Analysis Date2014-08-30 04:10:11
MD5b057e6dd89e717d5d453a53a31243d4e
SHA15f96183b22c65d88f8c0bf0591cb2d40ad9d3eb5

Static Details:

File typePE32 executable for MS Windows (GUI) Intel 80386 32-bit
Section.text md5: e27ce75099d96da160c970632c5ff365 sha1: 092ee61c96341cd95914c743d3de8d17f6d9065b size: 25600
Section.rdata md5: 31db533680e24dcc109ac38afc7e82d9 sha1: 392f80497843a3fa500ea3fb41696d29b0c4dc78 size: 7680
Section.data md5: 7f49aed0a09546a5f1b53211711919c4 sha1: 890305400eba9b156170155ac0c0380988794532 size: 3584
Sectionxxx md5: 5b3d9184e6630c5b60b13d8277d2d89b sha1: 824b18df23581e99beffbe34220d14ed4161c7b4 size: 148992
Section.rsrc md5: a8eaa2c405bc232228a6261c285e20ea sha1: e9d5d9223f2ac01b702dc797f3bc65571bb3c08b size: 512
Section.reloc md5: 0042304b70780f226d89a5cb53d34fe0 sha1: 7916cc2f5b10e6513b6dcdc93e5572842f9c27ee size: 3584
Timestamp2014-08-25 06:04:03
PackerMicrosoft Visual C++ ?.?
PEhasha30165c0fc0452e2f79bbb6a83adfe9fca1df28c
IMPhash336d69643a4996e1731690959b60f1d6

Runtime Details:

Screenshot

Process
↳ C:\malware.exe

Network Details:


Raw Pcap

Strings
.CC
 
..@
0..
@..
;
.p
.
.,2.(
..
.
...

                                 H
         (((((                  H
         h((((                  H
KERNEL32.DLL
mscoree.dll
MS Shell Dlg
^====%
= =%=+=
                          
