PESCAN.IO - Analysis Report

File Structure:
Analysis Image
Information:
Icon: Icon
Size: 1,84 MB
SHA-256 Hash: 1260EED47C7E8200B78673397274E859BD1A3A7ABE6EC8C6880DBE5FDCCFE068
SHA-1 Hash: 31A42D1EE898F3B8897434B4FE29ECAB7F3EBF15
MD5 Hash: AF766168B41E3707457AB1541DEC80FB
Imphash: C5C870B0B3DFE5E9C220CD9D7B8368C3
MajorOSVersion: 6
CheckSum: 001D9617
EntryPoint (rva): 1474
SizeOfHeaders: 400
SizeOfImage: 1D8000
ImageBase: 0000000140000000
Architecture: x64
ExportTable: 2350
ImportTable: 23AC
Characteristics: 22
TimeDateStamp: 52C5FDE3
Date: 03/01/2014 0:01:39
File Type: EXE
Number Of Sections: 6
ASLR: Disabled
Section Names (Optional Header): .text, .rdata, .data, .pdata, .rsrc, .reloc
Number Of Executable Sections: 1
Subsystem: Windows GUI
UAC Execution Level Manifest: asInvoker

Sections Info:
Section Name Flags ROffset RSize VOffset VSize
.text 60000020 (Executable) 400 1000 1000 ED4
.rdata 40000040 1400 C00 2000 AF4
.data C0000040 (Writeable) 2000 200 3000 5E0
.pdata 40000040 2200 200 4000 168
.rsrc 40000040 2400 1D1E00 5000 1D1CF8
.reloc 42000040 1D4200 200 1D7000 14
Description:
InternalName: WinWord
OriginalFilename: WinWord.exe
CompanyName: Microsoft Corporation
ProductName: Microsoft Office 2013
FileVersion: 15.0.4569.1504

Entry Point:
The section number (1) have the Entry Point
Information -> EntryPoint (calculated) - 874
Code -> 4883EC28E873FCFFFF4883C428E9C6FDFFFF90904883EC28488D0D0D070000FF15BF0B000033C04883C428C3534883EC2048
SUB RSP, 0X28
CALL 0XC7C
ADD RSP, 0X28
JMP 0XDD8
NOP
NOP
SUB RSP, 0X28
LEA RCX, [RIP + 0X70D]
CALL QWORD PTR [RIP + 0XBBF]
XOR EAX, EAX
ADD RSP, 0X28
RET
PUSH RBX
SUB RSP, 0X20

Signatures:
Rich Signature Analyzer:
Code -> 0F93F31B4BF29D484BF29D484BF29D482484364848F29D48506F014849F29D48506F374845F29D48506F364849F29D48B78521484AF29D48B78526484AF29D484BF29C4872F29D48B785244848F29D48B78520484AF29D48B78525484AF29D48B7852A484AF29D48B78527484AF29D48526963684BF29D48
Footprint md5 Hash -> 59287194377593E4A9DB3C070F99F4E7
• The Rich header apparently has not been modified
Certificate - Digital Signature:
• The file is signed and the signature is correct

Packer/Compiler:
Detect It Easy (die)
PE+(64): compiler: Microsoft Visual C/C++(2010)[-]
PE+(64): linker: Microsoft Linker(10.10*)[EXE64,signed]
PE+(64): Sign tool: Windows Authenticode(2.0)[PKCS 7]
Entropy: 3.70576

Suspicious Functions:
Library Function Description
KERNEL32.DLL GetProcAddress Retrieves the address of an exported function or variable from the specified dynamic-link library (DLL).
KERNEL32.DLL IsDebuggerPresent Determines if the calling process is being debugged by a user-mode debugger.
File Access:
winword.exe
offxml.dll
KERNEL32.dll
MSVCR100.dll
MSO.Dll
Temp

File Access (UNICODE):
wwlib.dll
AddDllDirectorykernel32.dll
msi.dll
WinWord.exe

Interest's Words:
exec
attrib
start
cipher

URLs:
http://schemas.microsoft.com/SMI/2005/WindowsSettings
http://crl.microsoft.com/pki/crl/products/MicrosoftTimeStampPCA.crl
http://www.microsoft.com/pki/certs/MicrosoftTimeStampPCA.crt
http://crl.microsoft.com/pki/crl/products/MicCodSigPCA_08-31-2010.crl
http://www.microsoft.com/pki/certs/MicCodSigPCA_08-31-2010.crt
http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl
http://www.microsoft.com/pki/certs/MicrosoftRootCert.crt
http://office.microsoft.com

IP Addresses:
15.0.0.0

Strings/Hex Code Found With The File Rules:
Rule Text (Ascii): Anti-Analysis VM (IsDebuggerPresent)
Rule Text (Ascii): Stealth (VirtualProtect)
EP Rules: Microsoft Visual C++ 8.0 (DLL)
EP Rules: Microsoft Visual C++ 8
EP Rules: Microsoft Visual C++ 8
EP Rules: VC8 -> Microsoft Corporation

Resources:
Path DataRVA Size FileOffset CodeText
\ICON\1\1033 8700 2E8 5B00 2800000020000000400000000100040000000000000200000000000000000000000000000000000000000000000080000080(... ...@.........................................
\ICON\2\1033 89E8 128 5DE8 2800000010000000200000000100040000000000800000000000000000000000000000000000000000000000000080000080(....... .........................................
\ICON\3\1033 8B10 1628 5F10 2800000040000000800000000100080000000000001000000000000000000000000100000001000000000000945228009654(...@........................................R(..T
\ICON\4\1033 A138 EA8 7538 2800000030000000600000000100080000000000000900000000000000000000000100000001000000000000945228009654(...0.......................................R(..T
\ICON\5\1033 AFE0 8A8 83E0 2800000020000000400000000100080000000000000400000000000000000000000100000001000000000000945228009654(... ...@....................................R(..T
\ICON\6\1033 B888 568 8C88 2800000010000000200000000100080000000000000100000000000000000000000100000001000000000000955228009754(....... ....................................R(..T
\ICON\7\1033 BDF0 106B 91F0 89504E470D0A1A0A0000000D49484452000001000000010008060000005C72A866000000097048597300000EC300000EC301.PNG........IHDR.............\r.f....pHYs.........
\ICON\8\1033 CE60 94A8 A260 2800000060000000C00000000100200000000000809400000000000000000000000000000000000000000000000000000000(............ ...................................
\ICON\9\1033 16308 67E8 13708 2800000050000000A00000000100200000000000C06700000000000000000000000000000000000000000000000000000000(...P......... ......g............................
\ICON\10\1033 1CAF0 5488 19EF0 2800000048000000900000000100200000000000605400000000000000000000000000000000000000000000000000000000(...H......... .....T............................
\ICON\11\1033 21F78 4228 1F378 2800000040000000800000000100200000000000004200000000000000000000000000000000000000000000000000000000(...@......... ......B............................
\ICON\12\1033 261A0 3A48 235A0 280000003C000000780000000100200000000000203A00000000000000000000000000000000000000000000000000000000(...<...x..... ..... :............................
