"u`
QQNf'
+hWi9
SF)<f'
WG|CD
If3ip
V<apv
->[Rp
EQlnn
-G_$;
|@Yf9%
uT5"w
07a#[
i'!Rb5
@VoRd{
J:[ken
%5##b
-,+>!ErQ
~utmc
okUrLD
La;k3c
dP&'e
/>WO|
|wrm;
[()% Y
f&P8Cs
QJ\V<(B
V2*O_
6( g!y
7HbVU
)cL]t
\T"j]
c(f^Q
?K0o!@
W'bkBw
Z2vY\
entUR
:Y|V(
6DS,VS
:x|zJ
Q0%cfmQo
@ gS6u
dbYeK
sU}iy{t
9{*v2
<?<<@n
~4"tK
(>- [
syQN(
6Se5f#bcu
oX6Iw
[0knb`{
VR&VS&6
Xlmyyy
?h7^$
<4?Nc
O]?~o
#0$0SU
+w"%%vf
9$&"l4
= :"Rdv
sN$Z\
BYex7}b
&U-+5z
sC$"~
[fJ"$
nnv9O
vq"`4
XL9&C
w}Yl]uS
#4>>.W
4"(O}
`u$"u
(d>'6
|CM~Q
C23iQ"Z|`3
EC1"&e>
Ze+;X&
&#g@M
{p[DD
+'l(X
D=%Qa4
!"G-y
]-VExW
9_{?_.yz
;5}ou
q]a`[
89o03
?W>?X
eN)(6
L4B<D
5B?XV#
o:xws
T)}1T
hCk"K
WktA(
-j-c6K)V
!pEhvT5
L0pAa
"2_.""
RXH;-
G]{_Y
,g6[y
<NE9L
BmKpR
\,BZF
~"U['
}:_~I
VzK)E
TBRmsv
j#ia?
IDAT"9
1H!L0
VoOa9`
lc9KJa2
yrkb:
( ~n<Bo 7
$mspmp
?7<&j
K5_s>
fc0f2t
mUEkj
A!jlKJ5LU9^
Ht'6vdK
;tLUS
h4$Ii
p8<>>:y
E! RF
Pk]z+
lK]cU
eS`4U
;2YOK/D
e?jio
<C,f=
Z(aA^
pbDDZ
yh|q?
SJwww(P
Uc1:?
+,V|gB>
G3EK6`
AQX*;6#
)/v =
HV8%e
%B,lL
S<oa5
%lbp%
-`fT+
_)8~=
hRU&(
9?=NZf
f0Z*B
XK)jq
fJDT"T
`E: y
P\gm{
<`tbfbVU
S6f#&b
7OXl5
.3~ssCaq
z'fRO
JjliX
e:M"r
('Rg:,<
RRHi)e
-fn,W;
.n[>03
qbjXE
jtEDsJ)
RBo&#
Sfiv!
.t7O9g,
Ka^7HLyVU$
.}_w
Nu89>
uc0>HN
k.nu$6
]=!pk%j
v<??C
*Z>pCoM
Fkplj R7E
T.krEa
f:M%
c9B+NO
L$fff
r~ 41
s!NdLJ4
@(!Uk
+J~DW[y
Wt8dMXC
y\k=O
_^^d)q=
9sj9+
-J0<d;
V8iW]
mI=79RtS
YH:2]D
4KD<%5
7NgH,
{l[@\
t:9<<
4,`f}/f4M
ZXDMm
Sk/6\_
R%u.r
0J8IQ
!7EFZ
W#@Si
O:7.:N
R]P4M
#i0<Hp}n^Jy||
@YoJ&
E*<UW
}{sZc
k>VC={
0\(#X
mc@K)
N`-F1
OcEbg
LEC>t
,.Hq~
>!fL_
G=K61}
2`dMF
3FwOH
&6[u^
I4mG(
ZL*uO
a-J#<q
ja.#[
nOLkkNb
LvvvDdssSD
3V^o8
DC;vH
f@e^(
%AyxL
l,RzT
v/5J1
+QaWuE
<NknT
wwx\Id
BUS7cK
6 7 X
H/ EU
PjqpE}
{52rZ
E.~&1
'N|^G
t:Az^
j#J93`
3>F7Zp
tzyyA?