; ;$;(;,;
0$0,040<0D0L0T0\0d0l0t0|0
 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
: :$:(:,:0:4:8:<:@:D:H:L:P:T:X:\:`:d:h:l:p:t:x:|:
`05@i!
%070B0Y0p0|0
0A@@Ju
0;BoDBoHR0
0@p{`r
:#:(:,:0:Q:{:
0S0X0_0d0k0p0
0SSSSS
0WWWWW
10L4<A
1#1-1:1
1,121=1I1^1e1y1
1%131<1F1
1eL/u]
!	1,xB
2$2<2K2R2_2
2/292L2p2
22=Kk|
2$3(30343P3l3p3
2=3Z3w3
272B2e2)363D3p3
282L2^2e2k2}2
\2BuhH
2I2W2]2m2r2
;@2SSa
2xQO4y
%$+3}	
3-333O3g3
3}4M2~
3c>f\D
=!=3=E=W=i=`>j>
3H4X4h4x4
3m;-AIV
4181<1@1
41]t;u
4^	4["
4 4<4@4`4|4
4*444l4t4
4#4P4k4q4z4
$47K-Qf
4l7nMT
4t:R1C
5!5)525>5C5H5N5R5X5]5c5h5w5
5 5@5`5
5(5-5=5G5N5Y5b5x5
5 5$5M5s5
5 575P5l5u5{5
5!5X5i5
5F#$LX
"5	QQQQY*;
5	QQQQY$;
617>7[7
643w_3
6-6]6b6p6y6
6#6i6o6{6
6#6M6R6]6b6
6#6r6x6
6-74787<7@7D7H7L7P7
6%7.7:7q7z7
6S8a8g8
6TF?]&
6u4XvB
72878_8
7GtejG36
7_`y|3
:/7"Zl
80>0a0f0
8&8-848;8B8I8P8X8`8h8t8}8
8'8J8~8
8IbsQNA
8L{~9t
>'>8>t>
8t%&S/
`^/8&U
9.20arQ
93o<]qF
9#9.939;9A9K9R9f9m9s9
9 9$9(9,90949~9
9<9G9S9Z9d9
<!<9<e<
9ly~cN3
9o*iAS
AAFFf;
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
aF $3V'TL
> >A>G>y>
Ah5b@"
a=k{<\
An application has made an attempt to load the C runtime library incorrectly.
A@+s1o
A$S.:B
- Attempt to initialize the CRT more than once.
- Attempt to use MSIL code from this assembly during native code initialization
August
a]u	#Y
AvW.0I&w
|Axe'v-
A\xY4XF
B53!z)b
BeginPaint
bjPSH3
BOvs^c
BqwB46@q
B!(w,z
Byc4>3
>cEPg]
Cf`oNT4
cL:m%h
c' nJ~K
CO"5'=
CorExitProcess
CreateWindowExW
- CRT not initialized
c&;v4r_
$_c*}Y
>D0tKA5
d{\10h
;$d\9#h
_d#a 9GB
@.data
dddd, MMMM dd, yyyy
December
DecodePointer
DefWindowProcW
}DEg.n
DeleteCriticalSection
DialogBoxParamW
DispatchMessageW
Dlk'i0L
DlX]Sk
DOMAIN error
DU]@S~=8
*d X|K
E5ANfl
EBiAIS#Yo:
EncodePointer
EndDialog
EndPaint
EnterCriticalSection
E\OP:M
e rD3)
ERUp7i>pQ
ExitProcess
EzrF>2
]F1~l<!q^
f*ACR]
FCK#8/
February
`(fE@k
fi?7>&
FkJfT_
>f?k?p?u?
FL|#& M<
- floating point support not loaded
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
,f+N&(
F,!P1;
}fQr%6
FreeEnvironmentStringsW
Friday
FTYo9l
(`	Fu(
.fUzf?qH
G$C4~=
GetACP
GetActiveWindow
GetCommandLineW
GetCPInfo
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentStringsW
GetFileType
GetLastActivePopup
GetLastError
GetLocaleInfoA
GetMessageW
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessWindowStation
GetStartupInfoA
GetStartupInfoW
GetStdHandle
GetStringTypeA
GetStringTypeW
GetSystemTime
GetSystemTimeAsFileTime
GetTickCount
GetUserObjectInformationA
Gi#~Rz
GmJxvd
g(nBc8!u
GO/1kB[
G=unDx
Gy'd<#
h>4 Od 
H-5%e:
'H5sAC
[hdx(r
HeapAlloc
HeapCreate
HeapFree
HeapReAlloc
HeapSize
HH:mm:ss
Hh%[r)
H@N&g=
H=o E$i
Hq3(%C
HX&T6<
I.2Mv[1
&IMc/E?
InitializeCriticalSectionAndSpinCount
InterlockedDecrement
InterlockedIncrement
IsDebuggerPresent
ISRxuH
@I|-sv
IsValidCodePage
@iwcT	K>9DN
iWlZ+gjp_9
Ix<Uwo
IXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
i=Y*DX
 j.7	I
JanFebMarAprMayJunJulAugSepOctNovDec
January
&jBG^Pk
?"?J?c?
jJBo5a
j@j ^V
+j^Xnr,
&,JxQ3
[K1pI/uH
k9d{rw[
KAei87}
KERNEL32.dll
kFZ/&S
kG>{:E
KntGOR
&k^q`L
kuPj\{
,La\s[
/LBz6g
LCMapStringA
LCMapStringW
LeaveCriticalSection
Lhvd)Kv
lNzt].u
LoadCursorW
LoadLibraryA
Loot1	
L<:=t*
L.u3 E&
ly1V{i
m'2pmu
Mdgo3 
MessageBoxA
m">fDlj
m~[G@g
Microsoft Visual C++ Runtime Library
.	Mie~$q
	MJ6,:s
MM/dd/yy
MM]xLT&
Monday
MultiByteToWideChar
{mxkZ9
m;}#y;
~n^5L*
NGN1)0
<NKriV.
Nn2E#G
- not enough space for arguments
- not enough space for environment
- not enough space for locale information
- not enough space for lowio initialization
- not enough space for _onexit/atexit table
- not enough space for stdio initialization
- not enough space for thread data
November
Nq}I;0
N<(S@:
O<===B
October
O)]hv~_3X
}}o(z`B
^P5 @Xt
P]7cp^
;$	PA/
pkg2Lf
]	pK]L
Please contact the application's support team for more information.
pL`i%,
PostQuitMessage
PPPPPPPP
Program: 
<program name unknown>
p>T9Or
<pU"Ak
- pure virtual function call
PvdetQ;
@	<,<<q
'Q0u)v1
QDQj!l
<===QFSo
Q-&+G$I
:Q*iP}
Q`/koTo
<q<:MN
QQSVWh
QT:^9C
QueryPerformanceCounter
q`"YLR
; ;r;};
:-[r%[
r1ndn*
`.rdata
r:d@u;2=
RegisterClassExW
@.reloc
{rl=SL+(
RNbNHJ
``RO~>
RtlUnwind
runtime error 
Runtime Error!
s}8#fDp
Saturday
Sb`<]e3
September
SetHandleCount
SetLastError
SetUnhandledExceptionFilter
sG]Hm/
ShowWindow
SING error
sk;:F]f
sLa58'
s"Qiz!
/SS?oL-ZC
Sunday
SunMonTueWedThuFriSat
s-$?Z7
T"2}"V
T &598
&t:AI4
#tcN8h
TdulV5
TerminateProcess
This application has requested the Runtime to terminate it in an unusual way.
This indicates a bug in your application.
This indicates a bug in your application. It is most likely the result of calling an MSIL-compiled (/clr) function from a native constructor or from DllMain.
!This program cannot be run in DOS mode.
Thursday
tjILF^mG
T?KKzu
TLOSS error
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
TranslateMessage
t"SS9]
Tuesday
;t$,v-
t+WWVPV
u1&9'-B
u]BOGd{
UG[m+/?
Ug[RlN
uM7)Pn
- unable to initialize heap
- unable to open console device
- unexpected heap error
- unexpected multithread lock error
UnhandledExceptionFilter
UpdateWindow
UQPXY]Y[
URPQQhhQ@
USER32.dll
USER32.DLL
V0T&U|:
V8GeT?
~vb+f9
;V:iJuD
VirtualAlloc
VirtualFree
;Vjez3s
vm+IY>
v>M(Qu\
v	N+D$
v(~r3&
VSVVVV
VxK\|3Ti_
v$/x{t,
VZK)^J
w_?3.`
Wednesday
WideCharToMultiByte
W^:`k)#
WriteFile
WUjFrQWLu
 :\WyE
x1Bd	F
xilOEN3[
#*xU%/_
y4|wm8
Y7-E/z
y[~Fk 
y'JOO.
YlElq#
yMh9XD
yn~SHZ
%Y$.Oc
YP qlK
`y*syBv{
>=Yt1j
y/+/T9
yv?L#nG3
YzVq8pgo
|Z51"L
 Zab2G;/	M
zh8J5q"
/^ZLI`
Zn8iWM
zq]*jv,HM
ZsAuRE8J^
Zw%K!C