\ICON\13\1033 29BE8 25A8 26FE8 2800000030000000600000000100200000000000802500000000000000000000000000000000000000000000000000000000(...0........ ......%............................
\ICON\14\1033 2C190 1A68 29590 2800000028000000500000000100200000000000401A00000000000000000000000000000000000000000000000000000000(...(...P..... .....@.............................
\ICON\15\1033 2DBF8 10A8 2AFF8 2800000020000000400000000100200000000000801000000000000000000000000000000000000000000000000000000000(... ...@..... ...................................
\ICON\16\1033 2ECA0 988 2C0A0 2800000018000000300000000100200000000000600900000000000000000000000000000000000000000000000000000000(.......0..... ..................................
\ICON\17\1033 2F628 6B8 2CA28 2800000014000000280000000100200000000000900600000000000000000000000000000000000000000000000000000000(.......(..... ...................................
\ICON\18\1033 2FCE0 468 2D0E0 2800000010000000200000000100200000000000400400000000000000000000000000000000000000000000000000009D59(....... ..... .....@............................Y
\ICON\19\1033 30250 2E8 2D650 2800000020000000400000000100040000000000000200000000000000000000000000000000000000000000000080000080(... ...@.........................................
\ICON\20\1033 30538 128 2D938 2800000010000000200000000100040000000000800000000000000000000000000000000000000000000000000080000080(....... .........................................
\ICON\21\1033 30660 2CA8 2DA60 2800000060000000C000000001000800000000000024000000000000000000000001000000010000000000007F6400006767(...................$.......................d..gg
\ICON\22\1033 33308 1BC8 30708 28000000480000009000000001000800000000004014000000000000000000000001000000010000000000007F6400006767(...H...............@........................d..gg
\ICON\23\1033 34ED0 1628 322D0 28000000400000008000000001000800000000000010000000000000000000000001000000010000000000007F6400006767(...@........................................d..gg
\ICON\24\1033 364F8 1418 338F8 280000003C000000780000000100080000000000100E000000000000000000000001000000010000000000007F6400006767(...<...x....................................d..gg
\ICON\25\1033 37910 EA8 34D10 28000000300000006000000001000800000000000009000000000000000000000001000000010000000000007F6400006767(...0.......................................d..gg
\ICON\26\1033 387B8 BA8 35BB8 28000000280000005000000001000800000000004006000000000000000000000001000000010000000000007F6400006767(...(...P...........@........................d..gg
\ICON\27\1033 39360 8A8 36760 28000000200000004000000001000800000000000004000000000000000000000001000000010000000000007F6400006767(... ...@....................................d..gg
\ICON\28\1033 39C08 6C8 37008 28000000180000003000000001000800000000004002000000000000000000000001000000010000000000007F6400006767(.......0...........@........................d..gg
\ICON\29\1033 3A2D0 608 376D0 28000000140000002800000001000800000000009001000000000000000000000001000000010000000000007F6400005757(.......(....................................d..WW
\ICON\30\1033 3A8D8 568 37CD8 28000000100000002000000001000800000000000001000000000000000000000001000000010000000000007F6400005757(....... ....................................d..WW
\ICON\31\1033 3AE40 902 38240 89504E470D0A1A0A0000000D49484452000001000000010008060000005C72A866000000097048597300000EC300000EC301.PNG........IHDR.............\r.f....pHYs.........
\ICON\32\1033 3B748 94A8 38B48 2800000060000000C00000000100200000000000809400000000000000000000000000000000000000000000000000000000(............ ...................................
\ICON\33\1033 44BF0 5488 41FF0 2800000048000000900000000100200000000000605400000000000000000000000000000000000000000000000000000000(...H......... .....T............................
\ICON\34\1033 4A078 4228 47478 2800000040000000800000000100200000000000004200000000000000000000000000000000000000000000000000000000(...@......... ......B............................
\ICON\35\1033 4E2A0 3A48 4B6A0 280000003C000000780000000100200000000000203A00000000000000000000000000000000000000000000000000000000(...<...x..... ..... :............................
\ICON\36\1033 51CE8 25A8 4F0E8 2800000030000000600000000100200000000000802500000000000000000000000000000000000000000000000000000000(...0........ ......%............................
\ICON\37\1033 54290 1A68 51690 2800000028000000500000000100200000000000401A00000000000000000000000000000000000000000000000000000000(...(...P..... .....@.............................
\ICON\38\1033 55CF8 10A8 530F8 2800000020000000400000000100200000000000801000000000000000000000000000000000000000000000000000000000(... ...@..... ...................................
\ICON\39\1033 56DA0 988 541A0 2800000018000000300000000100200000000000600900000000000000000000000000000000000000000000000000000000(.......0..... ..................................
\ICON\40\1033 57728 6B8 54B28 2800000014000000280000000100200000000000900600000000000000000000000000000000000000000000000000000000(.......(..... ...................................
\ICON\41\1033 57DE0 468 551E0 2800000010000000200000000100200000000000400400000000000000000000000000000000000000000000000000000000(....... ..... .....@.............................
\ICON\42\1033 58390 2E8 55790 2800000020000000400000000100040000000000000200000000000000000000000000000000000000000000000080000080(... ...@.........................................
\ICON\43\1033 58678 128 55A78 2800000010000000200000000100040000000000800000000000000000000000000000000000000000000000000080000080(....... .........................................
\ICON\44\1033 587A0 2CA8 55BA0 2800000060000000C00000000100080000000000002400000000000000000000000100000001000000000000707072007777(...................$......................ppr.ww
\ICON\45\1033 5B448 1BC8 58848 2800000048000000900000000100080000000000401400000000000000000000000100000001000000000000707072007777(...H...............@.......................ppr.ww
\ICON\46\1033 5D010 1628 5A410 2800000040000000800000000100080000000000001000000000000000000000000100000001000000000000707072007777(...@.......................................ppr.ww
\ICON\47\1033 5E638 1418 5BA38 280000003C000000780000000100080000000000100E00000000000000000000000100000001000000000000707072007777(...<...x...................................ppr.ww
\ICON\48\1033 5FA50 EA8 5CE50 2800000030000000600000000100080000000000000900000000000000000000000100000001000000000000707072007777(...0......................................ppr.ww
\ICON\49\1033 608F8 BA8 5DCF8 2800000028000000500000000100080000000000400600000000000000000000000100000001000000000000707072007777(...(...P...........@.......................ppr.ww
\ICON\50\1033 614A0 8A8 5E8A0 2800000020000000400000000100080000000000000400000000000000000000000100000001000000000000707072007777(... ...@...................................ppr.ww
\ICON\51\1033 61D48 6C8 5F148 28000000180000003000000001000800000000004002000000000000000000000001000000010000000000007F6400007777(.......0...........@........................d..ww
\ICON\52\1033 62410 608 5F810 28000000140000002800000001000800000000009001000000000000000000000001000000010000000000007F6400007777(.......(....................................d..ww
\ICON\53\1033 62A18 568 5FE18 28000000100000002000000001000800000000000001000000000000000000000001000000010000000000007F6400007777(....... ....................................d..ww
\ICON\54\1033 62F80 AB2 60380 89504E470D0A1A0A0000000D49484452000001000000010008060000005C72A866000000097048597300000EC300000EC301.PNG........IHDR.............\r.f....pHYs.........
