Analysis Date2014-04-08 00:37:27
MD51189c8fd3ca401b46fd43bb18a1064d5
SHA138c2f1d79ac4f98ab40ff634c6a632349459948e

Static Details:

File typePE32 executable for MS Windows (GUI) Intel 80386 32-bit Mono/.Net assembly
Section.text md5: 2c1bf20938e88ddef7094f5bd10b8dc2 sha1: 4cf331e148f44602569395c3c0776ad29e6a1cf2 size: 178176
Section.rsrc md5: 4506309dabbbfda51ad2f2d23183a0c0 sha1: 3ed1ae86738bad593d63b65966b06d6aefbc7e53 size: 126464
Section.reloc md5: 5e366b1feab231817a2e590df59e7e9b sha1: b6e99aead99e8bc6c70389525fd488c01b968129 size: 512
Timestamp2014-03-26 17:01:14
PackerMicrosoft Visual C# v7.0 / Basic .NET
PEhash27dc9206a895420e85f6397a35758543329f8e54
IMPhashf34d5f2d4577ed6d9ceec516c1f5a744
AVaviraTR/Dropper.MSIL.Gen8
AVavgMSIL2.BSQW
AVmcafeeRDN/Generic.dx!d2g

Runtime Details:

Screenshot

Process
↳ C:\malware.exe

Creates FilePIPE\lsarpc
Creates ProcessC:\malware.exe

Process
↳ C:\malware.exe

Creates FilePIPE\lsarpc
Creates ProcessC:\malware.exe

Process
↳ C:\malware.exe

Creates FilePIPE\lsarpc
Creates ProcessC:\malware.exe

Process
↳ C:\malware.exe

Creates FilePIPE\lsarpc
Creates ProcessC:\malware.exe

Process
↳ C:\malware.exe

Creates FilePIPE\lsarpc
Creates ProcessC:\malware.exe

Process
↳ C:\malware.exe

Creates FilePIPE\lsarpc
Creates ProcessC:\malware.exe

Process
↳ C:\malware.exe

Creates FilePIPE\lsarpc
Creates ProcessC:\malware.exe

Process
↳ C:\malware.exe

Network Details:


Raw Pcap

Strings
+++.+
+.+.
.
..
q...
..
.
.vR
..(
.
._
..
.X.