A2So<
oCWkg^
J @Uu'
7<nW>
&"U-E
g.sc2{sV
_a161
>#!g8
Hq0VD(
s3F$K
im}_N
(+1p1
\k-[g4
R@l,pPN
6:Hq-2}
(ayUl
e\}~5
8Q.D@
_D&!.-
rMf&F,
D(gT]
Wz(x_
:!126
%"N;W
SDt1Fw
RjI~J
m\X.W
PqV)}
SDI33w1
s.zB8
/}nt`e
_<apG#
Yc.fo@
/.BH|
{inL]
v_F33
C-B.c
\@V\C:
YfZf~B
<MJ5b%
[{{{s
.FD&!
5ofg7
l'0/$
|%'"2
b9`ZD
X4lMdn
iV#v.
tJ"j]
[6*iM
JQ1+RL
tMAjl`U-%
[kuY^__
50q@L
Tl\aU
;De~-
_D7q;]_
tXgTe
X:WU`P
0WUUV
Sd_BC+vF-D
H^of*
)1db"
];jKM
z)!U33
Xr7v9
E40't
Pjy8>
.#sZ=d'!h
N=5 JN-
0~c$[(oc
}9_<"4
AbUUeuhP
"u3kK
F^tp >
iRSM4D
}^73v{
WYj}9
V~E9k
+zz:G
~?.@M
En8y4
Ji'B9s
ZqV4z
cU"rx
[9%'J
bk9Mbefq@=
dGW0p
-kuIFPeba
_Mivm
MDwww
7T"|@
u`w>6
1RS:
0l4.i
:/0oo
9]__w]
bq( h
@K2ke
Y@OBIB
X,X?r
CUU4,
sKYr%mIp
FyOu)
uBR3/l
D9kf$^[lW
6P9@w
"!*N@u
rX3)p/$
EZDnU
!![`L
P7$3C
Yub58
b=O2\(
`JHTY
T7x)?
K&fVOQn
A6#Uc%"S2f
O1H#%
TUK4."
KK@U)
HU5[.
as@WSf
mRkC)
(28ZM
;$ro3_
`xt)Ei
T&~XP
Cc)K0
Vir(>
;5i<s
af@z1No+
,\8?"
B7/!w
b5&"!
=|~~V
:UU-e
453T2h[
35MsFn
iFI!(
+9p~N
mKGn\
?U<(D
Processing 1.88s
  • 1.833s CAPE
  • 0.036s BehaviorAnalysis
  • 0.01s AnalysisInfo
  • 0.001s Debug
Signatures 0.11s
  • 0.032s antiav_detectreg
  • 0.011s infostealer_ftp
  • 0.011s territorial_disputes_sigs
  • 0.007s antianalysis_detectreg
  • 0.007s infostealer_im
  • 0.004s antivm_vbox_keys
  • 0.004s ransomware_files
  • 0.003s antiav_detectfile
  • 0.003s infostealer_mail
  • 0.002s antivm_parallels_keys
  • 0.002s antivm_vmware_keys
  • 0.002s antivm_xen_keys
  • 0.002s ransomware_extensions_known
  • 0.002s suspicious_command_tools
  • 0.002s uses_windows_utilities
  • 0.001s antianalysis_detectfile
  • 0.001s antivm_bochs_keys
  • 0.001s antivm_generic_diskreg
  • 0.001s antivm_hyperv_keys
  • 0.001s antivm_vbox_files
  • 0.001s antivm_vpc_keys
  • 0.001s ketrican_regkeys
  • 0.001s browser_security
  • 0.001s bypass_firewall
  • 0.001s disables_backups
  • 0.001s disables_browser_warn
  • 0.001s infostealer_bitcoin
  • 0.001s masquerade_process_name
  • 0.001s recon_fingerprint
Reporting 0.01s
  • 0.006s JsonDump
Signatures
behavioral_fips_reconnaissance: ["cmd.exe (PID: 2816) probed FIPS encryption policy at 'HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Lsa\\FipsAlgorithmPolicy\\STE'", "cmd.exe (PID: 2816) probed FIPS encryption policy at 'HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Lsa\\FipsAlgorithmPolicy'", "cmd.exe (PID: 2816) probed FIPS encryption policy at 'HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Lsa\\FipsAlgorithmPolicy\\Enabled'", "cmd.exe (PID: 2816) probed FIPS encryption policy at 'HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Lsa\\FipsAlgorithmPolicy\\MDMEnabled'", "cmd.exe (PID: 2816) probed FIPS encryption policy at 'HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Control\\Lsa\\FipsAlgorithmPolicy'"]
mount_point_key: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{e1e1ae7a-0000-0000-0000-100000000000}\Generation
mount_point_key: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{e1e1ae7a-0000-0000-0000-300300000000}\Data
mount_point_key: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{e1e1ae7a-0000-0000-0000-300300000000}\
mount_point_key: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{e1e1ae7a-0000-0000-0000-300300000000}\Generation
mount_point_key: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{e1e1ae7a-0000-0000-0000-10e008000000}\Generation
mount_point_key: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{e1e1ae7a-0000-0000-0000-10e008000000}\
mount_point_key: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{e1e1ae7a-0000-0000-0000-100000000000}\Data
mount_point_key: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{e1e1ae7a-0000-0000-0000-10e008000000}\Data
mount_point_key: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{e1e1ae7a-0000-0000-0000-100000000000}\
file: C:\Users\Rajesh\AppData\Local\Temp\6.png
command: "C:\Users\Rajesh\AppData\Local\Temp\6.png"
Summary
  • C:\Users\Rajesh\AppData\Local\Temp
  • C:\Users
  • C:\Users\Rajesh
  • C:\Users\Rajesh\AppData
  • C:\Users\Rajesh\AppData\Local
  • C:\Users\Rajesh\AppData\Local\Temp\6.png
  • C:\Windows\System32\kernel.appcore.dll
  • \Device\CNG
  • \Device\DeviceApi\CMApi
  • \??\MountPointManager
  • \??\PhysicalDrive0
  • HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\System
  • HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Command Processor\DisableUNCCheck
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Command Processor\EnableExtensions