\ICON\55\1033 63A38 94A8 60E38 2800000060000000C00000000100200000000000809400000000000000000000000000000000000000000000000000000000(............ ...................................
\ICON\56\1033 6CEE0 5488 6A2E0 2800000048000000900000000100200000000000605400000000000000000000000000000000000000000000000000000000(...H......... .....T............................
\ICON\57\1033 72368 4228 6F768 2800000040000000800000000100200000000000004200000000000000000000000000000000000000000000000000000000(...@......... ......B............................
\ICON\58\1033 76590 3A48 73990 280000003C000000780000000100200000000000203A00000000000000000000000000000000000000000000000000000000(...<...x..... ..... :............................
\ICON\59\1033 79FD8 25A8 773D8 2800000030000000600000000100200000000000802500000000000000000000000000000000000000000000000000000000(...0........ ......%............................
\ICON\60\1033 7C580 1A68 79980 2800000028000000500000000100200000000000401A00000000000000000000000000000000000000000000000000000000(...(...P..... .....@.............................
\ICON\61\1033 7DFE8 10A8 7B3E8 2800000020000000400000000100200000000000801000000000000000000000000000000000000000000000000000000000(... ...@..... ...................................
\ICON\62\1033 7F090 988 7C490 2800000018000000300000000100200000000000600900000000000000000000000000000000000000000000000000000000(.......0..... ..................................
\ICON\63\1033 7FA18 6B8 7CE18 2800000014000000280000000100200000000000900600000000000000000000000000000000000000000000000000000000(.......(..... ...................................
\ICON\64\1033 800D0 468 7D4D0 2800000010000000200000000100200000000000400400000000000000000000000000000000000000000000000000000000(....... ..... .....@.............................
\ICON\65\1033 80680 2E8 7DA80 2800000020000000400000000100040000000000000200000000000000000000000000000000000000000000000080000080(... ...@.........................................
\ICON\66\1033 80968 128 7DD68 2800000010000000200000000100040000000000800000000000000000000000000000000000000000000000000080000080(....... .........................................
\ICON\67\1033 80A90 1628 7DE90 2800000040000000800000000100080000000000001000000000000000000000000100000001000000000000945228009654(...@........................................R(..T
\ICON\68\1033 820B8 EA8 7F4B8 2800000030000000600000000100080000000000000900000000000000000000000100000001000000000000945228009654(...0.......................................R(..T
\ICON\69\1033 82F60 8A8 80360 2800000020000000400000000100080000000000000400000000000000000000000100000001000000000000945228009654(... ...@....................................R(..T
\ICON\70\1033 83808 568 80C08 2800000010000000200000000100080000000000000100000000000000000000000100000001000000000000955228009754(....... ....................................R(..T
\ICON\71\1033 83D70 106B 81170 89504E470D0A1A0A0000000D49484452000001000000010008060000005C72A866000000097048597300000EC300000EC301.PNG........IHDR.............\r.f....pHYs.........
\ICON\72\1033 84DE0 94A8 821E0 2800000060000000C00000000100200000000000809400000000000000000000000000000000000000000000000000000000(............ ...................................
\ICON\73\1033 8E288 67E8 8B688 2800000050000000A00000000100200000000000C06700000000000000000000000000000000000000000000000000000000(...P......... ......g............................
\ICON\74\1033 94A70 5488 91E70 2800000048000000900000000100200000000000605400000000000000000000000000000000000000000000000000000000(...H......... .....T............................
\ICON\75\1033 99EF8 4228 972F8 2800000040000000800000000100200000000000004200000000000000000000000000000000000000000000000000000000(...@......... ......B............................
\ICON\76\1033 9E120 3A48 9B520 280000003C000000780000000100200000000000203A00000000000000000000000000000000000000000000000000000000(...<...x..... ..... :............................
\ICON\77\1033 A1B68 25A8 9EF68 2800000030000000600000000100200000000000802500000000000000000000000000000000000000000000000000000000(...0........ ......%............................
\ICON\78\1033 A4110 1A68 A1510 2800000028000000500000000100200000000000401A00000000000000000000000000000000000000000000000000000000(...(...P..... .....@.............................
\ICON\79\1033 A5B78 10A8 A2F78 2800000020000000400000000100200000000000801000000000000000000000000000000000000000000000000000000000(... ...@..... ...................................
\ICON\80\1033 A6C20 988 A4020 2800000018000000300000000100200000000000600900000000000000000000000000000000000000000000000000000000(.......0..... ..................................
\ICON\81\1033 A75A8 6B8 A49A8 2800000014000000280000000100200000000000900600000000000000000000000000000000000000000000000000000000(.......(..... ...................................
\ICON\82\1033 A7C60 468 A5060 2800000010000000200000000100200000000000400400000000000000000000000000000000000000000000000000009D59(....... ..... .....@............................Y
\ICON\83\1033 A81D0 2E8 A55D0 2800000020000000400000000100040000000000000000000000000000000000000000000000000000000000000080000080(... ...@.........................................
\ICON\84\1033 A84B8 128 A58B8 2800000010000000200000000100040000000000000000000000000000000000000000000000000000000000000080000000(....... .........................................
\ICON\85\1033 A85E0 8A8 A59E0 28000000200000004000000001000800000000000000000000000000000000000000000000000000FFFBFB00FCF9F900F9F3(... ...@.........................................
\ICON\86\1033 A8E88 568 A6288 2800000010000000200000000100080000000000000000000000000000000000000000000000000000000000FFFFFF000000(....... .........................................
\ICON\87\1033 A93F0 10A8 A67F0 2800000020000000400000000100200000000000000000000000000000000000000000000000000000000002000000060000(... ...@..... ...................................
\ICON\88\1033 AA498 468 A7898 2800000010000000200000000100200000000000000000000000000000000000000000000000000000000000000000000000(....... ..... ...................................
\ICON\89\1033 AA960 2E8 A7D60 2800000020000000400000000100040000000000000000000000000000000000000000000000000000000000000080000080(... ...@.........................................
\ICON\90\1033 AAC48 128 A8048 2800000010000000200000000100040000000000000000000000000000000000000000000000000000000000000080000000(....... .........................................
\ICON\91\1033 AAD70 8A8 A8170 28000000200000004000000001000800000000000000000000000000000000000000000000000000FFFBFB00FCF9F900F9F3(... ...@.........................................
\ICON\92\1033 AB618 568 A8A18 2800000010000000200000000100080000000000000000000000000000000000000000000000000000000000FFFFFF000000(....... .........................................
\ICON\93\1033 ABB80 10A8 A8F80 2800000020000000400000000100200000000000000000000000000000000000000000000000000000000002000000060000(... ...@..... ...................................
\ICON\94\1033 ACC28 468 AA028 2800000010000000200000000100200000000000000000000000000000000000000000000000000000000000000000000000(....... ..... ...................................
\ICON\95\1033 AD0F0 2E8 AA4F0 2800000020000000400000000100040000000000000200000000000000000000000000000000000000000000000080000080(... ...@.........................................
