SmartHawk

2.2

中危

63 个模型检测该样本为恶意！

重新分析

下载样本

00bbee5ffd2b4bb674f7ee488082514a0e841bfe760c21b40080c7d3cb7b6382

00bbee5ffd2b4bb674f7ee488082514a0e841bfe760c21b40080c7d3cb7b6382.exe

分析耗时

76s

最近分析

393天前

文件大小

159.9KB

静态报毒动态报毒 CVE FAMILY METATYPE PLATFORM TYPE UNKNOWN WIN32 TROJAN BACKDOOR DELF

DACN 0.14

FACILE 1.00

IMCLNet 0.81

MFGraph 0.00

引擎	描述	特征	威胁分数	可能家族	检测耗时
DACN	基于动态分析和胶囊网络的可视化恶意软件检测	API调用、DLL以及注册表的修改情况	0.14	Unknown	0.06s
FACILE	利用改进的层次胶囊网络对二进制恶意软件图像进行识别分类	二进制图像映射为的灰度图像	1.00	Unknown	0.03s
IMCLNet	轻量化深度卷积网络模型实现恶意软件家族检测	原始二进制映射而成的可视化图像	0.81	Unknown	0.22s
MFGraph	利用静态特征构建图网络以检测恶意软件	原始二进制PE文件的静态特征节点	0.00	Unknown	0.00s

查杀引擎	查杀结果	查杀时间	查杀版本
Alibaba	Worm:Win32/Mydoom.bc5f893d	20190527	0.3.0.5
Avast	Win32:Evo-gen [Susp]	20200513	18.4.3895.0
Baidu	Win32.Trojan.Delf.j	20190318	1.0.0.2
CrowdStrike	win/malicious_confidence_80% (W)	20190702	1.0
Kingsoft	None	20200513	2013.8.14.323
McAfee	Artemis!072A920246AE	20200513	6.0.6.653
Tencent	Malware.Win32.Gencirc.10b07aad	20200513	1.0.0.1

可执行文件包含未知的 PE 段名称，可能指示打包器（可能是误报） (4 个事件)

section	CODE
section	DATA
section	BSS
section

一个或多个进程崩溃 (20 个事件)

Time & API	Arguments	Status
1727545274.25025 __exception__	exception.address: 0x4149f2 exception.instruction: div ecx exception.instruction_r: f7 f1 eb e8 eb 03 ff eb ff 13 c5 2b f6 64 8f 06 exception.symbol: 00bbee5ffd2b4bb674f7ee488082514a0e841bfe760c21b40080c7d3cb7b6382+0x149f2 exception.exception_code: 0x80000004 registers.eax: 0 registers.ecx: 0 registers.edx: 4272174 registers.ebx: 2130567168 registers.esp: 1638204 registers.ebp: 1638292 registers.esi: 4278674 registers.edi: 0 stacktrace: RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5	success
1727545274.25025 __exception__	exception.address: 0x414a2d exception.instruction: jae 0x414a0b exception.instruction_r: 73 dc cd 20 64 67 8f 06 00 00 58 61 eb 02 cd 20 exception.symbol: 00bbee5ffd2b4bb674f7ee488082514a0e841bfe760c21b40080c7d3cb7b6382+0x14a2d exception.exception_code: 0x80000004 registers.eax: 1636402 registers.ecx: 4278755 registers.edx: 2002545357 registers.ebx: 0 registers.esp: 1638172 registers.ebp: 1636480 registers.esi: 4278755 registers.edi: 0 stacktrace:	success
1727545274.25025 __exception__	exception.address: 0x41308c exception.instruction: int3 exception.instruction_r: cc 90 8b c0 f9 90 8d 04 5d 34 12 00 00 f8 90 c1 exception.symbol: 00bbee5ffd2b4bb674f7ee488082514a0e841bfe760c21b40080c7d3cb7b6382+0x1308c exception.exception_code: 0x80000003 registers.eax: 0 registers.ecx: 0 registers.edx: 4272233 registers.ebx: 4272233 registers.esp: 1638244 registers.ebp: 4272255 registers.esi: 4274310 registers.edi: 4274310 stacktrace:	success
1727545274.25025 __exception__	exception.address: 0x413090 exception.instruction: stc exception.instruction_r: f9 90 8d 04 5d 34 12 00 00 f8 90 c1 eb 05 fc 90 exception.symbol: 00bbee5ffd2b4bb674f7ee488082514a0e841bfe760c21b40080c7d3cb7b6382+0x13090 exception.exception_code: 0x80000004 registers.eax: 0 registers.ecx: 0 registers.edx: 4272233 registers.ebx: 4272233 registers.esp: 1638244 registers.ebp: 4272255 registers.esi: 4274310 registers.edi: 4274310 stacktrace:	success
1727545274.25025 __exception__	exception.address: 0x413099 exception.instruction: clc exception.instruction_r: f8 90 c1 eb 05 fc 90 c1 c0 07 90 90 33 db f7 f3 exception.symbol: 00bbee5ffd2b4bb674f7ee488082514a0e841bfe760c21b40080c7d3cb7b6382+0x13099 exception.exception_code: 0x80000004 registers.eax: 8549126 registers.ecx: 0 registers.edx: 4272233 registers.ebx: 4272233 registers.esp: 1638244 registers.ebp: 4272255 registers.esi: 4274310 registers.edi: 4274310 stacktrace:	success
1727545274.25025 __exception__	exception.address: 0x41309e exception.instruction: cld exception.instruction_r: fc 90 c1 c0 07 90 90 33 db f7 f3 64 67 8f 06 00 exception.symbol: 00bbee5ffd2b4bb674f7ee488082514a0e841bfe760c21b40080c7d3cb7b6382+0x1309e exception.exception_code: 0x80000004 registers.eax: 8549126 registers.ecx: 0 registers.edx: 4272233 registers.ebx: 133507 registers.esp: 1638244 registers.ebp: 4272255 registers.esi: 4274310 registers.edi: 4274310 stacktrace:	success
1727545274.25025 __exception__	exception.address: 0x4130a3 exception.instruction: nop exception.instruction_r: 90 90 33 db f7 f3 64 67 8f 06 00 00 83 c4 04 66 exception.symbol: 00bbee5ffd2b4bb674f7ee488082514a0e841bfe760c21b40080c7d3cb7b6382+0x130a3 exception.exception_code: 0x80000004 registers.eax: 1094288128 registers.ecx: 0 registers.edx: 4272233 registers.ebx: 133507 registers.esp: 1638244 registers.ebp: 4272255 registers.esi: 4274310 registers.edi: 4274310 stacktrace:	success
1727545274.25025 __exception__	exception.address: 0x4130a7 exception.instruction: div ebx exception.instruction_r: f7 f3 64 67 8f 06 00 00 83 c4 04 66 be 47 46 66 exception.symbol: 00bbee5ffd2b4bb674f7ee488082514a0e841bfe760c21b40080c7d3cb7b6382+0x130a7 exception.exception_code: 0xc0000094 registers.eax: 1094288128 registers.ecx: 0 registers.edx: 4272233 registers.ebx: 0 registers.esp: 1638244 registers.ebp: 4272255 registers.esi: 4274310 registers.edi: 4274310 stacktrace:	success
1727545274.25025 __exception__	exception.address: 0x4136a8 exception.instruction_r: 8d c0 74 03 cd 20 64 67 8f 06 00 00 eb 02 cd 20 exception.symbol: 00bbee5ffd2b4bb674f7ee488082514a0e841bfe760c21b40080c7d3cb7b6382+0x136a8 exception.exception_code: 0xc000001d registers.eax: 784913 registers.ecx: 0 registers.edx: 1631 registers.ebx: 1996041745 registers.esp: 1638212 registers.ebp: 4272255 registers.esi: 4278674 registers.edi: 4278674 stacktrace:	success
1727545274.25025 __exception__	exception.address: 0x413aa1 exception.instruction: div bx exception.instruction_r: 66 f7 f3 0f 85 5b 01 00 00 0f 84 55 01 00 00 8d exception.symbol: 00bbee5ffd2b4bb674f7ee488082514a0e841bfe760c21b40080c7d3cb7b6382+0x13aa1 exception.exception_code: 0xc0000094 registers.eax: 0 registers.ecx: 0 registers.edx: 335633487 registers.ebx: 0 registers.esp: 1638240 registers.ebp: 4272255 registers.esi: 1995328620 registers.edi: 4279712 stacktrace:	success
1727545274.25025 __exception__	exception.address: 0x413ae4 exception.instruction: clc exception.instruction_r: f8 0f 83 1a 01 00 00 8d 85 84 0a 00 00 89 44 24 exception.symbol: 00bbee5ffd2b4bb674f7ee488082514a0e841bfe760c21b40080c7d3cb7b6382+0x13ae4 exception.exception_code: 0x80000004 registers.eax: 4274882 registers.ecx: 4274832 registers.edx: 2002545357 registers.ebx: 0 registers.esp: 1638240 registers.ebp: 4272255 registers.esi: 0 registers.edi: 0 stacktrace:	success
1727545274.25025 __exception__	exception.address: 0x413b27 exception.instruction: int3 exception.instruction_r: cc 90 e9 d7 00 00 00 8d 85 c2 0a 00 00 89 44 24 exception.symbol: 00bbee5ffd2b4bb674f7ee488082514a0e841bfe760c21b40080c7d3cb7b6382+0x13b27 exception.exception_code: 0x80000003 registers.eax: 0 registers.ecx: 4274882 registers.edx: 2002545357 registers.ebx: 0 registers.esp: 1638240 registers.ebp: 4272255 registers.esi: 0 registers.edi: 0 stacktrace:	success
1727545274.25025 __exception__	exception.address: 0x413b67 exception.instruction: div ebx exception.instruction_r: f7 f3 85 d2 0f 84 94 00 00 00 8d 85 05 0b 00 00 exception.symbol: 00bbee5ffd2b4bb674f7ee488082514a0e841bfe760c21b40080c7d3cb7b6382+0x13b67 exception.exception_code: 0xc0000094 registers.eax: 2284013426 registers.ecx: 4274947 registers.edx: 0 registers.ebx: 0 registers.esp: 1638240 registers.ebp: 4272255 registers.esi: 0 registers.edi: 0 stacktrace:	success
1727545274.25025 __exception__	exception.address: 0x413ba6 exception.instruction: int 0x68 exception.instruction_r: cd 68 66 05 7b 0c 66 48 74 55 8d 85 45 0b 00 00 exception.symbol: 00bbee5ffd2b4bb674f7ee488082514a0e841bfe760c21b40080c7d3cb7b6382+0x13ba6 exception.exception_code: 0xc0000005 registers.eax: 4276992 registers.ecx: 4275009 registers.edx: 2002545357 registers.ebx: 0 registers.esp: 1638240 registers.ebp: 4272255 registers.esi: 0 registers.edi: 0 stacktrace:	success
1727545274.25025 __exception__	exception.address: 0x413bf0 exception.instruction: int3 exception.instruction_r: cc 90 66 81 fe 47 46 75 0c 64 67 8f 06 00 00 83 exception.symbol: 00bbee5ffd2b4bb674f7ee488082514a0e841bfe760c21b40080c7d3cb7b6382+0x13bf0 exception.exception_code: 0x80000003 registers.eax: 0 registers.ecx: 4275076 registers.edx: 2002545357 registers.ebx: 0 registers.esp: 1638240 registers.ebp: 4272255 registers.esi: 17991 registers.edi: 19021 stacktrace:	success
1727545274.25025 __exception__	exception.address: 0x413df1 exception.instruction: inc dword ptr [edx] exception.instruction_r: ff 02 eb e8 eb 02 ff 20 48 2b d2 64 8f 02 5a eb exception.symbol: 00bbee5ffd2b4bb674f7ee488082514a0e841bfe760c21b40080c7d3cb7b6382+0x13df1 exception.exception_code: 0x80000004 registers.eax: 699275003 registers.ecx: 2002466938 registers.edx: 0 registers.ebx: 0 registers.esp: 1638208 registers.ebp: 31070 registers.esi: 4275307 registers.edi: 4275331 stacktrace:	success
1727545274.25025 __exception__	exception.address: 0x413e29 exception.instruction: jae 0x413e07 exception.instruction_r: 73 dc cd 20 64 67 8f 06 00 00 58 61 eb 02 cd 20 exception.symbol: 00bbee5ffd2b4bb674f7ee488082514a0e841bfe760c21b40080c7d3cb7b6382+0x13e29 exception.exception_code: 0x80000004 registers.eax: 52 registers.ecx: 4275682 registers.edx: 4275682 registers.ebx: 0 registers.esp: 1638176 registers.ebp: 1636484 registers.esi: 0 registers.edi: 0 stacktrace: 00bbee5ffd2b4bb674f7ee488082514a0e841bfe760c21b40080c7d3cb7b6382+0x13de2 @ 0x413de2	success
1727545274.32825 __exception__	exception.address: 0x4146f1 exception.instruction_r: 8d c0 eb 01 eb 68 33 c0 eb fe ff e4 cd 20 8b 64 exception.symbol: 00bbee5ffd2b4bb674f7ee488082514a0e841bfe760c21b40080c7d3cb7b6382+0x146f1 exception.exception_code: 0xc000001d registers.eax: 0 registers.ecx: 690225152 registers.edx: 3221225524 registers.ebx: 2336 registers.esp: 1638236 registers.ebp: 31070 registers.esi: 4278673 registers.edi: 4194560 stacktrace:	success
1727545274.32825 __exception__	exception.address: 0x4147c1 exception.instruction: div edi exception.instruction_r: f7 f7 eb e8 eb 02 ff 20 23 c7 e8 0a 00 00 00 e9 exception.symbol: 00bbee5ffd2b4bb674f7ee488082514a0e841bfe760c21b40080c7d3cb7b6382+0x147c1 exception.exception_code: 0x80000004 registers.eax: 1998421471 registers.ecx: 4278015 registers.edx: 2002545357 registers.ebx: 0 registers.esp: 1638208 registers.ebp: 31070 registers.esi: 0 registers.edi: 0 stacktrace:	success
1727545274.32825 __exception__	exception.address: 0x414813 exception.instruction: jae 0x4147f1 exception.instruction_r: 73 dc cd 20 64 67 8f 06 00 00 58 61 f9 72 02 cd exception.symbol: 00bbee5ffd2b4bb674f7ee488082514a0e841bfe760c21b40080c7d3cb7b6382+0x14813 exception.exception_code: 0x80000004 registers.eax: 0 registers.ecx: 4278194 registers.edx: 4278194 registers.ebx: 0 registers.esp: 1638176 registers.ebp: 1636484 registers.esi: 0 registers.edi: 0 stacktrace: 00bbee5ffd2b4bb674f7ee488082514a0e841bfe760c21b40080c7d3cb7b6382+0x147b2 @ 0x4147b2	success