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Command Processor\DelayedExpansion
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Command Processor\DefaultColor
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Command Processor\CompletionChar
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Command Processor\PathCompletionChar
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Command Processor\AutoRun
  • HKEY_CURRENT_USER\Software\Microsoft\Command Processor
  • HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\FipsAlgorithmPolicy
  • HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\STE
  • HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\Enabled
  • HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa
  • HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy
  • HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\MDMEnabled
  • HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Policies\Microsoft\Cryptography\Configuration
  • HKEY_CURRENT_USER
  • HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Themes\Personalize
  • HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Themes\Personalize\AppsUseLightTheme
  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume
  • HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{e1e1ae7a-0000-0000-0000-100000000000}\
  • HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{e1e1ae7a-0000-0000-0000-100000000000}\Data
  • HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{e1e1ae7a-0000-0000-0000-100000000000}\Generation
  • HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{e1e1ae7a-0000-0000-0000-300300000000}\
  • HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{e1e1ae7a-0000-0000-0000-300300000000}\Data
  • HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{e1e1ae7a-0000-0000-0000-300300000000}\Generation
  • HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{e1e1ae7a-0000-0000-0000-10e008000000}\
  • HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{e1e1ae7a-0000-0000-0000-10e008000000}\Data
  • HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{e1e1ae7a-0000-0000-0000-10e008000000}\Generation
  • HKEY_LOCAL_MACHINE\Software\Microsoft\WindowsRuntime
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.FileTypeAssociation
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.FileTypeAssociation\ActivationType
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.FileTypeAssociation\Server
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.FileTypeAssociation\DllPath
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.FileTypeAssociation\Threading
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.FileTypeAssociation\TrustLevel
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.FileTypeAssociation\CustomAttributes
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.FileTypeAssociation\RemoteServer
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.FileTypeAssociation\ActivateAsUser
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.FileTypeAssociation\ActivateInSharedBroker
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.FileTypeAssociation\ActivateInBrokerForMediumILContainer
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.FileTypeAssociation\Permissions
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.FileTypeAssociation\ActivateOnHostFlags
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\Diagnosis
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server\StateRepository
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server\StateRepository\ExePath
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server\StateRepository\CommandLine
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server\StateRepository\IdentityType
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server\StateRepository\Permissions
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server\StateRepository\ActivatableClasses
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server\StateRepository\ServerType
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server\StateRepository\AppId
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server\StateRepository\Identity
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server\StateRepository\ServiceName
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server\StateRepository\ExplicitPsmActivationType