\ICON\96\1033 AD3D8 128 AA7D8 2800000010000000200000000100040000000000800000000000000000000000000000000000000000000000000080000080(....... .........................................
\ICON\97\1033 AD500 2CA8 AA900 2800000060000000C000000001000800000000000024000000000000000000000001000000010000000000009A572B00A061(...................$.......................W+..a
\ICON\98\1033 B01A8 1BC8 AD5A8 28000000480000009000000001000800000000004014000000000000000000000001000000010000000000009A572B009B61(...H...............@........................W+..a
\ICON\99\1033 B1D70 1628 AF170 28000000400000008000000001000800000000000010000000000000000000000001000000010000000000009A572B00A061(...@........................................W+..a
\ICON\100\1033 B3398 1418 B0798 280000003C000000780000000100080000000000100E00000000000000000000000100000001000000000000000080000080(...<...x.........................................
\ICON\101\1033 B47B0 EA8 B1BB0 28000000300000006000000001000800000000000009000000000000000000000001000000010000000000009A572B00A061(...0.......................................W+..a
\ICON\102\1033 B5658 BA8 B2A58 28000000280000005000000001000800000000004006000000000000000000000001000000010000000000009A572B009B61(...(...P...........@........................W+..a
\ICON\103\1033 B6200 8A8 B3600 28000000200000004000000001000800000000000004000000000000000000000001000000010000000000009A572B00A061(... ...@....................................W+..a
\ICON\104\1033 B6AA8 6C8 B3EA8 280000001800000030000000010008000000000040020000000000000000000000010000000100000000000098582C009D60(.......0...........@........................X,..
\ICON\105\1033 B7170 608 B4570 2800000014000000280000000100080000000000900100000000000000000000000100000001000000000000000080000080(.......(.........................................
\ICON\106\1033 B7778 568 B4B78 280000001000000020000000010008000000000000010000000000000000000000010000000100000000000098582C009E62(....... ....................................X,..b
\ICON\107\1033 B7CE0 15E1 B50E0 89504E470D0A1A0A0000000D49484452000001000000010008060000005C72A866000000097048597300000EC300000EC301.PNG........IHDR.............\r.f....pHYs.........
\ICON\108\1033 B92C8 94A8 B66C8 2800000060000000C00000000100200000000000809400000000000000000000000000000000000000000000000000000000(............ ...................................
\ICON\109\1033 C2770 5488 BFB70 2800000048000000900000000100200000000000605400000000000000000000000000000000000000000000000000000000(...H......... .....T............................
\ICON\110\1033 C7BF8 4228 C4FF8 2800000040000000800000000100200000000000004200000000000000000000000000000000000000000000000000000000(...@......... ......B............................
\ICON\111\1033 CBE20 3A48 C9220 280000003C000000780000000100200000000000203A00000000000000000000000000000000000000000000000000000000(...<...x..... ..... :............................
\ICON\112\1033 CF868 25A8 CCC68 2800000030000000600000000100200000000000802500000000000000000000000000000000000000000000000000000000(...0........ ......%............................
\ICON\113\1033 D1E10 1A68 CF210 2800000028000000500000000100200000000000401A00000000000000000000000000000000000000000000000000000000(...(...P..... .....@.............................
\ICON\114\1033 D3878 10A8 D0C78 2800000020000000400000000100200000000000801000000000000000000000000000000000000000000000000000000000(... ...@..... ...................................
\ICON\115\1033 D4920 988 D1D20 2800000018000000300000000100200000000000600900000000000000000000000000000000000000000000000000000000(.......0..... ..................................
\ICON\116\1033 D52A8 6B8 D26A8 2800000014000000280000000100200000000000900600000000000000000000000000000000000000000000000000000000(.......(..... ...................................
\ICON\117\1033 D5960 468 D2D60 2800000010000000200000000100200000000000400400000000000000000000000000000000000000000000000000000000(....... ..... .....@.............................
\ICON\118\1033 D5F10 2E8 D3310 2800000020000000400000000100040000000000000200000000000000000000000000000000000000000000000080000080(... ...@.........................................
\ICON\119\1033 D61F8 128 D35F8 2800000010000000200000000100040000000000800000000000000000000000000000000000000000000000000080000080(....... .........................................
\ICON\120\1033 D6320 2CA8 D3720 2800000060000000C00000000100080000000000002400000000000000000000000100000001000000000000707072009A57(...................$......................ppr..W
\ICON\121\1033 D8FC8 1BC8 D63C8 2800000048000000900000000100080000000000401400000000000000000000000100000001000000000000707072009A57(...H...............@.......................ppr..W
\ICON\122\1033 DAB90 1628 D7F90 2800000040000000800000000100080000000000001000000000000000000000000100000001000000000000707072009A57(...@.......................................ppr..W
\ICON\123\1033 DC1B8 1418 D95B8 280000003C000000780000000100080000000000100E00000000000000000000000100000001000000000000707072009A57(...<...x...................................ppr..W
\ICON\124\1033 DD5D0 EA8 DA9D0 2800000030000000600000000100080000000000000900000000000000000000000100000001000000000000707072009A57(...0......................................ppr..W
\ICON\125\1033 DE478 BA8 DB878 2800000028000000500000000100080000000000400600000000000000000000000100000001000000000000707072009A57(...(...P...........@.......................ppr..W
\ICON\126\1033 DF020 8A8 DC420 2800000020000000400000000100080000000000000400000000000000000000000100000001000000000000707072009A57(... ...@...................................ppr..W
\ICON\127\1033 DF8C8 6C8 DCCC8 280000001800000030000000010008000000000040020000000000000000000000010000000100000000000098582C009D60(.......0...........@........................X,..
\ICON\128\1033 DFF90 608 DD390 280000001400000028000000010008000000000090010000000000000000000000010000000100000000000098582C009E62(.......(....................................X,..b
\ICON\129\1033 E0598 568 DD998 280000001000000020000000010008000000000000010000000000000000000000010000000100000000000098582C009E62(....... ....................................X,..b
\ICON\130\1033 E0B00 1512 DDF00 89504E470D0A1A0A0000000D49484452000001000000010008060000005C72A866000000097048597300000EC300000EC301.PNG........IHDR.............\r.f....pHYs.........
\ICON\131\1033 E2018 94A8 DF418 2800000060000000C00000000100200000000000809400000000000000000000000000000000000000000000000000000000(............ ...................................
\ICON\132\1033 EB4C0 5488 E88C0 2800000048000000900000000100200000000000605400000000000000000000000000000000000000000000000000000000(...H......... .....T............................
\ICON\133\1033 F0948 4228 EDD48 2800000040000000800000000100200000000000004200000000000000000000000000000000000000000000000000000000(...@......... ......B............................
\ICON\134\1033 F4B70 3A48 F1F70 280000003C000000780000000100200000000000203A00000000000000000000000000000000000000000000000000000000(...<...x..... ..... :............................
\ICON\135\1033 F85B8 25A8 F59B8 2800000030000000600000000100200000000000802500000000000000000000000000000000000000000000000000000000(...0........ ......%............................