在文件系统上创建可执行文件 (7 个事件)

file	C:\Windows\win32dc\BattleField 1942(serial).exe
file	C:\Windows\win32dc\Half-Life 2(hack).exe
file	C:\Windows\win32dc\UT2004_hack.exe
file	C:\Windows\win32dc\Silent Hill 4_fix.exe
file	C:\Windows\win32dc\Quake3 cdfix.exe
file	C:\Windows\win32dc\FlatOut_serial.exe
file	C:\Windows\win32dc\Silent Hill 4_crack.exe

该二进制文件可能包含加密或压缩数据，表明使用了打包工具 (6 个事件)

section

{'name': 'CODE', 'virtual_address': '0x00001000', 'virtual_size': '0x0000a000', 'size_of_data': '0x00005600', 'entropy': 7.992235378339067}

entropy

7.992235378339067

description

发现高熵的节

section

{'name': 'DATA', 'virtual_address': '0x0000b000', 'virtual_size': '0x00001000', 'size_of_data': '0x00000200', 'entropy': 7.537443661508319}

entropy

7.537443661508319

description

发现高熵的节

section

{'name': '.idata', 'virtual_address': '0x0000e000', 'virtual_size': '0x00001000', 'size_of_data': '0x00000600', 'entropy': 7.871666928051274}

entropy

7.871666928051274

description

发现高熵的节

section

{'name': '.rdata', 'virtual_address': '0x00010000', 'virtual_size': '0x00002000', 'size_of_data': '0x00000200', 'entropy': 7.582096724860129}

entropy

7.582096724860129

description

发现高熵的节

section

{'name': '', 'virtual_address': '0x00013000', 'virtual_size': '0x00003000', 'size_of_data': '0x00002400', 'entropy': 7.596943615976609}

entropy

7.596943615976609

description

发现高熵的节

entropy

0.9705882352941176

description

此PE文件的整体熵值较高

与未执行 DNS 查询的主机进行通信 (2 个事件)

host	114.114.114.114
host	8.8.8.8

操纵非子进程的内存，表明进程注入 (2 个事件)

Time & API	Arguments	Status	Return	Repeated
进程注入	进程 2336 操纵非子进程 2336 的内存
1727545274.32825 NtProtectVirtualMemory	process_handle: 0x000000b8 base_address: 0x00400000 length: 4096 protection: 4 (PAGE_READWRITE) process_identifier: 2336	success	0	0

生成一些 ICMP 流量

文件已被 VirusTotal 上 63 个反病毒引擎识别为恶意 (50 out of 63 个事件)

ALYac	Generic.Malware.Sdld.C44D850D
APEX	Malicious
AVG	Win32:Evo-gen [Susp]
Acronis	suspicious
Ad-Aware	Generic.Malware.Sdld.C44D850D
AhnLab-V3	Backdoor/Win32.Delf.R257860
Alibaba	Worm:Win32/Mydoom.bc5f893d
Antiy-AVL	Trojan[Backdoor]/Win32.Delf
Arcabit	Generic.Malware.Sdld.C44D850D
Avast	Win32:Evo-gen [Susp]
Avira	TR/Dropper.Gen
Baidu	Win32.Trojan.Delf.j
BitDefender	Generic.Malware.Sdld.C44D850D
BitDefenderTheta	AI:Packer.A19697D721
Comodo	Backdoor.Win32.Delf.ste@4wua2l
CrowdStrike	win/malicious_confidence_80% (W)
Cybereason	malicious.246ae2
Cylance	Unsafe
Cyren	W32/Delfloader.B.gen!Eldorado
DrWeb	Trojan.Siggen3.61286
ESET-NOD32	a variant of Win32/LunaStorm.D
Emsisoft	Generic.Malware.Sdld.C44D850D (B)
Endgame	malicious (high confidence)
F-Prot	W32/Delfloader.B.gen!Eldorado
F-Secure	Trojan.TR/Dropper.Gen
FireEye	Generic.mg.072a920246ae23dd
Fortinet	W32/Delf.CST!tr
GData	Generic.Malware.Sdld.C44D850D
Ikarus	Worm.Win32.Lunastorm
Invincea	heuristic
Jiangmin	Backdoor.Delf.hzu
K7AntiVirus	Trojan ( 000010291 )
K7GW	Trojan ( 000010291 )
Kaspersky	Backdoor.Win32.Delf.cst
Lionic	Trojan.Win32.Delf.tpLp
MAX	malware (ai score=89)
Malwarebytes	Trojan.Delf
MaxSecure	Trojan.W32.Delf.CST
McAfee	Artemis!072A920246AE
McAfee-GW-Edition	BehavesLike.Win32.Backdoor.cc
MicroWorld-eScan	Generic.Malware.Sdld.C44D850D
Microsoft	Worm:Win32/Mydoom.PB!MTB
NANO-Antivirus	Trojan.Win32.Delf.fnpcbp
Paloalto	generic.ml
Panda	Trj/Genetic.gen
Qihoo-360	Win32/Trojan.Delf.B
Rising	Backdoor.Delf!1.64C1 (CLOUD)
Sangfor	Malware
SentinelOne	DFI - Suspicious PE
Sophos	Troj/Agent-BBLI

288x288

224x224

192x192

160x160

128x128

96x96

64x64

32x32

暂无运行截图该样本运行过程中未生成截图

👋 欢迎使用 ChatHawk

我是您的恶意软件分析助手，可以帮您分析和解读恶意软件报告。请随时向我提问！

🔍 主要威胁分析

⚡ 行为特征

🛡️ 防护建议

🔧 技术手段

🎯 检测方法

🤖

Static Analysis
Strings

PE Compile Time

1992-06-20 06:22:17

PE Imphash

3c0e70bfa5f73f1f1cef484e2bcb5bf8

Sections

Name	Virtual Address	Virtual Size	Size of Raw Data	Entropy
CODE	0x00001000	0x0000a000	0x00005600	7.992235378339067
DATA	0x0000b000	0x00001000	0x00000200	7.537443661508319
BSS	0x0000c000	0x00002000	0x00000000	0.0
.idata	0x0000e000	0x00001000	0x00000600	7.871666928051274
.tls	0x0000f000	0x00001000	0x00000000	0.0
.rdata	0x00010000	0x00002000	0x00000200	7.582096724860129
.rsrc	0x00012000	0x00001000	0x00000400	6.753357619284395
	0x00013000	0x00003000	0x00002400	7.596943615976609

Resources

Name	Offset	Size	Language	Sub-language	File type
RT_ICON	0x000150be	0x000002e8	LANG_ENGLISH	SUBLANG_ENGLISH_PHILIPPINES	None
RT_RCDATA	0x00012448	0x000000a8	LANG_NEUTRAL	SUBLANG_NEUTRAL	None
RT_RCDATA	0x00012448	0x000000a8	LANG_NEUTRAL	SUBLANG_NEUTRAL	None
RT_GROUP_ICON	0x000150aa	0x00000014	LANG_ENGLISH	SUBLANG_ENGLISH_PHILIPPINES	None

Imports

Library kernel32.dll:

• 0x414c2e GetModuleHandleA

Library user32.dll:

• 0x414c36 MessageBoxA

L!This program must be run under Win32
.idata
.rdata
8\plJ
{{~nZc
9HGuX+r)"
xT{5-l;^`
y.%mtB)DHV
5)VBdY
t;jj+iOi%
nj`.J[D
,"V:&Q>|KE`
nST(>v
!*QqM5#
]Wi[m.0P
PJ8Sn;La.v
3pyG(Tv;L=dxjp
rdK'p pQ
">nPccB
W?qK{_|
F<[Qg%
VTOoU}
r'a%=xF;
Nzv@UG~
/(>)Xod?T
/G@1w!K]@
Z{CDkZ$
37; WpA
&T;$c^_v>Bq
OdtG=yK
@w7ON2~7{
c&N1%4
B(N&U(gO.Q
xYb4~6Ys
1P\1S 
sc~%Pa=A|94
G)Ek|u'8^/
YY &p!`e
;~c!,?y3_
%"L]GS[B
T n.AT
X\IkRl
Ko0X]ZH>K
$.a1X_w4'k.
:OgKcfp
@~3?rP+l/eE,
QZ_c}Wid@
<4fKN@h
;:.i%<FS
tv{%7/7vz
A/b'P<a:[AOL)>>0
(~)<.u
-%\UU8)
@'!Rfi
SiOIg'
RzP=\ ?o/T~P
w#6IBV^3f_
"(]x-@@P).,
4v&@m6IQ#
\mvD8+
:W~/>H,
`YJ"td3
3@'@{KFe:'Y#q_Q
^T"_z*
V#Sd:?rc
b{kZK<
NPcBsP
70eJ5X~{O-4J
$e([47t$
] >g2j
_p's;4*iG?mJNX
Td2Y9TN:v
z:lxXq
xj3eJ<IJ
9C_/W4m?+M<V"zJ
76(SY:
AG%%sO|;dm
$)8heVA
\dmY&0
NiG0[\s
]*}6K>j`g
^0t$DB;`6>l?-v%E$N U-tf
y-"'Z:
O,W6C'hF3|
{s5k){
)dh2]+
D .b[1fV
3>|X`NZdQF;?%>cWh,.9
}"P38*fO
ZeY,7JB
vt;vwHT
l (_\CV?
Xt%W,p
aHAkf,#
* !s2`WUmR
6j|f[gk)h
$G{!6y}g
b"7S#NaLr
Lv$9^
9.u2; zZS
_rtNCfa
$brI~u@2(q}')H
ZDFenI
`mZRj;
Bz:%E}
7n}@49
p,6Tl6eje
U2KWD^4
V!grHg
$`t|F6z:
: %kh<F}WAcTvcQg
0HiA<k`<rdp}G!j
p,.-ZE]
a3<_bw]&
qH\zn!x
*Mj=gK$U?/[j)
dKLot>GP_K9I2V
>H#T^=V9?ki
PbPhX
Cs" uuQ6+$K`t
gDvM\~
.MM[RMRG[~i;g
qUsVPEd/
r;zfk"Ye
K~#$18-q
M12;-
0)}P"N'T*NR-
$-vog|
,5Gvd#
8d`bl)!
!5{y9/-b
UCbPK1>bx
r2fh1q
FEg[8<#
~KW7%e19IN
^@|?7u!
H9IQl_N4
7s:R7NL,KS
,&Y '`E
$7lp5G9
aWJfJwp
_-yJ5tw
p'L*qpQ
6,K@|[l6Y
K]^|7R0=
l\fS6QIjdnr0!qQqHSW
K%LycGu
RK^f@{
TW7fKD
@]Z"-?
4gu[3u[vT$~
n:{gNMh
)W+M S
5'U.+_:k
.5?/ BA=.2M
3-+:cv[[M
f~@07i%v
S,dxnQJ
:\,P@Ccst
KQ-wzN#}vC
JmsxP1MX"b%
%iSmOU
vfuUt}^
+wtp(f]
pM@=p)&
~S1%%aQdV
)vbM,D
F;gB7}jy|T
MfybNS)i[H<+w
Dov)XE
4Od4,`[oc]b
TU#,-Z
]NO|j&
$Tjms_'h=4
'BTzL&].
l.5yX}VzpJeg
,ndn{%
IeE-Ibfe
D"=XCvbf4>m/x7}y8>
< fX1?k=79q
BMA^{LRG
N }~l;
],PfO_:c
qhM}`\
Y5q:+=
kB`k+}e
Thn"WN
E o`J$.
$pAOFtG
0Cp{@GW
#sVh"3'aq
(y?+r}d8$2
QriL~@
r#oE:SI%y(g@{
_s]7[G
v4f.XO
K`!A%
rz2L1!(E
r!Qp]iIx
fu.,[%RShFp66
#G/#W
4|f8\|5T?>b$X8
qDRcJ&DV
1C4 O;[K@
gWS=O.dctf+
\K#H#n veo
dJH5vY}&85%V
W~3 L'7G@(t
[NWaeK
#M8>hyt)[5
Q4kco!fOMta
<5BpDh=
b:rKi)6DZ,_+
3sNZ2@,a}S
xNqz1eF!BG
QlQX-Ee
d^X[
;g|I[V
=->X%J
/)|*qI8
*o@0nt
4#_NIP
(R;Lx 
NZJ8qLU
9(0L,?3
'9Yt;W|LW
QqX9.8Q
{g#y9a:
;oGP1'-U:6gnpL:
t#/4Qw3
& 6HycW
nM'e7A
)jdhiIYo&
|3ih#^
@D}`;i-
o.6QpQmPE% cZlZu
70o/7B
<D?](UwtcrU "
{F8V/dVED'*
><Bck9
o4ju~vkK|
lwK'15|Wx
Ep4x8L _p
?F}OG_=
G!FK8=
a0I$@7oY_yiKM
op.TNL$/*/'b>f
s!$m!9P[`
{1.UM;
sAm-qLa6
=`|mgl
W,,RoI
x*Qx/4
^zCo;X
E%yU|r
_VC dy.8HH]
 %d$pZ
HSW59CB
:,kC1?5A4m}
SH=N- , l
`$,">:
[!%!;+]z~
I_G{qf
?fCQgn@,9;d=
,/z/buX
}C)P')
FAc$t{)0Y{"(i
uLD|obeV
{|b]"d
|%-g2H
UC,[<qal
Y?d*||B
4\;;2$"
2[4zu;O2|
WDbj\u@\ib[t
*^vIs4}%N$
DKUdj*6
..<NRi
P&-'_z
ItN=\s
|?xCBP
H\gd96
'yaJEO"AAN
)!9<Bg
^+h7Cfw<G
7/HQ U&Rd
eLNUOa
[b,_K8
d~R#Frk6U6n
X"nH^|-<Tl71
EX>mA,rb>Kou9$G?0I
bDAm|O]
bi%w )7R'+!w
2%&Lc~
(#Cp$d
@~=ADZP}IF}KBD
FBD!%Q:Z<z
+x&h!W
HM&AgSQQ_^
 AO!}w
lOm-eH&wkc
'?0?F2
@uGyJ:=bHw*0;:F5161s
X[+@O]b
|!g9UKgD|?
x (Pbv 
jDiI6.&c8&
llz 0f7}Ooiv
?vR{98
qId\Jq4dg
*22\tJ
@&)k<-
nKKi2OT1
c4aQ_SG?KDV&f3
~y;cis
lODtUw%{CZ:Gl/<fk[tXIRG6oI
)>WTsRT
R{xT^`
6+i/+u~S
0dzshrOxut
_a[5P
OV]VM+H>
_~_9ElI?FmL
G`MvBIS
Q!w{yLQ*~
=d:GO9
a_9(cl3
v#C{}nD8
gY66@S
&\XJ$I
~FeEY#
RDL:_p
6E"2P9l
l|9[W 
K@AnZ~
:tRr|\'
l&{_~F_9P40;x. ;w5zC'
txgI'0
,"!<`jrQ
g|3J$.
r1H.dZ7sg
A>teG~
q~^|)^A@ <
,j_<ui K}nRQF{;f!En-?
[89M;4&
V^*R(nk
h;uVR(2 Cm
2kobW"
L}e^iD
NHip$e
A|E7TGy7B@';@V
lb{FNmMC
+zT58O
OBt"`]9
{B2=Kx
VD%#!byC
iq`61R
gq~caF
{R8E`>]b
b9#dI+
?_BwtT
4>\q6-
)`f.K+
|a\V(,)
!?g&!+g
Y=Ip2:
;swl/;1)jVEm]q]
6v/G|2i
trO:mZ@-
gCgtd%b},
5S,GP=9
Hg)W:;o[+
#lP`KW
KYqfin
[/lq4cM
+bqyt;t
ipdl^djIx
>WN*ra
cal7K-s-
dX/$9 
Hs%y\b
yR=@2Q
3ECUWV
!!$yzx
&W5II*@
Q^i ?h*
IK$if7;~(>
M*:wVY
~$^,EZJD.
/P|{j${w
3o2^,zZ+\M
R{<TN% sWbZXz
5.U2KcqGs%
E&W2V%SKf$XOa IL
SpSkZ`
Bt|q$|-
Cd{tts
rO<75s/P
U9z8Y@k/6&<
=q"$xB
(y&fK`
V|x[VT
HRKCLkR
t__C>eT%E
BPZAc+{
ixF:47Zr
S;>^`j
Qrt"CIh`
bxXQDJL
w&E4]#
q2txp[6O^
\.qd!#
1O[,x9e0
v@!#{Nf@@
:=d,=2Z
C d)3E
nGJctwdG
fu&X-o
q"<=HP,
]->Srljz/r
U<E5L\
q3Oul1z
PB1uaH
O6l{VC
h}Gjm
w$/t:TI1Q!=
,<+p4M_D
$]SGkNq
*&Bkd/E5Y
2T|gwP7H
_v?flM\`
CxuN;,Dsm
wuEPo[8
0+%.!r
b,]B4<SAW4[M
dHv9o+
z]7B5L
7bS`_&
T0kxeY
jQ=/i
n|?EWkal|m,?
.MqiiCk.
%=.).pxa2J
zZei3@6MSts9:Gb#
A%H>pI0
IF,fyN+T\
vWBFrn
[o*$;yt
UC[e~O
$ H|."
[N;bZ8:7;'9Rpl
8"no'C>Jc
k0k[[zm+fP%
*Z XS,
K9wD7|lY3sj
GiwMN-J< c
<BPck9
l^Nz>v
!2)3Ep
6h_ZG/)m2a4w
RY[6I'Zv*75"
g-Qt+] 
i_*=_9kT
=YwvArX,tra
V>)4UYD?fE\t^y
ySJ>P5
u;*q!f>
;&&iQ$P/
uE9"w\
S@XVhS6
D";xO4u6cs
gvhF;0
Fu'm5o
|"+'kM
r@\h1m
Iro}HB
xe0tE}i
lf5Pu^2gw3,+
Fh@xn/(0Sc>]Jb%
5gH6T'
!n*{P!
[%eViJI'
U,=3c(
,T^AC`#v
sEx<>1;
tQRp^33gxGgXE
u'"N$Z51saJ%GwPVw
=^E00B
c{(T`a$
zPHb;4]
3-|QtLo>
3Q!rB{6gHKa
mSL}_Uz]
$ H\c0b<
BJJ-;+'
{2.Zdnz>T"
d]O!oT|D
|:roazX'[sfm4y
7LraH]j
dZt@'$2
Mz*M&{-Q]
8.J^7Gp!rL
S{eNgi[@
LCd'bg6#
{<:y&q
DI>nip
C*ShlAP7
+ockvpMY
aFu3nc
boV>!MyD>N
xBIO$fc=?&<W
X.b|2zUi{gG#lih!jP7]9j
33es#Lzy
Ac-YUEIA+YdeQNmw'
iA|8RtY#
+d!JS?
J0}UR
@8je9D<W
6r,&$l
[9}*UV<mXt08iP
DPGP?HrTrD
M{UouM
g!t]4{
vl+^LW^Yk
K66-Q\$J&vZ
A\#N2!
6{>=64
tBO\~|o/vjVSh8(#MnXVT1\
ATc@G:kg
:b'|vhtv&|
WRG1`v/
0KrFTSuU4
tM2u#vd.:ljGza N
T>5,BD
SJz'"6#
M.c\'"fG
!n+m1b,
y7LtB~s
RdVCQa"YmVVk
XZebx8
oIFv4d(TaX
"T:T. 286DV<VPBDJHVhNhbTV\ZJ
fLn5Q8x@.p\'~\?
@QgS6dXA
"-}"!Y;G_Y(&
H0JA=4dWZqr$04Bl
rC,-0fYG
e$9 Ff
m1&pLZDb_Ge
[ar6!j
gIi@|2
b`-bc'z
18>0?vHfjJf
hq<q%!?
Er}Ey\
c6mQTf
F%vU+R
,sOj=k
H)%~ji\
Me>nosj:+$1F&+%H^/
#qVEf(+k+*m!
[%G4d~Q>
lq-JWe
P]M[=7(e
S&s?'/
7q#7!QS[
%'c-jZq_-q
Mi_jtW
W~`v|Fx}
g56~^Q
&i]/F\[C
v=kT:[2oQ
=@DA+W~|)G>
>>:v!r2M$
MF<w:l}I
?Cx*rg,K~TM
=>#$h\
whVB=B
3&%._N5
E..if,hr
'h2c<1
%=1{~DvY
a=#IDU
$aQ*|'.D
Z=hylltY
F9fKL#
`f:]sa%n
d]NV>Cs7B0
_Vwt8z
^:5#tL
%Ej^@%TC
_2ugrW-l
6:MUiL{c})PW
 5|4;28r?*2l<eY
k4E/Tf
FOXj[R
U})vly]
`KPStqG?NrFXhOr
#BLxn.*
`m64J{
C&f&r:
2 {.LXg>
ROt;{rC:H6v_-
k=/4OzK
KUE*EFMTZ
p(O!&1,Gi88$+
P? cQc
^qh7HM
&pL+B*26
Jw3TI|X1
dke!\eS@os
|1,Z5E'L:6
8;JdHm
v;"^c==
>GO$=!&
/vPR;0:
,LwA7'
Q^P_{pw!mG9
LaUKzK
z.~t7w
.6.,?B
N$AMjN]\ GCa6
