2.9
中危
59 个模型检测该样本为恶意！
重新分析
更多

07b65683af887bf50b40636e5fce11c7bdea5de1ee50ad04bd059db1147e0239

07b65683af887bf50b40636e5fce11c7bdea5de1ee50ad04bd059db1147e0239.exe

分析耗时

132s

最近分析

381天前

文件大小

209.2KB
静态报毒 动态报毒 CVE FAMILY METATYPE PLATFORM TYPE UNKNOWN WIN32 TROJAN WORM FASONG
鹰眼引擎
DACN 0.14
FACILE 1.00
IMCLNet 0.87
MFGraph 0.00
静态判定
反病毒引擎
查杀引擎 查杀结果 查杀时间 查杀版本
Alibaba None 20190527 0.3.0.5
Avast Win32:Fasong-ASP [Wrm] 20200208 18.4.3895.0
Baidu Win32.Trojan-PSW.OLGames.bm 20190318 1.0.0.2
CrowdStrike win/malicious_confidence_100% (D) 20190702 1.0
Kingsoft None 20200208 2013.8.14.323
McAfee W32/Fasong.worm 20200208 6.0.6.653
Tencent Malware.Win32.Gencirc.10b4d013 20200208 1.0.0.1
静态指标
可执行文件包含未知的 PE 段名称，可能指示打包器（可能是误报） (5 个事件)
section CODE
section DATA
section BSS
section .aspack
section .adata
一个或多个进程崩溃 (1 个事件)
Time & API Arguments Status Return Repeated
1727545311.843875
__exception__
exception.address: 0x76e8b727
exception.instruction: leave
exception.instruction_r: c9 c2 10 00 cc cc cc cc cc 8b ff 55 8b ec 56 8b
exception.symbol: RaiseException+0x58 CloseHandle-0x9 kernelbase+0xb727
exception.exception_code: 0xeedfade
registers.eax: 1637800
registers.ecx: 7
registers.edx: 0
registers.ebx: 30942304
registers.esp: 1637800
registers.ebp: 1637880
registers.esi: 1
registers.edi: 0
stacktrace: 
07b65683af887bf50b40636e5fce11c7bdea5de1ee50ad04bd059db1147e0239+0x495f2 @ 0x4495f2
07b65683af887bf50b40636e5fce11c7bdea5de1ee50ad04bd059db1147e0239+0x49516 @ 0x449516
07b65683af887bf50b40636e5fce11c7bdea5de1ee50ad04bd059db1147e0239+0x55352 @ 0x455352
07b65683af887bf50b40636e5fce11c7bdea5de1ee50ad04bd059db1147e0239+0x5581c @ 0x45581c
07b65683af887bf50b40636e5fce11c7bdea5de1ee50ad04bd059db1147e0239+0x55a3c @ 0x455a3c
07b65683af887bf50b40636e5fce11c7bdea5de1ee50ad04bd059db1147e0239+0x56b6f @ 0x456b6f
BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x76ee33ca
RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x775b9ed2
RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x775b9ea5

 success 0 0
行为判定
动态指标
分配可读-可写-可执行内存（通常用于自解压） (2 个事件)
Time & API Arguments Status Return Repeated
1727545311.359875
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x003e0000
region_size: 4096
allocation_type: 4096 (MEM_COMMIT)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 2284
success 0 0
1727545312.328875
NtAllocateVirtualMemory
process_handle: 0xffffffff
base_address: 0x003e0000
region_size: 4096
allocation_type: 4096 (MEM_COMMIT)
protection: 64 (PAGE_EXECUTE_READWRITE)
process_identifier: 2108
success 0 0
检查是否有任何人类活动正在进行，通过不断检查前景窗口是否发生变化
一个进程试图延迟分析任务。 (1 个事件)
description NNHV.EXE 试图睡眠 418.0 秒，实际延迟分析时间 418.0 秒
在 PE 资源中识别到外语 (2 个事件)
name RT_ICON language LANG_CHINESE filetype None sublanguage SUBLANG_CHINESE_SIMPLIFIED offset 0x0006c238 size 0x000002e8
name RT_GROUP_ICON language LANG_CHINESE filetype None sublanguage SUBLANG_CHINESE_SIMPLIFIED offset 0x0006c224 size 0x00000014
在文件系统上创建可执行文件 (9 个事件)
file C:\gcoxh\NNHV.EXE
file C:\$Recycle.Bin\QRH.EXE
file C:\Program Files\BVIVO.EXE
file C:\$Recycle.Bin\BWQ.EXE
file C:\gcoxh\GCMF.EXE
file C:\Program Files\CSSIT.EXE
file C:\Program Files\QQZCL.EXE
file C:\Program Files\UKNEP.EXE
file C:\Program Files\JFEMM.EXE
该二进制文件可能包含加密或压缩数据，表明使用了打包工具 (5 个事件)
section {'name': 'CODE', 'virtual_address': '0x00001000', 'virtual_size': '0x00056000', 'size_of_data': '0x00023c00', 'entropy': 7.998273624640012} entropy 7.998273624640012 description 发现高熵的节
section {'name': 'DATA', 'virtual_address': '0x00057000', 'virtual_size': '0x00002000', 'size_of_data': '0x00000c00', 'entropy': 7.513882593632727} entropy 7.513882593632727 description 发现高熵的节
section {'name': '.idata', 'virtual_address': '0x0005a000', 'virtual_size': '0x00003000', 'size_of_data': '0x00000e00', 'entropy': 7.705322176204511} entropy 7.705322176204511 description 发现高熵的节
section {'name': '.rsrc', 'virtual_address': '0x00065000', 'virtual_size': '0x00006000', 'size_of_data': '0x00002800', 'entropy': 7.4824549305708405} entropy 7.4824549305708405 description 发现高熵的节
entropy 0.9637462235649547 description 此PE文件的整体熵值较高
网络通信
与未执行 DNS 查询的主机进行通信 (1 个事件)
host 114.114.114.114
在 Windows 启动时自我安装以实现自动运行 (2 个事件)
service_name GCMF.EXE service_path C:\gcoxh\GCMF.EXE
reg_key HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\BXYHJ.EXE reg_value C:\$Recycle.Bin\BWQ.EXE
创建了一个服务，但该服务并未启动 (1 个事件)
Time & API Arguments Status Return Repeated
1727545311.781875
CreateServiceA
service_manager_handle: 0x00590bb0
service_name: GCMF.EXE
display_name: GCMF.EXE
desired_access: 983551
service_type: 272
start_type: 2
error_control: 1
service_start_name:
password:
service_handle: 0x00590b10
filepath: C:\gcoxh\GCMF.EXE
filepath_r: C:\gcoxh\GCMF.EXE
success 5835536 0
文件已被 VirusTotal 上 59 个反病毒引擎识别为恶意 (50 out of 59 个事件)
ALYac Win32.Worm.Fasong.Damaged.A
APEX Malicious
AVG Win32:Fasong-ASP [Wrm]
Acronis suspicious
Ad-Aware Win32.Worm.Fasong.Damaged.A
AhnLab-V3 Trojan/Win32.QQPass.R57556
Arcabit Win32.Worm.Fasong.Damaged.A
Avast Win32:Fasong-ASP [Wrm]
Avira WORM/Fasong.A
Baidu Win32.Trojan-PSW.OLGames.bm
BitDefender Win32.Worm.Fasong.Damaged.A
BitDefenderTheta AI:Packer.4025ADF021
CAT-QuickHeal Trojan.Scar
CMC Worm.Win32.Fasong!O
ClamAV Win.Worm.A-13
Comodo Worm.Win32.Fasong.A@3ep7
CrowdStrike win/malicious_confidence_100% (D)
Cybereason malicious.4322d8
Cylance Unsafe
Cyren W32/Fasong.DIWC-8572
DrWeb Win32.HLLW.Fasong.1
ESET-NOD32 Win32/Fasong.A
Emsisoft Win32.Worm.Fasong.Damaged.A (B)
Endgame malicious (high confidence)
F-Prot W32/Fasong.A
F-Secure Worm.WORM/Fasong.A
FireEye Generic.mg.0e07fd84322d863b
Fortinet W32/Fasong.A!tr
GData Win32.Worm.Fasong.Damaged.A
Ikarus Worm.Win32.Fasong
Invincea heuristic
Jiangmin Trojan/Hiddukel.e
K7AntiVirus Trojan ( 0048b81e1 )
K7GW Trojan ( 0048b81e1 )
Kaspersky Trojan.Win32.Scar.ofhn
MAX malware (ai score=85)
MaxSecure Trojan.Malware.300983.susgen
McAfee W32/Fasong.worm
McAfee-GW-Edition BehavesLike.Win32.Benjamin.dh
MicroWorld-eScan Win32.Worm.Fasong.Damaged.A
Microsoft Worm:Win32/Fasong
NANO-Antivirus Trojan.Win32.Fasong.hmzl
Panda Trj/Fasong
Qihoo-360 HEUR/QVM13.0.1AB7.Malware.Gen
Rising Trojan.QQpass7 (RDMK:cmRtazriZ4uEci+11WPJTqrgfCSg)
SentinelOne DFI - Suspicious PE
Sophos Troj/Fasong-A
Tencent Malware.Win32.Gencirc.10b4d013
TotalDefense Win32/PSW.QQpass.7001
Trapmine malicious.moderate.ml.score
可视化分析
二进制图像
数据导入图像 288x288
数据导入图像 224x224
数据导入图像 192x192
数据导入图像 160x160
数据导入图像 128x128
数据导入图像 96x96
数据导入图像 64x64
数据导入图像 32x32
运行截图
暂无运行截图 该样本运行过程中未生成截图

👋 欢迎使用 ChatHawk

我是您的恶意软件分析助手，可以帮您分析和解读恶意软件报告。请随时向我提问！

🔍 主要威胁分析
⚡ 行为特征
🛡️ 防护建议
🔧 技术手段
🎯 检测方法
🤖

PE Compile Time

1992-06-20 06:22:17

PE Imphash

ef85ed22de7ec9518877dc2b5979f64e

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
CODE 0x00001000 0x00056000 0x00023c00 7.998273624640012
DATA 0x00057000 0x00002000 0x00000c00 7.513882593632727
BSS 0x00059000 0x00001000 0x00000000 0.0
.idata 0x0005a000 0x00003000 0x00000e00 7.705322176204511
.tls 0x0005d000 0x00001000 0x00000000 0.0
.rdata 0x0005e000 0x00001000 0x00000200 0.1952012677871819
.reloc 0x0005f000 0x00006000 0x00000000 0.0
.rsrc 0x00065000 0x00006000 0x00002800 7.4824549305708405
.aspack 0x0006b000 0x00002000 0x00001600 5.7438542110463375
.adata 0x0006d000 0x00001000 0x00000000 0.0

Resources

Name Offset Size Language Sub-language File type
RT_CURSOR 0x00065e9c 0x00000134 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_CURSOR 0x00065e9c 0x00000134 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_CURSOR 0x00065e9c 0x00000134 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_CURSOR 0x00065e9c 0x00000134 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_CURSOR 0x00065e9c 0x00000134 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_CURSOR 0x00065e9c 0x00000134 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_CURSOR 0x00065e9c 0x00000134 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_ICON 0x0006c238 0x000002e8 LANG_CHINESE SUBLANG_CHINESE_SIMPLIFIED None
RT_STRING 0x00067efc 0x000002b4 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x00067efc 0x000002b4 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x00067efc 0x000002b4 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x00067efc 0x000002b4 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x00067efc 0x000002b4 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x00067efc 0x000002b4 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x00067efc 0x000002b4 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x00067efc 0x000002b4 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x00067efc 0x000002b4 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x00067efc 0x000002b4 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x00067efc 0x000002b4 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x00067efc 0x000002b4 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_STRING 0x00067efc 0x000002b4 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_RCDATA 0x00068ab4 0x00001de6 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_RCDATA 0x00068ab4 0x00001de6 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_RCDATA 0x00068ab4 0x00001de6 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_RCDATA 0x00068ab4 0x00001de6 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_RCDATA 0x00068ab4 0x00001de6 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_GROUP_CURSOR 0x0006a914 0x00000014 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_GROUP_CURSOR 0x0006a914 0x00000014 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_GROUP_CURSOR 0x0006a914 0x00000014 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_GROUP_CURSOR 0x0006a914 0x00000014 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_GROUP_CURSOR 0x0006a914 0x00000014 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_GROUP_CURSOR 0x0006a914 0x00000014 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_GROUP_CURSOR 0x0006a914 0x00000014 LANG_NEUTRAL SUBLANG_NEUTRAL None
RT_GROUP_ICON 0x0006c224 0x00000014 LANG_CHINESE SUBLANG_CHINESE_SIMPLIFIED None