,+-+.+/+0+1+2+3+4+5+6+7+8+9+@?A?B?DCECFC`_a_b_edfdmlnlol
{0} attempted to perform an operation not allowed by the security policy.
{0} attempted to perform an operation not allowed by the security policy. To grant this application the required permission, contact your system administrator, or use the Microsoft .NET Framework Configuration tool.
{0} cannot initialize itself because some permissions are not granted.
{0} Unexpected Error
{100fd8cd-4fe2-410e-8c33-ae1af08ef31d}
{1fe9e38e-05cc-46a3-ae48-6cda8fb62056}
#1y#1}#1
{3df19cb6-f047-44d4-a64b-3262b462e17d}, PublicKeyToken=3e56350693f7355e
{6d3806d4-1193-4601-a7df-2249c7f0014b}
{a9035fc5-7ed1-4e0c-8962-dfcb1d508afc}
abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789
aspnet_wp.exe
{bf13b64c-b3d2-4165-b3f5-7f852d4744cf}
&Continue
	DEV-POINT
&Don't Send
Error Reporting
{f91f0a0c-ba4f-4cf9-94bc-57b6bc2960e4}
If you click Continue, the application will ignore this error and attempt to continue. If you click Quit, the application will close immediately.
*** Information not reported for security reasons ***
O$V(W)[,_-o2q5~9
Please tell {0} about this problem.
Preparing the error report.
Save Report
SmartAssembly.exe
SmartAssemblyReportUsage
SmartStackFrames
The 128-bit encryption is not available on this computer. You need to install the High Encryption Pack in order to use the reporting feature.
To grant this application the required permission, contact your system administrator, or use the Microsoft .NET Framework Configuration tool.
To help improve the software you use, {0} is interested in learning more about this error. We have created a report about the error for you to send to us.
Transferring report.
w3wp.exe
#!y#
#!y#!}#
#&y#
#&y#&}#&
y#3}#3
You need to run {0} in full-trust, or at least grant it the UnmanagedCode security permission.
You probably try to launch {0} in a partial-trust situation. It's usually the case when the application is hosted on a network share.
_+\+]{
-:&+:{[
,/+.+/}/
,.+-,*
,.+-+.+/
,*+)+*+/+
,%&&&&&
%+)+*+
+<+=-(
+=+?+@
+ +%+&
+!+"+#
+"+#+$
+"+#+$+%
+$+%+&++
+*+/}*
+*+++,+-
+%+&++~
+++,+-~
+++,+-{
,#+(+)}0
+0,$+/{*
-	+0+1(]
+/+0+1+2+3+4tp
+0+1|S
+0+1|T
 04r<p*@
+)+++0+5+7+9+>
+(+)+*+/+0+5(W
+0,$+/{G
+*+++0	o=
0>r25Z
-.&+.+/+0t
-.&+.+/+0tI
-.&+.+/+0tN
1.0.0.0
10.0.0.0
13HfJ3
13		o=
+!+&+'+,+1+6
+1+6+7
+1+6+8
&1&=&N&
1N|8$\
+*+1+W+f+
  2013
23m$LP
24+6WJ*T
+(+-+2+7+8,	+7sM
+(+-+2+7+8,	+7sN
2<*df~
%!%%%2%:%D%P%g%
:2Ic"|
-$&+%+'+(+-+.+3
!<\_-3
+-+.+3
+.+3~1
-3&+3+4
+.+3+8+=+>
+.+3+8+=+>,
-%-3-D-b-
3|Ox|F
3System.Resources.Tools.StronglyTypedResourceBuilder
+/+4,"
4.0.0.0
=4'4%>
+/+4+5,
+4+5{[
+4+5+:
+.+/+4+5+6+7+<+=
+4&+8,
+4+9+;
+/+4+9+>+C+Dr
+4+9+:+?+D+E-
#4#P#d#{#
-	+4{S
-	+4{T
+5+:+?
$54aMx
5%n,~M
66|$7$/
+6+l~9
6t1F~*
,/+.+/}7
+7+<+={
+7+<+A
7ChM7(B
~7'SR{A
+7Svb=&~
7<",Zb
7ZO-sC
,#+(+)}8
+8+=+>+?-.+B+C+H+I+J
95:t$+
+9+%+8
"`9Ju'
+9z+={b
,&&+*{A
,	+${A
a^0.&Y
+A+$+@+A
AbandonedMutexException
+A+B+Co
+A+B+G
access
Activator
add_AssemblyResolve
add_CheckedChanged
add_Click
AddLast
add_ProcessExit
AddRange
add_ResourceResolve
add_ThreadException
add_Tick
add_UnhandledException
AddValue
+a+f+n~
agvhSVrJEYKsyPVPkKlaqoTgautxWndICUcwyKfdnujJogRnYUkuojVRuOEJ
AnchorStyles
ApartmentState