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server\StateRepository\CustomAttributes
  • HKEY_CURRENT_USER\Software\Classes\Interface\{8645456F-D9A2-4B82-AFEC-58F0E8DF0ACF}
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{8645456f-d9a2-4b82-afec-58f0e8df0acf}\ProxyStubClsid32
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{8645456f-d9a2-4b82-afec-58f0e8df0acf}\ProxyStubClsid32\(Default)
  • HKEY_CURRENT_USER\Software\Classes\CLSID\{C53E07EC-25F3-4093-AA39-FC67EA22E99D}
  • HKEY_CURRENT_USER\Software\Classes\CLSID\{c53e07ec-25f3-4093-aa39-fc67ea22e99d}\TreatAs
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{c53e07ec-25f3-4093-aa39-fc67ea22e99d}\TreatAs
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{c53e07ec-25f3-4093-aa39-fc67ea22e99d}\ActivateOnHostFlags
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{c53e07ec-25f3-4093-aa39-fc67ea22e99d}\(Default)
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{c53e07ec-25f3-4093-aa39-fc67ea22e99d}\InprocServer32
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{c53e07ec-25f3-4093-aa39-fc67ea22e99d}\InProcServer32\InprocServer32
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{c53e07ec-25f3-4093-aa39-fc67ea22e99d}\InProcServer32\(Default)
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{c53e07ec-25f3-4093-aa39-fc67ea22e99d}\InProcServer32\ThreadingModel
  • HKEY_CURRENT_USER\Software\Classes\CLSID\{c53e07ec-25f3-4093-aa39-fc67ea22e99d}\InprocHandler32
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{c53e07ec-25f3-4093-aa39-fc67ea22e99d}\InprocHandler32
  • HKEY_CURRENT_USER\Software\Classes\CLSID\{c53e07ec-25f3-4093-aa39-fc67ea22e99d}\InprocHandler
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{c53e07ec-25f3-4093-aa39-fc67ea22e99d}\InprocHandler
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{c53e07ec-25f3-4093-aa39-fc67ea22e99d}\LocalServer32
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{c53e07ec-25f3-4093-aa39-fc67ea22e99d}\AppID
  • HKEY_CURRENT_USER\Software\Classes\CLSID\{c53e07ec-25f3-4093-aa39-fc67ea22e99d}\LocalServer
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{c53e07ec-25f3-4093-aa39-fc67ea22e99d}\LocalServer
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{c53e07ec-25f3-4093-aa39-fc67ea22e99d}\Elevation
  • HKEY_CURRENT_USER\Software\Classes\Interface\{AF86E2E0-B12D-4C6A-9C5A-D7AA65101E90}
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{AF86E2E0-B12D-4c6a-9C5A-D7AA65101E90}\ProxyStubClsid32
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{AF86E2E0-B12D-4c6a-9C5A-D7AA65101E90}\ProxyStubClsid32\(Default)
  • HKEY_CURRENT_USER\Software\Classes\Interface\{89BC3F49-F8D9-5103-BA13-DE497E609167}
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{89bc3f49-f8d9-5103-ba13-de497e609167}\ProxyStubClsid32
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{89bc3f49-f8d9-5103-ba13-de497e609167}\ProxyStubClsid32\(Default)
  • HKEY_CURRENT_USER\Software\Classes\Interface\{657A8842-0B5E-40E1-B8CB-9AAFACC33AAB}
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{657A8842-0B5E-40E1-B8CB-9AAFACC33AAB}\ProxyStubClsid32
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{657A8842-0B5E-40E1-B8CB-9AAFACC33AAB}\ProxyStubClsid32\(Default)
  • HKEY_CURRENT_USER\Software\Classes\CLSID\{95E15D0A-66E6-93D9-C53C-76E6219D3341}
  • HKEY_CURRENT_USER\Software\Classes\CLSID\{95E15D0A-66E6-93D9-C53C-76E6219D3341}\TreatAs
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{95E15D0A-66E6-93D9-C53C-76E6219D3341}\TreatAs
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{95E15D0A-66E6-93D9-C53C-76E6219D3341}\ActivateOnHostFlags
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{95E15D0A-66E6-93D9-C53C-76E6219D3341}\(Default)
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{95E15D0A-66E6-93D9-C53C-76E6219D3341}\InprocServer32
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{95E15D0A-66E6-93D9-C53C-76E6219D3341}\InProcServer32\InprocServer32
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{95E15D0A-66E6-93D9-C53C-76E6219D3341}\InProcServer32\(Default)
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{95E15D0A-66E6-93D9-C53C-76E6219D3341}\InProcServer32\ThreadingModel
  • HKEY_CURRENT_USER\Software\Classes\CLSID\{95E15D0A-66E6-93D9-C53C-76E6219D3341}\InprocHandler32
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{95E15D0A-66E6-93D9-C53C-76E6219D3341}\InprocHandler32
  • HKEY_CURRENT_USER\Software\Classes\CLSID\{95E15D0A-66E6-93D9-C53C-76E6219D3341}\InprocHandler