\ICON\136\1033 FAB60 1A68 F7F60 2800000028000000500000000100200000000000401A00000000000000000000000000000000000000000000000000000000(...(...P..... .....@.............................
\ICON\137\1033 FC5C8 10A8 F99C8 2800000020000000400000000100200000000000801000000000000000000000000000000000000000000000000000000000(... ...@..... ...................................
\ICON\138\1033 FD670 988 FAA70 2800000018000000300000000100200000000000600900000000000000000000000000000000000000000000000000000000(.......0..... ..................................
\ICON\139\1033 FDFF8 6B8 FB3F8 2800000014000000280000000100200000000000900600000000000000000000000000000000000000000000000000000000(.......(..... ...................................
\ICON\140\1033 FE6B0 468 FBAB0 2800000010000000200000000100200000000000400400000000000000000000000000000000000000000000000000000000(....... ..... .....@.............................
\ICON\141\1033 FEC60 2E8 FC060 2800000020000000400000000100040000000000000000000000000000000000000000000000000000000000000000000080(... ...@.........................................
\ICON\142\1033 FEF48 128 FC348 2800000010000000200000000100040000000000000000000000000000000000000000000000000000000000000000000080(....... .........................................
\ICON\143\1033 FF070 EA8 FC470 2800000030000000600000000100080000000000000000000000000000000000000000000000000080383900672B26007631(...0...................................89.g+&.v1
\ICON\144\1033 FFF18 8A8 FD318 2800000020000000400000000100080000000000000000000000000000000000000000000000000080383900BA5557005520(... ...@................................89..UW.U
\ICON\145\1033 1007C0 568 FDBC0 28000000100000002000000001000800000000000000000000000000000000000000000000000000CD735C00ECB29D00D08D(....... ................................s\.......
\ICON\146\1033 100D28 25A8 FE128 2800000030000000600000000100200000000000000000000000000000000000000000000000000000000000000000000000(...0........ ...................................
\ICON\147\1033 1032D0 10A8 1006D0 2800000020000000400000000100200000000000000000000000000000000000000000000000000000000000000000000000(... ...@..... ...................................
\ICON\148\1033 104378 468 101778 2800000010000000200000000100200000000000000000000000000000000000000000000000000000000000000000000000(....... ..... ...................................
\ICON\149\1033 104858 2E8 101C58 2800000020000000400000000100040000000000000000000000000000000000000000000000000000000000000000000080(... ...@.........................................
\ICON\150\1033 104B40 128 101F40 2800000010000000200000000100040000000000000000000000000000000000000000000000000000000000000000000080(....... .........................................
\ICON\151\1033 104C68 EA8 102068 2800000030000000600000000100080000000000000000000000000000000000000000000000000080383900672B26007631(...0...................................89.g+&.v1
\ICON\152\1033 105B10 8A8 102F10 2800000020000000400000000100080000000000000000000000000000000000000000000000000080383900BA5557005520(... ...@................................89..UW.U
\ICON\153\1033 1063B8 568 1037B8 28000000100000002000000001000800000000000000000000000000000000000000000000000000CD735C00ECB29D00D08D(....... ................................s\.......
\ICON\154\1033 106920 25A8 103D20 2800000030000000600000000100200000000000000000000000000000000000000000000000000000000000000000000000(...0........ ...................................
\ICON\155\1033 108EC8 10A8 1062C8 2800000020000000400000000100200000000000000000000000000000000000000000000000000000000000000000000000(... ...@..... ...................................
\ICON\156\1033 109F70 468 107370 2800000010000000200000000100200000000000000000000000000000000000000000000000000000000000000000000000(....... ..... ...................................
\ICON\157\1033 10A450 2E8 107850 2800000020000000400000000100040000000000000200000000000000000000000000000000000000000000000080000080(... ...@.........................................
\ICON\158\1033 10A738 128 107B38 2800000010000000200000000100040000000000800000000000000000000000000000000000000000000000000080000080(....... .........................................
\ICON\159\1033 10A860 2CA8 107C60 2800000060000000C00000000100080000000000002400000000000000000000000100000001000000000000505050005555(...................$......................PPP.UU
\ICON\160\1033 10D508 1BC8 10A908 2800000048000000900000000100080000000000401400000000000000000000000100000001000000000000505050005A5A(...H...............@.......................PPP.ZZ
\ICON\161\1033 10F0D0 1628 10C4D0 2800000040000000800000000100080000000000001000000000000000000000000100000001000000000000505050005A5A(...@.......................................PPP.ZZ
\ICON\162\1033 1106F8 1418 10DAF8 280000003C000000780000000100080000000000100E00000000000000000000000100000001000000000000505050006060(...<...x...................................PPP.
\ICON\163\1033 111B10 EA8 10EF10 2800000030000000600000000100080000000000000900000000000000000000000100000001000000000000505050005555(...0......................................PPP.UU
\ICON\164\1033 1129B8 BA8 10FDB8 2800000028000000500000000100080000000000400600000000000000000000000100000001000000000000505050005555(...(...P...........@.......................PPP.UU
\ICON\165\1033 113560 8A8 110960 2800000020000000400000000100080000000000000400000000000000000000000100000001000000000000505050005555(... ...@...................................PPP.UU
\ICON\166\1033 113E08 6C8 111208 2800000018000000300000000100080000000000400200000000000000000000000100000001000000000000505050005957(.......0...........@.......................PPP.YW
\ICON\167\1033 1144D0 608 1118D0 2800000014000000280000000100080000000000900100000000000000000000000100000001000000000000505050005957(.......(...................................PPP.YW
\ICON\168\1033 114AD8 568 111ED8 2800000010000000200000000100080000000000000100000000000000000000000100000001000000000000505050005555(....... ...................................PPP.UU
\ICON\169\1033 115040 183E 112440 89504E470D0A1A0A0000000D49484452000001000000010008060000005C72A866000000097048597300000EC300000EC301.PNG........IHDR.............\r.f....pHYs.........
\ICON\170\1033 116880 94A8 113C80 2800000060000000C00000000100200000000000809400000000000000000000000000000000000000000000000000000000(............ ...................................
\ICON\171\1033 11FD28 5488 11D128 2800000048000000900000000100200000000000605400000000000000000000000000000000000000000000000000000000(...H......... .....T............................
\ICON\172\1033 1251B0 4228 1225B0 2800000040000000800000000100200000000000004200000000000000000000000000000000000000000000000000000000(...@......... ......B............................
\ICON\173\1033 1293D8 3A48 1267D8 280000003C000000780000000100200000000000203A00000000000000000000000000000000000000000000000000000000(...<...x..... ..... :............................
\ICON\174\1033 12CE20 25A8 12A220 2800000030000000600000000100200000000000802500000000000000000000000000000000000000000000000000000000(...0........ ......%............................
\ICON\175\1033 12F3C8 1A68 12C7C8 2800000028000000500000000100200000000000401A00000000000000000000000000000000000000000000000000000000(...(...P..... .....@.............................
\ICON\176\1033 130E30 10A8 12E230 2800000020000000400000000100200000000000801000000000000000000000000000000000000000000000000000000000(... ...@..... ...................................