AppDomain
Append
appFriendlyName
AppFriendlyName
Application
ApplicationException
ApplicationSettingsBase
AppName
AppNameMinusVersion
ArgumentOutOfRangeException
Assembly
AssemblyCompanyAttribute
AssemblyConfigurationAttribute
AssemblyCopyrightAttribute
AssemblyDescriptionAttribute
AssemblyFileVersionAttribute
assemblyFullName
assemblyID
AssemblyName
AssemblyProductAttribute
AssemblyTitleAttribute
AssemblyTrademarkAttribute
AsymmetricAlgorithm
AsyncCallback
"aT8M+Q
Attribute
AttributeTargets
AttributeUsageAttribute
AutoScaleMode
AutoSizeMode
AvailableBits
AvailableBytes
/Ayi&gp
BadImageFormatException
base64BinaryE
B^;B7:
$bebd1412-851c-4652-acd8-6dc4bde027dc
BeginInvoke
BF.[@T=
BH{U#X
BinaryReader
BinaryWriter
Binder
BindingFlags
BitConverter
BitCount
Bitmap
(B+){K
BlockCopy
bl:oMh
blTree
blTreeCodes
Boolean
BringToFront
BrowsableAttribute
buffer
Buffer
buildFriendlyNumber
BuildFriendlyNumber
Button
ButtonBase
bytData
,/+.+/}C
C6L0{p
C9o.<'
callback
callingAssembly
Callvirt
CancelEventArgs
canContinue
CanContinue
CanDebug
CanSendReport
caughtException
.cctor
+c+d*+h{
Ceiling
CheckBox
childs
-$+C+Ht
codeLengths
Combine
CommonDialog
CompareExchange
CompilationRelaxationsAttribute
CompilerGeneratedAttribute
Component
ComponentResourceManager
CompressionMode
ComputeHash
ComVisibleAttribute
Concat
ContainerControl
Contains
ContainsKey
ContentAlignment
context
Control
ControlCollection
ControlStyles
Convert
Copyright 
_CorExeMain
countPosition
"="cpf
CreateDelegate
CreateDirectory
CreateEncryptor
CreateGraphics
CreateInstance
CreateSubKey
CryptographicException
CryptoStream
CryptoStreamMode
C$u+bV
Culture
CultureInfo
curMatch
currentException
CurrentUser
Cursor
Cursors
_CV}~9
,c+y8z
 &!C!_!z!
,#+(+)}D
d_23x>
d5V|_Zc
DataType
DateTime
[Dd;Q1
DebuggableAttribute
DebuggerLaunched
DebuggerNonUserCodeAttribute
DebuggingModes
decrypt
Default
defaultValue
+D+E+J{
Delegate
Delete
DeleteDirectory
DeleteFile
DesignerCategoryAttribute
DesignerSerializationVisibility
DesignerSerializationVisibilityAttribute
DialogResult
Dictionary`2
Directory
DirectoryInfo
DirectoryNotFoundException
DirectorySeparatorChar
Dispose
disposing
distance
DO?.==
DockStyle
DrawIcon
DrawImage
DrawLine
DrawText
-!D_v%
\{d>'Yj
dynamicFeatureCounts
DynamicFeatureCounts
DynamicMethod
e~	(2:h
EditorBrowsableAttribute
EditorBrowsableState
?ee6.i
ehoQXHFCcw
emailAddress
EmailAddress
Encoding
Encrypt
encryptedData
EndInvoke
EndsWith
Enumerator
Environment
errorMessage
ErrorMessage
eventArgs
EventArgs
EventHandler
*Ewj~T
exception
Exception
exceptionStackDepth
ExceptionStackDepth
exceptionToWrite
executingAssembly
existingFileName
Exists
ExtractIconEx
F'0WGc
f39U,0b
{f5490463-3e59-4db9-bbd4-3cf3ee06be06}
{f91f0a0c-ba4f-4cf9-94bc-57b6bc2960e4}
Failed
FalseString
fatalException
FatalException
fatalExceptionEventArgs
featureId
featureName
FeatureNameAttribute
&FfY?f
-*+F+G
*+F+G(3
FieldInfo
fieldType
FileAccess
FileDialog
FileInfo
FileLoadException
FileMode
fileName
FileNotFoundException
FileShare
FileStream
FindResource
finish
firstLevel
FirstLevel
_fJ/UP,y
FlatStyle
FlushFinalBlock
!	"F"M"
FM`658 
Fm@8N'qC:
F,MYd~
FontStyle
format
Format
FormatException
FormBorderStyle
FormStartPosition
fOZ``z
*F/{{QL
fQzCdH*~w^
