Analysis Date2014-07-08 03:57:32
MD59b092e38e691a14d48dcd401b70d3419
SHA1e7ab4627d2b8863ad791448f4bc550275a8781bf

Static Details:

File typePE32 executable for MS Windows (GUI) Intel 80386 32-bit
Section.text md5: 0d1df81b5bd3150f653ca8ba86479604 sha1: bdba47818172f72a8cc32f150a8bcddfef3dd9b6 size: 44544
Section.data% md5: e0bc55f6829b6bb223f13a5f0ffaa5de sha1: a6313bb83fd4649b7f0054b26e428c0497120d6a size: 10240
Section.rdata> md5: 3773b8f6ce6e5f0d8c3f4520c67d030c sha1: 1ac45573ab47a257589aeb6a50957c3050b41f50 size: 8704
Section.rsrc md5: b96735b12c2616e3116dadae63c0739e sha1: 0e1005a4a3344caf8c0376132d0b5feac09c3e0e size: 11264
Timestamp2007-08-21 20:13:22
VersionInternalName: Scowl
ProductName: Huff Regal Nil Stuff Ante
FileVersion: 18351 50799 815322
ProductVersion: 18351 50799 4682
CompanyName: Cetus Software Inc.
PackerMicrosoft Visual C++ v7.0
PEhash029cb6510f29b784a31187304669e3ffaf31a8f2
IMPhash139ba377d65edf8be84129b02e7550b0
AV360 SafeTrojan.Downloader.JQRR
AVAd-AwareTrojan.Downloader.JQRR
AVAlwil (avast)Downloader-VHS [Trj]
AVArcabit (arcavir)no_virus
AVAuthentiumW32/Trojan.GGXY-6923
AVAvira (antivir)TR/FogelsLoader.I.13
AVCA (E-Trust Ino)no_virus
AVCAT (quickheal)no_virus
AVClamAVno_virus
AVDr. WebTrojan.DownLoad3.33417
AVEmsisoftno_virus
AVEset (nod32)Win32/TrojanDownloader.Elenoocka.A
AVFortinetW32/Tiny.NKF!tr.dldr
AVFrisk (f-prot)W32/Trojan3.IJS (exact)
AVF-SecureTrojan.Downloader.JQRR
AVGrisoft (avg)Zbot.IYJ
AVIkarusTrojan-Downloader
AVK7no_virus
AVKasperskyTrojan-Downloader.Win32.Agent.hemr
AVMalwareBytesSpyware.Zbot.VXGen
AVMcafeeDownloader-FSH!9B092E38E691
AVMicrosoft Security EssentialsTrojanDownloader:Win32/Zemot.A
AVMicroWorld (escan)Trojan.Downloader.JQRR
AVNormanno_virus
AVRisingno_virus
AVSophosTroj/Agent-AHDJ
AVSymantecDownloader.Ponik!gen5
AVTrend Microno_virus
AVVirusBlokAda (vba32)TrojanDownloader.Agent

Runtime Details:

Screenshot

Process
↳ C:\malware.exe

Creates FilePIPE\wkssvc
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temp\temp_cab_71812.cab
Creates File\Device\Afd\Endpoint
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temp\e7ab4627d2b8863ad791448f4bc550275a8781bf.doc
Creates File\Device\Afd\AsyncConnectHlp
Creates Process"C:\Program Files\Windows NT\Accessories\WORDPAD.EXE" "C:\Documents and Settings\Administrator\Local Settings\Temp\e7ab4627d2b8863ad791448f4bc550275a8781bf.doc"
Creates Mutex54348125
Winsock DNSwindowsupdate.microsoft.com

Process
↳ "C:\Program Files\Windows NT\Accessories\WORDPAD.EXE" "C:\Documents and Settings\Administrator\Local Settings\Temp\e7ab4627d2b8863ad791448f4bc550275a8781bf.doc"

Creates FilePIPE\lsarpc
Creates MutexCTF.TimListCache.FMPDefaultS-1-5-21-XXXXXXXXXX-XXXXXXXXXX-XXXXXXXXXX-500MUTEX.DefaultS-1-5-21-XXXXXXXXXX-XXXXXXXXXX-XXXXXXXXXX-500

Network Details:

DNSwww.update.microsoft.com.nsatc.net
Type: A
65.55.138.114
DNSwww.update.microsoft.com.nsatc.net
Type: A
157.55.240.90
DNSwindowsupdate.microsoft.com
Type: A
HTTP GEThttp://windowsupdate.microsoft.com/
User-Agent: Opera/9.25 (Windows NT 6.0; U; cn)
Flows TCP192.168.1.1:1031 ➝ 65.55.138.114:80