\ICON\177\1033 131ED8 988 12F2D8 2800000018000000300000000100200000000000600900000000000000000000000000000000000000000000000000000000(.......0..... ..................................
\ICON\178\1033 132860 6B8 12FC60 2800000014000000280000000100200000000000900600000000000000000000000000000000000000000000000000000000(.......(..... ...................................
\ICON\179\1033 132F18 468 130318 2800000010000000200000000100200000000000400400000000000000000000000000000000000000000000000000000000(....... ..... .....@.............................
\ICON\180\1033 1334C8 2E8 1308C8 2800000020000000400000000100040000000000000200000000000000000000000000000000000000000000000080000080(... ...@.........................................
\ICON\181\1033 1337B0 128 130BB0 2800000010000000200000000100040000000000800000000000000000000000000000000000000000000000000080000080(....... .........................................
\ICON\182\1033 1338D8 2CA8 130CD8 2800000060000000C00000000100080000000000002400000000000000000000000100000001000000000000686769006F6F(...................$......................hgi.oo
\ICON\183\1033 136580 1BC8 133980 2800000048000000900000000100080000000000401400000000000000000000000100000001000000000000575757005C5C(...H...............@.......................WWW.\\
\ICON\184\1033 138148 1628 135548 2800000040000000800000000100080000000000001000000000000000000000000100000001000000000000575757005C5C(...@.......................................WWW.\\
\ICON\185\1033 139770 1418 136B70 280000003C000000780000000100080000000000100E00000000000000000000000100000001000000000000575757005C5C(...<...x...................................WWW.\\
\ICON\186\1033 13AB88 EA8 137F88 2800000030000000600000000100080000000000000900000000000000000000000100000001000000000000575757005C5C(...0......................................WWW.\\
\ICON\187\1033 13BA30 BA8 138E30 2800000028000000500000000100080000000000400600000000000000000000000100000001000000000000575757005C5C(...(...P...........@.......................WWW.\\
\ICON\188\1033 13C5D8 8A8 1399D8 2800000020000000400000000100080000000000000400000000000000000000000100000001000000000000575757005C5C(... ...@...................................WWW.\\
\ICON\189\1033 13CE80 6C8 13A280 28000000180000003000000001000800000000004002000000000000000000000001000000010000000000007F6400005757(.......0...........@........................d..WW
\ICON\190\1033 13D548 608 13A948 28000000140000002800000001000800000000009001000000000000000000000001000000010000000000007F6400005757(.......(....................................d..WW
\ICON\191\1033 13DB50 568 13AF50 28000000100000002000000001000800000000000001000000000000000000000001000000010000000000007F6400007070(....... ....................................d..pp
\ICON\192\1033 13E0B8 D5B 13B4B8 89504E470D0A1A0A0000000D49484452000001000000010008060000005C72A866000000097048597300000EC300000EC301.PNG........IHDR.............\r.f....pHYs.........
\ICON\193\1033 13EE18 94A8 13C218 2800000060000000C00000000100200000000000809400000000000000000000000000000000000000000000000000000000(............ ...................................
\ICON\194\1033 1482C0 5488 1456C0 2800000048000000900000000100200000000000605400000000000000000000000000000000000000000000000000000000(...H......... .....T............................
\ICON\195\1033 14D748 4228 14AB48 2800000040000000800000000100200000000000004200000000000000000000000000000000000000000000000000000000(...@......... ......B............................
\ICON\196\1033 151970 3A48 14ED70 280000003C000000780000000100200000000000203A00000000000000000000000000000000000000000000000000000000(...<...x..... ..... :............................
\ICON\197\1033 1553B8 25A8 1527B8 2800000030000000600000000100200000000000802500000000000000000000000000000000000000000000000000000000(...0........ ......%............................
\ICON\198\1033 157960 1A68 154D60 2800000028000000500000000100200000000000401A00000000000000000000000000000000000000000000000000000000(...(...P..... .....@.............................
\ICON\199\1033 1593C8 10A8 1567C8 2800000020000000400000000100200000000000801000000000000000000000000000000000000000000000000000000000(... ...@..... ...................................
\ICON\200\1033 15A470 988 157870 2800000018000000300000000100200000000000600900000000000000000000000000000000000000000000000000000000(.......0..... ..................................
\ICON\201\1033 15ADF8 6B8 1581F8 2800000014000000280000000100200000000000900600000000000000000000000000000000000000000000000000009757(.......(..... ..................................W
\ICON\202\1033 15B4B0 468 1588B0 2800000010000000200000000100200000000000400400000000000000000000000000000000000097572B1F97572B3F9757(....... ..... .....@....................W+..W+?.W
\ICON\203\1033 15BA60 2E8 158E60 2800000020000000400000000100040000000000000200000000000000000000000000000000000000000000000080000080(... ...@.........................................
\ICON\204\1033 15BD48 128 159148 2800000010000000200000000100040000000000800000000000000000000000000000000000000000000000000080000080(....... .........................................
\ICON\205\1033 15BE70 2CA8 159270 2800000060000000C0000000010008000000000000240000000000000000000000010000000100000000000077777700B266(...................$......................www..f
\ICON\206\1033 15EB18 1BC8 15BF18 280000004800000090000000010008000000000040140000000000000000000000010000000100000000000077777700B266(...H...............@.......................www..f
\ICON\207\1033 1606E0 1628 15DAE0 280000004000000080000000010008000000000000100000000000000000000000010000000100000000000077777700B266(...@.......................................www..f
\ICON\208\1033 161D08 1418 15F108 280000003C000000780000000100080000000000100E0000000000000000000000010000000100000000000077777700B266(...<...x...................................www..f
\ICON\209\1033 163120 EA8 160520 280000003000000060000000010008000000000000090000000000000000000000010000000100000000000077777700B266(...0......................................www..f
\ICON\210\1033 163FC8 BA8 1613C8 280000002800000050000000010008000000000040060000000000000000000000010000000100000000000077777700B266(...(...P...........@.......................www..f
\ICON\211\1033 164B70 8A8 161F70 280000002000000040000000010008000000000000040000000000000000000000010000000100000000000077777700B266(... ...@...................................www..f
\ICON\212\1033 165418 6C8 162818 28000000180000003000000001000800000000004002000000000000000000000001000000010000000000007F6400007777(.......0...........@........................d..ww
\ICON\213\1033 165AE0 608 162EE0 28000000140000002800000001000800000000009001000000000000000000000001000000010000000000007F6400007777(.......(....................................d..ww
\ICON\214\1033 1660E8 568 1634E8 28000000100000002000000001000800000000000001000000000000000000000001000000010000000000007F6400007777(....... ....................................d..ww
\ICON\215\1033 166650 9F5 163A50 89504E470D0A1A0A0000000D49484452000001000000010008060000005C72A866000000097048597300000EC300000EC301.PNG........IHDR.............\r.f....pHYs.........
\ICON\216\1033 167048 94A8 164448 2800000060000000C00000000100200000000000809400000000000000000000000000000000000000000000000000000000(............ ...................................
\ICON\217\1033 1704F0 5488 16D8F0 2800000048000000900000000100200000000000605400000000000000000000000000000000000000000000000000000000(...H......... .....T............................