8!C0$4ELj^
v1w'Sg
0xI:uf#V
u6Pr,;\~L
cE'UiCB
ox/+t[
>T.:x7
F.m q3X
D)-_rL8$P>r42
aF,lF,
 =nky12
E0s'u{3eu
k?$J;=L{
qB>f5Y
?hswN-gS
kernel32.dll
user32.dll
GetModuleHandleA
MessageBoxA
uhPD;ywpY}&l>
i.BI{7<#v(nH"P
Z9Z<"sens\~
L==Qp*d[0
\;+Lw~sC~
tbjxNZ(
Mr![jm6O~2 
6PI& $NZb~
bqdrRZ7
A=nMkx7.
zF&&Lfos@~
hcdxXU
Z7%Pj~e
|:=yho6F?^d`c=Q
>}I! Rcbb
<^!ubnO
F4-Vj+
t-H30"
Gggfv@
&vvggd
wwgbvt
1wwwr"gf@
1wwwr"vv@
wr""gf@
wr""&f@
ww"w""@
1wr'""@
3333;31
333333
sp`x`laE
jrYVK\~NA8XvC
W}vy_jmx
LL@GGNv
8Y>cPH
^.~_T@\|p
1qx0zi
-i7g~jw
.9'n#\{?
?" wBQ
?hD^v[Q
a{Hjev
jC?UQ67
lIb9oa
M'Jg%|
76r@q"-t,MiX
 4LWN1D-N
$@-*{
>3uwZ6H7W
OzOXr4V|7i?Q
5';+FV
3jNqz2(X'!
_i0oT>`"SbXm
#vocUdi
@FS,_-*
:--KWrw
Ku'{q}L
)ye(Y)bVt
|qxf+0
K'(6*sq,*n
$cc6];A
Xw76>#w|
BoH^,_
u/?2~(
4ja74JLf:hT[H=/TZ
pu{,0CU:
 p.9t"u\6x5vq
gTG(1@T[i/3
&>*[j:<G_1H%M
)x-e9|
?)6sUtP;n
rPfh/3Au
hx_iyd
WzfFIp]8s.`
/Ie8B}?}>F zCN"VCS
7YQ(GP
=14e('3p
EV[/k*u
6)2t=%
-]`F`E
u&oLz^:
FXozq^
Qt>aP"Sm8Du)uli99d
H4f>Mb
mfAL=F
n+8?J`S
0nM"W5Xz
^/SZoqM
:m*OsP
kZX2f.
<Oj@O.
@^;7"<hCX
G=^9FE
I;'l+r7
UeEfi,
K9yo1N.|.
\zZ)1V
;%\}y"4^
*XfP&[PN5
u&`1"hA%'
3~wpNb@
ElYrxsBgCQ0
Iw5Nya5
MO92mw
`#IW,W
eEa+Ge!
]<tHRU+%
Wk>0R]$<{
%@GaTmbD%fpJ'f9A}kH
B?R;b@
:jm/N%o?
D~:=h*
C+QyD8+!m
^2(A5I0E$[ Fk#[
U/xT)
%hKWCev
5J}NzHK+XL;[r
,b5"XO[vs1
jGWB]!0$h
}s._l"w
=:Sg:?
Y!As<saQ{"
e|H\*5
BSW-l(
`Y{.|f4F,$
_XNfFi;
y+m[kh
"h&?wby&M
gyD,):t0GF\-
-Noix;^5
'"0@"eI?l
ZLRC-bs
uxt.Ou$
+Bjt(uQDSc'2lw5
n sRPAmN_W
kZ0=jZI
Mrpn]v
9ueh"S
(K,v>_4Y
5y4Q#mP}
B#nJ01mT0
fF_M1=11
?4I/yJ&FR
2 +20D"
n0!kx7
&XBz!)O@FA~
j<Qj)T!:R
%bMk FkE
yYV YN_f8
@={\8Wv@_8$
g2jOl>q
.D]zl>Z!i \
tUcGW
Y-ubke
k:I&UY
g}?j^]_b/hWx@Fm'~M@%
O\m52A+'b'a
b4 w2j
HO#WB*
(jY/{\A
aEFf`u5R
.]Qm@)}
UdWYS,
}UmeBGIys"Z
^6HH|b4f
 Pgw%qE
r9[ZpU}!@
`WM5pq
Zn,l}4{u$
|bDVuPWaF
q9.ADR
G"?Q}]v`
AW?W<[
\.sLz$@qMP!M
JPgU=V
Xs6G3.VDY6
wZYIPD~oG{
e[&^U@CR
Z$Cd,(
Z;h]G$O"
#/%foUF6
s:,X|,
#Ik&|R}+q
ml}k^Y
1#WU4<
QN8a?cMnU
kf>H.f{E^1
<ozN;it;
2d4ob6] 
GJc[`[x;B:U+jTm
k80tl'
82,Gjp
;JN|tfgMN
J:v>*C
V>%~UK
hOq$R
fU.:4?$"
.STTw(
{v^b2YJovj@
15::R"&$7aE
SH.yO6Sz.x
!Kfq1N&A+]
4v!L:{rc
YjgTg!$RGK v
`CV@jCNZXH
4-#Pzo
+x<a'b
=6R\(q3
-]Ows({Zk
B/Ix)s<+";}Dg<Hlh
h4_YJ$1H^1
weouMw
z*XUkMK?UfW<HDHS
Re`WG=];u
WTX*0{1
H,%ZMib
!1)WNnx
vR6[y#
<_xt?=
mJRCZ^mYs
)r]Z-9CW)v5(
bvfL`{
c9vga9dG
*0_!gH
%+[72%d
@8ju*}FlKCg
Z|+QtRv?
6v V$9C
EQJMJ>T&X'3
XyKl!k]x^
X1$U<n<<pe}e
c:Th]1U6L
R*9X{2~M
Li)X3i
h%XvC};<
P7.WrX9%tj
jU}EQm6&
]!\l3I
xut2Fl
.)_Lc
Qy`HH'l8n
Ma~=$P
^1}$bEMG
wluqZP
*k<#b#.
c' 5e'*Yd
y'"J2IQP
-`7/+@:x
71F1b4=
H*Z]ZZ
y{'Eg13
q)9Zx\i:v;?
m ];h>
5OEXouM+
XLZmSj\T
n&.t-ZF6L,
f6_B}Fa#@
p}81G.:at,r]
d6}DUV@w
SX/RtB4
aE$5GRN`}
_~#F1\
-?=|g;`g
k#TB{ 
,#zxQTJ
ne1tU0%
_O_-28
F2rrU;
>yor7T1?M
Eu(2%6/R
Iu|9a@
w=4JtQ5y
~"l"jVB
$X~9V;
.yX_koDQDy8
+V.Whj
TmR)\d
%~L+i?E
~DLvY[h
w`Q\=f\Zo
|zSu?%
2sRL^G^
:I8!i"^m!SY
2:t'__/iqR
.7Y8M)
&zW</O
D/{(TF?S
sB,+yii32\
UDn5t9
>-iJ!s
B3M/kk>Q
jJwCQ[v~wxO
ic7zD|V
YS/kKo|l=,w2
-L$1gf4
Rr~)<H 
PO}olN
6 lHF2*f
w$'eO(61,
 h%^}G z
GmOMB.
y80:PW
I\pZ}_12$^ 
'V:W!v
~?=keS
e;$An,
 7_UV*e
OEf&a`+
O%`mZs;:B\f
U4qjnc
X$/wOKT/Y0
@t,~d{
B`d6((
F7nSgx@.s:B
ADR2rsZkg
nvfW"|ct^s8
q^8w-v
A[=B_&
?/`8k7C-s:
XoZ1#Y%
;1GDbg;d{.
#xd{ I|y
G3U&2j
E}Exkt)
/+eNGr%CXhghm
t`iPJN
\vdi7q
g\5M<Z
F|L|jGw
9(6p]/j ;
w/}zMv
[k@HQ0r1
v'5~$@$"
m.QPFN{<>
29{m/cA
o3rkPA!
[KnbY~Jz'(p
c8NM/L
y]c`x-
o-53/a>
nDb,i6|LV2
R}[>|-Ac_$OQ
2I&#wLh
{B3HMC=
VJuO0WcA7
dY2yc9
v-+V6e
}(z_mwsU7
*c~XDt
gDur86p/q
Avv4V'VgZn;8
ajXh-`
CC4bV'!3Y
4!`RJ-K{XU
o" _Pf
=.FO/D
*!FGhr
/3I/kG
u$D]iJT'b
/7r.krw
@biGW~
G2"$5l
W"deu|
D7g0'Jj-
]Ai:fP/
[neQ5bK
0c1Czz
c{P-<>
7i{*~{D'MV-\O
8X`$Z~2=c(=iwuum:
g>O6MC,
7WV>Be)+%@
-D.S{93
3R+,[>
Bs-'7Y
J8;]'8
n&)R-J
?3%)vK*
:7YLc6
(5.rHIUv3 s
?xqW:`zz
|hKc6w1 '9"
e/E5]UQ
WZznlz&
'>Z/l>W
9dkUM*h3
#-csc5:ml7c1l^
7PC`QrScZ
x#P$sgf
6'#k8hq({
7^?,r^
{t mJ"u]P%9WMwKA 4,2
S.3+;^
L'gdi ?
_5a{HC:LX
^/]z)=
\}k4>x,{~~'"
?<\^'0#URlc
?[$OAVY8W8
$$d~h+^*"
Zt"X(SJ
}X~>%-J
t,HWS}+0_A@}vf?
[cR'4qBdI
hP]rjwh
R4$''*
 )-A<S)szW
Ro#hIIg
bYuIp v
(?bX%q
9_8%~
Wol0p
c6y@wvnK_
v'L'bH
~*Ls.r4jm
marbz]rV1x@
a2ETidQ
FE@6M%
xr!+T9
QaFiAXZ
TeZ[< 
CQfsZ,M
3w?~O8
Tl|2|Dhp6r+
<HNVOL
8}& H
nJnslyf
3k,Mg28@m
mj=Nj*V8
WI{T/,,A`"an9B(Y
.}x#'07
JJnw!|
"WzL|,%Tn2
HD66/K=
hFBSXh
bB-K[aH
zGU*P[@
ab!~=:6?Mkg'~qN
xQFN6Ak
Qpf-bc"B
pM*&i9e
RHdi"_a
Z:maTix
}DYs:v,
Vj#}}d
z/frSn
LxDCuu
iz3FF"
mbwEUb
}eoS<_
-0bWAcEfU2+DjX'
|-@w4xg,pX2*6>
;)o.uZY
WVU<^t=0dN:>4l$Zh;w4~t9v:s
QqR4G7,
tukopRPmu uG
4$x>PJ
3`]R/D+w
O@HqLc];sz@6
Uu }hTw7M9[WQ
{. lsy
?>)23E$nY;
x0nhBH1m
}7!V3r.
;DVkZH
qv\hTNE
,Je&P4qQy;I2WW2
BU}b_;
5Nsj:J
b(wW#ip|
p)l?7%'6
; zA:\&$s
nWVQEjO
kC4"Ac6RF
!m#eKC4
Q%m.m*yo
II21\h=Y(gg{
Z# X (4Yli
lSS[~W
9Ev9C!g
~q=}sn
oD"3p2@Gl[
rn{C$Q9
zq(y*Hx
/>CXJs{
@fCpix>
88]Xw&
MW[@X7O
tyh<Qcl(;>'4
~$b|~p
ipqAxJ,UX
Zp@Z2K#
m`7-rz
8h/xA~"
GVA'C$Xqj
>ZtC5MG
)A"K#~~z
7akK0
pbi5LUtB
?]ao/'oI
D@VvU;
uKQelGH
z^o$fMF~XU^>AO
Eds`Cp
lif "z
[D*M3^
cgT4l"l
V@*?"n
%?qH?RGEA
z+)2"6r
]j*h/;>
Qh\htU<*
T7g(lu+('4
Y8(`V'}A
E?:^e5
G7XiPvTKZ;R*A
5Kur Di
xnyDtqh
7*Ikp%
b1uCK~
LZio<y
UW=2RZ
l}o8(P
,o!,gFi
:sx4I/e?
`pb2*{
(+Ry8Hb
l31QD6! Q
"ZAmWxo
Zj$,]TdwLL)s0
Ek"IWaV
hM??Qd=ly
#kI=$,u0L
T2TYg
rbkcj}
`HC*1ge@
c|,#GN l{4
N<z4!g
\s;fGv|
z>E=g3 
DD'Pk>
{L98.|
=3m&gVpA`sh
HxVda
;%"JfZa
V}+rE@;)p~H
h;tmv G
jk0%Y<
Ih{!`G
k 4ko:
[0E5f+
B|{7U\p=_)v7=
e?%duLk?`
ayL)%B
_tbQB\%sL
|`?_SEd
wPz=uac(6*M2YD{T=
ze"jvT
^j#-zX~8p
kr$/g|g/1
A<`Rd|NkO
BH:s+4Xh
7fqf3&
^hZISL%_
~\n-sM
^:-r2Qo9
*R)Dc=
JwV.wQck9
zXjE@de@Laq
LjqdTF'
r{("1$o3|9r`
RAym*U
 &z*Rd{/(:
vN*+@K!fj,
}H11!2(
3]Rg-d
wFa;=C
;hkC@
X~(=/*
1#I.SQQ"Zk*
_rG#'xo
2,)G`{=|-
mEAcOgf
le*2L:4ZU(v
jJ({|*b+"*{
*C_R[M>jBcPJ
p_urtemOK
g-gd*LsJVw;
jb*jKT>f
K0{n`Ib
3nu$@f
atm#h6x
0?KhU4><hUpg
*}d}~3?
N'TitJ
z|SX]/
o9@?W-
g~Yh6
n2p{V5wdi)cm
uY<GB^
Sj1Yc\)@lh('
$q,8~kxMu9d&@
qy*u{r
lBP4?~/\<J
^]>S^pq\''
Lu<SY=
o8$yJyVrp5
PHT:,pmX
x'k*ETSFP@
2]B?-|w
vOsX53Bazp7*rl<A
*(=qi}{tPo3m)ae6_3
!5 MedK
:^@WtxRHF]HK
p_ddL_
0RH!c>/2
2sK=Wf
f|+h^r
pI8qa-
p:II#/
7 wBG@:M
wt((eS=
Y\Ma;Sj
!&1mj%
EoW8o@1-!=
P3Q(f8
 z^]M3;
EAS@,?
\2XHR?!Y