Raw Pcap
0x00000000 (00000)   47455420 2f204854 54502f31 2e310d0a   GET / HTTP/1.1..
0x00000010 (00016)   55736572 2d416765 6e743a20 4f706572   User-Agent: Oper
0x00000020 (00032)   612f392e 32352028 57696e64 6f777320   a/9.25 (Windows 
0x00000030 (00048)   4e542036 2e303b20 553b2063 6e290d0a   NT 6.0; U; cn)..
0x00000040 (00064)   486f7374 3a207769 6e646f77 73757064   Host: windowsupd
0x00000050 (00080)   6174652e 6d696372 6f736f66 742e636f   ate.microsoft.co
0x00000060 (00096)   6d0d0a43 6f6e6e65 6374696f 6e3a2043   m..Connection: C
0x00000070 (00112)   6c6f7365 0d0a0d0a                     lose....


Strings
  s 
..
.
.
040904B0
18351   50799  4682
18351  50799 815322
Ajax
Cetus Software Inc.
Comma
CompanyName
Crepe Banjo Lose
Enmity Gill Coda
FileVersion
Flirt Budge
Frogs Tricky Ideas
Hens Ltd
Huff Regal Nil Stuff Ante
InternalName
Kris
Look
Metal
MS Sans Serif
%/O3
Opal
Ouija
Phone
ProductName
ProductVersion
Scowl
Skew
StringFileInfo
Sweep
Symbol
Tack Lbs Askew
Tbsp
Translation
VarFileInfo
Violet Fuzz Crew
VS_VERSION_INFO
Welch
Who Shave Rattle
&;&;;&
@@ 0 <@
3N8;57
 3  `p
441644
45dga7cs7g65
5cwu$W
 5y PX
761oxx
77758682
833413222415
882642452744267
:8:'87
8gihepol
8@V@P(
=?9;5713-/)+
accept
AccessCheckByTypeResultList
Acebonu
ADVAPI32.DLL
Agojaji
Ajawexo
Alisef
 A l@P| @
alu1bqp8
Amabaju
Aridyn
AssignProcessToJobObject
Atupic
Avytep
BackupSeek
bSP p\@@0
Bu3RFeB
Bulyxe
Byjode
CallNamedPipeA
CallNamedPipeW
CancelDeviceWakeupRequest
CancelIo
cdewsva
CEKh|=
CGAjSx7v
CN?3"g
CommConfigDialogA
CompareFileTime
CompareStringA
connect
Corafi
CreateDirectoryA
CreateDirectoryExW
CreateFileA
CreateFileMappingA
CreateFileW
CreateHardLinkW
CreateJobObjectA
CreateJobObjectW
CreateMailslotA
CreateMailslotW
CreateMutexA
CreateNamedPipeW
CreateTimerQueueTimer
CreateWaitableTimerA
CreateWaitableTimerW
Cuwipud
Cyximik
`.data
DebugActiveProcess
DefineDosDeviceA
DeleteAtom
DeleteFileA
DeleteTimerQueueEx
Depuvo
DeviceIoControl
DialogBoxParamA
DnsHostnameToComputerNameW
Dohidez
 DS D_@
dWAFmveitXQuKP
Dytikid
e863cf24
Ebamin
Eboqiz
Ebymud
Ehaqote
Ehubeny
EhUFVp4x1EBPKY
Ejoxuve
Ejufahy
Ekiheq
EndDialog
EndUpdateResourceA
EndUpdateResourceW
Enelywo
Enipew
EnumCalendarInfoW
EnumDateFormatsA
EnumDateFormatsExW
EnumLanguageGroupLocalesA
EnumLanguageGroupLocalesW
EnumResourceLanguagesW
EnumResourceNamesA
EnumResourceNamesW