Imports

Library kernel32.dll:
• 0x46bf5c GetProcAddress
• 0x46bf60 GetModuleHandleA
• 0x46bf64 LoadLibraryA
Library user32.dll:
• 0x46c113 GetKeyboardType
Library advapi32.dll:
• 0x46c11b RegQueryValueExA
Library oleaut32.dll:
• 0x46c123 VariantChangeTypeEx
Library advapi32.dll:
• 0x46c12b ReportEventA
Library gdi32.dll:
• 0x46c133 UnrealizeObject
Library user32.dll:
• 0x46c13b WindowFromPoint
Library ole32.dll:
• 0x46c143 IsEqualGUID
Library comctl32.dll:
Library advapi32.dll:
Library wsock32.dll:
• 0x46c15b WSACleanup
L!This program must be run under Win32
.idata
.rdata
.reloc
.aspack
.adata
<y! H{C
nmslj5
9 rAj3
{m U`m
d [@n#Z @-2IvAv
UxBAvs
ou)'l<
jp2o9|
Qo\eP,y@ h
< < l@
PtH**h
C$nE(u
Q+ V_L
{MM>!p
cIn[A!Hib[
B6d`J8( C1i
Q"h5(WgoE)ilnt
vH/e*R
6ILzI)
C(o,c:)
9U5Aka
x>3^bF
n0`XWjF
kRuN#Fa[r
tB&Qf)7yTu@
EBzcCj8:
Q+%.9!g8p
5/:VWj(
:UB_!7
==[]OTbBr!-f.
u5(g>i-c
y<tF\Q
tF53kG/
8hyv~i:[h
7qPI4)tN$a
>{oREyOI
_(XU\o*6
il?/j;.
J<!1`t
+q[VYQbhTB
r`#1pb
x8xC[I6k
3RaGCo%F
kcrk(B
n'f0nF8s
$Hlj`{p+x
fN|S6q
M8D1b7y/2
g0[Nl>
:MzC9\cu
lA'C0!
=*)M,@McP
#{R^jQm=*HK
O!Hjeq`'
R~;]cRN
QfweQp]
wR~Ms0{["v,
]^_(m;b9y)bF_s&*
$:Za4A
~Gu<1-qxg}xC_?
Pe_6eY
vb `"dRXQ
U<L)^r
d'2&;w
$SG9o,J\~
~SBR<kK
'v.3`4H\xGJDXR
%(zVolF
Wqoo1|x
K.JCA{
BE<i0+
(8x 4V%KzD@
E@iN%pK
gkHrSw
ix&Rv[L
57_m)xz'
65"}l>H
]s4V^9|&G<c^
z~[?V!p
VEh!]-aldRN!+;+{
kVz,C^.Ov
Bm@d'[
v5gXwH$e
Pu:X++J%~
Q}U)%
Ci:,q
[<7uFSd_;
2$:AOp7
X$g/{B/9
qR2Lo\
(x9+gY
MEf|06#
6O)6t8S]>
DA{#0T'rf:8b|8z
}k(x1j.|
#H;*CT
Jne)6.
Quf\!W3
@H_exo
9W*HypJ
OU+)_K]
2tsjMK
[f0FXGBf>3
~(=#-7
S?yDn\
(TH{M--}u
XUE)/+q7H]
mJuG,m7
<LVJ@x
-{f5Ql
2q:wT.=!>>
nhcif*
KB<yn5"H@^
WoRaxP
iBO|$:Ni8
X`bg ]h-
TK9f$Y
uoWg@y=Pmz,9U
:L*f'?
*{KVT<
#7x!$Vj_%.J4
cdNfvc
*fOf5Y`H93F4D]YuSiW;{=
WN!2{2
Q%+%J=
r;g!\rQ
r'S@ L/
ftT-{:|
5fQA#6'Ii4
wEIdh1
`~oR`v
|f%xfG
p*]S,a
E'Wq Z
MibNW<{`
/,TPp:4
p^cx>Ub|3./~PlT
IJ`;4UW
aM+]]8))Zb
b<]9YZ5
l4\q!F
]JI![k
b;f]x4L
'*oQ,_
nt|dl4
&&Pk[tywI
L_E&iM{
|&D(D_I
[407w&/8yovFi>(Od
'gJnc9
u~rx2
=1wtIA"2)Or$3OR
Q%b2J~7G5pb*
HIuJzf_!
OPLrQ.)
j(^l:-
->>>*O5
#K[o{,z`
10X>nNnHz
I-OaEp
5h3'X/,e
@6cDq/@rS)^e-yN
q'dITL?A)h-.
;7V+Jyo
}Sp3k>s%#=
@8Dde+
3lvRE,j
+hH0Otk*
)yKZ53<A
qUHs6bz)Q"
$ra8,B<F9y$$
QS7\QA
dXR38U
Uysz8#
kqw<{6v}
w4:61$:
y@`-J0lb
i#3 .!,
4I$QZK
+Y-8nT
~BHTgrY*C(
x@IN!M8Z
BxxjKoxnL7"g
"oBG)L
92"0O!@Z
Qt5&R|L
6uFo[&uW+Yw7
m9DRJ_d].
8@_t,,
'*2v~?v{gGX}l1tr_
% ns!0J>6C
-_Ni_c{gI
vWu=b2@
c37o#
1n"D858w
NDc:~\-L
DDp&Da[:
S%O230l;P
caX9C[
9hKlN3
~Q|3PWpD_6F
8zkiY\B
=JO-S# #
X?j?#{&[>
jbIUb{jOe
S5AHs{
V)fcdc
S][j*XLh
__=oL9M
to\??q
SoK2`8\W1C2
/J!/07|;gprPY|1<B>POi>4u$w
cs)YPd_
e#SZ%4jR(FC
\ptlJ'
U)eknU/997
|^z2NX
Tbn+))9>IT
won?^`(]EJV
PI`gQ{&&
0+A.c&
]S_FL*
!y)zfEVRpeF
1Gb**rD
_~szJ;s
EOb (x,D
:M'|UW^'
lbDv7ahH
YB>I<rqlm
%fXbOePT
6qh;B~d(
EVwV@e|c
(QEQ!*^P
eE"YD%
:wjJ*PNE"
Q*!38 x;
UNBJ0lc-Y!o
>LIbz(
(F6g2/
mE&e$ld
$ATKYL\Y:7ED&&]$I#9
Ub ?o?<
H6}s'S
dT8Tmwea
b"gJzflFfyw
gD!w9Iq
~V*0:G']Rt-]
SU9":pEQDm8jO`m;j|~JW
a%Aw1%#?DVE4].83iG#
.N]~75
p[m:~1 '7
Co5#ow
gR-/Lh
Fw:YCK%\)
Vt@Jpw
%vKOhv
O*xSoiTK
#fzk'+.'lU
Il>^.p
1s*CX'[|2{MIbN
?V%"$l
>%UA9.m}RK!}=zd
"[TP$OsX%x_
'!uva1m
WfR4g~s/Y
Erv;^t?0u
m}V(n\
jYxzr(
p{$8:F
~+dZp]~G
Zw,#t[
Pb7[]oNVR
{2R<+z?T
EfzxZ|$Y[A
^K5V'vnsI
unF8&_|$iG
%Iu0Di?a
$lnDx*
$E&~k=5%+
Udk>Dt
aZpX{U
7LZDe0vX
-C%"kEPaCI
6Ssfz7<kEcJ
x^/L_yK0$
P$@#0"
`[A-!e
(2(2(2(2(2(2(2(2(td
7TN7<%"
u[H.GG";{
NccSt&M#
SH/1]c8"1T
+ISU((MyEZ$s7SL"RuQUYQRs;Q0
d5sfnwsuuuG]/u
%5C*1c/>K0.EBrP
_Rm:^o|GukpF
]7t*sQ6OX"Xs!()
QS7J<m!f\!=a
p~O-byk
jtxsT&;
f^,uWjo
5}1<VuU:_w
((MjJcm:O
'H;mK?=)
jBLg(<
eR]E~SR
N<~QmMaWvnt};tK
ozJc)GPe,<x'_o>}D
O]b?II1W
&/G>*==Yd
GKGULI`>(
r5`6}b
5iiH]a
:jU.FK
g0?Ur
&F[/Ky~+[=Q
r%aaA._-"}v
:ute&!
a'%&"1wd<[f+!3dtkFN`f
"#ZBL M
u,"93Pd8 w
ilhRN+V
yjo${\N
oT_z2=Sy'qf
lJa,j,05D{1-4DU/
|E^DVq<9_`PX
5 jRo|t
pjnet<w{T
Zr}@f'h[?H\P{+3
p,pj"\@1=K
rVkIh>
Es9;U891lg
g]a9m_t;sj
|Qv7F[Z9SR8]
?b/^EeX{
"OS"X"
d\;x.Qe-o/1M
oP><W,a
%o8Eq%>SO
llQ~Ox
*ukunbu`P0pJ
l&|)qw_
-p+S2M
8:5RH;
>bZBXcCJ+
sfY{#Xuz&#W#R
S"zSBk}&J
\Sk q/a
+qzh+y
fC@f|1a
M%ZaU
}^{4xkYG
=*']7=;yf
dt6e*+
4*?`UH>uu
vtIy+l
WUn{vK
Z)9=k<
Rux@^s
Fbzqvc=a cD'z
r8'GtK,:K
]M|^D#2-z
Vr{qQok;Og
yZ.f8*
Hn=*R
2m+&^;&
GTY)CW
d24'#LI'!
1bj.#E
][z1Rh"
Gz>v0yn
/C~I<A{Hb5
A6G:BA
v6Q e}($<'M 2Bc
<?-,Oit|i1d
Ypy&Bl
tO:^BWW\)
Uz6?>PG
-^gy_OFj
1"/DDC
5_$+H$yiJ&dlD99vG
dK?6cz
87(7!)uw[^p
F+Gv2R?
!%T45^
i=kId&6c1Yf!|1
VcPe]&
U?1yA{W~rMI3
^ofoOFh
v,*L+fQQ
VM7l]y
VW}f\Spz
%w@+H>s%x$
3cum!RwDO:o_Je
R4Mq\tf7k
</K+W
7c~{.C
-_o:hf
lxX[(p/
sV/oI}
;-[#y\#IO{1
?BVv]@+r^W
3o%O7(e
3J:eCR
{xovmaqXBR
cGx"#?p)xUiuo
6>q2[&7*
fv`#CL
4"|6N^V
6F/XlF
b1C;\m
O!5,tJl
._1pLm
Sk8m{%
":m<@)u1nG?p#_
+=41STS
[vA?Xn
5&Q"U^
6o:4"V
o)d6iT
?ViKQZXXU
$usFCAHE
TC}jZ*=W
UTaTF)
q'NQL't
Zjw{]Z!Mj
14F,)7
_Y}C|p[d
Yg[dMt/
Vx*x./=<4l`
>>;0gs
F6w\t
kJp2HJ(TPv})*F
ZW\(S4
WkungAPG
Q7I"P]
28W>Art['
b|.YxdBRs=21
&; q0
(0xG-}{oZD@g
t<nhE-*(j
dd3RwE
k?Qtn"
)ls5+RQ
G"c)}D*
A3IFj%
prJQ8.IDfL]rS
pd&w'\FclyC
sU7f_IrVqFnCv3I*
){- k?ew^
gMmC3qwU
1~V\UN6:GH
(t&DNF-M}%8&hO9{%
JfJSJPPi~
iAs3((C%K
p4z-5`'BX>Y]
30i;+,
._3?@C"y
N?tM]N
Zg#SU,U
v90^@OL
.__U9>iL)
D3W ze
9AUZ!)TYJ/
(}9jFA4N,-
<T@brU'/
|<k*h|!\J8
9"qVDe!sC
%q6|;f7
duQ58`J
fvEfz3oZ
]M$q vCz
uIFnabg(
D~2Zj!GJ2
|Y8?iWk
.KcI?38
pvcqo[
Ga7P5LH.YP/Z=S/w
ie[!k*A#
aS1tXe>oKC
{{HsKyx|{kn
ep(ud3
Sy#bn+3b"