\ICON\218\1033 175978 4228 172D78 2800000040000000800000000100200000000000004200000000000000000000000000000000000000000000000000000000(...@......... ......B............................
\ICON\219\1033 179BA0 3A48 176FA0 280000003C000000780000000100200000000000203A00000000000000000000000000000000000000000000000000000000(...<...x..... ..... :............................
\ICON\220\1033 17D5E8 25A8 17A9E8 2800000030000000600000000100200000000000802500000000000000000000000000000000000000000000000000000000(...0........ ......%............................
\ICON\221\1033 17FB90 1A68 17CF90 2800000028000000500000000100200000000000401A00000000000000000000000000000000000000000000000000000000(...(...P..... .....@.............................
\ICON\222\1033 1815F8 10A8 17E9F8 2800000020000000400000000100200000000000801000000000000000000000000000000000000000000000000000000000(... ...@..... ...................................
\ICON\223\1033 1826A0 988 17FAA0 2800000018000000300000000100200000000000600900000000000000000000000000000000000000000000000000000000(.......0..... ..................................
\ICON\224\1033 183028 6B8 180428 2800000014000000280000000100200000000000900600000000000000000000000000000000000000000000000000000000(.......(..... ...................................
\ICON\225\1033 1836E0 468 180AE0 2800000010000000200000000100200000000000400400000000000000000000000000000000000000000000000000000000(....... ..... .....@.............................
\ICON\226\1033 183C90 2E8 181090 2800000020000000400000000100040000000000000200000000000000000000000000000000000000000000000080000080(... ...@.........................................
\ICON\227\1033 183F78 128 181378 2800000010000000200000000100040000000000800000000000000000000000000000000000000000000000000080000080(....... .........................................
\ICON\228\1033 1840C8 2E8 1814C8 2800000020000000400000000100040000000000000200000000000000000000000000000000000000000000000080000080(... ...@.........................................
\ICON\229\1033 1843B0 128 1817B0 2800000010000000200000000100040000000000800000000000000000000000000000000000000000000000000080000080(....... .........................................
\ICON\230\1033 1844D8 2CA8 1818D8 2800000060000000C000000001000800000000000024000000000000000000000001000000010000000000009A572B00A061(...................$.......................W+..a
\ICON\231\1033 187180 1BC8 184580 28000000480000009000000001000800000000004014000000000000000000000001000000010000000000009A572B009B61(...H...............@........................W+..a
\ICON\232\1033 188D48 1628 186148 28000000400000008000000001000800000000000010000000000000000000000001000000010000000000009A572B00A061(...@........................................W+..a
\ICON\233\1033 18A370 1418 187770 280000003C000000780000000100080000000000100E000000000000000000000001000000010000000000009A572B009B5D(...<...x....................................W+..]
\ICON\234\1033 18B788 EA8 188B88 28000000300000006000000001000800000000000009000000000000000000000001000000010000000000009A572B00A061(...0.......................................W+..a
\ICON\235\1033 18C630 BA8 189A30 28000000280000005000000001000800000000004006000000000000000000000001000000010000000000009A572B009B61(...(...P...........@........................W+..a
\ICON\236\1033 18D1D8 8A8 18A5D8 28000000200000004000000001000800000000000004000000000000000000000001000000010000000000009A572B00A061(... ...@....................................W+..a
\ICON\237\1033 18DA80 6C8 18AE80 280000001800000030000000010008000000000040020000000000000000000000010000000100000000000098582C009D60(.......0...........@........................X,..
\ICON\238\1033 18E148 608 18B548 280000001400000028000000010008000000000090010000000000000000000000010000000100000000000098582C009E62(.......(....................................X,..b
\ICON\239\1033 18E750 568 18BB50 280000001000000020000000010008000000000000010000000000000000000000010000000100000000000098582C009E62(....... ....................................X,..b
\ICON\240\1033 18ECB8 18B1 18C0B8 89504E470D0A1A0A0000000D49484452000001000000010008060000005C72A866000000097048597300000EC300000EC301.PNG........IHDR.............\r.f....pHYs.........
\ICON\241\1033 190570 94A8 18D970 2800000060000000C00000000100200000000000809400000000000000000000000000000000000000000000000000000000(............ ...................................
\ICON\242\1033 199A18 5488 196E18 2800000048000000900000000100200000000000605400000000000000000000000000000000000000000000000000000000(...H......... .....T............................
\ICON\243\1033 19EEA0 4228 19C2A0 2800000040000000800000000100200000000000004200000000000000000000000000000000000000000000000000000000(...@......... ......B............................
\ICON\244\1033 1A30C8 3A48 1A04C8 280000003C000000780000000100200000000000203A00000000000000000000000000000000000000000000000000000000(...<...x..... ..... :............................
\ICON\245\1033 1A6B10 25A8 1A3F10 2800000030000000600000000100200000000000802500000000000000000000000000000000000000000000000000000000(...0........ ......%............................
\ICON\246\1033 1A90B8 1A68 1A64B8 2800000028000000500000000100200000000000401A00000000000000000000000000000000000000000000000000000000(...(...P..... .....@.............................
\ICON\247\1033 1AAB20 10A8 1A7F20 2800000020000000400000000100200000000000801000000000000000000000000000000000000000000000000000000000(... ...@..... ...................................
\ICON\248\1033 1ABBC8 988 1A8FC8 2800000018000000300000000100200000000000600900000000000000000000000000000000000000000000000000000000(.......0..... ..................................
\ICON\249\1033 1AC550 6B8 1A9950 2800000014000000280000000100200000000000900600000000000000000000000000000000000000000000000000000000(.......(..... ...................................
\ICON\250\1033 1ACC08 468 1AA008 2800000010000000200000000100200000000000400400000000000000000000000000000000000000000000000000000000(....... ..... .....@.............................
\ICON\251\1033 1AD1B8 2E8 1AA5B8 2800000020000000400000000100040000000000000200000000000000000000000000000000000000000000000080000080(... ...@.........................................
\ICON\252\1033 1AD4A0 128 1AA8A0 2800000010000000200000000100040000000000800000000000000000000000000000000000000000000000000080000080(....... .........................................
\ICON\253\1033 1AD5C8 2CA8 1AA9C8 2800000060000000C000000001000800000000000024000000000000000000000001000000010000000000009A572B00A061(...................$.......................W+..a
\ICON\254\1033 1B0270 1BC8 1AD670 28000000480000009000000001000800000000004014000000000000000000000001000000010000000000009A572B009B61(...H...............@........................W+..a
\ICON\255\1033 1B1E38 1628 1AF238 28000000400000008000000001000800000000000010000000000000000000000001000000010000000000009A572B00A061(...@........................................W+..a
\ICON\256\1033 1B3460 1418 1B0860 280000003C000000780000000100080000000000100E000000000000000000000001000000010000000000009A572B009B5D(...<...x....................................W+..]