EnumSystemLanguageGroupsA
EnumSystemLanguageGroupsW
EnumTimeFormatsA
EnumUILanguagesA
EnumUILanguagesW
Epipeco
eQIxmmCUrg
EscapeCommFunction
Evetaze
Ewejyce
ExpandEnvironmentStringsA
ExpandEnvironmentStringsW
;&;&f;
FatalAppExitA
FatalAppExitW
FatalExit
fcmiut
&;ff;;&
fffff;
f&f;;f&s
fffsfs;&
;f;;fs
;f;&f&s
f;fsf;
ffsf;s
f;fss;
ff;ss;&;;
ff&s;s
ff&ssf
ffss;ffs
f&&;fsss
;f;fss&s;s
;ffs&&&;&sss
FileTimeToDosDateTime
FileTimeToLocalFileTime
FindAtomA
FindAtomW
FindClose
FindFirstFileA
FindFirstFileExA
FindFirstFileW
FindFirstVolumeMountPointA
FindNextChangeNotification
FindNextVolumeA
FindNextVolumeMountPointW
FindNextVolumeW
FindResourceA
FindResourceW
FindVolumeClose
FlushFileBuffers
FlushInstructionCache
fnqbpahvqi
FoldStringA
FoldStringW
FormatMessageA
FormatMessageW
FreeEnvironmentStringsA
FreeEnvironmentStringsW
FreeLibrary
;f;&s&;
&fs&&&;&&
f;&;&s
f&;s&;
;;fsf;;
&fs;;f
&fs&f;
f;&&sf
f;sf;&
fs&f&;&
;fsff&
f;sf&f
;fs&fff
fs&fffs
fsffs&;
fs;ff&;ss
fsfs&;&
fsfsfsssf
fsfssf&
&fsf&sssffs
;;fs;s
;fs;;s
f;&s;s
f&;s;;&s
&fs;sf
f;;ssf
f&;ss&&f
fs;&&s&;&f
fs;sf;&
fss&&f
&fssff;
fss;fffs
f;s&sfs
f&&ss;fs
fs&s&f;s
fssfss
fssf;&s&s;f
fssfss;s&s;;
;;f;&sss
;fss&s
;fss&;&&s
;fsss;&
&fsss&
f&s&ss
fs&;s&s
&&&;fsssf;
f&s&sss
fs;s;ss
fs&;ss;s
fsss;s;
;f&ssssf
f&s&sssf
&fsssss
f&&;&&;;sssssf
Gepivo
GetCommProperties
GetCommState
GetCommTimeouts
GetCompressedFileSizeW
GetComputerNameExA
GetComputerNameExW
GetComputerNameW
GetCPInfoExA
GetCurrentDirectoryA
GetCurrentProcess
GetCurrentThreadId
GetDateFormatA
GetDateFormatW
GetDefaultCommConfigA
GetDefaultCommConfigW
GetDiskFreeSpaceA
GetDiskFreeSpaceExA
GetDriveTypeA
GetDriveTypeW
GetExitCodeProcess
GetFileInformationByHandle
GetFileSize
GetFileTime
GetFullPathNameA
GetLastError
GetLocalTime
GetLongPathNameA
GetMailslotInfo
GetModuleFileNameW
GetModuleHandleA
GetNamedPipeHandleStateA
GetNamedPipeHandleStateW
GetNumberFormatW
GetPriorityClass
GetPrivateProfileIntW
GetPrivateProfileSectionA
GetPrivateProfileSectionNamesA
GetPrivateProfileStructA
GetPrivateProfileStructW
GetProcAddress
GetProcessAffinityMask
GetProcessHeaps
GetProcessPriorityBoost
GetProcessVersion
GetProfileIntA
GetProfileIntW
GetProfileStringA
GetProfileStringW
getprotobynumber
GetQueuedCompletionStatus
getservbyport
GetShortPathNameA
GetShortPathNameW
getsockname
getsockopt
GetStdHandle
GetStringTypeA
GetStringTypeExW