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{95E15D0A-66E6-93D9-C53C-76E6219D3341}\InprocHandler
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{95E15D0A-66E6-93D9-C53C-76E6219D3341}\LocalServer32
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{95E15D0A-66E6-93D9-C53C-76E6219D3341}\AppID
  • HKEY_CURRENT_USER\Software\Classes\CLSID\{95E15D0A-66E6-93D9-C53C-76E6219D3341}\LocalServer
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{95E15D0A-66E6-93D9-C53C-76E6219D3341}\LocalServer
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{95E15D0A-66E6-93D9-C53C-76E6219D3341}\Elevation
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.Streams.DataWriter
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.Streams.DataWriter\ActivationType
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.Streams.DataWriter\Server
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.Streams.DataWriter\DllPath
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.Streams.DataWriter\Threading
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.Streams.DataWriter\TrustLevel
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.Streams.DataWriter\CustomAttributes
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.Streams.DataWriter\RemoteServer
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.Streams.DataWriter\ActivateAsUser
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.Streams.DataWriter\ActivateInSharedBroker
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.Streams.DataWriter\ActivateInBrokerForMediumILContainer
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.Streams.DataWriter\Permissions
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.Streams.DataWriter\ActivateOnHostFlags
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Command Processor\DisableUNCCheck
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Command Processor\EnableExtensions
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Command Processor\DelayedExpansion
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Command Processor\DefaultColor
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Command Processor\CompletionChar
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Command Processor\PathCompletionChar
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Command Processor\AutoRun
  • HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\STE
  • HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\Enabled
  • HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy
  • HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\FipsAlgorithmPolicy\MDMEnabled
  • HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Themes\Personalize\AppsUseLightTheme
  • HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{e1e1ae7a-0000-0000-0000-100000000000}\Data
  • HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{e1e1ae7a-0000-0000-0000-100000000000}\Generation
  • HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{e1e1ae7a-0000-0000-0000-300300000000}\Data
  • HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{e1e1ae7a-0000-0000-0000-300300000000}\Generation
  • HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{e1e1ae7a-0000-0000-0000-10e008000000}\Data
  • HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{e1e1ae7a-0000-0000-0000-10e008000000}\Generation
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.FileTypeAssociation\ActivationType
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.FileTypeAssociation\Server
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.FileTypeAssociation\DllPath
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.FileTypeAssociation\Threading
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.FileTypeAssociation\TrustLevel
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.FileTypeAssociation\RemoteServer
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.FileTypeAssociation\ActivateAsUser
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.FileTypeAssociation\ActivateInSharedBroker
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.FileTypeAssociation\ActivateInBrokerForMediumILContainer
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.FileTypeAssociation\Permissions
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Internal.StateRepository.FileTypeAssociation\ActivateOnHostFlags