KAAkD+Q\KWb>%
~_&L/.
3Kbme<
ZF%Wnq\m
=9~hmFk@4#
hl6&sKG
S6)W!F
f{\pKwi
RP42 ERc|h}
RMaNPr
u.D!Km
e<OCf7/9'\
v-<hdz+
sw/rdrTTzO
'7mi{8
99nOQC^,E,=b8):m
g#Y'nP
DC,@Hv_5-
xK<7tl4
:'3!Fi:Tx
=jnD-4
1rD9`n@RLM
bHu[rJ
>Y]b<ur
z;00`)A
mQ.gN_
6O[i6IVy
L% b]mU
{Dp,16
`no="k
yM<ly2-$
AbB+KX@w
{56A%"mnb
GSqkWdmF'x]*$_SH6w
5IqZ~\
@VNC}Xe
m"wcN\x~
(-r[(4
?iv6s&
5ub^e#]
6&9KrW
%)>6ip
pMi)VT&/;LSN
]1m+m/`t`Q)+)
IgAzC6j}A@
=w5A,ki:
3Rgvg$I
EkvTGHh~l
2?)v-2|H2
fXs=x5b+DB
SoGgSd03
-9a!PA
<`.a}P
]Jun/B`
!/[orym1L1.aj_
!HywlZu
HcuLdX|4#vJiou
"fV>MG\Hrd9'$NL
PL-H"C(
5:@5=`IrfK
WB8rl_U
E9%gs0fRCP2
3"0<8#<
1:]PE0xC7Q"hJX?
(8<u@*
d85.(6r
J{n=D6L
5gQF\'*w
{Y"&@b
LvBb\LtmT)s6
Bp4JrKaM=
H}ee^1b%L0zwn\VYUC
6 KPkT.7
Jh.!6g
sGkjO4+D
?=3@.]VC{|
aYH'gKV
x0CB_a
<n+J3:
+#xl#CZ>8(
1tSunS
wG0W/7kW~p=
qN,:t|'
-(UW#\\
[9s%n-LP
eb(L\Jx
tSF\.h*
/=k.-4S
.mkxvV~
<.xs"!{!0
x- !I7_
A]G0S%*Zpo
CWxf<34
Eoj{N1
9MP(0^
ptjx*".'vD
#nEx=@?8
s+_ZQF
K6/RpO%1
gj_N^ouHb(
*^1Io3p*
u[Ravq;3^J
/bx7N+v
EnB==y
lf1bp]^0%
i,)_T}J
Emryao5"y
E)Q8Z<H
y>[Y!y
/^Wwr'pV;cwW{dX&re"Nf
0.a]MG
&E?$\~0?}vzOk)EN
Fjy0EPo
39,9$J
rIui8L
kCASB{
k5T7<;K
!tN"O q-B_
xhgt|\
Smu|[c
3mx6)"
o%QLh,sy
3G+#.s
9_y3vSW `M/O`
iGH4P&^
~W%-H+I
-ouH5e_U
+|*]jj|[K+
JmyUmwt:
2e(rTnx8,6@_
_Ah%eHb'o6GP*"
d`gMJDbg
/u[$K>sxi
1yE%d[+S>Jj#
mOma(vVj
hs2eC><F
+iPy/T_d1O
8>S<Mn5PVLaSZ
zC/]u?Km_
+[&a#rqUd]^am/
*jXF+x
`'v5nL
EJf'os~sO|QeOR
o(bh7gQfm
v20*AoU0L3U
J3>lRsys
A5ObnM
*s^Dg7Gca
$6|now:Wk}
LSMP D~"
C'9q}1
}vLdgMG
_YU}\)"
E)guYFmb@)
ws<yw3@
py;IblV
z/UdSe"E
<qh(#X"
ebo~]9$mMi_T
_g]PzbKd:J{W
V0M]l-
f&a|9U~A6!EO+2A
~|xW$,
Y[o+oH
H]-'OE#
vROpe^
IIIj<%l@:{>5+
tMq>;,
Uffs[MGNa;
^KAHnJq(~
T!reV7
-<:",6
BZraNFl+VnF
$[bz~4o2
jM?,>
}(3B.&(
|kZUqp{+
?flw6V
Hf_8F:1
X?T.8 %"
krSg fJ
gh/lzg~}
2AxZidlG~?Zx|kii
HD{\pe)1
we(T+Ke*TQY+H
+d!-_}i1w
Vz h07>Hq
5s9t[0
A`Bl#l/0b)
02Q*k5a#
_+9zQ-7>@
-TS?%X
g9}wg^}K
6qE?%Fd
W}iTqE
Bx!8./\A*+J)Y
yfm)^J1
X%nVPw.#+p:8
@%Q"{ul1-)]cX
GSG\j;s\
mR3Siftc9)J
^NOg9z
G 3>'[<z
XtAXm
DKpz;';
E:Dn<uFFm
ln;wI(N>
J^pWdun
1>8p#f4=
TBc2X\bvF
t}//:w
q<Z^=-^_
,S)O#Mi
Ad+*+y2J
qy9FS+RfW
f.I)61
\'7VS_
@}{oFyYbV ;
n1WGT
,r.8Ga`
o`[|Syv
L}(Op dK+9
|*E)+K
o:+lmny)]`
OO/oK.
moZKUFENs7
iIh\KbUp7*Q-
3EkUpqlV
m6bc/m.
}omD+Qq
gi79`H$nr{
n.asp:ufX$
~wE,eoyn9gkpt
AII.PGnyhE@
E|7,n@*Sa58&O
gY*tK"`d\) Q_4
l.Lc6C
|(bYV}r\nK
0M3J<0sg
kuUk.BE5
|yPJC-wY=t
2RI"C}Sc
I>(^O:
*zFfvS,Q
wTyF(D
Z~pV&."
"\kQVwPZb_T[C|Tp\&\"*j:K~k;<Z
D@$b ~nQ
]+._6o{n\/D
i#9/ly8}c\$
?D|<=;E
a&b?7@X
,:B^Z:
GAw*yz
}WAcYVp<W
9Wj`.)
emGdI
^N]5-bG
;)fWr([WE/
HKA'|P({Z
Z3aC?(H
HCf`iF
PmSevOhZe
eTN'IU
Fhr3+33_
\6j4>@N=
z;KKjT0
edPcrGW
c!w7<kK_~R?
_+V"-K[P1T
4H~#-'tpt<
:R#Dh0DQMR'N
4xh_Hr
iD~.6L~1
~BbP;2a_qj
ADx<b:-sr_QC
#cg+{)A@
#q6%<^2
dSj;zr.
/!>PJ1
'x(&zls[0W
VJ*;iOl3VY\2R
a? 1zh
bv4O>]
HFbE?[q
f(ORb$3e
Soi({S
*](OnB
fAg}PfJ:e
EEO/H9N
\p5PCu<#\o#`(4
gZ3h\s
}Bj\U!AEE\/?
V1u` e[{U@
nl(cA#
4#o-HO
1!6WR.
wwHc-J2Xa
FJs"{Iv
}sw=ON>
xTnnYYM1
4*DbX:
D(]Pm$Q&
G]|WaQ
h^U-Lg
Nap&/K
T;GFXnbo
ois<pAN#~g}m{
7/}pz~
m)s2#`eOt
' q4+b5kK
o"4|YZQ;<;[?G4}
6,*+?yfLw
K^=p|0!*$
TA:Jdu
N1%qWdb
\c5k%"/
xL-B8% N{
4Q%N=R&
6dY[>[}
%oR Yo<:J
8't !kyW@u&cbjsZfUIBV)}BUu
\*`'H3
)xMLaZ
#P:=lu
H7@*uL
$k"yiMLgfP
ZFElqH`FJ@h:
S(&2t#a
6>1;Y}{qN0bEi
}3%g}u
*EfwAOu+HL
pn'.kK`
^WjmgP
e,L7nk
MPcC.&E
oGfir)^(W4"3
B^2'yFd%
mrZ/F-R
tTD*7L&Nd5
,xH&bH
_$)sYcUn_
&/\5_6
@+oMZZh
T)q3kx'e
T |bB)V
(AhSqHS
"B$@Ns.m
Wx6hwQ\
F@LYq:13h
Hr&_UG)W$z
You(&U
S\!f8nm3?dXB6+@
t&oWhUGAy
Z10m.Y8Cq/
!z}hH1
E5TOg7'
uA,F&Y
+!hg^PwC>
$>|!>D
R$?rP|
@OZLQ|
lkAvSeJDww`}
{z[g{-
QX_BnU
)Jp@61
x>k='WRHr
=8VI}A
UTy1^}(@f
10}J@)E
G2#ZDVDX/Ai
)aSywgT
Jqa?(!9>
H18WXlvB* (.
tU^Iu}3u}_"ooz
v#xGAucC*!
;JqVKROdg)=5*zahbin{gu=
`RIdR+e/%|
gEn>]sA
wG7}[H^y.
Ob>`XG
d*Dm%?U
7Z2_
KmW(O]Q
~rE9AM
jWZ 'n@S}*n
$5s;t8"]7
~H/XBoes
~m]u, 0
4&j?C#
Zr[umEP @7\
`f1bgmE?VtAO?3
w^Vhg=
4RdY8u
U/nP,j:?<L
M/3+~p
^P+[JSB
'4O5N_
9`R~z$
U?W&.bU
6on*Se9
}mB{Wy
j+wbNw
v|HvPfW_\j
AW-=?jM
&TcDivn1Q{
ESx(1M]P}-SIs
vy0iBg+
Y?z&JfR
2j\*UF
76jkO<C
3uhMRJyy]~"V
Qdo92P
pZ}pax$Rg
Mq3+O7z
{u95mik2oc>ZT4
v<I/X-LI[^L
ZJ#&!P
Wf+%drl3
A a7SblK{
XKme9N
){!e~W
Q1b=n9pD6
znx,yn
lFoslQvB8
;E1obz
Je([)6:\3
'_-WnG|m~G
Z(#6W}<u-n/
$MjH\K
;N&FO#Q
M/fMXlJlK
/G%6bq5
9BJRhxc
HxvdR%
>wXT==<da,rELhcB/~
w"b1&o!8P
d/6Iz9t%
N[NAEuEgjLx
\V&Goy
=OnWiQ!|2f.ZA
DuX+WMn
<r`yK<$
Em(?ig'
u)v0?lu
6HV~f)J29c&
!EI|b-Pi8
ze!]K{
Jg'V1Q
w^Tf_.h!
w!)##svm#FC0+4VD":
>gep\\
@B3YQ}LC:}2
quKkfb|V.9O8"
P}\gsA
PIAj~J/>f
{n>&*2Z2
eiwL'F
naEKj/`SZny
AK/WNp
L:_1C1%
?{Q~f@
7Yee<csLa6>
yh\@'A
tg>9air
sE|?3 8#:o@
6DOWJWzC
(O:CPi*!E5
SDT@;NN
_!_o({
rl}km;z
cZ)U%"{Ug2z2bT*R9
Cj_S=Jc
~d3tY3at
({|[oQ
{Kqt_Nqy
dU^<'!?8D{)B!
g>txS?
Cu\:=l
#B/&f-y
7`A)xQ
R2;F3.F2
73E>Ac
;;[a7WPhv|L%&O
DEZy*v%~
tme*e8cA#A7
O:Q-`bbj
l="'L7<A
2c4DY'7Lt
jsIPpw
GwMLQW,
Fg+Faj/(FGZSqX
!e.M9#mA#F
#5B|Hp=
BO-\B5P[B
[Ch&KtKr02
z^]6#6 b
+Ct+$pJfDo]
OhU;k|,"T5^
:W*[(.
~xBPrG__Q
QVF [7nE#*=i,xb
Q|}+~UTtQe
%W1(tr
dQ)zP>m^*h
UITSNt
}=~r.8
TVub#-]g
[vj/{UfAg
tB{z&p({^F
@,h"=&8
q&6YPX*
D79q/]o+L
#;}3EjF+&#~_p
K|#HyK?
?0L-?\
')qs}}T/
4}g$3D
PbC;{~]sK
Y-p9k$=4(2
{t/-Ky
gp(>6v`k
.D&Hb;
v"Wb qi
GFY;`2[h4S
dGL%\M
3{xz77
zPx=7hRC
7!zrW0
po\8hq|
o22\XQ1
n}Ak<O
!i!3yxcm+
wcU\kkAe
G6gh]y7!n
op?)0G{IAM$h
v2Ajmu
bJ#u9JO
P^vE_7#
S"Z>>~b6E
4*FT]B{-rNc''~RZ*1b$
)8^r,:|
_^$1j Z!
X>Ar@E
%IpQnN
~<M|-2[
< U_Oq
WF3< |7r[0q
!b_qy4
X@f-7yJ:
]xxu.OU
!rd//YJ\MlF>0z-ffeH
9Sh|(><1
Z:1Cnu
A8&;(Nv
7no;_i
W[p%WYR d
EBk(B976-I[Deh2N{
Fk$F$0R{`)*u
{\cIo6')t
|[ArUA"
(|~>M:9PX
J 9O,R-
JnVOF~bbty[$
lb}96w_9
ixc$0m
d{LfvT~EPsm
2&bAF-Y$A
^[o||Y^ /Ud
b$C(aO
Fv,F$dBNA
RENDtZ%
J@ZRYPk$0/9o9!
s=ncLv97]"hb
]wNlL_
en9+|gV
Q[$_(o
$1#X~D1|mdy0
5g`7)&[
<u*yRP(
]B/F(cimU
@jPT$C{+1
U9gsw*d
}y<P_K'k_ymn$J
% L>7,0.
@z88.4
f0Ezo]t
){|E(n}o
+v"Te$q4w
k #jb(:e
-q+q([aUJ9
{CqrN=|
LA,u1*K
oYdt&F
n@*lVjVhT
Icc:*rTJ*,
VUm{xW
WNOfh}7`w*U
_B9J5QVhY>ah!aUY
_YbM.R"Z+.e
&"q5a3
e=jI{l
CgV}q&Q
s?SAtT]>C
7X'i5@A&>
j??V*<J
4Q84Ks
IA:|'L
lu}r1J.|*
h|:ZWsC1}
/h(RCnW]f`
&4{J6I[FQC<~7
66|bK)C;u
A@?tM$'l&RPr
L;Wd,'
kc.Rh-k]=
$:'&78RMrZxzHp
D-'S}:B
'QSG}
~#ODo|
2fF#_K"
-RWE$@lIT&0
~7tI1;
sha(m~h$$R
?3V[pE(6dH9(;>L
R\AV1:qk
#kFI3C
7Z8$E2!J8
t7%5P#XPS
:Y(F5fP/
$TPy#X
nz\hL3u
rG8t<pzp
knJ!2r*Gn-T
8sFDKn
brRKcsP%/
I}do*13c~m
Bqp8j;t[h
Plf&wy~_4
;K)toB
OAG?J#
h%~HHv*sDk.@Z0=
Y&?FzzKcDmaT>>C
6k.\sz%
"xyFXx}}FGP0"!bvr|
u.&)QN_
C?7QW5 bL
I!_E ]
+(bS%2{GB)84Ak
6Ks-nK\Cs
dQFApEEFcv"b
VD>|QA
K^hnmt}"
?KEIE4.a.etP
U3X8^i
L.GWPPc65m
&Z@!lHezy|$b
1fWl2}
hV-oF6XpE3
=-L]{rO
LxEH90'8k\8a
X-3g]<TXOl!
Z}]xUr.
2m8hUg
0GI4cMU
_5p43L
i)7&>pp
5v_7p' R
Pc`!R<G
7.'RtngRf
rcuXKAx8k\c/
)DhPYs>
013s~1I
* 9Gy%ib
KtQ#3>B#&
+Km&U\
JcTJ9KI}LV
~ESyX&
.U6dNCP,70Fb
D gXm[lXf!
r}9\a3
?7YxQ@_|{zeMq\n|
Cmvc6u
;j"bG$7F9^V
?z&[_^
!X#QTz~
FXK1WB%Np
E<,_!D3
riCH=c
_Q@+*rx
R=VrVh4
8]Tjlj)(|
!&@V8j
)Bj'U\
Iu'VsD[K%
q>rJ!e
I>gzNxn
H4&|(R
g"!irT9m
(+fr@
$4vt<C
CB7ZI:l
M~W[knQ
U~B\)j
d~T^8h8fKmdJb=%n
D|z=(UH!
* x9e5u*:LRG
#"NJp~.B
SH8J%l
JYlJT.k
:KlFXS
Ezl:wPiU%
!1\o<!9/h7
`b{Qs#@
8{tXJdEo(
}]y'"W
9->(6I
#P7nn~IeODsnk[
CAF>qmh=.hUogCWX
)k$|^(&L?O5v
j#vY6qV)Dz
zC>XIb
>8&PY0YUZ8q*AU#
'e^W(S
OZf()lf
Ekdf8jI
XxcFB5_
h@X9"04f
"Facv20!h
Hs7y4kI{
WIM3~2
6~gD_#)} ^>0
?)**.hK]
p}^2d[$;#m
5#QxTe
2efXH}`=`w
@0B'Mz
MSV*EEvR
;9Ma"|LjIW&
8UcBwA,0
X63T~x
y{Yw1$c
mHNWeMZo
iP.1tpzr
jv.U M
BWmF9 ]%B`}q8F\~2
CPYH#E!A
+D4jzWPx/
`,85u*T
9YHB]m]Z
=^nj_T[Ll
JPY1rzteg,W(mw
!b;|G4U
eLht/VI
@+?2w5
p'?J7]
_CYUv~
p.<4Ao
rajkQa
-+N-Hzq%i
hM[,5Cb5
OtBtcVf3,zGl
thL`36
{3PQHF
G5uG2_O
U59xG[e
Tj"645
H,?ZH4
{)BTH7no
WR54|g
Ila1I<8^^!s
bB#9hf:|
<%&[hy
uFj(Z!4;%V7'p!#Y
cPSCHt
X*)aa
.&8oz+2{BM&
|5H>+zC
eFVjr++/Sf
&2bf=;`jP.
>Eo| 2F
ty7$`eQWv
Rs%+5Wf
>}x3Eary
W*;tE"%nCF
}o Pa'
gGC{64FCR
ahQ";
IbQ{3EX
:&2"^d
II9',&xL
)9= O~S
Qt%j;/
Q^|mSUMm-6U{1
o;ZpBA
s#;#C,
3>%(yE
KU!KhPc
d#CRm<
$)}yK(
`kX8iHl1%^}.'PB(4Kn
bYZd20}Y0W
JX)!LI
4NRLi9Q9y=*#
7@id~LG
SBz4"hd
S)X)W(S)V(R
[U@p`B>8$0"8pI[
mEQj{Vew&e
z358*L
x;a\-M
oYN>Wb!
=NQ5wt'iCO8J
NHl*/=v
i%WEdQ,^G
07*48)_
*%w945_
r|'jFv
T7I?A{
O0&Llc#ayz
b7vDxp@4BS
j~bYmSy!1
v9('g?
]IFX.m
BgN51q/UThY
DG@#&Y<w
)zZJYe
cM`e2@S26c
?8Dq>3*
C72NRm9
a<b .e<A
<k/`7G->GduL[v
6:BR1|CWe&ZG
kx%R?TiFWf
JaC}1/`yMg9
1&k8|\
``;WbSr:
l%*Y.@+1
{; ^1v
GUu9t?}
<Yg$`+}_n[B
6r*I*M?lI2h
,n8`>0
x(/<'*Ix
F1;inn%
ge*V04Y
cR$gm{
x6q(\G<
2K^pG}+a(y\GM
l>\kwIx' 7A
^,H!RK
vtuX,sRZccv5kEU
S~aqGi~I'^7
fs 4v>7
n{;_TZQv&g1b(NdOQ>k
bg$No%
9k1akp
VrQ}od]mW
/98dF&B/# ]
HNBN;2M
_ gqbFnz_YoZ
]#fRv]r>Lu,e*68
<!rJ,Om1Vl
zXr69Rp
/fDH?H
MOcayCFlhY}W0
rN.:!Rt
qPr=z[.0u
BfIP)(?9%H&&X6N
m}CbBJSc~$.gf_?%4
+`s-\}G2
tAr/xS
u{$xUEe\
&Z!XB
?aD"\d
zf=wMm8
u$w-p{
A)&Z%Ls.
*R:e&%=
&HR_;u9
(MmD@~$Wp,8|]">
^?^c0Hc
iI\|DD8
CmuWQf
'_#,(d
[ncO[^e=dHCAlKqY~"
=s!fue|>v>rU\u\
K};v^({
R1?7_Kgc5
;zWXK5
a)N%kk^B&
Qr)92b$
tK`]0u
%@cyEt
ePGEI@T
8]YT75
gJHj8D
LVK<bMju
rX9s3fG2;mB{rX|t
itcAm5
Hp=HFs:
tj-pB;cK
fTIW<,D*S
p^z?-9
J/'2(d
}~?T(,6`j
Udv?Y>
Bl!NUQ
%["AV3dGe&%,[A:
%8wc#X
feW0v
Z|?)[$
0u[a0C
n$=~8Y:,H;u}bi
/J`n@i
cq?@y{
VkU#3pR2M$
vT?xMAnt
:Hqm2)
"9fWqw
,%pm.-oU
;H#!+z
ZBQ*yKM
mp!=X4
y+)i"<W#t*0
^t)6KCi
TPF~,59
*zqS:O
LhL4o#oh
!4>y)f
);&#I.w
=N/:x$f
bssh;%zt
api l~
d,7`Og@ .+~
JyD&(/
GS_cKhLH6tn7cf1YjY`
T)wQX"\},{5h1
HTNc\ux
nGU3Ms[
LCZ|gqW]M(
v6l_%A
vt(eM9
SQNAXvu`
KUa."exg
G+hMC'
GVASU;
a<MNHK!(:w|dl
Tk(yCKn
yI-hyO#8CnM
-"*P7B21
h*:Tw*-@
Mai`2r!
&mB/c&
&mL@nf
{}r(mw9H
jk]S&e2&P
o{3=8@}J
yA3$sMVQlZg\
B\)+PFOMz
.5H:9L
-'^g#Tfc&'+gEkK^
P\)LIpl0;wIr
Kfy8RS
&tva%4'%QN
;fXS)1#[}
thSA;Wq
AcS65UXuWM"u
IG#Nmd~PZ~"
oX4/QL
dGe1ooKi
N1#^|x#
(*)KW`9@
>b'&ZVXl
g3w#k6K
XS^E7@*{4'
Kny<=pG
L1P}nP>R"q
\9w'BupDz$ky09~Z
2E\Bh!
"?9t b
?|*)|/-
HogcV05
5-!@[q
hL%Q[Idj;X@:i
Vx2q~6csSn[
{~fg>m
kF{w%m
maVJjX" }I
JqIjgVr9
ZE@#+F
RH>=a~
H(!EA8S
WS;e08E[r
8vw9Y<
<x6T~N"
8Q).Xcu^:
wQ4}`|`a51
W0<}m9Pj
7CmZYQC\
.!_!!]>i0
4M4DMc T-<r
AG<,b
B@V=YT
'X >O`K!%$
\Z&Xs\8
EA)_l g+/
RilK{eCRr
3pt(%f
fF_:+OXH
jj3k5a2&?RPJz>~
%Az!B.F
~%{CZ0@>E.,ga ?
Cin+pMg0OSw9,LD'CIU'
q',6~/#I
Y~=N[
O}g"V7v3rPy}eV
Jb<qUSRNWP|D
26pK/_n:mc$
:;%>yC9
3*x'4u
S<lyUx
Fd=_Ax
$3hPJosGgr
4uuyWI3
SXN ",<i
8[q&9KXW
J(7#.\
TP_L[aW
>{|o8H8He
!d+-#D['
/G%Nz*7pX#uJ
Ia9(A1
Y*kw L
i05~7Fen+
5*\#|e
h2*7W4S=
zx.~_T
H~oAy2
")<UQm$
Sk[S7x|~ZQ N
DKHXYIEIrhb;8J_y
\Fq?(RNEhq
Fsh6f0&
(5[7 qEO
N :{0ls-
y6+(,}ee%'
'zklbn
!I2~4BuG_?
a|/ Q]{07Z
rdv"h-vHX3@>
*74Ls;
%";wwi7WMEdC
>ka>U=
NvNF%88u|}
(34:lJi)tZ
qk>zJZ
+$S6t@2
`vL$.<jB9l
1SP%."
@2Btt8^
aHq{C,o
\Un'=HUL
TRWC+.
RyP;p%
7w,^4j
d@]FI9
9PuO06\4
:Km"nRN0
u-xKM|;nu.b
xF=x6q[0
y#Pd>\}Y
\-6Exro
4|0|2gf
)%{tH#5@Nx
H\Kh`1x
%~k_Hn:c
^B!z\1O;
f^6S&|EC
gR@0s
1Ql7?
M=7Q`e
xN!+~4a>
>$zfxYV
b/aS).t
h09.I1Mh-?
u|&rO]G
rcNFD`Z/
}ao\)\]Qf
)6oVR:
^U;6t.
/0E\|Cy7V#d!}
t^>(Zs
`j!w\~W_
NY\x?x;
;\KcWK
<: M*K~eMg
_Iw37kd&t