GetStringTypeW
GetSystemDefaultLCID
GetSystemInfo
GetSystemPowerStatus
GetSystemTime
GetSystemTimeAdjustment
GetSystemWindowsDirectoryW
GetTempFileNameA
GetTempPathA
GetThreadPriorityBoost
GetThreadTimes
GetTickCount
GetTimeFormatA
GetTimeFormatW
GetUserDefaultLangID
GetUserDefaultUILanguage
GetVersionExW
GetVolumeInformationA
GetVolumeInformationW
GetVolumeNameForVolumeMountPointA
GetVolumeNameForVolumeMountPointW
GetVolumePathNameA
GetVolumePathNameW
Gimeqof
GlobalAddAtomA
GlobalCompact
GlobalFix
GlobalHandle
GlobalMemoryStatus
GlobalUnfix
GlobalUnlock
GQTaVxDyYpIdHtY
Gugiqi
hF^\ZT
HkYGgCtx
hO6kWaEK
H@OHI$B
  >HPP
hpqcfrprk2foigd
_hread
Hucawyq
_hwrite
Igabeb
i^KIOM
inet_ntoa
Inewyvy
InitAtomTable
I@P@@ :
@ (IPP0
IsBadCodePtr
IsBadStringPtrA
IsBadStringPtrW
IsDBCSLeadByte
IsProcessorFeaturePresent
IsSystemResumeAutomatic
Isuvimu
IsValidLocale
Isywev
JaS6mNh5BhJ
jjjjjssssjs
jjjjjssssjssss@
jjjjjsssss
jjssjjjsssjsjjssjj
j,.(P$
jsj66o
jsssssssssssssssjssj
jvuedlmhqukiflc
Jydulif
Jyfoba
Jywyba
Kasono
@@KC@@
Kenojiq
KERNEL32.DLL
KIbI88LyDlai
KK~KK~nMn
KKKXMw
KKwM~Xn~
~KKwnMK~~
KKXMMM
KMK~~MKMMMK
KMKnMM
~~KMKw~~
KMKwKMMnnnK
KMMMMX
KMMwwMnXKMMM
KMMXKMK
KMnMMw
KMwM~MM~w
~KMwMMnK
KMXM~M
KMXMMMnMnw
KMXMXMMX
KMXwMXMwX
KnKMwKn
KnMKw~X
Kn~~nn
KnnwX~K
KnXM~~~~
Konyket
Kwn~Mn
KwnMwwXXMM
Kw~nwK
K~wXnwwwMKwK
KwX~X~~K
K~XMwM
KXwMXwnnMX
~K~Xwn
_lclose
LCMapStringA
LCMapStringW
_lcreat
_llseek
LoadModule
LoadResource
LocalAlloc
LocalCompact
LocalFileTimeToFileTime
LocalHandle
LocalShrink
LocalSize
LockFile
LockResource
_lopen
@lPT P
_lread
lstrcatA
lstrcmpA
lstrcmpiA
lstrcpynA
lstrcpyW
lstrlenA
_lwrite
lwvsosamk
Lyxihik
MapViewOfFile
MapViewOfFileEx
Mebecif
Mi@$Pa
MKKKM~MnwKM
M~KMKMwn
M~KMMn
MKMwwM
~MKM~Xn
MKM~X~w
~MKnMnM
MKnnM~
~MKnwwX
MKwKMKK
M~KwwMX
MKXw~~Xww
~MKXX~
MMKMK~w
MMKMwn~Kw
MMKwwKX~X
M~MKwX~KM
~MMKXnn~~~X
M~MMK~
MMMKMM~
MMMKnKn
MMMK~nX
M~MMMnKMM~w
MM~MnM
MMMwMX~
MM~MwnXXMKw~
MM~MXX
MMnKKw
MMnKKX
M~MnMX
MMnM~X~
MMn~nKMMM
MMw~nM
MMwnM~
MMwnMw~w
MMww~Kn
MMXM~MK
MMXMXwMX
MMXMXXX
M~MXXMnw
~MMXXwM
MnKn~~
Mn~KwXM~wKMn
~~MnKXK
Mn~~MX
MnwMnMX~XX
~MnwMw
MnwMXM~n
MnwwKwMw
~M~~nX
Mn~XK~XM
MnXMKMM
MnXwnnK~MwM
MoveFileA
MoveFileExA
Muqaly
Mw~KKnnK
M~wKM~
MwK~XMwM
MwMKMXw
M~wMKn
MwMM~M
MwMw~MK
MwMX~MKM
MwMXMM
MwwX~KM
MXM~Kw
MX~M~MXM~
MXMw~w~
MXwMMwKK
~~MXwMw
MXwM~wM
MX~XMM
~MXXMn
MX~XnX
MXXX~~M
Mybizuq
_____NAq
~nKKKw
n~K~KwKK
nKMM~Mn