\ICON\257\1033 1B4878 EA8 1B1C78 28000000300000006000000001000800000000000009000000000000000000000001000000010000000000009A572B00A061(...0.......................................W+..a
\ICON\258\1033 1B5720 BA8 1B2B20 28000000280000005000000001000800000000004006000000000000000000000001000000010000000000009A572B009B61(...(...P...........@........................W+..a
\ICON\259\1033 1B62C8 8A8 1B36C8 28000000200000004000000001000800000000000004000000000000000000000001000000010000000000009A572B00A061(... ...@....................................W+..a
\ICON\260\1033 1B6B70 6C8 1B3F70 280000001800000030000000010008000000000040020000000000000000000000010000000100000000000098582C009D60(.......0...........@........................X,..
\ICON\261\1033 1B7238 608 1B4638 280000001400000028000000010008000000000090010000000000000000000000010000000100000000000098582C009E62(.......(....................................X,..b
\ICON\262\1033 1B7840 568 1B4C40 280000001000000020000000010008000000000000010000000000000000000000010000000100000000000098582C009E62(....... ....................................X,..b
\ICON\263\1033 1B7DA8 1172 1B51A8 89504E470D0A1A0A0000000D49484452000001000000010008060000005C72A866000000097048597300000EC300000EC301.PNG........IHDR.............\r.f....pHYs.........
\ICON\264\1033 1B8F20 94A8 1B6320 2800000060000000C00000000100200000000000809400000000000000000000000000000000000000000000000000000000(............ ...................................
\ICON\265\1033 1C23C8 5488 1BF7C8 2800000048000000900000000100200000000000605400000000000000000000000000000000000000000000000000000000(...H......... .....T............................
\ICON\266\1033 1C7850 4228 1C4C50 2800000040000000800000000100200000000000004200000000000000000000000000000000000000000000000000000000(...@......... ......B............................
\ICON\267\1033 1CBA78 3A48 1C8E78 280000003C000000780000000100200000000000203A00000000000000000000000000000000000000000000000000000000(...<...x..... ..... :............................
\ICON\268\1033 1CF4C0 25A8 1CC8C0 2800000030000000600000000100200000000000802500000000000000000000000000000000000000000000000000000000(...0........ ......%............................
\ICON\269\1033 1D1A68 1A68 1CEE68 2800000028000000500000000100200000000000401A00000000000000000000000000000000000000000000000000000000(...(...P..... .....@.............................
\ICON\270\1033 1D34D0 10A8 1D08D0 2800000020000000400000000100200000000000801000000000000000000000000000000000000000000000000000000000(... ...@..... ...................................
\ICON\271\1033 1D4578 988 1D1978 2800000018000000300000000100200000000000600900000000000000000000000000000000000000000000000000000000(.......0..... ..................................
\ICON\272\1033 1D4F00 6B8 1D2300 2800000014000000280000000100200000000000900600000000000000000000000000000000000000000000000000000000(.......(..... ...................................
\ICON\273\1033 1D55B8 468 1D29B8 2800000010000000200000000100200000000000400400000000000000000000000000000000000000000000000000000000(....... ..... .....@.............................
\GROUP_ICON\1\1033 30148 102 2D548 0000010012002020100001000400E80200000100101010000100040028010000020040400000010008002816000003003030...... ....................(.....@@......(.....00
\GROUP_ICON\2\1033 58248 148 55648 0000010017002020100001000400E8020000130010101000010004002801000014006060000001000800A82C000015004848...... ....................(............,....HH
\GROUP_ICON\4\1033 80538 148 7D938 0000010017002020100001000400E80200002A001010100001000400280100002B006060000001000800A82C00002C004848...... ..........*.........(...+........,..,.HH
\GROUP_ICON\5\1033 133380 148 130780 0000010017002020100001000400E80200009D001010100001000400280100009E006060000001000800A82C00009F004848...... ....................(............,....HH
\GROUP_ICON\6\1033 15B918 148 158D18 0000010017002020100001000400E8020000B400101010000100040028010000B5006060000001000800A82C0000B6004848...... ....................(............,....HH
\GROUP_ICON\7\1033 183B48 148 180F48 0000010017002020100001000400E8020000CB00101010000100040028010000CC006060000001000800A82C0000CD004848...... ....................(............,....HH
\GROUP_ICON\8\1033 A80C8 102 A54C8 0000010012002020100001000400E80200004100101010000100040028010000420040400000010008002816000043003030...... ..........A.........(...B.@@......(...C.00
\GROUP_ICON\9\1033 1840A0 22 1814A0 0000010002002020100001000400E8020000E200101010000100040028010000E30000000000000028000000200000004000...... ....................(...........(... ...@.
\GROUP_ICON\12\1033 AA900 5A A7D00 0000010006002020100001000400E8020000530010101000010004002801000054002020000001000800A808000055001010...... ..........S.........(...T. ..........U...
\GROUP_ICON\13\1033 AD090 5A AA490 0000010006002020100001000400E802000059001010100001000400280100005A002020000001000800A80800005B001010...... ..........Y.........(...Z. ..........[...
\GROUP_ICON\14\1033 D5DC8 148 D31C8 0000010017002020100001000400E80200005F0010101000010004002801000060006060000001000800A82C000061004848...... .........._.........(...........,..a.HH
\GROUP_ICON\15\1033 FEB18 148 FBF18 0000010017002020100001000400E8020000760010101000010004002801000077006060000001000800A82C000078004848...... ..........v.........(...w........,..x.HH
\GROUP_ICON\16\1033 1AD070 148 1AA470 0000010017002020100001000400E8020000E400101010000100040028010000E5006060000001000800A82C0000E6004848...... ....................(............,....HH
\GROUP_ICON\17\1033 1047E0 76 101BE0 0000010008002020100001000400E80200008D001010100001000400280100008E003030000001000800A80E00008F002020...... ....................(.....00............
\GROUP_ICON\18\1033 10A3D8 76 1077D8 0000010008002020100001000400E8020000950010101000010004002801000096003030000001000800A80E000097002020...... ....................(.....00............
\GROUP_ICON\19\1033 1D5A20 148 1D2E20 0000010017002020100001000400E8020000FB00101010000100040028010000FC006060000001000800A82C0000FD004848...... ....................(............,....HH
\VERSION\1\1033 1D5B68 3FC 1D2F68 FC0334000000560053005F00560045005200530049004F004E005F0049004E0046004F0000000000BD04EFFE000001000000..4...V.S._.V.E.R.S.I.O.N._.I.N.F.O...............
\24\1\1033 1D5F68 D8B 1D3368 3C3F786D6C2076657273696F6E3D22312E302220656E636F64696E673D225554462D3822207374616E64616C6F6E653D2279<?xml version="1.0" encoding="UTF-8" standalone="y
Intelligent String:
• wwlib.dll
• AddDllDirectorykernel32.dll
• msi.dll
• MSVCR100.dll
• KERNEL32.dll
• WinWord.exe
• <asmv3:windowsSettings xmlns="http://schemas.microsoft.com/SMI/2005/WindowsSettings">

Extra 4n4lysis:
Metric Value Percentage
Ascii Code 409819 21,2919%
Null Byte Code 734186 38,1441%
NOP Cave Found 0x9090909090 Block Count: 13 | Total: 0,0017%
© 2025 All rights reserved.