cz*kK2}
;-5n|uj
=GDVWkFN
/\W`Dzpb
g_ZL}
Ji@k%#
yX{g44iL2K*R0TT
^\3a~TK
)|y$_%
&S&Q(Ow!,
Hj3~[Td[mF
2jocj@$l
O*.]Nr
qUyp]|qjOK!G
Z$DSC%3A
XBY'r}>@
mfwUVYb0
0TSf:q
D!!oUK s
RMCP:r.
XW9orr;P
E{zAe[
ULAk(~*"@mW
Ifj3}K&ft
Ol#eg4T(h
=1dNI^FL}{
,?Zjr76Yg
]$U4d,
$CIT[?
>`6Sb)
VgCSV K
ScXL=Tx2&O"7+3Q1W
`h"0Q+
pu?NmdBO
2V-qn?z4
`z[rv'l=j
}e+W!65D
nZ:Q)oZ
Q%}"!
(;!omr
B*SKZ;
f3tD3kwb!x
,E]q!]?
MAB8>Z
c+..Or1tK9
gCH@>l_
@w4n+:x;#E
)VT`7W-Zs$_V
)5.rFUTf-a^%d7
i1x{Q0
c9\+]S-C#
Ec"1$;
R!]b9^\\=j
+wW1OLU]s]4Q9
saK3<;;
FvWg/TR
j^~S+A/']I
2P-wf#
Ai,okE+,
ELdp^sLH
?x"87y
{99y)r
qife1{eR
<8Mv$}hx7k>
j<:@O,a'Kxr
2.b(F14behF
Yz)AS*J
,)gR\LU?y
oyhYKaE
&_W~P(h
akUjY+
0GCFTCZj3%)P+
LJ&Gk)eAk;
wG%}ahyKC~IFm
~q5wj}\5A
j:ke5x
eP)s "
ScZX?i3+[
evsOW;+GC
N9kYgw*${-7Xb
JGr{M74[
,5Jr$Q"bM
@Ij!cfJ+'
na-s%-
0f:!vP
.GDU[O3^w@^
(^1kl)
,XDNv5.E%`j-1yA
68[g>G
> )A=9S-,|V;A
q<0'}M|JR
Uo#q>N
Y^>k"j
3JK+$n_DQ36ausZ\
3^}Shy[h"?`
sZ[M^^&!
}m3nWU
#&;0"4
L~NuFI(KMU&c*cDp
R!fiHU$D
r:@RPj
qjBl}%$z
+-(<!Z
2+}l:FmGt|i
YB!o$;Z|${
&2uX#*'V+
_S\{e(naqh>^vK
XZ~jkIl
MY]$Z86r
y]"c 2a}
V{,j6I]5-
"BxZ4~
moD<!j
HB\Cnuscz
;y?[<I
mNTB+c
dgMdZ/DzgAv
*(ep~vH[,
be=QSZ
%n(c;.:
s+,px(
^Om9M[j'(
TQbA99
4'4ZD>
CzbHIz
{3rURrlr
B3mqN<
*\3z?-q^f
L5Q-;r
nX:&L
BU3"=A4LJ
&>5>B%3
KM""m-tf\0
T3~<cGP
')m%i`RI
s=\10k
@lSs*#=2
Ai^<~u9Ue^6
]-!1&\
- mSr"U
9\hu-J*&k1YW
0h|m@6R
?<\<q);MgZ,_2wn
4Mr{ +
HB!uQ{A=q^
ui-5[`Z
l1=j(1ee6mE
:*$_G?
9M6<R==
&NoC/#
yXeE#>n
{dbM{RpMO
%KoHF-
hLyaU~Q*g
.,DUk#v
Iq=d}Kz@No
k\|8UkKP
-&}R,e
OF Cvo'/\tW_
nUj~TV
qy9M=#
1YI)W*
%2 C;i
.y)XD5]yiC Q[]
>6tG"q]-4{LRZ3|`
(H"ZuE!
|OT"w.
@^Xt!q?
73spM6T)}_
"O23|~:'(_q=r|+f5eo
CBbBM>c/
hWX#G{
UPK"q~vX
|9Bp0,
8#!rh/qXq+
oL@3C$
h^ Hh7(u(jyP
1U~|^%|
/9boqA
.^O6=Ce8
G-622Gzk_i
1cxq8V
M j0p]P7
D&mivC
?3Bh=pD
Rer~;&
F` >7fr&
p`cS$g
r9GW b
UC#AoWSJ~
&g+_F>JFR(2k&m"
vg;{S+-
h9~mnH
=4a8{srp<y
,fjiMD
m~}!>J
xi<X<B^%c
Gz,2Ia
o~m5*a
5\[MKF
P*~R*m3
{D0>@S'
&N{vkNh
xy/o!y^
:dRX1 1P
js_J4G
4J?f_.z
:$7oeGW]
#zgBYf]
S"2xld
F8D4"Bj2RB>4tk
$Yf&7K#h-*gNGZ5
xUfk1%
rS\KQIfrk~^UI
AtB2Bj'P:5Y
,w+|q>?_
^gd~w:Y
"z'#GA
tj 'AQ
Cveb-v'--+"~7^-*
F.CUef
|:wj.#1
=a2`zw
=qNf[Q"(
_Q2JE$Xs
\:#wBdH9)Sx;j
ut>vq]
c,psl
OV,]%[+I
S_<*9p#w`:
JZS%{"TZTv|6uRv4
i9J"QX12
vC-iO3>Q~=*>
(G2hINvD6]p6&MZG]F]q\J
mtV+&;
(0{vA%#/
B#AP{vsh+
~$]PSCwT
UwX:q=Y7[
I:^]vg*avH
`|@-/4'
2l"@?E
@j)EIPP
~J>#Q9 'e$nVip!x3FO:D"&]
g5Pya:*ff
1osqK=HH
mqc^#
}bdTA[Gc65P>WQ
~^5U775Z7<CXa]t
O$nN$7
C(t~ay9
oV:&7]
v"("*I*HZ:
LT[jo
Sk4>Fc,
g_K>!HeI'
q*mhPWl
q,-(HgY
+9g_sH
Hm*&-:|E]HIY)zC-X5o
bNP"WLUIH
4py*o
nU8\G2a
csNh^O
Xe50O]hOxZ6/Q
xZo@vyE)
D)XK]5~TR
Mf0M@j;
Mmgh>yKB=hef
Tj6KgV"Mm
B5NE)2
Li{ttD1MiTSj^
C"@;NT
k#-g($H
`_b)(luE
T`N0Q(
pH.vdis
OpJMGki
jvG)v>
ye(sYP?y
k}Q"<;3F
@ `QQ,kC
eiix`*4QE<PGZ5D6XbQR
\M8j8QI
?Fle7<"k#
[^(RA[
f&3xeU
c2=@bG
Wuv.Y0
MK?%e=(
=w[0mR]cN'&$d2Zo=5fC&
Z0P~tY
bgFq<7+
VSKJc\Z
M.:k!!N
O/)ccG:
Zmro8Oh#$y#O
aQ(i)TM
[]-WyW
NRAA-8J
re8/u.h|DL
b{VUozM
5FlU3Yj
x0#-eZbk
!~t+4)
)rlWS;=
nH7(J!`y#/*d3TO7^V
8W4p<:R!u{HbK!M
laR\JL
qKbile9M
]Z>B#*
u~i\pz]
$30/Qof4
z]Z}E*P
S#V_`uQW
@)Rc&:?Z$
hS];xZRT
;VTNzE^l89
JXB.+!
haR:#Jy:M Xy
3,MA%i
S+w!xpA
2i^W7#5VB$5%[K
v(:nLi*
m'J_F!,=
*1V#xICU|^
,cTKG1
y\+]+[c@
gtg &T
Q[_o4TM
:>::Bg6aPL^Ae
ELK>E#R
~s\g]SD
X/'>X%s
J\u%GJ\QK
j4uMNz]"
IAM8YGD
D^R<3(5bJq
iTA0jK
!)<3/U&
sG;(&/zE
J%iGo]^
T%.#mow-
5#W`4Fu*D;9'
G-|##/N
cM\^JZ<?iW7
a!}%,";
@(Im`9zw
z-8K3XCv
txt`'ZK!:!
z?F1D{
lzg>8jBJ5!G
(97+>u1
5.ne|eg&
y`X`UGy
xg$}E$.
AJB'=
e<du,$_
OWr Ow
fu74m.qJB9$Q
QNmz9-CmWqM'gyxm
aFl0P3
bwW/__y)pK~>Y9E
{OX2X
c4ZtEa)VXz
[8sh0j
" !$GZ*Y
xU,LB~z4N
T:D]f i
^.hD556
JZI x>
qH8>)uwY
jY{2TapC'w
wU1Rjo1R
+f]JlJ
GWki}B-
47"T*Y6F41(G#uk
(;~o3\
lyK["h9
7FuZ:e
<8c'.dnF9=z
P3DC8PO(X&D
tN_$skL
b,!(Sa8j
y&`&f\K
O:\J[-'=
2bPGmeX
RlBA(*LV
0/i^=?>L\(
)!Sa/ZU2T?cV
W{Kf`Bkf%ev
att` b^
[3h$qV
S$SB_E]
GtPx&z0F'5
DCW`r?`
v]l:avS^T
y?#6b6>GR
?g[T5Fp(
uraixBJD
1snbI@w\
BvTh=Hs-UuCR_m
a!*hE ?QuJz;Q
5#MZzg$-
j">UO1
7F*;>9-
KxYe^`M@
1vFuD\G
PtQMYXgE@
Z~Nn_L
ig~O+14E
XnpLTf
2ln2Tz6d 9L$-y)g!p
0&OrQ]%
gw,vbK'9a
v;2v:\
8d%Sm
6}ez/JO
AnG"f
xCPtWcim3
>F\D^fv
Rz^/zvVG^
{^rx j7
C`m.jbsT:
X&9@fDx/wD
8{^5]r
-|"ZmT"Po
5m@dkwbG
z['+5&-^
w,9D%%f@
$A8y-6
%gw,`Wx
kz6 5N+O?i
3wz?kH2Bjxs
28y;YEK*h
8cB?OZ
O%|oQq$PI.
p^_a$O
=l/Y9Ca
V)_?CO8)yL4Es]!
*M*1-:^
IYYsCU{
m;zXGj
Bp+wc0vCqe}9h.
E@^;\~IH~6R
k A:l[)S
@n),"N2
ghZH<|%k^tw
m16Mc|)
U;jMV,9
2[61q7Uo7{SH
)Rn)av
N{qGo4
6nk+Q1S
*uJ*IS
UGeM[ucs
)BTbcemWa@
bT#skv
=ay]{Q
$sWwW
vB(RW^8W{
s3e`<|oC'zT
?=,eTo8?
:So1Bq
dKSyMZ
5\(BWh{eq!J:u
l#_8D[
7VA,5=_
x:`#NC
wIHi#Q$^cV*v
SbqL'G
*0yiV}
kt)X}iC^:e
-L=jUCe
#j\9?3/(/|hQ6m
F:yxnv8@)-bB
OY^x8_
wh.AOIo.
8cx~Mm
/n"`#hj5
@$G@HB
z9H=!'h#L2uPu5CD
S%l if
,XmQOV
>bopA[
"'C2c8t]=90|vWUdr5O
X.g({"Ar
:`j@(BAU
H\z$_qw^n
:Md%G\
(ApD<{
'1_Mu)%
zL{inx1<u
S'Stp|L9=~>nR>!0CO#p24
+`"z$Wqy#G\
haYm`D
vX? qG`8cg
D3uW*t`
m8koIC[I
zBb\#'
i+&HPmaX
h!/&w
2Ne}-2YFH7x]RR2r
G)V\J9KVEp
akiht"-.H
t?s/F9)
u!u@!v
A%W2/V
SLX*$:
t-cmXQcX
@d^;bY
-cm.L0l
!qZ]JV
yb^|Xjm
Ry&GRbhlr}~7,HsB8
BRZ*Li;wKRkgT+^e_/G
ZuB)e]
8!>5,3&
gMpy|~(t:0SCPN>
L#g5z9
l6>3
s />W
#'j_,E
cj8hIl
n~nzLL
6ebGC0
!X0:$451
O+cDTn
+%xRIt
AE',pbZo>tBB
A\FaK<n3
"k..O:
kQR$,!
g|$v&'ck|
ry g;8J
}uz6-d4t)nT
KORo5nr$
a>\-pO
q_y8Q{P"e
DzC#T\Eoa
xc(K*TaVK_'c^cJ2P~-)
c&cydk/
p%9~K.rGE
7,4-2z#
0O*v"T
7yGI$Yz
.CA{Jk$z|
0<dENJ
7OLWza
lG,fz[xEJ@c
2#_9~W[