nKwKMw
nMKK~n
~nM~~MKMM
nMMKMXwM~nK
nMMK~X
~nMMMK
nMMMMw
nM~MMw~MXn
nM~MXn~
~n~~Mn
nMnMnwwKM
~~nMXMnn
n~MXMw
nMXnn~
nMXnXKMnw
nnnwX~
nnwMMw
Nonugo
Noqodi
@N@P <  A
N@PvxPP!
nqaAuVst
NQVhX77t
nwKXMw
nwKXwX~MnMMM
nw~MKw
nwMKX~M
nwMMnMwXK
nwMnnwKwXKnM
n~wMwMnX~~~nX
~nwwn~M
nwXM~wM
nXMKnX
nXMwMXKw
nX~nMXKK
nXnwMn~
nXwXMwMMwM
~nXXwM
nXXwwM
ODKXKCIY
O!@ P@
OpenEventW
OpenFile
OpenSemaphoreW
OpenWaitableTimerA
Osiqed
OutputDebugStringA
Ovexav
/owEKITW+
Oxefof
Ozijes
  @P @ 
 P ]@'
;P@ @@ 
@? =|P
P@@@@ 
P  0@ 
@P19 ,h
P4e  Q@ 
@P4P@@B@ 
P 5@:@t
PDOYWQWYBKSHS
PeekNamedPipe
Petogo
P@@H@ 
@@  PH3@TP
Pijyxu
,  PIP
 POK   @x
PostQueuedCompletionStatus
PP   @[
pP 0PP
P 	"Pb
/ @P P @@H@
 PP nP
 PP@p 
 PP@P ?
P@ 'P@ P
PP@PP 
`P$P@Q
PPV BP
P@P X @
P @@PY
@ PQ@|
 	@PQV
PrepareTape
Process32FirstW
Process32NextW
ProcessIdToSessionId
@@@P@@=s
\ (PUA
Punemis
   PUP
PurgeComm
 +>P W
P  z  @
q @ \ 
QCoxiz
qjvBDoe
QO:44bb
QueryPerformanceCounter
.rdata
ReadDirectoryChangesW
ReadFileScatter
recvfrom
ReplaceFileA
ReplaceFileW
Reqejab
ResumeThread
\:RLNI
Rudesa
r ]v'gp}GF
rWsbDSAiKt
&&&s&&
select
SendMessageW
SetCalendarInfoA
SetCurrentDirectoryA
SetDefaultCommConfigA
SetDefaultCommConfigW
SetEnvironmentVariableW
SetErrorMode
SetFileAttributesW
SetFilePointerEx
SetHandleCount
SetLocaleInfoW
SetLocalTime
SetPriorityClass
SetProcessPriorityBoost
SetProcessShutdownParameters
SetProcessWorkingSetSize
setsockopt
SetSystemPowerState
SetSystemTime
SetTapePosition
SetThreadIdealProcessor
SetThreadPriority
SetThreadPriorityBoost
SetVolumeLabelW
SetVolumeMountPointA
SetVolumeMountPointW
&;s&f;
&s;&f;
s;f;&f&
s&&&ff
sf;&;f
;s&fff&
s&&f&ff
sf;fff
s;fffs
&sffs&;
s;;&&;&f;fs
s&&f;;fs&
sf;;fs;
sff&sf
sffsfsf
;sffss;&
s&ffss
sffs&s;&
sffss&
sff;ssfsf&f;ss&&s
;sfs&;
&;s;fs;
&s&f;;&s
s;;;fs
s;f&&;s&
s&;fs;
s&fs&;
sf&;&s;
sf&sf&
&sfsfs
&&s&f;sfs
s;fsfs
s;fsfs;
sf&s;&;&f;;s&
sf&sfsf
&;s&fsf&sf&ff;f
sf&&;s;fss
;;sfss
&sfs;s;
s;;fs;s
s&;;f;&ss
s&f;ss
sf;;ss&
sf&s&;s
sfss&&;
s&fss;s
sfsss;
sfssss
;sfss;;s&s
;sfss&&ssss
shutdown
SignalObjectAndWait
SleepEx
;;;&ss&
;;&s&s
;s;;&s
;s;;&s&
;s&;s&
&&s;&s
&&ss;;
&s&;;s
&ss;&;
s;&&&&s&
s&&;s;;
ss;;&;
&ss&&f
s;;s&f
s;&sf&
s&;sf&
s&&&sf
s&s;&&&f
ss;&;f
;&s;sff
ssf&;f
&ssfff
ss;ffff&
s&sfff;s
&s&sf;fs
ssf&fs
;s;sf&s&&;
;s&sfs&
s&sf;;s;
ss;f&s
ss&f;s
s;sfsf
&s;sf&ss
ss&&fss
ssfssf
ssfs&;s&s;ff
s&sfssss&
ss;fssssf