FReVrrOCBJiwgwEnHoiCYRZOqUPErNOpHTEHzNNUOgmYjmlgFHnCXXBcbxB
FromBase64String
FromHandle
FromXmlString
,~FTb8`Xz
+fZC8NRm
+G3%+J+K~U
GCZ>' ?
gdi32.dll
GeneratedCodeAttribute
GenerateIV
GenerateKey
get_ApartmentState
GetArrayRank
get_ASCII
GetAssemblies
get_Assembly
get_BaseType
get_Bottom
GetBytes
GetCallingAssembly
get_CanFocus
get_Chars
get_Checked
get_ClientSize
get_CodeBase
get_ControlDark
get_ControlLightLight
get_Controls
get_Count
GetCultureInfo
get_Current
GetCurrent
get_CurrentCulture
get_CurrentDomain
GetCurrentProcess
get_CurrentThread
get_CurrentUICulture
GetCustomAttributes
get_Data
get_Day
get_DesignMode
get_DialogResult
GetElementType
GetEnumerator
get_Exception
get_ExceptionObject
get_ExecutablePath
GetExecutingAssembly
GetField
GetFields
get_FieldType
get_FileName
GetFileName
GetFileNames
GetFileNameWithoutExtension
get_Font
get_FontHeight
GetFrame
get_FrameCount
GetFrames
get_FullName
GetGetMethod
get_Graphics
get_Hand
get_HasElementType
get_HasValue
GetHdc
get_Height
get_Hour
get_Id
GetILGenerator
GetILOffset
get_InnerException
GetInt32
get_IsAlive
get_IsArray
get_IsByRef
get_IsEnum
get_IsInitOnly
get_IsLiteral
get_IsPointer
get_IsPrimitive
get_IsStatic
get_IsTerminating
get_IsValueType
get_Item
get_IV
get_Key
get_Keys
get_Left
get_Length
GetLength
get_Location
get_MainModule
get_Major
get_ManifestModule
GetManifestResourceNames
GetManifestResourceStream
get_Message
get_MetadataToken
GetMethod
GetMethodFromHandle
GetMethods
get_Minor
get_Minute
get_Module
get_ModuleHandle
GetModuleHandle
GetModuleHandleA
get_ModuleName
GetModules
get_ModuleVersionId
get_Month
get_Name
GetName
get_Namespace
get_Now
GetObjectData
get_OSVersion
GetParameters
get_ParameterType
get_Platform
get_Position
GetProcAddress
get_ProcessorCount
GetProperty
GetPublicKey
get_Rank
get_ReturnType
get_Right
get_Second
GetServerURL
GetSetMethod
get_Size
get_StackTrace
GetString
GetSystemInfo
GetSystemMetrics
GetTempFileName
GetTempPath
get_Text
get_Top
GetType
GetTypeFromHandle
GetTypes
get_Unicode
get_User
GetUserStoreForAssembly
get_UTF8
get_Value
GetValue
get_Version
GetVersionEx
get_Visible
get_Width
get_Window
get_Year
G&fsrh
Ghttp://www.smartassembly.com/webservices/UploadReportLogin/GetServerURL
GJpR@m
graphics
Graphics
GraphicsUnit
/gRH-=
GuidAttribute
GZipStream
GZR3&J
H4P-Ex
}H?Al"
Handler
HashAlgorithm
Hashtable
']he<~
hGdiObj
+H+I+J+K(
hModule
+H+M+U+Y-
hProcess
{h#q L
HttpWebClientProtocol
@http://www.smartassembly.com/webservices/Reporting/UploadReport2
HwygbonbSrIujrYNvRfKYxRgcpndNTCuxZPendpFWIYyWkekMa
 I(`5h
IAsyncResult
ICollection
IconState
IContainer
ICryptoTransform
IDictionary
IDisposable
IEnumerable
IEnumerator
iGiX[3
I@HTGn
ILGenerator
ilOffset
ILOffset
@ImGTfe
includeVersion
IndexOf
InitializeArray
+I+N+O"
inrwOOSUEWSGoRXXRKYpRTjDAIEssMUgsdcAQVblfmRNRkNRp
Interlocked
Intern
IntPtr
InvalidOperationException
Invoke
InvokeMember
IN	Y~X
IOException
IsEmpty
ISerializable
IsFinished
IsFlushed
IsNeedingInput
IsolatedStorageException
IsolatedStorageFile
IsolatedStorageFileStream
IsServerR2
IsWebApplication
IsWorkstation
IsWow64Process
IWebProxy
,@-}.iX
IxrM.-
,/+.+/}J
J5Z0Zi-;e
]~#j|B
JD	=pld
<}jGXV
+J+K~U
,),>,J,P,[,a,g,o,},
JqW8<f
jX+>+C+D+E
,#+(+)}K
kernel32
kernel32.dll