XEj'!Il<
FUzEC397T
dcIgMZ
YZdrl7y
Ooyx0}L
uHJqh]QF
>1g9nL[2
g|$Y:{
MlQEk4j"j(
;b|tFb/|\j
Swm<6ko
4-B8)2
D(GM`p
u_xkV}xj%:<!
6>8{,eaFd
z!'zBg&
[0hJ*v
tLt rF{
b2QeFx
u\j<^iS
&tVtQOu
25.cJZ
MBYlnk
s"4@>g**u?1F$*
9TRH3'
Iq`7q
uG&.^58
+baGgSNQ$W
@9~C"{k
-,T:,0
O^0qU(u
!#"@{0|
V>NJ@5
7u;KZV
;{tn6ZE3n)We>/
^0l{e}U018)u[r2
O(b~% 9
E+;$?82
[?+Hzx$t
$ }L[KN&
|S$hc42yNmq
Mhb>yTU
szZ*)t
T8^y9z`)CV
1`~(y;D=
Pr(5{tn<uT73
~HPJ5<#
b,:zMQ$H
}\\I*i+f
ECx=5A5
t|EkL[X
*u/)Op
z}d;vs
`9.i6g
KS52BCy
M?@Cv><-`lh,=!
K+M1U(
E-$RJ
hB]"13^37Mp#%u/r
Q3mB<eo41
+{%|:6%
@yFg79Dh^=
+*C24uVP\
K26]n%
6~w[?F
TB]hF0
NW+^#/
E3bMIbJD2-g_J
MsU'1T>d%I
z]rTmhj
wvTV7a5qE/
HEiO"Ux!ACh
Abdfvbez<w
N"e}H"
]?@8p_8]>b
](t+?'
V%W.R.f
2vptE%O
aj75Lb,
eTY2aE
osCl5#
FanB1f1xb
bS\Sqla
R!:fy1e?;
|#\PmHl
L9?iK.s?pr
/b"l]RG6[~Q
JfNCAe.J7rv@
W~aqPoK
/a+MYN
H,s?\iOYl
u2mdlA
pHC+G2N
31Fk=!
[h$UMVUE
SkIH{L!
#%rogK
*1]ks<OX
=QT0H;Q%
VuXIiT
n`FE=aW
b531ma
ssaPjn<N(
mUdO
J<=kLO
Oy='KsT
'XIC=Le
lP;:'yK"'oQN@q?G!X{eB
?B/v[<,GK
{yTxti:kI*`*'X
c^b)_F>{
(Nc}sLQ
XjHW%t
0`E>>Pr(Q
K-sGbr03
-Y|u1y?
CeYDaO%6x
rMbWM8
mj]PM
Drm,#}$f
So|oaU
,V~oS:
'/")OHN{o,Gc{N
D^w>|4syE
,vi7UnA
`A8j~~p
OocP%x
uy2R}bM
4znkui
w7VfKYz
hn4q-^?f
=M*+Y`E
7V1M\g;Li
w}LX<j'7
w:,UR>
8#+N~yz
]S&;z=[=
WivvU_
HN;m](
#U52\Ozc
'XcM`@ 4KX77[Cu
cna(& ?hg!"!
=L?W&9s
0{VmE%jX
OVDzZ<+
mj [hw
!H:6~Q7
c~v4T)
*k3M"6"B
QN!GdG/
3-4!ZVM%2g_
=|NR|n
aq6!{_7%mD1WGjR
d#VQH3q90-n =p
Zsjn3=v
S! D8Heu:*k
2Nq2EjdLS+KH
9oR?up*,B
{TV/jnK
Zx8O#`S
w.v=24Y;bbinf
2d~bAN
,})q)Z)(NL
qio4fv:D
B8{u~?r
-alE|MH
=%-,a!N"
6K8J+y
S=TbuN2
>.WG5M4:4
i`!k#+@
rx)kx&
2_w;YB
AVZVwW
9fe0+LZt.X^b
RVRU%_EH;
SjwS7c
^H 6-<
TP./{oPml
XX6zqZB
u{!'!tSVu
7jg+50+Tk2bQC(hDG
:kf)):.~3
_8;n-)r?s
DzCM_G
SiW,/
RZrih9e]
zpQwUO=UEU
--^mJz$7)
I$ $(\%
a"ZZb.
QqHS=k'+"~3}
+WSeoV
B#~MB?+vS
b60R1CD
eqgKLmq(Wp
K?/"'nP'
NI00FH-
@P})DWeK82
B#ts>P
OZQ~I?FM
*t>!,-c%
vZny9D
3>WQ>8h$u
/FDN2"r
VZR8/KAK
R*'1oR
MJ$j=b5O
#(h}7n-
|~R#u{|
(HZl$
N8&z ;
VWWy_
b-Oq|
b5>r!6oEV1
-*sQu?4b
(\?QZ[w\T
;)[CZ$[
c|,H%Tz
iSbM*0`-
W[jKFi
4+c25R1
q`A}\g
T),yfT
U*ypDCc"Q+
S0?_wZUty#
l?ctC&
w/fTmpgB._PrN
#Wp-O
+**gL[
g*o*v}dG
plzHpj\
4{Gkw9{`
#x Ps
7qT];(
nw:ZYkb5X|y
!T3w?4
N:i+EE1;H"~
en*l'#Bvvr
`cevDP;
:)<Le<_^ /i
0^B1v\
9<'6YZ
{Yvk$u
P$gwL7q
QRInlQ`j=
2-zUax
P6Q{,)hG
#_IF@$=.
fA~LF}E
$'-I\?x
#yq=}?
x~ 9w>
NB18s9i2NH
h=2630
liyq5~#
2zqq@0,
&lphXa <
UwAkq5V
vx>!xwbd3+6kl,e00Hy
9FXg o
:eW;MdB)6r3Wl!hBf!5
Z@C}r)@;M6<B74
D6Fn8gy#@#
l<DP>aa+
!nB Kk
]3'lNOM#
n,LjOXO
zepk~=I
lW$)J?t,9x
y_tbjDz}@3bk]
R1[:GB
i5_k$g
"}NUAq
|m;~?5
W,sAe#k4O?;
?XdX7j
I^N5by<#Y
iO3'@,f4#iS
~aZ5EX
)}B/WyGE
7-CT&mtZ+VWBi~\A
CPME|Kl?
EcoeeKBE
gGOyg#e
u[,|:H_4f
Q1CZ@:^O
AB@{9QR\
HF0ce_-
M*7H`VS&
P6Q_vq9yN\B-+Ru
FfgCC2
+P`wh% aIA2/
BdE,kh}
#z&aqh
~T>`(S,KTc
h6{*3a
|KrTF&'r6
D~}&OhQ%I#R
&xD{FL+KRBF0
+11Gk~g>4M3
_XMmTHj
M0$BOdI
1AVNp<
L*8ta,
K#ti,KtU\x<x'>
hn|k:GE4+N18
i/_1:KsPp
vEE(G-A
08iR/ae[as+%jd
smVoeMl
NNuERxsI>M-
%.VWB3:x
?aURf0
Vt+b:)4rO;[
>*c7Y6PEI<
{%0M&~x6Ei6Vvt
xjB?<_
N{laD`(`
Rcl}H=txA~4:Bf
g1xo.G*[
qy 5]|
d/N~
I)hBeE
];TCk25I:o
/NMtFt
9-a#Mw&#
Bb36~L^~'&Z
0<C!~~
cE-&~'16{j
"HK|31El
<ni3M(>|PKg
Kx}\*D
1]?]qP)
|!&.L.
Qx76.g
-*uymDJ
-NRz">
@o?U#RLnQ
-!^(W:KQ
"s?6{i<"((#*
6LU/G-
JhKfr/0w
~-hrrv@J
5UGgu
p3Zzj)G
&9G{|j
XQV"Nv
t'%}kHl
Sgx6(7
!RW&6g
?fL~?CESm
:x/VQSY
}l5YcGJ_9][
0y"I!n8[T^`9wN
4`*154
Z9(YUe
R3]XN(c
3\? 3-sr
,q@lqLl
~[VK<+(
O4O'l&d\
2zZ+$u
(Y.&%:
1_}kK{Lg
!+H}LY4VCtf
aB0O_jJ
>9bMOxH` [
ob*F/c
6T{#z6KFK5
X|ne$z
c3_kR``
UuN6'*|5b
@qrqP\
G(Cx8U}
*3xI>&akb8:qn]
y${Y>c
YW{i\CEbq=
Tsy&nQ8g
PQy,M.o
qzd-C$
>=uz#hi
3y$@ A
]v\PgG
t"H`ya)
~7XQJ-
]QcRW^e
-c.{X(
0lRyL@[v$@ul
H^^-$e$E
Aip*J.
OOCR;>
8ZOmx9f*v&+
CYB'ui
2\+uLT@BVYEt
|mQ}$,"k
1ZufoRk
5!g:<K8
R[OsV5N
e>Rg0}~
$Pc;)WBn0{dq
0"7-'U-WB
h5cbD"<1
(un73{qUJ
:i>OZ*a
mHkty$MC@`~
i^tiCn`\e"5
VdfKnD-
;=XH`]6}0Oop=[
31vS}(np1p4%{1(00,mpCZNiX
<.s-Xv>&
/1~wWw|r
)7A>5>
C P**\u84G>)
_4v_O&
|Afywyv>
sCIk=P
%6m\5C
j!.y,=8
`o:wl>
&@>(HS]
@$|%Q@
4J@ E!;eoN
_P@"uE
~'kC#x=e]OkZ=bHZ!
m$bBnl
tH9vg/
M-K2M@:
'T68f1
u)B`6S43&*
uS(>>,t;5|)
(ilOFEn
I*(/oC'
b=#18miMd
VUB&Q3O`~q
ldW(;8
)G< YsSZ
~sx+iwy"JnM,j8
igiz`![X
y#V[;q
4:~_?Y
IL&%mkp^_I
|d3ri6<4{Cw
=st =D{~
V,h+)
)s]@l~uV]"t)vSS^21
b+<KKO:-F^
2[g%P.
|c-:K5
SS<LDp6
#~!g,6Y
C)(q@jaOxM{
^ck1n?
>aI,_8M
|x6Da?y}k
erv*da5sI
9}Gd28&^PB;
?|,?+L
!Fhot+
Y@_Uw3
RWeGXS7\_
Bz 39-X
/ =2v`]UoB
p~06u<S*9;
>vm<Qvmv5/
s943>A5h}
/t|'A{vh
mP[ikaZb!
1+44%0
*)W8v?#'
E)1)/(8
I?acNOc
fuM>75O3@i%I%)7I"\4
%,gcHY~
4^NqPz
X.E$DGYe
o{76m9[
B/!Y|n2ic
F!^,ITI )SdRKZ
tNR^s{xs[s
@9{Cc\'
BiDjh<G
2 YdZnU>
:&QdkgI
xo."\UfKQ
+@@H3*O
aena;4
fK"kV0J}ZZ93s{
xf8evo
O.+^\h
#w2d7v
0<;|WVX
xU~2aF
QNI ,!
%kU=pkn_
_1Ge2u{
b7)+]-
V5zKbAz,n
E%xiyV
#2x D,
+8~\H14
ikIm;%a
?s.%<pCl1U!&I#9
k[JxC-'/
`R!?])
[;&pxc4>$i
2V'WkS6!FcTap?:
)3./NZd~[
`w&GD/`qwK
,.V"F
BNTy*Z
?337~d
]W=@({-`)'&Cw3
hhI+}]
Vo?0-aumZX
SS)"t=<
aFs <w
v0/<&"/`B4T2W
JW]SzsqzD
WeFz/q@]
X0K7U}
vQ}KD@6fHK
:QBzb=+$
h^:cpA!
VU0=+VP
H!,Sv\
?XyIU;
S,)"A,?w}z2
mN,+9)
j3h7_Z>
_j'("7>"i
622!$3ZW2u
T9#lbcA
K.wK*(
.gq0:5`cI
i&0K{8Fif
H3b&(R:#xwYFc
bqII]kW&8oZ
L;Gt^4^#
sCqZ&MfQ
Id/3l
C|E=;a
';2@<D
2#/[-7J
V9Cw6R
z/Da:@fdX
2Sq?X]J
e*mECF2%@
OY4^gu&,!v9Xc
):b~M
D`]{M'
jKBv[umA.8;
I 6 BN~cT=4_
e$`,]X@
4=O*Pe8
& G"NHGN!
REC.scD
)zbL^}0_
;7/FN|[`0
C'_edl
-Q6?D(
K4E1D9WMZ
~=d.b8%
V AJwfbcYc
GcG_O
k@`{%ra&*:m'