ssf;;sssss
ssjsjsjsjj
;s;s&s
;s&ss&
;ss&&s
;ss&s&
&;sss&;
&s;&;ss;;
s;&;ss
s;&&ss
s;s&s&
s;ss;&
s;ss&&
s&ss;;
ss&;s;
ss&s;;
ss;sf&
ss&s;f
sss&;;f
sssf&f
ss&sfs
sss&f&s
sssf;&s
sssfs;
sssf;s&ff
sssfss
sss;fss
sssfs;s
sss&fsssss
;&ssss
;s;sss
;sss;s;
;ssss&
&s&sss
&sss&s
s;s&ss
s;sss;
s&;sss
s&ss;s;
ss;s;s
ss&&&s&s
ss&ss;
sss;s;
ssssf;
ssssf&&
ssssff
ssssfs
;sssss
&sssss
s;ss;s&s&&f
ss;sssf
ss&sssff
ss&ssss
sss&ss;s
ssssssf
&ssss&sssf;
SuspendThread
  {T 3
!This program cannot be run in DOS mode.
TlAlloc
TlsGetValue
TlsSetValue
Tozivi
tqIupW
TransactNamedPipe
UnhandledExceptionFilter
UpdateResourceW
USER32.DLL
uSYtnKlHw24oQ
Utajew
Utapifi
=UtD@}
Uxusar
Uzusiha
Vajuwiv
Vawohu
VcePWJntFBoIF
VerifyVersionInfoA
VerSetConditionMask
Vizoly
vkqlvaaywl
Vorete
vsdnxAlu
WaitCommEvent
WaitForMultipleObjects
WaitForMultipleObjectsEx
WaitForSingleObject
WideCharToMultiByte
wK~KXKK~n
w~KMMKKn~~w
wKMn~nM
~wKMX~MX
wK~wwM
~~wKXK
w~MKwKw
wMMMwn
wM~MXM~K
wMwXMw
wMXMMn
~wMXMwnMK
w~MXXM
wnKMXw
~wnMKM
wnMM~M~K
~wnMMn
wnnKX~
w~nnKXMnM
wnnwXn
~wnw~X
Wofesex
)wP@ 5C@P
 _WqP P@
WritePrivateProfileSectionA
WritePrivateProfileSectionW
WritePrivateProfileStringA
WritePrivateProfileStructA
WriteProfileSectionA
WS2_32.DLL
WSAAsyncGetHostByAddr
WSAAsyncGetHostByName
WSAAsyncGetProtoByNumber
WSACancelAsyncRequest
WSACloseEvent
WSADuplicateSocketW
WSAEnumNetworkEvents
WSAEnumProtocolsW
WSAEventSelect
WSAGetQOSByName
WSALookupServiceEnd
WSALookupServiceNextA
WSARecvDisconnect
WSARecvFrom
WSAResetEvent
WSASendDisconnect
WSASetLastError
WSASetServiceW
WSASocketA
WSAStartup
WSAStringToAddressA
WSCEnumProtocols
WSCGetProviderPath
WSCInstallProvider
wwKwnMnX
~wwMMn~
w~wMnM
wwn~K~
w~wnMM
w~w~XKMw
wwXwnMKnnK~
wXKwnM
~wXMMMw
wXM~Mn
wXMnMM~K
wX~nMKM
wXnMwMn
wXnXMn
wXwXKK
wXXnMn
w~~XXX
w`=yjk
Xireje
XKKMMKM
XKnKwK
XKnwMX
XKnXwKw
XKwM~~
X~KwXMn
XKXXMMKwnnw~w
x!lnhk
XM~KKwwXXn
XMKMX~
XMKXMKM
XMMKMnnMM
XMMMw~nMKM
XMMMXK
XMMMXXK
XMM~~wnn
XMn~MMnn
XMnww~
~XMwKM
XMw~XM
~XMXMXMX
XMXXM~~
XnKKnXMK
Xn~Kn~nMn
~X~nMM
XnMMMM
~XnMnX
Xn~MX~
XnMXM~
X~n~wK
Xnw~Mw~KM
~XnwwKwK~
X~nX~~
X~~nXK
Xukoci
XwMK~~
~XwMwM~M
XwM~wnM
~~XwnMKMw
~XwnMM
~~XwnXK~
XwXK~MKM
X~wXXM
X~XK~M
X~XKwXw
~XXnMMMMn
XXXM~KX
x@@%YP
) Y*[c
Yduvun
YIXHJC
YJ3ct9e~
Yjojoba
Ylejam
YLLEkCmQ4hDk2Bt
yptaifvbg
yrqibfyijqqnf
Yrywas
Ysidygo
yuwqm(|b
y{uwqsmoikegac
]_Y[UWQSMOIKEGAC}
Yvobuj
Zabaje
Zaxusa
Z@I ] @@
Zopazi