8D'uM1F]y
QQY+kCg*
da 1{N
^*/.4DX:7
s;4$)-J
Ltpf5@
 2ajmm
l"B-`7~
*C[ade@&R:]M
n^wkpsC
$O>7h|;yD
C&ltK~$
c_NaR q-F3
{W0;)DF*J
-"HFHc&
}wR/s
AK:mIJC
]~{Lrt
A7R`L)N
G`l#m2,~
LxJD~L~
>"UP}[CKxT
]R>Y|M
L$_D`+:8
;FfPER
K?fQ-GoE
R}`u-P
YEo41SouBO$ZR
/K"-e
4k; ;g2
N@^N$RTD
(\=\g{iA7
,Qi_5<!
8^>u_L(u
2F9MQR4
lRDD{h#"
h*i/?
W,z9jp
NW&0w9
%imoPG7)H
Uwq-q[.?81
B8UZr@V
!B:~fV
&N)'!MH g,d
*`2Nw;
Z^{(*@;qE
h0)}j!i[
elu=-X
J</?Pnr/JcFg]t9:[[rTW i
4)$c|.9
~wa 8gZ
5VH=k8~WeAUF50
2)&|[m~|zs
kj59_'
?d=z\O8
S -N4:%l*
*8lm[p_
b;3h-#Al)H@
]*JYYt
]C~hq@k
7]ykP6w
[-20f,h8_
*-U*!CBB
RYtdH<EABv+z
OJ:)jhx
x5I<^d>
u.2KOB>^
}JG]`2`5!
;o+iPUR
j45V9.n
Ek*qP)
km8F-c
WnmTamn
JoUM#1aZ
3e |j
?u"-{zh
N\e5^L
u^BQins1
M^|PUv
4/X)Vd;
 HD^>A$W;
`*Bz|%
1IjybYjV
MtipWPa
lRNutF
IZgHy7+n
O`d1a{z
~\<^KwS=zo9j<
_a]Oj\.ha
lJ_6}1
8GWTmbR]{LuhuL
OuIT[,Z]5
(_qO\.X
}ggL 0x
5VHWDC
;$mcp|
P5qb^[uec6-
Oie6f_B.Z
p,XRP@*k|*"ss4
?cI+\Rj
Om.2gE
o')H8P
oD=CufI
,te*F{S
}Bu{Kgk(
 Ar`yk
d|P*,D
HU$w_zc
@/A $gubVk{H
Ux0{,3?UuQ=.
6l*BKpdMc
.nlB[J(
8KAAw[
D64iaOu
E0*4*"fZK\;
KII"lh+e
JO%Y,]?W|
$i1c/vY
I6~Ila
f(1b-LI.wUCzp
vLe$i]K
IgEC[mHG
g)X~v$EFg
yJm3L!
d "24vRMJ`V8-.^
`],1lC
_u%w*D
z~4#ga
}%YZN_Uv
__#?jw(
'q7,&^$
wt[cDDSft
|4#Ear'f
^3|PGY&v
W#>3}D
~wxdN4rT
vcr,P*W@t!
$&e8~V
df0JsP3D
R(Oh$0
lm`In=={gRF(
`547[#d}
LzbvRSz
+4x~| $
`s5UQ&t!N
!^?L`$7.2
0]"PfK
@=Ud[JaH-y
-)%k7mJD
*U6R>p
Usms~|
z3(J_{8yd
j jHGA
>Fm|d|Yb-Qf
MUU`zGY
!ZLe+<E]N&
}vlz1v
cP_f.pBp
9^o]U"Vh|EI,3
dte'VY0
_6)a<=<
V~v*]yd|`
}}{Q3%g
<`J&dY 5g;|0uOBgV
4AdNfjj#E3(oM$
'=0bOj
Q|`Fo#EU
h\:;],{m
=cYo4<A
hN.o9kj1q
X~[VF q?
$.I "4Q:jG.
$R$]OZK
I}cITV"VS
={;[Bl+
1W(M yNv\+r
+f@YN_Y
#KNQCXJ
}dxzntkpV^>QW.bM'~Ah;i
8]VWW=oR
Bo"{5P
l4G^1zBknoY
nffJ`S
 5>#&_PZ
DUs^_sX
34{tvS
9L<D>`V?
9L''-r
sf+cy4r
)9Cb-N|
fFI}.N+n
,!J(g_J`,c*
fSjCkxFJ
WJ_fpxj|
\:aMYDC+
D<|6D>N-)
z!'s;;7
(2!uY`w22=4
HSKP0Ra 
9#P'>'r
;$OFF*H4p
&[ZWRw
$&JFGb?C5
wx#!~^
w;`g~a^
)u!8h[CF
RA9'u5
-k+(9M
B'OQ3C0qAVd`Nd5M1vAj
qg{!{'
A*9!`_<
Quiowb
7&{C=:,hT
iz$BRip
iUyFA/@Km
gd,020'D
Sh[W`M)
RH!/r':
g/vl@P
]n>a5Fl
=_m};)rDS
`L#SmL@
zYo%U/)
Pmf~gY7
z_>>Ti](#^
o-0'>hN
kk=?$A$_Q
>|+6<`n4
1*!8D>L
qGcLOy
&w.4B,3 =&^LDxKH
zm5|O$uAj}M\(Y
MUCEb~
\?i4eR@Ri)
/qNZw7
y=ylW<
E~rM1V
RUr][F
n#qUX`Z`7u'ns@
 n'gCi]
WQN&1+
} M1*f
Dr@s;2|'
v/S>34
\VFM@(?<
0uwu[pb?AA2"U_Wf#
+RZx>;
kgELAtA
IDq-/|<`5h*L
SHvA#^(i
yP,nAF3
R'9K5N
omi6nEUWv
F2~*kO=
0{rkLX
1K+D5]a
IjhXQOJ4YNyq.
t1b6X0E
[y;-vR)d
3||91~0%c
U?/)o%0
!D4vV5rl
q-*NQg_
Kj) 0:
h_&x3vdZF
|?|5\%\
7Mdf<{?
K^bvHxd
 Ve!F$L
^Su\LKOJ
2:l&uA{3,0w`<N
nZGP[2 ~
-xS'i_Tm
+aLG7q(
~L{UUvCq
gvqw:XTy
,jG>AMs
m V,i)Y4S
+/|YewMdwo
?` !*Z!w
S.^RSf?O`p
jhKEQ|>bG
yr=}7Q
6)BhW[4*biP
Z(o{]A
[|s8>}
i={>
=qY'ZFX7
~/CsMX8
t[/.ynK3
pXQ(HaD
C{[Q@y
OslLh|\p
'FR[&*?
Wllnc`e9ZT
Ji7V.yE+?$c$o
;e_f0MG
XxymJwC[P#
,j:vv\
v.t"^37
;3!}MEG(i
>[Yl.r8
(}Mrfr:
hl-P2;Vd
r53?5m
PLrK$!
,1la`
bm/2^}t]
SlfA,`
5r]p `Z
/5Q`bz
(~jNZZF
8i\RaPP=
/*"@?nEzhTH'
It<5UNU
AK5V2})
/_{o @}"
&a#$}`9j7
VIvTym
`P~!kULeL7PW]i-
bfG|3](
<Jj;9|}?wK
C$Jpv
[8dlxh[C|%\ekp
4d( (9B#G
2x%j[Y*dA
SR 4J[,7
"0*K"\u(8+/k(I/k
H%ZP#[
"t^6TQn
'EDyt;s
O"xx&%}sX
*DAVzu
]=C^Y:V=ZRSW=+E
qw@Ef;
.d'pTC~[Qio
BNa%!&
1Z@"{maVa
/<QgBmIs(
S[nI~hE\}GxV.edeB)}YG]
PlaxZ_3_=h?
7Gg@2\
KAUX3A{dxO
B!Sj3_1JL
s!(CET8
$WvUtV
vv ltv|:,
:rM9tPM
MFhg^J
S(\z)P3m3fGfw7
?J[3U~){7
dVE!\CH
wuZ?~&nE
+Bjww-
#Zb>mQWl3,RO9l
#@vnO?`"[Kq0T[:x
*zVhN5
o&\r(4X'<3M$] \Jp
k[VeC$2
U~2E;u>
Ae'SbD/!y5z
y,PoW$Qw
hB2pm*
8@;DEw
b<1g]:m@lxazw+f
4H^?o)$
qN7b^c^x:6
c_ItdNKA Yt
k="[\-
*sr>spfN1[w
9+Di&"AK
:*3SH`
`\xCPh`e
cfpvylO
GEbm\RiH^8
93~#[U#Lx#r
\JAkO2*8
A)4[joa=hJ cg
SO(BTZj
4rL--f
h(";dtG+
9%"B=t$
]y+Lxh!7S^.J
fuUu!*"
b[]i5>
Al4+Ux
\EoEsn.K,
NiJ[D!
pfC~d4
lsXeAx
{_\C>yEf|%]_jKbQC
_W_c]P\]H
EYZ#P1
SS^^Dm
w^HUD3z8
DAsmwx
9#p1]4FY"@$^
FW9xjS
MD, s=
7{vYsk[1tB
`Wn%+(5YL?>OT[
kp?B2bI'
rgX<^'u@3 K,
eF@m,P3`
?9onwgd
o$1MatL
l@^N.yX
 o'K/^Z
D/IFQY6
#dN&9Mzf
@BjSQI
D#'{N`3$
q?b-v5Bg
o(_>r9t
_g$J;d,
\R3t!Cz!smA
yX4u,yJx$
SMp'2W 4EF
)4-7SUU<
==Ikx3
oq%~9=
x^x)auJs
o^f~+r
fb?=#c+U
i#67%k
e)L,e9
Y4qq4G
<tyI;sp6P@
yhD #=>]z
e{dx%1x5U
m=5i]IE+s
jUyi0Dl
I5l(.G
}B?a\,|BN;'>
i?d66KOR2'
iz7;qW
LaqtDx
HOlg+g
-R% A_T
tD4rC#|YNKB
i((.X33%
D7>Y2A7TQ
UCn7; 
w0Q<WX{v5as
4Cd $r
|u[-'#<7
<D@.j]J
C%jJL`
>a$pVwd
tEO[Y&2
#/3xYE
4pn[Xh
d xT<8
_%aGF>]SuO
{-@9xq
i#%KWS
@0>#,Mx|C?q;j
X2T/9Q7F
DFgiYC8
8V$TJ!u-0i
dA-ec+'IR[o
[_H[(Tm} 0
q&cqBA
{)ETQQ!Ep9<i
g7^If7$C
fkD#(?
rl%Ol[
M=^-yEe$vk
`r+]-q
[E:I}C
L=DF0wW4ji$NR,
SR8p{;
7=:SWq
W=iM"=m.L
)SbP@@Z
/je<b2tw$!C
P`C6?2
5vVf65
ew6|EaI
[378QP,x7tT
nXJ<uZlYxnbX
2zExH}:y[
\=Kh K`Rw8I
B uzTH
[9slGX5
~dqFD`6b(G}
iyWHUFP
c[o;Tp
iW0CTm%/d
AJ6jd`
=>sz0-3
WS":Mre\kmz
OCUyp|{
;^*SIlG
[GHMlH
Nev#wr ">
MlBs&k
2|"`_wR`
zDJXx 
dl3M*$Wk3F\
+QGhPB
su0<q8R
;{hbUX
K6?,erK
0l#I}2!-
~eV-N\
b4Kdj|d(ecL
xF25PZ
{FX>>?
_;I;dW=
`j 4F0-'-Rj8=hV~p
Ml>^R0
|F|mN6Qa)WM
..V=JNh
~USGLPz
/T6JcNm^b
28@?MH0
dC"?PO
'h&j/@a<w
T _D8Nct!"~
')tGnh):
>_DtgCv`a2R
#kqr'aC)
w8IOa/
zDv[>fp
8aCCWRr^
"c^T:u
V<I:H5@s&t
~X='/$L![^pqyd
1CocULvQ_L
x_Jc}O
hQ.}(&
KtIT'+{
d+@]ms
m|7y#D
:ZebY-
g?~Hr>
wuI\9r/iT
W#P2ndmz
j7<3i<&6
T91g=Ar)
%Fw03j8
m#ynB"<
lK^1`^
(53,}@
k,X/6~
ETh~OQ
Eq{A[0.8
YNcDkkiA
I=L~s^:uu<
=7FhM;t0ST
%>op75n}
;O?|<]$Dotr
t@b]F|P}K
R[l&z'Xr
)7)IKYK
Y?)[fn}&a
BsC=8fYC
E]4.jb15C1
tZ? y9V#f
M$6P*2
t!JCb32.:N.|
ceu>8HB:~
1}w_ft+TIi}
AvaMk4
N?J?x,sO\
72&4HB
u]wtPm'
l#xdSn
J~],Uo
o7HmQ
Es4duZ
h|ob~?q
67x2:-=-|
ycF{)7/%&
s t7xXi%
ZE=ep$ r5B
T7'Xv_lr
(P1Ku{1Fu
T4/?^+ma[
ZPtQ!O7
6Kq4eiR
PQ!VK<k;I
'thKh[
72OU*C/
gT:?O9Wr
vjYq8=l
^~kvvy
/2?WghE@X@:+
VW\[ 8"G
l30?,M
2l;-P'6BV~g
+gBR%eRpX0>!Azj
zzUt|U(T
E'5q#C
`67`uw
lJyZNwY-
;w6pl3<8A5w-Bt
#.`@7j
^q7(m}/"v7
]E<um:
Fk3@29}tkfXX}yz>
_t/nh+"
JkZp<ynM$_U-#7<6`^I0
@P'=-I
mAFdAp~(=
~Aw)\&+g
?c;:!l3g3t6
:#=k5QJ*=NO/
m>u<uv!(; a(}Nh
O&$*qu
Z`} F0qmEd
|_$,aQ+4ctY:R
w~:c@!
E!MyK
I(_T0j
s]3E!" .H
:J^'L7
dz9}y8
M"xS*.L
98j;9`
7P5"=r
P[,7Ej
'^icSTY.l
78jwY(
lo(TIt64dU
R(&\he3;3v
.^Z;Qm_
'Vs`>|<4<J
ty_i~?y"
CjN${)R^yG8l++N((
-BmyON0UW
,C=0A4VD
:Lz/|aP6n
#bCMMd
-y1S$Pa
JZ%/4pX\!
AQswOU%@$R9e=
)Z5F%**U
?EV1qf
,%CQE@~yA
-TfnQH