@gbuYl
>`=zJl
# NY}MP
"a(Jrw
~8A6q,Nl
+S!bbqZ^ezp
RgcW/Y
:^j*l86CCq8r
N.^6bC
A-r8 eJ&a>
at47}@
z'IR[j
Gkp%"O`O\
nz.acD
-%;9~h
eZ1eq!I
A+7tzmiA
?@em?V
gd5,bq
GH`#XvHp
g]b,+s&W
w;#*)b
Ep;\3N%v
Cc'SX+8@-
#~c`0Fgr%
>aZs}X
/E&j7*HBl
7N;]K"
lNYK*H
bz%4/JI0
yn{Byj
sz_~5 '
qtxpN:=K >V
aR%,@!&
VvwN#AK
?aH'MBV
Y6/vJJ_
I5e\A_
.i8c^]}
'JI^uG
fC%*BJeNd
y9-@j0_p5;V(
9:>DMa
I->i/e6: QRbJ
PwcC')hMCM.C
[W5[Hm!j
C`I'Q=M
/`6a?Oc.\
nB@Ev;[
/)c>-V
wYuppk
)<"rD'
8/"TF9
~mk3le`
*q&C)qfR
]kD$/Y_:
dN^`dy}
?0ha[[5
}j:f&Lgx
6HIxz/6:`P
WD8,;_
J,>qCj
eCynDKGOP
f6B`"7
KFDoPSS#
fXs:nH
,(j9Or
PT;v0!yG,
M38x*"G
7.kP-{Y*B
#:`bKx
djT],E)`1
zt,}qs\G
I*{QK_hj$Dxwxn
d$D_j~
'$7>p x0ZA<I
?qQw ZH
M?M~+ZEKp
fBs& P_5q|Q,
iP{W$F
.ZCx}
2KM]M;i
;/8r3&Q,]7=l
dOWZP_
0DC%s{(L3;
i)8t18PN(f>$![=q-
iwQW~6
&+:\3^Q
KX(k)q`
yt&rX^
0uy>kI
a vOn$
ikRS ^p~
*X-@#{T
Os[b8
O|sj:*xkt8
]2i3oa[
J?IiHI+
T)Y&tf
Ms?921
;]N Di
MYUms]
//>7!R
pvw_4H+VI|%B./
xY{_:X5Jx
k2G:57
9{w\_r[#7Q4
$8&/V=:P
nIW:FY
f?QBd0u7S
P7}oV&A
3g)|w6
!eJq-z
EFm_oEn;otT
-kL3nEb:
:Pxz#|G1N
)xR6~v*|#.?
v>Qkv1,i}PXmsuto-|g!
XH<kXtA
<QjiTDJJmC +
m)&No]
INn\y"HpJ
0\Qi
#)e~?~>z2cO
Jx>\.I8X<k
.G|!+}
tuDDD]][.\WuJ
ibY0\M#
5DiAH\[
K{Zl=I
!?zD[B>
V,:Ry,/yYf3FGW{8
O5QMRmBkS9&By-s
=/QT!T|
SL6#Wc
d |%]z.2v
8wUuNdT
wG,_l%>
/RqGM-A
6Q,vb
6;BP$q6
s!mp~u<
iEZ]3nz
y.IyUKX
nzF"*B
Zb|4#
"$F/J0B
tk fne6k
_}3fS(
B_D?@O
ab((dR
XHBR"C
P,;r&Y.hA(q=P
rRQDd.
]mYj7
/DJIoy90eAMZ
Q[Ot3}
iWCtI"Or>
D_ET(U
R"/g*Ls
(~;H<&
UO]6=puM
M178T\~
o,:#D5
k|.h_p
^';OncOv
?U>Qhm
*.]$IvXb
p4]\1}
V++9*%vx'e;c
:gc7Z6
ECIa;I%
fbi"X5
~- a&v3*q6f
7,_!l6{D
LXjC2M
Z>D!{`C
7cH5KUuF
<I[UIR
k$U<$U
.<-MfJA6I
Oo;.s>|Wuyw
qAP~'Q
h*u@C;T
ZhEeeK
-KJ|E\&Z
x&o)]*cZ5k
Q=GxE1e
@`bA1aZ
3O}"fL,$h,
1H;`*O
`>Yb;>.$hrT
{V/.g^N}:lO
+zK/w_
p}.l C
6I*+R^&j
4Ov$sMGg
5rbogZsW
S[{Yhs
8qn"4[6I,%
"/F-JK#:G
B!Fq8!
@*RkLv`cdDq]
.?x(yzd>IVV
b>(aMHcY
?g])Xo
^EY/6WmZ[
yy~"pW12fRnr
?g7=UQ!
[<$Mdx
ZeBAN
ES7OHLzDxs
}Wh6MCj
q?V_<;\r5
Gn]lLy|
Cw/bHS[3
^u8]}|I
8hH6Qnswf
oP=4,g-+~S$r=H
?G7+E}+M?
]n~k'Wk
#H"CgcrW
E]4%9ib
9G,TN2g
^o[&RD0
# 7S@I#N7~%`Cdb
I5+N2z
F6Zv*~+
?8~G>]&
%]YJK&
EK,N2kK6S
]I2ZXJ[bu@
R"Q)D{;?M{dTJ];I
;v2A1Ja
J"%1DLQ(J"_B'~
ZHj5:"L)
?|!>yoB_~
w#]t_c]}k<jZ])}_5sqLOFxiUQ|u+
/"9>HU
XX"G^,"c"0
,";D-.S~J,
_`tluq
]h"`E+i6:*a@
X"G^;!k
X<u;Al
Z,-0]G/
P"Uduc
SBDTJ+
tv"-.
X!Yl-.
+v".B_U1W
_pYEw
ONI,+0
IV(d]-VXQ
',UPkf&VN;
2F-+$.kG
0e=fid|F=*kV
1!r7&"
d[ ;6EJ\^x}=f
Y\nVka\s4f
e\s"$2tf=ry
&M2fgk`r<o
|AW Q8PU2J-
R93c|o$_L\(;6
|2`'d4mZ'
}:jj$93Ei
$?v)3R8
+&rv:
$l{was};
Pc$35Nm
p;<jyK
y/4'pT
I}UeNB//{A
>hav7Sf
OLEn[?[
l%/nVX^y3
!10_UN|lU&Ye}#^~KUR
>>7u&mih`V8.
JNi&:nL]Dc&$
q,-Hap
/`~Q"u
k[guOlz)L
Kg)2vy+
"gVF<R!&V88RY}
1Vu2F3 C)&
b7D.9EYf',sy
ETfm0#*w
6)"E'u'^~
rYU#{1
i]OJ3_u
/*)j).j3/Y
cx/\H?e8cIJ9XK,{Tl
"&W_`s
17:{XP
B+039+
qr[*JrSU^Pu
)&%x"nF
&d_E53,H
oC${'N7Nn/8,
7'MfiN`
&: RY:
)qY7L
4G!&fL&I
~rO?<#
)vHbat
3(3*3$33
)CI!;O}+
v"vRP@
~`u$St
$#e=~1(=
{4Nj'dW
}Xgmd[ J
LV'9L&O
NMPG'9{+W'=
>JZOy`W~{
THph1IlgR2
>&HOkO=!
;wp)Qti
^T2vDQ
Cfh,zK
HbCQH:X
;R66 k1t
UC#5==H,
@^s :H;R
CiZ7p*ZU1<E
aBwPd%
h^jSZt
u6c\htFLLvc#%l
Ms)uO`T!
NOefK
Q?=&GO5
`nRWSi}
c$a9.6"J
P,#3q#_*!M`HJ8>De8[2
D)KM_`
.M7wtx,b
xTaOO;t
ZgkNV]'Rj'
qG0&\4k
85t%8B
jHF6bX;+
$2"wN:
_B0xC2
iD3x73JP
DF.Tx*K3
_i8_l
~!pX=0
6${6mGQ
X;OG)40
Qgmd5hrl
$K4R=o
ztk{fg
H}U5?yx[PhS
gwc(Fftz;2
T40(R!{Y'u_@J%
26 ]AOT^#
X=Sb*2i
\D&EdXf[
T{"/DG
$W|^hV=VB+3=$Zw@5OU3r%UNe
P`M6.>5}
+7nE(n
LkB{8GCM6a&
JMEL@W2&Ewd\J
oN<p>&G
BBIQ Zws
W/F}+5
f$@_l"Hc1>7
rHh:U
ql;}_d
E~#rkUK$
)75fafC
Qw<15qq!v
bRZg"N
*->4-A_
<a(bRh
U/?c)b,fU
34beR~dG~,a%
jx$n!G.
XCBJR/
*H"u%jHS++4B
^U<BOW2H?}8Cd%@S0
4K=-vPc1
BhBtLvW
CL+0}
IWJmp#
)`,=f$8P5A
T#]*DSi&|+h-)3tUX
]z\5BFva5
Av5Z-
&{#)qkC*^
<mhdU=eN5[gai:1
ipSo%}\
NIgu!2)[
1>o+E5a
9unG6{
]&~x():
gP}~hU
739AhlUX
7Do:vQ
<;h)*A
X"AN6`e0*;
YE<<C~
/rbz%K
o1m)o(slF(,Lt7B
1YDA{2
,`JHon=-
~MLppL
|SJCgKg<
neSS.ni*$n("
HoPM\t"=7D
%]nwU#c
!8^qz\xK$@?;
;<u`o?J4~N
Y\uu=_
6X==R%$
<He';dp
. y8A9PM
Ps|7<3u
:!GHJzms}
%)89ly
>:^n=3
j%d'kl}agw
53YnQ900d
{.wGgWX
.2~XH?JIyc5
W% 8;28
Y9^m)4
Cd-%p'
8t)5YJ_/PI9NTe
;W,UVt
wZJa:BK
Kyt~MEH\OYk9>U7
U``_>|z
9.j=uok
NIXT?e7/Ke#@5Z
Omk^+zW
ej'Fg'S
#R2yY)M$R
/p4qm9
Vlm>_"
a_0xYbK
}?V|/T\
VU5q>3S)pT
?KfUU+#l6:j:=
W]R8VK-bTV8z
EXo>w(@]n
_WPe)L
ZE8s6.G3i
;_<r?9~`
-m{L="
.a.7g,uRJ
{i@D\!luuA
m|$J)y
6t"!Ps
~`p7@o'
l5_-O@
!%A55>k(5
h,=QOB
Mz5/2Q10?
8dnWs`"w}$j
S\59LN
_mvlmT
Kh{<7WSPht
E55U(E2y
M~~C@F{~
Z=]X.{w
%A4C+Q
;_Si$/T
EwVirtualAlloc
VirtualFree
t.x,<t
kernel32.dll
ExitProcess
user32.dll
MessageBoxA
wsprintfA
LOADER ERROR
The procedure entry point %s could not be located in the dynamic link library %s
The ordinal %u could not be located in the dynamic link library %s
(08@P`p
8\(L(C@;
rDt$h3t$
E@D4l|Mu
1|hDhG8
A;r_^]
YSVW33h
T4$F`u(j
}RL4#HL4$F
D$$W3|$
3V5:@D
D$,8_^]
kernel32.dll
GetProcAddress
GetModuleHandleA
LoadLibraryA
user32.dll
advapi32.dll
oleaut32.dll
advapi32.dll
gdi32.dll
user32.dll
ole32.dll
comctl32.dll
advapi32.dll
wsock32.dll
GetKeyboardType
RegQueryValueExA
VariantChangeTypeEx
ReportEventA
UnrealizeObject
WindowFromPoint
IsEqualGUID
ImageList_SetIconSize
StartServiceCtrlDispatcherA
WSACleanup
Svfff`
pfffffff
fffff`
3Rgvg$I
EkvTGHh~l
2?)v-2|H2
fXs=x5b+DB
SoGgSd03
]Jun/B`
!/[orym1L1.aj_
DVCLAL
PACKAGEINFO
TFORM1
TFORM2
TNMSHOW
MAINICON
C:\Users\IFCVPOW.EXE
QGA.EXE