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server\StateRepository\ExePath
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server\StateRepository\CommandLine
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server\StateRepository\IdentityType
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server\StateRepository\Permissions
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server\StateRepository\ActivatableClasses
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server\StateRepository\ServerType
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server\StateRepository\AppId
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server\StateRepository\Identity
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server\StateRepository\ServiceName
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\Server\StateRepository\ExplicitPsmActivationType
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{8645456f-d9a2-4b82-afec-58f0e8df0acf}\ProxyStubClsid32\(Default)
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{c53e07ec-25f3-4093-aa39-fc67ea22e99d}\ActivateOnHostFlags
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{c53e07ec-25f3-4093-aa39-fc67ea22e99d}\(Default)
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{c53e07ec-25f3-4093-aa39-fc67ea22e99d}\InProcServer32\InprocServer32
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{c53e07ec-25f3-4093-aa39-fc67ea22e99d}\InProcServer32\(Default)
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{c53e07ec-25f3-4093-aa39-fc67ea22e99d}\InProcServer32\ThreadingModel
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{c53e07ec-25f3-4093-aa39-fc67ea22e99d}\AppID
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{AF86E2E0-B12D-4c6a-9C5A-D7AA65101E90}\ProxyStubClsid32\(Default)
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{89bc3f49-f8d9-5103-ba13-de497e609167}\ProxyStubClsid32\(Default)
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{657A8842-0B5E-40E1-B8CB-9AAFACC33AAB}\ProxyStubClsid32\(Default)
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{95E15D0A-66E6-93D9-C53C-76E6219D3341}\ActivateOnHostFlags
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{95E15D0A-66E6-93D9-C53C-76E6219D3341}\(Default)
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{95E15D0A-66E6-93D9-C53C-76E6219D3341}\InProcServer32\InprocServer32
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{95E15D0A-66E6-93D9-C53C-76E6219D3341}\InProcServer32\(Default)
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{95E15D0A-66E6-93D9-C53C-76E6219D3341}\InProcServer32\ThreadingModel
  • HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{95E15D0A-66E6-93D9-C53C-76E6219D3341}\AppID
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.Streams.DataWriter\ActivationType
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.Streams.DataWriter\Server
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.Streams.DataWriter\DllPath
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.Streams.DataWriter\Threading
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.Streams.DataWriter\TrustLevel
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.Streams.DataWriter\RemoteServer
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.Streams.DataWriter\ActivateAsUser
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.Streams.DataWriter\ActivateInSharedBroker
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.Streams.DataWriter\ActivateInBrokerForMediumILContainer
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.Streams.DataWriter\Permissions
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\Windows.Storage.Streams.DataWriter\ActivateOnHostFlags
  • "C:\Users\Rajesh\AppData\Local\Temp\6.png"
  • "C:\Windows\system32\mspaint.exe" "C:\Users\Rajesh\AppData\Local\Temp\6.png"
  • stisvc

No results found.

No behavioral analysis data available.

Sorry! No strace.
Sorry! No tracee.
Hosts
No hosts contacted.
TCP Connections
No TCP connections recorded.
UDP Connections
No UDP connections recorded.
DNS Requests
No domains contacted.
HTTP Requests
No HTTP(s) requests performed.
SMTP Traffic
No SMTP traffic performed.
IRC Traffic
No IRC requests performed.
ICMP Traffic
No ICMP traffic performed.
CIF Results
No CIF Results
Suricata Alerts
No Suricata Alerts
Suricata TLS
No Suricata TLS
Suricata HTTP
No Suricata HTTP
Sorry! No Suricata Extracted files.

No dropped files found.

Sorry! No process dumps.