 s&T%G
iI]JgK\
3-@H.kl6Vy
rdvvB+?^
/'S_rl$
SvT"PM7$
N%J8^vt
&Uvl$q
?ieGEz
c$M 9J
\n]8`d'eW
+YuR'/,*BL
4+?EK
*]H|4dH
pq2ml;
n&'2#]U
ZdSxf*I5
- dn{#Jj2r
1"^oSF
vka1K|<f2
p[|R:-
B,om (
\%),S-
GV4'<B
2*-cb@*
;/T=7e.tC
J[+@IW._
ZM&M[c{l1xo
H8PR.}r
gMUb/*A
h\uA%K
qD*b#M
vB!xHQo)
!6eE]h=H
!B,L)c
Hb~=<F<.$
uO8F<FKW
V;[F}Y_d
A3Bp!uQ
)=[+a7
bI`:z<
]?"xh8
Q#?X8]L
UPJF%ETy*e=L|a
i <iS%j`
^[pUQMAZ=e
Gl#<ck.
=pOlae
fv~mGQc
dhxNZ~b3_VEa@.
|EGH9-MN
%"w9Xiq76
T7D=}\+hcU
,(YYE9`qG
YWh6(KlS
J'4x_<XUemN
1!"H`j
jQGwG=
n3f vm_;
agh?0G
#~=+>{k
_DwQOyJ
B}QDU~@16n?
I63T=Y
gN(VN.
LQBMS-
WDgXqP
598AsbQ.
.!qX&^@K
=gaANkm
$&:P1g?
3Mh$GtD
%Ywlt<
bMeLv3HY
J9J1x{
!Q77oiu^P
ELv|#zL
YfERA
Z_>J&9X*$=,
!R>28fl
/*B%(0
}>lF{Z
Rg^zy\4
`Y3MBrvb
Y<4\\{I
88T'?M@%DAtl!lh+ 
tM|EDcyj4"m@f37yQ
[4kA\@
jshP6]g
-HVY*d;#
6Rog)s)=je+AKXH@
#L d2Sb
2{docm
IV%1]q/9-aN9N-B
Jj3<%RVu[+>Yy0
O T{Vh
0:8L'G&-Z
.NS4xs
B/Pnuu
%g4T6mq
F;B<r+
]DXf?]n
nK/IE6Z.
FO!|`*5W
&Xeax^IBMEDB:
tHxjRVavtsu0Nl
BtR>jZ6
R\[V*nL8#/t6}K7
0c<!#bMgQfM
%LqiI.wj`|n
1<'Igg
YK--}y3&
6]6SX$&
e7PWig
Z8KG_dBbkLk:
USIB1T
s3F%|U
q%*6`
.<y>N
8Gem`xgeh
N7}aCX2?CSr
SYV9H0s0p=R|
qq"9@ML
"$sEW\a
`/ze\h\JQ
s#h,=CpKOl)
#*AG]CO
ujXY|I
~8Y%s_( 
r&XgQbn<k?{
/=s2o4
3 ME{0
ZE!G[
p?EL0w
K?zCu?J
)BgXcEv
`!7Oj_
Wak)3O
F}RQOW+oul
4TJ9cT
ms !H1vg->W
51tnreC
](B">
!Qa^v:
h$@ci5*
9Z?9):s
~Lf4Ts
R?nYcl
vk$@.lR3+~
;G,8j<
Upv%;#
WxsA7n[,^Z
j;_>w>qeADWx
}El]B#>
W'`>z5{M)-%|H
DlYlVcb
4%/Kt2$
CtVUxjW
:Z,?^+~
\GL(U~7
+jt=X,w6xB
fYJ'WZ
uT:Sqnv<@X 
Tn]p0j
)tJ:<QX
t DBY=.tS
SZ\F V}
8qg pZ^
FG*7*e1
mbpbwWu5f2
B:y.2n
p{$y&EPG
.H m$_
^3uL;nW_7"i)rS!_
QT(ye{K
=+5oi7
I\%M_.TCUW@+jH7wJ!
!X*3fx
Lh]@yj
8fStaj
0 {Agn
91%<3I
 C@4$J*Di0mk_g
l2J&2})3I
KbF K\0
%J4UP$siy9`
Yik%p\
mjfkNs:%X!IF
NDVy%1X'd
-S,!Sjm
C]#A_g
HEGjE;t
'HE#*d|
Q&QuMHwa%n$y]:
u"3OR-|4j
vvj%oE\21
[Q7Q#2!%mA{-6@Ouoo-
#K1B[\N
s&1mGE
:P+0'k!!w
CSpuD}y^@G
V:Y $ 
~im)F9!Ij
3XD]m2}}[{
V|n@(76yW`
'AuQ`@)
=?T+.3!
}C)KPNR
u\QjD{r
J8NS)D=z
0~=*qbh
<yG{=x
5V6PfGT+
P9X@o]h*s1
!1)w\{f5w1C
fs>W;jJ_
8N(i'
6G^B+%16K
H#wN|)6=*o
c4Qqma@.d<:`#yA'
G@%z@@s4y/r
'XjEF.
d:-OfY
:ofd,"Kf"
O/LAn8
8_RCs;tiF$
22mD/iX1cAZPql
t(=qH[#'>e
]==\yC0'u
iqtm-01F?\Naj`
;[C7DC>xs$
T2[pfT9
;aB`-_QGW
0GxqPCj
ip~2J&-i
?88e>_6R^R
(.h8XqQ47]k:]
Z{9(|q
D4IU_iS
K$#TdCj
N%oSf$]drBCP,[1v+vn"{
#jl4_vu
P5=KWJG
X@j[/N
lN]!('
/~+u,eS
='4gOE/
W"d'0A
H5lz|P
h/XX%j
].5CS&(
XL6.eV
G'|,B<
"MZTLhn?!
 !'>]@v3
iXENy.Qu
7z>Pl8U^
>6ub:S
I#c;mf>d_?
]d&20p
# uO#1'
8/yANX
DeAL.&
ODLL}T
')P?"Q
H_o,R"wGMBL
V!1] z2
O3xj[A=V:`
u{aF92MY
;RN%:9
A?3^,.j|
B\^j)QO
J [m5)!
.fwg"jEB"
R4P7P+ R
t-x8Yx
c(Z*e[
#qkVg K#O
K+J8<\
8qr|mN'_>
iuz/Nd
8aZtu/}
"e>b:c6T
'3"qiW:FY
d d>ZE&
&h9NwW.1e
2U|5[91
rm*a]6
jJ]xa9i]
/N'9V7-
daBig#F
'%HT;34
y(ZjFl
{RQoR!
))(]0+
O/}\p7v>),o)m
cXVJ6BC
yW@Aa`w26+bT
r)Ki&)R
p0RLSO
]4?-+o#l
qy/4r1
4ftZTk~u
hG5+{_=TK3JkN)Mh|bEV
;!vNqQx-
"Y$Jy
UWf/t\kR;=[
0ryo~?I=
~%1mt}Q,&P
+c`Fh6
e2bucK
6tjV"R3hWgF'
n7o<wjaB
fqixu&v
?HnYGE
V:!/R:`$
"++A-/4$5
lG|R@D\0(gXuw9P
q+dzf%ON0`
)B\q\gNd!
(WZ%R^~
*MDA>{yG
p/a9]^o
JG\*Uq
Xv^}W "s.
@;#BGT+
(A6P*g1Q)L1ENe5k7+j=1QKQ~p
TW}B>NU
UJKw @3
)scB~^(-
_F~dma
p5#ny|'m
m!m# P
wk`aXv
Yi1hGHs<V23M R
&~hf$h"08B0n
QLJFsI|ij1v
bJ\I@^
)$wk}5Dhxvs
WV\(s\)S
_,x\<MjTl:
=p2)D=++
1v7*ADzhaMz~
+)rDKp
y?g>SA
CTRKX1P
D]_!9/
J3wi>E
(,V7;zLQGnr QU
K)x.r)`
h%? -L)x
]MAodV
qc]Tr:<{
~Hq5E%M
M5Y8,&F52
k{?UYk]J1g
5T'Fx{e
dcf%V`}XbE
`MZej5
40 imuCEg]
-}a1g=
;*l,K!IA
sS&1=Cg.OL
09qY]G>-r
o8McM`^
JJ)s@|F
CSVD,c9
RuGe]? f/s|2Tw}Z
'21.jm
4'Tb~_xIH
ql$nvR(
EHrVP O
%tYxLP
0:m1K(bt
JGtxNj
tv{W g
%6#4l\P)Ee
)6cv?
]V]Kb{0
7LpR:#>?
NiQTo~
CN|gH`
BLL>N2
p{ehf[}cOWcj
98LG?k
iUf;!Ii
1?7 D'=
kue'HX
x~'TRd{|(}j
<v#nw Z2
,P<_k';\sJj7 
!:I7n'Z>
~|,=gh3
+J58's#UJv^
87gP+#|D]
LYz'7RbenH8&
$1#1^>%/]
rf%d'g
DEq?KSl
]H3??d/+
B-%!i!wcQ#
tk+1:-
h-5Xl.=-RiKu1?
;ggV~aNd8^mlL7
_yqe ]
e!Tu1"P5
\/x=1;pz6l
?zmHv1(_[t
OohLTC795[O~-
KXy.:4v"
tf*O7\jFN
SkE8g/9
xv=ygK9
"3<]$D_
*K~{qkv>)]W#
uOXL8 ~n
3N(7EuD0
g^Aw6W
?}OS4%O
gSLg,$l]
=#&DCq4w%9,+.\
F^br%Sd*&
b| 3&Y
;9dOc8
=QW86l
-mbyw\ S
gniFT@'
FDv8^8SCzc
D!;ou<&L4<s 2
/_>-OvWx
?C9q[N+J
{Kg7IrC
063fgEVHK&
{>:N(1[AmH#wB
LbHa"1f
iS{:?27Zo9<;
'03?EKcn 
We0&N+(xX[{k
%no?{te~v"cl}?
o5Ip'3] v$n
K]kw$a)
X!Oy=u
*?xcng
9G/cDe3z`
x%ibf~5pw
(3qQAt WCH
&u}-85*dH
6T"zzV 9
4/gG}hvO
WH=8Fe>w
:R\IN*
bP_OnLkv
P]gARU9
Z*y.}*#
T{ Q[P
ebvsZ@0qEb
*Cgpb?02i
jRy9vNo7
~R:)r|`
_^hnL~y-Q+Y
^%r&8zDziB
0KWcBK
+v9X*]MnbQ|i0cSy
niW0?Z
q/~[qo)D2+
y;cU<u4
8doSoE
n%&no6On1JIA.n
_kZ]|@
Yfbz'w(K"
a6uVRn}RO
%tk)3^
b$q C5W
wf]m@8'gYOu
ChKf~k
+'n]De
1pco|t
kd>2{dl
Tuh]i
;B-8KR}3
S2CG.rz
|PCW-t:
OLxx7j
d$sn7L
:e}<<$^
`[ueIx=2
taE%x[
uzK9`~ 
oPl&.nUG
2SS4&M13$.]YN15xC
W~"2C<
nsfFr\|
?z}8FaaX
.+QnU>i
=Kz0;/fY
C1<A\s
zy8cx=,
65J= 4
*q;;\N_)
pla)iy
2"#QR6(F0W
u'`7otF'
`O'WX1
kFpQRP
|SFhI)ba^
g:%1ma
o<vURd
Ll27w-Ym
C)^+t}
`gC,N[3sQ
?aip,zik!
/B+v$X
AY^jey.;VWg|
Sa=M+yPT"@FP/Pj>!a
>l<Aryl.{
["I~`%
q[sOq?*X1
6p/A`geX
AB#^d=x
_zR`z/
kz'V0|zz#
[T8w7~!
,]zB2O&R
P]2U\{b=&
hVtdpl
KdV7wN:$[
gVw=,8
}%8[GBN
f+y\ZE
[tF3<^<
g3 PQOd
Ua uyhbr
0K4eM_
<{Y7lO
;kJJhrrm
k:<CP6~U
CAH^.Lh
?.y;|VX4
M[P><D
|c{nYNG
j^!N6$*
y#;o,$
y16['6
D&$<)U
{2Lia?*
%gefoL*
ZX%(@.
/`/CB^F'#|S
W<MOsnX
u,W)w{! 7w}
oBDejTe
SyAweBO
Mm7l wY
g K52l"HQ
IO7^ O
[fXP"l$do
lbw__(J7
;dr%y&|x}p
,wyd"_,1
:DIVm[<9$0\CLP
`4  2dt
GA%cJ$?-~
ZQ1&2H1/\!|st=K
v0<`v+d
5!<bE!;"
:xvo[C~VKR
}({G9)
/@)";m3;?
OP:RPNKZjvl
%..8I&
o`11f_
jZm]~O*
mC6M%.A2>k.5
3Y v@wQ3
xlG:+Yio
3o"k9kTC,
=DE8Ei
]&eG6Z;f
5}fQpAVn
4e!m3B
} JpAy*h
(PknN8-
*bn61Mg
;]Uli5
6 c@Up<
fXn12RT2B/V`d
.PY@=ha
vQ'*$~
8K H[qjM{GOK!
OU2?fg>
A]\s5`
gR`k{J
qU*86<j\6
Q 5f*b8<!
qly:bPJu>4."hW
P?6lq>C
!-Mv6G$
_=Y{at=
B-Es3!
lWMue#bo
R9dV[jiE>
RHzEgISoPEhf2
)}@ERsQ[
iatgMR
/it{I0[  +
%<'y25
r;BLS-
mcS&R7b>,O%g?p
5\.XV(:\y^
d?myUJ
6(d6~4O
;[H+%:@:K1
}B,pRBJH
~wM#9/zE&
D9Sv`gG0K*n
VphUIZ
\} FI,*
,])b2Qva}y
Xu[hp}
L|B$W-!R
a</}+{<q
+!#!6=
$`u@A+
&[<'eK(l!]7J**[_jNOK
jmI*&
hv|r$@EmK
`+g$gRZH
sRtG</
&7~XR=
S>u1vwwGr>
LeW}=\
.~awPB.
u?-sG)AAMdBJ
grqr0L@UA,3#F_Ax
Z$Q5~ff
5m%wWgzY3
3Z5U6D
BF~cy<g`2[
*0HCj)M0
vs4t5r
5(w-P,
 |>Vj>--
cx^[FK|
R<4A\$mCB9