kernel32.Dll
KeTX016*^r
KeyCollection
KeyValuePair`2
KMicrosoft.VisualStudio.Editors.SettingsDesigner.SettingsSingleFileGenerator
Kp&iMCd
_KR ?C
=KV-#A
lastBlock
LastIndexOf
Ldarg_0
Ldarg_1
Ldarg_2
Ldarg_3
Ldarg_S
Ldc_I4
length
licenseID
LinkedList`1
LinkedListNode`1
List`1
?li~#ug
ll/-_+)
LoadFile
LoadResource
LocalMachine
loginResult
LoginServiceSoapT
lpRect
lpSystemInfo
lpszFile
Lr`JU9}
lXox=!
,M&&&*
MajorVersion
manuallyReported
Marshal
maxLength
MD5CryptoServiceProvider
MeasureString
MemberInfo
MemoryStream
MessageBox
MessageBoxButtons
MessageBoxIcon
method
Method
MethodBase
methodID
MethodID
MethodInfo
methodName
Microsoft.Win32
mIG~L9
minCodes
MissingMethodException
mmhkuJuToxczfrHhdWCDzJzzUprYAwotXAdjlVHwQrWfqyYaXShIHcUHkawh
mOD}D	
Module
<Module>
ModuleHandle
moduleName
Monitor
MoveFileEx
MoveNext
mscoree.dll
mscorlib
MulticastDelegate
mutexName
+Mz+Q 
n/\2qAD
	Namespace3http://www.smartassembly.com/webservices/Reporting/
	Namespace;http://www.smartassembly.com/webservices/UploadReportLogin/`
NdaAhjZNaclLvozqFWhSRdBCvBLAfVxTFUrhyInSeOkyhfdDcg
newFileName
NewGuid
nIconIndex
nIcons
NiH+Nn
-++N+O+P+U+V
notificationEmailSettings
Nullable`1
:Nv%f1J:k
n>VZvi
O~,^(2 
O<aiE8
Oa#wp'
obfuscatedName
object
Object
objectAndType
objects
Objects
objectToWrite
objectType
ObsoleteAttribute
offset
o'+ ?N
OnClosing
OnFontChanged
OnPaint
OnResize
OnTextChanged
OnVisibleChanged
OpCode
OpCodes
OpenSubKey
OpenWrite
op_Equality
OperatingSystem
op_Inequality
output
O@U@yB
+P59;Q 	
Padding
PaintEventArgs
pA+N{8
ParameterInfo
Params
PA+S{7
p)'c+~'
pending
PerformLayout
phiconLarge
phiconSmall
]Phuu'1
PictureBox
PictureBoxSizeMode
PlatformID
PoweredByAttribute
#Powered by SmartAssembly 6.5.0.1037
*p[;q1/
Process
ProcessModule
procName
PropertyInfo
pT ;pJYv
pYiZhl
):)P)Y)p)})
%qh	\|U
Qkkbal
qUse ShowContinueCheckbox instead, as this is now also false when the builder has chosen not to show the checkbox.
qvzWHXDGMPYnxxo
-Q.W.c.o.
,"+({r
R31qVF
R4-Fy*
[R&C'f
ReadByte
ReadUInt64
rectangle
Rectangle
ReferenceEquals
Refresh
Registry
RegistryKey
RegistryValueKind
relativeFile
ReleaseHdc
ReleaseMutex
@.reloc
Remove
Replace
reportData
ReportException
reportExceptionEventArgs
reportId
ReportID
ReportingService
ReportingService1
ReportingServiceSoapT
reportSender
repStart
Resize
ResolveEventArgs
ResolveEventHandler
ResolveMethodHandle
ResolveTypeHandle
ResourceManager
result
ResumeLayout
Reverse
RijndaelManaged
RSACryptoServiceProvider
`.rsrc
RuntimeCompatibilityAttribute
RuntimeFieldHandle
RuntimeHelpers
RuntimeMethodHandle
RuntimeTypeHandle
s0a.gUC
(s8-PN
SaveFileDialog
ScaleCore
securityException
SecurityException
securityExceptionEventArgs
SecurityIdentifier
securityMessage
SecurityMessage
SeekOrigin
SelectObject
sender
SendingReportFeedback
sendingReportFeedbackEventArgs
SerializationInfo
server
ServerFaultCode
serverURL
ServicePack
services
set_Anchor
SetApartmentState
set_AutoScaleBaseSize
set_AutoScaleDimensions
set_AutoScaleMode
set_AutoSize
set_AutoSizeMode
set_BackColor
SetBounds
set_ClientSize
SetClip
set_ControlBox
set_CurrentUICulture
set_Cursor
set_DefaultExt
set_DialogResult
set_Dock
set_Enabled
set_Filter
set_FlatStyle
set_Font
set_FormBorderStyle
set_Height
set_Icon