Process Tree

07b65683af887bf50b40636e5fce11c7bdea5de1ee50ad04bd059db1147e0239.exe, PID: 2284, Parent PID: 692

default registry file network process services synchronisation iexplore office pdf

NNHV.EXE, PID: 2108, Parent PID: 2284

default registry file network process services synchronisation iexplore office pdf

DNS

Name Response Post-Analysis Lookup
dns.msftncsi.com A 131.107.255.255 131.107.255.255
dns.msftncsi.com AAAA fd3e:4f5a:5b81::1 131.107.255.255

TCP

No TCP connections recorded.

UDP

Source Source Port Destination Destination Port
192.168.56.101 53179 224.0.0.252 5355
192.168.56.101 49642 224.0.0.252 5355
192.168.56.101 137 192.168.56.255 137
192.168.56.101 61714 114.114.114.114 53
192.168.56.101 56933 114.114.114.114 53
192.168.56.101 138 192.168.56.255 138

HTTP & HTTPS Requests

No HTTP requests performed.

ICMP traffic

No ICMP traffic performed.

IRC traffic

No IRC requests performed.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

Snort Alerts

No Snort Alerts

Name c6f2cb374a155f2c_bvivo.exe
Filepath C:\Program Files\BVIVO.EXE
Size 209.7KB
Processes 2284 (07b65683af887bf50b40636e5fce11c7bdea5de1ee50ad04bd059db1147e0239.exe)
Type PE32 executable (GUI) Intel 80386, for MS Windows
MD5 45fc86db932c779511e55d0caa617623
SHA1 886d5fbbc20d4abe9c5c4fc42ca1880155b18e81
SHA256 c6f2cb374a155f2c7f0d0159f09f2e9a70c2568d6c1b551ab30bbb767390124c
CRC32 9A763155
ssdeep None
Yara None matched
VirusTotal Search for analysis
Name 1a3faea07823d7e1_jfemm.exe
Filepath C:\Program Files\JFEMM.EXE
Size 209.7KB
Processes 2284 (07b65683af887bf50b40636e5fce11c7bdea5de1ee50ad04bd059db1147e0239.exe)
Type PE32 executable (GUI) Intel 80386, for MS Windows
MD5 1b3108d17b2838eaf8b868d74ddd8196
SHA1 932489dcc60083bbd014ccc0a99274b6788b6bdb
SHA256 1a3faea07823d7e1c441cdb19297396cf723a859ed969df1fa615f351916df69
CRC32 2AD18BA2
ssdeep None
Yara None matched
VirusTotal Search for analysis
Name 3aad85b5807ef3e5_nnhv.exe
Filepath C:\gcoxh\NNHV.EXE
Size 210.0KB
Processes 2284 (07b65683af887bf50b40636e5fce11c7bdea5de1ee50ad04bd059db1147e0239.exe)
Type PE32 executable (GUI) Intel 80386, for MS Windows
MD5 c7ee30cef6d05ba62645d77e832ee582
SHA1 667b61fc2203eb16b8b083125509d1c264ba345e
SHA256 3aad85b5807ef3e5c93d4d92d4912c79f634f386b90f794b3080a4f715c37889
CRC32 0191D1EC
ssdeep None
Yara None matched
VirusTotal Search for analysis
Name 43ec21d6834dd685_qrh.exe
Filepath C:\$Recycle.Bin\QRH.EXE
Size 209.3KB
Processes 2284 (07b65683af887bf50b40636e5fce11c7bdea5de1ee50ad04bd059db1147e0239.exe)
Type PE32 executable (GUI) Intel 80386, for MS Windows
MD5 a985941a164ac53c33726a6d962ae67f
SHA1 82d065efc3f75017f1b69f3cf2e0fb785c77e43d
SHA256 43ec21d6834dd6859245762af3ff5eefe993b169a16e9b8bbe4aab0f09a1ee62
CRC32 E91BD042
ssdeep None
Yara None matched
VirusTotal Search for analysis
Name a2d46a7f38d67c61_cssit.exe
Filepath C:\Program Files\CSSIT.EXE
Size 209.8KB
Processes 2284 (07b65683af887bf50b40636e5fce11c7bdea5de1ee50ad04bd059db1147e0239.exe)
Type PE32 executable (GUI) Intel 80386, for MS Windows
MD5 bf99ef0582f02a4d2786d75bbe9eca1d
SHA1 15060b40a9bbd8144ced9bd63719d62f655e5a23
SHA256 a2d46a7f38d67c61855a6c0d2048ba23db3e6c9e6950c522796c5dba62b2ed91
CRC32 0614B2CF
ssdeep None
Yara None matched
VirusTotal Search for analysis
Name fe06464a3f1bd0ef_uknep.exe
Filepath C:\Program Files\UKNEP.EXE
Size 209.7KB
Processes 2284 (07b65683af887bf50b40636e5fce11c7bdea5de1ee50ad04bd059db1147e0239.exe)
Type PE32 executable (GUI) Intel 80386, for MS Windows
MD5 d2306488927addc4459652f3e173433e
SHA1 8f76aa71d9d681ba487e010e371596817b226166
SHA256 fe06464a3f1bd0ef52439c75793e05f4a506d8692c05a67cc1de092c2151f234
CRC32 833DC425
ssdeep None
Yara None matched
VirusTotal Search for analysis
Name d86242f91151ec53_bwq.exe
Filepath C:\$Recycle.Bin\BWQ.EXE
Size 209.7KB
Processes 2284 (07b65683af887bf50b40636e5fce11c7bdea5de1ee50ad04bd059db1147e0239.exe)
Type PE32 executable (GUI) Intel 80386, for MS Windows
MD5 915706eaae7badb8470233ae3d19e7fd
SHA1 5a208d44771c3cf3a6d03eb42d898eb6726e342e
SHA256 d86242f91151ec537d85f6d0b46b0202a4423f729b2f68323e8b31a24142468a
CRC32 3E5724A8
ssdeep None
Yara None matched
VirusTotal Search for analysis
Name 0ae12607984aed1a_gcmf.exe
Filepath C:\gcoxh\GCMF.EXE
Size 209.5KB
Processes 2284 (07b65683af887bf50b40636e5fce11c7bdea5de1ee50ad04bd059db1147e0239.exe)
Type PE32 executable (GUI) Intel 80386, for MS Windows
MD5 665c8581d54193d9e1b8448cb39208e7
SHA1 533eff3071fb6373fb0b9fb837fefbdea35fcf77
SHA256 0ae12607984aed1a03391bee4d38c0a90b1f3ddc5c0e35385e3544abb15281d3
CRC32 A0B0AEA3
ssdeep None
Yara None matched
VirusTotal Search for analysis
Name cebacdc897d36d05_filedebug
Filepath C:\filedebug
Size 228.0B
Processes 2284 (07b65683af887bf50b40636e5fce11c7bdea5de1ee50ad04bd059db1147e0239.exe)
Type ASCII text, with CRLF line terminators
MD5 4dd16f6a4ec6018d7b66ecd4d2e2436d
SHA1 32d2fdb262893e49eeb3cc09421e8ae2caf95418
SHA256 cebacdc897d36d05606afc9eef57f9abafff795bdd1417d40b6c8de15f59b3f5
CRC32 9A59B85B
ssdeep None
Yara None matched
VirusTotal Search for analysis
Name af5095f30bc6b599_qqzcl.exe
Filepath C:\Program Files\QQZCL.EXE
Size 209.8KB
Processes 2284 (07b65683af887bf50b40636e5fce11c7bdea5de1ee50ad04bd059db1147e0239.exe)
Type PE32 executable (GUI) Intel 80386, for MS Windows
MD5 ddc14698677cc1e25449cc54b12821a5
SHA1 b0d9fa3c9d9492ef8800ddb1d80b62c769d09c6c
SHA256 af5095f30bc6b5990ba7ce1d7c487b2ec188788ae13dd191c9565493f28ef983
CRC32 5769A22C
ssdeep None
Yara None matched
VirusTotal Search for analysis
Sorry! No dropped buffers.