.]48@e
w fP@c
F?W0TWb*m'
y~KU8N^'
sM e7|
<7fN?a{#dq8
S@d>i(
(mJg Z
n}66KF,
#ZPqu<1
 0K`M$R
LYCVk)46IVL
MR69S_{C4{)%Ke_M
nyuAM*EZ%m
Gf%K)olEq
nH1dR;'^vh_
,1;[*l!
\o:^8!
S$kUjZ#d6
+f#4KS
e`1vZ@
&j=a8Xp
z"qe#S
s<CB8N
4{Myu7Mv
<q2_E=y?G
(2jF*gvD
O\qFSAKc~_)q
lc*^*a~rS
7i~fCEni5
*>7?q_yt&xw
"{wFzg
ZXhY<1h
.5vM4 @+%
<0Y'Kb?)lWz
?\DQVbTW\F
r3& ^7z
4P2*6Qj
v$ZR]N4`
;HM]7w%1`0
o rbMpI'fR6
B/H#J$
oGiyi*
rUyj|)F
l9l0{
w6laDJM
9SL3+^B
1>UnVV!wfbY>
K@DlyJm[j57R:[:`^Yy7o
Vy|$\]
|Y.l1$72j\Q'PG;uG
 s'2"ga!.
sfsiNr
Pe{E3IHBz@
9!kcZ'-e_
KIc[\
QWMSo4dbiq0
9g*c5l!
u}e^='
q``bh]<B9`.9 
5l^6]P
hhV(^edm~
jSO$ ;4*n-3
I-,WW{U?* 
mOwIowM
:kUcI|R//$
"hhQ\e4?*Ei:ov}
OYKo?vX+
HvUL+{%^
]k3Y15
+J}g b/V
t:'t6jt
k;Us6sCaMNsnPgI*{P\`d[
`w*{*V}HE
e:m1GvY
Wy]*\7
I9\({l,
>?GJdvu
upsuV|wrsF$
AC*t..7i
HzR9kP-
"(MCV/f?H
>8tS` F<[
T;SvB![(<O
S.vDIgG^8G
irC<b}3
c+\2j]
V*b^<\cx
t/-9 atw
{n6(:M:
^C|*>`<
0k+Nr!mk
b-:ty)TPs
EhKdT)Yl
&x scw
41mrP/+~,~)
Qfn=@j4
y#x<x+3x!x,{I
3$M"WD4",H3R
B+[g{;*h
Dq,\X/U^)
OkC'xR??jx{t
\Ct_;1
{83ri
}+:dnqyB
A0]r^$5lQ:W
OBOiE
piver1zf
<$i~c2p
0fEMj9Nu
:ykI3I^
l|5Yl9GT}}
qAfghi
X9&-k-^3b ,f
8|guAN,|i
XNe|_DV
Gs BWv?apOSb
7rbIG4j
.i`u1Shw&!
ArA&Yd
cN3X:O>6F}0
E&3K$[1u[L~1N/@|_B?
!2i7cm
^Ml|+D
^-7Ih'
6u>[=3<
/Def1r)
!<^=w\
B*:HRvBc
hhxYp1_
bxG:Vp=(
35YMyU
\q~=o@[/
;j$3F]
B(j:lv1i~k<q>5F/,2[
h&rDT\8
R5%{}aV_='
J)-Kv8
h9INQ9S[G
-an{$f
Bh3sq&p
\E']]=
l_lkUh}\6&(
Z~\tY#^->]w)
"D8^1\wQ
f{1\JfOU
)CIoRImK
~y3&P4
Y|Xu;(
=?oDX
\4#8 qXv
BDtE)]H?Y
Y%pk`|]:|?
;h^>(Z
r&%zIwe^@
XB1j>2fryn
[&5~oQ
3,;pAQ
jk mv^
Hj14KFCWN
T'+]Lwi[Ae@
agM;@P'
VLHjw3LZ^^0
#T_bXe/
 $C`B6]
hA+y#Q!S%w
;Q(,%*/
g[*q`{pA
;3V?rub
}/d 6T
eV-EB1(
1aj;xjCbQzS$}'zg
vS:xz5l
{']jfcq
1%9=hV
+1r%\%3
i*OpI&/~!77{[qJXY(]Num-
8>mT@U=ZIoF
]8>{JT8b]Ne(
WKx3X)PJy$
_qSfva.f}7x6w
yY9?o#
ipdUCfYOeqs
]G0+A5n
*p^M:@[9U`
hZ\EP6M
7OX7Oj>(P$Ex
}Ft5?-
>hj2S5#;jo'
-lMMS;
baYGgt>!{ w
rrXFk~[
k~0ixXg
b+[X[k
+AZ[woQ:nE;
iyZA$ zql.
,? *T%IE@7
#kTw;2AL%_/2|+
X/{$`B/8xepe
hRvJ2na2B(tZ)
g(6x>/vWK6L"<dD!
S[4DaZw!
gA=b[s7
w0M>D0
6l]fpxIE/a$l$^
t~-e"i
17h\pUU#+^
+;*ghpP
e'9V?Oc
iCWBchf~w
t?WJR&u
Ob~n 'Cjf
=}1bm[m
VlMPNp
w=5{mf H
!Yuo:xg
@]q*\D+O
u;pz8}HD
ZvVv^NzJD~
b'6?(qc
GyT("l@
v)2F'X+$NNfP
LmOCp==~M
7P'6ef
&-\EbIL
'ry)x&GOI
3=AK`JJ
&+q"9::W>6
sM[|cPGK>
';K=rI0Zn}
 *e^$S
<3Eq#=LiD
?eG.Nq
s/&X#-
y+WJ^64]-U/
`9]:{1u
AM <V&|
_`8a=#[cIIw
^nJ6Z%B6C
Pm)l>r
""7Qh;R
E]n4R],PxnwW
/<!dOpD4\
s|X&A$:
]j#v>kXCf
WV>-QX
LBANKd`
MRs\gN}z
s}}33n=_ luV&
!PrPVN4
ZxI,z/
;3&`'Z
uJ'7,1
sP4NqGb%crI^
2{?9yeB
=-D{{[39
]U5B|#
xtAng>!
yv@(FdO>
30gPB=||yI
(b\%emO*
V:r:S+Hj
Y'/o[m@d#]5a
yKB3nL,
@WbD/=^N
!&\:/3yv[{
YM!S1.
oOE-d*
1 ssi3V~
X{wx{G$w.Mw.
/M@E=J
kMuN5G;<
,!v?e7
]):k`|7>z
1fk8TS<w^@TLzo
lw5UaT$
'`ez,VE
wr$=zH_"
,Kq=LnEJD] h0a^zEZA5
Q6OV<$
eW%p{t
gl0Ir;
hI,%F{
Zm|b"
R^Vr3,
##=D1BY[Q#Y+s
Y:Ov',+Nv{{+
bJ~=$].
=XPp%X
cJJlblRAn
+te{4(
Jk0 jZ
M}+y;r
0n+Z$~m
vz}jX`
Z}9HAi
^eNz0r
=ey#:M
%"`e%)
Jk1%>]
3}8mtdtY
z7~HQ?
QP8lZlL#Bph
uOr~LQ[
*)')i&u@HcOG
V\^PM}k@*
6bHTHAm
f>Q1m"yo_
?ET,eT s
p~C<^q
z$`j\A#zegQp
Z =kLd=
:9#m];C
+Ihd?@7`8
2[:v2$Z1
L+Z3pgi2
!=<l4[
Es%'^yh
0DQIn<
j]~fA;`b
ja_A~dg'*
%l+h32-D*HL
S?o_v?lP7
LMSeO\Ar
a[W`HU\L9vARup
eTu&Jr
^JvG'4a
DPAW,)
>'>3QFWu
<olzCkPNl"tJ=ZI3
`Z4Px+pd{^{sI
8fD0?
>9N%;o
OIyEse&%dW
[|;P.GbEQ
JnG,tg'P
x+)f|4w
SURs\DlyU<D~x%
{R{SXQ4.SZ(=JE*
+s:c('
{|u~.U
9J+/Z^
z}!p/J
]5^Fp]a
`Aj_xM
FPqah =B
7<\ 5V2
1czvC.GKb
#s?7a(q 
_Lbw!kO>cr0
#ei|aql34: Y
;M'l].`{91)g
*OTLG'
PJ%r%|)
AVg<nlnNm3}"W1
_p]uLeH&
%L,KCE
T'9pAH,m6O6Lt>
ufKHl#US
;/oflN
ik*Mpt8;c
[RH{i;Om3A7IQV
W!U0k/]A
"]qP2# +&"_e0O
9!b94
s(W!-U
9p3kEvJZ
Y87D'{wmVOj
;DqfQGeNkl'
+2#}wy
$C8=:x
3s`n~[
Q0\A+
dO(y@)0
S~>M&3T^fAHq~
r8Nd{:[#
U'V6%}s;
`VWI(U
SLfB0.{ck
=6M+}h2;p
KJWl8!/\y>!9
FbE.$Se|@>V
(d@)p]
ej{Dcs
o)*V8^QK}
ydRIvgu
<%XqyuQI
*Zp)`(
1Mw\53?o
zV+bO6BC
dsoO6)PS
_|O*k[c#J*ze'g
vU<#
Czjy1)|$e
B_u.V;5
vrd"Ms-<qE;
Mw~P{|Dy
U,5epFxO:uR2j58Isns
U$>6Mn2qE
Q<w<<3
xK,3TvV5
^x038/
X<}/*?a
GzhI$e
?]',k\
-q"mt(X
9):463=!W
V7T1x{FyZnaL
O#Xg`!w}i_.oM/($CO|W;E2#HJ
pRW$]3
:F%N?OQ
5/0J13
[<=~rv
?OKTJp
>V k&9,U0tc
<.bP\@
.Ukd6^b@V~m*&e
vg]ao,KC5E
b=w!QtULM_p
-qf t{G
usWpTE
?,HSBaA
0v!+SXl
K0(#fY
U>X<J(}fBz^
h2y-x^7Q`J:OxfgG
Dy?e8q
~=ol60:K
7Z5SBb 
XJ<!}]}-rP-;;
g2xmlO!{[:6cd
]vc)sm(H2h5_
]{^aV5o@P,V4~166o\
FzgcB541;fX
Zpy9h|
k,6&Qww`-
(:94 s&<W.8
\rw[j*//'$
fUf1^ 9`f={DRN}
"eAOZf+t
;KWc%K'
'I"Sz1oT
h"I7-
:$[%QZy
xJ"F2T~:$cZ~
:\xls9\
+\oW'ZZ7d+L
i:HNA?vn$_4s?
b!1+1Y
AzBH;s#
e&K446-8,
>h{ueTK4wNHT+d<
feiy,_
L_aMy`
W+!R#ot
'Y'jnt2m
/%J}_XG
GA:{h%(v
i"f~Pute>
>Z1f#_Gtpi?.
F22\.
~rh8{k|\
N A*8\
Ga<k6>0<CsF2
Fl`GfKZ;/
QxW3Oyt
`B94J93
eT_2/u
4u}hBw
$YlH#u
fVzVI
|RhkcsXn
UKbBO`
%A;qz,'7Bu
PQ`iDe
k6LV]#pW
JV-v|9|x/S
rMOfZXw
<]o};1
A9b.v99BptQiN#
C-@J1:k
feSv-k&jAHiJ"&IpDV$
yDeG84^@
}NPOuKZx
qA5O6L
<*) %e9-i 
QF _3"CFF1MQ0Fe|V4 lq
`=J0*u
]f}rp\O
lmXDoD
;Pkz\3
rMfl(y0-
Lad(Yh
>tNw{ZT$lGl1
"< *{04 N+J
%3]hA1J
C&8g,_ouA
=X|gn$#
N>N$W$24]
9!,2;6[k
{P4!Q(;
VQ{O7 
#7Nv ^
VB?%ajahNe
KF5l@9,
FhN)G-l
:;G</g
6=:~$-jZ1|i
,D%GN1%}G
P"X0^d@
'JX\ed
rdfCV.QpdE
T<7g[S(:m
~?r{qEJu| l
)tGi#H
bOX*K+
ljC]WGT,mH
1V6fB<
LA|qA?yDaQd
$,fw@-
<-7gUc
\Yp\9NR`l
VV?AYBA
7EH6!b
N'"C@j5i
#B[)<e`,
wrU]^mx8
{Om)c o{5W
|Ut=a3;
`P)$5~]\
M, 'LgHT-/$c
^Qty YfN0V
&H3j1)P'#jT>U-\j
V^F@3A7gB
2xhhe5Ua~
"Z'H*m=F@2(
+R3P\u
b__+r-
&5a3X+a/8M
y}n@c00l>
_ZY=CuB<`
uEkC*
y"E$^Y
r?KmE3N`$
#"?C_R
3hc7:w"Sm\
MFi"v#
#Bm/nl:M9
)6kCL\|@
y+ *Nq
dT"D}gZ
,}w G0!lj
"i1k%Ee
Jry*@=
,q@j[\j:|
Ql&FHR@:9
cV\!e E
N4m{QF
I`C[T4
l+]sFcq2"Tu 
zg[1^6P
(G:7xL
t+#+]izke
SvyFB#olAqz
ECQ3esV>
;`{ZGSd
Khqz|pWCBma6~w(/
^dq%q|
,LbTDvFh
_8y?|s
35rHsEI
^0&X<j
x_0e=QN'^
WJbsoZ
@._I:g^[
o>6apCjA|pW|VW#H
9y%X)s_
K)XY*oN
b=ZOgP/yh
j'6XhoR
_Q.M1*.#H:U
K^g\,h
UPjSjCMa-p
z*eK\Vh*v
D )_'c
(c-[5Rq
}'ZoVOEd&9Gmwi
@)UPK7k'Hzok8fE
?AnSY-@RDNV
c%qQt[<[
"7wE/L
l_XT%a
)PRn?5,1S81S
|cBZn549
K}A@M1uN$]
_\-uD'Y-&'sB69ki
>illOe>
lNqke%A
yqPfv+OD
Omd_4T";"n<&
Z(KpcX
b{4v<y
nZE^v'!
|m-b(rq
B)kJW3=W93%N.
$Z7,D!?g2
OwY9gB2
]lSBO}
.iZ&)r
ch`Q3N
E@leI~"P$OB
a+Z=E3tNa
oPt_H@u6;
#dHJoM|kq64Lh
-Pqi5^
6 ceomH
1mpIbT}9b8
DVCLAL
PACKAGEINFO
MAINICON