set_Image
set_ImageAlign
set_Interval
set_IsBackground
set_Item
set_Location
set_MaximizeBox
set_MaximumSize
set_MinimizeBox
set_Name
set_Padding
set_Position
set_Proxy
set_ShowInTaskbar
set_Size
set_SizeGripStyle
set_SizeMode
set_StartPosition
SetStyle
set_TabIndex
set_TabStop
set_Text
set_Timeout
Settings
SettingsBase
set_Title
SetToolTip
set_Top
set_TopMost
set_Url
set_UseCompatibleTextRendering
set_UseMnemonic
set_UseVisualStyleBackColor
SetValue
set_Visible
sF?O~MY
shell32
ShowContinueCheckbox
ShowDialog
SizeGripStyle
SizeOf
SizeofResource
,	+:sM
SmartAssembly.Attributes
SmartAssembly.SmartExceptionsCore
SmartAssembly.SmartUsageCore
SmartStackFrame
smIndex
,	+:sN
SoapDocumentMethodAttribute
SoapException
SoapHttpClientProtocol
StackFrame
StackTrace
StartsWith
STAThreadAttribute
staticFeatureCounts
StaticFeatureCounts
stCodes
stLength
stored
storedLength
storedOffset
Stream
StreamingContext
String
StringBuilder
stringID
#Strings
Stub.exe
Stub.Properties
SubkeyApplication
Substring
SUChoy
SuppressIldasmAttribute
SuspendLayout
SV~(\o
+S+X+]+^-
SymmetricAlgorithm
Synchronized
System
System.CodeDom.Compiler
System.Collections
System.Collections.Generic
SystemColors
System.ComponentModel
System.Configuration
System.Diagnostics
System.Drawing
System.Globalization
System.IO
System.IO.Compression
System.IO.IsolatedStorage
System.Net
SystemPens
System.Reflection
System.Reflection.Emit
System.Resources
System.Runtime.CompilerServices
System.Runtime.InteropServices
System.Runtime.Serialization
System.Security
System.Security.Cryptography
System.Security.Permissions.SecurityPermissionAttribute, mscorlib, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
System.Security.Principal
System.Text
System.Threading
System.Web.Services
System.Web.Services.Protocols
System.Windows.Forms
System.Xml
System.Xml.Serialization
t>|2$J
textLength
!This program cannot be run in DOS mode.
Thread
ThreadAbortException
ThreadExceptionEventArgs
ThreadExceptionEventHandler
ThreadStart
t|'_`m
ToArray
ToBase64String
ToBoolean
ToByte
ToHfont
ToInt32
ToInt64
ToLower
ToolTip
toReverse
ToString
TotalOut
ToUInt64
ToUpper
T~pc9<
"\TP(#h
transferingResult
TransformFinalBlock
TryToContinue
-T+T{d
typeInformation
uFDjX;fu
UInt16
UInt32
UInt64
UIntPtr
Unhandled Exception Encountered
UnhandledExceptionEventArgs
UnhandledExceptionEventHandler
unhandledExceptionHandler
Unhandled Exception Report Sent
UnmanagedCode
UploadReport2
UploadReportLoginService
UploadReportLoginService1
usageCounts
usageFile
user32
user32.dll
userId
UTF8Encoding
v2.0.50727
~'v'8G
value__
valueName
ValueType
vC>KW7A
version
Version
VersionInfo
versionKey
Vj~'B-!
vn;hf0
v`XMDPZ
w]90vM
WaitHandle
WaitOne
w^CS,~C
WebClientProtocol
WebServiceBindingAttribute
w$) $g_S
whenDone
WindowsIdentity
wow64Process
WowSubkeyApplication
WrapNonExceptionThrows
WriteAttributeString
WriteByte
WriteElementString
WriteEndDocument
WriteEndElement
WriteStartDocument
WriteStartElement
+W+X{b
X!J:Kz
X{jZ+;
XmlElementAttribute
xmlPublicKey
XmlQualifiedName
XmlTextWriter
xmlWriter
XmlWriter
x^`mT=
+X,N+Z{4
Xqx!HZ
xw t&A
y#1&a`
Y&`&i&q&w&~&I']'j't'
yWjkWt
YWSnShbq
YxuhfH
+Y+Z,S+]o8
+ +%+&(z
+Z+_+`~
Z+$+)+.
>Z#3jZ
#Z@6~{
,>+Z+b+f+j}
zC+.{J
+Z+_+g~
Z+H+M{0
Z+I+N+O"