Process Tree

00bbee5ffd2b4bb674f7ee488082514a0e841bfe760c21b40080c7d3cb7b6382.exe (2336) "C:\Users\Administrator\AppData\Local\Temp\00bbee5ffd2b4bb674f7ee488082514a0e841bfe760c21b40080c7d3cb7b6382.exe"

Search
00bbee5ffd2b4bb674f7ee488082514a0e841bfe760c21b40080c7d3cb7b6382.exe (2336)

00bbee5ffd2b4bb674f7ee488082514a0e841bfe760c21b40080c7d3cb7b6382.exe, PID: 2336, Parent PID: 844

default registry file network process services synchronisation iexplore office pdf

Hosts

IP
114.114.114.114
8.8.8.8

DNS

Name	Response	Post-Analysis Lookup
irc.lcirc.net	CNAME ddnsagk66pm5lpafmtp4vekxznjuazdg7yjba6fzhuda3ztka22cf6qd.onion CNAME ddnsagk66pm5lpafmtp4vekxznjuazdg7yjba6fzhuda3ztka22cf6qd.onion
dns.msftncsi.com	A 131.107.255.255
dns.msftncsi.com	AAAA fd3e:4f5a:5b81::1

TCP

No TCP connections recorded.

UDP

Source	Source Port	Destination	Destination Port
192.168.56.101	53179	224.0.0.252	5355
192.168.56.101	49642	224.0.0.252	5355
192.168.56.101	137	192.168.56.255	137
192.168.56.101	61714	114.114.114.114	53
192.168.56.101	61714	8.8.8.8	53
192.168.56.101	56933	114.114.114.114	53
192.168.56.101	58485	114.114.114.114	53
192.168.56.101	138	192.168.56.255	138

HTTP & HTTPS Requests

No HTTP requests performed.

ICMP traffic

Source	Destination	ICMP Type	Data
192.168.56.101	8.8.8.8	3

IRC traffic

No IRC requests performed.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

Snort Alerts

No Snort Alerts

Name	e957c58e3f7128d8_battlefield 1942(serial).exe
Filepath	C:\Windows\win32dc\BattleField 1942(serial).exe
Size	161.9KB
Processes	2336 (00bbee5ffd2b4bb674f7ee488082514a0e841bfe760c21b40080c7d3cb7b6382.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`00f219458a163a36a11f11cfe73237cf`
SHA1	`b931c2e4d8490d8e57f0fe28ca157ed7722b506d`
SHA256	`e957c58e3f7128d85fdca1b713ef53863b6e1a0da76e41ad73bdd02076cde3d3`
CRC32	`6E03D5B1`
ssdeep	`None`
Yara	None matched
VirusTotal	Search for analysis

Name	8ccb2cd284c82b4e_silent hill 4_fix.exe
Filepath	C:\Windows\win32dc\Silent Hill 4_fix.exe
Size	160.9KB
Processes	2336 (00bbee5ffd2b4bb674f7ee488082514a0e841bfe760c21b40080c7d3cb7b6382.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`a451e7fd03c4c0009d6a43b2f94a8557`
SHA1	`be870b7d5a87e81ccd0f58a9a68c0c85fd63d353`
SHA256	`8ccb2cd284c82b4ee3e7c96f7470c609d80f20132b4869629f17222bf35a58e1`
CRC32	`D12B3E97`
ssdeep	`None`
Yara	None matched
VirusTotal	Search for analysis

Name	0fa8c164d23314c0_quake3 cdfix.exe
Filepath	C:\Windows\win32dc\Quake3 cdfix.exe
Size	159.9KB
Processes	2336 (00bbee5ffd2b4bb674f7ee488082514a0e841bfe760c21b40080c7d3cb7b6382.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`d2e77b43d519c2ab2c6d8a50d83f1230`
SHA1	`ebc59d15d93ad8cc3ed04d380d88d39d71df7b89`
SHA256	`0fa8c164d23314c0cc643938fd18d7a0c2f60f92052ef8986320f44eb4e908e8`
CRC32	`63EE81D9`
ssdeep	`None`
Yara	None matched
VirusTotal	Search for analysis

Name	e57a63782fecf7ad_half-life 2(hack).exe
Filepath	C:\Windows\win32dc\Half-Life 2(hack).exe
Size	159.9KB
Processes	2336 (00bbee5ffd2b4bb674f7ee488082514a0e841bfe760c21b40080c7d3cb7b6382.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`f44abb01329a886cdb274f341cda91a3`
SHA1	`57e0b589fdbd243315a4ce49a63983971f4fb254`
SHA256	`e57a63782fecf7ade1ebadab6b97541b99978b862776d88b15a9661a705ee539`
CRC32	`7E5991BD`
ssdeep	`None`
Yara	None matched
VirusTotal	Search for analysis

Name	ecd5e439d31ff577_flatout_serial.exe
Filepath	C:\Windows\win32dc\FlatOut_serial.exe
Size	160.9KB
Processes	2336 (00bbee5ffd2b4bb674f7ee488082514a0e841bfe760c21b40080c7d3cb7b6382.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`76a779952431546f7e34989b8dd2bb42`
SHA1	`bc74027a6439cc5cd829b3e7707e89a4ea548aa7`
SHA256	`ecd5e439d31ff577cc3dc59f29d6eba255b9a92ced18dfb907a189b246da9b32`
CRC32	`7327376E`
ssdeep	`None`
Yara	None matched
VirusTotal	Search for analysis

Name	93748ba1ed8a5856_silent hill 4_crack.exe
Filepath	C:\Windows\win32dc\Silent Hill 4_crack.exe
Size	162.9KB
Processes	2336 (00bbee5ffd2b4bb674f7ee488082514a0e841bfe760c21b40080c7d3cb7b6382.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`09c94a40af197a5ceabf3baf6873b986`
SHA1	`33126d570f49bd6b9f743999547cfeb8bc8dbcec`
SHA256	`93748ba1ed8a5856f6d6203a7390becc5891601dfed4b07a348114689446a280`
CRC32	`8ACF37DD`
ssdeep	`None`
Yara	None matched
VirusTotal	Search for analysis

Name	bd90255833eee18e_ut2004_hack.exe
Filepath	C:\Windows\win32dc\UT2004_hack.exe
Size	163.9KB
Processes	2336 (00bbee5ffd2b4bb674f7ee488082514a0e841bfe760c21b40080c7d3cb7b6382.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`ecb2ed85286f696d1e2c05b3b7fd6324`
SHA1	`99265197d5fd0354243bf3c4218abe93c92df6b0`
SHA256	`bd90255833eee18eaad27eb68cdbec2daaee7d86dde6960f653e2453ba8c156a`
CRC32	`97C8C27D`
ssdeep	`None`
Yara	None matched
VirusTotal	Search for analysis

Sorry! No dropped buffers.